<?xml version="1.0" encoding="UTF-8"?>
	<oval_definitions
		xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd"
		xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5"
		xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
		xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5"
		xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
	  <generator>
	      <oval:product_name>Marcus Updateinfo to OVAL Converter</oval:product_name>
	      <oval:schema_version>5.5</oval:schema_version>
	      <oval:timestamp>2023-09-28T05:48:46</oval:timestamp>
	  </generator>
<definitions>
<definition id="oval:org.opensuse.security:def:136913" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1129271" ref_url="https://bugzilla.suse.com/1129271" source="BUGZILLA"/>
		<reference ref_id="1129272" ref_url="https://bugzilla.suse.com/1129272" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5418" ref_url="https://www.suse.com/security/cve/CVE-2019-5418/" source="CVE"/>
		<reference ref_id="CVE-2019-5419" ref_url="https://www.suse.com/security/cve/CVE-2019-5419/" source="CVE"/>
		<description>
This update for rubygem-actionpack-5_1 fixes the following issues:

Security issues fixed: 

- CVE-2019-5418: Fixed a file content disclosure vulnerability in Action View which
  could be exploited via specially crafted accept headers in combination with calls
  to render file (bsc#1129272).
- CVE-2019-5419: Fixed a resource exhaustion issue in Action View which could make
  the server unable to process requests (bsc#1129271).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-29"/>
	<updated date="2019-04-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1129271">SUSE bug 1129271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129272">SUSE bug 1129272</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5418/">CVE-2019-5418</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5419/">CVE-2019-5419</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789649" comment="ruby2.5-rubygem-actionpack-5_1-5.1.4-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136914" version="1" class="patch">
	<metadata>
		<title> (Low)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1117632" ref_url="https://bugzilla.suse.com/1117632" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16476" ref_url="https://www.suse.com/security/cve/CVE-2018-16476/" source="CVE"/>
		<description>
This update for rubygem-activejob-5_1 fixes the following issues:

Security issue fixed:

- CVE-2018-16476: Fixed broken access control vulnerability (bsc#1117632).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-06"/>
	<updated date="2018-12-06"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1117632">SUSE bug 1117632</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16476/">CVE-2018-16476</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782329" comment="ruby2.5-rubygem-activejob-5_1-5.1.4-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136915" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1113969" ref_url="https://bugzilla.suse.com/1113969" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16468" ref_url="https://www.suse.com/security/cve/CVE-2018-16468/" source="CVE"/>
		<description>
This update for rubygem-loofah fixes the following issues:

Security issue fixed:

- CVE-2018-16468: Fixed XXS by removing the svg animate attribute `from` from the allowlist (bsc#1113969).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-11-27"/>
	<updated date="2018-11-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1113969">SUSE bug 1113969</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16468/">CVE-2018-16468</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782330" comment="ruby2.5-rubygem-loofah-2.2.2-4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136916" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1098369" ref_url="https://bugzilla.suse.com/1098369" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-3760" ref_url="https://www.suse.com/security/cve/CVE-2018-3760/" source="CVE"/>
		<description>
This update for rubygem-sprockets fixes the following issues:

The following security vulnerability was addressed:

- CVE-2018-3760: Fixed a path traversal issue in sprockets/server.rb:forbidden_request?(), which allowed remote attackers to read arbitrary files (bsc#1098369)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-19"/>
	<updated date="2018-07-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1098369">SUSE bug 1098369</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3760/">CVE-2018-3760</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782333" comment="ruby2.5-rubygem-sprockets-3.7.2-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136917" version="1" class="patch">
	<metadata>
		<title>amavisd-new-2.11.1-6.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1123389" ref_url="https://bugzilla.suse.com/1123389" source="BUGZILLA"/>
		<reference ref_id="987887" ref_url="https://bugzilla.suse.com/987887" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-1238" ref_url="https://www.suse.com/security/cve/CVE-2016-1238/" source="CVE"/>
		<description>
This update for amavisd-new fixes the following issues:

wmavisd-new was updated to version 2.11.1 (bsc#1123389):

* removed a trailing dot element from @INC, as a workaround for a perl
  vulnerability CVE-2016-1238 (bsc#987887)
* amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
  for a message 'PID &lt;pid&gt; went away', and removed redundant newlines
  from some log messages
* safe_decode() and safe_decode_utf8(): avoid warning messages
  'Use of uninitialized value in subroutine entry'
  in Encode::MIME::Header when the $check argument is undefined
* @sa_userconf_maps has been extended to allow loading of per-recipient
  (or per-policy bank, or global) SpamAssassin configuration set from
  LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
  'ldap:' will load SpamAssassin configuration set using the
  load_scoreonly_ldap() method;  a patch by Atanas Karashenski
* add some Sanesecurity.Foxhole false positives to the default
  list @virus_name_to_spam_score_maps
* updated some comments

Update amavis-milter to version 2.6.1:

* Fixed bug when creating amavisd-new policy bank names
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-27"/>
	<updated date="2019-02-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1123389">SUSE bug 1123389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987887">SUSE bug 987887</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1238/">CVE-2016-1238</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782334" comment="amavisd-new-2.11.1-6.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782335" comment="amavisd-new-docs-2.11.1-6.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136918" version="1" class="patch">
	<metadata>
		<title>apache-commons-httpclient-3.1-2.46 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-5783" ref_url="https://www.suse.com/security/cve/CVE-2012-5783/" source="CVE"/>
		<description>
These are all security issues fixed in the apache-commons-httpclient-3.1-2.46 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2012-5783/">CVE-2012-5783</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480051" comment="apache-commons-httpclient-3.1-2.46 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136919" version="1" class="patch">
	<metadata>
		<title>apparmor-abstractions-2.12.2-7.17.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-6507" ref_url="https://www.suse.com/security/cve/CVE-2017-6507/" source="CVE"/>
		<description>
These are all security issues fixed in the apparmor-abstractions-2.12.2-7.17.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-6507/">CVE-2017-6507</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480990" comment="apparmor-abstractions-2.12.2-7.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480991" comment="apparmor-docs-2.12.2-7.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480992" comment="apparmor-parser-2.12.2-7.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480993" comment="apparmor-parser-lang-2.12.2-7.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480994" comment="apparmor-profiles-2.12.2-7.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480995" comment="apparmor-utils-2.12.2-7.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480996" comment="apparmor-utils-lang-2.12.2-7.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480997" comment="pam_apparmor-2.12.2-7.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480998" comment="pam_apparmor-32bit-2.12.2-7.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480999" comment="perl-apparmor-2.12.2-7.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481000" comment="python3-apparmor-2.12.2-7.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136920" version="1" class="patch">
	<metadata>
		<title>apr-devel-1.6.3-1.3 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-2412" ref_url="https://www.suse.com/security/cve/CVE-2009-2412/" source="CVE"/>
		<reference ref_id="CVE-2011-0419" ref_url="https://www.suse.com/security/cve/CVE-2011-0419/" source="CVE"/>
		<reference ref_id="CVE-2011-1928" ref_url="https://www.suse.com/security/cve/CVE-2011-1928/" source="CVE"/>
		<description>
These are all security issues fixed in the apr-devel-1.6.3-1.3 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-2412/">CVE-2009-2412</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0419/">CVE-2011-0419</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1928/">CVE-2011-1928</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480063" comment="apr-devel-1.6.3-1.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480064" comment="libapr1-1.6.3-1.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136921" version="1" class="patch">
	<metadata>
		<title>apr-util-devel-1.6.1-4.3.8 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-0023" ref_url="https://www.suse.com/security/cve/CVE-2009-0023/" source="CVE"/>
		<reference ref_id="CVE-2009-2412" ref_url="https://www.suse.com/security/cve/CVE-2009-2412/" source="CVE"/>
		<reference ref_id="CVE-2009-3560" ref_url="https://www.suse.com/security/cve/CVE-2009-3560/" source="CVE"/>
		<reference ref_id="CVE-2009-3720" ref_url="https://www.suse.com/security/cve/CVE-2009-3720/" source="CVE"/>
		<reference ref_id="CVE-2010-1623" ref_url="https://www.suse.com/security/cve/CVE-2010-1623/" source="CVE"/>
		<reference ref_id="CVE-2017-12618" ref_url="https://www.suse.com/security/cve/CVE-2017-12618/" source="CVE"/>
		<description>
These are all security issues fixed in the apr-util-devel-1.6.1-4.3.8 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0023/">CVE-2009-0023</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-2412/">CVE-2009-2412</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3560/">CVE-2009-3560</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3720/">CVE-2009-3720</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1623/">CVE-2010-1623</cve>
	<cve impact="low" cvss3="2.3/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12618/">CVE-2017-12618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481001" comment="apr-util-devel-1.6.1-4.3.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481002" comment="libapr-util1-1.6.1-4.3.8 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136922" version="1" class="patch">
	<metadata>
		<title>audit-devel-2.8.1-3.30 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-5186" ref_url="https://www.suse.com/security/cve/CVE-2015-5186/" source="CVE"/>
		<description>
These are all security issues fixed in the audit-devel-2.8.1-3.30 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5186/">CVE-2015-5186</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480067" comment="audit-devel-2.8.1-3.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480068" comment="libaudit1-2.8.1-3.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480069" comment="libaudit1-32bit-2.8.1-3.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480070" comment="libauparse0-2.8.1-3.30 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136923" version="1" class="patch">
	<metadata>
		<title>augeas-1.10.1-1.11 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-0786" ref_url="https://www.suse.com/security/cve/CVE-2012-0786/" source="CVE"/>
		<reference ref_id="CVE-2014-8119" ref_url="https://www.suse.com/security/cve/CVE-2014-8119/" source="CVE"/>
		<reference ref_id="CVE-2017-7555" ref_url="https://www.suse.com/security/cve/CVE-2017-7555/" source="CVE"/>
		<description>
These are all security issues fixed in the augeas-1.10.1-1.11 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-0786/">CVE-2012-0786</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8119/">CVE-2014-8119</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7555/">CVE-2017-7555</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480071" comment="augeas-1.10.1-1.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480072" comment="augeas-devel-1.10.1-1.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480073" comment="augeas-lenses-1.10.1-1.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480074" comment="libaugeas0-1.10.1-1.11 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136924" version="1" class="patch">
	<metadata>
		<title>automake-1.15.1-2.145 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-4029" ref_url="https://www.suse.com/security/cve/CVE-2009-4029/" source="CVE"/>
		<description>
These are all security issues fixed in the automake-1.15.1-2.145 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4029/">CVE-2009-4029</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480076" comment="automake-1.15.1-2.145 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480077" comment="m4-1.4.18-2.138 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136925" version="1" class="patch">
	<metadata>
		<title>avahi-0.7-1.21 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-1000845" ref_url="https://www.suse.com/security/cve/CVE-2018-1000845/" source="CVE"/>
		<description>
These are all security issues fixed in the avahi-0.7-1.21 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000845/">CVE-2018-1000845</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481004" comment="avahi-0.7-1.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481005" comment="avahi-compat-howl-devel-0.7-1.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481006" comment="avahi-compat-mDNSResponder-devel-0.7-1.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481007" comment="avahi-lang-0.7-1.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481008" comment="avahi-utils-0.7-1.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481009" comment="libavahi-client3-0.7-1.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481010" comment="libavahi-client3-32bit-0.7-1.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481011" comment="libavahi-common3-0.7-1.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481012" comment="libavahi-common3-32bit-0.7-1.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481013" comment="libavahi-core7-0.7-1.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481014" comment="libavahi-devel-0.7-1.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481015" comment="libdns_sd-0.7-1.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481016" comment="libhowl0-0.7-1.21 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136926" version="1" class="patch">
	<metadata>
		<title>axis-1.4-5.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1103658" ref_url="https://bugzilla.suse.com/1103658" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-8032" ref_url="https://www.suse.com/security/cve/CVE-2018-8032/" source="CVE"/>
		<description>
This update for axis fixes the following security issue:

- CVE-2018-8032: Prevent cross-site scripting (XSS) attack in the default
  servlet/services (bsc#1103658).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1103658">SUSE bug 1103658</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-8032/">CVE-2018-8032</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489652" comment="axis-1.4-5.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136927" version="1" class="patch">
	<metadata>
		<title>bind-devel-9.11.2-12.8.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-0696" ref_url="https://www.suse.com/security/cve/CVE-2009-0696/" source="CVE"/>
		<reference ref_id="CVE-2009-4022" ref_url="https://www.suse.com/security/cve/CVE-2009-4022/" source="CVE"/>
		<reference ref_id="CVE-2010-3613" ref_url="https://www.suse.com/security/cve/CVE-2010-3613/" source="CVE"/>
		<reference ref_id="CVE-2010-3614" ref_url="https://www.suse.com/security/cve/CVE-2010-3614/" source="CVE"/>
		<reference ref_id="CVE-2010-3615" ref_url="https://www.suse.com/security/cve/CVE-2010-3615/" source="CVE"/>
		<reference ref_id="CVE-2011-0414" ref_url="https://www.suse.com/security/cve/CVE-2011-0414/" source="CVE"/>
		<reference ref_id="CVE-2011-1907" ref_url="https://www.suse.com/security/cve/CVE-2011-1907/" source="CVE"/>
		<reference ref_id="CVE-2011-1910" ref_url="https://www.suse.com/security/cve/CVE-2011-1910/" source="CVE"/>
		<reference ref_id="CVE-2011-2464" ref_url="https://www.suse.com/security/cve/CVE-2011-2464/" source="CVE"/>
		<reference ref_id="CVE-2011-4313" ref_url="https://www.suse.com/security/cve/CVE-2011-4313/" source="CVE"/>
		<reference ref_id="CVE-2012-1667" ref_url="https://www.suse.com/security/cve/CVE-2012-1667/" source="CVE"/>
		<reference ref_id="CVE-2012-3817" ref_url="https://www.suse.com/security/cve/CVE-2012-3817/" source="CVE"/>
		<reference ref_id="CVE-2012-3868" ref_url="https://www.suse.com/security/cve/CVE-2012-3868/" source="CVE"/>
		<reference ref_id="CVE-2012-4244" ref_url="https://www.suse.com/security/cve/CVE-2012-4244/" source="CVE"/>
		<reference ref_id="CVE-2012-5166" ref_url="https://www.suse.com/security/cve/CVE-2012-5166/" source="CVE"/>
		<reference ref_id="CVE-2012-5688" ref_url="https://www.suse.com/security/cve/CVE-2012-5688/" source="CVE"/>
		<reference ref_id="CVE-2012-5689" ref_url="https://www.suse.com/security/cve/CVE-2012-5689/" source="CVE"/>
		<reference ref_id="CVE-2013-2266" ref_url="https://www.suse.com/security/cve/CVE-2013-2266/" source="CVE"/>
		<reference ref_id="CVE-2013-4854" ref_url="https://www.suse.com/security/cve/CVE-2013-4854/" source="CVE"/>
		<reference ref_id="CVE-2014-0591" ref_url="https://www.suse.com/security/cve/CVE-2014-0591/" source="CVE"/>
		<reference ref_id="CVE-2014-3214" ref_url="https://www.suse.com/security/cve/CVE-2014-3214/" source="CVE"/>
		<reference ref_id="CVE-2014-3859" ref_url="https://www.suse.com/security/cve/CVE-2014-3859/" source="CVE"/>
		<reference ref_id="CVE-2014-8500" ref_url="https://www.suse.com/security/cve/CVE-2014-8500/" source="CVE"/>
		<reference ref_id="CVE-2014-8680" ref_url="https://www.suse.com/security/cve/CVE-2014-8680/" source="CVE"/>
		<reference ref_id="CVE-2015-1349" ref_url="https://www.suse.com/security/cve/CVE-2015-1349/" source="CVE"/>
		<reference ref_id="CVE-2015-4620" ref_url="https://www.suse.com/security/cve/CVE-2015-4620/" source="CVE"/>
		<reference ref_id="CVE-2015-5477" ref_url="https://www.suse.com/security/cve/CVE-2015-5477/" source="CVE"/>
		<reference ref_id="CVE-2015-5722" ref_url="https://www.suse.com/security/cve/CVE-2015-5722/" source="CVE"/>
		<reference ref_id="CVE-2015-5986" ref_url="https://www.suse.com/security/cve/CVE-2015-5986/" source="CVE"/>
		<reference ref_id="CVE-2015-8000" ref_url="https://www.suse.com/security/cve/CVE-2015-8000/" source="CVE"/>
		<reference ref_id="CVE-2015-8461" ref_url="https://www.suse.com/security/cve/CVE-2015-8461/" source="CVE"/>
		<reference ref_id="CVE-2015-8704" ref_url="https://www.suse.com/security/cve/CVE-2015-8704/" source="CVE"/>
		<reference ref_id="CVE-2015-8705" ref_url="https://www.suse.com/security/cve/CVE-2015-8705/" source="CVE"/>
		<reference ref_id="CVE-2016-1285" ref_url="https://www.suse.com/security/cve/CVE-2016-1285/" source="CVE"/>
		<reference ref_id="CVE-2016-1286" ref_url="https://www.suse.com/security/cve/CVE-2016-1286/" source="CVE"/>
		<reference ref_id="CVE-2016-2088" ref_url="https://www.suse.com/security/cve/CVE-2016-2088/" source="CVE"/>
		<reference ref_id="CVE-2016-2775" ref_url="https://www.suse.com/security/cve/CVE-2016-2775/" source="CVE"/>
		<reference ref_id="CVE-2016-2776" ref_url="https://www.suse.com/security/cve/CVE-2016-2776/" source="CVE"/>
		<reference ref_id="CVE-2016-8864" ref_url="https://www.suse.com/security/cve/CVE-2016-8864/" source="CVE"/>
		<reference ref_id="CVE-2016-9131" ref_url="https://www.suse.com/security/cve/CVE-2016-9131/" source="CVE"/>
		<reference ref_id="CVE-2016-9147" ref_url="https://www.suse.com/security/cve/CVE-2016-9147/" source="CVE"/>
		<reference ref_id="CVE-2016-9444" ref_url="https://www.suse.com/security/cve/CVE-2016-9444/" source="CVE"/>
		<reference ref_id="CVE-2016-9778" ref_url="https://www.suse.com/security/cve/CVE-2016-9778/" source="CVE"/>
		<reference ref_id="CVE-2017-3135" ref_url="https://www.suse.com/security/cve/CVE-2017-3135/" source="CVE"/>
		<reference ref_id="CVE-2017-3137" ref_url="https://www.suse.com/security/cve/CVE-2017-3137/" source="CVE"/>
		<reference ref_id="CVE-2017-3138" ref_url="https://www.suse.com/security/cve/CVE-2017-3138/" source="CVE"/>
		<reference ref_id="CVE-2017-3140" ref_url="https://www.suse.com/security/cve/CVE-2017-3140/" source="CVE"/>
		<reference ref_id="CVE-2017-3141" ref_url="https://www.suse.com/security/cve/CVE-2017-3141/" source="CVE"/>
		<reference ref_id="CVE-2017-3142" ref_url="https://www.suse.com/security/cve/CVE-2017-3142/" source="CVE"/>
		<reference ref_id="CVE-2017-3143" ref_url="https://www.suse.com/security/cve/CVE-2017-3143/" source="CVE"/>
		<reference ref_id="CVE-2017-3145" ref_url="https://www.suse.com/security/cve/CVE-2017-3145/" source="CVE"/>
		<description>
These are all security issues fixed in the bind-devel-9.11.2-12.8.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0696/">CVE-2009-0696</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-4022/">CVE-2009-4022</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3613/">CVE-2010-3613</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3614/">CVE-2010-3614</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3615/">CVE-2010-3615</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0414/">CVE-2011-0414</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1907/">CVE-2011-1907</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1910/">CVE-2011-1910</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2464/">CVE-2011-2464</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-4313/">CVE-2011-4313</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-1667/">CVE-2012-1667</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3817/">CVE-2012-3817</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3868/">CVE-2012-3868</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-4244/">CVE-2012-4244</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5166/">CVE-2012-5166</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5688/">CVE-2012-5688</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5689/">CVE-2012-5689</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2266/">CVE-2013-2266</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4854/">CVE-2013-4854</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0591/">CVE-2014-0591</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3214/">CVE-2014-3214</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3859/">CVE-2014-3859</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8500/">CVE-2014-8500</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8680/">CVE-2014-8680</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1349/">CVE-2015-1349</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-4620/">CVE-2015-4620</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5477/">CVE-2015-5477</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5722/">CVE-2015-5722</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5986/">CVE-2015-5986</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8000/">CVE-2015-8000</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8461/">CVE-2015-8461</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8704/">CVE-2015-8704</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8705/">CVE-2015-8705</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1285/">CVE-2016-1285</cve>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1286/">CVE-2016-1286</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2088/">CVE-2016-2088</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2775/">CVE-2016-2775</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2776/">CVE-2016-2776</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8864/">CVE-2016-8864</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9131/">CVE-2016-9131</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9147/">CVE-2016-9147</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9444/">CVE-2016-9444</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9778/">CVE-2016-9778</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3135/">CVE-2017-3135</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3137/">CVE-2017-3137</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3138/">CVE-2017-3138</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-3140/">CVE-2017-3140</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3141/">CVE-2017-3141</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3142/">CVE-2017-3142</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-3143/">CVE-2017-3143</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3145/">CVE-2017-3145</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481025" comment="bind-devel-9.11.2-12.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481026" comment="bind-utils-9.11.2-12.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481027" comment="libbind9-160-9.11.2-12.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481028" comment="libdns169-9.11.2-12.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481029" comment="libirs-devel-9.11.2-12.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481030" comment="libirs160-9.11.2-12.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481031" comment="libisc166-9.11.2-12.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481032" comment="libisccc160-9.11.2-12.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481033" comment="libisccfg160-9.11.2-12.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481034" comment="liblwres160-9.11.2-12.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481035" comment="python3-bind-9.11.2-12.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136928" version="1" class="patch">
	<metadata>
		<title>binutils-2.31-5.31 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-9939" ref_url="https://www.suse.com/security/cve/CVE-2014-9939/" source="CVE"/>
		<reference ref_id="CVE-2017-12448" ref_url="https://www.suse.com/security/cve/CVE-2017-12448/" source="CVE"/>
		<reference ref_id="CVE-2017-12450" ref_url="https://www.suse.com/security/cve/CVE-2017-12450/" source="CVE"/>
		<reference ref_id="CVE-2017-12452" ref_url="https://www.suse.com/security/cve/CVE-2017-12452/" source="CVE"/>
		<reference ref_id="CVE-2017-12453" ref_url="https://www.suse.com/security/cve/CVE-2017-12453/" source="CVE"/>
		<reference ref_id="CVE-2017-12454" ref_url="https://www.suse.com/security/cve/CVE-2017-12454/" source="CVE"/>
		<reference ref_id="CVE-2017-12456" ref_url="https://www.suse.com/security/cve/CVE-2017-12456/" source="CVE"/>
		<reference ref_id="CVE-2017-12799" ref_url="https://www.suse.com/security/cve/CVE-2017-12799/" source="CVE"/>
		<reference ref_id="CVE-2017-13757" ref_url="https://www.suse.com/security/cve/CVE-2017-13757/" source="CVE"/>
		<reference ref_id="CVE-2017-14128" ref_url="https://www.suse.com/security/cve/CVE-2017-14128/" source="CVE"/>
		<reference ref_id="CVE-2017-14129" ref_url="https://www.suse.com/security/cve/CVE-2017-14129/" source="CVE"/>
		<reference ref_id="CVE-2017-14130" ref_url="https://www.suse.com/security/cve/CVE-2017-14130/" source="CVE"/>
		<reference ref_id="CVE-2017-14333" ref_url="https://www.suse.com/security/cve/CVE-2017-14333/" source="CVE"/>
		<reference ref_id="CVE-2017-14529" ref_url="https://www.suse.com/security/cve/CVE-2017-14529/" source="CVE"/>
		<reference ref_id="CVE-2017-14729" ref_url="https://www.suse.com/security/cve/CVE-2017-14729/" source="CVE"/>
		<reference ref_id="CVE-2017-14745" ref_url="https://www.suse.com/security/cve/CVE-2017-14745/" source="CVE"/>
		<reference ref_id="CVE-2017-14974" ref_url="https://www.suse.com/security/cve/CVE-2017-14974/" source="CVE"/>
		<reference ref_id="CVE-2017-15938" ref_url="https://www.suse.com/security/cve/CVE-2017-15938/" source="CVE"/>
		<reference ref_id="CVE-2017-15939" ref_url="https://www.suse.com/security/cve/CVE-2017-15939/" source="CVE"/>
		<reference ref_id="CVE-2017-15996" ref_url="https://www.suse.com/security/cve/CVE-2017-15996/" source="CVE"/>
		<reference ref_id="CVE-2017-16826" ref_url="https://www.suse.com/security/cve/CVE-2017-16826/" source="CVE"/>
		<reference ref_id="CVE-2017-16827" ref_url="https://www.suse.com/security/cve/CVE-2017-16827/" source="CVE"/>
		<reference ref_id="CVE-2017-16828" ref_url="https://www.suse.com/security/cve/CVE-2017-16828/" source="CVE"/>
		<reference ref_id="CVE-2017-16829" ref_url="https://www.suse.com/security/cve/CVE-2017-16829/" source="CVE"/>
		<reference ref_id="CVE-2017-16830" ref_url="https://www.suse.com/security/cve/CVE-2017-16830/" source="CVE"/>
		<reference ref_id="CVE-2017-16831" ref_url="https://www.suse.com/security/cve/CVE-2017-16831/" source="CVE"/>
		<reference ref_id="CVE-2017-16832" ref_url="https://www.suse.com/security/cve/CVE-2017-16832/" source="CVE"/>
		<reference ref_id="CVE-2017-6965" ref_url="https://www.suse.com/security/cve/CVE-2017-6965/" source="CVE"/>
		<reference ref_id="CVE-2017-6966" ref_url="https://www.suse.com/security/cve/CVE-2017-6966/" source="CVE"/>
		<reference ref_id="CVE-2017-6969" ref_url="https://www.suse.com/security/cve/CVE-2017-6969/" source="CVE"/>
		<reference ref_id="CVE-2017-7209" ref_url="https://www.suse.com/security/cve/CVE-2017-7209/" source="CVE"/>
		<reference ref_id="CVE-2017-7210" ref_url="https://www.suse.com/security/cve/CVE-2017-7210/" source="CVE"/>
		<reference ref_id="CVE-2017-7223" ref_url="https://www.suse.com/security/cve/CVE-2017-7223/" source="CVE"/>
		<reference ref_id="CVE-2017-7224" ref_url="https://www.suse.com/security/cve/CVE-2017-7224/" source="CVE"/>
		<reference ref_id="CVE-2017-7225" ref_url="https://www.suse.com/security/cve/CVE-2017-7225/" source="CVE"/>
		<reference ref_id="CVE-2017-7226" ref_url="https://www.suse.com/security/cve/CVE-2017-7226/" source="CVE"/>
		<reference ref_id="CVE-2017-7299" ref_url="https://www.suse.com/security/cve/CVE-2017-7299/" source="CVE"/>
		<reference ref_id="CVE-2017-7300" ref_url="https://www.suse.com/security/cve/CVE-2017-7300/" source="CVE"/>
		<reference ref_id="CVE-2017-7301" ref_url="https://www.suse.com/security/cve/CVE-2017-7301/" source="CVE"/>
		<reference ref_id="CVE-2017-7302" ref_url="https://www.suse.com/security/cve/CVE-2017-7302/" source="CVE"/>
		<reference ref_id="CVE-2017-7303" ref_url="https://www.suse.com/security/cve/CVE-2017-7303/" source="CVE"/>
		<reference ref_id="CVE-2017-7304" ref_url="https://www.suse.com/security/cve/CVE-2017-7304/" source="CVE"/>
		<reference ref_id="CVE-2017-8392" ref_url="https://www.suse.com/security/cve/CVE-2017-8392/" source="CVE"/>
		<reference ref_id="CVE-2017-8393" ref_url="https://www.suse.com/security/cve/CVE-2017-8393/" source="CVE"/>
		<reference ref_id="CVE-2017-8394" ref_url="https://www.suse.com/security/cve/CVE-2017-8394/" source="CVE"/>
		<reference ref_id="CVE-2017-8396" ref_url="https://www.suse.com/security/cve/CVE-2017-8396/" source="CVE"/>
		<reference ref_id="CVE-2017-8421" ref_url="https://www.suse.com/security/cve/CVE-2017-8421/" source="CVE"/>
		<reference ref_id="CVE-2017-9746" ref_url="https://www.suse.com/security/cve/CVE-2017-9746/" source="CVE"/>
		<reference ref_id="CVE-2017-9747" ref_url="https://www.suse.com/security/cve/CVE-2017-9747/" source="CVE"/>
		<reference ref_id="CVE-2017-9748" ref_url="https://www.suse.com/security/cve/CVE-2017-9748/" source="CVE"/>
		<reference ref_id="CVE-2017-9750" ref_url="https://www.suse.com/security/cve/CVE-2017-9750/" source="CVE"/>
		<reference ref_id="CVE-2017-9755" ref_url="https://www.suse.com/security/cve/CVE-2017-9755/" source="CVE"/>
		<reference ref_id="CVE-2017-9756" ref_url="https://www.suse.com/security/cve/CVE-2017-9756/" source="CVE"/>
		<reference ref_id="CVE-2018-10372" ref_url="https://www.suse.com/security/cve/CVE-2018-10372/" source="CVE"/>
		<reference ref_id="CVE-2018-10373" ref_url="https://www.suse.com/security/cve/CVE-2018-10373/" source="CVE"/>
		<reference ref_id="CVE-2018-10534" ref_url="https://www.suse.com/security/cve/CVE-2018-10534/" source="CVE"/>
		<reference ref_id="CVE-2018-10535" ref_url="https://www.suse.com/security/cve/CVE-2018-10535/" source="CVE"/>
		<reference ref_id="CVE-2018-6323" ref_url="https://www.suse.com/security/cve/CVE-2018-6323/" source="CVE"/>
		<reference ref_id="CVE-2018-6543" ref_url="https://www.suse.com/security/cve/CVE-2018-6543/" source="CVE"/>
		<reference ref_id="CVE-2018-6759" ref_url="https://www.suse.com/security/cve/CVE-2018-6759/" source="CVE"/>
		<reference ref_id="CVE-2018-6872" ref_url="https://www.suse.com/security/cve/CVE-2018-6872/" source="CVE"/>
		<reference ref_id="CVE-2018-7208" ref_url="https://www.suse.com/security/cve/CVE-2018-7208/" source="CVE"/>
		<reference ref_id="CVE-2018-7568" ref_url="https://www.suse.com/security/cve/CVE-2018-7568/" source="CVE"/>
		<reference ref_id="CVE-2018-7569" ref_url="https://www.suse.com/security/cve/CVE-2018-7569/" source="CVE"/>
		<reference ref_id="CVE-2018-7570" ref_url="https://www.suse.com/security/cve/CVE-2018-7570/" source="CVE"/>
		<reference ref_id="CVE-2018-7642" ref_url="https://www.suse.com/security/cve/CVE-2018-7642/" source="CVE"/>
		<reference ref_id="CVE-2018-7643" ref_url="https://www.suse.com/security/cve/CVE-2018-7643/" source="CVE"/>
		<reference ref_id="CVE-2018-8945" ref_url="https://www.suse.com/security/cve/CVE-2018-8945/" source="CVE"/>
		<description>
These are all security issues fixed in the binutils-2.31-5.31 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9939/">CVE-2014-9939</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12448/">CVE-2017-12448</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12450/">CVE-2017-12450</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12452/">CVE-2017-12452</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12453/">CVE-2017-12453</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12454/">CVE-2017-12454</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12456/">CVE-2017-12456</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12799/">CVE-2017-12799</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13757/">CVE-2017-13757</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14128/">CVE-2017-14128</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14129/">CVE-2017-14129</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14130/">CVE-2017-14130</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14333/">CVE-2017-14333</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14529/">CVE-2017-14529</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14729/">CVE-2017-14729</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14745/">CVE-2017-14745</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14974/">CVE-2017-14974</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15938/">CVE-2017-15938</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15939/">CVE-2017-15939</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15996/">CVE-2017-15996</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16826/">CVE-2017-16826</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16827/">CVE-2017-16827</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16828/">CVE-2017-16828</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16829/">CVE-2017-16829</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16830/">CVE-2017-16830</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16831/">CVE-2017-16831</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16832/">CVE-2017-16832</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6965/">CVE-2017-6965</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6966/">CVE-2017-6966</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6969/">CVE-2017-6969</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7209/">CVE-2017-7209</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7210/">CVE-2017-7210</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7223/">CVE-2017-7223</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7224/">CVE-2017-7224</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7225/">CVE-2017-7225</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7226/">CVE-2017-7226</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7299/">CVE-2017-7299</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7300/">CVE-2017-7300</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7301/">CVE-2017-7301</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7302/">CVE-2017-7302</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7303/">CVE-2017-7303</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7304/">CVE-2017-7304</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8392/">CVE-2017-8392</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8393/">CVE-2017-8393</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8394/">CVE-2017-8394</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8396/">CVE-2017-8396</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8421/">CVE-2017-8421</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9746/">CVE-2017-9746</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9747/">CVE-2017-9747</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9748/">CVE-2017-9748</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9750/">CVE-2017-9750</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9755/">CVE-2017-9755</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9756/">CVE-2017-9756</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10372/">CVE-2018-10372</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10373/">CVE-2018-10373</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10534/">CVE-2018-10534</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10535/">CVE-2018-10535</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6323/">CVE-2018-6323</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6543/">CVE-2018-6543</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6759/">CVE-2018-6759</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6872/">CVE-2018-6872</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7208/">CVE-2018-7208</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7568/">CVE-2018-7568</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7569/">CVE-2018-7569</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7570/">CVE-2018-7570</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7642/">CVE-2018-7642</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7643/">CVE-2018-7643</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8945/">CVE-2018-8945</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481036" comment="binutils-2.31-5.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481037" comment="binutils-devel-2.31-5.31 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136929" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1013721" ref_url="https://bugzilla.suse.com/1013721" source="BUGZILLA"/>
		<reference ref_id="1013732" ref_url="https://bugzilla.suse.com/1013732" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-9800" ref_url="https://www.suse.com/security/cve/CVE-2016-9800/" source="CVE"/>
		<reference ref_id="CVE-2016-9801" ref_url="https://www.suse.com/security/cve/CVE-2016-9801/" source="CVE"/>
		<description>
This update for bluez fixes the following issues:

Security issues fixed:

- CVE-2016-9800: Fixed a buffer overflow in pin_code_reply_dump function (bsc#1013721)
- CVE-2016-9801: Fixed a buffer overflow in set_ext_ctrl function (bsc#1013732)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-19"/>
	<updated date="2018-12-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1013721">SUSE bug 1013721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013732">SUSE bug 1013732</bugzilla>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9800/">CVE-2016-9800</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9801/">CVE-2016-9801</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789657" comment="libbluetooth3-5.48-5.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136930" version="1" class="patch">
	<metadata>
		<title>btrfsmaintenance-0.4.2-1.11 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-14722" ref_url="https://www.suse.com/security/cve/CVE-2018-14722/" source="CVE"/>
		<description>
These are all security issues fixed in the btrfsmaintenance-0.4.2-1.11 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14722/">CVE-2018-14722</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481038" comment="btrfsmaintenance-0.4.2-1.11 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136931" version="1" class="patch">
	<metadata>
		<title>bzip2-1.0.6-3.22 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-0405" ref_url="https://www.suse.com/security/cve/CVE-2010-0405/" source="CVE"/>
		<description>
These are all security issues fixed in the bzip2-1.0.6-3.22 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0405/">CVE-2010-0405</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480109" comment="bzip2-1.0.6-3.22 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480110" comment="libbz2-1-1.0.6-3.22 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480111" comment="libbz2-1-32bit-1.0.6-3.22 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480112" comment="libbz2-devel-1.0.6-3.22 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136932" version="1" class="patch">
	<metadata>
		<title>c-ares-devel-1.14.0-1.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-5180" ref_url="https://www.suse.com/security/cve/CVE-2016-5180/" source="CVE"/>
		<reference ref_id="CVE-2017-1000381" ref_url="https://www.suse.com/security/cve/CVE-2017-1000381/" source="CVE"/>
		<description>
These are all security issues fixed in the c-ares-devel-1.14.0-1.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5180/">CVE-2016-5180</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000381/">CVE-2017-1000381</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480113" comment="c-ares-devel-1.14.0-1.17 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480114" comment="libcares2-1.14.0-1.17 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136933" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1049092" ref_url="https://bugzilla.suse.com/1049092" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-9814" ref_url="https://www.suse.com/security/cve/CVE-2017-9814/" source="CVE"/>
		<description>
This update for cairo fixes the following issues:

The following security vulnerability was addressed:

- CVE-2017-9814: Fixed and out-of-bounds read in cairo-truetype-subset.c by
  replacing the malloc implementation with _cairo_malloc and checking the size
  before memory allocation (bsc#1049092)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-03"/>
	<updated date="2018-07-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1049092">SUSE bug 1049092</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9814/">CVE-2017-9814</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789658" comment="cairo-devel-1.15.10-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789659" comment="libcairo-gobject2-1.15.10-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789660" comment="libcairo-script-interpreter2-1.15.10-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789661" comment="libcairo2-1.15.10-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136934" version="1" class="patch">
	<metadata>
		<title>cairo-devel-1.15.10-4.5.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-9082" ref_url="https://www.suse.com/security/cve/CVE-2016-9082/" source="CVE"/>
		<reference ref_id="CVE-2017-7475" ref_url="https://www.suse.com/security/cve/CVE-2017-7475/" source="CVE"/>
		<reference ref_id="CVE-2017-9814" ref_url="https://www.suse.com/security/cve/CVE-2017-9814/" source="CVE"/>
		<description>
These are all security issues fixed in the cairo-devel-1.15.10-4.5.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9082/">CVE-2016-9082</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7475/">CVE-2017-7475</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9814/">CVE-2017-9814</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481039" comment="cairo-devel-1.15.10-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481040" comment="libcairo-gobject2-1.15.10-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481041" comment="libcairo-script-interpreter2-1.15.10-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481042" comment="libcairo2-1.15.10-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136935" version="1" class="patch">
	<metadata>
		<title>ceph-common-14.2.0.300+gacd2f2b9e1-1.12 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-16818" ref_url="https://www.suse.com/security/cve/CVE-2017-16818/" source="CVE"/>
		<reference ref_id="CVE-2018-10861" ref_url="https://www.suse.com/security/cve/CVE-2018-10861/" source="CVE"/>
		<reference ref_id="CVE-2018-1128" ref_url="https://www.suse.com/security/cve/CVE-2018-1128/" source="CVE"/>
		<reference ref_id="CVE-2018-1129" ref_url="https://www.suse.com/security/cve/CVE-2018-1129/" source="CVE"/>
		<description>
These are all security issues fixed in the ceph-common-14.2.0.300+gacd2f2b9e1-1.12 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16818/">CVE-2017-16818</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-10861/">CVE-2018-10861</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2018-1128/">CVE-2018-1128</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1129/">CVE-2018-1129</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481043" comment="ceph-common-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481044" comment="libcephfs-devel-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481045" comment="libcephfs2-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481046" comment="librados-devel-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481047" comment="librados2-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481048" comment="libradospp-devel-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481049" comment="librbd-devel-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481050" comment="librbd1-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481051" comment="librgw-devel-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481052" comment="librgw2-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481053" comment="python3-ceph-argparse-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481054" comment="python3-cephfs-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481055" comment="python3-rados-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481056" comment="python3-rbd-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481057" comment="python3-rgw-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481058" comment="rados-objclass-devel-14.2.0.300+gacd2f2b9e1-1.12 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136936" version="1" class="patch">
	<metadata>
		<title>clamav-0.100.3-3.9.1 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1130721" ref_url="https://bugzilla.suse.com/1130721" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1787" ref_url="https://www.suse.com/security/cve/CVE-2019-1787/" source="CVE"/>
		<reference ref_id="CVE-2019-1788" ref_url="https://www.suse.com/security/cve/CVE-2019-1788/" source="CVE"/>
		<reference ref_id="CVE-2019-1789" ref_url="https://www.suse.com/security/cve/CVE-2019-1789/" source="CVE"/>
		<description>
This update for clamav to version 0.100.3 fixes the following issues:

Security issues fixed (bsc#1130721): 	  

- CVE-2019-1787: Fixed an out-of-bounds heap read condition which may occur
  when scanning PDF documents.   
- CVE-2019-1789: Fixed an out-of-bounds heap read condition which may occur
  when scanning PE files (i.e. Windows EXE and DLL files).
- CVE-2019-1788: Fixed an out-of-bounds heap write condition which may occur
  when scanning OLE2 files such as Microsoft Office 97-2003 documents. 
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-03"/>
	<updated date="2019-04-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1130721">SUSE bug 1130721</bugzilla>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1787/">CVE-2019-1787</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-1788/">CVE-2019-1788</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1789/">CVE-2019-1789</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789662" comment="clamav-0.100.3-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789663" comment="clamav-devel-0.100.3-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789664" comment="libclamav7-0.100.3-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789665" comment="libclammspack0-0.100.3-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136937" version="1" class="patch">
	<metadata>
		<title>conntrack-tools-1.4.4-1.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-6496" ref_url="https://www.suse.com/security/cve/CVE-2015-6496/" source="CVE"/>
		<description>
These are all security issues fixed in the conntrack-tools-1.4.4-1.29 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6496/">CVE-2015-6496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480142" comment="conntrack-tools-1.4.4-1.29 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136938" version="1" class="patch">
	<metadata>
		<title>coreutils-8.29-2.12 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-0221" ref_url="https://www.suse.com/security/cve/CVE-2013-0221/" source="CVE"/>
		<reference ref_id="CVE-2013-0222" ref_url="https://www.suse.com/security/cve/CVE-2013-0222/" source="CVE"/>
		<reference ref_id="CVE-2013-0223" ref_url="https://www.suse.com/security/cve/CVE-2013-0223/" source="CVE"/>
		<reference ref_id="CVE-2015-4041" ref_url="https://www.suse.com/security/cve/CVE-2015-4041/" source="CVE"/>
		<reference ref_id="CVE-2015-4042" ref_url="https://www.suse.com/security/cve/CVE-2015-4042/" source="CVE"/>
		<reference ref_id="CVE-2017-7476" ref_url="https://www.suse.com/security/cve/CVE-2017-7476/" source="CVE"/>
		<description>
These are all security issues fixed in the coreutils-8.29-2.12 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0221/">CVE-2013-0221</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0222/">CVE-2013-0222</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0223/">CVE-2013-0223</cve>
	<cve impact="critical" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-4041/">CVE-2015-4041</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-4042/">CVE-2015-4042</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7476/">CVE-2017-7476</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480143" comment="coreutils-8.29-2.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480144" comment="coreutils-lang-8.29-2.12 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136939" version="1" class="patch">
	<metadata>
		<title>cpio-2.12-1.439 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-0624" ref_url="https://www.suse.com/security/cve/CVE-2010-0624/" source="CVE"/>
		<reference ref_id="CVE-2014-9112" ref_url="https://www.suse.com/security/cve/CVE-2014-9112/" source="CVE"/>
		<reference ref_id="CVE-2016-2037" ref_url="https://www.suse.com/security/cve/CVE-2016-2037/" source="CVE"/>
		<description>
These are all security issues fixed in the cpio-2.12-1.439 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0624/">CVE-2010-0624</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9112/">CVE-2014-9112</cve>
	<cve impact="low" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-2037/">CVE-2016-2037</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480145" comment="cpio-2.12-1.439 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480146" comment="cpio-lang-2.12-1.439 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480147" comment="cpio-mt-2.12-1.439 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136940" version="1" class="patch">
	<metadata>
		<title>cracklib-2.9.6-2.21 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-6318" ref_url="https://www.suse.com/security/cve/CVE-2016-6318/" source="CVE"/>
		<description>
These are all security issues fixed in the cracklib-2.9.6-2.21 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6318/">CVE-2016-6318</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480148" comment="cracklib-2.9.6-2.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480149" comment="cracklib-devel-2.9.6-2.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480150" comment="cracklib-dict-small-2.9.6-2.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480151" comment="libcrack2-2.9.6-2.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480152" comment="libcrack2-32bit-2.9.6-2.21 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136941" version="1" class="patch">
	<metadata>
		<title>cron-4.2-4.45 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2006-2607" ref_url="https://www.suse.com/security/cve/CVE-2006-2607/" source="CVE"/>
		<reference ref_id="CVE-2010-0424" ref_url="https://www.suse.com/security/cve/CVE-2010-0424/" source="CVE"/>
		<description>
These are all security issues fixed in the cron-4.2-4.45 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2006-2607/">CVE-2006-2607</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-0424/">CVE-2010-0424</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480153" comment="cron-4.2-4.45 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480154" comment="cronie-1.5.1-4.45 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136942" version="1" class="patch">
	<metadata>
		<title>cups-filters-1.20.3-1.12 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-6473" ref_url="https://www.suse.com/security/cve/CVE-2013-6473/" source="CVE"/>
		<reference ref_id="CVE-2013-6474" ref_url="https://www.suse.com/security/cve/CVE-2013-6474/" source="CVE"/>
		<reference ref_id="CVE-2013-6475" ref_url="https://www.suse.com/security/cve/CVE-2013-6475/" source="CVE"/>
		<reference ref_id="CVE-2013-6476" ref_url="https://www.suse.com/security/cve/CVE-2013-6476/" source="CVE"/>
		<reference ref_id="CVE-2014-2707" ref_url="https://www.suse.com/security/cve/CVE-2014-2707/" source="CVE"/>
		<reference ref_id="CVE-2014-4336" ref_url="https://www.suse.com/security/cve/CVE-2014-4336/" source="CVE"/>
		<reference ref_id="CVE-2014-4337" ref_url="https://www.suse.com/security/cve/CVE-2014-4337/" source="CVE"/>
		<reference ref_id="CVE-2014-4338" ref_url="https://www.suse.com/security/cve/CVE-2014-4338/" source="CVE"/>
		<reference ref_id="CVE-2015-2265" ref_url="https://www.suse.com/security/cve/CVE-2015-2265/" source="CVE"/>
		<reference ref_id="CVE-2015-3258" ref_url="https://www.suse.com/security/cve/CVE-2015-3258/" source="CVE"/>
		<reference ref_id="CVE-2015-3279" ref_url="https://www.suse.com/security/cve/CVE-2015-3279/" source="CVE"/>
		<reference ref_id="CVE-2015-8327" ref_url="https://www.suse.com/security/cve/CVE-2015-8327/" source="CVE"/>
		<reference ref_id="CVE-2015-8560" ref_url="https://www.suse.com/security/cve/CVE-2015-8560/" source="CVE"/>
		<description>
These are all security issues fixed in the cups-filters-1.20.3-1.12 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6473/">CVE-2013-6473</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6474/">CVE-2013-6474</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6475/">CVE-2013-6475</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6476/">CVE-2013-6476</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-2707/">CVE-2014-2707</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-4336/">CVE-2014-4336</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-4337/">CVE-2014-4337</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-4338/">CVE-2014-4338</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2265/">CVE-2015-2265</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3258/">CVE-2015-3258</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3279/">CVE-2015-3279</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8327/">CVE-2015-8327</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8560/">CVE-2015-8560</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480164" comment="cups-filters-1.20.3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480165" comment="cups-filters-devel-1.20.3-1.12 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136943" version="1" class="patch">
	<metadata>
		<title>curl-7.60.0-3.17.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1086367" ref_url="https://bugzilla.suse.com/1086367" source="BUGZILLA"/>
		<reference ref_id="1106019" ref_url="https://bugzilla.suse.com/1106019" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14618" ref_url="https://www.suse.com/security/cve/CVE-2018-14618/" source="CVE"/>
		<description>
This update for curl fixes the following issues:

This security issue was fixed:

- CVE-2018-14618: Prevent integer overflow in the NTLM authentication code
  (bsc#1106019)

This non-security issue was fixed:

- Use OPENSSL_config instead of CONF_modules_load_file() to avoid crashes due
  to openssl engines conflicts (bsc#1086367)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-09-14"/>
	<updated date="2018-09-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1086367">SUSE bug 1086367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106019">SUSE bug 1106019</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-14618/">CVE-2018-14618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789666" comment="curl-7.60.0-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789667" comment="libcurl-devel-7.60.0-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789668" comment="libcurl4-7.60.0-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489594" comment="libcurl4-32bit-7.60.0-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136944" version="1" class="patch">
	<metadata>
		<title>dbus-1-1.12.2-6.21 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-3636" ref_url="https://www.suse.com/security/cve/CVE-2014-3636/" source="CVE"/>
		<reference ref_id="CVE-2014-3637" ref_url="https://www.suse.com/security/cve/CVE-2014-3637/" source="CVE"/>
		<reference ref_id="CVE-2014-3639" ref_url="https://www.suse.com/security/cve/CVE-2014-3639/" source="CVE"/>
		<reference ref_id="CVE-2014-7824" ref_url="https://www.suse.com/security/cve/CVE-2014-7824/" source="CVE"/>
		<reference ref_id="CVE-2014-8148" ref_url="https://www.suse.com/security/cve/CVE-2014-8148/" source="CVE"/>
		<reference ref_id="CVE-2015-0245" ref_url="https://www.suse.com/security/cve/CVE-2015-0245/" source="CVE"/>
		<description>
These are all security issues fixed in the dbus-1-1.12.2-6.21 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3636/">CVE-2014-3636</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3637/">CVE-2014-3637</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3639/">CVE-2014-3639</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7824/">CVE-2014-7824</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8148/">CVE-2014-8148</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0245/">CVE-2015-0245</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481093" comment="dbus-1-1.12.2-6.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481094" comment="dbus-1-devel-1.12.2-6.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481095" comment="dbus-1-x11-1.12.2-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481096" comment="libdbus-1-3-1.12.2-6.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481097" comment="libdbus-1-3-32bit-1.12.2-6.21 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136945" version="1" class="patch">
	<metadata>
		<title>dbus-1-glib-0.108-1.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-1172" ref_url="https://www.suse.com/security/cve/CVE-2010-1172/" source="CVE"/>
		<reference ref_id="CVE-2013-0292" ref_url="https://www.suse.com/security/cve/CVE-2013-0292/" source="CVE"/>
		<description>
These are all security issues fixed in the dbus-1-glib-0.108-1.29 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1172/">CVE-2010-1172</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0292/">CVE-2013-0292</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480190" comment="dbus-1-glib-0.108-1.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480191" comment="dbus-1-glib-32bit-0.108-1.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480192" comment="dbus-1-glib-devel-0.108-1.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480193" comment="dbus-1-glib-tool-0.108-1.29 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136946" version="1" class="patch">
	<metadata>
		<title>dhcp-4.3.5-4.15 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-1892" ref_url="https://www.suse.com/security/cve/CVE-2009-1892/" source="CVE"/>
		<reference ref_id="CVE-2010-2156" ref_url="https://www.suse.com/security/cve/CVE-2010-2156/" source="CVE"/>
		<reference ref_id="CVE-2010-3611" ref_url="https://www.suse.com/security/cve/CVE-2010-3611/" source="CVE"/>
		<reference ref_id="CVE-2010-3616" ref_url="https://www.suse.com/security/cve/CVE-2010-3616/" source="CVE"/>
		<reference ref_id="CVE-2011-0413" ref_url="https://www.suse.com/security/cve/CVE-2011-0413/" source="CVE"/>
		<reference ref_id="CVE-2011-0997" ref_url="https://www.suse.com/security/cve/CVE-2011-0997/" source="CVE"/>
		<reference ref_id="CVE-2011-2748" ref_url="https://www.suse.com/security/cve/CVE-2011-2748/" source="CVE"/>
		<reference ref_id="CVE-2011-2749" ref_url="https://www.suse.com/security/cve/CVE-2011-2749/" source="CVE"/>
		<reference ref_id="CVE-2011-4539" ref_url="https://www.suse.com/security/cve/CVE-2011-4539/" source="CVE"/>
		<reference ref_id="CVE-2011-4868" ref_url="https://www.suse.com/security/cve/CVE-2011-4868/" source="CVE"/>
		<reference ref_id="CVE-2012-3570" ref_url="https://www.suse.com/security/cve/CVE-2012-3570/" source="CVE"/>
		<reference ref_id="CVE-2012-3571" ref_url="https://www.suse.com/security/cve/CVE-2012-3571/" source="CVE"/>
		<reference ref_id="CVE-2012-3954" ref_url="https://www.suse.com/security/cve/CVE-2012-3954/" source="CVE"/>
		<reference ref_id="CVE-2012-3955" ref_url="https://www.suse.com/security/cve/CVE-2012-3955/" source="CVE"/>
		<reference ref_id="CVE-2013-2266" ref_url="https://www.suse.com/security/cve/CVE-2013-2266/" source="CVE"/>
		<reference ref_id="CVE-2015-8605" ref_url="https://www.suse.com/security/cve/CVE-2015-8605/" source="CVE"/>
		<reference ref_id="CVE-2017-3144" ref_url="https://www.suse.com/security/cve/CVE-2017-3144/" source="CVE"/>
		<reference ref_id="CVE-2018-5732" ref_url="https://www.suse.com/security/cve/CVE-2018-5732/" source="CVE"/>
		<reference ref_id="CVE-2018-5733" ref_url="https://www.suse.com/security/cve/CVE-2018-5733/" source="CVE"/>
		<description>
These are all security issues fixed in the dhcp-4.3.5-4.15 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1892/">CVE-2009-1892</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2156/">CVE-2010-2156</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3611/">CVE-2010-3611</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3616/">CVE-2010-3616</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0413/">CVE-2011-0413</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0997/">CVE-2011-0997</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2748/">CVE-2011-2748</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2749/">CVE-2011-2749</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4539/">CVE-2011-4539</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4868/">CVE-2011-4868</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3570/">CVE-2012-3570</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3571/">CVE-2012-3571</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-3954/">CVE-2012-3954</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3955/">CVE-2012-3955</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2266/">CVE-2013-2266</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8605/">CVE-2015-8605</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-3144/">CVE-2017-3144</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5732/">CVE-2018-5732</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5733/">CVE-2018-5733</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480194" comment="dhcp-4.3.5-4.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480195" comment="dhcp-client-4.3.5-4.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480196" comment="dhcp-devel-4.3.5-4.15 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136947" version="1" class="patch">
	<metadata>
		<title>dnsmasq-2.78-5.28 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-3294" ref_url="https://www.suse.com/security/cve/CVE-2015-3294/" source="CVE"/>
		<reference ref_id="CVE-2015-8899" ref_url="https://www.suse.com/security/cve/CVE-2015-8899/" source="CVE"/>
		<reference ref_id="CVE-2017-14491" ref_url="https://www.suse.com/security/cve/CVE-2017-14491/" source="CVE"/>
		<reference ref_id="CVE-2017-14492" ref_url="https://www.suse.com/security/cve/CVE-2017-14492/" source="CVE"/>
		<reference ref_id="CVE-2017-14493" ref_url="https://www.suse.com/security/cve/CVE-2017-14493/" source="CVE"/>
		<reference ref_id="CVE-2017-14494" ref_url="https://www.suse.com/security/cve/CVE-2017-14494/" source="CVE"/>
		<reference ref_id="CVE-2017-14495" ref_url="https://www.suse.com/security/cve/CVE-2017-14495/" source="CVE"/>
		<reference ref_id="CVE-2017-14496" ref_url="https://www.suse.com/security/cve/CVE-2017-14496/" source="CVE"/>
		<description>
These are all security issues fixed in the dnsmasq-2.78-5.28 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3294/">CVE-2015-3294</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8899/">CVE-2015-8899</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14491/">CVE-2017-14491</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14492/">CVE-2017-14492</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14493/">CVE-2017-14493</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-14494/">CVE-2017-14494</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14495/">CVE-2017-14495</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14496/">CVE-2017-14496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481098" comment="dnsmasq-2.78-5.28 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136948" version="1" class="patch">
	<metadata>
		<title>dstat-0.7.3-2.16 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-3894" ref_url="https://www.suse.com/security/cve/CVE-2009-3894/" source="CVE"/>
		<description>
These are all security issues fixed in the dstat-0.7.3-2.16 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3894/">CVE-2009-3894</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480201" comment="dstat-0.7.3-2.16 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136949" version="1" class="patch">
	<metadata>
		<title>e2fsprogs-1.43.8-4.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1009532" ref_url="https://bugzilla.suse.com/1009532" source="BUGZILLA"/>
		<reference ref_id="1038194" ref_url="https://bugzilla.suse.com/1038194" source="BUGZILLA"/>
		<reference ref_id="915402" ref_url="https://bugzilla.suse.com/915402" source="BUGZILLA"/>
		<reference ref_id="918346" ref_url="https://bugzilla.suse.com/918346" source="BUGZILLA"/>
		<reference ref_id="960273" ref_url="https://bugzilla.suse.com/960273" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-0247" ref_url="https://www.suse.com/security/cve/CVE-2015-0247/" source="CVE"/>
		<reference ref_id="CVE-2015-1572" ref_url="https://www.suse.com/security/cve/CVE-2015-1572/" source="CVE"/>
		<description>
This update for e2fsprogs fixes the following issues:

Security issues fixed:

- CVE-2015-0247: Fixed couple of heap overflows in e2fsprogs (fsck, dumpe2fs, e2image...) (bsc#915402).
- CVE-2015-1572: Fixed potential buffer overflow in closefs() (bsc#918346).

Bug fixes:

- bsc#1038194: generic/405 test fails with /dev/mapper/thin-vol is inconsistent on ext4 file system.
- bsc#1009532: resize2fs hangs when trying to resize a large ext4 file system.
- bsc#960273: xfsprogs does not call %{?regenerate_initrd_post}.
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-19"/>
	<updated date="2018-07-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1009532">SUSE bug 1009532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1038194">SUSE bug 1038194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/915402">SUSE bug 915402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/918346">SUSE bug 918346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/960273">SUSE bug 960273</bugzilla>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2015-0247/">CVE-2015-0247</cve>
	<cve impact="low" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-1572/">CVE-2015-1572</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708384" comment="e2fsprogs-1.43.8-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789669" comment="e2fsprogs-devel-1.43.8-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789670" comment="libcom_err-devel-1.43.8-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789671" comment="libcom_err-devel-static-1.43.8-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708385" comment="libcom_err2-1.43.8-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489406" comment="libcom_err2-32bit-1.43.8-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789672" comment="libext2fs-devel-1.43.8-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789673" comment="libext2fs-devel-static-1.43.8-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708386" comment="libext2fs2-1.43.8-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136950" version="1" class="patch">
	<metadata>
		<title>ecryptfs-utils-111-2.31 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-1831" ref_url="https://www.suse.com/security/cve/CVE-2011-1831/" source="CVE"/>
		<reference ref_id="CVE-2011-1832" ref_url="https://www.suse.com/security/cve/CVE-2011-1832/" source="CVE"/>
		<reference ref_id="CVE-2011-1833" ref_url="https://www.suse.com/security/cve/CVE-2011-1833/" source="CVE"/>
		<reference ref_id="CVE-2011-1834" ref_url="https://www.suse.com/security/cve/CVE-2011-1834/" source="CVE"/>
		<reference ref_id="CVE-2011-1835" ref_url="https://www.suse.com/security/cve/CVE-2011-1835/" source="CVE"/>
		<reference ref_id="CVE-2011-1836" ref_url="https://www.suse.com/security/cve/CVE-2011-1836/" source="CVE"/>
		<reference ref_id="CVE-2011-1837" ref_url="https://www.suse.com/security/cve/CVE-2011-1837/" source="CVE"/>
		<reference ref_id="CVE-2014-9687" ref_url="https://www.suse.com/security/cve/CVE-2014-9687/" source="CVE"/>
		<reference ref_id="CVE-2016-1572" ref_url="https://www.suse.com/security/cve/CVE-2016-1572/" source="CVE"/>
		<description>
These are all security issues fixed in the ecryptfs-utils-111-2.31 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1831/">CVE-2011-1831</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1832/">CVE-2011-1832</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1833/">CVE-2011-1833</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1834/">CVE-2011-1834</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1835/">CVE-2011-1835</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1836/">CVE-2011-1836</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-1837/">CVE-2011-1837</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9687/">CVE-2014-9687</cve>
	<cve impact="moderate" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1572/">CVE-2016-1572</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480202" comment="ecryptfs-utils-111-2.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480203" comment="ecryptfs-utils-devel-111-2.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480204" comment="libecryptfs1-111-2.31 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136951" version="1" class="patch">
	<metadata>
		<title>elfutils-0.168-2.164 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-0172" ref_url="https://www.suse.com/security/cve/CVE-2014-0172/" source="CVE"/>
		<reference ref_id="CVE-2014-9447" ref_url="https://www.suse.com/security/cve/CVE-2014-9447/" source="CVE"/>
		<description>
These are all security issues fixed in the elfutils-0.168-2.164 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0172/">CVE-2014-0172</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9447/">CVE-2014-9447</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480205" comment="elfutils-0.168-2.164 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480206" comment="elfutils-lang-0.168-2.164 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480207" comment="libasm-devel-0.168-2.164 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480208" comment="libasm1-0.168-2.164 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480209" comment="libdw-devel-0.168-2.164 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480210" comment="libdw1-0.168-2.164 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480211" comment="libdw1-32bit-0.168-2.164 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480212" comment="libebl-devel-0.168-2.164 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480213" comment="libebl-plugins-0.168-2.164 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480214" comment="libebl-plugins-32bit-0.168-2.164 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480215" comment="libelf-devel-0.168-2.164 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480216" comment="libelf1-0.168-2.164 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480217" comment="libelf1-32bit-0.168-2.164 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136952" version="1" class="patch">
	<metadata>
		<title>enscript-1.6.6-1.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2008-3863" ref_url="https://www.suse.com/security/cve/CVE-2008-3863/" source="CVE"/>
		<reference ref_id="CVE-2008-4306" ref_url="https://www.suse.com/security/cve/CVE-2008-4306/" source="CVE"/>
		<description>
These are all security issues fixed in the enscript-1.6.6-1.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3863/">CVE-2008-3863</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-4306/">CVE-2008-4306</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480223" comment="enscript-1.6.6-1.17 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136953" version="1" class="patch">
	<metadata>
		<title>expat-2.2.5-1.140 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-2625" ref_url="https://www.suse.com/security/cve/CVE-2009-2625/" source="CVE"/>
		<reference ref_id="CVE-2009-3560" ref_url="https://www.suse.com/security/cve/CVE-2009-3560/" source="CVE"/>
		<reference ref_id="CVE-2009-3720" ref_url="https://www.suse.com/security/cve/CVE-2009-3720/" source="CVE"/>
		<reference ref_id="CVE-2012-0876" ref_url="https://www.suse.com/security/cve/CVE-2012-0876/" source="CVE"/>
		<reference ref_id="CVE-2012-1147" ref_url="https://www.suse.com/security/cve/CVE-2012-1147/" source="CVE"/>
		<reference ref_id="CVE-2012-1148" ref_url="https://www.suse.com/security/cve/CVE-2012-1148/" source="CVE"/>
		<reference ref_id="CVE-2012-6702" ref_url="https://www.suse.com/security/cve/CVE-2012-6702/" source="CVE"/>
		<reference ref_id="CVE-2015-1283" ref_url="https://www.suse.com/security/cve/CVE-2015-1283/" source="CVE"/>
		<reference ref_id="CVE-2016-0718" ref_url="https://www.suse.com/security/cve/CVE-2016-0718/" source="CVE"/>
		<reference ref_id="CVE-2016-4472" ref_url="https://www.suse.com/security/cve/CVE-2016-4472/" source="CVE"/>
		<reference ref_id="CVE-2016-5300" ref_url="https://www.suse.com/security/cve/CVE-2016-5300/" source="CVE"/>
		<reference ref_id="CVE-2016-9063" ref_url="https://www.suse.com/security/cve/CVE-2016-9063/" source="CVE"/>
		<reference ref_id="CVE-2017-9233" ref_url="https://www.suse.com/security/cve/CVE-2017-9233/" source="CVE"/>
		<description>
These are all security issues fixed in the expat-2.2.5-1.140 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2625/">CVE-2009-2625</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3560/">CVE-2009-3560</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3720/">CVE-2009-3720</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-0876/">CVE-2012-0876</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1147/">CVE-2012-1147</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1148/">CVE-2012-1148</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2012-6702/">CVE-2012-6702</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1283/">CVE-2015-1283</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0718/">CVE-2016-0718</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4472/">CVE-2016-4472</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5300/">CVE-2016-5300</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9063/">CVE-2016-9063</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9233/">CVE-2017-9233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480224" comment="expat-2.2.5-1.140 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480225" comment="libexpat-devel-2.2.5-1.140 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480226" comment="libexpat1-2.2.5-1.140 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480227" comment="libexpat1-32bit-2.2.5-1.140 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136954" version="1" class="patch">
	<metadata>
		<title>fetchmail-6.3.26-3.27 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-2666" ref_url="https://www.suse.com/security/cve/CVE-2009-2666/" source="CVE"/>
		<reference ref_id="CVE-2010-1167" ref_url="https://www.suse.com/security/cve/CVE-2010-1167/" source="CVE"/>
		<reference ref_id="CVE-2011-1947" ref_url="https://www.suse.com/security/cve/CVE-2011-1947/" source="CVE"/>
		<reference ref_id="CVE-2011-3389" ref_url="https://www.suse.com/security/cve/CVE-2011-3389/" source="CVE"/>
		<reference ref_id="CVE-2012-3482" ref_url="https://www.suse.com/security/cve/CVE-2012-3482/" source="CVE"/>
		<description>
These are all security issues fixed in the fetchmail-6.3.26-3.27 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2666/">CVE-2009-2666</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1167/">CVE-2010-1167</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1947/">CVE-2011-1947</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-3389/">CVE-2011-3389</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3482/">CVE-2012-3482</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480228" comment="fetchmail-6.3.26-3.27 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136955" version="1" class="patch">
	<metadata>
		<title>file-5.32-7.5.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1096974" ref_url="https://bugzilla.suse.com/1096974" source="BUGZILLA"/>
		<reference ref_id="1096984" ref_url="https://bugzilla.suse.com/1096984" source="BUGZILLA"/>
		<reference ref_id="1126117" ref_url="https://bugzilla.suse.com/1126117" source="BUGZILLA"/>
		<reference ref_id="1126118" ref_url="https://bugzilla.suse.com/1126118" source="BUGZILLA"/>
		<reference ref_id="1126119" ref_url="https://bugzilla.suse.com/1126119" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10360" ref_url="https://www.suse.com/security/cve/CVE-2018-10360/" source="CVE"/>
		<reference ref_id="CVE-2019-8905" ref_url="https://www.suse.com/security/cve/CVE-2019-8905/" source="CVE"/>
		<reference ref_id="CVE-2019-8906" ref_url="https://www.suse.com/security/cve/CVE-2019-8906/" source="CVE"/>
		<reference ref_id="CVE-2019-8907" ref_url="https://www.suse.com/security/cve/CVE-2019-8907/" source="CVE"/>
		<description>
This update for file fixes the following issues:

The following security vulnerabilities were addressed:

- CVE-2018-10360: Fixed an out-of-bounds read in the function do_core_note in
  readelf.c, which allowed remote attackers to cause a denial of service
  (application crash) via a crafted ELF file (bsc#1096974)
- CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c
  (bsc#1126118)
- CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf. c
  (bsc#1126119)
- CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c
  (bsc#1126117)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-07"/>
	<updated date="2019-03-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1096974">SUSE bug 1096974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096984">SUSE bug 1096984</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126117">SUSE bug 1126117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126118">SUSE bug 1126118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126119">SUSE bug 1126119</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10360/">CVE-2018-10360</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8905/">CVE-2019-8905</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8906/">CVE-2019-8906</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8907/">CVE-2019-8907</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708586" comment="file-5.32-7.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789674" comment="file-devel-5.32-7.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491001" comment="file-magic-5.32-7.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708587" comment="libmagic1-5.32-7.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491003" comment="libmagic1-32bit-5.32-7.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136956" version="1" class="patch">
	<metadata>
		<title>firewall-macros-0.5.5-4.24.9 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-5410" ref_url="https://www.suse.com/security/cve/CVE-2016-5410/" source="CVE"/>
		<description>
These are all security issues fixed in the firewall-macros-0.5.5-4.24.9 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5410/">CVE-2016-5410</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481121" comment="firewall-macros-0.5.5-4.24.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481122" comment="firewalld-0.5.5-4.24.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481123" comment="firewalld-lang-0.5.5-4.24.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481124" comment="python3-firewall-0.5.5-4.24.9 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136957" version="1" class="patch">
	<metadata>
		<title> (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1091045" ref_url="https://bugzilla.suse.com/1091045" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-6888" ref_url="https://www.suse.com/security/cve/CVE-2017-6888/" source="CVE"/>
		<description>
This update for flac fixes the following issues:

- CVE-2017-6888: An error in the 'read_metadata_vorbiscomment_()' function could be exploited to cause a memory leak via a specially crafted FLAC file (bsc#1091045).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-09"/>
	<updated date="2019-04-09"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1091045">SUSE bug 1091045</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-6888/">CVE-2017-6888</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789675" comment="flac-devel-1.3.2-3.3.20 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789676" comment="libFLAC++6-1.3.2-3.3.20 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789677" comment="libFLAC8-1.3.2-3.3.20 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136958" version="1" class="patch">
	<metadata>
		<title>flac-devel-1.3.2-3.3.20 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-8962" ref_url="https://www.suse.com/security/cve/CVE-2014-8962/" source="CVE"/>
		<reference ref_id="CVE-2014-9028" ref_url="https://www.suse.com/security/cve/CVE-2014-9028/" source="CVE"/>
		<reference ref_id="CVE-2017-6888" ref_url="https://www.suse.com/security/cve/CVE-2017-6888/" source="CVE"/>
		<description>
These are all security issues fixed in the flac-devel-1.3.2-3.3.20 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8962/">CVE-2014-8962</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9028/">CVE-2014-9028</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-6888/">CVE-2017-6888</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481125" comment="flac-devel-1.3.2-3.3.20 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481126" comment="libFLAC++6-1.3.2-3.3.20 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481127" comment="libFLAC8-1.3.2-3.3.20 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136959" version="1" class="patch">
	<metadata>
		<title>freetype2-devel-2.9-2.13 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-0946" ref_url="https://www.suse.com/security/cve/CVE-2009-0946/" source="CVE"/>
		<reference ref_id="CVE-2010-2497" ref_url="https://www.suse.com/security/cve/CVE-2010-2497/" source="CVE"/>
		<reference ref_id="CVE-2010-2805" ref_url="https://www.suse.com/security/cve/CVE-2010-2805/" source="CVE"/>
		<reference ref_id="CVE-2010-3053" ref_url="https://www.suse.com/security/cve/CVE-2010-3053/" source="CVE"/>
		<reference ref_id="CVE-2010-3054" ref_url="https://www.suse.com/security/cve/CVE-2010-3054/" source="CVE"/>
		<reference ref_id="CVE-2010-3311" ref_url="https://www.suse.com/security/cve/CVE-2010-3311/" source="CVE"/>
		<reference ref_id="CVE-2010-3814" ref_url="https://www.suse.com/security/cve/CVE-2010-3814/" source="CVE"/>
		<reference ref_id="CVE-2010-3855" ref_url="https://www.suse.com/security/cve/CVE-2010-3855/" source="CVE"/>
		<reference ref_id="CVE-2011-0226" ref_url="https://www.suse.com/security/cve/CVE-2011-0226/" source="CVE"/>
		<reference ref_id="CVE-2011-3256" ref_url="https://www.suse.com/security/cve/CVE-2011-3256/" source="CVE"/>
		<reference ref_id="CVE-2011-3439" ref_url="https://www.suse.com/security/cve/CVE-2011-3439/" source="CVE"/>
		<reference ref_id="CVE-2012-1126" ref_url="https://www.suse.com/security/cve/CVE-2012-1126/" source="CVE"/>
		<reference ref_id="CVE-2012-1127" ref_url="https://www.suse.com/security/cve/CVE-2012-1127/" source="CVE"/>
		<reference ref_id="CVE-2012-1128" ref_url="https://www.suse.com/security/cve/CVE-2012-1128/" source="CVE"/>
		<reference ref_id="CVE-2012-1129" ref_url="https://www.suse.com/security/cve/CVE-2012-1129/" source="CVE"/>
		<reference ref_id="CVE-2012-1130" ref_url="https://www.suse.com/security/cve/CVE-2012-1130/" source="CVE"/>
		<reference ref_id="CVE-2012-1131" ref_url="https://www.suse.com/security/cve/CVE-2012-1131/" source="CVE"/>
		<reference ref_id="CVE-2012-1132" ref_url="https://www.suse.com/security/cve/CVE-2012-1132/" source="CVE"/>
		<reference ref_id="CVE-2012-1133" ref_url="https://www.suse.com/security/cve/CVE-2012-1133/" source="CVE"/>
		<reference ref_id="CVE-2012-1134" ref_url="https://www.suse.com/security/cve/CVE-2012-1134/" source="CVE"/>
		<reference ref_id="CVE-2012-1135" ref_url="https://www.suse.com/security/cve/CVE-2012-1135/" source="CVE"/>
		<reference ref_id="CVE-2012-1136" ref_url="https://www.suse.com/security/cve/CVE-2012-1136/" source="CVE"/>
		<reference ref_id="CVE-2012-1137" ref_url="https://www.suse.com/security/cve/CVE-2012-1137/" source="CVE"/>
		<reference ref_id="CVE-2012-1138" ref_url="https://www.suse.com/security/cve/CVE-2012-1138/" source="CVE"/>
		<reference ref_id="CVE-2012-1139" ref_url="https://www.suse.com/security/cve/CVE-2012-1139/" source="CVE"/>
		<reference ref_id="CVE-2012-1140" ref_url="https://www.suse.com/security/cve/CVE-2012-1140/" source="CVE"/>
		<reference ref_id="CVE-2012-1141" ref_url="https://www.suse.com/security/cve/CVE-2012-1141/" source="CVE"/>
		<reference ref_id="CVE-2012-1142" ref_url="https://www.suse.com/security/cve/CVE-2012-1142/" source="CVE"/>
		<reference ref_id="CVE-2012-1143" ref_url="https://www.suse.com/security/cve/CVE-2012-1143/" source="CVE"/>
		<reference ref_id="CVE-2012-1144" ref_url="https://www.suse.com/security/cve/CVE-2012-1144/" source="CVE"/>
		<reference ref_id="CVE-2012-5668" ref_url="https://www.suse.com/security/cve/CVE-2012-5668/" source="CVE"/>
		<reference ref_id="CVE-2012-5669" ref_url="https://www.suse.com/security/cve/CVE-2012-5669/" source="CVE"/>
		<reference ref_id="CVE-2012-5670" ref_url="https://www.suse.com/security/cve/CVE-2012-5670/" source="CVE"/>
		<reference ref_id="CVE-2014-2240" ref_url="https://www.suse.com/security/cve/CVE-2014-2240/" source="CVE"/>
		<reference ref_id="CVE-2014-2241" ref_url="https://www.suse.com/security/cve/CVE-2014-2241/" source="CVE"/>
		<reference ref_id="CVE-2014-9656" ref_url="https://www.suse.com/security/cve/CVE-2014-9656/" source="CVE"/>
		<reference ref_id="CVE-2014-9657" ref_url="https://www.suse.com/security/cve/CVE-2014-9657/" source="CVE"/>
		<reference ref_id="CVE-2014-9658" ref_url="https://www.suse.com/security/cve/CVE-2014-9658/" source="CVE"/>
		<reference ref_id="CVE-2014-9659" ref_url="https://www.suse.com/security/cve/CVE-2014-9659/" source="CVE"/>
		<reference ref_id="CVE-2014-9660" ref_url="https://www.suse.com/security/cve/CVE-2014-9660/" source="CVE"/>
		<reference ref_id="CVE-2014-9661" ref_url="https://www.suse.com/security/cve/CVE-2014-9661/" source="CVE"/>
		<reference ref_id="CVE-2014-9662" ref_url="https://www.suse.com/security/cve/CVE-2014-9662/" source="CVE"/>
		<reference ref_id="CVE-2014-9663" ref_url="https://www.suse.com/security/cve/CVE-2014-9663/" source="CVE"/>
		<reference ref_id="CVE-2014-9664" ref_url="https://www.suse.com/security/cve/CVE-2014-9664/" source="CVE"/>
		<reference ref_id="CVE-2014-9665" ref_url="https://www.suse.com/security/cve/CVE-2014-9665/" source="CVE"/>
		<reference ref_id="CVE-2014-9666" ref_url="https://www.suse.com/security/cve/CVE-2014-9666/" source="CVE"/>
		<reference ref_id="CVE-2014-9667" ref_url="https://www.suse.com/security/cve/CVE-2014-9667/" source="CVE"/>
		<reference ref_id="CVE-2014-9668" ref_url="https://www.suse.com/security/cve/CVE-2014-9668/" source="CVE"/>
		<reference ref_id="CVE-2014-9669" ref_url="https://www.suse.com/security/cve/CVE-2014-9669/" source="CVE"/>
		<reference ref_id="CVE-2014-9670" ref_url="https://www.suse.com/security/cve/CVE-2014-9670/" source="CVE"/>
		<reference ref_id="CVE-2014-9671" ref_url="https://www.suse.com/security/cve/CVE-2014-9671/" source="CVE"/>
		<reference ref_id="CVE-2014-9672" ref_url="https://www.suse.com/security/cve/CVE-2014-9672/" source="CVE"/>
		<reference ref_id="CVE-2014-9673" ref_url="https://www.suse.com/security/cve/CVE-2014-9673/" source="CVE"/>
		<reference ref_id="CVE-2014-9674" ref_url="https://www.suse.com/security/cve/CVE-2014-9674/" source="CVE"/>
		<reference ref_id="CVE-2014-9675" ref_url="https://www.suse.com/security/cve/CVE-2014-9675/" source="CVE"/>
		<reference ref_id="CVE-2017-8105" ref_url="https://www.suse.com/security/cve/CVE-2017-8105/" source="CVE"/>
		<reference ref_id="CVE-2017-8287" ref_url="https://www.suse.com/security/cve/CVE-2017-8287/" source="CVE"/>
		<description>
These are all security issues fixed in the freetype2-devel-2.9-2.13 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0946/">CVE-2009-0946</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2497/">CVE-2010-2497</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2805/">CVE-2010-2805</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3053/">CVE-2010-3053</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3054/">CVE-2010-3054</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-3311/">CVE-2010-3311</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3814/">CVE-2010-3814</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3855/">CVE-2010-3855</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0226/">CVE-2011-0226</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3256/">CVE-2011-3256</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-3439/">CVE-2011-3439</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1126/">CVE-2012-1126</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1127/">CVE-2012-1127</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1128/">CVE-2012-1128</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1129/">CVE-2012-1129</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1130/">CVE-2012-1130</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1131/">CVE-2012-1131</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1132/">CVE-2012-1132</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1133/">CVE-2012-1133</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1134/">CVE-2012-1134</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1135/">CVE-2012-1135</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1136/">CVE-2012-1136</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1137/">CVE-2012-1137</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1138/">CVE-2012-1138</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1139/">CVE-2012-1139</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1140/">CVE-2012-1140</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1141/">CVE-2012-1141</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1142/">CVE-2012-1142</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1143/">CVE-2012-1143</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1144/">CVE-2012-1144</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5668/">CVE-2012-5668</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5669/">CVE-2012-5669</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5670/">CVE-2012-5670</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-2240/">CVE-2014-2240</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-2241/">CVE-2014-2241</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9656/">CVE-2014-9656</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9657/">CVE-2014-9657</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9658/">CVE-2014-9658</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9659/">CVE-2014-9659</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9660/">CVE-2014-9660</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9661/">CVE-2014-9661</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9662/">CVE-2014-9662</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9663/">CVE-2014-9663</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9664/">CVE-2014-9664</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9665/">CVE-2014-9665</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9666/">CVE-2014-9666</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9667/">CVE-2014-9667</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9668/">CVE-2014-9668</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9669/">CVE-2014-9669</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9670/">CVE-2014-9670</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9671/">CVE-2014-9671</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9672/">CVE-2014-9672</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9673/">CVE-2014-9673</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9674/">CVE-2014-9674</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9675/">CVE-2014-9675</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-8105/">CVE-2017-8105</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8287/">CVE-2017-8287</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480241" comment="freetype2-devel-2.9-2.13 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480242" comment="libfreetype6-2.9-2.13 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480243" comment="libfreetype6-32bit-2.9-2.13 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136960" version="1" class="patch">
	<metadata>
		<title>fuse-2.9.7-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1101797" ref_url="https://bugzilla.suse.com/1101797" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10906" ref_url="https://www.suse.com/security/cve/CVE-2018-10906/" source="CVE"/>
		<description>
This update for fuse fixes the following issues:

- CVE-2018-10906: fusermount was vulnerable to a restriction bypass when
  SELinux is active. This allowed non-root users to mount a FUSE file system with
  the 'allow_other' mount option regardless of whether 'user_allow_other' is set
  in the fuse configuration. An attacker may use this flaw to mount a FUSE file
  system, accessible by other users, and trick them into accessing files on that
  file system, possibly causing Denial of Service or other unspecified effects
  (bsc#1101797)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-19"/>
	<updated date="2018-10-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1101797">SUSE bug 1101797</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10906/">CVE-2018-10906</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782348" comment="fuse-2.9.7-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782349" comment="fuse-devel-2.9.7-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782350" comment="fuse-doc-2.9.7-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708394" comment="libfuse2-2.9.7-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782351" comment="libulockmgr1-2.9.7-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136961" version="1" class="patch">
	<metadata>
		<title>g3utils-1.1.37-3.3.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-16741" ref_url="https://www.suse.com/security/cve/CVE-2018-16741/" source="CVE"/>
		<reference ref_id="CVE-2018-16742" ref_url="https://www.suse.com/security/cve/CVE-2018-16742/" source="CVE"/>
		<reference ref_id="CVE-2018-16743" ref_url="https://www.suse.com/security/cve/CVE-2018-16743/" source="CVE"/>
		<reference ref_id="CVE-2018-16744" ref_url="https://www.suse.com/security/cve/CVE-2018-16744/" source="CVE"/>
		<reference ref_id="CVE-2018-16745" ref_url="https://www.suse.com/security/cve/CVE-2018-16745/" source="CVE"/>
		<description>
These are all security issues fixed in the g3utils-1.1.37-3.3.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16741/">CVE-2018-16741</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16742/">CVE-2018-16742</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16743/">CVE-2018-16743</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16744/">CVE-2018-16744</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16745/">CVE-2018-16745</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481133" comment="g3utils-1.1.37-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481134" comment="mgetty-1.1.37-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136962" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1114407" ref_url="https://bugzilla.suse.com/1114407" source="BUGZILLA"/>
		<reference ref_id="1124223" ref_url="https://bugzilla.suse.com/1124223" source="BUGZILLA"/>
		<reference ref_id="1125410" ref_url="https://bugzilla.suse.com/1125410" source="BUGZILLA"/>
		<reference ref_id="1126377" ref_url="https://bugzilla.suse.com/1126377" source="BUGZILLA"/>
		<reference ref_id="1131060" ref_url="https://bugzilla.suse.com/1131060" source="BUGZILLA"/>
		<reference ref_id="1131686" ref_url="https://bugzilla.suse.com/1131686" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3880" ref_url="https://www.suse.com/security/cve/CVE-2019-3880/" source="CVE"/>
		<description>
This update for samba fixes the following issues:

Security issue fixed:

- CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share (bsc#1131060).


ldb was updated to version 1.2.4 (bsc#1125410 bsc#1131686):

- Out of bound read in ldb_wildcard_compare
- Hold at most 10 outstanding paged result cookies
- Put 'results_store' into a doubly linked list
- Refuse to build Samba against a newer minor version of ldb


Non-security issues fixed:

- Fixed update-apparmor-samba-profile script after apparmor switched to using named profiles (bsc#1126377).
- Abide to the load_printers parameter in smb.conf (bsc#1124223).
- Provide the 32bit samba winbind PAM module and its dependend 32bit libraries.
  		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-25"/>
	<updated date="2019-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1114407">SUSE bug 1114407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124223">SUSE bug 1124223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125410">SUSE bug 1125410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126377">SUSE bug 1126377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131060">SUSE bug 1131060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131686">SUSE bug 1131686</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-3880/">CVE-2019-3880</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782354" comment="gamin-devel-0.1.10-3.2.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708422" comment="libfam0-gamin-0.1.10-3.2.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489927" comment="libfam0-gamin-32bit-0.1.10-3.2.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782355" comment="libgamin-1-0-0.1.10-3.2.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136963" version="1" class="patch">
	<metadata>
		<title>gc-devel-7.6.4-1.16 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-2673" ref_url="https://www.suse.com/security/cve/CVE-2012-2673/" source="CVE"/>
		<description>
These are all security issues fixed in the gc-devel-7.6.4-1.16 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2673/">CVE-2012-2673</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480249" comment="gc-devel-7.6.4-1.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480250" comment="libgc1-7.6.4-1.16 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136964" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1123361" ref_url="https://bugzilla.suse.com/1123361" source="BUGZILLA"/>
		<reference ref_id="1123522" ref_url="https://bugzilla.suse.com/1123522" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6977" ref_url="https://www.suse.com/security/cve/CVE-2019-6977/" source="CVE"/>
		<reference ref_id="CVE-2019-6978" ref_url="https://www.suse.com/security/cve/CVE-2019-6978/" source="CVE"/>
		<description>
This update for gd fixes the following issues:

Security issues fixed:

- CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function (bsc#1123361).
- CVE-2019-6978: Fixed a double free in the gdImage*Ptr() functions (bsc#1123522).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-27"/>
	<updated date="2019-03-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1123361">SUSE bug 1123361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123522">SUSE bug 1123522</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6977/">CVE-2019-6977</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6978/">CVE-2019-6978</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789678" comment="libgd3-2.2.5-4.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136965" version="1" class="patch">
	<metadata>
		<title>gdk-pixbuf-devel-2.36.11-3.19 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-2485" ref_url="https://www.suse.com/security/cve/CVE-2011-2485/" source="CVE"/>
		<reference ref_id="CVE-2015-4491" ref_url="https://www.suse.com/security/cve/CVE-2015-4491/" source="CVE"/>
		<reference ref_id="CVE-2015-7552" ref_url="https://www.suse.com/security/cve/CVE-2015-7552/" source="CVE"/>
		<reference ref_id="CVE-2015-7673" ref_url="https://www.suse.com/security/cve/CVE-2015-7673/" source="CVE"/>
		<reference ref_id="CVE-2015-7674" ref_url="https://www.suse.com/security/cve/CVE-2015-7674/" source="CVE"/>
		<reference ref_id="CVE-2016-6352" ref_url="https://www.suse.com/security/cve/CVE-2016-6352/" source="CVE"/>
		<reference ref_id="CVE-2017-2862" ref_url="https://www.suse.com/security/cve/CVE-2017-2862/" source="CVE"/>
		<reference ref_id="CVE-2017-2870" ref_url="https://www.suse.com/security/cve/CVE-2017-2870/" source="CVE"/>
		<reference ref_id="CVE-2017-6312" ref_url="https://www.suse.com/security/cve/CVE-2017-6312/" source="CVE"/>
		<reference ref_id="CVE-2017-6313" ref_url="https://www.suse.com/security/cve/CVE-2017-6313/" source="CVE"/>
		<description>
These are all security issues fixed in the gdk-pixbuf-devel-2.36.11-3.19 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2485/">CVE-2011-2485</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4491/">CVE-2015-4491</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7552/">CVE-2015-7552</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7673/">CVE-2015-7673</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7674/">CVE-2015-7674</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6352/">CVE-2016-6352</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2862/">CVE-2017-2862</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-2870/">CVE-2017-2870</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6312/">CVE-2017-6312</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-6313/">CVE-2017-6313</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480251" comment="gdk-pixbuf-devel-2.36.11-3.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480252" comment="gdk-pixbuf-lang-2.36.11-3.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480253" comment="gdk-pixbuf-query-loaders-2.36.11-3.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480254" comment="gdk-pixbuf-thumbnailer-2.36.11-3.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480255" comment="libgdk_pixbuf-2_0-0-2.36.11-3.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480256" comment="typelib-1_0-GdkPixbuf-2_0-2.36.11-3.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136966" version="1" class="patch">
	<metadata>
		<title>gdk-pixbuf-loader-rsvg-2.42.3-1.49 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-3146" ref_url="https://www.suse.com/security/cve/CVE-2011-3146/" source="CVE"/>
		<reference ref_id="CVE-2013-1881" ref_url="https://www.suse.com/security/cve/CVE-2013-1881/" source="CVE"/>
		<reference ref_id="CVE-2017-11464" ref_url="https://www.suse.com/security/cve/CVE-2017-11464/" source="CVE"/>
		<description>
These are all security issues fixed in the gdk-pixbuf-loader-rsvg-2.42.3-1.49 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3146/">CVE-2011-3146</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1881/">CVE-2013-1881</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11464/">CVE-2017-11464</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480257" comment="gdk-pixbuf-loader-rsvg-2.42.3-1.49 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480258" comment="librsvg-2-2-2.42.3-1.49 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136967" version="1" class="patch">
	<metadata>
		<title>ghostscript-9.26a-3.15.1 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1129186" ref_url="https://bugzilla.suse.com/1129186" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3838" ref_url="https://www.suse.com/security/cve/CVE-2019-3838/" source="CVE"/>
		<description>
This update for ghostscript fixes the following issue:

Security issue fixed:

- CVE-2019-3838: Fixed a vulnerability which made forceput operator in DefineResource to be still accessible
  which could allow access to file system outside of the constraints of -dSAFER (bsc#1129186).

		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-22"/>
	<updated date="2019-03-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1129186">SUSE bug 1129186</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3838/">CVE-2019-3838</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789679" comment="ghostscript-9.26a-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789680" comment="ghostscript-devel-9.26a-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789681" comment="ghostscript-x11-9.26a-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136968" version="1" class="patch">
	<metadata>
		<title>giflib-devel-5.1.4-2.19 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-7555" ref_url="https://www.suse.com/security/cve/CVE-2015-7555/" source="CVE"/>
		<reference ref_id="CVE-2016-3977" ref_url="https://www.suse.com/security/cve/CVE-2016-3977/" source="CVE"/>
		<description>
These are all security issues fixed in the giflib-devel-5.1.4-2.19 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7555/">CVE-2015-7555</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3977/">CVE-2016-3977</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480262" comment="giflib-devel-5.1.4-2.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480263" comment="libgif7-5.1.4-2.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136969" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1117257" ref_url="https://bugzilla.suse.com/1117257" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19486" ref_url="https://www.suse.com/security/cve/CVE-2018-19486/" source="CVE"/>
		<description>
This update for git fixes the following issues:

Security issue fixed:

- CVE-2018-19486: Fixed git that executed commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the run_command() API and run-command.c, because there was (bsc#1117257).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-19"/>
	<updated date="2018-12-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1117257">SUSE bug 1117257</bugzilla>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-19486/">CVE-2018-19486</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789682" comment="git-core-2.16.4-3.9.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136970" version="1" class="patch">
	<metadata>
		<title>git-core-2.16.4-3.9.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2005-4900" ref_url="https://www.suse.com/security/cve/CVE-2005-4900/" source="CVE"/>
		<reference ref_id="CVE-2011-2186" ref_url="https://www.suse.com/security/cve/CVE-2011-2186/" source="CVE"/>
		<reference ref_id="CVE-2014-9390" ref_url="https://www.suse.com/security/cve/CVE-2014-9390/" source="CVE"/>
		<reference ref_id="CVE-2016-2315" ref_url="https://www.suse.com/security/cve/CVE-2016-2315/" source="CVE"/>
		<reference ref_id="CVE-2016-2324" ref_url="https://www.suse.com/security/cve/CVE-2016-2324/" source="CVE"/>
		<reference ref_id="CVE-2017-1000117" ref_url="https://www.suse.com/security/cve/CVE-2017-1000117/" source="CVE"/>
		<reference ref_id="CVE-2017-14867" ref_url="https://www.suse.com/security/cve/CVE-2017-14867/" source="CVE"/>
		<reference ref_id="CVE-2017-8386" ref_url="https://www.suse.com/security/cve/CVE-2017-8386/" source="CVE"/>
		<reference ref_id="CVE-2018-11233" ref_url="https://www.suse.com/security/cve/CVE-2018-11233/" source="CVE"/>
		<reference ref_id="CVE-2018-11235" ref_url="https://www.suse.com/security/cve/CVE-2018-11235/" source="CVE"/>
		<reference ref_id="CVE-2018-17456" ref_url="https://www.suse.com/security/cve/CVE-2018-17456/" source="CVE"/>
		<reference ref_id="CVE-2018-19486" ref_url="https://www.suse.com/security/cve/CVE-2018-19486/" source="CVE"/>
		<description>
These are all security issues fixed in the git-core-2.16.4-3.9.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2005-4900/">CVE-2005-4900</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2186/">CVE-2011-2186</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9390/">CVE-2014-9390</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2315/">CVE-2016-2315</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2324/">CVE-2016-2324</cve>
	<cve impact="important" cvss3="8.5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000117/">CVE-2017-1000117</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14867/">CVE-2017-14867</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8386/">CVE-2017-8386</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-11233/">CVE-2018-11233</cve>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11235/">CVE-2018-11235</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17456/">CVE-2018-17456</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-19486/">CVE-2018-19486</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481138" comment="git-core-2.16.4-3.9.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136971" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1107116" ref_url="https://bugzilla.suse.com/1107116" source="BUGZILLA"/>
		<reference ref_id="1107121" ref_url="https://bugzilla.suse.com/1107121" source="BUGZILLA"/>
		<reference ref_id="1111499" ref_url="https://bugzilla.suse.com/1111499" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16428" ref_url="https://www.suse.com/security/cve/CVE-2018-16428/" source="CVE"/>
		<reference ref_id="CVE-2018-16429" ref_url="https://www.suse.com/security/cve/CVE-2018-16429/" source="CVE"/>
		<description>
This update for glib2 fixes the following issues:

Security issues fixed:

- CVE-2018-16428: Do not do a NULL pointer dereference (crash).
  Avoid that, at the cost of introducing a new translatable error
  message (bsc#1107121).
- CVE-2018-16429: Fixed out-of-bounds read vulnerability ing_markup_parse_context_parse() (bsc#1107116).

Non-security issue fixed:

- various GVariant parsing issues have been resolved (bsc#1111499)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-11-26"/>
	<updated date="2018-11-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1107116">SUSE bug 1107116</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107121">SUSE bug 1107121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111499">SUSE bug 1111499</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16428/">CVE-2018-16428</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16429/">CVE-2018-16429</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789683" comment="glib2-devel-2.54.3-4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489766" comment="glib2-lang-2.54.3-4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789684" comment="glib2-tools-2.54.3-4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789685" comment="libgio-2_0-0-2.54.3-4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489769" comment="libgio-2_0-0-32bit-2.54.3-4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789686" comment="libglib-2_0-0-2.54.3-4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489771" comment="libglib-2_0-0-32bit-2.54.3-4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789687" comment="libgmodule-2_0-0-2.54.3-4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489773" comment="libgmodule-2_0-0-32bit-2.54.3-4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789688" comment="libgobject-2_0-0-2.54.3-4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489775" comment="libgobject-2_0-0-32bit-2.54.3-4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789689" comment="libgthread-2_0-0-2.54.3-4.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136972" version="1" class="patch">
	<metadata>
		<title>glib2-devel-2.54.3-4.10.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2008-4316" ref_url="https://www.suse.com/security/cve/CVE-2008-4316/" source="CVE"/>
		<reference ref_id="CVE-2012-3524" ref_url="https://www.suse.com/security/cve/CVE-2012-3524/" source="CVE"/>
		<reference ref_id="CVE-2018-16428" ref_url="https://www.suse.com/security/cve/CVE-2018-16428/" source="CVE"/>
		<reference ref_id="CVE-2018-16429" ref_url="https://www.suse.com/security/cve/CVE-2018-16429/" source="CVE"/>
		<description>
These are all security issues fixed in the glib2-devel-2.54.3-4.10.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve href="https://www.suse.com/security/cve/CVE-2008-4316/">CVE-2008-4316</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3524/">CVE-2012-3524</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16428/">CVE-2018-16428</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16429/">CVE-2018-16429</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481139" comment="glib2-devel-2.54.3-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481140" comment="glib2-lang-2.54.3-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481141" comment="glib2-tools-2.54.3-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481142" comment="libgio-2_0-0-2.54.3-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481143" comment="libgio-2_0-0-32bit-2.54.3-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481144" comment="libglib-2_0-0-2.54.3-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481145" comment="libglib-2_0-0-32bit-2.54.3-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481146" comment="libgmodule-2_0-0-2.54.3-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481147" comment="libgmodule-2_0-0-32bit-2.54.3-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481148" comment="libgobject-2_0-0-2.54.3-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481149" comment="libgobject-2_0-0-32bit-2.54.3-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481150" comment="libgthread-2_0-0-2.54.3-4.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136973" version="1" class="patch">
	<metadata>
		<title>glibc-32bit-2.26-8.21 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-5029" ref_url="https://www.suse.com/security/cve/CVE-2009-5029/" source="CVE"/>
		<reference ref_id="CVE-2009-5064" ref_url="https://www.suse.com/security/cve/CVE-2009-5064/" source="CVE"/>
		<reference ref_id="CVE-2010-3192" ref_url="https://www.suse.com/security/cve/CVE-2010-3192/" source="CVE"/>
		<reference ref_id="CVE-2012-3406" ref_url="https://www.suse.com/security/cve/CVE-2012-3406/" source="CVE"/>
		<reference ref_id="CVE-2012-4412" ref_url="https://www.suse.com/security/cve/CVE-2012-4412/" source="CVE"/>
		<reference ref_id="CVE-2013-0242" ref_url="https://www.suse.com/security/cve/CVE-2013-0242/" source="CVE"/>
		<reference ref_id="CVE-2013-1914" ref_url="https://www.suse.com/security/cve/CVE-2013-1914/" source="CVE"/>
		<reference ref_id="CVE-2013-2207" ref_url="https://www.suse.com/security/cve/CVE-2013-2207/" source="CVE"/>
		<reference ref_id="CVE-2013-4237" ref_url="https://www.suse.com/security/cve/CVE-2013-4237/" source="CVE"/>
		<reference ref_id="CVE-2013-4332" ref_url="https://www.suse.com/security/cve/CVE-2013-4332/" source="CVE"/>
		<reference ref_id="CVE-2013-4458" ref_url="https://www.suse.com/security/cve/CVE-2013-4458/" source="CVE"/>
		<reference ref_id="CVE-2013-7423" ref_url="https://www.suse.com/security/cve/CVE-2013-7423/" source="CVE"/>
		<reference ref_id="CVE-2014-0475" ref_url="https://www.suse.com/security/cve/CVE-2014-0475/" source="CVE"/>
		<reference ref_id="CVE-2014-4043" ref_url="https://www.suse.com/security/cve/CVE-2014-4043/" source="CVE"/>
		<reference ref_id="CVE-2014-5119" ref_url="https://www.suse.com/security/cve/CVE-2014-5119/" source="CVE"/>
		<reference ref_id="CVE-2014-6040" ref_url="https://www.suse.com/security/cve/CVE-2014-6040/" source="CVE"/>
		<reference ref_id="CVE-2014-7817" ref_url="https://www.suse.com/security/cve/CVE-2014-7817/" source="CVE"/>
		<reference ref_id="CVE-2014-8121" ref_url="https://www.suse.com/security/cve/CVE-2014-8121/" source="CVE"/>
		<reference ref_id="CVE-2014-9402" ref_url="https://www.suse.com/security/cve/CVE-2014-9402/" source="CVE"/>
		<reference ref_id="CVE-2014-9761" ref_url="https://www.suse.com/security/cve/CVE-2014-9761/" source="CVE"/>
		<reference ref_id="CVE-2015-1472" ref_url="https://www.suse.com/security/cve/CVE-2015-1472/" source="CVE"/>
		<reference ref_id="CVE-2015-1473" ref_url="https://www.suse.com/security/cve/CVE-2015-1473/" source="CVE"/>
		<reference ref_id="CVE-2015-1781" ref_url="https://www.suse.com/security/cve/CVE-2015-1781/" source="CVE"/>
		<reference ref_id="CVE-2015-5180" ref_url="https://www.suse.com/security/cve/CVE-2015-5180/" source="CVE"/>
		<reference ref_id="CVE-2015-7547" ref_url="https://www.suse.com/security/cve/CVE-2015-7547/" source="CVE"/>
		<reference ref_id="CVE-2015-8776" ref_url="https://www.suse.com/security/cve/CVE-2015-8776/" source="CVE"/>
		<reference ref_id="CVE-2015-8777" ref_url="https://www.suse.com/security/cve/CVE-2015-8777/" source="CVE"/>
		<reference ref_id="CVE-2015-8778" ref_url="https://www.suse.com/security/cve/CVE-2015-8778/" source="CVE"/>
		<reference ref_id="CVE-2015-8779" ref_url="https://www.suse.com/security/cve/CVE-2015-8779/" source="CVE"/>
		<reference ref_id="CVE-2016-1234" ref_url="https://www.suse.com/security/cve/CVE-2016-1234/" source="CVE"/>
		<reference ref_id="CVE-2016-3075" ref_url="https://www.suse.com/security/cve/CVE-2016-3075/" source="CVE"/>
		<reference ref_id="CVE-2016-3706" ref_url="https://www.suse.com/security/cve/CVE-2016-3706/" source="CVE"/>
		<reference ref_id="CVE-2016-4429" ref_url="https://www.suse.com/security/cve/CVE-2016-4429/" source="CVE"/>
		<reference ref_id="CVE-2016-5417" ref_url="https://www.suse.com/security/cve/CVE-2016-5417/" source="CVE"/>
		<reference ref_id="CVE-2016-6323" ref_url="https://www.suse.com/security/cve/CVE-2016-6323/" source="CVE"/>
		<reference ref_id="CVE-2017-1000366" ref_url="https://www.suse.com/security/cve/CVE-2017-1000366/" source="CVE"/>
		<reference ref_id="CVE-2017-1000408" ref_url="https://www.suse.com/security/cve/CVE-2017-1000408/" source="CVE"/>
		<reference ref_id="CVE-2017-1000409" ref_url="https://www.suse.com/security/cve/CVE-2017-1000409/" source="CVE"/>
		<reference ref_id="CVE-2017-12132" ref_url="https://www.suse.com/security/cve/CVE-2017-12132/" source="CVE"/>
		<reference ref_id="CVE-2017-12133" ref_url="https://www.suse.com/security/cve/CVE-2017-12133/" source="CVE"/>
		<reference ref_id="CVE-2017-15670" ref_url="https://www.suse.com/security/cve/CVE-2017-15670/" source="CVE"/>
		<reference ref_id="CVE-2017-15671" ref_url="https://www.suse.com/security/cve/CVE-2017-15671/" source="CVE"/>
		<reference ref_id="CVE-2017-15804" ref_url="https://www.suse.com/security/cve/CVE-2017-15804/" source="CVE"/>
		<reference ref_id="CVE-2017-16997" ref_url="https://www.suse.com/security/cve/CVE-2017-16997/" source="CVE"/>
		<reference ref_id="CVE-2017-17426" ref_url="https://www.suse.com/security/cve/CVE-2017-17426/" source="CVE"/>
		<reference ref_id="CVE-2018-1000001" ref_url="https://www.suse.com/security/cve/CVE-2018-1000001/" source="CVE"/>
		<reference ref_id="CVE-2018-6485" ref_url="https://www.suse.com/security/cve/CVE-2018-6485/" source="CVE"/>
		<reference ref_id="CVE-2018-6551" ref_url="https://www.suse.com/security/cve/CVE-2018-6551/" source="CVE"/>
		<description>
These are all security issues fixed in the glibc-32bit-2.26-8.21 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5029/">CVE-2009-5029</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5064/">CVE-2009-5064</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3192/">CVE-2010-3192</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3406/">CVE-2012-3406</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-4412/">CVE-2012-4412</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0242/">CVE-2013-0242</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1914/">CVE-2013-1914</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2207/">CVE-2013-2207</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4237/">CVE-2013-4237</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4332/">CVE-2013-4332</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4458/">CVE-2013-4458</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7423/">CVE-2013-7423</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0475/">CVE-2014-0475</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-4043/">CVE-2014-4043</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-5119/">CVE-2014-5119</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-6040/">CVE-2014-6040</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7817/">CVE-2014-7817</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8121/">CVE-2014-8121</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9402/">CVE-2014-9402</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9761/">CVE-2014-9761</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1472/">CVE-2015-1472</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1473/">CVE-2015-1473</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1781/">CVE-2015-1781</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5180/">CVE-2015-5180</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7547/">CVE-2015-7547</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8776/">CVE-2015-8776</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8777/">CVE-2015-8777</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8778/">CVE-2015-8778</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8779/">CVE-2015-8779</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1234/">CVE-2016-1234</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3075/">CVE-2016-3075</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3706/">CVE-2016-3706</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4429/">CVE-2016-4429</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5417/">CVE-2016-5417</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6323/">CVE-2016-6323</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000366/">CVE-2017-1000366</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000408/">CVE-2017-1000408</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000409/">CVE-2017-1000409</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-12132/">CVE-2017-12132</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12133/">CVE-2017-12133</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15670/">CVE-2017-15670</cve>
	<cve impact="important" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15671/">CVE-2017-15671</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-15804/">CVE-2017-15804</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16997/">CVE-2017-16997</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17426/">CVE-2017-17426</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000001/">CVE-2018-1000001</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-6485/">CVE-2018-6485</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6551/">CVE-2018-6551</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481161" comment="glibc-32bit-2.26-8.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481162" comment="glibc-locale-32bit-2.26-8.21 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136974" version="1" class="patch">
	<metadata>
		<title>glibc-locale-32bit-2.26-13.8.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-5029" ref_url="https://www.suse.com/security/cve/CVE-2009-5029/" source="CVE"/>
		<reference ref_id="CVE-2009-5064" ref_url="https://www.suse.com/security/cve/CVE-2009-5064/" source="CVE"/>
		<reference ref_id="CVE-2010-3192" ref_url="https://www.suse.com/security/cve/CVE-2010-3192/" source="CVE"/>
		<reference ref_id="CVE-2012-3406" ref_url="https://www.suse.com/security/cve/CVE-2012-3406/" source="CVE"/>
		<reference ref_id="CVE-2012-4412" ref_url="https://www.suse.com/security/cve/CVE-2012-4412/" source="CVE"/>
		<reference ref_id="CVE-2013-0242" ref_url="https://www.suse.com/security/cve/CVE-2013-0242/" source="CVE"/>
		<reference ref_id="CVE-2013-1914" ref_url="https://www.suse.com/security/cve/CVE-2013-1914/" source="CVE"/>
		<reference ref_id="CVE-2013-2207" ref_url="https://www.suse.com/security/cve/CVE-2013-2207/" source="CVE"/>
		<reference ref_id="CVE-2013-4237" ref_url="https://www.suse.com/security/cve/CVE-2013-4237/" source="CVE"/>
		<reference ref_id="CVE-2013-4332" ref_url="https://www.suse.com/security/cve/CVE-2013-4332/" source="CVE"/>
		<reference ref_id="CVE-2013-4458" ref_url="https://www.suse.com/security/cve/CVE-2013-4458/" source="CVE"/>
		<reference ref_id="CVE-2013-7423" ref_url="https://www.suse.com/security/cve/CVE-2013-7423/" source="CVE"/>
		<reference ref_id="CVE-2014-0475" ref_url="https://www.suse.com/security/cve/CVE-2014-0475/" source="CVE"/>
		<reference ref_id="CVE-2014-4043" ref_url="https://www.suse.com/security/cve/CVE-2014-4043/" source="CVE"/>
		<reference ref_id="CVE-2014-5119" ref_url="https://www.suse.com/security/cve/CVE-2014-5119/" source="CVE"/>
		<reference ref_id="CVE-2014-6040" ref_url="https://www.suse.com/security/cve/CVE-2014-6040/" source="CVE"/>
		<reference ref_id="CVE-2014-7817" ref_url="https://www.suse.com/security/cve/CVE-2014-7817/" source="CVE"/>
		<reference ref_id="CVE-2014-8121" ref_url="https://www.suse.com/security/cve/CVE-2014-8121/" source="CVE"/>
		<reference ref_id="CVE-2014-9402" ref_url="https://www.suse.com/security/cve/CVE-2014-9402/" source="CVE"/>
		<reference ref_id="CVE-2014-9761" ref_url="https://www.suse.com/security/cve/CVE-2014-9761/" source="CVE"/>
		<reference ref_id="CVE-2015-1472" ref_url="https://www.suse.com/security/cve/CVE-2015-1472/" source="CVE"/>
		<reference ref_id="CVE-2015-1473" ref_url="https://www.suse.com/security/cve/CVE-2015-1473/" source="CVE"/>
		<reference ref_id="CVE-2015-1781" ref_url="https://www.suse.com/security/cve/CVE-2015-1781/" source="CVE"/>
		<reference ref_id="CVE-2015-5180" ref_url="https://www.suse.com/security/cve/CVE-2015-5180/" source="CVE"/>
		<reference ref_id="CVE-2015-7547" ref_url="https://www.suse.com/security/cve/CVE-2015-7547/" source="CVE"/>
		<reference ref_id="CVE-2015-8776" ref_url="https://www.suse.com/security/cve/CVE-2015-8776/" source="CVE"/>
		<reference ref_id="CVE-2015-8777" ref_url="https://www.suse.com/security/cve/CVE-2015-8777/" source="CVE"/>
		<reference ref_id="CVE-2015-8778" ref_url="https://www.suse.com/security/cve/CVE-2015-8778/" source="CVE"/>
		<reference ref_id="CVE-2015-8779" ref_url="https://www.suse.com/security/cve/CVE-2015-8779/" source="CVE"/>
		<reference ref_id="CVE-2016-1234" ref_url="https://www.suse.com/security/cve/CVE-2016-1234/" source="CVE"/>
		<reference ref_id="CVE-2016-3075" ref_url="https://www.suse.com/security/cve/CVE-2016-3075/" source="CVE"/>
		<reference ref_id="CVE-2016-3706" ref_url="https://www.suse.com/security/cve/CVE-2016-3706/" source="CVE"/>
		<reference ref_id="CVE-2016-4429" ref_url="https://www.suse.com/security/cve/CVE-2016-4429/" source="CVE"/>
		<reference ref_id="CVE-2016-5417" ref_url="https://www.suse.com/security/cve/CVE-2016-5417/" source="CVE"/>
		<reference ref_id="CVE-2016-6323" ref_url="https://www.suse.com/security/cve/CVE-2016-6323/" source="CVE"/>
		<reference ref_id="CVE-2017-1000366" ref_url="https://www.suse.com/security/cve/CVE-2017-1000366/" source="CVE"/>
		<reference ref_id="CVE-2017-1000408" ref_url="https://www.suse.com/security/cve/CVE-2017-1000408/" source="CVE"/>
		<reference ref_id="CVE-2017-1000409" ref_url="https://www.suse.com/security/cve/CVE-2017-1000409/" source="CVE"/>
		<reference ref_id="CVE-2017-12132" ref_url="https://www.suse.com/security/cve/CVE-2017-12132/" source="CVE"/>
		<reference ref_id="CVE-2017-12133" ref_url="https://www.suse.com/security/cve/CVE-2017-12133/" source="CVE"/>
		<reference ref_id="CVE-2017-15670" ref_url="https://www.suse.com/security/cve/CVE-2017-15670/" source="CVE"/>
		<reference ref_id="CVE-2017-15671" ref_url="https://www.suse.com/security/cve/CVE-2017-15671/" source="CVE"/>
		<reference ref_id="CVE-2017-15804" ref_url="https://www.suse.com/security/cve/CVE-2017-15804/" source="CVE"/>
		<reference ref_id="CVE-2017-16997" ref_url="https://www.suse.com/security/cve/CVE-2017-16997/" source="CVE"/>
		<reference ref_id="CVE-2017-17426" ref_url="https://www.suse.com/security/cve/CVE-2017-17426/" source="CVE"/>
		<reference ref_id="CVE-2017-18269" ref_url="https://www.suse.com/security/cve/CVE-2017-18269/" source="CVE"/>
		<reference ref_id="CVE-2018-1000001" ref_url="https://www.suse.com/security/cve/CVE-2018-1000001/" source="CVE"/>
		<reference ref_id="CVE-2018-11236" ref_url="https://www.suse.com/security/cve/CVE-2018-11236/" source="CVE"/>
		<reference ref_id="CVE-2018-11237" ref_url="https://www.suse.com/security/cve/CVE-2018-11237/" source="CVE"/>
		<reference ref_id="CVE-2018-6485" ref_url="https://www.suse.com/security/cve/CVE-2018-6485/" source="CVE"/>
		<reference ref_id="CVE-2018-6551" ref_url="https://www.suse.com/security/cve/CVE-2018-6551/" source="CVE"/>
		<description>
These are all security issues fixed in the glibc-locale-32bit-2.26-13.8.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5029/">CVE-2009-5029</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5064/">CVE-2009-5064</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3192/">CVE-2010-3192</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3406/">CVE-2012-3406</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-4412/">CVE-2012-4412</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0242/">CVE-2013-0242</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1914/">CVE-2013-1914</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2207/">CVE-2013-2207</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4237/">CVE-2013-4237</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4332/">CVE-2013-4332</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4458/">CVE-2013-4458</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7423/">CVE-2013-7423</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0475/">CVE-2014-0475</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-4043/">CVE-2014-4043</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-5119/">CVE-2014-5119</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-6040/">CVE-2014-6040</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7817/">CVE-2014-7817</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8121/">CVE-2014-8121</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9402/">CVE-2014-9402</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9761/">CVE-2014-9761</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1472/">CVE-2015-1472</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1473/">CVE-2015-1473</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1781/">CVE-2015-1781</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5180/">CVE-2015-5180</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7547/">CVE-2015-7547</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8776/">CVE-2015-8776</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8777/">CVE-2015-8777</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8778/">CVE-2015-8778</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8779/">CVE-2015-8779</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1234/">CVE-2016-1234</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3075/">CVE-2016-3075</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3706/">CVE-2016-3706</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4429/">CVE-2016-4429</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5417/">CVE-2016-5417</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6323/">CVE-2016-6323</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000366/">CVE-2017-1000366</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000408/">CVE-2017-1000408</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000409/">CVE-2017-1000409</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-12132/">CVE-2017-12132</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12133/">CVE-2017-12133</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15670/">CVE-2017-15670</cve>
	<cve impact="important" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15671/">CVE-2017-15671</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-15804/">CVE-2017-15804</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16997/">CVE-2017-16997</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17426/">CVE-2017-17426</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18269/">CVE-2017-18269</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000001/">CVE-2018-1000001</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11236/">CVE-2018-11236</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11237/">CVE-2018-11237</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-6485/">CVE-2018-6485</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6551/">CVE-2018-6551</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481163" comment="glibc-locale-32bit-2.26-13.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136975" version="1" class="patch">
	<metadata>
		<title>gnutls-3.6.7-6.8.1 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1118087" ref_url="https://bugzilla.suse.com/1118087" source="BUGZILLA"/>
		<reference ref_id="1130681" ref_url="https://bugzilla.suse.com/1130681" source="BUGZILLA"/>
		<reference ref_id="1130682" ref_url="https://bugzilla.suse.com/1130682" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16868" ref_url="https://www.suse.com/security/cve/CVE-2018-16868/" source="CVE"/>
		<reference ref_id="CVE-2019-3829" ref_url="https://www.suse.com/security/cve/CVE-2019-3829/" source="CVE"/>
		<reference ref_id="CVE-2019-3836" ref_url="https://www.suse.com/security/cve/CVE-2019-3836/" source="CVE"/>
		<description>
This update for gnutls fixes to version 3.6.7 the following issues:

Security issued fixed:

- CVE-2019-3836: Fixed an invalid pointer access via malformed TLS1.3 async messages (bsc#1130682).
- CVE-2019-3829: Fixed a double free vulnerability in the certificate verification API (bsc#1130681).
- CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification (bsc#1118087)

Non-security issue fixed:

- Update gnutls to support TLS 1.3 (fate#327114) 
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-30"/>
	<updated date="2019-04-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1118087">SUSE bug 1118087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130681">SUSE bug 1130681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130682">SUSE bug 1130682</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16868/">CVE-2018-16868</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3829/">CVE-2019-3829</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3836/">CVE-2019-3836</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789690" comment="gnutls-3.6.7-6.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789691" comment="libgnutls-devel-3.6.7-6.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789692" comment="libgnutls30-3.6.7-6.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490039" comment="libgnutls30-32bit-3.6.7-6.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789693" comment="libgnutlsxx-devel-3.6.7-6.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789694" comment="libgnutlsxx28-3.6.7-6.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136976" version="1" class="patch">
	<metadata>
		<title>gpg2-2.2.5-4.6.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1120346" ref_url="https://bugzilla.suse.com/1120346" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000858" ref_url="https://www.suse.com/security/cve/CVE-2018-1000858/" source="CVE"/>
		<description>
This update for gpg2 fixes the following issue:

Security issue fixed:

- CVE-2018-1000858: Fixed a Cross Site Request Forgery(CSRF) vulnerability in dirmngr
  that can result in Attacker controlled CSRF (bsc#1120346).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-01-07"/>
	<updated date="2019-01-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1120346">SUSE bug 1120346</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000858/">CVE-2018-1000858</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708504" comment="gpg2-2.2.5-4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490442" comment="gpg2-lang-2.2.5-4.6.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136977" version="1" class="patch">
	<metadata>
		<title>graphite2-devel-1.3.11-2.12 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-1521" ref_url="https://www.suse.com/security/cve/CVE-2016-1521/" source="CVE"/>
		<reference ref_id="CVE-2017-5436" ref_url="https://www.suse.com/security/cve/CVE-2017-5436/" source="CVE"/>
		<reference ref_id="CVE-2018-7999" ref_url="https://www.suse.com/security/cve/CVE-2018-7999/" source="CVE"/>
		<description>
These are all security issues fixed in the graphite2-devel-1.3.11-2.12 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1521/">CVE-2016-1521</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5436/">CVE-2017-5436</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7999/">CVE-2018-7999</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480301" comment="graphite2-devel-1.3.11-2.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480302" comment="libgraphite2-3-1.3.11-2.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480303" comment="libgraphite2-3-32bit-1.3.11-2.12 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136978" version="1" class="patch">
	<metadata>
		<title>grep-3.1-2.20 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-1345" ref_url="https://www.suse.com/security/cve/CVE-2015-1345/" source="CVE"/>
		<description>
These are all security issues fixed in the grep-3.1-2.20 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-1345/">CVE-2015-1345</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480304" comment="grep-3.1-2.20 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480305" comment="grep-lang-3.1-2.20 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136979" version="1" class="patch">
	<metadata>
		<title>groff-1.22.3-3.12 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-5044" ref_url="https://www.suse.com/security/cve/CVE-2009-5044/" source="CVE"/>
		<reference ref_id="CVE-2009-5080" ref_url="https://www.suse.com/security/cve/CVE-2009-5080/" source="CVE"/>
		<reference ref_id="CVE-2009-5081" ref_url="https://www.suse.com/security/cve/CVE-2009-5081/" source="CVE"/>
		<description>
These are all security issues fixed in the groff-1.22.3-3.12 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-5044/">CVE-2009-5044</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-5080/">CVE-2009-5080</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-5081/">CVE-2009-5081</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480306" comment="groff-1.22.3-3.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480307" comment="groff-full-1.22.3-3.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480308" comment="gxditview-1.22.3-3.24 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136980" version="1" class="patch">
	<metadata>
		<title>grub2-2.02-24.12 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-8370" ref_url="https://www.suse.com/security/cve/CVE-2015-8370/" source="CVE"/>
		<description>
These are all security issues fixed in the grub2-2.02-24.12 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8370/">CVE-2015-8370</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481179" comment="grub2-2.02-24.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481180" comment="grub2-i386-pc-2.02-24.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481181" comment="grub2-powerpc-ieee1275-2.02-24.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481182" comment="grub2-s390x-emu-2.02-24.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481183" comment="grub2-snapper-plugin-2.02-24.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481184" comment="grub2-systemd-sleep-plugin-2.02-24.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481185" comment="grub2-x86_64-efi-2.02-24.12 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136981" version="1" class="patch">
	<metadata>
		<title>gstreamer-1.12.5-1.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-10198" ref_url="https://www.suse.com/security/cve/CVE-2016-10198/" source="CVE"/>
		<reference ref_id="CVE-2016-10199" ref_url="https://www.suse.com/security/cve/CVE-2016-10199/" source="CVE"/>
		<reference ref_id="CVE-2017-5837" ref_url="https://www.suse.com/security/cve/CVE-2017-5837/" source="CVE"/>
		<reference ref_id="CVE-2017-5838" ref_url="https://www.suse.com/security/cve/CVE-2017-5838/" source="CVE"/>
		<reference ref_id="CVE-2017-5839" ref_url="https://www.suse.com/security/cve/CVE-2017-5839/" source="CVE"/>
		<reference ref_id="CVE-2017-5840" ref_url="https://www.suse.com/security/cve/CVE-2017-5840/" source="CVE"/>
		<reference ref_id="CVE-2017-5841" ref_url="https://www.suse.com/security/cve/CVE-2017-5841/" source="CVE"/>
		<reference ref_id="CVE-2017-5842" ref_url="https://www.suse.com/security/cve/CVE-2017-5842/" source="CVE"/>
		<reference ref_id="CVE-2017-5843" ref_url="https://www.suse.com/security/cve/CVE-2017-5843/" source="CVE"/>
		<reference ref_id="CVE-2017-5844" ref_url="https://www.suse.com/security/cve/CVE-2017-5844/" source="CVE"/>
		<reference ref_id="CVE-2017-5845" ref_url="https://www.suse.com/security/cve/CVE-2017-5845/" source="CVE"/>
		<reference ref_id="CVE-2017-5846" ref_url="https://www.suse.com/security/cve/CVE-2017-5846/" source="CVE"/>
		<reference ref_id="CVE-2017-5847" ref_url="https://www.suse.com/security/cve/CVE-2017-5847/" source="CVE"/>
		<reference ref_id="CVE-2017-5848" ref_url="https://www.suse.com/security/cve/CVE-2017-5848/" source="CVE"/>
		<description>
These are all security issues fixed in the gstreamer-1.12.5-1.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10198/">CVE-2016-10198</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10199/">CVE-2016-10199</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5837/">CVE-2017-5837</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5838/">CVE-2017-5838</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5839/">CVE-2017-5839</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5840/">CVE-2017-5840</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5841/">CVE-2017-5841</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5842/">CVE-2017-5842</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5843/">CVE-2017-5843</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5844/">CVE-2017-5844</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5845/">CVE-2017-5845</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5846/">CVE-2017-5846</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5847/">CVE-2017-5847</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5848/">CVE-2017-5848</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480314" comment="gstreamer-1.12.5-1.17 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480315" comment="gstreamer-lang-1.12.5-1.17 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480316" comment="libgstreamer-1_0-0-1.12.5-1.17 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136982" version="1" class="patch">
	<metadata>
		<title>gstreamer-plugins-good-1.12.5-1.39 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-5838" ref_url="https://www.suse.com/security/cve/CVE-2017-5838/" source="CVE"/>
		<description>
These are all security issues fixed in the gstreamer-plugins-good-1.12.5-1.39 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5838/">CVE-2017-5838</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480317" comment="gstreamer-plugins-good-1.12.5-1.39 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480318" comment="gstreamer-plugins-good-lang-1.12.5-1.39 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136983" version="1" class="patch">
	<metadata>
		<title>gtk2-devel-2.24.32-2.27 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-7447" ref_url="https://www.suse.com/security/cve/CVE-2013-7447/" source="CVE"/>
		<description>
These are all security issues fixed in the gtk2-devel-2.24.32-2.27 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7447/">CVE-2013-7447</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480319" comment="gtk2-devel-2.24.32-2.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480320" comment="gtk2-lang-2.24.32-2.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480321" comment="gtk2-tools-2.24.32-2.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480322" comment="libgtk-2_0-0-2.24.32-2.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480323" comment="typelib-1_0-Gtk-2_0-2.24.32-2.27 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136984" version="1" class="patch">
	<metadata>
		<title>gzip-1.9-2.21 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-2624" ref_url="https://www.suse.com/security/cve/CVE-2009-2624/" source="CVE"/>
		<reference ref_id="CVE-2010-0001" ref_url="https://www.suse.com/security/cve/CVE-2010-0001/" source="CVE"/>
		<description>
These are all security issues fixed in the gzip-1.9-2.21 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2624/">CVE-2009-2624</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0001/">CVE-2010-0001</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480324" comment="gzip-1.9-2.21 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136985" version="1" class="patch">
	<metadata>
		<title>hardlink-1.0+git.e66999f-1.25 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-3630" ref_url="https://www.suse.com/security/cve/CVE-2011-3630/" source="CVE"/>
		<reference ref_id="CVE-2011-3631" ref_url="https://www.suse.com/security/cve/CVE-2011-3631/" source="CVE"/>
		<reference ref_id="CVE-2011-3632" ref_url="https://www.suse.com/security/cve/CVE-2011-3632/" source="CVE"/>
		<description>
These are all security issues fixed in the hardlink-1.0+git.e66999f-1.25 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-3630/">CVE-2011-3630</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-3631/">CVE-2011-3631</cve>
	<cve impact="low" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2011-3632/">CVE-2011-3632</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480325" comment="hardlink-1.0+git.e66999f-1.25 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136986" version="1" class="patch">
	<metadata>
		<title>hplip-devel-3.18.6-5.7.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-0839" ref_url="https://www.suse.com/security/cve/CVE-2015-0839/" source="CVE"/>
		<description>
These are all security issues fixed in the hplip-devel-3.18.6-5.7.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0839/">CVE-2015-0839</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481186" comment="hplip-devel-3.18.6-5.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481187" comment="hplip-hpijs-3.18.6-5.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481188" comment="hplip-sane-3.18.6-5.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136987" version="1" class="patch">
	<metadata>
		<title>hyper-v-7-4.3 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-2669" ref_url="https://www.suse.com/security/cve/CVE-2012-2669/" source="CVE"/>
		<reference ref_id="CVE-2012-5532" ref_url="https://www.suse.com/security/cve/CVE-2012-5532/" source="CVE"/>
		<description>
These are all security issues fixed in the hyper-v-7-4.3 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-2669/">CVE-2012-2669</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5532/">CVE-2012-5532</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480329" comment="hyper-v-7-4.3 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136988" version="1" class="patch">
	<metadata>
		<title>ipsec-tools-0.8.2-5.35 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-10396" ref_url="https://www.suse.com/security/cve/CVE-2016-10396/" source="CVE"/>
		<description>
These are all security issues fixed in the ipsec-tools-0.8.2-5.35 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10396/">CVE-2016-10396</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480330" comment="ipsec-tools-0.8.2-5.35 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136989" version="1" class="patch">
	<metadata>
		<title>iputils-s20161105-6.10 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-2529" ref_url="https://www.suse.com/security/cve/CVE-2010-2529/" source="CVE"/>
		<description>
These are all security issues fixed in the iputils-s20161105-6.10 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2529/">CVE-2010-2529</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480331" comment="iputils-s20161105-6.10 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136990" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1010783" ref_url="https://bugzilla.suse.com/1010783" source="BUGZILLA"/>
		<reference ref_id="1117505" ref_url="https://bugzilla.suse.com/1117505" source="BUGZILLA"/>
		<reference ref_id="1117511" ref_url="https://bugzilla.suse.com/1117511" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-9396" ref_url="https://www.suse.com/security/cve/CVE-2016-9396/" source="CVE"/>
		<reference ref_id="CVE-2018-19539" ref_url="https://www.suse.com/security/cve/CVE-2018-19539/" source="CVE"/>
		<reference ref_id="CVE-2018-19542" ref_url="https://www.suse.com/security/cve/CVE-2018-19542/" source="CVE"/>
		<description>
This update for jasper fixes the following issues:

Security issues fixed:

- CVE-2018-19542: Fixed a denial of service in jp2_decode (bsc#1117505).
- CVE-2018-19539: Fixed a denial of service in jas_image_readcmpt (bsc#1117511).
- CVE-2016-9396: Fixed a denial of service in jpc_cox_getcompparms (bsc#1010783).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-24"/>
	<updated date="2019-04-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1010783">SUSE bug 1010783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117505">SUSE bug 1117505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117511">SUSE bug 1117511</bugzilla>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9396/">CVE-2016-9396</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19539/">CVE-2018-19539</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19542/">CVE-2018-19542</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789695" comment="libjasper4-2.0.14-3.3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136991" version="1" class="patch">
	<metadata>
		<title>jq-1.5-1.27 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-8863" ref_url="https://www.suse.com/security/cve/CVE-2015-8863/" source="CVE"/>
		<reference ref_id="CVE-2016-4074" ref_url="https://www.suse.com/security/cve/CVE-2016-4074/" source="CVE"/>
		<description>
These are all security issues fixed in the jq-1.5-1.27 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8863/">CVE-2015-8863</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4074/">CVE-2016-4074</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481193" comment="jq-1.5-1.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481194" comment="libjq-devel-1.5-1.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481195" comment="libjq1-1.5-1.27 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136992" version="1" class="patch">
	<metadata>
		<title>kdump-0.9.0-2.3 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-5759" ref_url="https://www.suse.com/security/cve/CVE-2016-5759/" source="CVE"/>
		<description>
These are all security issues fixed in the kdump-0.9.0-2.3 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5759/">CVE-2016-5759</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481198" comment="kdump-0.9.0-2.3 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136993" version="1" class="patch">
	<metadata>
		<title>kernel-default-4.12.14-195.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-1000251" ref_url="https://www.suse.com/security/cve/CVE-2017-1000251/" source="CVE"/>
		<reference ref_id="CVE-2017-1000252" ref_url="https://www.suse.com/security/cve/CVE-2017-1000252/" source="CVE"/>
		<reference ref_id="CVE-2017-1000255" ref_url="https://www.suse.com/security/cve/CVE-2017-1000255/" source="CVE"/>
		<reference ref_id="CVE-2017-1000410" ref_url="https://www.suse.com/security/cve/CVE-2017-1000410/" source="CVE"/>
		<reference ref_id="CVE-2017-11473" ref_url="https://www.suse.com/security/cve/CVE-2017-11473/" source="CVE"/>
		<reference ref_id="CVE-2017-11600" ref_url="https://www.suse.com/security/cve/CVE-2017-11600/" source="CVE"/>
		<reference ref_id="CVE-2017-12153" ref_url="https://www.suse.com/security/cve/CVE-2017-12153/" source="CVE"/>
		<reference ref_id="CVE-2017-12154" ref_url="https://www.suse.com/security/cve/CVE-2017-12154/" source="CVE"/>
		<reference ref_id="CVE-2017-12190" ref_url="https://www.suse.com/security/cve/CVE-2017-12190/" source="CVE"/>
		<reference ref_id="CVE-2017-12193" ref_url="https://www.suse.com/security/cve/CVE-2017-12193/" source="CVE"/>
		<reference ref_id="CVE-2017-13080" ref_url="https://www.suse.com/security/cve/CVE-2017-13080/" source="CVE"/>
		<reference ref_id="CVE-2017-13166" ref_url="https://www.suse.com/security/cve/CVE-2017-13166/" source="CVE"/>
		<reference ref_id="CVE-2017-14051" ref_url="https://www.suse.com/security/cve/CVE-2017-14051/" source="CVE"/>
		<reference ref_id="CVE-2017-14489" ref_url="https://www.suse.com/security/cve/CVE-2017-14489/" source="CVE"/>
		<reference ref_id="CVE-2017-15115" ref_url="https://www.suse.com/security/cve/CVE-2017-15115/" source="CVE"/>
		<reference ref_id="CVE-2017-15127" ref_url="https://www.suse.com/security/cve/CVE-2017-15127/" source="CVE"/>
		<reference ref_id="CVE-2017-15128" ref_url="https://www.suse.com/security/cve/CVE-2017-15128/" source="CVE"/>
		<reference ref_id="CVE-2017-15129" ref_url="https://www.suse.com/security/cve/CVE-2017-15129/" source="CVE"/>
		<reference ref_id="CVE-2017-15265" ref_url="https://www.suse.com/security/cve/CVE-2017-15265/" source="CVE"/>
		<reference ref_id="CVE-2017-15537" ref_url="https://www.suse.com/security/cve/CVE-2017-15537/" source="CVE"/>
		<reference ref_id="CVE-2017-15649" ref_url="https://www.suse.com/security/cve/CVE-2017-15649/" source="CVE"/>
		<reference ref_id="CVE-2017-15951" ref_url="https://www.suse.com/security/cve/CVE-2017-15951/" source="CVE"/>
		<reference ref_id="CVE-2017-16525" ref_url="https://www.suse.com/security/cve/CVE-2017-16525/" source="CVE"/>
		<reference ref_id="CVE-2017-16527" ref_url="https://www.suse.com/security/cve/CVE-2017-16527/" source="CVE"/>
		<reference ref_id="CVE-2017-16528" ref_url="https://www.suse.com/security/cve/CVE-2017-16528/" source="CVE"/>
		<reference ref_id="CVE-2017-16529" ref_url="https://www.suse.com/security/cve/CVE-2017-16529/" source="CVE"/>
		<reference ref_id="CVE-2017-16531" ref_url="https://www.suse.com/security/cve/CVE-2017-16531/" source="CVE"/>
		<reference ref_id="CVE-2017-16533" ref_url="https://www.suse.com/security/cve/CVE-2017-16533/" source="CVE"/>
		<reference ref_id="CVE-2017-16534" ref_url="https://www.suse.com/security/cve/CVE-2017-16534/" source="CVE"/>
		<reference ref_id="CVE-2017-16535" ref_url="https://www.suse.com/security/cve/CVE-2017-16535/" source="CVE"/>
		<reference ref_id="CVE-2017-16536" ref_url="https://www.suse.com/security/cve/CVE-2017-16536/" source="CVE"/>
		<reference ref_id="CVE-2017-16537" ref_url="https://www.suse.com/security/cve/CVE-2017-16537/" source="CVE"/>
		<reference ref_id="CVE-2017-16538" ref_url="https://www.suse.com/security/cve/CVE-2017-16538/" source="CVE"/>
		<reference ref_id="CVE-2017-16644" ref_url="https://www.suse.com/security/cve/CVE-2017-16644/" source="CVE"/>
		<reference ref_id="CVE-2017-16645" ref_url="https://www.suse.com/security/cve/CVE-2017-16645/" source="CVE"/>
		<reference ref_id="CVE-2017-16646" ref_url="https://www.suse.com/security/cve/CVE-2017-16646/" source="CVE"/>
		<reference ref_id="CVE-2017-16647" ref_url="https://www.suse.com/security/cve/CVE-2017-16647/" source="CVE"/>
		<reference ref_id="CVE-2017-16649" ref_url="https://www.suse.com/security/cve/CVE-2017-16649/" source="CVE"/>
		<reference ref_id="CVE-2017-16650" ref_url="https://www.suse.com/security/cve/CVE-2017-16650/" source="CVE"/>
		<reference ref_id="CVE-2017-16911" ref_url="https://www.suse.com/security/cve/CVE-2017-16911/" source="CVE"/>
		<reference ref_id="CVE-2017-16912" ref_url="https://www.suse.com/security/cve/CVE-2017-16912/" source="CVE"/>
		<reference ref_id="CVE-2017-16913" ref_url="https://www.suse.com/security/cve/CVE-2017-16913/" source="CVE"/>
		<reference ref_id="CVE-2017-16914" ref_url="https://www.suse.com/security/cve/CVE-2017-16914/" source="CVE"/>
		<reference ref_id="CVE-2017-16939" ref_url="https://www.suse.com/security/cve/CVE-2017-16939/" source="CVE"/>
		<reference ref_id="CVE-2017-16994" ref_url="https://www.suse.com/security/cve/CVE-2017-16994/" source="CVE"/>
		<reference ref_id="CVE-2017-16995" ref_url="https://www.suse.com/security/cve/CVE-2017-16995/" source="CVE"/>
		<reference ref_id="CVE-2017-16996" ref_url="https://www.suse.com/security/cve/CVE-2017-16996/" source="CVE"/>
		<reference ref_id="CVE-2017-17052" ref_url="https://www.suse.com/security/cve/CVE-2017-17052/" source="CVE"/>
		<reference ref_id="CVE-2017-17448" ref_url="https://www.suse.com/security/cve/CVE-2017-17448/" source="CVE"/>
		<reference ref_id="CVE-2017-17449" ref_url="https://www.suse.com/security/cve/CVE-2017-17449/" source="CVE"/>
		<reference ref_id="CVE-2017-17450" ref_url="https://www.suse.com/security/cve/CVE-2017-17450/" source="CVE"/>
		<reference ref_id="CVE-2017-17558" ref_url="https://www.suse.com/security/cve/CVE-2017-17558/" source="CVE"/>
		<reference ref_id="CVE-2017-17712" ref_url="https://www.suse.com/security/cve/CVE-2017-17712/" source="CVE"/>
		<reference ref_id="CVE-2017-17741" ref_url="https://www.suse.com/security/cve/CVE-2017-17741/" source="CVE"/>
		<reference ref_id="CVE-2017-17805" ref_url="https://www.suse.com/security/cve/CVE-2017-17805/" source="CVE"/>
		<reference ref_id="CVE-2017-17806" ref_url="https://www.suse.com/security/cve/CVE-2017-17806/" source="CVE"/>
		<reference ref_id="CVE-2017-17852" ref_url="https://www.suse.com/security/cve/CVE-2017-17852/" source="CVE"/>
		<reference ref_id="CVE-2017-17853" ref_url="https://www.suse.com/security/cve/CVE-2017-17853/" source="CVE"/>
		<reference ref_id="CVE-2017-17854" ref_url="https://www.suse.com/security/cve/CVE-2017-17854/" source="CVE"/>
		<reference ref_id="CVE-2017-17855" ref_url="https://www.suse.com/security/cve/CVE-2017-17855/" source="CVE"/>
		<reference ref_id="CVE-2017-17856" ref_url="https://www.suse.com/security/cve/CVE-2017-17856/" source="CVE"/>
		<reference ref_id="CVE-2017-17857" ref_url="https://www.suse.com/security/cve/CVE-2017-17857/" source="CVE"/>
		<reference ref_id="CVE-2017-17862" ref_url="https://www.suse.com/security/cve/CVE-2017-17862/" source="CVE"/>
		<reference ref_id="CVE-2017-17864" ref_url="https://www.suse.com/security/cve/CVE-2017-17864/" source="CVE"/>
		<reference ref_id="CVE-2017-17975" ref_url="https://www.suse.com/security/cve/CVE-2017-17975/" source="CVE"/>
		<reference ref_id="CVE-2017-18075" ref_url="https://www.suse.com/security/cve/CVE-2017-18075/" source="CVE"/>
		<reference ref_id="CVE-2017-18202" ref_url="https://www.suse.com/security/cve/CVE-2017-18202/" source="CVE"/>
		<reference ref_id="CVE-2017-18203" ref_url="https://www.suse.com/security/cve/CVE-2017-18203/" source="CVE"/>
		<reference ref_id="CVE-2017-18204" ref_url="https://www.suse.com/security/cve/CVE-2017-18204/" source="CVE"/>
		<reference ref_id="CVE-2017-18208" ref_url="https://www.suse.com/security/cve/CVE-2017-18208/" source="CVE"/>
		<reference ref_id="CVE-2017-18224" ref_url="https://www.suse.com/security/cve/CVE-2017-18224/" source="CVE"/>
		<reference ref_id="CVE-2017-18344" ref_url="https://www.suse.com/security/cve/CVE-2017-18344/" source="CVE"/>
		<reference ref_id="CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715/" source="CVE"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2017-5754" ref_url="https://www.suse.com/security/cve/CVE-2017-5754/" source="CVE"/>
		<reference ref_id="CVE-2017-7541" ref_url="https://www.suse.com/security/cve/CVE-2017-7541/" source="CVE"/>
		<reference ref_id="CVE-2017-7542" ref_url="https://www.suse.com/security/cve/CVE-2017-7542/" source="CVE"/>
		<reference ref_id="CVE-2017-8824" ref_url="https://www.suse.com/security/cve/CVE-2017-8824/" source="CVE"/>
		<reference ref_id="CVE-2017-8831" ref_url="https://www.suse.com/security/cve/CVE-2017-8831/" source="CVE"/>
		<reference ref_id="CVE-2018-1000004" ref_url="https://www.suse.com/security/cve/CVE-2018-1000004/" source="CVE"/>
		<reference ref_id="CVE-2018-1000028" ref_url="https://www.suse.com/security/cve/CVE-2018-1000028/" source="CVE"/>
		<reference ref_id="CVE-2018-1000200" ref_url="https://www.suse.com/security/cve/CVE-2018-1000200/" source="CVE"/>
		<reference ref_id="CVE-2018-1000204" ref_url="https://www.suse.com/security/cve/CVE-2018-1000204/" source="CVE"/>
		<reference ref_id="CVE-2018-10087" ref_url="https://www.suse.com/security/cve/CVE-2018-10087/" source="CVE"/>
		<reference ref_id="CVE-2018-10124" ref_url="https://www.suse.com/security/cve/CVE-2018-10124/" source="CVE"/>
		<reference ref_id="CVE-2018-10323" ref_url="https://www.suse.com/security/cve/CVE-2018-10323/" source="CVE"/>
		<reference ref_id="CVE-2018-1065" ref_url="https://www.suse.com/security/cve/CVE-2018-1065/" source="CVE"/>
		<reference ref_id="CVE-2018-1068" ref_url="https://www.suse.com/security/cve/CVE-2018-1068/" source="CVE"/>
		<reference ref_id="CVE-2018-10853" ref_url="https://www.suse.com/security/cve/CVE-2018-10853/" source="CVE"/>
		<reference ref_id="CVE-2018-10902" ref_url="https://www.suse.com/security/cve/CVE-2018-10902/" source="CVE"/>
		<reference ref_id="CVE-2018-1091" ref_url="https://www.suse.com/security/cve/CVE-2018-1091/" source="CVE"/>
		<reference ref_id="CVE-2018-10938" ref_url="https://www.suse.com/security/cve/CVE-2018-10938/" source="CVE"/>
		<reference ref_id="CVE-2018-1094" ref_url="https://www.suse.com/security/cve/CVE-2018-1094/" source="CVE"/>
		<reference ref_id="CVE-2018-10940" ref_url="https://www.suse.com/security/cve/CVE-2018-10940/" source="CVE"/>
		<reference ref_id="CVE-2018-1108" ref_url="https://www.suse.com/security/cve/CVE-2018-1108/" source="CVE"/>
		<reference ref_id="CVE-2018-1118" ref_url="https://www.suse.com/security/cve/CVE-2018-1118/" source="CVE"/>
		<reference ref_id="CVE-2018-1120" ref_url="https://www.suse.com/security/cve/CVE-2018-1120/" source="CVE"/>
		<reference ref_id="CVE-2018-1128" ref_url="https://www.suse.com/security/cve/CVE-2018-1128/" source="CVE"/>
		<reference ref_id="CVE-2018-1129" ref_url="https://www.suse.com/security/cve/CVE-2018-1129/" source="CVE"/>
		<reference ref_id="CVE-2018-1130" ref_url="https://www.suse.com/security/cve/CVE-2018-1130/" source="CVE"/>
		<reference ref_id="CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126/" source="CVE"/>
		<reference ref_id="CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127/" source="CVE"/>
		<reference ref_id="CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130/" source="CVE"/>
		<reference ref_id="CVE-2018-12232" ref_url="https://www.suse.com/security/cve/CVE-2018-12232/" source="CVE"/>
		<reference ref_id="CVE-2018-12233" ref_url="https://www.suse.com/security/cve/CVE-2018-12233/" source="CVE"/>
		<reference ref_id="CVE-2018-12896" ref_url="https://www.suse.com/security/cve/CVE-2018-12896/" source="CVE"/>
		<reference ref_id="CVE-2018-13053" ref_url="https://www.suse.com/security/cve/CVE-2018-13053/" source="CVE"/>
		<reference ref_id="CVE-2018-13093" ref_url="https://www.suse.com/security/cve/CVE-2018-13093/" source="CVE"/>
		<reference ref_id="CVE-2018-13094" ref_url="https://www.suse.com/security/cve/CVE-2018-13094/" source="CVE"/>
		<reference ref_id="CVE-2018-13095" ref_url="https://www.suse.com/security/cve/CVE-2018-13095/" source="CVE"/>
		<reference ref_id="CVE-2018-13405" ref_url="https://www.suse.com/security/cve/CVE-2018-13405/" source="CVE"/>
		<reference ref_id="CVE-2018-13406" ref_url="https://www.suse.com/security/cve/CVE-2018-13406/" source="CVE"/>
		<reference ref_id="CVE-2018-14613" ref_url="https://www.suse.com/security/cve/CVE-2018-14613/" source="CVE"/>
		<reference ref_id="CVE-2018-14617" ref_url="https://www.suse.com/security/cve/CVE-2018-14617/" source="CVE"/>
		<reference ref_id="CVE-2018-14625" ref_url="https://www.suse.com/security/cve/CVE-2018-14625/" source="CVE"/>
		<reference ref_id="CVE-2018-14633" ref_url="https://www.suse.com/security/cve/CVE-2018-14633/" source="CVE"/>
		<reference ref_id="CVE-2018-15572" ref_url="https://www.suse.com/security/cve/CVE-2018-15572/" source="CVE"/>
		<reference ref_id="CVE-2018-16658" ref_url="https://www.suse.com/security/cve/CVE-2018-16658/" source="CVE"/>
		<reference ref_id="CVE-2018-16862" ref_url="https://www.suse.com/security/cve/CVE-2018-16862/" source="CVE"/>
		<reference ref_id="CVE-2018-16880" ref_url="https://www.suse.com/security/cve/CVE-2018-16880/" source="CVE"/>
		<reference ref_id="CVE-2018-16884" ref_url="https://www.suse.com/security/cve/CVE-2018-16884/" source="CVE"/>
		<reference ref_id="CVE-2018-17182" ref_url="https://www.suse.com/security/cve/CVE-2018-17182/" source="CVE"/>
		<reference ref_id="CVE-2018-18281" ref_url="https://www.suse.com/security/cve/CVE-2018-18281/" source="CVE"/>
		<reference ref_id="CVE-2018-18386" ref_url="https://www.suse.com/security/cve/CVE-2018-18386/" source="CVE"/>
		<reference ref_id="CVE-2018-18397" ref_url="https://www.suse.com/security/cve/CVE-2018-18397/" source="CVE"/>
		<reference ref_id="CVE-2018-18445" ref_url="https://www.suse.com/security/cve/CVE-2018-18445/" source="CVE"/>
		<reference ref_id="CVE-2018-18710" ref_url="https://www.suse.com/security/cve/CVE-2018-18710/" source="CVE"/>
		<reference ref_id="CVE-2018-19407" ref_url="https://www.suse.com/security/cve/CVE-2018-19407/" source="CVE"/>
		<reference ref_id="CVE-2018-19824" ref_url="https://www.suse.com/security/cve/CVE-2018-19824/" source="CVE"/>
		<reference ref_id="CVE-2018-19854" ref_url="https://www.suse.com/security/cve/CVE-2018-19854/" source="CVE"/>
		<reference ref_id="CVE-2018-19985" ref_url="https://www.suse.com/security/cve/CVE-2018-19985/" source="CVE"/>
		<reference ref_id="CVE-2018-20169" ref_url="https://www.suse.com/security/cve/CVE-2018-20169/" source="CVE"/>
		<reference ref_id="CVE-2018-20669" ref_url="https://www.suse.com/security/cve/CVE-2018-20669/" source="CVE"/>
		<reference ref_id="CVE-2018-3620" ref_url="https://www.suse.com/security/cve/CVE-2018-3620/" source="CVE"/>
		<reference ref_id="CVE-2018-3639" ref_url="https://www.suse.com/security/cve/CVE-2018-3639/" source="CVE"/>
		<reference ref_id="CVE-2018-3646" ref_url="https://www.suse.com/security/cve/CVE-2018-3646/" source="CVE"/>
		<reference ref_id="CVE-2018-5332" ref_url="https://www.suse.com/security/cve/CVE-2018-5332/" source="CVE"/>
		<reference ref_id="CVE-2018-5333" ref_url="https://www.suse.com/security/cve/CVE-2018-5333/" source="CVE"/>
		<reference ref_id="CVE-2018-5390" ref_url="https://www.suse.com/security/cve/CVE-2018-5390/" source="CVE"/>
		<reference ref_id="CVE-2018-5391" ref_url="https://www.suse.com/security/cve/CVE-2018-5391/" source="CVE"/>
		<reference ref_id="CVE-2018-5803" ref_url="https://www.suse.com/security/cve/CVE-2018-5803/" source="CVE"/>
		<reference ref_id="CVE-2018-5848" ref_url="https://www.suse.com/security/cve/CVE-2018-5848/" source="CVE"/>
		<reference ref_id="CVE-2018-6554" ref_url="https://www.suse.com/security/cve/CVE-2018-6554/" source="CVE"/>
		<reference ref_id="CVE-2018-6555" ref_url="https://www.suse.com/security/cve/CVE-2018-6555/" source="CVE"/>
		<reference ref_id="CVE-2018-6927" ref_url="https://www.suse.com/security/cve/CVE-2018-6927/" source="CVE"/>
		<reference ref_id="CVE-2018-7492" ref_url="https://www.suse.com/security/cve/CVE-2018-7492/" source="CVE"/>
		<reference ref_id="CVE-2018-7566" ref_url="https://www.suse.com/security/cve/CVE-2018-7566/" source="CVE"/>
		<reference ref_id="CVE-2018-7740" ref_url="https://www.suse.com/security/cve/CVE-2018-7740/" source="CVE"/>
		<reference ref_id="CVE-2018-8043" ref_url="https://www.suse.com/security/cve/CVE-2018-8043/" source="CVE"/>
		<reference ref_id="CVE-2018-8087" ref_url="https://www.suse.com/security/cve/CVE-2018-8087/" source="CVE"/>
		<reference ref_id="CVE-2018-8781" ref_url="https://www.suse.com/security/cve/CVE-2018-8781/" source="CVE"/>
		<reference ref_id="CVE-2018-8822" ref_url="https://www.suse.com/security/cve/CVE-2018-8822/" source="CVE"/>
		<reference ref_id="CVE-2018-9363" ref_url="https://www.suse.com/security/cve/CVE-2018-9363/" source="CVE"/>
		<reference ref_id="CVE-2018-9385" ref_url="https://www.suse.com/security/cve/CVE-2018-9385/" source="CVE"/>
		<reference ref_id="CVE-2018-9568" ref_url="https://www.suse.com/security/cve/CVE-2018-9568/" source="CVE"/>
		<reference ref_id="CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091/" source="CVE"/>
		<reference ref_id="CVE-2019-2024" ref_url="https://www.suse.com/security/cve/CVE-2019-2024/" source="CVE"/>
		<reference ref_id="CVE-2019-3459" ref_url="https://www.suse.com/security/cve/CVE-2019-3459/" source="CVE"/>
		<reference ref_id="CVE-2019-3460" ref_url="https://www.suse.com/security/cve/CVE-2019-3460/" source="CVE"/>
		<reference ref_id="CVE-2019-3560" ref_url="https://www.suse.com/security/cve/CVE-2019-3560/" source="CVE"/>
		<reference ref_id="CVE-2019-3819" ref_url="https://www.suse.com/security/cve/CVE-2019-3819/" source="CVE"/>
		<reference ref_id="CVE-2019-6974" ref_url="https://www.suse.com/security/cve/CVE-2019-6974/" source="CVE"/>
		<reference ref_id="CVE-2019-7221" ref_url="https://www.suse.com/security/cve/CVE-2019-7221/" source="CVE"/>
		<reference ref_id="CVE-2019-7222" ref_url="https://www.suse.com/security/cve/CVE-2019-7222/" source="CVE"/>
		<reference ref_id="CVE-2019-7308" ref_url="https://www.suse.com/security/cve/CVE-2019-7308/" source="CVE"/>
		<reference ref_id="CVE-2019-8912" ref_url="https://www.suse.com/security/cve/CVE-2019-8912/" source="CVE"/>
		<reference ref_id="CVE-2019-8980" ref_url="https://www.suse.com/security/cve/CVE-2019-8980/" source="CVE"/>
		<reference ref_id="CVE-2019-9003" ref_url="https://www.suse.com/security/cve/CVE-2019-9003/" source="CVE"/>
		<reference ref_id="CVE-2019-9213" ref_url="https://www.suse.com/security/cve/CVE-2019-9213/" source="CVE"/>
		<description>
These are all security issues fixed in the kernel-default-4.12.14-195.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000251/">CVE-2017-1000251</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000252/">CVE-2017-1000252</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000255/">CVE-2017-1000255</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000410/">CVE-2017-1000410</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11473/">CVE-2017-11473</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-11600/">CVE-2017-11600</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12153/">CVE-2017-12153</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12154/">CVE-2017-12154</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12190/">CVE-2017-12190</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12193/">CVE-2017-12193</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13080/">CVE-2017-13080</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13166/">CVE-2017-13166</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14051/">CVE-2017-14051</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14489/">CVE-2017-14489</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15115/">CVE-2017-15115</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15127/">CVE-2017-15127</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15128/">CVE-2017-15128</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-15129/">CVE-2017-15129</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15265/">CVE-2017-15265</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15537/">CVE-2017-15537</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15649/">CVE-2017-15649</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15951/">CVE-2017-15951</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16525/">CVE-2017-16525</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16527/">CVE-2017-16527</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16528/">CVE-2017-16528</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16529/">CVE-2017-16529</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16531/">CVE-2017-16531</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16533/">CVE-2017-16533</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16534/">CVE-2017-16534</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16535/">CVE-2017-16535</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16536/">CVE-2017-16536</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16537/">CVE-2017-16537</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16538/">CVE-2017-16538</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16644/">CVE-2017-16644</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16645/">CVE-2017-16645</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16646/">CVE-2017-16646</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16647/">CVE-2017-16647</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16649/">CVE-2017-16649</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16650/">CVE-2017-16650</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-16911/">CVE-2017-16911</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16912/">CVE-2017-16912</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16913/">CVE-2017-16913</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16914/">CVE-2017-16914</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16939/">CVE-2017-16939</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-16994/">CVE-2017-16994</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16995/">CVE-2017-16995</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16996/">CVE-2017-16996</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17052/">CVE-2017-17052</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17448/">CVE-2017-17448</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17449/">CVE-2017-17449</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-17450/">CVE-2017-17450</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17558/">CVE-2017-17558</cve>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17712/">CVE-2017-17712</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17741/">CVE-2017-17741</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17805/">CVE-2017-17805</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17806/">CVE-2017-17806</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17852/">CVE-2017-17852</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17853/">CVE-2017-17853</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-17854/">CVE-2017-17854</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17855/">CVE-2017-17855</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17856/">CVE-2017-17856</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17857/">CVE-2017-17857</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17862/">CVE-2017-17862</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17864/">CVE-2017-17864</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17975/">CVE-2017-17975</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18075/">CVE-2017-18075</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18202/">CVE-2017-18202</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18203/">CVE-2017-18203</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18204/">CVE-2017-18204</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18208/">CVE-2017-18208</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18224/">CVE-2017-18224</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-18344/">CVE-2017-18344</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5754/">CVE-2017-5754</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7541/">CVE-2017-7541</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7542/">CVE-2017-7542</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8824/">CVE-2017-8824</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8831/">CVE-2017-8831</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000004/">CVE-2018-1000004</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000028/">CVE-2018-1000028</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000200/">CVE-2018-1000200</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000204/">CVE-2018-1000204</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10087/">CVE-2018-10087</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10124/">CVE-2018-10124</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10323/">CVE-2018-10323</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1065/">CVE-2018-1065</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1068/">CVE-2018-1068</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10853/">CVE-2018-10853</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10902/">CVE-2018-10902</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1091/">CVE-2018-1091</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10938/">CVE-2018-10938</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1094/">CVE-2018-1094</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10940/">CVE-2018-10940</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1108/">CVE-2018-1108</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1118/">CVE-2018-1118</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1120/">CVE-2018-1120</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2018-1128/">CVE-2018-1128</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1129/">CVE-2018-1129</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1130/">CVE-2018-1130</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<cve href="https://www.suse.com/security/cve/CVE-2018-12232/">CVE-2018-12232</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12233/">CVE-2018-12233</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12896/">CVE-2018-12896</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13053/">CVE-2018-13053</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-13093/">CVE-2018-13093</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-13094/">CVE-2018-13094</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-13095/">CVE-2018-13095</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-13405/">CVE-2018-13405</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-13406/">CVE-2018-13406</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14613/">CVE-2018-14613</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14617/">CVE-2018-14617</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-14625/">CVE-2018-14625</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14633/">CVE-2018-14633</cve>
	<cve impact="important" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-15572/">CVE-2018-15572</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16658/">CVE-2018-16658</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16862/">CVE-2018-16862</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16880/">CVE-2018-16880</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16884/">CVE-2018-16884</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17182/">CVE-2018-17182</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18281/">CVE-2018-18281</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18386/">CVE-2018-18386</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-18397/">CVE-2018-18397</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18445/">CVE-2018-18445</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18710/">CVE-2018-18710</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19407/">CVE-2018-19407</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19824/">CVE-2018-19824</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-19854/">CVE-2018-19854</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-19985/">CVE-2018-19985</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20169/">CVE-2018-20169</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20669/">CVE-2018-20669</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3620/">CVE-2018-3620</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3639/">CVE-2018-3639</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3646/">CVE-2018-3646</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-5332/">CVE-2018-5332</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5333/">CVE-2018-5333</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5390/">CVE-2018-5390</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5391/">CVE-2018-5391</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5803/">CVE-2018-5803</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5848/">CVE-2018-5848</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6554/">CVE-2018-6554</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-6555/">CVE-2018-6555</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6927/">CVE-2018-6927</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7492/">CVE-2018-7492</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-7566/">CVE-2018-7566</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7740/">CVE-2018-7740</cve>
	<cve impact="low" cvss3="0/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-8043/">CVE-2018-8043</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-8087/">CVE-2018-8087</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8781/">CVE-2018-8781</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8822/">CVE-2018-8822</cve>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-9363/">CVE-2018-9363</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9385/">CVE-2018-9385</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-9568/">CVE-2018-9568</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2024/">CVE-2019-2024</cve>
	<cve impact="moderate" cvss3="2.6/CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3459/">CVE-2019-3459</cve>
	<cve impact="moderate" cvss3="2.6/CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3460/">CVE-2019-3460</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3560/">CVE-2019-3560</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3819/">CVE-2019-3819</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6974/">CVE-2019-6974</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-7221/">CVE-2019-7221</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-7222/">CVE-2019-7222</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-7308/">CVE-2019-7308</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8912/">CVE-2019-8912</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8980/">CVE-2019-8980</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9003/">CVE-2019-9003</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9213/">CVE-2019-9213</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481199" comment="kernel-default-4.12.14-195.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481200" comment="kernel-default-base-4.12.14-195.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481201" comment="kernel-default-devel-4.12.14-195.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481202" comment="kernel-default-man-4.12.14-195.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481203" comment="kernel-devel-4.12.14-195.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481204" comment="kernel-macros-4.12.14-195.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481205" comment="kernel-zfcpdump-4.12.14-195.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136994" version="1" class="patch">
	<metadata>
		<title>kernel-firmware-20190118-1.16 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-13080" ref_url="https://www.suse.com/security/cve/CVE-2017-13080/" source="CVE"/>
		<reference ref_id="CVE-2017-13081" ref_url="https://www.suse.com/security/cve/CVE-2017-13081/" source="CVE"/>
		<reference ref_id="CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715/" source="CVE"/>
		<description>
These are all security issues fixed in the kernel-firmware-20190118-1.16 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13080/">CVE-2017-13080</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13081/">CVE-2017-13081</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481206" comment="kernel-firmware-20190118-1.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481207" comment="ucode-amd-20190118-1.16 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136995" version="1" class="patch">
	<metadata>
		<title>krb5-1.16.3-1.16 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-5351" ref_url="https://www.suse.com/security/cve/CVE-2014-5351/" source="CVE"/>
		<reference ref_id="CVE-2014-5352" ref_url="https://www.suse.com/security/cve/CVE-2014-5352/" source="CVE"/>
		<reference ref_id="CVE-2014-5353" ref_url="https://www.suse.com/security/cve/CVE-2014-5353/" source="CVE"/>
		<reference ref_id="CVE-2014-5354" ref_url="https://www.suse.com/security/cve/CVE-2014-5354/" source="CVE"/>
		<reference ref_id="CVE-2014-5355" ref_url="https://www.suse.com/security/cve/CVE-2014-5355/" source="CVE"/>
		<reference ref_id="CVE-2014-9421" ref_url="https://www.suse.com/security/cve/CVE-2014-9421/" source="CVE"/>
		<reference ref_id="CVE-2014-9422" ref_url="https://www.suse.com/security/cve/CVE-2014-9422/" source="CVE"/>
		<reference ref_id="CVE-2014-9423" ref_url="https://www.suse.com/security/cve/CVE-2014-9423/" source="CVE"/>
		<reference ref_id="CVE-2015-2694" ref_url="https://www.suse.com/security/cve/CVE-2015-2694/" source="CVE"/>
		<reference ref_id="CVE-2015-2695" ref_url="https://www.suse.com/security/cve/CVE-2015-2695/" source="CVE"/>
		<reference ref_id="CVE-2015-2696" ref_url="https://www.suse.com/security/cve/CVE-2015-2696/" source="CVE"/>
		<reference ref_id="CVE-2015-2697" ref_url="https://www.suse.com/security/cve/CVE-2015-2697/" source="CVE"/>
		<reference ref_id="CVE-2015-2698" ref_url="https://www.suse.com/security/cve/CVE-2015-2698/" source="CVE"/>
		<reference ref_id="CVE-2015-8629" ref_url="https://www.suse.com/security/cve/CVE-2015-8629/" source="CVE"/>
		<reference ref_id="CVE-2015-8630" ref_url="https://www.suse.com/security/cve/CVE-2015-8630/" source="CVE"/>
		<reference ref_id="CVE-2015-8631" ref_url="https://www.suse.com/security/cve/CVE-2015-8631/" source="CVE"/>
		<reference ref_id="CVE-2016-3119" ref_url="https://www.suse.com/security/cve/CVE-2016-3119/" source="CVE"/>
		<reference ref_id="CVE-2016-3120" ref_url="https://www.suse.com/security/cve/CVE-2016-3120/" source="CVE"/>
		<reference ref_id="CVE-2017-11368" ref_url="https://www.suse.com/security/cve/CVE-2017-11368/" source="CVE"/>
		<reference ref_id="CVE-2017-11462" ref_url="https://www.suse.com/security/cve/CVE-2017-11462/" source="CVE"/>
		<reference ref_id="CVE-2018-20217" ref_url="https://www.suse.com/security/cve/CVE-2018-20217/" source="CVE"/>
		<reference ref_id="CVE-2018-5729" ref_url="https://www.suse.com/security/cve/CVE-2018-5729/" source="CVE"/>
		<reference ref_id="CVE-2018-5730" ref_url="https://www.suse.com/security/cve/CVE-2018-5730/" source="CVE"/>
		<description>
These are all security issues fixed in the krb5-1.16.3-1.16 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5351/">CVE-2014-5351</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5352/">CVE-2014-5352</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-5353/">CVE-2014-5353</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-5354/">CVE-2014-5354</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5355/">CVE-2014-5355</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9421/">CVE-2014-9421</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9422/">CVE-2014-9422</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9423/">CVE-2014-9423</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2694/">CVE-2015-2694</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2695/">CVE-2015-2695</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2696/">CVE-2015-2696</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2697/">CVE-2015-2697</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2698/">CVE-2015-2698</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-8629/">CVE-2015-8629</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8630/">CVE-2015-8630</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8631/">CVE-2015-8631</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3119/">CVE-2016-3119</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3120/">CVE-2016-3120</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11368/">CVE-2017-11368</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-11462/">CVE-2017-11462</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20217/">CVE-2018-20217</cve>
	<cve impact="moderate" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5729/">CVE-2018-5729</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-5730/">CVE-2018-5730</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481208" comment="krb5-1.16.3-1.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481209" comment="krb5-32bit-1.16.3-1.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481210" comment="krb5-client-1.16.3-1.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481211" comment="krb5-devel-1.16.3-1.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481212" comment="krb5-plugin-preauth-otp-1.16.3-1.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481213" comment="krb5-plugin-preauth-pkinit-1.16.3-1.16 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136996" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1108813" ref_url="https://bugzilla.suse.com/1108813" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16435" ref_url="https://www.suse.com/security/cve/CVE-2018-16435/" source="CVE"/>
		<description>
This update for lcms2 fixes the following issues:

- CVE-2018-16435: A integer overflow was fixed in the AllocateDataSet function in cmscgats.c, that could lead to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile. (bsc#1108813)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-26"/>
	<updated date="2018-10-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1108813">SUSE bug 1108813</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16435/">CVE-2018-16435</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709008" comment="liblcms2-2-2.9-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782364" comment="liblcms2-devel-2.9-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136997" version="1" class="patch">
	<metadata>
		<title>ldns-devel-1.7.0-2.22 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-3581" ref_url="https://www.suse.com/security/cve/CVE-2011-3581/" source="CVE"/>
		<description>
These are all security issues fixed in the ldns-devel-1.7.0-2.22 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3581/">CVE-2011-3581</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480351" comment="ldns-devel-1.7.0-2.22 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480352" comment="libldns2-1.7.0-2.22 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136998" version="1" class="patch">
	<metadata>
		<title>less-530-1.6 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-9488" ref_url="https://www.suse.com/security/cve/CVE-2014-9488/" source="CVE"/>
		<description>
These are all security issues fixed in the less-530-1.6 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2014-9488/">CVE-2014-9488</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480353" comment="less-530-1.6 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:136999" version="1" class="patch">
	<metadata>
		<title>lftp-4.8.4-3.9 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-0139" ref_url="https://www.suse.com/security/cve/CVE-2014-0139/" source="CVE"/>
		<reference ref_id="CVE-2018-10916" ref_url="https://www.suse.com/security/cve/CVE-2018-10916/" source="CVE"/>
		<description>
These are all security issues fixed in the lftp-4.8.4-3.9 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0139/">CVE-2014-0139</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-10916/">CVE-2018-10916</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481214" comment="lftp-4.8.4-3.9 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137000" version="1" class="patch">
	<metadata>
		<title>libFS-devel-1.0.7-1.22 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1996" ref_url="https://www.suse.com/security/cve/CVE-2013-1996/" source="CVE"/>
		<description>
These are all security issues fixed in the libFS-devel-1.0.7-1.22 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1996/">CVE-2013-1996</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480355" comment="libFS-devel-1.0.7-1.22 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480356" comment="libFS6-1.0.7-1.22 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137001" version="1" class="patch">
	<metadata>
		<title>libHX-devel-3.22-1.26 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-2947" ref_url="https://www.suse.com/security/cve/CVE-2010-2947/" source="CVE"/>
		<description>
These are all security issues fixed in the libHX-devel-3.22-1.26 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-2947/">CVE-2010-2947</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480357" comment="libHX-devel-3.22-1.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480358" comment="libHX28-3.22-1.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480359" comment="libHX28-32bit-3.22-1.26 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137002" version="1" class="patch">
	<metadata>
		<title>libICE-devel-1.0.9-1.25 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-2626" ref_url="https://www.suse.com/security/cve/CVE-2017-2626/" source="CVE"/>
		<description>
These are all security issues fixed in the libICE-devel-1.0.9-1.25 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-2626/">CVE-2017-2626</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480360" comment="libICE-devel-1.0.9-1.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480361" comment="libICE6-1.0.9-1.25 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137003" version="1" class="patch">
	<metadata>
		<title>libQt5Concurrent-devel-5.9.7-11.11 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-0295" ref_url="https://www.suse.com/security/cve/CVE-2015-0295/" source="CVE"/>
		<description>
These are all security issues fixed in the libQt5Concurrent-devel-5.9.7-11.11 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0295/">CVE-2015-0295</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481215" comment="libQt5Concurrent-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481216" comment="libQt5Concurrent5-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481217" comment="libQt5Core-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481218" comment="libQt5Core-private-headers-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481219" comment="libQt5Core5-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481220" comment="libQt5DBus-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481221" comment="libQt5DBus-private-headers-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481222" comment="libQt5DBus5-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481223" comment="libQt5Gui-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481224" comment="libQt5Gui-private-headers-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481225" comment="libQt5Gui5-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481226" comment="libQt5KmsSupport-devel-static-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481227" comment="libQt5KmsSupport-private-headers-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481228" comment="libQt5Network-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481229" comment="libQt5Network-private-headers-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481230" comment="libQt5Network5-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481231" comment="libQt5OpenGL-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481232" comment="libQt5OpenGL-private-headers-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481233" comment="libQt5OpenGL5-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481234" comment="libQt5PlatformHeaders-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481235" comment="libQt5PlatformSupport-devel-static-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481236" comment="libQt5PlatformSupport-private-headers-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481237" comment="libQt5PrintSupport-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481238" comment="libQt5PrintSupport-private-headers-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481239" comment="libQt5PrintSupport5-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481240" comment="libQt5Sql-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481241" comment="libQt5Sql-private-headers-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481242" comment="libQt5Sql5-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481243" comment="libQt5Sql5-sqlite-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481244" comment="libQt5Test-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481245" comment="libQt5Test-private-headers-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481246" comment="libQt5Test5-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481247" comment="libQt5Widgets-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481248" comment="libQt5Widgets-private-headers-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481249" comment="libQt5Widgets5-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481250" comment="libQt5Xml-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481251" comment="libQt5Xml5-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481252" comment="libqt5-qtbase-common-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481253" comment="libqt5-qtbase-devel-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481254" comment="libqt5-qtbase-private-headers-devel-5.9.7-11.11 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137004" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1102062" ref_url="https://bugzilla.suse.com/1102062" source="BUGZILLA"/>
		<reference ref_id="1102068" ref_url="https://bugzilla.suse.com/1102068" source="BUGZILLA"/>
		<reference ref_id="1102073" ref_url="https://bugzilla.suse.com/1102073" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14598" ref_url="https://www.suse.com/security/cve/CVE-2018-14598/" source="CVE"/>
		<reference ref_id="CVE-2018-14599" ref_url="https://www.suse.com/security/cve/CVE-2018-14599/" source="CVE"/>
		<reference ref_id="CVE-2018-14600" ref_url="https://www.suse.com/security/cve/CVE-2018-14600/" source="CVE"/>
		<description>
This update for libX11 fixes the following security issues:

- CVE-2018-14599: The function XListExtensions was vulnerable to an off-by-one
  error caused by malicious server responses, leading to DoS or possibly
  unspecified other impact (bsc#1102062)
- CVE-2018-14600: The function XListExtensions interpreted a variable as signed
  instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes),
  leading to DoS or remote code execution (bsc#1102068)
- CVE-2018-14598: A malicious server could have sent a reply in which the first
  string overflows, causing a variable to be set to NULL that will be freed later
  on, leading to DoS (segmentation fault) (bsc#1102073)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-09-30"/>
	<updated date="2018-09-30"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1102062">SUSE bug 1102062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102068">SUSE bug 1102068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102073">SUSE bug 1102073</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14598/">CVE-2018-14598</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14599/">CVE-2018-14599</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14600/">CVE-2018-14600</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708389" comment="libX11-6-1.6.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489617" comment="libX11-6-32bit-1.6.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489618" comment="libX11-data-1.6.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789696" comment="libX11-devel-1.6.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789697" comment="libX11-xcb1-1.6.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489621" comment="libX11-xcb1-32bit-1.6.5-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137005" version="1" class="patch">
	<metadata>
		<title>libX11-6-1.6.5-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1981" ref_url="https://www.suse.com/security/cve/CVE-2013-1981/" source="CVE"/>
		<reference ref_id="CVE-2013-1997" ref_url="https://www.suse.com/security/cve/CVE-2013-1997/" source="CVE"/>
		<reference ref_id="CVE-2013-2004" ref_url="https://www.suse.com/security/cve/CVE-2013-2004/" source="CVE"/>
		<reference ref_id="CVE-2018-14598" ref_url="https://www.suse.com/security/cve/CVE-2018-14598/" source="CVE"/>
		<reference ref_id="CVE-2018-14599" ref_url="https://www.suse.com/security/cve/CVE-2018-14599/" source="CVE"/>
		<reference ref_id="CVE-2018-14600" ref_url="https://www.suse.com/security/cve/CVE-2018-14600/" source="CVE"/>
		<description>
These are all security issues fixed in the libX11-6-1.6.5-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1981/">CVE-2013-1981</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1997/">CVE-2013-1997</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2004/">CVE-2013-2004</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14598/">CVE-2018-14598</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14599/">CVE-2018-14599</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14600/">CVE-2018-14600</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481255" comment="libX11-6-1.6.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481256" comment="libX11-6-32bit-1.6.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481257" comment="libX11-data-1.6.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481258" comment="libX11-devel-1.6.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481259" comment="libX11-xcb1-1.6.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481260" comment="libX11-xcb1-32bit-1.6.5-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137006" version="1" class="patch">
	<metadata>
		<title>libXRes1-1.2.0-1.18 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1988" ref_url="https://www.suse.com/security/cve/CVE-2013-1988/" source="CVE"/>
		<description>
These are all security issues fixed in the libXRes1-1.2.0-1.18 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1988/">CVE-2013-1988</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480408" comment="libXRes1-1.2.0-1.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480409" comment="libXres-devel-1.2.0-1.18 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137007" version="1" class="patch">
	<metadata>
		<title>libXcursor-devel-1.1.15-1.18 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2003" ref_url="https://www.suse.com/security/cve/CVE-2013-2003/" source="CVE"/>
		<reference ref_id="CVE-2017-16612" ref_url="https://www.suse.com/security/cve/CVE-2017-16612/" source="CVE"/>
		<description>
These are all security issues fixed in the libXcursor-devel-1.1.15-1.18 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2003/">CVE-2013-2003</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16612/">CVE-2017-16612</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480410" comment="libXcursor-devel-1.1.15-1.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480411" comment="libXcursor1-1.1.15-1.18 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137008" version="1" class="patch">
	<metadata>
		<title>libXdmcp-devel-1.1.2-1.23 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-2625" ref_url="https://www.suse.com/security/cve/CVE-2017-2625/" source="CVE"/>
		<description>
These are all security issues fixed in the libXdmcp-devel-1.1.2-1.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2625/">CVE-2017-2625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480412" comment="libXdmcp-devel-1.1.2-1.23 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480413" comment="libXdmcp6-1.1.2-1.23 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137009" version="1" class="patch">
	<metadata>
		<title>libXext-devel-1.3.3-1.30 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1982" ref_url="https://www.suse.com/security/cve/CVE-2013-1982/" source="CVE"/>
		<description>
These are all security issues fixed in the libXext-devel-1.3.3-1.30 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1982/">CVE-2013-1982</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480414" comment="libXext-devel-1.3.3-1.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480415" comment="libXext6-1.3.3-1.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480416" comment="libXext6-32bit-1.3.3-1.30 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137010" version="1" class="patch">
	<metadata>
		<title>libXfixes-devel-5.0.3-1.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1983" ref_url="https://www.suse.com/security/cve/CVE-2013-1983/" source="CVE"/>
		<description>
These are all security issues fixed in the libXfixes-devel-5.0.3-1.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1983/">CVE-2013-1983</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480417" comment="libXfixes-devel-5.0.3-1.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480418" comment="libXfixes3-5.0.3-1.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480419" comment="libXfixes3-32bit-5.0.3-1.24 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137011" version="1" class="patch">
	<metadata>
		<title>libXfont-devel-1.5.4-1.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-2895" ref_url="https://www.suse.com/security/cve/CVE-2011-2895/" source="CVE"/>
		<reference ref_id="CVE-2013-6462" ref_url="https://www.suse.com/security/cve/CVE-2013-6462/" source="CVE"/>
		<reference ref_id="CVE-2014-0209" ref_url="https://www.suse.com/security/cve/CVE-2014-0209/" source="CVE"/>
		<reference ref_id="CVE-2014-0210" ref_url="https://www.suse.com/security/cve/CVE-2014-0210/" source="CVE"/>
		<reference ref_id="CVE-2014-0211" ref_url="https://www.suse.com/security/cve/CVE-2014-0211/" source="CVE"/>
		<reference ref_id="CVE-2015-1802" ref_url="https://www.suse.com/security/cve/CVE-2015-1802/" source="CVE"/>
		<reference ref_id="CVE-2015-1803" ref_url="https://www.suse.com/security/cve/CVE-2015-1803/" source="CVE"/>
		<reference ref_id="CVE-2015-1804" ref_url="https://www.suse.com/security/cve/CVE-2015-1804/" source="CVE"/>
		<reference ref_id="CVE-2017-13720" ref_url="https://www.suse.com/security/cve/CVE-2017-13720/" source="CVE"/>
		<reference ref_id="CVE-2017-13722" ref_url="https://www.suse.com/security/cve/CVE-2017-13722/" source="CVE"/>
		<reference ref_id="CVE-2017-16611" ref_url="https://www.suse.com/security/cve/CVE-2017-16611/" source="CVE"/>
		<description>
These are all security issues fixed in the libXfont-devel-1.5.4-1.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2895/">CVE-2011-2895</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-6462/">CVE-2013-6462</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0209/">CVE-2014-0209</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0210/">CVE-2014-0210</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0211/">CVE-2014-0211</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1802/">CVE-2015-1802</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1803/">CVE-2015-1803</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-1804/">CVE-2015-1804</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-13720/">CVE-2017-13720</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13722/">CVE-2017-13722</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16611/">CVE-2017-16611</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480420" comment="libXfont-devel-1.5.4-1.17 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480421" comment="libXfont1-1.5.4-1.17 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137012" version="1" class="patch">
	<metadata>
		<title>libXfont2-2-2.0.3-1.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-16611" ref_url="https://www.suse.com/security/cve/CVE-2017-16611/" source="CVE"/>
		<description>
These are all security issues fixed in the libXfont2-2-2.0.3-1.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16611/">CVE-2017-16611</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480422" comment="libXfont2-2-2.0.3-1.17 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480423" comment="libXfont2-devel-2.0.3-1.17 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137013" version="1" class="patch">
	<metadata>
		<title>libXi-devel-1.7.9-1.23 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1984" ref_url="https://www.suse.com/security/cve/CVE-2013-1984/" source="CVE"/>
		<reference ref_id="CVE-2013-1995" ref_url="https://www.suse.com/security/cve/CVE-2013-1995/" source="CVE"/>
		<reference ref_id="CVE-2013-1998" ref_url="https://www.suse.com/security/cve/CVE-2013-1998/" source="CVE"/>
		<description>
These are all security issues fixed in the libXi-devel-1.7.9-1.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1984/">CVE-2013-1984</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1995/">CVE-2013-1995</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1998/">CVE-2013-1998</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480424" comment="libXi-devel-1.7.9-1.23 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480425" comment="libXi6-1.7.9-1.23 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137014" version="1" class="patch">
	<metadata>
		<title>libXinerama-devel-1.1.3-1.22 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1985" ref_url="https://www.suse.com/security/cve/CVE-2013-1985/" source="CVE"/>
		<description>
These are all security issues fixed in the libXinerama-devel-1.1.3-1.22 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1985/">CVE-2013-1985</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480426" comment="libXinerama-devel-1.1.3-1.22 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480427" comment="libXinerama1-1.1.3-1.22 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137015" version="1" class="patch">
	<metadata>
		<title>libXp-devel-1.0.3-1.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2062" ref_url="https://www.suse.com/security/cve/CVE-2013-2062/" source="CVE"/>
		<description>
These are all security issues fixed in the libXp-devel-1.0.3-1.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2062/">CVE-2013-2062</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480428" comment="libXp-devel-1.0.3-1.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480429" comment="libXp6-1.0.3-1.24 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137016" version="1" class="patch">
	<metadata>
		<title>libXrandr-devel-1.5.1-2.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1986" ref_url="https://www.suse.com/security/cve/CVE-2013-1986/" source="CVE"/>
		<reference ref_id="CVE-2016-7947" ref_url="https://www.suse.com/security/cve/CVE-2016-7947/" source="CVE"/>
		<reference ref_id="CVE-2016-7948" ref_url="https://www.suse.com/security/cve/CVE-2016-7948/" source="CVE"/>
		<description>
These are all security issues fixed in the libXrandr-devel-1.5.1-2.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1986/">CVE-2013-1986</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7947/">CVE-2016-7947</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7948/">CVE-2016-7948</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480430" comment="libXrandr-devel-1.5.1-2.17 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480431" comment="libXrandr2-1.5.1-2.17 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137017" version="1" class="patch">
	<metadata>
		<title>libXrender-devel-0.9.10-1.30 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1987" ref_url="https://www.suse.com/security/cve/CVE-2013-1987/" source="CVE"/>
		<description>
These are all security issues fixed in the libXrender-devel-0.9.10-1.30 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1987/">CVE-2013-1987</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480432" comment="libXrender-devel-0.9.10-1.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480433" comment="libXrender1-0.9.10-1.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480434" comment="libXrender1-32bit-0.9.10-1.30 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137018" version="1" class="patch">
	<metadata>
		<title>libXt-devel-1.1.5-2.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2002" ref_url="https://www.suse.com/security/cve/CVE-2013-2002/" source="CVE"/>
		<reference ref_id="CVE-2013-2005" ref_url="https://www.suse.com/security/cve/CVE-2013-2005/" source="CVE"/>
		<description>
These are all security issues fixed in the libXt-devel-1.1.5-2.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2002/">CVE-2013-2002</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2005/">CVE-2013-2005</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480435" comment="libXt-devel-1.1.5-2.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480436" comment="libXt6-1.1.5-2.24 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137019" version="1" class="patch">
	<metadata>
		<title>libXtst-devel-1.2.3-1.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2063" ref_url="https://www.suse.com/security/cve/CVE-2013-2063/" source="CVE"/>
		<description>
These are all security issues fixed in the libXtst-devel-1.2.3-1.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2063/">CVE-2013-2063</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480437" comment="libXtst-devel-1.2.3-1.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480438" comment="libXtst6-1.2.3-1.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480439" comment="libXtst6-32bit-1.2.3-1.24 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137020" version="1" class="patch">
	<metadata>
		<title>libXv-devel-1.0.11-1.23 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1989" ref_url="https://www.suse.com/security/cve/CVE-2013-1989/" source="CVE"/>
		<reference ref_id="CVE-2013-2066" ref_url="https://www.suse.com/security/cve/CVE-2013-2066/" source="CVE"/>
		<reference ref_id="CVE-2016-5407" ref_url="https://www.suse.com/security/cve/CVE-2016-5407/" source="CVE"/>
		<description>
These are all security issues fixed in the libXv-devel-1.0.11-1.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1989/">CVE-2013-1989</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2066/">CVE-2013-2066</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5407/">CVE-2016-5407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480440" comment="libXv-devel-1.0.11-1.23 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480441" comment="libXv1-1.0.11-1.23 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137021" version="1" class="patch">
	<metadata>
		<title>libXvMC-devel-1.0.10-1.23 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1990" ref_url="https://www.suse.com/security/cve/CVE-2013-1990/" source="CVE"/>
		<reference ref_id="CVE-2013-1999" ref_url="https://www.suse.com/security/cve/CVE-2013-1999/" source="CVE"/>
		<description>
These are all security issues fixed in the libXvMC-devel-1.0.10-1.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1990/">CVE-2013-1990</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1999/">CVE-2013-1999</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480442" comment="libXvMC-devel-1.0.10-1.23 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480443" comment="libXvMC1-1.0.10-1.23 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137022" version="1" class="patch">
	<metadata>
		<title>libXvnc1-1.9.0-17.32 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-8240" ref_url="https://www.suse.com/security/cve/CVE-2014-8240/" source="CVE"/>
		<reference ref_id="CVE-2015-0255" ref_url="https://www.suse.com/security/cve/CVE-2015-0255/" source="CVE"/>
		<description>
These are all security issues fixed in the libXvnc1-1.9.0-17.32 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8240/">CVE-2014-8240</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0255/">CVE-2015-0255</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481261" comment="libXvnc1-1.9.0-17.32 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481262" comment="tigervnc-1.9.0-17.32 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481263" comment="xorg-x11-Xvnc-1.9.0-17.32 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481264" comment="xorg-x11-Xvnc-module-1.9.0-17.32 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481265" comment="xorg-x11-Xvnc-novnc-1.9.0-17.32 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137023" version="1" class="patch">
	<metadata>
		<title>libXxf86dga-devel-1.1.4-1.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1991" ref_url="https://www.suse.com/security/cve/CVE-2013-1991/" source="CVE"/>
		<reference ref_id="CVE-2013-2000" ref_url="https://www.suse.com/security/cve/CVE-2013-2000/" source="CVE"/>
		<description>
These are all security issues fixed in the libXxf86dga-devel-1.1.4-1.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1991/">CVE-2013-1991</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2000/">CVE-2013-2000</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480448" comment="libXxf86dga-devel-1.1.4-1.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480449" comment="libXxf86dga1-1.1.4-1.24 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137024" version="1" class="patch">
	<metadata>
		<title>libXxf86vm-devel-1.1.4-1.23 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2001" ref_url="https://www.suse.com/security/cve/CVE-2013-2001/" source="CVE"/>
		<description>
These are all security issues fixed in the libXxf86vm-devel-1.1.4-1.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2001/">CVE-2013-2001</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480450" comment="libXxf86vm-devel-1.1.4-1.23 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480451" comment="libXxf86vm1-1.1.4-1.23 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480452" comment="libXxf86vm1-32bit-1.1.4-1.23 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137025" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1120653" ref_url="https://bugzilla.suse.com/1120653" source="BUGZILLA"/>
		<reference ref_id="1120654" ref_url="https://bugzilla.suse.com/1120654" source="BUGZILLA"/>
		<reference ref_id="1120656" ref_url="https://bugzilla.suse.com/1120656" source="BUGZILLA"/>
		<reference ref_id="1120659" ref_url="https://bugzilla.suse.com/1120659" source="BUGZILLA"/>
		<reference ref_id="1124341" ref_url="https://bugzilla.suse.com/1124341" source="BUGZILLA"/>
		<reference ref_id="1124342" ref_url="https://bugzilla.suse.com/1124342" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000877" ref_url="https://www.suse.com/security/cve/CVE-2018-1000877/" source="CVE"/>
		<reference ref_id="CVE-2018-1000878" ref_url="https://www.suse.com/security/cve/CVE-2018-1000878/" source="CVE"/>
		<reference ref_id="CVE-2018-1000879" ref_url="https://www.suse.com/security/cve/CVE-2018-1000879/" source="CVE"/>
		<reference ref_id="CVE-2018-1000880" ref_url="https://www.suse.com/security/cve/CVE-2018-1000880/" source="CVE"/>
		<reference ref_id="CVE-2019-1000019" ref_url="https://www.suse.com/security/cve/CVE-2019-1000019/" source="CVE"/>
		<reference ref_id="CVE-2019-1000020" ref_url="https://www.suse.com/security/cve/CVE-2019-1000020/" source="CVE"/>
		<description>
This update for libarchive fixes the following issues:

Security issues fixed:

- CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653)
- CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654)
- CVE-2018-1000879: Fixed a NULL Pointer Dereference vulnerability in ACL parser (bsc#1120656)
- CVE-2018-1000880: Fixed an Improper Input Validation vulnerability in WARC parser (bsc#1120659)
- CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341) 
- CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-01"/>
	<updated date="2019-04-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1120653">SUSE bug 1120653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120654">SUSE bug 1120654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120656">SUSE bug 1120656</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120659">SUSE bug 1120659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124341">SUSE bug 1124341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124342">SUSE bug 1124342</bugzilla>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000877/">CVE-2018-1000877</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000878/">CVE-2018-1000878</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000879/">CVE-2018-1000879</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000880/">CVE-2018-1000880</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1000019/">CVE-2019-1000019</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1000020/">CVE-2019-1000020</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789698" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789699" comment="libarchive13-3.3.2-3.8.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137026" version="1" class="patch">
	<metadata>
		<title>libarchive-devel-3.3.2-3.8.4 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-0211" ref_url="https://www.suse.com/security/cve/CVE-2013-0211/" source="CVE"/>
		<reference ref_id="CVE-2015-2304" ref_url="https://www.suse.com/security/cve/CVE-2015-2304/" source="CVE"/>
		<reference ref_id="CVE-2015-8917" ref_url="https://www.suse.com/security/cve/CVE-2015-8917/" source="CVE"/>
		<reference ref_id="CVE-2015-8928" ref_url="https://www.suse.com/security/cve/CVE-2015-8928/" source="CVE"/>
		<reference ref_id="CVE-2015-8933" ref_url="https://www.suse.com/security/cve/CVE-2015-8933/" source="CVE"/>
		<reference ref_id="CVE-2015-8934" ref_url="https://www.suse.com/security/cve/CVE-2015-8934/" source="CVE"/>
		<reference ref_id="CVE-2016-1541" ref_url="https://www.suse.com/security/cve/CVE-2016-1541/" source="CVE"/>
		<reference ref_id="CVE-2016-4300" ref_url="https://www.suse.com/security/cve/CVE-2016-4300/" source="CVE"/>
		<reference ref_id="CVE-2016-4301" ref_url="https://www.suse.com/security/cve/CVE-2016-4301/" source="CVE"/>
		<reference ref_id="CVE-2016-4809" ref_url="https://www.suse.com/security/cve/CVE-2016-4809/" source="CVE"/>
		<reference ref_id="CVE-2016-5418" ref_url="https://www.suse.com/security/cve/CVE-2016-5418/" source="CVE"/>
		<reference ref_id="CVE-2016-5844" ref_url="https://www.suse.com/security/cve/CVE-2016-5844/" source="CVE"/>
		<reference ref_id="CVE-2016-6250" ref_url="https://www.suse.com/security/cve/CVE-2016-6250/" source="CVE"/>
		<reference ref_id="CVE-2016-8687" ref_url="https://www.suse.com/security/cve/CVE-2016-8687/" source="CVE"/>
		<reference ref_id="CVE-2016-8688" ref_url="https://www.suse.com/security/cve/CVE-2016-8688/" source="CVE"/>
		<reference ref_id="CVE-2016-8689" ref_url="https://www.suse.com/security/cve/CVE-2016-8689/" source="CVE"/>
		<reference ref_id="CVE-2017-14166" ref_url="https://www.suse.com/security/cve/CVE-2017-14166/" source="CVE"/>
		<reference ref_id="CVE-2017-14501" ref_url="https://www.suse.com/security/cve/CVE-2017-14501/" source="CVE"/>
		<reference ref_id="CVE-2017-14502" ref_url="https://www.suse.com/security/cve/CVE-2017-14502/" source="CVE"/>
		<reference ref_id="CVE-2017-14503" ref_url="https://www.suse.com/security/cve/CVE-2017-14503/" source="CVE"/>
		<reference ref_id="CVE-2018-1000877" ref_url="https://www.suse.com/security/cve/CVE-2018-1000877/" source="CVE"/>
		<reference ref_id="CVE-2018-1000878" ref_url="https://www.suse.com/security/cve/CVE-2018-1000878/" source="CVE"/>
		<reference ref_id="CVE-2018-1000879" ref_url="https://www.suse.com/security/cve/CVE-2018-1000879/" source="CVE"/>
		<reference ref_id="CVE-2018-1000880" ref_url="https://www.suse.com/security/cve/CVE-2018-1000880/" source="CVE"/>
		<reference ref_id="CVE-2019-1000019" ref_url="https://www.suse.com/security/cve/CVE-2019-1000019/" source="CVE"/>
		<reference ref_id="CVE-2019-1000020" ref_url="https://www.suse.com/security/cve/CVE-2019-1000020/" source="CVE"/>
		<description>
These are all security issues fixed in the libarchive-devel-3.3.2-3.8.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0211/">CVE-2013-0211</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2304/">CVE-2015-2304</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8917/">CVE-2015-8917</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8928/">CVE-2015-8928</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8933/">CVE-2015-8933</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8934/">CVE-2015-8934</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1541/">CVE-2016-1541</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4300/">CVE-2016-4300</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4301/">CVE-2016-4301</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4809/">CVE-2016-4809</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5418/">CVE-2016-5418</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5844/">CVE-2016-5844</cve>
	<cve impact="low" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-6250/">CVE-2016-6250</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8687/">CVE-2016-8687</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8688/">CVE-2016-8688</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8689/">CVE-2016-8689</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14166/">CVE-2017-14166</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14501/">CVE-2017-14501</cve>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14502/">CVE-2017-14502</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14503/">CVE-2017-14503</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000877/">CVE-2018-1000877</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000878/">CVE-2018-1000878</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000879/">CVE-2018-1000879</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000880/">CVE-2018-1000880</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1000019/">CVE-2019-1000019</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1000020/">CVE-2019-1000020</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481266" comment="libarchive-devel-3.3.2-3.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481267" comment="libarchive13-3.3.2-3.8.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137027" version="1" class="patch">
	<metadata>
		<title>libblkid-devel-2.33.1-2.28 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-9114" ref_url="https://www.suse.com/security/cve/CVE-2014-9114/" source="CVE"/>
		<reference ref_id="CVE-2015-5218" ref_url="https://www.suse.com/security/cve/CVE-2015-5218/" source="CVE"/>
		<reference ref_id="CVE-2016-2779" ref_url="https://www.suse.com/security/cve/CVE-2016-2779/" source="CVE"/>
		<reference ref_id="CVE-2016-5011" ref_url="https://www.suse.com/security/cve/CVE-2016-5011/" source="CVE"/>
		<reference ref_id="CVE-2017-2616" ref_url="https://www.suse.com/security/cve/CVE-2017-2616/" source="CVE"/>
		<reference ref_id="CVE-2018-7738" ref_url="https://www.suse.com/security/cve/CVE-2018-7738/" source="CVE"/>
		<description>
These are all security issues fixed in the libblkid-devel-2.33.1-2.28 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9114/">CVE-2014-9114</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-5218/">CVE-2015-5218</cve>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2779/">CVE-2016-2779</cve>
	<cve impact="low" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5011/">CVE-2016-5011</cve>
	<cve impact="important" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2616/">CVE-2017-2616</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-7738/">CVE-2018-7738</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481268" comment="libblkid-devel-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481269" comment="libblkid-devel-static-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481270" comment="libblkid1-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481271" comment="libblkid1-32bit-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481272" comment="libfdisk-devel-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481273" comment="libfdisk1-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481274" comment="libmount-devel-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481275" comment="libmount1-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481276" comment="libmount1-32bit-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481277" comment="libsmartcols-devel-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481278" comment="libsmartcols1-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481279" comment="libuuid-devel-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481280" comment="libuuid-devel-static-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481281" comment="libuuid1-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481282" comment="libuuid1-32bit-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481283" comment="util-linux-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481284" comment="util-linux-lang-2.33.1-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481285" comment="util-linux-systemd-2.33.1-2.14 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137028" version="1" class="patch">
	<metadata>
		<title>libbluetooth3-5.48-5.13.10 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-9800" ref_url="https://www.suse.com/security/cve/CVE-2016-9800/" source="CVE"/>
		<reference ref_id="CVE-2016-9801" ref_url="https://www.suse.com/security/cve/CVE-2016-9801/" source="CVE"/>
		<reference ref_id="CVE-2016-9804" ref_url="https://www.suse.com/security/cve/CVE-2016-9804/" source="CVE"/>
		<reference ref_id="CVE-2016-9918" ref_url="https://www.suse.com/security/cve/CVE-2016-9918/" source="CVE"/>
		<description>
These are all security issues fixed in the libbluetooth3-5.48-5.13.10 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9800/">CVE-2016-9800</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9801/">CVE-2016-9801</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9804/">CVE-2016-9804</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-9918/">CVE-2016-9918</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481286" comment="libbluetooth3-5.48-5.13.10 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137029" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1120470" ref_url="https://bugzilla.suse.com/1120470" source="BUGZILLA"/>
		<reference ref_id="1120502" ref_url="https://bugzilla.suse.com/1120502" source="BUGZILLA"/>
		<reference ref_id="1120503" ref_url="https://bugzilla.suse.com/1120503" source="BUGZILLA"/>
		<reference ref_id="1120504" ref_url="https://bugzilla.suse.com/1120504" source="BUGZILLA"/>
		<reference ref_id="1120584" ref_url="https://bugzilla.suse.com/1120584" source="BUGZILLA"/>
		<reference ref_id="1120589" ref_url="https://bugzilla.suse.com/1120589" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20544" ref_url="https://www.suse.com/security/cve/CVE-2018-20544/" source="CVE"/>
		<reference ref_id="CVE-2018-20545" ref_url="https://www.suse.com/security/cve/CVE-2018-20545/" source="CVE"/>
		<reference ref_id="CVE-2018-20546" ref_url="https://www.suse.com/security/cve/CVE-2018-20546/" source="CVE"/>
		<reference ref_id="CVE-2018-20547" ref_url="https://www.suse.com/security/cve/CVE-2018-20547/" source="CVE"/>
		<reference ref_id="CVE-2018-20548" ref_url="https://www.suse.com/security/cve/CVE-2018-20548/" source="CVE"/>
		<reference ref_id="CVE-2018-20549" ref_url="https://www.suse.com/security/cve/CVE-2018-20549/" source="CVE"/>
		<description>
This update for libcaca fixes the following issues:

Security issues fixed:

- CVE-2018-20544: Fixed a floating point exception at caca/dither.c (bsc#1120502)
- CVE-2018-20545: Fixed a WRITE memory access in the load_image function at common-image.c for 4bpp (bsc#1120584)
- CVE-2018-20546: Fixed a READ memory access in the get_rgba_default function at caca/dither.c for bpp (bsc#1120503)
- CVE-2018-20547: Fixed a READ memory access in the get_rgba_default function at caca/dither.c for 24bpp (bsc#1120504)
- CVE-2018-20548: Fixed a WRITE memory access in the load_image function at common-image.c for 1bpp (bsc#1120589)
- CVE-2018-20549: Fixed a WRITE memory access in the caca_file_read function at caca/file.c (bsc#1120470)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-27"/>
	<updated date="2019-03-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1120470">SUSE bug 1120470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120502">SUSE bug 1120502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120503">SUSE bug 1120503</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120504">SUSE bug 1120504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120584">SUSE bug 1120584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120589">SUSE bug 1120589</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20544/">CVE-2018-20544</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20545/">CVE-2018-20545</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20546/">CVE-2018-20546</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20547/">CVE-2018-20547</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20548/">CVE-2018-20548</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20549/">CVE-2018-20549</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789700" comment="libcaca-devel-0.99.beta19.git20171003-3.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789701" comment="libcaca0-0.99.beta19.git20171003-3.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789702" comment="libcaca0-plugins-0.99.beta19.git20171003-3.3.7 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137030" version="1" class="patch">
	<metadata>
		<title>libcaca-devel-0.99.beta19.git20171003-3.3.7 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-20544" ref_url="https://www.suse.com/security/cve/CVE-2018-20544/" source="CVE"/>
		<reference ref_id="CVE-2018-20545" ref_url="https://www.suse.com/security/cve/CVE-2018-20545/" source="CVE"/>
		<reference ref_id="CVE-2018-20546" ref_url="https://www.suse.com/security/cve/CVE-2018-20546/" source="CVE"/>
		<reference ref_id="CVE-2018-20547" ref_url="https://www.suse.com/security/cve/CVE-2018-20547/" source="CVE"/>
		<reference ref_id="CVE-2018-20548" ref_url="https://www.suse.com/security/cve/CVE-2018-20548/" source="CVE"/>
		<reference ref_id="CVE-2018-20549" ref_url="https://www.suse.com/security/cve/CVE-2018-20549/" source="CVE"/>
		<description>
These are all security issues fixed in the libcaca-devel-0.99.beta19.git20171003-3.3.7 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20544/">CVE-2018-20544</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20545/">CVE-2018-20545</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20546/">CVE-2018-20546</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20547/">CVE-2018-20547</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20548/">CVE-2018-20548</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20549/">CVE-2018-20549</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481287" comment="libcaca-devel-0.99.beta19.git20171003-3.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481288" comment="libcaca0-0.99.beta19.git20171003-3.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481289" comment="libcaca0-plugins-0.99.beta19.git20171003-3.3.7 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137031" version="1" class="patch">
	<metadata>
		<title>libcolord2-1.4.2-1.37 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-4349" ref_url="https://www.suse.com/security/cve/CVE-2011-4349/" source="CVE"/>
		<description>
These are all security issues fixed in the libcolord2-1.4.2-1.37 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4349/">CVE-2011-4349</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480474" comment="libcolord2-1.4.2-1.37 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137032" version="1" class="patch">
	<metadata>
		<title>libcroco-0.6.12-2.38 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-7960" ref_url="https://www.suse.com/security/cve/CVE-2017-7960/" source="CVE"/>
		<reference ref_id="CVE-2017-7961" ref_url="https://www.suse.com/security/cve/CVE-2017-7961/" source="CVE"/>
		<description>
These are all security issues fixed in the libcroco-0.6.12-2.38 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7960/">CVE-2017-7960</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7961/">CVE-2017-7961</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480475" comment="libcroco-0.6.12-2.38 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480476" comment="libcroco-0_6-3-0.6.12-2.38 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480477" comment="libcroco-0_6-3-32bit-0.6.12-2.38 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480478" comment="libcroco-devel-0.6.12-2.38 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137033" version="1" class="patch">
	<metadata>
		<title>libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-8143" ref_url="https://www.suse.com/security/cve/CVE-2014-8143/" source="CVE"/>
		<reference ref_id="CVE-2015-0240" ref_url="https://www.suse.com/security/cve/CVE-2015-0240/" source="CVE"/>
		<reference ref_id="CVE-2015-3223" ref_url="https://www.suse.com/security/cve/CVE-2015-3223/" source="CVE"/>
		<reference ref_id="CVE-2015-5252" ref_url="https://www.suse.com/security/cve/CVE-2015-5252/" source="CVE"/>
		<reference ref_id="CVE-2015-5296" ref_url="https://www.suse.com/security/cve/CVE-2015-5296/" source="CVE"/>
		<reference ref_id="CVE-2015-5299" ref_url="https://www.suse.com/security/cve/CVE-2015-5299/" source="CVE"/>
		<reference ref_id="CVE-2015-5330" ref_url="https://www.suse.com/security/cve/CVE-2015-5330/" source="CVE"/>
		<reference ref_id="CVE-2015-5370" ref_url="https://www.suse.com/security/cve/CVE-2015-5370/" source="CVE"/>
		<reference ref_id="CVE-2015-7560" ref_url="https://www.suse.com/security/cve/CVE-2015-7560/" source="CVE"/>
		<reference ref_id="CVE-2015-8467" ref_url="https://www.suse.com/security/cve/CVE-2015-8467/" source="CVE"/>
		<reference ref_id="CVE-2015-8543" ref_url="https://www.suse.com/security/cve/CVE-2015-8543/" source="CVE"/>
		<reference ref_id="CVE-2016-0771" ref_url="https://www.suse.com/security/cve/CVE-2016-0771/" source="CVE"/>
		<reference ref_id="CVE-2016-2110" ref_url="https://www.suse.com/security/cve/CVE-2016-2110/" source="CVE"/>
		<reference ref_id="CVE-2016-2111" ref_url="https://www.suse.com/security/cve/CVE-2016-2111/" source="CVE"/>
		<reference ref_id="CVE-2016-2112" ref_url="https://www.suse.com/security/cve/CVE-2016-2112/" source="CVE"/>
		<reference ref_id="CVE-2016-2113" ref_url="https://www.suse.com/security/cve/CVE-2016-2113/" source="CVE"/>
		<reference ref_id="CVE-2016-2115" ref_url="https://www.suse.com/security/cve/CVE-2016-2115/" source="CVE"/>
		<reference ref_id="CVE-2016-2118" ref_url="https://www.suse.com/security/cve/CVE-2016-2118/" source="CVE"/>
		<reference ref_id="CVE-2016-2119" ref_url="https://www.suse.com/security/cve/CVE-2016-2119/" source="CVE"/>
		<reference ref_id="CVE-2016-2123" ref_url="https://www.suse.com/security/cve/CVE-2016-2123/" source="CVE"/>
		<reference ref_id="CVE-2016-2125" ref_url="https://www.suse.com/security/cve/CVE-2016-2125/" source="CVE"/>
		<reference ref_id="CVE-2016-2126" ref_url="https://www.suse.com/security/cve/CVE-2016-2126/" source="CVE"/>
		<reference ref_id="CVE-2017-11103" ref_url="https://www.suse.com/security/cve/CVE-2017-11103/" source="CVE"/>
		<reference ref_id="CVE-2017-12150" ref_url="https://www.suse.com/security/cve/CVE-2017-12150/" source="CVE"/>
		<reference ref_id="CVE-2017-12151" ref_url="https://www.suse.com/security/cve/CVE-2017-12151/" source="CVE"/>
		<reference ref_id="CVE-2017-12163" ref_url="https://www.suse.com/security/cve/CVE-2017-12163/" source="CVE"/>
		<reference ref_id="CVE-2017-14746" ref_url="https://www.suse.com/security/cve/CVE-2017-14746/" source="CVE"/>
		<reference ref_id="CVE-2017-15275" ref_url="https://www.suse.com/security/cve/CVE-2017-15275/" source="CVE"/>
		<reference ref_id="CVE-2017-2619" ref_url="https://www.suse.com/security/cve/CVE-2017-2619/" source="CVE"/>
		<reference ref_id="CVE-2017-7494" ref_url="https://www.suse.com/security/cve/CVE-2017-7494/" source="CVE"/>
		<reference ref_id="CVE-2018-1050" ref_url="https://www.suse.com/security/cve/CVE-2018-1050/" source="CVE"/>
		<reference ref_id="CVE-2018-1057" ref_url="https://www.suse.com/security/cve/CVE-2018-1057/" source="CVE"/>
		<reference ref_id="CVE-2018-10858" ref_url="https://www.suse.com/security/cve/CVE-2018-10858/" source="CVE"/>
		<reference ref_id="CVE-2018-10918" ref_url="https://www.suse.com/security/cve/CVE-2018-10918/" source="CVE"/>
		<reference ref_id="CVE-2018-10919" ref_url="https://www.suse.com/security/cve/CVE-2018-10919/" source="CVE"/>
		<reference ref_id="CVE-2018-1139" ref_url="https://www.suse.com/security/cve/CVE-2018-1139/" source="CVE"/>
		<reference ref_id="CVE-2018-1140" ref_url="https://www.suse.com/security/cve/CVE-2018-1140/" source="CVE"/>
		<reference ref_id="CVE-2018-14629" ref_url="https://www.suse.com/security/cve/CVE-2018-14629/" source="CVE"/>
		<reference ref_id="CVE-2018-16841" ref_url="https://www.suse.com/security/cve/CVE-2018-16841/" source="CVE"/>
		<reference ref_id="CVE-2018-16851" ref_url="https://www.suse.com/security/cve/CVE-2018-16851/" source="CVE"/>
		<reference ref_id="CVE-2018-16852" ref_url="https://www.suse.com/security/cve/CVE-2018-16852/" source="CVE"/>
		<reference ref_id="CVE-2018-16853" ref_url="https://www.suse.com/security/cve/CVE-2018-16853/" source="CVE"/>
		<reference ref_id="CVE-2018-16857" ref_url="https://www.suse.com/security/cve/CVE-2018-16857/" source="CVE"/>
		<reference ref_id="CVE-2019-3824" ref_url="https://www.suse.com/security/cve/CVE-2019-3824/" source="CVE"/>
		<reference ref_id="CVE-2019-3870" ref_url="https://www.suse.com/security/cve/CVE-2019-3870/" source="CVE"/>
		<reference ref_id="CVE-2019-3880" ref_url="https://www.suse.com/security/cve/CVE-2019-3880/" source="CVE"/>
		<description>
These are all security issues fixed in the libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8143/">CVE-2014-8143</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0240/">CVE-2015-0240</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3223/">CVE-2015-3223</cve>
	<cve impact="moderate" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-5252/">CVE-2015-5252</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-5296/">CVE-2015-5296</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-5299/">CVE-2015-5299</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-5330/">CVE-2015-5330</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5370/">CVE-2015-5370</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-7560/">CVE-2015-7560</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8467/">CVE-2015-8467</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8543/">CVE-2015-8543</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0771/">CVE-2016-0771</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2110/">CVE-2016-2110</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2111/">CVE-2016-2111</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2112/">CVE-2016-2112</cve>
	<cve impact="moderate" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2113/">CVE-2016-2113</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2115/">CVE-2016-2115</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2118/">CVE-2016-2118</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2119/">CVE-2016-2119</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2123/">CVE-2016-2123</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2125/">CVE-2016-2125</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2126/">CVE-2016-2126</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11103/">CVE-2017-11103</cve>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-12150/">CVE-2017-12150</cve>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-12151/">CVE-2017-12151</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12163/">CVE-2017-12163</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14746/">CVE-2017-14746</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15275/">CVE-2017-15275</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2619/">CVE-2017-2619</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7494/">CVE-2017-7494</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1050/">CVE-2018-1050</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1057/">CVE-2018-1057</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-10858/">CVE-2018-10858</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10918/">CVE-2018-10918</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10919/">CVE-2018-10919</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1139/">CVE-2018-1139</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1140/">CVE-2018-1140</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14629/">CVE-2018-14629</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16841/">CVE-2018-16841</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16851/">CVE-2018-16851</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16852/">CVE-2018-16852</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16853/">CVE-2018-16853</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-16857/">CVE-2018-16857</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3824/">CVE-2019-3824</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-3870/">CVE-2019-3870</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-3880/">CVE-2019-3880</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481290" comment="libdcerpc-binding0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481291" comment="libdcerpc-binding0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481292" comment="libdcerpc-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481293" comment="libdcerpc-samr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481294" comment="libdcerpc-samr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481295" comment="libdcerpc0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481296" comment="libdcerpc0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481297" comment="libndr-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481298" comment="libndr-krb5pac-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481299" comment="libndr-krb5pac0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481300" comment="libndr-krb5pac0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481301" comment="libndr-nbt-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481302" comment="libndr-nbt0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481303" comment="libndr-nbt0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481304" comment="libndr-standard-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481305" comment="libndr-standard0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481306" comment="libndr-standard0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481307" comment="libndr0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481308" comment="libndr0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481309" comment="libnetapi-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481310" comment="libnetapi0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481311" comment="libnetapi0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481312" comment="libsamba-credentials-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481313" comment="libsamba-credentials0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481314" comment="libsamba-credentials0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481315" comment="libsamba-errors-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481316" comment="libsamba-errors0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481317" comment="libsamba-errors0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481318" comment="libsamba-hostconfig-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481319" comment="libsamba-hostconfig0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481320" comment="libsamba-hostconfig0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481321" comment="libsamba-passdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481322" comment="libsamba-passdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481323" comment="libsamba-passdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481324" comment="libsamba-policy-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481325" comment="libsamba-policy-python3-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481326" comment="libsamba-policy0-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481327" comment="libsamba-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481328" comment="libsamba-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481329" comment="libsamba-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481330" comment="libsamdb-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481331" comment="libsamdb0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481332" comment="libsamdb0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481333" comment="libsmbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481334" comment="libsmbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481335" comment="libsmbconf-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481336" comment="libsmbconf0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481337" comment="libsmbconf0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481338" comment="libsmbldap-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481339" comment="libsmbldap2-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481340" comment="libsmbldap2-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481341" comment="libtevent-util-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481342" comment="libtevent-util0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481343" comment="libtevent-util0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481344" comment="libwbclient-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481345" comment="libwbclient0-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481346" comment="libwbclient0-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481347" comment="samba-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481348" comment="samba-client-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481349" comment="samba-core-devel-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481350" comment="samba-libs-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481351" comment="samba-libs-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481352" comment="samba-libs-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481353" comment="samba-python3-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481354" comment="samba-winbind-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481355" comment="samba-winbind-32bit-4.9.5+git.149.9593f64a5c3-1.12 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137034" version="1" class="patch">
	<metadata>
		<title>libdmx-devel-1.1.3-1.23 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1992" ref_url="https://www.suse.com/security/cve/CVE-2013-1992/" source="CVE"/>
		<description>
These are all security issues fixed in the libdmx-devel-1.1.3-1.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1992/">CVE-2013-1992</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480523" comment="libdmx-devel-1.1.3-1.23 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480524" comment="libdmx1-1.1.3-1.23 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137035" version="1" class="patch">
	<metadata>
		<title>libevent-2_1-8-2.1.8-2.23 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-6272" ref_url="https://www.suse.com/security/cve/CVE-2014-6272/" source="CVE"/>
		<description>
These are all security issues fixed in the libevent-2_1-8-2.1.8-2.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-6272/">CVE-2014-6272</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480525" comment="libevent-2_1-8-2.1.8-2.23 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480526" comment="libevent-devel-2.1.8-2.23 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137036" version="1" class="patch">
	<metadata>
		<title>libfreebl3-3.41.1-3.13.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-3170" ref_url="https://www.suse.com/security/cve/CVE-2010-3170/" source="CVE"/>
		<reference ref_id="CVE-2011-3389" ref_url="https://www.suse.com/security/cve/CVE-2011-3389/" source="CVE"/>
		<reference ref_id="CVE-2011-3640" ref_url="https://www.suse.com/security/cve/CVE-2011-3640/" source="CVE"/>
		<reference ref_id="CVE-2013-0743" ref_url="https://www.suse.com/security/cve/CVE-2013-0743/" source="CVE"/>
		<reference ref_id="CVE-2013-0791" ref_url="https://www.suse.com/security/cve/CVE-2013-0791/" source="CVE"/>
		<reference ref_id="CVE-2013-1620" ref_url="https://www.suse.com/security/cve/CVE-2013-1620/" source="CVE"/>
		<reference ref_id="CVE-2013-1739" ref_url="https://www.suse.com/security/cve/CVE-2013-1739/" source="CVE"/>
		<reference ref_id="CVE-2013-1740" ref_url="https://www.suse.com/security/cve/CVE-2013-1740/" source="CVE"/>
		<reference ref_id="CVE-2013-5605" ref_url="https://www.suse.com/security/cve/CVE-2013-5605/" source="CVE"/>
		<reference ref_id="CVE-2014-1490" ref_url="https://www.suse.com/security/cve/CVE-2014-1490/" source="CVE"/>
		<reference ref_id="CVE-2014-1491" ref_url="https://www.suse.com/security/cve/CVE-2014-1491/" source="CVE"/>
		<reference ref_id="CVE-2014-1492" ref_url="https://www.suse.com/security/cve/CVE-2014-1492/" source="CVE"/>
		<reference ref_id="CVE-2014-1568" ref_url="https://www.suse.com/security/cve/CVE-2014-1568/" source="CVE"/>
		<reference ref_id="CVE-2014-1569" ref_url="https://www.suse.com/security/cve/CVE-2014-1569/" source="CVE"/>
		<reference ref_id="CVE-2015-2721" ref_url="https://www.suse.com/security/cve/CVE-2015-2721/" source="CVE"/>
		<reference ref_id="CVE-2015-4000" ref_url="https://www.suse.com/security/cve/CVE-2015-4000/" source="CVE"/>
		<reference ref_id="CVE-2015-7181" ref_url="https://www.suse.com/security/cve/CVE-2015-7181/" source="CVE"/>
		<reference ref_id="CVE-2015-7182" ref_url="https://www.suse.com/security/cve/CVE-2015-7182/" source="CVE"/>
		<reference ref_id="CVE-2015-7575" ref_url="https://www.suse.com/security/cve/CVE-2015-7575/" source="CVE"/>
		<reference ref_id="CVE-2016-1950" ref_url="https://www.suse.com/security/cve/CVE-2016-1950/" source="CVE"/>
		<reference ref_id="CVE-2016-1979" ref_url="https://www.suse.com/security/cve/CVE-2016-1979/" source="CVE"/>
		<reference ref_id="CVE-2016-2834" ref_url="https://www.suse.com/security/cve/CVE-2016-2834/" source="CVE"/>
		<reference ref_id="CVE-2018-0495" ref_url="https://www.suse.com/security/cve/CVE-2018-0495/" source="CVE"/>
		<reference ref_id="CVE-2018-12384" ref_url="https://www.suse.com/security/cve/CVE-2018-12384/" source="CVE"/>
		<reference ref_id="CVE-2018-12404" ref_url="https://www.suse.com/security/cve/CVE-2018-12404/" source="CVE"/>
		<description>
These are all security issues fixed in the libfreebl3-3.41.1-3.13.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3170/">CVE-2010-3170</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-3389/">CVE-2011-3389</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3640/">CVE-2011-3640</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0743/">CVE-2013-0743</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0791/">CVE-2013-0791</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1620/">CVE-2013-1620</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1739/">CVE-2013-1739</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1740/">CVE-2013-1740</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-5605/">CVE-2013-5605</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1490/">CVE-2014-1490</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1491/">CVE-2014-1491</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1492/">CVE-2014-1492</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1568/">CVE-2014-1568</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1569/">CVE-2014-1569</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2721/">CVE-2015-2721</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-4000/">CVE-2015-4000</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7181/">CVE-2015-7181</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7182/">CVE-2015-7182</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7575/">CVE-2015-7575</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1950/">CVE-2016-1950</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1979/">CVE-2016-1979</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2834/">CVE-2016-2834</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-0495/">CVE-2018-0495</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-12384/">CVE-2018-12384</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12404/">CVE-2018-12404</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481356" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481357" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481358" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481359" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481360" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481361" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481362" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481363" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481364" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481365" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481366" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137037" version="1" class="patch">
	<metadata>
		<title>libgcrypt-devel-1.8.2-6.7 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-3591" ref_url="https://www.suse.com/security/cve/CVE-2014-3591/" source="CVE"/>
		<reference ref_id="CVE-2015-0837" ref_url="https://www.suse.com/security/cve/CVE-2015-0837/" source="CVE"/>
		<reference ref_id="CVE-2015-5738" ref_url="https://www.suse.com/security/cve/CVE-2015-5738/" source="CVE"/>
		<reference ref_id="CVE-2015-7511" ref_url="https://www.suse.com/security/cve/CVE-2015-7511/" source="CVE"/>
		<reference ref_id="CVE-2016-6313" ref_url="https://www.suse.com/security/cve/CVE-2016-6313/" source="CVE"/>
		<reference ref_id="CVE-2017-0379" ref_url="https://www.suse.com/security/cve/CVE-2017-0379/" source="CVE"/>
		<reference ref_id="CVE-2017-7526" ref_url="https://www.suse.com/security/cve/CVE-2017-7526/" source="CVE"/>
		<reference ref_id="CVE-2018-0495" ref_url="https://www.suse.com/security/cve/CVE-2018-0495/" source="CVE"/>
		<description>
These are all security issues fixed in the libgcrypt-devel-1.8.2-6.7 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-3591/">CVE-2014-3591</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-0837/">CVE-2015-0837</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-5738/">CVE-2015-5738</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7511/">CVE-2015-7511</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6313/">CVE-2016-6313</cve>
	<cve impact="critical" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-0379/">CVE-2017-0379</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7526/">CVE-2017-7526</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-0495/">CVE-2018-0495</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481367" comment="libgcrypt-devel-1.8.2-6.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481368" comment="libgcrypt20-1.8.2-6.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481369" comment="libgcrypt20-32bit-1.8.2-6.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481370" comment="libgcrypt20-hmac-1.8.2-6.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481371" comment="libgcrypt20-hmac-32bit-1.8.2-6.7 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137038" version="1" class="patch">
	<metadata>
		<title>libgd3-2.2.5-4.6.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-2497" ref_url="https://www.suse.com/security/cve/CVE-2014-2497/" source="CVE"/>
		<reference ref_id="CVE-2016-10166" ref_url="https://www.suse.com/security/cve/CVE-2016-10166/" source="CVE"/>
		<reference ref_id="CVE-2016-10167" ref_url="https://www.suse.com/security/cve/CVE-2016-10167/" source="CVE"/>
		<reference ref_id="CVE-2016-10168" ref_url="https://www.suse.com/security/cve/CVE-2016-10168/" source="CVE"/>
		<reference ref_id="CVE-2016-5116" ref_url="https://www.suse.com/security/cve/CVE-2016-5116/" source="CVE"/>
		<reference ref_id="CVE-2016-5766" ref_url="https://www.suse.com/security/cve/CVE-2016-5766/" source="CVE"/>
		<reference ref_id="CVE-2016-6128" ref_url="https://www.suse.com/security/cve/CVE-2016-6128/" source="CVE"/>
		<reference ref_id="CVE-2016-6132" ref_url="https://www.suse.com/security/cve/CVE-2016-6132/" source="CVE"/>
		<reference ref_id="CVE-2016-6207" ref_url="https://www.suse.com/security/cve/CVE-2016-6207/" source="CVE"/>
		<reference ref_id="CVE-2016-6214" ref_url="https://www.suse.com/security/cve/CVE-2016-6214/" source="CVE"/>
		<reference ref_id="CVE-2016-6905" ref_url="https://www.suse.com/security/cve/CVE-2016-6905/" source="CVE"/>
		<reference ref_id="CVE-2016-6912" ref_url="https://www.suse.com/security/cve/CVE-2016-6912/" source="CVE"/>
		<reference ref_id="CVE-2016-9317" ref_url="https://www.suse.com/security/cve/CVE-2016-9317/" source="CVE"/>
		<reference ref_id="CVE-2017-6362" ref_url="https://www.suse.com/security/cve/CVE-2017-6362/" source="CVE"/>
		<reference ref_id="CVE-2017-7890" ref_url="https://www.suse.com/security/cve/CVE-2017-7890/" source="CVE"/>
		<reference ref_id="CVE-2018-1000222" ref_url="https://www.suse.com/security/cve/CVE-2018-1000222/" source="CVE"/>
		<reference ref_id="CVE-2018-5711" ref_url="https://www.suse.com/security/cve/CVE-2018-5711/" source="CVE"/>
		<reference ref_id="CVE-2019-6977" ref_url="https://www.suse.com/security/cve/CVE-2019-6977/" source="CVE"/>
		<reference ref_id="CVE-2019-6978" ref_url="https://www.suse.com/security/cve/CVE-2019-6978/" source="CVE"/>
		<description>
These are all security issues fixed in the libgd3-2.2.5-4.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-2497/">CVE-2014-2497</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10166/">CVE-2016-10166</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10167/">CVE-2016-10167</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10168/">CVE-2016-10168</cve>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5116/">CVE-2016-5116</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5766/">CVE-2016-5766</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6128/">CVE-2016-6128</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6132/">CVE-2016-6132</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6207/">CVE-2016-6207</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6214/">CVE-2016-6214</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6905/">CVE-2016-6905</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6912/">CVE-2016-6912</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9317/">CVE-2016-9317</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6362/">CVE-2017-6362</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7890/">CVE-2017-7890</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000222/">CVE-2018-1000222</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5711/">CVE-2018-5711</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6977/">CVE-2019-6977</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6978/">CVE-2019-6978</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481372" comment="libgd3-2.2.5-4.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137039" version="1" class="patch">
	<metadata>
		<title>libgstgl-1_0-0-1.12.5-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-5838" ref_url="https://www.suse.com/security/cve/CVE-2017-5838/" source="CVE"/>
		<reference ref_id="CVE-2017-5847" ref_url="https://www.suse.com/security/cve/CVE-2017-5847/" source="CVE"/>
		<reference ref_id="CVE-2017-5848" ref_url="https://www.suse.com/security/cve/CVE-2017-5848/" source="CVE"/>
		<description>
These are all security issues fixed in the libgstgl-1_0-0-1.12.5-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5838/">CVE-2017-5838</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5847/">CVE-2017-5847</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5848/">CVE-2017-5848</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481373" comment="libgstgl-1_0-0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481374" comment="libgstphotography-1_0-0-1.12.5-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137040" version="1" class="patch">
	<metadata>
		<title>libgtk-vnc-2_0-0-0.7.2-1.33 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-5884" ref_url="https://www.suse.com/security/cve/CVE-2017-5884/" source="CVE"/>
		<reference ref_id="CVE-2017-5885" ref_url="https://www.suse.com/security/cve/CVE-2017-5885/" source="CVE"/>
		<description>
These are all security issues fixed in the libgtk-vnc-2_0-0-0.7.2-1.33 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-5884/">CVE-2017-5884</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-5885/">CVE-2017-5885</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480546" comment="libgtk-vnc-2_0-0-0.7.2-1.33 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480547" comment="libgvnc-1_0-0-0.7.2-1.33 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137041" version="1" class="patch">
	<metadata>
		<title>libhogweed4-3.4.1-4.9.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-8803" ref_url="https://www.suse.com/security/cve/CVE-2015-8803/" source="CVE"/>
		<reference ref_id="CVE-2015-8804" ref_url="https://www.suse.com/security/cve/CVE-2015-8804/" source="CVE"/>
		<reference ref_id="CVE-2015-8805" ref_url="https://www.suse.com/security/cve/CVE-2015-8805/" source="CVE"/>
		<reference ref_id="CVE-2016-6489" ref_url="https://www.suse.com/security/cve/CVE-2016-6489/" source="CVE"/>
		<reference ref_id="CVE-2018-16869" ref_url="https://www.suse.com/security/cve/CVE-2018-16869/" source="CVE"/>
		<description>
These are all security issues fixed in the libhogweed4-3.4.1-4.9.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8803/">CVE-2015-8803</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8804/">CVE-2015-8804</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8805/">CVE-2015-8805</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6489/">CVE-2016-6489</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16869/">CVE-2018-16869</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481375" comment="libhogweed4-3.4.1-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481376" comment="libhogweed4-32bit-3.4.1-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481377" comment="libnettle-devel-3.4.1-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481378" comment="libnettle6-3.4.1-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481379" comment="libnettle6-32bit-3.4.1-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137042" version="1" class="patch">
	<metadata>
		<title>libical2-2.0.0-1.37 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-5824" ref_url="https://www.suse.com/security/cve/CVE-2016-5824/" source="CVE"/>
		<reference ref_id="CVE-2016-5827" ref_url="https://www.suse.com/security/cve/CVE-2016-5827/" source="CVE"/>
		<reference ref_id="CVE-2016-9584" ref_url="https://www.suse.com/security/cve/CVE-2016-9584/" source="CVE"/>
		<description>
These are all security issues fixed in the libical2-2.0.0-1.37 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5824/">CVE-2016-5824</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5827/">CVE-2016-5827</cve>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9584/">CVE-2016-9584</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480551" comment="libical2-2.0.0-1.37 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137043" version="1" class="patch">
	<metadata>
		<title>libidn-devel-1.34-1.9 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-2059" ref_url="https://www.suse.com/security/cve/CVE-2015-2059/" source="CVE"/>
		<reference ref_id="CVE-2015-8948" ref_url="https://www.suse.com/security/cve/CVE-2015-8948/" source="CVE"/>
		<reference ref_id="CVE-2016-6261" ref_url="https://www.suse.com/security/cve/CVE-2016-6261/" source="CVE"/>
		<reference ref_id="CVE-2016-6262" ref_url="https://www.suse.com/security/cve/CVE-2016-6262/" source="CVE"/>
		<reference ref_id="CVE-2016-6263" ref_url="https://www.suse.com/security/cve/CVE-2016-6263/" source="CVE"/>
		<reference ref_id="CVE-2017-14062" ref_url="https://www.suse.com/security/cve/CVE-2017-14062/" source="CVE"/>
		<description>
These are all security issues fixed in the libidn-devel-1.34-1.9 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-2059/">CVE-2015-2059</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-8948/">CVE-2015-8948</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6261/">CVE-2016-6261</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6262/">CVE-2016-6262</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6263/">CVE-2016-6263</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14062/">CVE-2017-14062</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480552" comment="libidn-devel-1.34-1.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480553" comment="libidn11-1.34-1.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481380" comment="libidn11-32bit-1.34-1.9 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137044" version="1" class="patch">
	<metadata>
		<title>libidn2-0-2.0.4-1.23 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-2059" ref_url="https://www.suse.com/security/cve/CVE-2015-2059/" source="CVE"/>
		<reference ref_id="CVE-2015-8948" ref_url="https://www.suse.com/security/cve/CVE-2015-8948/" source="CVE"/>
		<reference ref_id="CVE-2016-6261" ref_url="https://www.suse.com/security/cve/CVE-2016-6261/" source="CVE"/>
		<reference ref_id="CVE-2016-6262" ref_url="https://www.suse.com/security/cve/CVE-2016-6262/" source="CVE"/>
		<reference ref_id="CVE-2016-6263" ref_url="https://www.suse.com/security/cve/CVE-2016-6263/" source="CVE"/>
		<description>
These are all security issues fixed in the libidn2-0-2.0.4-1.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-2059/">CVE-2015-2059</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-8948/">CVE-2015-8948</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6261/">CVE-2016-6261</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6262/">CVE-2016-6262</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6263/">CVE-2016-6263</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480554" comment="libidn2-0-2.0.4-1.23 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480555" comment="libidn2-0-32bit-2.0.4-1.23 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480556" comment="libidn2-devel-2.0.4-1.23 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137045" version="1" class="patch">
	<metadata>
		<title>libipa_hbac-devel-1.16.1-3.18.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-4341" ref_url="https://www.suse.com/security/cve/CVE-2010-4341/" source="CVE"/>
		<reference ref_id="CVE-2011-1758" ref_url="https://www.suse.com/security/cve/CVE-2011-1758/" source="CVE"/>
		<reference ref_id="CVE-2013-0219" ref_url="https://www.suse.com/security/cve/CVE-2013-0219/" source="CVE"/>
		<reference ref_id="CVE-2013-0220" ref_url="https://www.suse.com/security/cve/CVE-2013-0220/" source="CVE"/>
		<reference ref_id="CVE-2013-0287" ref_url="https://www.suse.com/security/cve/CVE-2013-0287/" source="CVE"/>
		<reference ref_id="CVE-2014-0249" ref_url="https://www.suse.com/security/cve/CVE-2014-0249/" source="CVE"/>
		<reference ref_id="CVE-2017-12173" ref_url="https://www.suse.com/security/cve/CVE-2017-12173/" source="CVE"/>
		<reference ref_id="CVE-2018-10852" ref_url="https://www.suse.com/security/cve/CVE-2018-10852/" source="CVE"/>
		<reference ref_id="CVE-2019-3811" ref_url="https://www.suse.com/security/cve/CVE-2019-3811/" source="CVE"/>
		<description>
These are all security issues fixed in the libipa_hbac-devel-1.16.1-3.18.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4341/">CVE-2010-4341</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1758/">CVE-2011-1758</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0219/">CVE-2013-0219</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0220/">CVE-2013-0220</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0287/">CVE-2013-0287</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-0249/">CVE-2014-0249</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12173/">CVE-2017-12173</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10852/">CVE-2018-10852</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-3811/">CVE-2019-3811</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481381" comment="libipa_hbac-devel-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481382" comment="libipa_hbac0-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481383" comment="libsss_certmap-devel-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481384" comment="libsss_certmap0-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481385" comment="libsss_idmap-devel-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481386" comment="libsss_idmap0-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481387" comment="libsss_nss_idmap-devel-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481388" comment="libsss_nss_idmap0-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481389" comment="libsss_simpleifp-devel-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481390" comment="libsss_simpleifp0-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481391" comment="python3-sssd-config-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481392" comment="sssd-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481393" comment="sssd-32bit-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481394" comment="sssd-ad-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481395" comment="sssd-dbus-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481396" comment="sssd-ipa-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481397" comment="sssd-krb5-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481398" comment="sssd-krb5-common-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481399" comment="sssd-ldap-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481400" comment="sssd-proxy-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481401" comment="sssd-tools-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481402" comment="sssd-wbclient-1.16.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481403" comment="sssd-wbclient-devel-1.16.1-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137046" version="1" class="patch">
	<metadata>
		<title>libjansson-devel-2.9-1.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-6401" ref_url="https://www.suse.com/security/cve/CVE-2013-6401/" source="CVE"/>
		<description>
These are all security issues fixed in the libjansson-devel-2.9-1.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6401/">CVE-2013-6401</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480579" comment="libjansson-devel-2.9-1.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480580" comment="libjansson4-2.9-1.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481404" comment="libjansson4-32bit-2.9-1.24 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137047" version="1" class="patch">
	<metadata>
		<title>libjasper4-2.0.14-3.3.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2008-3522" ref_url="https://www.suse.com/security/cve/CVE-2008-3522/" source="CVE"/>
		<reference ref_id="CVE-2011-4516" ref_url="https://www.suse.com/security/cve/CVE-2011-4516/" source="CVE"/>
		<reference ref_id="CVE-2011-4517" ref_url="https://www.suse.com/security/cve/CVE-2011-4517/" source="CVE"/>
		<reference ref_id="CVE-2014-8137" ref_url="https://www.suse.com/security/cve/CVE-2014-8137/" source="CVE"/>
		<reference ref_id="CVE-2014-8138" ref_url="https://www.suse.com/security/cve/CVE-2014-8138/" source="CVE"/>
		<reference ref_id="CVE-2014-8157" ref_url="https://www.suse.com/security/cve/CVE-2014-8157/" source="CVE"/>
		<reference ref_id="CVE-2014-8158" ref_url="https://www.suse.com/security/cve/CVE-2014-8158/" source="CVE"/>
		<reference ref_id="CVE-2014-9029" ref_url="https://www.suse.com/security/cve/CVE-2014-9029/" source="CVE"/>
		<reference ref_id="CVE-2015-5203" ref_url="https://www.suse.com/security/cve/CVE-2015-5203/" source="CVE"/>
		<reference ref_id="CVE-2015-5221" ref_url="https://www.suse.com/security/cve/CVE-2015-5221/" source="CVE"/>
		<reference ref_id="CVE-2016-10251" ref_url="https://www.suse.com/security/cve/CVE-2016-10251/" source="CVE"/>
		<reference ref_id="CVE-2016-1577" ref_url="https://www.suse.com/security/cve/CVE-2016-1577/" source="CVE"/>
		<reference ref_id="CVE-2016-1867" ref_url="https://www.suse.com/security/cve/CVE-2016-1867/" source="CVE"/>
		<reference ref_id="CVE-2016-2089" ref_url="https://www.suse.com/security/cve/CVE-2016-2089/" source="CVE"/>
		<reference ref_id="CVE-2016-2116" ref_url="https://www.suse.com/security/cve/CVE-2016-2116/" source="CVE"/>
		<reference ref_id="CVE-2016-8654" ref_url="https://www.suse.com/security/cve/CVE-2016-8654/" source="CVE"/>
		<reference ref_id="CVE-2016-8690" ref_url="https://www.suse.com/security/cve/CVE-2016-8690/" source="CVE"/>
		<reference ref_id="CVE-2016-8691" ref_url="https://www.suse.com/security/cve/CVE-2016-8691/" source="CVE"/>
		<reference ref_id="CVE-2016-8692" ref_url="https://www.suse.com/security/cve/CVE-2016-8692/" source="CVE"/>
		<reference ref_id="CVE-2016-8693" ref_url="https://www.suse.com/security/cve/CVE-2016-8693/" source="CVE"/>
		<reference ref_id="CVE-2016-8880" ref_url="https://www.suse.com/security/cve/CVE-2016-8880/" source="CVE"/>
		<reference ref_id="CVE-2016-8881" ref_url="https://www.suse.com/security/cve/CVE-2016-8881/" source="CVE"/>
		<reference ref_id="CVE-2016-8882" ref_url="https://www.suse.com/security/cve/CVE-2016-8882/" source="CVE"/>
		<reference ref_id="CVE-2016-8883" ref_url="https://www.suse.com/security/cve/CVE-2016-8883/" source="CVE"/>
		<reference ref_id="CVE-2016-8884" ref_url="https://www.suse.com/security/cve/CVE-2016-8884/" source="CVE"/>
		<reference ref_id="CVE-2016-8885" ref_url="https://www.suse.com/security/cve/CVE-2016-8885/" source="CVE"/>
		<reference ref_id="CVE-2016-8886" ref_url="https://www.suse.com/security/cve/CVE-2016-8886/" source="CVE"/>
		<reference ref_id="CVE-2016-8887" ref_url="https://www.suse.com/security/cve/CVE-2016-8887/" source="CVE"/>
		<reference ref_id="CVE-2016-9262" ref_url="https://www.suse.com/security/cve/CVE-2016-9262/" source="CVE"/>
		<reference ref_id="CVE-2016-9387" ref_url="https://www.suse.com/security/cve/CVE-2016-9387/" source="CVE"/>
		<reference ref_id="CVE-2016-9388" ref_url="https://www.suse.com/security/cve/CVE-2016-9388/" source="CVE"/>
		<reference ref_id="CVE-2016-9389" ref_url="https://www.suse.com/security/cve/CVE-2016-9389/" source="CVE"/>
		<reference ref_id="CVE-2016-9390" ref_url="https://www.suse.com/security/cve/CVE-2016-9390/" source="CVE"/>
		<reference ref_id="CVE-2016-9391" ref_url="https://www.suse.com/security/cve/CVE-2016-9391/" source="CVE"/>
		<reference ref_id="CVE-2016-9392" ref_url="https://www.suse.com/security/cve/CVE-2016-9392/" source="CVE"/>
		<reference ref_id="CVE-2016-9393" ref_url="https://www.suse.com/security/cve/CVE-2016-9393/" source="CVE"/>
		<reference ref_id="CVE-2016-9394" ref_url="https://www.suse.com/security/cve/CVE-2016-9394/" source="CVE"/>
		<reference ref_id="CVE-2016-9395" ref_url="https://www.suse.com/security/cve/CVE-2016-9395/" source="CVE"/>
		<reference ref_id="CVE-2016-9396" ref_url="https://www.suse.com/security/cve/CVE-2016-9396/" source="CVE"/>
		<reference ref_id="CVE-2016-9398" ref_url="https://www.suse.com/security/cve/CVE-2016-9398/" source="CVE"/>
		<reference ref_id="CVE-2016-9557" ref_url="https://www.suse.com/security/cve/CVE-2016-9557/" source="CVE"/>
		<reference ref_id="CVE-2016-9560" ref_url="https://www.suse.com/security/cve/CVE-2016-9560/" source="CVE"/>
		<reference ref_id="CVE-2016-9583" ref_url="https://www.suse.com/security/cve/CVE-2016-9583/" source="CVE"/>
		<reference ref_id="CVE-2016-9591" ref_url="https://www.suse.com/security/cve/CVE-2016-9591/" source="CVE"/>
		<reference ref_id="CVE-2016-9600" ref_url="https://www.suse.com/security/cve/CVE-2016-9600/" source="CVE"/>
		<reference ref_id="CVE-2017-1000050" ref_url="https://www.suse.com/security/cve/CVE-2017-1000050/" source="CVE"/>
		<reference ref_id="CVE-2017-5498" ref_url="https://www.suse.com/security/cve/CVE-2017-5498/" source="CVE"/>
		<reference ref_id="CVE-2017-6850" ref_url="https://www.suse.com/security/cve/CVE-2017-6850/" source="CVE"/>
		<reference ref_id="CVE-2018-19539" ref_url="https://www.suse.com/security/cve/CVE-2018-19539/" source="CVE"/>
		<reference ref_id="CVE-2018-19542" ref_url="https://www.suse.com/security/cve/CVE-2018-19542/" source="CVE"/>
		<reference ref_id="CVE-2018-9055" ref_url="https://www.suse.com/security/cve/CVE-2018-9055/" source="CVE"/>
		<description>
These are all security issues fixed in the libjasper4-2.0.14-3.3.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-3522/">CVE-2008-3522</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4516/">CVE-2011-4516</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4517/">CVE-2011-4517</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8137/">CVE-2014-8137</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8138/">CVE-2014-8138</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8157/">CVE-2014-8157</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8158/">CVE-2014-8158</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9029/">CVE-2014-9029</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-5203/">CVE-2015-5203</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-5221/">CVE-2015-5221</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10251/">CVE-2016-10251</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1577/">CVE-2016-1577</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1867/">CVE-2016-1867</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2089/">CVE-2016-2089</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-2116/">CVE-2016-2116</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8654/">CVE-2016-8654</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8690/">CVE-2016-8690</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8691/">CVE-2016-8691</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8692/">CVE-2016-8692</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8693/">CVE-2016-8693</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-8880/">CVE-2016-8880</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-8881/">CVE-2016-8881</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8882/">CVE-2016-8882</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8883/">CVE-2016-8883</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8884/">CVE-2016-8884</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8885/">CVE-2016-8885</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8886/">CVE-2016-8886</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8887/">CVE-2016-8887</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9262/">CVE-2016-9262</cve>
	<cve impact="moderate" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-9387/">CVE-2016-9387</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9388/">CVE-2016-9388</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9389/">CVE-2016-9389</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9390/">CVE-2016-9390</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9391/">CVE-2016-9391</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9392/">CVE-2016-9392</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9393/">CVE-2016-9393</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9394/">CVE-2016-9394</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9395/">CVE-2016-9395</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9396/">CVE-2016-9396</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9398/">CVE-2016-9398</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9557/">CVE-2016-9557</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9560/">CVE-2016-9560</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9583/">CVE-2016-9583</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9591/">CVE-2016-9591</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9600/">CVE-2016-9600</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000050/">CVE-2017-1000050</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5498/">CVE-2017-5498</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6850/">CVE-2017-6850</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19539/">CVE-2018-19539</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19542/">CVE-2018-19542</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9055/">CVE-2018-9055</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481405" comment="libjasper4-2.0.14-3.3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137048" version="1" class="patch">
	<metadata>
		<title>libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-1856" ref_url="https://www.suse.com/security/cve/CVE-2016-1856/" source="CVE"/>
		<reference ref_id="CVE-2016-1857" ref_url="https://www.suse.com/security/cve/CVE-2016-1857/" source="CVE"/>
		<reference ref_id="CVE-2016-4590" ref_url="https://www.suse.com/security/cve/CVE-2016-4590/" source="CVE"/>
		<reference ref_id="CVE-2016-4591" ref_url="https://www.suse.com/security/cve/CVE-2016-4591/" source="CVE"/>
		<reference ref_id="CVE-2016-4622" ref_url="https://www.suse.com/security/cve/CVE-2016-4622/" source="CVE"/>
		<reference ref_id="CVE-2016-4624" ref_url="https://www.suse.com/security/cve/CVE-2016-4624/" source="CVE"/>
		<reference ref_id="CVE-2016-4692" ref_url="https://www.suse.com/security/cve/CVE-2016-4692/" source="CVE"/>
		<reference ref_id="CVE-2016-4743" ref_url="https://www.suse.com/security/cve/CVE-2016-4743/" source="CVE"/>
		<reference ref_id="CVE-2016-7586" ref_url="https://www.suse.com/security/cve/CVE-2016-7586/" source="CVE"/>
		<reference ref_id="CVE-2016-7587" ref_url="https://www.suse.com/security/cve/CVE-2016-7587/" source="CVE"/>
		<reference ref_id="CVE-2016-7589" ref_url="https://www.suse.com/security/cve/CVE-2016-7589/" source="CVE"/>
		<reference ref_id="CVE-2016-7592" ref_url="https://www.suse.com/security/cve/CVE-2016-7592/" source="CVE"/>
		<reference ref_id="CVE-2016-7598" ref_url="https://www.suse.com/security/cve/CVE-2016-7598/" source="CVE"/>
		<reference ref_id="CVE-2016-7599" ref_url="https://www.suse.com/security/cve/CVE-2016-7599/" source="CVE"/>
		<reference ref_id="CVE-2016-7610" ref_url="https://www.suse.com/security/cve/CVE-2016-7610/" source="CVE"/>
		<reference ref_id="CVE-2016-7623" ref_url="https://www.suse.com/security/cve/CVE-2016-7623/" source="CVE"/>
		<reference ref_id="CVE-2016-7632" ref_url="https://www.suse.com/security/cve/CVE-2016-7632/" source="CVE"/>
		<reference ref_id="CVE-2016-7635" ref_url="https://www.suse.com/security/cve/CVE-2016-7635/" source="CVE"/>
		<reference ref_id="CVE-2016-7639" ref_url="https://www.suse.com/security/cve/CVE-2016-7639/" source="CVE"/>
		<reference ref_id="CVE-2016-7641" ref_url="https://www.suse.com/security/cve/CVE-2016-7641/" source="CVE"/>
		<reference ref_id="CVE-2016-7645" ref_url="https://www.suse.com/security/cve/CVE-2016-7645/" source="CVE"/>
		<reference ref_id="CVE-2016-7652" ref_url="https://www.suse.com/security/cve/CVE-2016-7652/" source="CVE"/>
		<reference ref_id="CVE-2016-7654" ref_url="https://www.suse.com/security/cve/CVE-2016-7654/" source="CVE"/>
		<reference ref_id="CVE-2016-7656" ref_url="https://www.suse.com/security/cve/CVE-2016-7656/" source="CVE"/>
		<reference ref_id="CVE-2017-1000121" ref_url="https://www.suse.com/security/cve/CVE-2017-1000121/" source="CVE"/>
		<reference ref_id="CVE-2017-1000122" ref_url="https://www.suse.com/security/cve/CVE-2017-1000122/" source="CVE"/>
		<reference ref_id="CVE-2017-13788" ref_url="https://www.suse.com/security/cve/CVE-2017-13788/" source="CVE"/>
		<reference ref_id="CVE-2017-13798" ref_url="https://www.suse.com/security/cve/CVE-2017-13798/" source="CVE"/>
		<reference ref_id="CVE-2017-13803" ref_url="https://www.suse.com/security/cve/CVE-2017-13803/" source="CVE"/>
		<reference ref_id="CVE-2017-13856" ref_url="https://www.suse.com/security/cve/CVE-2017-13856/" source="CVE"/>
		<reference ref_id="CVE-2017-13866" ref_url="https://www.suse.com/security/cve/CVE-2017-13866/" source="CVE"/>
		<reference ref_id="CVE-2017-13870" ref_url="https://www.suse.com/security/cve/CVE-2017-13870/" source="CVE"/>
		<reference ref_id="CVE-2017-13884" ref_url="https://www.suse.com/security/cve/CVE-2017-13884/" source="CVE"/>
		<reference ref_id="CVE-2017-13885" ref_url="https://www.suse.com/security/cve/CVE-2017-13885/" source="CVE"/>
		<reference ref_id="CVE-2017-2350" ref_url="https://www.suse.com/security/cve/CVE-2017-2350/" source="CVE"/>
		<reference ref_id="CVE-2017-2354" ref_url="https://www.suse.com/security/cve/CVE-2017-2354/" source="CVE"/>
		<reference ref_id="CVE-2017-2355" ref_url="https://www.suse.com/security/cve/CVE-2017-2355/" source="CVE"/>
		<reference ref_id="CVE-2017-2356" ref_url="https://www.suse.com/security/cve/CVE-2017-2356/" source="CVE"/>
		<reference ref_id="CVE-2017-2362" ref_url="https://www.suse.com/security/cve/CVE-2017-2362/" source="CVE"/>
		<reference ref_id="CVE-2017-2363" ref_url="https://www.suse.com/security/cve/CVE-2017-2363/" source="CVE"/>
		<reference ref_id="CVE-2017-2364" ref_url="https://www.suse.com/security/cve/CVE-2017-2364/" source="CVE"/>
		<reference ref_id="CVE-2017-2365" ref_url="https://www.suse.com/security/cve/CVE-2017-2365/" source="CVE"/>
		<reference ref_id="CVE-2017-2366" ref_url="https://www.suse.com/security/cve/CVE-2017-2366/" source="CVE"/>
		<reference ref_id="CVE-2017-2369" ref_url="https://www.suse.com/security/cve/CVE-2017-2369/" source="CVE"/>
		<reference ref_id="CVE-2017-2371" ref_url="https://www.suse.com/security/cve/CVE-2017-2371/" source="CVE"/>
		<reference ref_id="CVE-2017-2373" ref_url="https://www.suse.com/security/cve/CVE-2017-2373/" source="CVE"/>
		<reference ref_id="CVE-2017-2496" ref_url="https://www.suse.com/security/cve/CVE-2017-2496/" source="CVE"/>
		<reference ref_id="CVE-2017-2510" ref_url="https://www.suse.com/security/cve/CVE-2017-2510/" source="CVE"/>
		<reference ref_id="CVE-2017-2538" ref_url="https://www.suse.com/security/cve/CVE-2017-2538/" source="CVE"/>
		<reference ref_id="CVE-2017-2539" ref_url="https://www.suse.com/security/cve/CVE-2017-2539/" source="CVE"/>
		<reference ref_id="CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715/" source="CVE"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2017-7006" ref_url="https://www.suse.com/security/cve/CVE-2017-7006/" source="CVE"/>
		<reference ref_id="CVE-2017-7011" ref_url="https://www.suse.com/security/cve/CVE-2017-7011/" source="CVE"/>
		<reference ref_id="CVE-2017-7012" ref_url="https://www.suse.com/security/cve/CVE-2017-7012/" source="CVE"/>
		<reference ref_id="CVE-2017-7018" ref_url="https://www.suse.com/security/cve/CVE-2017-7018/" source="CVE"/>
		<reference ref_id="CVE-2017-7019" ref_url="https://www.suse.com/security/cve/CVE-2017-7019/" source="CVE"/>
		<reference ref_id="CVE-2017-7020" ref_url="https://www.suse.com/security/cve/CVE-2017-7020/" source="CVE"/>
		<reference ref_id="CVE-2017-7030" ref_url="https://www.suse.com/security/cve/CVE-2017-7030/" source="CVE"/>
		<reference ref_id="CVE-2017-7034" ref_url="https://www.suse.com/security/cve/CVE-2017-7034/" source="CVE"/>
		<reference ref_id="CVE-2017-7037" ref_url="https://www.suse.com/security/cve/CVE-2017-7037/" source="CVE"/>
		<reference ref_id="CVE-2017-7038" ref_url="https://www.suse.com/security/cve/CVE-2017-7038/" source="CVE"/>
		<reference ref_id="CVE-2017-7039" ref_url="https://www.suse.com/security/cve/CVE-2017-7039/" source="CVE"/>
		<reference ref_id="CVE-2017-7040" ref_url="https://www.suse.com/security/cve/CVE-2017-7040/" source="CVE"/>
		<reference ref_id="CVE-2017-7041" ref_url="https://www.suse.com/security/cve/CVE-2017-7041/" source="CVE"/>
		<reference ref_id="CVE-2017-7042" ref_url="https://www.suse.com/security/cve/CVE-2017-7042/" source="CVE"/>
		<reference ref_id="CVE-2017-7043" ref_url="https://www.suse.com/security/cve/CVE-2017-7043/" source="CVE"/>
		<reference ref_id="CVE-2017-7046" ref_url="https://www.suse.com/security/cve/CVE-2017-7046/" source="CVE"/>
		<reference ref_id="CVE-2017-7048" ref_url="https://www.suse.com/security/cve/CVE-2017-7048/" source="CVE"/>
		<reference ref_id="CVE-2017-7049" ref_url="https://www.suse.com/security/cve/CVE-2017-7049/" source="CVE"/>
		<reference ref_id="CVE-2017-7052" ref_url="https://www.suse.com/security/cve/CVE-2017-7052/" source="CVE"/>
		<reference ref_id="CVE-2017-7055" ref_url="https://www.suse.com/security/cve/CVE-2017-7055/" source="CVE"/>
		<reference ref_id="CVE-2017-7056" ref_url="https://www.suse.com/security/cve/CVE-2017-7056/" source="CVE"/>
		<reference ref_id="CVE-2017-7059" ref_url="https://www.suse.com/security/cve/CVE-2017-7059/" source="CVE"/>
		<reference ref_id="CVE-2017-7061" ref_url="https://www.suse.com/security/cve/CVE-2017-7061/" source="CVE"/>
		<reference ref_id="CVE-2017-7064" ref_url="https://www.suse.com/security/cve/CVE-2017-7064/" source="CVE"/>
		<reference ref_id="CVE-2017-7081" ref_url="https://www.suse.com/security/cve/CVE-2017-7081/" source="CVE"/>
		<reference ref_id="CVE-2017-7087" ref_url="https://www.suse.com/security/cve/CVE-2017-7087/" source="CVE"/>
		<reference ref_id="CVE-2017-7089" ref_url="https://www.suse.com/security/cve/CVE-2017-7089/" source="CVE"/>
		<reference ref_id="CVE-2017-7090" ref_url="https://www.suse.com/security/cve/CVE-2017-7090/" source="CVE"/>
		<reference ref_id="CVE-2017-7091" ref_url="https://www.suse.com/security/cve/CVE-2017-7091/" source="CVE"/>
		<reference ref_id="CVE-2017-7092" ref_url="https://www.suse.com/security/cve/CVE-2017-7092/" source="CVE"/>
		<reference ref_id="CVE-2017-7093" ref_url="https://www.suse.com/security/cve/CVE-2017-7093/" source="CVE"/>
		<reference ref_id="CVE-2017-7094" ref_url="https://www.suse.com/security/cve/CVE-2017-7094/" source="CVE"/>
		<reference ref_id="CVE-2017-7095" ref_url="https://www.suse.com/security/cve/CVE-2017-7095/" source="CVE"/>
		<reference ref_id="CVE-2017-7096" ref_url="https://www.suse.com/security/cve/CVE-2017-7096/" source="CVE"/>
		<reference ref_id="CVE-2017-7098" ref_url="https://www.suse.com/security/cve/CVE-2017-7098/" source="CVE"/>
		<reference ref_id="CVE-2017-7099" ref_url="https://www.suse.com/security/cve/CVE-2017-7099/" source="CVE"/>
		<reference ref_id="CVE-2017-7100" ref_url="https://www.suse.com/security/cve/CVE-2017-7100/" source="CVE"/>
		<reference ref_id="CVE-2017-7102" ref_url="https://www.suse.com/security/cve/CVE-2017-7102/" source="CVE"/>
		<reference ref_id="CVE-2017-7104" ref_url="https://www.suse.com/security/cve/CVE-2017-7104/" source="CVE"/>
		<reference ref_id="CVE-2017-7107" ref_url="https://www.suse.com/security/cve/CVE-2017-7107/" source="CVE"/>
		<reference ref_id="CVE-2017-7109" ref_url="https://www.suse.com/security/cve/CVE-2017-7109/" source="CVE"/>
		<reference ref_id="CVE-2017-7111" ref_url="https://www.suse.com/security/cve/CVE-2017-7111/" source="CVE"/>
		<reference ref_id="CVE-2017-7117" ref_url="https://www.suse.com/security/cve/CVE-2017-7117/" source="CVE"/>
		<reference ref_id="CVE-2017-7120" ref_url="https://www.suse.com/security/cve/CVE-2017-7120/" source="CVE"/>
		<reference ref_id="CVE-2017-7142" ref_url="https://www.suse.com/security/cve/CVE-2017-7142/" source="CVE"/>
		<reference ref_id="CVE-2017-7153" ref_url="https://www.suse.com/security/cve/CVE-2017-7153/" source="CVE"/>
		<reference ref_id="CVE-2017-7156" ref_url="https://www.suse.com/security/cve/CVE-2017-7156/" source="CVE"/>
		<reference ref_id="CVE-2017-7157" ref_url="https://www.suse.com/security/cve/CVE-2017-7157/" source="CVE"/>
		<reference ref_id="CVE-2017-7160" ref_url="https://www.suse.com/security/cve/CVE-2017-7160/" source="CVE"/>
		<reference ref_id="CVE-2017-7161" ref_url="https://www.suse.com/security/cve/CVE-2017-7161/" source="CVE"/>
		<reference ref_id="CVE-2017-7165" ref_url="https://www.suse.com/security/cve/CVE-2017-7165/" source="CVE"/>
		<reference ref_id="CVE-2018-11646" ref_url="https://www.suse.com/security/cve/CVE-2018-11646/" source="CVE"/>
		<reference ref_id="CVE-2018-11712" ref_url="https://www.suse.com/security/cve/CVE-2018-11712/" source="CVE"/>
		<reference ref_id="CVE-2018-11713" ref_url="https://www.suse.com/security/cve/CVE-2018-11713/" source="CVE"/>
		<reference ref_id="CVE-2018-12911" ref_url="https://www.suse.com/security/cve/CVE-2018-12911/" source="CVE"/>
		<reference ref_id="CVE-2018-4088" ref_url="https://www.suse.com/security/cve/CVE-2018-4088/" source="CVE"/>
		<reference ref_id="CVE-2018-4096" ref_url="https://www.suse.com/security/cve/CVE-2018-4096/" source="CVE"/>
		<reference ref_id="CVE-2018-4101" ref_url="https://www.suse.com/security/cve/CVE-2018-4101/" source="CVE"/>
		<reference ref_id="CVE-2018-4113" ref_url="https://www.suse.com/security/cve/CVE-2018-4113/" source="CVE"/>
		<reference ref_id="CVE-2018-4114" ref_url="https://www.suse.com/security/cve/CVE-2018-4114/" source="CVE"/>
		<reference ref_id="CVE-2018-4117" ref_url="https://www.suse.com/security/cve/CVE-2018-4117/" source="CVE"/>
		<reference ref_id="CVE-2018-4118" ref_url="https://www.suse.com/security/cve/CVE-2018-4118/" source="CVE"/>
		<reference ref_id="CVE-2018-4119" ref_url="https://www.suse.com/security/cve/CVE-2018-4119/" source="CVE"/>
		<reference ref_id="CVE-2018-4120" ref_url="https://www.suse.com/security/cve/CVE-2018-4120/" source="CVE"/>
		<reference ref_id="CVE-2018-4122" ref_url="https://www.suse.com/security/cve/CVE-2018-4122/" source="CVE"/>
		<reference ref_id="CVE-2018-4125" ref_url="https://www.suse.com/security/cve/CVE-2018-4125/" source="CVE"/>
		<reference ref_id="CVE-2018-4127" ref_url="https://www.suse.com/security/cve/CVE-2018-4127/" source="CVE"/>
		<reference ref_id="CVE-2018-4128" ref_url="https://www.suse.com/security/cve/CVE-2018-4128/" source="CVE"/>
		<reference ref_id="CVE-2018-4129" ref_url="https://www.suse.com/security/cve/CVE-2018-4129/" source="CVE"/>
		<reference ref_id="CVE-2018-4133" ref_url="https://www.suse.com/security/cve/CVE-2018-4133/" source="CVE"/>
		<reference ref_id="CVE-2018-4146" ref_url="https://www.suse.com/security/cve/CVE-2018-4146/" source="CVE"/>
		<reference ref_id="CVE-2018-4161" ref_url="https://www.suse.com/security/cve/CVE-2018-4161/" source="CVE"/>
		<reference ref_id="CVE-2018-4162" ref_url="https://www.suse.com/security/cve/CVE-2018-4162/" source="CVE"/>
		<reference ref_id="CVE-2018-4163" ref_url="https://www.suse.com/security/cve/CVE-2018-4163/" source="CVE"/>
		<reference ref_id="CVE-2018-4165" ref_url="https://www.suse.com/security/cve/CVE-2018-4165/" source="CVE"/>
		<reference ref_id="CVE-2018-4190" ref_url="https://www.suse.com/security/cve/CVE-2018-4190/" source="CVE"/>
		<reference ref_id="CVE-2018-4191" ref_url="https://www.suse.com/security/cve/CVE-2018-4191/" source="CVE"/>
		<reference ref_id="CVE-2018-4197" ref_url="https://www.suse.com/security/cve/CVE-2018-4197/" source="CVE"/>
		<reference ref_id="CVE-2018-4199" ref_url="https://www.suse.com/security/cve/CVE-2018-4199/" source="CVE"/>
		<reference ref_id="CVE-2018-4200" ref_url="https://www.suse.com/security/cve/CVE-2018-4200/" source="CVE"/>
		<reference ref_id="CVE-2018-4204" ref_url="https://www.suse.com/security/cve/CVE-2018-4204/" source="CVE"/>
		<reference ref_id="CVE-2018-4207" ref_url="https://www.suse.com/security/cve/CVE-2018-4207/" source="CVE"/>
		<reference ref_id="CVE-2018-4208" ref_url="https://www.suse.com/security/cve/CVE-2018-4208/" source="CVE"/>
		<reference ref_id="CVE-2018-4209" ref_url="https://www.suse.com/security/cve/CVE-2018-4209/" source="CVE"/>
		<reference ref_id="CVE-2018-4210" ref_url="https://www.suse.com/security/cve/CVE-2018-4210/" source="CVE"/>
		<reference ref_id="CVE-2018-4212" ref_url="https://www.suse.com/security/cve/CVE-2018-4212/" source="CVE"/>
		<reference ref_id="CVE-2018-4213" ref_url="https://www.suse.com/security/cve/CVE-2018-4213/" source="CVE"/>
		<reference ref_id="CVE-2018-4218" ref_url="https://www.suse.com/security/cve/CVE-2018-4218/" source="CVE"/>
		<reference ref_id="CVE-2018-4222" ref_url="https://www.suse.com/security/cve/CVE-2018-4222/" source="CVE"/>
		<reference ref_id="CVE-2018-4232" ref_url="https://www.suse.com/security/cve/CVE-2018-4232/" source="CVE"/>
		<reference ref_id="CVE-2018-4233" ref_url="https://www.suse.com/security/cve/CVE-2018-4233/" source="CVE"/>
		<reference ref_id="CVE-2018-4246" ref_url="https://www.suse.com/security/cve/CVE-2018-4246/" source="CVE"/>
		<reference ref_id="CVE-2018-4261" ref_url="https://www.suse.com/security/cve/CVE-2018-4261/" source="CVE"/>
		<reference ref_id="CVE-2018-4262" ref_url="https://www.suse.com/security/cve/CVE-2018-4262/" source="CVE"/>
		<reference ref_id="CVE-2018-4263" ref_url="https://www.suse.com/security/cve/CVE-2018-4263/" source="CVE"/>
		<reference ref_id="CVE-2018-4264" ref_url="https://www.suse.com/security/cve/CVE-2018-4264/" source="CVE"/>
		<reference ref_id="CVE-2018-4265" ref_url="https://www.suse.com/security/cve/CVE-2018-4265/" source="CVE"/>
		<reference ref_id="CVE-2018-4266" ref_url="https://www.suse.com/security/cve/CVE-2018-4266/" source="CVE"/>
		<reference ref_id="CVE-2018-4267" ref_url="https://www.suse.com/security/cve/CVE-2018-4267/" source="CVE"/>
		<reference ref_id="CVE-2018-4270" ref_url="https://www.suse.com/security/cve/CVE-2018-4270/" source="CVE"/>
		<reference ref_id="CVE-2018-4272" ref_url="https://www.suse.com/security/cve/CVE-2018-4272/" source="CVE"/>
		<reference ref_id="CVE-2018-4273" ref_url="https://www.suse.com/security/cve/CVE-2018-4273/" source="CVE"/>
		<reference ref_id="CVE-2018-4278" ref_url="https://www.suse.com/security/cve/CVE-2018-4278/" source="CVE"/>
		<reference ref_id="CVE-2018-4284" ref_url="https://www.suse.com/security/cve/CVE-2018-4284/" source="CVE"/>
		<reference ref_id="CVE-2018-4299" ref_url="https://www.suse.com/security/cve/CVE-2018-4299/" source="CVE"/>
		<reference ref_id="CVE-2018-4306" ref_url="https://www.suse.com/security/cve/CVE-2018-4306/" source="CVE"/>
		<reference ref_id="CVE-2018-4309" ref_url="https://www.suse.com/security/cve/CVE-2018-4309/" source="CVE"/>
		<reference ref_id="CVE-2018-4312" ref_url="https://www.suse.com/security/cve/CVE-2018-4312/" source="CVE"/>
		<reference ref_id="CVE-2018-4314" ref_url="https://www.suse.com/security/cve/CVE-2018-4314/" source="CVE"/>
		<reference ref_id="CVE-2018-4315" ref_url="https://www.suse.com/security/cve/CVE-2018-4315/" source="CVE"/>
		<reference ref_id="CVE-2018-4316" ref_url="https://www.suse.com/security/cve/CVE-2018-4316/" source="CVE"/>
		<reference ref_id="CVE-2018-4317" ref_url="https://www.suse.com/security/cve/CVE-2018-4317/" source="CVE"/>
		<reference ref_id="CVE-2018-4318" ref_url="https://www.suse.com/security/cve/CVE-2018-4318/" source="CVE"/>
		<reference ref_id="CVE-2018-4319" ref_url="https://www.suse.com/security/cve/CVE-2018-4319/" source="CVE"/>
		<reference ref_id="CVE-2018-4323" ref_url="https://www.suse.com/security/cve/CVE-2018-4323/" source="CVE"/>
		<reference ref_id="CVE-2018-4328" ref_url="https://www.suse.com/security/cve/CVE-2018-4328/" source="CVE"/>
		<reference ref_id="CVE-2018-4345" ref_url="https://www.suse.com/security/cve/CVE-2018-4345/" source="CVE"/>
		<reference ref_id="CVE-2018-4358" ref_url="https://www.suse.com/security/cve/CVE-2018-4358/" source="CVE"/>
		<reference ref_id="CVE-2018-4359" ref_url="https://www.suse.com/security/cve/CVE-2018-4359/" source="CVE"/>
		<reference ref_id="CVE-2018-4361" ref_url="https://www.suse.com/security/cve/CVE-2018-4361/" source="CVE"/>
		<reference ref_id="CVE-2018-4372" ref_url="https://www.suse.com/security/cve/CVE-2018-4372/" source="CVE"/>
		<reference ref_id="CVE-2018-4373" ref_url="https://www.suse.com/security/cve/CVE-2018-4373/" source="CVE"/>
		<reference ref_id="CVE-2018-4375" ref_url="https://www.suse.com/security/cve/CVE-2018-4375/" source="CVE"/>
		<reference ref_id="CVE-2018-4376" ref_url="https://www.suse.com/security/cve/CVE-2018-4376/" source="CVE"/>
		<reference ref_id="CVE-2018-4378" ref_url="https://www.suse.com/security/cve/CVE-2018-4378/" source="CVE"/>
		<reference ref_id="CVE-2018-4382" ref_url="https://www.suse.com/security/cve/CVE-2018-4382/" source="CVE"/>
		<reference ref_id="CVE-2018-4386" ref_url="https://www.suse.com/security/cve/CVE-2018-4386/" source="CVE"/>
		<reference ref_id="CVE-2018-4392" ref_url="https://www.suse.com/security/cve/CVE-2018-4392/" source="CVE"/>
		<reference ref_id="CVE-2018-4416" ref_url="https://www.suse.com/security/cve/CVE-2018-4416/" source="CVE"/>
		<reference ref_id="CVE-2018-4437" ref_url="https://www.suse.com/security/cve/CVE-2018-4437/" source="CVE"/>
		<reference ref_id="CVE-2018-4438" ref_url="https://www.suse.com/security/cve/CVE-2018-4438/" source="CVE"/>
		<reference ref_id="CVE-2018-4441" ref_url="https://www.suse.com/security/cve/CVE-2018-4441/" source="CVE"/>
		<reference ref_id="CVE-2018-4442" ref_url="https://www.suse.com/security/cve/CVE-2018-4442/" source="CVE"/>
		<reference ref_id="CVE-2018-4443" ref_url="https://www.suse.com/security/cve/CVE-2018-4443/" source="CVE"/>
		<reference ref_id="CVE-2018-4464" ref_url="https://www.suse.com/security/cve/CVE-2018-4464/" source="CVE"/>
		<reference ref_id="CVE-2019-11070" ref_url="https://www.suse.com/security/cve/CVE-2019-11070/" source="CVE"/>
		<reference ref_id="CVE-2019-6201" ref_url="https://www.suse.com/security/cve/CVE-2019-6201/" source="CVE"/>
		<reference ref_id="CVE-2019-6212" ref_url="https://www.suse.com/security/cve/CVE-2019-6212/" source="CVE"/>
		<reference ref_id="CVE-2019-6215" ref_url="https://www.suse.com/security/cve/CVE-2019-6215/" source="CVE"/>
		<reference ref_id="CVE-2019-6216" ref_url="https://www.suse.com/security/cve/CVE-2019-6216/" source="CVE"/>
		<reference ref_id="CVE-2019-6217" ref_url="https://www.suse.com/security/cve/CVE-2019-6217/" source="CVE"/>
		<reference ref_id="CVE-2019-6226" ref_url="https://www.suse.com/security/cve/CVE-2019-6226/" source="CVE"/>
		<reference ref_id="CVE-2019-6227" ref_url="https://www.suse.com/security/cve/CVE-2019-6227/" source="CVE"/>
		<reference ref_id="CVE-2019-6229" ref_url="https://www.suse.com/security/cve/CVE-2019-6229/" source="CVE"/>
		<reference ref_id="CVE-2019-6233" ref_url="https://www.suse.com/security/cve/CVE-2019-6233/" source="CVE"/>
		<reference ref_id="CVE-2019-6234" ref_url="https://www.suse.com/security/cve/CVE-2019-6234/" source="CVE"/>
		<reference ref_id="CVE-2019-6251" ref_url="https://www.suse.com/security/cve/CVE-2019-6251/" source="CVE"/>
		<reference ref_id="CVE-2019-7285" ref_url="https://www.suse.com/security/cve/CVE-2019-7285/" source="CVE"/>
		<reference ref_id="CVE-2019-7292" ref_url="https://www.suse.com/security/cve/CVE-2019-7292/" source="CVE"/>
		<reference ref_id="CVE-2019-8375" ref_url="https://www.suse.com/security/cve/CVE-2019-8375/" source="CVE"/>
		<reference ref_id="CVE-2019-8503" ref_url="https://www.suse.com/security/cve/CVE-2019-8503/" source="CVE"/>
		<reference ref_id="CVE-2019-8506" ref_url="https://www.suse.com/security/cve/CVE-2019-8506/" source="CVE"/>
		<reference ref_id="CVE-2019-8515" ref_url="https://www.suse.com/security/cve/CVE-2019-8515/" source="CVE"/>
		<reference ref_id="CVE-2019-8524" ref_url="https://www.suse.com/security/cve/CVE-2019-8524/" source="CVE"/>
		<reference ref_id="CVE-2019-8535" ref_url="https://www.suse.com/security/cve/CVE-2019-8535/" source="CVE"/>
		<reference ref_id="CVE-2019-8536" ref_url="https://www.suse.com/security/cve/CVE-2019-8536/" source="CVE"/>
		<reference ref_id="CVE-2019-8544" ref_url="https://www.suse.com/security/cve/CVE-2019-8544/" source="CVE"/>
		<reference ref_id="CVE-2019-8551" ref_url="https://www.suse.com/security/cve/CVE-2019-8551/" source="CVE"/>
		<reference ref_id="CVE-2019-8558" ref_url="https://www.suse.com/security/cve/CVE-2019-8558/" source="CVE"/>
		<reference ref_id="CVE-2019-8559" ref_url="https://www.suse.com/security/cve/CVE-2019-8559/" source="CVE"/>
		<reference ref_id="CVE-2019-8563" ref_url="https://www.suse.com/security/cve/CVE-2019-8563/" source="CVE"/>
		<description>
These are all security issues fixed in the libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1856/">CVE-2016-1856</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1857/">CVE-2016-1857</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-4590/">CVE-2016-4590</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-4591/">CVE-2016-4591</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4622/">CVE-2016-4622</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4624/">CVE-2016-4624</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4692/">CVE-2016-4692</cve>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4743/">CVE-2016-4743</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7586/">CVE-2016-7586</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7587/">CVE-2016-7587</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7589/">CVE-2016-7589</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7592/">CVE-2016-7592</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7598/">CVE-2016-7598</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7599/">CVE-2016-7599</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7610/">CVE-2016-7610</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7623/">CVE-2016-7623</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7632/">CVE-2016-7632</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7635/">CVE-2016-7635</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7639/">CVE-2016-7639</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7641/">CVE-2016-7641</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7645/">CVE-2016-7645</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7652/">CVE-2016-7652</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7654/">CVE-2016-7654</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7656/">CVE-2016-7656</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000121/">CVE-2017-1000121</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000122/">CVE-2017-1000122</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13788/">CVE-2017-13788</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13798/">CVE-2017-13798</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13803/">CVE-2017-13803</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13856/">CVE-2017-13856</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13866/">CVE-2017-13866</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13870/">CVE-2017-13870</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13884/">CVE-2017-13884</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13885/">CVE-2017-13885</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2350/">CVE-2017-2350</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2354/">CVE-2017-2354</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2355/">CVE-2017-2355</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2356/">CVE-2017-2356</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2362/">CVE-2017-2362</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2363/">CVE-2017-2363</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2364/">CVE-2017-2364</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2365/">CVE-2017-2365</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2366/">CVE-2017-2366</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2369/">CVE-2017-2369</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-2371/">CVE-2017-2371</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2373/">CVE-2017-2373</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2496/">CVE-2017-2496</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-2510/">CVE-2017-2510</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2538/">CVE-2017-2538</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2539/">CVE-2017-2539</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="critical" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7006/">CVE-2017-7006</cve>
	<cve impact="critical" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7011/">CVE-2017-7011</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7012/">CVE-2017-7012</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7018/">CVE-2017-7018</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7019/">CVE-2017-7019</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7020/">CVE-2017-7020</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7030/">CVE-2017-7030</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7034/">CVE-2017-7034</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7037/">CVE-2017-7037</cve>
	<cve impact="critical" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7038/">CVE-2017-7038</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7039/">CVE-2017-7039</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7040/">CVE-2017-7040</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7041/">CVE-2017-7041</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7042/">CVE-2017-7042</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7043/">CVE-2017-7043</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7046/">CVE-2017-7046</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7048/">CVE-2017-7048</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7049/">CVE-2017-7049</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7052/">CVE-2017-7052</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7055/">CVE-2017-7055</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7056/">CVE-2017-7056</cve>
	<cve impact="critical" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7059/">CVE-2017-7059</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7061/">CVE-2017-7061</cve>
	<cve impact="critical" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7064/">CVE-2017-7064</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7081/">CVE-2017-7081</cve>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7087/">CVE-2017-7087</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7089/">CVE-2017-7089</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7090/">CVE-2017-7090</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7091/">CVE-2017-7091</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7092/">CVE-2017-7092</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7093/">CVE-2017-7093</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7094/">CVE-2017-7094</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7095/">CVE-2017-7095</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7096/">CVE-2017-7096</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7098/">CVE-2017-7098</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7099/">CVE-2017-7099</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7100/">CVE-2017-7100</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7102/">CVE-2017-7102</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7104/">CVE-2017-7104</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7107/">CVE-2017-7107</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7109/">CVE-2017-7109</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7111/">CVE-2017-7111</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7117/">CVE-2017-7117</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7120/">CVE-2017-7120</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7142/">CVE-2017-7142</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7153/">CVE-2017-7153</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7156/">CVE-2017-7156</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7157/">CVE-2017-7157</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7160/">CVE-2017-7160</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7161/">CVE-2017-7161</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7165/">CVE-2017-7165</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-11646/">CVE-2018-11646</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-11712/">CVE-2018-11712</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-11713/">CVE-2018-11713</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12911/">CVE-2018-12911</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4088/">CVE-2018-4088</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4096/">CVE-2018-4096</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4101/">CVE-2018-4101</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-4113/">CVE-2018-4113</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4114/">CVE-2018-4114</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-4117/">CVE-2018-4117</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4118/">CVE-2018-4118</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4119/">CVE-2018-4119</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4120/">CVE-2018-4120</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4122/">CVE-2018-4122</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4125/">CVE-2018-4125</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4127/">CVE-2018-4127</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4128/">CVE-2018-4128</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-4129/">CVE-2018-4129</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-4133/">CVE-2018-4133</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-4146/">CVE-2018-4146</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4161/">CVE-2018-4161</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4162/">CVE-2018-4162</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4163/">CVE-2018-4163</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4165/">CVE-2018-4165</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4190/">CVE-2018-4190</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4191/">CVE-2018-4191</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4197/">CVE-2018-4197</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4199/">CVE-2018-4199</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4200/">CVE-2018-4200</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4204/">CVE-2018-4204</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4207/">CVE-2018-4207</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4208/">CVE-2018-4208</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4209/">CVE-2018-4209</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4210/">CVE-2018-4210</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4212/">CVE-2018-4212</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4213/">CVE-2018-4213</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4218/">CVE-2018-4218</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4222/">CVE-2018-4222</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-4232/">CVE-2018-4232</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4233/">CVE-2018-4233</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4246/">CVE-2018-4246</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4261/">CVE-2018-4261</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4262/">CVE-2018-4262</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4263/">CVE-2018-4263</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4264/">CVE-2018-4264</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4265/">CVE-2018-4265</cve>
	<cve impact="important" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-4266/">CVE-2018-4266</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4267/">CVE-2018-4267</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4270/">CVE-2018-4270</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4272/">CVE-2018-4272</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4273/">CVE-2018-4273</cve>
	<cve impact="important" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-4278/">CVE-2018-4278</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4284/">CVE-2018-4284</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4299/">CVE-2018-4299</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4306/">CVE-2018-4306</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-4309/">CVE-2018-4309</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4312/">CVE-2018-4312</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4314/">CVE-2018-4314</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4315/">CVE-2018-4315</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4316/">CVE-2018-4316</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4317/">CVE-2018-4317</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4318/">CVE-2018-4318</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-4319/">CVE-2018-4319</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4323/">CVE-2018-4323</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4328/">CVE-2018-4328</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4345/">CVE-2018-4345</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4358/">CVE-2018-4358</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4359/">CVE-2018-4359</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4361/">CVE-2018-4361</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4372/">CVE-2018-4372</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4373/">CVE-2018-4373</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4375/">CVE-2018-4375</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4376/">CVE-2018-4376</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4378/">CVE-2018-4378</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4382/">CVE-2018-4382</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4386/">CVE-2018-4386</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4392/">CVE-2018-4392</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4416/">CVE-2018-4416</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4437/">CVE-2018-4437</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4438/">CVE-2018-4438</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4441/">CVE-2018-4441</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4442/">CVE-2018-4442</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4443/">CVE-2018-4443</cve>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-4464/">CVE-2018-4464</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11070/">CVE-2019-11070</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-6201/">CVE-2019-6201</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6212/">CVE-2019-6212</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6215/">CVE-2019-6215</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6216/">CVE-2019-6216</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6217/">CVE-2019-6217</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6226/">CVE-2019-6226</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6227/">CVE-2019-6227</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-6229/">CVE-2019-6229</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6233/">CVE-2019-6233</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6234/">CVE-2019-6234</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-6251/">CVE-2019-6251</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7285/">CVE-2019-7285</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-7292/">CVE-2019-7292</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-8375/">CVE-2019-8375</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8503/">CVE-2019-8503</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8506/">CVE-2019-8506</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8515/">CVE-2019-8515</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8524/">CVE-2019-8524</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8535/">CVE-2019-8535</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8536/">CVE-2019-8536</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8544/">CVE-2019-8544</cve>
	<cve impact="important" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8551/">CVE-2019-8551</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8558/">CVE-2019-8558</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8559/">CVE-2019-8559</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8563/">CVE-2019-8563</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481406" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481407" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481408" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481409" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137049" version="1" class="patch">
	<metadata>
		<title>libjbig-devel-2.1-1.31 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-6369" ref_url="https://www.suse.com/security/cve/CVE-2013-6369/" source="CVE"/>
		<description>
These are all security issues fixed in the libjbig-devel-2.1-1.31 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6369/">CVE-2013-6369</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480586" comment="libjbig-devel-2.1-1.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480587" comment="libjbig2-2.1-1.31 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137050" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1096209" ref_url="https://bugzilla.suse.com/1096209" source="BUGZILLA"/>
		<reference ref_id="1098155" ref_url="https://bugzilla.suse.com/1098155" source="BUGZILLA"/>
		<reference ref_id="1128712" ref_url="https://bugzilla.suse.com/1128712" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1152" ref_url="https://www.suse.com/security/cve/CVE-2018-1152/" source="CVE"/>
		<reference ref_id="CVE-2018-11813" ref_url="https://www.suse.com/security/cve/CVE-2018-11813/" source="CVE"/>
		<reference ref_id="CVE-2018-14498" ref_url="https://www.suse.com/security/cve/CVE-2018-14498/" source="CVE"/>
		<description>
This update for libjpeg-turbo fixes the following issues:

The following security vulnerabilities were addressed:

- CVE-2018-14498: Fixed a heap-based buffer over read in get_8bit_row function 
  which could allow to an attacker to cause denial of service (bsc#1128712).
- CVE-2018-11813: Fixed the end-of-file mishandling in read_pixel in rdtarga.c,
  which allowed remote attackers to cause a denial-of-service via crafted JPG
  files due to a large loop (bsc#1096209)
- CVE-2018-1152: Fixed a denial of service in start_input_bmp() rdbmp.c caused
  by a divide by zero when processing a crafted BMP image (bsc#1098155)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-22"/>
	<updated date="2019-03-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1096209">SUSE bug 1096209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098155">SUSE bug 1098155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128712">SUSE bug 1128712</bugzilla>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1152/">CVE-2018-1152</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11813/">CVE-2018-11813</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14498/">CVE-2018-14498</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709032" comment="libjpeg8-8.1.2-5.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782370" comment="libjpeg8-devel-8.1.2-5.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782371" comment="libturbojpeg0-8.1.2-5.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137051" version="1" class="patch">
	<metadata>
		<title>libjpeg62-62.2.0-5.7.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-9092" ref_url="https://www.suse.com/security/cve/CVE-2014-9092/" source="CVE"/>
		<reference ref_id="CVE-2017-15232" ref_url="https://www.suse.com/security/cve/CVE-2017-15232/" source="CVE"/>
		<reference ref_id="CVE-2018-1152" ref_url="https://www.suse.com/security/cve/CVE-2018-1152/" source="CVE"/>
		<reference ref_id="CVE-2018-11813" ref_url="https://www.suse.com/security/cve/CVE-2018-11813/" source="CVE"/>
		<description>
These are all security issues fixed in the libjpeg62-62.2.0-5.7.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9092/">CVE-2014-9092</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15232/">CVE-2017-15232</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1152/">CVE-2018-1152</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11813/">CVE-2018-11813</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481410" comment="libjpeg62-62.2.0-5.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481411" comment="libjpeg62-devel-62.2.0-5.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137052" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1096209" ref_url="https://bugzilla.suse.com/1096209" source="BUGZILLA"/>
		<reference ref_id="1098155" ref_url="https://bugzilla.suse.com/1098155" source="BUGZILLA"/>
		<reference ref_id="1128712" ref_url="https://bugzilla.suse.com/1128712" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1152" ref_url="https://www.suse.com/security/cve/CVE-2018-1152/" source="CVE"/>
		<reference ref_id="CVE-2018-11813" ref_url="https://www.suse.com/security/cve/CVE-2018-11813/" source="CVE"/>
		<reference ref_id="CVE-2018-14498" ref_url="https://www.suse.com/security/cve/CVE-2018-14498/" source="CVE"/>
		<description>
This update for libjpeg-turbo fixes the following issues:

The following security vulnerabilities were addressed:

- CVE-2018-14498: Fixed a heap-based buffer over read in get_8bit_row function 
  which could allow to an attacker to cause denial of service (bsc#1128712).
- CVE-2018-11813: Fixed the end-of-file mishandling in read_pixel in rdtarga.c,
  which allowed remote attackers to cause a denial-of-service via crafted JPG
  files due to a large loop (bsc#1096209)
- CVE-2018-1152: Fixed a denial of service in start_input_bmp() rdbmp.c caused
  by a divide by zero when processing a crafted BMP image (bsc#1098155)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-22"/>
	<updated date="2019-03-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1096209">SUSE bug 1096209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098155">SUSE bug 1098155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128712">SUSE bug 1128712</bugzilla>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1152/">CVE-2018-1152</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11813/">CVE-2018-11813</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14498/">CVE-2018-14498</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782372" comment="libjpeg62-62.2.0-5.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782373" comment="libjpeg62-devel-62.2.0-5.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137053" version="1" class="patch">
	<metadata>
		<title>libjpeg8-8.1.2-5.7.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-9092" ref_url="https://www.suse.com/security/cve/CVE-2014-9092/" source="CVE"/>
		<reference ref_id="CVE-2017-15232" ref_url="https://www.suse.com/security/cve/CVE-2017-15232/" source="CVE"/>
		<reference ref_id="CVE-2018-1152" ref_url="https://www.suse.com/security/cve/CVE-2018-1152/" source="CVE"/>
		<reference ref_id="CVE-2018-11813" ref_url="https://www.suse.com/security/cve/CVE-2018-11813/" source="CVE"/>
		<reference ref_id="CVE-2018-14498" ref_url="https://www.suse.com/security/cve/CVE-2018-14498/" source="CVE"/>
		<description>
These are all security issues fixed in the libjpeg8-8.1.2-5.7.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9092/">CVE-2014-9092</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15232/">CVE-2017-15232</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1152/">CVE-2018-1152</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11813/">CVE-2018-11813</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14498/">CVE-2018-14498</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481412" comment="libjpeg8-8.1.2-5.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481413" comment="libjpeg8-devel-8.1.2-5.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481414" comment="libturbojpeg0-8.1.2-5.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137054" version="1" class="patch">
	<metadata>
		<title>libjson-c-devel-0.13-1.19 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-6370" ref_url="https://www.suse.com/security/cve/CVE-2013-6370/" source="CVE"/>
		<reference ref_id="CVE-2013-6371" ref_url="https://www.suse.com/security/cve/CVE-2013-6371/" source="CVE"/>
		<description>
These are all security issues fixed in the libjson-c-devel-0.13-1.19 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6370/">CVE-2013-6370</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6371/">CVE-2013-6371</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480593" comment="libjson-c-devel-0.13-1.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480594" comment="libjson-c3-0.13-1.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480595" comment="libjson-c3-32bit-0.13-1.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137055" version="1" class="patch">
	<metadata>
		<title>libksba-devel-1.3.5-2.14 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-9087" ref_url="https://www.suse.com/security/cve/CVE-2014-9087/" source="CVE"/>
		<reference ref_id="CVE-2016-4574" ref_url="https://www.suse.com/security/cve/CVE-2016-4574/" source="CVE"/>
		<reference ref_id="CVE-2016-4579" ref_url="https://www.suse.com/security/cve/CVE-2016-4579/" source="CVE"/>
		<description>
These are all security issues fixed in the libksba-devel-1.3.5-2.14 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9087/">CVE-2014-9087</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4574/">CVE-2016-4574</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4579/">CVE-2016-4579</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480596" comment="libksba-devel-1.3.5-2.14 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480597" comment="libksba8-1.3.5-2.14 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137056" version="1" class="patch">
	<metadata>
		<title>liblcms2-2-2.9-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-16435" ref_url="https://www.suse.com/security/cve/CVE-2018-16435/" source="CVE"/>
		<description>
These are all security issues fixed in the liblcms2-2-2.9-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16435/">CVE-2018-16435</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481415" comment="liblcms2-2-2.9-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481416" comment="liblcms2-devel-2.9-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137057" version="1" class="patch">
	<metadata>
		<title>libldap-2_4-2-2.4.46-9.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-1545" ref_url="https://www.suse.com/security/cve/CVE-2015-1545/" source="CVE"/>
		<reference ref_id="CVE-2015-1546" ref_url="https://www.suse.com/security/cve/CVE-2015-1546/" source="CVE"/>
		<reference ref_id="CVE-2015-6908" ref_url="https://www.suse.com/security/cve/CVE-2015-6908/" source="CVE"/>
		<description>
These are all security issues fixed in the libldap-2_4-2-2.4.46-9.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1545/">CVE-2015-1545</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1546/">CVE-2015-1546</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6908/">CVE-2015-6908</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481417" comment="libldap-2_4-2-2.4.46-9.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481418" comment="libldap-2_4-2-32bit-2.4.46-9.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481419" comment="openldap2-client-2.4.46-9.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481420" comment="openldap2-devel-2.4.46-9.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481421" comment="openldap2-devel-static-2.4.46-9.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137058" version="1" class="patch">
	<metadata>
		<title>libldb-devel-1.4.6-1.10 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-3223" ref_url="https://www.suse.com/security/cve/CVE-2015-3223/" source="CVE"/>
		<reference ref_id="CVE-2015-5330" ref_url="https://www.suse.com/security/cve/CVE-2015-5330/" source="CVE"/>
		<reference ref_id="CVE-2018-1140" ref_url="https://www.suse.com/security/cve/CVE-2018-1140/" source="CVE"/>
		<reference ref_id="CVE-2019-3824" ref_url="https://www.suse.com/security/cve/CVE-2019-3824/" source="CVE"/>
		<description>
These are all security issues fixed in the libldb-devel-1.4.6-1.10 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3223/">CVE-2015-3223</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-5330/">CVE-2015-5330</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1140/">CVE-2018-1140</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3824/">CVE-2019-3824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481422" comment="libldb-devel-1.4.6-1.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481423" comment="libldb1-1.4.6-1.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481424" comment="libldb1-32bit-1.4.6-1.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481425" comment="python3-ldb-1.4.6-1.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481426" comment="python3-ldb-devel-1.4.6-1.10 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137059" version="1" class="patch">
	<metadata>
		<title>libltdl7-2.4.6-1.406 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-3736" ref_url="https://www.suse.com/security/cve/CVE-2009-3736/" source="CVE"/>
		<description>
These are all security issues fixed in the libltdl7-2.4.6-1.406 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3736/">CVE-2009-3736</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480609" comment="libltdl7-2.4.6-1.406 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480610" comment="libtool-2.4.6-1.406 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137060" version="1" class="patch">
	<metadata>
		<title>liblua5_3-5-32bit-5.3.4-3.3.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2019-6706" ref_url="https://www.suse.com/security/cve/CVE-2019-6706/" source="CVE"/>
		<description>
These are all security issues fixed in the liblua5_3-5-32bit-5.3.4-3.3.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6706/">CVE-2019-6706</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481427" comment="liblua5_3-5-5.3.4-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481428" comment="liblua5_3-5-32bit-5.3.4-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481429" comment="lua53-5.3.4-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481430" comment="lua53-devel-5.3.4-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137061" version="1" class="patch">
	<metadata>
		<title>liblzo2-2-2.10-2.22 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-4607" ref_url="https://www.suse.com/security/cve/CVE-2014-4607/" source="CVE"/>
		<description>
These are all security issues fixed in the liblzo2-2-2.10-2.22 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-4607/">CVE-2014-4607</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480611" comment="liblzo2-2-2.10-2.22 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480612" comment="lzo-devel-2.10-2.22 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480613" comment="lzo-devel-static-2.10-2.22 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137062" version="1" class="patch">
	<metadata>
		<title>libminizip1-1.2.11-3.6.4 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-9843" ref_url="https://www.suse.com/security/cve/CVE-2016-9843/" source="CVE"/>
		<description>
These are all security issues fixed in the libminizip1-1.2.11-3.6.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9843/">CVE-2016-9843</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481431" comment="libminizip1-1.2.11-3.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481432" comment="libz1-1.2.11-3.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481433" comment="libz1-32bit-1.2.11-3.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481434" comment="minizip-devel-1.2.11-3.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481435" comment="zlib-devel-1.2.11-3.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481436" comment="zlib-devel-static-1.2.11-3.6.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137063" version="1" class="patch">
	<metadata>
		<title>libmpfr6-4.0.1-1.46 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-9474" ref_url="https://www.suse.com/security/cve/CVE-2014-9474/" source="CVE"/>
		<description>
These are all security issues fixed in the libmpfr6-4.0.1-1.46 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9474/">CVE-2014-9474</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480620" comment="libmpfr6-4.0.1-1.46 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480621" comment="mpfr-devel-4.0.1-1.46 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137064" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1113038" ref_url="https://bugzilla.suse.com/1113038" source="BUGZILLA"/>
		<reference ref_id="1113039" ref_url="https://bugzilla.suse.com/1113039" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-18584" ref_url="https://www.suse.com/security/cve/CVE-2018-18584/" source="CVE"/>
		<reference ref_id="CVE-2018-18585" ref_url="https://www.suse.com/security/cve/CVE-2018-18585/" source="CVE"/>
		<description>
This update for libmspack fixes the following issues:

Security issues fixed:

- CVE-2018-18584: The CAB block input buffer was one byte too small for the maximal Quantum block, leading to an out-of-bounds write. (bsc#1113038)
- CVE-2018-18585: chmd_read_headers accepted a filename that has '\0' as its first or second character (such as the '/\0' name). (bsc#1113039)
- Fix off-by-one bounds check on CHM PMGI/PMGL chunk numbers and reject empty filenames.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-26"/>
	<updated date="2019-03-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1113038">SUSE bug 1113038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113039">SUSE bug 1113039</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18584/">CVE-2018-18584</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18585/">CVE-2018-18585</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789703" comment="libmspack-devel-0.6-3.3.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789704" comment="libmspack0-0.6-3.3.11 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137065" version="1" class="patch">
	<metadata>
		<title>libmspack-devel-0.6-3.3.11 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-2800" ref_url="https://www.suse.com/security/cve/CVE-2010-2800/" source="CVE"/>
		<reference ref_id="CVE-2010-2801" ref_url="https://www.suse.com/security/cve/CVE-2010-2801/" source="CVE"/>
		<reference ref_id="CVE-2014-9556" ref_url="https://www.suse.com/security/cve/CVE-2014-9556/" source="CVE"/>
		<reference ref_id="CVE-2017-11423" ref_url="https://www.suse.com/security/cve/CVE-2017-11423/" source="CVE"/>
		<reference ref_id="CVE-2017-6419" ref_url="https://www.suse.com/security/cve/CVE-2017-6419/" source="CVE"/>
		<reference ref_id="CVE-2018-18584" ref_url="https://www.suse.com/security/cve/CVE-2018-18584/" source="CVE"/>
		<reference ref_id="CVE-2018-18585" ref_url="https://www.suse.com/security/cve/CVE-2018-18585/" source="CVE"/>
		<description>
These are all security issues fixed in the libmspack-devel-0.6-3.3.11 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2800/">CVE-2010-2800</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2801/">CVE-2010-2801</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9556/">CVE-2014-9556</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11423/">CVE-2017-11423</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6419/">CVE-2017-6419</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18584/">CVE-2018-18584</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18585/">CVE-2018-18585</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481437" comment="libmspack-devel-0.6-3.3.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481438" comment="libmspack0-0.6-3.3.11 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137066" version="1" class="patch">
	<metadata>
		<title>libncurses6-32bit-6.1-5.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-19211" ref_url="https://www.suse.com/security/cve/CVE-2018-19211/" source="CVE"/>
		<description>
These are all security issues fixed in the libncurses6-32bit-6.1-5.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19211/">CVE-2018-19211</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481439" comment="libncurses6-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481440" comment="libncurses6-32bit-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481441" comment="ncurses-devel-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481442" comment="ncurses-utils-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481443" comment="tack-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481444" comment="terminfo-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481445" comment="terminfo-base-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481446" comment="terminfo-iterm-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481447" comment="terminfo-screen-6.1-5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137067" version="1" class="patch">
	<metadata>
		<title>libneon-devel-0.30.2-2.15 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-2473" ref_url="https://www.suse.com/security/cve/CVE-2009-2473/" source="CVE"/>
		<reference ref_id="CVE-2009-2474" ref_url="https://www.suse.com/security/cve/CVE-2009-2474/" source="CVE"/>
		<description>
These are all security issues fixed in the libneon-devel-0.30.2-2.15 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2473/">CVE-2009-2473</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2474/">CVE-2009-2474</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480624" comment="libneon-devel-0.30.2-2.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480625" comment="libneon27-0.30.2-2.15 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137068" version="1" class="patch">
	<metadata>
		<title>libnetpbm11-10.80.1-3.3.36 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-8975" ref_url="https://www.suse.com/security/cve/CVE-2018-8975/" source="CVE"/>
		<description>
These are all security issues fixed in the libnetpbm11-10.80.1-3.3.36 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8975/">CVE-2018-8975</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481448" comment="libnetpbm11-10.80.1-3.3.36 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481449" comment="netpbm-10.80.1-3.3.36 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137069" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1114407" ref_url="https://bugzilla.suse.com/1114407" source="BUGZILLA"/>
		<reference ref_id="1124223" ref_url="https://bugzilla.suse.com/1124223" source="BUGZILLA"/>
		<reference ref_id="1125410" ref_url="https://bugzilla.suse.com/1125410" source="BUGZILLA"/>
		<reference ref_id="1126377" ref_url="https://bugzilla.suse.com/1126377" source="BUGZILLA"/>
		<reference ref_id="1131060" ref_url="https://bugzilla.suse.com/1131060" source="BUGZILLA"/>
		<reference ref_id="1131686" ref_url="https://bugzilla.suse.com/1131686" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3880" ref_url="https://www.suse.com/security/cve/CVE-2019-3880/" source="CVE"/>
		<description>
This update for samba fixes the following issues:

Security issue fixed:

- CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share (bsc#1131060).


ldb was updated to version 1.2.4 (bsc#1125410 bsc#1131686):

- Out of bound read in ldb_wildcard_compare
- Hold at most 10 outstanding paged result cookies
- Put 'results_store' into a doubly linked list
- Refuse to build Samba against a newer minor version of ldb


Non-security issues fixed:

- Fixed update-apparmor-samba-profile script after apparmor switched to using named profiles (bsc#1126377).
- Abide to the load_printers parameter in smb.conf (bsc#1124223).
- Provide the 32bit samba winbind PAM module and its dependend 32bit libraries.
  		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-25"/>
	<updated date="2019-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1114407">SUSE bug 1114407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124223">SUSE bug 1124223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125410">SUSE bug 1125410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126377">SUSE bug 1126377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131060">SUSE bug 1131060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131686">SUSE bug 1131686</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-3880/">CVE-2019-3880</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708423" comment="libhogweed4-3.4.1-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489935" comment="libhogweed4-32bit-3.4.1-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782376" comment="libnettle-devel-3.4.1-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708424" comment="libnettle6-3.4.1-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489957" comment="libnettle6-32bit-3.4.1-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137070" version="1" class="patch">
	<metadata>
		<title>libnewt0_52-0.52.20-5.35 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-2905" ref_url="https://www.suse.com/security/cve/CVE-2009-2905/" source="CVE"/>
		<description>
These are all security issues fixed in the libnewt0_52-0.52.20-5.35 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2905/">CVE-2009-2905</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480626" comment="libnewt0_52-0.52.20-5.35 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480627" comment="newt-0.52.20-5.35 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480628" comment="python3-newt-0.52.20-5.35 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137071" version="1" class="patch">
	<metadata>
		<title>libnghttp2-14-1.31.1-1.15 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-1544" ref_url="https://www.suse.com/security/cve/CVE-2016-1544/" source="CVE"/>
		<reference ref_id="CVE-2018-1000168" ref_url="https://www.suse.com/security/cve/CVE-2018-1000168/" source="CVE"/>
		<description>
These are all security issues fixed in the libnghttp2-14-1.31.1-1.15 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-1544/">CVE-2016-1544</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000168/">CVE-2018-1000168</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480629" comment="libnghttp2-14-1.31.1-1.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480630" comment="libnghttp2-14-32bit-1.31.1-1.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480631" comment="libnghttp2-devel-1.31.1-1.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480632" comment="libnghttp2_asio-devel-1.31.1-1.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480633" comment="libnghttp2_asio1-1.31.1-1.15 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137072" version="1" class="patch">
	<metadata>
		<title>libnm0-1.10.6-5.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2006-7246" ref_url="https://www.suse.com/security/cve/CVE-2006-7246/" source="CVE"/>
		<reference ref_id="CVE-2015-2924" ref_url="https://www.suse.com/security/cve/CVE-2015-2924/" source="CVE"/>
		<reference ref_id="CVE-2016-0764" ref_url="https://www.suse.com/security/cve/CVE-2016-0764/" source="CVE"/>
		<description>
These are all security issues fixed in the libnm0-1.10.6-5.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2006-7246/">CVE-2006-7246</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2924/">CVE-2015-2924</cve>
	<cve impact="low" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0764/">CVE-2016-0764</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481450" comment="libnm0-1.10.6-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481451" comment="typelib-1_0-NM-1_0-1.10.6-5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137073" version="1" class="patch">
	<metadata>
		<title>liboath-devel-2.6.2-1.15 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-7322" ref_url="https://www.suse.com/security/cve/CVE-2013-7322/" source="CVE"/>
		<description>
These are all security issues fixed in the liboath-devel-2.6.2-1.15 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7322/">CVE-2013-7322</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481452" comment="liboath-devel-2.6.2-1.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480636" comment="liboath0-2.6.2-1.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480637" comment="oath-toolkit-xml-2.6.2-1.15 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137074" version="1" class="patch">
	<metadata>
		<title>libopenjp2-7-2.3.0-1.25 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-10504" ref_url="https://www.suse.com/security/cve/CVE-2016-10504/" source="CVE"/>
		<reference ref_id="CVE-2016-10505" ref_url="https://www.suse.com/security/cve/CVE-2016-10505/" source="CVE"/>
		<reference ref_id="CVE-2016-10506" ref_url="https://www.suse.com/security/cve/CVE-2016-10506/" source="CVE"/>
		<reference ref_id="CVE-2016-5139" ref_url="https://www.suse.com/security/cve/CVE-2016-5139/" source="CVE"/>
		<reference ref_id="CVE-2016-5152" ref_url="https://www.suse.com/security/cve/CVE-2016-5152/" source="CVE"/>
		<reference ref_id="CVE-2016-5158" ref_url="https://www.suse.com/security/cve/CVE-2016-5158/" source="CVE"/>
		<reference ref_id="CVE-2016-5159" ref_url="https://www.suse.com/security/cve/CVE-2016-5159/" source="CVE"/>
		<reference ref_id="CVE-2016-7163" ref_url="https://www.suse.com/security/cve/CVE-2016-7163/" source="CVE"/>
		<reference ref_id="CVE-2016-8332" ref_url="https://www.suse.com/security/cve/CVE-2016-8332/" source="CVE"/>
		<reference ref_id="CVE-2017-12982" ref_url="https://www.suse.com/security/cve/CVE-2017-12982/" source="CVE"/>
		<reference ref_id="CVE-2017-14039" ref_url="https://www.suse.com/security/cve/CVE-2017-14039/" source="CVE"/>
		<reference ref_id="CVE-2017-14040" ref_url="https://www.suse.com/security/cve/CVE-2017-14040/" source="CVE"/>
		<reference ref_id="CVE-2017-14041" ref_url="https://www.suse.com/security/cve/CVE-2017-14041/" source="CVE"/>
		<reference ref_id="CVE-2017-14151" ref_url="https://www.suse.com/security/cve/CVE-2017-14151/" source="CVE"/>
		<reference ref_id="CVE-2017-14152" ref_url="https://www.suse.com/security/cve/CVE-2017-14152/" source="CVE"/>
		<reference ref_id="CVE-2017-14164" ref_url="https://www.suse.com/security/cve/CVE-2017-14164/" source="CVE"/>
		<description>
These are all security issues fixed in the libopenjp2-7-2.3.0-1.25 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" cvss3="9.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10504/">CVE-2016-10504</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10505/">CVE-2016-10505</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10506/">CVE-2016-10506</cve>
	<cve impact="critical" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-5139/">CVE-2016-5139</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5152/">CVE-2016-5152</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5158/">CVE-2016-5158</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5159/">CVE-2016-5159</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7163/">CVE-2016-7163</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8332/">CVE-2016-8332</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12982/">CVE-2017-12982</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14039/">CVE-2017-14039</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14040/">CVE-2017-14040</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14041/">CVE-2017-14041</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14151/">CVE-2017-14151</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14152/">CVE-2017-14152</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14164/">CVE-2017-14164</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480638" comment="libopenjp2-7-2.3.0-1.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480639" comment="openjpeg2-2.3.0-1.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480640" comment="openjpeg2-devel-2.3.0-1.25 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137075" version="1" class="patch">
	<metadata>
		<title>libopenssl-1_1-devel-1.1.0i-12.9 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-3513" ref_url="https://www.suse.com/security/cve/CVE-2014-3513/" source="CVE"/>
		<reference ref_id="CVE-2014-3567" ref_url="https://www.suse.com/security/cve/CVE-2014-3567/" source="CVE"/>
		<reference ref_id="CVE-2014-3568" ref_url="https://www.suse.com/security/cve/CVE-2014-3568/" source="CVE"/>
		<reference ref_id="CVE-2014-3569" ref_url="https://www.suse.com/security/cve/CVE-2014-3569/" source="CVE"/>
		<reference ref_id="CVE-2014-3570" ref_url="https://www.suse.com/security/cve/CVE-2014-3570/" source="CVE"/>
		<reference ref_id="CVE-2014-3571" ref_url="https://www.suse.com/security/cve/CVE-2014-3571/" source="CVE"/>
		<reference ref_id="CVE-2014-3572" ref_url="https://www.suse.com/security/cve/CVE-2014-3572/" source="CVE"/>
		<reference ref_id="CVE-2014-8275" ref_url="https://www.suse.com/security/cve/CVE-2014-8275/" source="CVE"/>
		<reference ref_id="CVE-2015-0204" ref_url="https://www.suse.com/security/cve/CVE-2015-0204/" source="CVE"/>
		<reference ref_id="CVE-2015-0205" ref_url="https://www.suse.com/security/cve/CVE-2015-0205/" source="CVE"/>
		<reference ref_id="CVE-2015-0206" ref_url="https://www.suse.com/security/cve/CVE-2015-0206/" source="CVE"/>
		<reference ref_id="CVE-2015-0209" ref_url="https://www.suse.com/security/cve/CVE-2015-0209/" source="CVE"/>
		<reference ref_id="CVE-2015-0286" ref_url="https://www.suse.com/security/cve/CVE-2015-0286/" source="CVE"/>
		<reference ref_id="CVE-2015-0287" ref_url="https://www.suse.com/security/cve/CVE-2015-0287/" source="CVE"/>
		<reference ref_id="CVE-2015-0288" ref_url="https://www.suse.com/security/cve/CVE-2015-0288/" source="CVE"/>
		<reference ref_id="CVE-2015-0289" ref_url="https://www.suse.com/security/cve/CVE-2015-0289/" source="CVE"/>
		<reference ref_id="CVE-2015-0293" ref_url="https://www.suse.com/security/cve/CVE-2015-0293/" source="CVE"/>
		<reference ref_id="CVE-2015-1788" ref_url="https://www.suse.com/security/cve/CVE-2015-1788/" source="CVE"/>
		<reference ref_id="CVE-2015-1789" ref_url="https://www.suse.com/security/cve/CVE-2015-1789/" source="CVE"/>
		<reference ref_id="CVE-2015-1790" ref_url="https://www.suse.com/security/cve/CVE-2015-1790/" source="CVE"/>
		<reference ref_id="CVE-2015-1791" ref_url="https://www.suse.com/security/cve/CVE-2015-1791/" source="CVE"/>
		<reference ref_id="CVE-2015-1792" ref_url="https://www.suse.com/security/cve/CVE-2015-1792/" source="CVE"/>
		<reference ref_id="CVE-2015-1793" ref_url="https://www.suse.com/security/cve/CVE-2015-1793/" source="CVE"/>
		<reference ref_id="CVE-2015-1794" ref_url="https://www.suse.com/security/cve/CVE-2015-1794/" source="CVE"/>
		<reference ref_id="CVE-2015-3193" ref_url="https://www.suse.com/security/cve/CVE-2015-3193/" source="CVE"/>
		<reference ref_id="CVE-2015-3194" ref_url="https://www.suse.com/security/cve/CVE-2015-3194/" source="CVE"/>
		<reference ref_id="CVE-2015-3195" ref_url="https://www.suse.com/security/cve/CVE-2015-3195/" source="CVE"/>
		<reference ref_id="CVE-2015-3196" ref_url="https://www.suse.com/security/cve/CVE-2015-3196/" source="CVE"/>
		<reference ref_id="CVE-2015-3197" ref_url="https://www.suse.com/security/cve/CVE-2015-3197/" source="CVE"/>
		<reference ref_id="CVE-2016-0701" ref_url="https://www.suse.com/security/cve/CVE-2016-0701/" source="CVE"/>
		<reference ref_id="CVE-2016-0702" ref_url="https://www.suse.com/security/cve/CVE-2016-0702/" source="CVE"/>
		<reference ref_id="CVE-2016-0705" ref_url="https://www.suse.com/security/cve/CVE-2016-0705/" source="CVE"/>
		<reference ref_id="CVE-2016-0797" ref_url="https://www.suse.com/security/cve/CVE-2016-0797/" source="CVE"/>
		<reference ref_id="CVE-2016-0798" ref_url="https://www.suse.com/security/cve/CVE-2016-0798/" source="CVE"/>
		<reference ref_id="CVE-2016-0800" ref_url="https://www.suse.com/security/cve/CVE-2016-0800/" source="CVE"/>
		<reference ref_id="CVE-2016-2105" ref_url="https://www.suse.com/security/cve/CVE-2016-2105/" source="CVE"/>
		<reference ref_id="CVE-2016-2106" ref_url="https://www.suse.com/security/cve/CVE-2016-2106/" source="CVE"/>
		<reference ref_id="CVE-2016-2107" ref_url="https://www.suse.com/security/cve/CVE-2016-2107/" source="CVE"/>
		<reference ref_id="CVE-2016-2109" ref_url="https://www.suse.com/security/cve/CVE-2016-2109/" source="CVE"/>
		<reference ref_id="CVE-2016-2176" ref_url="https://www.suse.com/security/cve/CVE-2016-2176/" source="CVE"/>
		<reference ref_id="CVE-2016-2177" ref_url="https://www.suse.com/security/cve/CVE-2016-2177/" source="CVE"/>
		<reference ref_id="CVE-2016-2178" ref_url="https://www.suse.com/security/cve/CVE-2016-2178/" source="CVE"/>
		<reference ref_id="CVE-2016-2179" ref_url="https://www.suse.com/security/cve/CVE-2016-2179/" source="CVE"/>
		<reference ref_id="CVE-2016-2180" ref_url="https://www.suse.com/security/cve/CVE-2016-2180/" source="CVE"/>
		<reference ref_id="CVE-2016-2181" ref_url="https://www.suse.com/security/cve/CVE-2016-2181/" source="CVE"/>
		<reference ref_id="CVE-2016-2182" ref_url="https://www.suse.com/security/cve/CVE-2016-2182/" source="CVE"/>
		<reference ref_id="CVE-2016-2183" ref_url="https://www.suse.com/security/cve/CVE-2016-2183/" source="CVE"/>
		<reference ref_id="CVE-2016-6302" ref_url="https://www.suse.com/security/cve/CVE-2016-6302/" source="CVE"/>
		<reference ref_id="CVE-2016-6303" ref_url="https://www.suse.com/security/cve/CVE-2016-6303/" source="CVE"/>
		<reference ref_id="CVE-2016-6304" ref_url="https://www.suse.com/security/cve/CVE-2016-6304/" source="CVE"/>
		<reference ref_id="CVE-2016-6306" ref_url="https://www.suse.com/security/cve/CVE-2016-6306/" source="CVE"/>
		<reference ref_id="CVE-2016-7052" ref_url="https://www.suse.com/security/cve/CVE-2016-7052/" source="CVE"/>
		<reference ref_id="CVE-2016-7055" ref_url="https://www.suse.com/security/cve/CVE-2016-7055/" source="CVE"/>
		<reference ref_id="CVE-2016-7056" ref_url="https://www.suse.com/security/cve/CVE-2016-7056/" source="CVE"/>
		<reference ref_id="CVE-2017-3731" ref_url="https://www.suse.com/security/cve/CVE-2017-3731/" source="CVE"/>
		<reference ref_id="CVE-2017-3732" ref_url="https://www.suse.com/security/cve/CVE-2017-3732/" source="CVE"/>
		<reference ref_id="CVE-2017-3735" ref_url="https://www.suse.com/security/cve/CVE-2017-3735/" source="CVE"/>
		<reference ref_id="CVE-2017-3736" ref_url="https://www.suse.com/security/cve/CVE-2017-3736/" source="CVE"/>
		<reference ref_id="CVE-2017-3738" ref_url="https://www.suse.com/security/cve/CVE-2017-3738/" source="CVE"/>
		<reference ref_id="CVE-2018-0732" ref_url="https://www.suse.com/security/cve/CVE-2018-0732/" source="CVE"/>
		<reference ref_id="CVE-2018-0734" ref_url="https://www.suse.com/security/cve/CVE-2018-0734/" source="CVE"/>
		<reference ref_id="CVE-2018-0735" ref_url="https://www.suse.com/security/cve/CVE-2018-0735/" source="CVE"/>
		<reference ref_id="CVE-2018-0737" ref_url="https://www.suse.com/security/cve/CVE-2018-0737/" source="CVE"/>
		<reference ref_id="CVE-2018-0739" ref_url="https://www.suse.com/security/cve/CVE-2018-0739/" source="CVE"/>
		<reference ref_id="CVE-2019-1543" ref_url="https://www.suse.com/security/cve/CVE-2019-1543/" source="CVE"/>
		<description>
These are all security issues fixed in the libopenssl-1_1-devel-1.1.0i-12.9 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2014-3513/">CVE-2014-3513</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3567/">CVE-2014-3567</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3568/">CVE-2014-3568</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3569/">CVE-2014-3569</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3570/">CVE-2014-3570</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3571/">CVE-2014-3571</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3572/">CVE-2014-3572</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8275/">CVE-2014-8275</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0204/">CVE-2015-0204</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0205/">CVE-2015-0205</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0206/">CVE-2015-0206</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0209/">CVE-2015-0209</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0286/">CVE-2015-0286</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0287/">CVE-2015-0287</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0288/">CVE-2015-0288</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0289/">CVE-2015-0289</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0293/">CVE-2015-0293</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1788/">CVE-2015-1788</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-1789/">CVE-2015-1789</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1790/">CVE-2015-1790</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1791/">CVE-2015-1791</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1792/">CVE-2015-1792</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1793/">CVE-2015-1793</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-1794/">CVE-2015-1794</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-3193/">CVE-2015-3193</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-3194/">CVE-2015-3194</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-3195/">CVE-2015-3195</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3196/">CVE-2015-3196</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-3197/">CVE-2015-3197</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0701/">CVE-2016-0701</cve>
	<cve impact="important" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0702/">CVE-2016-0702</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0705/">CVE-2016-0705</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0797/">CVE-2016-0797</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0798/">CVE-2016-0798</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0800/">CVE-2016-0800</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2105/">CVE-2016-2105</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2106/">CVE-2016-2106</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2107/">CVE-2016-2107</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2109/">CVE-2016-2109</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2176/">CVE-2016-2176</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2177/">CVE-2016-2177</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2178/">CVE-2016-2178</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2179/">CVE-2016-2179</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2180/">CVE-2016-2180</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2181/">CVE-2016-2181</cve>
	<cve impact="low" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2182/">CVE-2016-2182</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2183/">CVE-2016-2183</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6302/">CVE-2016-6302</cve>
	<cve impact="low" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6303/">CVE-2016-6303</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6304/">CVE-2016-6304</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6306/">CVE-2016-6306</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7052/">CVE-2016-7052</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7055/">CVE-2016-7055</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7056/">CVE-2016-7056</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3731/">CVE-2017-3731</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3732/">CVE-2017-3732</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-3735/">CVE-2017-3735</cve>
	<cve impact="moderate" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-3736/">CVE-2017-3736</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3738/">CVE-2017-3738</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-0732/">CVE-2018-0732</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-0734/">CVE-2018-0734</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-0735/">CVE-2018-0735</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-0737/">CVE-2018-0737</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-0739/">CVE-2018-0739</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1543/">CVE-2019-1543</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481453" comment="libopenssl-1_1-devel-1.1.0i-12.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481454" comment="libopenssl1_1-1.1.0i-12.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481455" comment="libopenssl1_1-32bit-1.1.0i-12.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481456" comment="libopenssl1_1-hmac-1.1.0i-12.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481457" comment="libopenssl1_1-hmac-32bit-1.1.0i-12.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481458" comment="openssl-1_1-1.1.0i-12.9 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137076" version="1" class="patch">
	<metadata>
		<title>libopenssl-devel-1.1.0i-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2006-7250" ref_url="https://www.suse.com/security/cve/CVE-2006-7250/" source="CVE"/>
		<reference ref_id="CVE-2008-5077" ref_url="https://www.suse.com/security/cve/CVE-2008-5077/" source="CVE"/>
		<reference ref_id="CVE-2009-0590" ref_url="https://www.suse.com/security/cve/CVE-2009-0590/" source="CVE"/>
		<reference ref_id="CVE-2009-0591" ref_url="https://www.suse.com/security/cve/CVE-2009-0591/" source="CVE"/>
		<reference ref_id="CVE-2009-0789" ref_url="https://www.suse.com/security/cve/CVE-2009-0789/" source="CVE"/>
		<reference ref_id="CVE-2009-1377" ref_url="https://www.suse.com/security/cve/CVE-2009-1377/" source="CVE"/>
		<reference ref_id="CVE-2009-1378" ref_url="https://www.suse.com/security/cve/CVE-2009-1378/" source="CVE"/>
		<reference ref_id="CVE-2009-1379" ref_url="https://www.suse.com/security/cve/CVE-2009-1379/" source="CVE"/>
		<reference ref_id="CVE-2009-1386" ref_url="https://www.suse.com/security/cve/CVE-2009-1386/" source="CVE"/>
		<reference ref_id="CVE-2009-1387" ref_url="https://www.suse.com/security/cve/CVE-2009-1387/" source="CVE"/>
		<reference ref_id="CVE-2010-0740" ref_url="https://www.suse.com/security/cve/CVE-2010-0740/" source="CVE"/>
		<reference ref_id="CVE-2010-0742" ref_url="https://www.suse.com/security/cve/CVE-2010-0742/" source="CVE"/>
		<reference ref_id="CVE-2010-1633" ref_url="https://www.suse.com/security/cve/CVE-2010-1633/" source="CVE"/>
		<reference ref_id="CVE-2010-2939" ref_url="https://www.suse.com/security/cve/CVE-2010-2939/" source="CVE"/>
		<reference ref_id="CVE-2010-3864" ref_url="https://www.suse.com/security/cve/CVE-2010-3864/" source="CVE"/>
		<reference ref_id="CVE-2010-5298" ref_url="https://www.suse.com/security/cve/CVE-2010-5298/" source="CVE"/>
		<reference ref_id="CVE-2011-0014" ref_url="https://www.suse.com/security/cve/CVE-2011-0014/" source="CVE"/>
		<reference ref_id="CVE-2011-3207" ref_url="https://www.suse.com/security/cve/CVE-2011-3207/" source="CVE"/>
		<reference ref_id="CVE-2011-3210" ref_url="https://www.suse.com/security/cve/CVE-2011-3210/" source="CVE"/>
		<reference ref_id="CVE-2011-4108" ref_url="https://www.suse.com/security/cve/CVE-2011-4108/" source="CVE"/>
		<reference ref_id="CVE-2011-4576" ref_url="https://www.suse.com/security/cve/CVE-2011-4576/" source="CVE"/>
		<reference ref_id="CVE-2011-4577" ref_url="https://www.suse.com/security/cve/CVE-2011-4577/" source="CVE"/>
		<reference ref_id="CVE-2011-4619" ref_url="https://www.suse.com/security/cve/CVE-2011-4619/" source="CVE"/>
		<reference ref_id="CVE-2012-0027" ref_url="https://www.suse.com/security/cve/CVE-2012-0027/" source="CVE"/>
		<reference ref_id="CVE-2012-0050" ref_url="https://www.suse.com/security/cve/CVE-2012-0050/" source="CVE"/>
		<reference ref_id="CVE-2012-0884" ref_url="https://www.suse.com/security/cve/CVE-2012-0884/" source="CVE"/>
		<reference ref_id="CVE-2012-1165" ref_url="https://www.suse.com/security/cve/CVE-2012-1165/" source="CVE"/>
		<reference ref_id="CVE-2012-2110" ref_url="https://www.suse.com/security/cve/CVE-2012-2110/" source="CVE"/>
		<reference ref_id="CVE-2012-2686" ref_url="https://www.suse.com/security/cve/CVE-2012-2686/" source="CVE"/>
		<reference ref_id="CVE-2012-4929" ref_url="https://www.suse.com/security/cve/CVE-2012-4929/" source="CVE"/>
		<reference ref_id="CVE-2013-0166" ref_url="https://www.suse.com/security/cve/CVE-2013-0166/" source="CVE"/>
		<reference ref_id="CVE-2013-0169" ref_url="https://www.suse.com/security/cve/CVE-2013-0169/" source="CVE"/>
		<reference ref_id="CVE-2013-4353" ref_url="https://www.suse.com/security/cve/CVE-2013-4353/" source="CVE"/>
		<reference ref_id="CVE-2013-6449" ref_url="https://www.suse.com/security/cve/CVE-2013-6449/" source="CVE"/>
		<reference ref_id="CVE-2013-6450" ref_url="https://www.suse.com/security/cve/CVE-2013-6450/" source="CVE"/>
		<reference ref_id="CVE-2014-0076" ref_url="https://www.suse.com/security/cve/CVE-2014-0076/" source="CVE"/>
		<reference ref_id="CVE-2014-0160" ref_url="https://www.suse.com/security/cve/CVE-2014-0160/" source="CVE"/>
		<reference ref_id="CVE-2014-0195" ref_url="https://www.suse.com/security/cve/CVE-2014-0195/" source="CVE"/>
		<reference ref_id="CVE-2014-0198" ref_url="https://www.suse.com/security/cve/CVE-2014-0198/" source="CVE"/>
		<reference ref_id="CVE-2014-0221" ref_url="https://www.suse.com/security/cve/CVE-2014-0221/" source="CVE"/>
		<reference ref_id="CVE-2014-0224" ref_url="https://www.suse.com/security/cve/CVE-2014-0224/" source="CVE"/>
		<reference ref_id="CVE-2014-3470" ref_url="https://www.suse.com/security/cve/CVE-2014-3470/" source="CVE"/>
		<reference ref_id="CVE-2014-3505" ref_url="https://www.suse.com/security/cve/CVE-2014-3505/" source="CVE"/>
		<reference ref_id="CVE-2014-3506" ref_url="https://www.suse.com/security/cve/CVE-2014-3506/" source="CVE"/>
		<reference ref_id="CVE-2014-3507" ref_url="https://www.suse.com/security/cve/CVE-2014-3507/" source="CVE"/>
		<reference ref_id="CVE-2014-3508" ref_url="https://www.suse.com/security/cve/CVE-2014-3508/" source="CVE"/>
		<reference ref_id="CVE-2014-3509" ref_url="https://www.suse.com/security/cve/CVE-2014-3509/" source="CVE"/>
		<reference ref_id="CVE-2014-3510" ref_url="https://www.suse.com/security/cve/CVE-2014-3510/" source="CVE"/>
		<reference ref_id="CVE-2014-3511" ref_url="https://www.suse.com/security/cve/CVE-2014-3511/" source="CVE"/>
		<reference ref_id="CVE-2014-3512" ref_url="https://www.suse.com/security/cve/CVE-2014-3512/" source="CVE"/>
		<reference ref_id="CVE-2014-3513" ref_url="https://www.suse.com/security/cve/CVE-2014-3513/" source="CVE"/>
		<reference ref_id="CVE-2014-3567" ref_url="https://www.suse.com/security/cve/CVE-2014-3567/" source="CVE"/>
		<reference ref_id="CVE-2014-3568" ref_url="https://www.suse.com/security/cve/CVE-2014-3568/" source="CVE"/>
		<reference ref_id="CVE-2014-3569" ref_url="https://www.suse.com/security/cve/CVE-2014-3569/" source="CVE"/>
		<reference ref_id="CVE-2014-3570" ref_url="https://www.suse.com/security/cve/CVE-2014-3570/" source="CVE"/>
		<reference ref_id="CVE-2014-3571" ref_url="https://www.suse.com/security/cve/CVE-2014-3571/" source="CVE"/>
		<reference ref_id="CVE-2014-3572" ref_url="https://www.suse.com/security/cve/CVE-2014-3572/" source="CVE"/>
		<reference ref_id="CVE-2014-5139" ref_url="https://www.suse.com/security/cve/CVE-2014-5139/" source="CVE"/>
		<reference ref_id="CVE-2014-8275" ref_url="https://www.suse.com/security/cve/CVE-2014-8275/" source="CVE"/>
		<reference ref_id="CVE-2015-0204" ref_url="https://www.suse.com/security/cve/CVE-2015-0204/" source="CVE"/>
		<reference ref_id="CVE-2015-0205" ref_url="https://www.suse.com/security/cve/CVE-2015-0205/" source="CVE"/>
		<reference ref_id="CVE-2015-0206" ref_url="https://www.suse.com/security/cve/CVE-2015-0206/" source="CVE"/>
		<reference ref_id="CVE-2015-0209" ref_url="https://www.suse.com/security/cve/CVE-2015-0209/" source="CVE"/>
		<reference ref_id="CVE-2015-0286" ref_url="https://www.suse.com/security/cve/CVE-2015-0286/" source="CVE"/>
		<reference ref_id="CVE-2015-0287" ref_url="https://www.suse.com/security/cve/CVE-2015-0287/" source="CVE"/>
		<reference ref_id="CVE-2015-0288" ref_url="https://www.suse.com/security/cve/CVE-2015-0288/" source="CVE"/>
		<reference ref_id="CVE-2015-0289" ref_url="https://www.suse.com/security/cve/CVE-2015-0289/" source="CVE"/>
		<reference ref_id="CVE-2015-0293" ref_url="https://www.suse.com/security/cve/CVE-2015-0293/" source="CVE"/>
		<reference ref_id="CVE-2015-1788" ref_url="https://www.suse.com/security/cve/CVE-2015-1788/" source="CVE"/>
		<reference ref_id="CVE-2015-1789" ref_url="https://www.suse.com/security/cve/CVE-2015-1789/" source="CVE"/>
		<reference ref_id="CVE-2015-1790" ref_url="https://www.suse.com/security/cve/CVE-2015-1790/" source="CVE"/>
		<reference ref_id="CVE-2015-1791" ref_url="https://www.suse.com/security/cve/CVE-2015-1791/" source="CVE"/>
		<reference ref_id="CVE-2015-1792" ref_url="https://www.suse.com/security/cve/CVE-2015-1792/" source="CVE"/>
		<reference ref_id="CVE-2015-1793" ref_url="https://www.suse.com/security/cve/CVE-2015-1793/" source="CVE"/>
		<reference ref_id="CVE-2015-1794" ref_url="https://www.suse.com/security/cve/CVE-2015-1794/" source="CVE"/>
		<reference ref_id="CVE-2015-3193" ref_url="https://www.suse.com/security/cve/CVE-2015-3193/" source="CVE"/>
		<reference ref_id="CVE-2015-3194" ref_url="https://www.suse.com/security/cve/CVE-2015-3194/" source="CVE"/>
		<reference ref_id="CVE-2015-3195" ref_url="https://www.suse.com/security/cve/CVE-2015-3195/" source="CVE"/>
		<reference ref_id="CVE-2015-3196" ref_url="https://www.suse.com/security/cve/CVE-2015-3196/" source="CVE"/>
		<reference ref_id="CVE-2015-3197" ref_url="https://www.suse.com/security/cve/CVE-2015-3197/" source="CVE"/>
		<reference ref_id="CVE-2016-0701" ref_url="https://www.suse.com/security/cve/CVE-2016-0701/" source="CVE"/>
		<reference ref_id="CVE-2016-0702" ref_url="https://www.suse.com/security/cve/CVE-2016-0702/" source="CVE"/>
		<reference ref_id="CVE-2016-0705" ref_url="https://www.suse.com/security/cve/CVE-2016-0705/" source="CVE"/>
		<reference ref_id="CVE-2016-0797" ref_url="https://www.suse.com/security/cve/CVE-2016-0797/" source="CVE"/>
		<reference ref_id="CVE-2016-0798" ref_url="https://www.suse.com/security/cve/CVE-2016-0798/" source="CVE"/>
		<reference ref_id="CVE-2016-0800" ref_url="https://www.suse.com/security/cve/CVE-2016-0800/" source="CVE"/>
		<reference ref_id="CVE-2016-2105" ref_url="https://www.suse.com/security/cve/CVE-2016-2105/" source="CVE"/>
		<reference ref_id="CVE-2016-2106" ref_url="https://www.suse.com/security/cve/CVE-2016-2106/" source="CVE"/>
		<reference ref_id="CVE-2016-2107" ref_url="https://www.suse.com/security/cve/CVE-2016-2107/" source="CVE"/>
		<reference ref_id="CVE-2016-2109" ref_url="https://www.suse.com/security/cve/CVE-2016-2109/" source="CVE"/>
		<reference ref_id="CVE-2016-2176" ref_url="https://www.suse.com/security/cve/CVE-2016-2176/" source="CVE"/>
		<reference ref_id="CVE-2016-2177" ref_url="https://www.suse.com/security/cve/CVE-2016-2177/" source="CVE"/>
		<reference ref_id="CVE-2016-2178" ref_url="https://www.suse.com/security/cve/CVE-2016-2178/" source="CVE"/>
		<reference ref_id="CVE-2016-2179" ref_url="https://www.suse.com/security/cve/CVE-2016-2179/" source="CVE"/>
		<reference ref_id="CVE-2016-2180" ref_url="https://www.suse.com/security/cve/CVE-2016-2180/" source="CVE"/>
		<reference ref_id="CVE-2016-2181" ref_url="https://www.suse.com/security/cve/CVE-2016-2181/" source="CVE"/>
		<reference ref_id="CVE-2016-2182" ref_url="https://www.suse.com/security/cve/CVE-2016-2182/" source="CVE"/>
		<reference ref_id="CVE-2016-2183" ref_url="https://www.suse.com/security/cve/CVE-2016-2183/" source="CVE"/>
		<reference ref_id="CVE-2016-6302" ref_url="https://www.suse.com/security/cve/CVE-2016-6302/" source="CVE"/>
		<reference ref_id="CVE-2016-6303" ref_url="https://www.suse.com/security/cve/CVE-2016-6303/" source="CVE"/>
		<reference ref_id="CVE-2016-6304" ref_url="https://www.suse.com/security/cve/CVE-2016-6304/" source="CVE"/>
		<reference ref_id="CVE-2016-6306" ref_url="https://www.suse.com/security/cve/CVE-2016-6306/" source="CVE"/>
		<reference ref_id="CVE-2016-7052" ref_url="https://www.suse.com/security/cve/CVE-2016-7052/" source="CVE"/>
		<reference ref_id="CVE-2016-7055" ref_url="https://www.suse.com/security/cve/CVE-2016-7055/" source="CVE"/>
		<reference ref_id="CVE-2016-7056" ref_url="https://www.suse.com/security/cve/CVE-2016-7056/" source="CVE"/>
		<reference ref_id="CVE-2017-3731" ref_url="https://www.suse.com/security/cve/CVE-2017-3731/" source="CVE"/>
		<reference ref_id="CVE-2017-3732" ref_url="https://www.suse.com/security/cve/CVE-2017-3732/" source="CVE"/>
		<description>
These are all security issues fixed in the libopenssl-devel-1.1.0i-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-7250/">CVE-2006-7250</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-5077/">CVE-2008-5077</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0590/">CVE-2009-0590</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-0591/">CVE-2009-0591</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0789/">CVE-2009-0789</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1377/">CVE-2009-1377</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1378/">CVE-2009-1378</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1379/">CVE-2009-1379</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1386/">CVE-2009-1386</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1387/">CVE-2009-1387</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0740/">CVE-2010-0740</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0742/">CVE-2010-0742</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1633/">CVE-2010-1633</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2939/">CVE-2010-2939</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3864/">CVE-2010-3864</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-5298/">CVE-2010-5298</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0014/">CVE-2011-0014</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3207/">CVE-2011-3207</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3210/">CVE-2011-3210</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4108/">CVE-2011-4108</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4576/">CVE-2011-4576</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4577/">CVE-2011-4577</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4619/">CVE-2011-4619</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0027/">CVE-2012-0027</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0050/">CVE-2012-0050</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0884/">CVE-2012-0884</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1165/">CVE-2012-1165</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2110/">CVE-2012-2110</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2686/">CVE-2012-2686</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4929/">CVE-2012-4929</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0166/">CVE-2013-0166</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0169/">CVE-2013-0169</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4353/">CVE-2013-4353</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6449/">CVE-2013-6449</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6450/">CVE-2013-6450</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-0076/">CVE-2014-0076</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-0160/">CVE-2014-0160</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0195/">CVE-2014-0195</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0198/">CVE-2014-0198</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0221/">CVE-2014-0221</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-0224/">CVE-2014-0224</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3470/">CVE-2014-3470</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3505/">CVE-2014-3505</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3506/">CVE-2014-3506</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3507/">CVE-2014-3507</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3508/">CVE-2014-3508</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3509/">CVE-2014-3509</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3510/">CVE-2014-3510</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3511/">CVE-2014-3511</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3512/">CVE-2014-3512</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2014-3513/">CVE-2014-3513</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3567/">CVE-2014-3567</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3568/">CVE-2014-3568</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3569/">CVE-2014-3569</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3570/">CVE-2014-3570</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3571/">CVE-2014-3571</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3572/">CVE-2014-3572</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-5139/">CVE-2014-5139</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8275/">CVE-2014-8275</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0204/">CVE-2015-0204</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0205/">CVE-2015-0205</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0206/">CVE-2015-0206</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0209/">CVE-2015-0209</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0286/">CVE-2015-0286</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0287/">CVE-2015-0287</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0288/">CVE-2015-0288</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0289/">CVE-2015-0289</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0293/">CVE-2015-0293</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1788/">CVE-2015-1788</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-1789/">CVE-2015-1789</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1790/">CVE-2015-1790</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1791/">CVE-2015-1791</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1792/">CVE-2015-1792</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1793/">CVE-2015-1793</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-1794/">CVE-2015-1794</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-3193/">CVE-2015-3193</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-3194/">CVE-2015-3194</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-3195/">CVE-2015-3195</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3196/">CVE-2015-3196</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-3197/">CVE-2015-3197</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0701/">CVE-2016-0701</cve>
	<cve impact="important" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0702/">CVE-2016-0702</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0705/">CVE-2016-0705</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0797/">CVE-2016-0797</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0798/">CVE-2016-0798</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0800/">CVE-2016-0800</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2105/">CVE-2016-2105</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2106/">CVE-2016-2106</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2107/">CVE-2016-2107</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2109/">CVE-2016-2109</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2176/">CVE-2016-2176</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2177/">CVE-2016-2177</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2178/">CVE-2016-2178</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2179/">CVE-2016-2179</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2180/">CVE-2016-2180</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2181/">CVE-2016-2181</cve>
	<cve impact="low" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2182/">CVE-2016-2182</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2183/">CVE-2016-2183</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6302/">CVE-2016-6302</cve>
	<cve impact="low" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6303/">CVE-2016-6303</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6304/">CVE-2016-6304</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6306/">CVE-2016-6306</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7052/">CVE-2016-7052</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7055/">CVE-2016-7055</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7056/">CVE-2016-7056</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3731/">CVE-2017-3731</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3732/">CVE-2017-3732</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481459" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481460" comment="openssl-1.1.0i-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137077" version="1" class="patch">
	<metadata>
		<title>libopus0-1.2.1-1.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-0381" ref_url="https://www.suse.com/security/cve/CVE-2017-0381/" source="CVE"/>
		<description>
These are all security issues fixed in the libopus0-1.2.1-1.29 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-0381/">CVE-2017-0381</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480649" comment="libopus0-1.2.1-1.29 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137078" version="1" class="patch">
	<metadata>
		<title>libpainter0-0.9.6-2.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1430" ref_url="https://www.suse.com/security/cve/CVE-2013-1430/" source="CVE"/>
		<reference ref_id="CVE-2017-16927" ref_url="https://www.suse.com/security/cve/CVE-2017-16927/" source="CVE"/>
		<reference ref_id="CVE-2017-6967" ref_url="https://www.suse.com/security/cve/CVE-2017-6967/" source="CVE"/>
		<description>
These are all security issues fixed in the libpainter0-0.9.6-2.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2013-1430/">CVE-2013-1430</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16927/">CVE-2017-16927</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6967/">CVE-2017-6967</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480650" comment="libpainter0-0.9.6-2.17 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480651" comment="librfxencode0-0.9.6-2.17 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480652" comment="xrdp-0.9.6-2.17 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480653" comment="xrdp-devel-0.9.6-2.17 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137079" version="1" class="patch">
	<metadata>
		<title>libpango-1_0-0-1.40.14-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-0020" ref_url="https://www.suse.com/security/cve/CVE-2011-0020/" source="CVE"/>
		<reference ref_id="CVE-2011-0064" ref_url="https://www.suse.com/security/cve/CVE-2011-0064/" source="CVE"/>
		<reference ref_id="CVE-2018-15120" ref_url="https://www.suse.com/security/cve/CVE-2018-15120/" source="CVE"/>
		<description>
These are all security issues fixed in the libpango-1_0-0-1.40.14-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0020/">CVE-2011-0020</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0064/">CVE-2011-0064</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15120/">CVE-2018-15120</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481461" comment="libpango-1_0-0-1.40.14-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481462" comment="pango-devel-1.40.14-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481463" comment="typelib-1_0-Pango-1_0-1.40.14-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137080" version="1" class="patch">
	<metadata>
		<title>libpcre1-32bit-8.41-4.20 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-8964" ref_url="https://www.suse.com/security/cve/CVE-2014-8964/" source="CVE"/>
		<reference ref_id="CVE-2015-2325" ref_url="https://www.suse.com/security/cve/CVE-2015-2325/" source="CVE"/>
		<reference ref_id="CVE-2015-2326" ref_url="https://www.suse.com/security/cve/CVE-2015-2326/" source="CVE"/>
		<reference ref_id="CVE-2015-3217" ref_url="https://www.suse.com/security/cve/CVE-2015-3217/" source="CVE"/>
		<reference ref_id="CVE-2016-1283" ref_url="https://www.suse.com/security/cve/CVE-2016-1283/" source="CVE"/>
		<reference ref_id="CVE-2016-3191" ref_url="https://www.suse.com/security/cve/CVE-2016-3191/" source="CVE"/>
		<reference ref_id="CVE-2017-6004" ref_url="https://www.suse.com/security/cve/CVE-2017-6004/" source="CVE"/>
		<reference ref_id="CVE-2017-7186" ref_url="https://www.suse.com/security/cve/CVE-2017-7186/" source="CVE"/>
		<reference ref_id="CVE-2017-7244" ref_url="https://www.suse.com/security/cve/CVE-2017-7244/" source="CVE"/>
		<reference ref_id="CVE-2017-7245" ref_url="https://www.suse.com/security/cve/CVE-2017-7245/" source="CVE"/>
		<reference ref_id="CVE-2017-7246" ref_url="https://www.suse.com/security/cve/CVE-2017-7246/" source="CVE"/>
		<description>
These are all security issues fixed in the libpcre1-32bit-8.41-4.20 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8964/">CVE-2014-8964</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-2325/">CVE-2015-2325</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-2326/">CVE-2015-2326</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3217/">CVE-2015-3217</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1283/">CVE-2016-1283</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-3191/">CVE-2016-3191</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6004/">CVE-2017-6004</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7186/">CVE-2017-7186</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7244/">CVE-2017-7244</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7245/">CVE-2017-7245</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7246/">CVE-2017-7246</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480657" comment="libpcre1-8.41-4.20 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480658" comment="libpcre1-32bit-8.41-4.20 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480659" comment="libpcre16-0-8.41-4.20 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480660" comment="libpcrecpp0-8.41-4.20 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480661" comment="libpcrecpp0-32bit-8.41-4.20 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480662" comment="libpcreposix0-8.41-4.20 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480663" comment="pcre-devel-8.41-4.20 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480664" comment="pcre-tools-8.41-4.20 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137081" version="1" class="patch">
	<metadata>
		<title>libpcre2-16-0-10.31-1.14 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-8964" ref_url="https://www.suse.com/security/cve/CVE-2014-8964/" source="CVE"/>
		<reference ref_id="CVE-2015-2325" ref_url="https://www.suse.com/security/cve/CVE-2015-2325/" source="CVE"/>
		<reference ref_id="CVE-2015-2326" ref_url="https://www.suse.com/security/cve/CVE-2015-2326/" source="CVE"/>
		<reference ref_id="CVE-2016-3191" ref_url="https://www.suse.com/security/cve/CVE-2016-3191/" source="CVE"/>
		<reference ref_id="CVE-2017-7186" ref_url="https://www.suse.com/security/cve/CVE-2017-7186/" source="CVE"/>
		<reference ref_id="CVE-2017-8786" ref_url="https://www.suse.com/security/cve/CVE-2017-8786/" source="CVE"/>
		<description>
These are all security issues fixed in the libpcre2-16-0-10.31-1.14 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8964/">CVE-2014-8964</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-2325/">CVE-2015-2325</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-2326/">CVE-2015-2326</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-3191/">CVE-2016-3191</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7186/">CVE-2017-7186</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8786/">CVE-2017-8786</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480665" comment="libpcre2-16-0-10.31-1.14 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480666" comment="libpcre2-32-0-10.31-1.14 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480667" comment="libpcre2-8-0-10.31-1.14 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137082" version="1" class="patch">
	<metadata>
		<title>libpcsclite1-1.8.24-1.14 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-10109" ref_url="https://www.suse.com/security/cve/CVE-2016-10109/" source="CVE"/>
		<description>
These are all security issues fixed in the libpcsclite1-1.8.24-1.14 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10109/">CVE-2016-10109</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481464" comment="libpcsclite1-1.8.24-1.14 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481465" comment="libpcscspy0-1.8.24-1.14 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481466" comment="pcsc-lite-1.8.24-1.14 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481467" comment="pcsc-lite-devel-1.8.24-1.14 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137083" version="1" class="patch">
	<metadata>
		<title>libpng12-0-1.2.57-2.18 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-1205" ref_url="https://www.suse.com/security/cve/CVE-2010-1205/" source="CVE"/>
		<reference ref_id="CVE-2011-2501" ref_url="https://www.suse.com/security/cve/CVE-2011-2501/" source="CVE"/>
		<reference ref_id="CVE-2011-3026" ref_url="https://www.suse.com/security/cve/CVE-2011-3026/" source="CVE"/>
		<reference ref_id="CVE-2011-3045" ref_url="https://www.suse.com/security/cve/CVE-2011-3045/" source="CVE"/>
		<reference ref_id="CVE-2011-3048" ref_url="https://www.suse.com/security/cve/CVE-2011-3048/" source="CVE"/>
		<reference ref_id="CVE-2012-3386" ref_url="https://www.suse.com/security/cve/CVE-2012-3386/" source="CVE"/>
		<reference ref_id="CVE-2013-7353" ref_url="https://www.suse.com/security/cve/CVE-2013-7353/" source="CVE"/>
		<reference ref_id="CVE-2013-7354" ref_url="https://www.suse.com/security/cve/CVE-2013-7354/" source="CVE"/>
		<reference ref_id="CVE-2014-9495" ref_url="https://www.suse.com/security/cve/CVE-2014-9495/" source="CVE"/>
		<reference ref_id="CVE-2015-0973" ref_url="https://www.suse.com/security/cve/CVE-2015-0973/" source="CVE"/>
		<reference ref_id="CVE-2015-8126" ref_url="https://www.suse.com/security/cve/CVE-2015-8126/" source="CVE"/>
		<reference ref_id="CVE-2015-8540" ref_url="https://www.suse.com/security/cve/CVE-2015-8540/" source="CVE"/>
		<reference ref_id="CVE-2016-10087" ref_url="https://www.suse.com/security/cve/CVE-2016-10087/" source="CVE"/>
		<description>
These are all security issues fixed in the libpng12-0-1.2.57-2.18 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-1205/">CVE-2010-1205</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2501/">CVE-2011-2501</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3026/">CVE-2011-3026</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3045/">CVE-2011-3045</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3048/">CVE-2011-3048</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3386/">CVE-2012-3386</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7353/">CVE-2013-7353</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7354/">CVE-2013-7354</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-9495/">CVE-2014-9495</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0973/">CVE-2015-0973</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8126/">CVE-2015-8126</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8540/">CVE-2015-8540</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10087/">CVE-2016-10087</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480672" comment="libpng12-0-1.2.57-2.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480673" comment="libpng12-devel-1.2.57-2.18 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137084" version="1" class="patch">
	<metadata>
		<title>libpng16-16-1.6.34-1.19 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-1205" ref_url="https://www.suse.com/security/cve/CVE-2010-1205/" source="CVE"/>
		<reference ref_id="CVE-2011-2501" ref_url="https://www.suse.com/security/cve/CVE-2011-2501/" source="CVE"/>
		<reference ref_id="CVE-2011-2690" ref_url="https://www.suse.com/security/cve/CVE-2011-2690/" source="CVE"/>
		<reference ref_id="CVE-2011-2691" ref_url="https://www.suse.com/security/cve/CVE-2011-2691/" source="CVE"/>
		<reference ref_id="CVE-2011-2692" ref_url="https://www.suse.com/security/cve/CVE-2011-2692/" source="CVE"/>
		<reference ref_id="CVE-2011-3328" ref_url="https://www.suse.com/security/cve/CVE-2011-3328/" source="CVE"/>
		<reference ref_id="CVE-2013-6954" ref_url="https://www.suse.com/security/cve/CVE-2013-6954/" source="CVE"/>
		<reference ref_id="CVE-2014-0333" ref_url="https://www.suse.com/security/cve/CVE-2014-0333/" source="CVE"/>
		<reference ref_id="CVE-2015-8126" ref_url="https://www.suse.com/security/cve/CVE-2015-8126/" source="CVE"/>
		<reference ref_id="CVE-2016-10087" ref_url="https://www.suse.com/security/cve/CVE-2016-10087/" source="CVE"/>
		<reference ref_id="CVE-2016-5735" ref_url="https://www.suse.com/security/cve/CVE-2016-5735/" source="CVE"/>
		<reference ref_id="CVE-2017-12652" ref_url="https://www.suse.com/security/cve/CVE-2017-12652/" source="CVE"/>
		<description>
These are all security issues fixed in the libpng16-16-1.6.34-1.19 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2010-1205/">CVE-2010-1205</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2501/">CVE-2011-2501</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-2690/">CVE-2011-2690</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2011-2691/">CVE-2011-2691</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-2692/">CVE-2011-2692</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-3328/">CVE-2011-3328</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6954/">CVE-2013-6954</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0333/">CVE-2014-0333</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8126/">CVE-2015-8126</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10087/">CVE-2016-10087</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5735/">CVE-2016-5735</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12652/">CVE-2017-12652</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480674" comment="libpng16-16-1.6.34-1.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480675" comment="libpng16-16-32bit-1.6.34-1.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480676" comment="libpng16-compat-devel-1.6.34-1.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480677" comment="libpng16-devel-1.6.34-1.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137085" version="1" class="patch">
	<metadata>
		<title>libpolkit0-0.114-3.6.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-0750" ref_url="https://www.suse.com/security/cve/CVE-2010-0750/" source="CVE"/>
		<reference ref_id="CVE-2011-1485" ref_url="https://www.suse.com/security/cve/CVE-2011-1485/" source="CVE"/>
		<reference ref_id="CVE-2013-4288" ref_url="https://www.suse.com/security/cve/CVE-2013-4288/" source="CVE"/>
		<reference ref_id="CVE-2015-3218" ref_url="https://www.suse.com/security/cve/CVE-2015-3218/" source="CVE"/>
		<reference ref_id="CVE-2015-3255" ref_url="https://www.suse.com/security/cve/CVE-2015-3255/" source="CVE"/>
		<reference ref_id="CVE-2015-3256" ref_url="https://www.suse.com/security/cve/CVE-2015-3256/" source="CVE"/>
		<reference ref_id="CVE-2015-4625" ref_url="https://www.suse.com/security/cve/CVE-2015-4625/" source="CVE"/>
		<reference ref_id="CVE-2018-1116" ref_url="https://www.suse.com/security/cve/CVE-2018-1116/" source="CVE"/>
		<reference ref_id="CVE-2018-19788" ref_url="https://www.suse.com/security/cve/CVE-2018-19788/" source="CVE"/>
		<description>
These are all security issues fixed in the libpolkit0-0.114-3.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0750/">CVE-2010-0750</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1485/">CVE-2011-1485</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4288/">CVE-2013-4288</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3218/">CVE-2015-3218</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3255/">CVE-2015-3255</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3256/">CVE-2015-3256</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4625/">CVE-2015-4625</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1116/">CVE-2018-1116</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19788/">CVE-2018-19788</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481468" comment="libpolkit0-0.114-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481469" comment="polkit-0.114-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481470" comment="polkit-devel-0.114-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481471" comment="typelib-1_0-Polkit-1_0-0.114-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137086" version="1" class="patch">
	<metadata>
		<title>libpoppler-cpp0-0.62.0-2.33 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-0799" ref_url="https://www.suse.com/security/cve/CVE-2009-0799/" source="CVE"/>
		<reference ref_id="CVE-2009-0800" ref_url="https://www.suse.com/security/cve/CVE-2009-0800/" source="CVE"/>
		<reference ref_id="CVE-2009-1179" ref_url="https://www.suse.com/security/cve/CVE-2009-1179/" source="CVE"/>
		<reference ref_id="CVE-2009-1180" ref_url="https://www.suse.com/security/cve/CVE-2009-1180/" source="CVE"/>
		<reference ref_id="CVE-2009-1181" ref_url="https://www.suse.com/security/cve/CVE-2009-1181/" source="CVE"/>
		<reference ref_id="CVE-2009-1182" ref_url="https://www.suse.com/security/cve/CVE-2009-1182/" source="CVE"/>
		<reference ref_id="CVE-2009-1183" ref_url="https://www.suse.com/security/cve/CVE-2009-1183/" source="CVE"/>
		<reference ref_id="CVE-2009-1187" ref_url="https://www.suse.com/security/cve/CVE-2009-1187/" source="CVE"/>
		<reference ref_id="CVE-2009-1188" ref_url="https://www.suse.com/security/cve/CVE-2009-1188/" source="CVE"/>
		<reference ref_id="CVE-2009-3607" ref_url="https://www.suse.com/security/cve/CVE-2009-3607/" source="CVE"/>
		<reference ref_id="CVE-2009-3608" ref_url="https://www.suse.com/security/cve/CVE-2009-3608/" source="CVE"/>
		<reference ref_id="CVE-2013-1788" ref_url="https://www.suse.com/security/cve/CVE-2013-1788/" source="CVE"/>
		<reference ref_id="CVE-2013-1789" ref_url="https://www.suse.com/security/cve/CVE-2013-1789/" source="CVE"/>
		<reference ref_id="CVE-2013-1790" ref_url="https://www.suse.com/security/cve/CVE-2013-1790/" source="CVE"/>
		<reference ref_id="CVE-2013-4473" ref_url="https://www.suse.com/security/cve/CVE-2013-4473/" source="CVE"/>
		<reference ref_id="CVE-2013-4474" ref_url="https://www.suse.com/security/cve/CVE-2013-4474/" source="CVE"/>
		<reference ref_id="CVE-2017-14517" ref_url="https://www.suse.com/security/cve/CVE-2017-14517/" source="CVE"/>
		<reference ref_id="CVE-2017-14518" ref_url="https://www.suse.com/security/cve/CVE-2017-14518/" source="CVE"/>
		<reference ref_id="CVE-2017-7511" ref_url="https://www.suse.com/security/cve/CVE-2017-7511/" source="CVE"/>
		<reference ref_id="CVE-2017-7515" ref_url="https://www.suse.com/security/cve/CVE-2017-7515/" source="CVE"/>
		<description>
These are all security issues fixed in the libpoppler-cpp0-0.62.0-2.33 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0799/">CVE-2009-0799</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0800/">CVE-2009-0800</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1179/">CVE-2009-1179</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1180/">CVE-2009-1180</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1181/">CVE-2009-1181</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1182/">CVE-2009-1182</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1183/">CVE-2009-1183</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1187/">CVE-2009-1187</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1188/">CVE-2009-1188</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3607/">CVE-2009-3607</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3608/">CVE-2009-3608</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1788/">CVE-2013-1788</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1789/">CVE-2013-1789</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1790/">CVE-2013-1790</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4473/">CVE-2013-4473</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4474/">CVE-2013-4474</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14517/">CVE-2017-14517</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14518/">CVE-2017-14518</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7511/">CVE-2017-7511</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7515/">CVE-2017-7515</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480682" comment="libpoppler-cpp0-0.62.0-2.33 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480683" comment="libpoppler-devel-0.62.0-2.33 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480684" comment="libpoppler-glib-devel-0.62.0-2.33 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480685" comment="libpoppler-glib8-0.62.0-2.33 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480686" comment="libpoppler73-0.62.0-2.33 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480687" comment="poppler-tools-0.62.0-2.33 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480688" comment="typelib-1_0-Poppler-0_18-0.62.0-2.33 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137087" version="1" class="patch">
	<metadata>
		<title>libpq5-10.6-6.25 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-15098" ref_url="https://www.suse.com/security/cve/CVE-2017-15098/" source="CVE"/>
		<reference ref_id="CVE-2017-15099" ref_url="https://www.suse.com/security/cve/CVE-2017-15099/" source="CVE"/>
		<reference ref_id="CVE-2018-1052" ref_url="https://www.suse.com/security/cve/CVE-2018-1052/" source="CVE"/>
		<reference ref_id="CVE-2018-1053" ref_url="https://www.suse.com/security/cve/CVE-2018-1053/" source="CVE"/>
		<reference ref_id="CVE-2018-1058" ref_url="https://www.suse.com/security/cve/CVE-2018-1058/" source="CVE"/>
		<reference ref_id="CVE-2018-10915" ref_url="https://www.suse.com/security/cve/CVE-2018-10915/" source="CVE"/>
		<reference ref_id="CVE-2018-10925" ref_url="https://www.suse.com/security/cve/CVE-2018-10925/" source="CVE"/>
		<reference ref_id="CVE-2018-1115" ref_url="https://www.suse.com/security/cve/CVE-2018-1115/" source="CVE"/>
		<reference ref_id="CVE-2018-16850" ref_url="https://www.suse.com/security/cve/CVE-2018-16850/" source="CVE"/>
		<description>
These are all security issues fixed in the libpq5-10.6-6.25 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15098/">CVE-2017-15098</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15099/">CVE-2017-15099</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1052/">CVE-2018-1052</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1053/">CVE-2018-1053</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1058/">CVE-2018-1058</cve>
	<cve impact="important" cvss3="8.5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10915/">CVE-2018-10915</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-10925/">CVE-2018-10925</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1115/">CVE-2018-1115</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16850/">CVE-2018-16850</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481472" comment="libpq5-10.6-6.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481473" comment="postgresql10-10.6-6.26 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137088" version="1" class="patch">
	<metadata>
		<title>libproxy-devel-0.4.15-2.15 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-4504" ref_url="https://www.suse.com/security/cve/CVE-2012-4504/" source="CVE"/>
		<description>
These are all security issues fixed in the libproxy-devel-0.4.15-2.15 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4504/">CVE-2012-4504</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480691" comment="libproxy-devel-0.4.15-2.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480692" comment="libproxy1-0.4.15-2.15 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137089" version="1" class="patch">
	<metadata>
		<title>libpulse-devel-11.1-4.31 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-3970" ref_url="https://www.suse.com/security/cve/CVE-2014-3970/" source="CVE"/>
		<description>
These are all security issues fixed in the libpulse-devel-11.1-4.31 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-3970/">CVE-2014-3970</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480693" comment="libpulse-devel-11.1-4.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480694" comment="libpulse-mainloop-glib0-11.1-4.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480695" comment="libpulse0-11.1-4.31 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137090" version="1" class="patch">
	<metadata>
		<title>libpython2_7-1_0-2.7.14-7.11.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1752" ref_url="https://www.suse.com/security/cve/CVE-2013-1752/" source="CVE"/>
		<reference ref_id="CVE-2013-1753" ref_url="https://www.suse.com/security/cve/CVE-2013-1753/" source="CVE"/>
		<reference ref_id="CVE-2016-0772" ref_url="https://www.suse.com/security/cve/CVE-2016-0772/" source="CVE"/>
		<reference ref_id="CVE-2016-1000110" ref_url="https://www.suse.com/security/cve/CVE-2016-1000110/" source="CVE"/>
		<reference ref_id="CVE-2016-5636" ref_url="https://www.suse.com/security/cve/CVE-2016-5636/" source="CVE"/>
		<reference ref_id="CVE-2016-5699" ref_url="https://www.suse.com/security/cve/CVE-2016-5699/" source="CVE"/>
		<reference ref_id="CVE-2017-1000158" ref_url="https://www.suse.com/security/cve/CVE-2017-1000158/" source="CVE"/>
		<reference ref_id="CVE-2018-1000802" ref_url="https://www.suse.com/security/cve/CVE-2018-1000802/" source="CVE"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<reference ref_id="CVE-2019-9636" ref_url="https://www.suse.com/security/cve/CVE-2019-9636/" source="CVE"/>
		<reference ref_id="CVE-2019-9948" ref_url="https://www.suse.com/security/cve/CVE-2019-9948/" source="CVE"/>
		<description>
These are all security issues fixed in the libpython2_7-1_0-2.7.14-7.11.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2013-1752/">CVE-2013-1752</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2013-1753/">CVE-2013-1753</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-0772/">CVE-2016-0772</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1000110/">CVE-2016-1000110</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5636/">CVE-2016-5636</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5699/">CVE-2016-5699</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000158/">CVE-2017-1000158</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000802/">CVE-2018-1000802</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9636/">CVE-2019-9636</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9948/">CVE-2019-9948</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481474" comment="libpython2_7-1_0-2.7.14-7.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481475" comment="python-base-2.7.14-7.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137091" version="1" class="patch">
	<metadata>
		<title>libpython3_6m1_0-3.6.5-3.11.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-4650" ref_url="https://www.suse.com/security/cve/CVE-2014-4650/" source="CVE"/>
		<reference ref_id="CVE-2018-20406" ref_url="https://www.suse.com/security/cve/CVE-2018-20406/" source="CVE"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<reference ref_id="CVE-2019-9636" ref_url="https://www.suse.com/security/cve/CVE-2019-9636/" source="CVE"/>
		<description>
These are all security issues fixed in the libpython3_6m1_0-3.6.5-3.11.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-4650/">CVE-2014-4650</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20406/">CVE-2018-20406</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9636/">CVE-2019-9636</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481476" comment="libpython3_6m1_0-3.6.5-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481477" comment="python3-base-3.6.5-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481478" comment="python3-devel-3.6.5-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481479" comment="python3-idle-3.6.5-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137092" version="1" class="patch">
	<metadata>
		<title>libqpdf21-8.0.2-1.5 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-11624" ref_url="https://www.suse.com/security/cve/CVE-2017-11624/" source="CVE"/>
		<reference ref_id="CVE-2017-11625" ref_url="https://www.suse.com/security/cve/CVE-2017-11625/" source="CVE"/>
		<reference ref_id="CVE-2017-11626" ref_url="https://www.suse.com/security/cve/CVE-2017-11626/" source="CVE"/>
		<reference ref_id="CVE-2017-11627" ref_url="https://www.suse.com/security/cve/CVE-2017-11627/" source="CVE"/>
		<reference ref_id="CVE-2017-12595" ref_url="https://www.suse.com/security/cve/CVE-2017-12595/" source="CVE"/>
		<reference ref_id="CVE-2017-9208" ref_url="https://www.suse.com/security/cve/CVE-2017-9208/" source="CVE"/>
		<reference ref_id="CVE-2017-9209" ref_url="https://www.suse.com/security/cve/CVE-2017-9209/" source="CVE"/>
		<reference ref_id="CVE-2017-9210" ref_url="https://www.suse.com/security/cve/CVE-2017-9210/" source="CVE"/>
		<description>
These are all security issues fixed in the libqpdf21-8.0.2-1.5 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11624/">CVE-2017-11624</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11625/">CVE-2017-11625</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11626/">CVE-2017-11626</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11627/">CVE-2017-11627</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12595/">CVE-2017-12595</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9208/">CVE-2017-9208</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9209/">CVE-2017-9209</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9210/">CVE-2017-9210</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480704" comment="libqpdf21-8.0.2-1.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480705" comment="qpdf-8.0.2-1.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480706" comment="qpdf-devel-8.0.2-1.5 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137093" version="1" class="patch">
	<metadata>
		<title>librrd8-1.7.0-4.34 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2131" ref_url="https://www.suse.com/security/cve/CVE-2013-2131/" source="CVE"/>
		<description>
These are all security issues fixed in the librrd8-1.7.0-4.34 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2131/">CVE-2013-2131</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480707" comment="librrd8-1.7.0-4.34 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480708" comment="rrdtool-1.7.0-4.34 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480709" comment="rrdtool-devel-1.7.0-4.34 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137094" version="1" class="patch">
	<metadata>
		<title>librsync-devel-1.0.0-1.27 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-8242" ref_url="https://www.suse.com/security/cve/CVE-2014-8242/" source="CVE"/>
		<description>
These are all security issues fixed in the librsync-devel-1.0.0-1.27 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8242/">CVE-2014-8242</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480710" comment="librsync-devel-1.0.0-1.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480711" comment="librsync2-1.0.0-1.27 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137095" version="1" class="patch">
	<metadata>
		<title>libserf-1-1-1.3.9-2.31 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-3504" ref_url="https://www.suse.com/security/cve/CVE-2014-3504/" source="CVE"/>
		<description>
These are all security issues fixed in the libserf-1-1-1.3.9-2.31 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3504/">CVE-2014-3504</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480712" comment="libserf-1-1-1.3.9-2.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480713" comment="libserf-devel-1.3.9-2.31 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137096" version="1" class="patch">
	<metadata>
		<title>libsha1detectcoll-devel-1.0.3-2.18 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2005-4900" ref_url="https://www.suse.com/security/cve/CVE-2005-4900/" source="CVE"/>
		<description>
These are all security issues fixed in the libsha1detectcoll-devel-1.0.3-2.18 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2005-4900/">CVE-2005-4900</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480714" comment="libsha1detectcoll-devel-1.0.3-2.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480715" comment="libsha1detectcoll1-1.0.3-2.18 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137097" version="1" class="patch">
	<metadata>
		<title>libsmi-0.4.8-1.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-2891" ref_url="https://www.suse.com/security/cve/CVE-2010-2891/" source="CVE"/>
		<description>
These are all security issues fixed in the libsmi-0.4.8-1.29 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2891/">CVE-2010-2891</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480716" comment="libsmi-0.4.8-1.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480717" comment="libsmi2-0.4.8-1.29 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137098" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1071767" ref_url="https://bugzilla.suse.com/1071767" source="BUGZILLA"/>
		<reference ref_id="1071777" ref_url="https://bugzilla.suse.com/1071777" source="BUGZILLA"/>
		<reference ref_id="1100167" ref_url="https://bugzilla.suse.com/1100167" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17456" ref_url="https://www.suse.com/security/cve/CVE-2017-17456/" source="CVE"/>
		<reference ref_id="CVE-2017-17457" ref_url="https://www.suse.com/security/cve/CVE-2017-17457/" source="CVE"/>
		<reference ref_id="CVE-2018-13139" ref_url="https://www.suse.com/security/cve/CVE-2018-13139/" source="CVE"/>
		<description>
This update for libsndfile fixes the following issues:

Security issues fixed:

- CVE-2018-13139: Fix a stack-based buffer overflow in psf_memset in common.c that allows remote attackers to cause a denial of service (bsc#1100167).
- CVE-2017-17456: Prevent segmentation fault in the function d2alaw_array() that may have lead to a remote DoS (bsc#1071777)
- CVE-2017-17457: Prevent segmentation fault in the function d2ulaw_array() that may have lead to a remote DoS, a different vulnerability than CVE-2017-14246 (bsc#1071767)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-26"/>
	<updated date="2018-07-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1071767">SUSE bug 1071767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071777">SUSE bug 1071777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1100167">SUSE bug 1100167</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17456/">CVE-2017-17456</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17457/">CVE-2017-17457</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-13139/">CVE-2018-13139</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782380" comment="libsndfile-devel-1.0.28-5.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782381" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137099" version="1" class="patch">
	<metadata>
		<title>libsndfile-devel-1.0.28-5.5.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-0186" ref_url="https://www.suse.com/security/cve/CVE-2009-0186/" source="CVE"/>
		<reference ref_id="CVE-2011-2696" ref_url="https://www.suse.com/security/cve/CVE-2011-2696/" source="CVE"/>
		<reference ref_id="CVE-2014-9496" ref_url="https://www.suse.com/security/cve/CVE-2014-9496/" source="CVE"/>
		<reference ref_id="CVE-2014-9756" ref_url="https://www.suse.com/security/cve/CVE-2014-9756/" source="CVE"/>
		<reference ref_id="CVE-2015-7805" ref_url="https://www.suse.com/security/cve/CVE-2015-7805/" source="CVE"/>
		<reference ref_id="CVE-2015-8075" ref_url="https://www.suse.com/security/cve/CVE-2015-8075/" source="CVE"/>
		<reference ref_id="CVE-2017-12562" ref_url="https://www.suse.com/security/cve/CVE-2017-12562/" source="CVE"/>
		<reference ref_id="CVE-2017-14245" ref_url="https://www.suse.com/security/cve/CVE-2017-14245/" source="CVE"/>
		<reference ref_id="CVE-2017-14246" ref_url="https://www.suse.com/security/cve/CVE-2017-14246/" source="CVE"/>
		<reference ref_id="CVE-2017-14634" ref_url="https://www.suse.com/security/cve/CVE-2017-14634/" source="CVE"/>
		<reference ref_id="CVE-2017-17456" ref_url="https://www.suse.com/security/cve/CVE-2017-17456/" source="CVE"/>
		<reference ref_id="CVE-2017-17457" ref_url="https://www.suse.com/security/cve/CVE-2017-17457/" source="CVE"/>
		<reference ref_id="CVE-2017-6892" ref_url="https://www.suse.com/security/cve/CVE-2017-6892/" source="CVE"/>
		<reference ref_id="CVE-2017-7585" ref_url="https://www.suse.com/security/cve/CVE-2017-7585/" source="CVE"/>
		<reference ref_id="CVE-2017-7586" ref_url="https://www.suse.com/security/cve/CVE-2017-7586/" source="CVE"/>
		<reference ref_id="CVE-2017-8361" ref_url="https://www.suse.com/security/cve/CVE-2017-8361/" source="CVE"/>
		<reference ref_id="CVE-2017-8362" ref_url="https://www.suse.com/security/cve/CVE-2017-8362/" source="CVE"/>
		<reference ref_id="CVE-2017-8363" ref_url="https://www.suse.com/security/cve/CVE-2017-8363/" source="CVE"/>
		<reference ref_id="CVE-2017-8365" ref_url="https://www.suse.com/security/cve/CVE-2017-8365/" source="CVE"/>
		<reference ref_id="CVE-2018-13139" ref_url="https://www.suse.com/security/cve/CVE-2018-13139/" source="CVE"/>
		<description>
These are all security issues fixed in the libsndfile-devel-1.0.28-5.5.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-0186/">CVE-2009-0186</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2696/">CVE-2011-2696</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9496/">CVE-2014-9496</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9756/">CVE-2014-9756</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7805/">CVE-2015-7805</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8075/">CVE-2015-8075</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12562/">CVE-2017-12562</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14245/">CVE-2017-14245</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14246/">CVE-2017-14246</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14634/">CVE-2017-14634</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17456/">CVE-2017-17456</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17457/">CVE-2017-17457</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6892/">CVE-2017-6892</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7585/">CVE-2017-7585</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7586/">CVE-2017-7586</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8361/">CVE-2017-8361</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8362/">CVE-2017-8362</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8363/">CVE-2017-8363</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8365/">CVE-2017-8365</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-13139/">CVE-2018-13139</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481480" comment="libsndfile-devel-1.0.28-5.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481481" comment="libsndfile1-1.0.28-5.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137100" version="1" class="patch">
	<metadata>
		<title>libsnmp30-5.7.3-8.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-5621" ref_url="https://www.suse.com/security/cve/CVE-2015-5621/" source="CVE"/>
		<description>
These are all security issues fixed in the libsnmp30-5.7.3-8.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5621/">CVE-2015-5621</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481482" comment="libsnmp30-5.7.3-8.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481483" comment="net-snmp-5.7.3-8.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481484" comment="net-snmp-devel-5.7.3-8.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481485" comment="perl-SNMP-5.7.3-8.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481486" comment="snmp-mibs-5.7.3-8.24 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137101" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1100097" ref_url="https://bugzilla.suse.com/1100097" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12910" ref_url="https://www.suse.com/security/cve/CVE-2018-12910/" source="CVE"/>
		<description>
This update for libsoup fixes the following issues:

Security issue fixed:

- CVE-2018-12910: Fix crash when handling empty hostnames (bsc#1100097).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-23"/>
	<updated date="2019-04-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1100097">SUSE bug 1100097</bugzilla>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12910/">CVE-2018-12910</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789705" comment="libsoup-2_4-1-2.62.2-3.3.32 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491174" comment="libsoup-lang-2.62.2-3.3.32 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137102" version="1" class="patch">
	<metadata>
		<title>libsoup-2_4-1-2.62.2-3.3.32 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-2054" ref_url="https://www.suse.com/security/cve/CVE-2011-2054/" source="CVE"/>
		<reference ref_id="CVE-2017-2885" ref_url="https://www.suse.com/security/cve/CVE-2017-2885/" source="CVE"/>
		<reference ref_id="CVE-2018-12910" ref_url="https://www.suse.com/security/cve/CVE-2018-12910/" source="CVE"/>
		<description>
These are all security issues fixed in the libsoup-2_4-1-2.62.2-3.3.32 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-2054/">CVE-2011-2054</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2885/">CVE-2017-2885</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12910/">CVE-2018-12910</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481487" comment="libsoup-2_4-1-2.62.2-3.3.32 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481488" comment="libsoup-lang-2.62.2-3.3.32 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137103" version="1" class="patch">
	<metadata>
		<title>libspice-client-glib-2_0-8-0.35-1.48 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-10873" ref_url="https://www.suse.com/security/cve/CVE-2018-10873/" source="CVE"/>
		<reference ref_id="CVE-2018-10893" ref_url="https://www.suse.com/security/cve/CVE-2018-10893/" source="CVE"/>
		<description>
These are all security issues fixed in the libspice-client-glib-2_0-8-0.35-1.48 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10873/">CVE-2018-10873</cve>
	<cve impact="moderate" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2018-10893/">CVE-2018-10893</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481489" comment="libspice-client-glib-2_0-8-0.35-1.48 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481490" comment="libspice-client-glib-helper-0.35-1.48 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481491" comment="libspice-client-gtk-3_0-5-0.35-1.48 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137104" version="1" class="patch">
	<metadata>
		<title>libsqlite3-0-3.28.0-3.6.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-20346" ref_url="https://www.suse.com/security/cve/CVE-2018-20346/" source="CVE"/>
		<reference ref_id="CVE-2018-8740" ref_url="https://www.suse.com/security/cve/CVE-2018-8740/" source="CVE"/>
		<reference ref_id="CVE-2019-9936" ref_url="https://www.suse.com/security/cve/CVE-2019-9936/" source="CVE"/>
		<reference ref_id="CVE-2019-9937" ref_url="https://www.suse.com/security/cve/CVE-2019-9937/" source="CVE"/>
		<description>
These are all security issues fixed in the libsqlite3-0-3.28.0-3.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20346/">CVE-2018-20346</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8740/">CVE-2018-8740</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9936/">CVE-2019-9936</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9937/">CVE-2019-9937</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481492" comment="libsqlite3-0-3.28.0-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481493" comment="libsqlite3-0-32bit-3.28.0-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481494" comment="sqlite3-3.28.0-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481495" comment="sqlite3-devel-3.28.0-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137105" version="1" class="patch">
	<metadata>
		<title>libssh-devel-0.8.4-8.26 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-8132" ref_url="https://www.suse.com/security/cve/CVE-2014-8132/" source="CVE"/>
		<reference ref_id="CVE-2015-3146" ref_url="https://www.suse.com/security/cve/CVE-2015-3146/" source="CVE"/>
		<reference ref_id="CVE-2018-10933" ref_url="https://www.suse.com/security/cve/CVE-2018-10933/" source="CVE"/>
		<description>
These are all security issues fixed in the libssh-devel-0.8.4-8.26 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8132/">CVE-2014-8132</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3146/">CVE-2015-3146</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10933/">CVE-2018-10933</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481496" comment="libssh-devel-0.8.4-8.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481497" comment="libssh4-0.8.4-8.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481498" comment="libssh4-32bit-0.8.4-8.26 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137106" version="1" class="patch">
	<metadata>
		<title>libssh2-1-1.8.0-4.6.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-1782" ref_url="https://www.suse.com/security/cve/CVE-2015-1782/" source="CVE"/>
		<reference ref_id="CVE-2016-0787" ref_url="https://www.suse.com/security/cve/CVE-2016-0787/" source="CVE"/>
		<reference ref_id="CVE-2019-3855" ref_url="https://www.suse.com/security/cve/CVE-2019-3855/" source="CVE"/>
		<reference ref_id="CVE-2019-3856" ref_url="https://www.suse.com/security/cve/CVE-2019-3856/" source="CVE"/>
		<reference ref_id="CVE-2019-3857" ref_url="https://www.suse.com/security/cve/CVE-2019-3857/" source="CVE"/>
		<reference ref_id="CVE-2019-3858" ref_url="https://www.suse.com/security/cve/CVE-2019-3858/" source="CVE"/>
		<reference ref_id="CVE-2019-3859" ref_url="https://www.suse.com/security/cve/CVE-2019-3859/" source="CVE"/>
		<reference ref_id="CVE-2019-3860" ref_url="https://www.suse.com/security/cve/CVE-2019-3860/" source="CVE"/>
		<reference ref_id="CVE-2019-3861" ref_url="https://www.suse.com/security/cve/CVE-2019-3861/" source="CVE"/>
		<reference ref_id="CVE-2019-3862" ref_url="https://www.suse.com/security/cve/CVE-2019-3862/" source="CVE"/>
		<reference ref_id="CVE-2019-3863" ref_url="https://www.suse.com/security/cve/CVE-2019-3863/" source="CVE"/>
		<description>
These are all security issues fixed in the libssh2-1-1.8.0-4.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1782/">CVE-2015-1782</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0787/">CVE-2016-0787</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3855/">CVE-2019-3855</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3856/">CVE-2019-3856</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3857/">CVE-2019-3857</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3858/">CVE-2019-3858</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3859/">CVE-2019-3859</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3860/">CVE-2019-3860</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-3861/">CVE-2019-3861</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3862/">CVE-2019-3862</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3863/">CVE-2019-3863</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481499" comment="libssh2-1-1.8.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481500" comment="libssh2-devel-1.8.0-4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137107" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1130103" ref_url="https://bugzilla.suse.com/1130103" source="BUGZILLA"/>
		<reference ref_id="1133528" ref_url="https://bugzilla.suse.com/1133528" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3859" ref_url="https://www.suse.com/security/cve/CVE-2019-3859/" source="CVE"/>
		<description>
This update for libssh2_org fixes the following issues:

  - Incorrect upstream fix for CVE-2019-3859 broke public key authentication [bsc#1133528, bsc#1130103]

		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-27"/>
	<updated date="2019-04-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1130103">SUSE bug 1130103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133528">SUSE bug 1133528</bugzilla>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3859/">CVE-2019-3859</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789706" comment="libssh2-1-1.8.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789707" comment="libssh2-devel-1.8.0-4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137108" version="1" class="patch">
	<metadata>
		<title>libsystemd0-234-24.25.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-1174" ref_url="https://www.suse.com/security/cve/CVE-2012-1174/" source="CVE"/>
		<reference ref_id="CVE-2013-4288" ref_url="https://www.suse.com/security/cve/CVE-2013-4288/" source="CVE"/>
		<reference ref_id="CVE-2015-7510" ref_url="https://www.suse.com/security/cve/CVE-2015-7510/" source="CVE"/>
		<reference ref_id="CVE-2016-10156" ref_url="https://www.suse.com/security/cve/CVE-2016-10156/" source="CVE"/>
		<reference ref_id="CVE-2017-15908" ref_url="https://www.suse.com/security/cve/CVE-2017-15908/" source="CVE"/>
		<reference ref_id="CVE-2017-18078" ref_url="https://www.suse.com/security/cve/CVE-2017-18078/" source="CVE"/>
		<reference ref_id="CVE-2017-9445" ref_url="https://www.suse.com/security/cve/CVE-2017-9445/" source="CVE"/>
		<reference ref_id="CVE-2018-15686" ref_url="https://www.suse.com/security/cve/CVE-2018-15686/" source="CVE"/>
		<reference ref_id="CVE-2018-15688" ref_url="https://www.suse.com/security/cve/CVE-2018-15688/" source="CVE"/>
		<reference ref_id="CVE-2018-16864" ref_url="https://www.suse.com/security/cve/CVE-2018-16864/" source="CVE"/>
		<reference ref_id="CVE-2018-16865" ref_url="https://www.suse.com/security/cve/CVE-2018-16865/" source="CVE"/>
		<reference ref_id="CVE-2018-6954" ref_url="https://www.suse.com/security/cve/CVE-2018-6954/" source="CVE"/>
		<reference ref_id="CVE-2019-6454" ref_url="https://www.suse.com/security/cve/CVE-2019-6454/" source="CVE"/>
		<description>
These are all security issues fixed in the libsystemd0-234-24.25.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1174/">CVE-2012-1174</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4288/">CVE-2013-4288</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7510/">CVE-2015-7510</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10156/">CVE-2016-10156</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15908/">CVE-2017-15908</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18078/">CVE-2017-18078</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-9445/">CVE-2017-9445</cve>
	<cve impact="moderate" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-15686/">CVE-2018-15686</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15688/">CVE-2018-15688</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16864/">CVE-2018-16864</cve>
	<cve impact="important" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16865/">CVE-2018-16865</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-6954/">CVE-2018-6954</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6454/">CVE-2019-6454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481501" comment="libsystemd0-234-24.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481502" comment="libsystemd0-32bit-234-24.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481503" comment="libudev-devel-234-24.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481504" comment="libudev1-234-24.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481505" comment="libudev1-32bit-234-24.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481506" comment="systemd-234-24.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481507" comment="systemd-32bit-234-24.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481508" comment="systemd-bash-completion-234-24.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481509" comment="systemd-container-234-24.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481510" comment="systemd-coredump-234-24.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481511" comment="systemd-devel-234-24.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481512" comment="systemd-sysvinit-234-24.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481513" comment="udev-234-24.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137109" version="1" class="patch">
	<metadata>
		<title>libtag1-1.11.1-2.50 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-2396" ref_url="https://www.suse.com/security/cve/CVE-2012-2396/" source="CVE"/>
		<reference ref_id="CVE-2017-12678" ref_url="https://www.suse.com/security/cve/CVE-2017-12678/" source="CVE"/>
		<description>
These are all security issues fixed in the libtag1-1.11.1-2.50 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2396/">CVE-2012-2396</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12678/">CVE-2017-12678</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480753" comment="libtag1-1.11.1-2.50 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137110" version="1" class="patch">
	<metadata>
		<title>libtasn1-4.13-4.2.1 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1114407" ref_url="https://bugzilla.suse.com/1114407" source="BUGZILLA"/>
		<reference ref_id="1124223" ref_url="https://bugzilla.suse.com/1124223" source="BUGZILLA"/>
		<reference ref_id="1125410" ref_url="https://bugzilla.suse.com/1125410" source="BUGZILLA"/>
		<reference ref_id="1126377" ref_url="https://bugzilla.suse.com/1126377" source="BUGZILLA"/>
		<reference ref_id="1131060" ref_url="https://bugzilla.suse.com/1131060" source="BUGZILLA"/>
		<reference ref_id="1131686" ref_url="https://bugzilla.suse.com/1131686" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3880" ref_url="https://www.suse.com/security/cve/CVE-2019-3880/" source="CVE"/>
		<description>
This update for samba fixes the following issues:

Security issue fixed:

- CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share (bsc#1131060).


ldb was updated to version 1.2.4 (bsc#1125410 bsc#1131686):

- Out of bound read in ldb_wildcard_compare
- Hold at most 10 outstanding paged result cookies
- Put 'results_store' into a doubly linked list
- Refuse to build Samba against a newer minor version of ldb


Non-security issues fixed:

- Fixed update-apparmor-samba-profile script after apparmor switched to using named profiles (bsc#1126377).
- Abide to the load_printers parameter in smb.conf (bsc#1124223).
- Provide the 32bit samba winbind PAM module and its dependend 32bit libraries.
  		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-25"/>
	<updated date="2019-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1114407">SUSE bug 1114407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124223">SUSE bug 1124223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125410">SUSE bug 1125410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126377">SUSE bug 1126377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131060">SUSE bug 1131060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131686">SUSE bug 1131686</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-3880/">CVE-2019-3880</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708426" comment="libtasn1-4.13-4.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708427" comment="libtasn1-6-4.13-4.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489994" comment="libtasn1-6-32bit-4.13-4.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789708" comment="libtasn1-devel-4.13-4.2.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137111" version="1" class="patch">
	<metadata>
		<title>libthai-data-0.1.27-1.16 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-4012" ref_url="https://www.suse.com/security/cve/CVE-2009-4012/" source="CVE"/>
		<description>
These are all security issues fixed in the libthai-data-0.1.27-1.16 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-4012/">CVE-2009-4012</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480757" comment="libthai-data-0.1.27-1.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480758" comment="libthai0-0.1.27-1.16 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137112" version="1" class="patch">
	<metadata>
		<title>libtiff-devel-4.0.9-5.27.5 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-2285" ref_url="https://www.suse.com/security/cve/CVE-2009-2285/" source="CVE"/>
		<reference ref_id="CVE-2009-2347" ref_url="https://www.suse.com/security/cve/CVE-2009-2347/" source="CVE"/>
		<reference ref_id="CVE-2010-2065" ref_url="https://www.suse.com/security/cve/CVE-2010-2065/" source="CVE"/>
		<reference ref_id="CVE-2010-2067" ref_url="https://www.suse.com/security/cve/CVE-2010-2067/" source="CVE"/>
		<reference ref_id="CVE-2010-2233" ref_url="https://www.suse.com/security/cve/CVE-2010-2233/" source="CVE"/>
		<reference ref_id="CVE-2010-4665" ref_url="https://www.suse.com/security/cve/CVE-2010-4665/" source="CVE"/>
		<reference ref_id="CVE-2011-0192" ref_url="https://www.suse.com/security/cve/CVE-2011-0192/" source="CVE"/>
		<reference ref_id="CVE-2011-1167" ref_url="https://www.suse.com/security/cve/CVE-2011-1167/" source="CVE"/>
		<reference ref_id="CVE-2012-1173" ref_url="https://www.suse.com/security/cve/CVE-2012-1173/" source="CVE"/>
		<reference ref_id="CVE-2012-2113" ref_url="https://www.suse.com/security/cve/CVE-2012-2113/" source="CVE"/>
		<reference ref_id="CVE-2012-3401" ref_url="https://www.suse.com/security/cve/CVE-2012-3401/" source="CVE"/>
		<reference ref_id="CVE-2012-4564" ref_url="https://www.suse.com/security/cve/CVE-2012-4564/" source="CVE"/>
		<reference ref_id="CVE-2013-1960" ref_url="https://www.suse.com/security/cve/CVE-2013-1960/" source="CVE"/>
		<reference ref_id="CVE-2013-1961" ref_url="https://www.suse.com/security/cve/CVE-2013-1961/" source="CVE"/>
		<reference ref_id="CVE-2013-4231" ref_url="https://www.suse.com/security/cve/CVE-2013-4231/" source="CVE"/>
		<reference ref_id="CVE-2013-4232" ref_url="https://www.suse.com/security/cve/CVE-2013-4232/" source="CVE"/>
		<reference ref_id="CVE-2013-4243" ref_url="https://www.suse.com/security/cve/CVE-2013-4243/" source="CVE"/>
		<reference ref_id="CVE-2013-4244" ref_url="https://www.suse.com/security/cve/CVE-2013-4244/" source="CVE"/>
		<reference ref_id="CVE-2014-8127" ref_url="https://www.suse.com/security/cve/CVE-2014-8127/" source="CVE"/>
		<reference ref_id="CVE-2014-8128" ref_url="https://www.suse.com/security/cve/CVE-2014-8128/" source="CVE"/>
		<reference ref_id="CVE-2014-8129" ref_url="https://www.suse.com/security/cve/CVE-2014-8129/" source="CVE"/>
		<reference ref_id="CVE-2014-8130" ref_url="https://www.suse.com/security/cve/CVE-2014-8130/" source="CVE"/>
		<reference ref_id="CVE-2014-9655" ref_url="https://www.suse.com/security/cve/CVE-2014-9655/" source="CVE"/>
		<reference ref_id="CVE-2015-1547" ref_url="https://www.suse.com/security/cve/CVE-2015-1547/" source="CVE"/>
		<reference ref_id="CVE-2015-7554" ref_url="https://www.suse.com/security/cve/CVE-2015-7554/" source="CVE"/>
		<reference ref_id="CVE-2015-8665" ref_url="https://www.suse.com/security/cve/CVE-2015-8665/" source="CVE"/>
		<reference ref_id="CVE-2015-8683" ref_url="https://www.suse.com/security/cve/CVE-2015-8683/" source="CVE"/>
		<reference ref_id="CVE-2015-8781" ref_url="https://www.suse.com/security/cve/CVE-2015-8781/" source="CVE"/>
		<reference ref_id="CVE-2015-8782" ref_url="https://www.suse.com/security/cve/CVE-2015-8782/" source="CVE"/>
		<reference ref_id="CVE-2015-8783" ref_url="https://www.suse.com/security/cve/CVE-2015-8783/" source="CVE"/>
		<reference ref_id="CVE-2016-10092" ref_url="https://www.suse.com/security/cve/CVE-2016-10092/" source="CVE"/>
		<reference ref_id="CVE-2016-10093" ref_url="https://www.suse.com/security/cve/CVE-2016-10093/" source="CVE"/>
		<reference ref_id="CVE-2016-10094" ref_url="https://www.suse.com/security/cve/CVE-2016-10094/" source="CVE"/>
		<reference ref_id="CVE-2016-10095" ref_url="https://www.suse.com/security/cve/CVE-2016-10095/" source="CVE"/>
		<reference ref_id="CVE-2016-10266" ref_url="https://www.suse.com/security/cve/CVE-2016-10266/" source="CVE"/>
		<reference ref_id="CVE-2016-10267" ref_url="https://www.suse.com/security/cve/CVE-2016-10267/" source="CVE"/>
		<reference ref_id="CVE-2016-10268" ref_url="https://www.suse.com/security/cve/CVE-2016-10268/" source="CVE"/>
		<reference ref_id="CVE-2016-10269" ref_url="https://www.suse.com/security/cve/CVE-2016-10269/" source="CVE"/>
		<reference ref_id="CVE-2016-10270" ref_url="https://www.suse.com/security/cve/CVE-2016-10270/" source="CVE"/>
		<reference ref_id="CVE-2016-10271" ref_url="https://www.suse.com/security/cve/CVE-2016-10271/" source="CVE"/>
		<reference ref_id="CVE-2016-10272" ref_url="https://www.suse.com/security/cve/CVE-2016-10272/" source="CVE"/>
		<reference ref_id="CVE-2016-10371" ref_url="https://www.suse.com/security/cve/CVE-2016-10371/" source="CVE"/>
		<reference ref_id="CVE-2016-3186" ref_url="https://www.suse.com/security/cve/CVE-2016-3186/" source="CVE"/>
		<reference ref_id="CVE-2016-3622" ref_url="https://www.suse.com/security/cve/CVE-2016-3622/" source="CVE"/>
		<reference ref_id="CVE-2016-3623" ref_url="https://www.suse.com/security/cve/CVE-2016-3623/" source="CVE"/>
		<reference ref_id="CVE-2016-3658" ref_url="https://www.suse.com/security/cve/CVE-2016-3658/" source="CVE"/>
		<reference ref_id="CVE-2016-3945" ref_url="https://www.suse.com/security/cve/CVE-2016-3945/" source="CVE"/>
		<reference ref_id="CVE-2016-3990" ref_url="https://www.suse.com/security/cve/CVE-2016-3990/" source="CVE"/>
		<reference ref_id="CVE-2016-3991" ref_url="https://www.suse.com/security/cve/CVE-2016-3991/" source="CVE"/>
		<reference ref_id="CVE-2016-5314" ref_url="https://www.suse.com/security/cve/CVE-2016-5314/" source="CVE"/>
		<reference ref_id="CVE-2016-5316" ref_url="https://www.suse.com/security/cve/CVE-2016-5316/" source="CVE"/>
		<reference ref_id="CVE-2016-5317" ref_url="https://www.suse.com/security/cve/CVE-2016-5317/" source="CVE"/>
		<reference ref_id="CVE-2016-5318" ref_url="https://www.suse.com/security/cve/CVE-2016-5318/" source="CVE"/>
		<reference ref_id="CVE-2016-5320" ref_url="https://www.suse.com/security/cve/CVE-2016-5320/" source="CVE"/>
		<reference ref_id="CVE-2016-5321" ref_url="https://www.suse.com/security/cve/CVE-2016-5321/" source="CVE"/>
		<reference ref_id="CVE-2016-5323" ref_url="https://www.suse.com/security/cve/CVE-2016-5323/" source="CVE"/>
		<reference ref_id="CVE-2016-5652" ref_url="https://www.suse.com/security/cve/CVE-2016-5652/" source="CVE"/>
		<reference ref_id="CVE-2016-5875" ref_url="https://www.suse.com/security/cve/CVE-2016-5875/" source="CVE"/>
		<reference ref_id="CVE-2016-6223" ref_url="https://www.suse.com/security/cve/CVE-2016-6223/" source="CVE"/>
		<reference ref_id="CVE-2016-9273" ref_url="https://www.suse.com/security/cve/CVE-2016-9273/" source="CVE"/>
		<reference ref_id="CVE-2016-9297" ref_url="https://www.suse.com/security/cve/CVE-2016-9297/" source="CVE"/>
		<reference ref_id="CVE-2016-9448" ref_url="https://www.suse.com/security/cve/CVE-2016-9448/" source="CVE"/>
		<reference ref_id="CVE-2016-9453" ref_url="https://www.suse.com/security/cve/CVE-2016-9453/" source="CVE"/>
		<reference ref_id="CVE-2016-9538" ref_url="https://www.suse.com/security/cve/CVE-2016-9538/" source="CVE"/>
		<reference ref_id="CVE-2017-11613" ref_url="https://www.suse.com/security/cve/CVE-2017-11613/" source="CVE"/>
		<reference ref_id="CVE-2017-12944" ref_url="https://www.suse.com/security/cve/CVE-2017-12944/" source="CVE"/>
		<reference ref_id="CVE-2017-16232" ref_url="https://www.suse.com/security/cve/CVE-2017-16232/" source="CVE"/>
		<reference ref_id="CVE-2017-18013" ref_url="https://www.suse.com/security/cve/CVE-2017-18013/" source="CVE"/>
		<reference ref_id="CVE-2017-5225" ref_url="https://www.suse.com/security/cve/CVE-2017-5225/" source="CVE"/>
		<reference ref_id="CVE-2017-7592" ref_url="https://www.suse.com/security/cve/CVE-2017-7592/" source="CVE"/>
		<reference ref_id="CVE-2017-7593" ref_url="https://www.suse.com/security/cve/CVE-2017-7593/" source="CVE"/>
		<reference ref_id="CVE-2017-7594" ref_url="https://www.suse.com/security/cve/CVE-2017-7594/" source="CVE"/>
		<reference ref_id="CVE-2017-7595" ref_url="https://www.suse.com/security/cve/CVE-2017-7595/" source="CVE"/>
		<reference ref_id="CVE-2017-7596" ref_url="https://www.suse.com/security/cve/CVE-2017-7596/" source="CVE"/>
		<reference ref_id="CVE-2017-7597" ref_url="https://www.suse.com/security/cve/CVE-2017-7597/" source="CVE"/>
		<reference ref_id="CVE-2017-7598" ref_url="https://www.suse.com/security/cve/CVE-2017-7598/" source="CVE"/>
		<reference ref_id="CVE-2017-7599" ref_url="https://www.suse.com/security/cve/CVE-2017-7599/" source="CVE"/>
		<reference ref_id="CVE-2017-7600" ref_url="https://www.suse.com/security/cve/CVE-2017-7600/" source="CVE"/>
		<reference ref_id="CVE-2017-7601" ref_url="https://www.suse.com/security/cve/CVE-2017-7601/" source="CVE"/>
		<reference ref_id="CVE-2017-7602" ref_url="https://www.suse.com/security/cve/CVE-2017-7602/" source="CVE"/>
		<reference ref_id="CVE-2017-9403" ref_url="https://www.suse.com/security/cve/CVE-2017-9403/" source="CVE"/>
		<reference ref_id="CVE-2017-9404" ref_url="https://www.suse.com/security/cve/CVE-2017-9404/" source="CVE"/>
		<reference ref_id="CVE-2017-9935" ref_url="https://www.suse.com/security/cve/CVE-2017-9935/" source="CVE"/>
		<reference ref_id="CVE-2017-9936" ref_url="https://www.suse.com/security/cve/CVE-2017-9936/" source="CVE"/>
		<reference ref_id="CVE-2018-10779" ref_url="https://www.suse.com/security/cve/CVE-2018-10779/" source="CVE"/>
		<reference ref_id="CVE-2018-10963" ref_url="https://www.suse.com/security/cve/CVE-2018-10963/" source="CVE"/>
		<reference ref_id="CVE-2018-12900" ref_url="https://www.suse.com/security/cve/CVE-2018-12900/" source="CVE"/>
		<reference ref_id="CVE-2018-16335" ref_url="https://www.suse.com/security/cve/CVE-2018-16335/" source="CVE"/>
		<reference ref_id="CVE-2018-17000" ref_url="https://www.suse.com/security/cve/CVE-2018-17000/" source="CVE"/>
		<reference ref_id="CVE-2018-17100" ref_url="https://www.suse.com/security/cve/CVE-2018-17100/" source="CVE"/>
		<reference ref_id="CVE-2018-17101" ref_url="https://www.suse.com/security/cve/CVE-2018-17101/" source="CVE"/>
		<reference ref_id="CVE-2018-17795" ref_url="https://www.suse.com/security/cve/CVE-2018-17795/" source="CVE"/>
		<reference ref_id="CVE-2018-18557" ref_url="https://www.suse.com/security/cve/CVE-2018-18557/" source="CVE"/>
		<reference ref_id="CVE-2018-18661" ref_url="https://www.suse.com/security/cve/CVE-2018-18661/" source="CVE"/>
		<reference ref_id="CVE-2018-19210" ref_url="https://www.suse.com/security/cve/CVE-2018-19210/" source="CVE"/>
		<reference ref_id="CVE-2018-5784" ref_url="https://www.suse.com/security/cve/CVE-2018-5784/" source="CVE"/>
		<reference ref_id="CVE-2018-7456" ref_url="https://www.suse.com/security/cve/CVE-2018-7456/" source="CVE"/>
		<reference ref_id="CVE-2018-8905" ref_url="https://www.suse.com/security/cve/CVE-2018-8905/" source="CVE"/>
		<reference ref_id="CVE-2019-6128" ref_url="https://www.suse.com/security/cve/CVE-2019-6128/" source="CVE"/>
		<reference ref_id="CVE-2019-7663" ref_url="https://www.suse.com/security/cve/CVE-2019-7663/" source="CVE"/>
		<description>
These are all security issues fixed in the libtiff-devel-4.0.9-5.27.5 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2285/">CVE-2009-2285</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-2347/">CVE-2009-2347</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2065/">CVE-2010-2065</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2067/">CVE-2010-2067</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2233/">CVE-2010-2233</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4665/">CVE-2010-4665</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0192/">CVE-2011-0192</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1167/">CVE-2011-1167</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1173/">CVE-2012-1173</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2113/">CVE-2012-2113</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3401/">CVE-2012-3401</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4564/">CVE-2012-4564</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1960/">CVE-2013-1960</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1961/">CVE-2013-1961</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4231/">CVE-2013-4231</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4232/">CVE-2013-4232</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4243/">CVE-2013-4243</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4244/">CVE-2013-4244</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8127/">CVE-2014-8127</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8128/">CVE-2014-8128</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-8129/">CVE-2014-8129</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-8130/">CVE-2014-8130</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9655/">CVE-2014-9655</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1547/">CVE-2015-1547</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7554/">CVE-2015-7554</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-8665/">CVE-2015-8665</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-8683/">CVE-2015-8683</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8781/">CVE-2015-8781</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8782/">CVE-2015-8782</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8783/">CVE-2015-8783</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10092/">CVE-2016-10092</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10093/">CVE-2016-10093</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10094/">CVE-2016-10094</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10095/">CVE-2016-10095</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10266/">CVE-2016-10266</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10267/">CVE-2016-10267</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10268/">CVE-2016-10268</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10269/">CVE-2016-10269</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10270/">CVE-2016-10270</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10271/">CVE-2016-10271</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10272/">CVE-2016-10272</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10371/">CVE-2016-10371</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3186/">CVE-2016-3186</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3622/">CVE-2016-3622</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3623/">CVE-2016-3623</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3658/">CVE-2016-3658</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3945/">CVE-2016-3945</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3990/">CVE-2016-3990</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3991/">CVE-2016-3991</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5314/">CVE-2016-5314</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5316/">CVE-2016-5316</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5317/">CVE-2016-5317</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5318/">CVE-2016-5318</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-5320/">CVE-2016-5320</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5321/">CVE-2016-5321</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5323/">CVE-2016-5323</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5652/">CVE-2016-5652</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-5875/">CVE-2016-5875</cve>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6223/">CVE-2016-6223</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9273/">CVE-2016-9273</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9297/">CVE-2016-9297</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9448/">CVE-2016-9448</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9453/">CVE-2016-9453</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9538/">CVE-2016-9538</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11613/">CVE-2017-11613</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12944/">CVE-2017-12944</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16232/">CVE-2017-16232</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18013/">CVE-2017-18013</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5225/">CVE-2017-5225</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7592/">CVE-2017-7592</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7593/">CVE-2017-7593</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7594/">CVE-2017-7594</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7595/">CVE-2017-7595</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7596/">CVE-2017-7596</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7597/">CVE-2017-7597</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7598/">CVE-2017-7598</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7599/">CVE-2017-7599</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7600/">CVE-2017-7600</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7601/">CVE-2017-7601</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7602/">CVE-2017-7602</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9403/">CVE-2017-9403</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9404/">CVE-2017-9404</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-9935/">CVE-2017-9935</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9936/">CVE-2017-9936</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10779/">CVE-2018-10779</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10963/">CVE-2018-10963</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12900/">CVE-2018-12900</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16335/">CVE-2018-16335</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17000/">CVE-2018-17000</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17100/">CVE-2018-17100</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-17101/">CVE-2018-17101</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17795/">CVE-2018-17795</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18557/">CVE-2018-18557</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18661/">CVE-2018-18661</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19210/">CVE-2018-19210</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5784/">CVE-2018-5784</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7456/">CVE-2018-7456</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-8905/">CVE-2018-8905</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-6128/">CVE-2019-6128</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7663/">CVE-2019-7663</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481518" comment="libtiff-devel-4.0.9-5.27.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481519" comment="libtiff5-4.0.9-5.27.5 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137113" version="1" class="patch">
	<metadata>
		<title>libudisks2-0-2.6.5-3.7.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-0004" ref_url="https://www.suse.com/security/cve/CVE-2014-0004/" source="CVE"/>
		<reference ref_id="CVE-2018-17336" ref_url="https://www.suse.com/security/cve/CVE-2018-17336/" source="CVE"/>
		<description>
These are all security issues fixed in the libudisks2-0-2.6.5-3.7.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0004/">CVE-2014-0004</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17336/">CVE-2018-17336</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481520" comment="libudisks2-0-2.6.5-3.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481521" comment="typelib-1_0-UDisks-2_0-2.6.5-3.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481522" comment="udisks2-2.6.5-3.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481523" comment="udisks2-devel-2.6.5-3.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481524" comment="udisks2-lang-2.6.5-3.7.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137114" version="1" class="patch">
	<metadata>
		<title>libunbound2-1.6.8-8.3 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-8602" ref_url="https://www.suse.com/security/cve/CVE-2014-8602/" source="CVE"/>
		<reference ref_id="CVE-2017-15105" ref_url="https://www.suse.com/security/cve/CVE-2017-15105/" source="CVE"/>
		<description>
These are all security issues fixed in the libunbound2-1.6.8-8.3 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8602/">CVE-2014-8602</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-15105/">CVE-2017-15105</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481525" comment="libunbound2-1.6.8-8.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481526" comment="unbound-anchor-1.6.8-8.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481527" comment="unbound-devel-1.6.8-8.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137115" version="1" class="patch">
	<metadata>
		<title>libunwind-1.2.1-2.13 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-3239" ref_url="https://www.suse.com/security/cve/CVE-2015-3239/" source="CVE"/>
		<description>
These are all security issues fixed in the libunwind-1.2.1-2.13 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-3239/">CVE-2015-3239</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480769" comment="libunwind-1.2.1-2.13 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480770" comment="libunwind-devel-1.2.1-2.13 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137116" version="1" class="patch">
	<metadata>
		<title>libvirt-libs-5.1.0-6.9 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-7823" ref_url="https://www.suse.com/security/cve/CVE-2014-7823/" source="CVE"/>
		<reference ref_id="CVE-2014-8131" ref_url="https://www.suse.com/security/cve/CVE-2014-8131/" source="CVE"/>
		<reference ref_id="CVE-2015-0236" ref_url="https://www.suse.com/security/cve/CVE-2015-0236/" source="CVE"/>
		<reference ref_id="CVE-2015-5247" ref_url="https://www.suse.com/security/cve/CVE-2015-5247/" source="CVE"/>
		<reference ref_id="CVE-2015-5313" ref_url="https://www.suse.com/security/cve/CVE-2015-5313/" source="CVE"/>
		<reference ref_id="CVE-2017-1000256" ref_url="https://www.suse.com/security/cve/CVE-2017-1000256/" source="CVE"/>
		<reference ref_id="CVE-2017-2635" ref_url="https://www.suse.com/security/cve/CVE-2017-2635/" source="CVE"/>
		<reference ref_id="CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715/" source="CVE"/>
		<reference ref_id="CVE-2018-1064" ref_url="https://www.suse.com/security/cve/CVE-2018-1064/" source="CVE"/>
		<reference ref_id="CVE-2018-3639" ref_url="https://www.suse.com/security/cve/CVE-2018-3639/" source="CVE"/>
		<reference ref_id="CVE-2018-5748" ref_url="https://www.suse.com/security/cve/CVE-2018-5748/" source="CVE"/>
		<reference ref_id="CVE-2019-3886" ref_url="https://www.suse.com/security/cve/CVE-2019-3886/" source="CVE"/>
		<description>
These are all security issues fixed in the libvirt-libs-5.1.0-6.9 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7823/">CVE-2014-7823</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8131/">CVE-2014-8131</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0236/">CVE-2015-0236</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-5247/">CVE-2015-5247</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-5313/">CVE-2015-5313</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000256/">CVE-2017-1000256</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2635/">CVE-2017-2635</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1064/">CVE-2018-1064</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3639/">CVE-2018-3639</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5748/">CVE-2018-5748</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-3886/">CVE-2019-3886</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481528" comment="libvirt-libs-5.1.0-6.9 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137117" version="1" class="patch">
	<metadata>
		<title>libvmtools-devel-10.3.10-1.10 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-5191" ref_url="https://www.suse.com/security/cve/CVE-2015-5191/" source="CVE"/>
		<description>
These are all security issues fixed in the libvmtools-devel-10.3.10-1.10 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5191/">CVE-2015-5191</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481529" comment="libvmtools-devel-10.3.10-1.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481530" comment="libvmtools0-10.3.10-1.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481531" comment="open-vm-tools-10.3.10-1.10 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137118" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1091070" ref_url="https://bugzilla.suse.com/1091070" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10392" ref_url="https://www.suse.com/security/cve/CVE-2018-10392/" source="CVE"/>
		<description>
This update for libvorbis fixes the following issues:

The following security issue was fixed:

  - Fixed the validation of channels in mapping0_forward(), which previously
    allowed remote attackers to cause a denial of service via specially crafted
    files (CVE-2018-10392, bsc#1091070)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-05"/>
	<updated date="2018-07-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1091070">SUSE bug 1091070</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10392/">CVE-2018-10392</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782386" comment="libvorbis-devel-1.3.6-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782387" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782388" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782389" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137119" version="1" class="patch">
	<metadata>
		<title>libvorbis-devel-1.3.6-4.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2008-1420" ref_url="https://www.suse.com/security/cve/CVE-2008-1420/" source="CVE"/>
		<reference ref_id="CVE-2009-3379" ref_url="https://www.suse.com/security/cve/CVE-2009-3379/" source="CVE"/>
		<reference ref_id="CVE-2012-0444" ref_url="https://www.suse.com/security/cve/CVE-2012-0444/" source="CVE"/>
		<reference ref_id="CVE-2017-14160" ref_url="https://www.suse.com/security/cve/CVE-2017-14160/" source="CVE"/>
		<reference ref_id="CVE-2017-14632" ref_url="https://www.suse.com/security/cve/CVE-2017-14632/" source="CVE"/>
		<reference ref_id="CVE-2017-14633" ref_url="https://www.suse.com/security/cve/CVE-2017-14633/" source="CVE"/>
		<reference ref_id="CVE-2018-10392" ref_url="https://www.suse.com/security/cve/CVE-2018-10392/" source="CVE"/>
		<reference ref_id="CVE-2018-10393" ref_url="https://www.suse.com/security/cve/CVE-2018-10393/" source="CVE"/>
		<reference ref_id="CVE-2018-5146" ref_url="https://www.suse.com/security/cve/CVE-2018-5146/" source="CVE"/>
		<description>
These are all security issues fixed in the libvorbis-devel-1.3.6-4.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-1420/">CVE-2008-1420</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-3379/">CVE-2009-3379</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0444/">CVE-2012-0444</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14160/">CVE-2017-14160</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14632/">CVE-2017-14632</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-14633/">CVE-2017-14633</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10392/">CVE-2018-10392</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10393/">CVE-2018-10393</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5146/">CVE-2018-5146</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481532" comment="libvorbis-devel-1.3.6-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481533" comment="libvorbis0-1.3.6-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481534" comment="libvorbisenc2-1.3.6-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481535" comment="libvorbisfile3-1.3.6-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137120" version="1" class="patch">
	<metadata>
		<title>libvpx4-1.6.1-4.16 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-1621" ref_url="https://www.suse.com/security/cve/CVE-2016-1621/" source="CVE"/>
		<reference ref_id="CVE-2016-2464" ref_url="https://www.suse.com/security/cve/CVE-2016-2464/" source="CVE"/>
		<reference ref_id="CVE-2017-0641" ref_url="https://www.suse.com/security/cve/CVE-2017-0641/" source="CVE"/>
		<reference ref_id="CVE-2017-13194" ref_url="https://www.suse.com/security/cve/CVE-2017-13194/" source="CVE"/>
		<description>
These are all security issues fixed in the libvpx4-1.6.1-4.16 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1621/">CVE-2016-1621</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2464/">CVE-2016-2464</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-0641/">CVE-2017-0641</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13194/">CVE-2017-13194</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480779" comment="libvpx4-1.6.1-4.16 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137121" version="1" class="patch">
	<metadata>
		<title>libwavpack1-5.1.0-4.3.5 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-19840" ref_url="https://www.suse.com/security/cve/CVE-2018-19840/" source="CVE"/>
		<reference ref_id="CVE-2018-19841" ref_url="https://www.suse.com/security/cve/CVE-2018-19841/" source="CVE"/>
		<reference ref_id="CVE-2018-6767" ref_url="https://www.suse.com/security/cve/CVE-2018-6767/" source="CVE"/>
		<reference ref_id="CVE-2018-7253" ref_url="https://www.suse.com/security/cve/CVE-2018-7253/" source="CVE"/>
		<reference ref_id="CVE-2018-7254" ref_url="https://www.suse.com/security/cve/CVE-2018-7254/" source="CVE"/>
		<description>
These are all security issues fixed in the libwavpack1-5.1.0-4.3.5 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19840/">CVE-2018-19840</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19841/">CVE-2018-19841</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6767/">CVE-2018-6767</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7253/">CVE-2018-7253</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7254/">CVE-2018-7254</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481536" comment="libwavpack1-5.1.0-4.3.5 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137122" version="1" class="patch">
	<metadata>
		<title>libwireshark9-2.4.14-3.25.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-8710" ref_url="https://www.suse.com/security/cve/CVE-2014-8710/" source="CVE"/>
		<reference ref_id="CVE-2014-8711" ref_url="https://www.suse.com/security/cve/CVE-2014-8711/" source="CVE"/>
		<reference ref_id="CVE-2014-8712" ref_url="https://www.suse.com/security/cve/CVE-2014-8712/" source="CVE"/>
		<reference ref_id="CVE-2014-8713" ref_url="https://www.suse.com/security/cve/CVE-2014-8713/" source="CVE"/>
		<reference ref_id="CVE-2014-8714" ref_url="https://www.suse.com/security/cve/CVE-2014-8714/" source="CVE"/>
		<reference ref_id="CVE-2015-0559" ref_url="https://www.suse.com/security/cve/CVE-2015-0559/" source="CVE"/>
		<reference ref_id="CVE-2015-0560" ref_url="https://www.suse.com/security/cve/CVE-2015-0560/" source="CVE"/>
		<reference ref_id="CVE-2015-0561" ref_url="https://www.suse.com/security/cve/CVE-2015-0561/" source="CVE"/>
		<reference ref_id="CVE-2015-0562" ref_url="https://www.suse.com/security/cve/CVE-2015-0562/" source="CVE"/>
		<reference ref_id="CVE-2015-0563" ref_url="https://www.suse.com/security/cve/CVE-2015-0563/" source="CVE"/>
		<reference ref_id="CVE-2015-0564" ref_url="https://www.suse.com/security/cve/CVE-2015-0564/" source="CVE"/>
		<reference ref_id="CVE-2015-2187" ref_url="https://www.suse.com/security/cve/CVE-2015-2187/" source="CVE"/>
		<reference ref_id="CVE-2015-2188" ref_url="https://www.suse.com/security/cve/CVE-2015-2188/" source="CVE"/>
		<reference ref_id="CVE-2015-2189" ref_url="https://www.suse.com/security/cve/CVE-2015-2189/" source="CVE"/>
		<reference ref_id="CVE-2015-2190" ref_url="https://www.suse.com/security/cve/CVE-2015-2190/" source="CVE"/>
		<reference ref_id="CVE-2015-2191" ref_url="https://www.suse.com/security/cve/CVE-2015-2191/" source="CVE"/>
		<reference ref_id="CVE-2015-2192" ref_url="https://www.suse.com/security/cve/CVE-2015-2192/" source="CVE"/>
		<reference ref_id="CVE-2015-3808" ref_url="https://www.suse.com/security/cve/CVE-2015-3808/" source="CVE"/>
		<reference ref_id="CVE-2015-3809" ref_url="https://www.suse.com/security/cve/CVE-2015-3809/" source="CVE"/>
		<reference ref_id="CVE-2015-3810" ref_url="https://www.suse.com/security/cve/CVE-2015-3810/" source="CVE"/>
		<reference ref_id="CVE-2015-3811" ref_url="https://www.suse.com/security/cve/CVE-2015-3811/" source="CVE"/>
		<reference ref_id="CVE-2015-3812" ref_url="https://www.suse.com/security/cve/CVE-2015-3812/" source="CVE"/>
		<reference ref_id="CVE-2015-3813" ref_url="https://www.suse.com/security/cve/CVE-2015-3813/" source="CVE"/>
		<reference ref_id="CVE-2015-3814" ref_url="https://www.suse.com/security/cve/CVE-2015-3814/" source="CVE"/>
		<reference ref_id="CVE-2015-3815" ref_url="https://www.suse.com/security/cve/CVE-2015-3815/" source="CVE"/>
		<reference ref_id="CVE-2015-4651" ref_url="https://www.suse.com/security/cve/CVE-2015-4651/" source="CVE"/>
		<reference ref_id="CVE-2015-4652" ref_url="https://www.suse.com/security/cve/CVE-2015-4652/" source="CVE"/>
		<reference ref_id="CVE-2015-6241" ref_url="https://www.suse.com/security/cve/CVE-2015-6241/" source="CVE"/>
		<reference ref_id="CVE-2015-6242" ref_url="https://www.suse.com/security/cve/CVE-2015-6242/" source="CVE"/>
		<reference ref_id="CVE-2015-6243" ref_url="https://www.suse.com/security/cve/CVE-2015-6243/" source="CVE"/>
		<reference ref_id="CVE-2015-6244" ref_url="https://www.suse.com/security/cve/CVE-2015-6244/" source="CVE"/>
		<reference ref_id="CVE-2015-6245" ref_url="https://www.suse.com/security/cve/CVE-2015-6245/" source="CVE"/>
		<reference ref_id="CVE-2015-6246" ref_url="https://www.suse.com/security/cve/CVE-2015-6246/" source="CVE"/>
		<reference ref_id="CVE-2015-6247" ref_url="https://www.suse.com/security/cve/CVE-2015-6247/" source="CVE"/>
		<reference ref_id="CVE-2015-6248" ref_url="https://www.suse.com/security/cve/CVE-2015-6248/" source="CVE"/>
		<reference ref_id="CVE-2015-6249" ref_url="https://www.suse.com/security/cve/CVE-2015-6249/" source="CVE"/>
		<reference ref_id="CVE-2015-7830" ref_url="https://www.suse.com/security/cve/CVE-2015-7830/" source="CVE"/>
		<reference ref_id="CVE-2015-8711" ref_url="https://www.suse.com/security/cve/CVE-2015-8711/" source="CVE"/>
		<reference ref_id="CVE-2015-8718" ref_url="https://www.suse.com/security/cve/CVE-2015-8718/" source="CVE"/>
		<reference ref_id="CVE-2015-8720" ref_url="https://www.suse.com/security/cve/CVE-2015-8720/" source="CVE"/>
		<reference ref_id="CVE-2015-8721" ref_url="https://www.suse.com/security/cve/CVE-2015-8721/" source="CVE"/>
		<reference ref_id="CVE-2015-8722" ref_url="https://www.suse.com/security/cve/CVE-2015-8722/" source="CVE"/>
		<reference ref_id="CVE-2015-8723" ref_url="https://www.suse.com/security/cve/CVE-2015-8723/" source="CVE"/>
		<reference ref_id="CVE-2015-8724" ref_url="https://www.suse.com/security/cve/CVE-2015-8724/" source="CVE"/>
		<reference ref_id="CVE-2015-8725" ref_url="https://www.suse.com/security/cve/CVE-2015-8725/" source="CVE"/>
		<reference ref_id="CVE-2015-8726" ref_url="https://www.suse.com/security/cve/CVE-2015-8726/" source="CVE"/>
		<reference ref_id="CVE-2015-8727" ref_url="https://www.suse.com/security/cve/CVE-2015-8727/" source="CVE"/>
		<reference ref_id="CVE-2015-8728" ref_url="https://www.suse.com/security/cve/CVE-2015-8728/" source="CVE"/>
		<reference ref_id="CVE-2015-8729" ref_url="https://www.suse.com/security/cve/CVE-2015-8729/" source="CVE"/>
		<reference ref_id="CVE-2015-8730" ref_url="https://www.suse.com/security/cve/CVE-2015-8730/" source="CVE"/>
		<reference ref_id="CVE-2015-8731" ref_url="https://www.suse.com/security/cve/CVE-2015-8731/" source="CVE"/>
		<reference ref_id="CVE-2015-8732" ref_url="https://www.suse.com/security/cve/CVE-2015-8732/" source="CVE"/>
		<reference ref_id="CVE-2015-8733" ref_url="https://www.suse.com/security/cve/CVE-2015-8733/" source="CVE"/>
		<reference ref_id="CVE-2015-8734" ref_url="https://www.suse.com/security/cve/CVE-2015-8734/" source="CVE"/>
		<reference ref_id="CVE-2015-8735" ref_url="https://www.suse.com/security/cve/CVE-2015-8735/" source="CVE"/>
		<reference ref_id="CVE-2015-8736" ref_url="https://www.suse.com/security/cve/CVE-2015-8736/" source="CVE"/>
		<reference ref_id="CVE-2015-8737" ref_url="https://www.suse.com/security/cve/CVE-2015-8737/" source="CVE"/>
		<reference ref_id="CVE-2015-8738" ref_url="https://www.suse.com/security/cve/CVE-2015-8738/" source="CVE"/>
		<reference ref_id="CVE-2015-8739" ref_url="https://www.suse.com/security/cve/CVE-2015-8739/" source="CVE"/>
		<reference ref_id="CVE-2015-8740" ref_url="https://www.suse.com/security/cve/CVE-2015-8740/" source="CVE"/>
		<reference ref_id="CVE-2015-8741" ref_url="https://www.suse.com/security/cve/CVE-2015-8741/" source="CVE"/>
		<reference ref_id="CVE-2015-8742" ref_url="https://www.suse.com/security/cve/CVE-2015-8742/" source="CVE"/>
		<reference ref_id="CVE-2016-2522" ref_url="https://www.suse.com/security/cve/CVE-2016-2522/" source="CVE"/>
		<reference ref_id="CVE-2016-2523" ref_url="https://www.suse.com/security/cve/CVE-2016-2523/" source="CVE"/>
		<reference ref_id="CVE-2016-2524" ref_url="https://www.suse.com/security/cve/CVE-2016-2524/" source="CVE"/>
		<reference ref_id="CVE-2016-2525" ref_url="https://www.suse.com/security/cve/CVE-2016-2525/" source="CVE"/>
		<reference ref_id="CVE-2016-2526" ref_url="https://www.suse.com/security/cve/CVE-2016-2526/" source="CVE"/>
		<reference ref_id="CVE-2016-2527" ref_url="https://www.suse.com/security/cve/CVE-2016-2527/" source="CVE"/>
		<reference ref_id="CVE-2016-2528" ref_url="https://www.suse.com/security/cve/CVE-2016-2528/" source="CVE"/>
		<reference ref_id="CVE-2016-2529" ref_url="https://www.suse.com/security/cve/CVE-2016-2529/" source="CVE"/>
		<reference ref_id="CVE-2016-2530" ref_url="https://www.suse.com/security/cve/CVE-2016-2530/" source="CVE"/>
		<reference ref_id="CVE-2016-2531" ref_url="https://www.suse.com/security/cve/CVE-2016-2531/" source="CVE"/>
		<reference ref_id="CVE-2016-2532" ref_url="https://www.suse.com/security/cve/CVE-2016-2532/" source="CVE"/>
		<reference ref_id="CVE-2016-5350" ref_url="https://www.suse.com/security/cve/CVE-2016-5350/" source="CVE"/>
		<reference ref_id="CVE-2016-5351" ref_url="https://www.suse.com/security/cve/CVE-2016-5351/" source="CVE"/>
		<reference ref_id="CVE-2016-5352" ref_url="https://www.suse.com/security/cve/CVE-2016-5352/" source="CVE"/>
		<reference ref_id="CVE-2016-5353" ref_url="https://www.suse.com/security/cve/CVE-2016-5353/" source="CVE"/>
		<reference ref_id="CVE-2016-5354" ref_url="https://www.suse.com/security/cve/CVE-2016-5354/" source="CVE"/>
		<reference ref_id="CVE-2016-5355" ref_url="https://www.suse.com/security/cve/CVE-2016-5355/" source="CVE"/>
		<reference ref_id="CVE-2016-5356" ref_url="https://www.suse.com/security/cve/CVE-2016-5356/" source="CVE"/>
		<reference ref_id="CVE-2016-5357" ref_url="https://www.suse.com/security/cve/CVE-2016-5357/" source="CVE"/>
		<reference ref_id="CVE-2016-5358" ref_url="https://www.suse.com/security/cve/CVE-2016-5358/" source="CVE"/>
		<reference ref_id="CVE-2016-6505" ref_url="https://www.suse.com/security/cve/CVE-2016-6505/" source="CVE"/>
		<reference ref_id="CVE-2016-6508" ref_url="https://www.suse.com/security/cve/CVE-2016-6508/" source="CVE"/>
		<reference ref_id="CVE-2016-6509" ref_url="https://www.suse.com/security/cve/CVE-2016-6509/" source="CVE"/>
		<reference ref_id="CVE-2016-6510" ref_url="https://www.suse.com/security/cve/CVE-2016-6510/" source="CVE"/>
		<reference ref_id="CVE-2016-6511" ref_url="https://www.suse.com/security/cve/CVE-2016-6511/" source="CVE"/>
		<reference ref_id="CVE-2016-6512" ref_url="https://www.suse.com/security/cve/CVE-2016-6512/" source="CVE"/>
		<reference ref_id="CVE-2016-6513" ref_url="https://www.suse.com/security/cve/CVE-2016-6513/" source="CVE"/>
		<reference ref_id="CVE-2016-7175" ref_url="https://www.suse.com/security/cve/CVE-2016-7175/" source="CVE"/>
		<reference ref_id="CVE-2016-7176" ref_url="https://www.suse.com/security/cve/CVE-2016-7176/" source="CVE"/>
		<reference ref_id="CVE-2016-7177" ref_url="https://www.suse.com/security/cve/CVE-2016-7177/" source="CVE"/>
		<reference ref_id="CVE-2016-7178" ref_url="https://www.suse.com/security/cve/CVE-2016-7178/" source="CVE"/>
		<reference ref_id="CVE-2016-7179" ref_url="https://www.suse.com/security/cve/CVE-2016-7179/" source="CVE"/>
		<reference ref_id="CVE-2016-7180" ref_url="https://www.suse.com/security/cve/CVE-2016-7180/" source="CVE"/>
		<reference ref_id="CVE-2016-9372" ref_url="https://www.suse.com/security/cve/CVE-2016-9372/" source="CVE"/>
		<reference ref_id="CVE-2016-9373" ref_url="https://www.suse.com/security/cve/CVE-2016-9373/" source="CVE"/>
		<reference ref_id="CVE-2016-9374" ref_url="https://www.suse.com/security/cve/CVE-2016-9374/" source="CVE"/>
		<reference ref_id="CVE-2016-9375" ref_url="https://www.suse.com/security/cve/CVE-2016-9375/" source="CVE"/>
		<reference ref_id="CVE-2016-9376" ref_url="https://www.suse.com/security/cve/CVE-2016-9376/" source="CVE"/>
		<reference ref_id="CVE-2017-11406" ref_url="https://www.suse.com/security/cve/CVE-2017-11406/" source="CVE"/>
		<reference ref_id="CVE-2017-11407" ref_url="https://www.suse.com/security/cve/CVE-2017-11407/" source="CVE"/>
		<reference ref_id="CVE-2017-11408" ref_url="https://www.suse.com/security/cve/CVE-2017-11408/" source="CVE"/>
		<reference ref_id="CVE-2017-11410" ref_url="https://www.suse.com/security/cve/CVE-2017-11410/" source="CVE"/>
		<reference ref_id="CVE-2017-11411" ref_url="https://www.suse.com/security/cve/CVE-2017-11411/" source="CVE"/>
		<reference ref_id="CVE-2017-13764" ref_url="https://www.suse.com/security/cve/CVE-2017-13764/" source="CVE"/>
		<reference ref_id="CVE-2017-13765" ref_url="https://www.suse.com/security/cve/CVE-2017-13765/" source="CVE"/>
		<reference ref_id="CVE-2017-13766" ref_url="https://www.suse.com/security/cve/CVE-2017-13766/" source="CVE"/>
		<reference ref_id="CVE-2017-13767" ref_url="https://www.suse.com/security/cve/CVE-2017-13767/" source="CVE"/>
		<reference ref_id="CVE-2017-15189" ref_url="https://www.suse.com/security/cve/CVE-2017-15189/" source="CVE"/>
		<reference ref_id="CVE-2017-15190" ref_url="https://www.suse.com/security/cve/CVE-2017-15190/" source="CVE"/>
		<reference ref_id="CVE-2017-15191" ref_url="https://www.suse.com/security/cve/CVE-2017-15191/" source="CVE"/>
		<reference ref_id="CVE-2017-15192" ref_url="https://www.suse.com/security/cve/CVE-2017-15192/" source="CVE"/>
		<reference ref_id="CVE-2017-15193" ref_url="https://www.suse.com/security/cve/CVE-2017-15193/" source="CVE"/>
		<reference ref_id="CVE-2017-17083" ref_url="https://www.suse.com/security/cve/CVE-2017-17083/" source="CVE"/>
		<reference ref_id="CVE-2017-17084" ref_url="https://www.suse.com/security/cve/CVE-2017-17084/" source="CVE"/>
		<reference ref_id="CVE-2017-17085" ref_url="https://www.suse.com/security/cve/CVE-2017-17085/" source="CVE"/>
		<reference ref_id="CVE-2017-5596" ref_url="https://www.suse.com/security/cve/CVE-2017-5596/" source="CVE"/>
		<reference ref_id="CVE-2017-5597" ref_url="https://www.suse.com/security/cve/CVE-2017-5597/" source="CVE"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2017-6467" ref_url="https://www.suse.com/security/cve/CVE-2017-6467/" source="CVE"/>
		<reference ref_id="CVE-2017-6468" ref_url="https://www.suse.com/security/cve/CVE-2017-6468/" source="CVE"/>
		<reference ref_id="CVE-2017-6469" ref_url="https://www.suse.com/security/cve/CVE-2017-6469/" source="CVE"/>
		<reference ref_id="CVE-2017-6470" ref_url="https://www.suse.com/security/cve/CVE-2017-6470/" source="CVE"/>
		<reference ref_id="CVE-2017-6471" ref_url="https://www.suse.com/security/cve/CVE-2017-6471/" source="CVE"/>
		<reference ref_id="CVE-2017-6472" ref_url="https://www.suse.com/security/cve/CVE-2017-6472/" source="CVE"/>
		<reference ref_id="CVE-2017-6473" ref_url="https://www.suse.com/security/cve/CVE-2017-6473/" source="CVE"/>
		<reference ref_id="CVE-2017-6474" ref_url="https://www.suse.com/security/cve/CVE-2017-6474/" source="CVE"/>
		<reference ref_id="CVE-2017-7700" ref_url="https://www.suse.com/security/cve/CVE-2017-7700/" source="CVE"/>
		<reference ref_id="CVE-2017-7701" ref_url="https://www.suse.com/security/cve/CVE-2017-7701/" source="CVE"/>
		<reference ref_id="CVE-2017-7702" ref_url="https://www.suse.com/security/cve/CVE-2017-7702/" source="CVE"/>
		<reference ref_id="CVE-2017-7703" ref_url="https://www.suse.com/security/cve/CVE-2017-7703/" source="CVE"/>
		<reference ref_id="CVE-2017-7704" ref_url="https://www.suse.com/security/cve/CVE-2017-7704/" source="CVE"/>
		<reference ref_id="CVE-2017-7705" ref_url="https://www.suse.com/security/cve/CVE-2017-7705/" source="CVE"/>
		<reference ref_id="CVE-2017-7745" ref_url="https://www.suse.com/security/cve/CVE-2017-7745/" source="CVE"/>
		<reference ref_id="CVE-2017-7746" ref_url="https://www.suse.com/security/cve/CVE-2017-7746/" source="CVE"/>
		<reference ref_id="CVE-2017-7747" ref_url="https://www.suse.com/security/cve/CVE-2017-7747/" source="CVE"/>
		<reference ref_id="CVE-2017-7748" ref_url="https://www.suse.com/security/cve/CVE-2017-7748/" source="CVE"/>
		<reference ref_id="CVE-2017-9343" ref_url="https://www.suse.com/security/cve/CVE-2017-9343/" source="CVE"/>
		<reference ref_id="CVE-2017-9344" ref_url="https://www.suse.com/security/cve/CVE-2017-9344/" source="CVE"/>
		<reference ref_id="CVE-2017-9345" ref_url="https://www.suse.com/security/cve/CVE-2017-9345/" source="CVE"/>
		<reference ref_id="CVE-2017-9346" ref_url="https://www.suse.com/security/cve/CVE-2017-9346/" source="CVE"/>
		<reference ref_id="CVE-2017-9347" ref_url="https://www.suse.com/security/cve/CVE-2017-9347/" source="CVE"/>
		<reference ref_id="CVE-2017-9348" ref_url="https://www.suse.com/security/cve/CVE-2017-9348/" source="CVE"/>
		<reference ref_id="CVE-2017-9349" ref_url="https://www.suse.com/security/cve/CVE-2017-9349/" source="CVE"/>
		<reference ref_id="CVE-2017-9350" ref_url="https://www.suse.com/security/cve/CVE-2017-9350/" source="CVE"/>
		<reference ref_id="CVE-2017-9351" ref_url="https://www.suse.com/security/cve/CVE-2017-9351/" source="CVE"/>
		<reference ref_id="CVE-2017-9352" ref_url="https://www.suse.com/security/cve/CVE-2017-9352/" source="CVE"/>
		<reference ref_id="CVE-2017-9353" ref_url="https://www.suse.com/security/cve/CVE-2017-9353/" source="CVE"/>
		<reference ref_id="CVE-2017-9354" ref_url="https://www.suse.com/security/cve/CVE-2017-9354/" source="CVE"/>
		<reference ref_id="CVE-2018-11356" ref_url="https://www.suse.com/security/cve/CVE-2018-11356/" source="CVE"/>
		<reference ref_id="CVE-2018-11357" ref_url="https://www.suse.com/security/cve/CVE-2018-11357/" source="CVE"/>
		<reference ref_id="CVE-2018-11358" ref_url="https://www.suse.com/security/cve/CVE-2018-11358/" source="CVE"/>
		<reference ref_id="CVE-2018-11359" ref_url="https://www.suse.com/security/cve/CVE-2018-11359/" source="CVE"/>
		<reference ref_id="CVE-2018-11360" ref_url="https://www.suse.com/security/cve/CVE-2018-11360/" source="CVE"/>
		<reference ref_id="CVE-2018-11362" ref_url="https://www.suse.com/security/cve/CVE-2018-11362/" source="CVE"/>
		<reference ref_id="CVE-2018-12086" ref_url="https://www.suse.com/security/cve/CVE-2018-12086/" source="CVE"/>
		<reference ref_id="CVE-2018-14339" ref_url="https://www.suse.com/security/cve/CVE-2018-14339/" source="CVE"/>
		<reference ref_id="CVE-2018-14340" ref_url="https://www.suse.com/security/cve/CVE-2018-14340/" source="CVE"/>
		<reference ref_id="CVE-2018-14341" ref_url="https://www.suse.com/security/cve/CVE-2018-14341/" source="CVE"/>
		<reference ref_id="CVE-2018-14342" ref_url="https://www.suse.com/security/cve/CVE-2018-14342/" source="CVE"/>
		<reference ref_id="CVE-2018-14343" ref_url="https://www.suse.com/security/cve/CVE-2018-14343/" source="CVE"/>
		<reference ref_id="CVE-2018-14344" ref_url="https://www.suse.com/security/cve/CVE-2018-14344/" source="CVE"/>
		<reference ref_id="CVE-2018-14367" ref_url="https://www.suse.com/security/cve/CVE-2018-14367/" source="CVE"/>
		<reference ref_id="CVE-2018-14368" ref_url="https://www.suse.com/security/cve/CVE-2018-14368/" source="CVE"/>
		<reference ref_id="CVE-2018-14369" ref_url="https://www.suse.com/security/cve/CVE-2018-14369/" source="CVE"/>
		<reference ref_id="CVE-2018-14370" ref_url="https://www.suse.com/security/cve/CVE-2018-14370/" source="CVE"/>
		<reference ref_id="CVE-2018-16056" ref_url="https://www.suse.com/security/cve/CVE-2018-16056/" source="CVE"/>
		<reference ref_id="CVE-2018-16057" ref_url="https://www.suse.com/security/cve/CVE-2018-16057/" source="CVE"/>
		<reference ref_id="CVE-2018-16058" ref_url="https://www.suse.com/security/cve/CVE-2018-16058/" source="CVE"/>
		<reference ref_id="CVE-2018-18227" ref_url="https://www.suse.com/security/cve/CVE-2018-18227/" source="CVE"/>
		<reference ref_id="CVE-2018-19622" ref_url="https://www.suse.com/security/cve/CVE-2018-19622/" source="CVE"/>
		<reference ref_id="CVE-2018-19623" ref_url="https://www.suse.com/security/cve/CVE-2018-19623/" source="CVE"/>
		<reference ref_id="CVE-2018-19624" ref_url="https://www.suse.com/security/cve/CVE-2018-19624/" source="CVE"/>
		<reference ref_id="CVE-2018-19625" ref_url="https://www.suse.com/security/cve/CVE-2018-19625/" source="CVE"/>
		<reference ref_id="CVE-2018-19626" ref_url="https://www.suse.com/security/cve/CVE-2018-19626/" source="CVE"/>
		<reference ref_id="CVE-2018-19627" ref_url="https://www.suse.com/security/cve/CVE-2018-19627/" source="CVE"/>
		<reference ref_id="CVE-2018-5334" ref_url="https://www.suse.com/security/cve/CVE-2018-5334/" source="CVE"/>
		<reference ref_id="CVE-2018-5335" ref_url="https://www.suse.com/security/cve/CVE-2018-5335/" source="CVE"/>
		<reference ref_id="CVE-2018-5336" ref_url="https://www.suse.com/security/cve/CVE-2018-5336/" source="CVE"/>
		<reference ref_id="CVE-2018-7320" ref_url="https://www.suse.com/security/cve/CVE-2018-7320/" source="CVE"/>
		<reference ref_id="CVE-2018-7321" ref_url="https://www.suse.com/security/cve/CVE-2018-7321/" source="CVE"/>
		<reference ref_id="CVE-2018-7322" ref_url="https://www.suse.com/security/cve/CVE-2018-7322/" source="CVE"/>
		<reference ref_id="CVE-2018-7323" ref_url="https://www.suse.com/security/cve/CVE-2018-7323/" source="CVE"/>
		<reference ref_id="CVE-2018-7324" ref_url="https://www.suse.com/security/cve/CVE-2018-7324/" source="CVE"/>
		<reference ref_id="CVE-2018-7325" ref_url="https://www.suse.com/security/cve/CVE-2018-7325/" source="CVE"/>
		<reference ref_id="CVE-2018-7326" ref_url="https://www.suse.com/security/cve/CVE-2018-7326/" source="CVE"/>
		<reference ref_id="CVE-2018-7327" ref_url="https://www.suse.com/security/cve/CVE-2018-7327/" source="CVE"/>
		<reference ref_id="CVE-2018-7328" ref_url="https://www.suse.com/security/cve/CVE-2018-7328/" source="CVE"/>
		<reference ref_id="CVE-2018-7329" ref_url="https://www.suse.com/security/cve/CVE-2018-7329/" source="CVE"/>
		<reference ref_id="CVE-2018-7330" ref_url="https://www.suse.com/security/cve/CVE-2018-7330/" source="CVE"/>
		<reference ref_id="CVE-2018-7331" ref_url="https://www.suse.com/security/cve/CVE-2018-7331/" source="CVE"/>
		<reference ref_id="CVE-2018-7332" ref_url="https://www.suse.com/security/cve/CVE-2018-7332/" source="CVE"/>
		<reference ref_id="CVE-2018-7333" ref_url="https://www.suse.com/security/cve/CVE-2018-7333/" source="CVE"/>
		<reference ref_id="CVE-2018-7334" ref_url="https://www.suse.com/security/cve/CVE-2018-7334/" source="CVE"/>
		<reference ref_id="CVE-2018-7335" ref_url="https://www.suse.com/security/cve/CVE-2018-7335/" source="CVE"/>
		<reference ref_id="CVE-2018-7336" ref_url="https://www.suse.com/security/cve/CVE-2018-7336/" source="CVE"/>
		<reference ref_id="CVE-2018-7337" ref_url="https://www.suse.com/security/cve/CVE-2018-7337/" source="CVE"/>
		<reference ref_id="CVE-2018-7417" ref_url="https://www.suse.com/security/cve/CVE-2018-7417/" source="CVE"/>
		<reference ref_id="CVE-2018-7418" ref_url="https://www.suse.com/security/cve/CVE-2018-7418/" source="CVE"/>
		<reference ref_id="CVE-2018-7419" ref_url="https://www.suse.com/security/cve/CVE-2018-7419/" source="CVE"/>
		<reference ref_id="CVE-2018-7420" ref_url="https://www.suse.com/security/cve/CVE-2018-7420/" source="CVE"/>
		<reference ref_id="CVE-2018-7421" ref_url="https://www.suse.com/security/cve/CVE-2018-7421/" source="CVE"/>
		<reference ref_id="CVE-2018-9256" ref_url="https://www.suse.com/security/cve/CVE-2018-9256/" source="CVE"/>
		<reference ref_id="CVE-2018-9257" ref_url="https://www.suse.com/security/cve/CVE-2018-9257/" source="CVE"/>
		<reference ref_id="CVE-2018-9258" ref_url="https://www.suse.com/security/cve/CVE-2018-9258/" source="CVE"/>
		<reference ref_id="CVE-2018-9260" ref_url="https://www.suse.com/security/cve/CVE-2018-9260/" source="CVE"/>
		<reference ref_id="CVE-2018-9261" ref_url="https://www.suse.com/security/cve/CVE-2018-9261/" source="CVE"/>
		<reference ref_id="CVE-2018-9262" ref_url="https://www.suse.com/security/cve/CVE-2018-9262/" source="CVE"/>
		<reference ref_id="CVE-2018-9263" ref_url="https://www.suse.com/security/cve/CVE-2018-9263/" source="CVE"/>
		<reference ref_id="CVE-2018-9264" ref_url="https://www.suse.com/security/cve/CVE-2018-9264/" source="CVE"/>
		<reference ref_id="CVE-2018-9265" ref_url="https://www.suse.com/security/cve/CVE-2018-9265/" source="CVE"/>
		<reference ref_id="CVE-2018-9266" ref_url="https://www.suse.com/security/cve/CVE-2018-9266/" source="CVE"/>
		<reference ref_id="CVE-2018-9267" ref_url="https://www.suse.com/security/cve/CVE-2018-9267/" source="CVE"/>
		<reference ref_id="CVE-2018-9268" ref_url="https://www.suse.com/security/cve/CVE-2018-9268/" source="CVE"/>
		<reference ref_id="CVE-2018-9269" ref_url="https://www.suse.com/security/cve/CVE-2018-9269/" source="CVE"/>
		<reference ref_id="CVE-2018-9270" ref_url="https://www.suse.com/security/cve/CVE-2018-9270/" source="CVE"/>
		<reference ref_id="CVE-2018-9271" ref_url="https://www.suse.com/security/cve/CVE-2018-9271/" source="CVE"/>
		<reference ref_id="CVE-2018-9272" ref_url="https://www.suse.com/security/cve/CVE-2018-9272/" source="CVE"/>
		<reference ref_id="CVE-2018-9273" ref_url="https://www.suse.com/security/cve/CVE-2018-9273/" source="CVE"/>
		<reference ref_id="CVE-2018-9274" ref_url="https://www.suse.com/security/cve/CVE-2018-9274/" source="CVE"/>
		<reference ref_id="CVE-2019-10894" ref_url="https://www.suse.com/security/cve/CVE-2019-10894/" source="CVE"/>
		<reference ref_id="CVE-2019-10895" ref_url="https://www.suse.com/security/cve/CVE-2019-10895/" source="CVE"/>
		<reference ref_id="CVE-2019-10896" ref_url="https://www.suse.com/security/cve/CVE-2019-10896/" source="CVE"/>
		<reference ref_id="CVE-2019-10899" ref_url="https://www.suse.com/security/cve/CVE-2019-10899/" source="CVE"/>
		<reference ref_id="CVE-2019-10901" ref_url="https://www.suse.com/security/cve/CVE-2019-10901/" source="CVE"/>
		<reference ref_id="CVE-2019-10903" ref_url="https://www.suse.com/security/cve/CVE-2019-10903/" source="CVE"/>
		<reference ref_id="CVE-2019-5717" ref_url="https://www.suse.com/security/cve/CVE-2019-5717/" source="CVE"/>
		<reference ref_id="CVE-2019-5718" ref_url="https://www.suse.com/security/cve/CVE-2019-5718/" source="CVE"/>
		<reference ref_id="CVE-2019-5719" ref_url="https://www.suse.com/security/cve/CVE-2019-5719/" source="CVE"/>
		<reference ref_id="CVE-2019-5721" ref_url="https://www.suse.com/security/cve/CVE-2019-5721/" source="CVE"/>
		<reference ref_id="CVE-2019-9208" ref_url="https://www.suse.com/security/cve/CVE-2019-9208/" source="CVE"/>
		<reference ref_id="CVE-2019-9209" ref_url="https://www.suse.com/security/cve/CVE-2019-9209/" source="CVE"/>
		<reference ref_id="CVE-2019-9214" ref_url="https://www.suse.com/security/cve/CVE-2019-9214/" source="CVE"/>
		<description>
These are all security issues fixed in the libwireshark9-2.4.14-3.25.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8710/">CVE-2014-8710</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8711/">CVE-2014-8711</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8712/">CVE-2014-8712</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8713/">CVE-2014-8713</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8714/">CVE-2014-8714</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0559/">CVE-2015-0559</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0560/">CVE-2015-0560</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0561/">CVE-2015-0561</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0562/">CVE-2015-0562</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0563/">CVE-2015-0563</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0564/">CVE-2015-0564</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2187/">CVE-2015-2187</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2188/">CVE-2015-2188</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2189/">CVE-2015-2189</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2190/">CVE-2015-2190</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2191/">CVE-2015-2191</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2192/">CVE-2015-2192</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3808/">CVE-2015-3808</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3809/">CVE-2015-3809</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3810/">CVE-2015-3810</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3811/">CVE-2015-3811</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3812/">CVE-2015-3812</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3813/">CVE-2015-3813</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3814/">CVE-2015-3814</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3815/">CVE-2015-3815</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4651/">CVE-2015-4651</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4652/">CVE-2015-4652</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6241/">CVE-2015-6241</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6242/">CVE-2015-6242</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6243/">CVE-2015-6243</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6244/">CVE-2015-6244</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6245/">CVE-2015-6245</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6246/">CVE-2015-6246</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6247/">CVE-2015-6247</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6248/">CVE-2015-6248</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6249/">CVE-2015-6249</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7830/">CVE-2015-7830</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8711/">CVE-2015-8711</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8718/">CVE-2015-8718</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8720/">CVE-2015-8720</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8721/">CVE-2015-8721</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8722/">CVE-2015-8722</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8723/">CVE-2015-8723</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8724/">CVE-2015-8724</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8725/">CVE-2015-8725</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8726/">CVE-2015-8726</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8727/">CVE-2015-8727</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8728/">CVE-2015-8728</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8729/">CVE-2015-8729</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8730/">CVE-2015-8730</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8731/">CVE-2015-8731</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8732/">CVE-2015-8732</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8733/">CVE-2015-8733</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8734/">CVE-2015-8734</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8735/">CVE-2015-8735</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8736/">CVE-2015-8736</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8737/">CVE-2015-8737</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8738/">CVE-2015-8738</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8739/">CVE-2015-8739</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8740/">CVE-2015-8740</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8741/">CVE-2015-8741</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8742/">CVE-2015-8742</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2522/">CVE-2016-2522</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2523/">CVE-2016-2523</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2524/">CVE-2016-2524</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2525/">CVE-2016-2525</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2526/">CVE-2016-2526</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2527/">CVE-2016-2527</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2528/">CVE-2016-2528</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2529/">CVE-2016-2529</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2530/">CVE-2016-2530</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2531/">CVE-2016-2531</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2532/">CVE-2016-2532</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5350/">CVE-2016-5350</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5351/">CVE-2016-5351</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5352/">CVE-2016-5352</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5353/">CVE-2016-5353</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5354/">CVE-2016-5354</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5355/">CVE-2016-5355</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5356/">CVE-2016-5356</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5357/">CVE-2016-5357</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5358/">CVE-2016-5358</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6505/">CVE-2016-6505</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6508/">CVE-2016-6508</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6509/">CVE-2016-6509</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6510/">CVE-2016-6510</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6511/">CVE-2016-6511</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6512/">CVE-2016-6512</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6513/">CVE-2016-6513</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7175/">CVE-2016-7175</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7176/">CVE-2016-7176</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7177/">CVE-2016-7177</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7178/">CVE-2016-7178</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7179/">CVE-2016-7179</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7180/">CVE-2016-7180</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9372/">CVE-2016-9372</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9373/">CVE-2016-9373</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9374/">CVE-2016-9374</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9375/">CVE-2016-9375</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9376/">CVE-2016-9376</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11406/">CVE-2017-11406</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11407/">CVE-2017-11407</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11408/">CVE-2017-11408</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11410/">CVE-2017-11410</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11411/">CVE-2017-11411</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13764/">CVE-2017-13764</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13765/">CVE-2017-13765</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13766/">CVE-2017-13766</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13767/">CVE-2017-13767</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15189/">CVE-2017-15189</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15190/">CVE-2017-15190</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15191/">CVE-2017-15191</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15192/">CVE-2017-15192</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15193/">CVE-2017-15193</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17083/">CVE-2017-17083</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17084/">CVE-2017-17084</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17085/">CVE-2017-17085</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5596/">CVE-2017-5596</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5597/">CVE-2017-5597</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6467/">CVE-2017-6467</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6468/">CVE-2017-6468</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6469/">CVE-2017-6469</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6470/">CVE-2017-6470</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6471/">CVE-2017-6471</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6472/">CVE-2017-6472</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6473/">CVE-2017-6473</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6474/">CVE-2017-6474</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7700/">CVE-2017-7700</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7701/">CVE-2017-7701</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7702/">CVE-2017-7702</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7703/">CVE-2017-7703</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7704/">CVE-2017-7704</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7705/">CVE-2017-7705</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7745/">CVE-2017-7745</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7746/">CVE-2017-7746</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7747/">CVE-2017-7747</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7748/">CVE-2017-7748</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9343/">CVE-2017-9343</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9344/">CVE-2017-9344</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9345/">CVE-2017-9345</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9346/">CVE-2017-9346</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9347/">CVE-2017-9347</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9348/">CVE-2017-9348</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9349/">CVE-2017-9349</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9350/">CVE-2017-9350</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9351/">CVE-2017-9351</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9352/">CVE-2017-9352</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9353/">CVE-2017-9353</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9354/">CVE-2017-9354</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11356/">CVE-2018-11356</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11357/">CVE-2018-11357</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11358/">CVE-2018-11358</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11359/">CVE-2018-11359</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11360/">CVE-2018-11360</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11362/">CVE-2018-11362</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12086/">CVE-2018-12086</cve>
	<cve impact="low" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14339/">CVE-2018-14339</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14340/">CVE-2018-14340</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14341/">CVE-2018-14341</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14342/">CVE-2018-14342</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14343/">CVE-2018-14343</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14344/">CVE-2018-14344</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14367/">CVE-2018-14367</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14368/">CVE-2018-14368</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14369/">CVE-2018-14369</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14370/">CVE-2018-14370</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16056/">CVE-2018-16056</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16057/">CVE-2018-16057</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16058/">CVE-2018-16058</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18227/">CVE-2018-18227</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19622/">CVE-2018-19622</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19623/">CVE-2018-19623</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19624/">CVE-2018-19624</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19625/">CVE-2018-19625</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19626/">CVE-2018-19626</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19627/">CVE-2018-19627</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5334/">CVE-2018-5334</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5335/">CVE-2018-5335</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5336/">CVE-2018-5336</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7320/">CVE-2018-7320</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7321/">CVE-2018-7321</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7322/">CVE-2018-7322</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7323/">CVE-2018-7323</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7324/">CVE-2018-7324</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7325/">CVE-2018-7325</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7326/">CVE-2018-7326</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7327/">CVE-2018-7327</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7328/">CVE-2018-7328</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7329/">CVE-2018-7329</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7330/">CVE-2018-7330</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7331/">CVE-2018-7331</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7332/">CVE-2018-7332</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7333/">CVE-2018-7333</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7334/">CVE-2018-7334</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7335/">CVE-2018-7335</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7336/">CVE-2018-7336</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7337/">CVE-2018-7337</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7417/">CVE-2018-7417</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7418/">CVE-2018-7418</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7419/">CVE-2018-7419</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7420/">CVE-2018-7420</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7421/">CVE-2018-7421</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9256/">CVE-2018-9256</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9257/">CVE-2018-9257</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9258/">CVE-2018-9258</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9260/">CVE-2018-9260</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9261/">CVE-2018-9261</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9262/">CVE-2018-9262</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9263/">CVE-2018-9263</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9264/">CVE-2018-9264</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9265/">CVE-2018-9265</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9266/">CVE-2018-9266</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9267/">CVE-2018-9267</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9268/">CVE-2018-9268</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9269/">CVE-2018-9269</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9270/">CVE-2018-9270</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9271/">CVE-2018-9271</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9272/">CVE-2018-9272</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9273/">CVE-2018-9273</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9274/">CVE-2018-9274</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10894/">CVE-2019-10894</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10895/">CVE-2019-10895</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10896/">CVE-2019-10896</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10899/">CVE-2019-10899</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10901/">CVE-2019-10901</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10903/">CVE-2019-10903</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5717/">CVE-2019-5717</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5718/">CVE-2019-5718</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5719/">CVE-2019-5719</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5721/">CVE-2019-5721</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9208/">CVE-2019-9208</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9209/">CVE-2019-9209</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9214/">CVE-2019-9214</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481537" comment="libwireshark9-2.4.14-3.25.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481538" comment="libwiretap7-2.4.14-3.25.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481539" comment="libwscodecs1-2.4.14-3.25.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481540" comment="libwsutil8-2.4.14-3.25.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481541" comment="wireshark-2.4.14-3.25.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137123" version="1" class="patch">
	<metadata>
		<title>libxcb-composite0-1.13-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2064" ref_url="https://www.suse.com/security/cve/CVE-2013-2064/" source="CVE"/>
		<description>
These are all security issues fixed in the libxcb-composite0-1.13-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2064/">CVE-2013-2064</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481542" comment="libxcb-composite0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481543" comment="libxcb-damage0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481544" comment="libxcb-devel-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481545" comment="libxcb-devel-doc-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481546" comment="libxcb-dpms0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481547" comment="libxcb-dri2-0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481548" comment="libxcb-dri2-0-32bit-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481549" comment="libxcb-dri3-0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481550" comment="libxcb-dri3-0-32bit-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481551" comment="libxcb-glx0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481552" comment="libxcb-glx0-32bit-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481553" comment="libxcb-present0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481554" comment="libxcb-present0-32bit-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481555" comment="libxcb-randr0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481556" comment="libxcb-record0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481557" comment="libxcb-render0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481558" comment="libxcb-res0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481559" comment="libxcb-screensaver0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481560" comment="libxcb-shape0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481561" comment="libxcb-shm0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481562" comment="libxcb-sync1-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481563" comment="libxcb-sync1-32bit-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481564" comment="libxcb-xf86dri0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481565" comment="libxcb-xfixes0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481566" comment="libxcb-xfixes0-32bit-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481567" comment="libxcb-xinerama0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481568" comment="libxcb-xinput0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481569" comment="libxcb-xkb1-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481570" comment="libxcb-xtest0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481571" comment="libxcb-xv0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481572" comment="libxcb-xvmc0-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481573" comment="libxcb1-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481574" comment="libxcb1-32bit-1.13-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137124" version="1" class="patch">
	<metadata>
		<title>libxerces-c-3_1-3.1.4-3.3.25 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-1885" ref_url="https://www.suse.com/security/cve/CVE-2009-1885/" source="CVE"/>
		<reference ref_id="CVE-2016-0729" ref_url="https://www.suse.com/security/cve/CVE-2016-0729/" source="CVE"/>
		<reference ref_id="CVE-2016-2099" ref_url="https://www.suse.com/security/cve/CVE-2016-2099/" source="CVE"/>
		<reference ref_id="CVE-2016-4463" ref_url="https://www.suse.com/security/cve/CVE-2016-4463/" source="CVE"/>
		<reference ref_id="CVE-2017-12627" ref_url="https://www.suse.com/security/cve/CVE-2017-12627/" source="CVE"/>
		<description>
These are all security issues fixed in the libxerces-c-3_1-3.1.4-3.3.25 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1885/">CVE-2009-1885</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0729/">CVE-2016-0729</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2099/">CVE-2016-2099</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4463/">CVE-2016-4463</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12627/">CVE-2017-12627</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481575" comment="libxerces-c-3_1-3.1.4-3.3.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481576" comment="libxerces-c-devel-3.1.4-3.3.25 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137125" version="1" class="patch">
	<metadata>
		<title> (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1105832" ref_url="https://bugzilla.suse.com/1105832" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-15853" ref_url="https://www.suse.com/security/cve/CVE-2018-15853/" source="CVE"/>
		<reference ref_id="CVE-2018-15854" ref_url="https://www.suse.com/security/cve/CVE-2018-15854/" source="CVE"/>
		<reference ref_id="CVE-2018-15855" ref_url="https://www.suse.com/security/cve/CVE-2018-15855/" source="CVE"/>
		<reference ref_id="CVE-2018-15856" ref_url="https://www.suse.com/security/cve/CVE-2018-15856/" source="CVE"/>
		<reference ref_id="CVE-2018-15857" ref_url="https://www.suse.com/security/cve/CVE-2018-15857/" source="CVE"/>
		<reference ref_id="CVE-2018-15858" ref_url="https://www.suse.com/security/cve/CVE-2018-15858/" source="CVE"/>
		<reference ref_id="CVE-2018-15859" ref_url="https://www.suse.com/security/cve/CVE-2018-15859/" source="CVE"/>
		<reference ref_id="CVE-2018-15861" ref_url="https://www.suse.com/security/cve/CVE-2018-15861/" source="CVE"/>
		<reference ref_id="CVE-2018-15862" ref_url="https://www.suse.com/security/cve/CVE-2018-15862/" source="CVE"/>
		<reference ref_id="CVE-2018-15863" ref_url="https://www.suse.com/security/cve/CVE-2018-15863/" source="CVE"/>
		<reference ref_id="CVE-2018-15864" ref_url="https://www.suse.com/security/cve/CVE-2018-15864/" source="CVE"/>
		<description>
This update for libxkbcommon to version 0.8.2 fixes the following issues:

- Fix a few NULL-dereferences, out-of-bounds access and undefined behavior in
  the XKB text format parser.
- CVE-2018-15853: Endless recursion could have been used by local attackers to
  crash xkbcommon users by supplying a crafted keymap file that triggers boolean
  negation (bsc#1105832).
- CVE-2018-15854: Unchecked NULL pointer usage could have been used by local
  attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying
  a crafted keymap file, because geometry tokens were desupported incorrectly
  (bsc#1105832).
- CVE-2018-15855: Unchecked NULL pointer usage could have been used by local
  attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying
  a crafted keymap file, because the XkbFile for an xkb_geometry section was
  mishandled (bsc#1105832).
- CVE-2018-15856: An infinite loop when reaching EOL unexpectedly could be used
  by local attackers to cause a denial of service during parsing of crafted
  keymap files (bsc#1105832).
- CVE-2018-15857: An invalid free in ExprAppendMultiKeysymList could have been
  used by local attackers to crash xkbcommon keymap parsers or possibly have
  unspecified other impact by supplying a crafted keymap file (bsc#1105832).
- CVE-2018-15858: Unchecked NULL pointer usage when handling invalid aliases in
  CopyKeyAliasesToKeymap could have been used by local attackers to crash (NULL
  pointer dereference) the xkbcommon parser by supplying a crafted keymap file
  (bsc#1105832).
- CVE-2018-15859: Unchecked NULL pointer usage when parsing invalid atoms in
  ExprResolveLhs could have been used by local attackers to crash (NULL pointer
  dereference) the xkbcommon parser by supplying a crafted keymap file, because
  lookup failures are mishandled (bsc#1105832).
- CVE-2018-15861: Unchecked NULL pointer usage in ExprResolveLhs could have
  been used by local attackers to crash (NULL pointer dereference) the xkbcommon
  parser by supplying a crafted keymap file that triggers an xkb_intern_atom
  failure (bsc#1105832).
- CVE-2018-15862: Unchecked NULL pointer usage in LookupModMask could have been
  used by local attackers to crash (NULL pointer dereference) the xkbcommon
  parser by supplying a crafted keymap file with invalid virtual modifiers
  (bsc#1105832).
- CVE-2018-15863: Unchecked NULL pointer usage in ResolveStateAndPredicate
  could have been used by local attackers to crash (NULL pointer dereference) the
  xkbcommon parser by supplying a crafted keymap file with a no-op modmask
  expression (bsc#1105832).
- CVE-2018-15864: Unchecked NULL pointer usage in resolve_keysym could have
  been used by local attackers to crash (NULL pointer dereference) the xkbcommon
  parser by supplying a crafted keymap file, because a map access attempt can
  occur for a map that was never created (bsc#1105832).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-11-08"/>
	<updated date="2018-11-08"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1105832">SUSE bug 1105832</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15853/">CVE-2018-15853</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15854/">CVE-2018-15854</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15855/">CVE-2018-15855</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15856/">CVE-2018-15856</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15857/">CVE-2018-15857</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15858/">CVE-2018-15858</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15859/">CVE-2018-15859</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15861/">CVE-2018-15861</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15862/">CVE-2018-15862</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15863/">CVE-2018-15863</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15864/">CVE-2018-15864</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782416" comment="libxkbcommon-devel-0.8.2-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782417" comment="libxkbcommon-x11-0-0.8.2-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782418" comment="libxkbcommon-x11-devel-0.8.2-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782419" comment="libxkbcommon0-0.8.2-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137126" version="1" class="patch">
	<metadata>
		<title>libxkbcommon-devel-0.8.2-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-15853" ref_url="https://www.suse.com/security/cve/CVE-2018-15853/" source="CVE"/>
		<reference ref_id="CVE-2018-15854" ref_url="https://www.suse.com/security/cve/CVE-2018-15854/" source="CVE"/>
		<reference ref_id="CVE-2018-15855" ref_url="https://www.suse.com/security/cve/CVE-2018-15855/" source="CVE"/>
		<reference ref_id="CVE-2018-15856" ref_url="https://www.suse.com/security/cve/CVE-2018-15856/" source="CVE"/>
		<reference ref_id="CVE-2018-15857" ref_url="https://www.suse.com/security/cve/CVE-2018-15857/" source="CVE"/>
		<reference ref_id="CVE-2018-15858" ref_url="https://www.suse.com/security/cve/CVE-2018-15858/" source="CVE"/>
		<reference ref_id="CVE-2018-15859" ref_url="https://www.suse.com/security/cve/CVE-2018-15859/" source="CVE"/>
		<reference ref_id="CVE-2018-15861" ref_url="https://www.suse.com/security/cve/CVE-2018-15861/" source="CVE"/>
		<reference ref_id="CVE-2018-15862" ref_url="https://www.suse.com/security/cve/CVE-2018-15862/" source="CVE"/>
		<reference ref_id="CVE-2018-15863" ref_url="https://www.suse.com/security/cve/CVE-2018-15863/" source="CVE"/>
		<reference ref_id="CVE-2018-15864" ref_url="https://www.suse.com/security/cve/CVE-2018-15864/" source="CVE"/>
		<description>
These are all security issues fixed in the libxkbcommon-devel-0.8.2-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15853/">CVE-2018-15853</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15854/">CVE-2018-15854</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15855/">CVE-2018-15855</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15856/">CVE-2018-15856</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15857/">CVE-2018-15857</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15858/">CVE-2018-15858</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15859/">CVE-2018-15859</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15861/">CVE-2018-15861</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15862/">CVE-2018-15862</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15863/">CVE-2018-15863</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15864/">CVE-2018-15864</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481577" comment="libxkbcommon-devel-0.8.2-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481578" comment="libxkbcommon-x11-0-0.8.2-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481579" comment="libxkbcommon-x11-devel-0.8.2-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481580" comment="libxkbcommon0-0.8.2-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137127" version="1" class="patch">
	<metadata>
		<title>libxml2-2-2.9.7-3.6.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2008-4225" ref_url="https://www.suse.com/security/cve/CVE-2008-4225/" source="CVE"/>
		<reference ref_id="CVE-2008-4226" ref_url="https://www.suse.com/security/cve/CVE-2008-4226/" source="CVE"/>
		<reference ref_id="CVE-2008-4409" ref_url="https://www.suse.com/security/cve/CVE-2008-4409/" source="CVE"/>
		<reference ref_id="CVE-2010-4494" ref_url="https://www.suse.com/security/cve/CVE-2010-4494/" source="CVE"/>
		<reference ref_id="CVE-2011-1944" ref_url="https://www.suse.com/security/cve/CVE-2011-1944/" source="CVE"/>
		<reference ref_id="CVE-2012-5134" ref_url="https://www.suse.com/security/cve/CVE-2012-5134/" source="CVE"/>
		<reference ref_id="CVE-2013-0338" ref_url="https://www.suse.com/security/cve/CVE-2013-0338/" source="CVE"/>
		<reference ref_id="CVE-2013-1969" ref_url="https://www.suse.com/security/cve/CVE-2013-1969/" source="CVE"/>
		<reference ref_id="CVE-2014-0191" ref_url="https://www.suse.com/security/cve/CVE-2014-0191/" source="CVE"/>
		<reference ref_id="CVE-2014-3660" ref_url="https://www.suse.com/security/cve/CVE-2014-3660/" source="CVE"/>
		<reference ref_id="CVE-2015-1819" ref_url="https://www.suse.com/security/cve/CVE-2015-1819/" source="CVE"/>
		<reference ref_id="CVE-2015-5312" ref_url="https://www.suse.com/security/cve/CVE-2015-5312/" source="CVE"/>
		<reference ref_id="CVE-2015-7497" ref_url="https://www.suse.com/security/cve/CVE-2015-7497/" source="CVE"/>
		<reference ref_id="CVE-2015-7498" ref_url="https://www.suse.com/security/cve/CVE-2015-7498/" source="CVE"/>
		<reference ref_id="CVE-2015-7499" ref_url="https://www.suse.com/security/cve/CVE-2015-7499/" source="CVE"/>
		<reference ref_id="CVE-2015-7500" ref_url="https://www.suse.com/security/cve/CVE-2015-7500/" source="CVE"/>
		<reference ref_id="CVE-2015-7941" ref_url="https://www.suse.com/security/cve/CVE-2015-7941/" source="CVE"/>
		<reference ref_id="CVE-2015-7942" ref_url="https://www.suse.com/security/cve/CVE-2015-7942/" source="CVE"/>
		<reference ref_id="CVE-2015-8035" ref_url="https://www.suse.com/security/cve/CVE-2015-8035/" source="CVE"/>
		<reference ref_id="CVE-2015-8242" ref_url="https://www.suse.com/security/cve/CVE-2015-8242/" source="CVE"/>
		<reference ref_id="CVE-2016-1762" ref_url="https://www.suse.com/security/cve/CVE-2016-1762/" source="CVE"/>
		<reference ref_id="CVE-2016-1833" ref_url="https://www.suse.com/security/cve/CVE-2016-1833/" source="CVE"/>
		<reference ref_id="CVE-2016-1834" ref_url="https://www.suse.com/security/cve/CVE-2016-1834/" source="CVE"/>
		<reference ref_id="CVE-2016-1835" ref_url="https://www.suse.com/security/cve/CVE-2016-1835/" source="CVE"/>
		<reference ref_id="CVE-2016-1836" ref_url="https://www.suse.com/security/cve/CVE-2016-1836/" source="CVE"/>
		<reference ref_id="CVE-2016-1837" ref_url="https://www.suse.com/security/cve/CVE-2016-1837/" source="CVE"/>
		<reference ref_id="CVE-2016-1838" ref_url="https://www.suse.com/security/cve/CVE-2016-1838/" source="CVE"/>
		<reference ref_id="CVE-2016-1839" ref_url="https://www.suse.com/security/cve/CVE-2016-1839/" source="CVE"/>
		<reference ref_id="CVE-2016-1840" ref_url="https://www.suse.com/security/cve/CVE-2016-1840/" source="CVE"/>
		<reference ref_id="CVE-2016-3627" ref_url="https://www.suse.com/security/cve/CVE-2016-3627/" source="CVE"/>
		<reference ref_id="CVE-2016-3705" ref_url="https://www.suse.com/security/cve/CVE-2016-3705/" source="CVE"/>
		<reference ref_id="CVE-2016-4483" ref_url="https://www.suse.com/security/cve/CVE-2016-4483/" source="CVE"/>
		<reference ref_id="CVE-2016-4658" ref_url="https://www.suse.com/security/cve/CVE-2016-4658/" source="CVE"/>
		<reference ref_id="CVE-2017-0663" ref_url="https://www.suse.com/security/cve/CVE-2017-0663/" source="CVE"/>
		<reference ref_id="CVE-2017-18258" ref_url="https://www.suse.com/security/cve/CVE-2017-18258/" source="CVE"/>
		<reference ref_id="CVE-2017-5969" ref_url="https://www.suse.com/security/cve/CVE-2017-5969/" source="CVE"/>
		<reference ref_id="CVE-2017-9047" ref_url="https://www.suse.com/security/cve/CVE-2017-9047/" source="CVE"/>
		<reference ref_id="CVE-2017-9048" ref_url="https://www.suse.com/security/cve/CVE-2017-9048/" source="CVE"/>
		<reference ref_id="CVE-2017-9049" ref_url="https://www.suse.com/security/cve/CVE-2017-9049/" source="CVE"/>
		<reference ref_id="CVE-2018-14404" ref_url="https://www.suse.com/security/cve/CVE-2018-14404/" source="CVE"/>
		<reference ref_id="CVE-2018-14567" ref_url="https://www.suse.com/security/cve/CVE-2018-14567/" source="CVE"/>
		<reference ref_id="CVE-2018-9251" ref_url="https://www.suse.com/security/cve/CVE-2018-9251/" source="CVE"/>
		<description>
These are all security issues fixed in the libxml2-2-2.9.7-3.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-4225/">CVE-2008-4225</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-4226/">CVE-2008-4226</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-4409/">CVE-2008-4409</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4494/">CVE-2010-4494</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-1944/">CVE-2011-1944</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5134/">CVE-2012-5134</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0338/">CVE-2013-0338</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1969/">CVE-2013-1969</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0191/">CVE-2014-0191</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3660/">CVE-2014-3660</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1819/">CVE-2015-1819</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5312/">CVE-2015-5312</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7497/">CVE-2015-7497</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7498/">CVE-2015-7498</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7499/">CVE-2015-7499</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7500/">CVE-2015-7500</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7941/">CVE-2015-7941</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7942/">CVE-2015-7942</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8035/">CVE-2015-8035</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8242/">CVE-2015-8242</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1762/">CVE-2016-1762</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1833/">CVE-2016-1833</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1834/">CVE-2016-1834</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1835/">CVE-2016-1835</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1836/">CVE-2016-1836</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1837/">CVE-2016-1837</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1838/">CVE-2016-1838</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1839/">CVE-2016-1839</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1840/">CVE-2016-1840</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3627/">CVE-2016-3627</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3705/">CVE-2016-3705</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4483/">CVE-2016-4483</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4658/">CVE-2016-4658</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-0663/">CVE-2017-0663</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18258/">CVE-2017-18258</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5969/">CVE-2017-5969</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9047/">CVE-2017-9047</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9048/">CVE-2017-9048</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9049/">CVE-2017-9049</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14404/">CVE-2018-14404</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14567/">CVE-2018-14567</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9251/">CVE-2018-9251</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481581" comment="libxml2-2-2.9.7-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481582" comment="libxml2-2-32bit-2.9.7-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481583" comment="libxml2-devel-2.9.7-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481584" comment="libxml2-tools-2.9.7-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137128" version="1" class="patch">
	<metadata>
		<title>libxslt-devel-1.1.32-1.25 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-7995" ref_url="https://www.suse.com/security/cve/CVE-2015-7995/" source="CVE"/>
		<reference ref_id="CVE-2015-9019" ref_url="https://www.suse.com/security/cve/CVE-2015-9019/" source="CVE"/>
		<reference ref_id="CVE-2016-4738" ref_url="https://www.suse.com/security/cve/CVE-2016-4738/" source="CVE"/>
		<reference ref_id="CVE-2017-5029" ref_url="https://www.suse.com/security/cve/CVE-2017-5029/" source="CVE"/>
		<description>
These are all security issues fixed in the libxslt-devel-1.1.32-1.25 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7995/">CVE-2015-7995</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-9019/">CVE-2015-9019</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4738/">CVE-2016-4738</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5029/">CVE-2017-5029</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480825" comment="libxslt-devel-1.1.32-1.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480826" comment="libxslt-tools-1.1.32-1.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480827" comment="libxslt1-1.1.32-1.25 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137129" version="1" class="patch">
	<metadata>
		<title>libyaml-0-2-0.1.7-1.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-6393" ref_url="https://www.suse.com/security/cve/CVE-2013-6393/" source="CVE"/>
		<reference ref_id="CVE-2014-2525" ref_url="https://www.suse.com/security/cve/CVE-2014-2525/" source="CVE"/>
		<reference ref_id="CVE-2014-9130" ref_url="https://www.suse.com/security/cve/CVE-2014-9130/" source="CVE"/>
		<description>
These are all security issues fixed in the libyaml-0-2-0.1.7-1.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6393/">CVE-2013-6393</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-2525/">CVE-2014-2525</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9130/">CVE-2014-9130</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480828" comment="libyaml-0-2-0.1.7-1.17 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480829" comment="libyaml-devel-0.1.7-1.17 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137130" version="1" class="patch">
	<metadata>
		<title>libykcs11-1-1.6.2-4.30 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-14779" ref_url="https://www.suse.com/security/cve/CVE-2018-14779/" source="CVE"/>
		<reference ref_id="CVE-2018-14780" ref_url="https://www.suse.com/security/cve/CVE-2018-14780/" source="CVE"/>
		<description>
These are all security issues fixed in the libykcs11-1-1.6.2-4.30 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14779/">CVE-2018-14779</cve>
	<cve impact="low" cvss3="2.2/CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-14780/">CVE-2018-14780</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481585" comment="libykcs11-1-1.6.2-4.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481586" comment="libykcs11-devel-1.6.2-4.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481587" comment="libykpiv-devel-1.6.2-4.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481588" comment="libykpiv1-1.6.2-4.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481589" comment="yubico-piv-tool-1.6.2-4.30 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137131" version="1" class="patch">
	<metadata>
		<title>libzip-devel-1.5.1-1.9 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-0421" ref_url="https://www.suse.com/security/cve/CVE-2011-0421/" source="CVE"/>
		<reference ref_id="CVE-2012-1162" ref_url="https://www.suse.com/security/cve/CVE-2012-1162/" source="CVE"/>
		<reference ref_id="CVE-2012-1163" ref_url="https://www.suse.com/security/cve/CVE-2012-1163/" source="CVE"/>
		<reference ref_id="CVE-2015-2331" ref_url="https://www.suse.com/security/cve/CVE-2015-2331/" source="CVE"/>
		<reference ref_id="CVE-2017-12858" ref_url="https://www.suse.com/security/cve/CVE-2017-12858/" source="CVE"/>
		<reference ref_id="CVE-2017-14107" ref_url="https://www.suse.com/security/cve/CVE-2017-14107/" source="CVE"/>
		<description>
These are all security issues fixed in the libzip-devel-1.5.1-1.9 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0421/">CVE-2011-0421</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1162/">CVE-2012-1162</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1163/">CVE-2012-1163</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2331/">CVE-2015-2331</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12858/">CVE-2017-12858</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14107/">CVE-2017-14107</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480830" comment="libzip-devel-1.5.1-1.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480831" comment="libzip5-1.5.1-1.9 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137132" version="1" class="patch">
	<metadata>
		<title>libzmq5-4.2.3-3.3.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-7202" ref_url="https://www.suse.com/security/cve/CVE-2014-7202/" source="CVE"/>
		<reference ref_id="CVE-2014-7203" ref_url="https://www.suse.com/security/cve/CVE-2014-7203/" source="CVE"/>
		<reference ref_id="CVE-2014-9721" ref_url="https://www.suse.com/security/cve/CVE-2014-9721/" source="CVE"/>
		<reference ref_id="CVE-2019-6250" ref_url="https://www.suse.com/security/cve/CVE-2019-6250/" source="CVE"/>
		<description>
These are all security issues fixed in the libzmq5-4.2.3-3.3.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7202/">CVE-2014-7202</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7203/">CVE-2014-7203</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-9721/">CVE-2014-9721</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6250/">CVE-2019-6250</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481590" comment="libzmq5-4.2.3-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481591" comment="zeromq-devel-4.2.3-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137133" version="1" class="patch">
	<metadata>
		<title>libzypp-17.11.4-1.8 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-7435" ref_url="https://www.suse.com/security/cve/CVE-2017-7435/" source="CVE"/>
		<reference ref_id="CVE-2017-7436" ref_url="https://www.suse.com/security/cve/CVE-2017-7436/" source="CVE"/>
		<reference ref_id="CVE-2017-9269" ref_url="https://www.suse.com/security/cve/CVE-2017-9269/" source="CVE"/>
		<reference ref_id="CVE-2018-7685" ref_url="https://www.suse.com/security/cve/CVE-2018-7685/" source="CVE"/>
		<description>
These are all security issues fixed in the libzypp-17.11.4-1.8 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7435/">CVE-2017-7435</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7436/">CVE-2017-7436</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2017-9269/">CVE-2017-9269</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-7685/">CVE-2018-7685</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481592" comment="libzypp-17.11.4-1.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481593" comment="libzypp-devel-17.11.4-1.8 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137134" version="1" class="patch">
	<metadata>
		<title>libzzip-0-13-0.13.69-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-5974" ref_url="https://www.suse.com/security/cve/CVE-2017-5974/" source="CVE"/>
		<reference ref_id="CVE-2017-5975" ref_url="https://www.suse.com/security/cve/CVE-2017-5975/" source="CVE"/>
		<reference ref_id="CVE-2017-5976" ref_url="https://www.suse.com/security/cve/CVE-2017-5976/" source="CVE"/>
		<reference ref_id="CVE-2017-5977" ref_url="https://www.suse.com/security/cve/CVE-2017-5977/" source="CVE"/>
		<reference ref_id="CVE-2017-5978" ref_url="https://www.suse.com/security/cve/CVE-2017-5978/" source="CVE"/>
		<reference ref_id="CVE-2017-5979" ref_url="https://www.suse.com/security/cve/CVE-2017-5979/" source="CVE"/>
		<reference ref_id="CVE-2017-5981" ref_url="https://www.suse.com/security/cve/CVE-2017-5981/" source="CVE"/>
		<reference ref_id="CVE-2018-17828" ref_url="https://www.suse.com/security/cve/CVE-2018-17828/" source="CVE"/>
		<reference ref_id="CVE-2018-6381" ref_url="https://www.suse.com/security/cve/CVE-2018-6381/" source="CVE"/>
		<reference ref_id="CVE-2018-6484" ref_url="https://www.suse.com/security/cve/CVE-2018-6484/" source="CVE"/>
		<reference ref_id="CVE-2018-6540" ref_url="https://www.suse.com/security/cve/CVE-2018-6540/" source="CVE"/>
		<reference ref_id="CVE-2018-6542" ref_url="https://www.suse.com/security/cve/CVE-2018-6542/" source="CVE"/>
		<reference ref_id="CVE-2018-7725" ref_url="https://www.suse.com/security/cve/CVE-2018-7725/" source="CVE"/>
		<reference ref_id="CVE-2018-7726" ref_url="https://www.suse.com/security/cve/CVE-2018-7726/" source="CVE"/>
		<description>
These are all security issues fixed in the libzzip-0-13-0.13.69-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5974/">CVE-2017-5974</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5975/">CVE-2017-5975</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5976/">CVE-2017-5976</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5977/">CVE-2017-5977</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5978/">CVE-2017-5978</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5979/">CVE-2017-5979</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5981/">CVE-2017-5981</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-17828/">CVE-2018-17828</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6381/">CVE-2018-6381</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6484/">CVE-2018-6484</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6540/">CVE-2018-6540</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6542/">CVE-2018-6542</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7725/">CVE-2018-7725</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7726/">CVE-2018-7726</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481594" comment="libzzip-0-13-0.13.69-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481595" comment="zziplib-devel-0.13.69-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137135" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1123043" ref_url="https://bugzilla.suse.com/1123043" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6706" ref_url="https://www.suse.com/security/cve/CVE-2019-6706/" source="CVE"/>
		<description>
This update for lua53 fixes the following issues:

Security issue fixed:

- CVE-2019-6706: Fixed a use-after-free bug in the lua_upvaluejoin function of lapi.c (bsc#1123043)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-06"/>
	<updated date="2019-02-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1123043">SUSE bug 1123043</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6706/">CVE-2019-6706</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708517" comment="liblua5_3-5-5.3.4-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490512" comment="liblua5_3-5-32bit-5.3.4-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782421" comment="lua53-5.3.4-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782422" comment="lua53-devel-5.3.4-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137136" version="1" class="patch">
	<metadata>
		<title>mailx-12.5-1.87 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2004-2771" ref_url="https://www.suse.com/security/cve/CVE-2004-2771/" source="CVE"/>
		<reference ref_id="CVE-2014-7844" ref_url="https://www.suse.com/security/cve/CVE-2014-7844/" source="CVE"/>
		<description>
These are all security issues fixed in the mailx-12.5-1.87 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2004-2771/">CVE-2004-2771</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-7844/">CVE-2014-7844</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480839" comment="mailx-12.5-1.87 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137137" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1108752" ref_url="https://bugzilla.suse.com/1108752" source="BUGZILLA"/>
		<reference ref_id="1108756" ref_url="https://bugzilla.suse.com/1108756" source="BUGZILLA"/>
		<reference ref_id="1108757" ref_url="https://bugzilla.suse.com/1108757" source="BUGZILLA"/>
		<reference ref_id="1108761" ref_url="https://bugzilla.suse.com/1108761" source="BUGZILLA"/>
		<reference ref_id="1108762" ref_url="https://bugzilla.suse.com/1108762" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16741" ref_url="https://www.suse.com/security/cve/CVE-2018-16741/" source="CVE"/>
		<reference ref_id="CVE-2018-16742" ref_url="https://www.suse.com/security/cve/CVE-2018-16742/" source="CVE"/>
		<reference ref_id="CVE-2018-16743" ref_url="https://www.suse.com/security/cve/CVE-2018-16743/" source="CVE"/>
		<reference ref_id="CVE-2018-16744" ref_url="https://www.suse.com/security/cve/CVE-2018-16744/" source="CVE"/>
		<reference ref_id="CVE-2018-16745" ref_url="https://www.suse.com/security/cve/CVE-2018-16745/" source="CVE"/>
		<description>
This update for mgetty fixes the following issues:

- CVE-2018-16741: The function do_activate() did not properly sanitize shell
  metacharacters to prevent command injection (bsc#1108752).
- CVE-2018-16745: The mail_to parameter was not sanitized, leading to a buffer
  overflow if long untrusted input reached it (bsc#1108756).
- CVE-2018-16744: The mail_to parameter was not sanitized, leading to command
  injection if untrusted input reached reach it (bsc#1108757).
- CVE-2018-16742: Prevent stack-based buffer overflow that could have been
  triggered via a command-line parameter (bsc#1108762).
- CVE-2018-16743: The command-line parameter username wsa passed unsanitized to
  strcpy(), which could have caused a stack-based buffer overflow (bsc#1108761).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-09-27"/>
	<updated date="2018-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1108752">SUSE bug 1108752</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108756">SUSE bug 1108756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108757">SUSE bug 1108757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108761">SUSE bug 1108761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108762">SUSE bug 1108762</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16741/">CVE-2018-16741</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16742/">CVE-2018-16742</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16743/">CVE-2018-16743</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16744/">CVE-2018-16744</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16745/">CVE-2018-16745</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789709" comment="g3utils-1.1.37-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789710" comment="mgetty-1.1.37-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137138" version="1" class="patch">
	<metadata>
		<title>minicom-2.7.1-1.19 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-7467" ref_url="https://www.suse.com/security/cve/CVE-2017-7467/" source="CVE"/>
		<description>
These are all security issues fixed in the minicom-2.7.1-1.19 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7467/">CVE-2017-7467</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480840" comment="minicom-2.7.1-1.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480841" comment="minicom-lang-2.7.1-1.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137139" version="1" class="patch">
	<metadata>
		<title>mozilla-nspr-32bit-4.20-3.3.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-1545" ref_url="https://www.suse.com/security/cve/CVE-2014-1545/" source="CVE"/>
		<reference ref_id="CVE-2015-7183" ref_url="https://www.suse.com/security/cve/CVE-2015-7183/" source="CVE"/>
		<description>
These are all security issues fixed in the mozilla-nspr-32bit-4.20-3.3.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-1545/">CVE-2014-1545</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7183/">CVE-2015-7183</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481597" comment="mozilla-nspr-4.20-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481598" comment="mozilla-nspr-32bit-4.20-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481599" comment="mozilla-nspr-devel-4.20-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137140" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1097410" ref_url="https://bugzilla.suse.com/1097410" source="BUGZILLA"/>
		<reference ref_id="1106873" ref_url="https://bugzilla.suse.com/1106873" source="BUGZILLA"/>
		<reference ref_id="1119069" ref_url="https://bugzilla.suse.com/1119069" source="BUGZILLA"/>
		<reference ref_id="1119105" ref_url="https://bugzilla.suse.com/1119105" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-0495" ref_url="https://www.suse.com/security/cve/CVE-2018-0495/" source="CVE"/>
		<reference ref_id="CVE-2018-12384" ref_url="https://www.suse.com/security/cve/CVE-2018-12384/" source="CVE"/>
		<reference ref_id="CVE-2018-12404" ref_url="https://www.suse.com/security/cve/CVE-2018-12404/" source="CVE"/>
		<reference ref_id="CVE-2018-12405" ref_url="https://www.suse.com/security/cve/CVE-2018-12405/" source="CVE"/>
		<reference ref_id="CVE-2018-17466" ref_url="https://www.suse.com/security/cve/CVE-2018-17466/" source="CVE"/>
		<reference ref_id="CVE-2018-18492" ref_url="https://www.suse.com/security/cve/CVE-2018-18492/" source="CVE"/>
		<reference ref_id="CVE-2018-18493" ref_url="https://www.suse.com/security/cve/CVE-2018-18493/" source="CVE"/>
		<reference ref_id="CVE-2018-18494" ref_url="https://www.suse.com/security/cve/CVE-2018-18494/" source="CVE"/>
		<reference ref_id="CVE-2018-18498" ref_url="https://www.suse.com/security/cve/CVE-2018-18498/" source="CVE"/>
		<description>
This update for MozillaFirefox, mozilla-nss and mozilla-nspr fixes the following issues:

Issues fixed in MozillaFirefox:

- Update to Firefox ESR 60.4 (bsc#1119105)
- CVE-2018-17466: Fixed a buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11
- CVE-2018-18492: Fixed a use-after-free with select element
- CVE-2018-18493: Fixed a buffer overflow in accelerated 2D canvas with Skia
- CVE-2018-18494: Fixed a Same-origin policy violation using location attribute and performance.getEntries
  to steal cross-origin URLs
- CVE-2018-18498: Fixed a integer overflow when calculating buffer sizes for images
- CVE-2018-12405: Fixed a few memory safety bugs

Issues fixed in mozilla-nss:

- Update to NSS 3.40.1 (bsc#1119105)
- CVE-2018-12404: Fixed a cache side-channel variant of the Bleichenbacher attack (bsc#1119069)
- CVE-2018-12384: Fixed an issue in the SSL handshake. NSS responded to an
  SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. (bsc#1106873)
- CVE-2018-0495: Fixed a memory-cache side-channel attack with ECDSA signatures (bsc#1097410)
- Fixed a decryption failure during FFDHE key exchange
- Various security fixes in the ASN.1 code

Issues fixed in mozilla-nspr:

- Update mozilla-nspr to 4.20 (bsc#1119105)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-21"/>
	<updated date="2018-12-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1097410">SUSE bug 1097410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106873">SUSE bug 1106873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119069">SUSE bug 1119069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119105">SUSE bug 1119105</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-0495/">CVE-2018-0495</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-12384/">CVE-2018-12384</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12404/">CVE-2018-12404</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12405/">CVE-2018-12405</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17466/">CVE-2018-17466</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18492/">CVE-2018-18492</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18493/">CVE-2018-18493</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18494/">CVE-2018-18494</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18498/">CVE-2018-18498</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708415" comment="mozilla-nspr-4.20-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489868" comment="mozilla-nspr-32bit-4.20-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789711" comment="mozilla-nspr-devel-4.20-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137141" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1119069" ref_url="https://bugzilla.suse.com/1119069" source="BUGZILLA"/>
		<reference ref_id="1120374" ref_url="https://bugzilla.suse.com/1120374" source="BUGZILLA"/>
		<reference ref_id="1122983" ref_url="https://bugzilla.suse.com/1122983" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12404" ref_url="https://www.suse.com/security/cve/CVE-2018-12404/" source="CVE"/>
		<reference ref_id="CVE-2018-18500" ref_url="https://www.suse.com/security/cve/CVE-2018-18500/" source="CVE"/>
		<reference ref_id="CVE-2018-18501" ref_url="https://www.suse.com/security/cve/CVE-2018-18501/" source="CVE"/>
		<reference ref_id="CVE-2018-18505" ref_url="https://www.suse.com/security/cve/CVE-2018-18505/" source="CVE"/>
		<description>
This update for MozillaFirefox, mozilla-nss fixes the following issues:

Security issues fixed:

- CVE-2018-18500: Fixed a use-after-free parsing HTML5 stream (bsc#1122983).
- CVE-2018-18501: Fixed multiple memory safety bugs (bsc#1122983).
- CVE-2018-18505: Fixed a privilege escalation through IPC channel messages (bsc#1122983).
- CVE-2018-12404: Cache side-channel variant of the Bleichenbacher attack (bsc#1119069).

Non-security issue fixed:

- Update to MozillaFirefox ESR 60.5.0
- Update to mozilla-nss 3.41.1
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-06"/>
	<updated date="2019-02-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1119069">SUSE bug 1119069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120374">SUSE bug 1120374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122983">SUSE bug 1122983</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12404/">CVE-2018-12404</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18500/">CVE-2018-18500</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18501/">CVE-2018-18501</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18505/">CVE-2018-18505</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708534" comment="libfreebl3-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490579" comment="libfreebl3-32bit-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708535" comment="libsoftokn3-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490583" comment="libsoftokn3-32bit-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708536" comment="mozilla-nss-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490587" comment="mozilla-nss-32bit-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708537" comment="mozilla-nss-certs-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490589" comment="mozilla-nss-certs-32bit-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789712" comment="mozilla-nss-devel-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789713" comment="mozilla-nss-sysinit-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789714" comment="mozilla-nss-tools-3.41.1-3.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137142" version="1" class="patch">
	<metadata>
		<title>mutt-1.10.1-3.3.4 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1094717" ref_url="https://bugzilla.suse.com/1094717" source="BUGZILLA"/>
		<reference ref_id="1101428" ref_url="https://bugzilla.suse.com/1101428" source="BUGZILLA"/>
		<reference ref_id="1101566" ref_url="https://bugzilla.suse.com/1101566" source="BUGZILLA"/>
		<reference ref_id="1101567" ref_url="https://bugzilla.suse.com/1101567" source="BUGZILLA"/>
		<reference ref_id="1101568" ref_url="https://bugzilla.suse.com/1101568" source="BUGZILLA"/>
		<reference ref_id="1101569" ref_url="https://bugzilla.suse.com/1101569" source="BUGZILLA"/>
		<reference ref_id="1101570" ref_url="https://bugzilla.suse.com/1101570" source="BUGZILLA"/>
		<reference ref_id="1101571" ref_url="https://bugzilla.suse.com/1101571" source="BUGZILLA"/>
		<reference ref_id="1101573" ref_url="https://bugzilla.suse.com/1101573" source="BUGZILLA"/>
		<reference ref_id="1101576" ref_url="https://bugzilla.suse.com/1101576" source="BUGZILLA"/>
		<reference ref_id="1101577" ref_url="https://bugzilla.suse.com/1101577" source="BUGZILLA"/>
		<reference ref_id="1101578" ref_url="https://bugzilla.suse.com/1101578" source="BUGZILLA"/>
		<reference ref_id="1101581" ref_url="https://bugzilla.suse.com/1101581" source="BUGZILLA"/>
		<reference ref_id="1101582" ref_url="https://bugzilla.suse.com/1101582" source="BUGZILLA"/>
		<reference ref_id="1101583" ref_url="https://bugzilla.suse.com/1101583" source="BUGZILLA"/>
		<reference ref_id="1101588" ref_url="https://bugzilla.suse.com/1101588" source="BUGZILLA"/>
		<reference ref_id="1101589" ref_url="https://bugzilla.suse.com/1101589" source="BUGZILLA"/>
		<reference ref_id="CVE-2014-9116" ref_url="https://www.suse.com/security/cve/CVE-2014-9116/" source="CVE"/>
		<reference ref_id="CVE-2018-14349" ref_url="https://www.suse.com/security/cve/CVE-2018-14349/" source="CVE"/>
		<reference ref_id="CVE-2018-14350" ref_url="https://www.suse.com/security/cve/CVE-2018-14350/" source="CVE"/>
		<reference ref_id="CVE-2018-14351" ref_url="https://www.suse.com/security/cve/CVE-2018-14351/" source="CVE"/>
		<reference ref_id="CVE-2018-14352" ref_url="https://www.suse.com/security/cve/CVE-2018-14352/" source="CVE"/>
		<reference ref_id="CVE-2018-14353" ref_url="https://www.suse.com/security/cve/CVE-2018-14353/" source="CVE"/>
		<reference ref_id="CVE-2018-14354" ref_url="https://www.suse.com/security/cve/CVE-2018-14354/" source="CVE"/>
		<reference ref_id="CVE-2018-14355" ref_url="https://www.suse.com/security/cve/CVE-2018-14355/" source="CVE"/>
		<reference ref_id="CVE-2018-14356" ref_url="https://www.suse.com/security/cve/CVE-2018-14356/" source="CVE"/>
		<reference ref_id="CVE-2018-14357" ref_url="https://www.suse.com/security/cve/CVE-2018-14357/" source="CVE"/>
		<reference ref_id="CVE-2018-14358" ref_url="https://www.suse.com/security/cve/CVE-2018-14358/" source="CVE"/>
		<reference ref_id="CVE-2018-14359" ref_url="https://www.suse.com/security/cve/CVE-2018-14359/" source="CVE"/>
		<reference ref_id="CVE-2018-14360" ref_url="https://www.suse.com/security/cve/CVE-2018-14360/" source="CVE"/>
		<reference ref_id="CVE-2018-14361" ref_url="https://www.suse.com/security/cve/CVE-2018-14361/" source="CVE"/>
		<reference ref_id="CVE-2018-14362" ref_url="https://www.suse.com/security/cve/CVE-2018-14362/" source="CVE"/>
		<reference ref_id="CVE-2018-14363" ref_url="https://www.suse.com/security/cve/CVE-2018-14363/" source="CVE"/>
		<description>
This update for mutt fixes the following issues:

Security issues fixed:

- bsc#1101428: Mutt 1.10.1 security release update.
- CVE-2018-14351: Fix imap/command.c that mishandles long IMAP status mailbox literal count size (bsc#1101583).
- CVE-2018-14353: Fix imap_quote_string in imap/util.c that has an integer underflow (bsc#1101581).
- CVE-2018-14362: Fix pop.c that does not forbid characters that may have unsafe interaction with message-cache pathnames (bsc#1101567).
- CVE-2018-14354: Fix arbitrary command execution from remote IMAP servers via backquote characters (bsc#1101578).
- CVE-2018-14352: Fix imap_quote_string in imap/util.c that does not leave room for quote characters (bsc#1101582).
- CVE-2018-14356: Fix pop.c that mishandles a zero-length UID (bsc#1101576).
- CVE-2018-14355: Fix imap/util.c that mishandles '..' directory traversal in a mailbox name (bsc#1101577).
- CVE-2018-14349: Fix imap/command.c that mishandles a NO response without a message (bsc#1101589).
- CVE-2018-14350: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along INTERNALDATE field (bsc#1101588).
- CVE-2018-14363: Fix newsrc.c that does not properlyrestrict '/' characters that may have unsafe interaction with cache pathnames (bsc#1101566).
- CVE-2018-14359: Fix buffer overflow via base64 data (bsc#1101570).
- CVE-2018-14358: Fix imap/message.c that has a stack-based buffer overflow for a FETCH response with along RFC822.SIZE field (bsc#1101571).
- CVE-2018-14360: Fix nntp_add_group in newsrc.c that has a stack-based buffer overflow because of incorrect sscanf usage (bsc#1101569).
- CVE-2018-14357: Fix that remote IMAP servers are allowed to execute arbitrary commands via backquote characters (bsc#1101573).
- CVE-2018-14361: Fix that nntp.c proceeds even if memory allocation fails for messages data (bsc#1101568).

Bug fixes:

- mutt reports as neomutt and incorrect version (bsc#1094717)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-27"/>
	<updated date="2018-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1094717">SUSE bug 1094717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101428">SUSE bug 1101428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101566">SUSE bug 1101566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101567">SUSE bug 1101567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101568">SUSE bug 1101568</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101569">SUSE bug 1101569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101570">SUSE bug 1101570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101571">SUSE bug 1101571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101573">SUSE bug 1101573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101576">SUSE bug 1101576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101577">SUSE bug 1101577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101578">SUSE bug 1101578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101581">SUSE bug 1101581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101582">SUSE bug 1101582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101583">SUSE bug 1101583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101588">SUSE bug 1101588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101589">SUSE bug 1101589</bugzilla>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9116/">CVE-2014-9116</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14349/">CVE-2018-14349</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-14350/">CVE-2018-14350</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-14351/">CVE-2018-14351</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-14352/">CVE-2018-14352</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-14353/">CVE-2018-14353</cve>
	<cve impact="critical" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14354/">CVE-2018-14354</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-14355/">CVE-2018-14355</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14356/">CVE-2018-14356</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-14357/">CVE-2018-14357</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-14358/">CVE-2018-14358</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-14359/">CVE-2018-14359</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14360/">CVE-2018-14360</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14361/">CVE-2018-14361</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14362/">CVE-2018-14362</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-14363/">CVE-2018-14363</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789715" comment="mutt-1.10.1-3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489446" comment="mutt-doc-1.10.1-3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489447" comment="mutt-lang-1.10.1-3.3.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137143" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1050305" ref_url="https://bugzilla.suse.com/1050305" source="BUGZILLA"/>
		<reference ref_id="1088263" ref_url="https://bugzilla.suse.com/1088263" source="BUGZILLA"/>
		<reference ref_id="1091606" ref_url="https://bugzilla.suse.com/1091606" source="BUGZILLA"/>
		<reference ref_id="1094779" ref_url="https://bugzilla.suse.com/1094779" source="BUGZILLA"/>
		<reference ref_id="1095601" ref_url="https://bugzilla.suse.com/1095601" source="BUGZILLA"/>
		<reference ref_id="1095639" ref_url="https://bugzilla.suse.com/1095639" source="BUGZILLA"/>
		<reference ref_id="1096360" ref_url="https://bugzilla.suse.com/1096360" source="BUGZILLA"/>
		<reference ref_id="1098891" ref_url="https://bugzilla.suse.com/1098891" source="BUGZILLA"/>
		<reference ref_id="1104876" ref_url="https://bugzilla.suse.com/1104876" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10583" ref_url="https://www.suse.com/security/cve/CVE-2018-10583/" source="CVE"/>
		<description>


This update for LibreOffice, libepubgen, liblangtag, libmwaw, libnumbertext, libstaroffice, libwps, myspell-dictionaries, xmlsec1 fixes the following issues:

LibreOffice was updated to 6.1.3.2 (fate#326624) and contains new features and lots of bugfixes:

The full changelog can be found on:

        https://wiki.documentfoundation.org/ReleaseNotes/6.1

Bugfixes:

- bsc#1095639 Exporting to PPTX results in vertical labels being shown horizontally
- bsc#1098891 Table in PPTX misplaced and partly blue
- bsc#1088263 Labels in chart change (from white and other colors) to black when saving as PPTX
- bsc#1095601 Exporting to PPTX shifts arrow shapes quite a bit

- Add more translations:
  * Belarusian
  * Bodo
  * Dogri
  * Frisian
  * Gaelic
  * Paraguayan_Guaran
  * Upper_Sorbian
  * Konkani
  * Kashmiri
  * Luxembourgish
  * Monglolian
  * Manipuri
  * Burnese
  * Occitan
  * Kinyarwanda
  * Santali
  * Sanskrit
  * Sindhi
  * Sidamo
  * Tatar
  * Uzbek
  * Upper Sorbian
  * Venetian
  * Amharic
  * Asturian
  * Tibetian
  * Bosnian
  * English GB
  * English ZA
  * Indonesian
  * Icelandic
  * Georgian
  * Khmer
  * Lao
  * Macedonian
  * Nepali
  * Oromo
  * Albanian
  * Tajik
  * Uyghur
  * Vietnamese
  * Kurdish

- Try to build all languages see bsc#1096360
- Make sure to install the KDE5/Qt5 UI/filepicker
- Try to implement safeguarding to avoid bsc#1050305
- Disable base-drivers-mysql as it needs mysqlcppcon that is only
  for mysql and not mariadb, causes issues bsc#1094779
  * Users can still connect using jdbc/odbc
- Fix java detection on machines with too many cpus

- CVE-2018-10583: An information disclosure vulnerability occured when LibreOffice automatically processed and initiated an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document. (bsc#1091606)

libepubgen was updated to 0.1.1:

- Avoid &lt;div&gt; inside &lt;p&gt; or &lt;span&gt;.
- Avoid writin vertical-align attribute without a value.
- Fix generation of invalid XHTML when there is a link starting at the beginning of a footnote.
- Handle relative width for images.
- Fixed layout: write chapter names to improve navigation.
- Support writing mode.
- Start a new HTML file at every page span in addition to the splits induced by the chosen split method. This is to ensure that specified writing mode works correctly, as it is HTML &lt;body&gt; attribute.

liblangtag was updated to 0.6.2:

- use standard function
- fix leak in test

libmwaw was updated to 0.3.14:

- Support MS Multiplan 1.1 files

libnumbertext was update to 1.0.5:

- Various fixes in numerical calculations and issues reported on libreoffice tracker

libstaroffice was updated to 0.0.6:

- retrieve some StarMath's formula,
- retrieve some charts as graphic,
- retrieve some fields in sda/sdc/sdp text-boxes,
- .sdw: retrieve more attachments.

libwps was updated to 0.4.9:

- QuattroPro: add parser to .wb3 files
- Multiplan: add parser to DOS v1-v3 files
- charts: try to retrieve charts in .wk*, .wq* files
- QuattroPro: add parser to .wb[12] files

myspell-dictionaries was updated to 20181025:

- Turkish dictionary added
- Updated French dictionary

xmlsec1 was updated to 1.2.26:

- Added xmlsec-mscng module based on Microsoft Cryptography API: Next Generation
- Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R 34.10-2001 in xmlsec-mscrypto

		</description>
<advisory from="security@suse.de">
	<issued date="2018-11-08"/>
	<updated date="2018-11-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1050305">SUSE bug 1050305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088263">SUSE bug 1088263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091606">SUSE bug 1091606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094779">SUSE bug 1094779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095601">SUSE bug 1095601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095639">SUSE bug 1095639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096360">SUSE bug 1096360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098891">SUSE bug 1098891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104876">SUSE bug 1104876</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10583/">CVE-2018-10583</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009489726" comment="myspell-de-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489727" comment="myspell-de_DE-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789716" comment="myspell-dictionaries-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489729" comment="myspell-en-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489730" comment="myspell-en_US-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489731" comment="myspell-es-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489732" comment="myspell-es_ES-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489733" comment="myspell-hu_HU-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789717" comment="myspell-lightproof-en-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789718" comment="myspell-lightproof-hu_HU-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789719" comment="myspell-lightproof-pt_BR-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789720" comment="myspell-lightproof-ru_RU-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489738" comment="myspell-nb_NO-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489739" comment="myspell-no-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489740" comment="myspell-pt_BR-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489741" comment="myspell-ro-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489742" comment="myspell-ro_RO-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489743" comment="myspell-ru_RU-20181025-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137144" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1103320" ref_url="https://bugzilla.suse.com/1103320" source="BUGZILLA"/>
		<reference ref_id="1115929" ref_url="https://bugzilla.suse.com/1115929" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19211" ref_url="https://www.suse.com/security/cve/CVE-2018-19211/" source="CVE"/>
		<description>
This update for ncurses fixes the following issues:

Security issue fixed:

- CVE-2018-19211: Fixed denial of service issue that was triggered by a NULL pointer dereference at function _nc_parse_entry (bsc#1115929).

Non-security issue fixed:

- Remove scree.xterm from terminfo data base as with this screen uses fallback TERM=screen (bsc#1103320). 
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-06"/>
	<updated date="2018-12-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1103320">SUSE bug 1103320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115929">SUSE bug 1115929</bugzilla>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19211/">CVE-2018-19211</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708402" comment="libncurses6-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489787" comment="libncurses6-32bit-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789721" comment="ncurses-devel-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708403" comment="ncurses-utils-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789722" comment="tack-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708404" comment="terminfo-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708405" comment="terminfo-base-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789723" comment="terminfo-iterm-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789724" comment="terminfo-screen-6.1-5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137145" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1086777" ref_url="https://bugzilla.suse.com/1086777" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-8975" ref_url="https://www.suse.com/security/cve/CVE-2018-8975/" source="CVE"/>
		<description>
This update for netpbm fixes the following issues:

- CVE-2018-8975: The pm_mallocarray2 function allowed remote attackers to cause
  a denial of service (heap-based buffer over-read) via a crafted image file
  (bsc#1086777).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-03"/>
	<updated date="2019-04-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1086777">SUSE bug 1086777</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8975/">CVE-2018-8975</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789725" comment="libnetpbm11-10.80.1-3.3.36 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789726" comment="netpbm-10.80.1-3.3.36 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137146" version="1" class="patch">
	<metadata>
		<title>opensc-0.19.0-1.14 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-16391" ref_url="https://www.suse.com/security/cve/CVE-2018-16391/" source="CVE"/>
		<reference ref_id="CVE-2018-16392" ref_url="https://www.suse.com/security/cve/CVE-2018-16392/" source="CVE"/>
		<reference ref_id="CVE-2018-16393" ref_url="https://www.suse.com/security/cve/CVE-2018-16393/" source="CVE"/>
		<reference ref_id="CVE-2018-16418" ref_url="https://www.suse.com/security/cve/CVE-2018-16418/" source="CVE"/>
		<reference ref_id="CVE-2018-16419" ref_url="https://www.suse.com/security/cve/CVE-2018-16419/" source="CVE"/>
		<reference ref_id="CVE-2018-16420" ref_url="https://www.suse.com/security/cve/CVE-2018-16420/" source="CVE"/>
		<reference ref_id="CVE-2018-16421" ref_url="https://www.suse.com/security/cve/CVE-2018-16421/" source="CVE"/>
		<reference ref_id="CVE-2018-16422" ref_url="https://www.suse.com/security/cve/CVE-2018-16422/" source="CVE"/>
		<reference ref_id="CVE-2018-16423" ref_url="https://www.suse.com/security/cve/CVE-2018-16423/" source="CVE"/>
		<reference ref_id="CVE-2018-16424" ref_url="https://www.suse.com/security/cve/CVE-2018-16424/" source="CVE"/>
		<reference ref_id="CVE-2018-16425" ref_url="https://www.suse.com/security/cve/CVE-2018-16425/" source="CVE"/>
		<reference ref_id="CVE-2018-16426" ref_url="https://www.suse.com/security/cve/CVE-2018-16426/" source="CVE"/>
		<reference ref_id="CVE-2018-16427" ref_url="https://www.suse.com/security/cve/CVE-2018-16427/" source="CVE"/>
		<description>
These are all security issues fixed in the opensc-0.19.0-1.14 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16391/">CVE-2018-16391</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16392/">CVE-2018-16392</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16393/">CVE-2018-16393</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16418/">CVE-2018-16418</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16419/">CVE-2018-16419</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16420/">CVE-2018-16420</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16421/">CVE-2018-16421</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16422/">CVE-2018-16422</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16423/">CVE-2018-16423</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16424/">CVE-2018-16424</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16425/">CVE-2018-16425</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16426/">CVE-2018-16426</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16427/">CVE-2018-16427</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481603" comment="opensc-0.19.0-1.14 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137147" version="1" class="patch">
	<metadata>
		<title>openslp-2.0.0-6.3.1 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1090638" ref_url="https://bugzilla.suse.com/1090638" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17833" ref_url="https://www.suse.com/security/cve/CVE-2017-17833/" source="CVE"/>
		<description>
This update for openslp fixes the following issues:

- CVE-2017-17833: Prevent heap-related memory corruption issue which may have
  manifested itself as a denial-of-service or a remote code-execution
  vulnerability (bsc#1090638)
- Prevent out of bounds reads in message parsing
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-09"/>
	<updated date="2018-07-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1090638">SUSE bug 1090638</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-17833/">CVE-2017-17833</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708376" comment="openslp-2.0.0-6.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489372" comment="openslp-32bit-2.0.0-6.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789727" comment="openslp-devel-2.0.0-6.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137148" version="1" class="patch">
	<metadata>
		<title>openssh-7.9p1-4.7 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-8325" ref_url="https://www.suse.com/security/cve/CVE-2015-8325/" source="CVE"/>
		<reference ref_id="CVE-2016-0777" ref_url="https://www.suse.com/security/cve/CVE-2016-0777/" source="CVE"/>
		<reference ref_id="CVE-2016-0778" ref_url="https://www.suse.com/security/cve/CVE-2016-0778/" source="CVE"/>
		<reference ref_id="CVE-2016-10009" ref_url="https://www.suse.com/security/cve/CVE-2016-10009/" source="CVE"/>
		<reference ref_id="CVE-2016-10010" ref_url="https://www.suse.com/security/cve/CVE-2016-10010/" source="CVE"/>
		<reference ref_id="CVE-2016-10011" ref_url="https://www.suse.com/security/cve/CVE-2016-10011/" source="CVE"/>
		<reference ref_id="CVE-2016-10012" ref_url="https://www.suse.com/security/cve/CVE-2016-10012/" source="CVE"/>
		<reference ref_id="CVE-2016-6210" ref_url="https://www.suse.com/security/cve/CVE-2016-6210/" source="CVE"/>
		<reference ref_id="CVE-2016-6515" ref_url="https://www.suse.com/security/cve/CVE-2016-6515/" source="CVE"/>
		<reference ref_id="CVE-2016-8858" ref_url="https://www.suse.com/security/cve/CVE-2016-8858/" source="CVE"/>
		<reference ref_id="CVE-2018-15473" ref_url="https://www.suse.com/security/cve/CVE-2018-15473/" source="CVE"/>
		<reference ref_id="CVE-2018-20685" ref_url="https://www.suse.com/security/cve/CVE-2018-20685/" source="CVE"/>
		<reference ref_id="CVE-2019-6109" ref_url="https://www.suse.com/security/cve/CVE-2019-6109/" source="CVE"/>
		<reference ref_id="CVE-2019-6110" ref_url="https://www.suse.com/security/cve/CVE-2019-6110/" source="CVE"/>
		<reference ref_id="CVE-2019-6111" ref_url="https://www.suse.com/security/cve/CVE-2019-6111/" source="CVE"/>
		<description>
These are all security issues fixed in the openssh-7.9p1-4.7 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8325/">CVE-2015-8325</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0777/">CVE-2016-0777</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0778/">CVE-2016-0778</cve>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-10009/">CVE-2016-10009</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10010/">CVE-2016-10010</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-10011/">CVE-2016-10011</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10012/">CVE-2016-10012</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6210/">CVE-2016-6210</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6515/">CVE-2016-6515</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8858/">CVE-2016-8858</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-15473/">CVE-2018-15473</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20685/">CVE-2018-20685</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6109/">CVE-2019-6109</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6110/">CVE-2019-6110</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-6111/">CVE-2019-6111</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481607" comment="openssh-7.9p1-4.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481608" comment="openssh-helpers-7.9p1-4.7 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137149" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1097158" ref_url="https://bugzilla.suse.com/1097158" source="BUGZILLA"/>
		<reference ref_id="1101470" ref_url="https://bugzilla.suse.com/1101470" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-0732" ref_url="https://www.suse.com/security/cve/CVE-2018-0732/" source="CVE"/>
		<description>
This update for openssl-1_1 to 1.1.0i fixes the following issues:

These security issues were fixed:

- CVE-2018-0732: During key agreement in a TLS handshake using a DH(E) based
  ciphersuite a malicious server could have sent a very large prime value to the
  client. This caused the client to spend an unreasonably long period of time
  generating a key for this prime resulting in a hang until the client has
  finished. This could be exploited in a Denial Of Service attack (bsc#1097158)
- Make problematic ECDSA sign addition length-invariant
- Add blinding to ECDSA and DSA signatures to protect against side channel attacks

These non-security issues were fixed:

- When unlocking a pass phrase protected PEM file or PKCS#8 container, we now
  allow empty (zero character) pass phrases.
- Certificate time validation (X509_cmp_time) enforces stricter compliance with
  RFC 5280. Fractional seconds and timezone offsets are no longer allowed.
- Fixed a text canonicalisation bug in CMS
- Add openssl(cli) Provide so the packages that require the openssl binary can
  require this instead of the new openssl meta package (bsc#1101470)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-09-30"/>
	<updated date="2018-09-30"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1097158">SUSE bug 1097158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101470">SUSE bug 1101470</bugzilla>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-0732/">CVE-2018-0732</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009489623" comment="libopenssl-devel-1.1.0i-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489628" comment="openssl-1.1.0i-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137150" version="1" class="patch">
	<metadata>
		<title>openvpn-2.4.3-5.3.19 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1090839" ref_url="https://bugzilla.suse.com/1090839" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-9336" ref_url="https://www.suse.com/security/cve/CVE-2018-9336/" source="CVE"/>
		<description>
This update for openvpn fixes the following issues:

- CVE-2018-9336: Fix potential double-free() in Interactive Service could lead to denial of service (bsc#1090839).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-05"/>
	<updated date="2018-07-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1090839">SUSE bug 1090839</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-9336/">CVE-2018-9336</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782434" comment="openvpn-2.4.3-5.3.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782435" comment="openvpn-auth-pam-plugin-2.4.3-5.3.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782436" comment="openvpn-devel-2.4.3-5.3.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137151" version="1" class="patch">
	<metadata>
		<title>opie-32bit-2.4-1.96 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-2489" ref_url="https://www.suse.com/security/cve/CVE-2011-2489/" source="CVE"/>
		<reference ref_id="CVE-2011-2490" ref_url="https://www.suse.com/security/cve/CVE-2011-2490/" source="CVE"/>
		<description>
These are all security issues fixed in the opie-32bit-2.4-1.96 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2489/">CVE-2011-2489</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2490/">CVE-2011-2490</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480857" comment="opie-32bit-2.4-1.96 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137152" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1114407" ref_url="https://bugzilla.suse.com/1114407" source="BUGZILLA"/>
		<reference ref_id="1124223" ref_url="https://bugzilla.suse.com/1124223" source="BUGZILLA"/>
		<reference ref_id="1125410" ref_url="https://bugzilla.suse.com/1125410" source="BUGZILLA"/>
		<reference ref_id="1126377" ref_url="https://bugzilla.suse.com/1126377" source="BUGZILLA"/>
		<reference ref_id="1131060" ref_url="https://bugzilla.suse.com/1131060" source="BUGZILLA"/>
		<reference ref_id="1131686" ref_url="https://bugzilla.suse.com/1131686" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3880" ref_url="https://www.suse.com/security/cve/CVE-2019-3880/" source="CVE"/>
		<description>
This update for samba fixes the following issues:

Security issue fixed:

- CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share (bsc#1131060).


ldb was updated to version 1.2.4 (bsc#1125410 bsc#1131686):

- Out of bound read in ldb_wildcard_compare
- Hold at most 10 outstanding paged result cookies
- Put 'results_store' into a doubly linked list
- Refuse to build Samba against a newer minor version of ldb


Non-security issues fixed:

- Fixed update-apparmor-samba-profile script after apparmor switched to using named profiles (bsc#1126377).
- Abide to the load_printers parameter in smb.conf (bsc#1124223).
- Provide the 32bit samba winbind PAM module and its dependend 32bit libraries.
  		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-25"/>
	<updated date="2019-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1114407">SUSE bug 1114407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124223">SUSE bug 1124223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125410">SUSE bug 1125410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126377">SUSE bug 1126377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131060">SUSE bug 1131060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131686">SUSE bug 1131686</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-3880/">CVE-2019-3880</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708425" comment="libp11-kit0-0.23.2-4.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489959" comment="libp11-kit0-32bit-0.23.2-4.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708428" comment="p11-kit-0.23.2-4.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789728" comment="p11-kit-devel-0.23.2-4.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789729" comment="p11-kit-nss-trust-0.23.2-4.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708429" comment="p11-kit-tools-0.23.2-4.2.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137153" version="1" class="patch">
	<metadata>
		<title>p7zip-16.02-5.10 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-1038" ref_url="https://www.suse.com/security/cve/CVE-2015-1038/" source="CVE"/>
		<reference ref_id="CVE-2016-2334" ref_url="https://www.suse.com/security/cve/CVE-2016-2334/" source="CVE"/>
		<reference ref_id="CVE-2016-2335" ref_url="https://www.suse.com/security/cve/CVE-2016-2335/" source="CVE"/>
		<reference ref_id="CVE-2016-9296" ref_url="https://www.suse.com/security/cve/CVE-2016-9296/" source="CVE"/>
		<reference ref_id="CVE-2017-17969" ref_url="https://www.suse.com/security/cve/CVE-2017-17969/" source="CVE"/>
		<description>
These are all security issues fixed in the p7zip-16.02-5.10 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-1038/">CVE-2015-1038</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2334/">CVE-2016-2334</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2335/">CVE-2016-2335</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9296/">CVE-2016-9296</cve>
	<cve impact="important" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17969/">CVE-2017-17969</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480858" comment="p7zip-16.02-5.10 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137154" version="1" class="patch">
	<metadata>
		<title>pam-1.3.0-6.6.1 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1115640" ref_url="https://bugzilla.suse.com/1115640" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17953" ref_url="https://www.suse.com/security/cve/CVE-2018-17953/" source="CVE"/>
		<description>
This update for pam fixes the following issue:

Security issue fixed:

- CVE-2018-17953: Fixed IP address and subnet handling of pam_access.so that was not honoured correctly when a single host was specified (bsc#1115640).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-03"/>
	<updated date="2018-12-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1115640">SUSE bug 1115640</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-17953/">CVE-2018-17953</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708401" comment="pam-1.3.0-6.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489783" comment="pam-32bit-1.3.0-6.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789730" comment="pam-devel-1.3.0-6.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489785" comment="pam-doc-1.3.0-6.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137155" version="1" class="patch">
	<metadata>
		<title>pam_krb5-2.4.13-1.36 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2008-3825" ref_url="https://www.suse.com/security/cve/CVE-2008-3825/" source="CVE"/>
		<reference ref_id="CVE-2009-1384" ref_url="https://www.suse.com/security/cve/CVE-2009-1384/" source="CVE"/>
		<description>
These are all security issues fixed in the pam_krb5-2.4.13-1.36 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3825/">CVE-2008-3825</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1384/">CVE-2009-1384</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480863" comment="pam_krb5-2.4.13-1.36 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480864" comment="pam_krb5-32bit-2.4.13-1.36 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137156" version="1" class="patch">
	<metadata>
		<title>pam_ssh-2.1-2.27 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-1273" ref_url="https://www.suse.com/security/cve/CVE-2009-1273/" source="CVE"/>
		<description>
These are all security issues fixed in the pam_ssh-2.1-2.27 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1273/">CVE-2009-1273</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480865" comment="pam_ssh-2.1-2.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480866" comment="pam_ssh-32bit-2.1-2.27 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137157" version="1" class="patch">
	<metadata>
		<title>pam_yubico-2.26-1.7 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-9275" ref_url="https://www.suse.com/security/cve/CVE-2018-9275/" source="CVE"/>
		<description>
These are all security issues fixed in the pam_yubico-2.26-1.7 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9275/">CVE-2018-9275</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480867" comment="pam_yubico-2.26-1.7 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137158" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1103877" ref_url="https://bugzilla.suse.com/1103877" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-15120" ref_url="https://www.suse.com/security/cve/CVE-2018-15120/" source="CVE"/>
		<description>
This update for pango fixes the following issues:

Security issue fixed:

- CVE-2018-15120: Fixed a denial of service when parsing emoji (bsc#1103877)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-09-20"/>
	<updated date="2018-09-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1103877">SUSE bug 1103877</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15120/">CVE-2018-15120</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789731" comment="libpango-1_0-0-1.40.14-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789732" comment="pango-devel-1.40.14-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789733" comment="typelib-1_0-Pango-1_0-1.40.14-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137159" version="1" class="patch">
	<metadata>
		<title>patch-2.7.6-3.5 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-4651" ref_url="https://www.suse.com/security/cve/CVE-2010-4651/" source="CVE"/>
		<reference ref_id="CVE-2015-1196" ref_url="https://www.suse.com/security/cve/CVE-2015-1196/" source="CVE"/>
		<reference ref_id="CVE-2016-10713" ref_url="https://www.suse.com/security/cve/CVE-2016-10713/" source="CVE"/>
		<reference ref_id="CVE-2018-1000156" ref_url="https://www.suse.com/security/cve/CVE-2018-1000156/" source="CVE"/>
		<reference ref_id="CVE-2018-6951" ref_url="https://www.suse.com/security/cve/CVE-2018-6951/" source="CVE"/>
		<description>
These are all security issues fixed in the patch-2.7.6-3.5 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4651/">CVE-2010-4651</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1196/">CVE-2015-1196</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-10713/">CVE-2016-10713</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000156/">CVE-2018-1000156</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6951/">CVE-2018-6951</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481616" comment="patch-2.7.6-3.5 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137160" version="1" class="patch">
	<metadata>
		<title>perl-5.26.1-7.6.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1114674" ref_url="https://bugzilla.suse.com/1114674" source="BUGZILLA"/>
		<reference ref_id="1114675" ref_url="https://bugzilla.suse.com/1114675" source="BUGZILLA"/>
		<reference ref_id="1114681" ref_url="https://bugzilla.suse.com/1114681" source="BUGZILLA"/>
		<reference ref_id="1114686" ref_url="https://bugzilla.suse.com/1114686" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-18311" ref_url="https://www.suse.com/security/cve/CVE-2018-18311/" source="CVE"/>
		<reference ref_id="CVE-2018-18312" ref_url="https://www.suse.com/security/cve/CVE-2018-18312/" source="CVE"/>
		<reference ref_id="CVE-2018-18313" ref_url="https://www.suse.com/security/cve/CVE-2018-18313/" source="CVE"/>
		<reference ref_id="CVE-2018-18314" ref_url="https://www.suse.com/security/cve/CVE-2018-18314/" source="CVE"/>
		<description>
This update for perl fixes the following issues:

Secuirty issues fixed:

- CVE-2018-18311: Fixed integer overflow with oversize environment (bsc#1114674).
- CVE-2018-18312: Fixed heap-buffer-overflow write / reg_node overrun (bsc#1114675).
- CVE-2018-18313: Fixed heap-buffer-overflow read if regex contains \0 chars (bsc#1114681).
- CVE-2018-18314: Fixed heap-buffer-overflow in regex (bsc#1114686).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-19"/>
	<updated date="2018-12-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1114674">SUSE bug 1114674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114675">SUSE bug 1114675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114681">SUSE bug 1114681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114686">SUSE bug 1114686</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18311/">CVE-2018-18311</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-18312/">CVE-2018-18312</cve>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18313/">CVE-2018-18313</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-18314/">CVE-2018-18314</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708409" comment="perl-5.26.1-7.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708410" comment="perl-base-5.26.1-7.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489857" comment="perl-base-32bit-5.26.1-7.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137161" version="1" class="patch">
	<metadata>
		<title>perl-Archive-Zip-1.60-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1099497" ref_url="https://bugzilla.suse.com/1099497" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10860" ref_url="https://www.suse.com/security/cve/CVE-2018-10860/" source="CVE"/>
		<description>
This update for perl-Archive-Zip fixes the following security issue:

- CVE-2018-10860: Prevent directory traversal caused by not properly sanitizing
  paths while extracting zip files. An attacker able to provide a specially
  crafted archive for processing could have used this flaw to write or overwrite
  arbitrary files in the context of the perl interpreter (bsc#1099497)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-08-16"/>
	<updated date="2018-08-16"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1099497">SUSE bug 1099497</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-10860/">CVE-2018-10860</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489563" comment="perl-Archive-Zip-1.60-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137162" version="1" class="patch">
	<metadata>
		<title>perl-DBD-mysql-4.046-1.13 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-1246" ref_url="https://www.suse.com/security/cve/CVE-2016-1246/" source="CVE"/>
		<reference ref_id="CVE-2016-1249" ref_url="https://www.suse.com/security/cve/CVE-2016-1249/" source="CVE"/>
		<reference ref_id="CVE-2016-1251" ref_url="https://www.suse.com/security/cve/CVE-2016-1251/" source="CVE"/>
		<reference ref_id="CVE-2017-10788" ref_url="https://www.suse.com/security/cve/CVE-2017-10788/" source="CVE"/>
		<reference ref_id="CVE-2017-10789" ref_url="https://www.suse.com/security/cve/CVE-2017-10789/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-DBD-mysql-4.046-1.13 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1246/">CVE-2016-1246</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1249/">CVE-2016-1249</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1251/">CVE-2016-1251</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10788/">CVE-2017-10788</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-10789/">CVE-2017-10789</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480872" comment="perl-DBD-mysql-4.046-1.13 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137163" version="1" class="patch">
	<metadata>
		<title>perl-HTML-Parser-3.72-1.26 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-3627" ref_url="https://www.suse.com/security/cve/CVE-2009-3627/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-HTML-Parser-3.72-1.26 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3627/">CVE-2009-3627</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480873" comment="perl-HTML-Parser-3.72-1.26 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137164" version="1" class="patch">
	<metadata>
		<title>perl-LWP-Protocol-https-6.06-1.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-3230" ref_url="https://www.suse.com/security/cve/CVE-2014-3230/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-LWP-Protocol-https-6.06-1.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-3230/">CVE-2014-3230</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480874" comment="perl-LWP-Protocol-https-6.06-1.24 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137165" version="1" class="patch">
	<metadata>
		<title>perl-Mail-SpamAssassin-3.4.2-10.19 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-1238" ref_url="https://www.suse.com/security/cve/CVE-2016-1238/" source="CVE"/>
		<reference ref_id="CVE-2017-15705" ref_url="https://www.suse.com/security/cve/CVE-2017-15705/" source="CVE"/>
		<reference ref_id="CVE-2018-11780" ref_url="https://www.suse.com/security/cve/CVE-2018-11780/" source="CVE"/>
		<reference ref_id="CVE-2018-11781" ref_url="https://www.suse.com/security/cve/CVE-2018-11781/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-Mail-SpamAssassin-3.4.2-10.19 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1238/">CVE-2016-1238</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15705/">CVE-2017-15705</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11780/">CVE-2018-11780</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11781/">CVE-2018-11781</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481621" comment="perl-Mail-SpamAssassin-3.4.2-10.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481622" comment="spamassassin-3.4.2-10.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137166" version="1" class="patch">
	<metadata>
		<title>perl-XML-LibXML-2.0132-1.20 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-3451" ref_url="https://www.suse.com/security/cve/CVE-2015-3451/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-XML-LibXML-2.0132-1.20 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3451/">CVE-2015-3451</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480875" comment="perl-XML-LibXML-2.0132-1.20 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137167" version="1" class="patch">
	<metadata>
		<title>policycoreutils-2.8-9.19 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-7545" ref_url="https://www.suse.com/security/cve/CVE-2016-7545/" source="CVE"/>
		<reference ref_id="CVE-2018-1063" ref_url="https://www.suse.com/security/cve/CVE-2018-1063/" source="CVE"/>
		<description>
These are all security issues fixed in the policycoreutils-2.8-9.19 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7545/">CVE-2016-7545</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1063/">CVE-2018-1063</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481623" comment="policycoreutils-2.8-9.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481624" comment="policycoreutils-lang-2.8-9.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481625" comment="policycoreutils-newrole-2.8-9.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481626" comment="python3-policycoreutils-2.8-9.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137168" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1118277" ref_url="https://bugzilla.suse.com/1118277" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19788" ref_url="https://www.suse.com/security/cve/CVE-2018-19788/" source="CVE"/>
		<description>
This update for polkit fixes the following issues:

Security issue fixed:

- CVE-2018-19788: Fixed handling of UIDs over MAX_UINT (bsc#1118277)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-01-03"/>
	<updated date="2019-01-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1118277">SUSE bug 1118277</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19788/">CVE-2018-19788</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789734" comment="libpolkit0-0.114-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789735" comment="polkit-0.114-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789736" comment="polkit-devel-0.114-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789737" comment="typelib-1_0-Polkit-1_0-0.114-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137169" version="1" class="patch">
	<metadata>
		<title>postgresql-10-6.8 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-14798" ref_url="https://www.suse.com/security/cve/CVE-2017-14798/" source="CVE"/>
		<description>
These are all security issues fixed in the postgresql-10-6.8 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14798/">CVE-2017-14798</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480879" comment="postgresql-10-6.8 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137170" version="1" class="patch">
	<metadata>
		<title>powerpc-utils-1.3.6-1.15 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-4040" ref_url="https://www.suse.com/security/cve/CVE-2014-4040/" source="CVE"/>
		<description>
These are all security issues fixed in the powerpc-utils-1.3.6-1.15 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-4040/">CVE-2014-4040</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481627" comment="powerpc-utils-1.3.6-1.15 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137171" version="1" class="patch">
	<metadata>
		<title>procmail-3.22-2.34 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-3618" ref_url="https://www.suse.com/security/cve/CVE-2014-3618/" source="CVE"/>
		<reference ref_id="CVE-2017-16844" ref_url="https://www.suse.com/security/cve/CVE-2017-16844/" source="CVE"/>
		<description>
These are all security issues fixed in the procmail-3.22-2.34 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3618/">CVE-2014-3618</cve>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16844/">CVE-2017-16844</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480880" comment="procmail-3.22-2.34 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137172" version="1" class="patch">
	<metadata>
		<title>python-2.7.14-7.11.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122191" ref_url="https://bugzilla.suse.com/1122191" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<description>
This update for python fixes the following issues:

Security issue fixed:

- CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-06"/>
	<updated date="2019-02-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1122191">SUSE bug 1122191</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709022" comment="python-2.7.14-7.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137173" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1125815" ref_url="https://bugzilla.suse.com/1125815" source="BUGZILLA"/>
		<reference ref_id="1132174" ref_url="https://bugzilla.suse.com/1132174" source="BUGZILLA"/>
		<reference ref_id="1132323" ref_url="https://bugzilla.suse.com/1132323" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-10745" ref_url="https://www.suse.com/security/cve/CVE-2016-10745/" source="CVE"/>
		<reference ref_id="CVE-2019-10906" ref_url="https://www.suse.com/security/cve/CVE-2019-10906/" source="CVE"/>
		<reference ref_id="CVE-2019-8341" ref_url="https://www.suse.com/security/cve/CVE-2019-8341/" source="CVE"/>
		<description>
This update for python-Jinja2 to version 2.10.1 fixes the following issues:

Security issues fixed:

- CVE-2019-8341: Fixed a command injection in from_string() (bsc#1125815).
- CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-05-06"/>
	<updated date="2019-05-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1125815">SUSE bug 1125815</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132174">SUSE bug 1132174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132323">SUSE bug 1132323</bugzilla>
	<cve impact="important" cvss3="8.7/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2016-10745/">CVE-2016-10745</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-10906/">CVE-2019-10906</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8341/">CVE-2019-8341</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490056" comment="python3-Jinja2-2.10.1-3.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137174" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122191" ref_url="https://bugzilla.suse.com/1122191" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<description>
This update for python fixes the following issues:

Security issue fixed:

- CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-06"/>
	<updated date="2019-02-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1122191">SUSE bug 1122191</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708532" comment="libpython2_7-1_0-2.7.14-7.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708533" comment="python-base-2.7.14-7.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137175" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1101820" ref_url="https://bugzilla.suse.com/1101820" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10903" ref_url="https://www.suse.com/security/cve/CVE-2018-10903/" source="CVE"/>
		<description>
This update for python-cryptography fixes the following issues:

- CVE-2018-10903: The finalize_with_tag API did not enforce a minimum tag
  length. If a user did not validate the input length prior to passing it to
  finalize_with_tag an attacker could craft an invalid payload with a shortened
  tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the
  MAC check. GCM tag forgeries could have caused key leakage (bsc#1101820).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-24"/>
	<updated date="2018-10-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1101820">SUSE bug 1101820</bugzilla>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10903/">CVE-2018-10903</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789738" comment="python3-cryptography-2.1.4-4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137176" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122208" ref_url="https://bugzilla.suse.com/1122208" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6446" ref_url="https://www.suse.com/security/cve/CVE-2019-6446/" source="CVE"/>
		<description>
This update for python-numpy fixes the following issue:

Security issue fixed:

- CVE-2019-6446: Set allow_pickle to false by default to restrict loading untrusted content (bsc#1122208).
  With this update we decrease the possibility of allowing remote attackers to execute arbitrary code by
  misusing numpy.load(). A warning during runtime will show-up when the allow_pickle is not explicitly set.
  
NOTE: By applying this update the behavior of python-numpy changes, which might break your application.
In order to get the old behaviour back, you have to explicitly set `allow_pickle` to True. Be aware
that this should only be done for trusted input, as loading untrusted input might lead to arbitrary code
execution.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-16"/>
	<updated date="2019-02-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1122208">SUSE bug 1122208</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6446/">CVE-2019-6446</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709031" comment="python3-numpy-1.14.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789739" comment="python3-numpy-devel-1.14.0-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137177" version="1" class="patch">
	<metadata>
		<title>python3-3.6.5-3.11.1 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1120644" ref_url="https://bugzilla.suse.com/1120644" source="BUGZILLA"/>
		<reference ref_id="1122191" ref_url="https://bugzilla.suse.com/1122191" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20406" ref_url="https://www.suse.com/security/cve/CVE-2018-20406/" source="CVE"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<description>
This update for python3 fixes the following issues:

Security issue fixed:

- CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191)
- CVE-2018-20406: Fixed a integer overflow via a large LONG_BINPUT (bsc#1120644)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-01-31"/>
	<updated date="2019-01-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1120644">SUSE bug 1120644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122191">SUSE bug 1122191</bugzilla>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20406/">CVE-2018-20406</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708501" comment="python3-3.6.5-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708503" comment="python3-curses-3.6.5-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789740" comment="python3-dbm-3.6.5-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789741" comment="python3-tk-3.6.5-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137178" version="1" class="patch">
	<metadata>
		<title>python3-Jinja2-2.10.1-3.5.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-0012" ref_url="https://www.suse.com/security/cve/CVE-2014-0012/" source="CVE"/>
		<reference ref_id="CVE-2016-10745" ref_url="https://www.suse.com/security/cve/CVE-2016-10745/" source="CVE"/>
		<reference ref_id="CVE-2019-10906" ref_url="https://www.suse.com/security/cve/CVE-2019-10906/" source="CVE"/>
		<reference ref_id="CVE-2019-8341" ref_url="https://www.suse.com/security/cve/CVE-2019-8341/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-Jinja2-2.10.1-3.5.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0012/">CVE-2014-0012</cve>
	<cve impact="important" cvss3="8.7/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2016-10745/">CVE-2016-10745</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-10906/">CVE-2019-10906</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8341/">CVE-2019-8341</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481633" comment="python3-Jinja2-2.10.1-3.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137179" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1120644" ref_url="https://bugzilla.suse.com/1120644" source="BUGZILLA"/>
		<reference ref_id="1122191" ref_url="https://bugzilla.suse.com/1122191" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20406" ref_url="https://www.suse.com/security/cve/CVE-2018-20406/" source="CVE"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<description>
This update for python3 fixes the following issues:

Security issue fixed:

- CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191)
- CVE-2018-20406: Fixed a integer overflow via a large LONG_BINPUT (bsc#1120644)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-01-31"/>
	<updated date="2019-01-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1120644">SUSE bug 1120644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122191">SUSE bug 1122191</bugzilla>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20406/">CVE-2018-20406</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708500" comment="libpython3_6m1_0-3.6.5-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708502" comment="python3-base-3.6.5-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789742" comment="python3-devel-3.6.5-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789743" comment="python3-idle-3.6.5-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137180" version="1" class="patch">
	<metadata>
		<title>python3-cryptography-2.1.4-4.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-10903" ref_url="https://www.suse.com/security/cve/CVE-2018-10903/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-cryptography-2.1.4-4.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10903/">CVE-2018-10903</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481634" comment="python3-cryptography-2.1.4-4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137181" version="1" class="patch">
	<metadata>
		<title>python3-libxml2-python-2.9.7-3.6.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2008-4225" ref_url="https://www.suse.com/security/cve/CVE-2008-4225/" source="CVE"/>
		<reference ref_id="CVE-2008-4226" ref_url="https://www.suse.com/security/cve/CVE-2008-4226/" source="CVE"/>
		<reference ref_id="CVE-2008-4409" ref_url="https://www.suse.com/security/cve/CVE-2008-4409/" source="CVE"/>
		<reference ref_id="CVE-2012-5134" ref_url="https://www.suse.com/security/cve/CVE-2012-5134/" source="CVE"/>
		<reference ref_id="CVE-2016-1762" ref_url="https://www.suse.com/security/cve/CVE-2016-1762/" source="CVE"/>
		<reference ref_id="CVE-2016-1833" ref_url="https://www.suse.com/security/cve/CVE-2016-1833/" source="CVE"/>
		<reference ref_id="CVE-2016-1834" ref_url="https://www.suse.com/security/cve/CVE-2016-1834/" source="CVE"/>
		<reference ref_id="CVE-2016-1835" ref_url="https://www.suse.com/security/cve/CVE-2016-1835/" source="CVE"/>
		<reference ref_id="CVE-2016-1836" ref_url="https://www.suse.com/security/cve/CVE-2016-1836/" source="CVE"/>
		<reference ref_id="CVE-2016-1837" ref_url="https://www.suse.com/security/cve/CVE-2016-1837/" source="CVE"/>
		<reference ref_id="CVE-2016-1838" ref_url="https://www.suse.com/security/cve/CVE-2016-1838/" source="CVE"/>
		<reference ref_id="CVE-2016-1839" ref_url="https://www.suse.com/security/cve/CVE-2016-1839/" source="CVE"/>
		<reference ref_id="CVE-2016-1840" ref_url="https://www.suse.com/security/cve/CVE-2016-1840/" source="CVE"/>
		<reference ref_id="CVE-2016-3627" ref_url="https://www.suse.com/security/cve/CVE-2016-3627/" source="CVE"/>
		<reference ref_id="CVE-2016-3705" ref_url="https://www.suse.com/security/cve/CVE-2016-3705/" source="CVE"/>
		<reference ref_id="CVE-2016-4483" ref_url="https://www.suse.com/security/cve/CVE-2016-4483/" source="CVE"/>
		<reference ref_id="CVE-2016-4658" ref_url="https://www.suse.com/security/cve/CVE-2016-4658/" source="CVE"/>
		<reference ref_id="CVE-2017-0663" ref_url="https://www.suse.com/security/cve/CVE-2017-0663/" source="CVE"/>
		<reference ref_id="CVE-2017-5969" ref_url="https://www.suse.com/security/cve/CVE-2017-5969/" source="CVE"/>
		<reference ref_id="CVE-2017-9047" ref_url="https://www.suse.com/security/cve/CVE-2017-9047/" source="CVE"/>
		<reference ref_id="CVE-2017-9048" ref_url="https://www.suse.com/security/cve/CVE-2017-9048/" source="CVE"/>
		<reference ref_id="CVE-2017-9049" ref_url="https://www.suse.com/security/cve/CVE-2017-9049/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-libxml2-python-2.9.7-3.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-4225/">CVE-2008-4225</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-4226/">CVE-2008-4226</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-4409/">CVE-2008-4409</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5134/">CVE-2012-5134</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1762/">CVE-2016-1762</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1833/">CVE-2016-1833</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1834/">CVE-2016-1834</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1835/">CVE-2016-1835</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1836/">CVE-2016-1836</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1837/">CVE-2016-1837</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1838/">CVE-2016-1838</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1839/">CVE-2016-1839</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1840/">CVE-2016-1840</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3627/">CVE-2016-3627</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3705/">CVE-2016-3705</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4483/">CVE-2016-4483</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4658/">CVE-2016-4658</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-0663/">CVE-2017-0663</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5969/">CVE-2017-5969</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9047/">CVE-2017-9047</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9048/">CVE-2017-9048</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9049/">CVE-2017-9049</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481635" comment="python3-libxml2-python-2.9.7-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137182" version="1" class="patch">
	<metadata>
		<title>python3-numpy-1.14.0-4.5.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-12852" ref_url="https://www.suse.com/security/cve/CVE-2017-12852/" source="CVE"/>
		<reference ref_id="CVE-2019-6446" ref_url="https://www.suse.com/security/cve/CVE-2019-6446/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-numpy-1.14.0-4.5.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12852/">CVE-2017-12852</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6446/">CVE-2019-6446</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481636" comment="python3-numpy-1.14.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481637" comment="python3-numpy-devel-1.14.0-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137183" version="1" class="patch">
	<metadata>
		<title>python3-paramiko-2.4.2-4.23 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-7750" ref_url="https://www.suse.com/security/cve/CVE-2018-7750/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-paramiko-2.4.2-4.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="10/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-7750/">CVE-2018-7750</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481638" comment="python3-paramiko-2.4.2-4.23 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137184" version="1" class="patch">
	<metadata>
		<title>python3-pip-10.0.1-1.9 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-5123" ref_url="https://www.suse.com/security/cve/CVE-2013-5123/" source="CVE"/>
		<reference ref_id="CVE-2014-8991" ref_url="https://www.suse.com/security/cve/CVE-2014-8991/" source="CVE"/>
		<reference ref_id="CVE-2015-2296" ref_url="https://www.suse.com/security/cve/CVE-2015-2296/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-pip-10.0.1-1.9 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2013-5123/">CVE-2013-5123</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8991/">CVE-2014-8991</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-2296/">CVE-2015-2296</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480895" comment="python3-pip-10.0.1-1.9 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137185" version="1" class="patch">
	<metadata>
		<title>python3-pyOpenSSL-17.5.0-3.3.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-4314" ref_url="https://www.suse.com/security/cve/CVE-2013-4314/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-pyOpenSSL-17.5.0-3.3.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4314/">CVE-2013-4314</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481639" comment="python3-pyOpenSSL-17.5.0-3.3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137186" version="1" class="patch">
	<metadata>
		<title>python3-pycrypto-2.6.1-1.28 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-2417" ref_url="https://www.suse.com/security/cve/CVE-2012-2417/" source="CVE"/>
		<reference ref_id="CVE-2013-1445" ref_url="https://www.suse.com/security/cve/CVE-2013-1445/" source="CVE"/>
		<reference ref_id="CVE-2013-7459" ref_url="https://www.suse.com/security/cve/CVE-2013-7459/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-pycrypto-2.6.1-1.28 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2417/">CVE-2012-2417</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1445/">CVE-2013-1445</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7459/">CVE-2013-7459</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480899" comment="python3-pycrypto-2.6.1-1.28 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137187" version="1" class="patch">
	<metadata>
		<title>python3-requests-2.20.0-4.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-2296" ref_url="https://www.suse.com/security/cve/CVE-2015-2296/" source="CVE"/>
		<reference ref_id="CVE-2018-18074" ref_url="https://www.suse.com/security/cve/CVE-2018-18074/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-requests-2.20.0-4.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-2296/">CVE-2015-2296</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18074/">CVE-2018-18074</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481640" comment="python3-requests-2.20.0-4.24 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137188" version="1" class="patch">
	<metadata>
		<title>python3-salt-2019.2.0-4.4 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-1866" ref_url="https://www.suse.com/security/cve/CVE-2016-1866/" source="CVE"/>
		<reference ref_id="CVE-2016-9639" ref_url="https://www.suse.com/security/cve/CVE-2016-9639/" source="CVE"/>
		<reference ref_id="CVE-2017-12791" ref_url="https://www.suse.com/security/cve/CVE-2017-12791/" source="CVE"/>
		<reference ref_id="CVE-2017-14695" ref_url="https://www.suse.com/security/cve/CVE-2017-14695/" source="CVE"/>
		<reference ref_id="CVE-2017-14696" ref_url="https://www.suse.com/security/cve/CVE-2017-14696/" source="CVE"/>
		<reference ref_id="CVE-2018-15750" ref_url="https://www.suse.com/security/cve/CVE-2018-15750/" source="CVE"/>
		<reference ref_id="CVE-2018-15751" ref_url="https://www.suse.com/security/cve/CVE-2018-15751/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-salt-2019.2.0-4.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1866/">CVE-2016-1866</cve>
	<cve impact="low" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9639/">CVE-2016-9639</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12791/">CVE-2017-12791</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-14695/">CVE-2017-14695</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14696/">CVE-2017-14696</cve>
	<cve impact="important" cvss3="8.7/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-15750/">CVE-2018-15750</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15751/">CVE-2018-15751</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481641" comment="python3-salt-2019.2.0-4.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481642" comment="salt-2019.2.0-4.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481643" comment="salt-bash-completion-2019.2.0-4.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481644" comment="salt-doc-2019.2.0-4.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481645" comment="salt-minion-2019.2.0-4.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481646" comment="salt-zsh-completion-2019.2.0-4.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137189" version="1" class="patch">
	<metadata>
		<title>python3-urllib3-1.24-7.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-9015" ref_url="https://www.suse.com/security/cve/CVE-2016-9015/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-urllib3-1.24-7.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9015/">CVE-2016-9015</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481647" comment="python3-urllib3-1.24-7.24 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137190" version="1" class="patch">
	<metadata>
		<title>qemu-tools-3.1.0-7.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-0222" ref_url="https://www.suse.com/security/cve/CVE-2014-0222/" source="CVE"/>
		<reference ref_id="CVE-2014-0223" ref_url="https://www.suse.com/security/cve/CVE-2014-0223/" source="CVE"/>
		<reference ref_id="CVE-2014-3461" ref_url="https://www.suse.com/security/cve/CVE-2014-3461/" source="CVE"/>
		<reference ref_id="CVE-2014-3640" ref_url="https://www.suse.com/security/cve/CVE-2014-3640/" source="CVE"/>
		<reference ref_id="CVE-2014-7840" ref_url="https://www.suse.com/security/cve/CVE-2014-7840/" source="CVE"/>
		<reference ref_id="CVE-2014-8106" ref_url="https://www.suse.com/security/cve/CVE-2014-8106/" source="CVE"/>
		<reference ref_id="CVE-2015-1779" ref_url="https://www.suse.com/security/cve/CVE-2015-1779/" source="CVE"/>
		<reference ref_id="CVE-2015-3209" ref_url="https://www.suse.com/security/cve/CVE-2015-3209/" source="CVE"/>
		<reference ref_id="CVE-2015-3456" ref_url="https://www.suse.com/security/cve/CVE-2015-3456/" source="CVE"/>
		<reference ref_id="CVE-2015-4037" ref_url="https://www.suse.com/security/cve/CVE-2015-4037/" source="CVE"/>
		<reference ref_id="CVE-2015-5154" ref_url="https://www.suse.com/security/cve/CVE-2015-5154/" source="CVE"/>
		<reference ref_id="CVE-2015-5225" ref_url="https://www.suse.com/security/cve/CVE-2015-5225/" source="CVE"/>
		<reference ref_id="CVE-2015-5278" ref_url="https://www.suse.com/security/cve/CVE-2015-5278/" source="CVE"/>
		<reference ref_id="CVE-2015-5279" ref_url="https://www.suse.com/security/cve/CVE-2015-5279/" source="CVE"/>
		<reference ref_id="CVE-2015-5745" ref_url="https://www.suse.com/security/cve/CVE-2015-5745/" source="CVE"/>
		<reference ref_id="CVE-2015-6815" ref_url="https://www.suse.com/security/cve/CVE-2015-6815/" source="CVE"/>
		<reference ref_id="CVE-2015-6855" ref_url="https://www.suse.com/security/cve/CVE-2015-6855/" source="CVE"/>
		<reference ref_id="CVE-2015-7295" ref_url="https://www.suse.com/security/cve/CVE-2015-7295/" source="CVE"/>
		<reference ref_id="CVE-2015-7512" ref_url="https://www.suse.com/security/cve/CVE-2015-7512/" source="CVE"/>
		<reference ref_id="CVE-2015-7549" ref_url="https://www.suse.com/security/cve/CVE-2015-7549/" source="CVE"/>
		<reference ref_id="CVE-2015-8345" ref_url="https://www.suse.com/security/cve/CVE-2015-8345/" source="CVE"/>
		<reference ref_id="CVE-2015-8504" ref_url="https://www.suse.com/security/cve/CVE-2015-8504/" source="CVE"/>
		<reference ref_id="CVE-2015-8558" ref_url="https://www.suse.com/security/cve/CVE-2015-8558/" source="CVE"/>
		<reference ref_id="CVE-2015-8567" ref_url="https://www.suse.com/security/cve/CVE-2015-8567/" source="CVE"/>
		<reference ref_id="CVE-2015-8568" ref_url="https://www.suse.com/security/cve/CVE-2015-8568/" source="CVE"/>
		<reference ref_id="CVE-2015-8613" ref_url="https://www.suse.com/security/cve/CVE-2015-8613/" source="CVE"/>
		<reference ref_id="CVE-2015-8619" ref_url="https://www.suse.com/security/cve/CVE-2015-8619/" source="CVE"/>
		<reference ref_id="CVE-2015-8743" ref_url="https://www.suse.com/security/cve/CVE-2015-8743/" source="CVE"/>
		<reference ref_id="CVE-2015-8744" ref_url="https://www.suse.com/security/cve/CVE-2015-8744/" source="CVE"/>
		<reference ref_id="CVE-2015-8745" ref_url="https://www.suse.com/security/cve/CVE-2015-8745/" source="CVE"/>
		<reference ref_id="CVE-2016-10028" ref_url="https://www.suse.com/security/cve/CVE-2016-10028/" source="CVE"/>
		<reference ref_id="CVE-2016-10155" ref_url="https://www.suse.com/security/cve/CVE-2016-10155/" source="CVE"/>
		<reference ref_id="CVE-2016-1568" ref_url="https://www.suse.com/security/cve/CVE-2016-1568/" source="CVE"/>
		<reference ref_id="CVE-2016-1714" ref_url="https://www.suse.com/security/cve/CVE-2016-1714/" source="CVE"/>
		<reference ref_id="CVE-2016-1922" ref_url="https://www.suse.com/security/cve/CVE-2016-1922/" source="CVE"/>
		<reference ref_id="CVE-2016-1981" ref_url="https://www.suse.com/security/cve/CVE-2016-1981/" source="CVE"/>
		<reference ref_id="CVE-2016-2198" ref_url="https://www.suse.com/security/cve/CVE-2016-2198/" source="CVE"/>
		<reference ref_id="CVE-2016-3710" ref_url="https://www.suse.com/security/cve/CVE-2016-3710/" source="CVE"/>
		<reference ref_id="CVE-2016-3712" ref_url="https://www.suse.com/security/cve/CVE-2016-3712/" source="CVE"/>
		<reference ref_id="CVE-2016-4002" ref_url="https://www.suse.com/security/cve/CVE-2016-4002/" source="CVE"/>
		<reference ref_id="CVE-2016-4020" ref_url="https://www.suse.com/security/cve/CVE-2016-4020/" source="CVE"/>
		<reference ref_id="CVE-2016-4439" ref_url="https://www.suse.com/security/cve/CVE-2016-4439/" source="CVE"/>
		<reference ref_id="CVE-2016-4441" ref_url="https://www.suse.com/security/cve/CVE-2016-4441/" source="CVE"/>
		<reference ref_id="CVE-2016-4453" ref_url="https://www.suse.com/security/cve/CVE-2016-4453/" source="CVE"/>
		<reference ref_id="CVE-2016-4454" ref_url="https://www.suse.com/security/cve/CVE-2016-4454/" source="CVE"/>
		<reference ref_id="CVE-2016-4952" ref_url="https://www.suse.com/security/cve/CVE-2016-4952/" source="CVE"/>
		<reference ref_id="CVE-2016-4964" ref_url="https://www.suse.com/security/cve/CVE-2016-4964/" source="CVE"/>
		<reference ref_id="CVE-2016-5105" ref_url="https://www.suse.com/security/cve/CVE-2016-5105/" source="CVE"/>
		<reference ref_id="CVE-2016-5106" ref_url="https://www.suse.com/security/cve/CVE-2016-5106/" source="CVE"/>
		<reference ref_id="CVE-2016-5107" ref_url="https://www.suse.com/security/cve/CVE-2016-5107/" source="CVE"/>
		<reference ref_id="CVE-2016-5126" ref_url="https://www.suse.com/security/cve/CVE-2016-5126/" source="CVE"/>
		<reference ref_id="CVE-2016-5238" ref_url="https://www.suse.com/security/cve/CVE-2016-5238/" source="CVE"/>
		<reference ref_id="CVE-2016-5337" ref_url="https://www.suse.com/security/cve/CVE-2016-5337/" source="CVE"/>
		<reference ref_id="CVE-2016-5338" ref_url="https://www.suse.com/security/cve/CVE-2016-5338/" source="CVE"/>
		<reference ref_id="CVE-2016-5403" ref_url="https://www.suse.com/security/cve/CVE-2016-5403/" source="CVE"/>
		<reference ref_id="CVE-2016-6351" ref_url="https://www.suse.com/security/cve/CVE-2016-6351/" source="CVE"/>
		<reference ref_id="CVE-2016-6490" ref_url="https://www.suse.com/security/cve/CVE-2016-6490/" source="CVE"/>
		<reference ref_id="CVE-2016-6833" ref_url="https://www.suse.com/security/cve/CVE-2016-6833/" source="CVE"/>
		<reference ref_id="CVE-2016-6836" ref_url="https://www.suse.com/security/cve/CVE-2016-6836/" source="CVE"/>
		<reference ref_id="CVE-2016-6888" ref_url="https://www.suse.com/security/cve/CVE-2016-6888/" source="CVE"/>
		<reference ref_id="CVE-2016-7116" ref_url="https://www.suse.com/security/cve/CVE-2016-7116/" source="CVE"/>
		<reference ref_id="CVE-2016-7155" ref_url="https://www.suse.com/security/cve/CVE-2016-7155/" source="CVE"/>
		<reference ref_id="CVE-2016-7156" ref_url="https://www.suse.com/security/cve/CVE-2016-7156/" source="CVE"/>
		<reference ref_id="CVE-2016-7157" ref_url="https://www.suse.com/security/cve/CVE-2016-7157/" source="CVE"/>
		<reference ref_id="CVE-2016-7161" ref_url="https://www.suse.com/security/cve/CVE-2016-7161/" source="CVE"/>
		<reference ref_id="CVE-2016-7170" ref_url="https://www.suse.com/security/cve/CVE-2016-7170/" source="CVE"/>
		<reference ref_id="CVE-2016-7421" ref_url="https://www.suse.com/security/cve/CVE-2016-7421/" source="CVE"/>
		<reference ref_id="CVE-2016-7422" ref_url="https://www.suse.com/security/cve/CVE-2016-7422/" source="CVE"/>
		<reference ref_id="CVE-2016-7423" ref_url="https://www.suse.com/security/cve/CVE-2016-7423/" source="CVE"/>
		<reference ref_id="CVE-2016-7466" ref_url="https://www.suse.com/security/cve/CVE-2016-7466/" source="CVE"/>
		<reference ref_id="CVE-2016-7907" ref_url="https://www.suse.com/security/cve/CVE-2016-7907/" source="CVE"/>
		<reference ref_id="CVE-2016-7908" ref_url="https://www.suse.com/security/cve/CVE-2016-7908/" source="CVE"/>
		<reference ref_id="CVE-2016-7909" ref_url="https://www.suse.com/security/cve/CVE-2016-7909/" source="CVE"/>
		<reference ref_id="CVE-2016-7994" ref_url="https://www.suse.com/security/cve/CVE-2016-7994/" source="CVE"/>
		<reference ref_id="CVE-2016-7995" ref_url="https://www.suse.com/security/cve/CVE-2016-7995/" source="CVE"/>
		<reference ref_id="CVE-2016-8576" ref_url="https://www.suse.com/security/cve/CVE-2016-8576/" source="CVE"/>
		<reference ref_id="CVE-2016-8577" ref_url="https://www.suse.com/security/cve/CVE-2016-8577/" source="CVE"/>
		<reference ref_id="CVE-2016-8578" ref_url="https://www.suse.com/security/cve/CVE-2016-8578/" source="CVE"/>
		<reference ref_id="CVE-2016-8667" ref_url="https://www.suse.com/security/cve/CVE-2016-8667/" source="CVE"/>
		<reference ref_id="CVE-2016-8668" ref_url="https://www.suse.com/security/cve/CVE-2016-8668/" source="CVE"/>
		<reference ref_id="CVE-2016-8669" ref_url="https://www.suse.com/security/cve/CVE-2016-8669/" source="CVE"/>
		<reference ref_id="CVE-2016-8909" ref_url="https://www.suse.com/security/cve/CVE-2016-8909/" source="CVE"/>
		<reference ref_id="CVE-2016-8910" ref_url="https://www.suse.com/security/cve/CVE-2016-8910/" source="CVE"/>
		<reference ref_id="CVE-2016-9101" ref_url="https://www.suse.com/security/cve/CVE-2016-9101/" source="CVE"/>
		<reference ref_id="CVE-2016-9102" ref_url="https://www.suse.com/security/cve/CVE-2016-9102/" source="CVE"/>
		<reference ref_id="CVE-2016-9103" ref_url="https://www.suse.com/security/cve/CVE-2016-9103/" source="CVE"/>
		<reference ref_id="CVE-2016-9104" ref_url="https://www.suse.com/security/cve/CVE-2016-9104/" source="CVE"/>
		<reference ref_id="CVE-2016-9105" ref_url="https://www.suse.com/security/cve/CVE-2016-9105/" source="CVE"/>
		<reference ref_id="CVE-2016-9106" ref_url="https://www.suse.com/security/cve/CVE-2016-9106/" source="CVE"/>
		<reference ref_id="CVE-2016-9381" ref_url="https://www.suse.com/security/cve/CVE-2016-9381/" source="CVE"/>
		<reference ref_id="CVE-2016-9602" ref_url="https://www.suse.com/security/cve/CVE-2016-9602/" source="CVE"/>
		<reference ref_id="CVE-2016-9776" ref_url="https://www.suse.com/security/cve/CVE-2016-9776/" source="CVE"/>
		<reference ref_id="CVE-2016-9845" ref_url="https://www.suse.com/security/cve/CVE-2016-9845/" source="CVE"/>
		<reference ref_id="CVE-2016-9846" ref_url="https://www.suse.com/security/cve/CVE-2016-9846/" source="CVE"/>
		<reference ref_id="CVE-2016-9907" ref_url="https://www.suse.com/security/cve/CVE-2016-9907/" source="CVE"/>
		<reference ref_id="CVE-2016-9908" ref_url="https://www.suse.com/security/cve/CVE-2016-9908/" source="CVE"/>
		<reference ref_id="CVE-2016-9911" ref_url="https://www.suse.com/security/cve/CVE-2016-9911/" source="CVE"/>
		<reference ref_id="CVE-2016-9912" ref_url="https://www.suse.com/security/cve/CVE-2016-9912/" source="CVE"/>
		<reference ref_id="CVE-2016-9913" ref_url="https://www.suse.com/security/cve/CVE-2016-9913/" source="CVE"/>
		<reference ref_id="CVE-2016-9921" ref_url="https://www.suse.com/security/cve/CVE-2016-9921/" source="CVE"/>
		<reference ref_id="CVE-2016-9922" ref_url="https://www.suse.com/security/cve/CVE-2016-9922/" source="CVE"/>
		<reference ref_id="CVE-2016-9923" ref_url="https://www.suse.com/security/cve/CVE-2016-9923/" source="CVE"/>
		<reference ref_id="CVE-2017-10664" ref_url="https://www.suse.com/security/cve/CVE-2017-10664/" source="CVE"/>
		<reference ref_id="CVE-2017-10806" ref_url="https://www.suse.com/security/cve/CVE-2017-10806/" source="CVE"/>
		<reference ref_id="CVE-2017-11334" ref_url="https://www.suse.com/security/cve/CVE-2017-11334/" source="CVE"/>
		<reference ref_id="CVE-2017-11434" ref_url="https://www.suse.com/security/cve/CVE-2017-11434/" source="CVE"/>
		<reference ref_id="CVE-2017-13672" ref_url="https://www.suse.com/security/cve/CVE-2017-13672/" source="CVE"/>
		<reference ref_id="CVE-2017-13673" ref_url="https://www.suse.com/security/cve/CVE-2017-13673/" source="CVE"/>
		<reference ref_id="CVE-2017-13711" ref_url="https://www.suse.com/security/cve/CVE-2017-13711/" source="CVE"/>
		<reference ref_id="CVE-2017-14167" ref_url="https://www.suse.com/security/cve/CVE-2017-14167/" source="CVE"/>
		<reference ref_id="CVE-2017-15038" ref_url="https://www.suse.com/security/cve/CVE-2017-15038/" source="CVE"/>
		<reference ref_id="CVE-2017-15118" ref_url="https://www.suse.com/security/cve/CVE-2017-15118/" source="CVE"/>
		<reference ref_id="CVE-2017-15119" ref_url="https://www.suse.com/security/cve/CVE-2017-15119/" source="CVE"/>
		<reference ref_id="CVE-2017-15268" ref_url="https://www.suse.com/security/cve/CVE-2017-15268/" source="CVE"/>
		<reference ref_id="CVE-2017-15289" ref_url="https://www.suse.com/security/cve/CVE-2017-15289/" source="CVE"/>
		<reference ref_id="CVE-2017-2615" ref_url="https://www.suse.com/security/cve/CVE-2017-2615/" source="CVE"/>
		<reference ref_id="CVE-2017-2620" ref_url="https://www.suse.com/security/cve/CVE-2017-2620/" source="CVE"/>
		<reference ref_id="CVE-2017-2630" ref_url="https://www.suse.com/security/cve/CVE-2017-2630/" source="CVE"/>
		<reference ref_id="CVE-2017-2633" ref_url="https://www.suse.com/security/cve/CVE-2017-2633/" source="CVE"/>
		<reference ref_id="CVE-2017-5525" ref_url="https://www.suse.com/security/cve/CVE-2017-5525/" source="CVE"/>
		<reference ref_id="CVE-2017-5526" ref_url="https://www.suse.com/security/cve/CVE-2017-5526/" source="CVE"/>
		<reference ref_id="CVE-2017-5552" ref_url="https://www.suse.com/security/cve/CVE-2017-5552/" source="CVE"/>
		<reference ref_id="CVE-2017-5578" ref_url="https://www.suse.com/security/cve/CVE-2017-5578/" source="CVE"/>
		<reference ref_id="CVE-2017-5579" ref_url="https://www.suse.com/security/cve/CVE-2017-5579/" source="CVE"/>
		<reference ref_id="CVE-2017-5667" ref_url="https://www.suse.com/security/cve/CVE-2017-5667/" source="CVE"/>
		<reference ref_id="CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715/" source="CVE"/>
		<reference ref_id="CVE-2017-5856" ref_url="https://www.suse.com/security/cve/CVE-2017-5856/" source="CVE"/>
		<reference ref_id="CVE-2017-5857" ref_url="https://www.suse.com/security/cve/CVE-2017-5857/" source="CVE"/>
		<reference ref_id="CVE-2017-5898" ref_url="https://www.suse.com/security/cve/CVE-2017-5898/" source="CVE"/>
		<reference ref_id="CVE-2017-5931" ref_url="https://www.suse.com/security/cve/CVE-2017-5931/" source="CVE"/>
		<reference ref_id="CVE-2017-5973" ref_url="https://www.suse.com/security/cve/CVE-2017-5973/" source="CVE"/>
		<reference ref_id="CVE-2017-5987" ref_url="https://www.suse.com/security/cve/CVE-2017-5987/" source="CVE"/>
		<reference ref_id="CVE-2017-6058" ref_url="https://www.suse.com/security/cve/CVE-2017-6058/" source="CVE"/>
		<reference ref_id="CVE-2017-6505" ref_url="https://www.suse.com/security/cve/CVE-2017-6505/" source="CVE"/>
		<reference ref_id="CVE-2017-7471" ref_url="https://www.suse.com/security/cve/CVE-2017-7471/" source="CVE"/>
		<reference ref_id="CVE-2017-7493" ref_url="https://www.suse.com/security/cve/CVE-2017-7493/" source="CVE"/>
		<reference ref_id="CVE-2017-8112" ref_url="https://www.suse.com/security/cve/CVE-2017-8112/" source="CVE"/>
		<reference ref_id="CVE-2017-8309" ref_url="https://www.suse.com/security/cve/CVE-2017-8309/" source="CVE"/>
		<reference ref_id="CVE-2017-8379" ref_url="https://www.suse.com/security/cve/CVE-2017-8379/" source="CVE"/>
		<reference ref_id="CVE-2017-8380" ref_url="https://www.suse.com/security/cve/CVE-2017-8380/" source="CVE"/>
		<reference ref_id="CVE-2017-9503" ref_url="https://www.suse.com/security/cve/CVE-2017-9503/" source="CVE"/>
		<reference ref_id="CVE-2017-9524" ref_url="https://www.suse.com/security/cve/CVE-2017-9524/" source="CVE"/>
		<reference ref_id="CVE-2018-10839" ref_url="https://www.suse.com/security/cve/CVE-2018-10839/" source="CVE"/>
		<reference ref_id="CVE-2018-11806" ref_url="https://www.suse.com/security/cve/CVE-2018-11806/" source="CVE"/>
		<reference ref_id="CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126/" source="CVE"/>
		<reference ref_id="CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127/" source="CVE"/>
		<reference ref_id="CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130/" source="CVE"/>
		<reference ref_id="CVE-2018-12617" ref_url="https://www.suse.com/security/cve/CVE-2018-12617/" source="CVE"/>
		<reference ref_id="CVE-2018-15746" ref_url="https://www.suse.com/security/cve/CVE-2018-15746/" source="CVE"/>
		<reference ref_id="CVE-2018-16847" ref_url="https://www.suse.com/security/cve/CVE-2018-16847/" source="CVE"/>
		<reference ref_id="CVE-2018-16872" ref_url="https://www.suse.com/security/cve/CVE-2018-16872/" source="CVE"/>
		<reference ref_id="CVE-2018-17958" ref_url="https://www.suse.com/security/cve/CVE-2018-17958/" source="CVE"/>
		<reference ref_id="CVE-2018-17962" ref_url="https://www.suse.com/security/cve/CVE-2018-17962/" source="CVE"/>
		<reference ref_id="CVE-2018-17963" ref_url="https://www.suse.com/security/cve/CVE-2018-17963/" source="CVE"/>
		<reference ref_id="CVE-2018-18849" ref_url="https://www.suse.com/security/cve/CVE-2018-18849/" source="CVE"/>
		<reference ref_id="CVE-2018-20123" ref_url="https://www.suse.com/security/cve/CVE-2018-20123/" source="CVE"/>
		<reference ref_id="CVE-2018-20124" ref_url="https://www.suse.com/security/cve/CVE-2018-20124/" source="CVE"/>
		<reference ref_id="CVE-2018-20125" ref_url="https://www.suse.com/security/cve/CVE-2018-20125/" source="CVE"/>
		<reference ref_id="CVE-2018-20126" ref_url="https://www.suse.com/security/cve/CVE-2018-20126/" source="CVE"/>
		<reference ref_id="CVE-2018-20191" ref_url="https://www.suse.com/security/cve/CVE-2018-20191/" source="CVE"/>
		<reference ref_id="CVE-2018-20216" ref_url="https://www.suse.com/security/cve/CVE-2018-20216/" source="CVE"/>
		<reference ref_id="CVE-2018-20815" ref_url="https://www.suse.com/security/cve/CVE-2018-20815/" source="CVE"/>
		<reference ref_id="CVE-2018-3639" ref_url="https://www.suse.com/security/cve/CVE-2018-3639/" source="CVE"/>
		<reference ref_id="CVE-2018-7550" ref_url="https://www.suse.com/security/cve/CVE-2018-7550/" source="CVE"/>
		<reference ref_id="CVE-2018-7858" ref_url="https://www.suse.com/security/cve/CVE-2018-7858/" source="CVE"/>
		<reference ref_id="CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091/" source="CVE"/>
		<reference ref_id="CVE-2019-3812" ref_url="https://www.suse.com/security/cve/CVE-2019-3812/" source="CVE"/>
		<reference ref_id="CVE-2019-6778" ref_url="https://www.suse.com/security/cve/CVE-2019-6778/" source="CVE"/>
		<reference ref_id="CVE-2019-8934" ref_url="https://www.suse.com/security/cve/CVE-2019-8934/" source="CVE"/>
		<reference ref_id="CVE-2019-9824" ref_url="https://www.suse.com/security/cve/CVE-2019-9824/" source="CVE"/>
		<description>
These are all security issues fixed in the qemu-tools-3.1.0-7.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0222/">CVE-2014-0222</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0223/">CVE-2014-0223</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3461/">CVE-2014-3461</cve>
	<cve href="https://www.suse.com/security/cve/CVE-2014-3640/">CVE-2014-3640</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7840/">CVE-2014-7840</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8106/">CVE-2014-8106</cve>
	<cve impact="moderate" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-1779/">CVE-2015-1779</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3209/">CVE-2015-3209</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3456/">CVE-2015-3456</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-4037/">CVE-2015-4037</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5154/">CVE-2015-5154</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5225/">CVE-2015-5225</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5278/">CVE-2015-5278</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5279/">CVE-2015-5279</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5745/">CVE-2015-5745</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-6815/">CVE-2015-6815</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6855/">CVE-2015-6855</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7295/">CVE-2015-7295</cve>
	<cve impact="important" cvss3="9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7512/">CVE-2015-7512</cve>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7549/">CVE-2015-7549</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8345/">CVE-2015-8345</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8504/">CVE-2015-8504</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8558/">CVE-2015-8558</cve>
	<cve impact="low" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8567/">CVE-2015-8567</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8568/">CVE-2015-8568</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8613/">CVE-2015-8613</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8619/">CVE-2015-8619</cve>
	<cve impact="moderate" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-8743/">CVE-2015-8743</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8744/">CVE-2015-8744</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8745/">CVE-2015-8745</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-10028/">CVE-2016-10028</cve>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10155/">CVE-2016-10155</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1568/">CVE-2016-1568</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1714/">CVE-2016-1714</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1922/">CVE-2016-1922</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1981/">CVE-2016-1981</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2198/">CVE-2016-2198</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3710/">CVE-2016-3710</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3712/">CVE-2016-3712</cve>
	<cve impact="moderate" cvss3="9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4002/">CVE-2016-4002</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-4020/">CVE-2016-4020</cve>
	<cve impact="low" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4439/">CVE-2016-4439</cve>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4441/">CVE-2016-4441</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4453/">CVE-2016-4453</cve>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4454/">CVE-2016-4454</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4952/">CVE-2016-4952</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4964/">CVE-2016-4964</cve>
	<cve impact="low" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5105/">CVE-2016-5105</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5106/">CVE-2016-5106</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5107/">CVE-2016-5107</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5126/">CVE-2016-5126</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5238/">CVE-2016-5238</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5337/">CVE-2016-5337</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5338/">CVE-2016-5338</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5403/">CVE-2016-5403</cve>
	<cve impact="low" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6351/">CVE-2016-6351</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6490/">CVE-2016-6490</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6833/">CVE-2016-6833</cve>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6836/">CVE-2016-6836</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6888/">CVE-2016-6888</cve>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7116/">CVE-2016-7116</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7155/">CVE-2016-7155</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7156/">CVE-2016-7156</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7157/">CVE-2016-7157</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7161/">CVE-2016-7161</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7170/">CVE-2016-7170</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7421/">CVE-2016-7421</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7422/">CVE-2016-7422</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7423/">CVE-2016-7423</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7466/">CVE-2016-7466</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7907/">CVE-2016-7907</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7908/">CVE-2016-7908</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7909/">CVE-2016-7909</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7994/">CVE-2016-7994</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7995/">CVE-2016-7995</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8576/">CVE-2016-8576</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8577/">CVE-2016-8577</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8578/">CVE-2016-8578</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8667/">CVE-2016-8667</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8668/">CVE-2016-8668</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8669/">CVE-2016-8669</cve>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8909/">CVE-2016-8909</cve>
	<cve impact="low" cvss3="3/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8910/">CVE-2016-8910</cve>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9101/">CVE-2016-9101</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9102/">CVE-2016-9102</cve>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9103/">CVE-2016-9103</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9104/">CVE-2016-9104</cve>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9105/">CVE-2016-9105</cve>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9106/">CVE-2016-9106</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9381/">CVE-2016-9381</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9602/">CVE-2016-9602</cve>
	<cve impact="low" cvss3="3/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9776/">CVE-2016-9776</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9845/">CVE-2016-9845</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9846/">CVE-2016-9846</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9907/">CVE-2016-9907</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9908/">CVE-2016-9908</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9911/">CVE-2016-9911</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9912/">CVE-2016-9912</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9913/">CVE-2016-9913</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9921/">CVE-2016-9921</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9922/">CVE-2016-9922</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9923/">CVE-2016-9923</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10664/">CVE-2017-10664</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10806/">CVE-2017-10806</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11334/">CVE-2017-11334</cve>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11434/">CVE-2017-11434</cve>
	<cve impact="low" cvss3="3/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13672/">CVE-2017-13672</cve>
	<cve impact="low" cvss3="3/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13673/">CVE-2017-13673</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13711/">CVE-2017-13711</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14167/">CVE-2017-14167</cve>
	<cve impact="low" cvss3="3/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15038/">CVE-2017-15038</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15118/">CVE-2017-15118</cve>
	<cve impact="low" cvss3="5.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15119/">CVE-2017-15119</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15268/">CVE-2017-15268</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15289/">CVE-2017-15289</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-2615/">CVE-2017-2615</cve>
	<cve impact="moderate" cvss3="9.9/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2620/">CVE-2017-2620</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2630/">CVE-2017-2630</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2633/">CVE-2017-2633</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5525/">CVE-2017-5525</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5526/">CVE-2017-5526</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5552/">CVE-2017-5552</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5578/">CVE-2017-5578</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5579/">CVE-2017-5579</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5667/">CVE-2017-5667</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5856/">CVE-2017-5856</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5857/">CVE-2017-5857</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5898/">CVE-2017-5898</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5931/">CVE-2017-5931</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5973/">CVE-2017-5973</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5987/">CVE-2017-5987</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6058/">CVE-2017-6058</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6505/">CVE-2017-6505</cve>
	<cve impact="moderate" cvss3="9/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7471/">CVE-2017-7471</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7493/">CVE-2017-7493</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8112/">CVE-2017-8112</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8309/">CVE-2017-8309</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8379/">CVE-2017-8379</cve>
	<cve impact="low" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8380/">CVE-2017-8380</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9503/">CVE-2017-9503</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9524/">CVE-2017-9524</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-10839/">CVE-2018-10839</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11806/">CVE-2018-11806</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12617/">CVE-2018-12617</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-15746/">CVE-2018-15746</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16847/">CVE-2018-16847</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16872/">CVE-2018-16872</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-17958/">CVE-2018-17958</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-17962/">CVE-2018-17962</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-17963/">CVE-2018-17963</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-18849/">CVE-2018-18849</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20123/">CVE-2018-20123</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20124/">CVE-2018-20124</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20125/">CVE-2018-20125</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20126/">CVE-2018-20126</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20191/">CVE-2018-20191</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20216/">CVE-2018-20216</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-20815/">CVE-2018-20815</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3639/">CVE-2018-3639</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-7550/">CVE-2018-7550</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7858/">CVE-2018-7858</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-3812/">CVE-2019-3812</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6778/">CVE-2019-6778</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8934/">CVE-2019-8934</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9824/">CVE-2019-9824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481648" comment="qemu-tools-3.1.0-7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137191" version="1" class="patch">
	<metadata>
		<title>radvd-2.17-3.18 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-3602" ref_url="https://www.suse.com/security/cve/CVE-2011-3602/" source="CVE"/>
		<description>
These are all security issues fixed in the radvd-2.17-3.18 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3602/">CVE-2011-3602</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480917" comment="radvd-2.17-3.18 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137192" version="1" class="patch">
	<metadata>
		<title>rpm-32bit-4.14.1-10.16.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-7500" ref_url="https://www.suse.com/security/cve/CVE-2017-7500/" source="CVE"/>
		<description>
These are all security issues fixed in the rpm-32bit-4.14.1-10.16.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7500/">CVE-2017-7500</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481650" comment="rpm-4.14.1-10.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481651" comment="rpm-32bit-4.14.1-10.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481652" comment="rpm-devel-4.14.1-10.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137193" version="1" class="patch">
	<metadata>
		<title>rsync-3.1.3-2.10 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-1097" ref_url="https://www.suse.com/security/cve/CVE-2011-1097/" source="CVE"/>
		<reference ref_id="CVE-2014-2855" ref_url="https://www.suse.com/security/cve/CVE-2014-2855/" source="CVE"/>
		<reference ref_id="CVE-2014-8242" ref_url="https://www.suse.com/security/cve/CVE-2014-8242/" source="CVE"/>
		<reference ref_id="CVE-2014-9512" ref_url="https://www.suse.com/security/cve/CVE-2014-9512/" source="CVE"/>
		<reference ref_id="CVE-2017-16548" ref_url="https://www.suse.com/security/cve/CVE-2017-16548/" source="CVE"/>
		<reference ref_id="CVE-2018-5764" ref_url="https://www.suse.com/security/cve/CVE-2018-5764/" source="CVE"/>
		<description>
These are all security issues fixed in the rsync-3.1.3-2.10 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1097/">CVE-2011-1097</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-2855/">CVE-2014-2855</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8242/">CVE-2014-8242</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9512/">CVE-2014-9512</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16548/">CVE-2017-16548</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-5764/">CVE-2018-5764</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480919" comment="rsync-3.1.3-2.10 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137194" version="1" class="patch">
	<metadata>
		<title>rzsz-0.12.21~rc-1.8 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-10195" ref_url="https://www.suse.com/security/cve/CVE-2018-10195/" source="CVE"/>
		<description>
These are all security issues fixed in the rzsz-0.12.21~rc-1.8 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10195/">CVE-2018-10195</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480921" comment="rzsz-0.12.21~rc-1.8 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137195" version="1" class="patch">
	<metadata>
		<title>screen-4.6.2-3.14 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-5618" ref_url="https://www.suse.com/security/cve/CVE-2017-5618/" source="CVE"/>
		<description>
These are all security issues fixed in the screen-4.6.2-3.14 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5618/">CVE-2017-5618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480922" comment="screen-4.6.2-3.14 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137196" version="1" class="patch">
	<metadata>
		<title>shadow-4.6-1.31 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-7169" ref_url="https://www.suse.com/security/cve/CVE-2018-7169/" source="CVE"/>
		<description>
These are all security issues fixed in the shadow-4.6-1.31 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-7169/">CVE-2018-7169</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481654" comment="shadow-4.6-1.31 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137197" version="1" class="patch">
	<metadata>
		<title>sharutils-4.15.2-2.21 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-1000097" ref_url="https://www.suse.com/security/cve/CVE-2018-1000097/" source="CVE"/>
		<description>
These are all security issues fixed in the sharutils-4.15.2-2.21 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000097/">CVE-2018-1000097</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480924" comment="sharutils-4.15.2-2.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480925" comment="sharutils-lang-4.15.2-2.21 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137198" version="1" class="patch">
	<metadata>
		<title>shim-15+git47-1.5 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-3675" ref_url="https://www.suse.com/security/cve/CVE-2014-3675/" source="CVE"/>
		<reference ref_id="CVE-2014-3676" ref_url="https://www.suse.com/security/cve/CVE-2014-3676/" source="CVE"/>
		<reference ref_id="CVE-2014-3677" ref_url="https://www.suse.com/security/cve/CVE-2014-3677/" source="CVE"/>
		<description>
These are all security issues fixed in the shim-15+git47-1.5 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3675/">CVE-2014-3675</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3676/">CVE-2014-3676</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3677/">CVE-2014-3677</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481655" comment="shim-15+git47-1.5 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137199" version="1" class="patch">
	<metadata>
		<title>socat-1.7.3.2-4.10 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-3571" ref_url="https://www.suse.com/security/cve/CVE-2013-3571/" source="CVE"/>
		<reference ref_id="CVE-2014-0019" ref_url="https://www.suse.com/security/cve/CVE-2014-0019/" source="CVE"/>
		<reference ref_id="CVE-2015-4000" ref_url="https://www.suse.com/security/cve/CVE-2015-4000/" source="CVE"/>
		<description>
These are all security issues fixed in the socat-1.7.3.2-4.10 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-3571/">CVE-2013-3571</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-0019/">CVE-2014-0019</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-4000/">CVE-2015-4000</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481656" comment="socat-1.7.3.2-4.10 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137200" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1130325" ref_url="https://bugzilla.suse.com/1130325" source="BUGZILLA"/>
		<reference ref_id="1130326" ref_url="https://bugzilla.suse.com/1130326" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9936" ref_url="https://www.suse.com/security/cve/CVE-2019-9936/" source="CVE"/>
		<reference ref_id="CVE-2019-9937" ref_url="https://www.suse.com/security/cve/CVE-2019-9937/" source="CVE"/>
		<description>
This update for sqlite3 to version 3.28.0 fixes the following issues:

Security issues fixed:

- CVE-2019-9936: Fixed a heap-based buffer over-read, when running fts5 prefix
  queries inside transaction (bsc#1130326).
- CVE-2019-9937: Fixed a denial of service related to interleaving reads and writes in
  a single transaction with an fts5 virtual table (bsc#1130325).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-05-02"/>
	<updated date="2019-05-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1130325">SUSE bug 1130325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130326">SUSE bug 1130326</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9936/">CVE-2019-9936</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9937/">CVE-2019-9937</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708431" comment="libsqlite3-0-3.28.0-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490048" comment="libsqlite3-0-32bit-3.28.0-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708432" comment="sqlite3-3.28.0-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789744" comment="sqlite3-devel-3.28.0-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137201" version="1" class="patch">
	<metadata>
		<title>squashfs-4.3-1.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-4024" ref_url="https://www.suse.com/security/cve/CVE-2012-4024/" source="CVE"/>
		<reference ref_id="CVE-2012-4025" ref_url="https://www.suse.com/security/cve/CVE-2012-4025/" source="CVE"/>
		<description>
These are all security issues fixed in the squashfs-4.3-1.29 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4024/">CVE-2012-4024</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4025/">CVE-2012-4025</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480927" comment="squashfs-4.3-1.29 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137202" version="1" class="patch">
	<metadata>
		<title>strongswan-5.6.0-2.43 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-0790" ref_url="https://www.suse.com/security/cve/CVE-2009-0790/" source="CVE"/>
		<reference ref_id="CVE-2012-2388" ref_url="https://www.suse.com/security/cve/CVE-2012-2388/" source="CVE"/>
		<reference ref_id="CVE-2013-2944" ref_url="https://www.suse.com/security/cve/CVE-2013-2944/" source="CVE"/>
		<reference ref_id="CVE-2013-5018" ref_url="https://www.suse.com/security/cve/CVE-2013-5018/" source="CVE"/>
		<reference ref_id="CVE-2013-6075" ref_url="https://www.suse.com/security/cve/CVE-2013-6075/" source="CVE"/>
		<reference ref_id="CVE-2013-6076" ref_url="https://www.suse.com/security/cve/CVE-2013-6076/" source="CVE"/>
		<reference ref_id="CVE-2014-2338" ref_url="https://www.suse.com/security/cve/CVE-2014-2338/" source="CVE"/>
		<reference ref_id="CVE-2014-9221" ref_url="https://www.suse.com/security/cve/CVE-2014-9221/" source="CVE"/>
		<reference ref_id="CVE-2015-3991" ref_url="https://www.suse.com/security/cve/CVE-2015-3991/" source="CVE"/>
		<reference ref_id="CVE-2015-4171" ref_url="https://www.suse.com/security/cve/CVE-2015-4171/" source="CVE"/>
		<reference ref_id="CVE-2015-8023" ref_url="https://www.suse.com/security/cve/CVE-2015-8023/" source="CVE"/>
		<reference ref_id="CVE-2017-11185" ref_url="https://www.suse.com/security/cve/CVE-2017-11185/" source="CVE"/>
		<reference ref_id="CVE-2017-9022" ref_url="https://www.suse.com/security/cve/CVE-2017-9022/" source="CVE"/>
		<reference ref_id="CVE-2017-9023" ref_url="https://www.suse.com/security/cve/CVE-2017-9023/" source="CVE"/>
		<description>
These are all security issues fixed in the strongswan-5.6.0-2.43 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0790/">CVE-2009-0790</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2388/">CVE-2012-2388</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2944/">CVE-2013-2944</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-5018/">CVE-2013-5018</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6075/">CVE-2013-6075</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6076/">CVE-2013-6076</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-2338/">CVE-2014-2338</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9221/">CVE-2014-9221</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3991/">CVE-2015-3991</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-4171/">CVE-2015-4171</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8023/">CVE-2015-8023</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11185/">CVE-2017-11185</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9022/">CVE-2017-9022</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9023/">CVE-2017-9023</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480928" comment="strongswan-5.6.0-2.43 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480929" comment="strongswan-doc-5.6.0-2.43 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480930" comment="strongswan-hmac-5.6.0-2.43 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480931" comment="strongswan-ipsec-5.6.0-2.43 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480932" comment="strongswan-libs0-5.6.0-2.43 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137203" version="1" class="patch">
	<metadata>
		<title>subversion-1.10.0-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122842" ref_url="https://bugzilla.suse.com/1122842" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11803" ref_url="https://www.suse.com/security/cve/CVE-2018-11803/" source="CVE"/>
		<description>
This update for subversion fixes the following issues:

Security issue fixed:

- CVE-2018-11803: Fixed a vulnerability that allowed malicious SVN clients to trigger a crash 
  in mod_dav_svn by omitting the root path from a recursive directory listing request (bsc#1122842)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-01-29"/>
	<updated date="2019-01-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1122842">SUSE bug 1122842</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11803/">CVE-2018-11803</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789745" comment="subversion-1.10.0-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789746" comment="subversion-devel-1.10.0-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137204" version="1" class="patch">
	<metadata>
		<title>syslog-service-2.0-2.23 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-3634" ref_url="https://www.suse.com/security/cve/CVE-2014-3634/" source="CVE"/>
		<description>
These are all security issues fixed in the syslog-service-2.0-2.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3634/">CVE-2014-3634</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480939" comment="syslog-service-2.0-2.23 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137205" version="1" class="patch">
	<metadata>
		<title>sysstat-12.0.2-3.6.12 on GA media (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1117001" ref_url="https://bugzilla.suse.com/1117001" source="BUGZILLA"/>
		<reference ref_id="1117260" ref_url="https://bugzilla.suse.com/1117260" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19416" ref_url="https://www.suse.com/security/cve/CVE-2018-19416/" source="CVE"/>
		<reference ref_id="CVE-2018-19517" ref_url="https://www.suse.com/security/cve/CVE-2018-19517/" source="CVE"/>
		<description>
This update for sysstat fixes the following issues:

Security issues fixed:

- CVE-2018-19416: Fixed out-of-bounds read during a memmove call inside the remap_struct function (bsc#1117001).
- CVE-2018-19517: Fixed out-of-bounds read during a memset call inside the remap_struct function (bsc#1117260).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-29"/>
	<updated date="2019-03-29"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1117001">SUSE bug 1117001</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117260">SUSE bug 1117260</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19416/">CVE-2018-19416</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19517/">CVE-2018-19517</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789747" comment="sysstat-12.0.2-3.6.12 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137206" version="1" class="patch">
	<metadata>
		<title>sysvinit-tools-2.88+-1.26 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-2483" ref_url="https://www.suse.com/security/cve/CVE-2011-2483/" source="CVE"/>
		<description>
These are all security issues fixed in the sysvinit-tools-2.88+-1.26 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2483/">CVE-2011-2483</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480940" comment="sysvinit-tools-2.88+-1.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480941" comment="whois-5.3.0-1.16 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137207" version="1" class="patch">
	<metadata>
		<title>tar-1.30-3.3.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1120610" ref_url="https://bugzilla.suse.com/1120610" source="BUGZILLA"/>
		<reference ref_id="1130496" ref_url="https://bugzilla.suse.com/1130496" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20482" ref_url="https://www.suse.com/security/cve/CVE-2018-20482/" source="CVE"/>
		<reference ref_id="CVE-2019-9923" ref_url="https://www.suse.com/security/cve/CVE-2019-9923/" source="CVE"/>
		<description>
This update for tar fixes the following issues:

Security issues fixed:

- CVE-2019-9923: Fixed a denial of service while parsing certain archives with malformed extended headers in pax_decode_header() (bsc#1130496).
- CVE-2018-20482: Fixed a denial of service when the '--sparse' option mishandles file shrinkage during read access (bsc#1120610).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-10"/>
	<updated date="2019-04-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1120610">SUSE bug 1120610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130496">SUSE bug 1130496</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20482/">CVE-2018-20482</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9923/">CVE-2019-9923</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708598" comment="tar-1.30-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491106" comment="tar-lang-1.30-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789748" comment="tar-rmt-1.30-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137208" version="1" class="patch">
	<metadata>
		<title>tboot-20170711_1.9.8-8.32 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-16837" ref_url="https://www.suse.com/security/cve/CVE-2017-16837/" source="CVE"/>
		<description>
These are all security issues fixed in the tboot-20170711_1.9.8-8.32 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16837/">CVE-2017-16837</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481666" comment="tboot-20170711_1.9.8-8.32 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137209" version="1" class="patch">
	<metadata>
		<title>tcpdump-4.9.2-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1117267" ref_url="https://bugzilla.suse.com/1117267" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19519" ref_url="https://www.suse.com/security/cve/CVE-2018-19519/" source="CVE"/>
		<description>
This update for tcpdump fixes the following issues:

Security issues fixed:

- CVE-2018-19519: Fixed a stack-based buffer over-read in the print_prefix function (bsc#1117267)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-14"/>
	<updated date="2018-12-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1117267">SUSE bug 1117267</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19519/">CVE-2018-19519</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708408" comment="tcpdump-4.9.2-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137210" version="1" class="patch">
	<metadata>
		<title>tftp-5.2-3.22 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-2199" ref_url="https://www.suse.com/security/cve/CVE-2011-2199/" source="CVE"/>
		<description>
These are all security issues fixed in the tftp-5.2-3.22 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2199/">CVE-2011-2199</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480947" comment="tftp-5.2-3.22 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137211" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1074317" ref_url="https://bugzilla.suse.com/1074317" source="BUGZILLA"/>
		<reference ref_id="1082332" ref_url="https://bugzilla.suse.com/1082332" source="BUGZILLA"/>
		<reference ref_id="1082825" ref_url="https://bugzilla.suse.com/1082825" source="BUGZILLA"/>
		<reference ref_id="1086408" ref_url="https://bugzilla.suse.com/1086408" source="BUGZILLA"/>
		<reference ref_id="1092949" ref_url="https://bugzilla.suse.com/1092949" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-11613" ref_url="https://www.suse.com/security/cve/CVE-2017-11613/" source="CVE"/>
		<reference ref_id="CVE-2017-18013" ref_url="https://www.suse.com/security/cve/CVE-2017-18013/" source="CVE"/>
		<reference ref_id="CVE-2018-10963" ref_url="https://www.suse.com/security/cve/CVE-2018-10963/" source="CVE"/>
		<reference ref_id="CVE-2018-7456" ref_url="https://www.suse.com/security/cve/CVE-2018-7456/" source="CVE"/>
		<reference ref_id="CVE-2018-8905" ref_url="https://www.suse.com/security/cve/CVE-2018-8905/" source="CVE"/>
		<description>
This update for tiff fixes the following security issues:

These security issues were fixed:

- CVE-2017-18013: Fixed a NULL pointer dereference in the
  tif_print.cTIFFPrintDirectory function that could have lead to denial of
  service (bsc#1074317).
- CVE-2018-10963: Fixed an assertion failure in the TIFFWriteDirectorySec()
  function in tif_dirwrite.c, which allowed remote attackers to cause a denial
  of service via a crafted file (bsc#1092949).
- CVE-2018-7456: Prevent a NULL Pointer dereference in the function
  TIFFPrintDirectory when using the tiffinfo tool to print crafted TIFF
  information, a different vulnerability than CVE-2017-18013 (bsc#1082825).
- CVE-2017-11613: Prevent denial of service in the TIFFOpen function. During
  the TIFFOpen process, td_imagelength is not checked. The value of
  td_imagelength can be directly controlled by an input file. In the
  ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called
  based on td_imagelength. If the value of td_imagelength is set close to the
  amount of system memory, it will hang the system or trigger the OOM killer
  (bsc#1082332).
- CVE-2018-8905: Prevent heap-based buffer overflow in the function
  LZWDecodeCompat via a crafted TIFF file (bsc#1086408).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-05"/>
	<updated date="2018-07-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1074317">SUSE bug 1074317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082332">SUSE bug 1082332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082825">SUSE bug 1082825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086408">SUSE bug 1086408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092949">SUSE bug 1092949</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11613/">CVE-2017-11613</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18013/">CVE-2017-18013</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10963/">CVE-2018-10963</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7456/">CVE-2018-7456</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-8905/">CVE-2018-8905</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782449" comment="libtiff-devel-4.0.9-5.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782450" comment="libtiff5-4.0.9-5.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137212" version="1" class="patch">
	<metadata>
		<title>tpm2.0-tools-3.1.2-5.30 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-7524" ref_url="https://www.suse.com/security/cve/CVE-2017-7524/" source="CVE"/>
		<description>
These are all security issues fixed in the tpm2.0-tools-3.1.2-5.30 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7524/">CVE-2017-7524</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481668" comment="tpm2.0-tools-3.1.2-5.30 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137213" version="1" class="patch">
	<metadata>
		<title>ucode-intel-20190507-1.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715/" source="CVE"/>
		<reference ref_id="CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126/" source="CVE"/>
		<reference ref_id="CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127/" source="CVE"/>
		<reference ref_id="CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130/" source="CVE"/>
		<reference ref_id="CVE-2018-3639" ref_url="https://www.suse.com/security/cve/CVE-2018-3639/" source="CVE"/>
		<reference ref_id="CVE-2018-3640" ref_url="https://www.suse.com/security/cve/CVE-2018-3640/" source="CVE"/>
		<reference ref_id="CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091/" source="CVE"/>
		<description>
These are all security issues fixed in the ucode-intel-20190507-1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3639/">CVE-2018-3639</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3640/">CVE-2018-3640</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481669" comment="ucode-intel-20190507-1.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137214" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1091274" ref_url="https://bugzilla.suse.com/1091274" source="BUGZILLA"/>
		<reference ref_id="1109406" ref_url="https://bugzilla.suse.com/1109406" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17336" ref_url="https://www.suse.com/security/cve/CVE-2018-17336/" source="CVE"/>
		<description>
This update for udisks2 fixes the following issues:

Following security issues was fixed:

- CVE-2018-17336: A format string vulnerability in udisks_log (bsc#1109406)

Following non-security issues were fixed:

- strip trailing newline from sysfs raid level information (bsc#1091274)
- Fix watcher error for non-redundant raid devices. (bsc#1091274)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-22"/>
	<updated date="2018-10-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1091274">SUSE bug 1091274</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109406">SUSE bug 1109406</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17336/">CVE-2018-17336</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789749" comment="libudisks2-0-2.6.5-3.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789750" comment="typelib-1_0-UDisks-2_0-2.6.5-3.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789751" comment="udisks2-2.6.5-3.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789752" comment="udisks2-devel-2.6.5-3.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489680" comment="udisks2-lang-2.6.5-3.7.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137215" version="1" class="patch">
	<metadata>
		<title>unixODBC-2.3.6-1.12 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-1145" ref_url="https://www.suse.com/security/cve/CVE-2011-1145/" source="CVE"/>
		<reference ref_id="CVE-2018-7409" ref_url="https://www.suse.com/security/cve/CVE-2018-7409/" source="CVE"/>
		<reference ref_id="CVE-2018-7485" ref_url="https://www.suse.com/security/cve/CVE-2018-7485/" source="CVE"/>
		<description>
These are all security issues fixed in the unixODBC-2.3.6-1.12 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-1145/">CVE-2011-1145</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-7409/">CVE-2018-7409</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-7485/">CVE-2018-7485</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480950" comment="unixODBC-2.3.6-1.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480951" comment="unixODBC-devel-2.3.6-1.12 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137216" version="1" class="patch">
	<metadata>
		<title>unzip-6.00-4.8.13 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1110194" ref_url="https://bugzilla.suse.com/1110194" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-18384" ref_url="https://www.suse.com/security/cve/CVE-2018-18384/" source="CVE"/>
		<description>
This update for unzip fixes the following issues:

- CVE-2018-18384: Fixed a buffer overflow when listing archives (bsc#1110194)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-22"/>
	<updated date="2019-03-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1110194">SUSE bug 1110194</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18384/">CVE-2018-18384</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708588" comment="unzip-6.00-4.8.13 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137217" version="1" class="patch">
	<metadata>
		<title>update-alternatives-1.19.0.4-2.48 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-0840" ref_url="https://www.suse.com/security/cve/CVE-2015-0840/" source="CVE"/>
		<description>
These are all security issues fixed in the update-alternatives-1.19.0.4-2.48 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0840/">CVE-2015-0840</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480953" comment="update-alternatives-1.19.0.4-2.48 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137218" version="1" class="patch">
	<metadata>
		<title>vim-8.0.1568-3.20 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-0316" ref_url="https://www.suse.com/security/cve/CVE-2009-0316/" source="CVE"/>
		<reference ref_id="CVE-2017-1000382" ref_url="https://www.suse.com/security/cve/CVE-2017-1000382/" source="CVE"/>
		<reference ref_id="CVE-2017-5953" ref_url="https://www.suse.com/security/cve/CVE-2017-5953/" source="CVE"/>
		<reference ref_id="CVE-2017-6349" ref_url="https://www.suse.com/security/cve/CVE-2017-6349/" source="CVE"/>
		<reference ref_id="CVE-2017-6350" ref_url="https://www.suse.com/security/cve/CVE-2017-6350/" source="CVE"/>
		<description>
These are all security issues fixed in the vim-8.0.1568-3.20 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0316/">CVE-2009-0316</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000382/">CVE-2017-1000382</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5953/">CVE-2017-5953</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6349/">CVE-2017-6349</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6350/">CVE-2017-6350</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480954" comment="vim-8.0.1568-3.20 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480955" comment="vim-data-8.0.1568-3.20 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480956" comment="vim-data-common-8.0.1568-3.20 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137219" version="1" class="patch">
	<metadata>
		<title>w3m-0.5.3+git20180125-1.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-2074" ref_url="https://www.suse.com/security/cve/CVE-2010-2074/" source="CVE"/>
		<reference ref_id="CVE-2012-4929" ref_url="https://www.suse.com/security/cve/CVE-2012-4929/" source="CVE"/>
		<reference ref_id="CVE-2016-9434" ref_url="https://www.suse.com/security/cve/CVE-2016-9434/" source="CVE"/>
		<reference ref_id="CVE-2016-9435" ref_url="https://www.suse.com/security/cve/CVE-2016-9435/" source="CVE"/>
		<reference ref_id="CVE-2016-9436" ref_url="https://www.suse.com/security/cve/CVE-2016-9436/" source="CVE"/>
		<reference ref_id="CVE-2016-9437" ref_url="https://www.suse.com/security/cve/CVE-2016-9437/" source="CVE"/>
		<reference ref_id="CVE-2016-9438" ref_url="https://www.suse.com/security/cve/CVE-2016-9438/" source="CVE"/>
		<reference ref_id="CVE-2016-9439" ref_url="https://www.suse.com/security/cve/CVE-2016-9439/" source="CVE"/>
		<reference ref_id="CVE-2016-9440" ref_url="https://www.suse.com/security/cve/CVE-2016-9440/" source="CVE"/>
		<reference ref_id="CVE-2016-9441" ref_url="https://www.suse.com/security/cve/CVE-2016-9441/" source="CVE"/>
		<reference ref_id="CVE-2016-9442" ref_url="https://www.suse.com/security/cve/CVE-2016-9442/" source="CVE"/>
		<reference ref_id="CVE-2016-9443" ref_url="https://www.suse.com/security/cve/CVE-2016-9443/" source="CVE"/>
		<reference ref_id="CVE-2016-9621" ref_url="https://www.suse.com/security/cve/CVE-2016-9621/" source="CVE"/>
		<reference ref_id="CVE-2016-9622" ref_url="https://www.suse.com/security/cve/CVE-2016-9622/" source="CVE"/>
		<reference ref_id="CVE-2016-9623" ref_url="https://www.suse.com/security/cve/CVE-2016-9623/" source="CVE"/>
		<reference ref_id="CVE-2016-9624" ref_url="https://www.suse.com/security/cve/CVE-2016-9624/" source="CVE"/>
		<reference ref_id="CVE-2016-9625" ref_url="https://www.suse.com/security/cve/CVE-2016-9625/" source="CVE"/>
		<reference ref_id="CVE-2016-9626" ref_url="https://www.suse.com/security/cve/CVE-2016-9626/" source="CVE"/>
		<reference ref_id="CVE-2016-9627" ref_url="https://www.suse.com/security/cve/CVE-2016-9627/" source="CVE"/>
		<reference ref_id="CVE-2016-9628" ref_url="https://www.suse.com/security/cve/CVE-2016-9628/" source="CVE"/>
		<reference ref_id="CVE-2016-9629" ref_url="https://www.suse.com/security/cve/CVE-2016-9629/" source="CVE"/>
		<reference ref_id="CVE-2016-9630" ref_url="https://www.suse.com/security/cve/CVE-2016-9630/" source="CVE"/>
		<reference ref_id="CVE-2016-9631" ref_url="https://www.suse.com/security/cve/CVE-2016-9631/" source="CVE"/>
		<reference ref_id="CVE-2016-9632" ref_url="https://www.suse.com/security/cve/CVE-2016-9632/" source="CVE"/>
		<reference ref_id="CVE-2016-9633" ref_url="https://www.suse.com/security/cve/CVE-2016-9633/" source="CVE"/>
		<reference ref_id="CVE-2018-6196" ref_url="https://www.suse.com/security/cve/CVE-2018-6196/" source="CVE"/>
		<reference ref_id="CVE-2018-6197" ref_url="https://www.suse.com/security/cve/CVE-2018-6197/" source="CVE"/>
		<reference ref_id="CVE-2018-6198" ref_url="https://www.suse.com/security/cve/CVE-2018-6198/" source="CVE"/>
		<description>
These are all security issues fixed in the w3m-0.5.3+git20180125-1.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2074/">CVE-2010-2074</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4929/">CVE-2012-4929</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9434/">CVE-2016-9434</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9435/">CVE-2016-9435</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9436/">CVE-2016-9436</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9437/">CVE-2016-9437</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9438/">CVE-2016-9438</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9439/">CVE-2016-9439</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9440/">CVE-2016-9440</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9441/">CVE-2016-9441</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9442/">CVE-2016-9442</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9443/">CVE-2016-9443</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-9621/">CVE-2016-9621</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9622/">CVE-2016-9622</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9623/">CVE-2016-9623</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9624/">CVE-2016-9624</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9625/">CVE-2016-9625</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9626/">CVE-2016-9626</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9627/">CVE-2016-9627</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9628/">CVE-2016-9628</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9629/">CVE-2016-9629</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9630/">CVE-2016-9630</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9631/">CVE-2016-9631</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9632/">CVE-2016-9632</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9633/">CVE-2016-9633</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6196/">CVE-2018-6196</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6197/">CVE-2018-6197</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6198/">CVE-2018-6198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480957" comment="w3m-0.5.3+git20180125-1.17 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137220" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1120929" ref_url="https://bugzilla.suse.com/1120929" source="BUGZILLA"/>
		<reference ref_id="1120930" ref_url="https://bugzilla.suse.com/1120930" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19840" ref_url="https://www.suse.com/security/cve/CVE-2018-19840/" source="CVE"/>
		<reference ref_id="CVE-2018-19841" ref_url="https://www.suse.com/security/cve/CVE-2018-19841/" source="CVE"/>
		<description>
This update for wavpack fixes the following issues:

Security issues fixed:

- CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from pack_utils.c (bsc#1120930)
- CVE-2018-19841: Fixed a denial-of-service in the WavpackVerifySingleBlock function from open_utils.c (bsc#1120929)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-27"/>
	<updated date="2019-03-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1120929">SUSE bug 1120929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120930">SUSE bug 1120930</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19840/">CVE-2018-19840</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19841/">CVE-2018-19841</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789753" comment="libwavpack1-5.1.0-4.3.5 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137221" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1132256" ref_url="https://bugzilla.suse.com/1132256" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11070" ref_url="https://www.suse.com/security/cve/CVE-2019-11070/" source="CVE"/>
		<reference ref_id="CVE-2019-6201" ref_url="https://www.suse.com/security/cve/CVE-2019-6201/" source="CVE"/>
		<reference ref_id="CVE-2019-6251" ref_url="https://www.suse.com/security/cve/CVE-2019-6251/" source="CVE"/>
		<reference ref_id="CVE-2019-7285" ref_url="https://www.suse.com/security/cve/CVE-2019-7285/" source="CVE"/>
		<reference ref_id="CVE-2019-7292" ref_url="https://www.suse.com/security/cve/CVE-2019-7292/" source="CVE"/>
		<reference ref_id="CVE-2019-8503" ref_url="https://www.suse.com/security/cve/CVE-2019-8503/" source="CVE"/>
		<reference ref_id="CVE-2019-8506" ref_url="https://www.suse.com/security/cve/CVE-2019-8506/" source="CVE"/>
		<reference ref_id="CVE-2019-8515" ref_url="https://www.suse.com/security/cve/CVE-2019-8515/" source="CVE"/>
		<reference ref_id="CVE-2019-8518" ref_url="https://www.suse.com/security/cve/CVE-2019-8518/" source="CVE"/>
		<reference ref_id="CVE-2019-8523" ref_url="https://www.suse.com/security/cve/CVE-2019-8523/" source="CVE"/>
		<reference ref_id="CVE-2019-8524" ref_url="https://www.suse.com/security/cve/CVE-2019-8524/" source="CVE"/>
		<reference ref_id="CVE-2019-8535" ref_url="https://www.suse.com/security/cve/CVE-2019-8535/" source="CVE"/>
		<reference ref_id="CVE-2019-8536" ref_url="https://www.suse.com/security/cve/CVE-2019-8536/" source="CVE"/>
		<reference ref_id="CVE-2019-8544" ref_url="https://www.suse.com/security/cve/CVE-2019-8544/" source="CVE"/>
		<reference ref_id="CVE-2019-8551" ref_url="https://www.suse.com/security/cve/CVE-2019-8551/" source="CVE"/>
		<reference ref_id="CVE-2019-8558" ref_url="https://www.suse.com/security/cve/CVE-2019-8558/" source="CVE"/>
		<reference ref_id="CVE-2019-8559" ref_url="https://www.suse.com/security/cve/CVE-2019-8559/" source="CVE"/>
		<reference ref_id="CVE-2019-8563" ref_url="https://www.suse.com/security/cve/CVE-2019-8563/" source="CVE"/>
		<description>
This update for webkit2gtk3 to version 2.24.1 fixes the following issues:

Security issues fixed:

- CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506,
  CVE-2019-8515, CVE-2019-8518, CVE-2019-8523, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536,
  CVE-2019-8544, CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563, CVE-2019-11070
  (bsc#1132256).
 		</description>
<advisory from="security@suse.de">
	<issued date="2019-05-03"/>
	<updated date="2019-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11070/">CVE-2019-11070</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-6201/">CVE-2019-6201</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-6251/">CVE-2019-6251</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7285/">CVE-2019-7285</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-7292/">CVE-2019-7292</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8503/">CVE-2019-8503</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8506/">CVE-2019-8506</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8515/">CVE-2019-8515</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8518/">CVE-2019-8518</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8523/">CVE-2019-8523</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8524/">CVE-2019-8524</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8535/">CVE-2019-8535</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8536/">CVE-2019-8536</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8544/">CVE-2019-8544</cve>
	<cve impact="important" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8551/">CVE-2019-8551</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8558/">CVE-2019-8558</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8559/">CVE-2019-8559</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8563/">CVE-2019-8563</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789754" comment="libjavascriptcoregtk-4_0-18-2.24.1-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789755" comment="libwebkit2gtk-4_0-37-2.24.1-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490053" comment="libwebkit2gtk3-lang-2.24.1-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789756" comment="webkit2gtk-4_0-injected-bundles-2.24.1-3.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137222" version="1" class="patch">
	<metadata>
		<title>wget-1.19.5-3.6.2 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1131493" ref_url="https://bugzilla.suse.com/1131493" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5953" ref_url="https://www.suse.com/security/cve/CVE-2019-5953/" source="CVE"/>
		<description>
This update for wget fixes the following issues:

Security issue fixed:

- CVE-2019-5953: Fixed a buffer overflow vulnerability which might cause code execution (bsc#1131493).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-10"/>
	<updated date="2019-04-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1131493">SUSE bug 1131493</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5953/">CVE-2019-5953</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708597" comment="wget-1.19.5-3.6.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137223" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1106514" ref_url="https://bugzilla.suse.com/1106514" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16056" ref_url="https://www.suse.com/security/cve/CVE-2018-16056/" source="CVE"/>
		<reference ref_id="CVE-2018-16057" ref_url="https://www.suse.com/security/cve/CVE-2018-16057/" source="CVE"/>
		<reference ref_id="CVE-2018-16058" ref_url="https://www.suse.com/security/cve/CVE-2018-16058/" source="CVE"/>
		<description>
This update for wireshark to version 2.4.9 fixes the following issues:

Security issues fixed (bsc#1106514):

- CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
- CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
- CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)

Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
		</description>
<advisory from="security@suse.de">
	<issued date="2018-09-27"/>
	<updated date="2018-09-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1106514">SUSE bug 1106514</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16056/">CVE-2018-16056</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16057/">CVE-2018-16057</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16058/">CVE-2018-16058</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789757" comment="libwireshark9-2.4.9-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789758" comment="libwiretap7-2.4.9-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782454" comment="libwscodecs1-2.4.9-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782455" comment="libwsutil8-2.4.9-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789759" comment="wireshark-2.4.9-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137224" version="1" class="patch">
	<metadata>
		<title>wpa_supplicant-2.6-4.11.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1080798" ref_url="https://bugzilla.suse.com/1080798" source="BUGZILLA"/>
		<reference ref_id="1098854" ref_url="https://bugzilla.suse.com/1098854" source="BUGZILLA"/>
		<reference ref_id="1099835" ref_url="https://bugzilla.suse.com/1099835" source="BUGZILLA"/>
		<reference ref_id="1104205" ref_url="https://bugzilla.suse.com/1104205" source="BUGZILLA"/>
		<reference ref_id="1109209" ref_url="https://bugzilla.suse.com/1109209" source="BUGZILLA"/>
		<reference ref_id="1111873" ref_url="https://bugzilla.suse.com/1111873" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14526" ref_url="https://www.suse.com/security/cve/CVE-2018-14526/" source="CVE"/>
		<description>
This update for wpa_supplicant provides the following fixes:

This security issues was fixe:

- CVE-2018-14526: Under certain conditions, the integrity of EAPOL-Key messages was not checked, leading to a decryption oracle. An attacker within range of the Access Point and client could have abused the vulnerability to recover sensitive information (bsc#1104205)

These non-security issues were fixed:

- Fix reading private key passwords from the configuration file. (bsc#1099835)
- Enable PWD as EAP method. This allows for password-based authentication, which is easier
  to setup than most of the other methods, and is used by the Eduroam network. (bsc#1109209)
- compile eapol_test binary to allow testing via radius proxy and server (note: this does not match CONFIG_EAPOL_TEST which sets -Werror and activates an assert call inside the code of wpa_supplicant) (bsc#1111873), (fate#326725)
- Enabled timestamps in log file when being invoked by systemd service file (bsc#1080798).
- Fixes the default file permissions of the debug log file to more sane values, i.e. it is no longer world-readable (bsc#1098854).
- Open the debug log file with O_CLOEXEC, which will prevent file descriptor leaking to child processes (bsc#1098854).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-26"/>
	<updated date="2018-10-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1080798">SUSE bug 1080798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098854">SUSE bug 1098854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099835">SUSE bug 1099835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104205">SUSE bug 1104205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109209">SUSE bug 1109209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111873">SUSE bug 1111873</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-14526/">CVE-2018-14526</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789760" comment="wpa_supplicant-2.6-4.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137225" version="1" class="patch">
	<metadata>
		<title>xdg-utils-20170508-3.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-18266" ref_url="https://www.suse.com/security/cve/CVE-2017-18266/" source="CVE"/>
		<description>
These are all security issues fixed in the xdg-utils-20170508-3.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18266/">CVE-2017-18266</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480960" comment="xdg-utils-20170508-3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137226" version="1" class="patch">
	<metadata>
		<title>xen-libs-4.12.0_12-1.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-3495" ref_url="https://www.suse.com/security/cve/CVE-2013-3495/" source="CVE"/>
		<reference ref_id="CVE-2013-4533" ref_url="https://www.suse.com/security/cve/CVE-2013-4533/" source="CVE"/>
		<reference ref_id="CVE-2013-4534" ref_url="https://www.suse.com/security/cve/CVE-2013-4534/" source="CVE"/>
		<reference ref_id="CVE-2013-4537" ref_url="https://www.suse.com/security/cve/CVE-2013-4537/" source="CVE"/>
		<reference ref_id="CVE-2013-4538" ref_url="https://www.suse.com/security/cve/CVE-2013-4538/" source="CVE"/>
		<reference ref_id="CVE-2013-4539" ref_url="https://www.suse.com/security/cve/CVE-2013-4539/" source="CVE"/>
		<reference ref_id="CVE-2013-4540" ref_url="https://www.suse.com/security/cve/CVE-2013-4540/" source="CVE"/>
		<reference ref_id="CVE-2014-0222" ref_url="https://www.suse.com/security/cve/CVE-2014-0222/" source="CVE"/>
		<reference ref_id="CVE-2014-3640" ref_url="https://www.suse.com/security/cve/CVE-2014-3640/" source="CVE"/>
		<reference ref_id="CVE-2014-3672" ref_url="https://www.suse.com/security/cve/CVE-2014-3672/" source="CVE"/>
		<reference ref_id="CVE-2014-7815" ref_url="https://www.suse.com/security/cve/CVE-2014-7815/" source="CVE"/>
		<reference ref_id="CVE-2015-1779" ref_url="https://www.suse.com/security/cve/CVE-2015-1779/" source="CVE"/>
		<reference ref_id="CVE-2015-3259" ref_url="https://www.suse.com/security/cve/CVE-2015-3259/" source="CVE"/>
		<reference ref_id="CVE-2015-3340" ref_url="https://www.suse.com/security/cve/CVE-2015-3340/" source="CVE"/>
		<reference ref_id="CVE-2015-3456" ref_url="https://www.suse.com/security/cve/CVE-2015-3456/" source="CVE"/>
		<reference ref_id="CVE-2015-4037" ref_url="https://www.suse.com/security/cve/CVE-2015-4037/" source="CVE"/>
		<reference ref_id="CVE-2015-4103" ref_url="https://www.suse.com/security/cve/CVE-2015-4103/" source="CVE"/>
		<reference ref_id="CVE-2015-4104" ref_url="https://www.suse.com/security/cve/CVE-2015-4104/" source="CVE"/>
		<reference ref_id="CVE-2015-4105" ref_url="https://www.suse.com/security/cve/CVE-2015-4105/" source="CVE"/>
		<reference ref_id="CVE-2015-4106" ref_url="https://www.suse.com/security/cve/CVE-2015-4106/" source="CVE"/>
		<reference ref_id="CVE-2015-5154" ref_url="https://www.suse.com/security/cve/CVE-2015-5154/" source="CVE"/>
		<reference ref_id="CVE-2015-5239" ref_url="https://www.suse.com/security/cve/CVE-2015-5239/" source="CVE"/>
		<reference ref_id="CVE-2015-5278" ref_url="https://www.suse.com/security/cve/CVE-2015-5278/" source="CVE"/>
		<reference ref_id="CVE-2015-5307" ref_url="https://www.suse.com/security/cve/CVE-2015-5307/" source="CVE"/>
		<reference ref_id="CVE-2015-6815" ref_url="https://www.suse.com/security/cve/CVE-2015-6815/" source="CVE"/>
		<reference ref_id="CVE-2015-6855" ref_url="https://www.suse.com/security/cve/CVE-2015-6855/" source="CVE"/>
		<reference ref_id="CVE-2015-7311" ref_url="https://www.suse.com/security/cve/CVE-2015-7311/" source="CVE"/>
		<reference ref_id="CVE-2015-7504" ref_url="https://www.suse.com/security/cve/CVE-2015-7504/" source="CVE"/>
		<reference ref_id="CVE-2015-7512" ref_url="https://www.suse.com/security/cve/CVE-2015-7512/" source="CVE"/>
		<reference ref_id="CVE-2015-7549" ref_url="https://www.suse.com/security/cve/CVE-2015-7549/" source="CVE"/>
		<reference ref_id="CVE-2015-7835" ref_url="https://www.suse.com/security/cve/CVE-2015-7835/" source="CVE"/>
		<reference ref_id="CVE-2015-7969" ref_url="https://www.suse.com/security/cve/CVE-2015-7969/" source="CVE"/>
		<reference ref_id="CVE-2015-7970" ref_url="https://www.suse.com/security/cve/CVE-2015-7970/" source="CVE"/>
		<reference ref_id="CVE-2015-7971" ref_url="https://www.suse.com/security/cve/CVE-2015-7971/" source="CVE"/>
		<reference ref_id="CVE-2015-7972" ref_url="https://www.suse.com/security/cve/CVE-2015-7972/" source="CVE"/>
		<reference ref_id="CVE-2015-8104" ref_url="https://www.suse.com/security/cve/CVE-2015-8104/" source="CVE"/>
		<reference ref_id="CVE-2015-8339" ref_url="https://www.suse.com/security/cve/CVE-2015-8339/" source="CVE"/>
		<reference ref_id="CVE-2015-8340" ref_url="https://www.suse.com/security/cve/CVE-2015-8340/" source="CVE"/>
		<reference ref_id="CVE-2015-8341" ref_url="https://www.suse.com/security/cve/CVE-2015-8341/" source="CVE"/>
		<reference ref_id="CVE-2015-8345" ref_url="https://www.suse.com/security/cve/CVE-2015-8345/" source="CVE"/>
		<reference ref_id="CVE-2015-8504" ref_url="https://www.suse.com/security/cve/CVE-2015-8504/" source="CVE"/>
		<reference ref_id="CVE-2015-8550" ref_url="https://www.suse.com/security/cve/CVE-2015-8550/" source="CVE"/>
		<reference ref_id="CVE-2015-8554" ref_url="https://www.suse.com/security/cve/CVE-2015-8554/" source="CVE"/>
		<reference ref_id="CVE-2015-8555" ref_url="https://www.suse.com/security/cve/CVE-2015-8555/" source="CVE"/>
		<reference ref_id="CVE-2015-8558" ref_url="https://www.suse.com/security/cve/CVE-2015-8558/" source="CVE"/>
		<reference ref_id="CVE-2015-8567" ref_url="https://www.suse.com/security/cve/CVE-2015-8567/" source="CVE"/>
		<reference ref_id="CVE-2015-8568" ref_url="https://www.suse.com/security/cve/CVE-2015-8568/" source="CVE"/>
		<reference ref_id="CVE-2015-8613" ref_url="https://www.suse.com/security/cve/CVE-2015-8613/" source="CVE"/>
		<reference ref_id="CVE-2015-8615" ref_url="https://www.suse.com/security/cve/CVE-2015-8615/" source="CVE"/>
		<reference ref_id="CVE-2015-8619" ref_url="https://www.suse.com/security/cve/CVE-2015-8619/" source="CVE"/>
		<reference ref_id="CVE-2015-8743" ref_url="https://www.suse.com/security/cve/CVE-2015-8743/" source="CVE"/>
		<reference ref_id="CVE-2015-8744" ref_url="https://www.suse.com/security/cve/CVE-2015-8744/" source="CVE"/>
		<reference ref_id="CVE-2015-8745" ref_url="https://www.suse.com/security/cve/CVE-2015-8745/" source="CVE"/>
		<reference ref_id="CVE-2016-10013" ref_url="https://www.suse.com/security/cve/CVE-2016-10013/" source="CVE"/>
		<reference ref_id="CVE-2016-10024" ref_url="https://www.suse.com/security/cve/CVE-2016-10024/" source="CVE"/>
		<reference ref_id="CVE-2016-10025" ref_url="https://www.suse.com/security/cve/CVE-2016-10025/" source="CVE"/>
		<reference ref_id="CVE-2016-1568" ref_url="https://www.suse.com/security/cve/CVE-2016-1568/" source="CVE"/>
		<reference ref_id="CVE-2016-1570" ref_url="https://www.suse.com/security/cve/CVE-2016-1570/" source="CVE"/>
		<reference ref_id="CVE-2016-1571" ref_url="https://www.suse.com/security/cve/CVE-2016-1571/" source="CVE"/>
		<reference ref_id="CVE-2016-1714" ref_url="https://www.suse.com/security/cve/CVE-2016-1714/" source="CVE"/>
		<reference ref_id="CVE-2016-1922" ref_url="https://www.suse.com/security/cve/CVE-2016-1922/" source="CVE"/>
		<reference ref_id="CVE-2016-1981" ref_url="https://www.suse.com/security/cve/CVE-2016-1981/" source="CVE"/>
		<reference ref_id="CVE-2016-2198" ref_url="https://www.suse.com/security/cve/CVE-2016-2198/" source="CVE"/>
		<reference ref_id="CVE-2016-2270" ref_url="https://www.suse.com/security/cve/CVE-2016-2270/" source="CVE"/>
		<reference ref_id="CVE-2016-2271" ref_url="https://www.suse.com/security/cve/CVE-2016-2271/" source="CVE"/>
		<reference ref_id="CVE-2016-2391" ref_url="https://www.suse.com/security/cve/CVE-2016-2391/" source="CVE"/>
		<reference ref_id="CVE-2016-2392" ref_url="https://www.suse.com/security/cve/CVE-2016-2392/" source="CVE"/>
		<reference ref_id="CVE-2016-2538" ref_url="https://www.suse.com/security/cve/CVE-2016-2538/" source="CVE"/>
		<reference ref_id="CVE-2016-2841" ref_url="https://www.suse.com/security/cve/CVE-2016-2841/" source="CVE"/>
		<reference ref_id="CVE-2016-4439" ref_url="https://www.suse.com/security/cve/CVE-2016-4439/" source="CVE"/>
		<reference ref_id="CVE-2016-4441" ref_url="https://www.suse.com/security/cve/CVE-2016-4441/" source="CVE"/>
		<reference ref_id="CVE-2016-5238" ref_url="https://www.suse.com/security/cve/CVE-2016-5238/" source="CVE"/>
		<reference ref_id="CVE-2016-5338" ref_url="https://www.suse.com/security/cve/CVE-2016-5338/" source="CVE"/>
		<reference ref_id="CVE-2016-6258" ref_url="https://www.suse.com/security/cve/CVE-2016-6258/" source="CVE"/>
		<reference ref_id="CVE-2016-6259" ref_url="https://www.suse.com/security/cve/CVE-2016-6259/" source="CVE"/>
		<reference ref_id="CVE-2016-6351" ref_url="https://www.suse.com/security/cve/CVE-2016-6351/" source="CVE"/>
		<reference ref_id="CVE-2016-7092" ref_url="https://www.suse.com/security/cve/CVE-2016-7092/" source="CVE"/>
		<reference ref_id="CVE-2016-7093" ref_url="https://www.suse.com/security/cve/CVE-2016-7093/" source="CVE"/>
		<reference ref_id="CVE-2016-7094" ref_url="https://www.suse.com/security/cve/CVE-2016-7094/" source="CVE"/>
		<reference ref_id="CVE-2016-7777" ref_url="https://www.suse.com/security/cve/CVE-2016-7777/" source="CVE"/>
		<reference ref_id="CVE-2016-7908" ref_url="https://www.suse.com/security/cve/CVE-2016-7908/" source="CVE"/>
		<reference ref_id="CVE-2016-7909" ref_url="https://www.suse.com/security/cve/CVE-2016-7909/" source="CVE"/>
		<reference ref_id="CVE-2016-8667" ref_url="https://www.suse.com/security/cve/CVE-2016-8667/" source="CVE"/>
		<reference ref_id="CVE-2016-8669" ref_url="https://www.suse.com/security/cve/CVE-2016-8669/" source="CVE"/>
		<reference ref_id="CVE-2016-8910" ref_url="https://www.suse.com/security/cve/CVE-2016-8910/" source="CVE"/>
		<reference ref_id="CVE-2016-9377" ref_url="https://www.suse.com/security/cve/CVE-2016-9377/" source="CVE"/>
		<reference ref_id="CVE-2016-9378" ref_url="https://www.suse.com/security/cve/CVE-2016-9378/" source="CVE"/>
		<reference ref_id="CVE-2016-9379" ref_url="https://www.suse.com/security/cve/CVE-2016-9379/" source="CVE"/>
		<reference ref_id="CVE-2016-9380" ref_url="https://www.suse.com/security/cve/CVE-2016-9380/" source="CVE"/>
		<reference ref_id="CVE-2016-9381" ref_url="https://www.suse.com/security/cve/CVE-2016-9381/" source="CVE"/>
		<reference ref_id="CVE-2016-9382" ref_url="https://www.suse.com/security/cve/CVE-2016-9382/" source="CVE"/>
		<reference ref_id="CVE-2016-9383" ref_url="https://www.suse.com/security/cve/CVE-2016-9383/" source="CVE"/>
		<reference ref_id="CVE-2016-9384" ref_url="https://www.suse.com/security/cve/CVE-2016-9384/" source="CVE"/>
		<reference ref_id="CVE-2016-9385" ref_url="https://www.suse.com/security/cve/CVE-2016-9385/" source="CVE"/>
		<reference ref_id="CVE-2016-9386" ref_url="https://www.suse.com/security/cve/CVE-2016-9386/" source="CVE"/>
		<reference ref_id="CVE-2016-9637" ref_url="https://www.suse.com/security/cve/CVE-2016-9637/" source="CVE"/>
		<reference ref_id="CVE-2016-9921" ref_url="https://www.suse.com/security/cve/CVE-2016-9921/" source="CVE"/>
		<reference ref_id="CVE-2016-9922" ref_url="https://www.suse.com/security/cve/CVE-2016-9922/" source="CVE"/>
		<reference ref_id="CVE-2016-9932" ref_url="https://www.suse.com/security/cve/CVE-2016-9932/" source="CVE"/>
		<reference ref_id="CVE-2017-12135" ref_url="https://www.suse.com/security/cve/CVE-2017-12135/" source="CVE"/>
		<reference ref_id="CVE-2017-12136" ref_url="https://www.suse.com/security/cve/CVE-2017-12136/" source="CVE"/>
		<reference ref_id="CVE-2017-12137" ref_url="https://www.suse.com/security/cve/CVE-2017-12137/" source="CVE"/>
		<reference ref_id="CVE-2017-2615" ref_url="https://www.suse.com/security/cve/CVE-2017-2615/" source="CVE"/>
		<reference ref_id="CVE-2017-2620" ref_url="https://www.suse.com/security/cve/CVE-2017-2620/" source="CVE"/>
		<reference ref_id="CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715/" source="CVE"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2017-5754" ref_url="https://www.suse.com/security/cve/CVE-2017-5754/" source="CVE"/>
		<reference ref_id="CVE-2017-6505" ref_url="https://www.suse.com/security/cve/CVE-2017-6505/" source="CVE"/>
		<reference ref_id="CVE-2017-8309" ref_url="https://www.suse.com/security/cve/CVE-2017-8309/" source="CVE"/>
		<reference ref_id="CVE-2017-9330" ref_url="https://www.suse.com/security/cve/CVE-2017-9330/" source="CVE"/>
		<reference ref_id="CVE-2018-10471" ref_url="https://www.suse.com/security/cve/CVE-2018-10471/" source="CVE"/>
		<reference ref_id="CVE-2018-10472" ref_url="https://www.suse.com/security/cve/CVE-2018-10472/" source="CVE"/>
		<reference ref_id="CVE-2018-10981" ref_url="https://www.suse.com/security/cve/CVE-2018-10981/" source="CVE"/>
		<reference ref_id="CVE-2018-10982" ref_url="https://www.suse.com/security/cve/CVE-2018-10982/" source="CVE"/>
		<reference ref_id="CVE-2018-12891" ref_url="https://www.suse.com/security/cve/CVE-2018-12891/" source="CVE"/>
		<reference ref_id="CVE-2018-12892" ref_url="https://www.suse.com/security/cve/CVE-2018-12892/" source="CVE"/>
		<reference ref_id="CVE-2018-12893" ref_url="https://www.suse.com/security/cve/CVE-2018-12893/" source="CVE"/>
		<reference ref_id="CVE-2018-15468" ref_url="https://www.suse.com/security/cve/CVE-2018-15468/" source="CVE"/>
		<reference ref_id="CVE-2018-15469" ref_url="https://www.suse.com/security/cve/CVE-2018-15469/" source="CVE"/>
		<reference ref_id="CVE-2018-15470" ref_url="https://www.suse.com/security/cve/CVE-2018-15470/" source="CVE"/>
		<reference ref_id="CVE-2018-18883" ref_url="https://www.suse.com/security/cve/CVE-2018-18883/" source="CVE"/>
		<reference ref_id="CVE-2018-19961" ref_url="https://www.suse.com/security/cve/CVE-2018-19961/" source="CVE"/>
		<reference ref_id="CVE-2018-19962" ref_url="https://www.suse.com/security/cve/CVE-2018-19962/" source="CVE"/>
		<reference ref_id="CVE-2018-19963" ref_url="https://www.suse.com/security/cve/CVE-2018-19963/" source="CVE"/>
		<reference ref_id="CVE-2018-19964" ref_url="https://www.suse.com/security/cve/CVE-2018-19964/" source="CVE"/>
		<reference ref_id="CVE-2018-19965" ref_url="https://www.suse.com/security/cve/CVE-2018-19965/" source="CVE"/>
		<reference ref_id="CVE-2018-19966" ref_url="https://www.suse.com/security/cve/CVE-2018-19966/" source="CVE"/>
		<reference ref_id="CVE-2018-19967" ref_url="https://www.suse.com/security/cve/CVE-2018-19967/" source="CVE"/>
		<reference ref_id="CVE-2018-3639" ref_url="https://www.suse.com/security/cve/CVE-2018-3639/" source="CVE"/>
		<reference ref_id="CVE-2018-3646" ref_url="https://www.suse.com/security/cve/CVE-2018-3646/" source="CVE"/>
		<reference ref_id="CVE-2018-3665" ref_url="https://www.suse.com/security/cve/CVE-2018-3665/" source="CVE"/>
		<reference ref_id="CVE-2018-5244" ref_url="https://www.suse.com/security/cve/CVE-2018-5244/" source="CVE"/>
		<reference ref_id="CVE-2018-7540" ref_url="https://www.suse.com/security/cve/CVE-2018-7540/" source="CVE"/>
		<reference ref_id="CVE-2018-7541" ref_url="https://www.suse.com/security/cve/CVE-2018-7541/" source="CVE"/>
		<reference ref_id="CVE-2018-7542" ref_url="https://www.suse.com/security/cve/CVE-2018-7542/" source="CVE"/>
		<reference ref_id="CVE-2018-8897" ref_url="https://www.suse.com/security/cve/CVE-2018-8897/" source="CVE"/>
		<description>
These are all security issues fixed in the xen-libs-4.12.0_12-1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3495/">CVE-2013-3495</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4533/">CVE-2013-4533</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4534/">CVE-2013-4534</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4537/">CVE-2013-4537</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4538/">CVE-2013-4538</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4539/">CVE-2013-4539</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4540/">CVE-2013-4540</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0222/">CVE-2014-0222</cve>
	<cve href="https://www.suse.com/security/cve/CVE-2014-3640/">CVE-2014-3640</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-3672/">CVE-2014-3672</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7815/">CVE-2014-7815</cve>
	<cve impact="moderate" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-1779/">CVE-2015-1779</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3259/">CVE-2015-3259</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-3340/">CVE-2015-3340</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3456/">CVE-2015-3456</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-4037/">CVE-2015-4037</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4103/">CVE-2015-4103</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4104/">CVE-2015-4104</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4105/">CVE-2015-4105</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4106/">CVE-2015-4106</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5154/">CVE-2015-5154</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5239/">CVE-2015-5239</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5278/">CVE-2015-5278</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5307/">CVE-2015-5307</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-6815/">CVE-2015-6815</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6855/">CVE-2015-6855</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7311/">CVE-2015-7311</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7504/">CVE-2015-7504</cve>
	<cve impact="important" cvss3="9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7512/">CVE-2015-7512</cve>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7549/">CVE-2015-7549</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7835/">CVE-2015-7835</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7969/">CVE-2015-7969</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7970/">CVE-2015-7970</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7971/">CVE-2015-7971</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7972/">CVE-2015-7972</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8104/">CVE-2015-8104</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8339/">CVE-2015-8339</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8340/">CVE-2015-8340</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8341/">CVE-2015-8341</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8345/">CVE-2015-8345</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8504/">CVE-2015-8504</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8550/">CVE-2015-8550</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8554/">CVE-2015-8554</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8555/">CVE-2015-8555</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8558/">CVE-2015-8558</cve>
	<cve impact="low" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8567/">CVE-2015-8567</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8568/">CVE-2015-8568</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8613/">CVE-2015-8613</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8615/">CVE-2015-8615</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8619/">CVE-2015-8619</cve>
	<cve impact="moderate" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-8743/">CVE-2015-8743</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8744/">CVE-2015-8744</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8745/">CVE-2015-8745</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10013/">CVE-2016-10013</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10024/">CVE-2016-10024</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10025/">CVE-2016-10025</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1568/">CVE-2016-1568</cve>
	<cve impact="important" cvss3="8.5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1570/">CVE-2016-1570</cve>
	<cve impact="low" cvss3="6.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1571/">CVE-2016-1571</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1714/">CVE-2016-1714</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1922/">CVE-2016-1922</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1981/">CVE-2016-1981</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2198/">CVE-2016-2198</cve>
	<cve impact="low" cvss3="6.8/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2270/">CVE-2016-2270</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2271/">CVE-2016-2271</cve>
	<cve impact="low" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2391/">CVE-2016-2391</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2392/">CVE-2016-2392</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2538/">CVE-2016-2538</cve>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2841/">CVE-2016-2841</cve>
	<cve impact="low" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4439/">CVE-2016-4439</cve>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4441/">CVE-2016-4441</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5238/">CVE-2016-5238</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5338/">CVE-2016-5338</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6258/">CVE-2016-6258</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6259/">CVE-2016-6259</cve>
	<cve impact="low" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6351/">CVE-2016-6351</cve>
	<cve impact="important" cvss3="8.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7092/">CVE-2016-7092</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7093/">CVE-2016-7093</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7094/">CVE-2016-7094</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-7777/">CVE-2016-7777</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7908/">CVE-2016-7908</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7909/">CVE-2016-7909</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8667/">CVE-2016-8667</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8669/">CVE-2016-8669</cve>
	<cve impact="low" cvss3="3/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8910/">CVE-2016-8910</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9377/">CVE-2016-9377</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9378/">CVE-2016-9378</cve>
	<cve impact="moderate" cvss3="7.9/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9379/">CVE-2016-9379</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9380/">CVE-2016-9380</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9381/">CVE-2016-9381</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9382/">CVE-2016-9382</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9383/">CVE-2016-9383</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9384/">CVE-2016-9384</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9385/">CVE-2016-9385</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9386/">CVE-2016-9386</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9637/">CVE-2016-9637</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9921/">CVE-2016-9921</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9922/">CVE-2016-9922</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9932/">CVE-2016-9932</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-12135/">CVE-2017-12135</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12136/">CVE-2017-12136</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12137/">CVE-2017-12137</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-2615/">CVE-2017-2615</cve>
	<cve impact="moderate" cvss3="9.9/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2620/">CVE-2017-2620</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5754/">CVE-2017-5754</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6505/">CVE-2017-6505</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8309/">CVE-2017-8309</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9330/">CVE-2017-9330</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10471/">CVE-2018-10471</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10472/">CVE-2018-10472</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10981/">CVE-2018-10981</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10982/">CVE-2018-10982</cve>
	<cve impact="important" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12891/">CVE-2018-12891</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-12892/">CVE-2018-12892</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12893/">CVE-2018-12893</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-15468/">CVE-2018-15468</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-15469/">CVE-2018-15469</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-15470/">CVE-2018-15470</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-18883/">CVE-2018-18883</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19961/">CVE-2018-19961</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19962/">CVE-2018-19962</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19963/">CVE-2018-19963</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19964/">CVE-2018-19964</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19965/">CVE-2018-19965</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-19966/">CVE-2018-19966</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19967/">CVE-2018-19967</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3639/">CVE-2018-3639</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3646/">CVE-2018-3646</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3665/">CVE-2018-3665</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5244/">CVE-2018-5244</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7540/">CVE-2018-7540</cve>
	<cve impact="important" cvss3="8.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-7541/">CVE-2018-7541</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7542/">CVE-2018-7542</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8897/">CVE-2018-8897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481673" comment="xen-libs-4.12.0_12-1.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481674" comment="xen-tools-domU-4.12.0_12-1.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137227" version="1" class="patch">
	<metadata>
		<title> (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1083630" ref_url="https://bugzilla.suse.com/1083630" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-12627" ref_url="https://www.suse.com/security/cve/CVE-2017-12627/" source="CVE"/>
		<description>
This update for xerces-c fixes the following issue:

- CVE-2017-12627: Processing of external DTD paths could have resulted in a
  null pointer dereference under certain conditions (bsc#1083630)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-17"/>
	<updated date="2019-04-17"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1083630">SUSE bug 1083630</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12627/">CVE-2017-12627</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789761" comment="libxerces-c-3_1-3.1.4-3.3.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789762" comment="libxerces-c-devel-3.1.4-3.3.25 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137228" version="1" class="patch">
	<metadata>
		<title>xorg-x11-7.6_1-1.22 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-0465" ref_url="https://www.suse.com/security/cve/CVE-2011-0465/" source="CVE"/>
		<description>
These are all security issues fixed in the xorg-x11-7.6_1-1.22 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0465/">CVE-2011-0465</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480964" comment="xorg-x11-7.6_1-1.22 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480965" comment="xorg-x11-essentials-7.6_1-1.22 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481675" comment="xrdb-1.1.0-3.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137229" version="1" class="patch">
	<metadata>
		<title>xorg-x11-devel-7.6.1-1.16 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-2895" ref_url="https://www.suse.com/security/cve/CVE-2011-2895/" source="CVE"/>
		<description>
These are all security issues fixed in the xorg-x11-devel-7.6.1-1.16 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2895/">CVE-2011-2895</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480967" comment="xorg-x11-devel-7.6.1-1.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480968" comment="xorg-x11-libs-7.6.1-1.16 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137230" version="1" class="patch">
	<metadata>
		<title>xorg-x11-server-1.20.3-12.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-3164" ref_url="https://www.suse.com/security/cve/CVE-2015-3164/" source="CVE"/>
		<reference ref_id="CVE-2017-10971" ref_url="https://www.suse.com/security/cve/CVE-2017-10971/" source="CVE"/>
		<reference ref_id="CVE-2017-10972" ref_url="https://www.suse.com/security/cve/CVE-2017-10972/" source="CVE"/>
		<reference ref_id="CVE-2017-12176" ref_url="https://www.suse.com/security/cve/CVE-2017-12176/" source="CVE"/>
		<reference ref_id="CVE-2017-12187" ref_url="https://www.suse.com/security/cve/CVE-2017-12187/" source="CVE"/>
		<reference ref_id="CVE-2017-13721" ref_url="https://www.suse.com/security/cve/CVE-2017-13721/" source="CVE"/>
		<reference ref_id="CVE-2017-13723" ref_url="https://www.suse.com/security/cve/CVE-2017-13723/" source="CVE"/>
		<reference ref_id="CVE-2017-2624" ref_url="https://www.suse.com/security/cve/CVE-2017-2624/" source="CVE"/>
		<reference ref_id="CVE-2018-14665" ref_url="https://www.suse.com/security/cve/CVE-2018-14665/" source="CVE"/>
		<description>
These are all security issues fixed in the xorg-x11-server-1.20.3-12.29 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3164/">CVE-2015-3164</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10971/">CVE-2017-10971</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10972/">CVE-2017-10972</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12176/">CVE-2017-12176</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12187/">CVE-2017-12187</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-13721/">CVE-2017-13721</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13723/">CVE-2017-13723</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2624/">CVE-2017-2624</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14665/">CVE-2018-14665</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481676" comment="xorg-x11-server-1.20.3-12.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481677" comment="xorg-x11-server-extra-1.20.3-12.29 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137231" version="1" class="patch">
	<metadata>
		<title>xscreensaver-5.37-3.51 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-8025" ref_url="https://www.suse.com/security/cve/CVE-2015-8025/" source="CVE"/>
		<description>
These are all security issues fixed in the xscreensaver-5.37-3.51 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8025/">CVE-2015-8025</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009480971" comment="xscreensaver-5.37-3.51 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480972" comment="xscreensaver-data-5.37-3.51 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480973" comment="xscreensaver-lang-5.37-3.51 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137232" version="1" class="patch">
	<metadata>
		<title>yast2-buildtools-4.1.2-5.18 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-17042" ref_url="https://www.suse.com/security/cve/CVE-2017-17042/" source="CVE"/>
		<description>
These are all security issues fixed in the yast2-buildtools-4.1.2-5.18 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17042/">CVE-2017-17042</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481678" comment="yast2-buildtools-4.1.2-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481679" comment="yast2-devtools-4.1.2-5.18 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137233" version="1" class="patch">
	<metadata>
		<title>yast2-multipath-4.1.1-6.56 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-17955" ref_url="https://www.suse.com/security/cve/CVE-2018-17955/" source="CVE"/>
		<description>
These are all security issues fixed in the yast2-multipath-4.1.1-6.56 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17955/">CVE-2018-17955</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481680" comment="yast2-multipath-4.1.1-6.56 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137234" version="1" class="patch">
	<metadata>
		<title>yast2-users-4.1.12-1.4 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-1601" ref_url="https://www.suse.com/security/cve/CVE-2016-1601/" source="CVE"/>
		<description>
These are all security issues fixed in the yast2-users-4.1.12-1.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1601/">CVE-2016-1601</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481681" comment="yast2-users-4.1.12-1.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137235" version="1" class="patch">
	<metadata>
		<title>yubikey-manager-2.1.0-1.10 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-15631" ref_url="https://www.suse.com/security/cve/CVE-2017-15631/" source="CVE"/>
		<description>
These are all security issues fixed in the yubikey-manager-2.1.0-1.10 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15631/">CVE-2017-15631</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481682" comment="yubikey-manager-2.1.0-1.10 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137236" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1121717" ref_url="https://bugzilla.suse.com/1121717" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6250" ref_url="https://www.suse.com/security/cve/CVE-2019-6250/" source="CVE"/>
		<description>
This update for zeromq fixes the following issues:

Security issue fixed:

- CVE-2019-6250: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-01-17"/>
	<updated date="2019-01-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1121717">SUSE bug 1121717</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6250/">CVE-2019-6250</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708430" comment="libzmq5-4.2.3-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789763" comment="zeromq-devel-4.2.3-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137237" version="1" class="patch">
	<metadata>
		<title>zoo-2.10-1.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2006-0855" ref_url="https://www.suse.com/security/cve/CVE-2006-0855/" source="CVE"/>
		<reference ref_id="CVE-2007-1669" ref_url="https://www.suse.com/security/cve/CVE-2007-1669/" source="CVE"/>
		<description>
These are all security issues fixed in the zoo-2.10-1.29 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-0855/">CVE-2006-0855</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2007-1669/">CVE-2007-1669</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009480979" comment="zoo-2.10-1.29 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137238" version="1" class="patch">
	<metadata>
		<title>zsh-5.6-5.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-0502" ref_url="https://www.suse.com/security/cve/CVE-2018-0502/" source="CVE"/>
		<reference ref_id="CVE-2018-1071" ref_url="https://www.suse.com/security/cve/CVE-2018-1071/" source="CVE"/>
		<reference ref_id="CVE-2018-1083" ref_url="https://www.suse.com/security/cve/CVE-2018-1083/" source="CVE"/>
		<reference ref_id="CVE-2018-1100" ref_url="https://www.suse.com/security/cve/CVE-2018-1100/" source="CVE"/>
		<reference ref_id="CVE-2018-13259" ref_url="https://www.suse.com/security/cve/CVE-2018-13259/" source="CVE"/>
		<description>
These are all security issues fixed in the zsh-5.6-5.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-0502/">CVE-2018-0502</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1071/">CVE-2018-1071</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1083/">CVE-2018-1083</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1100/">CVE-2018-1100</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-13259/">CVE-2018-13259</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481683" comment="zsh-5.6-5.17 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137239" version="1" class="patch">
	<metadata>
		<title>zypper-1.14.27-1.11 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-7436" ref_url="https://www.suse.com/security/cve/CVE-2017-7436/" source="CVE"/>
		<reference ref_id="CVE-2017-9269" ref_url="https://www.suse.com/security/cve/CVE-2017-9269/" source="CVE"/>
		<description>
These are all security issues fixed in the zypper-1.14.27-1.11 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7436/">CVE-2017-7436</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2017-9269/">CVE-2017-9269</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009481684" comment="zypper-1.14.27-1.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481685" comment="zypper-log-1.14.27-1.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009481686" comment="zypper-needs-restarting-1.14.27-1.11 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137240" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1110687" ref_url="https://bugzilla.suse.com/1110687" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17828" ref_url="https://www.suse.com/security/cve/CVE-2018-17828/" source="CVE"/>
		<description>
This update for zziplib fixes the following issues:

- CVE-2018-17828: Remove any '../' components from pathnames of extracted files to avoid path traversal during unpacking. (bsc#1110687)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-18"/>
	<updated date="2018-10-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1110687">SUSE bug 1110687</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-17828/">CVE-2018-17828</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782457" comment="libzzip-0-13-0.13.69-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782458" comment="zziplib-devel-0.13.69-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137241" version="1" class="patch">
	<metadata>
		<title>containerd-1.2.2-5.9.1 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1048046" ref_url="https://bugzilla.suse.com/1048046" source="BUGZILLA"/>
		<reference ref_id="1051429" ref_url="https://bugzilla.suse.com/1051429" source="BUGZILLA"/>
		<reference ref_id="1114832" ref_url="https://bugzilla.suse.com/1114832" source="BUGZILLA"/>
		<reference ref_id="1118897" ref_url="https://bugzilla.suse.com/1118897" source="BUGZILLA"/>
		<reference ref_id="1118898" ref_url="https://bugzilla.suse.com/1118898" source="BUGZILLA"/>
		<reference ref_id="1118899" ref_url="https://bugzilla.suse.com/1118899" source="BUGZILLA"/>
		<reference ref_id="1121967" ref_url="https://bugzilla.suse.com/1121967" source="BUGZILLA"/>
		<reference ref_id="1124308" ref_url="https://bugzilla.suse.com/1124308" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16873" ref_url="https://www.suse.com/security/cve/CVE-2018-16873/" source="CVE"/>
		<reference ref_id="CVE-2018-16874" ref_url="https://www.suse.com/security/cve/CVE-2018-16874/" source="CVE"/>
		<reference ref_id="CVE-2018-16875" ref_url="https://www.suse.com/security/cve/CVE-2018-16875/" source="CVE"/>
		<reference ref_id="CVE-2019-5736" ref_url="https://www.suse.com/security/cve/CVE-2019-5736/" source="CVE"/>
		<description>
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues:

Security issues fixed: 

- CVE-2018-16875: Fixed a CPU Denial of Service (bsc#1118899).
- CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in GOPATH mode (bsc#1118898).
- CVE-2018-16873: Fixed a vulnerability in go get command which could allow remote code execution when executed with -u in GOPATH mode (bsc#1118897).
- CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container
  breakout (bsc#1121967).

Other changes and fixes: 

- Update shell completion to use Group: System/Shells.
- Add daemon.json file with rotation logs configuration (bsc#1114832)
- Update to Docker 18.09.1-ce (bsc#1124308) and to to runc 96ec2177ae84.
  See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md.
- Update go requirements to &gt;= go1.10 
- Use -buildmode=pie for tests and binary build (bsc#1048046 and bsc#1051429).
- Remove the usage of 'cp -r' to reduce noise in the build logs.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-26"/>
	<updated date="2019-02-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1048046">SUSE bug 1048046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051429">SUSE bug 1051429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114832">SUSE bug 1114832</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118897">SUSE bug 1118897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118898">SUSE bug 1118898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118899">SUSE bug 1118899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121967">SUSE bug 1121967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124308">SUSE bug 1124308</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16873/">CVE-2018-16873</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-16874/">CVE-2018-16874</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16875/">CVE-2018-16875</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5736/">CVE-2019-5736</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708583" comment="containerd-1.2.2-5.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137242" version="1" class="patch">
	<metadata>
		<title>docker-18.09.1_ce-6.14.1 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1048046" ref_url="https://bugzilla.suse.com/1048046" source="BUGZILLA"/>
		<reference ref_id="1051429" ref_url="https://bugzilla.suse.com/1051429" source="BUGZILLA"/>
		<reference ref_id="1114832" ref_url="https://bugzilla.suse.com/1114832" source="BUGZILLA"/>
		<reference ref_id="1118897" ref_url="https://bugzilla.suse.com/1118897" source="BUGZILLA"/>
		<reference ref_id="1118898" ref_url="https://bugzilla.suse.com/1118898" source="BUGZILLA"/>
		<reference ref_id="1118899" ref_url="https://bugzilla.suse.com/1118899" source="BUGZILLA"/>
		<reference ref_id="1121967" ref_url="https://bugzilla.suse.com/1121967" source="BUGZILLA"/>
		<reference ref_id="1124308" ref_url="https://bugzilla.suse.com/1124308" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16873" ref_url="https://www.suse.com/security/cve/CVE-2018-16873/" source="CVE"/>
		<reference ref_id="CVE-2018-16874" ref_url="https://www.suse.com/security/cve/CVE-2018-16874/" source="CVE"/>
		<reference ref_id="CVE-2018-16875" ref_url="https://www.suse.com/security/cve/CVE-2018-16875/" source="CVE"/>
		<reference ref_id="CVE-2019-5736" ref_url="https://www.suse.com/security/cve/CVE-2019-5736/" source="CVE"/>
		<description>
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues:

Security issues fixed: 

- CVE-2018-16875: Fixed a CPU Denial of Service (bsc#1118899).
- CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in GOPATH mode (bsc#1118898).
- CVE-2018-16873: Fixed a vulnerability in go get command which could allow remote code execution when executed with -u in GOPATH mode (bsc#1118897).
- CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container
  breakout (bsc#1121967).

Other changes and fixes: 

- Update shell completion to use Group: System/Shells.
- Add daemon.json file with rotation logs configuration (bsc#1114832)
- Update to Docker 18.09.1-ce (bsc#1124308) and to to runc 96ec2177ae84.
  See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md.
- Update go requirements to &gt;= go1.10 
- Use -buildmode=pie for tests and binary build (bsc#1048046 and bsc#1051429).
- Remove the usage of 'cp -r' to reduce noise in the build logs.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-26"/>
	<updated date="2019-02-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1048046">SUSE bug 1048046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051429">SUSE bug 1051429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114832">SUSE bug 1114832</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118897">SUSE bug 1118897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118898">SUSE bug 1118898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118899">SUSE bug 1118899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121967">SUSE bug 1121967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124308">SUSE bug 1124308</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16873/">CVE-2018-16873</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-16874/">CVE-2018-16874</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16875/">CVE-2018-16875</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5736/">CVE-2019-5736</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708584" comment="docker-18.09.1_ce-6.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494362" comment="docker-bash-completion-18.09.1_ce-6.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137243" version="1" class="patch">
	<metadata>
		<title>docker-libnetwork-0.7.0.1+gitr2711_2cfbf9b1f981-4.9.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-16873" ref_url="https://www.suse.com/security/cve/CVE-2018-16873/" source="CVE"/>
		<reference ref_id="CVE-2018-16874" ref_url="https://www.suse.com/security/cve/CVE-2018-16874/" source="CVE"/>
		<reference ref_id="CVE-2018-16875" ref_url="https://www.suse.com/security/cve/CVE-2018-16875/" source="CVE"/>
		<description>
These are all security issues fixed in the docker-libnetwork-0.7.0.1+gitr2711_2cfbf9b1f981-4.9.1 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16873/">CVE-2018-16873</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-16874/">CVE-2018-16874</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16875/">CVE-2018-16875</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482590" comment="docker-libnetwork-0.7.0.1+gitr2711_2cfbf9b1f981-4.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137244" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1048046" ref_url="https://bugzilla.suse.com/1048046" source="BUGZILLA"/>
		<reference ref_id="1051429" ref_url="https://bugzilla.suse.com/1051429" source="BUGZILLA"/>
		<reference ref_id="1114832" ref_url="https://bugzilla.suse.com/1114832" source="BUGZILLA"/>
		<reference ref_id="1118897" ref_url="https://bugzilla.suse.com/1118897" source="BUGZILLA"/>
		<reference ref_id="1118898" ref_url="https://bugzilla.suse.com/1118898" source="BUGZILLA"/>
		<reference ref_id="1118899" ref_url="https://bugzilla.suse.com/1118899" source="BUGZILLA"/>
		<reference ref_id="1121967" ref_url="https://bugzilla.suse.com/1121967" source="BUGZILLA"/>
		<reference ref_id="1124308" ref_url="https://bugzilla.suse.com/1124308" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16873" ref_url="https://www.suse.com/security/cve/CVE-2018-16873/" source="CVE"/>
		<reference ref_id="CVE-2018-16874" ref_url="https://www.suse.com/security/cve/CVE-2018-16874/" source="CVE"/>
		<reference ref_id="CVE-2018-16875" ref_url="https://www.suse.com/security/cve/CVE-2018-16875/" source="CVE"/>
		<reference ref_id="CVE-2019-5736" ref_url="https://www.suse.com/security/cve/CVE-2019-5736/" source="CVE"/>
		<description>
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues:

Security issues fixed: 

- CVE-2018-16875: Fixed a CPU Denial of Service (bsc#1118899).
- CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in GOPATH mode (bsc#1118898).
- CVE-2018-16873: Fixed a vulnerability in go get command which could allow remote code execution when executed with -u in GOPATH mode (bsc#1118897).
- CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container
  breakout (bsc#1121967).

Other changes and fixes: 

- Update shell completion to use Group: System/Shells.
- Add daemon.json file with rotation logs configuration (bsc#1114832)
- Update to Docker 18.09.1-ce (bsc#1124308) and to to runc 96ec2177ae84.
  See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md.
- Update go requirements to &gt;= go1.10 
- Use -buildmode=pie for tests and binary build (bsc#1048046 and bsc#1051429).
- Remove the usage of 'cp -r' to reduce noise in the build logs.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-26"/>
	<updated date="2019-02-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1048046">SUSE bug 1048046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051429">SUSE bug 1051429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114832">SUSE bug 1114832</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118897">SUSE bug 1118897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118898">SUSE bug 1118898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118899">SUSE bug 1118899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121967">SUSE bug 1121967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124308">SUSE bug 1124308</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16873/">CVE-2018-16873</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-16874/">CVE-2018-16874</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16875/">CVE-2018-16875</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5736/">CVE-2019-5736</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789809" comment="docker-libnetwork-0.7.0.1+gitr2711_2cfbf9b1f981-4.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137245" version="1" class="patch">
	<metadata>
		<title>podman-1.0.1-2.20 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-10856" ref_url="https://www.suse.com/security/cve/CVE-2018-10856/" source="CVE"/>
		<description>
These are all security issues fixed in the podman-1.0.1-2.20 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10856/">CVE-2018-10856</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482593" comment="podman-1.0.1-2.20 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482594" comment="podman-cni-config-1.0.1-2.20 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137246" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1048046" ref_url="https://bugzilla.suse.com/1048046" source="BUGZILLA"/>
		<reference ref_id="1051429" ref_url="https://bugzilla.suse.com/1051429" source="BUGZILLA"/>
		<reference ref_id="1114832" ref_url="https://bugzilla.suse.com/1114832" source="BUGZILLA"/>
		<reference ref_id="1118897" ref_url="https://bugzilla.suse.com/1118897" source="BUGZILLA"/>
		<reference ref_id="1118898" ref_url="https://bugzilla.suse.com/1118898" source="BUGZILLA"/>
		<reference ref_id="1118899" ref_url="https://bugzilla.suse.com/1118899" source="BUGZILLA"/>
		<reference ref_id="1121967" ref_url="https://bugzilla.suse.com/1121967" source="BUGZILLA"/>
		<reference ref_id="1124308" ref_url="https://bugzilla.suse.com/1124308" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16873" ref_url="https://www.suse.com/security/cve/CVE-2018-16873/" source="CVE"/>
		<reference ref_id="CVE-2018-16874" ref_url="https://www.suse.com/security/cve/CVE-2018-16874/" source="CVE"/>
		<reference ref_id="CVE-2018-16875" ref_url="https://www.suse.com/security/cve/CVE-2018-16875/" source="CVE"/>
		<reference ref_id="CVE-2019-5736" ref_url="https://www.suse.com/security/cve/CVE-2019-5736/" source="CVE"/>
		<description>
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues:

Security issues fixed: 

- CVE-2018-16875: Fixed a CPU Denial of Service (bsc#1118899).
- CVE-2018-16874: Fixed a vulnerabity in go get command which could allow directory traversal in GOPATH mode (bsc#1118898).
- CVE-2018-16873: Fixed a vulnerability in go get command which could allow remote code execution when executed with -u in GOPATH mode (bsc#1118897).
- CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container
  breakout (bsc#1121967).

Other changes and fixes: 

- Update shell completion to use Group: System/Shells.
- Add daemon.json file with rotation logs configuration (bsc#1114832)
- Update to Docker 18.09.1-ce (bsc#1124308) and to to runc 96ec2177ae84.
  See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md.
- Update go requirements to &gt;= go1.10 
- Use -buildmode=pie for tests and binary build (bsc#1048046 and bsc#1051429).
- Remove the usage of 'cp -r' to reduce noise in the build logs.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-26"/>
	<updated date="2019-02-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1048046">SUSE bug 1048046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051429">SUSE bug 1051429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114832">SUSE bug 1114832</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118897">SUSE bug 1118897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118898">SUSE bug 1118898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118899">SUSE bug 1118899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121967">SUSE bug 1121967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124308">SUSE bug 1124308</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16873/">CVE-2018-16873</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-16874/">CVE-2018-16874</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16875/">CVE-2018-16875</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5736/">CVE-2019-5736</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708585" comment="runc-1.0.0~rc6-1.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137247" version="1" class="patch">
	<metadata>
		<title>ImageMagick-7.0.7.34-3.54.3 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1094742" ref_url="https://bugzilla.suse.com/1094742" source="BUGZILLA"/>
		<reference ref_id="1094745" ref_url="https://bugzilla.suse.com/1094745" source="BUGZILLA"/>
		<reference ref_id="1095812" ref_url="https://bugzilla.suse.com/1095812" source="BUGZILLA"/>
		<reference ref_id="1096200" ref_url="https://bugzilla.suse.com/1096200" source="BUGZILLA"/>
		<reference ref_id="1096203" ref_url="https://bugzilla.suse.com/1096203" source="BUGZILLA"/>
		<reference ref_id="1098545" ref_url="https://bugzilla.suse.com/1098545" source="BUGZILLA"/>
		<reference ref_id="1098546" ref_url="https://bugzilla.suse.com/1098546" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10805" ref_url="https://www.suse.com/security/cve/CVE-2018-10805/" source="CVE"/>
		<reference ref_id="CVE-2018-11624" ref_url="https://www.suse.com/security/cve/CVE-2018-11624/" source="CVE"/>
		<reference ref_id="CVE-2018-11625" ref_url="https://www.suse.com/security/cve/CVE-2018-11625/" source="CVE"/>
		<reference ref_id="CVE-2018-12599" ref_url="https://www.suse.com/security/cve/CVE-2018-12599/" source="CVE"/>
		<reference ref_id="CVE-2018-12600" ref_url="https://www.suse.com/security/cve/CVE-2018-12600/" source="CVE"/>
		<description>
This update for ImageMagick fixes the following issues:

The following security vulnerabilities were fixed:

- CVE-2018-11625: Fixed heap-based buffer over-read in SetGrayscaleImage in the
  quantize.c file, which allowed remote attackers to cause buffer over-read via
  a crafted file. (bsc#1096200)
- CVE-2018-11624: Fixed a use-after-free issue in the ReadMATImage function in
  coders/mat.c. (bsc#1096203)
- CVE-2018-10805: Fixed several memory leaks in bgr.c, rgb.c, cmyk.c, gray.c,
  and ycbcr.c (bsc#1095812)
- CVE-2018-12600: The ReadDIBImage and WriteDIBImage functions allowed
  attackers to cause an out of bounds write via a crafted file (bsc#1098545).
- CVE-2018-12599: The ReadBMPImage and WriteBMPImage fucntions allowed
  attackers to cause an out of bounds write via a crafted file (bsc#1098546).

The following other changes were made:

- Fix -gamma issues in special cases. (bsc#1094745, bsc#1094742)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-23"/>
	<updated date="2018-07-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1094742">SUSE bug 1094742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094745">SUSE bug 1094745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095812">SUSE bug 1095812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096200">SUSE bug 1096200</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096203">SUSE bug 1096203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098545">SUSE bug 1098545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098546">SUSE bug 1098546</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10805/">CVE-2018-10805</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11624/">CVE-2018-11624</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11625/">CVE-2018-11625</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12599/">CVE-2018-12599</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12600/">CVE-2018-12600</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789816" comment="ImageMagick-7.0.7.34-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789817" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.54.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789818" comment="ImageMagick-devel-7.0.7.34-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789819" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789820" comment="libMagick++-devel-7.0.7.34-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789821" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789822" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137248" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1094767" ref_url="https://bugzilla.suse.com/1094767" source="BUGZILLA"/>
		<reference ref_id="1107343" ref_url="https://bugzilla.suse.com/1107343" source="BUGZILLA"/>
		<reference ref_id="1109363" ref_url="https://bugzilla.suse.com/1109363" source="BUGZILLA"/>
		<reference ref_id="1109465" ref_url="https://bugzilla.suse.com/1109465" source="BUGZILLA"/>
		<reference ref_id="1110506" ref_url="https://bugzilla.suse.com/1110506" source="BUGZILLA"/>
		<reference ref_id="1110507" ref_url="https://bugzilla.suse.com/1110507" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12383" ref_url="https://www.suse.com/security/cve/CVE-2018-12383/" source="CVE"/>
		<reference ref_id="CVE-2018-12385" ref_url="https://www.suse.com/security/cve/CVE-2018-12385/" source="CVE"/>
		<reference ref_id="CVE-2018-12386" ref_url="https://www.suse.com/security/cve/CVE-2018-12386/" source="CVE"/>
		<reference ref_id="CVE-2018-12387" ref_url="https://www.suse.com/security/cve/CVE-2018-12387/" source="CVE"/>
		<description>

  
This update for MozillaFirefox to 60.2.2ESR fixes the following issues:

Security issues fixed:

MFSA 2018-24:

- CVE-2018-12386: A Type confusion in JavaScript allowed remote code execution (bsc#1110506)
- CVE-2018-12387: Array.prototype.push stack pointer vulnerability may have enabled exploits in the sandboxed content process (bsc#1110507)

MFSA 2018-23:

- CVE-2018-12385: Fixed a crash in TransportSecurityInfo due to cached data (bsc#1109363)
- CVE-2018-12383: Setting a master password did not delete unencrypted previously stored passwords (bsc#1107343)
 
Non security issues fixed:

- Avoid undefined behavior in IPC fd-passing code (bsc#1094767)
- Fixed a startup crash affecting users migrating from older ESR releases
- Clean up old NSS DB files after upgrading
- Fixed an endianness problem in bindgen's handling of
  bitfields, which was causing Firefox to crash on startup on big-endian
  machines.  Also, updates the cc crate, which was buggy in the version
  that was originally vendored in. (bsc#1109465)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-25"/>
	<updated date="2018-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1094767">SUSE bug 1094767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107343">SUSE bug 1107343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109363">SUSE bug 1109363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109465">SUSE bug 1109465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110506">SUSE bug 1110506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110507">SUSE bug 1110507</bugzilla>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12383/">CVE-2018-12383</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-12385/">CVE-2018-12385</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12386/">CVE-2018-12386</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12387/">CVE-2018-12387</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789823" comment="MozillaFirefox-branding-SLE-60-4.5.3 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137249" version="1" class="patch">
	<metadata>
		<title>PackageKit-1.1.10-10.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-1106" ref_url="https://www.suse.com/security/cve/CVE-2018-1106/" source="CVE"/>
		<description>
These are all security issues fixed in the PackageKit-1.1.10-10.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1106/">CVE-2018-1106</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486578" comment="PackageKit-1.1.10-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486579" comment="PackageKit-backend-zypp-1.1.10-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486580" comment="PackageKit-devel-1.1.10-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486581" comment="PackageKit-lang-1.1.10-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486582" comment="libpackagekit-glib2-18-1.1.10-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486583" comment="libpackagekit-glib2-devel-1.1.10-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486584" comment="typelib-1_0-PackageKitGlib-1_0-1.1.10-10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137250" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1124799" ref_url="https://bugzilla.suse.com/1124799" source="BUGZILLA"/>
		<reference ref_id="1124800" ref_url="https://bugzilla.suse.com/1124800" source="BUGZILLA"/>
		<reference ref_id="1124802" ref_url="https://bugzilla.suse.com/1124802" source="BUGZILLA"/>
		<reference ref_id="1124803" ref_url="https://bugzilla.suse.com/1124803" source="BUGZILLA"/>
		<reference ref_id="1124805" ref_url="https://bugzilla.suse.com/1124805" source="BUGZILLA"/>
		<reference ref_id="1124806" ref_url="https://bugzilla.suse.com/1124806" source="BUGZILLA"/>
		<reference ref_id="1124824" ref_url="https://bugzilla.suse.com/1124824" source="BUGZILLA"/>
		<reference ref_id="1124825" ref_url="https://bugzilla.suse.com/1124825" source="BUGZILLA"/>
		<reference ref_id="1124826" ref_url="https://bugzilla.suse.com/1124826" source="BUGZILLA"/>
		<reference ref_id="1124827" ref_url="https://bugzilla.suse.com/1124827" source="BUGZILLA"/>
		<reference ref_id="1125099" ref_url="https://bugzilla.suse.com/1125099" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-7572" ref_url="https://www.suse.com/security/cve/CVE-2019-7572/" source="CVE"/>
		<reference ref_id="CVE-2019-7573" ref_url="https://www.suse.com/security/cve/CVE-2019-7573/" source="CVE"/>
		<reference ref_id="CVE-2019-7574" ref_url="https://www.suse.com/security/cve/CVE-2019-7574/" source="CVE"/>
		<reference ref_id="CVE-2019-7575" ref_url="https://www.suse.com/security/cve/CVE-2019-7575/" source="CVE"/>
		<reference ref_id="CVE-2019-7576" ref_url="https://www.suse.com/security/cve/CVE-2019-7576/" source="CVE"/>
		<reference ref_id="CVE-2019-7577" ref_url="https://www.suse.com/security/cve/CVE-2019-7577/" source="CVE"/>
		<reference ref_id="CVE-2019-7578" ref_url="https://www.suse.com/security/cve/CVE-2019-7578/" source="CVE"/>
		<reference ref_id="CVE-2019-7635" ref_url="https://www.suse.com/security/cve/CVE-2019-7635/" source="CVE"/>
		<reference ref_id="CVE-2019-7636" ref_url="https://www.suse.com/security/cve/CVE-2019-7636/" source="CVE"/>
		<reference ref_id="CVE-2019-7637" ref_url="https://www.suse.com/security/cve/CVE-2019-7637/" source="CVE"/>
		<reference ref_id="CVE-2019-7638" ref_url="https://www.suse.com/security/cve/CVE-2019-7638/" source="CVE"/>
		<description>
This update for SDL fixes the following issues:

Security issues fixed:	  

- CVE-2019-7572: Fixed a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.(bsc#1124806).
- CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c (bsc#1125099).
- CVE-2019-7576: Fixed heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124799).
- CVE-2019-7573: Fixed a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124805).
- CVE-2019-7635: Fixed a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c. (bsc#1124827).
- CVE-2019-7636: Fixed a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c (bsc#1124826).
- CVE-2019-7638: Fixed a heap-based buffer over-read in Map1toN in video/SDL_pixels.c (bsc#1124824).
- CVE-2019-7574: Fixed a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c (bsc#1124803).
- CVE-2019-7575: Fixed a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c (bsc#1124802).
- CVE-2019-7637: Fixed a heap-based buffer overflow in SDL_FillRect function in SDL_surface.c (bsc#1124825).
- CVE-2019-7577: Fixed a buffer over read in SDL_LoadWAV_RW in audio/SDL_wave.c (bsc#1124800).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-09"/>
	<updated date="2019-04-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1124799">SUSE bug 1124799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124800">SUSE bug 1124800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124802">SUSE bug 1124802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124803">SUSE bug 1124803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124805">SUSE bug 1124805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124806">SUSE bug 1124806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124824">SUSE bug 1124824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124825">SUSE bug 1124825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124826">SUSE bug 1124826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124827">SUSE bug 1124827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125099">SUSE bug 1125099</bugzilla>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-7572/">CVE-2019-7572</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7573/">CVE-2019-7573</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7574/">CVE-2019-7574</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7575/">CVE-2019-7575</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7576/">CVE-2019-7576</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7577/">CVE-2019-7577</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7578/">CVE-2019-7578</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7635/">CVE-2019-7635</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7636/">CVE-2019-7636</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7637/">CVE-2019-7637</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7638/">CVE-2019-7638</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782465" comment="libSDL-1_2-0-1.2.15-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782466" comment="libSDL-devel-1.2.15-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137251" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1124799" ref_url="https://bugzilla.suse.com/1124799" source="BUGZILLA"/>
		<reference ref_id="1124800" ref_url="https://bugzilla.suse.com/1124800" source="BUGZILLA"/>
		<reference ref_id="1124802" ref_url="https://bugzilla.suse.com/1124802" source="BUGZILLA"/>
		<reference ref_id="1124803" ref_url="https://bugzilla.suse.com/1124803" source="BUGZILLA"/>
		<reference ref_id="1124805" ref_url="https://bugzilla.suse.com/1124805" source="BUGZILLA"/>
		<reference ref_id="1124806" ref_url="https://bugzilla.suse.com/1124806" source="BUGZILLA"/>
		<reference ref_id="1124824" ref_url="https://bugzilla.suse.com/1124824" source="BUGZILLA"/>
		<reference ref_id="1124825" ref_url="https://bugzilla.suse.com/1124825" source="BUGZILLA"/>
		<reference ref_id="1124826" ref_url="https://bugzilla.suse.com/1124826" source="BUGZILLA"/>
		<reference ref_id="1124827" ref_url="https://bugzilla.suse.com/1124827" source="BUGZILLA"/>
		<reference ref_id="1125099" ref_url="https://bugzilla.suse.com/1125099" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-7572" ref_url="https://www.suse.com/security/cve/CVE-2019-7572/" source="CVE"/>
		<reference ref_id="CVE-2019-7573" ref_url="https://www.suse.com/security/cve/CVE-2019-7573/" source="CVE"/>
		<reference ref_id="CVE-2019-7574" ref_url="https://www.suse.com/security/cve/CVE-2019-7574/" source="CVE"/>
		<reference ref_id="CVE-2019-7575" ref_url="https://www.suse.com/security/cve/CVE-2019-7575/" source="CVE"/>
		<reference ref_id="CVE-2019-7576" ref_url="https://www.suse.com/security/cve/CVE-2019-7576/" source="CVE"/>
		<reference ref_id="CVE-2019-7577" ref_url="https://www.suse.com/security/cve/CVE-2019-7577/" source="CVE"/>
		<reference ref_id="CVE-2019-7578" ref_url="https://www.suse.com/security/cve/CVE-2019-7578/" source="CVE"/>
		<reference ref_id="CVE-2019-7635" ref_url="https://www.suse.com/security/cve/CVE-2019-7635/" source="CVE"/>
		<reference ref_id="CVE-2019-7636" ref_url="https://www.suse.com/security/cve/CVE-2019-7636/" source="CVE"/>
		<reference ref_id="CVE-2019-7637" ref_url="https://www.suse.com/security/cve/CVE-2019-7637/" source="CVE"/>
		<reference ref_id="CVE-2019-7638" ref_url="https://www.suse.com/security/cve/CVE-2019-7638/" source="CVE"/>
		<description>
This update for SDL2 fixes the following issues:

Security issues fixed:

- CVE-2019-7572: Fixed a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.(bsc#1124806).
- CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c (bsc#1125099).
- CVE-2019-7576: Fixed heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124799).
- CVE-2019-7573: Fixed a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124805).
- CVE-2019-7635: Fixed a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c. (bsc#1124827).
- CVE-2019-7636: Fixed a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c (bsc#1124826).
- CVE-2019-7638: Fixed a heap-based buffer over-read in Map1toN in video/SDL_pixels.c (bsc#1124824).
- CVE-2019-7574: Fixed a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c (bsc#1124803).
- CVE-2019-7575: Fixed a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c (bsc#1124802).
- CVE-2019-7637: Fixed a heap-based buffer overflow in SDL_FillRect function in SDL_surface.c (bsc#1124825).
- CVE-2019-7577: Fixed a buffer over read in SDL_LoadWAV_RW in audio/SDL_wave.c (bsc#1124800).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-15"/>
	<updated date="2019-04-15"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1124799">SUSE bug 1124799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124800">SUSE bug 1124800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124802">SUSE bug 1124802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124803">SUSE bug 1124803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124805">SUSE bug 1124805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124806">SUSE bug 1124806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124824">SUSE bug 1124824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124825">SUSE bug 1124825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124826">SUSE bug 1124826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124827">SUSE bug 1124827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125099">SUSE bug 1125099</bugzilla>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-7572/">CVE-2019-7572</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7573/">CVE-2019-7573</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7574/">CVE-2019-7574</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7575/">CVE-2019-7575</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7576/">CVE-2019-7576</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7577/">CVE-2019-7577</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7578/">CVE-2019-7578</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7635/">CVE-2019-7635</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7636/">CVE-2019-7636</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7637/">CVE-2019-7637</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7638/">CVE-2019-7638</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789824" comment="libSDL2-2_0-0-2.0.8-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789825" comment="libSDL2-devel-2.0.8-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137252" version="1" class="patch">
	<metadata>
		<title>accountsservice-0.6.45-6.10.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1090003" ref_url="https://bugzilla.suse.com/1090003" source="BUGZILLA"/>
		<reference ref_id="1095918" ref_url="https://bugzilla.suse.com/1095918" source="BUGZILLA"/>
		<reference ref_id="1099699" ref_url="https://bugzilla.suse.com/1099699" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14036" ref_url="https://www.suse.com/security/cve/CVE-2018-14036/" source="CVE"/>
		<description>
This update for accountsservice fixes the following issues:

This security issue was fixed:

- CVE-2018-14036: Prevent directory traversal caused by an insufficient path
  check in user_change_icon_file_authorized_cb() (bsc#1099699)

Thsese non-security issues were fixed:

- Don't abort loading users when an /etc/shadow entry is missing. (bsc#1090003)
- When user session type is wayland, act_user_is_logged_in can return TRUE if the user is logged in. (bsc#1095918)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-11-05"/>
	<updated date="2018-11-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1090003">SUSE bug 1090003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095918">SUSE bug 1095918</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099699">SUSE bug 1099699</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-14036/">CVE-2018-14036</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789826" comment="accountsservice-0.6.45-6.7.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789827" comment="accountsservice-devel-0.6.45-6.7.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494744" comment="accountsservice-lang-0.6.45-6.7.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789828" comment="libaccountsservice0-0.6.45-6.7.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789829" comment="typelib-1_0-AccountsService-1_0-0.6.45-6.7.6 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137253" version="1" class="patch">
	<metadata>
		<title> (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1100523" ref_url="https://bugzilla.suse.com/1100523" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13440" ref_url="https://www.suse.com/security/cve/CVE-2018-13440/" source="CVE"/>
		<description>
This update for audiofile fixes the following issues:

Security issue fixed:

- CVE-2018-13440: Return AF_FAIL instead of causing NULL pointer dereferences later (bsc#1100523).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-12"/>
	<updated date="2019-04-12"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1100523">SUSE bug 1100523</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13440/">CVE-2018-13440</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782467" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782468" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137254" version="1" class="patch">
	<metadata>
		<title>audiofile-devel-0.3.6-3.7.10 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-7747" ref_url="https://www.suse.com/security/cve/CVE-2015-7747/" source="CVE"/>
		<reference ref_id="CVE-2017-6827" ref_url="https://www.suse.com/security/cve/CVE-2017-6827/" source="CVE"/>
		<reference ref_id="CVE-2017-6828" ref_url="https://www.suse.com/security/cve/CVE-2017-6828/" source="CVE"/>
		<reference ref_id="CVE-2017-6829" ref_url="https://www.suse.com/security/cve/CVE-2017-6829/" source="CVE"/>
		<reference ref_id="CVE-2017-6830" ref_url="https://www.suse.com/security/cve/CVE-2017-6830/" source="CVE"/>
		<reference ref_id="CVE-2017-6831" ref_url="https://www.suse.com/security/cve/CVE-2017-6831/" source="CVE"/>
		<reference ref_id="CVE-2017-6832" ref_url="https://www.suse.com/security/cve/CVE-2017-6832/" source="CVE"/>
		<reference ref_id="CVE-2017-6833" ref_url="https://www.suse.com/security/cve/CVE-2017-6833/" source="CVE"/>
		<reference ref_id="CVE-2017-6834" ref_url="https://www.suse.com/security/cve/CVE-2017-6834/" source="CVE"/>
		<reference ref_id="CVE-2017-6835" ref_url="https://www.suse.com/security/cve/CVE-2017-6835/" source="CVE"/>
		<reference ref_id="CVE-2017-6836" ref_url="https://www.suse.com/security/cve/CVE-2017-6836/" source="CVE"/>
		<reference ref_id="CVE-2017-6837" ref_url="https://www.suse.com/security/cve/CVE-2017-6837/" source="CVE"/>
		<reference ref_id="CVE-2017-6838" ref_url="https://www.suse.com/security/cve/CVE-2017-6838/" source="CVE"/>
		<reference ref_id="CVE-2017-6839" ref_url="https://www.suse.com/security/cve/CVE-2017-6839/" source="CVE"/>
		<reference ref_id="CVE-2018-13440" ref_url="https://www.suse.com/security/cve/CVE-2018-13440/" source="CVE"/>
		<reference ref_id="CVE-2018-17095" ref_url="https://www.suse.com/security/cve/CVE-2018-17095/" source="CVE"/>
		<description>
These are all security issues fixed in the audiofile-devel-0.3.6-3.7.10 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7747/">CVE-2015-7747</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6827/">CVE-2017-6827</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6828/">CVE-2017-6828</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6829/">CVE-2017-6829</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6830/">CVE-2017-6830</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6831/">CVE-2017-6831</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6832/">CVE-2017-6832</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6833/">CVE-2017-6833</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-6834/">CVE-2017-6834</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6835/">CVE-2017-6835</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6836/">CVE-2017-6836</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6837/">CVE-2017-6837</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6838/">CVE-2017-6838</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6839/">CVE-2017-6839</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13440/">CVE-2018-13440</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17095/">CVE-2018-17095</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486590" comment="audiofile-devel-0.3.6-3.7.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486591" comment="libaudiofile1-0.3.6-3.7.10 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137255" version="1" class="patch">
	<metadata>
		<title>avahi-autoipd-0.7-1.21 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-1000845" ref_url="https://www.suse.com/security/cve/CVE-2018-1000845/" source="CVE"/>
		<description>
These are all security issues fixed in the avahi-autoipd-0.7-1.21 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000845/">CVE-2018-1000845</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486592" comment="avahi-autoipd-0.7-1.21 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137256" version="1" class="patch">
	<metadata>
		<title>bluez-5.48-5.13.10 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1013721" ref_url="https://bugzilla.suse.com/1013721" source="BUGZILLA"/>
		<reference ref_id="1013732" ref_url="https://bugzilla.suse.com/1013732" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-9800" ref_url="https://www.suse.com/security/cve/CVE-2016-9800/" source="CVE"/>
		<reference ref_id="CVE-2016-9801" ref_url="https://www.suse.com/security/cve/CVE-2016-9801/" source="CVE"/>
		<description>
This update for bluez fixes the following issues:

Security issues fixed:

- CVE-2016-9800: Fixed a buffer overflow in pin_code_reply_dump function (bsc#1013721)
- CVE-2016-9801: Fixed a buffer overflow in set_ext_ctrl function (bsc#1013732)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-19"/>
	<updated date="2018-12-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1013721">SUSE bug 1013721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013732">SUSE bug 1013732</bugzilla>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9800/">CVE-2016-9800</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9801/">CVE-2016-9801</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789830" comment="bluez-5.48-5.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789831" comment="bluez-devel-5.48-5.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137257" version="1" class="patch">
	<metadata>
		<title>bubblewrap-0.3.1-4.31 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-5226" ref_url="https://www.suse.com/security/cve/CVE-2017-5226/" source="CVE"/>
		<description>
These are all security issues fixed in the bubblewrap-0.3.1-4.31 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5226/">CVE-2017-5226</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486595" comment="bubblewrap-0.3.1-4.31 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137258" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1049092" ref_url="https://bugzilla.suse.com/1049092" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-9814" ref_url="https://www.suse.com/security/cve/CVE-2017-9814/" source="CVE"/>
		<description>
This update for cairo fixes the following issues:

The following security vulnerability was addressed:

- CVE-2017-9814: Fixed and out-of-bounds read in cairo-truetype-subset.c by
  replacing the malloc implementation with _cairo_malloc and checking the size
  before memory allocation (bsc#1049092)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-03"/>
	<updated date="2018-07-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1049092">SUSE bug 1049092</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9814/">CVE-2017-9814</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494439" comment="libcairo2-32bit-1.15.10-4.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137259" version="1" class="patch">
	<metadata>
		<title>colord-color-profiles-1.4.2-1.37 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-4349" ref_url="https://www.suse.com/security/cve/CVE-2011-4349/" source="CVE"/>
		<description>
These are all security issues fixed in the colord-color-profiles-1.4.2-1.37 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4349/">CVE-2011-4349</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482643" comment="colord-color-profiles-1.4.2-1.37 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482644" comment="libcolord-devel-1.4.2-1.37 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482645" comment="libcolord-gtk-devel-0.1.26-1.48 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482646" comment="libcolord-gtk1-0.1.26-1.48 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482647" comment="libcolorhug2-1.4.2-1.37 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482648" comment="typelib-1_0-Colord-1_0-1.4.2-1.37 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482649" comment="typelib-1_0-ColordGtk-1_0-0.1.26-1.48 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482650" comment="typelib-1_0-Colorhug-1_0-1.4.2-1.37 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137260" version="1" class="patch">
	<metadata>
		<title>conky-1.10.6-1.46 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-3616" ref_url="https://www.suse.com/security/cve/CVE-2011-3616/" source="CVE"/>
		<description>
These are all security issues fixed in the conky-1.10.6-1.46 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-3616/">CVE-2011-3616</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482651" comment="conky-1.10.6-1.46 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482652" comment="conky-doc-1.10.6-1.46 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482653" comment="vim-plugin-conky-1.10.6-1.46 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137261" version="1" class="patch">
	<metadata>
		<title>cups-pk-helper-0.2.6-1.36 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-4510" ref_url="https://www.suse.com/security/cve/CVE-2012-4510/" source="CVE"/>
		<description>
These are all security issues fixed in the cups-pk-helper-0.2.6-1.36 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4510/">CVE-2012-4510</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482654" comment="cups-pk-helper-0.2.6-1.36 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482655" comment="cups-pk-helper-lang-0.2.6-1.36 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137262" version="1" class="patch">
	<metadata>
		<title>emacs-x11-25.3-3.3.18 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-0035" ref_url="https://www.suse.com/security/cve/CVE-2012-0035/" source="CVE"/>
		<reference ref_id="CVE-2014-3421" ref_url="https://www.suse.com/security/cve/CVE-2014-3421/" source="CVE"/>
		<reference ref_id="CVE-2014-3422" ref_url="https://www.suse.com/security/cve/CVE-2014-3422/" source="CVE"/>
		<reference ref_id="CVE-2014-3423" ref_url="https://www.suse.com/security/cve/CVE-2014-3423/" source="CVE"/>
		<reference ref_id="CVE-2014-3424" ref_url="https://www.suse.com/security/cve/CVE-2014-3424/" source="CVE"/>
		<reference ref_id="CVE-2014-9483" ref_url="https://www.suse.com/security/cve/CVE-2014-9483/" source="CVE"/>
		<reference ref_id="CVE-2017-7476" ref_url="https://www.suse.com/security/cve/CVE-2017-7476/" source="CVE"/>
		<description>
These are all security issues fixed in the emacs-x11-25.3-3.3.18 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0035/">CVE-2012-0035</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3421/">CVE-2014-3421</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3422/">CVE-2014-3422</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3423/">CVE-2014-3423</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3424/">CVE-2014-3424</cve>
	<cve href="https://www.suse.com/security/cve/CVE-2014-9483/">CVE-2014-9483</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7476/">CVE-2017-7476</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486596" comment="emacs-x11-25.3-3.3.18 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137263" version="1" class="patch">
	<metadata>
		<title>eog-3.26.2-3.39 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-7447" ref_url="https://www.suse.com/security/cve/CVE-2013-7447/" source="CVE"/>
		<reference ref_id="CVE-2016-6855" ref_url="https://www.suse.com/security/cve/CVE-2016-6855/" source="CVE"/>
		<description>
These are all security issues fixed in the eog-3.26.2-3.39 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7447/">CVE-2013-7447</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6855/">CVE-2016-6855</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482657" comment="eog-3.26.2-3.39 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482658" comment="eog-devel-3.26.2-3.39 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482659" comment="eog-lang-3.26.2-3.39 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137264" version="1" class="patch">
	<metadata>
		<title>evince-3.26.0+20180128.1bd86963-2.41 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-2640" ref_url="https://www.suse.com/security/cve/CVE-2010-2640/" source="CVE"/>
		<reference ref_id="CVE-2010-2641" ref_url="https://www.suse.com/security/cve/CVE-2010-2641/" source="CVE"/>
		<reference ref_id="CVE-2010-2642" ref_url="https://www.suse.com/security/cve/CVE-2010-2642/" source="CVE"/>
		<reference ref_id="CVE-2010-2643" ref_url="https://www.suse.com/security/cve/CVE-2010-2643/" source="CVE"/>
		<reference ref_id="CVE-2017-1000083" ref_url="https://www.suse.com/security/cve/CVE-2017-1000083/" source="CVE"/>
		<description>
These are all security issues fixed in the evince-3.26.0+20180128.1bd86963-2.41 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2640/">CVE-2010-2640</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2641/">CVE-2010-2641</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2642/">CVE-2010-2642</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2643/">CVE-2010-2643</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000083/">CVE-2017-1000083</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482660" comment="evince-3.26.0+20180128.1bd86963-2.41 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482661" comment="evince-devel-3.26.0+20180128.1bd86963-2.41 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482662" comment="evince-lang-3.26.0+20180128.1bd86963-2.41 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482663" comment="evince-plugin-djvudocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482664" comment="evince-plugin-dvidocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482665" comment="evince-plugin-pdfdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482666" comment="evince-plugin-psdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482667" comment="evince-plugin-tiffdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482668" comment="evince-plugin-xpsdocument-3.26.0+20180128.1bd86963-2.41 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482669" comment="libevdocument3-4-3.26.0+20180128.1bd86963-2.41 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482670" comment="libevview3-3-3.26.0+20180128.1bd86963-2.41 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482671" comment="nautilus-evince-3.26.0+20180128.1bd86963-2.41 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482672" comment="typelib-1_0-EvinceDocument-3_0-3.26.0+20180128.1bd86963-2.41 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482673" comment="typelib-1_0-EvinceView-3_0-3.26.0+20180128.1bd86963-2.41 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137265" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1048883" ref_url="https://bugzilla.suse.com/1048883" source="BUGZILLA"/>
		<reference ref_id="1050257" ref_url="https://bugzilla.suse.com/1050257" source="BUGZILLA"/>
		<reference ref_id="1051188" ref_url="https://bugzilla.suse.com/1051188" source="BUGZILLA"/>
		<reference ref_id="1054590" ref_url="https://bugzilla.suse.com/1054590" source="BUGZILLA"/>
		<reference ref_id="1054592" ref_url="https://bugzilla.suse.com/1054592" source="BUGZILLA"/>
		<reference ref_id="1054593" ref_url="https://bugzilla.suse.com/1054593" source="BUGZILLA"/>
		<reference ref_id="1060995" ref_url="https://bugzilla.suse.com/1060995" source="BUGZILLA"/>
		<reference ref_id="1060996" ref_url="https://bugzilla.suse.com/1060996" source="BUGZILLA"/>
		<reference ref_id="1061000" ref_url="https://bugzilla.suse.com/1061000" source="BUGZILLA"/>
		<reference ref_id="1061023" ref_url="https://bugzilla.suse.com/1061023" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-11337" ref_url="https://www.suse.com/security/cve/CVE-2017-11337/" source="CVE"/>
		<reference ref_id="CVE-2017-11338" ref_url="https://www.suse.com/security/cve/CVE-2017-11338/" source="CVE"/>
		<reference ref_id="CVE-2017-11339" ref_url="https://www.suse.com/security/cve/CVE-2017-11339/" source="CVE"/>
		<reference ref_id="CVE-2017-11340" ref_url="https://www.suse.com/security/cve/CVE-2017-11340/" source="CVE"/>
		<reference ref_id="CVE-2017-11553" ref_url="https://www.suse.com/security/cve/CVE-2017-11553/" source="CVE"/>
		<reference ref_id="CVE-2017-11591" ref_url="https://www.suse.com/security/cve/CVE-2017-11591/" source="CVE"/>
		<reference ref_id="CVE-2017-11592" ref_url="https://www.suse.com/security/cve/CVE-2017-11592/" source="CVE"/>
		<reference ref_id="CVE-2017-11683" ref_url="https://www.suse.com/security/cve/CVE-2017-11683/" source="CVE"/>
		<reference ref_id="CVE-2017-12955" ref_url="https://www.suse.com/security/cve/CVE-2017-12955/" source="CVE"/>
		<reference ref_id="CVE-2017-12956" ref_url="https://www.suse.com/security/cve/CVE-2017-12956/" source="CVE"/>
		<reference ref_id="CVE-2017-12957" ref_url="https://www.suse.com/security/cve/CVE-2017-12957/" source="CVE"/>
		<reference ref_id="CVE-2017-14859" ref_url="https://www.suse.com/security/cve/CVE-2017-14859/" source="CVE"/>
		<reference ref_id="CVE-2017-14860" ref_url="https://www.suse.com/security/cve/CVE-2017-14860/" source="CVE"/>
		<reference ref_id="CVE-2017-14862" ref_url="https://www.suse.com/security/cve/CVE-2017-14862/" source="CVE"/>
		<reference ref_id="CVE-2017-14864" ref_url="https://www.suse.com/security/cve/CVE-2017-14864/" source="CVE"/>
		<description>
This update for exiv2 to 0.26 fixes the following security issues:

- CVE-2017-14864: Prevent invalid memory address dereference in Exiv2::getULong
  that could have caused a segmentation fault and application crash, which leads
  to denial of service (bsc#1060995).
- CVE-2017-14862: Prevent invalid memory address dereference in
  Exiv2::DataValue::read that could have caused a segmentation fault and
  application crash, which leads to denial of service (bsc#1060996).
- CVE-2017-14859: Prevent invalid memory address dereference in
  Exiv2::StringValueBase::read that could have caused a segmentation fault and
  application crash, which leads to denial of service (bsc#1061000).
- CVE-2017-14860: Prevent heap-based buffer over-read in the
  Exiv2::Jp2Image::readMetadata function via a crafted input that could have lead
  to a denial of service attack (bsc#1061023).
- CVE-2017-11337: Prevent invalid free in the Action::TaskFactory::cleanup
  function via a crafted input that could have lead to a remote denial of service
  attack (bsc#1048883).
- CVE-2017-11338: Prevent infinite loop in the Exiv2::Image::printIFDStructure
  function via a crafted input that could have lead to a remote denial of service
  attack (bsc#1048883).
- CVE-2017-11339: Prevent heap-based buffer overflow in the
  Image::printIFDStructure function via a crafted input that could have lead to a
  remote denial of service attack (bsc#1048883).
- CVE-2017-11340: Prevent Segmentation fault in the XmpParser::terminate()
  function via a crafted input that could have lead to a remote denial of service
  attack (bsc#1048883).
- CVE-2017-12955: Prevent heap-based buffer overflow. The vulnerability caused
  an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to
  remote denial of service or possibly unspecified other impact (bsc#1054593).
- CVE-2017-12956: Preventn illegal address access in
  Exiv2::FileIo::path[abi:cxx11]() that could have lead to remote denial of
  service (bsc#1054592).
- CVE-2017-12957: Prevent heap-based buffer over-read that was triggered in the
  Exiv2::Image::io function and could have lead to remote denial of service
  (bsc#1054590).
- CVE-2017-11683: Prevent reachable assertion in the
  Internal::TiffReader::visitDirectory function that could have lead to a remote
  denial of service attack via crafted input (bsc#1051188).
- CVE-2017-11591: Prevent Floating point exception in the Exiv2::ValueType
  function that could have lead to a remote denial of service attack via crafted
  input (bsc#1050257).
- CVE-2017-11553: Prevent illegal address access in the extend_alias_table
  function via a crafted input could have lead to remote denial of service.
- CVE-2017-11592: Prevent mismatched Memory Management Routines vulnerability
  in the Exiv2::FileIo::seek function that could have lead to a remote denial of
  service attack (heap memory corruption) via crafted input.
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-05"/>
	<updated date="2018-07-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1048883">SUSE bug 1048883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050257">SUSE bug 1050257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051188">SUSE bug 1051188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054590">SUSE bug 1054590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054592">SUSE bug 1054592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054593">SUSE bug 1054593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060995">SUSE bug 1060995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060996">SUSE bug 1060996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061000">SUSE bug 1061000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061023">SUSE bug 1061023</bugzilla>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11337/">CVE-2017-11337</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11338/">CVE-2017-11338</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11339/">CVE-2017-11339</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11340/">CVE-2017-11340</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11553/">CVE-2017-11553</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11591/">CVE-2017-11591</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11592/">CVE-2017-11592</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11683/">CVE-2017-11683</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12955/">CVE-2017-12955</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12956/">CVE-2017-12956</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12957/">CVE-2017-12957</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14859/">CVE-2017-14859</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14860/">CVE-2017-14860</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14862/">CVE-2017-14862</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14864/">CVE-2017-14864</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789832" comment="libexiv2-26-0.26-6.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789833" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137266" version="1" class="patch">
	<metadata>
		<title>fetchmailconf-6.3.26-3.27 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-2666" ref_url="https://www.suse.com/security/cve/CVE-2009-2666/" source="CVE"/>
		<reference ref_id="CVE-2010-1167" ref_url="https://www.suse.com/security/cve/CVE-2010-1167/" source="CVE"/>
		<reference ref_id="CVE-2011-1947" ref_url="https://www.suse.com/security/cve/CVE-2011-1947/" source="CVE"/>
		<reference ref_id="CVE-2011-3389" ref_url="https://www.suse.com/security/cve/CVE-2011-3389/" source="CVE"/>
		<reference ref_id="CVE-2012-3482" ref_url="https://www.suse.com/security/cve/CVE-2012-3482/" source="CVE"/>
		<description>
These are all security issues fixed in the fetchmailconf-6.3.26-3.27 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2666/">CVE-2009-2666</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1167/">CVE-2010-1167</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1947/">CVE-2011-1947</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-3389/">CVE-2011-3389</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3482/">CVE-2012-3482</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482674" comment="fetchmailconf-6.3.26-3.27 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137267" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1100356" ref_url="https://bugzilla.suse.com/1100356" source="BUGZILLA"/>
		<reference ref_id="1102687" ref_url="https://bugzilla.suse.com/1102687" source="BUGZILLA"/>
		<reference ref_id="1102688" ref_url="https://bugzilla.suse.com/1102688" source="BUGZILLA"/>
		<reference ref_id="1102689" ref_url="https://bugzilla.suse.com/1102689" source="BUGZILLA"/>
		<reference ref_id="1102899" ref_url="https://bugzilla.suse.com/1102899" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13302" ref_url="https://www.suse.com/security/cve/CVE-2018-13302/" source="CVE"/>
		<reference ref_id="CVE-2018-1999010" ref_url="https://www.suse.com/security/cve/CVE-2018-1999010/" source="CVE"/>
		<reference ref_id="CVE-2018-1999011" ref_url="https://www.suse.com/security/cve/CVE-2018-1999011/" source="CVE"/>
		<reference ref_id="CVE-2018-1999012" ref_url="https://www.suse.com/security/cve/CVE-2018-1999012/" source="CVE"/>
		<reference ref_id="CVE-2018-1999013" ref_url="https://www.suse.com/security/cve/CVE-2018-1999013/" source="CVE"/>
		<description>
This update for ffmpeg fixes the following issues:

Security issues fixed:

- CVE-2018-13302: Fixed out of array access issue (bsc#1100356).
- CVE-2018-1999010: Fixed multiple out of array access vulnerabilities in the
  mms protocol that could result in accessing out of bound data via specially
  crafted input files (bnc#1102899)
- CVE-2018-1999011: Fixed a heap buffer overflow in asf_o format demuxer that
  could result in remote code execution (bnc#1102689)
- CVE-2018-1999012: Fixed an infinite loop vulnerability in pva format demuxer
  that could result in excessive amount of ressource allocation like CPU an RAM
  (CVE-2018-1999012 bnc#1102688).
- CVE-2018-1999013: Fixed an use-after-free vulnerability in the realmedia
  demuxer that could allow remote attackers to read heap memory (bnc#1102687)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-08-10"/>
	<updated date="2018-08-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1100356">SUSE bug 1100356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102687">SUSE bug 1102687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102688">SUSE bug 1102688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102689">SUSE bug 1102689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102899">SUSE bug 1102899</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13302/">CVE-2018-13302</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999010/">CVE-2018-1999010</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999011/">CVE-2018-1999011</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999012/">CVE-2018-1999012</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999013/">CVE-2018-1999013</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789834" comment="libavcodec57-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789835" comment="libavutil-devel-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789836" comment="libavutil55-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789837" comment="libpostproc-devel-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789838" comment="libpostproc54-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789839" comment="libswresample-devel-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789840" comment="libswresample2-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789841" comment="libswscale-devel-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789842" comment="libswscale4-3.4.2-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137268" version="1" class="patch">
	<metadata>
		<title>firewall-applet-0.5.5-4.24.9 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-5410" ref_url="https://www.suse.com/security/cve/CVE-2016-5410/" source="CVE"/>
		<description>
These are all security issues fixed in the firewall-applet-0.5.5-4.24.9 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5410/">CVE-2016-5410</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486597" comment="firewall-applet-0.5.5-4.24.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486598" comment="firewall-config-0.5.5-4.24.9 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137269" version="1" class="patch">
	<metadata>
		<title>flatpak-1.2.3-2.12 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-8659" ref_url="https://www.suse.com/security/cve/CVE-2016-8659/" source="CVE"/>
		<reference ref_id="CVE-2017-5226" ref_url="https://www.suse.com/security/cve/CVE-2017-5226/" source="CVE"/>
		<reference ref_id="CVE-2019-10063" ref_url="https://www.suse.com/security/cve/CVE-2019-10063/" source="CVE"/>
		<reference ref_id="CVE-2019-5736" ref_url="https://www.suse.com/security/cve/CVE-2019-5736/" source="CVE"/>
		<description>
These are all security issues fixed in the flatpak-1.2.3-2.12 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8659/">CVE-2016-8659</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5226/">CVE-2017-5226</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10063/">CVE-2019-10063</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5736/">CVE-2019-5736</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486599" comment="flatpak-1.2.3-2.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486600" comment="flatpak-devel-1.2.3-2.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486601" comment="flatpak-zsh-completion-1.2.3-2.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486602" comment="libflatpak0-1.2.3-2.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486603" comment="typelib-1_0-Flatpak-1_0-1.2.3-2.12 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137270" version="1" class="patch">
	<metadata>
		<title>gcab-1.1-1.15 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-0552" ref_url="https://www.suse.com/security/cve/CVE-2015-0552/" source="CVE"/>
		<reference ref_id="CVE-2018-5345" ref_url="https://www.suse.com/security/cve/CVE-2018-5345/" source="CVE"/>
		<description>
These are all security issues fixed in the gcab-1.1-1.15 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0552/">CVE-2015-0552</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5345/">CVE-2018-5345</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482681" comment="gcab-1.1-1.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482682" comment="gcab-devel-1.1-1.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482683" comment="gcab-lang-1.1-1.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482684" comment="libgcab-1_0-0-1.1-1.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482685" comment="typelib-1_0-GCab-1_0-1.1-1.15 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137271" version="1" class="patch">
	<metadata>
		<title>gd-2.2.5-4.6.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1123361" ref_url="https://bugzilla.suse.com/1123361" source="BUGZILLA"/>
		<reference ref_id="1123522" ref_url="https://bugzilla.suse.com/1123522" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6977" ref_url="https://www.suse.com/security/cve/CVE-2019-6977/" source="CVE"/>
		<reference ref_id="CVE-2019-6978" ref_url="https://www.suse.com/security/cve/CVE-2019-6978/" source="CVE"/>
		<description>
This update for gd fixes the following issues:

Security issues fixed:

- CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function (bsc#1123361).
- CVE-2019-6978: Fixed a double free in the gdImage*Ptr() functions (bsc#1123522).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-27"/>
	<updated date="2019-03-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1123361">SUSE bug 1123361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123522">SUSE bug 1123522</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6977/">CVE-2019-6977</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6978/">CVE-2019-6978</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789843" comment="gd-2.2.5-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789844" comment="gd-devel-2.2.5-4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137272" version="1" class="patch">
	<metadata>
		<title>gdk-pixbuf-query-loaders-32bit-2.36.11-3.19 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-2485" ref_url="https://www.suse.com/security/cve/CVE-2011-2485/" source="CVE"/>
		<reference ref_id="CVE-2015-4491" ref_url="https://www.suse.com/security/cve/CVE-2015-4491/" source="CVE"/>
		<reference ref_id="CVE-2015-7552" ref_url="https://www.suse.com/security/cve/CVE-2015-7552/" source="CVE"/>
		<reference ref_id="CVE-2015-7673" ref_url="https://www.suse.com/security/cve/CVE-2015-7673/" source="CVE"/>
		<reference ref_id="CVE-2015-7674" ref_url="https://www.suse.com/security/cve/CVE-2015-7674/" source="CVE"/>
		<reference ref_id="CVE-2016-6352" ref_url="https://www.suse.com/security/cve/CVE-2016-6352/" source="CVE"/>
		<reference ref_id="CVE-2017-2862" ref_url="https://www.suse.com/security/cve/CVE-2017-2862/" source="CVE"/>
		<reference ref_id="CVE-2017-2870" ref_url="https://www.suse.com/security/cve/CVE-2017-2870/" source="CVE"/>
		<reference ref_id="CVE-2017-6312" ref_url="https://www.suse.com/security/cve/CVE-2017-6312/" source="CVE"/>
		<reference ref_id="CVE-2017-6313" ref_url="https://www.suse.com/security/cve/CVE-2017-6313/" source="CVE"/>
		<description>
These are all security issues fixed in the gdk-pixbuf-query-loaders-32bit-2.36.11-3.19 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2485/">CVE-2011-2485</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4491/">CVE-2015-4491</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7552/">CVE-2015-7552</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7673/">CVE-2015-7673</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7674/">CVE-2015-7674</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6352/">CVE-2016-6352</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2862/">CVE-2017-2862</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-2870/">CVE-2017-2870</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6312/">CVE-2017-6312</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-6313/">CVE-2017-6313</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482688" comment="gdk-pixbuf-query-loaders-32bit-2.36.11-3.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482689" comment="libgdk_pixbuf-2_0-0-32bit-2.36.11-3.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137273" version="1" class="patch">
	<metadata>
		<title>gdm-3.26.2.1-13.19.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1081947" ref_url="https://bugzilla.suse.com/1081947" source="BUGZILLA"/>
		<reference ref_id="1103093" ref_url="https://bugzilla.suse.com/1103093" source="BUGZILLA"/>
		<reference ref_id="1103737" ref_url="https://bugzilla.suse.com/1103737" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14424" ref_url="https://www.suse.com/security/cve/CVE-2018-14424/" source="CVE"/>
		<description>
This update for gdm provides the following fixes:

This security issue was fixed:

- CVE-2018-14424: The daemon in GDM did not properly unexport display objects
  from its D-Bus interface when they are destroyed, which allowed a local
  attacker to trigger a use-after-free via a specially crafted sequence of D-Bus
  method calls, resulting in a denial of service or potential code execution
  (bsc#1103737)

These non-security issues were fixed:

- Enable pam_keyinit module (bsc#1081947)
- Fix a build race in SLE (bsc#1103093)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-09-20"/>
	<updated date="2018-09-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1081947">SUSE bug 1081947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103093">SUSE bug 1103093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103737">SUSE bug 1103737</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14424/">CVE-2018-14424</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789845" comment="gdm-3.26.2.1-13.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789846" comment="gdm-devel-3.26.2.1-13.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494500" comment="gdm-lang-3.26.2.1-13.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494501" comment="gdmflexiserver-3.26.2.1-13.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789847" comment="libgdm1-3.26.2.1-13.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789848" comment="typelib-1_0-Gdm-1_0-3.26.2.1-13.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137274" version="1" class="patch">
	<metadata>
		<title>gnome-online-accounts-devel-3.26.2-3.34 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-0240" ref_url="https://www.suse.com/security/cve/CVE-2013-0240/" source="CVE"/>
		<reference ref_id="CVE-2013-1799" ref_url="https://www.suse.com/security/cve/CVE-2013-1799/" source="CVE"/>
		<description>
These are all security issues fixed in the gnome-online-accounts-devel-3.26.2-3.34 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0240/">CVE-2013-0240</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1799/">CVE-2013-1799</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482702" comment="gnome-online-accounts-devel-3.26.2-3.34 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482703" comment="libgoa-1_0-0-3.26.2-3.34 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482704" comment="libgoa-backend-1_0-1-3.26.2-3.34 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482705" comment="typelib-1_0-Goa-1_0-3.26.2-3.34 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137275" version="1" class="patch">
	<metadata>
		<title>gnome-settings-daemon-3.26.2-6.12 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-7300" ref_url="https://www.suse.com/security/cve/CVE-2014-7300/" source="CVE"/>
		<description>
These are all security issues fixed in the gnome-settings-daemon-3.26.2-6.12 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7300/">CVE-2014-7300</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482706" comment="gnome-settings-daemon-3.26.2-6.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482707" comment="gnome-settings-daemon-devel-3.26.2-6.12 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482708" comment="gnome-settings-daemon-lang-3.26.2-6.12 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137276" version="1" class="patch">
	<metadata>
		<title>gstreamer-devel-1.12.5-1.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-10198" ref_url="https://www.suse.com/security/cve/CVE-2016-10198/" source="CVE"/>
		<reference ref_id="CVE-2016-10199" ref_url="https://www.suse.com/security/cve/CVE-2016-10199/" source="CVE"/>
		<reference ref_id="CVE-2017-5837" ref_url="https://www.suse.com/security/cve/CVE-2017-5837/" source="CVE"/>
		<reference ref_id="CVE-2017-5838" ref_url="https://www.suse.com/security/cve/CVE-2017-5838/" source="CVE"/>
		<reference ref_id="CVE-2017-5839" ref_url="https://www.suse.com/security/cve/CVE-2017-5839/" source="CVE"/>
		<reference ref_id="CVE-2017-5840" ref_url="https://www.suse.com/security/cve/CVE-2017-5840/" source="CVE"/>
		<reference ref_id="CVE-2017-5841" ref_url="https://www.suse.com/security/cve/CVE-2017-5841/" source="CVE"/>
		<reference ref_id="CVE-2017-5842" ref_url="https://www.suse.com/security/cve/CVE-2017-5842/" source="CVE"/>
		<reference ref_id="CVE-2017-5843" ref_url="https://www.suse.com/security/cve/CVE-2017-5843/" source="CVE"/>
		<reference ref_id="CVE-2017-5844" ref_url="https://www.suse.com/security/cve/CVE-2017-5844/" source="CVE"/>
		<reference ref_id="CVE-2017-5845" ref_url="https://www.suse.com/security/cve/CVE-2017-5845/" source="CVE"/>
		<reference ref_id="CVE-2017-5846" ref_url="https://www.suse.com/security/cve/CVE-2017-5846/" source="CVE"/>
		<reference ref_id="CVE-2017-5847" ref_url="https://www.suse.com/security/cve/CVE-2017-5847/" source="CVE"/>
		<reference ref_id="CVE-2017-5848" ref_url="https://www.suse.com/security/cve/CVE-2017-5848/" source="CVE"/>
		<description>
These are all security issues fixed in the gstreamer-devel-1.12.5-1.17 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10198/">CVE-2016-10198</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10199/">CVE-2016-10199</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5837/">CVE-2017-5837</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5838/">CVE-2017-5838</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5839/">CVE-2017-5839</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5840/">CVE-2017-5840</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5841/">CVE-2017-5841</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5842/">CVE-2017-5842</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5843/">CVE-2017-5843</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5844/">CVE-2017-5844</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5845/">CVE-2017-5845</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5846/">CVE-2017-5846</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5847/">CVE-2017-5847</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5848/">CVE-2017-5848</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482712" comment="gstreamer-devel-1.12.5-1.17 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482713" comment="gstreamer-utils-1.12.5-1.17 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482714" comment="typelib-1_0-Gst-1_0-1.12.5-1.17 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137277" version="1" class="patch">
	<metadata>
		<title>gtk2-data-2.24.32-2.27 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-7447" ref_url="https://www.suse.com/security/cve/CVE-2013-7447/" source="CVE"/>
		<description>
These are all security issues fixed in the gtk2-data-2.24.32-2.27 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7447/">CVE-2013-7447</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482735" comment="gtk2-data-2.24.32-2.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482736" comment="gtk2-tools-32bit-2.24.32-2.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482737" comment="libgtk-2_0-0-32bit-2.24.32-2.27 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137278" version="1" class="patch">
	<metadata>
		<title>gvfs-1.34.2.1-4.6.1 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1125084" ref_url="https://bugzilla.suse.com/1125084" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3827" ref_url="https://www.suse.com/security/cve/CVE-2019-3827/" source="CVE"/>
		<description>
This update for gvfs fixes the following issues:

Security vulnerability fixed:

- CVE-2019-3827: Fixed an issue whereby an unprivileged user was not prompted to
  give a password when acessing root owned files. (bsc#1125084)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-19"/>
	<updated date="2019-02-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1125084">SUSE bug 1125084</bugzilla>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2019-3827/">CVE-2019-3827</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789849" comment="gvfs-1.34.2.1-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789850" comment="gvfs-backend-afc-1.34.2.1-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789851" comment="gvfs-backend-samba-1.34.2.1-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789852" comment="gvfs-backends-1.34.2.1-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789853" comment="gvfs-devel-1.34.2.1-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789854" comment="gvfs-fuse-1.34.2.1-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495017" comment="gvfs-lang-1.34.2.1-4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137279" version="1" class="patch">
	<metadata>
		<title>gvim-8.0.1568-3.20 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-0316" ref_url="https://www.suse.com/security/cve/CVE-2009-0316/" source="CVE"/>
		<reference ref_id="CVE-2017-1000382" ref_url="https://www.suse.com/security/cve/CVE-2017-1000382/" source="CVE"/>
		<reference ref_id="CVE-2017-5953" ref_url="https://www.suse.com/security/cve/CVE-2017-5953/" source="CVE"/>
		<reference ref_id="CVE-2017-6349" ref_url="https://www.suse.com/security/cve/CVE-2017-6349/" source="CVE"/>
		<reference ref_id="CVE-2017-6350" ref_url="https://www.suse.com/security/cve/CVE-2017-6350/" source="CVE"/>
		<description>
These are all security issues fixed in the gvim-8.0.1568-3.20 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0316/">CVE-2009-0316</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000382/">CVE-2017-1000382</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5953/">CVE-2017-5953</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6349/">CVE-2017-6349</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6350/">CVE-2017-6350</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482738" comment="gvim-8.0.1568-3.20 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137280" version="1" class="patch">
	<metadata>
		<title>ibus-chewing-1.4.14-4.39 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-4509" ref_url="https://www.suse.com/security/cve/CVE-2013-4509/" source="CVE"/>
		<description>
These are all security issues fixed in the ibus-chewing-1.4.14-4.39 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4509/">CVE-2013-4509</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486643" comment="ibus-chewing-1.4.14-4.39 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486644" comment="ibus-pinyin-1.5.0-4.37 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137281" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1010783" ref_url="https://bugzilla.suse.com/1010783" source="BUGZILLA"/>
		<reference ref_id="1117505" ref_url="https://bugzilla.suse.com/1117505" source="BUGZILLA"/>
		<reference ref_id="1117511" ref_url="https://bugzilla.suse.com/1117511" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-9396" ref_url="https://www.suse.com/security/cve/CVE-2016-9396/" source="CVE"/>
		<reference ref_id="CVE-2018-19539" ref_url="https://www.suse.com/security/cve/CVE-2018-19539/" source="CVE"/>
		<reference ref_id="CVE-2018-19542" ref_url="https://www.suse.com/security/cve/CVE-2018-19542/" source="CVE"/>
		<description>
This update for jasper fixes the following issues:

Security issues fixed:

- CVE-2018-19542: Fixed a denial of service in jp2_decode (bsc#1117505).
- CVE-2018-19539: Fixed a denial of service in jas_image_readcmpt (bsc#1117511).
- CVE-2016-9396: Fixed a denial of service in jpc_cox_getcompparms (bsc#1010783).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-24"/>
	<updated date="2019-04-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1010783">SUSE bug 1010783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117505">SUSE bug 1117505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117511">SUSE bug 1117511</bugzilla>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9396/">CVE-2016-9396</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19539/">CVE-2018-19539</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19542/">CVE-2018-19542</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789855" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137282" version="1" class="patch">
	<metadata>
		<title>libICE6-32bit-1.0.9-1.25 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-2626" ref_url="https://www.suse.com/security/cve/CVE-2017-2626/" source="CVE"/>
		<description>
These are all security issues fixed in the libICE6-32bit-1.0.9-1.25 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-2626/">CVE-2017-2626</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482742" comment="libICE6-32bit-1.0.9-1.25 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137283" version="1" class="patch">
	<metadata>
		<title>libIlmImf-2_2-23-2.2.1-3.3.11 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-1720" ref_url="https://www.suse.com/security/cve/CVE-2009-1720/" source="CVE"/>
		<reference ref_id="CVE-2009-1721" ref_url="https://www.suse.com/security/cve/CVE-2009-1721/" source="CVE"/>
		<reference ref_id="CVE-2017-12596" ref_url="https://www.suse.com/security/cve/CVE-2017-12596/" source="CVE"/>
		<reference ref_id="CVE-2017-9110" ref_url="https://www.suse.com/security/cve/CVE-2017-9110/" source="CVE"/>
		<reference ref_id="CVE-2017-9111" ref_url="https://www.suse.com/security/cve/CVE-2017-9111/" source="CVE"/>
		<reference ref_id="CVE-2017-9112" ref_url="https://www.suse.com/security/cve/CVE-2017-9112/" source="CVE"/>
		<reference ref_id="CVE-2017-9113" ref_url="https://www.suse.com/security/cve/CVE-2017-9113/" source="CVE"/>
		<reference ref_id="CVE-2017-9114" ref_url="https://www.suse.com/security/cve/CVE-2017-9114/" source="CVE"/>
		<reference ref_id="CVE-2017-9115" ref_url="https://www.suse.com/security/cve/CVE-2017-9115/" source="CVE"/>
		<reference ref_id="CVE-2017-9116" ref_url="https://www.suse.com/security/cve/CVE-2017-9116/" source="CVE"/>
		<reference ref_id="CVE-2018-18444" ref_url="https://www.suse.com/security/cve/CVE-2018-18444/" source="CVE"/>
		<description>
These are all security issues fixed in the libIlmImf-2_2-23-2.2.1-3.3.11 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-1720/">CVE-2009-1720</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1721/">CVE-2009-1721</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12596/">CVE-2017-12596</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9110/">CVE-2017-9110</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-9111/">CVE-2017-9111</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9112/">CVE-2017-9112</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-9113/">CVE-2017-9113</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9114/">CVE-2017-9114</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-9115/">CVE-2017-9115</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9116/">CVE-2017-9116</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18444/">CVE-2018-18444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486645" comment="libIlmImf-2_2-23-2.2.1-3.3.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486646" comment="libIlmImfUtil-2_2-23-2.2.1-3.3.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486647" comment="openexr-devel-2.2.1-3.3.11 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137284" version="1" class="patch">
	<metadata>
		<title>libQt5OpenGLExtensions-devel-static-5.9.7-11.11 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-0295" ref_url="https://www.suse.com/security/cve/CVE-2015-0295/" source="CVE"/>
		<description>
These are all security issues fixed in the libQt5OpenGLExtensions-devel-static-5.9.7-11.11 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0295/">CVE-2015-0295</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486648" comment="libQt5OpenGLExtensions-devel-static-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486649" comment="libQt5Sql5-mysql-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486650" comment="libQt5Sql5-postgresql-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486651" comment="libQt5Sql5-unixODBC-5.9.7-11.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486652" comment="libqt5-qtbase-platformtheme-gtk3-5.9.7-11.11 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137285" version="1" class="patch">
	<metadata>
		<title>libSDL-1_2-0-1.2.15-3.9.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2019-7572" ref_url="https://www.suse.com/security/cve/CVE-2019-7572/" source="CVE"/>
		<reference ref_id="CVE-2019-7573" ref_url="https://www.suse.com/security/cve/CVE-2019-7573/" source="CVE"/>
		<reference ref_id="CVE-2019-7574" ref_url="https://www.suse.com/security/cve/CVE-2019-7574/" source="CVE"/>
		<reference ref_id="CVE-2019-7575" ref_url="https://www.suse.com/security/cve/CVE-2019-7575/" source="CVE"/>
		<reference ref_id="CVE-2019-7576" ref_url="https://www.suse.com/security/cve/CVE-2019-7576/" source="CVE"/>
		<reference ref_id="CVE-2019-7577" ref_url="https://www.suse.com/security/cve/CVE-2019-7577/" source="CVE"/>
		<reference ref_id="CVE-2019-7578" ref_url="https://www.suse.com/security/cve/CVE-2019-7578/" source="CVE"/>
		<reference ref_id="CVE-2019-7635" ref_url="https://www.suse.com/security/cve/CVE-2019-7635/" source="CVE"/>
		<reference ref_id="CVE-2019-7636" ref_url="https://www.suse.com/security/cve/CVE-2019-7636/" source="CVE"/>
		<reference ref_id="CVE-2019-7637" ref_url="https://www.suse.com/security/cve/CVE-2019-7637/" source="CVE"/>
		<reference ref_id="CVE-2019-7638" ref_url="https://www.suse.com/security/cve/CVE-2019-7638/" source="CVE"/>
		<description>
These are all security issues fixed in the libSDL-1_2-0-1.2.15-3.9.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-7572/">CVE-2019-7572</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7573/">CVE-2019-7573</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7574/">CVE-2019-7574</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7575/">CVE-2019-7575</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7576/">CVE-2019-7576</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7577/">CVE-2019-7577</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7578/">CVE-2019-7578</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7635/">CVE-2019-7635</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7636/">CVE-2019-7636</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7637/">CVE-2019-7637</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7638/">CVE-2019-7638</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486653" comment="libSDL-1_2-0-1.2.15-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486654" comment="libSDL-devel-1.2.15-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137286" version="1" class="patch">
	<metadata>
		<title>libSDL2-2_0-0-2.0.8-3.9.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-2888" ref_url="https://www.suse.com/security/cve/CVE-2017-2888/" source="CVE"/>
		<reference ref_id="CVE-2019-7572" ref_url="https://www.suse.com/security/cve/CVE-2019-7572/" source="CVE"/>
		<reference ref_id="CVE-2019-7573" ref_url="https://www.suse.com/security/cve/CVE-2019-7573/" source="CVE"/>
		<reference ref_id="CVE-2019-7574" ref_url="https://www.suse.com/security/cve/CVE-2019-7574/" source="CVE"/>
		<reference ref_id="CVE-2019-7575" ref_url="https://www.suse.com/security/cve/CVE-2019-7575/" source="CVE"/>
		<reference ref_id="CVE-2019-7576" ref_url="https://www.suse.com/security/cve/CVE-2019-7576/" source="CVE"/>
		<reference ref_id="CVE-2019-7577" ref_url="https://www.suse.com/security/cve/CVE-2019-7577/" source="CVE"/>
		<reference ref_id="CVE-2019-7578" ref_url="https://www.suse.com/security/cve/CVE-2019-7578/" source="CVE"/>
		<reference ref_id="CVE-2019-7635" ref_url="https://www.suse.com/security/cve/CVE-2019-7635/" source="CVE"/>
		<reference ref_id="CVE-2019-7636" ref_url="https://www.suse.com/security/cve/CVE-2019-7636/" source="CVE"/>
		<reference ref_id="CVE-2019-7637" ref_url="https://www.suse.com/security/cve/CVE-2019-7637/" source="CVE"/>
		<reference ref_id="CVE-2019-7638" ref_url="https://www.suse.com/security/cve/CVE-2019-7638/" source="CVE"/>
		<description>
These are all security issues fixed in the libSDL2-2_0-0-2.0.8-3.9.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2888/">CVE-2017-2888</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-7572/">CVE-2019-7572</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7573/">CVE-2019-7573</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7574/">CVE-2019-7574</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7575/">CVE-2019-7575</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7576/">CVE-2019-7576</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7577/">CVE-2019-7577</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7578/">CVE-2019-7578</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7635/">CVE-2019-7635</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7636/">CVE-2019-7636</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7637/">CVE-2019-7637</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7638/">CVE-2019-7638</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486655" comment="libSDL2-2_0-0-2.0.8-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486656" comment="libSDL2-devel-2.0.8-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137287" version="1" class="patch">
	<metadata>
		<title>libSoundTouch0-1.8.0-3.11.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-1000223" ref_url="https://www.suse.com/security/cve/CVE-2018-1000223/" source="CVE"/>
		<reference ref_id="CVE-2018-17096" ref_url="https://www.suse.com/security/cve/CVE-2018-17096/" source="CVE"/>
		<reference ref_id="CVE-2018-17097" ref_url="https://www.suse.com/security/cve/CVE-2018-17097/" source="CVE"/>
		<reference ref_id="CVE-2018-17098" ref_url="https://www.suse.com/security/cve/CVE-2018-17098/" source="CVE"/>
		<description>
These are all security issues fixed in the libSoundTouch0-1.8.0-3.11.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000223/">CVE-2018-1000223</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17096/">CVE-2018-17096</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17097/">CVE-2018-17097</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17098/">CVE-2018-17098</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486657" comment="libSoundTouch0-1.8.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486658" comment="soundtouch-devel-1.8.0-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137288" version="1" class="patch">
	<metadata>
		<title>libXcursor1-32bit-1.1.15-1.18 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2003" ref_url="https://www.suse.com/security/cve/CVE-2013-2003/" source="CVE"/>
		<reference ref_id="CVE-2017-16612" ref_url="https://www.suse.com/security/cve/CVE-2017-16612/" source="CVE"/>
		<description>
These are all security issues fixed in the libXcursor1-32bit-1.1.15-1.18 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2003/">CVE-2013-2003</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16612/">CVE-2017-16612</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482753" comment="libXcursor1-32bit-1.1.15-1.18 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137289" version="1" class="patch">
	<metadata>
		<title>libXi6-32bit-1.7.9-1.23 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1984" ref_url="https://www.suse.com/security/cve/CVE-2013-1984/" source="CVE"/>
		<reference ref_id="CVE-2013-1995" ref_url="https://www.suse.com/security/cve/CVE-2013-1995/" source="CVE"/>
		<reference ref_id="CVE-2013-1998" ref_url="https://www.suse.com/security/cve/CVE-2013-1998/" source="CVE"/>
		<description>
These are all security issues fixed in the libXi6-32bit-1.7.9-1.23 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1984/">CVE-2013-1984</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1995/">CVE-2013-1995</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1998/">CVE-2013-1998</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482754" comment="libXi6-32bit-1.7.9-1.23 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137290" version="1" class="patch">
	<metadata>
		<title>libXinerama1-32bit-1.1.3-1.22 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1985" ref_url="https://www.suse.com/security/cve/CVE-2013-1985/" source="CVE"/>
		<description>
These are all security issues fixed in the libXinerama1-32bit-1.1.3-1.22 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1985/">CVE-2013-1985</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482755" comment="libXinerama1-32bit-1.1.3-1.22 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137291" version="1" class="patch">
	<metadata>
		<title>libXp6-32bit-1.0.3-1.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2062" ref_url="https://www.suse.com/security/cve/CVE-2013-2062/" source="CVE"/>
		<description>
These are all security issues fixed in the libXp6-32bit-1.0.3-1.24 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2062/">CVE-2013-2062</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482756" comment="libXp6-32bit-1.0.3-1.24 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137292" version="1" class="patch">
	<metadata>
		<title>libXrandr2-32bit-1.5.1-2.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-1986" ref_url="https://www.suse.com/security/cve/CVE-2013-1986/" source="CVE"/>
		<reference ref_id="CVE-2016-7947" ref_url="https://www.suse.com/security/cve/CVE-2016-7947/" source="CVE"/>
		<reference ref_id="CVE-2016-7948" ref_url="https://www.suse.com/security/cve/CVE-2016-7948/" source="CVE"/>
		<description>
These are all security issues fixed in the libXrandr2-32bit-1.5.1-2.17 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1986/">CVE-2013-1986</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7947/">CVE-2016-7947</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7948/">CVE-2016-7948</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482757" comment="libXrandr2-32bit-1.5.1-2.17 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137293" version="1" class="patch">
	<metadata>
		<title>libXt6-32bit-1.1.5-2.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2002" ref_url="https://www.suse.com/security/cve/CVE-2013-2002/" source="CVE"/>
		<reference ref_id="CVE-2013-2005" ref_url="https://www.suse.com/security/cve/CVE-2013-2005/" source="CVE"/>
		<description>
These are all security issues fixed in the libXt6-32bit-1.1.5-2.24 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2002/">CVE-2013-2002</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2005/">CVE-2013-2005</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482758" comment="libXt6-32bit-1.1.5-2.24 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137294" version="1" class="patch">
	<metadata>
		<title>libXvnc-devel-1.9.0-17.32 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-8240" ref_url="https://www.suse.com/security/cve/CVE-2014-8240/" source="CVE"/>
		<reference ref_id="CVE-2015-0255" ref_url="https://www.suse.com/security/cve/CVE-2015-0255/" source="CVE"/>
		<description>
These are all security issues fixed in the libXvnc-devel-1.9.0-17.32 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8240/">CVE-2014-8240</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0255/">CVE-2015-0255</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486659" comment="libXvnc-devel-1.9.0-17.32 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137295" version="1" class="patch">
	<metadata>
		<title>libass-devel-0.14.0-1.25 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-7969" ref_url="https://www.suse.com/security/cve/CVE-2016-7969/" source="CVE"/>
		<reference ref_id="CVE-2016-7970" ref_url="https://www.suse.com/security/cve/CVE-2016-7970/" source="CVE"/>
		<reference ref_id="CVE-2016-7972" ref_url="https://www.suse.com/security/cve/CVE-2016-7972/" source="CVE"/>
		<description>
These are all security issues fixed in the libass-devel-0.14.0-1.25 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7969/">CVE-2016-7969</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7970/">CVE-2016-7970</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7972/">CVE-2016-7972</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482760" comment="libass-devel-0.14.0-1.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482761" comment="libass9-0.14.0-1.25 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137296" version="1" class="patch">
	<metadata>
		<title>libavcodec57-3.4.2-4.12.4 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-8216" ref_url="https://www.suse.com/security/cve/CVE-2015-8216/" source="CVE"/>
		<reference ref_id="CVE-2015-8217" ref_url="https://www.suse.com/security/cve/CVE-2015-8217/" source="CVE"/>
		<reference ref_id="CVE-2015-8218" ref_url="https://www.suse.com/security/cve/CVE-2015-8218/" source="CVE"/>
		<reference ref_id="CVE-2015-8219" ref_url="https://www.suse.com/security/cve/CVE-2015-8219/" source="CVE"/>
		<reference ref_id="CVE-2015-8363" ref_url="https://www.suse.com/security/cve/CVE-2015-8363/" source="CVE"/>
		<reference ref_id="CVE-2015-8364" ref_url="https://www.suse.com/security/cve/CVE-2015-8364/" source="CVE"/>
		<reference ref_id="CVE-2015-8365" ref_url="https://www.suse.com/security/cve/CVE-2015-8365/" source="CVE"/>
		<reference ref_id="CVE-2015-8661" ref_url="https://www.suse.com/security/cve/CVE-2015-8661/" source="CVE"/>
		<reference ref_id="CVE-2015-8662" ref_url="https://www.suse.com/security/cve/CVE-2015-8662/" source="CVE"/>
		<reference ref_id="CVE-2015-8663" ref_url="https://www.suse.com/security/cve/CVE-2015-8663/" source="CVE"/>
		<reference ref_id="CVE-2016-10190" ref_url="https://www.suse.com/security/cve/CVE-2016-10190/" source="CVE"/>
		<reference ref_id="CVE-2016-10191" ref_url="https://www.suse.com/security/cve/CVE-2016-10191/" source="CVE"/>
		<reference ref_id="CVE-2016-10192" ref_url="https://www.suse.com/security/cve/CVE-2016-10192/" source="CVE"/>
		<reference ref_id="CVE-2016-1897" ref_url="https://www.suse.com/security/cve/CVE-2016-1897/" source="CVE"/>
		<reference ref_id="CVE-2016-1898" ref_url="https://www.suse.com/security/cve/CVE-2016-1898/" source="CVE"/>
		<reference ref_id="CVE-2017-11399" ref_url="https://www.suse.com/security/cve/CVE-2017-11399/" source="CVE"/>
		<reference ref_id="CVE-2017-11665" ref_url="https://www.suse.com/security/cve/CVE-2017-11665/" source="CVE"/>
		<reference ref_id="CVE-2017-14054" ref_url="https://www.suse.com/security/cve/CVE-2017-14054/" source="CVE"/>
		<reference ref_id="CVE-2017-14055" ref_url="https://www.suse.com/security/cve/CVE-2017-14055/" source="CVE"/>
		<reference ref_id="CVE-2017-14056" ref_url="https://www.suse.com/security/cve/CVE-2017-14056/" source="CVE"/>
		<reference ref_id="CVE-2017-14057" ref_url="https://www.suse.com/security/cve/CVE-2017-14057/" source="CVE"/>
		<reference ref_id="CVE-2017-14058" ref_url="https://www.suse.com/security/cve/CVE-2017-14058/" source="CVE"/>
		<reference ref_id="CVE-2017-14059" ref_url="https://www.suse.com/security/cve/CVE-2017-14059/" source="CVE"/>
		<reference ref_id="CVE-2017-14169" ref_url="https://www.suse.com/security/cve/CVE-2017-14169/" source="CVE"/>
		<reference ref_id="CVE-2017-14170" ref_url="https://www.suse.com/security/cve/CVE-2017-14170/" source="CVE"/>
		<reference ref_id="CVE-2017-14171" ref_url="https://www.suse.com/security/cve/CVE-2017-14171/" source="CVE"/>
		<reference ref_id="CVE-2017-14222" ref_url="https://www.suse.com/security/cve/CVE-2017-14222/" source="CVE"/>
		<reference ref_id="CVE-2017-14223" ref_url="https://www.suse.com/security/cve/CVE-2017-14223/" source="CVE"/>
		<reference ref_id="CVE-2017-14225" ref_url="https://www.suse.com/security/cve/CVE-2017-14225/" source="CVE"/>
		<reference ref_id="CVE-2017-15186" ref_url="https://www.suse.com/security/cve/CVE-2017-15186/" source="CVE"/>
		<reference ref_id="CVE-2017-15672" ref_url="https://www.suse.com/security/cve/CVE-2017-15672/" source="CVE"/>
		<reference ref_id="CVE-2017-16840" ref_url="https://www.suse.com/security/cve/CVE-2017-16840/" source="CVE"/>
		<reference ref_id="CVE-2017-17081" ref_url="https://www.suse.com/security/cve/CVE-2017-17081/" source="CVE"/>
		<reference ref_id="CVE-2017-17555" ref_url="https://www.suse.com/security/cve/CVE-2017-17555/" source="CVE"/>
		<reference ref_id="CVE-2017-7859" ref_url="https://www.suse.com/security/cve/CVE-2017-7859/" source="CVE"/>
		<reference ref_id="CVE-2017-7862" ref_url="https://www.suse.com/security/cve/CVE-2017-7862/" source="CVE"/>
		<reference ref_id="CVE-2017-7863" ref_url="https://www.suse.com/security/cve/CVE-2017-7863/" source="CVE"/>
		<reference ref_id="CVE-2017-7865" ref_url="https://www.suse.com/security/cve/CVE-2017-7865/" source="CVE"/>
		<reference ref_id="CVE-2017-7866" ref_url="https://www.suse.com/security/cve/CVE-2017-7866/" source="CVE"/>
		<reference ref_id="CVE-2018-12458" ref_url="https://www.suse.com/security/cve/CVE-2018-12458/" source="CVE"/>
		<reference ref_id="CVE-2018-13300" ref_url="https://www.suse.com/security/cve/CVE-2018-13300/" source="CVE"/>
		<reference ref_id="CVE-2018-13302" ref_url="https://www.suse.com/security/cve/CVE-2018-13302/" source="CVE"/>
		<reference ref_id="CVE-2018-13305" ref_url="https://www.suse.com/security/cve/CVE-2018-13305/" source="CVE"/>
		<reference ref_id="CVE-2018-15822" ref_url="https://www.suse.com/security/cve/CVE-2018-15822/" source="CVE"/>
		<reference ref_id="CVE-2018-1999010" ref_url="https://www.suse.com/security/cve/CVE-2018-1999010/" source="CVE"/>
		<reference ref_id="CVE-2018-1999011" ref_url="https://www.suse.com/security/cve/CVE-2018-1999011/" source="CVE"/>
		<reference ref_id="CVE-2018-1999012" ref_url="https://www.suse.com/security/cve/CVE-2018-1999012/" source="CVE"/>
		<reference ref_id="CVE-2018-1999013" ref_url="https://www.suse.com/security/cve/CVE-2018-1999013/" source="CVE"/>
		<reference ref_id="CVE-2018-6392" ref_url="https://www.suse.com/security/cve/CVE-2018-6392/" source="CVE"/>
		<reference ref_id="CVE-2018-6621" ref_url="https://www.suse.com/security/cve/CVE-2018-6621/" source="CVE"/>
		<description>
These are all security issues fixed in the libavcodec57-3.4.2-4.12.4 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8216/">CVE-2015-8216</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8217/">CVE-2015-8217</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8218/">CVE-2015-8218</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8219/">CVE-2015-8219</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8363/">CVE-2015-8363</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8364/">CVE-2015-8364</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8365/">CVE-2015-8365</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8661/">CVE-2015-8661</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8662/">CVE-2015-8662</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8663/">CVE-2015-8663</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10190/">CVE-2016-10190</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10191/">CVE-2016-10191</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10192/">CVE-2016-10192</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1897/">CVE-2016-1897</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1898/">CVE-2016-1898</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11399/">CVE-2017-11399</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11665/">CVE-2017-11665</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14054/">CVE-2017-14054</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14055/">CVE-2017-14055</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14056/">CVE-2017-14056</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14057/">CVE-2017-14057</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14058/">CVE-2017-14058</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14059/">CVE-2017-14059</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14169/">CVE-2017-14169</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14170/">CVE-2017-14170</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14171/">CVE-2017-14171</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14222/">CVE-2017-14222</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14223/">CVE-2017-14223</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14225/">CVE-2017-14225</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15186/">CVE-2017-15186</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15672/">CVE-2017-15672</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16840/">CVE-2017-16840</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17081/">CVE-2017-17081</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17555/">CVE-2017-17555</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7859/">CVE-2017-7859</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7862/">CVE-2017-7862</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7863/">CVE-2017-7863</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7865/">CVE-2017-7865</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7866/">CVE-2017-7866</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12458/">CVE-2018-12458</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13300/">CVE-2018-13300</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13302/">CVE-2018-13302</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13305/">CVE-2018-13305</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-15822/">CVE-2018-15822</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999010/">CVE-2018-1999010</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999011/">CVE-2018-1999011</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999012/">CVE-2018-1999012</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999013/">CVE-2018-1999013</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6392/">CVE-2018-6392</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6621/">CVE-2018-6621</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486660" comment="libavcodec57-3.4.2-4.12.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486661" comment="libavutil-devel-3.4.2-4.12.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486662" comment="libavutil55-3.4.2-4.12.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486663" comment="libpostproc-devel-3.4.2-4.12.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486664" comment="libpostproc54-3.4.2-4.12.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486665" comment="libswresample-devel-3.4.2-4.12.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486666" comment="libswresample2-3.4.2-4.12.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486667" comment="libswscale-devel-3.4.2-4.12.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486668" comment="libswscale4-3.4.2-4.12.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137297" version="1" class="patch">
	<metadata>
		<title>libcairo2-32bit-1.15.10-4.5.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-9082" ref_url="https://www.suse.com/security/cve/CVE-2016-9082/" source="CVE"/>
		<reference ref_id="CVE-2017-7475" ref_url="https://www.suse.com/security/cve/CVE-2017-7475/" source="CVE"/>
		<reference ref_id="CVE-2017-9814" ref_url="https://www.suse.com/security/cve/CVE-2017-9814/" source="CVE"/>
		<description>
These are all security issues fixed in the libcairo2-32bit-1.15.10-4.5.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9082/">CVE-2016-9082</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7475/">CVE-2017-7475</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9814/">CVE-2017-9814</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486669" comment="libcairo2-32bit-1.15.10-4.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137298" version="1" class="patch">
	<metadata>
		<title>libcdio++0-0.94-6.6.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-18199" ref_url="https://www.suse.com/security/cve/CVE-2017-18199/" source="CVE"/>
		<reference ref_id="CVE-2017-18201" ref_url="https://www.suse.com/security/cve/CVE-2017-18201/" source="CVE"/>
		<description>
These are all security issues fixed in the libcdio++0-0.94-6.6.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18199/">CVE-2017-18199</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18201/">CVE-2017-18201</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486670" comment="libcdio++0-0.94-6.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486671" comment="libcdio-devel-0.94-6.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486672" comment="libcdio16-0.94-6.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486673" comment="libiso9660-10-0.94-6.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486674" comment="libudf0-0.94-6.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137299" version="1" class="patch">
	<metadata>
		<title>libexempi-devel-2.4.5-1.11 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-7728" ref_url="https://www.suse.com/security/cve/CVE-2018-7728/" source="CVE"/>
		<reference ref_id="CVE-2018-7729" ref_url="https://www.suse.com/security/cve/CVE-2018-7729/" source="CVE"/>
		<reference ref_id="CVE-2018-7730" ref_url="https://www.suse.com/security/cve/CVE-2018-7730/" source="CVE"/>
		<reference ref_id="CVE-2018-7731" ref_url="https://www.suse.com/security/cve/CVE-2018-7731/" source="CVE"/>
		<description>
These are all security issues fixed in the libexempi-devel-2.4.5-1.11 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7728/">CVE-2018-7728</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7729/">CVE-2018-7729</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7730/">CVE-2018-7730</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7731/">CVE-2018-7731</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482778" comment="libexempi-devel-2.4.5-1.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482779" comment="libexempi3-2.4.5-1.11 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137300" version="1" class="patch">
	<metadata>
		<title>libexif-devel-0.6.21-3.16 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-2812" ref_url="https://www.suse.com/security/cve/CVE-2012-2812/" source="CVE"/>
		<reference ref_id="CVE-2012-2813" ref_url="https://www.suse.com/security/cve/CVE-2012-2813/" source="CVE"/>
		<reference ref_id="CVE-2012-2814" ref_url="https://www.suse.com/security/cve/CVE-2012-2814/" source="CVE"/>
		<reference ref_id="CVE-2012-2836" ref_url="https://www.suse.com/security/cve/CVE-2012-2836/" source="CVE"/>
		<reference ref_id="CVE-2012-2837" ref_url="https://www.suse.com/security/cve/CVE-2012-2837/" source="CVE"/>
		<reference ref_id="CVE-2012-2840" ref_url="https://www.suse.com/security/cve/CVE-2012-2840/" source="CVE"/>
		<reference ref_id="CVE-2012-2841" ref_url="https://www.suse.com/security/cve/CVE-2012-2841/" source="CVE"/>
		<reference ref_id="CVE-2016-6328" ref_url="https://www.suse.com/security/cve/CVE-2016-6328/" source="CVE"/>
		<reference ref_id="CVE-2017-7544" ref_url="https://www.suse.com/security/cve/CVE-2017-7544/" source="CVE"/>
		<description>
These are all security issues fixed in the libexif-devel-0.6.21-3.16 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2812/">CVE-2012-2812</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2813/">CVE-2012-2813</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2814/">CVE-2012-2814</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2836/">CVE-2012-2836</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2837/">CVE-2012-2837</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2840/">CVE-2012-2840</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2841/">CVE-2012-2841</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-6328/">CVE-2016-6328</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7544/">CVE-2017-7544</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482780" comment="libexif-devel-0.6.21-3.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482781" comment="libexif12-0.6.21-3.16 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137301" version="1" class="patch">
	<metadata>
		<title>libexiv2-26-0.26-6.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-9449" ref_url="https://www.suse.com/security/cve/CVE-2014-9449/" source="CVE"/>
		<reference ref_id="CVE-2017-11337" ref_url="https://www.suse.com/security/cve/CVE-2017-11337/" source="CVE"/>
		<reference ref_id="CVE-2017-11338" ref_url="https://www.suse.com/security/cve/CVE-2017-11338/" source="CVE"/>
		<reference ref_id="CVE-2017-11339" ref_url="https://www.suse.com/security/cve/CVE-2017-11339/" source="CVE"/>
		<reference ref_id="CVE-2017-11340" ref_url="https://www.suse.com/security/cve/CVE-2017-11340/" source="CVE"/>
		<reference ref_id="CVE-2017-11553" ref_url="https://www.suse.com/security/cve/CVE-2017-11553/" source="CVE"/>
		<reference ref_id="CVE-2017-11591" ref_url="https://www.suse.com/security/cve/CVE-2017-11591/" source="CVE"/>
		<reference ref_id="CVE-2017-11592" ref_url="https://www.suse.com/security/cve/CVE-2017-11592/" source="CVE"/>
		<reference ref_id="CVE-2017-11683" ref_url="https://www.suse.com/security/cve/CVE-2017-11683/" source="CVE"/>
		<reference ref_id="CVE-2017-12955" ref_url="https://www.suse.com/security/cve/CVE-2017-12955/" source="CVE"/>
		<reference ref_id="CVE-2017-12956" ref_url="https://www.suse.com/security/cve/CVE-2017-12956/" source="CVE"/>
		<reference ref_id="CVE-2017-12957" ref_url="https://www.suse.com/security/cve/CVE-2017-12957/" source="CVE"/>
		<reference ref_id="CVE-2017-14859" ref_url="https://www.suse.com/security/cve/CVE-2017-14859/" source="CVE"/>
		<reference ref_id="CVE-2017-14860" ref_url="https://www.suse.com/security/cve/CVE-2017-14860/" source="CVE"/>
		<reference ref_id="CVE-2017-14862" ref_url="https://www.suse.com/security/cve/CVE-2017-14862/" source="CVE"/>
		<reference ref_id="CVE-2017-14864" ref_url="https://www.suse.com/security/cve/CVE-2017-14864/" source="CVE"/>
		<description>
These are all security issues fixed in the libexiv2-26-0.26-6.3.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9449/">CVE-2014-9449</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11337/">CVE-2017-11337</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11338/">CVE-2017-11338</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11339/">CVE-2017-11339</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11340/">CVE-2017-11340</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11553/">CVE-2017-11553</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11591/">CVE-2017-11591</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11592/">CVE-2017-11592</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11683/">CVE-2017-11683</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12955/">CVE-2017-12955</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12956/">CVE-2017-12956</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12957/">CVE-2017-12957</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14859/">CVE-2017-14859</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14860/">CVE-2017-14860</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14862/">CVE-2017-14862</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14864/">CVE-2017-14864</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486675" comment="libexiv2-26-0.26-6.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486676" comment="libexiv2-devel-0.26-6.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137302" version="1" class="patch">
	<metadata>
		<title>libgme-devel-0.6.2-1.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-9957" ref_url="https://www.suse.com/security/cve/CVE-2016-9957/" source="CVE"/>
		<reference ref_id="CVE-2016-9958" ref_url="https://www.suse.com/security/cve/CVE-2016-9958/" source="CVE"/>
		<reference ref_id="CVE-2016-9959" ref_url="https://www.suse.com/security/cve/CVE-2016-9959/" source="CVE"/>
		<reference ref_id="CVE-2016-9960" ref_url="https://www.suse.com/security/cve/CVE-2016-9960/" source="CVE"/>
		<reference ref_id="CVE-2016-9961" ref_url="https://www.suse.com/security/cve/CVE-2016-9961/" source="CVE"/>
		<description>
These are all security issues fixed in the libgme-devel-0.6.2-1.17 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9957/">CVE-2016-9957</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9958/">CVE-2016-9958</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9959/">CVE-2016-9959</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9960/">CVE-2016-9960</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9961/">CVE-2016-9961</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482784" comment="libgme-devel-0.6.2-1.17 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482785" comment="libgme0-0.6.2-1.17 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137303" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1092125" ref_url="https://bugzilla.suse.com/1092125" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10733" ref_url="https://www.suse.com/security/cve/CVE-2018-10733/" source="CVE"/>
		<description>
This update for libgxps fixes the following issues:

- CVE-2018-10733: Fixed a heap-based buffer over-read issue in ft_font_face_hash (bsc#1092125).

		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-22"/>
	<updated date="2019-03-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1092125">SUSE bug 1092125</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10733/">CVE-2018-10733</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782476" comment="libgxps-devel-0.3.0-4.3.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782477" comment="libgxps2-0.3.0-4.3.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782478" comment="typelib-1_0-GXPS-0_1-0.3.0-4.3.29 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137304" version="1" class="patch">
	<metadata>
		<title>libgxps-devel-0.3.0-4.3.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-10733" ref_url="https://www.suse.com/security/cve/CVE-2018-10733/" source="CVE"/>
		<description>
These are all security issues fixed in the libgxps-devel-0.3.0-4.3.29 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10733/">CVE-2018-10733</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486677" comment="libgxps-devel-0.3.0-4.3.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486678" comment="libgxps2-0.3.0-4.3.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486679" comment="typelib-1_0-GXPS-0_1-0.3.0-4.3.29 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137305" version="1" class="patch">
	<metadata>
		<title>libgypsy-devel-0.9-2.30 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-0523" ref_url="https://www.suse.com/security/cve/CVE-2011-0523/" source="CVE"/>
		<reference ref_id="CVE-2011-0524" ref_url="https://www.suse.com/security/cve/CVE-2011-0524/" source="CVE"/>
		<description>
These are all security issues fixed in the libgypsy-devel-0.9-2.30 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0523/">CVE-2011-0523</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0524/">CVE-2011-0524</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482791" comment="libgypsy-devel-0.9-2.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482792" comment="libgypsy0-0.9-2.30 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137306" version="1" class="patch">
	<metadata>
		<title>libical-devel-2.0.0-1.37 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-5824" ref_url="https://www.suse.com/security/cve/CVE-2016-5824/" source="CVE"/>
		<reference ref_id="CVE-2016-5827" ref_url="https://www.suse.com/security/cve/CVE-2016-5827/" source="CVE"/>
		<reference ref_id="CVE-2016-9584" ref_url="https://www.suse.com/security/cve/CVE-2016-9584/" source="CVE"/>
		<description>
These are all security issues fixed in the libical-devel-2.0.0-1.37 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5824/">CVE-2016-5824</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5827/">CVE-2016-5827</cve>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9584/">CVE-2016-9584</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482795" comment="libical-devel-2.0.0-1.37 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137307" version="1" class="patch">
	<metadata>
		<title>libimobiledevice-devel-1.2.0+git20170122.45fda81-1.44 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2142" ref_url="https://www.suse.com/security/cve/CVE-2013-2142/" source="CVE"/>
		<reference ref_id="CVE-2016-5104" ref_url="https://www.suse.com/security/cve/CVE-2016-5104/" source="CVE"/>
		<description>
These are all security issues fixed in the libimobiledevice-devel-1.2.0+git20170122.45fda81-1.44 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-2142/">CVE-2013-2142</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5104/">CVE-2016-5104</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482796" comment="libimobiledevice-devel-1.2.0+git20170122.45fda81-1.44 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482797" comment="libimobiledevice6-1.2.0+git20170122.45fda81-1.44 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137308" version="1" class="patch">
	<metadata>
		<title>libjasper-devel-2.0.14-3.3.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2008-3522" ref_url="https://www.suse.com/security/cve/CVE-2008-3522/" source="CVE"/>
		<reference ref_id="CVE-2011-4516" ref_url="https://www.suse.com/security/cve/CVE-2011-4516/" source="CVE"/>
		<reference ref_id="CVE-2011-4517" ref_url="https://www.suse.com/security/cve/CVE-2011-4517/" source="CVE"/>
		<reference ref_id="CVE-2014-8137" ref_url="https://www.suse.com/security/cve/CVE-2014-8137/" source="CVE"/>
		<reference ref_id="CVE-2014-8138" ref_url="https://www.suse.com/security/cve/CVE-2014-8138/" source="CVE"/>
		<reference ref_id="CVE-2014-8157" ref_url="https://www.suse.com/security/cve/CVE-2014-8157/" source="CVE"/>
		<reference ref_id="CVE-2014-8158" ref_url="https://www.suse.com/security/cve/CVE-2014-8158/" source="CVE"/>
		<reference ref_id="CVE-2014-9029" ref_url="https://www.suse.com/security/cve/CVE-2014-9029/" source="CVE"/>
		<reference ref_id="CVE-2015-5203" ref_url="https://www.suse.com/security/cve/CVE-2015-5203/" source="CVE"/>
		<reference ref_id="CVE-2015-5221" ref_url="https://www.suse.com/security/cve/CVE-2015-5221/" source="CVE"/>
		<reference ref_id="CVE-2016-10251" ref_url="https://www.suse.com/security/cve/CVE-2016-10251/" source="CVE"/>
		<reference ref_id="CVE-2016-1577" ref_url="https://www.suse.com/security/cve/CVE-2016-1577/" source="CVE"/>
		<reference ref_id="CVE-2016-1867" ref_url="https://www.suse.com/security/cve/CVE-2016-1867/" source="CVE"/>
		<reference ref_id="CVE-2016-2089" ref_url="https://www.suse.com/security/cve/CVE-2016-2089/" source="CVE"/>
		<reference ref_id="CVE-2016-2116" ref_url="https://www.suse.com/security/cve/CVE-2016-2116/" source="CVE"/>
		<reference ref_id="CVE-2016-8654" ref_url="https://www.suse.com/security/cve/CVE-2016-8654/" source="CVE"/>
		<reference ref_id="CVE-2016-8690" ref_url="https://www.suse.com/security/cve/CVE-2016-8690/" source="CVE"/>
		<reference ref_id="CVE-2016-8691" ref_url="https://www.suse.com/security/cve/CVE-2016-8691/" source="CVE"/>
		<reference ref_id="CVE-2016-8692" ref_url="https://www.suse.com/security/cve/CVE-2016-8692/" source="CVE"/>
		<reference ref_id="CVE-2016-8693" ref_url="https://www.suse.com/security/cve/CVE-2016-8693/" source="CVE"/>
		<reference ref_id="CVE-2016-8880" ref_url="https://www.suse.com/security/cve/CVE-2016-8880/" source="CVE"/>
		<reference ref_id="CVE-2016-8881" ref_url="https://www.suse.com/security/cve/CVE-2016-8881/" source="CVE"/>
		<reference ref_id="CVE-2016-8882" ref_url="https://www.suse.com/security/cve/CVE-2016-8882/" source="CVE"/>
		<reference ref_id="CVE-2016-8883" ref_url="https://www.suse.com/security/cve/CVE-2016-8883/" source="CVE"/>
		<reference ref_id="CVE-2016-8884" ref_url="https://www.suse.com/security/cve/CVE-2016-8884/" source="CVE"/>
		<reference ref_id="CVE-2016-8885" ref_url="https://www.suse.com/security/cve/CVE-2016-8885/" source="CVE"/>
		<reference ref_id="CVE-2016-8886" ref_url="https://www.suse.com/security/cve/CVE-2016-8886/" source="CVE"/>
		<reference ref_id="CVE-2016-8887" ref_url="https://www.suse.com/security/cve/CVE-2016-8887/" source="CVE"/>
		<reference ref_id="CVE-2016-9262" ref_url="https://www.suse.com/security/cve/CVE-2016-9262/" source="CVE"/>
		<reference ref_id="CVE-2016-9387" ref_url="https://www.suse.com/security/cve/CVE-2016-9387/" source="CVE"/>
		<reference ref_id="CVE-2016-9388" ref_url="https://www.suse.com/security/cve/CVE-2016-9388/" source="CVE"/>
		<reference ref_id="CVE-2016-9389" ref_url="https://www.suse.com/security/cve/CVE-2016-9389/" source="CVE"/>
		<reference ref_id="CVE-2016-9390" ref_url="https://www.suse.com/security/cve/CVE-2016-9390/" source="CVE"/>
		<reference ref_id="CVE-2016-9391" ref_url="https://www.suse.com/security/cve/CVE-2016-9391/" source="CVE"/>
		<reference ref_id="CVE-2016-9392" ref_url="https://www.suse.com/security/cve/CVE-2016-9392/" source="CVE"/>
		<reference ref_id="CVE-2016-9393" ref_url="https://www.suse.com/security/cve/CVE-2016-9393/" source="CVE"/>
		<reference ref_id="CVE-2016-9394" ref_url="https://www.suse.com/security/cve/CVE-2016-9394/" source="CVE"/>
		<reference ref_id="CVE-2016-9395" ref_url="https://www.suse.com/security/cve/CVE-2016-9395/" source="CVE"/>
		<reference ref_id="CVE-2016-9396" ref_url="https://www.suse.com/security/cve/CVE-2016-9396/" source="CVE"/>
		<reference ref_id="CVE-2016-9398" ref_url="https://www.suse.com/security/cve/CVE-2016-9398/" source="CVE"/>
		<reference ref_id="CVE-2016-9557" ref_url="https://www.suse.com/security/cve/CVE-2016-9557/" source="CVE"/>
		<reference ref_id="CVE-2016-9560" ref_url="https://www.suse.com/security/cve/CVE-2016-9560/" source="CVE"/>
		<reference ref_id="CVE-2016-9583" ref_url="https://www.suse.com/security/cve/CVE-2016-9583/" source="CVE"/>
		<reference ref_id="CVE-2016-9591" ref_url="https://www.suse.com/security/cve/CVE-2016-9591/" source="CVE"/>
		<reference ref_id="CVE-2016-9600" ref_url="https://www.suse.com/security/cve/CVE-2016-9600/" source="CVE"/>
		<reference ref_id="CVE-2017-1000050" ref_url="https://www.suse.com/security/cve/CVE-2017-1000050/" source="CVE"/>
		<reference ref_id="CVE-2017-5498" ref_url="https://www.suse.com/security/cve/CVE-2017-5498/" source="CVE"/>
		<reference ref_id="CVE-2017-6850" ref_url="https://www.suse.com/security/cve/CVE-2017-6850/" source="CVE"/>
		<reference ref_id="CVE-2018-19539" ref_url="https://www.suse.com/security/cve/CVE-2018-19539/" source="CVE"/>
		<reference ref_id="CVE-2018-19542" ref_url="https://www.suse.com/security/cve/CVE-2018-19542/" source="CVE"/>
		<reference ref_id="CVE-2018-9055" ref_url="https://www.suse.com/security/cve/CVE-2018-9055/" source="CVE"/>
		<description>
These are all security issues fixed in the libjasper-devel-2.0.14-3.3.2 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2008-3522/">CVE-2008-3522</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4516/">CVE-2011-4516</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4517/">CVE-2011-4517</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8137/">CVE-2014-8137</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8138/">CVE-2014-8138</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8157/">CVE-2014-8157</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8158/">CVE-2014-8158</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9029/">CVE-2014-9029</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-5203/">CVE-2015-5203</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-5221/">CVE-2015-5221</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10251/">CVE-2016-10251</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1577/">CVE-2016-1577</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1867/">CVE-2016-1867</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2089/">CVE-2016-2089</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-2116/">CVE-2016-2116</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8654/">CVE-2016-8654</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8690/">CVE-2016-8690</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8691/">CVE-2016-8691</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8692/">CVE-2016-8692</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8693/">CVE-2016-8693</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-8880/">CVE-2016-8880</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-8881/">CVE-2016-8881</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8882/">CVE-2016-8882</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8883/">CVE-2016-8883</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8884/">CVE-2016-8884</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8885/">CVE-2016-8885</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8886/">CVE-2016-8886</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8887/">CVE-2016-8887</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9262/">CVE-2016-9262</cve>
	<cve impact="moderate" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-9387/">CVE-2016-9387</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9388/">CVE-2016-9388</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9389/">CVE-2016-9389</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9390/">CVE-2016-9390</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9391/">CVE-2016-9391</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9392/">CVE-2016-9392</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9393/">CVE-2016-9393</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9394/">CVE-2016-9394</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9395/">CVE-2016-9395</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9396/">CVE-2016-9396</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9398/">CVE-2016-9398</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9557/">CVE-2016-9557</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9560/">CVE-2016-9560</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9583/">CVE-2016-9583</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9591/">CVE-2016-9591</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9600/">CVE-2016-9600</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000050/">CVE-2017-1000050</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5498/">CVE-2017-5498</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6850/">CVE-2017-6850</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19539/">CVE-2018-19539</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19542/">CVE-2018-19542</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9055/">CVE-2018-9055</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486680" comment="libjasper-devel-2.0.14-3.3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137309" version="1" class="patch">
	<metadata>
		<title>libjbig2-32bit-2.1-1.31 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-6369" ref_url="https://www.suse.com/security/cve/CVE-2013-6369/" source="CVE"/>
		<description>
These are all security issues fixed in the libjbig2-32bit-2.1-1.31 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6369/">CVE-2013-6369</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482799" comment="libjbig2-32bit-2.1-1.31 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137310" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1096209" ref_url="https://bugzilla.suse.com/1096209" source="BUGZILLA"/>
		<reference ref_id="1098155" ref_url="https://bugzilla.suse.com/1098155" source="BUGZILLA"/>
		<reference ref_id="1128712" ref_url="https://bugzilla.suse.com/1128712" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1152" ref_url="https://www.suse.com/security/cve/CVE-2018-1152/" source="CVE"/>
		<reference ref_id="CVE-2018-11813" ref_url="https://www.suse.com/security/cve/CVE-2018-11813/" source="CVE"/>
		<reference ref_id="CVE-2018-14498" ref_url="https://www.suse.com/security/cve/CVE-2018-14498/" source="CVE"/>
		<description>
This update for libjpeg-turbo fixes the following issues:

The following security vulnerabilities were addressed:

- CVE-2018-14498: Fixed a heap-based buffer over read in get_8bit_row function 
  which could allow to an attacker to cause denial of service (bsc#1128712).
- CVE-2018-11813: Fixed the end-of-file mishandling in read_pixel in rdtarga.c,
  which allowed remote attackers to cause a denial-of-service via crafted JPG
  files due to a large loop (bsc#1096209)
- CVE-2018-1152: Fixed a denial of service in start_input_bmp() rdbmp.c caused
  by a divide by zero when processing a crafted BMP image (bsc#1098155)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-22"/>
	<updated date="2019-03-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1096209">SUSE bug 1096209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098155">SUSE bug 1098155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128712">SUSE bug 1128712</bugzilla>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1152/">CVE-2018-1152</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11813/">CVE-2018-11813</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14498/">CVE-2018-14498</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495039" comment="libjpeg8-32bit-8.1.2-5.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137311" version="1" class="patch">
	<metadata>
		<title>libjpeg8-32bit-8.1.2-5.7.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-9092" ref_url="https://www.suse.com/security/cve/CVE-2014-9092/" source="CVE"/>
		<reference ref_id="CVE-2017-15232" ref_url="https://www.suse.com/security/cve/CVE-2017-15232/" source="CVE"/>
		<reference ref_id="CVE-2018-1152" ref_url="https://www.suse.com/security/cve/CVE-2018-1152/" source="CVE"/>
		<reference ref_id="CVE-2018-11813" ref_url="https://www.suse.com/security/cve/CVE-2018-11813/" source="CVE"/>
		<reference ref_id="CVE-2018-14498" ref_url="https://www.suse.com/security/cve/CVE-2018-14498/" source="CVE"/>
		<description>
These are all security issues fixed in the libjpeg8-32bit-8.1.2-5.7.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9092/">CVE-2014-9092</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15232/">CVE-2017-15232</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1152/">CVE-2018-1152</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11813/">CVE-2018-11813</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14498/">CVE-2018-14498</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486681" comment="libjpeg8-32bit-8.1.2-5.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137312" version="1" class="patch">
	<metadata>
		<title>libkpathsea6-6.2.3-11.8.4 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-10243" ref_url="https://www.suse.com/security/cve/CVE-2016-10243/" source="CVE"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
These are all security issues fixed in the libkpathsea6-6.2.3-11.8.4 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10243/">CVE-2016-10243</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486682" comment="libkpathsea6-6.2.3-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486683" comment="libptexenc1-1.3.5-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486684" comment="libsynctex1-1.18-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486685" comment="libtexlua52-5-5.2.4-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486686" comment="libtexluajit2-2.1.0beta2-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486687" comment="perl-biber-2017.20170520.svn30357-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486688" comment="texlive-2017.20170520-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486689" comment="texlive-a2ping-bin-2017.20170520.svn27321-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486690" comment="texlive-accfonts-bin-2017.20170520.svn12688-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486691" comment="texlive-adhocfilelist-bin-2017.20170520.svn28038-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486692" comment="texlive-afm2pl-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486693" comment="texlive-aleph-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486694" comment="texlive-amstex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486695" comment="texlive-arara-bin-2017.20170520.svn29036-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486696" comment="texlive-asymptote-bin-2017.20170520.svn43843-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486697" comment="texlive-authorindex-bin-2017.20170520.svn18790-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486698" comment="texlive-autosp-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486699" comment="texlive-biber-bin-2017.20170520.svn42679-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486700" comment="texlive-bibexport-bin-2017.20170520.svn16219-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486701" comment="texlive-bibtex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486702" comment="texlive-bibtex8-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486703" comment="texlive-bibtexu-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486704" comment="texlive-bin-devel-2017.20170520-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486705" comment="texlive-bundledoc-bin-2017.20170520.svn17794-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486706" comment="texlive-cachepic-bin-2017.20170520.svn15543-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486707" comment="texlive-checkcites-bin-2017.20170520.svn25623-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486708" comment="texlive-checklistings-bin-2017.20170520.svn38300-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486709" comment="texlive-chktex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486710" comment="texlive-cjk-gs-integrate-bin-2017.20170520.svn37223-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486711" comment="texlive-cjkutils-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486712" comment="texlive-context-bin-2017.20170520.svn34112-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486713" comment="texlive-convbkmk-bin-2017.20170520.svn30408-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486714" comment="texlive-crossrefware-bin-2017.20170520.svn43866-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486715" comment="texlive-cslatex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486716" comment="texlive-csplain-bin-2017.20170520.svn33902-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486717" comment="texlive-ctanify-bin-2017.20170520.svn24061-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486718" comment="texlive-ctanupload-bin-2017.20170520.svn23866-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486719" comment="texlive-ctie-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486720" comment="texlive-cweb-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486721" comment="texlive-cyrillic-bin-bin-2017.20170520.svn29741-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486722" comment="texlive-de-macro-bin-2017.20170520.svn17399-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486723" comment="texlive-detex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486724" comment="texlive-diadia-bin-2017.20170520.svn37645-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486725" comment="texlive-dosepsbin-bin-2017.20170520.svn24759-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486726" comment="texlive-dtl-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486727" comment="texlive-dtxgen-bin-2017.20170520.svn29031-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486728" comment="texlive-dviasm-bin-2017.20170520.svn8329-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486729" comment="texlive-dvicopy-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486730" comment="texlive-dvidvi-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486731" comment="texlive-dviinfox-bin-2017.20170520.svn44515-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486732" comment="texlive-dviljk-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486733" comment="texlive-dvipdfmx-bin-2017.20170520.svn40273-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486734" comment="texlive-dvipng-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486735" comment="texlive-dvipos-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486736" comment="texlive-dvips-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486737" comment="texlive-dvisvgm-bin-2017.20170520.svn40987-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486738" comment="texlive-ebong-bin-2017.20170520.svn21000-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486739" comment="texlive-eplain-bin-2017.20170520.svn3006-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486740" comment="texlive-epspdf-bin-2017.20170520.svn29050-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486741" comment="texlive-epstopdf-bin-2017.20170520.svn18336-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486742" comment="texlive-exceltex-bin-2017.20170520.svn25860-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486743" comment="texlive-fig4latex-bin-2017.20170520.svn14752-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486744" comment="texlive-findhyph-bin-2017.20170520.svn14758-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486745" comment="texlive-fontinst-bin-2017.20170520.svn29741-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486746" comment="texlive-fontools-bin-2017.20170520.svn25997-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486747" comment="texlive-fontware-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486748" comment="texlive-fragmaster-bin-2017.20170520.svn13663-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486749" comment="texlive-getmap-bin-2017.20170520.svn34971-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486750" comment="texlive-glossaries-bin-2017.20170520.svn37813-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486751" comment="texlive-gregoriotex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486752" comment="texlive-gsftopk-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486753" comment="texlive-jadetex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486754" comment="texlive-kotex-utils-bin-2017.20170520.svn32101-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486755" comment="texlive-kpathsea-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486756" comment="texlive-kpathsea-devel-6.2.3-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486757" comment="texlive-lacheck-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486758" comment="texlive-latex-bin-bin-2017.20170520.svn14050-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486759" comment="texlive-latex-git-log-bin-2017.20170520.svn30983-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486760" comment="texlive-latex-papersize-bin-2017.20170520.svn42296-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486761" comment="texlive-latex2man-bin-2017.20170520.svn13663-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486762" comment="texlive-latex2nemeth-bin-2017.20170520.svn42300-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486763" comment="texlive-latexdiff-bin-2017.20170520.svn16420-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486764" comment="texlive-latexfileversion-bin-2017.20170520.svn25012-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486765" comment="texlive-latexindent-bin-2017.20170520.svn32150-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486766" comment="texlive-latexmk-bin-2017.20170520.svn10937-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486767" comment="texlive-latexpand-bin-2017.20170520.svn27025-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486768" comment="texlive-lcdftypetools-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486769" comment="texlive-lilyglyphs-bin-2017.20170520.svn31696-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486770" comment="texlive-listbib-bin-2017.20170520.svn26126-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486771" comment="texlive-listings-ext-bin-2017.20170520.svn15093-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486772" comment="texlive-lollipop-bin-2017.20170520.svn41465-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486773" comment="texlive-ltxfileinfo-bin-2017.20170520.svn29005-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486774" comment="texlive-ltximg-bin-2017.20170520.svn32346-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486775" comment="texlive-lua2dox-bin-2017.20170520.svn29053-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486776" comment="texlive-luaotfload-bin-2017.20170520.svn34647-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486777" comment="texlive-luatex-bin-2017.20170520.svn44549-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486778" comment="texlive-lwarp-bin-2017.20170520.svn43292-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486779" comment="texlive-m-tx-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486780" comment="texlive-make4ht-bin-2017.20170520.svn37750-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486781" comment="texlive-makedtx-bin-2017.20170520.svn38769-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486782" comment="texlive-makeindex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486783" comment="texlive-match_parens-bin-2017.20170520.svn23500-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486784" comment="texlive-mathspic-bin-2017.20170520.svn23661-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486785" comment="texlive-metafont-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486786" comment="texlive-metapost-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486787" comment="texlive-mex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486788" comment="texlive-mf2pt1-bin-2017.20170520.svn23406-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486789" comment="texlive-mflua-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486790" comment="texlive-mfware-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486791" comment="texlive-mkgrkindex-bin-2017.20170520.svn14428-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486792" comment="texlive-mkjobtexmf-bin-2017.20170520.svn8457-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486793" comment="texlive-mkpic-bin-2017.20170520.svn33688-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486794" comment="texlive-mltex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486795" comment="texlive-mptopdf-bin-2017.20170520.svn18674-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486796" comment="texlive-multibibliography-bin-2017.20170520.svn30534-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486797" comment="texlive-musixtex-bin-2017.20170520.svn37026-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486798" comment="texlive-musixtnt-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486799" comment="texlive-omegaware-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486800" comment="texlive-patgen-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486801" comment="texlive-pax-bin-2017.20170520.svn10843-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486802" comment="texlive-pdfbook2-bin-2017.20170520.svn37537-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486803" comment="texlive-pdfcrop-bin-2017.20170520.svn14387-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486804" comment="texlive-pdfjam-bin-2017.20170520.svn17868-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486805" comment="texlive-pdflatexpicscale-bin-2017.20170520.svn41779-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486806" comment="texlive-pdftex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486807" comment="texlive-pdftools-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486808" comment="texlive-pdfxup-bin-2017.20170520.svn40690-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486809" comment="texlive-pedigree-perl-bin-2017.20170520.svn25962-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486810" comment="texlive-perltex-bin-2017.20170520.svn16181-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486811" comment="texlive-petri-nets-bin-2017.20170520.svn39165-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486812" comment="texlive-pfarrei-bin-2017.20170520.svn29348-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486813" comment="texlive-pkfix-bin-2017.20170520.svn13364-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486814" comment="texlive-pkfix-helper-bin-2017.20170520.svn13663-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486815" comment="texlive-platex-bin-2017.20170520.svn22859-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486816" comment="texlive-pmx-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486817" comment="texlive-pmxchords-bin-2017.20170520.svn32405-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486818" comment="texlive-ps2pk-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486819" comment="texlive-pst-pdf-bin-2017.20170520.svn7838-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486820" comment="texlive-pst2pdf-bin-2017.20170520.svn29333-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486821" comment="texlive-pstools-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486822" comment="texlive-ptex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486823" comment="texlive-ptex-fontmaps-bin-2017.20170520.svn44206-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486824" comment="texlive-ptex2pdf-bin-2017.20170520.svn29335-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486825" comment="texlive-ptexenc-devel-1.3.5-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486826" comment="texlive-purifyeps-bin-2017.20170520.svn13663-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486827" comment="texlive-pygmentex-bin-2017.20170520.svn34996-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486828" comment="texlive-pythontex-bin-2017.20170520.svn31638-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486829" comment="texlive-rubik-bin-2017.20170520.svn32919-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486830" comment="texlive-seetexk-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486831" comment="texlive-splitindex-bin-2017.20170520.svn29688-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486832" comment="texlive-srcredact-bin-2017.20170520.svn38710-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486833" comment="texlive-sty2dtx-bin-2017.20170520.svn21215-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486834" comment="texlive-svn-multi-bin-2017.20170520.svn13663-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486835" comment="texlive-synctex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486836" comment="texlive-synctex-devel-1.18-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486837" comment="texlive-tetex-bin-2017.20170520.svn43957-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486838" comment="texlive-tex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486839" comment="texlive-tex4ebook-bin-2017.20170520.svn37771-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486840" comment="texlive-tex4ht-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486841" comment="texlive-texconfig-bin-2017.20170520.svn29741-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486842" comment="texlive-texcount-bin-2017.20170520.svn13013-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486843" comment="texlive-texdef-bin-2017.20170520.svn21802-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486844" comment="texlive-texdiff-bin-2017.20170520.svn15506-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486845" comment="texlive-texdirflatten-bin-2017.20170520.svn12782-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486846" comment="texlive-texdoc-bin-2017.20170520.svn29741-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486847" comment="texlive-texfot-bin-2017.20170520.svn33155-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486848" comment="texlive-texliveonfly-bin-2017.20170520.svn24062-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486849" comment="texlive-texloganalyser-bin-2017.20170520.svn13663-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486850" comment="texlive-texlua-devel-5.2.4-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486851" comment="texlive-texluajit-devel-2.1.0beta2-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486852" comment="texlive-texosquery-bin-2017.20170520.svn43596-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486853" comment="texlive-texsis-bin-2017.20170520.svn3006-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486854" comment="texlive-texware-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486855" comment="texlive-thumbpdf-bin-2017.20170520.svn6898-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486856" comment="texlive-tie-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486857" comment="texlive-tpic2pdftex-bin-2017.20170520.svn29741-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486858" comment="texlive-ttfutils-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486859" comment="texlive-typeoutfileinfo-bin-2017.20170520.svn25648-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486860" comment="texlive-ulqda-bin-2017.20170520.svn13663-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486861" comment="texlive-uplatex-bin-2017.20170520.svn26326-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486862" comment="texlive-uptex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486863" comment="texlive-urlbst-bin-2017.20170520.svn23262-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486864" comment="texlive-velthuis-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486865" comment="texlive-vlna-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486866" comment="texlive-vpe-bin-2017.20170520.svn6897-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486867" comment="texlive-web-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486868" comment="texlive-xdvi-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486869" comment="texlive-xetex-bin-2017.20170520.svn44361-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486870" comment="texlive-xmltex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486871" comment="texlive-yplan-bin-2017.20170520.svn34398-11.8.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137313" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1094685" ref_url="https://bugzilla.suse.com/1094685" source="BUGZILLA"/>
		<reference ref_id="1095189" ref_url="https://bugzilla.suse.com/1095189" source="BUGZILLA"/>
		<reference ref_id="1095825" ref_url="https://bugzilla.suse.com/1095825" source="BUGZILLA"/>
		<reference ref_id="1095826" ref_url="https://bugzilla.suse.com/1095826" source="BUGZILLA"/>
		<reference ref_id="1095827" ref_url="https://bugzilla.suse.com/1095827" source="BUGZILLA"/>
		<reference ref_id="1095945" ref_url="https://bugzilla.suse.com/1095945" source="BUGZILLA"/>
		<reference ref_id="1097103" ref_url="https://bugzilla.suse.com/1097103" source="BUGZILLA"/>
		<reference ref_id="1109319" ref_url="https://bugzilla.suse.com/1109319" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11410" ref_url="https://www.suse.com/security/cve/CVE-2018-11410/" source="CVE"/>
		<reference ref_id="CVE-2018-11440" ref_url="https://www.suse.com/security/cve/CVE-2018-11440/" source="CVE"/>
		<reference ref_id="CVE-2018-11577" ref_url="https://www.suse.com/security/cve/CVE-2018-11577/" source="CVE"/>
		<reference ref_id="CVE-2018-11683" ref_url="https://www.suse.com/security/cve/CVE-2018-11683/" source="CVE"/>
		<reference ref_id="CVE-2018-11684" ref_url="https://www.suse.com/security/cve/CVE-2018-11684/" source="CVE"/>
		<reference ref_id="CVE-2018-11685" ref_url="https://www.suse.com/security/cve/CVE-2018-11685/" source="CVE"/>
		<reference ref_id="CVE-2018-12085" ref_url="https://www.suse.com/security/cve/CVE-2018-12085/" source="CVE"/>
		<reference ref_id="CVE-2018-17294" ref_url="https://www.suse.com/security/cve/CVE-2018-17294/" source="CVE"/>
		<description>
This update for liblouis fixes the following issues:

Security issues fixed:

- CVE-2018-17294: Fixed an out of bounds read in matchCurrentInput function 
  which could allow a remote attacker to cause Denail of Service (bsc#1109319).
- CVE-2018-11410: Fixed an invalid free in the compileRule function in
  compileTranslationTable.c (bsc#1094685)
- CVE-2018-11440: Fixed a stack-based buffer overflow in the function
  parseChars() in compileTranslationTable.c (bsc#1095189)
- CVE-2018-11577: Fixed a segmentation fault in lou_logPrint in logging.c
  (bsc#1095945)
- CVE-2018-11683: Fixed a stack-based buffer overflow in the function
  parseChars() in compileTranslationTable.c (different vulnerability than
  CVE-2018-11440) (bsc#1095827)
- CVE-2018-11684: Fixed stack-based buffer overflow in the function
  includeFile() in compileTranslationTable.c (bsc#1095826)
- CVE-2018-11685: Fixed a stack-based buffer overflow in the function
  compileHyphenation() in compileTranslationTable.c (bsc#1095825)
- CVE-2018-12085: Fixed a stack-based buffer overflow in the function
  parseChars() in compileTranslationTable.c (different vulnerability than
  CVE-2018-11440) (bsc#1097103)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-28"/>
	<updated date="2019-03-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1094685">SUSE bug 1094685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095189">SUSE bug 1095189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095825">SUSE bug 1095825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095826">SUSE bug 1095826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095827">SUSE bug 1095827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095945">SUSE bug 1095945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097103">SUSE bug 1097103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109319">SUSE bug 1109319</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11410/">CVE-2018-11410</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11440/">CVE-2018-11440</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11577/">CVE-2018-11577</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11683/">CVE-2018-11683</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11684/">CVE-2018-11684</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11685/">CVE-2018-11685</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12085/">CVE-2018-12085</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17294/">CVE-2018-17294</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789856" comment="liblouis-data-3.3.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789857" comment="liblouis-devel-3.3.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789858" comment="liblouis14-3.3.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789859" comment="python3-louis-3.3.0-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137314" version="1" class="patch">
	<metadata>
		<title>liblouis-data-3.3.0-4.5.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-13738" ref_url="https://www.suse.com/security/cve/CVE-2017-13738/" source="CVE"/>
		<reference ref_id="CVE-2017-13739" ref_url="https://www.suse.com/security/cve/CVE-2017-13739/" source="CVE"/>
		<reference ref_id="CVE-2017-13740" ref_url="https://www.suse.com/security/cve/CVE-2017-13740/" source="CVE"/>
		<reference ref_id="CVE-2017-13741" ref_url="https://www.suse.com/security/cve/CVE-2017-13741/" source="CVE"/>
		<reference ref_id="CVE-2017-13742" ref_url="https://www.suse.com/security/cve/CVE-2017-13742/" source="CVE"/>
		<reference ref_id="CVE-2017-13743" ref_url="https://www.suse.com/security/cve/CVE-2017-13743/" source="CVE"/>
		<reference ref_id="CVE-2017-13744" ref_url="https://www.suse.com/security/cve/CVE-2017-13744/" source="CVE"/>
		<reference ref_id="CVE-2018-11410" ref_url="https://www.suse.com/security/cve/CVE-2018-11410/" source="CVE"/>
		<reference ref_id="CVE-2018-11440" ref_url="https://www.suse.com/security/cve/CVE-2018-11440/" source="CVE"/>
		<reference ref_id="CVE-2018-11577" ref_url="https://www.suse.com/security/cve/CVE-2018-11577/" source="CVE"/>
		<reference ref_id="CVE-2018-11683" ref_url="https://www.suse.com/security/cve/CVE-2018-11683/" source="CVE"/>
		<reference ref_id="CVE-2018-11684" ref_url="https://www.suse.com/security/cve/CVE-2018-11684/" source="CVE"/>
		<reference ref_id="CVE-2018-11685" ref_url="https://www.suse.com/security/cve/CVE-2018-11685/" source="CVE"/>
		<reference ref_id="CVE-2018-12085" ref_url="https://www.suse.com/security/cve/CVE-2018-12085/" source="CVE"/>
		<reference ref_id="CVE-2018-17294" ref_url="https://www.suse.com/security/cve/CVE-2018-17294/" source="CVE"/>
		<description>
These are all security issues fixed in the liblouis-data-3.3.0-4.5.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13738/">CVE-2017-13738</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13739/">CVE-2017-13739</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13740/">CVE-2017-13740</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13741/">CVE-2017-13741</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13742/">CVE-2017-13742</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13743/">CVE-2017-13743</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13744/">CVE-2017-13744</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11410/">CVE-2018-11410</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11440/">CVE-2018-11440</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11577/">CVE-2018-11577</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11683/">CVE-2018-11683</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11684/">CVE-2018-11684</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11685/">CVE-2018-11685</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12085/">CVE-2018-12085</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17294/">CVE-2018-17294</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486872" comment="liblouis-data-3.3.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486873" comment="liblouis-devel-3.3.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486874" comment="liblouis14-3.3.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486875" comment="python3-louis-3.3.0-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137315" version="1" class="patch">
	<metadata>
		<title>libmad-devel-0.15.1b-3.16 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-8374" ref_url="https://www.suse.com/security/cve/CVE-2017-8374/" source="CVE"/>
		<description>
These are all security issues fixed in the libmad-devel-0.15.1b-3.16 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8374/">CVE-2017-8374</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486458" comment="libmad-devel-0.15.1b-3.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486459" comment="libmad0-0.15.1b-3.16 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137316" version="1" class="patch">
	<metadata>
		<title>libmicrohttpd-devel-0.9.57-1.33 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-7038" ref_url="https://www.suse.com/security/cve/CVE-2013-7038/" source="CVE"/>
		<reference ref_id="CVE-2013-7039" ref_url="https://www.suse.com/security/cve/CVE-2013-7039/" source="CVE"/>
		<description>
These are all security issues fixed in the libmicrohttpd-devel-0.9.57-1.33 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2013-7038/">CVE-2013-7038</cve>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2013-7039/">CVE-2013-7039</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486460" comment="libmicrohttpd-devel-0.9.57-1.33 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482300" comment="libmicrohttpd12-0.9.57-1.33 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137317" version="1" class="patch">
	<metadata>
		<title>libmms-devel-0.6.4-1.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-2892" ref_url="https://www.suse.com/security/cve/CVE-2014-2892/" source="CVE"/>
		<description>
These are all security issues fixed in the libmms-devel-0.6.4-1.24 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-2892/">CVE-2014-2892</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486461" comment="libmms-devel-0.6.4-1.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486462" comment="libmms0-0.6.4-1.24 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137318" version="1" class="patch">
	<metadata>
		<title>libmodplug-devel-0.3.9-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-11311" ref_url="https://www.suse.com/security/cve/CVE-2017-11311/" source="CVE"/>
		<reference ref_id="CVE-2018-10017" ref_url="https://www.suse.com/security/cve/CVE-2018-10017/" source="CVE"/>
		<reference ref_id="CVE-2018-11710" ref_url="https://www.suse.com/security/cve/CVE-2018-11710/" source="CVE"/>
		<description>
These are all security issues fixed in the libmodplug-devel-0.3.9-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11311/">CVE-2017-11311</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10017/">CVE-2018-10017</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11710/">CVE-2018-11710</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486876" comment="libmodplug-devel-0.3.9-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486877" comment="libmodplug1-0.3.9-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486878" comment="libopenmpt-devel-0.3.9-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486879" comment="libopenmpt0-0.3.9-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486880" comment="libopenmpt_modplug1-0.3.9-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137319" version="1" class="patch">
	<metadata>
		<title>libmp3lame-devel-3.100-1.33 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-9410" ref_url="https://www.suse.com/security/cve/CVE-2017-9410/" source="CVE"/>
		<reference ref_id="CVE-2017-9411" ref_url="https://www.suse.com/security/cve/CVE-2017-9411/" source="CVE"/>
		<reference ref_id="CVE-2017-9412" ref_url="https://www.suse.com/security/cve/CVE-2017-9412/" source="CVE"/>
		<description>
These are all security issues fixed in the libmp3lame-devel-3.100-1.33 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9410/">CVE-2017-9410</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9411/">CVE-2017-9411</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9412/">CVE-2017-9412</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486468" comment="libmp3lame-devel-3.100-1.33 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482307" comment="libmp3lame0-3.100-1.33 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137320" version="1" class="patch">
	<metadata>
		<title>libmpg123-0-1.25.10-1.38 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-10683" ref_url="https://www.suse.com/security/cve/CVE-2017-10683/" source="CVE"/>
		<reference ref_id="CVE-2017-11126" ref_url="https://www.suse.com/security/cve/CVE-2017-11126/" source="CVE"/>
		<description>
These are all security issues fixed in the libmpg123-0-1.25.10-1.38 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10683/">CVE-2017-10683</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11126/">CVE-2017-11126</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482308" comment="libmpg123-0-1.25.10-1.38 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486469" comment="libout123-0-1.25.10-1.38 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486470" comment="mpg123-1.25.10-1.38 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486471" comment="mpg123-devel-1.25.10-1.38 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486472" comment="mpg123-pulse-1.25.10-1.38 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137321" version="1" class="patch">
	<metadata>
		<title>libndp-devel-1.6-1.26 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-3698" ref_url="https://www.suse.com/security/cve/CVE-2016-3698/" source="CVE"/>
		<description>
These are all security issues fixed in the libndp-devel-1.6-1.26 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3698/">CVE-2016-3698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486473" comment="libndp-devel-1.6-1.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486474" comment="libndp0-1.6-1.26 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137322" version="1" class="patch">
	<metadata>
		<title>libnetpbm-devel-10.80.1-3.3.36 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-8975" ref_url="https://www.suse.com/security/cve/CVE-2018-8975/" source="CVE"/>
		<description>
These are all security issues fixed in the libnetpbm-devel-10.80.1-3.3.36 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8975/">CVE-2018-8975</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486881" comment="libnetpbm-devel-10.80.1-3.3.36 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137323" version="1" class="patch">
	<metadata>
		<title>libnm-gtk-devel-1.8.10-3.39 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-6590" ref_url="https://www.suse.com/security/cve/CVE-2017-6590/" source="CVE"/>
		<description>
These are all security issues fixed in the libnm-gtk-devel-1.8.10-3.39 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6590/">CVE-2017-6590</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486475" comment="libnm-gtk-devel-1.8.10-3.39 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486476" comment="libnm-gtk0-1.8.10-3.39 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486477" comment="libnma-devel-1.8.10-3.39 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486478" comment="libnma0-1.8.10-3.39 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486479" comment="nma-data-1.8.10-3.39 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486480" comment="typelib-1_0-NMA-1_0-1.8.10-3.39 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486481" comment="typelib-1_0-NMGtk-1_0-1.8.10-3.39 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137324" version="1" class="patch">
	<metadata>
		<title>libopenjpeg1-1.5.2-2.28 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-5030" ref_url="https://www.suse.com/security/cve/CVE-2009-5030/" source="CVE"/>
		<reference ref_id="CVE-2012-3358" ref_url="https://www.suse.com/security/cve/CVE-2012-3358/" source="CVE"/>
		<reference ref_id="CVE-2012-3535" ref_url="https://www.suse.com/security/cve/CVE-2012-3535/" source="CVE"/>
		<reference ref_id="CVE-2013-1447" ref_url="https://www.suse.com/security/cve/CVE-2013-1447/" source="CVE"/>
		<reference ref_id="CVE-2013-4289" ref_url="https://www.suse.com/security/cve/CVE-2013-4289/" source="CVE"/>
		<reference ref_id="CVE-2013-4290" ref_url="https://www.suse.com/security/cve/CVE-2013-4290/" source="CVE"/>
		<reference ref_id="CVE-2013-6045" ref_url="https://www.suse.com/security/cve/CVE-2013-6045/" source="CVE"/>
		<reference ref_id="CVE-2013-6052" ref_url="https://www.suse.com/security/cve/CVE-2013-6052/" source="CVE"/>
		<reference ref_id="CVE-2013-6053" ref_url="https://www.suse.com/security/cve/CVE-2013-6053/" source="CVE"/>
		<reference ref_id="CVE-2013-6054" ref_url="https://www.suse.com/security/cve/CVE-2013-6054/" source="CVE"/>
		<reference ref_id="CVE-2013-6887" ref_url="https://www.suse.com/security/cve/CVE-2013-6887/" source="CVE"/>
		<reference ref_id="CVE-2016-7445" ref_url="https://www.suse.com/security/cve/CVE-2016-7445/" source="CVE"/>
		<description>
These are all security issues fixed in the libopenjpeg1-1.5.2-2.28 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-5030/">CVE-2009-5030</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-3358/">CVE-2012-3358</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3535/">CVE-2012-3535</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1447/">CVE-2013-1447</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-4289/">CVE-2013-4289</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-4290/">CVE-2013-4290</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6045/">CVE-2013-6045</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6052/">CVE-2013-6052</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6053/">CVE-2013-6053</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6054/">CVE-2013-6054</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6887/">CVE-2013-6887</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7445/">CVE-2016-7445</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486482" comment="libopenjpeg1-1.5.2-2.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486483" comment="openjpeg-devel-1.5.2-2.28 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137325" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1089080" ref_url="https://bugzilla.suse.com/1089080" source="BUGZILLA"/>
		<reference ref_id="1095644" ref_url="https://bugzilla.suse.com/1095644" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10017" ref_url="https://www.suse.com/security/cve/CVE-2018-10017/" source="CVE"/>
		<reference ref_id="CVE-2018-11710" ref_url="https://www.suse.com/security/cve/CVE-2018-11710/" source="CVE"/>
		<description>
This update for libopenmpt to version 0.3.9 fixes the following issues:

These security issues were fixed:

- CVE-2018-11710: Prevent write near address 0 in out-of-memory situations when
  reading AMS files (bsc#1095644)
- CVE-2018-10017: Preven out-of-bounds memory read with IT/ITP/MO3 files
  containing pattern loops (bsc#1089080)

These non-security issues were fixed:

- [Bug] openmpt123: Fixed build failure in C++17 due to use of
  removed feature std::random_shuffle.
- STM: Having both Bxx and Cxx commands in a pattern imported
  the Bxx command incorrectly.
- STM: Last character of sample name was missing.
- Speed up reading of truncated ULT files.
- ULT: Portamento import was sometimes broken.
- The resonant filter was sometimes unstable when combining
  low-volume samples, low cutoff and high mixing rates.
- Keep track of active SFx macro during seeking.
- The 'note cut' duplicate note action did not volume-ramp the
  previously playing sample.
- A song starting with non-existing patterns could not be played.
- DSM: Support restart position and 16-bit samples.
- DTM: Import global volume.
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-13"/>
	<updated date="2018-07-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1089080">SUSE bug 1089080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095644">SUSE bug 1095644</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10017/">CVE-2018-10017</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11710/">CVE-2018-11710</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782479" comment="libmodplug-devel-0.3.9-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782480" comment="libmodplug1-0.3.9-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782481" comment="libopenmpt-devel-0.3.9-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782482" comment="libopenmpt0-0.3.9-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782483" comment="libopenmpt_modplug1-0.3.9-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137326" version="1" class="patch">
	<metadata>
		<title>libopus-devel-1.2.1-1.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-0381" ref_url="https://www.suse.com/security/cve/CVE-2017-0381/" source="CVE"/>
		<description>
These are all security issues fixed in the libopus-devel-1.2.1-1.29 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-0381/">CVE-2017-0381</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486484" comment="libopus-devel-1.2.1-1.29 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137327" version="1" class="patch">
	<metadata>
		<title>libpango-1_0-0-32bit-1.40.14-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-0020" ref_url="https://www.suse.com/security/cve/CVE-2011-0020/" source="CVE"/>
		<reference ref_id="CVE-2011-0064" ref_url="https://www.suse.com/security/cve/CVE-2011-0064/" source="CVE"/>
		<reference ref_id="CVE-2018-15120" ref_url="https://www.suse.com/security/cve/CVE-2018-15120/" source="CVE"/>
		<description>
These are all security issues fixed in the libpango-1_0-0-32bit-1.40.14-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0020/">CVE-2011-0020</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0064/">CVE-2011-0064</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15120/">CVE-2018-15120</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486882" comment="libpango-1_0-0-32bit-1.40.14-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137328" version="1" class="patch">
	<metadata>
		<title>libpcre2-posix2-10.31-1.14 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-8964" ref_url="https://www.suse.com/security/cve/CVE-2014-8964/" source="CVE"/>
		<reference ref_id="CVE-2015-2325" ref_url="https://www.suse.com/security/cve/CVE-2015-2325/" source="CVE"/>
		<reference ref_id="CVE-2015-2326" ref_url="https://www.suse.com/security/cve/CVE-2015-2326/" source="CVE"/>
		<reference ref_id="CVE-2016-3191" ref_url="https://www.suse.com/security/cve/CVE-2016-3191/" source="CVE"/>
		<reference ref_id="CVE-2017-7186" ref_url="https://www.suse.com/security/cve/CVE-2017-7186/" source="CVE"/>
		<reference ref_id="CVE-2017-8786" ref_url="https://www.suse.com/security/cve/CVE-2017-8786/" source="CVE"/>
		<description>
These are all security issues fixed in the libpcre2-posix2-10.31-1.14 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8964/">CVE-2014-8964</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-2325/">CVE-2015-2325</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-2326/">CVE-2015-2326</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-3191/">CVE-2016-3191</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7186/">CVE-2017-7186</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8786/">CVE-2017-8786</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482350" comment="libpcre2-posix2-10.31-1.14 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482351" comment="pcre2-devel-10.31-1.14 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137329" version="1" class="patch">
	<metadata>
		<title>libplist++-devel-2.0.0-1.31 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-5209" ref_url="https://www.suse.com/security/cve/CVE-2017-5209/" source="CVE"/>
		<reference ref_id="CVE-2017-5545" ref_url="https://www.suse.com/security/cve/CVE-2017-5545/" source="CVE"/>
		<reference ref_id="CVE-2017-5834" ref_url="https://www.suse.com/security/cve/CVE-2017-5834/" source="CVE"/>
		<reference ref_id="CVE-2017-5835" ref_url="https://www.suse.com/security/cve/CVE-2017-5835/" source="CVE"/>
		<reference ref_id="CVE-2017-5836" ref_url="https://www.suse.com/security/cve/CVE-2017-5836/" source="CVE"/>
		<reference ref_id="CVE-2017-6435" ref_url="https://www.suse.com/security/cve/CVE-2017-6435/" source="CVE"/>
		<reference ref_id="CVE-2017-6436" ref_url="https://www.suse.com/security/cve/CVE-2017-6436/" source="CVE"/>
		<reference ref_id="CVE-2017-6437" ref_url="https://www.suse.com/security/cve/CVE-2017-6437/" source="CVE"/>
		<reference ref_id="CVE-2017-6438" ref_url="https://www.suse.com/security/cve/CVE-2017-6438/" source="CVE"/>
		<reference ref_id="CVE-2017-6439" ref_url="https://www.suse.com/security/cve/CVE-2017-6439/" source="CVE"/>
		<reference ref_id="CVE-2017-6440" ref_url="https://www.suse.com/security/cve/CVE-2017-6440/" source="CVE"/>
		<reference ref_id="CVE-2017-7982" ref_url="https://www.suse.com/security/cve/CVE-2017-7982/" source="CVE"/>
		<description>
These are all security issues fixed in the libplist++-devel-2.0.0-1.31 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5209/">CVE-2017-5209</cve>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5545/">CVE-2017-5545</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5834/">CVE-2017-5834</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5835/">CVE-2017-5835</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5836/">CVE-2017-5836</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6435/">CVE-2017-6435</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6436/">CVE-2017-6436</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6437/">CVE-2017-6437</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6438/">CVE-2017-6438</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-6439/">CVE-2017-6439</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6440/">CVE-2017-6440</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7982/">CVE-2017-7982</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486486" comment="libplist++-devel-2.0.0-1.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486487" comment="libplist++3-2.0.0-1.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486488" comment="libplist-devel-2.0.0-1.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486489" comment="libplist3-2.0.0-1.31 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137330" version="1" class="patch">
	<metadata>
		<title>libpotrace0-1.15-3.19 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-7437" ref_url="https://www.suse.com/security/cve/CVE-2013-7437/" source="CVE"/>
		<reference ref_id="CVE-2016-8685" ref_url="https://www.suse.com/security/cve/CVE-2016-8685/" source="CVE"/>
		<reference ref_id="CVE-2016-8686" ref_url="https://www.suse.com/security/cve/CVE-2016-8686/" source="CVE"/>
		<reference ref_id="CVE-2017-12067" ref_url="https://www.suse.com/security/cve/CVE-2017-12067/" source="CVE"/>
		<description>
These are all security issues fixed in the libpotrace0-1.15-3.19 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-7437/">CVE-2013-7437</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8685/">CVE-2016-8685</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8686/">CVE-2016-8686</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12067/">CVE-2017-12067</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486490" comment="libpotrace0-1.15-3.19 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137331" version="1" class="patch">
	<metadata>
		<title>libquicktime-1.2.4cvs20150223-4.42 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-2399" ref_url="https://www.suse.com/security/cve/CVE-2016-2399/" source="CVE"/>
		<reference ref_id="CVE-2017-9122" ref_url="https://www.suse.com/security/cve/CVE-2017-9122/" source="CVE"/>
		<reference ref_id="CVE-2017-9123" ref_url="https://www.suse.com/security/cve/CVE-2017-9123/" source="CVE"/>
		<reference ref_id="CVE-2017-9124" ref_url="https://www.suse.com/security/cve/CVE-2017-9124/" source="CVE"/>
		<reference ref_id="CVE-2017-9125" ref_url="https://www.suse.com/security/cve/CVE-2017-9125/" source="CVE"/>
		<reference ref_id="CVE-2017-9126" ref_url="https://www.suse.com/security/cve/CVE-2017-9126/" source="CVE"/>
		<reference ref_id="CVE-2017-9127" ref_url="https://www.suse.com/security/cve/CVE-2017-9127/" source="CVE"/>
		<reference ref_id="CVE-2017-9128" ref_url="https://www.suse.com/security/cve/CVE-2017-9128/" source="CVE"/>
		<description>
These are all security issues fixed in the libquicktime-1.2.4cvs20150223-4.42 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2399/">CVE-2016-2399</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9122/">CVE-2017-9122</cve>
	<cve impact="low" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9123/">CVE-2017-9123</cve>
	<cve impact="low" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9124/">CVE-2017-9124</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9125/">CVE-2017-9125</cve>
	<cve impact="low" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9126/">CVE-2017-9126</cve>
	<cve impact="low" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9127/">CVE-2017-9127</cve>
	<cve impact="low" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9128/">CVE-2017-9128</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486491" comment="libquicktime-1.2.4cvs20150223-4.42 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486492" comment="libquicktime-devel-1.2.4cvs20150223-4.42 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486493" comment="libquicktime0-1.2.4cvs20150223-4.42 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137332" version="1" class="patch">
	<metadata>
		<title>libraptor-devel-2.0.15-1.42 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-0037" ref_url="https://www.suse.com/security/cve/CVE-2012-0037/" source="CVE"/>
		<description>
These are all security issues fixed in the libraptor-devel-2.0.15-1.42 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0037/">CVE-2012-0037</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486494" comment="libraptor-devel-2.0.15-1.42 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486495" comment="libraptor2-0-2.0.15-1.42 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486496" comment="raptor-2.0.15-1.42 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137333" version="1" class="patch">
	<metadata>
		<title>librsvg-devel-2.42.3-1.49 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-3146" ref_url="https://www.suse.com/security/cve/CVE-2011-3146/" source="CVE"/>
		<reference ref_id="CVE-2013-1881" ref_url="https://www.suse.com/security/cve/CVE-2013-1881/" source="CVE"/>
		<reference ref_id="CVE-2017-11464" ref_url="https://www.suse.com/security/cve/CVE-2017-11464/" source="CVE"/>
		<description>
These are all security issues fixed in the librsvg-devel-2.42.3-1.49 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3146/">CVE-2011-3146</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1881/">CVE-2013-1881</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11464/">CVE-2017-11464</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486497" comment="librsvg-devel-2.42.3-1.49 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486498" comment="typelib-1_0-Rsvg-2_0-2.42.3-1.49 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137334" version="1" class="patch">
	<metadata>
		<title>libsmi-devel-0.4.8-1.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-2891" ref_url="https://www.suse.com/security/cve/CVE-2010-2891/" source="CVE"/>
		<description>
These are all security issues fixed in the libsmi-devel-0.4.8-1.29 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2891/">CVE-2010-2891</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486499" comment="libsmi-devel-0.4.8-1.29 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137335" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1100097" ref_url="https://bugzilla.suse.com/1100097" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12910" ref_url="https://www.suse.com/security/cve/CVE-2018-12910/" source="CVE"/>
		<description>
This update for libsoup fixes the following issues:

Security issue fixed:

- CVE-2018-12910: Fix crash when handling empty hostnames (bsc#1100097).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-23"/>
	<updated date="2019-04-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1100097">SUSE bug 1100097</bugzilla>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12910/">CVE-2018-12910</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789860" comment="libsoup-devel-2.62.2-3.3.32 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789861" comment="typelib-1_0-Soup-2_4-2.62.2-3.3.32 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137336" version="1" class="patch">
	<metadata>
		<title>libsoup-devel-2.62.2-3.3.32 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-2054" ref_url="https://www.suse.com/security/cve/CVE-2011-2054/" source="CVE"/>
		<reference ref_id="CVE-2017-2885" ref_url="https://www.suse.com/security/cve/CVE-2017-2885/" source="CVE"/>
		<reference ref_id="CVE-2018-12910" ref_url="https://www.suse.com/security/cve/CVE-2018-12910/" source="CVE"/>
		<description>
These are all security issues fixed in the libsoup-devel-2.62.2-3.3.32 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-2054/">CVE-2011-2054</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2885/">CVE-2017-2885</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12910/">CVE-2018-12910</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486883" comment="libsoup-devel-2.62.2-3.3.32 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486884" comment="typelib-1_0-Soup-2_4-2.62.2-3.3.32 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137337" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122319" ref_url="https://bugzilla.suse.com/1122319" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6116" ref_url="https://www.suse.com/security/cve/CVE-2019-6116/" source="CVE"/>
		<description>
This update for ghostscript version 9.26a fixes the following issues:

Security issue fixed:

- CVE-2019-6116: subroutines within pseudo-operators must themselves be pseudo-operators (bsc#1122319)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-01-23"/>
	<updated date="2019-01-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1122319">SUSE bug 1122319</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6116/">CVE-2019-6116</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789862" comment="libspectre-devel-0.2.8-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789863" comment="libspectre1-0.2.8-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137338" version="1" class="patch">
	<metadata>
		<title>libsrtp-devel-1.6.0-2.19 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2139" ref_url="https://www.suse.com/security/cve/CVE-2013-2139/" source="CVE"/>
		<reference ref_id="CVE-2015-6360" ref_url="https://www.suse.com/security/cve/CVE-2015-6360/" source="CVE"/>
		<description>
These are all security issues fixed in the libsrtp-devel-1.6.0-2.19 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-2139/">CVE-2013-2139</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-6360/">CVE-2015-6360</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486502" comment="libsrtp-devel-1.6.0-2.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486503" comment="libsrtp1-1.6.0-2.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137339" version="1" class="patch">
	<metadata>
		<title>libtag-devel-1.11.1-2.50 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-2396" ref_url="https://www.suse.com/security/cve/CVE-2012-2396/" source="CVE"/>
		<reference ref_id="CVE-2017-12678" ref_url="https://www.suse.com/security/cve/CVE-2017-12678/" source="CVE"/>
		<description>
These are all security issues fixed in the libtag-devel-1.11.1-2.50 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2396/">CVE-2012-2396</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12678/">CVE-2017-12678</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486504" comment="libtag-devel-1.11.1-2.50 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486505" comment="libtag_c0-1.11.1-2.50 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137340" version="1" class="patch">
	<metadata>
		<title>libthai-devel-0.1.27-1.16 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-4012" ref_url="https://www.suse.com/security/cve/CVE-2009-4012/" source="CVE"/>
		<description>
These are all security issues fixed in the libthai-devel-0.1.27-1.16 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-4012/">CVE-2009-4012</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482431" comment="libthai-devel-0.1.27-1.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486507" comment="libthai0-32bit-0.1.27-1.16 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137341" version="1" class="patch">
	<metadata>
		<title>libtiff5-32bit-4.0.9-5.27.5 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-2285" ref_url="https://www.suse.com/security/cve/CVE-2009-2285/" source="CVE"/>
		<reference ref_id="CVE-2009-2347" ref_url="https://www.suse.com/security/cve/CVE-2009-2347/" source="CVE"/>
		<reference ref_id="CVE-2010-2065" ref_url="https://www.suse.com/security/cve/CVE-2010-2065/" source="CVE"/>
		<reference ref_id="CVE-2010-2067" ref_url="https://www.suse.com/security/cve/CVE-2010-2067/" source="CVE"/>
		<reference ref_id="CVE-2010-2233" ref_url="https://www.suse.com/security/cve/CVE-2010-2233/" source="CVE"/>
		<reference ref_id="CVE-2010-4665" ref_url="https://www.suse.com/security/cve/CVE-2010-4665/" source="CVE"/>
		<reference ref_id="CVE-2011-0192" ref_url="https://www.suse.com/security/cve/CVE-2011-0192/" source="CVE"/>
		<reference ref_id="CVE-2011-1167" ref_url="https://www.suse.com/security/cve/CVE-2011-1167/" source="CVE"/>
		<reference ref_id="CVE-2012-1173" ref_url="https://www.suse.com/security/cve/CVE-2012-1173/" source="CVE"/>
		<reference ref_id="CVE-2012-2113" ref_url="https://www.suse.com/security/cve/CVE-2012-2113/" source="CVE"/>
		<reference ref_id="CVE-2012-3401" ref_url="https://www.suse.com/security/cve/CVE-2012-3401/" source="CVE"/>
		<reference ref_id="CVE-2012-4564" ref_url="https://www.suse.com/security/cve/CVE-2012-4564/" source="CVE"/>
		<reference ref_id="CVE-2013-1960" ref_url="https://www.suse.com/security/cve/CVE-2013-1960/" source="CVE"/>
		<reference ref_id="CVE-2013-1961" ref_url="https://www.suse.com/security/cve/CVE-2013-1961/" source="CVE"/>
		<reference ref_id="CVE-2013-4231" ref_url="https://www.suse.com/security/cve/CVE-2013-4231/" source="CVE"/>
		<reference ref_id="CVE-2013-4232" ref_url="https://www.suse.com/security/cve/CVE-2013-4232/" source="CVE"/>
		<reference ref_id="CVE-2013-4243" ref_url="https://www.suse.com/security/cve/CVE-2013-4243/" source="CVE"/>
		<reference ref_id="CVE-2013-4244" ref_url="https://www.suse.com/security/cve/CVE-2013-4244/" source="CVE"/>
		<reference ref_id="CVE-2014-8127" ref_url="https://www.suse.com/security/cve/CVE-2014-8127/" source="CVE"/>
		<reference ref_id="CVE-2014-8128" ref_url="https://www.suse.com/security/cve/CVE-2014-8128/" source="CVE"/>
		<reference ref_id="CVE-2014-8129" ref_url="https://www.suse.com/security/cve/CVE-2014-8129/" source="CVE"/>
		<reference ref_id="CVE-2014-8130" ref_url="https://www.suse.com/security/cve/CVE-2014-8130/" source="CVE"/>
		<reference ref_id="CVE-2014-9655" ref_url="https://www.suse.com/security/cve/CVE-2014-9655/" source="CVE"/>
		<reference ref_id="CVE-2015-1547" ref_url="https://www.suse.com/security/cve/CVE-2015-1547/" source="CVE"/>
		<reference ref_id="CVE-2015-7554" ref_url="https://www.suse.com/security/cve/CVE-2015-7554/" source="CVE"/>
		<reference ref_id="CVE-2015-8665" ref_url="https://www.suse.com/security/cve/CVE-2015-8665/" source="CVE"/>
		<reference ref_id="CVE-2015-8683" ref_url="https://www.suse.com/security/cve/CVE-2015-8683/" source="CVE"/>
		<reference ref_id="CVE-2015-8781" ref_url="https://www.suse.com/security/cve/CVE-2015-8781/" source="CVE"/>
		<reference ref_id="CVE-2015-8782" ref_url="https://www.suse.com/security/cve/CVE-2015-8782/" source="CVE"/>
		<reference ref_id="CVE-2015-8783" ref_url="https://www.suse.com/security/cve/CVE-2015-8783/" source="CVE"/>
		<reference ref_id="CVE-2016-10092" ref_url="https://www.suse.com/security/cve/CVE-2016-10092/" source="CVE"/>
		<reference ref_id="CVE-2016-10093" ref_url="https://www.suse.com/security/cve/CVE-2016-10093/" source="CVE"/>
		<reference ref_id="CVE-2016-10094" ref_url="https://www.suse.com/security/cve/CVE-2016-10094/" source="CVE"/>
		<reference ref_id="CVE-2016-10095" ref_url="https://www.suse.com/security/cve/CVE-2016-10095/" source="CVE"/>
		<reference ref_id="CVE-2016-10266" ref_url="https://www.suse.com/security/cve/CVE-2016-10266/" source="CVE"/>
		<reference ref_id="CVE-2016-10267" ref_url="https://www.suse.com/security/cve/CVE-2016-10267/" source="CVE"/>
		<reference ref_id="CVE-2016-10268" ref_url="https://www.suse.com/security/cve/CVE-2016-10268/" source="CVE"/>
		<reference ref_id="CVE-2016-10269" ref_url="https://www.suse.com/security/cve/CVE-2016-10269/" source="CVE"/>
		<reference ref_id="CVE-2016-10270" ref_url="https://www.suse.com/security/cve/CVE-2016-10270/" source="CVE"/>
		<reference ref_id="CVE-2016-10271" ref_url="https://www.suse.com/security/cve/CVE-2016-10271/" source="CVE"/>
		<reference ref_id="CVE-2016-10272" ref_url="https://www.suse.com/security/cve/CVE-2016-10272/" source="CVE"/>
		<reference ref_id="CVE-2016-10371" ref_url="https://www.suse.com/security/cve/CVE-2016-10371/" source="CVE"/>
		<reference ref_id="CVE-2016-3186" ref_url="https://www.suse.com/security/cve/CVE-2016-3186/" source="CVE"/>
		<reference ref_id="CVE-2016-3622" ref_url="https://www.suse.com/security/cve/CVE-2016-3622/" source="CVE"/>
		<reference ref_id="CVE-2016-3623" ref_url="https://www.suse.com/security/cve/CVE-2016-3623/" source="CVE"/>
		<reference ref_id="CVE-2016-3658" ref_url="https://www.suse.com/security/cve/CVE-2016-3658/" source="CVE"/>
		<reference ref_id="CVE-2016-3945" ref_url="https://www.suse.com/security/cve/CVE-2016-3945/" source="CVE"/>
		<reference ref_id="CVE-2016-3990" ref_url="https://www.suse.com/security/cve/CVE-2016-3990/" source="CVE"/>
		<reference ref_id="CVE-2016-3991" ref_url="https://www.suse.com/security/cve/CVE-2016-3991/" source="CVE"/>
		<reference ref_id="CVE-2016-5314" ref_url="https://www.suse.com/security/cve/CVE-2016-5314/" source="CVE"/>
		<reference ref_id="CVE-2016-5316" ref_url="https://www.suse.com/security/cve/CVE-2016-5316/" source="CVE"/>
		<reference ref_id="CVE-2016-5317" ref_url="https://www.suse.com/security/cve/CVE-2016-5317/" source="CVE"/>
		<reference ref_id="CVE-2016-5318" ref_url="https://www.suse.com/security/cve/CVE-2016-5318/" source="CVE"/>
		<reference ref_id="CVE-2016-5320" ref_url="https://www.suse.com/security/cve/CVE-2016-5320/" source="CVE"/>
		<reference ref_id="CVE-2016-5321" ref_url="https://www.suse.com/security/cve/CVE-2016-5321/" source="CVE"/>
		<reference ref_id="CVE-2016-5323" ref_url="https://www.suse.com/security/cve/CVE-2016-5323/" source="CVE"/>
		<reference ref_id="CVE-2016-5652" ref_url="https://www.suse.com/security/cve/CVE-2016-5652/" source="CVE"/>
		<reference ref_id="CVE-2016-5875" ref_url="https://www.suse.com/security/cve/CVE-2016-5875/" source="CVE"/>
		<reference ref_id="CVE-2016-6223" ref_url="https://www.suse.com/security/cve/CVE-2016-6223/" source="CVE"/>
		<reference ref_id="CVE-2016-9273" ref_url="https://www.suse.com/security/cve/CVE-2016-9273/" source="CVE"/>
		<reference ref_id="CVE-2016-9297" ref_url="https://www.suse.com/security/cve/CVE-2016-9297/" source="CVE"/>
		<reference ref_id="CVE-2016-9448" ref_url="https://www.suse.com/security/cve/CVE-2016-9448/" source="CVE"/>
		<reference ref_id="CVE-2016-9453" ref_url="https://www.suse.com/security/cve/CVE-2016-9453/" source="CVE"/>
		<reference ref_id="CVE-2016-9538" ref_url="https://www.suse.com/security/cve/CVE-2016-9538/" source="CVE"/>
		<reference ref_id="CVE-2017-11613" ref_url="https://www.suse.com/security/cve/CVE-2017-11613/" source="CVE"/>
		<reference ref_id="CVE-2017-12944" ref_url="https://www.suse.com/security/cve/CVE-2017-12944/" source="CVE"/>
		<reference ref_id="CVE-2017-16232" ref_url="https://www.suse.com/security/cve/CVE-2017-16232/" source="CVE"/>
		<reference ref_id="CVE-2017-18013" ref_url="https://www.suse.com/security/cve/CVE-2017-18013/" source="CVE"/>
		<reference ref_id="CVE-2017-5225" ref_url="https://www.suse.com/security/cve/CVE-2017-5225/" source="CVE"/>
		<reference ref_id="CVE-2017-7592" ref_url="https://www.suse.com/security/cve/CVE-2017-7592/" source="CVE"/>
		<reference ref_id="CVE-2017-7593" ref_url="https://www.suse.com/security/cve/CVE-2017-7593/" source="CVE"/>
		<reference ref_id="CVE-2017-7594" ref_url="https://www.suse.com/security/cve/CVE-2017-7594/" source="CVE"/>
		<reference ref_id="CVE-2017-7595" ref_url="https://www.suse.com/security/cve/CVE-2017-7595/" source="CVE"/>
		<reference ref_id="CVE-2017-7596" ref_url="https://www.suse.com/security/cve/CVE-2017-7596/" source="CVE"/>
		<reference ref_id="CVE-2017-7597" ref_url="https://www.suse.com/security/cve/CVE-2017-7597/" source="CVE"/>
		<reference ref_id="CVE-2017-7598" ref_url="https://www.suse.com/security/cve/CVE-2017-7598/" source="CVE"/>
		<reference ref_id="CVE-2017-7599" ref_url="https://www.suse.com/security/cve/CVE-2017-7599/" source="CVE"/>
		<reference ref_id="CVE-2017-7600" ref_url="https://www.suse.com/security/cve/CVE-2017-7600/" source="CVE"/>
		<reference ref_id="CVE-2017-7601" ref_url="https://www.suse.com/security/cve/CVE-2017-7601/" source="CVE"/>
		<reference ref_id="CVE-2017-7602" ref_url="https://www.suse.com/security/cve/CVE-2017-7602/" source="CVE"/>
		<reference ref_id="CVE-2017-9403" ref_url="https://www.suse.com/security/cve/CVE-2017-9403/" source="CVE"/>
		<reference ref_id="CVE-2017-9404" ref_url="https://www.suse.com/security/cve/CVE-2017-9404/" source="CVE"/>
		<reference ref_id="CVE-2017-9935" ref_url="https://www.suse.com/security/cve/CVE-2017-9935/" source="CVE"/>
		<reference ref_id="CVE-2017-9936" ref_url="https://www.suse.com/security/cve/CVE-2017-9936/" source="CVE"/>
		<reference ref_id="CVE-2018-10779" ref_url="https://www.suse.com/security/cve/CVE-2018-10779/" source="CVE"/>
		<reference ref_id="CVE-2018-10963" ref_url="https://www.suse.com/security/cve/CVE-2018-10963/" source="CVE"/>
		<reference ref_id="CVE-2018-12900" ref_url="https://www.suse.com/security/cve/CVE-2018-12900/" source="CVE"/>
		<reference ref_id="CVE-2018-16335" ref_url="https://www.suse.com/security/cve/CVE-2018-16335/" source="CVE"/>
		<reference ref_id="CVE-2018-17000" ref_url="https://www.suse.com/security/cve/CVE-2018-17000/" source="CVE"/>
		<reference ref_id="CVE-2018-17100" ref_url="https://www.suse.com/security/cve/CVE-2018-17100/" source="CVE"/>
		<reference ref_id="CVE-2018-17101" ref_url="https://www.suse.com/security/cve/CVE-2018-17101/" source="CVE"/>
		<reference ref_id="CVE-2018-17795" ref_url="https://www.suse.com/security/cve/CVE-2018-17795/" source="CVE"/>
		<reference ref_id="CVE-2018-18557" ref_url="https://www.suse.com/security/cve/CVE-2018-18557/" source="CVE"/>
		<reference ref_id="CVE-2018-18661" ref_url="https://www.suse.com/security/cve/CVE-2018-18661/" source="CVE"/>
		<reference ref_id="CVE-2018-19210" ref_url="https://www.suse.com/security/cve/CVE-2018-19210/" source="CVE"/>
		<reference ref_id="CVE-2018-5784" ref_url="https://www.suse.com/security/cve/CVE-2018-5784/" source="CVE"/>
		<reference ref_id="CVE-2018-7456" ref_url="https://www.suse.com/security/cve/CVE-2018-7456/" source="CVE"/>
		<reference ref_id="CVE-2018-8905" ref_url="https://www.suse.com/security/cve/CVE-2018-8905/" source="CVE"/>
		<reference ref_id="CVE-2019-6128" ref_url="https://www.suse.com/security/cve/CVE-2019-6128/" source="CVE"/>
		<reference ref_id="CVE-2019-7663" ref_url="https://www.suse.com/security/cve/CVE-2019-7663/" source="CVE"/>
		<description>
These are all security issues fixed in the libtiff5-32bit-4.0.9-5.27.5 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2285/">CVE-2009-2285</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-2347/">CVE-2009-2347</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2065/">CVE-2010-2065</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2067/">CVE-2010-2067</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2233/">CVE-2010-2233</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4665/">CVE-2010-4665</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-0192/">CVE-2011-0192</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1167/">CVE-2011-1167</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1173/">CVE-2012-1173</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2113/">CVE-2012-2113</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3401/">CVE-2012-3401</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4564/">CVE-2012-4564</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1960/">CVE-2013-1960</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-1961/">CVE-2013-1961</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4231/">CVE-2013-4231</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4232/">CVE-2013-4232</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4243/">CVE-2013-4243</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4244/">CVE-2013-4244</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8127/">CVE-2014-8127</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-8128/">CVE-2014-8128</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-8129/">CVE-2014-8129</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2014-8130/">CVE-2014-8130</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9655/">CVE-2014-9655</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1547/">CVE-2015-1547</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7554/">CVE-2015-7554</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-8665/">CVE-2015-8665</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-8683/">CVE-2015-8683</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8781/">CVE-2015-8781</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8782/">CVE-2015-8782</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8783/">CVE-2015-8783</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10092/">CVE-2016-10092</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10093/">CVE-2016-10093</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10094/">CVE-2016-10094</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10095/">CVE-2016-10095</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10266/">CVE-2016-10266</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10267/">CVE-2016-10267</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10268/">CVE-2016-10268</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10269/">CVE-2016-10269</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10270/">CVE-2016-10270</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10271/">CVE-2016-10271</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10272/">CVE-2016-10272</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10371/">CVE-2016-10371</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3186/">CVE-2016-3186</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3622/">CVE-2016-3622</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3623/">CVE-2016-3623</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3658/">CVE-2016-3658</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3945/">CVE-2016-3945</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3990/">CVE-2016-3990</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3991/">CVE-2016-3991</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5314/">CVE-2016-5314</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5316/">CVE-2016-5316</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5317/">CVE-2016-5317</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5318/">CVE-2016-5318</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-5320/">CVE-2016-5320</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5321/">CVE-2016-5321</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5323/">CVE-2016-5323</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5652/">CVE-2016-5652</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-5875/">CVE-2016-5875</cve>
	<cve impact="moderate" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6223/">CVE-2016-6223</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9273/">CVE-2016-9273</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9297/">CVE-2016-9297</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9448/">CVE-2016-9448</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9453/">CVE-2016-9453</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9538/">CVE-2016-9538</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11613/">CVE-2017-11613</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12944/">CVE-2017-12944</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16232/">CVE-2017-16232</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18013/">CVE-2017-18013</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5225/">CVE-2017-5225</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7592/">CVE-2017-7592</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7593/">CVE-2017-7593</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7594/">CVE-2017-7594</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7595/">CVE-2017-7595</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7596/">CVE-2017-7596</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7597/">CVE-2017-7597</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7598/">CVE-2017-7598</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7599/">CVE-2017-7599</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7600/">CVE-2017-7600</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7601/">CVE-2017-7601</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7602/">CVE-2017-7602</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9403/">CVE-2017-9403</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9404/">CVE-2017-9404</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-9935/">CVE-2017-9935</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9936/">CVE-2017-9936</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10779/">CVE-2018-10779</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10963/">CVE-2018-10963</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12900/">CVE-2018-12900</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16335/">CVE-2018-16335</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17000/">CVE-2018-17000</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17100/">CVE-2018-17100</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-17101/">CVE-2018-17101</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17795/">CVE-2018-17795</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18557/">CVE-2018-18557</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18661/">CVE-2018-18661</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19210/">CVE-2018-19210</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5784/">CVE-2018-5784</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7456/">CVE-2018-7456</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-8905/">CVE-2018-8905</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-6128/">CVE-2019-6128</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7663/">CVE-2019-7663</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486885" comment="libtiff5-32bit-4.0.9-5.27.5 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137342" version="1" class="patch">
	<metadata>
		<title>libusbmuxd-devel-1.0.10-3.23 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-5104" ref_url="https://www.suse.com/security/cve/CVE-2016-5104/" source="CVE"/>
		<description>
These are all security issues fixed in the libusbmuxd-devel-1.0.10-3.23 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5104/">CVE-2016-5104</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486509" comment="libusbmuxd-devel-1.0.10-3.23 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486510" comment="libusbmuxd4-1.0.10-3.23 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137343" version="1" class="patch">
	<metadata>
		<title>libvdpau-devel-1.1.1-1.28 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-5198" ref_url="https://www.suse.com/security/cve/CVE-2015-5198/" source="CVE"/>
		<reference ref_id="CVE-2015-5199" ref_url="https://www.suse.com/security/cve/CVE-2015-5199/" source="CVE"/>
		<reference ref_id="CVE-2015-5200" ref_url="https://www.suse.com/security/cve/CVE-2015-5200/" source="CVE"/>
		<description>
These are all security issues fixed in the libvdpau-devel-1.1.1-1.28 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5198/">CVE-2015-5198</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5199/">CVE-2015-5199</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5200/">CVE-2015-5200</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486511" comment="libvdpau-devel-1.1.1-1.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486512" comment="libvdpau1-1.1.1-1.28 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137344" version="1" class="patch">
	<metadata>
		<title>libvpx-devel-1.6.1-4.16 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-1621" ref_url="https://www.suse.com/security/cve/CVE-2016-1621/" source="CVE"/>
		<reference ref_id="CVE-2016-2464" ref_url="https://www.suse.com/security/cve/CVE-2016-2464/" source="CVE"/>
		<reference ref_id="CVE-2017-0641" ref_url="https://www.suse.com/security/cve/CVE-2017-0641/" source="CVE"/>
		<reference ref_id="CVE-2017-13194" ref_url="https://www.suse.com/security/cve/CVE-2017-13194/" source="CVE"/>
		<description>
These are all security issues fixed in the libvpx-devel-1.6.1-4.16 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1621/">CVE-2016-1621</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2464/">CVE-2016-2464</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-0641/">CVE-2017-0641</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13194/">CVE-2017-13194</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486513" comment="libvpx-devel-1.6.1-4.16 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137345" version="1" class="patch">
	<metadata>
		<title>libxcb-render0-32bit-1.13-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2064" ref_url="https://www.suse.com/security/cve/CVE-2013-2064/" source="CVE"/>
		<description>
These are all security issues fixed in the libxcb-render0-32bit-1.13-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2064/">CVE-2013-2064</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486886" comment="libxcb-render0-32bit-1.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486887" comment="libxcb-shm0-32bit-1.13-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137346" version="1" class="patch">
	<metadata>
		<title>libyaml-cpp0_6-0.6.1-2.15 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-5950" ref_url="https://www.suse.com/security/cve/CVE-2017-5950/" source="CVE"/>
		<description>
These are all security issues fixed in the libyaml-cpp0_6-0.6.1-2.15 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5950/">CVE-2017-5950</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486516" comment="libyaml-cpp0_6-0.6.1-2.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486517" comment="yaml-cpp-devel-0.6.1-2.15 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137347" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1086777" ref_url="https://bugzilla.suse.com/1086777" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-8975" ref_url="https://www.suse.com/security/cve/CVE-2018-8975/" source="CVE"/>
		<description>
This update for netpbm fixes the following issues:

- CVE-2018-8975: The pm_mallocarray2 function allowed remote attackers to cause
  a denial of service (heap-based buffer over-read) via a crafted image file
  (bsc#1086777).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-03"/>
	<updated date="2019-04-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1086777">SUSE bug 1086777</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8975/">CVE-2018-8975</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789864" comment="libnetpbm-devel-10.80.1-3.3.36 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137348" version="1" class="patch">
	<metadata>
		<title>newt-devel-0.52.20-5.35 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-2905" ref_url="https://www.suse.com/security/cve/CVE-2009-2905/" source="CVE"/>
		<description>
These are all security issues fixed in the newt-devel-0.52.20-5.35 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2905/">CVE-2009-2905</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486518" comment="newt-devel-0.52.20-5.35 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137349" version="1" class="patch">
	<metadata>
		<title>open-vm-tools-desktop-10.3.10-1.10 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-5191" ref_url="https://www.suse.com/security/cve/CVE-2015-5191/" source="CVE"/>
		<description>
These are all security issues fixed in the open-vm-tools-desktop-10.3.10-1.10 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5191/">CVE-2015-5191</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486888" comment="open-vm-tools-desktop-10.3.10-1.10 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137350" version="1" class="patch">
	<metadata>
		<title> (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1113455" ref_url="https://bugzilla.suse.com/1113455" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-18444" ref_url="https://www.suse.com/security/cve/CVE-2018-18444/" source="CVE"/>
		<description>
This update for openexr fixes the following issues:

Security issue fixed:

- CVE-2018-18444: Fixed Out-of-bounds write in makeMultiView.cpp (bsc#1113455).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-16"/>
	<updated date="2019-04-16"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1113455">SUSE bug 1113455</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18444/">CVE-2018-18444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789865" comment="libIlmImf-2_2-23-2.2.1-3.3.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789866" comment="libIlmImfUtil-2_2-23-2.2.1-3.3.11 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789867" comment="openexr-devel-2.2.1-3.3.11 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137351" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1103877" ref_url="https://bugzilla.suse.com/1103877" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-15120" ref_url="https://www.suse.com/security/cve/CVE-2018-15120/" source="CVE"/>
		<description>
This update for pango fixes the following issues:

Security issue fixed:

- CVE-2018-15120: Fixed a denial of service when parsing emoji (bsc#1103877)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-09-20"/>
	<updated date="2018-09-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1103877">SUSE bug 1103877</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-15120/">CVE-2018-15120</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494497" comment="libpango-1_0-0-32bit-1.40.14-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137352" version="1" class="patch">
	<metadata>
		<title>perl-CGI-4.38-1.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-2766" ref_url="https://www.suse.com/security/cve/CVE-2011-2766/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-CGI-4.38-1.17 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2766/">CVE-2011-2766</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486520" comment="perl-CGI-4.38-1.17 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137353" version="1" class="patch">
	<metadata>
		<title>perl-File-Path-2.150000-1.22 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-6512" ref_url="https://www.suse.com/security/cve/CVE-2017-6512/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-File-Path-2.150000-1.22 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-6512/">CVE-2017-6512</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486521" comment="perl-File-Path-2.150000-1.22 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137354" version="1" class="patch">
	<metadata>
		<title>perl-MIME-Charset-1.012.2-1.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-1238" ref_url="https://www.suse.com/security/cve/CVE-2016-1238/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-MIME-Charset-1.012.2-1.24 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1238/">CVE-2016-1238</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486522" comment="perl-MIME-Charset-1.012.2-1.24 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137355" version="1" class="patch">
	<metadata>
		<title>perl-Tk-804.034-1.44 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2006-4484" ref_url="https://www.suse.com/security/cve/CVE-2006-4484/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-Tk-804.034-1.44 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2006-4484/">CVE-2006-4484</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486523" comment="perl-Tk-804.034-1.44 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137356" version="1" class="patch">
	<metadata>
		<title>ppp-2.4.7-3.28 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-3158" ref_url="https://www.suse.com/security/cve/CVE-2014-3158/" source="CVE"/>
		<reference ref_id="CVE-2015-3310" ref_url="https://www.suse.com/security/cve/CVE-2015-3310/" source="CVE"/>
		<description>
These are all security issues fixed in the ppp-2.4.7-3.28 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3158/">CVE-2014-3158</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3310/">CVE-2015-3310</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486524" comment="ppp-2.4.7-3.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486525" comment="ppp-devel-2.4.7-3.28 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137357" version="1" class="patch">
	<metadata>
		<title>pulseaudio-11.1-4.31 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-3970" ref_url="https://www.suse.com/security/cve/CVE-2014-3970/" source="CVE"/>
		<description>
These are all security issues fixed in the pulseaudio-11.1-4.31 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-3970/">CVE-2014-3970</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486526" comment="pulseaudio-11.1-4.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486527" comment="pulseaudio-bash-completion-11.1-4.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486528" comment="pulseaudio-esound-compat-11.1-4.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486529" comment="pulseaudio-gdm-hooks-11.1-4.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486530" comment="pulseaudio-lang-11.1-4.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486531" comment="pulseaudio-module-gconf-11.1-4.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486532" comment="pulseaudio-module-x11-11.1-4.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486533" comment="pulseaudio-module-zeroconf-11.1-4.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486534" comment="pulseaudio-utils-11.1-4.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486535" comment="pulseaudio-zsh-completion-11.1-4.31 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137358" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122191" ref_url="https://bugzilla.suse.com/1122191" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<description>
This update for python fixes the following issues:

Security issue fixed:

- CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-06"/>
	<updated date="2019-02-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1122191">SUSE bug 1122191</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789868" comment="python-tk-2.7.14-7.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137359" version="1" class="patch">
	<metadata>
		<title>python-tk-2.7.14-7.11.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-0772" ref_url="https://www.suse.com/security/cve/CVE-2016-0772/" source="CVE"/>
		<reference ref_id="CVE-2016-1000110" ref_url="https://www.suse.com/security/cve/CVE-2016-1000110/" source="CVE"/>
		<reference ref_id="CVE-2016-5636" ref_url="https://www.suse.com/security/cve/CVE-2016-5636/" source="CVE"/>
		<reference ref_id="CVE-2016-5699" ref_url="https://www.suse.com/security/cve/CVE-2016-5699/" source="CVE"/>
		<reference ref_id="CVE-2017-1000158" ref_url="https://www.suse.com/security/cve/CVE-2017-1000158/" source="CVE"/>
		<reference ref_id="CVE-2018-1000802" ref_url="https://www.suse.com/security/cve/CVE-2018-1000802/" source="CVE"/>
		<description>
These are all security issues fixed in the python-tk-2.7.14-7.11.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-0772/">CVE-2016-0772</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1000110/">CVE-2016-1000110</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5636/">CVE-2016-5636</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5699/">CVE-2016-5699</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000158/">CVE-2017-1000158</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000802/">CVE-2018-1000802</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486889" comment="python-tk-2.7.14-7.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137360" version="1" class="patch">
	<metadata>
		<title>python3-bottle-0.12.13-1.26 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-9964" ref_url="https://www.suse.com/security/cve/CVE-2016-9964/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-bottle-0.12.13-1.26 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9964/">CVE-2016-9964</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486537" comment="python3-bottle-0.12.13-1.26 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137361" version="1" class="patch">
	<metadata>
		<title>python3-cupshelpers-1.5.7-6.27 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-4405" ref_url="https://www.suse.com/security/cve/CVE-2011-4405/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-cupshelpers-1.5.7-6.27 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-4405/">CVE-2011-4405</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486538" comment="python3-cupshelpers-1.5.7-6.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486539" comment="system-config-printer-common-1.5.7-6.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486540" comment="system-config-printer-common-lang-1.5.7-6.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486541" comment="system-config-printer-dbus-service-1.5.7-6.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486542" comment="udev-configure-printer-1.5.7-6.27 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137362" version="1" class="patch">
	<metadata>
		<title>rtkit-0.11+git.20130926-1.34 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-4326" ref_url="https://www.suse.com/security/cve/CVE-2013-4326/" source="CVE"/>
		<description>
These are all security issues fixed in the rtkit-0.11+git.20130926-1.34 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4326/">CVE-2013-4326</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486543" comment="rtkit-0.11+git.20130926-1.34 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137363" version="1" class="patch">
	<metadata>
		<title>sane-backends-1.0.27-4.27 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-6318" ref_url="https://www.suse.com/security/cve/CVE-2017-6318/" source="CVE"/>
		<description>
These are all security issues fixed in the sane-backends-1.0.27-4.27 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-6318/">CVE-2017-6318</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486544" comment="sane-backends-1.0.27-4.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486545" comment="sane-backends-autoconfig-1.0.27-4.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486546" comment="sane-backends-devel-1.0.27-4.27 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137364" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1108630" ref_url="https://bugzilla.suse.com/1108630" source="BUGZILLA"/>
		<reference ref_id="1108631" ref_url="https://bugzilla.suse.com/1108631" source="BUGZILLA"/>
		<reference ref_id="1108632" ref_url="https://bugzilla.suse.com/1108632" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17096" ref_url="https://www.suse.com/security/cve/CVE-2018-17096/" source="CVE"/>
		<reference ref_id="CVE-2018-17097" ref_url="https://www.suse.com/security/cve/CVE-2018-17097/" source="CVE"/>
		<reference ref_id="CVE-2018-17098" ref_url="https://www.suse.com/security/cve/CVE-2018-17098/" source="CVE"/>
		<description>
This update for soundtouch fixes the following issues:

- CVE-2018-17098: The WavFileBase class allowed remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch. (bsc#1108632) 
- CVE-2018-17097: The WavFileBase class allowed remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch. (double free) (bsc#1108631) 
- CVE-2018-17096: The BPMDetect class allowed remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch. (bsc#1108630) 
		</description>
<advisory from="security@suse.de">
	<issued date="2018-11-02"/>
	<updated date="2018-11-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1108630">SUSE bug 1108630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108631">SUSE bug 1108631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108632">SUSE bug 1108632</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17096/">CVE-2018-17096</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17097/">CVE-2018-17097</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17098/">CVE-2018-17098</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782490" comment="libSoundTouch0-1.8.0-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782491" comment="soundtouch-devel-1.8.0-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137365" version="1" class="patch">
	<metadata>
		<title>spice-vdagent-0.17.0-2.39 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-15108" ref_url="https://www.suse.com/security/cve/CVE-2017-15108/" source="CVE"/>
		<description>
These are all security issues fixed in the spice-vdagent-0.17.0-2.39 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15108/">CVE-2017-15108</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486547" comment="spice-vdagent-0.17.0-2.39 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137366" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789869" comment="libsynctex1-1.18-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789870" comment="texlive-synctex-devel-1.18-11.8.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137367" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789871" comment="libptexenc1-1.3.5-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789872" comment="texlive-ptexenc-devel-1.3.5-11.8.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137368" version="1" class="patch">
	<metadata>
		<title>texlive-12many-2017.133.0.0.3svn15878-6.18 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-10243" ref_url="https://www.suse.com/security/cve/CVE-2016-10243/" source="CVE"/>
		<description>
These are all security issues fixed in the texlive-12many-2017.133.0.0.3svn15878-6.18 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10243/">CVE-2016-10243</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482808" comment="texlive-12many-2017.133.0.0.3svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482809" comment="texlive-2up-2017.133.1.2svn41578-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482810" comment="texlive-Asana-Math-2017.133.0.000.955svn37556-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482811" comment="texlive-Asana-Math-fonts-2017.133.0.000.955svn37556-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482812" comment="texlive-ESIEEcv-2017.133.svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482813" comment="texlive-FAQ-en-2017.133.3.28svn34303-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482814" comment="texlive-GS1-2017.133.15svn27540-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482815" comment="texlive-HA-prosper-2017.133.4.21svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482816" comment="texlive-IEEEconf-2017.133.1.4svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482817" comment="texlive-IEEEtran-2017.133.1.8bsvn38238-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482818" comment="texlive-MemoirChapStyles-2017.133.1.7esvn25918-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482819" comment="texlive-SIstyle-2017.133.2.3asvn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482820" comment="texlive-SIunits-2017.133.1.36svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482821" comment="texlive-Tabbing-2017.133.svn17022-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482822" comment="texlive-Type1fonts-2017.133.2.14svn19603-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482823" comment="texlive-a0poster-2017.133.1.22bsvn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482824" comment="texlive-a2ping-2017.133.svn29725-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482826" comment="texlive-a4wide-2017.133.svn20943-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482827" comment="texlive-a5comb-2017.133.4svn17020-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482828" comment="texlive-aastex-2017.133.6.0svn39929-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482829" comment="texlive-abbr-2017.133.svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482830" comment="texlive-abc-2017.133.2.0bsvn41157-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482831" comment="texlive-abntex2-2017.133.1.9.6svn39913-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482832" comment="texlive-abraces-2017.133.1._svn27880-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482833" comment="texlive-abstract-2017.133.1.2asvn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482834" comment="texlive-abstyles-2017.133.svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482835" comment="texlive-academicons-2017.133.1.8.0svn44380-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482836" comment="texlive-academicons-fonts-2017.133.1.8.0svn44380-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482837" comment="texlive-accanthis-2017.133.svn32089-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482838" comment="texlive-accanthis-fonts-2017.133.svn32089-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482839" comment="texlive-accfonts-2017.133.0.0.25svn18835-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482841" comment="texlive-achemso-2017.133.3.10isvn44425-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482842" comment="texlive-acmart-2017.133.1.39svn44367-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482843" comment="texlive-acmconf-2017.133.1.3svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482844" comment="texlive-acro-2017.133.2.7asvn43186-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482845" comment="texlive-acronym-2017.133.1.41svn36582-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482846" comment="texlive-acroterm-2017.133.0.0.1svn20498-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482847" comment="texlive-active-conf-2017.133.0.0.3asvn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482848" comment="texlive-actuarialangle-2017.133.2.0svn43751-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482849" comment="texlive-actuarialsymbol-2017.133.1.0svn43768-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482850" comment="texlive-addfont-2017.133.1svn41972-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482851" comment="texlive-addlines-2017.133.0.0.2asvn37805-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482852" comment="texlive-adfathesis-2017.133.2.42svn26048-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482853" comment="texlive-adforn-2017.133.1.001_b_2svn20019-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482854" comment="texlive-adforn-fonts-2017.133.1.001_b_2svn20019-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482855" comment="texlive-adfsymbols-2017.133.1.001svn19766-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482856" comment="texlive-adfsymbols-fonts-2017.133.1.001svn19766-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482857" comment="texlive-adhocfilelist-2017.133.svn29349-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482859" comment="texlive-adjmulticol-2017.133.1.1svn28936-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482860" comment="texlive-adjustbox-2017.133.1.0svn26555-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482861" comment="texlive-adobemapping-2017.133.svn44085-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482862" comment="texlive-adrconv-2017.133.1.3svn17683-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482863" comment="texlive-adtrees-2017.133.1.0svn39438-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482864" comment="texlive-advdate-2017.133.svn20538-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482865" comment="texlive-ae-2017.133.1.4svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482866" comment="texlive-aecc-2017.133.1.0svn28574-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482867" comment="texlive-aeguill-2017.133.svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482868" comment="texlive-afm2pl-2017.133.svn44166-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482870" comment="texlive-afparticle-2017.133.1.3svn35900-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482871" comment="texlive-afthesis-2017.133.2.7svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482872" comment="texlive-aguplus-2017.133.1.6bsvn17156-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482873" comment="texlive-aiaa-2017.133.3.6svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482874" comment="texlive-aichej-2017.133.svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482875" comment="texlive-ajl-2017.133.svn34016-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482876" comment="texlive-akktex-2017.133.0.0.3.2svn26055-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482877" comment="texlive-akletter-2017.133.1.5isvn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482878" comment="texlive-alegreya-2017.133.svn42077-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482879" comment="texlive-alegreya-fonts-2017.133.svn42077-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482880" comment="texlive-aleph-2017.133.svn44166-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482882" comment="texlive-alertmessage-2017.133.1.1svn38055-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482883" comment="texlive-alg-2017.133.svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482884" comment="texlive-algorithm2e-2017.133.5.1svn38805-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482885" comment="texlive-algorithmicx-2017.133.svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482886" comment="texlive-algorithms-2017.133.0.0.1svn42428-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482887" comment="texlive-alkalami-2017.133.1.000svn44497-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482888" comment="texlive-alkalami-fonts-2017.133.1.000svn44497-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482889" comment="texlive-allrunes-2017.133.2.1.1svn42221-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482890" comment="texlive-allrunes-fonts-2017.133.2.1.1svn42221-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482891" comment="texlive-almfixed-2017.133.0.0.92svn35065-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482892" comment="texlive-almfixed-fonts-2017.133.0.0.92svn35065-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482893" comment="texlive-alnumsec-2017.133.0.0.03svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482894" comment="texlive-alterqcm-2017.133.3.7csvn23385-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482895" comment="texlive-altfont-2017.133.1.1svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482896" comment="texlive-ametsoc-2017.133.4.3.2svn36030-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482897" comment="texlive-amiri-2017.133.0.0.109svn44303-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482898" comment="texlive-amiri-fonts-2017.133.0.0.109svn44303-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482899" comment="texlive-amsaddr-2017.133.1.1svn29630-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482900" comment="texlive-amscls-2017.133.svn36804-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482901" comment="texlive-amsfonts-2017.133.3.04svn29208-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482902" comment="texlive-amsfonts-fonts-2017.133.3.04svn29208-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482903" comment="texlive-amslatex-primer-2017.133.2.3svn28980-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482904" comment="texlive-amsldoc-it-2017.133.svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482905" comment="texlive-amsldoc-vn-2017.133.2.0svn21855-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482906" comment="texlive-amsmath-2017.133.svn43813-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482907" comment="texlive-amsmath-it-2017.133.svn22930-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482908" comment="texlive-amsrefs-2017.133.2.14svn30646-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482909" comment="texlive-amstex-2017.133.2.2svn44166-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482911" comment="texlive-amsthdoc-it-2017.133.svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482912" comment="texlive-animate-2017.133.svn44410-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482913" comment="texlive-anonchap-2017.133.1.1asvn17049-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482914" comment="texlive-anonymouspro-2017.133.2.1svn33441-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482915" comment="texlive-anonymouspro-fonts-2017.133.2.1svn33441-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482916" comment="texlive-answers-2017.133.2.16svn35032-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482917" comment="texlive-antiqua-2017.133.001.003svn24266-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482918" comment="texlive-antiqua-fonts-2017.133.001.003svn24266-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482919" comment="texlive-antomega-2017.133.0.0.8svn21933-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482920" comment="texlive-antt-2017.133.2.08svn18651-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482921" comment="texlive-antt-fonts-2017.133.2.08svn18651-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482922" comment="texlive-anufinalexam-2017.133.svn26053-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482923" comment="texlive-anyfontsize-2017.133.svn17050-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482924" comment="texlive-anysize-2017.133.svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482925" comment="texlive-aobs-tikz-2017.133.1.0svn32662-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482926" comment="texlive-aomart-2017.133.1.20svn44282-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482927" comment="texlive-apa-2017.133.1.3.4svn42428-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482928" comment="texlive-apa6-2017.133.2.31svn44477-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482929" comment="texlive-apa6e-2017.133.0.0.3svn23350-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482930" comment="texlive-apacite-2017.133.6.03svn31264-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482931" comment="texlive-apalike-german-2017.133.svn42045-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482932" comment="texlive-apalike2-2017.133.svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482933" comment="texlive-apnum-2017.133.1.6svn39710-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482934" comment="texlive-appendix-2017.133.1.2bsvn42428-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482935" comment="texlive-appendixnumberbeamer-2017.133.svn40322-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482936" comment="texlive-apprends-latex-2017.133.4.02svn19306-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482937" comment="texlive-apptools-2017.133.1.0svn28400-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482938" comment="texlive-apxproof-2017.133.1.0.5svn44478-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482939" comment="texlive-arabi-2017.133.1.1svn25095-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482940" comment="texlive-arabi-add-2017.133.1.0svn37709-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482941" comment="texlive-arabi-fonts-2017.133.1.1svn25095-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482942" comment="texlive-arabluatex-2017.133.1.8.4svn44241-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482943" comment="texlive-arabtex-2017.133.3.17svn25711-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482944" comment="texlive-arabtex-fonts-2017.133.3.17svn25711-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482945" comment="texlive-arabxetex-2017.133.1.2.1svn38299-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482946" comment="texlive-aramaic-serto-2017.133.1.0svn30042-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482947" comment="texlive-aramaic-serto-fonts-2017.133.1.0svn30042-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482948" comment="texlive-arara-2017.133.3.0svn29762-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482950" comment="texlive-archaeologie-2017.133.2.31svn44484-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482951" comment="texlive-archaic-2017.133.svn38005-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482952" comment="texlive-archaic-fonts-2017.133.svn38005-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482953" comment="texlive-arcs-2017.133.1svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482954" comment="texlive-arev-2017.133.svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482955" comment="texlive-arev-fonts-2017.133.svn15878-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482956" comment="texlive-arimo-2017.133.svn42880-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482957" comment="texlive-arimo-fonts-2017.133.svn42880-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482958" comment="texlive-armtex-2017.133.3.0_beta3svn33894-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482959" comment="texlive-armtex-fonts-2017.133.3.0_beta3svn33894-6.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482960" comment="texlive-around-the-bend-2017.135.svn15878-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482961" comment="texlive-arphic-2017.135.svn15878-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482962" comment="texlive-arphic-fonts-2017.135.svn15878-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482963" comment="texlive-arphic-ttf-2017.135.svn42675-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482964" comment="texlive-arphic-ttf-fonts-2017.135.svn42675-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482965" comment="texlive-arrayjobx-2017.135.1.04svn18125-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482966" comment="texlive-arraysort-2017.135.1.0svn31576-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482967" comment="texlive-arsclassica-2017.135.march_2017svn43509-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482968" comment="texlive-articleingud-2017.135.0.0.3svn38741-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482969" comment="texlive-arydshln-2017.135.1.73svn40847-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482970" comment="texlive-asaetr-2017.135.1.0asvn15878-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482971" comment="texlive-asapsym-2017.135.1.0svn40201-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482972" comment="texlive-asapsym-fonts-2017.135.1.0svn40201-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482973" comment="texlive-ascelike-2017.135.2.3svn29129-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482974" comment="texlive-ascii-chart-2017.135.svn20536-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482975" comment="texlive-ascii-font-2017.135.2.0svn29989-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482976" comment="texlive-ascii-font-fonts-2017.135.2.0svn29989-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482977" comment="texlive-asciilist-2017.135.2.2svn41158-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482978" comment="texlive-askmaps-2017.135.0.0.1svn32320-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482979" comment="texlive-aspectratio-2017.135.2.0svn25243-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482980" comment="texlive-aspectratio-fonts-2017.135.2.0svn25243-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482981" comment="texlive-assignment-2017.135.svn20431-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482982" comment="texlive-assoccnt-2017.135.0.0.8svn38497-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482983" comment="texlive-astro-2017.135.2.20svn15878-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482984" comment="texlive-asyfig-2017.135.0.0.1csvn17512-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482985" comment="texlive-asymptote-2017.135.2.41svn43843-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482987" comment="texlive-asymptote-by-example-zh-cn-2017.135.svn15878-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482988" comment="texlive-asymptote-faq-zh-cn-2017.135.svn15878-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482989" comment="texlive-asymptote-manual-zh-cn-2017.135.svn15878-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482990" comment="texlive-asypictureb-2017.135.0.0.3svn33490-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482991" comment="texlive-attachfile-2017.135.1.9svn42099-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482992" comment="texlive-aucklandthesis-2017.135.svn41506-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482993" comment="texlive-augie-2017.135.svn18948-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482994" comment="texlive-augie-fonts-2017.135.svn18948-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482995" comment="texlive-auncial-new-2017.135.2.0svn15878-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482996" comment="texlive-auncial-new-fonts-2017.135.2.0svn15878-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482997" comment="texlive-aurical-2017.135.1.5svn15878-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482998" comment="texlive-aurical-fonts-2017.135.1.5svn15878-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009482999" comment="texlive-aurl-2017.135.svn41853-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483000" comment="texlive-authoraftertitle-2017.135.0.0.9svn24863-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483001" comment="texlive-authorindex-2017.135.svn26313-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483003" comment="texlive-auto-pst-pdf-2017.135.0.0.6svn23723-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483004" comment="texlive-autoaligne-2017.135.1.3svn43195-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483005" comment="texlive-autoarea-2017.135.0.0.3asvn15878-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483006" comment="texlive-autobreak-2017.135.0.0.3svn43337-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483007" comment="texlive-automata-2017.135.0.0.3svn19717-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483008" comment="texlive-autonum-2017.135.0.0.3.11svn36084-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483009" comment="texlive-autopdf-2017.135.1.1svn32377-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483010" comment="texlive-autosp-2017.135.svn44166-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483012" comment="texlive-avantgar-2017.135.svn31835-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483013" comment="texlive-avantgar-fonts-2017.135.svn31835-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483014" comment="texlive-avremu-2017.135.0.0.1svn35373-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483015" comment="texlive-awesomebox-2017.135.0.0.1svn44131-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483016" comment="texlive-axodraw2-2017.135.2.1.0bsvn44396-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483017" comment="texlive-b1encoding-2017.135.1.0svn21271-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483018" comment="texlive-babel-2017.135.3.10svn44427-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483019" comment="texlive-babel-albanian-2017.135.1.0csvn30254-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483020" comment="texlive-babel-azerbaijani-2017.135.1.0asvn44197-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483021" comment="texlive-babel-basque-2017.135.1.0fsvn30256-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483022" comment="texlive-babel-belarusian-2017.135.1.3hsvn40636-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483023" comment="texlive-babel-bosnian-2017.135.1.1svn38174-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483024" comment="texlive-babel-breton-2017.135.1.0hsvn30257-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483025" comment="texlive-babel-bulgarian-2017.135.1.2gsvn31902-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483026" comment="texlive-babel-catalan-2017.135.2.2psvn30259-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483027" comment="texlive-babel-croatian-2017.135.1.3lsvn35198-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483028" comment="texlive-babel-czech-2017.135.3.1asvn30261-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483029" comment="texlive-babel-danish-2017.135.1.3rsvn30262-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483030" comment="texlive-babel-dutch-2017.135.3.8isvn30263-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483031" comment="texlive-babel-english-2017.135.3.3qsvn44495-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483032" comment="texlive-babel-esperanto-2017.135.1.4tsvn30265-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483033" comment="texlive-babel-estonian-2017.135.1.1asvn38064-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483034" comment="texlive-babel-finnish-2017.135.1.3qsvn30267-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483035" comment="texlive-babel-french-2017.135.3.3asvn44270-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483036" comment="texlive-babel-friulan-2017.135.1.3svn39861-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483037" comment="texlive-babel-galician-2017.135.4.3csvn30270-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483038" comment="texlive-babel-georgian-2017.135.2.1svn33527-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483039" comment="texlive-babel-german-2017.135.2.9svn42424-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483040" comment="texlive-babel-greek-2017.135.1.9gsvn42010-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483041" comment="texlive-babel-hebrew-2017.135.2.3hsvn30273-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483042" comment="texlive-babel-hungarian-2017.135.1.5csvn41435-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483043" comment="texlive-babel-icelandic-2017.135.1.2bsvn39387-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483044" comment="texlive-babel-indonesian-2017.135.1.0msvn43235-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483045" comment="texlive-babel-interlingua-2017.135.1.6svn30276-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483046" comment="texlive-babel-irish-2017.135.1.0hsvn30277-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483047" comment="texlive-babel-italian-2017.135.1.3nsvn36645-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483048" comment="texlive-babel-japanese-2017.135.2.1svn43145-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483049" comment="texlive-babel-kurmanji-2017.135.1.1svn30279-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483050" comment="texlive-babel-latin-2017.135.3.5svn38173-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483051" comment="texlive-babel-latvian-2017.135.2.0asvn34377-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483052" comment="texlive-babel-macedonian-2017.135.svn39587-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483053" comment="texlive-babel-malay-2017.135.1.0msvn43234-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483054" comment="texlive-babel-norsk-2017.135.2.0isvn30281-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483055" comment="texlive-babel-occitan-2017.135.0.0.2svn39608-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483056" comment="texlive-babel-piedmontese-2017.135.1.0svn30282-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483057" comment="texlive-babel-polish-2017.135.1.2lsvn30283-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483058" comment="texlive-babel-portuges-2017.135.1.2qsvn30284-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483059" comment="texlive-babel-romanian-2017.135.1.2lsvn30285-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483060" comment="texlive-babel-romansh-2017.135.svn30286-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483061" comment="texlive-babel-russian-2017.135.1.3isvn42885-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483062" comment="texlive-babel-samin-2017.135.1.0csvn30288-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483063" comment="texlive-babel-scottish-2017.135.1.0gsvn30289-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483064" comment="texlive-babel-serbian-2017.135.1.0dsvn30290-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483065" comment="texlive-babel-serbianc-2017.135.2.2svn30348-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483066" comment="texlive-babel-slovak-2017.135.3.1asvn30292-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483067" comment="texlive-babel-slovenian-2017.135.1.2isvn30351-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483068" comment="texlive-babel-sorbian-2017.135.lower_sorbian_1.0g._upper_1.0ksvn30294-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483069" comment="texlive-babel-spanglish-2017.135.0.0.3svn37629-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483070" comment="texlive-babel-spanish-2017.135.5.0psvn39920-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483071" comment="texlive-babel-swedish-2017.135.2.3dsvn30296-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483072" comment="texlive-babel-thai-2017.135.1.0.0svn30564-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483073" comment="texlive-babel-turkish-2017.135.1.3bsvn33284-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483074" comment="texlive-babel-ukrainian-2017.135.1.4svn44550-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483075" comment="texlive-babel-vietnamese-2017.135.1.4svn39246-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483076" comment="texlive-babel-welsh-2017.135.1.1asvn38372-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483077" comment="texlive-babelbib-2017.135.1.31svn25245-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483078" comment="texlive-background-2017.135.2.1svn42428-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483079" comment="texlive-backnaur-2017.135.1.1svn28513-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483080" comment="texlive-baekmuk-2017.135.2.2svn42106-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483081" comment="texlive-baekmuk-fonts-2017.135.2.2svn42106-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483082" comment="texlive-bagpipe-2017.135.3.02svn34393-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483083" comment="texlive-bangorcsthesis-2017.135.1.5.1svn41919-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483084" comment="texlive-bangorexam-2017.135.1.2.0svn43500-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483085" comment="texlive-bangtex-2017.135.svn15878-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483086" comment="texlive-bankstatement-2017.135.0.0.9.2svn38857-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483087" comment="texlive-barcodes-2017.135.svn15878-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483088" comment="texlive-bardiag-2017.135.0.0.4asvn22013-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483089" comment="texlive-barr-2017.135.svn38479-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483090" comment="texlive-bartel-chess-fonts-2017.135.svn20619-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483091" comment="texlive-bashful-2017.135.0.0.93svn25597-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483092" comment="texlive-basicarith-2017.135.1.1svn35460-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483093" comment="texlive-baskervald-2017.135.1.016svn19490-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483094" comment="texlive-baskervald-fonts-2017.135.1.016svn19490-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483095" comment="texlive-baskervaldx-2017.135.1.072svn43461-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483096" comment="texlive-baskervaldx-fonts-2017.135.1.072svn43461-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483097" comment="texlive-baskervillef-2017.135.1.043svn43484-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483098" comment="texlive-baskervillef-fonts-2017.135.1.043svn43484-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483099" comment="texlive-basque-book-2017.135.1.20svn32924-6.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483100" comment="texlive-basque-date-2017.133.1.05svn26477-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483101" comment="texlive-bbcard-2017.133.svn19440-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483102" comment="texlive-bbding-2017.133.1.01svn17186-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483103" comment="texlive-bbm-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483104" comment="texlive-bbm-macros-2017.133.svn17224-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483105" comment="texlive-bbold-2017.133.1.01svn17187-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483106" comment="texlive-bbold-type1-2017.133.svn33143-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483107" comment="texlive-bbold-type1-fonts-2017.133.svn33143-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483108" comment="texlive-bchart-2017.133.0.0.1.3svn43928-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483109" comment="texlive-bclogo-2017.133.3.1svn39364-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483110" comment="texlive-beamer-2017.133.3.41svn43073-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483111" comment="texlive-beamer-FUBerlin-2017.133.0.0.02bsvn38159-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483112" comment="texlive-beamer-tut-pt-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483113" comment="texlive-beamer-verona-2017.133.0.0.2svn39180-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483114" comment="texlive-beamer2thesis-2017.133.2.2svn27539-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483115" comment="texlive-beameraudience-2017.133.0.0.1svn23427-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483116" comment="texlive-beamercolorthemeowl-2017.133.0.0.1.1svn40105-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483117" comment="texlive-beamerdarkthemes-2017.133.0.0.4.1svn35101-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483118" comment="texlive-beamerposter-2017.133.1.12svn37009-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483119" comment="texlive-beamersubframe-2017.133.0.0.2svn23510-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483120" comment="texlive-beamerswitch-2017.133.1.2svn44568-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483121" comment="texlive-beamertheme-cuerna-2017.133.svn42161-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483122" comment="texlive-beamertheme-detlevcm-2017.133.1.02svn39048-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483123" comment="texlive-beamertheme-epyt-2017.133.1.0svn41404-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483124" comment="texlive-beamertheme-metropolis-2017.133.1.2svn43031-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483125" comment="texlive-beamertheme-phnompenh-2017.133.1.0svn39100-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483126" comment="texlive-beamertheme-upenn-bc-2017.133.1.0svn29937-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483127" comment="texlive-beamerthemejltree-2017.133.1.1svn21977-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483128" comment="texlive-beamerthemenirma-2017.133.0.0.1svn20765-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483129" comment="texlive-beebe-2017.133.svn44569-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483130" comment="texlive-begingreek-2017.133.1.5svn36294-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483131" comment="texlive-begriff-2017.133.1.6svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483132" comment="texlive-belleek-2017.133.svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483133" comment="texlive-belleek-fonts-2017.133.svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483134" comment="texlive-bengali-2017.133.svn20987-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483135" comment="texlive-bera-2017.133.svn20031-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483136" comment="texlive-bera-fonts-2017.133.svn20031-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483137" comment="texlive-berenisadf-2017.133.1.004svn32215-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483138" comment="texlive-berenisadf-fonts-2017.133.1.004svn32215-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483139" comment="texlive-besjournals-2017.133.svn35428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483140" comment="texlive-bestpapers-2017.133.1.0svn38708-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483141" comment="texlive-betababel-2017.133.0.0.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483142" comment="texlive-beton-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483143" comment="texlive-beuron-2017.133.1.1svn42038-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483144" comment="texlive-beuron-fonts-2017.133.1.1svn42038-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483145" comment="texlive-bewerbung-2017.133.1.1svn37880-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483146" comment="texlive-bez123-2017.133.1.1bsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483147" comment="texlive-bezos-2017.133.svn25507-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483148" comment="texlive-bgreek-2017.133.0.0.3svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483149" comment="texlive-bgteubner-2017.133.2.11svn44205-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483150" comment="texlive-bguq-2017.133.0.0.4svn27401-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483151" comment="texlive-bguq-fonts-2017.133.0.0.4svn27401-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483152" comment="texlive-bhcexam-2017.133.0.0.4svn39041-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483153" comment="texlive-bib-fr-2017.133.1.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483154" comment="texlive-bibarts-2017.133.2.1svn40096-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483155" comment="texlive-biber-2017.133.2.7svn43910-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483157" comment="texlive-bibexport-2017.133.3.02svn39928-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483159" comment="texlive-bibhtml-2017.133.2.0.2svn31607-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483160" comment="texlive-biblatex-2017.133.3.7svn42680-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483161" comment="texlive-biblatex-abnt-2017.133.3.0.1svn43510-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483162" comment="texlive-biblatex-anonymous-2017.133.2.6.0svn43043-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483163" comment="texlive-biblatex-apa-2017.133.7.4svn42893-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483164" comment="texlive-biblatex-archaeology-2017.133.1.2svn44522-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483165" comment="texlive-biblatex-arthistory-bonn-2017.133.1.0svn43468-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483166" comment="texlive-biblatex-bookinarticle-2017.133.1.3.1asvn40323-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483167" comment="texlive-biblatex-bookinother-2017.133.2.3.0svn43619-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483168" comment="texlive-biblatex-bwl-2017.133.0.0.02svn26556-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483169" comment="texlive-biblatex-caspervector-2017.133.0.0.2.7svn43371-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483170" comment="texlive-biblatex-cheatsheet-2017.133.svn43650-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483171" comment="texlive-biblatex-chem-2017.133.1.1ssvn43116-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483172" comment="texlive-biblatex-chicago-2017.133.1.0rc4svn44156-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483173" comment="texlive-biblatex-claves-2017.133.1.2.0svn43723-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483174" comment="texlive-biblatex-dw-2017.133.1.7svn42649-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483175" comment="texlive-biblatex-fiwi-2017.133.1.6csvn43082-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483176" comment="texlive-biblatex-gb7714-2015-2017.133.1.0gsvn43555-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483177" comment="texlive-biblatex-gost-2017.133.1.14svn44172-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483178" comment="texlive-biblatex-historian-2017.133.0.0.4svn19787-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483179" comment="texlive-biblatex-ieee-2017.133.1.2dsvn43620-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483180" comment="texlive-biblatex-ijsra-2017.133.0.0.1svn41634-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483181" comment="texlive-biblatex-iso690-2017.133.0.0.3.2svn44066-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483182" comment="texlive-biblatex-juradiss-2017.133.0.0.1gsvn29252-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483183" comment="texlive-biblatex-lni-2017.133.0.0.4svn43032-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483184" comment="texlive-biblatex-luh-ipw-2017.133.0.0.3svn32180-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483185" comment="texlive-biblatex-manuscripts-philology-2017.133.1.12.2svn43108-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483186" comment="texlive-biblatex-mla-2017.133.1.9svn42445-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483187" comment="texlive-biblatex-morenames-2017.133.1.3.1svn43049-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483188" comment="texlive-biblatex-multiple-dm-2017.133.1.0.1svn37081-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483189" comment="texlive-biblatex-musuos-2017.133.1.0svn24097-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483190" comment="texlive-biblatex-nature-2017.133.1.3bsvn43382-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483191" comment="texlive-biblatex-nejm-2017.133.0.0.4svn24011-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483192" comment="texlive-biblatex-nottsclassic-2017.133.0.0.1svn41596-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483193" comment="texlive-biblatex-opcit-booktitle-2017.133.1.8.0svn43621-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483194" comment="texlive-biblatex-oxref-2017.133.0.0.10svn44385-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483195" comment="texlive-biblatex-philosophy-2017.133.1.9.5svn43860-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483196" comment="texlive-biblatex-phys-2017.133.1.0bsvn41922-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483197" comment="texlive-biblatex-publist-2017.133.1.7svn43765-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483198" comment="texlive-biblatex-realauthor-2017.133.2.7.0svn42390-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483199" comment="texlive-biblatex-sbl-2017.133.0.0.8.1svn42972-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483200" comment="texlive-biblatex-science-2017.133.1.1gsvn42147-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483201" comment="texlive-biblatex-shortfields-2017.133.1.0.0svn43738-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483202" comment="texlive-biblatex-source-division-2017.133.2.4.1svn41675-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483203" comment="texlive-biblatex-subseries-2017.133.1.2.0svn43330-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483204" comment="texlive-biblatex-swiss-legal-2017.133.1.1.2asvn32750-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483205" comment="texlive-biblatex-trad-2017.133.0.0.3svn41656-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483206" comment="texlive-biblatex-true-citepages-omit-2017.133.1.3.0svn42120-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483207" comment="texlive-bibleref-2017.133.1.16svn42162-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483208" comment="texlive-bibleref-french-2017.133.2.3.1svn35497-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483209" comment="texlive-bibleref-german-2017.133.1.0asvn21923-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483210" comment="texlive-bibleref-lds-2017.133.1.0svn25526-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483211" comment="texlive-bibleref-mouth-2017.133.1.0svn25527-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483212" comment="texlive-bibleref-parse-2017.133.1.1svn22054-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483213" comment="texlive-bibletext-2017.133.0.0.1svn39785-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483214" comment="texlive-biblist-2017.133.svn17116-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483215" comment="texlive-bibtex-2017.133.0.0.99dsvn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483217" comment="texlive-bibtex8-2017.133.3.71svn29725-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483219" comment="texlive-bibtexperllibs-2017.133.1.3svn43549-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483220" comment="texlive-bibtexu-2017.133.svn29743-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483222" comment="texlive-bibtopic-2017.133.1.1asvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483223" comment="texlive-bibtopicprefix-2017.133.1.10svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483224" comment="texlive-bibunits-2017.133.2.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483225" comment="texlive-bidi-2017.133.30.7svn44546-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483226" comment="texlive-bidi-atbegshi-2017.133.0.0.1svn35154-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483227" comment="texlive-bidicontour-2017.133.0.0.2svn34631-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483228" comment="texlive-bidihl-2017.133.0.0.1csvn37795-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483229" comment="texlive-bidipagegrid-2017.133.0.0.2svn34632-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483230" comment="texlive-bidipresentation-2017.133.0.0.3svn35267-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483231" comment="texlive-bidishadowtext-2017.133.0.0.1svn34633-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483232" comment="texlive-bigfoot-2017.133.2.1svn38248-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483233" comment="texlive-bigints-2017.133.svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483235" comment="texlive-binarytree-2017.133.1.01svn41777-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483236" comment="texlive-binomexp-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483237" comment="texlive-biochemistry-colors-2017.133.1.00svn43960-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483238" comment="texlive-biocon-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483239" comment="texlive-biolett-bst-2017.133.svn42217-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483240" comment="texlive-bitelist-2017.133.0.0.1svn25779-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483241" comment="texlive-bitpattern-2017.133.svn39073-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483242" comment="texlive-bizcard-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483243" comment="texlive-blacklettert1-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483244" comment="texlive-blindtext-2017.133.2.0svn25039-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483245" comment="texlive-blkarray-2017.133.0.0.07svn36406-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483246" comment="texlive-blochsphere-2017.133.1.1svn38388-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483247" comment="texlive-block-2017.133.svn17209-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483248" comment="texlive-blockdraw_mp-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483249" comment="texlive-bloques-2017.133.1.0svn22490-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483250" comment="texlive-blox-2017.133.2.5svn35014-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483251" comment="texlive-bnumexpr-2017.133.1.2asvn38638-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483252" comment="texlive-bodegraph-2017.133.1.4svn20047-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483253" comment="texlive-bohr-2017.133.1.0svn37657-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483254" comment="texlive-boisik-2017.133.0.0.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483255" comment="texlive-boites-2017.133.1.1svn32235-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483256" comment="texlive-bold-extra-2017.133.0.0.1svn17076-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483257" comment="texlive-boldtensors-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483258" comment="texlive-bondgraph-2017.133.1.0svn21670-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483259" comment="texlive-bondgraphs-2017.133.1.0.1svn36605-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483260" comment="texlive-bookcover-2017.133.2.1svn43861-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483261" comment="texlive-bookdb-2017.133.0.0.2svn37536-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483262" comment="texlive-bookest-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483263" comment="texlive-bookhands-2017.133.svn23609-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483264" comment="texlive-bookhands-fonts-2017.133.svn23609-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483265" comment="texlive-booklet-2017.133.0.0.7bsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483266" comment="texlive-bookman-2017.133.svn31835-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483267" comment="texlive-bookman-fonts-2017.133.svn31835-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483268" comment="texlive-booktabs-2017.133.1.618033svn40846-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483269" comment="texlive-booktabs-de-2017.133.1.61803svn21907-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483270" comment="texlive-booktabs-fr-2017.133.1.00svn21948-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483271" comment="texlive-boolexpr-2017.133.3.14svn17830-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483272" comment="texlive-boondox-2017.133.1.02dsvn43344-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483273" comment="texlive-boondox-fonts-2017.133.1.02dsvn43344-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483274" comment="texlive-bophook-2017.133.0.0.02svn17062-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483275" comment="texlive-borceux-2017.133.svn21047-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483276" comment="texlive-bosisio-2017.133.svn16989-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483277" comment="texlive-boxedminipage-2017.133.2svn17087-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483278" comment="texlive-boxedminipage2e-2017.133.1.0svn36477-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483279" comment="texlive-boxhandler-2017.133.1.30svn28031-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483280" comment="texlive-bpchem-2017.133.1.06svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483281" comment="texlive-bpolynomial-2017.133.0.0.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483282" comment="texlive-br-lex-2017.133.svn39701-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483283" comment="texlive-bracketkey-2017.133.1.0svn17129-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483284" comment="texlive-braids-2017.133.1.0svn23790-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483285" comment="texlive-braille-2017.133.svn20655-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483286" comment="texlive-braket-2017.133.svn17127-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483287" comment="texlive-brandeis-dissertation-2017.133.2.0svn32047-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483288" comment="texlive-breakcites-2017.133.svn21014-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483289" comment="texlive-breakurl-2017.133.1.40svn29901-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483290" comment="texlive-bredzenie-2017.133.1.0svn44371-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483291" comment="texlive-breqn-2017.133.0.0.98esvn43071-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483292" comment="texlive-bropd-2017.133.1.2svn35383-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483293" comment="texlive-brushscr-2017.133.svn28363-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483294" comment="texlive-brushscr-fonts-2017.133.svn28363-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483295" comment="texlive-bullcntr-2017.133.0.0.04svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483296" comment="texlive-bundledoc-2017.133.3.2svn35041-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483298" comment="texlive-burmese-2017.133.svn25185-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483299" comment="texlive-burmese-fonts-2017.133.svn25185-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483300" comment="texlive-bussproofs-2017.133.1.1svn27488-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483301" comment="texlive-bxbase-2017.133.1.1svn44481-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483302" comment="texlive-bxcalc-2017.133.1.0svn44514-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483303" comment="texlive-bxcjkjatype-2017.133.0.0.3svn42292-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483304" comment="texlive-bxdpx-beamer-2017.133.0.0.3svn41813-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483305" comment="texlive-bxdvidriver-2017.133.0.0.2asvn43219-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483306" comment="texlive-bxeepic-2017.133.0.0.2svn30559-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483307" comment="texlive-bxenclose-2017.133.0.0.2svn40213-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483308" comment="texlive-bxjalipsum-2017.133.0.0.3asvn43369-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483309" comment="texlive-bxjaprnind-2017.133.0.0.3asvn44554-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483310" comment="texlive-bxjscls-2017.133.1.5bsvn43741-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483311" comment="texlive-bxnewfont-2017.133.0.0.2bsvn44173-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483312" comment="texlive-bxorigcapt-2017.133.0.0.2asvn44195-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483313" comment="texlive-bxpapersize-2017.133.0.0.3asvn44174-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483314" comment="texlive-bxpdfver-2017.133.0.0.4svn43201-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483315" comment="texlive-bytefield-2017.133.2.3svn38736-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483316" comment="texlive-c-pascal-2017.133.1.2svn18337-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483317" comment="texlive-c90-2017.133.svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483318" comment="texlive-cabin-2017.133.svn43687-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483319" comment="texlive-cabin-fonts-2017.133.svn43687-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483320" comment="texlive-cachepic-2017.133.1.0svn26313-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483322" comment="texlive-caladea-2017.133.svn34991-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483323" comment="texlive-caladea-fonts-2017.133.svn34991-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483324" comment="texlive-calcage-2017.133.0.0.90svn27725-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483325" comment="texlive-calctab-2017.133.0.0.6.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483326" comment="texlive-calculation-2017.133.1.0svn35973-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483327" comment="texlive-calculator-2017.133.2.0svn33041-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483328" comment="texlive-calligra-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483329" comment="texlive-calligra-type1-2017.133.001.000svn24302-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483330" comment="texlive-calligra-type1-fonts-2017.133.001.000svn24302-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483331" comment="texlive-callouts-2017.133.svn43515-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483332" comment="texlive-calrsfs-2017.133.svn17125-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483333" comment="texlive-cals-2017.133.2.4.2svn43003-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483334" comment="texlive-calxxxx-yyyy-2017.133.20.17asvn44131-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483335" comment="texlive-cancel-2017.133.2.2svn32508-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483336" comment="texlive-canoniclayout-2017.133.0.0.4svn24523-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483337" comment="texlive-cantarell-2017.133.2.4svn27066-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483338" comment="texlive-cantarell-fonts-2017.133.2.4svn27066-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483339" comment="texlive-capt-of-2017.133.svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483340" comment="texlive-captcont-2017.133.2.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483341" comment="texlive-captdef-2017.133.svn17353-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483342" comment="texlive-caption-2017.133.svn41409-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483343" comment="texlive-carbohydrates-2017.133.0.0.1svn39000-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483344" comment="texlive-carlisle-2017.133.svn18258-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483345" comment="texlive-carlito-2017.133.svn35002-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483346" comment="texlive-carlito-fonts-2017.133.svn35002-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483347" comment="texlive-carolmin-ps-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483348" comment="texlive-carolmin-ps-fonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483349" comment="texlive-cascadilla-2017.133.1.8.2svn25144-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483350" comment="texlive-cases-2017.133.2.5svn17123-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483351" comment="texlive-casyl-2017.133.2.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483352" comment="texlive-catchfilebetweentags-2017.133.1.1svn21476-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483353" comment="texlive-catcodes-2017.133.r0.2svn38859-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483354" comment="texlive-catechis-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483355" comment="texlive-catoptions-2017.133.0.0.2.7hsvn35069-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483356" comment="texlive-cbcoptic-2017.133.0.0.2svn16666-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483357" comment="texlive-cbcoptic-fonts-2017.133.0.0.2svn16666-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483358" comment="texlive-cbfonts-2017.133.svn31624-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483359" comment="texlive-cbfonts-fd-2017.133.1.1svn39936-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483360" comment="texlive-cbfonts-fonts-2017.133.svn31624-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483361" comment="texlive-cc-pl-2017.133.1.02.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483362" comment="texlive-cc-pl-fonts-2017.133.1.02.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483363" comment="texlive-ccaption-2017.133.3.2csvn23443-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483364" comment="texlive-ccfonts-2017.133.1.1svn17122-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483365" comment="texlive-ccicons-2017.133.1.5svn30020-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483366" comment="texlive-ccicons-fonts-2017.133.1.5svn30020-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483367" comment="texlive-cclicenses-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483368" comment="texlive-cd-2017.133.1.4svn34452-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483369" comment="texlive-cd-cover-2017.133.1.0svn17121-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483370" comment="texlive-cdpbundl-2017.133.0.0.36svn36697-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483371" comment="texlive-cell-2017.133.svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483372" comment="texlive-cellspace-2017.133.1.6svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483373" comment="texlive-celtic-2017.133.1.1svn39797-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483374" comment="texlive-censor-2017.133.3.21svn31332-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483375" comment="texlive-cfr-initials-2017.133.1.01svn36728-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483376" comment="texlive-cfr-lm-2017.133.1.5svn36195-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483377" comment="texlive-changebar-2017.133.3.5csvn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483378" comment="texlive-changelayout-2017.133.1.0svn16094-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483379" comment="texlive-changepage-2017.133.1.0csvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483380" comment="texlive-changes-2017.133.2.0.4svn41737-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483381" comment="texlive-chappg-2017.133.2.1bsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483382" comment="texlive-chapterfolder-2017.133.2.0.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483383" comment="texlive-charter-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483384" comment="texlive-charter-fonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483385" comment="texlive-chbibref-2017.133.1.0svn17120-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483386" comment="texlive-checkcites-2017.133.1.0isvn28572-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483388" comment="texlive-checklistings-2017.133.1.0svn38300-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483390" comment="texlive-chem-journal-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483391" comment="texlive-chemarrow-2017.133.0.0.9svn17146-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483392" comment="texlive-chemarrow-fonts-2017.133.0.0.9svn17146-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483393" comment="texlive-chembst-2017.133.0.0.2.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483394" comment="texlive-chemcompounds-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483395" comment="texlive-chemcono-2017.133.1.3svn17119-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483396" comment="texlive-chemexec-2017.133.1.0svn21632-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483397" comment="texlive-chemfig-2017.133.1.2esvn44513-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483398" comment="texlive-chemformula-2017.133.4.15esvn43583-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483399" comment="texlive-chemgreek-2017.133.1.1svn42758-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483400" comment="texlive-chemmacros-2017.133.5.8svn44023-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483401" comment="texlive-chemnum-2017.133.1.2svn40522-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483402" comment="texlive-chemschemex-2017.133.1.1svn43747-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483403" comment="texlive-chemstyle-2017.133.2.0msvn31096-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483404" comment="texlive-cherokee-2017.133.svn21046-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483405" comment="texlive-chess-2017.133.1.2svn20582-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483406" comment="texlive-chess-problem-diagrams-2017.133.1.12svn39317-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483407" comment="texlive-chessboard-2017.133.1.7svn33801-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483408" comment="texlive-chessfss-2017.133.1.2asvn19440-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483409" comment="texlive-chet-2017.133.2.1svn38161-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483410" comment="texlive-chextras-2017.133.1.01svn27118-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483411" comment="texlive-chicago-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483412" comment="texlive-chicago-annote-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483413" comment="texlive-chickenize-2017.133.0.0.2.4svn42341-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483414" comment="texlive-childdoc-2017.133.1.5svn44512-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483415" comment="texlive-chivo-2017.133.1.0svn40931-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483416" comment="texlive-chivo-fonts-2017.133.1.0svn40931-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483417" comment="texlive-chkfloat-2017.133.0.0.1svn27473-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483418" comment="texlive-chktex-2017.133.1.7.6svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483420" comment="texlive-chletter-2017.133.2.0svn20060-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483421" comment="texlive-chngcntr-2017.133.1.0asvn17157-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483422" comment="texlive-chronology-2017.133.1.1.1svn37934-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483423" comment="texlive-chronosys-2017.133.1.2svn26700-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483424" comment="texlive-chscite-2017.133.2.9999svn28552-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483425" comment="texlive-churchslavonic-2017.133.0.0.2.1svn42751-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483426" comment="texlive-cinzel-2017.133.svn34408-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483427" comment="texlive-cinzel-fonts-2017.133.svn34408-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483428" comment="texlive-circ-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483429" comment="texlive-circuitikz-2017.133.0.0.8.3svn44488-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483430" comment="texlive-cite-2017.133.5.5svn36428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483431" comment="texlive-citeall-2017.133.1.2svn37103-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483432" comment="texlive-cje-2017.133.1.01svn44454-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483433" comment="texlive-cjhebrew-2017.133.0.0.2asvn43444-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483434" comment="texlive-cjhebrew-fonts-2017.133.0.0.2asvn43444-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483435" comment="texlive-cjk-2017.133.4.8.4svn36951-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483436" comment="texlive-cjk-gs-integrate-2017.133.20170505.0svn44207-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483438" comment="texlive-cjk-ko-2017.133.1.8svn40373-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483439" comment="texlive-cjkpunct-2017.133.4.8.4svn41119-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483440" comment="texlive-cjkutils-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483442" comment="texlive-classics-2017.133.0.0.1svn29018-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483443" comment="texlive-classicthesis-2017.133.4.2svn38304-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483444" comment="texlive-classpack-2017.133.0.0.77svn33101-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483445" comment="texlive-cleanthesis-2017.133.0.0.3.1svn38221-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483446" comment="texlive-clearsans-2017.133.svn34405-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483447" comment="texlive-clearsans-fonts-2017.133.svn34405-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483448" comment="texlive-clefval-2017.133.0svn16549-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483449" comment="texlive-cleveref-2017.133.0.0.19svn32513-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483450" comment="texlive-clipboard-2017.133.0.0.2svn28876-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483451" comment="texlive-clock-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483452" comment="texlive-cloze-2017.133.1.2svn41531-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483453" comment="texlive-clrscode-2017.133.1.7svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483454" comment="texlive-clrscode3e-2017.133.svn34887-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483455" comment="texlive-cm-2017.133.svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483456" comment="texlive-cm-lgc-2017.133.0.0.5svn28250-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483457" comment="texlive-cm-lgc-fonts-2017.133.0.0.5svn28250-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483458" comment="texlive-cm-super-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483459" comment="texlive-cm-super-fonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483460" comment="texlive-cm-unicode-2017.133.0.0.7.0svn19445-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483461" comment="texlive-cm-unicode-fonts-2017.133.0.0.7.0svn19445-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483462" comment="texlive-cmap-2017.133.1.0hsvn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483463" comment="texlive-cmarrows-2017.133.0.0.9svn24378-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483464" comment="texlive-cmbright-2017.133.8.1svn21107-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483465" comment="texlive-cmcyr-2017.133.svn39273-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483466" comment="texlive-cmcyr-fonts-2017.133.svn39273-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483467" comment="texlive-cmdstring-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483468" comment="texlive-cmdtrack-2017.133.svn28910-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483469" comment="texlive-cmexb-2017.133.svn40785-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483470" comment="texlive-cmexb-fonts-2017.133.svn40785-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483471" comment="texlive-cmextra-2017.133.svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483472" comment="texlive-cmll-2017.133.svn17964-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483473" comment="texlive-cmll-fonts-2017.133.svn17964-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483474" comment="texlive-cmpica-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483475" comment="texlive-cmpj-2017.133.3.01svn44283-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483476" comment="texlive-cmsd-2017.133.svn18787-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483477" comment="texlive-cmtiup-2017.133.2.1svn39728-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483478" comment="texlive-cnbwp-2017.133.svn32550-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483479" comment="texlive-cnltx-2017.133.0.0.13svn38138-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483480" comment="texlive-cns-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483481" comment="texlive-cntformats-2017.133.0.0.7svn34668-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483482" comment="texlive-cntperchap-2017.133.0.0.3svn37572-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483483" comment="texlive-cochineal-2017.133.1.042svn43462-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483484" comment="texlive-cochineal-fonts-2017.133.1.042svn43462-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483485" comment="texlive-codedoc-2017.133.0.0.3svn17630-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483486" comment="texlive-codepage-2017.133.svn21126-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483487" comment="texlive-codesection-2017.133.0.0.1svn34481-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483488" comment="texlive-codicefiscaleitaliano-2017.133.1.2svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483489" comment="texlive-collcell-2017.133.0.0.5svn21539-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483490" comment="texlive-collectbox-2017.133.0.0.4bsvn26557-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483491" comment="texlive-collref-2017.133.2.0bsvn35084-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483492" comment="texlive-colordoc-2017.133.svn18270-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483493" comment="texlive-colorinfo-2017.133.0.0.3csvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483494" comment="texlive-coloring-2017.133.0.0.2svn41042-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483495" comment="texlive-colorsep-2017.133.svn13293-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483496" comment="texlive-colorspace-2017.133.1.2.0svn42228-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483497" comment="texlive-colortab-2017.133.1.0svn22155-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483498" comment="texlive-colortbl-2017.133.1.0asvn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483499" comment="texlive-colorwav-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483500" comment="texlive-colorweb-2017.133.1.3svn31490-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483501" comment="texlive-colourchange-2017.133.1.22svn21741-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483502" comment="texlive-combelow-2017.133.0.0.99fsvn18462-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483503" comment="texlive-combine-2017.133.0.0.7asvn19361-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483504" comment="texlive-combinedgraphics-2017.133.0.0.2.2svn27198-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483505" comment="texlive-combofont-2017.133.0.0.1svn44491-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483506" comment="texlive-comfortaa-2017.133.2.3svn27536-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483507" comment="texlive-comfortaa-fonts-2017.133.2.3svn27536-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483508" comment="texlive-comicneue-2017.133.1.1svn42851-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483509" comment="texlive-comicneue-fonts-2017.133.1.1svn42851-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483510" comment="texlive-comma-2017.133.1.2svn18259-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483511" comment="texlive-commado-2017.133.r0.11asvn38875-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483512" comment="texlive-commath-2017.133.0.0.3svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483513" comment="texlive-comment-2017.133.3.8svn41927-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483514" comment="texlive-compactbib-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483515" comment="texlive-complexity-2017.133.0.0.76svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483516" comment="texlive-components-of-TeX-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483517" comment="texlive-comprehensive-2017.133.12.3svn43001-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483518" comment="texlive-computational-complexity-2017.133.2.25fsvn39903-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483519" comment="texlive-concepts-2017.133.0.0.0.5_r1svn29020-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483520" comment="texlive-concmath-2017.133.svn17219-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483521" comment="texlive-concmath-fonts-2017.133.svn17218-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483522" comment="texlive-concprog-2017.133.svn18791-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483523" comment="texlive-concrete-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483524" comment="texlive-confproc-2017.133.0.0.8svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483525" comment="texlive-constants-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483526" comment="texlive-conteq-2017.133.0.0.1.1svn37868-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483527" comment="texlive-context-2017.133.svn44436-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483528" comment="texlive-context-account-2017.133.svn23167-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483529" comment="texlive-context-algorithmic-2017.133.svn31026-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483530" comment="texlive-context-animation-2017.133.svn36188-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483531" comment="texlive-context-annotation-2017.133.svn36188-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483533" comment="texlive-context-bnf-2017.133.svn23167-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483534" comment="texlive-context-chromato-2017.133.svn23167-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483535" comment="texlive-context-cmscbf-2017.133.svn42327-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483536" comment="texlive-context-cmttbf-2017.133.svn42328-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483537" comment="texlive-context-construction-plan-2017.133.svn23167-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483538" comment="texlive-context-cyrillicnumbers-2017.133.svn29905-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483539" comment="texlive-context-degrade-2017.133.svn23167-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483540" comment="texlive-context-fancybreak-2017.133.svn36948-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483541" comment="texlive-context-filter-2017.133.svn42326-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483542" comment="texlive-context-fonts-2017.133.svn44436-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483543" comment="texlive-context-french-2017.133.svn24582-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483544" comment="texlive-context-fullpage-2017.133.svn23167-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483545" comment="texlive-context-gantt-2017.133.svn27472-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483546" comment="texlive-context-gnuplot-2017.133.svn30380-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483547" comment="texlive-context-inifile-2017.133.svn42329-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483548" comment="texlive-context-layout-2017.133.svn42330-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483549" comment="texlive-context-letter-2017.133.svn38202-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483550" comment="texlive-context-lettrine-2017.133.svn23167-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483551" comment="texlive-context-mathsets-2017.133.svn23167-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483552" comment="texlive-context-notes-zh-cn-2017.133.svn23171-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483553" comment="texlive-context-rst-2017.133.0.0.6csvn33092-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483554" comment="texlive-context-ruby-2017.133.svn28434-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483555" comment="texlive-context-simplefonts-2017.133.svn29229-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483556" comment="texlive-context-simpleslides-2017.133.svn34438-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483557" comment="texlive-context-title-2017.133.svn36189-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483558" comment="texlive-context-transliterator-2017.133.svn29801-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483559" comment="texlive-context-typearea-2017.133.svn23167-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483560" comment="texlive-context-typescripts-2017.133.svn25411-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483561" comment="texlive-context-vim-2017.133.svn37413-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483562" comment="texlive-context-visualcounter-2017.133.svn36190-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483563" comment="texlive-continue-2017.133.0.0.1svn39308-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483564" comment="texlive-contour-2017.133.2.14svn18950-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483565" comment="texlive-contracard-2017.133.1.0.1svn31745-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483566" comment="texlive-conv-xkv-2017.133.svn43558-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483567" comment="texlive-convbkmk-2017.133.0.0.10asvn35923-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483569" comment="texlive-cooking-2017.133.0.0.9bsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483570" comment="texlive-cooking-units-2017.133.1.10svn42507-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483571" comment="texlive-cookingsymbols-2017.133.1.1svn35929-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483572" comment="texlive-cool-2017.133.1.35svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483573" comment="texlive-coollist-2017.133.1.4svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483574" comment="texlive-coolstr-2017.133.2.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483575" comment="texlive-coolthms-2017.133.1.2svn29062-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483576" comment="texlive-cooltooltips-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483577" comment="texlive-coordsys-2017.133.1.4svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483578" comment="texlive-copyedit-2017.133.1.6svn37928-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483579" comment="texlive-copyrightbox-2017.133.0.0.1svn24829-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483580" comment="texlive-cormorantgaramond-2017.133.3.00svn41865-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483581" comment="texlive-cormorantgaramond-fonts-2017.133.3.00svn41865-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483582" comment="texlive-correctmathalign-2017.133.1.1svn44131-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483583" comment="texlive-coseoul-2017.133.1.1svn23862-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483584" comment="texlive-countriesofeurope-2017.133.0.0.21svn26042-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483585" comment="texlive-countriesofeurope-fonts-2017.133.0.0.21svn26042-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483586" comment="texlive-counttexruns-2017.133.1.00asvn27576-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483587" comment="texlive-courier-2017.133.svn35058-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483588" comment="texlive-courier-fonts-2017.133.svn35058-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483589" comment="texlive-courier-scaled-2017.133.svn24940-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483590" comment="texlive-courseoutline-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483591" comment="texlive-coursepaper-2017.133.2.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483592" comment="texlive-coverpage-2017.133.1.01svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483593" comment="texlive-covington-2017.133.1.4svn44501-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483594" comment="texlive-cprotect-2017.133.1.0esvn21209-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483595" comment="texlive-cquthesis-2017.133.1.20svn44476-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483596" comment="texlive-crbox-2017.133.0.0.1svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483597" comment="texlive-crimson-2017.133.svn43525-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483598" comment="texlive-crimson-fonts-2017.133.svn43525-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483599" comment="texlive-crop-2017.133.1.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483600" comment="texlive-crossreference-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483601" comment="texlive-crossrefware-2017.133.2.1asvn43993-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483603" comment="texlive-crossword-2017.133.1.9svn32657-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483604" comment="texlive-crosswrd-2017.133.3.0svn16896-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483605" comment="texlive-cryptocode-2017.133.0.0.1svn37019-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483606" comment="texlive-cryst-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483607" comment="texlive-cryst-fonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483608" comment="texlive-cs-2017.133.svn41553-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483609" comment="texlive-cs-fonts-2017.133.svn41553-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483610" comment="texlive-csbulletin-2017.133.1.1svn43277-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483611" comment="texlive-cslatex-2017.133.svn40855-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483613" comment="texlive-csplain-2017.133.svn44321-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483615" comment="texlive-csquotes-2017.133.5.2bsvn43469-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483616" comment="texlive-csquotes-de-2017.133.1.01svn23371-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483617" comment="texlive-css-colors-2017.133.1.02svn43961-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483618" comment="texlive-cstex-2017.133.svn41301-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483619" comment="texlive-cstypo-2017.133.0.0.03svn41986-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483620" comment="texlive-csvsimple-2017.133.1.20svn41597-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483621" comment="texlive-ctable-2017.133.1.31svn38672-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483622" comment="texlive-ctablestack-2017.133.1.0svn38514-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483623" comment="texlive-ctan_chk-2017.133.1.0svn36304-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483624" comment="texlive-ctanify-2017.133.1.9.1svn44129-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483626" comment="texlive-ctanupload-2017.133.1.2csvn26313-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483628" comment="texlive-ctex-2017.133.2.4.9svn43669-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483629" comment="texlive-ctex-faq-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483630" comment="texlive-ctib-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483631" comment="texlive-ctie-2017.133.1.1svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483633" comment="texlive-cuisine-2017.133.0.0.7svn34453-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483634" comment="texlive-currency-2017.133.0.0.1svn44489-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483635" comment="texlive-currfile-2017.133.0.0.7csvn40725-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483636" comment="texlive-currvita-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483637" comment="texlive-cursolatex-2017.133.svn24139-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483638" comment="texlive-curve-2017.133.1.16svn20745-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483639" comment="texlive-curve2e-2017.133.1.60svn37839-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483640" comment="texlive-curves-2017.133.1.53svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483641" comment="texlive-custom-bib-2017.133.4.33svn24729-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483642" comment="texlive-cutwin-2017.133.0.0.1svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483643" comment="texlive-cv-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483644" comment="texlive-cv4tw-2017.133.0.0.2svn34577-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483645" comment="texlive-cweb-2017.133.3.64bsvn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483647" comment="texlive-cweb-latex-2017.133.svn28878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483648" comment="texlive-cyber-2017.133.2.1svn37658-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483649" comment="texlive-cybercic-2017.133.2.1svn37659-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483650" comment="texlive-cyklop-2017.133.0.0.915svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483651" comment="texlive-cyklop-fonts-2017.133.0.0.915svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483652" comment="texlive-cyrillic-2017.133.svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483653" comment="texlive-cyrillic-bin-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483655" comment="texlive-cyrplain-2017.133.svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483656" comment="texlive-dad-2017.133.1.1svn35362-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483657" comment="texlive-dad-fonts-2017.133.1.1svn35362-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483658" comment="texlive-dancers-2017.133.svn13293-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483659" comment="texlive-dantelogo-2017.133.0.0.03svn38599-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483660" comment="texlive-dantelogo-fonts-2017.133.0.0.03svn38599-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483661" comment="texlive-dashbox-2017.133.1.14svn23425-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483662" comment="texlive-dashrule-2017.133.1.3svn29579-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483663" comment="texlive-dashundergaps-2017.133.1.2svn23373-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483664" comment="texlive-dataref-2017.133.0.0.6svn42883-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483665" comment="texlive-datatool-2017.133.2.27svn41772-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483666" comment="texlive-dateiliste-2017.133.0.0.6svn27974-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483667" comment="texlive-datenumber-2017.133.0.0.02svn18951-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483668" comment="texlive-datetime-2017.133.2.60svn36650-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483669" comment="texlive-datetime2-2017.133.1.5.2svn41686-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483670" comment="texlive-datetime2-bahasai-2017.133.1.0svn36682-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483671" comment="texlive-datetime2-basque-2017.133.1.2svn38287-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483672" comment="texlive-datetime2-breton-2017.133.1.0svn36682-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483673" comment="texlive-datetime2-bulgarian-2017.133.1.0svn36682-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483674" comment="texlive-datetime2-catalan-2017.133.1.0svn36682-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483675" comment="texlive-datetime2-croatian-2017.133.1.0svn36682-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483676" comment="texlive-datetime2-czech-2017.133.1.0svn36682-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483677" comment="texlive-datetime2-danish-2017.133.1.0svn36682-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483678" comment="texlive-datetime2-dutch-2017.133.1.0svn36682-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483679" comment="texlive-datetime2-en-fulltext-2017.133.1.0svn36705-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483680" comment="texlive-datetime2-english-2017.133.1.04svn39991-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483681" comment="texlive-datetime2-esperanto-2017.133.1.0svn36682-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483682" comment="texlive-datetime2-estonian-2017.133.1.0svn36682-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483683" comment="texlive-datetime2-finnish-2017.133.1.1svn40237-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483684" comment="texlive-datetime2-french-2017.133.1.02svn43742-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483685" comment="texlive-datetime2-galician-2017.133.1.0svn36692-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483686" comment="texlive-datetime2-german-2017.133.1.1svn43452-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483687" comment="texlive-datetime2-greek-2017.133.1.0svn36692-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483688" comment="texlive-datetime2-hebrew-2017.133.1.0svn36692-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483689" comment="texlive-datetime2-icelandic-2017.133.1.0svn36692-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483690" comment="texlive-datetime2-irish-2017.133.1.0svn36635-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483691" comment="texlive-datetime2-it-fulltext-2017.133.1.6svn38093-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483692" comment="texlive-datetime2-italian-2017.133.1.3svn37146-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483693" comment="texlive-datetime2-latin-2017.133.1.0svn36692-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483694" comment="texlive-datetime2-lsorbian-2017.133.1.0svn36692-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483695" comment="texlive-datetime2-magyar-2017.133.1.0svn36692-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483696" comment="texlive-datetime2-norsk-2017.133.1.0svn36692-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483697" comment="texlive-datetime2-polish-2017.133.1.0svn36692-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483698" comment="texlive-datetime2-portuges-2017.133.1.0svn36670-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483699" comment="texlive-datetime2-romanian-2017.133.1.01svn43743-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483700" comment="texlive-datetime2-russian-2017.133.1.0svn36692-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483701" comment="texlive-datetime2-samin-2017.133.1.0svn36692-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483702" comment="texlive-datetime2-scottish-2017.133.1.0svn36625-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483703" comment="texlive-datetime2-serbian-2017.133.1.0svn36699-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483704" comment="texlive-datetime2-slovak-2017.133.1.0svn36700-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483705" comment="texlive-datetime2-slovene-2017.133.1.0svn36700-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483706" comment="texlive-datetime2-spanish-2017.133.1.0svn36661-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483707" comment="texlive-datetime2-swedish-2017.133.1.0svn36700-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483708" comment="texlive-datetime2-turkish-2017.133.1.0svn36700-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483709" comment="texlive-datetime2-ukrainian-2017.133.1.1svn44562-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483710" comment="texlive-datetime2-usorbian-2017.133.1.0svn36700-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483711" comment="texlive-datetime2-welsh-2017.133.1.0svn36636-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483712" comment="texlive-dblfloatfix-2017.133.1.0asvn28983-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483713" comment="texlive-dccpaper-2017.133.1.5svn41804-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483714" comment="texlive-dcpic-2017.133.5.0.0svn30206-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483715" comment="texlive-de-macro-2017.133.1.3svn26355-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483717" comment="texlive-decimal-2017.133.svn23374-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483718" comment="texlive-decorule-2017.133.0.0.6svn23487-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483719" comment="texlive-dehyph-exptl-2017.133.0.0.41svn43666-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483720" comment="texlive-dejavu-2017.133.2.34svn31771-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483721" comment="texlive-dejavu-fonts-2017.133.2.34svn31771-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483722" comment="texlive-delim-2017.133.1.0svn23974-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483723" comment="texlive-delimseasy-2017.133.2.0svn39589-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483724" comment="texlive-delimset-2017.133.1.0svn42415-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483725" comment="texlive-delimtxt-2017.133.svn16549-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483726" comment="texlive-denisbdoc-2017.133.0.0.7svn42829-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483727" comment="texlive-detex-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483729" comment="texlive-dhua-2017.133.0.0.11svn24035-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483730" comment="texlive-diadia-2017.133.1.1svn37656-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483732" comment="texlive-diagbox-2017.133.2.2svn42843-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483733" comment="texlive-diagmac2-2017.133.2.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483734" comment="texlive-diagnose-2017.133.0.0.2svn19387-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483735" comment="texlive-dialogl-2017.133.svn28946-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483736" comment="texlive-dice-2017.133.svn28501-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483737" comment="texlive-dichokey-2017.133.svn17192-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483738" comment="texlive-dickimaw-2017.133.svn32925-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483739" comment="texlive-dictsym-2017.133.svn20031-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483740" comment="texlive-dictsym-fonts-2017.133.svn20031-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483741" comment="texlive-diffcoeff-2017.133.1.0svn41554-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483742" comment="texlive-digiconfigs-2017.133.0.0.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483743" comment="texlive-din1505-2017.133.svn19441-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483744" comment="texlive-dinat-2017.133.2.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483745" comment="texlive-dinbrief-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483746" comment="texlive-dingbat-2017.133.1.0svn27918-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483747" comment="texlive-directory-2017.133.1.20svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483748" comment="texlive-dirtree-2017.133.0.0.32svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483749" comment="texlive-dirtytalk-2017.133.1.0svn20520-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483750" comment="texlive-disser-2017.133.1.5.0svn43417-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483751" comment="texlive-dithesis-2017.133.0.0.2svn34295-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483752" comment="texlive-dk-bib-2017.133.0.0.6svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483753" comment="texlive-dlfltxb-2017.133.svn17337-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483754" comment="texlive-dnaseq-2017.133.0.0.01svn17194-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483755" comment="texlive-dnp-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483756" comment="texlive-doc-pictex-2017.133.svn24927-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483757" comment="texlive-docbytex-2017.133.svn34294-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483758" comment="texlive-doclicense-2017.133.1.5.0svn40723-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483759" comment="texlive-docmfp-2017.133.1.2dsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483760" comment="texlive-docmute-2017.133.1.4svn25741-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483761" comment="texlive-docsurvey-2017.133.svn44131-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483762" comment="texlive-doctools-2017.133.0.0.1svn34474-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483763" comment="texlive-documentation-2017.133.0.0.1svn34521-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483764" comment="texlive-doi-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483765" comment="texlive-doipubmed-2017.133.1.01svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483766" comment="texlive-dosepsbin-2017.133.1.2svn29752-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483768" comment="texlive-dot2texi-2017.133.3.0svn26237-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483769" comment="texlive-dotarrow-2017.133.0.0.01asvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483770" comment="texlive-dotseqn-2017.133.1.1svn17195-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483771" comment="texlive-dottex-2017.133.0.0.6svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483772" comment="texlive-doublestroke-2017.133.1.111svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483773" comment="texlive-doublestroke-fonts-2017.133.1.111svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483774" comment="texlive-dowith-2017.133.r0.32svn38860-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483775" comment="texlive-download-2017.133.1.1svn30695-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483776" comment="texlive-dox-2017.133.2.3svn43060-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483777" comment="texlive-dozenal-2017.133.7.0svn42608-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483778" comment="texlive-dozenal-fonts-2017.133.7.0svn42608-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483779" comment="texlive-dpfloat-2017.133.svn17196-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483780" comment="texlive-dprogress-2017.133.0.0.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483781" comment="texlive-drac-2017.133.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483782" comment="texlive-draftcopy-2017.133.2.16svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483783" comment="texlive-draftfigure-2017.133.0.0.1svn44269-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483784" comment="texlive-draftwatermark-2017.133.1.2svn37498-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483785" comment="texlive-dramatist-2017.133.1.2esvn35866-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483786" comment="texlive-dratex-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483787" comment="texlive-drawmatrix-2017.133.1.5.0svn44471-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483788" comment="texlive-drawstack-2017.133.svn28582-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483789" comment="texlive-drm-2017.133.4.4svn38157-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483790" comment="texlive-drm-fonts-2017.133.4.4svn38157-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483791" comment="texlive-droid-2017.133.2.1svn23912-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483792" comment="texlive-droid-fonts-2017.133.2.1svn23912-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483793" comment="texlive-droit-fr-2017.133.1.2svn39802-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483794" comment="texlive-drs-2017.133.1.1bsvn19232-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483795" comment="texlive-drv-2017.133.0.0.97svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483796" comment="texlive-dsptricks-2017.133.1.0svn34724-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483797" comment="texlive-dtk-2017.133.2.07asvn44524-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483798" comment="texlive-dtl-2017.133.0.0.6.1svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483800" comment="texlive-dtxdescribe-2017.133.0.0.10svn42661-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483801" comment="texlive-dtxgallery-2017.133.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483802" comment="texlive-dtxgen-2017.133.1.07svn38419-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483804" comment="texlive-dtxtut-2017.133.2.1svn38375-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483805" comment="texlive-duerer-2017.133.svn20741-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483806" comment="texlive-duerer-latex-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483807" comment="texlive-duotenzor-2017.133.1.00svn18728-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483808" comment="texlive-dutchcal-2017.133.1.0svn23448-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483809" comment="texlive-dutchcal-fonts-2017.133.1.0svn23448-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483810" comment="texlive-dvdcoll-2017.133.1.1asvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483811" comment="texlive-dvgloss-2017.133.0.0.1svn29103-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483812" comment="texlive-dviasm-2017.133.svn36814-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483814" comment="texlive-dvicopy-2017.133.1.5svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483816" comment="texlive-dvidvi-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483818" comment="texlive-dviincl-2017.133.1.00svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483819" comment="texlive-dviinfox-2017.133.1.04svn44515-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483821" comment="texlive-dviljk-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483823" comment="texlive-dvipdfmx-2017.133.svn44224-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483825" comment="texlive-dvipng-2017.133.1.15svn44167-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483827" comment="texlive-dvipos-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483829" comment="texlive-dvips-2017.133.svn44167-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483831" comment="texlive-dvipsconfig-2017.133.1.6svn13293-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483832" comment="texlive-dvisvgm-2017.133.2.1.3svn40768-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483834" comment="texlive-dynamicnumber-2017.133.0.0.1.3svn38726-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483835" comment="texlive-dynblocks-2017.133.0.0.2bsvn35193-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483836" comment="texlive-dyntree-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483837" comment="texlive-e-french-2017.133.6.0svn38742-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483838" comment="texlive-ean-2017.133.svn20851-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483839" comment="texlive-ean13isbn-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483840" comment="texlive-easy-2017.133.0.0.99svn19440-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483841" comment="texlive-easy-todo-2017.133.svn32677-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483842" comment="texlive-easyfig-2017.133.1.2svn26424-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483843" comment="texlive-easyformat-2017.133.1.4.0svn44543-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483844" comment="texlive-easylist-2017.133.1.3svn32661-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483845" comment="texlive-easyreview-2017.133.1.0svn38352-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483846" comment="texlive-ebezier-2017.133.4svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483847" comment="texlive-ebgaramond-2017.133.0.0.16svn35662-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483848" comment="texlive-ebgaramond-fonts-2017.133.0.0.16svn35662-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483849" comment="texlive-ebgaramond-maths-2017.133.1.1svn35701-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483850" comment="texlive-ebong-2017.133.svn26313-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483852" comment="texlive-ebook-2017.133.svn29466-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483853" comment="texlive-ebproof-2017.133.2.0svn44392-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483854" comment="texlive-ebsthesis-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483855" comment="texlive-ec-2017.133.1.0svn25033-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483856" comment="texlive-ecc-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483857" comment="texlive-ecclesiastic-2017.133.0.0.3svn38172-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483858" comment="texlive-ecgdraw-2017.133.0.0.1svn41617-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483859" comment="texlive-ecltree-2017.133.1.1asvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483860" comment="texlive-eco-2017.133.1.3svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483861" comment="texlive-ecobiblatex-2017.133.1.0svn39233-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483862" comment="texlive-econometrics-2017.133.1.0svn39396-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483863" comment="texlive-economic-2017.133.svn32639-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483864" comment="texlive-ecv-2017.133.0.0.3svn24928-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483865" comment="texlive-ed-2017.133.1.8svn25231-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483866" comment="texlive-edfnotes-2017.133.0.0.6bsvn21540-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483867" comment="texlive-edmac-2017.133.3.17svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483868" comment="texlive-edmargin-2017.133.1.2svn27599-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483869" comment="texlive-ednotes-2017.133.1.3asvn35829-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483870" comment="texlive-eemeir-2017.133.1.1bsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483871" comment="texlive-eepic-2017.133.1.1esvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483872" comment="texlive-efbox-2017.133.1.0svn33236-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483873" comment="texlive-egameps-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483874" comment="texlive-egplot-2017.133.1.02asvn20617-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483875" comment="texlive-eiad-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483876" comment="texlive-eiad-ltx-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483877" comment="texlive-eijkhout-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483878" comment="texlive-einfuehrung-2017.133.svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483879" comment="texlive-einfuehrung2-2017.133.svn39153-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483880" comment="texlive-ejpecp-2017.133.1.5svn42003-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483881" comment="texlive-ekaia-2017.133.1.04svn42578-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483882" comment="texlive-elbioimp-2017.133.1.2svn21758-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483883" comment="texlive-electrum-2017.133.1.005_bsvn19705-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483884" comment="texlive-electrum-fonts-2017.133.1.005_bsvn19705-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483885" comment="texlive-eledform-2017.133.1.1asvn38114-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483886" comment="texlive-eledmac-2017.133.1.24.11svn38639-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483887" comment="texlive-elements-2017.133.0.0.2svn41161-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483888" comment="texlive-ellipse-2017.133.1.0svn39025-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483889" comment="texlive-ellipsis-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483890" comment="texlive-elmath-2017.133.1.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483891" comment="texlive-elocalloc-2017.133.0.0.03svn42712-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483892" comment="texlive-elpres-2017.133.0.0.3svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483893" comment="texlive-elsarticle-2017.133.1.20svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483894" comment="texlive-elteikthesis-2017.133.1.2svn22513-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483895" comment="texlive-eltex-2017.133.2.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483896" comment="texlive-elvish-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483897" comment="texlive-elzcards-2017.133.1.20svn37063-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483898" comment="texlive-emarks-2017.133.1.0svn24504-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483899" comment="texlive-embedall-2017.133.1.0svn31903-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483900" comment="texlive-embrac-2017.133.0.0.6dsvn39334-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483901" comment="texlive-emf-2017.133.1svn42023-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483902" comment="texlive-emisa-2017.133.2.1.1svn41731-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483903" comment="texlive-emp-2017.133.svn23483-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483904" comment="texlive-emptypage-2017.133.1.2svn18064-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483905" comment="texlive-emulateapj-2017.133.svn28469-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483906" comment="texlive-enctex-2017.133.svn34957-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483907" comment="texlive-encxvlna-2017.133.1.1svn34087-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483908" comment="texlive-endfloat-2017.133.2.5dsvn24962-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483909" comment="texlive-endheads-2017.133.1.6svn43750-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483910" comment="texlive-endiagram-2017.133.0.0.1dsvn34486-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483911" comment="texlive-endnotes-2017.133.svn17197-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483912" comment="texlive-engpron-2017.133.2svn16558-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483913" comment="texlive-engrec-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483914" comment="texlive-engtlc-2017.133.3.2svn28571-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483915" comment="texlive-enigma-2017.133.0.0.1svn29802-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483916" comment="texlive-enotez-2017.133.0.0.9asvn44024-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483917" comment="texlive-enumitem-2017.133.3.5.2svn24146-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483918" comment="texlive-enumitem-zref-2017.133.1.8svn21472-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483919" comment="texlive-envbig-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483920" comment="texlive-environ-2017.133.0.0.3svn33821-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483921" comment="texlive-envlab-2017.133.1.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483922" comment="texlive-epigrafica-2017.133.1.01svn17210-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483923" comment="texlive-epigrafica-fonts-2017.133.1.01svn17210-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483924" comment="texlive-epigram-2017.133.svn20513-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483925" comment="texlive-epigraph-2017.133.1.5csvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483926" comment="texlive-epiolmec-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483927" comment="texlive-epiolmec-fonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483928" comment="texlive-eplain-2017.133.3.8svn41154-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483930" comment="texlive-epsdice-2017.133.2.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483931" comment="texlive-epsf-2017.133.2.7.4svn21461-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483932" comment="texlive-epsf-dvipdfmx-2017.133.2014svn35575-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483933" comment="texlive-epsincl-2017.133.0.0.2svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483934" comment="texlive-epslatex-fr-2017.133.svn19440-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483935" comment="texlive-epspdf-2017.133.0.0.6.3svn40917-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483937" comment="texlive-epspdfconversion-2017.133.0.0.61svn18703-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483938" comment="texlive-epstopdf-2017.133.2.26svn42905-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483940" comment="texlive-eqell-2017.133.svn22931-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483941" comment="texlive-eqlist-2017.133.2.1svn32257-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483942" comment="texlive-eqnalign-2017.133.1.0asvn43278-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483943" comment="texlive-eqname-2017.133.svn20678-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483944" comment="texlive-eqnarray-2017.133.1.3svn20641-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483945" comment="texlive-eqparbox-2017.133.4.0svn29419-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483946" comment="texlive-erdc-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483947" comment="texlive-erewhon-2017.133.1.08svn43506-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483948" comment="texlive-erewhon-fonts-2017.133.1.08svn43506-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483949" comment="texlive-errata-2017.133.0.0.3svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483950" comment="texlive-es-tex-faq-2017.133.1.97svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483951" comment="texlive-esami-2017.133.2.1svn41774-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483952" comment="texlive-esdiff-2017.133.1.2svn21385-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483953" comment="texlive-esint-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483954" comment="texlive-esint-type1-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483955" comment="texlive-esint-type1-fonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483956" comment="texlive-esk-2017.133.1.0svn18115-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483957" comment="texlive-eskd-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483958" comment="texlive-eskdx-2017.133.0.0.98svn29235-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483959" comment="texlive-eso-pic-2017.133.2.0gsvn37925-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483960" comment="texlive-esrelation-2017.133.svn37236-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483961" comment="texlive-esrelation-fonts-2017.133.svn37236-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483962" comment="texlive-esstix-2017.133.1.0svn22426-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483963" comment="texlive-esstix-fonts-2017.133.1.0svn22426-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483964" comment="texlive-estcpmm-2017.133.0.0.4svn17335-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483965" comment="texlive-esvect-2017.133.1.3svn32098-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483966" comment="texlive-esvect-fonts-2017.133.1.3svn32098-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483967" comment="texlive-etaremune-2017.133.1.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483968" comment="texlive-etdipa-2017.133.2.6svn36354-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483969" comment="texlive-etex-2017.133.svn37057-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483970" comment="texlive-etex-pkg-2017.133.2.7svn41784-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483971" comment="texlive-etextools-2017.133.3.1415926svn20694-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483972" comment="texlive-ethiop-2017.133.0.0.7svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483973" comment="texlive-ethiop-t1-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483974" comment="texlive-ethiop-t1-fonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483975" comment="texlive-etoc-2017.133.1.08isvn42182-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483976" comment="texlive-etoolbox-2017.133.2.4svn42855-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483977" comment="texlive-etoolbox-de-2017.133.1svn21906-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483978" comment="texlive-euenc-2017.133.0.0.1hsvn19795-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483979" comment="texlive-eukdate-2017.133.1.04svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483980" comment="texlive-euler-2017.133.2.5svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483981" comment="texlive-eulerpx-2017.133.0.0.2.1svn43735-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483982" comment="texlive-eulervm-2017.133.4.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483983" comment="texlive-euro-2017.133.1.1svn22191-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483984" comment="texlive-euro-ce-2017.133.3.0bsvn25714-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483985" comment="texlive-europasscv-2017.133.svn43033-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483986" comment="texlive-europecv-2017.133.svn34454-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483987" comment="texlive-eurosym-2017.133.1.4_subrfixsvn17265-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483988" comment="texlive-eurosym-fonts-2017.133.1.4_subrfixsvn17265-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483989" comment="texlive-euxm-2017.133.svn20202-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483990" comment="texlive-everyhook-2017.133.1.2svn35675-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483991" comment="texlive-everypage-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483992" comment="texlive-exam-2017.133.2.5svn37279-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483993" comment="texlive-exam-n-2017.133.1.1.4svn42755-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483994" comment="texlive-examdesign-2017.133.1.101svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483995" comment="texlive-example-2017.133.svn33398-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483996" comment="texlive-examplep-2017.133.0.0.04svn16916-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483997" comment="texlive-exceltex-2017.133.0.0.5.1svn26313-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009483999" comment="texlive-excludeonly-2017.133.1.0svn17262-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484000" comment="texlive-exercise-2017.133.1.6svn35417-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484001" comment="texlive-exercises-2017.133.1.0svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484002" comment="texlive-exp-testopt-2017.133.0.0.3svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484003" comment="texlive-expdlist-2017.133.2.4svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484004" comment="texlive-expex-2017.133.5.1bsvn44499-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484005" comment="texlive-export-2017.133.1.8svn27206-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484006" comment="texlive-expressg-2017.133.1.5svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484007" comment="texlive-exsheets-2017.133.0.0.21isvn43188-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484008" comment="texlive-exsol-2017.133.1.2svn41377-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484009" comment="texlive-extarrows-2017.133.1.0bsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484010" comment="texlive-exteps-2017.133.0.0.41svn19859-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484011" comment="texlive-extpfeil-2017.133.0.0.4svn16243-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484012" comment="texlive-extract-2017.133.1.8svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484013" comment="texlive-extsizes-2017.133.1.4asvn17263-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484014" comment="texlive-facsimile-2017.133.1.0svn21328-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484015" comment="texlive-factura-2017.133.3.00svn43470-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484016" comment="texlive-facture-2017.133.1.2.2svn43865-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484017" comment="texlive-faktor-2017.133.0.0.1bsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484018" comment="texlive-fancybox-2017.133.1.4svn18304-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484019" comment="texlive-fancyhdr-2017.133.3.9svn44479-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484020" comment="texlive-fancyhdr-it-2017.133.svn21912-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484021" comment="texlive-fancylabel-2017.133.1.0svn34684-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484022" comment="texlive-fancynum-2017.133.0.0.92svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484023" comment="texlive-fancypar-2017.133.1.1svn18018-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484024" comment="texlive-fancyref-2017.133.0.0.9csvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484025" comment="texlive-fancyslides-2017.133.1.0svn36263-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484026" comment="texlive-fancytabs-2017.133.1.9svn41549-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484027" comment="texlive-fancytooltips-2017.133.1.8svn27129-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484028" comment="texlive-fancyvrb-2017.133.2.8svn18492-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484029" comment="texlive-fandol-2017.133.0.0.3svn37889-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484030" comment="texlive-fandol-fonts-2017.133.0.0.3svn37889-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484031" comment="texlive-fast-diagram-2017.133.1.1svn29264-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484032" comment="texlive-fbb-2017.133.1.12svn43464-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484033" comment="texlive-fbb-fonts-2017.133.1.12svn43464-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484034" comment="texlive-fbithesis-2017.133.1.2msvn21340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484035" comment="texlive-fbs-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484036" comment="texlive-fc-2017.133.1.4svn32796-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484037" comment="texlive-fcavtex-2017.133.1.1svn38074-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484038" comment="texlive-fcltxdoc-2017.133.1.0svn24500-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484039" comment="texlive-fcolumn-2017.133.1.1.1svn38489-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484040" comment="texlive-fdsymbol-2017.133.0.0.8svn26722-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484041" comment="texlive-fdsymbol-fonts-2017.133.0.0.8svn26722-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484042" comment="texlive-featpost-2017.133.0.0.8.8svn35346-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484043" comment="texlive-fei-2017.133.3.0.6svn43630-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484044" comment="texlive-fenixpar-2017.133.0.0.92svn24730-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484045" comment="texlive-fetamont-2017.133.svn43812-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484046" comment="texlive-fetamont-fonts-2017.133.svn43812-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484047" comment="texlive-feupphdteses-2017.133.4.0svn30962-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484048" comment="texlive-feyn-2017.133.0.0.3.3svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484049" comment="texlive-feynmf-2017.133.1.08svn17259-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484050" comment="texlive-feynmp-auto-2017.133.1.1svn30223-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484051" comment="texlive-ffslides-2017.133.svn38895-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484052" comment="texlive-fge-2017.133.1.25svn37628-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484053" comment="texlive-fge-fonts-2017.133.1.25svn37628-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484054" comment="texlive-fgruler-2017.133.1.0svn42966-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484055" comment="texlive-fibeamer-2017.133.1.1.7svn44239-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484056" comment="texlive-fifinddo-info-2017.133.1.1bsvn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484057" comment="texlive-fifo-stack-2017.133.1.0svn33288-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484058" comment="texlive-fig4latex-2017.133.0.0.2svn26313-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484060" comment="texlive-figbas-2017.133.1.0.3svn28943-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484061" comment="texlive-figbas-fonts-2017.133.1.0.3svn28943-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484062" comment="texlive-figbib-2017.133.svn19388-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484063" comment="texlive-figflow-2017.133.svn21462-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484064" comment="texlive-figsize-2017.133.0.0.1svn18784-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484065" comment="texlive-filecontents-2017.133.1.3svn24250-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484066" comment="texlive-filecontentsdef-2017.133.1.2svn42107-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484067" comment="texlive-filedate-2017.133.svn29529-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484068" comment="texlive-filehook-2017.133.0.0.5dsvn24280-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484069" comment="texlive-fileinfo-2017.133.0.0.81asvn28421-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484070" comment="texlive-filemod-2017.133.1.2svn24042-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484071" comment="texlive-finbib-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484072" comment="texlive-findhyph-2017.133.3.4svn38674-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484074" comment="texlive-fink-2017.133.2.2.1svn24329-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484075" comment="texlive-finstrut-2017.133.0.0.5svn21719-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484076" comment="texlive-fira-2017.133.4.2svn42501-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484077" comment="texlive-fira-fonts-2017.133.4.2svn42501-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484078" comment="texlive-first-latex-doc-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484079" comment="texlive-fitbox-2017.133.1.00svn38139-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484080" comment="texlive-fithesis-2017.133.0.0.3.46svn44472-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484081" comment="texlive-fix2col-2017.133.0.0.04svn38770-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484082" comment="texlive-fixcmex-2017.133.1.0svn38816-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484083" comment="texlive-fixfoot-2017.133.0.0.3asvn17131-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484084" comment="texlive-fixlatvian-2017.133.1asvn21631-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484085" comment="texlive-fixltxhyph-2017.133.0.0.4svn25832-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484086" comment="texlive-fixme-2017.133.4.4svn43413-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484087" comment="texlive-fixmetodonotes-2017.133.0.0.2.2svn30168-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484088" comment="texlive-fixpdfmag-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484089" comment="texlive-fjodor-2017.133.svn20220-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484090" comment="texlive-flabels-2017.133.1.0svn17272-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484091" comment="texlive-flacards-2017.133.0.0.1.1bsvn19440-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484092" comment="texlive-flagderiv-2017.133.0.0.10svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484093" comment="texlive-flashcards-2017.133.1.0.1svn19667-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484094" comment="texlive-flashmovie-2017.133.0.0.4svn25768-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484095" comment="texlive-flipbook-2017.133.0.0.2svn25584-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484096" comment="texlive-flippdf-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484097" comment="texlive-float-2017.133.1.3dsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484098" comment="texlive-floatrow-2017.133.0.0.3bsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484099" comment="texlive-flowchart-2017.133.3.3svn36572-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484100" comment="texlive-flowfram-2017.133.1.17svn35291-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484101" comment="texlive-fltpoint-2017.133.1.1bsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484102" comment="texlive-fmp-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484103" comment="texlive-fmtcount-2017.133.3.01svn37298-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484104" comment="texlive-fn2end-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484105" comment="texlive-fnbreak-2017.133.1.30svn25003-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484106" comment="texlive-fncychap-2017.133.1.34svn20710-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484107" comment="texlive-fncylab-2017.133.1.0svn17382-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484108" comment="texlive-fnpara-2017.133.svn25607-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484109" comment="texlive-fnpct-2017.133.0.0.4esvn40535-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484110" comment="texlive-fnspe-2017.133.1.1bsvn43380-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484111" comment="texlive-fntproof-2017.133.svn20638-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484112" comment="texlive-fnumprint-2017.133.1.1asvn29173-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484113" comment="texlive-foekfont-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484114" comment="texlive-foekfont-fonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484115" comment="texlive-foilhtml-2017.133.1.2svn21855-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484116" comment="texlive-fonetika-2017.133.svn21326-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484117" comment="texlive-fonetika-fonts-2017.133.svn21326-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484118" comment="texlive-font-change-2017.133.2015.2svn40403-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484119" comment="texlive-font-change-xetex-2017.133.2016.1svn40404-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484120" comment="texlive-fontawesome-2017.133.4.6.3.2svn41412-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484121" comment="texlive-fontawesome-fonts-2017.133.4.6.3.2svn41412-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484122" comment="texlive-fontaxes-2017.133.1.0dsvn33276-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484123" comment="texlive-fontbook-2017.133.0.0.2svn23608-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484124" comment="texlive-fontch-2017.133.2.2svn17859-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484125" comment="texlive-fontinst-2017.133.1.933svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484127" comment="texlive-fontmfizz-2017.133.svn43546-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484128" comment="texlive-fontmfizz-fonts-2017.133.svn43546-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484129" comment="texlive-fontname-2017.133.svn38345-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484130" comment="texlive-fontools-2017.133.svn43573-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484132" comment="texlive-fonts-churchslavonic-2017.133.1.1svn43121-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484133" comment="texlive-fonts-churchslavonic-fonts-2017.133.1.1svn43121-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484134" comment="texlive-fonts-tlwg-2017.133.0.0.6.3svn41366-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484135" comment="texlive-fonts-tlwg-fonts-2017.133.0.0.6.3svn41366-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484136" comment="texlive-fontspec-2017.133.2.6asvn43661-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484137" comment="texlive-fonttable-2017.133.1.6bsvn21399-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484138" comment="texlive-fontware-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484140" comment="texlive-fontwrap-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484141" comment="texlive-footbib-2017.133.2.0.7svn17115-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484142" comment="texlive-footmisc-2017.133.5.5bsvn23330-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484143" comment="texlive-footmisx-2017.133.20161201svn42621-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484144" comment="texlive-footnotebackref-2017.133.1.0svn27034-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484145" comment="texlive-footnotehyper-2017.133.1.0svn43424-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484146" comment="texlive-footnoterange-2017.133.1.0asvn25430-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484147" comment="texlive-footnpag-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484148" comment="texlive-forarray-2017.133.1.01svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484149" comment="texlive-foreign-2017.133.2.7svn27819-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484150" comment="texlive-forest-2017.133.2.1.4svn43129-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484151" comment="texlive-forest-quickstart-2017.133.svn42503-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484152" comment="texlive-forloop-2017.133.3.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484153" comment="texlive-formation-latex-ul-2017.133.2016.11_3svn43005-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484154" comment="texlive-formlett-2017.133.2.3svn21480-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484155" comment="texlive-formular-2017.133.1.0asvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484156" comment="texlive-fouridx-2017.133.2.00svn32214-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484157" comment="texlive-fourier-2017.133.1.3svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484158" comment="texlive-fourier-fonts-2017.133.1.3svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484159" comment="texlive-fouriernc-2017.133.svn29646-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484160" comment="texlive-fp-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484161" comment="texlive-fpl-2017.133.1.002svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484162" comment="texlive-fpl-fonts-2017.133.1.002svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484163" comment="texlive-fragmaster-2017.133.1.6svn26313-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484165" comment="texlive-fragments-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484166" comment="texlive-frame-2017.133.1.0svn18312-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484167" comment="texlive-framed-2017.133.0.0.96svn26789-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484168" comment="texlive-francais-bst-2017.133.1.1svn38922-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484169" comment="texlive-frankenstein-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484170" comment="texlive-frcursive-2017.133.svn24559-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484171" comment="texlive-frcursive-fonts-2017.133.svn24559-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484172" comment="texlive-frederika2016-2017.133.1.000_2016_initial_releasesvn42157-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484173" comment="texlive-frederika2016-fonts-2017.133.1.000_2016_initial_releasesvn42157-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484174" comment="texlive-frege-2017.133.1.3svn27417-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484175" comment="texlive-frletter-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484176" comment="texlive-frontespizio-2017.133.1.4asvn24054-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484177" comment="texlive-ftcap-2017.133.1.4svn17275-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484178" comment="texlive-ftnxtra-2017.133.0.0.1svn29652-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484179" comment="texlive-fullblck-2017.133.1.03svn25434-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484180" comment="texlive-fullminipage-2017.133.0.0.1.1svn34545-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484181" comment="texlive-fullwidth-2017.133.0.0.1svn24684-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484182" comment="texlive-functan-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484183" comment="texlive-fundus-calligra-2017.133.1.2svn26018-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484184" comment="texlive-fundus-cyr-2017.133.svn26019-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484185" comment="texlive-fundus-sueterlin-2017.133.1.2svn26030-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484186" comment="texlive-fvextra-2017.133.1.2.1svn41984-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484187" comment="texlive-fwlw-2017.133.svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484188" comment="texlive-g-brief-2017.133.4.0.2svn21140-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484189" comment="texlive-gaceta-2017.133.1.06svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484190" comment="texlive-galois-2017.133.1.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484191" comment="texlive-gamebook-2017.133.1.0svn24714-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484192" comment="texlive-garrigues-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484193" comment="texlive-garuda-c90-2017.133.svn37677-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484194" comment="texlive-gastex-2017.133.2.8svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484195" comment="texlive-gatech-thesis-2017.133.1.8svn19886-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484196" comment="texlive-gates-2017.133.0.0.2svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484197" comment="texlive-gauss-2017.133.svn32934-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484198" comment="texlive-gb4e-2017.133.svn19216-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484199" comment="texlive-gcard-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484200" comment="texlive-gchords-2017.133.1.20svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484201" comment="texlive-gcite-2017.133.1.0.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484202" comment="texlive-gender-2017.133.1.0svn36464-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484203" comment="texlive-gene-logic-2017.133.1.4svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484204" comment="texlive-genealogy-2017.133.svn25112-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484205" comment="texlive-genealogytree-2017.133.1.10svn43086-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484206" comment="texlive-genmisc-2017.133.svn27208-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484207" comment="texlive-genmpage-2017.133.0.0.3.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484208" comment="texlive-gentium-tug-2017.133.1.1svn37378-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484209" comment="texlive-gentium-tug-fonts-2017.133.1.1svn37378-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484210" comment="texlive-gentle-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484211" comment="texlive-geometry-2017.133.5.6svn19716-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484212" comment="texlive-geometry-de-2017.133.1.1svn21882-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484213" comment="texlive-german-2017.133.2.5esvn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484214" comment="texlive-germbib-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484215" comment="texlive-germkorr-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484216" comment="texlive-geschichtsfrkl-2017.133.1.4svn42121-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484217" comment="texlive-getfiledate-2017.133.1.2svn16189-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484218" comment="texlive-getitems-2017.133.1.0svn39365-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484219" comment="texlive-getmap-2017.133.1.9svn41503-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484221" comment="texlive-getoptk-2017.133.1.0svn23567-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484222" comment="texlive-gfnotation-2017.133.2.9svn37156-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484223" comment="texlive-gfsartemisia-2017.133.1.0svn19469-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484224" comment="texlive-gfsartemisia-fonts-2017.133.1.0svn19469-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484225" comment="texlive-gfsbaskerville-2017.133.1.0svn19440-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484226" comment="texlive-gfsbaskerville-fonts-2017.133.1.0svn19440-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484227" comment="texlive-gfsbodoni-2017.133.1.01svn28484-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484228" comment="texlive-gfsbodoni-fonts-2017.133.1.01svn28484-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484229" comment="texlive-gfscomplutum-2017.133.1.0svn19469-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484230" comment="texlive-gfscomplutum-fonts-2017.133.1.0svn19469-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484231" comment="texlive-gfsdidot-2017.133.svn31978-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484232" comment="texlive-gfsdidot-fonts-2017.133.svn31978-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484233" comment="texlive-gfsneohellenic-2017.133.svn31979-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484234" comment="texlive-gfsneohellenic-fonts-2017.133.svn31979-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484235" comment="texlive-gfsporson-2017.133.1.01svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484236" comment="texlive-gfsporson-fonts-2017.133.1.01svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484237" comment="texlive-gfssolomos-2017.133.1.0svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484238" comment="texlive-gfssolomos-fonts-2017.133.1.0svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484239" comment="texlive-ghab-2017.133.0.0.5svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484240" comment="texlive-ghsystem-2017.133.4.8svn41714-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484241" comment="texlive-gillcm-2017.133.1.1svn19878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484242" comment="texlive-gillius-2017.133.svn32068-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484243" comment="texlive-gillius-fonts-2017.133.svn32068-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484244" comment="texlive-gincltex-2017.133.0.0.3svn23835-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484245" comment="texlive-ginpenc-2017.133.1.0svn24980-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484246" comment="texlive-gitfile-info-2017.133.0.0.3svn41693-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484247" comment="texlive-gitinfo-2017.133.1.0svn34049-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484248" comment="texlive-gitinfo2-2017.133.2.0.7svn38913-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484249" comment="texlive-gitlog-2017.133.0.0.0.betasvn38932-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484250" comment="texlive-gloss-2017.133.1.5.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484251" comment="texlive-gloss-occitan-2017.133.0.0.1svn39609-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484252" comment="texlive-glossaries-2017.133.4.30svn44564-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484254" comment="texlive-glossaries-danish-2017.133.1.0svn35665-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484255" comment="texlive-glossaries-dutch-2017.133.1.1svn35685-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484256" comment="texlive-glossaries-english-2017.133.1.0svn35665-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484257" comment="texlive-glossaries-extra-2017.133.1.15svn44284-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484258" comment="texlive-glossaries-french-2017.133.1.1svn42873-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484259" comment="texlive-glossaries-german-2017.133.1.0svn35665-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484260" comment="texlive-glossaries-irish-2017.133.1.0svn35665-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484261" comment="texlive-glossaries-italian-2017.133.1.0svn35665-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484262" comment="texlive-glossaries-magyar-2017.133.1.0svn35665-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484263" comment="texlive-glossaries-polish-2017.133.1.0svn35665-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484264" comment="texlive-glossaries-portuges-2017.133.1.1svn36064-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484265" comment="texlive-glossaries-serbian-2017.133.1.0svn35665-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484266" comment="texlive-glossaries-spanish-2017.133.1.0svn35665-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484267" comment="texlive-glyphlist-2017.133.svn41545-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484268" comment="texlive-gmdoc-2017.133.0.0.993svn21292-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484269" comment="texlive-gmdoc-enhance-2017.133.0.0.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484270" comment="texlive-gmiflink-2017.133.0.0.97svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484271" comment="texlive-gmp-2017.133.1.0svn21691-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484272" comment="texlive-gmutils-2017.133.0.0.996svn24287-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484273" comment="texlive-gmverb-2017.133.0.0.98svn24288-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484274" comment="texlive-gmverse-2017.133.0.0.73svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484275" comment="texlive-gnu-freefont-2017.133.svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484276" comment="texlive-gnu-freefont-fonts-2017.133.svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484277" comment="texlive-gnuplottex-2017.133.0.0.9.2svn41904-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484278" comment="texlive-go-2017.133.svn28628-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484279" comment="texlive-gobble-2017.133.0.0.1svn40936-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484280" comment="texlive-gofonts-2017.133.svn43726-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484281" comment="texlive-gofonts-fonts-2017.133.svn43726-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484282" comment="texlive-gost-2017.133.1.2isvn44131-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484283" comment="texlive-gothic-2017.133.svn38263-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484284" comment="texlive-gotoh-2017.133.1.0svn44211-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484285" comment="texlive-gradientframe-2017.133.0.0.2svn21387-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484286" comment="texlive-gradstudentresume-2017.133.svn38832-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484287" comment="texlive-grafcet-2017.133.1.3.5svn22509-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484288" comment="texlive-grant-2017.133.0.0.0.3svn41905-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484289" comment="texlive-graphbox-2017.133.1.0svn35075-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484290" comment="texlive-graphics-2017.133.svn43813-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484291" comment="texlive-graphics-cfg-2017.133.svn41448-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484292" comment="texlive-graphics-def-2017.133.svn43025-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484293" comment="texlive-graphics-pln-2017.133.svn44567-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484294" comment="texlive-graphicx-psmin-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484295" comment="texlive-graphicxbox-2017.133.1.0svn32630-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484296" comment="texlive-graphviz-2017.133.0.0.94svn31517-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484297" comment="texlive-grayhints-2017.133.svn43561-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484298" comment="texlive-greek-fontenc-2017.133.0.0.13.2svn39606-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484299" comment="texlive-greek-inputenc-2017.133.1.6svn40613-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484300" comment="texlive-greekdates-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484301" comment="texlive-greektex-2017.133.svn28327-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484302" comment="texlive-greektonoi-2017.133.svn39419-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484303" comment="texlive-greenpoint-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484304" comment="texlive-gregoriotex-2017.133.5.0.2svn44502-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484306" comment="texlive-gregoriotex-fonts-2017.133.5.0.2svn44502-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484307" comment="texlive-grfpaste-2017.133.0.0.2svn17354-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484308" comment="texlive-grid-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484309" comment="texlive-grid-system-2017.133.0.0.3.0svn32981-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484310" comment="texlive-gridset-2017.133.0.0.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484311" comment="texlive-grotesq-2017.133.svn35859-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484312" comment="texlive-grotesq-fonts-2017.133.svn35859-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484313" comment="texlive-grundgesetze-2017.133.1.02svn34439-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484314" comment="texlive-gsemthesis-2017.133.0.0.9.4svn36244-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484315" comment="texlive-gsftopk-2017.133.1.19.2svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484317" comment="texlive-gtl-2017.133.0.0.2svn38503-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484318" comment="texlive-gtrcrd-2017.133.1.1svn32484-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484319" comment="texlive-gtrlib-largetrees-2017.133.svn43279-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484320" comment="texlive-gu-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484321" comment="texlive-guide-to-latex-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484322" comment="texlive-guitar-2017.133.1.6svn32258-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484323" comment="texlive-guitarchordschemes-2017.133.0.0.7svn41880-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484324" comment="texlive-guitlogo-2017.133.0.0.9.2svn27458-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484325" comment="texlive-gustlib-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484326" comment="texlive-gustprog-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484327" comment="texlive-gzt-2017.133.0.0.97svn43254-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484328" comment="texlive-h2020proposal-2017.133.1.0svn38428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484329" comment="texlive-hacm-2017.133.0.0.1svn27671-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484330" comment="texlive-hacm-fonts-2017.133.0.0.1svn27671-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484331" comment="texlive-halloweenmath-2017.133.0.0.10asvn44043-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484332" comment="texlive-handout-2017.133.1.6.0svn43962-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484333" comment="texlive-hands-2017.133.svn13293-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484334" comment="texlive-hang-2017.133.2.1svn43280-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484335" comment="texlive-hanging-2017.133.1.2bsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484336" comment="texlive-hanoi-2017.133.20120101svn25019-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484337" comment="texlive-happy4th-2017.133.20120102svn25020-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484338" comment="texlive-har2nat-2017.133.1.0svn17356-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484339" comment="texlive-hardwrap-2017.133.0.0.2svn21396-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484340" comment="texlive-harmony-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484341" comment="texlive-harnon-cv-2017.133.1.0svn26543-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484342" comment="texlive-harpoon-2017.133.1.0svn21327-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484343" comment="texlive-harvard-2017.133.2.0.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484344" comment="texlive-harveyballs-2017.133.1.1svn32003-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484345" comment="texlive-harvmac-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484346" comment="texlive-hatching-2017.133.0.0.11svn23818-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484347" comment="texlive-hausarbeit-jura-2017.133.1.5svn42054-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484348" comment="texlive-havannah-2017.133.svn36348-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484349" comment="texlive-hc-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484350" comment="texlive-he-she-2017.133.1.3svn41359-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484351" comment="texlive-helvetic-2017.133.svn31835-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484352" comment="texlive-helvetic-fonts-2017.133.svn31835-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484353" comment="texlive-hep-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484354" comment="texlive-hepnames-2017.133.2.0svn35722-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484355" comment="texlive-hepparticles-2017.133.2.0svn35723-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484356" comment="texlive-hepthesis-2017.133.1.5.0svn35720-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484357" comment="texlive-hepunits-2017.133.1.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484358" comment="texlive-here-2017.133.svn16135-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484359" comment="texlive-heuristica-2017.133.1.09svn43507-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484360" comment="texlive-heuristica-fonts-2017.133.1.09svn43507-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484361" comment="texlive-hexgame-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484362" comment="texlive-hf-tikz-2017.133.0.0.3asvn34733-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484363" comment="texlive-hfbright-2017.133.svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484364" comment="texlive-hfbright-fonts-2017.133.svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484365" comment="texlive-hfoldsty-2017.133.1.15svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484366" comment="texlive-hhtensor-2017.133.0.0.61svn24981-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484367" comment="texlive-histogr-2017.133.1.01svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484368" comment="texlive-historische-zeitschrift-2017.133.1.2svn42635-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484369" comment="texlive-hitec-2017.133.0.0.0betasvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484370" comment="texlive-hletter-2017.133.4.2svn30002-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484371" comment="texlive-hlist-2017.133.0.0.1svn44158-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484372" comment="texlive-hobby-2017.133.1.8svn44474-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484373" comment="texlive-hobete-2017.133.svn27036-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484374" comment="texlive-hook-pre-commit-pkg-2017.133.1.1.2svn41378-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484375" comment="texlive-horoscop-2017.133.0.0.92svn30530-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484376" comment="texlive-hpsdiss-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484377" comment="texlive-hrefhide-2017.133.1.0fsvn22255-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484378" comment="texlive-hrlatex-2017.133.0.0.23svn18020-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484379" comment="texlive-hustthesis-2017.133.1.4svn42547-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484380" comment="texlive-hvfloat-2017.133.1.2svn43732-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484381" comment="texlive-hvindex-2017.133.0.0.02svn16136-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484382" comment="texlive-hypdvips-2017.133.3.02svn34364-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484383" comment="texlive-hyper-2017.133.4.2dsvn17357-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484384" comment="texlive-hypernat-2017.133.1.0bsvn17358-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484385" comment="texlive-hyperref-2017.133.6.85asvn43547-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484386" comment="texlive-hyperref-docsrc-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484387" comment="texlive-hyperxmp-2017.133.3.2svn43316-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484388" comment="texlive-hyph-utf8-2017.133.svn44401-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484389" comment="texlive-hyphen-afrikaans-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484390" comment="texlive-hyphen-ancientgreek-2017.133.svn41189-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484391" comment="texlive-hyphen-arabic-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484392" comment="texlive-hyphen-armenian-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484393" comment="texlive-hyphen-base-2017.133.svn44419-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484394" comment="texlive-hyphen-basque-2017.133.svn41113-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484395" comment="texlive-hyphen-belarusian-2017.133.svn44401-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484396" comment="texlive-hyphen-bulgarian-2017.133.svn41113-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484397" comment="texlive-hyphen-catalan-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484398" comment="texlive-hyphen-chinese-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484399" comment="texlive-hyphen-churchslavonic-2017.133.svn44401-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484400" comment="texlive-hyphen-coptic-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484401" comment="texlive-hyphen-croatian-2017.133.svn41113-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484402" comment="texlive-hyphen-czech-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484403" comment="texlive-hyphen-danish-2017.133.svn41113-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484404" comment="texlive-hyphen-dutch-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484405" comment="texlive-hyphen-english-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484406" comment="texlive-hyphen-esperanto-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484407" comment="texlive-hyphen-estonian-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484408" comment="texlive-hyphen-ethiopic-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484409" comment="texlive-hyphen-farsi-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484410" comment="texlive-hyphen-finnish-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484411" comment="texlive-hyphen-french-2017.133.svn41113-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484412" comment="texlive-hyphen-friulan-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484413" comment="texlive-hyphen-galician-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484414" comment="texlive-hyphen-georgian-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484415" comment="texlive-hyphen-german-2017.133.svn44401-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484416" comment="texlive-hyphen-greek-2017.133.5svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484417" comment="texlive-hyphen-hungarian-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484418" comment="texlive-hyphen-icelandic-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484419" comment="texlive-hyphen-indic-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484420" comment="texlive-hyphen-indonesian-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484421" comment="texlive-hyphen-interlingua-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484422" comment="texlive-hyphen-irish-2017.133.svn41113-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484423" comment="texlive-hyphen-italian-2017.133.4.8gsvn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484424" comment="texlive-hyphen-kurmanji-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484425" comment="texlive-hyphen-latin-2017.133.3.1svn44401-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484426" comment="texlive-hyphen-latvian-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484427" comment="texlive-hyphen-lithuanian-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484428" comment="texlive-hyphen-mongolian-2017.133.svn41113-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484429" comment="texlive-hyphen-norwegian-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484430" comment="texlive-hyphen-occitan-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484431" comment="texlive-hyphen-piedmontese-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484432" comment="texlive-hyphen-polish-2017.133.3.0asvn41113-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484433" comment="texlive-hyphen-portuguese-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484434" comment="texlive-hyphen-romanian-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484435" comment="texlive-hyphen-romansh-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484436" comment="texlive-hyphen-russian-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484437" comment="texlive-hyphen-sanskrit-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484438" comment="texlive-hyphen-serbian-2017.133.1.0asvn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484439" comment="texlive-hyphen-slovak-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484440" comment="texlive-hyphen-slovenian-2017.133.svn41113-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484441" comment="texlive-hyphen-spanish-2017.133.4.5svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484442" comment="texlive-hyphen-swedish-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484443" comment="texlive-hyphen-thai-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484444" comment="texlive-hyphen-turkish-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484445" comment="texlive-hyphen-turkmen-2017.133.svn41113-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484446" comment="texlive-hyphen-ukrainian-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484447" comment="texlive-hyphen-uppersorbian-2017.133.svn40340-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484448" comment="texlive-hyphen-welsh-2017.133.svn41113-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484449" comment="texlive-hyphenat-2017.133.2.3csvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484450" comment="texlive-hyphenex-2017.133.svn37354-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484451" comment="texlive-hyplain-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484452" comment="texlive-ibycus-babel-2017.133.3.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484453" comment="texlive-ibygrk-2017.133.4.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484454" comment="texlive-ibygrk-fonts-2017.133.4.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484455" comment="texlive-icsv-2017.133.0.0.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484456" comment="texlive-idxcmds-2017.133.0.0.2csvn38115-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484457" comment="texlive-idxlayout-2017.133.0.0.4dsvn25821-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484458" comment="texlive-ieeepes-2017.133.4.0svn17359-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484459" comment="texlive-ietfbibs-2017.133.1.0.0svn41332-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484460" comment="texlive-ifetex-2017.133.1.2svn24853-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484461" comment="texlive-iffont-2017.133.1.0.0svn38823-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484462" comment="texlive-ifluatex-2017.133.1.4svn43610-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484463" comment="texlive-ifmslide-2017.133.0.0.47svn20727-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484464" comment="texlive-ifmtarg-2017.133.1.2asvn19363-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484465" comment="texlive-ifnextok-2017.133.0.0.3svn23379-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484466" comment="texlive-ifoddpage-2017.133.1.1svn40726-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484467" comment="texlive-ifplatform-2017.133.0.0.4svn21156-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484468" comment="texlive-ifptex-2017.133.1.1svn44194-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484469" comment="texlive-ifsym-2017.133.svn24868-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484470" comment="texlive-iftex-2017.133.0.0.2svn29654-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484471" comment="texlive-ifthenx-2017.133.0.0.1asvn25819-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484472" comment="texlive-ifxetex-2017.133.0.0.6svn19685-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484473" comment="texlive-iitem-2017.133.1.0svn29613-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484474" comment="texlive-ijmart-2017.133.1.7svn30958-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484475" comment="texlive-ijqc-2017.133.1.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484476" comment="texlive-ijsra-2017.133.1.0svn44551-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484477" comment="texlive-imac-2017.133.svn17347-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484478" comment="texlive-image-gallery-2017.133.1.0jsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484479" comment="texlive-imakeidx-2017.133.1.3esvn42287-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484480" comment="texlive-imfellenglish-2017.133.svn38547-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484481" comment="texlive-imfellenglish-fonts-2017.133.svn38547-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484482" comment="texlive-impatient-2017.133.svn35573-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484483" comment="texlive-impatient-cn-2017.133.svn35576-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484484" comment="texlive-impatient-fr-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484485" comment="texlive-impnattypo-2017.133.1.4svn36448-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484486" comment="texlive-import-2017.133.5.1svn17361-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484487" comment="texlive-imsproc-2017.133.0.0.1svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484488" comment="texlive-imtekda-2017.133.1.7svn17667-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484489" comment="texlive-incgraph-2017.133.1.12svn36500-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484490" comment="texlive-inconsolata-2017.133.1.112svn42871-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484491" comment="texlive-inconsolata-fonts-2017.133.1.112svn42871-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484492" comment="texlive-index-2017.133.4.1betasvn24099-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484493" comment="texlive-indextools-2017.133.1.5.1svn38931-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484494" comment="texlive-initials-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484495" comment="texlive-initials-fonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484496" comment="texlive-inlinebib-2017.133.svn22018-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484497" comment="texlive-inlinedef-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484498" comment="texlive-inputtrc-2017.133.0.0.3svn28019-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484499" comment="texlive-insbox-2017.133.2.2svn34299-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484500" comment="texlive-interactiveworkbook-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484501" comment="texlive-interchar-2017.133.0.0.2svn36312-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484502" comment="texlive-interfaces-2017.133.3.1svn21474-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484503" comment="texlive-interpreter-2017.133.1.2svn27232-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484504" comment="texlive-interval-2017.133.0.0.3svn34840-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484505" comment="texlive-intro-scientific-2017.133.5th_editionsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484506" comment="texlive-inversepath-2017.133.0.0.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484507" comment="texlive-invoice-2017.133.svn39397-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484508" comment="texlive-ionumbers-2017.133.0.0.3.3svn33457-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484509" comment="texlive-iopart-num-2017.133.2.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484510" comment="texlive-ipaex-2017.133.svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484511" comment="texlive-ipaex-fonts-2017.133.svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484512" comment="texlive-ipaex-type1-2017.133.0.0.4asvn42403-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484513" comment="texlive-ipaex-type1-fonts-2017.133.0.0.4asvn42403-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484514" comment="texlive-iscram-2017.133.1.0.2svn42604-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484515" comment="texlive-iso-2017.133.2.4svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484516" comment="texlive-iso10303-2017.133.1.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484517" comment="texlive-isodate-2017.133.2.28svn16613-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484518" comment="texlive-isodoc-2017.133.1.09svn39520-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484519" comment="texlive-isomath-2017.133.0.0.6.1svn27654-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484520" comment="texlive-isonums-2017.133.1.0svn17362-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484521" comment="texlive-isorot-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484522" comment="texlive-isotope-2017.133.0.0.3svn23711-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484523" comment="texlive-issuulinks-2017.133.1.1svn25742-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484524" comment="texlive-itnumpar-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484525" comment="texlive-iwhdp-2017.133.0.0.50svn37552-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484526" comment="texlive-iwona-2017.133.0.0.995bsvn19611-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484527" comment="texlive-iwona-fonts-2017.133.0.0.995bsvn19611-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484528" comment="texlive-jablantile-2017.133.svn16364-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484529" comment="texlive-jacow-2017.133.1.95svn40523-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484530" comment="texlive-jadetex-2017.133.3.13svn41718-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484532" comment="texlive-jamtimes-2017.133.1.12svn20408-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484533" comment="texlive-japanese-otf-2017.133.1.7b6svn42950-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484534" comment="texlive-japanese-otf-uptex-2017.133.0.0.18svn43395-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484535" comment="texlive-jknapltx-2017.133.svn19440-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484536" comment="texlive-jlabels-2017.133.svn24858-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484537" comment="texlive-jlreq-2017.133.svn44563-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484538" comment="texlive-jmlr-2017.133.1.23svn43458-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484539" comment="texlive-jmn-2017.133.svn22719-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484540" comment="texlive-jmn-fonts-2017.133.svn22719-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484541" comment="texlive-jneurosci-2017.133.1.00svn17346-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484542" comment="texlive-jpsj-2017.133.1.2.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484543" comment="texlive-js-misc-2017.133.svn16211-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484544" comment="texlive-jsclasses-2017.133.svn43403-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484545" comment="texlive-jslectureplanner-2017.133.1.5svn43476-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484546" comment="texlive-jumplines-2017.133.0.0.2svn37553-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484547" comment="texlive-junicode-2017.133.0.0.7.7svn28286-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484548" comment="texlive-junicode-fonts-2017.133.0.0.7.7svn28286-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484549" comment="texlive-jura-2017.133.4.3svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484550" comment="texlive-juraabbrev-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484551" comment="texlive-jurabib-2017.133.0.0.6svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484552" comment="texlive-juramisc-2017.133.0.0.91svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484553" comment="texlive-jurarsp-2017.133.0.0.52svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484554" comment="texlive-jvlisting-2017.133.0.0.7svn24638-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484555" comment="texlive-kantlipsum-2017.133.0.0.6svn27994-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484556" comment="texlive-karnaugh-2017.133.svn21338-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484557" comment="texlive-karnaugh-map-2017.133.1.1svn44131-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484558" comment="texlive-karnaughmap-2017.133.2.0svn36989-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484559" comment="texlive-kastrup-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484560" comment="texlive-kdgdocs-2017.133.1.0svn24498-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484561" comment="texlive-kerkis-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484562" comment="texlive-kerkis-fonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484563" comment="texlive-kerntest-2017.133.1.32svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484564" comment="texlive-keycommand-2017.133.3.1415svn18042-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484565" comment="texlive-keyfloat-2017.133.0.0.15svn44306-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484566" comment="texlive-keyreader-2017.133.0.0.5bsvn28195-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484567" comment="texlive-keystroke-2017.133.1.6svn17992-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484568" comment="texlive-keyval2e-2017.133.0.0.0.2svn23698-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484569" comment="texlive-keyvaltable-2017.133.0.0.2svn41414-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484570" comment="texlive-kix-2017.133.svn21606-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484571" comment="texlive-kixfont-2017.133.svn18488-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484572" comment="texlive-kluwer-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484573" comment="texlive-knitting-2017.133.2.0svn19595-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484574" comment="texlive-knitting-fonts-2017.133.2.0svn19595-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484575" comment="texlive-knittingpattern-2017.133.svn17205-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484576" comment="texlive-knowledge-2017.133.1.01svn44565-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484577" comment="texlive-knuth-2017.133.svn32899-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484578" comment="texlive-knuth-lib-2017.133.svn35820-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484579" comment="texlive-knuth-local-2017.133.svn38627-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484580" comment="texlive-knuthotherfonts-2017.133.svn13293-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484581" comment="texlive-koma-moderncvclassic-2017.133.0.0.5svn25025-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484582" comment="texlive-koma-script-2017.133.3.23svn44226-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484583" comment="texlive-koma-script-examples-2017.133.svn34243-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484584" comment="texlive-koma-script-sfs-2017.133.1.0svn26137-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484585" comment="texlive-komacv-2017.133.1.1.1svn43902-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484586" comment="texlive-kotex-oblivoir-2017.133.2.1.8svn43130-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484587" comment="texlive-kotex-plain-2017.133.2.1.1asvn38630-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484588" comment="texlive-kotex-utf-2017.133.2.1.2svn38558-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484589" comment="texlive-kotex-utils-2017.133.2.1.0svn38727-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484591" comment="texlive-kpathsea-2017.133.svn44223-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484594" comment="texlive-kpfonts-2017.133.3.31svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484595" comment="texlive-kpfonts-fonts-2017.133.3.31svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484596" comment="texlive-ksfh_nat-2017.133.1.1svn24825-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484597" comment="texlive-ksp-thesis-2017.133.1.0.2svn39080-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484598" comment="texlive-ktv-texdata-2017.133.05.34svn27369-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484599" comment="texlive-kurier-2017.133.0.0.995bsvn19612-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484600" comment="texlive-kurier-fonts-2017.133.0.0.995bsvn19612-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484601" comment="texlive-l2picfaq-2017.133.1.50svn19601-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484602" comment="texlive-l2tabu-2017.133.2.4svn39597-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484603" comment="texlive-l2tabu-english-2017.133.1.8.5.7svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484604" comment="texlive-l2tabu-french-2017.133.2.3svn31315-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484605" comment="texlive-l2tabu-italian-2017.133.2.3svn25218-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484606" comment="texlive-l2tabu-spanish-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484607" comment="texlive-l3build-2017.133.svn44483-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484608" comment="texlive-l3experimental-2017.133.svn44483-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484609" comment="texlive-l3kernel-2017.133.svn44483-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484610" comment="texlive-l3packages-2017.133.svn44483-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484611" comment="texlive-labbook-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484612" comment="texlive-labels-2017.133.0.0.13svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484613" comment="texlive-labyrinth-2017.133.1.0svn33454-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484614" comment="texlive-lacheck-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484616" comment="texlive-ladder-2017.133.svn44394-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484617" comment="texlive-lambda-2017.133.svn28669-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484618" comment="texlive-lambda-lists-2017.133.svn31402-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484619" comment="texlive-langcode-2017.133.0.0.2svn27764-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484620" comment="texlive-langsci-2017.133.svn44096-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484621" comment="texlive-lapdf-2017.133.1.1svn23806-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484622" comment="texlive-lastpackage-2017.133.0.0.1svn34481-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484623" comment="texlive-lastpage-2017.133.1.2msvn36680-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484624" comment="texlive-latex-2017.133.20170101_pl1svn43813-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484625" comment="texlive-latex-bib-ex-2017.133.svn25831-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484626" comment="texlive-latex-bib2-ex-2017.133.svn40098-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484627" comment="texlive-latex-bin-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484629" comment="texlive-latex-brochure-2017.133.svn40612-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484630" comment="texlive-latex-course-2017.133.2svn25505-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484631" comment="texlive-latex-doc-ptr-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484632" comment="texlive-latex-fonts-2017.133.svn28888-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484633" comment="texlive-latex-git-log-2017.133.0.0.9svn30983-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484635" comment="texlive-latex-graphics-companion-2017.133.svn29235-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484636" comment="texlive-latex-make-2017.133.2.2.3svn42914-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486890" comment="texlive-latex-notes-zh-cn-2017.137.1.20svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486891" comment="texlive-latex-papersize-2017.137.1.62svn42296-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486892" comment="texlive-latex-referenz-2017.137.2svn36671-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486893" comment="texlive-latex-tabellen-2017.137.svn16979-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486894" comment="texlive-latex-tds-2017.137.svn40613-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486895" comment="texlive-latex-veryshortguide-2017.137.svn41844-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486896" comment="texlive-latex-web-companion-2017.137.svn29349-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486897" comment="texlive-latex2e-help-texinfo-2017.137.svn38709-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486898" comment="texlive-latex2e-help-texinfo-fr-2017.137.svn42541-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486899" comment="texlive-latex2e-help-texinfo-spanish-2017.137.svn37356-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486900" comment="texlive-latex2man-2017.137.1.25svn43855-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486901" comment="texlive-latex2nemeth-2017.137.1.0svn42300-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486902" comment="texlive-latex4wp-2017.137.1.0.10svn35999-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486903" comment="texlive-latex4wp-it-2017.137.1.0.10svn36000-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486904" comment="texlive-latexbangla-2017.137.0.0.2svn42409-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486905" comment="texlive-latexbug-2017.137.1.0asvn44566-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486906" comment="texlive-latexcheat-2017.137.1.13svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486907" comment="texlive-latexcheat-de-2017.137.svn35702-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486908" comment="texlive-latexcheat-esmx-2017.137.2.00svn36866-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486909" comment="texlive-latexcheat-ptbr-2017.137.1.13svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486910" comment="texlive-latexconfig-2017.137.svn40274-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486911" comment="texlive-latexcourse-rug-2017.137.1.1svn39026-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486912" comment="texlive-latexdemo-2017.137.0.0.1svn34481-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486913" comment="texlive-latexdiff-2017.137.1.2.0svn41892-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486914" comment="texlive-latexfileinfo-pkgs-2017.137.0.0.22svn26760-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486915" comment="texlive-latexfileversion-2017.137.0.0.3svn29349-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486916" comment="texlive-latexgit-2017.137.svn41920-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486917" comment="texlive-latexindent-2017.137.3.1svn44492-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486918" comment="texlive-latexmk-2017.137.4.52csvn43099-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486919" comment="texlive-latexmp-2017.137.1.2.1svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486920" comment="texlive-latexpand-2017.137.1.3svn41873-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486921" comment="texlive-lato-2017.137.2.2svn24986-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486922" comment="texlive-lato-fonts-2017.137.2.2svn24986-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486923" comment="texlive-layaureo-2017.137.0.0.2svn19087-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486924" comment="texlive-layouts-2017.137.2.6dsvn42428-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486925" comment="texlive-lazylist-2017.137.1.0asvn17691-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486926" comment="texlive-lcd-2017.137.0.0.3svn16549-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486927" comment="texlive-lcdftypetools-2017.137.svn44166-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486928" comment="texlive-lcg-2017.137.1.3svn31474-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486929" comment="texlive-lcyw-2017.137.1.1svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486930" comment="texlive-leading-2017.137.0.0.3svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486931" comment="texlive-leadsheets-2017.137.0.0.5asvn43034-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486932" comment="texlive-leaflet-2017.137.1.1bsvn43523-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486933" comment="texlive-lecturer-2017.137.svn23916-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486934" comment="texlive-ledmac-2017.137.0.0.19.4svn41811-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486935" comment="texlive-leftidx-2017.137.svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486936" comment="texlive-leipzig-2017.137.1.1svn34902-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486937" comment="texlive-lengthconvert-2017.137.1.0asvn30867-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486938" comment="texlive-lettre-2017.137.2.353svn35145-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486939" comment="texlive-lettrine-2017.137.1.9svn38268-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486940" comment="texlive-levy-2017.137.svn21750-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486941" comment="texlive-lewis-2017.137.0.0.1svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486942" comment="texlive-lexikon-2017.137.1.0csvn17364-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486943" comment="texlive-lexref-2017.137.1.1asvn36026-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486944" comment="texlive-lfb-2017.137.1.0svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486945" comment="texlive-lgreek-2017.137.svn21818-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486946" comment="texlive-lh-2017.137.3.5gsvn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486947" comment="texlive-lhcyr-2017.137.svn31795-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486948" comment="texlive-lhelp-2017.137.2.0svn23638-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486949" comment="texlive-libertine-2017.137.5.3.0svn43603-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486950" comment="texlive-libertine-fonts-2017.137.5.3.0svn43603-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486951" comment="texlive-libertinegc-2017.137.1.00svn39746-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486952" comment="texlive-libertinus-2017.137.6.4svn44409-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486953" comment="texlive-libertinus-fonts-2017.137.6.4svn44409-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486954" comment="texlive-libertinust1math-2017.137.1.0.4svn44542-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486955" comment="texlive-libertinust1math-fonts-2017.137.1.0.4svn44542-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486956" comment="texlive-libgreek-2017.137.1.0svn27789-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486957" comment="texlive-librarian-2017.137.1.0svn19880-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486958" comment="texlive-librebaskerville-2017.137.svn31741-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486959" comment="texlive-librebaskerville-fonts-2017.137.svn31741-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486960" comment="texlive-librebodoni-2017.137.svn39375-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486961" comment="texlive-librebodoni-fonts-2017.137.svn39375-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486962" comment="texlive-librecaslon-2017.137.svn31929-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486963" comment="texlive-librecaslon-fonts-2017.137.svn31929-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486964" comment="texlive-libris-2017.137.1.007svn19409-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486965" comment="texlive-libris-fonts-2017.137.1.007svn19409-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486966" comment="texlive-lilyglyphs-2017.137.0.0.2.3svn33164-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486967" comment="texlive-lilyglyphs-fonts-2017.137.0.0.2.3svn33164-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486968" comment="texlive-limap-2017.137.2.1svn41390-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486969" comment="texlive-linearA-2017.137.svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486970" comment="texlive-linearA-fonts-2017.137.svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486971" comment="texlive-linegoal-2017.137.2.9svn21523-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486972" comment="texlive-lineno-2017.137.4.41svn21442-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486973" comment="texlive-ling-macros-2017.137.svn42268-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486974" comment="texlive-linguex-2017.137.4.3svn30815-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486975" comment="texlive-linop-2017.137.0.0.1svn41304-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486976" comment="texlive-lion-msc-2017.137.0.0.27svn44131-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486977" comment="texlive-lipsum-2017.137.1.3svn34800-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486978" comment="texlive-lisp-on-tex-2017.137.2.0svn38722-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486979" comment="texlive-listbib-2017.137.2.2svn29349-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486980" comment="texlive-listing-2017.137.1.2svn17373-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486981" comment="texlive-listings-2017.137.1.6svn37534-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486982" comment="texlive-listings-ext-2017.137.67svn29349-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486983" comment="texlive-listlbls-2017.137.1.03svn34893-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486984" comment="texlive-listliketab-2017.137.svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486985" comment="texlive-listofitems-2017.137.1.3svn42530-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486986" comment="texlive-listofsymbols-2017.137.0.0.2svn16134-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486987" comment="texlive-lithuanian-2017.137.svn22722-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486988" comment="texlive-liturg-2017.137.1.0svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486989" comment="texlive-lkproof-2017.137.3.1svn20021-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486990" comment="texlive-lm-2017.137.2.004svn28119-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486991" comment="texlive-lm-fonts-2017.137.2.004svn28119-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486992" comment="texlive-lm-math-2017.137.1.959svn36915-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486993" comment="texlive-lm-math-fonts-2017.137.1.959svn36915-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486994" comment="texlive-lmake-2017.137.1.0svn25552-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486995" comment="texlive-lni-2017.137.1.3svn44368-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486996" comment="texlive-lobster2-2017.137.svn32617-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486997" comment="texlive-lobster2-fonts-2017.137.svn32617-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486998" comment="texlive-locality-2017.137.0.0.2svn20422-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486999" comment="texlive-localloc-2017.137.svn21934-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487000" comment="texlive-logbox-2017.137.1.0svn24499-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487001" comment="texlive-logical-markup-utils-2017.137.svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487002" comment="texlive-logicproof-2017.137.svn33254-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487003" comment="texlive-logicpuzzle-2017.137.2.5svn34491-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487004" comment="texlive-logpap-2017.137.0.0.6svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487005" comment="texlive-logreq-2017.137.1.0svn19640-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487006" comment="texlive-lollipop-2017.137.1.07svn41438-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487007" comment="texlive-longdivision-2017.137.1.0svn43159-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487008" comment="texlive-longfbox-2017.137.1.0svn39028-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487009" comment="texlive-longfigure-2017.137.1.0svn34302-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487010" comment="texlive-longnamefilelist-2017.137.0.0.2svn27889-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487011" comment="texlive-loops-2017.137.1.3svn30704-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487012" comment="texlive-lpform-2017.137.svn36918-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487013" comment="texlive-lpic-2017.137.0.0.8svn20843-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487014" comment="texlive-lplfitch-2017.137.0.0.9svn31077-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487015" comment="texlive-lps-2017.137.0.0.7svn21322-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487016" comment="texlive-lroundrect-2017.137.1.0svn39804-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487017" comment="texlive-lsc-2017.137.svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487018" comment="texlive-lshort-bulgarian-2017.137.svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487019" comment="texlive-lshort-chinese-2017.137.5.10svn43606-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487020" comment="texlive-lshort-czech-2017.137.4.27svn29803-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487021" comment="texlive-lshort-dutch-2017.137.1.3svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487022" comment="texlive-lshort-english-2017.137.5.0.5svn37892-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487023" comment="texlive-lshort-estonian-2017.137.5.05svn39323-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487024" comment="texlive-lshort-finnish-2017.137.svn15878-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487025" comment="texlive-lshort-french-2017.137.5.01fr_0svn23332-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487026" comment="texlive-lshort-german-2017.137.3.0bsvn42434-7.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484787" comment="texlive-lshort-italian-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484788" comment="texlive-lshort-japanese-2017.133.svn36207-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484789" comment="texlive-lshort-korean-2017.133.4.17svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484790" comment="texlive-lshort-mongol-2017.133.4.26svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484791" comment="texlive-lshort-persian-2017.133.5.01svn31296-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484792" comment="texlive-lshort-polish-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484793" comment="texlive-lshort-portuguese-2017.133.5.01.0svn22569-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484794" comment="texlive-lshort-russian-2017.133.svn18906-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484795" comment="texlive-lshort-slovak-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484796" comment="texlive-lshort-slovenian-2017.133.4.20svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484797" comment="texlive-lshort-spanish-2017.133.0.0.5svn35050-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484798" comment="texlive-lshort-thai-2017.133.1.32svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484799" comment="texlive-lshort-turkish-2017.133.4.20svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484800" comment="texlive-lshort-ukr-2017.133.4.00svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484801" comment="texlive-lshort-vietnamese-2017.133.4.00svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484802" comment="texlive-lstaddons-2017.133.0.0.1svn26196-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484803" comment="texlive-lstbayes-2017.133.svn41550-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484804" comment="texlive-lt3graph-2017.133.0.0.1.8svn42874-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484805" comment="texlive-ltablex-2017.133.1.1svn34923-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484806" comment="texlive-ltabptch-2017.133.1.74dsvn17533-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484807" comment="texlive-ltb2bib-2017.133.0.0.01svn43746-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484808" comment="texlive-ltxdockit-2017.133.1.2dsvn21869-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484809" comment="texlive-ltxfileinfo-2017.133.2.04svn38663-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484811" comment="texlive-ltximg-2017.133.1.2svn37006-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484813" comment="texlive-ltxindex-2017.133.0.0.1csvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484814" comment="texlive-ltxkeys-2017.133.0.0.0.3csvn28332-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484815" comment="texlive-ltxmisc-2017.133.svn21927-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484816" comment="texlive-ltxnew-2017.133.1.3svn21586-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484817" comment="texlive-ltxtools-2017.133.0.0.0.1asvn24897-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484818" comment="texlive-lua-alt-getopt-2017.133.0.0.7.0svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484819" comment="texlive-lua-check-hyphen-2017.133.0.0.4svn40229-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484820" comment="texlive-lua-visual-debug-2017.133.0.0.5svn41387-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484821" comment="texlive-lua2dox-2017.133.0.0.2svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484823" comment="texlive-luabibentry-2017.133.0.0.1asvn31783-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484824" comment="texlive-luabidi-2017.133.0.0.2svn30790-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484825" comment="texlive-luacode-2017.133.1.2asvn25193-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484826" comment="texlive-luahyphenrules-2017.133.1.0svn42670-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484827" comment="texlive-luaindex-2017.133.0.0.1bsvn25882-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484828" comment="texlive-luainputenc-2017.133.0.0.973svn20491-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484829" comment="texlive-luaintro-2017.133.0.0.03svn35490-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484830" comment="texlive-lualatex-doc-2017.133.svn30473-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484831" comment="texlive-lualatex-doc-de-2017.133.1.0svn30474-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484832" comment="texlive-lualatex-math-2017.133.1.6svn40621-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484833" comment="texlive-lualibs-2017.133.2.5svn43153-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484834" comment="texlive-luamesh-2017.133.0.0.51svn43814-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484835" comment="texlive-luamplib-2017.133.2.12.1svn44496-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484836" comment="texlive-luaotfload-2017.133.2.8_fix_2svn43194-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484838" comment="texlive-luapackageloader-2017.133.0.0.1svn44500-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484839" comment="texlive-luasseq-2017.133.svn37877-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484840" comment="texlive-luatex-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484842" comment="texlive-luatex85-2017.133.1.4svn41456-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484843" comment="texlive-luatexbase-2017.133.1.3svn38550-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484844" comment="texlive-luatexja-2017.133.20170505.0svn44217-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484845" comment="texlive-luatexko-2017.133.1.17svn44141-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484846" comment="texlive-luatextra-2017.133.1.0.1svn20747-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484847" comment="texlive-luatodonotes-2017.133.0.0.3svn39019-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484848" comment="texlive-luaxml-2017.133.0.0.0.2svn32741-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484849" comment="texlive-lwarp-2017.133.0.0.32svn44552-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484851" comment="texlive-lxfonts-2017.133.2.0bsvn32354-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484852" comment="texlive-lxfonts-fonts-2017.133.2.0bsvn32354-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484853" comment="texlive-ly1-2017.133.svn21086-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484854" comment="texlive-m-tx-2017.133.0.0.62asvn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484856" comment="texlive-macros2e-2017.133.0.0.4svn23236-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484857" comment="texlive-macroswap-2017.133.1.1svn31498-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484858" comment="texlive-mafr-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484859" comment="texlive-magaz-2017.133.0.0.4svn24694-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484860" comment="texlive-mailing-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484861" comment="texlive-mailmerge-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484862" comment="texlive-make4ht-2017.133.0.0.1csvn44079-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484864" comment="texlive-makebarcode-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484865" comment="texlive-makebase-2017.133.0.0.2svn41012-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484866" comment="texlive-makebox-2017.133.0.0.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484867" comment="texlive-makecell-2017.133.0.0.1esvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484868" comment="texlive-makecirc-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484869" comment="texlive-makecmds-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484870" comment="texlive-makedtx-2017.133.0.0.94bsvn38769-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484872" comment="texlive-makeglos-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484873" comment="texlive-makeindex-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484875" comment="texlive-makeplot-2017.133.1.0.6svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484876" comment="texlive-makeshape-2017.133.2.1svn28973-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484877" comment="texlive-mandi-2017.133.2.6.1svn41598-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484878" comment="texlive-manfnt-2017.133.svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484879" comment="texlive-manfnt-font-2017.133.svn35799-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484880" comment="texlive-manfnt-font-fonts-2017.133.svn35799-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484881" comment="texlive-manuscript-2017.133.1.7svn36110-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484882" comment="texlive-margbib-2017.133.1.0csvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484883" comment="texlive-marginfix-2017.133.1.1svn31598-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484884" comment="texlive-marginnote-2017.133.1.2bsvn43979-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484885" comment="texlive-markdown-2017.133.2.5.3svn44237-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484886" comment="texlive-marvosym-2017.133.2.2asvn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484887" comment="texlive-marvosym-fonts-2017.133.2.2asvn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484888" comment="texlive-matc3-2017.133.1.0.1svn29845-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484889" comment="texlive-matc3mem-2017.133.1.1svn35773-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484890" comment="texlive-match_parens-2017.133.1.43svn36270-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484892" comment="texlive-math-e-2017.133.svn20062-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484893" comment="texlive-math-into-latex-4-2017.133.svn44131-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484894" comment="texlive-mathabx-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484895" comment="texlive-mathabx-type1-2017.133.svn21129-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484896" comment="texlive-mathabx-type1-fonts-2017.133.svn21129-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484897" comment="texlive-mathalfa-2017.133.1.09svn43332-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484898" comment="texlive-mathastext-2017.133.1.3rsvn42447-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484899" comment="texlive-mathcomp-2017.133.0.0.1fsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484900" comment="texlive-mathdesign-2017.133.2.31svn31639-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484901" comment="texlive-mathdesign-fonts-2017.133.2.31svn31639-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484902" comment="texlive-mathdots-2017.133.0.0.9svn34301-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484903" comment="texlive-mathexam-2017.133.1.00svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484904" comment="texlive-mathpartir-2017.133.1.3.2svn39864-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484905" comment="texlive-mathpazo-2017.133.1.003svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484906" comment="texlive-mathpazo-fonts-2017.133.1.003svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484907" comment="texlive-mathpunctspace-2017.133.1.0svn44131-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484908" comment="texlive-maths-symbols-2017.133.3.4svn37763-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484909" comment="texlive-mathspec-2017.133.0.0.2bsvn42773-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484910" comment="texlive-mathspic-2017.133.1.13svn31957-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484912" comment="texlive-mathtools-2017.133.1.19svn44504-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484913" comment="texlive-matlab-prettifier-2017.133.0.0.3svn34323-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484914" comment="texlive-mattens-2017.133.1.3svn17582-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484915" comment="texlive-maybemath-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484916" comment="texlive-mbenotes-2017.133.2svn31813-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484917" comment="texlive-mcaption-2017.133.3.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484918" comment="texlive-mceinleger-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484919" comment="texlive-mcexam-2017.133.0.0.3svn44171-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484920" comment="texlive-mcf2graph-2017.133.4.23svn44468-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484921" comment="texlive-mcite-2017.133.1.6svn18173-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484922" comment="texlive-mciteplus-2017.133.1.2svn31648-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484923" comment="texlive-mcmthesis-2017.133.6.2svn39515-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484924" comment="texlive-mdframed-2017.133.1.9bsvn31075-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484925" comment="texlive-mdputu-2017.133.1.2svn20298-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484926" comment="texlive-mdsymbol-2017.133.0.0.5svn28399-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484927" comment="texlive-mdsymbol-fonts-2017.133.0.0.5svn28399-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484928" comment="texlive-mdwtools-2017.133.1.05.4svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484929" comment="texlive-media9-2017.133.0.0.79svn44045-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484930" comment="texlive-medstarbeamer-2017.133.svn38828-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484931" comment="texlive-meetingmins-2017.133.1.6svn31878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484932" comment="texlive-memdesign-2017.133.svn34157-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484933" comment="texlive-memexsupp-2017.133.0.0.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484934" comment="texlive-memoir-2017.133.3.7fsvn41203-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484935" comment="texlive-memory-2017.133.1.2svn30452-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484936" comment="texlive-mendex-doc-2017.133.svn42767-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484937" comment="texlive-mentis-2017.133.1.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484938" comment="texlive-menu-2017.133.0.0.994svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484939" comment="texlive-menukeys-2017.133.1.5svn41823-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484940" comment="texlive-merriweather-2017.133.svn34315-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484941" comment="texlive-merriweather-fonts-2017.133.svn34315-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484942" comment="texlive-metafont-2017.133.2.7182818svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484943" comment="texlive-metafont-beginners-2017.133.svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484945" comment="texlive-metago-2017.133.0.0.9svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484946" comment="texlive-metalogo-2017.133.0.0.12svn18611-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484947" comment="texlive-metaobj-2017.133.0.0.93svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484948" comment="texlive-metaplot-2017.133.0.0.91svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484949" comment="texlive-metapost-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484951" comment="texlive-metapost-examples-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484952" comment="texlive-metapost-fonts-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484953" comment="texlive-metatex-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484954" comment="texlive-metatype1-2017.133.0.0.56svn37105-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484955" comment="texlive-metauml-2017.133.0.0.2.5svn19692-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484956" comment="texlive-method-2017.133.2.0bsvn17485-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484957" comment="texlive-metre-2017.133.1.0svn18489-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484958" comment="texlive-metrix-2017.133.1.3svn40099-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484959" comment="texlive-mex-2017.133.1.05svn40855-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484961" comment="texlive-mf2pt1-2017.133.2.5asvn33802-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484963" comment="texlive-mfirstuc-2017.133.2.04svn41785-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484964" comment="texlive-mflogo-2017.133.2.0svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484965" comment="texlive-mflogo-font-2017.133.1.002svn36898-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484966" comment="texlive-mflogo-font-fonts-2017.133.1.002svn36898-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484967" comment="texlive-mflua-2017.133.svn43947-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484969" comment="texlive-mfnfss-2017.133.svn19410-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484970" comment="texlive-mfpic-2017.133.1.10svn28444-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484971" comment="texlive-mfpic4ode-2017.133.0.0.4svn17745-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484972" comment="texlive-mftinc-2017.133.1.0asvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484973" comment="texlive-mfware-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484975" comment="texlive-mgltex-2017.133.4.2svn41676-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484976" comment="texlive-mhchem-2017.133.svn44451-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484977" comment="texlive-mhequ-2017.133.1.7svn38224-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484978" comment="texlive-miama-2017.133.1.0svn39837-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484979" comment="texlive-miama-fonts-2017.133.1.0svn39837-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484980" comment="texlive-microtype-2017.133.2.6asvn41127-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484981" comment="texlive-microtype-de-2017.133.2.4svn24549-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484982" comment="texlive-midnight-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484983" comment="texlive-midpage-2017.133.1.1asvn17484-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484984" comment="texlive-miller-2017.133.1.2svn18789-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484985" comment="texlive-milog-2017.133.1.0svn41610-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484986" comment="texlive-minibox-2017.133.0.0.2asvn30914-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484987" comment="texlive-minidocument-2017.133.1.0svn43752-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484988" comment="texlive-minifp-2017.133.0.0.96svn32559-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484989" comment="texlive-minipage-marginpar-2017.133.0.0.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484990" comment="texlive-miniplot-2017.133.svn17483-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484991" comment="texlive-minitoc-2017.133.61svn37852-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484992" comment="texlive-minorrevision-2017.133.1.1svn32165-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484993" comment="texlive-minted-2017.133.2.4.1svn42418-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484994" comment="texlive-mintspirit-2017.133.svn32069-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484995" comment="texlive-mintspirit-fonts-2017.133.svn32069-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484996" comment="texlive-minutes-2017.133.1.8fsvn42186-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484997" comment="texlive-missaali-2017.133.1.004svn42810-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484998" comment="texlive-missaali-fonts-2017.133.1.004svn42810-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009484999" comment="texlive-mkgrkindex-2017.133.2.0svn26313-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485001" comment="texlive-mkjobtexmf-2017.133.0.0.8svn29725-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485003" comment="texlive-mkpattern-2017.133.1.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485004" comment="texlive-mkpic-2017.133.1.02svn33700-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485006" comment="texlive-mla-paper-2017.133.svn20885-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485007" comment="texlive-mlist-2017.133.0.0.6asvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485008" comment="texlive-mltex-2017.133.2.2svn39057-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485010" comment="texlive-mmap-2017.133.1.03svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485011" comment="texlive-mnotes-2017.133.0.0.8svn35521-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485012" comment="texlive-mnras-2017.133.3.0svn37579-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485013" comment="texlive-mnsymbol-2017.133.1.4svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485014" comment="texlive-mnsymbol-fonts-2017.133.1.4svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485015" comment="texlive-moderncv-2017.133.2.0.0svn37992-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485016" comment="texlive-moderntimeline-2017.133.0.0.9svn38254-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485017" comment="texlive-modiagram-2017.133.0.0.2gsvn38448-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485018" comment="texlive-modref-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485019" comment="texlive-modroman-2017.133.1svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485020" comment="texlive-modular-2017.133.svn44142-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485021" comment="texlive-mongolian-babel-2017.133.1.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485022" comment="texlive-monofill-2017.133.0.0.2svn28140-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485023" comment="texlive-montex-2017.133.ivu.04.092svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485024" comment="texlive-montex-fonts-2017.133.ivu.04.092svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485025" comment="texlive-montserrat-2017.133.1.01svn43347-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485026" comment="texlive-montserrat-fonts-2017.133.1.01svn43347-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485027" comment="texlive-moodle-2017.133.0.0.5svn39367-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485028" comment="texlive-moreenum-2017.133.1.03svn24479-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485029" comment="texlive-morefloats-2017.133.1.0hsvn37927-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485030" comment="texlive-morehype-2017.133.r0.83svn38815-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485031" comment="texlive-moresize-2017.133.1.9svn17513-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485032" comment="texlive-moreverb-2017.133.2.3asvn22126-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485033" comment="texlive-morewrites-2017.133.svn43945-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485034" comment="texlive-movie15-2017.133.svn26473-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485035" comment="texlive-mp3d-2017.133.1.34svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485036" comment="texlive-mparhack-2017.133.1.4svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485037" comment="texlive-mparrows-2017.133.0.0.1svn39729-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485038" comment="texlive-mpattern-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485039" comment="texlive-mpcolornames-2017.133.0.0.20svn23252-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485040" comment="texlive-mpgraphics-2017.133.0.0.3svn29776-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485041" comment="texlive-mpman-ru-2017.133.1.004svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485042" comment="texlive-mpostinl-2017.133.1.11svn43670-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485043" comment="texlive-mptopdf-2017.133.svn41282-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485045" comment="texlive-mptrees-2017.133.17.06svn44453-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485046" comment="texlive-ms-2017.133.svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485047" comment="texlive-msc-2017.133.1.16svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485048" comment="texlive-msg-2017.133.0.0.40svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485049" comment="texlive-mslapa-2017.133.svn17514-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485050" comment="texlive-msu-thesis-2017.133.2.6bsvn41345-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485051" comment="texlive-mtgreek-2017.133.1.1+svn17967-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485052" comment="texlive-mucproc-2017.133.1.02svn43445-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485053" comment="texlive-mugsthesis-2017.133.svn34878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485054" comment="texlive-multenum-2017.133.svn21775-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485055" comment="texlive-multiaudience-2017.133.1.03svn38035-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485056" comment="texlive-multibbl-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485057" comment="texlive-multibib-2017.133.1.4svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485058" comment="texlive-multibibliography-2017.133.1.03svn30939-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485060" comment="texlive-multicap-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485061" comment="texlive-multidef-2017.133.1.10svn40637-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485062" comment="texlive-multido-2017.133.1.42svn18302-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485063" comment="texlive-multienv-2017.133.1.0svn26544-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485064" comment="texlive-multiexpand-2017.133.1.4svn38416-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485065" comment="texlive-multiobjective-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485066" comment="texlive-multirow-2017.133.2.2svn42588-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485067" comment="texlive-munich-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485068" comment="texlive-musixguit-2017.133.1.2.2svn21649-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485069" comment="texlive-musixtex-2017.133.1.24svn43375-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485071" comment="texlive-musixtex-fonts-2017.133.svn37762-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485072" comment="texlive-musixtex-fonts-fonts-2017.133.svn37762-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485073" comment="texlive-musixtnt-2017.133.svn40307-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485075" comment="texlive-musuos-2017.133.1.1dsvn24857-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485076" comment="texlive-muthesis-2017.133.svn23861-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485077" comment="texlive-mversion-2017.133.1.0.1svn29370-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485078" comment="texlive-mwcls-2017.133.0.0.75svn44352-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485079" comment="texlive-mwe-2017.133.0.0.3svn26422-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485080" comment="texlive-mweights-2017.133.svn43647-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485081" comment="texlive-mxedruli-2017.133.3.3csvn30021-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485082" comment="texlive-mxedruli-fonts-2017.133.3.3csvn30021-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485083" comment="texlive-mychemistry-2017.133.1.99bsvn28611-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485084" comment="texlive-mycv-2017.133.1.5.6svn26807-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485085" comment="texlive-mylatexformat-2017.133.3.4svn21392-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485086" comment="texlive-mynsfc-2017.133.1.01svn41996-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485087" comment="texlive-nag-2017.133.0.0.7svn24741-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485088" comment="texlive-nameauth-2017.133.3.2svn43586-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485089" comment="texlive-namespc-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485090" comment="texlive-nanumtype1-2017.133.3.0svn29558-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485091" comment="texlive-nanumtype1-fonts-2017.133.3.0svn29558-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485092" comment="texlive-nar-2017.133.3.19svn38100-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485093" comment="texlive-natbib-2017.133.8.31bsvn20668-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485094" comment="texlive-natded-2017.133.0.0.1svn32693-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485095" comment="texlive-nath-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485096" comment="texlive-nature-2017.133.1.0svn21819-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485097" comment="texlive-navigator-2017.133.1.1svn41413-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485098" comment="texlive-navydocs-2017.133.1.1svn41643-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485099" comment="texlive-ncclatex-2017.133.1.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485100" comment="texlive-ncctools-2017.133.3.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485101" comment="texlive-ncntrsbk-2017.133.svn31835-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485102" comment="texlive-ncntrsbk-fonts-2017.133.svn31835-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485103" comment="texlive-nddiss-2017.133.3.0svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485104" comment="texlive-ndsu-thesis-2017.133.svn40536-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485105" comment="texlive-needspace-2017.133.1.3dsvn29601-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485106" comment="texlive-nestquot-2017.133.svn27323-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485107" comment="texlive-neuralnetwork-2017.133.1.0svn31500-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485108" comment="texlive-nevelok-2017.133.1.03svn39029-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485109" comment="texlive-newcommand-2017.133.2.0svn18704-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485110" comment="texlive-newenviron-2017.133.1.0svn29331-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485111" comment="texlive-newfile-2017.133.1.0csvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485112" comment="texlive-newlfm-2017.133.9.4svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485113" comment="texlive-newpx-2017.133.1.32svn44457-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485114" comment="texlive-newpx-fonts-2017.133.1.32svn44457-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485115" comment="texlive-newsletr-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485116" comment="texlive-newspaper-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485117" comment="texlive-newtx-2017.133.1.525svn44520-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485118" comment="texlive-newtx-fonts-2017.133.1.525svn44520-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485119" comment="texlive-newtxsf-2017.133.1.05svn41918-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485120" comment="texlive-newtxsf-fonts-2017.133.1.05svn41918-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485121" comment="texlive-newtxtt-2017.133.1.055svn44510-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485122" comment="texlive-newtxtt-fonts-2017.133.1.055svn44510-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485123" comment="texlive-newunicodechar-2017.133.1.1svn28253-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485124" comment="texlive-newvbtm-2017.133.1.1svn23996-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485125" comment="texlive-newverbs-2017.133.1.3asvn26258-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485126" comment="texlive-nextpage-2017.133.1.1asvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485127" comment="texlive-nfssext-cfr-2017.133.svn43640-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485128" comment="texlive-nicefilelist-2017.133.0.0.7asvn28527-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485129" comment="texlive-niceframe-2017.133.1.1csvn36086-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485130" comment="texlive-nicetext-2017.133.r0.67svn38914-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485131" comment="texlive-nih-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485132" comment="texlive-nihbiosketch-2017.133.svn39460-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485133" comment="texlive-nimbus15-2017.133.1.00svn39343-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485134" comment="texlive-nimbus15-fonts-2017.133.1.00svn39343-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485135" comment="texlive-nkarta-2017.133.0.0.2svn16437-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485136" comment="texlive-nlctdoc-2017.133.1.06svn44353-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485137" comment="texlive-nmbib-2017.133.1.04svn37984-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485138" comment="texlive-noconflict-2017.133.1.0svn30140-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485139" comment="texlive-nodetree-2017.133.1.2svn43011-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485140" comment="texlive-noindentafter-2017.133.0.0.2.2svn35709-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485141" comment="texlive-noitcrul-2017.133.0.0.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485142" comment="texlive-nolbreaks-2017.133.1.2svn26786-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485143" comment="texlive-nomencl-2017.133.3.1asvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485144" comment="texlive-nomentbl-2017.133.0.0.4svn16549-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485145" comment="texlive-nonfloat-2017.133.1.0svn17598-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485146" comment="texlive-nonumonpart-2017.133.1svn22114-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485147" comment="texlive-nopageno-2017.133.svn18128-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485148" comment="texlive-norasi-c90-2017.133.svn37675-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485149" comment="texlive-normalcolor-2017.133.r11svn40125-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485150" comment="texlive-nostarch-2017.133.1.3svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485151" comment="texlive-notes-2017.133.1.0.1svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485152" comment="texlive-notes2bib-2017.133.2.0ksvn31162-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485153" comment="texlive-notespages-2017.133.0.0.8.1svn41906-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485154" comment="texlive-notex-bst-2017.133.svn42361-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485155" comment="texlive-noto-2017.133.svn42881-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485156" comment="texlive-noto-fonts-2017.133.svn42881-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485157" comment="texlive-notoccite-2017.133.svn18129-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485158" comment="texlive-novel-2017.133.1.2svn44529-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485159" comment="texlive-novel-fonts-2017.133.1.2svn44529-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485160" comment="texlive-nowidow-2017.133.1.0svn24066-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485161" comment="texlive-nox-2017.133.1.0svn30991-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485162" comment="texlive-nrc-2017.133.2.01asvn29027-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485163" comment="texlive-ntgclass-2017.133.2.1asvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485164" comment="texlive-ntheorem-2017.133.1.33svn27609-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485165" comment="texlive-ntheorem-vn-2017.133.1.203svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485166" comment="texlive-nuc-2017.133.0.0.1svn22256-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485167" comment="texlive-nucleardata-2017.133.1.01dsvn42307-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485168" comment="texlive-numberedblock-2017.133.1.10svn33109-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485169" comment="texlive-numericplots-2017.133.2.0.2svn31729-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485170" comment="texlive-numname-2017.133.svn18130-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485171" comment="texlive-numprint-2017.133.1.39svn27498-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485172" comment="texlive-numspell-2017.133.1.0svn43189-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485173" comment="texlive-nwejm-2017.133.0.0.98dsvn44131-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485174" comment="texlive-oberdiek-2017.133.svn43610-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485175" comment="texlive-objectz-2017.133.svn19389-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485176" comment="texlive-obnov-2017.133.0.0.11svn33355-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485177" comment="texlive-ocg-p-2017.133.0.0.4svn28803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485178" comment="texlive-ocgx-2017.133.0.0.5svn28492-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485179" comment="texlive-ocgx2-2017.133.0.0.29svn44528-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485180" comment="texlive-ocherokee-2017.133.svn25689-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485181" comment="texlive-ocherokee-fonts-2017.133.svn25689-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485182" comment="texlive-ocr-b-2017.133.svn20852-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485183" comment="texlive-ocr-b-outline-2017.133.svn20969-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485184" comment="texlive-ocr-b-outline-fonts-2017.133.svn20969-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485185" comment="texlive-ocr-latex-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485186" comment="texlive-octavo-2017.133.1.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485187" comment="texlive-odsfile-2017.133.0.0.6svn38449-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485188" comment="texlive-ofs-2017.133.svn16991-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485189" comment="texlive-ogham-2017.133.svn24876-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485190" comment="texlive-oinuit-2017.133.svn28668-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485191" comment="texlive-oinuit-fonts-2017.133.svn28668-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485192" comment="texlive-old-arrows-2017.133.2.0svn42872-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485193" comment="texlive-old-arrows-fonts-2017.133.2.0svn42872-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485194" comment="texlive-oldlatin-2017.133.1.00svn17932-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485195" comment="texlive-oldstandard-2017.133.2.2svn41735-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485196" comment="texlive-oldstandard-fonts-2017.133.2.2svn41735-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485197" comment="texlive-oldstyle-2017.133.0.0.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485198" comment="texlive-olsak-misc-2017.133.svn41526-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485199" comment="texlive-omega-2017.133.svn33046-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485200" comment="texlive-omega-fonts-2017.133.svn33046-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485201" comment="texlive-omegaware-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485203" comment="texlive-onlyamsmath-2017.133.0.0.20svn42927-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485204" comment="texlive-onrannual-2017.133.1.1svn17474-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485205" comment="texlive-opcit-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485206" comment="texlive-opensans-2017.133.1.2svn24706-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485207" comment="texlive-opensans-fonts-2017.133.1.2svn24706-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485208" comment="texlive-oplotsymbl-2017.133.1.2svn43091-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485209" comment="texlive-opteng-2017.133.1.0svn27331-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485210" comment="texlive-optidef-2017.133.2.4svn44505-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485211" comment="texlive-optional-2017.133.2.2bsvn18131-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485212" comment="texlive-options-2017.133.1.0svn39030-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485213" comment="texlive-ordinalpt-2017.133.2.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485214" comment="texlive-orkhun-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485215" comment="texlive-oscola-2017.133.1.5svn43599-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485216" comment="texlive-ot-tableau-2017.133.svn35095-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485217" comment="texlive-othello-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485218" comment="texlive-othelloboard-2017.133.1.2svn23714-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485219" comment="texlive-otibet-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485220" comment="texlive-oubraces-2017.133.svn21833-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485221" comment="texlive-outline-2017.133.svn18360-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485222" comment="texlive-outliner-2017.133.0.0.94svn21095-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485223" comment="texlive-outlines-2017.133.1.1svn25192-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485224" comment="texlive-overlays-2017.133.2.7svn43431-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485225" comment="texlive-overlock-2017.133.svn34409-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485226" comment="texlive-overlock-fonts-2017.133.svn34409-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485227" comment="texlive-overpic-2017.133.0.0.53svn19712-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485228" comment="texlive-pacioli-2017.133.svn24947-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485229" comment="texlive-padauk-2017.133.3.002svn42617-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485230" comment="texlive-padauk-fonts-2017.133.3.002svn42617-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485231" comment="texlive-pagecolor-2017.133.1.0isvn44487-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485232" comment="texlive-pagecont-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485233" comment="texlive-pagenote-2017.133.1.1asvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485234" comment="texlive-pagerange-2017.133.0.0.5svn16915-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485235" comment="texlive-pageslts-2017.133.1.2fsvn39164-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485236" comment="texlive-palatino-2017.133.svn31835-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485237" comment="texlive-palatino-fonts-2017.133.svn31835-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485238" comment="texlive-paper-2017.133.1.0lsvn34521-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485239" comment="texlive-papercdcase-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485240" comment="texlive-papermas-2017.133.1.0hsvn23667-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485241" comment="texlive-papertex-2017.133.1.2bsvn19230-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485242" comment="texlive-paracol-2017.133.1.32svn38621-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485243" comment="texlive-parades-2017.133.svn40042-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485244" comment="texlive-paralist-2017.133.2.7svn43021-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485245" comment="texlive-parallel-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485246" comment="texlive-paratype-2017.133.svn32859-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485247" comment="texlive-paratype-fonts-2017.133.svn32859-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485248" comment="texlive-paresse-2017.133.4.1svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485249" comment="texlive-parnotes-2017.133.3svn41868-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485250" comment="texlive-parrun-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485251" comment="texlive-parselines-2017.133.1.4svn21475-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485252" comment="texlive-parskip-2017.133.2.0svn19963-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485253" comment="texlive-pas-cours-2017.133.1.6svn42036-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485254" comment="texlive-pas-crosswords-2017.133.1.03svn32313-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485255" comment="texlive-pas-cv-2017.133.2.01svn32263-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485256" comment="texlive-pas-tableur-2017.133.2.01svn39542-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485257" comment="texlive-passivetex-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485258" comment="texlive-patch-2017.133.svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485259" comment="texlive-patchcmd-2017.133.1.05svn41379-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485260" comment="texlive-patgen-2017.133.2.3svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485262" comment="texlive-patgen2-tutorial-2017.133.svn16490-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485263" comment="texlive-path-2017.133.3.05svn22045-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485264" comment="texlive-pauldoc-2017.133.0.0.5svn16005-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485265" comment="texlive-pawpict-2017.133.1.0svn21629-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485266" comment="texlive-pax-2017.133.0.0.1lsvn26112-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485268" comment="texlive-pb-diagram-2017.133.5.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485269" comment="texlive-pbibtex-base-2017.133.svn40986-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485270" comment="texlive-pbox-2017.133.1.2svn24807-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485271" comment="texlive-pbsheet-2017.133.0.0.1svn24830-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485272" comment="texlive-pdf-trans-2017.133.2.4svn32809-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485273" comment="texlive-pdf14-2017.133.0.0.1svn17583-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485274" comment="texlive-pdfbook2-2017.133.1.2svn37537-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485276" comment="texlive-pdfcomment-2017.133.2.4svn41484-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485277" comment="texlive-pdfcprot-2017.133.1.7asvn18735-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485278" comment="texlive-pdfcrop-2017.133.1.37svn29348-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485280" comment="texlive-pdfjam-2017.133.2.02svn29752-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485282" comment="texlive-pdflatexpicscale-2017.133.0.0.31svn43117-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485284" comment="texlive-pdfmarginpar-2017.133.0.0.92svn23492-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485285" comment="texlive-pdfpagediff-2017.133.1.4svn37946-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485286" comment="texlive-pdfpages-2017.133.0.0.5hsvn42973-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485287" comment="texlive-pdfscreen-2017.133.1.5svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485288" comment="texlive-pdfslide-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485289" comment="texlive-pdfsync-2017.133.svn20373-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485290" comment="texlive-pdftex-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485292" comment="texlive-pdftex-fonts-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485293" comment="texlive-pdftools-2017.133.0.0.86svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485295" comment="texlive-pdftricks-2017.133.1.16svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485296" comment="texlive-pdftricks2-2017.133.1.01svn31016-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485297" comment="texlive-pdfwin-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485298" comment="texlive-pdfx-2017.133.1.5.84svn44412-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485299" comment="texlive-pdfxup-2017.133.1.30svn40690-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485301" comment="texlive-pecha-2017.133.0.0.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485302" comment="texlive-pedigree-perl-2017.133.1.0svn31990-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485304" comment="texlive-perception-2017.133.svn42683-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485305" comment="texlive-perfectcut-2017.133.2.2svn44175-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485306" comment="texlive-perltex-2017.133.2.1svn38719-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485308" comment="texlive-permute-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485309" comment="texlive-persian-bib-2017.133.0.0.9svn37297-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485310" comment="texlive-petiteannonce-2017.133.1.0001svn25915-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485311" comment="texlive-petri-nets-2017.133.svn39165-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485313" comment="texlive-pfarrei-2017.133.r36svn31934-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485315" comment="texlive-pgf-2017.133.3.0.1asvn44231-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485316" comment="texlive-pgf-blur-2017.133.1.01svn31693-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485317" comment="texlive-pgf-soroban-2017.133.1.1svn32269-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485318" comment="texlive-pgf-spectra-2017.133.1.0svn42986-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485319" comment="texlive-pgf-umlcd-2017.133.0.0.2.1.1svn33307-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485320" comment="texlive-pgf-umlsd-2017.133.0.0.7svn33045-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485321" comment="texlive-pgfgantt-2017.133.4.0svn31037-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485322" comment="texlive-pgfkeyx-2017.133.0.0.0.1svn26093-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485323" comment="texlive-pgfmolbio-2017.133.0.0.21svn35152-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485324" comment="texlive-pgfopts-2017.133.2.1asvn34573-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485325" comment="texlive-pgfornament-2017.133.0.0.21svn39988-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485326" comment="texlive-pgfplots-2017.133.1.15svn44469-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485327" comment="texlive-phaistos-2017.133.1.0svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485328" comment="texlive-phaistos-fonts-2017.133.1.0svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485329" comment="texlive-phffullpagefigure-2017.133.1.0svn41857-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485330" comment="texlive-phfnote-2017.133.1.0svn41858-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485331" comment="texlive-phfparen-2017.133.1.0svn41859-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485332" comment="texlive-phfqit-2017.133.1.0svn41860-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485333" comment="texlive-phfquotetext-2017.133.1.0svn41869-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485334" comment="texlive-phfsvnwatermark-2017.133.1.0svn41870-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485335" comment="texlive-phfthm-2017.133.1.0svn41871-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485336" comment="texlive-philex-2017.133.1.3svn36396-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485337" comment="texlive-philokalia-2017.133.1.1svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485338" comment="texlive-philokalia-fonts-2017.133.1.1svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485339" comment="texlive-philosophersimprint-2017.133.1.4svn41788-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485340" comment="texlive-phonenumbers-2017.133.1.2.1svn43482-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485341" comment="texlive-phonetic-2017.133.svn21871-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485342" comment="texlive-phonrule-2017.133.1.3.2svn43963-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485343" comment="texlive-photo-2017.133.svn18739-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485344" comment="texlive-physics-2017.133.1.3svn28590-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485345" comment="texlive-piano-2017.133.1.0svn21574-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485346" comment="texlive-picinpar-2017.133.1.2asvn20374-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485347" comment="texlive-pict2e-2017.133.0.0.3bsvn39591-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485348" comment="texlive-pictex-2017.133.1.1svn21943-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485349" comment="texlive-pictex2-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485350" comment="texlive-pictexsum-2017.133.svn24965-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485351" comment="texlive-piechartmp-2017.133.0.0.3.0svn19440-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485352" comment="texlive-piff-2017.133.svn21894-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485353" comment="texlive-pigpen-2017.133.0.0.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485354" comment="texlive-pigpen-fonts-2017.133.0.0.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485355" comment="texlive-pinlabel-2017.133.1.2svn24769-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485356" comment="texlive-pitex-2017.133.svn24731-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485357" comment="texlive-pittetd-2017.133.1.618svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485358" comment="texlive-pkfix-2017.133.1.7svn26032-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485360" comment="texlive-pkfix-helper-2017.133.1.4svn29725-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485362" comment="texlive-pkgloader-2017.133.0.0.5.0svn35711-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485363" comment="texlive-pkuthss-2017.133.1.7.4svn43374-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485364" comment="texlive-pl-2017.133.1.09svn36012-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485365" comment="texlive-pl-fonts-2017.133.1.09svn36012-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485366" comment="texlive-placeat-2017.133.0.0.1svn33526-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485367" comment="texlive-placeins-2017.133.2.2svn19848-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485368" comment="texlive-placeins-plain-2017.133.2.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485369" comment="texlive-plain-2017.133.3.141592653svn43076-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485370" comment="texlive-plain-doc-2017.133.svn28424-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485371" comment="texlive-plainpkg-2017.133.0.0.4asvn27765-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485372" comment="texlive-plantslabels-2017.133.1.0svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485373" comment="texlive-plari-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485374" comment="texlive-plates-2017.133.0.0.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485375" comment="texlive-platex-2017.133.svn44209-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485377" comment="texlive-platex-tools-2017.133.svn44208-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485378" comment="texlive-platexcheat-2017.133.2.0svn42918-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485379" comment="texlive-play-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485380" comment="texlive-playfair-2017.133.svn34236-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485381" comment="texlive-playfair-fonts-2017.133.svn34236-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485382" comment="texlive-plipsum-2017.133.4.3svn30353-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485383" comment="texlive-plnfss-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485384" comment="texlive-plstmary-2017.133.0.0.5csvn31088-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485385" comment="texlive-plweb-2017.133.3.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485386" comment="texlive-pmgraph-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485387" comment="texlive-pmx-2017.133.2.76svn43869-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485389" comment="texlive-pmxchords-2017.133.2.0.2svn39249-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485391" comment="texlive-pnas2009-2017.133.1.0svn16287-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485392" comment="texlive-poemscol-2017.133.2.72svn40613-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485393" comment="texlive-poetrytex-2017.133.3.0.1svn39921-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485394" comment="texlive-polski-2017.133.1.3.4svn44213-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485395" comment="texlive-poltawski-2017.133.1.101svn20075-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485396" comment="texlive-poltawski-fonts-2017.133.1.101svn20075-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485397" comment="texlive-polyglossia-2017.133.1.42.4svn40138-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485398" comment="texlive-polynom-2017.133.0.0.18svn42664-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485399" comment="texlive-polynomial-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485400" comment="texlive-polytable-2017.133.0.0.8.2svn31235-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485401" comment="texlive-postcards-2017.133.svn21641-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485402" comment="texlive-poster-mac-2017.133.1.1svn18305-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485403" comment="texlive-powerdot-2017.133.1.5asvn38984-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485404" comment="texlive-powerdot-FUBerlin-2017.133.0.0.01svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485405" comment="texlive-ppr-prv-2017.133.0.0.13csvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485406" comment="texlive-pracjourn-2017.133.0.0.4nsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485407" comment="texlive-preprint-2017.133.2011svn30447-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485408" comment="texlive-prerex-2017.133.svn40613-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485409" comment="texlive-present-2017.133.2.2svn25953-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485410" comment="texlive-presentations-2017.133.svn43949-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485411" comment="texlive-presentations-en-2017.133.svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485412" comment="texlive-pressrelease-2017.133.1.0svn35147-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485413" comment="texlive-prettyref-2017.133.3.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485414" comment="texlive-preview-2017.133.11.90svn44227-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485415" comment="texlive-prftree-2017.133.1.5svn41985-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485416" comment="texlive-printlen-2017.133.1.1asvn19847-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485417" comment="texlive-proba-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485418" comment="texlive-probsoln-2017.133.3.04svn29371-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485419" comment="texlive-procIAGssymp-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485420" comment="texlive-prodint-2017.133.svn21893-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485421" comment="texlive-prodint-fonts-2017.133.svn21893-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485422" comment="texlive-productbox-2017.133.1.1svn20886-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485423" comment="texlive-program-2017.133.3.3.14svn44214-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485424" comment="texlive-progress-2017.133.1.10svn19519-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485425" comment="texlive-progressbar-2017.133.1.0b_4svn33822-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485426" comment="texlive-proofread-2017.133.1.02svn43370-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485427" comment="texlive-prooftrees-2017.133.0.0.6svn43184-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485428" comment="texlive-properties-2017.133.0.0.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485429" comment="texlive-proposal-2017.133.svn40538-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485430" comment="texlive-prosper-2017.133.1.0hsvn33033-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485431" comment="texlive-protex-2017.133.svn41633-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485432" comment="texlive-protocol-2017.133.1.13svn25562-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485433" comment="texlive-przechlewski-book-2017.133.svn23552-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485434" comment="texlive-ps2pk-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485436" comment="texlive-psbao-2017.133.0.0.17svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485437" comment="texlive-pseudocode-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485438" comment="texlive-psfrag-2017.133.3.04svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485439" comment="texlive-psfrag-italian-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485440" comment="texlive-psfragx-2017.133.1.1svn26243-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485441" comment="texlive-psgo-2017.133.0.0.17svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485442" comment="texlive-psizzl-2017.133.0.0.35svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485443" comment="texlive-pslatex-2017.133.svn16416-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485444" comment="texlive-psnfss-2017.133.9.2asvn33946-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485445" comment="texlive-pspicture-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485446" comment="texlive-pst-2dplot-2017.133.1.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485447" comment="texlive-pst-3d-2017.133.1.10svn17257-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485448" comment="texlive-pst-3dplot-2017.133.2.04svn43703-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485449" comment="texlive-pst-abspos-2017.133.0.0.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485450" comment="texlive-pst-am-2017.133.1.02svn19591-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485451" comment="texlive-pst-arrow-2017.133.0.0.01svn41980-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485452" comment="texlive-pst-asr-2017.133.1.3svn22138-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485453" comment="texlive-pst-bar-2017.133.0.0.92svn18734-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485454" comment="texlive-pst-barcode-2017.133.0.0.16asvn43996-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485455" comment="texlive-pst-bezier-2017.133.0.0.03svn41981-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485456" comment="texlive-pst-blur-2017.133.2.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485457" comment="texlive-pst-bspline-2017.133.1.62svn40685-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485458" comment="texlive-pst-calendar-2017.133.0.0.47svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485459" comment="texlive-pst-cie-2017.133.1.05svn41223-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485460" comment="texlive-pst-circ-2017.133.2.14svn41901-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485461" comment="texlive-pst-coil-2017.133.1.07svn37377-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485462" comment="texlive-pst-cox-2017.133.0.0.98_betasvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485463" comment="texlive-pst-dbicons-2017.133.0.0.16svn17556-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485464" comment="texlive-pst-diffraction-2017.133.2.03svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485465" comment="texlive-pst-electricfield-2017.133.0.0.14svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485466" comment="texlive-pst-eps-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485467" comment="texlive-pst-eucl-2017.133.1.56svn43911-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485468" comment="texlive-pst-eucl-translation-bg-2017.133.1.3.2svn19296-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485469" comment="texlive-pst-exa-2017.133.0.0.05svn35248-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485470" comment="texlive-pst-fill-2017.133.1.01svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485471" comment="texlive-pst-fit-2017.133.0.0.01svn28155-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485472" comment="texlive-pst-fr3d-2017.133.1.10svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485473" comment="texlive-pst-fractal-2017.133.0.0.06svn16958-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485474" comment="texlive-pst-fun-2017.133.0.0.04svn17909-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485475" comment="texlive-pst-func-2017.133.0.0.85svn43912-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485476" comment="texlive-pst-gantt-2017.133.0.0.22asvn35832-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485477" comment="texlive-pst-geo-2017.133.0.0.06svn44131-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485478" comment="texlive-pst-ghsb-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485479" comment="texlive-pst-gr3d-2017.133.1.34svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485480" comment="texlive-pst-grad-2017.133.1.06svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485481" comment="texlive-pst-graphicx-2017.133.0.0.02svn21717-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485482" comment="texlive-pst-infixplot-2017.133.0.0.11svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485483" comment="texlive-pst-intersect-2017.133.0.0.4svn33210-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485484" comment="texlive-pst-jtree-2017.133.2.6svn20946-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485485" comment="texlive-pst-knot-2017.133.0.0.2svn16033-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485486" comment="texlive-pst-labo-2017.133.2.04svn39077-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485487" comment="texlive-pst-layout-2017.133.0.0.95svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485488" comment="texlive-pst-lens-2017.133.1.02svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485489" comment="texlive-pst-light3d-2017.133.0.0.12svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485490" comment="texlive-pst-magneticfield-2017.133.1.13svn18922-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485491" comment="texlive-pst-math-2017.133.0.0.63svn34786-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485492" comment="texlive-pst-mirror-2017.133.1.01svn32997-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485493" comment="texlive-pst-node-2017.133.1.39svn43015-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485494" comment="texlive-pst-ob3d-2017.133.0.0.21svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485495" comment="texlive-pst-ode-2017.133.0.0.7svn35418-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485496" comment="texlive-pst-optexp-2017.133.5.2svn35673-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485497" comment="texlive-pst-optic-2017.133.1.02svn41999-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485498" comment="texlive-pst-osci-2017.133.2.82svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485499" comment="texlive-pst-ovl-2017.133.0.0.07svn40873-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485500" comment="texlive-pst-pad-2017.133.0.0.3bsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485501" comment="texlive-pst-pdf-2017.133.1.2csvn44047-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485503" comment="texlive-pst-pdgr-2017.133.0.0.3svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485504" comment="texlive-pst-perspective-2017.133.1.05svn39585-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485505" comment="texlive-pst-platon-2017.133.0.0.01svn16538-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485506" comment="texlive-pst-plot-2017.133.1.79svn44511-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485507" comment="texlive-pst-poly-2017.133.1.63svn35062-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485508" comment="texlive-pst-pulley-2017.133.0.0.01svn25142-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485509" comment="texlive-pst-qtree-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485510" comment="texlive-pst-rubans-2017.133.1.2svn23464-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485511" comment="texlive-pst-shell-2017.133.0.0.03svn42840-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485512" comment="texlive-pst-sigsys-2017.133.1.4svn21667-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485513" comment="texlive-pst-slpe-2017.133.1.31svn24391-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485514" comment="texlive-pst-solarsystem-2017.133.0.0.12svn24995-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485515" comment="texlive-pst-solides3d-2017.133.4.32asvn43401-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485516" comment="texlive-pst-soroban-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485517" comment="texlive-pst-spectra-2017.133.0.0.91svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485518" comment="texlive-pst-spinner-2017.133.1.02svn44507-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485519" comment="texlive-pst-spirograph-2017.133.0.0.41svn35026-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485520" comment="texlive-pst-stru-2017.133.0.0.13svn38613-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485521" comment="texlive-pst-support-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485522" comment="texlive-pst-text-2017.133.1.00svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485523" comment="texlive-pst-thick-2017.133.1.0svn16369-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485524" comment="texlive-pst-tools-2017.133.0.0.06svn44320-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485525" comment="texlive-pst-tree-2017.133.1.13svn43272-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485526" comment="texlive-pst-tvz-2017.133.1.01svn23451-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485527" comment="texlive-pst-uml-2017.133.0.0.83svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485528" comment="texlive-pst-vectorian-2017.133.0.0.4svn28801-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485529" comment="texlive-pst-vehicle-2017.133.1.1svn44466-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485530" comment="texlive-pst-vowel-2017.133.1.0svn25228-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485531" comment="texlive-pst-vue3d-2017.133.1.24svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485532" comment="texlive-pst2pdf-2017.133.0.0.16svn35247-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485534" comment="texlive-pstool-2017.133.1.5csvn34015-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485535" comment="texlive-pstools-2017.133.1.68svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485537" comment="texlive-pstricks-2017.133.2.73asvn44506-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485538" comment="texlive-pstricks-add-2017.133.3.83svn44281-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485539" comment="texlive-pstricks_calcnotes-2017.133.1.2svn34363-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485540" comment="texlive-pstring-2017.133.svn42857-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485541" comment="texlive-psu-thesis-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485542" comment="texlive-ptex-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485543" comment="texlive-ptex-base-2017.133.svn43899-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485545" comment="texlive-ptex-fontmaps-2017.133.20170114.0svn44206-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485547" comment="texlive-ptex-fonts-2017.133.svn42950-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485548" comment="texlive-ptex-fonts-fonts-2017.133.svn42950-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485549" comment="texlive-ptex2pdf-2017.133.20170604.0svn44470-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485552" comment="texlive-ptext-2017.133.1.1svn30171-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485553" comment="texlive-ptptex-2017.133.0.0.91svn19440-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485554" comment="texlive-punk-2017.133.svn27388-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485555" comment="texlive-punk-latex-2017.133.1.1svn27389-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485556" comment="texlive-punknova-2017.133.1.003svn24649-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485557" comment="texlive-punknova-fonts-2017.133.1.003svn24649-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485558" comment="texlive-purifyeps-2017.133.1.1svn29725-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485560" comment="texlive-pxbase-2017.133.1.1svn44482-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485561" comment="texlive-pxchfon-2017.133.1.0svn44459-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485562" comment="texlive-pxcjkcat-2017.133.1.0svn27780-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485563" comment="texlive-pxfonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485564" comment="texlive-pxfonts-fonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485565" comment="texlive-pxgreeks-2017.133.1.0svn21838-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485566" comment="texlive-pxjahyper-2017.133.0.0.3svn40612-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485567" comment="texlive-pxpgfmark-2017.133.0.0.2svn30212-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485568" comment="texlive-pxrubrica-2017.133.1.3asvn44225-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485569" comment="texlive-pxtatescale-2017.133.0.0.4svn43009-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485570" comment="texlive-pxtxalfa-2017.133.1svn23682-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485571" comment="texlive-pygmentex-2017.133.0.0.8svn34996-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485573" comment="texlive-python-2017.133.0.0.21svn27064-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485574" comment="texlive-pythonhighlight-2017.133.svn43191-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485575" comment="texlive-pythontex-2017.133.0.0.15svn41746-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485577" comment="texlive-qcircuit-2017.133.2.5.3svn42816-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485578" comment="texlive-qcm-2017.133.2.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485579" comment="texlive-qobitree-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485580" comment="texlive-qpxqtx-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485581" comment="texlive-qrcode-2017.133.1.51svn36065-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485582" comment="texlive-qstest-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485583" comment="texlive-qsymbols-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485584" comment="texlive-qtree-2017.133.3.1bsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485585" comment="texlive-quattrocento-2017.133.svn31763-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485586" comment="texlive-quattrocento-fonts-2017.133.svn31763-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485587" comment="texlive-quicktype-2017.133.0.0.1svn42183-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485588" comment="texlive-quotchap-2017.133.1.1svn28046-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485589" comment="texlive-quoting-2017.133.0.0.1csvn32818-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485590" comment="texlive-quotmark-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485591" comment="texlive-quran-2017.133.1.252svn43360-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485592" comment="texlive-r_und_s-2017.133.1.3isvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485593" comment="texlive-raleway-2017.133.1.4svn42629-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485594" comment="texlive-raleway-fonts-2017.133.1.4svn42629-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485595" comment="texlive-ran_toks-2017.133.1.1svn44429-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485596" comment="texlive-randbild-2017.133.0.0.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485597" comment="texlive-randomlist-2017.133.1.2svn41727-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485598" comment="texlive-randomwalk-2017.133.0.0.4svn38418-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485599" comment="texlive-randtext-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485600" comment="texlive-rccol-2017.133.1.2csvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485601" comment="texlive-rcs-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485602" comment="texlive-rcs-multi-2017.133.0.0.1asvn21939-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485603" comment="texlive-rcsinfo-2017.133.1.11svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485604" comment="texlive-readarray-2017.133.2.0svn42467-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485605" comment="texlive-realboxes-2017.133.0.0.2svn23581-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485606" comment="texlive-realscripts-2017.133.0.0.3dsvn39706-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485607" comment="texlive-rec-thy-2017.133.1.3svn27225-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485608" comment="texlive-recipe-2017.133.0.0.9svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485609" comment="texlive-recipebook-2017.133.svn37026-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485610" comment="texlive-recipecard-2017.133.2.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485611" comment="texlive-rectopma-2017.133.svn19980-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485612" comment="texlive-recycle-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485613" comment="texlive-recycle-fonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485614" comment="texlive-refcheck-2017.133.1.9.1svn29128-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485615" comment="texlive-refenums-2017.133.1.1.2svn44131-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485616" comment="texlive-reflectgraphics-2017.133.0.0.2csvn40612-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485617" comment="texlive-refman-2017.133.2.0esvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485618" comment="texlive-refstyle-2017.133.0.0.5svn20318-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485619" comment="texlive-regcount-2017.133.1.0svn19979-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485620" comment="texlive-regexpatch-2017.133.0.0.2bsvn41204-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485621" comment="texlive-register-2017.133.1.6svn21127-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485622" comment="texlive-regstats-2017.133.1.0hsvn25050-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485623" comment="texlive-reledmac-2017.133.2.22.0svn44545-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485624" comment="texlive-relenc-2017.133.svn22050-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485625" comment="texlive-relsize-2017.133.4.1svn30707-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485626" comment="texlive-reotex-2017.133.1.1svn34924-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485627" comment="texlive-repeatindex-2017.133.0.0.01svn24305-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485628" comment="texlive-repere-2017.133.17.05svn44298-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485629" comment="texlive-repltext-2017.133.1.0svn33442-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485630" comment="texlive-resphilosophica-2017.133.1.31svn43631-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485631" comment="texlive-resumecls-2017.133.0.0.3.2svn38427-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485632" comment="texlive-resumemac-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485633" comment="texlive-reverxii-2017.133.svn24976-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485634" comment="texlive-revquantum-2017.133.0.0.11svn43505-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485635" comment="texlive-revtex-2017.133.4.1rsvn19652-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485636" comment="texlive-revtex4-2017.133.svn16488-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485637" comment="texlive-ribbonproofs-2017.133.1.0svn31137-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485638" comment="texlive-rjlparshap-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485639" comment="texlive-rlepsf-2017.133.svn19082-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485640" comment="texlive-rmathbr-2017.133.1.0.3svn40415-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485641" comment="texlive-rmpage-2017.133.0.0.92svn20002-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485642" comment="texlive-roboto-2017.133.svn38386-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485643" comment="texlive-roboto-fonts-2017.133.svn38386-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485644" comment="texlive-robustcommand-2017.133.0.0.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485645" comment="texlive-robustindex-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485646" comment="texlive-roex-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485647" comment="texlive-romanbar-2017.133.1.0fsvn25005-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485648" comment="texlive-romanbarpagenumber-2017.133.1.0svn36236-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485649" comment="texlive-romande-2017.133.1.008_v7_scsvn19537-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485650" comment="texlive-romande-fonts-2017.133.1.008_v7_scsvn19537-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485651" comment="texlive-romanneg-2017.133.svn20087-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485652" comment="texlive-romannum-2017.133.1.0bsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485653" comment="texlive-rosario-2017.133.1.0svn40843-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485654" comment="texlive-rosario-fonts-2017.133.1.0svn40843-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485655" comment="texlive-rotfloat-2017.133.1.2svn18292-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485656" comment="texlive-rotpages-2017.133.3.0svn18740-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485657" comment="texlive-roundbox-2017.133.0.0.2svn29675-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485658" comment="texlive-roundrect-2017.133.2.2svn39796-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485659" comment="texlive-rputover-2017.133.1.0svn43624-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485660" comment="texlive-rrgtrees-2017.133.1.1svn27322-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485661" comment="texlive-rsc-2017.133.3.1fsvn41923-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485662" comment="texlive-rsfs-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485663" comment="texlive-rsfs-fonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485664" comment="texlive-rsfso-2017.133.1.02svn37965-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485665" comment="texlive-rterface-2017.133.svn30084-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485666" comment="texlive-rtkinenc-2017.133.1.0svn20003-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485667" comment="texlive-rtklage-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485668" comment="texlive-rubik-2017.133.4.0svn44131-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485670" comment="texlive-ruhyphen-2017.133.1.6svn21081-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485671" comment="texlive-rulercompass-2017.133.1svn32392-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485672" comment="texlive-russ-2017.133.svn25209-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485673" comment="texlive-rutitlepage-2017.133.1.0svn44485-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485674" comment="texlive-rviewport-2017.133.1.0svn23739-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485675" comment="texlive-rvwrite-2017.133.1.2svn19614-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485676" comment="texlive-ryethesis-2017.133.1.36svn33945-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485677" comment="texlive-sa-tikz-2017.133.0.0.7asvn32815-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485678" comment="texlive-sageep-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485679" comment="texlive-sanitize-umlaut-2017.133.1.00svn41365-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485680" comment="texlive-sanskrit-2017.133.2.2.1svn42925-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485681" comment="texlive-sanskrit-t1-2017.133.svn35737-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485682" comment="texlive-sanskrit-t1-fonts-2017.133.svn35737-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485683" comment="texlive-sansmath-2017.133.1.1svn17997-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485684" comment="texlive-sansmathaccent-2017.133.svn30187-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485685" comment="texlive-sansmathfonts-2017.133.svn43252-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485686" comment="texlive-sansmathfonts-fonts-2017.133.svn43252-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485687" comment="texlive-sapthesis-2017.133.3.8svn39014-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485688" comment="texlive-sasnrdisplay-2017.133.0.0.93svn33120-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485689" comment="texlive-sauerj-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485690" comment="texlive-sauter-2017.133.2.4svn13293-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485691" comment="texlive-sauterfonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485692" comment="texlive-savefnmark-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485693" comment="texlive-savesym-2017.133.1.2svn31565-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485694" comment="texlive-savetrees-2017.133.2.4svn40525-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485695" comment="texlive-scale-2017.133.1.1.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485696" comment="texlive-scalebar-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485697" comment="texlive-scalerel-2017.133.1.8svn42809-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485698" comment="texlive-scanpages-2017.133.1.05asvn42633-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485699" comment="texlive-scanpages-fonts-2017.133.1.05asvn42633-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485700" comment="texlive-schemabloc-2017.133.1.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485701" comment="texlive-schemata-2017.133.0.0.8svn39510-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485702" comment="texlive-schule-2017.133.0.0.6svn37277-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485703" comment="texlive-schulschriften-2017.133.4svn35730-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485704" comment="texlive-schwalbe-chess-2017.133.2.1svn39318-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485705" comment="texlive-sciposter-2017.133.1.18svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485706" comment="texlive-sclang-prettifier-2017.133.0.0.1svn35087-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485707" comment="texlive-scratch-2017.133.0.0.2svn44490-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485708" comment="texlive-screenplay-2017.133.1.6svn27223-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485709" comment="texlive-screenplay-pkg-2017.133.1.0svn37893-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485710" comment="texlive-scrjrnl-2017.133.0.0.1svn27810-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485711" comment="texlive-scrlttr2copy-2017.133.0.0.1dsvn39734-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485712" comment="texlive-scsnowman-2017.133.1.1svn43017-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485713" comment="texlive-sdrt-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485714" comment="texlive-sduthesis-2017.133.1.2.1svn41401-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485715" comment="texlive-secdot-2017.133.1.0svn20208-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485716" comment="texlive-section-2017.133.svn20180-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485717" comment="texlive-sectionbox-2017.133.1.01svn37749-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485718" comment="texlive-sectsty-2017.133.2.0.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485719" comment="texlive-seealso-2017.133.1.2svn43595-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485720" comment="texlive-seetexk-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485722" comment="texlive-selectp-2017.133.1.0svn20185-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485723" comment="texlive-selnolig-2017.133.0.0.302svn38721-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485724" comment="texlive-semantic-2017.133.2.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485725" comment="texlive-semantic-markup-2017.133.svn42374-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485726" comment="texlive-semaphor-2017.133.svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485727" comment="texlive-semaphor-fonts-2017.133.svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485728" comment="texlive-seminar-2017.133.1.62svn34011-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485729" comment="texlive-semioneside-2017.133.0.0.41svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485730" comment="texlive-semproc-2017.133.0.0.1svn37568-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485731" comment="texlive-sepfootnotes-2017.133.0.0.3csvn41732-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485732" comment="texlive-sepnum-2017.133.2.0svn20186-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485733" comment="texlive-seqsplit-2017.133.0.0.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485734" comment="texlive-serbian-apostrophe-2017.133.svn23799-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485735" comment="texlive-serbian-date-lat-2017.133.svn23446-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485736" comment="texlive-serbian-def-cyr-2017.133.svn23734-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485737" comment="texlive-serbian-lig-2017.133.svn39096-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485738" comment="texlive-sesamanuel-2017.133.0.0.6svn36613-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485739" comment="texlive-sesstime-2017.133.1.0svn44157-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485740" comment="texlive-setdeck-2017.133.0.0.1svn40613-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485741" comment="texlive-setspace-2017.133.6.7asvn24881-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485742" comment="texlive-seuthesis-2017.133.2.1.2svn33042-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485743" comment="texlive-seuthesix-2017.133.1.0.1svn40088-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485744" comment="texlive-sf298-2017.133.1.3svn41653-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485745" comment="texlive-sffms-2017.133.2.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485746" comment="texlive-sfg-2017.133.0.0.91svn20209-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485747" comment="texlive-sfmath-2017.133.0.0.8svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485748" comment="texlive-sgame-2017.133.2.15svn30959-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485749" comment="texlive-shade-2017.133.1svn22212-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485750" comment="texlive-shadethm-2017.133.svn20319-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485751" comment="texlive-shadow-2017.133.svn20312-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485752" comment="texlive-shadowtext-2017.133.0.0.3svn26522-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485753" comment="texlive-shapepar-2017.133.2.2svn30708-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485754" comment="texlive-shapes-2017.133.1.1svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485755" comment="texlive-shdoc-2017.133.2.1bsvn41991-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485756" comment="texlive-shipunov-2017.133.1.1svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485757" comment="texlive-shorttoc-2017.133.1.3svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485758" comment="texlive-show2e-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485759" comment="texlive-showcharinbox-2017.133.0.0.1svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485760" comment="texlive-showdim-2017.133.1.2svn28918-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485761" comment="texlive-showexpl-2017.133.0.0.3osvn42677-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485762" comment="texlive-showhyphens-2017.133.0.0.5csvn39787-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485763" comment="texlive-showlabels-2017.133.1.8svn41322-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485764" comment="texlive-showtags-2017.133.1.05svn20336-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485765" comment="texlive-shuffle-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485766" comment="texlive-sidecap-2017.133.1.6fsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485767" comment="texlive-sidenotes-2017.133.1.00svn40658-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485768" comment="texlive-sides-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485769" comment="texlive-signchart-2017.133.1.01svn39707-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485770" comment="texlive-silence-2017.133.1.5bsvn27028-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485771" comment="texlive-simple-resume-cv-2017.133.svn43057-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485772" comment="texlive-simple-thesis-dissertation-2017.133.svn43058-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485773" comment="texlive-simplecd-2017.133.1.4svn29260-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485774" comment="texlive-simplecv-2017.133.1.6asvn35537-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485775" comment="texlive-simpler-wick-2017.133.1.0.0svn39074-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485776" comment="texlive-simplewick-2017.133.1.2asvn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485777" comment="texlive-simplified-latex-2017.133.svn20620-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485778" comment="texlive-simurgh-2017.133.0.0.01bsvn31719-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485779" comment="texlive-sitem-2017.133.1.0svn22136-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485780" comment="texlive-siunitx-2017.133.2.7gsvn44428-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485781" comment="texlive-skak-2017.133.1.5.2svn32758-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485782" comment="texlive-skaknew-2017.133.svn20031-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485783" comment="texlive-skaknew-fonts-2017.133.svn20031-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485784" comment="texlive-skb-2017.133.0.0.52svn22781-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485785" comment="texlive-skdoc-2017.133.1.5svn43170-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485786" comment="texlive-skeycommand-2017.133.0.0.4svn24652-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485787" comment="texlive-skeyval-2017.133.1.3svn30560-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485788" comment="texlive-skmath-2017.133.0.0.4bsvn42902-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485789" comment="texlive-skrapport-2017.133.0.0.12gsvn42903-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485790" comment="texlive-skull-2017.133.0.0.1svn25608-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485791" comment="texlive-slantsc-2017.133.2.11svn25007-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485792" comment="texlive-slideshow-2017.133.1.0svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485793" comment="texlive-smalltableof-2017.133.svn20333-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485794" comment="texlive-smartdiagram-2017.133.0.0.3bsvn42781-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485795" comment="texlive-smartref-2017.133.1.9svn20311-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485796" comment="texlive-smartunits-2017.133.1.2svn39592-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485797" comment="texlive-snapshot-2017.133.1.14svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485798" comment="texlive-snotez-2017.133.0.0.3svn30355-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485799" comment="texlive-songbook-2017.133.4.5svn18136-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485800" comment="texlive-songs-2017.133.3.0svn44553-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485801" comment="texlive-sort-by-letters-2017.133.svn27128-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485802" comment="texlive-soton-2017.133.0.0.1svn16215-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485803" comment="texlive-soul-2017.133.2.4svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485804" comment="texlive-soup-2017.133.1.0svn42992-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485805" comment="texlive-sourcecodepro-2017.133.2.6svn40597-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485806" comment="texlive-sourcecodepro-fonts-2017.133.2.6svn40597-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485807" comment="texlive-sourcesanspro-2017.133.2.6svn42852-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485808" comment="texlive-sourcesanspro-fonts-2017.133.2.6svn42852-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485809" comment="texlive-sourceserifpro-2017.133.1.2svn40598-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485810" comment="texlive-sourceserifpro-fonts-2017.133.1.2svn40598-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485811" comment="texlive-spalign-2017.133.svn42225-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485812" comment="texlive-spanish-mx-2017.133.1.1asvn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485813" comment="texlive-sparklines-2017.133.1.7svn42821-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485814" comment="texlive-spath3-2017.133.1.1svn39794-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485815" comment="texlive-spelling-2017.133.0.0.41svn30715-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485816" comment="texlive-sphdthesis-2017.133.1.0svn34374-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485817" comment="texlive-spie-2017.133.3.25svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485818" comment="texlive-splines-2017.133.0.0.2svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485819" comment="texlive-splitbib-2017.133.1.17svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485820" comment="texlive-splitindex-2017.133.1.2csvn39766-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485822" comment="texlive-spot-2017.133.1.1svn22408-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485823" comment="texlive-spotcolor-2017.133.1.2svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485824" comment="texlive-spreadtab-2017.133.0.0.4csvn35531-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485825" comment="texlive-spverbatim-2017.133.1.0svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485826" comment="texlive-sr-vorl-2017.133.1.1svn39529-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485827" comment="texlive-srbook-mem-2017.133.svn23454-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485828" comment="texlive-srcltx-2017.133.1.6svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485829" comment="texlive-srcredact-2017.133.1.0svn38710-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485831" comment="texlive-sseq-2017.133.2.01svn31585-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485832" comment="texlive-sslides-2017.133.svn32293-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485833" comment="texlive-stack-2017.133.1.00svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485834" comment="texlive-stackengine-2017.133.4.01svn43221-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485835" comment="texlive-stage-2017.133.1.00svn44100-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485836" comment="texlive-standalone-2017.133.1.2svn37875-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485837" comment="texlive-stanli-2017.133.3.0svn42765-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485838" comment="texlive-starfont-2017.133.1.2svn19982-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485839" comment="texlive-starfont-fonts-2017.133.1.2svn19982-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485840" comment="texlive-startex-2017.133.1.04svn35718-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485841" comment="texlive-statex-2017.133.1.6svn20306-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485842" comment="texlive-statex2-2017.133.2.1svn23961-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485843" comment="texlive-statistik-2017.133.0.0.03svn20334-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485844" comment="texlive-staves-2017.133.svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485845" comment="texlive-staves-fonts-2017.133.svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485846" comment="texlive-stdclsdv-2017.133.1.1asvn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485847" comment="texlive-stdpage-2017.133.0.0.6svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485848" comment="texlive-steinmetz-2017.133.1.0svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485849" comment="texlive-stellenbosch-2017.133.11asvn36696-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485850" comment="texlive-stex-2017.133.svn40320-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485851" comment="texlive-stix-2017.133.1.1.2svn36914-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485852" comment="texlive-stix-fonts-2017.133.1.1.2svn36914-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485853" comment="texlive-stmaryrd-2017.133.svn22027-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485854" comment="texlive-stmaryrd-fonts-2017.133.svn22027-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485855" comment="texlive-storebox-2017.133.1.3asvn24895-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485856" comment="texlive-storecmd-2017.133.0.0.0.2svn24431-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485857" comment="texlive-stringstrings-2017.133.1.23svn36203-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485858" comment="texlive-struktex-2017.133.141svn25916-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485859" comment="texlive-sttools-2017.133.2.0svn43684-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485860" comment="texlive-stubs-2017.133.0.0.1.1svn19440-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485861" comment="texlive-studenthandouts-2017.133.1.0svn43516-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485862" comment="texlive-sty2dtx-2017.133.2.3svn29743-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485864" comment="texlive-suanpan-2017.133.svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485865" comment="texlive-subdepth-2017.133.0.0.1svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485866" comment="texlive-subeqn-2017.133.2.0bsvn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485867" comment="texlive-subeqnarray-2017.133.2.1csvn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485868" comment="texlive-subfig-2017.133.1.3svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485869" comment="texlive-subfigmat-2017.133.1.0svn20308-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485870" comment="texlive-subfigure-2017.133.2.1.5svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485871" comment="texlive-subfiles-2017.133.1.1svn26645-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485872" comment="texlive-subfloat-2017.133.2.14svn29349-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485873" comment="texlive-substances-2017.133.0.0.2asvn40989-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485874" comment="texlive-substitutefont-2017.133.0.0.1.4svn32066-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485875" comment="texlive-substr-2017.133.1.2svn16117-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485876" comment="texlive-subsupscripts-2017.133.1.0svn16080-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485877" comment="texlive-sudoku-2017.133.1.0svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485878" comment="texlive-sudokubundle-2017.133.1.0asvn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485879" comment="texlive-suftesi-2017.133.2.9svn40238-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485880" comment="texlive-sugconf-2017.133.svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485881" comment="texlive-superiors-2017.133.1.05svn36422-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485882" comment="texlive-superiors-fonts-2017.133.1.05svn36422-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485883" comment="texlive-supertabular-2017.133.4.1asvn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485884" comment="texlive-susy-2017.133.svn19440-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485885" comment="texlive-svg-2017.133.2.00bsvn44503-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485886" comment="texlive-svg-inkscape-2017.133.svn32199-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485887" comment="texlive-svgcolor-2017.133.1.0svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485888" comment="texlive-svn-2017.133.43svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485889" comment="texlive-svn-multi-2017.133.2.4dsvn26313-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485891" comment="texlive-svn-prov-2017.133.3.1862svn18017-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485892" comment="texlive-svninfo-2017.133.0.0.7.4svn17554-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485893" comment="texlive-svrsymbols-2017.133.2.0asvn40371-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485894" comment="texlive-svrsymbols-fonts-2017.133.2.0asvn40371-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485895" comment="texlive-swebib-2017.133.svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485896" comment="texlive-swimgraf-2017.133.svn25446-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485897" comment="texlive-syllogism-2017.133.1.2svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485898" comment="texlive-symbol-2017.133.svn31835-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485899" comment="texlive-symbol-fonts-2017.133.svn31835-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485900" comment="texlive-sympytexpackage-2017.133.svn41190-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485901" comment="texlive-synctex-2017.133.svn44166-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485904" comment="texlive-synproof-2017.133.1.0svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485905" comment="texlive-syntax-2017.133.svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485906" comment="texlive-syntrace-2017.133.1.1svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485907" comment="texlive-synttree-2017.133.1.4.2svn16252-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485908" comment="texlive-systeme-2017.133.0.0.3svn32473-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485909" comment="texlive-t-angles-2017.133.svn15878-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485910" comment="texlive-t2-2017.133.svn39024-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485911" comment="texlive-tabfigures-2017.133.1.1svn25202-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485912" comment="texlive-table-fct-2017.133.1.1svn41849-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485913" comment="texlive-tableaux-2017.133.svn42413-4.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485914" comment="texlive-tablefootnote-2017.134.1.1csvn32804-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485915" comment="texlive-tableof-2017.134.1.4asvn36489-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485916" comment="texlive-tablestyles-2017.134.svn34495-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485917" comment="texlive-tablists-2017.134.0.0.0esvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485918" comment="texlive-tablor-2017.134.4.07_gsvn31855-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485919" comment="texlive-tabls-2017.134.3.5svn17255-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485920" comment="texlive-tabriz-thesis-2017.134.1.1svn29421-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485921" comment="texlive-tabstackengine-2017.134.2.01svn42610-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485922" comment="texlive-tabto-generic-2017.134.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485923" comment="texlive-tabto-ltx-2017.134.1.3svn30710-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485924" comment="texlive-tabu-2017.134.2.8svn21534-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485925" comment="texlive-tabularborder-2017.134.1.0asvn17885-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485926" comment="texlive-tabularcalc-2017.134.0.0.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485927" comment="texlive-tabularew-2017.134.0.0.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485928" comment="texlive-tabulars-e-2017.134.1.0svn21191-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485929" comment="texlive-tabulary-2017.134.0.0.10svn34368-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485930" comment="texlive-tabvar-2017.134.1.7svn28908-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485931" comment="texlive-tabvar-fonts-2017.134.1.7svn28908-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485932" comment="texlive-tagging-2017.134.svn23761-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485933" comment="texlive-tagpair-2017.134.1.1svn42138-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485934" comment="texlive-talk-2017.134.1.1svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485935" comment="texlive-tamefloats-2017.134.0.0.42svn27345-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485936" comment="texlive-tamethebeast-2017.134.1.4svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485937" comment="texlive-tap-2017.134.0.0.77svn31731-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485938" comment="texlive-tapir-2017.134.0.0.2svn20484-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485939" comment="texlive-tapir-fonts-2017.134.0.0.2svn20484-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485940" comment="texlive-tasks-2017.134.0.0.12svn41851-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485941" comment="texlive-tcldoc-2017.134.2.40svn22018-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485942" comment="texlive-tcolorbox-2017.134.4.03svn44046-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485943" comment="texlive-tdclock-2017.134.2.5svn33043-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485944" comment="texlive-tds-2017.134.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485945" comment="texlive-tdsfrmath-2017.134.1.3svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485946" comment="texlive-technics-2017.134.1.0svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485947" comment="texlive-ted-2017.134.1.06svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485948" comment="texlive-templates-fenn-2017.134.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485949" comment="texlive-templates-sommer-2017.134.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485950" comment="texlive-templatetools-2017.134.svn34495-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485951" comment="texlive-tempora-2017.134.1.05svn39596-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485952" comment="texlive-tempora-fonts-2017.134.1.05svn39596-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485953" comment="texlive-tengwarscript-2017.134.1.3.1svn34594-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485954" comment="texlive-tensor-2017.134.2.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485955" comment="texlive-termcal-2017.134.1.8svn22514-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485956" comment="texlive-termlist-2017.134.1.1svn18923-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485957" comment="texlive-termmenu-2017.134.svn37700-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485958" comment="texlive-testhyphens-2017.134.0.0.7svn38928-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485959" comment="texlive-testidx-2017.134.1.0svn42294-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485960" comment="texlive-tetex-2017.134.3.0svn44331-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485962" comment="texlive-teubner-2017.134.4.8svn40197-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485963" comment="texlive-tex-2017.134.3.14159265svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485965" comment="texlive-tex-ewd-2017.134.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485966" comment="texlive-tex-font-errors-cheatsheet-2017.134.0.0.1svn18314-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485967" comment="texlive-tex-gyre-2017.134.2.004svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485968" comment="texlive-tex-gyre-fonts-2017.134.2.004svn18651-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485969" comment="texlive-tex-gyre-math-2017.134.svn41264-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485970" comment="texlive-tex-gyre-math-fonts-2017.134.svn41264-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485971" comment="texlive-tex-ini-files-2017.134.svn40533-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485972" comment="texlive-tex-label-2017.134.svn16372-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485973" comment="texlive-tex-overview-2017.134.0.0.2svn41403-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485974" comment="texlive-tex-ps-2017.134.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485975" comment="texlive-tex-refs-2017.134.0.0.4.8svn44131-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485976" comment="texlive-tex-virtual-academy-pl-2017.134.svn34177-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485977" comment="texlive-tex4ebook-2017.134.0.0.1esvn44103-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485979" comment="texlive-tex4ht-2017.134.svn44379-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485981" comment="texlive-texapi-2017.134.1.04svn24237-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485982" comment="texlive-texbytopic-2017.134.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485983" comment="texlive-texconfig-2017.134.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485985" comment="texlive-texcount-2017.134.3.0svn31323-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485987" comment="texlive-texdef-2017.134.1.7bsvn26420-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485989" comment="texlive-texdiff-2017.134.0.0.4svn29752-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485991" comment="texlive-texdirflatten-2017.134.1.1svn29725-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485993" comment="texlive-texdoc-2017.134.svn44432-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485995" comment="texlive-texdraw-2017.134.svn31894-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485996" comment="texlive-texfot-2017.134.1.32svn39660-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485998" comment="texlive-texilikechaps-2017.134.1.0asvn28553-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009485999" comment="texlive-texilikecover-2017.134.0.0.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486000" comment="texlive-texinfo-2017.134.5.1svn43137-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486001" comment="texlive-texlive-common-2017.134.svn44191-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486002" comment="texlive-texlive-cz-2017.134.svn44347-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486003" comment="texlive-texlive-de-2017.134.svn44366-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486004" comment="texlive-texlive-en-2017.134.svn44424-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486005" comment="texlive-texlive-es-2017.134.svn44356-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486006" comment="texlive-texlive-fr-2017.134.svn44342-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486007" comment="texlive-texlive-it-2017.134.svn44357-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486008" comment="texlive-texlive-pl-2017.134.svn44343-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486009" comment="texlive-texlive-ru-2017.134.svn44444-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486010" comment="texlive-texlive-sr-2017.134.svn44341-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486011" comment="texlive-texlive-zh-cn-2017.134.svn44333-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486012" comment="texlive-texlive.infra-2017.134.svn44462-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486013" comment="texlive-texliveonfly-2017.134.svn26313-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486015" comment="texlive-texloganalyser-2017.134.0.0.9svn35584-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486017" comment="texlive-texlogos-2017.134.1.3.1svn19083-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486020" comment="texlive-texmate-2017.134.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486021" comment="texlive-texments-2017.134.0.0.2.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486022" comment="texlive-texosquery-2017.134.1.5svn44509-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486024" comment="texlive-texpower-2017.134.0.0.2svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486025" comment="texlive-texproposal-2017.134.1.4svn43151-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486026" comment="texlive-texshade-2017.134.1.24svn24716-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486027" comment="texlive-texsis-2017.134.2.18svn39057-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486029" comment="texlive-textcase-2017.134.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486030" comment="texlive-textfit-2017.134.5svn20591-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486031" comment="texlive-textglos-2017.134.1.0svn30788-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486032" comment="texlive-textgreek-2017.134.0.0.7svn44192-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486033" comment="texlive-textmerg-2017.134.2.01svn20677-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486034" comment="texlive-textopo-2017.134.1.5svn23796-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486035" comment="texlive-textpath-2017.134.1.6svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486036" comment="texlive-textpos-2017.134.1.8svn41331-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486037" comment="texlive-texvc-2017.134.1.0svn38809-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486038" comment="texlive-texware-2017.134.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486040" comment="texlive-tfrupee-2017.134.1.02svn20770-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486041" comment="texlive-tfrupee-fonts-2017.134.1.02svn20770-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486042" comment="texlive-thaienum-2017.134.0.0.2svn44140-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486043" comment="texlive-thalie-2017.134.0.0.9bsvn44048-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486044" comment="texlive-theoremref-2017.134.svn30640-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486045" comment="texlive-thesis-ekf-2017.134.2.1svn43745-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486046" comment="texlive-thesis-titlepage-fhac-2017.134.0.0.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486047" comment="texlive-thinsp-2017.134.0.0.2svn39669-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486048" comment="texlive-thmbox-2017.134.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486049" comment="texlive-thmtools-2017.134.66svn33624-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486050" comment="texlive-threadcol-2017.134.1.0svn28754-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486051" comment="texlive-threeddice-2017.134.1.0svn20675-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486052" comment="texlive-threeparttable-2017.134.svn17383-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486053" comment="texlive-threeparttablex-2017.134.0.0.3svn34206-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486054" comment="texlive-thumb-2017.134.1.0svn16549-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486055" comment="texlive-thumbpdf-2017.134.3.16svn34621-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486057" comment="texlive-thumbs-2017.134.1.0qsvn33134-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486058" comment="texlive-thumby-2017.134.0.0.1svn16736-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486059" comment="texlive-thuthesis-2017.134.5.3.2svn43609-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486060" comment="texlive-ticket-2017.134.0.0.4dsvn42280-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486061" comment="texlive-ticollege-2017.134.1.0svn36306-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486062" comment="texlive-tie-2017.134.2.4svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486064" comment="texlive-tikz-3dplot-2017.133.svn25087-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486065" comment="texlive-tikz-bayesnet-2017.133.0.0.1svn38295-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486066" comment="texlive-tikz-cd-2017.133.0.0.9esvn35485-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486067" comment="texlive-tikz-dependency-2017.133.1.2svn42454-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486068" comment="texlive-tikz-dimline-2017.133.1.0svn35805-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486069" comment="texlive-tikz-feynman-2017.133.1.1.0svn39582-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486070" comment="texlive-tikz-inet-2017.133.0.0.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486071" comment="texlive-tikz-kalender-2017.133.0.0.4asvn44393-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486072" comment="texlive-tikz-opm-2017.133.0.0.1.1svn32769-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486073" comment="texlive-tikz-optics-2017.133.0.0.2.3svn43466-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486074" comment="texlive-tikz-page-2017.133.1.0svn42039-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486075" comment="texlive-tikz-palattice-2017.133.2.3svn43442-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486076" comment="texlive-tikz-qtree-2017.133.1.2svn26108-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486077" comment="texlive-tikz-timing-2017.133.0.0.7dsvn21013-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486078" comment="texlive-tikzinclude-2017.133.1.0svn28715-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486079" comment="texlive-tikzmark-2017.133.1.3svn44475-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486080" comment="texlive-tikzorbital-2017.133.svn36439-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486081" comment="texlive-tikzpagenodes-2017.133.1.1svn27723-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486082" comment="texlive-tikzpeople-2017.133.0.0.4svn43978-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486083" comment="texlive-tikzpfeile-2017.133.1.0svn25777-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486084" comment="texlive-tikzposter-2017.133.2.0svn32732-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486085" comment="texlive-tikzscale-2017.133.0.0.2.6svn30637-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486086" comment="texlive-tikzsymbols-2017.133.4.02svn44350-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486087" comment="texlive-times-2017.133.svn35058-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486088" comment="texlive-times-fonts-2017.133.svn35058-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486089" comment="texlive-timetable-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486090" comment="texlive-timing-diagrams-2017.133.svn31491-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486091" comment="texlive-tinos-2017.133.svn42882-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486092" comment="texlive-tinos-fonts-2017.133.svn42882-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486093" comment="texlive-tipa-2017.133.1.3svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486094" comment="texlive-tipa-de-2017.133.1.3svn22005-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486095" comment="texlive-tipa-fonts-2017.133.1.3svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486096" comment="texlive-tipfr-2017.133.1.5svn38646-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486097" comment="texlive-titlecaps-2017.133.1.2svn36170-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486098" comment="texlive-titlefoot-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486099" comment="texlive-titlepages-2017.133.svn19457-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486100" comment="texlive-titlepic-2017.133.1.2svn43497-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486101" comment="texlive-titleref-2017.133.3.1svn18729-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486102" comment="texlive-titlesec-2017.133.2.10.2svn40129-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486103" comment="texlive-titling-2017.133.2.1dsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486104" comment="texlive-tkz-base-2017.133.1.16svn22961-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486105" comment="texlive-tkz-berge-2017.133.1.00csvn22891-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486106" comment="texlive-tkz-doc-2017.133.1.1csvn22959-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486107" comment="texlive-tkz-euclide-2017.133.1.16csvn22830-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486108" comment="texlive-tkz-fct-2017.133.1.16csvn22831-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486109" comment="texlive-tkz-graph-2017.133.1.00svn22832-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486110" comment="texlive-tkz-kiviat-2017.133.0.0.1svn22857-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486111" comment="texlive-tkz-linknodes-2017.133.1.0csvn22833-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486112" comment="texlive-tkz-orm-2017.133.0.0.1.4svn39408-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486113" comment="texlive-tkz-tab-2017.133.1.3csvn22834-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486114" comment="texlive-tlc2-2017.133.svn26096-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486115" comment="texlive-tocbibind-2017.133.1.5ksvn20085-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486116" comment="texlive-tocdata-2017.133.0.0.12svn42623-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486117" comment="texlive-tocloft-2017.133.2.3fsvn30209-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486118" comment="texlive-tocvsec2-2017.133.1.3asvn33146-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486119" comment="texlive-todo-2017.133.2.142svn17746-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486120" comment="texlive-todonotes-2017.133.1.0.5svn42423-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486121" comment="texlive-tokenizer-2017.133.1.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486122" comment="texlive-toolbox-2017.133.5.1svn32260-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486123" comment="texlive-tools-2017.133.svn43813-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486124" comment="texlive-topfloat-2017.133.svn19084-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486125" comment="texlive-toptesi-2017.133.5.9.06svn42586-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486126" comment="texlive-totcount-2017.133.1.2svn21178-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486127" comment="texlive-totpages-2017.133.2.00svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486128" comment="texlive-tpic2pdftex-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486130" comment="texlive-tpslifonts-2017.133.0.0.6svn42428-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486131" comment="texlive-tqft-2017.133.2.1svn44455-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486132" comment="texlive-tracklang-2017.133.1.3.4svn43605-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486133" comment="texlive-trajan-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486134" comment="texlive-trajan-fonts-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486135" comment="texlive-tram-2017.133.0.0.2svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486136" comment="texlive-translation-array-fr-2017.133.svn24344-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486137" comment="texlive-translation-arsclassica-de-2017.133.svn23803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486138" comment="texlive-translation-biblatex-de-2017.133.2.0svn42198-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486139" comment="texlive-translation-chemsym-de-2017.133.svn23804-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486140" comment="texlive-translation-dcolumn-fr-2017.133.svn24345-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486141" comment="texlive-translation-ecv-de-2017.133.svn24754-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486142" comment="texlive-translation-enumitem-de-2017.133.svn24196-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486143" comment="texlive-translation-europecv-de-2017.133.svn23840-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486144" comment="texlive-translation-filecontents-de-2017.133.svn24010-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486145" comment="texlive-translation-moreverb-de-2017.133.svn23957-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486146" comment="texlive-translation-natbib-fr-2017.133.svn25105-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486147" comment="texlive-translation-tabbing-fr-2017.133.svn24228-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486148" comment="texlive-translations-2017.133.1.6svn44381-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486149" comment="texlive-tree-dvips-2017.133.0.0.91svn21751-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486150" comment="texlive-treetex-2017.133.svn28176-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486151" comment="texlive-trfsigns-2017.133.1.01svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486152" comment="texlive-trigonometry-2017.133.svn43006-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486153" comment="texlive-trimspaces-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486154" comment="texlive-trivfloat-2017.133.1.3bsvn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486155" comment="texlive-trsym-2017.133.1.0svn18732-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486156" comment="texlive-truncate-2017.133.3.6svn18921-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486157" comment="texlive-tsemlines-2017.133.1.0svn23440-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486158" comment="texlive-ttfutils-2017.133.svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486160" comment="texlive-tucv-2017.133.1.0svn20680-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486161" comment="texlive-tudscr-2017.133.2.05msvn44480-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486162" comment="texlive-tufte-latex-2017.133.3.5.2svn37649-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486163" comment="texlive-tugboat-2017.133.2.18svn42465-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486164" comment="texlive-tugboat-plain-2017.133.1.23svn43560-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486165" comment="texlive-tui-2017.133.1.9svn27253-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486166" comment="texlive-turabian-2017.133.0.0.1.0svn36298-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486167" comment="texlive-turabian-formatting-2017.133.svn43537-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486168" comment="texlive-turkmen-2017.133.0.0.2svn17748-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486169" comment="texlive-turnstile-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486170" comment="texlive-turnthepage-2017.133.1.3asvn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486171" comment="texlive-twoinone-2017.133.svn17024-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486172" comment="texlive-twoup-2017.133.1.3svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486173" comment="texlive-txfonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486174" comment="texlive-txfonts-fonts-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486175" comment="texlive-txfontsb-2017.133.1.1svn21578-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486176" comment="texlive-txfontsb-fonts-2017.133.1.1svn21578-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486177" comment="texlive-txgreeks-2017.133.1.0svn21839-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486178" comment="texlive-txuprcal-2017.133.1.00svn43327-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486179" comment="texlive-txuprcal-fonts-2017.133.1.00svn43327-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486180" comment="texlive-type1cm-2017.133.svn21820-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486181" comment="texlive-typed-checklist-2017.133.1.4svn40389-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486182" comment="texlive-typeface-2017.133.0.0.1svn27046-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486183" comment="texlive-typehtml-2017.133.svn17134-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486184" comment="texlive-typeoutfileinfo-2017.133.0.0.31svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486186" comment="texlive-typicons-2017.133.2.0.7svn37623-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486187" comment="texlive-typicons-fonts-2017.133.2.0.7svn37623-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486188" comment="texlive-typoaid-2017.133.0.0.4.7svn44238-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486189" comment="texlive-typogrid-2017.133.0.0.21svn24994-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486190" comment="texlive-uaclasses-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486191" comment="texlive-uafthesis-2017.133.12.12svn29349-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486192" comment="texlive-uantwerpendocs-2017.133.1.8svn42912-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486193" comment="texlive-uassign-2017.133.1.01svn38459-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486194" comment="texlive-ucbthesis-2017.133.3.5svn37776-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486195" comment="texlive-ucdavisthesis-2017.133.1.3svn40772-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486196" comment="texlive-ucharcat-2017.133.0.0.03svn38907-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486197" comment="texlive-ucharclasses-2017.133.2.2.1svn40854-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486198" comment="texlive-ucs-2017.133.2.2svn35853-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487027" comment="texlive-ucthesis-2017.136.3.2svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487028" comment="texlive-udesoftec-2017.136.1.6.0svn44308-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487029" comment="texlive-uebungsblatt-2017.136.1.5.0svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487030" comment="texlive-uestcthesis-2017.136.1.1.0svn36371-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487031" comment="texlive-uhc-2017.136.svn16791-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487032" comment="texlive-uhc-fonts-2017.136.svn16791-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487033" comment="texlive-uhhassignment-2017.136.1.0svn44026-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487034" comment="texlive-uhrzeit-2017.136.0.0.2csvn39570-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487035" comment="texlive-uiucredborder-2017.136.1.00svn29974-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487036" comment="texlive-uiucthesis-2017.136.2.25svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487037" comment="texlive-ukrhyph-2017.136.svn21081-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487038" comment="texlive-ulem-2017.136.svn26785-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487039" comment="texlive-ulqda-2017.136.1.1svn26313-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487040" comment="texlive-ulthese-2017.136.4.4svn44456-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487041" comment="texlive-umbclegislation-2017.136.2016_6_8svn41348-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487042" comment="texlive-umich-thesis-2017.136.1.20svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487043" comment="texlive-uml-2017.136.0.0.11svn17476-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487044" comment="texlive-umlaute-2017.136.2.1svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487045" comment="texlive-umoline-2017.136.svn19085-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487046" comment="texlive-umthesis-2017.136.0.0.2svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487047" comment="texlive-umtypewriter-2017.136.001.002svn18651-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487048" comment="texlive-umtypewriter-fonts-2017.136.001.002svn18651-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487049" comment="texlive-unamth-template-2017.136.2.0svn33625-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487050" comment="texlive-unamthesis-2017.136.2.1svn43639-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487051" comment="texlive-undergradmath-2017.136.svn42926-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487052" comment="texlive-underlin-2017.136.1.01svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487053" comment="texlive-underoverlap-2017.136.0.0.0.1_r1svn29019-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487054" comment="texlive-underscore-2017.136.svn18261-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487055" comment="texlive-undolabl-2017.136.1.0lsvn36681-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487056" comment="texlive-unfonts-core-2017.136.svn44467-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487057" comment="texlive-unfonts-core-fonts-2017.136.svn44467-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487058" comment="texlive-unfonts-extra-2017.136.svn44465-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487059" comment="texlive-unfonts-extra-fonts-2017.136.svn44465-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487060" comment="texlive-uni-wtal-ger-2017.136.0.0.2svn31541-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487061" comment="texlive-uni-wtal-lin-2017.136.0.0.2svn31409-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487062" comment="texlive-unicode-bidi-2017.136.0.0.01svn42482-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487063" comment="texlive-unicode-data-2017.136.1.5svn41521-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487064" comment="texlive-unicode-math-2017.136.0.0.8dsvn43068-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487065" comment="texlive-unisugar-2017.136.0.0.92svn22357-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487066" comment="texlive-units-2017.136.0.0.9bsvn42428-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487067" comment="texlive-unitsdef-2017.136.0.0.2svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487068" comment="texlive-universa-2017.136.2.0svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487069" comment="texlive-universalis-2017.136.svn33860-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487070" comment="texlive-universalis-fonts-2017.136.svn33860-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487071" comment="texlive-unravel-2017.136.0.0.2svn38506-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487072" comment="texlive-unswcover-2017.136.1.0svn29476-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487073" comment="texlive-uothesis-2017.136.2.5.6svn25355-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487074" comment="texlive-uowthesis-2017.136.1.0asvn19700-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487075" comment="texlive-uowthesistitlepage-2017.136.2.0svn32626-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487076" comment="texlive-upca-2017.136.svn22511-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487077" comment="texlive-updmap-map-2017.136.svn43366-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487078" comment="texlive-uplatex-2017.136.svn44210-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487079" comment="texlive-upmethodology-2017.136.svn43453-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487080" comment="texlive-uppunctlm-2017.136.0.0.1svn42334-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487081" comment="texlive-upquote-2017.136.1.3svn26059-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487082" comment="texlive-uptex-2017.136.1.20svn42950-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487083" comment="texlive-uptex-base-2017.136.svn43900-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487084" comment="texlive-uptex-fonts-2017.136.svn42853-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487085" comment="texlive-urcls-2017.136.2.0svn43734-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487086" comment="texlive-uri-2017.136.1.0asvn21608-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487087" comment="texlive-url-2017.136.3.4svn32528-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487088" comment="texlive-urlbst-2017.136.0.0.7svn29803-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487089" comment="texlive-urwchancal-2017.136.1svn21701-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487090" comment="texlive-usebib-2017.136.1.0asvn25969-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487091" comment="texlive-ushort-2017.136.2.2svn32261-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487092" comment="texlive-uspace-2017.136.0.0.04svn42456-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487093" comment="texlive-uspatent-2017.136.1.0svn27744-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487094" comment="texlive-ut-thesis-2017.136.2.1svn38269-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487095" comment="texlive-utf8mex-2017.136.svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487096" comment="texlive-utopia-2017.136.svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487097" comment="texlive-utopia-fonts-2017.136.svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487098" comment="texlive-uwmslide-2017.136.svn27354-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487099" comment="texlive-uwthesis-2017.136.6.13svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487100" comment="texlive-vak-2017.136.svn23431-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487101" comment="texlive-vancouver-2017.136.svn34470-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487102" comment="texlive-variablelm-2017.136.1.1.1svn43686-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487103" comment="texlive-variations-2017.136.0.0.3svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487104" comment="texlive-varindex-2017.136.2.3svn32262-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487105" comment="texlive-varisize-2017.136.svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487106" comment="texlive-varsfromjobname-2017.136.1.0svn44154-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487107" comment="texlive-varwidth-2017.136.0.0.92svn24104-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487108" comment="texlive-vaucanson-g-2017.136.0.0.4svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487109" comment="texlive-vdmlisting-2017.136.1.0svn29944-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487110" comment="texlive-velthuis-2017.136.2.17svn44166-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487111" comment="texlive-velthuis-fonts-2017.136.2.17svn44166-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487112" comment="texlive-venn-2017.136.svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487113" comment="texlive-venndiagram-2017.136.1.1svn40058-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487114" comment="texlive-venturisadf-2017.136.1.005svn19444-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487115" comment="texlive-venturisadf-fonts-2017.136.1.005svn19444-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487116" comment="texlive-verbasef-2017.136.1.1svn21922-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487117" comment="texlive-verbatimbox-2017.136.3.13svn33197-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487118" comment="texlive-verbatimcopy-2017.136.0.0.06svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487119" comment="texlive-verbdef-2017.136.0.0.2svn17177-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487120" comment="texlive-verbments-2017.136.1.2svn23670-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487121" comment="texlive-verse-2017.136.2.4bsvn34017-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487122" comment="texlive-version-2017.136.2.0svn21920-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487123" comment="texlive-versions-2017.136.0.0.55svn21921-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487124" comment="texlive-versonotes-2017.136.0.0.3svn39084-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487125" comment="texlive-vertbars-2017.136.1.0bsvn20589-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487126" comment="texlive-vgrid-2017.136.0.0.1svn32457-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487127" comment="texlive-vhistory-2017.136.1.6.1svn30080-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487128" comment="texlive-visualfaq-2017.136.svn38647-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487129" comment="texlive-visualpstricks-2017.136.2.3svn39799-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487130" comment="texlive-visualtikz-2017.136.0.0.64svn43239-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487131" comment="texlive-vlna-2017.136.svn44166-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487132" comment="texlive-vmargin-2017.136.2.5svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487133" comment="texlive-vntex-2017.136.3.2svn30579-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487134" comment="texlive-vntex-fonts-2017.136.3.2svn30579-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487135" comment="texlive-vocaltract-2017.136.1svn25629-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487136" comment="texlive-volumes-2017.136.1.0svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487137" comment="texlive-voss-mathcol-2017.136.0.0.1svn32954-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487138" comment="texlive-vpe-2017.136.0.0.2svn26039-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487139" comment="texlive-vruler-2017.136.2.3svn21598-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487140" comment="texlive-vwcol-2017.136.0.0.2svn36254-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487141" comment="texlive-wadalab-2017.136.svn42428-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487142" comment="texlive-wadalab-fonts-2017.136.svn42428-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487143" comment="texlive-wallpaper-2017.136.1.10svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487144" comment="texlive-warning-2017.136.0.0.01svn22028-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487145" comment="texlive-warpcol-2017.136.1.0csvn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487146" comment="texlive-was-2017.136.svn21439-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487147" comment="texlive-wasy-2017.136.svn35831-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487148" comment="texlive-wasy2-ps-2017.136.svn35830-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487149" comment="texlive-wasy2-ps-fonts-2017.136.svn35830-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487150" comment="texlive-wasysym-2017.136.2.0svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487151" comment="texlive-web-2017.136.4.5svn44166-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487152" comment="texlive-webguide-2017.136.svn25813-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487153" comment="texlive-widetable-2017.136.1.1svn16082-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487154" comment="texlive-williams-2017.136.svn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487155" comment="texlive-withargs-2017.136.0.0.2.0svn42756-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487156" comment="texlive-wnri-2017.136.svn22459-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487157" comment="texlive-wnri-latex-2017.136.1.0bsvn22338-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487158" comment="texlive-wordcount-2017.136.1.7svn41381-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487159" comment="texlive-wordlike-2017.136.1.2bsvn15878-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487160" comment="texlive-wrapfig-2017.136.3.6svn22048-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487161" comment="texlive-wsemclassic-2017.136.1.0.1svn31532-10.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486342" comment="texlive-wsuipa-2017.133.svn25469-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486343" comment="texlive-wtref-2017.133.0.0.3.2svn42981-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486344" comment="texlive-xargs-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486345" comment="texlive-xassoccnt-2017.133.1.4svn44127-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486346" comment="texlive-xcharter-2017.133.1.08svn43465-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486347" comment="texlive-xcharter-fonts-2017.133.1.08svn43465-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486348" comment="texlive-xcite-2017.133.1.0svn23783-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486349" comment="texlive-xcjk2uni-2017.133.0.0.6svn41121-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486350" comment="texlive-xcntperchap-2017.133.0.0.4svn44128-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486351" comment="texlive-xcolor-2017.133.2.12svn41044-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486352" comment="texlive-xcolor-material-2017.133.0.0.1svn42289-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486353" comment="texlive-xcolor-solarized-2017.133.0.0.4svn41809-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486354" comment="texlive-xcomment-2017.133.1.3svn20031-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486355" comment="texlive-xcookybooky-2017.133.1.5svn36435-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486356" comment="texlive-xdoc-2017.133.prot2.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486357" comment="texlive-xduthesis-2017.133.1.00svn39694-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486358" comment="texlive-xdvi-2017.133.22.87.03svn44166-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486360" comment="texlive-xebaposter-2017.133.2.51svn42046-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486361" comment="texlive-xecjk-2017.133.3.4.8svn44370-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486362" comment="texlive-xecolor-2017.133.0.0.1svn29660-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486363" comment="texlive-xecyr-2017.133.1.1svn20221-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486364" comment="texlive-xeindex-2017.133.0.0.3svn35756-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486365" comment="texlive-xellipsis-2017.133.1.2svn42764-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486366" comment="texlive-xepersian-2017.133.18.7svn44547-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486367" comment="texlive-xesearch-2017.133.svn16041-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486368" comment="texlive-xespotcolor-2017.133.2.0asvn40118-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486369" comment="texlive-xetex-2017.133.svn41438-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486371" comment="texlive-xetex-devanagari-2017.133.0.0.5svn34296-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486372" comment="texlive-xetex-itrans-2017.133.4.2svn35088-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486373" comment="texlive-xetex-pstricks-2017.133.svn17055-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486374" comment="texlive-xetex-tibetan-2017.133.0.0.1svn28847-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486375" comment="texlive-xetexconfig-2017.133.svn41133-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486376" comment="texlive-xetexfontinfo-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486377" comment="texlive-xetexko-2017.133.2.16svn43173-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486378" comment="texlive-xetexref-2017.133.svn30636-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486379" comment="texlive-xevlna-2017.133.1.1svn43864-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486380" comment="texlive-xfor-2017.133.1.05svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486381" comment="texlive-xgreek-2017.133.3.0svn43222-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486382" comment="texlive-xhfill-2017.133.1.01svn22575-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486383" comment="texlive-xifthen-2017.133.1.4.0svn38929-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486384" comment="texlive-xii-2017.133.svn31683-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486385" comment="texlive-xint-2017.133.1.2ksvn42892-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486386" comment="texlive-xits-2017.133.1.108svn32763-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486387" comment="texlive-xits-fonts-2017.133.1.108svn32763-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486388" comment="texlive-xkeyval-2017.133.2.7asvn35741-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486389" comment="texlive-xlop-2017.133.0.0.26svn42899-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486390" comment="texlive-xltxtra-2017.133.0.0.6svn39453-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486391" comment="texlive-xmltex-2017.133.0.0.8svn40855-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486393" comment="texlive-xmltexconfig-2017.133.svn35743-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486394" comment="texlive-xmpincl-2017.133.2.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486395" comment="texlive-xnewcommand-2017.133.1.2svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486396" comment="texlive-xoptarg-2017.133.1.0svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486397" comment="texlive-xpatch-2017.133.0.0.2svn27897-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486398" comment="texlive-xpeek-2017.133.0.0.2svn27442-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486399" comment="texlive-xpiano-2017.133.1.0svn37604-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486400" comment="texlive-xpicture-2017.133.1.2asvn28770-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486401" comment="texlive-xpinyin-2017.133.2.4svn41940-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486402" comment="texlive-xprintlen-2017.133.1.0svn35928-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486403" comment="texlive-xpunctuate-2017.133.1.0svn26641-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486404" comment="texlive-xq-2017.133.0.0.4svn35211-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486405" comment="texlive-xsavebox-2017.133.0.0.6svn43589-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486406" comment="texlive-xsim-2017.133.0.0.8asvn44430-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486407" comment="texlive-xskak-2017.133.1.4svn35945-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486408" comment="texlive-xstring-2017.133.1.7csvn31900-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486409" comment="texlive-xtab-2017.133.2.3fsvn23347-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486410" comment="texlive-xunicode-2017.133.0.0.981svn30466-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486411" comment="texlive-xwatermark-2017.133.1.5.2dsvn28090-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486412" comment="texlive-xyling-2017.133.1.1svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486413" comment="texlive-xymtex-2017.133.5.06svn32182-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486414" comment="texlive-xypic-2017.133.3.8.9svn31859-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486415" comment="texlive-xypic-fonts-2017.133.3.8.9svn31859-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486416" comment="texlive-xypic-tut-pt-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486417" comment="texlive-xytree-2017.133.1.5svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486418" comment="texlive-yafoot-2017.133.svn19086-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486419" comment="texlive-yagusylo-2017.133.1.2svn29803-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486420" comment="texlive-yaletter-2017.133.1.1svn42830-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486421" comment="texlive-yannisgr-2017.133.svn22613-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486422" comment="texlive-yathesis-2017.133.0.0.99psvn42671-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486423" comment="texlive-yax-2017.133.1.03svn21183-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486424" comment="texlive-ycbook-2017.133.svn43171-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486425" comment="texlive-ydoc-2017.133.0.0.6alphasvn26202-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486426" comment="texlive-yfonts-2017.133.1.3svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486427" comment="texlive-yfonts-t1-2017.133.1.0svn36013-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486428" comment="texlive-yfonts-t1-fonts-2017.133.1.0svn36013-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486429" comment="texlive-yhmath-2017.133.1.1svn31155-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486430" comment="texlive-yhmath-fonts-2017.133.1.1svn31155-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486431" comment="texlive-yinit-otf-2017.133.1.0svn40207-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486432" comment="texlive-yinit-otf-fonts-2017.133.1.0svn40207-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486433" comment="texlive-york-thesis-2017.133.3.6svn23348-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486434" comment="texlive-youngtab-2017.133.1.1svn17635-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486435" comment="texlive-yplan-2017.133.svn34398-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486437" comment="texlive-ytableau-2017.133.1.3svn27430-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486438" comment="texlive-zapfchan-2017.133.svn31835-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486439" comment="texlive-zapfchan-fonts-2017.133.svn31835-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486440" comment="texlive-zapfding-2017.133.svn31835-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486441" comment="texlive-zapfding-fonts-2017.133.svn31835-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486442" comment="texlive-zed-csp-2017.133.svn17258-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486443" comment="texlive-zhmetrics-2017.133.r206svn22207-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486444" comment="texlive-zhmetrics-uptex-2017.133.1.0svn40728-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486445" comment="texlive-zhnumber-2017.133.2.4svn41123-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486446" comment="texlive-zhspacing-2017.133.svn41145-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486447" comment="texlive-ziffer-2017.133.2.1svn32279-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486448" comment="texlive-zlmtt-2017.133.1.01svn34485-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486449" comment="texlive-zwgetfdate-2017.133.svn15878-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486450" comment="texlive-zwpagelayout-2017.133.1.4dsvn28846-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486451" comment="texlive-zxjafbfont-2017.133.0.0.2svn28539-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486452" comment="texlive-zxjafont-2017.133.0.0.3svn37281-5.18 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486453" comment="texlive-zxjatype-2017.133.0.0.6svn28541-5.18 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137369" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789873" comment="libtexluajit2-2.1.0beta2-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789874" comment="texlive-texluajit-devel-2.1.0beta2-11.8.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137370" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789875" comment="texlive-2017.20170520-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789876" comment="texlive-bin-devel-2017.20170520-11.8.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137371" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789877" comment="texlive-pax-bin-2017.20170520.svn10843-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137372" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789878" comment="texlive-latexmk-bin-2017.20170520.svn10937-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137373" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789879" comment="texlive-accfonts-bin-2017.20170520.svn12688-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137374" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789880" comment="texlive-texdirflatten-bin-2017.20170520.svn12782-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137375" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789881" comment="texlive-texcount-bin-2017.20170520.svn13013-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137376" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789882" comment="texlive-pkfix-bin-2017.20170520.svn13364-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137377" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789883" comment="texlive-fragmaster-bin-2017.20170520.svn13663-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789884" comment="texlive-latex2man-bin-2017.20170520.svn13663-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789885" comment="texlive-pkfix-helper-bin-2017.20170520.svn13663-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789886" comment="texlive-purifyeps-bin-2017.20170520.svn13663-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789887" comment="texlive-svn-multi-bin-2017.20170520.svn13663-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789888" comment="texlive-texloganalyser-bin-2017.20170520.svn13663-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789889" comment="texlive-ulqda-bin-2017.20170520.svn13663-11.8.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137378" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789890" comment="texlive-latex-bin-bin-2017.20170520.svn14050-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137379" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789891" comment="texlive-pdfcrop-bin-2017.20170520.svn14387-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137380" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789892" comment="texlive-mkgrkindex-bin-2017.20170520.svn14428-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137381" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789893" comment="texlive-fig4latex-bin-2017.20170520.svn14752-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137382" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789894" comment="texlive-findhyph-bin-2017.20170520.svn14758-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137383" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789895" comment="texlive-listings-ext-bin-2017.20170520.svn15093-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137384" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789896" comment="texlive-texdiff-bin-2017.20170520.svn15506-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137385" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789897" comment="texlive-cachepic-bin-2017.20170520.svn15543-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137386" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789898" comment="texlive-perltex-bin-2017.20170520.svn16181-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137387" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789899" comment="texlive-bibexport-bin-2017.20170520.svn16219-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137388" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789900" comment="texlive-latexdiff-bin-2017.20170520.svn16420-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137389" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789901" comment="texlive-de-macro-bin-2017.20170520.svn17399-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137390" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789902" comment="texlive-bundledoc-bin-2017.20170520.svn17794-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137391" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789903" comment="texlive-pdfjam-bin-2017.20170520.svn17868-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137392" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789904" comment="texlive-epstopdf-bin-2017.20170520.svn18336-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137393" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789905" comment="texlive-mptopdf-bin-2017.20170520.svn18674-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137394" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789906" comment="texlive-authorindex-bin-2017.20170520.svn18790-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137395" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789907" comment="texlive-ebong-bin-2017.20170520.svn21000-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137396" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789908" comment="texlive-sty2dtx-bin-2017.20170520.svn21215-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137397" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789909" comment="texlive-texdef-bin-2017.20170520.svn21802-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137398" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789910" comment="texlive-platex-bin-2017.20170520.svn22859-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137399" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789911" comment="texlive-urlbst-bin-2017.20170520.svn23262-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137400" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789912" comment="texlive-mf2pt1-bin-2017.20170520.svn23406-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137401" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789913" comment="texlive-match_parens-bin-2017.20170520.svn23500-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137402" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789914" comment="texlive-mathspic-bin-2017.20170520.svn23661-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137403" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789915" comment="texlive-ctanupload-bin-2017.20170520.svn23866-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137404" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789916" comment="texlive-ctanify-bin-2017.20170520.svn24061-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137405" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789917" comment="texlive-texliveonfly-bin-2017.20170520.svn24062-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137406" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789918" comment="texlive-dosepsbin-bin-2017.20170520.svn24759-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137407" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789919" comment="texlive-latexfileversion-bin-2017.20170520.svn25012-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137408" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789920" comment="texlive-checkcites-bin-2017.20170520.svn25623-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137409" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789921" comment="texlive-typeoutfileinfo-bin-2017.20170520.svn25648-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137410" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789922" comment="texlive-exceltex-bin-2017.20170520.svn25860-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137411" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789923" comment="texlive-pedigree-perl-bin-2017.20170520.svn25962-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137412" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789924" comment="texlive-fontools-bin-2017.20170520.svn25997-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137413" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789925" comment="texlive-listbib-bin-2017.20170520.svn26126-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137414" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789926" comment="texlive-uplatex-bin-2017.20170520.svn26326-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137415" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789927" comment="texlive-latexpand-bin-2017.20170520.svn27025-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137416" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789928" comment="texlive-a2ping-bin-2017.20170520.svn27321-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137417" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789929" comment="texlive-adhocfilelist-bin-2017.20170520.svn28038-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137418" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789930" comment="texlive-ltxfileinfo-bin-2017.20170520.svn29005-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137419" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789931" comment="texlive-dtxgen-bin-2017.20170520.svn29031-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137420" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789932" comment="texlive-arara-bin-2017.20170520.svn29036-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137421" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789933" comment="texlive-epspdf-bin-2017.20170520.svn29050-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137422" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789934" comment="texlive-lua2dox-bin-2017.20170520.svn29053-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137423" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789935" comment="texlive-pst2pdf-bin-2017.20170520.svn29333-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137424" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789936" comment="texlive-ptex2pdf-bin-2017.20170520.svn29335-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137425" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789937" comment="texlive-pfarrei-bin-2017.20170520.svn29348-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137426" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789938" comment="texlive-splitindex-bin-2017.20170520.svn29688-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137427" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789939" comment="texlive-cyrillic-bin-bin-2017.20170520.svn29741-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789940" comment="texlive-fontinst-bin-2017.20170520.svn29741-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789941" comment="texlive-texconfig-bin-2017.20170520.svn29741-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789942" comment="texlive-texdoc-bin-2017.20170520.svn29741-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789943" comment="texlive-tpic2pdftex-bin-2017.20170520.svn29741-11.8.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137428" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789944" comment="texlive-amstex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789945" comment="texlive-cslatex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789946" comment="texlive-eplain-bin-2017.20170520.svn3006-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789947" comment="texlive-jadetex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789948" comment="texlive-mex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789949" comment="texlive-mltex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789950" comment="texlive-texsis-bin-2017.20170520.svn3006-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789951" comment="texlive-xmltex-bin-2017.20170520.svn3006-11.8.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137429" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494536" comment="perl-biber-2017.20170520.svn30357-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137430" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789952" comment="texlive-convbkmk-bin-2017.20170520.svn30408-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137431" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789953" comment="texlive-multibibliography-bin-2017.20170520.svn30534-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137432" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789954" comment="texlive-latex-git-log-bin-2017.20170520.svn30983-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137433" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789955" comment="texlive-pythontex-bin-2017.20170520.svn31638-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137434" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789956" comment="texlive-lilyglyphs-bin-2017.20170520.svn31696-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137435" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789957" comment="texlive-kotex-utils-bin-2017.20170520.svn32101-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137436" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789958" comment="texlive-latexindent-bin-2017.20170520.svn32150-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137437" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789959" comment="texlive-ltximg-bin-2017.20170520.svn32346-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137438" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789960" comment="texlive-pmxchords-bin-2017.20170520.svn32405-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137439" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789961" comment="texlive-rubik-bin-2017.20170520.svn32919-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137440" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789962" comment="texlive-texfot-bin-2017.20170520.svn33155-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137441" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789963" comment="texlive-mkpic-bin-2017.20170520.svn33688-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137442" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789964" comment="texlive-csplain-bin-2017.20170520.svn33902-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137443" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789965" comment="texlive-context-bin-2017.20170520.svn34112-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137444" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789966" comment="texlive-yplan-bin-2017.20170520.svn34398-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137445" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789967" comment="texlive-luaotfload-bin-2017.20170520.svn34647-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137446" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789968" comment="texlive-getmap-bin-2017.20170520.svn34971-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137447" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789969" comment="texlive-pygmentex-bin-2017.20170520.svn34996-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137448" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789970" comment="texlive-musixtex-bin-2017.20170520.svn37026-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137449" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789971" comment="texlive-cjk-gs-integrate-bin-2017.20170520.svn37223-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137450" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789972" comment="texlive-pdfbook2-bin-2017.20170520.svn37537-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137451" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494573" comment="texlive-diadia-bin-2017.20170520.svn37645-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137452" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789973" comment="texlive-make4ht-bin-2017.20170520.svn37750-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137453" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789974" comment="texlive-tex4ebook-bin-2017.20170520.svn37771-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137454" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789975" comment="texlive-glossaries-bin-2017.20170520.svn37813-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137455" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789976" comment="texlive-checklistings-bin-2017.20170520.svn38300-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137456" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789977" comment="texlive-srcredact-bin-2017.20170520.svn38710-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137457" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789978" comment="texlive-makedtx-bin-2017.20170520.svn38769-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137458" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789979" comment="texlive-petri-nets-bin-2017.20170520.svn39165-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137459" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789980" comment="texlive-dvipdfmx-bin-2017.20170520.svn40273-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137460" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789981" comment="texlive-pdfxup-bin-2017.20170520.svn40690-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137461" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789982" comment="texlive-dvisvgm-bin-2017.20170520.svn40987-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137462" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789983" comment="texlive-lollipop-bin-2017.20170520.svn41465-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137463" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789984" comment="texlive-pdflatexpicscale-bin-2017.20170520.svn41779-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137464" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789985" comment="texlive-latex-papersize-bin-2017.20170520.svn42296-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137465" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789986" comment="texlive-latex2nemeth-bin-2017.20170520.svn42300-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137466" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494548" comment="texlive-biber-bin-2017.20170520.svn42679-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137467" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789987" comment="texlive-lwarp-bin-2017.20170520.svn43292-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137468" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789988" comment="texlive-texosquery-bin-2017.20170520.svn43596-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137469" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789989" comment="texlive-asymptote-bin-2017.20170520.svn43843-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137470" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789990" comment="texlive-crossrefware-bin-2017.20170520.svn43866-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137471" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789991" comment="texlive-tetex-bin-2017.20170520.svn43957-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137472" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009789992" comment="texlive-afm2pl-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789993" comment="texlive-aleph-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789994" comment="texlive-autosp-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789995" comment="texlive-bibtex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789996" comment="texlive-bibtex8-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789997" comment="texlive-bibtexu-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789998" comment="texlive-chktex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009789999" comment="texlive-cjkutils-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790000" comment="texlive-ctie-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790001" comment="texlive-cweb-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790002" comment="texlive-detex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790003" comment="texlive-dtl-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790004" comment="texlive-dvicopy-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790005" comment="texlive-dvidvi-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790006" comment="texlive-dviljk-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790007" comment="texlive-dvipng-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790008" comment="texlive-dvipos-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790009" comment="texlive-dvips-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790010" comment="texlive-fontware-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790011" comment="texlive-gregoriotex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790012" comment="texlive-gsftopk-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790013" comment="texlive-kpathsea-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790014" comment="texlive-lacheck-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790015" comment="texlive-lcdftypetools-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790016" comment="texlive-m-tx-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790017" comment="texlive-makeindex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790018" comment="texlive-metafont-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790019" comment="texlive-metapost-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790020" comment="texlive-mflua-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790021" comment="texlive-mfware-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790022" comment="texlive-musixtnt-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790023" comment="texlive-omegaware-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790024" comment="texlive-patgen-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790025" comment="texlive-pdftex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790026" comment="texlive-pdftools-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790027" comment="texlive-pmx-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790028" comment="texlive-ps2pk-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790029" comment="texlive-pstools-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790030" comment="texlive-ptex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790031" comment="texlive-seetexk-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790032" comment="texlive-synctex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790033" comment="texlive-tex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790034" comment="texlive-tex4ht-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790035" comment="texlive-texware-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790036" comment="texlive-tie-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790037" comment="texlive-ttfutils-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790038" comment="texlive-uptex-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790039" comment="texlive-velthuis-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790040" comment="texlive-vlna-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790041" comment="texlive-web-bin-2017.20170520.svn44143-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790042" comment="texlive-xdvi-bin-2017.20170520.svn44143-11.8.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137473" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790043" comment="texlive-ptex-fontmaps-bin-2017.20170520.svn44206-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137474" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790044" comment="texlive-xetex-bin-2017.20170520.svn44361-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137475" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790045" comment="texlive-dviinfox-bin-2017.20170520.svn44515-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137476" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790046" comment="texlive-luatex-bin-2017.20170520.svn44549-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137477" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790047" comment="texlive-vpe-bin-2017.20170520.svn6897-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137478" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790048" comment="texlive-thumbpdf-bin-2017.20170520.svn6898-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137479" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790049" comment="texlive-pst-pdf-bin-2017.20170520.svn7838-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137480" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790050" comment="texlive-dviasm-bin-2017.20170520.svn8329-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137481" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790051" comment="texlive-mkjobtexmf-bin-2017.20170520.svn8457-11.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137482" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790052" comment="libtexlua52-5-5.2.4-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790053" comment="texlive-texlua-devel-5.2.4-11.8.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137483" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109673" ref_url="https://bugzilla.suse.com/1109673" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17407" ref_url="https://www.suse.com/security/cve/CVE-2018-17407/" source="CVE"/>
		<description>
This update for texlive fixes the following issue:

- CVE-2018-17407: Prevent buffer overflow when handling of Type 1 fonts allowed
  arbitrary code execution when a malicious font was loaded by one of the
  vulnerable tools: pdflatex, pdftex, dvips, or luatex (bsc#1109673).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-12"/>
	<updated date="2018-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109673">SUSE bug 1109673</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17407/">CVE-2018-17407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790054" comment="libkpathsea6-6.2.3-11.8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790055" comment="texlive-kpathsea-devel-6.2.3-11.8.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137484" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1074317" ref_url="https://bugzilla.suse.com/1074317" source="BUGZILLA"/>
		<reference ref_id="1082332" ref_url="https://bugzilla.suse.com/1082332" source="BUGZILLA"/>
		<reference ref_id="1082825" ref_url="https://bugzilla.suse.com/1082825" source="BUGZILLA"/>
		<reference ref_id="1086408" ref_url="https://bugzilla.suse.com/1086408" source="BUGZILLA"/>
		<reference ref_id="1092949" ref_url="https://bugzilla.suse.com/1092949" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-11613" ref_url="https://www.suse.com/security/cve/CVE-2017-11613/" source="CVE"/>
		<reference ref_id="CVE-2017-18013" ref_url="https://www.suse.com/security/cve/CVE-2017-18013/" source="CVE"/>
		<reference ref_id="CVE-2018-10963" ref_url="https://www.suse.com/security/cve/CVE-2018-10963/" source="CVE"/>
		<reference ref_id="CVE-2018-7456" ref_url="https://www.suse.com/security/cve/CVE-2018-7456/" source="CVE"/>
		<reference ref_id="CVE-2018-8905" ref_url="https://www.suse.com/security/cve/CVE-2018-8905/" source="CVE"/>
		<description>
This update for tiff fixes the following security issues:

These security issues were fixed:

- CVE-2017-18013: Fixed a NULL pointer dereference in the
  tif_print.cTIFFPrintDirectory function that could have lead to denial of
  service (bsc#1074317).
- CVE-2018-10963: Fixed an assertion failure in the TIFFWriteDirectorySec()
  function in tif_dirwrite.c, which allowed remote attackers to cause a denial
  of service via a crafted file (bsc#1092949).
- CVE-2018-7456: Prevent a NULL Pointer dereference in the function
  TIFFPrintDirectory when using the tiffinfo tool to print crafted TIFF
  information, a different vulnerability than CVE-2017-18013 (bsc#1082825).
- CVE-2017-11613: Prevent denial of service in the TIFFOpen function. During
  the TIFFOpen process, td_imagelength is not checked. The value of
  td_imagelength can be directly controlled by an input file. In the
  ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called
  based on td_imagelength. If the value of td_imagelength is set close to the
  amount of system memory, it will hang the system or trigger the OOM killer
  (bsc#1082332).
- CVE-2018-8905: Prevent heap-based buffer overflow in the function
  LZWDecodeCompat via a crafted TIFF file (bsc#1086408).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-05"/>
	<updated date="2018-07-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1074317">SUSE bug 1074317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082332">SUSE bug 1082332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082825">SUSE bug 1082825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086408">SUSE bug 1086408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092949">SUSE bug 1092949</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11613/">CVE-2017-11613</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18013/">CVE-2017-18013</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10963/">CVE-2018-10963</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7456/">CVE-2018-7456</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-8905/">CVE-2018-8905</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494440" comment="libtiff5-32bit-4.0.9-5.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137485" version="1" class="patch">
	<metadata>
		<title>typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-1856" ref_url="https://www.suse.com/security/cve/CVE-2016-1856/" source="CVE"/>
		<reference ref_id="CVE-2016-1857" ref_url="https://www.suse.com/security/cve/CVE-2016-1857/" source="CVE"/>
		<reference ref_id="CVE-2016-4590" ref_url="https://www.suse.com/security/cve/CVE-2016-4590/" source="CVE"/>
		<reference ref_id="CVE-2016-4591" ref_url="https://www.suse.com/security/cve/CVE-2016-4591/" source="CVE"/>
		<reference ref_id="CVE-2016-4622" ref_url="https://www.suse.com/security/cve/CVE-2016-4622/" source="CVE"/>
		<reference ref_id="CVE-2016-4624" ref_url="https://www.suse.com/security/cve/CVE-2016-4624/" source="CVE"/>
		<reference ref_id="CVE-2016-4692" ref_url="https://www.suse.com/security/cve/CVE-2016-4692/" source="CVE"/>
		<reference ref_id="CVE-2016-4743" ref_url="https://www.suse.com/security/cve/CVE-2016-4743/" source="CVE"/>
		<reference ref_id="CVE-2016-7586" ref_url="https://www.suse.com/security/cve/CVE-2016-7586/" source="CVE"/>
		<reference ref_id="CVE-2016-7587" ref_url="https://www.suse.com/security/cve/CVE-2016-7587/" source="CVE"/>
		<reference ref_id="CVE-2016-7589" ref_url="https://www.suse.com/security/cve/CVE-2016-7589/" source="CVE"/>
		<reference ref_id="CVE-2016-7592" ref_url="https://www.suse.com/security/cve/CVE-2016-7592/" source="CVE"/>
		<reference ref_id="CVE-2016-7598" ref_url="https://www.suse.com/security/cve/CVE-2016-7598/" source="CVE"/>
		<reference ref_id="CVE-2016-7599" ref_url="https://www.suse.com/security/cve/CVE-2016-7599/" source="CVE"/>
		<reference ref_id="CVE-2016-7610" ref_url="https://www.suse.com/security/cve/CVE-2016-7610/" source="CVE"/>
		<reference ref_id="CVE-2016-7623" ref_url="https://www.suse.com/security/cve/CVE-2016-7623/" source="CVE"/>
		<reference ref_id="CVE-2016-7632" ref_url="https://www.suse.com/security/cve/CVE-2016-7632/" source="CVE"/>
		<reference ref_id="CVE-2016-7635" ref_url="https://www.suse.com/security/cve/CVE-2016-7635/" source="CVE"/>
		<reference ref_id="CVE-2016-7639" ref_url="https://www.suse.com/security/cve/CVE-2016-7639/" source="CVE"/>
		<reference ref_id="CVE-2016-7641" ref_url="https://www.suse.com/security/cve/CVE-2016-7641/" source="CVE"/>
		<reference ref_id="CVE-2016-7645" ref_url="https://www.suse.com/security/cve/CVE-2016-7645/" source="CVE"/>
		<reference ref_id="CVE-2016-7652" ref_url="https://www.suse.com/security/cve/CVE-2016-7652/" source="CVE"/>
		<reference ref_id="CVE-2016-7654" ref_url="https://www.suse.com/security/cve/CVE-2016-7654/" source="CVE"/>
		<reference ref_id="CVE-2016-7656" ref_url="https://www.suse.com/security/cve/CVE-2016-7656/" source="CVE"/>
		<reference ref_id="CVE-2017-1000121" ref_url="https://www.suse.com/security/cve/CVE-2017-1000121/" source="CVE"/>
		<reference ref_id="CVE-2017-1000122" ref_url="https://www.suse.com/security/cve/CVE-2017-1000122/" source="CVE"/>
		<reference ref_id="CVE-2017-13788" ref_url="https://www.suse.com/security/cve/CVE-2017-13788/" source="CVE"/>
		<reference ref_id="CVE-2017-13798" ref_url="https://www.suse.com/security/cve/CVE-2017-13798/" source="CVE"/>
		<reference ref_id="CVE-2017-13803" ref_url="https://www.suse.com/security/cve/CVE-2017-13803/" source="CVE"/>
		<reference ref_id="CVE-2017-13856" ref_url="https://www.suse.com/security/cve/CVE-2017-13856/" source="CVE"/>
		<reference ref_id="CVE-2017-13866" ref_url="https://www.suse.com/security/cve/CVE-2017-13866/" source="CVE"/>
		<reference ref_id="CVE-2017-13870" ref_url="https://www.suse.com/security/cve/CVE-2017-13870/" source="CVE"/>
		<reference ref_id="CVE-2017-13884" ref_url="https://www.suse.com/security/cve/CVE-2017-13884/" source="CVE"/>
		<reference ref_id="CVE-2017-13885" ref_url="https://www.suse.com/security/cve/CVE-2017-13885/" source="CVE"/>
		<reference ref_id="CVE-2017-2350" ref_url="https://www.suse.com/security/cve/CVE-2017-2350/" source="CVE"/>
		<reference ref_id="CVE-2017-2354" ref_url="https://www.suse.com/security/cve/CVE-2017-2354/" source="CVE"/>
		<reference ref_id="CVE-2017-2355" ref_url="https://www.suse.com/security/cve/CVE-2017-2355/" source="CVE"/>
		<reference ref_id="CVE-2017-2356" ref_url="https://www.suse.com/security/cve/CVE-2017-2356/" source="CVE"/>
		<reference ref_id="CVE-2017-2362" ref_url="https://www.suse.com/security/cve/CVE-2017-2362/" source="CVE"/>
		<reference ref_id="CVE-2017-2363" ref_url="https://www.suse.com/security/cve/CVE-2017-2363/" source="CVE"/>
		<reference ref_id="CVE-2017-2364" ref_url="https://www.suse.com/security/cve/CVE-2017-2364/" source="CVE"/>
		<reference ref_id="CVE-2017-2365" ref_url="https://www.suse.com/security/cve/CVE-2017-2365/" source="CVE"/>
		<reference ref_id="CVE-2017-2366" ref_url="https://www.suse.com/security/cve/CVE-2017-2366/" source="CVE"/>
		<reference ref_id="CVE-2017-2369" ref_url="https://www.suse.com/security/cve/CVE-2017-2369/" source="CVE"/>
		<reference ref_id="CVE-2017-2371" ref_url="https://www.suse.com/security/cve/CVE-2017-2371/" source="CVE"/>
		<reference ref_id="CVE-2017-2373" ref_url="https://www.suse.com/security/cve/CVE-2017-2373/" source="CVE"/>
		<reference ref_id="CVE-2017-2496" ref_url="https://www.suse.com/security/cve/CVE-2017-2496/" source="CVE"/>
		<reference ref_id="CVE-2017-2510" ref_url="https://www.suse.com/security/cve/CVE-2017-2510/" source="CVE"/>
		<reference ref_id="CVE-2017-2538" ref_url="https://www.suse.com/security/cve/CVE-2017-2538/" source="CVE"/>
		<reference ref_id="CVE-2017-2539" ref_url="https://www.suse.com/security/cve/CVE-2017-2539/" source="CVE"/>
		<reference ref_id="CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715/" source="CVE"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2017-7006" ref_url="https://www.suse.com/security/cve/CVE-2017-7006/" source="CVE"/>
		<reference ref_id="CVE-2017-7011" ref_url="https://www.suse.com/security/cve/CVE-2017-7011/" source="CVE"/>
		<reference ref_id="CVE-2017-7012" ref_url="https://www.suse.com/security/cve/CVE-2017-7012/" source="CVE"/>
		<reference ref_id="CVE-2017-7018" ref_url="https://www.suse.com/security/cve/CVE-2017-7018/" source="CVE"/>
		<reference ref_id="CVE-2017-7019" ref_url="https://www.suse.com/security/cve/CVE-2017-7019/" source="CVE"/>
		<reference ref_id="CVE-2017-7020" ref_url="https://www.suse.com/security/cve/CVE-2017-7020/" source="CVE"/>
		<reference ref_id="CVE-2017-7030" ref_url="https://www.suse.com/security/cve/CVE-2017-7030/" source="CVE"/>
		<reference ref_id="CVE-2017-7034" ref_url="https://www.suse.com/security/cve/CVE-2017-7034/" source="CVE"/>
		<reference ref_id="CVE-2017-7037" ref_url="https://www.suse.com/security/cve/CVE-2017-7037/" source="CVE"/>
		<reference ref_id="CVE-2017-7038" ref_url="https://www.suse.com/security/cve/CVE-2017-7038/" source="CVE"/>
		<reference ref_id="CVE-2017-7039" ref_url="https://www.suse.com/security/cve/CVE-2017-7039/" source="CVE"/>
		<reference ref_id="CVE-2017-7040" ref_url="https://www.suse.com/security/cve/CVE-2017-7040/" source="CVE"/>
		<reference ref_id="CVE-2017-7041" ref_url="https://www.suse.com/security/cve/CVE-2017-7041/" source="CVE"/>
		<reference ref_id="CVE-2017-7042" ref_url="https://www.suse.com/security/cve/CVE-2017-7042/" source="CVE"/>
		<reference ref_id="CVE-2017-7043" ref_url="https://www.suse.com/security/cve/CVE-2017-7043/" source="CVE"/>
		<reference ref_id="CVE-2017-7046" ref_url="https://www.suse.com/security/cve/CVE-2017-7046/" source="CVE"/>
		<reference ref_id="CVE-2017-7048" ref_url="https://www.suse.com/security/cve/CVE-2017-7048/" source="CVE"/>
		<reference ref_id="CVE-2017-7049" ref_url="https://www.suse.com/security/cve/CVE-2017-7049/" source="CVE"/>
		<reference ref_id="CVE-2017-7052" ref_url="https://www.suse.com/security/cve/CVE-2017-7052/" source="CVE"/>
		<reference ref_id="CVE-2017-7055" ref_url="https://www.suse.com/security/cve/CVE-2017-7055/" source="CVE"/>
		<reference ref_id="CVE-2017-7056" ref_url="https://www.suse.com/security/cve/CVE-2017-7056/" source="CVE"/>
		<reference ref_id="CVE-2017-7059" ref_url="https://www.suse.com/security/cve/CVE-2017-7059/" source="CVE"/>
		<reference ref_id="CVE-2017-7061" ref_url="https://www.suse.com/security/cve/CVE-2017-7061/" source="CVE"/>
		<reference ref_id="CVE-2017-7064" ref_url="https://www.suse.com/security/cve/CVE-2017-7064/" source="CVE"/>
		<reference ref_id="CVE-2017-7081" ref_url="https://www.suse.com/security/cve/CVE-2017-7081/" source="CVE"/>
		<reference ref_id="CVE-2017-7087" ref_url="https://www.suse.com/security/cve/CVE-2017-7087/" source="CVE"/>
		<reference ref_id="CVE-2017-7089" ref_url="https://www.suse.com/security/cve/CVE-2017-7089/" source="CVE"/>
		<reference ref_id="CVE-2017-7090" ref_url="https://www.suse.com/security/cve/CVE-2017-7090/" source="CVE"/>
		<reference ref_id="CVE-2017-7091" ref_url="https://www.suse.com/security/cve/CVE-2017-7091/" source="CVE"/>
		<reference ref_id="CVE-2017-7092" ref_url="https://www.suse.com/security/cve/CVE-2017-7092/" source="CVE"/>
		<reference ref_id="CVE-2017-7093" ref_url="https://www.suse.com/security/cve/CVE-2017-7093/" source="CVE"/>
		<reference ref_id="CVE-2017-7094" ref_url="https://www.suse.com/security/cve/CVE-2017-7094/" source="CVE"/>
		<reference ref_id="CVE-2017-7095" ref_url="https://www.suse.com/security/cve/CVE-2017-7095/" source="CVE"/>
		<reference ref_id="CVE-2017-7096" ref_url="https://www.suse.com/security/cve/CVE-2017-7096/" source="CVE"/>
		<reference ref_id="CVE-2017-7098" ref_url="https://www.suse.com/security/cve/CVE-2017-7098/" source="CVE"/>
		<reference ref_id="CVE-2017-7099" ref_url="https://www.suse.com/security/cve/CVE-2017-7099/" source="CVE"/>
		<reference ref_id="CVE-2017-7100" ref_url="https://www.suse.com/security/cve/CVE-2017-7100/" source="CVE"/>
		<reference ref_id="CVE-2017-7102" ref_url="https://www.suse.com/security/cve/CVE-2017-7102/" source="CVE"/>
		<reference ref_id="CVE-2017-7104" ref_url="https://www.suse.com/security/cve/CVE-2017-7104/" source="CVE"/>
		<reference ref_id="CVE-2017-7107" ref_url="https://www.suse.com/security/cve/CVE-2017-7107/" source="CVE"/>
		<reference ref_id="CVE-2017-7109" ref_url="https://www.suse.com/security/cve/CVE-2017-7109/" source="CVE"/>
		<reference ref_id="CVE-2017-7111" ref_url="https://www.suse.com/security/cve/CVE-2017-7111/" source="CVE"/>
		<reference ref_id="CVE-2017-7117" ref_url="https://www.suse.com/security/cve/CVE-2017-7117/" source="CVE"/>
		<reference ref_id="CVE-2017-7120" ref_url="https://www.suse.com/security/cve/CVE-2017-7120/" source="CVE"/>
		<reference ref_id="CVE-2017-7142" ref_url="https://www.suse.com/security/cve/CVE-2017-7142/" source="CVE"/>
		<reference ref_id="CVE-2017-7153" ref_url="https://www.suse.com/security/cve/CVE-2017-7153/" source="CVE"/>
		<reference ref_id="CVE-2017-7156" ref_url="https://www.suse.com/security/cve/CVE-2017-7156/" source="CVE"/>
		<reference ref_id="CVE-2017-7157" ref_url="https://www.suse.com/security/cve/CVE-2017-7157/" source="CVE"/>
		<reference ref_id="CVE-2017-7160" ref_url="https://www.suse.com/security/cve/CVE-2017-7160/" source="CVE"/>
		<reference ref_id="CVE-2017-7161" ref_url="https://www.suse.com/security/cve/CVE-2017-7161/" source="CVE"/>
		<reference ref_id="CVE-2017-7165" ref_url="https://www.suse.com/security/cve/CVE-2017-7165/" source="CVE"/>
		<reference ref_id="CVE-2018-11646" ref_url="https://www.suse.com/security/cve/CVE-2018-11646/" source="CVE"/>
		<reference ref_id="CVE-2018-11712" ref_url="https://www.suse.com/security/cve/CVE-2018-11712/" source="CVE"/>
		<reference ref_id="CVE-2018-11713" ref_url="https://www.suse.com/security/cve/CVE-2018-11713/" source="CVE"/>
		<reference ref_id="CVE-2018-12911" ref_url="https://www.suse.com/security/cve/CVE-2018-12911/" source="CVE"/>
		<reference ref_id="CVE-2018-4088" ref_url="https://www.suse.com/security/cve/CVE-2018-4088/" source="CVE"/>
		<reference ref_id="CVE-2018-4096" ref_url="https://www.suse.com/security/cve/CVE-2018-4096/" source="CVE"/>
		<reference ref_id="CVE-2018-4101" ref_url="https://www.suse.com/security/cve/CVE-2018-4101/" source="CVE"/>
		<reference ref_id="CVE-2018-4113" ref_url="https://www.suse.com/security/cve/CVE-2018-4113/" source="CVE"/>
		<reference ref_id="CVE-2018-4114" ref_url="https://www.suse.com/security/cve/CVE-2018-4114/" source="CVE"/>
		<reference ref_id="CVE-2018-4117" ref_url="https://www.suse.com/security/cve/CVE-2018-4117/" source="CVE"/>
		<reference ref_id="CVE-2018-4118" ref_url="https://www.suse.com/security/cve/CVE-2018-4118/" source="CVE"/>
		<reference ref_id="CVE-2018-4119" ref_url="https://www.suse.com/security/cve/CVE-2018-4119/" source="CVE"/>
		<reference ref_id="CVE-2018-4120" ref_url="https://www.suse.com/security/cve/CVE-2018-4120/" source="CVE"/>
		<reference ref_id="CVE-2018-4122" ref_url="https://www.suse.com/security/cve/CVE-2018-4122/" source="CVE"/>
		<reference ref_id="CVE-2018-4125" ref_url="https://www.suse.com/security/cve/CVE-2018-4125/" source="CVE"/>
		<reference ref_id="CVE-2018-4127" ref_url="https://www.suse.com/security/cve/CVE-2018-4127/" source="CVE"/>
		<reference ref_id="CVE-2018-4128" ref_url="https://www.suse.com/security/cve/CVE-2018-4128/" source="CVE"/>
		<reference ref_id="CVE-2018-4129" ref_url="https://www.suse.com/security/cve/CVE-2018-4129/" source="CVE"/>
		<reference ref_id="CVE-2018-4133" ref_url="https://www.suse.com/security/cve/CVE-2018-4133/" source="CVE"/>
		<reference ref_id="CVE-2018-4146" ref_url="https://www.suse.com/security/cve/CVE-2018-4146/" source="CVE"/>
		<reference ref_id="CVE-2018-4161" ref_url="https://www.suse.com/security/cve/CVE-2018-4161/" source="CVE"/>
		<reference ref_id="CVE-2018-4162" ref_url="https://www.suse.com/security/cve/CVE-2018-4162/" source="CVE"/>
		<reference ref_id="CVE-2018-4163" ref_url="https://www.suse.com/security/cve/CVE-2018-4163/" source="CVE"/>
		<reference ref_id="CVE-2018-4165" ref_url="https://www.suse.com/security/cve/CVE-2018-4165/" source="CVE"/>
		<reference ref_id="CVE-2018-4190" ref_url="https://www.suse.com/security/cve/CVE-2018-4190/" source="CVE"/>
		<reference ref_id="CVE-2018-4191" ref_url="https://www.suse.com/security/cve/CVE-2018-4191/" source="CVE"/>
		<reference ref_id="CVE-2018-4197" ref_url="https://www.suse.com/security/cve/CVE-2018-4197/" source="CVE"/>
		<reference ref_id="CVE-2018-4199" ref_url="https://www.suse.com/security/cve/CVE-2018-4199/" source="CVE"/>
		<reference ref_id="CVE-2018-4200" ref_url="https://www.suse.com/security/cve/CVE-2018-4200/" source="CVE"/>
		<reference ref_id="CVE-2018-4204" ref_url="https://www.suse.com/security/cve/CVE-2018-4204/" source="CVE"/>
		<reference ref_id="CVE-2018-4207" ref_url="https://www.suse.com/security/cve/CVE-2018-4207/" source="CVE"/>
		<reference ref_id="CVE-2018-4208" ref_url="https://www.suse.com/security/cve/CVE-2018-4208/" source="CVE"/>
		<reference ref_id="CVE-2018-4209" ref_url="https://www.suse.com/security/cve/CVE-2018-4209/" source="CVE"/>
		<reference ref_id="CVE-2018-4210" ref_url="https://www.suse.com/security/cve/CVE-2018-4210/" source="CVE"/>
		<reference ref_id="CVE-2018-4212" ref_url="https://www.suse.com/security/cve/CVE-2018-4212/" source="CVE"/>
		<reference ref_id="CVE-2018-4213" ref_url="https://www.suse.com/security/cve/CVE-2018-4213/" source="CVE"/>
		<reference ref_id="CVE-2018-4218" ref_url="https://www.suse.com/security/cve/CVE-2018-4218/" source="CVE"/>
		<reference ref_id="CVE-2018-4222" ref_url="https://www.suse.com/security/cve/CVE-2018-4222/" source="CVE"/>
		<reference ref_id="CVE-2018-4232" ref_url="https://www.suse.com/security/cve/CVE-2018-4232/" source="CVE"/>
		<reference ref_id="CVE-2018-4233" ref_url="https://www.suse.com/security/cve/CVE-2018-4233/" source="CVE"/>
		<reference ref_id="CVE-2018-4246" ref_url="https://www.suse.com/security/cve/CVE-2018-4246/" source="CVE"/>
		<reference ref_id="CVE-2018-4261" ref_url="https://www.suse.com/security/cve/CVE-2018-4261/" source="CVE"/>
		<reference ref_id="CVE-2018-4262" ref_url="https://www.suse.com/security/cve/CVE-2018-4262/" source="CVE"/>
		<reference ref_id="CVE-2018-4263" ref_url="https://www.suse.com/security/cve/CVE-2018-4263/" source="CVE"/>
		<reference ref_id="CVE-2018-4264" ref_url="https://www.suse.com/security/cve/CVE-2018-4264/" source="CVE"/>
		<reference ref_id="CVE-2018-4265" ref_url="https://www.suse.com/security/cve/CVE-2018-4265/" source="CVE"/>
		<reference ref_id="CVE-2018-4266" ref_url="https://www.suse.com/security/cve/CVE-2018-4266/" source="CVE"/>
		<reference ref_id="CVE-2018-4267" ref_url="https://www.suse.com/security/cve/CVE-2018-4267/" source="CVE"/>
		<reference ref_id="CVE-2018-4270" ref_url="https://www.suse.com/security/cve/CVE-2018-4270/" source="CVE"/>
		<reference ref_id="CVE-2018-4272" ref_url="https://www.suse.com/security/cve/CVE-2018-4272/" source="CVE"/>
		<reference ref_id="CVE-2018-4273" ref_url="https://www.suse.com/security/cve/CVE-2018-4273/" source="CVE"/>
		<reference ref_id="CVE-2018-4278" ref_url="https://www.suse.com/security/cve/CVE-2018-4278/" source="CVE"/>
		<reference ref_id="CVE-2018-4284" ref_url="https://www.suse.com/security/cve/CVE-2018-4284/" source="CVE"/>
		<reference ref_id="CVE-2018-4299" ref_url="https://www.suse.com/security/cve/CVE-2018-4299/" source="CVE"/>
		<reference ref_id="CVE-2018-4306" ref_url="https://www.suse.com/security/cve/CVE-2018-4306/" source="CVE"/>
		<reference ref_id="CVE-2018-4309" ref_url="https://www.suse.com/security/cve/CVE-2018-4309/" source="CVE"/>
		<reference ref_id="CVE-2018-4312" ref_url="https://www.suse.com/security/cve/CVE-2018-4312/" source="CVE"/>
		<reference ref_id="CVE-2018-4314" ref_url="https://www.suse.com/security/cve/CVE-2018-4314/" source="CVE"/>
		<reference ref_id="CVE-2018-4315" ref_url="https://www.suse.com/security/cve/CVE-2018-4315/" source="CVE"/>
		<reference ref_id="CVE-2018-4316" ref_url="https://www.suse.com/security/cve/CVE-2018-4316/" source="CVE"/>
		<reference ref_id="CVE-2018-4317" ref_url="https://www.suse.com/security/cve/CVE-2018-4317/" source="CVE"/>
		<reference ref_id="CVE-2018-4318" ref_url="https://www.suse.com/security/cve/CVE-2018-4318/" source="CVE"/>
		<reference ref_id="CVE-2018-4319" ref_url="https://www.suse.com/security/cve/CVE-2018-4319/" source="CVE"/>
		<reference ref_id="CVE-2018-4323" ref_url="https://www.suse.com/security/cve/CVE-2018-4323/" source="CVE"/>
		<reference ref_id="CVE-2018-4328" ref_url="https://www.suse.com/security/cve/CVE-2018-4328/" source="CVE"/>
		<reference ref_id="CVE-2018-4345" ref_url="https://www.suse.com/security/cve/CVE-2018-4345/" source="CVE"/>
		<reference ref_id="CVE-2018-4358" ref_url="https://www.suse.com/security/cve/CVE-2018-4358/" source="CVE"/>
		<reference ref_id="CVE-2018-4359" ref_url="https://www.suse.com/security/cve/CVE-2018-4359/" source="CVE"/>
		<reference ref_id="CVE-2018-4361" ref_url="https://www.suse.com/security/cve/CVE-2018-4361/" source="CVE"/>
		<reference ref_id="CVE-2018-4372" ref_url="https://www.suse.com/security/cve/CVE-2018-4372/" source="CVE"/>
		<reference ref_id="CVE-2018-4373" ref_url="https://www.suse.com/security/cve/CVE-2018-4373/" source="CVE"/>
		<reference ref_id="CVE-2018-4375" ref_url="https://www.suse.com/security/cve/CVE-2018-4375/" source="CVE"/>
		<reference ref_id="CVE-2018-4376" ref_url="https://www.suse.com/security/cve/CVE-2018-4376/" source="CVE"/>
		<reference ref_id="CVE-2018-4378" ref_url="https://www.suse.com/security/cve/CVE-2018-4378/" source="CVE"/>
		<reference ref_id="CVE-2018-4382" ref_url="https://www.suse.com/security/cve/CVE-2018-4382/" source="CVE"/>
		<reference ref_id="CVE-2018-4386" ref_url="https://www.suse.com/security/cve/CVE-2018-4386/" source="CVE"/>
		<reference ref_id="CVE-2018-4392" ref_url="https://www.suse.com/security/cve/CVE-2018-4392/" source="CVE"/>
		<reference ref_id="CVE-2018-4416" ref_url="https://www.suse.com/security/cve/CVE-2018-4416/" source="CVE"/>
		<reference ref_id="CVE-2018-4437" ref_url="https://www.suse.com/security/cve/CVE-2018-4437/" source="CVE"/>
		<reference ref_id="CVE-2018-4438" ref_url="https://www.suse.com/security/cve/CVE-2018-4438/" source="CVE"/>
		<reference ref_id="CVE-2018-4441" ref_url="https://www.suse.com/security/cve/CVE-2018-4441/" source="CVE"/>
		<reference ref_id="CVE-2018-4442" ref_url="https://www.suse.com/security/cve/CVE-2018-4442/" source="CVE"/>
		<reference ref_id="CVE-2018-4443" ref_url="https://www.suse.com/security/cve/CVE-2018-4443/" source="CVE"/>
		<reference ref_id="CVE-2018-4464" ref_url="https://www.suse.com/security/cve/CVE-2018-4464/" source="CVE"/>
		<reference ref_id="CVE-2019-11070" ref_url="https://www.suse.com/security/cve/CVE-2019-11070/" source="CVE"/>
		<reference ref_id="CVE-2019-6201" ref_url="https://www.suse.com/security/cve/CVE-2019-6201/" source="CVE"/>
		<reference ref_id="CVE-2019-6212" ref_url="https://www.suse.com/security/cve/CVE-2019-6212/" source="CVE"/>
		<reference ref_id="CVE-2019-6215" ref_url="https://www.suse.com/security/cve/CVE-2019-6215/" source="CVE"/>
		<reference ref_id="CVE-2019-6216" ref_url="https://www.suse.com/security/cve/CVE-2019-6216/" source="CVE"/>
		<reference ref_id="CVE-2019-6217" ref_url="https://www.suse.com/security/cve/CVE-2019-6217/" source="CVE"/>
		<reference ref_id="CVE-2019-6226" ref_url="https://www.suse.com/security/cve/CVE-2019-6226/" source="CVE"/>
		<reference ref_id="CVE-2019-6227" ref_url="https://www.suse.com/security/cve/CVE-2019-6227/" source="CVE"/>
		<reference ref_id="CVE-2019-6229" ref_url="https://www.suse.com/security/cve/CVE-2019-6229/" source="CVE"/>
		<reference ref_id="CVE-2019-6233" ref_url="https://www.suse.com/security/cve/CVE-2019-6233/" source="CVE"/>
		<reference ref_id="CVE-2019-6234" ref_url="https://www.suse.com/security/cve/CVE-2019-6234/" source="CVE"/>
		<reference ref_id="CVE-2019-6251" ref_url="https://www.suse.com/security/cve/CVE-2019-6251/" source="CVE"/>
		<reference ref_id="CVE-2019-7285" ref_url="https://www.suse.com/security/cve/CVE-2019-7285/" source="CVE"/>
		<reference ref_id="CVE-2019-7292" ref_url="https://www.suse.com/security/cve/CVE-2019-7292/" source="CVE"/>
		<reference ref_id="CVE-2019-8375" ref_url="https://www.suse.com/security/cve/CVE-2019-8375/" source="CVE"/>
		<reference ref_id="CVE-2019-8503" ref_url="https://www.suse.com/security/cve/CVE-2019-8503/" source="CVE"/>
		<reference ref_id="CVE-2019-8506" ref_url="https://www.suse.com/security/cve/CVE-2019-8506/" source="CVE"/>
		<reference ref_id="CVE-2019-8515" ref_url="https://www.suse.com/security/cve/CVE-2019-8515/" source="CVE"/>
		<reference ref_id="CVE-2019-8524" ref_url="https://www.suse.com/security/cve/CVE-2019-8524/" source="CVE"/>
		<reference ref_id="CVE-2019-8535" ref_url="https://www.suse.com/security/cve/CVE-2019-8535/" source="CVE"/>
		<reference ref_id="CVE-2019-8536" ref_url="https://www.suse.com/security/cve/CVE-2019-8536/" source="CVE"/>
		<reference ref_id="CVE-2019-8544" ref_url="https://www.suse.com/security/cve/CVE-2019-8544/" source="CVE"/>
		<reference ref_id="CVE-2019-8551" ref_url="https://www.suse.com/security/cve/CVE-2019-8551/" source="CVE"/>
		<reference ref_id="CVE-2019-8558" ref_url="https://www.suse.com/security/cve/CVE-2019-8558/" source="CVE"/>
		<reference ref_id="CVE-2019-8559" ref_url="https://www.suse.com/security/cve/CVE-2019-8559/" source="CVE"/>
		<reference ref_id="CVE-2019-8563" ref_url="https://www.suse.com/security/cve/CVE-2019-8563/" source="CVE"/>
		<description>
These are all security issues fixed in the typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1856/">CVE-2016-1856</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1857/">CVE-2016-1857</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-4590/">CVE-2016-4590</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-4591/">CVE-2016-4591</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4622/">CVE-2016-4622</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4624/">CVE-2016-4624</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4692/">CVE-2016-4692</cve>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4743/">CVE-2016-4743</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7586/">CVE-2016-7586</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7587/">CVE-2016-7587</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7589/">CVE-2016-7589</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7592/">CVE-2016-7592</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7598/">CVE-2016-7598</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7599/">CVE-2016-7599</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7610/">CVE-2016-7610</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7623/">CVE-2016-7623</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7632/">CVE-2016-7632</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7635/">CVE-2016-7635</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7639/">CVE-2016-7639</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7641/">CVE-2016-7641</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7645/">CVE-2016-7645</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7652/">CVE-2016-7652</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7654/">CVE-2016-7654</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7656/">CVE-2016-7656</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000121/">CVE-2017-1000121</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000122/">CVE-2017-1000122</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13788/">CVE-2017-13788</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13798/">CVE-2017-13798</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13803/">CVE-2017-13803</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13856/">CVE-2017-13856</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13866/">CVE-2017-13866</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13870/">CVE-2017-13870</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13884/">CVE-2017-13884</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-13885/">CVE-2017-13885</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2350/">CVE-2017-2350</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2354/">CVE-2017-2354</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2355/">CVE-2017-2355</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2356/">CVE-2017-2356</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2362/">CVE-2017-2362</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2363/">CVE-2017-2363</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2364/">CVE-2017-2364</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2365/">CVE-2017-2365</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2366/">CVE-2017-2366</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2369/">CVE-2017-2369</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-2371/">CVE-2017-2371</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2373/">CVE-2017-2373</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2496/">CVE-2017-2496</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-2510/">CVE-2017-2510</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2538/">CVE-2017-2538</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2539/">CVE-2017-2539</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="critical" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7006/">CVE-2017-7006</cve>
	<cve impact="critical" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7011/">CVE-2017-7011</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7012/">CVE-2017-7012</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7018/">CVE-2017-7018</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7019/">CVE-2017-7019</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7020/">CVE-2017-7020</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7030/">CVE-2017-7030</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7034/">CVE-2017-7034</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7037/">CVE-2017-7037</cve>
	<cve impact="critical" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7038/">CVE-2017-7038</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7039/">CVE-2017-7039</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7040/">CVE-2017-7040</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7041/">CVE-2017-7041</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7042/">CVE-2017-7042</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7043/">CVE-2017-7043</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7046/">CVE-2017-7046</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7048/">CVE-2017-7048</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7049/">CVE-2017-7049</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7052/">CVE-2017-7052</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7055/">CVE-2017-7055</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7056/">CVE-2017-7056</cve>
	<cve impact="critical" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7059/">CVE-2017-7059</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7061/">CVE-2017-7061</cve>
	<cve impact="critical" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7064/">CVE-2017-7064</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7081/">CVE-2017-7081</cve>
	<cve impact="important" cvss3="9.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7087/">CVE-2017-7087</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7089/">CVE-2017-7089</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7090/">CVE-2017-7090</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7091/">CVE-2017-7091</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7092/">CVE-2017-7092</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7093/">CVE-2017-7093</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7094/">CVE-2017-7094</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7095/">CVE-2017-7095</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7096/">CVE-2017-7096</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7098/">CVE-2017-7098</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7099/">CVE-2017-7099</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7100/">CVE-2017-7100</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7102/">CVE-2017-7102</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7104/">CVE-2017-7104</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7107/">CVE-2017-7107</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-7109/">CVE-2017-7109</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7111/">CVE-2017-7111</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7117/">CVE-2017-7117</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7120/">CVE-2017-7120</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7142/">CVE-2017-7142</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7153/">CVE-2017-7153</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7156/">CVE-2017-7156</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7157/">CVE-2017-7157</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7160/">CVE-2017-7160</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7161/">CVE-2017-7161</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7165/">CVE-2017-7165</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-11646/">CVE-2018-11646</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-11712/">CVE-2018-11712</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-11713/">CVE-2018-11713</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12911/">CVE-2018-12911</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4088/">CVE-2018-4088</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4096/">CVE-2018-4096</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4101/">CVE-2018-4101</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-4113/">CVE-2018-4113</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4114/">CVE-2018-4114</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-4117/">CVE-2018-4117</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4118/">CVE-2018-4118</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4119/">CVE-2018-4119</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4120/">CVE-2018-4120</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4122/">CVE-2018-4122</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4125/">CVE-2018-4125</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4127/">CVE-2018-4127</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4128/">CVE-2018-4128</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-4129/">CVE-2018-4129</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-4133/">CVE-2018-4133</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-4146/">CVE-2018-4146</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4161/">CVE-2018-4161</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4162/">CVE-2018-4162</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4163/">CVE-2018-4163</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4165/">CVE-2018-4165</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4190/">CVE-2018-4190</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4191/">CVE-2018-4191</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4197/">CVE-2018-4197</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4199/">CVE-2018-4199</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4200/">CVE-2018-4200</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4204/">CVE-2018-4204</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4207/">CVE-2018-4207</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4208/">CVE-2018-4208</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4209/">CVE-2018-4209</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4210/">CVE-2018-4210</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4212/">CVE-2018-4212</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4213/">CVE-2018-4213</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4218/">CVE-2018-4218</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4222/">CVE-2018-4222</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-4232/">CVE-2018-4232</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4233/">CVE-2018-4233</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4246/">CVE-2018-4246</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4261/">CVE-2018-4261</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4262/">CVE-2018-4262</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4263/">CVE-2018-4263</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4264/">CVE-2018-4264</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4265/">CVE-2018-4265</cve>
	<cve impact="important" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-4266/">CVE-2018-4266</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4267/">CVE-2018-4267</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4270/">CVE-2018-4270</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4272/">CVE-2018-4272</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4273/">CVE-2018-4273</cve>
	<cve impact="important" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-4278/">CVE-2018-4278</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4284/">CVE-2018-4284</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4299/">CVE-2018-4299</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4306/">CVE-2018-4306</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-4309/">CVE-2018-4309</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4312/">CVE-2018-4312</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4314/">CVE-2018-4314</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4315/">CVE-2018-4315</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4316/">CVE-2018-4316</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4317/">CVE-2018-4317</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4318/">CVE-2018-4318</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-4319/">CVE-2018-4319</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4323/">CVE-2018-4323</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4328/">CVE-2018-4328</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4345/">CVE-2018-4345</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4358/">CVE-2018-4358</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4359/">CVE-2018-4359</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4361/">CVE-2018-4361</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4372/">CVE-2018-4372</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4373/">CVE-2018-4373</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4375/">CVE-2018-4375</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4376/">CVE-2018-4376</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4378/">CVE-2018-4378</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4382/">CVE-2018-4382</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4386/">CVE-2018-4386</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4392/">CVE-2018-4392</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-4416/">CVE-2018-4416</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4437/">CVE-2018-4437</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4438/">CVE-2018-4438</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4441/">CVE-2018-4441</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4442/">CVE-2018-4442</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4443/">CVE-2018-4443</cve>
	<cve impact="critical" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-4464/">CVE-2018-4464</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11070/">CVE-2019-11070</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-6201/">CVE-2019-6201</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6212/">CVE-2019-6212</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6215/">CVE-2019-6215</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6216/">CVE-2019-6216</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6217/">CVE-2019-6217</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6226/">CVE-2019-6226</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6227/">CVE-2019-6227</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-6229/">CVE-2019-6229</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6233/">CVE-2019-6233</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6234/">CVE-2019-6234</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-6251/">CVE-2019-6251</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7285/">CVE-2019-7285</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-7292/">CVE-2019-7292</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-8375/">CVE-2019-8375</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8503/">CVE-2019-8503</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8506/">CVE-2019-8506</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8515/">CVE-2019-8515</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8524/">CVE-2019-8524</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8535/">CVE-2019-8535</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8536/">CVE-2019-8536</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8544/">CVE-2019-8544</cve>
	<cve impact="important" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8551/">CVE-2019-8551</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8558/">CVE-2019-8558</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8559/">CVE-2019-8559</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8563/">CVE-2019-8563</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009487162" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487163" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487164" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487165" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137486" version="1" class="patch">
	<metadata>
		<title>vorbis-tools-1.4.0-1.53 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-9638" ref_url="https://www.suse.com/security/cve/CVE-2014-9638/" source="CVE"/>
		<reference ref_id="CVE-2014-9639" ref_url="https://www.suse.com/security/cve/CVE-2014-9639/" source="CVE"/>
		<reference ref_id="CVE-2014-9640" ref_url="https://www.suse.com/security/cve/CVE-2014-9640/" source="CVE"/>
		<reference ref_id="CVE-2015-6749" ref_url="https://www.suse.com/security/cve/CVE-2015-6749/" source="CVE"/>
		<description>
These are all security issues fixed in the vorbis-tools-1.4.0-1.53 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-9638/">CVE-2014-9638</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9639/">CVE-2014-9639</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9640/">CVE-2014-9640</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6749/">CVE-2015-6749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009486554" comment="vorbis-tools-1.4.0-1.53 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009486555" comment="vorbis-tools-lang-1.4.0-1.53 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137487" version="1" class="patch">
	<metadata>
		<title>wavpack-5.1.0-4.3.5 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1120929" ref_url="https://bugzilla.suse.com/1120929" source="BUGZILLA"/>
		<reference ref_id="1120930" ref_url="https://bugzilla.suse.com/1120930" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19840" ref_url="https://www.suse.com/security/cve/CVE-2018-19840/" source="CVE"/>
		<reference ref_id="CVE-2018-19841" ref_url="https://www.suse.com/security/cve/CVE-2018-19841/" source="CVE"/>
		<description>
This update for wavpack fixes the following issues:

Security issues fixed:

- CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from pack_utils.c (bsc#1120930)
- CVE-2018-19841: Fixed a denial-of-service in the WavpackVerifySingleBlock function from open_utils.c (bsc#1120929)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-27"/>
	<updated date="2019-03-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1120929">SUSE bug 1120929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120930">SUSE bug 1120930</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19840/">CVE-2018-19840</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19841/">CVE-2018-19841</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790056" comment="wavpack-5.1.0-4.3.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790057" comment="wavpack-devel-5.1.0-4.3.5 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137488" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1132256" ref_url="https://bugzilla.suse.com/1132256" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11070" ref_url="https://www.suse.com/security/cve/CVE-2019-11070/" source="CVE"/>
		<reference ref_id="CVE-2019-6201" ref_url="https://www.suse.com/security/cve/CVE-2019-6201/" source="CVE"/>
		<reference ref_id="CVE-2019-6251" ref_url="https://www.suse.com/security/cve/CVE-2019-6251/" source="CVE"/>
		<reference ref_id="CVE-2019-7285" ref_url="https://www.suse.com/security/cve/CVE-2019-7285/" source="CVE"/>
		<reference ref_id="CVE-2019-7292" ref_url="https://www.suse.com/security/cve/CVE-2019-7292/" source="CVE"/>
		<reference ref_id="CVE-2019-8503" ref_url="https://www.suse.com/security/cve/CVE-2019-8503/" source="CVE"/>
		<reference ref_id="CVE-2019-8506" ref_url="https://www.suse.com/security/cve/CVE-2019-8506/" source="CVE"/>
		<reference ref_id="CVE-2019-8515" ref_url="https://www.suse.com/security/cve/CVE-2019-8515/" source="CVE"/>
		<reference ref_id="CVE-2019-8518" ref_url="https://www.suse.com/security/cve/CVE-2019-8518/" source="CVE"/>
		<reference ref_id="CVE-2019-8523" ref_url="https://www.suse.com/security/cve/CVE-2019-8523/" source="CVE"/>
		<reference ref_id="CVE-2019-8524" ref_url="https://www.suse.com/security/cve/CVE-2019-8524/" source="CVE"/>
		<reference ref_id="CVE-2019-8535" ref_url="https://www.suse.com/security/cve/CVE-2019-8535/" source="CVE"/>
		<reference ref_id="CVE-2019-8536" ref_url="https://www.suse.com/security/cve/CVE-2019-8536/" source="CVE"/>
		<reference ref_id="CVE-2019-8544" ref_url="https://www.suse.com/security/cve/CVE-2019-8544/" source="CVE"/>
		<reference ref_id="CVE-2019-8551" ref_url="https://www.suse.com/security/cve/CVE-2019-8551/" source="CVE"/>
		<reference ref_id="CVE-2019-8558" ref_url="https://www.suse.com/security/cve/CVE-2019-8558/" source="CVE"/>
		<reference ref_id="CVE-2019-8559" ref_url="https://www.suse.com/security/cve/CVE-2019-8559/" source="CVE"/>
		<reference ref_id="CVE-2019-8563" ref_url="https://www.suse.com/security/cve/CVE-2019-8563/" source="CVE"/>
		<description>
This update for webkit2gtk3 to version 2.24.1 fixes the following issues:

Security issues fixed:

- CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506,
  CVE-2019-8515, CVE-2019-8518, CVE-2019-8523, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536,
  CVE-2019-8544, CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563, CVE-2019-11070
  (bsc#1132256).
 		</description>
<advisory from="security@suse.de">
	<issued date="2019-05-03"/>
	<updated date="2019-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1132256">SUSE bug 1132256</bugzilla>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11070/">CVE-2019-11070</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-6201/">CVE-2019-6201</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-6251/">CVE-2019-6251</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7285/">CVE-2019-7285</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-7292/">CVE-2019-7292</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8503/">CVE-2019-8503</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8506/">CVE-2019-8506</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8515/">CVE-2019-8515</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8518/">CVE-2019-8518</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8523/">CVE-2019-8523</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8524/">CVE-2019-8524</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8535/">CVE-2019-8535</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8536/">CVE-2019-8536</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8544/">CVE-2019-8544</cve>
	<cve impact="important" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8551/">CVE-2019-8551</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8558/">CVE-2019-8558</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8559/">CVE-2019-8559</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8563/">CVE-2019-8563</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790058" comment="typelib-1_0-JavaScriptCore-4_0-2.24.1-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790059" comment="typelib-1_0-WebKit2-4_0-2.24.1-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790060" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.1-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790061" comment="webkit2gtk3-devel-2.24.1-3.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137489" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1106514" ref_url="https://bugzilla.suse.com/1106514" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16056" ref_url="https://www.suse.com/security/cve/CVE-2018-16056/" source="CVE"/>
		<reference ref_id="CVE-2018-16057" ref_url="https://www.suse.com/security/cve/CVE-2018-16057/" source="CVE"/>
		<reference ref_id="CVE-2018-16058" ref_url="https://www.suse.com/security/cve/CVE-2018-16058/" source="CVE"/>
		<description>
This update for wireshark to version 2.4.9 fixes the following issues:

Security issues fixed (bsc#1106514):

- CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
- CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
- CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)

Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
		</description>
<advisory from="security@suse.de">
	<issued date="2018-09-27"/>
	<updated date="2018-09-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1106514">SUSE bug 1106514</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16056/">CVE-2018-16056</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16057/">CVE-2018-16057</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16058/">CVE-2018-16058</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790062" comment="wireshark-devel-2.4.9-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790063" comment="wireshark-ui-qt-2.4.9-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137490" version="1" class="patch">
	<metadata>
		<title>wireshark-devel-2.4.14-3.25.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-8710" ref_url="https://www.suse.com/security/cve/CVE-2014-8710/" source="CVE"/>
		<reference ref_id="CVE-2014-8711" ref_url="https://www.suse.com/security/cve/CVE-2014-8711/" source="CVE"/>
		<reference ref_id="CVE-2014-8712" ref_url="https://www.suse.com/security/cve/CVE-2014-8712/" source="CVE"/>
		<reference ref_id="CVE-2014-8713" ref_url="https://www.suse.com/security/cve/CVE-2014-8713/" source="CVE"/>
		<reference ref_id="CVE-2014-8714" ref_url="https://www.suse.com/security/cve/CVE-2014-8714/" source="CVE"/>
		<reference ref_id="CVE-2015-0559" ref_url="https://www.suse.com/security/cve/CVE-2015-0559/" source="CVE"/>
		<reference ref_id="CVE-2015-0560" ref_url="https://www.suse.com/security/cve/CVE-2015-0560/" source="CVE"/>
		<reference ref_id="CVE-2015-0561" ref_url="https://www.suse.com/security/cve/CVE-2015-0561/" source="CVE"/>
		<reference ref_id="CVE-2015-0562" ref_url="https://www.suse.com/security/cve/CVE-2015-0562/" source="CVE"/>
		<reference ref_id="CVE-2015-0563" ref_url="https://www.suse.com/security/cve/CVE-2015-0563/" source="CVE"/>
		<reference ref_id="CVE-2015-0564" ref_url="https://www.suse.com/security/cve/CVE-2015-0564/" source="CVE"/>
		<reference ref_id="CVE-2015-2187" ref_url="https://www.suse.com/security/cve/CVE-2015-2187/" source="CVE"/>
		<reference ref_id="CVE-2015-2188" ref_url="https://www.suse.com/security/cve/CVE-2015-2188/" source="CVE"/>
		<reference ref_id="CVE-2015-2189" ref_url="https://www.suse.com/security/cve/CVE-2015-2189/" source="CVE"/>
		<reference ref_id="CVE-2015-2190" ref_url="https://www.suse.com/security/cve/CVE-2015-2190/" source="CVE"/>
		<reference ref_id="CVE-2015-2191" ref_url="https://www.suse.com/security/cve/CVE-2015-2191/" source="CVE"/>
		<reference ref_id="CVE-2015-2192" ref_url="https://www.suse.com/security/cve/CVE-2015-2192/" source="CVE"/>
		<reference ref_id="CVE-2015-3808" ref_url="https://www.suse.com/security/cve/CVE-2015-3808/" source="CVE"/>
		<reference ref_id="CVE-2015-3809" ref_url="https://www.suse.com/security/cve/CVE-2015-3809/" source="CVE"/>
		<reference ref_id="CVE-2015-3810" ref_url="https://www.suse.com/security/cve/CVE-2015-3810/" source="CVE"/>
		<reference ref_id="CVE-2015-3811" ref_url="https://www.suse.com/security/cve/CVE-2015-3811/" source="CVE"/>
		<reference ref_id="CVE-2015-3812" ref_url="https://www.suse.com/security/cve/CVE-2015-3812/" source="CVE"/>
		<reference ref_id="CVE-2015-3813" ref_url="https://www.suse.com/security/cve/CVE-2015-3813/" source="CVE"/>
		<reference ref_id="CVE-2015-3814" ref_url="https://www.suse.com/security/cve/CVE-2015-3814/" source="CVE"/>
		<reference ref_id="CVE-2015-3815" ref_url="https://www.suse.com/security/cve/CVE-2015-3815/" source="CVE"/>
		<reference ref_id="CVE-2015-4651" ref_url="https://www.suse.com/security/cve/CVE-2015-4651/" source="CVE"/>
		<reference ref_id="CVE-2015-4652" ref_url="https://www.suse.com/security/cve/CVE-2015-4652/" source="CVE"/>
		<reference ref_id="CVE-2015-6241" ref_url="https://www.suse.com/security/cve/CVE-2015-6241/" source="CVE"/>
		<reference ref_id="CVE-2015-6242" ref_url="https://www.suse.com/security/cve/CVE-2015-6242/" source="CVE"/>
		<reference ref_id="CVE-2015-6243" ref_url="https://www.suse.com/security/cve/CVE-2015-6243/" source="CVE"/>
		<reference ref_id="CVE-2015-6244" ref_url="https://www.suse.com/security/cve/CVE-2015-6244/" source="CVE"/>
		<reference ref_id="CVE-2015-6245" ref_url="https://www.suse.com/security/cve/CVE-2015-6245/" source="CVE"/>
		<reference ref_id="CVE-2015-6246" ref_url="https://www.suse.com/security/cve/CVE-2015-6246/" source="CVE"/>
		<reference ref_id="CVE-2015-6247" ref_url="https://www.suse.com/security/cve/CVE-2015-6247/" source="CVE"/>
		<reference ref_id="CVE-2015-6248" ref_url="https://www.suse.com/security/cve/CVE-2015-6248/" source="CVE"/>
		<reference ref_id="CVE-2015-6249" ref_url="https://www.suse.com/security/cve/CVE-2015-6249/" source="CVE"/>
		<reference ref_id="CVE-2015-7830" ref_url="https://www.suse.com/security/cve/CVE-2015-7830/" source="CVE"/>
		<reference ref_id="CVE-2015-8711" ref_url="https://www.suse.com/security/cve/CVE-2015-8711/" source="CVE"/>
		<reference ref_id="CVE-2015-8718" ref_url="https://www.suse.com/security/cve/CVE-2015-8718/" source="CVE"/>
		<reference ref_id="CVE-2015-8720" ref_url="https://www.suse.com/security/cve/CVE-2015-8720/" source="CVE"/>
		<reference ref_id="CVE-2015-8721" ref_url="https://www.suse.com/security/cve/CVE-2015-8721/" source="CVE"/>
		<reference ref_id="CVE-2015-8722" ref_url="https://www.suse.com/security/cve/CVE-2015-8722/" source="CVE"/>
		<reference ref_id="CVE-2015-8723" ref_url="https://www.suse.com/security/cve/CVE-2015-8723/" source="CVE"/>
		<reference ref_id="CVE-2015-8724" ref_url="https://www.suse.com/security/cve/CVE-2015-8724/" source="CVE"/>
		<reference ref_id="CVE-2015-8725" ref_url="https://www.suse.com/security/cve/CVE-2015-8725/" source="CVE"/>
		<reference ref_id="CVE-2015-8726" ref_url="https://www.suse.com/security/cve/CVE-2015-8726/" source="CVE"/>
		<reference ref_id="CVE-2015-8727" ref_url="https://www.suse.com/security/cve/CVE-2015-8727/" source="CVE"/>
		<reference ref_id="CVE-2015-8728" ref_url="https://www.suse.com/security/cve/CVE-2015-8728/" source="CVE"/>
		<reference ref_id="CVE-2015-8729" ref_url="https://www.suse.com/security/cve/CVE-2015-8729/" source="CVE"/>
		<reference ref_id="CVE-2015-8730" ref_url="https://www.suse.com/security/cve/CVE-2015-8730/" source="CVE"/>
		<reference ref_id="CVE-2015-8731" ref_url="https://www.suse.com/security/cve/CVE-2015-8731/" source="CVE"/>
		<reference ref_id="CVE-2015-8732" ref_url="https://www.suse.com/security/cve/CVE-2015-8732/" source="CVE"/>
		<reference ref_id="CVE-2015-8733" ref_url="https://www.suse.com/security/cve/CVE-2015-8733/" source="CVE"/>
		<reference ref_id="CVE-2015-8734" ref_url="https://www.suse.com/security/cve/CVE-2015-8734/" source="CVE"/>
		<reference ref_id="CVE-2015-8735" ref_url="https://www.suse.com/security/cve/CVE-2015-8735/" source="CVE"/>
		<reference ref_id="CVE-2015-8736" ref_url="https://www.suse.com/security/cve/CVE-2015-8736/" source="CVE"/>
		<reference ref_id="CVE-2015-8737" ref_url="https://www.suse.com/security/cve/CVE-2015-8737/" source="CVE"/>
		<reference ref_id="CVE-2015-8738" ref_url="https://www.suse.com/security/cve/CVE-2015-8738/" source="CVE"/>
		<reference ref_id="CVE-2015-8739" ref_url="https://www.suse.com/security/cve/CVE-2015-8739/" source="CVE"/>
		<reference ref_id="CVE-2015-8740" ref_url="https://www.suse.com/security/cve/CVE-2015-8740/" source="CVE"/>
		<reference ref_id="CVE-2015-8741" ref_url="https://www.suse.com/security/cve/CVE-2015-8741/" source="CVE"/>
		<reference ref_id="CVE-2015-8742" ref_url="https://www.suse.com/security/cve/CVE-2015-8742/" source="CVE"/>
		<reference ref_id="CVE-2016-2522" ref_url="https://www.suse.com/security/cve/CVE-2016-2522/" source="CVE"/>
		<reference ref_id="CVE-2016-2523" ref_url="https://www.suse.com/security/cve/CVE-2016-2523/" source="CVE"/>
		<reference ref_id="CVE-2016-2524" ref_url="https://www.suse.com/security/cve/CVE-2016-2524/" source="CVE"/>
		<reference ref_id="CVE-2016-2525" ref_url="https://www.suse.com/security/cve/CVE-2016-2525/" source="CVE"/>
		<reference ref_id="CVE-2016-2526" ref_url="https://www.suse.com/security/cve/CVE-2016-2526/" source="CVE"/>
		<reference ref_id="CVE-2016-2527" ref_url="https://www.suse.com/security/cve/CVE-2016-2527/" source="CVE"/>
		<reference ref_id="CVE-2016-2528" ref_url="https://www.suse.com/security/cve/CVE-2016-2528/" source="CVE"/>
		<reference ref_id="CVE-2016-2529" ref_url="https://www.suse.com/security/cve/CVE-2016-2529/" source="CVE"/>
		<reference ref_id="CVE-2016-2530" ref_url="https://www.suse.com/security/cve/CVE-2016-2530/" source="CVE"/>
		<reference ref_id="CVE-2016-2531" ref_url="https://www.suse.com/security/cve/CVE-2016-2531/" source="CVE"/>
		<reference ref_id="CVE-2016-2532" ref_url="https://www.suse.com/security/cve/CVE-2016-2532/" source="CVE"/>
		<reference ref_id="CVE-2016-5350" ref_url="https://www.suse.com/security/cve/CVE-2016-5350/" source="CVE"/>
		<reference ref_id="CVE-2016-5351" ref_url="https://www.suse.com/security/cve/CVE-2016-5351/" source="CVE"/>
		<reference ref_id="CVE-2016-5352" ref_url="https://www.suse.com/security/cve/CVE-2016-5352/" source="CVE"/>
		<reference ref_id="CVE-2016-5353" ref_url="https://www.suse.com/security/cve/CVE-2016-5353/" source="CVE"/>
		<reference ref_id="CVE-2016-5354" ref_url="https://www.suse.com/security/cve/CVE-2016-5354/" source="CVE"/>
		<reference ref_id="CVE-2016-5355" ref_url="https://www.suse.com/security/cve/CVE-2016-5355/" source="CVE"/>
		<reference ref_id="CVE-2016-5356" ref_url="https://www.suse.com/security/cve/CVE-2016-5356/" source="CVE"/>
		<reference ref_id="CVE-2016-5357" ref_url="https://www.suse.com/security/cve/CVE-2016-5357/" source="CVE"/>
		<reference ref_id="CVE-2016-5358" ref_url="https://www.suse.com/security/cve/CVE-2016-5358/" source="CVE"/>
		<reference ref_id="CVE-2016-6505" ref_url="https://www.suse.com/security/cve/CVE-2016-6505/" source="CVE"/>
		<reference ref_id="CVE-2016-6508" ref_url="https://www.suse.com/security/cve/CVE-2016-6508/" source="CVE"/>
		<reference ref_id="CVE-2016-6509" ref_url="https://www.suse.com/security/cve/CVE-2016-6509/" source="CVE"/>
		<reference ref_id="CVE-2016-6510" ref_url="https://www.suse.com/security/cve/CVE-2016-6510/" source="CVE"/>
		<reference ref_id="CVE-2016-6511" ref_url="https://www.suse.com/security/cve/CVE-2016-6511/" source="CVE"/>
		<reference ref_id="CVE-2016-6512" ref_url="https://www.suse.com/security/cve/CVE-2016-6512/" source="CVE"/>
		<reference ref_id="CVE-2016-6513" ref_url="https://www.suse.com/security/cve/CVE-2016-6513/" source="CVE"/>
		<reference ref_id="CVE-2016-7175" ref_url="https://www.suse.com/security/cve/CVE-2016-7175/" source="CVE"/>
		<reference ref_id="CVE-2016-7176" ref_url="https://www.suse.com/security/cve/CVE-2016-7176/" source="CVE"/>
		<reference ref_id="CVE-2016-7177" ref_url="https://www.suse.com/security/cve/CVE-2016-7177/" source="CVE"/>
		<reference ref_id="CVE-2016-7178" ref_url="https://www.suse.com/security/cve/CVE-2016-7178/" source="CVE"/>
		<reference ref_id="CVE-2016-7179" ref_url="https://www.suse.com/security/cve/CVE-2016-7179/" source="CVE"/>
		<reference ref_id="CVE-2016-7180" ref_url="https://www.suse.com/security/cve/CVE-2016-7180/" source="CVE"/>
		<reference ref_id="CVE-2016-9372" ref_url="https://www.suse.com/security/cve/CVE-2016-9372/" source="CVE"/>
		<reference ref_id="CVE-2016-9373" ref_url="https://www.suse.com/security/cve/CVE-2016-9373/" source="CVE"/>
		<reference ref_id="CVE-2016-9374" ref_url="https://www.suse.com/security/cve/CVE-2016-9374/" source="CVE"/>
		<reference ref_id="CVE-2016-9375" ref_url="https://www.suse.com/security/cve/CVE-2016-9375/" source="CVE"/>
		<reference ref_id="CVE-2016-9376" ref_url="https://www.suse.com/security/cve/CVE-2016-9376/" source="CVE"/>
		<reference ref_id="CVE-2017-11406" ref_url="https://www.suse.com/security/cve/CVE-2017-11406/" source="CVE"/>
		<reference ref_id="CVE-2017-11407" ref_url="https://www.suse.com/security/cve/CVE-2017-11407/" source="CVE"/>
		<reference ref_id="CVE-2017-11408" ref_url="https://www.suse.com/security/cve/CVE-2017-11408/" source="CVE"/>
		<reference ref_id="CVE-2017-11410" ref_url="https://www.suse.com/security/cve/CVE-2017-11410/" source="CVE"/>
		<reference ref_id="CVE-2017-11411" ref_url="https://www.suse.com/security/cve/CVE-2017-11411/" source="CVE"/>
		<reference ref_id="CVE-2017-13764" ref_url="https://www.suse.com/security/cve/CVE-2017-13764/" source="CVE"/>
		<reference ref_id="CVE-2017-13765" ref_url="https://www.suse.com/security/cve/CVE-2017-13765/" source="CVE"/>
		<reference ref_id="CVE-2017-13766" ref_url="https://www.suse.com/security/cve/CVE-2017-13766/" source="CVE"/>
		<reference ref_id="CVE-2017-13767" ref_url="https://www.suse.com/security/cve/CVE-2017-13767/" source="CVE"/>
		<reference ref_id="CVE-2017-15189" ref_url="https://www.suse.com/security/cve/CVE-2017-15189/" source="CVE"/>
		<reference ref_id="CVE-2017-15190" ref_url="https://www.suse.com/security/cve/CVE-2017-15190/" source="CVE"/>
		<reference ref_id="CVE-2017-15191" ref_url="https://www.suse.com/security/cve/CVE-2017-15191/" source="CVE"/>
		<reference ref_id="CVE-2017-15192" ref_url="https://www.suse.com/security/cve/CVE-2017-15192/" source="CVE"/>
		<reference ref_id="CVE-2017-15193" ref_url="https://www.suse.com/security/cve/CVE-2017-15193/" source="CVE"/>
		<reference ref_id="CVE-2017-17083" ref_url="https://www.suse.com/security/cve/CVE-2017-17083/" source="CVE"/>
		<reference ref_id="CVE-2017-17084" ref_url="https://www.suse.com/security/cve/CVE-2017-17084/" source="CVE"/>
		<reference ref_id="CVE-2017-17085" ref_url="https://www.suse.com/security/cve/CVE-2017-17085/" source="CVE"/>
		<reference ref_id="CVE-2017-5596" ref_url="https://www.suse.com/security/cve/CVE-2017-5596/" source="CVE"/>
		<reference ref_id="CVE-2017-5597" ref_url="https://www.suse.com/security/cve/CVE-2017-5597/" source="CVE"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2017-6467" ref_url="https://www.suse.com/security/cve/CVE-2017-6467/" source="CVE"/>
		<reference ref_id="CVE-2017-6468" ref_url="https://www.suse.com/security/cve/CVE-2017-6468/" source="CVE"/>
		<reference ref_id="CVE-2017-6469" ref_url="https://www.suse.com/security/cve/CVE-2017-6469/" source="CVE"/>
		<reference ref_id="CVE-2017-6470" ref_url="https://www.suse.com/security/cve/CVE-2017-6470/" source="CVE"/>
		<reference ref_id="CVE-2017-6471" ref_url="https://www.suse.com/security/cve/CVE-2017-6471/" source="CVE"/>
		<reference ref_id="CVE-2017-6472" ref_url="https://www.suse.com/security/cve/CVE-2017-6472/" source="CVE"/>
		<reference ref_id="CVE-2017-6473" ref_url="https://www.suse.com/security/cve/CVE-2017-6473/" source="CVE"/>
		<reference ref_id="CVE-2017-6474" ref_url="https://www.suse.com/security/cve/CVE-2017-6474/" source="CVE"/>
		<reference ref_id="CVE-2017-7700" ref_url="https://www.suse.com/security/cve/CVE-2017-7700/" source="CVE"/>
		<reference ref_id="CVE-2017-7701" ref_url="https://www.suse.com/security/cve/CVE-2017-7701/" source="CVE"/>
		<reference ref_id="CVE-2017-7702" ref_url="https://www.suse.com/security/cve/CVE-2017-7702/" source="CVE"/>
		<reference ref_id="CVE-2017-7703" ref_url="https://www.suse.com/security/cve/CVE-2017-7703/" source="CVE"/>
		<reference ref_id="CVE-2017-7704" ref_url="https://www.suse.com/security/cve/CVE-2017-7704/" source="CVE"/>
		<reference ref_id="CVE-2017-7705" ref_url="https://www.suse.com/security/cve/CVE-2017-7705/" source="CVE"/>
		<reference ref_id="CVE-2017-7745" ref_url="https://www.suse.com/security/cve/CVE-2017-7745/" source="CVE"/>
		<reference ref_id="CVE-2017-7746" ref_url="https://www.suse.com/security/cve/CVE-2017-7746/" source="CVE"/>
		<reference ref_id="CVE-2017-7747" ref_url="https://www.suse.com/security/cve/CVE-2017-7747/" source="CVE"/>
		<reference ref_id="CVE-2017-7748" ref_url="https://www.suse.com/security/cve/CVE-2017-7748/" source="CVE"/>
		<reference ref_id="CVE-2017-9343" ref_url="https://www.suse.com/security/cve/CVE-2017-9343/" source="CVE"/>
		<reference ref_id="CVE-2017-9344" ref_url="https://www.suse.com/security/cve/CVE-2017-9344/" source="CVE"/>
		<reference ref_id="CVE-2017-9345" ref_url="https://www.suse.com/security/cve/CVE-2017-9345/" source="CVE"/>
		<reference ref_id="CVE-2017-9346" ref_url="https://www.suse.com/security/cve/CVE-2017-9346/" source="CVE"/>
		<reference ref_id="CVE-2017-9347" ref_url="https://www.suse.com/security/cve/CVE-2017-9347/" source="CVE"/>
		<reference ref_id="CVE-2017-9348" ref_url="https://www.suse.com/security/cve/CVE-2017-9348/" source="CVE"/>
		<reference ref_id="CVE-2017-9349" ref_url="https://www.suse.com/security/cve/CVE-2017-9349/" source="CVE"/>
		<reference ref_id="CVE-2017-9350" ref_url="https://www.suse.com/security/cve/CVE-2017-9350/" source="CVE"/>
		<reference ref_id="CVE-2017-9351" ref_url="https://www.suse.com/security/cve/CVE-2017-9351/" source="CVE"/>
		<reference ref_id="CVE-2017-9352" ref_url="https://www.suse.com/security/cve/CVE-2017-9352/" source="CVE"/>
		<reference ref_id="CVE-2017-9353" ref_url="https://www.suse.com/security/cve/CVE-2017-9353/" source="CVE"/>
		<reference ref_id="CVE-2017-9354" ref_url="https://www.suse.com/security/cve/CVE-2017-9354/" source="CVE"/>
		<reference ref_id="CVE-2018-11356" ref_url="https://www.suse.com/security/cve/CVE-2018-11356/" source="CVE"/>
		<reference ref_id="CVE-2018-11357" ref_url="https://www.suse.com/security/cve/CVE-2018-11357/" source="CVE"/>
		<reference ref_id="CVE-2018-11358" ref_url="https://www.suse.com/security/cve/CVE-2018-11358/" source="CVE"/>
		<reference ref_id="CVE-2018-11359" ref_url="https://www.suse.com/security/cve/CVE-2018-11359/" source="CVE"/>
		<reference ref_id="CVE-2018-11360" ref_url="https://www.suse.com/security/cve/CVE-2018-11360/" source="CVE"/>
		<reference ref_id="CVE-2018-11362" ref_url="https://www.suse.com/security/cve/CVE-2018-11362/" source="CVE"/>
		<reference ref_id="CVE-2018-12086" ref_url="https://www.suse.com/security/cve/CVE-2018-12086/" source="CVE"/>
		<reference ref_id="CVE-2018-14339" ref_url="https://www.suse.com/security/cve/CVE-2018-14339/" source="CVE"/>
		<reference ref_id="CVE-2018-14340" ref_url="https://www.suse.com/security/cve/CVE-2018-14340/" source="CVE"/>
		<reference ref_id="CVE-2018-14341" ref_url="https://www.suse.com/security/cve/CVE-2018-14341/" source="CVE"/>
		<reference ref_id="CVE-2018-14342" ref_url="https://www.suse.com/security/cve/CVE-2018-14342/" source="CVE"/>
		<reference ref_id="CVE-2018-14343" ref_url="https://www.suse.com/security/cve/CVE-2018-14343/" source="CVE"/>
		<reference ref_id="CVE-2018-14344" ref_url="https://www.suse.com/security/cve/CVE-2018-14344/" source="CVE"/>
		<reference ref_id="CVE-2018-14367" ref_url="https://www.suse.com/security/cve/CVE-2018-14367/" source="CVE"/>
		<reference ref_id="CVE-2018-14368" ref_url="https://www.suse.com/security/cve/CVE-2018-14368/" source="CVE"/>
		<reference ref_id="CVE-2018-14369" ref_url="https://www.suse.com/security/cve/CVE-2018-14369/" source="CVE"/>
		<reference ref_id="CVE-2018-14370" ref_url="https://www.suse.com/security/cve/CVE-2018-14370/" source="CVE"/>
		<reference ref_id="CVE-2018-16056" ref_url="https://www.suse.com/security/cve/CVE-2018-16056/" source="CVE"/>
		<reference ref_id="CVE-2018-16057" ref_url="https://www.suse.com/security/cve/CVE-2018-16057/" source="CVE"/>
		<reference ref_id="CVE-2018-16058" ref_url="https://www.suse.com/security/cve/CVE-2018-16058/" source="CVE"/>
		<reference ref_id="CVE-2018-18227" ref_url="https://www.suse.com/security/cve/CVE-2018-18227/" source="CVE"/>
		<reference ref_id="CVE-2018-19622" ref_url="https://www.suse.com/security/cve/CVE-2018-19622/" source="CVE"/>
		<reference ref_id="CVE-2018-19623" ref_url="https://www.suse.com/security/cve/CVE-2018-19623/" source="CVE"/>
		<reference ref_id="CVE-2018-19624" ref_url="https://www.suse.com/security/cve/CVE-2018-19624/" source="CVE"/>
		<reference ref_id="CVE-2018-19625" ref_url="https://www.suse.com/security/cve/CVE-2018-19625/" source="CVE"/>
		<reference ref_id="CVE-2018-19626" ref_url="https://www.suse.com/security/cve/CVE-2018-19626/" source="CVE"/>
		<reference ref_id="CVE-2018-19627" ref_url="https://www.suse.com/security/cve/CVE-2018-19627/" source="CVE"/>
		<reference ref_id="CVE-2018-5334" ref_url="https://www.suse.com/security/cve/CVE-2018-5334/" source="CVE"/>
		<reference ref_id="CVE-2018-5335" ref_url="https://www.suse.com/security/cve/CVE-2018-5335/" source="CVE"/>
		<reference ref_id="CVE-2018-5336" ref_url="https://www.suse.com/security/cve/CVE-2018-5336/" source="CVE"/>
		<reference ref_id="CVE-2018-7320" ref_url="https://www.suse.com/security/cve/CVE-2018-7320/" source="CVE"/>
		<reference ref_id="CVE-2018-7321" ref_url="https://www.suse.com/security/cve/CVE-2018-7321/" source="CVE"/>
		<reference ref_id="CVE-2018-7322" ref_url="https://www.suse.com/security/cve/CVE-2018-7322/" source="CVE"/>
		<reference ref_id="CVE-2018-7323" ref_url="https://www.suse.com/security/cve/CVE-2018-7323/" source="CVE"/>
		<reference ref_id="CVE-2018-7324" ref_url="https://www.suse.com/security/cve/CVE-2018-7324/" source="CVE"/>
		<reference ref_id="CVE-2018-7325" ref_url="https://www.suse.com/security/cve/CVE-2018-7325/" source="CVE"/>
		<reference ref_id="CVE-2018-7326" ref_url="https://www.suse.com/security/cve/CVE-2018-7326/" source="CVE"/>
		<reference ref_id="CVE-2018-7327" ref_url="https://www.suse.com/security/cve/CVE-2018-7327/" source="CVE"/>
		<reference ref_id="CVE-2018-7328" ref_url="https://www.suse.com/security/cve/CVE-2018-7328/" source="CVE"/>
		<reference ref_id="CVE-2018-7329" ref_url="https://www.suse.com/security/cve/CVE-2018-7329/" source="CVE"/>
		<reference ref_id="CVE-2018-7330" ref_url="https://www.suse.com/security/cve/CVE-2018-7330/" source="CVE"/>
		<reference ref_id="CVE-2018-7331" ref_url="https://www.suse.com/security/cve/CVE-2018-7331/" source="CVE"/>
		<reference ref_id="CVE-2018-7332" ref_url="https://www.suse.com/security/cve/CVE-2018-7332/" source="CVE"/>
		<reference ref_id="CVE-2018-7333" ref_url="https://www.suse.com/security/cve/CVE-2018-7333/" source="CVE"/>
		<reference ref_id="CVE-2018-7334" ref_url="https://www.suse.com/security/cve/CVE-2018-7334/" source="CVE"/>
		<reference ref_id="CVE-2018-7335" ref_url="https://www.suse.com/security/cve/CVE-2018-7335/" source="CVE"/>
		<reference ref_id="CVE-2018-7336" ref_url="https://www.suse.com/security/cve/CVE-2018-7336/" source="CVE"/>
		<reference ref_id="CVE-2018-7337" ref_url="https://www.suse.com/security/cve/CVE-2018-7337/" source="CVE"/>
		<reference ref_id="CVE-2018-7417" ref_url="https://www.suse.com/security/cve/CVE-2018-7417/" source="CVE"/>
		<reference ref_id="CVE-2018-7418" ref_url="https://www.suse.com/security/cve/CVE-2018-7418/" source="CVE"/>
		<reference ref_id="CVE-2018-7419" ref_url="https://www.suse.com/security/cve/CVE-2018-7419/" source="CVE"/>
		<reference ref_id="CVE-2018-7420" ref_url="https://www.suse.com/security/cve/CVE-2018-7420/" source="CVE"/>
		<reference ref_id="CVE-2018-7421" ref_url="https://www.suse.com/security/cve/CVE-2018-7421/" source="CVE"/>
		<reference ref_id="CVE-2018-9256" ref_url="https://www.suse.com/security/cve/CVE-2018-9256/" source="CVE"/>
		<reference ref_id="CVE-2018-9257" ref_url="https://www.suse.com/security/cve/CVE-2018-9257/" source="CVE"/>
		<reference ref_id="CVE-2018-9258" ref_url="https://www.suse.com/security/cve/CVE-2018-9258/" source="CVE"/>
		<reference ref_id="CVE-2018-9260" ref_url="https://www.suse.com/security/cve/CVE-2018-9260/" source="CVE"/>
		<reference ref_id="CVE-2018-9261" ref_url="https://www.suse.com/security/cve/CVE-2018-9261/" source="CVE"/>
		<reference ref_id="CVE-2018-9262" ref_url="https://www.suse.com/security/cve/CVE-2018-9262/" source="CVE"/>
		<reference ref_id="CVE-2018-9263" ref_url="https://www.suse.com/security/cve/CVE-2018-9263/" source="CVE"/>
		<reference ref_id="CVE-2018-9264" ref_url="https://www.suse.com/security/cve/CVE-2018-9264/" source="CVE"/>
		<reference ref_id="CVE-2018-9265" ref_url="https://www.suse.com/security/cve/CVE-2018-9265/" source="CVE"/>
		<reference ref_id="CVE-2018-9266" ref_url="https://www.suse.com/security/cve/CVE-2018-9266/" source="CVE"/>
		<reference ref_id="CVE-2018-9267" ref_url="https://www.suse.com/security/cve/CVE-2018-9267/" source="CVE"/>
		<reference ref_id="CVE-2018-9268" ref_url="https://www.suse.com/security/cve/CVE-2018-9268/" source="CVE"/>
		<reference ref_id="CVE-2018-9269" ref_url="https://www.suse.com/security/cve/CVE-2018-9269/" source="CVE"/>
		<reference ref_id="CVE-2018-9270" ref_url="https://www.suse.com/security/cve/CVE-2018-9270/" source="CVE"/>
		<reference ref_id="CVE-2018-9271" ref_url="https://www.suse.com/security/cve/CVE-2018-9271/" source="CVE"/>
		<reference ref_id="CVE-2018-9272" ref_url="https://www.suse.com/security/cve/CVE-2018-9272/" source="CVE"/>
		<reference ref_id="CVE-2018-9273" ref_url="https://www.suse.com/security/cve/CVE-2018-9273/" source="CVE"/>
		<reference ref_id="CVE-2018-9274" ref_url="https://www.suse.com/security/cve/CVE-2018-9274/" source="CVE"/>
		<reference ref_id="CVE-2019-10894" ref_url="https://www.suse.com/security/cve/CVE-2019-10894/" source="CVE"/>
		<reference ref_id="CVE-2019-10895" ref_url="https://www.suse.com/security/cve/CVE-2019-10895/" source="CVE"/>
		<reference ref_id="CVE-2019-10896" ref_url="https://www.suse.com/security/cve/CVE-2019-10896/" source="CVE"/>
		<reference ref_id="CVE-2019-10899" ref_url="https://www.suse.com/security/cve/CVE-2019-10899/" source="CVE"/>
		<reference ref_id="CVE-2019-10901" ref_url="https://www.suse.com/security/cve/CVE-2019-10901/" source="CVE"/>
		<reference ref_id="CVE-2019-10903" ref_url="https://www.suse.com/security/cve/CVE-2019-10903/" source="CVE"/>
		<reference ref_id="CVE-2019-5717" ref_url="https://www.suse.com/security/cve/CVE-2019-5717/" source="CVE"/>
		<reference ref_id="CVE-2019-5718" ref_url="https://www.suse.com/security/cve/CVE-2019-5718/" source="CVE"/>
		<reference ref_id="CVE-2019-5719" ref_url="https://www.suse.com/security/cve/CVE-2019-5719/" source="CVE"/>
		<reference ref_id="CVE-2019-5721" ref_url="https://www.suse.com/security/cve/CVE-2019-5721/" source="CVE"/>
		<reference ref_id="CVE-2019-9208" ref_url="https://www.suse.com/security/cve/CVE-2019-9208/" source="CVE"/>
		<reference ref_id="CVE-2019-9209" ref_url="https://www.suse.com/security/cve/CVE-2019-9209/" source="CVE"/>
		<reference ref_id="CVE-2019-9214" ref_url="https://www.suse.com/security/cve/CVE-2019-9214/" source="CVE"/>
		<description>
These are all security issues fixed in the wireshark-devel-2.4.14-3.25.2 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8710/">CVE-2014-8710</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8711/">CVE-2014-8711</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8712/">CVE-2014-8712</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8713/">CVE-2014-8713</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8714/">CVE-2014-8714</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0559/">CVE-2015-0559</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0560/">CVE-2015-0560</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0561/">CVE-2015-0561</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0562/">CVE-2015-0562</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0563/">CVE-2015-0563</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0564/">CVE-2015-0564</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2187/">CVE-2015-2187</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2188/">CVE-2015-2188</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2189/">CVE-2015-2189</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2190/">CVE-2015-2190</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2191/">CVE-2015-2191</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2192/">CVE-2015-2192</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3808/">CVE-2015-3808</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3809/">CVE-2015-3809</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3810/">CVE-2015-3810</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3811/">CVE-2015-3811</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3812/">CVE-2015-3812</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3813/">CVE-2015-3813</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3814/">CVE-2015-3814</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3815/">CVE-2015-3815</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4651/">CVE-2015-4651</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4652/">CVE-2015-4652</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6241/">CVE-2015-6241</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6242/">CVE-2015-6242</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6243/">CVE-2015-6243</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6244/">CVE-2015-6244</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6245/">CVE-2015-6245</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6246/">CVE-2015-6246</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6247/">CVE-2015-6247</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6248/">CVE-2015-6248</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6249/">CVE-2015-6249</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7830/">CVE-2015-7830</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8711/">CVE-2015-8711</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8718/">CVE-2015-8718</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8720/">CVE-2015-8720</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8721/">CVE-2015-8721</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8722/">CVE-2015-8722</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8723/">CVE-2015-8723</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8724/">CVE-2015-8724</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8725/">CVE-2015-8725</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8726/">CVE-2015-8726</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8727/">CVE-2015-8727</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8728/">CVE-2015-8728</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8729/">CVE-2015-8729</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8730/">CVE-2015-8730</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8731/">CVE-2015-8731</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8732/">CVE-2015-8732</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8733/">CVE-2015-8733</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8734/">CVE-2015-8734</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8735/">CVE-2015-8735</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8736/">CVE-2015-8736</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8737/">CVE-2015-8737</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8738/">CVE-2015-8738</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8739/">CVE-2015-8739</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8740/">CVE-2015-8740</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8741/">CVE-2015-8741</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8742/">CVE-2015-8742</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2522/">CVE-2016-2522</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2523/">CVE-2016-2523</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2524/">CVE-2016-2524</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2525/">CVE-2016-2525</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2526/">CVE-2016-2526</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2527/">CVE-2016-2527</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2528/">CVE-2016-2528</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2529/">CVE-2016-2529</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2530/">CVE-2016-2530</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2531/">CVE-2016-2531</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2532/">CVE-2016-2532</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5350/">CVE-2016-5350</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5351/">CVE-2016-5351</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5352/">CVE-2016-5352</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5353/">CVE-2016-5353</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5354/">CVE-2016-5354</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5355/">CVE-2016-5355</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5356/">CVE-2016-5356</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5357/">CVE-2016-5357</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5358/">CVE-2016-5358</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6505/">CVE-2016-6505</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6508/">CVE-2016-6508</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6509/">CVE-2016-6509</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6510/">CVE-2016-6510</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6511/">CVE-2016-6511</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6512/">CVE-2016-6512</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6513/">CVE-2016-6513</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7175/">CVE-2016-7175</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7176/">CVE-2016-7176</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7177/">CVE-2016-7177</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7178/">CVE-2016-7178</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7179/">CVE-2016-7179</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7180/">CVE-2016-7180</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9372/">CVE-2016-9372</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9373/">CVE-2016-9373</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9374/">CVE-2016-9374</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9375/">CVE-2016-9375</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9376/">CVE-2016-9376</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11406/">CVE-2017-11406</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11407/">CVE-2017-11407</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11408/">CVE-2017-11408</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11410/">CVE-2017-11410</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11411/">CVE-2017-11411</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13764/">CVE-2017-13764</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13765/">CVE-2017-13765</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13766/">CVE-2017-13766</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13767/">CVE-2017-13767</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15189/">CVE-2017-15189</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15190/">CVE-2017-15190</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15191/">CVE-2017-15191</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15192/">CVE-2017-15192</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15193/">CVE-2017-15193</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17083/">CVE-2017-17083</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17084/">CVE-2017-17084</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17085/">CVE-2017-17085</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5596/">CVE-2017-5596</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5597/">CVE-2017-5597</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6467/">CVE-2017-6467</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6468/">CVE-2017-6468</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6469/">CVE-2017-6469</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6470/">CVE-2017-6470</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6471/">CVE-2017-6471</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6472/">CVE-2017-6472</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6473/">CVE-2017-6473</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6474/">CVE-2017-6474</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7700/">CVE-2017-7700</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7701/">CVE-2017-7701</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7702/">CVE-2017-7702</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7703/">CVE-2017-7703</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7704/">CVE-2017-7704</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7705/">CVE-2017-7705</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7745/">CVE-2017-7745</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7746/">CVE-2017-7746</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7747/">CVE-2017-7747</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7748/">CVE-2017-7748</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9343/">CVE-2017-9343</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9344/">CVE-2017-9344</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9345/">CVE-2017-9345</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9346/">CVE-2017-9346</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9347/">CVE-2017-9347</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9348/">CVE-2017-9348</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9349/">CVE-2017-9349</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9350/">CVE-2017-9350</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9351/">CVE-2017-9351</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9352/">CVE-2017-9352</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9353/">CVE-2017-9353</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-9354/">CVE-2017-9354</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11356/">CVE-2018-11356</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11357/">CVE-2018-11357</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11358/">CVE-2018-11358</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11359/">CVE-2018-11359</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11360/">CVE-2018-11360</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11362/">CVE-2018-11362</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12086/">CVE-2018-12086</cve>
	<cve impact="low" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14339/">CVE-2018-14339</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14340/">CVE-2018-14340</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14341/">CVE-2018-14341</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14342/">CVE-2018-14342</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14343/">CVE-2018-14343</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14344/">CVE-2018-14344</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14367/">CVE-2018-14367</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14368/">CVE-2018-14368</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14369/">CVE-2018-14369</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14370/">CVE-2018-14370</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16056/">CVE-2018-16056</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16057/">CVE-2018-16057</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16058/">CVE-2018-16058</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18227/">CVE-2018-18227</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19622/">CVE-2018-19622</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19623/">CVE-2018-19623</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19624/">CVE-2018-19624</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19625/">CVE-2018-19625</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19626/">CVE-2018-19626</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19627/">CVE-2018-19627</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5334/">CVE-2018-5334</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5335/">CVE-2018-5335</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5336/">CVE-2018-5336</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7320/">CVE-2018-7320</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7321/">CVE-2018-7321</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7322/">CVE-2018-7322</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7323/">CVE-2018-7323</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7324/">CVE-2018-7324</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7325/">CVE-2018-7325</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7326/">CVE-2018-7326</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7327/">CVE-2018-7327</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7328/">CVE-2018-7328</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7329/">CVE-2018-7329</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7330/">CVE-2018-7330</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7331/">CVE-2018-7331</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7332/">CVE-2018-7332</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7333/">CVE-2018-7333</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7334/">CVE-2018-7334</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7335/">CVE-2018-7335</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7336/">CVE-2018-7336</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7337/">CVE-2018-7337</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7417/">CVE-2018-7417</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7418/">CVE-2018-7418</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7419/">CVE-2018-7419</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7420/">CVE-2018-7420</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7421/">CVE-2018-7421</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9256/">CVE-2018-9256</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9257/">CVE-2018-9257</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9258/">CVE-2018-9258</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9260/">CVE-2018-9260</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9261/">CVE-2018-9261</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9262/">CVE-2018-9262</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9263/">CVE-2018-9263</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9264/">CVE-2018-9264</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9265/">CVE-2018-9265</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9266/">CVE-2018-9266</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9267/">CVE-2018-9267</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9268/">CVE-2018-9268</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9269/">CVE-2018-9269</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9270/">CVE-2018-9270</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9271/">CVE-2018-9271</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9272/">CVE-2018-9272</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9273/">CVE-2018-9273</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9274/">CVE-2018-9274</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10894/">CVE-2019-10894</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10895/">CVE-2019-10895</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10896/">CVE-2019-10896</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10899/">CVE-2019-10899</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10901/">CVE-2019-10901</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10903/">CVE-2019-10903</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5717/">CVE-2019-5717</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5718/">CVE-2019-5718</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5719/">CVE-2019-5719</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5721/">CVE-2019-5721</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9208/">CVE-2019-9208</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9209/">CVE-2019-9209</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9214/">CVE-2019-9214</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009487170" comment="wireshark-devel-2.4.14-3.25.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487171" comment="wireshark-ui-qt-2.4.14-3.25.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137491" version="1" class="patch">
	<metadata>
		<title>FastCGI-2.4.0-2.23 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-2766" ref_url="https://www.suse.com/security/cve/CVE-2011-2766/" source="CVE"/>
		<description>
These are all security issues fixed in the FastCGI-2.4.0-2.23 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2766/">CVE-2011-2766</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009487597" comment="FastCGI-2.4.0-2.23 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487598" comment="FastCGI-devel-2.4.0-2.23 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487599" comment="libfcgi0-2.4.0-2.23 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487600" comment="perl-FastCGI-2.4.0-2.23 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137492" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1094742" ref_url="https://bugzilla.suse.com/1094742" source="BUGZILLA"/>
		<reference ref_id="1094745" ref_url="https://bugzilla.suse.com/1094745" source="BUGZILLA"/>
		<reference ref_id="1095812" ref_url="https://bugzilla.suse.com/1095812" source="BUGZILLA"/>
		<reference ref_id="1096200" ref_url="https://bugzilla.suse.com/1096200" source="BUGZILLA"/>
		<reference ref_id="1096203" ref_url="https://bugzilla.suse.com/1096203" source="BUGZILLA"/>
		<reference ref_id="1098545" ref_url="https://bugzilla.suse.com/1098545" source="BUGZILLA"/>
		<reference ref_id="1098546" ref_url="https://bugzilla.suse.com/1098546" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10805" ref_url="https://www.suse.com/security/cve/CVE-2018-10805/" source="CVE"/>
		<reference ref_id="CVE-2018-11624" ref_url="https://www.suse.com/security/cve/CVE-2018-11624/" source="CVE"/>
		<reference ref_id="CVE-2018-11625" ref_url="https://www.suse.com/security/cve/CVE-2018-11625/" source="CVE"/>
		<reference ref_id="CVE-2018-12599" ref_url="https://www.suse.com/security/cve/CVE-2018-12599/" source="CVE"/>
		<reference ref_id="CVE-2018-12600" ref_url="https://www.suse.com/security/cve/CVE-2018-12600/" source="CVE"/>
		<description>
This update for ImageMagick fixes the following issues:

The following security vulnerabilities were fixed:

- CVE-2018-11625: Fixed heap-based buffer over-read in SetGrayscaleImage in the
  quantize.c file, which allowed remote attackers to cause buffer over-read via
  a crafted file. (bsc#1096200)
- CVE-2018-11624: Fixed a use-after-free issue in the ReadMATImage function in
  coders/mat.c. (bsc#1096203)
- CVE-2018-10805: Fixed several memory leaks in bgr.c, rgb.c, cmyk.c, gray.c,
  and ycbcr.c (bsc#1095812)
- CVE-2018-12600: The ReadDIBImage and WriteDIBImage functions allowed
  attackers to cause an out of bounds write via a crafted file (bsc#1098545).
- CVE-2018-12599: The ReadBMPImage and WriteBMPImage fucntions allowed
  attackers to cause an out of bounds write via a crafted file (bsc#1098546).

The following other changes were made:

- Fix -gamma issues in special cases. (bsc#1094745, bsc#1094742)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-23"/>
	<updated date="2018-07-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1094742">SUSE bug 1094742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094745">SUSE bug 1094745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095812">SUSE bug 1095812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096200">SUSE bug 1096200</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096203">SUSE bug 1096203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098545">SUSE bug 1098545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098546">SUSE bug 1098546</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10805/">CVE-2018-10805</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11624/">CVE-2018-11624</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11625/">CVE-2018-11625</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12599/">CVE-2018-12599</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12600/">CVE-2018-12600</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790074" comment="perl-PerlMagick-7.0.7.34-3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137493" version="1" class="patch">
	<metadata>
		<title>aaa_base-malloccheck-84.87+git20180409.04c9dae-3.6.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-0461" ref_url="https://www.suse.com/security/cve/CVE-2011-0461/" source="CVE"/>
		<description>
These are all security issues fixed in the aaa_base-malloccheck-84.87+git20180409.04c9dae-3.6.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0461/">CVE-2011-0461</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487715" comment="aaa_base-malloccheck-84.87+git20180409.04c9dae-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137494" version="1" class="patch">
	<metadata>
		<title>ant-1.9.10-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1100053" ref_url="https://bugzilla.suse.com/1100053" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10886" ref_url="https://www.suse.com/security/cve/CVE-2018-10886/" source="CVE"/>
		<description>
This update for ant fixes the following issues:

Security issue fixed:

- CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file
  paths, which allowed arbitrary file writes and could potentially lead to
  code execution (bsc#1100053)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-09-26"/>
	<updated date="2018-09-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1100053">SUSE bug 1100053</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10886/">CVE-2018-10886</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495959" comment="ant-1.9.10-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495970" comment="ant-jmf-1.9.10-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495973" comment="ant-scripts-1.9.10-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495974" comment="ant-swing-1.9.10-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137495" version="1" class="patch">
	<metadata>
		<title>ant-antlr-1.9.10-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1100053" ref_url="https://bugzilla.suse.com/1100053" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10886" ref_url="https://www.suse.com/security/cve/CVE-2018-10886/" source="CVE"/>
		<description>
This update for ant fixes the following issues:

Security issue fixed:

- CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file
  paths, which allowed arbitrary file writes and could potentially lead to
  code execution (bsc#1100053)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-09-26"/>
	<updated date="2018-09-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1100053">SUSE bug 1100053</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10886/">CVE-2018-10886</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495960" comment="ant-antlr-1.9.10-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495961" comment="ant-apache-bcel-1.9.10-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495962" comment="ant-apache-bsf-1.9.10-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495963" comment="ant-apache-log4j-1.9.10-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495964" comment="ant-apache-oro-1.9.10-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495965" comment="ant-apache-regexp-1.9.10-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495966" comment="ant-apache-resolver-1.9.10-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495967" comment="ant-commons-logging-1.9.10-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495968" comment="ant-javamail-1.9.10-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495969" comment="ant-jdepend-1.9.10-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487730" comment="ant-junit-1.9.10-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495972" comment="ant-manual-1.9.10-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137496" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1100053" ref_url="https://bugzilla.suse.com/1100053" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10886" ref_url="https://www.suse.com/security/cve/CVE-2018-10886/" source="CVE"/>
		<description>
This update for ant fixes the following issues:

Security issue fixed:

- CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file
  paths, which allowed arbitrary file writes and could potentially lead to
  code execution (bsc#1100053)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-09-26"/>
	<updated date="2018-09-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1100053">SUSE bug 1100053</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10886/">CVE-2018-10886</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495971" comment="ant-junit-1.9.10-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137497" version="1" class="patch">
	<metadata>
		<title>apache-pdfbox-1.8.12-5.6.3 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1111009" ref_url="https://bugzilla.suse.com/1111009" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11797" ref_url="https://www.suse.com/security/cve/CVE-2018-11797/" source="CVE"/>
		<description>

This update for apache-pdfbox fixes the following security issue:

- CVE-2018-11797: A carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree. (bsc#1111009):

		</description>
<advisory from="security@suse.de">
	<issued date="2018-11-13"/>
	<updated date="2018-11-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1111009">SUSE bug 1111009</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-11797/">CVE-2018-11797</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496008" comment="apache-pdfbox-1.8.12-5.6.3 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137498" version="1" class="patch">
	<metadata>
		<title>binutils-devel-32bit-2.31-5.31 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-9939" ref_url="https://www.suse.com/security/cve/CVE-2014-9939/" source="CVE"/>
		<reference ref_id="CVE-2017-12448" ref_url="https://www.suse.com/security/cve/CVE-2017-12448/" source="CVE"/>
		<reference ref_id="CVE-2017-12450" ref_url="https://www.suse.com/security/cve/CVE-2017-12450/" source="CVE"/>
		<reference ref_id="CVE-2017-12452" ref_url="https://www.suse.com/security/cve/CVE-2017-12452/" source="CVE"/>
		<reference ref_id="CVE-2017-12453" ref_url="https://www.suse.com/security/cve/CVE-2017-12453/" source="CVE"/>
		<reference ref_id="CVE-2017-12454" ref_url="https://www.suse.com/security/cve/CVE-2017-12454/" source="CVE"/>
		<reference ref_id="CVE-2017-12456" ref_url="https://www.suse.com/security/cve/CVE-2017-12456/" source="CVE"/>
		<reference ref_id="CVE-2017-12799" ref_url="https://www.suse.com/security/cve/CVE-2017-12799/" source="CVE"/>
		<reference ref_id="CVE-2017-13757" ref_url="https://www.suse.com/security/cve/CVE-2017-13757/" source="CVE"/>
		<reference ref_id="CVE-2017-14128" ref_url="https://www.suse.com/security/cve/CVE-2017-14128/" source="CVE"/>
		<reference ref_id="CVE-2017-14129" ref_url="https://www.suse.com/security/cve/CVE-2017-14129/" source="CVE"/>
		<reference ref_id="CVE-2017-14130" ref_url="https://www.suse.com/security/cve/CVE-2017-14130/" source="CVE"/>
		<reference ref_id="CVE-2017-14333" ref_url="https://www.suse.com/security/cve/CVE-2017-14333/" source="CVE"/>
		<reference ref_id="CVE-2017-14529" ref_url="https://www.suse.com/security/cve/CVE-2017-14529/" source="CVE"/>
		<reference ref_id="CVE-2017-14729" ref_url="https://www.suse.com/security/cve/CVE-2017-14729/" source="CVE"/>
		<reference ref_id="CVE-2017-14745" ref_url="https://www.suse.com/security/cve/CVE-2017-14745/" source="CVE"/>
		<reference ref_id="CVE-2017-14974" ref_url="https://www.suse.com/security/cve/CVE-2017-14974/" source="CVE"/>
		<reference ref_id="CVE-2017-15938" ref_url="https://www.suse.com/security/cve/CVE-2017-15938/" source="CVE"/>
		<reference ref_id="CVE-2017-15939" ref_url="https://www.suse.com/security/cve/CVE-2017-15939/" source="CVE"/>
		<reference ref_id="CVE-2017-15996" ref_url="https://www.suse.com/security/cve/CVE-2017-15996/" source="CVE"/>
		<reference ref_id="CVE-2017-16826" ref_url="https://www.suse.com/security/cve/CVE-2017-16826/" source="CVE"/>
		<reference ref_id="CVE-2017-16827" ref_url="https://www.suse.com/security/cve/CVE-2017-16827/" source="CVE"/>
		<reference ref_id="CVE-2017-16828" ref_url="https://www.suse.com/security/cve/CVE-2017-16828/" source="CVE"/>
		<reference ref_id="CVE-2017-16829" ref_url="https://www.suse.com/security/cve/CVE-2017-16829/" source="CVE"/>
		<reference ref_id="CVE-2017-16830" ref_url="https://www.suse.com/security/cve/CVE-2017-16830/" source="CVE"/>
		<reference ref_id="CVE-2017-16831" ref_url="https://www.suse.com/security/cve/CVE-2017-16831/" source="CVE"/>
		<reference ref_id="CVE-2017-16832" ref_url="https://www.suse.com/security/cve/CVE-2017-16832/" source="CVE"/>
		<reference ref_id="CVE-2017-6965" ref_url="https://www.suse.com/security/cve/CVE-2017-6965/" source="CVE"/>
		<reference ref_id="CVE-2017-6966" ref_url="https://www.suse.com/security/cve/CVE-2017-6966/" source="CVE"/>
		<reference ref_id="CVE-2017-6969" ref_url="https://www.suse.com/security/cve/CVE-2017-6969/" source="CVE"/>
		<reference ref_id="CVE-2017-7209" ref_url="https://www.suse.com/security/cve/CVE-2017-7209/" source="CVE"/>
		<reference ref_id="CVE-2017-7210" ref_url="https://www.suse.com/security/cve/CVE-2017-7210/" source="CVE"/>
		<reference ref_id="CVE-2017-7223" ref_url="https://www.suse.com/security/cve/CVE-2017-7223/" source="CVE"/>
		<reference ref_id="CVE-2017-7224" ref_url="https://www.suse.com/security/cve/CVE-2017-7224/" source="CVE"/>
		<reference ref_id="CVE-2017-7225" ref_url="https://www.suse.com/security/cve/CVE-2017-7225/" source="CVE"/>
		<reference ref_id="CVE-2017-7226" ref_url="https://www.suse.com/security/cve/CVE-2017-7226/" source="CVE"/>
		<reference ref_id="CVE-2017-7299" ref_url="https://www.suse.com/security/cve/CVE-2017-7299/" source="CVE"/>
		<reference ref_id="CVE-2017-7300" ref_url="https://www.suse.com/security/cve/CVE-2017-7300/" source="CVE"/>
		<reference ref_id="CVE-2017-7301" ref_url="https://www.suse.com/security/cve/CVE-2017-7301/" source="CVE"/>
		<reference ref_id="CVE-2017-7302" ref_url="https://www.suse.com/security/cve/CVE-2017-7302/" source="CVE"/>
		<reference ref_id="CVE-2017-7303" ref_url="https://www.suse.com/security/cve/CVE-2017-7303/" source="CVE"/>
		<reference ref_id="CVE-2017-7304" ref_url="https://www.suse.com/security/cve/CVE-2017-7304/" source="CVE"/>
		<reference ref_id="CVE-2017-8392" ref_url="https://www.suse.com/security/cve/CVE-2017-8392/" source="CVE"/>
		<reference ref_id="CVE-2017-8393" ref_url="https://www.suse.com/security/cve/CVE-2017-8393/" source="CVE"/>
		<reference ref_id="CVE-2017-8394" ref_url="https://www.suse.com/security/cve/CVE-2017-8394/" source="CVE"/>
		<reference ref_id="CVE-2017-8396" ref_url="https://www.suse.com/security/cve/CVE-2017-8396/" source="CVE"/>
		<reference ref_id="CVE-2017-8421" ref_url="https://www.suse.com/security/cve/CVE-2017-8421/" source="CVE"/>
		<reference ref_id="CVE-2017-9746" ref_url="https://www.suse.com/security/cve/CVE-2017-9746/" source="CVE"/>
		<reference ref_id="CVE-2017-9747" ref_url="https://www.suse.com/security/cve/CVE-2017-9747/" source="CVE"/>
		<reference ref_id="CVE-2017-9748" ref_url="https://www.suse.com/security/cve/CVE-2017-9748/" source="CVE"/>
		<reference ref_id="CVE-2017-9750" ref_url="https://www.suse.com/security/cve/CVE-2017-9750/" source="CVE"/>
		<reference ref_id="CVE-2017-9755" ref_url="https://www.suse.com/security/cve/CVE-2017-9755/" source="CVE"/>
		<reference ref_id="CVE-2017-9756" ref_url="https://www.suse.com/security/cve/CVE-2017-9756/" source="CVE"/>
		<reference ref_id="CVE-2018-10372" ref_url="https://www.suse.com/security/cve/CVE-2018-10372/" source="CVE"/>
		<reference ref_id="CVE-2018-10373" ref_url="https://www.suse.com/security/cve/CVE-2018-10373/" source="CVE"/>
		<reference ref_id="CVE-2018-10534" ref_url="https://www.suse.com/security/cve/CVE-2018-10534/" source="CVE"/>
		<reference ref_id="CVE-2018-10535" ref_url="https://www.suse.com/security/cve/CVE-2018-10535/" source="CVE"/>
		<reference ref_id="CVE-2018-6323" ref_url="https://www.suse.com/security/cve/CVE-2018-6323/" source="CVE"/>
		<reference ref_id="CVE-2018-6543" ref_url="https://www.suse.com/security/cve/CVE-2018-6543/" source="CVE"/>
		<reference ref_id="CVE-2018-6759" ref_url="https://www.suse.com/security/cve/CVE-2018-6759/" source="CVE"/>
		<reference ref_id="CVE-2018-6872" ref_url="https://www.suse.com/security/cve/CVE-2018-6872/" source="CVE"/>
		<reference ref_id="CVE-2018-7208" ref_url="https://www.suse.com/security/cve/CVE-2018-7208/" source="CVE"/>
		<reference ref_id="CVE-2018-7568" ref_url="https://www.suse.com/security/cve/CVE-2018-7568/" source="CVE"/>
		<reference ref_id="CVE-2018-7569" ref_url="https://www.suse.com/security/cve/CVE-2018-7569/" source="CVE"/>
		<reference ref_id="CVE-2018-7570" ref_url="https://www.suse.com/security/cve/CVE-2018-7570/" source="CVE"/>
		<reference ref_id="CVE-2018-7642" ref_url="https://www.suse.com/security/cve/CVE-2018-7642/" source="CVE"/>
		<reference ref_id="CVE-2018-7643" ref_url="https://www.suse.com/security/cve/CVE-2018-7643/" source="CVE"/>
		<reference ref_id="CVE-2018-8945" ref_url="https://www.suse.com/security/cve/CVE-2018-8945/" source="CVE"/>
		<description>
These are all security issues fixed in the binutils-devel-32bit-2.31-5.31 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9939/">CVE-2014-9939</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12448/">CVE-2017-12448</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12450/">CVE-2017-12450</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12452/">CVE-2017-12452</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12453/">CVE-2017-12453</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12454/">CVE-2017-12454</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12456/">CVE-2017-12456</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12799/">CVE-2017-12799</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13757/">CVE-2017-13757</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14128/">CVE-2017-14128</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14129/">CVE-2017-14129</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14130/">CVE-2017-14130</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14333/">CVE-2017-14333</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14529/">CVE-2017-14529</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14729/">CVE-2017-14729</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14745/">CVE-2017-14745</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14974/">CVE-2017-14974</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15938/">CVE-2017-15938</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15939/">CVE-2017-15939</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15996/">CVE-2017-15996</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16826/">CVE-2017-16826</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16827/">CVE-2017-16827</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16828/">CVE-2017-16828</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16829/">CVE-2017-16829</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16830/">CVE-2017-16830</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16831/">CVE-2017-16831</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16832/">CVE-2017-16832</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6965/">CVE-2017-6965</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6966/">CVE-2017-6966</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6969/">CVE-2017-6969</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7209/">CVE-2017-7209</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7210/">CVE-2017-7210</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7223/">CVE-2017-7223</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7224/">CVE-2017-7224</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7225/">CVE-2017-7225</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7226/">CVE-2017-7226</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7299/">CVE-2017-7299</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7300/">CVE-2017-7300</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7301/">CVE-2017-7301</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7302/">CVE-2017-7302</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7303/">CVE-2017-7303</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7304/">CVE-2017-7304</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8392/">CVE-2017-8392</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8393/">CVE-2017-8393</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8394/">CVE-2017-8394</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8396/">CVE-2017-8396</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8421/">CVE-2017-8421</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9746/">CVE-2017-9746</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9747/">CVE-2017-9747</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9748/">CVE-2017-9748</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9750/">CVE-2017-9750</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9755/">CVE-2017-9755</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9756/">CVE-2017-9756</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10372/">CVE-2018-10372</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10373/">CVE-2018-10373</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10534/">CVE-2018-10534</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10535/">CVE-2018-10535</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6323/">CVE-2018-6323</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6543/">CVE-2018-6543</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6759/">CVE-2018-6759</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6872/">CVE-2018-6872</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7208/">CVE-2018-7208</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7568/">CVE-2018-7568</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7569/">CVE-2018-7569</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7570/">CVE-2018-7570</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7642/">CVE-2018-7642</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7643/">CVE-2018-7643</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8945/">CVE-2018-8945</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487733" comment="binutils-devel-32bit-2.31-5.31 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137499" version="1" class="patch">
	<metadata>
		<title>blktrace-1.1.0+git.20170126-3.3.28 on GA media (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1091942" ref_url="https://bugzilla.suse.com/1091942" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10689" ref_url="https://www.suse.com/security/cve/CVE-2018-10689/" source="CVE"/>
		<description>
This update for blktrace fixes the following issues:

- CVE-2018-10689: Prevent buffer overflow in the dev_map_read function because
  the device and devno arrays were too small (bsc#1091942)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-09"/>
	<updated date="2019-04-09"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1091942">SUSE bug 1091942</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10689/">CVE-2018-10689</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708596" comment="blktrace-1.1.0+git.20170126-3.3.28 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137500" version="1" class="patch">
	<metadata>
		<title>bsdtar-3.3.2-3.8.4 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-0211" ref_url="https://www.suse.com/security/cve/CVE-2013-0211/" source="CVE"/>
		<reference ref_id="CVE-2015-2304" ref_url="https://www.suse.com/security/cve/CVE-2015-2304/" source="CVE"/>
		<reference ref_id="CVE-2015-8917" ref_url="https://www.suse.com/security/cve/CVE-2015-8917/" source="CVE"/>
		<reference ref_id="CVE-2015-8928" ref_url="https://www.suse.com/security/cve/CVE-2015-8928/" source="CVE"/>
		<reference ref_id="CVE-2015-8933" ref_url="https://www.suse.com/security/cve/CVE-2015-8933/" source="CVE"/>
		<reference ref_id="CVE-2015-8934" ref_url="https://www.suse.com/security/cve/CVE-2015-8934/" source="CVE"/>
		<reference ref_id="CVE-2016-1541" ref_url="https://www.suse.com/security/cve/CVE-2016-1541/" source="CVE"/>
		<reference ref_id="CVE-2016-4300" ref_url="https://www.suse.com/security/cve/CVE-2016-4300/" source="CVE"/>
		<reference ref_id="CVE-2016-4301" ref_url="https://www.suse.com/security/cve/CVE-2016-4301/" source="CVE"/>
		<reference ref_id="CVE-2016-4809" ref_url="https://www.suse.com/security/cve/CVE-2016-4809/" source="CVE"/>
		<reference ref_id="CVE-2016-5418" ref_url="https://www.suse.com/security/cve/CVE-2016-5418/" source="CVE"/>
		<reference ref_id="CVE-2016-5844" ref_url="https://www.suse.com/security/cve/CVE-2016-5844/" source="CVE"/>
		<reference ref_id="CVE-2016-6250" ref_url="https://www.suse.com/security/cve/CVE-2016-6250/" source="CVE"/>
		<reference ref_id="CVE-2016-8687" ref_url="https://www.suse.com/security/cve/CVE-2016-8687/" source="CVE"/>
		<reference ref_id="CVE-2016-8688" ref_url="https://www.suse.com/security/cve/CVE-2016-8688/" source="CVE"/>
		<reference ref_id="CVE-2016-8689" ref_url="https://www.suse.com/security/cve/CVE-2016-8689/" source="CVE"/>
		<reference ref_id="CVE-2017-14166" ref_url="https://www.suse.com/security/cve/CVE-2017-14166/" source="CVE"/>
		<reference ref_id="CVE-2017-14501" ref_url="https://www.suse.com/security/cve/CVE-2017-14501/" source="CVE"/>
		<reference ref_id="CVE-2017-14502" ref_url="https://www.suse.com/security/cve/CVE-2017-14502/" source="CVE"/>
		<reference ref_id="CVE-2017-14503" ref_url="https://www.suse.com/security/cve/CVE-2017-14503/" source="CVE"/>
		<reference ref_id="CVE-2018-1000877" ref_url="https://www.suse.com/security/cve/CVE-2018-1000877/" source="CVE"/>
		<reference ref_id="CVE-2018-1000878" ref_url="https://www.suse.com/security/cve/CVE-2018-1000878/" source="CVE"/>
		<reference ref_id="CVE-2018-1000879" ref_url="https://www.suse.com/security/cve/CVE-2018-1000879/" source="CVE"/>
		<reference ref_id="CVE-2018-1000880" ref_url="https://www.suse.com/security/cve/CVE-2018-1000880/" source="CVE"/>
		<reference ref_id="CVE-2019-1000019" ref_url="https://www.suse.com/security/cve/CVE-2019-1000019/" source="CVE"/>
		<reference ref_id="CVE-2019-1000020" ref_url="https://www.suse.com/security/cve/CVE-2019-1000020/" source="CVE"/>
		<description>
These are all security issues fixed in the bsdtar-3.3.2-3.8.4 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0211/">CVE-2013-0211</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2304/">CVE-2015-2304</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8917/">CVE-2015-8917</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8928/">CVE-2015-8928</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8933/">CVE-2015-8933</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8934/">CVE-2015-8934</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1541/">CVE-2016-1541</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4300/">CVE-2016-4300</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4301/">CVE-2016-4301</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4809/">CVE-2016-4809</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-5418/">CVE-2016-5418</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5844/">CVE-2016-5844</cve>
	<cve impact="low" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-6250/">CVE-2016-6250</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8687/">CVE-2016-8687</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8688/">CVE-2016-8688</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8689/">CVE-2016-8689</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14166/">CVE-2017-14166</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14501/">CVE-2017-14501</cve>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14502/">CVE-2017-14502</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14503/">CVE-2017-14503</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000877/">CVE-2018-1000877</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000878/">CVE-2018-1000878</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000879/">CVE-2018-1000879</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000880/">CVE-2018-1000880</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1000019/">CVE-2019-1000019</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1000020/">CVE-2019-1000020</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487735" comment="bsdtar-3.3.2-3.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137501" version="1" class="patch">
	<metadata>
		<title>bsh2-2.0.0.b6-3.102 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-2510" ref_url="https://www.suse.com/security/cve/CVE-2016-2510/" source="CVE"/>
		<description>
These are all security issues fixed in the bsh2-2.0.0.b6-3.102 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="critical" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2510/">CVE-2016-2510</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009487621" comment="bsh2-2.0.0.b6-3.102 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487622" comment="bsh2-classgen-2.0.0.b6-3.102 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487623" comment="bsh2-javadoc-2.0.0.b6-3.102 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137502" version="1" class="patch">
	<metadata>
		<title>build-20190128-3.3.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1069904" ref_url="https://bugzilla.suse.com/1069904" source="BUGZILLA"/>
		<reference ref_id="1122895" ref_url="https://bugzilla.suse.com/1122895" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-14804" ref_url="https://www.suse.com/security/cve/CVE-2017-14804/" source="CVE"/>
		<description>
This update for build version 20190128 fixes the following issues:

Security issue fixed:

- CVE-2017-14804: Improve file name check extractbuild (bsc#1069904)

Non-security issue fixed:

- Add initial SLE 15 SP1 config (bsc#1122895)
  		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-14"/>
	<updated date="2019-02-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1069904">SUSE bug 1069904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122895">SUSE bug 1122895</bugzilla>
	<cve impact="important" cvss3="9.9/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14804/">CVE-2017-14804</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496149" comment="build-20190128-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496150" comment="build-mkbaselibs-20190128-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137503" version="1" class="patch">
	<metadata>
		<title>cargo-1.33.0-1.13 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-1000622" ref_url="https://www.suse.com/security/cve/CVE-2018-1000622/" source="CVE"/>
		<description>
These are all security issues fixed in the cargo-1.33.0-1.13 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000622/">CVE-2018-1000622</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009487738" comment="cargo-1.33.0-1.13 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487739" comment="clippy-1.33.0-1.13 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487740" comment="rls-1.33.0-1.13 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487741" comment="rust-1.33.0-1.13 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487742" comment="rust-analysis-1.33.0-1.13 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487743" comment="rust-src-1.33.0-1.13 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487744" comment="rust-std-static-1.33.0-1.13 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487745" comment="rustfmt-1.33.0-1.13 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137504" version="1" class="patch">
	<metadata>
		<title>checkbashisms-2.15.1-1.49 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-2240" ref_url="https://www.suse.com/security/cve/CVE-2012-2240/" source="CVE"/>
		<reference ref_id="CVE-2012-2241" ref_url="https://www.suse.com/security/cve/CVE-2012-2241/" source="CVE"/>
		<reference ref_id="CVE-2012-3500" ref_url="https://www.suse.com/security/cve/CVE-2012-3500/" source="CVE"/>
		<description>
These are all security issues fixed in the checkbashisms-2.15.1-1.49 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2240/">CVE-2012-2240</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2241/">CVE-2012-2241</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-3500/">CVE-2012-3500</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487626" comment="checkbashisms-2.15.1-1.49 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137505" version="1" class="patch">
	<metadata>
		<title>crash-7.2.1-7.15 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-2524" ref_url="https://www.suse.com/security/cve/CVE-2014-2524/" source="CVE"/>
		<description>
These are all security issues fixed in the crash-7.2.1-7.15 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-2524/">CVE-2014-2524</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009487746" comment="crash-7.2.1-7.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487747" comment="crash-devel-7.2.1-7.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487748" comment="crash-kmp-default-7.2.1_k4.12.14_195-7.15 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137506" version="1" class="patch">
	<metadata>
		<title>ctags-5.8-1.27 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-7204" ref_url="https://www.suse.com/security/cve/CVE-2014-7204/" source="CVE"/>
		<description>
These are all security issues fixed in the ctags-5.8-1.27 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-7204/">CVE-2014-7204</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487630" comment="ctags-5.8-1.27 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137507" version="1" class="patch">
	<metadata>
		<title>cups-ddk-2.2.7-3.11.7 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-5519" ref_url="https://www.suse.com/security/cve/CVE-2012-5519/" source="CVE"/>
		<reference ref_id="CVE-2014-3537" ref_url="https://www.suse.com/security/cve/CVE-2014-3537/" source="CVE"/>
		<reference ref_id="CVE-2014-5029" ref_url="https://www.suse.com/security/cve/CVE-2014-5029/" source="CVE"/>
		<reference ref_id="CVE-2014-5030" ref_url="https://www.suse.com/security/cve/CVE-2014-5030/" source="CVE"/>
		<reference ref_id="CVE-2014-5031" ref_url="https://www.suse.com/security/cve/CVE-2014-5031/" source="CVE"/>
		<reference ref_id="CVE-2015-1158" ref_url="https://www.suse.com/security/cve/CVE-2015-1158/" source="CVE"/>
		<reference ref_id="CVE-2015-1159" ref_url="https://www.suse.com/security/cve/CVE-2015-1159/" source="CVE"/>
		<reference ref_id="CVE-2017-18248" ref_url="https://www.suse.com/security/cve/CVE-2017-18248/" source="CVE"/>
		<reference ref_id="CVE-2018-4180" ref_url="https://www.suse.com/security/cve/CVE-2018-4180/" source="CVE"/>
		<reference ref_id="CVE-2018-4181" ref_url="https://www.suse.com/security/cve/CVE-2018-4181/" source="CVE"/>
		<reference ref_id="CVE-2018-4182" ref_url="https://www.suse.com/security/cve/CVE-2018-4182/" source="CVE"/>
		<reference ref_id="CVE-2018-4183" ref_url="https://www.suse.com/security/cve/CVE-2018-4183/" source="CVE"/>
		<reference ref_id="CVE-2018-4700" ref_url="https://www.suse.com/security/cve/CVE-2018-4700/" source="CVE"/>
		<description>
These are all security issues fixed in the cups-ddk-2.2.7-3.11.7 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5519/">CVE-2012-5519</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3537/">CVE-2014-3537</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5029/">CVE-2014-5029</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5030/">CVE-2014-5030</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5031/">CVE-2014-5031</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-1158/">CVE-2015-1158</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-1159/">CVE-2015-1159</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18248/">CVE-2017-18248</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4180/">CVE-2018-4180</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-4181/">CVE-2018-4181</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4182/">CVE-2018-4182</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4183/">CVE-2018-4183</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-4700/">CVE-2018-4700</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487749" comment="cups-ddk-2.2.7-3.11.7 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137508" version="1" class="patch">
	<metadata>
		<title>cvs-1.12.12-2.30 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-0804" ref_url="https://www.suse.com/security/cve/CVE-2012-0804/" source="CVE"/>
		<reference ref_id="CVE-2017-12836" ref_url="https://www.suse.com/security/cve/CVE-2017-12836/" source="CVE"/>
		<description>
These are all security issues fixed in the cvs-1.12.12-2.30 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-0804/">CVE-2012-0804</cve>
	<cve impact="important" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12836/">CVE-2017-12836</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487632" comment="cvs-1.12.12-2.30 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137509" version="1" class="patch">
	<metadata>
		<title>dpkg-1.19.0.4-2.30 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-0840" ref_url="https://www.suse.com/security/cve/CVE-2015-0840/" source="CVE"/>
		<description>
These are all security issues fixed in the dpkg-1.19.0.4-2.30 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0840/">CVE-2015-0840</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009487633" comment="dpkg-1.19.0.4-2.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487634" comment="dpkg-devel-1.19.0.4-2.30 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137510" version="1" class="patch">
	<metadata>
		<title>git-2.16.4-3.9.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1117257" ref_url="https://bugzilla.suse.com/1117257" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19486" ref_url="https://www.suse.com/security/cve/CVE-2018-19486/" source="CVE"/>
		<description>
This update for git fixes the following issues:

Security issue fixed:

- CVE-2018-19486: Fixed git that executed commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the run_command() API and run-command.c, because there was (bsc#1117257).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-19"/>
	<updated date="2018-12-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1117257">SUSE bug 1117257</bugzilla>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-19486/">CVE-2018-19486</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790075" comment="git-2.16.4-3.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790076" comment="git-arch-2.16.4-3.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790077" comment="git-cvs-2.16.4-3.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790078" comment="git-daemon-2.16.4-3.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496020" comment="git-doc-2.16.4-3.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790079" comment="git-email-2.16.4-3.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790080" comment="git-gui-2.16.4-3.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790081" comment="git-svn-2.16.4-3.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790082" comment="git-web-2.16.4-3.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790083" comment="gitk-2.16.4-3.9.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137511" version="1" class="patch">
	<metadata>
		<title>glibc-devel-32bit-2.26-13.19.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-5029" ref_url="https://www.suse.com/security/cve/CVE-2009-5029/" source="CVE"/>
		<reference ref_id="CVE-2009-5064" ref_url="https://www.suse.com/security/cve/CVE-2009-5064/" source="CVE"/>
		<reference ref_id="CVE-2010-3192" ref_url="https://www.suse.com/security/cve/CVE-2010-3192/" source="CVE"/>
		<reference ref_id="CVE-2012-3406" ref_url="https://www.suse.com/security/cve/CVE-2012-3406/" source="CVE"/>
		<reference ref_id="CVE-2012-4412" ref_url="https://www.suse.com/security/cve/CVE-2012-4412/" source="CVE"/>
		<reference ref_id="CVE-2013-0242" ref_url="https://www.suse.com/security/cve/CVE-2013-0242/" source="CVE"/>
		<reference ref_id="CVE-2013-1914" ref_url="https://www.suse.com/security/cve/CVE-2013-1914/" source="CVE"/>
		<reference ref_id="CVE-2013-2207" ref_url="https://www.suse.com/security/cve/CVE-2013-2207/" source="CVE"/>
		<reference ref_id="CVE-2013-4237" ref_url="https://www.suse.com/security/cve/CVE-2013-4237/" source="CVE"/>
		<reference ref_id="CVE-2013-4332" ref_url="https://www.suse.com/security/cve/CVE-2013-4332/" source="CVE"/>
		<reference ref_id="CVE-2013-4458" ref_url="https://www.suse.com/security/cve/CVE-2013-4458/" source="CVE"/>
		<reference ref_id="CVE-2013-7423" ref_url="https://www.suse.com/security/cve/CVE-2013-7423/" source="CVE"/>
		<reference ref_id="CVE-2014-0475" ref_url="https://www.suse.com/security/cve/CVE-2014-0475/" source="CVE"/>
		<reference ref_id="CVE-2014-4043" ref_url="https://www.suse.com/security/cve/CVE-2014-4043/" source="CVE"/>
		<reference ref_id="CVE-2014-5119" ref_url="https://www.suse.com/security/cve/CVE-2014-5119/" source="CVE"/>
		<reference ref_id="CVE-2014-6040" ref_url="https://www.suse.com/security/cve/CVE-2014-6040/" source="CVE"/>
		<reference ref_id="CVE-2014-7817" ref_url="https://www.suse.com/security/cve/CVE-2014-7817/" source="CVE"/>
		<reference ref_id="CVE-2014-8121" ref_url="https://www.suse.com/security/cve/CVE-2014-8121/" source="CVE"/>
		<reference ref_id="CVE-2014-9402" ref_url="https://www.suse.com/security/cve/CVE-2014-9402/" source="CVE"/>
		<reference ref_id="CVE-2014-9761" ref_url="https://www.suse.com/security/cve/CVE-2014-9761/" source="CVE"/>
		<reference ref_id="CVE-2015-1472" ref_url="https://www.suse.com/security/cve/CVE-2015-1472/" source="CVE"/>
		<reference ref_id="CVE-2015-1473" ref_url="https://www.suse.com/security/cve/CVE-2015-1473/" source="CVE"/>
		<reference ref_id="CVE-2015-1781" ref_url="https://www.suse.com/security/cve/CVE-2015-1781/" source="CVE"/>
		<reference ref_id="CVE-2015-5180" ref_url="https://www.suse.com/security/cve/CVE-2015-5180/" source="CVE"/>
		<reference ref_id="CVE-2015-7547" ref_url="https://www.suse.com/security/cve/CVE-2015-7547/" source="CVE"/>
		<reference ref_id="CVE-2015-8776" ref_url="https://www.suse.com/security/cve/CVE-2015-8776/" source="CVE"/>
		<reference ref_id="CVE-2015-8777" ref_url="https://www.suse.com/security/cve/CVE-2015-8777/" source="CVE"/>
		<reference ref_id="CVE-2015-8778" ref_url="https://www.suse.com/security/cve/CVE-2015-8778/" source="CVE"/>
		<reference ref_id="CVE-2015-8779" ref_url="https://www.suse.com/security/cve/CVE-2015-8779/" source="CVE"/>
		<reference ref_id="CVE-2016-10739" ref_url="https://www.suse.com/security/cve/CVE-2016-10739/" source="CVE"/>
		<reference ref_id="CVE-2016-1234" ref_url="https://www.suse.com/security/cve/CVE-2016-1234/" source="CVE"/>
		<reference ref_id="CVE-2016-3075" ref_url="https://www.suse.com/security/cve/CVE-2016-3075/" source="CVE"/>
		<reference ref_id="CVE-2016-3706" ref_url="https://www.suse.com/security/cve/CVE-2016-3706/" source="CVE"/>
		<reference ref_id="CVE-2016-4429" ref_url="https://www.suse.com/security/cve/CVE-2016-4429/" source="CVE"/>
		<reference ref_id="CVE-2016-5417" ref_url="https://www.suse.com/security/cve/CVE-2016-5417/" source="CVE"/>
		<reference ref_id="CVE-2016-6323" ref_url="https://www.suse.com/security/cve/CVE-2016-6323/" source="CVE"/>
		<reference ref_id="CVE-2017-1000366" ref_url="https://www.suse.com/security/cve/CVE-2017-1000366/" source="CVE"/>
		<reference ref_id="CVE-2017-1000408" ref_url="https://www.suse.com/security/cve/CVE-2017-1000408/" source="CVE"/>
		<reference ref_id="CVE-2017-1000409" ref_url="https://www.suse.com/security/cve/CVE-2017-1000409/" source="CVE"/>
		<reference ref_id="CVE-2017-12132" ref_url="https://www.suse.com/security/cve/CVE-2017-12132/" source="CVE"/>
		<reference ref_id="CVE-2017-12133" ref_url="https://www.suse.com/security/cve/CVE-2017-12133/" source="CVE"/>
		<reference ref_id="CVE-2017-15670" ref_url="https://www.suse.com/security/cve/CVE-2017-15670/" source="CVE"/>
		<reference ref_id="CVE-2017-15671" ref_url="https://www.suse.com/security/cve/CVE-2017-15671/" source="CVE"/>
		<reference ref_id="CVE-2017-15804" ref_url="https://www.suse.com/security/cve/CVE-2017-15804/" source="CVE"/>
		<reference ref_id="CVE-2017-16997" ref_url="https://www.suse.com/security/cve/CVE-2017-16997/" source="CVE"/>
		<reference ref_id="CVE-2017-17426" ref_url="https://www.suse.com/security/cve/CVE-2017-17426/" source="CVE"/>
		<reference ref_id="CVE-2017-18269" ref_url="https://www.suse.com/security/cve/CVE-2017-18269/" source="CVE"/>
		<reference ref_id="CVE-2018-1000001" ref_url="https://www.suse.com/security/cve/CVE-2018-1000001/" source="CVE"/>
		<reference ref_id="CVE-2018-11236" ref_url="https://www.suse.com/security/cve/CVE-2018-11236/" source="CVE"/>
		<reference ref_id="CVE-2018-11237" ref_url="https://www.suse.com/security/cve/CVE-2018-11237/" source="CVE"/>
		<reference ref_id="CVE-2018-6485" ref_url="https://www.suse.com/security/cve/CVE-2018-6485/" source="CVE"/>
		<reference ref_id="CVE-2018-6551" ref_url="https://www.suse.com/security/cve/CVE-2018-6551/" source="CVE"/>
		<description>
These are all security issues fixed in the glibc-devel-32bit-2.26-13.19.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5029/">CVE-2009-5029</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5064/">CVE-2009-5064</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3192/">CVE-2010-3192</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3406/">CVE-2012-3406</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-4412/">CVE-2012-4412</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0242/">CVE-2013-0242</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1914/">CVE-2013-1914</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2207/">CVE-2013-2207</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4237/">CVE-2013-4237</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4332/">CVE-2013-4332</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4458/">CVE-2013-4458</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7423/">CVE-2013-7423</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0475/">CVE-2014-0475</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-4043/">CVE-2014-4043</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-5119/">CVE-2014-5119</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-6040/">CVE-2014-6040</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7817/">CVE-2014-7817</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8121/">CVE-2014-8121</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9402/">CVE-2014-9402</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9761/">CVE-2014-9761</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1472/">CVE-2015-1472</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1473/">CVE-2015-1473</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1781/">CVE-2015-1781</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5180/">CVE-2015-5180</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7547/">CVE-2015-7547</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8776/">CVE-2015-8776</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8777/">CVE-2015-8777</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8778/">CVE-2015-8778</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8779/">CVE-2015-8779</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-10739/">CVE-2016-10739</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1234/">CVE-2016-1234</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3075/">CVE-2016-3075</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3706/">CVE-2016-3706</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4429/">CVE-2016-4429</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5417/">CVE-2016-5417</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6323/">CVE-2016-6323</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000366/">CVE-2017-1000366</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000408/">CVE-2017-1000408</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000409/">CVE-2017-1000409</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-12132/">CVE-2017-12132</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12133/">CVE-2017-12133</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15670/">CVE-2017-15670</cve>
	<cve impact="important" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15671/">CVE-2017-15671</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-15804/">CVE-2017-15804</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16997/">CVE-2017-16997</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17426/">CVE-2017-17426</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18269/">CVE-2017-18269</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000001/">CVE-2018-1000001</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11236/">CVE-2018-11236</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11237/">CVE-2018-11237</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-6485/">CVE-2018-6485</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6551/">CVE-2018-6551</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009511089" comment="glibc-devel-32bit-2.26-13.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487761" comment="glibc-devel-static-2.26-13.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487762" comment="glibc-utils-2.26-13.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137512" version="1" class="patch">
	<metadata>
		<title>glibc-devel-32bit-2.26-8.21 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-5029" ref_url="https://www.suse.com/security/cve/CVE-2009-5029/" source="CVE"/>
		<reference ref_id="CVE-2009-5064" ref_url="https://www.suse.com/security/cve/CVE-2009-5064/" source="CVE"/>
		<reference ref_id="CVE-2010-3192" ref_url="https://www.suse.com/security/cve/CVE-2010-3192/" source="CVE"/>
		<reference ref_id="CVE-2012-3406" ref_url="https://www.suse.com/security/cve/CVE-2012-3406/" source="CVE"/>
		<reference ref_id="CVE-2012-4412" ref_url="https://www.suse.com/security/cve/CVE-2012-4412/" source="CVE"/>
		<reference ref_id="CVE-2013-0242" ref_url="https://www.suse.com/security/cve/CVE-2013-0242/" source="CVE"/>
		<reference ref_id="CVE-2013-1914" ref_url="https://www.suse.com/security/cve/CVE-2013-1914/" source="CVE"/>
		<reference ref_id="CVE-2013-2207" ref_url="https://www.suse.com/security/cve/CVE-2013-2207/" source="CVE"/>
		<reference ref_id="CVE-2013-4237" ref_url="https://www.suse.com/security/cve/CVE-2013-4237/" source="CVE"/>
		<reference ref_id="CVE-2013-4332" ref_url="https://www.suse.com/security/cve/CVE-2013-4332/" source="CVE"/>
		<reference ref_id="CVE-2013-4458" ref_url="https://www.suse.com/security/cve/CVE-2013-4458/" source="CVE"/>
		<reference ref_id="CVE-2013-7423" ref_url="https://www.suse.com/security/cve/CVE-2013-7423/" source="CVE"/>
		<reference ref_id="CVE-2014-0475" ref_url="https://www.suse.com/security/cve/CVE-2014-0475/" source="CVE"/>
		<reference ref_id="CVE-2014-4043" ref_url="https://www.suse.com/security/cve/CVE-2014-4043/" source="CVE"/>
		<reference ref_id="CVE-2014-5119" ref_url="https://www.suse.com/security/cve/CVE-2014-5119/" source="CVE"/>
		<reference ref_id="CVE-2014-6040" ref_url="https://www.suse.com/security/cve/CVE-2014-6040/" source="CVE"/>
		<reference ref_id="CVE-2014-7817" ref_url="https://www.suse.com/security/cve/CVE-2014-7817/" source="CVE"/>
		<reference ref_id="CVE-2014-8121" ref_url="https://www.suse.com/security/cve/CVE-2014-8121/" source="CVE"/>
		<reference ref_id="CVE-2014-9402" ref_url="https://www.suse.com/security/cve/CVE-2014-9402/" source="CVE"/>
		<reference ref_id="CVE-2014-9761" ref_url="https://www.suse.com/security/cve/CVE-2014-9761/" source="CVE"/>
		<reference ref_id="CVE-2015-1472" ref_url="https://www.suse.com/security/cve/CVE-2015-1472/" source="CVE"/>
		<reference ref_id="CVE-2015-1473" ref_url="https://www.suse.com/security/cve/CVE-2015-1473/" source="CVE"/>
		<reference ref_id="CVE-2015-1781" ref_url="https://www.suse.com/security/cve/CVE-2015-1781/" source="CVE"/>
		<reference ref_id="CVE-2015-5180" ref_url="https://www.suse.com/security/cve/CVE-2015-5180/" source="CVE"/>
		<reference ref_id="CVE-2015-7547" ref_url="https://www.suse.com/security/cve/CVE-2015-7547/" source="CVE"/>
		<reference ref_id="CVE-2015-8776" ref_url="https://www.suse.com/security/cve/CVE-2015-8776/" source="CVE"/>
		<reference ref_id="CVE-2015-8777" ref_url="https://www.suse.com/security/cve/CVE-2015-8777/" source="CVE"/>
		<reference ref_id="CVE-2015-8778" ref_url="https://www.suse.com/security/cve/CVE-2015-8778/" source="CVE"/>
		<reference ref_id="CVE-2015-8779" ref_url="https://www.suse.com/security/cve/CVE-2015-8779/" source="CVE"/>
		<reference ref_id="CVE-2016-1234" ref_url="https://www.suse.com/security/cve/CVE-2016-1234/" source="CVE"/>
		<reference ref_id="CVE-2016-3075" ref_url="https://www.suse.com/security/cve/CVE-2016-3075/" source="CVE"/>
		<reference ref_id="CVE-2016-3706" ref_url="https://www.suse.com/security/cve/CVE-2016-3706/" source="CVE"/>
		<reference ref_id="CVE-2016-4429" ref_url="https://www.suse.com/security/cve/CVE-2016-4429/" source="CVE"/>
		<reference ref_id="CVE-2016-5417" ref_url="https://www.suse.com/security/cve/CVE-2016-5417/" source="CVE"/>
		<reference ref_id="CVE-2016-6323" ref_url="https://www.suse.com/security/cve/CVE-2016-6323/" source="CVE"/>
		<reference ref_id="CVE-2017-1000366" ref_url="https://www.suse.com/security/cve/CVE-2017-1000366/" source="CVE"/>
		<reference ref_id="CVE-2017-1000408" ref_url="https://www.suse.com/security/cve/CVE-2017-1000408/" source="CVE"/>
		<reference ref_id="CVE-2017-1000409" ref_url="https://www.suse.com/security/cve/CVE-2017-1000409/" source="CVE"/>
		<reference ref_id="CVE-2017-12132" ref_url="https://www.suse.com/security/cve/CVE-2017-12132/" source="CVE"/>
		<reference ref_id="CVE-2017-12133" ref_url="https://www.suse.com/security/cve/CVE-2017-12133/" source="CVE"/>
		<reference ref_id="CVE-2017-15670" ref_url="https://www.suse.com/security/cve/CVE-2017-15670/" source="CVE"/>
		<reference ref_id="CVE-2017-15671" ref_url="https://www.suse.com/security/cve/CVE-2017-15671/" source="CVE"/>
		<reference ref_id="CVE-2017-15804" ref_url="https://www.suse.com/security/cve/CVE-2017-15804/" source="CVE"/>
		<reference ref_id="CVE-2017-16997" ref_url="https://www.suse.com/security/cve/CVE-2017-16997/" source="CVE"/>
		<reference ref_id="CVE-2017-17426" ref_url="https://www.suse.com/security/cve/CVE-2017-17426/" source="CVE"/>
		<reference ref_id="CVE-2018-1000001" ref_url="https://www.suse.com/security/cve/CVE-2018-1000001/" source="CVE"/>
		<reference ref_id="CVE-2018-6485" ref_url="https://www.suse.com/security/cve/CVE-2018-6485/" source="CVE"/>
		<reference ref_id="CVE-2018-6551" ref_url="https://www.suse.com/security/cve/CVE-2018-6551/" source="CVE"/>
		<description>
These are all security issues fixed in the glibc-devel-32bit-2.26-8.21 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5029/">CVE-2009-5029</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5064/">CVE-2009-5064</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3192/">CVE-2010-3192</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3406/">CVE-2012-3406</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-4412/">CVE-2012-4412</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0242/">CVE-2013-0242</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1914/">CVE-2013-1914</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2207/">CVE-2013-2207</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4237/">CVE-2013-4237</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4332/">CVE-2013-4332</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4458/">CVE-2013-4458</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7423/">CVE-2013-7423</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0475/">CVE-2014-0475</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-4043/">CVE-2014-4043</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-5119/">CVE-2014-5119</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-6040/">CVE-2014-6040</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7817/">CVE-2014-7817</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8121/">CVE-2014-8121</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-9402/">CVE-2014-9402</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9761/">CVE-2014-9761</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1472/">CVE-2015-1472</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1473/">CVE-2015-1473</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1781/">CVE-2015-1781</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5180/">CVE-2015-5180</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7547/">CVE-2015-7547</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8776/">CVE-2015-8776</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8777/">CVE-2015-8777</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8778/">CVE-2015-8778</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8779/">CVE-2015-8779</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1234/">CVE-2016-1234</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3075/">CVE-2016-3075</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3706/">CVE-2016-3706</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4429/">CVE-2016-4429</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5417/">CVE-2016-5417</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6323/">CVE-2016-6323</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000366/">CVE-2017-1000366</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000408/">CVE-2017-1000408</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000409/">CVE-2017-1000409</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-12132/">CVE-2017-12132</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12133/">CVE-2017-12133</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15670/">CVE-2017-15670</cve>
	<cve impact="important" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15671/">CVE-2017-15671</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-15804/">CVE-2017-15804</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16997/">CVE-2017-16997</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17426/">CVE-2017-17426</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000001/">CVE-2018-1000001</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-6485/">CVE-2018-6485</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6551/">CVE-2018-6551</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487760" comment="glibc-devel-32bit-2.26-8.21 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137513" version="1" class="patch">
	<metadata>
		<title>jython-2.2.1-4.36 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2027" ref_url="https://www.suse.com/security/cve/CVE-2013-2027/" source="CVE"/>
		<description>
These are all security issues fixed in the jython-2.2.1-4.36 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2027/">CVE-2013-2027</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487653" comment="jython-2.2.1-4.36 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137514" version="1" class="patch">
	<metadata>
		<title>kernel-docs-4.12.14-195.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-1000251" ref_url="https://www.suse.com/security/cve/CVE-2017-1000251/" source="CVE"/>
		<reference ref_id="CVE-2017-1000252" ref_url="https://www.suse.com/security/cve/CVE-2017-1000252/" source="CVE"/>
		<reference ref_id="CVE-2017-1000255" ref_url="https://www.suse.com/security/cve/CVE-2017-1000255/" source="CVE"/>
		<reference ref_id="CVE-2017-1000410" ref_url="https://www.suse.com/security/cve/CVE-2017-1000410/" source="CVE"/>
		<reference ref_id="CVE-2017-11473" ref_url="https://www.suse.com/security/cve/CVE-2017-11473/" source="CVE"/>
		<reference ref_id="CVE-2017-11600" ref_url="https://www.suse.com/security/cve/CVE-2017-11600/" source="CVE"/>
		<reference ref_id="CVE-2017-12153" ref_url="https://www.suse.com/security/cve/CVE-2017-12153/" source="CVE"/>
		<reference ref_id="CVE-2017-12154" ref_url="https://www.suse.com/security/cve/CVE-2017-12154/" source="CVE"/>
		<reference ref_id="CVE-2017-12190" ref_url="https://www.suse.com/security/cve/CVE-2017-12190/" source="CVE"/>
		<reference ref_id="CVE-2017-12193" ref_url="https://www.suse.com/security/cve/CVE-2017-12193/" source="CVE"/>
		<reference ref_id="CVE-2017-13080" ref_url="https://www.suse.com/security/cve/CVE-2017-13080/" source="CVE"/>
		<reference ref_id="CVE-2017-13166" ref_url="https://www.suse.com/security/cve/CVE-2017-13166/" source="CVE"/>
		<reference ref_id="CVE-2017-14051" ref_url="https://www.suse.com/security/cve/CVE-2017-14051/" source="CVE"/>
		<reference ref_id="CVE-2017-14489" ref_url="https://www.suse.com/security/cve/CVE-2017-14489/" source="CVE"/>
		<reference ref_id="CVE-2017-15115" ref_url="https://www.suse.com/security/cve/CVE-2017-15115/" source="CVE"/>
		<reference ref_id="CVE-2017-15127" ref_url="https://www.suse.com/security/cve/CVE-2017-15127/" source="CVE"/>
		<reference ref_id="CVE-2017-15128" ref_url="https://www.suse.com/security/cve/CVE-2017-15128/" source="CVE"/>
		<reference ref_id="CVE-2017-15129" ref_url="https://www.suse.com/security/cve/CVE-2017-15129/" source="CVE"/>
		<reference ref_id="CVE-2017-15265" ref_url="https://www.suse.com/security/cve/CVE-2017-15265/" source="CVE"/>
		<reference ref_id="CVE-2017-15537" ref_url="https://www.suse.com/security/cve/CVE-2017-15537/" source="CVE"/>
		<reference ref_id="CVE-2017-15649" ref_url="https://www.suse.com/security/cve/CVE-2017-15649/" source="CVE"/>
		<reference ref_id="CVE-2017-15951" ref_url="https://www.suse.com/security/cve/CVE-2017-15951/" source="CVE"/>
		<reference ref_id="CVE-2017-16525" ref_url="https://www.suse.com/security/cve/CVE-2017-16525/" source="CVE"/>
		<reference ref_id="CVE-2017-16527" ref_url="https://www.suse.com/security/cve/CVE-2017-16527/" source="CVE"/>
		<reference ref_id="CVE-2017-16528" ref_url="https://www.suse.com/security/cve/CVE-2017-16528/" source="CVE"/>
		<reference ref_id="CVE-2017-16529" ref_url="https://www.suse.com/security/cve/CVE-2017-16529/" source="CVE"/>
		<reference ref_id="CVE-2017-16531" ref_url="https://www.suse.com/security/cve/CVE-2017-16531/" source="CVE"/>
		<reference ref_id="CVE-2017-16533" ref_url="https://www.suse.com/security/cve/CVE-2017-16533/" source="CVE"/>
		<reference ref_id="CVE-2017-16534" ref_url="https://www.suse.com/security/cve/CVE-2017-16534/" source="CVE"/>
		<reference ref_id="CVE-2017-16535" ref_url="https://www.suse.com/security/cve/CVE-2017-16535/" source="CVE"/>
		<reference ref_id="CVE-2017-16536" ref_url="https://www.suse.com/security/cve/CVE-2017-16536/" source="CVE"/>
		<reference ref_id="CVE-2017-16537" ref_url="https://www.suse.com/security/cve/CVE-2017-16537/" source="CVE"/>
		<reference ref_id="CVE-2017-16538" ref_url="https://www.suse.com/security/cve/CVE-2017-16538/" source="CVE"/>
		<reference ref_id="CVE-2017-16644" ref_url="https://www.suse.com/security/cve/CVE-2017-16644/" source="CVE"/>
		<reference ref_id="CVE-2017-16645" ref_url="https://www.suse.com/security/cve/CVE-2017-16645/" source="CVE"/>
		<reference ref_id="CVE-2017-16646" ref_url="https://www.suse.com/security/cve/CVE-2017-16646/" source="CVE"/>
		<reference ref_id="CVE-2017-16647" ref_url="https://www.suse.com/security/cve/CVE-2017-16647/" source="CVE"/>
		<reference ref_id="CVE-2017-16649" ref_url="https://www.suse.com/security/cve/CVE-2017-16649/" source="CVE"/>
		<reference ref_id="CVE-2017-16650" ref_url="https://www.suse.com/security/cve/CVE-2017-16650/" source="CVE"/>
		<reference ref_id="CVE-2017-16911" ref_url="https://www.suse.com/security/cve/CVE-2017-16911/" source="CVE"/>
		<reference ref_id="CVE-2017-16912" ref_url="https://www.suse.com/security/cve/CVE-2017-16912/" source="CVE"/>
		<reference ref_id="CVE-2017-16913" ref_url="https://www.suse.com/security/cve/CVE-2017-16913/" source="CVE"/>
		<reference ref_id="CVE-2017-16914" ref_url="https://www.suse.com/security/cve/CVE-2017-16914/" source="CVE"/>
		<reference ref_id="CVE-2017-16939" ref_url="https://www.suse.com/security/cve/CVE-2017-16939/" source="CVE"/>
		<reference ref_id="CVE-2017-16994" ref_url="https://www.suse.com/security/cve/CVE-2017-16994/" source="CVE"/>
		<reference ref_id="CVE-2017-16995" ref_url="https://www.suse.com/security/cve/CVE-2017-16995/" source="CVE"/>
		<reference ref_id="CVE-2017-16996" ref_url="https://www.suse.com/security/cve/CVE-2017-16996/" source="CVE"/>
		<reference ref_id="CVE-2017-17052" ref_url="https://www.suse.com/security/cve/CVE-2017-17052/" source="CVE"/>
		<reference ref_id="CVE-2017-17448" ref_url="https://www.suse.com/security/cve/CVE-2017-17448/" source="CVE"/>
		<reference ref_id="CVE-2017-17449" ref_url="https://www.suse.com/security/cve/CVE-2017-17449/" source="CVE"/>
		<reference ref_id="CVE-2017-17450" ref_url="https://www.suse.com/security/cve/CVE-2017-17450/" source="CVE"/>
		<reference ref_id="CVE-2017-17558" ref_url="https://www.suse.com/security/cve/CVE-2017-17558/" source="CVE"/>
		<reference ref_id="CVE-2017-17712" ref_url="https://www.suse.com/security/cve/CVE-2017-17712/" source="CVE"/>
		<reference ref_id="CVE-2017-17741" ref_url="https://www.suse.com/security/cve/CVE-2017-17741/" source="CVE"/>
		<reference ref_id="CVE-2017-17805" ref_url="https://www.suse.com/security/cve/CVE-2017-17805/" source="CVE"/>
		<reference ref_id="CVE-2017-17806" ref_url="https://www.suse.com/security/cve/CVE-2017-17806/" source="CVE"/>
		<reference ref_id="CVE-2017-17852" ref_url="https://www.suse.com/security/cve/CVE-2017-17852/" source="CVE"/>
		<reference ref_id="CVE-2017-17853" ref_url="https://www.suse.com/security/cve/CVE-2017-17853/" source="CVE"/>
		<reference ref_id="CVE-2017-17854" ref_url="https://www.suse.com/security/cve/CVE-2017-17854/" source="CVE"/>
		<reference ref_id="CVE-2017-17855" ref_url="https://www.suse.com/security/cve/CVE-2017-17855/" source="CVE"/>
		<reference ref_id="CVE-2017-17856" ref_url="https://www.suse.com/security/cve/CVE-2017-17856/" source="CVE"/>
		<reference ref_id="CVE-2017-17857" ref_url="https://www.suse.com/security/cve/CVE-2017-17857/" source="CVE"/>
		<reference ref_id="CVE-2017-17862" ref_url="https://www.suse.com/security/cve/CVE-2017-17862/" source="CVE"/>
		<reference ref_id="CVE-2017-17864" ref_url="https://www.suse.com/security/cve/CVE-2017-17864/" source="CVE"/>
		<reference ref_id="CVE-2017-17975" ref_url="https://www.suse.com/security/cve/CVE-2017-17975/" source="CVE"/>
		<reference ref_id="CVE-2017-18075" ref_url="https://www.suse.com/security/cve/CVE-2017-18075/" source="CVE"/>
		<reference ref_id="CVE-2017-18202" ref_url="https://www.suse.com/security/cve/CVE-2017-18202/" source="CVE"/>
		<reference ref_id="CVE-2017-18203" ref_url="https://www.suse.com/security/cve/CVE-2017-18203/" source="CVE"/>
		<reference ref_id="CVE-2017-18204" ref_url="https://www.suse.com/security/cve/CVE-2017-18204/" source="CVE"/>
		<reference ref_id="CVE-2017-18208" ref_url="https://www.suse.com/security/cve/CVE-2017-18208/" source="CVE"/>
		<reference ref_id="CVE-2017-18224" ref_url="https://www.suse.com/security/cve/CVE-2017-18224/" source="CVE"/>
		<reference ref_id="CVE-2017-18344" ref_url="https://www.suse.com/security/cve/CVE-2017-18344/" source="CVE"/>
		<reference ref_id="CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715/" source="CVE"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2017-5754" ref_url="https://www.suse.com/security/cve/CVE-2017-5754/" source="CVE"/>
		<reference ref_id="CVE-2017-7541" ref_url="https://www.suse.com/security/cve/CVE-2017-7541/" source="CVE"/>
		<reference ref_id="CVE-2017-7542" ref_url="https://www.suse.com/security/cve/CVE-2017-7542/" source="CVE"/>
		<reference ref_id="CVE-2017-8824" ref_url="https://www.suse.com/security/cve/CVE-2017-8824/" source="CVE"/>
		<reference ref_id="CVE-2017-8831" ref_url="https://www.suse.com/security/cve/CVE-2017-8831/" source="CVE"/>
		<reference ref_id="CVE-2018-1000004" ref_url="https://www.suse.com/security/cve/CVE-2018-1000004/" source="CVE"/>
		<reference ref_id="CVE-2018-1000028" ref_url="https://www.suse.com/security/cve/CVE-2018-1000028/" source="CVE"/>
		<reference ref_id="CVE-2018-1000200" ref_url="https://www.suse.com/security/cve/CVE-2018-1000200/" source="CVE"/>
		<reference ref_id="CVE-2018-1000204" ref_url="https://www.suse.com/security/cve/CVE-2018-1000204/" source="CVE"/>
		<reference ref_id="CVE-2018-10087" ref_url="https://www.suse.com/security/cve/CVE-2018-10087/" source="CVE"/>
		<reference ref_id="CVE-2018-10124" ref_url="https://www.suse.com/security/cve/CVE-2018-10124/" source="CVE"/>
		<reference ref_id="CVE-2018-10323" ref_url="https://www.suse.com/security/cve/CVE-2018-10323/" source="CVE"/>
		<reference ref_id="CVE-2018-1065" ref_url="https://www.suse.com/security/cve/CVE-2018-1065/" source="CVE"/>
		<reference ref_id="CVE-2018-1068" ref_url="https://www.suse.com/security/cve/CVE-2018-1068/" source="CVE"/>
		<reference ref_id="CVE-2018-10853" ref_url="https://www.suse.com/security/cve/CVE-2018-10853/" source="CVE"/>
		<reference ref_id="CVE-2018-10902" ref_url="https://www.suse.com/security/cve/CVE-2018-10902/" source="CVE"/>
		<reference ref_id="CVE-2018-1091" ref_url="https://www.suse.com/security/cve/CVE-2018-1091/" source="CVE"/>
		<reference ref_id="CVE-2018-10938" ref_url="https://www.suse.com/security/cve/CVE-2018-10938/" source="CVE"/>
		<reference ref_id="CVE-2018-1094" ref_url="https://www.suse.com/security/cve/CVE-2018-1094/" source="CVE"/>
		<reference ref_id="CVE-2018-10940" ref_url="https://www.suse.com/security/cve/CVE-2018-10940/" source="CVE"/>
		<reference ref_id="CVE-2018-1108" ref_url="https://www.suse.com/security/cve/CVE-2018-1108/" source="CVE"/>
		<reference ref_id="CVE-2018-1118" ref_url="https://www.suse.com/security/cve/CVE-2018-1118/" source="CVE"/>
		<reference ref_id="CVE-2018-1120" ref_url="https://www.suse.com/security/cve/CVE-2018-1120/" source="CVE"/>
		<reference ref_id="CVE-2018-1128" ref_url="https://www.suse.com/security/cve/CVE-2018-1128/" source="CVE"/>
		<reference ref_id="CVE-2018-1129" ref_url="https://www.suse.com/security/cve/CVE-2018-1129/" source="CVE"/>
		<reference ref_id="CVE-2018-1130" ref_url="https://www.suse.com/security/cve/CVE-2018-1130/" source="CVE"/>
		<reference ref_id="CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126/" source="CVE"/>
		<reference ref_id="CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127/" source="CVE"/>
		<reference ref_id="CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130/" source="CVE"/>
		<reference ref_id="CVE-2018-12232" ref_url="https://www.suse.com/security/cve/CVE-2018-12232/" source="CVE"/>
		<reference ref_id="CVE-2018-12233" ref_url="https://www.suse.com/security/cve/CVE-2018-12233/" source="CVE"/>
		<reference ref_id="CVE-2018-12896" ref_url="https://www.suse.com/security/cve/CVE-2018-12896/" source="CVE"/>
		<reference ref_id="CVE-2018-13053" ref_url="https://www.suse.com/security/cve/CVE-2018-13053/" source="CVE"/>
		<reference ref_id="CVE-2018-13093" ref_url="https://www.suse.com/security/cve/CVE-2018-13093/" source="CVE"/>
		<reference ref_id="CVE-2018-13094" ref_url="https://www.suse.com/security/cve/CVE-2018-13094/" source="CVE"/>
		<reference ref_id="CVE-2018-13095" ref_url="https://www.suse.com/security/cve/CVE-2018-13095/" source="CVE"/>
		<reference ref_id="CVE-2018-13405" ref_url="https://www.suse.com/security/cve/CVE-2018-13405/" source="CVE"/>
		<reference ref_id="CVE-2018-13406" ref_url="https://www.suse.com/security/cve/CVE-2018-13406/" source="CVE"/>
		<reference ref_id="CVE-2018-14613" ref_url="https://www.suse.com/security/cve/CVE-2018-14613/" source="CVE"/>
		<reference ref_id="CVE-2018-14617" ref_url="https://www.suse.com/security/cve/CVE-2018-14617/" source="CVE"/>
		<reference ref_id="CVE-2018-14625" ref_url="https://www.suse.com/security/cve/CVE-2018-14625/" source="CVE"/>
		<reference ref_id="CVE-2018-14633" ref_url="https://www.suse.com/security/cve/CVE-2018-14633/" source="CVE"/>
		<reference ref_id="CVE-2018-15572" ref_url="https://www.suse.com/security/cve/CVE-2018-15572/" source="CVE"/>
		<reference ref_id="CVE-2018-16658" ref_url="https://www.suse.com/security/cve/CVE-2018-16658/" source="CVE"/>
		<reference ref_id="CVE-2018-16862" ref_url="https://www.suse.com/security/cve/CVE-2018-16862/" source="CVE"/>
		<reference ref_id="CVE-2018-16880" ref_url="https://www.suse.com/security/cve/CVE-2018-16880/" source="CVE"/>
		<reference ref_id="CVE-2018-16884" ref_url="https://www.suse.com/security/cve/CVE-2018-16884/" source="CVE"/>
		<reference ref_id="CVE-2018-17182" ref_url="https://www.suse.com/security/cve/CVE-2018-17182/" source="CVE"/>
		<reference ref_id="CVE-2018-18281" ref_url="https://www.suse.com/security/cve/CVE-2018-18281/" source="CVE"/>
		<reference ref_id="CVE-2018-18386" ref_url="https://www.suse.com/security/cve/CVE-2018-18386/" source="CVE"/>
		<reference ref_id="CVE-2018-18397" ref_url="https://www.suse.com/security/cve/CVE-2018-18397/" source="CVE"/>
		<reference ref_id="CVE-2018-18445" ref_url="https://www.suse.com/security/cve/CVE-2018-18445/" source="CVE"/>
		<reference ref_id="CVE-2018-18710" ref_url="https://www.suse.com/security/cve/CVE-2018-18710/" source="CVE"/>
		<reference ref_id="CVE-2018-19407" ref_url="https://www.suse.com/security/cve/CVE-2018-19407/" source="CVE"/>
		<reference ref_id="CVE-2018-19824" ref_url="https://www.suse.com/security/cve/CVE-2018-19824/" source="CVE"/>
		<reference ref_id="CVE-2018-19854" ref_url="https://www.suse.com/security/cve/CVE-2018-19854/" source="CVE"/>
		<reference ref_id="CVE-2018-19985" ref_url="https://www.suse.com/security/cve/CVE-2018-19985/" source="CVE"/>
		<reference ref_id="CVE-2018-20169" ref_url="https://www.suse.com/security/cve/CVE-2018-20169/" source="CVE"/>
		<reference ref_id="CVE-2018-20669" ref_url="https://www.suse.com/security/cve/CVE-2018-20669/" source="CVE"/>
		<reference ref_id="CVE-2018-3620" ref_url="https://www.suse.com/security/cve/CVE-2018-3620/" source="CVE"/>
		<reference ref_id="CVE-2018-3639" ref_url="https://www.suse.com/security/cve/CVE-2018-3639/" source="CVE"/>
		<reference ref_id="CVE-2018-3646" ref_url="https://www.suse.com/security/cve/CVE-2018-3646/" source="CVE"/>
		<reference ref_id="CVE-2018-5332" ref_url="https://www.suse.com/security/cve/CVE-2018-5332/" source="CVE"/>
		<reference ref_id="CVE-2018-5333" ref_url="https://www.suse.com/security/cve/CVE-2018-5333/" source="CVE"/>
		<reference ref_id="CVE-2018-5390" ref_url="https://www.suse.com/security/cve/CVE-2018-5390/" source="CVE"/>
		<reference ref_id="CVE-2018-5391" ref_url="https://www.suse.com/security/cve/CVE-2018-5391/" source="CVE"/>
		<reference ref_id="CVE-2018-5803" ref_url="https://www.suse.com/security/cve/CVE-2018-5803/" source="CVE"/>
		<reference ref_id="CVE-2018-5848" ref_url="https://www.suse.com/security/cve/CVE-2018-5848/" source="CVE"/>
		<reference ref_id="CVE-2018-6554" ref_url="https://www.suse.com/security/cve/CVE-2018-6554/" source="CVE"/>
		<reference ref_id="CVE-2018-6555" ref_url="https://www.suse.com/security/cve/CVE-2018-6555/" source="CVE"/>
		<reference ref_id="CVE-2018-6927" ref_url="https://www.suse.com/security/cve/CVE-2018-6927/" source="CVE"/>
		<reference ref_id="CVE-2018-7492" ref_url="https://www.suse.com/security/cve/CVE-2018-7492/" source="CVE"/>
		<reference ref_id="CVE-2018-7566" ref_url="https://www.suse.com/security/cve/CVE-2018-7566/" source="CVE"/>
		<reference ref_id="CVE-2018-7740" ref_url="https://www.suse.com/security/cve/CVE-2018-7740/" source="CVE"/>
		<reference ref_id="CVE-2018-8043" ref_url="https://www.suse.com/security/cve/CVE-2018-8043/" source="CVE"/>
		<reference ref_id="CVE-2018-8087" ref_url="https://www.suse.com/security/cve/CVE-2018-8087/" source="CVE"/>
		<reference ref_id="CVE-2018-8781" ref_url="https://www.suse.com/security/cve/CVE-2018-8781/" source="CVE"/>
		<reference ref_id="CVE-2018-8822" ref_url="https://www.suse.com/security/cve/CVE-2018-8822/" source="CVE"/>
		<reference ref_id="CVE-2018-9363" ref_url="https://www.suse.com/security/cve/CVE-2018-9363/" source="CVE"/>
		<reference ref_id="CVE-2018-9385" ref_url="https://www.suse.com/security/cve/CVE-2018-9385/" source="CVE"/>
		<reference ref_id="CVE-2018-9568" ref_url="https://www.suse.com/security/cve/CVE-2018-9568/" source="CVE"/>
		<reference ref_id="CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091/" source="CVE"/>
		<reference ref_id="CVE-2019-2024" ref_url="https://www.suse.com/security/cve/CVE-2019-2024/" source="CVE"/>
		<reference ref_id="CVE-2019-3459" ref_url="https://www.suse.com/security/cve/CVE-2019-3459/" source="CVE"/>
		<reference ref_id="CVE-2019-3460" ref_url="https://www.suse.com/security/cve/CVE-2019-3460/" source="CVE"/>
		<reference ref_id="CVE-2019-3560" ref_url="https://www.suse.com/security/cve/CVE-2019-3560/" source="CVE"/>
		<reference ref_id="CVE-2019-3819" ref_url="https://www.suse.com/security/cve/CVE-2019-3819/" source="CVE"/>
		<reference ref_id="CVE-2019-6974" ref_url="https://www.suse.com/security/cve/CVE-2019-6974/" source="CVE"/>
		<reference ref_id="CVE-2019-7221" ref_url="https://www.suse.com/security/cve/CVE-2019-7221/" source="CVE"/>
		<reference ref_id="CVE-2019-7222" ref_url="https://www.suse.com/security/cve/CVE-2019-7222/" source="CVE"/>
		<reference ref_id="CVE-2019-7308" ref_url="https://www.suse.com/security/cve/CVE-2019-7308/" source="CVE"/>
		<reference ref_id="CVE-2019-8912" ref_url="https://www.suse.com/security/cve/CVE-2019-8912/" source="CVE"/>
		<reference ref_id="CVE-2019-8980" ref_url="https://www.suse.com/security/cve/CVE-2019-8980/" source="CVE"/>
		<reference ref_id="CVE-2019-9003" ref_url="https://www.suse.com/security/cve/CVE-2019-9003/" source="CVE"/>
		<reference ref_id="CVE-2019-9213" ref_url="https://www.suse.com/security/cve/CVE-2019-9213/" source="CVE"/>
		<description>
These are all security issues fixed in the kernel-docs-4.12.14-195.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000251/">CVE-2017-1000251</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000252/">CVE-2017-1000252</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000255/">CVE-2017-1000255</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000410/">CVE-2017-1000410</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11473/">CVE-2017-11473</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-11600/">CVE-2017-11600</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12153/">CVE-2017-12153</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12154/">CVE-2017-12154</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12190/">CVE-2017-12190</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12193/">CVE-2017-12193</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13080/">CVE-2017-13080</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13166/">CVE-2017-13166</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14051/">CVE-2017-14051</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14489/">CVE-2017-14489</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15115/">CVE-2017-15115</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15127/">CVE-2017-15127</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15128/">CVE-2017-15128</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-15129/">CVE-2017-15129</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15265/">CVE-2017-15265</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15537/">CVE-2017-15537</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15649/">CVE-2017-15649</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15951/">CVE-2017-15951</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16525/">CVE-2017-16525</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16527/">CVE-2017-16527</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16528/">CVE-2017-16528</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16529/">CVE-2017-16529</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16531/">CVE-2017-16531</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16533/">CVE-2017-16533</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16534/">CVE-2017-16534</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16535/">CVE-2017-16535</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16536/">CVE-2017-16536</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16537/">CVE-2017-16537</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16538/">CVE-2017-16538</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16644/">CVE-2017-16644</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16645/">CVE-2017-16645</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16646/">CVE-2017-16646</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16647/">CVE-2017-16647</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16649/">CVE-2017-16649</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16650/">CVE-2017-16650</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-16911/">CVE-2017-16911</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16912/">CVE-2017-16912</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16913/">CVE-2017-16913</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16914/">CVE-2017-16914</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16939/">CVE-2017-16939</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-16994/">CVE-2017-16994</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16995/">CVE-2017-16995</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16996/">CVE-2017-16996</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17052/">CVE-2017-17052</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17448/">CVE-2017-17448</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17449/">CVE-2017-17449</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-17450/">CVE-2017-17450</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17558/">CVE-2017-17558</cve>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17712/">CVE-2017-17712</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17741/">CVE-2017-17741</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17805/">CVE-2017-17805</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17806/">CVE-2017-17806</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17852/">CVE-2017-17852</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17853/">CVE-2017-17853</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-17854/">CVE-2017-17854</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17855/">CVE-2017-17855</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17856/">CVE-2017-17856</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17857/">CVE-2017-17857</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17862/">CVE-2017-17862</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17864/">CVE-2017-17864</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17975/">CVE-2017-17975</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18075/">CVE-2017-18075</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18202/">CVE-2017-18202</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18203/">CVE-2017-18203</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18204/">CVE-2017-18204</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18208/">CVE-2017-18208</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18224/">CVE-2017-18224</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-18344/">CVE-2017-18344</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5754/">CVE-2017-5754</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7541/">CVE-2017-7541</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7542/">CVE-2017-7542</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8824/">CVE-2017-8824</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8831/">CVE-2017-8831</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000004/">CVE-2018-1000004</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000028/">CVE-2018-1000028</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000200/">CVE-2018-1000200</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000204/">CVE-2018-1000204</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10087/">CVE-2018-10087</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10124/">CVE-2018-10124</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10323/">CVE-2018-10323</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1065/">CVE-2018-1065</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1068/">CVE-2018-1068</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10853/">CVE-2018-10853</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10902/">CVE-2018-10902</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1091/">CVE-2018-1091</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10938/">CVE-2018-10938</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1094/">CVE-2018-1094</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10940/">CVE-2018-10940</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1108/">CVE-2018-1108</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1118/">CVE-2018-1118</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1120/">CVE-2018-1120</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2018-1128/">CVE-2018-1128</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1129/">CVE-2018-1129</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1130/">CVE-2018-1130</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<cve href="https://www.suse.com/security/cve/CVE-2018-12232/">CVE-2018-12232</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12233/">CVE-2018-12233</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12896/">CVE-2018-12896</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13053/">CVE-2018-13053</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-13093/">CVE-2018-13093</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-13094/">CVE-2018-13094</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-13095/">CVE-2018-13095</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-13405/">CVE-2018-13405</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-13406/">CVE-2018-13406</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14613/">CVE-2018-14613</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14617/">CVE-2018-14617</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-14625/">CVE-2018-14625</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14633/">CVE-2018-14633</cve>
	<cve impact="important" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-15572/">CVE-2018-15572</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16658/">CVE-2018-16658</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16862/">CVE-2018-16862</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16880/">CVE-2018-16880</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16884/">CVE-2018-16884</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17182/">CVE-2018-17182</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18281/">CVE-2018-18281</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18386/">CVE-2018-18386</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-18397/">CVE-2018-18397</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18445/">CVE-2018-18445</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18710/">CVE-2018-18710</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19407/">CVE-2018-19407</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19824/">CVE-2018-19824</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-19854/">CVE-2018-19854</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-19985/">CVE-2018-19985</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20169/">CVE-2018-20169</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20669/">CVE-2018-20669</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3620/">CVE-2018-3620</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3639/">CVE-2018-3639</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3646/">CVE-2018-3646</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-5332/">CVE-2018-5332</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5333/">CVE-2018-5333</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5390/">CVE-2018-5390</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5391/">CVE-2018-5391</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5803/">CVE-2018-5803</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5848/">CVE-2018-5848</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6554/">CVE-2018-6554</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-6555/">CVE-2018-6555</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6927/">CVE-2018-6927</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7492/">CVE-2018-7492</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-7566/">CVE-2018-7566</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7740/">CVE-2018-7740</cve>
	<cve impact="low" cvss3="0/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-8043/">CVE-2018-8043</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-8087/">CVE-2018-8087</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8781/">CVE-2018-8781</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8822/">CVE-2018-8822</cve>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-9363/">CVE-2018-9363</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9385/">CVE-2018-9385</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-9568/">CVE-2018-9568</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2024/">CVE-2019-2024</cve>
	<cve impact="moderate" cvss3="2.6/CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3459/">CVE-2019-3459</cve>
	<cve impact="moderate" cvss3="2.6/CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3460/">CVE-2019-3460</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3560/">CVE-2019-3560</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3819/">CVE-2019-3819</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6974/">CVE-2019-6974</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-7221/">CVE-2019-7221</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-7222/">CVE-2019-7222</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-7308/">CVE-2019-7308</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8912/">CVE-2019-8912</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8980/">CVE-2019-8980</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9003/">CVE-2019-9003</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9213/">CVE-2019-9213</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009487768" comment="kernel-docs-4.12.14-195.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487769" comment="kernel-obs-build-4.12.14-195.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487770" comment="kernel-source-4.12.14-195.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487771" comment="kernel-syms-4.12.14-195.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137515" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1120653" ref_url="https://bugzilla.suse.com/1120653" source="BUGZILLA"/>
		<reference ref_id="1120654" ref_url="https://bugzilla.suse.com/1120654" source="BUGZILLA"/>
		<reference ref_id="1120656" ref_url="https://bugzilla.suse.com/1120656" source="BUGZILLA"/>
		<reference ref_id="1120659" ref_url="https://bugzilla.suse.com/1120659" source="BUGZILLA"/>
		<reference ref_id="1124341" ref_url="https://bugzilla.suse.com/1124341" source="BUGZILLA"/>
		<reference ref_id="1124342" ref_url="https://bugzilla.suse.com/1124342" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000877" ref_url="https://www.suse.com/security/cve/CVE-2018-1000877/" source="CVE"/>
		<reference ref_id="CVE-2018-1000878" ref_url="https://www.suse.com/security/cve/CVE-2018-1000878/" source="CVE"/>
		<reference ref_id="CVE-2018-1000879" ref_url="https://www.suse.com/security/cve/CVE-2018-1000879/" source="CVE"/>
		<reference ref_id="CVE-2018-1000880" ref_url="https://www.suse.com/security/cve/CVE-2018-1000880/" source="CVE"/>
		<reference ref_id="CVE-2019-1000019" ref_url="https://www.suse.com/security/cve/CVE-2019-1000019/" source="CVE"/>
		<reference ref_id="CVE-2019-1000020" ref_url="https://www.suse.com/security/cve/CVE-2019-1000020/" source="CVE"/>
		<description>
This update for libarchive fixes the following issues:

Security issues fixed:

- CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653)
- CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654)
- CVE-2018-1000879: Fixed a NULL Pointer Dereference vulnerability in ACL parser (bsc#1120656)
- CVE-2018-1000880: Fixed an Improper Input Validation vulnerability in WARC parser (bsc#1120659)
- CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341) 
- CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-01"/>
	<updated date="2019-04-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1120653">SUSE bug 1120653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120654">SUSE bug 1120654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120656">SUSE bug 1120656</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120659">SUSE bug 1120659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124341">SUSE bug 1124341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124342">SUSE bug 1124342</bugzilla>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000877/">CVE-2018-1000877</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000878/">CVE-2018-1000878</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000879/">CVE-2018-1000879</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000880/">CVE-2018-1000880</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1000019/">CVE-2019-1000019</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1000020/">CVE-2019-1000020</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790084" comment="bsdtar-3.3.2-3.8.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137516" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1110949" ref_url="https://bugzilla.suse.com/1110949" source="BUGZILLA"/>
		<reference ref_id="1114729" ref_url="https://bugzilla.suse.com/1114729" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17456" ref_url="https://www.suse.com/security/cve/CVE-2018-17456/" source="CVE"/>
		<description>
This update for libgit2 fixes the following issues:


Security issue fixed:

- CVE-2018-17456: Submodule URLs and paths with a leading '-' are now ignored to avoid injecting options into library consumers that perform recursive clones (bsc#1110949).


Non-security issues fixed:

- Version update to version 0.26.8 (bsc#1114729).
- Full changelog can be found at:
  * https://github.com/libgit2/libgit2/releases/tag/v0.26.8
  * https://github.com/libgit2/libgit2/releases/tag/v0.26.7
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-07"/>
	<updated date="2018-12-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1110949">SUSE bug 1110949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114729">SUSE bug 1114729</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17456/">CVE-2018-17456</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790085" comment="libgit2-26-0.26.8-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790086" comment="libgit2-devel-0.26.8-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137517" version="1" class="patch">
	<metadata>
		<title>libgit2-26-0.26.8-3.8.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2005-4900" ref_url="https://www.suse.com/security/cve/CVE-2005-4900/" source="CVE"/>
		<reference ref_id="CVE-2016-10128" ref_url="https://www.suse.com/security/cve/CVE-2016-10128/" source="CVE"/>
		<reference ref_id="CVE-2016-10129" ref_url="https://www.suse.com/security/cve/CVE-2016-10129/" source="CVE"/>
		<reference ref_id="CVE-2016-10130" ref_url="https://www.suse.com/security/cve/CVE-2016-10130/" source="CVE"/>
		<reference ref_id="CVE-2016-8568" ref_url="https://www.suse.com/security/cve/CVE-2016-8568/" source="CVE"/>
		<reference ref_id="CVE-2016-8569" ref_url="https://www.suse.com/security/cve/CVE-2016-8569/" source="CVE"/>
		<reference ref_id="CVE-2017-5338" ref_url="https://www.suse.com/security/cve/CVE-2017-5338/" source="CVE"/>
		<reference ref_id="CVE-2017-5339" ref_url="https://www.suse.com/security/cve/CVE-2017-5339/" source="CVE"/>
		<reference ref_id="CVE-2018-10887" ref_url="https://www.suse.com/security/cve/CVE-2018-10887/" source="CVE"/>
		<reference ref_id="CVE-2018-10888" ref_url="https://www.suse.com/security/cve/CVE-2018-10888/" source="CVE"/>
		<reference ref_id="CVE-2018-11235" ref_url="https://www.suse.com/security/cve/CVE-2018-11235/" source="CVE"/>
		<reference ref_id="CVE-2018-17456" ref_url="https://www.suse.com/security/cve/CVE-2018-17456/" source="CVE"/>
		<reference ref_id="CVE-2018-8098" ref_url="https://www.suse.com/security/cve/CVE-2018-8098/" source="CVE"/>
		<reference ref_id="CVE-2018-8099" ref_url="https://www.suse.com/security/cve/CVE-2018-8099/" source="CVE"/>
		<description>
These are all security issues fixed in the libgit2-26-0.26.8-3.8.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2005-4900/">CVE-2005-4900</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10128/">CVE-2016-10128</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10129/">CVE-2016-10129</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-10130/">CVE-2016-10130</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8568/">CVE-2016-8568</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8569/">CVE-2016-8569</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2017-5338/">CVE-2017-5338</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2017-5339/">CVE-2017-5339</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10887/">CVE-2018-10887</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10888/">CVE-2018-10888</cve>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11235/">CVE-2018-11235</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17456/">CVE-2018-17456</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-8098/">CVE-2018-8098</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-8099/">CVE-2018-8099</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009487772" comment="libgit2-26-0.26.8-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487773" comment="libgit2-devel-0.26.8-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137518" version="1" class="patch">
	<metadata>
		<title>libtidy-devel-5.4.0-1.34 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-5522" ref_url="https://www.suse.com/security/cve/CVE-2015-5522/" source="CVE"/>
		<reference ref_id="CVE-2015-5523" ref_url="https://www.suse.com/security/cve/CVE-2015-5523/" source="CVE"/>
		<reference ref_id="CVE-2016-6583" ref_url="https://www.suse.com/security/cve/CVE-2016-6583/" source="CVE"/>
		<description>
These are all security issues fixed in the libtidy-devel-5.4.0-1.34 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5522/">CVE-2015-5522</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5523/">CVE-2015-5523</cve>
	<cve href="https://www.suse.com/security/cve/CVE-2016-6583/">CVE-2016-6583</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009487680" comment="libtidy-devel-5.4.0-1.34 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487681" comment="libtidy5-5.4.0-1.34 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487682" comment="tidy-5.4.0-1.34 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137519" version="1" class="patch">
	<metadata>
		<title>libtool-32bit-2.4.6-1.406 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-3736" ref_url="https://www.suse.com/security/cve/CVE-2009-3736/" source="CVE"/>
		<description>
These are all security issues fixed in the libtool-32bit-2.4.6-1.406 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3736/">CVE-2009-3736</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487683" comment="libtool-32bit-2.4.6-1.406 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137520" version="1" class="patch">
	<metadata>
		<title>nasm-2.13.02-1.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-10686" ref_url="https://www.suse.com/security/cve/CVE-2017-10686/" source="CVE"/>
		<reference ref_id="CVE-2017-11111" ref_url="https://www.suse.com/security/cve/CVE-2017-11111/" source="CVE"/>
		<reference ref_id="CVE-2017-14228" ref_url="https://www.suse.com/security/cve/CVE-2017-14228/" source="CVE"/>
		<reference ref_id="CVE-2017-17810" ref_url="https://www.suse.com/security/cve/CVE-2017-17810/" source="CVE"/>
		<reference ref_id="CVE-2017-17811" ref_url="https://www.suse.com/security/cve/CVE-2017-17811/" source="CVE"/>
		<reference ref_id="CVE-2017-17812" ref_url="https://www.suse.com/security/cve/CVE-2017-17812/" source="CVE"/>
		<reference ref_id="CVE-2017-17813" ref_url="https://www.suse.com/security/cve/CVE-2017-17813/" source="CVE"/>
		<reference ref_id="CVE-2017-17814" ref_url="https://www.suse.com/security/cve/CVE-2017-17814/" source="CVE"/>
		<reference ref_id="CVE-2017-17815" ref_url="https://www.suse.com/security/cve/CVE-2017-17815/" source="CVE"/>
		<reference ref_id="CVE-2017-17816" ref_url="https://www.suse.com/security/cve/CVE-2017-17816/" source="CVE"/>
		<reference ref_id="CVE-2017-17817" ref_url="https://www.suse.com/security/cve/CVE-2017-17817/" source="CVE"/>
		<reference ref_id="CVE-2017-17818" ref_url="https://www.suse.com/security/cve/CVE-2017-17818/" source="CVE"/>
		<reference ref_id="CVE-2017-17819" ref_url="https://www.suse.com/security/cve/CVE-2017-17819/" source="CVE"/>
		<reference ref_id="CVE-2017-17820" ref_url="https://www.suse.com/security/cve/CVE-2017-17820/" source="CVE"/>
		<description>
These are all security issues fixed in the nasm-2.13.02-1.17 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10686/">CVE-2017-10686</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11111/">CVE-2017-11111</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14228/">CVE-2017-14228</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17810/">CVE-2017-17810</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17811/">CVE-2017-17811</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17812/">CVE-2017-17812</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17813/">CVE-2017-17813</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17814/">CVE-2017-17814</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17815/">CVE-2017-17815</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17816/">CVE-2017-17816</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17817/">CVE-2017-17817</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17818/">CVE-2017-17818</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17819/">CVE-2017-17819</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17820/">CVE-2017-17820</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487685" comment="nasm-2.13.02-1.17 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137521" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1103320" ref_url="https://bugzilla.suse.com/1103320" source="BUGZILLA"/>
		<reference ref_id="1115929" ref_url="https://bugzilla.suse.com/1115929" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19211" ref_url="https://www.suse.com/security/cve/CVE-2018-19211/" source="CVE"/>
		<description>
This update for ncurses fixes the following issues:

Security issue fixed:

- CVE-2018-19211: Fixed denial of service issue that was triggered by a NULL pointer dereference at function _nc_parse_entry (bsc#1115929).

Non-security issue fixed:

- Remove scree.xterm from terminfo data base as with this screen uses fallback TERM=screen (bsc#1103320). 
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-06"/>
	<updated date="2018-12-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1103320">SUSE bug 1103320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115929">SUSE bug 1115929</bugzilla>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19211/">CVE-2018-19211</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496011" comment="ncurses-devel-32bit-6.1-5.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137522" version="1" class="patch">
	<metadata>
		<title>ncurses-devel-32bit-6.1-5.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-19211" ref_url="https://www.suse.com/security/cve/CVE-2018-19211/" source="CVE"/>
		<description>
These are all security issues fixed in the ncurses-devel-32bit-6.1-5.3.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19211/">CVE-2018-19211</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487774" comment="ncurses-devel-32bit-6.1-5.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137523" version="1" class="patch">
	<metadata>
		<title>ocaml-4.05.0-4.25 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-8869" ref_url="https://www.suse.com/security/cve/CVE-2015-8869/" source="CVE"/>
		<reference ref_id="CVE-2017-9772" ref_url="https://www.suse.com/security/cve/CVE-2017-9772/" source="CVE"/>
		<reference ref_id="CVE-2018-9838" ref_url="https://www.suse.com/security/cve/CVE-2018-9838/" source="CVE"/>
		<description>
These are all security issues fixed in the ocaml-4.05.0-4.25 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8869/">CVE-2015-8869</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-9772/">CVE-2017-9772</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-9838/">CVE-2018-9838</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009487686" comment="ocaml-4.05.0-4.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487687" comment="ocaml-compiler-libs-4.05.0-4.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487688" comment="ocaml-compiler-libs-devel-4.05.0-4.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487775" comment="ocaml-ocamldoc-4.05.0-4.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487689" comment="ocaml-rpm-macros-4.05.0-4.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487690" comment="ocaml-runtime-4.05.0-4.25 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137524" version="1" class="patch">
	<metadata>
		<title>ocaml-libguestfs-devel-1.38.0-3.52 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2124" ref_url="https://www.suse.com/security/cve/CVE-2013-2124/" source="CVE"/>
		<reference ref_id="CVE-2013-4419" ref_url="https://www.suse.com/security/cve/CVE-2013-4419/" source="CVE"/>
		<description>
These are all security issues fixed in the ocaml-libguestfs-devel-1.38.0-3.52 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2124/">CVE-2013-2124</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4419/">CVE-2013-4419</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487691" comment="ocaml-libguestfs-devel-1.38.0-3.52 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137525" version="1" class="patch">
	<metadata>
		<title>openldap2-devel-32bit-2.4.46-9.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-1545" ref_url="https://www.suse.com/security/cve/CVE-2015-1545/" source="CVE"/>
		<reference ref_id="CVE-2015-1546" ref_url="https://www.suse.com/security/cve/CVE-2015-1546/" source="CVE"/>
		<reference ref_id="CVE-2015-6908" ref_url="https://www.suse.com/security/cve/CVE-2015-6908/" source="CVE"/>
		<description>
These are all security issues fixed in the openldap2-devel-32bit-2.4.46-9.3.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1545/">CVE-2015-1545</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1546/">CVE-2015-1546</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-6908/">CVE-2015-6908</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487776" comment="openldap2-devel-32bit-2.4.46-9.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137526" version="1" class="patch">
	<metadata>
		<title>osc-0.165.0-1.3 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-0778" ref_url="https://www.suse.com/security/cve/CVE-2015-0778/" source="CVE"/>
		<description>
These are all security issues fixed in the osc-0.165.0-1.3 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve href="https://www.suse.com/security/cve/CVE-2015-0778/">CVE-2015-0778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487777" comment="osc-0.165.0-1.3 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137527" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1115640" ref_url="https://bugzilla.suse.com/1115640" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17953" ref_url="https://www.suse.com/security/cve/CVE-2018-17953/" source="CVE"/>
		<description>
This update for pam fixes the following issue:

Security issue fixed:

- CVE-2018-17953: Fixed IP address and subnet handling of pam_access.so that was not honoured correctly when a single host was specified (bsc#1115640).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-03"/>
	<updated date="2018-12-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1115640">SUSE bug 1115640</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-17953/">CVE-2018-17953</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496010" comment="pam-devel-32bit-1.3.0-6.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137528" version="1" class="patch">
	<metadata>
		<title>pam-devel-32bit-1.3.0-6.6.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-3430" ref_url="https://www.suse.com/security/cve/CVE-2010-3430/" source="CVE"/>
		<reference ref_id="CVE-2010-3431" ref_url="https://www.suse.com/security/cve/CVE-2010-3431/" source="CVE"/>
		<reference ref_id="CVE-2010-3853" ref_url="https://www.suse.com/security/cve/CVE-2010-3853/" source="CVE"/>
		<reference ref_id="CVE-2011-3148" ref_url="https://www.suse.com/security/cve/CVE-2011-3148/" source="CVE"/>
		<reference ref_id="CVE-2011-3149" ref_url="https://www.suse.com/security/cve/CVE-2011-3149/" source="CVE"/>
		<reference ref_id="CVE-2014-2583" ref_url="https://www.suse.com/security/cve/CVE-2014-2583/" source="CVE"/>
		<reference ref_id="CVE-2015-3238" ref_url="https://www.suse.com/security/cve/CVE-2015-3238/" source="CVE"/>
		<reference ref_id="CVE-2018-17953" ref_url="https://www.suse.com/security/cve/CVE-2018-17953/" source="CVE"/>
		<description>
These are all security issues fixed in the pam-devel-32bit-1.3.0-6.6.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3430/">CVE-2010-3430</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3431/">CVE-2010-3431</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3853/">CVE-2010-3853</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3148/">CVE-2011-3148</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-3149/">CVE-2011-3149</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-2583/">CVE-2014-2583</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-3238/">CVE-2015-3238</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-17953/">CVE-2018-17953</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487778" comment="pam-devel-32bit-1.3.0-6.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137529" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1114674" ref_url="https://bugzilla.suse.com/1114674" source="BUGZILLA"/>
		<reference ref_id="1114675" ref_url="https://bugzilla.suse.com/1114675" source="BUGZILLA"/>
		<reference ref_id="1114681" ref_url="https://bugzilla.suse.com/1114681" source="BUGZILLA"/>
		<reference ref_id="1114686" ref_url="https://bugzilla.suse.com/1114686" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-18311" ref_url="https://www.suse.com/security/cve/CVE-2018-18311/" source="CVE"/>
		<reference ref_id="CVE-2018-18312" ref_url="https://www.suse.com/security/cve/CVE-2018-18312/" source="CVE"/>
		<reference ref_id="CVE-2018-18313" ref_url="https://www.suse.com/security/cve/CVE-2018-18313/" source="CVE"/>
		<reference ref_id="CVE-2018-18314" ref_url="https://www.suse.com/security/cve/CVE-2018-18314/" source="CVE"/>
		<description>
This update for perl fixes the following issues:

Secuirty issues fixed:

- CVE-2018-18311: Fixed integer overflow with oversize environment (bsc#1114674).
- CVE-2018-18312: Fixed heap-buffer-overflow write / reg_node overrun (bsc#1114675).
- CVE-2018-18313: Fixed heap-buffer-overflow read if regex contains \0 chars (bsc#1114681).
- CVE-2018-18314: Fixed heap-buffer-overflow in regex (bsc#1114686).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-19"/>
	<updated date="2018-12-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1114674">SUSE bug 1114674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114675">SUSE bug 1114675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114681">SUSE bug 1114681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114686">SUSE bug 1114686</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18311/">CVE-2018-18311</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-18312/">CVE-2018-18312</cve>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18313/">CVE-2018-18313</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-18314/">CVE-2018-18314</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496015" comment="perl-doc-5.26.1-7.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137530" version="1" class="patch">
	<metadata>
		<title>perl-Archive-Extract-0.80-1.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-1238" ref_url="https://www.suse.com/security/cve/CVE-2016-1238/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-Archive-Extract-0.80-1.24 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1238/">CVE-2016-1238</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009487694" comment="perl-Archive-Extract-0.80-1.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487695" comment="perl-ExtUtils-MakeMaker-7.30-1.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487696" comment="perl-Module-Load-Conditional-0.68-1.25 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137531" version="1" class="patch">
	<metadata>
		<title>perl-Config-IniFiles-2.94-1.23 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-2451" ref_url="https://www.suse.com/security/cve/CVE-2012-2451/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-Config-IniFiles-2.94-1.23 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-2451/">CVE-2012-2451</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487697" comment="perl-Config-IniFiles-2.94-1.23 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137532" version="1" class="patch">
	<metadata>
		<title>perl-DNS-LDNS-1.7.0-2.22 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-3581" ref_url="https://www.suse.com/security/cve/CVE-2011-3581/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-DNS-LDNS-1.7.0-2.22 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3581/">CVE-2011-3581</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487698" comment="perl-DNS-LDNS-1.7.0-2.22 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137533" version="1" class="patch">
	<metadata>
		<title>perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-10.19 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-1238" ref_url="https://www.suse.com/security/cve/CVE-2016-1238/" source="CVE"/>
		<reference ref_id="CVE-2017-15705" ref_url="https://www.suse.com/security/cve/CVE-2017-15705/" source="CVE"/>
		<reference ref_id="CVE-2018-11780" ref_url="https://www.suse.com/security/cve/CVE-2018-11780/" source="CVE"/>
		<reference ref_id="CVE-2018-11781" ref_url="https://www.suse.com/security/cve/CVE-2018-11781/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-10.19 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1238/">CVE-2016-1238</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15705/">CVE-2017-15705</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11780/">CVE-2018-11780</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11781/">CVE-2018-11781</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487779" comment="perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-10.19 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137534" version="1" class="patch">
	<metadata>
		<title>perl-Net-Libproxy-0.4.15-2.42 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-4504" ref_url="https://www.suse.com/security/cve/CVE-2012-4504/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-Net-Libproxy-0.4.15-2.42 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4504/">CVE-2012-4504</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487699" comment="perl-Net-Libproxy-0.4.15-2.42 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137535" version="1" class="patch">
	<metadata>
		<title>perl-PerlMagick-7.0.7.34-3.54.3 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-3714" ref_url="https://www.suse.com/security/cve/CVE-2016-3714/" source="CVE"/>
		<reference ref_id="CVE-2016-3715" ref_url="https://www.suse.com/security/cve/CVE-2016-3715/" source="CVE"/>
		<reference ref_id="CVE-2016-3716" ref_url="https://www.suse.com/security/cve/CVE-2016-3716/" source="CVE"/>
		<reference ref_id="CVE-2016-3717" ref_url="https://www.suse.com/security/cve/CVE-2016-3717/" source="CVE"/>
		<reference ref_id="CVE-2016-3718" ref_url="https://www.suse.com/security/cve/CVE-2016-3718/" source="CVE"/>
		<reference ref_id="CVE-2016-5118" ref_url="https://www.suse.com/security/cve/CVE-2016-5118/" source="CVE"/>
		<reference ref_id="CVE-2018-10805" ref_url="https://www.suse.com/security/cve/CVE-2018-10805/" source="CVE"/>
		<reference ref_id="CVE-2018-11624" ref_url="https://www.suse.com/security/cve/CVE-2018-11624/" source="CVE"/>
		<reference ref_id="CVE-2018-11625" ref_url="https://www.suse.com/security/cve/CVE-2018-11625/" source="CVE"/>
		<reference ref_id="CVE-2018-12599" ref_url="https://www.suse.com/security/cve/CVE-2018-12599/" source="CVE"/>
		<reference ref_id="CVE-2018-12600" ref_url="https://www.suse.com/security/cve/CVE-2018-12600/" source="CVE"/>
		<reference ref_id="CVE-2018-14434" ref_url="https://www.suse.com/security/cve/CVE-2018-14434/" source="CVE"/>
		<reference ref_id="CVE-2018-14435" ref_url="https://www.suse.com/security/cve/CVE-2018-14435/" source="CVE"/>
		<reference ref_id="CVE-2018-14436" ref_url="https://www.suse.com/security/cve/CVE-2018-14436/" source="CVE"/>
		<reference ref_id="CVE-2018-14437" ref_url="https://www.suse.com/security/cve/CVE-2018-14437/" source="CVE"/>
		<reference ref_id="CVE-2018-16323" ref_url="https://www.suse.com/security/cve/CVE-2018-16323/" source="CVE"/>
		<reference ref_id="CVE-2018-16328" ref_url="https://www.suse.com/security/cve/CVE-2018-16328/" source="CVE"/>
		<reference ref_id="CVE-2018-16329" ref_url="https://www.suse.com/security/cve/CVE-2018-16329/" source="CVE"/>
		<reference ref_id="CVE-2018-16412" ref_url="https://www.suse.com/security/cve/CVE-2018-16412/" source="CVE"/>
		<reference ref_id="CVE-2018-16413" ref_url="https://www.suse.com/security/cve/CVE-2018-16413/" source="CVE"/>
		<reference ref_id="CVE-2018-16640" ref_url="https://www.suse.com/security/cve/CVE-2018-16640/" source="CVE"/>
		<reference ref_id="CVE-2018-16641" ref_url="https://www.suse.com/security/cve/CVE-2018-16641/" source="CVE"/>
		<reference ref_id="CVE-2018-16642" ref_url="https://www.suse.com/security/cve/CVE-2018-16642/" source="CVE"/>
		<reference ref_id="CVE-2018-16643" ref_url="https://www.suse.com/security/cve/CVE-2018-16643/" source="CVE"/>
		<reference ref_id="CVE-2018-16644" ref_url="https://www.suse.com/security/cve/CVE-2018-16644/" source="CVE"/>
		<reference ref_id="CVE-2018-16645" ref_url="https://www.suse.com/security/cve/CVE-2018-16645/" source="CVE"/>
		<reference ref_id="CVE-2018-17966" ref_url="https://www.suse.com/security/cve/CVE-2018-17966/" source="CVE"/>
		<reference ref_id="CVE-2018-18024" ref_url="https://www.suse.com/security/cve/CVE-2018-18024/" source="CVE"/>
		<reference ref_id="CVE-2018-18544" ref_url="https://www.suse.com/security/cve/CVE-2018-18544/" source="CVE"/>
		<reference ref_id="CVE-2018-20467" ref_url="https://www.suse.com/security/cve/CVE-2018-20467/" source="CVE"/>
		<reference ref_id="CVE-2018-9135" ref_url="https://www.suse.com/security/cve/CVE-2018-9135/" source="CVE"/>
		<reference ref_id="CVE-2019-10650" ref_url="https://www.suse.com/security/cve/CVE-2019-10650/" source="CVE"/>
		<reference ref_id="CVE-2019-11007" ref_url="https://www.suse.com/security/cve/CVE-2019-11007/" source="CVE"/>
		<reference ref_id="CVE-2019-11008" ref_url="https://www.suse.com/security/cve/CVE-2019-11008/" source="CVE"/>
		<reference ref_id="CVE-2019-7175" ref_url="https://www.suse.com/security/cve/CVE-2019-7175/" source="CVE"/>
		<reference ref_id="CVE-2019-7395" ref_url="https://www.suse.com/security/cve/CVE-2019-7395/" source="CVE"/>
		<reference ref_id="CVE-2019-7396" ref_url="https://www.suse.com/security/cve/CVE-2019-7396/" source="CVE"/>
		<reference ref_id="CVE-2019-7397" ref_url="https://www.suse.com/security/cve/CVE-2019-7397/" source="CVE"/>
		<reference ref_id="CVE-2019-7398" ref_url="https://www.suse.com/security/cve/CVE-2019-7398/" source="CVE"/>
		<reference ref_id="CVE-2019-9956" ref_url="https://www.suse.com/security/cve/CVE-2019-9956/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-PerlMagick-7.0.7.34-3.54.3 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3714/">CVE-2016-3714</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-3715/">CVE-2016-3715</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-3716/">CVE-2016-3716</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-3717/">CVE-2016-3717</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-3718/">CVE-2016-3718</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5118/">CVE-2016-5118</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10805/">CVE-2018-10805</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11624/">CVE-2018-11624</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11625/">CVE-2018-11625</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12599/">CVE-2018-12599</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12600/">CVE-2018-12600</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14434/">CVE-2018-14434</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14435/">CVE-2018-14435</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14436/">CVE-2018-14436</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14437/">CVE-2018-14437</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16323/">CVE-2018-16323</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16328/">CVE-2018-16328</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16329/">CVE-2018-16329</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16412/">CVE-2018-16412</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16413/">CVE-2018-16413</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16640/">CVE-2018-16640</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16641/">CVE-2018-16641</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16642/">CVE-2018-16642</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16643/">CVE-2018-16643</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16644/">CVE-2018-16644</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16645/">CVE-2018-16645</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17966/">CVE-2018-17966</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18024/">CVE-2018-18024</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18544/">CVE-2018-18544</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20467/">CVE-2018-20467</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-9135/">CVE-2018-9135</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10650/">CVE-2019-10650</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11007/">CVE-2019-11007</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11008/">CVE-2019-11008</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7175/">CVE-2019-7175</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-7395/">CVE-2019-7395</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-7396/">CVE-2019-7396</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7397/">CVE-2019-7397</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7398/">CVE-2019-7398</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9956/">CVE-2019-9956</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487780" comment="perl-PerlMagick-7.0.7.34-3.54.3 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137536" version="1" class="patch">
	<metadata>
		<title>perl-Tk-devel-804.034-1.44 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2006-4484" ref_url="https://www.suse.com/security/cve/CVE-2006-4484/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-Tk-devel-804.034-1.44 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2006-4484/">CVE-2006-4484</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487701" comment="perl-Tk-devel-804.034-1.44 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137537" version="1" class="patch">
	<metadata>
		<title>perl-YAML-LibYAML-0.59-1.16 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-1152" ref_url="https://www.suse.com/security/cve/CVE-2012-1152/" source="CVE"/>
		<reference ref_id="CVE-2013-6393" ref_url="https://www.suse.com/security/cve/CVE-2013-6393/" source="CVE"/>
		<reference ref_id="CVE-2014-2525" ref_url="https://www.suse.com/security/cve/CVE-2014-2525/" source="CVE"/>
		<reference ref_id="CVE-2014-9130" ref_url="https://www.suse.com/security/cve/CVE-2014-9130/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-YAML-LibYAML-0.59-1.16 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1152/">CVE-2012-1152</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6393/">CVE-2013-6393</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-2525/">CVE-2014-2525</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9130/">CVE-2014-9130</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487702" comment="perl-YAML-LibYAML-0.59-1.16 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137538" version="1" class="patch">
	<metadata>
		<title>perl-doc-5.26.1-7.6.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-2761" ref_url="https://www.suse.com/security/cve/CVE-2010-2761/" source="CVE"/>
		<reference ref_id="CVE-2010-4410" ref_url="https://www.suse.com/security/cve/CVE-2010-4410/" source="CVE"/>
		<reference ref_id="CVE-2010-4411" ref_url="https://www.suse.com/security/cve/CVE-2010-4411/" source="CVE"/>
		<reference ref_id="CVE-2010-4777" ref_url="https://www.suse.com/security/cve/CVE-2010-4777/" source="CVE"/>
		<reference ref_id="CVE-2017-12837" ref_url="https://www.suse.com/security/cve/CVE-2017-12837/" source="CVE"/>
		<reference ref_id="CVE-2017-12883" ref_url="https://www.suse.com/security/cve/CVE-2017-12883/" source="CVE"/>
		<reference ref_id="CVE-2018-12015" ref_url="https://www.suse.com/security/cve/CVE-2018-12015/" source="CVE"/>
		<reference ref_id="CVE-2018-18311" ref_url="https://www.suse.com/security/cve/CVE-2018-18311/" source="CVE"/>
		<reference ref_id="CVE-2018-18312" ref_url="https://www.suse.com/security/cve/CVE-2018-18312/" source="CVE"/>
		<reference ref_id="CVE-2018-18313" ref_url="https://www.suse.com/security/cve/CVE-2018-18313/" source="CVE"/>
		<reference ref_id="CVE-2018-18314" ref_url="https://www.suse.com/security/cve/CVE-2018-18314/" source="CVE"/>
		<description>
These are all security issues fixed in the perl-doc-5.26.1-7.6.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2761/">CVE-2010-2761</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4410/">CVE-2010-4410</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4411/">CVE-2010-4411</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4777/">CVE-2010-4777</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12837/">CVE-2017-12837</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12883/">CVE-2017-12883</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-12015/">CVE-2018-12015</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18311/">CVE-2018-18311</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-18312/">CVE-2018-18312</cve>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18313/">CVE-2018-18313</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-18314/">CVE-2018-18314</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487781" comment="perl-doc-5.26.1-7.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137539" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1096974" ref_url="https://bugzilla.suse.com/1096974" source="BUGZILLA"/>
		<reference ref_id="1096984" ref_url="https://bugzilla.suse.com/1096984" source="BUGZILLA"/>
		<reference ref_id="1126117" ref_url="https://bugzilla.suse.com/1126117" source="BUGZILLA"/>
		<reference ref_id="1126118" ref_url="https://bugzilla.suse.com/1126118" source="BUGZILLA"/>
		<reference ref_id="1126119" ref_url="https://bugzilla.suse.com/1126119" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10360" ref_url="https://www.suse.com/security/cve/CVE-2018-10360/" source="CVE"/>
		<reference ref_id="CVE-2019-8905" ref_url="https://www.suse.com/security/cve/CVE-2019-8905/" source="CVE"/>
		<reference ref_id="CVE-2019-8906" ref_url="https://www.suse.com/security/cve/CVE-2019-8906/" source="CVE"/>
		<reference ref_id="CVE-2019-8907" ref_url="https://www.suse.com/security/cve/CVE-2019-8907/" source="CVE"/>
		<description>
This update for file fixes the following issues:

The following security vulnerabilities were addressed:

- CVE-2018-10360: Fixed an out-of-bounds read in the function do_core_note in
  readelf.c, which allowed remote attackers to cause a denial of service
  (application crash) via a crafted ELF file (bsc#1096974)
- CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c
  (bsc#1126118)
- CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf. c
  (bsc#1126119)
- CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c
  (bsc#1126117)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-07"/>
	<updated date="2019-03-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1096974">SUSE bug 1096974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096984">SUSE bug 1096984</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126117">SUSE bug 1126117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126118">SUSE bug 1126118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126119">SUSE bug 1126119</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10360/">CVE-2018-10360</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8905/">CVE-2019-8905</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8906/">CVE-2019-8906</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8907/">CVE-2019-8907</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724529" comment="python3-magic-5.32-7.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137540" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1120644" ref_url="https://bugzilla.suse.com/1120644" source="BUGZILLA"/>
		<reference ref_id="1122191" ref_url="https://bugzilla.suse.com/1122191" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20406" ref_url="https://www.suse.com/security/cve/CVE-2018-20406/" source="CVE"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<description>
This update for python3 fixes the following issues:

Security issue fixed:

- CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191)
- CVE-2018-20406: Fixed a integer overflow via a large LONG_BINPUT (bsc#1120644)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-01-31"/>
	<updated date="2019-01-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1120644">SUSE bug 1120644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122191">SUSE bug 1122191</bugzilla>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20406/">CVE-2018-20406</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790087" comment="python3-tools-3.6.5-3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137541" version="1" class="patch">
	<metadata>
		<title>python3-tools-3.6.5-3.11.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-4650" ref_url="https://www.suse.com/security/cve/CVE-2014-4650/" source="CVE"/>
		<reference ref_id="CVE-2018-20406" ref_url="https://www.suse.com/security/cve/CVE-2018-20406/" source="CVE"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<reference ref_id="CVE-2019-9636" ref_url="https://www.suse.com/security/cve/CVE-2019-9636/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-tools-3.6.5-3.11.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-4650/">CVE-2014-4650</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20406/">CVE-2018-20406</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9636/">CVE-2019-9636</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487782" comment="python3-tools-3.6.5-3.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137542" version="1" class="patch">
	<metadata>
		<title>rpm-build-4.14.1-10.16.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-7500" ref_url="https://www.suse.com/security/cve/CVE-2017-7500/" source="CVE"/>
		<description>
These are all security issues fixed in the rpm-build-4.14.1-10.16.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7500/">CVE-2017-7500</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487783" comment="rpm-build-4.14.1-10.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137543" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122842" ref_url="https://bugzilla.suse.com/1122842" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11803" ref_url="https://www.suse.com/security/cve/CVE-2018-11803/" source="CVE"/>
		<description>
This update for subversion fixes the following issues:

Security issue fixed:

- CVE-2018-11803: Fixed a vulnerability that allowed malicious SVN clients to trigger a crash 
  in mod_dav_svn by omitting the root path from a recursive directory listing request (bsc#1122842)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-01-29"/>
	<updated date="2019-01-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1122842">SUSE bug 1122842</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11803/">CVE-2018-11803</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496050" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790088" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790089" comment="subversion-python-1.10.0-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790090" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137544" version="1" class="patch">
	<metadata>
		<title>subversion-bash-completion-1.10.0-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-2411" ref_url="https://www.suse.com/security/cve/CVE-2009-2411/" source="CVE"/>
		<reference ref_id="CVE-2010-3315" ref_url="https://www.suse.com/security/cve/CVE-2010-3315/" source="CVE"/>
		<reference ref_id="CVE-2010-4539" ref_url="https://www.suse.com/security/cve/CVE-2010-4539/" source="CVE"/>
		<reference ref_id="CVE-2010-4644" ref_url="https://www.suse.com/security/cve/CVE-2010-4644/" source="CVE"/>
		<reference ref_id="CVE-2011-0715" ref_url="https://www.suse.com/security/cve/CVE-2011-0715/" source="CVE"/>
		<reference ref_id="CVE-2011-1752" ref_url="https://www.suse.com/security/cve/CVE-2011-1752/" source="CVE"/>
		<reference ref_id="CVE-2011-1783" ref_url="https://www.suse.com/security/cve/CVE-2011-1783/" source="CVE"/>
		<reference ref_id="CVE-2011-1921" ref_url="https://www.suse.com/security/cve/CVE-2011-1921/" source="CVE"/>
		<reference ref_id="CVE-2013-1845" ref_url="https://www.suse.com/security/cve/CVE-2013-1845/" source="CVE"/>
		<reference ref_id="CVE-2013-1846" ref_url="https://www.suse.com/security/cve/CVE-2013-1846/" source="CVE"/>
		<reference ref_id="CVE-2013-1847" ref_url="https://www.suse.com/security/cve/CVE-2013-1847/" source="CVE"/>
		<reference ref_id="CVE-2013-1849" ref_url="https://www.suse.com/security/cve/CVE-2013-1849/" source="CVE"/>
		<reference ref_id="CVE-2013-1884" ref_url="https://www.suse.com/security/cve/CVE-2013-1884/" source="CVE"/>
		<reference ref_id="CVE-2013-1968" ref_url="https://www.suse.com/security/cve/CVE-2013-1968/" source="CVE"/>
		<reference ref_id="CVE-2013-2088" ref_url="https://www.suse.com/security/cve/CVE-2013-2088/" source="CVE"/>
		<reference ref_id="CVE-2013-2112" ref_url="https://www.suse.com/security/cve/CVE-2013-2112/" source="CVE"/>
		<reference ref_id="CVE-2013-4131" ref_url="https://www.suse.com/security/cve/CVE-2013-4131/" source="CVE"/>
		<reference ref_id="CVE-2013-4246" ref_url="https://www.suse.com/security/cve/CVE-2013-4246/" source="CVE"/>
		<reference ref_id="CVE-2013-4262" ref_url="https://www.suse.com/security/cve/CVE-2013-4262/" source="CVE"/>
		<reference ref_id="CVE-2013-4277" ref_url="https://www.suse.com/security/cve/CVE-2013-4277/" source="CVE"/>
		<reference ref_id="CVE-2013-4505" ref_url="https://www.suse.com/security/cve/CVE-2013-4505/" source="CVE"/>
		<reference ref_id="CVE-2013-4558" ref_url="https://www.suse.com/security/cve/CVE-2013-4558/" source="CVE"/>
		<reference ref_id="CVE-2014-0032" ref_url="https://www.suse.com/security/cve/CVE-2014-0032/" source="CVE"/>
		<reference ref_id="CVE-2014-3522" ref_url="https://www.suse.com/security/cve/CVE-2014-3522/" source="CVE"/>
		<reference ref_id="CVE-2014-3528" ref_url="https://www.suse.com/security/cve/CVE-2014-3528/" source="CVE"/>
		<reference ref_id="CVE-2014-3580" ref_url="https://www.suse.com/security/cve/CVE-2014-3580/" source="CVE"/>
		<reference ref_id="CVE-2014-8108" ref_url="https://www.suse.com/security/cve/CVE-2014-8108/" source="CVE"/>
		<reference ref_id="CVE-2015-0202" ref_url="https://www.suse.com/security/cve/CVE-2015-0202/" source="CVE"/>
		<reference ref_id="CVE-2015-0248" ref_url="https://www.suse.com/security/cve/CVE-2015-0248/" source="CVE"/>
		<reference ref_id="CVE-2015-0251" ref_url="https://www.suse.com/security/cve/CVE-2015-0251/" source="CVE"/>
		<reference ref_id="CVE-2015-3184" ref_url="https://www.suse.com/security/cve/CVE-2015-3184/" source="CVE"/>
		<reference ref_id="CVE-2015-3187" ref_url="https://www.suse.com/security/cve/CVE-2015-3187/" source="CVE"/>
		<reference ref_id="CVE-2015-5259" ref_url="https://www.suse.com/security/cve/CVE-2015-5259/" source="CVE"/>
		<reference ref_id="CVE-2015-5343" ref_url="https://www.suse.com/security/cve/CVE-2015-5343/" source="CVE"/>
		<reference ref_id="CVE-2016-2167" ref_url="https://www.suse.com/security/cve/CVE-2016-2167/" source="CVE"/>
		<reference ref_id="CVE-2016-2168" ref_url="https://www.suse.com/security/cve/CVE-2016-2168/" source="CVE"/>
		<reference ref_id="CVE-2016-8734" ref_url="https://www.suse.com/security/cve/CVE-2016-8734/" source="CVE"/>
		<reference ref_id="CVE-2017-9800" ref_url="https://www.suse.com/security/cve/CVE-2017-9800/" source="CVE"/>
		<reference ref_id="CVE-2018-11803" ref_url="https://www.suse.com/security/cve/CVE-2018-11803/" source="CVE"/>
		<description>
These are all security issues fixed in the subversion-bash-completion-1.10.0-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2411/">CVE-2009-2411</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3315/">CVE-2010-3315</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4539/">CVE-2010-4539</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4644/">CVE-2010-4644</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0715/">CVE-2011-0715</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1752/">CVE-2011-1752</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1783/">CVE-2011-1783</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1921/">CVE-2011-1921</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1845/">CVE-2013-1845</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1846/">CVE-2013-1846</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1847/">CVE-2013-1847</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1849/">CVE-2013-1849</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1884/">CVE-2013-1884</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1968/">CVE-2013-1968</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2088/">CVE-2013-2088</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2112/">CVE-2013-2112</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4131/">CVE-2013-4131</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4246/">CVE-2013-4246</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4262/">CVE-2013-4262</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4277/">CVE-2013-4277</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4505/">CVE-2013-4505</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4558/">CVE-2013-4558</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0032/">CVE-2014-0032</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-3522/">CVE-2014-3522</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-3528/">CVE-2014-3528</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3580/">CVE-2014-3580</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8108/">CVE-2014-8108</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0202/">CVE-2015-0202</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0248/">CVE-2015-0248</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0251/">CVE-2015-0251</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3184/">CVE-2015-3184</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-3187/">CVE-2015-3187</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5259/">CVE-2015-5259</cve>
	<cve impact="important" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2015-5343/">CVE-2015-5343</cve>
	<cve impact="low" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2167/">CVE-2016-2167</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2168/">CVE-2016-2168</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8734/">CVE-2016-8734</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-9800/">CVE-2017-9800</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11803/">CVE-2018-11803</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009487784" comment="subversion-bash-completion-1.10.0-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487785" comment="subversion-perl-1.10.0-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487786" comment="subversion-python-1.10.0-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487787" comment="subversion-tools-1.10.0-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137545" version="1" class="patch">
	<metadata>
		<title>xorg-x11-server-sdk-1.20.3-12.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-3164" ref_url="https://www.suse.com/security/cve/CVE-2015-3164/" source="CVE"/>
		<reference ref_id="CVE-2017-10971" ref_url="https://www.suse.com/security/cve/CVE-2017-10971/" source="CVE"/>
		<reference ref_id="CVE-2017-10972" ref_url="https://www.suse.com/security/cve/CVE-2017-10972/" source="CVE"/>
		<reference ref_id="CVE-2017-12176" ref_url="https://www.suse.com/security/cve/CVE-2017-12176/" source="CVE"/>
		<reference ref_id="CVE-2017-12187" ref_url="https://www.suse.com/security/cve/CVE-2017-12187/" source="CVE"/>
		<reference ref_id="CVE-2017-13721" ref_url="https://www.suse.com/security/cve/CVE-2017-13721/" source="CVE"/>
		<reference ref_id="CVE-2017-13723" ref_url="https://www.suse.com/security/cve/CVE-2017-13723/" source="CVE"/>
		<reference ref_id="CVE-2017-2624" ref_url="https://www.suse.com/security/cve/CVE-2017-2624/" source="CVE"/>
		<reference ref_id="CVE-2018-14665" ref_url="https://www.suse.com/security/cve/CVE-2018-14665/" source="CVE"/>
		<description>
These are all security issues fixed in the xorg-x11-server-sdk-1.20.3-12.29 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3164/">CVE-2015-3164</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10971/">CVE-2017-10971</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10972/">CVE-2017-10972</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12176/">CVE-2017-12176</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12187/">CVE-2017-12187</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-13721/">CVE-2017-13721</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13723/">CVE-2017-13723</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2624/">CVE-2017-2624</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14665/">CVE-2018-14665</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487792" comment="xorg-x11-server-sdk-1.20.3-12.29 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137546" version="1" class="patch">
	<metadata>
		<title>zlib-devel-32bit-1.2.11-3.6.4 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-9843" ref_url="https://www.suse.com/security/cve/CVE-2016-9843/" source="CVE"/>
		<description>
These are all security issues fixed in the zlib-devel-32bit-1.2.11-3.6.4 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9843/">CVE-2016-9843</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009487793" comment="zlib-devel-32bit-1.2.11-3.6.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137547" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
		</affected>
		<reference ref_id="1122208" ref_url="https://bugzilla.suse.com/1122208" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6446" ref_url="https://www.suse.com/security/cve/CVE-2019-6446/" source="CVE"/>
		<description>
This update for python-numpy fixes the following issue:

Security issue fixed:

- CVE-2019-6446: Set allow_pickle to false by default to restrict loading untrusted content (bsc#1122208).
  With this update we decrease the possibility of allowing remote attackers to execute arbitrary code by
  misusing numpy.load(). A warning during runtime will show-up when the allow_pickle is not explicitly set.
  
NOTE: By applying this update the behavior of python-numpy changes, which might break your application.
In order to get the old behaviour back, you have to explicitly set `allow_pickle` to True. Be aware
that this should only be done for trusted input, as loading untrusted input might lead to arbitrary code
execution.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-16"/>
	<updated date="2019-02-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1122208">SUSE bug 1122208</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6446/">CVE-2019-6446</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790095" comment="python2-numpy-gnu-hpc-1.14.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790096" comment="python2-numpy-gnu-hpc-devel-1.14.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790097" comment="python2-numpy_1_14_0-gnu-hpc-1.14.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790098" comment="python2-numpy_1_14_0-gnu-hpc-devel-1.14.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790099" comment="python3-numpy-gnu-hpc-1.14.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790100" comment="python3-numpy-gnu-hpc-devel-1.14.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790101" comment="python3-numpy_1_14_0-gnu-hpc-1.14.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790102" comment="python3-numpy_1_14_0-gnu-hpc-devel-1.14.0-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137548" version="1" class="patch">
	<metadata>
		<title>gv-3.7.4-1.41 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-3386" ref_url="https://www.suse.com/security/cve/CVE-2012-3386/" source="CVE"/>
		<description>
These are all security issues fixed in the gv-3.7.4-1.41 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-29"/>
	<updated date="2021-04-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3386/">CVE-2012-3386</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488019" comment="gv-3.7.4-1.41 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137549" version="1" class="patch">
	<metadata>
		<title>java-10-openjdk-10.0.2.0-3.3.3 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1096420" ref_url="https://bugzilla.suse.com/1096420" source="BUGZILLA"/>
		<reference ref_id="1101645" ref_url="https://bugzilla.suse.com/1101645" source="BUGZILLA"/>
		<reference ref_id="1101651" ref_url="https://bugzilla.suse.com/1101651" source="BUGZILLA"/>
		<reference ref_id="1101655" ref_url="https://bugzilla.suse.com/1101655" source="BUGZILLA"/>
		<reference ref_id="1101656" ref_url="https://bugzilla.suse.com/1101656" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-2940" ref_url="https://www.suse.com/security/cve/CVE-2018-2940/" source="CVE"/>
		<reference ref_id="CVE-2018-2952" ref_url="https://www.suse.com/security/cve/CVE-2018-2952/" source="CVE"/>
		<reference ref_id="CVE-2018-2972" ref_url="https://www.suse.com/security/cve/CVE-2018-2972/" source="CVE"/>
		<reference ref_id="CVE-2018-2973" ref_url="https://www.suse.com/security/cve/CVE-2018-2973/" source="CVE"/>
		<description>

This update for OpenJDK 10.0.2 fixes the following security issues:

- CVE-2018-2940: the libraries sub-component contained an easily exploitable
  vulnerability that allowed attackers to compromise Java SE or Java SE
  Embedded over the network, potentially gaining unauthorized read access to
  data that's accessible to the server. [bsc#1101645]

- CVE-2018-2952: the concurrency sub-component contained a difficult to exploit
  vulnerability that allowed attackers to compromise Java SE, Java SE Embedded,
  or JRockit over the network. This issue could have been abused to mount a
  partial denial-of-service attack on the server. [bsc#1101651]

- CVE-2018-2972: the security sub-component contained a difficult to exploit
  vulnerability that allowed attackers to compromise Java SE over the network,
  potentially gaining unauthorized access to critical data or complete access
  to all Java SE accessible data. [bsc#1101655)

- CVE-2018-2973: the JSSE sub-component contained a difficult to exploit
  vulnerability allowed attackers to compromise Java SE or Java SE Embedded
  over the network, potentially gaining the ability to create, delete or modify
  critical data or all Java SE, Java SE Embedded accessible data without
  authorization. [bsc#1101656]

Furthemore, the following bugs were fixed:

- Properly remove the existing alternative for java before reinstalling it.
  [bsc#1096420]

- idlj was moved to the *-devel package. [bsc#1096420]
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-27"/>
	<updated date="2018-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1096420">SUSE bug 1096420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101645">SUSE bug 1101645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101651">SUSE bug 1101651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101655">SUSE bug 1101655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101656">SUSE bug 1101656</bugzilla>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-2940/">CVE-2018-2940</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2018-2952/">CVE-2018-2952</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-2972/">CVE-2018-2972</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-2973/">CVE-2018-2973</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790103" comment="java-10-openjdk-10.0.2.0-3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790104" comment="java-10-openjdk-demo-10.0.2.0-3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790105" comment="java-10-openjdk-devel-10.0.2.0-3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790106" comment="java-10-openjdk-headless-10.0.2.0-3.3.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137550" version="1" class="patch">
	<metadata>
		<title>java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122292" ref_url="https://bugzilla.suse.com/1122292" source="BUGZILLA"/>
		<reference ref_id="1122293" ref_url="https://bugzilla.suse.com/1122293" source="BUGZILLA"/>
		<reference ref_id="1122299" ref_url="https://bugzilla.suse.com/1122299" source="BUGZILLA"/>
		<reference ref_id="1128158" ref_url="https://bugzilla.suse.com/1128158" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11212" ref_url="https://www.suse.com/security/cve/CVE-2018-11212/" source="CVE"/>
		<reference ref_id="CVE-2018-1890" ref_url="https://www.suse.com/security/cve/CVE-2018-1890/" source="CVE"/>
		<reference ref_id="CVE-2019-2422" ref_url="https://www.suse.com/security/cve/CVE-2019-2422/" source="CVE"/>
		<reference ref_id="CVE-2019-2449" ref_url="https://www.suse.com/security/cve/CVE-2019-2449/" source="CVE"/>
		<description>
This update for java-1_8_0-ibm to version 8.0.5.30 fixes the following issues:

Security issues fixed: 	  

- CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl (bsc#1122293).
- CVE-2018-11212: Fixed an issue in alloc_sarray function in jmemmgr.c (bsc#1122299).
- CVE-2018-1890: Fixed a local privilege escalation via RPATHs (bsc#1128158).
- CVE-2019-2449: Fixed a vulnerabilit which could allow remote atackers to delete arbitrary files (bsc#1122292). 

More information: https://www-01.ibm.com/support/docview.wss?uid=ibm10873332
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-12"/>
	<updated date="2019-03-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1122292">SUSE bug 1122292</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122293">SUSE bug 1122293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122299">SUSE bug 1122299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128158">SUSE bug 1128158</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11212/">CVE-2018-11212</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1890/">CVE-2018-1890</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2422/">CVE-2019-2422</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2449/">CVE-2019-2449</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790107" comment="java-1_8_0-ibm-1.8.0_sr5.30-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790108" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.30-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790109" comment="java-1_8_0-ibm-devel-1.8.0_sr5.30-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790110" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.30-3.16.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137551" version="1" class="patch">
	<metadata>
		<title>java-1_8_0-openjdk-1.8.0.201-3.16.1 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122293" ref_url="https://bugzilla.suse.com/1122293" source="BUGZILLA"/>
		<reference ref_id="1122299" ref_url="https://bugzilla.suse.com/1122299" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11212" ref_url="https://www.suse.com/security/cve/CVE-2018-11212/" source="CVE"/>
		<reference ref_id="CVE-2019-2422" ref_url="https://www.suse.com/security/cve/CVE-2019-2422/" source="CVE"/>
		<description>
This update for java-1_8_0-openjdk to version jdk8u201 (icedtea 3.11.0) fixes the following issues:
	  
Security issues fixed: 

- CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl (bsc#1122293).
- CVE-2018-11212: Fixed an issue in alloc_sarray function in jmemmgr.c (bsc#1122299).	

Complete list of changes: https://mail.openjdk.java.net/pipermail/distro-pkg-dev/2019-March/041223.html 
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-08"/>
	<updated date="2019-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1122293">SUSE bug 1122293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122299">SUSE bug 1122299</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11212/">CVE-2018-11212</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2422/">CVE-2019-2422</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790111" comment="java-1_8_0-openjdk-1.8.0.201-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790112" comment="java-1_8_0-openjdk-demo-1.8.0.201-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790113" comment="java-1_8_0-openjdk-devel-1.8.0.201-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790114" comment="java-1_8_0-openjdk-headless-1.8.0.201-3.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137552" version="1" class="patch">
	<metadata>
		<title>libncurses5-32bit-6.1-5.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-19211" ref_url="https://www.suse.com/security/cve/CVE-2018-19211/" source="CVE"/>
		<description>
These are all security issues fixed in the libncurses5-32bit-6.1-5.3.1 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-29"/>
	<updated date="2021-04-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19211/">CVE-2018-19211</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488051" comment="libncurses5-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488052" comment="libncurses5-32bit-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488053" comment="ncurses5-devel-6.1-5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137553" version="1" class="patch">
	<metadata>
		<title>libopenssl-1_0_0-devel-1.0.2p-3.14.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2006-7250" ref_url="https://www.suse.com/security/cve/CVE-2006-7250/" source="CVE"/>
		<reference ref_id="CVE-2008-5077" ref_url="https://www.suse.com/security/cve/CVE-2008-5077/" source="CVE"/>
		<reference ref_id="CVE-2009-0590" ref_url="https://www.suse.com/security/cve/CVE-2009-0590/" source="CVE"/>
		<reference ref_id="CVE-2009-0591" ref_url="https://www.suse.com/security/cve/CVE-2009-0591/" source="CVE"/>
		<reference ref_id="CVE-2009-0789" ref_url="https://www.suse.com/security/cve/CVE-2009-0789/" source="CVE"/>
		<reference ref_id="CVE-2009-1377" ref_url="https://www.suse.com/security/cve/CVE-2009-1377/" source="CVE"/>
		<reference ref_id="CVE-2009-1378" ref_url="https://www.suse.com/security/cve/CVE-2009-1378/" source="CVE"/>
		<reference ref_id="CVE-2009-1379" ref_url="https://www.suse.com/security/cve/CVE-2009-1379/" source="CVE"/>
		<reference ref_id="CVE-2009-1386" ref_url="https://www.suse.com/security/cve/CVE-2009-1386/" source="CVE"/>
		<reference ref_id="CVE-2009-1387" ref_url="https://www.suse.com/security/cve/CVE-2009-1387/" source="CVE"/>
		<reference ref_id="CVE-2010-0740" ref_url="https://www.suse.com/security/cve/CVE-2010-0740/" source="CVE"/>
		<reference ref_id="CVE-2010-0742" ref_url="https://www.suse.com/security/cve/CVE-2010-0742/" source="CVE"/>
		<reference ref_id="CVE-2010-1633" ref_url="https://www.suse.com/security/cve/CVE-2010-1633/" source="CVE"/>
		<reference ref_id="CVE-2010-2939" ref_url="https://www.suse.com/security/cve/CVE-2010-2939/" source="CVE"/>
		<reference ref_id="CVE-2010-3864" ref_url="https://www.suse.com/security/cve/CVE-2010-3864/" source="CVE"/>
		<reference ref_id="CVE-2010-5298" ref_url="https://www.suse.com/security/cve/CVE-2010-5298/" source="CVE"/>
		<reference ref_id="CVE-2011-0014" ref_url="https://www.suse.com/security/cve/CVE-2011-0014/" source="CVE"/>
		<reference ref_id="CVE-2011-3207" ref_url="https://www.suse.com/security/cve/CVE-2011-3207/" source="CVE"/>
		<reference ref_id="CVE-2011-3210" ref_url="https://www.suse.com/security/cve/CVE-2011-3210/" source="CVE"/>
		<reference ref_id="CVE-2011-4108" ref_url="https://www.suse.com/security/cve/CVE-2011-4108/" source="CVE"/>
		<reference ref_id="CVE-2011-4576" ref_url="https://www.suse.com/security/cve/CVE-2011-4576/" source="CVE"/>
		<reference ref_id="CVE-2011-4577" ref_url="https://www.suse.com/security/cve/CVE-2011-4577/" source="CVE"/>
		<reference ref_id="CVE-2011-4619" ref_url="https://www.suse.com/security/cve/CVE-2011-4619/" source="CVE"/>
		<reference ref_id="CVE-2012-0027" ref_url="https://www.suse.com/security/cve/CVE-2012-0027/" source="CVE"/>
		<reference ref_id="CVE-2012-0050" ref_url="https://www.suse.com/security/cve/CVE-2012-0050/" source="CVE"/>
		<reference ref_id="CVE-2012-0884" ref_url="https://www.suse.com/security/cve/CVE-2012-0884/" source="CVE"/>
		<reference ref_id="CVE-2012-1165" ref_url="https://www.suse.com/security/cve/CVE-2012-1165/" source="CVE"/>
		<reference ref_id="CVE-2012-2110" ref_url="https://www.suse.com/security/cve/CVE-2012-2110/" source="CVE"/>
		<reference ref_id="CVE-2012-2686" ref_url="https://www.suse.com/security/cve/CVE-2012-2686/" source="CVE"/>
		<reference ref_id="CVE-2012-4929" ref_url="https://www.suse.com/security/cve/CVE-2012-4929/" source="CVE"/>
		<reference ref_id="CVE-2013-0166" ref_url="https://www.suse.com/security/cve/CVE-2013-0166/" source="CVE"/>
		<reference ref_id="CVE-2013-0169" ref_url="https://www.suse.com/security/cve/CVE-2013-0169/" source="CVE"/>
		<reference ref_id="CVE-2013-4353" ref_url="https://www.suse.com/security/cve/CVE-2013-4353/" source="CVE"/>
		<reference ref_id="CVE-2013-6449" ref_url="https://www.suse.com/security/cve/CVE-2013-6449/" source="CVE"/>
		<reference ref_id="CVE-2013-6450" ref_url="https://www.suse.com/security/cve/CVE-2013-6450/" source="CVE"/>
		<reference ref_id="CVE-2014-0076" ref_url="https://www.suse.com/security/cve/CVE-2014-0076/" source="CVE"/>
		<reference ref_id="CVE-2014-0160" ref_url="https://www.suse.com/security/cve/CVE-2014-0160/" source="CVE"/>
		<reference ref_id="CVE-2014-0195" ref_url="https://www.suse.com/security/cve/CVE-2014-0195/" source="CVE"/>
		<reference ref_id="CVE-2014-0198" ref_url="https://www.suse.com/security/cve/CVE-2014-0198/" source="CVE"/>
		<reference ref_id="CVE-2014-0221" ref_url="https://www.suse.com/security/cve/CVE-2014-0221/" source="CVE"/>
		<reference ref_id="CVE-2014-0224" ref_url="https://www.suse.com/security/cve/CVE-2014-0224/" source="CVE"/>
		<reference ref_id="CVE-2014-3470" ref_url="https://www.suse.com/security/cve/CVE-2014-3470/" source="CVE"/>
		<reference ref_id="CVE-2014-3505" ref_url="https://www.suse.com/security/cve/CVE-2014-3505/" source="CVE"/>
		<reference ref_id="CVE-2014-3506" ref_url="https://www.suse.com/security/cve/CVE-2014-3506/" source="CVE"/>
		<reference ref_id="CVE-2014-3507" ref_url="https://www.suse.com/security/cve/CVE-2014-3507/" source="CVE"/>
		<reference ref_id="CVE-2014-3508" ref_url="https://www.suse.com/security/cve/CVE-2014-3508/" source="CVE"/>
		<reference ref_id="CVE-2014-3509" ref_url="https://www.suse.com/security/cve/CVE-2014-3509/" source="CVE"/>
		<reference ref_id="CVE-2014-3510" ref_url="https://www.suse.com/security/cve/CVE-2014-3510/" source="CVE"/>
		<reference ref_id="CVE-2014-3511" ref_url="https://www.suse.com/security/cve/CVE-2014-3511/" source="CVE"/>
		<reference ref_id="CVE-2014-3512" ref_url="https://www.suse.com/security/cve/CVE-2014-3512/" source="CVE"/>
		<reference ref_id="CVE-2014-3513" ref_url="https://www.suse.com/security/cve/CVE-2014-3513/" source="CVE"/>
		<reference ref_id="CVE-2014-3567" ref_url="https://www.suse.com/security/cve/CVE-2014-3567/" source="CVE"/>
		<reference ref_id="CVE-2014-3568" ref_url="https://www.suse.com/security/cve/CVE-2014-3568/" source="CVE"/>
		<reference ref_id="CVE-2014-3569" ref_url="https://www.suse.com/security/cve/CVE-2014-3569/" source="CVE"/>
		<reference ref_id="CVE-2014-3570" ref_url="https://www.suse.com/security/cve/CVE-2014-3570/" source="CVE"/>
		<reference ref_id="CVE-2014-3571" ref_url="https://www.suse.com/security/cve/CVE-2014-3571/" source="CVE"/>
		<reference ref_id="CVE-2014-3572" ref_url="https://www.suse.com/security/cve/CVE-2014-3572/" source="CVE"/>
		<reference ref_id="CVE-2014-5139" ref_url="https://www.suse.com/security/cve/CVE-2014-5139/" source="CVE"/>
		<reference ref_id="CVE-2014-8275" ref_url="https://www.suse.com/security/cve/CVE-2014-8275/" source="CVE"/>
		<reference ref_id="CVE-2015-0204" ref_url="https://www.suse.com/security/cve/CVE-2015-0204/" source="CVE"/>
		<reference ref_id="CVE-2015-0205" ref_url="https://www.suse.com/security/cve/CVE-2015-0205/" source="CVE"/>
		<reference ref_id="CVE-2015-0206" ref_url="https://www.suse.com/security/cve/CVE-2015-0206/" source="CVE"/>
		<reference ref_id="CVE-2015-0209" ref_url="https://www.suse.com/security/cve/CVE-2015-0209/" source="CVE"/>
		<reference ref_id="CVE-2015-0286" ref_url="https://www.suse.com/security/cve/CVE-2015-0286/" source="CVE"/>
		<reference ref_id="CVE-2015-0287" ref_url="https://www.suse.com/security/cve/CVE-2015-0287/" source="CVE"/>
		<reference ref_id="CVE-2015-0288" ref_url="https://www.suse.com/security/cve/CVE-2015-0288/" source="CVE"/>
		<reference ref_id="CVE-2015-0289" ref_url="https://www.suse.com/security/cve/CVE-2015-0289/" source="CVE"/>
		<reference ref_id="CVE-2015-0293" ref_url="https://www.suse.com/security/cve/CVE-2015-0293/" source="CVE"/>
		<reference ref_id="CVE-2015-1788" ref_url="https://www.suse.com/security/cve/CVE-2015-1788/" source="CVE"/>
		<reference ref_id="CVE-2015-1789" ref_url="https://www.suse.com/security/cve/CVE-2015-1789/" source="CVE"/>
		<reference ref_id="CVE-2015-1790" ref_url="https://www.suse.com/security/cve/CVE-2015-1790/" source="CVE"/>
		<reference ref_id="CVE-2015-1791" ref_url="https://www.suse.com/security/cve/CVE-2015-1791/" source="CVE"/>
		<reference ref_id="CVE-2015-1792" ref_url="https://www.suse.com/security/cve/CVE-2015-1792/" source="CVE"/>
		<reference ref_id="CVE-2015-1793" ref_url="https://www.suse.com/security/cve/CVE-2015-1793/" source="CVE"/>
		<reference ref_id="CVE-2015-1794" ref_url="https://www.suse.com/security/cve/CVE-2015-1794/" source="CVE"/>
		<reference ref_id="CVE-2015-3193" ref_url="https://www.suse.com/security/cve/CVE-2015-3193/" source="CVE"/>
		<reference ref_id="CVE-2015-3194" ref_url="https://www.suse.com/security/cve/CVE-2015-3194/" source="CVE"/>
		<reference ref_id="CVE-2015-3195" ref_url="https://www.suse.com/security/cve/CVE-2015-3195/" source="CVE"/>
		<reference ref_id="CVE-2015-3196" ref_url="https://www.suse.com/security/cve/CVE-2015-3196/" source="CVE"/>
		<reference ref_id="CVE-2015-3197" ref_url="https://www.suse.com/security/cve/CVE-2015-3197/" source="CVE"/>
		<reference ref_id="CVE-2016-0701" ref_url="https://www.suse.com/security/cve/CVE-2016-0701/" source="CVE"/>
		<reference ref_id="CVE-2016-0702" ref_url="https://www.suse.com/security/cve/CVE-2016-0702/" source="CVE"/>
		<reference ref_id="CVE-2016-0705" ref_url="https://www.suse.com/security/cve/CVE-2016-0705/" source="CVE"/>
		<reference ref_id="CVE-2016-0797" ref_url="https://www.suse.com/security/cve/CVE-2016-0797/" source="CVE"/>
		<reference ref_id="CVE-2016-0798" ref_url="https://www.suse.com/security/cve/CVE-2016-0798/" source="CVE"/>
		<reference ref_id="CVE-2016-0800" ref_url="https://www.suse.com/security/cve/CVE-2016-0800/" source="CVE"/>
		<reference ref_id="CVE-2016-2105" ref_url="https://www.suse.com/security/cve/CVE-2016-2105/" source="CVE"/>
		<reference ref_id="CVE-2016-2106" ref_url="https://www.suse.com/security/cve/CVE-2016-2106/" source="CVE"/>
		<reference ref_id="CVE-2016-2107" ref_url="https://www.suse.com/security/cve/CVE-2016-2107/" source="CVE"/>
		<reference ref_id="CVE-2016-2109" ref_url="https://www.suse.com/security/cve/CVE-2016-2109/" source="CVE"/>
		<reference ref_id="CVE-2016-2176" ref_url="https://www.suse.com/security/cve/CVE-2016-2176/" source="CVE"/>
		<reference ref_id="CVE-2016-2177" ref_url="https://www.suse.com/security/cve/CVE-2016-2177/" source="CVE"/>
		<reference ref_id="CVE-2016-2178" ref_url="https://www.suse.com/security/cve/CVE-2016-2178/" source="CVE"/>
		<reference ref_id="CVE-2016-2179" ref_url="https://www.suse.com/security/cve/CVE-2016-2179/" source="CVE"/>
		<reference ref_id="CVE-2016-2180" ref_url="https://www.suse.com/security/cve/CVE-2016-2180/" source="CVE"/>
		<reference ref_id="CVE-2016-2181" ref_url="https://www.suse.com/security/cve/CVE-2016-2181/" source="CVE"/>
		<reference ref_id="CVE-2016-2182" ref_url="https://www.suse.com/security/cve/CVE-2016-2182/" source="CVE"/>
		<reference ref_id="CVE-2016-2183" ref_url="https://www.suse.com/security/cve/CVE-2016-2183/" source="CVE"/>
		<reference ref_id="CVE-2016-6302" ref_url="https://www.suse.com/security/cve/CVE-2016-6302/" source="CVE"/>
		<reference ref_id="CVE-2016-6303" ref_url="https://www.suse.com/security/cve/CVE-2016-6303/" source="CVE"/>
		<reference ref_id="CVE-2016-6304" ref_url="https://www.suse.com/security/cve/CVE-2016-6304/" source="CVE"/>
		<reference ref_id="CVE-2016-6306" ref_url="https://www.suse.com/security/cve/CVE-2016-6306/" source="CVE"/>
		<reference ref_id="CVE-2016-7052" ref_url="https://www.suse.com/security/cve/CVE-2016-7052/" source="CVE"/>
		<reference ref_id="CVE-2016-7055" ref_url="https://www.suse.com/security/cve/CVE-2016-7055/" source="CVE"/>
		<reference ref_id="CVE-2016-7056" ref_url="https://www.suse.com/security/cve/CVE-2016-7056/" source="CVE"/>
		<reference ref_id="CVE-2017-3731" ref_url="https://www.suse.com/security/cve/CVE-2017-3731/" source="CVE"/>
		<reference ref_id="CVE-2017-3732" ref_url="https://www.suse.com/security/cve/CVE-2017-3732/" source="CVE"/>
		<reference ref_id="CVE-2017-3735" ref_url="https://www.suse.com/security/cve/CVE-2017-3735/" source="CVE"/>
		<reference ref_id="CVE-2017-3736" ref_url="https://www.suse.com/security/cve/CVE-2017-3736/" source="CVE"/>
		<reference ref_id="CVE-2017-3737" ref_url="https://www.suse.com/security/cve/CVE-2017-3737/" source="CVE"/>
		<reference ref_id="CVE-2017-3738" ref_url="https://www.suse.com/security/cve/CVE-2017-3738/" source="CVE"/>
		<reference ref_id="CVE-2018-0732" ref_url="https://www.suse.com/security/cve/CVE-2018-0732/" source="CVE"/>
		<reference ref_id="CVE-2018-0734" ref_url="https://www.suse.com/security/cve/CVE-2018-0734/" source="CVE"/>
		<reference ref_id="CVE-2018-0737" ref_url="https://www.suse.com/security/cve/CVE-2018-0737/" source="CVE"/>
		<reference ref_id="CVE-2018-5407" ref_url="https://www.suse.com/security/cve/CVE-2018-5407/" source="CVE"/>
		<reference ref_id="CVE-2019-1559" ref_url="https://www.suse.com/security/cve/CVE-2019-1559/" source="CVE"/>
		<description>
These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2p-3.14.2 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-29"/>
	<updated date="2021-04-29"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2006-7250/">CVE-2006-7250</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-5077/">CVE-2008-5077</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0590/">CVE-2009-0590</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-0591/">CVE-2009-0591</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0789/">CVE-2009-0789</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1377/">CVE-2009-1377</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1378/">CVE-2009-1378</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1379/">CVE-2009-1379</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1386/">CVE-2009-1386</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1387/">CVE-2009-1387</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0740/">CVE-2010-0740</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-0742/">CVE-2010-0742</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1633/">CVE-2010-1633</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2939/">CVE-2010-2939</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3864/">CVE-2010-3864</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-5298/">CVE-2010-5298</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0014/">CVE-2011-0014</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3207/">CVE-2011-3207</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3210/">CVE-2011-3210</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4108/">CVE-2011-4108</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4576/">CVE-2011-4576</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4577/">CVE-2011-4577</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4619/">CVE-2011-4619</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0027/">CVE-2012-0027</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0050/">CVE-2012-0050</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-0884/">CVE-2012-0884</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-1165/">CVE-2012-1165</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2110/">CVE-2012-2110</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2686/">CVE-2012-2686</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-4929/">CVE-2012-4929</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0166/">CVE-2013-0166</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0169/">CVE-2013-0169</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4353/">CVE-2013-4353</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6449/">CVE-2013-6449</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6450/">CVE-2013-6450</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-0076/">CVE-2014-0076</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-0160/">CVE-2014-0160</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0195/">CVE-2014-0195</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0198/">CVE-2014-0198</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0221/">CVE-2014-0221</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-0224/">CVE-2014-0224</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3470/">CVE-2014-3470</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3505/">CVE-2014-3505</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3506/">CVE-2014-3506</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3507/">CVE-2014-3507</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3508/">CVE-2014-3508</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3509/">CVE-2014-3509</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3510/">CVE-2014-3510</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3511/">CVE-2014-3511</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3512/">CVE-2014-3512</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2014-3513/">CVE-2014-3513</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3567/">CVE-2014-3567</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3568/">CVE-2014-3568</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3569/">CVE-2014-3569</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3570/">CVE-2014-3570</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3571/">CVE-2014-3571</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3572/">CVE-2014-3572</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-5139/">CVE-2014-5139</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8275/">CVE-2014-8275</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0204/">CVE-2015-0204</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0205/">CVE-2015-0205</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0206/">CVE-2015-0206</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0209/">CVE-2015-0209</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0286/">CVE-2015-0286</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0287/">CVE-2015-0287</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0288/">CVE-2015-0288</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0289/">CVE-2015-0289</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-0293/">CVE-2015-0293</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1788/">CVE-2015-1788</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-1789/">CVE-2015-1789</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1790/">CVE-2015-1790</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1791/">CVE-2015-1791</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1792/">CVE-2015-1792</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1793/">CVE-2015-1793</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-1794/">CVE-2015-1794</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-3193/">CVE-2015-3193</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-3194/">CVE-2015-3194</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-3195/">CVE-2015-3195</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3196/">CVE-2015-3196</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-3197/">CVE-2015-3197</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0701/">CVE-2016-0701</cve>
	<cve impact="important" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0702/">CVE-2016-0702</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0705/">CVE-2016-0705</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0797/">CVE-2016-0797</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0798/">CVE-2016-0798</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0800/">CVE-2016-0800</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2105/">CVE-2016-2105</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2106/">CVE-2016-2106</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2107/">CVE-2016-2107</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2109/">CVE-2016-2109</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2176/">CVE-2016-2176</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2177/">CVE-2016-2177</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2178/">CVE-2016-2178</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2179/">CVE-2016-2179</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2180/">CVE-2016-2180</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2181/">CVE-2016-2181</cve>
	<cve impact="low" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2182/">CVE-2016-2182</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2183/">CVE-2016-2183</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6302/">CVE-2016-6302</cve>
	<cve impact="low" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6303/">CVE-2016-6303</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6304/">CVE-2016-6304</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6306/">CVE-2016-6306</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7052/">CVE-2016-7052</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7055/">CVE-2016-7055</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7056/">CVE-2016-7056</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3731/">CVE-2017-3731</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3732/">CVE-2017-3732</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-3735/">CVE-2017-3735</cve>
	<cve impact="moderate" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-3736/">CVE-2017-3736</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3737/">CVE-2017-3737</cve>
	<cve impact="low" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3738/">CVE-2017-3738</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-0732/">CVE-2018-0732</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-0734/">CVE-2018-0734</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-0737/">CVE-2018-0737</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-5407/">CVE-2018-5407</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1559/">CVE-2019-1559</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488054" comment="libopenssl-1_0_0-devel-1.0.2p-3.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488055" comment="libopenssl1_0_0-1.0.2p-3.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488056" comment="openssl-1_0_0-1.0.2p-3.14.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137554" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1103320" ref_url="https://bugzilla.suse.com/1103320" source="BUGZILLA"/>
		<reference ref_id="1115929" ref_url="https://bugzilla.suse.com/1115929" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19211" ref_url="https://www.suse.com/security/cve/CVE-2018-19211/" source="CVE"/>
		<description>
This update for ncurses fixes the following issues:

Security issue fixed:

- CVE-2018-19211: Fixed denial of service issue that was triggered by a NULL pointer dereference at function _nc_parse_entry (bsc#1115929).

Non-security issue fixed:

- Remove scree.xterm from terminfo data base as with this screen uses fallback TERM=screen (bsc#1103320). 
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-06"/>
	<updated date="2018-12-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1103320">SUSE bug 1103320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115929">SUSE bug 1115929</bugzilla>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19211/">CVE-2018-19211</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790115" comment="libncurses5-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496969" comment="libncurses5-32bit-6.1-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790116" comment="ncurses5-devel-6.1-5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137555" version="1" class="patch">
	<metadata>
		<title>ntp-4.2.8p13-4.6.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1128525" ref_url="https://bugzilla.suse.com/1128525" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8936" ref_url="https://www.suse.com/security/cve/CVE-2019-8936/" source="CVE"/>
		<description>
This update for ntp fixes the following issues:

Security issue fixed: 	  

- CVE-2019-8936: Fixed a null pointer exception which could allow an authenticated attcker to cause 
  segmentation fault to ntpd (bsc#1128525).

Other issues addressed:

- Fixed several bugs in the BANCOMM reclock driver.
- Fixed ntp_loopfilter.c snprintf compilation warnings.
- Fixed spurious initgroups() error message.
- Fixed STA_NANO struct timex units.
- Fixed GPS week rollover in libparse.
- Fixed incorrect poll interval in packet.
- Added a missing check for ENABLE_CMAC.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-27"/>
	<updated date="2019-03-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1128525">SUSE bug 1128525</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-8936/">CVE-2019-8936</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790117" comment="ntp-4.2.8p13-4.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137556" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1089039" ref_url="https://bugzilla.suse.com/1089039" source="BUGZILLA"/>
		<reference ref_id="1097158" ref_url="https://bugzilla.suse.com/1097158" source="BUGZILLA"/>
		<reference ref_id="1101470" ref_url="https://bugzilla.suse.com/1101470" source="BUGZILLA"/>
		<reference ref_id="1104789" ref_url="https://bugzilla.suse.com/1104789" source="BUGZILLA"/>
		<reference ref_id="1106197" ref_url="https://bugzilla.suse.com/1106197" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-0732" ref_url="https://www.suse.com/security/cve/CVE-2018-0732/" source="CVE"/>
		<reference ref_id="CVE-2018-0737" ref_url="https://www.suse.com/security/cve/CVE-2018-0737/" source="CVE"/>
		<description>
This update for openssl-1_0_0 to 1.0.2p fixes the following issues:

These security issues were fixed:

- Prevent One&amp;Done side-channel attack on RSA that allowed physically near
  attackers to use EM emanations to recover information (bsc#1104789)
- CVE-2018-0737: The RSA Key generation algorithm has been shown to be
  vulnerable to a cache timing side channel attack. An attacker with sufficient
  access to mount cache timing attacks during the RSA key generation process
  could have recovered the private key (bsc#1089039)
- CVE-2018-0732: During key agreement in a TLS handshake using a DH(E) based
  ciphersuite a malicious server could have sent a very large prime value to the
  client. This caused the client to spend an unreasonably long period of time
  generating a key for this prime resulting in a hang until the client has
  finished. This could be exploited in a Denial Of Service attack (bsc#1097158)
- Make problematic ECDSA sign addition length-invariant
- Add blinding to ECDSA and DSA signatures to protect against side channel attacks

This non-security issue was fixed:

- Add openssl(cli) Provide so the packages that require the openssl
  binary can require this instead of the new openssl meta package
  (bsc#1101470)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-01"/>
	<updated date="2018-10-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1089039">SUSE bug 1089039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097158">SUSE bug 1097158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101470">SUSE bug 1101470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104789">SUSE bug 1104789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106197">SUSE bug 1106197</bugzilla>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-0732/">CVE-2018-0732</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-0737/">CVE-2018-0737</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782521" comment="libopenssl-1_0_0-devel-1.0.2p-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782522" comment="libopenssl1_0_0-1.0.2p-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782523" comment="openssl-1_0_0-1.0.2p-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137557" version="1" class="patch">
	<metadata>
		<title>pam-modules-12.1-3.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-3172" ref_url="https://www.suse.com/security/cve/CVE-2011-3172/" source="CVE"/>
		<description>
These are all security issues fixed in the pam-modules-12.1-3.17 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-29"/>
	<updated date="2021-04-29"/>
	<severity>Moderate</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2011-3172/">CVE-2011-3172</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488036" comment="pam-modules-12.1-3.17 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488037" comment="pam-modules-32bit-12.1-3.17 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137558" version="1" class="patch">
	<metadata>
		<title>reiserfs-kmp-default-4.12.14-195.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-1000251" ref_url="https://www.suse.com/security/cve/CVE-2017-1000251/" source="CVE"/>
		<reference ref_id="CVE-2017-1000252" ref_url="https://www.suse.com/security/cve/CVE-2017-1000252/" source="CVE"/>
		<reference ref_id="CVE-2017-1000255" ref_url="https://www.suse.com/security/cve/CVE-2017-1000255/" source="CVE"/>
		<reference ref_id="CVE-2017-1000410" ref_url="https://www.suse.com/security/cve/CVE-2017-1000410/" source="CVE"/>
		<reference ref_id="CVE-2017-11473" ref_url="https://www.suse.com/security/cve/CVE-2017-11473/" source="CVE"/>
		<reference ref_id="CVE-2017-11600" ref_url="https://www.suse.com/security/cve/CVE-2017-11600/" source="CVE"/>
		<reference ref_id="CVE-2017-12153" ref_url="https://www.suse.com/security/cve/CVE-2017-12153/" source="CVE"/>
		<reference ref_id="CVE-2017-12154" ref_url="https://www.suse.com/security/cve/CVE-2017-12154/" source="CVE"/>
		<reference ref_id="CVE-2017-12190" ref_url="https://www.suse.com/security/cve/CVE-2017-12190/" source="CVE"/>
		<reference ref_id="CVE-2017-12193" ref_url="https://www.suse.com/security/cve/CVE-2017-12193/" source="CVE"/>
		<reference ref_id="CVE-2017-13080" ref_url="https://www.suse.com/security/cve/CVE-2017-13080/" source="CVE"/>
		<reference ref_id="CVE-2017-13166" ref_url="https://www.suse.com/security/cve/CVE-2017-13166/" source="CVE"/>
		<reference ref_id="CVE-2017-14051" ref_url="https://www.suse.com/security/cve/CVE-2017-14051/" source="CVE"/>
		<reference ref_id="CVE-2017-14489" ref_url="https://www.suse.com/security/cve/CVE-2017-14489/" source="CVE"/>
		<reference ref_id="CVE-2017-15115" ref_url="https://www.suse.com/security/cve/CVE-2017-15115/" source="CVE"/>
		<reference ref_id="CVE-2017-15127" ref_url="https://www.suse.com/security/cve/CVE-2017-15127/" source="CVE"/>
		<reference ref_id="CVE-2017-15128" ref_url="https://www.suse.com/security/cve/CVE-2017-15128/" source="CVE"/>
		<reference ref_id="CVE-2017-15129" ref_url="https://www.suse.com/security/cve/CVE-2017-15129/" source="CVE"/>
		<reference ref_id="CVE-2017-15265" ref_url="https://www.suse.com/security/cve/CVE-2017-15265/" source="CVE"/>
		<reference ref_id="CVE-2017-15537" ref_url="https://www.suse.com/security/cve/CVE-2017-15537/" source="CVE"/>
		<reference ref_id="CVE-2017-15649" ref_url="https://www.suse.com/security/cve/CVE-2017-15649/" source="CVE"/>
		<reference ref_id="CVE-2017-15951" ref_url="https://www.suse.com/security/cve/CVE-2017-15951/" source="CVE"/>
		<reference ref_id="CVE-2017-16525" ref_url="https://www.suse.com/security/cve/CVE-2017-16525/" source="CVE"/>
		<reference ref_id="CVE-2017-16527" ref_url="https://www.suse.com/security/cve/CVE-2017-16527/" source="CVE"/>
		<reference ref_id="CVE-2017-16528" ref_url="https://www.suse.com/security/cve/CVE-2017-16528/" source="CVE"/>
		<reference ref_id="CVE-2017-16529" ref_url="https://www.suse.com/security/cve/CVE-2017-16529/" source="CVE"/>
		<reference ref_id="CVE-2017-16531" ref_url="https://www.suse.com/security/cve/CVE-2017-16531/" source="CVE"/>
		<reference ref_id="CVE-2017-16533" ref_url="https://www.suse.com/security/cve/CVE-2017-16533/" source="CVE"/>
		<reference ref_id="CVE-2017-16534" ref_url="https://www.suse.com/security/cve/CVE-2017-16534/" source="CVE"/>
		<reference ref_id="CVE-2017-16535" ref_url="https://www.suse.com/security/cve/CVE-2017-16535/" source="CVE"/>
		<reference ref_id="CVE-2017-16536" ref_url="https://www.suse.com/security/cve/CVE-2017-16536/" source="CVE"/>
		<reference ref_id="CVE-2017-16537" ref_url="https://www.suse.com/security/cve/CVE-2017-16537/" source="CVE"/>
		<reference ref_id="CVE-2017-16538" ref_url="https://www.suse.com/security/cve/CVE-2017-16538/" source="CVE"/>
		<reference ref_id="CVE-2017-16644" ref_url="https://www.suse.com/security/cve/CVE-2017-16644/" source="CVE"/>
		<reference ref_id="CVE-2017-16645" ref_url="https://www.suse.com/security/cve/CVE-2017-16645/" source="CVE"/>
		<reference ref_id="CVE-2017-16646" ref_url="https://www.suse.com/security/cve/CVE-2017-16646/" source="CVE"/>
		<reference ref_id="CVE-2017-16647" ref_url="https://www.suse.com/security/cve/CVE-2017-16647/" source="CVE"/>
		<reference ref_id="CVE-2017-16649" ref_url="https://www.suse.com/security/cve/CVE-2017-16649/" source="CVE"/>
		<reference ref_id="CVE-2017-16650" ref_url="https://www.suse.com/security/cve/CVE-2017-16650/" source="CVE"/>
		<reference ref_id="CVE-2017-16911" ref_url="https://www.suse.com/security/cve/CVE-2017-16911/" source="CVE"/>
		<reference ref_id="CVE-2017-16912" ref_url="https://www.suse.com/security/cve/CVE-2017-16912/" source="CVE"/>
		<reference ref_id="CVE-2017-16913" ref_url="https://www.suse.com/security/cve/CVE-2017-16913/" source="CVE"/>
		<reference ref_id="CVE-2017-16914" ref_url="https://www.suse.com/security/cve/CVE-2017-16914/" source="CVE"/>
		<reference ref_id="CVE-2017-16939" ref_url="https://www.suse.com/security/cve/CVE-2017-16939/" source="CVE"/>
		<reference ref_id="CVE-2017-16994" ref_url="https://www.suse.com/security/cve/CVE-2017-16994/" source="CVE"/>
		<reference ref_id="CVE-2017-16995" ref_url="https://www.suse.com/security/cve/CVE-2017-16995/" source="CVE"/>
		<reference ref_id="CVE-2017-16996" ref_url="https://www.suse.com/security/cve/CVE-2017-16996/" source="CVE"/>
		<reference ref_id="CVE-2017-17052" ref_url="https://www.suse.com/security/cve/CVE-2017-17052/" source="CVE"/>
		<reference ref_id="CVE-2017-17448" ref_url="https://www.suse.com/security/cve/CVE-2017-17448/" source="CVE"/>
		<reference ref_id="CVE-2017-17449" ref_url="https://www.suse.com/security/cve/CVE-2017-17449/" source="CVE"/>
		<reference ref_id="CVE-2017-17450" ref_url="https://www.suse.com/security/cve/CVE-2017-17450/" source="CVE"/>
		<reference ref_id="CVE-2017-17558" ref_url="https://www.suse.com/security/cve/CVE-2017-17558/" source="CVE"/>
		<reference ref_id="CVE-2017-17712" ref_url="https://www.suse.com/security/cve/CVE-2017-17712/" source="CVE"/>
		<reference ref_id="CVE-2017-17741" ref_url="https://www.suse.com/security/cve/CVE-2017-17741/" source="CVE"/>
		<reference ref_id="CVE-2017-17805" ref_url="https://www.suse.com/security/cve/CVE-2017-17805/" source="CVE"/>
		<reference ref_id="CVE-2017-17806" ref_url="https://www.suse.com/security/cve/CVE-2017-17806/" source="CVE"/>
		<reference ref_id="CVE-2017-17852" ref_url="https://www.suse.com/security/cve/CVE-2017-17852/" source="CVE"/>
		<reference ref_id="CVE-2017-17853" ref_url="https://www.suse.com/security/cve/CVE-2017-17853/" source="CVE"/>
		<reference ref_id="CVE-2017-17854" ref_url="https://www.suse.com/security/cve/CVE-2017-17854/" source="CVE"/>
		<reference ref_id="CVE-2017-17855" ref_url="https://www.suse.com/security/cve/CVE-2017-17855/" source="CVE"/>
		<reference ref_id="CVE-2017-17856" ref_url="https://www.suse.com/security/cve/CVE-2017-17856/" source="CVE"/>
		<reference ref_id="CVE-2017-17857" ref_url="https://www.suse.com/security/cve/CVE-2017-17857/" source="CVE"/>
		<reference ref_id="CVE-2017-17862" ref_url="https://www.suse.com/security/cve/CVE-2017-17862/" source="CVE"/>
		<reference ref_id="CVE-2017-17864" ref_url="https://www.suse.com/security/cve/CVE-2017-17864/" source="CVE"/>
		<reference ref_id="CVE-2017-17975" ref_url="https://www.suse.com/security/cve/CVE-2017-17975/" source="CVE"/>
		<reference ref_id="CVE-2017-18075" ref_url="https://www.suse.com/security/cve/CVE-2017-18075/" source="CVE"/>
		<reference ref_id="CVE-2017-18202" ref_url="https://www.suse.com/security/cve/CVE-2017-18202/" source="CVE"/>
		<reference ref_id="CVE-2017-18203" ref_url="https://www.suse.com/security/cve/CVE-2017-18203/" source="CVE"/>
		<reference ref_id="CVE-2017-18204" ref_url="https://www.suse.com/security/cve/CVE-2017-18204/" source="CVE"/>
		<reference ref_id="CVE-2017-18208" ref_url="https://www.suse.com/security/cve/CVE-2017-18208/" source="CVE"/>
		<reference ref_id="CVE-2017-18224" ref_url="https://www.suse.com/security/cve/CVE-2017-18224/" source="CVE"/>
		<reference ref_id="CVE-2017-18344" ref_url="https://www.suse.com/security/cve/CVE-2017-18344/" source="CVE"/>
		<reference ref_id="CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715/" source="CVE"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2017-5754" ref_url="https://www.suse.com/security/cve/CVE-2017-5754/" source="CVE"/>
		<reference ref_id="CVE-2017-7541" ref_url="https://www.suse.com/security/cve/CVE-2017-7541/" source="CVE"/>
		<reference ref_id="CVE-2017-7542" ref_url="https://www.suse.com/security/cve/CVE-2017-7542/" source="CVE"/>
		<reference ref_id="CVE-2017-8824" ref_url="https://www.suse.com/security/cve/CVE-2017-8824/" source="CVE"/>
		<reference ref_id="CVE-2017-8831" ref_url="https://www.suse.com/security/cve/CVE-2017-8831/" source="CVE"/>
		<reference ref_id="CVE-2018-1000004" ref_url="https://www.suse.com/security/cve/CVE-2018-1000004/" source="CVE"/>
		<reference ref_id="CVE-2018-1000028" ref_url="https://www.suse.com/security/cve/CVE-2018-1000028/" source="CVE"/>
		<reference ref_id="CVE-2018-1000200" ref_url="https://www.suse.com/security/cve/CVE-2018-1000200/" source="CVE"/>
		<reference ref_id="CVE-2018-1000204" ref_url="https://www.suse.com/security/cve/CVE-2018-1000204/" source="CVE"/>
		<reference ref_id="CVE-2018-10087" ref_url="https://www.suse.com/security/cve/CVE-2018-10087/" source="CVE"/>
		<reference ref_id="CVE-2018-10124" ref_url="https://www.suse.com/security/cve/CVE-2018-10124/" source="CVE"/>
		<reference ref_id="CVE-2018-10323" ref_url="https://www.suse.com/security/cve/CVE-2018-10323/" source="CVE"/>
		<reference ref_id="CVE-2018-1065" ref_url="https://www.suse.com/security/cve/CVE-2018-1065/" source="CVE"/>
		<reference ref_id="CVE-2018-1068" ref_url="https://www.suse.com/security/cve/CVE-2018-1068/" source="CVE"/>
		<reference ref_id="CVE-2018-10853" ref_url="https://www.suse.com/security/cve/CVE-2018-10853/" source="CVE"/>
		<reference ref_id="CVE-2018-10902" ref_url="https://www.suse.com/security/cve/CVE-2018-10902/" source="CVE"/>
		<reference ref_id="CVE-2018-1091" ref_url="https://www.suse.com/security/cve/CVE-2018-1091/" source="CVE"/>
		<reference ref_id="CVE-2018-10938" ref_url="https://www.suse.com/security/cve/CVE-2018-10938/" source="CVE"/>
		<reference ref_id="CVE-2018-1094" ref_url="https://www.suse.com/security/cve/CVE-2018-1094/" source="CVE"/>
		<reference ref_id="CVE-2018-10940" ref_url="https://www.suse.com/security/cve/CVE-2018-10940/" source="CVE"/>
		<reference ref_id="CVE-2018-1108" ref_url="https://www.suse.com/security/cve/CVE-2018-1108/" source="CVE"/>
		<reference ref_id="CVE-2018-1118" ref_url="https://www.suse.com/security/cve/CVE-2018-1118/" source="CVE"/>
		<reference ref_id="CVE-2018-1120" ref_url="https://www.suse.com/security/cve/CVE-2018-1120/" source="CVE"/>
		<reference ref_id="CVE-2018-1128" ref_url="https://www.suse.com/security/cve/CVE-2018-1128/" source="CVE"/>
		<reference ref_id="CVE-2018-1129" ref_url="https://www.suse.com/security/cve/CVE-2018-1129/" source="CVE"/>
		<reference ref_id="CVE-2018-1130" ref_url="https://www.suse.com/security/cve/CVE-2018-1130/" source="CVE"/>
		<reference ref_id="CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126/" source="CVE"/>
		<reference ref_id="CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127/" source="CVE"/>
		<reference ref_id="CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130/" source="CVE"/>
		<reference ref_id="CVE-2018-12232" ref_url="https://www.suse.com/security/cve/CVE-2018-12232/" source="CVE"/>
		<reference ref_id="CVE-2018-12233" ref_url="https://www.suse.com/security/cve/CVE-2018-12233/" source="CVE"/>
		<reference ref_id="CVE-2018-12896" ref_url="https://www.suse.com/security/cve/CVE-2018-12896/" source="CVE"/>
		<reference ref_id="CVE-2018-13053" ref_url="https://www.suse.com/security/cve/CVE-2018-13053/" source="CVE"/>
		<reference ref_id="CVE-2018-13093" ref_url="https://www.suse.com/security/cve/CVE-2018-13093/" source="CVE"/>
		<reference ref_id="CVE-2018-13094" ref_url="https://www.suse.com/security/cve/CVE-2018-13094/" source="CVE"/>
		<reference ref_id="CVE-2018-13095" ref_url="https://www.suse.com/security/cve/CVE-2018-13095/" source="CVE"/>
		<reference ref_id="CVE-2018-13405" ref_url="https://www.suse.com/security/cve/CVE-2018-13405/" source="CVE"/>
		<reference ref_id="CVE-2018-13406" ref_url="https://www.suse.com/security/cve/CVE-2018-13406/" source="CVE"/>
		<reference ref_id="CVE-2018-14613" ref_url="https://www.suse.com/security/cve/CVE-2018-14613/" source="CVE"/>
		<reference ref_id="CVE-2018-14617" ref_url="https://www.suse.com/security/cve/CVE-2018-14617/" source="CVE"/>
		<reference ref_id="CVE-2018-14625" ref_url="https://www.suse.com/security/cve/CVE-2018-14625/" source="CVE"/>
		<reference ref_id="CVE-2018-14633" ref_url="https://www.suse.com/security/cve/CVE-2018-14633/" source="CVE"/>
		<reference ref_id="CVE-2018-15572" ref_url="https://www.suse.com/security/cve/CVE-2018-15572/" source="CVE"/>
		<reference ref_id="CVE-2018-16658" ref_url="https://www.suse.com/security/cve/CVE-2018-16658/" source="CVE"/>
		<reference ref_id="CVE-2018-16862" ref_url="https://www.suse.com/security/cve/CVE-2018-16862/" source="CVE"/>
		<reference ref_id="CVE-2018-16880" ref_url="https://www.suse.com/security/cve/CVE-2018-16880/" source="CVE"/>
		<reference ref_id="CVE-2018-16884" ref_url="https://www.suse.com/security/cve/CVE-2018-16884/" source="CVE"/>
		<reference ref_id="CVE-2018-17182" ref_url="https://www.suse.com/security/cve/CVE-2018-17182/" source="CVE"/>
		<reference ref_id="CVE-2018-18281" ref_url="https://www.suse.com/security/cve/CVE-2018-18281/" source="CVE"/>
		<reference ref_id="CVE-2018-18386" ref_url="https://www.suse.com/security/cve/CVE-2018-18386/" source="CVE"/>
		<reference ref_id="CVE-2018-18397" ref_url="https://www.suse.com/security/cve/CVE-2018-18397/" source="CVE"/>
		<reference ref_id="CVE-2018-18445" ref_url="https://www.suse.com/security/cve/CVE-2018-18445/" source="CVE"/>
		<reference ref_id="CVE-2018-18710" ref_url="https://www.suse.com/security/cve/CVE-2018-18710/" source="CVE"/>
		<reference ref_id="CVE-2018-19407" ref_url="https://www.suse.com/security/cve/CVE-2018-19407/" source="CVE"/>
		<reference ref_id="CVE-2018-19824" ref_url="https://www.suse.com/security/cve/CVE-2018-19824/" source="CVE"/>
		<reference ref_id="CVE-2018-19854" ref_url="https://www.suse.com/security/cve/CVE-2018-19854/" source="CVE"/>
		<reference ref_id="CVE-2018-19985" ref_url="https://www.suse.com/security/cve/CVE-2018-19985/" source="CVE"/>
		<reference ref_id="CVE-2018-20169" ref_url="https://www.suse.com/security/cve/CVE-2018-20169/" source="CVE"/>
		<reference ref_id="CVE-2018-20669" ref_url="https://www.suse.com/security/cve/CVE-2018-20669/" source="CVE"/>
		<reference ref_id="CVE-2018-3620" ref_url="https://www.suse.com/security/cve/CVE-2018-3620/" source="CVE"/>
		<reference ref_id="CVE-2018-3639" ref_url="https://www.suse.com/security/cve/CVE-2018-3639/" source="CVE"/>
		<reference ref_id="CVE-2018-3646" ref_url="https://www.suse.com/security/cve/CVE-2018-3646/" source="CVE"/>
		<reference ref_id="CVE-2018-5332" ref_url="https://www.suse.com/security/cve/CVE-2018-5332/" source="CVE"/>
		<reference ref_id="CVE-2018-5333" ref_url="https://www.suse.com/security/cve/CVE-2018-5333/" source="CVE"/>
		<reference ref_id="CVE-2018-5390" ref_url="https://www.suse.com/security/cve/CVE-2018-5390/" source="CVE"/>
		<reference ref_id="CVE-2018-5391" ref_url="https://www.suse.com/security/cve/CVE-2018-5391/" source="CVE"/>
		<reference ref_id="CVE-2018-5803" ref_url="https://www.suse.com/security/cve/CVE-2018-5803/" source="CVE"/>
		<reference ref_id="CVE-2018-5848" ref_url="https://www.suse.com/security/cve/CVE-2018-5848/" source="CVE"/>
		<reference ref_id="CVE-2018-6554" ref_url="https://www.suse.com/security/cve/CVE-2018-6554/" source="CVE"/>
		<reference ref_id="CVE-2018-6555" ref_url="https://www.suse.com/security/cve/CVE-2018-6555/" source="CVE"/>
		<reference ref_id="CVE-2018-6927" ref_url="https://www.suse.com/security/cve/CVE-2018-6927/" source="CVE"/>
		<reference ref_id="CVE-2018-7492" ref_url="https://www.suse.com/security/cve/CVE-2018-7492/" source="CVE"/>
		<reference ref_id="CVE-2018-7566" ref_url="https://www.suse.com/security/cve/CVE-2018-7566/" source="CVE"/>
		<reference ref_id="CVE-2018-7740" ref_url="https://www.suse.com/security/cve/CVE-2018-7740/" source="CVE"/>
		<reference ref_id="CVE-2018-8043" ref_url="https://www.suse.com/security/cve/CVE-2018-8043/" source="CVE"/>
		<reference ref_id="CVE-2018-8087" ref_url="https://www.suse.com/security/cve/CVE-2018-8087/" source="CVE"/>
		<reference ref_id="CVE-2018-8781" ref_url="https://www.suse.com/security/cve/CVE-2018-8781/" source="CVE"/>
		<reference ref_id="CVE-2018-8822" ref_url="https://www.suse.com/security/cve/CVE-2018-8822/" source="CVE"/>
		<reference ref_id="CVE-2018-9363" ref_url="https://www.suse.com/security/cve/CVE-2018-9363/" source="CVE"/>
		<reference ref_id="CVE-2018-9385" ref_url="https://www.suse.com/security/cve/CVE-2018-9385/" source="CVE"/>
		<reference ref_id="CVE-2018-9568" ref_url="https://www.suse.com/security/cve/CVE-2018-9568/" source="CVE"/>
		<reference ref_id="CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091/" source="CVE"/>
		<reference ref_id="CVE-2019-2024" ref_url="https://www.suse.com/security/cve/CVE-2019-2024/" source="CVE"/>
		<reference ref_id="CVE-2019-3459" ref_url="https://www.suse.com/security/cve/CVE-2019-3459/" source="CVE"/>
		<reference ref_id="CVE-2019-3460" ref_url="https://www.suse.com/security/cve/CVE-2019-3460/" source="CVE"/>
		<reference ref_id="CVE-2019-3560" ref_url="https://www.suse.com/security/cve/CVE-2019-3560/" source="CVE"/>
		<reference ref_id="CVE-2019-3819" ref_url="https://www.suse.com/security/cve/CVE-2019-3819/" source="CVE"/>
		<reference ref_id="CVE-2019-6974" ref_url="https://www.suse.com/security/cve/CVE-2019-6974/" source="CVE"/>
		<reference ref_id="CVE-2019-7221" ref_url="https://www.suse.com/security/cve/CVE-2019-7221/" source="CVE"/>
		<reference ref_id="CVE-2019-7222" ref_url="https://www.suse.com/security/cve/CVE-2019-7222/" source="CVE"/>
		<reference ref_id="CVE-2019-7308" ref_url="https://www.suse.com/security/cve/CVE-2019-7308/" source="CVE"/>
		<reference ref_id="CVE-2019-8912" ref_url="https://www.suse.com/security/cve/CVE-2019-8912/" source="CVE"/>
		<reference ref_id="CVE-2019-8980" ref_url="https://www.suse.com/security/cve/CVE-2019-8980/" source="CVE"/>
		<reference ref_id="CVE-2019-9003" ref_url="https://www.suse.com/security/cve/CVE-2019-9003/" source="CVE"/>
		<reference ref_id="CVE-2019-9213" ref_url="https://www.suse.com/security/cve/CVE-2019-9213/" source="CVE"/>
		<description>
These are all security issues fixed in the reiserfs-kmp-default-4.12.14-195.1 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-29"/>
	<updated date="2021-04-29"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000251/">CVE-2017-1000251</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000252/">CVE-2017-1000252</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000255/">CVE-2017-1000255</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000410/">CVE-2017-1000410</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11473/">CVE-2017-11473</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-11600/">CVE-2017-11600</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12153/">CVE-2017-12153</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12154/">CVE-2017-12154</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12190/">CVE-2017-12190</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12193/">CVE-2017-12193</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13080/">CVE-2017-13080</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13166/">CVE-2017-13166</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14051/">CVE-2017-14051</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14489/">CVE-2017-14489</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15115/">CVE-2017-15115</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15127/">CVE-2017-15127</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15128/">CVE-2017-15128</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-15129/">CVE-2017-15129</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15265/">CVE-2017-15265</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15537/">CVE-2017-15537</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15649/">CVE-2017-15649</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15951/">CVE-2017-15951</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16525/">CVE-2017-16525</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16527/">CVE-2017-16527</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16528/">CVE-2017-16528</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16529/">CVE-2017-16529</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16531/">CVE-2017-16531</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16533/">CVE-2017-16533</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16534/">CVE-2017-16534</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16535/">CVE-2017-16535</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16536/">CVE-2017-16536</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16537/">CVE-2017-16537</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16538/">CVE-2017-16538</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16644/">CVE-2017-16644</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16645/">CVE-2017-16645</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16646/">CVE-2017-16646</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16647/">CVE-2017-16647</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16649/">CVE-2017-16649</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16650/">CVE-2017-16650</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-16911/">CVE-2017-16911</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16912/">CVE-2017-16912</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16913/">CVE-2017-16913</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16914/">CVE-2017-16914</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16939/">CVE-2017-16939</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-16994/">CVE-2017-16994</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16995/">CVE-2017-16995</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16996/">CVE-2017-16996</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17052/">CVE-2017-17052</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17448/">CVE-2017-17448</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17449/">CVE-2017-17449</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-17450/">CVE-2017-17450</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17558/">CVE-2017-17558</cve>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17712/">CVE-2017-17712</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17741/">CVE-2017-17741</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17805/">CVE-2017-17805</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17806/">CVE-2017-17806</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17852/">CVE-2017-17852</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17853/">CVE-2017-17853</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-17854/">CVE-2017-17854</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17855/">CVE-2017-17855</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17856/">CVE-2017-17856</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17857/">CVE-2017-17857</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17862/">CVE-2017-17862</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17864/">CVE-2017-17864</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17975/">CVE-2017-17975</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18075/">CVE-2017-18075</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18202/">CVE-2017-18202</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18203/">CVE-2017-18203</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18204/">CVE-2017-18204</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18208/">CVE-2017-18208</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18224/">CVE-2017-18224</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-18344/">CVE-2017-18344</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5754/">CVE-2017-5754</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7541/">CVE-2017-7541</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7542/">CVE-2017-7542</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8824/">CVE-2017-8824</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8831/">CVE-2017-8831</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000004/">CVE-2018-1000004</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000028/">CVE-2018-1000028</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000200/">CVE-2018-1000200</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000204/">CVE-2018-1000204</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10087/">CVE-2018-10087</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10124/">CVE-2018-10124</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10323/">CVE-2018-10323</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1065/">CVE-2018-1065</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1068/">CVE-2018-1068</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10853/">CVE-2018-10853</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10902/">CVE-2018-10902</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1091/">CVE-2018-1091</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10938/">CVE-2018-10938</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1094/">CVE-2018-1094</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10940/">CVE-2018-10940</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1108/">CVE-2018-1108</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1118/">CVE-2018-1118</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1120/">CVE-2018-1120</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2018-1128/">CVE-2018-1128</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1129/">CVE-2018-1129</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1130/">CVE-2018-1130</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<cve href="https://www.suse.com/security/cve/CVE-2018-12232/">CVE-2018-12232</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12233/">CVE-2018-12233</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12896/">CVE-2018-12896</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13053/">CVE-2018-13053</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-13093/">CVE-2018-13093</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-13094/">CVE-2018-13094</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-13095/">CVE-2018-13095</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-13405/">CVE-2018-13405</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-13406/">CVE-2018-13406</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14613/">CVE-2018-14613</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14617/">CVE-2018-14617</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-14625/">CVE-2018-14625</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14633/">CVE-2018-14633</cve>
	<cve impact="important" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-15572/">CVE-2018-15572</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16658/">CVE-2018-16658</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16862/">CVE-2018-16862</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16880/">CVE-2018-16880</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16884/">CVE-2018-16884</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17182/">CVE-2018-17182</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18281/">CVE-2018-18281</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18386/">CVE-2018-18386</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-18397/">CVE-2018-18397</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18445/">CVE-2018-18445</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18710/">CVE-2018-18710</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19407/">CVE-2018-19407</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19824/">CVE-2018-19824</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-19854/">CVE-2018-19854</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-19985/">CVE-2018-19985</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20169/">CVE-2018-20169</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20669/">CVE-2018-20669</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3620/">CVE-2018-3620</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3639/">CVE-2018-3639</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3646/">CVE-2018-3646</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-5332/">CVE-2018-5332</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5333/">CVE-2018-5333</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5390/">CVE-2018-5390</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5391/">CVE-2018-5391</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5803/">CVE-2018-5803</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5848/">CVE-2018-5848</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6554/">CVE-2018-6554</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-6555/">CVE-2018-6555</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6927/">CVE-2018-6927</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7492/">CVE-2018-7492</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-7566/">CVE-2018-7566</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7740/">CVE-2018-7740</cve>
	<cve impact="low" cvss3="0/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-8043/">CVE-2018-8043</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-8087/">CVE-2018-8087</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8781/">CVE-2018-8781</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8822/">CVE-2018-8822</cve>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-9363/">CVE-2018-9363</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9385/">CVE-2018-9385</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-9568/">CVE-2018-9568</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2024/">CVE-2019-2024</cve>
	<cve impact="moderate" cvss3="2.6/CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3459/">CVE-2019-3459</cve>
	<cve impact="moderate" cvss3="2.6/CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3460/">CVE-2019-3460</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3560/">CVE-2019-3560</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3819/">CVE-2019-3819</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6974/">CVE-2019-6974</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-7221/">CVE-2019-7221</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-7222/">CVE-2019-7222</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-7308/">CVE-2019-7308</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8912/">CVE-2019-8912</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8980/">CVE-2019-8980</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9003/">CVE-2019-9003</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9213/">CVE-2019-9213</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488061" comment="reiserfs-kmp-default-4.12.14-195.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137559" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1100356" ref_url="https://bugzilla.suse.com/1100356" source="BUGZILLA"/>
		<reference ref_id="1102687" ref_url="https://bugzilla.suse.com/1102687" source="BUGZILLA"/>
		<reference ref_id="1102688" ref_url="https://bugzilla.suse.com/1102688" source="BUGZILLA"/>
		<reference ref_id="1102689" ref_url="https://bugzilla.suse.com/1102689" source="BUGZILLA"/>
		<reference ref_id="1102899" ref_url="https://bugzilla.suse.com/1102899" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13302" ref_url="https://www.suse.com/security/cve/CVE-2018-13302/" source="CVE"/>
		<reference ref_id="CVE-2018-1999010" ref_url="https://www.suse.com/security/cve/CVE-2018-1999010/" source="CVE"/>
		<reference ref_id="CVE-2018-1999011" ref_url="https://www.suse.com/security/cve/CVE-2018-1999011/" source="CVE"/>
		<reference ref_id="CVE-2018-1999012" ref_url="https://www.suse.com/security/cve/CVE-2018-1999012/" source="CVE"/>
		<reference ref_id="CVE-2018-1999013" ref_url="https://www.suse.com/security/cve/CVE-2018-1999013/" source="CVE"/>
		<description>
This update for ffmpeg fixes the following issues:

Security issues fixed:

- CVE-2018-13302: Fixed out of array access issue (bsc#1100356).
- CVE-2018-1999010: Fixed multiple out of array access vulnerabilities in the
  mms protocol that could result in accessing out of bound data via specially
  crafted input files (bnc#1102899)
- CVE-2018-1999011: Fixed a heap buffer overflow in asf_o format demuxer that
  could result in remote code execution (bnc#1102689)
- CVE-2018-1999012: Fixed an infinite loop vulnerability in pva format demuxer
  that could result in excessive amount of ressource allocation like CPU an RAM
  (CVE-2018-1999012 bnc#1102688).
- CVE-2018-1999013: Fixed an use-after-free vulnerability in the realmedia
  demuxer that could allow remote attackers to read heap memory (bnc#1102687)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-08-10"/>
	<updated date="2018-08-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1100356">SUSE bug 1100356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102687">SUSE bug 1102687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102688">SUSE bug 1102688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102689">SUSE bug 1102689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102899">SUSE bug 1102899</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13302/">CVE-2018-13302</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999010/">CVE-2018-1999010</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999011/">CVE-2018-1999011</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999012/">CVE-2018-1999012</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999013/">CVE-2018-1999013</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790122" comment="libavcodec-devel-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790123" comment="libavformat-devel-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790124" comment="libavformat57-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790125" comment="libavresample-devel-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790126" comment="libavresample3-3.4.2-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137560" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1120498" ref_url="https://bugzilla.suse.com/1120498" source="BUGZILLA"/>
		<reference ref_id="1120499" ref_url="https://bugzilla.suse.com/1120499" source="BUGZILLA"/>
		<reference ref_id="1120500" ref_url="https://bugzilla.suse.com/1120500" source="BUGZILLA"/>
		<reference ref_id="1120515" ref_url="https://bugzilla.suse.com/1120515" source="BUGZILLA"/>
		<reference ref_id="1120516" ref_url="https://bugzilla.suse.com/1120516" source="BUGZILLA"/>
		<reference ref_id="1120517" ref_url="https://bugzilla.suse.com/1120517" source="BUGZILLA"/>
		<reference ref_id="1120519" ref_url="https://bugzilla.suse.com/1120519" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20337" ref_url="https://www.suse.com/security/cve/CVE-2018-20337/" source="CVE"/>
		<reference ref_id="CVE-2018-20363" ref_url="https://www.suse.com/security/cve/CVE-2018-20363/" source="CVE"/>
		<reference ref_id="CVE-2018-20364" ref_url="https://www.suse.com/security/cve/CVE-2018-20364/" source="CVE"/>
		<reference ref_id="CVE-2018-20365" ref_url="https://www.suse.com/security/cve/CVE-2018-20365/" source="CVE"/>
		<reference ref_id="CVE-2018-5817" ref_url="https://www.suse.com/security/cve/CVE-2018-5817/" source="CVE"/>
		<reference ref_id="CVE-2018-5818" ref_url="https://www.suse.com/security/cve/CVE-2018-5818/" source="CVE"/>
		<reference ref_id="CVE-2018-5819" ref_url="https://www.suse.com/security/cve/CVE-2018-5819/" source="CVE"/>
		<description>
This update for libraw fixes the following issues:

Security issues fixed:                                                                     
                                                                                                            
- CVE-2018-20337: Fixed a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (bsc#1120519)
- CVE-2018-20365: Fixed a heap-based buffer overflow in the raw2image function of libraw_cxx.cpp (bsc#1120500)
- CVE-2018-20364: Fixed a NULL pointer dereference in the copy_bayer function of libraw_cxx.cpp (bsc#1120499)
- CVE-2018-20363: Fixed a NULL pointer dereference in the raw2image function of libraw_cxx.cpp (bsc#1120498)          
- CVE-2018-5817: Fixed an infinite loop in the unpacked_load_raw function of dcraw_common.cpp (bsc#1120515)
- CVE-2018-5818: Fixed an infinite loop in the parse_rollei function of dcraw_common.cpp (bsc#1120516)    
- CVE-2018-5819: Fixed a denial of service in the parse_sinar_ia function of dcraw_common.cpp (bsc#1120517)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-01-21"/>
	<updated date="2019-01-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1120498">SUSE bug 1120498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120499">SUSE bug 1120499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120500">SUSE bug 1120500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120515">SUSE bug 1120515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120516">SUSE bug 1120516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120517">SUSE bug 1120517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120519">SUSE bug 1120519</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20337/">CVE-2018-20337</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20363/">CVE-2018-20363</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20364/">CVE-2018-20364</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-20365/">CVE-2018-20365</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5817/">CVE-2018-5817</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5818/">CVE-2018-5818</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5819/">CVE-2018-5819</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782632" comment="libraw-devel-0.18.9-3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137561" version="1" class="patch">
	<metadata>
		<title>apache2-mod_wsgi-4.5.18-2.27 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-0240" ref_url="https://www.suse.com/security/cve/CVE-2014-0240/" source="CVE"/>
		<description>
These are all security issues fixed in the apache2-mod_wsgi-4.5.18-2.27 package on the GA media of SUSE Linux Enterprise Module for Public Cloud 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0240/">CVE-2014-0240</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488084" comment="apache2-mod_wsgi-4.5.18-2.27 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137562" version="1" class="patch">
	<metadata>
		<title>aws-cli-1.16.61-6.22 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-15869" ref_url="https://www.suse.com/security/cve/CVE-2018-15869/" source="CVE"/>
		<description>
These are all security issues fixed in the aws-cli-1.16.61-6.22 package on the GA media of SUSE Linux Enterprise Module for Public Cloud 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15869/">CVE-2018-15869</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488088" comment="aws-cli-1.16.61-6.22 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137563" version="1" class="patch">
	<metadata>
		<title>python3-keystoneclient-3.15.0-2.33 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-0105" ref_url="https://www.suse.com/security/cve/CVE-2014-0105/" source="CVE"/>
		<reference ref_id="CVE-2014-7144" ref_url="https://www.suse.com/security/cve/CVE-2014-7144/" source="CVE"/>
		<reference ref_id="CVE-2015-1852" ref_url="https://www.suse.com/security/cve/CVE-2015-1852/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-keystoneclient-3.15.0-2.33 package on the GA media of SUSE Linux Enterprise Module for Public Cloud 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0105/">CVE-2014-0105</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7144/">CVE-2014-7144</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-1852/">CVE-2015-1852</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488086" comment="python3-keystoneclient-3.15.0-2.33 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137564" version="1" class="patch">
	<metadata>
		<title>rmt-server-pubcloud-1.2.2-1.15 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-14404" ref_url="https://www.suse.com/security/cve/CVE-2018-14404/" source="CVE"/>
		<reference ref_id="CVE-2018-16468" ref_url="https://www.suse.com/security/cve/CVE-2018-16468/" source="CVE"/>
		<reference ref_id="CVE-2018-16470" ref_url="https://www.suse.com/security/cve/CVE-2018-16470/" source="CVE"/>
		<description>
These are all security issues fixed in the rmt-server-pubcloud-1.2.2-1.15 package on the GA media of SUSE Linux Enterprise Module for Public Cloud 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14404/">CVE-2018-14404</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16468/">CVE-2018-16468</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16470/">CVE-2018-16470</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488089" comment="rmt-server-pubcloud-1.2.2-1.15 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137565" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1110899" ref_url="https://bugzilla.suse.com/1110899" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17983" ref_url="https://www.suse.com/security/cve/CVE-2018-17983/" source="CVE"/>
		<description>
This update for mercurial fixes the following issues:

- CVE-2018-17983: Fix an out-of-bounds read during parsing of a malformed manifest entry (bsc#1110899).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-25"/>
	<updated date="2018-10-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1110899">SUSE bug 1110899</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-17983/">CVE-2018-17983</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790134" comment="mercurial-4.5.2-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137566" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122191" ref_url="https://bugzilla.suse.com/1122191" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<description>
This update for python fixes the following issues:

Security issue fixed:

- CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-06"/>
	<updated date="2019-02-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1122191">SUSE bug 1122191</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790135" comment="python-curses-2.7.14-7.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790136" comment="python-gdbm-2.7.14-7.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137567" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1125815" ref_url="https://bugzilla.suse.com/1125815" source="BUGZILLA"/>
		<reference ref_id="1132174" ref_url="https://bugzilla.suse.com/1132174" source="BUGZILLA"/>
		<reference ref_id="1132323" ref_url="https://bugzilla.suse.com/1132323" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-10745" ref_url="https://www.suse.com/security/cve/CVE-2016-10745/" source="CVE"/>
		<reference ref_id="CVE-2019-10906" ref_url="https://www.suse.com/security/cve/CVE-2019-10906/" source="CVE"/>
		<reference ref_id="CVE-2019-8341" ref_url="https://www.suse.com/security/cve/CVE-2019-8341/" source="CVE"/>
		<description>
This update for python-Jinja2 to version 2.10.1 fixes the following issues:

Security issues fixed:

- CVE-2019-8341: Fixed a command injection in from_string() (bsc#1125815).
- CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-05-06"/>
	<updated date="2019-05-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1125815">SUSE bug 1125815</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132174">SUSE bug 1132174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132323">SUSE bug 1132323</bugzilla>
	<cve impact="important" cvss3="8.7/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2016-10745/">CVE-2016-10745</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-10906/">CVE-2019-10906</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8341/">CVE-2019-8341</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490055" comment="python2-Jinja2-2.10.1-3.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137568" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122191" ref_url="https://bugzilla.suse.com/1122191" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<description>
This update for python fixes the following issues:

Security issue fixed:

- CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-06"/>
	<updated date="2019-02-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1122191">SUSE bug 1122191</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790137" comment="python-devel-2.7.14-7.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709023" comment="python-xml-2.7.14-7.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137569" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1101820" ref_url="https://bugzilla.suse.com/1101820" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10903" ref_url="https://www.suse.com/security/cve/CVE-2018-10903/" source="CVE"/>
		<description>
This update for python-cryptography fixes the following issues:

- CVE-2018-10903: The finalize_with_tag API did not enforce a minimum tag
  length. If a user did not validate the input length prior to passing it to
  finalize_with_tag an attacker could craft an invalid payload with a shortened
  tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the
  MAC check. GCM tag forgeries could have caused key leakage (bsc#1101820).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-10-24"/>
	<updated date="2018-10-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1101820">SUSE bug 1101820</bugzilla>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10903/">CVE-2018-10903</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790138" comment="python2-cryptography-2.1.4-4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137570" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1096974" ref_url="https://bugzilla.suse.com/1096974" source="BUGZILLA"/>
		<reference ref_id="1096984" ref_url="https://bugzilla.suse.com/1096984" source="BUGZILLA"/>
		<reference ref_id="1126117" ref_url="https://bugzilla.suse.com/1126117" source="BUGZILLA"/>
		<reference ref_id="1126118" ref_url="https://bugzilla.suse.com/1126118" source="BUGZILLA"/>
		<reference ref_id="1126119" ref_url="https://bugzilla.suse.com/1126119" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10360" ref_url="https://www.suse.com/security/cve/CVE-2018-10360/" source="CVE"/>
		<reference ref_id="CVE-2019-8905" ref_url="https://www.suse.com/security/cve/CVE-2019-8905/" source="CVE"/>
		<reference ref_id="CVE-2019-8906" ref_url="https://www.suse.com/security/cve/CVE-2019-8906/" source="CVE"/>
		<reference ref_id="CVE-2019-8907" ref_url="https://www.suse.com/security/cve/CVE-2019-8907/" source="CVE"/>
		<description>
This update for file fixes the following issues:

The following security vulnerabilities were addressed:

- CVE-2018-10360: Fixed an out-of-bounds read in the function do_core_note in
  readelf.c, which allowed remote attackers to cause a denial of service
  (application crash) via a crafted ELF file (bsc#1096974)
- CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c
  (bsc#1126118)
- CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf. c
  (bsc#1126119)
- CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c
  (bsc#1126117)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-07"/>
	<updated date="2019-03-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1096974">SUSE bug 1096974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096984">SUSE bug 1096984</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126117">SUSE bug 1126117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126118">SUSE bug 1126118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126119">SUSE bug 1126119</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10360/">CVE-2018-10360</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8905/">CVE-2019-8905</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8906/">CVE-2019-8906</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8907/">CVE-2019-8907</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790139" comment="python2-magic-5.32-7.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137571" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122208" ref_url="https://bugzilla.suse.com/1122208" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6446" ref_url="https://www.suse.com/security/cve/CVE-2019-6446/" source="CVE"/>
		<description>
This update for python-numpy fixes the following issue:

Security issue fixed:

- CVE-2019-6446: Set allow_pickle to false by default to restrict loading untrusted content (bsc#1122208).
  With this update we decrease the possibility of allowing remote attackers to execute arbitrary code by
  misusing numpy.load(). A warning during runtime will show-up when the allow_pickle is not explicitly set.
  
NOTE: By applying this update the behavior of python-numpy changes, which might break your application.
In order to get the old behaviour back, you have to explicitly set `allow_pickle` to True. Be aware
that this should only be done for trusted input, as loading untrusted input might lead to arbitrary code
execution.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-16"/>
	<updated date="2019-02-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1122208">SUSE bug 1122208</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6446/">CVE-2019-6446</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790140" comment="python2-numpy-1.14.0-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790141" comment="python2-numpy-devel-1.14.0-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137572" version="1" class="patch">
	<metadata>
		<title>clamsap-0.99.25-2.37 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2015-2278" ref_url="https://www.suse.com/security/cve/CVE-2015-2278/" source="CVE"/>
		<reference ref_id="CVE-2015-2282" ref_url="https://www.suse.com/security/cve/CVE-2015-2282/" source="CVE"/>
		<description>
These are all security issues fixed in the clamsap-0.99.25-2.37 package on the GA media of SUSE Linux Enterprise Module for SAP Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2278/">CVE-2015-2278</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2282/">CVE-2015-2282</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-sap-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009255507" comment="SUSE Linux Enterprise Module for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488104" comment="clamsap-0.99.25-2.37 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137573" version="1" class="patch">
	<metadata>
		<title>389-ds-1.4.0.3-2.39 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-8105" ref_url="https://www.suse.com/security/cve/CVE-2014-8105/" source="CVE"/>
		<reference ref_id="CVE-2014-8112" ref_url="https://www.suse.com/security/cve/CVE-2014-8112/" source="CVE"/>
		<reference ref_id="CVE-2015-1854" ref_url="https://www.suse.com/security/cve/CVE-2015-1854/" source="CVE"/>
		<reference ref_id="CVE-2015-3230" ref_url="https://www.suse.com/security/cve/CVE-2015-3230/" source="CVE"/>
		<reference ref_id="CVE-2016-4992" ref_url="https://www.suse.com/security/cve/CVE-2016-4992/" source="CVE"/>
		<description>
These are all security issues fixed in the 389-ds-1.4.0.3-2.39 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8105/">CVE-2014-8105</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8112/">CVE-2014-8112</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-1854/">CVE-2015-1854</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3230/">CVE-2015-3230</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-4992/">CVE-2016-4992</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488105" comment="389-ds-1.4.0.3-2.39 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488106" comment="389-ds-devel-1.4.0.3-2.39 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137574" version="1" class="patch">
	<metadata>
		<title>apache2-2.4.33-3.15.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1121086" ref_url="https://bugzilla.suse.com/1121086" source="BUGZILLA"/>
		<reference ref_id="1122838" ref_url="https://bugzilla.suse.com/1122838" source="BUGZILLA"/>
		<reference ref_id="1122839" ref_url="https://bugzilla.suse.com/1122839" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-17189" ref_url="https://www.suse.com/security/cve/CVE-2018-17189/" source="CVE"/>
		<reference ref_id="CVE-2018-17199" ref_url="https://www.suse.com/security/cve/CVE-2018-17199/" source="CVE"/>
		<description>
This update for apache2 fixes the following issues:

Security issues fixed:

- CVE-2018-17189: Fixed a denial of service in mod_http2, via slow and unneeded request bodies (bsc#1122838)
- CVE-2018-17199: Fixed that mod_session_cookie did not respect expiry time (bsc#1122839)

Non-security issue fixed:

- sysconfig.d is not created anymore if it already exists (bsc#1121086)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-27"/>
	<updated date="2019-02-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1121086">SUSE bug 1121086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122838">SUSE bug 1122838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122839">SUSE bug 1122839</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17189/">CVE-2018-17189</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17199/">CVE-2018-17199</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790145" comment="apache2-2.4.33-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790146" comment="apache2-devel-2.4.33-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498992" comment="apache2-doc-2.4.33-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790147" comment="apache2-prefork-2.4.33-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790148" comment="apache2-utils-2.4.33-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790149" comment="apache2-worker-2.4.33-3.9.7 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137575" version="1" class="patch">
	<metadata>
		<title>apache2-mod_apparmor-2.12.2-7.17.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-6507" ref_url="https://www.suse.com/security/cve/CVE-2017-6507/" source="CVE"/>
		<description>
These are all security issues fixed in the apache2-mod_apparmor-2.12.2-7.17.1 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-6507/">CVE-2017-6507</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488309" comment="apache2-mod_apparmor-2.12.2-7.17.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137576" version="1" class="patch">
	<metadata>
		<title>apache2-mod_jk-1.2.43-3.3.1 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1114612" ref_url="https://bugzilla.suse.com/1114612" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11759" ref_url="https://www.suse.com/security/cve/CVE-2018-11759/" source="CVE"/>
		<description>
This update for apache2-mod_jk fixes the following issue:

Security issue fixed:

- CVE-2018-11759: Fixed connector path traversal due to mishandled HTTP requests in httpd (bsc#1114612).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-03"/>
	<updated date="2018-12-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1114612">SUSE bug 1114612</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-11759/">CVE-2018-11759</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790150" comment="apache2-mod_jk-1.2.43-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137577" version="1" class="patch">
	<metadata>
		<title>apache2-mod_nss-1.0.17-1.28 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-4566" ref_url="https://www.suse.com/security/cve/CVE-2013-4566/" source="CVE"/>
		<reference ref_id="CVE-2014-3566" ref_url="https://www.suse.com/security/cve/CVE-2014-3566/" source="CVE"/>
		<reference ref_id="CVE-2015-5244" ref_url="https://www.suse.com/security/cve/CVE-2015-5244/" source="CVE"/>
		<reference ref_id="CVE-2016-3099" ref_url="https://www.suse.com/security/cve/CVE-2016-3099/" source="CVE"/>
		<description>
These are all security issues fixed in the apache2-mod_nss-1.0.17-1.28 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4566/">CVE-2013-4566</cve>
	<cve impact="critical" cvss3="3.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-3566/">CVE-2014-3566</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5244/">CVE-2015-5244</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-3099/">CVE-2016-3099</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488115" comment="apache2-mod_nss-1.0.17-1.28 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137578" version="1" class="patch">
	<metadata>
		<title>apache2-mod_security2-2.9.2-1.34 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-5031" ref_url="https://www.suse.com/security/cve/CVE-2009-5031/" source="CVE"/>
		<reference ref_id="CVE-2012-2751" ref_url="https://www.suse.com/security/cve/CVE-2012-2751/" source="CVE"/>
		<reference ref_id="CVE-2012-4528" ref_url="https://www.suse.com/security/cve/CVE-2012-4528/" source="CVE"/>
		<reference ref_id="CVE-2013-1915" ref_url="https://www.suse.com/security/cve/CVE-2013-1915/" source="CVE"/>
		<reference ref_id="CVE-2013-2765" ref_url="https://www.suse.com/security/cve/CVE-2013-2765/" source="CVE"/>
		<description>
These are all security issues fixed in the apache2-mod_security2-2.9.2-1.34 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-5031/">CVE-2009-5031</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2751/">CVE-2012-2751</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4528/">CVE-2012-4528</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1915/">CVE-2013-1915</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2765/">CVE-2013-2765</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488116" comment="apache2-mod_security2-2.9.2-1.34 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137579" version="1" class="patch">
	<metadata>
		<title>apache2-mod_wsgi-python3-4.5.18-2.27 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-0240" ref_url="https://www.suse.com/security/cve/CVE-2014-0240/" source="CVE"/>
		<description>
These are all security issues fixed in the apache2-mod_wsgi-python3-4.5.18-2.27 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-0240/">CVE-2014-0240</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488085" comment="apache2-mod_wsgi-python3-4.5.18-2.27 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137580" version="1" class="patch">
	<metadata>
		<title>cyrus-sasl-sqlauxprop-2.1.26-5.3.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-0688" ref_url="https://www.suse.com/security/cve/CVE-2009-0688/" source="CVE"/>
		<description>
These are all security issues fixed in the cyrus-sasl-sqlauxprop-2.1.26-5.3.2 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-0688/">CVE-2009-0688</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488314" comment="cyrus-sasl-sqlauxprop-2.1.26-5.3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137581" version="1" class="patch">
	<metadata>
		<title>davfs2-1.5.4-1.4 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-4362" ref_url="https://www.suse.com/security/cve/CVE-2014-4362/" source="CVE"/>
		<description>
These are all security issues fixed in the davfs2-1.5.4-1.4 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-4362/">CVE-2014-4362</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488121" comment="davfs2-1.5.4-1.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137582" version="1" class="patch">
	<metadata>
		<title>dhcp-relay-4.3.5-4.15 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-1892" ref_url="https://www.suse.com/security/cve/CVE-2009-1892/" source="CVE"/>
		<reference ref_id="CVE-2010-2156" ref_url="https://www.suse.com/security/cve/CVE-2010-2156/" source="CVE"/>
		<reference ref_id="CVE-2010-3611" ref_url="https://www.suse.com/security/cve/CVE-2010-3611/" source="CVE"/>
		<reference ref_id="CVE-2010-3616" ref_url="https://www.suse.com/security/cve/CVE-2010-3616/" source="CVE"/>
		<reference ref_id="CVE-2011-0413" ref_url="https://www.suse.com/security/cve/CVE-2011-0413/" source="CVE"/>
		<reference ref_id="CVE-2011-0997" ref_url="https://www.suse.com/security/cve/CVE-2011-0997/" source="CVE"/>
		<reference ref_id="CVE-2011-2748" ref_url="https://www.suse.com/security/cve/CVE-2011-2748/" source="CVE"/>
		<reference ref_id="CVE-2011-2749" ref_url="https://www.suse.com/security/cve/CVE-2011-2749/" source="CVE"/>
		<reference ref_id="CVE-2011-4539" ref_url="https://www.suse.com/security/cve/CVE-2011-4539/" source="CVE"/>
		<reference ref_id="CVE-2011-4868" ref_url="https://www.suse.com/security/cve/CVE-2011-4868/" source="CVE"/>
		<reference ref_id="CVE-2012-3570" ref_url="https://www.suse.com/security/cve/CVE-2012-3570/" source="CVE"/>
		<reference ref_id="CVE-2012-3571" ref_url="https://www.suse.com/security/cve/CVE-2012-3571/" source="CVE"/>
		<reference ref_id="CVE-2012-3954" ref_url="https://www.suse.com/security/cve/CVE-2012-3954/" source="CVE"/>
		<reference ref_id="CVE-2012-3955" ref_url="https://www.suse.com/security/cve/CVE-2012-3955/" source="CVE"/>
		<reference ref_id="CVE-2013-2266" ref_url="https://www.suse.com/security/cve/CVE-2013-2266/" source="CVE"/>
		<reference ref_id="CVE-2015-8605" ref_url="https://www.suse.com/security/cve/CVE-2015-8605/" source="CVE"/>
		<reference ref_id="CVE-2017-3144" ref_url="https://www.suse.com/security/cve/CVE-2017-3144/" source="CVE"/>
		<reference ref_id="CVE-2018-5732" ref_url="https://www.suse.com/security/cve/CVE-2018-5732/" source="CVE"/>
		<reference ref_id="CVE-2018-5733" ref_url="https://www.suse.com/security/cve/CVE-2018-5733/" source="CVE"/>
		<description>
These are all security issues fixed in the dhcp-relay-4.3.5-4.15 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1892/">CVE-2009-1892</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2156/">CVE-2010-2156</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3611/">CVE-2010-3611</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3616/">CVE-2010-3616</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0413/">CVE-2011-0413</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-0997/">CVE-2011-0997</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2748/">CVE-2011-2748</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-2749/">CVE-2011-2749</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4539/">CVE-2011-4539</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4868/">CVE-2011-4868</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3570/">CVE-2012-3570</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3571/">CVE-2012-3571</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2012-3954/">CVE-2012-3954</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3955/">CVE-2012-3955</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2266/">CVE-2013-2266</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8605/">CVE-2015-8605</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-3144/">CVE-2017-3144</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5732/">CVE-2018-5732</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5733/">CVE-2018-5733</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488122" comment="dhcp-relay-4.3.5-4.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488123" comment="dhcp-server-4.3.5-4.15 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137583" version="1" class="patch">
	<metadata>
		<title>dovecot23-2.3.3-5.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-14461" ref_url="https://www.suse.com/security/cve/CVE-2017-14461/" source="CVE"/>
		<reference ref_id="CVE-2017-15130" ref_url="https://www.suse.com/security/cve/CVE-2017-15130/" source="CVE"/>
		<reference ref_id="CVE-2017-15132" ref_url="https://www.suse.com/security/cve/CVE-2017-15132/" source="CVE"/>
		<description>
These are all security issues fixed in the dovecot23-2.3.3-5.29 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14461/">CVE-2017-14461</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15130/">CVE-2017-15130</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15132/">CVE-2017-15132</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488315" comment="dovecot23-2.3.3-5.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488316" comment="dovecot23-backend-mysql-2.3.3-5.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488317" comment="dovecot23-backend-pgsql-2.3.3-5.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488318" comment="dovecot23-backend-sqlite-2.3.3-5.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488319" comment="dovecot23-devel-2.3.3-5.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488320" comment="dovecot23-fts-2.3.3-5.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488321" comment="dovecot23-fts-lucene-2.3.3-5.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488322" comment="dovecot23-fts-solr-2.3.3-5.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488323" comment="dovecot23-fts-squat-2.3.3-5.29 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137584" version="1" class="patch">
	<metadata>
		<title>dpdk-18.11-2.43 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-1059" ref_url="https://www.suse.com/security/cve/CVE-2018-1059/" source="CVE"/>
		<description>
These are all security issues fixed in the dpdk-18.11-2.43 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1059/">CVE-2018-1059</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488324" comment="dpdk-18.11-2.43 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488325" comment="dpdk-devel-18.11-2.43 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488326" comment="dpdk-kmp-default-18.11_k4.12.14_195-2.43 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488327" comment="dpdk-tools-18.11-2.43 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488328" comment="libdpdk-18_11-18.11-2.43 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137585" version="1" class="patch">
	<metadata>
		<title>freeradius-server-3.0.16-3.3.1 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1132549" ref_url="https://bugzilla.suse.com/1132549" source="BUGZILLA"/>
		<reference ref_id="1132664" ref_url="https://bugzilla.suse.com/1132664" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11234" ref_url="https://www.suse.com/security/cve/CVE-2019-11234/" source="CVE"/>
		<reference ref_id="CVE-2019-11235" ref_url="https://www.suse.com/security/cve/CVE-2019-11235/" source="CVE"/>
		<description>
This update for freeradius-server fixes the following issues:

Security issues fixed:

- CVE-2019-11235: Fixed an authentication bypass related to the EAP-PWD Commit frame and insufficent validation of elliptic curve points (bsc#1132549).
- CVE-2019-11234: Fixed an authentication bypass caused by reflecting privous values back to the server (bsc#1132664).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-29"/>
	<updated date="2019-04-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1132549">SUSE bug 1132549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132664">SUSE bug 1132664</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-11234/">CVE-2019-11234</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-11235/">CVE-2019-11235</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790151" comment="freeradius-server-3.0.16-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790152" comment="freeradius-server-devel-3.0.16-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790153" comment="freeradius-server-krb5-3.0.16-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790154" comment="freeradius-server-ldap-3.0.16-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790155" comment="freeradius-server-libs-3.0.16-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790156" comment="freeradius-server-mysql-3.0.16-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790157" comment="freeradius-server-perl-3.0.16-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790158" comment="freeradius-server-postgresql-3.0.16-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790159" comment="freeradius-server-python-3.0.16-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790160" comment="freeradius-server-sqlite-3.0.16-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790161" comment="freeradius-server-utils-3.0.16-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137586" version="1" class="patch">
	<metadata>
		<title>gnuplot-5.2.2-3.3.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1117463" ref_url="https://bugzilla.suse.com/1117463" source="BUGZILLA"/>
		<reference ref_id="1117464" ref_url="https://bugzilla.suse.com/1117464" source="BUGZILLA"/>
		<reference ref_id="1117465" ref_url="https://bugzilla.suse.com/1117465" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19490" ref_url="https://www.suse.com/security/cve/CVE-2018-19490/" source="CVE"/>
		<reference ref_id="CVE-2018-19491" ref_url="https://www.suse.com/security/cve/CVE-2018-19491/" source="CVE"/>
		<reference ref_id="CVE-2018-19492" ref_url="https://www.suse.com/security/cve/CVE-2018-19492/" source="CVE"/>
		<description>
This update for gnuplot fixes the following issues:

Security issues fixed:

- CVE-2018-19492: Fixed a buffer overflow in cairotrm_options function (bsc#1117463)
- CVE-2018-19491: Fixed a buffer overlow in the PS_options function (bsc#1117464)
- CVE-2018-19490: Fixed a heap-based buffer overflow in the df_generate_ascii_array_entry function (bsc#1117465)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-08"/>
	<updated date="2019-04-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1117463">SUSE bug 1117463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117464">SUSE bug 1117464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117465">SUSE bug 1117465</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-19490/">CVE-2018-19490</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-19491/">CVE-2018-19491</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-19492/">CVE-2018-19492</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790162" comment="gnuplot-5.2.2-3.3.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499037" comment="gnuplot-doc-5.2.2-3.3.29 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137587" version="1" class="patch">
	<metadata>
		<title>grub2-x86_64-xen-2.02-24.12 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-8370" ref_url="https://www.suse.com/security/cve/CVE-2015-8370/" source="CVE"/>
		<description>
These are all security issues fixed in the grub2-x86_64-xen-2.02-24.12 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8370/">CVE-2015-8370</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488342" comment="grub2-x86_64-xen-2.02-24.12 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137588" version="1" class="patch">
	<metadata>
		<title>gtk-vnc-devel-0.7.2-1.33 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-5884" ref_url="https://www.suse.com/security/cve/CVE-2017-5884/" source="CVE"/>
		<reference ref_id="CVE-2017-5885" ref_url="https://www.suse.com/security/cve/CVE-2017-5885/" source="CVE"/>
		<description>
These are all security issues fixed in the gtk-vnc-devel-0.7.2-1.33 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-5884/">CVE-2017-5884</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-5885/">CVE-2017-5885</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488152" comment="gtk-vnc-devel-0.7.2-1.33 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488153" comment="libgvncpulse-1_0-0-0.7.2-1.33 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488154" comment="typelib-1_0-GVnc-1_0-0.7.2-1.33 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488155" comment="typelib-1_0-GVncPulse-1_0-0.7.2-1.33 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488156" comment="typelib-1_0-GtkVnc-1_0-0.7.2-1.32 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488157" comment="typelib-1_0-GtkVnc-2_0-0.7.2-1.33 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137589" version="1" class="patch">
	<metadata>
		<title>guestfs-data-1.38.0-3.52 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-2124" ref_url="https://www.suse.com/security/cve/CVE-2013-2124/" source="CVE"/>
		<reference ref_id="CVE-2013-4419" ref_url="https://www.suse.com/security/cve/CVE-2013-4419/" source="CVE"/>
		<description>
These are all security issues fixed in the guestfs-data-1.38.0-3.52 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2124/">CVE-2013-2124</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4419/">CVE-2013-4419</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488158" comment="guestfs-data-1.38.0-3.52 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488159" comment="guestfs-tools-1.38.0-3.52 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488160" comment="guestfs-winsupport-1.38.0-3.52 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488161" comment="guestfsd-1.38.0-3.52 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488162" comment="libguestfs-devel-1.38.0-3.52 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488163" comment="libguestfs0-1.38.0-3.52 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488164" comment="perl-Sys-Guestfs-1.38.0-3.52 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488165" comment="python3-libguestfs-1.38.0-3.52 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488166" comment="virt-v2v-1.38.0-3.52 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137590" version="1" class="patch">
	<metadata>
		<title>krb5-plugin-kdb-ldap-1.16.3-1.16 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-5351" ref_url="https://www.suse.com/security/cve/CVE-2014-5351/" source="CVE"/>
		<reference ref_id="CVE-2014-5352" ref_url="https://www.suse.com/security/cve/CVE-2014-5352/" source="CVE"/>
		<reference ref_id="CVE-2014-5353" ref_url="https://www.suse.com/security/cve/CVE-2014-5353/" source="CVE"/>
		<reference ref_id="CVE-2014-5354" ref_url="https://www.suse.com/security/cve/CVE-2014-5354/" source="CVE"/>
		<reference ref_id="CVE-2014-5355" ref_url="https://www.suse.com/security/cve/CVE-2014-5355/" source="CVE"/>
		<reference ref_id="CVE-2014-9421" ref_url="https://www.suse.com/security/cve/CVE-2014-9421/" source="CVE"/>
		<reference ref_id="CVE-2014-9422" ref_url="https://www.suse.com/security/cve/CVE-2014-9422/" source="CVE"/>
		<reference ref_id="CVE-2014-9423" ref_url="https://www.suse.com/security/cve/CVE-2014-9423/" source="CVE"/>
		<reference ref_id="CVE-2015-2694" ref_url="https://www.suse.com/security/cve/CVE-2015-2694/" source="CVE"/>
		<reference ref_id="CVE-2015-2695" ref_url="https://www.suse.com/security/cve/CVE-2015-2695/" source="CVE"/>
		<reference ref_id="CVE-2015-2696" ref_url="https://www.suse.com/security/cve/CVE-2015-2696/" source="CVE"/>
		<reference ref_id="CVE-2015-2697" ref_url="https://www.suse.com/security/cve/CVE-2015-2697/" source="CVE"/>
		<reference ref_id="CVE-2015-2698" ref_url="https://www.suse.com/security/cve/CVE-2015-2698/" source="CVE"/>
		<reference ref_id="CVE-2015-8629" ref_url="https://www.suse.com/security/cve/CVE-2015-8629/" source="CVE"/>
		<reference ref_id="CVE-2015-8630" ref_url="https://www.suse.com/security/cve/CVE-2015-8630/" source="CVE"/>
		<reference ref_id="CVE-2015-8631" ref_url="https://www.suse.com/security/cve/CVE-2015-8631/" source="CVE"/>
		<reference ref_id="CVE-2016-3119" ref_url="https://www.suse.com/security/cve/CVE-2016-3119/" source="CVE"/>
		<reference ref_id="CVE-2016-3120" ref_url="https://www.suse.com/security/cve/CVE-2016-3120/" source="CVE"/>
		<reference ref_id="CVE-2017-11368" ref_url="https://www.suse.com/security/cve/CVE-2017-11368/" source="CVE"/>
		<reference ref_id="CVE-2017-11462" ref_url="https://www.suse.com/security/cve/CVE-2017-11462/" source="CVE"/>
		<reference ref_id="CVE-2018-20217" ref_url="https://www.suse.com/security/cve/CVE-2018-20217/" source="CVE"/>
		<reference ref_id="CVE-2018-5729" ref_url="https://www.suse.com/security/cve/CVE-2018-5729/" source="CVE"/>
		<reference ref_id="CVE-2018-5730" ref_url="https://www.suse.com/security/cve/CVE-2018-5730/" source="CVE"/>
		<description>
These are all security issues fixed in the krb5-plugin-kdb-ldap-1.16.3-1.16 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5351/">CVE-2014-5351</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5352/">CVE-2014-5352</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-5353/">CVE-2014-5353</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-5354/">CVE-2014-5354</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-5355/">CVE-2014-5355</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9421/">CVE-2014-9421</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9422/">CVE-2014-9422</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9423/">CVE-2014-9423</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2694/">CVE-2015-2694</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2695/">CVE-2015-2695</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2696/">CVE-2015-2696</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2697/">CVE-2015-2697</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-2698/">CVE-2015-2698</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-8629/">CVE-2015-8629</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8630/">CVE-2015-8630</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8631/">CVE-2015-8631</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3119/">CVE-2016-3119</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3120/">CVE-2016-3120</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11368/">CVE-2017-11368</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-11462/">CVE-2017-11462</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20217/">CVE-2018-20217</cve>
	<cve impact="moderate" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5729/">CVE-2018-5729</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-5730/">CVE-2018-5730</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488343" comment="krb5-plugin-kdb-ldap-1.16.3-1.16 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488344" comment="krb5-server-1.16.3-1.16 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137591" version="1" class="patch">
	<metadata>
		<title>libapr-util1-dbd-mysql-1.6.1-4.3.8 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-0023" ref_url="https://www.suse.com/security/cve/CVE-2009-0023/" source="CVE"/>
		<reference ref_id="CVE-2009-2412" ref_url="https://www.suse.com/security/cve/CVE-2009-2412/" source="CVE"/>
		<reference ref_id="CVE-2009-3560" ref_url="https://www.suse.com/security/cve/CVE-2009-3560/" source="CVE"/>
		<reference ref_id="CVE-2009-3720" ref_url="https://www.suse.com/security/cve/CVE-2009-3720/" source="CVE"/>
		<reference ref_id="CVE-2010-1623" ref_url="https://www.suse.com/security/cve/CVE-2010-1623/" source="CVE"/>
		<reference ref_id="CVE-2017-12618" ref_url="https://www.suse.com/security/cve/CVE-2017-12618/" source="CVE"/>
		<description>
These are all security issues fixed in the libapr-util1-dbd-mysql-1.6.1-4.3.8 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-0023/">CVE-2009-0023</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-2412/">CVE-2009-2412</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3560/">CVE-2009-3560</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3720/">CVE-2009-3720</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1623/">CVE-2010-1623</cve>
	<cve impact="low" cvss3="2.3/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-12618/">CVE-2017-12618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488345" comment="libapr-util1-dbd-mysql-1.6.1-4.3.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488346" comment="libapr-util1-dbd-pgsql-1.6.1-4.3.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488347" comment="libapr-util1-dbd-sqlite3-1.6.1-4.3.8 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137592" version="1" class="patch">
	<metadata>
		<title>libcacard-devel-2.5.3-1.27 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-6414" ref_url="https://www.suse.com/security/cve/CVE-2017-6414/" source="CVE"/>
		<description>
These are all security issues fixed in the libcacard-devel-2.5.3-1.27 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6414/">CVE-2017-6414</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488172" comment="libcacard-devel-2.5.3-1.27 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488173" comment="libcacard0-2.5.3-1.27 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137593" version="1" class="patch">
	<metadata>
		<title>libecpg6-10.6-6.25 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-15098" ref_url="https://www.suse.com/security/cve/CVE-2017-15098/" source="CVE"/>
		<reference ref_id="CVE-2017-15099" ref_url="https://www.suse.com/security/cve/CVE-2017-15099/" source="CVE"/>
		<reference ref_id="CVE-2018-1052" ref_url="https://www.suse.com/security/cve/CVE-2018-1052/" source="CVE"/>
		<reference ref_id="CVE-2018-1053" ref_url="https://www.suse.com/security/cve/CVE-2018-1053/" source="CVE"/>
		<reference ref_id="CVE-2018-1058" ref_url="https://www.suse.com/security/cve/CVE-2018-1058/" source="CVE"/>
		<reference ref_id="CVE-2018-10915" ref_url="https://www.suse.com/security/cve/CVE-2018-10915/" source="CVE"/>
		<reference ref_id="CVE-2018-10925" ref_url="https://www.suse.com/security/cve/CVE-2018-10925/" source="CVE"/>
		<reference ref_id="CVE-2018-1115" ref_url="https://www.suse.com/security/cve/CVE-2018-1115/" source="CVE"/>
		<reference ref_id="CVE-2018-16850" ref_url="https://www.suse.com/security/cve/CVE-2018-16850/" source="CVE"/>
		<description>
These are all security issues fixed in the libecpg6-10.6-6.25 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15098/">CVE-2017-15098</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15099/">CVE-2017-15099</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1052/">CVE-2018-1052</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1053/">CVE-2018-1053</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1058/">CVE-2018-1058</cve>
	<cve impact="important" cvss3="8.5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10915/">CVE-2018-10915</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-10925/">CVE-2018-10925</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1115/">CVE-2018-1115</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16850/">CVE-2018-16850</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488348" comment="libecpg6-10.6-6.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488349" comment="postgresql10-contrib-10.6-6.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488350" comment="postgresql10-devel-10.6-6.25 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488351" comment="postgresql10-docs-10.6-6.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488352" comment="postgresql10-plperl-10.6-6.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488353" comment="postgresql10-plpython-10.6-6.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488354" comment="postgresql10-pltcl-10.6-6.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488355" comment="postgresql10-server-10.6-6.26 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137594" version="1" class="patch">
	<metadata>
		<title>libfpm_pb0-1.1.1-2.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-1674" ref_url="https://www.suse.com/security/cve/CVE-2010-1674/" source="CVE"/>
		<reference ref_id="CVE-2010-1675" ref_url="https://www.suse.com/security/cve/CVE-2010-1675/" source="CVE"/>
		<reference ref_id="CVE-2013-2236" ref_url="https://www.suse.com/security/cve/CVE-2013-2236/" source="CVE"/>
		<reference ref_id="CVE-2016-1245" ref_url="https://www.suse.com/security/cve/CVE-2016-1245/" source="CVE"/>
		<reference ref_id="CVE-2016-2342" ref_url="https://www.suse.com/security/cve/CVE-2016-2342/" source="CVE"/>
		<reference ref_id="CVE-2016-4049" ref_url="https://www.suse.com/security/cve/CVE-2016-4049/" source="CVE"/>
		<reference ref_id="CVE-2017-16227" ref_url="https://www.suse.com/security/cve/CVE-2017-16227/" source="CVE"/>
		<reference ref_id="CVE-2017-5495" ref_url="https://www.suse.com/security/cve/CVE-2017-5495/" source="CVE"/>
		<reference ref_id="CVE-2018-5378" ref_url="https://www.suse.com/security/cve/CVE-2018-5378/" source="CVE"/>
		<reference ref_id="CVE-2018-5379" ref_url="https://www.suse.com/security/cve/CVE-2018-5379/" source="CVE"/>
		<reference ref_id="CVE-2018-5380" ref_url="https://www.suse.com/security/cve/CVE-2018-5380/" source="CVE"/>
		<reference ref_id="CVE-2018-5381" ref_url="https://www.suse.com/security/cve/CVE-2018-5381/" source="CVE"/>
		<description>
These are all security issues fixed in the libfpm_pb0-1.1.1-2.29 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1674/">CVE-2010-1674</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1675/">CVE-2010-1675</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2236/">CVE-2013-2236</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1245/">CVE-2016-1245</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2342/">CVE-2016-2342</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4049/">CVE-2016-4049</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16227/">CVE-2017-16227</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5495/">CVE-2017-5495</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5378/">CVE-2018-5378</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5379/">CVE-2018-5379</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5380/">CVE-2018-5380</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5381/">CVE-2018-5381</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488182" comment="libfpm_pb0-1.1.1-2.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488183" comment="libospf0-1.1.1-2.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488184" comment="libospfapiclient0-1.1.1-2.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488185" comment="libquagga_pb0-1.1.1-2.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488186" comment="libzebra1-1.1.1-2.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488187" comment="quagga-1.1.1-2.29 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488188" comment="quagga-devel-1.1.1-2.29 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137595" version="1" class="patch">
	<metadata>
		<title>libfreebl3-hmac-3.41.1-3.13.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-3170" ref_url="https://www.suse.com/security/cve/CVE-2010-3170/" source="CVE"/>
		<reference ref_id="CVE-2011-3389" ref_url="https://www.suse.com/security/cve/CVE-2011-3389/" source="CVE"/>
		<reference ref_id="CVE-2011-3640" ref_url="https://www.suse.com/security/cve/CVE-2011-3640/" source="CVE"/>
		<reference ref_id="CVE-2013-0743" ref_url="https://www.suse.com/security/cve/CVE-2013-0743/" source="CVE"/>
		<reference ref_id="CVE-2013-0791" ref_url="https://www.suse.com/security/cve/CVE-2013-0791/" source="CVE"/>
		<reference ref_id="CVE-2013-1620" ref_url="https://www.suse.com/security/cve/CVE-2013-1620/" source="CVE"/>
		<reference ref_id="CVE-2013-1739" ref_url="https://www.suse.com/security/cve/CVE-2013-1739/" source="CVE"/>
		<reference ref_id="CVE-2013-1740" ref_url="https://www.suse.com/security/cve/CVE-2013-1740/" source="CVE"/>
		<reference ref_id="CVE-2013-5605" ref_url="https://www.suse.com/security/cve/CVE-2013-5605/" source="CVE"/>
		<reference ref_id="CVE-2014-1490" ref_url="https://www.suse.com/security/cve/CVE-2014-1490/" source="CVE"/>
		<reference ref_id="CVE-2014-1491" ref_url="https://www.suse.com/security/cve/CVE-2014-1491/" source="CVE"/>
		<reference ref_id="CVE-2014-1492" ref_url="https://www.suse.com/security/cve/CVE-2014-1492/" source="CVE"/>
		<reference ref_id="CVE-2014-1568" ref_url="https://www.suse.com/security/cve/CVE-2014-1568/" source="CVE"/>
		<reference ref_id="CVE-2014-1569" ref_url="https://www.suse.com/security/cve/CVE-2014-1569/" source="CVE"/>
		<reference ref_id="CVE-2015-2721" ref_url="https://www.suse.com/security/cve/CVE-2015-2721/" source="CVE"/>
		<reference ref_id="CVE-2015-4000" ref_url="https://www.suse.com/security/cve/CVE-2015-4000/" source="CVE"/>
		<reference ref_id="CVE-2015-7181" ref_url="https://www.suse.com/security/cve/CVE-2015-7181/" source="CVE"/>
		<reference ref_id="CVE-2015-7182" ref_url="https://www.suse.com/security/cve/CVE-2015-7182/" source="CVE"/>
		<reference ref_id="CVE-2015-7575" ref_url="https://www.suse.com/security/cve/CVE-2015-7575/" source="CVE"/>
		<reference ref_id="CVE-2016-1950" ref_url="https://www.suse.com/security/cve/CVE-2016-1950/" source="CVE"/>
		<reference ref_id="CVE-2016-1979" ref_url="https://www.suse.com/security/cve/CVE-2016-1979/" source="CVE"/>
		<reference ref_id="CVE-2016-2834" ref_url="https://www.suse.com/security/cve/CVE-2016-2834/" source="CVE"/>
		<reference ref_id="CVE-2018-0495" ref_url="https://www.suse.com/security/cve/CVE-2018-0495/" source="CVE"/>
		<reference ref_id="CVE-2018-12384" ref_url="https://www.suse.com/security/cve/CVE-2018-12384/" source="CVE"/>
		<reference ref_id="CVE-2018-12404" ref_url="https://www.suse.com/security/cve/CVE-2018-12404/" source="CVE"/>
		<description>
These are all security issues fixed in the libfreebl3-hmac-3.41.1-3.13.1 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3170/">CVE-2010-3170</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-3389/">CVE-2011-3389</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3640/">CVE-2011-3640</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-0743/">CVE-2013-0743</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0791/">CVE-2013-0791</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1620/">CVE-2013-1620</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1739/">CVE-2013-1739</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1740/">CVE-2013-1740</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-5605/">CVE-2013-5605</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1490/">CVE-2014-1490</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1491/">CVE-2014-1491</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-1492/">CVE-2014-1492</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1568/">CVE-2014-1568</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1569/">CVE-2014-1569</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2015-2721/">CVE-2015-2721</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-4000/">CVE-2015-4000</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7181/">CVE-2015-7181</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7182/">CVE-2015-7182</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7575/">CVE-2015-7575</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1950/">CVE-2016-1950</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1979/">CVE-2016-1979</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2834/">CVE-2016-2834</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-0495/">CVE-2018-0495</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-12384/">CVE-2018-12384</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12404/">CVE-2018-12404</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488356" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488357" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137596" version="1" class="patch">
	<metadata>
		<title>libmysqld-devel-10.2.22-3.14.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2007-5970" ref_url="https://www.suse.com/security/cve/CVE-2007-5970/" source="CVE"/>
		<reference ref_id="CVE-2008-7247" ref_url="https://www.suse.com/security/cve/CVE-2008-7247/" source="CVE"/>
		<reference ref_id="CVE-2009-4019" ref_url="https://www.suse.com/security/cve/CVE-2009-4019/" source="CVE"/>
		<reference ref_id="CVE-2009-4028" ref_url="https://www.suse.com/security/cve/CVE-2009-4028/" source="CVE"/>
		<reference ref_id="CVE-2009-4030" ref_url="https://www.suse.com/security/cve/CVE-2009-4030/" source="CVE"/>
		<reference ref_id="CVE-2012-4414" ref_url="https://www.suse.com/security/cve/CVE-2012-4414/" source="CVE"/>
		<reference ref_id="CVE-2012-5611" ref_url="https://www.suse.com/security/cve/CVE-2012-5611/" source="CVE"/>
		<reference ref_id="CVE-2012-5612" ref_url="https://www.suse.com/security/cve/CVE-2012-5612/" source="CVE"/>
		<reference ref_id="CVE-2012-5615" ref_url="https://www.suse.com/security/cve/CVE-2012-5615/" source="CVE"/>
		<reference ref_id="CVE-2012-5627" ref_url="https://www.suse.com/security/cve/CVE-2012-5627/" source="CVE"/>
		<reference ref_id="CVE-2013-1976" ref_url="https://www.suse.com/security/cve/CVE-2013-1976/" source="CVE"/>
		<reference ref_id="CVE-2015-4792" ref_url="https://www.suse.com/security/cve/CVE-2015-4792/" source="CVE"/>
		<reference ref_id="CVE-2015-4802" ref_url="https://www.suse.com/security/cve/CVE-2015-4802/" source="CVE"/>
		<reference ref_id="CVE-2015-4807" ref_url="https://www.suse.com/security/cve/CVE-2015-4807/" source="CVE"/>
		<reference ref_id="CVE-2015-4815" ref_url="https://www.suse.com/security/cve/CVE-2015-4815/" source="CVE"/>
		<reference ref_id="CVE-2015-4816" ref_url="https://www.suse.com/security/cve/CVE-2015-4816/" source="CVE"/>
		<reference ref_id="CVE-2015-4819" ref_url="https://www.suse.com/security/cve/CVE-2015-4819/" source="CVE"/>
		<reference ref_id="CVE-2015-4826" ref_url="https://www.suse.com/security/cve/CVE-2015-4826/" source="CVE"/>
		<reference ref_id="CVE-2015-4830" ref_url="https://www.suse.com/security/cve/CVE-2015-4830/" source="CVE"/>
		<reference ref_id="CVE-2015-4836" ref_url="https://www.suse.com/security/cve/CVE-2015-4836/" source="CVE"/>
		<reference ref_id="CVE-2015-4858" ref_url="https://www.suse.com/security/cve/CVE-2015-4858/" source="CVE"/>
		<reference ref_id="CVE-2015-4861" ref_url="https://www.suse.com/security/cve/CVE-2015-4861/" source="CVE"/>
		<reference ref_id="CVE-2015-4864" ref_url="https://www.suse.com/security/cve/CVE-2015-4864/" source="CVE"/>
		<reference ref_id="CVE-2015-4866" ref_url="https://www.suse.com/security/cve/CVE-2015-4866/" source="CVE"/>
		<reference ref_id="CVE-2015-4870" ref_url="https://www.suse.com/security/cve/CVE-2015-4870/" source="CVE"/>
		<reference ref_id="CVE-2015-4879" ref_url="https://www.suse.com/security/cve/CVE-2015-4879/" source="CVE"/>
		<reference ref_id="CVE-2015-4895" ref_url="https://www.suse.com/security/cve/CVE-2015-4895/" source="CVE"/>
		<reference ref_id="CVE-2015-4913" ref_url="https://www.suse.com/security/cve/CVE-2015-4913/" source="CVE"/>
		<reference ref_id="CVE-2015-5969" ref_url="https://www.suse.com/security/cve/CVE-2015-5969/" source="CVE"/>
		<reference ref_id="CVE-2015-7744" ref_url="https://www.suse.com/security/cve/CVE-2015-7744/" source="CVE"/>
		<reference ref_id="CVE-2016-0505" ref_url="https://www.suse.com/security/cve/CVE-2016-0505/" source="CVE"/>
		<reference ref_id="CVE-2016-0546" ref_url="https://www.suse.com/security/cve/CVE-2016-0546/" source="CVE"/>
		<reference ref_id="CVE-2016-0596" ref_url="https://www.suse.com/security/cve/CVE-2016-0596/" source="CVE"/>
		<reference ref_id="CVE-2016-0597" ref_url="https://www.suse.com/security/cve/CVE-2016-0597/" source="CVE"/>
		<reference ref_id="CVE-2016-0598" ref_url="https://www.suse.com/security/cve/CVE-2016-0598/" source="CVE"/>
		<reference ref_id="CVE-2016-0600" ref_url="https://www.suse.com/security/cve/CVE-2016-0600/" source="CVE"/>
		<reference ref_id="CVE-2016-0606" ref_url="https://www.suse.com/security/cve/CVE-2016-0606/" source="CVE"/>
		<reference ref_id="CVE-2016-0608" ref_url="https://www.suse.com/security/cve/CVE-2016-0608/" source="CVE"/>
		<reference ref_id="CVE-2016-0609" ref_url="https://www.suse.com/security/cve/CVE-2016-0609/" source="CVE"/>
		<reference ref_id="CVE-2016-0610" ref_url="https://www.suse.com/security/cve/CVE-2016-0610/" source="CVE"/>
		<reference ref_id="CVE-2016-0616" ref_url="https://www.suse.com/security/cve/CVE-2016-0616/" source="CVE"/>
		<reference ref_id="CVE-2016-0640" ref_url="https://www.suse.com/security/cve/CVE-2016-0640/" source="CVE"/>
		<reference ref_id="CVE-2016-0641" ref_url="https://www.suse.com/security/cve/CVE-2016-0641/" source="CVE"/>
		<reference ref_id="CVE-2016-0642" ref_url="https://www.suse.com/security/cve/CVE-2016-0642/" source="CVE"/>
		<reference ref_id="CVE-2016-0644" ref_url="https://www.suse.com/security/cve/CVE-2016-0644/" source="CVE"/>
		<reference ref_id="CVE-2016-0646" ref_url="https://www.suse.com/security/cve/CVE-2016-0646/" source="CVE"/>
		<reference ref_id="CVE-2016-0649" ref_url="https://www.suse.com/security/cve/CVE-2016-0649/" source="CVE"/>
		<reference ref_id="CVE-2016-0650" ref_url="https://www.suse.com/security/cve/CVE-2016-0650/" source="CVE"/>
		<reference ref_id="CVE-2016-0651" ref_url="https://www.suse.com/security/cve/CVE-2016-0651/" source="CVE"/>
		<reference ref_id="CVE-2016-0668" ref_url="https://www.suse.com/security/cve/CVE-2016-0668/" source="CVE"/>
		<reference ref_id="CVE-2016-2047" ref_url="https://www.suse.com/security/cve/CVE-2016-2047/" source="CVE"/>
		<reference ref_id="CVE-2016-3477" ref_url="https://www.suse.com/security/cve/CVE-2016-3477/" source="CVE"/>
		<reference ref_id="CVE-2016-3492" ref_url="https://www.suse.com/security/cve/CVE-2016-3492/" source="CVE"/>
		<reference ref_id="CVE-2016-3521" ref_url="https://www.suse.com/security/cve/CVE-2016-3521/" source="CVE"/>
		<reference ref_id="CVE-2016-3615" ref_url="https://www.suse.com/security/cve/CVE-2016-3615/" source="CVE"/>
		<reference ref_id="CVE-2016-5440" ref_url="https://www.suse.com/security/cve/CVE-2016-5440/" source="CVE"/>
		<reference ref_id="CVE-2016-5584" ref_url="https://www.suse.com/security/cve/CVE-2016-5584/" source="CVE"/>
		<reference ref_id="CVE-2016-5624" ref_url="https://www.suse.com/security/cve/CVE-2016-5624/" source="CVE"/>
		<reference ref_id="CVE-2016-5626" ref_url="https://www.suse.com/security/cve/CVE-2016-5626/" source="CVE"/>
		<reference ref_id="CVE-2016-5629" ref_url="https://www.suse.com/security/cve/CVE-2016-5629/" source="CVE"/>
		<reference ref_id="CVE-2016-6662" ref_url="https://www.suse.com/security/cve/CVE-2016-6662/" source="CVE"/>
		<reference ref_id="CVE-2016-6663" ref_url="https://www.suse.com/security/cve/CVE-2016-6663/" source="CVE"/>
		<reference ref_id="CVE-2016-6664" ref_url="https://www.suse.com/security/cve/CVE-2016-6664/" source="CVE"/>
		<reference ref_id="CVE-2016-7440" ref_url="https://www.suse.com/security/cve/CVE-2016-7440/" source="CVE"/>
		<reference ref_id="CVE-2016-8283" ref_url="https://www.suse.com/security/cve/CVE-2016-8283/" source="CVE"/>
		<reference ref_id="CVE-2016-9843" ref_url="https://www.suse.com/security/cve/CVE-2016-9843/" source="CVE"/>
		<reference ref_id="CVE-2017-10268" ref_url="https://www.suse.com/security/cve/CVE-2017-10268/" source="CVE"/>
		<reference ref_id="CVE-2017-10286" ref_url="https://www.suse.com/security/cve/CVE-2017-10286/" source="CVE"/>
		<reference ref_id="CVE-2017-10320" ref_url="https://www.suse.com/security/cve/CVE-2017-10320/" source="CVE"/>
		<reference ref_id="CVE-2017-10365" ref_url="https://www.suse.com/security/cve/CVE-2017-10365/" source="CVE"/>
		<reference ref_id="CVE-2017-10378" ref_url="https://www.suse.com/security/cve/CVE-2017-10378/" source="CVE"/>
		<reference ref_id="CVE-2017-10379" ref_url="https://www.suse.com/security/cve/CVE-2017-10379/" source="CVE"/>
		<reference ref_id="CVE-2017-10384" ref_url="https://www.suse.com/security/cve/CVE-2017-10384/" source="CVE"/>
		<reference ref_id="CVE-2017-15365" ref_url="https://www.suse.com/security/cve/CVE-2017-15365/" source="CVE"/>
		<reference ref_id="CVE-2017-3238" ref_url="https://www.suse.com/security/cve/CVE-2017-3238/" source="CVE"/>
		<reference ref_id="CVE-2017-3243" ref_url="https://www.suse.com/security/cve/CVE-2017-3243/" source="CVE"/>
		<reference ref_id="CVE-2017-3244" ref_url="https://www.suse.com/security/cve/CVE-2017-3244/" source="CVE"/>
		<reference ref_id="CVE-2017-3257" ref_url="https://www.suse.com/security/cve/CVE-2017-3257/" source="CVE"/>
		<reference ref_id="CVE-2017-3258" ref_url="https://www.suse.com/security/cve/CVE-2017-3258/" source="CVE"/>
		<reference ref_id="CVE-2017-3265" ref_url="https://www.suse.com/security/cve/CVE-2017-3265/" source="CVE"/>
		<reference ref_id="CVE-2017-3291" ref_url="https://www.suse.com/security/cve/CVE-2017-3291/" source="CVE"/>
		<reference ref_id="CVE-2017-3302" ref_url="https://www.suse.com/security/cve/CVE-2017-3302/" source="CVE"/>
		<reference ref_id="CVE-2017-3308" ref_url="https://www.suse.com/security/cve/CVE-2017-3308/" source="CVE"/>
		<reference ref_id="CVE-2017-3309" ref_url="https://www.suse.com/security/cve/CVE-2017-3309/" source="CVE"/>
		<reference ref_id="CVE-2017-3312" ref_url="https://www.suse.com/security/cve/CVE-2017-3312/" source="CVE"/>
		<reference ref_id="CVE-2017-3313" ref_url="https://www.suse.com/security/cve/CVE-2017-3313/" source="CVE"/>
		<reference ref_id="CVE-2017-3317" ref_url="https://www.suse.com/security/cve/CVE-2017-3317/" source="CVE"/>
		<reference ref_id="CVE-2017-3318" ref_url="https://www.suse.com/security/cve/CVE-2017-3318/" source="CVE"/>
		<reference ref_id="CVE-2017-3453" ref_url="https://www.suse.com/security/cve/CVE-2017-3453/" source="CVE"/>
		<reference ref_id="CVE-2017-3456" ref_url="https://www.suse.com/security/cve/CVE-2017-3456/" source="CVE"/>
		<reference ref_id="CVE-2017-3464" ref_url="https://www.suse.com/security/cve/CVE-2017-3464/" source="CVE"/>
		<reference ref_id="CVE-2017-3636" ref_url="https://www.suse.com/security/cve/CVE-2017-3636/" source="CVE"/>
		<reference ref_id="CVE-2017-3641" ref_url="https://www.suse.com/security/cve/CVE-2017-3641/" source="CVE"/>
		<reference ref_id="CVE-2017-3653" ref_url="https://www.suse.com/security/cve/CVE-2017-3653/" source="CVE"/>
		<reference ref_id="CVE-2018-2562" ref_url="https://www.suse.com/security/cve/CVE-2018-2562/" source="CVE"/>
		<reference ref_id="CVE-2018-2612" ref_url="https://www.suse.com/security/cve/CVE-2018-2612/" source="CVE"/>
		<reference ref_id="CVE-2018-2622" ref_url="https://www.suse.com/security/cve/CVE-2018-2622/" source="CVE"/>
		<reference ref_id="CVE-2018-2640" ref_url="https://www.suse.com/security/cve/CVE-2018-2640/" source="CVE"/>
		<reference ref_id="CVE-2018-2665" ref_url="https://www.suse.com/security/cve/CVE-2018-2665/" source="CVE"/>
		<reference ref_id="CVE-2018-2668" ref_url="https://www.suse.com/security/cve/CVE-2018-2668/" source="CVE"/>
		<reference ref_id="CVE-2018-2755" ref_url="https://www.suse.com/security/cve/CVE-2018-2755/" source="CVE"/>
		<reference ref_id="CVE-2018-2759" ref_url="https://www.suse.com/security/cve/CVE-2018-2759/" source="CVE"/>
		<reference ref_id="CVE-2018-2761" ref_url="https://www.suse.com/security/cve/CVE-2018-2761/" source="CVE"/>
		<reference ref_id="CVE-2018-2766" ref_url="https://www.suse.com/security/cve/CVE-2018-2766/" source="CVE"/>
		<reference ref_id="CVE-2018-2767" ref_url="https://www.suse.com/security/cve/CVE-2018-2767/" source="CVE"/>
		<reference ref_id="CVE-2018-2771" ref_url="https://www.suse.com/security/cve/CVE-2018-2771/" source="CVE"/>
		<reference ref_id="CVE-2018-2777" ref_url="https://www.suse.com/security/cve/CVE-2018-2777/" source="CVE"/>
		<reference ref_id="CVE-2018-2781" ref_url="https://www.suse.com/security/cve/CVE-2018-2781/" source="CVE"/>
		<reference ref_id="CVE-2018-2782" ref_url="https://www.suse.com/security/cve/CVE-2018-2782/" source="CVE"/>
		<reference ref_id="CVE-2018-2784" ref_url="https://www.suse.com/security/cve/CVE-2018-2784/" source="CVE"/>
		<reference ref_id="CVE-2018-2786" ref_url="https://www.suse.com/security/cve/CVE-2018-2786/" source="CVE"/>
		<reference ref_id="CVE-2018-2787" ref_url="https://www.suse.com/security/cve/CVE-2018-2787/" source="CVE"/>
		<reference ref_id="CVE-2018-2810" ref_url="https://www.suse.com/security/cve/CVE-2018-2810/" source="CVE"/>
		<reference ref_id="CVE-2018-2813" ref_url="https://www.suse.com/security/cve/CVE-2018-2813/" source="CVE"/>
		<reference ref_id="CVE-2018-2817" ref_url="https://www.suse.com/security/cve/CVE-2018-2817/" source="CVE"/>
		<reference ref_id="CVE-2018-2819" ref_url="https://www.suse.com/security/cve/CVE-2018-2819/" source="CVE"/>
		<reference ref_id="CVE-2018-3058" ref_url="https://www.suse.com/security/cve/CVE-2018-3058/" source="CVE"/>
		<reference ref_id="CVE-2018-3060" ref_url="https://www.suse.com/security/cve/CVE-2018-3060/" source="CVE"/>
		<reference ref_id="CVE-2018-3063" ref_url="https://www.suse.com/security/cve/CVE-2018-3063/" source="CVE"/>
		<reference ref_id="CVE-2018-3064" ref_url="https://www.suse.com/security/cve/CVE-2018-3064/" source="CVE"/>
		<reference ref_id="CVE-2018-3066" ref_url="https://www.suse.com/security/cve/CVE-2018-3066/" source="CVE"/>
		<reference ref_id="CVE-2018-3143" ref_url="https://www.suse.com/security/cve/CVE-2018-3143/" source="CVE"/>
		<reference ref_id="CVE-2018-3156" ref_url="https://www.suse.com/security/cve/CVE-2018-3156/" source="CVE"/>
		<reference ref_id="CVE-2018-3162" ref_url="https://www.suse.com/security/cve/CVE-2018-3162/" source="CVE"/>
		<reference ref_id="CVE-2018-3173" ref_url="https://www.suse.com/security/cve/CVE-2018-3173/" source="CVE"/>
		<reference ref_id="CVE-2018-3174" ref_url="https://www.suse.com/security/cve/CVE-2018-3174/" source="CVE"/>
		<reference ref_id="CVE-2018-3185" ref_url="https://www.suse.com/security/cve/CVE-2018-3185/" source="CVE"/>
		<reference ref_id="CVE-2018-3200" ref_url="https://www.suse.com/security/cve/CVE-2018-3200/" source="CVE"/>
		<reference ref_id="CVE-2018-3251" ref_url="https://www.suse.com/security/cve/CVE-2018-3251/" source="CVE"/>
		<reference ref_id="CVE-2018-3277" ref_url="https://www.suse.com/security/cve/CVE-2018-3277/" source="CVE"/>
		<reference ref_id="CVE-2018-3282" ref_url="https://www.suse.com/security/cve/CVE-2018-3282/" source="CVE"/>
		<reference ref_id="CVE-2018-3284" ref_url="https://www.suse.com/security/cve/CVE-2018-3284/" source="CVE"/>
		<reference ref_id="CVE-2019-2510" ref_url="https://www.suse.com/security/cve/CVE-2019-2510/" source="CVE"/>
		<reference ref_id="CVE-2019-2537" ref_url="https://www.suse.com/security/cve/CVE-2019-2537/" source="CVE"/>
		<description>
These are all security issues fixed in the libmysqld-devel-10.2.22-3.14.1 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-5970/">CVE-2007-5970</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-7247/">CVE-2008-7247</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2009-4019/">CVE-2009-4019</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4028/">CVE-2009-4028</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-4030/">CVE-2009-4030</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4414/">CVE-2012-4414</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5611/">CVE-2012-5611</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5612/">CVE-2012-5612</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5615/">CVE-2012-5615</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-5627/">CVE-2012-5627</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1976/">CVE-2013-1976</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4792/">CVE-2015-4792</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4802/">CVE-2015-4802</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4807/">CVE-2015-4807</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4815/">CVE-2015-4815</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4816/">CVE-2015-4816</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4819/">CVE-2015-4819</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4826/">CVE-2015-4826</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4830/">CVE-2015-4830</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4836/">CVE-2015-4836</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4858/">CVE-2015-4858</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4861/">CVE-2015-4861</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4864/">CVE-2015-4864</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4866/">CVE-2015-4866</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4870/">CVE-2015-4870</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4879/">CVE-2015-4879</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4895/">CVE-2015-4895</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4913/">CVE-2015-4913</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5969/">CVE-2015-5969</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-7744/">CVE-2015-7744</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0505/">CVE-2016-0505</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2016-0546/">CVE-2016-0546</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0596/">CVE-2016-0596</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0597/">CVE-2016-0597</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0598/">CVE-2016-0598</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0600/">CVE-2016-0600</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0606/">CVE-2016-0606</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0608/">CVE-2016-0608</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0609/">CVE-2016-0609</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0610/">CVE-2016-0610</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2016-0616/">CVE-2016-0616</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-0640/">CVE-2016-0640</cve>
	<cve impact="critical" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0641/">CVE-2016-0641</cve>
	<cve impact="critical" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2016-0642/">CVE-2016-0642</cve>
	<cve impact="critical" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0644/">CVE-2016-0644</cve>
	<cve impact="critical" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0646/">CVE-2016-0646</cve>
	<cve impact="critical" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0649/">CVE-2016-0649</cve>
	<cve impact="critical" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0650/">CVE-2016-0650</cve>
	<cve impact="critical" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0651/">CVE-2016-0651</cve>
	<cve impact="critical" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0668/">CVE-2016-0668</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2047/">CVE-2016-2047</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3477/">CVE-2016-3477</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3492/">CVE-2016-3492</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3521/">CVE-2016-3521</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3615/">CVE-2016-3615</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5440/">CVE-2016-5440</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5584/">CVE-2016-5584</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5624/">CVE-2016-5624</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5626/">CVE-2016-5626</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5629/">CVE-2016-5629</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6662/">CVE-2016-6662</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6663/">CVE-2016-6663</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6664/">CVE-2016-6664</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7440/">CVE-2016-7440</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8283/">CVE-2016-8283</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9843/">CVE-2016-9843</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10268/">CVE-2017-10268</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10286/">CVE-2017-10286</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10320/">CVE-2017-10320</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-10365/">CVE-2017-10365</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10378/">CVE-2017-10378</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10379/">CVE-2017-10379</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10384/">CVE-2017-10384</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-15365/">CVE-2017-15365</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3238/">CVE-2017-3238</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3243/">CVE-2017-3243</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3244/">CVE-2017-3244</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3257/">CVE-2017-3257</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3258/">CVE-2017-3258</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3265/">CVE-2017-3265</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3291/">CVE-2017-3291</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3302/">CVE-2017-3302</cve>
	<cve impact="moderate" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3308/">CVE-2017-3308</cve>
	<cve impact="moderate" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3309/">CVE-2017-3309</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-3312/">CVE-2017-3312</cve>
	<cve impact="low" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3313/">CVE-2017-3313</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3317/">CVE-2017-3317</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3318/">CVE-2017-3318</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3453/">CVE-2017-3453</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3456/">CVE-2017-3456</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-3464/">CVE-2017-3464</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-3636/">CVE-2017-3636</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3641/">CVE-2017-3641</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-3653/">CVE-2017-3653</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-2562/">CVE-2018-2562</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2612/">CVE-2018-2612</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2622/">CVE-2018-2622</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2640/">CVE-2018-2640</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2665/">CVE-2018-2665</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2668/">CVE-2018-2668</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-2755/">CVE-2018-2755</cve>
	<cve impact="important" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2759/">CVE-2018-2759</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2761/">CVE-2018-2761</cve>
	<cve impact="important" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2766/">CVE-2018-2766</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-2767/">CVE-2018-2767</cve>
	<cve impact="important" cvss3="4.4/CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2771/">CVE-2018-2771</cve>
	<cve impact="important" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2777/">CVE-2018-2777</cve>
	<cve impact="important" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2781/">CVE-2018-2781</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2782/">CVE-2018-2782</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2784/">CVE-2018-2784</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-2786/">CVE-2018-2786</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-2787/">CVE-2018-2787</cve>
	<cve impact="important" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2810/">CVE-2018-2810</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-2813/">CVE-2018-2813</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2817/">CVE-2018-2817</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-2819/">CVE-2018-2819</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-3058/">CVE-2018-3058</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3060/">CVE-2018-3060</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3063/">CVE-2018-3063</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-3064/">CVE-2018-3064</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-3066/">CVE-2018-3066</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3143/">CVE-2018-3143</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3156/">CVE-2018-3156</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3162/">CVE-2018-3162</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3173/">CVE-2018-3173</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3174/">CVE-2018-3174</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-3185/">CVE-2018-3185</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3200/">CVE-2018-3200</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3251/">CVE-2018-3251</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3277/">CVE-2018-3277</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3282/">CVE-2018-3282</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3284/">CVE-2018-3284</cve>
	<cve impact="important" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2510/">CVE-2019-2510</cve>
	<cve impact="important" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2537/">CVE-2019-2537</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488358" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488359" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488360" comment="mariadb-10.2.22-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488361" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488362" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488363" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137597" version="1" class="patch">
	<metadata>
		<title>librelp-devel-1.2.15-1.15 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-1000140" ref_url="https://www.suse.com/security/cve/CVE-2018-1000140/" source="CVE"/>
		<description>
These are all security issues fixed in the librelp-devel-1.2.15-1.15 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000140/">CVE-2018-1000140</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488198" comment="librelp-devel-1.2.15-1.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488199" comment="librelp0-1.2.15-1.15 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137598" version="1" class="patch">
	<metadata>
		<title>libsaml-devel-2.6.1-1.31 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-16853" ref_url="https://www.suse.com/security/cve/CVE-2017-16853/" source="CVE"/>
		<description>
These are all security issues fixed in the libsaml-devel-2.6.1-1.31 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-16853/">CVE-2017-16853</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488200" comment="libsaml-devel-2.6.1-1.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488201" comment="libsaml9-2.6.1-1.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488202" comment="opensaml-schemas-2.6.1-1.31 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137599" version="1" class="patch">
	<metadata>
		<title>libshibsp-lite7-2.6.1-1.48 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-16852" ref_url="https://www.suse.com/security/cve/CVE-2017-16852/" source="CVE"/>
		<description>
These are all security issues fixed in the libshibsp-lite7-2.6.1-1.48 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-16852/">CVE-2017-16852</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488203" comment="libshibsp-lite7-2.6.1-1.48 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488204" comment="libshibsp7-2.6.1-1.48 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488205" comment="shibboleth-sp-2.6.1-1.48 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488206" comment="shibboleth-sp-devel-2.6.1-1.48 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137600" version="1" class="patch">
	<metadata>
		<title>libspice-server-devel-0.14.1-2.21 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-4282" ref_url="https://www.suse.com/security/cve/CVE-2013-4282/" source="CVE"/>
		<reference ref_id="CVE-2015-3247" ref_url="https://www.suse.com/security/cve/CVE-2015-3247/" source="CVE"/>
		<reference ref_id="CVE-2015-5260" ref_url="https://www.suse.com/security/cve/CVE-2015-5260/" source="CVE"/>
		<reference ref_id="CVE-2015-5261" ref_url="https://www.suse.com/security/cve/CVE-2015-5261/" source="CVE"/>
		<reference ref_id="CVE-2016-0749" ref_url="https://www.suse.com/security/cve/CVE-2016-0749/" source="CVE"/>
		<reference ref_id="CVE-2016-2150" ref_url="https://www.suse.com/security/cve/CVE-2016-2150/" source="CVE"/>
		<reference ref_id="CVE-2016-9577" ref_url="https://www.suse.com/security/cve/CVE-2016-9577/" source="CVE"/>
		<reference ref_id="CVE-2016-9578" ref_url="https://www.suse.com/security/cve/CVE-2016-9578/" source="CVE"/>
		<reference ref_id="CVE-2018-10873" ref_url="https://www.suse.com/security/cve/CVE-2018-10873/" source="CVE"/>
		<reference ref_id="CVE-2018-10893" ref_url="https://www.suse.com/security/cve/CVE-2018-10893/" source="CVE"/>
		<reference ref_id="CVE-2019-3813" ref_url="https://www.suse.com/security/cve/CVE-2019-3813/" source="CVE"/>
		<description>
These are all security issues fixed in the libspice-server-devel-0.14.1-2.21 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2013-4282/">CVE-2013-4282</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-3247/">CVE-2015-3247</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-5260/">CVE-2015-5260</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-5261/">CVE-2015-5261</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0749/">CVE-2016-0749</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2150/">CVE-2016-2150</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9577/">CVE-2016-9577</cve>
	<cve impact="critical" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9578/">CVE-2016-9578</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10873/">CVE-2018-10873</cve>
	<cve impact="moderate" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2018-10893/">CVE-2018-10893</cve>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3813/">CVE-2019-3813</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488364" comment="libspice-server-devel-0.14.1-2.21 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488365" comment="libspice-server1-0.14.1-2.21 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137601" version="1" class="patch">
	<metadata>
		<title>libupsclient1-2.7.4-4.72 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2012-2944" ref_url="https://www.suse.com/security/cve/CVE-2012-2944/" source="CVE"/>
		<description>
These are all security issues fixed in the libupsclient1-2.7.4-4.72 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-2944/">CVE-2012-2944</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009482443" comment="libupsclient1-2.7.4-4.72 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488209" comment="nut-2.7.4-4.72 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488210" comment="nut-devel-2.7.4-4.72 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488211" comment="nut-drivers-net-2.7.4-4.72 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137602" version="1" class="patch">
	<metadata>
		<title>libvirglrenderer0-0.6.0-2.30 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-10214" ref_url="https://www.suse.com/security/cve/CVE-2016-10214/" source="CVE"/>
		<reference ref_id="CVE-2017-5937" ref_url="https://www.suse.com/security/cve/CVE-2017-5937/" source="CVE"/>
		<reference ref_id="CVE-2017-5957" ref_url="https://www.suse.com/security/cve/CVE-2017-5957/" source="CVE"/>
		<reference ref_id="CVE-2017-5993" ref_url="https://www.suse.com/security/cve/CVE-2017-5993/" source="CVE"/>
		<reference ref_id="CVE-2017-5994" ref_url="https://www.suse.com/security/cve/CVE-2017-5994/" source="CVE"/>
		<reference ref_id="CVE-2017-6386" ref_url="https://www.suse.com/security/cve/CVE-2017-6386/" source="CVE"/>
		<description>
These are all security issues fixed in the libvirglrenderer0-0.6.0-2.30 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10214/">CVE-2016-10214</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5937/">CVE-2017-5937</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5957/">CVE-2017-5957</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5993/">CVE-2017-5993</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5994/">CVE-2017-5994</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6386/">CVE-2017-6386</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488212" comment="libvirglrenderer0-0.6.0-2.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488213" comment="virglrenderer-devel-0.6.0-2.30 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137603" version="1" class="patch">
	<metadata>
		<title>libvirt-5.1.0-6.9 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-7823" ref_url="https://www.suse.com/security/cve/CVE-2014-7823/" source="CVE"/>
		<reference ref_id="CVE-2014-8131" ref_url="https://www.suse.com/security/cve/CVE-2014-8131/" source="CVE"/>
		<reference ref_id="CVE-2015-0236" ref_url="https://www.suse.com/security/cve/CVE-2015-0236/" source="CVE"/>
		<reference ref_id="CVE-2015-5247" ref_url="https://www.suse.com/security/cve/CVE-2015-5247/" source="CVE"/>
		<reference ref_id="CVE-2015-5313" ref_url="https://www.suse.com/security/cve/CVE-2015-5313/" source="CVE"/>
		<reference ref_id="CVE-2017-1000256" ref_url="https://www.suse.com/security/cve/CVE-2017-1000256/" source="CVE"/>
		<reference ref_id="CVE-2017-2635" ref_url="https://www.suse.com/security/cve/CVE-2017-2635/" source="CVE"/>
		<reference ref_id="CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715/" source="CVE"/>
		<reference ref_id="CVE-2018-1064" ref_url="https://www.suse.com/security/cve/CVE-2018-1064/" source="CVE"/>
		<reference ref_id="CVE-2018-3639" ref_url="https://www.suse.com/security/cve/CVE-2018-3639/" source="CVE"/>
		<reference ref_id="CVE-2018-5748" ref_url="https://www.suse.com/security/cve/CVE-2018-5748/" source="CVE"/>
		<reference ref_id="CVE-2019-3886" ref_url="https://www.suse.com/security/cve/CVE-2019-3886/" source="CVE"/>
		<description>
These are all security issues fixed in the libvirt-5.1.0-6.9 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7823/">CVE-2014-7823</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-8131/">CVE-2014-8131</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0236/">CVE-2015-0236</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-5247/">CVE-2015-5247</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-5313/">CVE-2015-5313</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000256/">CVE-2017-1000256</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2635/">CVE-2017-2635</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1064/">CVE-2018-1064</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3639/">CVE-2018-3639</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5748/">CVE-2018-5748</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-3886/">CVE-2019-3886</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488366" comment="libvirt-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488367" comment="libvirt-admin-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488368" comment="libvirt-bash-completion-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488369" comment="libvirt-client-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488370" comment="libvirt-daemon-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488371" comment="libvirt-daemon-config-network-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488372" comment="libvirt-daemon-config-nwfilter-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488373" comment="libvirt-daemon-driver-interface-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488374" comment="libvirt-daemon-driver-libxl-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488375" comment="libvirt-daemon-driver-lxc-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488376" comment="libvirt-daemon-driver-network-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488377" comment="libvirt-daemon-driver-nodedev-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488378" comment="libvirt-daemon-driver-nwfilter-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488379" comment="libvirt-daemon-driver-qemu-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488380" comment="libvirt-daemon-driver-secret-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488381" comment="libvirt-daemon-driver-storage-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488382" comment="libvirt-daemon-driver-storage-core-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488383" comment="libvirt-daemon-driver-storage-disk-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488384" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488385" comment="libvirt-daemon-driver-storage-logical-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488386" comment="libvirt-daemon-driver-storage-mpath-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488387" comment="libvirt-daemon-driver-storage-rbd-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488388" comment="libvirt-daemon-driver-storage-scsi-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488389" comment="libvirt-daemon-hooks-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488390" comment="libvirt-daemon-lxc-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488391" comment="libvirt-daemon-qemu-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488392" comment="libvirt-daemon-xen-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488393" comment="libvirt-devel-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488394" comment="libvirt-doc-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488395" comment="libvirt-lock-sanlock-5.1.0-6.9 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488396" comment="libvirt-nss-5.1.0-6.9 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137604" version="1" class="patch">
	<metadata>
		<title>libwsman-devel-2.6.7-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-2183" ref_url="https://www.suse.com/security/cve/CVE-2016-2183/" source="CVE"/>
		<reference ref_id="CVE-2019-3816" ref_url="https://www.suse.com/security/cve/CVE-2019-3816/" source="CVE"/>
		<reference ref_id="CVE-2019-3833" ref_url="https://www.suse.com/security/cve/CVE-2019-3833/" source="CVE"/>
		<description>
These are all security issues fixed in the libwsman-devel-2.6.7-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-2183/">CVE-2016-2183</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-3816/">CVE-2019-3816</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3833/">CVE-2019-3833</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488397" comment="libwsman-devel-2.6.7-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488398" comment="libwsman3-2.6.7-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488399" comment="openwsman-server-2.6.7-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137605" version="1" class="patch">
	<metadata>
		<title>libxmltooling-devel-1.6.4-3.3.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-0486" ref_url="https://www.suse.com/security/cve/CVE-2018-0486/" source="CVE"/>
		<reference ref_id="CVE-2018-0489" ref_url="https://www.suse.com/security/cve/CVE-2018-0489/" source="CVE"/>
		<reference ref_id="CVE-2019-9628" ref_url="https://www.suse.com/security/cve/CVE-2019-9628/" source="CVE"/>
		<description>
These are all security issues fixed in the libxmltooling-devel-1.6.4-3.3.2 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-0486/">CVE-2018-0486</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-0489/">CVE-2018-0489</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9628/">CVE-2019-9628</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488400" comment="libxmltooling-devel-1.6.4-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488401" comment="libxmltooling7-1.6.4-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488402" comment="xmltooling-schemas-1.6.4-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137606" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1013882" ref_url="https://bugzilla.suse.com/1013882" source="BUGZILLA"/>
		<reference ref_id="1101676" ref_url="https://bugzilla.suse.com/1101676" source="BUGZILLA"/>
		<reference ref_id="1101677" ref_url="https://bugzilla.suse.com/1101677" source="BUGZILLA"/>
		<reference ref_id="1101678" ref_url="https://bugzilla.suse.com/1101678" source="BUGZILLA"/>
		<reference ref_id="1103342" ref_url="https://bugzilla.suse.com/1103342" source="BUGZILLA"/>
		<reference ref_id="1111858" ref_url="https://bugzilla.suse.com/1111858" source="BUGZILLA"/>
		<reference ref_id="1111859" ref_url="https://bugzilla.suse.com/1111859" source="BUGZILLA"/>
		<reference ref_id="1112368" ref_url="https://bugzilla.suse.com/1112368" source="BUGZILLA"/>
		<reference ref_id="1112377" ref_url="https://bugzilla.suse.com/1112377" source="BUGZILLA"/>
		<reference ref_id="1112384" ref_url="https://bugzilla.suse.com/1112384" source="BUGZILLA"/>
		<reference ref_id="1112386" ref_url="https://bugzilla.suse.com/1112386" source="BUGZILLA"/>
		<reference ref_id="1112391" ref_url="https://bugzilla.suse.com/1112391" source="BUGZILLA"/>
		<reference ref_id="1112397" ref_url="https://bugzilla.suse.com/1112397" source="BUGZILLA"/>
		<reference ref_id="1112404" ref_url="https://bugzilla.suse.com/1112404" source="BUGZILLA"/>
		<reference ref_id="1112415" ref_url="https://bugzilla.suse.com/1112415" source="BUGZILLA"/>
		<reference ref_id="1112417" ref_url="https://bugzilla.suse.com/1112417" source="BUGZILLA"/>
		<reference ref_id="1112421" ref_url="https://bugzilla.suse.com/1112421" source="BUGZILLA"/>
		<reference ref_id="1112432" ref_url="https://bugzilla.suse.com/1112432" source="BUGZILLA"/>
		<reference ref_id="1112767" ref_url="https://bugzilla.suse.com/1112767" source="BUGZILLA"/>
		<reference ref_id="1116686" ref_url="https://bugzilla.suse.com/1116686" source="BUGZILLA"/>
		<reference ref_id="1118754" ref_url="https://bugzilla.suse.com/1118754" source="BUGZILLA"/>
		<reference ref_id="1120041" ref_url="https://bugzilla.suse.com/1120041" source="BUGZILLA"/>
		<reference ref_id="1122198" ref_url="https://bugzilla.suse.com/1122198" source="BUGZILLA"/>
		<reference ref_id="1122475" ref_url="https://bugzilla.suse.com/1122475" source="BUGZILLA"/>
		<reference ref_id="1127027" ref_url="https://bugzilla.suse.com/1127027" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-9843" ref_url="https://www.suse.com/security/cve/CVE-2016-9843/" source="CVE"/>
		<reference ref_id="CVE-2018-3058" ref_url="https://www.suse.com/security/cve/CVE-2018-3058/" source="CVE"/>
		<reference ref_id="CVE-2018-3060" ref_url="https://www.suse.com/security/cve/CVE-2018-3060/" source="CVE"/>
		<reference ref_id="CVE-2018-3063" ref_url="https://www.suse.com/security/cve/CVE-2018-3063/" source="CVE"/>
		<reference ref_id="CVE-2018-3064" ref_url="https://www.suse.com/security/cve/CVE-2018-3064/" source="CVE"/>
		<reference ref_id="CVE-2018-3066" ref_url="https://www.suse.com/security/cve/CVE-2018-3066/" source="CVE"/>
		<reference ref_id="CVE-2018-3143" ref_url="https://www.suse.com/security/cve/CVE-2018-3143/" source="CVE"/>
		<reference ref_id="CVE-2018-3156" ref_url="https://www.suse.com/security/cve/CVE-2018-3156/" source="CVE"/>
		<reference ref_id="CVE-2018-3162" ref_url="https://www.suse.com/security/cve/CVE-2018-3162/" source="CVE"/>
		<reference ref_id="CVE-2018-3173" ref_url="https://www.suse.com/security/cve/CVE-2018-3173/" source="CVE"/>
		<reference ref_id="CVE-2018-3174" ref_url="https://www.suse.com/security/cve/CVE-2018-3174/" source="CVE"/>
		<reference ref_id="CVE-2018-3185" ref_url="https://www.suse.com/security/cve/CVE-2018-3185/" source="CVE"/>
		<reference ref_id="CVE-2018-3200" ref_url="https://www.suse.com/security/cve/CVE-2018-3200/" source="CVE"/>
		<reference ref_id="CVE-2018-3251" ref_url="https://www.suse.com/security/cve/CVE-2018-3251/" source="CVE"/>
		<reference ref_id="CVE-2018-3277" ref_url="https://www.suse.com/security/cve/CVE-2018-3277/" source="CVE"/>
		<reference ref_id="CVE-2018-3282" ref_url="https://www.suse.com/security/cve/CVE-2018-3282/" source="CVE"/>
		<reference ref_id="CVE-2018-3284" ref_url="https://www.suse.com/security/cve/CVE-2018-3284/" source="CVE"/>
		<reference ref_id="CVE-2019-2510" ref_url="https://www.suse.com/security/cve/CVE-2019-2510/" source="CVE"/>
		<reference ref_id="CVE-2019-2537" ref_url="https://www.suse.com/security/cve/CVE-2019-2537/" source="CVE"/>
		<description>
This update for mariadb to version 10.2.22 fixes the following issues:

Security issues fixed:

- CVE-2019-2510: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198). 
- CVE-2019-2537: Fixed a vulnerability which can lead to MySQL compromise and lead to Denial of Service (bsc#1122198).
- CVE-2018-3284: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112377)
- CVE-2018-3282: Server Storage Engines unspecified vulnerability (CPU Oct 2018) (bsc#1112432)
- CVE-2018-3277: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112391)
- CVE-2018-3251: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112397)
- CVE-2018-3200: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112404)
- CVE-2018-3185: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112384)
- CVE-2018-3174: Client programs unspecified vulnerability (CPU Oct 2018) (bsc#1112368)
- CVE-2018-3173: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112386)
- CVE-2018-3162: Fixed InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112415)
- CVE-2018-3156: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112417)
- CVE-2018-3143: InnoDB unspecified vulnerability (CPU Oct 2018) (bsc#1112421)
- CVE-2018-3066: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Options). (bsc#1101678)
- CVE-2018-3064: InnoDB unspecified vulnerability (CPU Jul 2018) (bsc#1103342)
- CVE-2018-3063: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent Server Security Privileges). (bsc#1101677)
- CVE-2018-3058: Unspecified vulnerability in the MySQL Server component of Oracle MySQL (subcomponent MyISAM). (bsc#1101676)
- CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882)

Non-security issues fixed:

- Fixed an issue where mysl_install_db fails due to incorrect basedir (bsc#1127027).
- Fixed an issue where the lograte was not working (bsc#1112767).
- Backport Information Schema CHECK_CONSTRAINTS Table.
- Maximum value of table_definition_cache is now 2097152.
- InnoDB ALTER TABLE fixes.
- Galera crash recovery fixes.
- Encryption fixes.
- Remove xtrabackup dependency  as MariaDB ships a build in mariabackup so xtrabackup is not needed (bsc#1122475).
- Maria DB testsuite - test main.plugin_auth failed (bsc#1111859)
- Maria DB testsuite - test encryption.second_plugin-12863 failed (bsc#1111858)
- Remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
- remove PerconaFT from the package as it has AGPL licence (bsc#1118754)
- Database corruption after renaming a prefix-indexed column (bsc#1120041)


Release notes and changelog:

- https://mariadb.com/kb/en/library/mariadb-10222-release-notes
- https://mariadb.com/kb/en/library/mariadb-10222-changelog/
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-06"/>
	<updated date="2019-03-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1013882">SUSE bug 1013882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101676">SUSE bug 1101676</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101677">SUSE bug 1101677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101678">SUSE bug 1101678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103342">SUSE bug 1103342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111858">SUSE bug 1111858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111859">SUSE bug 1111859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112368">SUSE bug 1112368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112377">SUSE bug 1112377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112384">SUSE bug 1112384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112386">SUSE bug 1112386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112391">SUSE bug 1112391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112397">SUSE bug 1112397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112404">SUSE bug 1112404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112415">SUSE bug 1112415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112417">SUSE bug 1112417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112421">SUSE bug 1112421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112432">SUSE bug 1112432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112767">SUSE bug 1112767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116686">SUSE bug 1116686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118754">SUSE bug 1118754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120041">SUSE bug 1120041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122198">SUSE bug 1122198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122475">SUSE bug 1122475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127027">SUSE bug 1127027</bugzilla>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9843/">CVE-2016-9843</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-3058/">CVE-2018-3058</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-3060/">CVE-2018-3060</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3063/">CVE-2018-3063</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-3064/">CVE-2018-3064</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-3066/">CVE-2018-3066</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3143/">CVE-2018-3143</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3156/">CVE-2018-3156</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3162/">CVE-2018-3162</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3173/">CVE-2018-3173</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3174/">CVE-2018-3174</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-3185/">CVE-2018-3185</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3200/">CVE-2018-3200</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3251/">CVE-2018-3251</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3277/">CVE-2018-3277</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3282/">CVE-2018-3282</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-3284/">CVE-2018-3284</cve>
	<cve impact="important" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2510/">CVE-2019-2510</cve>
	<cve impact="important" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2537/">CVE-2019-2537</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790163" comment="libmysqld-devel-10.2.22-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790164" comment="libmysqld19-10.2.22-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790165" comment="mariadb-10.2.22-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790166" comment="mariadb-client-10.2.22-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499000" comment="mariadb-errormessages-10.2.22-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790167" comment="mariadb-tools-10.2.22-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137607" version="1" class="patch">
	<metadata>
		<title>memcached-1.5.6-2.10 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-1494" ref_url="https://www.suse.com/security/cve/CVE-2009-1494/" source="CVE"/>
		<reference ref_id="CVE-2011-4971" ref_url="https://www.suse.com/security/cve/CVE-2011-4971/" source="CVE"/>
		<reference ref_id="CVE-2013-0179" ref_url="https://www.suse.com/security/cve/CVE-2013-0179/" source="CVE"/>
		<reference ref_id="CVE-2013-7239" ref_url="https://www.suse.com/security/cve/CVE-2013-7239/" source="CVE"/>
		<reference ref_id="CVE-2013-7290" ref_url="https://www.suse.com/security/cve/CVE-2013-7290/" source="CVE"/>
		<reference ref_id="CVE-2013-7291" ref_url="https://www.suse.com/security/cve/CVE-2013-7291/" source="CVE"/>
		<reference ref_id="CVE-2016-8704" ref_url="https://www.suse.com/security/cve/CVE-2016-8704/" source="CVE"/>
		<reference ref_id="CVE-2016-8705" ref_url="https://www.suse.com/security/cve/CVE-2016-8705/" source="CVE"/>
		<reference ref_id="CVE-2016-8706" ref_url="https://www.suse.com/security/cve/CVE-2016-8706/" source="CVE"/>
		<reference ref_id="CVE-2017-9951" ref_url="https://www.suse.com/security/cve/CVE-2017-9951/" source="CVE"/>
		<reference ref_id="CVE-2018-1000115" ref_url="https://www.suse.com/security/cve/CVE-2018-1000115/" source="CVE"/>
		<reference ref_id="CVE-2018-1000127" ref_url="https://www.suse.com/security/cve/CVE-2018-1000127/" source="CVE"/>
		<description>
These are all security issues fixed in the memcached-1.5.6-2.10 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-1494/">CVE-2009-1494</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-4971/">CVE-2011-4971</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-0179/">CVE-2013-0179</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7239/">CVE-2013-7239</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-7290/">CVE-2013-7290</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-7291/">CVE-2013-7291</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8704/">CVE-2016-8704</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8705/">CVE-2016-8705</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-8706/">CVE-2016-8706</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-9951/">CVE-2017-9951</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000115/">CVE-2018-1000115</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000127/">CVE-2018-1000127</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488250" comment="memcached-1.5.6-2.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488251" comment="memcached-devel-1.5.6-2.10 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137608" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1119069" ref_url="https://bugzilla.suse.com/1119069" source="BUGZILLA"/>
		<reference ref_id="1120374" ref_url="https://bugzilla.suse.com/1120374" source="BUGZILLA"/>
		<reference ref_id="1122983" ref_url="https://bugzilla.suse.com/1122983" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12404" ref_url="https://www.suse.com/security/cve/CVE-2018-12404/" source="CVE"/>
		<reference ref_id="CVE-2018-18500" ref_url="https://www.suse.com/security/cve/CVE-2018-18500/" source="CVE"/>
		<reference ref_id="CVE-2018-18501" ref_url="https://www.suse.com/security/cve/CVE-2018-18501/" source="CVE"/>
		<reference ref_id="CVE-2018-18505" ref_url="https://www.suse.com/security/cve/CVE-2018-18505/" source="CVE"/>
		<description>
This update for MozillaFirefox, mozilla-nss fixes the following issues:

Security issues fixed:

- CVE-2018-18500: Fixed a use-after-free parsing HTML5 stream (bsc#1122983).
- CVE-2018-18501: Fixed multiple memory safety bugs (bsc#1122983).
- CVE-2018-18505: Fixed a privilege escalation through IPC channel messages (bsc#1122983).
- CVE-2018-12404: Cache side-channel variant of the Bleichenbacher attack (bsc#1119069).

Non-security issue fixed:

- Update to MozillaFirefox ESR 60.5.0
- Update to mozilla-nss 3.41.1
		</description>
<advisory from="security@suse.de">
	<issued date="2019-02-06"/>
	<updated date="2019-02-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1119069">SUSE bug 1119069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120374">SUSE bug 1120374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122983">SUSE bug 1122983</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12404/">CVE-2018-12404</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18500/">CVE-2018-18500</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18501/">CVE-2018-18501</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18505/">CVE-2018-18505</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790168" comment="libfreebl3-hmac-3.41.1-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790169" comment="libsoftokn3-hmac-3.41.1-3.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137609" version="1" class="patch">
	<metadata>
		<title>nginx-1.14.0-4.24 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-0742" ref_url="https://www.suse.com/security/cve/CVE-2016-0742/" source="CVE"/>
		<reference ref_id="CVE-2016-0746" ref_url="https://www.suse.com/security/cve/CVE-2016-0746/" source="CVE"/>
		<reference ref_id="CVE-2016-0747" ref_url="https://www.suse.com/security/cve/CVE-2016-0747/" source="CVE"/>
		<reference ref_id="CVE-2016-4450" ref_url="https://www.suse.com/security/cve/CVE-2016-4450/" source="CVE"/>
		<reference ref_id="CVE-2017-7529" ref_url="https://www.suse.com/security/cve/CVE-2017-7529/" source="CVE"/>
		<description>
These are all security issues fixed in the nginx-1.14.0-4.24 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-0742/">CVE-2016-0742</cve>
	<cve impact="low" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0746/">CVE-2016-0746</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-0747/">CVE-2016-0747</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4450/">CVE-2016-4450</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-7529/">CVE-2017-7529</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488403" comment="nginx-1.14.0-4.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488404" comment="nginx-source-1.14.0-4.24 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137610" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1090638" ref_url="https://bugzilla.suse.com/1090638" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17833" ref_url="https://www.suse.com/security/cve/CVE-2017-17833/" source="CVE"/>
		<description>
This update for openslp fixes the following issues:

- CVE-2017-17833: Prevent heap-related memory corruption issue which may have
  manifested itself as a denial-of-service or a remote code-execution
  vulnerability (bsc#1090638)
- Prevent out of bounds reads in message parsing
		</description>
<advisory from="security@suse.de">
	<issued date="2018-07-09"/>
	<updated date="2018-07-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1090638">SUSE bug 1090638</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-17833/">CVE-2017-17833</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708377" comment="openslp-server-2.0.0-6.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137611" version="1" class="patch">
	<metadata>
		<title>openslp-server-2.0.0-6.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-3609" ref_url="https://www.suse.com/security/cve/CVE-2010-3609/" source="CVE"/>
		<reference ref_id="CVE-2016-4912" ref_url="https://www.suse.com/security/cve/CVE-2016-4912/" source="CVE"/>
		<reference ref_id="CVE-2016-7567" ref_url="https://www.suse.com/security/cve/CVE-2016-7567/" source="CVE"/>
		<reference ref_id="CVE-2017-17833" ref_url="https://www.suse.com/security/cve/CVE-2017-17833/" source="CVE"/>
		<description>
These are all security issues fixed in the openslp-server-2.0.0-6.3.1 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3609/">CVE-2010-3609</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4912/">CVE-2016-4912</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7567/">CVE-2016-7567</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-17833/">CVE-2017-17833</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488405" comment="openslp-server-2.0.0-6.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137612" version="1" class="patch">
	<metadata>
		<title>openssh-fips-7.9p1-4.7 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2015-8325" ref_url="https://www.suse.com/security/cve/CVE-2015-8325/" source="CVE"/>
		<reference ref_id="CVE-2016-0777" ref_url="https://www.suse.com/security/cve/CVE-2016-0777/" source="CVE"/>
		<reference ref_id="CVE-2016-0778" ref_url="https://www.suse.com/security/cve/CVE-2016-0778/" source="CVE"/>
		<reference ref_id="CVE-2016-10009" ref_url="https://www.suse.com/security/cve/CVE-2016-10009/" source="CVE"/>
		<reference ref_id="CVE-2016-10010" ref_url="https://www.suse.com/security/cve/CVE-2016-10010/" source="CVE"/>
		<reference ref_id="CVE-2016-10011" ref_url="https://www.suse.com/security/cve/CVE-2016-10011/" source="CVE"/>
		<reference ref_id="CVE-2016-10012" ref_url="https://www.suse.com/security/cve/CVE-2016-10012/" source="CVE"/>
		<reference ref_id="CVE-2016-6210" ref_url="https://www.suse.com/security/cve/CVE-2016-6210/" source="CVE"/>
		<reference ref_id="CVE-2016-6515" ref_url="https://www.suse.com/security/cve/CVE-2016-6515/" source="CVE"/>
		<reference ref_id="CVE-2016-8858" ref_url="https://www.suse.com/security/cve/CVE-2016-8858/" source="CVE"/>
		<reference ref_id="CVE-2018-15473" ref_url="https://www.suse.com/security/cve/CVE-2018-15473/" source="CVE"/>
		<reference ref_id="CVE-2018-20685" ref_url="https://www.suse.com/security/cve/CVE-2018-20685/" source="CVE"/>
		<reference ref_id="CVE-2019-6109" ref_url="https://www.suse.com/security/cve/CVE-2019-6109/" source="CVE"/>
		<reference ref_id="CVE-2019-6110" ref_url="https://www.suse.com/security/cve/CVE-2019-6110/" source="CVE"/>
		<reference ref_id="CVE-2019-6111" ref_url="https://www.suse.com/security/cve/CVE-2019-6111/" source="CVE"/>
		<description>
These are all security issues fixed in the openssh-fips-7.9p1-4.7 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8325/">CVE-2015-8325</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0777/">CVE-2016-0777</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0778/">CVE-2016-0778</cve>
	<cve impact="moderate" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-10009/">CVE-2016-10009</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10010/">CVE-2016-10010</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-10011/">CVE-2016-10011</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10012/">CVE-2016-10012</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6210/">CVE-2016-6210</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6515/">CVE-2016-6515</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8858/">CVE-2016-8858</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-15473/">CVE-2018-15473</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20685/">CVE-2018-20685</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6109/">CVE-2019-6109</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-6110/">CVE-2019-6110</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-6111/">CVE-2019-6111</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488406" comment="openssh-fips-7.9p1-4.7 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137613" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1092206" ref_url="https://bugzilla.suse.com/1092206" source="BUGZILLA"/>
		<reference ref_id="1122623" ref_url="https://bugzilla.suse.com/1122623" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3816" ref_url="https://www.suse.com/security/cve/CVE-2019-3816/" source="CVE"/>
		<reference ref_id="CVE-2019-3833" ref_url="https://www.suse.com/security/cve/CVE-2019-3833/" source="CVE"/>
		<description>
This update for openwsman fixes the following issues:

Security issues fixed:

- CVE-2019-3816: Fixed a vulnerability in openwsmand deamon which could lead to arbitary file disclosure (bsc#1122623).
- CVE-2019-3833: Fixed a vulnerability in process_connection() which could allow an attacker to trigger an infinite
  loop which leads to Denial of Service (bsc#1122623).

Other issues addressed:
  
- Added OpenSSL 1.1 compatibility
- Compilation in debug mode fixed
- Directory listing without authentication fixed (bsc#1092206).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-20"/>
	<updated date="2019-03-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1092206">SUSE bug 1092206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122623">SUSE bug 1122623</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-3816/">CVE-2019-3816</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3833/">CVE-2019-3833</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790170" comment="libwsman-devel-2.6.7-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790171" comment="libwsman3-2.6.7-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790172" comment="openwsman-server-2.6.7-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137614" version="1" class="patch">
	<metadata>
		<title>postgresql-contrib-10-6.8 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2017-14798" ref_url="https://www.suse.com/security/cve/CVE-2017-14798/" source="CVE"/>
		<description>
These are all security issues fixed in the postgresql-contrib-10-6.8 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14798/">CVE-2017-14798</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488255" comment="postgresql-contrib-10-6.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488256" comment="postgresql-devel-10-6.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488257" comment="postgresql-docs-10-6.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488258" comment="postgresql-plperl-10-6.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488259" comment="postgresql-plpython-10-6.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488260" comment="postgresql-pltcl-10-6.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488261" comment="postgresql-server-10-6.8 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137615" version="1" class="patch">
	<metadata>
		<title>python3-pywbem-0.11.0-2.21 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-6418" ref_url="https://www.suse.com/security/cve/CVE-2013-6418/" source="CVE"/>
		<description>
These are all security issues fixed in the python3-pywbem-0.11.0-2.21 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6418/">CVE-2013-6418</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488262" comment="python3-pywbem-0.11.0-2.21 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137616" version="1" class="patch">
	<metadata>
		<title>qemu-3.1.0-7.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-0222" ref_url="https://www.suse.com/security/cve/CVE-2014-0222/" source="CVE"/>
		<reference ref_id="CVE-2014-0223" ref_url="https://www.suse.com/security/cve/CVE-2014-0223/" source="CVE"/>
		<reference ref_id="CVE-2014-3461" ref_url="https://www.suse.com/security/cve/CVE-2014-3461/" source="CVE"/>
		<reference ref_id="CVE-2014-3640" ref_url="https://www.suse.com/security/cve/CVE-2014-3640/" source="CVE"/>
		<reference ref_id="CVE-2014-7840" ref_url="https://www.suse.com/security/cve/CVE-2014-7840/" source="CVE"/>
		<reference ref_id="CVE-2014-8106" ref_url="https://www.suse.com/security/cve/CVE-2014-8106/" source="CVE"/>
		<reference ref_id="CVE-2015-1779" ref_url="https://www.suse.com/security/cve/CVE-2015-1779/" source="CVE"/>
		<reference ref_id="CVE-2015-3209" ref_url="https://www.suse.com/security/cve/CVE-2015-3209/" source="CVE"/>
		<reference ref_id="CVE-2015-3456" ref_url="https://www.suse.com/security/cve/CVE-2015-3456/" source="CVE"/>
		<reference ref_id="CVE-2015-4037" ref_url="https://www.suse.com/security/cve/CVE-2015-4037/" source="CVE"/>
		<reference ref_id="CVE-2015-5154" ref_url="https://www.suse.com/security/cve/CVE-2015-5154/" source="CVE"/>
		<reference ref_id="CVE-2015-5225" ref_url="https://www.suse.com/security/cve/CVE-2015-5225/" source="CVE"/>
		<reference ref_id="CVE-2015-5278" ref_url="https://www.suse.com/security/cve/CVE-2015-5278/" source="CVE"/>
		<reference ref_id="CVE-2015-5279" ref_url="https://www.suse.com/security/cve/CVE-2015-5279/" source="CVE"/>
		<reference ref_id="CVE-2015-5745" ref_url="https://www.suse.com/security/cve/CVE-2015-5745/" source="CVE"/>
		<reference ref_id="CVE-2015-6815" ref_url="https://www.suse.com/security/cve/CVE-2015-6815/" source="CVE"/>
		<reference ref_id="CVE-2015-6855" ref_url="https://www.suse.com/security/cve/CVE-2015-6855/" source="CVE"/>
		<reference ref_id="CVE-2015-7295" ref_url="https://www.suse.com/security/cve/CVE-2015-7295/" source="CVE"/>
		<reference ref_id="CVE-2015-7512" ref_url="https://www.suse.com/security/cve/CVE-2015-7512/" source="CVE"/>
		<reference ref_id="CVE-2015-7549" ref_url="https://www.suse.com/security/cve/CVE-2015-7549/" source="CVE"/>
		<reference ref_id="CVE-2015-8345" ref_url="https://www.suse.com/security/cve/CVE-2015-8345/" source="CVE"/>
		<reference ref_id="CVE-2015-8504" ref_url="https://www.suse.com/security/cve/CVE-2015-8504/" source="CVE"/>
		<reference ref_id="CVE-2015-8558" ref_url="https://www.suse.com/security/cve/CVE-2015-8558/" source="CVE"/>
		<reference ref_id="CVE-2015-8567" ref_url="https://www.suse.com/security/cve/CVE-2015-8567/" source="CVE"/>
		<reference ref_id="CVE-2015-8568" ref_url="https://www.suse.com/security/cve/CVE-2015-8568/" source="CVE"/>
		<reference ref_id="CVE-2015-8613" ref_url="https://www.suse.com/security/cve/CVE-2015-8613/" source="CVE"/>
		<reference ref_id="CVE-2015-8619" ref_url="https://www.suse.com/security/cve/CVE-2015-8619/" source="CVE"/>
		<reference ref_id="CVE-2015-8743" ref_url="https://www.suse.com/security/cve/CVE-2015-8743/" source="CVE"/>
		<reference ref_id="CVE-2015-8744" ref_url="https://www.suse.com/security/cve/CVE-2015-8744/" source="CVE"/>
		<reference ref_id="CVE-2015-8745" ref_url="https://www.suse.com/security/cve/CVE-2015-8745/" source="CVE"/>
		<reference ref_id="CVE-2016-10028" ref_url="https://www.suse.com/security/cve/CVE-2016-10028/" source="CVE"/>
		<reference ref_id="CVE-2016-10155" ref_url="https://www.suse.com/security/cve/CVE-2016-10155/" source="CVE"/>
		<reference ref_id="CVE-2016-1568" ref_url="https://www.suse.com/security/cve/CVE-2016-1568/" source="CVE"/>
		<reference ref_id="CVE-2016-1714" ref_url="https://www.suse.com/security/cve/CVE-2016-1714/" source="CVE"/>
		<reference ref_id="CVE-2016-1922" ref_url="https://www.suse.com/security/cve/CVE-2016-1922/" source="CVE"/>
		<reference ref_id="CVE-2016-1981" ref_url="https://www.suse.com/security/cve/CVE-2016-1981/" source="CVE"/>
		<reference ref_id="CVE-2016-2198" ref_url="https://www.suse.com/security/cve/CVE-2016-2198/" source="CVE"/>
		<reference ref_id="CVE-2016-3710" ref_url="https://www.suse.com/security/cve/CVE-2016-3710/" source="CVE"/>
		<reference ref_id="CVE-2016-3712" ref_url="https://www.suse.com/security/cve/CVE-2016-3712/" source="CVE"/>
		<reference ref_id="CVE-2016-4002" ref_url="https://www.suse.com/security/cve/CVE-2016-4002/" source="CVE"/>
		<reference ref_id="CVE-2016-4020" ref_url="https://www.suse.com/security/cve/CVE-2016-4020/" source="CVE"/>
		<reference ref_id="CVE-2016-4439" ref_url="https://www.suse.com/security/cve/CVE-2016-4439/" source="CVE"/>
		<reference ref_id="CVE-2016-4441" ref_url="https://www.suse.com/security/cve/CVE-2016-4441/" source="CVE"/>
		<reference ref_id="CVE-2016-4453" ref_url="https://www.suse.com/security/cve/CVE-2016-4453/" source="CVE"/>
		<reference ref_id="CVE-2016-4454" ref_url="https://www.suse.com/security/cve/CVE-2016-4454/" source="CVE"/>
		<reference ref_id="CVE-2016-4952" ref_url="https://www.suse.com/security/cve/CVE-2016-4952/" source="CVE"/>
		<reference ref_id="CVE-2016-4964" ref_url="https://www.suse.com/security/cve/CVE-2016-4964/" source="CVE"/>
		<reference ref_id="CVE-2016-5105" ref_url="https://www.suse.com/security/cve/CVE-2016-5105/" source="CVE"/>
		<reference ref_id="CVE-2016-5106" ref_url="https://www.suse.com/security/cve/CVE-2016-5106/" source="CVE"/>
		<reference ref_id="CVE-2016-5107" ref_url="https://www.suse.com/security/cve/CVE-2016-5107/" source="CVE"/>
		<reference ref_id="CVE-2016-5126" ref_url="https://www.suse.com/security/cve/CVE-2016-5126/" source="CVE"/>
		<reference ref_id="CVE-2016-5238" ref_url="https://www.suse.com/security/cve/CVE-2016-5238/" source="CVE"/>
		<reference ref_id="CVE-2016-5337" ref_url="https://www.suse.com/security/cve/CVE-2016-5337/" source="CVE"/>
		<reference ref_id="CVE-2016-5338" ref_url="https://www.suse.com/security/cve/CVE-2016-5338/" source="CVE"/>
		<reference ref_id="CVE-2016-5403" ref_url="https://www.suse.com/security/cve/CVE-2016-5403/" source="CVE"/>
		<reference ref_id="CVE-2016-6351" ref_url="https://www.suse.com/security/cve/CVE-2016-6351/" source="CVE"/>
		<reference ref_id="CVE-2016-6490" ref_url="https://www.suse.com/security/cve/CVE-2016-6490/" source="CVE"/>
		<reference ref_id="CVE-2016-6833" ref_url="https://www.suse.com/security/cve/CVE-2016-6833/" source="CVE"/>
		<reference ref_id="CVE-2016-6836" ref_url="https://www.suse.com/security/cve/CVE-2016-6836/" source="CVE"/>
		<reference ref_id="CVE-2016-6888" ref_url="https://www.suse.com/security/cve/CVE-2016-6888/" source="CVE"/>
		<reference ref_id="CVE-2016-7116" ref_url="https://www.suse.com/security/cve/CVE-2016-7116/" source="CVE"/>
		<reference ref_id="CVE-2016-7155" ref_url="https://www.suse.com/security/cve/CVE-2016-7155/" source="CVE"/>
		<reference ref_id="CVE-2016-7156" ref_url="https://www.suse.com/security/cve/CVE-2016-7156/" source="CVE"/>
		<reference ref_id="CVE-2016-7157" ref_url="https://www.suse.com/security/cve/CVE-2016-7157/" source="CVE"/>
		<reference ref_id="CVE-2016-7161" ref_url="https://www.suse.com/security/cve/CVE-2016-7161/" source="CVE"/>
		<reference ref_id="CVE-2016-7170" ref_url="https://www.suse.com/security/cve/CVE-2016-7170/" source="CVE"/>
		<reference ref_id="CVE-2016-7421" ref_url="https://www.suse.com/security/cve/CVE-2016-7421/" source="CVE"/>
		<reference ref_id="CVE-2016-7422" ref_url="https://www.suse.com/security/cve/CVE-2016-7422/" source="CVE"/>
		<reference ref_id="CVE-2016-7423" ref_url="https://www.suse.com/security/cve/CVE-2016-7423/" source="CVE"/>
		<reference ref_id="CVE-2016-7466" ref_url="https://www.suse.com/security/cve/CVE-2016-7466/" source="CVE"/>
		<reference ref_id="CVE-2016-7907" ref_url="https://www.suse.com/security/cve/CVE-2016-7907/" source="CVE"/>
		<reference ref_id="CVE-2016-7908" ref_url="https://www.suse.com/security/cve/CVE-2016-7908/" source="CVE"/>
		<reference ref_id="CVE-2016-7909" ref_url="https://www.suse.com/security/cve/CVE-2016-7909/" source="CVE"/>
		<reference ref_id="CVE-2016-7994" ref_url="https://www.suse.com/security/cve/CVE-2016-7994/" source="CVE"/>
		<reference ref_id="CVE-2016-7995" ref_url="https://www.suse.com/security/cve/CVE-2016-7995/" source="CVE"/>
		<reference ref_id="CVE-2016-8576" ref_url="https://www.suse.com/security/cve/CVE-2016-8576/" source="CVE"/>
		<reference ref_id="CVE-2016-8577" ref_url="https://www.suse.com/security/cve/CVE-2016-8577/" source="CVE"/>
		<reference ref_id="CVE-2016-8578" ref_url="https://www.suse.com/security/cve/CVE-2016-8578/" source="CVE"/>
		<reference ref_id="CVE-2016-8667" ref_url="https://www.suse.com/security/cve/CVE-2016-8667/" source="CVE"/>
		<reference ref_id="CVE-2016-8668" ref_url="https://www.suse.com/security/cve/CVE-2016-8668/" source="CVE"/>
		<reference ref_id="CVE-2016-8669" ref_url="https://www.suse.com/security/cve/CVE-2016-8669/" source="CVE"/>
		<reference ref_id="CVE-2016-8909" ref_url="https://www.suse.com/security/cve/CVE-2016-8909/" source="CVE"/>
		<reference ref_id="CVE-2016-8910" ref_url="https://www.suse.com/security/cve/CVE-2016-8910/" source="CVE"/>
		<reference ref_id="CVE-2016-9101" ref_url="https://www.suse.com/security/cve/CVE-2016-9101/" source="CVE"/>
		<reference ref_id="CVE-2016-9102" ref_url="https://www.suse.com/security/cve/CVE-2016-9102/" source="CVE"/>
		<reference ref_id="CVE-2016-9103" ref_url="https://www.suse.com/security/cve/CVE-2016-9103/" source="CVE"/>
		<reference ref_id="CVE-2016-9104" ref_url="https://www.suse.com/security/cve/CVE-2016-9104/" source="CVE"/>
		<reference ref_id="CVE-2016-9105" ref_url="https://www.suse.com/security/cve/CVE-2016-9105/" source="CVE"/>
		<reference ref_id="CVE-2016-9106" ref_url="https://www.suse.com/security/cve/CVE-2016-9106/" source="CVE"/>
		<reference ref_id="CVE-2016-9381" ref_url="https://www.suse.com/security/cve/CVE-2016-9381/" source="CVE"/>
		<reference ref_id="CVE-2016-9602" ref_url="https://www.suse.com/security/cve/CVE-2016-9602/" source="CVE"/>
		<reference ref_id="CVE-2016-9776" ref_url="https://www.suse.com/security/cve/CVE-2016-9776/" source="CVE"/>
		<reference ref_id="CVE-2016-9845" ref_url="https://www.suse.com/security/cve/CVE-2016-9845/" source="CVE"/>
		<reference ref_id="CVE-2016-9846" ref_url="https://www.suse.com/security/cve/CVE-2016-9846/" source="CVE"/>
		<reference ref_id="CVE-2016-9907" ref_url="https://www.suse.com/security/cve/CVE-2016-9907/" source="CVE"/>
		<reference ref_id="CVE-2016-9908" ref_url="https://www.suse.com/security/cve/CVE-2016-9908/" source="CVE"/>
		<reference ref_id="CVE-2016-9911" ref_url="https://www.suse.com/security/cve/CVE-2016-9911/" source="CVE"/>
		<reference ref_id="CVE-2016-9912" ref_url="https://www.suse.com/security/cve/CVE-2016-9912/" source="CVE"/>
		<reference ref_id="CVE-2016-9913" ref_url="https://www.suse.com/security/cve/CVE-2016-9913/" source="CVE"/>
		<reference ref_id="CVE-2016-9921" ref_url="https://www.suse.com/security/cve/CVE-2016-9921/" source="CVE"/>
		<reference ref_id="CVE-2016-9922" ref_url="https://www.suse.com/security/cve/CVE-2016-9922/" source="CVE"/>
		<reference ref_id="CVE-2016-9923" ref_url="https://www.suse.com/security/cve/CVE-2016-9923/" source="CVE"/>
		<reference ref_id="CVE-2017-10664" ref_url="https://www.suse.com/security/cve/CVE-2017-10664/" source="CVE"/>
		<reference ref_id="CVE-2017-10806" ref_url="https://www.suse.com/security/cve/CVE-2017-10806/" source="CVE"/>
		<reference ref_id="CVE-2017-11334" ref_url="https://www.suse.com/security/cve/CVE-2017-11334/" source="CVE"/>
		<reference ref_id="CVE-2017-11434" ref_url="https://www.suse.com/security/cve/CVE-2017-11434/" source="CVE"/>
		<reference ref_id="CVE-2017-13672" ref_url="https://www.suse.com/security/cve/CVE-2017-13672/" source="CVE"/>
		<reference ref_id="CVE-2017-13673" ref_url="https://www.suse.com/security/cve/CVE-2017-13673/" source="CVE"/>
		<reference ref_id="CVE-2017-13711" ref_url="https://www.suse.com/security/cve/CVE-2017-13711/" source="CVE"/>
		<reference ref_id="CVE-2017-14167" ref_url="https://www.suse.com/security/cve/CVE-2017-14167/" source="CVE"/>
		<reference ref_id="CVE-2017-15038" ref_url="https://www.suse.com/security/cve/CVE-2017-15038/" source="CVE"/>
		<reference ref_id="CVE-2017-15118" ref_url="https://www.suse.com/security/cve/CVE-2017-15118/" source="CVE"/>
		<reference ref_id="CVE-2017-15119" ref_url="https://www.suse.com/security/cve/CVE-2017-15119/" source="CVE"/>
		<reference ref_id="CVE-2017-15268" ref_url="https://www.suse.com/security/cve/CVE-2017-15268/" source="CVE"/>
		<reference ref_id="CVE-2017-15289" ref_url="https://www.suse.com/security/cve/CVE-2017-15289/" source="CVE"/>
		<reference ref_id="CVE-2017-2615" ref_url="https://www.suse.com/security/cve/CVE-2017-2615/" source="CVE"/>
		<reference ref_id="CVE-2017-2620" ref_url="https://www.suse.com/security/cve/CVE-2017-2620/" source="CVE"/>
		<reference ref_id="CVE-2017-2630" ref_url="https://www.suse.com/security/cve/CVE-2017-2630/" source="CVE"/>
		<reference ref_id="CVE-2017-2633" ref_url="https://www.suse.com/security/cve/CVE-2017-2633/" source="CVE"/>
		<reference ref_id="CVE-2017-5525" ref_url="https://www.suse.com/security/cve/CVE-2017-5525/" source="CVE"/>
		<reference ref_id="CVE-2017-5526" ref_url="https://www.suse.com/security/cve/CVE-2017-5526/" source="CVE"/>
		<reference ref_id="CVE-2017-5552" ref_url="https://www.suse.com/security/cve/CVE-2017-5552/" source="CVE"/>
		<reference ref_id="CVE-2017-5578" ref_url="https://www.suse.com/security/cve/CVE-2017-5578/" source="CVE"/>
		<reference ref_id="CVE-2017-5579" ref_url="https://www.suse.com/security/cve/CVE-2017-5579/" source="CVE"/>
		<reference ref_id="CVE-2017-5667" ref_url="https://www.suse.com/security/cve/CVE-2017-5667/" source="CVE"/>
		<reference ref_id="CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715/" source="CVE"/>
		<reference ref_id="CVE-2017-5856" ref_url="https://www.suse.com/security/cve/CVE-2017-5856/" source="CVE"/>
		<reference ref_id="CVE-2017-5857" ref_url="https://www.suse.com/security/cve/CVE-2017-5857/" source="CVE"/>
		<reference ref_id="CVE-2017-5898" ref_url="https://www.suse.com/security/cve/CVE-2017-5898/" source="CVE"/>
		<reference ref_id="CVE-2017-5931" ref_url="https://www.suse.com/security/cve/CVE-2017-5931/" source="CVE"/>
		<reference ref_id="CVE-2017-5973" ref_url="https://www.suse.com/security/cve/CVE-2017-5973/" source="CVE"/>
		<reference ref_id="CVE-2017-5987" ref_url="https://www.suse.com/security/cve/CVE-2017-5987/" source="CVE"/>
		<reference ref_id="CVE-2017-6058" ref_url="https://www.suse.com/security/cve/CVE-2017-6058/" source="CVE"/>
		<reference ref_id="CVE-2017-6505" ref_url="https://www.suse.com/security/cve/CVE-2017-6505/" source="CVE"/>
		<reference ref_id="CVE-2017-7471" ref_url="https://www.suse.com/security/cve/CVE-2017-7471/" source="CVE"/>
		<reference ref_id="CVE-2017-7493" ref_url="https://www.suse.com/security/cve/CVE-2017-7493/" source="CVE"/>
		<reference ref_id="CVE-2017-8112" ref_url="https://www.suse.com/security/cve/CVE-2017-8112/" source="CVE"/>
		<reference ref_id="CVE-2017-8309" ref_url="https://www.suse.com/security/cve/CVE-2017-8309/" source="CVE"/>
		<reference ref_id="CVE-2017-8379" ref_url="https://www.suse.com/security/cve/CVE-2017-8379/" source="CVE"/>
		<reference ref_id="CVE-2017-8380" ref_url="https://www.suse.com/security/cve/CVE-2017-8380/" source="CVE"/>
		<reference ref_id="CVE-2017-9503" ref_url="https://www.suse.com/security/cve/CVE-2017-9503/" source="CVE"/>
		<reference ref_id="CVE-2017-9524" ref_url="https://www.suse.com/security/cve/CVE-2017-9524/" source="CVE"/>
		<reference ref_id="CVE-2018-10839" ref_url="https://www.suse.com/security/cve/CVE-2018-10839/" source="CVE"/>
		<reference ref_id="CVE-2018-11806" ref_url="https://www.suse.com/security/cve/CVE-2018-11806/" source="CVE"/>
		<reference ref_id="CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126/" source="CVE"/>
		<reference ref_id="CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127/" source="CVE"/>
		<reference ref_id="CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130/" source="CVE"/>
		<reference ref_id="CVE-2018-12617" ref_url="https://www.suse.com/security/cve/CVE-2018-12617/" source="CVE"/>
		<reference ref_id="CVE-2018-15746" ref_url="https://www.suse.com/security/cve/CVE-2018-15746/" source="CVE"/>
		<reference ref_id="CVE-2018-16847" ref_url="https://www.suse.com/security/cve/CVE-2018-16847/" source="CVE"/>
		<reference ref_id="CVE-2018-16872" ref_url="https://www.suse.com/security/cve/CVE-2018-16872/" source="CVE"/>
		<reference ref_id="CVE-2018-17958" ref_url="https://www.suse.com/security/cve/CVE-2018-17958/" source="CVE"/>
		<reference ref_id="CVE-2018-17962" ref_url="https://www.suse.com/security/cve/CVE-2018-17962/" source="CVE"/>
		<reference ref_id="CVE-2018-17963" ref_url="https://www.suse.com/security/cve/CVE-2018-17963/" source="CVE"/>
		<reference ref_id="CVE-2018-18849" ref_url="https://www.suse.com/security/cve/CVE-2018-18849/" source="CVE"/>
		<reference ref_id="CVE-2018-20123" ref_url="https://www.suse.com/security/cve/CVE-2018-20123/" source="CVE"/>
		<reference ref_id="CVE-2018-20124" ref_url="https://www.suse.com/security/cve/CVE-2018-20124/" source="CVE"/>
		<reference ref_id="CVE-2018-20125" ref_url="https://www.suse.com/security/cve/CVE-2018-20125/" source="CVE"/>
		<reference ref_id="CVE-2018-20126" ref_url="https://www.suse.com/security/cve/CVE-2018-20126/" source="CVE"/>
		<reference ref_id="CVE-2018-20191" ref_url="https://www.suse.com/security/cve/CVE-2018-20191/" source="CVE"/>
		<reference ref_id="CVE-2018-20216" ref_url="https://www.suse.com/security/cve/CVE-2018-20216/" source="CVE"/>
		<reference ref_id="CVE-2018-20815" ref_url="https://www.suse.com/security/cve/CVE-2018-20815/" source="CVE"/>
		<reference ref_id="CVE-2018-3639" ref_url="https://www.suse.com/security/cve/CVE-2018-3639/" source="CVE"/>
		<reference ref_id="CVE-2018-7550" ref_url="https://www.suse.com/security/cve/CVE-2018-7550/" source="CVE"/>
		<reference ref_id="CVE-2018-7858" ref_url="https://www.suse.com/security/cve/CVE-2018-7858/" source="CVE"/>
		<reference ref_id="CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091/" source="CVE"/>
		<reference ref_id="CVE-2019-3812" ref_url="https://www.suse.com/security/cve/CVE-2019-3812/" source="CVE"/>
		<reference ref_id="CVE-2019-6778" ref_url="https://www.suse.com/security/cve/CVE-2019-6778/" source="CVE"/>
		<reference ref_id="CVE-2019-8934" ref_url="https://www.suse.com/security/cve/CVE-2019-8934/" source="CVE"/>
		<reference ref_id="CVE-2019-9824" ref_url="https://www.suse.com/security/cve/CVE-2019-9824/" source="CVE"/>
		<description>
These are all security issues fixed in the qemu-3.1.0-7.1 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0222/">CVE-2014-0222</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0223/">CVE-2014-0223</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3461/">CVE-2014-3461</cve>
	<cve href="https://www.suse.com/security/cve/CVE-2014-3640/">CVE-2014-3640</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7840/">CVE-2014-7840</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8106/">CVE-2014-8106</cve>
	<cve impact="moderate" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-1779/">CVE-2015-1779</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-3209/">CVE-2015-3209</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3456/">CVE-2015-3456</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-4037/">CVE-2015-4037</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5154/">CVE-2015-5154</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5225/">CVE-2015-5225</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5278/">CVE-2015-5278</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5279/">CVE-2015-5279</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5745/">CVE-2015-5745</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-6815/">CVE-2015-6815</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6855/">CVE-2015-6855</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7295/">CVE-2015-7295</cve>
	<cve impact="important" cvss3="9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7512/">CVE-2015-7512</cve>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7549/">CVE-2015-7549</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8345/">CVE-2015-8345</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8504/">CVE-2015-8504</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8558/">CVE-2015-8558</cve>
	<cve impact="low" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8567/">CVE-2015-8567</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8568/">CVE-2015-8568</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8613/">CVE-2015-8613</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8619/">CVE-2015-8619</cve>
	<cve impact="moderate" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-8743/">CVE-2015-8743</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8744/">CVE-2015-8744</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8745/">CVE-2015-8745</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-10028/">CVE-2016-10028</cve>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10155/">CVE-2016-10155</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1568/">CVE-2016-1568</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1714/">CVE-2016-1714</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1922/">CVE-2016-1922</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1981/">CVE-2016-1981</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2198/">CVE-2016-2198</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-3710/">CVE-2016-3710</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3712/">CVE-2016-3712</cve>
	<cve impact="moderate" cvss3="9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4002/">CVE-2016-4002</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-4020/">CVE-2016-4020</cve>
	<cve impact="low" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4439/">CVE-2016-4439</cve>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4441/">CVE-2016-4441</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4453/">CVE-2016-4453</cve>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4454/">CVE-2016-4454</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4952/">CVE-2016-4952</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4964/">CVE-2016-4964</cve>
	<cve impact="low" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5105/">CVE-2016-5105</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5106/">CVE-2016-5106</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5107/">CVE-2016-5107</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5126/">CVE-2016-5126</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5238/">CVE-2016-5238</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5337/">CVE-2016-5337</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5338/">CVE-2016-5338</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5403/">CVE-2016-5403</cve>
	<cve impact="low" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6351/">CVE-2016-6351</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6490/">CVE-2016-6490</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6833/">CVE-2016-6833</cve>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-6836/">CVE-2016-6836</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6888/">CVE-2016-6888</cve>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-7116/">CVE-2016-7116</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7155/">CVE-2016-7155</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7156/">CVE-2016-7156</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7157/">CVE-2016-7157</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7161/">CVE-2016-7161</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7170/">CVE-2016-7170</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7421/">CVE-2016-7421</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7422/">CVE-2016-7422</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7423/">CVE-2016-7423</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7466/">CVE-2016-7466</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7907/">CVE-2016-7907</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7908/">CVE-2016-7908</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7909/">CVE-2016-7909</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7994/">CVE-2016-7994</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7995/">CVE-2016-7995</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8576/">CVE-2016-8576</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8577/">CVE-2016-8577</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8578/">CVE-2016-8578</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8667/">CVE-2016-8667</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8668/">CVE-2016-8668</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8669/">CVE-2016-8669</cve>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8909/">CVE-2016-8909</cve>
	<cve impact="low" cvss3="3/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8910/">CVE-2016-8910</cve>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9101/">CVE-2016-9101</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9102/">CVE-2016-9102</cve>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9103/">CVE-2016-9103</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9104/">CVE-2016-9104</cve>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9105/">CVE-2016-9105</cve>
	<cve impact="low" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9106/">CVE-2016-9106</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9381/">CVE-2016-9381</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9602/">CVE-2016-9602</cve>
	<cve impact="low" cvss3="3/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9776/">CVE-2016-9776</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9845/">CVE-2016-9845</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9846/">CVE-2016-9846</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9907/">CVE-2016-9907</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9908/">CVE-2016-9908</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9911/">CVE-2016-9911</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9912/">CVE-2016-9912</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9913/">CVE-2016-9913</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9921/">CVE-2016-9921</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9922/">CVE-2016-9922</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9923/">CVE-2016-9923</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-10664/">CVE-2017-10664</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-10806/">CVE-2017-10806</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11334/">CVE-2017-11334</cve>
	<cve impact="important" cvss3="8.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11434/">CVE-2017-11434</cve>
	<cve impact="low" cvss3="3/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13672/">CVE-2017-13672</cve>
	<cve impact="low" cvss3="3/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13673/">CVE-2017-13673</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13711/">CVE-2017-13711</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14167/">CVE-2017-14167</cve>
	<cve impact="low" cvss3="3/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15038/">CVE-2017-15038</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15118/">CVE-2017-15118</cve>
	<cve impact="low" cvss3="5.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15119/">CVE-2017-15119</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15268/">CVE-2017-15268</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15289/">CVE-2017-15289</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-2615/">CVE-2017-2615</cve>
	<cve impact="moderate" cvss3="9.9/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2620/">CVE-2017-2620</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2630/">CVE-2017-2630</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2633/">CVE-2017-2633</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5525/">CVE-2017-5525</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5526/">CVE-2017-5526</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5552/">CVE-2017-5552</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5578/">CVE-2017-5578</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5579/">CVE-2017-5579</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5667/">CVE-2017-5667</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5856/">CVE-2017-5856</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5857/">CVE-2017-5857</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5898/">CVE-2017-5898</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-5931/">CVE-2017-5931</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5973/">CVE-2017-5973</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5987/">CVE-2017-5987</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6058/">CVE-2017-6058</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6505/">CVE-2017-6505</cve>
	<cve impact="moderate" cvss3="9/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7471/">CVE-2017-7471</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7493/">CVE-2017-7493</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8112/">CVE-2017-8112</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8309/">CVE-2017-8309</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8379/">CVE-2017-8379</cve>
	<cve impact="low" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8380/">CVE-2017-8380</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9503/">CVE-2017-9503</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9524/">CVE-2017-9524</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-10839/">CVE-2018-10839</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11806/">CVE-2018-11806</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12617/">CVE-2018-12617</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-15746/">CVE-2018-15746</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16847/">CVE-2018-16847</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16872/">CVE-2018-16872</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-17958/">CVE-2018-17958</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-17962/">CVE-2018-17962</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-17963/">CVE-2018-17963</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-18849/">CVE-2018-18849</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20123/">CVE-2018-20123</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20124/">CVE-2018-20124</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20125/">CVE-2018-20125</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20126/">CVE-2018-20126</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20191/">CVE-2018-20191</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20216/">CVE-2018-20216</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-20815/">CVE-2018-20815</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3639/">CVE-2018-3639</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-7550/">CVE-2018-7550</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7858/">CVE-2018-7858</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-3812/">CVE-2019-3812</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6778/">CVE-2019-6778</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8934/">CVE-2019-8934</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9824/">CVE-2019-9824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488410" comment="qemu-3.1.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488411" comment="qemu-audio-alsa-3.1.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488412" comment="qemu-audio-oss-3.1.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488413" comment="qemu-audio-pa-3.1.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488414" comment="qemu-block-curl-3.1.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488415" comment="qemu-block-iscsi-3.1.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488416" comment="qemu-block-rbd-3.1.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488417" comment="qemu-block-ssh-3.1.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488418" comment="qemu-guest-agent-3.1.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488419" comment="qemu-ipxe-1.0.0+-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488420" comment="qemu-kvm-3.1.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488421" comment="qemu-lang-3.1.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488422" comment="qemu-ppc-3.1.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488423" comment="qemu-s390-3.1.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488424" comment="qemu-seabios-1.12.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488425" comment="qemu-sgabios-8-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488426" comment="qemu-ui-curses-3.1.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488427" comment="qemu-ui-gtk-3.1.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488428" comment="qemu-vgabios-1.12.0-7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488429" comment="qemu-x86-3.1.0-7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137617" version="1" class="patch">
	<metadata>
		<title>rarpd-s20161105-6.10 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-2529" ref_url="https://www.suse.com/security/cve/CVE-2010-2529/" source="CVE"/>
		<description>
These are all security issues fixed in the rarpd-s20161105-6.10 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-2529/">CVE-2010-2529</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488276" comment="rarpd-s20161105-6.10 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137618" version="1" class="patch">
	<metadata>
		<title>rmt-server-1.2.2-1.15 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-14404" ref_url="https://www.suse.com/security/cve/CVE-2018-14404/" source="CVE"/>
		<reference ref_id="CVE-2018-16468" ref_url="https://www.suse.com/security/cve/CVE-2018-16468/" source="CVE"/>
		<reference ref_id="CVE-2018-16470" ref_url="https://www.suse.com/security/cve/CVE-2018-16470/" source="CVE"/>
		<description>
These are all security issues fixed in the rmt-server-1.2.2-1.15 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14404/">CVE-2018-14404</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16468/">CVE-2018-16468</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16470/">CVE-2018-16470</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488430" comment="rmt-server-1.2.2-1.15 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137619" version="1" class="patch">
	<metadata>
		<title>rsyslog-module-gssapi-8.33.1-3.9.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2011-3200" ref_url="https://www.suse.com/security/cve/CVE-2011-3200/" source="CVE"/>
		<reference ref_id="CVE-2013-4758" ref_url="https://www.suse.com/security/cve/CVE-2013-4758/" source="CVE"/>
		<reference ref_id="CVE-2013-6370" ref_url="https://www.suse.com/security/cve/CVE-2013-6370/" source="CVE"/>
		<reference ref_id="CVE-2013-6371" ref_url="https://www.suse.com/security/cve/CVE-2013-6371/" source="CVE"/>
		<reference ref_id="CVE-2014-3634" ref_url="https://www.suse.com/security/cve/CVE-2014-3634/" source="CVE"/>
		<reference ref_id="CVE-2014-3683" ref_url="https://www.suse.com/security/cve/CVE-2014-3683/" source="CVE"/>
		<reference ref_id="CVE-2015-3243" ref_url="https://www.suse.com/security/cve/CVE-2015-3243/" source="CVE"/>
		<description>
These are all security issues fixed in the rsyslog-module-gssapi-8.33.1-3.9.1 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-3200/">CVE-2011-3200</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4758/">CVE-2013-4758</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6370/">CVE-2013-6370</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6371/">CVE-2013-6371</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3634/">CVE-2014-3634</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3683/">CVE-2014-3683</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2015-3243/">CVE-2015-3243</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488431" comment="rsyslog-module-gssapi-8.33.1-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488432" comment="rsyslog-module-gtls-8.33.1-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488433" comment="rsyslog-module-mysql-8.33.1-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488434" comment="rsyslog-module-pgsql-8.33.1-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488435" comment="rsyslog-module-relp-8.33.1-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488436" comment="rsyslog-module-snmp-8.33.1-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488437" comment="rsyslog-module-udpspoof-8.33.1-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137620" version="1" class="patch">
	<metadata>
		<title>salt-api-2019.2.0-4.4 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2016-1866" ref_url="https://www.suse.com/security/cve/CVE-2016-1866/" source="CVE"/>
		<reference ref_id="CVE-2016-9639" ref_url="https://www.suse.com/security/cve/CVE-2016-9639/" source="CVE"/>
		<reference ref_id="CVE-2017-12791" ref_url="https://www.suse.com/security/cve/CVE-2017-12791/" source="CVE"/>
		<reference ref_id="CVE-2017-14695" ref_url="https://www.suse.com/security/cve/CVE-2017-14695/" source="CVE"/>
		<reference ref_id="CVE-2017-14696" ref_url="https://www.suse.com/security/cve/CVE-2017-14696/" source="CVE"/>
		<reference ref_id="CVE-2018-15750" ref_url="https://www.suse.com/security/cve/CVE-2018-15750/" source="CVE"/>
		<reference ref_id="CVE-2018-15751" ref_url="https://www.suse.com/security/cve/CVE-2018-15751/" source="CVE"/>
		<description>
These are all security issues fixed in the salt-api-2019.2.0-4.4 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1866/">CVE-2016-1866</cve>
	<cve impact="low" cvss3="9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9639/">CVE-2016-9639</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-12791/">CVE-2017-12791</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-14695/">CVE-2017-14695</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14696/">CVE-2017-14696</cve>
	<cve impact="important" cvss3="8.7/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-15750/">CVE-2018-15750</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15751/">CVE-2018-15751</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488438" comment="salt-api-2019.2.0-4.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488439" comment="salt-cloud-2019.2.0-4.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488440" comment="salt-fish-completion-2019.2.0-4.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488441" comment="salt-master-2019.2.0-4.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488442" comment="salt-proxy-2019.2.0-4.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488443" comment="salt-ssh-2019.2.0-4.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488444" comment="salt-syndic-2019.2.0-4.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137621" version="1" class="patch">
	<metadata>
		<title>sblim-sfcb-1.4.9-3.7 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-6644" ref_url="https://www.suse.com/security/cve/CVE-2018-6644/" source="CVE"/>
		<description>
These are all security issues fixed in the sblim-sfcb-1.4.9-3.7 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6644/">CVE-2018-6644</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488290" comment="sblim-sfcb-1.4.9-3.7 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137622" version="1" class="patch">
	<metadata>
		<title>spice-gtk-devel-0.35-1.48 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-10873" ref_url="https://www.suse.com/security/cve/CVE-2018-10873/" source="CVE"/>
		<reference ref_id="CVE-2018-10893" ref_url="https://www.suse.com/security/cve/CVE-2018-10893/" source="CVE"/>
		<description>
These are all security issues fixed in the spice-gtk-devel-0.35-1.48 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10873/">CVE-2018-10873</cve>
	<cve impact="moderate" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2018-10893/">CVE-2018-10893</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488446" comment="spice-gtk-devel-0.35-1.48 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488447" comment="typelib-1_0-SpiceClientGlib-2_0-0.35-1.48 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488448" comment="typelib-1_0-SpiceClientGtk-3_0-0.35-1.48 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137623" version="1" class="patch">
	<metadata>
		<title>squid-4.4-5.3.2 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1082318" ref_url="https://bugzilla.suse.com/1082318" source="BUGZILLA"/>
		<reference ref_id="1112066" ref_url="https://bugzilla.suse.com/1112066" source="BUGZILLA"/>
		<reference ref_id="1112695" ref_url="https://bugzilla.suse.com/1112695" source="BUGZILLA"/>
		<reference ref_id="1113668" ref_url="https://bugzilla.suse.com/1113668" source="BUGZILLA"/>
		<reference ref_id="1113669" ref_url="https://bugzilla.suse.com/1113669" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19131" ref_url="https://www.suse.com/security/cve/CVE-2018-19131/" source="CVE"/>
		<reference ref_id="CVE-2018-19132" ref_url="https://www.suse.com/security/cve/CVE-2018-19132/" source="CVE"/>
		<description>
This update for squid fixes the following issues:

Security issues fixed:

- CVE-2018-19131: Fixed Cross-Site-Scripting vulnerability in the TLS error handling (bsc#1113668).
- CVE-2018-19132: Fixed small memory leak in processing of SNMP packets (bsc#1113669).

Non-security issues fixed:

- Create runtime directories needed when SMP mode is enabled (bsc#1112695, bsc#1112066).
- Install license correctly (bsc#1082318).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-11-16"/>
	<updated date="2018-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1082318">SUSE bug 1082318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112066">SUSE bug 1112066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112695">SUSE bug 1112695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113668">SUSE bug 1113668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113669">SUSE bug 1113669</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-19131/">CVE-2018-19131</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19132/">CVE-2018-19132</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708400" comment="squid-4.4-5.3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137624" version="1" class="patch">
	<metadata>
		<title>stunnel-5.44-1.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2010-3864" ref_url="https://www.suse.com/security/cve/CVE-2010-3864/" source="CVE"/>
		<reference ref_id="CVE-2011-2940" ref_url="https://www.suse.com/security/cve/CVE-2011-2940/" source="CVE"/>
		<reference ref_id="CVE-2013-1762" ref_url="https://www.suse.com/security/cve/CVE-2013-1762/" source="CVE"/>
		<reference ref_id="CVE-2014-0016" ref_url="https://www.suse.com/security/cve/CVE-2014-0016/" source="CVE"/>
		<reference ref_id="CVE-2014-0160" ref_url="https://www.suse.com/security/cve/CVE-2014-0160/" source="CVE"/>
		<description>
These are all security issues fixed in the stunnel-5.44-1.29 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-3864/">CVE-2010-3864</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2011-2940/">CVE-2011-2940</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-1762/">CVE-2013-1762</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0016/">CVE-2014-0016</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-0160/">CVE-2014-0160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488296" comment="stunnel-5.44-1.29 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137625" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122842" ref_url="https://bugzilla.suse.com/1122842" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11803" ref_url="https://www.suse.com/security/cve/CVE-2018-11803/" source="CVE"/>
		<description>
This update for subversion fixes the following issues:

Security issue fixed:

- CVE-2018-11803: Fixed a vulnerability that allowed malicious SVN clients to trigger a crash 
  in mod_dav_svn by omitting the root path from a recursive directory listing request (bsc#1122842)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-01-29"/>
	<updated date="2019-01-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1122842">SUSE bug 1122842</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11803/">CVE-2018-11803</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790173" comment="subversion-server-1.10.0-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137626" version="1" class="patch">
	<metadata>
		<title>subversion-server-1.10.0-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2009-2411" ref_url="https://www.suse.com/security/cve/CVE-2009-2411/" source="CVE"/>
		<reference ref_id="CVE-2010-3315" ref_url="https://www.suse.com/security/cve/CVE-2010-3315/" source="CVE"/>
		<reference ref_id="CVE-2010-4539" ref_url="https://www.suse.com/security/cve/CVE-2010-4539/" source="CVE"/>
		<reference ref_id="CVE-2010-4644" ref_url="https://www.suse.com/security/cve/CVE-2010-4644/" source="CVE"/>
		<reference ref_id="CVE-2011-0715" ref_url="https://www.suse.com/security/cve/CVE-2011-0715/" source="CVE"/>
		<reference ref_id="CVE-2011-1752" ref_url="https://www.suse.com/security/cve/CVE-2011-1752/" source="CVE"/>
		<reference ref_id="CVE-2011-1783" ref_url="https://www.suse.com/security/cve/CVE-2011-1783/" source="CVE"/>
		<reference ref_id="CVE-2011-1921" ref_url="https://www.suse.com/security/cve/CVE-2011-1921/" source="CVE"/>
		<reference ref_id="CVE-2013-1845" ref_url="https://www.suse.com/security/cve/CVE-2013-1845/" source="CVE"/>
		<reference ref_id="CVE-2013-1846" ref_url="https://www.suse.com/security/cve/CVE-2013-1846/" source="CVE"/>
		<reference ref_id="CVE-2013-1847" ref_url="https://www.suse.com/security/cve/CVE-2013-1847/" source="CVE"/>
		<reference ref_id="CVE-2013-1849" ref_url="https://www.suse.com/security/cve/CVE-2013-1849/" source="CVE"/>
		<reference ref_id="CVE-2013-1884" ref_url="https://www.suse.com/security/cve/CVE-2013-1884/" source="CVE"/>
		<reference ref_id="CVE-2013-1968" ref_url="https://www.suse.com/security/cve/CVE-2013-1968/" source="CVE"/>
		<reference ref_id="CVE-2013-2088" ref_url="https://www.suse.com/security/cve/CVE-2013-2088/" source="CVE"/>
		<reference ref_id="CVE-2013-2112" ref_url="https://www.suse.com/security/cve/CVE-2013-2112/" source="CVE"/>
		<reference ref_id="CVE-2013-4131" ref_url="https://www.suse.com/security/cve/CVE-2013-4131/" source="CVE"/>
		<reference ref_id="CVE-2013-4246" ref_url="https://www.suse.com/security/cve/CVE-2013-4246/" source="CVE"/>
		<reference ref_id="CVE-2013-4262" ref_url="https://www.suse.com/security/cve/CVE-2013-4262/" source="CVE"/>
		<reference ref_id="CVE-2013-4277" ref_url="https://www.suse.com/security/cve/CVE-2013-4277/" source="CVE"/>
		<reference ref_id="CVE-2013-4505" ref_url="https://www.suse.com/security/cve/CVE-2013-4505/" source="CVE"/>
		<reference ref_id="CVE-2013-4558" ref_url="https://www.suse.com/security/cve/CVE-2013-4558/" source="CVE"/>
		<reference ref_id="CVE-2014-0032" ref_url="https://www.suse.com/security/cve/CVE-2014-0032/" source="CVE"/>
		<reference ref_id="CVE-2014-3522" ref_url="https://www.suse.com/security/cve/CVE-2014-3522/" source="CVE"/>
		<reference ref_id="CVE-2014-3528" ref_url="https://www.suse.com/security/cve/CVE-2014-3528/" source="CVE"/>
		<reference ref_id="CVE-2014-3580" ref_url="https://www.suse.com/security/cve/CVE-2014-3580/" source="CVE"/>
		<reference ref_id="CVE-2014-8108" ref_url="https://www.suse.com/security/cve/CVE-2014-8108/" source="CVE"/>
		<reference ref_id="CVE-2015-0202" ref_url="https://www.suse.com/security/cve/CVE-2015-0202/" source="CVE"/>
		<reference ref_id="CVE-2015-0248" ref_url="https://www.suse.com/security/cve/CVE-2015-0248/" source="CVE"/>
		<reference ref_id="CVE-2015-0251" ref_url="https://www.suse.com/security/cve/CVE-2015-0251/" source="CVE"/>
		<reference ref_id="CVE-2015-3184" ref_url="https://www.suse.com/security/cve/CVE-2015-3184/" source="CVE"/>
		<reference ref_id="CVE-2015-3187" ref_url="https://www.suse.com/security/cve/CVE-2015-3187/" source="CVE"/>
		<reference ref_id="CVE-2015-5259" ref_url="https://www.suse.com/security/cve/CVE-2015-5259/" source="CVE"/>
		<reference ref_id="CVE-2015-5343" ref_url="https://www.suse.com/security/cve/CVE-2015-5343/" source="CVE"/>
		<reference ref_id="CVE-2016-2167" ref_url="https://www.suse.com/security/cve/CVE-2016-2167/" source="CVE"/>
		<reference ref_id="CVE-2016-2168" ref_url="https://www.suse.com/security/cve/CVE-2016-2168/" source="CVE"/>
		<reference ref_id="CVE-2016-8734" ref_url="https://www.suse.com/security/cve/CVE-2016-8734/" source="CVE"/>
		<reference ref_id="CVE-2017-9800" ref_url="https://www.suse.com/security/cve/CVE-2017-9800/" source="CVE"/>
		<reference ref_id="CVE-2018-11803" ref_url="https://www.suse.com/security/cve/CVE-2018-11803/" source="CVE"/>
		<description>
These are all security issues fixed in the subversion-server-1.10.0-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2009-2411/">CVE-2009-2411</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-3315/">CVE-2010-3315</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4539/">CVE-2010-4539</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-4644/">CVE-2010-4644</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-0715/">CVE-2011-0715</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1752/">CVE-2011-1752</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1783/">CVE-2011-1783</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1921/">CVE-2011-1921</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1845/">CVE-2013-1845</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-1846/">CVE-2013-1846</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1847/">CVE-2013-1847</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1849/">CVE-2013-1849</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1884/">CVE-2013-1884</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1968/">CVE-2013-1968</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2088/">CVE-2013-2088</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2112/">CVE-2013-2112</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4131/">CVE-2013-4131</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4246/">CVE-2013-4246</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4262/">CVE-2013-4262</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-4277/">CVE-2013-4277</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4505/">CVE-2013-4505</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-4558/">CVE-2013-4558</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0032/">CVE-2014-0032</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-3522/">CVE-2014-3522</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-3528/">CVE-2014-3528</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3580/">CVE-2014-3580</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-8108/">CVE-2014-8108</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-0202/">CVE-2015-0202</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0248/">CVE-2015-0248</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-0251/">CVE-2015-0251</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3184/">CVE-2015-3184</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-3187/">CVE-2015-3187</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5259/">CVE-2015-5259</cve>
	<cve impact="important" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2015-5343/">CVE-2015-5343</cve>
	<cve impact="low" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2167/">CVE-2016-2167</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2168/">CVE-2016-2168</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8734/">CVE-2016-8734</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-9800/">CVE-2017-9800</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11803/">CVE-2018-11803</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488450" comment="subversion-server-1.10.0-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137627" version="1" class="patch">
	<metadata>
		<title> (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1117001" ref_url="https://bugzilla.suse.com/1117001" source="BUGZILLA"/>
		<reference ref_id="1117260" ref_url="https://bugzilla.suse.com/1117260" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19416" ref_url="https://www.suse.com/security/cve/CVE-2018-19416/" source="CVE"/>
		<reference ref_id="CVE-2018-19517" ref_url="https://www.suse.com/security/cve/CVE-2018-19517/" source="CVE"/>
		<description>
This update for sysstat fixes the following issues:

Security issues fixed:

- CVE-2018-19416: Fixed out-of-bounds read during a memmove call inside the remap_struct function (bsc#1117001).
- CVE-2018-19517: Fixed out-of-bounds read during a memset call inside the remap_struct function (bsc#1117260).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-29"/>
	<updated date="2019-03-29"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1117001">SUSE bug 1117001</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117260">SUSE bug 1117260</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19416/">CVE-2018-19416</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19517/">CVE-2018-19517</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790174" comment="sysstat-isag-12.0.2-3.6.12 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137628" version="1" class="patch">
	<metadata>
		<title>sysstat-isag-12.0.2-3.6.12 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-19416" ref_url="https://www.suse.com/security/cve/CVE-2018-19416/" source="CVE"/>
		<reference ref_id="CVE-2018-19517" ref_url="https://www.suse.com/security/cve/CVE-2018-19517/" source="CVE"/>
		<description>
These are all security issues fixed in the sysstat-isag-12.0.2-3.6.12 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19416/">CVE-2018-19416</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19517/">CVE-2018-19517</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488451" comment="sysstat-isag-12.0.2-3.6.12 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137629" version="1" class="patch">
	<metadata>
		<title>uuidd-2.33.1-2.14 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2014-9114" ref_url="https://www.suse.com/security/cve/CVE-2014-9114/" source="CVE"/>
		<reference ref_id="CVE-2015-5218" ref_url="https://www.suse.com/security/cve/CVE-2015-5218/" source="CVE"/>
		<reference ref_id="CVE-2016-2779" ref_url="https://www.suse.com/security/cve/CVE-2016-2779/" source="CVE"/>
		<reference ref_id="CVE-2016-5011" ref_url="https://www.suse.com/security/cve/CVE-2016-5011/" source="CVE"/>
		<reference ref_id="CVE-2017-2616" ref_url="https://www.suse.com/security/cve/CVE-2017-2616/" source="CVE"/>
		<reference ref_id="CVE-2018-7738" ref_url="https://www.suse.com/security/cve/CVE-2018-7738/" source="CVE"/>
		<description>
These are all security issues fixed in the uuidd-2.33.1-2.14 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9114/">CVE-2014-9114</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-5218/">CVE-2015-5218</cve>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2779/">CVE-2016-2779</cve>
	<cve impact="low" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5011/">CVE-2016-5011</cve>
	<cve impact="important" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2616/">CVE-2017-2616</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-7738/">CVE-2018-7738</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488452" comment="uuidd-2.33.1-2.14 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137630" version="1" class="patch">
	<metadata>
		<title>xen-4.12.0_12-1.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2013-3495" ref_url="https://www.suse.com/security/cve/CVE-2013-3495/" source="CVE"/>
		<reference ref_id="CVE-2013-4533" ref_url="https://www.suse.com/security/cve/CVE-2013-4533/" source="CVE"/>
		<reference ref_id="CVE-2013-4534" ref_url="https://www.suse.com/security/cve/CVE-2013-4534/" source="CVE"/>
		<reference ref_id="CVE-2013-4537" ref_url="https://www.suse.com/security/cve/CVE-2013-4537/" source="CVE"/>
		<reference ref_id="CVE-2013-4538" ref_url="https://www.suse.com/security/cve/CVE-2013-4538/" source="CVE"/>
		<reference ref_id="CVE-2013-4539" ref_url="https://www.suse.com/security/cve/CVE-2013-4539/" source="CVE"/>
		<reference ref_id="CVE-2013-4540" ref_url="https://www.suse.com/security/cve/CVE-2013-4540/" source="CVE"/>
		<reference ref_id="CVE-2014-0222" ref_url="https://www.suse.com/security/cve/CVE-2014-0222/" source="CVE"/>
		<reference ref_id="CVE-2014-3640" ref_url="https://www.suse.com/security/cve/CVE-2014-3640/" source="CVE"/>
		<reference ref_id="CVE-2014-3672" ref_url="https://www.suse.com/security/cve/CVE-2014-3672/" source="CVE"/>
		<reference ref_id="CVE-2014-7815" ref_url="https://www.suse.com/security/cve/CVE-2014-7815/" source="CVE"/>
		<reference ref_id="CVE-2015-1779" ref_url="https://www.suse.com/security/cve/CVE-2015-1779/" source="CVE"/>
		<reference ref_id="CVE-2015-3259" ref_url="https://www.suse.com/security/cve/CVE-2015-3259/" source="CVE"/>
		<reference ref_id="CVE-2015-3340" ref_url="https://www.suse.com/security/cve/CVE-2015-3340/" source="CVE"/>
		<reference ref_id="CVE-2015-3456" ref_url="https://www.suse.com/security/cve/CVE-2015-3456/" source="CVE"/>
		<reference ref_id="CVE-2015-4037" ref_url="https://www.suse.com/security/cve/CVE-2015-4037/" source="CVE"/>
		<reference ref_id="CVE-2015-4103" ref_url="https://www.suse.com/security/cve/CVE-2015-4103/" source="CVE"/>
		<reference ref_id="CVE-2015-4104" ref_url="https://www.suse.com/security/cve/CVE-2015-4104/" source="CVE"/>
		<reference ref_id="CVE-2015-4105" ref_url="https://www.suse.com/security/cve/CVE-2015-4105/" source="CVE"/>
		<reference ref_id="CVE-2015-4106" ref_url="https://www.suse.com/security/cve/CVE-2015-4106/" source="CVE"/>
		<reference ref_id="CVE-2015-5154" ref_url="https://www.suse.com/security/cve/CVE-2015-5154/" source="CVE"/>
		<reference ref_id="CVE-2015-5239" ref_url="https://www.suse.com/security/cve/CVE-2015-5239/" source="CVE"/>
		<reference ref_id="CVE-2015-5278" ref_url="https://www.suse.com/security/cve/CVE-2015-5278/" source="CVE"/>
		<reference ref_id="CVE-2015-5307" ref_url="https://www.suse.com/security/cve/CVE-2015-5307/" source="CVE"/>
		<reference ref_id="CVE-2015-6815" ref_url="https://www.suse.com/security/cve/CVE-2015-6815/" source="CVE"/>
		<reference ref_id="CVE-2015-6855" ref_url="https://www.suse.com/security/cve/CVE-2015-6855/" source="CVE"/>
		<reference ref_id="CVE-2015-7311" ref_url="https://www.suse.com/security/cve/CVE-2015-7311/" source="CVE"/>
		<reference ref_id="CVE-2015-7504" ref_url="https://www.suse.com/security/cve/CVE-2015-7504/" source="CVE"/>
		<reference ref_id="CVE-2015-7512" ref_url="https://www.suse.com/security/cve/CVE-2015-7512/" source="CVE"/>
		<reference ref_id="CVE-2015-7549" ref_url="https://www.suse.com/security/cve/CVE-2015-7549/" source="CVE"/>
		<reference ref_id="CVE-2015-7835" ref_url="https://www.suse.com/security/cve/CVE-2015-7835/" source="CVE"/>
		<reference ref_id="CVE-2015-7969" ref_url="https://www.suse.com/security/cve/CVE-2015-7969/" source="CVE"/>
		<reference ref_id="CVE-2015-7970" ref_url="https://www.suse.com/security/cve/CVE-2015-7970/" source="CVE"/>
		<reference ref_id="CVE-2015-7971" ref_url="https://www.suse.com/security/cve/CVE-2015-7971/" source="CVE"/>
		<reference ref_id="CVE-2015-7972" ref_url="https://www.suse.com/security/cve/CVE-2015-7972/" source="CVE"/>
		<reference ref_id="CVE-2015-8104" ref_url="https://www.suse.com/security/cve/CVE-2015-8104/" source="CVE"/>
		<reference ref_id="CVE-2015-8339" ref_url="https://www.suse.com/security/cve/CVE-2015-8339/" source="CVE"/>
		<reference ref_id="CVE-2015-8340" ref_url="https://www.suse.com/security/cve/CVE-2015-8340/" source="CVE"/>
		<reference ref_id="CVE-2015-8341" ref_url="https://www.suse.com/security/cve/CVE-2015-8341/" source="CVE"/>
		<reference ref_id="CVE-2015-8345" ref_url="https://www.suse.com/security/cve/CVE-2015-8345/" source="CVE"/>
		<reference ref_id="CVE-2015-8504" ref_url="https://www.suse.com/security/cve/CVE-2015-8504/" source="CVE"/>
		<reference ref_id="CVE-2015-8550" ref_url="https://www.suse.com/security/cve/CVE-2015-8550/" source="CVE"/>
		<reference ref_id="CVE-2015-8554" ref_url="https://www.suse.com/security/cve/CVE-2015-8554/" source="CVE"/>
		<reference ref_id="CVE-2015-8555" ref_url="https://www.suse.com/security/cve/CVE-2015-8555/" source="CVE"/>
		<reference ref_id="CVE-2015-8558" ref_url="https://www.suse.com/security/cve/CVE-2015-8558/" source="CVE"/>
		<reference ref_id="CVE-2015-8567" ref_url="https://www.suse.com/security/cve/CVE-2015-8567/" source="CVE"/>
		<reference ref_id="CVE-2015-8568" ref_url="https://www.suse.com/security/cve/CVE-2015-8568/" source="CVE"/>
		<reference ref_id="CVE-2015-8613" ref_url="https://www.suse.com/security/cve/CVE-2015-8613/" source="CVE"/>
		<reference ref_id="CVE-2015-8615" ref_url="https://www.suse.com/security/cve/CVE-2015-8615/" source="CVE"/>
		<reference ref_id="CVE-2015-8619" ref_url="https://www.suse.com/security/cve/CVE-2015-8619/" source="CVE"/>
		<reference ref_id="CVE-2015-8743" ref_url="https://www.suse.com/security/cve/CVE-2015-8743/" source="CVE"/>
		<reference ref_id="CVE-2015-8744" ref_url="https://www.suse.com/security/cve/CVE-2015-8744/" source="CVE"/>
		<reference ref_id="CVE-2015-8745" ref_url="https://www.suse.com/security/cve/CVE-2015-8745/" source="CVE"/>
		<reference ref_id="CVE-2016-10013" ref_url="https://www.suse.com/security/cve/CVE-2016-10013/" source="CVE"/>
		<reference ref_id="CVE-2016-10024" ref_url="https://www.suse.com/security/cve/CVE-2016-10024/" source="CVE"/>
		<reference ref_id="CVE-2016-10025" ref_url="https://www.suse.com/security/cve/CVE-2016-10025/" source="CVE"/>
		<reference ref_id="CVE-2016-1568" ref_url="https://www.suse.com/security/cve/CVE-2016-1568/" source="CVE"/>
		<reference ref_id="CVE-2016-1570" ref_url="https://www.suse.com/security/cve/CVE-2016-1570/" source="CVE"/>
		<reference ref_id="CVE-2016-1571" ref_url="https://www.suse.com/security/cve/CVE-2016-1571/" source="CVE"/>
		<reference ref_id="CVE-2016-1714" ref_url="https://www.suse.com/security/cve/CVE-2016-1714/" source="CVE"/>
		<reference ref_id="CVE-2016-1922" ref_url="https://www.suse.com/security/cve/CVE-2016-1922/" source="CVE"/>
		<reference ref_id="CVE-2016-1981" ref_url="https://www.suse.com/security/cve/CVE-2016-1981/" source="CVE"/>
		<reference ref_id="CVE-2016-2198" ref_url="https://www.suse.com/security/cve/CVE-2016-2198/" source="CVE"/>
		<reference ref_id="CVE-2016-2270" ref_url="https://www.suse.com/security/cve/CVE-2016-2270/" source="CVE"/>
		<reference ref_id="CVE-2016-2271" ref_url="https://www.suse.com/security/cve/CVE-2016-2271/" source="CVE"/>
		<reference ref_id="CVE-2016-2391" ref_url="https://www.suse.com/security/cve/CVE-2016-2391/" source="CVE"/>
		<reference ref_id="CVE-2016-2392" ref_url="https://www.suse.com/security/cve/CVE-2016-2392/" source="CVE"/>
		<reference ref_id="CVE-2016-2538" ref_url="https://www.suse.com/security/cve/CVE-2016-2538/" source="CVE"/>
		<reference ref_id="CVE-2016-2841" ref_url="https://www.suse.com/security/cve/CVE-2016-2841/" source="CVE"/>
		<reference ref_id="CVE-2016-4439" ref_url="https://www.suse.com/security/cve/CVE-2016-4439/" source="CVE"/>
		<reference ref_id="CVE-2016-4441" ref_url="https://www.suse.com/security/cve/CVE-2016-4441/" source="CVE"/>
		<reference ref_id="CVE-2016-5238" ref_url="https://www.suse.com/security/cve/CVE-2016-5238/" source="CVE"/>
		<reference ref_id="CVE-2016-5338" ref_url="https://www.suse.com/security/cve/CVE-2016-5338/" source="CVE"/>
		<reference ref_id="CVE-2016-6258" ref_url="https://www.suse.com/security/cve/CVE-2016-6258/" source="CVE"/>
		<reference ref_id="CVE-2016-6259" ref_url="https://www.suse.com/security/cve/CVE-2016-6259/" source="CVE"/>
		<reference ref_id="CVE-2016-6351" ref_url="https://www.suse.com/security/cve/CVE-2016-6351/" source="CVE"/>
		<reference ref_id="CVE-2016-7092" ref_url="https://www.suse.com/security/cve/CVE-2016-7092/" source="CVE"/>
		<reference ref_id="CVE-2016-7093" ref_url="https://www.suse.com/security/cve/CVE-2016-7093/" source="CVE"/>
		<reference ref_id="CVE-2016-7094" ref_url="https://www.suse.com/security/cve/CVE-2016-7094/" source="CVE"/>
		<reference ref_id="CVE-2016-7777" ref_url="https://www.suse.com/security/cve/CVE-2016-7777/" source="CVE"/>
		<reference ref_id="CVE-2016-7908" ref_url="https://www.suse.com/security/cve/CVE-2016-7908/" source="CVE"/>
		<reference ref_id="CVE-2016-7909" ref_url="https://www.suse.com/security/cve/CVE-2016-7909/" source="CVE"/>
		<reference ref_id="CVE-2016-8667" ref_url="https://www.suse.com/security/cve/CVE-2016-8667/" source="CVE"/>
		<reference ref_id="CVE-2016-8669" ref_url="https://www.suse.com/security/cve/CVE-2016-8669/" source="CVE"/>
		<reference ref_id="CVE-2016-8910" ref_url="https://www.suse.com/security/cve/CVE-2016-8910/" source="CVE"/>
		<reference ref_id="CVE-2016-9377" ref_url="https://www.suse.com/security/cve/CVE-2016-9377/" source="CVE"/>
		<reference ref_id="CVE-2016-9378" ref_url="https://www.suse.com/security/cve/CVE-2016-9378/" source="CVE"/>
		<reference ref_id="CVE-2016-9379" ref_url="https://www.suse.com/security/cve/CVE-2016-9379/" source="CVE"/>
		<reference ref_id="CVE-2016-9380" ref_url="https://www.suse.com/security/cve/CVE-2016-9380/" source="CVE"/>
		<reference ref_id="CVE-2016-9381" ref_url="https://www.suse.com/security/cve/CVE-2016-9381/" source="CVE"/>
		<reference ref_id="CVE-2016-9382" ref_url="https://www.suse.com/security/cve/CVE-2016-9382/" source="CVE"/>
		<reference ref_id="CVE-2016-9383" ref_url="https://www.suse.com/security/cve/CVE-2016-9383/" source="CVE"/>
		<reference ref_id="CVE-2016-9384" ref_url="https://www.suse.com/security/cve/CVE-2016-9384/" source="CVE"/>
		<reference ref_id="CVE-2016-9385" ref_url="https://www.suse.com/security/cve/CVE-2016-9385/" source="CVE"/>
		<reference ref_id="CVE-2016-9386" ref_url="https://www.suse.com/security/cve/CVE-2016-9386/" source="CVE"/>
		<reference ref_id="CVE-2016-9637" ref_url="https://www.suse.com/security/cve/CVE-2016-9637/" source="CVE"/>
		<reference ref_id="CVE-2016-9921" ref_url="https://www.suse.com/security/cve/CVE-2016-9921/" source="CVE"/>
		<reference ref_id="CVE-2016-9922" ref_url="https://www.suse.com/security/cve/CVE-2016-9922/" source="CVE"/>
		<reference ref_id="CVE-2016-9932" ref_url="https://www.suse.com/security/cve/CVE-2016-9932/" source="CVE"/>
		<reference ref_id="CVE-2017-12135" ref_url="https://www.suse.com/security/cve/CVE-2017-12135/" source="CVE"/>
		<reference ref_id="CVE-2017-12136" ref_url="https://www.suse.com/security/cve/CVE-2017-12136/" source="CVE"/>
		<reference ref_id="CVE-2017-12137" ref_url="https://www.suse.com/security/cve/CVE-2017-12137/" source="CVE"/>
		<reference ref_id="CVE-2017-2615" ref_url="https://www.suse.com/security/cve/CVE-2017-2615/" source="CVE"/>
		<reference ref_id="CVE-2017-2620" ref_url="https://www.suse.com/security/cve/CVE-2017-2620/" source="CVE"/>
		<reference ref_id="CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715/" source="CVE"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2017-5754" ref_url="https://www.suse.com/security/cve/CVE-2017-5754/" source="CVE"/>
		<reference ref_id="CVE-2017-6505" ref_url="https://www.suse.com/security/cve/CVE-2017-6505/" source="CVE"/>
		<reference ref_id="CVE-2017-8309" ref_url="https://www.suse.com/security/cve/CVE-2017-8309/" source="CVE"/>
		<reference ref_id="CVE-2017-9330" ref_url="https://www.suse.com/security/cve/CVE-2017-9330/" source="CVE"/>
		<reference ref_id="CVE-2018-10471" ref_url="https://www.suse.com/security/cve/CVE-2018-10471/" source="CVE"/>
		<reference ref_id="CVE-2018-10472" ref_url="https://www.suse.com/security/cve/CVE-2018-10472/" source="CVE"/>
		<reference ref_id="CVE-2018-10981" ref_url="https://www.suse.com/security/cve/CVE-2018-10981/" source="CVE"/>
		<reference ref_id="CVE-2018-10982" ref_url="https://www.suse.com/security/cve/CVE-2018-10982/" source="CVE"/>
		<reference ref_id="CVE-2018-12891" ref_url="https://www.suse.com/security/cve/CVE-2018-12891/" source="CVE"/>
		<reference ref_id="CVE-2018-12892" ref_url="https://www.suse.com/security/cve/CVE-2018-12892/" source="CVE"/>
		<reference ref_id="CVE-2018-12893" ref_url="https://www.suse.com/security/cve/CVE-2018-12893/" source="CVE"/>
		<reference ref_id="CVE-2018-15468" ref_url="https://www.suse.com/security/cve/CVE-2018-15468/" source="CVE"/>
		<reference ref_id="CVE-2018-15469" ref_url="https://www.suse.com/security/cve/CVE-2018-15469/" source="CVE"/>
		<reference ref_id="CVE-2018-15470" ref_url="https://www.suse.com/security/cve/CVE-2018-15470/" source="CVE"/>
		<reference ref_id="CVE-2018-18883" ref_url="https://www.suse.com/security/cve/CVE-2018-18883/" source="CVE"/>
		<reference ref_id="CVE-2018-19961" ref_url="https://www.suse.com/security/cve/CVE-2018-19961/" source="CVE"/>
		<reference ref_id="CVE-2018-19962" ref_url="https://www.suse.com/security/cve/CVE-2018-19962/" source="CVE"/>
		<reference ref_id="CVE-2018-19963" ref_url="https://www.suse.com/security/cve/CVE-2018-19963/" source="CVE"/>
		<reference ref_id="CVE-2018-19964" ref_url="https://www.suse.com/security/cve/CVE-2018-19964/" source="CVE"/>
		<reference ref_id="CVE-2018-19965" ref_url="https://www.suse.com/security/cve/CVE-2018-19965/" source="CVE"/>
		<reference ref_id="CVE-2018-19966" ref_url="https://www.suse.com/security/cve/CVE-2018-19966/" source="CVE"/>
		<reference ref_id="CVE-2018-19967" ref_url="https://www.suse.com/security/cve/CVE-2018-19967/" source="CVE"/>
		<reference ref_id="CVE-2018-3639" ref_url="https://www.suse.com/security/cve/CVE-2018-3639/" source="CVE"/>
		<reference ref_id="CVE-2018-3646" ref_url="https://www.suse.com/security/cve/CVE-2018-3646/" source="CVE"/>
		<reference ref_id="CVE-2018-3665" ref_url="https://www.suse.com/security/cve/CVE-2018-3665/" source="CVE"/>
		<reference ref_id="CVE-2018-5244" ref_url="https://www.suse.com/security/cve/CVE-2018-5244/" source="CVE"/>
		<reference ref_id="CVE-2018-7540" ref_url="https://www.suse.com/security/cve/CVE-2018-7540/" source="CVE"/>
		<reference ref_id="CVE-2018-7541" ref_url="https://www.suse.com/security/cve/CVE-2018-7541/" source="CVE"/>
		<reference ref_id="CVE-2018-7542" ref_url="https://www.suse.com/security/cve/CVE-2018-7542/" source="CVE"/>
		<reference ref_id="CVE-2018-8897" ref_url="https://www.suse.com/security/cve/CVE-2018-8897/" source="CVE"/>
		<description>
These are all security issues fixed in the xen-4.12.0_12-1.1 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-3495/">CVE-2013-3495</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4533/">CVE-2013-4533</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4534/">CVE-2013-4534</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4537/">CVE-2013-4537</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4538/">CVE-2013-4538</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4539/">CVE-2013-4539</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-4540/">CVE-2013-4540</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0222/">CVE-2014-0222</cve>
	<cve href="https://www.suse.com/security/cve/CVE-2014-3640/">CVE-2014-3640</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2014-3672/">CVE-2014-3672</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7815/">CVE-2014-7815</cve>
	<cve impact="moderate" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-1779/">CVE-2015-1779</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3259/">CVE-2015-3259</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-3340/">CVE-2015-3340</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3456/">CVE-2015-3456</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-4037/">CVE-2015-4037</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4103/">CVE-2015-4103</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-4104/">CVE-2015-4104</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4105/">CVE-2015-4105</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4106/">CVE-2015-4106</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-5154/">CVE-2015-5154</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5239/">CVE-2015-5239</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5278/">CVE-2015-5278</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5307/">CVE-2015-5307</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2015-6815/">CVE-2015-6815</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-6855/">CVE-2015-6855</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7311/">CVE-2015-7311</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7504/">CVE-2015-7504</cve>
	<cve impact="important" cvss3="9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-7512/">CVE-2015-7512</cve>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-7549/">CVE-2015-7549</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-7835/">CVE-2015-7835</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7969/">CVE-2015-7969</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-7970/">CVE-2015-7970</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7971/">CVE-2015-7971</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-7972/">CVE-2015-7972</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8104/">CVE-2015-8104</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8339/">CVE-2015-8339</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8340/">CVE-2015-8340</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8341/">CVE-2015-8341</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8345/">CVE-2015-8345</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8504/">CVE-2015-8504</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8550/">CVE-2015-8550</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8554/">CVE-2015-8554</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8555/">CVE-2015-8555</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8558/">CVE-2015-8558</cve>
	<cve impact="low" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8567/">CVE-2015-8567</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8568/">CVE-2015-8568</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8613/">CVE-2015-8613</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2015-8615/">CVE-2015-8615</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8619/">CVE-2015-8619</cve>
	<cve impact="moderate" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2015-8743/">CVE-2015-8743</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8744/">CVE-2015-8744</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8745/">CVE-2015-8745</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10013/">CVE-2016-10013</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10024/">CVE-2016-10024</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-10025/">CVE-2016-10025</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1568/">CVE-2016-1568</cve>
	<cve impact="important" cvss3="8.5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1570/">CVE-2016-1570</cve>
	<cve impact="low" cvss3="6.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1571/">CVE-2016-1571</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1714/">CVE-2016-1714</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1922/">CVE-2016-1922</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-1981/">CVE-2016-1981</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2198/">CVE-2016-2198</cve>
	<cve impact="low" cvss3="6.8/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2270/">CVE-2016-2270</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2271/">CVE-2016-2271</cve>
	<cve impact="low" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2391/">CVE-2016-2391</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2392/">CVE-2016-2392</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2538/">CVE-2016-2538</cve>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2841/">CVE-2016-2841</cve>
	<cve impact="low" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4439/">CVE-2016-4439</cve>
	<cve impact="low" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-4441/">CVE-2016-4441</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-5238/">CVE-2016-5238</cve>
	<cve impact="low" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5338/">CVE-2016-5338</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6258/">CVE-2016-6258</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6259/">CVE-2016-6259</cve>
	<cve impact="low" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-6351/">CVE-2016-6351</cve>
	<cve impact="important" cvss3="8.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7092/">CVE-2016-7092</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-7093/">CVE-2016-7093</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7094/">CVE-2016-7094</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-7777/">CVE-2016-7777</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7908/">CVE-2016-7908</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7909/">CVE-2016-7909</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8667/">CVE-2016-8667</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-8669/">CVE-2016-8669</cve>
	<cve impact="low" cvss3="3/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-8910/">CVE-2016-8910</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9377/">CVE-2016-9377</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9378/">CVE-2016-9378</cve>
	<cve impact="moderate" cvss3="7.9/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9379/">CVE-2016-9379</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-9380/">CVE-2016-9380</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9381/">CVE-2016-9381</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9382/">CVE-2016-9382</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9383/">CVE-2016-9383</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9384/">CVE-2016-9384</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9385/">CVE-2016-9385</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9386/">CVE-2016-9386</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-9637/">CVE-2016-9637</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9921/">CVE-2016-9921</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9922/">CVE-2016-9922</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-9932/">CVE-2016-9932</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-12135/">CVE-2017-12135</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12136/">CVE-2017-12136</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-12137/">CVE-2017-12137</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-2615/">CVE-2017-2615</cve>
	<cve impact="moderate" cvss3="9.9/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2620/">CVE-2017-2620</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5754/">CVE-2017-5754</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6505/">CVE-2017-6505</cve>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-8309/">CVE-2017-8309</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9330/">CVE-2017-9330</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10471/">CVE-2018-10471</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10472/">CVE-2018-10472</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10981/">CVE-2018-10981</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10982/">CVE-2018-10982</cve>
	<cve impact="important" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12891/">CVE-2018-12891</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-12892/">CVE-2018-12892</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12893/">CVE-2018-12893</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-15468/">CVE-2018-15468</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-15469/">CVE-2018-15469</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-15470/">CVE-2018-15470</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-18883/">CVE-2018-18883</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19961/">CVE-2018-19961</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19962/">CVE-2018-19962</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19963/">CVE-2018-19963</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19964/">CVE-2018-19964</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19965/">CVE-2018-19965</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-19966/">CVE-2018-19966</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19967/">CVE-2018-19967</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3639/">CVE-2018-3639</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3646/">CVE-2018-3646</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3665/">CVE-2018-3665</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5244/">CVE-2018-5244</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7540/">CVE-2018-7540</cve>
	<cve impact="important" cvss3="8.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-7541/">CVE-2018-7541</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7542/">CVE-2018-7542</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8897/">CVE-2018-8897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488454" comment="xen-4.12.0_12-1.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488455" comment="xen-devel-4.12.0_12-1.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488456" comment="xen-tools-4.12.0_12-1.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137631" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1129537" ref_url="https://bugzilla.suse.com/1129537" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9628" ref_url="https://www.suse.com/security/cve/CVE-2019-9628/" source="CVE"/>
		<description>
This update for xmltooling fixes the following issues:
	  
Security issue fixed: 	  

- CVE-2019-9628: Fixed an improper handling of exception in XMLTooling library which could result in
denial of service against the application using XMLTooling (bsc#1129537).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-10"/>
	<updated date="2019-04-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1129537">SUSE bug 1129537</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9628/">CVE-2019-9628</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790175" comment="libxmltooling-devel-1.6.4-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790176" comment="libxmltooling7-1.6.4-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790177" comment="xmltooling-schemas-1.6.4-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137632" version="1" class="patch">
	<metadata>
		<title>yast2-rmt-1.2.1-1.25 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="CVE-2018-17957" ref_url="https://www.suse.com/security/cve/CVE-2018-17957/" source="CVE"/>
		<description>
These are all security issues fixed in the yast2-rmt-1.2.1-1.25 package on the GA media of SUSE Linux Enterprise Module for Server Applications 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-21"/>
	<updated date="2021-09-21"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="3.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-17957/">CVE-2018-17957</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488457" comment="yast2-rmt-1.2.1-1.25 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137633" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1127532" ref_url="https://bugzilla.suse.com/1127532" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5737" ref_url="https://www.suse.com/security/cve/CVE-2019-5737/" source="CVE"/>
		<description>
This update for nodejs10 to versio 10.15.2 fixes the following issue:

Security issue fixed: 

- CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service
when HTTP connection are kept active (bsc#1127532).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-18"/>
	<updated date="2019-03-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1127532">SUSE bug 1127532</bugzilla>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-5737/">CVE-2019-5737</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790187" comment="nodejs10-10.15.2-1.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790188" comment="nodejs10-devel-10.15.2-1.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500655" comment="nodejs10-docs-10.15.2-1.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790189" comment="npm10-10.15.2-1.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137634" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1127532" ref_url="https://bugzilla.suse.com/1127532" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5737" ref_url="https://www.suse.com/security/cve/CVE-2019-5737/" source="CVE"/>
		<description>
This update for nodejs8 to version 8.15.1 fixes the following issue:

Security issue fixed: 

- CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service
  when HTTP connection are kept active (bsc#1127532).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-03-19"/>
	<updated date="2019-03-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1127532">SUSE bug 1127532</bugzilla>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-5737/">CVE-2019-5737</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790190" comment="nodejs8-8.15.1-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790191" comment="nodejs8-devel-8.15.1-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500659" comment="nodejs8-docs-8.15.1-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790192" comment="npm8-8.15.1-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137635" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1105434" ref_url="https://bugzilla.suse.com/1105434" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000222" ref_url="https://www.suse.com/security/cve/CVE-2018-1000222/" source="CVE"/>
		<description>
This update for php7 fixes the following issues:

Security issue fixed:

- CVE-2018-1000222: Fixed a double free vulnerability in gdImageBmpPtr() that
  could result in remote code execution. This could have been exploited via a
  specially crafted JPEG image files. (bsc#1105434)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-09-24"/>
	<updated date="2018-09-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1105434">SUSE bug 1105434</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000222/">CVE-2018-1000222</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790193" comment="apache2-mod_php7-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790194" comment="php7-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790195" comment="php7-bcmath-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790196" comment="php7-bz2-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790197" comment="php7-calendar-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790198" comment="php7-ctype-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790199" comment="php7-curl-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790200" comment="php7-dba-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790201" comment="php7-devel-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790202" comment="php7-dom-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790203" comment="php7-enchant-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790204" comment="php7-exif-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790205" comment="php7-fastcgi-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790206" comment="php7-fileinfo-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790207" comment="php7-fpm-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790208" comment="php7-ftp-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790209" comment="php7-gd-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790210" comment="php7-gettext-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790211" comment="php7-gmp-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790212" comment="php7-iconv-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790213" comment="php7-intl-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790214" comment="php7-json-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790215" comment="php7-ldap-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790216" comment="php7-mbstring-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790217" comment="php7-mysql-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790218" comment="php7-odbc-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790219" comment="php7-opcache-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790220" comment="php7-openssl-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790221" comment="php7-pcntl-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790222" comment="php7-pdo-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500323" comment="php7-pear-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500324" comment="php7-pear-Archive_Tar-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790223" comment="php7-pgsql-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790224" comment="php7-phar-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790225" comment="php7-posix-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790226" comment="php7-shmop-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790227" comment="php7-snmp-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790228" comment="php7-soap-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790229" comment="php7-sockets-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790230" comment="php7-sqlite-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790231" comment="php7-sysvmsg-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790232" comment="php7-sysvsem-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790233" comment="php7-sysvshm-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790234" comment="php7-tokenizer-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790235" comment="php7-wddx-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790236" comment="php7-xmlreader-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790237" comment="php7-xmlrpc-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790238" comment="php7-xmlwriter-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790239" comment="php7-xsl-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790240" comment="php7-zip-7.2.5-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790241" comment="php7-zlib-7.2.5-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137636" version="1" class="patch">
	<metadata>
		<title>MozillaThunderbird-60.6.1-3.28.1 on GA media (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1125330" ref_url="https://bugzilla.suse.com/1125330" source="BUGZILLA"/>
		<reference ref_id="1129821" ref_url="https://bugzilla.suse.com/1129821" source="BUGZILLA"/>
		<reference ref_id="1130262" ref_url="https://bugzilla.suse.com/1130262" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-18335" ref_url="https://www.suse.com/security/cve/CVE-2018-18335/" source="CVE"/>
		<reference ref_id="CVE-2018-18356" ref_url="https://www.suse.com/security/cve/CVE-2018-18356/" source="CVE"/>
		<reference ref_id="CVE-2018-18506" ref_url="https://www.suse.com/security/cve/CVE-2018-18506/" source="CVE"/>
		<reference ref_id="CVE-2018-18509" ref_url="https://www.suse.com/security/cve/CVE-2018-18509/" source="CVE"/>
		<reference ref_id="CVE-2019-5785" ref_url="https://www.suse.com/security/cve/CVE-2019-5785/" source="CVE"/>
		<reference ref_id="CVE-2019-9788" ref_url="https://www.suse.com/security/cve/CVE-2019-9788/" source="CVE"/>
		<reference ref_id="CVE-2019-9790" ref_url="https://www.suse.com/security/cve/CVE-2019-9790/" source="CVE"/>
		<reference ref_id="CVE-2019-9791" ref_url="https://www.suse.com/security/cve/CVE-2019-9791/" source="CVE"/>
		<reference ref_id="CVE-2019-9792" ref_url="https://www.suse.com/security/cve/CVE-2019-9792/" source="CVE"/>
		<reference ref_id="CVE-2019-9793" ref_url="https://www.suse.com/security/cve/CVE-2019-9793/" source="CVE"/>
		<reference ref_id="CVE-2019-9794" ref_url="https://www.suse.com/security/cve/CVE-2019-9794/" source="CVE"/>
		<reference ref_id="CVE-2019-9795" ref_url="https://www.suse.com/security/cve/CVE-2019-9795/" source="CVE"/>
		<reference ref_id="CVE-2019-9796" ref_url="https://www.suse.com/security/cve/CVE-2019-9796/" source="CVE"/>
		<reference ref_id="CVE-2019-9801" ref_url="https://www.suse.com/security/cve/CVE-2019-9801/" source="CVE"/>
		<reference ref_id="CVE-2019-9810" ref_url="https://www.suse.com/security/cve/CVE-2019-9810/" source="CVE"/>
		<reference ref_id="CVE-2019-9813" ref_url="https://www.suse.com/security/cve/CVE-2019-9813/" source="CVE"/>
		<description>
This update for MozillaThunderbird to version 60.5.1 fixes the following issues:

Security issues fixed:

- Update to MozillaThunderbird 60.6.1 (bsc#1130262):

- CVE-2019-9813: Fixed Ionmonkey type confusion with __proto__ mutations
- CVE-2019-9810: Fixed IonMonkey MArraySlice incorrect alias information

- Update to MozillaThunderbird 60.6 (bsc#1129821):

- CVE-2018-18506: Fixed an issue with Proxy Auto-Configuration file 
- CVE-2019-9801: Fixed an issue which could allow Windows programs to be exposed to web content
- CVE-2019-9788: Fixed multiple memory safety bugs
- CVE-2019-9790: Fixed a Use-after-free vulnerability when removing in-use DOM elements
- CVE-2019-9791: Fixed an incorrect Type inference for constructors entered through on-stack replacement 
  with IonMonkey
- CVE-2019-9792: Fixed an issue where IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
- CVE-2019-9793: Fixed multiple improper bounds checks when Spectre mitigations are disabled
- CVE-2019-9794: Fixed an issue where command line arguments not discarded during execution
- CVE-2019-9795: Fixed a Type-confusion vulnerability in IonMonkey JIT compiler
- CVE-2019-9796: Fixed a Use-after-free vulnerability in SMIL animation controller

- Update to MozillaThunderbird 60.5.1 (bsc#1125330):

- CVE-2018-18356: Fixed a use-after-free vulnerability in the Skia library which can occur when
    creating a path, leading to a potentially exploitable crash.
- CVE-2019-5785: Fixed an integer overflow vulnerability in the Skia library which can occur
  after specific transform operations, leading to a potentially exploitable crash.
- CVE-2018-18335: Fixed a buffer overflow vulnerability in the Skia library which can occur with
  Canvas 2D acceleration on macOS. This issue was addressed by disabling Canvas 2D acceleration 
  in Firefox ESR.  Note: this does not affect other versions and platforms where Canvas 2D
  acceleration is already disabled by default.
- CVE-2018-18509: Fixed a flaw which during verification of certain S/MIME signatures
  showing mistakenly that emails bring a valid sugnature.
Release notes:
https://www.mozilla.org/en-US/security/advisories/mfsa2019-12/
https://www.mozilla.org/en-US/security/advisories/mfsa2019-11/
https://www.mozilla.org/en-US/security/advisories/mfsa2019-06/
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-03"/>
	<updated date="2019-04-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1125330">SUSE bug 1125330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129821">SUSE bug 1129821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130262">SUSE bug 1130262</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18335/">CVE-2018-18335</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18356/">CVE-2018-18356</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-18506/">CVE-2018-18506</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-18509/">CVE-2018-18509</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5785/">CVE-2019-5785</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9788/">CVE-2019-9788</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9790/">CVE-2019-9790</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9791/">CVE-2019-9791</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9792/">CVE-2019-9792</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9793/">CVE-2019-9793</cve>
	<cve impact="important" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9794/">CVE-2019-9794</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9795/">CVE-2019-9795</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9796/">CVE-2019-9796</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9801/">CVE-2019-9801</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9810/">CVE-2019-9810</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9813/">CVE-2019-9813</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790245" comment="MozillaThunderbird-60.6.1-3.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790246" comment="MozillaThunderbird-translations-common-60.6.1-3.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790247" comment="MozillaThunderbird-translations-other-60.6.1-3.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137637" version="1" class="patch">
	<metadata>
		<title>NetworkManager-applet-1.8.10-3.39 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2017-6590" ref_url="https://www.suse.com/security/cve/CVE-2017-6590/" source="CVE"/>
		<description>
These are all security issues fixed in the NetworkManager-applet-1.8.10-3.39 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-6590/">CVE-2017-6590</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488874" comment="NetworkManager-applet-1.8.10-3.39 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488875" comment="NetworkManager-applet-lang-1.8.10-3.39 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488876" comment="NetworkManager-connection-editor-1.8.10-3.39 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137638" version="1" class="patch">
	<metadata>
		<title>NetworkManager-lang-1.10.6-5.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2006-7246" ref_url="https://www.suse.com/security/cve/CVE-2006-7246/" source="CVE"/>
		<reference ref_id="CVE-2015-2924" ref_url="https://www.suse.com/security/cve/CVE-2015-2924/" source="CVE"/>
		<reference ref_id="CVE-2016-0764" ref_url="https://www.suse.com/security/cve/CVE-2016-0764/" source="CVE"/>
		<description>
These are all security issues fixed in the NetworkManager-lang-1.10.6-5.3.1 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2006-7246/">CVE-2006-7246</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-2924/">CVE-2015-2924</cve>
	<cve impact="low" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-0764/">CVE-2016-0764</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489051" comment="NetworkManager-lang-1.10.6-5.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137639" version="1" class="patch">
	<metadata>
		<title>PackageKit-gstreamer-plugin-1.1.10-10.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2018-1106" ref_url="https://www.suse.com/security/cve/CVE-2018-1106/" source="CVE"/>
		<description>
These are all security issues fixed in the PackageKit-gstreamer-plugin-1.1.10-10.1 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1106/">CVE-2018-1106</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009489052" comment="PackageKit-gstreamer-plugin-1.1.10-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489053" comment="PackageKit-gtk3-module-1.1.10-10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137640" version="1" class="patch">
	<metadata>
		<title>argyllcms-1.9.2-2.27 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2012-1616" ref_url="https://www.suse.com/security/cve/CVE-2012-1616/" source="CVE"/>
		<description>
These are all security issues fixed in the argyllcms-1.9.2-2.27 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-1616/">CVE-2012-1616</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488880" comment="argyllcms-1.9.2-2.27 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137641" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1013721" ref_url="https://bugzilla.suse.com/1013721" source="BUGZILLA"/>
		<reference ref_id="1013732" ref_url="https://bugzilla.suse.com/1013732" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-9800" ref_url="https://www.suse.com/security/cve/CVE-2016-9800/" source="CVE"/>
		<reference ref_id="CVE-2016-9801" ref_url="https://www.suse.com/security/cve/CVE-2016-9801/" source="CVE"/>
		<description>
This update for bluez fixes the following issues:

Security issues fixed:

- CVE-2016-9800: Fixed a buffer overflow in pin_code_reply_dump function (bsc#1013721)
- CVE-2016-9801: Fixed a buffer overflow in set_ext_ctrl function (bsc#1013732)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-19"/>
	<updated date="2018-12-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1013721">SUSE bug 1013721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013732">SUSE bug 1013732</bugzilla>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9800/">CVE-2016-9800</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9801/">CVE-2016-9801</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790248" comment="bluez-cups-5.48-5.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137642" version="1" class="patch">
	<metadata>
		<title>bluez-cups-5.48-5.13.10 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2016-9800" ref_url="https://www.suse.com/security/cve/CVE-2016-9800/" source="CVE"/>
		<reference ref_id="CVE-2016-9801" ref_url="https://www.suse.com/security/cve/CVE-2016-9801/" source="CVE"/>
		<reference ref_id="CVE-2016-9804" ref_url="https://www.suse.com/security/cve/CVE-2016-9804/" source="CVE"/>
		<reference ref_id="CVE-2016-9918" ref_url="https://www.suse.com/security/cve/CVE-2016-9918/" source="CVE"/>
		<description>
These are all security issues fixed in the bluez-cups-5.48-5.13.10 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9800/">CVE-2016-9800</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9801/">CVE-2016-9801</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9804/">CVE-2016-9804</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2016-9918/">CVE-2016-9918</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489054" comment="bluez-cups-5.48-5.13.10 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137643" version="1" class="patch">
	<metadata>
		<title>bogofilter-common-1.2.4-1.40 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2010-2494" ref_url="https://www.suse.com/security/cve/CVE-2010-2494/" source="CVE"/>
		<reference ref_id="CVE-2012-5468" ref_url="https://www.suse.com/security/cve/CVE-2012-5468/" source="CVE"/>
		<description>
These are all security issues fixed in the bogofilter-common-1.2.4-1.40 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2494/">CVE-2010-2494</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5468/">CVE-2012-5468</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488882" comment="bogofilter-common-1.2.4-1.40 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488883" comment="bogofilter-db-1.2.4-1.40 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137644" version="1" class="patch">
	<metadata>
		<title>colord-1.4.2-1.37 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2011-4349" ref_url="https://www.suse.com/security/cve/CVE-2011-4349/" source="CVE"/>
		<description>
These are all security issues fixed in the colord-1.4.2-1.37 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-4349/">CVE-2011-4349</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488884" comment="colord-1.4.2-1.37 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488885" comment="colord-gtk-lang-0.1.26-1.48 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488886" comment="colord-lang-1.4.2-1.37 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137645" version="1" class="patch">
	<metadata>
		<title>dia-0.97.3-2.32 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2008-5984" ref_url="https://www.suse.com/security/cve/CVE-2008-5984/" source="CVE"/>
		<description>
These are all security issues fixed in the dia-0.97.3-2.32 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-5984/">CVE-2008-5984</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488887" comment="dia-0.97.3-2.32 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488888" comment="dia-lang-0.97.3-2.32 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137646" version="1" class="patch">
	<metadata>
		<title>enigmail-2.0.9-3.13.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1118935" ref_url="https://bugzilla.suse.com/1118935" source="BUGZILLA"/>
		<description>
This update for enigmail to version 2.0.9 fixes the following issues:

Security issue fixed:

- When using Web Key Discovery, a HTTP authentication may be triggered.
  This may trick users into possibly sending e-mail credentials (bsc#1118935).

Non-security issues fixed:

- pEp - PGP/MIME signed-only messages are ignored
- Autocrypt overrules manually created Per-Recipient Rules
- 'Re:' prefix on subject line disappears when editing encrypted, saved draft
		</description>
<advisory from="security@suse.de">
	<issued date="2018-12-21"/>
	<updated date="2018-12-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1118935">SUSE bug 1118935</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790249" comment="enigmail-2.0.9-3.13.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137647" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1100356" ref_url="https://bugzilla.suse.com/1100356" source="BUGZILLA"/>
		<reference ref_id="1102687" ref_url="https://bugzilla.suse.com/1102687" source="BUGZILLA"/>
		<reference ref_id="1102688" ref_url="https://bugzilla.suse.com/1102688" source="BUGZILLA"/>
		<reference ref_id="1102689" ref_url="https://bugzilla.suse.com/1102689" source="BUGZILLA"/>
		<reference ref_id="1102899" ref_url="https://bugzilla.suse.com/1102899" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13302" ref_url="https://www.suse.com/security/cve/CVE-2018-13302/" source="CVE"/>
		<reference ref_id="CVE-2018-1999010" ref_url="https://www.suse.com/security/cve/CVE-2018-1999010/" source="CVE"/>
		<reference ref_id="CVE-2018-1999011" ref_url="https://www.suse.com/security/cve/CVE-2018-1999011/" source="CVE"/>
		<reference ref_id="CVE-2018-1999012" ref_url="https://www.suse.com/security/cve/CVE-2018-1999012/" source="CVE"/>
		<reference ref_id="CVE-2018-1999013" ref_url="https://www.suse.com/security/cve/CVE-2018-1999013/" source="CVE"/>
		<description>
This update for ffmpeg fixes the following issues:

Security issues fixed:

- CVE-2018-13302: Fixed out of array access issue (bsc#1100356).
- CVE-2018-1999010: Fixed multiple out of array access vulnerabilities in the
  mms protocol that could result in accessing out of bound data via specially
  crafted input files (bnc#1102899)
- CVE-2018-1999011: Fixed a heap buffer overflow in asf_o format demuxer that
  could result in remote code execution (bnc#1102689)
- CVE-2018-1999012: Fixed an infinite loop vulnerability in pva format demuxer
  that could result in excessive amount of ressource allocation like CPU an RAM
  (CVE-2018-1999012 bnc#1102688).
- CVE-2018-1999013: Fixed an use-after-free vulnerability in the realmedia
  demuxer that could allow remote attackers to read heap memory (bnc#1102687)
		</description>
<advisory from="security@suse.de">
	<issued date="2018-08-10"/>
	<updated date="2018-08-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1100356">SUSE bug 1100356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102687">SUSE bug 1102687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102688">SUSE bug 1102688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102689">SUSE bug 1102689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102899">SUSE bug 1102899</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13302/">CVE-2018-13302</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999010/">CVE-2018-1999010</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999011/">CVE-2018-1999011</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999012/">CVE-2018-1999012</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999013/">CVE-2018-1999013</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790122" comment="libavcodec-devel-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790123" comment="libavformat-devel-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790124" comment="libavformat57-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790125" comment="libavresample-devel-3.4.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790126" comment="libavresample3-3.4.2-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137648" version="1" class="patch">
	<metadata>
		<title>freerdp-2.0.0~rc4-8.4 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2014-0250" ref_url="https://www.suse.com/security/cve/CVE-2014-0250/" source="CVE"/>
		<reference ref_id="CVE-2014-0791" ref_url="https://www.suse.com/security/cve/CVE-2014-0791/" source="CVE"/>
		<reference ref_id="CVE-2017-2834" ref_url="https://www.suse.com/security/cve/CVE-2017-2834/" source="CVE"/>
		<reference ref_id="CVE-2017-2835" ref_url="https://www.suse.com/security/cve/CVE-2017-2835/" source="CVE"/>
		<reference ref_id="CVE-2017-2836" ref_url="https://www.suse.com/security/cve/CVE-2017-2836/" source="CVE"/>
		<reference ref_id="CVE-2017-2837" ref_url="https://www.suse.com/security/cve/CVE-2017-2837/" source="CVE"/>
		<reference ref_id="CVE-2017-2838" ref_url="https://www.suse.com/security/cve/CVE-2017-2838/" source="CVE"/>
		<reference ref_id="CVE-2017-2839" ref_url="https://www.suse.com/security/cve/CVE-2017-2839/" source="CVE"/>
		<reference ref_id="CVE-2018-0886" ref_url="https://www.suse.com/security/cve/CVE-2018-0886/" source="CVE"/>
		<reference ref_id="CVE-2018-1000852" ref_url="https://www.suse.com/security/cve/CVE-2018-1000852/" source="CVE"/>
		<reference ref_id="CVE-2018-8784" ref_url="https://www.suse.com/security/cve/CVE-2018-8784/" source="CVE"/>
		<reference ref_id="CVE-2018-8785" ref_url="https://www.suse.com/security/cve/CVE-2018-8785/" source="CVE"/>
		<reference ref_id="CVE-2018-8786" ref_url="https://www.suse.com/security/cve/CVE-2018-8786/" source="CVE"/>
		<reference ref_id="CVE-2018-8787" ref_url="https://www.suse.com/security/cve/CVE-2018-8787/" source="CVE"/>
		<reference ref_id="CVE-2018-8788" ref_url="https://www.suse.com/security/cve/CVE-2018-8788/" source="CVE"/>
		<reference ref_id="CVE-2018-8789" ref_url="https://www.suse.com/security/cve/CVE-2018-8789/" source="CVE"/>
		<description>
These are all security issues fixed in the freerdp-2.0.0~rc4-8.4 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0250/">CVE-2014-0250</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0791/">CVE-2014-0791</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2834/">CVE-2017-2834</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2835/">CVE-2017-2835</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2836/">CVE-2017-2836</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2837/">CVE-2017-2837</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2838/">CVE-2017-2838</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-2839/">CVE-2017-2839</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-0886/">CVE-2018-0886</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000852/">CVE-2018-1000852</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8784/">CVE-2018-8784</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8785/">CVE-2018-8785</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8786/">CVE-2018-8786</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8787/">CVE-2018-8787</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8788/">CVE-2018-8788</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8789/">CVE-2018-8789</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009489056" comment="freerdp-2.0.0~rc4-8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489057" comment="freerdp-devel-2.0.0~rc4-8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489058" comment="libfreerdp2-2.0.0~rc4-8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489059" comment="libwinpr2-2.0.0~rc4-8.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489060" comment="winpr2-devel-2.0.0~rc4-8.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137649" version="1" class="patch">
	<metadata>
		<title>gegl-0_3-0.3.34-1.30 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2012-4433" ref_url="https://www.suse.com/security/cve/CVE-2012-4433/" source="CVE"/>
		<reference ref_id="CVE-2018-10114" ref_url="https://www.suse.com/security/cve/CVE-2018-10114/" source="CVE"/>
		<description>
These are all security issues fixed in the gegl-0_3-0.3.34-1.30 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-4433/">CVE-2012-4433</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10114/">CVE-2018-10114</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488895" comment="gegl-0_3-0.3.34-1.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488896" comment="gegl-0_3-lang-0.3.34-1.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488897" comment="gegl-devel-0.3.34-1.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488898" comment="libgegl-0_3-0-0.3.34-1.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488899" comment="typelib-1_0-Gegl-0_3-0.3.34-1.30 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137650" version="1" class="patch">
	<metadata>
		<title>gimp-2.8.22-3.42 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2007-3126" ref_url="https://www.suse.com/security/cve/CVE-2007-3126/" source="CVE"/>
		<reference ref_id="CVE-2010-4540" ref_url="https://www.suse.com/security/cve/CVE-2010-4540/" source="CVE"/>
		<reference ref_id="CVE-2010-4541" ref_url="https://www.suse.com/security/cve/CVE-2010-4541/" source="CVE"/>
		<reference ref_id="CVE-2010-4542" ref_url="https://www.suse.com/security/cve/CVE-2010-4542/" source="CVE"/>
		<reference ref_id="CVE-2010-4543" ref_url="https://www.suse.com/security/cve/CVE-2010-4543/" source="CVE"/>
		<reference ref_id="CVE-2011-2896" ref_url="https://www.suse.com/security/cve/CVE-2011-2896/" source="CVE"/>
		<reference ref_id="CVE-2012-3236" ref_url="https://www.suse.com/security/cve/CVE-2012-3236/" source="CVE"/>
		<reference ref_id="CVE-2012-5576" ref_url="https://www.suse.com/security/cve/CVE-2012-5576/" source="CVE"/>
		<reference ref_id="CVE-2016-4994" ref_url="https://www.suse.com/security/cve/CVE-2016-4994/" source="CVE"/>
		<description>
These are all security issues fixed in the gimp-2.8.22-3.42 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2007-3126/">CVE-2007-3126</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4540/">CVE-2010-4540</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2010-4541/">CVE-2010-4541</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4542/">CVE-2010-4542</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2010-4543/">CVE-2010-4543</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-2896/">CVE-2011-2896</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-3236/">CVE-2012-3236</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-5576/">CVE-2012-5576</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4994/">CVE-2016-4994</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488900" comment="gimp-2.8.22-3.42 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488901" comment="gimp-devel-2.8.22-3.42 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488902" comment="gimp-lang-2.8.22-3.42 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488903" comment="gimp-plugins-python-2.8.22-3.42 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488904" comment="libgimp-2_0-0-2.8.22-3.42 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488905" comment="libgimpui-2_0-0-2.8.22-3.42 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137651" version="1" class="patch">
	<metadata>
		<title>gnome-online-accounts-3.26.2-3.34 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2013-0240" ref_url="https://www.suse.com/security/cve/CVE-2013-0240/" source="CVE"/>
		<reference ref_id="CVE-2013-1799" ref_url="https://www.suse.com/security/cve/CVE-2013-1799/" source="CVE"/>
		<description>
These are all security issues fixed in the gnome-online-accounts-3.26.2-3.34 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0240/">CVE-2013-0240</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-1799/">CVE-2013-1799</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488906" comment="gnome-online-accounts-3.26.2-3.34 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488907" comment="gnome-online-accounts-lang-3.26.2-3.34 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137652" version="1" class="patch">
	<metadata>
		<title>gnome-shell-calendar-3.26.2+20180130.0d9c74212-4.16.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2010-4000" ref_url="https://www.suse.com/security/cve/CVE-2010-4000/" source="CVE"/>
		<reference ref_id="CVE-2017-8288" ref_url="https://www.suse.com/security/cve/CVE-2017-8288/" source="CVE"/>
		<description>
These are all security issues fixed in the gnome-shell-calendar-3.26.2+20180130.0d9c74212-4.16.1 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-4000/">CVE-2010-4000</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8288/">CVE-2017-8288</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489064" comment="gnome-shell-calendar-3.26.2+20180130.0d9c74212-4.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137653" version="1" class="patch">
	<metadata>
		<title>gstreamer-plugins-ugly-1.12.5-1.35 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2017-5838" ref_url="https://www.suse.com/security/cve/CVE-2017-5838/" source="CVE"/>
		<reference ref_id="CVE-2017-5847" ref_url="https://www.suse.com/security/cve/CVE-2017-5847/" source="CVE"/>
		<description>
These are all security issues fixed in the gstreamer-plugins-ugly-1.12.5-1.35 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5838/">CVE-2017-5838</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5847/">CVE-2017-5847</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488912" comment="gstreamer-plugins-ugly-1.12.5-1.35 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488913" comment="gstreamer-plugins-ugly-lang-1.12.5-1.35 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137654" version="1" class="patch">
	<metadata>
		<title>icedtea-web-1.7.1-5.13 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2015-5234" ref_url="https://www.suse.com/security/cve/CVE-2015-5234/" source="CVE"/>
		<reference ref_id="CVE-2015-5235" ref_url="https://www.suse.com/security/cve/CVE-2015-5235/" source="CVE"/>
		<description>
These are all security issues fixed in the icedtea-web-1.7.1-5.13 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5234/">CVE-2015-5234</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5235/">CVE-2015-5235</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489065" comment="icedtea-web-1.7.1-5.13 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137655" version="1" class="patch">
	<metadata>
		<title>imobiledevice-tools-1.2.0+git20170122.45fda81-1.44 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2013-2142" ref_url="https://www.suse.com/security/cve/CVE-2013-2142/" source="CVE"/>
		<reference ref_id="CVE-2016-5104" ref_url="https://www.suse.com/security/cve/CVE-2016-5104/" source="CVE"/>
		<description>
These are all security issues fixed in the imobiledevice-tools-1.2.0+git20170122.45fda81-1.44 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2013-2142/">CVE-2013-2142</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5104/">CVE-2016-5104</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488915" comment="imobiledevice-tools-1.2.0+git20170122.45fda81-1.44 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137656" version="1" class="patch">
	<metadata>
		<title>kernel-default-extra-4.12.14-195.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2017-1000251" ref_url="https://www.suse.com/security/cve/CVE-2017-1000251/" source="CVE"/>
		<reference ref_id="CVE-2017-1000252" ref_url="https://www.suse.com/security/cve/CVE-2017-1000252/" source="CVE"/>
		<reference ref_id="CVE-2017-1000255" ref_url="https://www.suse.com/security/cve/CVE-2017-1000255/" source="CVE"/>
		<reference ref_id="CVE-2017-1000410" ref_url="https://www.suse.com/security/cve/CVE-2017-1000410/" source="CVE"/>
		<reference ref_id="CVE-2017-11473" ref_url="https://www.suse.com/security/cve/CVE-2017-11473/" source="CVE"/>
		<reference ref_id="CVE-2017-11600" ref_url="https://www.suse.com/security/cve/CVE-2017-11600/" source="CVE"/>
		<reference ref_id="CVE-2017-12153" ref_url="https://www.suse.com/security/cve/CVE-2017-12153/" source="CVE"/>
		<reference ref_id="CVE-2017-12154" ref_url="https://www.suse.com/security/cve/CVE-2017-12154/" source="CVE"/>
		<reference ref_id="CVE-2017-12190" ref_url="https://www.suse.com/security/cve/CVE-2017-12190/" source="CVE"/>
		<reference ref_id="CVE-2017-12193" ref_url="https://www.suse.com/security/cve/CVE-2017-12193/" source="CVE"/>
		<reference ref_id="CVE-2017-13080" ref_url="https://www.suse.com/security/cve/CVE-2017-13080/" source="CVE"/>
		<reference ref_id="CVE-2017-13166" ref_url="https://www.suse.com/security/cve/CVE-2017-13166/" source="CVE"/>
		<reference ref_id="CVE-2017-14051" ref_url="https://www.suse.com/security/cve/CVE-2017-14051/" source="CVE"/>
		<reference ref_id="CVE-2017-14489" ref_url="https://www.suse.com/security/cve/CVE-2017-14489/" source="CVE"/>
		<reference ref_id="CVE-2017-15115" ref_url="https://www.suse.com/security/cve/CVE-2017-15115/" source="CVE"/>
		<reference ref_id="CVE-2017-15127" ref_url="https://www.suse.com/security/cve/CVE-2017-15127/" source="CVE"/>
		<reference ref_id="CVE-2017-15128" ref_url="https://www.suse.com/security/cve/CVE-2017-15128/" source="CVE"/>
		<reference ref_id="CVE-2017-15129" ref_url="https://www.suse.com/security/cve/CVE-2017-15129/" source="CVE"/>
		<reference ref_id="CVE-2017-15265" ref_url="https://www.suse.com/security/cve/CVE-2017-15265/" source="CVE"/>
		<reference ref_id="CVE-2017-15537" ref_url="https://www.suse.com/security/cve/CVE-2017-15537/" source="CVE"/>
		<reference ref_id="CVE-2017-15649" ref_url="https://www.suse.com/security/cve/CVE-2017-15649/" source="CVE"/>
		<reference ref_id="CVE-2017-15951" ref_url="https://www.suse.com/security/cve/CVE-2017-15951/" source="CVE"/>
		<reference ref_id="CVE-2017-16525" ref_url="https://www.suse.com/security/cve/CVE-2017-16525/" source="CVE"/>
		<reference ref_id="CVE-2017-16527" ref_url="https://www.suse.com/security/cve/CVE-2017-16527/" source="CVE"/>
		<reference ref_id="CVE-2017-16528" ref_url="https://www.suse.com/security/cve/CVE-2017-16528/" source="CVE"/>
		<reference ref_id="CVE-2017-16529" ref_url="https://www.suse.com/security/cve/CVE-2017-16529/" source="CVE"/>
		<reference ref_id="CVE-2017-16531" ref_url="https://www.suse.com/security/cve/CVE-2017-16531/" source="CVE"/>
		<reference ref_id="CVE-2017-16533" ref_url="https://www.suse.com/security/cve/CVE-2017-16533/" source="CVE"/>
		<reference ref_id="CVE-2017-16534" ref_url="https://www.suse.com/security/cve/CVE-2017-16534/" source="CVE"/>
		<reference ref_id="CVE-2017-16535" ref_url="https://www.suse.com/security/cve/CVE-2017-16535/" source="CVE"/>
		<reference ref_id="CVE-2017-16536" ref_url="https://www.suse.com/security/cve/CVE-2017-16536/" source="CVE"/>
		<reference ref_id="CVE-2017-16537" ref_url="https://www.suse.com/security/cve/CVE-2017-16537/" source="CVE"/>
		<reference ref_id="CVE-2017-16538" ref_url="https://www.suse.com/security/cve/CVE-2017-16538/" source="CVE"/>
		<reference ref_id="CVE-2017-16644" ref_url="https://www.suse.com/security/cve/CVE-2017-16644/" source="CVE"/>
		<reference ref_id="CVE-2017-16645" ref_url="https://www.suse.com/security/cve/CVE-2017-16645/" source="CVE"/>
		<reference ref_id="CVE-2017-16646" ref_url="https://www.suse.com/security/cve/CVE-2017-16646/" source="CVE"/>
		<reference ref_id="CVE-2017-16647" ref_url="https://www.suse.com/security/cve/CVE-2017-16647/" source="CVE"/>
		<reference ref_id="CVE-2017-16649" ref_url="https://www.suse.com/security/cve/CVE-2017-16649/" source="CVE"/>
		<reference ref_id="CVE-2017-16650" ref_url="https://www.suse.com/security/cve/CVE-2017-16650/" source="CVE"/>
		<reference ref_id="CVE-2017-16911" ref_url="https://www.suse.com/security/cve/CVE-2017-16911/" source="CVE"/>
		<reference ref_id="CVE-2017-16912" ref_url="https://www.suse.com/security/cve/CVE-2017-16912/" source="CVE"/>
		<reference ref_id="CVE-2017-16913" ref_url="https://www.suse.com/security/cve/CVE-2017-16913/" source="CVE"/>
		<reference ref_id="CVE-2017-16914" ref_url="https://www.suse.com/security/cve/CVE-2017-16914/" source="CVE"/>
		<reference ref_id="CVE-2017-16939" ref_url="https://www.suse.com/security/cve/CVE-2017-16939/" source="CVE"/>
		<reference ref_id="CVE-2017-16994" ref_url="https://www.suse.com/security/cve/CVE-2017-16994/" source="CVE"/>
		<reference ref_id="CVE-2017-16995" ref_url="https://www.suse.com/security/cve/CVE-2017-16995/" source="CVE"/>
		<reference ref_id="CVE-2017-16996" ref_url="https://www.suse.com/security/cve/CVE-2017-16996/" source="CVE"/>
		<reference ref_id="CVE-2017-17052" ref_url="https://www.suse.com/security/cve/CVE-2017-17052/" source="CVE"/>
		<reference ref_id="CVE-2017-17448" ref_url="https://www.suse.com/security/cve/CVE-2017-17448/" source="CVE"/>
		<reference ref_id="CVE-2017-17449" ref_url="https://www.suse.com/security/cve/CVE-2017-17449/" source="CVE"/>
		<reference ref_id="CVE-2017-17450" ref_url="https://www.suse.com/security/cve/CVE-2017-17450/" source="CVE"/>
		<reference ref_id="CVE-2017-17558" ref_url="https://www.suse.com/security/cve/CVE-2017-17558/" source="CVE"/>
		<reference ref_id="CVE-2017-17712" ref_url="https://www.suse.com/security/cve/CVE-2017-17712/" source="CVE"/>
		<reference ref_id="CVE-2017-17741" ref_url="https://www.suse.com/security/cve/CVE-2017-17741/" source="CVE"/>
		<reference ref_id="CVE-2017-17805" ref_url="https://www.suse.com/security/cve/CVE-2017-17805/" source="CVE"/>
		<reference ref_id="CVE-2017-17806" ref_url="https://www.suse.com/security/cve/CVE-2017-17806/" source="CVE"/>
		<reference ref_id="CVE-2017-17852" ref_url="https://www.suse.com/security/cve/CVE-2017-17852/" source="CVE"/>
		<reference ref_id="CVE-2017-17853" ref_url="https://www.suse.com/security/cve/CVE-2017-17853/" source="CVE"/>
		<reference ref_id="CVE-2017-17854" ref_url="https://www.suse.com/security/cve/CVE-2017-17854/" source="CVE"/>
		<reference ref_id="CVE-2017-17855" ref_url="https://www.suse.com/security/cve/CVE-2017-17855/" source="CVE"/>
		<reference ref_id="CVE-2017-17856" ref_url="https://www.suse.com/security/cve/CVE-2017-17856/" source="CVE"/>
		<reference ref_id="CVE-2017-17857" ref_url="https://www.suse.com/security/cve/CVE-2017-17857/" source="CVE"/>
		<reference ref_id="CVE-2017-17862" ref_url="https://www.suse.com/security/cve/CVE-2017-17862/" source="CVE"/>
		<reference ref_id="CVE-2017-17864" ref_url="https://www.suse.com/security/cve/CVE-2017-17864/" source="CVE"/>
		<reference ref_id="CVE-2017-17975" ref_url="https://www.suse.com/security/cve/CVE-2017-17975/" source="CVE"/>
		<reference ref_id="CVE-2017-18075" ref_url="https://www.suse.com/security/cve/CVE-2017-18075/" source="CVE"/>
		<reference ref_id="CVE-2017-18202" ref_url="https://www.suse.com/security/cve/CVE-2017-18202/" source="CVE"/>
		<reference ref_id="CVE-2017-18203" ref_url="https://www.suse.com/security/cve/CVE-2017-18203/" source="CVE"/>
		<reference ref_id="CVE-2017-18204" ref_url="https://www.suse.com/security/cve/CVE-2017-18204/" source="CVE"/>
		<reference ref_id="CVE-2017-18208" ref_url="https://www.suse.com/security/cve/CVE-2017-18208/" source="CVE"/>
		<reference ref_id="CVE-2017-18224" ref_url="https://www.suse.com/security/cve/CVE-2017-18224/" source="CVE"/>
		<reference ref_id="CVE-2017-18344" ref_url="https://www.suse.com/security/cve/CVE-2017-18344/" source="CVE"/>
		<reference ref_id="CVE-2017-5715" ref_url="https://www.suse.com/security/cve/CVE-2017-5715/" source="CVE"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2017-5754" ref_url="https://www.suse.com/security/cve/CVE-2017-5754/" source="CVE"/>
		<reference ref_id="CVE-2017-7541" ref_url="https://www.suse.com/security/cve/CVE-2017-7541/" source="CVE"/>
		<reference ref_id="CVE-2017-7542" ref_url="https://www.suse.com/security/cve/CVE-2017-7542/" source="CVE"/>
		<reference ref_id="CVE-2017-8824" ref_url="https://www.suse.com/security/cve/CVE-2017-8824/" source="CVE"/>
		<reference ref_id="CVE-2017-8831" ref_url="https://www.suse.com/security/cve/CVE-2017-8831/" source="CVE"/>
		<reference ref_id="CVE-2018-1000004" ref_url="https://www.suse.com/security/cve/CVE-2018-1000004/" source="CVE"/>
		<reference ref_id="CVE-2018-1000028" ref_url="https://www.suse.com/security/cve/CVE-2018-1000028/" source="CVE"/>
		<reference ref_id="CVE-2018-1000200" ref_url="https://www.suse.com/security/cve/CVE-2018-1000200/" source="CVE"/>
		<reference ref_id="CVE-2018-1000204" ref_url="https://www.suse.com/security/cve/CVE-2018-1000204/" source="CVE"/>
		<reference ref_id="CVE-2018-10087" ref_url="https://www.suse.com/security/cve/CVE-2018-10087/" source="CVE"/>
		<reference ref_id="CVE-2018-10124" ref_url="https://www.suse.com/security/cve/CVE-2018-10124/" source="CVE"/>
		<reference ref_id="CVE-2018-10323" ref_url="https://www.suse.com/security/cve/CVE-2018-10323/" source="CVE"/>
		<reference ref_id="CVE-2018-1065" ref_url="https://www.suse.com/security/cve/CVE-2018-1065/" source="CVE"/>
		<reference ref_id="CVE-2018-1068" ref_url="https://www.suse.com/security/cve/CVE-2018-1068/" source="CVE"/>
		<reference ref_id="CVE-2018-10853" ref_url="https://www.suse.com/security/cve/CVE-2018-10853/" source="CVE"/>
		<reference ref_id="CVE-2018-10902" ref_url="https://www.suse.com/security/cve/CVE-2018-10902/" source="CVE"/>
		<reference ref_id="CVE-2018-1091" ref_url="https://www.suse.com/security/cve/CVE-2018-1091/" source="CVE"/>
		<reference ref_id="CVE-2018-10938" ref_url="https://www.suse.com/security/cve/CVE-2018-10938/" source="CVE"/>
		<reference ref_id="CVE-2018-1094" ref_url="https://www.suse.com/security/cve/CVE-2018-1094/" source="CVE"/>
		<reference ref_id="CVE-2018-10940" ref_url="https://www.suse.com/security/cve/CVE-2018-10940/" source="CVE"/>
		<reference ref_id="CVE-2018-1108" ref_url="https://www.suse.com/security/cve/CVE-2018-1108/" source="CVE"/>
		<reference ref_id="CVE-2018-1118" ref_url="https://www.suse.com/security/cve/CVE-2018-1118/" source="CVE"/>
		<reference ref_id="CVE-2018-1120" ref_url="https://www.suse.com/security/cve/CVE-2018-1120/" source="CVE"/>
		<reference ref_id="CVE-2018-1128" ref_url="https://www.suse.com/security/cve/CVE-2018-1128/" source="CVE"/>
		<reference ref_id="CVE-2018-1129" ref_url="https://www.suse.com/security/cve/CVE-2018-1129/" source="CVE"/>
		<reference ref_id="CVE-2018-1130" ref_url="https://www.suse.com/security/cve/CVE-2018-1130/" source="CVE"/>
		<reference ref_id="CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126/" source="CVE"/>
		<reference ref_id="CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127/" source="CVE"/>
		<reference ref_id="CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130/" source="CVE"/>
		<reference ref_id="CVE-2018-12232" ref_url="https://www.suse.com/security/cve/CVE-2018-12232/" source="CVE"/>
		<reference ref_id="CVE-2018-12233" ref_url="https://www.suse.com/security/cve/CVE-2018-12233/" source="CVE"/>
		<reference ref_id="CVE-2018-12896" ref_url="https://www.suse.com/security/cve/CVE-2018-12896/" source="CVE"/>
		<reference ref_id="CVE-2018-13053" ref_url="https://www.suse.com/security/cve/CVE-2018-13053/" source="CVE"/>
		<reference ref_id="CVE-2018-13093" ref_url="https://www.suse.com/security/cve/CVE-2018-13093/" source="CVE"/>
		<reference ref_id="CVE-2018-13094" ref_url="https://www.suse.com/security/cve/CVE-2018-13094/" source="CVE"/>
		<reference ref_id="CVE-2018-13095" ref_url="https://www.suse.com/security/cve/CVE-2018-13095/" source="CVE"/>
		<reference ref_id="CVE-2018-13405" ref_url="https://www.suse.com/security/cve/CVE-2018-13405/" source="CVE"/>
		<reference ref_id="CVE-2018-13406" ref_url="https://www.suse.com/security/cve/CVE-2018-13406/" source="CVE"/>
		<reference ref_id="CVE-2018-14613" ref_url="https://www.suse.com/security/cve/CVE-2018-14613/" source="CVE"/>
		<reference ref_id="CVE-2018-14617" ref_url="https://www.suse.com/security/cve/CVE-2018-14617/" source="CVE"/>
		<reference ref_id="CVE-2018-14625" ref_url="https://www.suse.com/security/cve/CVE-2018-14625/" source="CVE"/>
		<reference ref_id="CVE-2018-14633" ref_url="https://www.suse.com/security/cve/CVE-2018-14633/" source="CVE"/>
		<reference ref_id="CVE-2018-15572" ref_url="https://www.suse.com/security/cve/CVE-2018-15572/" source="CVE"/>
		<reference ref_id="CVE-2018-16658" ref_url="https://www.suse.com/security/cve/CVE-2018-16658/" source="CVE"/>
		<reference ref_id="CVE-2018-16862" ref_url="https://www.suse.com/security/cve/CVE-2018-16862/" source="CVE"/>
		<reference ref_id="CVE-2018-16880" ref_url="https://www.suse.com/security/cve/CVE-2018-16880/" source="CVE"/>
		<reference ref_id="CVE-2018-16884" ref_url="https://www.suse.com/security/cve/CVE-2018-16884/" source="CVE"/>
		<reference ref_id="CVE-2018-17182" ref_url="https://www.suse.com/security/cve/CVE-2018-17182/" source="CVE"/>
		<reference ref_id="CVE-2018-18281" ref_url="https://www.suse.com/security/cve/CVE-2018-18281/" source="CVE"/>
		<reference ref_id="CVE-2018-18386" ref_url="https://www.suse.com/security/cve/CVE-2018-18386/" source="CVE"/>
		<reference ref_id="CVE-2018-18397" ref_url="https://www.suse.com/security/cve/CVE-2018-18397/" source="CVE"/>
		<reference ref_id="CVE-2018-18445" ref_url="https://www.suse.com/security/cve/CVE-2018-18445/" source="CVE"/>
		<reference ref_id="CVE-2018-18710" ref_url="https://www.suse.com/security/cve/CVE-2018-18710/" source="CVE"/>
		<reference ref_id="CVE-2018-19407" ref_url="https://www.suse.com/security/cve/CVE-2018-19407/" source="CVE"/>
		<reference ref_id="CVE-2018-19824" ref_url="https://www.suse.com/security/cve/CVE-2018-19824/" source="CVE"/>
		<reference ref_id="CVE-2018-19854" ref_url="https://www.suse.com/security/cve/CVE-2018-19854/" source="CVE"/>
		<reference ref_id="CVE-2018-19985" ref_url="https://www.suse.com/security/cve/CVE-2018-19985/" source="CVE"/>
		<reference ref_id="CVE-2018-20169" ref_url="https://www.suse.com/security/cve/CVE-2018-20169/" source="CVE"/>
		<reference ref_id="CVE-2018-20669" ref_url="https://www.suse.com/security/cve/CVE-2018-20669/" source="CVE"/>
		<reference ref_id="CVE-2018-3620" ref_url="https://www.suse.com/security/cve/CVE-2018-3620/" source="CVE"/>
		<reference ref_id="CVE-2018-3639" ref_url="https://www.suse.com/security/cve/CVE-2018-3639/" source="CVE"/>
		<reference ref_id="CVE-2018-3646" ref_url="https://www.suse.com/security/cve/CVE-2018-3646/" source="CVE"/>
		<reference ref_id="CVE-2018-5332" ref_url="https://www.suse.com/security/cve/CVE-2018-5332/" source="CVE"/>
		<reference ref_id="CVE-2018-5333" ref_url="https://www.suse.com/security/cve/CVE-2018-5333/" source="CVE"/>
		<reference ref_id="CVE-2018-5390" ref_url="https://www.suse.com/security/cve/CVE-2018-5390/" source="CVE"/>
		<reference ref_id="CVE-2018-5391" ref_url="https://www.suse.com/security/cve/CVE-2018-5391/" source="CVE"/>
		<reference ref_id="CVE-2018-5803" ref_url="https://www.suse.com/security/cve/CVE-2018-5803/" source="CVE"/>
		<reference ref_id="CVE-2018-5848" ref_url="https://www.suse.com/security/cve/CVE-2018-5848/" source="CVE"/>
		<reference ref_id="CVE-2018-6554" ref_url="https://www.suse.com/security/cve/CVE-2018-6554/" source="CVE"/>
		<reference ref_id="CVE-2018-6555" ref_url="https://www.suse.com/security/cve/CVE-2018-6555/" source="CVE"/>
		<reference ref_id="CVE-2018-6927" ref_url="https://www.suse.com/security/cve/CVE-2018-6927/" source="CVE"/>
		<reference ref_id="CVE-2018-7492" ref_url="https://www.suse.com/security/cve/CVE-2018-7492/" source="CVE"/>
		<reference ref_id="CVE-2018-7566" ref_url="https://www.suse.com/security/cve/CVE-2018-7566/" source="CVE"/>
		<reference ref_id="CVE-2018-7740" ref_url="https://www.suse.com/security/cve/CVE-2018-7740/" source="CVE"/>
		<reference ref_id="CVE-2018-8043" ref_url="https://www.suse.com/security/cve/CVE-2018-8043/" source="CVE"/>
		<reference ref_id="CVE-2018-8087" ref_url="https://www.suse.com/security/cve/CVE-2018-8087/" source="CVE"/>
		<reference ref_id="CVE-2018-8781" ref_url="https://www.suse.com/security/cve/CVE-2018-8781/" source="CVE"/>
		<reference ref_id="CVE-2018-8822" ref_url="https://www.suse.com/security/cve/CVE-2018-8822/" source="CVE"/>
		<reference ref_id="CVE-2018-9363" ref_url="https://www.suse.com/security/cve/CVE-2018-9363/" source="CVE"/>
		<reference ref_id="CVE-2018-9385" ref_url="https://www.suse.com/security/cve/CVE-2018-9385/" source="CVE"/>
		<reference ref_id="CVE-2018-9568" ref_url="https://www.suse.com/security/cve/CVE-2018-9568/" source="CVE"/>
		<reference ref_id="CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091/" source="CVE"/>
		<reference ref_id="CVE-2019-2024" ref_url="https://www.suse.com/security/cve/CVE-2019-2024/" source="CVE"/>
		<reference ref_id="CVE-2019-3459" ref_url="https://www.suse.com/security/cve/CVE-2019-3459/" source="CVE"/>
		<reference ref_id="CVE-2019-3460" ref_url="https://www.suse.com/security/cve/CVE-2019-3460/" source="CVE"/>
		<reference ref_id="CVE-2019-3560" ref_url="https://www.suse.com/security/cve/CVE-2019-3560/" source="CVE"/>
		<reference ref_id="CVE-2019-3819" ref_url="https://www.suse.com/security/cve/CVE-2019-3819/" source="CVE"/>
		<reference ref_id="CVE-2019-6974" ref_url="https://www.suse.com/security/cve/CVE-2019-6974/" source="CVE"/>
		<reference ref_id="CVE-2019-7221" ref_url="https://www.suse.com/security/cve/CVE-2019-7221/" source="CVE"/>
		<reference ref_id="CVE-2019-7222" ref_url="https://www.suse.com/security/cve/CVE-2019-7222/" source="CVE"/>
		<reference ref_id="CVE-2019-7308" ref_url="https://www.suse.com/security/cve/CVE-2019-7308/" source="CVE"/>
		<reference ref_id="CVE-2019-8912" ref_url="https://www.suse.com/security/cve/CVE-2019-8912/" source="CVE"/>
		<reference ref_id="CVE-2019-8980" ref_url="https://www.suse.com/security/cve/CVE-2019-8980/" source="CVE"/>
		<reference ref_id="CVE-2019-9003" ref_url="https://www.suse.com/security/cve/CVE-2019-9003/" source="CVE"/>
		<reference ref_id="CVE-2019-9213" ref_url="https://www.suse.com/security/cve/CVE-2019-9213/" source="CVE"/>
		<description>
These are all security issues fixed in the kernel-default-extra-4.12.14-195.1 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000251/">CVE-2017-1000251</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000252/">CVE-2017-1000252</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000255/">CVE-2017-1000255</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-1000410/">CVE-2017-1000410</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11473/">CVE-2017-11473</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-11600/">CVE-2017-11600</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12153/">CVE-2017-12153</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12154/">CVE-2017-12154</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12190/">CVE-2017-12190</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-12193/">CVE-2017-12193</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13080/">CVE-2017-13080</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-13166/">CVE-2017-13166</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14051/">CVE-2017-14051</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14489/">CVE-2017-14489</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15115/">CVE-2017-15115</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15127/">CVE-2017-15127</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15128/">CVE-2017-15128</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-15129/">CVE-2017-15129</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15265/">CVE-2017-15265</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-15537/">CVE-2017-15537</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15649/">CVE-2017-15649</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15951/">CVE-2017-15951</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16525/">CVE-2017-16525</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16527/">CVE-2017-16527</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16528/">CVE-2017-16528</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16529/">CVE-2017-16529</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16531/">CVE-2017-16531</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16533/">CVE-2017-16533</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16534/">CVE-2017-16534</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16535/">CVE-2017-16535</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16536/">CVE-2017-16536</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16537/">CVE-2017-16537</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16538/">CVE-2017-16538</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16644/">CVE-2017-16644</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16645/">CVE-2017-16645</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16646/">CVE-2017-16646</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16647/">CVE-2017-16647</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16649/">CVE-2017-16649</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16650/">CVE-2017-16650</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-16911/">CVE-2017-16911</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16912/">CVE-2017-16912</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16913/">CVE-2017-16913</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16914/">CVE-2017-16914</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16939/">CVE-2017-16939</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-16994/">CVE-2017-16994</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16995/">CVE-2017-16995</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16996/">CVE-2017-16996</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17052/">CVE-2017-17052</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17448/">CVE-2017-17448</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17449/">CVE-2017-17449</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-17450/">CVE-2017-17450</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17558/">CVE-2017-17558</cve>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17712/">CVE-2017-17712</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17741/">CVE-2017-17741</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17805/">CVE-2017-17805</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17806/">CVE-2017-17806</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17852/">CVE-2017-17852</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17853/">CVE-2017-17853</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-17854/">CVE-2017-17854</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17855/">CVE-2017-17855</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17856/">CVE-2017-17856</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17857/">CVE-2017-17857</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17862/">CVE-2017-17862</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17864/">CVE-2017-17864</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17975/">CVE-2017-17975</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18075/">CVE-2017-18075</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18202/">CVE-2017-18202</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18203/">CVE-2017-18203</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18204/">CVE-2017-18204</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18208/">CVE-2017-18208</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18224/">CVE-2017-18224</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-18344/">CVE-2017-18344</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5715/">CVE-2017-5715</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5754/">CVE-2017-5754</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7541/">CVE-2017-7541</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-7542/">CVE-2017-7542</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8824/">CVE-2017-8824</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8831/">CVE-2017-8831</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000004/">CVE-2018-1000004</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000028/">CVE-2018-1000028</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000200/">CVE-2018-1000200</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000204/">CVE-2018-1000204</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10087/">CVE-2018-10087</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10124/">CVE-2018-10124</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10323/">CVE-2018-10323</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1065/">CVE-2018-1065</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1068/">CVE-2018-1068</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10853/">CVE-2018-10853</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10902/">CVE-2018-10902</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1091/">CVE-2018-1091</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10938/">CVE-2018-10938</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1094/">CVE-2018-1094</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10940/">CVE-2018-10940</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1108/">CVE-2018-1108</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1118/">CVE-2018-1118</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1120/">CVE-2018-1120</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2018-1128/">CVE-2018-1128</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1129/">CVE-2018-1129</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1130/">CVE-2018-1130</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<cve href="https://www.suse.com/security/cve/CVE-2018-12232/">CVE-2018-12232</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12233/">CVE-2018-12233</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12896/">CVE-2018-12896</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13053/">CVE-2018-13053</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-13093/">CVE-2018-13093</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-13094/">CVE-2018-13094</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-13095/">CVE-2018-13095</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-13405/">CVE-2018-13405</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-13406/">CVE-2018-13406</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14613/">CVE-2018-14613</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14617/">CVE-2018-14617</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-14625/">CVE-2018-14625</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14633/">CVE-2018-14633</cve>
	<cve impact="important" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-15572/">CVE-2018-15572</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16658/">CVE-2018-16658</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16862/">CVE-2018-16862</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16880/">CVE-2018-16880</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16884/">CVE-2018-16884</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17182/">CVE-2018-17182</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18281/">CVE-2018-18281</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18386/">CVE-2018-18386</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-18397/">CVE-2018-18397</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18445/">CVE-2018-18445</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18710/">CVE-2018-18710</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19407/">CVE-2018-19407</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19824/">CVE-2018-19824</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-19854/">CVE-2018-19854</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-19985/">CVE-2018-19985</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20169/">CVE-2018-20169</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20669/">CVE-2018-20669</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3620/">CVE-2018-3620</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3639/">CVE-2018-3639</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3646/">CVE-2018-3646</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-5332/">CVE-2018-5332</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5333/">CVE-2018-5333</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5390/">CVE-2018-5390</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5391/">CVE-2018-5391</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5803/">CVE-2018-5803</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-5848/">CVE-2018-5848</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6554/">CVE-2018-6554</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-6555/">CVE-2018-6555</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6927/">CVE-2018-6927</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7492/">CVE-2018-7492</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-7566/">CVE-2018-7566</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7740/">CVE-2018-7740</cve>
	<cve impact="low" cvss3="0/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-8043/">CVE-2018-8043</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-8087/">CVE-2018-8087</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8781/">CVE-2018-8781</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-8822/">CVE-2018-8822</cve>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-9363/">CVE-2018-9363</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9385/">CVE-2018-9385</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-9568/">CVE-2018-9568</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2024/">CVE-2019-2024</cve>
	<cve impact="moderate" cvss3="2.6/CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3459/">CVE-2019-3459</cve>
	<cve impact="moderate" cvss3="2.6/CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3460/">CVE-2019-3460</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3560/">CVE-2019-3560</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3819/">CVE-2019-3819</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6974/">CVE-2019-6974</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-7221/">CVE-2019-7221</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-7222/">CVE-2019-7222</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-7308/">CVE-2019-7308</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8912/">CVE-2019-8912</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8980/">CVE-2019-8980</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9003/">CVE-2019-9003</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9213/">CVE-2019-9213</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489066" comment="kernel-default-extra-4.12.14-195.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137657" version="1" class="patch">
	<metadata>
		<title>libavcodec-devel-3.4.2-4.12.4 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2015-8216" ref_url="https://www.suse.com/security/cve/CVE-2015-8216/" source="CVE"/>
		<reference ref_id="CVE-2015-8217" ref_url="https://www.suse.com/security/cve/CVE-2015-8217/" source="CVE"/>
		<reference ref_id="CVE-2015-8218" ref_url="https://www.suse.com/security/cve/CVE-2015-8218/" source="CVE"/>
		<reference ref_id="CVE-2015-8219" ref_url="https://www.suse.com/security/cve/CVE-2015-8219/" source="CVE"/>
		<reference ref_id="CVE-2015-8363" ref_url="https://www.suse.com/security/cve/CVE-2015-8363/" source="CVE"/>
		<reference ref_id="CVE-2015-8364" ref_url="https://www.suse.com/security/cve/CVE-2015-8364/" source="CVE"/>
		<reference ref_id="CVE-2015-8365" ref_url="https://www.suse.com/security/cve/CVE-2015-8365/" source="CVE"/>
		<reference ref_id="CVE-2015-8661" ref_url="https://www.suse.com/security/cve/CVE-2015-8661/" source="CVE"/>
		<reference ref_id="CVE-2015-8662" ref_url="https://www.suse.com/security/cve/CVE-2015-8662/" source="CVE"/>
		<reference ref_id="CVE-2015-8663" ref_url="https://www.suse.com/security/cve/CVE-2015-8663/" source="CVE"/>
		<reference ref_id="CVE-2016-10190" ref_url="https://www.suse.com/security/cve/CVE-2016-10190/" source="CVE"/>
		<reference ref_id="CVE-2016-10191" ref_url="https://www.suse.com/security/cve/CVE-2016-10191/" source="CVE"/>
		<reference ref_id="CVE-2016-10192" ref_url="https://www.suse.com/security/cve/CVE-2016-10192/" source="CVE"/>
		<reference ref_id="CVE-2016-1897" ref_url="https://www.suse.com/security/cve/CVE-2016-1897/" source="CVE"/>
		<reference ref_id="CVE-2016-1898" ref_url="https://www.suse.com/security/cve/CVE-2016-1898/" source="CVE"/>
		<reference ref_id="CVE-2017-11399" ref_url="https://www.suse.com/security/cve/CVE-2017-11399/" source="CVE"/>
		<reference ref_id="CVE-2017-11665" ref_url="https://www.suse.com/security/cve/CVE-2017-11665/" source="CVE"/>
		<reference ref_id="CVE-2017-14054" ref_url="https://www.suse.com/security/cve/CVE-2017-14054/" source="CVE"/>
		<reference ref_id="CVE-2017-14055" ref_url="https://www.suse.com/security/cve/CVE-2017-14055/" source="CVE"/>
		<reference ref_id="CVE-2017-14056" ref_url="https://www.suse.com/security/cve/CVE-2017-14056/" source="CVE"/>
		<reference ref_id="CVE-2017-14057" ref_url="https://www.suse.com/security/cve/CVE-2017-14057/" source="CVE"/>
		<reference ref_id="CVE-2017-14058" ref_url="https://www.suse.com/security/cve/CVE-2017-14058/" source="CVE"/>
		<reference ref_id="CVE-2017-14059" ref_url="https://www.suse.com/security/cve/CVE-2017-14059/" source="CVE"/>
		<reference ref_id="CVE-2017-14169" ref_url="https://www.suse.com/security/cve/CVE-2017-14169/" source="CVE"/>
		<reference ref_id="CVE-2017-14170" ref_url="https://www.suse.com/security/cve/CVE-2017-14170/" source="CVE"/>
		<reference ref_id="CVE-2017-14171" ref_url="https://www.suse.com/security/cve/CVE-2017-14171/" source="CVE"/>
		<reference ref_id="CVE-2017-14222" ref_url="https://www.suse.com/security/cve/CVE-2017-14222/" source="CVE"/>
		<reference ref_id="CVE-2017-14223" ref_url="https://www.suse.com/security/cve/CVE-2017-14223/" source="CVE"/>
		<reference ref_id="CVE-2017-14225" ref_url="https://www.suse.com/security/cve/CVE-2017-14225/" source="CVE"/>
		<reference ref_id="CVE-2017-15186" ref_url="https://www.suse.com/security/cve/CVE-2017-15186/" source="CVE"/>
		<reference ref_id="CVE-2017-15672" ref_url="https://www.suse.com/security/cve/CVE-2017-15672/" source="CVE"/>
		<reference ref_id="CVE-2017-16840" ref_url="https://www.suse.com/security/cve/CVE-2017-16840/" source="CVE"/>
		<reference ref_id="CVE-2017-17081" ref_url="https://www.suse.com/security/cve/CVE-2017-17081/" source="CVE"/>
		<reference ref_id="CVE-2017-17555" ref_url="https://www.suse.com/security/cve/CVE-2017-17555/" source="CVE"/>
		<reference ref_id="CVE-2017-7859" ref_url="https://www.suse.com/security/cve/CVE-2017-7859/" source="CVE"/>
		<reference ref_id="CVE-2017-7862" ref_url="https://www.suse.com/security/cve/CVE-2017-7862/" source="CVE"/>
		<reference ref_id="CVE-2017-7863" ref_url="https://www.suse.com/security/cve/CVE-2017-7863/" source="CVE"/>
		<reference ref_id="CVE-2017-7865" ref_url="https://www.suse.com/security/cve/CVE-2017-7865/" source="CVE"/>
		<reference ref_id="CVE-2017-7866" ref_url="https://www.suse.com/security/cve/CVE-2017-7866/" source="CVE"/>
		<reference ref_id="CVE-2018-12458" ref_url="https://www.suse.com/security/cve/CVE-2018-12458/" source="CVE"/>
		<reference ref_id="CVE-2018-13300" ref_url="https://www.suse.com/security/cve/CVE-2018-13300/" source="CVE"/>
		<reference ref_id="CVE-2018-13302" ref_url="https://www.suse.com/security/cve/CVE-2018-13302/" source="CVE"/>
		<reference ref_id="CVE-2018-13305" ref_url="https://www.suse.com/security/cve/CVE-2018-13305/" source="CVE"/>
		<reference ref_id="CVE-2018-15822" ref_url="https://www.suse.com/security/cve/CVE-2018-15822/" source="CVE"/>
		<reference ref_id="CVE-2018-1999010" ref_url="https://www.suse.com/security/cve/CVE-2018-1999010/" source="CVE"/>
		<reference ref_id="CVE-2018-1999011" ref_url="https://www.suse.com/security/cve/CVE-2018-1999011/" source="CVE"/>
		<reference ref_id="CVE-2018-1999012" ref_url="https://www.suse.com/security/cve/CVE-2018-1999012/" source="CVE"/>
		<reference ref_id="CVE-2018-1999013" ref_url="https://www.suse.com/security/cve/CVE-2018-1999013/" source="CVE"/>
		<reference ref_id="CVE-2018-6392" ref_url="https://www.suse.com/security/cve/CVE-2018-6392/" source="CVE"/>
		<reference ref_id="CVE-2018-6621" ref_url="https://www.suse.com/security/cve/CVE-2018-6621/" source="CVE"/>
		<description>
These are all security issues fixed in the libavcodec-devel-3.4.2-4.12.4 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8216/">CVE-2015-8216</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8217/">CVE-2015-8217</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8218/">CVE-2015-8218</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8219/">CVE-2015-8219</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8363/">CVE-2015-8363</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8364/">CVE-2015-8364</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8365/">CVE-2015-8365</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8661/">CVE-2015-8661</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8662/">CVE-2015-8662</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8663/">CVE-2015-8663</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10190/">CVE-2016-10190</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10191/">CVE-2016-10191</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10192/">CVE-2016-10192</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1897/">CVE-2016-1897</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-1898/">CVE-2016-1898</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-11399/">CVE-2017-11399</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-11665/">CVE-2017-11665</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14054/">CVE-2017-14054</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14055/">CVE-2017-14055</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14056/">CVE-2017-14056</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14057/">CVE-2017-14057</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14058/">CVE-2017-14058</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14059/">CVE-2017-14059</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14169/">CVE-2017-14169</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14170/">CVE-2017-14170</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14171/">CVE-2017-14171</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14222/">CVE-2017-14222</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-14223/">CVE-2017-14223</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-14225/">CVE-2017-14225</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15186/">CVE-2017-15186</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15672/">CVE-2017-15672</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16840/">CVE-2017-16840</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17081/">CVE-2017-17081</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17555/">CVE-2017-17555</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7859/">CVE-2017-7859</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7862/">CVE-2017-7862</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7863/">CVE-2017-7863</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7865/">CVE-2017-7865</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7866/">CVE-2017-7866</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12458/">CVE-2018-12458</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13300/">CVE-2018-13300</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13302/">CVE-2018-13302</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13305/">CVE-2018-13305</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-15822/">CVE-2018-15822</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999010/">CVE-2018-1999010</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999011/">CVE-2018-1999011</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999012/">CVE-2018-1999012</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1999013/">CVE-2018-1999013</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6392/">CVE-2018-6392</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6621/">CVE-2018-6621</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009489067" comment="libavcodec-devel-3.4.2-4.12.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489068" comment="libavformat-devel-3.4.2-4.12.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489069" comment="libavformat57-3.4.2-4.12.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489070" comment="libavresample-devel-3.4.2-4.12.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489071" comment="libavresample3-3.4.2-4.12.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137658" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1050305" ref_url="https://bugzilla.suse.com/1050305" source="BUGZILLA"/>
		<reference ref_id="1088263" ref_url="https://bugzilla.suse.com/1088263" source="BUGZILLA"/>
		<reference ref_id="1091606" ref_url="https://bugzilla.suse.com/1091606" source="BUGZILLA"/>
		<reference ref_id="1094779" ref_url="https://bugzilla.suse.com/1094779" source="BUGZILLA"/>
		<reference ref_id="1095601" ref_url="https://bugzilla.suse.com/1095601" source="BUGZILLA"/>
		<reference ref_id="1095639" ref_url="https://bugzilla.suse.com/1095639" source="BUGZILLA"/>
		<reference ref_id="1096360" ref_url="https://bugzilla.suse.com/1096360" source="BUGZILLA"/>
		<reference ref_id="1098891" ref_url="https://bugzilla.suse.com/1098891" source="BUGZILLA"/>
		<reference ref_id="1104876" ref_url="https://bugzilla.suse.com/1104876" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10583" ref_url="https://www.suse.com/security/cve/CVE-2018-10583/" source="CVE"/>
		<description>


This update for LibreOffice, libepubgen, liblangtag, libmwaw, libnumbertext, libstaroffice, libwps, myspell-dictionaries, xmlsec1 fixes the following issues:

LibreOffice was updated to 6.1.3.2 (fate#326624) and contains new features and lots of bugfixes:

The full changelog can be found on:

        https://wiki.documentfoundation.org/ReleaseNotes/6.1

Bugfixes:

- bsc#1095639 Exporting to PPTX results in vertical labels being shown horizontally
- bsc#1098891 Table in PPTX misplaced and partly blue
- bsc#1088263 Labels in chart change (from white and other colors) to black when saving as PPTX
- bsc#1095601 Exporting to PPTX shifts arrow shapes quite a bit

- Add more translations:
  * Belarusian
  * Bodo
  * Dogri
  * Frisian
  * Gaelic
  * Paraguayan_Guaran
  * Upper_Sorbian
  * Konkani
  * Kashmiri
  * Luxembourgish
  * Monglolian
  * Manipuri
  * Burnese
  * Occitan
  * Kinyarwanda
  * Santali
  * Sanskrit
  * Sindhi
  * Sidamo
  * Tatar
  * Uzbek
  * Upper Sorbian
  * Venetian
  * Amharic
  * Asturian
  * Tibetian
  * Bosnian
  * English GB
  * English ZA
  * Indonesian
  * Icelandic
  * Georgian
  * Khmer
  * Lao
  * Macedonian
  * Nepali
  * Oromo
  * Albanian
  * Tajik
  * Uyghur
  * Vietnamese
  * Kurdish

- Try to build all languages see bsc#1096360
- Make sure to install the KDE5/Qt5 UI/filepicker
- Try to implement safeguarding to avoid bsc#1050305
- Disable base-drivers-mysql as it needs mysqlcppcon that is only
  for mysql and not mariadb, causes issues bsc#1094779
  * Users can still connect using jdbc/odbc
- Fix java detection on machines with too many cpus

- CVE-2018-10583: An information disclosure vulnerability occured when LibreOffice automatically processed and initiated an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document. (bsc#1091606)

libepubgen was updated to 0.1.1:

- Avoid &lt;div&gt; inside &lt;p&gt; or &lt;span&gt;.
- Avoid writin vertical-align attribute without a value.
- Fix generation of invalid XHTML when there is a link starting at the beginning of a footnote.
- Handle relative width for images.
- Fixed layout: write chapter names to improve navigation.
- Support writing mode.
- Start a new HTML file at every page span in addition to the splits induced by the chosen split method. This is to ensure that specified writing mode works correctly, as it is HTML &lt;body&gt; attribute.

liblangtag was updated to 0.6.2:

- use standard function
- fix leak in test

libmwaw was updated to 0.3.14:

- Support MS Multiplan 1.1 files

libnumbertext was update to 1.0.5:

- Various fixes in numerical calculations and issues reported on libreoffice tracker

libstaroffice was updated to 0.0.6:

- retrieve some StarMath's formula,
- retrieve some charts as graphic,
- retrieve some fields in sda/sdc/sdp text-boxes,
- .sdw: retrieve more attachments.

libwps was updated to 0.4.9:

- QuattroPro: add parser to .wb3 files
- Multiplan: add parser to DOS v1-v3 files
- charts: try to retrieve charts in .wk*, .wq* files
- QuattroPro: add parser to .wb[12] files

myspell-dictionaries was updated to 20181025:

- Turkish dictionary added
- Updated French dictionary

xmlsec1 was updated to 1.2.26:

- Added xmlsec-mscng module based on Microsoft Cryptography API: Next Generation
- Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R 34.10-2001 in xmlsec-mscrypto

		</description>
<advisory from="security@suse.de">
	<issued date="2018-11-08"/>
	<updated date="2018-11-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1050305">SUSE bug 1050305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088263">SUSE bug 1088263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091606">SUSE bug 1091606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094779">SUSE bug 1094779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095601">SUSE bug 1095601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095639">SUSE bug 1095639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096360">SUSE bug 1096360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098891">SUSE bug 1098891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104876">SUSE bug 1104876</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10583/">CVE-2018-10583</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782536" comment="libepubgen-0_1-1-0.1.1-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782537" comment="libepubgen-devel-0.1.1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137659" version="1" class="patch">
	<metadata>
		<title>libgadu-devel-1.12.2-1.44 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2013-6487" ref_url="https://www.suse.com/security/cve/CVE-2013-6487/" source="CVE"/>
		<reference ref_id="CVE-2014-3775" ref_url="https://www.suse.com/security/cve/CVE-2014-3775/" source="CVE"/>
		<description>
These are all security issues fixed in the libgadu-devel-1.12.2-1.44 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6487/">CVE-2013-6487</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3775/">CVE-2014-3775</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488922" comment="libgadu-devel-1.12.2-1.44 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488923" comment="libgadu3-1.12.2-1.44 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137660" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1050305" ref_url="https://bugzilla.suse.com/1050305" source="BUGZILLA"/>
		<reference ref_id="1088263" ref_url="https://bugzilla.suse.com/1088263" source="BUGZILLA"/>
		<reference ref_id="1091606" ref_url="https://bugzilla.suse.com/1091606" source="BUGZILLA"/>
		<reference ref_id="1094779" ref_url="https://bugzilla.suse.com/1094779" source="BUGZILLA"/>
		<reference ref_id="1095601" ref_url="https://bugzilla.suse.com/1095601" source="BUGZILLA"/>
		<reference ref_id="1095639" ref_url="https://bugzilla.suse.com/1095639" source="BUGZILLA"/>
		<reference ref_id="1096360" ref_url="https://bugzilla.suse.com/1096360" source="BUGZILLA"/>
		<reference ref_id="1098891" ref_url="https://bugzilla.suse.com/1098891" source="BUGZILLA"/>
		<reference ref_id="1104876" ref_url="https://bugzilla.suse.com/1104876" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10583" ref_url="https://www.suse.com/security/cve/CVE-2018-10583/" source="CVE"/>
		<description>


This update for LibreOffice, libepubgen, liblangtag, libmwaw, libnumbertext, libstaroffice, libwps, myspell-dictionaries, xmlsec1 fixes the following issues:

LibreOffice was updated to 6.1.3.2 (fate#326624) and contains new features and lots of bugfixes:

The full changelog can be found on:

        https://wiki.documentfoundation.org/ReleaseNotes/6.1

Bugfixes:

- bsc#1095639 Exporting to PPTX results in vertical labels being shown horizontally
- bsc#1098891 Table in PPTX misplaced and partly blue
- bsc#1088263 Labels in chart change (from white and other colors) to black when saving as PPTX
- bsc#1095601 Exporting to PPTX shifts arrow shapes quite a bit

- Add more translations:
  * Belarusian
  * Bodo
  * Dogri
  * Frisian
  * Gaelic
  * Paraguayan_Guaran
  * Upper_Sorbian
  * Konkani
  * Kashmiri
  * Luxembourgish
  * Monglolian
  * Manipuri
  * Burnese
  * Occitan
  * Kinyarwanda
  * Santali
  * Sanskrit
  * Sindhi
  * Sidamo
  * Tatar
  * Uzbek
  * Upper Sorbian
  * Venetian
  * Amharic
  * Asturian
  * Tibetian
  * Bosnian
  * English GB
  * English ZA
  * Indonesian
  * Icelandic
  * Georgian
  * Khmer
  * Lao
  * Macedonian
  * Nepali
  * Oromo
  * Albanian
  * Tajik
  * Uyghur
  * Vietnamese
  * Kurdish

- Try to build all languages see bsc#1096360
- Make sure to install the KDE5/Qt5 UI/filepicker
- Try to implement safeguarding to avoid bsc#1050305
- Disable base-drivers-mysql as it needs mysqlcppcon that is only
  for mysql and not mariadb, causes issues bsc#1094779
  * Users can still connect using jdbc/odbc
- Fix java detection on machines with too many cpus

- CVE-2018-10583: An information disclosure vulnerability occured when LibreOffice automatically processed and initiated an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document. (bsc#1091606)

libepubgen was updated to 0.1.1:

- Avoid &lt;div&gt; inside &lt;p&gt; or &lt;span&gt;.
- Avoid writin vertical-align attribute without a value.
- Fix generation of invalid XHTML when there is a link starting at the beginning of a footnote.
- Handle relative width for images.
- Fixed layout: write chapter names to improve navigation.
- Support writing mode.
- Start a new HTML file at every page span in addition to the splits induced by the chosen split method. This is to ensure that specified writing mode works correctly, as it is HTML &lt;body&gt; attribute.

liblangtag was updated to 0.6.2:

- use standard function
- fix leak in test

libmwaw was updated to 0.3.14:

- Support MS Multiplan 1.1 files

libnumbertext was update to 1.0.5:

- Various fixes in numerical calculations and issues reported on libreoffice tracker

libstaroffice was updated to 0.0.6:

- retrieve some StarMath's formula,
- retrieve some charts as graphic,
- retrieve some fields in sda/sdc/sdp text-boxes,
- .sdw: retrieve more attachments.

libwps was updated to 0.4.9:

- QuattroPro: add parser to .wb3 files
- Multiplan: add parser to DOS v1-v3 files
- charts: try to retrieve charts in .wk*, .wq* files
- QuattroPro: add parser to .wb[12] files

myspell-dictionaries was updated to 20181025:

- Turkish dictionary added
- Updated French dictionary

xmlsec1 was updated to 1.2.26:

- Added xmlsec-mscng module based on Microsoft Cryptography API: Next Generation
- Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R 34.10-2001 in xmlsec-mscrypto

		</description>
<advisory from="security@suse.de">
	<issued date="2018-11-08"/>
	<updated date="2018-11-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1050305">SUSE bug 1050305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088263">SUSE bug 1088263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091606">SUSE bug 1091606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094779">SUSE bug 1094779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095601">SUSE bug 1095601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095639">SUSE bug 1095639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096360">SUSE bug 1096360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098891">SUSE bug 1098891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104876">SUSE bug 1104876</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10583/">CVE-2018-10583</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782540" comment="liblangtag-devel-0.6.2-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782542" comment="liblangtag1-0.6.2-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137661" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1050305" ref_url="https://bugzilla.suse.com/1050305" source="BUGZILLA"/>
		<reference ref_id="1088263" ref_url="https://bugzilla.suse.com/1088263" source="BUGZILLA"/>
		<reference ref_id="1091606" ref_url="https://bugzilla.suse.com/1091606" source="BUGZILLA"/>
		<reference ref_id="1094779" ref_url="https://bugzilla.suse.com/1094779" source="BUGZILLA"/>
		<reference ref_id="1095601" ref_url="https://bugzilla.suse.com/1095601" source="BUGZILLA"/>
		<reference ref_id="1095639" ref_url="https://bugzilla.suse.com/1095639" source="BUGZILLA"/>
		<reference ref_id="1096360" ref_url="https://bugzilla.suse.com/1096360" source="BUGZILLA"/>
		<reference ref_id="1098891" ref_url="https://bugzilla.suse.com/1098891" source="BUGZILLA"/>
		<reference ref_id="1104876" ref_url="https://bugzilla.suse.com/1104876" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10583" ref_url="https://www.suse.com/security/cve/CVE-2018-10583/" source="CVE"/>
		<description>


This update for LibreOffice, libepubgen, liblangtag, libmwaw, libnumbertext, libstaroffice, libwps, myspell-dictionaries, xmlsec1 fixes the following issues:

LibreOffice was updated to 6.1.3.2 (fate#326624) and contains new features and lots of bugfixes:

The full changelog can be found on:

        https://wiki.documentfoundation.org/ReleaseNotes/6.1

Bugfixes:

- bsc#1095639 Exporting to PPTX results in vertical labels being shown horizontally
- bsc#1098891 Table in PPTX misplaced and partly blue
- bsc#1088263 Labels in chart change (from white and other colors) to black when saving as PPTX
- bsc#1095601 Exporting to PPTX shifts arrow shapes quite a bit

- Add more translations:
  * Belarusian
  * Bodo
  * Dogri
  * Frisian
  * Gaelic
  * Paraguayan_Guaran
  * Upper_Sorbian
  * Konkani
  * Kashmiri
  * Luxembourgish
  * Monglolian
  * Manipuri
  * Burnese
  * Occitan
  * Kinyarwanda
  * Santali
  * Sanskrit
  * Sindhi
  * Sidamo
  * Tatar
  * Uzbek
  * Upper Sorbian
  * Venetian
  * Amharic
  * Asturian
  * Tibetian
  * Bosnian
  * English GB
  * English ZA
  * Indonesian
  * Icelandic
  * Georgian
  * Khmer
  * Lao
  * Macedonian
  * Nepali
  * Oromo
  * Albanian
  * Tajik
  * Uyghur
  * Vietnamese
  * Kurdish

- Try to build all languages see bsc#1096360
- Make sure to install the KDE5/Qt5 UI/filepicker
- Try to implement safeguarding to avoid bsc#1050305
- Disable base-drivers-mysql as it needs mysqlcppcon that is only
  for mysql and not mariadb, causes issues bsc#1094779
  * Users can still connect using jdbc/odbc
- Fix java detection on machines with too many cpus

- CVE-2018-10583: An information disclosure vulnerability occured when LibreOffice automatically processed and initiated an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document. (bsc#1091606)

libepubgen was updated to 0.1.1:

- Avoid &lt;div&gt; inside &lt;p&gt; or &lt;span&gt;.
- Avoid writin vertical-align attribute without a value.
- Fix generation of invalid XHTML when there is a link starting at the beginning of a footnote.
- Handle relative width for images.
- Fixed layout: write chapter names to improve navigation.
- Support writing mode.
- Start a new HTML file at every page span in addition to the splits induced by the chosen split method. This is to ensure that specified writing mode works correctly, as it is HTML &lt;body&gt; attribute.

liblangtag was updated to 0.6.2:

- use standard function
- fix leak in test

libmwaw was updated to 0.3.14:

- Support MS Multiplan 1.1 files

libnumbertext was update to 1.0.5:

- Various fixes in numerical calculations and issues reported on libreoffice tracker

libstaroffice was updated to 0.0.6:

- retrieve some StarMath's formula,
- retrieve some charts as graphic,
- retrieve some fields in sda/sdc/sdp text-boxes,
- .sdw: retrieve more attachments.

libwps was updated to 0.4.9:

- QuattroPro: add parser to .wb3 files
- Multiplan: add parser to DOS v1-v3 files
- charts: try to retrieve charts in .wk*, .wq* files
- QuattroPro: add parser to .wb[12] files

myspell-dictionaries was updated to 20181025:

- Turkish dictionary added
- Updated French dictionary

xmlsec1 was updated to 1.2.26:

- Added xmlsec-mscng module based on Microsoft Cryptography API: Next Generation
- Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R 34.10-2001 in xmlsec-mscrypto

		</description>
<advisory from="security@suse.de">
	<issued date="2018-11-08"/>
	<updated date="2018-11-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1050305">SUSE bug 1050305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088263">SUSE bug 1088263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091606">SUSE bug 1091606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094779">SUSE bug 1094779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095601">SUSE bug 1095601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095639">SUSE bug 1095639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096360">SUSE bug 1096360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098891">SUSE bug 1098891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104876">SUSE bug 1104876</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10583/">CVE-2018-10583</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790250" comment="libmwaw-0_3-3-0.3.14-4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137662" version="1" class="patch">
	<metadata>
		<title>libmwaw-0_3-3-0.3.14-4.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2017-9433" ref_url="https://www.suse.com/security/cve/CVE-2017-9433/" source="CVE"/>
		<description>
These are all security issues fixed in the libmwaw-0_3-3-0.3.14-4.3.1 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9433/">CVE-2017-9433</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489072" comment="libmwaw-0_3-3-0.3.14-4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137663" version="1" class="patch">
	<metadata>
		<title>libntfs-3g87-2016.2.22-3.3.2 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2019-9755" ref_url="https://www.suse.com/security/cve/CVE-2019-9755/" source="CVE"/>
		<description>
These are all security issues fixed in the libntfs-3g87-2016.2.22-3.3.2 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9755/">CVE-2019-9755</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009489073" comment="libntfs-3g87-2016.2.22-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489074" comment="ntfs-3g-2016.2.22-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489075" comment="ntfsprogs-2016.2.22-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137664" version="1" class="patch">
	<metadata>
		<title>libopencv3_3-3.3.1-4.5 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2017-18009" ref_url="https://www.suse.com/security/cve/CVE-2017-18009/" source="CVE"/>
		<description>
These are all security issues fixed in the libopencv3_3-3.3.1-4.5 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18009/">CVE-2017-18009</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488925" comment="libopencv3_3-3.3.1-4.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488926" comment="opencv-3.3.1-4.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488927" comment="opencv-devel-3.3.1-4.5 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137665" version="1" class="patch">
	<metadata>
		<title>libotr-devel-4.1.1-2.3 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2016-2851" ref_url="https://www.suse.com/security/cve/CVE-2016-2851/" source="CVE"/>
		<description>
These are all security issues fixed in the libotr-devel-4.1.1-2.3 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2851/">CVE-2016-2851</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488928" comment="libotr-devel-4.1.1-2.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488929" comment="libotr5-4.1.1-2.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137666" version="1" class="patch">
	<metadata>
		<title>libproxy1-config-gnome3-0.4.15-2.42 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2012-4504" ref_url="https://www.suse.com/security/cve/CVE-2012-4504/" source="CVE"/>
		<description>
These are all security issues fixed in the libproxy1-config-gnome3-0.4.15-2.42 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2012-4504/">CVE-2012-4504</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488930" comment="libproxy1-config-gnome3-0.4.15-2.42 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488931" comment="libproxy1-networkmanager-0.4.15-2.42 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137667" version="1" class="patch">
	<metadata>
		<title>libpskc-devel-2.6.2-1.15 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2013-7322" ref_url="https://www.suse.com/security/cve/CVE-2013-7322/" source="CVE"/>
		<description>
These are all security issues fixed in the libpskc-devel-2.6.2-1.15 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-7322/">CVE-2013-7322</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488932" comment="libpskc-devel-2.6.2-1.15 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488933" comment="libpskc0-2.6.2-1.15 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137668" version="1" class="patch">
	<metadata>
		<title>libpurple-2.13.0-3.35 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2009-2694" ref_url="https://www.suse.com/security/cve/CVE-2009-2694/" source="CVE"/>
		<reference ref_id="CVE-2009-2703" ref_url="https://www.suse.com/security/cve/CVE-2009-2703/" source="CVE"/>
		<reference ref_id="CVE-2009-3026" ref_url="https://www.suse.com/security/cve/CVE-2009-3026/" source="CVE"/>
		<reference ref_id="CVE-2009-3083" ref_url="https://www.suse.com/security/cve/CVE-2009-3083/" source="CVE"/>
		<reference ref_id="CVE-2009-3084" ref_url="https://www.suse.com/security/cve/CVE-2009-3084/" source="CVE"/>
		<reference ref_id="CVE-2009-3085" ref_url="https://www.suse.com/security/cve/CVE-2009-3085/" source="CVE"/>
		<reference ref_id="CVE-2009-3615" ref_url="https://www.suse.com/security/cve/CVE-2009-3615/" source="CVE"/>
		<reference ref_id="CVE-2010-0013" ref_url="https://www.suse.com/security/cve/CVE-2010-0013/" source="CVE"/>
		<reference ref_id="CVE-2010-0277" ref_url="https://www.suse.com/security/cve/CVE-2010-0277/" source="CVE"/>
		<reference ref_id="CVE-2010-0420" ref_url="https://www.suse.com/security/cve/CVE-2010-0420/" source="CVE"/>
		<reference ref_id="CVE-2010-0423" ref_url="https://www.suse.com/security/cve/CVE-2010-0423/" source="CVE"/>
		<reference ref_id="CVE-2010-1624" ref_url="https://www.suse.com/security/cve/CVE-2010-1624/" source="CVE"/>
		<reference ref_id="CVE-2010-2528" ref_url="https://www.suse.com/security/cve/CVE-2010-2528/" source="CVE"/>
		<reference ref_id="CVE-2010-3711" ref_url="https://www.suse.com/security/cve/CVE-2010-3711/" source="CVE"/>
		<reference ref_id="CVE-2011-1091" ref_url="https://www.suse.com/security/cve/CVE-2011-1091/" source="CVE"/>
		<reference ref_id="CVE-2011-3594" ref_url="https://www.suse.com/security/cve/CVE-2011-3594/" source="CVE"/>
		<reference ref_id="CVE-2012-2214" ref_url="https://www.suse.com/security/cve/CVE-2012-2214/" source="CVE"/>
		<reference ref_id="CVE-2012-3374" ref_url="https://www.suse.com/security/cve/CVE-2012-3374/" source="CVE"/>
		<reference ref_id="CVE-2012-6152" ref_url="https://www.suse.com/security/cve/CVE-2012-6152/" source="CVE"/>
		<reference ref_id="CVE-2013-0271" ref_url="https://www.suse.com/security/cve/CVE-2013-0271/" source="CVE"/>
		<reference ref_id="CVE-2013-0272" ref_url="https://www.suse.com/security/cve/CVE-2013-0272/" source="CVE"/>
		<reference ref_id="CVE-2013-0273" ref_url="https://www.suse.com/security/cve/CVE-2013-0273/" source="CVE"/>
		<reference ref_id="CVE-2013-0274" ref_url="https://www.suse.com/security/cve/CVE-2013-0274/" source="CVE"/>
		<reference ref_id="CVE-2013-6477" ref_url="https://www.suse.com/security/cve/CVE-2013-6477/" source="CVE"/>
		<reference ref_id="CVE-2013-6478" ref_url="https://www.suse.com/security/cve/CVE-2013-6478/" source="CVE"/>
		<reference ref_id="CVE-2013-6479" ref_url="https://www.suse.com/security/cve/CVE-2013-6479/" source="CVE"/>
		<reference ref_id="CVE-2013-6481" ref_url="https://www.suse.com/security/cve/CVE-2013-6481/" source="CVE"/>
		<reference ref_id="CVE-2013-6482" ref_url="https://www.suse.com/security/cve/CVE-2013-6482/" source="CVE"/>
		<reference ref_id="CVE-2013-6483" ref_url="https://www.suse.com/security/cve/CVE-2013-6483/" source="CVE"/>
		<reference ref_id="CVE-2013-6484" ref_url="https://www.suse.com/security/cve/CVE-2013-6484/" source="CVE"/>
		<reference ref_id="CVE-2013-6485" ref_url="https://www.suse.com/security/cve/CVE-2013-6485/" source="CVE"/>
		<reference ref_id="CVE-2013-6486" ref_url="https://www.suse.com/security/cve/CVE-2013-6486/" source="CVE"/>
		<reference ref_id="CVE-2013-6487" ref_url="https://www.suse.com/security/cve/CVE-2013-6487/" source="CVE"/>
		<reference ref_id="CVE-2014-0020" ref_url="https://www.suse.com/security/cve/CVE-2014-0020/" source="CVE"/>
		<reference ref_id="CVE-2014-3694" ref_url="https://www.suse.com/security/cve/CVE-2014-3694/" source="CVE"/>
		<reference ref_id="CVE-2014-3695" ref_url="https://www.suse.com/security/cve/CVE-2014-3695/" source="CVE"/>
		<reference ref_id="CVE-2014-3696" ref_url="https://www.suse.com/security/cve/CVE-2014-3696/" source="CVE"/>
		<reference ref_id="CVE-2014-3697" ref_url="https://www.suse.com/security/cve/CVE-2014-3697/" source="CVE"/>
		<reference ref_id="CVE-2014-3698" ref_url="https://www.suse.com/security/cve/CVE-2014-3698/" source="CVE"/>
		<reference ref_id="CVE-2017-2640" ref_url="https://www.suse.com/security/cve/CVE-2017-2640/" source="CVE"/>
		<description>
These are all security issues fixed in the libpurple-2.13.0-3.35 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2009-2694/">CVE-2009-2694</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-2703/">CVE-2009-2703</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3026/">CVE-2009-3026</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3083/">CVE-2009-3083</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3084/">CVE-2009-3084</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3085/">CVE-2009-3085</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2009-3615/">CVE-2009-3615</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0013/">CVE-2010-0013</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0277/">CVE-2010-0277</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0420/">CVE-2010-0420</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-0423/">CVE-2010-0423</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-1624/">CVE-2010-1624</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2010-2528/">CVE-2010-2528</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2010-3711/">CVE-2010-3711</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2011-1091/">CVE-2011-1091</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2011-3594/">CVE-2011-3594</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2214/">CVE-2012-2214</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3374/">CVE-2012-3374</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-6152/">CVE-2012-6152</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0271/">CVE-2013-0271</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0272/">CVE-2013-0272</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0273/">CVE-2013-0273</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-0274/">CVE-2013-0274</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6477/">CVE-2013-6477</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6478/">CVE-2013-6478</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6479/">CVE-2013-6479</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6481/">CVE-2013-6481</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6482/">CVE-2013-6482</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6483/">CVE-2013-6483</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6484/">CVE-2013-6484</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-6485/">CVE-2013-6485</cve>
	<cve impact="critical" href="https://www.suse.com/security/cve/CVE-2013-6486/">CVE-2013-6486</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-6487/">CVE-2013-6487</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-0020/">CVE-2014-0020</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3694/">CVE-2014-3694</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3695/">CVE-2014-3695</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3696/">CVE-2014-3696</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3697/">CVE-2014-3697</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-3698/">CVE-2014-3698</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2640/">CVE-2017-2640</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009488934" comment="libpurple-2.13.0-3.35 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488935" comment="libpurple-branding-upstream-2.13.0-3.35 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488936" comment="libpurple-devel-2.13.0-3.35 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488937" comment="libpurple-lang-2.13.0-3.35 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488938" comment="libpurple-plugin-sametime-2.13.0-3.35 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488939" comment="pidgin-2.13.0-3.35 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009488940" comment="pidgin-devel-2.13.0-3.35 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137669" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1120498" ref_url="https://bugzilla.suse.com/1120498" source="BUGZILLA"/>
		<reference ref_id="1120499" ref_url="https://bugzilla.suse.com/1120499" source="BUGZILLA"/>
		<reference ref_id="1120500" ref_url="https://bugzilla.suse.com/1120500" source="BUGZILLA"/>
		<reference ref_id="1120515" ref_url="https://bugzilla.suse.com/1120515" source="BUGZILLA"/>
		<reference ref_id="1120516" ref_url="https://bugzilla.suse.com/1120516" source="BUGZILLA"/>
		<reference ref_id="1120517" ref_url="https://bugzilla.suse.com/1120517" source="BUGZILLA"/>
		<reference ref_id="1120519" ref_url="https://bugzilla.suse.com/1120519" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20337" ref_url="https://www.suse.com/security/cve/CVE-2018-20337/" source="CVE"/>
		<reference ref_id="CVE-2018-20363" ref_url="https://www.suse.com/security/cve/CVE-2018-20363/" source="CVE"/>
		<reference ref_id="CVE-2018-20364" ref_url="https://www.suse.com/security/cve/CVE-2018-20364/" source="CVE"/>
		<reference ref_id="CVE-2018-20365" ref_url="https://www.suse.com/security/cve/CVE-2018-20365/" source="CVE"/>
		<reference ref_id="CVE-2018-5817" ref_url="https://www.suse.com/security/cve/CVE-2018-5817/" source="CVE"/>
		<reference ref_id="CVE-2018-5818" ref_url="https://www.suse.com/security/cve/CVE-2018-5818/" source="CVE"/>
		<reference ref_id="CVE-2018-5819" ref_url="https://www.suse.com/security/cve/CVE-2018-5819/" source="CVE"/>
		<description>
This update for libraw fixes the following issues:

Security issues fixed:                                                                     
                                                                                                            
- CVE-2018-20337: Fixed a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (bsc#1120519)
- CVE-2018-20365: Fixed a heap-based buffer overflow in the raw2image function of libraw_cxx.cpp (bsc#1120500)
- CVE-2018-20364: Fixed a NULL pointer dereference in the copy_bayer function of libraw_cxx.cpp (bsc#1120499)
- CVE-2018-20363: Fixed a NULL pointer dereference in the raw2image function of libraw_cxx.cpp (bsc#1120498)          
- CVE-2018-5817: Fixed an infinite loop in the unpacked_load_raw function of dcraw_common.cpp (bsc#1120515)
- CVE-2018-5818: Fixed an infinite loop in the parse_rollei function of dcraw_common.cpp (bsc#1120516)    
- CVE-2018-5819: Fixed a denial of service in the parse_sinar_ia function of dcraw_common.cpp (bsc#1120517)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-01-21"/>
	<updated date="2019-01-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1120498">SUSE bug 1120498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120499">SUSE bug 1120499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120500">SUSE bug 1120500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120515">SUSE bug 1120515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120516">SUSE bug 1120516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120517">SUSE bug 1120517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120519">SUSE bug 1120519</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20337/">CVE-2018-20337</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20363/">CVE-2018-20363</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20364/">CVE-2018-20364</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-20365/">CVE-2018-20365</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5817/">CVE-2018-5817</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5818/">CVE-2018-5818</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5819/">CVE-2018-5819</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782632" comment="libraw-devel-0.18.9-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782633" comment="libraw16-0.18.9-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137670" version="1" class="patch">
	<metadata>
		<title>libraw-devel-0.18.9-3.8.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2013-2126" ref_url="https://www.suse.com/security/cve/CVE-2013-2126/" source="CVE"/>
		<reference ref_id="CVE-2013-2127" ref_url="https://www.suse.com/security/cve/CVE-2013-2127/" source="CVE"/>
		<reference ref_id="CVE-2015-8367" ref_url="https://www.suse.com/security/cve/CVE-2015-8367/" source="CVE"/>
		<reference ref_id="CVE-2017-13735" ref_url="https://www.suse.com/security/cve/CVE-2017-13735/" source="CVE"/>
		<reference ref_id="CVE-2017-14265" ref_url="https://www.suse.com/security/cve/CVE-2017-14265/" source="CVE"/>
		<reference ref_id="CVE-2017-14348" ref_url="https://www.suse.com/security/cve/CVE-2017-14348/" source="CVE"/>
		<reference ref_id="CVE-2017-6886" ref_url="https://www.suse.com/security/cve/CVE-2017-6886/" source="CVE"/>
		<reference ref_id="CVE-2017-6887" ref_url="https://www.suse.com/security/cve/CVE-2017-6887/" source="CVE"/>
		<reference ref_id="CVE-2017-6890" ref_url="https://www.suse.com/security/cve/CVE-2017-6890/" source="CVE"/>
		<reference ref_id="CVE-2017-6899" ref_url="https://www.suse.com/security/cve/CVE-2017-6899/" source="CVE"/>
		<reference ref_id="CVE-2018-10528" ref_url="https://www.suse.com/security/cve/CVE-2018-10528/" source="CVE"/>
		<reference ref_id="CVE-2018-10529" ref_url="https://www.suse.com/security/cve/CVE-2018-10529/" source="CVE"/>
		<reference ref_id="CVE-2018-20337" ref_url="https://www.suse.com/security/cve/CVE-2018-20337/" source="CVE"/>
		<reference ref_id="CVE-2018-20363" ref_url="https://www.suse.com/security/cve/CVE-2018-20363/" source="CVE"/>
		<reference ref_id="CVE-2018-20364" ref_url="https://www.suse.com/security/cve/CVE-2018-20364/" source="CVE"/>
		<reference ref_id="CVE-2018-20365" ref_url="https://www.suse.com/security/cve/CVE-2018-20365/" source="CVE"/>
		<reference ref_id="CVE-2018-5813" ref_url="https://www.suse.com/security/cve/CVE-2018-5813/" source="CVE"/>
		<reference ref_id="CVE-2018-5815" ref_url="https://www.suse.com/security/cve/CVE-2018-5815/" source="CVE"/>
		<reference ref_id="CVE-2018-5816" ref_url="https://www.suse.com/security/cve/CVE-2018-5816/" source="CVE"/>
		<reference ref_id="CVE-2018-5817" ref_url="https://www.suse.com/security/cve/CVE-2018-5817/" source="CVE"/>
		<reference ref_id="CVE-2018-5818" ref_url="https://www.suse.com/security/cve/CVE-2018-5818/" source="CVE"/>
		<reference ref_id="CVE-2018-5819" ref_url="https://www.suse.com/security/cve/CVE-2018-5819/" source="CVE"/>
		<description>
These are all security issues fixed in the libraw-devel-0.18.9-3.8.1 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2013-2126/">CVE-2013-2126</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2013-2127/">CVE-2013-2127</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-8367/">CVE-2015-8367</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-13735/">CVE-2017-13735</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14265/">CVE-2017-14265</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14348/">CVE-2017-14348</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6886/">CVE-2017-6886</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6887/">CVE-2017-6887</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-6890/">CVE-2017-6890</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-6899/">CVE-2017-6899</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10528/">CVE-2018-10528</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10529/">CVE-2018-10529</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20337/">CVE-2018-20337</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20363/">CVE-2018-20363</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20364/">CVE-2018-20364</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-20365/">CVE-2018-20365</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5813/">CVE-2018-5813</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5815/">CVE-2018-5815</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5816/">CVE-2018-5816</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5817/">CVE-2018-5817</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5818/">CVE-2018-5818</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5819/">CVE-2018-5819</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009489076" comment="libraw-devel-0.18.9-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489077" comment="libraw16-0.18.9-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137671" version="1" class="patch">
	<metadata>
		<title>libreoffice-6.1.3.2-6.28 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2014-3693" ref_url="https://www.suse.com/security/cve/CVE-2014-3693/" source="CVE"/>
		<reference ref_id="CVE-2014-8146" ref_url="https://www.suse.com/security/cve/CVE-2014-8146/" source="CVE"/>
		<reference ref_id="CVE-2014-8147" ref_url="https://www.suse.com/security/cve/CVE-2014-8147/" source="CVE"/>
		<reference ref_id="CVE-2014-9093" ref_url="https://www.suse.com/security/cve/CVE-2014-9093/" source="CVE"/>
		<reference ref_id="CVE-2015-4551" ref_url="https://www.suse.com/security/cve/CVE-2015-4551/" source="CVE"/>
		<reference ref_id="CVE-2015-5212" ref_url="https://www.suse.com/security/cve/CVE-2015-5212/" source="CVE"/>
		<reference ref_id="CVE-2015-5213" ref_url="https://www.suse.com/security/cve/CVE-2015-5213/" source="CVE"/>
		<reference ref_id="CVE-2015-5214" ref_url="https://www.suse.com/security/cve/CVE-2015-5214/" source="CVE"/>
		<reference ref_id="CVE-2016-0794" ref_url="https://www.suse.com/security/cve/CVE-2016-0794/" source="CVE"/>
		<reference ref_id="CVE-2016-0795" ref_url="https://www.suse.com/security/cve/CVE-2016-0795/" source="CVE"/>
		<reference ref_id="CVE-2016-10327" ref_url="https://www.suse.com/security/cve/CVE-2016-10327/" source="CVE"/>
		<reference ref_id="CVE-2016-4324" ref_url="https://www.suse.com/security/cve/CVE-2016-4324/" source="CVE"/>
		<reference ref_id="CVE-2017-3157" ref_url="https://www.suse.com/security/cve/CVE-2017-3157/" source="CVE"/>
		<reference ref_id="CVE-2017-7870" ref_url="https://www.suse.com/security/cve/CVE-2017-7870/" source="CVE"/>
		<reference ref_id="CVE-2017-7882" ref_url="https://www.suse.com/security/cve/CVE-2017-7882/" source="CVE"/>
		<reference ref_id="CVE-2017-8358" ref_url="https://www.suse.com/security/cve/CVE-2017-8358/" source="CVE"/>
		<reference ref_id="CVE-2018-10119" ref_url="https://www.suse.com/security/cve/CVE-2018-10119/" source="CVE"/>
		<reference ref_id="CVE-2018-10120" ref_url="https://www.suse.com/security/cve/CVE-2018-10120/" source="CVE"/>
		<reference ref_id="CVE-2018-1055" ref_url="https://www.suse.com/security/cve/CVE-2018-1055/" source="CVE"/>
		<reference ref_id="CVE-2018-10583" ref_url="https://www.suse.com/security/cve/CVE-2018-10583/" source="CVE"/>
		<reference ref_id="CVE-2018-6871" ref_url="https://www.suse.com/security/cve/CVE-2018-6871/" source="CVE"/>
		<description>
These are all security issues fixed in the libreoffice-6.1.3.2-6.28 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-3693/">CVE-2014-3693</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8146/">CVE-2014-8146</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-8147/">CVE-2014-8147</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-9093/">CVE-2014-9093</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4551/">CVE-2015-4551</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5212/">CVE-2015-5212</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5213/">CVE-2015-5213</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-5214/">CVE-2015-5214</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0794/">CVE-2016-0794</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-0795/">CVE-2016-0795</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10327/">CVE-2016-10327</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-4324/">CVE-2016-4324</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-3157/">CVE-2017-3157</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-7870/">CVE-2017-7870</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7882/">CVE-2017-7882</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8358/">CVE-2017-8358</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10119/">CVE-2018-10119</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10120/">CVE-2018-10120</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-1055/">CVE-2018-1055</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10583/">CVE-2018-10583</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-6871/">CVE-2018-6871</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009489078" comment="libreoffice-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489079" comment="libreoffice-base-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489080" comment="libreoffice-base-drivers-postgresql-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489081" comment="libreoffice-branding-upstream-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489082" comment="libreoffice-calc-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489083" comment="libreoffice-calc-extensions-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489084" comment="libreoffice-draw-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489085" comment="libreoffice-filters-optional-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489086" comment="libreoffice-gnome-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489087" comment="libreoffice-gtk3-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489088" comment="libreoffice-icon-themes-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489089" comment="libreoffice-impress-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489090" comment="libreoffice-l10n-af-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489091" comment="libreoffice-l10n-ar-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489092" comment="libreoffice-l10n-as-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489093" comment="libreoffice-l10n-bg-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489094" comment="libreoffice-l10n-bn-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489095" comment="libreoffice-l10n-br-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489096" comment="libreoffice-l10n-ca-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489097" comment="libreoffice-l10n-cs-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489098" comment="libreoffice-l10n-cy-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489099" comment="libreoffice-l10n-da-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489100" comment="libreoffice-l10n-de-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489101" comment="libreoffice-l10n-dz-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489102" comment="libreoffice-l10n-el-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489103" comment="libreoffice-l10n-en-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489104" comment="libreoffice-l10n-eo-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489105" comment="libreoffice-l10n-es-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489106" comment="libreoffice-l10n-et-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489107" comment="libreoffice-l10n-eu-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489108" comment="libreoffice-l10n-fa-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489109" comment="libreoffice-l10n-fi-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489110" comment="libreoffice-l10n-fr-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489111" comment="libreoffice-l10n-ga-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489112" comment="libreoffice-l10n-gl-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489113" comment="libreoffice-l10n-gu-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489114" comment="libreoffice-l10n-he-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489115" comment="libreoffice-l10n-hi-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489116" comment="libreoffice-l10n-hr-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489117" comment="libreoffice-l10n-hu-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489118" comment="libreoffice-l10n-it-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489119" comment="libreoffice-l10n-ja-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489120" comment="libreoffice-l10n-kk-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489121" comment="libreoffice-l10n-kn-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489122" comment="libreoffice-l10n-ko-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489123" comment="libreoffice-l10n-lt-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489124" comment="libreoffice-l10n-lv-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489125" comment="libreoffice-l10n-mai-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489126" comment="libreoffice-l10n-ml-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489127" comment="libreoffice-l10n-mr-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489128" comment="libreoffice-l10n-nb-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489129" comment="libreoffice-l10n-nl-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489130" comment="libreoffice-l10n-nn-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489131" comment="libreoffice-l10n-nr-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489132" comment="libreoffice-l10n-nso-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489133" comment="libreoffice-l10n-or-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489134" comment="libreoffice-l10n-pa-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489135" comment="libreoffice-l10n-pl-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489136" comment="libreoffice-l10n-pt_BR-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489137" comment="libreoffice-l10n-pt_PT-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489138" comment="libreoffice-l10n-ro-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489139" comment="libreoffice-l10n-ru-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489140" comment="libreoffice-l10n-si-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489141" comment="libreoffice-l10n-sk-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489142" comment="libreoffice-l10n-sl-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489143" comment="libreoffice-l10n-sr-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489144" comment="libreoffice-l10n-ss-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489145" comment="libreoffice-l10n-st-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489146" comment="libreoffice-l10n-sv-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489147" comment="libreoffice-l10n-ta-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489148" comment="libreoffice-l10n-te-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489149" comment="libreoffice-l10n-th-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489150" comment="libreoffice-l10n-tn-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489151" comment="libreoffice-l10n-tr-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489152" comment="libreoffice-l10n-ts-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489153" comment="libreoffice-l10n-uk-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489154" comment="libreoffice-l10n-ve-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489155" comment="libreoffice-l10n-xh-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489156" comment="libreoffice-l10n-zh_CN-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489157" comment="libreoffice-l10n-zh_TW-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489158" comment="libreoffice-l10n-zu-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489159" comment="libreoffice-mailmerge-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489160" comment="libreoffice-math-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489161" comment="libreoffice-officebean-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489162" comment="libreoffice-pyuno-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489163" comment="libreoffice-writer-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489164" comment="libreoffice-writer-extensions-6.1.3.2-6.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489165" comment="libreofficekit-6.1.3.2-6.28 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137672" version="1" class="patch">
	<metadata>
		<title>libstaroffice-0_0-0-0.0.6-5.17 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2017-9432" ref_url="https://www.suse.com/security/cve/CVE-2017-9432/" source="CVE"/>
		<description>
These are all security issues fixed in the libstaroffice-0_0-0-0.0.6-5.17 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-9432/">CVE-2017-9432</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489166" comment="libstaroffice-0_0-0-0.0.6-5.17 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137673" version="1" class="patch">
	<metadata>
		<title>libvncclient0-0.9.10-4.9.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2014-4607" ref_url="https://www.suse.com/security/cve/CVE-2014-4607/" source="CVE"/>
		<reference ref_id="CVE-2018-15126" ref_url="https://www.suse.com/security/cve/CVE-2018-15126/" source="CVE"/>
		<reference ref_id="CVE-2018-15127" ref_url="https://www.suse.com/security/cve/CVE-2018-15127/" source="CVE"/>
		<reference ref_id="CVE-2018-20019" ref_url="https://www.suse.com/security/cve/CVE-2018-20019/" source="CVE"/>
		<reference ref_id="CVE-2018-20020" ref_url="https://www.suse.com/security/cve/CVE-2018-20020/" source="CVE"/>
		<reference ref_id="CVE-2018-20021" ref_url="https://www.suse.com/security/cve/CVE-2018-20021/" source="CVE"/>
		<reference ref_id="CVE-2018-20022" ref_url="https://www.suse.com/security/cve/CVE-2018-20022/" source="CVE"/>
		<reference ref_id="CVE-2018-20023" ref_url="https://www.suse.com/security/cve/CVE-2018-20023/" source="CVE"/>
		<reference ref_id="CVE-2018-20024" ref_url="https://www.suse.com/security/cve/CVE-2018-20024/" source="CVE"/>
		<reference ref_id="CVE-2018-20748" ref_url="https://www.suse.com/security/cve/CVE-2018-20748/" source="CVE"/>
		<reference ref_id="CVE-2018-20749" ref_url="https://www.suse.com/security/cve/CVE-2018-20749/" source="CVE"/>
		<reference ref_id="CVE-2018-20750" ref_url="https://www.suse.com/security/cve/CVE-2018-20750/" source="CVE"/>
		<reference ref_id="CVE-2018-6307" ref_url="https://www.suse.com/security/cve/CVE-2018-6307/" source="CVE"/>
		<reference ref_id="CVE-2018-7225" ref_url="https://www.suse.com/security/cve/CVE-2018-7225/" source="CVE"/>
		<description>
These are all security issues fixed in the libvncclient0-0.9.10-4.9.1 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-4607/">CVE-2014-4607</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15126/">CVE-2018-15126</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15127/">CVE-2018-15127</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20019/">CVE-2018-20019</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20020/">CVE-2018-20020</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20021/">CVE-2018-20021</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20022/">CVE-2018-20022</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20023/">CVE-2018-20023</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20024/">CVE-2018-20024</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20748/">CVE-2018-20748</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20749/">CVE-2018-20749</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20750/">CVE-2018-20750</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6307/">CVE-2018-6307</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7225/">CVE-2018-7225</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489167" comment="libvncclient0-0.9.10-4.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137674" version="1" class="patch">
	<metadata>
		<title>libwmf-0_2-7-0.2.8.4-2.30 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2015-0848" ref_url="https://www.suse.com/security/cve/CVE-2015-0848/" source="CVE"/>
		<reference ref_id="CVE-2015-4588" ref_url="https://www.suse.com/security/cve/CVE-2015-4588/" source="CVE"/>
		<reference ref_id="CVE-2015-4695" ref_url="https://www.suse.com/security/cve/CVE-2015-4695/" source="CVE"/>
		<reference ref_id="CVE-2015-4696" ref_url="https://www.suse.com/security/cve/CVE-2015-4696/" source="CVE"/>
		<description>
These are all security issues fixed in the libwmf-0_2-7-0.2.8.4-2.30 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-0848/">CVE-2015-0848</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4588/">CVE-2015-4588</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4695/">CVE-2015-4695</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4696/">CVE-2015-4696</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009489034" comment="libwmf-0_2-7-0.2.8.4-2.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489035" comment="libwmf-devel-0.2.8.4-2.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489036" comment="libwmf-gnome-0.2.8.4-2.30 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137675" version="1" class="patch">
	<metadata>
		<title> (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1115713" ref_url="https://bugzilla.suse.com/1115713" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19208" ref_url="https://www.suse.com/security/cve/CVE-2018-19208/" source="CVE"/>
		<description>
This update for libwpd fixes the following issues:

Security issue fixed:

- CVE-2018-19208: Fixed illegal address access inside libwpd at function WP6ContentListener:defineTable (bsc#1115713).
		</description>
<advisory from="security@suse.de">
	<issued date="2018-11-22"/>
	<updated date="2018-11-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1115713">SUSE bug 1115713</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19208/">CVE-2018-19208</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782546" comment="libwpd-0_10-10-0.10.2-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782547" comment="libwpd-devel-0.10.2-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137676" version="1" class="patch">
	<metadata>
		<title>libwpd-0_10-10-0.10.2-3.3.1 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2017-14226" ref_url="https://www.suse.com/security/cve/CVE-2017-14226/" source="CVE"/>
		<reference ref_id="CVE-2018-19208" ref_url="https://www.suse.com/security/cve/CVE-2018-19208/" source="CVE"/>
		<description>
These are all security issues fixed in the libwpd-0_10-10-0.10.2-3.3.1 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-14226/">CVE-2017-14226</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19208/">CVE-2018-19208</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009489168" comment="libwpd-0_10-10-0.10.2-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489169" comment="libwpd-devel-0.10.2-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137677" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1050305" ref_url="https://bugzilla.suse.com/1050305" source="BUGZILLA"/>
		<reference ref_id="1088263" ref_url="https://bugzilla.suse.com/1088263" source="BUGZILLA"/>
		<reference ref_id="1091606" ref_url="https://bugzilla.suse.com/1091606" source="BUGZILLA"/>
		<reference ref_id="1094779" ref_url="https://bugzilla.suse.com/1094779" source="BUGZILLA"/>
		<reference ref_id="1095601" ref_url="https://bugzilla.suse.com/1095601" source="BUGZILLA"/>
		<reference ref_id="1095639" ref_url="https://bugzilla.suse.com/1095639" source="BUGZILLA"/>
		<reference ref_id="1096360" ref_url="https://bugzilla.suse.com/1096360" source="BUGZILLA"/>
		<reference ref_id="1098891" ref_url="https://bugzilla.suse.com/1098891" source="BUGZILLA"/>
		<reference ref_id="1104876" ref_url="https://bugzilla.suse.com/1104876" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10583" ref_url="https://www.suse.com/security/cve/CVE-2018-10583/" source="CVE"/>
		<description>


This update for LibreOffice, libepubgen, liblangtag, libmwaw, libnumbertext, libstaroffice, libwps, myspell-dictionaries, xmlsec1 fixes the following issues:

LibreOffice was updated to 6.1.3.2 (fate#326624) and contains new features and lots of bugfixes:

The full changelog can be found on:

        https://wiki.documentfoundation.org/ReleaseNotes/6.1

Bugfixes:

- bsc#1095639 Exporting to PPTX results in vertical labels being shown horizontally
- bsc#1098891 Table in PPTX misplaced and partly blue
- bsc#1088263 Labels in chart change (from white and other colors) to black when saving as PPTX
- bsc#1095601 Exporting to PPTX shifts arrow shapes quite a bit

- Add more translations:
  * Belarusian
  * Bodo
  * Dogri
  * Frisian
  * Gaelic
  * Paraguayan_Guaran
  * Upper_Sorbian
  * Konkani
  * Kashmiri
  * Luxembourgish
  * Monglolian
  * Manipuri
  * Burnese
  * Occitan
  * Kinyarwanda
  * Santali
  * Sanskrit
  * Sindhi
  * Sidamo
  * Tatar
  * Uzbek
  * Upper Sorbian
  * Venetian
  * Amharic
  * Asturian
  * Tibetian
  * Bosnian
  * English GB
  * English ZA
  * Indonesian
  * Icelandic
  * Georgian
  * Khmer
  * Lao
  * Macedonian
  * Nepali
  * Oromo
  * Albanian
  * Tajik
  * Uyghur
  * Vietnamese
  * Kurdish

- Try to build all languages see bsc#1096360
- Make sure to install the KDE5/Qt5 UI/filepicker
- Try to implement safeguarding to avoid bsc#1050305
- Disable base-drivers-mysql as it needs mysqlcppcon that is only
  for mysql and not mariadb, causes issues bsc#1094779
  * Users can still connect using jdbc/odbc
- Fix java detection on machines with too many cpus

- CVE-2018-10583: An information disclosure vulnerability occured when LibreOffice automatically processed and initiated an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document. (bsc#1091606)

libepubgen was updated to 0.1.1:

- Avoid &lt;div&gt; inside &lt;p&gt; or &lt;span&gt;.
- Avoid writin vertical-align attribute without a value.
- Fix generation of invalid XHTML when there is a link starting at the beginning of a footnote.
- Handle relative width for images.
- Fixed layout: write chapter names to improve navigation.
- Support writing mode.
- Start a new HTML file at every page span in addition to the splits induced by the chosen split method. This is to ensure that specified writing mode works correctly, as it is HTML &lt;body&gt; attribute.

liblangtag was updated to 0.6.2:

- use standard function
- fix leak in test

libmwaw was updated to 0.3.14:

- Support MS Multiplan 1.1 files

libnumbertext was update to 1.0.5:

- Various fixes in numerical calculations and issues reported on libreoffice tracker

libstaroffice was updated to 0.0.6:

- retrieve some StarMath's formula,
- retrieve some charts as graphic,
- retrieve some fields in sda/sdc/sdp text-boxes,
- .sdw: retrieve more attachments.

libwps was updated to 0.4.9:

- QuattroPro: add parser to .wb3 files
- Multiplan: add parser to DOS v1-v3 files
- charts: try to retrieve charts in .wk*, .wq* files
- QuattroPro: add parser to .wb[12] files

myspell-dictionaries was updated to 20181025:

- Turkish dictionary added
- Updated French dictionary

xmlsec1 was updated to 1.2.26:

- Added xmlsec-mscng module based on Microsoft Cryptography API: Next Generation
- Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R 34.10-2001 in xmlsec-mscrypto

		</description>
<advisory from="security@suse.de">
	<issued date="2018-11-08"/>
	<updated date="2018-11-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1050305">SUSE bug 1050305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088263">SUSE bug 1088263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091606">SUSE bug 1091606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094779">SUSE bug 1094779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095601">SUSE bug 1095601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095639">SUSE bug 1095639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096360">SUSE bug 1096360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098891">SUSE bug 1098891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104876">SUSE bug 1104876</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-10583/">CVE-2018-10583</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009508112" comment="myspell-af_ZA-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508113" comment="myspell-ar-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508114" comment="myspell-bg_BG-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508115" comment="myspell-bn_BD-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508116" comment="myspell-br_FR-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508117" comment="myspell-ca-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508118" comment="myspell-cs_CZ-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508119" comment="myspell-da_DK-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508120" comment="myspell-el_GR-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508121" comment="myspell-et_EE-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508122" comment="myspell-fr_FR-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508123" comment="myspell-gl-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508124" comment="myspell-gu_IN-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508125" comment="myspell-he_IL-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508126" comment="myspell-hi_IN-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508127" comment="myspell-hr_HR-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508128" comment="myspell-it_IT-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508129" comment="myspell-lt_LT-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508130" comment="myspell-lv_LV-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508131" comment="myspell-nl_NL-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508132" comment="myspell-nn_NO-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508133" comment="myspell-pl_PL-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508134" comment="myspell-pt_PT-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508135" comment="myspell-si_LK-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508136" comment="myspell-sk_SK-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508137" comment="myspell-sl_SI-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508138" comment="myspell-sr-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508139" comment="myspell-sv_SE-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508140" comment="myspell-te_IN-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508141" comment="myspell-th_TH-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508142" comment="myspell-tr_TR-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508143" comment="myspell-uk_UA-20181025-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009508144" comment="myspell-zu_ZA-20181025-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137678" version="1" class="patch">
	<metadata>
		<title> (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1130165" ref_url="https://bugzilla.suse.com/1130165" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9755" ref_url="https://www.suse.com/security/cve/CVE-2019-9755/" source="CVE"/>
		<description>
This update for ntfs-3g_ntfsprogs fixes the following issues:

Security issues fixed:

- CVE-2019-9755: Fixed a heap-based buffer overflow which could lead to local privilege escalation (bsc#1130165).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-04-24"/>
	<updated date="2019-04-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1130165">SUSE bug 1130165</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9755/">CVE-2019-9755</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009790251" comment="libntfs-3g87-2016.2.22-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790252" comment="ntfs-3g-2016.2.22-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790253" comment="ntfsprogs-2016.2.22-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137679" version="1" class="patch">
	<metadata>
		<title>openconnect-7.08-4.26 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2012-3291" ref_url="https://www.suse.com/security/cve/CVE-2012-3291/" source="CVE"/>
		<reference ref_id="CVE-2012-6128" ref_url="https://www.suse.com/security/cve/CVE-2012-6128/" source="CVE"/>
		<reference ref_id="CVE-2013-7098" ref_url="https://www.suse.com/security/cve/CVE-2013-7098/" source="CVE"/>
		<description>
These are all security issues fixed in the openconnect-7.08-4.26 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2012-3291/">CVE-2012-3291</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-6128/">CVE-2012-6128</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2013-7098/">CVE-2013-7098</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009489039" comment="openconnect-7.08-4.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489040" comment="openconnect-devel-7.08-4.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489041" comment="openconnect-lang-7.08-4.26 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137680" version="1" class="patch">
	<metadata>
		<title>pidgin-plugin-otr-4.0.2-1.61 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2012-2369" ref_url="https://www.suse.com/security/cve/CVE-2012-2369/" source="CVE"/>
		<reference ref_id="CVE-2015-8833" ref_url="https://www.suse.com/security/cve/CVE-2015-8833/" source="CVE"/>
		<description>
These are all security issues fixed in the pidgin-plugin-otr-4.0.2-1.61 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2012-2369/">CVE-2012-2369</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2015-8833/">CVE-2015-8833</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009489042" comment="pidgin-plugin-otr-4.0.2-1.61 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489043" comment="pidgin-plugin-otr-lang-4.0.2-1.61 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137681" version="1" class="patch">
	<metadata>
		<title>pulseaudio-module-bluetooth-11.1-4.31 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2014-3970" ref_url="https://www.suse.com/security/cve/CVE-2014-3970/" source="CVE"/>
		<description>
These are all security issues fixed in the pulseaudio-module-bluetooth-11.1-4.31 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2014-3970/">CVE-2014-3970</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009489044" comment="pulseaudio-module-bluetooth-11.1-4.31 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489045" comment="pulseaudio-module-lirc-11.1-4.31 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137682" version="1" class="patch">
	<metadata>
		<title>transfig-3.2.6a-2.86 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2017-16899" ref_url="https://www.suse.com/security/cve/CVE-2017-16899/" source="CVE"/>
		<description>
These are all security issues fixed in the transfig-3.2.6a-2.86 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-16899/">CVE-2017-16899</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489046" comment="transfig-3.2.6a-2.86 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137683" version="1" class="patch">
	<metadata>
		<title>xorg-x11-server-wayland-1.20.3-12.29 on GA media (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Workstation Extension 15 SP1</platform>
		</affected>
		<reference ref_id="CVE-2015-3164" ref_url="https://www.suse.com/security/cve/CVE-2015-3164/" source="CVE"/>
		<reference ref_id="CVE-2017-10971" ref_url="https://www.suse.com/security/cve/CVE-2017-10971/" source="CVE"/>
		<reference ref_id="CVE-2017-10972" ref_url="https://www.suse.com/security/cve/CVE-2017-10972/" source="CVE"/>
		<reference ref_id="CVE-2017-12176" ref_url="https://www.suse.com/security/cve/CVE-2017-12176/" source="CVE"/>
		<reference ref_id="CVE-2017-12187" ref_url="https://www.suse.com/security/cve/CVE-2017-12187/" source="CVE"/>
		<reference ref_id="CVE-2017-13721" ref_url="https://www.suse.com/security/cve/CVE-2017-13721/" source="CVE"/>
		<reference ref_id="CVE-2017-13723" ref_url="https://www.suse.com/security/cve/CVE-2017-13723/" source="CVE"/>
		<reference ref_id="CVE-2017-2624" ref_url="https://www.suse.com/security/cve/CVE-2017-2624/" source="CVE"/>
		<reference ref_id="CVE-2018-14665" ref_url="https://www.suse.com/security/cve/CVE-2018-14665/" source="CVE"/>
		<description>
These are all security issues fixed in the xorg-x11-server-wayland-1.20.3-12.29 package on the GA media of SUSE Linux Enterprise Workstation Extension 15 SP1.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-3164/">CVE-2015-3164</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-10971/">CVE-2017-10971</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-10972/">CVE-2017-10972</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12176/">CVE-2017-12176</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-12187/">CVE-2017-12187</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-13721/">CVE-2017-13721</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-13723/">CVE-2017-13723</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-2624/">CVE-2017-2624</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-14665/">CVE-2018-14665</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-we:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255630" comment="SUSE Linux Enterprise Workstation Extension 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489170" comment="xorg-x11-server-wayland-1.20.3-12.29 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137684" version="1" class="patch">
	<metadata>
		<title>Security update for zstd (Moderate) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Installer Updates 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1082318" ref_url="https://bugzilla.suse.com/1082318" source="BUGZILLA"/>
		<reference ref_id="1133297" ref_url="https://bugzilla.suse.com/1133297" source="BUGZILLA"/>
		<description>
This update for zstd fixes the following issues:

- Fix for build error caused by wrong static libraries. (bsc#1133297)
- Correction in spec file marking the license as documentation. (bsc#1082318)
- Add new package for SLE-15. (jsc#ECO-1886)
  
This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-29"/>
	<updated date="2020-10-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1082318">SUSE bug 1082318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133297">SUSE bug 1133297</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Installer Updates 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489337" comment="libzstd1-1.4.4-1.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137685" version="1" class="patch">
	<metadata>
		<title>Security update for libzypp, zypper (Moderate) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Installer Updates 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1050625" ref_url="https://bugzilla.suse.com/1050625" source="BUGZILLA"/>
		<reference ref_id="1174016" ref_url="https://bugzilla.suse.com/1174016" source="BUGZILLA"/>
		<reference ref_id="1177238" ref_url="https://bugzilla.suse.com/1177238" source="BUGZILLA"/>
		<reference ref_id="1177275" ref_url="https://bugzilla.suse.com/1177275" source="BUGZILLA"/>
		<reference ref_id="1177427" ref_url="https://bugzilla.suse.com/1177427" source="BUGZILLA"/>
		<reference ref_id="1177583" ref_url="https://bugzilla.suse.com/1177583" source="BUGZILLA"/>
		<reference ref_id="1178910" ref_url="https://bugzilla.suse.com/1178910" source="BUGZILLA"/>
		<reference ref_id="1178966" ref_url="https://bugzilla.suse.com/1178966" source="BUGZILLA"/>
		<reference ref_id="1179083" ref_url="https://bugzilla.suse.com/1179083" source="BUGZILLA"/>
		<reference ref_id="1179222" ref_url="https://bugzilla.suse.com/1179222" source="BUGZILLA"/>
		<reference ref_id="1179816" ref_url="https://bugzilla.suse.com/1179816" source="BUGZILLA"/>
		<reference ref_id="1179847" ref_url="https://bugzilla.suse.com/1179847" source="BUGZILLA"/>
		<reference ref_id="1179909" ref_url="https://bugzilla.suse.com/1179909" source="BUGZILLA"/>
		<reference ref_id="1180077" ref_url="https://bugzilla.suse.com/1180077" source="BUGZILLA"/>
		<reference ref_id="1180663" ref_url="https://bugzilla.suse.com/1180663" source="BUGZILLA"/>
		<reference ref_id="1180721" ref_url="https://bugzilla.suse.com/1180721" source="BUGZILLA"/>
		<reference ref_id="1181328" ref_url="https://bugzilla.suse.com/1181328" source="BUGZILLA"/>
		<reference ref_id="1181622" ref_url="https://bugzilla.suse.com/1181622" source="BUGZILLA"/>
		<reference ref_id="1182629" ref_url="https://bugzilla.suse.com/1182629" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-9271" ref_url="https://www.suse.com/security/cve/CVE-2017-9271/" source="CVE"/>
		<description>
This update for libzypp, zypper fixes the following issues:

Update zypper to version 1.14.43:

- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- Fix source-download commands help (bsc#1180663)
- man: Recommend to use the --non-interactive global option rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quiet: Fix install summary to write nothing if there's nothing todo (bsc#1180077)
- Prefer /run over /var/run.

Update libzypp to 17.25.8:

- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommended = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility.
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- CVE-2017-9271: Fixed information leak in the log file (bsc#1050625 bsc#1177583)
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoManager: Carefully tidy up the caches. Remove non-directory entries. (bsc#1178966)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager probe (bsc#1177427).
- RpmDb: If no database exists use the _dbpath configured in rpm.  Still makes sure a compat
  symlink at /var/lib/rpm exists in case the configures _dbpath is elsewhere. (bsc#1178910)
- Fixed update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Fix lsof monitoring (bsc#1179909)
- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-21"/>
	<updated date="2021-03-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1050625">SUSE bug 1050625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174016">SUSE bug 1174016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177238">SUSE bug 1177238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177275">SUSE bug 1177275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177427">SUSE bug 1177427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177583">SUSE bug 1177583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178910">SUSE bug 1178910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178966">SUSE bug 1178966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179083">SUSE bug 1179083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179222">SUSE bug 1179222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179816">SUSE bug 1179816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179847">SUSE bug 1179847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179909">SUSE bug 1179909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180077">SUSE bug 1180077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180663">SUSE bug 1180663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180721">SUSE bug 1180721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181328">SUSE bug 1181328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181622">SUSE bug 1181622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182629">SUSE bug 1182629</bugzilla>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-9271/">CVE-2017-9271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Installer Updates 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009489342" comment="libsigc-2_0-0-2.10.0-3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489343" comment="libsolv-tools-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489344" comment="libyui-ncurses-pkg9-2.48.9-7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489345" comment="libyui-qt-pkg9-2.45.28-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489346" comment="libzypp-17.25.8-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489347" comment="yast2-pkg-bindings-4.1.3-3.10.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137686" version="1" class="patch">
	<metadata>
		<title>Security update for zstd (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Installer Updates 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1082318" ref_url="https://bugzilla.suse.com/1082318" source="BUGZILLA"/>
		<reference ref_id="1133297" ref_url="https://bugzilla.suse.com/1133297" source="BUGZILLA"/>
		<description>
This update for zstd fixes the following issues:

- Fix for build error caused by wrong static libraries. (bsc#1133297)
- Correction in spec file marking the license as documentation. (bsc#1082318)
- Add new package for SLE-15. (jsc#ECO-1886)
  		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-08"/>
	<updated date="2021-04-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1082318">SUSE bug 1082318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133297">SUSE bug 1133297</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Installer Updates 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489337" comment="libzstd1-1.4.4-1.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137687" version="1" class="patch">
	<metadata>
		<title>Security update for libzypp, zypper (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Installer Updates 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1050625" ref_url="https://bugzilla.suse.com/1050625" source="BUGZILLA"/>
		<reference ref_id="1174016" ref_url="https://bugzilla.suse.com/1174016" source="BUGZILLA"/>
		<reference ref_id="1177238" ref_url="https://bugzilla.suse.com/1177238" source="BUGZILLA"/>
		<reference ref_id="1177275" ref_url="https://bugzilla.suse.com/1177275" source="BUGZILLA"/>
		<reference ref_id="1177427" ref_url="https://bugzilla.suse.com/1177427" source="BUGZILLA"/>
		<reference ref_id="1177583" ref_url="https://bugzilla.suse.com/1177583" source="BUGZILLA"/>
		<reference ref_id="1178910" ref_url="https://bugzilla.suse.com/1178910" source="BUGZILLA"/>
		<reference ref_id="1178966" ref_url="https://bugzilla.suse.com/1178966" source="BUGZILLA"/>
		<reference ref_id="1179083" ref_url="https://bugzilla.suse.com/1179083" source="BUGZILLA"/>
		<reference ref_id="1179222" ref_url="https://bugzilla.suse.com/1179222" source="BUGZILLA"/>
		<reference ref_id="1179816" ref_url="https://bugzilla.suse.com/1179816" source="BUGZILLA"/>
		<reference ref_id="1179847" ref_url="https://bugzilla.suse.com/1179847" source="BUGZILLA"/>
		<reference ref_id="1179909" ref_url="https://bugzilla.suse.com/1179909" source="BUGZILLA"/>
		<reference ref_id="1180077" ref_url="https://bugzilla.suse.com/1180077" source="BUGZILLA"/>
		<reference ref_id="1180663" ref_url="https://bugzilla.suse.com/1180663" source="BUGZILLA"/>
		<reference ref_id="1180721" ref_url="https://bugzilla.suse.com/1180721" source="BUGZILLA"/>
		<reference ref_id="1181328" ref_url="https://bugzilla.suse.com/1181328" source="BUGZILLA"/>
		<reference ref_id="1181622" ref_url="https://bugzilla.suse.com/1181622" source="BUGZILLA"/>
		<reference ref_id="1182629" ref_url="https://bugzilla.suse.com/1182629" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-9271" ref_url="https://www.suse.com/security/cve/CVE-2017-9271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008560.html" source="SUSE-SU"/>
		<description>
This update for libzypp, zypper fixes the following issues:

Update zypper to version 1.14.43:

- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- Fix source-download commands help (bsc#1180663)
- man: Recommend to use the --non-interactive global option rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quiet: Fix install summary to write nothing if there's nothing todo (bsc#1180077)
- Prefer /run over /var/run.

Update libzypp to 17.25.8:

- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommended = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility.
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- CVE-2017-9271: Fixed information leak in the log file (bsc#1050625 bsc#1177583)
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoManager: Carefully tidy up the caches. Remove non-directory entries. (bsc#1178966)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager probe (bsc#1177427).
- RpmDb: If no database exists use the _dbpath configured in rpm.  Still makes sure a compat
  symlink at /var/lib/rpm exists in case the configures _dbpath is elsewhere. (bsc#1178910)
- Fixed update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Fix lsof monitoring (bsc#1179909)
- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-25"/>
	<updated date="2021-03-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1050625">SUSE bug 1050625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174016">SUSE bug 1174016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177238">SUSE bug 1177238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177275">SUSE bug 1177275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177427">SUSE bug 1177427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177583">SUSE bug 1177583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178910">SUSE bug 1178910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178966">SUSE bug 1178966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179083">SUSE bug 1179083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179222">SUSE bug 1179222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179816">SUSE bug 1179816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179847">SUSE bug 1179847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179909">SUSE bug 1179909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180077">SUSE bug 1180077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180663">SUSE bug 1180663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180721">SUSE bug 1180721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181328">SUSE bug 1181328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181622">SUSE bug 1181622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182629">SUSE bug 1182629</bugzilla>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-9271/">CVE-2017-9271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Installer Updates 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009489342" comment="libsigc-2_0-0-2.10.0-3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489343" comment="libsolv-tools-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489344" comment="libyui-ncurses-pkg9-2.48.9-7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489345" comment="libyui-qt-pkg9-2.45.28-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489346" comment="libzypp-17.25.8-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489347" comment="yast2-pkg-bindings-4.1.3-3.10.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137688" version="1" class="patch">
	<metadata>
		<title>Security update for libsolv, libzypp, zypper (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Installer Updates 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1184501" ref_url="https://bugzilla.suse.com/1184501" source="BUGZILLA"/>
		<reference ref_id="1194848" ref_url="https://bugzilla.suse.com/1194848" source="BUGZILLA"/>
		<reference ref_id="1195999" ref_url="https://bugzilla.suse.com/1195999" source="BUGZILLA"/>
		<reference ref_id="1196061" ref_url="https://bugzilla.suse.com/1196061" source="BUGZILLA"/>
		<reference ref_id="1196317" ref_url="https://bugzilla.suse.com/1196317" source="BUGZILLA"/>
		<reference ref_id="1196368" ref_url="https://bugzilla.suse.com/1196368" source="BUGZILLA"/>
		<reference ref_id="1196514" ref_url="https://bugzilla.suse.com/1196514" source="BUGZILLA"/>
		<reference ref_id="1196925" ref_url="https://bugzilla.suse.com/1196925" source="BUGZILLA"/>
		<reference ref_id="1197134" ref_url="https://bugzilla.suse.com/1197134" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:1131-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010670.html" source="SUSE-SU"/>
		<description>
This update for libsolv, libzypp, zypper fixes the following issues:

Security relevant fix:

- Harden package signature checks (bsc#1184501).

libsolv to 0.7.22:

- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code (bsc#1196514)
- support parsing of Debian's Multi-Arch indicator
- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ('requires' is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime

libzypp to 17.30.0:

- ZConfig: Update solver settings if target changes (bsc#1196368)
- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)

zypper to 1.14.52:

- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-08"/>
	<updated date="2022-04-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184501">SUSE bug 1184501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194848">SUSE bug 1194848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195999">SUSE bug 1195999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196061">SUSE bug 1196061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196317">SUSE bug 1196317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196368">SUSE bug 1196368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196514">SUSE bug 1196514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196925">SUSE bug 1196925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197134">SUSE bug 1197134</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Installer Updates 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009678677" comment="libsolv-tools-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678678" comment="libzypp-17.30.0-150100.3.78.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137689" version="1" class="patch">
	<metadata>
		<title>Security update for libsolv, libzypp, zypper (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Installer Updates 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1184501" ref_url="https://bugzilla.suse.com/1184501" source="BUGZILLA"/>
		<reference ref_id="1194848" ref_url="https://bugzilla.suse.com/1194848" source="BUGZILLA"/>
		<reference ref_id="1195999" ref_url="https://bugzilla.suse.com/1195999" source="BUGZILLA"/>
		<reference ref_id="1196061" ref_url="https://bugzilla.suse.com/1196061" source="BUGZILLA"/>
		<reference ref_id="1196317" ref_url="https://bugzilla.suse.com/1196317" source="BUGZILLA"/>
		<reference ref_id="1196368" ref_url="https://bugzilla.suse.com/1196368" source="BUGZILLA"/>
		<reference ref_id="1196514" ref_url="https://bugzilla.suse.com/1196514" source="BUGZILLA"/>
		<reference ref_id="1196925" ref_url="https://bugzilla.suse.com/1196925" source="BUGZILLA"/>
		<reference ref_id="1197134" ref_url="https://bugzilla.suse.com/1197134" source="BUGZILLA"/>
		<description>
This update for libsolv, libzypp, zypper fixes the following issues:

Security relevant fix:

- Harden package signature checks (bsc#1184501).

libsolv to 0.7.22:

- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code (bsc#1196514)
- support parsing of Debian's Multi-Arch indicator
- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ('requires' is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime

libzypp to 17.30.0:

- ZConfig: Update solver settings if target changes (bsc#1196368)
- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)

zypper to 1.14.52:

- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-31"/>
	<updated date="2022-03-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184501">SUSE bug 1184501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194848">SUSE bug 1194848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195999">SUSE bug 1195999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196061">SUSE bug 1196061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196317">SUSE bug 1196317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196368">SUSE bug 1196368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196514">SUSE bug 1196514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196925">SUSE bug 1196925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197134">SUSE bug 1197134</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Installer Updates 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009678677" comment="libsolv-tools-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678678" comment="libzypp-17.30.0-150100.3.78.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137690" version="1" class="patch">
	<metadata>
		<title>Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Installer Updates 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1099269" ref_url="https://bugzilla.suse.com/1099269" source="BUGZILLA"/>
		<reference ref_id="1133277" ref_url="https://bugzilla.suse.com/1133277" source="BUGZILLA"/>
		<reference ref_id="1144068" ref_url="https://bugzilla.suse.com/1144068" source="BUGZILLA"/>
		<reference ref_id="1162343" ref_url="https://bugzilla.suse.com/1162343" source="BUGZILLA"/>
		<reference ref_id="1177127" ref_url="https://bugzilla.suse.com/1177127" source="BUGZILLA"/>
		<reference ref_id="1178168" ref_url="https://bugzilla.suse.com/1178168" source="BUGZILLA"/>
		<reference ref_id="1182066" ref_url="https://bugzilla.suse.com/1182066" source="BUGZILLA"/>
		<reference ref_id="1184753" ref_url="https://bugzilla.suse.com/1184753" source="BUGZILLA"/>
		<reference ref_id="1194530" ref_url="https://bugzilla.suse.com/1194530" source="BUGZILLA"/>
		<reference ref_id="1197726" ref_url="https://bugzilla.suse.com/1197726" source="BUGZILLA"/>
		<reference ref_id="1198331" ref_url="https://bugzilla.suse.com/1198331" source="BUGZILLA"/>
		<reference ref_id="1199282" ref_url="https://bugzilla.suse.com/1199282" source="BUGZILLA"/>
		<reference ref_id="1203681" ref_url="https://bugzilla.suse.com/1203681" source="BUGZILLA"/>
		<reference ref_id="1204256" ref_url="https://bugzilla.suse.com/1204256" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000518" ref_url="https://www.suse.com/security/cve/CVE-2018-1000518/" source="CVE"/>
		<reference ref_id="CVE-2020-25659" ref_url="https://www.suse.com/security/cve/CVE-2020-25659/" source="CVE"/>
		<reference ref_id="CVE-2020-36242" ref_url="https://www.suse.com/security/cve/CVE-2020-36242/" source="CVE"/>
		<reference ref_id="CVE-2021-22569" ref_url="https://www.suse.com/security/cve/CVE-2021-22569/" source="CVE"/>
		<reference ref_id="CVE-2021-22570" ref_url="https://www.suse.com/security/cve/CVE-2021-22570/" source="CVE"/>
		<reference ref_id="CVE-2022-1941" ref_url="https://www.suse.com/security/cve/CVE-2022-1941/" source="CVE"/>
		<reference ref_id="CVE-2022-3171" ref_url="https://www.suse.com/security/cve/CVE-2022-3171/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015451.html" source="SUSE-SU"/>
		<description>
This update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets fixes the following issues:

grpc:
- Update in SLE-15 (bsc#1197726, bsc#1144068)
  
protobuf:
- Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941, bsc#1203681
- Fix a potential DoS issue when parsing with binary data in  protobuf-java, CVE-2022-3171, bsc#1204256
- Fix potential Denial of Service in protobuf-java in the parsing procedure for binary data, CVE-2021-22569, bsc#1194530
- Add missing dependency of python subpackages on python-six (bsc#1177127)
- Updated to version 3.9.2 (bsc#1162343)
  * Remove OSReadLittle* due to alignment requirements.
  * Don't use unions and instead use memcpy for the type swaps.
- Disable LTO (bsc#1133277)

python-aiocontextvars:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-avro:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-cryptography:  
- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331)
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
  CVE-2020-36242

python-cryptography-vectors:
- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- update to 3.3.2 (bsc#1198331)

python-Deprecated:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- update to 1.2.13:

python-google-api-core:
- Update to 1.14.2

python-googleapis-common-protos:
- Update to 1.6.0
  
python-grpcio-gcp:
- Initial spec for v0.2.2

python-humanfriendly:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to 10.0

python-jsondiff:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to version 1.3.0

python-knack:  
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to version 0.9.0

python-opencensus:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Disable Python2 build
- Update to 0.8.0

python-opencensus-context:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-opencensus-ext-threading:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Initial build version 0.1.2

python-opentelemetry-api:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Version update to 1.5.0

python-psutil:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- update to 5.9.1
- remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on MicroOS. (bsc#1184753)
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-PyGithub:
- Update to 1.43.5:

python-pytest-asyncio:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Initial release of python-pytest-asyncio 0.8.0 
  
python-requests:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
  
python-websocket-client:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to version 1.3.2

python-websockets:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- update to 9.1:
 
This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1099269">SUSE bug 1099269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133277">SUSE bug 1133277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144068">SUSE bug 1144068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162343">SUSE bug 1162343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177127">SUSE bug 1177127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178168">SUSE bug 1178168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182066">SUSE bug 1182066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184753">SUSE bug 1184753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194530">SUSE bug 1194530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197726">SUSE bug 1197726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198331">SUSE bug 1198331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199282">SUSE bug 1199282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203681">SUSE bug 1203681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204256">SUSE bug 1204256</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000518/">CVE-2018-1000518</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25659/">CVE-2020-25659</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36242/">CVE-2020-36242</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-22569/">CVE-2021-22569</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-22570/">CVE-2021-22570</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1941/">CVE-2022-1941</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3171/">CVE-2022-3171</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Installer Updates 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755743" comment="libprotobuf-lite20-3.9.2-150100.8.3.3 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137691" version="1" class="patch">
	<metadata>
		<title>Security update for gcc12 (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Installer Updates 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1214052" ref_url="https://bugzilla.suse.com/1214052" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-4039" ref_url="https://www.suse.com/security/cve/CVE-2023-4039/" source="CVE"/>
		<description>
This update for gcc12 fixes the following issues:

- CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-04"/>
	<updated date="2023-09-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214052">SUSE bug 1214052</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4039/">CVE-2023-4039</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Installer Updates 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795982" comment="libstdc++6-12.3.0+git1204-150000.1.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137692" version="1" class="patch">
	<metadata>
		<title>Security update for gcc12 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Installer Updates 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1214052" ref_url="https://bugzilla.suse.com/1214052" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-4039" ref_url="https://www.suse.com/security/cve/CVE-2023-4039/" source="CVE"/>
		<description>
This update for gcc12 fixes the following issues:

- CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-18"/>
	<updated date="2023-09-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214052">SUSE bug 1214052</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4039/">CVE-2023-4039</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Installer Updates 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795982" comment="libstdc++6-12.3.0+git1204-150000.1.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137693" version="1" class="patch">
	<metadata>
		<title>Security update for bzip2 (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="985657" ref_url="https://bugzilla.suse.com/985657" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-3189" ref_url="https://www.suse.com/security/cve/CVE-2016-3189/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1206-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005653.html" source="SUSE-SU"/>
		<description>
This update for bzip2 fixes the following issues:

Security issue fixed:

- CVE-2016-3189: Fixed a use-after-free in bzip2recover (bsc#985657).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-03"/>
	<updated date="2019-07-03"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/985657">SUSE bug 985657</bugzilla>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3189/">CVE-2016-3189</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490057" comment="bzip2-1.0.6-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490058" comment="libbz2-1-1.0.6-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490059" comment="libbz2-1-32bit-1.0.6-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490060" comment="libbz2-devel-1.0.6-5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137694" version="1" class="patch">
	<metadata>
		<title>Security update for libxslt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1132160" ref_url="https://bugzilla.suse.com/1132160" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11068" ref_url="https://www.suse.com/security/cve/CVE-2019-11068/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1221-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005639.html" source="SUSE-SU"/>
		<description>
This update for libxslt fixes the following issues:

Security issue fixed:

- CVE-2019-11068: Fixed a protection mechanism bypass where callers of 
  xsltCheckRead() and xsltCheckWrite() would permit access upon receiving an
  error (bsc#1132160).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-01"/>
	<updated date="2019-07-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1132160">SUSE bug 1132160</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-11068/">CVE-2019-11068</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490061" comment="libxslt-devel-1.1.32-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490062" comment="libxslt-tools-1.1.32-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490063" comment="libxslt1-1.1.32-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137695" version="1" class="patch">
	<metadata>
		<title>Security update for graphviz (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1132091" ref_url="https://bugzilla.suse.com/1132091" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11023" ref_url="https://www.suse.com/security/cve/CVE-2019-11023/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1267-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005647.html" source="SUSE-SU"/>
		<description>
This update for graphviz fixes the following issues:

Security issue fixed:

- CVE-2019-11023: Fixed a denial of service vulnerability, which was caused by a NULL pointer dereference in agroot() (bsc#1132091).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-02"/>
	<updated date="2019-07-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1132091">SUSE bug 1132091</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11023/">CVE-2019-11023</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490077" comment="graphviz-2.40.1-6.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490078" comment="graphviz-devel-2.40.1-6.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490079" comment="graphviz-plugins-core-2.40.1-6.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490080" comment="libgraphviz6-2.40.1-6.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137696" version="1" class="patch">
	<metadata>
		<title>Security update for nmap (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1104139" ref_url="https://bugzilla.suse.com/1104139" source="BUGZILLA"/>
		<reference ref_id="1133512" ref_url="https://bugzilla.suse.com/1133512" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-15173" ref_url="https://www.suse.com/security/cve/CVE-2018-15173/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1290-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005652.html" source="SUSE-SU"/>
		<description>
This update for nmap fixes the following issues:

Security issue fixed:

- CVE-2018-15173: Fixed a remote denial of service attack via a crafted TCP-based service (bsc#1104139).

Non-security issue fixed:

- Add missing runtime dependency python-xml which prevented zenmap from starting (bsc#1133512).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-03"/>
	<updated date="2019-07-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1104139">SUSE bug 1104139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133512">SUSE bug 1133512</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-15173/">CVE-2018-15173</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490082" comment="nmap-7.70-3.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137697" version="1" class="patch">
	<metadata>
		<title>Security update for gnutls (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1118087" ref_url="https://bugzilla.suse.com/1118087" source="BUGZILLA"/>
		<reference ref_id="1134856" ref_url="https://bugzilla.suse.com/1134856" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16868" ref_url="https://www.suse.com/security/cve/CVE-2018-16868/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1351-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005638.html" source="SUSE-SU"/>
		<description>
This update for gnutls fixes the following issues:

Security issue fixed:

- CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification (bsc#1118087).

Non-security issue fixed:

- Explicitly require libnettle 3.4.1 to prevent missing symbol errors (bsc#1134856).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-01"/>
	<updated date="2019-07-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1118087">SUSE bug 1118087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134856">SUSE bug 1134856</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16868/">CVE-2018-16868</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490091" comment="gnutls-3.6.7-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490092" comment="libgnutls-devel-3.6.7-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490093" comment="libgnutls30-3.6.7-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490094" comment="libgnutls30-32bit-3.6.7-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490095" comment="libgnutlsxx-devel-3.6.7-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490096" comment="libgnutlsxx28-3.6.7-6.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137698" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1130840" ref_url="https://bugzilla.suse.com/1130840" source="BUGZILLA"/>
		<reference ref_id="1133452" ref_url="https://bugzilla.suse.com/1133452" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9947" ref_url="https://www.suse.com/security/cve/CVE-2019-9947/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1352-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005696.html" source="SUSE-SU"/>
		<description>
This update for python3 to version 3.6.8 fixes the following issues:

Security issue fixed:

- CVE-2019-9947: Fixed an issue in urllib2 which allowed CRLF injection if the attacker controls a url parameter (bsc#1130840).

Non-security issue fixed:

- Fixed broken debuginfo packages by switching off LTO and PGO optimization (bsc#1133452).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-12"/>
	<updated date="2019-07-12"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1130840">SUSE bug 1130840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133452">SUSE bug 1133452</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9947/">CVE-2019-9947</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490097" comment="libpython3_6m1_0-3.6.8-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490098" comment="python3-3.6.8-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490099" comment="python3-base-3.6.8-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490100" comment="python3-curses-3.6.8-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490101" comment="python3-dbm-3.6.8-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490102" comment="python3-devel-3.6.8-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490103" comment="python3-idle-3.6.8-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490104" comment="python3-tk-3.6.8-3.16.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137699" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1013708" ref_url="https://bugzilla.suse.com/1013708" source="BUGZILLA"/>
		<reference ref_id="1013712" ref_url="https://bugzilla.suse.com/1013712" source="BUGZILLA"/>
		<reference ref_id="1013893" ref_url="https://bugzilla.suse.com/1013893" source="BUGZILLA"/>
		<reference ref_id="1015171" ref_url="https://bugzilla.suse.com/1015171" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-9797" ref_url="https://www.suse.com/security/cve/CVE-2016-9797/" source="CVE"/>
		<reference ref_id="CVE-2016-9798" ref_url="https://www.suse.com/security/cve/CVE-2016-9798/" source="CVE"/>
		<reference ref_id="CVE-2016-9802" ref_url="https://www.suse.com/security/cve/CVE-2016-9802/" source="CVE"/>
		<reference ref_id="CVE-2016-9917" ref_url="https://www.suse.com/security/cve/CVE-2016-9917/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1353-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006033.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

Security issues fixed:

- CVE-2016-9797: Fixed a buffer over-read in l2cap_dump() (bsc#1013708).
- CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712).
- CVE-2016-9917: Fixed a heap-based buffer overflow in read_n() (bsc#1015171).
- CVE-2016-9802: Fixed a buffer over-read in l2cap_packet() (bsc#1013893).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-18"/>
	<updated date="2019-10-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1013708">SUSE bug 1013708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013712">SUSE bug 1013712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013893">SUSE bug 1013893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015171">SUSE bug 1015171</bugzilla>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9797/">CVE-2016-9797</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9798/">CVE-2016-9798</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9802/">CVE-2016-9802</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9917/">CVE-2016-9917</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490105" comment="libbluetooth3-5.48-5.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137700" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1135170" ref_url="https://bugzilla.suse.com/1135170" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5436" ref_url="https://www.suse.com/security/cve/CVE-2019-5436/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1357-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005640.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

Security issue fixed:

- CVE-2019-5436: Fixed a heap buffer overflow exists in tftp_receive_packet that receives data from a TFTP server (bsc#1135170).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-01"/>
	<updated date="2019-07-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1135170">SUSE bug 1135170</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5436/">CVE-2019-5436</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490107" comment="curl-7.60.0-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490108" comment="libcurl-devel-7.60.0-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490109" comment="libcurl4-7.60.0-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490110" comment="libcurl4-32bit-7.60.0-3.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137701" version="1" class="patch">
	<metadata>
		<title>Security update for systemd (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1036463" ref_url="https://bugzilla.suse.com/1036463" source="BUGZILLA"/>
		<reference ref_id="1121563" ref_url="https://bugzilla.suse.com/1121563" source="BUGZILLA"/>
		<reference ref_id="1124122" ref_url="https://bugzilla.suse.com/1124122" source="BUGZILLA"/>
		<reference ref_id="1125352" ref_url="https://bugzilla.suse.com/1125352" source="BUGZILLA"/>
		<reference ref_id="1125604" ref_url="https://bugzilla.suse.com/1125604" source="BUGZILLA"/>
		<reference ref_id="1126056" ref_url="https://bugzilla.suse.com/1126056" source="BUGZILLA"/>
		<reference ref_id="1127557" ref_url="https://bugzilla.suse.com/1127557" source="BUGZILLA"/>
		<reference ref_id="1130230" ref_url="https://bugzilla.suse.com/1130230" source="BUGZILLA"/>
		<reference ref_id="1132348" ref_url="https://bugzilla.suse.com/1132348" source="BUGZILLA"/>
		<reference ref_id="1132400" ref_url="https://bugzilla.suse.com/1132400" source="BUGZILLA"/>
		<reference ref_id="1132721" ref_url="https://bugzilla.suse.com/1132721" source="BUGZILLA"/>
		<reference ref_id="1133506" ref_url="https://bugzilla.suse.com/1133506" source="BUGZILLA"/>
		<reference ref_id="1133509" ref_url="https://bugzilla.suse.com/1133509" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3842" ref_url="https://www.suse.com/security/cve/CVE-2019-3842/" source="CVE"/>
		<reference ref_id="CVE-2019-3843" ref_url="https://www.suse.com/security/cve/CVE-2019-3843/" source="CVE"/>
		<reference ref_id="CVE-2019-3844" ref_url="https://www.suse.com/security/cve/CVE-2019-3844/" source="CVE"/>
		<reference ref_id="CVE-2019-6454" ref_url="https://www.suse.com/security/cve/CVE-2019-6454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1364-2" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20191364-2.html" source="SUSE-SU"/>
		<description>
This update for systemd fixes the following issues:

Security issues fixed:

- CVE-2019-3842: Fixed a privilege escalation in pam_systemd which could be exploited by a local user (bsc#1132348).
- CVE-2019-6454: Fixed a denial of service via crafted D-Bus message (bsc#1125352).
- CVE-2019-3843, CVE-2019-3844: Fixed a privilege escalation where services with DynamicUser could gain new privileges or create SUID/SGID binaries (bsc#1133506, bsc#1133509).

Non-security issued fixed:

- logind: fix killing of scopes (bsc#1125604)
- namespace: make MountFlags=shared work again (bsc#1124122)
- rules: load drivers only on 'add' events (bsc#1126056)
- sysctl: Don't pass null directive argument to '%s' (bsc#1121563)
- systemd-coredump: generate a stack trace of all core dumps and log into the journal (jsc#SLE-5933)
- udevd: notify when max number value of children is reached only once per batch of events (bsc#1132400)
- sd-bus: bump message queue size again (bsc#1132721)
- Do not automatically online memory on s390x (bsc#1127557)
- Removed sg.conf (bsc#1036463)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-15"/>
	<updated date="2019-07-15"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1036463">SUSE bug 1036463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121563">SUSE bug 1121563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124122">SUSE bug 1124122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125352">SUSE bug 1125352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125604">SUSE bug 1125604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126056">SUSE bug 1126056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127557">SUSE bug 1127557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130230">SUSE bug 1130230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132348">SUSE bug 1132348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132400">SUSE bug 1132400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132721">SUSE bug 1132721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133506">SUSE bug 1133506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133509">SUSE bug 1133509</bugzilla>
	<cve impact="moderate" cvss3="4.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-3842/">CVE-2019-3842</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-3843/">CVE-2019-3843</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-3844/">CVE-2019-3844</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6454/">CVE-2019-6454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490111" comment="libsystemd0-234-24.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490112" comment="libsystemd0-32bit-234-24.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490113" comment="libudev-devel-234-24.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490114" comment="libudev1-234-24.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490115" comment="libudev1-32bit-234-24.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490116" comment="systemd-234-24.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490117" comment="systemd-32bit-234-24.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490118" comment="systemd-bash-completion-234-24.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490119" comment="systemd-container-234-24.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490120" comment="systemd-coredump-234-24.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490121" comment="systemd-devel-234-24.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490122" comment="systemd-sysvinit-234-24.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490123" comment="udev-234-24.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137702" version="1" class="patch">
	<metadata>
		<title>Recommended update for sles12sp3-docker-image, sles12sp4-image, system-user-root (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1134524" ref_url="https://bugzilla.suse.com/1134524" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5021" ref_url="https://www.suse.com/security/cve/CVE-2019-5021/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1368-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006005.html" source="SUSE-SU"/>
		<description>
This update for sles12sp3-docker-image, sles12sp4-image, system-user-root fixes the following issues:

- CVE-2019-5021: Include an invalidated root password by default, not an empty one (bsc#1134524)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-11"/>
	<updated date="2019-10-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1134524">SUSE bug 1134524</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5021/">CVE-2019-5021</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490124" comment="system-user-root-20190513-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137703" version="1" class="patch">
	<metadata>
		<title>Security update for libtasn1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1105435" ref_url="https://bugzilla.suse.com/1105435" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000654" ref_url="https://www.suse.com/security/cve/CVE-2018-1000654/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1372-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005654.html" source="SUSE-SU"/>
		<description>
This update for libtasn1 fixes the following issues:

Security issue fixed:

- CVE-2018-1000654: Fixed a denial of service in the asn1 parser (bsc#1105435).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-03"/>
	<updated date="2019-07-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1105435">SUSE bug 1105435</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000654/">CVE-2018-1000654</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490140" comment="libtasn1-4.13-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490141" comment="libtasn1-6-4.13-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490142" comment="libtasn1-6-32bit-4.13-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490143" comment="libtasn1-devel-4.13-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137704" version="1" class="patch">
	<metadata>
		<title>Security update for axis (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1134598" ref_url="https://bugzilla.suse.com/1134598" source="BUGZILLA"/>
		<reference ref_id="CVE-2012-5784" ref_url="https://www.suse.com/security/cve/CVE-2012-5784/" source="CVE"/>
		<reference ref_id="CVE-2014-3596" ref_url="https://www.suse.com/security/cve/CVE-2014-3596/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1373-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006003.html" source="SUSE-SU"/>
		<description>
This update for axis fixes the following issues:

Security issue fixed:

- CVE-2012-5784, CVE-2014-3596: Fixed missing connection hostname check against X.509 certificate name (bsc#1134598).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-11"/>
	<updated date="2019-10-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1134598">SUSE bug 1134598</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2012-5784/">CVE-2012-5784</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2014-3596/">CVE-2014-3596</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490144" comment="axis-1.4-5.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137705" version="1" class="patch">
	<metadata>
		<title>Security update for taglib (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1096180" ref_url="https://bugzilla.suse.com/1096180" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11439" ref_url="https://www.suse.com/security/cve/CVE-2018-11439/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1374-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005650.html" source="SUSE-SU"/>
		<description>
This update for taglib fixes the following issues:

- CVE-2018-11439: The TagLib::Ogg::FLAC::File::scan function allowed remote
  attackers to cause information disclosure (heap-based buffer over-read) via a
  crafted audio file (bsc#1096180)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-02"/>
	<updated date="2019-07-02"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1096180">SUSE bug 1096180</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11439/">CVE-2018-11439</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490145" comment="libtag1-1.11.1-4.3.62 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137706" version="1" class="patch">
	<metadata>
		<title>Security update for cronie (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1128935" ref_url="https://bugzilla.suse.com/1128935" source="BUGZILLA"/>
		<reference ref_id="1128937" ref_url="https://bugzilla.suse.com/1128937" source="BUGZILLA"/>
		<reference ref_id="1130746" ref_url="https://bugzilla.suse.com/1130746" source="BUGZILLA"/>
		<reference ref_id="1133100" ref_url="https://bugzilla.suse.com/1133100" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9704" ref_url="https://www.suse.com/security/cve/CVE-2019-9704/" source="CVE"/>
		<reference ref_id="CVE-2019-9705" ref_url="https://www.suse.com/security/cve/CVE-2019-9705/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1389-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005655.html" source="SUSE-SU"/>
		<description>
This update for cronie fixes the following issues:

Security issues fixed:

- CVE-2019-9704: Fixed an insufficient check in the return value of calloc which
  could allow a local user to create Denial of Service by crashing the daemon (bsc#1128937).
- CVE-2019-9705: Fixed an implementation vulnerability which could allow a local user to
  exhaust the memory resulting in Denial of Service (bsc#1128935).  

Bug fixes:

- Manual start of cron is possible even when it's already started using systemd (bsc#1133100).
- Cron schedules only one job of crontab (bsc#1130746).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-03"/>
	<updated date="2019-07-03"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1128935">SUSE bug 1128935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128937">SUSE bug 1128937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130746">SUSE bug 1130746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133100">SUSE bug 1133100</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9704/">CVE-2019-9704</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9705/">CVE-2019-9705</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490146" comment="cron-4.2-6.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490147" comment="cronie-1.5.1-6.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137707" version="1" class="patch">
	<metadata>
		<title>Security update for libpng16 (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1100687" ref_url="https://bugzilla.suse.com/1100687" source="BUGZILLA"/>
		<reference ref_id="1121624" ref_url="https://bugzilla.suse.com/1121624" source="BUGZILLA"/>
		<reference ref_id="1124211" ref_url="https://bugzilla.suse.com/1124211" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13785" ref_url="https://www.suse.com/security/cve/CVE-2018-13785/" source="CVE"/>
		<reference ref_id="CVE-2019-7317" ref_url="https://www.suse.com/security/cve/CVE-2019-7317/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1398-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005664.html" source="SUSE-SU"/>
		<description>
This update for libpng16 fixes the following issues:

Security issues fixed:

- CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when 
  png_image_free() was called under png_safe_execute (bsc#1124211).
- CVE-2018-13785: Fixed a wrong calculation of row_factor in the
  png_check_chunk_length function in pngrutil.c, which could haved triggered
  and integer overflow and result in an divide-by-zero while processing a
  crafted PNG file, leading to a denial of service (bsc#1100687)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-05"/>
	<updated date="2019-07-05"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1100687">SUSE bug 1100687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121624">SUSE bug 1121624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124211">SUSE bug 1124211</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13785/">CVE-2018-13785</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-7317/">CVE-2019-7317</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490148" comment="libpng16-16-1.6.34-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490149" comment="libpng16-16-32bit-1.6.34-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490150" comment="libpng16-compat-devel-1.6.34-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490151" comment="libpng16-devel-1.6.34-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137708" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1104129" ref_url="https://bugzilla.suse.com/1104129" source="BUGZILLA"/>
		<reference ref_id="1126068" ref_url="https://bugzilla.suse.com/1126068" source="BUGZILLA"/>
		<reference ref_id="1126069" ref_url="https://bugzilla.suse.com/1126069" source="BUGZILLA"/>
		<reference ref_id="1133185" ref_url="https://bugzilla.suse.com/1133185" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-5740" ref_url="https://www.suse.com/security/cve/CVE-2018-5740/" source="CVE"/>
		<reference ref_id="CVE-2018-5743" ref_url="https://www.suse.com/security/cve/CVE-2018-5743/" source="CVE"/>
		<reference ref_id="CVE-2018-5745" ref_url="https://www.suse.com/security/cve/CVE-2018-5745/" source="CVE"/>
		<reference ref_id="CVE-2019-6465" ref_url="https://www.suse.com/security/cve/CVE-2019-6465/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005528.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

Security issues fixed:

- CVE-2019-6465: Fixed an issue where controls for zone transfers may not be properly applied to Dynamically Loadable Zones (bsc#1126069).
- CVE-2018-5745: Fixed a denial of service vulnerability if a trust anchor rolls over to an unsupported key algorithm when using managed-keys (bsc#1126068).
- CVE-2018-5743: Fixed a denial of service vulnerability which could be caused by to many simultaneous TCP connections (bsc#1133185).
- CVE-2018-5740: Fixed a denial of service vulnerability in the 'deny-answer-aliases' feature (bsc#1104129).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-03"/>
	<updated date="2019-06-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1104129">SUSE bug 1104129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126068">SUSE bug 1126068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126069">SUSE bug 1126069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133185">SUSE bug 1133185</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5740/">CVE-2018-5740</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5743/">CVE-2018-5743</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5745/">CVE-2018-5745</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-6465/">CVE-2019-6465</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490152" comment="bind-devel-9.11.2-12.11.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490153" comment="bind-utils-9.11.2-12.11.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490154" comment="libbind9-160-9.11.2-12.11.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490155" comment="libdns169-9.11.2-12.11.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490156" comment="libirs-devel-9.11.2-12.11.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490157" comment="libirs160-9.11.2-12.11.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490158" comment="libisc166-9.11.2-12.11.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490159" comment="libisccc160-9.11.2-12.11.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490160" comment="libisccfg160-9.11.2-12.11.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490161" comment="liblwres160-9.11.2-12.11.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490162" comment="python3-bind-9.11.2-12.11.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137709" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1137443" ref_url="https://bugzilla.suse.com/1137443" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12735" ref_url="https://www.suse.com/security/cve/CVE-2019-12735/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005545.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issue:

Security issue fixed: 

- CVE-2019-12735: Fixed a potential arbitrary code execution vulnerability in getchar.c (bsc#1137443).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-11"/>
	<updated date="2019-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1137443">SUSE bug 1137443</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12735/">CVE-2019-12735</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490166" comment="vim-8.0.1568-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490167" comment="vim-data-8.0.1568-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490168" comment="vim-data-common-8.0.1568-5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137710" version="1" class="patch">
	<metadata>
		<title>Security update for sssd (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1124194" ref_url="https://bugzilla.suse.com/1124194" source="BUGZILLA"/>
		<reference ref_id="1132657" ref_url="https://bugzilla.suse.com/1132657" source="BUGZILLA"/>
		<reference ref_id="1132879" ref_url="https://bugzilla.suse.com/1132879" source="BUGZILLA"/>
		<reference ref_id="1135247" ref_url="https://bugzilla.suse.com/1135247" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16838" ref_url="https://www.suse.com/security/cve/CVE-2018-16838/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1476-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005551.html" source="SUSE-SU"/>
		<description>
This update for sssd fixes the following issues:

Security issue fixed:

- CVE-2018-16838: Fixed an authentication bypass related to the Group Policy Objects implementation (bsc#1124194). 

Non-security issues fixed:

- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Missing GPOs directory could have led to login problems (bsc#1132879)
- Fix a crash by adding a netgroup counter to struct nss_enum_index (bsc#1132657)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-22"/>
	<updated date="2019-08-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1124194">SUSE bug 1124194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132657">SUSE bug 1132657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132879">SUSE bug 1132879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135247">SUSE bug 1135247</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16838/">CVE-2018-16838</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490169" comment="libipa_hbac-devel-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490170" comment="libipa_hbac0-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490171" comment="libsss_certmap-devel-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490172" comment="libsss_certmap0-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490173" comment="libsss_idmap-devel-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490174" comment="libsss_idmap0-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490175" comment="libsss_nss_idmap-devel-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490176" comment="libsss_nss_idmap0-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490177" comment="libsss_simpleifp-devel-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490178" comment="libsss_simpleifp0-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490179" comment="python3-sssd-config-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490180" comment="sssd-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490181" comment="sssd-ad-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490182" comment="sssd-dbus-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490183" comment="sssd-ipa-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490184" comment="sssd-krb5-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490185" comment="sssd-krb5-common-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490186" comment="sssd-ldap-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490187" comment="sssd-proxy-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490188" comment="sssd-tools-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490189" comment="sssd-wbclient-1.16.1-3.24.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490190" comment="sssd-wbclient-devel-1.16.1-3.24.6 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137711" version="1" class="patch">
	<metadata>
		<title>Security update for elfutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1033084" ref_url="https://bugzilla.suse.com/1033084" source="BUGZILLA"/>
		<reference ref_id="1033085" ref_url="https://bugzilla.suse.com/1033085" source="BUGZILLA"/>
		<reference ref_id="1033086" ref_url="https://bugzilla.suse.com/1033086" source="BUGZILLA"/>
		<reference ref_id="1033087" ref_url="https://bugzilla.suse.com/1033087" source="BUGZILLA"/>
		<reference ref_id="1033088" ref_url="https://bugzilla.suse.com/1033088" source="BUGZILLA"/>
		<reference ref_id="1033089" ref_url="https://bugzilla.suse.com/1033089" source="BUGZILLA"/>
		<reference ref_id="1033090" ref_url="https://bugzilla.suse.com/1033090" source="BUGZILLA"/>
		<reference ref_id="1106390" ref_url="https://bugzilla.suse.com/1106390" source="BUGZILLA"/>
		<reference ref_id="1107066" ref_url="https://bugzilla.suse.com/1107066" source="BUGZILLA"/>
		<reference ref_id="1107067" ref_url="https://bugzilla.suse.com/1107067" source="BUGZILLA"/>
		<reference ref_id="1111973" ref_url="https://bugzilla.suse.com/1111973" source="BUGZILLA"/>
		<reference ref_id="1112723" ref_url="https://bugzilla.suse.com/1112723" source="BUGZILLA"/>
		<reference ref_id="1112726" ref_url="https://bugzilla.suse.com/1112726" source="BUGZILLA"/>
		<reference ref_id="1123685" ref_url="https://bugzilla.suse.com/1123685" source="BUGZILLA"/>
		<reference ref_id="1125007" ref_url="https://bugzilla.suse.com/1125007" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-7607" ref_url="https://www.suse.com/security/cve/CVE-2017-7607/" source="CVE"/>
		<reference ref_id="CVE-2017-7608" ref_url="https://www.suse.com/security/cve/CVE-2017-7608/" source="CVE"/>
		<reference ref_id="CVE-2017-7609" ref_url="https://www.suse.com/security/cve/CVE-2017-7609/" source="CVE"/>
		<reference ref_id="CVE-2017-7610" ref_url="https://www.suse.com/security/cve/CVE-2017-7610/" source="CVE"/>
		<reference ref_id="CVE-2017-7611" ref_url="https://www.suse.com/security/cve/CVE-2017-7611/" source="CVE"/>
		<reference ref_id="CVE-2017-7612" ref_url="https://www.suse.com/security/cve/CVE-2017-7612/" source="CVE"/>
		<reference ref_id="CVE-2017-7613" ref_url="https://www.suse.com/security/cve/CVE-2017-7613/" source="CVE"/>
		<reference ref_id="CVE-2018-16062" ref_url="https://www.suse.com/security/cve/CVE-2018-16062/" source="CVE"/>
		<reference ref_id="CVE-2018-16402" ref_url="https://www.suse.com/security/cve/CVE-2018-16402/" source="CVE"/>
		<reference ref_id="CVE-2018-16403" ref_url="https://www.suse.com/security/cve/CVE-2018-16403/" source="CVE"/>
		<reference ref_id="CVE-2018-18310" ref_url="https://www.suse.com/security/cve/CVE-2018-18310/" source="CVE"/>
		<reference ref_id="CVE-2018-18520" ref_url="https://www.suse.com/security/cve/CVE-2018-18520/" source="CVE"/>
		<reference ref_id="CVE-2018-18521" ref_url="https://www.suse.com/security/cve/CVE-2018-18521/" source="CVE"/>
		<reference ref_id="CVE-2019-7150" ref_url="https://www.suse.com/security/cve/CVE-2019-7150/" source="CVE"/>
		<reference ref_id="CVE-2019-7665" ref_url="https://www.suse.com/security/cve/CVE-2019-7665/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005554.html" source="SUSE-SU"/>
		<description>
This update for elfutils fixes the following issues:

Security issues fixed:  

- CVE-2017-7607: Fixed a heap-based buffer overflow in handle_gnu_hash (bsc#1033084)
- CVE-2017-7608: Fixed a heap-based buffer overflow in ebl_object_note_type_name() (bsc#1033085)
- CVE-2017-7609: Fixed a memory allocation failure in __libelf_decompress (bsc#1033086)
- CVE-2017-7610: Fixed a heap-based buffer overflow in check_group (bsc#1033087)
- CVE-2017-7611: Fixed a denial of service via a crafted ELF file (bsc#1033088)
- CVE-2017-7612: Fixed a denial of service in check_sysv_hash() via a crafted ELF file (bsc#1033089)
- CVE-2017-7613: Fixed denial of service caused by the missing validation of the number of sections and the number of segments in a crafted ELF file (bsc#1033090)
- CVE-2018-16062: Fixed a heap-buffer overflow in /elfutils/libdw/dwarf_getaranges.c:156 (bsc#1106390)
- CVE-2018-16402: Fixed a denial of service/double free on an attempt to decompress the same section twice (bsc#1107066)
- CVE-2018-16403: Fixed a heap buffer overflow in readelf (bsc#1107067)
- CVE-2018-18310: Fixed an invalid address read problem in dwfl_segment_report_module.c (bsc#1111973)
- CVE-2018-18520: Fixed bad handling of ar files inside are files (bsc#1112726)
- CVE-2018-18521: Fixed a denial of service vulnerabilities in the function arlib_add_symbols() used by eu-ranlib (bsc#1112723)
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether the dyn data read from core file is truncated (bsc#1123685)
- CVE-2019-7665: NT_PLATFORM core file note should be a zero terminated string (bsc#1125007)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-13"/>
	<updated date="2019-06-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1033084">SUSE bug 1033084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033085">SUSE bug 1033085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033086">SUSE bug 1033086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033087">SUSE bug 1033087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033088">SUSE bug 1033088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033089">SUSE bug 1033089</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1033090">SUSE bug 1033090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106390">SUSE bug 1106390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107066">SUSE bug 1107066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107067">SUSE bug 1107067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111973">SUSE bug 1111973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112723">SUSE bug 1112723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112726">SUSE bug 1112726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123685">SUSE bug 1123685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125007">SUSE bug 1125007</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7607/">CVE-2017-7607</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7608/">CVE-2017-7608</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7609/">CVE-2017-7609</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7610/">CVE-2017-7610</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7611/">CVE-2017-7611</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7612/">CVE-2017-7612</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7613/">CVE-2017-7613</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16062/">CVE-2018-16062</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16402/">CVE-2018-16402</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16403/">CVE-2018-16403</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18310/">CVE-2018-18310</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18520/">CVE-2018-18520</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18521/">CVE-2018-18521</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7150/">CVE-2019-7150</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-7665/">CVE-2019-7665</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490191" comment="elfutils-0.168-4.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490192" comment="elfutils-lang-0.168-4.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490193" comment="libasm-devel-0.168-4.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490194" comment="libasm1-0.168-4.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490195" comment="libdw-devel-0.168-4.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490196" comment="libdw1-0.168-4.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490197" comment="libdw1-32bit-0.168-4.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490198" comment="libebl-devel-0.168-4.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490199" comment="libebl-plugins-0.168-4.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490200" comment="libebl-plugins-32bit-0.168-4.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490201" comment="libelf-devel-0.168-4.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490202" comment="libelf1-0.168-4.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490203" comment="libelf1-32bit-0.168-4.5.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137712" version="1" class="patch">
	<metadata>
		<title>Security update for python-requests (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1111622" ref_url="https://bugzilla.suse.com/1111622" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-18074" ref_url="https://www.suse.com/security/cve/CVE-2018-18074/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005553.html" source="SUSE-SU"/>
		<description>
This update for python-requests to version 2.20.1 fixes the following issues:

Security issue fixed:

- CVE-2018-18074: Fixed an information disclosure vulnerability of the HTTP Authorization header (bsc#1111622).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-13"/>
	<updated date="2019-06-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1111622">SUSE bug 1111622</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18074/">CVE-2018-18074</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491425" comment="python3-requests-2.20.1-6.3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137713" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1111331" ref_url="https://bugzilla.suse.com/1111331" source="BUGZILLA"/>
		<reference ref_id="1133229" ref_url="https://bugzilla.suse.com/1133229" source="BUGZILLA"/>
		<reference ref_id="1134348" ref_url="https://bugzilla.suse.com/1134348" source="BUGZILLA"/>
		<reference ref_id="1135273" ref_url="https://bugzilla.suse.com/1135273" source="BUGZILLA"/>
		<reference ref_id="1136109" ref_url="https://bugzilla.suse.com/1136109" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126/" source="CVE"/>
		<reference ref_id="CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127/" source="CVE"/>
		<reference ref_id="CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130/" source="CVE"/>
		<reference ref_id="CVE-2019-10132" ref_url="https://www.suse.com/security/cve/CVE-2019-10132/" source="CVE"/>
		<reference ref_id="CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005555.html" source="SUSE-SU"/>
		<description>

  
This update for libvirt fixes the following issues:

Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331)

- CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)
- CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)
- CVE-2018-12130: Microarchitectural Load Port Data Sampling (MLPDS)
- CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

These updates contain the libvirt adjustments, that pass through the new 'md-clear' CPU flag (bsc#1135273).

For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736

Security issues fixed:

- CVE-2019-10132: Reject clients unless their UID matches the server UID (bsc#1134348)

Non security issues fixed:

- delay global firewall setup if no networks are running (bsc#1133229)
- add systemd-container dependency to qemu and lxc drivers (bsc#1136109)

		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-13"/>
	<updated date="2019-06-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1111331">SUSE bug 1111331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133229">SUSE bug 1133229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134348">SUSE bug 1134348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135273">SUSE bug 1135273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136109">SUSE bug 1136109</bugzilla>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-10132/">CVE-2019-10132</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491426" comment="libvirt-libs-5.1.0-8.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137714" version="1" class="patch">
	<metadata>
		<title>Security update for netpbm (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1024288" ref_url="https://bugzilla.suse.com/1024288" source="BUGZILLA"/>
		<reference ref_id="1024291" ref_url="https://bugzilla.suse.com/1024291" source="BUGZILLA"/>
		<reference ref_id="1136936" ref_url="https://bugzilla.suse.com/1136936" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-2579" ref_url="https://www.suse.com/security/cve/CVE-2017-2579/" source="CVE"/>
		<reference ref_id="CVE-2017-2580" ref_url="https://www.suse.com/security/cve/CVE-2017-2580/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005567.html" source="SUSE-SU"/>
		<description>
This update for netpbm fixes the following issues:

Security issues fixed:

- CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack() (bsc#1024288).
- CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster() function (bsc#1024291).
- create netpbm-vulnerable subpackage and move pstopnm there, as ghostscript is used to convert (bsc#1136936)

		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-17"/>
	<updated date="2019-06-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1024288">SUSE bug 1024288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024291">SUSE bug 1024291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136936">SUSE bug 1136936</bugzilla>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2579/">CVE-2017-2579</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2580/">CVE-2017-2580</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490213" comment="libnetpbm11-10.80.1-3.8.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490214" comment="netpbm-10.80.1-3.8.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137715" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1012382" ref_url="https://bugzilla.suse.com/1012382" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1052904" ref_url="https://bugzilla.suse.com/1052904" source="BUGZILLA"/>
		<reference ref_id="1053043" ref_url="https://bugzilla.suse.com/1053043" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1055121" ref_url="https://bugzilla.suse.com/1055121" source="BUGZILLA"/>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1063638" ref_url="https://bugzilla.suse.com/1063638" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1068546" ref_url="https://bugzilla.suse.com/1068546" source="BUGZILLA"/>
		<reference ref_id="1070872" ref_url="https://bugzilla.suse.com/1070872" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1075020" ref_url="https://bugzilla.suse.com/1075020" source="BUGZILLA"/>
		<reference ref_id="1082387" ref_url="https://bugzilla.suse.com/1082387" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085535" ref_url="https://bugzilla.suse.com/1085535" source="BUGZILLA"/>
		<reference ref_id="1085536" ref_url="https://bugzilla.suse.com/1085536" source="BUGZILLA"/>
		<reference ref_id="1086657" ref_url="https://bugzilla.suse.com/1086657" source="BUGZILLA"/>
		<reference ref_id="1088804" ref_url="https://bugzilla.suse.com/1088804" source="BUGZILLA"/>
		<reference ref_id="1093389" ref_url="https://bugzilla.suse.com/1093389" source="BUGZILLA"/>
		<reference ref_id="1097583" ref_url="https://bugzilla.suse.com/1097583" source="BUGZILLA"/>
		<reference ref_id="1097584" ref_url="https://bugzilla.suse.com/1097584" source="BUGZILLA"/>
		<reference ref_id="1097585" ref_url="https://bugzilla.suse.com/1097585" source="BUGZILLA"/>
		<reference ref_id="1097586" ref_url="https://bugzilla.suse.com/1097586" source="BUGZILLA"/>
		<reference ref_id="1097587" ref_url="https://bugzilla.suse.com/1097587" source="BUGZILLA"/>
		<reference ref_id="1097588" ref_url="https://bugzilla.suse.com/1097588" source="BUGZILLA"/>
		<reference ref_id="1099658" ref_url="https://bugzilla.suse.com/1099658" source="BUGZILLA"/>
		<reference ref_id="1103186" ref_url="https://bugzilla.suse.com/1103186" source="BUGZILLA"/>
		<reference ref_id="1103259" ref_url="https://bugzilla.suse.com/1103259" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1106011" ref_url="https://bugzilla.suse.com/1106011" source="BUGZILLA"/>
		<reference ref_id="1106284" ref_url="https://bugzilla.suse.com/1106284" source="BUGZILLA"/>
		<reference ref_id="1108193" ref_url="https://bugzilla.suse.com/1108193" source="BUGZILLA"/>
		<reference ref_id="1108838" ref_url="https://bugzilla.suse.com/1108838" source="BUGZILLA"/>
		<reference ref_id="1108937" ref_url="https://bugzilla.suse.com/1108937" source="BUGZILLA"/>
		<reference ref_id="1110946" ref_url="https://bugzilla.suse.com/1110946" source="BUGZILLA"/>
		<reference ref_id="1111331" ref_url="https://bugzilla.suse.com/1111331" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1111696" ref_url="https://bugzilla.suse.com/1111696" source="BUGZILLA"/>
		<reference ref_id="1112063" ref_url="https://bugzilla.suse.com/1112063" source="BUGZILLA"/>
		<reference ref_id="1112128" ref_url="https://bugzilla.suse.com/1112128" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114427" ref_url="https://bugzilla.suse.com/1114427" source="BUGZILLA"/>
		<reference ref_id="1114542" ref_url="https://bugzilla.suse.com/1114542" source="BUGZILLA"/>
		<reference ref_id="1114638" ref_url="https://bugzilla.suse.com/1114638" source="BUGZILLA"/>
		<reference ref_id="1115688" ref_url="https://bugzilla.suse.com/1115688" source="BUGZILLA"/>
		<reference ref_id="1117114" ref_url="https://bugzilla.suse.com/1117114" source="BUGZILLA"/>
		<reference ref_id="1117158" ref_url="https://bugzilla.suse.com/1117158" source="BUGZILLA"/>
		<reference ref_id="1117561" ref_url="https://bugzilla.suse.com/1117561" source="BUGZILLA"/>
		<reference ref_id="1118139" ref_url="https://bugzilla.suse.com/1118139" source="BUGZILLA"/>
		<reference ref_id="1119680" ref_url="https://bugzilla.suse.com/1119680" source="BUGZILLA"/>
		<reference ref_id="1119843" ref_url="https://bugzilla.suse.com/1119843" source="BUGZILLA"/>
		<reference ref_id="1120091" ref_url="https://bugzilla.suse.com/1120091" source="BUGZILLA"/>
		<reference ref_id="1120318" ref_url="https://bugzilla.suse.com/1120318" source="BUGZILLA"/>
		<reference ref_id="1120423" ref_url="https://bugzilla.suse.com/1120423" source="BUGZILLA"/>
		<reference ref_id="1120566" ref_url="https://bugzilla.suse.com/1120566" source="BUGZILLA"/>
		<reference ref_id="1120843" ref_url="https://bugzilla.suse.com/1120843" source="BUGZILLA"/>
		<reference ref_id="1120902" ref_url="https://bugzilla.suse.com/1120902" source="BUGZILLA"/>
		<reference ref_id="1122767" ref_url="https://bugzilla.suse.com/1122767" source="BUGZILLA"/>
		<reference ref_id="1122776" ref_url="https://bugzilla.suse.com/1122776" source="BUGZILLA"/>
		<reference ref_id="1123454" ref_url="https://bugzilla.suse.com/1123454" source="BUGZILLA"/>
		<reference ref_id="1123663" ref_url="https://bugzilla.suse.com/1123663" source="BUGZILLA"/>
		<reference ref_id="1124503" ref_url="https://bugzilla.suse.com/1124503" source="BUGZILLA"/>
		<reference ref_id="1124839" ref_url="https://bugzilla.suse.com/1124839" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1126356" ref_url="https://bugzilla.suse.com/1126356" source="BUGZILLA"/>
		<reference ref_id="1126704" ref_url="https://bugzilla.suse.com/1126704" source="BUGZILLA"/>
		<reference ref_id="1127175" ref_url="https://bugzilla.suse.com/1127175" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1127374" ref_url="https://bugzilla.suse.com/1127374" source="BUGZILLA"/>
		<reference ref_id="1127616" ref_url="https://bugzilla.suse.com/1127616" source="BUGZILLA"/>
		<reference ref_id="1128052" ref_url="https://bugzilla.suse.com/1128052" source="BUGZILLA"/>
		<reference ref_id="1128415" ref_url="https://bugzilla.suse.com/1128415" source="BUGZILLA"/>
		<reference ref_id="1128544" ref_url="https://bugzilla.suse.com/1128544" source="BUGZILLA"/>
		<reference ref_id="1128904" ref_url="https://bugzilla.suse.com/1128904" source="BUGZILLA"/>
		<reference ref_id="1128971" ref_url="https://bugzilla.suse.com/1128971" source="BUGZILLA"/>
		<reference ref_id="1128979" ref_url="https://bugzilla.suse.com/1128979" source="BUGZILLA"/>
		<reference ref_id="1129138" ref_url="https://bugzilla.suse.com/1129138" source="BUGZILLA"/>
		<reference ref_id="1129273" ref_url="https://bugzilla.suse.com/1129273" source="BUGZILLA"/>
		<reference ref_id="1129497" ref_url="https://bugzilla.suse.com/1129497" source="BUGZILLA"/>
		<reference ref_id="1129693" ref_url="https://bugzilla.suse.com/1129693" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1129845" ref_url="https://bugzilla.suse.com/1129845" source="BUGZILLA"/>
		<reference ref_id="1130195" ref_url="https://bugzilla.suse.com/1130195" source="BUGZILLA"/>
		<reference ref_id="1130425" ref_url="https://bugzilla.suse.com/1130425" source="BUGZILLA"/>
		<reference ref_id="1130527" ref_url="https://bugzilla.suse.com/1130527" source="BUGZILLA"/>
		<reference ref_id="1130567" ref_url="https://bugzilla.suse.com/1130567" source="BUGZILLA"/>
		<reference ref_id="1130579" ref_url="https://bugzilla.suse.com/1130579" source="BUGZILLA"/>
		<reference ref_id="1130699" ref_url="https://bugzilla.suse.com/1130699" source="BUGZILLA"/>
		<reference ref_id="1130937" ref_url="https://bugzilla.suse.com/1130937" source="BUGZILLA"/>
		<reference ref_id="1130972" ref_url="https://bugzilla.suse.com/1130972" source="BUGZILLA"/>
		<reference ref_id="1131326" ref_url="https://bugzilla.suse.com/1131326" source="BUGZILLA"/>
		<reference ref_id="1131427" ref_url="https://bugzilla.suse.com/1131427" source="BUGZILLA"/>
		<reference ref_id="1131438" ref_url="https://bugzilla.suse.com/1131438" source="BUGZILLA"/>
		<reference ref_id="1131451" ref_url="https://bugzilla.suse.com/1131451" source="BUGZILLA"/>
		<reference ref_id="1131467" ref_url="https://bugzilla.suse.com/1131467" source="BUGZILLA"/>
		<reference ref_id="1131488" ref_url="https://bugzilla.suse.com/1131488" source="BUGZILLA"/>
		<reference ref_id="1131530" ref_url="https://bugzilla.suse.com/1131530" source="BUGZILLA"/>
		<reference ref_id="1131565" ref_url="https://bugzilla.suse.com/1131565" source="BUGZILLA"/>
		<reference ref_id="1131574" ref_url="https://bugzilla.suse.com/1131574" source="BUGZILLA"/>
		<reference ref_id="1131587" ref_url="https://bugzilla.suse.com/1131587" source="BUGZILLA"/>
		<reference ref_id="1131659" ref_url="https://bugzilla.suse.com/1131659" source="BUGZILLA"/>
		<reference ref_id="1131673" ref_url="https://bugzilla.suse.com/1131673" source="BUGZILLA"/>
		<reference ref_id="1131847" ref_url="https://bugzilla.suse.com/1131847" source="BUGZILLA"/>
		<reference ref_id="1131848" ref_url="https://bugzilla.suse.com/1131848" source="BUGZILLA"/>
		<reference ref_id="1131851" ref_url="https://bugzilla.suse.com/1131851" source="BUGZILLA"/>
		<reference ref_id="1131900" ref_url="https://bugzilla.suse.com/1131900" source="BUGZILLA"/>
		<reference ref_id="1131934" ref_url="https://bugzilla.suse.com/1131934" source="BUGZILLA"/>
		<reference ref_id="1131935" ref_url="https://bugzilla.suse.com/1131935" source="BUGZILLA"/>
		<reference ref_id="1132044" ref_url="https://bugzilla.suse.com/1132044" source="BUGZILLA"/>
		<reference ref_id="1132219" ref_url="https://bugzilla.suse.com/1132219" source="BUGZILLA"/>
		<reference ref_id="1132226" ref_url="https://bugzilla.suse.com/1132226" source="BUGZILLA"/>
		<reference ref_id="1132227" ref_url="https://bugzilla.suse.com/1132227" source="BUGZILLA"/>
		<reference ref_id="1132365" ref_url="https://bugzilla.suse.com/1132365" source="BUGZILLA"/>
		<reference ref_id="1132368" ref_url="https://bugzilla.suse.com/1132368" source="BUGZILLA"/>
		<reference ref_id="1132369" ref_url="https://bugzilla.suse.com/1132369" source="BUGZILLA"/>
		<reference ref_id="1132370" ref_url="https://bugzilla.suse.com/1132370" source="BUGZILLA"/>
		<reference ref_id="1132372" ref_url="https://bugzilla.suse.com/1132372" source="BUGZILLA"/>
		<reference ref_id="1132373" ref_url="https://bugzilla.suse.com/1132373" source="BUGZILLA"/>
		<reference ref_id="1132384" ref_url="https://bugzilla.suse.com/1132384" source="BUGZILLA"/>
		<reference ref_id="1132397" ref_url="https://bugzilla.suse.com/1132397" source="BUGZILLA"/>
		<reference ref_id="1132402" ref_url="https://bugzilla.suse.com/1132402" source="BUGZILLA"/>
		<reference ref_id="1132403" ref_url="https://bugzilla.suse.com/1132403" source="BUGZILLA"/>
		<reference ref_id="1132404" ref_url="https://bugzilla.suse.com/1132404" source="BUGZILLA"/>
		<reference ref_id="1132405" ref_url="https://bugzilla.suse.com/1132405" source="BUGZILLA"/>
		<reference ref_id="1132407" ref_url="https://bugzilla.suse.com/1132407" source="BUGZILLA"/>
		<reference ref_id="1132411" ref_url="https://bugzilla.suse.com/1132411" source="BUGZILLA"/>
		<reference ref_id="1132412" ref_url="https://bugzilla.suse.com/1132412" source="BUGZILLA"/>
		<reference ref_id="1132413" ref_url="https://bugzilla.suse.com/1132413" source="BUGZILLA"/>
		<reference ref_id="1132414" ref_url="https://bugzilla.suse.com/1132414" source="BUGZILLA"/>
		<reference ref_id="1132426" ref_url="https://bugzilla.suse.com/1132426" source="BUGZILLA"/>
		<reference ref_id="1132527" ref_url="https://bugzilla.suse.com/1132527" source="BUGZILLA"/>
		<reference ref_id="1132531" ref_url="https://bugzilla.suse.com/1132531" source="BUGZILLA"/>
		<reference ref_id="1132555" ref_url="https://bugzilla.suse.com/1132555" source="BUGZILLA"/>
		<reference ref_id="1132558" ref_url="https://bugzilla.suse.com/1132558" source="BUGZILLA"/>
		<reference ref_id="1132561" ref_url="https://bugzilla.suse.com/1132561" source="BUGZILLA"/>
		<reference ref_id="1132562" ref_url="https://bugzilla.suse.com/1132562" source="BUGZILLA"/>
		<reference ref_id="1132563" ref_url="https://bugzilla.suse.com/1132563" source="BUGZILLA"/>
		<reference ref_id="1132564" ref_url="https://bugzilla.suse.com/1132564" source="BUGZILLA"/>
		<reference ref_id="1132570" ref_url="https://bugzilla.suse.com/1132570" source="BUGZILLA"/>
		<reference ref_id="1132571" ref_url="https://bugzilla.suse.com/1132571" source="BUGZILLA"/>
		<reference ref_id="1132572" ref_url="https://bugzilla.suse.com/1132572" source="BUGZILLA"/>
		<reference ref_id="1132589" ref_url="https://bugzilla.suse.com/1132589" source="BUGZILLA"/>
		<reference ref_id="1132618" ref_url="https://bugzilla.suse.com/1132618" source="BUGZILLA"/>
		<reference ref_id="1132673" ref_url="https://bugzilla.suse.com/1132673" source="BUGZILLA"/>
		<reference ref_id="1132681" ref_url="https://bugzilla.suse.com/1132681" source="BUGZILLA"/>
		<reference ref_id="1132726" ref_url="https://bugzilla.suse.com/1132726" source="BUGZILLA"/>
		<reference ref_id="1132828" ref_url="https://bugzilla.suse.com/1132828" source="BUGZILLA"/>
		<reference ref_id="1132894" ref_url="https://bugzilla.suse.com/1132894" source="BUGZILLA"/>
		<reference ref_id="1132943" ref_url="https://bugzilla.suse.com/1132943" source="BUGZILLA"/>
		<reference ref_id="1132982" ref_url="https://bugzilla.suse.com/1132982" source="BUGZILLA"/>
		<reference ref_id="1133005" ref_url="https://bugzilla.suse.com/1133005" source="BUGZILLA"/>
		<reference ref_id="1133016" ref_url="https://bugzilla.suse.com/1133016" source="BUGZILLA"/>
		<reference ref_id="1133094" ref_url="https://bugzilla.suse.com/1133094" source="BUGZILLA"/>
		<reference ref_id="1133095" ref_url="https://bugzilla.suse.com/1133095" source="BUGZILLA"/>
		<reference ref_id="1133115" ref_url="https://bugzilla.suse.com/1133115" source="BUGZILLA"/>
		<reference ref_id="1133149" ref_url="https://bugzilla.suse.com/1133149" source="BUGZILLA"/>
		<reference ref_id="1133176" ref_url="https://bugzilla.suse.com/1133176" source="BUGZILLA"/>
		<reference ref_id="1133188" ref_url="https://bugzilla.suse.com/1133188" source="BUGZILLA"/>
		<reference ref_id="1133190" ref_url="https://bugzilla.suse.com/1133190" source="BUGZILLA"/>
		<reference ref_id="1133320" ref_url="https://bugzilla.suse.com/1133320" source="BUGZILLA"/>
		<reference ref_id="1133486" ref_url="https://bugzilla.suse.com/1133486" source="BUGZILLA"/>
		<reference ref_id="1133529" ref_url="https://bugzilla.suse.com/1133529" source="BUGZILLA"/>
		<reference ref_id="1133547" ref_url="https://bugzilla.suse.com/1133547" source="BUGZILLA"/>
		<reference ref_id="1133584" ref_url="https://bugzilla.suse.com/1133584" source="BUGZILLA"/>
		<reference ref_id="1133593" ref_url="https://bugzilla.suse.com/1133593" source="BUGZILLA"/>
		<reference ref_id="1133612" ref_url="https://bugzilla.suse.com/1133612" source="BUGZILLA"/>
		<reference ref_id="1133616" ref_url="https://bugzilla.suse.com/1133616" source="BUGZILLA"/>
		<reference ref_id="1133667" ref_url="https://bugzilla.suse.com/1133667" source="BUGZILLA"/>
		<reference ref_id="1133668" ref_url="https://bugzilla.suse.com/1133668" source="BUGZILLA"/>
		<reference ref_id="1133672" ref_url="https://bugzilla.suse.com/1133672" source="BUGZILLA"/>
		<reference ref_id="1133674" ref_url="https://bugzilla.suse.com/1133674" source="BUGZILLA"/>
		<reference ref_id="1133675" ref_url="https://bugzilla.suse.com/1133675" source="BUGZILLA"/>
		<reference ref_id="1133698" ref_url="https://bugzilla.suse.com/1133698" source="BUGZILLA"/>
		<reference ref_id="1133702" ref_url="https://bugzilla.suse.com/1133702" source="BUGZILLA"/>
		<reference ref_id="1133731" ref_url="https://bugzilla.suse.com/1133731" source="BUGZILLA"/>
		<reference ref_id="1133769" ref_url="https://bugzilla.suse.com/1133769" source="BUGZILLA"/>
		<reference ref_id="1133772" ref_url="https://bugzilla.suse.com/1133772" source="BUGZILLA"/>
		<reference ref_id="1133774" ref_url="https://bugzilla.suse.com/1133774" source="BUGZILLA"/>
		<reference ref_id="1133778" ref_url="https://bugzilla.suse.com/1133778" source="BUGZILLA"/>
		<reference ref_id="1133779" ref_url="https://bugzilla.suse.com/1133779" source="BUGZILLA"/>
		<reference ref_id="1133780" ref_url="https://bugzilla.suse.com/1133780" source="BUGZILLA"/>
		<reference ref_id="1133825" ref_url="https://bugzilla.suse.com/1133825" source="BUGZILLA"/>
		<reference ref_id="1133850" ref_url="https://bugzilla.suse.com/1133850" source="BUGZILLA"/>
		<reference ref_id="1133851" ref_url="https://bugzilla.suse.com/1133851" source="BUGZILLA"/>
		<reference ref_id="1133852" ref_url="https://bugzilla.suse.com/1133852" source="BUGZILLA"/>
		<reference ref_id="1133897" ref_url="https://bugzilla.suse.com/1133897" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1134160" ref_url="https://bugzilla.suse.com/1134160" source="BUGZILLA"/>
		<reference ref_id="1134162" ref_url="https://bugzilla.suse.com/1134162" source="BUGZILLA"/>
		<reference ref_id="1134199" ref_url="https://bugzilla.suse.com/1134199" source="BUGZILLA"/>
		<reference ref_id="1134200" ref_url="https://bugzilla.suse.com/1134200" source="BUGZILLA"/>
		<reference ref_id="1134201" ref_url="https://bugzilla.suse.com/1134201" source="BUGZILLA"/>
		<reference ref_id="1134202" ref_url="https://bugzilla.suse.com/1134202" source="BUGZILLA"/>
		<reference ref_id="1134203" ref_url="https://bugzilla.suse.com/1134203" source="BUGZILLA"/>
		<reference ref_id="1134204" ref_url="https://bugzilla.suse.com/1134204" source="BUGZILLA"/>
		<reference ref_id="1134205" ref_url="https://bugzilla.suse.com/1134205" source="BUGZILLA"/>
		<reference ref_id="1134223" ref_url="https://bugzilla.suse.com/1134223" source="BUGZILLA"/>
		<reference ref_id="1134354" ref_url="https://bugzilla.suse.com/1134354" source="BUGZILLA"/>
		<reference ref_id="1134393" ref_url="https://bugzilla.suse.com/1134393" source="BUGZILLA"/>
		<reference ref_id="1134397" ref_url="https://bugzilla.suse.com/1134397" source="BUGZILLA"/>
		<reference ref_id="1134459" ref_url="https://bugzilla.suse.com/1134459" source="BUGZILLA"/>
		<reference ref_id="1134460" ref_url="https://bugzilla.suse.com/1134460" source="BUGZILLA"/>
		<reference ref_id="1134461" ref_url="https://bugzilla.suse.com/1134461" source="BUGZILLA"/>
		<reference ref_id="1134597" ref_url="https://bugzilla.suse.com/1134597" source="BUGZILLA"/>
		<reference ref_id="1134600" ref_url="https://bugzilla.suse.com/1134600" source="BUGZILLA"/>
		<reference ref_id="1134607" ref_url="https://bugzilla.suse.com/1134607" source="BUGZILLA"/>
		<reference ref_id="1134618" ref_url="https://bugzilla.suse.com/1134618" source="BUGZILLA"/>
		<reference ref_id="1134651" ref_url="https://bugzilla.suse.com/1134651" source="BUGZILLA"/>
		<reference ref_id="1134671" ref_url="https://bugzilla.suse.com/1134671" source="BUGZILLA"/>
		<reference ref_id="1134760" ref_url="https://bugzilla.suse.com/1134760" source="BUGZILLA"/>
		<reference ref_id="1134806" ref_url="https://bugzilla.suse.com/1134806" source="BUGZILLA"/>
		<reference ref_id="1134810" ref_url="https://bugzilla.suse.com/1134810" source="BUGZILLA"/>
		<reference ref_id="1134813" ref_url="https://bugzilla.suse.com/1134813" source="BUGZILLA"/>
		<reference ref_id="1134848" ref_url="https://bugzilla.suse.com/1134848" source="BUGZILLA"/>
		<reference ref_id="1134936" ref_url="https://bugzilla.suse.com/1134936" source="BUGZILLA"/>
		<reference ref_id="1134945" ref_url="https://bugzilla.suse.com/1134945" source="BUGZILLA"/>
		<reference ref_id="1134946" ref_url="https://bugzilla.suse.com/1134946" source="BUGZILLA"/>
		<reference ref_id="1134947" ref_url="https://bugzilla.suse.com/1134947" source="BUGZILLA"/>
		<reference ref_id="1134948" ref_url="https://bugzilla.suse.com/1134948" source="BUGZILLA"/>
		<reference ref_id="1134949" ref_url="https://bugzilla.suse.com/1134949" source="BUGZILLA"/>
		<reference ref_id="1134950" ref_url="https://bugzilla.suse.com/1134950" source="BUGZILLA"/>
		<reference ref_id="1134951" ref_url="https://bugzilla.suse.com/1134951" source="BUGZILLA"/>
		<reference ref_id="1134952" ref_url="https://bugzilla.suse.com/1134952" source="BUGZILLA"/>
		<reference ref_id="1134953" ref_url="https://bugzilla.suse.com/1134953" source="BUGZILLA"/>
		<reference ref_id="1134972" ref_url="https://bugzilla.suse.com/1134972" source="BUGZILLA"/>
		<reference ref_id="1134974" ref_url="https://bugzilla.suse.com/1134974" source="BUGZILLA"/>
		<reference ref_id="1134975" ref_url="https://bugzilla.suse.com/1134975" source="BUGZILLA"/>
		<reference ref_id="1134980" ref_url="https://bugzilla.suse.com/1134980" source="BUGZILLA"/>
		<reference ref_id="1134981" ref_url="https://bugzilla.suse.com/1134981" source="BUGZILLA"/>
		<reference ref_id="1134983" ref_url="https://bugzilla.suse.com/1134983" source="BUGZILLA"/>
		<reference ref_id="1134987" ref_url="https://bugzilla.suse.com/1134987" source="BUGZILLA"/>
		<reference ref_id="1134989" ref_url="https://bugzilla.suse.com/1134989" source="BUGZILLA"/>
		<reference ref_id="1134990" ref_url="https://bugzilla.suse.com/1134990" source="BUGZILLA"/>
		<reference ref_id="1134994" ref_url="https://bugzilla.suse.com/1134994" source="BUGZILLA"/>
		<reference ref_id="1134995" ref_url="https://bugzilla.suse.com/1134995" source="BUGZILLA"/>
		<reference ref_id="1134998" ref_url="https://bugzilla.suse.com/1134998" source="BUGZILLA"/>
		<reference ref_id="1134999" ref_url="https://bugzilla.suse.com/1134999" source="BUGZILLA"/>
		<reference ref_id="1135006" ref_url="https://bugzilla.suse.com/1135006" source="BUGZILLA"/>
		<reference ref_id="1135007" ref_url="https://bugzilla.suse.com/1135007" source="BUGZILLA"/>
		<reference ref_id="1135008" ref_url="https://bugzilla.suse.com/1135008" source="BUGZILLA"/>
		<reference ref_id="1135018" ref_url="https://bugzilla.suse.com/1135018" source="BUGZILLA"/>
		<reference ref_id="1135021" ref_url="https://bugzilla.suse.com/1135021" source="BUGZILLA"/>
		<reference ref_id="1135024" ref_url="https://bugzilla.suse.com/1135024" source="BUGZILLA"/>
		<reference ref_id="1135026" ref_url="https://bugzilla.suse.com/1135026" source="BUGZILLA"/>
		<reference ref_id="1135027" ref_url="https://bugzilla.suse.com/1135027" source="BUGZILLA"/>
		<reference ref_id="1135028" ref_url="https://bugzilla.suse.com/1135028" source="BUGZILLA"/>
		<reference ref_id="1135029" ref_url="https://bugzilla.suse.com/1135029" source="BUGZILLA"/>
		<reference ref_id="1135031" ref_url="https://bugzilla.suse.com/1135031" source="BUGZILLA"/>
		<reference ref_id="1135033" ref_url="https://bugzilla.suse.com/1135033" source="BUGZILLA"/>
		<reference ref_id="1135034" ref_url="https://bugzilla.suse.com/1135034" source="BUGZILLA"/>
		<reference ref_id="1135035" ref_url="https://bugzilla.suse.com/1135035" source="BUGZILLA"/>
		<reference ref_id="1135036" ref_url="https://bugzilla.suse.com/1135036" source="BUGZILLA"/>
		<reference ref_id="1135037" ref_url="https://bugzilla.suse.com/1135037" source="BUGZILLA"/>
		<reference ref_id="1135038" ref_url="https://bugzilla.suse.com/1135038" source="BUGZILLA"/>
		<reference ref_id="1135039" ref_url="https://bugzilla.suse.com/1135039" source="BUGZILLA"/>
		<reference ref_id="1135041" ref_url="https://bugzilla.suse.com/1135041" source="BUGZILLA"/>
		<reference ref_id="1135042" ref_url="https://bugzilla.suse.com/1135042" source="BUGZILLA"/>
		<reference ref_id="1135044" ref_url="https://bugzilla.suse.com/1135044" source="BUGZILLA"/>
		<reference ref_id="1135045" ref_url="https://bugzilla.suse.com/1135045" source="BUGZILLA"/>
		<reference ref_id="1135046" ref_url="https://bugzilla.suse.com/1135046" source="BUGZILLA"/>
		<reference ref_id="1135047" ref_url="https://bugzilla.suse.com/1135047" source="BUGZILLA"/>
		<reference ref_id="1135049" ref_url="https://bugzilla.suse.com/1135049" source="BUGZILLA"/>
		<reference ref_id="1135051" ref_url="https://bugzilla.suse.com/1135051" source="BUGZILLA"/>
		<reference ref_id="1135052" ref_url="https://bugzilla.suse.com/1135052" source="BUGZILLA"/>
		<reference ref_id="1135053" ref_url="https://bugzilla.suse.com/1135053" source="BUGZILLA"/>
		<reference ref_id="1135055" ref_url="https://bugzilla.suse.com/1135055" source="BUGZILLA"/>
		<reference ref_id="1135056" ref_url="https://bugzilla.suse.com/1135056" source="BUGZILLA"/>
		<reference ref_id="1135058" ref_url="https://bugzilla.suse.com/1135058" source="BUGZILLA"/>
		<reference ref_id="1135100" ref_url="https://bugzilla.suse.com/1135100" source="BUGZILLA"/>
		<reference ref_id="1135120" ref_url="https://bugzilla.suse.com/1135120" source="BUGZILLA"/>
		<reference ref_id="1135278" ref_url="https://bugzilla.suse.com/1135278" source="BUGZILLA"/>
		<reference ref_id="1135281" ref_url="https://bugzilla.suse.com/1135281" source="BUGZILLA"/>
		<reference ref_id="1135309" ref_url="https://bugzilla.suse.com/1135309" source="BUGZILLA"/>
		<reference ref_id="1135312" ref_url="https://bugzilla.suse.com/1135312" source="BUGZILLA"/>
		<reference ref_id="1135314" ref_url="https://bugzilla.suse.com/1135314" source="BUGZILLA"/>
		<reference ref_id="1135315" ref_url="https://bugzilla.suse.com/1135315" source="BUGZILLA"/>
		<reference ref_id="1135316" ref_url="https://bugzilla.suse.com/1135316" source="BUGZILLA"/>
		<reference ref_id="1135320" ref_url="https://bugzilla.suse.com/1135320" source="BUGZILLA"/>
		<reference ref_id="1135323" ref_url="https://bugzilla.suse.com/1135323" source="BUGZILLA"/>
		<reference ref_id="1135330" ref_url="https://bugzilla.suse.com/1135330" source="BUGZILLA"/>
		<reference ref_id="1135492" ref_url="https://bugzilla.suse.com/1135492" source="BUGZILLA"/>
		<reference ref_id="1135542" ref_url="https://bugzilla.suse.com/1135542" source="BUGZILLA"/>
		<reference ref_id="1135556" ref_url="https://bugzilla.suse.com/1135556" source="BUGZILLA"/>
		<reference ref_id="1135603" ref_url="https://bugzilla.suse.com/1135603" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135661" ref_url="https://bugzilla.suse.com/1135661" source="BUGZILLA"/>
		<reference ref_id="1135758" ref_url="https://bugzilla.suse.com/1135758" source="BUGZILLA"/>
		<reference ref_id="1136188" ref_url="https://bugzilla.suse.com/1136188" source="BUGZILLA"/>
		<reference ref_id="1136206" ref_url="https://bugzilla.suse.com/1136206" source="BUGZILLA"/>
		<reference ref_id="1136215" ref_url="https://bugzilla.suse.com/1136215" source="BUGZILLA"/>
		<reference ref_id="1136345" ref_url="https://bugzilla.suse.com/1136345" source="BUGZILLA"/>
		<reference ref_id="1136347" ref_url="https://bugzilla.suse.com/1136347" source="BUGZILLA"/>
		<reference ref_id="1136348" ref_url="https://bugzilla.suse.com/1136348" source="BUGZILLA"/>
		<reference ref_id="1136353" ref_url="https://bugzilla.suse.com/1136353" source="BUGZILLA"/>
		<reference ref_id="1136424" ref_url="https://bugzilla.suse.com/1136424" source="BUGZILLA"/>
		<reference ref_id="1136428" ref_url="https://bugzilla.suse.com/1136428" source="BUGZILLA"/>
		<reference ref_id="1136430" ref_url="https://bugzilla.suse.com/1136430" source="BUGZILLA"/>
		<reference ref_id="1136432" ref_url="https://bugzilla.suse.com/1136432" source="BUGZILLA"/>
		<reference ref_id="1136434" ref_url="https://bugzilla.suse.com/1136434" source="BUGZILLA"/>
		<reference ref_id="1136435" ref_url="https://bugzilla.suse.com/1136435" source="BUGZILLA"/>
		<reference ref_id="1136438" ref_url="https://bugzilla.suse.com/1136438" source="BUGZILLA"/>
		<reference ref_id="1136439" ref_url="https://bugzilla.suse.com/1136439" source="BUGZILLA"/>
		<reference ref_id="1136456" ref_url="https://bugzilla.suse.com/1136456" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1136469" ref_url="https://bugzilla.suse.com/1136469" source="BUGZILLA"/>
		<reference ref_id="1136477" ref_url="https://bugzilla.suse.com/1136477" source="BUGZILLA"/>
		<reference ref_id="1136478" ref_url="https://bugzilla.suse.com/1136478" source="BUGZILLA"/>
		<reference ref_id="1136498" ref_url="https://bugzilla.suse.com/1136498" source="BUGZILLA"/>
		<reference ref_id="1136573" ref_url="https://bugzilla.suse.com/1136573" source="BUGZILLA"/>
		<reference ref_id="1136586" ref_url="https://bugzilla.suse.com/1136586" source="BUGZILLA"/>
		<reference ref_id="1136881" ref_url="https://bugzilla.suse.com/1136881" source="BUGZILLA"/>
		<reference ref_id="1136935" ref_url="https://bugzilla.suse.com/1136935" source="BUGZILLA"/>
		<reference ref_id="1136990" ref_url="https://bugzilla.suse.com/1136990" source="BUGZILLA"/>
		<reference ref_id="1137151" ref_url="https://bugzilla.suse.com/1137151" source="BUGZILLA"/>
		<reference ref_id="1137152" ref_url="https://bugzilla.suse.com/1137152" source="BUGZILLA"/>
		<reference ref_id="1137153" ref_url="https://bugzilla.suse.com/1137153" source="BUGZILLA"/>
		<reference ref_id="1137162" ref_url="https://bugzilla.suse.com/1137162" source="BUGZILLA"/>
		<reference ref_id="1137201" ref_url="https://bugzilla.suse.com/1137201" source="BUGZILLA"/>
		<reference ref_id="1137224" ref_url="https://bugzilla.suse.com/1137224" source="BUGZILLA"/>
		<reference ref_id="1137232" ref_url="https://bugzilla.suse.com/1137232" source="BUGZILLA"/>
		<reference ref_id="1137233" ref_url="https://bugzilla.suse.com/1137233" source="BUGZILLA"/>
		<reference ref_id="1137236" ref_url="https://bugzilla.suse.com/1137236" source="BUGZILLA"/>
		<reference ref_id="1137372" ref_url="https://bugzilla.suse.com/1137372" source="BUGZILLA"/>
		<reference ref_id="1137429" ref_url="https://bugzilla.suse.com/1137429" source="BUGZILLA"/>
		<reference ref_id="1137444" ref_url="https://bugzilla.suse.com/1137444" source="BUGZILLA"/>
		<reference ref_id="1137586" ref_url="https://bugzilla.suse.com/1137586" source="BUGZILLA"/>
		<reference ref_id="1137739" ref_url="https://bugzilla.suse.com/1137739" source="BUGZILLA"/>
		<reference ref_id="1137752" ref_url="https://bugzilla.suse.com/1137752" source="BUGZILLA"/>
		<reference ref_id="1138291" ref_url="https://bugzilla.suse.com/1138291" source="BUGZILLA"/>
		<reference ref_id="1138293" ref_url="https://bugzilla.suse.com/1138293" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126/" source="CVE"/>
		<reference ref_id="CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127/" source="CVE"/>
		<reference ref_id="CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130/" source="CVE"/>
		<reference ref_id="CVE-2018-16880" ref_url="https://www.suse.com/security/cve/CVE-2018-16880/" source="CVE"/>
		<reference ref_id="CVE-2018-7191" ref_url="https://www.suse.com/security/cve/CVE-2018-7191/" source="CVE"/>
		<reference ref_id="CVE-2019-10124" ref_url="https://www.suse.com/security/cve/CVE-2019-10124/" source="CVE"/>
		<reference ref_id="CVE-2019-11085" ref_url="https://www.suse.com/security/cve/CVE-2019-11085/" source="CVE"/>
		<reference ref_id="CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091/" source="CVE"/>
		<reference ref_id="CVE-2019-11477" ref_url="https://www.suse.com/security/cve/CVE-2019-11477/" source="CVE"/>
		<reference ref_id="CVE-2019-11478" ref_url="https://www.suse.com/security/cve/CVE-2019-11478/" source="CVE"/>
		<reference ref_id="CVE-2019-11479" ref_url="https://www.suse.com/security/cve/CVE-2019-11479/" source="CVE"/>
		<reference ref_id="CVE-2019-11486" ref_url="https://www.suse.com/security/cve/CVE-2019-11486/" source="CVE"/>
		<reference ref_id="CVE-2019-11487" ref_url="https://www.suse.com/security/cve/CVE-2019-11487/" source="CVE"/>
		<reference ref_id="CVE-2019-11811" ref_url="https://www.suse.com/security/cve/CVE-2019-11811/" source="CVE"/>
		<reference ref_id="CVE-2019-11815" ref_url="https://www.suse.com/security/cve/CVE-2019-11815/" source="CVE"/>
		<reference ref_id="CVE-2019-11833" ref_url="https://www.suse.com/security/cve/CVE-2019-11833/" source="CVE"/>
		<reference ref_id="CVE-2019-11884" ref_url="https://www.suse.com/security/cve/CVE-2019-11884/" source="CVE"/>
		<reference ref_id="CVE-2019-12382" ref_url="https://www.suse.com/security/cve/CVE-2019-12382/" source="CVE"/>
		<reference ref_id="CVE-2019-12818" ref_url="https://www.suse.com/security/cve/CVE-2019-12818/" source="CVE"/>
		<reference ref_id="CVE-2019-12819" ref_url="https://www.suse.com/security/cve/CVE-2019-12819/" source="CVE"/>
		<reference ref_id="CVE-2019-3846" ref_url="https://www.suse.com/security/cve/CVE-2019-3846/" source="CVE"/>
		<reference ref_id="CVE-2019-3882" ref_url="https://www.suse.com/security/cve/CVE-2019-3882/" source="CVE"/>
		<reference ref_id="CVE-2019-5489" ref_url="https://www.suse.com/security/cve/CVE-2019-5489/" source="CVE"/>
		<reference ref_id="CVE-2019-8564" ref_url="https://www.suse.com/security/cve/CVE-2019-8564/" source="CVE"/>
		<reference ref_id="CVE-2019-9003" ref_url="https://www.suse.com/security/cve/CVE-2019-9003/" source="CVE"/>
		<reference ref_id="CVE-2019-9500" ref_url="https://www.suse.com/security/cve/CVE-2019-9500/" source="CVE"/>
		<reference ref_id="CVE-2019-9503" ref_url="https://www.suse.com/security/cve/CVE-2019-9503/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005581.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2019-12819: The function __mdiobus_register() called put_device(), which
  triggered a fixed_mdio_bus_init use-after-free. This would cause a denial of
  service. (bsc#1138291)

- CVE-2019-12818: The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c
  may return NULL. If the caller does not check for this, it will trigger a
  NULL pointer dereference. This will cause denial of service. This used to
  affect nfc_llcp_build_gb in net/nfc/llcp_core.c. (bsc#1138293)

- CVE-2019-11477: A sequence of SACKs may have been crafted such that one can
  trigger an integer overflow, leading to a kernel panic.

- CVE-2019-11478: It was possible to send a crafted sequence of SACKs which
  will fragment the TCP retransmission queue. An attacker may have been able to
  further exploit the fragmented queue to cause an expensive linked-list walk
  for subsequent SACKs received for that same TCP connection.

- CVE-2019-11479: An attacker could force the Linux kernel to segment its
  responses into multiple TCP segments. This would drastically increased the
  bandwidth required to deliver the same amount of data. Further, it would
  consume additional resources such as CPU and NIC processing power.

- CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly
  escalate privileges was found in the mwifiex kernel module while connecting
  to a malicious wireless network. (bsc#1136424)

- CVE-2019-10124: An issue was discovered in the hwpoison implementation in
  mm/memory-failure.c in the Linux kernel. When soft_offline_in_use_page() runs
  on a thp tail page after pmd is split, an attacker could cause a denial of
  service (bsc#1130699, CVE-2019-10124).

- CVE-2019-12382: An issue was discovered in drm_load_edid_firmware in
  drivers/gpu/drm/drm_edid_load.c in the Linux kernel There was an unchecked
  kstrdup of fwstr, which might allow an attacker to cause a denial of service
  (NULL pointer dereference and system crash). (bsc#1136586)

- CVE-2019-11487: The Linux kernel allowed page reference count overflow, with
  resultant use-after-free issues, if about 140 GiB of RAM exists. This is
  related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h,
  include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c.
  It could occur with FUSE requests. (bbsc#1133190)

- CVE-2019-5489: The mincore() implementation in mm/mincore.c in the Linux
  kernel allowed local attackers to observe page cache access patterns of other
  processes on the same system, potentially allowing sniffing of secret
  information. (Fixing this affects the output of the fincore program.) Limited
  remote exploitation may be possible, as demonstrated by latency differences
  in accessing public files from an Apache HTTP Server. (bsc#1120843)

- CVE-2019-11833: fs/ext4/extents.c in the Linux kernel did not zero out the
  unused memory region in the extent tree block, which might allow local users
  to obtain sensitive information by reading uninitialized data in the
  filesystem. (bsc#1135281)

- CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM):
  Uncacheable memory on some microprocessors utilizing speculative execution
  may have allowed an authenticated user to potentially enable information
  disclosure via a side channel with local access. A list of impacted products
  can be found here:
  https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.
  (bsc##1111331)

- CVE-2018-7191: In the tun subsystem in the Linux kernel, dev_get_valid_name
  was not called before register_netdevice. This allowed local users to cause a
  denial of service (NULL pointer dereference and panic) via an
  ioctl(TUNSETIFF) call with a dev name containing a / character. (bsc#1135603)

- CVE-2018-12126 CVE-2018-12127 CVE-2018-12130: Microarchitectural Store Buffer
  Data Sampling (MSBDS): Stored buffers on some microprocessors utilizing
  speculative execution which may have allowed an authenticated user to
  potentially enable information disclosure via a side channel with local
  access. A list of impacted products can be found here:
  https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.
  (bsc#1103186)

- CVE-2019-11085: Insufficient input validation in Kernel Mode Driver in
  Intel(R) i915 Graphics for Linux may have allowed an authenticated user to
  potentially enable escalation of privilege via local access. (bsc#1135278)

- CVE-2019-11815: An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c
  in the Linux kernel There was a race condition leading to a use-after-free,
  related to net namespace cleanup. (bsc#1135278)

- CVE-2019-11884: The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c
  in the Linux kernel allowed a local user to obtain potentially sensitive
  information from kernel stack memory via a hidPCONNADD command, because a
  name field may not end with a '\0' character. (bsc#1134848)

- CVE-2019-11811: An issue was discovered in the Linux kernel There was a
  use-after-free upon attempted read access to /proc/ioports after the ipmi_si
  module was removed, related to drivers/char/ipmi/ipmi_si_intf.c,
  drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c.
  (bsc#1134397)

- CVE-2019-11486: The Siemens R3964 line discipline driver in
  drivers/tty/n_r3964.c in the Linux kernel has multiple race conditions.
  (bsc#1133188)

- CVE-2019-9003: In the Linux kernel, attackers could trigger a
  drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for
  certain simultaneous execution of the code, as demonstrated by a 'service
  ipmievd restart' loop. (bsc#1126704)

- CVE-2018-16880: A flaw was found in the Linux kernel's handle_rx() function
  in the [vhost_net] driver. A malicious virtual guest, under specific
  conditions, could trigger an out-of-bounds write in a kmalloc-8 slab on a
  virtual host which may have lead to a kernel memory corruption and a system
  panic. Due to the nature of the flaw, privilege escalation cannot be fully
  ruled out.(bsc#1122767)

- CVE-2019-9503: An issue was discoved which meant that brcmfmac frame
  validation could be bypassed. (bsc#1132828)

- CVE-2019-9500: An issue was discovered that lead to brcmfmac heap buffer
  overflow. (bsc#1132681)

- CVE-2019-8564: An issue was discoved which meant that brcmfmac frame
  validation could be bypassed. (bsc#1132673)

- CVE-2017-5753: Systems with microprocessors utilizing speculative execution
  and branch prediction may have allowed unauthorized disclosure of information
  to an attacker with local user access via a side-channel analysis.

- CVE-2019-3882: A flaw was found in the Linux kernel's vfio interface
  implementation that permitted violation of the user's locked memory limit. If
  a device was bound to a vfio driver, such as vfio-pci, and the local attacker
  is administratively granted ownership of the device, it may have caused a
  system memory exhaustion and thus a denial of service (DoS). (bsc#1131427)

The following non-security bugs were fixed:

- 9p locks: add mount option for lock retry interval (bsc#1051510).
- 9p: do not trust pdu content for stat item size (bsc#1051510).
- acpi / SBS: Fix GPE storm on recent MacBookPro's (bsc#1051510).
- acpi / utils: Drop reference in test for device presence (bsc#1051510).
- acpi, nfit: Prefer _DSM over _LSR for namespace label reads (bsc#1112128) (bsc#1132426).
- acpi: Add Hygon Dhyana support ().
- acpi: button: reinitialize button state upon resume (bsc#1051510).
- acpi: fix menuconfig presentation of acpi submenu (bsc#1117158).
- acpi: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle (bsc#1111666).
- acpi: property: restore _DSD data subnodes GUID comment (bsc#1111666).
- acpica: AML interpreter: add region addresses in global list during initialization (bsc#1051510).
- acpica: Namespace: remove address node from global list after method termination (bsc#1051510).
- alsa: core: Do not refer to snd_cards array directly (bsc#1051510).
- alsa: core: Fix card races between register and disconnect (bsc#1051510).
- alsa: emu10k1: Drop superfluous id-uniquification behavior (bsc#1051510).
- alsa: hda - Add two more machines to the power_save_blacklist (bsc#1051510).
- alsa: hda - Register irq handler after the chip initialization (bsc#1051510).
- alsa: hda - Use a macro for snd_array iteration loops (bsc#1051510).
- alsa: hda/hdmi - Consider eld_valid when reporting jack event (bsc#1051510).
- alsa: hda/hdmi - Read the pin sense from register when repolling (bsc#1051510).
- alsa: hda/realtek - Add new Dell platform for headset mode (bsc#1051510).
- alsa: hda/realtek - add two more pin configuration sets to quirk table (bsc#1051510).
- alsa: hda/realtek - Apply the fixup for ASUS Q325UAR (bsc#1051510).
- alsa: hda/realtek - Avoid superfluous COEF EAPD setups (bsc#1051510).
- alsa: hda/realtek - Corrected fixup for System76 Gazelle (gaze14) (bsc#1051510).
- alsa: hda/realtek - EAPD turn on later (bsc#1051510).
- alsa: hda/realtek - Enable micmute LED for Huawei laptops (bsc#1051510).
- alsa: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug (bsc#1051510).
- alsa: hda/realtek - Fixed Dell AIO speaker noise (bsc#1051510).
- alsa: hda/realtek - Fixup headphone noise via runtime suspend (bsc#1051510).
- alsa: hda/realtek - Improve the headset mic for Acer Aspire laptops (bsc#1051510).
- alsa: hda/realtek - Move to ACT_INIT state (bsc#1111666).
- alsa: hda/realtek - Support low power consumption for ALC256 (bsc#1051510).
- alsa: hda/realtek - Support low power consumption for ALC295 (bsc#1051510).
- alsa: hda/realtek: Enable headset MIC of Acer TravelMate B114-21 with ALC233 (bsc#1111666).
- alsa: hda: Initialize power_state field properly (bsc#1051510).
- alsa: hdea/realtek - Headset fixup for System76 Gazelle (gaze14) (bsc#1051510).
- alsa: info: Fix racy addition/deletion of nodes (bsc#1051510).
- alsa: line6: Avoid polluting led_* namespace (bsc#1051510).
- alsa: line6: use dynamic buffers (bsc#1051510).
- alsa: PCM: check if ops are defined before suspending PCM (bsc#1051510).
- alsa: seq: Align temporary re-locking with irqsave version (bsc#1051510).
- alsa: seq: Correct unlock sequence at snd_seq_client_ioctl_unlock() (bsc#1051510).
- alsa: seq: Cover unsubscribe_port() in list_mutex (bsc#1051510).
- alsa: seq: Fix OOB-reads from strlcpy (bsc#1051510).
- alsa: seq: Fix race of get-subscription call vs port-delete ioctls (bsc#1051510).
- alsa: seq: Protect in-kernel ioctl calls with mutex (bsc#1051510).
- alsa: seq: Protect racy pool manipulation from OSS sequencer (bsc#1051510).
- alsa: seq: Remove superfluous irqsave flags (bsc#1051510).
- alsa: seq: Simplify snd_seq_kernel_client_enqueue() helper (bsc#1051510).
- alsa: timer: Check ack_list emptiness instead of bit flag (bsc#1051510).
- alsa: timer: Coding style fixes (bsc#1051510).
- alsa: timer: Make snd_timer_close() really kill pending actions (bsc#1051510).
- alsa: timer: Make sure to clear pending ack list (bsc#1051510).
- alsa: timer: Revert active callback sync check at close (bsc#1051510).
- alsa: timer: Simplify error path in snd_timer_open() (bsc#1051510).
- alsa: timer: Unify timer callback process code (bsc#1051510).
- alsa: usb-audio: Fix a memory leak bug (bsc#1051510).
- alsa: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk() (bsc#1051510).
- alsa: usx2y: fix a double free bug (bsc#1051510).
- appletalk: Fix compile regression (bsc#1051510).
- appletalk: Fix use-after-free in atalk_proc_exit (bsc#1051510).
- arch: arm64: acpi: KABI ginore includes (bsc#1117158 bsc#1134671).
- arm64, mm, efi: Account for GICv3 LPI tables in static memblock reserve table (bsc#1117158).
- arm64: acpi: fix alignment fault in accessing acpi (bsc#1117158).
- arm64: Export save_stack_trace_tsk() (jsc#SLE-4214).
- arm64: fix acpi dependencies (bsc#1117158).
- arm: 8824/1: fix a migrating irq bug when hotplug cpu (bsc#1051510).
- arm: 8833/1: Ensure that NEON code always compiles with Clang (bsc#1051510).
- arm: 8839/1: kprobe: make patch_lock a raw_spinlock_t (bsc#1051510).
- arm: 8840/1: use a raw_spinlock_t in unwind (bsc#1051510).
- arm: avoid Cortex-A9 livelock on tight dmb loops (bsc#1051510).
- arm: imx6q: cpuidle: fix bug that CPU might not wake up at expected time (bsc#1051510).
- arm: iop: do not use using 64-bit DMA masks (bsc#1051510).
- arm: OMAP2+: fix lack of timer interrupts on CPU1 after hotplug (bsc#1051510).
- arm: OMAP2+: Variable 'reg' in function omap4_dsi_mux_pads() could be uninitialized (bsc#1051510).
- arm: orion: do not use using 64-bit DMA masks (bsc#1051510).
- arm: pxa: ssp: unneeded to free devm_ allocated data (bsc#1051510).
- arm: s3c24xx: Fix boolean expressions in osiris_dvs_notify (bsc#1051510).
- arm: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms (bsc#1051510).
- asoc: cs4270: Set auto-increment bit for register writes (bsc#1051510).
- asoc: fix valid stream condition (bsc#1051510).
- asoc: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe (bsc#1051510).
- asoc: fsl_esai: fix channel swap issue when stream starts (bsc#1051510).
- asoc: fsl_esai: Fix missing break in switch statement (bsc#1051510).
- asoc: hdmi-codec: fix S/PDIF DAI (bsc#1051510).
- asoc: Intel: avoid Oops if DMA setup fails (bsc#1051510).
- asoc: max98090: Fix restore of DAPM Muxes (bsc#1051510).
- asoc: nau8810: fix the issue of widget with prefixed name (bsc#1051510).
- asoc: nau8824: fix the issue of the widget with prefix name (bsc#1051510).
- asoc: RT5677-SPI: Disable 16Bit SPI Transfers (bsc#1051510).
- asoc: samsung: odroid: Fix clock configuration for 44100 sample rate (bsc#1051510).
- asoc: stm32: fix sai driver name initialisation (bsc#1051510).
- asoc: tlv320aic32x4: Fix Common Pins (bsc#1051510).
- asoc: topology: free created components in tplg load error (bsc#1051510).
- asoc: wm_adsp: Add locking to wm_adsp2_bus_error (bsc#1051510).
- asoc:soc-pcm:fix a codec fixup issue in TDM case (bsc#1051510).
- assume flash part size to be 4MB, if it can't be determined (bsc#1127371).
- at76c50x-usb: Do not register led_trigger if usb_register_driver failed (bsc#1051510).
- ath10k: avoid possible string overflow (bsc#1051510).
- ath10k: snoc: fix unbalanced clock error handling (bsc#1111666).
- audit: fix a memleak caused by auditing load module (bsc#1051510).
- b43: shut up clang -Wuninitialized variable warning (bsc#1051510).
- backlight: lm3630a: Return 0 on success in update_status functions (bsc#1051510).
- batman-adv: Reduce claim hash refcnt only for removed entry (bsc#1051510).
- batman-adv: Reduce tt_global hash refcnt only for removed entry (bsc#1051510).
- batman-adv: Reduce tt_local hash refcnt only for removed entry (bsc#1051510).
- bcache: account size of buckets used in uuid write to ca-&gt;meta_sectors_written (bsc#1130972).
- bcache: add a comment in super.c (bsc#1130972).
- bcache: add code comments for bset.c (bsc#1130972).
- bcache: add comment for cache_set-&gt;fill_iter (bsc#1130972).
- bcache: add identifier names to arguments of function definitions (bsc#1130972).
- bcache: add missing SPDX header (bsc#1130972).
- bcache: add MODULE_DESCRIPTION information (bsc#1130972).
- bcache: add separate workqueue for journal_write to avoid deadlock (bsc#1130972).
- bcache: add static const prefix to char * array declarations (bsc#1130972).
- bcache: add sysfs_strtoul_bool() for setting bit-field variables (bsc#1130972).
- bcache: add the missing comments for smp_mb()/smp_wmb() (bsc#1130972).
- bcache: cannot set writeback_running via sysfs if no writeback kthread created (bsc#1130972).
- bcache: correct dirty data statistics (bsc#1130972).
- bcache: do not assign in if condition in bcache_init() (bsc#1130972).
- bcache: do not assign in if condition register_bcache() (bsc#1130972).
- bcache: do not check if debug dentry is ERR or NULL explicitly on remove (bsc#1130972).
- bcache: do not check NULL pointer before calling kmem_cache_destroy (bsc#1130972).
- bcache: do not clone bio in bch_data_verify (bsc#1130972).
- bcache: do not mark writeback_running too early (bsc#1130972).
- bcache: export backing_dev_name via sysfs (bsc#1130972).
- bcache: export backing_dev_uuid via sysfs (bsc#1130972).
- bcache: fix code comments style (bsc#1130972).
- bcache: fix indent by replacing blank by tabs (bsc#1130972).
- bcache: fix indentation issue, remove tabs on a hunk of code (bsc#1130972).
- bcache: fix input integer overflow of congested threshold (bsc#1130972).
- bcache: fix input overflow to cache set io_error_limit (bsc#1130972).
- bcache: fix input overflow to cache set sysfs file io_error_halflife (bsc#1130972).
- bcache: fix input overflow to journal_delay_ms (bsc#1130972).
- bcache: fix input overflow to sequential_cutoff (bsc#1130972).
- bcache: fix input overflow to writeback_delay (bsc#1130972).
- bcache: fix input overflow to writeback_rate_minimum (bsc#1130972).
- bcache: fix ioctl in flash device (bsc#1130972).
- bcache: fix mistaken code comments in bcache.h (bsc#1130972).
- bcache: fix mistaken comments in request.c (bsc#1130972).
- bcache: fix potential div-zero error of writeback_rate_i_term_inverse (bsc#1130972).
- bcache: fix potential div-zero error of writeback_rate_p_term_inverse (bsc#1130972).
- bcache: fix typo 'succesfully' to 'successfully' (bsc#1130972).
- bcache: fix typo in code comments of closure_return_with_destructor() (bsc#1130972).
- bcache: improve sysfs_strtoul_clamp() (bsc#1130972).
- bcache: introduce force_wake_up_gc() (bsc#1130972).
- bcache: make cutoff_writeback and cutoff_writeback_sync tunable (bsc#1130972).
- bcache: Move couple of functions to sysfs.c (bsc#1130972).
- bcache: Move couple of string arrays to sysfs.c (bsc#1130972).
- bcache: move open brace at end of function definitions to next line (bsc#1130972).
- bcache: never writeback a discard operation (bsc#1130972).
- bcache: not use hard coded memset size in bch_cache_accounting_clear() (bsc#1130972).
- bcache: option to automatically run gc thread after writeback (bsc#1130972).
- bcache: panic fix for making cache device (bsc#1130972).
- bcache: Populate writeback_rate_minimum attribute (bsc#1130972).
- bcache: prefer 'help' in Kconfig (bsc#1130972).
- bcache: print number of keys in trace_bcache_journal_write (bsc#1130972).
- bcache: recal cached_dev_sectors on detach (bsc#1130972).
- bcache: remove unnecessary space before ioctl function pointer arguments (bsc#1130972).
- bcache: remove unused bch_passthrough_cache (bsc#1130972).
- bcache: remove useless parameter of bch_debug_init() (bsc#1130972).
- bcache: replace '%pF' by '%pS' in seq_printf() (bsc#1130972).
- bcache: Replace bch_read_string_list() by __sysfs_match_string() (bsc#1130972).
- bcache: replace hard coded number with BUCKET_GC_GEN_MAX (bsc#1130972).
- bcache: replace printk() by pr_*() routines (bsc#1130972).
- bcache: replace Symbolic permissions by octal permission numbers (bsc#1130972).
- bcache: set writeback_percent in a flexible range (bsc#1130972).
- bcache: split combined if-condition code into separate ones (bsc#1130972).
- bcache: stop bcache device when backing device is offline (bsc#1130972).
- bcache: stop using the deprecated get_seconds() (bsc#1130972).
- bcache: style fix to add a blank line after declarations (bsc#1130972).
- bcache: style fix to replace 'unsigned' by 'unsigned int' (bsc#1130972).
- bcache: style fixes for lines over 80 characters (bsc#1130972).
- bcache: treat stale and dirty keys as bad keys (bsc#1130972).
- bcache: trivial - remove tailing backslash in macro BTREE_FLAG (bsc#1130972).
- bcache: update comment for bch_data_insert (bsc#1130972).
- bcache: update comment in sysfs.c (bsc#1130972).
- bcache: use (REQ_META|REQ_PRIO) to indicate bio for metadata (bsc#1130972).
- bcache: use MAX_CACHES_PER_SET instead of magic number 8 in __bch_bucket_alloc_set (bsc#1130972).
- bcache: use REQ_PRIO to indicate bio for metadata (bsc#1130972).
- bcache: use routines from lib/crc64.c for CRC64 calculation (bsc#1130972).
- bcache: use sysfs_strtoul_bool() to set bit-field variables (bsc#1130972).
- bitmap: Add bitmap_alloc(), bitmap_zalloc() and bitmap_free() (jsc#SLE-4797).
- blk-mq: adjust debugfs and sysfs register when updating nr_hw_queues (bsc#1131673).
- blk-mq: Avoid that submitting a bio concurrently with device removal triggers a crash (bsc#1131673).
- blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs (bsc#1131673).
- blk-mq: fallback to previous nr_hw_queues when updating fails (bsc#1131673).
- blk-mq: init hctx sched after update ctx and hctx mapping (bsc#1131673).
- blk-mq: realloc hctx when hw queue is mapped to another node (bsc#1131673).
- blk-mq: sync the update nr_hw_queues with blk_mq_queue_tag_busy_iter (bsc#1131673).
- blkcg: Introduce blkg_root_lookup() (bsc#1131673).
- blkcg: Make blkg_root_lookup() work for queues in bypass mode (bsc#1131673).
- block: check_events: do not bother with events if unsupported (bsc#1110946, bsc#1119843).
- block: check_events: do not bother with events if unsupported (bsc#1110946, bsc#1119843).
- block: disk_events: introduce event flags (bsc#1110946, bsc#1119843).
- block: disk_events: introduce event flags (bsc#1110946, bsc#1119843).
- block: do not leak memory in bio_copy_user_iov() (bsc#1135309).
- block: Do not revalidate bdev of hidden gendisk (bsc#1120091).
- block: Ensure that a request queue is dissociated from the cgroup controller (bsc#1131673).
- block: Fix a race between request queue removal and the block cgroup controller (bsc#1131673).
- block: fix the return errno for direct IO (bsc#1135320).
- block: fix use-after-free on gendisk (bsc#1135312).
- block: Introduce blk_exit_queue() (bsc#1131673).
- block: kABI fixes for bio_rewind_iter() removal (bsc#1131673).
- block: remove bio_rewind_iter() (bsc#1131673).
- bluetooth: Align minimum encryption key size for LE and BR/EDR connections (bsc#1051510).
- bluetooth: btusb: request wake pin with NOAUTOEN (bsc#1051510).
- bluetooth: Check key sizes only when Secure Simple Pairing is enabled (bsc#1135556).
- bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf() (bsc#1133731).
- bluetooth: hidp: fix buffer overflow (bsc#1051510).
- bnx2x: Add support for detection of P2P event packets (bsc#1136498 jsc#SLE-4699).
- bnx2x: Bump up driver version to 1.713.36 (bsc#1136498 jsc#SLE-4699).
- bnx2x: fix spelling mistake 'dicline' -&gt; 'decline' (bsc#1136498 jsc#SLE-4699).
- bnx2x: fix various indentation issues (bsc#1136498 jsc#SLE-4699).
- bnx2x: Remove set but not used variable 'mfw_vn' (bsc#1136498 jsc#SLE-4699).
- bnx2x: Replace magic numbers with macro definitions (bsc#1136498 jsc#SLE-4699).
- bnx2x: Use struct_size() in kzalloc() (bsc#1136498 jsc#SLE-4699).
- bnx2x: Utilize FW 7.13.11.0 (bsc#1136498 jsc#SLE-4699).
- bnxt_en: Add device IDs 0x1806 and 0x1752 for 57500 devices (bsc#1137224).
- bnxt_en: Add support for BCM957504 (bsc#1137224).
- bnxt_en: Drop oversize TX packets to prevent errors (networking-stable-19_03_07).
- bnxt_en: Fix aggregation buffer leak under OOM condition (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix possible BUG() condition when calling pci_disable_msix() (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix possible crash in bnxt_hwrm_ring_free() under error conditions (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix statistics context reservation logic (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt() (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one() (bsc#1050242).
- bnxt_en: Improve multicast address setup logic (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Improve multicast address setup logic (networking-stable-19_05_04).
- bnxt_en: Improve NQ reservations (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Improve RX consumer index validity check (networking-stable-19_04_10).
- bnxt_en: Pass correct extended TX port statistics size to firmware (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Reduce memory usage when running in kdump kernel (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Reset device on RX buffer errors (networking-stable-19_04_10).
- bonding: fix event handling for stacked bonds (networking-stable-19_04_19).
- bonding: fix PACKET_ORIGDEV regression (git-fixes).
- bpf, lru: avoid messing with eviction heuristics upon syscall lookup (bsc#1083647).
- bpf: add map_lookup_elem_sys_only for lookups from syscall side (bsc#1083647).
- bpf: Add missed newline in verifier verbose log (bsc#1056787).
- bpf: fix use after free in bpf_evict_inode (bsc#1083647).
- brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() (bsc#1051510).
- brcmfmac: fix leak of mypkt on error return path (bsc#1111666).
- broadcom: Mark expected switch fall-throughs (bsc#1136498 jsc#SLE-4699).
- btrfs: add a helper to return a head ref (bsc#1134813).
- btrfs: Avoid possible qgroup_rsv_size overflow in btrfs_calculate_inode_block_rsv_size (git-fixes).
- btrfs: breakout empty head cleanup to a helper (bsc#1134813).
- btrfs: delayed-ref: Introduce better documented delayed ref structures (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: delayed-ref: Use btrfs_ref to refactor btrfs_add_delayed_data_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: delayed-ref: Use btrfs_ref to refactor btrfs_add_delayed_tree_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: do not allow trimming when a fs is mounted with the nologreplay option (bsc#1135758).
- btrfs: do not double unlock on error in btrfs_punch_hole (bsc#1136881).
- btrfs: Do not panic when we can't find a root key (bsc#1112063).
- btrfs: extent-tree: Fix a bug that btrfs is unable to add pinned bytes (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Open-code process_func in __btrfs_mod_ref (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Use btrfs_ref to refactor add_pinned_bytes() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Use btrfs_ref to refactor btrfs_free_extent() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Use btrfs_ref to refactor btrfs_inc_extent_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: Factor out common delayed refs init code (bsc#1134813).
- btrfs: fix assertion failure on fsync with NO_HOLES enabled (bsc#1131848).
- btrfs: Fix bound checking in qgroup_trace_new_subtree_blocks (git-fixes).
- btrfs: fix fsync not persisting changed attributes of a directory (bsc#1137151).
- btrfs: fix incorrect file size after shrinking truncate and fsync (bsc#1130195).
- btrfs: fix race between ranged fsync and writeback of adjacent ranges (bsc#1136477).
- btrfs: fix race updating log root item during fsync (bsc#1137153).
- btrfs: fix wrong ctime and mtime of a directory after log replay (bsc#1137152).
- btrfs: improve performance on fsync of files with multiple hardlinks (bsc#1123454).
- btrfs: Introduce init_delayed_ref_head (bsc#1134813).
- btrfs: move all ref head cleanup to the helper function (bsc#1134813).
- btrfs: move extent_op cleanup to a helper (bsc#1134813).
- btrfs: move ref_mod modification into the if (ref) logic (bsc#1134813).
- btrfs: Open-code add_delayed_data_ref (bsc#1134813).
- btrfs: Open-code add_delayed_tree_ref (bsc#1134813).
- btrfs: qgroup: Check bg while resuming relocation to avoid NULL pointer dereference (bsc#1134806).
- btrfs: qgroup: Do not scan leaf if we're modifying reloc tree (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: qgroup: Move reserved data accounting from btrfs_delayed_ref_head to btrfs_qgroup_extent_record (bsc#1134162).
- btrfs: qgroup: Remove duplicated trace points for qgroup_rsv_add/release (bsc#1134160).
- btrfs: reloc: Also queue orphan reloc tree for cleanup to avoid BUG_ON() (bsc#1133612).
- btrfs: remove delayed_ref_node from ref_head (bsc#1134813).
- btrfs: remove WARN_ON in log_dir_items (bsc#1131847).
- btrfs: send, flush dellaloc in order to avoid data loss (bsc#1133320).
- btrfs: split delayed ref head initialization and addition (bsc#1134813).
- btrfs: track refs in a rb_tree instead of a list (bsc#1134813).
- btrfs: tree-checker: detect file extent items with overlapping ranges (bsc#1136478).
- btrfs: Use init_delayed_ref_common in add_delayed_data_ref (bsc#1134813).
- btrfs: Use init_delayed_ref_common in add_delayed_tree_ref (bsc#1134813).
- btrfs: Use init_delayed_ref_head in add_delayed_ref_head (bsc#1134813).
- cdrom: Fix race condition in cdrom_sysctl_register (bsc#1051510).
- ceph: ensure d_name stability in ceph_dentry_hash() (bsc#1134461).
- ceph: ensure d_name stability in ceph_dentry_hash() (bsc#1134461).
- ceph: fix ci-&gt;i_head_snapc leak (bsc#1122776).
- ceph: fix ci-&gt;i_head_snapc leak (bsc#1122776).
- ceph: fix use-after-free on symlink traversal (bsc#1134459).
- ceph: fix use-after-free on symlink traversal (bsc#1134459).
- ceph: only use d_name directly when parent is locked (bsc#1134460).
- ceph: only use d_name directly when parent is locked (bsc#1134460).
- cfg80211: Handle WMM rules in regulatory domain intersection (bsc#1111666).
- cgroup: fix parsing empty mount option string (bsc#1133094).
- chelsio: use BUG() instead of BUG_ON(1) (bsc#1136345 jsc#SLE-4681).
- cifs: Do not count -ENODATA as failure for query directory (bsc#1051510).
- cifs: do not dereference smb_file_target before null check (bsc#1051510).
- cifs: Do not hide EINTR after sending network packets (bsc#1051510).
- cifs: Do not reconnect TCP session in add_credits() (bsc#1051510).
- cifs: Do not reset lease state to NONE on lease break (bsc#1051510).
- cifs: Fix adjustment of credits for MTU requests (bsc#1051510).
- cifs: Fix credit calculation for encrypted reads with errors (bsc#1051510).
- cifs: Fix credits calculations for reads with errors (bsc#1051510).
- cifs: fix POSIX lock leak and invalid ptr deref (bsc#1114542).
- cifs: Fix possible hang during async MTU reads and writes (bsc#1051510).
- cifs: Fix potential OOB access of lock element array (bsc#1051510).
- cifs: Fix read after write for files with read caching (bsc#1051510).
- cifs: keep FileInfo handle live during oplock break (bsc#1106284, bsc#1131565).
- clk: fractional-divider: check parent rate only if flag is set (bsc#1051510).
- clk: rockchip: fix frac settings of GPLL clock for rk3328 (bsc#1051510).
- clk: rockchip: Fix video codec clocks on rk3288 (bsc#1051510).
- clk: rockchip: fix wrong clock definitions for rk3328 (bsc#1051510).
- clk: x86: Add system specific quirk to mark clocks as critical (bsc#1051510).
- config: arm64: enable CN99xx uncore pmu References: bsc#1117114
- configfs: fix possible use-after-free in configfs_register_group (bsc#1051510).
- configfs: Fix use-after-free when accessing sd-&gt;s_dentry (bsc#1051510).
- cpu/speculation: Add 'mitigations=' cmdline option (bsc#1112178).
- cpufreq: Add Hygon Dhyana support ().
- cpufreq: AMD: Ignore the check for ProcFeedback in ST/CZ ().
- cpupowerutils: bench - Fix cpu online check (bsc#1051510).
- crypto: arm/aes-neonbs - do not access already-freed walk.iv (bsc#1051510).
- crypto: caam - add missing put_device() call (bsc#1129770).
- crypto: caam - fix caam_dump_sg that iterates through scatterlist (bsc#1051510).
- crypto: caam/qi2 - fix DMA mapping of stack memory (bsc#1111666).
- crypto: caam/qi2 - fix zero-length buffer DMA mapping (bsc#1111666).
- crypto: caam/qi2 - generate hash keys in-place (bsc#1111666).
- crypto: ccm - fix incompatibility between 'ccm' and 'ccm_base' (bsc#1051510).
- crypto: ccp - Do not free psp_master when PLATFORM_INIT fails (bsc#1051510).
- crypto: chacha20poly1305 - set cra_name correctly (bsc#1051510).
- crypto: chcr - ESN for Inline IPSec Tx (bsc#1136353 jsc#SLE-4688).
- crypto: chcr - small packet Tx stalls the queue (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - avoid using sa_entry imm (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - check set_msg_len overflow in generate_b0 (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - clean up various indentation issues (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - cleanup:send addr as value in function argument (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - count incomplete block in IV (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix NULL pointer dereference (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix passing zero to 'PTR_ERR' warning in chcr_aead_op (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix softlockup with heavy I/O (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix wrong error counter increments (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fixed Traffic Stall (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Handle pci shutdown event (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Inline single pdu only (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - remove set but not used variable 'kctx_len' (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - remove set but not used variables 'adap' (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Reset counters on cxgb4 Detach (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Swap location of AAD and IV sent in WR (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Use same value for both channel in single WR (bsc#1136353 jsc#SLE-4688).
- crypto: chtls - remove cdev_list_lock (bsc#1136353 jsc#SLE-4688).
- crypto: chtls - remove set but not used variables 'err, adap, request, hws' (bsc#1136353 jsc#SLE-4688).
- crypto: crct10dif-generic - fix use via crypto_shash_digest() (bsc#1051510).
- crypto: crypto4xx - properly set IV after de- and encrypt (bsc#1051510).
- crypto: fips - Grammar s/options/option/, s/to/the/ (bsc#1051510).
- crypto: gcm - fix incompatibility between 'gcm' and 'gcm_base' (bsc#1051510).
- crypto: pcbc - remove bogus memcpy()s with src == dest (bsc#1051510).
- crypto: prefix header search paths with $(srctree)/ (bsc#1136353 jsc#SLE-4688).
- crypto: qat - move temp buffers off the stack (jsc#SLE-4818).
- crypto: qat - no need to check return value of debugfs_create functions (jsc#SLE-4818).
- crypto: qat - Remove unused goto label (jsc#SLE-4818).
- crypto: qat - Remove VLA usage (jsc#SLE-4818).
- crypto: sha256/arm - fix crash bug in Thumb2 build (bsc#1051510).
- crypto: sha512/arm - fix crash bug in Thumb2 build (bsc#1051510).
- crypto: skcipher - do not WARN on unprocessed data after slow walk step (bsc#1051510).
- crypto: sun4i-ss - Fix invalid calculation of hash end (bsc#1051510).
- crypto: vmx - CTR: always increment IV as quadword (bsc#1051510).
- crypto: vmx - fix copy-paste error in CTR mode (bsc#1051510).
- crypto: vmx - ghash: do nosimd fallback manually (bsc#1135661, bsc#1137162).
- crypto: vmx - return correct error code on failed setkey (bsc#1135661, bsc#1137162).
- crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() (bsc#1051510).
- crypto: x86/poly1305 - fix overflow during partial reduction (bsc#1051510).
- cxgb4/chtls: Prefix adapter flags with CXGB4 (bsc#1136345 jsc#SLE-4681).
- cxgb4/cxgb4vf: Add support for SGE doorbell queue timer (bsc#1127371).
- cxgb4/cxgb4vf: Display advertised FEC in ethtool (bsc#1136345 jsc#SLE-4681).
- cxgb4/cxgb4vf: Fix mac_hlist initialization and free (bsc#1127374).
- cxgb4/cxgb4vf: Fix up netdev-&gt;hw_features (bsc#1136345 jsc#SLE-4681).
- cxgb4/cxgb4vf: Link management changes (bsc#1127371).
- cxgb4/cxgb4vf: Program hash region for {t4/t4vf}_change_mac() (bsc#1127371).
- cxgb4/cxgb4vf_main: Mark expected switch fall-through (bsc#1136345 jsc#SLE-4681).
- cxgb4: Add capability to get/set SGE Doorbell Queue Timer Tick (bsc#1127371).
- cxgb4: Add flag tc_flower_initialized (bsc#1127371).
- cxgb4: Add new T5 pci device id 0x50ae (bsc#1127371).
- cxgb4: Add new T5 pci device ids 0x50af and 0x50b0 (bsc#1127371).
- cxgb4: Add new T6 pci device ids 0x608a (bsc#1127371).
- cxgb4: Add new T6 pci device ids 0x608b (bsc#1136345 jsc#SLE-4681).
- cxgb4: add per rx-queue counter for packet errors (bsc#1127371).
- cxgb4: Add support for FW_ETH_TX_PKT_VM_WR (bsc#1127371).
- cxgb4: add support to display DCB info (bsc#1127371).
- cxgb4: Add support to read actual provisioned resources (bsc#1127371).
- cxgb4: add tcb flags and tcb rpl struct (bsc#1136345 jsc#SLE-4681).
- cxgb4: Add VF Link state support (bsc#1136345 jsc#SLE-4681).
- cxgb4: Added missing break in ndo_udp_tunnel_{add/del} (bsc#1127371).
- cxgb4: collect ASIC LA dumps from ULP TX (bsc#1127371).
- cxgb4: collect hardware queue descriptors (bsc#1127371).
- cxgb4: collect number of free PSTRUCT page pointers (bsc#1127371).
- cxgb4: convert flower table to use rhashtable (bsc#1127371).
- cxgb4: cxgb4: use FW_PORT_ACTION_L1_CFG32 for 32 bit capability (bsc#1127371).
- cxgb4: Delete all hash and TCAM filters before resource cleanup (bsc#1136345 jsc#SLE-4681).
- cxgb4: display number of rx and tx pages free (bsc#1127371).
- cxgb4: do not return DUPLEX_UNKNOWN when link is down (bsc#1127371).
- cxgb4: Do not return EAGAIN when TCAM is full (bsc#1136345 jsc#SLE-4681).
- cxgb4: Enable hash filter with offload (bsc#1136345 jsc#SLE-4681).
- cxgb4: Enable outer UDP checksum offload for T6 (bsc#1136345 jsc#SLE-4681).
- cxgb4: Export sge_host_page_size to ulds (bsc#1127371).
- cxgb4: Fix error path in cxgb4_init_module (bsc#1136345 jsc#SLE-4681).
- cxgb4: fix the error path of cxgb4_uld_register() (bsc#1127371).
- cxgb4: free mac_hlist properly (bsc#1136345 jsc#SLE-4681).
- cxgb4: impose mandatory VLAN usage when non-zero TAG ID (bsc#1127371).
- cxgb4: kfree mhp after the debug print (bsc#1136345 jsc#SLE-4681).
- cxgb4: Mask out interrupts that are not enabled (bsc#1127175).
- cxgb4: move Tx/Rx free pages collection to common code (bsc#1127371).
- cxgb4: offload VLAN flows regardless of VLAN ethtype (bsc#1136345 jsc#SLE-4681).
- cxgb4: remove DEFINE_SIMPLE_DEBUGFS_FILE() (bsc#1136345 jsc#SLE-4681).
- cxgb4: remove redundant assignment to vlan_cmd.dropnovlan_fm (bsc#1127371).
- cxgb4: remove set but not used variables 'multitrc, speed' (bsc#1136345 jsc#SLE-4681).
- cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (bsc#1127371).
- cxgb4: remove the unneeded locks (bsc#1127371).
- cxgb4: Revert 'cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size' (bsc#1136345 jsc#SLE-4681).
- cxgb4: specify IQTYPE in fw_iq_cmd (bsc#1127371).
- cxgb4: Support ethtool private flags (bsc#1127371).
- cxgb4: TLS record offload enable (bsc#1136345 jsc#SLE-4681).
- cxgb4: Update 1.23.3.0 as the latest firmware supported (bsc#1136345 jsc#SLE-4681).
- cxgb4: update supported DCB version (bsc#1127371).
- cxgb4: use firmware API for validating filter spec (bsc#1136345 jsc#SLE-4681).
- cxgb4: use new fw interface to get the VIN and smt index (bsc#1127371).
- cxgb4vf: Call netif_carrier_off properly in pci_probe (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Enter debugging mode if FW is inaccessible (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Few more link management changes (bsc#1127374).
- cxgb4vf: fix memleak in mac_hlist initialization (bsc#1127374).
- cxgb4vf: free mac_hlist properly (bsc#1136345 jsc#SLE-4681).
- cxgb4vf: Prefix adapter flags with CXGB4VF (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Revert force link up behaviour (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Update port information in cxgb4vf_open() (bsc#1127374).
- dccp: do not use ipv6 header for ipv4 flow (networking-stable-19_03_28).
- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- device_cgroup: fix RCU imbalance in error case (bsc#1051510).
- devres: Align data[] to ARCH_KMALLOC_MINALIGN (bsc#1051510).
- dm: disable DISCARD if the underlying storage no longer supports it (bsc#1114638).
- dmaengine: axi-dmac: Do not check the number of frames for alignment (bsc#1051510).
- dmaengine: imx-dma: fix warning comparison of distinct pointer types (bsc#1051510).
- dmaengine: qcom_hidma: assign channel cookie correctly (bsc#1051510).
- dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid (bsc#1051510).
- dmaengine: tegra210-adma: Fix crash during probe (bsc#1111666).
- dmaengine: tegra210-dma: free dma controller in remove() (bsc#1051510).
- dmaengine: tegra: avoid overflow of byte tracking (bsc#1051510).
- documentation: Add MDS vulnerability documentation (bsc#1135642).
- documentation: perf: Add documentation for ThunderX2 PMU uncore driver ().
- drivers/perf: Add Cavium ThunderX2 SoC UNCORE PMU driver ().
- drivers: acpi: add dependency of EFI for arm64 (bsc#1117158).
- drivers: hv: vmbus: Offload the handling of channels to two workqueues (bsc#1130567).
- drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind() (bsc#1130567).
- drm/amd/display: extending AUX SW Timeout (bsc#1111666).
- drm/amd/display: fix cursor black issue (bsc#1111666).
- drm/amd/display: If one stream full updates, full update all planes (bsc#1111666).
- drm/amdgpu/gmc9: fix VM_L2_CNTL3 programming (bsc#1111666).
- drm/amdkfd: use init_mqd function to allocate object for hid_mqd (CI) (bsc#1111666).
- drm/bridge: adv7511: Fix low refresh rate selection (bsc#1051510).
- drm/doc: Drop 'content type' from the legacy kms property table (bsc#1111666).
- drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers (bsc#1051510).
- drm/etnaviv: lock MMU while dumping core (bsc#1113722)
- drm/exynos/mixer: fix MIXER shadow registry synchronisation code (bsc#1111666).
- drm/fb-helper: dpms_legacy(): Only set on connectors in use (bsc#1051510).
- drm/fb-helper: generic: Call drm_client_add() after setup is done (bsc#1111666).
- drm/i915/fbc: disable framebuffer compression on GeminiLake (bsc#1051510).
- drm/i915/gvt: add 0x4dfc to gen9 save-restore list (bsc#1113722)
- drm/i915/gvt: Add in context mmio 0x20D8 to gen9 mmio list (bsc#1113722)
- drm/i915/gvt: Add in context mmio 0x20D8 to gen9 mmio list (bsc#1113956)
- drm/i915/gvt: Annotate iomem usage (bsc#1051510).
- drm/i915/gvt: do not deliver a workload if its creation fails (bsc#1051510).
- drm/i915/gvt: do not let pin count of shadow mm go negative (bsc#1113722)
- drm/i915/gvt: do not let pin count of shadow mm go negative (bsc#1113956)
- drm/i915/gvt: do not let TRTTE and 0x4dfc write passthrough to hardware (bsc#1051510).
- drm/i915/gvt: Fix cmd length of VEB_DI_IECP (bsc#1113722)
- drm/i915/gvt: Fix incorrect mask of mmio 0x22028 in gen8/9 mmio list (bnc#1113722)
- drm/i915/gvt: Prevent use-after-free in ppgtt_free_all_spt() (bsc#1111666).
- drm/i915/gvt: refine ggtt range validation (bsc#1113722)
- drm/i915/gvt: Roundup fb-&gt;height into tile's height at calucation fb-&gt;size (bsc#1111666).
- drm/i915/gvt: Tiled Resources mmios are in-context mmios for gen9+ (bsc#1113722)
- drm/i915/icl: Whitelist GEN9_SLICE_COMMON_ECO_CHICKEN1 (bsc#1111666).
- drm/i915: Disable LP3 watermarks on all SNB machines (bsc#1051510).
- drm/i915: Disable tv output on i9x5gm (bsc#1086657, bsc#1133897).
- drm/i915: Downgrade Gen9 Plane WM latency error (bsc#1051510).
- drm/i915: Fix I915_EXEC_RING_MASK (bsc#1051510).
- drm/i915: Force 2*96 MHz cdclk on glk/cnl when audio power is enabled (bsc#1111666).
- drm/imx: do not skip DP channel disable for background plane (bsc#1051510).
- drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata() (bsc#1113722)
- drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata() (bsc#1113956)
- drm/mediatek: fix possible object reference leak (bsc#1051510).
- drm/meson: add size and alignment requirements for dumb buffers (bnc#1113722)
- drm/nouveau/bar/tu104: initial support (bsc#1133593).
- drm/nouveau/bar/tu106: initial support (bsc#1133593).
- drm/nouveau/bios/tu104: initial support (bsc#1133593).
- drm/nouveau/bios/tu106: initial support (bsc#1133593).
- drm/nouveau/bios: translate additional memory types (bsc#1133593).
- drm/nouveau/bios: translate usb-C connector type (bsc#1133593).
- drm/nouveau/bus/tu104: initial support (bsc#1133593).
- drm/nouveau/bus/tu106: initial support (bsc#1133593).
- drm/nouveau/ce/tu104: initial support (bsc#1133593).
- drm/nouveau/ce/tu106: initial support (bsc#1133593).
- drm/nouveau/core: increase maximum number of nvdec instances to 3 (bsc#1133593).
- drm/nouveau/core: recognise TU102 (bsc#1133593).
- drm/nouveau/core: recognise TU104 (bsc#1133593).
- drm/nouveau/core: recognise TU106 (bsc#1133593).
- drm/nouveau/core: support multiple nvdec instances (bsc#1133593).
- drm/nouveau/devinit/gm200-: export function to upload+execute PMU/PRE_OS (bsc#1133593).
- drm/nouveau/devinit/tu104: initial support (bsc#1133593).
- drm/nouveau/devinit/tu106: initial support (bsc#1133593).
- drm/nouveau/disp/gm200-: add scdc parameter setter (bsc#1133593).
- drm/nouveau/disp/gv100: fix name of window channels in debug output (bsc#1133593).
- drm/nouveau/disp/tu104: initial support (bsc#1133593).
- drm/nouveau/disp/tu106: initial support (bsc#1133593).
- drm/nouveau/disp: add a way to configure scrambling/tmds for hdmi 2.0 (bsc#1133593).
- drm/nouveau/disp: add support for setting scdc parameters for high modes (bsc#1133593).
- drm/nouveau/disp: keep track of high-speed state, program into clock (bsc#1133593).
- drm/nouveau/disp: take sink support into account for exposing 594mhz (bsc#1133593).
- drm/nouveau/dma/tu104: initial support (bsc#1133593).
- drm/nouveau/dma/tu106: initial support (bsc#1133593).
- drm/nouveau/drm/nouveau: Do not forget to label dp_aux devices (bsc#1133593).
- drm/nouveau/drm/nouveau: s/nouveau_backlight_exit/nouveau_backlight_fini/ (bsc#1133593).
- drm/nouveau/drm/nouveau: tegra: Call nouveau_drm_device_init() (bsc#1133593).
- drm/nouveau/fault/tu104: initial support (bsc#1133593).
- drm/nouveau/fault/tu106: initial support (bsc#1133593).
- drm/nouveau/fault: add explicit control over fault buffer interrupts (bsc#1133593).
- drm/nouveau/fault: remove manual mapping of fault buffers into BAR2 (bsc#1133593).
- drm/nouveau/fault: store get/put pri address in nvkm_fault_buffer (bsc#1133593).
- drm/nouveau/fb/tu104: initial support (bsc#1133593).
- drm/nouveau/fb/tu106: initial support (bsc#1133593).
- drm/nouveau/fifo/gf100-: call into BAR to reset BARs after MMU fault (bsc#1133593).
- drm/nouveau/fifo/gk104-: group pbdma functions together (bsc#1133593).
- drm/nouveau/fifo/gk104-: return channel instance in ctor args (bsc#1133593).
- drm/nouveau/fifo/gk104-: separate runlist building from committing to hw (bsc#1133593).
- drm/nouveau/fifo/gk104-: support enabling privileged ce functions (bsc#1133593).
- drm/nouveau/fifo/gk104-: virtualise pbdma enable function (bsc#1133593).
- drm/nouveau/fifo/gm200-: read pbdma count more directly (bsc#1133593).
- drm/nouveau/fifo/gv100: allocate method buffer (bsc#1133593).
- drm/nouveau/fifo/gv100: return work submission token in channel ctor args (bsc#1133593).
- drm/nouveau/fifo/tu104: initial support (bsc#1133593).
- drm/nouveau/fifo/tu106: initial support (bsc#1133593).
- drm/nouveau/fuse/tu104: initial support (bsc#1133593).
- drm/nouveau/fuse/tu106: initial support (bsc#1133593).
- drm/nouveau/gpio/tu104: initial support (bsc#1133593).
- drm/nouveau/gpio/tu106: initial support (bsc#1133593).
- drm/nouveau/i2c/tu104: initial support (bsc#1133593).
- drm/nouveau/i2c/tu106: initial support (bsc#1133593).
- drm/nouveau/i2c: Disable i2c bus access after -&gt;fini() (bsc#1113722)
- drm/nouveau/ibus/tu104: initial support (bsc#1133593).
- drm/nouveau/ibus/tu106: initial support (bsc#1133593).
- drm/nouveau/imem/nv50: support pinning objects in BAR2 and returning address (bsc#1133593).
- drm/nouveau/imem/tu104: initial support (bsc#1133593).
- drm/nouveau/imem/tu106: initial support (bsc#1133593).
- drm/nouveau/kms/nv50-: allow more flexibility with lut formats (bsc#1133593).
- drm/nouveau/kms/tu104: initial support (bsc#1133593).
- drm/nouveau/ltc/tu104: initial support (bsc#1133593).
- drm/nouveau/ltc/tu106: initial support (bsc#1133593).
- drm/nouveau/mc/tu104: initial support (bsc#1133593).
- drm/nouveau/mc/tu106: initial support (bsc#1133593).
- drm/nouveau/mmu/tu104: initial support (bsc#1133593).
- drm/nouveau/mmu/tu106: initial support (bsc#1133593).
- drm/nouveau/mmu: add more general vmm free/node handling functions (bsc#1133593).
- drm/nouveau/pci/tu104: initial support (bsc#1133593).
- drm/nouveau/pci/tu106: initial support (bsc#1133593).
- drm/nouveau/pmu/tu104: initial support (bsc#1133593).
- drm/nouveau/pmu/tu106: initial support (bsc#1133593).
- drm/nouveau/therm/tu104: initial support (bsc#1133593).
- drm/nouveau/therm/tu106: initial support (bsc#1133593).
- drm/nouveau/tmr/tu104: initial support (bsc#1133593).
- drm/nouveau/tmr/tu106: initial support (bsc#1133593).
- drm/nouveau/top/tu104: initial support (bsc#1133593).
- drm/nouveau/top/tu106: initial support (bsc#1133593).
- drm/nouveau/volt/gf117: fix speedo readout register (bsc#1051510).
- drm/nouveau: add DisplayPort CEC-Tunneling-over-AUX support (bsc#1133593).
- drm/nouveau: Add NV_PRINTK_ONCE and variants (bsc#1133593).
- drm/nouveau: Add size to vbios.rom file in debugfs (bsc#1133593).
- drm/nouveau: Add strap_peek to debugfs (bsc#1133593).
- drm/nouveau: Cleanup indenting in nouveau_backlight.c (bsc#1133593).
- drm/nouveau: Fix potential memory leak in nouveau_drm_load() (bsc#1133593).
- drm/nouveau: Move backlight device into nouveau_connector (bsc#1133593).
- drm/nouveau: Refactor nvXX_backlight_init() (bsc#1133593).
- drm/nouveau: register backlight on pascal and newer (bsc#1133593).
- drm/nouveau: remove left-over struct member (bsc#1133593).
- drm/nouveau: Remove unecessary dma_fence_ops (bsc#1133593).
- drm/nouveau: Start using new drm_dev initialization helpers (bsc#1133593).
- drm/nouveau: Stop using drm_crtc_force_disable (bsc#1051510).
- drm/omap: hdmi4_cec: Fix CEC clock handling for PM (bsc#1111666).
- drm/panel: panel-innolux: set display off in innolux_panel_unprepare (bsc#1111666).
- drm/pl111: Initialize clock spinlock early (bsc#1111666).
- drm/rockchip: fix for mailbox read validation (bsc#1051510).
- drm/rockchip: fix for mailbox read validation (bsc#1111666).
- drm/rockchip: shutdown drm subsystem on shutdown (bsc#1051510).
- drm/rockchip: vop: reset scale mode when win is disabled (bsc#1113722)
- drm/sun4i: Add missing drm_atomic_helper_shutdown at driver unbind (bsc#1113722)
- drm/sun4i: Fix component unbinding and component master deletion (bsc#1113722)
- drm/sun4i: Fix sun8i HDMI PHY clock initialization (bsc#1111666).
- drm/sun4i: Fix sun8i HDMI PHY configuration for &gt; 148.5 MHz (bsc#1111666).
- drm/sun4i: rgb: Change the pixel clock validation check (bnc#1113722)
- drm/sun4i: Set device driver data at bind time for use in unbind (bsc#1113722)
- drm/sun4i: tcon top: Fix NULL/invalid pointer dereference in sun8i_tcon_top_un/bind (bsc#1111666).
- drm/sun4i: Unbind components before releasing DRM and memory (bsc#1113722)
- drm/tegra: gem: Fix CPU-cache maintenance for BO's allocated using get_pages() (bsc#1111666).
- drm/tegra: hub: Fix dereference before check (bsc#1111666).
- drm/ttm: Fix bo_global and mem_global kfree error (bsc#1111666).
- drm/ttm: fix out-of-bounds read in ttm_put_pages() v2 (bsc#1111666).
- drm/ttm: Remove warning about inconsistent mapping information (bnc#1131488)
- drm/udl: add a release method and delay modeset teardown (bsc#1085536)
- drm/vc4: Fix memory leak during gpu reset. (bsc#1113722)
- drm/vmwgfx: Do not send drm sysfs hotplug events on initial master set (bsc#1051510).
- drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read (bsc#1051510).
- drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() (bsc#1113722)
- drm/vmwgfx: Remove set but not used variable 'restart' (bsc#1111666).
- drm: Auto-set allow_fb_modifiers when given modifiers at plane init (bsc#1051510).
- drm: bridge: dw-hdmi: Fix overflow workaround for Rockchip SoCs (bsc#1113722)
- drm: rcar-du: Fix rcar_du_crtc structure documentation (bsc#1111666).
- dsa: mv88e6xxx: Ensure all pending interrupts are handled prior to exit (networking-stable-19_02_20).
- dt-bindings: clock: r8a7795: Remove CSIREF clock (bsc#1120902).
- dt-bindings: clock: r8a7796: Remove CSIREF clock (bsc#1120902).
- dt-bindings: net: Add binding for the external clock for TI WiLink (bsc#1085535).
- dt-bindings: net: Fix a typo in the phy-mode list for ethernet bindings (bsc#1129770).
- dt-bindings: rtc: sun6i-rtc: Fix register range in example (bsc#1120902).
- dwc2: gadget: Fix completed transfer size calculation in DDMA (bsc#1051510).
- e1000e: Disable runtime PM on CNP+ (jsc#SLE-4804).
- e1000e: Exclude device from suspend direct complete optimization (jsc#SLE-4804).
- e1000e: Fix -Wformat-truncation warnings (bsc#1051510).
- e1000e: fix a missing check for return value (jsc#SLE-4804).
- e1000e: fix cyclic resets at link up with active tx (bsc#1051510).
- edac, amd64: Add Hygon Dhyana support ().
- efi/arm: Defer persistent reservations until after paging_init() (bsc#1117158).
- efi/arm: Do not mark acpi reclaim memory as MEMBLOCK_NOMAP (bsc#1117158 bsc#1115688 bsc#1120566).
- efi/arm: libstub: add a root memreserve config table (bsc#1117158).
- efi/arm: map UEFI memory map even w/o runtime services enabled (bsc#1117158).
- efi/arm: preserve early mapping of UEFI memory map longer for BGRT (bsc#1117158).
- efi/arm: Revert 'Defer persistent reservations until after paging_init()' (bsc#1117158).
- efi/arm: Revert deferred unmap of early memmap mapping (bsc#1117158).
- efi: add API to reserve memory persistently across kexec reboot (bsc#1117158).
- efi: honour memory reservations passed via a linux specific config table (bsc#1117158).
- efi: Permit calling efi_mem_reserve_persistent() from atomic context (bsc#1117158).
- efi: Permit multiple entries in persistent memreserve data structure (bsc#1117158).
- efi: Prevent GICv3 WARN() by mapping the memreserve table before first use (bsc#1117158).
- efi: Reduce the amount of memblock reservations for persistent allocations (bsc#1117158).
- ext4: actually request zeroing of inode table after grow (bsc#1135315).
- ext4: avoid panic during forced reboot due to aborted journal (bsc#1126356).
- ext4: cleanup bh release code in ext4_ind_remove_space() (bsc#1131851).
- ext4: Do not warn when enabling DAX (bsc#1132894).
- ext4: fix data corruption caused by overlapping unaligned and aligned IO (bsc#1136428).
- ext4: fix ext4_show_options for file systems w/o journal (bsc#1135316).
- ext4: fix use-after-free race with debug_want_extra_isize (bsc#1135314).
- ext4: make sanity check in mballoc more strict (bsc#1136439).
- ext4: wait for outstanding dio during truncate in nojournal mode (bsc#1136438).
- fbdev: fbmem: fix memory access if logo is bigger than the screen (bsc#1051510).
- fbdev: fix divide error in fb_var_to_videomode (bsc#1113722)
- fbdev: fix WARNING in __alloc_pages_nodemask bug (bsc#1113722)
- firmware: efi: factor out mem_reserve (bsc#1117158 bsc#1134671).
- fix cgroup_do_mount() handling of failure exits (bsc#1133095).
- fix rtnh_ok() (git-fixes).
- fm10k: Fix a potential NULL pointer dereference (bsc#1051510).
- fm10k: TRIVIAL cleanup of extra spacing in function comment (jsc#SLE-4796).
- fm10k: use struct_size() in kzalloc() (jsc#SLE-4796).
- fs/nfs: Fix nfs_parse_devname to not modify it's argument (git-fixes).
- fs/sync.c: sync_file_range(2) may use WB_SYNC_ALL writeback (bsc#1136432).
- fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount (bsc#1136435).
- fs: avoid fdput() after failed fdget() in vfs_dedupe_file_range() (bsc#1132384, bsc#1132219).
- ftrace/x86_64: Emulate call function while updating in breakpoint handler (bsc#1099658).
- futex: Cure exit race (bsc#1050549).
- futex: Ensure that futex address is aligned in handle_futex_death() (bsc#1050549).
- futex: Handle early deadlock return correctly (bsc#1050549).
- genetlink: Fix a memory leak on error path (networking-stable-19_03_28).
- ghes, EDAC: Fix ghes_edac registration (bsc#1133176).
- gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input (bsc#1051510).
- gpio: aspeed: fix a potential NULL pointer dereference (bsc#1051510).
- gpio: gpio-omap: fix level interrupt idling (bsc#1051510).
- gpio: of: Fix of_gpiochip_add() error path (bsc#1051510).
- gpu: ipu-v3: dp: fix CSC handling (bsc#1051510).
- gre6: use log_ecn_error module parameter in ip6_tnl_rcv() (git-fixes).
- hid: core: move Usage Page concatenation to Main item (bsc#1093389).
- hid: debug: fix race condition with between rdesc_show() and device removal (bsc#1051510).
- hid: i2c-hid: Ignore input report if there's no data present on Elan touchpanels (bsc#1133486).
- hid: input: add mapping for 'Toggle Display' key (bsc#1051510).
- hid: input: add mapping for Assistant key (bsc#1051510).
- hid: input: add mapping for Expose/Overview key (bsc#1051510).
- hid: input: add mapping for keyboard Brightness Up/Down/Toggle keys (bsc#1051510).
- hid: input: fix a4tech horizontal wheel custom usage (bsc#1137429).
- hid: intel-ish-hid: avoid binding wrong ishtp_cl_device (bsc#1051510).
- hid: intel-ish: ipc: handle PIMR before ish_wakeup also clear PISR busy_clear bit (bsc#1051510).
- hid: logitech: check the return value of create_singlethread_workqueue (bsc#1051510).
- hv_netvsc: Fix IP header checksum for coalesced packets (networking-stable-19_03_07).
- hwmon: (f71805f) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (pc87427) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (vt1211) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwrng: virtio - Avoid repeated init of completion (bsc#1051510).
- i2c: imx: correct the method of getting private data in notifier_call (bsc#1111666).
- i2c: Make i2c_unregister_device() NULL-aware (bsc#1108193).
- i2c: synquacer: fix enumeration of slave devices (bsc#1111666).
- i40e: Able to add up to 16 MAC filters on an untrusted VF (jsc#SLE-4797).
- i40e: add new pci id for X710/XXV710 N3000 cards (jsc#SLE-4797).
- i40e: add num_vectors checker in iwarp handler (jsc#SLE-4797).
- i40e: Add support FEC configuration for Fortville 25G (jsc#SLE-4797).
- i40e: Add support for X710 B/P and SFP+ cards (jsc#SLE-4797).
- i40e: add tracking of AF_XDP ZC state for each queue pair (jsc#SLE-4797).
- i40e: change behavior on PF in response to MDD event (jsc#SLE-4797).
- i40e: Change unmatched function types (jsc#SLE-4797).
- i40e: Changed maximum supported FW API version to 1.8 (jsc#SLE-4797).
- i40e: check queue pairs num in config queues handler (jsc#SLE-4797).
- i40e: clean up several indentation issues (jsc#SLE-4797).
- i40e: do not allow changes to HW VLAN stripping on active port VLANs (jsc#SLE-4797).
- i40e: Fix for 10G ports LED not blinking (jsc#SLE-4797).
- i40e: Fix for allowing too many MDD events on VF (jsc#SLE-4797).
- i40e: fix i40e_ptp_adjtime when given a negative delta (jsc#SLE-4797).
- i40e: Fix misleading error message (jsc#SLE-4797).
- i40e: fix misleading message about promisc setting on un-trusted VF (jsc#SLE-4797).
- i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c (jsc#SLE-4797).
- i40e: Fix the typo in adding 40GE KR4 mode (jsc#SLE-4797).
- i40e: Further implementation of LLDP (jsc#SLE-4797).
- i40e: Implement DDP support in i40e driver (jsc#SLE-4797).
- i40e: increase indentation (jsc#SLE-4797).
- i40e: Introduce recovery mode support (jsc#SLE-4797).
- i40e: Limiting RSS queues to CPUs (jsc#SLE-4797).
- i40e: Memory leak in i40e_config_iwarp_qvlist (jsc#SLE-4797).
- i40e: missing input validation on VF message handling by the PF (jsc#SLE-4797).
- i40e: move i40e_xsk_umem function (jsc#SLE-4797).
- i40e: print pci vendor and device ID during probe (jsc#SLE-4797).
- i40e: Queues are reserved despite 'Invalid argument' error (jsc#SLE-4797).
- i40e: remove debugfs tx_timeout support (jsc#SLE-4797).
- i40e: remove error msg when vf with port vlan tries to remove vlan 0 (jsc#SLE-4797).
- i40e: Remove misleading messages for untrusted VF (jsc#SLE-4797).
- i40e: remove out-of-range comparisons in i40e_validate_cloud_filter (jsc#SLE-4797).
- i40e: Remove umem from VSI (jsc#SLE-4797).
- i40e: Report advertised link modes on 40GBase_LR4, CR4 and fibre (jsc#SLE-4797).
- i40e: Report advertised link modes on 40GBASE_SR4 (jsc#SLE-4797).
- i40e: Revert ShadowRAM checksum calculation change (jsc#SLE-4797).
- i40e: save PTP time before a device reset (jsc#SLE-4797).
- i40e: Setting VF to VLAN 0 requires restart (jsc#SLE-4797).
- i40e: ShadowRAM checksum calculation change (jsc#SLE-4797).
- i40e: The driver now prints the API version in error message (jsc#SLE-4797).
- i40e: Use struct_size() in kzalloc() (jsc#SLE-4797).
- i40e: VF's promiscuous attribute is not kept (jsc#SLE-4797).
- i40e: Wrong truncation from u16 to u8 (jsc#SLE-4797).
- i40iw: Avoid panic when handling the inetdev event (jsc#SLE-4793).
- i40iw: remove support for ib_get_vector_affinity (jsc#SLE-4793).
- i40iw: remove use of VLAN_TAG_PRESENT (jsc#SLE-4793).
- ib/hfi1: Add debugfs to control expansion ROM write protect (jsc#SLE-4925).
- ib/hfi1: Add selected Rcv counters (jsc#SLE-4925).
- ib/hfi1: Close VNIC sdma_progress sleep window (jsc#SLE-4925).
- ib/hfi1: Consider LMC in 16B/bypass ingress packet check (jsc#SLE-4925).
- ib/hfi1: Correctly process FECN and BECN in packets (jsc#SLE-4925).
- ib/hfi1: Dump pio info for non-user send contexts (jsc#SLE-4925).
- ib/hfi1: Eliminate opcode tests on mr deref (jsc#SLE-4925).
- ib/hfi1: Failed to drain send queue when QP is put into error state (jsc#SLE-4925).
- ib/hfi1: Fix the allocation of RSM table (jsc#SLE-4925).
- ib/hfi1: Fix two format strings (jsc#SLE-4925).
- ib/hfi1: Fix WQ_MEM_RECLAIM warning (jsc#SLE-4925).
- ib/hfi1: Ignore LNI errors before DC8051 transitions to Polling state (jsc#SLE-4925).
- ib/hfi1: Incorrect sizing of sge for PIO will OOPs (jsc#SLE-4925).
- ib/hfi1: Limit VNIC use of SDMA engines to the available count (jsc#SLE-4925).
- ib/hfi1: Reduce lock contention on iowait_lock for sdma and pio (jsc#SLE-4925).
- ib/hfi1: Remove overly conservative VM_EXEC flag check (jsc#SLE-4925).
- ib/hfi1: Remove WARN_ON when freeing expected receive groups (jsc#SLE-4925).
- ib/hfi1: Unreserve a reserved request when it is completed (jsc#SLE-4925).
- ib/hw: Remove unneeded semicolons (bsc#1136456 jsc#SLE-4689).
- ib/rdmavt: Add wc_flags and wc_immdata to cq entry trace (jsc#SLE-4925).
- ib/rdmavt: Fix frwr memory registration (jsc#SLE-4925).
- ib/rdmavt: Fix loopback send with invalidate ordering (jsc#SLE-4925).
- ib/{rdmavt, hfi1): Miscellaneous comment fixes (jsc#SLE-4925).
- ibmvnic: Add device identification to requested IRQs (bsc#1137739).
- ibmvnic: Do not close unopened driver during reset (bsc#1137752).
- ibmvnic: Enable GRO (bsc#1132227).
- ibmvnic: Fix completion structure initialization (bsc#1131659).
- ibmvnic: Fix netdev feature clobbering during a reset (bsc#1132227).
- ibmvnic: Fix unchecked return codes of memory allocations (bsc#1137752).
- ibmvnic: Refresh device multicast list after reset (bsc#1137752).
- ibmvnic: remove set but not used variable 'netdev' (bsc#1137739).
- ice : Ensure only valid bits are set in ice_aq_set_phy_cfg (jsc#SLE-4803).
- ice: Add 52 byte RSS hash key support (jsc#SLE-4803).
- ice: add and use new ice_for_each_traffic_class() macro (jsc#SLE-4803).
- ice: Add code for DCB initialization part 1/4 (jsc#SLE-4803).
- ice: Add code for DCB initialization part 2/4 (jsc#SLE-4803).
- ice: Add code for DCB initialization part 3/4 (jsc#SLE-4803).
- ice: Add code for DCB initialization part 4/4 (jsc#SLE-4803).
- ice: Add code for DCB rebuild (jsc#SLE-4803).
- ice: Add code to control FW LLDP and DCBX (jsc#SLE-4803).
- ice: Add code to get DCB related statistics (jsc#SLE-4803).
- ice: Add code to process LLDP Mib change events (jsc#SLE-4803).
- ice: add const qualifier to mac_addr parameter (jsc#SLE-4803).
- ice: Add ethtool private flag to make forcing link down optional (jsc#SLE-4803).
- ice: Add ethtool set_phys_id handler (jsc#SLE-4803).
- ice: Add function to program ethertype based filter rule on VSIs (jsc#SLE-4803).
- ice: Add missing case in print_link_msg for printing flow control (jsc#SLE-4803).
- ice: Add missing PHY type to link settings (jsc#SLE-4803).
- ice: Add more validation in ice_vc_cfg_irq_map_msg (jsc#SLE-4803).
- ice: Add priority information into VLAN header (jsc#SLE-4803).
- ice: Add reg_idx variable in ice_q_vector structure (jsc#SLE-4803).
- ice: Add support for adaptive interrupt moderation (jsc#SLE-4803).
- ice: Add support for new PHY types (jsc#SLE-4803).
- ice: Add support for PF/VF promiscuous mode (jsc#SLE-4803).
- ice: Allow for software timestamping (jsc#SLE-4803).
- ice: Always free/allocate q_vectors (jsc#SLE-4803).
- ice: Audit hotpath structures with pahole (jsc#SLE-4803).
- ice: avoid multiple unnecessary de-references in probe (jsc#SLE-4803).
- ice: Bump driver version (jsc#SLE-4803).
- ice: Bump version (jsc#SLE-4803).
- ice: Calculate ITR increment based on direct calculation (jsc#SLE-4803).
- ice: change VF VSI tc info along with num_queues (jsc#SLE-4803).
- ice: check for a leaf node presence (jsc#SLE-4803).
- ice: clear VF ARQLEN register on reset (jsc#SLE-4803).
- ice: code cleanup in ice_sched.c (jsc#SLE-4803).
- ice: configure GLINT_ITR to always have an ITR gran of 2 (jsc#SLE-4803).
- ice: Configure RSS LUT and HASH KEY in rebuild path (jsc#SLE-4803).
- ice: Create a generic name for the ice_rx_flg64_bits structure (jsc#SLE-4803).
- ice: Create framework for VSI queue context (jsc#SLE-4803).
- ice: Determine descriptor count and ring size based on PAGE_SIZE (jsc#SLE-4803).
- ice: Disable sniffing VF traffic on PF (jsc#SLE-4803).
- ice: Do not bail out when filter already exists (jsc#SLE-4803).
- ice: Do not let VF know that it is untrusted (jsc#SLE-4803).
- ice: Do not remove VLAN filters that were never programmed (jsc#SLE-4803).
- ice: Do not set LB_EN for prune switch rules (jsc#SLE-4803).
- ice: do not spam VFs with link messages (jsc#SLE-4803).
- ice: Do not unnecessarily initialize local variable (jsc#SLE-4803).
- ice: Enable LAN_EN for the right recipes (jsc#SLE-4803).
- ice: Enable link events over the ARQ (jsc#SLE-4803).
- ice: Enable MAC anti-spoof by default (jsc#SLE-4803).
- ice: enable VF admin queue interrupts (jsc#SLE-4803).
- ice: Fix added in VSI supported nodes calc (jsc#SLE-4803).
- ice: Fix broadcast traffic in port VLAN mode (jsc#SLE-4803).
- ice: Fix for adaptive interrupt moderation (jsc#SLE-4803).
- ice: Fix for allowing too many MDD events on VF (jsc#SLE-4803).
- ice: Fix for FC get rx/tx pause params (jsc#SLE-4803).
- ice: fix ice_remove_rule_internal vsi_list handling (jsc#SLE-4803).
- ice: Fix incorrect use of abbreviations (jsc#SLE-4803).
- ice: Fix issue reclaiming resources back to the pool after reset (jsc#SLE-4803).
- ice: Fix issue reconfiguring VF queues (jsc#SLE-4803).
- ice: Fix issue when adding more than allowed VLANs (jsc#SLE-4803).
- ice: fix issue where host reboots on unload when iommu=on (jsc#SLE-4803).
- ice: Fix issue with VF reset and multiple VFs support on PFs (jsc#SLE-4803).
- ice: fix numeric overflow warning (jsc#SLE-4803).
- ice: fix some function prototype and signature style issues (jsc#SLE-4803).
- ice: fix stack hogs from struct ice_vsi_ctx structures (jsc#SLE-4803).
- ice: fix static analysis warnings (jsc#SLE-4803).
- ice: Fix the calculation of ICE_MAX_MTU (jsc#SLE-4803).
- ice: fix the divide by zero issue (jsc#SLE-4803).
- ice: Fix typos in code comments (jsc#SLE-4803).
- ice: flush Tx pipe on disable queue timeout (jsc#SLE-4803).
- ice: Gather the rx buf clean-up logic for better reuse (jsc#SLE-4803).
- ice: Get resources per function (jsc#SLE-4803).
- ice: Get rid of ice_pull_tail (jsc#SLE-4803).
- ice: Get VF VSI instances directly via PF (jsc#SLE-4803).
- ice: Implement flow to reset VFs with PFR and other resets (jsc#SLE-4803).
- ice: Implement getting and setting ethtool coalesce (jsc#SLE-4803).
- ice: Implement pci_error_handler ops (jsc#SLE-4803).
- ice: Implement support for normal get_eeprom[_len] ethtool ops (jsc#SLE-4803).
- ice: Limit the ice_add_rx_frag to frag addition (jsc#SLE-4803).
- ice: map Rx buffer pages with DMA attributes (jsc#SLE-4803).
- ice: Move aggregator list into ice_hw instance (jsc#SLE-4803).
- ice: Offload SCTP checksum (jsc#SLE-4803).
- ice: only use the VF for ICE_VSI_VF in ice_vsi_release (jsc#SLE-4803).
- ice: Preserve VLAN Rx stripping settings (jsc#SLE-4803).
- ice: Prevent unintended multiple chain resets (jsc#SLE-4803).
- ice: Pull out page reuse checks onto separate function (jsc#SLE-4803).
- ice: Put __ICE_PREPARED_FOR_RESET check in ice_prepare_for_reset (jsc#SLE-4803).
- ice: Reduce scope of variable in ice_vsi_cfg_rxqs (jsc#SLE-4803).
- ice: Refactor a few Tx scheduler functions (jsc#SLE-4803).
- ice: Refactor getting/setting coalesce (jsc#SLE-4803).
- ice: Refactor link event flow (jsc#SLE-4803).
- ice: Remove '2 BITS' comment (jsc#SLE-4803).
- ice: Remove __always_unused attribute (jsc#SLE-4803).
- ice: remove redundant variable and if condition (jsc#SLE-4803).
- ice: Remove runtime change of PFINT_OICR_ENA register (jsc#SLE-4803).
- ice: Remove unnecessary braces (jsc#SLE-4803).
- ice: Remove unnecessary newlines from log messages (jsc#SLE-4803).
- ice: Remove unnecessary wait when disabling/enabling Rx queues (jsc#SLE-4803).
- ice: Remove unused function prototype (jsc#SLE-4803).
- ice: Remove unused function prototype (jsc#SLE-4803).
- ice: Remove unused vsi_id field (jsc#SLE-4803).
- ice: Reset all VFs with VFLR during SR-IOV init flow (jsc#SLE-4803).
- ice: Resolve static analysis reported issue (jsc#SLE-4803).
- ice: Restore VLAN switch rule if port VLAN existed before (jsc#SLE-4803).
- ice: Retrieve rx_buf in separate function (jsc#SLE-4803).
- ice: Return configuration error without queue to disable (jsc#SLE-4803).
- ice: Rework queue management code for reuse (jsc#SLE-4803).
- ice: Separate if conditions for ice_set_features() (jsc#SLE-4803).
- ice: Set LAN_EN for all directional rules (jsc#SLE-4803).
- ice: Set physical link up/down when an interface is set up/down (jsc#SLE-4803).
- ice: sizeof(type&gt;) should be avoided (jsc#SLE-4803).
- ice: Suppress false-positive style issues reported by static analyzer (jsc#SLE-4803).
- ice: use absolute vector ID for VFs (jsc#SLE-4803).
- ice: Use bitfields where possible (jsc#SLE-4803).
- ice: Use dev_err when ice_cfg_vsi_lan fails (jsc#SLE-4803).
- ice: Use ice_for_each_q_vector macro where possible (jsc#SLE-4803).
- ice: use ice_for_each_vsi macro when possible (jsc#SLE-4803).
- ice: use irq_num var in ice_vsi_req_irq_msix (jsc#SLE-4803).
- ice: Use more efficient structures (jsc#SLE-4803).
- ice: Use pf instead of vsi-back (jsc#SLE-4803).
- ice: use virt channel status codes (jsc#SLE-4803).
- ice: Validate ring existence and its q_vector per VSI (jsc#SLE-4803).
- igb: Bump version number (jsc#SLE-4798).
- igb: Exclude device from suspend direct complete optimization (jsc#SLE-4798).
- igb: fix various indentation issues (jsc#SLE-4798).
- igb: Fix WARN_ONCE on runtime suspend (jsc#SLE-4798).
- igb: use struct_size() helper (jsc#SLE-4798).
- igc: Add ethtool support (jsc#SLE-4799).
- igc: Add multiple receive queues control supporting (jsc#SLE-4799).
- igc: Add support for statistics (jsc#SLE-4799).
- igc: Add support for the ntuple feature (jsc#SLE-4799).
- igc: Extend the ethtool supporting (jsc#SLE-4799).
- igc: Fix code redundancy (jsc#SLE-4799).
- igc: Fix the typo in igc_base.h header definition (jsc#SLE-4799).
- igc: Remove the 'igc_get_phy_id_base' method (jsc#SLE-4799).
- igc: Remove the 'igc_read_mac_addr_base' method (jsc#SLE-4799).
- igc: Remove unneeded code (jsc#SLE-4799).
- igc: Remove unneeded hw_dbg prints (jsc#SLE-4799).
- igc: Remove unreachable code from igc_phy.c file (jsc#SLE-4799).
- igc: Remove unused code (jsc#SLE-4799).
- igc: Use struct_size() helper (jsc#SLE-4799).
- igmp: fix incorrect unsolicit report count when join group (git-fixes).
- iio/gyro/bmg160: Use millidegrees for temperature scale (bsc#1051510).
- iio: ad_sigma_delta: select channel when reading register (bsc#1051510).
- iio: adc: at91: disable adc channel interrupt in timeout case (bsc#1051510).
- iio: adc: fix warning in Qualcomm PM8xxx HK/XOADC driver (bsc#1051510).
- iio: adc: xilinx: fix potential use-after-free on remove (bsc#1051510).
- iio: core: fix a possible circular locking dependency (bsc#1051510).
- iio: cros_ec: Fix the maths for gyro scale calculation (bsc#1051510).
- iio: dac: mcp4725: add missing powerdown bits in store eeprom (bsc#1051510).
- iio: Fix scan mask selection (bsc#1051510).
- iio: gyro: mpu3050: fix chip ID reading (bsc#1051510).
- include/linux/bitops.h: introduce BITS_PER_TYPE (bsc#1136345 jsc#SLE-4681).
- indirect call wrappers: helpers to speed-up indirect calls of builtin (bsc#1124503).
- inetpeer: fix uninit-value in inet_getpeer (git-fixes).
- infiniband/qedr: Potential null ptr dereference of qp (bsc#1136456 jsc#SLE-4689).
- infiniband: hfi1: drop crazy DEBUGFS_SEQ_FILE_CREATE() macro (jsc#SLE-4925).
- infiniband: hfi1: no need to check return value of debugfs_create functions (jsc#SLE-4925).
- input: elan_i2c - add hardware ID for multiple Lenovo laptops (bsc#1051510).
- input: introduce KEY_ASSISTANT (bsc#1051510).
- input: snvs_pwrkey - initialize necessary driver data before enabling IRQ (bsc#1051510).
- input: synaptics-rmi4 - fix possible double free (bsc#1051510).
- input: synaptics-rmi4 - write config register values to the right offset (bsc#1051510).
- intel: correct return from set features callback (jsc#SLE-4795).
- intel_idle: add support for Jacobsville (jsc#SLE-5394).
- intel_th: msu: Fix single mode with IOMMU (bsc#1051510).
- intel_th: pci: Add Comet Lake support (bsc#1051510).
- io: accel: kxcjk1013: restore the range after resume (bsc#1051510).
- iommu/amd: Set exclusion range correctly (bsc#1130425).
- iommu/arm-smmu-v3: Abort all transactions if SMMU is enabled in kdump kernel (bsc#1117158).
- iommu/arm-smmu-v3: Do not disable SMMU in kdump kernel (bsc#1117158 bsc#1134671).
- iommu/vt-d: Do not request page request irq under dmar_global_lock (bsc#1135006).
- iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU (bsc#1135007).
- iommu/vt-d: Set intel_iommu_gfx_mapped correctly (bsc#1135008).
- ip6_tunnel: collect_md xmit: Use ip_tunnel_key's provided src address (git-fixes).
- ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type (networking-stable-19_04_10).
- ip_gre: fix parsing gre header in ipgre_err (git-fixes).
- ip_tunnel: Fix name string concatenate in __ip_tunnel_create() (git-fixes).
- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- ipmi: Fix I2C client removal in the SSIF driver (bsc#1108193).
- ipmi: fix sleep-in-atomic in free_user at cleanup SRCU user-&gt;release_barrier (bsc#1111666).
- ipmi: Prevent use-after-free in deliver_response (bsc#1111666).
- ipmi:ssif: compare block number correctly for multi-part return messages (bsc#1051510).
- ipmi_ssif: Remove duplicate NULL check (bsc#1108193).
- ipv4: add sanity checks in ipv4_link_failure() (git-fixes).
- ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled (git-fixes).
- ipv4: ensure rcu_read_lock() in ipv4_link_failure() (networking-stable-19_04_19).
- ipv4: ip_do_fragment: Preserve skb_iif during fragmentation (networking-stable-19_05_04).
- ipv4: recompile ip options in ipv4_link_failure (networking-stable-19_04_19).
- ipv4: Return error for RTA_VIA attribute (networking-stable-19_03_07).
- ipv4: set the tcp_min_rtt_wlen range from 0 to one day (networking-stable-19_04_30).
- ipv6/flowlabel: wait rcu grace period before put_pid() (git-fixes).
- ipv6: fix cleanup ordering for ip6_mr failure (git-fixes).
- ipv6: fix cleanup ordering for pingv6 registration (git-fixes).
- ipv6: Fix dangling pointer when ipv6 fragment (git-fixes).
- ipv6: invert flowlabel sharing check in process and user mode (git-fixes).
- ipv6: mcast: fix unsolicited report interval after receiving querys (git-fixes).
- ipv6: propagate genlmsg_reply return code (networking-stable-19_02_24).
- ipv6: Return error for RTA_VIA attribute (networking-stable-19_03_07).
- ipv6: sit: reset ip header pointer in ipip6_rcv (git-fixes).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route (bsc#1051510).
- ipvlan: disallow userns cap_net_admin to change global mode/flags (networking-stable-19_03_15).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf (git-fixes).
- ipvs: fix buffer overflow with sync daemon and service (git-fixes).
- ipvs: fix check on xmit to non-local addresses (git-fixes).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest() (bsc#1051510).
- ipvs: fix rtnl_lock lockups caused by start_sync_thread (git-fixes).
- ipvs: Fix signed integer overflow when setsockopt timeout (bsc#1051510).
- ipvs: fix stats update from local clients (git-fixes).
- ipvs: remove IPS_NAT_MASK check to fix passive FTP (git-fixes).
- iw_cxgb*: kzalloc the iwcm verbs struct (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: Check for send WR also while posting write with completion WR (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: complete the cached SRQ buffers (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: cq/qp mask depends on bar2 pages in a host page (bsc#1127371).
- iw_cxgb4: Fix qpid leak (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: fix srqidx leak during connection abort (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: Make function read_tcb() static (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- iw_cxgb4: use listening ep tos when accepting new connections (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: use tos when finding ipv6 routes (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: use tos when importing the endpoint (bsc#1136348 jsc#SLE-4684).
- iwiwifi: fix bad monitor buffer register addresses (bsc#1129770).
- iwlwifi: fix driver operation for 5350 (bsc#1111666).
- iwlwifi: fix send hcmd timeout recovery flow (bsc#1129770).
- ixgbe: fix mdio bus registration (jsc#SLE-4795).
- ixgbe: fix older devices that do not support IXGBE_MRQC_L3L4TXSWEN (jsc#SLE-4795).
- ixgbe: register a mdiobus (jsc#SLE-4795).
- ixgbe: remove magic constant in ixgbe_reset_hw_82599() (jsc#SLE-4795).
- ixgbe: use mii_bus to handle MII related ioctls (jsc#SLE-4795).
- ixgbe: Use struct_size() helper (jsc#SLE-4795).
- jbd2: check superblock mapped prior to committing (bsc#1136430).
- kabi i40e ignore include (jsc#SLE-4797).
- kabi protect struct iw_cm_id (bsc#1136348 jsc#SLE-4684).
- kabi protect struct vf_info (bsc#1136347 jsc#SLE-4683).
- kABI workaround for removed usb_interface.pm_usage_cnt field (bsc#1051510).
- kABI workaround for snd_seq_kernel_client_enqueue() API changes (bsc#1051510).
- kabi/severities: exclude hns3 symbols (bsc#1134948)
- kabi/severities: exclude qed* symbols (bsc#1136461)
- kabi/severities: missed hns roce module
- kabi: arm64: cpuhotplug: Reuse other arch's cpuhp_state ().
- kabi: drop LINUX_Mib_TCPWQUEUETOOBIG snmp counter (bsc#1137586).
- kabi: implement map_lookup_elem_sys_only in another way (bsc#1083647).
- kabi: move sysctl_tcp_min_snd_mss to preserve struct net layout (bsc#1137586).
- kABI: protect dma-mapping.h include (kabi).
- kABI: protect functions using struct net_generic (bsc#1129845 LTC#176252).
- kABI: protect ip_options_rcv_srr (kabi).
- kABI: protect struct mlx5_td (kabi).
- kABI: protect struct pci_dev (kabi).
- kABI: protect struct smc_ib_device (bsc#1129845 LTC#176252).
- kABI: protect struct smcd_dev (bsc#1129845 LTC#176252).
- kABI: restore icmp_send (kabi).
- kbuild: strip whitespace in cmd_record_mcount findstring (bsc#1065729).
- kcm: switch order of device registration to fix a crash (bnc#1130527).
- kernel/signal.c: trace_signal_deliver when signal_group_exit (git-fixes).
- kernel/sys.c: prctl: fix false positive in validate_prctl_map() (git-fixes).
- kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv (bsc#1051510).
- kernel/sysctl.c: fix out-of-bounds access when setting file-max (bsc#1051510).
- kernfs: do not set dentry-&gt;d_fsdata (boo#1133115).
- keys: always initialize keyring_index_key::desc_len (bsc#1051510).
- keys: safe concurrent user-&gt;{session,uid}_keyring access (bsc#1135642).
- keys: user: Align the payload buffer (bsc#1051510).
- kmsg: Update message catalog to latest ibM level (2019/03/08) (bsc#1128904 LTC#176078).
- kvm: Call kvm_arch_memslots_updated() before updating memslots (bsc#1132563).
- kvm: Fix kABI for AMD SMAP Errata workaround (bsc#1133149).
- kvm: Fix UAF in nested posted interrupt processing (bsc#1134199).
- kvm: nVMX: Apply addr size mask to effective address for VMX instructions (bsc#1132561).
- kvm: nVMX: Clear reserved bits of #DB exit qualification (bsc#1134200).
- kvm: nVMX: Ignore limit checks on VMX instructions using flat segments (bsc#1132564).
- kvm: nVMX: restore host state in nested_vmx_vmexit for VMFail (bsc#1134201).
- kvm: nVMX: Sign extend displacements of VMX instr's mem operands (bsc#1132562).
- kvm: PPC: Book3S HV: Fix race between kvm_unmap_hva_range and MMU mode switch (bsc#1061840).
- kvm: s390: fix memory overwrites when not using SCA entries (bsc#1136206).
- kvm: s390: provide io interrupt kvm_stat (bsc#1136206).
- kvm: s390: use created_vcpus in more places (bsc#1136206).
- kvm: s390: vsie: fix 8k check for the itdba (bsc#1136206).
- kvm: SVM: Workaround errata#1096 (insn_len maybe zero on SMAP violation) (bsc#1133149).
- kvm: VMX: Compare only a single byte for VMCS' 'launched' in vCPU-run (bsc#1132555).
- kvm: VMX: Zero out *all* general purpose registers after VM-Exit (bsc#1134202).
- kvm: x86/mmu: Detect MMIO generation wrap in any address space (bsc#1132570).
- kvm: x86/mmu: Do not cache MMIO accesses while memslots are in flux (bsc#1132571).
- kvm: x86: Always use 32-bit SMRAM save state for 32-bit kernels (bsc#1134203).
- kvm: x86: Do not clear EFER during SMM transitions for 32-bit vCPU (bsc#1134204).
- kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (bsc#1114279).
- kvm: x86: Report STibP on GET_SUPPORTED_CPUID (bsc#1111331).
- kvm: x86: svm: make sure NMI is injected after nmi_singlestep (bsc#1134205).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- l2tp: filter out non-PPP sessions in pppol2tp_tunnel_ioctl() (git-fixes).
- l2tp: fix missing refcount drop in pppol2tp_tunnel_ioctl() (git-fixes).
- l2tp: only accept PPP sessions in pppol2tp_connect() (git-fixes).
- l2tp: prevent pppol2tp_connect() from creating kernel sockets (git-fixes).
- l2tp: revert 'l2tp: fix missing print session offset info' (bsc#1051510).
- leds: avoid races with workqueue (bsc#1051510).
- leds: pwm: silently error out on EPROBE_DEFER (bsc#1051510).
- lib: add crc64 calculation routines (bsc#1130972).
- lib: do not depend on linux headers being installed (bsc#1130972).
- libata: fix using DMA buffers on stack (bsc#1051510).
- libcxgb: fix incorrect ppmax calculation (bsc#1136345 jsc#SLE-4681).
- lightnvm: if LUNs are already allocated fix return (bsc#1085535).
- linux/kernel.h: Use parentheses around argument in u64_to_user_ptr() (bsc#1051510).
- livepatch: Convert error about unsupported reliable stacktrace into a warning (bsc#1071995).
- livepatch: Remove custom kobject state handling (bsc#1071995).
- livepatch: Remove duplicated code for early initialization (bsc#1071995).
- lpfc: validate command in lpfc_sli4_scmd_to_wqidx_distr() (bsc#1129138).
- mac80211: do not attempt to rename ERR_PTR() debugfs dirs (bsc#1111666).
- mac80211: do not call driver wake_tx_queue op during reconfig (bsc#1051510).
- mac80211: fix memory accounting with A-MSDU aggregation (bsc#1051510).
- mac80211: fix unaligned access in mesh table hash function (bsc#1051510).
- mac80211: Honor SW_CRYPTO_CONTROL for unicast keys in AP VLAN mode (bsc#1111666).
- mac8390: Fix mmio access size probe (bsc#1051510).
- md/raid1: do not clear bitmap bits on interrupted recovery (git-fixes).
- md/raid5: fix 'out of memory' during raid cache recovery (git-fixes).
- md: batch flush requests (bsc#1119680).
- md: Fix failed allocation of md_register_thread (git-fixes).
- md: fix invalid stored role for a disk (bsc#1051510).
- media: atmel: atmel-isc: fix INIT_WORK misplacement (bsc#1051510).
- media: cx18: update *pos correctly in cx18_read_pos() (bsc#1051510).
- media: cx23885: check allocation return (bsc#1051510).
- media: davinci-isif: avoid uninitialized variable use (bsc#1051510).
- media: davinci/vpbe: array underflow in vpbe_enum_outputs() (bsc#1051510).
- media: ivtv: update *pos correctly in ivtv_read_pos() (bsc#1051510).
- media: mt9m111: set initial frame size other than 0x0 (bsc#1051510).
- media: mtk-jpeg: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: mx2_emmaprp: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: omap_vout: potential buffer overflow in vidioc_dqbuf() (bsc#1051510).
- media: ov2659: fix unbalanced mutex_lock/unlock (bsc#1051510).
- media: pvrusb2: Prevent a buffer overflow (bsc#1129770).
- media: s5p-g2d: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: s5p-jpeg: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: serial_ir: Fix use-after-free in serial_ir_init_module (bsc#1051510).
- media: sh_veu: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame (bsc#1051510).
- media: vivid: use vfree() instead of kfree() for dev-&gt;bitmap_cap (bsc#1051510).
- media: wl128x: Fix an error code in fm_download_firmware() (bsc#1051510).
- media: wl128x: prevent two potential buffer overflows (bsc#1051510).
- memcg: make it work on sparse non-0-node systems (bnc#1133616).
- memcg: make it work on sparse non-0-node systems kabi (bnc#1133616).
- mISDN: Check address length before reading address family (bsc#1051510).
- missing barriers in some of unix_sock -&gt;addr and -&gt;path accesses (networking-stable-19_03_15).
- mlxsw: spectrum: Fix autoneg status in ethtool (networking-stable-19_04_30).
- mm/debug.c: fix __dump_page when mapping-&gt;host is not set (bsc#1131934).
- mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (bsc#1135330).
- mm/page_isolation.c: fix a wrong flag in set_migratetype_isolate() (bsc#1131935).
- mm/vmalloc: fix size check for remap_vmalloc_range_partial() (bsc#1133825).
- mm: create non-atomic version of SetPageReserved for init use (jsc#SLE-6647).
- mm: Fix buggy backport leading to MAP_SYNC failures (bsc#1137372)
- mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (bnc#1012382).
- mmc: bcm2835 MMC issues (bsc#1070872).
- mmc: block: Delete gendisk before cleaning up the request queue (bsc#1127616).
- mmc: core: fix possible use after free of host (bsc#1051510).
- mmc: core: Fix tag set memory leak (bsc#1111666).
- mmc: davinci: remove extraneous __init annotation (bsc#1051510).
- mmc: sdhci: Fix data command CRC error handling (bsc#1051510).
- mmc: sdhci: Handle auto-command errors (bsc#1051510).
- mmc: sdhci: Rename SDHCI_ACMD12_ERR and SDHCI_INT_ACMD12ERR (bsc#1051510).
- mmc: tmio_mmc_core: do not claim spurious interrupts (bsc#1051510).
- mount: copy the port field into the cloned nfs_server structure (bsc#1136990).
- mpls: Return error for RTA_GATEWAY attribute (networking-stable-19_03_07).
- mt7601u: bump supported EEPROM version (bsc#1051510).
- mtd: docg3: fix a possible memory leak of mtd-&gt;name (bsc#1051510).
- mtd: docg3: Fix passing zero to 'PTR_ERR' warning in doc_probe_device (bsc#1051510).
- mtd: nand: omap: Fix comment in platform data using wrong Kconfig symbol (bsc#1051510).
- mtd: part: fix incorrect format specifier for an unsigned long long (bsc#1051510).
- mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write (bsc#1129770).
- mwifiex: do not advertise ibSS features without FW support (bsc#1129770).
- mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (bsc#1136935).
- mwifiex: Fix mem leak in mwifiex_tm_cmd (bsc#1051510).
- mwifiex: Fix possible buffer overflows at parsing bss descriptor
- mwifiex: Make resume actually do something useful again on SDIO cards (bsc#1111666).
- mwifiex: prevent an array overflow (bsc#1051510).
- mwl8k: Fix rate_idx underflow (bsc#1051510).
- neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit (git-fixes).
- net-gro: Fix GRO flush when receiving a GSO packet (networking-stable-19_04_10).
- net/hsr: fix possible crash in add_timer() (networking-stable-19_03_15).
- net/ibmvnic: Remove tests of member address (bsc#1137739).
- net/ibmvnic: Update carrier state after link state change (bsc#1135100).
- net/ibmvnic: Update MAC address settings after adapter reset (bsc#1134760).
- net/ipv4: defensive cipso option parsing (git-fixes).
- net/ipv6: do not reinitialize ndev-&gt;cnf.addr_gen_mode on new inet6_dev (git-fixes).
- net/ipv6: fix addrconf_sysctl_addr_gen_mode (git-fixes).
- net/ipv6: propagate net.ipv6.conf.all.addr_gen_mode to devices (git-fixes).
- net/ipv6: reserve room for IFLA_INET6_ADDR_GEN_MODE (git-fixes).
- net/mlx5: Decrease default mr cache size (networking-stable-19_04_10).
- net/mlx5e: Add a lock on tir list (networking-stable-19_04_10).
- net/mlx5e: Do not overwrite pedit action when multiple pedit used (networking-stable-19_02_24).
- net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query (networking-stable-19_04_30).
- net/mlx5e: Fix error handling when refreshing TIRs (networking-stable-19_04_10).
- net/mlx5e: Fix trailing semicolon (bsc#1075020).
- net/mlx5e: IPoib, Reset QP after channels are closed (bsc#1075020).
- net/packet: fix 4gb buffer limit due to overflow check (networking-stable-19_02_24).
- net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec (git-fixes).
- net/rose: fix unbound loop in rose_loopback_timer() (networking-stable-19_04_30).
- net/sched: act_sample: fix divide by zero in the traffic path (networking-stable-19_04_10).
- net/sched: do not dereference a-&gt;goto_chain to read the chain index (bsc#1064802 bsc#1066129).
- net/sched: fix -&gt;get helper of the matchall cls (networking-stable-19_04_10).
- net/smc: add pnet table namespace support (bsc#1129845 LTC#176252).
- net/smc: add smcd support to the pnet table (bsc#1129845 LTC#176252).
- net/smc: allow pci IDs as ib device names in the pnet table (bsc#1129845 LTC#176252).
- net/smc: allow pnetid-less configuration (bsc#1129845 LTC#176252).
- net/smc: check for ip prefix and subnet (bsc#1134607 LTC#177518).
- net/smc: cleanup for smcr_tx_sndbuf_nonempty (bsc#1129845 LTC#176252).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: consolidate function parameters (bsc#1134607 LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607 LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607 LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607 LTC#177518).
- net/smc: improve smc_conn_create reason codes (bsc#1134607 LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607 LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607 LTC#177518).
- net/smc: rework pnet table (bsc#1129845 LTC#176252).
- net/smc: wait for pending work before clcsock release_sock (bsc#1134607 LTC#177518).
- net/tls: free ctx in sock destruct (bsc#1136353 jsc#SLE-4688).
- net/x25: fix a race in x25_bind() (networking-stable-19_03_15).
- net/x25: fix use-after-free in x25_device_event() (networking-stable-19_03_15).
- net/x25: reset state in x25_connect() (networking-stable-19_03_15).
- net: Add __icmp_send helper (networking-stable-19_03_07).
- net: Add header for usage of fls64() (networking-stable-19_02_20).
- net: aquantia: fix rx checksum offload for UDP/TCP over IPv6 (networking-stable-19_03_28).
- net: atm: Fix potential Spectre v1 vulnerabilities (networking-stable-19_04_19).
- net: avoid false positives in untrusted gso validation (git-fixes).
- net: avoid skb_warn_bad_offload on IS_ERR (git-fixes).
- net: avoid use IPCB in cipso_v4_error (networking-stable-19_03_07).
- net: bridge: add vlan_tunnel to bridge port policies (git-fixes).
- net: bridge: fix per-port af_packet sockets (git-fixes).
- net: bridge: multicast: use rcu to access port list from br_multicast_start_querier (git-fixes).
- net: chelsio: Add a missing check on cudg_get_buffer (bsc#1136345 jsc#SLE-4681).
- net: cxgb4: fix various indentation issues (bsc#1136345 jsc#SLE-4681).
- net: datagram: fix unbounded loop in __skb_try_recv_datagram() (git-fixes).
- net: Do not allocate page fragments that are not skb aligned (networking-stable-19_02_20).
- net: do not keep lonely packets forever in the gro hash (git-fixes).
- net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc (networking-stable-19_05_04).
- net: dsa: legacy: do not unmask port bitmaps (git-fixes).
- net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT (git-fixes).
- net: dsa: mv88e6xxx: Fix u64 statistics (networking-stable-19_03_07).
- net: ena: fix return value of ena_com_config_llq_info() (bsc#1111696 bsc#1117561).
- net: ethtool: not call vzalloc for zero sized memory request (networking-stable-19_04_10).
- net: Fix a bug in removing queues from XPS map (git-fixes).
- net: Fix for_each_netdev_feature on Big endian (networking-stable-19_02_20).
- net: fix IPv6 prefix route residue (networking-stable-19_02_20).
- net: fix uninit-value in __hw_addr_add_ex() (git-fixes).
- net: Fix untag for vlan packets without ethernet header (git-fixes).
- net: Fix vlan untag for bridge and vlan_dev with reorder_hdr off (git-fixes).
- net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv (networking-stable-19_04_19).
- net: hns3: add counter for times RX pages gets allocated (bsc#1104353 bsc#1134947).
- net: hns3: add error handler for initializing command queue (bsc#1104353 bsc#1135058).
- net: hns3: add function type check for debugfs help information (bsc#1104353 bsc#1134980).
- net: hns3: Add handling of MAC tunnel interruption (bsc#1104353 bsc#1134983).
- net: hns3: add hns3_gro_complete for HW GRO process (bsc#1104353 bsc#1135051).
- net: hns3: add linearizing checking for TSO case (bsc#1104353 bsc#1134947).
- net: hns3: add protect when handling mac addr list (bsc#1104353 ).
- net: hns3: add queue's statistics update to service task (bsc#1104353 bsc#1134981).
- net: hns3: add reset statistics for VF (bsc#1104353 bsc#1134995).
- net: hns3: add reset statistics info for PF (bsc#1104353 bsc#1134995).
- net: hns3: add some debug info for hclgevf_get_mbx_resp() (bsc#1104353 bsc#1134994).
- net: hns3: add some debug information for hclge_check_event_cause (bsc#1104353 bsc#1134994).
- net: hns3: add support for dump ncl config by debugfs (bsc#1104353 bsc#1134987).
- net: hns3: Add support for netif message level settings (bsc#1104353 bsc#1134989).
- net: hns3: adjust the timing of hns3_client_stop when unloading (bsc#1104353 bsc#1137201).
- net: hns3: always assume no drop TC for performance reason (bsc#1104353 bsc#1135049).
- net: hns3: check 1000M half for hns3_ethtool_ops.set_link_ksettings (bsc#1104353 bsc#1137201).
- net: hns3: check resetting status in hns3_get_stats() (bsc#1104353 bsc#1137201).
- net: hns3: code optimization for command queue' spin lock (bsc#1104353 bsc#1135042).
- net: hns3: combine len and checksum handling for inner and outer header (bsc#1104353 bsc#1134947).
- net: hns3: deactive the reset timer when reset successfully (bsc#1104353 bsc#1137201).
- net: hns3: divide shared buffer between TC (bsc#1104353 bsc#1135047).
- net: hns3: do not initialize MDIO bus when PHY is inexistent (bsc#1104353 bsc#1135045).
- net: hns3: do not request reset when hardware resetting (bsc#1104353 bsc#1137201).
- net: hns3: dump more information when tx timeout happens (bsc#1104353 bsc#1134990).
- net: hns3: extend the loopback state acquisition time (bsc#1104353).
- net: hns3: fix data race between ring-&gt;next_to_clean (bsc#1104353 bsc#1134975 bsc#1134945).
- net: hns3: fix error handling for desc filling (bsc#1104353 ).
- net: hns3: fix for HNS3_RXD_GRO_SIZE_M macro (bsc#1104353 bsc#1137201).
- net: hns3: fix for tunnel type handling in hns3_rx_checksum (bsc#1104353 bsc#1134946).
- net: hns3: fix for TX clean num when cleaning TX BD (bsc#1104353 ).
- net: hns3: fix for vport-&gt;bw_limit overflow problem (bsc#1104353 bsc#1134998).
- net: hns3: fix keep_alive_timer not stop problem (bsc#1104353 bsc#1135055).
- net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info() (bsc#1104353 bsc#1134990).
- net: hns3: fix pause configure fail problem (bsc#1104353 bsc#1134951 bsc#1134951).
- net: hns3: fix set port based VLAN for PF (bsc#1104353 bsc#1135053).
- net: hns3: fix set port based VLAN issue for VF (bsc#1104353 bsc#1135053).
- net: hns3: fix sparse: warning when calling hclge_set_vlan_filter_hw() (bsc#1104353 bsc#1134999).
- net: hns3: fix VLAN offload handle for VLAN inserted by port (bsc#1104353 bsc#1135053).
- net: hns3: free the pending skb when clean RX ring (bsc#1104353 bsc#1135044).
- net: hns3: handle pending reset while reset fail (bsc#1104353 bsc#1135058).
- net: hns3: handle the BD info on the last BD of the packet (bsc#1104353 bsc#1134974).
- net: hns3: ignore lower-level new coming reset (bsc#1104353 bsc#1137201).
- net: hns3: Make hclge_destroy_cmd_queue static (bsc#1104353 bsc#1137201).
- net: hns3: Make hclgevf_update_link_mode static (bsc#1104353 bsc#1137201).
- net: hns3: minor optimization for datapath (bsc#1104353 ).
- net: hns3: minor optimization for ring_space (bsc#1104353 ).
- net: hns3: minor refactor for hns3_rx_checksum (bsc#1104353 bsc#1135052).
- net: hns3: modify HNS3_NIC_STATE_INITED flag in hns3_reset_notify_uninit_enet (bsc#1104353).
- net: hns3: modify the VF network port media type acquisition method (bsc#1104353 bsc#1137201).
- net: hns3: modify VLAN initialization to be compatible with port based VLAN (bsc#1104353 bsc#1135053).
- net: hns3: not reset TQP in the DOWN while VF resetting (bsc#1104353 bsc#1134952).
- net: hns3: not reset vport who not alive when PF reset (bsc#1104353 bsc#1137201).
- net: hns3: optimize the barrier using when cleaning TX BD (bsc#1104353 bsc#1134945).
- net: hns3: prevent change MTU when resetting (bsc#1104353 bsc#1137201).
- net: hns3: prevent double free in hns3_put_ring_config() (bsc#1104353 bsc#1134950).
- net: hns3: reduce resources use in kdump kernel (bsc#1104353 bsc#1137201).
- net: hns3: refactor BD filling for l2l3l4 info (bsc#1104353 bsc#1134947).
- net: hns3: refine tx timeout count handle (bsc#1104353 bsc#1134990).
- net: hns3: remove redundant assignment of l2_hdr to itself (bsc#1104353).
- net: hns3: remove reset after command send failed (bsc#1104353 bsc#1134949).
- net: hns3: remove resetting check in hclgevf_reset_task_schedule (bsc#1104353 bsc#1135056).
- net: hns3: return 0 and print warning when hit duplicate MAC (bsc#1104353 bsc#1137201).
- net: hns3: set dividual reset level for all RAS and MSI-X errors (bsc#1104353 bsc#1135046).
- net: hns3: set up the vport alive state while reinitializing (bsc#1104353 bsc#1137201).
- net: hns3: set vport alive state to default while resetting (bsc#1104353 bsc#1137201).
- net: hns3: simplify hclgevf_cmd_csq_clean (bsc#1104353 ).
- net: hns3: some cleanup for struct hns3_enet_ring (bsc#1104353 bsc#1134947).
- net: hns3: split function hnae3_match_n_instantiate() (bsc#1104353).
- net: hns3: stop mailbox handling when command queue need re-init (bsc#1104353 bsc#1135058).
- net: hns3: stop sending keep alive msg when VF command queue needs reinit (bsc#1104353 bsc#1134972).
- net: hns3: unify maybe_stop_tx for TSO and non-TSO case (bsc#1104353 bsc#1134947).
- net: hns3: unify the page reusing for page size 4K and 64K (bsc#1104353 bsc#1134947).
- net: hns3: use a reserved byte to identify need_resp flag (bsc#1104353).
- net: hns3: use atomic_t replace u32 for arq's count (bsc#1104353 bsc#1134953).
- net: hns3: use devm_kcalloc when allocating desc_cb (bsc#1104353 bsc#1134947).
- net: hns3: use napi_schedule_irqoff in hard interrupts handlers (bsc#1104353 bsc#1134947).
- net: hsr: fix memory leak in hsr_dev_finalize() (networking-stable-19_03_15).
- net: initialize skb-&gt;peeked when cloning (git-fixes).
- net: make skb_partial_csum_set() more robust against overflows (git-fixes).
- net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails (networking-stable-19_03_07).
- net: phy: marvell: add new default led configure for m88e151x (bsc#1135018).
- net: phy: marvell: change default m88e1510 LED configuration (bsc#1135018).
- net: phy: marvell: Enable interrupt function on LED2 pin (bsc#1135018).
- net: phy: marvell: Fix buffer overrun with stats counters (networking-stable-19_05_04).
- net: rds: exchange of 8K and 1M pool (networking-stable-19_04_30).
- net: rose: fix a possible stack overflow (networking-stable-19_03_28).
- net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables &gt; 255 (networking-stable-19_03_15).
- net: sit: fix memory leak in sit_init_net() (networking-stable-19_03_07).
- net: sit: fix UBSAN Undefined behaviour in check_6rd (networking-stable-19_03_15).
- net: socket: fix potential spectre v1 gadget in socketcall (git-fixes).
- net: socket: set sock-&gt;sk to NULL after calling proto_ops::release() (networking-stable-19_03_07).
- net: stmmac: fix memory corruption with large MTUs (networking-stable-19_03_28).
- net: stmmac: move stmmac_check_ether_addr() to driver probe (networking-stable-19_04_30).
- net: test tailroom before appending to linear skb (git-fixes).
- net: thunderx: do not allow jumbo frames with XDP (networking-stable-19_04_19).
- net: thunderx: raise XDP MTU to 1508 (networking-stable-19_04_19).
- net: unbreak CONFIG_RETPOLINE=n builds (bsc#1124503).
- net: use indirect call wrappers at GRO network layer (bsc#1124503).
- net: use indirect call wrappers at GRO transport layer (bsc#1124503).
- net: validate untrusted gso packets without csum offload (networking-stable-19_02_20).
- net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms() (git-fixes).
- net_sched: fix two more memory leaks in cls_tcindex (networking-stable-19_02_24).
- netfilter: bridge: Do not sabotage nf_hook calls from an l3mdev (git-fixes).
- netfilter: bridge: ebt_among: add missing match size checks (git-fixes).
- netfilter: bridge: ebt_among: add more missing match size checks (git-fixes).
- netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING (git-fixes).
- netfilter: drop template ct when conntrack is skipped (git-fixes).
- netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule (git-fixes).
- netfilter: ebtables: handle string from userspace with care (git-fixes).
- netfilter: ebtables: reject non-bridge targets (git-fixes).
- netfilter: ip6t_MASQUERADE: add dependency on conntrack module (git-fixes).
- netfilter: ipset: do not call ipset_nest_end after nla_nest_cancel (git-fixes).
- netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_exit() (git-fixes).
- netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt (git-fixes).
- netfilter: nf_log: do not hold nf_log_mutex during user access (git-fixes).
- netfilter: nf_log: fix uninit read in nf_log_proc_dostring (git-fixes).
- netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6} (git-fixes).
- netfilter: nf_tables: can't fail after linking rule into active rule list (git-fixes).
- netfilter: nf_tables: check msg_type before nft_trans_set(trans) (git-fixes).
- netfilter: nf_tables: fix leaking object reference count (git-fixes).
- netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump() (git-fixes).
- netfilter: nf_tables: release chain in flushing set (git-fixes).
- netfilter: nft_compat: do not dump private area (git-fixes).
- netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target} (git-fixes).
- netfilter: x_tables: fix int overflow in xt_alloc_table_info() (git-fixes).
- netfilter: x_tables: initialise match/target check parameter struct (git-fixes).
- netlabel: fix out-of-bounds memory accesses (networking-stable-19_03_07).
- netlink: fix uninit-value in netlink_sendmsg (git-fixes).
- nfc: nci: Add some bounds checking in nci_hci_cmd_received() (bsc#1051510).
- nfs/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount (git-fixes).
- nfs: Add missing encode / decode sequence_maxsz to v4.2 operations (git-fixes).
- nfs: add module option to limit NFSv4 minor version (jsc#PM-231).
- nfs: Do not recoalesce on error in nfs_pageio_complete_mirror() (git-fixes).
- nfs: Do not use page_file_mapping after removing the page (git-fixes).
- nfs: Fix a soft lockup in the delegation recovery code (git-fixes).
- nfs: Fix a typo in nfs_init_timeout_values() (git-fixes).
- nfs: Fix an I/O request leakage in nfs_do_recoalesce (git-fixes).
- nfs: Fix dentry revalidation on nfsv4 lookup (bsc#1132618).
- nfs: Fix I/O request leakages (git-fixes).
- nfs: fix mount/umount race in nlmclnt (git-fixes).
- nfsd4: catch some false session retries (git-fixes).
- nfsd4: fix cached replies to solo SEQUENCE compounds (git-fixes).
- nfsv4.1 do not free interrupted slot on open (git-fixes).
- nfsv4.1: Reinitialise sequence results before retransmitting a request (git-fixes).
- nfsv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE() (git-fixes).
- nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands (bsc#1051510).
- nvme-fc: use separate work queue to avoid warning (bsc#1131673).
- nvme-multipath: avoid crash on invalid subsystem cntlid enumeration (bsc#1129273).
- nvme-multipath: avoid crash on invalid subsystem cntlid enumeration (bsc#1130937).
- nvme-multipath: split bios with the ns_head bio_set before submitting (bsc#1103259, bsc#1131673).
- nvme-rdma: fix possible free of a non-allocated async event buffer (bsc#1120423).
- nvme: add proper discard setup for the multipath device (bsc#1114638).
- nvme: Do not remove namespaces during reset (bsc#1131673).
- nvme: fix the dangerous reference of namespaces list (bsc#1131673).
- nvme: flush scan_work when resetting controller (bsc#1131673).
- nvme: make sure ns head inherits underlying device limits (bsc#1131673).
- nvme: only reconfigure discard if necessary (bsc#1114638).
- objtool: Fix function fallthrough detection (bsc#1058115).
- ocfs2: fix ocfs2 read inode data panic in ocfs2_iget (bsc#1136434).
- ocfs2: turn on OCFS2_FS_STATS setting(bsc#1134393) We need to turn on OCFS2_FS_STATS kernel configuration setting, to fix bsc#1134393.
- of: fix clang -Wunsequenced for be32_to_cpu() (bsc#1135642).
- omapfb: add missing of_node_put after of_device_is_available (bsc#1051510).
- openvswitch: add seqadj extension when NAT is used (bsc#1051510).
- openvswitch: fix flow actions reallocation (bsc#1051510).
- overflow: Fix -Wtype-limits compilation warnings (bsc#1111666).
- p54: drop device reference count if fails to enable device (bsc#1135642).
- packet: fix reserve calculation (git-fixes).
- packet: in packet_snd start writing at link layer allocation (git-fixes).
- packet: refine ring v3 block size test to hold one frame (git-fixes).
- packet: reset network header if packet shorter than ll reserved space (git-fixes).
- packet: validate msg_namelen in send directly (git-fixes).
- packets: Always register packet sk in the same order (networking-stable-19_03_28).
- pci: Add function 1 DMA alias quirk for Marvell 9170 SATA controller (bsc#1051510).
- pci: designware-ep: Read-only registers need DBI_RO_WR_EN to be writable (bsc#1051510).
- pci: endpoint: Use EPC's device in dma_alloc_coherent()/dma_free_coherent() (git-fixes).
- pci: Factor out pcie_retrain_link() function (git-fixes).
- pci: Init pcie feature bits for managed host bridge alloc (bsc#1111666).
- pci: Mark AMD Stoney Radeon R7 GPU ATS as broken (bsc#1051510).
- pci: Mark Atheros AR9462 to avoid bus reset (bsc#1051510).
- pci: pciehp: Convert to threaded IRQ (bsc#1133005).
- pci: pciehp: Ignore Link State Changes after powering off a slot (bsc#1133005).
- pci: pciehp: Tolerate Presence Detect hardwired to zero (bsc#1133016).
- pci: Work around Pericom pcie-to-pci bridge Retrain Link erratum (git-fixes).
- perf tools: Add Hygon Dhyana support ().
- perf/x86/amd: Add event map for AMD Family 17h (bsc#1134223).
- perf/x86/amd: Update generic hardware cache events for Family 17h (bsc#1134223).
- phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode (bsc#1051510).
- phy: sun4i-usb: Support set_mode to usb_HOST for non-OTG PHYs (bsc#1051510).
- platform/x86: alienware-wmi: printing the wrong error code (bsc#1051510).
- platform/x86: dell-rbtn: Add missing #include (bsc#1051510).
- platform/x86: intel_pmc_ipc: adding error handling (bsc#1051510).
- platform/x86: intel_punit_ipc: Revert 'Fix resource ioremap warning' (bsc#1051510).
- platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI table (bsc#1051510).
- platform/x86: pmc_atom: Add several Beckhoff Automation boards to critclk_systems DMI table (bsc#1051510).
- platform/x86: pmc_atom: Drop __initconst on dmi table (bsc#1051510).
- platform/x86: sony-laptop: Fix unintentional fall-through (bsc#1051510).
- power: supply: axp20x_usb_power: Fix typo in VBUS current limit macros (bsc#1051510).
- power: supply: axp288_charger: Fix unchecked return value (bsc#1051510).
- powerpc/64: Make meltdown reporting Book3S 64 specific
- powerpc/64s: Fix logic when handling unknown CPU features (bsc#1055117).
- powerpc/64s: Fix page table fragment refcount race vs speculative references (bsc#1131326, bsc#1108937).
- powerpc/eeh: Fix race with driver un/bind (bsc#1065729).
- powerpc/fsl: Add barrier_nospec implementation for NXP PowerPC Book3E
- powerpc/hugetlb: Handle mmap_min_addr correctly in get_unmapped_area callback (bsc#1131900).
- powerpc/kvm: Save and restore host AMR/IAMR/UAMOR (bsc#1061840).
- powerpc/mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown search (bsc#1131900).
- powerpc/mm/radix: Display if mappings are exec or not (bsc#1055186, git-fixes).
- powerpc/mm/radix: Prettify mapped memory range print out (bsc#1055186, git-fixes).
- powerpc/mm: Add missing tracepoint for tlbie (bsc#1055117, git-fixes).
- powerpc/mm: Check secondary hash page table (bsc#1065729).
- powerpc/mm: Fix page table dump to work on Radix (bsc#1055186, git-fixes).
- powerpc/msi: Fix NULL pointer access in teardown code (bsc#1065729).
- powerpc/numa: document topology_updates_enabled, disable by default (bsc#1133584).
- powerpc/numa: improve control of topology updates (bsc#1133584).
- powerpc/perf: Fix MMCRA corruption by bhrb_filter (bsc#1053043).
- powerpc/perf: Fix unit_sel/cache_sel checks (bsc#1053043).
- powerpc/perf: Remove l2 bus events from HW cache event array (bsc#1053043).
- powerpc/powernv/cpuidle: Init all present cpus for deep states (bsc#1055121).
- powerpc/powernv/idle: Restore IAMR after idle (bsc#1065729).
- powerpc/powernv/ioda2: Remove redundant free of TCE pages (bsc#1061840).
- powerpc/powernv/ioda: Allocate indirect TCE levels of cached userspace addresses on demand (bsc#1061840).
- powerpc/powernv/ioda: Fix locked_vm counting for memory used by IOMMU tables (bsc#1061840).
- powerpc/powernv: Do not reprogram SLW image on every kvm guest entry/exit (bsc#1061840).
- powerpc/powernv: Make opal log only readable by root (bsc#1065729).
- powerpc/powernv: Remove never used pnv_power9_force_smt4 (bsc#1061840).
- powerpc/process: Fix sparse address space warnings (bsc#1065729).
- powerpc/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
- powerpc/vdso32: fix CLOCK_MONOTONIC on PPC64 (bsc#1131587).
- powerpc/vdso64: Fix CLOCK_MONOTONIC inconsistencies across Y2038 (bsc#1131587).
- powerpc64/ftrace: Include ftrace.h needed for enable/disable calls (bsc#1088804, git-fixes).
- powerpc: Always initialize input array when calling epapr_hypercall() (bsc#1065729).
- powerpc: avoid -mno-sched-epilog on GCC 4.9 and newer (bsc#1065729).
- powerpc: consolidate -mno-sched-epilog into FTRACE flags (bsc#1065729).
- powerpc: Fix 32-bit kvm-PR lockup and host crash with MacOS guest (bsc#1061840).
- powerpc: Fix HMIs on big-endian with CONFIG_RELOCATABLE=y (bsc#1065729).
- proc/kcore: do not bounds check against address 0 (bsc#1051510).
- proc/sysctl: fix return error for proc_doulongvec_minmax() (bsc#1051510).
- proc: revalidate kernel thread inodes to root:root (bsc#1051510).
- ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK (git-fixes).
- pwm: Fix deadlock warning when removing PWM device (bsc#1051510).
- pwm: meson: Consider 128 a valid pre-divider (bsc#1051510).
- pwm: meson: Do not disable PWM when setting duty repeatedly (bsc#1051510).
- pwm: meson: Use the spin-lock only to protect register modifications (bsc#1051510).
- pwm: tiehrpwm: Update shadow register for disabling PWMs (bsc#1051510).
- qed*: Add iWARP 100g support (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed*: Change hwfn used for sb initialization (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add API for SmartAN query (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add infrastructure for error detection and recovery (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add llh ppfid interface and 100g support for offload protocols (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add qed devlink parameters table (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Define new MF bit for no_vlan config (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Delete redundant doorbell recovery types (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: fix indentation issue with statements in an if-block (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix iWARP buffer size provided for syn packet processing (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix iWARP syn packet mac address validation (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix missing DORQ attentions (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: fix spelling mistake 'faspath' -&gt; 'fastpath' (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: fix spelling mistake 'inculde' -&gt; 'include' (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix static checker warning (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix the doorbell address sanity check (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix the DORQ's attentions handling (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Mark expected switch fall-through (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Modify api for performing a dmae to another PF (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Modify offload protocols to use the affined engine (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Read device port count from the shmem (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Reduce the severity of ptp debug message (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: remove duplicated include from qed_if.h (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: remove redundant assignment to rc (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Revise load sequence to avoid pci errors (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Set the doorbell address correctly (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Add ethtool interface for SmartAN query (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Error recovery process (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Fix internal loopback failure with jumbo mtu configuration (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: fix write to free'd pointer error and double free of ptp (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Handle infinite driver spinning for Tx timestamp (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: place ethtool_rx_flow_spec after code after TC flower codebase (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Populate mbi version in ethtool driver query data (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qedr: Change the MSI-X vectors selection to be based on affined engine (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qla2xxx: allow irqbalance control in non-MQ mode (bsc#1128971).
- qla2xxx: allow irqbalance control in non-MQ mode (bsc#1128979).
- qla2xxx: always allocate qla_tgt_wq (bsc#1131451).
- qla2xxx: kABI fixes for v10.00.00.14-k (bsc#1136215).
- qla2xxx: kABI fixes for v10.01.00.15-k (bsc#1136215).
- qlcnic: remove assumption that vlan_tci != 0 (bsc#1136469 jsc#SLE-4695).
- qlcnic: remove set but not used variables 'cur_rings, max_hw_rings, tx_desc_info' (bsc#1136469 jsc#SLE-4695).
- qlcnic: remove set but not used variables 'op, cmd_op' (bsc#1136469 jsc#SLE-4695).
- qmi_wwan: add Olicard 600 (bsc#1051510).
- qmi_wwan: Add support for Quectel EG12/EM12 (networking-stable-19_03_07).
- ras/cec: Check the correct variable in the debugfs error handling (bsc#1085535).
- ravb: Decrease TxFIFO depth of Q3 and Q2 to one (networking-stable-19_03_15).
- rdma/cxbg: Use correct sizing on buffers holding page DMA addresses (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Add support for 64Byte cqes (bsc#1127371).
- rdma/cxgb4: Add support for kernel mode SRQ's (bsc#1127371).
- rdma/cxgb4: Add support for srq functions and structs (bsc#1127371).
- rdma/cxgb4: Don't expose DMA addresses (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Fix null pointer dereference on alloc_skb failure (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: fix some info leaks (bsc#1127371).
- rdma/cxgb4: Fix spelling mistake 'immedate' -&gt; 'immediate' (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Make c4iw_poll_cq_one() easier to analyze (bsc#1127371).
- rdma/cxgb4: Remove a set-but-not-used variable (bsc#1127371).
- rdma/cxgb4: Remove kref accounting for sync operation (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Use sizeof() notation (bsc#1136348 jsc#SLE-4684).
- rdma/hns: Add constraint on the setting of local ACK timeout (bsc#1104427 bsc#1137233).
- rdma/hns: Add SCC context allocation support for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Add SCC context clr support for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Add the process of AEQ overflow for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Add timer allocation support for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Bugfix for mapping user db (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for posting multiple srq work request (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for SCC hem free (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for sending with invalidate (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for set hem of SCC (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for the scene without receiver queue (bsc#1104427 bsc#1137233).
- rdma/hns: Configure capacity of hns device (bsc#1104427 bsc#1137236).
- rdma/hns: Delete unused variable in hns_roce_v2_modify_qp function (bsc#1104427).
- rdma/hns: Delete useful prints for aeq subtype event (bsc#1104427 bsc#1126206).
- rdma/hns: Fix bad endianess of port_pd variable (bsc#1104427 ).
- rdma/hns: Fix bug that caused srq creation to fail (bsc#1104427 ).
- rdma/hns: Fix the bug with updating rq head pointer when flush cqe (bsc#1104427 bsc#1137233).
- rdma/hns: Fix the chip hanging caused by sending doorbell during reset (bsc#1104427 bsc#1137232).
- rdma/hns: Fix the chip hanging caused by sending mailbox CMQ during reset (bsc#1104427 bsc#1137232).
- rdma/hns: Fix the Oops during rmmod or insmod ko when reset occurs (bsc#1104427 bsc#1137232).
- rdma/hns: Fix the state of rereg mr (bsc#1104427 bsc#1137236).
- rdma/hns: Hide error print information with roce vf device (bsc#1104427 bsc#1137236).
- rdma/hns: Limit minimum ROCE CQ depth to 64 (bsc#1104427 bsc#1137236).
- rdma/hns: Limit scope of hns_roce_cmq_send() (bsc#1104427 ).
- rdma/hns: Make some function static (bsc#1104427 bsc#1126206).
- rdma/hns: Modify qp specification according to UM (bsc#1104427 bsc#1137233).
- rdma/hns: Modify the pbl ba page size for hip08 (bsc#1104427 bsc#1137233).
- rdma/hns: Move spin_lock_irqsave to the correct place (bsc#1104427 bsc#1137236).
- rdma/hns: Only assgin some fields if the relatived attr_mask is set (bsc#1104427).
- rdma/hns: Only assign the fields of the rq psn if ib_QP_RQ_PSN is set (bsc#1104427).
- rdma/hns: Only assign the relatived fields of psn if ib_QP_SQ_PSN is set (bsc#1104427).
- rdma/hns: rdma/hns: Assign rq head pointer when enable rq record db (bsc#1104427 bsc#1137236).
- rdma/hns: Remove jiffies operation in disable interrupt context (bsc#1104427 bsc#1137236).
- rdma/hns: Remove set but not used variable 'rst' (bsc#1104427 bsc#1126206).
- rdma/hns: Set allocated memory to zero for wrid (bsc#1104427 bsc#1137236).
- rdma/hns: Support to create 1M srq queue (bsc#1104427 ).
- rdma/hns: Update CQE specifications (bsc#1104427 bsc#1137236).
- rdma/hns: Update the range of raq_psn field of qp context (bsc#1104427).
- rdma/i40iw: Handle workqueue allocation failure (jsc#SLE-4793).
- rdma/iw_cxgb4: Always disconnect when QP is transitioning to TERMINATE state (bsc#1136348 jsc#SLE-4684).
- rdma/iw_cxgb4: Drop __GFP_NOFAIL (bsc#1127371).
- rdma/iwcm: add tos_set bool to iw_cm struct (bsc#1136348 jsc#SLE-4684).
- rdma/qedr: Fix incorrect device rate (bsc#1136188).
- rdma/qedr: Fix out of bounds index check in query pkey (bsc#1136456 jsc#SLE-4689).
- rdma/rdmavt: Use correct sizing on buffers holding page DMA addresses (jsc#SLE-4925).
- rdma/rxe: Consider skb reserve space based on netdev of GID (bsc#1082387, bsc#1103992).
- rdma/smc: Replace ib_query_gid with rdma_get_gid_attr (bsc#1131530 LTC#176717).
- rds: fix refcount bug in rds_sock_addref (git-fixes).
- rds: tcp: atomically purge entries from rds_tcp_conn_list during netns delete (git-fixes).
- regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB (bsc#1051510).
- ring-buffer: Check if memory is available before allocation (bsc#1132531).
- route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race (networking-stable-19_03_15).
- rt2x00: do not increment sequence number while re-transmitting (bsc#1051510).
- rtc: da9063: set uie_unsupported when relevant (bsc#1051510).
- rtc: sh: Fix invalid alarm warning for non-enabled alarm (bsc#1051510).
- rtlwifi: rtl8723ae: Fix missing break in switch statement (bsc#1051510).
- rxrpc: Do not release call mutex on error pointer (git-fixes).
- rxrpc: Do not treat call aborts as conn aborts (git-fixes).
- rxrpc: Fix client call queueing, waiting for channel (networking-stable-19_03_15).
- rxrpc: Fix error reception on AF_INET6 sockets (git-fixes).
- rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket (git-fixes).
- rxrpc: Fix Tx ring annotation after initial Tx failure (git-fixes).
- s390/dasd: fix panic for failed online processing (bsc#1132589).
- s390/pkey: move pckmo subfunction available checks away from module init (bsc#1128544).
- s390/qdio: clear intparm during shutdown (bsc#1134597 LTC#177516).
- s390/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
- sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init() (bsc#1051510).
- sc16is7xx: move label 'err_spi' to correct section (bsc#1051510).
- sc16is7xx: put err_spi and err_i2c into correct #ifdef (bsc#1051510).
- scripts/git_sort/git_sort.py: remove old SCSI git branches
- scripts: override locale from environment when running recordmcount.pl (bsc#1134354).
- scsi: hisi: KABI ignore new symbols (bsc#1135038).
- scsi: hisi_sas: add host reset interface for test (bsc#1135041).
- scsi: hisi_sas: Add softreset in hisi_sas_I_T_nexus_reset() (bsc#1135033).
- scsi: hisi_sas: Adjust the printk format of functions hisi_sas_init_device() (bsc#1135037).
- scsi: hisi_sas: allocate different SAS address for directly attached situation (bsc#1135036).
- scsi: hisi_sas: Do not fail IT nexus reset for Open Reject timeout (bsc#1135033).
- scsi: hisi_sas: Do not hard reset disk during controller reset (bsc#1135034).
- scsi: hisi_sas: Fix for setting the PHY linkrate when disconnected (bsc#1135038).
- scsi: hisi_sas: Remedy inconsistent PHY down state in software (bsc#1135039).
- scsi: hisi_sas: remove the check of sas_dev status in hisi_sas_I_T_nexus_reset() (bsc#1135037).
- scsi: hisi_sas: Send HARD RESET to clear the previous affiliation of STP target port (bsc#1135037).
- scsi: hisi_sas: Set PHY linkrate when disconnected (bsc#1135038).
- scsi: hisi_sas: Some misc tidy-up (bsc#1135031).
- scsi: hisi_sas: Support all RAS events with MSI interrupts (bsc#1135035).
- scsi: libsas: allocate sense buffer for bsg queue (bsc#1131467).
- scsi: libsas: Do discovery on empty PHY to update PHY info (bsc#1135024).
- scsi: libsas: Improve vague log in SAS rediscovery (bsc#1135027).
- scsi: libsas: Inject revalidate event for root port event (bsc#1135026).
- scsi: libsas: Print expander PHY indexes in decimal (bsc#1135021).
- scsi: libsas: Stop hardcoding SAS address length (bsc#1135029).
- scsi: libsas: Support SATA PHY connection rate unmatch fixing during discovery (bsc#1135028).
- scsi: libsas: Try to retain programmed min linkrate for SATA min pathway unmatch fixing (bsc#1135028).
- scsi: qedf: fixup bit operations (bsc#1135542).
- scsi: qedf: fixup locking in qedf_restart_rport() (bsc#1135542).
- scsi: qedf: missing kref_put in qedf_xmit() (bsc#1135542).
- scsi: qla2xxx: Add 28xx flash primary/secondary status/image mechanism (bsc#1136215).
- scsi: qla2xxx: Add Device ID for ISP28XX (bsc#1136215).
- scsi: qla2xxx: Add First Burst support for FC-NVMe devices (bsc#1136215).
- scsi: qla2xxx: Add fw_attr and port_no SysFS node (bsc#1136215).
- scsi: qla2xxx: Add new FC-NVMe enable BIT to enable FC-NVMe feature (bsc#1130579).
- scsi: qla2xxx: Add new FW dump template entry types (bsc#1136215).
- scsi: qla2xxx: Add protection mask module parameters (bsc#1136215).
- scsi: qla2xxx: Add Serdes support for ISP28XX (bsc#1136215).
- scsi: qla2xxx: Add support for multiple fwdump templates/segments (bsc#1136215).
- scsi: qla2xxx: Add support for setting port speed (bsc#1136215).
- scsi: qla2xxx: Avoid pci IRQ affinity mapping when multiqueue is not supported (bsc#1136215).
- scsi: qla2xxx: avoid printf format warning (bsc#1136215).
- scsi: qla2xxx: Check for FW started flag before aborting (bsc#1136215).
- scsi: qla2xxx: check for kstrtol() failure (bsc#1136215).
- scsi: qla2xxx: Cleanups for NVRAM/Flash read/write path (bsc#1136215).
- scsi: qla2xxx: Correction and improvement to fwdt processing (bsc#1136215).
- scsi: qla2xxx: Correctly report max/min supported speeds (bsc#1136215).
- scsi: qla2xxx: Declare local functions 'static' (bsc#1137444).
- scsi: qla2xxx: Fix code indentation for qla27xx_fwdt_entry (bsc#1136215).
- scsi: qla2xxx: Fix DMA error when the DIF sg buffer crosses 4GB boundary (bsc#1136215).
- scsi: qla2xxx: fix error message on qla2400 (bsc#1118139).
- scsi: qla2xxx: Fix function argument descriptions (bsc#1118139).
- scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware (bsc#1136215).
- scsi: qla2xxx: Fix memory corruption during hba reset test (bsc#1118139).
- scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (bsc#1136215).
- scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (bsc#1132044).
- scsi: qla2xxx: Fix read offset in qla24xx_load_risc_flash() (bsc#1136215).
- scsi: qla2xxx: Fix routine qla27xx_dump_{mpi|ram}() (bsc#1136215).
- scsi: qla2xxx: fix spelling mistake: 'existant' -&gt; 'existent' (bsc#1118139).
- scsi: qla2xxx: Fix unload when NVMe devices are configured (bsc#1136215).
- scsi: qla2xxx: fully convert to the generic DMA API (bsc#1137444).
- scsi: qla2xxx: fx00 copypaste typo (bsc#1118139).
- scsi: qla2xxx: Improve several kernel-doc headers (bsc#1137444).
- scsi: qla2xxx: Introduce a switch/case statement in qlt_xmit_tm_rsp() (bsc#1137444).
- scsi: qla2xxx: Make qla2x00_sysfs_write_nvram() easier to analyze (bsc#1137444).
- scsi: qla2xxx: Make sure that qlafx00_ioctl_iosb_entry() initializes 'res' (bsc#1137444).
- scsi: qla2xxx: Move debug messages before sending srb preventing panic (bsc#1136215).
- scsi: qla2xxx: Move marker request behind QPair (bsc#1136215).
- scsi: qla2xxx: no need to check return value of debugfs_create functions (bsc#1136215).
- scsi: qla2xxx: NULL check before some freeing functions is not needed (bsc#1137444).
- scsi: qla2xxx: Prevent multiple ADISC commands per session (bsc#1136215).
- scsi: qla2xxx: Prevent SysFS access when chip is down (bsc#1136215).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1137444).
- scsi: qla2xxx: Remove FW default template (bsc#1136215).
- scsi: qla2xxx: remove redundant null check on pointer sess (bsc#1136215).
- scsi: qla2xxx: remove the unused tcm_qla2xxx_cmd_wq (bsc#1118139).
- scsi: qla2xxx: Remove two arguments from qlafx00_error_entry() (bsc#1137444).
- scsi: qla2xxx: Remove unused symbols (bsc#1118139).
- scsi: qla2xxx: Secure flash update support for ISP28XX (bsc#1136215).
- scsi: qla2xxx: Set remote port devloss timeout to 0 (bsc#1136215).
- scsi: qla2xxx: Simplification of register address used in qla_tmpl.c (bsc#1136215).
- scsi: qla2xxx: Simplify conditional check again (bsc#1136215).
- scsi: qla2xxx: Split the __qla2x00_abort_all_cmds() function (bsc#1137444).
- scsi: qla2xxx: Update driver version to 10.00.00.14-k (bsc#1136215).
- scsi: qla2xxx: Update driver version to 10.01.00.15-k (bsc#1136215).
- scsi: qla2xxx: Update flash read/write routine (bsc#1136215).
- scsi: qla2xxx: Use %p for printing pointers (bsc#1118139).
- scsi: qla2xxx: use lower_32_bits and upper_32_bits instead of reinventing them (bsc#1137444).
- scsi: smartpqi: add H3C controller IDs (bsc#1133547).
- scsi: smartpqi: add h3c ssid (bsc#1133547).
- scsi: smartpqi: add no_write_same for logical volumes (bsc#1133547).
- scsi: smartpqi: add ofa support (bsc#1133547).
- scsi: smartpqi: Add retries for device reset (bsc#1133547).
- scsi: smartpqi: add smp_utils support (bsc#1133547).
- scsi: smartpqi: add spdx (bsc#1133547).
- scsi: smartpqi: add support for huawei controllers (bsc#1133547).
- scsi: smartpqi: add support for PQI Config Table handshake (bsc#1133547).
- scsi: smartpqi: add sysfs attributes (bsc#1133547).
- scsi: smartpqi: allow for larger raid maps (bsc#1133547).
- scsi: smartpqi: bump driver version (bsc#1133547).
- scsi: smartpqi: bump driver version (bsc#1133547).
- scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown() (bsc#1133547).
- scsi: smartpqi: check for null device pointers (bsc#1133547).
- scsi: smartpqi: correct host serial num for ssa (bsc#1133547).
- scsi: smartpqi: correct lun reset issues (bsc#1133547).
- scsi: smartpqi: correct volume status (bsc#1133547).
- scsi: smartpqi: do not offline disks for transient did no connect conditions (bsc#1133547).
- scsi: smartpqi: enhance numa node detection (bsc#1133547).
- scsi: smartpqi: fix build warnings (bsc#1133547).
- scsi: smartpqi: fix disk name mount point (bsc#1133547).
- scsi: smartpqi: fully convert to the generic DMA API (bsc#1133547).
- scsi: smartpqi: increase fw status register read timeout (bsc#1133547).
- scsi: smartpqi: increase LUN reset timeout (bsc#1133547).
- scsi: smartpqi: refactor sending controller raid requests (bsc#1133547).
- scsi: smartpqi: Reporting 'logical unit failure' (bsc#1133547).
- scsi: smartpqi: turn off lun data caching for ptraid (bsc#1133547).
- scsi: smartpqi: update copyright (bsc#1133547).
- scsi: smartpqi: update driver version (bsc#1133547).
- scsi: smartpqi: wake up drives after os resumes from suspend (bsc#1133547).
- scsi: smartpqi_init: fix boolean expression in pqi_device_remove_start (bsc#1133547).
- scsi: zfcp: make DIX experimental, disabled, and independent of DIF (jsc#SLE-6772).
- sctp: avoid running the sctp state machine recursively (networking-stable-19_05_04).
- sctp: call gso_reset_checksum when computing checksum in sctp_gso_segment (networking-stable-19_02_24).
- sctp: fix identification of new acks for SFR-CACC (git-fixes).
- sctp: get sctphdr by offset in sctp_compute_cksum (networking-stable-19_03_28).
- sctp: initialize _pad of sockaddr_in before copying to user memory (networking-stable-19_04_10).
- sctp: set frag_point in sctp_setsockopt_maxseg correctly` (git-fixes).
- selinux: use kernel linux/socket.h for genheaders and mdp (bsc#1134810).
- serial: 8250_pxa: honor the port number from devicetree (bsc#1051510).
- serial: ar933x_uart: Fix build failure with disabled console (bsc#1051510).
- serial: uartps: console_setup() can't be placed to init section (bsc#1051510).
- signal: Always notice exiting tasks (git-fixes).
- signal: Better detection of synchronous signals (git-fixes).
- signal: Restore the stop PTRACE_EVENT_EXIT (git-fixes).
- sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach() (networking-stable-19_02_24).
- soc/fsl/qe: Fix an error code in qe_pin_request() (bsc#1051510).
- soc/tegra: fuse: Fix illegal free of IO base address (bsc#1051510).
- soc/tegra: pmc: Drop locking from tegra_powergate_is_powered() (bsc#1051510).
- soc: imx-sgtl5000: add missing put_device() (bsc#1051510).
- soc: qcom: gsbi: Fix error handling in gsbi_probe() (bsc#1051510).
- spi-mem: fix kernel-doc for spi_mem_dirmap_{read|write}() (bsc#1111666).
- spi: a3700: Clear DATA_OUT when performing a read (bsc#1051510).
- spi: Add missing pm_runtime_put_noidle() after failed get (bsc#1111666).
- spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios (bsc#1051510).
- spi: bcm2835aux: setup gpio-cs to output and correct level during setup (bsc#1051510).
- spi: bcm2835aux: warn in dmesg that native cs is not really supported (bsc#1051510).
- spi: Micrel eth switch: declare missing of table (bsc#1051510).
- spi: rspi: Fix sequencer reset during initialization (bsc#1051510).
- spi: ST ST95HF NFC: declare missing of table (bsc#1051510).
- ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit (bsc#1051510).
- staging: comedi: ni_usb6501: Fix possible double-free of -&gt;usb_rx_buf (bsc#1051510).
- staging: comedi: ni_usb6501: Fix use of uninitialized mutex (bsc#1051510).
- staging: comedi: vmk80xx: Fix possible double-free of -&gt;usb_rx_buf (bsc#1051510).
- staging: comedi: vmk80xx: Fix use of uninitialized semaphore (bsc#1051510).
- staging: iio: ad7192: Fix ad7193 channel address (bsc#1051510).
- staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc (bsc#1051510).
- staging: rtl8712: uninitialized memory in read_bbreg_hdl() (bsc#1051510).
- staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc (bsc#1111666).
- staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer dereference (bsc#1111666).
- staging: vt6655: Fix interrupt race condition on device start up (bsc#1051510).
- staging: vt6655: Remove vif check from vnt_interrupt (bsc#1051510).
- stm class: Fix an endless loop in channel allocation (bsc#1051510).
- stm class: Fix channel free in stm output free path (bsc#1051510).
- stm class: Prevent division by zero (bsc#1051510).
- stmmac: pci: Adjust IOT2000 matching (networking-stable-19_04_30).
- sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (git-fixes).
- supported.conf: Add openvswitch to kernel-default-base (bsc#1124839).
- supported.conf: Add openvswitch to kernel-default-base (bsc#1124839).
- supported.conf: dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).
- svm/avic: Fix invalidate logical APIC id entry (bsc#1132726).
- svm: Fix AVIC DFR and LDR handling (bsc#1132558).
- switchtec: Fix unintended mask of MRPC event (git-fixes).
- sysctl: handle overflow for file-max (bsc#1051510).
- tcp: add tcp_min_snd_mss sysctl (bsc#1137586).
- tcp: do not use ipv6 header for ipv4 flow (networking-stable-19_03_28).
- tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (bsc#1137586).
- tcp: Ensure DCTCP reacts to losses (networking-stable-19_04_10).
- tcp: fix fack_count accounting on tcp_shift_skb_data() (CVE-2019-11477 bsc#1137586).
- tcp: fix TCP_REPAIR_QUEUE bound checking (git-fixes).
- tcp: limit payload size of sacked skbs (bsc#1137586).
- tcp: purge write queue in tcp_connect_init() (git-fixes).
- tcp: tcp_fragment() should apply sane memory limits (bsc#1137586).
- tcp: tcp_grow_window() needs to respect tcp_space() (networking-stable-19_04_19).
- tcp: tcp_v4_err() should be more careful (networking-stable-19_02_20).
- team: fix possible recursive locking when add slaves (networking-stable-19_04_30).
- team: set slave to promisc if team is already in promisc mode (bsc#1051510).
- testing: nvdimm: provide SZ_4G constant (bsc#1132982).
- thermal/int340x_thermal: Add additional UUIDs (bsc#1051510).
- thermal/int340x_thermal: fix mode setting (bsc#1051510).
- thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power (bsc#1051510).
- thunderx: eliminate extra calls to put_page() for pages held for recycling (networking-stable-19_03_28).
- thunderx: enable page recycling for non-XDP case (networking-stable-19_03_28).
- tipc: fix hanging clients using poll with EPOLLOUT flag (git-fixes).
- tipc: fix race condition causing hung sendto (networking-stable-19_03_07).
- tipc: missing entries in name table of publications (networking-stable-19_04_19).
- tools lib traceevent: Fix missing equality check for strcmp (bsc#1129770).
- tools/cpupower: Add Hygon Dhyana support ().
- tpm: Fix the type of the return value in calc_tpm2_event_size() (bsc#1082555).
- tracing/hrtimer: Fix tracing bugs by taking all clock bases and modes into account (bsc#1132527).
- tracing: Fix a memory leak by early error exit in trace_pid_write() (bsc#1133702).
- tracing: Fix buffer_ref pipe ops (bsc#1133698).
- tracing: Fix partial reading of trace event's id file (bsc#1136573).
- treewide: Use DEVICE_ATTR_WO (bsc#1137739).
- tty: increase the default flip buffer limit to 2*640K (bsc#1051510).
- tty: pty: Fix race condition between release_one_tty and pty_write (bsc#1051510).
- tty: serial_core, add -&gt;install (bnc#1129693).
- tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0 (bsc#1051510).
- tun: add a missing rcu_read_unlock() in error path (networking-stable-19_03_28).
- tun: fix blocking read (networking-stable-19_03_07).
- tun: properly test for IFF_UP (networking-stable-19_03_28).
- tun: remove unnecessary memory barrier (networking-stable-19_03_07).
- uas: fix alignment of scatter/gather segments (bsc#1129770).
- udp: use indirect call wrappers for GRO socket lookup (bsc#1124503).
- ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour (bsc#1135323).
- usb-storage: Set virt_boundary_mask to avoid SG overflows (bsc#1051510).
- usb: cdc-acm: fix unthrottle races (bsc#1051510).
- usb: chipidea: Grab the (legacy) usb PHY by phandle first (bsc#1051510).
- usb: core: Fix bug caused by duplicate interface PM usage counter (bsc#1051510).
- usb: core: Fix unterminated string returned by usb_string() (bsc#1051510).
- usb: dwc3: Fix default lpm_nyet_threshold value (bsc#1051510).
- usb: f_fs: Avoid crash due to out-of-scope stack ptr access (bsc#1051510).
- usb: gadget: net2272: Fix net2272_dequeue() (bsc#1051510).
- usb: gadget: net2280: Fix net2280_dequeue() (bsc#1051510).
- usb: gadget: net2280: Fix overrun of OUT messages (bsc#1051510).
- usb: serial: cp210x: fix GPIO in autosuspend (bsc#1120902).
- usb: serial: f81232: fix interrupt worker not stop (bsc#1051510).
- usb: serial: fix unthrottle races (bsc#1051510).
- usb: u132-hcd: fix resource leak (bsc#1051510).
- usb: usb251xb: fix to avoid potential NULL pointer dereference (bsc#1051510).
- usb: usbip: fix isoc packet num validation in get_pipe (bsc#1051510).
- usb: w1 ds2490: Fix bug caused by improper use of altsetting array (bsc#1051510).
- usb: yurex: Fix protection fault after device removal (bsc#1051510).
- userfaultfd: use RCU to free the task struct when fork fails (git-fixes).
- vfio/mdev: Avoid release parent reference during error path (bsc#1051510).
- vfio/mdev: Fix aborting mdev child device removal if one fails (bsc#1051510).
- vfio/pci: use correct format characters (bsc#1051510).
- vfio_pci: Enable memory accesses before calling pci_map_rom (bsc#1051510).
- vfs: allow dedupe of user owned read-only files (bsc#1133778, bsc#1132219).
- vfs: avoid problematic remapping requests into partial EOF block (bsc#1133850, bsc#1132219).
- vfs: dedupe should return EPERM if permission is not granted (bsc#1133779, bsc#1132219).
- vfs: dedupe: extract helper for a single dedup (bsc#1133769, bsc#1132219).
- vfs: exit early from zero length remap operations (bsc#1132411, bsc#1132219).
- vfs: export vfs_dedupe_file_range_one() to modules (bsc#1133772, bsc#1132219).
- vfs: limit size of dedupe (bsc#1132397, bsc#1132219).
- vfs: rename clone_verify_area to remap_verify_area (bsc#1133852, bsc#1132219).
- vfs: skip zero-length dedupe requests (bsc#1133851, bsc#1132219).
- vfs: swap names of {do,vfs}_clone_file_range() (bsc#1133774, bsc#1132219).
- vfs: vfs_clone_file_prep_inodes should return EINVAL for a clone from beyond EOF (bsc#1133780, bsc#1132219).
- vhost/vsock: fix reset orphans race with close timeout (bsc#1051510).
- vhost: reject zero size iova range (networking-stable-19_04_19).
- virtio-blk: limit number of hw queues by nr_cpu_ids (bsc#1051510).
- virtio: Honour 'may_reduce_num' in vring_create_virtqueue (bsc#1051510).
- virtio_pci: fix a NULL pointer reference in vp_del_vqs (bsc#1051510).
- vrf: check accept_source_route on the original netdevice (networking-stable-19_04_10).
- vsock/virtio: fix kernel panic after device hot-unplug (bsc#1051510).
- vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock (bsc#1051510).
- vsock/virtio: Initialize core virtio vsock before registering the driver (bsc#1051510).
- vsock/virtio: reset connected sockets on device removal (bsc#1051510).
- vt: always call notifier with the console lock held (bsc#1051510).
- vxlan: Do not call gro_cells_destroy() before device is unregistered (networking-stable-19_03_28).
- vxlan: test dev-&gt;flags and IFF_UP before calling netif_rx() (networking-stable-19_02_20).
- wil6210: check null pointer in _wil_cfg80211_merge_extra_ies (bsc#1051510).
- wlcore: Fix memory leak in case wl12xx_fetch_firmware failure (bsc#1051510).
- x86/alternative: Init ideal_nops for Hygon Dhyana ().
- x86/amd_nb: Check vendor in AMD-only functions ().
- x86/apic: Add Hygon Dhyana support ().
- x86/bugs: Add Hygon Dhyana to the respective mitigation machinery ().
- x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die processors ().
- x86/cpu/mtrr: Support TOP_MEM2 and get MTRR number ().
- x86/cpu: Create Hygon Dhyana architecture support file ().
- x86/cpu: Get cache info and setup cache cpumap for Hygon Dhyana ().
- x86/cpu: Sanitize FAM6_ATOM naming (bsc#1111331).
- x86/events: Add Hygon Dhyana support to PMU infrastructure ().
- x86/kvm/hyper-v: avoid spurious pending stimer on vCPU init (bsc#1132572).
- x86/kvm: Add Hygon Dhyana support to kvm ().
- x86/MCE/AMD, EDAC/mce_amd: Add new error descriptions for some SMCA bank types (bsc#1128415).
- x86/MCE/AMD, EDAC/mce_amd: Add new McaTypes for CS, PSP, and SMU units (bsc#1128415).
- x86/MCE/AMD, EDAC/mce_amd: Add new MP5, NBIO, and pciE SMCA bank types (bsc#1128415).
- x86/mce/AMD, EDAC/mce_amd: Enumerate Reserved SMCA bank type (bsc#1128415).
- x86/mce/AMD: Pass the bank number to smca_get_bank_type() (bsc#1128415).
- x86/mce: Add Hygon Dhyana support to the MCA infrastructure ().
- x86/mce: Do not disable MCA banks when offlining a CPU on AMD ().
- x86/MCE: Fix kABI for new AMD bank names (bsc#1128415).
- x86/mce: Handle varying MCA bank counts (bsc#1128415).
- x86/msr-index: Cleanup bit defines (bsc#1111331).
- x86/pci, x86/amd_nb: Add Hygon Dhyana support to pci and northbridge ().
- x86/pci: Fixup RTIT_BAR of Intel Denverton Trace Hub (bsc#1120318).
- x86/perf/amd: Remove need to check 'running' bit in NMI handler (bsc#1131438).
- x86/perf/amd: Resolve NMI latency issues for active PMCs (bsc#1131438).
- x86/perf/amd: Resolve race condition when disabling PMC (bsc#1131438).
- x86/smpboot: Do not use BSP INIT delay and MWAIT to idle on Dhyana ().
- x86/speculation/mds: Fix documentation typo (bsc#1135642).
- x86/speculation: Prevent deadlock on ssb_state::lock (bsc#1114279).
- x86/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
- x86/tsc: Force inlining of cyc2ns bits (bsc#1052904).
- x86/xen: Add Hygon Dhyana support to Xen ().
- x86_64: Add gap to int3 to allow for call emulation (bsc#1099658).
- x86_64: Allow breakpoints to emulate call instructions (bsc#1099658).
- xen-netback: do not populate the hash cache on XenBus disconnect (networking-stable-19_03_07).
- xen-netback: fix occasional leak of grant ref mappings under memory pressure (networking-stable-19_03_07).
- xen: Prevent buffer overflow in privcmd ioctl (bsc#1065600).
- xenbus: drop useless LIST_HEAD in xenbus_write_watch() and xenbus_file_write() (bsc#1065600).
- xfrm6: avoid potential infinite loop in _decode_session6() (git-fixes).
- xfrm6: call kfree_skb when skb is toobig (git-fixes).
- xfrm: do not call rcu_read_unlock when afinfo is NULL in xfrm_get_tos (git-fixes).
- xfrm: fix 'passing zero to ERR_PTR()' warning (git-fixes).
- xfrm: Fix ESN sequence number handling for IPsec GSO packets (git-fixes).
- xfrm: fix missing dst_release() after policy blocking lbcast and multicast (git-fixes).
- xfrm: fix rcu_read_unlock usage in xfrm_local_error (git-fixes).
- xfrm: Fix stack-out-of-bounds read on socket policy lookup (git-fixes).
- xfrm: fix xfrm_do_migrate() with AEAD e.g(AES-GCM) (git-fixes).
- xfrm: reset crypto_done when iterating over multiple input xfrms (git-fixes).
- xfrm: reset transport header back to network header after all input transforms ahave been applied (git-fixes).
- xfrm: Return error on unknown encap_type in init_state (git-fixes).
- xfrm: Validate address prefix lengths in the xfrm selector (git-fixes).
- xfrm_user: prevent leaking 2 bytes of kernel memory (git-fixes).
- xfs: add log item pinning error injection tag (bsc#1114427).
- xfs: add the ability to join a held buffer to a defer_ops (bsc#1133674).
- xfs: allow xfs_lock_two_inodes to take different EXCL/SHARED modes (bsc#1132370, bsc#1132219).
- xfs: buffer lru reference count error injection tag (bsc#1114427).
- xfs: call xfs_qm_dqattach before performing reflink operations (bsc#1132368, bsc#1132219).
- xfs: cap the length of deduplication requests (bsc#1132373, bsc#1132219).
- xfs: check _btree_check_block value (bsc#1123663).
- xfs: clean up xfs_reflink_remap_blocks call site (bsc#1132413, bsc#1132219).
- xfs: convert drop_writes to use the errortag mechanism (bsc#1114427).
- xfs: create block pointer check functions (bsc#1123663).
- xfs: create inode pointer verifiers (bsc#1114427).
- xfs: detect and fix bad summary counts at mount (bsc#1114427).
- xfs: export _inobt_btrec_to_irec and _ialloc_cluster_alignment for scrub (bsc#1114427).
- xfs: export various function for the online scrubber (bsc#1123663).
- xfs: expose errortag knobs via sysfs (bsc#1114427).
- xfs: fix data corruption w/ unaligned dedupe ranges (bsc#1132405, bsc#1132219).
- xfs: fix data corruption w/ unaligned reflink ranges (bsc#1132407, bsc#1132219).
- xfs: fix pagecache truncation prior to reflink (bsc#1132412, bsc#1132219).
- xfs: fix reporting supported extra file attributes for statx() (bsc#1133529).
- xfs: fix unused variable warning in xfs_buf_set_ref() (bsc#1114427).
- xfs: flush removing page cache in xfs_reflink_remap_prep (bsc#1132414, bsc#1132219).
- xfs: force summary counter recalc at next mount (bsc#1114427).
- xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (bsc#1133675).
- xfs: kill meaningless variable 'zero' (bsc#1106011).
- xfs: make errortag a per-mountpoint structure (bsc#1123663).
- xfs: move error injection tags into their own file (bsc#1114427).
- xfs: only grab shared inode locks for source file during reflink (bsc#1132372, bsc#1132219).
- xfs: prepare xfs_break_layouts() for another layout type (bsc#1106011).
- xfs: prepare xfs_break_layouts() to be called with XFS_MMAPLOCK_EXCL (bsc#1106011).
- xfs: refactor btree block header checking functions (bsc#1123663).
- xfs: refactor btree pointer checks (bsc#1123663).
- xfs: refactor clonerange preparation into a separate helper (bsc#1132402, bsc#1132219).
- xfs: refactor unmount record write (bsc#1114427).
- xfs: refactor xfs_trans_roll (bsc#1133667).
- xfs: reflink find shared should take a transaction (bsc#1132226, bsc#1132219).
- xfs: reflink should break pnfs leases before sharing blocks (bsc#1132369, bsc#1132219).
- xfs: remove dest file's post-eof preallocations before reflinking (bsc#1132365, bsc#1132219).
- xfs: remove the ip argument to xfs_defer_finish (bsc#1133672).
- xfs: remove unneeded parameter from XFS_TEST_ERROR (bsc#1123663).
- xfs: remove xfs_zero_range (bsc#1106011).
- xfs: rename MAXPATHLEN to XFS_SYMLINK_MAXLEN (bsc#1123663).
- xfs: rename xfs_defer_join to xfs_defer_ijoin (bsc#1133668).
- xfs: replace log_badcrc_factor knob with error injection tag (bsc#1114427).
- xfs: sanity-check the unused space before trying to use it (bsc#1123663).
- xfs: serialize unaligned dio writes against all other dio writes (bsc#1134936).
- xfs: update ctime and remove suid before cloning files (bsc#1132404, bsc#1132219).
- xfs: zero posteof blocks when cloning above eof (bsc#1132403, bsc#1132219).
- xsk: export xdp_get_umem_from_qid (jsc#SLE-4797).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-18"/>
	<updated date="2019-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1012382">SUSE bug 1012382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052904">SUSE bug 1052904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053043">SUSE bug 1053043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055121">SUSE bug 1055121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063638">SUSE bug 1063638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068546">SUSE bug 1068546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070872">SUSE bug 1070872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075020">SUSE bug 1075020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082387">SUSE bug 1082387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085535">SUSE bug 1085535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085536">SUSE bug 1085536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086657">SUSE bug 1086657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088804">SUSE bug 1088804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093389">SUSE bug 1093389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097583">SUSE bug 1097583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097584">SUSE bug 1097584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097585">SUSE bug 1097585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097586">SUSE bug 1097586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097587">SUSE bug 1097587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097588">SUSE bug 1097588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099658">SUSE bug 1099658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103186">SUSE bug 1103186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103259">SUSE bug 1103259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106011">SUSE bug 1106011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106284">SUSE bug 1106284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108193">SUSE bug 1108193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108838">SUSE bug 1108838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108937">SUSE bug 1108937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110946">SUSE bug 1110946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111331">SUSE bug 1111331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111696">SUSE bug 1111696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112063">SUSE bug 1112063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112128">SUSE bug 1112128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114427">SUSE bug 1114427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114542">SUSE bug 1114542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114638">SUSE bug 1114638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115688">SUSE bug 1115688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117114">SUSE bug 1117114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117158">SUSE bug 1117158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117561">SUSE bug 1117561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118139">SUSE bug 1118139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119680">SUSE bug 1119680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119843">SUSE bug 1119843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120091">SUSE bug 1120091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120318">SUSE bug 1120318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120423">SUSE bug 1120423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120566">SUSE bug 1120566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120843">SUSE bug 1120843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120902">SUSE bug 1120902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122767">SUSE bug 1122767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122776">SUSE bug 1122776</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123454">SUSE bug 1123454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123663">SUSE bug 1123663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124503">SUSE bug 1124503</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124839">SUSE bug 1124839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126356">SUSE bug 1126356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126704">SUSE bug 1126704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127175">SUSE bug 1127175</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127374">SUSE bug 1127374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127616">SUSE bug 1127616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128052">SUSE bug 1128052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128415">SUSE bug 1128415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128544">SUSE bug 1128544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128904">SUSE bug 1128904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128971">SUSE bug 1128971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128979">SUSE bug 1128979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129138">SUSE bug 1129138</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129273">SUSE bug 1129273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129497">SUSE bug 1129497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129693">SUSE bug 1129693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129845">SUSE bug 1129845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130195">SUSE bug 1130195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130425">SUSE bug 1130425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130527">SUSE bug 1130527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130567">SUSE bug 1130567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130579">SUSE bug 1130579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130699">SUSE bug 1130699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130937">SUSE bug 1130937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130972">SUSE bug 1130972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131326">SUSE bug 1131326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131427">SUSE bug 1131427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131438">SUSE bug 1131438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131451">SUSE bug 1131451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131467">SUSE bug 1131467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131488">SUSE bug 1131488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131530">SUSE bug 1131530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131565">SUSE bug 1131565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131574">SUSE bug 1131574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131587">SUSE bug 1131587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131659">SUSE bug 1131659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131673">SUSE bug 1131673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131847">SUSE bug 1131847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131848">SUSE bug 1131848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131851">SUSE bug 1131851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131900">SUSE bug 1131900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131934">SUSE bug 1131934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131935">SUSE bug 1131935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132044">SUSE bug 1132044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132219">SUSE bug 1132219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132226">SUSE bug 1132226</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132227">SUSE bug 1132227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132365">SUSE bug 1132365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132368">SUSE bug 1132368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132369">SUSE bug 1132369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132370">SUSE bug 1132370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132372">SUSE bug 1132372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132373">SUSE bug 1132373</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132384">SUSE bug 1132384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132397">SUSE bug 1132397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132402">SUSE bug 1132402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132403">SUSE bug 1132403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132404">SUSE bug 1132404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132405">SUSE bug 1132405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132407">SUSE bug 1132407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132411">SUSE bug 1132411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132412">SUSE bug 1132412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132413">SUSE bug 1132413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132414">SUSE bug 1132414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132426">SUSE bug 1132426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132527">SUSE bug 1132527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132531">SUSE bug 1132531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132555">SUSE bug 1132555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132558">SUSE bug 1132558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132561">SUSE bug 1132561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132562">SUSE bug 1132562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132563">SUSE bug 1132563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132564">SUSE bug 1132564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132570">SUSE bug 1132570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132571">SUSE bug 1132571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132572">SUSE bug 1132572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132589">SUSE bug 1132589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132618">SUSE bug 1132618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132673">SUSE bug 1132673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132681">SUSE bug 1132681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132726">SUSE bug 1132726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132828">SUSE bug 1132828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132894">SUSE bug 1132894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132943">SUSE bug 1132943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132982">SUSE bug 1132982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133005">SUSE bug 1133005</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133016">SUSE bug 1133016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133094">SUSE bug 1133094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133095">SUSE bug 1133095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133115">SUSE bug 1133115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133149">SUSE bug 1133149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133176">SUSE bug 1133176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133188">SUSE bug 1133188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133190">SUSE bug 1133190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133320">SUSE bug 1133320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133486">SUSE bug 1133486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133529">SUSE bug 1133529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133547">SUSE bug 1133547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133584">SUSE bug 1133584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133593">SUSE bug 1133593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133612">SUSE bug 1133612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133616">SUSE bug 1133616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133667">SUSE bug 1133667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133668">SUSE bug 1133668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133672">SUSE bug 1133672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133674">SUSE bug 1133674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133675">SUSE bug 1133675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133698">SUSE bug 1133698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133702">SUSE bug 1133702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133731">SUSE bug 1133731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133769">SUSE bug 1133769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133772">SUSE bug 1133772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133774">SUSE bug 1133774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133778">SUSE bug 1133778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133779">SUSE bug 1133779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133780">SUSE bug 1133780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133825">SUSE bug 1133825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133850">SUSE bug 1133850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133851">SUSE bug 1133851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133852">SUSE bug 1133852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133897">SUSE bug 1133897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134160">SUSE bug 1134160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134162">SUSE bug 1134162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134199">SUSE bug 1134199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134200">SUSE bug 1134200</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134201">SUSE bug 1134201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134202">SUSE bug 1134202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134203">SUSE bug 1134203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134204">SUSE bug 1134204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134205">SUSE bug 1134205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134223">SUSE bug 1134223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134354">SUSE bug 1134354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134393">SUSE bug 1134393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134397">SUSE bug 1134397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134459">SUSE bug 1134459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134460">SUSE bug 1134460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134461">SUSE bug 1134461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134597">SUSE bug 1134597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134600">SUSE bug 1134600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134607">SUSE bug 1134607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134618">SUSE bug 1134618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134651">SUSE bug 1134651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134671">SUSE bug 1134671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134760">SUSE bug 1134760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134806">SUSE bug 1134806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134810">SUSE bug 1134810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134813">SUSE bug 1134813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134848">SUSE bug 1134848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134936">SUSE bug 1134936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134945">SUSE bug 1134945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134946">SUSE bug 1134946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134947">SUSE bug 1134947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134948">SUSE bug 1134948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134949">SUSE bug 1134949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134950">SUSE bug 1134950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134951">SUSE bug 1134951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134952">SUSE bug 1134952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134953">SUSE bug 1134953</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134972">SUSE bug 1134972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134974">SUSE bug 1134974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134975">SUSE bug 1134975</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134980">SUSE bug 1134980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134981">SUSE bug 1134981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134983">SUSE bug 1134983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134987">SUSE bug 1134987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134989">SUSE bug 1134989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134990">SUSE bug 1134990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134994">SUSE bug 1134994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134995">SUSE bug 1134995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134998">SUSE bug 1134998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134999">SUSE bug 1134999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135006">SUSE bug 1135006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135007">SUSE bug 1135007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135008">SUSE bug 1135008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135018">SUSE bug 1135018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135021">SUSE bug 1135021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135024">SUSE bug 1135024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135026">SUSE bug 1135026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135027">SUSE bug 1135027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135028">SUSE bug 1135028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135029">SUSE bug 1135029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135031">SUSE bug 1135031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135033">SUSE bug 1135033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135034">SUSE bug 1135034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135035">SUSE bug 1135035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135036">SUSE bug 1135036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135037">SUSE bug 1135037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135038">SUSE bug 1135038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135039">SUSE bug 1135039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135041">SUSE bug 1135041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135042">SUSE bug 1135042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135044">SUSE bug 1135044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135045">SUSE bug 1135045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135046">SUSE bug 1135046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135047">SUSE bug 1135047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135049">SUSE bug 1135049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135051">SUSE bug 1135051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135052">SUSE bug 1135052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135053">SUSE bug 1135053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135055">SUSE bug 1135055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135056">SUSE bug 1135056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135058">SUSE bug 1135058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135100">SUSE bug 1135100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135120">SUSE bug 1135120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135278">SUSE bug 1135278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135281">SUSE bug 1135281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135309">SUSE bug 1135309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135312">SUSE bug 1135312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135314">SUSE bug 1135314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135315">SUSE bug 1135315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135316">SUSE bug 1135316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135320">SUSE bug 1135320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135323">SUSE bug 1135323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135330">SUSE bug 1135330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135492">SUSE bug 1135492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135542">SUSE bug 1135542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135556">SUSE bug 1135556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135603">SUSE bug 1135603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135661">SUSE bug 1135661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135758">SUSE bug 1135758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136188">SUSE bug 1136188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136206">SUSE bug 1136206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136215">SUSE bug 1136215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136345">SUSE bug 1136345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136347">SUSE bug 1136347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136348">SUSE bug 1136348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136353">SUSE bug 1136353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136424">SUSE bug 1136424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136428">SUSE bug 1136428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136430">SUSE bug 1136430</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136432">SUSE bug 1136432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136434">SUSE bug 1136434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136435">SUSE bug 1136435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136438">SUSE bug 1136438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136439">SUSE bug 1136439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136456">SUSE bug 1136456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136469">SUSE bug 1136469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136477">SUSE bug 1136477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136478">SUSE bug 1136478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136498">SUSE bug 1136498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136573">SUSE bug 1136573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136586">SUSE bug 1136586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136881">SUSE bug 1136881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136935">SUSE bug 1136935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136990">SUSE bug 1136990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137151">SUSE bug 1137151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137152">SUSE bug 1137152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137153">SUSE bug 1137153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137162">SUSE bug 1137162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137201">SUSE bug 1137201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137224">SUSE bug 1137224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137232">SUSE bug 1137232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137233">SUSE bug 1137233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137236">SUSE bug 1137236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137372">SUSE bug 1137372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137429">SUSE bug 1137429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137444">SUSE bug 1137444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137586">SUSE bug 1137586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137739">SUSE bug 1137739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137752">SUSE bug 1137752</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138291">SUSE bug 1138291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138293">SUSE bug 1138293</bugzilla>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16880/">CVE-2018-16880</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7191/">CVE-2018-7191</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10124/">CVE-2019-10124</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11085/">CVE-2019-11085</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-11477/">CVE-2019-11477</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11478/">CVE-2019-11478</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11479/">CVE-2019-11479</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11486/">CVE-2019-11486</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11487/">CVE-2019-11487</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11811/">CVE-2019-11811</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11815/">CVE-2019-11815</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11833/">CVE-2019-11833</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11884/">CVE-2019-11884</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-12382/">CVE-2019-12382</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12818/">CVE-2019-12818</cve>
	<cve impact="low" cvss3="3.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12819/">CVE-2019-12819</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3846/">CVE-2019-3846</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3882/">CVE-2019-3882</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5489/">CVE-2019-5489</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8564/">CVE-2019-8564</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9003/">CVE-2019-9003</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9500/">CVE-2019-9500</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9503/">CVE-2019-9503</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491427" comment="kernel-default-4.12.14-197.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491428" comment="kernel-default-base-4.12.14-197.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491429" comment="kernel-default-devel-4.12.14-197.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491430" comment="kernel-default-man-4.12.14-197.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491431" comment="kernel-devel-4.12.14-197.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491432" comment="kernel-macros-4.12.14-197.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491433" comment="kernel-zfcpdump-4.12.14-197.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137716" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1125601" ref_url="https://bugzilla.suse.com/1125601" source="BUGZILLA"/>
		<reference ref_id="1130245" ref_url="https://bugzilla.suse.com/1130245" source="BUGZILLA"/>
		<reference ref_id="1134452" ref_url="https://bugzilla.suse.com/1134452" source="BUGZILLA"/>
		<reference ref_id="1134697" ref_url="https://bugzilla.suse.com/1134697" source="BUGZILLA"/>
		<reference ref_id="1137815" ref_url="https://bugzilla.suse.com/1137815" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12435" ref_url="https://www.suse.com/security/cve/CVE-2019-12435/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005589.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

Security issues fixed:

- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).

Other issues fixed:

- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).
- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).
- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)
- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-20"/>
	<updated date="2019-06-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1125601">SUSE bug 1125601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130245">SUSE bug 1130245</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134452">SUSE bug 1134452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134697">SUSE bug 1134697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137815">SUSE bug 1137815</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12435/">CVE-2019-12435</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491434" comment="libdcerpc-binding0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491435" comment="libdcerpc-binding0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491436" comment="libdcerpc-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491437" comment="libdcerpc-samr-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491438" comment="libdcerpc-samr0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491439" comment="libdcerpc0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491440" comment="libdcerpc0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491441" comment="libndr-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491442" comment="libndr-krb5pac-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491443" comment="libndr-krb5pac0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491444" comment="libndr-krb5pac0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491445" comment="libndr-nbt-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491446" comment="libndr-nbt0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491447" comment="libndr-nbt0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491448" comment="libndr-standard-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491449" comment="libndr-standard0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491450" comment="libndr-standard0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491451" comment="libndr0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491452" comment="libndr0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491453" comment="libnetapi-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491454" comment="libnetapi0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491455" comment="libnetapi0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491456" comment="libsamba-credentials-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491457" comment="libsamba-credentials0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491458" comment="libsamba-credentials0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491459" comment="libsamba-errors-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491460" comment="libsamba-errors0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491461" comment="libsamba-errors0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491462" comment="libsamba-hostconfig-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491463" comment="libsamba-hostconfig0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491464" comment="libsamba-hostconfig0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491465" comment="libsamba-passdb-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491466" comment="libsamba-passdb0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491467" comment="libsamba-passdb0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491468" comment="libsamba-policy-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491469" comment="libsamba-policy-python3-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491470" comment="libsamba-policy0-python3-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491471" comment="libsamba-util-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491472" comment="libsamba-util0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491473" comment="libsamba-util0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491474" comment="libsamdb-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491475" comment="libsamdb0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491476" comment="libsamdb0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491477" comment="libsmbclient-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491478" comment="libsmbclient0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491479" comment="libsmbconf-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491480" comment="libsmbconf0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491481" comment="libsmbconf0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491482" comment="libsmbldap-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491483" comment="libsmbldap2-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491484" comment="libsmbldap2-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491485" comment="libtevent-util-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491486" comment="libtevent-util0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491487" comment="libtevent-util0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491488" comment="libwbclient-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491489" comment="libwbclient0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491490" comment="libwbclient0-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491491" comment="samba-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491492" comment="samba-client-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491493" comment="samba-core-devel-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491494" comment="samba-libs-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491495" comment="samba-libs-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491496" comment="samba-libs-python3-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491497" comment="samba-python3-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491498" comment="samba-winbind-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491499" comment="samba-winbind-32bit-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137717" version="1" class="patch">
	<metadata>
		<title>Security update for glib2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1103678" ref_url="https://bugzilla.suse.com/1103678" source="BUGZILLA"/>
		<reference ref_id="1137001" ref_url="https://bugzilla.suse.com/1137001" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12450" ref_url="https://www.suse.com/security/cve/CVE-2019-12450/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005599.html" source="SUSE-SU"/>
		<description>
This update for glib2 fixes the following issues:

Security issue fixed:    

- CVE-2019-12450: Fixed an improper file permission when copy operation
  takes place (bsc#1137001).   

Other issue addressed:    

- glib2 was handling an UNKNOWN connectivity state from NetworkManager as if there
  was a connection thus giving false positives to PackageKit (bsc#1103678)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-21"/>
	<updated date="2019-06-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1103678">SUSE bug 1103678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137001">SUSE bug 1137001</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-12450/">CVE-2019-12450</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490222" comment="glib2-devel-2.54.3-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490223" comment="glib2-lang-2.54.3-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490224" comment="glib2-tools-2.54.3-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490225" comment="libgio-2_0-0-2.54.3-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490226" comment="libgio-2_0-0-32bit-2.54.3-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490227" comment="libglib-2_0-0-2.54.3-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490228" comment="libglib-2_0-0-32bit-2.54.3-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490229" comment="libgmodule-2_0-0-2.54.3-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490230" comment="libgmodule-2_0-0-32bit-2.54.3-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490231" comment="libgobject-2_0-0-2.54.3-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490232" comment="libgobject-2_0-0-32bit-2.54.3-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490233" comment="libgthread-2_0-0-2.54.3-4.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137718" version="1" class="patch">
	<metadata>
		<title>Security update for dbus-1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1137832" ref_url="https://bugzilla.suse.com/1137832" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12749" ref_url="https://www.suse.com/security/cve/CVE-2019-12749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1595-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005596.html" source="SUSE-SU"/>
		<description>
This update for dbus-1 fixes the following issues:

Security issue fixed:	  

- CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which 
  could have allowed local attackers to bypass authentication (bsc#1137832).   
  		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-21"/>
	<updated date="2019-06-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1137832">SUSE bug 1137832</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-12749/">CVE-2019-12749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491500" comment="dbus-1-1.12.2-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491501" comment="dbus-1-devel-1.12.2-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491502" comment="dbus-1-x11-1.12.2-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491503" comment="libdbus-1-3-1.12.2-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491504" comment="libdbus-1-3-32bit-1.12.2-8.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137719" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1136021" ref_url="https://bugzilla.suse.com/1136021" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2019:1607-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005610.html" source="SUSE-SU"/>
		<description>
This update for wireshark to version 2.4.15 fixes the following issues:

Security issue fixed:

- Fixed a denial of service in the dissection engine (bsc#1136021). 
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-21"/>
	<updated date="2019-06-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1136021">SUSE bug 1136021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490239" comment="libwireshark9-2.4.15-3.28.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490240" comment="libwiretap7-2.4.15-3.28.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490241" comment="libwscodecs1-2.4.15-3.28.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490242" comment="libwsutil8-2.4.15-3.28.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490243" comment="wireshark-2.4.15-3.28.7 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137720" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1138301" ref_url="https://bugzilla.suse.com/1138301" source="BUGZILLA"/>
		<reference ref_id="1138302" ref_url="https://bugzilla.suse.com/1138302" source="BUGZILLA"/>
		<reference ref_id="1138303" ref_url="https://bugzilla.suse.com/1138303" source="BUGZILLA"/>
		<reference ref_id="1138305" ref_url="https://bugzilla.suse.com/1138305" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10161" ref_url="https://www.suse.com/security/cve/CVE-2019-10161/" source="CVE"/>
		<reference ref_id="CVE-2019-10166" ref_url="https://www.suse.com/security/cve/CVE-2019-10166/" source="CVE"/>
		<reference ref_id="CVE-2019-10167" ref_url="https://www.suse.com/security/cve/CVE-2019-10167/" source="CVE"/>
		<reference ref_id="CVE-2019-10168" ref_url="https://www.suse.com/security/cve/CVE-2019-10168/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005615.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:

Security issues fixed: 	  

- CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path
  parameter pointing anywhere on the system and potentially leading to execution 
  of a malicious file with root privileges by libvirtd (bsc#1138301). 
- CVE-2019-10166: Fixed an issue with virDomainManagedSaveDefineXML which could have 
  been used to alter the domain's config used for managedsave or execute arbitrary 
  emulator binaries (bsc#1138302).
- CVE-2019-10167: Fixed an issue with virConnectGetDomainCapabilities API which 
  could have been used to execute arbitrary emulators (bsc#1138303).
- CVE-2019-10168: Fixed an issue with virConnect*HypervisorCPU API which   
  could have been used to execute arbitrary emulators (bsc#1138305).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-21"/>
	<updated date="2019-06-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1138301">SUSE bug 1138301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138302">SUSE bug 1138302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138303">SUSE bug 1138303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138305">SUSE bug 1138305</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10161/">CVE-2019-10161</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10166/">CVE-2019-10166</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10167/">CVE-2019-10167</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10168/">CVE-2019-10168</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491505" comment="libvirt-libs-5.1.0-8.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137721" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1094555" ref_url="https://bugzilla.suse.com/1094555" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1128432" ref_url="https://bugzilla.suse.com/1128432" source="BUGZILLA"/>
		<reference ref_id="1134730" ref_url="https://bugzilla.suse.com/1134730" source="BUGZILLA"/>
		<reference ref_id="1134738" ref_url="https://bugzilla.suse.com/1134738" source="BUGZILLA"/>
		<reference ref_id="1135153" ref_url="https://bugzilla.suse.com/1135153" source="BUGZILLA"/>
		<reference ref_id="1135296" ref_url="https://bugzilla.suse.com/1135296" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1136156" ref_url="https://bugzilla.suse.com/1136156" source="BUGZILLA"/>
		<reference ref_id="1136157" ref_url="https://bugzilla.suse.com/1136157" source="BUGZILLA"/>
		<reference ref_id="1136271" ref_url="https://bugzilla.suse.com/1136271" source="BUGZILLA"/>
		<reference ref_id="1136333" ref_url="https://bugzilla.suse.com/1136333" source="BUGZILLA"/>
		<reference ref_id="1137103" ref_url="https://bugzilla.suse.com/1137103" source="BUGZILLA"/>
		<reference ref_id="1137194" ref_url="https://bugzilla.suse.com/1137194" source="BUGZILLA"/>
		<reference ref_id="1137366" ref_url="https://bugzilla.suse.com/1137366" source="BUGZILLA"/>
		<reference ref_id="1137884" ref_url="https://bugzilla.suse.com/1137884" source="BUGZILLA"/>
		<reference ref_id="1137985" ref_url="https://bugzilla.suse.com/1137985" source="BUGZILLA"/>
		<reference ref_id="1138263" ref_url="https://bugzilla.suse.com/1138263" source="BUGZILLA"/>
		<reference ref_id="1138336" ref_url="https://bugzilla.suse.com/1138336" source="BUGZILLA"/>
		<reference ref_id="1138374" ref_url="https://bugzilla.suse.com/1138374" source="BUGZILLA"/>
		<reference ref_id="1138375" ref_url="https://bugzilla.suse.com/1138375" source="BUGZILLA"/>
		<reference ref_id="1138589" ref_url="https://bugzilla.suse.com/1138589" source="BUGZILLA"/>
		<reference ref_id="1138681" ref_url="https://bugzilla.suse.com/1138681" source="BUGZILLA"/>
		<reference ref_id="1138719" ref_url="https://bugzilla.suse.com/1138719" source="BUGZILLA"/>
		<reference ref_id="1138732" ref_url="https://bugzilla.suse.com/1138732" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16871" ref_url="https://www.suse.com/security/cve/CVE-2018-16871/" source="CVE"/>
		<reference ref_id="CVE-2019-12614" ref_url="https://www.suse.com/security/cve/CVE-2019-12614/" source="CVE"/>
		<reference ref_id="CVE-2019-12817" ref_url="https://www.suse.com/security/cve/CVE-2019-12817/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005658.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

This update adds support for the Hygon Dhyana CPU (fate#327735).

The following security bugs were fixed:

- CVE-2019-12614: An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c. There was an unchecked kstrdup of prop-&gt;name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash) (bnc#1137194).
- CVE-2018-16871: A NULL pointer dereference due to an anomalized NFS message sequence was fixed. (bnc#1137103).
- CVE-2019-12817: On the PowerPC architecture, local attackers could access other users processes memory (bnc#1138263).

The following non-security bugs were fixed:

- 6lowpan: Off by one handling -&gt;nexthdr (bsc#1051510).
- acpi: Add Hygon Dhyana support (fate#327735).
- af_key: unconditionally clone on broadcast (bsc#1051510).
- alsa: firewire-motu: fix destruction of data for isochronous resources (bsc#1051510).
- alsa: hda/realtek - Update headset mode for ALC256 (bsc#1051510).
- alsa: oxfw: allow PCM capture for Stanton SCS.1m (bsc#1051510).
- ASoC: cs42xx8: Add regcache mask dirty (bsc#1051510).
- ASoC: fsl_asrc: Fix the issue about unsupported rate (bsc#1051510).
- audit: fix a memory leak bug (bsc#1051510).
- blk-mq: fix hang caused by freeze/unfreeze sequence (bsc#1128432).
- ceph: factor out ceph_lookup_inode() (bsc#1138681).
- ceph: fix NULL pointer deref when debugging is enabled (bsc#1138681).
- ceph: fix potential use-after-free in ceph_mdsc_build_path (bsc#1138681).
- ceph: flush dirty inodes before proceeding with remount (bsc#1138681).
- ceph: print inode number in __caps_issued_mask debugging messages (bsc#1138681).
- ceph: quota: fix quota subdir mounts (bsc#1138681).
- ceph: remove duplicated filelock ref increase (bsc#1138681).
- cfg80211: fix memory leak of wiphy device name (bsc#1051510).
- cpufreq: Add Hygon Dhyana support (fate#327735).
- cpufreq: AMD: Ignore the check for ProcFeedback in ST/CZ  (fate#327735).
- cpu/topology: Export die_id (jsc#SLE-5454).
- Do not restrict NFSv4.2 on openSUSE (bsc#1138719).
- drbd: Avoid Clang warning about pointless switch statment (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote (bsc#1051510).
- drivers: depend on HAS_IOMEM for devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers: fix a typo in the kernel doc for devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers: provide devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers/rapidio/devices/rio_mport_cdev.c: fix resource leak in error handling path in 'rio_dma_transfer()' (bsc#1051510).
- drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen() (bsc#1051510).
- drivers: thermal: tsens: Do not print error message on -EPROBE_DEFER (bsc#1051510).
- drm: add fallback override/firmware EDID modes workaround (bsc#1111666).
- drm/amd/display: Use plane-&gt;color_space for dpp if specified (bsc#1111666).
- drm/edid: abstract override/firmware EDID retrieval (bsc#1111666).
- drm/i915: Add new AML_ULX support list (jsc#SLE-4986).
- drm/i915: Add new ICL PCI ID (jsc#SLE-4986).
- drm/i915/aml: Add new Amber Lake PCI ID (jsc#SLE-4986).
- drm/i915: Apply correct ddi translation table for AML device (jsc#SLE-4986).
- drm/i915: Attach the pci match data to the device upon creation (jsc#SLE-4986).
- drm/i915/cfl: Adding another PCI Device ID (jsc#SLE-4986).
- drm/i915/cml: Add CML PCI IDS (jsc#SLE-4986).
- drm/i915: Fix uninitialized mask in intel_device_info_subplatform_init (jsc#SLE-4986).
- drm/i915/icl: Adding few more device IDs for Ice Lake (jsc#SLE-4986).
- drm/i915: Introduce concept of a sub-platform (jsc#SLE-4986).
- drm/i915: Mark AML 0x87CA as ULX (jsc#SLE-4986).
- drm/i915: Move final cleanup of drm_i915_private to i915_driver_destroy (jsc#SLE-4986).
- drm/i915/perf: fix whitelist on Gen10+ (bsc#1051510).
- drm/i915: Remove redundant device id from IS_IRONLAKE_M macro (jsc#SLE-4986).
- drm/i915/sdvo: Implement proper HDMI audio support for SDVO (bsc#1051510).
- drm/i915: Split Pineview device info into desktop and mobile (jsc#SLE-4986).
- drm/i915: Split some PCI ids into separate groups (jsc#SLE-4986).
- drm/i915: start moving runtime device info to a separate struct (jsc#SLE-4986).
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver (bsc#1111666).
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable() (bsc#1111666).
- drm/mediatek: clear num_pipes when unbind driver (bsc#1111666).
- drm/mediatek: fix unbind functions (bsc#1111666).
- drm/mediatek: unbind components in mtk_drm_unbind() (bsc#1111666).
- drm/nouveau/disp/dp: respect sink limits when selecting failsafe link configuration (bsc#1051510).
- drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when encoders change (bsc#1111666).
- drm/nouveau/kms/gv100-: fix spurious window immediate interlocks (bsc#1111666).
- EDAC, amd64: Add Hygon Dhyana support (fate#327735).
- EDAC/mc: Fix edac_mc_find() in case no device is found (bsc#1114279).
- HID: wacom: Add ability to provide explicit battery status info (bsc#1051510).
- HID: wacom: Add support for 3rd generation Intuos BT (bsc#1051510).
- HID: wacom: Add support for Pro Pen slim (bsc#1051510).
- HID: wacom: convert Wacom custom usages to standard HID usages (bsc#1051510).
- HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth (bsc#1051510).
- HID: wacom: Do not report anything prior to the tool entering range (bsc#1051510).
- HID: wacom: Do not set tool type until we're in range (bsc#1051510).
- HID: wacom: fix mistake in printk (bsc#1051510).
- HID: wacom: generic: add the 'Report Valid' usage (bsc#1051510).
- HID: wacom: generic: Ignore HID_DG_BATTERYSTRENTH == 0 (bsc#1051510).
- HID: wacom: generic: Leave tool in prox until it completely leaves sense (bsc#1051510).
- HID: wacom: generic: Refactor generic battery handling (bsc#1051510).
- HID: wacom: generic: Report AES battery information (bsc#1051510).
- HID: wacom: generic: Reset events back to zero when pen leaves (bsc#1051510).
- HID: wacom: generic: Scale battery capacity measurements to percentages (bsc#1051510).
- HID: wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (bsc#1051510).
- HID: wacom: generic: Send BTN_TOOL_PEN in prox once the pen enters range (bsc#1051510).
- HID: wacom: generic: Support multiple tools per report (bsc#1051510).
- HID: wacom: generic: Use generic codepath terminology in wacom_wac_pen_report (bsc#1051510).
- HID: wacom: Mark expected switch fall-through (bsc#1051510).
- HID: wacom: Move handling of HID quirks into a dedicated function (bsc#1051510).
- HID: wacom: Move HID fix for AES serial number into wacom_hid_usage_quirk (bsc#1051510).
- HID: wacom: Properly handle AES serial number and tool type (bsc#1051510).
- HID: wacom: Queue events with missing type/serial data for later processing (bsc#1051510).
- HID: wacom: Remove comparison of u8 mode with zero and simplify (bsc#1051510).
- HID: wacom: Replace touch_max fixup code with static touch_max definitions (bsc#1051510).
- HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact (bsc#1051510).
- HID: wacom: Support 'in range' for Intuos/Bamboo tablets where possible (bsc#1051510).
- HID: Wacom: switch Dell canvas into highres mode (bsc#1051510).
- HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary (bsc#1051510).
- HID: wacom: wacom_wac_collection() is local to wacom_wac.c (bsc#1051510).
- HID: wacom: Work around HID descriptor bug in DTK-2451 and DTH-2452 (bsc#1051510).
- hwmon/coretemp: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).
- hwmon/coretemp: Support multi-die/package (jsc#SLE-5454).
- hwmon: (k10temp) 27C Offset needed for Threadripper2  (FATE#327735).
- hwmon: (k10temp) Add Hygon Dhyana support (FATE#327735).
- hwmon: (k10temp) Add support for AMD Ryzen w/ Vega graphics  (FATE#327735).
- hwmon: (k10temp) Add support for family 17h (FATE#327735).
- hwmon: (k10temp) Add support for Stoney Ridge and Bristol  Ridge CPUs (FATE#327735).
- hwmon: (k10temp) Add support for temperature offsets  (FATE#327735).
- hwmon: (k10temp) Add temperature offset for Ryzen 1900X  (FATE#327735).
- hwmon: (k10temp) Add temperature offset for Ryzen 2700X  (FATE#327735).
- hwmon: (k10temp) Correct model name for Ryzen 1600X  (FATE#327735).
- hwmon: (k10temp) Display both Tctl and Tdie (FATE#327735).
- hwmon: (k10temp) Fix reading critical temperature register  (FATE#327735).
- hwmon: (k10temp) Make function get_raw_temp static  (FATE#327735).
- hwmon: (k10temp) Move chip specific code into probe function  (FATE#327735).
- hwmon: (k10temp) Only apply temperature offset if result is  positive (FATE#327735).
- hwmon: (k10temp) Support all Family 15h Model 6xh and Model  7xh processors (FATE#327735).
- hwmon: k10temp: Support Threadripper 2920X, 2970WX; simplify  offset table (FATE#327735).
- hwmon: (k10temp) Use API function to access System Management  Network (FATE#327735).
- hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs  (FATE#327735).
- i2c-piix4: Add Hygon Dhyana SMBus support (FATE#327735).
- ibmveth: Update ethtool settings to reflect virtual properties (bsc#1136157, LTC#177197).
- ipv6: fib: Do not assume only nodes hold a reference on routes (bsc#1138732).
- kabi: Mask no_vf_scan in struct pci_dev (jsc#SLE-5803  FATE#327056).
- kabi: s390: enum interruption_class (jsc#SLE-5789 bsc#1134730 LTC#173388).
- kabi: s390: enum interruption_class (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- kabi/severities: Whitelist airq_iv_* (s390-specific)
- kABI workaround for asus-wmi changes (bsc#1051510).
- kABI workaround for the new pci_dev.skip_bus_pm field addition (bsc#1051510).
- kabi: x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).
- kabi: x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).
- kvm: x86: Include CPUID leaf 0x8000001e in kvm's supported CPUID (bsc#1114279).
- kvm: x86: Include multiple indices with CPUID leaf 0x8000001d (bsc#1114279).
- mfd: intel-lpss: Set the device in reset state when init (bsc#1051510).
- mfd: tps65912-spi: Add missing of table registration (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers (bsc#1051510).
- mmc: mmci: Prevent polling for busy detection in IRQ context (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support (bsc#1051510).
- module: Fix livepatch/ftrace module text permissions race  (bsc#1071995 fate#323487).
- new primitive: vmemdup_user() (jsc#SLE-4712 bsc#1136156).
- nl80211: fix station_info pertid memory leak (bsc#1051510).
- {nl,mac}80211: allow 4addr AP operation on crypto controlled devices (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D (bsc#1051510).
- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes (bsc#1051510).
- nvmem: Do not let a NULL cell_id for nvmem_cell_get() crash us (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated function (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read (bsc#1051510).
- nvme: skip nvme_update_disk_info() if the controller is not live (bsc#1128432).
- PCI: Disable VF decoding before pcibios_sriov_disable() updates resources (jsc#SLE-5803).
- PCI/IOV: Add flag so platforms can skip VF scanning  (jsc#SLE-5803 FATE#327056).
- PCI/IOV: Factor out sriov_add_vfs() (jsc#SLE-5803 FATE#327056).
- PCI: PM: Avoid possible suspend-to-idle issue (bsc#1051510).
- perf tools: Add Hygon Dhyana support (fate#327735).
- perf/x86/intel/cstate: Support multi-die/package (jsc#SLE-5454).
- perf/x86/intel/rapl: Cosmetic rename internal variables in response to multi-die/pkg support (jsc#SLE-5454).
- perf/x86/intel/rapl: Support multi-die/package (jsc#SLE-5454).
- perf/x86/intel/uncore: Cosmetic renames in response to multi-die/pkg support (jsc#SLE-5454).
- perf/x86/intel/uncore: Support multi-die/package (jsc#SLE-5454).
- platform/chrome: cros_ec_proto: check for NULL transfer function (bsc#1051510).
- platform_data/mlxreg: Add capability field to core platform data (bsc#1112374).
- platform_data/mlxreg: additions for Mellanox watchdog driver (bsc#1112374).
- platform_data/mlxreg: Document fixes for core platform data (bsc#1112374).
- platform/mellanox: Add new ODM system types to mlx-platform (bsc#1112374).
- platform/mellanox: Add TmFifo driver for Mellanox BlueField Soc (bsc#1136333 jsc#SLE-4994).
- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to remove flow (bsc#1111666).
- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi (bsc#1051510).
- platform/x86: intel_pmc_core: Add ICL platform support (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Add Package cstates residency info (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Avoid a u32 overflow (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Include Reserved IP for LTR (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Mark local function static (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Quirk to ignore XTAL shutdown (jsc#SLE-5226).
- platform/x86: mlx-platform: Add ASIC hotplug device configuration (bsc#1112374).
- platform/x86: mlx-platform: Add definitions for new registers (bsc#1112374).
- platform/x86: mlx-platform: Add extra CPLD for next generation systems (bsc#1112374).
- platform/x86: mlx-platform: Add LED platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlxreg-fan platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlxreg-io platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlx-wdt platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add support for fan capability registers (bsc#1112374).
- platform/x86: mlx-platform: Add support for fan direction register (bsc#1112374).
- platform/x86: mlx-platform: Add support for new VMOD0007 board name (bsc#1112374).
- platform/x86: mlx-platform: Add support for tachometer speed register (bsc#1112374).
- platform/x86: mlx-platform: Add UID LED for the next generation systems (bsc#1112374).
- platform/x86: mlx-platform: Allow mlxreg-io driver activation for more systems (bsc#1112374).
- platform/x86: mlx-platform: Allow mlxreg-io driver activation for new systems (bsc#1112374).
- platform/x86: mlx-platform: Change mlxreg-io configuration for MSN274x systems (bsc#1112374).
- platform/x86: mlx-platform: Convert to use SPDX identifier (bsc#1112374).
- platform/x86: mlx-platform: Fix access mode for fan_dir attribute (bsc#1112374).
- platform/x86: mlx-platform: Fix copy-paste error in mlxplat_init() (bsc#1112374).
- platform/x86: mlx-platform: Fix LED configuration (bsc#1112374).
- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device registration (bsc#1051510).
- platform/x86: mlx-platform: Fix tachometer registers (bsc#1112374).
- platform/x86: mlx-platform: Remove unused define (bsc#1112374).
- platform/x86: mlx-platform: Rename new systems product names (bsc#1112374).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks (bsc#1051510).
- powercap/intel_rapl: Simplify rapl_find_package() (jsc#SLE-5454).
- powercap/intel_rapl: Support multi-die/package (jsc#SLE-5454).
- powercap/intel_rapl: Update RAPL domain name and debug messages (jsc#SLE-5454).
- powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (bsc#1138374, LTC#178199).
- powerpc/pseries: Fix oops in hotplug memory notifier (bsc#1138375, LTC#178204).
- powerpc/pseries/mobility: prevent cpu hotplug during DT update (bsc#1138374, LTC#178199).
- powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (bsc#1138374, LTC#178199).
- power: supply: max14656: fix potential use-before-alloc (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- qmi_wwan: add network device usage statistics for qmimux devices (bsc#1051510).
- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qmi_wwan: add support for QMAP padding in the RX path (bsc#1051510).
- qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode (bsc#1051510).
- qmi_wwan: extend permitted QMAP mux_id value range (bsc#1051510).
- rapidio: fix a NULL pointer dereference when create_workqueue() fails (bsc#1051510).
- RAS/CEC: Convert the timer callback to a workqueue (bsc#1114279).
- RAS/CEC: Fix binary search function (bsc#1114279).
- rbd: do not assert on writes to snapshots (bsc#1137985 bsc#1138681).
- Revert 'ALSA: hda/realtek - Improve the headset mic for Acer Aspire laptops' (bsc#1051510).
- Revert 'HID: wacom: generic: Send BTN_TOOL_PEN in prox once the pen enters range' (bsc#1051510).
- Revert 's390/jump_label: Use 'jdd' constraint on gcc9 (bsc#1138589).' This broke the build with older gcc instead.
- s390/airq: provide cacheline aligned ivs (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/airq: recognize directed interrupts (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/dasd: fix using offset into zero size array error (bsc#1051510).
- s390: enable processes for mio instructions (jsc#SLE-5802  FATE#327055 bsc#1134738 LTC#173387).
- s390/ism: move oddities of device IO to wrapper function  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/jump_label: Use 'jdd' constraint on gcc9 (bsc#1138589).
- s390/pci: add parameter to disable usage of MIO instructions  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: add parameter to force floating irqs (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: clarify interrupt vector usage (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: fix assignment of bus resources (jsc#SLE-5802  FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: fix struct definition for set PCI function  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: gather statistics for floating vs directed irqs  (jsc#SLE-5789 FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: improve bar check (jsc#SLE-5803 FATE#327056).
- s390/pci: map IOV resources (jsc#SLE-5803 FATE#327056).
- s390/pci: mark command line parser data __initdata (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: move everything irq related to pci_irq.c (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: move io address mapping code to pci_insn.c  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: provide support for CPU directed interrupts  (jsc#SLE-5789 FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: provide support for MIO instructions (jsc#SLE-5802  FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: remove stale rc (jsc#SLE-5789 FATE#327042 bsc#1134730  LTC#173388).
- s390/pci: remove unused define (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- s390/pci: skip VF scanning (jsc#SLE-5803 FATE#327056).
- s390/protvirt: add memory sharing for diag 308 set/store  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: block kernel command line alteration  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/qeth: fix race when initializing the IP address table (bsc#1051510).
- s390/qeth: fix VLAN attribute in bridge_hostnotify udev event (bsc#1051510).
- s390/sclp: detect DIRQ facility (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- s390/setup: fix early warning messages (bsc#1051510).
- s390: show statistics for MSI IRQs (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759  FATE#327003 bsc#1135153 LTC#173151).
- s390/virtio: handle find on invalid queue gracefully (bsc#1051510).
- sched/topology: Improve load balancing on AMD EPYC (bsc#1137366).
- scsi: hpsa: bump driver version (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: check for lv removal (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: clean up two indentation issues (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct device id issues (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct device resets (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct ioaccel2 chaining (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct simple mode (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: fix an uninitialized read and dereference of pointer dev (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: mark expected switch fall-throughs (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: remove timeout from TURs (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: switch to generic DMA API (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: Use vmemdup_user to replace the open code (jsc#SLE-4712 bsc#1136156).
- scsi: megaraid_sas: Add support for DEVICE_LIST DCMD in driver (bsc#1136271).
- scsi: megaraid_sas: correct an info message (bsc#1136271).
- scsi: megaraid_sas: driver version update (bsc#1136271).
- scsi: megaraid_sas: Retry reads of outbound_intr_status reg (bsc#1136271).
- scsi: megaraid_sas: Rework code to get PD and LD list (bsc#1136271).
- scsi: megaraid_sas: Rework device add code in AEN path (bsc#1136271).
- scsi: megaraid_sas: Update structures for HOST_DEVICE_LIST DCMD (bsc#1136271).
- scsi: qla2xxx: Fix FC-AL connection target discovery (bsc#1094555).
- scsi: qla2xxx: Fix N2N target discovery with Local loop (bsc#1094555).
- scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (bsc#1135296).
- scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove (bsc#1051510).
- scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host (bsc#1051510).
- scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices (bsc#1051510).
- scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) (bsc#1051510).
- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- SMB3: Fix endian warning (bsc#1137884).
- soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher (bsc#1051510).
- soc: rockchip: Set the proper PWM for rk3288 (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in spi_unregister_master (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: spi-fsl-spi: call spi_finalize_current_message() at the end (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- supported.conf: added mlxbf_tmfifo (bsc#1136333 jsc#SLE-4994)
- thermal: rcar_gen3_thermal: disable interrupt in .remove (bsc#1051510).
- thermal/x86_pkg_temp_thermal: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).
- thermal/x86_pkg_temp_thermal: Support multi-die/package (jsc#SLE-5454).
- tmpfs: fix link accounting when a tmpfile is linked in (bsc#1051510).
- tmpfs: fix uninitialized return value in shmem_link (bsc#1051510).
- tools/cpupower: Add Hygon Dhyana support (fate#327735).
- topology: Create core_cpus and die_cpus sysfs attributes (jsc#SLE-5454).
- topology: Create package_cpus sysfs attribute (jsc#SLE-5454).
- tty: max310x: Fix external crystal register setup (bsc#1051510).
- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- usb: serial: pl2303: fix tranceiver suspend mode (bsc#1135642).
- usb: xhci: avoid null pointer deref when bos field is NULL (bsc#1135642).
- vfio: ccw: only free cp on final interrupt (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference (bsc#1051510).
- video: imsttfb: fix potential NULL pointer dereferences (bsc#1051510).
- virtio_console: initialize vtermno value for ports (bsc#1051510).
- vlan: disable SIOCSHWTSTAMP in container (bsc#1051510).
- watchdog: imx2_wdt: Fix set_timeout for big timeout values (bsc#1051510).
- x86/alternative: Init ideal_nops for Hygon Dhyana (fate#327735).
- x86/amd_nb: Add support for Raven Ridge CPUs (FATE#327735).
- x86/amd_nb: Check vendor in AMD-only functions (fate#327735).
- x86/apic: Add Hygon Dhyana support (fate#327735).
- x86/bugs: Add Hygon Dhyana to the respective mitigation  machinery (fate#327735).
- x86/cpu: Add Icelake model number (jsc#SLE-5226).
- x86/cpu/amd: Do not force the CPB cap when running under a hypervisor (bsc#1114279).
- x86/cpu: Create Hygon Dhyana architecture support file  (fate#327735).
- x86/cpufeatures: Carve out CQM features retrieval (jsc#SLE-5382).
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (jsc#SLE-5382).
- x86/cpufeatures: Enumerate the new AVX512 BFLOAT16 instructions (jsc#SLE-5382).
- x86/cpu: Get cache info and setup cache cpumap for Hygon Dhyana  (fate#327735).
- x86/cpu/hygon: Fix phys_proc_id calculation logic for multi-die processors ().
- x86/cpu/mtrr: Support TOP_MEM2 and get MTRR number  (fate#327735).
- x86/events: Add Hygon Dhyana support to PMU infrastructure  (fate#327735).
- x86/kvm: Add Hygon Dhyana support to KVM (fate#327735).
- x86/mce: Add Hygon Dhyana support to the MCA infrastructure  (fate#327735).
- x86/mce: Do not disable MCA banks when offlining a CPU on AMD  (fate#327735).
- x86/mce: Fix machine_check_poll() tests for error types (bsc#1114279).
- x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback (bsc#1114279).
- x86/microcode: Fix microcode hotplug state (bsc#1114279).
- x86/microcode: Fix the ancient deprecated microcode loading method (bsc#1114279).
- x86/mm/mem_encrypt: Disable all instrumentation for early SME setup (bsc#1114279).
- x86/pci, x86/amd_nb: Add Hygon Dhyana support to PCI and  northbridge (fate#327735).
- x86/smpboot: Do not use BSP INIT delay and MWAIT to idle on  Dhyana (fate#327735).
- x86/smpboot: Rename match_die() to match_pkg() (jsc#SLE-5454).
- x86/speculation/mds: Revert CPU buffer clear on double fault exit (bsc#1114279).
- x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).
- x86/topology: Create topology_max_die_per_package() (jsc#SLE-5454).
- x86/topology: Define topology_die_id() (jsc#SLE-5454).
- x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).
- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- x86/xen: Add Hygon Dhyana support to Xen (fate#327735).
- x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die  processors (fate#327735).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-04"/>
	<updated date="2019-07-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094555">SUSE bug 1094555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128432">SUSE bug 1128432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134730">SUSE bug 1134730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134738">SUSE bug 1134738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135153">SUSE bug 1135153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135296">SUSE bug 1135296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136156">SUSE bug 1136156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136157">SUSE bug 1136157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136271">SUSE bug 1136271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136333">SUSE bug 1136333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137103">SUSE bug 1137103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137194">SUSE bug 1137194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137366">SUSE bug 1137366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137884">SUSE bug 1137884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137985">SUSE bug 1137985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138263">SUSE bug 1138263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138336">SUSE bug 1138336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138374">SUSE bug 1138374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138375">SUSE bug 1138375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138589">SUSE bug 1138589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138681">SUSE bug 1138681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138719">SUSE bug 1138719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138732">SUSE bug 1138732</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16871/">CVE-2018-16871</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12614/">CVE-2019-12614</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-12817/">CVE-2019-12817</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491506" comment="kernel-default-4.12.14-197.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491507" comment="kernel-default-base-4.12.14-197.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491508" comment="kernel-default-devel-4.12.14-197.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491509" comment="kernel-default-man-4.12.14-197.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491510" comment="kernel-devel-4.12.14-197.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491511" comment="kernel-macros-4.12.14-197.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491512" comment="kernel-zfcpdump-4.12.14-197.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137722" version="1" class="patch">
	<metadata>
		<title>Security update for libu2f-host, pam_u2f (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1128140" ref_url="https://bugzilla.suse.com/1128140" source="BUGZILLA"/>
		<reference ref_id="1135727" ref_url="https://bugzilla.suse.com/1135727" source="BUGZILLA"/>
		<reference ref_id="1135729" ref_url="https://bugzilla.suse.com/1135729" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12209" ref_url="https://www.suse.com/security/cve/CVE-2019-12209/" source="CVE"/>
		<reference ref_id="CVE-2019-12210" ref_url="https://www.suse.com/security/cve/CVE-2019-12210/" source="CVE"/>
		<reference ref_id="CVE-2019-9578" ref_url="https://www.suse.com/security/cve/CVE-2019-9578/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1750-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005662.html" source="SUSE-SU"/>
		<description>
This update for libu2f-host and pam_u2f to version 1.0.8 fixes the following issues:

Security issues fixed for libu2f-host: 

- CVE-2019-9578: Fixed a memory leak due to a wrong parse of init's response (bsc#1128140).

Security issues fixed for pam_u2f:

- CVE-2019-12209: Fixed an issue where symlinks in the user's directory were followed (bsc#1135729).
- CVE-2019-12210: Fixed file descriptor leaks (bsc#1135727).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-04"/>
	<updated date="2019-07-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1128140">SUSE bug 1128140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135727">SUSE bug 1135727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135729">SUSE bug 1135729</bugzilla>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-12209/">CVE-2019-12209</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12210/">CVE-2019-12210</cve>
	<cve impact="low" cvss3="2.1/CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9578/">CVE-2019-9578</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490252" comment="libu2f-host-devel-1.1.6-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490253" comment="libu2f-host0-1.1.6-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490254" comment="pam_u2f-1.0.8-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137723" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1133291" ref_url="https://bugzilla.suse.com/1133291" source="BUGZILLA"/>
		<reference ref_id="1135715" ref_url="https://bugzilla.suse.com/1135715" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6237" ref_url="https://www.suse.com/security/cve/CVE-2019-6237/" source="CVE"/>
		<reference ref_id="CVE-2019-8571" ref_url="https://www.suse.com/security/cve/CVE-2019-8571/" source="CVE"/>
		<reference ref_id="CVE-2019-8583" ref_url="https://www.suse.com/security/cve/CVE-2019-8583/" source="CVE"/>
		<reference ref_id="CVE-2019-8584" ref_url="https://www.suse.com/security/cve/CVE-2019-8584/" source="CVE"/>
		<reference ref_id="CVE-2019-8586" ref_url="https://www.suse.com/security/cve/CVE-2019-8586/" source="CVE"/>
		<reference ref_id="CVE-2019-8587" ref_url="https://www.suse.com/security/cve/CVE-2019-8587/" source="CVE"/>
		<reference ref_id="CVE-2019-8594" ref_url="https://www.suse.com/security/cve/CVE-2019-8594/" source="CVE"/>
		<reference ref_id="CVE-2019-8595" ref_url="https://www.suse.com/security/cve/CVE-2019-8595/" source="CVE"/>
		<reference ref_id="CVE-2019-8596" ref_url="https://www.suse.com/security/cve/CVE-2019-8596/" source="CVE"/>
		<reference ref_id="CVE-2019-8597" ref_url="https://www.suse.com/security/cve/CVE-2019-8597/" source="CVE"/>
		<reference ref_id="CVE-2019-8601" ref_url="https://www.suse.com/security/cve/CVE-2019-8601/" source="CVE"/>
		<reference ref_id="CVE-2019-8607" ref_url="https://www.suse.com/security/cve/CVE-2019-8607/" source="CVE"/>
		<reference ref_id="CVE-2019-8608" ref_url="https://www.suse.com/security/cve/CVE-2019-8608/" source="CVE"/>
		<reference ref_id="CVE-2019-8609" ref_url="https://www.suse.com/security/cve/CVE-2019-8609/" source="CVE"/>
		<reference ref_id="CVE-2019-8610" ref_url="https://www.suse.com/security/cve/CVE-2019-8610/" source="CVE"/>
		<reference ref_id="CVE-2019-8611" ref_url="https://www.suse.com/security/cve/CVE-2019-8611/" source="CVE"/>
		<reference ref_id="CVE-2019-8615" ref_url="https://www.suse.com/security/cve/CVE-2019-8615/" source="CVE"/>
		<reference ref_id="CVE-2019-8619" ref_url="https://www.suse.com/security/cve/CVE-2019-8619/" source="CVE"/>
		<reference ref_id="CVE-2019-8622" ref_url="https://www.suse.com/security/cve/CVE-2019-8622/" source="CVE"/>
		<reference ref_id="CVE-2019-8623" ref_url="https://www.suse.com/security/cve/CVE-2019-8623/" source="CVE"/>
		<description>
This update for webkit2gtk3 to version 2.24.2 fixes the following issues:

Security issues fixed:

- CVE-2019-6237, CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586,
  CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596, CVE-2019-8597,
  CVE-2019-8601, CVE-2019-8607, CVE-2019-8608, CVE-2019-8609, CVE-2019-8610,
  CVE-2019-8615, CVE-2019-8611, CVE-2019-8619, CVE-2019-8622, CVE-2019-8623 (bsc#1135715).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-08"/>
	<updated date="2019-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1133291">SUSE bug 1133291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135715">SUSE bug 1135715</bugzilla>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6237/">CVE-2019-6237</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8571/">CVE-2019-8571</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8583/">CVE-2019-8583</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8584/">CVE-2019-8584</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8586/">CVE-2019-8586</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8587/">CVE-2019-8587</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8594/">CVE-2019-8594</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8595/">CVE-2019-8595</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8596/">CVE-2019-8596</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8597/">CVE-2019-8597</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8601/">CVE-2019-8601</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8607/">CVE-2019-8607</cve>
	<cve impact="low" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8608/">CVE-2019-8608</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8609/">CVE-2019-8609</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8610/">CVE-2019-8610</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8611/">CVE-2019-8611</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8615/">CVE-2019-8615</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8619/">CVE-2019-8619</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8622/">CVE-2019-8622</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8623/">CVE-2019-8623</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490255" comment="libjavascriptcoregtk-4_0-18-2.24.2-3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490256" comment="libwebkit2gtk-4_0-37-2.24.2-3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490257" comment="libwebkit2gtk3-lang-2.24.2-3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490258" comment="webkit2gtk-4_0-injected-bundles-2.24.2-3.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137724" version="1" class="patch">
	<metadata>
		<title>Security update for zeromq (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1082318" ref_url="https://bugzilla.suse.com/1082318" source="BUGZILLA"/>
		<reference ref_id="1140255" ref_url="https://bugzilla.suse.com/1140255" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13132" ref_url="https://www.suse.com/security/cve/CVE-2019-13132/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005671.html" source="SUSE-SU"/>
		<description>
This update for zeromq fixes the following issues:

- CVE-2019-13132: An unauthenticated remote attacker could have exploited
  a stack overflow vulnerability on a server that is supposed to be protected
  by encryption and authentication to potentially gain a remote code execution.
  (bsc#1140255)

- Correctly mark license files as licence instead of documentation (bsc#1082318)

  		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-08"/>
	<updated date="2019-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1082318">SUSE bug 1082318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140255">SUSE bug 1140255</bugzilla>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13132/">CVE-2019-13132</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490259" comment="libzmq5-4.2.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490260" comment="zeromq-devel-4.2.3-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137725" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1136334" ref_url="https://bugzilla.suse.com/1136334" source="BUGZILLA"/>
		<reference ref_id="1136498" ref_url="https://bugzilla.suse.com/1136498" source="BUGZILLA"/>
		<reference ref_id="1139383" ref_url="https://bugzilla.suse.com/1139383" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9836" ref_url="https://www.suse.com/security/cve/CVE-2019-9836/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005680.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

kernel-firmware was updated to version 20190618:

* cavium: Add firmware for CNN55XX crypto driver.
* linux-firmware: Update firmware file for Intel Bluetooth 22161
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* linux-firmware: Update firmware file for Intel Bluetooth 9260
* linux-firmware: Update AMD SEV firmware (CVE-2019-9836, bsc#1139383)
* linux-firmware: update licence text for Marvell firmware
* linux-firmware: update firmware for mhdp8546
* linux-firmware: rsi: update firmware images for Redpine 9113 chipset
* imx: sdma: update firmware to v3.5/v4.5
* nvidia: update GP10[2467] SEC2 RTOS with the one already used on GP108
* linux-firmware: Update firmware file for Intel Bluetooth 8265
* linux-firmware: Update firmware file for Intel Bluetooth 9260
* linux-firmware: Update firmware file for Intel Bluetooth 9560
* amlogic: add video decoder firmwares
* iwlwifi: update -46 firmwares for 22260 and 9000 series
* iwlwifi: add firmware for 22260 and update 9000 series -46 firmwares
* iwlwifi: add -46.ucode firmwares for 9000 series
* amdgpu: update vega20 to the latest 19.10 firmware
* amdgpu: update vega12 to the latest 19.10 firmware
* amdgpu: update vega10 to the latest 19.10 firmware
* amdgpu: update polaris11 to the latest 19.10 firmware
* amdgpu: update polaris10 to the latest 19.10 firmware
* amdgpu: update raven2 to the latest 19.10 firmware
* amdgpu: update raven to the latest 19.10 firmware
* amdgpu: update picasso to the latest 19.10 firmware
* linux-firmware: update fw for qat devices
* Mellanox: Add new mlxsw_spectrum firmware 13.2000.1122
* drm/i915/firmware: Add ICL HuC v8.4.3238
* drm/i915/firmware: Add ICL GuC v32.0.3
* drm/i915/firmware: Add GLK HuC v03.01.2893
* drm/i915/firmware: Add GLK GuC v32.0.3
* drm/i915/firmware: Add KBL GuC v32.0.3
* drm/i915/firmware: Add SKL GuC v32.0.3
* drm/i915/firmware: Add BXT GuC v32.0.3
* linux-firmware: Add firmware file for Intel Bluetooth 22161
* cxgb4: update firmware to revision 1.23.4.0 (bsc#1136334)
* linux-firmware: Update NXP Management Complex firmware to version 10.14.3
* linux-firmware: add firmware for MT7615E
* mediatek: update MT8173 VPU firmware to v1.1.2 [decoder] Enlarge struct vdec_pic_info to
support more capture buffer plane and capture buffer format change.
* linux-firmware: update Marvell 8797/8997 firmware images
* nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.23
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-09"/>
	<updated date="2019-07-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1136334">SUSE bug 1136334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136498">SUSE bug 1136498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139383">SUSE bug 1139383</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9836/">CVE-2019-9836</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491513" comment="kernel-firmware-20190618-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491514" comment="ucode-amd-20190618-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137726" version="1" class="patch">
	<metadata>
		<title>Security update for ruby-bundled-gems-rpmhelper, ruby2.5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1082007" ref_url="https://bugzilla.suse.com/1082007" source="BUGZILLA"/>
		<reference ref_id="1082008" ref_url="https://bugzilla.suse.com/1082008" source="BUGZILLA"/>
		<reference ref_id="1082009" ref_url="https://bugzilla.suse.com/1082009" source="BUGZILLA"/>
		<reference ref_id="1082010" ref_url="https://bugzilla.suse.com/1082010" source="BUGZILLA"/>
		<reference ref_id="1082011" ref_url="https://bugzilla.suse.com/1082011" source="BUGZILLA"/>
		<reference ref_id="1082014" ref_url="https://bugzilla.suse.com/1082014" source="BUGZILLA"/>
		<reference ref_id="1082058" ref_url="https://bugzilla.suse.com/1082058" source="BUGZILLA"/>
		<reference ref_id="1087433" ref_url="https://bugzilla.suse.com/1087433" source="BUGZILLA"/>
		<reference ref_id="1087434" ref_url="https://bugzilla.suse.com/1087434" source="BUGZILLA"/>
		<reference ref_id="1087436" ref_url="https://bugzilla.suse.com/1087436" source="BUGZILLA"/>
		<reference ref_id="1087437" ref_url="https://bugzilla.suse.com/1087437" source="BUGZILLA"/>
		<reference ref_id="1087440" ref_url="https://bugzilla.suse.com/1087440" source="BUGZILLA"/>
		<reference ref_id="1087441" ref_url="https://bugzilla.suse.com/1087441" source="BUGZILLA"/>
		<reference ref_id="1112530" ref_url="https://bugzilla.suse.com/1112530" source="BUGZILLA"/>
		<reference ref_id="1112532" ref_url="https://bugzilla.suse.com/1112532" source="BUGZILLA"/>
		<reference ref_id="1130028" ref_url="https://bugzilla.suse.com/1130028" source="BUGZILLA"/>
		<reference ref_id="1130611" ref_url="https://bugzilla.suse.com/1130611" source="BUGZILLA"/>
		<reference ref_id="1130617" ref_url="https://bugzilla.suse.com/1130617" source="BUGZILLA"/>
		<reference ref_id="1130620" ref_url="https://bugzilla.suse.com/1130620" source="BUGZILLA"/>
		<reference ref_id="1130622" ref_url="https://bugzilla.suse.com/1130622" source="BUGZILLA"/>
		<reference ref_id="1130623" ref_url="https://bugzilla.suse.com/1130623" source="BUGZILLA"/>
		<reference ref_id="1130627" ref_url="https://bugzilla.suse.com/1130627" source="BUGZILLA"/>
		<reference ref_id="1133790" ref_url="https://bugzilla.suse.com/1133790" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17742" ref_url="https://www.suse.com/security/cve/CVE-2017-17742/" source="CVE"/>
		<reference ref_id="CVE-2018-1000073" ref_url="https://www.suse.com/security/cve/CVE-2018-1000073/" source="CVE"/>
		<reference ref_id="CVE-2018-1000074" ref_url="https://www.suse.com/security/cve/CVE-2018-1000074/" source="CVE"/>
		<reference ref_id="CVE-2018-1000075" ref_url="https://www.suse.com/security/cve/CVE-2018-1000075/" source="CVE"/>
		<reference ref_id="CVE-2018-1000076" ref_url="https://www.suse.com/security/cve/CVE-2018-1000076/" source="CVE"/>
		<reference ref_id="CVE-2018-1000077" ref_url="https://www.suse.com/security/cve/CVE-2018-1000077/" source="CVE"/>
		<reference ref_id="CVE-2018-1000078" ref_url="https://www.suse.com/security/cve/CVE-2018-1000078/" source="CVE"/>
		<reference ref_id="CVE-2018-1000079" ref_url="https://www.suse.com/security/cve/CVE-2018-1000079/" source="CVE"/>
		<reference ref_id="CVE-2018-16395" ref_url="https://www.suse.com/security/cve/CVE-2018-16395/" source="CVE"/>
		<reference ref_id="CVE-2018-16396" ref_url="https://www.suse.com/security/cve/CVE-2018-16396/" source="CVE"/>
		<reference ref_id="CVE-2018-6914" ref_url="https://www.suse.com/security/cve/CVE-2018-6914/" source="CVE"/>
		<reference ref_id="CVE-2018-8777" ref_url="https://www.suse.com/security/cve/CVE-2018-8777/" source="CVE"/>
		<reference ref_id="CVE-2018-8778" ref_url="https://www.suse.com/security/cve/CVE-2018-8778/" source="CVE"/>
		<reference ref_id="CVE-2018-8779" ref_url="https://www.suse.com/security/cve/CVE-2018-8779/" source="CVE"/>
		<reference ref_id="CVE-2018-8780" ref_url="https://www.suse.com/security/cve/CVE-2018-8780/" source="CVE"/>
		<reference ref_id="CVE-2019-8320" ref_url="https://www.suse.com/security/cve/CVE-2019-8320/" source="CVE"/>
		<reference ref_id="CVE-2019-8321" ref_url="https://www.suse.com/security/cve/CVE-2019-8321/" source="CVE"/>
		<reference ref_id="CVE-2019-8322" ref_url="https://www.suse.com/security/cve/CVE-2019-8322/" source="CVE"/>
		<reference ref_id="CVE-2019-8323" ref_url="https://www.suse.com/security/cve/CVE-2019-8323/" source="CVE"/>
		<reference ref_id="CVE-2019-8324" ref_url="https://www.suse.com/security/cve/CVE-2019-8324/" source="CVE"/>
		<reference ref_id="CVE-2019-8325" ref_url="https://www.suse.com/security/cve/CVE-2019-8325/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1804-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005684.html" source="SUSE-SU"/>
		<description>
This update for ruby2.5 and ruby-bundled-gems-rpmhelper fixes the following issues:

Changes in ruby2.5:

Update to 2.5.5 and 2.5.4:

https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/
https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/

Security issues fixed:

- CVE-2019-8320: Delete directory using symlink when
  decompressing tar (bsc#1130627)
- CVE-2019-8321: Escape sequence injection vulnerability in
  verbose  (bsc#1130623)
- CVE-2019-8322: Escape sequence injection vulnerability in gem
  owner  (bsc#1130622)
- CVE-2019-8323: Escape sequence injection vulnerability in API
  response handling  (bsc#1130620)
- CVE-2019-8324: Installing a malicious gem may lead to arbitrary
  code execution  (bsc#1130617)
- CVE-2019-8325: Escape sequence injection vulnerability in
  errors  (bsc#1130611)


Ruby 2.5 was updated to 2.5.3:

This release includes some bug fixes and some security fixes.

Security issues fixed:

- CVE-2018-16396: Tainted flags are not propagated in Array#pack
  and String#unpack with some directives (bsc#1112532)
- CVE-2018-16395: OpenSSL::X509::Name equality check does not
  work correctly (bsc#1112530)

Ruby 2.5 was updated to 2.5.1:

This release includes some bug fixes and some security fixes.

Security issues fixed:

- CVE-2017-17742: HTTP response splitting in WEBrick (bsc#1087434)
- CVE-2018-6914: Unintentional file and directory creation with
  directory traversal in tempfile and tmpdir (bsc#1087441)
- CVE-2018-8777: DoS by large request in WEBrick (bsc#1087436)
- CVE-2018-8778: Buffer under-read in String#unpack (bsc#1087433)
- CVE-2018-8779: Unintentional socket creation by poisoned NUL
  byte in UNIXServer and UNIXSocket (bsc#1087440)
- CVE-2018-8780: Unintentional directory traversal by poisoned
  NUL byte in Dir (bsc#1087437)

- Multiple vulnerabilities in RubyGems were fixed:

  - CVE-2018-1000079: Fixed path traversal issue during gem installation allows to write to arbitrary filesystem locations (bsc#1082058)
  - CVE-2018-1000075: Fixed infinite loop vulnerability due to negative size in tar header causes Denial of Service (bsc#1082014)
  - CVE-2018-1000078: Fixed XSS vulnerability in homepage attribute when displayed via gem server (bsc#1082011)
  - CVE-2018-1000077: Fixed that missing URL validation on spec home attribute allows malicious gem to set an invalid homepage URL (bsc#1082010)
  - CVE-2018-1000076: Fixed improper verification of signatures in tarball allows to install mis-signed gem (bsc#1082009)
  - CVE-2018-1000074: Fixed unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML (bsc#1082008)
  - CVE-2018-1000073: Fixed path traversal when writing to a symlinked basedir outside of the root (bsc#1082007)

Other changes:

- Fixed Net::POPMail methods modify frozen literal when using default arg
- ruby: change over of the Japanese Era to the new emperor May 1st 2019 (bsc#1133790)
- build with PIE support (bsc#1130028)


Changes in ruby-bundled-gems-rpmhelper:

- Add a new helper for bundled ruby gems.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-10"/>
	<updated date="2019-07-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1082007">SUSE bug 1082007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082008">SUSE bug 1082008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082009">SUSE bug 1082009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082010">SUSE bug 1082010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082011">SUSE bug 1082011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082014">SUSE bug 1082014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082058">SUSE bug 1082058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087433">SUSE bug 1087433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087434">SUSE bug 1087434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087436">SUSE bug 1087436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087437">SUSE bug 1087437</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087440">SUSE bug 1087440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087441">SUSE bug 1087441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112530">SUSE bug 1112530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112532">SUSE bug 1112532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130028">SUSE bug 1130028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130611">SUSE bug 1130611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130617">SUSE bug 1130617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130620">SUSE bug 1130620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130622">SUSE bug 1130622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130623">SUSE bug 1130623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130627">SUSE bug 1130627</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133790">SUSE bug 1133790</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2017-17742/">CVE-2017-17742</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000073/">CVE-2018-1000073</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000074/">CVE-2018-1000074</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000075/">CVE-2018-1000075</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000076/">CVE-2018-1000076</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000077/">CVE-2018-1000077</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000078/">CVE-2018-1000078</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000079/">CVE-2018-1000079</cve>
	<cve impact="important" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-16395/">CVE-2018-16395</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16396/">CVE-2018-16396</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-6914/">CVE-2018-6914</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-8777/">CVE-2018-8777</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-8778/">CVE-2018-8778</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-8779/">CVE-2018-8779</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-8780/">CVE-2018-8780</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8320/">CVE-2019-8320</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8321/">CVE-2019-8321</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8322/">CVE-2019-8322</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8323/">CVE-2019-8323</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8324/">CVE-2019-8324</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-8325/">CVE-2019-8325</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490263" comment="libruby2_5-2_5-2.5.5-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490264" comment="ruby2.5-2.5.5-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490265" comment="ruby2.5-devel-2.5.5-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490266" comment="ruby2.5-devel-extra-2.5.5-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490267" comment="ruby2.5-stdlib-2.5.5-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137727" version="1" class="patch">
	<metadata>
		<title>Security update for glib2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1139959" ref_url="https://bugzilla.suse.com/1139959" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13012" ref_url="https://www.suse.com/security/cve/CVE-2019-13012/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1833-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005702.html" source="SUSE-SU"/>
		<description>
This update for glib2 fixes the following issues:

Security issue fixed:

- CVE-2019-13012: Fixed improper restriction of file permissions when creating directories (bsc#1139959).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-12"/>
	<updated date="2019-07-12"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1139959">SUSE bug 1139959</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-13012/">CVE-2019-13012</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490270" comment="glib2-devel-2.54.3-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490271" comment="glib2-lang-2.54.3-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490272" comment="glib2-tools-2.54.3-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490273" comment="libgio-2_0-0-2.54.3-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490274" comment="libgio-2_0-0-32bit-2.54.3-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490275" comment="libglib-2_0-0-2.54.3-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490276" comment="libglib-2_0-0-32bit-2.54.3-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490277" comment="libgmodule-2_0-0-2.54.3-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490278" comment="libgmodule-2_0-0-32bit-2.54.3-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490279" comment="libgobject-2_0-0-2.54.3-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490280" comment="libgobject-2_0-0-32bit-2.54.3-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490281" comment="libgthread-2_0-0-2.54.3-4.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137728" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1139937" ref_url="https://bugzilla.suse.com/1139937" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20843" ref_url="https://www.suse.com/security/cve/CVE-2018-20843/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005700.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

Security issue fixed:

- CVE-2018-20843: Fixed a denial of service triggered by high resource consumption 
  in the XML parser when XML names contain a large amount of colons (bsc#1139937).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-12"/>
	<updated date="2019-07-12"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1139937">SUSE bug 1139937</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20843/">CVE-2018-20843</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490282" comment="expat-2.2.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490283" comment="libexpat-devel-2.2.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490284" comment="libexpat1-2.2.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490285" comment="libexpat1-32bit-2.2.5-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137729" version="1" class="patch">
	<metadata>
		<title>Security update for bzip2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1139083" ref_url="https://bugzilla.suse.com/1139083" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12900" ref_url="https://www.suse.com/security/cve/CVE-2019-12900/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1846-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005707.html" source="SUSE-SU"/>
		<description>
This update for bzip2 fixes the following issues:

Security issue fixed:

- CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors (bsc#1139083).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-15"/>
	<updated date="2019-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1139083">SUSE bug 1139083</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12900/">CVE-2019-12900</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490286" comment="bzip2-1.0.6-5.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490287" comment="libbz2-1-1.0.6-5.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490288" comment="libbz2-1-32bit-1.0.6-5.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490289" comment="libbz2-devel-1.0.6-5.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137730" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1088047" ref_url="https://bugzilla.suse.com/1088047" source="BUGZILLA"/>
		<reference ref_id="1098633" ref_url="https://bugzilla.suse.com/1098633" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1106383" ref_url="https://bugzilla.suse.com/1106383" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1119532" ref_url="https://bugzilla.suse.com/1119532" source="BUGZILLA"/>
		<reference ref_id="1120423" ref_url="https://bugzilla.suse.com/1120423" source="BUGZILLA"/>
		<reference ref_id="1125703" ref_url="https://bugzilla.suse.com/1125703" source="BUGZILLA"/>
		<reference ref_id="1128902" ref_url="https://bugzilla.suse.com/1128902" source="BUGZILLA"/>
		<reference ref_id="1130836" ref_url="https://bugzilla.suse.com/1130836" source="BUGZILLA"/>
		<reference ref_id="1131645" ref_url="https://bugzilla.suse.com/1131645" source="BUGZILLA"/>
		<reference ref_id="1132390" ref_url="https://bugzilla.suse.com/1132390" source="BUGZILLA"/>
		<reference ref_id="1133401" ref_url="https://bugzilla.suse.com/1133401" source="BUGZILLA"/>
		<reference ref_id="1133738" ref_url="https://bugzilla.suse.com/1133738" source="BUGZILLA"/>
		<reference ref_id="1134303" ref_url="https://bugzilla.suse.com/1134303" source="BUGZILLA"/>
		<reference ref_id="1134395" ref_url="https://bugzilla.suse.com/1134395" source="BUGZILLA"/>
		<reference ref_id="1135556" ref_url="https://bugzilla.suse.com/1135556" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135897" ref_url="https://bugzilla.suse.com/1135897" source="BUGZILLA"/>
		<reference ref_id="1136161" ref_url="https://bugzilla.suse.com/1136161" source="BUGZILLA"/>
		<reference ref_id="1136264" ref_url="https://bugzilla.suse.com/1136264" source="BUGZILLA"/>
		<reference ref_id="1136343" ref_url="https://bugzilla.suse.com/1136343" source="BUGZILLA"/>
		<reference ref_id="1136935" ref_url="https://bugzilla.suse.com/1136935" source="BUGZILLA"/>
		<reference ref_id="1137625" ref_url="https://bugzilla.suse.com/1137625" source="BUGZILLA"/>
		<reference ref_id="1137728" ref_url="https://bugzilla.suse.com/1137728" source="BUGZILLA"/>
		<reference ref_id="1138879" ref_url="https://bugzilla.suse.com/1138879" source="BUGZILLA"/>
		<reference ref_id="1139712" ref_url="https://bugzilla.suse.com/1139712" source="BUGZILLA"/>
		<reference ref_id="1139751" ref_url="https://bugzilla.suse.com/1139751" source="BUGZILLA"/>
		<reference ref_id="1139771" ref_url="https://bugzilla.suse.com/1139771" source="BUGZILLA"/>
		<reference ref_id="1139865" ref_url="https://bugzilla.suse.com/1139865" source="BUGZILLA"/>
		<reference ref_id="1140133" ref_url="https://bugzilla.suse.com/1140133" source="BUGZILLA"/>
		<reference ref_id="1140228" ref_url="https://bugzilla.suse.com/1140228" source="BUGZILLA"/>
		<reference ref_id="1140328" ref_url="https://bugzilla.suse.com/1140328" source="BUGZILLA"/>
		<reference ref_id="1140405" ref_url="https://bugzilla.suse.com/1140405" source="BUGZILLA"/>
		<reference ref_id="1140424" ref_url="https://bugzilla.suse.com/1140424" source="BUGZILLA"/>
		<reference ref_id="1140428" ref_url="https://bugzilla.suse.com/1140428" source="BUGZILLA"/>
		<reference ref_id="1140454" ref_url="https://bugzilla.suse.com/1140454" source="BUGZILLA"/>
		<reference ref_id="1140463" ref_url="https://bugzilla.suse.com/1140463" source="BUGZILLA"/>
		<reference ref_id="1140575" ref_url="https://bugzilla.suse.com/1140575" source="BUGZILLA"/>
		<reference ref_id="1140577" ref_url="https://bugzilla.suse.com/1140577" source="BUGZILLA"/>
		<reference ref_id="1140637" ref_url="https://bugzilla.suse.com/1140637" source="BUGZILLA"/>
		<reference ref_id="1140658" ref_url="https://bugzilla.suse.com/1140658" source="BUGZILLA"/>
		<reference ref_id="1140715" ref_url="https://bugzilla.suse.com/1140715" source="BUGZILLA"/>
		<reference ref_id="1140719" ref_url="https://bugzilla.suse.com/1140719" source="BUGZILLA"/>
		<reference ref_id="1140726" ref_url="https://bugzilla.suse.com/1140726" source="BUGZILLA"/>
		<reference ref_id="1140727" ref_url="https://bugzilla.suse.com/1140727" source="BUGZILLA"/>
		<reference ref_id="1140728" ref_url="https://bugzilla.suse.com/1140728" source="BUGZILLA"/>
		<reference ref_id="1140814" ref_url="https://bugzilla.suse.com/1140814" source="BUGZILLA"/>
		<reference ref_id="1140887" ref_url="https://bugzilla.suse.com/1140887" source="BUGZILLA"/>
		<reference ref_id="1140888" ref_url="https://bugzilla.suse.com/1140888" source="BUGZILLA"/>
		<reference ref_id="1140889" ref_url="https://bugzilla.suse.com/1140889" source="BUGZILLA"/>
		<reference ref_id="1140891" ref_url="https://bugzilla.suse.com/1140891" source="BUGZILLA"/>
		<reference ref_id="1140893" ref_url="https://bugzilla.suse.com/1140893" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1140954" ref_url="https://bugzilla.suse.com/1140954" source="BUGZILLA"/>
		<reference ref_id="1140955" ref_url="https://bugzilla.suse.com/1140955" source="BUGZILLA"/>
		<reference ref_id="1140956" ref_url="https://bugzilla.suse.com/1140956" source="BUGZILLA"/>
		<reference ref_id="1140957" ref_url="https://bugzilla.suse.com/1140957" source="BUGZILLA"/>
		<reference ref_id="1140958" ref_url="https://bugzilla.suse.com/1140958" source="BUGZILLA"/>
		<reference ref_id="1140959" ref_url="https://bugzilla.suse.com/1140959" source="BUGZILLA"/>
		<reference ref_id="1140960" ref_url="https://bugzilla.suse.com/1140960" source="BUGZILLA"/>
		<reference ref_id="1140961" ref_url="https://bugzilla.suse.com/1140961" source="BUGZILLA"/>
		<reference ref_id="1140962" ref_url="https://bugzilla.suse.com/1140962" source="BUGZILLA"/>
		<reference ref_id="1140964" ref_url="https://bugzilla.suse.com/1140964" source="BUGZILLA"/>
		<reference ref_id="1140971" ref_url="https://bugzilla.suse.com/1140971" source="BUGZILLA"/>
		<reference ref_id="1140972" ref_url="https://bugzilla.suse.com/1140972" source="BUGZILLA"/>
		<reference ref_id="1140992" ref_url="https://bugzilla.suse.com/1140992" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20836" ref_url="https://www.suse.com/security/cve/CVE-2018-20836/" source="CVE"/>
		<reference ref_id="CVE-2019-10126" ref_url="https://www.suse.com/security/cve/CVE-2019-10126/" source="CVE"/>
		<reference ref_id="CVE-2019-10638" ref_url="https://www.suse.com/security/cve/CVE-2019-10638/" source="CVE"/>
		<reference ref_id="CVE-2019-10639" ref_url="https://www.suse.com/security/cve/CVE-2019-10639/" source="CVE"/>
		<reference ref_id="CVE-2019-11599" ref_url="https://www.suse.com/security/cve/CVE-2019-11599/" source="CVE"/>
		<reference ref_id="CVE-2019-13233" ref_url="https://www.suse.com/security/cve/CVE-2019-13233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005712.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2019-10638: In the Linux kernel, a device could be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic was sent to multiple destination IP addresses, it was possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may have been conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses (bnc#1140575 1140577).
- CVE-2019-10639: The Linux kernel allowed Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it was possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic was sent to multiple destination IP addresses, it was possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key was extracted (via enumeration), the offset of the kernel image was exposed. This attack could be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker's web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable because IP ID generation was changed to have a dependency on an address associated with a network namespace (bnc#1140577).
- CVE-2019-13233: In arch/x86/lib/insn-eval.c in the Linux kernel, there was a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bnc#1140454).
- CVE-2018-20836: An issue was discovered in the Linux kernel There was a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free (bnc#1134395).
- CVE-2019-10126: A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might have lead to memory corruption and possibly other consequences (bnc#1136935).
- CVE-2019-11599: The coredump implementation in the Linux kernel did not use locking or other mechanisms to prevent vma layout or vma flags changes while it ran, which allowed local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c (bnc#1131645 1133738).

The following non-security bugs were fixed:

- Abort file_remove_privs() for non-reg. files (bsc#1140888).
- acpica: Clear status of GPEs on first direct enable (bsc#1111666).
- acpi: PM: Allow transitions to D0 to occur in special cases (bsc#1051510).
- acpi: PM: Avoid evaluating _PS3 on transitions from D3hot to D3cold (bsc#1051510).
- alsa: firewire-lib/fireworks: fix miss detection of received MIDI messages (bsc#1051510).
- alsa: hda - Force polling mode on CNL for fixing codec communication (bsc#1051510).
- alsa: hda/realtek: Add quirks for several Clevo notebook barebones (bsc#1051510).
- alsa: hda/realtek - Change front mic location for Lenovo M710q (bsc#1051510).
- alsa: line6: Fix write on zero-sized buffer (bsc#1051510).
- alsa: seq: fix incorrect order of dest_client/dest_ports arguments (bsc#1051510).
- alsa: usb-audio: Fix parse of UAC2 Extension Units (bsc#1111666).
- alsa: usb-audio: fix sign unintended sign extension on left shifts (bsc#1051510).
- apparmor: enforce nullbyte at end of tag string (bsc#1051510).
- asoc: cx2072x: fix integer overflow on unsigned int multiply (bsc#1111666).
- ax25: fix inconsistent lock state in ax25_destroy_timer (bsc#1051510).
- Backporting hwpoison fixes  - mm: hugetlb: prevent reuse of hwpoisoned free hugepages   (bsc#1139712).  - mm: hwpoison: change PageHWPoison behavior on hugetlb pages   (bsc#1139712).  - mm: hugetlb: soft-offline: dissolve source hugepage after   successful migration (bsc#1139712).  - mm: soft-offline: dissolve free hugepage if soft-offlined   (bsc#1139712).  - mm: hwpoison: introduce memory_failure_hugetlb() (bsc#1139712).  - mm: hwpoison: dissolve in-use hugepage in unrecoverable memory   error (bsc#1139712).  - mm: hugetlb: delete dequeue_hwpoisoned_huge_page()   (bsc#1139712).  - mm: hwpoison: introduce idenfity_page_state (bsc#1139712).  - mm: hugetlb: soft_offline: save compound page order before   page migration (bsc#1139712)  - fs: hugetlbfs: fix hwpoison reserve accounting (bsc#1139712)  - mm: fix race on soft-offlining free huge pages (bsc#1139712).  - mm: soft-offline: close the race against page allocation   (bsc#1139712).  - mm: soft-offline: return -EBUSY if   set_hwpoison_free_buddy_page() fails (bsc#1139712).  - mm: hugetlb: soft-offline: dissolve_free_huge_page() return   zero on !PageHuge (bsc#bsc#1139712).
- blk-mq: free hw queue's resource in hctx's release handler (bsc#1140637).
- block: Fix a NULL pointer dereference in generic_make_request() (bsc#1139771).
- bluetooth: Fix faulty expression for minimum encryption key size check (bsc#1140328).
- bpf, devmap: Add missing bulk queue free (bsc#1109837).
- bpf, devmap: Add missing RCU read lock on flush (bsc#1109837).
- bpf, devmap: Fix premature entry free on destroying map (bsc#1109837).
- bpf: devmap: fix use-after-free Read in __dev_map_entry_free (bsc#1109837).
- bpf: lpm_trie: check left child of last leftmost node for NULL (bsc#1109837).
- bpf: sockmap fix msg-&gt;sg.size account on ingress skb (bsc#1109837).
- bpf: sockmap, fix use after free from sleep in psock backlog workqueue (bsc#1109837).
- bpf: sockmap remove duplicate queue free (bsc#1109837).
- bpf, tcp: correctly handle DONT_WAIT flags and timeo == 0 (bsc#1109837).
- can: af_can: Fix error path of can_init() (bsc#1051510).
- can: flexcan: fix timeout when set small bitrate (bsc#1051510).
- can: purge socket error queue on sock destruct (bsc#1051510).
- ceph: flush dirty inodes before proceeding with remount (bsc#1140405).
- clk: rockchip: Turn on 'aclk_dmac1' for suspend on rk3288 (bsc#1051510).
- clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider (bsc#1051510).
- coresight: etb10: Fix handling of perf mode (bsc#1051510).
- coresight: etm4x: Add support to enable ETMv4.2 (bsc#1051510).
- crypto: algapi - guard against uninitialized spawn list in crypto_remove_spawns (bsc#1133401).
- crypto: cryptd - Fix skcipher instance memory leak (bsc#1051510).
- crypto: user - prevent operating on larval algorithms (bsc#1133401).
- dax: Fix xarray entry association for mixed mappings (bsc#1140893).
- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- device core: Consolidate locking and unlocking of parent and device (bsc#1106383).
- dmaengine: imx-sdma: remove BD_INTR for channel0 (bsc#1051510).
- doc: Cope with the deprecation of AutoReporter (bsc#1051510).
- documentation/ABI: Document umwait control sysfs interfaces (jsc#SLE-5187).
- documentation: DMA-API: fix a function name of max_mapping_size (bsc#1140954).
- driver core: Establish order of operations for device_add and device_del via bitflag (bsc#1106383).
- driver core: Probe devices asynchronously instead of the driver (bsc#1106383).
- drivers/base/devres: introduce devm_release_action() (bsc#1103992).
- drivers/base: Introduce kill_device() (bsc#1139865).
- drivers/base: kABI fixes for struct device_private (bsc#1106383).
- drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var (bsc#1051510).
- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE (bsc#1051510).
- drm/amd/powerplay: use hardware fan control if no powerplay fan table (bsc#1111666).
- drm/arm/hdlcd: Actually validate CRTC modes (bsc#1111666).
- drm/arm/hdlcd: Allow a bit of clock tolerance (bsc#1051510).
- drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times (bsc#1111666).
- drm/etnaviv: add missing failure path to destroy suballoc (bsc#1111666).
- drm/fb-helper: generic: Do not take module ref for fbcon (bsc#1111666).
- drm: Fix drm_release() and device unplug (bsc#1111666).
- drm/i915/dmc: protect against reading random memory (bsc#1051510).
- drm/i915/gvt: ignore unexpected pvinfo write (bsc#1051510).
- drm/imx: notify drm core before sending event during crtc disable (bsc#1111666).
- drm/imx: only send event on crtc disable if kept disabled (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2 (bsc#1111666).
- drm/vmwgfx: fix a warning due to missing dma_parms (bsc#1111666).
- drm/vmwgfx: Use the backdoor port if the HB port is not available (bsc#1111666).
- ext4: do not delete unlinked inode from orphan list on failed truncate (bsc#1140891).
- failover: allow name change on IFF_UP slave interfaces (bsc#1109837).
- fs/ocfs2: fix race in ocfs2_dentry_attach_lock() (bsc#1140889).
- fs/proc/proc_sysctl.c: Fix a NULL pointer dereference (bsc#1140887).
- fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links (bsc#1140887).
- ftrace/x86: Remove possible deadlock between register_kprobe() and ftrace_run_update_code() (bsc#1071995).
- genirq: Prevent use-after-free and work list corruption (bsc#1051510).
- genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent() (bsc#1051510).
- genwqe: Prevent an integer overflow in the ioctl (bsc#1051510).
- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes (mm/hugetlbfs)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git fixes (mm/hugetlbfs)).
- i2c: acorn: fix i2c warning (bsc#1135642).
- i2c: mlxcpld: Add support for extended transaction length for i2c-mlxcpld (bsc#1112374).
- i2c: mlxcpld: Add support for smbus block read transaction (bsc#1112374).
- i2c: mlxcpld: Allow configurable adapter id for mlxcpld (bsc#1112374).
- i2c: mlxcpld: Fix adapter functionality support callback (bsc#1112374).
- i2c: mlxcpld: Fix wrong initialization order in probe (bsc#1112374).
- i2c: mux: mlxcpld: simplify code to reach the adapter (bsc#1112374).
- ib/hfi1: Clear the IOWAIT pending bits when QP is put into error state (bsc#1114685).
- ib/hfi1: Create inline to get extended headers (bsc#1114685 ).
- ib/hfi1: Validate fault injection opcode user input (bsc#1114685 ).
- ib/mlx5: Verify DEVX general object type correctly (bsc#1103991 ).
- input: synaptics - enable SMBus on ThinkPad E480 and E580 (bsc#1051510).
- input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD (bsc#1051510).
- iommu/amd: Make iommu_disable safer (bsc#1140955).
- iommu/arm-smmu: Add support for qcom,smmu-v2 variant (bsc#1051510).
- iommu/arm-smmu: Avoid constant zero in TLBI writes (bsc#1140956).
- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register (bsc#1051510).
- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer (bsc#1051510).
- iommu: Fix a leak in iommu_insert_resv_region (bsc#1140957).
- iommu: Use right function to get group for device (bsc#1140958).
- iommu/vt-d: Duplicate iommu_resv_region objects per device list (bsc#1140959).
- iommu/vt-d: Handle PCI bridge RMRR device scopes in intel_iommu_get_resv_regions (bsc#1140960).
- iommu/vt-d: Handle RMRR with PCI bridge device scopes (bsc#1140961).
- iommu/vt-d: Introduce is_downstream_to_pci_bridge helper (bsc#1140962).
- iommu/vt-d: Remove unnecessary rcu_read_locks (bsc#1140964).
- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- irqchip/gic-v3-its: fix some definitions of inner cacheability attributes (bsc#1051510).
- irqchip/mbigen: Do not clear eventid when freeing an MSI (bsc#1051510).
- ixgbe: Avoid NULL pointer dereference with VF on non-IPsec hw (bsc#1140228).
- kabi fixup blk_mq_register_dev() (bsc#1140637).
- kernel-binary: fix missing \
- kernel-binary: rpm does not support multiline condition
- kernel-binary: Use -c grep option in klp project detection.
- kvm: svm/avic: fix off-by-one in checking host APIC ID (bsc#1140971).
- kvm: x86: fix return value for reserved EFER (bsc#1140992).
- kvm: x86: Skip EFER vs. guest CPUID checks for host-initiated writes (bsc#1140972).
- libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk (bsc#1051510).
- libceph: assign cookies in linger_submit() (bsc#1135897).
- libceph: check reply num_data_items in setup_request_data() (bsc#1135897).
- libceph: do not consume a ref on pagelist in ceph_msg_data_add_pagelist() (bsc#1135897).
- libceph: enable fallback to ceph_msg_new() in ceph_msgpool_get() (bsc#1135897).
- libceph: introduce alloc_watch_request() (bsc#1135897).
- libceph: introduce ceph_pagelist_alloc() (bsc#1135897).
- libceph: preallocate message data items (bsc#1135897).
- libceph, rbd: add error handling for osd_req_op_cls_init() (bsc#1135897). This feature was requested for SLE15 but aws reverted in packaging and master.
- libceph, rbd, ceph: move ceph_osdc_alloc_messages() calls (bsc#1135897).
- libnvdimm/bus: Prevent duplicate device_unregister() calls (bsc#1139865).
- libnvdimm, pfn: Fix over-trim in trim_pfn_device() (bsc#1140719).
- mac80211: Do not use stack memory with scatterlist for GMAC (bsc#1051510).
- mac80211: drop robust management frames from unknown TA (bsc#1051510).
- mac80211: handle deauthentication/disassociation from TDLS peer (bsc#1051510).
- media: v4l2-ioctl: clear fields in s_parm (bsc#1051510).
- mfd: hi655x: Fix regmap area declared size for hi655x (bsc#1051510).
- mISDN: make sure device name is NUL terminated (bsc#1051510).
- mlxsw: core: Add API for QSFP module temperature thresholds reading (bsc#1112374).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue (bsc#1112374).
- mlxsw: core: mlxsw: core: avoid -Wint-in-bool-context warning (bsc#1112374).
- mlxsw: core: Move ethtool module callbacks to a common location (bsc#1112374).
- mlxsw: core: Prevent reading unsupported slave address from SFP EEPROM (bsc#1112374).
- mlxsw: pci: Reincrease PCI reset timeout (bsc#1112374).
- mlxsw: reg: Add Management Temperature Bulk Register (bsc#1112374).
- mlxsw: spectrum_flower: Fix TOS matching (bsc#1112374).
- mlxsw: spectrum: Move QSFP EEPROM definitions to common location (bsc#1112374).
- mlxsw: spectrum: Put MC TCs into DWRR mode (bsc#1112374).
- mmc: core: complete HS400 before checking status (bsc#1111666).
- mmc: core: Prevent processing SDIO IRQs when the card is suspended (bsc#1051510).
- mm/devm_memremap_pages: introduce devm_memunmap_pages (bsc#1103992).
- mm/page_alloc.c: avoid potential NULL pointer dereference (git fixes (mm/pagealloc)).
- mm/page_alloc.c: fix never set ALLOC_NOFRAGMENT flag (git fixes (mm/pagealloc)).
- mm/vmscan.c: prevent useless kswapd loops (git fixes (mm/vmscan)).
- net: core: support XDP generic on stacked devices (bsc#1109837).
- net: do not clear sock-&gt;sk early to avoid trouble in strparser (bsc#1103990).
- net: ena: add ethtool function for changing io queue sizes (bsc#1138879).
- net: ena: add good checksum counter (bsc#1138879).
- net: ena: add handling of llq max tx burst size (bsc#1138879).
- net: ena: add MAX_QUEUES_EXT get feature admin command (bsc#1138879).
- net: ena: add newline at the end of pr_err prints (bsc#1138879).
- net: ena: add support for changing max_header_size in LLQ mode (bsc#1138879).
- net: ena: allow automatic fallback to polling mode (bsc#1138879).
- net: ena: allow queue allocation backoff when low on memory (bsc#1138879).
- net: ena: arrange ena_probe() function variables in reverse christmas tree (bsc#1138879).
- net: ena: enable negotiating larger Rx ring size (bsc#1138879).
- net: ena: ethtool: add extra properties retrieval via get_priv_flags (bsc#1138879).
- net: ena: Fix bug where ring allocation backoff stopped too late (bsc#1138879).
- net: ena: fix ena_com_fill_hash_function() implementation (bsc#1138879).
- net: ena: fix: Free napi resources when ena_up() fails (bsc#1138879).
- net: ena: fix incorrect test of supported hash function (bsc#1138879).
- net: ena: fix: set freed objects to NULL to avoid failing future allocations (bsc#1138879).
- net: ena: fix swapped parameters when calling ena_com_indirect_table_fill_entry (bsc#1138879).
- net: ena: gcc 8: fix compilation warning (bsc#1138879).
- net: ena: improve latency by disabling adaptive interrupt moderation by default (bsc#1138879).
- net: ena: make ethtool show correct current and max queue sizes (bsc#1138879).
- net: ena: optimise calculations for CQ doorbell (bsc#1138879).
- net: ena: remove inline keyword from functions in *.c (bsc#1138879).
- net: ena: replace free_tx/rx_ids union with single free_ids field in ena_ring (bsc#1138879).
- net: ena: update driver version from 2.0.3 to 2.1.0 (bsc#1138879).
- net: ena: use dev_info_once instead of static variable (bsc#1138879).
- net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set (bsc#1130836).
- net: Fix missing meta data in skb with vlan packet (bsc#1109837).
- net/mlx5: Avoid reloading already removed devices (bsc#1103990 ).
- net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled (bsc#1103990).
- net/mlx5e: Fix the max MTU check in case of XDP (bsc#1103990 ).
- net/mlx5e: Fix use-after-free after xdp_return_frame (bsc#1103990).
- net/mlx5e: Rx, Check ip headers sanity (bsc#1103990 ).
- net/mlx5e: Rx, Fixup skb checksum for packets with tail padding (bsc#1109837).
- net/mlx5e: XDP, Fix shifted flag index in RQ bitmap (bsc#1103990 ).
- net/mlx5: FPGA, tls, hold rcu read lock a bit longer (bsc#1103990).
- net/mlx5: FPGA, tls, idr remove on flow delete (bsc#1103990 ).
- net/mlx5: Set completion EQs as shared resources (bsc#1103991 ).
- net/mlx5: Update pci error handler entries and command translation (bsc#1103991).
- net: mvpp2: prs: Fix parser range for VID filtering (bsc#1098633).
- net: mvpp2: prs: Fix parser range for VID filtering (bsc#1098633).
- net: mvpp2: prs: Use the correct helpers when removing all VID filters (bsc#1098633).
- net: mvpp2: prs: Use the correct helpers when removing all VID filters (bsc#1098633).
- net: mvpp2: Use strscpy to handle stat strings (bsc#1098633).
- net: mvpp2: Use strscpy to handle stat strings (bsc#1098633).
- net: phy: marvell10g: report if the PHY fails to boot firmware (bsc#1119113).
- net/sched: cbs: Fix error path of cbs_module_init (bsc#1109837).
- net/sched: cbs: fix port_rate miscalculation (bsc#1109837).
- net/tls: avoid NULL pointer deref on nskb-&gt;sk in fallback (bsc#1109837).
- net/tls: avoid potential deadlock in tls_set_device_offload_rx() (bsc#1109837).
- net: tls, correctly account for copied bytes with multiple sk_msgs (bsc#1109837).
- net/tls: do not copy negative amounts of data in reencrypt (bsc#1109837).
- net/tls: do not ignore netdev notifications if no TLS features (bsc#1109837).
- net/tls: do not leak IV and record seq when offload fails (bsc#1109837).
- net/tls: do not leak partially sent record in device mode (bsc#1109837).
- net/tls: fix build without CONFIG_TLS_DEVICE (bsc#1109837).
- net/tls: fix copy to fragments in reencrypt (bsc#1109837).
- net/tls: fix page double free on TX cleanup (bsc#1109837).
- net/tls: fix refcount adjustment in fallback (bsc#1109837).
- net/tls: fix state removal with feature flags off (bsc#1109837).
- net/tls: fix the IV leaks (bsc#1109837).
- net/tls: prevent bad memory access in tls_is_sk_tx_device_offloaded() (bsc#1109837).
- net/tls: replace the sleeping lock around RX resync with a bit lock (bsc#1109837).
- net/udp_gso: Allow TX timestamp with UDP GSO (bsc#1109837).
- nfit/ars: Allow root to busy-poll the ARS state machine (bsc#1140814).
- nfit/ars: Avoid stale ARS results (jsc#SLE-5433).
- nfit/ars: Introduce scrub_flags (jsc#SLE-5433).
- nfp: bpf: fix static check error through tightening shift amount adjustment (bsc#1109837).
- nfp: flower: add rcu locks when accessing netdev for tunnels (bsc#1109837).
- ntp: Allow TAI-UTC offset to be set to zero (bsc#1135642).
- nvme: copy MTFA field from identify controller (bsc#1140715).
- nvme-rdma: fix double freeing of async event data (bsc#1120423).
- nvme-rdma: fix possible double free of controller async event buffer (bsc#1120423).
- ocfs2: try to reuse extent block in dealloc without meta_alloc (bsc#1128902).
- pci: Do not poll for PME if the device is in D3cold (bsc#1051510).
- pci/p2pdma: fix the gen_pool_add_virt() failure path (bsc#1103992).
- pci: PM: Skip devices in D0 for suspend-to-idle (bsc#1051510).
- pci: rpadlpar: Fix leaked device_node references in add/remove paths (bsc#1051510).
- pinctrl/amd: add get_direction handler (bsc#1140463).
- pinctrl/amd: fix gpio irq level in debugfs (bsc#1140463).
- pinctrl/amd: fix masking of GPIO interrupts (bsc#1140463).
- pinctrl/amd: make functions amd_gpio_suspend and amd_gpio_resume static (bsc#1140463).
- pinctrl/amd: poll InterruptEnable bits in amd_gpio_irq_set_type (bsc#1140463).
- pinctrl/amd: poll InterruptEnable bits in enable_irq (bsc#1140463).
- pm: ACPI/PCI: Resume all devices during hibernation (bsc#1111666).
- powerpc/perf: Add PM_LD_MISS_L1 and PM_BR_2PATH to power9 event list (bsc#1137728, LTC#178106).
- powerpc/perf: Add POWER9 alternate PM_RUN_CYC and PM_RUN_INST_CMPL events (bsc#1137728, LTC#178106).
- powerpc/rtas: retry when cpu offline races with suspend/migration (bsc#1140428, LTC#178808).
- ppc64le: enable CONFIG_PPC_DT_CPU_FTRS (jsc#SLE-7159).
- ppp: mppe: Add softdep to arc4 (bsc#1088047).
- ptrace: Fix -&gt;ptracer_cred handling for PTRACE_TRACEME (git-fixes).
- ptrace: restore smp_rmb() in __ptrace_may_access() (git-fixes).
- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- rdma/ipoib: Allow user space differentiate between valid dev_port (bsc#1103992).
- rdma/mlx5: Do not allow the user to write to the clock page (bsc#1103991).
- rdma/mlx5: Initialize roce port info before multiport master init (bsc#1103991).
- rdma/mlx5: Use rdma_user_map_io for mapping BAR pages (bsc#1103992).
- regulator: s2mps11: Fix buck7 and buck8 wrong voltages (bsc#1051510).
- Replace the bluetooth fix with the upstream commit (bsc#1135556)
- Revert 'net: ena: ethtool: add extra properties retrieval via get_priv_flags' (bsc#1138879).
- Revert 'net/mlx5e: Enable reporting checksum unnecessary also for L3 packets' (bsc#1103990).
- Revert 'Revert 'Drop multiversion(kernel) from the KMP template ()''
- Revert 'Sign non-x86 kernels when possible (boo#1134303)' This reverts commit bac621c6704610562ebd9e74ae5ad85ca8025681. We do not have reports of this working with all ARM architectures in all cases (boot, kexec, ..) so revert for now.
- Revert 'svm: Fix AVIC incomplete IPI emulation' (bsc#1140133).
- rpm/package-descriptions: fix typo in kernel-azure
- rpm/post.sh: correct typo in err msg (bsc#1137625)
- sbitmap: fix improper use of smp_mb__before_atomic() (bsc#1140658).
- scripts/git_sort/git_sort.py: add djbw/nvdimm nvdimm-pending.
- scripts/git_sort/git_sort.py: add nvdimm/libnvdimm-fixes
- scripts/git_sort/git_sort.py: drop old scsi branches
- scsi: aacraid: change event_wait to a completion (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: change wait_sem to a completion (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: clean up some indentation and formatting issues (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: Mark expected switch fall-through (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: Mark expected switch fall-throughs (jsc#SLE-4710 bsc#1136161).
- scsi: be2iscsi: be_iscsi: Mark expected switch fall-through (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: be_main: Mark expected switch fall-through (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: fix spelling mistake 'Retreiving' -&gt; 'Retrieving' (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: lpfc: fix typo (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: remove unused variable dmsg (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: switch to generic DMA API (jsc#SLE-4721 bsc#1136264).
- scsi: core: add new RDAC LENOVO/DE_Series device (bsc#1132390).
- scsi: csiostor: csio_wr: mark expected switch fall-through (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: drop serial_number usage (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix calls to dma_set_mask_and_coherent() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix incorrect dma device in case of vport (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix missing data copy in csio_scsi_err_handler() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: no need to check return value of debugfs_create functions (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: Remove set but not used variable 'pln' (jsc#SLE-4679 bsc#1136343).
- scsi: mpt3sas: Add Atomic RequestDescriptor support on Aero (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add flag high_iops_queues (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add missing breaks in switch statements (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add support for ATLAS PCIe switch (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add support for NVMe Switch Adapter (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Affinity high iops queues IRQs to local node (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: change _base_get_msix_index prototype (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Enable interrupt coalescing on high iops (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: fix indentation issue (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Fix kernel panic during expander reset (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Fix typo in request_desript_type (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: function pointers of request descriptor (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Improve the threshold value and introduce module param (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Introduce perf_mode module parameter (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Irq poll to avoid CPU hard lockups (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Load balance to improve performance and avoid soft lockups (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Rename mpi endpoint device ID macro (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: save and use MSI-X index for posting RD (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: simplify interrupt handler (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update driver version to 27.102.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update driver version to 29.100.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update mpt3sas driver version to 28.100.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Use high iops queues under some circumstances (bsc#1125703,jsc#SLE-4717).
- scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() (bsc#1140727).
- scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines (bsc#1140728).
- scsi: target/iblock: Fix overrun in WRITE SAME emulation (bsc#1140424).
- scsi: target/iblock: Fix overrun in WRITE SAME emulation (bsc#1140424).
- signal/ptrace: Do not leak unitialized kernel memory with PTRACE_PEEK_SIGINFO (git-fixes).
- staging: comedi: ni_mio_common: Fix divide-by-zero for DIO cmdtest (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- svm: Add warning message for AVIC IPI invalid target (bsc#1140133).
- svm: Fix AVIC incomplete IPI emulation (bsc#1140133).
- sysctl: handle overflow in proc_get_long (bsc#1051510).
- tools: bpftool: fix infinite loop in map create (bsc#1109837).
- tracing/snapshot: Resize spare buffer if size changed (bsc#1140726).
- typec: tcpm: fix compiler warning about stupid things (git-fixes).
- usb: chipidea: udc: workaround for endpoint conflict issue (bsc#1135642).
- usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression) (bsc#1135642).
- usb: Fix chipmunk-like voice when using Logitech C270 for recording audio (bsc#1051510).
- usbnet: ipheth: fix racing condition (bsc#1051510).
- usb: serial: fix initial-termios handling (bsc#1135642).
- usb: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode (bsc#1051510).
- usb: serial: option: add Telit 0x1260 and 0x1261 compositions (bsc#1051510).
- usb: serial: pl2303: add Allied Telesis VT-Kit3 (bsc#1051510).
- usb: usb-storage: Add new ID to ums-realtek (bsc#1051510).
- x86/cpufeatures: Enumerate user wait instructions (jsc#SLE-5187).
- x86/umwait: Add sysfs interface to control umwait C0.2 state (jsc#SLE-5187).
- x86/umwait: Add sysfs interface to control umwait maximum time (jsc#SLE-5187).
- x86/umwait: Initialize umwait control values (jsc#SLE-5187).
- xdp: check device pointer before clearing (bsc#1109837).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-15"/>
	<updated date="2019-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088047">SUSE bug 1088047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098633">SUSE bug 1098633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106383">SUSE bug 1106383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119532">SUSE bug 1119532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120423">SUSE bug 1120423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125703">SUSE bug 1125703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128902">SUSE bug 1128902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130836">SUSE bug 1130836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131645">SUSE bug 1131645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132390">SUSE bug 1132390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133401">SUSE bug 1133401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133738">SUSE bug 1133738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134303">SUSE bug 1134303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134395">SUSE bug 1134395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135556">SUSE bug 1135556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135897">SUSE bug 1135897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136161">SUSE bug 1136161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136264">SUSE bug 1136264</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136343">SUSE bug 1136343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136935">SUSE bug 1136935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137625">SUSE bug 1137625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137728">SUSE bug 1137728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138879">SUSE bug 1138879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139712">SUSE bug 1139712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139751">SUSE bug 1139751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139771">SUSE bug 1139771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139865">SUSE bug 1139865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140133">SUSE bug 1140133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140228">SUSE bug 1140228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140328">SUSE bug 1140328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140405">SUSE bug 1140405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140424">SUSE bug 1140424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140428">SUSE bug 1140428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140454">SUSE bug 1140454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140463">SUSE bug 1140463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140575">SUSE bug 1140575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140577">SUSE bug 1140577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140637">SUSE bug 1140637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140658">SUSE bug 1140658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140715">SUSE bug 1140715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140719">SUSE bug 1140719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140726">SUSE bug 1140726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140727">SUSE bug 1140727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140728">SUSE bug 1140728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140814">SUSE bug 1140814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140887">SUSE bug 1140887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140888">SUSE bug 1140888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140889">SUSE bug 1140889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140891">SUSE bug 1140891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140893">SUSE bug 1140893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140954">SUSE bug 1140954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140955">SUSE bug 1140955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140956">SUSE bug 1140956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140957">SUSE bug 1140957</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140958">SUSE bug 1140958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140959">SUSE bug 1140959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140960">SUSE bug 1140960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140961">SUSE bug 1140961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140962">SUSE bug 1140962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140964">SUSE bug 1140964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140971">SUSE bug 1140971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140972">SUSE bug 1140972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140992">SUSE bug 1140992</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-20836/">CVE-2018-20836</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10126/">CVE-2019-10126</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10638/">CVE-2019-10638</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10639/">CVE-2019-10639</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11599/">CVE-2019-11599</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13233/">CVE-2019-13233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491515" comment="kernel-default-4.12.14-197.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491516" comment="kernel-default-base-4.12.14-197.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491517" comment="kernel-default-devel-4.12.14-197.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491518" comment="kernel-default-man-4.12.14-197.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491519" comment="kernel-devel-4.12.14-197.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491520" comment="kernel-macros-4.12.14-197.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491521" comment="kernel-zfcpdump-4.12.14-197.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137731" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1140868" ref_url="https://bugzilla.suse.com/1140868" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11709" ref_url="https://www.suse.com/security/cve/CVE-2019-11709/" source="CVE"/>
		<reference ref_id="CVE-2019-11711" ref_url="https://www.suse.com/security/cve/CVE-2019-11711/" source="CVE"/>
		<reference ref_id="CVE-2019-11712" ref_url="https://www.suse.com/security/cve/CVE-2019-11712/" source="CVE"/>
		<reference ref_id="CVE-2019-11713" ref_url="https://www.suse.com/security/cve/CVE-2019-11713/" source="CVE"/>
		<reference ref_id="CVE-2019-11715" ref_url="https://www.suse.com/security/cve/CVE-2019-11715/" source="CVE"/>
		<reference ref_id="CVE-2019-11717" ref_url="https://www.suse.com/security/cve/CVE-2019-11717/" source="CVE"/>
		<reference ref_id="CVE-2019-11719" ref_url="https://www.suse.com/security/cve/CVE-2019-11719/" source="CVE"/>
		<reference ref_id="CVE-2019-11729" ref_url="https://www.suse.com/security/cve/CVE-2019-11729/" source="CVE"/>
		<reference ref_id="CVE-2019-11730" ref_url="https://www.suse.com/security/cve/CVE-2019-11730/" source="CVE"/>
		<reference ref_id="CVE-2019-9811" ref_url="https://www.suse.com/security/cve/CVE-2019-9811/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005725.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox, mozilla-nss fixes the following issues:

MozillaFirefox to version ESR 60.8:

- CVE-2019-9811: Sandbox escape via installation of malicious language pack (bsc#1140868).
- CVE-2019-11711: Script injection within domain through inner window reuse (bsc#1140868).
- CVE-2019-11712: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects (bsc#1140868).
- CVE-2019-11713: Use-after-free with HTTP/2 cached stream (bsc#1140868).
- CVE-2019-11729: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (bsc#1140868).
- CVE-2019-11715: HTML parsing error can contribute to content XSS (bsc#1140868).
- CVE-2019-11717: Caret character improperly escaped in origins (bsc#1140868).
- CVE-2019-11719: Out-of-bounds read when importing curve25519 private key (bsc#1140868).
- CVE-2019-11730: Same-origin policy treats all files in a directory as having the same-origin (bsc#1140868).
- CVE-2019-11709: Multiple Memory safety bugs fixed (bsc#1140868).

mozilla-nss to version 3.44.1:

* Added IPSEC IKE support to softoken 
* Many new FIPS test cases
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-17"/>
	<updated date="2019-07-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11709/">CVE-2019-11709</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11711/">CVE-2019-11711</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11712/">CVE-2019-11712</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11713/">CVE-2019-11713</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11715/">CVE-2019-11715</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11717/">CVE-2019-11717</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11719/">CVE-2019-11719</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11729/">CVE-2019-11729</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11730/">CVE-2019-11730</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9811/">CVE-2019-9811</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490302" comment="libfreebl3-3.44.1-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490303" comment="libfreebl3-32bit-3.44.1-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490306" comment="libsoftokn3-3.44.1-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490307" comment="libsoftokn3-32bit-3.44.1-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490310" comment="mozilla-nss-3.44.1-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490311" comment="mozilla-nss-32bit-3.44.1-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490312" comment="mozilla-nss-certs-3.44.1-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490313" comment="mozilla-nss-certs-32bit-3.44.1-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490314" comment="mozilla-nss-devel-3.44.1-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490315" comment="mozilla-nss-sysinit-3.44.1-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490316" comment="mozilla-nss-tools-3.44.1-3.16.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137732" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1117993" ref_url="https://bugzilla.suse.com/1117993" source="BUGZILLA"/>
		<reference ref_id="1123710" ref_url="https://bugzilla.suse.com/1123710" source="BUGZILLA"/>
		<reference ref_id="1127223" ref_url="https://bugzilla.suse.com/1127223" source="BUGZILLA"/>
		<reference ref_id="1127308" ref_url="https://bugzilla.suse.com/1127308" source="BUGZILLA"/>
		<reference ref_id="1131330" ref_url="https://bugzilla.suse.com/1131330" source="BUGZILLA"/>
		<reference ref_id="CVE-2009-5155" ref_url="https://www.suse.com/security/cve/CVE-2009-5155/" source="CVE"/>
		<reference ref_id="CVE-2019-9169" ref_url="https://www.suse.com/security/cve/CVE-2019-9169/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005729.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

Security issues fixed:

- CVE-2019-9169: Fixed a heap-based buffer over-read via an attempted case-insensitive regular-expression match (bsc#1127308).
- CVE-2009-5155: Fixed a denial of service in parse_reg_exp() (bsc#1127223).

Non-security issues fixed:

- Does no longer compress debug sections in crt*.o files (bsc#1123710)
- Fixes a concurrency problem in ldconfig (bsc#1117993)
- Fixes a race condition in pthread_mutex_lock while promoting to PTHREAD_MUTEX_ELISION_NP (bsc#1131330)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-18"/>
	<updated date="2019-07-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1117993">SUSE bug 1117993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123710">SUSE bug 1123710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127223">SUSE bug 1127223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127308">SUSE bug 1127308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131330">SUSE bug 1131330</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2009-5155/">CVE-2009-5155</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9169/">CVE-2019-9169</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490317" comment="glibc-2.26-13.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490318" comment="glibc-32bit-2.26-13.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490319" comment="glibc-devel-2.26-13.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490320" comment="glibc-extra-2.26-13.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490321" comment="glibc-i18ndata-2.26-13.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490322" comment="glibc-info-2.26-13.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490323" comment="glibc-locale-2.26-13.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490324" comment="glibc-locale-base-2.26-13.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490325" comment="glibc-profile-2.26-13.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490326" comment="nscd-2.26-13.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137733" version="1" class="patch">
	<metadata>
		<title>Security update for LibreOffice (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1089811" ref_url="https://bugzilla.suse.com/1089811" source="BUGZILLA"/>
		<reference ref_id="1116451" ref_url="https://bugzilla.suse.com/1116451" source="BUGZILLA"/>
		<reference ref_id="1121874" ref_url="https://bugzilla.suse.com/1121874" source="BUGZILLA"/>
		<reference ref_id="1123131" ref_url="https://bugzilla.suse.com/1123131" source="BUGZILLA"/>
		<reference ref_id="1123455" ref_url="https://bugzilla.suse.com/1123455" source="BUGZILLA"/>
		<reference ref_id="1124062" ref_url="https://bugzilla.suse.com/1124062" source="BUGZILLA"/>
		<reference ref_id="1124869" ref_url="https://bugzilla.suse.com/1124869" source="BUGZILLA"/>
		<reference ref_id="1127760" ref_url="https://bugzilla.suse.com/1127760" source="BUGZILLA"/>
		<reference ref_id="1127857" ref_url="https://bugzilla.suse.com/1127857" source="BUGZILLA"/>
		<reference ref_id="1128845" ref_url="https://bugzilla.suse.com/1128845" source="BUGZILLA"/>
		<reference ref_id="1135189" ref_url="https://bugzilla.suse.com/1135189" source="BUGZILLA"/>
		<reference ref_id="1135228" ref_url="https://bugzilla.suse.com/1135228" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16858" ref_url="https://www.suse.com/security/cve/CVE-2018-16858/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1894-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005733.html" source="SUSE-SU"/>
		<description>

This update for libreoffice and libraries fixes the following issues:

LibreOffice was updated to 6.2.5.2 (fate#327121 bsc#1128845 bsc#1123455),
bringing lots of bug and stability fixes.

Additional bugfixes:

- If there is no firebird engine we still need java to run hsqldb (bsc#1135189)
- PPTX: Rectangle turns from green to blue and loses transparency when transparency is set (bsc#1135228)
- Slide deck compression doesn't, hmm, compress too much (bsc#1127760)
- Psychedelic graphics in LibreOffice (but not PowerPoint) (bsc#1124869)
- Image from PPTX shown in a square, not a circle (bsc#1121874)

libixion was updated to 0.14.1:

* Updated for new orcus

liborcus was updated to 0.14.1:

* Boost 1.67 support
* Various cell handling issues fixed



libwps was updated to 0.4.10:

* QuattroPro: add parser of .qwp files
* all: support complex encoding

mdds was updated to 1.4.3:

* Api change to 1.4
* More multivector operations and tweaks
* Various multi vector fixes
* flat_segment_tree: add segment iterator and functions
* fix to handle out-of-range insertions on flat_segment_tree
* Another api version -&gt; rename to mdds-1_2

myspell-dictionaries was updated to 20190423:

* Serbian dictionary updated
* Update af_ZA hunspell
* Update Spanish dictionary
* Update Slovenian dictionary
* Update Breton dictionary
* Update Galician dictionary
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-18"/>
	<updated date="2019-07-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1089811">SUSE bug 1089811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116451">SUSE bug 1116451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121874">SUSE bug 1121874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123131">SUSE bug 1123131</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123455">SUSE bug 1123455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124062">SUSE bug 1124062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124869">SUSE bug 1124869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127760">SUSE bug 1127760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127857">SUSE bug 1127857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128845">SUSE bug 1128845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135189">SUSE bug 1135189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135228">SUSE bug 1135228</bugzilla>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2018-16858/">CVE-2018-16858</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490327" comment="myspell-de-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490328" comment="myspell-de_DE-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490329" comment="myspell-dictionaries-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490330" comment="myspell-en-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490331" comment="myspell-en_US-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490332" comment="myspell-es-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490333" comment="myspell-es_ES-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490334" comment="myspell-hu_HU-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490335" comment="myspell-lightproof-en-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490336" comment="myspell-lightproof-hu_HU-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490337" comment="myspell-lightproof-pt_BR-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490338" comment="myspell-lightproof-ru_RU-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490339" comment="myspell-nb_NO-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490340" comment="myspell-no-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490341" comment="myspell-pt_BR-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490342" comment="myspell-ro-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490343" comment="myspell-ro_RO-20190423-3.9.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490344" comment="myspell-ru_RU-20190423-3.9.7 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137734" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1111331" ref_url="https://bugzilla.suse.com/1111331" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126/" source="CVE"/>
		<reference ref_id="CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127/" source="CVE"/>
		<reference ref_id="CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130/" source="CVE"/>
		<reference ref_id="CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1910-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005738.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331)

Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331)

- CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)
- CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)
- CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS)
- CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

These updates contain the CPU Microcode adjustments for the software mitigations.

For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736

Release notes:

---- updated platforms ------------------------------------
SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061d-&gt;0000061f Xeon E3/E5, Core X
SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000714-&gt;00000718 Xeon E3/E5, Core X

---- new platforms ----------------------------------------
VLV          C0       6-37-8/02           00000838 Atom Z series
VLV          C0       6-37-8/0C           00000838 Celeron N2xxx, Pentium N35xx
VLV          D0       6-37-9/0F           0000090c Atom E38xx
CHV          C0       6-4c-3/01           00000368 Atom X series
CHV          D0       6-4c-4/01           00000411 Atom X series
Readded what missing in last update:
BDX-ML       B0/M0/R0 6-4f-1/ef 0b00002e-&gt;00000036 Xeon E5/E7 v4; Core i7-69xx/68xx
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-19"/>
	<updated date="2019-07-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1111331">SUSE bug 1111331</bugzilla>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491522" comment="ucode-intel-20190618-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137735" version="1" class="patch">
	<metadata>
		<title>Security update for libgcrypt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1138939" ref_url="https://bugzilla.suse.com/1138939" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12904" ref_url="https://www.suse.com/security/cve/CVE-2019-12904/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005751.html" source="SUSE-SU"/>
		<description>
This update for libgcrypt fixes the following issues:

Security issue fixed:

- CVE-2019-12904: Fixed a flush-and-reload side-channel attack in the AES implementation (bsc#1138939).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-25"/>
	<updated date="2019-07-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1138939">SUSE bug 1138939</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-12904/">CVE-2019-12904</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491523" comment="libgcrypt-devel-1.8.2-8.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491524" comment="libgcrypt20-1.8.2-8.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491525" comment="libgcrypt20-32bit-1.8.2-8.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491526" comment="libgcrypt20-hmac-1.8.2-8.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491527" comment="libgcrypt20-hmac-32bit-1.8.2-8.6.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137736" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1115375" ref_url="https://bugzilla.suse.com/1115375" source="BUGZILLA"/>
		<reference ref_id="1140461" ref_url="https://bugzilla.suse.com/1140461" source="BUGZILLA"/>
		<reference ref_id="1141780" ref_url="https://bugzilla.suse.com/1141780" source="BUGZILLA"/>
		<reference ref_id="1141781" ref_url="https://bugzilla.suse.com/1141781" source="BUGZILLA"/>
		<reference ref_id="1141782" ref_url="https://bugzilla.suse.com/1141782" source="BUGZILLA"/>
		<reference ref_id="1141783" ref_url="https://bugzilla.suse.com/1141783" source="BUGZILLA"/>
		<reference ref_id="1141784" ref_url="https://bugzilla.suse.com/1141784" source="BUGZILLA"/>
		<reference ref_id="1141785" ref_url="https://bugzilla.suse.com/1141785" source="BUGZILLA"/>
		<reference ref_id="1141787" ref_url="https://bugzilla.suse.com/1141787" source="BUGZILLA"/>
		<reference ref_id="1141788" ref_url="https://bugzilla.suse.com/1141788" source="BUGZILLA"/>
		<reference ref_id="1141789" ref_url="https://bugzilla.suse.com/1141789" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-2745" ref_url="https://www.suse.com/security/cve/CVE-2019-2745/" source="CVE"/>
		<reference ref_id="CVE-2019-2762" ref_url="https://www.suse.com/security/cve/CVE-2019-2762/" source="CVE"/>
		<reference ref_id="CVE-2019-2766" ref_url="https://www.suse.com/security/cve/CVE-2019-2766/" source="CVE"/>
		<reference ref_id="CVE-2019-2769" ref_url="https://www.suse.com/security/cve/CVE-2019-2769/" source="CVE"/>
		<reference ref_id="CVE-2019-2786" ref_url="https://www.suse.com/security/cve/CVE-2019-2786/" source="CVE"/>
		<reference ref_id="CVE-2019-2816" ref_url="https://www.suse.com/security/cve/CVE-2019-2816/" source="CVE"/>
		<reference ref_id="CVE-2019-2818" ref_url="https://www.suse.com/security/cve/CVE-2019-2818/" source="CVE"/>
		<reference ref_id="CVE-2019-2821" ref_url="https://www.suse.com/security/cve/CVE-2019-2821/" source="CVE"/>
		<reference ref_id="CVE-2019-7317" ref_url="https://www.suse.com/security/cve/CVE-2019-7317/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2002-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192002-1.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk to version jdk-11.0.4+11 fixes the following issues:

Security issues fixed:

- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
- CVE-2019-2762: Exceptional throw cases (bsc#1141782).
- CVE-2019-2766: Improve file protocol handling (bsc#1141789).
- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
- CVE-2019-2786: More limited privilege usage (bsc#1141787).
- CVE-2019-7317: Improve PNG support options (bsc#1141780).
- CVE-2019-2818: Better Poly1305 support (bsc#1141788).
- CVE-2019-2816: Normalize normalization (bsc#1141785).
- CVE-2019-2821: Improve TLS negotiation (bsc#1141781).
- Certificate validation improvements

Non-security issues fixed:

- Do not fail installation when the manpages are not present (bsc#1115375)
- Backport upstream fix for JDK-8208602: Cannot read PEM X.509 cert if
  there is whitespace after the header or footer (bsc#1140461)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-29"/>
	<updated date="2019-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1115375">SUSE bug 1115375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140461">SUSE bug 1140461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141780">SUSE bug 1141780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141781">SUSE bug 1141781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141782">SUSE bug 1141782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141783">SUSE bug 1141783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141784">SUSE bug 1141784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141785">SUSE bug 1141785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141787">SUSE bug 1141787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141788">SUSE bug 1141788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141789">SUSE bug 1141789</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2745/">CVE-2019-2745</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2762/">CVE-2019-2762</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2766/">CVE-2019-2766</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2769/">CVE-2019-2769</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2786/">CVE-2019-2786</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-2816/">CVE-2019-2816</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2818/">CVE-2019-2818</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2821/">CVE-2019-2821</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-7317/">CVE-2019-7317</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490354" comment="java-11-openjdk-11.0.4.0-3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490355" comment="java-11-openjdk-demo-11.0.4.0-3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490356" comment="java-11-openjdk-devel-11.0.4.0-3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490357" comment="java-11-openjdk-headless-11.0.4.0-3.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137737" version="1" class="patch">
	<metadata>
		<title>Security update for bzip2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1139083" ref_url="https://bugzilla.suse.com/1139083" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12900" ref_url="https://www.suse.com/security/cve/CVE-2019-12900/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2004-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192004-1.html" source="SUSE-SU"/>
		<description>
This update for bzip2 fixes the following issues:

- Fixed a regression with the fix for CVE-2019-12900, which caused incompatibilities
  with files that used many selectors (bsc#1139083).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-29"/>
	<updated date="2019-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1139083">SUSE bug 1139083</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12900/">CVE-2019-12900</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490358" comment="bzip2-1.0.6-5.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490359" comment="libbz2-1-1.0.6-5.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490360" comment="libbz2-1-32bit-1.0.6-5.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490361" comment="libbz2-devel-1.0.6-5.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137738" version="1" class="patch">
	<metadata>
		<title>Security update for gpg2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1124847" ref_url="https://bugzilla.suse.com/1124847" source="BUGZILLA"/>
		<reference ref_id="1141093" ref_url="https://bugzilla.suse.com/1141093" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13050" ref_url="https://www.suse.com/security/cve/CVE-2019-13050/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2006-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192006-1.html" source="SUSE-SU"/>
		<description>
This update for gpg2 fixes the following issues:

Security issue fixed:

- CVE-2019-13050: Fixed a denial of service attacks via big keys (bsc#1141093).

Non-security issue fixed:

- Allow coredumps in X11 desktop sessions (bsc#1124847)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-29"/>
	<updated date="2019-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1124847">SUSE bug 1124847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141093">SUSE bug 1141093</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13050/">CVE-2019-13050</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490362" comment="gpg2-2.2.5-4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490363" comment="gpg2-lang-2.2.5-4.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137739" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1134689" ref_url="https://bugzilla.suse.com/1134689" source="BUGZILLA"/>
		<reference ref_id="1138034" ref_url="https://bugzilla.suse.com/1138034" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10130" ref_url="https://www.suse.com/security/cve/CVE-2019-10130/" source="CVE"/>
		<reference ref_id="CVE-2019-10164" ref_url="https://www.suse.com/security/cve/CVE-2019-10164/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2012-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192012-1.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

Security issue fixed:

- CVE-2019-10164: Fixed buffer-overflow vulnerabilities in SCRAM verifier parsing (bsc#1138034).
- CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators (bsc#1134689).

Bug fixes:

- For a complete list of fixes check the release notes.
 
   * https://www.postgresql.org/docs/10/release-10-9.html
   * https://www.postgresql.org/docs/10/release-10-8.html
   * https://www.postgresql.org/docs/10/release-10-7.html
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-29"/>
	<updated date="2019-07-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1134689">SUSE bug 1134689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138034">SUSE bug 1138034</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10130/">CVE-2019-10130</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10164/">CVE-2019-10164</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491528" comment="libpq5-10.9-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491529" comment="postgresql10-10.9-8.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137740" version="1" class="patch">
	<metadata>
		<title>Security update for polkit (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1121826" ref_url="https://bugzilla.suse.com/1121826" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6133" ref_url="https://www.suse.com/security/cve/CVE-2019-6133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005759.html" source="SUSE-SU"/>
		<description>
This update for polkit fixes the following issues:

Security issue fixed:

- CVE-2019-6133: Fixed improper caching of auth decisions, which could bypass 
  uid checking in the interactive backend (bsc#1121826).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-30"/>
	<updated date="2019-07-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1121826">SUSE bug 1121826</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6133/">CVE-2019-6133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490366" comment="libpolkit0-0.114-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490367" comment="polkit-0.114-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490368" comment="polkit-devel-0.114-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490369" comment="typelib-1_0-Polkit-1_0-0.114-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137741" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb, mariadb-connector-c (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1126088" ref_url="https://bugzilla.suse.com/1126088" source="BUGZILLA"/>
		<reference ref_id="1132666" ref_url="https://bugzilla.suse.com/1132666" source="BUGZILLA"/>
		<reference ref_id="1136035" ref_url="https://bugzilla.suse.com/1136035" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-2614" ref_url="https://www.suse.com/security/cve/CVE-2019-2614/" source="CVE"/>
		<reference ref_id="CVE-2019-2627" ref_url="https://www.suse.com/security/cve/CVE-2019-2627/" source="CVE"/>
		<reference ref_id="CVE-2019-2628" ref_url="https://www.suse.com/security/cve/CVE-2019-2628/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2020-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005758.html" source="SUSE-SU"/>
		<description>
This update for mariadb and mariadb-connector-c fixes the following issues:

mariadb:

- Update to version 10.2.25 (bsc#1136035)
- CVE-2019-2628: Fixed a remote denial of service by an privileged attacker (bsc#1136035).
- CVE-2019-2627: Fixed another remote denial of service by an privileged attacker (bsc#1136035).
- CVE-2019-2614: Fixed a potential remote denial of service by an privileged attacker (bsc#1136035).
- Fixed reading options for multiple instances if my${INSTANCE}.cnf is used (bsc#1132666)

mariadb-connector-c:

- Update to version 3.1.2 (bsc#1136035)
- Moved libmariadb.pc from /usr/lib/pkgconfig to /usr/lib64/pkgconfig for x86_64 (bsc#1126088) 
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-30"/>
	<updated date="2019-07-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1126088">SUSE bug 1126088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132666">SUSE bug 1132666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136035">SUSE bug 1136035</bugzilla>
	<cve impact="important" cvss3="4.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2614/">CVE-2019-2614</cve>
	<cve impact="important" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2627/">CVE-2019-2627</cve>
	<cve impact="important" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2628/">CVE-2019-2628</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490370" comment="libmariadb3-3.1.2-3.9.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490371" comment="libmariadbprivate-3.1.2-3.9.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137742" version="1" class="patch">
	<metadata>
		<title>Security update for subversion (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1142721" ref_url="https://bugzilla.suse.com/1142721" source="BUGZILLA"/>
		<reference ref_id="1142743" ref_url="https://bugzilla.suse.com/1142743" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11782" ref_url="https://www.suse.com/security/cve/CVE-2018-11782/" source="CVE"/>
		<reference ref_id="CVE-2019-0203" ref_url="https://www.suse.com/security/cve/CVE-2019-0203/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2031-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005766.html" source="SUSE-SU"/>
		<description>
This update for subversion to version 1.10.6 fixes the following issues:

Security issues fixed:

- CVE-2018-11782: Fixed a remote denial of service in svnserve 'get-deleted-rev' (bsc#1142743).
- CVE-2019-0203: Fixed a remote, unauthenticated denial of service in svnserve (bsc#1142721).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-31"/>
	<updated date="2019-07-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1142721">SUSE bug 1142721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142743">SUSE bug 1142743</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-11782/">CVE-2018-11782</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-0203/">CVE-2019-0203</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490385" comment="subversion-1.10.6-3.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490386" comment="subversion-devel-1.10.6-3.6.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137743" version="1" class="patch">
	<metadata>
		<title>Security update for ceph (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1121567" ref_url="https://bugzilla.suse.com/1121567" source="BUGZILLA"/>
		<reference ref_id="1123360" ref_url="https://bugzilla.suse.com/1123360" source="BUGZILLA"/>
		<reference ref_id="1124957" ref_url="https://bugzilla.suse.com/1124957" source="BUGZILLA"/>
		<reference ref_id="1125080" ref_url="https://bugzilla.suse.com/1125080" source="BUGZILLA"/>
		<reference ref_id="1125899" ref_url="https://bugzilla.suse.com/1125899" source="BUGZILLA"/>
		<reference ref_id="1131984" ref_url="https://bugzilla.suse.com/1131984" source="BUGZILLA"/>
		<reference ref_id="1132396" ref_url="https://bugzilla.suse.com/1132396" source="BUGZILLA"/>
		<reference ref_id="1133139" ref_url="https://bugzilla.suse.com/1133139" source="BUGZILLA"/>
		<reference ref_id="1133461" ref_url="https://bugzilla.suse.com/1133461" source="BUGZILLA"/>
		<reference ref_id="1135030" ref_url="https://bugzilla.suse.com/1135030" source="BUGZILLA"/>
		<reference ref_id="1135219" ref_url="https://bugzilla.suse.com/1135219" source="BUGZILLA"/>
		<reference ref_id="1135221" ref_url="https://bugzilla.suse.com/1135221" source="BUGZILLA"/>
		<reference ref_id="1135388" ref_url="https://bugzilla.suse.com/1135388" source="BUGZILLA"/>
		<reference ref_id="1136110" ref_url="https://bugzilla.suse.com/1136110" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16889" ref_url="https://www.suse.com/security/cve/CVE-2018-16889/" source="CVE"/>
		<reference ref_id="CVE-2019-3821" ref_url="https://www.suse.com/security/cve/CVE-2019-3821/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005774.html" source="SUSE-SU"/>
		<description>
This update for ceph fixes the following issues:

Security issues fixed:

- CVE-2019-3821: civetweb: fix file descriptor leak (bsc#1125080)
- CVE-2018-16889: rgw: sanitize customer encryption keys from log output in v4 auth (bsc#1121567)

Non-security issues fixed:

- install grafana dashboards world readable (bsc#1136110)
- upgrade results in cluster outage (bsc#1132396)
- ceph status reports 'HEALTH_WARN 3 monitors have not enabled msgr2' (bsc#1124957)
-  Dashboard: Opening tcmu-runner perf counters results in a 404 (bsc#1135388)
- RadosGW stopped expiring objects (bsc#1133139)
- Ceph does not recover when rebuilding every OSD  (bsc#1133461)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-05"/>
	<updated date="2019-08-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1121567">SUSE bug 1121567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123360">SUSE bug 1123360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124957">SUSE bug 1124957</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125080">SUSE bug 1125080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125899">SUSE bug 1125899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131984">SUSE bug 1131984</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132396">SUSE bug 1132396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133139">SUSE bug 1133139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133461">SUSE bug 1133461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135030">SUSE bug 1135030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135219">SUSE bug 1135219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135221">SUSE bug 1135221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135388">SUSE bug 1135388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136110">SUSE bug 1136110</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-16889/">CVE-2018-16889</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3821/">CVE-2019-3821</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491530" comment="ceph-common-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491531" comment="libcephfs-devel-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491532" comment="libcephfs2-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491533" comment="librados-devel-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491534" comment="librados2-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491535" comment="libradospp-devel-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491536" comment="librbd-devel-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491537" comment="librbd1-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491538" comment="librgw-devel-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491539" comment="librgw2-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491540" comment="python3-ceph-argparse-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491541" comment="python3-cephfs-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491542" comment="python3-rados-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491543" comment="python3-rbd-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491544" comment="python3-rgw-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491545" comment="rados-objclass-devel-14.2.1.468+g994fd9e0cc-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137744" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1094814" ref_url="https://bugzilla.suse.com/1094814" source="BUGZILLA"/>
		<reference ref_id="1138459" ref_url="https://bugzilla.suse.com/1138459" source="BUGZILLA"/>
		<reference ref_id="1141853" ref_url="https://bugzilla.suse.com/1141853" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20852" ref_url="https://www.suse.com/security/cve/CVE-2018-20852/" source="CVE"/>
		<reference ref_id="CVE-2019-10160" ref_url="https://www.suse.com/security/cve/CVE-2019-10160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005777.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

Security issue fixed:

- CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459).
- CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853).

Non-security issue fixed:

- Fixed an issue where the SIGINT signal was ignored or not handled (bsc#1094814).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-06"/>
	<updated date="2019-08-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1094814">SUSE bug 1094814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138459">SUSE bug 1138459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141853">SUSE bug 1141853</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20852/">CVE-2018-20852</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10160/">CVE-2019-10160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490387" comment="libpython3_6m1_0-3.6.8-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490388" comment="python3-3.6.8-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490389" comment="python3-base-3.6.8-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490390" comment="python3-curses-3.6.8-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490391" comment="python3-dbm-3.6.8-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490392" comment="python3-devel-3.6.8-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490393" comment="python3-idle-3.6.8-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490394" comment="python3-tk-3.6.8-3.23.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137745" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1138459" ref_url="https://bugzilla.suse.com/1138459" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10160" ref_url="https://www.suse.com/security/cve/CVE-2019-10160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005783.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

Security issue fixed:

- CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-06"/>
	<updated date="2019-08-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1138459">SUSE bug 1138459</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10160/">CVE-2019-10160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490395" comment="libpython2_7-1_0-2.7.14-7.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490396" comment="python-2.7.14-7.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490397" comment="python-base-2.7.14-7.14.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137746" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1083710" ref_url="https://bugzilla.suse.com/1083710" source="BUGZILLA"/>
		<reference ref_id="1102247" ref_url="https://bugzilla.suse.com/1102247" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1119222" ref_url="https://bugzilla.suse.com/1119222" source="BUGZILLA"/>
		<reference ref_id="1123080" ref_url="https://bugzilla.suse.com/1123080" source="BUGZILLA"/>
		<reference ref_id="1127034" ref_url="https://bugzilla.suse.com/1127034" source="BUGZILLA"/>
		<reference ref_id="1127315" ref_url="https://bugzilla.suse.com/1127315" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1130972" ref_url="https://bugzilla.suse.com/1130972" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1134097" ref_url="https://bugzilla.suse.com/1134097" source="BUGZILLA"/>
		<reference ref_id="1134390" ref_url="https://bugzilla.suse.com/1134390" source="BUGZILLA"/>
		<reference ref_id="1134399" ref_url="https://bugzilla.suse.com/1134399" source="BUGZILLA"/>
		<reference ref_id="1135335" ref_url="https://bugzilla.suse.com/1135335" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1136217" ref_url="https://bugzilla.suse.com/1136217" source="BUGZILLA"/>
		<reference ref_id="1136342" ref_url="https://bugzilla.suse.com/1136342" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1136462" ref_url="https://bugzilla.suse.com/1136462" source="BUGZILLA"/>
		<reference ref_id="1136467" ref_url="https://bugzilla.suse.com/1136467" source="BUGZILLA"/>
		<reference ref_id="1137458" ref_url="https://bugzilla.suse.com/1137458" source="BUGZILLA"/>
		<reference ref_id="1137534" ref_url="https://bugzilla.suse.com/1137534" source="BUGZILLA"/>
		<reference ref_id="1137535" ref_url="https://bugzilla.suse.com/1137535" source="BUGZILLA"/>
		<reference ref_id="1137584" ref_url="https://bugzilla.suse.com/1137584" source="BUGZILLA"/>
		<reference ref_id="1137609" ref_url="https://bugzilla.suse.com/1137609" source="BUGZILLA"/>
		<reference ref_id="1137811" ref_url="https://bugzilla.suse.com/1137811" source="BUGZILLA"/>
		<reference ref_id="1137827" ref_url="https://bugzilla.suse.com/1137827" source="BUGZILLA"/>
		<reference ref_id="1138874" ref_url="https://bugzilla.suse.com/1138874" source="BUGZILLA"/>
		<reference ref_id="1139358" ref_url="https://bugzilla.suse.com/1139358" source="BUGZILLA"/>
		<reference ref_id="1139619" ref_url="https://bugzilla.suse.com/1139619" source="BUGZILLA"/>
		<reference ref_id="1140133" ref_url="https://bugzilla.suse.com/1140133" source="BUGZILLA"/>
		<reference ref_id="1140139" ref_url="https://bugzilla.suse.com/1140139" source="BUGZILLA"/>
		<reference ref_id="1140322" ref_url="https://bugzilla.suse.com/1140322" source="BUGZILLA"/>
		<reference ref_id="1140559" ref_url="https://bugzilla.suse.com/1140559" source="BUGZILLA"/>
		<reference ref_id="1140652" ref_url="https://bugzilla.suse.com/1140652" source="BUGZILLA"/>
		<reference ref_id="1140676" ref_url="https://bugzilla.suse.com/1140676" source="BUGZILLA"/>
		<reference ref_id="1140903" ref_url="https://bugzilla.suse.com/1140903" source="BUGZILLA"/>
		<reference ref_id="1140945" ref_url="https://bugzilla.suse.com/1140945" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1141312" ref_url="https://bugzilla.suse.com/1141312" source="BUGZILLA"/>
		<reference ref_id="1141401" ref_url="https://bugzilla.suse.com/1141401" source="BUGZILLA"/>
		<reference ref_id="1141402" ref_url="https://bugzilla.suse.com/1141402" source="BUGZILLA"/>
		<reference ref_id="1141452" ref_url="https://bugzilla.suse.com/1141452" source="BUGZILLA"/>
		<reference ref_id="1141453" ref_url="https://bugzilla.suse.com/1141453" source="BUGZILLA"/>
		<reference ref_id="1141454" ref_url="https://bugzilla.suse.com/1141454" source="BUGZILLA"/>
		<reference ref_id="1141478" ref_url="https://bugzilla.suse.com/1141478" source="BUGZILLA"/>
		<reference ref_id="1141558" ref_url="https://bugzilla.suse.com/1141558" source="BUGZILLA"/>
		<reference ref_id="1142023" ref_url="https://bugzilla.suse.com/1142023" source="BUGZILLA"/>
		<reference ref_id="1142052" ref_url="https://bugzilla.suse.com/1142052" source="BUGZILLA"/>
		<reference ref_id="1142083" ref_url="https://bugzilla.suse.com/1142083" source="BUGZILLA"/>
		<reference ref_id="1142112" ref_url="https://bugzilla.suse.com/1142112" source="BUGZILLA"/>
		<reference ref_id="1142115" ref_url="https://bugzilla.suse.com/1142115" source="BUGZILLA"/>
		<reference ref_id="1142119" ref_url="https://bugzilla.suse.com/1142119" source="BUGZILLA"/>
		<reference ref_id="1142220" ref_url="https://bugzilla.suse.com/1142220" source="BUGZILLA"/>
		<reference ref_id="1142221" ref_url="https://bugzilla.suse.com/1142221" source="BUGZILLA"/>
		<reference ref_id="1142254" ref_url="https://bugzilla.suse.com/1142254" source="BUGZILLA"/>
		<reference ref_id="1142350" ref_url="https://bugzilla.suse.com/1142350" source="BUGZILLA"/>
		<reference ref_id="1142351" ref_url="https://bugzilla.suse.com/1142351" source="BUGZILLA"/>
		<reference ref_id="1142354" ref_url="https://bugzilla.suse.com/1142354" source="BUGZILLA"/>
		<reference ref_id="1142359" ref_url="https://bugzilla.suse.com/1142359" source="BUGZILLA"/>
		<reference ref_id="1142450" ref_url="https://bugzilla.suse.com/1142450" source="BUGZILLA"/>
		<reference ref_id="1142623" ref_url="https://bugzilla.suse.com/1142623" source="BUGZILLA"/>
		<reference ref_id="1142673" ref_url="https://bugzilla.suse.com/1142673" source="BUGZILLA"/>
		<reference ref_id="1142701" ref_url="https://bugzilla.suse.com/1142701" source="BUGZILLA"/>
		<reference ref_id="1142868" ref_url="https://bugzilla.suse.com/1142868" source="BUGZILLA"/>
		<reference ref_id="1143003" ref_url="https://bugzilla.suse.com/1143003" source="BUGZILLA"/>
		<reference ref_id="1143045" ref_url="https://bugzilla.suse.com/1143045" source="BUGZILLA"/>
		<reference ref_id="1143105" ref_url="https://bugzilla.suse.com/1143105" source="BUGZILLA"/>
		<reference ref_id="1143185" ref_url="https://bugzilla.suse.com/1143185" source="BUGZILLA"/>
		<reference ref_id="1143189" ref_url="https://bugzilla.suse.com/1143189" source="BUGZILLA"/>
		<reference ref_id="1143191" ref_url="https://bugzilla.suse.com/1143191" source="BUGZILLA"/>
		<reference ref_id="1143209" ref_url="https://bugzilla.suse.com/1143209" source="BUGZILLA"/>
		<reference ref_id="1143507" ref_url="https://bugzilla.suse.com/1143507" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20855" ref_url="https://www.suse.com/security/cve/CVE-2018-20855/" source="CVE"/>
		<reference ref_id="CVE-2019-1125" ref_url="https://www.suse.com/security/cve/CVE-2019-1125/" source="CVE"/>
		<reference ref_id="CVE-2019-11810" ref_url="https://www.suse.com/security/cve/CVE-2019-11810/" source="CVE"/>
		<reference ref_id="CVE-2019-13631" ref_url="https://www.suse.com/security/cve/CVE-2019-13631/" source="CVE"/>
		<reference ref_id="CVE-2019-13648" ref_url="https://www.suse.com/security/cve/CVE-2019-13648/" source="CVE"/>
		<reference ref_id="CVE-2019-14283" ref_url="https://www.suse.com/security/cve/CVE-2019-14283/" source="CVE"/>
		<reference ref_id="CVE-2019-14284" ref_url="https://www.suse.com/security/cve/CVE-2019-14284/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005789.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2018-20855: An issue was discovered in the Linux kernel In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace(bsc#1143045).
- CVE-2019-1125: Exclude ATOMs from speculation through SWAPGS (bsc#1139358).
- CVE-2019-14283: In the Linux kernel, set_geometry in drivers/block/floppy.c did not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It could be triggered by an unprivileged local user when a floppy disk was inserted. NOTE: QEMU creates the floppy device by default. (bnc#1143191)
- CVE-2019-11810: An issue was discovered in the Linux kernel A NULL pointer dereference could occur when megasas_create_frame_pool() failed in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This caused a Denial of Service, related to a use-after-free (bnc#1134399).
- CVE-2019-13648: In the Linux kernel on the powerpc platform, when hardware transactional memory was disabled, a local user could cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sent a crafted signal frame. (bnc#1142254)
- CVE-2019-13631: In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel, a malicious USB device could send an HID report that triggered an out-of-bounds write during generation of debugging messages. (bnc#1142023)

The following non-security bugs were fixed:

- acpi/nfit: Always dump _DSM output payload (bsc#1142351).
- Add back sibling paca poiter to paca (bsc#1055117).
- Add support for crct10dif-vpmsum ().
- af_unix: remove redundant lockdep class (git-fixes).
- alsa: compress: Be more restrictive about when a drain is allowed (bsc#1051510).
- alsa: compress: Do not allow paritial drain operations on capture streams (bsc#1051510).
- alsa: compress: Fix regression on compressed capture streams (bsc#1051510).
- alsa: compress: Prevent bypasses of set_params (bsc#1051510).
- alsa: hda - Add a conexant codec entry to let mute led work (bsc#1051510).
- alsa: hda - Do not resume forcibly i915 HDMI/DP codec (bsc#1111666).
- alsa: hda - Fix intermittent CORB/RIRB stall on Intel chips (bsc#1111666).
- alsa: hda/hdmi - Fix i915 reverse port/pin mapping (bsc#1111666).
- alsa: hda/hdmi - Remove duplicated define (bsc#1111666).
- alsa: hda - Optimize resume for codecs without jack detection (bsc#1111666).
- alsa: hda/realtek: apply ALC891 headset fixup to one Dell machine (bsc#1051510).
- alsa: hda/realtek - Fixed Headphone Mic can't record on Dell platform (bsc#1051510).
- alsa: hda/realtek - Headphone Mic can't record after S3 (bsc#1051510).
- alsa: line6: Fix a typo (bsc#1051510).
- alsa: line6: Fix wrong altsetting for LINE6_PODHD500_1 (bsc#1051510).
- alsa: seq: Break too long mutex context in the write loop (bsc#1051510).
- alsa: usb-audio: Add quirk for Focusrite Scarlett Solo (bsc#1051510).
- alsa: usb-audio: Add quirk for MOTU MicroBook II (bsc#1051510).
- alsa: usb-audio: Cleanup DSD whitelist (bsc#1051510).
- alsa: usb-audio: Enable .product_name override for Emagic, Unitor 8 (bsc#1051510).
- alsa: usb-audio: fix Line6 Helix audio format rates (bsc#1111666).
- alsa: usb-audio: Sanity checks for each pipe and EP types (bsc#1051510).
- arm64: do not override dma_max_pfn (jsc#SLE-6197 bsc#1140559 LTC#173150).
- asoc : cs4265 : readable register too low (bsc#1051510).
- asoc: max98090: remove 24-bit format support if RJ is 0 (bsc#1051510).
- asoc: soc-pcm: BE dai needs prepare when pause release after resume (bsc#1051510).
- ath10k: add missing error handling (bsc#1111666).
- ath10k: add peer id check in ath10k_peer_find_by_id (bsc#1111666).
- ath10k: destroy sdio workqueue while remove sdio module (bsc#1111666).
- ath10k: Do not send probe response template for mesh (bsc#1111666).
- ath10k: Fix encoding for protected management frames (bsc#1111666).
- ath10k: fix incorrect multicast/broadcast rate setting (bsc#1111666).
- ath10k: fix PCIE device wake up failed (bsc#1111666).
- ath6kl: add some bounds checking (bsc#1051510).
- ath9k: Check for errors when reading SREV register (bsc#1111666).
- ath9k: correctly handle short radar pulses (bsc#1111666).
- ath: DFS JP domain W56 fixed pulse type 3 RADAR detection (bsc#1111666).
- batman-adv: fix for leaked TVLV handler (bsc#1051510).
- bcache: acquire bch_register_lock later in cached_dev_detach_finish() (bsc#1140652).
- bcache: acquire bch_register_lock later in cached_dev_free() (bsc#1140652).
- bcache: add code comments for journal_read_bucket() (bsc#1140652).
- bcache: Add comments for blkdev_put() in registration code path (bsc#1140652).
- bcache: add comments for closure_fn to be called in closure_queue() (bsc#1140652).
- bcache: add comments for kobj release callback routine (bsc#1140652).
- bcache: add comments for mutex_lock(b-&gt;write_lock) (bsc#1140652).
- bcache: add error check for calling register_bdev() (bsc#1140652).
- bcache: add failure check to run_cache_set() for journal replay (bsc#1140652).
- bcache: add io error counting in write_bdev_super_endio() (bsc#1140652).
- bcache: add more error message in bch_cached_dev_attach() (bsc#1140652).
- bcache: add pendings_cleanup to stop pending bcache device (bsc#1140652).
- bcache: add reclaimed_journal_buckets to struct cache_set (bsc#1140652).
- bcache: add return value check to bch_cached_dev_run() (bsc#1140652).
- bcache: avoid a deadlock in bcache_reboot() (bsc#1140652).
- bcache: avoid clang -Wunintialized warning (bsc#1140652).
- bcache: avoid flushing btree node in cache_set_flush() if io disabled (bsc#1140652).
- bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set (bsc#1140652).
- bcache: check CACHE_SET_IO_DISABLE bit in bch_journal() (bsc#1140652).
- bcache: check CACHE_SET_IO_DISABLE in allocator code (bsc#1140652).
- bcache: check c-&gt;gc_thread by IS_ERR_OR_NULL in cache_set_flush() (bsc#1140652).
- bcache: Clean up bch_get_congested() (bsc#1140652).
- bcache: destroy dc-&gt;writeback_write_wq if failed to create dc-&gt;writeback_thread (bsc#1140652).
- bcache: do not assign in if condition in bcache_device_init() (bsc#1140652).
- bcache: do not set max writeback rate if gc is running (bsc#1140652).
- bcache: fix a race between cache register and cacheset unregister (bsc#1140652).
- bcache: fix crashes stopping bcache device before read miss done (bsc#1140652).
- bcache: fix failure in journal relplay (bsc#1140652).
- bcache: fix inaccurate result of unused buckets (bsc#1140652).
- bcache: fix mistaken sysfs entry for io_error counter (bsc#1140652).
- bcache: fix potential deadlock in cached_def_free() (bsc#1140652).
- bcache: fix race in btree_flush_write() (bsc#1140652).
- bcache: fix return value error in bch_journal_read() (bsc#1140652).
- bcache: fix stack corruption by PRECEDING_KEY() (bsc#1140652).
- bcache: fix wrong usage use-after-freed on keylist in out_nocoalesce branch of btree_gc_coalesce (bsc#1140652).
- bcache: ignore read-ahead request failure on backing device (bsc#1140652).
- bcache: improve bcache_reboot() (bsc#1140652).
- bcache: improve error message in bch_cached_dev_run() (bsc#1140652).
- bcache: make bset_search_tree() be more understandable (bsc#1140652).
- bcache: make is_discard_enabled() static (bsc#1140652).
- bcache: more detailed error message to bcache_device_link() (bsc#1140652).
- bcache: move definition of 'int ret' out of macro read_bucket() (bsc#1140652).
- bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() (bsc#1140652).
- bcache: only clear BTREE_NODE_dirty bit when it is set (bsc#1140652).
- bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached (bsc#1140652).
- bcache: performance improvement for btree_flush_write() (bsc#1140652).
- bcache: remove redundant LIST_HEAD(journal) from run_cache_set() (bsc#1140652).
- bcache: remove redundant LIST_HEAD(journal) from run_cache_set() (bsc#1140652).
- bcache: remove retry_flush_write from struct cache_set (bsc#1140652).
- bcache: remove unncessary code in bch_btree_keys_init() (bsc#1140652).
- bcache: remove unnecessary prefetch() in bset_search_tree() (bsc#1140652).
- bcache: return error immediately in bch_journal_replay() (bsc#1140652).
- bcache: Revert 'bcache: fix high CPU occupancy during journal' (bsc#1140652).
- bcache: Revert 'bcache: free heap cache_set-&gt;flush_btree in bch_journal_free' (bsc#1140652).
- bcache: set largest seq to ja-&gt;seq[bucket_index] in journal_read_bucket() (bsc#1140652).
- bcache: shrink btree node cache after bch_btree_check() (bsc#1140652).
- bcache: stop writeback kthread and kworker when bch_cached_dev_run() failed (bsc#1140652).
- bcache: use sysfs_match_string() instead of __sysfs_match_string() (bsc#1140652).
- be2net: Fix number of Rx queues used for flow hashing (networking-stable-19_06_18).
- be2net: Signal that the device cannot transmit during reconfiguration (bsc#1127315).
- be2net: Synchronize be_update_queues with dev_watchdog (bsc#1127315).
- block, bfq: NULL out the bic when it's no longer valid (bsc#1142359).
- bnx2x: Prevent load reordering in tx completion processing (bsc#1142868).
- bnxt_en: Cap the returned MSIX vectors to the RDMA driver (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Disable bus master during PCI shutdown and driver unload (bsc#1104745).
- bnxt_en: Fix aggregation buffer leak under OOM condition (networking-stable-19_05_31).
- bnxt_en: Fix statistics context reservation logic for RDMA driver (bsc#1104745).
- bnxt_en: Suppress error messages when querying DSCP DCB capabilities (bsc#1104745).
- bonding: fix arp_validate toggling in active-backup mode (networking-stable-19_05_14).
- bonding: Force slave speed check after link state recovery for 802.3ad (bsc#1137584).
- bpf: btf: fix the brackets of BTF_INT_OFFSET() (bsc#1083647).
- bpf: fix callees pruning callers (bsc#1109837).
- bpf: fix nested bpf tracepoints with per-cpu data (bsc#1083647).
- bpf, x64: fix stack layout of JITed bpf code (bsc#1083647).
- bpf, x64: save 5 bytes in prologue when ebpf insns came from cbpf (bsc#1083647).
- bridge: Fix error path for kobject_init_and_add() (networking-stable-19_05_14).
- btrfs: fix race between block group removal and block group allocation (bsc#1143003).
- carl9170: fix misuse of device driver API (bsc#1111666).
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() (bsc#1141478).
- clk: qcom: Fix -Wunused-const-variable (bsc#1051510).
- clk: rockchip: Do not yell about bad mmc phases when getting (bsc#1051510).
- clk: tegra210: fix PLLU and PLLU_OUT1 (bsc#1051510).
- Correct iwlwifi 22000 series ucode file name (bsc#1142673)
- Correct the buggy backport about AER / DPC pcie stuff (bsc#1142623)
- cpufreq: acpi-cpufreq: Report if CPU does not support boost technologies (bsc#1051510).
- cpufreq: brcmstb-avs-cpufreq: Fix initial command check (bsc#1051510).
- cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency (bsc#1051510).
- cpufreq: check if policy is inactive early in __cpufreq_get() (bsc#1051510).
- cpufreq: kirkwood: fix possible object reference leak (bsc#1051510).
- cpufreq/pasemi: fix possible object reference leak (bsc#1051510).
- cpufreq: pmac32: fix possible object reference leak (bsc#1051510).
- cpufreq: ppc_cbe: fix possible object reference leak (bsc#1051510).
- cpufreq: Use struct kobj_attribute instead of struct global_attr (bsc#1051510).
- crypto: arm64/sha1-ce - correct digest for empty data in finup (bsc#1051510).
- crypto: arm64/sha2-ce - correct digest for empty data in finup (bsc#1051510).
- crypto: ccp - Fix 3DES complaint from ccp-crypto module (bsc#1051510).
- crypto: ccp - fix AES CFB error exposed by new test vectors (bsc#1051510).
- crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL (bsc#1051510).
- crypto: ccp/gcm - use const time tag comparison (bsc#1051510).
- crypto: ccp - memset structure fields to zero before reuse (bsc#1051510).
- crypto: ccp - Validate the the error value used to index error messages (bsc#1051510).
- crypto: chacha20poly1305 - fix atomic sleep when using async algorithm (bsc#1051510).
- crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe (bsc#1051510).
- crypto: ghash - fix unaligned memory access in ghash_setkey() (bsc#1051510).
- crypto: talitos - Align SEC1 accesses to 32 bits boundaries (bsc#1051510).
- crypto: talitos - check data blocksize in ablkcipher (bsc#1051510).
- crypto: talitos - fix CTR alg blocksize (bsc#1051510).
- crypto: talitos - fix max key size for sha384 and sha512 (bsc#1051510).
- crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking (bsc#1051510).
- crypto: talitos - properly handle split ICV (bsc#1051510).
- crypto: talitos - reduce max key size for SEC1 (bsc#1051510).
- crypto: talitos - rename alternative AEAD algos (bsc#1051510).
- dasd_fba: Display '00000000' for zero page when dumping sense (bsc#1123080).
- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc (bsc#1111666).
- dma-direct: add support for allocation from ZONE_DMA and ZONE_DMA32 (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-direct: do not retry allocation for no-op GFP_DMA (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-direct: retry allocations using GFP_DMA for small masks (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dmaengine: hsu: Revert 'set HSU_CH_MTSR to memory width' (bsc#1051510).
- dma-mapping: move dma_mark_clean to dma-direct.h (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-mapping: move swiotlb arch helpers to a new header (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-mapping: take dma_pfn_offset into account in dma_max_pfn (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dpaa_eth: fix SG frame cleanup (networking-stable-19_05_14).
- drm/amd/display: Make some functions static (bsc#1111666).
- drm/atmel-hlcdc: revert shift by 8 (bsc#1111666).
- drm/i915/cml: Introduce Comet Lake PCH (jsc#SLE-6681).
- drm/i915/icl: Add WaDisableBankHangMode (bsc#1111666).
- drm/meson: Add support for XBGR8888 &amp; ABGR8888 formats (bsc#1051510).
- drm/msm/a3xx: remove TPL1 regs from snapshot (bsc#1051510).
- drm/msm/mdp5: Fix mdp5_cfg_init error return (bsc#1111666).
- drm/nouveau/i2c: Enable i2c pads &amp; busses during preinit (bsc#1051510).
- drm: return -EFAULT if copy_to_user() fails (bsc#1111666).
- drm/rockchip: Properly adjust to a true clock in adjusted_mode (bsc#1051510).
- drm/udl: introduce a macro to convert dev to udl (bsc#1111666).
- drm/udl: move to embedding drm device inside udl device (bsc#1111666).
- drm/udl: Replace drm_dev_unref with drm_dev_put (bsc#1111666).
- drm/vc4: fix fb references in async update (bsc#1141312).
- drm/vmwgfx: Honor the sg list segment size limitation (bsc#1111666).
- e1000e: start network tx queue only when link is up (bsc#1051510).
- Enable intel-speed-select driver and update supported.conf (jsc#SLE-5364)
- ethtool: check the return value of get_regs_len (git-fixes).
- ethtool: fix potential userspace buffer overflow (networking-stable-19_06_09).
- Fix kABI for asus-wmi quirk_entry field addition (bsc#1051510).
- Fix memory leak in sctp_process_init (networking-stable-19_06_09).
- fork, memcg: fix cached_stacks case (bsc#1134097).
- fork, memcg: fix crash in free_thread_stack on memcg charge fail (bsc#1134097).
- fpga: add intel stratix10 soc fpga manager driver (jsc#SLE-7057).
- fpga: stratix10-soc: fix use-after-free on s10_init() (jsc#SLE-7057).
- fpga: stratix10-soc: fix wrong of_node_put() in init function (jsc#jsc#SLE-7057).
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM (bsc#1111666).
- hid: wacom: correct touch resolution x/y typo (bsc#1051510).
- hid: wacom: generic: Correct pad syncing (bsc#1051510).
- hid: wacom: generic: only switch the mode on devices with LEDs (bsc#1051510).
- hid: wacom: generic: read HID_DG_CONTACTMAX from any feature report (bsc#1051510).
- ib/ipoib: Add child to parent list only if device initialized (bsc#1103992).
- ib/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE (bsc#1103991).
- idr: fix overflow case for idr_for_each_entry_ul() (bsc#1109837).
- input: elantech - enable middle button support on 2 ThinkPads (bsc#1051510).
- input: imx_keypad - make sure keyboard can always wake up system (bsc#1051510).
- input: psmouse - fix build error of multiple definition (bsc#1051510).
- input: synaptics - enable SMBUS on T480 thinkpad trackpad (bsc#1051510).
- input: tm2-touchkey - acknowledge that setting brightness is a blocking call (bsc#1129770).
- intel_th: msu: Fix single mode with disabled IOMMU (bsc#1051510).
- iommu-helper: mark iommu_is_span_boundary as inline (jsc#SLE-6197 bsc#1140559 LTC#173150).
- ipv4: Fix raw socket lookup for local traffic (networking-stable-19_05_14).
- ipv4/igmp: fix another memory leak in igmpv3_del_delrec() (networking-stable-19_05_31).
- ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST (networking-stable-19_05_31).
- ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop (git-fixes).
- ipv6: Consider sk_bound_dev_if when binding a raw socket to an address (networking-stable-19_05_31).
- ipv6: fix EFAULT on sendto with icmpv6 and hdrincl (networking-stable-19_06_09).
- ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero (networking-stable-19_06_18).
- ipv6: use READ_ONCE() for inet-&gt;hdrincl as in ipv4 (networking-stable-19_06_09).
- iwlwifi: correct one of the PCI struct names (bsc#1111666).
- iwlwifi: do not WARN when calling iwl_get_shared_mem_conf with RF-Kill (bsc#1111666).
- iwlwifi: fix cfg structs for 22000 with different RF modules (bsc#1111666).
- iwlwifi: fix devices with PCI Device ID 0x34F0 and 11ac RF modules (bsc#1111666).
- iwlwifi: Fix double-free problems in iwl_req_fw_callback() (bsc#1111666).
- iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices (bsc#1111666).
- iwlwifi: mvm: Drop large non sta frames (bsc#1111666).
- iwlwifi: pcie: do not service an interrupt that was masked (bsc#1111666).
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X (bsc#1111666).
- kabi fix for hda_codec.relaxed_resume flag (bsc#1111666).
- kabi: Fix lost iommu-helper symbols on arm64 (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: mask changes made by basic protected virtualization support (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: mask changes made by swiotlb for protected virtualization (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: mask changes made by use of DMA memory for adapter interrupts (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: remove unused hcall definition (bsc#1140322 LTC#176270).
- kbuild: use -flive-patching when CONFIG_LIVEPATCH is enabled (bsc#1071995).
- kernel: jump label transformation performance (bsc#1137534 bsc#1137535 			LTC#178058 LTC#178059).
- kvm: arm/arm64: vgic-its: Take the srcu lock when parsing the memslots (bsc#1133021).
- kvm: arm/arm64: vgic-its: Take the srcu lock when writing to guest memory (bsc#1133021).
- kvm: mmu: Fix overflow on kvm mmu page limit calculation (bsc#1135335).
- kvm/mmu: kABI fix for *_mmu_pages changes in struct kvm_arch (bsc#1135335).
- kvm: polling: add architecture backend to disable polling (bsc#1119222).
- kvm: s390: change default halt poll time to 50us (bsc#1119222).
- kvm: s390: enable CONFIG_HAVE_kvm_NO_POLL (bsc#1119222) We need to enable CONFIG_HAVE_kvm_NO_POLL for bsc#1119222
- kvm: s390: fix typo in parameter description (bsc#1119222).
- kvm: s390: kABI Workaround for 'kvm_vcpu_stat' Add halt_no_poll_steal to kvm_vcpu_stat. Hide it from the kABI checker.
- kvm: s390: kABI Workaround for 'lowcore' (bsc#1119222).
- kvm: s390: provide kvm_arch_no_poll function (bsc#1119222).
- kvm: svm/avic: Do not send AVIC doorbell to self (bsc#1140133).
- kvm: SVM: Fix detection of AMD Errata 1096 (bsc#1142354).
- lapb: fixed leak of control-blocks (networking-stable-19_06_18).
- lib: fix stall in __bitmap_parselist() (bsc#1051510).
- libnvdimm/namespace: Fix label tracking error (bsc#1142350).
- libnvdimm/region: Register badblocks before namespaces (bsc#1143209).
- lib/bitmap.c: make bitmap_parselist() thread-safe and much faster (bsc#1143507).
- lib/scatterlist: Fix mapping iterator when sg-&gt;offset is greater than PAGE_SIZE (bsc#1051510).
- livepatch: Remove duplicate warning about missing reliable stacktrace support (bsc#1071995).
- livepatch: Use static buffer for debugging messages under rq lock (bsc#1071995).
- llc: fix skb leak in llc_build_and_send_ui_pkt() (networking-stable-19_05_31).
- mac80211: do not start any work during reconfigure flow (bsc#1111666).
- mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he() (bsc#1111666).
- mac80211: free peer keys before vif down in mesh (bsc#1111666).
- mac80211: mesh: fix RCU warning (bsc#1111666).
- mac80211: only warn once on chanctx_conf being NULL (bsc#1111666).
- media: cpia2_usb: first wake up, then free in disconnect (bsc#1135642).
- media: marvell-ccic: fix DMA s/g desc number calculation (bsc#1051510).
- media: s5p-mfc: Make additional clocks optional (bsc#1051510).
- media: v4l2: Test type instead of cfg-&gt;type in v4l2_ctrl_new_custom() (bsc#1051510).
- media: vivid: fix incorrect assignment operation when setting video mode (bsc#1051510).
- mei: bus: need to unlink client before freeing (bsc#1051510).
- mei: me: add denverton innovation engine device IDs (bsc#1051510).
- mei: me: add gemini lake devices id (bsc#1051510).
- memory: tegra: Fix integer overflow on tick value calculation (bsc#1051510).
- memstick: Fix error cleanup path of memstick_init (bsc#1051510).
- mfd: intel-lpss: Release IDA resources (bsc#1051510).
- mips: fix an off-by-one in dma_capable (jsc#SLE-6197 bsc#1140559 LTC#173150).
- mlxsw: spectrum_dcb: Configure DSCP map as the last rule is removed (bsc#1112374).
- mmc: sdhci-pci: Try 'cd' for card-detect lookup before using NULL (bsc#1051510).
- mm: migrate: Fix reference check race between __find_get_block() and migration (bnc#1137609).
- mm/nvdimm: add is_ioremap_addr and use that to check ioremap address (bsc#1140322 LTC#176270).
- mm, page_alloc: fix has_unmovable_pages for HugePages (bsc#1127034).
- mm: replace all open encodings for NUMA_NO_NODE (bsc#1140322 LTC#176270).
- mt7601u: do not schedule rx_tasklet when the device has been disconnected (bsc#1111666).
- mt7601u: fix possible memory leak when the device is disconnected (bsc#1111666).
- neigh: fix use-after-free read in pneigh_get_next (networking-stable-19_06_18).
- net/af_iucv: build proper skbs for HiperTransport (bsc#1142221 LTC#179332).
- net/af_iucv: remove GFP_DMA restriction for HiperTransport (bsc#1142112 bsc#1142221 LTC#179334 LTC#179332).
- net/af_iucv: remove GFP_DMA restriction for HiperTransport (bsc#1142221 LTC#179332).
- net: avoid weird emergency message (networking-stable-19_05_21).
- net: fec: fix the clk mismatch in failed_reset path (networking-stable-19_05_31).
- netfilter: conntrack: fix calculation of next bucket number in early_drop (git-fixes).
- net-gro: fix use-after-free read in napi_gro_frags() (networking-stable-19_05_31).
- net: hns3: Fix inconsistent indenting (bsc#1140676).
- net: hns: fix ICMP6 neighbor solicitation messages discard problem (bsc#1140676).
- net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw() (bsc#1140676).
- net: hns: Fix loopback test failed at copper ports (bsc#1140676).
- net: hns: Fix probabilistic memory overwrite when HNS driver initialized (bsc#1140676).
- net: hns: fix unsigned comparison to less than zero (bsc#1140676).
- net: hns: Fix WARNING when remove HNS driver with SMMU enabled (bsc#1140676).
- net: hns: Use NAPI_POLL_WEIGHT for hns driver (bsc#1140676).
- net/mlx4_core: Change the error print to info print (networking-stable-19_05_21).
- net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query (networking-stable-19_06_09).
- net/mlx5: Allocate root ns memory using kzalloc to match kfree (networking-stable-19_05_31).
- net/mlx5: Avoid double free in fs init error unwinding path (networking-stable-19_05_31).
- net/mlx5e: Rx, Fix checksum calculation for new hardware (bsc#1127611).
- net: mvneta: Fix err code path of probe (networking-stable-19_05_31).
- net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value (networking-stable-19_05_31).
- net: openvswitch: do not free vport if register_netdevice() is failed (networking-stable-19_06_18).
- net/packet: fix memory leak in packet_set_ring() (git-fixes).
- net: rds: fix memory leak in rds_ib_flush_mr_pool (networking-stable-19_06_09).
- net: seeq: fix crash caused by not set dev.parent (networking-stable-19_05_14).
- net: stmmac: fix reset gpio free missing (networking-stable-19_05_31).
- net/tls: fix socket wmem accounting on fallback with netem (bsc#1109837).
- net/tls: make sure offload also gets the keys wiped (bsc#1109837).
- net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions (networking-stable-19_05_21).
- nvme: fix memory leak caused by incorrect subsystem free (bsc#1143185).
- ocfs2: add first lock wait time in locking_state (bsc#1134390).
- ocfs2: add last unlock times in locking_state (bsc#1134390).
- ocfs2: add locking filter debugfs file (bsc#1134390).
- p54usb: Fix race between disconnect and firmware loading (bsc#1111666).
- packet: Fix error path in packet_init (networking-stable-19_05_14).
- packet: in recvmsg msg_name return at least sizeof sockaddr_ll (git-fixes).
- pci/aer: Use cached AER Capability offset (bsc#1142623).
- pci: Always allow probing with driver_override (bsc#1051510).
- pci: hv: Add hv_pci_remove_slots() when we unload the driver (bsc#1142701).
- pci: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (bsc#1142701).
- pci: hv: Fix a memory leak in hv_eject_device_work() (bsc#1142701).
- pci: hv: Fix a use-after-free bug in hv_eject_device_work() (bsc#1142701).
- pci: hv: Fix return value check in hv_pci_assign_slots() (bsc#1142701).
- pci: hv: Remove unused reason for refcount handler (bsc#1142701).
- pci: hv: support reporting serial number as slot information (bsc#1142701).
- pci/P2PDMA: Fix missing check for dma_virt_ops (bsc#1111666).
- pci / PM: Use SMART_SUSPEND and LEAVE_SUSPENDED flags for PCIe ports (bsc#1142623).
- pci/portdrv: Add #defines for AER and DPC Interrupt Message Number masks (bsc#1142623).
- pci/portdrv: Consolidate comments (bsc#1142623).
- pci/portdrv: Disable port driver in compat mode (bsc#1142623).
- pci/portdrv: Remove pcie_portdrv_err_handler.slot_reset (bsc#1142623).
- pci: portdrv: Restore PCI config state on slot reset (bsc#1142623).
- pci/portdrv: Support PCIe services on subtractive decode bridges (bsc#1142623).
- pci/portdrv: Use conventional Device ID table formatting (bsc#1142623).
- pci: Return error if cannot probe VF (bsc#1051510).
- pkey: Indicate old mkvp only if old and current mkvp are different (bsc#1137827 LTC#178090).
- pktgen: do not sleep with the thread lock held (git-fixes).
- platform/x86: asus-nb-wmi: Support ALS on the Zenbook UX430UQ (bsc#1051510).
- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi (bsc#1051510).
- platform/x86: intel_turbo_max_3: Remove restriction for HWP platforms (jsc#SLE-5439).
- platform/x86: ISST: Add common API to register and handle ioctls (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mailbox interface via MSRs (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mailbox interface via PCI (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mmio interface (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select PUNIT MSR interface (jsc#SLE-5364).
- platform/x86: ISST: Add IOCTL to Translate Linux logical CPU to PUNIT CPU number (jsc#SLE-5364).
- platform/x86: ISST: Restore state on resume (jsc#SLE-5364).
- platform/x86: ISST: Store per CPU information (jsc#SLE-5364).
- platform/x86: pmc_atom: Add CB4063 Beckhoff Automation board to critclk_systems DMI table (bsc#1051510).
- powerpc/64s: Remove POWER9 DD1 support (bsc#1055117, LTC#159753, git-fixes).
- powerpc/crypto: Use cheaper random numbers for crc-vpmsum self-test ().
- powerpc/mm: Change function prototype (bsc#1055117).
- powerpc/mm: Consolidate numa_enable check and min_common_depth check (bsc#1140322 LTC#176270).
- powerpc/mm/drconf: Use NUMA_NO_NODE on failures instead of node 0 (bsc#1140322 LTC#176270).
- powerpc/mm: Fix node look up with numa=off boot (bsc#1140322 LTC#176270).
- powerpc/mm/hugetlb: Update huge_ptep_set_access_flags to call __ptep_set_access_flags directly (bsc#1055117).
- powerpc/mm/radix: Change pte relax sequence to handle nest MMU hang (bsc#1055117).
- powerpc/mm/radix: Move function from radix.h to pgtable-radix.c (bsc#1055117).
- powerpc/papr_scm: Force a scm-unbind if initial scm-bind fails (bsc#1140322 LTC#176270).
- powerpc/papr_scm: Update drc_pmem_unbind() to use H_SCM_UNBIND_ALL (bsc#1140322 LTC#176270).
- powerpc/pseries: Update SCM hcall op-codes in hvcall.h (bsc#1140322 LTC#176270).
- powerpc/watchpoint: Restore NV GPRs while returning from exception (bsc#1140945 bsc#1141401 bsc#1141402 bsc#1141452 bsc#1141453 bsc#1141454 LTC#178983 LTC#179191 LTC#179192 LTC#179193 LTC#179194 LTC#179195).
- ppc: Convert mmu context allocation to new IDA API (bsc#1139619 LTC#178538).
- ppp: deflate: Fix possible crash in deflate_init (networking-stable-19_05_21).
- qed: Fix build error without CONFIG_DEVLINK (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix -Wmaybe-uninitialized false positive (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index (jsc#SLE-4693 bsc#1136462).
- rdma/odp: Fix missed unlock in non-blocking invalidate_start (bsc#1103992).
- rdma/srp: Accept again source addresses that do not have a port number (bsc#1103992).
- rdma/srp: Document srp_parse_in() arguments (bsc#1103992 ).
- rdma/uverbs: check for allocation failure in uapi_add_elm() (bsc#1103992).
- rds: ib: fix 'passing zero to ERR_PTR()' warning (git-fixes).
- Revert 'bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()' (bsc#1140652).
- Revert 'e1000e: fix cyclic resets at link up with active tx' (bsc#1051510).
- Revert 'livepatch: Remove reliable stacktrace check in klp_try_switch_task()' (bsc#1071995).
- Revert 'serial: 8250: Do not service RX FIFO if interrupts are disabled' (bsc#1051510).
- rtlwifi: rtl8192cu: fix error handle when usb probe failed (bsc#1111666).
- rtnetlink: always put IFLA_LINK for links with a link-netnsid (networking-stable-19_05_21).
- s390: add alignment hints to vector load and store (jsc#SLE-6907 LTC#175887).
- s390/airq: use DMA memory for adapter interrupts (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cio: add basic protected virtualization support (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cio: introduce DMA pools to cio (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cpum_cf: add ctr_stcctm() function (jsc#SLE-6904 ).
- s390/cpum_cf: Add minimal in-kernel interface for counter measurements (jsc#SLE-6904).
- s390/cpum_cf: Add support for CPU-MF SVN 6 (jsc#SLE-6904 ).
- s390/cpum_cf_diag: Add support for CPU-MF SVN 6 (jsc#SLE-6904 ).
- s390/cpum_cf_diag: Add support for s390 counter facility diagnostic trace (jsc#SLE-6904).
- s390/cpum_cf: introduce kernel_cpumcf_alert() to obtain measurement alerts (jsc#SLE-6904).
- s390/cpum_cf: introduce kernel_cpumcf_avail() function (jsc#SLE-6904).
- s390/cpum_cf: move counter set controls to a new header file (jsc#SLE-6904).
- s390/cpum_cf: prepare for in-kernel counter measurements (jsc#SLE-6904).
- s390/cpum_cf: rename per-CPU counter facility structure and variables (jsc#SLE-6904).
- s390/cpumf: Add extended counter set definitions for model 8561 and 8562 (bsc#1142052 LTC#179320).
- s390/cpu_mf: add store cpu counter multiple instruction support (jsc#SLE-6904).
- s390/cpumf: Fix warning from check_processor_id (jsc#SLE-6904 ).
- s390/cpu_mf: move struct cpu_cf_events and per-CPU variable to header file (jsc#SLE-6904).
- s390/cpu_mf: replace stcctm5() with the stcctm() function (jsc#SLE-6904).
- s390/dma: provide proper ARCH_ZONE_DMA_BITS value (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/mm: force swiotlb for protected virtualization (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142119 LTC#179331).
- s390/qeth: be drop monitor friendly (bsc#1142115 LTC#179337).
- s390/qeth: be drop monitor friendly (bsc#1142220 LTC#179335).
- s390: remove the unused dma_capable helper (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390: report new CPU capabilities (jsc#SLE-6907 LTC#175887).
- s390/vtime: steal time exponential moving average (bsc#1119222).
- s390/zcrypt: Fix wrong dispatching for control domain CPRBs (bsc#1137811 LTC#178088).
- scripts/git_sort/git_sort.py: Add mmots tree.
- scsi: cxgb4i: add wait_for_completion() (jsc#SLE-4678 bsc#1136342).
- scsi: cxgbi: KABI: fix handle completion etc (jsc#SLE-4678 bsc#1136342).
- scsi: cxgbi: remove redundant __kfree_skb call on skb and free cst-&gt;atid (jsc#SLE-4678 bsc#1136342).
- scsi: fc: add FPIN ELS definition (bsc#1136217,jsc#SLE-4722).
- scsi/fc: kABI fixes for new ELS_FPIN definition (bsc#1136217,jsc#SLE-4722).
- scsi: ibmvfc: fix WARN_ON during event pool release (bsc#1137458 LTC#178093).
- scsi: lpfc: Add loopback testing to trunking mode (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: add support for posting FC events on FPIN reception (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Annotate switch/case fall-through (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: avoid uninitialized variable warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Cancel queued work for an IO when processing a received ABTS (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Change smp_processor_id() into raw_smp_processor_id() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Convert bootstrap mbx polling from msleep to udelay (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Coordinate adapter error handling with offline handling (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct boot bios information to FDMI registration (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct localport timeout duration error (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct __lpfc_sli_issue_iocb_s4 lockdep check (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct nvmet buffer free race condition (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Declare local functions static (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Enhance 6072 log string (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix 32-bit format string warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix a handful of indentation issues (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix alloc context on oas lun creations (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix a recently introduced compiler warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix BFS crash with DIX enabled (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix build error (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix calls to dma_set_mask_and_coherent() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix deadlock due to nested hbalock call (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix driver crash in target reset handler (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix duplicate log message numbers (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix error code if kcalloc() fails (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix error codes in lpfc_sli4_pci_mem_setup() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix fc4type information for FDMI (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix fcp_rsp_len checking on lun reset (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix FDMI fc4type for nvme support (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix FDMI manufacturer attribute value (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix handling of trunk links state reporting (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix hardlockup in scsi_cmd_iocb_cmpl (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix HDMI2 registration string for symbolic name (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix incorrect logical link speed on trunks when links down (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix indentation and balance braces (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix io lost on host resets (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix kernel warnings related to smp_processor_id() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix link speed reporting for 4-link trunk (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix location of SCSI ktime counters (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix lpfc_nvmet_mrq attribute handling when 0 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix mailbox hang on adapter init (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix memory leak in abnormal exit path from lpfc_eq_create (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix missing wakeups on abort threads (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet async receive buffer replenishment (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet handling of first burst cmd (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet handling of received ABTS for unmapped frames (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet target abort cmd matching (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix oops when driver is loaded with 1 interrupt vector (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix poor use of hardware queues if fewer irq vectors (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix protocol support on G6 and G7 adapters (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix PT2PT PLOGI collison stopping discovery (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix unused variable warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fixup eq_clr_intr references (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix use-after-free mailbox cmd completion (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Make lpfc_sli4_oas_verify static (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Move trunk_errmsg[] from a header file into a .c file (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Prevent 'use after free' memory overwrite in nvmet LS handling (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Reduce memory footprint for lpfc_queue (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove set but not used variable 'phys_id' (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove set-but-not-used variables (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove unused functions (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Resolve inconsistent check of hdwq in lpfc_scsi_cmd_iocb_cmpl (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Resolve irq-unsafe lockdep heirarchy warning in lpfc_io_free (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: resolve static checker warning in lpfc_sli4_hba_unset (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Revert message logging on unsupported topology (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Revise message when stuck due to unresponsive adapter (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Rework misleading nvme not supported in firmware message (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Separate CQ processing for nvmet_fc upcalls (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Specify node affinity for queue memory allocation (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Stop adapter if pci errors detected (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update Copyright in driver version (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update lpfc version to 12.2.0.1 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update lpfc version to 12.2.0.3 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: use dma_set_mask_and_coherent (bsc#1136217,jsc#SLE-4722).
- scsi: qedf: Add additional checks for io_req-&gt;sc_cmd validity (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add a flag to help debugging io_req which could not be cleaned (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add comment to display logging levels (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add driver state to 'driver_stats' debugfs node (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add LBA to underrun debug messages (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload check (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add missing return in qedf_scsi_done() (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add port_id for fcport into initiate_cleanup debug message (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add return value to log message if scsi_add_host fails (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Change MSI-X load error message (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check both the FCF and fabric ID before servicing clear virtual link (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check for fcoe_libfc_config failure (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check for tm_flags instead of cmd_type during cleanup (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check the return value of start_xmit (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Cleanup rrq_work after QEDF_CMD_OUTSTANDING is cleared (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Correctly handle refcounting of rdata (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Do not queue anything if upload is in progress (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Do not send ABTS for under run scenario (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: fc_rport_priv reference counting fixes (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Fix lport may be used uninitialized warning (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Log message if scsi_add_host fails (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Modify flush routine to handle all I/Os and TMF (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Print fcport information on wait for upload timeout (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Print scsi_cmd backpointer in good completion path if the command is still being used (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: remove memset/memcpy to nfunc and use func instead (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Remove set but not used variable 'fr_len' (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: remove set but not used variables (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Update the driver version to 8.37.25.19 (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Update the driver version to 8.37.25.20 (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Wait for upload and link down processing during soft ctx reset (bsc#1136467 jsc#SLE-4694).
- scsi: qedi: add module param to set ping packet size (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Fix spelling mistake 'OUSTANDING' -&gt; 'OUTSTANDING' (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev' (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693 bsc#1136462).
- scsi: qla2xxx: do not crash on uninitialized pool list (boo#1138874).
- scsi: scsi_transport_fc: Add FPIN fc event codes (bsc#1136217,jsc#SLE-4722).
- scsi: scsi_transport_fc: refactor event posting routines (bsc#1136217,jsc#SLE-4722).
- sctp: Free cookie before we memdup a new one (networking-stable-19_06_18).
- sctp: silence warns on sctp_stream_init allocations (bsc#1083710).
- serial: uartps: Do not add a trailing semicolon to macro (bsc#1051510).
- serial: uartps: Fix long line over 80 chars (bsc#1051510).
- serial: uartps: Fix multiple line dereference (bsc#1051510).
- serial: uartps: Remove useless return from cdns_uart_poll_put_char (bsc#1051510).
- staging: comedi: amplc_pci230: fix null pointer deref on interrupt (bsc#1051510).
- staging: comedi: dt282x: fix a null pointer deref on interrupt (bsc#1051510).
- staging: rtl8712: reduce stack usage, again (bsc#1051510).
- sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg (networking-stable-19_06_18).
- tcp: fix tcp_set_congestion_control() use from bpf hook (bsc#1109837).
- tcp: reduce tcp_fastretrans_alert() verbosity (git-fixes).
- team: Always enable vlan tx offload (bsc#1051510).
- tools: bpftool: Fix json dump crash on powerpc (bsc#1109837).
- tools: bpftool: use correct argument in cgroup errors (bsc#1109837).
- tools/power/x86: A tool to validate Intel Speed Select commands (jsc#SLE-5364).
- tty: rocket: fix incorrect forward declaration of 'rp_init()' (bsc#1051510).
- tty: serial_core: Set port active bit in uart_port_activate (bsc#1051510).
- tty: serial: cpm_uart - fix init when SMC is relocated (bsc#1051510).
- tuntap: synchronize through tfiles array instead of tun-&gt;numqueues (networking-stable-19_05_14).
- usb: gadget: ether: Fix race between gether_disconnect and rx_submit (bsc#1051510).
- usb: gadget: fusb300_udc: Fix memory leak of fusb300-&gt;ep[i] (bsc#1051510).
- usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC (bsc#1051510).
- usb: pci-quirks: Correct AMD PLL quirk detection (bsc#1051510).
- usb: serial: ftdi_sio: add ID for isodebug v1 (bsc#1051510).
- usb: serial: option: add support for GosunCn ME3630 RNDIS mode (bsc#1051510).
- virtio/s390: add indirection to indicators access (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: DMA support for virtio-ccw (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: make airq summary indicators DMA (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use cacheline aligned airq bit vectors (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use DMA memory for ccw I/O and classic notifiers (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use vring_create_virtqueue (jsc#SLE-6197 bsc#1140559 LTC#173150).
- vmci: Fix integer overflow in VMCI handle arrays (bsc#1051510).
- vrf: sit mtu should not be updated when vrf netdev is the link (networking-stable-19_05_14).
- vsock/virtio: free packets during the socket release (networking-stable-19_05_21).
- vsock/virtio: set SOCK_DONE on peer shutdown (networking-stable-19_06_18).
- wil6210: drop old event after wmi_call timeout (bsc#1111666).
- wil6210: fix potential out-of-bounds read (bsc#1051510).
- wil6210: fix spurious interrupts in 3-msi (bsc#1111666).
- x86, mm: fix fast GUP with hyper-based TLB flushing (VM Functionality, bsc#1140903).
- xdp: fix possible cq entry leak (bsc#1109837).
- xdp: fix race on generic receive path (bsc#1109837).
- xdp: hold device for umem regardless of zero-copy mode (bsc#1109837).
- xen: let alloc_xenballooned_pages() fail if not enough memory free (bsc#1142450 XSA-300).
- xfs: do not overflow xattr listent buffer (bsc#1143105).
- xprtrdma: Fix use-after-free in rpcrdma_post_recvs (bsc#1103992 ).
- xsk: Properly terminate assignment in xskq_produce_flush_desc (bsc#1109837).

		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-07"/>
	<updated date="2019-08-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083710">SUSE bug 1083710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102247">SUSE bug 1102247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119222">SUSE bug 1119222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123080">SUSE bug 1123080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127034">SUSE bug 1127034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127315">SUSE bug 1127315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130972">SUSE bug 1130972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134097">SUSE bug 1134097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134390">SUSE bug 1134390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134399">SUSE bug 1134399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135335">SUSE bug 1135335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136217">SUSE bug 1136217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136342">SUSE bug 1136342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136462">SUSE bug 1136462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136467">SUSE bug 1136467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137458">SUSE bug 1137458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137534">SUSE bug 1137534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137535">SUSE bug 1137535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137584">SUSE bug 1137584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137609">SUSE bug 1137609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137811">SUSE bug 1137811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137827">SUSE bug 1137827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138874">SUSE bug 1138874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139358">SUSE bug 1139358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139619">SUSE bug 1139619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140133">SUSE bug 1140133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140139">SUSE bug 1140139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140322">SUSE bug 1140322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140559">SUSE bug 1140559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140652">SUSE bug 1140652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140676">SUSE bug 1140676</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140903">SUSE bug 1140903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140945">SUSE bug 1140945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141312">SUSE bug 1141312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141401">SUSE bug 1141401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141402">SUSE bug 1141402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141452">SUSE bug 1141452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141453">SUSE bug 1141453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141454">SUSE bug 1141454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141478">SUSE bug 1141478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141558">SUSE bug 1141558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142023">SUSE bug 1142023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142052">SUSE bug 1142052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142083">SUSE bug 1142083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142112">SUSE bug 1142112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142115">SUSE bug 1142115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142119">SUSE bug 1142119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142220">SUSE bug 1142220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142221">SUSE bug 1142221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142254">SUSE bug 1142254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142350">SUSE bug 1142350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142351">SUSE bug 1142351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142354">SUSE bug 1142354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142359">SUSE bug 1142359</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142450">SUSE bug 1142450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142623">SUSE bug 1142623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142673">SUSE bug 1142673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142701">SUSE bug 1142701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142868">SUSE bug 1142868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143003">SUSE bug 1143003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143045">SUSE bug 1143045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143105">SUSE bug 1143105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143185">SUSE bug 1143185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143189">SUSE bug 1143189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143191">SUSE bug 1143191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143209">SUSE bug 1143209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143507">SUSE bug 1143507</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20855/">CVE-2018-20855</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1125/">CVE-2019-1125</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11810/">CVE-2019-11810</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13631/">CVE-2019-13631</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13648/">CVE-2019-13648</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14283/">CVE-2019-14283</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14284/">CVE-2019-14284</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491546" comment="kernel-default-4.12.14-197.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491547" comment="kernel-default-base-4.12.14-197.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491548" comment="kernel-default-devel-4.12.14-197.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491549" comment="kernel-default-man-4.12.14-197.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491550" comment="kernel-devel-4.12.14-197.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491551" comment="kernel-macros-4.12.14-197.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491552" comment="kernel-zfcpdump-4.12.14-197.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137747" version="1" class="patch">
	<metadata>
		<title>Security update for tcpdump (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1068716" ref_url="https://bugzilla.suse.com/1068716" source="BUGZILLA"/>
		<reference ref_id="1142439" ref_url="https://bugzilla.suse.com/1142439" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-16808" ref_url="https://www.suse.com/security/cve/CVE-2017-16808/" source="CVE"/>
		<reference ref_id="CVE-2019-1010220" ref_url="https://www.suse.com/security/cve/CVE-2019-1010220/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005800.html" source="SUSE-SU"/>
		<description>
This update for tcpdump fixes the following issues:

Security issues fixed:

- CVE-2019-1010220: Fixed a buffer over-read in print_prefix() which may expose data (bsc#1142439).
- CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print() and lookup_emem() (bsc#1068716).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-07"/>
	<updated date="2019-08-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1068716">SUSE bug 1068716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142439">SUSE bug 1142439</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16808/">CVE-2017-16808</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1010220/">CVE-2019-1010220</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490409" comment="tcpdump-4.9.2-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137748" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141980" ref_url="https://bugzilla.suse.com/1141980" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13619" ref_url="https://www.suse.com/security/cve/CVE-2019-13619/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005808.html" source="SUSE-SU"/>
		<description>
This update for wireshark to version 2.4.16 fixes the following issues:

Security issue fixed:

- CVE-2019-13619: ASN.1 BER and related dissectors crash (bsc#1141980).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-09"/>
	<updated date="2019-08-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141980">SUSE bug 1141980</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13619/">CVE-2019-13619</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490410" comment="libwireshark9-2.4.16-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490411" comment="libwiretap7-2.4.16-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490412" comment="libwscodecs1-2.4.16-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490413" comment="libwsutil8-2.4.16-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490414" comment="wireshark-2.4.16-3.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137749" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141853" ref_url="https://bugzilla.suse.com/1141853" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20852" ref_url="https://www.suse.com/security/cve/CVE-2018-20852/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005811.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-12"/>
	<updated date="2019-08-12"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141853">SUSE bug 1141853</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20852/">CVE-2018-20852</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490415" comment="libpython2_7-1_0-2.7.14-7.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490416" comment="python-2.7.14-7.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490417" comment="python-base-2.7.14-7.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137750" version="1" class="patch">
	<metadata>
		<title>Security update for wavpack (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1133384" ref_url="https://bugzilla.suse.com/1133384" source="BUGZILLA"/>
		<reference ref_id="1141334" ref_url="https://bugzilla.suse.com/1141334" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1010319" ref_url="https://www.suse.com/security/cve/CVE-2019-1010319/" source="CVE"/>
		<reference ref_id="CVE-2019-11498" ref_url="https://www.suse.com/security/cve/CVE-2019-11498/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005836.html" source="SUSE-SU"/>
		<description>
This update for wavpack fixes the following issues:

Security issues fixed:

- CVE-2019-1010319: Fixed use of uninitialized variable in ParseWave64HeaderConfig that can result in unexpected control flow, crashes, and segfaults (bsc#1141334).
- CVE-2019-11498: Fixed possible denial of service (application crash) in WavpackSetConfiguration64 via a DFF file that lacks valid sample-rate data (bsc#1133384).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-21"/>
	<updated date="2019-08-21"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1133384">SUSE bug 1133384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141334">SUSE bug 1141334</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-1010319/">CVE-2019-1010319</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11498/">CVE-2019-11498</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490430" comment="libwavpack1-5.1.0-4.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137751" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1128106" ref_url="https://bugzilla.suse.com/1128106" source="BUGZILLA"/>
		<reference ref_id="1133031" ref_url="https://bugzilla.suse.com/1133031" source="BUGZILLA"/>
		<reference ref_id="1134883" ref_url="https://bugzilla.suse.com/1134883" source="BUGZILLA"/>
		<reference ref_id="1135210" ref_url="https://bugzilla.suse.com/1135210" source="BUGZILLA"/>
		<reference ref_id="1135902" ref_url="https://bugzilla.suse.com/1135902" source="BUGZILLA"/>
		<reference ref_id="1136540" ref_url="https://bugzilla.suse.com/1136540" source="BUGZILLA"/>
		<reference ref_id="1136778" ref_url="https://bugzilla.suse.com/1136778" source="BUGZILLA"/>
		<reference ref_id="1138534" ref_url="https://bugzilla.suse.com/1138534" source="BUGZILLA"/>
		<reference ref_id="1140402" ref_url="https://bugzilla.suse.com/1140402" source="BUGZILLA"/>
		<reference ref_id="1143794" ref_url="https://bugzilla.suse.com/1143794" source="BUGZILLA"/>
		<reference ref_id="1144087" ref_url="https://bugzilla.suse.com/1144087" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12155" ref_url="https://www.suse.com/security/cve/CVE-2019-12155/" source="CVE"/>
		<reference ref_id="CVE-2019-13164" ref_url="https://www.suse.com/security/cve/CVE-2019-13164/" source="CVE"/>
		<reference ref_id="CVE-2019-14378" ref_url="https://www.suse.com/security/cve/CVE-2019-14378/" source="CVE"/>
		<reference ref_id="CVE-2019-5008" ref_url="https://www.suse.com/security/cve/CVE-2019-5008/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005833.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

Security issues fixed:

- CVE-2019-14378: Security fix for heap overflow in ip_reass on big packet input (bsc#1143794).
- CVE-2019-12155: Security fix for null pointer dereference while releasing spice resources (bsc#1135902).
- CVE-2019-13164: Security fix for qemu-bridge-helper ACL can be bypassed when names are too long (bsc#1140402).
- CVE-2019-5008: Fix DoS (NULL pointer dereference) in sparc64 virtual machine possible through guest device driver (bsc#1133031).

Bug fixes and enhancements:

- Upstream tweaked SnowRidge-Server vcpu model to now be simply Snowridge (jsc#SLE-4883)
- Add SnowRidge-Server vcpu model (jsc#SLE-4883)
- Add in documentation about md-clear feature (bsc#1138534)
- Fix SEV issue where older machine type is not processed correctly (bsc#1144087)
- Fix case of a bad pointer in Xen PV usb support code (bsc#1128106)
- Further refine arch-capabilities handling to help with security and performance in Intel hosts (bsc#1134883, bsc#1135210) (fate#327764)
- Add support for one more security/performance related vcpu feature (bsc#1136778) (fate#327796)
- Ignore csske for expanding the cpu model (bsc#1136540)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-21"/>
	<updated date="2019-08-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1128106">SUSE bug 1128106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133031">SUSE bug 1133031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134883">SUSE bug 1134883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135210">SUSE bug 1135210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135902">SUSE bug 1135902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136540">SUSE bug 1136540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136778">SUSE bug 1136778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138534">SUSE bug 1138534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140402">SUSE bug 1140402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143794">SUSE bug 1143794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144087">SUSE bug 1144087</bugzilla>
	<cve impact="low" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-12155/">CVE-2019-12155</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13164/">CVE-2019-13164</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14378/">CVE-2019-14378</cve>
	<cve impact="moderate" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5008/">CVE-2019-5008</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491553" comment="qemu-tools-3.1.1-9.3.3 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137752" version="1" class="patch">
	<metadata>
		<title>Security update for podman, slirp4netns and libcontainers-common (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1096726" ref_url="https://bugzilla.suse.com/1096726" source="BUGZILLA"/>
		<reference ref_id="1123156" ref_url="https://bugzilla.suse.com/1123156" source="BUGZILLA"/>
		<reference ref_id="1123387" ref_url="https://bugzilla.suse.com/1123387" source="BUGZILLA"/>
		<reference ref_id="1135460" ref_url="https://bugzilla.suse.com/1135460" source="BUGZILLA"/>
		<reference ref_id="1136974" ref_url="https://bugzilla.suse.com/1136974" source="BUGZILLA"/>
		<reference ref_id="1137860" ref_url="https://bugzilla.suse.com/1137860" source="BUGZILLA"/>
		<reference ref_id="1143386" ref_url="https://bugzilla.suse.com/1143386" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-15664" ref_url="https://www.suse.com/security/cve/CVE-2018-15664/" source="CVE"/>
		<reference ref_id="CVE-2019-10152" ref_url="https://www.suse.com/security/cve/CVE-2019-10152/" source="CVE"/>
		<reference ref_id="CVE-2019-6778" ref_url="https://www.suse.com/security/cve/CVE-2019-6778/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005844.html" source="SUSE-SU"/>
		<description>

  
This is a version update for podman to version 1.4.4 (bsc#1143386).

Additional changes by SUSE on top:

- Remove fuse-overlayfs because it's (currently) an unsatisfied dependency on
  SLE (bsc#1143386)
- Update libpod.conf to use correct infra_command
- Update libpod.conf to use better versioned pause container
- Update libpod.conf to use official kubic pause container
- Update libpod.conf to match latest features set:
  detach_keys, lock_type, runtime_supports_json
- Add podman-remote varlink client

Version update podman to v1.4.4:

- Features

  - Podman now has greatly improved support for containers using multiple OCI
    runtimes. Containers now remember if they were created with a different
    runtime using --runtime and will always use that runtime
  - The cached and delegated options for volume mounts are now allowed for
    Docker compatability (#3340)
  - The podman diff command now supports the --latest flag

- Bugfixes

  - Fixed a bug where rootless Podman would attempt to use the entire root
    configuration if no rootless configuration was present for the user,
    breaking rootless Podman for new installations
  - Fixed a bug where rootless Podman's pause process would block SIGTERM,
    preventing graceful system shutdown and hanging until the system's init
    send SIGKILL
  - Fixed a bug where running Podman as root with sudo -E would not work after
    running rootless Podman at least once
  - Fixed a bug where options for tmpfs volumes added with the --tmpfs flag
    were being ignored
  - Fixed a bug where images with no layers could not properly be displayed
    and removed by Podman
  - Fixed a bug where locks were not properly freed on failure to create a
    container or pod
  - Fixed a bug where podman cp on a single file would create a directory at
    the target and place the file in it (#3384)
  - Fixed a bug where podman inspect --format '{{.Mounts}}' would print a
    hexadecimal address instead of a container's mounts
  - Fixed a bug where rootless Podman would not add an entry to container's
    /etc/hosts files for their own hostname (#3405)
  - Fixed a bug where podman ps --sync would segfault (#3411)
  - Fixed a bug where podman generate kube would produce an invalid ports
    configuration (#3408)

- Misc

  - Updated containers/storage to v1.12.13
  - Podman now performs much better on systems with heavy I/O load
  - The --cgroup-manager flag to podman now shows the correct default setting
    in help if the default was overridden by libpod.conf
  - For backwards compatability, setting --log-driver=json-file in podman run
    is now supported as an alias for --log-driver=k8s-file. This is considered
    deprecated, and json-file will be moved to a new implementation in the
    future ([#3363](https://github.com/containers/libpo\
    d/issues/3363))
  - Podman's default libpod.conf file now allows the crun OCI runtime to be
    used if it is installed

Update podman to v1.4.2:

- Fixed a bug where Podman could not run containers using an older version of
  Systemd as init
- Updated vendored Buildah to v1.9.0 to resolve a critical bug with
  Dockerfile RUN instructions
- The error message for running podman kill on containers that are not
  running has been improved
- Podman remote client can now log to a file if syslog is not available
- The podman exec command now sets its error code differently based on
  whether the container does not exist, and the command in the container does
  not exist
- The podman inspect command on containers now outputs Mounts JSON that matches
  that of docker inspect, only including user-specified volumes and
  differentiating bind mounts and named volumes
- The podman inspect command now reports the path to a container's OCI spec
  with the OCIConfigPath key (only included when the container is initialized
  or running)
- The podman run --mount command now supports the bind-nonrecursive option for
  bind mounts
- Fixed a bug where podman play kube would fail to create containers due to an
  unspecified log driver
- Fixed a bug where Podman would fail to build with musl libc
- Fixed a bug where rootless Podman using slirp4netns networking in an
  environment with no nameservers on the host other than localhost would
  result in nonfunctional networking
- Fixed a bug where podman import would not properly set environment
  variables, discarding their values and retaining only keys
- Fixed a bug where Podman would fail to run when built with Apparmor support
  but run on systems without the Apparmor kernel module loaded
- Remote Podman will now default the username it uses to log in to remote
  systems to the username of the current user
- Podman now uses JSON logging with OCI runtimes that support it, allowing for
  better error reporting
- Updated vendored containers/image to v2.0
- Update conmon to v0.3.0
- Support OOM Monitor under cgroup V2
- Add config binary and make target for configuring conmon with a go library
  for importing values

Updated podman to version 1.4.0 (bsc#1137860) and (bsc#1135460) 

- Podman checkpoint and podman restore commands can now be
  used to migrate containers between Podman installations on
  different systems.
- The podman cp now supports pause flag.
- The remote client now supports a configuration file for
  pre-configuring connections to remote Podman installations
- CVE-2019-10152: Fixed an iproper dereference of symlinks of the
  the podman cp command which introduced in version 1.1.0 (bsc#1136974).
- Fixed a bug where podman commit could improperly set environment variables 
  that contained = characters
- Fixed a bug where rootless podman would sometimes fail to start
  containers with forwarded ports
- Fixed a bug where podman version on the remote client could
  segfault
- Fixed a bug where podman container runlabel would use /proc/self/exe instead of 
  the path of the Podman command when printing the command being executed
- Fixed a bug where filtering images by label did not work
- Fixed a bug where specifying a bing mount or tmpfs mount over
  an image volume would cause a container to be unable to start
- Fixed a bug where podman generate kube did not work with
  containers with named volumes
- Fixed a bug where rootless podman would receive permission
  denied errors accessing conmon.pid
- Fixed a bug where podman cp with a folder specified as target
  would replace the folder, as opposed to copying into it
- Fixed a bug where rootless Podman commands could double-unlock
  a lock, causing a crash
- Fixed a bug where podman incorrectly set tmpcopyup on /dev/
  mounts, causing errors when using the Kata containers runtime
- Fixed a bug where podman exec would fail on older kernels
- Podman commit command is now usable with the Podman remote client
- Signature-policy flag has been deprecated
- Updated vendored containers/storage and containers/image libraries 
  with numerous bugfixes
- Updated vendored Buildah to v1.8.3
- Podman now requires Conmon v0.2.0
- The podman cp command is now aliased as podman container cp
- Rootless podman will now default init_path using root Podman's
  configuration files (/etc/containers/libpod.conf and
  /usr/share/containers/libpod.conf) if not overridden in the
  rootless configuration
- Added fuse-overlayfs dependency to support overlay based rootless image
  manipulations
- The podman cp command can now read input redirected to STDIN, and output to
  STDOUT instead of a file, using - instead of an argument.
- The podman remote client now displays version information from both the
  client and server in podman version
- The podman unshare command has been added, allowing easy entry into the
  user namespace set up by rootless Podman (allowing the removal of files
  created by rootless podman, among other things)
- Fixed a bug where Podman containers with the --rm flag were removing
  created volumes when they were automatically removed
- Fixed a bug where container and pod locks were incorrectly marked as
  released after a system reboot, causing errors on container and pod removal
- Fixed a bug where Podman pods could not be removed if any container in the
  pod encountered an error during removal
- Fixed a bug where Podman pods run with the cgroupfs CGroup driver would encounter 
  a race condition during removal, potentially failing to remove the pod CGroup
- Fixed a bug where the podman container checkpoint and podman container
  restore commands were not visible in the remote client
- Fixed a bug where podman remote ps --ns would not print the container's namespaces
- Fixed a bug where removing stopped containers with healthchecks could cause an error
- Fixed a bug where the default libpod.conf file was causing parsing errors
- Fixed a bug where pod locks were not being freed when pods were removed,
  potentially leading to lock exhaustion
- Fixed a bug where 'podman run' with SD_NOTIFY set could, on short-running
  containers, create an inconsistent state rendering the container unusable
- The remote Podman client now uses the Varlink bridge to establish remote
  connections by default
- Fixed an issue with apparmor_parser (bsc#1123387)

- Update to libpod v1.4.0 (bsc#1137860):
- The podman checkpoint and podman restore commands can now be
  used to migrate containers between Podman installations on
  different systems
- The podman cp command now supports a pause flag to pause
  containers while copying into them
- The remote client now supports a configuration file for
  pre-configuring connections to remote Podman installations
- Fixed CVE-2019-10152 - The podman cp command improperly
  dereferenced symlinks in host context
- Fixed a bug where podman commit could improperly set
  environment variables that contained = characters
- Fixed a bug where rootless Podman would sometimes fail to start
  containers with forwarded ports
- Fixed a bug where podman version on the remote client could
  segfault
- Fixed a bug where podman container runlabel would use
  /proc/self/exe instead of the path of the Podman command when
  printing the command being executed
- Fixed a bug where filtering images by label did not work
- Fixed a bug where specifying a bing mount or tmpfs mount over
  an image volume would cause a container to be unable to start
- Fixed a bug where podman generate kube did not work with
  containers with named volumes
- Fixed a bug where rootless Podman would receive permission
  denied errors accessing conmon.pid
- Fixed a bug where podman cp with a folder specified as target
  would replace the folder, as opposed to copying into it
- Fixed a bug where rootless Podman commands could double-unlock
  a lock, causing a crash
- Fixed a bug where Podman incorrectly set tmpcopyup on /dev/
  mounts, causing errors when using the Kata containers runtime
- Fixed a bug where podman exec would fail on older kernels
- The podman commit command is now usable with the Podman remote
  client
- The --signature-policy flag (used with several image-related
  commands) has been deprecated
- The podman unshare command now defines two environment
  variables in the spawned shell: CONTAINERS_RUNROOT and
  CONTAINERS_GRAPHROOT, pointing to temporary and permanent
  storage for rootless containers
- Updated vendored containers/storage and containers/image
  libraries with numerous bugfixes
- Updated vendored Buildah to v1.8.3
- Podman now requires Conmon v0.2.0
- The podman cp command is now aliased as podman container cp
- Rootless Podman will now default init_path using root Podman's
  configuration files (/etc/containers/libpod.conf and
  /usr/share/containers/libpod.conf) if not overridden in the
  rootless configuration

- Update to image v1.5.1
- Vendor in latest containers/storage
- docker/docker_client: Drop redundant Domain(ref.ref) call
- pkg/blobinfocache: Split implementations into subpackages
- copy: progress bar: show messages on completion
- docs: rename manpages to *.5.command
- add container-certs.d.md manpage
- pkg/docker/config: Bring auth tests from
  docker/docker_client_test
- Don't allocate a sync.Mutex separately

Update to storage v1.12.10:

- Add function to parse out mount options from graphdriver
- Merge the disparate parts of all of the Unix-like lockfiles
- Fix unix-but-not-Linux compilation
- Return XDG_RUNTIME_DIR as RootlessRuntimeDir if set
- Cherry-pick moby/moby #39292 for CVE-2018-15664 fixes
- lockfile: add RecursiveLock() API
- Update generated files
- Fix crash on tesing of aufs code
- Let consumers know when Layers and Images came from read-only stores
- chown: do not change owner for the mountpoint
- locks: correctly mark updates to the layers list
- CreateContainer: don't worry about mapping layers unless necessary
- docs: fix manpage for containers-storage.conf
- docs: sort configuration options alphabetically
- docs: document OSTree file deduplication
- Add missing options to man page for containers-storage
- overlay: use the layer idmapping if present
- vfs: prefer layer custom idmappings
- layers: propagate down the idmapping settings
- Recreate symlink when not found
- docs: fix manpage for configuration file
- docs: add special handling for manpages in sect 5
- overlay: fix single-lower test
- Recreate symlink when not found
- overlay: propagate errors from mountProgram
- utils: root in a userns uses global conf file
- Fix handling of additional stores
- Correctly check permissions on rootless directory
- Fix possible integer overflow on 32bit builds
- Evaluate device path for lvm
- lockfile test: make concurrent RW test determinisitc
- lockfile test: make concurrent read tests deterministic
- drivers.DirCopy: fix filemode detection
- storage: move the logic to detect rootless into utils.go
- Don't set (struct flock).l_pid
- Improve documentation of getLockfile
- Rename getLockFile to createLockerForPath, and document it
- Add FILES section to containers-storage.5 man page
- add digest locks
- drivers/copy: add a non-cgo fallback

slirp4netns was updated to 0.3.0:

- CVE-2019-6778: Fixed a heap buffer overflow in tcp_emu() (bsc#1123156)

This update also includes:

- fuse3 and fuse-overlayfs to support rootless containers.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-27"/>
	<updated date="2019-08-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1096726">SUSE bug 1096726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123156">SUSE bug 1123156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123387">SUSE bug 1123387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135460">SUSE bug 1135460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136974">SUSE bug 1136974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137860">SUSE bug 1137860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143386">SUSE bug 1143386</bugzilla>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-15664/">CVE-2018-15664</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-10152/">CVE-2019-10152</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6778/">CVE-2019-6778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491554" comment="libcontainers-common-20190401-3.3.5 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137753" version="1" class="patch">
	<metadata>
		<title>Security update for ceph (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1145093" ref_url="https://bugzilla.suse.com/1145093" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10222" ref_url="https://www.suse.com/security/cve/CVE-2019-10222/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2247-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005857.html" source="SUSE-SU"/>
		<description>
This update for ceph fixes the following issues:

Security issue fixed:

- CVE-2019-10222: Fixed RGW crash via unauthenticated clients (bsc#1145093).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-28"/>
	<updated date="2019-08-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1145093">SUSE bug 1145093</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-10222/">CVE-2019-10222</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491555" comment="ceph-common-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491556" comment="libcephfs-devel-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491557" comment="libcephfs2-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491558" comment="librados-devel-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491559" comment="librados2-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491560" comment="libradospp-devel-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491561" comment="librbd-devel-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491562" comment="librbd1-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491563" comment="librgw-devel-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491564" comment="librgw2-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491565" comment="python3-ceph-argparse-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491566" comment="python3-cephfs-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491567" comment="python3-rados-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491568" comment="python3-rbd-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491569" comment="python3-rgw-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491570" comment="rados-objclass-devel-14.2.2.349+g6716a1e448-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137754" version="1" class="patch">
	<metadata>
		<title>Security update for python-SQLAlchemy (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1124593" ref_url="https://bugzilla.suse.com/1124593" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-7164" ref_url="https://www.suse.com/security/cve/CVE-2019-7164/" source="CVE"/>
		<reference ref_id="CVE-2019-7548" ref_url="https://www.suse.com/security/cve/CVE-2019-7548/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2253-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005860.html" source="SUSE-SU"/>
		<description>
This update for python-SQLAlchemy fixes the following issues:

Security issues fixed:

- CVE-2019-7164: Fixed SQL Injection via the order_by parameter (bsc#1124593).
- CVE-2019-7548: Fixed SQL Injection via the group_by parameter (bsc#1124593).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-29"/>
	<updated date="2019-08-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1124593">SUSE bug 1124593</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-7164/">CVE-2019-7164</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-7548/">CVE-2019-7548</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491571" comment="python3-SQLAlchemy-1.2.14-6.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137755" version="1" class="patch">
	<metadata>
		<title>Security update for util-linux and shadow (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1081947" ref_url="https://bugzilla.suse.com/1081947" source="BUGZILLA"/>
		<reference ref_id="1082293" ref_url="https://bugzilla.suse.com/1082293" source="BUGZILLA"/>
		<reference ref_id="1085196" ref_url="https://bugzilla.suse.com/1085196" source="BUGZILLA"/>
		<reference ref_id="1106214" ref_url="https://bugzilla.suse.com/1106214" source="BUGZILLA"/>
		<reference ref_id="1121197" ref_url="https://bugzilla.suse.com/1121197" source="BUGZILLA"/>
		<reference ref_id="1122417" ref_url="https://bugzilla.suse.com/1122417" source="BUGZILLA"/>
		<reference ref_id="1125886" ref_url="https://bugzilla.suse.com/1125886" source="BUGZILLA"/>
		<reference ref_id="1127701" ref_url="https://bugzilla.suse.com/1127701" source="BUGZILLA"/>
		<reference ref_id="1135534" ref_url="https://bugzilla.suse.com/1135534" source="BUGZILLA"/>
		<reference ref_id="1135708" ref_url="https://bugzilla.suse.com/1135708" source="BUGZILLA"/>
		<reference ref_id="1141113" ref_url="https://bugzilla.suse.com/1141113" source="BUGZILLA"/>
		<reference ref_id="353876" ref_url="https://bugzilla.suse.com/353876" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2019:2307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005883.html" source="SUSE-SU"/>
		<description>
This update for util-linux and shadow fixes the following issues:

util-linux:

- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)
- Prevent outdated pam files (bsc#1082293).
- De-duplicate fstrim -A properly (bsc#1127701).
- Do not trim read-only volumes (bsc#1106214).
- Integrate pam_keyinit pam module to login (bsc#1081947).
- Perform one-time reset of /etc/default/su (bsc#1121197).
- Fix problems in reading of login.defs values (bsc#1121197)
- libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417).
- raw.service: Add RemainAfterExit=yes (bsc#1135534).
- agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886)
- libmount: print a blacklist hint for 'unknown filesystem type' (jsc#SUSE-4085, fate#326832)
- Fix /etc/default/su comments and create /etc/default/runuser (bsc#1121197).

shadow:

- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)
- Fix segfault in useradd during setting password inactivity period. (bsc#1141113)
- Hardening for su wrappers (bsc#353876)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-05"/>
	<updated date="2019-09-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1081947">SUSE bug 1081947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082293">SUSE bug 1082293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085196">SUSE bug 1085196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106214">SUSE bug 1106214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121197">SUSE bug 1121197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122417">SUSE bug 1122417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125886">SUSE bug 1125886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127701">SUSE bug 1127701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135534">SUSE bug 1135534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135708">SUSE bug 1135708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141113">SUSE bug 1141113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/353876">SUSE bug 353876</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491572" comment="libblkid-devel-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491573" comment="libblkid-devel-static-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491574" comment="libblkid1-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491575" comment="libblkid1-32bit-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491576" comment="libfdisk-devel-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491577" comment="libfdisk1-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491578" comment="libmount-devel-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491579" comment="libmount1-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491580" comment="libmount1-32bit-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491581" comment="libsmartcols-devel-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491582" comment="libsmartcols1-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491583" comment="libuuid-devel-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491584" comment="libuuid-devel-static-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491585" comment="libuuid1-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491586" comment="libuuid1-32bit-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491587" comment="shadow-4.6-3.5.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491588" comment="util-linux-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491589" comment="util-linux-lang-2.33.1-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491590" comment="util-linux-systemd-2.33.1-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137756" version="1" class="patch">
	<metadata>
		<title>Security update for python-urllib3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1129071" ref_url="https://bugzilla.suse.com/1129071" source="BUGZILLA"/>
		<reference ref_id="1132663" ref_url="https://bugzilla.suse.com/1132663" source="BUGZILLA"/>
		<reference ref_id="1132900" ref_url="https://bugzilla.suse.com/1132900" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11236" ref_url="https://www.suse.com/security/cve/CVE-2019-11236/" source="CVE"/>
		<reference ref_id="CVE-2019-11324" ref_url="https://www.suse.com/security/cve/CVE-2019-11324/" source="CVE"/>
		<reference ref_id="CVE-2019-9740" ref_url="https://www.suse.com/security/cve/CVE-2019-9740/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005893.html" source="SUSE-SU"/>
		<description>
This update for python-urllib3 fixes the following issues:

Security issues fixed:

- CVE-2019-9740: Fixed CRLF injection issue (bsc#1129071).
- CVE-2019-11324: Fixed invalid CA certificat verification (bsc#1132900).
- CVE-2019-11236: Fixed CRLF injection via request parameter (bsc#1132663).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-09"/>
	<updated date="2019-09-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1129071">SUSE bug 1129071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132663">SUSE bug 1132663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132900">SUSE bug 1132900</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11236/">CVE-2019-11236</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11324/">CVE-2019-11324</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9740/">CVE-2019-9740</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491591" comment="python3-urllib3-1.24-9.4.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137757" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1144621" ref_url="https://bugzilla.suse.com/1144621" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10216" ref_url="https://www.suse.com/security/cve/CVE-2019-10216/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005903.html" source="SUSE-SU"/>
		<description>
This update for ghostscript fixes the following issues:

Security issue fixed:

- CVE-2019-10216: Fix privilege escalation via specially crafted PostScript file (bsc#1144621).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-10"/>
	<updated date="2019-09-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1144621">SUSE bug 1144621</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10216/">CVE-2019-10216</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490446" comment="ghostscript-9.26a-3.18.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490447" comment="ghostscript-devel-9.26a-3.18.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490448" comment="ghostscript-x11-9.26a-3.18.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137758" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141267" ref_url="https://bugzilla.suse.com/1141267" source="BUGZILLA"/>
		<reference ref_id="1144059" ref_url="https://bugzilla.suse.com/1144059" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10197" ref_url="https://www.suse.com/security/cve/CVE-2019-10197/" source="CVE"/>
		<description>
This update for samba fixes the following issues:

Security issue fixed:

- CVE-2019-10197: Fixed user escape from share path definition (bsc#1141267).

Bug fix:

- Prepare for future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-11"/>
	<updated date="2019-09-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141267">SUSE bug 1141267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144059">SUSE bug 1144059</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10197/">CVE-2019-10197</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491592" comment="libdcerpc-binding0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491593" comment="libdcerpc-binding0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491594" comment="libdcerpc-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491595" comment="libdcerpc-samr-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491596" comment="libdcerpc-samr0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491597" comment="libdcerpc0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491598" comment="libdcerpc0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491599" comment="libndr-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491600" comment="libndr-krb5pac-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491601" comment="libndr-krb5pac0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491602" comment="libndr-krb5pac0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491603" comment="libndr-nbt-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491604" comment="libndr-nbt0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491605" comment="libndr-nbt0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491606" comment="libndr-standard-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491607" comment="libndr-standard0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491608" comment="libndr-standard0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491609" comment="libndr0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491610" comment="libndr0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491611" comment="libnetapi-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491612" comment="libnetapi0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491613" comment="libnetapi0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491614" comment="libsamba-credentials-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491615" comment="libsamba-credentials0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491616" comment="libsamba-credentials0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491617" comment="libsamba-errors-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491618" comment="libsamba-errors0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491619" comment="libsamba-errors0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491620" comment="libsamba-hostconfig-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491621" comment="libsamba-hostconfig0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491622" comment="libsamba-hostconfig0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491623" comment="libsamba-passdb-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491624" comment="libsamba-passdb0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491625" comment="libsamba-passdb0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491626" comment="libsamba-policy-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491627" comment="libsamba-policy-python3-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491628" comment="libsamba-policy0-python3-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491629" comment="libsamba-util-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491630" comment="libsamba-util0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491631" comment="libsamba-util0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491632" comment="libsamdb-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491633" comment="libsamdb0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491634" comment="libsamdb0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491635" comment="libsmbclient-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491636" comment="libsmbclient0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491637" comment="libsmbconf-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491638" comment="libsmbconf0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491639" comment="libsmbconf0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491640" comment="libsmbldap-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491641" comment="libsmbldap2-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491642" comment="libsmbldap2-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491643" comment="libtevent-util-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491644" comment="libtevent-util0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491645" comment="libtevent-util0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491646" comment="libwbclient-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491647" comment="libwbclient0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491648" comment="libwbclient0-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491649" comment="samba-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491650" comment="samba-client-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491651" comment="samba-core-devel-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491652" comment="samba-libs-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491653" comment="samba-libs-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491654" comment="samba-libs-python3-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491655" comment="samba-python3-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491656" comment="samba-winbind-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491657" comment="samba-winbind-32bit-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137759" version="1" class="patch">
	<metadata>
		<title>Security update for python-Werkzeug (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1145383" ref_url="https://bugzilla.suse.com/1145383" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14806" ref_url="https://www.suse.com/security/cve/CVE-2019-14806/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005909.html" source="SUSE-SU"/>
		<description>
This update for python-Werkzeug fixes the following issues:

Security issue fixed:

- CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container (bsc#1145383).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-12"/>
	<updated date="2019-09-12"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1145383">SUSE bug 1145383</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-14806/">CVE-2019-14806</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491658" comment="python3-Werkzeug-0.14.1-6.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137760" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1149495" ref_url="https://bugzilla.suse.com/1149495" source="BUGZILLA"/>
		<reference ref_id="1149496" ref_url="https://bugzilla.suse.com/1149496" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5481" ref_url="https://www.suse.com/security/cve/CVE-2019-5481/" source="CVE"/>
		<reference ref_id="CVE-2019-5482" ref_url="https://www.suse.com/security/cve/CVE-2019-5482/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2373-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192373-1.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

Security issues fixed:

- CVE-2019-5481: Fixed FTP-KRB double-free during kerberos FTP data transfer (bsc#1149495).
- CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow (bsc#1149496).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-12"/>
	<updated date="2019-09-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1149495">SUSE bug 1149495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149496">SUSE bug 1149496</bugzilla>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5481/">CVE-2019-5481</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5482/">CVE-2019-5482</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490454" comment="curl-7.60.0-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490455" comment="libcurl-devel-7.60.0-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490456" comment="libcurl4-7.60.0-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490457" comment="libcurl4-32bit-7.60.0-3.23.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137761" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1073313" ref_url="https://bugzilla.suse.com/1073313" source="BUGZILLA"/>
		<reference ref_id="1111388" ref_url="https://bugzilla.suse.com/1111388" source="BUGZILLA"/>
		<reference ref_id="1114845" ref_url="https://bugzilla.suse.com/1114845" source="BUGZILLA"/>
		<reference ref_id="1143194" ref_url="https://bugzilla.suse.com/1143194" source="BUGZILLA"/>
		<reference ref_id="1143273" ref_url="https://bugzilla.suse.com/1143273" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17740" ref_url="https://www.suse.com/security/cve/CVE-2017-17740/" source="CVE"/>
		<reference ref_id="CVE-2019-13057" ref_url="https://www.suse.com/security/cve/CVE-2019-13057/" source="CVE"/>
		<reference ref_id="CVE-2019-13565" ref_url="https://www.suse.com/security/cve/CVE-2019-13565/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005929.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

Security issue fixed:

- CVE-2019-13565: Fixed an authentication bypass when using SASL authentication and session encryption (bsc#1143194).
- CVE-2019-13057: Fixed an issue with delegated database admin privileges (bsc#1143273).
- CVE-2017-17740: When both the nops module and the member of overlay
  are enabled, attempts to free a buffer that was allocated on the stack,
  which allows remote attackers to cause a denial of service (slapd crash)
  via a member MODDN operation. (bsc#1073313)

Non-security issues fixed:

- Fixed broken shebang line in openldap_update_modules_path.sh (bsc#1114845).
- Create files in /var/lib/ldap/ during initial start to allow for transactional updates (bsc#1111388)
- Fixed incorrect post script call causing tmpfiles creation not to be run (bsc#1111388).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-18"/>
	<updated date="2019-09-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1073313">SUSE bug 1073313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111388">SUSE bug 1111388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114845">SUSE bug 1114845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143194">SUSE bug 1143194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143273">SUSE bug 1143273</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17740/">CVE-2017-17740</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13057/">CVE-2019-13057</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13565/">CVE-2019-13565</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490477" comment="libldap-2_4-2-2.4.46-9.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490478" comment="libldap-2_4-2-32bit-2.4.46-9.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490479" comment="openldap2-client-2.4.46-9.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490480" comment="openldap2-devel-2.4.46-9.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490481" comment="openldap2-devel-static-2.4.46-9.19.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137762" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1150003" ref_url="https://bugzilla.suse.com/1150003" source="BUGZILLA"/>
		<reference ref_id="1150250" ref_url="https://bugzilla.suse.com/1150250" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1547" ref_url="https://www.suse.com/security/cve/CVE-2019-1547/" source="CVE"/>
		<reference ref_id="CVE-2019-1563" ref_url="https://www.suse.com/security/cve/CVE-2019-1563/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2403-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005935.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

OpenSSL Security Advisory [10 September 2019]

* CVE-2019-1547: Added EC_GROUP_set_generator side channel attack avoidance. (bsc#1150003)
* CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key (bsc#1150250)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-18"/>
	<updated date="2019-09-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1150003">SUSE bug 1150003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150250">SUSE bug 1150250</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1547/">CVE-2019-1547</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1563/">CVE-2019-1563</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491659" comment="libopenssl-1_1-devel-1.1.0i-14.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491660" comment="libopenssl1_1-1.1.0i-14.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491661" comment="libopenssl1_1-32bit-1.1.0i-14.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491662" comment="libopenssl1_1-hmac-1.1.0i-14.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491663" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491664" comment="openssl-1_1-1.1.0i-14.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137763" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1047238" ref_url="https://bugzilla.suse.com/1047238" source="BUGZILLA"/>
		<reference ref_id="1050911" ref_url="https://bugzilla.suse.com/1050911" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1054914" ref_url="https://bugzilla.suse.com/1054914" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1056686" ref_url="https://bugzilla.suse.com/1056686" source="BUGZILLA"/>
		<reference ref_id="1060662" ref_url="https://bugzilla.suse.com/1060662" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1061843" ref_url="https://bugzilla.suse.com/1061843" source="BUGZILLA"/>
		<reference ref_id="1064597" ref_url="https://bugzilla.suse.com/1064597" source="BUGZILLA"/>
		<reference ref_id="1064701" ref_url="https://bugzilla.suse.com/1064701" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066369" ref_url="https://bugzilla.suse.com/1066369" source="BUGZILLA"/>
		<reference ref_id="1071009" ref_url="https://bugzilla.suse.com/1071009" source="BUGZILLA"/>
		<reference ref_id="1071306" ref_url="https://bugzilla.suse.com/1071306" source="BUGZILLA"/>
		<reference ref_id="1078248" ref_url="https://bugzilla.suse.com/1078248" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1085536" ref_url="https://bugzilla.suse.com/1085536" source="BUGZILLA"/>
		<reference ref_id="1085539" ref_url="https://bugzilla.suse.com/1085539" source="BUGZILLA"/>
		<reference ref_id="1086103" ref_url="https://bugzilla.suse.com/1086103" source="BUGZILLA"/>
		<reference ref_id="1087092" ref_url="https://bugzilla.suse.com/1087092" source="BUGZILLA"/>
		<reference ref_id="1090734" ref_url="https://bugzilla.suse.com/1090734" source="BUGZILLA"/>
		<reference ref_id="1091171" ref_url="https://bugzilla.suse.com/1091171" source="BUGZILLA"/>
		<reference ref_id="1093205" ref_url="https://bugzilla.suse.com/1093205" source="BUGZILLA"/>
		<reference ref_id="1102097" ref_url="https://bugzilla.suse.com/1102097" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1104902" ref_url="https://bugzilla.suse.com/1104902" source="BUGZILLA"/>
		<reference ref_id="1106061" ref_url="https://bugzilla.suse.com/1106061" source="BUGZILLA"/>
		<reference ref_id="1106284" ref_url="https://bugzilla.suse.com/1106284" source="BUGZILLA"/>
		<reference ref_id="1106434" ref_url="https://bugzilla.suse.com/1106434" source="BUGZILLA"/>
		<reference ref_id="1108382" ref_url="https://bugzilla.suse.com/1108382" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1112894" ref_url="https://bugzilla.suse.com/1112894" source="BUGZILLA"/>
		<reference ref_id="1112899" ref_url="https://bugzilla.suse.com/1112899" source="BUGZILLA"/>
		<reference ref_id="1112902" ref_url="https://bugzilla.suse.com/1112902" source="BUGZILLA"/>
		<reference ref_id="1112903" ref_url="https://bugzilla.suse.com/1112903" source="BUGZILLA"/>
		<reference ref_id="1112905" ref_url="https://bugzilla.suse.com/1112905" source="BUGZILLA"/>
		<reference ref_id="1112906" ref_url="https://bugzilla.suse.com/1112906" source="BUGZILLA"/>
		<reference ref_id="1112907" ref_url="https://bugzilla.suse.com/1112907" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114542" ref_url="https://bugzilla.suse.com/1114542" source="BUGZILLA"/>
		<reference ref_id="1118689" ref_url="https://bugzilla.suse.com/1118689" source="BUGZILLA"/>
		<reference ref_id="1119086" ref_url="https://bugzilla.suse.com/1119086" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1120046" ref_url="https://bugzilla.suse.com/1120046" source="BUGZILLA"/>
		<reference ref_id="1120876" ref_url="https://bugzilla.suse.com/1120876" source="BUGZILLA"/>
		<reference ref_id="1120902" ref_url="https://bugzilla.suse.com/1120902" source="BUGZILLA"/>
		<reference ref_id="1123105" ref_url="https://bugzilla.suse.com/1123105" source="BUGZILLA"/>
		<reference ref_id="1123959" ref_url="https://bugzilla.suse.com/1123959" source="BUGZILLA"/>
		<reference ref_id="1124370" ref_url="https://bugzilla.suse.com/1124370" source="BUGZILLA"/>
		<reference ref_id="1129424" ref_url="https://bugzilla.suse.com/1129424" source="BUGZILLA"/>
		<reference ref_id="1129519" ref_url="https://bugzilla.suse.com/1129519" source="BUGZILLA"/>
		<reference ref_id="1129664" ref_url="https://bugzilla.suse.com/1129664" source="BUGZILLA"/>
		<reference ref_id="1131107" ref_url="https://bugzilla.suse.com/1131107" source="BUGZILLA"/>
		<reference ref_id="1131281" ref_url="https://bugzilla.suse.com/1131281" source="BUGZILLA"/>
		<reference ref_id="1131489" ref_url="https://bugzilla.suse.com/1131489" source="BUGZILLA"/>
		<reference ref_id="1131565" ref_url="https://bugzilla.suse.com/1131565" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134291" ref_url="https://bugzilla.suse.com/1134291" source="BUGZILLA"/>
		<reference ref_id="1134476" ref_url="https://bugzilla.suse.com/1134476" source="BUGZILLA"/>
		<reference ref_id="1134881" ref_url="https://bugzilla.suse.com/1134881" source="BUGZILLA"/>
		<reference ref_id="1134882" ref_url="https://bugzilla.suse.com/1134882" source="BUGZILLA"/>
		<reference ref_id="1135219" ref_url="https://bugzilla.suse.com/1135219" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135897" ref_url="https://bugzilla.suse.com/1135897" source="BUGZILLA"/>
		<reference ref_id="1135990" ref_url="https://bugzilla.suse.com/1135990" source="BUGZILLA"/>
		<reference ref_id="1136039" ref_url="https://bugzilla.suse.com/1136039" source="BUGZILLA"/>
		<reference ref_id="1136261" ref_url="https://bugzilla.suse.com/1136261" source="BUGZILLA"/>
		<reference ref_id="1136346" ref_url="https://bugzilla.suse.com/1136346" source="BUGZILLA"/>
		<reference ref_id="1136349" ref_url="https://bugzilla.suse.com/1136349" source="BUGZILLA"/>
		<reference ref_id="1136352" ref_url="https://bugzilla.suse.com/1136352" source="BUGZILLA"/>
		<reference ref_id="1136496" ref_url="https://bugzilla.suse.com/1136496" source="BUGZILLA"/>
		<reference ref_id="1136498" ref_url="https://bugzilla.suse.com/1136498" source="BUGZILLA"/>
		<reference ref_id="1136502" ref_url="https://bugzilla.suse.com/1136502" source="BUGZILLA"/>
		<reference ref_id="1136682" ref_url="https://bugzilla.suse.com/1136682" source="BUGZILLA"/>
		<reference ref_id="1137322" ref_url="https://bugzilla.suse.com/1137322" source="BUGZILLA"/>
		<reference ref_id="1137323" ref_url="https://bugzilla.suse.com/1137323" source="BUGZILLA"/>
		<reference ref_id="1137884" ref_url="https://bugzilla.suse.com/1137884" source="BUGZILLA"/>
		<reference ref_id="1138099" ref_url="https://bugzilla.suse.com/1138099" source="BUGZILLA"/>
		<reference ref_id="1138100" ref_url="https://bugzilla.suse.com/1138100" source="BUGZILLA"/>
		<reference ref_id="1138539" ref_url="https://bugzilla.suse.com/1138539" source="BUGZILLA"/>
		<reference ref_id="1139020" ref_url="https://bugzilla.suse.com/1139020" source="BUGZILLA"/>
		<reference ref_id="1139021" ref_url="https://bugzilla.suse.com/1139021" source="BUGZILLA"/>
		<reference ref_id="1139101" ref_url="https://bugzilla.suse.com/1139101" source="BUGZILLA"/>
		<reference ref_id="1139500" ref_url="https://bugzilla.suse.com/1139500" source="BUGZILLA"/>
		<reference ref_id="1140012" ref_url="https://bugzilla.suse.com/1140012" source="BUGZILLA"/>
		<reference ref_id="1140426" ref_url="https://bugzilla.suse.com/1140426" source="BUGZILLA"/>
		<reference ref_id="1140487" ref_url="https://bugzilla.suse.com/1140487" source="BUGZILLA"/>
		<reference ref_id="1141340" ref_url="https://bugzilla.suse.com/1141340" source="BUGZILLA"/>
		<reference ref_id="1141450" ref_url="https://bugzilla.suse.com/1141450" source="BUGZILLA"/>
		<reference ref_id="1141543" ref_url="https://bugzilla.suse.com/1141543" source="BUGZILLA"/>
		<reference ref_id="1141554" ref_url="https://bugzilla.suse.com/1141554" source="BUGZILLA"/>
		<reference ref_id="1142019" ref_url="https://bugzilla.suse.com/1142019" source="BUGZILLA"/>
		<reference ref_id="1142076" ref_url="https://bugzilla.suse.com/1142076" source="BUGZILLA"/>
		<reference ref_id="1142109" ref_url="https://bugzilla.suse.com/1142109" source="BUGZILLA"/>
		<reference ref_id="1142117" ref_url="https://bugzilla.suse.com/1142117" source="BUGZILLA"/>
		<reference ref_id="1142118" ref_url="https://bugzilla.suse.com/1142118" source="BUGZILLA"/>
		<reference ref_id="1142119" ref_url="https://bugzilla.suse.com/1142119" source="BUGZILLA"/>
		<reference ref_id="1142496" ref_url="https://bugzilla.suse.com/1142496" source="BUGZILLA"/>
		<reference ref_id="1142541" ref_url="https://bugzilla.suse.com/1142541" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1142701" ref_url="https://bugzilla.suse.com/1142701" source="BUGZILLA"/>
		<reference ref_id="1142857" ref_url="https://bugzilla.suse.com/1142857" source="BUGZILLA"/>
		<reference ref_id="1143300" ref_url="https://bugzilla.suse.com/1143300" source="BUGZILLA"/>
		<reference ref_id="1143331" ref_url="https://bugzilla.suse.com/1143331" source="BUGZILLA"/>
		<reference ref_id="1143466" ref_url="https://bugzilla.suse.com/1143466" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1143738" ref_url="https://bugzilla.suse.com/1143738" source="BUGZILLA"/>
		<reference ref_id="1143765" ref_url="https://bugzilla.suse.com/1143765" source="BUGZILLA"/>
		<reference ref_id="1143841" ref_url="https://bugzilla.suse.com/1143841" source="BUGZILLA"/>
		<reference ref_id="1143843" ref_url="https://bugzilla.suse.com/1143843" source="BUGZILLA"/>
		<reference ref_id="1143962" ref_url="https://bugzilla.suse.com/1143962" source="BUGZILLA"/>
		<reference ref_id="1144123" ref_url="https://bugzilla.suse.com/1144123" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1144375" ref_url="https://bugzilla.suse.com/1144375" source="BUGZILLA"/>
		<reference ref_id="1144474" ref_url="https://bugzilla.suse.com/1144474" source="BUGZILLA"/>
		<reference ref_id="1144518" ref_url="https://bugzilla.suse.com/1144518" source="BUGZILLA"/>
		<reference ref_id="1144582" ref_url="https://bugzilla.suse.com/1144582" source="BUGZILLA"/>
		<reference ref_id="1144718" ref_url="https://bugzilla.suse.com/1144718" source="BUGZILLA"/>
		<reference ref_id="1144813" ref_url="https://bugzilla.suse.com/1144813" source="BUGZILLA"/>
		<reference ref_id="1144880" ref_url="https://bugzilla.suse.com/1144880" source="BUGZILLA"/>
		<reference ref_id="1144886" ref_url="https://bugzilla.suse.com/1144886" source="BUGZILLA"/>
		<reference ref_id="1144912" ref_url="https://bugzilla.suse.com/1144912" source="BUGZILLA"/>
		<reference ref_id="1144920" ref_url="https://bugzilla.suse.com/1144920" source="BUGZILLA"/>
		<reference ref_id="1144979" ref_url="https://bugzilla.suse.com/1144979" source="BUGZILLA"/>
		<reference ref_id="1145010" ref_url="https://bugzilla.suse.com/1145010" source="BUGZILLA"/>
		<reference ref_id="1145018" ref_url="https://bugzilla.suse.com/1145018" source="BUGZILLA"/>
		<reference ref_id="1145051" ref_url="https://bugzilla.suse.com/1145051" source="BUGZILLA"/>
		<reference ref_id="1145059" ref_url="https://bugzilla.suse.com/1145059" source="BUGZILLA"/>
		<reference ref_id="1145189" ref_url="https://bugzilla.suse.com/1145189" source="BUGZILLA"/>
		<reference ref_id="1145235" ref_url="https://bugzilla.suse.com/1145235" source="BUGZILLA"/>
		<reference ref_id="1145256" ref_url="https://bugzilla.suse.com/1145256" source="BUGZILLA"/>
		<reference ref_id="1145300" ref_url="https://bugzilla.suse.com/1145300" source="BUGZILLA"/>
		<reference ref_id="1145302" ref_url="https://bugzilla.suse.com/1145302" source="BUGZILLA"/>
		<reference ref_id="1145357" ref_url="https://bugzilla.suse.com/1145357" source="BUGZILLA"/>
		<reference ref_id="1145388" ref_url="https://bugzilla.suse.com/1145388" source="BUGZILLA"/>
		<reference ref_id="1145389" ref_url="https://bugzilla.suse.com/1145389" source="BUGZILLA"/>
		<reference ref_id="1145390" ref_url="https://bugzilla.suse.com/1145390" source="BUGZILLA"/>
		<reference ref_id="1145391" ref_url="https://bugzilla.suse.com/1145391" source="BUGZILLA"/>
		<reference ref_id="1145392" ref_url="https://bugzilla.suse.com/1145392" source="BUGZILLA"/>
		<reference ref_id="1145393" ref_url="https://bugzilla.suse.com/1145393" source="BUGZILLA"/>
		<reference ref_id="1145394" ref_url="https://bugzilla.suse.com/1145394" source="BUGZILLA"/>
		<reference ref_id="1145395" ref_url="https://bugzilla.suse.com/1145395" source="BUGZILLA"/>
		<reference ref_id="1145396" ref_url="https://bugzilla.suse.com/1145396" source="BUGZILLA"/>
		<reference ref_id="1145397" ref_url="https://bugzilla.suse.com/1145397" source="BUGZILLA"/>
		<reference ref_id="1145408" ref_url="https://bugzilla.suse.com/1145408" source="BUGZILLA"/>
		<reference ref_id="1145409" ref_url="https://bugzilla.suse.com/1145409" source="BUGZILLA"/>
		<reference ref_id="1145446" ref_url="https://bugzilla.suse.com/1145446" source="BUGZILLA"/>
		<reference ref_id="1145661" ref_url="https://bugzilla.suse.com/1145661" source="BUGZILLA"/>
		<reference ref_id="1145678" ref_url="https://bugzilla.suse.com/1145678" source="BUGZILLA"/>
		<reference ref_id="1145687" ref_url="https://bugzilla.suse.com/1145687" source="BUGZILLA"/>
		<reference ref_id="1145920" ref_url="https://bugzilla.suse.com/1145920" source="BUGZILLA"/>
		<reference ref_id="1145922" ref_url="https://bugzilla.suse.com/1145922" source="BUGZILLA"/>
		<reference ref_id="1145934" ref_url="https://bugzilla.suse.com/1145934" source="BUGZILLA"/>
		<reference ref_id="1145937" ref_url="https://bugzilla.suse.com/1145937" source="BUGZILLA"/>
		<reference ref_id="1145940" ref_url="https://bugzilla.suse.com/1145940" source="BUGZILLA"/>
		<reference ref_id="1145941" ref_url="https://bugzilla.suse.com/1145941" source="BUGZILLA"/>
		<reference ref_id="1145942" ref_url="https://bugzilla.suse.com/1145942" source="BUGZILLA"/>
		<reference ref_id="1145946" ref_url="https://bugzilla.suse.com/1145946" source="BUGZILLA"/>
		<reference ref_id="1146074" ref_url="https://bugzilla.suse.com/1146074" source="BUGZILLA"/>
		<reference ref_id="1146084" ref_url="https://bugzilla.suse.com/1146084" source="BUGZILLA"/>
		<reference ref_id="1146141" ref_url="https://bugzilla.suse.com/1146141" source="BUGZILLA"/>
		<reference ref_id="1146163" ref_url="https://bugzilla.suse.com/1146163" source="BUGZILLA"/>
		<reference ref_id="1146215" ref_url="https://bugzilla.suse.com/1146215" source="BUGZILLA"/>
		<reference ref_id="1146285" ref_url="https://bugzilla.suse.com/1146285" source="BUGZILLA"/>
		<reference ref_id="1146346" ref_url="https://bugzilla.suse.com/1146346" source="BUGZILLA"/>
		<reference ref_id="1146351" ref_url="https://bugzilla.suse.com/1146351" source="BUGZILLA"/>
		<reference ref_id="1146352" ref_url="https://bugzilla.suse.com/1146352" source="BUGZILLA"/>
		<reference ref_id="1146361" ref_url="https://bugzilla.suse.com/1146361" source="BUGZILLA"/>
		<reference ref_id="1146368" ref_url="https://bugzilla.suse.com/1146368" source="BUGZILLA"/>
		<reference ref_id="1146376" ref_url="https://bugzilla.suse.com/1146376" source="BUGZILLA"/>
		<reference ref_id="1146378" ref_url="https://bugzilla.suse.com/1146378" source="BUGZILLA"/>
		<reference ref_id="1146381" ref_url="https://bugzilla.suse.com/1146381" source="BUGZILLA"/>
		<reference ref_id="1146391" ref_url="https://bugzilla.suse.com/1146391" source="BUGZILLA"/>
		<reference ref_id="1146399" ref_url="https://bugzilla.suse.com/1146399" source="BUGZILLA"/>
		<reference ref_id="1146413" ref_url="https://bugzilla.suse.com/1146413" source="BUGZILLA"/>
		<reference ref_id="1146425" ref_url="https://bugzilla.suse.com/1146425" source="BUGZILLA"/>
		<reference ref_id="1146516" ref_url="https://bugzilla.suse.com/1146516" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146524" ref_url="https://bugzilla.suse.com/1146524" source="BUGZILLA"/>
		<reference ref_id="1146526" ref_url="https://bugzilla.suse.com/1146526" source="BUGZILLA"/>
		<reference ref_id="1146529" ref_url="https://bugzilla.suse.com/1146529" source="BUGZILLA"/>
		<reference ref_id="1146531" ref_url="https://bugzilla.suse.com/1146531" source="BUGZILLA"/>
		<reference ref_id="1146543" ref_url="https://bugzilla.suse.com/1146543" source="BUGZILLA"/>
		<reference ref_id="1146547" ref_url="https://bugzilla.suse.com/1146547" source="BUGZILLA"/>
		<reference ref_id="1146550" ref_url="https://bugzilla.suse.com/1146550" source="BUGZILLA"/>
		<reference ref_id="1146575" ref_url="https://bugzilla.suse.com/1146575" source="BUGZILLA"/>
		<reference ref_id="1146589" ref_url="https://bugzilla.suse.com/1146589" source="BUGZILLA"/>
		<reference ref_id="1146678" ref_url="https://bugzilla.suse.com/1146678" source="BUGZILLA"/>
		<reference ref_id="1146938" ref_url="https://bugzilla.suse.com/1146938" source="BUGZILLA"/>
		<reference ref_id="1148031" ref_url="https://bugzilla.suse.com/1148031" source="BUGZILLA"/>
		<reference ref_id="1148032" ref_url="https://bugzilla.suse.com/1148032" source="BUGZILLA"/>
		<reference ref_id="1148033" ref_url="https://bugzilla.suse.com/1148033" source="BUGZILLA"/>
		<reference ref_id="1148034" ref_url="https://bugzilla.suse.com/1148034" source="BUGZILLA"/>
		<reference ref_id="1148035" ref_url="https://bugzilla.suse.com/1148035" source="BUGZILLA"/>
		<reference ref_id="1148093" ref_url="https://bugzilla.suse.com/1148093" source="BUGZILLA"/>
		<reference ref_id="1148133" ref_url="https://bugzilla.suse.com/1148133" source="BUGZILLA"/>
		<reference ref_id="1148192" ref_url="https://bugzilla.suse.com/1148192" source="BUGZILLA"/>
		<reference ref_id="1148196" ref_url="https://bugzilla.suse.com/1148196" source="BUGZILLA"/>
		<reference ref_id="1148198" ref_url="https://bugzilla.suse.com/1148198" source="BUGZILLA"/>
		<reference ref_id="1148202" ref_url="https://bugzilla.suse.com/1148202" source="BUGZILLA"/>
		<reference ref_id="1148219" ref_url="https://bugzilla.suse.com/1148219" source="BUGZILLA"/>
		<reference ref_id="1148297" ref_url="https://bugzilla.suse.com/1148297" source="BUGZILLA"/>
		<reference ref_id="1148303" ref_url="https://bugzilla.suse.com/1148303" source="BUGZILLA"/>
		<reference ref_id="1148308" ref_url="https://bugzilla.suse.com/1148308" source="BUGZILLA"/>
		<reference ref_id="1148363" ref_url="https://bugzilla.suse.com/1148363" source="BUGZILLA"/>
		<reference ref_id="1148379" ref_url="https://bugzilla.suse.com/1148379" source="BUGZILLA"/>
		<reference ref_id="1148394" ref_url="https://bugzilla.suse.com/1148394" source="BUGZILLA"/>
		<reference ref_id="1148527" ref_url="https://bugzilla.suse.com/1148527" source="BUGZILLA"/>
		<reference ref_id="1148570" ref_url="https://bugzilla.suse.com/1148570" source="BUGZILLA"/>
		<reference ref_id="1148574" ref_url="https://bugzilla.suse.com/1148574" source="BUGZILLA"/>
		<reference ref_id="1148616" ref_url="https://bugzilla.suse.com/1148616" source="BUGZILLA"/>
		<reference ref_id="1148617" ref_url="https://bugzilla.suse.com/1148617" source="BUGZILLA"/>
		<reference ref_id="1148619" ref_url="https://bugzilla.suse.com/1148619" source="BUGZILLA"/>
		<reference ref_id="1148698" ref_url="https://bugzilla.suse.com/1148698" source="BUGZILLA"/>
		<reference ref_id="1148859" ref_url="https://bugzilla.suse.com/1148859" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1149053" ref_url="https://bugzilla.suse.com/1149053" source="BUGZILLA"/>
		<reference ref_id="1149083" ref_url="https://bugzilla.suse.com/1149083" source="BUGZILLA"/>
		<reference ref_id="1149104" ref_url="https://bugzilla.suse.com/1149104" source="BUGZILLA"/>
		<reference ref_id="1149105" ref_url="https://bugzilla.suse.com/1149105" source="BUGZILLA"/>
		<reference ref_id="1149106" ref_url="https://bugzilla.suse.com/1149106" source="BUGZILLA"/>
		<reference ref_id="1149197" ref_url="https://bugzilla.suse.com/1149197" source="BUGZILLA"/>
		<reference ref_id="1149214" ref_url="https://bugzilla.suse.com/1149214" source="BUGZILLA"/>
		<reference ref_id="1149224" ref_url="https://bugzilla.suse.com/1149224" source="BUGZILLA"/>
		<reference ref_id="1149325" ref_url="https://bugzilla.suse.com/1149325" source="BUGZILLA"/>
		<reference ref_id="1149376" ref_url="https://bugzilla.suse.com/1149376" source="BUGZILLA"/>
		<reference ref_id="1149413" ref_url="https://bugzilla.suse.com/1149413" source="BUGZILLA"/>
		<reference ref_id="1149418" ref_url="https://bugzilla.suse.com/1149418" source="BUGZILLA"/>
		<reference ref_id="1149424" ref_url="https://bugzilla.suse.com/1149424" source="BUGZILLA"/>
		<reference ref_id="1149522" ref_url="https://bugzilla.suse.com/1149522" source="BUGZILLA"/>
		<reference ref_id="1149527" ref_url="https://bugzilla.suse.com/1149527" source="BUGZILLA"/>
		<reference ref_id="1149539" ref_url="https://bugzilla.suse.com/1149539" source="BUGZILLA"/>
		<reference ref_id="1149552" ref_url="https://bugzilla.suse.com/1149552" source="BUGZILLA"/>
		<reference ref_id="1149591" ref_url="https://bugzilla.suse.com/1149591" source="BUGZILLA"/>
		<reference ref_id="1149602" ref_url="https://bugzilla.suse.com/1149602" source="BUGZILLA"/>
		<reference ref_id="1149612" ref_url="https://bugzilla.suse.com/1149612" source="BUGZILLA"/>
		<reference ref_id="1149626" ref_url="https://bugzilla.suse.com/1149626" source="BUGZILLA"/>
		<reference ref_id="1149652" ref_url="https://bugzilla.suse.com/1149652" source="BUGZILLA"/>
		<reference ref_id="1149713" ref_url="https://bugzilla.suse.com/1149713" source="BUGZILLA"/>
		<reference ref_id="1149940" ref_url="https://bugzilla.suse.com/1149940" source="BUGZILLA"/>
		<reference ref_id="1149976" ref_url="https://bugzilla.suse.com/1149976" source="BUGZILLA"/>
		<reference ref_id="1150025" ref_url="https://bugzilla.suse.com/1150025" source="BUGZILLA"/>
		<reference ref_id="1150033" ref_url="https://bugzilla.suse.com/1150033" source="BUGZILLA"/>
		<reference ref_id="1150112" ref_url="https://bugzilla.suse.com/1150112" source="BUGZILLA"/>
		<reference ref_id="1150562" ref_url="https://bugzilla.suse.com/1150562" source="BUGZILLA"/>
		<reference ref_id="1150727" ref_url="https://bugzilla.suse.com/1150727" source="BUGZILLA"/>
		<reference ref_id="1150860" ref_url="https://bugzilla.suse.com/1150860" source="BUGZILLA"/>
		<reference ref_id="1150861" ref_url="https://bugzilla.suse.com/1150861" source="BUGZILLA"/>
		<reference ref_id="1150933" ref_url="https://bugzilla.suse.com/1150933" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18551" ref_url="https://www.suse.com/security/cve/CVE-2017-18551/" source="CVE"/>
		<reference ref_id="CVE-2018-20976" ref_url="https://www.suse.com/security/cve/CVE-2018-20976/" source="CVE"/>
		<reference ref_id="CVE-2018-21008" ref_url="https://www.suse.com/security/cve/CVE-2018-21008/" source="CVE"/>
		<reference ref_id="CVE-2019-10207" ref_url="https://www.suse.com/security/cve/CVE-2019-10207/" source="CVE"/>
		<reference ref_id="CVE-2019-14814" ref_url="https://www.suse.com/security/cve/CVE-2019-14814/" source="CVE"/>
		<reference ref_id="CVE-2019-14815" ref_url="https://www.suse.com/security/cve/CVE-2019-14815/" source="CVE"/>
		<reference ref_id="CVE-2019-14816" ref_url="https://www.suse.com/security/cve/CVE-2019-14816/" source="CVE"/>
		<reference ref_id="CVE-2019-14835" ref_url="https://www.suse.com/security/cve/CVE-2019-14835/" source="CVE"/>
		<reference ref_id="CVE-2019-15030" ref_url="https://www.suse.com/security/cve/CVE-2019-15030/" source="CVE"/>
		<reference ref_id="CVE-2019-15031" ref_url="https://www.suse.com/security/cve/CVE-2019-15031/" source="CVE"/>
		<reference ref_id="CVE-2019-15090" ref_url="https://www.suse.com/security/cve/CVE-2019-15090/" source="CVE"/>
		<reference ref_id="CVE-2019-15098" ref_url="https://www.suse.com/security/cve/CVE-2019-15098/" source="CVE"/>
		<reference ref_id="CVE-2019-15099" ref_url="https://www.suse.com/security/cve/CVE-2019-15099/" source="CVE"/>
		<reference ref_id="CVE-2019-15117" ref_url="https://www.suse.com/security/cve/CVE-2019-15117/" source="CVE"/>
		<reference ref_id="CVE-2019-15118" ref_url="https://www.suse.com/security/cve/CVE-2019-15118/" source="CVE"/>
		<reference ref_id="CVE-2019-15211" ref_url="https://www.suse.com/security/cve/CVE-2019-15211/" source="CVE"/>
		<reference ref_id="CVE-2019-15212" ref_url="https://www.suse.com/security/cve/CVE-2019-15212/" source="CVE"/>
		<reference ref_id="CVE-2019-15214" ref_url="https://www.suse.com/security/cve/CVE-2019-15214/" source="CVE"/>
		<reference ref_id="CVE-2019-15215" ref_url="https://www.suse.com/security/cve/CVE-2019-15215/" source="CVE"/>
		<reference ref_id="CVE-2019-15216" ref_url="https://www.suse.com/security/cve/CVE-2019-15216/" source="CVE"/>
		<reference ref_id="CVE-2019-15217" ref_url="https://www.suse.com/security/cve/CVE-2019-15217/" source="CVE"/>
		<reference ref_id="CVE-2019-15218" ref_url="https://www.suse.com/security/cve/CVE-2019-15218/" source="CVE"/>
		<reference ref_id="CVE-2019-15219" ref_url="https://www.suse.com/security/cve/CVE-2019-15219/" source="CVE"/>
		<reference ref_id="CVE-2019-15220" ref_url="https://www.suse.com/security/cve/CVE-2019-15220/" source="CVE"/>
		<reference ref_id="CVE-2019-15221" ref_url="https://www.suse.com/security/cve/CVE-2019-15221/" source="CVE"/>
		<reference ref_id="CVE-2019-15222" ref_url="https://www.suse.com/security/cve/CVE-2019-15222/" source="CVE"/>
		<reference ref_id="CVE-2019-15239" ref_url="https://www.suse.com/security/cve/CVE-2019-15239/" source="CVE"/>
		<reference ref_id="CVE-2019-15290" ref_url="https://www.suse.com/security/cve/CVE-2019-15290/" source="CVE"/>
		<reference ref_id="CVE-2019-15292" ref_url="https://www.suse.com/security/cve/CVE-2019-15292/" source="CVE"/>
		<reference ref_id="CVE-2019-15538" ref_url="https://www.suse.com/security/cve/CVE-2019-15538/" source="CVE"/>
		<reference ref_id="CVE-2019-15666" ref_url="https://www.suse.com/security/cve/CVE-2019-15666/" source="CVE"/>
		<reference ref_id="CVE-2019-15902" ref_url="https://www.suse.com/security/cve/CVE-2019-15902/" source="CVE"/>
		<reference ref_id="CVE-2019-15917" ref_url="https://www.suse.com/security/cve/CVE-2019-15917/" source="CVE"/>
		<reference ref_id="CVE-2019-15919" ref_url="https://www.suse.com/security/cve/CVE-2019-15919/" source="CVE"/>
		<reference ref_id="CVE-2019-15920" ref_url="https://www.suse.com/security/cve/CVE-2019-15920/" source="CVE"/>
		<reference ref_id="CVE-2019-15921" ref_url="https://www.suse.com/security/cve/CVE-2019-15921/" source="CVE"/>
		<reference ref_id="CVE-2019-15924" ref_url="https://www.suse.com/security/cve/CVE-2019-15924/" source="CVE"/>
		<reference ref_id="CVE-2019-15926" ref_url="https://www.suse.com/security/cve/CVE-2019-15926/" source="CVE"/>
		<reference ref_id="CVE-2019-15927" ref_url="https://www.suse.com/security/cve/CVE-2019-15927/" source="CVE"/>
		<reference ref_id="CVE-2019-9456" ref_url="https://www.suse.com/security/cve/CVE-2019-9456/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005945.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following new features were implemented:

- jsc#SLE-4875: [CML] New device IDs for CML
- jsc#SLE-7294: Add cpufreq driver for Raspberry Pi
- fate#326869: perf: pmu mem_load/store event support
- fate#327380: KVM: Add hardware CPU Model - kernel part
- fate#327377: KVM: Support for configurable virtio-crypto
- fate#327775: vpmem: DRAM backed persistent volumes for improved SAP HANA on POWER restart times
- fate#326472: Marvell Armada 7K/8K Ethernet (incl. 10G) kernel enablement
- fate#326416: Hi1620 (Vendor: Huawei): RDMA kernel enablement
- fate#326415: Hi1620 (Vendor: Huawei): HNS3 (100G) network kernel enablement

The following security bugs were fixed:

- CVE-2019-14835: Fix QEMU-KVM Guest to Host Kernel Escape. (bsc#1150112).
- CVE-2019-15216: Fix a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver. (bsc#1146361).
- CVE-2019-15924: Fix a NULL pointer dereference because there was no -ENOMEM upon an alloc_workqueue failure. (bsc#1149612).
- CVE-2019-9456: In Pixel C USB monitor driver there was a possible OOB write due to a missing bounds check. This could have lead to local escalation of privilege with System execution privileges needed. (bsc#1150025 CVE-2019-9456).
- CVE-2019-15030, CVE-2019-15031: On the powerpc platform, a local user could read vector registers of other users' processes via an interrupt. (bsc#1149713)
- CVE-2019-15920: SMB2_read in fs/cifs/smb2pdu.c had a use-after-free. (bsc#1149626)
- CVE-2019-15921: There was a memory leak issue when idr_alloc() failed (bsc#1149602)
- CVE-2018-21008: A use-after-free can be caused by the function rsi_mac80211_detach (bsc#1149591).
- CVE-2019-15919: SMB2_write in fs/cifs/smb2pdu.c had a use-after-free. (bsc#1149552)
- CVE-2019-15917: There was a use-after-free issue when hci_uart_register_dev() failed in hci_uart_set_proto() (bsc#1149539)
- CVE-2019-15926: Out of bounds access existed in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx (bsc#1149527)
- CVE-2019-15927: An out-of-bounds access existed in the function build_audio_procunit (bsc#1149522)
- CVE-2019-15902: A backporting error reintroduced the Spectre vulnerability that it aimed to eliminate. (bnc#1149376)
- CVE-2019-15666: There was an out-of-bounds array access in __xfrm_policy_unlink, which would cause denial of service, because verify_newpolicy_info mishandled directory validation. (bsc#1148394).
- CVE-2019-15219: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver. (bsc#1146524)
- CVE-2019-14814, CVE-2019-14815, CVE-2019-14816: Fix three heap-based buffer overflows in marvell wifi chip driver kernel, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code. (bnc#1146516)
- CVE-2019-15220: There was a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver. (bsc#1146526)
- CVE-2019-15538: XFS partially wedged when a chgrp failed on account of being out of disk quota. This was primarily a local DoS attack vector, but it could result as well in remote DoS if the XFS filesystem was exported for instance via NFS. (bsc#1148032, bsc#1148093)
- CVE-2019-15290: There was a NULL pointer dereference caused by a malicious USB device in the ath6kl_usb_alloc_urb_from_pipe function (bsc#1146543).
- CVE-2019-15098: USB driver net/wireless/ath/ath6kl/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor. (bsc#1146378).
- CVE-2019-15221, CVE-2019-15222: There was a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver. (bsc#1146529, bsc#1146531)
- CVE-2019-10207: Fix a NULL pointer dereference in hci_uart bluetooth driver (bsc#1142857 bsc#1123959).
- CVE-2019-15117: parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel mishandled a short descriptor, leading to out-of-bounds memory access. (bsc#1145920).
- CVE-2019-15118: check_input_term in sound/usb/mixer.c in the Linux kernel mishandled recursion, leading to kernel stack exhaustion. (bsc#1145922).
- CVE-2017-18551: There was an out of bounds write in the function i2c_smbus_xfer_emulated. (bsc#1146163).
- CVE-2019-15090: In the qedi_dbg_* family of functions, there was an out-of-bounds read. (bsc#1146399)
- CVE-2018-20976: A use after free existed, related to xfs_fs_fill_super failure. (bsc#1146285)
- CVE-2019-15215: There was a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver. (bsc#1135642 bsc#1146425)
- CVE-2019-15212: There was a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver. (bsc#1051510 bsc#1146391).
- CVE-2019-15292: There was a use-after-free in atalk_proc_exit (bsc#1146678)
- CVE-2019-15217: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver. (bsc#1146547).
- CVE-2019-15214: There was a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. (bsc#1146550)
- CVE-2019-15218: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver. (bsc#1051510 bsc#1146413)
- CVE-2019-15211: There was a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c did not properly allocate memory. (bsc#1146519).
- CVE-2019-15239: An incorrect backport of a certain net/ipv4/tcp_output.c fix allowed a local attacker to trigger multiple use-after-free conditions. This could result in a kernel crash, or potentially in privilege escalation. (bsc#1146589)
- CVE-2019-15099: drivers/net/wireless/ath/ath10k/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor. (bsc#1146368)

The following non-security bugs were fixed:

- 9p/rdma: do not disconnect on down_interruptible EAGAIN (bsc#1051510).
- 9p/rdma: remove useless check in cm_event_handler (bsc#1051510).
- 9p/virtio: Add cleanup path in p9_virtio_init (bsc#1051510).
- 9p/xen: Add cleanup path in p9_trans_xen_init (bsc#1051510).
- 9p/xen: fix check for xenbus_read error in front_probe (bsc#1051510).
- 9p: acl: fix uninitialized iattr access (bsc#1051510).
- 9p: p9dirent_read: check network-provided name length (bsc#1051510).
- 9p: pass the correct prototype to read_cache_page (bsc#1051510).
- acpi/IORT: Fix off-by-one check in iort_dev_find_its_id() (bsc#1051510).
- acpi/arm64: ignore 5.1 FADTs that are reported as 5.0 (bsc#1051510).
- acpi: PM: Fix regression in acpi_device_set_power() (bsc#1051510).
- acpi: fix false-positive -Wuninitialized warning (bsc#1051510).
- acpica: Increase total number of possible Owner IDs (bsc#1148859).
- af_key: fix leaks in key_pol_get_resp and dump_sp (bsc#1051510).
- af_packet: Block execution of tasks waiting for transmit to complete in AF_PACKET (networking-stable-19_07_02).
- alsa: firewire: fix a memory leak bug (bsc#1051510).
- alsa: hda - Add a generic reboot_notify (bsc#1051510).
- alsa: hda - Apply workaround for another AMD chip 1022:1487 (bsc#1051510).
- alsa: hda - Do not override global PCM hw info flag (bsc#1051510).
- alsa: hda - Fix a memory leak bug (bsc#1051510).
- alsa: hda - Fix potential endless loop at applying quirks (bsc#1051510).
- alsa: hda - Fixes inverted Conexant GPIO mic mute led (bsc#1051510).
- alsa: hda - Let all conexant codec enter D3 when rebooting (bsc#1051510).
- alsa: hda - Workaround for crackled sound on AMD controller (1022:1457) (bsc#1051510).
- alsa: hda/ca0132 - Add new SBZ quirk (bsc#1051510).
- alsa: hda/realtek - Add quirk for HP Envy x360 (bsc#1051510).
- alsa: hda/realtek - Add quirk for HP Pavilion 15 (bsc#1051510).
- alsa: hda/realtek - Enable internal speaker &amp; headset mic of ASUS UX431FL (bsc#1051510).
- alsa: hda/realtek - Fix overridden device-specific initialization (bsc#1051510).
- alsa: hda/realtek - Fix the problem of two front mics on a ThinkCentre (bsc#1051510).
- alsa: hda: Fix 1-minute detection delay when i915 module is not available (bsc#1111666).
- alsa: hda: kabi workaround for generic parser flag (bsc#1051510).
- alsa: hiface: fix multiple memory leak bugs (bsc#1051510).
- alsa: line6: Fix memory leak at line6_init_pcm() error path (bsc#1051510).
- alsa: pcm: fix lost wakeup event scenarios in snd_pcm_drain (bsc#1051510).
- alsa: seq: Fix potential concurrent access to the deleted pool (bsc#1051510).
- alsa: usb-audio: Add implicit fb quirk for Behringer UFX1604 (bsc#1051510).
- alsa: usb-audio: Check mixer unit bitmap yet more strictly (bsc#1051510).
- alsa: usb-audio: Fix gpf in snd_usb_pipe_sanity_check (bsc#1051510).
- alsa: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate() (bsc#1051510).
- alsa: usb-audio: fix a memory leak bug (bsc#1111666).
- arch: integrate XIVE support (bsc#1085030, bsc#1144518, LTC#178833).
- arm64/kernel: enable A53 erratum #8434319 handling at runtime (bsc#1148219).
- arm64/kernel: rename module_emit_adrp_veneer-&gt;module_emit_veneer_for_adrp (bsc#1148219).
- arm64: fix undefined reference to 'printk' (bsc#1148219).
- arm64: kvm: Fix architecturally invalid reset value for FPEXC32_EL2 (bsc#1133021).
- arm64: module: do not BUG when exceeding preallocated PLT count (bsc#1148219).
- arm64: pci: Preserve firmware configuration when desired (SLE-9332).
- arm: (bsc#1145687) Add the following kernel config to ARM64: CONFIG_ACPI_PCI_SLOT=y CONFIG_HOTPLUG_PCI_ACPI=y
- arm: kvm: Add SMCCC_ARCH_WORKAROUND_1 fast handling (bsc#1133021).
- arm: kvm: report support for SMCCC_ARCH_WORKAROUND_1 (bsc#1133021).
- asoc: Fail card instantiation if DAI format setup fails (bsc#1051510).
- asoc: dapm: Fix handling of custom_stop_condition on DApm graph walks (bsc#1051510).
- ata: libahci: do not complain in case of deferred probe (bsc#1051510).
- ath10k: Change the warning message string (bsc#1051510).
- ath10k: Drop WARN_ON()s that always trigger during system resume (bsc#1111666).
- batman-adv: Only read OGM tvlv_len after buffer len check (bsc#1051510).
- batman-adv: Only read OGM2 tvlv_len after buffer len check (bsc#1051510).
- batman-adv: fix uninit-value in batadv_netlink_get_ifindex() (bsc#1051510).
- bcache: Revert 'bcache: use sysfs_match_string() instead of __sysfs_match_string()' (git fixes).
- bcache: bsc#1144979: kernel oops on reading sysfs cache_mode file
- bcache: fix possible memory leak in bch_cached_dev_run() (git fixes).
- bio: fix improper use of smp_mb__before_atomic() (git fixes).
- blk-mq: Fix spelling in a source code comment (git fixes).
- blk-mq: backport fixes for blk_mq_complete_e_request_sync() (bsc#1145661).
- blk-mq: introduce blk_mq_complete_request_sync() (bsc#1145661).
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait (bsc#1141543).
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait (bsc#1141543).
- block, documentation: Fix wbt_lat_usec documentation (git fixes).
- bluetooth: 6lowpan: search for destination address in all peers (bsc#1051510).
- bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug (bsc#1051510).
- bluetooth: Check state in l2cap_disconnect_rsp (bsc#1051510).
- bluetooth: btqca: Add a short delay before downloading the NVM (bsc#1051510).
- bluetooth: hci_bcsp: Fix memory leak in rx_skb (bsc#1051510).
- bluetooth: validate BLE connection interval updates (bsc#1051510).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502 jsc#SLE-4703).
- bnx2x: Disable multi-cos feature (bsc#1136498 jsc#SLE-4699).
- bnx2x: Prevent ptp_task to be rescheduled indefinitely (networking-stable-19_07_25).
- bnxt_en: Fix VNIC clearing logic for 57500 chips (bsc#1104745 ).
- bnxt_en: Fix to include flow direction in L2 key (bsc#1104745 ).
- bnxt_en: Improve RX doorbell sequence (bsc#1104745).
- bnxt_en: Use correct src_fid to determine direction of the flow (bsc#1104745).
- bonding: Always enable vlan tx offload (networking-stable-19_07_02).
- bonding: validate ip header before check IPPROTO_IGMP (networking-stable-19_07_25).
- bpf: sockmap, only create entry if ulp is not already enabled (bsc#1109837).
- bpf: sockmap, sock_map_delete needs to use xchg (bsc#1109837).
- bpf: sockmap, synchronize_rcu before free'ing map (bsc#1109837).
- btrfs: Fix delalloc inodes invalidation during transaction abort (bsc#1050911).
- btrfs: Split btrfs_del_delalloc_inode into 2 functions (bsc#1050911).
- btrfs: add a helper to retrive extent inline ref type (bsc#1149325).
- btrfs: add cleanup_ref_head_accounting helper (bsc#1050911).
- btrfs: add missing inode version, ctime and mtime updates when punching hole (bsc#1140487).
- btrfs: add one more sanity check for shared ref type (bsc#1149325).
- btrfs: clean up pending block groups when transaction commit aborts (bsc#1050911).
- btrfs: convert to use btrfs_get_extent_inline_ref_type (bsc#1149325).
- btrfs: do not abort transaction at btrfs_update_root() after failure to COW path (bsc#1150933).
- btrfs: fix assertion failure during fsync and use of stale transaction (bsc#1150562).
- btrfs: fix data loss after inode eviction, renaming it, and fsync it (bsc#1145941).
- btrfs: fix fsync not persisting dentry deletions due to inode evictions (bsc#1145942).
- btrfs: fix incremental send failure after deduplication (bsc#1145940).
- btrfs: fix pinned underflow after transaction aborted (bsc#1050911).
- btrfs: fix race between send and deduplication that lead to failures and crashes (bsc#1145059).
- btrfs: fix race leading to fs corruption after transaction abort (bsc#1145937).
- btrfs: handle delayed ref head accounting cleanup in abort (bsc#1050911).
- btrfs: prevent send failures and crashes due to concurrent relocation (bsc#1145059).
- btrfs: remove BUG() in add_data_reference (bsc#1149325).
- btrfs: remove BUG() in btrfs_extent_inline_ref_size (bsc#1149325).
- btrfs: remove BUG() in print_extent_item (bsc#1149325).
- btrfs: remove BUG_ON in __add_tree_block (bsc#1149325).
- btrfs: scrub: add memalloc_nofs protection around init_ipath (bsc#1086103).
- btrfs: start readahead also in seed devices (bsc#1144886).
- btrfs: track running balance in a simpler way (bsc#1145059).
- btrfs: use GFP_KERNEL in init_ipath (bsc#1086103).
- caif-hsi: fix possible deadlock in cfhsi_exit_module() (networking-stable-19_07_25).
- can: m_can: implement errata 'Needless activation of MRAF irq' (bsc#1051510).
- can: mcp251x: add support for mcp25625 (bsc#1051510).
- can: peak_usb: fix potential double kfree_skb() (bsc#1051510).
- can: peak_usb: force the string buffer NULL-terminated (bsc#1051510).
- can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices (bsc#1051510).
- can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices (bsc#1051510).
- can: rcar_canfd: fix possible IRQ storm on high load (bsc#1051510).
- can: sja1000: force the string buffer NULL-terminated (bsc#1051510).
- carl9170: fix misuse of device driver API (bsc#1142635).
- ceph: add btime field to ceph_inode_info (bsc#1148133 bsc#1136682).
- ceph: add ceph.snap.btime vxattr (bsc#1148133 bsc#1148570).
- ceph: add change_attr field to ceph_inode_info (bsc#1148133 bsc#1136682).
- ceph: always get rstat from auth mds (bsc#1146346).
- ceph: carry snapshot creation time with inodes (bsc#1148133 bsc#1148570).
- ceph: clean up ceph.dir.pin vxattr name sizeof() (bsc#1146346).
- ceph: clean up ceph.dir.pin vxattr name sizeof() (bsc#1146346).
- ceph: clear page dirty before invalidate page (bsc#1148133).
- ceph: decode feature bits in session message (bsc#1146346).
- ceph: decode feature bits in session message (bsc#1146346).
- ceph: do not blindly unregister session that is in opening state (bsc#1148133).
- ceph: do not blindly unregister session that is in opening state (bsc#1148133).
- ceph: do not try fill file_lock on unsuccessful GETFILELOCK reply (bsc#1148133).
- ceph: do not try fill file_lock on unsuccessful GETFILELOCK reply (bsc#1148133).
- ceph: fix 'ceph.dir.rctime' vxattr value (bsc#1148133 bsc#1135219).
- ceph: fix 'ceph.dir.rctime' vxattr value (bsc#1148133 bsc#1135219).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in fill_inode() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in fill_inode() (bsc#1148133).
- ceph: fix decode_locker to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- ceph: fix improper use of smp_mb__before_atomic() (bsc#1148133).
- ceph: fix improper use of smp_mb__before_atomic() (bsc#1148133).
- ceph: fix infinite loop in get_quota_realm() (bsc#1148133).
- ceph: fix invalid opcode (bsc#1148133 bsc#1138539).
- ceph: fix iov_iter issues in ceph_direct_read_write() (bsc#1141450).
- ceph: fix listxattr vxattr buffer length calculation (bsc#1148133 bsc#1148570).
- ceph: handle btime in cap messages (bsc#1148133 bsc#1136682).
- ceph: handle change_attr in cap messages (bsc#1148133 bsc#1136682).
- ceph: have MDS map decoding use entity_addr_t decoder (bsc#1148133 bsc#1136682).
- ceph: hold i_ceph_lock when removing caps for freeing inode (bsc#1148133).
- ceph: hold i_ceph_lock when removing caps for freeing inode (bsc#1148133).
- ceph: increment change_attribute on local changes (bsc#1148133 bsc#1136682).
- ceph: initialize superblock s_time_gran to 1 (bsc#1148133).
- ceph: remove request from waiting list before unregister (bsc#1148133).
- ceph: remove request from waiting list before unregister (bsc#1148133).
- ceph: remove unused vxattr length helpers (bsc#1148133 bsc#1148570).
- ceph: silence a checker warning in mdsc_show() (bsc#1148133).
- ceph: silence a checker warning in mdsc_show() (bsc#1148133).
- ceph: support cephfs' own feature bits (bsc#1146346).
- ceph: support getting ceph.dir.pin vxattr (bsc#1146346).
- ceph: support getting ceph.dir.pin vxattr (bsc#1146346).
- ceph: support versioned reply (bsc#1146346).
- ceph: support versioned reply (bsc#1146346).
- ceph: use bit flags to define vxattr attributes (bsc#1146346).
- cifs: Accept validate negotiate if server return NT_STATUS_NOT_SUPPORTED (bsc#1144333).
- cifs: Add DFS cache routines (bsc#1144333).
- cifs: Add direct I/O functions to file_operations (bsc#1144333).
- cifs: Add minor debug message during negprot (bsc#1144333).
- cifs: Add smb2_send_recv (bsc#1144333).
- cifs: Add support for FSCTL passthrough that write data to the server (bsc#1144333).
- cifs: Add support for direct I/O read (bsc#1144333).
- cifs: Add support for direct I/O write (bsc#1144333).
- cifs: Add support for direct pages in rdata (bsc#1144333).
- cifs: Add support for direct pages in wdata (bsc#1144333).
- cifs: Add support for failover in cifs_mount() (bsc#1144333).
- cifs: Add support for failover in cifs_reconnect() (bsc#1144333).
- cifs: Add support for failover in cifs_reconnect_tcon() (bsc#1144333).
- cifs: Add support for failover in smb2_reconnect() (bsc#1144333).
- cifs: Add support for reading attributes on SMB2+ (bsc#1051510, bsc#1144333).
- cifs: Add support for writing attributes on SMB2+ (bsc#1051510, bsc#1144333).
- cifs: Adds information-level logging function (bsc#1144333).
- cifs: Adjust MTU credits before reopening a file (bsc#1144333).
- cifs: Allocate memory for all iovs in smb2_ioctl (bsc#1144333).
- cifs: Allocate validate negotiation request through kmalloc (bsc#1144333).
- cifs: Always reset read error to -EIO if no response (bsc#1144333).
- cifs: Always resolve hostname before reconnecting (bsc#1051510, bsc#1144333).
- cifs: Avoid returning EBUSY to upper layer VFS (bsc#1144333).
- cifs: Calculate the correct request length based on page offset and tail size (bsc#1144333).
- cifs: Call MID callback before destroying transport (bsc#1144333).
- cifs: Change SMB2_open to return an iov for the error parameter (bsc#1144333).
- cifs: Check for reconnects before sending async requests (bsc#1144333).
- cifs: Check for reconnects before sending compound requests (bsc#1144333).
- cifs: Check for timeout on Negotiate stage (bsc#1091171, bsc#1144333).
- cifs: Count SMB3 credits for malformed pending responses (bsc#1144333).
- cifs: Display SMB2 error codes in the hex format (bsc#1144333).
- cifs: Do not assume one credit for async responses (bsc#1144333).
- cifs: Do not consider -ENODATA as stat failure for reads (bsc#1144333).
- cifs: Do not count -ENODATA as failure for query directory (bsc#1051510, bsc#1144333).
- cifs: Do not hide EINTR after sending network packets (bsc#1051510, bsc#1144333).
- cifs: Do not log credits when unmounting a share (bsc#1144333).
- cifs: Do not match port on SMBDirect transport (bsc#1144333).
- cifs: Do not modify mid entry after submitting I/O in cifs_call_async (bsc#1051510, bsc#1144333).
- cifs: Do not reconnect TCP session in add_credits() (bsc#1051510, bsc#1144333).
- cifs: Do not reset lease state to NONE on lease break (bsc#1051510, bsc#1144333).
- cifs: Do not set credits to 1 if the server didn't grant anything (bsc#1144333).
- cifs: Do not skip SMB2 message IDs on send failures (bsc#1144333).
- cifs: Find and reopen a file before get MTU credits in writepages (bsc#1144333).
- cifs: Fix DFS cache refresher for DFS links (bsc#1144333).
- cifs: Fix NULL pointer deref on SMB2_tcon() failure (bsc#1071009, bsc#1144333).
- cifs: Fix NULL pointer dereference of devname (bnc#1129519).
- cifs: Fix NULL ptr deref (bsc#1144333).
- cifs: Fix a debug message (bsc#1144333).
- cifs: Fix a race condition with cifs_echo_request (bsc#1144333).
- cifs: Fix a tiny potential memory leak (bsc#1144333).
- cifs: Fix adjustment of credits for MTU requests (bsc#1051510, bsc#1144333).
- cifs: Fix an issue with re-sending rdata when transport returning -EAGAIN (bsc#1144333).
- cifs: Fix an issue with re-sending wdata when transport returning -EAGAIN (bsc#1144333).
- cifs: Fix autonegotiate security settings mismatch (bsc#1087092, bsc#1144333).
- cifs: Fix check for matching with existing mount (bsc#1144333).
- cifs: Fix credit calculation for encrypted reads with errors (bsc#1051510, bsc#1144333).
- cifs: Fix credit calculations in compound mid callback (bsc#1144333).
- cifs: Fix credit computation for compounded requests (bsc#1144333).
- cifs: Fix credits calculation for cancelled requests (bsc#1144333).
- cifs: Fix credits calculations for reads with errors (bsc#1051510, bsc#1144333).
- cifs: Fix encryption/signing (bsc#1144333).
- cifs: Fix error mapping for SMB2_LOCK command which caused OFD lock problem (bsc#1051510, bsc#1144333).
- cifs: Fix error paths in writeback code (bsc#1144333).
- cifs: Fix infinite loop when using hard mount option (bsc#1091171, bsc#1144333).
- cifs: Fix invalid check in __cifs_calc_signature() (bsc#1144333).
- cifs: Fix kernel oops when traceSMB is enabled (bsc#1144333).
- cifs: Fix leaking locked VFS cache pages in writeback retry (bsc#1144333).
- cifs: Fix lease buffer length error (bsc#1144333).
- cifs: Fix memory leak in smb2_set_ea() (bsc#1051510, bsc#1144333).
- cifs: Fix missing put_xid in cifs_file_strict_mmap (bsc#1087092, bsc#1144333).
- cifs: Fix module dependency (bsc#1144333).
- cifs: Fix mounts if the client is low on credits (bsc#1144333).
- cifs: Fix possible hang during async MTU reads and writes (bsc#1051510, bsc#1144333).
- cifs: Fix possible oops and memory leaks in async IO (bsc#1144333).
- cifs: Fix potential OOB access of lock element array (bsc#1051510, bsc#1144333).
- cifs: Fix read after write for files with read caching (bsc#1051510, bsc#1144333).
- cifs: Fix separator when building path from dentry (bsc#1051510, bsc#1144333).
- cifs: Fix signing for SMB2/3 (bsc#1144333).
- cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (bsc#1144333).
- cifs: Fix slab-out-of-bounds when tracing SMB tcon (bsc#1144333).
- cifs: Fix stack out-of-bounds in smb{2,3}_create_lease_buf() (bsc#1051510, bsc#1144333).
- cifs: Fix to use kmem_cache_free() instead of kfree() (bsc#1144333).
- cifs: Fix trace command logging for SMB2 reads and writes (bsc#1144333).
- cifs: Fix use after free of a mid_q_entry (bsc#1112903, bsc#1144333).
- cifs: Fix use-after-free in SMB2_read (bsc#1144333).
- cifs: Fix use-after-free in SMB2_write (bsc#1144333).
- cifs: Fix validation of signed data in smb2 (bsc#1144333).
- cifs: Fix validation of signed data in smb3+ (bsc#1144333).
- cifs: For SMB2 security informaion query, check for minimum sized security descriptor instead of sizeof FileAllInformation class (bsc#1051510, bsc#1144333).
- cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure cifs) (bsc#1144333).
- cifs: Introduce helper function to get page offset and length in smb_rqst (bsc#1144333).
- cifs: Introduce offset for the 1st page in data transfer structures (bsc#1144333).
- cifs: Limit memory used by lock request calls to a page (bsc#1144333).
- cifs: Make devname param optional in cifs_compose_mount_options() (bsc#1144333).
- cifs: Make sure all data pages are signed correctly (bsc#1144333).
- cifs: Make use of DFS cache to get new DFS referrals (bsc#1144333).
- cifs: Mask off signals when sending SMB packets (bsc#1144333).
- cifs: Minor Kconfig clarification (bsc#1144333).
- cifs: Move credit processing to mid callbacks for SMB3 (bsc#1144333).
- cifs: Move open file handling to writepages (bsc#1144333).
- cifs: Move unlocking pages from wdata_send_pages() (bsc#1144333).
- cifs: OFD locks do not conflict with eachothers (bsc#1051510, bsc#1144333).
- cifs: Only free DFS target list if we actually got one (bsc#1144333).
- cifs: Only send SMB2_NEGOTIATE command on new TCP connections (bsc#1144333).
- cifs: Pass page offset for calculating signature (bsc#1144333).
- cifs: Pass page offset for encrypting (bsc#1144333).
- cifs: Print message when attempting a mount (bsc#1144333).
- cifs: Properly handle auto disabling of serverino option (bsc#1144333).
- cifs: Reconnect expired SMB sessions (bnc#1060662).
- cifs: Refactor out cifs_mount() (bsc#1144333).
- cifs: Remove custom credit adjustments for SMB2 async IO (bsc#1144333).
- cifs: Reopen file before get SMB2 MTU credits for async IO (bsc#1144333).
- cifs: Respect SMB2 hdr preamble size in read responses (bsc#1144333).
- cifs: Respect reconnect in MTU credits calculations (bsc#1144333).
- cifs: Respect reconnect in non-MTU credits calculations (bsc#1144333).
- cifs: Return -EAGAIN instead of -ENOTSOCK (bsc#1144333).
- cifs: Return error code when getting file handle for writeback (bsc#1144333).
- cifs: SMBD: Add SMB Direct debug counters (bsc#1144333).
- cifs: SMBD: Add SMB Direct protocol initial values and constants (bsc#1144333).
- cifs: SMBD: Add parameter rdata to smb2_new_read_req (bsc#1144333).
- cifs: SMBD: Add rdma mount option (bsc#1144333).
- cifs: SMBD: Disable signing on SMB direct transport (bsc#1144333).
- cifs: SMBD: Do not call ib_dereg_mr on invalidated memory registration (bsc#1144333).
- cifs: SMBD: Establish SMB Direct connection (bsc#1144333).
- cifs: SMBD: Fix the definition for SMB2_CHANNEL_RDMA_V1_INVALIDATE (bsc#1144333).
- cifs: SMBD: Implement RDMA memory registration (bsc#1144333).
- cifs: SMBD: Implement function to create a SMB Direct connection (bsc#1144333).
- cifs: SMBD: Implement function to destroy a SMB Direct connection (bsc#1144333).
- cifs: SMBD: Implement function to receive data via RDMA receive (bsc#1144333).
- cifs: SMBD: Implement function to reconnect to a SMB Direct transport (bsc#1144333).
- cifs: SMBD: Implement function to send data via RDMA send (bsc#1144333).
- cifs: SMBD: Read correct returned data length for RDMA write (SMB read) I/O (bsc#1144333).
- cifs: SMBD: Set SMB Direct maximum read or write size for I/O (bsc#1144333).
- cifs: SMBD: Support page offset in RDMA recv (bsc#1144333).
- cifs: SMBD: Support page offset in RDMA send (bsc#1144333).
- cifs: SMBD: Support page offset in memory registration (bsc#1144333).
- cifs: SMBD: Upper layer connects to SMBDirect session (bsc#1144333).
- cifs: SMBD: Upper layer destroys SMB Direct session on shutdown or umount (bsc#1144333).
- cifs: SMBD: Upper layer performs SMB read via RDMA write through memory registration (bsc#1144333).
- cifs: SMBD: Upper layer performs SMB write via RDMA read through memory registration (bsc#1144333).
- cifs: SMBD: Upper layer receives data via RDMA receive (bsc#1144333).
- cifs: SMBD: Upper layer reconnects to SMB Direct session (bsc#1144333).
- cifs: SMBD: Upper layer sends data via RDMA send (bsc#1144333).
- cifs: SMBD: _smbd_get_connection() can be static (bsc#1144333).
- cifs: SMBD: export protocol initial values (bsc#1144333).
- cifs: SMBD: fix spelling mistake: faield and legnth (bsc#1144333).
- cifs: SMBD: work around gcc -Wmaybe-uninitialized warning (bsc#1144333).
- cifs: Save TTL value when parsing DFS referrals (bsc#1144333).
- cifs: Select all required crypto modules (bsc#1085536, bsc#1144333).
- cifs: Set reconnect instance to one initially (bsc#1144333).
- cifs: Show locallease in /proc/mounts for cifs shares mounted with locallease feature (bsc#1144333).
- cifs: Silence uninitialized variable warning (bsc#1144333).
- cifs: Skip any trailing backslashes from UNC (bsc#1144333).
- cifs: Try to acquire credits at once for compound requests (bsc#1144333).
- cifs: Use GFP_ATOMIC when a lock is held in cifs_mount() (bsc#1144333).
- cifs: Use ULL suffix for 64-bit constant (bsc#1051510, bsc#1144333).
- cifs: Use correct packet length in SMB2_TRANSFORM header (bsc#1144333).
- cifs: Use kmemdup in SMB2_ioctl_init() (bsc#1144333).
- cifs: Use kmemdup rather than duplicating its implementation in smb311_posix_mkdir() (bsc#1144333).
- cifs: Use kzfree() to free password (bsc#1144333).
- cifs: Use offset when reading pages (bsc#1144333).
- cifs: Use smb 2 - 3 and cifsacl mount options getacl functions (bsc#1051510, bsc#1144333).
- cifs: Use smb 2 - 3 and cifsacl mount options setacl function (bsc#1051510, bsc#1144333).
- cifs: When sending data on socket, pass the correct page offset (bsc#1144333).
- cifs: a smb2_validate_and_copy_iov failure does not mean the handle is invalid (bsc#1144333).
- cifs: add .splice_write (bsc#1144333).
- cifs: add IOCTL for QUERY_INFO passthrough to userspace (bsc#1144333).
- cifs: add ONCE flag for cifs_dbg type (bsc#1144333).
- cifs: add SFM mapping for 0x01-0x1F (bsc#1144333).
- cifs: add SMB2_close_init()/SMB2_close_free() (bsc#1144333).
- cifs: add SMB2_ioctl_init/free helpers to be used with compounding (bsc#1144333).
- cifs: add SMB2_query_info_[init|free]() (bsc#1144333).
- cifs: add a new SMB2_close_flags function (bsc#1144333).
- cifs: add a smb2_compound_op and change QUERY_INFO to use it (bsc#1144333).
- cifs: add a timeout argument to wait_for_free_credits (bsc#1144333).
- cifs: add a warning if we try to to dequeue a deleted mid (bsc#1144333).
- cifs: add compound_send_recv() (bsc#1144333).
- cifs: add credits from unmatched responses/messages (bsc#1144333).
- cifs: add debug output to show nocase mount option (bsc#1144333).
- cifs: add fiemap support (bsc#1144333).
- cifs: add iface info to struct cifs_ses (bsc#1144333).
- cifs: add lease tracking to the cached root fid (bsc#1144333).
- cifs: add missing GCM module dependency (bsc#1144333).
- cifs: add missing debug entries for kconfig options (bsc#1051510, bsc#1144333).
- cifs: add missing support for ACLs in SMB 3.11 (bsc#1051510, bsc#1144333).
- cifs: add pdu_size to the TCP_Server_Info structure (bsc#1144333).
- cifs: add resp_buf_size to the mid_q_entry structure (bsc#1144333).
- cifs: add server argument to the dump_detail method (bsc#1144333).
- cifs: add server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- cifs: add sha512 secmech (bsc#1051510, bsc#1144333).
- cifs: add spinlock for the openFileList to cifsInodeInfo (bsc#1144333).
- cifs: add support for SEEK_DATA and SEEK_HOLE (bsc#1144333).
- cifs: add support for ioctl on directories (bsc#1144333).
- cifs: address trivial coverity warning (bsc#1144333).
- cifs: allow calling SMB2_xxx_free(NULL) (bsc#1144333).
- cifs: allow disabling less secure legacy dialects (bsc#1144333).
- cifs: allow guest mounts to work for smb3.11 (bsc#1051510, bsc#1144333).
- cifs: always add credits back for unsolicited PDUs (bsc#1144333).
- cifs: auto disable 'serverino' in dfs mounts (bsc#1144333).
- cifs: avoid a kmalloc in smb2_send_recv/SendReceive2 for the common case (bsc#1144333).
- cifs: cache FILE_ALL_INFO for the shared root handle (bsc#1144333).
- cifs: change SMB2_OP_RENAME and SMB2_OP_HARDLINK to use compounding (bsc#1144333).
- cifs: change SMB2_OP_SET_EOF to use compounding (bsc#1144333).
- cifs: change SMB2_OP_SET_INFO to use compounding (bsc#1144333).
- cifs: change mkdir to use a compound (bsc#1144333).
- cifs: change smb2_get_data_area_len to take a smb2_sync_hdr as argument (bsc#1144333).
- cifs: change smb2_query_eas to use the compound query-info helper (bsc#1144333).
- cifs: change unlink to use a compound (bsc#1144333).
- cifs: change validate_buf to validate_iov (bsc#1144333).
- cifs: change wait_for_free_request() to take flags as argument (bsc#1144333).
- cifs: check CIFS_MOUNT_NO_DFS when trying to reuse existing sb (bsc#1144333).
- cifs: check MaxPathNameComponentLength != 0 before using it (bsc#1085536, bsc#1144333).
- cifs: check for STATUS_USER_SESSION_DELETED (bsc#1112902, bsc#1144333).
- cifs: check if SMB2 PDU size has been padded and suppress the warning (bsc#1144333).
- cifs: check kmalloc before use (bsc#1051510, bsc#1144333).
- cifs: check kzalloc return (bsc#1144333).
- cifs: check ntwrk_buf_start for NULL before dereferencing it (bsc#1144333).
- cifs: check rsp for NULL before dereferencing in SMB2_open (bsc#1085536, bsc#1144333).
- cifs: cifs_read_allocate_pages: do not iterate through whole page array on ENOMEM (bsc#1144333).
- cifs: clean up indentation, replace spaces with tab (bsc#1144333).
- cifs: cleanup smb2ops.c and normalize strings (bsc#1144333).
- cifs: complete PDU definitions for interface queries (bsc#1144333).
- cifs: connect to servername instead of IP for IPC$ share (bsc#1051510, bsc#1144333).
- cifs: create SMB2_open_init()/SMB2_open_free() helpers (bsc#1144333).
- cifs: create a define for how many iovs we need for an SMB2_open() (bsc#1144333).
- cifs: create a define for the max number of iov we need for a SMB2 set_info (bsc#1144333).
- cifs: create a helper function for compound query_info (bsc#1144333).
- cifs: create helpers for SMB2_set_info_init/free() (bsc#1144333).
- cifs: do not allow creating sockets except with SMB1 posix exensions (bsc#1102097, bsc#1144333).
- cifs: do not attempt cifs operation on smb2+ rename error (bsc#1144333).
- cifs: do not dereference smb_file_target before null check (bsc#1051510, bsc#1144333).
- cifs: do not log STATUS_NOT_FOUND errors for DFS (bsc#1051510, bsc#1144333).
- cifs: do not return atime less than mtime (bsc#1144333).
- cifs: do not send invalid input buffer on QUERY_INFO requests (bsc#1144333).
- cifs: do not show domain= in mount output when domain is empty (bsc#1144333).
- cifs: do not use __constant_cpu_to_le32() (bsc#1144333).
- cifs: document tcon/ses/server refcount dance (bsc#1144333).
- cifs: dump IPC tcon in debug proc file (bsc#1071306, bsc#1144333).
- cifs: dump every session iface info (bsc#1144333).
- cifs: fallback to older infolevels on findfirst queryinfo retry (bsc#1144333).
- cifs: fix GlobalMid_Lock bug in cifs_reconnect (bsc#1144333).
- cifs: fix NULL deref in SMB2_read (bsc#1085539, bsc#1144333).
- cifs: fix POSIX lock leak and invalid ptr deref (bsc#1114542, bsc#1144333).
- cifs: fix SMB1 breakage (bsc#1144333).
- cifs: fix a buffer leak in smb2_query_symlink (bsc#1144333).
- cifs: fix a credits leak for compund commands (bsc#1144333).
- cifs: fix bi-directional fsctl passthrough calls (bsc#1144333).
- cifs: fix build break when CONFIG_CIFS_DEBUG2 enabled (bsc#1144333).
- cifs: fix build errors for SMB_DIRECT (bsc#1144333).
- cifs: fix circular locking dependency (bsc#1064701, bsc#1144333).
- cifs: fix computation for MAX_SMB2_HDR_SIZE (bsc#1144333).
- cifs: fix confusing warning message on reconnect (bsc#1144333).
- cifs: fix crash in cifs_dfs_do_automount (bsc#1144333).
- cifs: fix crash in smb2_compound_op()/smb2_set_next_command() (bsc#1144333).
- cifs: fix crash querying symlinks stored as reparse-points (bsc#1144333).
- cifs: fix credits leak for SMB1 oplock breaks (bsc#1144333).
- cifs: fix deadlock in cached root handling (bsc#1144333).
- cifs: fix encryption in SMB3.1.1 (bsc#1144333).
- cifs: fix handle leak in smb2_query_symlink() (bsc#1144333).
- cifs: fix incorrect handling of smb2_set_sparse() return in smb3_simple_falloc (bsc#1144333).
- cifs: fix kref underflow in close_shroot() (bsc#1144333).
- cifs: fix memory leak and remove dead code (bsc#1144333).
- cifs: fix memory leak in SMB2_open() (bsc#1112894, bsc#1144333).
- cifs: fix memory leak in SMB2_read (bsc#1144333).
- cifs: fix memory leak of an allocated cifs_ntsd structure (bsc#1144333).
- cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case (bsc#1144333).
- cifs: fix page reference leak with readv/writev (bsc#1144333).
- cifs: fix panic in smb2_reconnect (bsc#1144333).
- cifs: fix parsing of symbolic link error response (bsc#1144333).
- cifs: fix return value for cifs_listxattr (bsc#1051510, bsc#1144333).
- cifs: fix rmmod regression in cifs.ko caused by force_sig changes (bsc#1144333).
- cifs: fix sha512 check in cifs_crypto_secmech_release (bsc#1051510, bsc#1144333).
- cifs: fix signed/unsigned mismatch on aio_read patch (bsc#1144333).
- cifs: fix smb3_zero_range for Azure (bsc#1144333).
- cifs: fix smb3_zero_range so it can expand the file-size when required (bsc#1144333).
- cifs: fix sparse warning on previous patch in a few printks (bsc#1144333).
- cifs: fix spelling mistake, EACCESS -&gt; EACCES (bsc#1144333).
- cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (bsc#1144333).
- cifs: fix typo in cifs_dbg (bsc#1144333).
- cifs: fix typo in debug message with struct field ia_valid (bsc#1144333).
- cifs: fix uninitialized ptr deref in smb2 signing (bsc#1144333).
- cifs: fix use-after-free of the lease keys (bsc#1144333).
- cifs: fix wrapping bugs in num_entries() (bsc#1051510, bsc#1144333).
- cifs: flush before set-info if we have writeable handles (bsc#1144333).
- cifs: handle large EA requests more gracefully in smb2+ (bsc#1144333).
- cifs: handle netapp error codes (bsc#1136261).
- cifs: hide unused functions (bsc#1051510, bsc#1144333).
- cifs: hide unused functions (bsc#1051510, bsc#1144333).
- cifs: implement v3.11 preauth integrity (bsc#1051510, bsc#1144333).
- cifs: integer overflow in in SMB2_ioctl() (bsc#1051510, bsc#1144333).
- cifs: invalidate cache when we truncate a file (bsc#1051510, bsc#1144333).
- cifs: keep FileInfo handle live during oplock break (bsc#1106284, bsc#1131565, bsc#1144333).
- cifs: limit amount of data we request for xattrs to CIFSMaxBufSize (bsc#1144333).
- cifs: make 'nodfs' mount opt a superblock flag (bsc#1051510, bsc#1144333).
- cifs: make IPC a regular tcon (bsc#1071306, bsc#1144333).
- cifs: make arrays static const, reduces object code size (bsc#1144333).
- cifs: make minor clarifications to module params for cifs.ko (bsc#1144333).
- cifs: make mknod() an smb_version_op (bsc#1144333).
- cifs: make rmdir() use compounding (bsc#1144333).
- cifs: make smb_send_rqst take an array of requests (bsc#1144333).
- cifs: minor clarification in comments (bsc#1144333).
- cifs: minor updates to module description for cifs.ko (bsc#1144333).
- cifs: move default port definitions to cifsglob.h (bsc#1144333).
- cifs: move large array from stack to heap (bsc#1144333).
- cifs: only wake the thread for the very last PDU in a compound (bsc#1144333).
- cifs: parse and store info on iface queries (bsc#1144333).
- cifs: pass flags down into wait_for_free_credits() (bsc#1144333).
- cifs: pass page offsets on SMB1 read/write (bsc#1144333).
- cifs: prevent integer overflow in nxt_dir_entry() (bsc#1051510, bsc#1144333).
- cifs: prevent starvation in wait_for_free_credits for multi-credit requests (bsc#1144333).
- cifs: print CIFSMaxBufSize as part of /proc/fs/cifs/DebugData (bsc#1144333).
- cifs: protect against server returning invalid file system block size (bsc#1144333).
- cifs: prototype declaration and definition for smb 2 - 3 and cifsacl mount options (bsc#1051510, bsc#1144333).
- cifs: prototype declaration and definition to set acl for smb 2 - 3 and cifsacl mount options (bsc#1051510, bsc#1144333).
- cifs: push rfc1002 generation down the stack (bsc#1144333).
- cifs: read overflow in is_valid_oplock_break() (bsc#1144333).
- cifs: refactor and clean up arguments in the reparse point parsing (bsc#1144333).
- cifs: refactor crypto shash/sdesc allocation&amp;free (bsc#1051510, bsc#1144333).
- cifs: release auth_key.response for reconnect (bsc#1085536, bsc#1144333).
- cifs: release cifs root_cred after exit_cifs (bsc#1085536, bsc#1144333).
- cifs: remove coverity warning in calc_lanman_hash (bsc#1144333).
- cifs: remove header_preamble_size where it is always 0 (bsc#1144333).
- cifs: remove redundant duplicated assignment of pointer 'node' (bsc#1144333).
- cifs: remove rfc1002 hardcoded constants from cifs_discard_remaining_data() (bsc#1144333).
- cifs: remove rfc1002 header from all SMB2 response structures (bsc#1144333).
- cifs: remove rfc1002 header from smb2 read/write requests (bsc#1144333).
- cifs: remove rfc1002 header from smb2_close_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_create_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_echo_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_flush_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_ioctl_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_lease_ack (bsc#1144333).
- cifs: remove rfc1002 header from smb2_lock_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_logoff_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_negotiate_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_oplock_break we get from server (bsc#1144333).
- cifs: remove rfc1002 header from smb2_query_directory_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_query_info_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_sess_setup_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_set_info_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_tree_connect_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_tree_disconnect_req (bsc#1144333).
- cifs: remove set but not used variable 'cifs_sb' (bsc#1144333).
- cifs: remove set but not used variable 'sep' (bsc#1144333).
- cifs: remove set but not used variable 'server' (bsc#1144333).
- cifs: remove set but not used variable 'smb_buf' (bsc#1144333).
- cifs: remove small_smb2_init (bsc#1144333).
- cifs: remove smb2_send_recv() (bsc#1144333).
- cifs: remove struct smb2_hdr (bsc#1144333).
- cifs: remove struct smb2_oplock_break_rsp (bsc#1144333).
- cifs: remove the is_falloc argument to SMB2_set_eof (bsc#1144333).
- cifs: remove unused stats (bsc#1144333).
- cifs: remove unused value pointed out by Coverity (bsc#1144333).
- cifs: remove unused variable from SMB2_read (bsc#1144333).
- cifs: rename and clarify CIFS_ASYNC_OP and CIFS_NO_RESP (bsc#1144333).
- cifs: replace a 4 with server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- cifs: replace snprintf with scnprintf (bsc#1144333).
- cifs: return -ENODATA when deleting an xattr that does not exist (bsc#1144333).
- cifs: return correct errors when pinning memory failed for direct I/O (bsc#1144333).
- cifs: return error on invalid value written to cifsFYI (bsc#1144333).
- cifs: set *resp_buf_type to NO_BUFFER on error (bsc#1144333).
- cifs: set mapping error when page writeback fails in writepage or launder_pages (bsc#1144333).
- cifs: set oparms.create_options rather than or'ing in CREATE_OPEN_BACKUP_INTENT (bsc#1144333).
- cifs: show 'soft' in the mount options for hard mounts (bsc#1144333).
- cifs: show the w bit for writeable /proc/fs/cifs/* files (bsc#1144333).
- cifs: silence compiler warnings showing up with gcc-8.0.0 (bsc#1090734, bsc#1144333).
- cifs: simple stats should always be enabled (bsc#1144333).
- cifs: simplify code by removing CONFIG_CIFS_ACL ifdef  (bsc#1144333). - Update config files.
- cifs: simplify how we handle credits in compound_send_recv() (bsc#1144333).
- cifs: smb2 commands can not be negative, remove confusing check (bsc#1144333).
- cifs: smb2ops: Fix NULL check in smb2_query_symlink (bsc#1144333).
- cifs: smb2ops: Fix listxattr() when there are no EAs (bsc#1051510, bsc#1144333).
- cifs: smb2pdu: Fix potential NULL pointer dereference (bsc#1144333).
- cifs: smbd: Avoid allocating iov on the stack (bsc#1144333).
- cifs: smbd: Check for iov length on sending the last iov (bsc#1144333).
- cifs: smbd: Do not destroy transport on RDMA disconnect (bsc#1144333).
- cifs: smbd: Do not use RDMA read/write when signing is used (bsc#1144333).
- cifs: smbd: Dump SMB packet when configured (bsc#1144333).
- cifs: smbd: Enable signing with smbdirect (bsc#1144333).
- cifs: smbd: Indicate to retry on transport sending failure (bsc#1144333).
- cifs: smbd: Retry on memory registration failure (bsc#1144333).
- cifs: smbd: Return EINTR when interrupted (bsc#1144333).
- cifs: smbd: avoid reconnect lockup (bsc#1144333).
- cifs: smbd: depend on INFINIBAND_ADDR_TRANS (bsc#1144333).
- cifs: smbd: disconnect transport on RDMA errors (bsc#1144333).
- cifs: smbd: take an array of reqeusts when sending upper layer data (bsc#1144333).
- cifs: start DFS cache refresher in cifs_mount() (bsc#1144333).
- cifs: store the leaseKey in the fid on SMB2_open (bsc#1051510, bsc#1144333).
- cifs: suppress some implicit-fallthrough warnings (bsc#1144333).
- cifs: track writepages in vfs operation counters (bsc#1144333).
- cifs: update __smb_send_rqst() to take an array of requests (bsc#1144333).
- cifs: update calc_size to take a server argument (bsc#1144333).
- cifs: update init_sg, crypt_message to take an array of rqst (bsc#1144333).
- cifs: update internal module number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.12 (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.12 (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.14 (bsc#1144333).
- cifs: update module internal version number (bsc#1144333).
- cifs: update multiplex loop to handle compounded responses (bsc#1144333).
- cifs: update receive_encrypted_standard to handle compounded responses (bsc#1144333).
- cifs: update smb2_calc_size to use smb2_sync_hdr instead of smb2_hdr (bsc#1144333).
- cifs: update smb2_check_message to handle PDUs without a 4 byte length header (bsc#1144333).
- cifs: update smb2_queryfs() to use compounding (bsc#1144333).
- cifs: use a compound for setting an xattr (bsc#1144333).
- cifs: use a refcount to protect open/closing the cached file handle (bsc#1144333).
- cifs: use correct format characters (bsc#1144333).
- cifs: use tcon_ipc instead of use_ipc parameter of SMB2_ioctl (bsc#1071306, bsc#1144333).
- cifs: use the correct length when pinning memory for direct I/O for write (bsc#1144333).
- cifs: wait_for_free_credits() make it possible to wait for &gt;=1 credits (bsc#1144333).
- cifs: we can not use small padding iovs together with encryption (bsc#1144333).
- cifs: zero sensitive data when freeing (bsc#1087092, bsc#1144333).
- cifs: zero-range does not require the file is sparse (bsc#1144333).
- cifs:smbd Use the correct DMA direction when sending data (bsc#1144333).
- cifs:smbd When reconnecting to server, call smbd_destroy() after all MIDs have been called (bsc#1144333).
- cifs_lookup(): cifs_get_inode_...() never returns 0 with *inode left NULL (bsc#1144333).
- cifs_lookup(): switch to d_splice_alias() (bsc#1144333).
- clk: Export clk_bulk_prepare() (bsc#1144813).
- clk: add clk_bulk_get accessories (bsc#1144813).
- clk: bcm2835: remove pllb (jsc#SLE-7294).
- clk: bcm283x: add driver interfacing with Raspberry Pi's firmware (jsc#SLE-7294).
- clk: bulk: silently error out on EPROBE_DEFER (bsc#1144718,bsc#1144813).
- clk: raspberrypi: register platform device for raspberrypi-cpufreq (jsc#SLE-7294).
- clk: renesas: cpg-mssr: Fix reset control race condition (bsc#1051510).
- clk: rockchip: Add 1.6GHz PLL rate for rk3399 (bsc#1144718,bsc#1144813).
- clk: rockchip: assign correct id for pclk_ddr and hclk_sd in rk3399 (bsc#1144718,bsc#1144813).
- compat_ioctl: pppoe: fix PPPOEIOCSFWD handling (bsc#1051510).
- config: arm64: Remove CONFIG_ARM64_MODULE_CMODEL_LARGE Option removed by patches in bsc#1148219
- coredump: split pipe command whitespace before expanding template (bsc#1051510).
- cpu/speculation: Warn on unsupported mitigations= parameter (bsc#1114279).
- cpufreq: add driver for Raspberry Pi (jsc#SLE-7294).
- cpufreq: dt: Try freeing static OPPs only if we have added them (jsc#SLE-7294).
- crypto: ccp - Add support for valid authsize values less than 16 (bsc#1051510).
- crypto: ccp - Fix oops by properly managing allocated structures (bsc#1051510).
- crypto: ccp - Ignore tag length when decrypting GCM ciphertext (bsc#1051510).
- crypto: ccp - Ignore unconfigured CCP device on suspend/resume (bnc#1145934).
- crypto: ccp - Validate buffer lengths for copy operations (bsc#1051510).
- crypto: talitos - fix skcipher failure due to wrong output IV (bsc#1051510).
- crypto: virtio - Read crypto services and algorithm masks (jsc#SLE-5844 jsc#SLE-6331 bsc#1145446 LTC#175307).
- crypto: virtio - Register an algo only if it's supported (jsc#SLE-5844 jsc#SLE-6331 bsc#1145446 LTC#175307).
- cx82310_eth: fix a memory leak bug (bsc#1051510).
- dax: dax_layout_busy_page() should not unmap cow pages (bsc#1148698).
- devres: always use dev_name() in devm_ioremap_resource() (git fixes).
- dfs_cache: fix a wrong use of kfree in flush_cache_ent() (bsc#1144333).
- dm btree: fix order of block initialization in btree_split_beneath (git fixes).
- dm bufio: fix deadlock with loop device (git fixes).
- dm cache metadata: Fix loading discard bitset (git fixes).
- dm crypt: do not overallocate the integrity tag space (git fixes).
- dm crypt: fix parsing of extended IV arguments (git fixes).
- dm delay: fix a crash when invalid device is specified (git fixes).
- dm integrity: change memcmp to strncmp in dm_integrity_ctr (git fixes).
- dm integrity: correctly calculate the size of metadata area (git fixes).
- dm integrity: fix a crash due to BUG_ON in __journal_read_write() (git fixes).
- dm integrity: fix deadlock with overlapping I/O (git fixes).
- dm integrity: limit the rate of error messages (git fixes).
- dm kcopyd: always complete failed jobs (git fixes).
- dm raid: add missing cleanup in raid_ctr() (git fixes).
- dm space map metadata: fix missing store of apply_bops() return value (git fixes).
- dm table: fix invalid memory accesses with too high sector number (git fixes).
- dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (git fixes).
- dm thin: fix bug where bio that overwrites thin block ignores FUA (git fixes).
- dm thin: fix passdown_double_checking_shared_status() (git fixes).
- dm zoned: Fix zone report handling (git fixes).
- dm zoned: Silence a static checker warning (git fixes).
- dm zoned: fix potential NULL dereference in dmz_do_reclaim() (git fixes).
- dm zoned: fix zone state management race (git fixes).
- dm zoned: improve error handling in i/o map code (git fixes).
- dm zoned: improve error handling in reclaim (git fixes).
- dm zoned: properly handle backing device failure (git fixes).
- dm: fix to_sector() for 32bit (git fixes).
- dm: revert 8f50e358153d ('dm: limit the max bio size as BIO_MAX_PAGES * PAGE_SIZE') (git fixes).
- dma-buf: balance refcount inbalance (bsc#1051510).
- dmaengine: rcar-dmac: Reject zero-length slave DMA requests (bsc#1051510).
- documentation/networking: fix default_ttl typo in mpls-sysctl (bsc#1051510).
- documentation: Add nospectre_v1 parameter (bsc#1051510).
- documentation: Update Documentation for iommu.passthrough (bsc#1136039).
- driver core: Fix use-after-free and double free on glue directory (bsc#1131281).
- drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl (bsc#1051510).
- drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings (bsc#1051510).
- drm/amd/display: Always allocate initial connector state state (bsc#1111666).
- drm/amd/display: Disable ABM before destroy ABM struct (bsc#1111666).
- drm/amd/display: Fill prescale_params-&gt;scale for RGB565 (bsc#1111666).
- drm/amd/display: Fix dc_create failure handling and 666 color depths (bsc#1111666).
- drm/amd/display: Increase size of audios array (bsc#1111666).
- drm/amd/display: Only enable audio if speaker allocation exists (bsc#1111666).
- drm/amd/display: Remove redundant non-zero and overflow check (bsc#1145946).
- drm/amd/display: Wait for backlight programming completion in set backlight level (bsc#1111666).
- drm/amd/display: fix compilation error (bsc#1111666).
- drm/amd/display: num of sw i2c/aux engines less than num of connectors (bsc#1145946).
- drm/amd/display: use encoder's engine id to find matched free audio device (bsc#1111666).
- drm/amdgpu/psp: move psp version specific function pointers to (bsc#1135642)
- drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE (bsc#1111666).
- drm/amdgpu: Add APTX quirk for Dell Latitude 5495 (bsc#1142635)
- drm/amdgpu: added support 2nd UVD instance (bsc#1143331).
- drm/amdgpu: fix a potential information leaking bug (bsc#1111666).
- drm/amdgpu:change VEGA booting with firmware loaded by PSP (bsc#1143331).
- drm/amdkfd: Fix a potential memory leak (bsc#1111666).
- drm/amdkfd: Fix sdma queue map issue (bsc#1111666).
- drm/bridge: lvds-encoder: Fix build error while CONFIG_DRM_KMS_HELPER=m (bsc#1111666).
- drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz (bsc#1051510).
- drm/bridge: tc358767: read display_props in get_modes() (bsc#1051510).
- drm/crc-debugfs: Also sprinkle irqrestore over early exits (bsc#1051510).
- drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry (bsc#1051510).
- drm/edid: parse CEA blocks embedded in DisplayID (bsc#1111666).
- drm/etnaviv: add missing failure path to destroy suballoc (bsc#1135642)
- drm/exynos: fix missing decrement of retry counter (bsc#1111666).
- drm/i915/gvt: fix incorrect cache entry for guest page mapping (bsc#1111666).
- drm/i915/perf: ensure we keep a reference on the driver (bsc#1051510).
- drm/i915/perf: ensure we keep a reference on the driver (bsc#1142635)
- drm/i915/perf: fix ICL perf register offsets (bsc#1111666).
- drm/i915/userptr: Acquire the page lock around set_page_dirty() (bsc#1051510).
- drm/i915: Do not deballoon unused ggtt drm_mm_node in linux guest (bsc#1142635)
- drm/i915: Fix GEN8_MCR_SELECTOR programming (bsc#1111666).
- drm/i915: Fix HW readout for crtc_clock in HDMI mode (bsc#1111666).
- drm/i915: Fix the TBT AUX power well enabling (bsc#1111666).
- drm/i915: Fix wrong escape clock divisor init for GLK (bsc#1051510).
- drm/i915: Fix wrong escape clock divisor init for GLK (bsc#1142635)
- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- drm/i915: Revert i915 userptr page lock patch (bsc#1145051)
- drm/imx: notify drm core before sending event during crtc disable (bsc#1135642)
- drm/imx: only send event on crtc disable if kept disabled (bsc#1135642)
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver (bsc#1135642)
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable() (bsc#1135642)
- drm/mediatek: clear num_pipes when unbind driver (bsc#1135642)
- drm/mediatek: fix unbind functions (bsc#1135642)
- drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto (bsc#1111666).
- drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto (bsc#1142635)
- drm/mediatek: unbind components in mtk_drm_unbind() (bsc#1135642)
- drm/mediatek: use correct device to import PRIME buffers (bsc#1111666).
- drm/mediatek: use correct device to import PRIME buffers (bsc#1142635)
- drm/msm/mdp5: Fix mdp5_cfg_init error return (bsc#1142635)
- drm/msm: Depopulate platform on probe failure (bsc#1051510).
- drm/nouveau: Do not retry infinitely when receiving no data on i2c (bsc#1142635)
- drm/nouveau: fix memory leak in nouveau_conn_reset() (bsc#1051510).
- drm/panel: simple: Fix panel_simple_dsi_probe (bsc#1051510).
- drm/rockchip: Suspend DP late (bsc#1051510).
- drm/rockchip: Suspend DP late (bsc#1142635)
- drm/udl: introduce a macro to convert dev to udl. (bsc#1113722)
- drm/udl: move to embedding drm device inside udl device. (bsc#1113722)
- drm/virtio: Add memory barriers for capset cache (bsc#1051510).
- drm/vmwgfx: Use the backdoor port if the HB port is not available (bsc#1135642)
- drm/vmwgfx: fix a warning due to missing dma_parms (bsc#1135642)
- drm/vmwgfx: fix memory leak when too many retries have occurred (bsc#1051510).
- drm: msm: Fix add_gpu_components (bsc#1051510).
- drm: silence variable 'conn' set but not used (bsc#1051510).
- eCryptfs: fix a couple type promotion bugs (bsc#1051510).
- edac, amd64: Add Family 17h, models 10h-2fh support (bsc#1112178).
- edac/amd64: Add Family 17h Model 30h PCI IDs (bsc#1112178).
- edac/amd64: Adjust printed chip select sizes when interleaved (bsc#1131489).
- edac/amd64: Cache secondary Chip Select registers (bsc#1131489).
- edac/amd64: Decode syndrome before translating address (bsc#1131489).
- edac/amd64: Find Chip Select memory size using Address Mask (bsc#1131489).
- edac/amd64: Initialize DIMM info for systems with more than two channels (bsc#1131489).
- edac/amd64: Recognize DRAM device type ECC capability (bsc#1131489).
- edac/amd64: Recognize x16 symbol size (bsc#1131489).
- edac/amd64: Set maximum channel layer size depending on family (bsc#1131489).
- edac/amd64: Support asymmetric dual-rank DIMMs (bsc#1131489).
- edac/amd64: Support more than two Unified Memory Controllers (bsc#1131489).
- edac/amd64: Support more than two controllers for chip selects handling (bsc#1131489).
- edac/amd64: Use a macro for iterating over Unified Memory Controllers (bsc#1131489).
- edac: Fix global-out-of-bounds write when setting edac_mc_poll_msec (bsc#1114279).
- efi/bgrt: Drop BGRT status field reserved bits check (bsc#1051510).
- ehea: Fix a copy-paste err in ehea_init_port_res (bsc#1051510).
- ext4: use jbd2_inode dirty range scoping (bsc#1148616).
- firmware: raspberrypi: register clk device (jsc#SLE-7294).
- firmware: ti_sci: Always request response from firmware (bsc#1051510).
- fix incorrect error code mapping for OBJECTID_NOT_FOUND (bsc#1144333).
- fix smb3-encryption breakage when CONFIG_DEBUG_SG=y (bsc#1051510, bsc#1144333).
- fix struct ufs_req removal of unused field (git-fixes).
- floppy: fix invalid pointer dereference in drive_name (bsc#1111666).
- floppy: fix out-of-bounds read in next_valid_format (bsc#1111666).
- fs/*/Kconfig: drop links to 404-compliant http://acl.bestbits.at (bsc#1144333).
- fs/cifs/cifsacl.c Fixes typo in a comment (bsc#1144333).
- fs/cifs/smb2pdu.c: fix buffer free in SMB2_ioctl_free (bsc#1144333).
- fs/cifs: Simplify ib_post_(send|recv|srq_recv)() calls (bsc#1144333).
- fs/cifs: do not translate SFM_SLASH (U+F026) to backslash (bsc#1144333).
- fs/cifs: fix uninitialised variable warnings (bsc#1144333).
- fs/cifs: require sha512 (bsc#1051510, bsc#1144333).
- fs/cifs: suppress a string overflow warning (bsc#1144333).
- fs/xfs: Fix return code of xfs_break_leased_layouts() (bsc#1148031).
- fs: cifs: Drop unlikely before IS_ERR(_OR_NULL) (bsc#1144333).
- fs: cifs: Kconfig: pedantic formatting (bsc#1144333).
- fs: cifs: Replace _free_xid call in cifs_root_iget function (bsc#1144333).
- fs: cifs: cifsssmb: Change return type of convert_ace_to_cifs_ace (bsc#1144333).
- fs: xfs: xfs_log: Do not use KM_MAYFAIL at xfs_log_reserve() (bsc#1148033).
- fsl/fman: Use GFP_ATOMIC in {memac,tgec}_add_hash_mac_address() (bsc#1051510).
- ftrace: Check for empty hash and comment the race with registering probes (bsc#1149418).
- ftrace: Check for successful allocation of hash (bsc#1149424).
- ftrace: Fix NULL pointer dereference in t_probe_next() (bsc#1149413).
- gpio: Fix build error of function redefinition (bsc#1051510).
- gpio: gpio-omap: add check for off wake capable gpios (bsc#1051510).
- gpio: mxs: Get rid of external API call (bsc#1051510).
- gpio: omap: ensure irq is enabled before wakeup (bsc#1051510).
- gpio: pxa: handle corner case of unprobed device (bsc#1051510).
- gpiolib: fix incorrect IRQ requesting of an active-low lineevent (bsc#1051510).
- gpiolib: never report open-drain/source lines as 'input' to user-space (bsc#1051510).
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM (bsc#1142635)
- hid: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT (bsc#1051510).
- hid: Add quirk for HP X1200 PIXART OEM mouse (bsc#1051510).
- hid: cp2112: prevent sleeping function called from invalid context (bsc#1051510).
- hid: hiddev: avoid opening a disconnected device (bsc#1051510).
- hid: hiddev: do cleanup in failure of opening a device (bsc#1051510).
- hid: holtek: test for sanity of intfdata (bsc#1051510).
- hid: sony: Fix race condition between rumble and device remove (bsc#1051510).
- hid: wacom: Correct distance scale for 2nd-gen Intuos devices (bsc#1142635).
- hid: wacom: correct misreported EKR ring values (bsc#1142635).
- hid: wacom: fix bit shift for Cintiq Companion 2 (bsc#1051510).
- hpet: Fix division by zero in hpet_time_div() (bsc#1051510).
- hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 (bsc#1051510).
- hwmon: (nct7802) Fix wrong detection of in4 presence (bsc#1051510).
- i2c: emev2: avoid race when unregistering slave client (bsc#1051510).
- i2c: piix4: Fix port selection for AMD Family 16h Model 30h (bsc#1051510).
- i2c: qup: fixed releasing dma without flush operation completion (bsc#1051510).
- ia64: Get rid of iommu_pass_through (bsc#1136039).
- ib/mlx5: Fix MR registration flow to use UMR properly (bsc#1093205 bsc#1145678).
- ibmveth: Convert multicast list size for little-endian system (bsc#1061843).
- ibmvnic: Do not process reset during or after device removal (bsc#1149652 ltc#179635).
- ibmvnic: Unmap DMA address of TX descriptor buffers after use (bsc#1146351 ltc#180726).
- igmp: fix memory leak in igmpv3_del_delrec() (networking-stable-19_07_25).
- iio: adc: max9611: Fix misuse of GENMASK macro (bsc#1051510).
- iio: adc: max9611: Fix temperature reading in probe (bsc#1051510).
- iio: iio-utils: Fix possible incorrect mask calculation (bsc#1051510).
- improve security, move default dialect to SMB3 from old CIFS (bsc#1051510, bsc#1144333).
- include/linux/bitops.h: sanitize rotate primitives (git fixes).
- input: alps - do not handle ALPS cs19 trackpoint-only device (bsc#1051510).
- input: alps - fix a mismatch between a condition check and its comment (bsc#1051510).
- input: iforce - add sanity checks (bsc#1051510).
- input: kbtab - sanity check for endpoint type (bsc#1051510).
- input: synaptics - enable RMI mode for HP Spectre X360 (bsc#1051510).
- input: synaptics - whitelist Lenovo T580 SMBus intertouch (bsc#1051510).
- input: trackpoint - only expose supported controls for Elan, ALPS and NXP (bsc#1051510).
- intel_th: pci: Add Ice Lake NNPI support (bsc#1051510).
- intel_th: pci: Add Tiger Lake support (bsc#1051510).
- intel_th: pci: Add support for another Lewisburg PCH (bsc#1051510).
- iommu/amd: Add support for X2APIC IOMMU interrupts (bsc#1145010).
- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- iommu/amd: Move iommu_init_pci() to .init section (bsc#1149105).
- iommu/amd: Request passthrough mode from IOMMU core (bsc#1136039).
- iommu/dma: Handle SG length overflow better (bsc#1146084).
- iommu/iova: Remove stale cached32_node (bsc#1145018).
- iommu/vt-d: Request passthrough mode from IOMMU core (bsc#1136039).
- iommu: Add helpers to set/get default domain type (bsc#1136039).
- iommu: Disable passthrough mode when SME is active (bsc#1136039).
- iommu: Print default domain type on boot (bsc#1136039).
- iommu: Remember when default domain type was set on kernel command line (bsc#1136039).
- iommu: Set default domain type at runtime (bsc#1136039).
- iommu: Use Functions to set default domain type in iommu_set_def_domain_type() (bsc#1136039).
- ipip: validate header length in ipip_tunnel_xmit (git-fixes).
- ipv4: do not set IPv6 only flags to IPv4 addresses (networking-stable-19_07_25).
- irqchip/gic-v2m: Add support for Amazon Graviton variant of GICv3+GICv2m (SLE-9332).
- irqchip/gic-v3-its: fix build warnings (bsc#1144880).
- isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack (bsc#1051510).
- isdn: hfcsusb: checking idx of ep configuration (bsc#1051510).
- isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain() (bsc#1051510).
- iversion: add a routine to update a raw value with a larger one (bsc#1148133).
- iwlwifi: dbg: split iwl_fw_error_dump to two functions (bsc#1119086).
- iwlwifi: do not unmap as page memory that was mapped as single (bsc#1051510).
- iwlwifi: fix bad dma handling in page_mem dumping flow (bsc#1120902).
- iwlwifi: fw: use helper to determine whether to dump paging (bsc#1106434). Patch needed to be adjusted, because our tree does not have the global variable IWL_FW_ERROR_DUMP_PAGING
- iwlwifi: mvm: do not send GEO_TX_POWER_LIMIT on version &amp;lt; 41 (bsc#1142635).
- iwlwifi: mvm: fix an out-of-bound access (bsc#1051510).
- iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support (bsc#1142635).
- iwlwifi: pcie: do not service an interrupt that was masked (bsc#1142635).
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X (bsc#1142635).
- ixgbe: fix possible deadlock in ixgbe_service_task() (bsc#1113994).
- jbd2: flush_descriptor(): Do not decrease buffer head's ref count (bsc#1143843).
- jbd2: introduce jbd2_inode dirty range scoping (bsc#1148616).
- kABI: Fix kABI for 'struct amd_iommu' (bsc#1145010).
- kABI: Fix kABI for x86 pci-dma code (bsc#1136039).
- kabi/severities: Exclude drivers/crypto/ccp/*
- kabi/severities: match SLE15 entry ordering.
- kasan: remove redundant initialization of variable 'real_size' (git fixes).
- kconfig/[mn]conf: handle backspace (^H) key (bsc#1051510).
- keys: Fix missing null pointer check in request_key_auth_describe() (bsc#1051510).
- kvm/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel (bsc#1133021).
- kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (bsc#1134881 bsc#1134882).
- kvm: Disallow wraparound in kvm_gfn_to_hva_cache_init (bsc#1133021).
- kvm: Fix leak vCPU's VMCS value into other pCPU (bsc#1145388).
- kvm: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC (bsc#1145408).
- kvm: PPC: Book3S HV: Fix CR0 setting in TM emulation (bsc#1061840).
- kvm: Reject device ioctls from processes other than the VM's creator (bsc#1133021).
- kvm: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value (bsc#1145393).
- kvm: VMX: Fix handling of #MC that occurs during VM-Entry (bsc#1145395).
- kvm: VMX: check CPUID before allowing read/write of IA32_XSS (bsc#1145394).
- kvm: X86: Reduce the overhead when lapic_timer_advance is disabled (bsc#1149083).
- kvm: arm/arm64: Close VMID generation race (bsc#1133021).
- kvm: arm/arm64: Convert kvm_host_cpu_state to a static per-cpu allocation (bsc#1133021).
- kvm: arm/arm64: Drop resource size check for GICV window (bsc#1133021).
- kvm: arm/arm64: Fix VMID alloc race by reverting to lock-less (bsc#1133021).
- kvm: arm/arm64: Fix lost IRQs from emulated physcial timer when blocked (bsc#1133021).
- kvm: arm/arm64: Handle CPU_PM_ENTER_FAILED (bsc#1133021).
- kvm: arm/arm64: Reduce verbosity of KVM init log (bsc#1133021).
- kvm: arm/arm64: Set dist-&gt;spis to NULL after kfree (bsc#1133021).
- kvm: arm/arm64: Skip updating PMD entry if no change (bsc#1133021).
- kvm: arm/arm64: Skip updating PTE entry if no change (bsc#1133021).
- kvm: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list (bsc#1133021).
- kvm: arm/arm64: vgic-v3: Tighten synchronization for guests using v2 on v3 (bsc#1133021).
- kvm: arm/arm64: vgic: Add missing irq_lock to vgic_mmio_read_pending (bsc#1133021).
- kvm: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy (bsc#1133021).
- kvm: arm64: Fix caching of host MDCR_EL2 value (bsc#1133021).
- kvm: mmu: Fix overlap between public and private memslots (bsc#1133021).
- kvm: nVMX: Remove unnecessary sync_roots from handle_invept (bsc#1145391).
- kvm: nVMX: Use adjusted pin controls for vmcs02 (bsc#1145392).
- kvm: nVMX: allow setting the VMFUNC controls MSR (bsc#1145389).
- kvm: nVMX: do not use dangling shadow VMCS after guest reset (bsc#1145390).
- kvm: s390: add MSA9 to cpumodel (jsc#SLE-6240).
- kvm: s390: add debug logging for cpu model subfunctions (jsc#SLE-6240).
- kvm: s390: add deflate conversion facilty to cpu model (jsc#SLE-6240).
- kvm: s390: add enhanced sort facilty to cpu model (jsc#SLE-6240 ).
- kvm: s390: add vector BCD enhancements facility to cpumodel (jsc#SLE-6240).
- kvm: s390: add vector enhancements facility 2 to cpumodel (jsc#SLE-6240).
- kvm: s390: enable MSA9 keywrapping functions depending on cpu model (jsc#SLE-6240).
- kvm: s390: implement subfunction processor calls (jsc#SLE-6240 ).
- kvm: s390: provide query function for instructions returning 32 byte (jsc#SLE-6240).
- kvm: x86/vPMU: refine kvm_pmu err msg when event creation failed (bsc#1145397).
- kvm: x86: Do not update RIP or do single-step on faulting emulation (bsc#1149104).
- kvm: x86: Unconditionally enable irqs in guest context (bsc#1145396).
- kvm: x86: degrade WARN to pr_warn_ratelimited (bsc#1145409).
- kvm: x86: fix backward migration with async_PF (bsc#1146074).
- lan78xx: Fix memory leaks (bsc#1051510).
- libata: add SG safety checks in SFF pio transfers (bsc#1051510).
- libata: do not request sense data on !ZAC ATA devices (bsc#1051510).
- libata: have ata_scsi_rw_xlat() fail invalid passthrough requests (bsc#1051510).
- libata: zpodd: Fix small read overflow in zpodd_get_mech_type() (bsc#1051510).
- libceph, rbd, ceph: move ceph_osdc_alloc_messages() calls (bsc#1135897).
- libceph, rbd: add error handling for osd_req_op_cls_init() (bsc#1135897).
- libceph, rbd: new bio handling code (aka do not clone bios) (bsc#1141450).
- libceph: ADDR2 support for monmap (bsc#1148133 bsc#1136682).
- libceph: add ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: add osd_req_op_extent_osd_data_bvecs() (bsc#1141450).
- libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer (bsc#1148133).
- libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer (bsc#1148133).
- libceph: assign cookies in linger_submit() (bsc#1135897).
- libceph: check reply num_data_items in setup_request_data() (bsc#1135897).
- libceph: correctly decode ADDR2 addresses in incremental OSD maps (bsc#1148133 bsc#1136682).
- libceph: do not consume a ref on pagelist in ceph_msg_data_add_pagelist() (bsc#1135897).
- libceph: enable fallback to ceph_msg_new() in ceph_msgpool_get() (bsc#1135897).
- libceph: fix PG split vs OSD (re)connect race (bsc#1148133).
- libceph: fix PG split vs OSD (re)connect race (bsc#1148133).
- libceph: fix sa_family just after reading address (bsc#1148133 bsc#1136682).
- libceph: fix unaligned accesses in ceph_entity_addr handling (bsc#1136682).
- libceph: fix watch_item_t decoding to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: handle zero-length data items (bsc#1141450).
- libceph: introduce BVECS data type (bsc#1141450).
- libceph: introduce alloc_watch_request() (bsc#1135897).
- libceph: introduce ceph_pagelist_alloc() (bsc#1135897).
- libceph: make ceph_pr_addr take an struct ceph_entity_addr pointer (bsc#1136682).
- libceph: preallocate message data items (bsc#1135897).
- libceph: rename ceph_encode_addr to ceph_encode_banner_addr (bsc#1148133 bsc#1136682).
- libceph: switch osdmap decoding to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: turn on CEPH_FEATURE_MSG_ADDR2 (bsc#1148133 bsc#1136682).
- libceph: use TYPE_LEGACY for entity addrs instead of TYPE_NONE (bsc#1148133 bsc#1136682).
- libceph: use single request data item for cmp/setxattr (bsc#1139101).
- libnvdimm/pfn: Store correct value of npfns in namespace superblock (bsc#1146381 ltc#180720).
- liquidio: add cleanup in octeon_setup_iq() (bsc#1051510).
- loop: set PF_MEMALLOC_NOIO for the worker thread (git fixes).
- lpfc: fix 12.4.0.0 GPF at boot (bsc#1148308).
- mac80211: Correctly set noencrypt for PAE frames (bsc#1111666).
- mac80211: Do not memset RXCB prior to PAE intercept (bsc#1111666).
- mac80211: do not WARN on short WMM parameters from AP (bsc#1051510).
- mac80211: do not warn about CW params when not using them (bsc#1051510).
- mac80211: fix possible memory leak in ieee80211_assign_beacon (bsc#1142635).
- mac80211: fix possible sta leak (bsc#1051510).
- mac80211_hwsim: Fix possible null-pointer dereferences in hwsim_dump_radio_nl() (bsc#1111666).
- macsec: fix checksumming after decryption (bsc#1051510).
- macsec: fix use-after-free of skb during RX (bsc#1051510).
- macsec: let the administrator set UP state even if lowerdev is down (bsc#1051510).
- macsec: update operstate when lower device changes (bsc#1051510).
- mailbox: handle failed named mailbox channel request (bsc#1051510).
- md/raid: raid5 preserve the writeback action after the parity check (git fixes).
- md: add mddev-&gt;pers to avoid potential NULL pointer dereference (git fixes).
- md: fix invalid stored role for a disk try2 (bsc#1143765).
- media: au0828: fix null dereference in error path (bsc#1051510).
- media: coda: Remove unbalanced and unneeded mutex unlock (bsc#1051510).
- media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP (bsc#1051510).
- media: coda: fix mpeg2 sequence number handling (bsc#1051510).
- media: coda: increment sequence offset for the last returned frame (bsc#1051510).
- media: dvb: usb: fix use after free in dvb_usb_device_exit (bsc#1051510).
- media: hdpvr: fix locking and a missing msleep (bsc#1051510).
- media: media_device_enum_links32: clean a reserved field (bsc#1051510).
- media: pvrusb2: use a different format for warnings (bsc#1051510).
- media: spi: IR LED: add missing of table registration (bsc#1051510).
- media: staging: media: davinci_vpfe: - Fix for memory leak if decoder initialization fails (bsc#1051510).
- media: vpss: fix a potential NULL pointer dereference (bsc#1051510).
- media: wl128x: Fix some error handling in fm_v4l2_init_video_device() (bsc#1051510).
- mfd: arizona: Fix undefined behavior (bsc#1051510).
- mfd: core: Set fwnode for created devices (bsc#1051510).
- mfd: hi655x-pmic: Fix missing return value check for devm_regmap_init_mmio_clk (bsc#1051510).
- mfd: intel-lpss: Add Intel Comet Lake PCI IDs (jsc#SLE-4875).
- mlxsw: spectrum: Fix error path in mlxsw_sp_module_init() (bsc#1112374).
- mm, page_owner: handle THP splits correctly (bsc#1149197, VM Debugging Functionality).
- mm, vmscan: do not special-case slab reclaim when watermarks are boosted (git fixes (mm/vmscan)).
- mm/hmm: fix bad subpage pointer in try_to_unmap_one (bsc#1148202, HMM, VM Functionality).
- mm/hotplug: fix offline undo_isolate_page_range() (bsc#1148196, VM Functionality).
- mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node (bsc#1148379, VM Functionality).
- mm/memcontrol.c: fix use after free in mem_cgroup_iter() (bsc#1149224, VM Functionality).
- mm/memory.c: recheck page table entry with page table lock held (bsc#1148363, VM Functionality).
- mm/migrate.c: initialize pud_entry in migrate_vma() (bsc#1148198, HMM, VM Functionality).
- mm/mlock.c: change count_mm_mlocked_page_nr return type (bsc#1148527, VM Functionality).
- mm/mlock.c: mlockall error for flag MCL_ONFAULT (bsc#1148527, VM Functionality).
- mm/page_alloc.c: fix calculation of pgdat-&gt;nr_zones (bsc#1148192, VM Functionality).
- mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() (bsc#1118689).
- mm/vmscan.c: fix trying to reclaim unevictable LRU page (bsc#1149214, VM Functionality).
- mm: add filemap_fdatawait_range_keep_errors() (bsc#1148616).
- mm: do not stall register_shrinker() (bsc#1104902, VM Performance).
- mm: move MAP_SYNC to asm-generic/mman-common.h (bsc#1148297).
- mm: page_mapped: do not assume compound page is huge or THP (bsc#1148574, VM Functionality).
- mmc: cavium: Add the missing dma unmap when the dma has finished (bsc#1051510).
- mmc: cavium: Set the correct dma max segment size for mmc_host (bsc#1051510).
- mmc: core: Fix init of SD cards reporting an invalid VDD range (bsc#1051510).
- mmc: dw_mmc: Fix occasional hang after tuning on eMMC (bsc#1051510).
- mmc: sdhci-of-at91: add quirk for broken HS200 (bsc#1051510).
- mmc: sdhci-pci: Add support for Intel CML (jsc#SLE-4875).
- mmc: sdhci-pci: Add support for Intel ICP (jsc#SLE-4875).
- mmc: sdhci-pci: Fix BYT OCP setting (bsc#1051510).
- mpls: fix warning with multi-label encap (bsc#1051510).
- nbd: replace kill_bdev() with __invalidate_device() again (git fixes).
- net/9p: include trans_common.h to fix missing prototype warning (bsc#1051510).
- net/ibmvnic: Fix missing { in __ibmvnic_reset (bsc#1149652 ltc#179635).
- net/ibmvnic: free reset work of removed device from queue (bsc#1149652 ltc#179635).
- net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command (bsc#1145678).
- net/mlx5: Fix modify_cq_in alignment (bsc#1103990).
- net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn (networking-stable-19_07_25).
- net/mlx5e: always initialize frag-&gt;last_in_page (bsc#1103990 ).
- net: Fix netdev_WARN_ONCE macro (git-fixes).
- net: Introduce netdev_*_once functions (networking-stable-19_07_25).
- net: Revert 'net: ena: ethtool: add extra properties retrieval via get_priv_flags' (bsc#1139020 bsc#1139021).
- net: bcmgenet: use promisc for unsupported filters (networking-stable-19_07_25).
- net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query (networking-stable-19_07_25).
- net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling (networking-stable-19_07_25).
- net: bridge: stp: do not cache eth dest pointer before skb pull (networking-stable-19_07_25).
- net: dsa: mv88e6xxx: wait after reset deactivation (networking-stable-19_07_25).
- net: ena: Fix bug where ring allocation backoff stopped too late (bsc#1139020 bsc#1139021).
- net: ena: add MAX_QUEUES_EXT get feature admin command (bsc#1139020 bsc#1139021).
- net: ena: add ethtool function for changing io queue sizes (bsc#1139020 bsc#1139021).
- net: ena: add good checksum counter (bsc#1139020 bsc#1139021).
- net: ena: add handling of llq max tx burst size (bsc#1139020 bsc#1139021).
- net: ena: add newline at the end of pr_err prints (bsc#1139020 bsc#1139021).
- net: ena: add support for changing max_header_size in LLQ mode (bsc#1139020 bsc#1139021).
- net: ena: allow automatic fallback to polling mode (bsc#1139020 bsc#1139021).
- net: ena: allow queue allocation backoff when low on memory (bsc#1139020 bsc#1139021).
- net: ena: arrange ena_probe() function variables in reverse christmas tree (bsc#1139020 bsc#1139021).
- net: ena: enable negotiating larger Rx ring size (bsc#1139020 bsc#1139021).
- net: ena: ethtool: add extra properties retrieval via get_priv_flags (bsc#1139020 bsc#1139021).
- net: ena: fix ena_com_fill_hash_function() implementation (bsc#1139020 bsc#1139021).
- net: ena: fix incorrect test of supported hash function (bsc#1139020 bsc#1139021).
- net: ena: fix swapped parameters when calling ena_com_indirect_table_fill_entry (bsc#1139020 bsc#1139021).
- net: ena: fix: Free napi resources when ena_up() fails (bsc#1139020 bsc#1139021).
- net: ena: fix: set freed objects to NULL to avoid failing future allocations (bsc#1139020 bsc#1139021).
- net: ena: gcc 8: fix compilation warning (bsc#1139020 bsc#1139021).
- net: ena: improve latency by disabling adaptive interrupt moderation by default (bsc#1139020 bsc#1139021).
- net: ena: make ethtool show correct current and max queue sizes (bsc#1139020 bsc#1139021).
- net: ena: optimise calculations for CQ doorbell (bsc#1139020 bsc#1139021).
- net: ena: remove inline keyword from functions in *.c (bsc#1139020 bsc#1139021).
- net: ena: replace free_tx/rx_ids union with single free_ids field in ena_ring (bsc#1139020 bsc#1139021).
- net: ena: update driver version from 2.0.3 to 2.1.0 (bsc#1139020 bsc#1139021).
- net: ena: use dev_info_once instead of static variable (bsc#1139020 bsc#1139021).
- net: fix bpf_xdp_adjust_head regression for generic-XDP (bsc#1109837).
- net: hns3: Add missing newline at end of file (bsc#1104353 ).
- net: hns3: add Asym Pause support to fix autoneg problem (bsc#1104353).
- net: hns3: add a check to pointer in error_detected and slot_reset (bsc#1104353).
- net: hns3: add aRFS support for PF (bsc#1104353).
- net: hns3: add all IMP return code (bsc#1104353).
- net: hns3: add check to number of buffer descriptors (bsc#1104353).
- net: hns3: add default value for tc_size and tc_offset (bsc#1104353).
- net: hns3: add exception handling when enable NIC HW error interrupts (bsc#1104353).
- net: hns3: add handling of two bits in MAC tunnel interrupts (bsc#1104353).
- net: hns3: add handshake with hardware while doing reset (bsc#1104353).
- net: hns3: add opcode about query and clear RAS &amp; MSI-X to special opcode (bsc#1104353).
- net: hns3: add recovery for the H/W errors occurred before the HNS dev initialization (bsc#1104353).
- net: hns3: add some error checking in hclge_tm module (bsc#1104353).
- net: hns3: add support for dump firmware statistics by debugfs (bsc#1104353).
- net: hns3: adjust hns3_uninit_phy()'s location in the hns3_client_uninit() (bsc#1104353).
- net: hns3: bitwise operator should use unsigned type (bsc#1104353).
- net: hns3: change SSU's buffer allocation according to UM (bsc#1104353).
- net: hns3: check msg_data before memcpy in hclgevf_send_mbx_msg (bsc#1104353).
- net: hns3: clear restting state when initializing HW device (bsc#1104353).
- net: hns3: code optimizaition of hclge_handle_hw_ras_error() (bsc#1104353).
- net: hns3: delay and separate enabling of NIC and ROCE HW errors (bsc#1104353).
- net: hns3: delay ring buffer clearing during reset (bsc#1104353 ).
- net: hns3: delay setting of reset level for hw errors until slot_reset is called (bsc#1104353).
- net: hns3: delete the redundant user NIC codes (bsc#1104353 ).
- net: hns3: do not configure new VLAN ID into VF VLAN table when it's full (bsc#1104353).
- net: hns3: enable DCB when TC num is one and pfc_en is non-zero (bsc#1104353).
- net: hns3: enable broadcast promisc mode when initializing VF (bsc#1104353).
- net: hns3: extract handling of mpf/pf msi-x errors into functions (bsc#1104353).
- net: hns3: fix VLAN filter restore issue after reset (bsc#1104353).
- net: hns3: fix __QUEUE_STATE_STACK_XOFF not cleared issue (bsc#1104353).
- net: hns3: fix a -Wformat-nonliteral compile warning (bsc#1104353).
- net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector (bsc#1104353).
- net: hns3: fix a statistics issue about l3l4 checksum error (bsc#1104353).
- net: hns3: fix avoid unnecessary resetting for the H/W errors which do not require reset (bsc#1104353).
- net: hns3: fix compile warning without CONFIG_RFS_ACCEL (bsc#1104353).
- net: hns3: fix dereference of ae_dev before it is null checked (bsc#1104353).
- net: hns3: fix flow control configure issue for fibre port (bsc#1104353).
- net: hns3: fix for dereferencing before null checking (bsc#1104353).
- net: hns3: fix for skb leak when doing selftest (bsc#1104353 ).
- net: hns3: fix race conditions between reset and module loading &amp; unloading (bsc#1104353).
- net: hns3: fix some coding style issues (bsc#1104353 ).
- net: hns3: fix wrong size of mailbox responding data (bsc#1104353).
- net: hns3: fixes wrong place enabling ROCE HW error when loading (bsc#1104353).
- net: hns3: free irq when exit from abnormal branch (bsc#1104353 ).
- net: hns3: handle empty unknown interrupt (bsc#1104353 ).
- net: hns3: initialize CPU reverse mapping (bsc#1104353 ).
- net: hns3: log detail error info of ROCEE ECC and AXI errors (bsc#1104353).
- net: hns3: make HW GRO handling compliant with SW GRO (bsc#1104353).
- net: hns3: modify handling of out of memory in hclge_err.c (bsc#1104353).
- net: hns3: modify hclge_init_client_instance() (bsc#1104353 ).
- net: hns3: modify hclgevf_init_client_instance() (bsc#1104353 ).
- net: hns3: optimize the CSQ cmd error handling (bsc#1104353 ).
- net: hns3: process H/W errors occurred before HNS dev initialization (bsc#1104353).
- net: hns3: re-schedule reset task while VF reset fail (bsc#1104353).
- net: hns3: refactor PF/VF RSS hash key configuration (bsc#1104353).
- net: hns3: refactor hns3_get_new_int_gl function (bsc#1104353 ).
- net: hns3: refine the flow director handle (bsc#1104353 ).
- net: hns3: remove RXD_VLD check in hns3_handle_bdinfo (bsc#1104353).
- net: hns3: remove VF VLAN filter entry inexistent warning print (bsc#1104353).
- net: hns3: remove override_pci_need_reset (bsc#1104353 ).
- net: hns3: remove redundant core reset (bsc#1104353 ).
- net: hns3: remove setting bit of reset_requests when handling mac tunnel interrupts (bsc#1104353).
- net: hns3: remove unused linkmode definition (bsc#1104353 ).
- net: hns3: replace numa_node_id with numa_mem_id for buffer reusing (bsc#1104353).
- net: hns3: set default value for param 'type' in hclgevf_bind_ring_to_vector (bsc#1104353).
- net: hns3: set maximum length to resp_data_len for exceptional case (bsc#1104353).
- net: hns3: set ops to null when unregister ad_dev (bsc#1104353 ).
- net: hns3: set the port shaper according to MAC speed (bsc#1104353).
- net: hns3: small changes for magic numbers (bsc#1104353 ).
- net: hns3: some changes of MSI-X bits in PPU(RCB) (bsc#1104353 ).
- net: hns3: some modifications to simplify and optimize code (bsc#1104353).
- net: hns3: some variable modification (bsc#1104353).
- net: hns3: stop schedule reset service while unloading driver (bsc#1104353).
- net: hns3: sync VLAN filter entries when kill VLAN ID failed (bsc#1104353).
- net: hns3: trigger VF reset if a VF has an over_8bd_nfe_err (bsc#1104353).
- net: hns3: typo in the name of a constant (bsc#1104353 ).
- net: hns3: use HCLGEVF_STATE_NIC_REGISTERED to indicate VF NIC client has registered (bsc#1104353).
- net: hns3: use HCLGE_STATE_NIC_REGISTERED to indicate PF NIC client has registered (bsc#1104353).
- net: hns3: use HCLGE_STATE_ROCE_REGISTERED to indicate PF ROCE client has registered (bsc#1104353).
- net: hns3: use macros instead of magic numbers (bsc#1104353 ).
- net: hns: add support for vlan TSO (bsc#1104353).
- net: make skb_dst_force return true when dst is refcounted (networking-stable-19_07_25).
- net: mvpp2: Do not check for 3 consecutive Idle frames for 10G links (bsc#1119113).
- net: neigh: fix multiple neigh timer scheduling (networking-stable-19_07_25).
- net: phylink: Fix flow control for fixed-link (bsc#1119113 ).
- net: remove duplicate fetch in sock_getsockopt (networking-stable-19_07_02).
- net: sched: verify that q!=NULL before setting q-&gt;flags (git-fixes).
- net: stmmac: fixed new system time seconds value calculation (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW timestamp (networking-stable-19_07_02).
- net: usb: pegasus: fix improper read if get_registers() fail (bsc#1051510).
- net_sched: unset TCQ_F_CAN_BYPASS when adding filters (networking-stable-19_07_25).
- netrom: fix a memory leak in nr_rx_frame() (networking-stable-19_07_25).
- netrom: hold sock when setting skb-&gt;destructor (networking-stable-19_07_25).
- nfc: fix potential illegal memory access (bsc#1051510).
- nfs: Cleanup if nfs_match_client is interrupted (bsc#1134291).
- nfs: Fix a double unlock from nfs_match,get_client (bsc#1134291).
- nfs: Fix the inode request accounting when pages have subrequests (bsc#1140012).
- nfs: make nfs_match_client killable (bsc#1134291).
- nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header (git fixes).
- nvme-core: Fix extra device_put() call on error path (bsc#1142541).
- nvme-fc: fix module unloads while lports still pending (bsc#1150033).
- nvme-multipath: fix ana log nsid lookup when nsid is not found (bsc#1141554).
- nvme-multipath: relax ANA state check (bsc#1123105).
- nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns (bsc#1120876).
- nvme: Return BLK_STS_TARGET if the DNR bit is set (bsc#1142076).
- nvme: cancel request synchronously (bsc#1145661).
- nvme: change locking for the per-subsystem controller list (bsc#1142541).
- nvme: fix possible use-after-free in connect error flow (bsc#1139500)
- nvme: fix possible use-after-free in connect error flow (bsc#1139500, bsc#1140426)
- nvme: introduce NVME_QUIRK_IGNORE_DEV_SUBNQN (bsc#1146938).
- objtool: Add rewind_stack_do_exit() to the noreturn list (bsc#1145302).
- objtool: Support GCC 9 cold subfunction naming scheme (bsc#1145300).
- octeon_mgmt: Fix MIX registers configuration on MTU setup (bsc#1051510).
- pci: PM/acpi: Refresh all stale power state data in pci_pm_complete() (bsc#1149106).
- pci: Restore Resizable BAR size bits correctly for 1MB BARs (bsc#1143841).
- pci: al: Add Amazon Annapurna Labs PCIe host controller driver (SLE-9332).
- pci: hv: Fix panic by calling hv_pci_remove_slots() earlier (bsc#1142701).
- pci: qcom: Ensure that PERST is asserted for at least 100 ms (bsc#1142635).
- pci: xilinx-nwl: Fix Multi MSI data programming (bsc#1142635).
- phy: qcom-qusb2: Fix crash if nvmem cell not specified (bsc#1051510).
- phy: renesas: rcar-gen2: Fix memory leak at error paths (bsc#1051510).
- pinctrl: pistachio: fix leaked of_node references (bsc#1051510).
- pinctrl: rockchip: fix leaked of_node references (bsc#1051510).
- pm / OPP: OF: Use pr_debug() instead of pr_err() while adding OPP table (jsc#SLE-7294).
- pm / devfreq: rk3399_dmc: Pass ODT and auto power down parameters to TF-A (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: do not print error when get supply and clk defer (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: fix spelling mistakes (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: remove unneeded semicolon (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: remove wait for dcf irq event (bsc#1144718,bsc#1144813).
- pm / devfreq: rockchip-dfi: Move GRF definitions to a common place (bsc#1144718,bsc#1144813).
- powerpc/64s: Include cpu header (bsc#1065729).
- powerpc/64s: support nospectre_v2 cmdline option (bsc#1131107).
- powerpc/book3s/64: check for NULL pointer in pgd_alloc() (bsc#1078248, git-fixes).
- powerpc/fadump: use kstrtoint to handle sysfs store (bsc#1146376).
- powerpc/fadump: when fadump is supported register the fadump sysfs files (bsc#1146352).
- powerpc/fsl: Add nospectre_v2 command line argument (bsc#1131107).
- powerpc/fsl: Update Spectre v2 reporting (bsc#1131107).
- powerpc/kdump: Handle crashkernel memory reservation failure (bsc#1143466 LTC#179600).
- powerpc/lib: Fix feature fixup test of external branch (bsc#1065729).
- powerpc/mm/hash/4k: Do not use 64K page size for vmemmap with 4K pagesize (bsc#1142685 LTC#179509).
- powerpc/mm/nvdimm: Add an informative message if we fail to allocate altmap block (bsc#1142685 LTC#179509).
- powerpc/mm/radix: Use the right page size for vmemmap mapping (bsc#1055117 bsc#1142685 LTC#179509).
- powerpc/mm: Handle page table allocation failures (bsc#1065729).
- powerpc/nvdimm: Add support for multibyte read/write for metadata (bsc#1142685 LTC#179509).
- powerpc/nvdimm: Pick nearby online node if the device node is not online (bsc#1142685 ltc#179509).
- powerpc/perf: Add constraints for power9 l2/l3 bus events (bsc#1056686).
- powerpc/perf: Add mem access events to sysfs (bsc#1124370).
- powerpc/perf: Cleanup cache_sel bits comment (bsc#1056686).
- powerpc/perf: Fix thresholding counter data for unknown type (bsc#1056686).
- powerpc/perf: Remove PM_BR_CMPL_ALT from power9 event list (bsc#1047238, bsc#1056686).
- powerpc/perf: Update perf_regs structure to include SIER (bsc#1056686).
- powerpc/powernv/opal-dump : Use IRQ_HANDLED instead of numbers in interrupt handler (bsc#1065729).
- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- powerpc/powernv: Return for invalid IMC domain (bsc1054914, git-fixes).
- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- powerpc/pseries, ps3: panic flush kernel messages before halting system (bsc#1149940 ltc#179958).
- powerpc/pseries/scm: Mark the region volatile if cache flush not required (bsc#1142685 LTC#179509).
- powerpc/pseries: Fix xive=off command line (bsc#1085030, git-fixes).
- powerpc/pseries: add missing cpumask.h include file (bsc#1065729).
- powerpc/pseries: correctly track irq state in default idle (bsc#1150727 ltc#178925).
- powerpc/rtas: use device model APIs and serialization during Lpm (bsc#1144123 ltc#178840).
- powerpc/security: Show powerpc_security_features in debugfs (bsc#1131107).
- powerpc/xive: Fix dump of XIVE interrupt under pseries (bsc#1142019).
- powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask() (bsc#1085030, bsc#1145189, LTC#179762).
- powerpc/xmon: Add a dump of all XIVE interrupts (bsc#1142019).
- powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL (bsc#1142019).
- powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (bsc#1146575 ltc#180764).
- powerpc: dump kernel log before carrying out fadump or kdump (bsc#1149940 ltc#179958).
- qede: fix write to free'd pointer error and double free of ptp (bsc#1051510).
- qla2xxx: kABI fixes for v10.01.00.18-k (bcs#1082635 bcs#1141340 bcs#1143706).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- raid5-cache: Need to do start() part job after adding journal device (git fixes).
- rbd: do not (ab)use obj_req-&gt;pages for stat requests (bsc#1141450).
- rbd: do not NULL out -&gt;obj_request in rbd_img_obj_parent_read_full() (bsc#1141450).
- rbd: get rid of img_req-&gt;copyup_pages (bsc#1141450).
- rbd: move from raw pages to bvec data descriptors (bsc#1141450).
- rbd: remove bio cloning helpers (bsc#1141450).
- rbd: start enums at 1 instead of 0 (bsc#1141450).
- rbd: use kmem_cache_zalloc() in rbd_img_request_create() (bsc#1141450).
- rdma/hns: Add mtr support for mixed multihop addressing (bsc#1104427).
- rdma/hns: Bugfix for calculating qp buffer size (bsc#1104427 ).
- rdma/hns: Bugfix for filling the sge of srq (bsc#1104427 ).
- rdma/hns: Do not stuck in endless timeout loop (bsc#1104427 ).
- rdma/hns: Fix an error code in hns_roce_set_user_sq_size() (bsc#1104427).
- rdma/hns: Fixs hw access invalid dma memory error (bsc#1104427 ).
- rdma/hns: Fixup qp release bug (bsc#1104427).
- rdma/hns: Modify ba page size for cqe (bsc#1104427).
- rdma/hns: Remove set but not used variable 'fclr_write_fail_flag' (bsc#1104427).
- rdma/hns: Remove unnecessary print message in aeq (bsc#1104427 ).
- rdma/hns: Replace magic numbers with #defines (bsc#1104427 ).
- rdma/hns: Set reset flag when hw resetting (bsc#1104427 ).
- rdma/hns: Use %pK format pointer print (bsc#1104427 ).
- rdma/hns: fix inverted logic of readl read and shift (bsc#1104427).
- rdma/hns: reset function when removing module (bsc#1104427 ).
- regmap: fix bulk writes on paged registers (bsc#1051510).
- regulator: qcom_spmi: Fix math of spmi_regulator_set_voltage_time_sel (bsc#1051510).
- rpm/kernel-binary.spec.in: Enable missing modules check.
- rpmsg: added MODULE_ALIAS for rpmsg_char (bsc#1051510).
- rpmsg: smd: do not use mananged resources for endpoints and channels (bsc#1051510).
- rpmsg: smd: fix memory leak on channel create (bsc#1051510).
- rsi: improve kernel thread handling to fix kernel panic (bsc#1051510).
- rslib: Fix decoding of shortened codes (bsc#1051510).
- rslib: Fix handling of of caller provided syndrome (bsc#1051510).
- rtc: pcf8523: do not return invalid date when battery is low (bsc#1051510).
- rtc: pcf8563: Clear event flags and disable interrupts before requesting irq (bsc#1051510).
- rtc: pcf8563: Fix interrupt trigger method (bsc#1051510).
- rxrpc: Fix send on a connected, but unbound socket (networking-stable-19_07_25).
- s390/cio: fix ccw_device_start_timeout API (bsc#1142109 LTC#179339).
- s390/dasd: fix endless loop after read unit address configuration (bsc#1144912 LTC#179907).
- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117 bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- s390/qeth: avoid control IO completion stalls (bsc#1142109 LTC#179339).
- s390/qeth: cancel cmd on early error (bsc#1142109 LTC#179339).
- s390/qeth: fix request-side race during cmd IO timeout (bsc#1142109 LTC#179339).
- s390/qeth: release cmd buffer in error paths (bsc#1142109 LTC#179339).
- s390/qeth: simplify reply object handling (bsc#1142109 LTC#179339).
- samples, bpf: fix to change the buffer size for read() (bsc#1051510).
- samples: mei: use /dev/mei0 instead of /dev/mei (bsc#1051510).
- sched/fair: Do not free p-&gt;numa_faults with concurrent readers (bsc#1144920).
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (bsc#1144920).
- scripts/checkstack.pl: Fix arm64 wrong or unknown architecture (bsc#1051510).
- scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE (bsc#1051510).
- scripts/decode_stacktrace: only strip base path when a prefix of the path (bsc#1051510).
- scripts/gdb: fix lx-version string output (bsc#1051510).
- scripts/git_sort/git_sort.py:
- scsi: NCR5380: Always re-enable reselection interrupt (git-fixes).
- scsi: aacraid: Fix missing break in switch statement (git-fixes).
- scsi: aacraid: Fix performance issue on logical drives (git-fixes).
- scsi: aic94xx: fix an error code in aic94xx_init() (git-fixes).
- scsi: aic94xx: fix module loading (git-fixes).
- scsi: bfa: Avoid implicit enum conversion in bfad_im_post_vendor_event (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: Remove unused functions (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_fcs_lport: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_fcs_rport: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_ioc: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: clean up a couple of indentation issues (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: convert to strlcpy/strlcat (git-fixes).
- scsi: bfa: fix calls to dma_set_mask_and_coherent() (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: no need to check return value of debugfs_create functions (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: remove ScsiResult macro (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: use dma_set_mask_and_coherent (bsc#1136496 jsc#SLE-4698).
- scsi: bnx2fc: Do not allow both a cleanup completion and abort completion for the same request (bsc#1144582).
- scsi: bnx2fc: Fix NULL dereference in error handling (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling (git-fixes).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Limit the IO size according to the FW capability (bsc#1144582).
- scsi: bnx2fc: Only put reference to io_req in bnx2fc_abts_cleanup if cleanup times out (bsc#1144582).
- scsi: bnx2fc: Redo setting source FCoE MAC (bsc#1144582).
- scsi: bnx2fc: Remove set but not used variable 'oxid' (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Separate out completion flags and variables for abort and cleanup (bsc#1144582).
- scsi: bnx2fc: Update the driver version to 2.12.10 (bsc#1144582).
- scsi: bnx2fc: fix bnx2fc_cmd refcount imbalance in send_rec (bsc#1144582).
- scsi: bnx2fc: fix bnx2fc_cmd refcount imbalance in send_srr (bsc#1144582).
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation (git-fixes).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502 jsc#SLE-4703).
- scsi: core: Fix race on creating sense cache (git-fixes).
- scsi: core: Synchronize request queue pm status only on successful resume (git-fixes).
- scsi: core: set result when the command cannot be dispatched (git-fixes).
- scsi: cxgb4i: fix incorrect spelling 'reveive' -&gt; 'receive' (bsc#1136346 jsc#SLE-4682).
- scsi: cxgb4i: get pf number from lldi-&gt;pf (bsc#1136346 jsc#SLE-4682).
- scsi: cxgb4i: validate tcp sequence number only if chip version &amp;lt;= T5 (bsc#1136346 jsc#SLE-4682).
- scsi: cxlflash: Mark expected switch fall-throughs (bsc#1148868).
- scsi: cxlflash: Prevent deadlock when adapter probe fails (git-fixes).
- scsi: esp_scsi: Track residual for PIO transfers (git-fixes) Also, mitigate kABI changes.
- scsi: fas216: fix sense buffer initialization (git-fixes).
- scsi: hisi_sas: Add support for DIX feature for v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Change SERDES_CFG init value to increase reliability of HiLink (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Disable stash for v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Fix losing directly attached disk when hot-plug (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Ignore the error code between phy down to phy up (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Issue internal abort on all relevant queues (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Reduce HISI_SAS_SGE_PAGE_CNT in size (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Reject setting programmed minimum linkrate &gt; 1.5G (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Use pci_irq_get_affinity() for v3 hw as experimental (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: change queue depth from 512 to 4096 (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: kabi fixes (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: print PHY RX errors count for later revision of v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: send primitive NOTIFY to SSP situation only (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: isci: initialize shost fully before calling scsi_add_host() (git-fixes).
- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352 jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352 jsc#SLE-4687).
- scsi: libcxgbi: update route finding logic (bsc#1136352 jsc#SLE-4687)
- scsi: libfc: fix null pointer dereference on a null lport (git-fixes).
- scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached (git-fixes).
- scsi: libsas: kABI protect struct sas_task_slow (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: libsas: only clear phy-&gt;in_shutdown after shutdown event done (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: lpfc: Add MDS driver loopback diagnostics support (bsc#1146215).
- scsi: lpfc: Add NVMe sequence level error recovery support (bsc#1146215).
- scsi: lpfc: Add first and second level hardware revisions to sysfs (bsc#1146215).
- scsi: lpfc: Add simple unlikely optimizations to reduce NVME latency (bsc#1146215).
- scsi: lpfc: Avoid unused function warnings (bsc#1148308).
- scsi: lpfc: Convert timers to use timer_setup() (bsc#1148308).
- scsi: lpfc: Default fdmi_on to on (bsc#1148308).
- scsi: lpfc: Fix ADISC reception terminating login state if a NVME (bsc#1146215).
- scsi: lpfc: Fix BlockGuard enablement on FCoE adapters (bsc#1146215).
- scsi: lpfc: Fix ELS field alignments (bsc#1146215).
- scsi: lpfc: Fix FLOGI handling across multiple link up/down (bsc#1146215).
- scsi: lpfc: Fix Max Frame Size value shown in fdmishow output (bsc#1146215).
- scsi: lpfc: Fix Oops in nvme_register with target logout/login (bsc#1146215).
- scsi: lpfc: Fix PLOGI failure with high remoteport count (bsc#1146215).
- scsi: lpfc: Fix coverity warnings (bsc#1146215).
- scsi: lpfc: Fix crash due to port reset racing vs adapter error (bsc#1146215).
- scsi: lpfc: Fix crash on driver unload in wq free (bsc#1146215).
- scsi: lpfc: Fix crash when cpu count is 1 and null irq affinity mask (bsc#1146215).
- scsi: lpfc: Fix deadlock on host_lock during cable pulls (bsc#1146215).
- scsi: lpfc: Fix devices that do not return after devloss followed by (bsc#1146215).
- scsi: lpfc: Fix discovery when target has no GID_FT information (bsc#1146215).
- scsi: lpfc: Fix error in remote port address change (bsc#1146215).
- scsi: lpfc: Fix failure to clear non-zero eq_delay after io rate (bsc#1146215).
- scsi: lpfc: Fix hang when downloading fw on port enabled for nvme (bsc#1146215).
- scsi: lpfc: Fix irq raising in lpfc_sli_hba_down (bsc#1146215).
- scsi: lpfc: Fix issuing init_vpi mbox on SLI-3 card (bsc#1146215).
- scsi: lpfc: Fix leak of ELS completions on adapter reset (bsc#1146215).
- scsi: lpfc: Fix loss of remote port after devloss due to lack of RPIs (bsc#1146215).
- scsi: lpfc: Fix null ptr oops updating lpfc_devloss_tmo via sysfs (bsc#1146215).
- scsi: lpfc: Fix nvme first burst module parameter description (bsc#1146215).
- scsi: lpfc: Fix nvme sg_seg_cnt display if HBA does not support NVME (bsc#1146215).
- scsi: lpfc: Fix nvme target mode ABTSing a received ABTS (bsc#1146215).
- scsi: lpfc: Fix oops when fewer hdwqs than cpus (bsc#1146215).
- scsi: lpfc: Fix port relogin failure due to GID_FT interaction (bsc#1146215).
- scsi: lpfc: Fix propagation of devloss_tmo setting to nvme transport (bsc#1146215).
- scsi: lpfc: Fix reported physical link speed on a disabled trunked (bsc#1146215).
- scsi: lpfc: Fix reset recovery paths that are not recovering (bsc#1144375).
- scsi: lpfc: Fix sg_seg_cnt for HBAs that do not support NVME (bsc#1146215).
- scsi: lpfc: Fix sli4 adapter initialization with MSI (bsc#1146215).
- scsi: lpfc: Fix too many sg segments spamming in kernel log (bsc#1146215).
- scsi: lpfc: Fix upcall to bsg done in non-success cases (bsc#1146215).
- scsi: lpfc: Limit xri count for kdump environment (bsc#1146215).
- scsi: lpfc: Make some symbols static (bsc#1148308).
- scsi: lpfc: Merge per-protocol WQ/CQ pairs into single per-cpu pair (bsc#1146215).
- scsi: lpfc: Merge per-protocol WQ/CQ pairs into single per-cpu pair (bsc#1146215).
- scsi: lpfc: Migrate to %px and %pf in kernel print calls (bsc#1146215).
- scsi: lpfc: Remove bg debugfs buffers (bsc#1144375).
- scsi: lpfc: Remove set but not used variable 'psli' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'fc_hdr' and 'hw_page_size' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'qp' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'tgtp' (bsc#1148308).
- scsi: lpfc: Resolve checker warning for lpfc_new_io_buf() (bsc#1144375).
- scsi: lpfc: Support dynamic unbounded SGL lists on G7 hardware (bsc#1146215).
- scsi: lpfc: Update lpfc version to 12.4.0.0 (bsc#1146215).
- scsi: lpfc: Use dma_zalloc_coherent (bsc#1148308).
- scsi: lpfc: add check for loss of ndlp when sending RRQ (bsc#1148308).
- scsi: lpfc: change snprintf to scnprintf for possible overflow (bsc#1146215).
- scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show (bsc#1148308).
- scsi: lpfc: lpfc_sli: Mark expected switch fall-throughs (bsc#1148308).
- scsi: lpfc: no need to check return value of debugfs_create functions (bsc#1148308).
- scsi: lpfc: nvme: avoid hang / use-after-free when destroying localport (bsc#1148308).
- scsi: lpfc: nvmet: avoid hang / use-after-free when destroying targetport (bsc#1148308).
- scsi: lpfc: remove NULL check before some freeing functions (bsc#1146215).
- scsi: lpfc: remove ScsiResult macro (bsc#1148308).
- scsi: lpfc: remove a bogus pci_dma_sync_single_for_device call (bsc#1148308).
- scsi: lpfc: remove null check on nvmebuf (bsc#1148308).
- scsi: lpfc: resolve lockdep warnings (bsc#1148308).
- scsi: lpfc: use sg helper to iterate over scatterlist (bsc#1148308).
- scsi: mac_scsi: Fix pseudo DMA implementation, take 2 (git-fixes).
- scsi: mac_scsi: Increase PIO/PDMA transfer length threshold (git-fixes).
- scsi: megaraid: fix out-of-bound array accesses (git-fixes).
- scsi: megaraid_sas: Fix calculation of target ID (git-fixes).
- scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (bsc#1143962).
- scsi: megaraid_sas: Release Mutex lock before OCR in case of DCMD timeout (bsc#1143962).
- scsi: mpt3sas: Determine smp affinity on per HBA basis (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode (bsc#1143738).
- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: pmcraid: do not allocate a dma coherent buffer for sense data (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: simplify pmcraid_cancel_all a bit (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: use generic DMA API (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: use sg helper to iterate over scatterlist (bsc#1135990 jsc#SLE-4709).
- scsi: prefix header search paths with $(srctree)/ (bsc#1136346 jsc#SLE-4682).
- scsi: qedf: Add debug information for unsolicited processing (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets and send fipvlan retries (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing link update AEN (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link down (bsc#1149976).
- scsi: qedf: Print message during bailout conditions (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20 (bsc#1149976).
- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: remove memset/memcpy to nfunc and use func instead (git-fixes).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedi: remove declaration of nvm_image from stack (git-fixes).
- scsi: qla2xxx: Add cleanup for PCI EEH recovery (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Add cleanup for PCI EEH recovery (bsc#1129424).
- scsi: qla2xxx: Allow NVMe IO to resume with short cable pull (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value (bsc#1143706).
- scsi: qla2xxx: Avoid that Coverity complains about dereferencing a NULL rport pointer (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qla2x00_mem_free() crashes if called twice (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory (git-fixes).
- scsi: qla2xxx: Change a stack variable into a static const variable (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Change the return type of qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Change the return type of qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary image fails (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size (bsc#1143706).
- scsi: qla2xxx: Check the size of firmware data structures at compile time (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Cleanup fcport memory to prevent leak (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Cleanup redundant qla2x00_abort_all_cmds during unload (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Complain if a command is released that is owned by the firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the completion path (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times out (bsc#1143706).
- scsi: qla2xxx: Complain loudly about reference count underflow (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Correct error handling during initialization failures (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument const (bsc#1143706).
- scsi: qla2xxx: Declare local symbols static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla24xx_build_scsi_crc_2_iocbs() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla2x00_find_new_loop_id() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument const (bsc#1143706).
- scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1143706).
- scsi: qla2xxx: Fix DMA unmap leak (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NVMe port discovery after a short device port loss (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Fix a format specifier (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a format specifier (git-fixes).
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Fix a small typo in qla_bsg.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix abort timeout race condition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix an endian bug in fcpcmd_is_corrupted() (git-fixes).
- scsi: qla2xxx: Fix comment alignment in qla_bsg.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix device staying in blocked state (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix device staying in blocked state (git-fixes).
- scsi: qla2xxx: Fix different size DMA Alloc/Unmap (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd() (git-fixes).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix formatting of pointer types (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix fw dump corruption (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hang in fcport delete path (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hardirq-unsafe locking (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hardlockup in abort command during driver remove (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver (bsc#1143706).
- scsi: qla2xxx: Fix possible fcport null-pointer dereferences (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix premature timer expiration (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work() (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Further limit FLASH region write access from SysFS (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance (bsc#1143706).
- scsi: qla2xxx: Include the &amp;lt;asm/unaligned.h&gt; header file from qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Increase the max_sgl_segments to 1024 (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Increase the size of the mailbox arrays from 4 to 8 (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (bsc#1143706).
- scsi: qla2xxx: Insert spaces where required (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Introduce the dsd32 and dsd64 data structures (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (bsc#1143706).
- scsi: qla2xxx: Leave a blank line after declarations (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI command context pointer (bsc#1143706).
- scsi: qla2xxx: Log the status code if a firmware command fails (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs use little endian (bsc#1143706).
- scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_mem_free() easier to verify (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qla2x00_process_response_queue() easier to read (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Move qla2x00_clear_loop_id() from qla_inline.h into qla_init.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_is_reserved_id() from qla_inline.h into qla_init.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_set_fcport_state() from a .h into a .c file (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_set_reserved_loop_ids() definition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move the &amp;lt;linux/io-64-nonatomic-lo-hi.h&gt; include directive (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move the port_state_str definition from a .h to a .c file (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Pass little-endian values to the firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code (bsc#1143706).
- scsi: qla2xxx: Reduce the number of forward declarations (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Reject EH_{abort|device_reset|target_request} (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a comment that refers to the SCSI host lock (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Remove qla_tgt_cmd.data_work and qla_tgt_cmd.data_work_free (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove qla_tgt_cmd.released (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts (bsc#1143706).
- scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove two superfluous casts (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove unnecessary locking from the target code (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove unnecessary null check (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock() (bsc#1143706).
- scsi: qla2xxx: Remove useless set memory to zero use memset() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Replace vmalloc + memset with vzalloc (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox command fails (bsc#1143706).
- scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Retry fabric Scan on IOCB queue full (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id() (bsc#1143706).
- scsi: qla2xxx: Set the SCSI command result before calling the command done (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Set the qpair in SRB to NULL when SRB is released (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Silence Successful ELS IOCB message (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_send_term_imm_notif() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Skip FW dump on LOOP initialization error (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer overflow (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Uninline qla2x00_init_timer() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Unregister chrdev if module initialization fails (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Unregister chrdev if module initialization fails (git-fixes).
- scsi: qla2xxx: Unregister resources in the opposite order of the registration order (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.16-k (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.18-k (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.19-k (bsc#1143706).
- scsi: qla2xxx: Update two source code comments (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use ARRAY_SIZE() in the definition of QLA_LAST_SPEED (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use Correct index for Q-Pair array (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use __le64 instead of uint32_t[2] for sending DMA addresses to firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use common update-firmware-options routine for ISP27xx+ (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use get/put_unaligned where appropriate (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy() and strncpy() (bsc#1143706).
- scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation (bsc#1143706).
- scsi: qla2xxx: Use tabs to indent code (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime (bsc#1143706).
- scsi: qla2xxx: cleanup trace buffer initialization (bsc#1134476).
- scsi: qla2xxx: fix spelling mistake 'alredy' -&gt; 'already' (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: on session delete, return nvme cmd (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (bsc#1134476).
- scsi: qla2xxx: remove double assignment in qla2x00_update_fcport (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: target: Fix offline port handling and host reset handling (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla4xxx: avoid freeing unallocated dma memory (git-fixes).
- scsi: raid_attrs: fix unused variable warning (git-fixes).
- scsi: sas: Convert timers to use timer_setup() (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: scsi_dh_alua: Fix possible null-ptr-deref (git-fixes).
- scsi: scsi_transport_fc: nvme: display FC-NVMe port roles (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: sd: Defer spinning up drive while SANITIZE is in progress (git-fixes).
- scsi: sd: Fix a race between closing an sd device and sd I/O (git-fixes).
- scsi: sd: Fix cache_type_store() (git-fixes).
- scsi: sd: Optimal I/O size should be a multiple of physical block size (git-fixes).
- scsi: sd: Quiesce warning if device does not report optimal I/O size (git-fixes).
- scsi: sd: use mempool for discard special page (git-fixes).
- scsi: sd_zbc: Fix potential memory leak (git-fixes).
- scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous() (git-fixes).
- scsi: sr: Avoid that opening a CD-ROM hangs with runtime power management enabled (git-fixes).
- scsi: target: iscsi: cxgbit: add missing spin_lock_init() (bsc#1136349 jsc#SLE-4685).
- scsi: tcm_qla2xxx: Minimize #include directives (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: ufs: Avoid runtime suspend possibly being blocked forever (git-fixes).
- scsi: ufs: Check that space was properly alloced in copy_query_response (git-fixes).
- scsi: ufs: Fix NULL pointer dereference in ufshcd_config_vreg_hpm() (git-fixes).
- scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value (git-fixes).
- scsi: ufs: fix wrong command type of UTRD for UFSHCI v2.1 (git-fixes).
- scsi: use dma_get_cache_alignment() as minimum DMA alignment (git-fixes).
- scsi: virtio_scsi: do not send sc payload with tmfs (git-fixes).
- sctp: change to hold sk after auth shkey is created successfully (networking-stable-19_07_02).
- sdhci-fujitsu: add support for setting the CMD_DAT_DELAY attribute (bsc#1145256).
- serial: 8250: Fix TX interrupt handling condition (bsc#1051510).
- signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig (bsc#1144333).
- sis900: fix TX completion (bsc#1051510).
- sky2: Disable MSI on ASUS P6T (bsc#1142496).
- smb2: fix missing files in root share directory listing (bsc#1112907, bsc#1144333).
- smb2: fix typo in definition of a few error flags (bsc#1144333).
- smb2: fix uninitialized variable bug in smb2_ioctl_query_info (bsc#1144333).
- smb3 - clean up debug output displaying network interfaces (bsc#1144333).
- smb3.11: replace a 4 with server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- smb3: Add SMB3.1.1 GCM to negotiated crypto algorigthms (bsc#1144333).
- smb3: Add debug message later in smb2/smb3 reconnect path (bsc#1144333).
- smb3: Add defines for new negotiate contexts (bsc#1144333).
- smb3: Add dynamic trace points for various compounded smb3 ops (bsc#1144333).
- smb3: Add ftrace tracepoints for improved SMB3 debugging (bsc#1144333).
- smb3: Add handling for different FSCTL access flags (bsc#1144333).
- smb3: Add posix create context for smb3.11 posix mounts (bsc#1144333).
- smb3: Add protocol structs for change notify support (bsc#1144333).
- smb3: Add support for multidialect negotiate (SMB2.1 and later) (bsc#1051510, bsc#1144333).
- smb3: Add tracepoints for read, write and query_dir enter (bsc#1144333).
- smb3: Allow SMB3 FSCTL queries to be sent to server from tools (bsc#1144333).
- smb3: Allow persistent handle timeout to be configurable on mount (bsc#1144333).
- smb3: Allow query of symlinks stored as reparse points (bsc#1144333).
- smb3: Backup intent flag missing for directory opens with backupuid mounts (bsc#1051510, bsc#1144333).
- smb3: Backup intent flag missing from compounded ops (bsc#1144333).
- smb3: Clean up query symlink when reparse point (bsc#1144333).
- smb3: Cleanup license mess (bsc#1144333).
- smb3: Do not ignore O_SYNC/O_DSYNC and O_DIRECT flags (bsc#1085536, bsc#1144333).
- smb3: Do not send SMB3 SET_INFO if nothing changed (bsc#1051510, bsc#1144333).
- smb3: Fix 3.11 encryption to Windows and handle encrypted smb3 tcon (bsc#1051510, bsc#1144333).
- smb3: Fix SMB3.1.1 guest mounts to Samba (bsc#1051510, bsc#1144333).
- smb3: Fix deadlock in validate negotiate hits reconnect (bsc#1144333).
- smb3: Fix endian warning (bsc#1144333, bsc#1137884).
- smb3: Fix enumerating snapshots to Azure (bsc#1144333).
- smb3: Fix length checking of SMB3.11 negotiate request (bsc#1051510, bsc#1144333).
- smb3: Fix mode on mkdir on smb311 mounts (bsc#1144333).
- smb3: Fix potential memory leak when processing compound chain (bsc#1144333).
- smb3: Fix rmdir compounding regression to strict servers (bsc#1144333).
- smb3: Fix root directory when server returns inode number of zero (bsc#1051510, bsc#1144333).
- smb3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL (bsc#1144333).
- smb3: Log at least once if tree connect fails during reconnect (bsc#1144333).
- smb3: Number of requests sent should be displayed for SMB3 not just CIFS (bsc#1144333).
- smb3: Send netname context during negotiate protocol (bsc#1144333).
- smb3: Track total time spent on roundtrips for each SMB3 command (bsc#1144333).
- smb3: Update POSIX negotiate context with POSIX ctxt GUID (bsc#1144333).
- smb3: Validate negotiate request must always be signed (bsc#1064597, bsc#1144333).
- smb3: Warn user if trying to sign connection that authenticated as guest (bsc#1085536, bsc#1144333).
- smb3: add additional ftrace entry points for entry/exit to cifs.ko (bsc#1144333).
- smb3: add credits we receive from oplock/break PDUs (bsc#1144333).
- smb3: add debug for unexpected mid cancellation (bsc#1144333).
- smb3: add define for id for posix create context and corresponding struct (bsc#1144333).
- smb3: add dynamic trace point for query_info_enter/done (bsc#1144333).
- smb3: add dynamic trace point for smb3_cmd_enter (bsc#1144333).
- smb3: add dynamic tracepoint for timeout waiting for credits (bsc#1144333).
- smb3: add dynamic tracepoints for simple fallocate and zero range (bsc#1144333).
- smb3: add missing read completion trace point (bsc#1144333).
- smb3: add module alias for smb3 to cifs.ko (bsc#1144333).
- smb3: add new mount option to retrieve mode from special ACE (bsc#1144333).
- smb3: add reconnect tracepoints (bsc#1144333).
- smb3: add smb3.1.1 to default dialect list (bsc#1144333).
- smb3: add support for posix negotiate context (bsc#1144333).
- smb3: add support for statfs for smb3.1.1 posix extensions (bsc#1144333).
- smb3: add trace point for tree connection (bsc#1144333).
- smb3: add tracepoint for sending lease break responses to server (bsc#1144333).
- smb3: add tracepoint for session expired or deleted (bsc#1144333).
- smb3: add tracepoint for slow responses (bsc#1144333).
- smb3: add tracepoint to catch cases where credit refund of failed op overlaps reconnect (bsc#1144333).
- smb3: add tracepoints for query dir (bsc#1144333).
- smb3: add tracepoints for smb2/smb3 open (bsc#1144333).
- smb3: add way to control slow response threshold for logging and stats (bsc#1144333).
- smb3: allow more detailed protocol info on open files for debugging (bsc#1144333).
- smb3: allow posix mount option to enable new SMB311 protocol extensions (bsc#1144333).
- smb3: allow previous versions to be mounted with snapshot= mount parm (bsc#1144333).
- smb3: allow stats which track session and share reconnects to be reset (bsc#1051510, bsc#1144333).
- smb3: check for and properly advertise directory lease support (bsc#1051510, bsc#1144333).
- smb3: create smb3 equivalent alias for cifs pseudo-xattrs (bsc#1144333).
- smb3: directory sync should not return an error (bsc#1051510, bsc#1144333).
- smb3: display bytes_read and bytes_written in smb3 stats (bsc#1144333).
- smb3: display security information in /proc/fs/cifs/DebugData more accurately (bsc#1144333).
- smb3: display session id in debug data (bsc#1144333).
- smb3: display stats counters for number of slow commands (bsc#1144333).
- smb3: display volume serial number for shares in /proc/fs/cifs/DebugData (bsc#1144333).
- smb3: do not allow insecure cifs mounts when using smb3 (bsc#1144333).
- smb3: do not attempt cifs operation in smb3 query info error path (bsc#1051510, bsc#1144333).
- smb3: do not display confusing message on mount to Azure servers (bsc#1144333).
- smb3: do not display empty interface list (bsc#1144333).
- smb3: do not request leases in symlink creation and query (bsc#1051510, bsc#1144333).
- smb3: do not send compression info by default (bsc#1144333).
- smb3: enumerating snapshots was leaving part of the data off end (bsc#1051510, bsc#1144333).
- smb3: fill in statfs fsid and correct namelen (bsc#1112905, bsc#1144333).
- smb3: fix bytes_read statistics (bsc#1144333).
- smb3: fix corrupt path in subdirs on smb311 with posix (bsc#1144333).
- smb3: fix large reads on encrypted connections (bsc#1144333).
- smb3: fix lease break problem introduced by compounding (bsc#1144333).
- smb3: fix minor debug output for CONFIG_CIFS_STATS (bsc#1144333).
- smb3: fix redundant opens on root (bsc#1144333).
- smb3: fix reset of bytes read and written stats (bsc#1112906, bsc#1144333).
- smb3: fix various xid leaks (bsc#1051510, bsc#1144333).
- smb3: for kerberos mounts display the credential uid used (bsc#1144333).
- smb3: handle new statx fields (bsc#1085536, bsc#1144333).
- smb3: if max_credits is specified then display it in /proc/mounts (bsc#1144333).
- smb3: if server does not support posix do not allow posix mount option (bsc#1144333).
- smb3: improve dynamic tracing of open and posix mkdir (bsc#1144333).
- smb3: increase initial number of credits requested to allow write (bsc#1144333).
- smb3: make default i/o size for smb3 mounts larger (bsc#1144333).
- smb3: minor cleanup of compound_send_recv (bsc#1144333).
- smb3: minor debugging clarifications in rfc1001 len processing (bsc#1144333).
- smb3: minor missing defines relating to reparse points (bsc#1144333).
- smb3: missing defines and structs for reparse point handling (bsc#1144333).
- smb3: note that smb3.11 posix extensions mount option is experimental (bsc#1144333).
- smb3: on kerberos mount if server does not specify auth type use krb5 (bsc#1051510, bsc#1144333).
- smb3: on reconnect set PreviousSessionId field (bsc#1112899, bsc#1144333).
- smb3: optimize open to not send query file internal info (bsc#1144333).
- smb3: passthru query info does not check for SMB3 FSCTL passthru (bsc#1144333).
- smb3: print tree id in debugdata in proc to be able to help logging (bsc#1144333).
- smb3: query inode number on open via create context (bsc#1144333).
- smb3: remove noisy warning message on mount (bsc#1129664, bsc#1144333).
- smb3: remove per-session operations from per-tree connection stats (bsc#1144333).
- smb3: rename encryption_required to smb3_encryption_required (bsc#1144333).
- smb3: request more credits on normal (non-large read/write) ops (bsc#1144333).
- smb3: request more credits on tree connect (bsc#1144333).
- smb3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (bsc#1144333).
- smb3: send CAP_DFS capability during session setup (bsc#1144333).
- smb3: send backup intent on compounded query info (bsc#1144333).
- smb3: show number of current open files in /proc/fs/cifs/Stats (bsc#1144333).
- smb3: simplify code by removing CONFIG_CIFS_SMB311 (bsc#1051510, bsc#1144333).
- smb3: smbdirect no longer experimental (bsc#1144333).
- smb3: snapshot mounts are read-only and make sure info is displayable about the mount (bsc#1144333).
- smb3: track the instance of each session for debugging (bsc#1144333).
- smb3: trivial cleanup to smb2ops.c (bsc#1144333).
- smb3: update comment to clarify enumerating snapshots (bsc#1144333).
- smb3: update default requested iosize to 4MB from 1MB for recent dialects (bsc#1144333).
- smb: Add vers=3.0.2 as a valid option for SMBv3.0.2 (bsc#1144333).
- smb: Cleanup some minor endian issues in smb3 rdma (bsc#1144333).
- smb: Do not log confusing message on reconnect by default (bsc#1129664, bsc#1144333).
- smb: Do not log expected error on DFS referral request (bsc#1051510, bsc#1144333).
- smb: Fix SMB3.1.1 guest authentication to Samba (bsc#1085536, bsc#1144333).
- smb: Fix encryption labels and lengths for SMB3.1.1 (bsc#1085536, bsc#1144333).
- smb: Fix match_server check to allow for auto dialect negotiate (bsc#1144333).
- smb: Fix warning messages when mounting to older servers (bsc#1144333).
- smb: SMB3.1.1 dialect is no longer experimental (bsc#1051510, bsc#1144333).
- smb: SMB3.1.1: Add GCM crypto to the encrypt and decrypt functions (bsc#1144333).
- smb: SMB311: Fix reconnect (bsc#1051510, bsc#1144333).
- smb: SMB311: Improve checking of negotiate security contexts (bsc#1051510, bsc#1144333).
- smb: Tree connect for SMB3.1.1 must be signed for non-encrypted shares (bsc#1051510, bsc#1144333).
- smb: Validate negotiate (to protect against downgrade) even if signing off (bsc#1085536, bsc#1144333).
- smb: fix leak of validate negotiate info response buffer (bsc#1064597, bsc#1144333).
- smb: fix validate negotiate info uninitialised memory use (bsc#1064597, bsc#1144333).
- smbd: Make upper layer decide when to destroy the transport (bsc#1144333).
- smpboot: Place the __percpu annotation correctly (git fixes).
- soc: rockchip: power-domain: Add a sanity check on pd-&gt;num_clks (bsc#1144718,bsc#1144813).
- soc: rockchip: power-domain: Use of_clk_get_parent_count() instead of open coding (bsc#1144718,bsc#1144813).
- soc: rockchip: power-domain: use clk_bulk APIs (bsc#1144718,bsc#1144813).
- sound: fix a memory leak bug (bsc#1051510).
- spi: bcm2835aux: fix corruptions for longer spi transfers (bsc#1051510).
- spi: bcm2835aux: remove dangerous uncontrolled read of fifo (bsc#1051510).
- spi: bcm2835aux: unifying code between polling and interrupt driven code (bsc#1051510).
- st21nfca_connectivity_event_received: null check the allocation (bsc#1051510).
- st_nci_hci_connectivity_event_received: null check the allocation (bsc#1051510).
- staging: comedi: dt3000: Fix rounding up of timer divisor (bsc#1051510).
- staging: comedi: dt3000: Fix signed integer overflow 'divider * base' (bsc#1051510).
- staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work (bsc#1111666).
- supported.conf: Add missing modules (bsc#1066369).
- supported.conf: Remove duplicate drivers/ata/libahci_platform
- supported.conf: Remove duplicate entries
- supported.conf: Sort alphabetically, align comments.
- supported.conf: Sort alphabetically, align comments.
- tcp: Reset bytes_acked and bytes_received when disconnecting (networking-stable-19_07_25).
- test_firmware: fix a memory leak bug (bsc#1051510).
- tipc: change to use register_pernet_device (networking-stable-19_07_02).
- tools: bpftool: close prog FD before exit on showing a single program (bsc#1109837).
- tools: bpftool: fix error message (prog -&gt; object) (bsc#1109837).
- tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete (bsc#1082555).
- tpm: Fix Tpm 1.2 Shutdown sequence to prevent future TPM operations (bsc#1082555).
- tpm: Fix off-by-one when reading binary_bios_measurements (bsc#1082555).
- tpm: Unify the send callback behaviour (bsc#1082555).
- tpm: vtpm_proxy: Suppress error logging when in closed state (bsc#1082555).
- tracing: Fix header include guards in trace event headers (bsc#1144474).
- tracing: store path instead of inode (bsc#1120046, bsc#1146141).
- treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 231 (bsc#1144333).
- tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop (bsc#1051510).
- tty/serial: digicolor: Fix digicolor-usart already registered warning (bsc#1051510).
- tty: max310x: Fix invalid baudrate divisors calculator (bsc#1051510).
- tty: serial: msm_serial: avoid system lockup condition (bsc#1051510).
- tua6100: Avoid build warnings (bsc#1051510).
- tun: mark small packets as owned by the tap sock (bsc#1109837).
- tun: wake up waitqueues after IFF_UP is set (networking-stable-19_07_02).
- udf: Fix incorrect final NOT_ALLOCATED (hole) extent length (bsc#1148617).
- update internal version number for cifs.ko (bsc#1144333).
- usb-storage: Add new JMS567 revision to unusual_devs (bsc#1051510).
- usb: CDC: fix sanity checks in CDC union parser (bsc#1142635).
- usb: Handle USB3 remote wakeup for Lpm enabled devices correctly (bsc#1051510).
- usb: cdc-acm: make sure a refcount is taken early enough (bsc#1142635).
- usb: cdc-wdm: fix race between write and disconnect due to flag abuse (bsc#1051510).
- usb: chipidea: udc: do not do hardware access if gadget has stopped (bsc#1051510).
- usb: core: Fix races in character device registration and deregistraion (bsc#1051510).
- usb: core: hub: Disable hub-initiated U1/U2 (bsc#1051510).
- usb: gadget: composite: Clear 'suspended' on reset/disconnect (bsc#1051510).
- usb: gadget: udc: renesas_usb3: Fix sysfs interface of 'role' (bsc#1142635).
- usb: host: fotg2: restart hcd after port reset (bsc#1051510).
- usb: host: ohci: fix a race condition between shutdown and irq (bsc#1051510).
- usb: host: xhci-rcar: Fix timeout in xhci_suspend() (bsc#1051510).
- usb: host: xhci: rcar: Fix typo in compatible string matching (bsc#1051510).
- usb: iowarrior: fix deadlock on disconnect (bsc#1051510).
- usb: serial: option: Add Motorola modem UARTs (bsc#1051510).
- usb: serial: option: Add support for ZTE MF871A (bsc#1051510).
- usb: serial: option: add D-Link DWM-222 device ID (bsc#1051510).
- usb: serial: option: add the BroadMobi BM818 card (bsc#1051510).
- usb: storage: ums-realtek: Update module parameter description for auto_delink_en (bsc#1051510).
- usb: storage: ums-realtek: Whitelist auto-delink support (bsc#1051510).
- usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests (bsc#1111666).
- usb: typec: tcpm: free log buf memory when remove debug file (bsc#1111666).
- usb: typec: tcpm: remove tcpm dir if no children (bsc#1111666).
- usb: usbfs: fix double-free of usb memory upon submiturb error (bsc#1051510).
- usb: wusbcore: fix unbalanced get/put cluster_id (bsc#1051510).
- usb: yurex: Fix use-after-free in yurex_delete (bsc#1051510).
- vfs: fix page locking deadlocks when deduping files (bsc#1148619).
- virtio/s390: fix race on airq_areas (bsc#1145357).
- vmci: Release resource if the work is already queued (bsc#1051510).
- vrf: make sure skb-&gt;data contains ip header to make routing (networking-stable-19_07_25).
- watchdog: bcm2835_wdt: Fix module autoload (bsc#1051510).
- watchdog: core: fix null pointer dereference when releasing cdev (bsc#1051510).
- watchdog: f71808e_wdt: fix F81866 bit operation (bsc#1051510).
- watchdog: fix compile time error of pretimeout governors (bsc#1051510).
- wimax/i2400m: fix a memory leak bug (bsc#1051510).
- x86/asm: Remove dead __GNUC__ conditionals (bsc#1112178).
- x86/boot: Fix memory leak in default_get_smp_config() (bsc#1114279).
- x86/dma: Get rid of iommu_pass_through (bsc#1136039).
- x86/entry/64/compat: Fix stack switching for XEN PV (bsc#1108382).
- x86/microcode: Fix the microcode load on CPU hotplug for real (bsc#1114279).
- x86/mm: Check for pfn instead of page in vmalloc_sync_one() (bsc#1118689).
- x86/mm: Sync also unmappings in vmalloc_sync_all() (bsc#1118689).
- x86/resctrl: Prevent NULL pointer dereference when local MBM is disabled (bsc#1112178).
- x86/speculation/mds: Apply more accurate check on hypervisor platform (bsc#1114279).
- x86/speculation: Allow guests to use SSBD even if host does not (bsc#1114279).
- x86/unwind: Add hardcoded ORC entry for NULL (bsc#1114279).
- x86/unwind: Handle NULL pointer calls better in frame unwinder (bsc#1114279).
- xdp: unpin xdp umem pages in error path (bsc#1109837).
- xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() (bsc#1065600).
- xfrm: Fix NULL pointer dereference in xfrm_input when skb_dst_force clears the dst_entry (bsc#1143300).
- xfrm: Fix NULL pointer dereference when skb_dst_force clears the dst_entry (bsc#1143300).
- xfrm: Fix bucket count reported to userspace (bsc#1143300).
- xfrm: Fix error return code in xfrm_output_one() (bsc#1143300).
- xfs: do not crash on null attr fork xfs_bmapi_read (bsc#1148035).
- xfs: do not trip over uninitialized buffer on extent read of corrupted inode (bsc#1149053).
- xfs: dump transaction usage details on log reservation overrun (bsc#1145235).
- xfs: eliminate duplicate icreate tx reservation functions (bsc#1145235).
- xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (bsc#1148032).
- xfs: fix semicolon.cocci warnings (bsc#1145235).
- xfs: fix up agi unlinked list reservations (bsc#1145235).
- xfs: include an allocfree res for inobt modifications (bsc#1145235).
- xfs: include inobt buffers in ifree tx log reservation (bsc#1145235).
- xfs: print transaction log reservation on overrun (bsc#1145235).
- xfs: refactor inode chunk alloc/free tx reservation (bsc#1145235).
- xfs: refactor xlog_cil_insert_items() to facilitate transaction dump (bsc#1145235).
- xfs: remove more ondisk directory corruption asserts (bsc#1148034).
- xfs: separate shutdown from ticket reservation print helper (bsc#1145235).
- xfs: truncate transaction does not modify the inobt (bsc#1145235).
- {nl,mac}80211: fix interface combinations on crypto controlled devices (bsc#1111666).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-20"/>
	<updated date="2019-09-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1047238">SUSE bug 1047238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050911">SUSE bug 1050911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054914">SUSE bug 1054914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056686">SUSE bug 1056686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060662">SUSE bug 1060662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061843">SUSE bug 1061843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064597">SUSE bug 1064597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064701">SUSE bug 1064701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066369">SUSE bug 1066369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071009">SUSE bug 1071009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071306">SUSE bug 1071306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078248">SUSE bug 1078248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085536">SUSE bug 1085536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085539">SUSE bug 1085539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086103">SUSE bug 1086103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087092">SUSE bug 1087092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090734">SUSE bug 1090734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091171">SUSE bug 1091171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093205">SUSE bug 1093205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102097">SUSE bug 1102097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104902">SUSE bug 1104902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106061">SUSE bug 1106061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106284">SUSE bug 1106284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106434">SUSE bug 1106434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108382">SUSE bug 1108382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112894">SUSE bug 1112894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112899">SUSE bug 1112899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112902">SUSE bug 1112902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112903">SUSE bug 1112903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112905">SUSE bug 1112905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112906">SUSE bug 1112906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112907">SUSE bug 1112907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114542">SUSE bug 1114542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118689">SUSE bug 1118689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119086">SUSE bug 1119086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120046">SUSE bug 1120046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120876">SUSE bug 1120876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120902">SUSE bug 1120902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123105">SUSE bug 1123105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123959">SUSE bug 1123959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124370">SUSE bug 1124370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129424">SUSE bug 1129424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129519">SUSE bug 1129519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129664">SUSE bug 1129664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131107">SUSE bug 1131107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131281">SUSE bug 1131281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131489">SUSE bug 1131489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131565">SUSE bug 1131565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134291">SUSE bug 1134291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134476">SUSE bug 1134476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134881">SUSE bug 1134881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134882">SUSE bug 1134882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135219">SUSE bug 1135219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135897">SUSE bug 1135897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135990">SUSE bug 1135990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136039">SUSE bug 1136039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136261">SUSE bug 1136261</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136346">SUSE bug 1136346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136349">SUSE bug 1136349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136352">SUSE bug 1136352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136496">SUSE bug 1136496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136498">SUSE bug 1136498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136502">SUSE bug 1136502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136682">SUSE bug 1136682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137322">SUSE bug 1137322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137323">SUSE bug 1137323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137884">SUSE bug 1137884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138099">SUSE bug 1138099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138100">SUSE bug 1138100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138539">SUSE bug 1138539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139020">SUSE bug 1139020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139021">SUSE bug 1139021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139101">SUSE bug 1139101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139500">SUSE bug 1139500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140012">SUSE bug 1140012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140426">SUSE bug 1140426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140487">SUSE bug 1140487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141340">SUSE bug 1141340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141450">SUSE bug 1141450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141543">SUSE bug 1141543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141554">SUSE bug 1141554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142019">SUSE bug 1142019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142076">SUSE bug 1142076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142109">SUSE bug 1142109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142117">SUSE bug 1142117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142118">SUSE bug 1142118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142119">SUSE bug 1142119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142496">SUSE bug 1142496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142541">SUSE bug 1142541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142701">SUSE bug 1142701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142857">SUSE bug 1142857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143300">SUSE bug 1143300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143331">SUSE bug 1143331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143466">SUSE bug 1143466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143738">SUSE bug 1143738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143765">SUSE bug 1143765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143841">SUSE bug 1143841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143843">SUSE bug 1143843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143962">SUSE bug 1143962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144123">SUSE bug 1144123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144375">SUSE bug 1144375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144474">SUSE bug 1144474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144518">SUSE bug 1144518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144582">SUSE bug 1144582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144718">SUSE bug 1144718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144813">SUSE bug 1144813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144880">SUSE bug 1144880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144886">SUSE bug 1144886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144912">SUSE bug 1144912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144920">SUSE bug 1144920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144979">SUSE bug 1144979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145010">SUSE bug 1145010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145018">SUSE bug 1145018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145051">SUSE bug 1145051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145059">SUSE bug 1145059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145189">SUSE bug 1145189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145235">SUSE bug 1145235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145256">SUSE bug 1145256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145300">SUSE bug 1145300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145302">SUSE bug 1145302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145357">SUSE bug 1145357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145388">SUSE bug 1145388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145389">SUSE bug 1145389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145390">SUSE bug 1145390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145391">SUSE bug 1145391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145392">SUSE bug 1145392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145393">SUSE bug 1145393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145394">SUSE bug 1145394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145395">SUSE bug 1145395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145396">SUSE bug 1145396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145397">SUSE bug 1145397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145408">SUSE bug 1145408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145409">SUSE bug 1145409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145446">SUSE bug 1145446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145661">SUSE bug 1145661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145678">SUSE bug 1145678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145687">SUSE bug 1145687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145920">SUSE bug 1145920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145922">SUSE bug 1145922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145934">SUSE bug 1145934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145937">SUSE bug 1145937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145940">SUSE bug 1145940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145941">SUSE bug 1145941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145942">SUSE bug 1145942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145946">SUSE bug 1145946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146074">SUSE bug 1146074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146084">SUSE bug 1146084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146141">SUSE bug 1146141</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146163">SUSE bug 1146163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146215">SUSE bug 1146215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146285">SUSE bug 1146285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146346">SUSE bug 1146346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146351">SUSE bug 1146351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146352">SUSE bug 1146352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146361">SUSE bug 1146361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146368">SUSE bug 1146368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146376">SUSE bug 1146376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146378">SUSE bug 1146378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146381">SUSE bug 1146381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146391">SUSE bug 1146391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146399">SUSE bug 1146399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146413">SUSE bug 1146413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146425">SUSE bug 1146425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146516">SUSE bug 1146516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146524">SUSE bug 1146524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146526">SUSE bug 1146526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146529">SUSE bug 1146529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146531">SUSE bug 1146531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146543">SUSE bug 1146543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146547">SUSE bug 1146547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146550">SUSE bug 1146550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146575">SUSE bug 1146575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146589">SUSE bug 1146589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146678">SUSE bug 1146678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146938">SUSE bug 1146938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148031">SUSE bug 1148031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148032">SUSE bug 1148032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148033">SUSE bug 1148033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148034">SUSE bug 1148034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148035">SUSE bug 1148035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148093">SUSE bug 1148093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148133">SUSE bug 1148133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148192">SUSE bug 1148192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148196">SUSE bug 1148196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148198">SUSE bug 1148198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148202">SUSE bug 1148202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148219">SUSE bug 1148219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148297">SUSE bug 1148297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148303">SUSE bug 1148303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148308">SUSE bug 1148308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148363">SUSE bug 1148363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148379">SUSE bug 1148379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148394">SUSE bug 1148394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148527">SUSE bug 1148527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148570">SUSE bug 1148570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148574">SUSE bug 1148574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148616">SUSE bug 1148616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148617">SUSE bug 1148617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148619">SUSE bug 1148619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148698">SUSE bug 1148698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148859">SUSE bug 1148859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149053">SUSE bug 1149053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149083">SUSE bug 1149083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149104">SUSE bug 1149104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149105">SUSE bug 1149105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149106">SUSE bug 1149106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149197">SUSE bug 1149197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149214">SUSE bug 1149214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149224">SUSE bug 1149224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149325">SUSE bug 1149325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149376">SUSE bug 1149376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149413">SUSE bug 1149413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149418">SUSE bug 1149418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149424">SUSE bug 1149424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149522">SUSE bug 1149522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149527">SUSE bug 1149527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149539">SUSE bug 1149539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149552">SUSE bug 1149552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149591">SUSE bug 1149591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149602">SUSE bug 1149602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149612">SUSE bug 1149612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149626">SUSE bug 1149626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149652">SUSE bug 1149652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149713">SUSE bug 1149713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149940">SUSE bug 1149940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149976">SUSE bug 1149976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150025">SUSE bug 1150025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150033">SUSE bug 1150033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150112">SUSE bug 1150112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150562">SUSE bug 1150562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150727">SUSE bug 1150727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150860">SUSE bug 1150860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150861">SUSE bug 1150861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150933">SUSE bug 1150933</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-18551/">CVE-2017-18551</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20976/">CVE-2018-20976</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-21008/">CVE-2018-21008</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10207/">CVE-2019-10207</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14814/">CVE-2019-14814</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14815/">CVE-2019-14815</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14816/">CVE-2019-14816</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14835/">CVE-2019-14835</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15030/">CVE-2019-15030</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15031/">CVE-2019-15031</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15090/">CVE-2019-15090</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15098/">CVE-2019-15098</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15099/">CVE-2019-15099</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15117/">CVE-2019-15117</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15118/">CVE-2019-15118</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15211/">CVE-2019-15211</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-15212/">CVE-2019-15212</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15214/">CVE-2019-15214</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15215/">CVE-2019-15215</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15216/">CVE-2019-15216</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15217/">CVE-2019-15217</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15218/">CVE-2019-15218</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15219/">CVE-2019-15219</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15220/">CVE-2019-15220</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15221/">CVE-2019-15221</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15222/">CVE-2019-15222</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15239/">CVE-2019-15239</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15290/">CVE-2019-15290</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15292/">CVE-2019-15292</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15538/">CVE-2019-15538</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15666/">CVE-2019-15666</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15902/">CVE-2019-15902</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15917/">CVE-2019-15917</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15919/">CVE-2019-15919</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15920/">CVE-2019-15920</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15921/">CVE-2019-15921</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15924/">CVE-2019-15924</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15926/">CVE-2019-15926</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-15927/">CVE-2019-15927</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9456/">CVE-2019-9456</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491665" comment="kernel-default-4.12.14-197.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491666" comment="kernel-default-base-4.12.14-197.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491667" comment="kernel-default-devel-4.12.14-197.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491668" comment="kernel-default-man-4.12.14-197.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491669" comment="kernel-devel-4.12.14-197.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491670" comment="kernel-macros-4.12.14-197.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491671" comment="kernel-zfcpdump-4.12.14-197.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137764" version="1" class="patch">
	<metadata>
		<title>Security update for nmap (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1135350" ref_url="https://bugzilla.suse.com/1135350" source="BUGZILLA"/>
		<reference ref_id="1148742" ref_url="https://bugzilla.suse.com/1148742" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18594" ref_url="https://www.suse.com/security/cve/CVE-2017-18594/" source="CVE"/>
		<reference ref_id="CVE-2018-15173" ref_url="https://www.suse.com/security/cve/CVE-2018-15173/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2425-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005947.html" source="SUSE-SU"/>
		<description>
This update for nmap fixes the following issues:

Security issue fixed:

- CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. (bsc#1148742)

Non-security issue fixed:

- Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173. (bsc#1135350)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-20"/>
	<updated date="2019-09-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1135350">SUSE bug 1135350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148742">SUSE bug 1148742</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18594/">CVE-2017-18594</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-15173/">CVE-2018-15173</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490495" comment="nmap-7.70-3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137765" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1148931" ref_url="https://bugzilla.suse.com/1148931" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8595" ref_url="https://www.suse.com/security/cve/CVE-2019-8595/" source="CVE"/>
		<reference ref_id="CVE-2019-8607" ref_url="https://www.suse.com/security/cve/CVE-2019-8607/" source="CVE"/>
		<reference ref_id="CVE-2019-8615" ref_url="https://www.suse.com/security/cve/CVE-2019-8615/" source="CVE"/>
		<reference ref_id="CVE-2019-8644" ref_url="https://www.suse.com/security/cve/CVE-2019-8644/" source="CVE"/>
		<reference ref_id="CVE-2019-8649" ref_url="https://www.suse.com/security/cve/CVE-2019-8649/" source="CVE"/>
		<reference ref_id="CVE-2019-8658" ref_url="https://www.suse.com/security/cve/CVE-2019-8658/" source="CVE"/>
		<reference ref_id="CVE-2019-8666" ref_url="https://www.suse.com/security/cve/CVE-2019-8666/" source="CVE"/>
		<reference ref_id="CVE-2019-8669" ref_url="https://www.suse.com/security/cve/CVE-2019-8669/" source="CVE"/>
		<reference ref_id="CVE-2019-8671" ref_url="https://www.suse.com/security/cve/CVE-2019-8671/" source="CVE"/>
		<reference ref_id="CVE-2019-8672" ref_url="https://www.suse.com/security/cve/CVE-2019-8672/" source="CVE"/>
		<reference ref_id="CVE-2019-8673" ref_url="https://www.suse.com/security/cve/CVE-2019-8673/" source="CVE"/>
		<reference ref_id="CVE-2019-8676" ref_url="https://www.suse.com/security/cve/CVE-2019-8676/" source="CVE"/>
		<reference ref_id="CVE-2019-8677" ref_url="https://www.suse.com/security/cve/CVE-2019-8677/" source="CVE"/>
		<reference ref_id="CVE-2019-8678" ref_url="https://www.suse.com/security/cve/CVE-2019-8678/" source="CVE"/>
		<reference ref_id="CVE-2019-8679" ref_url="https://www.suse.com/security/cve/CVE-2019-8679/" source="CVE"/>
		<reference ref_id="CVE-2019-8680" ref_url="https://www.suse.com/security/cve/CVE-2019-8680/" source="CVE"/>
		<reference ref_id="CVE-2019-8681" ref_url="https://www.suse.com/security/cve/CVE-2019-8681/" source="CVE"/>
		<reference ref_id="CVE-2019-8683" ref_url="https://www.suse.com/security/cve/CVE-2019-8683/" source="CVE"/>
		<reference ref_id="CVE-2019-8684" ref_url="https://www.suse.com/security/cve/CVE-2019-8684/" source="CVE"/>
		<reference ref_id="CVE-2019-8686" ref_url="https://www.suse.com/security/cve/CVE-2019-8686/" source="CVE"/>
		<reference ref_id="CVE-2019-8687" ref_url="https://www.suse.com/security/cve/CVE-2019-8687/" source="CVE"/>
		<reference ref_id="CVE-2019-8688" ref_url="https://www.suse.com/security/cve/CVE-2019-8688/" source="CVE"/>
		<reference ref_id="CVE-2019-8689" ref_url="https://www.suse.com/security/cve/CVE-2019-8689/" source="CVE"/>
		<reference ref_id="CVE-2019-8690" ref_url="https://www.suse.com/security/cve/CVE-2019-8690/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Security issues fixed:

- CVE-2019-8673, CVE-2019-8678, CVE-2019-8686, CVE-2019-8683, CVE-2019-8671,
  CVE-2019-8595, CVE-2019-8684, CVE-2019-8681, CVE-2019-8615, CVE-2019-8689,
  CVE-2019-8680, CVE-2019-8672, CVE-2019-8676, CVE-2019-8666, CVE-2019-8644,
  CVE-2019-8658, CVE-2019-8690, CVE-2019-8688, CVE-2019-8649, CVE-2019-8679,
  CVE-2019-8687, CVE-2019-8669, CVE-2019-8677, CVE-2019-8607 (bsc#1148931).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-23"/>
	<updated date="2019-09-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8595/">CVE-2019-8595</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8607/">CVE-2019-8607</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8615/">CVE-2019-8615</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8644/">CVE-2019-8644</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8649/">CVE-2019-8649</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8658/">CVE-2019-8658</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8666/">CVE-2019-8666</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8669/">CVE-2019-8669</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8671/">CVE-2019-8671</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8672/">CVE-2019-8672</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8673/">CVE-2019-8673</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8676/">CVE-2019-8676</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8677/">CVE-2019-8677</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8678/">CVE-2019-8678</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8679/">CVE-2019-8679</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8680/">CVE-2019-8680</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8681/">CVE-2019-8681</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8683/">CVE-2019-8683</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8684/">CVE-2019-8684</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8686/">CVE-2019-8686</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8687/">CVE-2019-8687</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8688/">CVE-2019-8688</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8689/">CVE-2019-8689</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8690/">CVE-2019-8690</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490496" comment="libjavascriptcoregtk-4_0-18-2.24.4-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490497" comment="libwebkit2gtk-4_0-37-2.24.4-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490498" comment="libwebkit2gtk3-lang-2.24.4-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490499" comment="webkit2gtk-4_0-injected-bundles-2.24.4-3.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137766" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1149429" ref_url="https://bugzilla.suse.com/1149429" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15903" ref_url="https://www.suse.com/security/cve/CVE-2019-15903/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2429-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005950.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

Security issues fixed:

- CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. (bsc#1149429)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-23"/>
	<updated date="2019-09-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1149429">SUSE bug 1149429</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15903/">CVE-2019-15903</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490500" comment="expat-2.2.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490501" comment="libexpat-devel-2.2.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490502" comment="libexpat1-2.2.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490503" comment="libexpat1-32bit-2.2.5-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137767" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1129180" ref_url="https://bugzilla.suse.com/1129180" source="BUGZILLA"/>
		<reference ref_id="1129186" ref_url="https://bugzilla.suse.com/1129186" source="BUGZILLA"/>
		<reference ref_id="1134156" ref_url="https://bugzilla.suse.com/1134156" source="BUGZILLA"/>
		<reference ref_id="1140359" ref_url="https://bugzilla.suse.com/1140359" source="BUGZILLA"/>
		<reference ref_id="1146882" ref_url="https://bugzilla.suse.com/1146882" source="BUGZILLA"/>
		<reference ref_id="1146884" ref_url="https://bugzilla.suse.com/1146884" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12973" ref_url="https://www.suse.com/security/cve/CVE-2019-12973/" source="CVE"/>
		<reference ref_id="CVE-2019-14811" ref_url="https://www.suse.com/security/cve/CVE-2019-14811/" source="CVE"/>
		<reference ref_id="CVE-2019-14812" ref_url="https://www.suse.com/security/cve/CVE-2019-14812/" source="CVE"/>
		<reference ref_id="CVE-2019-14813" ref_url="https://www.suse.com/security/cve/CVE-2019-14813/" source="CVE"/>
		<reference ref_id="CVE-2019-14817" ref_url="https://www.suse.com/security/cve/CVE-2019-14817/" source="CVE"/>
		<reference ref_id="CVE-2019-3835" ref_url="https://www.suse.com/security/cve/CVE-2019-3835/" source="CVE"/>
		<reference ref_id="CVE-2019-3839" ref_url="https://www.suse.com/security/cve/CVE-2019-3839/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005963.html" source="SUSE-SU"/>
		<description>
This update for ghostscript fixes the following issues:

Security issues fixed:

- CVE-2019-3835: Fixed an unauthorized file system access caused by an available superexec operator. (bsc#1129180)
- CVE-2019-3839: Fixed an unauthorized file system access caused by available privileged operators. (bsc#1134156)
- CVE-2019-12973: Fixed a denial-of-service vulnerability in the OpenJPEG function opj_t1_encode_cblks. (bsc#1140359)
- CVE-2019-14811: Fixed a safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator. (bsc#1146882)
- CVE-2019-14812: Fixed a safer mode bypass by .forceput exposure in setuserparams. (bsc#1146882)
- CVE-2019-14813: Fixed a safer mode bypass by .forceput exposure in setsystemparams. (bsc#1146882)
- CVE-2019-14817: Fixed a safer mode bypass by .forceput exposure in .pdfexectoken and other procedures. (bsc#1146884)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-25"/>
	<updated date="2019-09-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1129180">SUSE bug 1129180</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129186">SUSE bug 1129186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134156">SUSE bug 1134156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140359">SUSE bug 1140359</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146882">SUSE bug 1146882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146884">SUSE bug 1146884</bugzilla>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-12973/">CVE-2019-12973</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14811/">CVE-2019-14811</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14812/">CVE-2019-14812</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14813/">CVE-2019-14813</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14817/">CVE-2019-14817</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3835/">CVE-2019-3835</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-3839/">CVE-2019-3839</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490504" comment="ghostscript-9.27-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490505" comment="ghostscript-devel-9.27-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490506" comment="ghostscript-x11-9.27-3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137768" version="1" class="patch">
	<metadata>
		<title>Security update for python-numpy (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1149203" ref_url="https://bugzilla.suse.com/1149203" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6446" ref_url="https://www.suse.com/security/cve/CVE-2019-6446/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2462-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006031.html" source="SUSE-SU"/>
		<description>
This update for python-numpy fixes the following issues:

Non-security issues fixed:

- Updated to upstream version 1.16.1. (bsc#1149203) (jsc#SLE-8532)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-18"/>
	<updated date="2019-10-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1149203">SUSE bug 1149203</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6446/">CVE-2019-6446</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490509" comment="python3-numpy-1.16.1-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490510" comment="python3-numpy-devel-1.16.1-4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137769" version="1" class="patch">
	<metadata>
		<title>Security update for nghttp2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1112438" ref_url="https://bugzilla.suse.com/1112438" source="BUGZILLA"/>
		<reference ref_id="1125689" ref_url="https://bugzilla.suse.com/1125689" source="BUGZILLA"/>
		<reference ref_id="1134616" ref_url="https://bugzilla.suse.com/1134616" source="BUGZILLA"/>
		<reference ref_id="1146182" ref_url="https://bugzilla.suse.com/1146182" source="BUGZILLA"/>
		<reference ref_id="1146184" ref_url="https://bugzilla.suse.com/1146184" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9511" ref_url="https://www.suse.com/security/cve/CVE-2019-9511/" source="CVE"/>
		<reference ref_id="CVE-2019-9513" ref_url="https://www.suse.com/security/cve/CVE-2019-9513/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005969.html" source="SUSE-SU"/>
		<description>
This update for nghttp2 fixes the following issues:

Security issues fixed:

- CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service (bsc#1146184).
- CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service (bsc#11461).

Bug fixes and enhancements:

- Fixed mistake in spec file (bsc#1125689)
- Fixed build issue with boost 1.70.0 (bsc#1134616)
- Feature: Add W&amp;S module (FATE#326776, bsc#1112438)
  		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-26"/>
	<updated date="2019-09-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1112438">SUSE bug 1112438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125689">SUSE bug 1125689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134616">SUSE bug 1134616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146182">SUSE bug 1146182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146184">SUSE bug 1146184</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9511/">CVE-2019-9511</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9513/">CVE-2019-9513</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490515" comment="libnghttp2-14-1.39.2-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490516" comment="libnghttp2-14-32bit-1.39.2-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490517" comment="libnghttp2-devel-1.39.2-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490518" comment="libnghttp2_asio-devel-1.39.2-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490519" comment="libnghttp2_asio1-1.39.2-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137770" version="1" class="patch">
	<metadata>
		<title>Security update for u-boot (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1144656" ref_url="https://bugzilla.suse.com/1144656" source="BUGZILLA"/>
		<reference ref_id="1144675" ref_url="https://bugzilla.suse.com/1144675" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13104" ref_url="https://www.suse.com/security/cve/CVE-2019-13104/" source="CVE"/>
		<reference ref_id="CVE-2019-13106" ref_url="https://www.suse.com/security/cve/CVE-2019-13106/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005968.html" source="SUSE-SU"/>
		<description>
This update for u-boot fixes the following issues:

Security issues fixed:

- CVE-2019-13106: Fixed stack buffer overflow via a crafted ext4 filesystem that may lead to code execution (bsc#1144656).
- CVE-2019-13104: Fixed an underflow that could cause memcpy() to overwrite a very large amount of data via a crafted ext4 filesystem (bsc#1144675).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-26"/>
	<updated date="2019-09-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1144656">SUSE bug 1144656</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144675">SUSE bug 1144675</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-13104/">CVE-2019-13104</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-13106/">CVE-2019-13106</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491672" comment="u-boot-rpi3-2019.01-7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491673" comment="u-boot-tools-2019.01-7.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137771" version="1" class="patch">
	<metadata>
		<title>Security update for jasper (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1117507" ref_url="https://bugzilla.suse.com/1117507" source="BUGZILLA"/>
		<reference ref_id="1117508" ref_url="https://bugzilla.suse.com/1117508" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19540" ref_url="https://www.suse.com/security/cve/CVE-2018-19540/" source="CVE"/>
		<reference ref_id="CVE-2018-19541" ref_url="https://www.suse.com/security/cve/CVE-2018-19541/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005981.html" source="SUSE-SU"/>
		<description>
This update for jasper fixes the following issues:

Security issues fixed: 

- CVE-2018-19540: Fixed  a heap based overflow in jas_icctxtdesc_input (bsc#1117508).
- CVE-2018-19541: Fix heap based overread in jas_image_depalettize (bsc#1117507).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-02"/>
	<updated date="2019-10-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1117507">SUSE bug 1117507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117508">SUSE bug 1117508</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-19540/">CVE-2018-19540</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19541/">CVE-2018-19541</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490526" comment="libjasper4-2.0.14-3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137772" version="1" class="patch">
	<metadata>
		<title>Security update for libseccomp (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1082318" ref_url="https://bugzilla.suse.com/1082318" source="BUGZILLA"/>
		<reference ref_id="1128828" ref_url="https://bugzilla.suse.com/1128828" source="BUGZILLA"/>
		<reference ref_id="1142614" ref_url="https://bugzilla.suse.com/1142614" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9893" ref_url="https://www.suse.com/security/cve/CVE-2019-9893/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2517-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005978.html" source="SUSE-SU"/>
		<description>
This update for libseccomp fixes the following issues:

Security issues fixed:

- CVE-2019-9893: An incorrect generation of syscall filters in libseccomp was fixed (bsc#1128828)

libseccomp was updated to new upstream release 2.4.1:

- Fix a BPF generation bug where the optimizer mistakenly
  identified duplicate BPF code blocks.

libseccomp was updated to 2.4.0 (bsc#1128828 CVE-2019-9893):

- Update the syscall table for Linux v5.0-rc5
- Added support for the SCMP_ACT_KILL_PROCESS action
- Added support for the SCMP_ACT_LOG action and SCMP_FLTATR_CTL_LOG attribute
- Added explicit 32-bit (SCMP_AX_32(...)) and 64-bit (SCMP_AX_64(...)) argument comparison macros to help protect against unexpected sign extension
- Added support for the parisc and parisc64 architectures
- Added the ability to query and set the libseccomp API level via seccomp_api_get(3) and seccomp_api_set(3)
- Return -EDOM on an endian mismatch when adding an architecture to a filter
- Renumber the pseudo syscall number for subpage_prot() so it no longer conflicts with spu_run()
- Fix PFC generation when a syscall is prioritized, but no rule exists
- Numerous fixes to the seccomp-bpf filter generation code
- Switch our internal hashing function to jhash/Lookup3 to MurmurHash3
- Numerous tests added to the included test suite, coverage now at ~92%
- Update our Travis CI configuration to use Ubuntu 16.04
- Numerous documentation fixes and updates

libseccomp was updated to release 2.3.3:

- Updated the syscall table for Linux v4.15-rc7

		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-02"/>
	<updated date="2019-10-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1082318">SUSE bug 1082318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128828">SUSE bug 1128828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142614">SUSE bug 1142614</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9893/">CVE-2019-9893</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490527" comment="libseccomp-devel-2.4.1-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490528" comment="libseccomp2-2.4.1-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490529" comment="libseccomp2-32bit-2.4.1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137773" version="1" class="patch">
	<metadata>
		<title>Security update for sqlite3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1150137" ref_url="https://bugzilla.suse.com/1150137" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16168" ref_url="https://www.suse.com/security/cve/CVE-2019-16168/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2533-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005985.html" source="SUSE-SU"/>
		<description>
This update for sqlite3 fixes the following issues:

Security issue fixed:

- CVE-2019-16168: Fixed improper validation of sqlite_stat1 field that could lead to denial of service (bsc#1150137).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-03"/>
	<updated date="2019-10-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1150137">SUSE bug 1150137</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-16168/">CVE-2019-16168</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490530" comment="libsqlite3-0-3.28.0-3.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490531" comment="libsqlite3-0-32bit-3.28.0-3.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490532" comment="sqlite3-3.28.0-3.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490533" comment="sqlite3-devel-3.28.0-3.9.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137774" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1118367" ref_url="https://bugzilla.suse.com/1118367" source="BUGZILLA"/>
		<reference ref_id="1118368" ref_url="https://bugzilla.suse.com/1118368" source="BUGZILLA"/>
		<reference ref_id="1138687" ref_url="https://bugzilla.suse.com/1138687" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6471" ref_url="https://www.suse.com/security/cve/CVE-2019-6471/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005988.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

Security issue fixed:

- CVE-2019-6471: Fixed a reachable assert in dispatch.c. (bsc#1138687)

Non-security issue fixed:

- bind will no longer rely on /etc/insserv.conf (bsc#1118367, bsc#1118368)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-04"/>
	<updated date="2019-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1118367">SUSE bug 1118367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118368">SUSE bug 1118368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138687">SUSE bug 1138687</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6471/">CVE-2019-6471</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490534" comment="bind-devel-9.11.2-12.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490535" comment="bind-utils-9.11.2-12.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490536" comment="libbind9-160-9.11.2-12.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490537" comment="libdns169-9.11.2-12.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490538" comment="libirs-devel-9.11.2-12.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490539" comment="libirs160-9.11.2-12.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490540" comment="libisc166-9.11.2-12.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490541" comment="libisccc160-9.11.2-12.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490542" comment="libisccfg160-9.11.2-12.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490543" comment="liblwres160-9.11.2-12.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490544" comment="python3-bind-9.11.2-12.13.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137775" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1153674" ref_url="https://bugzilla.suse.com/1153674" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14287" ref_url="https://www.suse.com/security/cve/CVE-2019-14287/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2656-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192656-1.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issue:

- CVE-2019-14287: Fixed an issue where a user with sudo privileges 
  that allowed them to run commands with an arbitrary uid, could 
  run commands as root, despite being forbidden to do so in sudoers
  (bsc#1153674).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-14"/>
	<updated date="2019-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153674">SUSE bug 1153674</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14287/">CVE-2019-14287</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490545" comment="sudo-1.8.22-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490546" comment="sudo-devel-1.8.22-4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137776" version="1" class="patch">
	<metadata>
		<title>Security update for dhcp (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1089524" ref_url="https://bugzilla.suse.com/1089524" source="BUGZILLA"/>
		<reference ref_id="1134078" ref_url="https://bugzilla.suse.com/1134078" source="BUGZILLA"/>
		<reference ref_id="1136572" ref_url="https://bugzilla.suse.com/1136572" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6470" ref_url="https://www.suse.com/security/cve/CVE-2019-6470/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2657-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192657-1.html" source="SUSE-SU"/>
		<description>
This update for dhcp fixes the following issues:

Secuirty issue fixed:

- CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078).

Bug fixes:

- Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524).
- Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (bsc#1136572).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-14"/>
	<updated date="2019-10-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1089524">SUSE bug 1089524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134078">SUSE bug 1134078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136572">SUSE bug 1136572</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6470/">CVE-2019-6470</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490547" comment="dhcp-4.3.5-6.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490548" comment="dhcp-client-4.3.5-6.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490549" comment="dhcp-devel-4.3.5-6.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137777" version="1" class="patch">
	<metadata>
		<title>Security update for libpcap (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1153332" ref_url="https://bugzilla.suse.com/1153332" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16301" ref_url="https://www.suse.com/security/cve/CVE-2018-16301/" source="CVE"/>
		<reference ref_id="CVE-2019-15165" ref_url="https://www.suse.com/security/cve/CVE-2019-15165/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2673-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006021.html" source="SUSE-SU"/>
		<description>
This update for libpcap fixes the following issues:

- CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332).
- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-15"/>
	<updated date="2019-10-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153332">SUSE bug 1153332</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16301/">CVE-2018-16301</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15165/">CVE-2019-15165</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490550" comment="libpcap-devel-1.8.1-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490551" comment="libpcap1-1.8.1-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137778" version="1" class="patch">
	<metadata>
		<title>Security update for tcpdump (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1068716" ref_url="https://bugzilla.suse.com/1068716" source="BUGZILLA"/>
		<reference ref_id="1153098" ref_url="https://bugzilla.suse.com/1153098" source="BUGZILLA"/>
		<reference ref_id="1153332" ref_url="https://bugzilla.suse.com/1153332" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-16808" ref_url="https://www.suse.com/security/cve/CVE-2017-16808/" source="CVE"/>
		<reference ref_id="CVE-2018-10103" ref_url="https://www.suse.com/security/cve/CVE-2018-10103/" source="CVE"/>
		<reference ref_id="CVE-2018-10105" ref_url="https://www.suse.com/security/cve/CVE-2018-10105/" source="CVE"/>
		<reference ref_id="CVE-2018-14461" ref_url="https://www.suse.com/security/cve/CVE-2018-14461/" source="CVE"/>
		<reference ref_id="CVE-2018-14462" ref_url="https://www.suse.com/security/cve/CVE-2018-14462/" source="CVE"/>
		<reference ref_id="CVE-2018-14463" ref_url="https://www.suse.com/security/cve/CVE-2018-14463/" source="CVE"/>
		<reference ref_id="CVE-2018-14464" ref_url="https://www.suse.com/security/cve/CVE-2018-14464/" source="CVE"/>
		<reference ref_id="CVE-2018-14465" ref_url="https://www.suse.com/security/cve/CVE-2018-14465/" source="CVE"/>
		<reference ref_id="CVE-2018-14466" ref_url="https://www.suse.com/security/cve/CVE-2018-14466/" source="CVE"/>
		<reference ref_id="CVE-2018-14467" ref_url="https://www.suse.com/security/cve/CVE-2018-14467/" source="CVE"/>
		<reference ref_id="CVE-2018-14468" ref_url="https://www.suse.com/security/cve/CVE-2018-14468/" source="CVE"/>
		<reference ref_id="CVE-2018-14469" ref_url="https://www.suse.com/security/cve/CVE-2018-14469/" source="CVE"/>
		<reference ref_id="CVE-2018-14470" ref_url="https://www.suse.com/security/cve/CVE-2018-14470/" source="CVE"/>
		<reference ref_id="CVE-2018-14879" ref_url="https://www.suse.com/security/cve/CVE-2018-14879/" source="CVE"/>
		<reference ref_id="CVE-2018-14880" ref_url="https://www.suse.com/security/cve/CVE-2018-14880/" source="CVE"/>
		<reference ref_id="CVE-2018-14881" ref_url="https://www.suse.com/security/cve/CVE-2018-14881/" source="CVE"/>
		<reference ref_id="CVE-2018-14882" ref_url="https://www.suse.com/security/cve/CVE-2018-14882/" source="CVE"/>
		<reference ref_id="CVE-2018-16227" ref_url="https://www.suse.com/security/cve/CVE-2018-16227/" source="CVE"/>
		<reference ref_id="CVE-2018-16228" ref_url="https://www.suse.com/security/cve/CVE-2018-16228/" source="CVE"/>
		<reference ref_id="CVE-2018-16229" ref_url="https://www.suse.com/security/cve/CVE-2018-16229/" source="CVE"/>
		<reference ref_id="CVE-2018-16230" ref_url="https://www.suse.com/security/cve/CVE-2018-16230/" source="CVE"/>
		<reference ref_id="CVE-2018-16300" ref_url="https://www.suse.com/security/cve/CVE-2018-16300/" source="CVE"/>
		<reference ref_id="CVE-2018-16301" ref_url="https://www.suse.com/security/cve/CVE-2018-16301/" source="CVE"/>
		<reference ref_id="CVE-2018-16451" ref_url="https://www.suse.com/security/cve/CVE-2018-16451/" source="CVE"/>
		<reference ref_id="CVE-2018-16452" ref_url="https://www.suse.com/security/cve/CVE-2018-16452/" source="CVE"/>
		<reference ref_id="CVE-2019-1010220" ref_url="https://www.suse.com/security/cve/CVE-2019-1010220/" source="CVE"/>
		<reference ref_id="CVE-2019-15166" ref_url="https://www.suse.com/security/cve/CVE-2019-15166/" source="CVE"/>
		<reference ref_id="CVE-2019-15167" ref_url="https://www.suse.com/security/cve/CVE-2019-15167/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006020.html" source="SUSE-SU"/>
		<description>
This update for tcpdump fixes the following issues:

- CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098).
- CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098).
- CVE-2018-10105: Fixed a mishandling of the printing of SMB data (bsc#1153098).
- CVE-2018-14461: Fixed a buffer over-read in print-ldp.c:ldp_tlv_print (bsc#1153098).
- CVE-2018-14462: Fixed a buffer over-read in print-icmp.c:icmp_print (bsc#1153098).
- CVE-2018-14463: Fixed a buffer over-read in print-vrrp.c:vrrp_print (bsc#1153098).
- CVE-2018-14464: Fixed a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs (bsc#1153098).
- CVE-2018-14465: Fixed a buffer over-read in print-rsvp.c:rsvp_obj_print (bsc#1153098).
- CVE-2018-14466: Fixed a buffer over-read in print-rx.c:rx_cache_find (bsc#1153098).
- CVE-2018-14467: Fixed a buffer over-read in print-bgp.c:bgp_capabilities_print (bsc#1153098).
- CVE-2018-14468: Fixed a buffer over-read in print-fr.c:mfr_print (bsc#1153098).
- CVE-2018-14469: Fixed a buffer over-read in print-isakmp.c:ikev1_n_print (bsc#1153098).
- CVE-2018-14470: Fixed a buffer over-read in print-babel.c:babel_print_v2 (bsc#1153098).
- CVE-2018-14879: Fixed a buffer overflow in the command-line argument parser (bsc#1153098).
- CVE-2018-14880: Fixed a buffer over-read in the OSPFv3 parser (bsc#1153098).
- CVE-2018-14881: Fixed a buffer over-read in the BGP parser (bsc#1153098).
- CVE-2018-14882: Fixed a buffer over-read in the ICMPv6 parser (bsc#1153098).
- CVE-2018-16227: Fixed a buffer over-read in the IEEE 802.11 parser in print-802_11.c for the Mesh Flags subfield (bsc#1153098).
- CVE-2018-16228: Fixed a buffer over-read in the HNCP parser (bsc#1153098).
- CVE-2018-16229: Fixed a buffer over-read in the DCCP parser (bsc#1153098).
- CVE-2018-16230: Fixed a buffer over-read in the BGP parser in print-bgp.c:bgp_attr_print (bsc#1153098).
- CVE-2018-16300: Fixed an unlimited recursion in the BGP parser that allowed denial-of-service by stack consumption (bsc#1153098).
- CVE-2018-16301: Fixed a buffer overflow (bsc#1153332 bsc#1153098).
- CVE-2018-16451: Fixed several buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN (bsc#1153098).
- CVE-2018-16452: Fixed a stack exhaustion in smbutil.c:smb_fdata (bsc#1153098).
- CVE-2019-15166: Fixed a bounds check in lmp_print_data_link_subobjs (bsc#1153098).
- CVE-2019-15167: Fixed a vulnerability in VRRP (bsc#1153098).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-15"/>
	<updated date="2019-10-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1068716">SUSE bug 1068716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153098">SUSE bug 1153098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153332">SUSE bug 1153332</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-16808/">CVE-2017-16808</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10103/">CVE-2018-10103</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10105/">CVE-2018-10105</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14461/">CVE-2018-14461</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14462/">CVE-2018-14462</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14463/">CVE-2018-14463</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14464/">CVE-2018-14464</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14465/">CVE-2018-14465</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14466/">CVE-2018-14466</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14467/">CVE-2018-14467</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14468/">CVE-2018-14468</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14469/">CVE-2018-14469</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14470/">CVE-2018-14470</cve>
	<cve impact="low" cvss3="0/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-14879/">CVE-2018-14879</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14880/">CVE-2018-14880</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14881/">CVE-2018-14881</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14882/">CVE-2018-14882</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16227/">CVE-2018-16227</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16228/">CVE-2018-16228</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16229/">CVE-2018-16229</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16230/">CVE-2018-16230</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16300/">CVE-2018-16300</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16301/">CVE-2018-16301</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16451/">CVE-2018-16451</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16452/">CVE-2018-16452</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1010220/">CVE-2019-1010220</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15166/">CVE-2019-15166</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15167/">CVE-2019-15167</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490552" comment="tcpdump-4.9.2-3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137779" version="1" class="patch">
	<metadata>
		<title>Security update for gcc7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1141897" ref_url="https://bugzilla.suse.com/1141897" source="BUGZILLA"/>
		<reference ref_id="1142649" ref_url="https://bugzilla.suse.com/1142649" source="BUGZILLA"/>
		<reference ref_id="1148517" ref_url="https://bugzilla.suse.com/1148517" source="BUGZILLA"/>
		<reference ref_id="1149145" ref_url="https://bugzilla.suse.com/1149145" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14250" ref_url="https://www.suse.com/security/cve/CVE-2019-14250/" source="CVE"/>
		<reference ref_id="CVE-2019-15847" ref_url="https://www.suse.com/security/cve/CVE-2019-15847/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006024.html" source="SUSE-SU"/>
		<description>
This update for gcc7 to r275405 fixes the following issues:

Security issues fixed:

- CVE-2019-14250: Fixed an integer overflow in binutils (bsc#1142649).
- CVE-2019-15847: Fixed an optimization in the POWER9 backend of gcc that could reduce the entropy of the random number generator (bsc#1149145).

Non-security issue fixed:

- Move Live Patching technology stack from kGraft to upstream klp (bsc#1071995, fate#323487).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-16"/>
	<updated date="2019-10-16"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141897">SUSE bug 1141897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142649">SUSE bug 1142649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148517">SUSE bug 1148517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149145">SUSE bug 1149145</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14250/">CVE-2019-14250</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15847/">CVE-2019-15847</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490553" comment="cpp7-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490554" comment="gcc7-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490555" comment="gcc7-c++-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490556" comment="gcc7-fortran-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490557" comment="libasan4-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490558" comment="libcilkrts5-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490559" comment="libgfortran4-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490560" comment="libgfortran4-32bit-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490561" comment="libobjc4-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490562" comment="libstdc++6-devel-gcc7-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490563" comment="libubsan0-7.4.1+r275405-4.9.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137780" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1145092" ref_url="https://bugzilla.suse.com/1145092" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10208" ref_url="https://www.suse.com/security/cve/CVE-2019-10208/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006027.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

Security issue fixed:

- CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner (bsc#1145092).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-17"/>
	<updated date="2019-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1145092">SUSE bug 1145092</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10208/">CVE-2019-10208</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491674" comment="libpq5-10.10-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491675" comment="postgresql10-10.10-8.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137781" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1054914" ref_url="https://bugzilla.suse.com/1054914" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1104967" ref_url="https://bugzilla.suse.com/1104967" source="BUGZILLA"/>
		<reference ref_id="1109158" ref_url="https://bugzilla.suse.com/1109158" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1119086" ref_url="https://bugzilla.suse.com/1119086" source="BUGZILLA"/>
		<reference ref_id="1123034" ref_url="https://bugzilla.suse.com/1123034" source="BUGZILLA"/>
		<reference ref_id="1127988" ref_url="https://bugzilla.suse.com/1127988" source="BUGZILLA"/>
		<reference ref_id="1131304" ref_url="https://bugzilla.suse.com/1131304" source="BUGZILLA"/>
		<reference ref_id="1137069" ref_url="https://bugzilla.suse.com/1137069" source="BUGZILLA"/>
		<reference ref_id="1137865" ref_url="https://bugzilla.suse.com/1137865" source="BUGZILLA"/>
		<reference ref_id="1137959" ref_url="https://bugzilla.suse.com/1137959" source="BUGZILLA"/>
		<reference ref_id="1137982" ref_url="https://bugzilla.suse.com/1137982" source="BUGZILLA"/>
		<reference ref_id="1140155" ref_url="https://bugzilla.suse.com/1140155" source="BUGZILLA"/>
		<reference ref_id="1141013" ref_url="https://bugzilla.suse.com/1141013" source="BUGZILLA"/>
		<reference ref_id="1142076" ref_url="https://bugzilla.suse.com/1142076" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1146042" ref_url="https://bugzilla.suse.com/1146042" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146540" ref_url="https://bugzilla.suse.com/1146540" source="BUGZILLA"/>
		<reference ref_id="1146664" ref_url="https://bugzilla.suse.com/1146664" source="BUGZILLA"/>
		<reference ref_id="1148133" ref_url="https://bugzilla.suse.com/1148133" source="BUGZILLA"/>
		<reference ref_id="1148712" ref_url="https://bugzilla.suse.com/1148712" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1149313" ref_url="https://bugzilla.suse.com/1149313" source="BUGZILLA"/>
		<reference ref_id="1149446" ref_url="https://bugzilla.suse.com/1149446" source="BUGZILLA"/>
		<reference ref_id="1149555" ref_url="https://bugzilla.suse.com/1149555" source="BUGZILLA"/>
		<reference ref_id="1149651" ref_url="https://bugzilla.suse.com/1149651" source="BUGZILLA"/>
		<reference ref_id="1150305" ref_url="https://bugzilla.suse.com/1150305" source="BUGZILLA"/>
		<reference ref_id="1150381" ref_url="https://bugzilla.suse.com/1150381" source="BUGZILLA"/>
		<reference ref_id="1150423" ref_url="https://bugzilla.suse.com/1150423" source="BUGZILLA"/>
		<reference ref_id="1150846" ref_url="https://bugzilla.suse.com/1150846" source="BUGZILLA"/>
		<reference ref_id="1151067" ref_url="https://bugzilla.suse.com/1151067" source="BUGZILLA"/>
		<reference ref_id="1151192" ref_url="https://bugzilla.suse.com/1151192" source="BUGZILLA"/>
		<reference ref_id="1151350" ref_url="https://bugzilla.suse.com/1151350" source="BUGZILLA"/>
		<reference ref_id="1151610" ref_url="https://bugzilla.suse.com/1151610" source="BUGZILLA"/>
		<reference ref_id="1151661" ref_url="https://bugzilla.suse.com/1151661" source="BUGZILLA"/>
		<reference ref_id="1151662" ref_url="https://bugzilla.suse.com/1151662" source="BUGZILLA"/>
		<reference ref_id="1151667" ref_url="https://bugzilla.suse.com/1151667" source="BUGZILLA"/>
		<reference ref_id="1151680" ref_url="https://bugzilla.suse.com/1151680" source="BUGZILLA"/>
		<reference ref_id="1151891" ref_url="https://bugzilla.suse.com/1151891" source="BUGZILLA"/>
		<reference ref_id="1151955" ref_url="https://bugzilla.suse.com/1151955" source="BUGZILLA"/>
		<reference ref_id="1152024" ref_url="https://bugzilla.suse.com/1152024" source="BUGZILLA"/>
		<reference ref_id="1152025" ref_url="https://bugzilla.suse.com/1152025" source="BUGZILLA"/>
		<reference ref_id="1152026" ref_url="https://bugzilla.suse.com/1152026" source="BUGZILLA"/>
		<reference ref_id="1152161" ref_url="https://bugzilla.suse.com/1152161" source="BUGZILLA"/>
		<reference ref_id="1152187" ref_url="https://bugzilla.suse.com/1152187" source="BUGZILLA"/>
		<reference ref_id="1152243" ref_url="https://bugzilla.suse.com/1152243" source="BUGZILLA"/>
		<reference ref_id="1152325" ref_url="https://bugzilla.suse.com/1152325" source="BUGZILLA"/>
		<reference ref_id="1152457" ref_url="https://bugzilla.suse.com/1152457" source="BUGZILLA"/>
		<reference ref_id="1152460" ref_url="https://bugzilla.suse.com/1152460" source="BUGZILLA"/>
		<reference ref_id="1152466" ref_url="https://bugzilla.suse.com/1152466" source="BUGZILLA"/>
		<reference ref_id="1152525" ref_url="https://bugzilla.suse.com/1152525" source="BUGZILLA"/>
		<reference ref_id="1152972" ref_url="https://bugzilla.suse.com/1152972" source="BUGZILLA"/>
		<reference ref_id="1152974" ref_url="https://bugzilla.suse.com/1152974" source="BUGZILLA"/>
		<reference ref_id="1152975" ref_url="https://bugzilla.suse.com/1152975" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18595" ref_url="https://www.suse.com/security/cve/CVE-2017-18595/" source="CVE"/>
		<reference ref_id="CVE-2019-14821" ref_url="https://www.suse.com/security/cve/CVE-2019-14821/" source="CVE"/>
		<reference ref_id="CVE-2019-15291" ref_url="https://www.suse.com/security/cve/CVE-2019-15291/" source="CVE"/>
		<reference ref_id="CVE-2019-9506" ref_url="https://www.suse.com/security/cve/CVE-2019-9506/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006028.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2017-18595: A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (bnc#1149555).
- CVE-2019-14821: An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring-&gt;first' and 'ring-&gt;last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350).
- CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver (bnc#1146540).
- CVE-2019-9506: The Bluetooth BR/EDR specification up to and including version 5.1 permitted sufficiently low encryption key length and did not prevent an attacker from influencing the key length negotiation. This allowed practical brute-force attacks (aka 'KNOB') that could decrypt traffic and injected arbitrary ciphertext without the victim noticing (bnc#1137865 bnc#1146042).

The following non-security bugs were fixed:

- ACPI: custom_method: fix memory leaks (bsc#1051510).
- ACPI / PCI: fix acpi_pci_irq_enable() memory leak (bsc#1051510).
- ACPI / property: Fix acpi_graph_get_remote_endpoint() name in kerneldoc (bsc#1051510).
- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- ALSA: aoa: onyx: always initialize register read value (bsc#1051510).
- ALSA: firewire-tascam: check intermediate state of clock status and retry (bsc#1051510).
- ALSA: firewire-tascam: handle error code when getting current source of clock (bsc#1051510).
- ASoC: es8328: Fix copy-paste error in es8328_right_line_controls (bsc#1051510).
- ASoC: Intel: Baytrail: Fix implicit fallthrough warning (bsc#1051510).
- ASoC: sun4i-i2s: RX and TX counter registers are swapped (bsc#1051510).
- ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls (bsc#1051510).
- ASoC: wm8988: fix typo in wm8988_right_line_controls (bsc#1051510).
- ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet (bsc#1111666).
- ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init (bsc#1051510).
- atm: iphase: Fix Spectre v1 vulnerability (networking-stable-19_08_08).
- bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA (bsc#1051510).
- blk-flush: do not run queue for requests bypassing flush (bsc#1137959).
- blk-flush: use blk_mq_request_bypass_insert() (bsc#1137959).
- blk-mq: do not allocate driver tag upfront for flush rq (bsc#1137959).
- blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (bsc#1151610).
- blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue (bsc#1137959).
- blk-mq: introduce blk_mq_request_completed() (bsc#1149446).
- blk-mq: introduce blk_mq_tagset_wait_completed_request() (bsc#1149446).
- blk-mq: kABI fixes for blk-mq.h (bsc#1137959).
- blk-mq: move blk_mq_put_driver_tag*() into blk-mq.h (bsc#1137959).
- blk-mq: punt failed direct issue to dispatch list (bsc#1137959).
- blk-mq: put the driver tag of nxt rq before first one is requeued (bsc#1137959).
- blk-mq-sched: decide how to handle flush rq via RQF_FLUSH_SEQ (bsc#1137959).
- block: fix timeout changes for legacy request drivers (bsc#1149446).
- block: kABI fixes for BLK_EH_DONE renaming (bsc#1142076).
- block: rename BLK_EH_NOT_HANDLED to BLK_EH_DONE (bsc#1142076).
- bnx2x: Disable multi-cos feature (networking-stable-19_08_08).
- bonding/802.3ad: fix link_failure_count tracking (bsc#1137069 bsc#1141013).
- bonding/802.3ad: fix slave link initialization transition states (bsc#1137069 bsc#1141013).
- bonding: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21).
- bonding: set default miimon value for non-arp modes if not set (bsc#1137069 bsc#1141013).
- bonding: speed/duplex update at NETDEV_UP event (bsc#1137069 bsc#1141013).
- btrfs: fix use-after-free when using the tree modification log (bsc#1151891).
- btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls (bsc#1152975).
- btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space (bsc#1152974).
- btrfs: relocation: fix use-after-free on dead relocation roots (bsc#1152972).
- ceph: use ceph_evict_inode to cleanup inode's resource (bsc#1148133).
- clk: at91: fix update bit maps on CFG_MOR write (bsc#1051510).
- clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks (bsc#1051510).
- clk: sunxi-ng: v3s: add the missing PLL_DDR1 (bsc#1051510).
- Compile nvme.ko as module (bsc#1150846)
- crypto: caam - fix concurrency issue in givencrypt descriptor (bsc#1051510).
- crypto: caam - free resources in case caam_rng registration failed (bsc#1051510).
- crypto: caam/qi - fix error handling in ERN handler (bsc#1111666).
- crypto: cavium/zip - Add missing single_release() (bsc#1051510).
- crypto: ccp - Reduce maximum stack usage (bsc#1051510).
- crypto: qat - Silence smp_processor_id() warning (bsc#1051510).
- crypto: skcipher - Unmap pages after an external error (bsc#1051510).
- dma-buf/sw_sync: Synchronize signal vs syncpt free (bsc#1111666).
- dmaengine: dw: platform: Switch to acpi_dma_controller_register() (bsc#1051510).
- dmaengine: iop-adma.c: fix printk format warning (bsc#1051510).
- drivers: thermal: int340x_thermal: Fix sysfs race condition (bsc#1051510).
- drm/i915: Fix various tracepoints for gen2 (bsc#1113722)
- drm/imx: Drop unused imx-ipuv3-crtc.o build (bsc#1113722)
- EDAC/amd64: Decode syndrome before translating address (bsc#1114279).
- eeprom: at24: make spd world-readable again (git-fixes).
- ext4: fix warning inside ext4_convert_unwritten_extents_endio (bsc#1152025).
- ext4: set error return correctly when ext4_htree_store_dirent fails (bsc#1152024).
- Fix kabi for: NFSv4: Fix OPEN / CLOSE race (git-fixes).
- floppy: fix usercopy direction (bsc#1111666).
- gpio: fix line flag validation in lineevent_create (bsc#1051510).
- gpio: fix line flag validation in linehandle_create (bsc#1051510).
- gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist (bsc#1051510).
- gpiolib: only check line handle flags once (bsc#1051510).
- gpio: Move gpiochip_lock/unlock_as_irq to gpio/driver.h (bsc#1051510).
- hwmon: (lm75) Fix write operations for negative temperatures (bsc#1051510).
- hwmon: (shtc1) fix shtc1 and shtw1 id mask (bsc#1051510).
- i2c: designware: Synchronize IRQs when unregistering slave client (bsc#1111666).
- i40e: Add support for X710 device (bsc#1151067).
- ife: error out when nla attributes are empty (networking-stable-19_08_08).
- iio: dac: ad5380: fix incorrect assignment to val (bsc#1051510).
- Input: elan_i2c - remove Lenovo Legion Y7000 PnpID (bsc#1051510).
- iommu/dma: Fix for dereferencing before null checking (bsc#1151667).
- iommu: Do not use sme_active() in generic code (bsc#1151661).
- iommu/iova: Avoid false sharing on fq_timer_on (bsc#1151662).
- ip6_tunnel: fix possible use-after-free on xmit (networking-stable-19_08_08).
- ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set (networking-stable-19_08_28).
- isdn/capi: check message length in capi_write() (bsc#1051510).
- kABI: media: em28xx: fix handler for vidioc_s_input() (bsc#1051510). fixes kABI
- kABI: media: em28xx: stop rewriting device's struct (bsc#1051510). fixes kABI
- KABI protect struct vmem_altmap (bsc#1150305).
- KVM: PPC: Book3S: Fix incorrect guest-to-user-translation error handling (bsc#1061840).
- KVM: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores (bsc#1061840).
- KVM: PPC: Book3S HV: Do not lose pending doorbell request on migration on P9 (bsc#1061840).
- KVM: PPC: Book3S HV: Do not push XIVE context when not using XIVE device (bsc#1061840).
- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest (bsc#1061840).
- KVM: PPC: Book3S HV: Fix race in re-enabling XIVE escalation interrupts (bsc#1061840).
- KVM: PPC: Book3S HV: Handle virtual mode in XIVE VCPU push code (bsc#1061840).
- KVM: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the VP (bsc#1061840).
- leds: leds-lp5562 allow firmware files up to the maximum length (bsc#1051510).
- leds: trigger: gpio: GPIO 0 is valid (bsc#1051510).
- libertas_tf: Use correct channel range in lbtf_geo_init (bsc#1051510).
- libiscsi: do not try to bypass SCSI EH (bsc#1142076).
- libnvdimm/altmap: Track namespace boundaries in altmap (bsc#1150305).
- libnvdimm: prevent nvdimm from requesting key when security is disabled (bsc#1137982).
- lightnvm: remove dependencies on BLK_DEV_NVME and PCI (bsc#1150846).
- livepatch: Nullify obj-&gt;mod in klp_module_coming()'s error path (bsc#1071995).
- mac80211: minstrel_ht: fix per-group max throughput rate initialization (bsc#1051510).
- md: do not report active array_state until after revalidate_disk() completes (git-fixes).
- md: only call set_in_sync() when it is expected to succeed (git-fixes).
- md/raid6: Set R5_ReadError when there is read failure on parity disk (git-fixes).
- media: atmel: atmel-isi: fix timeout value for stop streaming (bsc#1051510).
- media: dib0700: fix link error for dibx000_i2c_set_speed (bsc#1051510).
- media: em28xx: fix handler for vidioc_s_input() (bsc#1051510).
- media: em28xx: stop rewriting device's struct (bsc#1051510).
- media: fdp1: Reduce FCP not found message level to debug (bsc#1051510).
- media: marvell-ccic: do not generate EOF on parallel bus (bsc#1051510).
- media: mc-device.c: do not memset __user pointer contents (bsc#1051510).
- media: ov6650: Fix sensor possibly not detected on probe (bsc#1051510).
- media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper (bsc#1051510).
- media: replace strcpy() by strscpy() (bsc#1051510).
- media: Revert '[media] marvell-ccic: reset ccic phy when stop streaming for stability' (bsc#1051510).
- media: technisat-usb2: break out of loop at end of buffer (bsc#1051510).
- media: tm6000: double free if usb disconnect while streaming (bsc#1051510).
- media: vb2: Fix videobuf2 to map correct area (bsc#1051510).
- mic: avoid statically declaring a 'struct device' (bsc#1051510).
- mmc: sdhci-msm: fix mutex while in spinlock (bsc#1142635).
- mmc: sdhci-of-arasan: Do now show error message in case of deffered probe (bsc#1119086).
- mtd: spi-nor: Fix Cadence QSPI RCU Schedule Stall (bsc#1051510).
- mvpp2: refactor MTU change code (networking-stable-19_08_08).
- net: bridge: delete local fdb on device init failure (networking-stable-19_08_08).
- net: bridge: mcast: do not delete permanent entries when fast leave is enabled (networking-stable-19_08_08).
- net: fix ifindex collision during namespace removal (networking-stable-19_08_08).
- net/ibmvnic: prevent more than one thread from running in reset (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (bsc#1152457 ltc#174432).
- net/mlx5e: Only support tx/rx pause setting for port owner (networking-stable-19_08_21).
- net/mlx5e: Prevent encap flow counter update async to user query (networking-stable-19_08_08).
- net/mlx5e: Use flow keys dissector to parse packets for ARFS (networking-stable-19_08_21).
- net/mlx5: Use reversed order when unregister devices (networking-stable-19_08_08).
- net/packet: fix race in tpacket_snd() (networking-stable-19_08_21).
- net: sched: Fix a possible null-pointer dereference in dequeue_func() (networking-stable-19_08_08).
- net/smc: make sure EPOLLOUT is raised (networking-stable-19_08_28).
- NFS4: Fix v4.0 client state corruption when mount (git-fixes).
- nfsd: degraded slot-count more gracefully as allocation nears exhaustion (bsc#1150381).
- nfsd: Do not release the callback slot unless it was actually held (git-fixes).
- nfsd: Fix overflow causing non-working mounts on 1 TB machines (bsc#1150381).
- nfsd: fix performance-limiting session calculation (bsc#1150381).
- nfsd: give out fewer session slots as limit approaches (bsc#1150381).
- nfsd: handle drc over-allocation gracefully (bsc#1150381).
- nfsd: increase DRC cache limit (bsc#1150381).
- NFS: Do not interrupt file writeout due to fatal errors (git-fixes).
- NFS: Do not open code clearing of delegation state (git-fixes).
- NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0 (git-fixes).
- NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts (git-fixes).
- NFS: Forbid setting AF_INET6 to 'struct sockaddr_in'-&gt;sin_family (git-fixes).
- NFS: Refactor nfs_lookup_revalidate() (git-fixes).
- NFS: Remove redundant semicolon (git-fixes).
- NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter (git-fixes).
- NFSv4.1: Fix open stateid recovery (git-fixes).
- NFSv4.1: Only reap expired delegations (git-fixes).
- NFSv4: Check the return value of update_open_stateid() (git-fixes).
- NFSv4: Fix an Oops in nfs4_do_setattr (git-fixes).
- NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim() (git-fixes).
- NFSv4: Fix delegation state recovery (git-fixes).
- NFSv4: Fix lookup revalidate of regular files (git-fixes).
- NFSv4: Fix OPEN / CLOSE race (git-fixes).
- NFSv4: Handle the special Linux file open access mode (git-fixes).
- NFSv4: Only pass the delegation to setattr if we're sending a truncate (git-fixes).
- NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend() (git-fixes).
- nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds (bsc#1051510).
- null_blk: complete requests from -&gt;timeout (bsc#1149446).
- null_blk: wire up timeouts (bsc#1149446).
- nvme: do not abort completed request in nvme_cancel_request (bsc#1149446).
- nvme: fix multipath crash when ANA is deactivated (bsc#1149446).
- nvme: fix multipath crash when ANA is deactivated (bsc#1149446).
- nvmem: Use the same permissions for eeprom as for nvmem (git-fixes).
- nvme-rdma: Allow DELETING state change failure in (bsc#1104967,).
- nvme-rdma: centralize admin/io queue teardown sequence (bsc#1142076).
- nvme-rdma: centralize controller setup sequence (bsc#1142076).
- nvme-rdma: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-rdma: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-rdma: fix timeout handler (bsc#1149446).
- nvme-rdma: fix timeout handler (bsc#1149446).
- nvme-rdma: remove redundant reference between ib_device and tagset (bsc#1149446).
- nvme-rdma: stop admin queue before freeing it (bsc#1140155).
- nvme-rdma: support up to 4 segments of inline data (bsc#1142076).
- nvme-rdma: unquiesce queues when deleting the controller (bsc#1142076).
- nvme-rdma: use dynamic dma mapping per command (bsc#1149446).
- nvme: remove ns sibling before clearing path (bsc#1140155).
- nvme: return BLK_EH_DONE from -&gt;timeout (bsc#1142076).
- nvme-tcp: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-tcp: fix timeout handler (bsc#1149446).
- nvme: wait until all completed request's complete fn is called (bsc#1149446).
- PCI: Add ACS quirk for Amazon Annapurna Labs root ports (bsc#1152187,bsc#1152525).
- PCI: Add Amazon's Annapurna Labs vendor ID (bsc#1152187,bsc#1152525).
- PCI: Add quirk to disable MSI-X support for Amazon's Annapurna Labs Root Port (bsc#1152187,bsc#1152525).
- PCI: hv: Detect and fix Hyper-V PCI domain number collision (bsc#1150423).
- PCI/VPD: Prevent VPD access for Amazon's Annapurna Labs Root Port (bsc#1152187,bsc#1152525).
- phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current (bsc#1051510).
- platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table (bsc#1051510).
- PM: sleep: Fix possible overflow in pm_system_cancel_wakeup() (bsc#1051510).
- pNFS fallback to MDS if no deviceid found (git-fixes).
- pNFS/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error (git-fixes).
- pNFS/flexfiles: Turn off soft RPC calls (git-fixes).
- powerpc/64: Make sys_switch_endian() traceable (bsc#1065729).
- powerpc/64s/radix: Fix MADV_[FREE|DONTNEED] TLB flush miss problem with THP (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Fix memory hotplug section page table creation (bsc#1065729).
- powerpc/64s/radix: Fix memory hot-unplug page table split (bsc#1065729).
- powerpc/64s/radix: Implement _tlbie(l)_va_range flush functions (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Improve preempt handling in TLB code (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Improve TLB flushing for page table freeing (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Introduce local single page ceiling for TLB range flush (bsc#1055117 bsc#1152161 ltc#181664).
- powerpc/64s/radix: Optimize flush_tlb_range (bsc#1152161 ltc#181664).
- powerpc/book3s64/mm: Do not do tlbie fixup for some hardware revisions (bsc#1152161 ltc#181664).
- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (bsc#1152161 ltc#181664).
- powerpc: bpf: Fix generation of load/store DW instructions (bsc#1065729).
- powerpc/bpf: use unsigned division instruction for 64-bit operations (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range() (bsc#1065729).
- powerpc/irq: Do not WARN continuously in arch_local_irq_restore() (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (bsc#1152161 ltc#181664).
- powerpc/mm/radix: Drop unneeded NULL check (bsc#1152161 ltc#181664).
- powerpc/mm/radix: implement LPID based TLB flushes to be used by KVM (bsc#1152161 ltc#181664).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling (bsc#1065729).
- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get, set} (bsc#1152243 ltc#181472).
- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS (bsc#1065729).
- powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA window (bsc#1061840).
- powerpc/powernv/ioda: Fix race in TCE level allocation (bsc#1061840).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt handling to C (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/pseries: Call H_BLOCK_REMOVE when supported (bsc#1109158).
- powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() (bsc#1065729).
- powerpc/pseries/memory-hotplug: Fix return value type of find_aa_index (bsc#1065729).
- powerpc/pseries: Read TLB Block Invalidate Characteristics (bsc#1109158).
- powerpc/ptrace: Simplify vr_get/set() to avoid GCC warning (bsc#1148868).
- powerpc/xive: Fix bogus error code returned by OPAL (bsc#1065729).
- powerpc/xive: Implement get_irqchip_state method for XIVE to fix shutdown race (bsc#1065729).
- powerpc/xmon: Fix opcode being uninitialized in print_insn_powerpc (bsc#1065729).
- power: reset: gpio-restart: Fix typo when gpio reset is not found (bsc#1051510).
- power: supply: Init device wakeup after device_add() (bsc#1051510).
- ppp: Fix memory leak in ppp_write (git-fixes).
- printk: Do not lose last line in kmsg buffer dump (bsc#1152460).
- printk: fix printk_time race (bsc#1152466).
- printk/panic: Avoid deadlock in printk() after stopping CPUs by NMI (bsc#1148712).
- qla2xxx: kABI fixes for v10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988).
- qla2xxx: remove SGI SN2 support (bsc#1123034 bsc#1131304 bsc#1127988).
- quota: fix wrong condition in is_quota_modification() (bsc#1152026).
- r8152: Set memory to all 0xFFs on failed reg reads (bsc#1051510).
- regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg (bsc#1051510).
- Revert 'mwifiex: fix system hang problem after resume' (bsc#1051510).
- rtlwifi: Fix file release memory leak (bsc#1111666).
- scsi: qla2xxx: Add 28xx flash primary/secondary status/image mechanism (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add Device ID for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add First Burst support for FC-NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add fw_attr and port_no SysFS node (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add new FW dump template entry types (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add pci function reset support (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add protection mask module parameters (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add Serdes support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add support for multiple fwdump templates/segments (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add support for setting port speed (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Allow NVMe IO to resume with short cable pull (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: allow session delete to finish before create (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid PCI IRQ affinity mapping when multiqueue is not supported (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: avoid printf format warning (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that Coverity complains about dereferencing a NULL rport pointer (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that qla2x00_mem_free() crashes if called twice (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change default ZIO threshold (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change the return type of qla24xx_read_flash_data() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change the return type of qla2x00_update_ms_fdmi_iocb() into void (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check for FW started flag before aborting (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: check for kstrtol() failure (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check secondary image if reading the primary image fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check the PCI info string output buffer size (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check the size of firmware data structures at compile time (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanup fcport memory to prevent leak (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanup redundant qla2x00_abort_all_cmds during unload (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanups for NVRAM/Flash read/write path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: cleanup trace buffer initialization (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a command is released that is owned by the firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a mailbox command times out (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if parsing the version string fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the completion path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if waiting for pending commands times out (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain loudly about reference count underflow (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correct error handling during initialization failures (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correction and improvement to fwdt processing (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correctly report max/min supported speeds (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: deadlock by configfs_depend_item (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare local symbols static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla24xx_build_scsi_crc_2_iocbs() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla2x00_find_new_loop_id() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Downgrade driver to 10.01.00.19-k There are upstream bug reports against 10.01.00.19-k which haven't been resolved. Also the newer version failed to get a proper review. For time being it's better to got with the older version and do not introduce new bugs.
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix abort timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a recently introduced kernel warning (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a small typo in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix code indentation for qla27xx_fwdt_entry (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix comment alignment in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix comment in MODULE_PARM_DESC in qla2xxx (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix different size DMA Alloc/Unmap (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix DMA error when the DIF sg buffer crosses 4GB boundary (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix DMA unmap leak (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix fcport null pointer access (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix formatting of pointer types (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix fw dump corruption (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix fw options handle eh_bus_reset() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hang in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hardirq-unsafe locking (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hardlockup in abort command during driver remove (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix message indicating vectors used by driver (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix N2N link reset (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix Nport ID display value (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NVMe port discovery after a short device port loss (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix possible fcport null-pointer dereferences (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix premature timer expiration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix read offset in qla24xx_load_risc_flash() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix routine qla27xx_dump_{mpi|ram}() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix session cleanup hang (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix spelling mistake 'alredy' -&gt; 'already' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix spelling mistake 'initializatin' -&gt; 'initialization' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix SRB allocation flag to avoid sleeping in IRQ context (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stale session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stuck login session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix unload when NVMe devices are configured (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: flush IO on chip reset or sess delete (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Further limit FLASH region write access from SysFS (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Improve Linux kernel coding style conformance (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from qla_dsd.h (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Increase the max_sgl_segments to 1024 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Increase the size of the mailbox arrays from 4 to 8 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Insert spaces where required (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types for FC src/dst IDs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the dsd32 and dsd64 data structures (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Leave a blank line after declarations (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Let the compiler check the type of the SCSI command context pointer (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Log the status code if a firmware command fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs use little endian (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_mem_free() easier to verify (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_process_response_queue() easier to read (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make sure that aborted commands are freed (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move debug messages before sending srb preventing panic (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move marker request behind QPair (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_clear_loop_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_is_reserved_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_set_fcport_state() from a .h into a .c file (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_set_reserved_loop_ids() definition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move the &lt;linux/io-64-nonatomic-lo-hi.h&gt; include directive (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move the port_state_str definition from a .h to a .c file (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: no need to check return value of debugfs_create functions (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: on session delete, return nvme cmd (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Pass little-endian values to the firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent multiple ADISC commands per session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent SysFS access when chip is down (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the number of casts in GID list code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the number of forward declarations (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reject EH_{abort|device_reset|target_request} (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a comment that refers to the SCSI host lock (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove an include directive from qla_mr.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a superfluous forward declaration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove dead code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: remove double assignment in qla2x00_update_fcport (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove FW default template (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove qla_tgt_cmd.data_work and qla_tgt_cmd.data_work_free (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove qla_tgt_cmd.released (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: remove redundant null check on pointer sess (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove set but not used variable 'ptr_dma' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous casts (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unnecessary locking from the target code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unnecessary null check (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove useless set memory to zero use memset() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Replace vmalloc + memset with vzalloc (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Report invalid mailbox status codes (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Report the firmware status code if a mailbox command fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Restore FAWWPN of Physical Port only for loop down (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Retry fabric Scan on IOCB queue full (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Secure flash update support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set remote port devloss timeout to 0 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the qpair in SRB to NULL when SRB is released (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS pass-through IOCBs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the SCSI command result before calling the command done (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Silence fwdump template message (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Silence Successful ELS IOCB message (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplification of register address used in qla_tmpl.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify a debug statement (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify conditional check again (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qlt_send_term_imm_notif() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Skip FW dump on LOOP initialization error (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer overflow (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Suppress multiple Coverity complaint about out-of-bounds accesses (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: target: Fix offline port handling and host reset handling (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Uninline qla2x00_init_timer() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Unregister resources in the opposite order of the registration order (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.00.00.13-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.00.00.14-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.15-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.16-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.19-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update flash read/write routine (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use ARRAY_SIZE() in the definition of QLA_LAST_SPEED (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use common update-firmware-options routine for ISP27xx+ (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use complete switch scan for RSCN events (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use Correct index for Q-Pair array (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use get/put_unaligned where appropriate (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use __le64 instead of uint32_t for sending DMA addresses to firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy() and strncpy() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use tabs instead of spaces for indentation (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use tabs to indent code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Verify locking assumptions at runtime (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: scsi_dh_rdac: zero cdb in send_mode_select() (bsc#1149313).
- scsi: scsi_transport_fc: nvme: display FC-NVMe port roles (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: tcm_qla2xxx: Minimize #include directives (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi_transport_fc: complete requests from -&gt;timeout (bsc#1142076).
- sctp: fix the transport error_count check (networking-stable-19_08_21).
- secure boot lockdown: Fix-up backport of /dev/mem access restriction The upstream-submitted patch set has evolved over time, align our patches (contents and description) to reflect the current status as far as /dev/mem access is concerned.
- sky2: Disable MSI on yet another ASUS boards (P6Xxxx) (bsc#1051510).
- slip: make slhc_free() silently accept an error pointer (bsc#1051510).
- slip: sl_alloc(): remove unused parameter 'dev_t line' (bsc#1051510).
- spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours (bsc#1111666).
- SUNRPC fix regression in umount of a secure mount (git-fixes).
- SUNRPC: Handle connection breakages correctly in call_status() (git-fixes).
- SUNRPC/nfs: Fix return value for nfs4_callback_compound() (git-fixes).
- supported.conf: Add vfio_ccw (bsc#1151192 jsc#SLE-6138).
- supported.conf: Mark vfio_ccw supported by SUSE, because bugs can be routed to IBM via SUSE support (jsc#SLE-6138, bsc#1151192).
- tcp: make sure EPOLLOUT wont be missed (networking-stable-19_08_28).
- team: Add vlan tx offload to hw_enc_features (bsc#1051510).
- team: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21).
- tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts (bsc#1082555).
- tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs (bsc#1111666).
- tun: fix use-after-free when register netdev failed (bsc#1111666).
- Update s390 config files (bsc#1151192).  - VFIO_CCW=m  - S390_CCW_IOMMU=y
- USB: usbcore: Fix slab-out-of-bounds bug during device reset (bsc#1051510).
- vhost/test: fix build for vhost test (bsc#1111666).
- video: ssd1307fb: Start page range at page_offset (bsc#1113722)
- wcn36xx: use dynamic allocation for large variables (bsc#1111666).
- x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h (bsc#1114279).
- x86/fpu: Add FPU state copying quirk to handle XRSTOR failure on Intel Skylake CPUs (bsc#1151955).
- x86/tls: Fix possible spectre-v1 in do_get_thread_area() (bsc#1114279).
- xen/netback: Reset nr_frags before freeing skb (networking-stable-19_08_21).
- xen-netfront: do not assume sk_buff_head list is empty in error handling (bsc#1065600).
- xen-netfront: do not use ~0U as error return value for xennet_fill_frags() (bsc#1065600).
- xen/xenbus: fix self-deadlock after killing user process (bsc#1065600).
- xsk: avoid store-tearing when assigning queues (bsc#1111666).
- xsk: avoid store-tearing when assigning umem (bsc#1111666).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-18"/>
	<updated date="2019-10-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054914">SUSE bug 1054914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104967">SUSE bug 1104967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109158">SUSE bug 1109158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119086">SUSE bug 1119086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123034">SUSE bug 1123034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127988">SUSE bug 1127988</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131304">SUSE bug 1131304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137069">SUSE bug 1137069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137865">SUSE bug 1137865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137959">SUSE bug 1137959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137982">SUSE bug 1137982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140155">SUSE bug 1140155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141013">SUSE bug 1141013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142076">SUSE bug 1142076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146042">SUSE bug 1146042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146540">SUSE bug 1146540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146664">SUSE bug 1146664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148133">SUSE bug 1148133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148712">SUSE bug 1148712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149313">SUSE bug 1149313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149446">SUSE bug 1149446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149555">SUSE bug 1149555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149651">SUSE bug 1149651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150305">SUSE bug 1150305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150381">SUSE bug 1150381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150423">SUSE bug 1150423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150846">SUSE bug 1150846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151067">SUSE bug 1151067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151192">SUSE bug 1151192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151350">SUSE bug 1151350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151610">SUSE bug 1151610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151661">SUSE bug 1151661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151662">SUSE bug 1151662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151667">SUSE bug 1151667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151680">SUSE bug 1151680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151891">SUSE bug 1151891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151955">SUSE bug 1151955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152024">SUSE bug 1152024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152025">SUSE bug 1152025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152026">SUSE bug 1152026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152161">SUSE bug 1152161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152187">SUSE bug 1152187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152243">SUSE bug 1152243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152325">SUSE bug 1152325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152457">SUSE bug 1152457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152460">SUSE bug 1152460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152466">SUSE bug 1152466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152525">SUSE bug 1152525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152972">SUSE bug 1152972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152974">SUSE bug 1152974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152975">SUSE bug 1152975</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18595/">CVE-2017-18595</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-14821/">CVE-2019-14821</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15291/">CVE-2019-15291</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9506/">CVE-2019-9506</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491676" comment="kernel-default-4.12.14-197.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491677" comment="kernel-default-base-4.12.14-197.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491678" comment="kernel-default-devel-4.12.14-197.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491679" comment="kernel-default-man-4.12.14-197.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491680" comment="kernel-devel-4.12.14-197.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491681" comment="kernel-macros-4.12.14-197.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491682" comment="kernel-zfcpdump-4.12.14-197.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137782" version="1" class="patch">
	<metadata>
		<title>Security update for procps (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1092100" ref_url="https://bugzilla.suse.com/1092100" source="BUGZILLA"/>
		<reference ref_id="1121753" ref_url="https://bugzilla.suse.com/1121753" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1122" ref_url="https://www.suse.com/security/cve/CVE-2018-1122/" source="CVE"/>
		<reference ref_id="CVE-2018-1123" ref_url="https://www.suse.com/security/cve/CVE-2018-1123/" source="CVE"/>
		<reference ref_id="CVE-2018-1124" ref_url="https://www.suse.com/security/cve/CVE-2018-1124/" source="CVE"/>
		<reference ref_id="CVE-2018-1125" ref_url="https://www.suse.com/security/cve/CVE-2018-1125/" source="CVE"/>
		<reference ref_id="CVE-2018-1126" ref_url="https://www.suse.com/security/cve/CVE-2018-1126/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006035.html" source="SUSE-SU"/>
		<description>
This update for procps fixes the following issues:

procps was updated to 3.3.15. (bsc#1092100)

Following security issues were fixed:

- CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top
  with HOME unset in an attacker-controlled directory, the attacker could have
  achieved privilege escalation by exploiting one of several vulnerabilities in
  the config_file() function (bsc#1092100).
- CVE-2018-1123: Prevent denial of service in ps via mmap buffer overflow.
  Inbuilt protection in ps maped a guard page at the end of the overflowed
  buffer, ensuring that the impact of this flaw is limited to a crash (temporary
  denial of service) (bsc#1092100).
- CVE-2018-1124: Prevent multiple integer overflows leading to a heap
  corruption in file2strvec function. This allowed a privilege escalation for a
  local attacker who can create entries in procfs by starting processes, which
  could result in crashes or arbitrary code execution in proc utilities run by
  other users (bsc#1092100).
- CVE-2018-1125: Prevent stack buffer overflow in pgrep. This vulnerability was
  mitigated by FORTIFY limiting the impact to a crash (bsc#1092100).
- CVE-2018-1126: Ensure correct integer size in proc/alloc.* to prevent
  truncation/integer overflow issues (bsc#1092100).


Also this non-security issue was fixed:

- Fix CPU summary showing old data. (bsc#1121753)

The update to 3.3.15 contains the following fixes:

* library: Increment to 8:0:1
  No removals, no new functions
  Changes: slab and pid structures
* library: Just check for SIGLOST and don't delete it
* library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
* library: Use size_t for alloc functions                CVE-2018-1126
* library: Increase comm size to 64
* pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
* pgrep: Remove &gt;15 warning as comm can be longer
* ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
* ps: Increase command name selection field to 64
* top: Don't use cwd for location of config              CVE-2018-1122
* update translations
* library: build on non-glibc systems
* free: fix scaling on 32-bit systems
* Revert 'Support running with child namespaces'
* library: Increment to 7:0:1
  No changes, no removals
  New fuctions: numa_init, numa_max_node, numa_node_of_cpu, numa_uninit, xalloc_err_handler
* doc: Document I idle state in ps.1 and top.1
* free: fix some of the SI multiples
* kill: -l space between name parses correctly
* library: dont use vm_min_free on non Linux
* library: don't strip off wchan prefixes (ps &amp; top)
* pgrep: warn about 15+ char name only if -f not used
* pgrep/pkill: only match in same namespace by default
* pidof: specify separator between pids
* pkill: Return 0 only if we can kill process
* pmap: fix duplicate output line under '-x' option
* ps: avoid eip/esp address truncations
* ps: recognizes SCHED_DEADLINE as valid CPU scheduler
* ps: display NUMA node under which a thread ran
* ps: Add seconds display for cputime and time
* ps: Add LUID field
* sysctl: Permit empty string for value
* sysctl: Don't segv when file not available
* sysctl: Read and write large buffers
* top: add config file support for XDG specification
* top: eliminated minor libnuma memory leak
* top: show fewer memory decimal places (configurable)
* top: provide command line switch for memory scaling
* top: provide command line switch for CPU States
* top: provides more accurate cpu usage at startup
* top: display NUMA node under which a thread ran
* top: fix argument parsing quirk resulting in SEGV
* top: delay interval accepts non-locale radix point
* top: address a wishlist man page NLS suggestion
* top: fix potential distortion in 'Mem' graph display
* top: provide proper multi-byte string handling
* top: startup defaults are fully customizable
* watch: define HOST_NAME_MAX where not defined
* vmstat: Fix alignment for disk partition format
* watch: Support ANSI 39,49 reset sequences
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-21"/>
	<updated date="2019-10-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1092100">SUSE bug 1092100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121753">SUSE bug 1121753</bugzilla>
	<cve href="https://www.suse.com/security/cve/CVE-2018-1122/">CVE-2018-1122</cve>
	<cve href="https://www.suse.com/security/cve/CVE-2018-1123/">CVE-2018-1123</cve>
	<cve href="https://www.suse.com/security/cve/CVE-2018-1124/">CVE-2018-1124</cve>
	<cve href="https://www.suse.com/security/cve/CVE-2018-1125/">CVE-2018-1125</cve>
	<cve href="https://www.suse.com/security/cve/CVE-2018-1126/">CVE-2018-1126</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490593" comment="libprocps7-3.3.15-7.7.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490594" comment="procps-3.3.15-7.7.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490595" comment="procps-devel-3.3.15-7.7.26 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137783" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1130840" ref_url="https://bugzilla.suse.com/1130840" source="BUGZILLA"/>
		<reference ref_id="1149955" ref_url="https://bugzilla.suse.com/1149955" source="BUGZILLA"/>
		<reference ref_id="1153238" ref_url="https://bugzilla.suse.com/1153238" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16056" ref_url="https://www.suse.com/security/cve/CVE-2019-16056/" source="CVE"/>
		<reference ref_id="CVE-2019-16935" ref_url="https://www.suse.com/security/cve/CVE-2019-16935/" source="CVE"/>
		<reference ref_id="CVE-2019-9947" ref_url="https://www.suse.com/security/cve/CVE-2019-9947/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006041.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

Security issues fixed:

- CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840)
- CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955)
- CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-22"/>
	<updated date="2019-10-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1130840">SUSE bug 1130840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149955">SUSE bug 1149955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153238">SUSE bug 1153238</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16056/">CVE-2019-16056</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16935/">CVE-2019-16935</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9947/">CVE-2019-9947</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490596" comment="libpython2_7-1_0-2.7.14-7.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490597" comment="python-2.7.14-7.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490598" comment="python-base-2.7.14-7.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137784" version="1" class="patch">
	<metadata>
		<title>Security update for sysstat (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1150114" ref_url="https://bugzilla.suse.com/1150114" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16167" ref_url="https://www.suse.com/security/cve/CVE-2019-16167/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006043.html" source="SUSE-SU"/>
		<description>
This update for sysstat fixes the following issue:

- CVE-2019-16167: Fixed a memory corruption due to an integer overflow. (bsc#1150114)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-23"/>
	<updated date="2019-10-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1150114">SUSE bug 1150114</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16167/">CVE-2019-16167</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490603" comment="sysstat-12.0.2-3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137785" version="1" class="patch">
	<metadata>
		<title>Security update for zziplib (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1107424" ref_url="https://bugzilla.suse.com/1107424" source="BUGZILLA"/>
		<reference ref_id="1129403" ref_url="https://bugzilla.suse.com/1129403" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16548" ref_url="https://www.suse.com/security/cve/CVE-2018-16548/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2750-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006045.html" source="SUSE-SU"/>
		<description>
This update for zziplib fixes the following issues:

Security issue fixed:    
- CVE-2018-16548: Prevented memory leak from __zzip_parse_root_directory().  Free allocated structure if its address is not passed back. (bsc#1107424)

Other issue addressed:
    
- Prevented a division by zero (bsc#1129403).
  		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-23"/>
	<updated date="2019-10-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1107424">SUSE bug 1107424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129403">SUSE bug 1129403</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16548/">CVE-2018-16548</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490604" comment="libzzip-0-13-0.13.69-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490605" comment="zziplib-devel-0.13.69-3.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137786" version="1" class="patch">
	<metadata>
		<title>Security update for lz4 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1153936" ref_url="https://bugzilla.suse.com/1153936" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17543" ref_url="https://www.suse.com/security/cve/CVE-2019-17543/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2757-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006047.html" source="SUSE-SU"/>
		<description>
This update for lz4 fixes the following issues:

- CVE-2019-17543: Fixed a heap-based buffer overflow in LZ4_write32 (bsc#1153936).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-23"/>
	<updated date="2019-10-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1153936">SUSE bug 1153936</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17543/">CVE-2019-17543</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490606" comment="liblz4-1-1.8.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490607" comment="liblz4-1-32bit-1.8.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490608" comment="liblz4-devel-1.8.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490609" comment="lz4-1.8.0-3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137787" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109412" ref_url="https://bugzilla.suse.com/1109412" source="BUGZILLA"/>
		<reference ref_id="1109413" ref_url="https://bugzilla.suse.com/1109413" source="BUGZILLA"/>
		<reference ref_id="1109414" ref_url="https://bugzilla.suse.com/1109414" source="BUGZILLA"/>
		<reference ref_id="1111996" ref_url="https://bugzilla.suse.com/1111996" source="BUGZILLA"/>
		<reference ref_id="1112534" ref_url="https://bugzilla.suse.com/1112534" source="BUGZILLA"/>
		<reference ref_id="1112535" ref_url="https://bugzilla.suse.com/1112535" source="BUGZILLA"/>
		<reference ref_id="1113247" ref_url="https://bugzilla.suse.com/1113247" source="BUGZILLA"/>
		<reference ref_id="1113252" ref_url="https://bugzilla.suse.com/1113252" source="BUGZILLA"/>
		<reference ref_id="1113255" ref_url="https://bugzilla.suse.com/1113255" source="BUGZILLA"/>
		<reference ref_id="1116827" ref_url="https://bugzilla.suse.com/1116827" source="BUGZILLA"/>
		<reference ref_id="1118644" ref_url="https://bugzilla.suse.com/1118644" source="BUGZILLA"/>
		<reference ref_id="1118830" ref_url="https://bugzilla.suse.com/1118830" source="BUGZILLA"/>
		<reference ref_id="1118831" ref_url="https://bugzilla.suse.com/1118831" source="BUGZILLA"/>
		<reference ref_id="1120640" ref_url="https://bugzilla.suse.com/1120640" source="BUGZILLA"/>
		<reference ref_id="1121034" ref_url="https://bugzilla.suse.com/1121034" source="BUGZILLA"/>
		<reference ref_id="1121035" ref_url="https://bugzilla.suse.com/1121035" source="BUGZILLA"/>
		<reference ref_id="1121056" ref_url="https://bugzilla.suse.com/1121056" source="BUGZILLA"/>
		<reference ref_id="1133131" ref_url="https://bugzilla.suse.com/1133131" source="BUGZILLA"/>
		<reference ref_id="1133232" ref_url="https://bugzilla.suse.com/1133232" source="BUGZILLA"/>
		<reference ref_id="1141913" ref_url="https://bugzilla.suse.com/1141913" source="BUGZILLA"/>
		<reference ref_id="1142772" ref_url="https://bugzilla.suse.com/1142772" source="BUGZILLA"/>
		<reference ref_id="1152590" ref_url="https://bugzilla.suse.com/1152590" source="BUGZILLA"/>
		<reference ref_id="1154016" ref_url="https://bugzilla.suse.com/1154016" source="BUGZILLA"/>
		<reference ref_id="1154025" ref_url="https://bugzilla.suse.com/1154025" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000876" ref_url="https://www.suse.com/security/cve/CVE-2018-1000876/" source="CVE"/>
		<reference ref_id="CVE-2018-17358" ref_url="https://www.suse.com/security/cve/CVE-2018-17358/" source="CVE"/>
		<reference ref_id="CVE-2018-17359" ref_url="https://www.suse.com/security/cve/CVE-2018-17359/" source="CVE"/>
		<reference ref_id="CVE-2018-17360" ref_url="https://www.suse.com/security/cve/CVE-2018-17360/" source="CVE"/>
		<reference ref_id="CVE-2018-17985" ref_url="https://www.suse.com/security/cve/CVE-2018-17985/" source="CVE"/>
		<reference ref_id="CVE-2018-18309" ref_url="https://www.suse.com/security/cve/CVE-2018-18309/" source="CVE"/>
		<reference ref_id="CVE-2018-18483" ref_url="https://www.suse.com/security/cve/CVE-2018-18483/" source="CVE"/>
		<reference ref_id="CVE-2018-18484" ref_url="https://www.suse.com/security/cve/CVE-2018-18484/" source="CVE"/>
		<reference ref_id="CVE-2018-18605" ref_url="https://www.suse.com/security/cve/CVE-2018-18605/" source="CVE"/>
		<reference ref_id="CVE-2018-18606" ref_url="https://www.suse.com/security/cve/CVE-2018-18606/" source="CVE"/>
		<reference ref_id="CVE-2018-18607" ref_url="https://www.suse.com/security/cve/CVE-2018-18607/" source="CVE"/>
		<reference ref_id="CVE-2018-19931" ref_url="https://www.suse.com/security/cve/CVE-2018-19931/" source="CVE"/>
		<reference ref_id="CVE-2018-19932" ref_url="https://www.suse.com/security/cve/CVE-2018-19932/" source="CVE"/>
		<reference ref_id="CVE-2018-20623" ref_url="https://www.suse.com/security/cve/CVE-2018-20623/" source="CVE"/>
		<reference ref_id="CVE-2018-20651" ref_url="https://www.suse.com/security/cve/CVE-2018-20651/" source="CVE"/>
		<reference ref_id="CVE-2018-20671" ref_url="https://www.suse.com/security/cve/CVE-2018-20671/" source="CVE"/>
		<reference ref_id="CVE-2018-6323" ref_url="https://www.suse.com/security/cve/CVE-2018-6323/" source="CVE"/>
		<reference ref_id="CVE-2018-6543" ref_url="https://www.suse.com/security/cve/CVE-2018-6543/" source="CVE"/>
		<reference ref_id="CVE-2018-6759" ref_url="https://www.suse.com/security/cve/CVE-2018-6759/" source="CVE"/>
		<reference ref_id="CVE-2018-6872" ref_url="https://www.suse.com/security/cve/CVE-2018-6872/" source="CVE"/>
		<reference ref_id="CVE-2018-7208" ref_url="https://www.suse.com/security/cve/CVE-2018-7208/" source="CVE"/>
		<reference ref_id="CVE-2018-7568" ref_url="https://www.suse.com/security/cve/CVE-2018-7568/" source="CVE"/>
		<reference ref_id="CVE-2018-7569" ref_url="https://www.suse.com/security/cve/CVE-2018-7569/" source="CVE"/>
		<reference ref_id="CVE-2018-7570" ref_url="https://www.suse.com/security/cve/CVE-2018-7570/" source="CVE"/>
		<reference ref_id="CVE-2018-7642" ref_url="https://www.suse.com/security/cve/CVE-2018-7642/" source="CVE"/>
		<reference ref_id="CVE-2018-7643" ref_url="https://www.suse.com/security/cve/CVE-2018-7643/" source="CVE"/>
		<reference ref_id="CVE-2018-8945" ref_url="https://www.suse.com/security/cve/CVE-2018-8945/" source="CVE"/>
		<reference ref_id="CVE-2019-1010180" ref_url="https://www.suse.com/security/cve/CVE-2019-1010180/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

binutils was updated to current 2.32 branch [jsc#ECO-368].

Includes following security fixes:

- CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)
- CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)
- CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)
- CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)
- CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)
- CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)
- CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)
- CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)
- CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)
- CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)
- CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)
- CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)
- CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)
- CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)
- CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in  load_specific_debug_section in objdump.c (bsc#1121056)
- CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)
- CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)

- enable xtensa architecture (Tensilica lc6 and related)
- Use -ffat-lto-objects in order to provide assembly for static libs
  (bsc#1141913).
- Fixed some LTO build issues (bsc#1133131 bsc#1133232).
- riscv: Don't check ABI flags if no code section
- Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).
- Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).

Update to binutils 2.32:

* The binutils now support for the C-SKY processor series.
* The x86 assembler now supports a -mvexwig=[0|1] option to control
  encoding of VEX.W-ignored (WIG) VEX instructions.
  It also has a new -mx86-used-note=[yes|no] option to generate (or
  not) x86 GNU property notes.  
* The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
  the Loongson EXTensions (EXT) instructions, the Loongson Content
  Address Memory (CAM) ASE and the Loongson MultiMedia extensions
  Instructions (MMI) ASE.
* The addr2line, c++filt, nm and objdump tools now have a default
  limit on the maximum amount of recursion that is allowed whilst
  demangling strings.  This limit can be disabled if necessary.
* Objdump's --disassemble option can now take a parameter,
  specifying the starting symbol for disassembly.  Disassembly will
  continue from this symbol up to the next symbol or the end of the
  function.
* The BFD linker will now report property change in linker map file
  when merging GNU properties.
* The BFD linker's -t option now doesn't report members within
  archives, unless -t is given twice.  This makes it more useful
  when generating a list of files that should be packaged for a
  linker bug report.
* The GOLD linker has improved warning messages for relocations that
  refer to discarded sections.

- Improve relro support on s390 [fate#326356]
- Fix broken debug symbols (bsc#1118644)
- Handle ELF compressed header alignment correctly.

		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-24"/>
	<updated date="2019-10-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1109412">SUSE bug 1109412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109413">SUSE bug 1109413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109414">SUSE bug 1109414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111996">SUSE bug 1111996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112534">SUSE bug 1112534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112535">SUSE bug 1112535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113247">SUSE bug 1113247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113252">SUSE bug 1113252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113255">SUSE bug 1113255</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116827">SUSE bug 1116827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118644">SUSE bug 1118644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118830">SUSE bug 1118830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118831">SUSE bug 1118831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120640">SUSE bug 1120640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121034">SUSE bug 1121034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121035">SUSE bug 1121035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121056">SUSE bug 1121056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133131">SUSE bug 1133131</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133232">SUSE bug 1133232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141913">SUSE bug 1141913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142772">SUSE bug 1142772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152590">SUSE bug 1152590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154016">SUSE bug 1154016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154025">SUSE bug 1154025</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000876/">CVE-2018-1000876</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17358/">CVE-2018-17358</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17359/">CVE-2018-17359</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17360/">CVE-2018-17360</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17985/">CVE-2018-17985</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18309/">CVE-2018-18309</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18483/">CVE-2018-18483</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18484/">CVE-2018-18484</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18605/">CVE-2018-18605</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18606/">CVE-2018-18606</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18607/">CVE-2018-18607</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19931/">CVE-2018-19931</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19932/">CVE-2018-19932</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-20623/">CVE-2018-20623</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20651/">CVE-2018-20651</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20671/">CVE-2018-20671</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6323/">CVE-2018-6323</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6543/">CVE-2018-6543</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6759/">CVE-2018-6759</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6872/">CVE-2018-6872</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7208/">CVE-2018-7208</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7568/">CVE-2018-7568</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7569/">CVE-2018-7569</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7570/">CVE-2018-7570</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7642/">CVE-2018-7642</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7643/">CVE-2018-7643</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8945/">CVE-2018-8945</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-1010180/">CVE-2019-1010180</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491683" comment="binutils-2.32-7.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491684" comment="binutils-devel-2.32-7.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137788" version="1" class="patch">
	<metadata>
		<title>Security update for nfs-utils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1150733" ref_url="https://bugzilla.suse.com/1150733" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3689" ref_url="https://www.suse.com/security/cve/CVE-2019-3689/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006056.html" source="SUSE-SU"/>
		<description>
This update for nfs-utils fixes the following issues:

- CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-25"/>
	<updated date="2019-10-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1150733">SUSE bug 1150733</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3689/">CVE-2019-3689</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491685" comment="nfs-client-2.1.1-10.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491686" comment="nfs-doc-2.1.1-10.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491687" comment="nfs-kernel-server-2.1.1-10.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137789" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1149121" ref_url="https://bugzilla.suse.com/1149121" source="BUGZILLA"/>
		<reference ref_id="1149792" ref_url="https://bugzilla.suse.com/1149792" source="BUGZILLA"/>
		<reference ref_id="1149955" ref_url="https://bugzilla.suse.com/1149955" source="BUGZILLA"/>
		<reference ref_id="1151490" ref_url="https://bugzilla.suse.com/1151490" source="BUGZILLA"/>
		<reference ref_id="1153238" ref_url="https://bugzilla.suse.com/1153238" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16056" ref_url="https://www.suse.com/security/cve/CVE-2019-16056/" source="CVE"/>
		<reference ref_id="CVE-2019-16935" ref_url="https://www.suse.com/security/cve/CVE-2019-16935/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006065.html" source="SUSE-SU"/>
		<description>
This update for python3 to 3.6.9 fixes the following issues:

Security issues fixed:

- CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955)
- CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238).

Non-security issues fixed:

- Fixed regression of OpenSSL 1.1.1b-1 in EVP_PBE_scrypt() with salt=NULL. (bsc#1151490)
- Improved locale handling by implementing PEP 538.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-29"/>
	<updated date="2019-10-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1149121">SUSE bug 1149121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149792">SUSE bug 1149792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149955">SUSE bug 1149955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151490">SUSE bug 1151490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153238">SUSE bug 1153238</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16056/">CVE-2019-16056</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16935/">CVE-2019-16935</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490615" comment="libpython3_6m1_0-3.6.9-3.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490616" comment="python3-3.6.9-3.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490617" comment="python3-base-3.6.9-3.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490618" comment="python3-curses-3.6.9-3.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490619" comment="python3-dbm-3.6.9-3.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490620" comment="python3-devel-3.6.9-3.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490621" comment="python3-idle-3.6.9-3.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490622" comment="python3-tk-3.6.9-3.39.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137790" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1144902" ref_url="https://bugzilla.suse.com/1144902" source="BUGZILLA"/>
		<reference ref_id="1148539" ref_url="https://bugzilla.suse.com/1148539" source="BUGZILLA"/>
		<reference ref_id="1152143" ref_url="https://bugzilla.suse.com/1152143" source="BUGZILLA"/>
		<reference ref_id="1154289" ref_url="https://bugzilla.suse.com/1154289" source="BUGZILLA"/>
		<reference ref_id="1154598" ref_url="https://bugzilla.suse.com/1154598" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10218" ref_url="https://www.suse.com/security/cve/CVE-2019-10218/" source="CVE"/>
		<reference ref_id="CVE-2019-14833" ref_url="https://www.suse.com/security/cve/CVE-2019-14833/" source="CVE"/>
		<reference ref_id="CVE-2019-14847" ref_url="https://www.suse.com/security/cve/CVE-2019-14847/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2866-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192866-1.html" source="SUSE-SU"/>
		<description>
This update for provides the following fixes:

Following security issues were fixed:

- CVE-2019-14847: User with 'get changes' permission could have crashed AD DC LDAP server via dirsync (bsc#1154598).
- CVE-2019-10218: Client code could have returned filenames containing path separators (bsc#1144902).
- CVE-2019-14833: Accent with 'check script password' where Samba AD DC check password script did not receive the full password (bsc#1154289).

Also following non-security issues were fixed:

- Fix auth problems when printing via smbspool backend with kerberos. (bsc#1148539)
- Fix broken username/password authentication with CUPS and smbspool. (bsc#1152143)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-30"/>
	<updated date="2019-10-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144902">SUSE bug 1144902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148539">SUSE bug 1148539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152143">SUSE bug 1152143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154289">SUSE bug 1154289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154598">SUSE bug 1154598</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-10218/">CVE-2019-10218</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-14833/">CVE-2019-14833</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14847/">CVE-2019-14847</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491688" comment="libdcerpc-binding0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491689" comment="libdcerpc-binding0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491690" comment="libdcerpc-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491691" comment="libdcerpc-samr-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491692" comment="libdcerpc-samr0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491693" comment="libdcerpc0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491694" comment="libdcerpc0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491695" comment="libndr-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491696" comment="libndr-krb5pac-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491697" comment="libndr-krb5pac0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491698" comment="libndr-krb5pac0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491699" comment="libndr-nbt-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491700" comment="libndr-nbt0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491701" comment="libndr-nbt0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491702" comment="libndr-standard-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491703" comment="libndr-standard0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491704" comment="libndr-standard0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491705" comment="libndr0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491706" comment="libndr0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491707" comment="libnetapi-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491708" comment="libnetapi0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491709" comment="libnetapi0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491710" comment="libsamba-credentials-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491711" comment="libsamba-credentials0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491712" comment="libsamba-credentials0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491713" comment="libsamba-errors-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491714" comment="libsamba-errors0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491715" comment="libsamba-errors0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491716" comment="libsamba-hostconfig-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491717" comment="libsamba-hostconfig0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491718" comment="libsamba-hostconfig0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491719" comment="libsamba-passdb-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491720" comment="libsamba-passdb0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491721" comment="libsamba-passdb0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491722" comment="libsamba-policy-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491723" comment="libsamba-policy-python3-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491724" comment="libsamba-policy0-python3-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491725" comment="libsamba-util-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491726" comment="libsamba-util0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491727" comment="libsamba-util0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491728" comment="libsamdb-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491729" comment="libsamdb0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491730" comment="libsamdb0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491731" comment="libsmbclient-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491732" comment="libsmbclient0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491733" comment="libsmbconf-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491734" comment="libsmbconf0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491735" comment="libsmbconf0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491736" comment="libsmbldap-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491737" comment="libsmbldap2-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491738" comment="libsmbldap2-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491739" comment="libtevent-util-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491740" comment="libtevent-util0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491741" comment="libtevent-util0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491742" comment="libwbclient-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491743" comment="libwbclient0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491744" comment="libwbclient0-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491745" comment="samba-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491746" comment="samba-client-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491747" comment="samba-core-devel-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491748" comment="samba-libs-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491749" comment="samba-libs-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491750" comment="samba-libs-python3-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491751" comment="samba-python3-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491752" comment="samba-winbind-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491753" comment="samba-winbind-32bit-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137791" version="1" class="patch">
	<metadata>
		<title>Security update for python-ecdsa (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1153165" ref_url="https://bugzilla.suse.com/1153165" source="BUGZILLA"/>
		<reference ref_id="1154217" ref_url="https://bugzilla.suse.com/1154217" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14853" ref_url="https://www.suse.com/security/cve/CVE-2019-14853/" source="CVE"/>
		<reference ref_id="CVE-2019-14859" ref_url="https://www.suse.com/security/cve/CVE-2019-14859/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006086.html" source="SUSE-SU"/>
		<description>
This update for python-ecdsa to version 0.13.3 fixes the following issues:

Security issues fixed:

- CVE-2019-14853: Fixed unexpected exceptions during signature decoding (bsc#1153165).
- CVE-2019-14859: Fixed a signature malleability caused by insufficient checks of DER encoding (bsc#1154217).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-04"/>
	<updated date="2019-11-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1153165">SUSE bug 1153165</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154217">SUSE bug 1154217</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14853/">CVE-2019-14853</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14859/">CVE-2019-14859</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491754" comment="python3-ecdsa-0.13.3-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137792" version="1" class="patch">
	<metadata>
		<title>Security update for rsyslog (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141063" ref_url="https://bugzilla.suse.com/1141063" source="BUGZILLA"/>
		<reference ref_id="1153451" ref_url="https://bugzilla.suse.com/1153451" source="BUGZILLA"/>
		<reference ref_id="1153459" ref_url="https://bugzilla.suse.com/1153459" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17041" ref_url="https://www.suse.com/security/cve/CVE-2019-17041/" source="CVE"/>
		<reference ref_id="CVE-2019-17042" ref_url="https://www.suse.com/security/cve/CVE-2019-17042/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2937-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006105.html" source="SUSE-SU"/>
		<description>
This update for rsyslog fixes the following issues:

Security issues fixed:     

- CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451).
- CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459).

Other issue addressed: 

- Fixed an issue where rsyslog was SEGFAULT due to a mutex double-unlock (bsc#1141063). 
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-08"/>
	<updated date="2019-11-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141063">SUSE bug 1141063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153451">SUSE bug 1153451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153459">SUSE bug 1153459</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-17041/">CVE-2019-17041</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-17042/">CVE-2019-17042</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490707" comment="rsyslog-8.33.1-3.22.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137793" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1046299" ref_url="https://bugzilla.suse.com/1046299" source="BUGZILLA"/>
		<reference ref_id="1046303" ref_url="https://bugzilla.suse.com/1046303" source="BUGZILLA"/>
		<reference ref_id="1046305" ref_url="https://bugzilla.suse.com/1046305" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1073513" ref_url="https://bugzilla.suse.com/1073513" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1086323" ref_url="https://bugzilla.suse.com/1086323" source="BUGZILLA"/>
		<reference ref_id="1087092" ref_url="https://bugzilla.suse.com/1087092" source="BUGZILLA"/>
		<reference ref_id="1089644" ref_url="https://bugzilla.suse.com/1089644" source="BUGZILLA"/>
		<reference ref_id="1090631" ref_url="https://bugzilla.suse.com/1090631" source="BUGZILLA"/>
		<reference ref_id="1093205" ref_url="https://bugzilla.suse.com/1093205" source="BUGZILLA"/>
		<reference ref_id="1096254" ref_url="https://bugzilla.suse.com/1096254" source="BUGZILLA"/>
		<reference ref_id="1097583" ref_url="https://bugzilla.suse.com/1097583" source="BUGZILLA"/>
		<reference ref_id="1097584" ref_url="https://bugzilla.suse.com/1097584" source="BUGZILLA"/>
		<reference ref_id="1097585" ref_url="https://bugzilla.suse.com/1097585" source="BUGZILLA"/>
		<reference ref_id="1097586" ref_url="https://bugzilla.suse.com/1097586" source="BUGZILLA"/>
		<reference ref_id="1097587" ref_url="https://bugzilla.suse.com/1097587" source="BUGZILLA"/>
		<reference ref_id="1097588" ref_url="https://bugzilla.suse.com/1097588" source="BUGZILLA"/>
		<reference ref_id="1098291" ref_url="https://bugzilla.suse.com/1098291" source="BUGZILLA"/>
		<reference ref_id="1101674" ref_url="https://bugzilla.suse.com/1101674" source="BUGZILLA"/>
		<reference ref_id="1109158" ref_url="https://bugzilla.suse.com/1109158" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1117665" ref_url="https://bugzilla.suse.com/1117665" source="BUGZILLA"/>
		<reference ref_id="1119461" ref_url="https://bugzilla.suse.com/1119461" source="BUGZILLA"/>
		<reference ref_id="1119465" ref_url="https://bugzilla.suse.com/1119465" source="BUGZILLA"/>
		<reference ref_id="1123034" ref_url="https://bugzilla.suse.com/1123034" source="BUGZILLA"/>
		<reference ref_id="1123080" ref_url="https://bugzilla.suse.com/1123080" source="BUGZILLA"/>
		<reference ref_id="1133140" ref_url="https://bugzilla.suse.com/1133140" source="BUGZILLA"/>
		<reference ref_id="1134303" ref_url="https://bugzilla.suse.com/1134303" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135854" ref_url="https://bugzilla.suse.com/1135854" source="BUGZILLA"/>
		<reference ref_id="1135873" ref_url="https://bugzilla.suse.com/1135873" source="BUGZILLA"/>
		<reference ref_id="1135967" ref_url="https://bugzilla.suse.com/1135967" source="BUGZILLA"/>
		<reference ref_id="1137040" ref_url="https://bugzilla.suse.com/1137040" source="BUGZILLA"/>
		<reference ref_id="1137799" ref_url="https://bugzilla.suse.com/1137799" source="BUGZILLA"/>
		<reference ref_id="1137861" ref_url="https://bugzilla.suse.com/1137861" source="BUGZILLA"/>
		<reference ref_id="1138190" ref_url="https://bugzilla.suse.com/1138190" source="BUGZILLA"/>
		<reference ref_id="1139073" ref_url="https://bugzilla.suse.com/1139073" source="BUGZILLA"/>
		<reference ref_id="1140090" ref_url="https://bugzilla.suse.com/1140090" source="BUGZILLA"/>
		<reference ref_id="1140729" ref_url="https://bugzilla.suse.com/1140729" source="BUGZILLA"/>
		<reference ref_id="1140845" ref_url="https://bugzilla.suse.com/1140845" source="BUGZILLA"/>
		<reference ref_id="1140883" ref_url="https://bugzilla.suse.com/1140883" source="BUGZILLA"/>
		<reference ref_id="1141600" ref_url="https://bugzilla.suse.com/1141600" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142667" ref_url="https://bugzilla.suse.com/1142667" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1144338" ref_url="https://bugzilla.suse.com/1144338" source="BUGZILLA"/>
		<reference ref_id="1144375" ref_url="https://bugzilla.suse.com/1144375" source="BUGZILLA"/>
		<reference ref_id="1144449" ref_url="https://bugzilla.suse.com/1144449" source="BUGZILLA"/>
		<reference ref_id="1144903" ref_url="https://bugzilla.suse.com/1144903" source="BUGZILLA"/>
		<reference ref_id="1145099" ref_url="https://bugzilla.suse.com/1145099" source="BUGZILLA"/>
		<reference ref_id="1146612" ref_url="https://bugzilla.suse.com/1146612" source="BUGZILLA"/>
		<reference ref_id="1148410" ref_url="https://bugzilla.suse.com/1148410" source="BUGZILLA"/>
		<reference ref_id="1149119" ref_url="https://bugzilla.suse.com/1149119" source="BUGZILLA"/>
		<reference ref_id="1149853" ref_url="https://bugzilla.suse.com/1149853" source="BUGZILLA"/>
		<reference ref_id="1150452" ref_url="https://bugzilla.suse.com/1150452" source="BUGZILLA"/>
		<reference ref_id="1150457" ref_url="https://bugzilla.suse.com/1150457" source="BUGZILLA"/>
		<reference ref_id="1150465" ref_url="https://bugzilla.suse.com/1150465" source="BUGZILLA"/>
		<reference ref_id="1150875" ref_url="https://bugzilla.suse.com/1150875" source="BUGZILLA"/>
		<reference ref_id="1151508" ref_url="https://bugzilla.suse.com/1151508" source="BUGZILLA"/>
		<reference ref_id="1151807" ref_url="https://bugzilla.suse.com/1151807" source="BUGZILLA"/>
		<reference ref_id="1152033" ref_url="https://bugzilla.suse.com/1152033" source="BUGZILLA"/>
		<reference ref_id="1152624" ref_url="https://bugzilla.suse.com/1152624" source="BUGZILLA"/>
		<reference ref_id="1152665" ref_url="https://bugzilla.suse.com/1152665" source="BUGZILLA"/>
		<reference ref_id="1152685" ref_url="https://bugzilla.suse.com/1152685" source="BUGZILLA"/>
		<reference ref_id="1152696" ref_url="https://bugzilla.suse.com/1152696" source="BUGZILLA"/>
		<reference ref_id="1152697" ref_url="https://bugzilla.suse.com/1152697" source="BUGZILLA"/>
		<reference ref_id="1152788" ref_url="https://bugzilla.suse.com/1152788" source="BUGZILLA"/>
		<reference ref_id="1152790" ref_url="https://bugzilla.suse.com/1152790" source="BUGZILLA"/>
		<reference ref_id="1152791" ref_url="https://bugzilla.suse.com/1152791" source="BUGZILLA"/>
		<reference ref_id="1153112" ref_url="https://bugzilla.suse.com/1153112" source="BUGZILLA"/>
		<reference ref_id="1153158" ref_url="https://bugzilla.suse.com/1153158" source="BUGZILLA"/>
		<reference ref_id="1153236" ref_url="https://bugzilla.suse.com/1153236" source="BUGZILLA"/>
		<reference ref_id="1153263" ref_url="https://bugzilla.suse.com/1153263" source="BUGZILLA"/>
		<reference ref_id="1153476" ref_url="https://bugzilla.suse.com/1153476" source="BUGZILLA"/>
		<reference ref_id="1153509" ref_url="https://bugzilla.suse.com/1153509" source="BUGZILLA"/>
		<reference ref_id="1153607" ref_url="https://bugzilla.suse.com/1153607" source="BUGZILLA"/>
		<reference ref_id="1153646" ref_url="https://bugzilla.suse.com/1153646" source="BUGZILLA"/>
		<reference ref_id="1153681" ref_url="https://bugzilla.suse.com/1153681" source="BUGZILLA"/>
		<reference ref_id="1153713" ref_url="https://bugzilla.suse.com/1153713" source="BUGZILLA"/>
		<reference ref_id="1153717" ref_url="https://bugzilla.suse.com/1153717" source="BUGZILLA"/>
		<reference ref_id="1153718" ref_url="https://bugzilla.suse.com/1153718" source="BUGZILLA"/>
		<reference ref_id="1153719" ref_url="https://bugzilla.suse.com/1153719" source="BUGZILLA"/>
		<reference ref_id="1153811" ref_url="https://bugzilla.suse.com/1153811" source="BUGZILLA"/>
		<reference ref_id="1153969" ref_url="https://bugzilla.suse.com/1153969" source="BUGZILLA"/>
		<reference ref_id="1154108" ref_url="https://bugzilla.suse.com/1154108" source="BUGZILLA"/>
		<reference ref_id="1154189" ref_url="https://bugzilla.suse.com/1154189" source="BUGZILLA"/>
		<reference ref_id="1154242" ref_url="https://bugzilla.suse.com/1154242" source="BUGZILLA"/>
		<reference ref_id="1154268" ref_url="https://bugzilla.suse.com/1154268" source="BUGZILLA"/>
		<reference ref_id="1154354" ref_url="https://bugzilla.suse.com/1154354" source="BUGZILLA"/>
		<reference ref_id="1154372" ref_url="https://bugzilla.suse.com/1154372" source="BUGZILLA"/>
		<reference ref_id="1154521" ref_url="https://bugzilla.suse.com/1154521" source="BUGZILLA"/>
		<reference ref_id="1154578" ref_url="https://bugzilla.suse.com/1154578" source="BUGZILLA"/>
		<reference ref_id="1154607" ref_url="https://bugzilla.suse.com/1154607" source="BUGZILLA"/>
		<reference ref_id="1154608" ref_url="https://bugzilla.suse.com/1154608" source="BUGZILLA"/>
		<reference ref_id="1154610" ref_url="https://bugzilla.suse.com/1154610" source="BUGZILLA"/>
		<reference ref_id="1154611" ref_url="https://bugzilla.suse.com/1154611" source="BUGZILLA"/>
		<reference ref_id="1154651" ref_url="https://bugzilla.suse.com/1154651" source="BUGZILLA"/>
		<reference ref_id="1154737" ref_url="https://bugzilla.suse.com/1154737" source="BUGZILLA"/>
		<reference ref_id="1154747" ref_url="https://bugzilla.suse.com/1154747" source="BUGZILLA"/>
		<reference ref_id="1154848" ref_url="https://bugzilla.suse.com/1154848" source="BUGZILLA"/>
		<reference ref_id="1154858" ref_url="https://bugzilla.suse.com/1154858" source="BUGZILLA"/>
		<reference ref_id="1154905" ref_url="https://bugzilla.suse.com/1154905" source="BUGZILLA"/>
		<reference ref_id="1154956" ref_url="https://bugzilla.suse.com/1154956" source="BUGZILLA"/>
		<reference ref_id="1155061" ref_url="https://bugzilla.suse.com/1155061" source="BUGZILLA"/>
		<reference ref_id="1155178" ref_url="https://bugzilla.suse.com/1155178" source="BUGZILLA"/>
		<reference ref_id="1155179" ref_url="https://bugzilla.suse.com/1155179" source="BUGZILLA"/>
		<reference ref_id="1155184" ref_url="https://bugzilla.suse.com/1155184" source="BUGZILLA"/>
		<reference ref_id="1155186" ref_url="https://bugzilla.suse.com/1155186" source="BUGZILLA"/>
		<reference ref_id="1155671" ref_url="https://bugzilla.suse.com/1155671" source="BUGZILLA"/>
		<reference ref_id="802154" ref_url="https://bugzilla.suse.com/802154" source="BUGZILLA"/>
		<reference ref_id="814594" ref_url="https://bugzilla.suse.com/814594" source="BUGZILLA"/>
		<reference ref_id="919448" ref_url="https://bugzilla.suse.com/919448" source="BUGZILLA"/>
		<reference ref_id="987367" ref_url="https://bugzilla.suse.com/987367" source="BUGZILLA"/>
		<reference ref_id="998153" ref_url="https://bugzilla.suse.com/998153" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12207" ref_url="https://www.suse.com/security/cve/CVE-2018-12207/" source="CVE"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-11135" ref_url="https://www.suse.com/security/cve/CVE-2019-11135/" source="CVE"/>
		<reference ref_id="CVE-2019-16232" ref_url="https://www.suse.com/security/cve/CVE-2019-16232/" source="CVE"/>
		<reference ref_id="CVE-2019-16233" ref_url="https://www.suse.com/security/cve/CVE-2019-16233/" source="CVE"/>
		<reference ref_id="CVE-2019-16234" ref_url="https://www.suse.com/security/cve/CVE-2019-16234/" source="CVE"/>
		<reference ref_id="CVE-2019-16995" ref_url="https://www.suse.com/security/cve/CVE-2019-16995/" source="CVE"/>
		<reference ref_id="CVE-2019-17056" ref_url="https://www.suse.com/security/cve/CVE-2019-17056/" source="CVE"/>
		<reference ref_id="CVE-2019-17133" ref_url="https://www.suse.com/security/cve/CVE-2019-17133/" source="CVE"/>
		<reference ref_id="CVE-2019-17666" ref_url="https://www.suse.com/security/cve/CVE-2019-17666/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2947-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race
  condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine
  Exception during Page Size Change, causing the CPU core to be non-functional.

  The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in
  executable pages by splitting / merging huge pages into small pages as
  needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735

- CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with
  Transactional Memory support could be used to facilitate sidechannel
  information leaks out of microarchitectural buffers, similar to the
  previously described 'Microarchitectural Data Sampling' attack.

  The Linux kernel was supplemented with the option to disable TSX operation
  altogether (requiring CPU Microcode updates on older systems) and better
  flushing of microarchitectural buffers (VERW).

  The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251

- CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port
  failed to add a port, which may have caused denial of service (bsc#1152685).

- CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the
  alloc_workqueue return value, leading to a NULL pointer dereference.
  (bsc#1150457).

- CVE-2019-10220: Added sanity checks on the pathnames passed to the user
  space. (bsc#1144903).

- CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).

- CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell
  libertas driver (bsc#1150465).

- CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return
  value, leading to a NULL pointer dereference. (bsc#1150452).

- CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE,
  leading to a Buffer Overflow (bsc#1153158).

- CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which
  meant that unprivileged users could create a raw socket (bsc#1152788).

The following non-security bugs were fixed:

- 9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
- acpi: cppc: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510).
- acpi: cppc: do not require the _PSD method (bsc#1051510).
- acpi: processor: do not print errors for processorIDs == 0xff (bsc#1051510).
- act_mirred: Fix mirred_init_module error handling (bsc#1051510).
- alsa: bebob: Fix prototype of helper function to return negative value (bsc#1051510).
- alsa: firewire-motu: add support for MOTU 4pre (bsc#1111666).
- alsa: hda/hdmi: Do not report spurious jack state changes (bsc#1051510).
- alsa: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510).
- alsa: hda/realtek: Add support for ALC623 (bsc#1051510).
- alsa: hda/realtek: Add support for ALC711 (bsc#1051510).
- alsa: hda/realtek: Check beep whitelist before assigning in all codecs (bsc#1051510).
- alsa: hda/realtek: Enable headset mic on Asus MJ401TA (bsc#1051510).
- alsa: hda/realtek: Fix 2 front mics of codec 0x623 (bsc#1051510).
- alsa: hda/realtek: Fix alienware headset mic (bsc#1051510).
- alsa: hda/realtek: PCI quirk for Medion E4254 (bsc#1051510).
- alsa: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 (bsc#1051510).
- alsa: hda/sigmatel: remove unused variable 'stac9200_core_init' (bsc#1051510).
- alsa: hda: Add Elkhart Lake PCI ID (bsc#1051510).
- alsa: hda: Add Tigerlake/Jasperlake PCI ID (bsc#1051510).
- alsa: hda: Add a quirk model for fixing Huawei Matebook X right speaker (bsc#1051510).
- alsa: hda: Add laptop imic fixup for ASUS M9V laptop (bsc#1051510).
- alsa: hda: Add support of Zhaoxin controller (bsc#1051510).
- alsa: hda: Apply AMD controller workaround for Raven platform (bsc#1051510).
- alsa: hda: Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510).
- alsa: hda: Drop unsol event handler for Intel HDMI codecs (bsc#1051510).
- alsa: hda: Expand pin_match function to match upcoming new tbls (bsc#1051510).
- alsa: hda: Flush interrupts on disabling (bsc#1051510).
- alsa: hda: Force runtime PM on Nvidia HDMI codecs (bsc#1051510).
- alsa: hda: Inform too slow responses (bsc#1051510).
- alsa: hda: Set fifo_size for both playback and capture streams (bsc#1051510).
- alsa: hda: Show the fatal CORB/RIRB error more clearly (bsc#1051510).
- alsa: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() (bsc#1051510).
- alsa: line6: sizeof (byte) is always 1, use that fact (bsc#1051510).
- alsa: timer: Fix mutex deadlock at releasing card (bsc#1051510).
- alsa: usb-audio: Add DSD support for EVGA NU Audio (bsc#1051510).
- alsa: usb-audio: Add DSD support for Gustard U16/X26 USB Interface (bsc#1051510).
- alsa: usb-audio: Add Hiby device family to quirks for native DSD support (bsc#1051510).
- alsa: usb-audio: Add Pioneer DDJ-SX3 PCM quirck (bsc#1051510).
- alsa: usb-audio: Clean up check_input_term() (bsc#1051510).
- alsa: usb-audio: DSD auto-detection for Playback Designs (bsc#1051510).
- alsa: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1051510).
- alsa: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1111666).
- alsa: usb-audio: Fix copy&amp;paste error in the validator (bsc#1111666).
- alsa: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() (bsc#1051510).
- alsa: usb-audio: More validations of descriptor units (bsc#1051510).
- alsa: usb-audio: Remove superfluous bLength checks (bsc#1051510).
- alsa: usb-audio: Simplify parse_audio_unit() (bsc#1051510).
- alsa: usb-audio: Skip bSynchAddress endpoint check if it is invalid (bsc#1051510).
- alsa: usb-audio: Unify audioformat release code (bsc#1051510).
- alsa: usb-audio: Unify the release of usb_mixer_elem_info objects (bsc#1051510).
- alsa: usb-audio: Update DSD support quirks for Oppo and Rotel (bsc#1051510).
- alsa: usb-audio: fix PCM device order (bsc#1051510).
- alsa: usb-audio: remove some dead code (bsc#1051510).
- appletalk: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- arcnet: provide a buffer big enough to actually receive packets (networking-stable-19_09_30).
- asoc: Define a set of DAPM pre/post-up events (bsc#1051510).
- asoc: dmaengine: Make the pcm-&gt;name equal to pcm-&gt;id if the name is not set (bsc#1051510).
- asoc: intel: Fix use of potentially uninitialized variable (bsc#1051510).
- asoc: intel: nhlt: Fix debug print format (bsc#1051510).
- asoc: rockchip: i2s: Fix RPM imbalance (bsc#1051510).
- asoc: rsnd: Reinitialize bit clock inversion flag for every format setting (bsc#1051510).
- asoc: sgtl5000: Fix charge pump source assignment (bsc#1051510).
- auxdisplay: panel: need to delete scan_timer when misc_register fails in panel_attach (bsc#1051510).
- ax25: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- blk-wbt: abstract out end IO completion handler (bsc#1135873).
- blk-wbt: fix has-sleeper queueing check (bsc#1135873).
- blk-wbt: improve waking of tasks (bsc#1135873).
- blk-wbt: move disable check into get_limit() (bsc#1135873).
- blk-wbt: use wq_has_sleeper() for wq active check (bsc#1135873).
- block: add io timeout to sysfs (bsc#1148410).
- block: add io timeout to sysfs (bsc#1148410).
- block: do not show io_timeout if driver has no timeout handler (bsc#1148410).
- block: do not show io_timeout if driver has no timeout handler (bsc#1148410).
- bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices (bsc#1051510).
- bnx2x: Fix VF's VLAN reconfiguration in reload (bsc#1086323 ).
- bnxt_en: Add PCI IDs for 57500 series NPAR devices (bsc#1153607).
- bpf: fix use after free in prog symbol exposure (bsc#1083647).
- brcmfmac: sdio: Disable auto-tuning around commands expected to fail (bsc#1111666).
- brcmfmac: sdio: Do not tune while the card is off (bsc#1111666).
- bridge/mdb: remove wrong use of NLM_F_MULTI (networking-stable-19_09_15).
- btrfs: Ensure btrfs_init_dev_replace_tgtdev sees up to date values (bsc#1154651).
- btrfs: Ensure replaced device does not have pending chunk allocation (bsc#1154607).
- btrfs: bail out gracefully rather than BUG_ON (bsc#1153646).
- btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() (bsc#1155178).
- btrfs: check for the full sync flag while holding the inode lock during fsync (bsc#1153713).
- btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() (bsc#1155179).
- btrfs: remove wrong use of volume_mutex from btrfs_dev_replace_start (bsc#1154651).
- btrfs: tracepoints: Fix bad entry members of qgroup events (bsc#1155186).
- btrfs: tracepoints: Fix wrong parameter order for qgroup events (bsc#1155184).
- can: mcp251x: mcp251x_hw_reset(): allow more time after a reset (bsc#1051510).
- can: xilinx_can: xcan_probe(): skip error message on deferred probe (bsc#1051510).
- cdc_ether: fix rndis support for Mediatek based smartphones (networking-stable-19_09_15).
- cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize (bsc#1051510).
- ceph: fix directories inode i_blkbits initialization (bsc#1153717).
- ceph: reconnect connection if session hang in opening state (bsc#1153718).
- ceph: update the mtime when truncating up (bsc#1153719).
- cfg80211: Purge frame registrations on iftype change (bsc#1051510).
- cfg80211: add and use strongly typed element iteration macros (bsc#1051510).
- clk: at91: select parent if main oscillator or bypass is enabled (bsc#1051510).
- clk: qoriq: Fix -Wunused-const-variable (bsc#1051510).
- clk: sirf: Do not reference clk_init_data after registration (bsc#1051510).
- clk: zx296718: Do not reference clk_init_data after registration (bsc#1051510).
- crypto: af_alg: Fix race around ctx-&gt;rcvused by making it atomic_t (bsc#1154737).
- crypto: af_alg: Initialize sg_num_bytes in error code path (bsc#1051510).
- crypto: af_alg: consolidation of duplicate code (bsc#1154737).
- crypto: af_alg: fix race accessing cipher request (bsc#1154737).
- crypto: af_alg: remove locking in async callback (bsc#1154737).
- crypto: af_alg: update correct dst SGL entry (bsc#1051510).
- crypto: af_alg: wait for data at beginning of recvmsg (bsc#1154737).
- crypto: algif: return error code when no data was processed (bsc#1154737).
- crypto: algif_aead: copy AAD from src to dst (bsc#1154737).
- crypto: algif_aead: fix reference counting of null skcipher (bsc#1154737).
- crypto: algif_aead: overhaul memory management (bsc#1154737).
- crypto: algif_aead: skip SGL entries with NULL page (bsc#1154737).
- crypto: algif_skcipher: overhaul memory management (bsc#1154737).
- crypto: talitos: fix missing break in switch statement (bsc#1142635).
- cxgb4: Signedness bug in init_one() (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584).
- cxgb4: do not dma memory off of the stack (bsc#1152790).
- cxgb4: fix endianness for vlan value in cxgb4_tc_flower (bsc#1064802 bsc#1066129).
- cxgb4: offload VLAN flows regardless of VLAN ethtype (bsc#1064802 bsc#1066129).
- cxgb4: reduce kernel stack usage in cudbg_collect_mem_region() (bsc#1073513).
- cxgb4: smt: Add lock for atomic_dec_and_test (bsc#1064802 bsc#1066129).
- cxgb4:Fix out-of-bounds MSI-X info array access (networking-stable-19_10_05).
- drm/amd/display: Restore backlight brightness after system resume (bsc#1112178)
- drm/amd/display: fix issue where 252-255 values are clipped (bsc#1111666).
- drm/amd/display: reprogram VM config when system resume (bsc#1111666).
- drm/amd/display: support spdif (bsc#1111666).
- drm/amd/dm: Understand why attaching path/tile properties are needed (bsc#1111666).
- drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) (bsc#1051510).
- drm/amd/pp: Fix truncated clock value when set watermark (bsc#1111666).
- drm/amdgpu/gfx9: Update gfx9 golden settings (bsc#1111666).
- drm/amdgpu/si: fix ASIC tests (git-fixes).
- drm/amdgpu: Check for valid number of registers to read (bsc#1051510).
- drm/amdgpu: Fix KFD-related kernel oops on Hawaii (bsc#1111666).
- drm/amdgpu: Update gc_9_0 golden settings (bsc#1111666).
- drm/amdkfd: Add missing Polaris10 ID (bsc#1111666).
- drm/ast: Fixed reboot test may cause system hanged (bsc#1051510).
- drm/atomic_helper: Allow DPMS On&lt;-&gt;Off changes for unregistered connectors (bsc#1111666).
- drm/atomic_helper: Disallow new modesets on unregistered connectors (bsc#1111666).
- drm/atomic_helper: Stop modesets on unregistered connectors harder (bsc#1111666).
- drm/bridge: tc358767: Increase AUX transfer length limit (bsc#1051510).
- drm/bridge: tfp410: fix memleak in get_modes() (bsc#1111666).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 (bsc#1051510).
- drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)
- drm/i915/cmdparser: Ignore Length operands during (bsc#1135967)
- drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)
- drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)
- drm/i915/gvt: update vgpu workload head pointer correctly (bsc#1112178)
- drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)
- drm/i915: Add support for mandatory cmdparsing (bsc#1135967)
- drm/i915: Allow parsing of unsized batches (bsc#1135967)
- drm/i915: Cleanup gt powerstate from gem (bsc#1111666).
- drm/i915: Disable Secure Batches for gen6+ (bsc#1135967)
- drm/i915: Fix intel_dp_mst_best_encoder() (bsc#1111666).
- drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)
- drm/i915: Remove Master tables from cmdparser (bsc#1135967)
- drm/i915: Rename gen7 cmdparser tables (bsc#1135967)
- drm/i915: Restore sane defaults for KMS on GEM error load (bsc#1111666).
- drm/i915: Support ro ppgtt mapped cmdparser shadow (bsc#1135967)
- drm/mediatek: set DMA max segment size (bsc#1111666).
- drm/msm/dsi: Fix return value check for clk_get_parent (bsc#1111666).
- drm/msm/dsi: Implement reset correctly (bsc#1051510).
- drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling (bsc#1111666).
- drm/nouveau/kms/nv50-: Do not create MSTMs for eDP connectors (bsc#1112178)
- drm/nouveau/volt: Fix for some cards having 0 maximum voltage (bsc#1111666).
- drm/omap: fix max fclk divider for omap36xx (bsc#1111666).
- drm/panel: check failure cases in the probe func (bsc#1111666).
- drm/panel: make drm_panel.h self-contained (bsc#1111666).
- drm/panel: simple: fix AUO g185han01 horizontal blanking (bsc#1051510).
- drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed (bsc#1111666).
- drm/radeon: Fix EEH during kexec (bsc#1051510).
- drm/rockchip: Check for fast link training before enabling psr (bsc#1111666).
- drm/stm: attach gem fence to atomic state (bsc#1111666).
- drm/tilcdc: Register cpufreq notifier after we have initialized crtc (bsc#1051510).
- drm/vmwgfx: Fix double free in vmw_recv_msg() (bsc#1051510).
- drm: Flush output polling on shutdown (bsc#1051510).
- drm: add __user attribute to ptr_to_compat() (bsc#1111666).
- drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC (bsc#1111666).
- drm: rcar-du: lvds: Fix bridge_to_rcar_lvds (bsc#1111666).
- e1000e: add workaround for possible stalled packet (bsc#1051510).
- efi/arm: Show SMBIOS bank/device location in CPER and GHES error logs (bsc#1152033).
- efi/memattr: Do not bail on zero VA if it equals the region's PA (bsc#1051510).
- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efivar/ssdt: Do not iterate over EFI vars if no SSDT override was specified (bsc#1051510).
- firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices (git-fixes).
- gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() (bsc#1051510).
- hid: apple: Fix stuck function keys when using FN (bsc#1051510).
- hid: fix error message in hid_open_report() (bsc#1051510).
- hid: hidraw: Fix invalid read in hidraw_ioctl (bsc#1051510).
- hid: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy() (bsc#1051510).
- hid: logitech: Fix general protection fault caused by Logitech driver (bsc#1051510).
- hid: prodikeys: Fix general protection fault during probe (bsc#1051510).
- hid: sony: Fix memory corruption issue on cleanup (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' (bsc#1051510).
- hwrng: core: do not wait on add_early_randomness() (git-fixes).
- hyperv: set nvme msi interrupts to unmanaged (jsc#SLE-8953, jsc#SLE-9221, jsc#SLE-4941, bsc#1119461, bsc#1119465, bsc#1138190, bsc#1154905).
- i2c: riic: Clear NACK in tend isr (bsc#1051510).
- ib/core, ipoib: Do not overreact to SM LID change event (bsc#1154108)
- ib/core: Add mitigation for Spectre V1 (bsc#1155671)
- ib/hfi1: Remove overly conservative VM_EXEC flag check (bsc#1144449).
- ib/mlx5: Consolidate use_umr checks into single function (bsc#1093205).
- ib/mlx5: Fix MR re-registration flow to use UMR properly (bsc#1093205).
- ib/mlx5: Report correctly tag matching rendezvous capability (bsc#1046305).
- ieee802154: atusb: fix use-after-free at disconnect (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- ieee802154: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- iio: adc: ad799x: fix probe error handling (bsc#1051510).
- iio: light: opt3001: fix mutex unlock race (bsc#1051510).
- ima: always return negative code for error (bsc#1051510).
- input: da9063: fix capability and drop KEY_SLEEP (bsc#1051510).
- input: synaptics-rmi4: avoid processing unknown IRQs (bsc#1051510).
- integrity: prevent deadlock during digsig verification (bsc#1090631).
- iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 (bsc#1137799).
- iommu/amd: Check PM_LEVEL_SIZE() condition in locked section (bsc#1154608).
- iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems (bsc#1137799).
- iommu/amd: Remove domain-&gt;updated (bsc#1154610).
- iommu/amd: Wait for completion of IOTLB flush in attach_device (bsc#1154611).
- ipmi_si: Only schedule continuously in the thread in maintenance mode (bsc#1051510).
- ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' (networking-stable-19_09_15).
- ipv6: Handle missing host route in __ipv6_ifa_notify (networking-stable-19_10_05).
- ipv6: drop incoming packets having a v4mapped source address (networking-stable-19_10_05).
- iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init (bsc#1111666).
- ixgbe: Fix secpath usage for IPsec TX offload (bsc#1113994 bsc#1151807).
- ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (bsc#1101674).
- ixgbe: sync the first fragment unconditionally (bsc#1133140).
- kABI workaround for crypto/af_alg changes (bsc#1154737).
- kABI workaround for drm_connector.registered type changes (bsc#1111666).
- kABI workaround for mmc_host retune_crc_disable flag addition (bsc#1111666).
- kABI workaround for snd_hda_pick_pin_fixup() changes (bsc#1051510).
- kabi/severities: Whitelist functions internal to radix mm. To call these functions you have to first detect if you are running in radix mm mode which can't be expected of OOT code.
- kabi: net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05).
- kernel-binary.spec.in: Fix build of non-modular kernels (boo#1154578).
- kernel-binary.spec.in: Obsolete kgraft packages only when not building them.
- kernel-binary: Drop .kernel-binary.spec.buildenv (boo#1154578). Without this patch, /usr/src/linux-@VERSION@-@RELEASE_SHORT@-obj/x86_64/vanilla/.kernel-binary.spec.buildenv contained rpm %_smp_mflags in a line like export MAKE_ARGS=' --output-sync -j4' This made it hard to produce bit-identical builds.
- kernel-binary: check also bzImage on s390/s390x Starting with 4.19-rc1, uncompressed image is no longer built on s390x. If file 'image' is not found in arch/s390/boot after the build, try bzImage instead. For now, install bzImage under the name image-* until we know grub2 and our grub2 scripts can handle correct name.
- kernel-subpackage-build: create zero size ghost for uncompressed vmlinux (bsc#1154354). It is not strictly necessary to uncompress it so maybe the ghost file can be 0 size in this case.
- kernel/sysctl.c: do not override max_threads provided by userspace (bnc#1150875).
- ksm: cleanup stable_node chain collapse case (bnc#1144338).
- ksm: fix use after free with merge_across_nodes = 0 (bnc#1144338).
- ksm: introduce ksm_max_page_sharing per page deduplication limit (bnc#1144338).
- ksm: optimize refile of stable_node_dup at the head of the chain (bnc#1144338).
- ksm: swap the two output parameters of chain/chain_prune (bnc#1144338).
- kvm: Convert kvm_lock to a mutex (bsc#1117665).
- kvm: mmu: drop vcpu param in gpte_access (bsc#1117665).
- kvm: ppc: book3s hv: use smp_mb() when setting/clearing host_ipi flag (bsc#1061840).
- kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bsc#1117665).
- kvm: x86, powerpc: do not allow clearing largepages debugfs entry (bsc#1117665).
- kvm: x86: Do not release the page inside mmu_set_spte() (bsc#1117665).
- kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (bsc#1117665).
- kvm: x86: adjust kvm_mmu_page member to save 8 bytes (bsc#1117665).
- kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (bsc#1117665).
- kvm: x86: make FNAME(fetch) and __direct_map more similar (bsc#1117665).
- kvm: x86: remove now unneeded hugepage gfn adjustment (bsc#1117665).
- lib/mpi: Fix karactx leak in mpi_powm (bsc#1051510).
- libertas: Add missing sentinel at end of if_usb.c fw_table (bsc#1051510).
- libnvdimm/security: provide fix for secure-erase to use zero-key (bsc#1149853).
- lpfc: Add FA-WWN Async Event reporting (bsc#1154521).
- lpfc: Add FC-AL support to lpe32000 models (bsc#1154521).
- lpfc: Add additional discovery log messages (bsc#1154521).
- lpfc: Add log macros to allow print by serverity or verbocity setting (bsc#1154521).
- lpfc: Fix SLI3 hba in loop mode not discovering devices (bsc#1154521).
- lpfc: Fix bad ndlp ptr in xri aborted handling (bsc#1154521).
- lpfc: Fix hardlockup in lpfc_abort_handler (bsc#1154521).
- lpfc: Fix lockdep errors in sli_ringtx_put (bsc#1154521).
- lpfc: Fix reporting of read-only fw error errors (bsc#1154521).
- lpfc: Make FW logging dynamically configurable (bsc#1154521).
- lpfc: Remove lock contention target write path (bsc#1154521).
- lpfc: Revise interrupt coalescing for missing scenarios (bsc#1154521).
- lpfc: Slight fast-path Performance optimizations (bsc#1154521).
- lpfc: Update lpfc version to 12.6.0.0 (bsc#1154521).
- lpfc: fix coverity error of dereference after null check (bsc#1154521).
- lpfc: fix lpfc_nvmet_mrq to be bound by hdw queue count (bsc#1154521).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- mac80211: accept deauth frames in IBSS mode (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- macsec: drop skb sk before calling gro_cells_receive (bsc#1051510).
- md/raid0: avoid RAID0 data corruption due to layout confusion (bsc#1140090).
- md/raid0: fix warning message for parameter default_layout (bsc#1140090).
- media: atmel: atmel-isc: fix asd memory allocation (bsc#1135642).
- media: cpia2_usb: fix memory leaks (bsc#1051510).
- media: dvb-core: fix a memory leak bug (bsc#1051510).
- media: exynos4-is: fix leaked of_node references (bsc#1051510).
- media: gspca: zero usb_buf on error (bsc#1051510).
- media: hdpvr: Add device num check and handling (bsc#1051510).
- media: hdpvr: add terminating 0 at end of string (bsc#1051510).
- media: i2c: ov5645: Fix power sequence (bsc#1051510).
- media: iguanair: add sanity checks (bsc#1051510).
- media: omap3isp: Do not set streaming state on random subdevs (bsc#1051510).
- media: omap3isp: Set device on omap3isp subdevs (bsc#1051510).
- media: ov9650: add a sanity check (bsc#1051510).
- media: radio/si470x: kill urb on error (bsc#1051510).
- media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() (bsc#1051510).
- media: saa7146: add cleanup in hexium_attach() (bsc#1051510).
- media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table (bsc#1051510).
- media: stkwebcam: fix runtime PM after driver unbind (bsc#1051510).
- media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (bsc#1051510).
- memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' (bsc#1051510).
- mfd: intel-lpss: Remove D3cold delay (bsc#1051510).
- misdn: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- mld: fix memory leak in mld_del_delrec() (networking-stable-19_09_05).
- mmc: core: API to temporarily disable retuning for SDIO CRC errors (bsc#1111666).
- mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() (bsc#1111666).
- mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence (bsc#1051510).
- mmc: sdhci: Fix incorrect switch to HS mode (bsc#1051510).
- mmc: sdhci: improve ADMA error reporting (bsc#1051510).
- net/ibmvnic: Fix EOI when running in XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes).
- net/mlx4_en: fix a memory leak bug (bsc#1046299).
- net/mlx5: Add device ID of upcoming BlueField-2 (bsc#1046303 ).
- net/mlx5: Fix error handling in mlx5_load() (bsc#1046305 ).
- net/phy: fix DP83865 10 Mbps HDX loopback disable function (networking-stable-19_09_30).
- net/rds: Fix error handling in rds_ib_add_one() (networking-stable-19_10_05).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- net/rds: remove user triggered WARN_ON in rds_sendmsg (bsc#1154848).
- net/sched: act_sample: do not push mac header on ip6gre ingress (networking-stable-19_09_30).
- net: Fix null de-reference of device refcount (networking-stable-19_09_15).
- net: Replace NF_CT_ASSERT() with WARN_ON() (bsc#1146612).
- net: Unpublish sk from sk_reuseport_cb before call_rcu (networking-stable-19_10_05).
- net: fix skb use after free in netpoll (networking-stable-19_09_05).
- net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list (networking-stable-19_09_15).
- net: openvswitch: free vport unless register_netdevice() succeeds (git-fixes).
- net: qlogic: Fix memory leak in ql_alloc_large_buffers (networking-stable-19_10_05).
- net: qrtr: Stop rx_worker before freeing node (networking-stable-19_09_30).
- net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05).
- net: stmmac: dwmac-rk: Do not fail if phy regulator is absent (networking-stable-19_09_05).
- net_sched: add policy validation for action attributes (networking-stable-19_09_30).
- net_sched: fix backward compatibility for TCA_ACT_KIND (git-fixes).
- netfilter: nf_nat: do not bug when mapping already exists (bsc#1146612).
- nfc: fix attrs checks in netlink interface (bsc#1051510).
- nfc: fix memory leak in llcp_sock_bind() (bsc#1051510).
- nfc: pn533: fix use-after-free and memleaks (bsc#1051510).
- nfsv4.1: backchannel request should hold ref on xprt (bsc#1152624).
- nl80211: fix null pointer dereference (bsc#1051510).
- objtool: Clobber user CFLAGS variable (bsc#1153236).
- openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC (networking-stable-19_09_30).
- packaging: add support for riscv64
- pci: Correct pci=resource_alignment parameter example (bsc#1051510).
- pci: dra7xx: Fix legacy INTD IRQ handling (bsc#1087092).
- pci: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (bsc#1153263).
- pci: pm: Fix pci_power_up() (bsc#1051510).
- pinctrl: cherryview: restore Strago DMI workaround for all versions (bsc#1111666).
- pinctrl: tegra: Fix write barrier placement in pmx_writel (bsc#1051510).
- platform/x86: classmate-laptop: remove unused variable (bsc#1051510).
- platform/x86: i2c-multi-instantiate: Derive the device name from parent (bsc#1111666).
- platform/x86: i2c-multi-instantiate: Fail the probe if no IRQ provided (bsc#1111666).
- platform/x86: pmc_atom: Add Siemens SIMATIC IPC277E to critclk_systems DMI table (bsc#1051510).
- power: supply: sysfs: ratelimit property read error message (bsc#1051510).
- powerpc/64s/pseries: radix flush translations before MMU is enabled at boot (bsc#1055186).
- powerpc/64s/radix: keep kernel ERAT over local process/guest invalidates (bsc#1055186).
- powerpc/64s/radix: tidy up TLB flushing code (bsc#1055186).
- powerpc/64s: Rename PPC_INVALIDATE_ERAT to PPC_ISA_3_0_INVALIDATE_ERAT (bsc#1055186).
- powerpc/mm/book3s64: Move book3s64 code to pgtable-book3s64 (bsc#1055186).
- powerpc/mm/radix: mark __radix__flush_tlb_range_psize() as __always_inline (bsc#1055186).
- powerpc/mm/radix: mark as __tlbie_pid() and friends as__always_inline (bsc#1055186).
- powerpc/mm: Properly invalidate when setting process table base (bsc#1055186).
- powerpc/mm: mark more tlb functions as __always_inline (bsc#1055186).
- powerpc/pseries/mobility: use cond_resched when updating device tree (bsc#1153112 ltc#181778).
- powerpc/pseries: Remove confusing warning message (bsc#1109158).
- powerpc/rtas: allow rescheduling while changing cpu states (bsc#1153112 ltc#181778).
- powerplay: Respect units on max dcfclk watermark (bsc#1111666).
- qed: iwarp: Fix default window size to be based on chip (bsc#1050536 bsc#1050545).
- qed: iwarp: Fix tc for MPA ll2 connection (bsc#1050536 bsc#1050545).
- qed: iwarp: Use READ_ONCE and smp_store_release to access ep-&gt;state (bsc#1050536 bsc#1050545).
- qed: iwarp: fix uninitialized callback (bsc#1050536 bsc#1050545).
- qmi_wwan: add support for Cinterion CLS8 devices (networking-stable-19_10_05).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- rdma/bnxt_re: Fix spelling mistake 'missin_resp' -&gt; 'missing_resp' (bsc#1050244).
- rdma/hns: Add reset process for function-clear (bsc#1155061).
- rdma/hns: Remove the some magic number (bsc#1155061).
- rdma: Fix goto target to release the allocated memory (bsc#1050244).
- rds: Fix warning (bsc#1154848).
- rpm/config.sh: Enable livepatch.
- rpm/constraints.in: lower disk space required for ARM With a requirement of 35GB, only 2 slow workers are usable for ARM. Current aarch64 build requires 27G and armv6/7 requires 14G. Set requirements respectively to 30GB and 20GB.
- rpm/dtb.spec.in.in: do not make dtb directory inaccessible There is no reason to lock down the dtb directory for ordinary users.
- rpm/kernel-binary.spec.in: Fix kernel-livepatch description typo.
- rpm/kernel-binary.spec.in: build kernel-*-kgraft only for default SLE kernel RT and Azure variants are excluded for the moment. (bsc#1141600)
- rpm/kernel-binary.spec.in: handle modules.builtin.modinfo It was added in 5.2.
- rpm/kernel-binary.spec.in: support partial rt debug config.
- rpm/kernel-subpackage-spec: Mention debuginfo in the subpackage description (bsc#1149119).
- rpm/macros.kernel-source: KMPs should depend on kmod-compat to build. kmod-compat links are used in find-provides.ksyms, find-requires.ksyms, and find-supplements.ksyms in rpm-config-SUSE.
- rpm/mkspec: Correct tarball URL for rc kernels.
- rpm/mkspec: Make building DTBs optional.
- rpm/modflist: Simplify compression support.
- rpm: raise required disk space for binary packages Current disk space constraints (10 GB on s390x, 25 GB on other architectures) no longer suffice for 5.3 kernel builds. The statistics show ~30 GB of disk consumption on x86_64 and ~11 GB on s390x so raise the constraints to 35 GB in general and 14 GB on s390x.
- rpm: support compressed modules Some of our scripts and scriptlets in rpm/ do not expect module files not ending with '.ko' which currently leads to failure in preuninstall scriptlet of cluster-md-kmp-default (and probably also other subpackages). Let those which could be run on compressed module files recognize '.ko.xz' in addition to '.ko'.
- rtlwifi: rtl8192cu: Fix value set in descriptor (bsc#1142635).
- s390/cmf: set_schib_wait add timeout (bsc#1153509, bsc#1153476).
- s390/cpumsf: Check for CPU Measurement sampling (bsc#1153681 LTC#181855).
- s390/crypto: fix gcm-aes-s390 selftest failures (bsc#1137861 LTC#178091).
- s390/pci: add mio_enabled attribute (bsc#1152665 LTC#181729).
- s390/pci: correctly handle MIO opt-out (bsc#1152665 LTC#181729).
- s390/pci: deal with devices that have no support for MIO instructions (bsc#1152665 LTC#181729).
- s390/pci: fix MSI message data (bsc#1152697 LTC#181730).
- s390: add support for IBM z15 machines (bsc#1152696 LTC#181731).
- s390: fix setting of mio addressing control (bsc#1152665 LTC#181729).
- sch_cbq: validate TCA_CBQ_WRROPT to avoid crash (networking-stable-19_10_05).
- sch_dsmark: fix potential NULL deref in dsmark_init() (networking-stable-19_10_05).
- sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero (networking-stable-19_09_15).
- sch_netem: fix a divide by zero in tabledist() (networking-stable-19_09_30).
- sched/fair: Avoid divide by zero when rebalancing domains (bsc#1096254).
- scripts/arch-symbols: add missing link.
- scsi: lpfc: Check queue pointer before use (bsc#1154242).
- scsi: lpfc: Complete removal of FCoE T10 PI support on SLI-4 adapters (bsc#1154521).
- scsi: lpfc: Convert existing %pf users to %ps (bsc#1154521).
- scsi: lpfc: Fix GPF on scsi command completion (bsc#1154521).
- scsi: lpfc: Fix NVME io abort failures causing hangs (bsc#1154521).
- scsi: lpfc: Fix NVMe ABTS in response to receiving an ABTS (bsc#1154521).
- scsi: lpfc: Fix coverity errors on NULL pointer checks (bsc#1154521).
- scsi: lpfc: Fix device recovery errors after PLOGI failures (bsc#1154521).
- scsi: lpfc: Fix devices that do not return after devloss followed by rediscovery (bsc#1137040).
- scsi: lpfc: Fix discovery failures when target device connectivity bounces (bsc#1154521).
- scsi: lpfc: Fix hdwq sgl locks and irq handling (bsc#1154521).
- scsi: lpfc: Fix host hang at boot or slow boot (bsc#1154521).
- scsi: lpfc: Fix list corruption detected in lpfc_put_sgl_per_hdwq (bsc#1154521).
- scsi: lpfc: Fix list corruption in lpfc_sli_get_iocbq (bsc#1154521).
- scsi: lpfc: Fix locking on mailbox command completion (bsc#1154521).
- scsi: lpfc: Fix miss of register read failure check (bsc#1154521).
- scsi: lpfc: Fix null ptr oops updating lpfc_devloss_tmo via sysfs attribute (bsc#1140845).
- scsi: lpfc: Fix premature re-enabling of interrupts in lpfc_sli_host_down (bsc#1154521).
- scsi: lpfc: Fix propagation of devloss_tmo setting to nvme transport (bsc#1140883).
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (bsc#1154521).
- scsi: lpfc: Fix rpi release when deleting vport (bsc#1154521).
- scsi: lpfc: Fix spinlock_irq issues in lpfc_els_flush_cmd() (bsc#1154521).
- scsi: lpfc: Make function lpfc_defer_pt2pt_acc static (bsc#1154521).
- scsi: lpfc: Remove bg debugfs buffers (bsc#1144375).
- scsi: lpfc: Update async event logging (bsc#1154521).
- scsi: lpfc: Update lpfc version to 12.4.0.1 (bsc#1154521).
- scsi: lpfc: cleanup: remove unused fcp_txcmlpq_cnt (bsc#1154521).
- scsi: lpfc: remove left-over BUILD_NVME defines (bsc#1154268).
- scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (bsc#1098291).
- scsi: qedf: fc_rport_priv reference counting fixes (bsc#1098291).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix partial flash write of MBI (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix wait condition in loop (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Initialized mailbox to prevent driver load failure (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: fixup incorrect usage of host_byte (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: stop timer in shutdown path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: storvsc: setup 1:1 mapping between hardware queue and CPU queue (bsc#1140729).
- scsi: zfcp: fix reaction on bit error threshold notification (bsc#1154956 LTC#182054).
- sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' (networking-stable-19_09_15).
- sctp: use transport pf_retrans in sctp_do_8_2_transport_strike (networking-stable-19_09_15).
- skge: fix checksum byte order (networking-stable-19_09_30).
- sock_diag: fix autoloading of the raw_diag module (bsc#1152791).
- sock_diag: request _diag module only when the family or proto has been registered (bsc#1152791).
- staging: bcm2835-audio: Fix draining behavior regression (bsc#1111666).
- staging: vt6655: Fix memory leak in vt6655_probe (bsc#1051510).
- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;= NUM_WEPKEYS (bsc#1051510).
- supporte.conf: add efivarfs to kernel-default-base (bsc#1154858).
- tcp: Do not dequeue SYN/FIN-segments from write-queue (git-gixes).
- tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR (networking-stable-19_09_15).
- tcp: inherit timestamp on mtu probe (networking-stable-19_09_05).
- tcp: remove empty skb from write queue in error cases (networking-stable-19_09_05).
- thermal: Fix use-after-free when unregistering thermal zone device (bsc#1051510).
- thermal_hwmon: Sanitize thermal_zone type (bsc#1051510).
- tipc: add NULL pointer check before calling kfree_rcu (networking-stable-19_09_15).
- tipc: fix unlimited bundling of small messages (networking-stable-19_10_05).
- tracing: Initialize iter-&gt;seq after zeroing in tracing_read_pipe() (bsc#1151508).
- tun: fix use-after-free when register netdev failed (networking-stable-19_09_15).
- tuntap: correctly set SOCKWQ_ASYNC_NOSPACE (bsc#1145099).
- usb: adutux: fix NULL-derefs on disconnect (bsc#1142635).
- usb: adutux: fix use-after-free on disconnect (bsc#1142635).
- usb: adutux: fix use-after-free on release (bsc#1051510).
- usb: chaoskey: fix use-after-free on release (bsc#1051510).
- usb: dummy-hcd: fix power budget for SuperSpeed mode (bsc#1051510).
- usb: iowarrior: fix use-after-free after driver unbind (bsc#1051510).
- usb: iowarrior: fix use-after-free on disconnect (bsc#1051510).
- usb: iowarrior: fix use-after-free on release (bsc#1051510).
- usb: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- usb: ldusb: fix memleak on disconnect (bsc#1051510).
- usb: ldusb: fix read info leaks (bsc#1051510).
- usb: legousbtower: fix a signedness bug in tower_probe() (bsc#1051510).
- usb: legousbtower: fix deadlock on disconnect (bsc#1142635).
- usb: legousbtower: fix memleak on disconnect (bsc#1051510).
- usb: legousbtower: fix open after failed reset request (bsc#1142635).
- usb: legousbtower: fix potential NULL-deref on disconnect (bsc#1142635).
- usb: legousbtower: fix slab info leak at probe (bsc#1142635).
- usb: legousbtower: fix use-after-free on release (bsc#1051510).
- usb: microtek: fix info-leak at probe (bsc#1142635).
- usb: serial: fix runtime PM after driver unbind (bsc#1051510).
- usb: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20 (bsc#1051510).
- usb: serial: keyspan: fix NULL-derefs on open() and write() (bsc#1051510).
- usb: serial: option: add Telit FN980 compositions (bsc#1051510).
- usb: serial: option: add support for Cinterion CLS8 devices (bsc#1051510).
- usb: serial: ti_usb_3410_5052: fix port-close races (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- usb: usb-skeleton: fix NULL-deref on disconnect (bsc#1051510).
- usb: usb-skeleton: fix runtime PM after driver unbind (bsc#1051510).
- usb: usb-skeleton: fix use-after-free after driver unbind (bsc#1051510).
- usb: usblcd: fix I/O after disconnect (bsc#1142635).
- usb: usblp: fix runtime PM after driver unbind (bsc#1051510).
- usb: usblp: fix use-after-free on disconnect (bsc#1051510).
- usb: xhci: wait for CNR controller not ready bit in xhci resume (bsc#1051510).
- usb: yurex: Do not retry on unexpected errors (bsc#1051510).
- usb: yurex: fix NULL-derefs on disconnect (bsc#1051510).
- usbnet: ignore endpoints with invalid wMaxPacketSize (bsc#1051510).
- usbnet: sanity checking of packet sizes and device mtu (bsc#1051510).
- vfio_pci: Restore original state on release (bsc#1051510).
- vhost_net: conditionally enable tx polling (bsc#1145099).
- video: of: display_timing: Add of_node_put() in of_get_display_timing() (bsc#1051510).
- vsock: Fix a lockdep warning in __vsock_release() (networking-stable-19_10_05).
- watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout (bsc#1051510).
- x86/asm: Fix MWAITX C-state hint value (bsc#1114279).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area (bnc#1153969).
- x86/boot/64: Round memory hole size up to next PMD page (bnc#1153969).
- x86/mm: Use WRITE_ONCE() when setting PTEs (bsc#1114279).
- xen/netback: fix error path of xenvif_connect_data() (bsc#1065600).
- xen/pv: Fix Xen PV guest int3 handling (bsc#1153811).
- xhci: Check all endpoints for LPM timeout (bsc#1051510).
- xhci: Fix false warning message about wrong bounce buffer write length (bsc#1051510).
- xhci: Increase STS_SAVE timeout in xhci_suspend() (bsc#1051510).
- xhci: Prevent device initiated U1/U2 link pm if exit latency is too long (bsc#1051510).

		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-12"/>
	<updated date="2019-11-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046299">SUSE bug 1046299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046303">SUSE bug 1046303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046305">SUSE bug 1046305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073513">SUSE bug 1073513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086323">SUSE bug 1086323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087092">SUSE bug 1087092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089644">SUSE bug 1089644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090631">SUSE bug 1090631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093205">SUSE bug 1093205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096254">SUSE bug 1096254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097583">SUSE bug 1097583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097584">SUSE bug 1097584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097585">SUSE bug 1097585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097586">SUSE bug 1097586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097587">SUSE bug 1097587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097588">SUSE bug 1097588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098291">SUSE bug 1098291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101674">SUSE bug 1101674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109158">SUSE bug 1109158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117665">SUSE bug 1117665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119461">SUSE bug 1119461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119465">SUSE bug 1119465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123034">SUSE bug 1123034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123080">SUSE bug 1123080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133140">SUSE bug 1133140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134303">SUSE bug 1134303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135854">SUSE bug 1135854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135873">SUSE bug 1135873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135967">SUSE bug 1135967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137040">SUSE bug 1137040</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137799">SUSE bug 1137799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137861">SUSE bug 1137861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138190">SUSE bug 1138190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139073">SUSE bug 1139073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140090">SUSE bug 1140090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140729">SUSE bug 1140729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140845">SUSE bug 1140845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140883">SUSE bug 1140883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141600">SUSE bug 1141600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142667">SUSE bug 1142667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144338">SUSE bug 1144338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144375">SUSE bug 1144375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144449">SUSE bug 1144449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145099">SUSE bug 1145099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146612">SUSE bug 1146612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148410">SUSE bug 1148410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149119">SUSE bug 1149119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149853">SUSE bug 1149853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150452">SUSE bug 1150452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150457">SUSE bug 1150457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150465">SUSE bug 1150465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150875">SUSE bug 1150875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151508">SUSE bug 1151508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151807">SUSE bug 1151807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152033">SUSE bug 1152033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152624">SUSE bug 1152624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152665">SUSE bug 1152665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152685">SUSE bug 1152685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152696">SUSE bug 1152696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152697">SUSE bug 1152697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152788">SUSE bug 1152788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152790">SUSE bug 1152790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152791">SUSE bug 1152791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153112">SUSE bug 1153112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153158">SUSE bug 1153158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153236">SUSE bug 1153236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153263">SUSE bug 1153263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153476">SUSE bug 1153476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153509">SUSE bug 1153509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153607">SUSE bug 1153607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153646">SUSE bug 1153646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153681">SUSE bug 1153681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153713">SUSE bug 1153713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153717">SUSE bug 1153717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153718">SUSE bug 1153718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153719">SUSE bug 1153719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153811">SUSE bug 1153811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153969">SUSE bug 1153969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154108">SUSE bug 1154108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154189">SUSE bug 1154189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154242">SUSE bug 1154242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154268">SUSE bug 1154268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154354">SUSE bug 1154354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154372">SUSE bug 1154372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154521">SUSE bug 1154521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154578">SUSE bug 1154578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154607">SUSE bug 1154607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154608">SUSE bug 1154608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154610">SUSE bug 1154610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154611">SUSE bug 1154611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154651">SUSE bug 1154651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154737">SUSE bug 1154737</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154747">SUSE bug 1154747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154848">SUSE bug 1154848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154858">SUSE bug 1154858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154905">SUSE bug 1154905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154956">SUSE bug 1154956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155061">SUSE bug 1155061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155178">SUSE bug 1155178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155179">SUSE bug 1155179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155184">SUSE bug 1155184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155186">SUSE bug 1155186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155671">SUSE bug 1155671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802154">SUSE bug 802154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/814594">SUSE bug 814594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/919448">SUSE bug 919448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987367">SUSE bug 987367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998153">SUSE bug 998153</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12207/">CVE-2018-12207</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11135/">CVE-2019-11135</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16232/">CVE-2019-16232</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16233/">CVE-2019-16233</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16234/">CVE-2019-16234</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-16995/">CVE-2019-16995</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-17056/">CVE-2019-17056</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17133/">CVE-2019-17133</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-17666/">CVE-2019-17666</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491755" comment="kernel-default-4.12.14-197.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491756" comment="kernel-default-base-4.12.14-197.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491757" comment="kernel-default-devel-4.12.14-197.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491758" comment="kernel-default-man-4.12.14-197.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491759" comment="kernel-devel-4.12.14-197.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491760" comment="kernel-macros-4.12.14-197.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491761" comment="kernel-zfcpdump-4.12.14-197.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137794" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1079730" ref_url="https://bugzilla.suse.com/1079730" source="BUGZILLA"/>
		<reference ref_id="1098403" ref_url="https://bugzilla.suse.com/1098403" source="BUGZILLA"/>
		<reference ref_id="1111025" ref_url="https://bugzilla.suse.com/1111025" source="BUGZILLA"/>
		<reference ref_id="1117665" ref_url="https://bugzilla.suse.com/1117665" source="BUGZILLA"/>
		<reference ref_id="1119991" ref_url="https://bugzilla.suse.com/1119991" source="BUGZILLA"/>
		<reference ref_id="1143794" ref_url="https://bugzilla.suse.com/1143794" source="BUGZILLA"/>
		<reference ref_id="1144087" ref_url="https://bugzilla.suse.com/1144087" source="BUGZILLA"/>
		<reference ref_id="1145379" ref_url="https://bugzilla.suse.com/1145379" source="BUGZILLA"/>
		<reference ref_id="1145427" ref_url="https://bugzilla.suse.com/1145427" source="BUGZILLA"/>
		<reference ref_id="1145436" ref_url="https://bugzilla.suse.com/1145436" source="BUGZILLA"/>
		<reference ref_id="1145774" ref_url="https://bugzilla.suse.com/1145774" source="BUGZILLA"/>
		<reference ref_id="1146873" ref_url="https://bugzilla.suse.com/1146873" source="BUGZILLA"/>
		<reference ref_id="1149811" ref_url="https://bugzilla.suse.com/1149811" source="BUGZILLA"/>
		<reference ref_id="1152506" ref_url="https://bugzilla.suse.com/1152506" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12207" ref_url="https://www.suse.com/security/cve/CVE-2018-12207/" source="CVE"/>
		<reference ref_id="CVE-2018-20126" ref_url="https://www.suse.com/security/cve/CVE-2018-20126/" source="CVE"/>
		<reference ref_id="CVE-2019-11135" ref_url="https://www.suse.com/security/cve/CVE-2019-11135/" source="CVE"/>
		<reference ref_id="CVE-2019-12068" ref_url="https://www.suse.com/security/cve/CVE-2019-12068/" source="CVE"/>
		<reference ref_id="CVE-2019-14378" ref_url="https://www.suse.com/security/cve/CVE-2019-14378/" source="CVE"/>
		<reference ref_id="CVE-2019-15890" ref_url="https://www.suse.com/security/cve/CVE-2019-15890/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2955-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192955-1.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

qemu was updated to v3.1.1.1, a stable, bug-fix-only release, which
includes 2 fixes we already carry, as well as one additional use-
after-free fix in slirp. (CVE-2018-20126 bsc#1119991,
CVE-2019-14378 bsc#1143794, and CVE-2019-15890 bsc#1149811
respectively)

Security issues fixed:

- CVE-2019-12068: Fixed potential DOS in lsi scsi controller emulation (bsc#1146873)
- CVE-2019-11135: Expose taa-no 'feature', indicating CPU does not have the TSX Async Abort vulnerability. (bsc#1152506)
- CVE-2018-12207: Expose pschange-mc-no 'feature', indicating CPU does not have the page size change machine check vulnerability (bsc#1117665)

Other issues fixed:

- Change how this bug gets fixed (bsc#1144087)
- Disable file locking in the Xen PV disk backend to avoid locking
  issues with PV domUs during migration. The issues triggered by
  the locking can not be properly handled in libxl. The locking
  introduced in qemu-2.10 was removed again in qemu-4.0.
  (bsc#1079730, bsc#1098403, bsc#1111025, bsc#1145427, bsc#1145774)
- Feature support for vfio-ccw dasd ipl (bsc#1145379 jira-SLE-6132)
- Additional hardware instruction support for s390, also update
  qemu linux headers to 5.2-rc1 (bsc#1145436 jira-SLE-6237)

		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-12"/>
	<updated date="2019-11-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1079730">SUSE bug 1079730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098403">SUSE bug 1098403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111025">SUSE bug 1111025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117665">SUSE bug 1117665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119991">SUSE bug 1119991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143794">SUSE bug 1143794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144087">SUSE bug 1144087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145379">SUSE bug 1145379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145427">SUSE bug 1145427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145436">SUSE bug 1145436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145774">SUSE bug 1145774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146873">SUSE bug 1146873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149811">SUSE bug 1149811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152506">SUSE bug 1152506</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12207/">CVE-2018-12207</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20126/">CVE-2018-20126</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11135/">CVE-2019-11135</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12068/">CVE-2019-12068</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14378/">CVE-2019-14378</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15890/">CVE-2019-15890</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491762" comment="qemu-tools-3.1.1.1-9.6.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137795" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1139073" ref_url="https://bugzilla.suse.com/1139073" source="BUGZILLA"/>
		<reference ref_id="1141035" ref_url="https://bugzilla.suse.com/1141035" source="BUGZILLA"/>
		<reference ref_id="1155988" ref_url="https://bugzilla.suse.com/1155988" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11135" ref_url="https://www.suse.com/security/cve/CVE-2019-11135/" source="CVE"/>
		<reference ref_id="CVE-2019-11139" ref_url="https://www.suse.com/security/cve/CVE-2019-11139/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2958-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192958-1.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

- Updated to 20191112 security release (bsc#1155988)
  - Processor             Identifier     Version       Products
  - Model        Stepping F-MO-S/PI      Old-&gt;New
  - ---- new platforms ----------------------------------------
  - CML-U62      A0       6-a6-0/80           000000c6 Core Gen10 Mobile
  - CNL-U        D0       6-66-3/80           0000002a Core Gen8 Mobile
  - SKX-SP       B1       6-55-3/97           01000150 Xeon Scalable
  - ICL U/Y      D1       6-7e-5/80           00000046 Core Gen10 Mobile
  - ---- updated platforms ------------------------------------
  - SKL U/Y      D0       6-4e-3/c0 000000cc-&gt;000000d4 Core Gen6 Mobile
  - SKL H/S/E3   R0/N0    6-5e-3/36 000000cc-&gt;000000d4 Core Gen6
  - AML-Y22      H0       6-8e-9/10 000000b4-&gt;000000c6 Core Gen8 Mobile
  - KBL-U/Y      H0       6-8e-9/c0 000000b4-&gt;000000c6 Core Gen7 Mobile
  - CFL-U43e     D0       6-8e-a/c0 000000b4-&gt;000000c6 Core Gen8 Mobile
  - WHL-U        W0       6-8e-b/d0 000000b8-&gt;000000c6 Core Gen8 Mobile
  - AML-Y        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - CML-U42      V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen10 Mobile
  - WHL-U        V0       6-8e-c/94 000000b8-&gt;000000c6 Core Gen8 Mobile
  - KBL-G/X      H0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7/Gen8
  - KBL-H/S/E3   B0       6-9e-9/2a 000000b4-&gt;000000c6 Core Gen7; Xeon E3 v6
  - CFL-H/S/E3   U0       6-9e-a/22 000000b4-&gt;000000c6 Core Gen8 Desktop, Mobile, Xeon E
  - CFL-S        B0       6-9e-b/02 000000b4-&gt;000000c6 Core Gen8
  - CFL-H        R0       6-9e-d/22 000000b8-&gt;000000c6 Core Gen9 Mobile
- Includes security fixes for:
  - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
  - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-12"/>
	<updated date="2019-11-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1139073">SUSE bug 1139073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141035">SUSE bug 1141035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155988">SUSE bug 1155988</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11135/">CVE-2019-11135</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11139/">CVE-2019-11139</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491763" comment="ucode-intel-20191112-3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137796" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1152497" ref_url="https://bugzilla.suse.com/1152497" source="BUGZILLA"/>
		<reference ref_id="1154448" ref_url="https://bugzilla.suse.com/1154448" source="BUGZILLA"/>
		<reference ref_id="1154456" ref_url="https://bugzilla.suse.com/1154456" source="BUGZILLA"/>
		<reference ref_id="1154458" ref_url="https://bugzilla.suse.com/1154458" source="BUGZILLA"/>
		<reference ref_id="1154460" ref_url="https://bugzilla.suse.com/1154460" source="BUGZILLA"/>
		<reference ref_id="1154461" ref_url="https://bugzilla.suse.com/1154461" source="BUGZILLA"/>
		<reference ref_id="1154464" ref_url="https://bugzilla.suse.com/1154464" source="BUGZILLA"/>
		<reference ref_id="1155945" ref_url="https://bugzilla.suse.com/1155945" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12207" ref_url="https://www.suse.com/security/cve/CVE-2018-12207/" source="CVE"/>
		<reference ref_id="CVE-2019-11135" ref_url="https://www.suse.com/security/cve/CVE-2019-11135/" source="CVE"/>
		<reference ref_id="CVE-2019-18420" ref_url="https://www.suse.com/security/cve/CVE-2019-18420/" source="CVE"/>
		<reference ref_id="CVE-2019-18421" ref_url="https://www.suse.com/security/cve/CVE-2019-18421/" source="CVE"/>
		<reference ref_id="CVE-2019-18422" ref_url="https://www.suse.com/security/cve/CVE-2019-18422/" source="CVE"/>
		<reference ref_id="CVE-2019-18423" ref_url="https://www.suse.com/security/cve/CVE-2019-18423/" source="CVE"/>
		<reference ref_id="CVE-2019-18424" ref_url="https://www.suse.com/security/cve/CVE-2019-18424/" source="CVE"/>
		<reference ref_id="CVE-2019-18425" ref_url="https://www.suse.com/security/cve/CVE-2019-18425/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2961-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192961-1.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race
  condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine
  Exception during Page Size Change, causing the CPU core to be non-functional.
  (bsc#1155945)
- CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with
  Transactional Memory support could be used to facilitate sidechannel
  information leaks out of microarchitectural buffers, similar to the
  previously described 'Microarchitectural Data Sampling' attack. (bsc#1152497).
- CVE-2019-18423: A malicious guest administrator may cause a hypervisor crash,
  resulting in a Denial of Service (DoS). (bsc#1154460).
- CVE-2019-18422: A malicious ARM guest might contrive to arrange for critical 
  Xen code to run with interrupts erroneously enabled. This could lead to data
  corruption, denial of service, or possibly even privilege escalation. However
  a precise attack technique has not been identified. (bsc#1154464)
- CVE-2019-18424: An untrusted domain with access to a physical device can DMA 
  into host memory, leading to privilege escalation. (bsc#1154461).
- CVE-2019-18421: A malicious PV guest administrator may have been able to
  escalate their privilege to that of the host. (bsc#1154458).
- CVE-2019-18425: 32-bit PV guest user mode could elevate its privileges to that 
  of the guest kernel. (bsc#1154456).
- CVE-2019-18420: Malicious x86 PV guests may have caused a hypervisor crash, 
  resulting in a Denial of Service (Dos). (bsc#1154448)
- Upstream bug fixes (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-12"/>
	<updated date="2019-11-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152497">SUSE bug 1152497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154448">SUSE bug 1154448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154456">SUSE bug 1154456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154458">SUSE bug 1154458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154460">SUSE bug 1154460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154461">SUSE bug 1154461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154464">SUSE bug 1154464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155945">SUSE bug 1155945</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12207/">CVE-2018-12207</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11135/">CVE-2019-11135</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18420/">CVE-2019-18420</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18421/">CVE-2019-18421</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18422/">CVE-2019-18422</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18423/">CVE-2019-18423</cve>
	<cve impact="important" cvss3="7.6/CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18424/">CVE-2019-18424</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18425/">CVE-2019-18425</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491764" comment="xen-libs-4.12.1_04-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491765" comment="xen-tools-domU-4.12.1_04-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137797" version="1" class="patch">
	<metadata>
		<title>Security update for libjpeg-turbo (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1156402" ref_url="https://bugzilla.suse.com/1156402" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-2201" ref_url="https://www.suse.com/security/cve/CVE-2019-2201/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006138.html" source="SUSE-SU"/>
		<description>
This update for libjpeg-turbo fixes the following issues:

- CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo,
  when attempting to compress or decompress gigapixel images. [bsc#1156402]

		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-14"/>
	<updated date="2019-11-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1156402">SUSE bug 1156402</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2201/">CVE-2019-2201</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490719" comment="libjpeg62-62.2.0-5.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490720" comment="libjpeg62-devel-62.2.0-5.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490721" comment="libjpeg8-8.1.2-5.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490722" comment="libjpeg8-devel-8.1.2-5.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490723" comment="libturbojpeg0-8.1.2-5.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137798" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1156275" ref_url="https://bugzilla.suse.com/1156275" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14869" ref_url="https://www.suse.com/security/cve/CVE-2019-14869/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2981-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006144.html" source="SUSE-SU"/>
		<description>
This update for ghostscript fixes the following issues:

- CVE-2019-14869: Fixed a possible  dSAFER escape which could have allowed 
  an attacker to gain high privileges by a specially crafted Postscript 
  code (bsc#1156275).
 		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-15"/>
	<updated date="2019-11-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1156275">SUSE bug 1156275</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14869/">CVE-2019-14869</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490724" comment="ghostscript-9.27-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490725" comment="ghostscript-devel-9.27-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490726" comment="ghostscript-x11-9.27-3.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137799" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1139073" ref_url="https://bugzilla.suse.com/1139073" source="BUGZILLA"/>
		<reference ref_id="1141035" ref_url="https://bugzilla.suse.com/1141035" source="BUGZILLA"/>
		<reference ref_id="1155988" ref_url="https://bugzilla.suse.com/1155988" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11135" ref_url="https://www.suse.com/security/cve/CVE-2019-11135/" source="CVE"/>
		<reference ref_id="CVE-2019-11139" ref_url="https://www.suse.com/security/cve/CVE-2019-11139/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2987-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006150.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

- Updated to 20191112 official security release (bsc#1155988)
- Includes security fixes for:
  - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073)
  - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues (bsc#1141035)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-15"/>
	<updated date="2019-11-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1139073">SUSE bug 1139073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141035">SUSE bug 1141035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155988">SUSE bug 1155988</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11135/">CVE-2019-11135</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11139/">CVE-2019-11139</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491766" comment="ucode-intel-20191112a-3.13.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137800" version="1" class="patch">
	<metadata>
		<title>Security update for ncurses (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1103320" ref_url="https://bugzilla.suse.com/1103320" source="BUGZILLA"/>
		<reference ref_id="1154036" ref_url="https://bugzilla.suse.com/1154036" source="BUGZILLA"/>
		<reference ref_id="1154037" ref_url="https://bugzilla.suse.com/1154037" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17594" ref_url="https://www.suse.com/security/cve/CVE-2019-17594/" source="CVE"/>
		<reference ref_id="CVE-2019-17595" ref_url="https://www.suse.com/security/cve/CVE-2019-17595/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006155.html" source="SUSE-SU"/>
		<description>
This update for ncurses fixes the following issues:

Security issues fixed:

- CVE-2019-17594: Fixed a heap-based buffer over-read in the _nc_find_entry function (bsc#1154036).
- CVE-2019-17595: Fixed a heap-based buffer over-read in the fmt_entry function (bsc#1154037).

Non-security issue fixed:

- Removed screen.xterm from terminfo database (bsc#1103320).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-18"/>
	<updated date="2019-11-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1103320">SUSE bug 1103320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154036">SUSE bug 1154036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154037">SUSE bug 1154037</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17594/">CVE-2019-17594</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17595/">CVE-2019-17595</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490728" comment="libncurses6-6.1-5.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490729" comment="libncurses6-32bit-6.1-5.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490730" comment="ncurses-devel-6.1-5.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490731" comment="ncurses-utils-6.1-5.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490732" comment="tack-6.1-5.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490733" comment="terminfo-6.1-5.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490734" comment="terminfo-base-6.1-5.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490735" comment="terminfo-iterm-6.1-5.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490736" comment="terminfo-screen-6.1-5.6.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137801" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1152856" ref_url="https://bugzilla.suse.com/1152856" source="BUGZILLA"/>
		<reference ref_id="1154212" ref_url="https://bugzilla.suse.com/1154212" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-2894" ref_url="https://www.suse.com/security/cve/CVE-2019-2894/" source="CVE"/>
		<reference ref_id="CVE-2019-2933" ref_url="https://www.suse.com/security/cve/CVE-2019-2933/" source="CVE"/>
		<reference ref_id="CVE-2019-2945" ref_url="https://www.suse.com/security/cve/CVE-2019-2945/" source="CVE"/>
		<reference ref_id="CVE-2019-2949" ref_url="https://www.suse.com/security/cve/CVE-2019-2949/" source="CVE"/>
		<reference ref_id="CVE-2019-2958" ref_url="https://www.suse.com/security/cve/CVE-2019-2958/" source="CVE"/>
		<reference ref_id="CVE-2019-2962" ref_url="https://www.suse.com/security/cve/CVE-2019-2962/" source="CVE"/>
		<reference ref_id="CVE-2019-2964" ref_url="https://www.suse.com/security/cve/CVE-2019-2964/" source="CVE"/>
		<reference ref_id="CVE-2019-2973" ref_url="https://www.suse.com/security/cve/CVE-2019-2973/" source="CVE"/>
		<reference ref_id="CVE-2019-2975" ref_url="https://www.suse.com/security/cve/CVE-2019-2975/" source="CVE"/>
		<reference ref_id="CVE-2019-2977" ref_url="https://www.suse.com/security/cve/CVE-2019-2977/" source="CVE"/>
		<reference ref_id="CVE-2019-2978" ref_url="https://www.suse.com/security/cve/CVE-2019-2978/" source="CVE"/>
		<reference ref_id="CVE-2019-2981" ref_url="https://www.suse.com/security/cve/CVE-2019-2981/" source="CVE"/>
		<reference ref_id="CVE-2019-2983" ref_url="https://www.suse.com/security/cve/CVE-2019-2983/" source="CVE"/>
		<reference ref_id="CVE-2019-2987" ref_url="https://www.suse.com/security/cve/CVE-2019-2987/" source="CVE"/>
		<reference ref_id="CVE-2019-2988" ref_url="https://www.suse.com/security/cve/CVE-2019-2988/" source="CVE"/>
		<reference ref_id="CVE-2019-2989" ref_url="https://www.suse.com/security/cve/CVE-2019-2989/" source="CVE"/>
		<reference ref_id="CVE-2019-2992" ref_url="https://www.suse.com/security/cve/CVE-2019-2992/" source="CVE"/>
		<reference ref_id="CVE-2019-2999" ref_url="https://www.suse.com/security/cve/CVE-2019-2999/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2998-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006156.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues:

Security issues fixed (October 2019 CPU  bsc#1154212):	  

- CVE-2019-2933: Windows file handling redux
- CVE-2019-2945: Better socket support
- CVE-2019-2949: Better Kerberos ccache handling
- CVE-2019-2958: Build Better Processes
- CVE-2019-2964: Better support for patterns
- CVE-2019-2962: Better Glyph Images
- CVE-2019-2973: Better pattern compilation
- CVE-2019-2975: Unexpected exception in jjs
- CVE-2019-2978: Improved handling of jar files
- CVE-2019-2977: Improve String index handling
- CVE-2019-2981: Better Path supports
- CVE-2019-2983: Better serial attributes
- CVE-2019-2987: Better rendering of native glyphs
- CVE-2019-2988: Better Graphics2D drawing
- CVE-2019-2989: Improve TLS connection support
- CVE-2019-2992: Enhance font glyph mapping
- CVE-2019-2999: Commentary on Javadoc comments
- CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-18"/>
	<updated date="2019-11-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1152856">SUSE bug 1152856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2894/">CVE-2019-2894</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2933/">CVE-2019-2933</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2945/">CVE-2019-2945</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2949/">CVE-2019-2949</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-2958/">CVE-2019-2958</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2962/">CVE-2019-2962</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2964/">CVE-2019-2964</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2973/">CVE-2019-2973</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-2975/">CVE-2019-2975</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2977/">CVE-2019-2977</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2978/">CVE-2019-2978</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2981/">CVE-2019-2981</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2983/">CVE-2019-2983</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2987/">CVE-2019-2987</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2988/">CVE-2019-2988</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-2989/">CVE-2019-2989</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2992/">CVE-2019-2992</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-2999/">CVE-2019-2999</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490737" comment="java-11-openjdk-11.0.5.0-3.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490738" comment="java-11-openjdk-demo-11.0.5.0-3.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490739" comment="java-11-openjdk-devel-11.0.5.0-3.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490740" comment="java-11-openjdk-headless-11.0.5.0-3.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137802" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1146358" ref_url="https://bugzilla.suse.com/1146358" source="BUGZILLA"/>
		<reference ref_id="1146359" ref_url="https://bugzilla.suse.com/1146359" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8675" ref_url="https://www.suse.com/security/cve/CVE-2019-8675/" source="CVE"/>
		<reference ref_id="CVE-2019-8696" ref_url="https://www.suse.com/security/cve/CVE-2019-8696/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006159.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:
	  
- CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1_get_type function(bsc#1146358). 
- CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1_get_packed function (bsc#1146359).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-21"/>
	<updated date="2019-11-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1146358">SUSE bug 1146358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146359">SUSE bug 1146359</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8675/">CVE-2019-8675</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8696/">CVE-2019-8696</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490741" comment="cups-2.2.7-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490742" comment="cups-client-2.2.7-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490743" comment="cups-config-2.2.7-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490744" comment="cups-devel-2.2.7-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490745" comment="libcups2-2.2.7-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490746" comment="libcups2-32bit-2.2.7-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490747" comment="libcupscgi1-2.2.7-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490748" comment="libcupsimage2-2.2.7-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490749" comment="libcupsmime1-2.2.7-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490750" comment="libcupsppdc1-2.2.7-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137803" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1155321" ref_url="https://bugzilla.suse.com/1155321" source="BUGZILLA"/>
		<reference ref_id="1156318" ref_url="https://bugzilla.suse.com/1156318" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8551" ref_url="https://www.suse.com/security/cve/CVE-2019-8551/" source="CVE"/>
		<reference ref_id="CVE-2019-8558" ref_url="https://www.suse.com/security/cve/CVE-2019-8558/" source="CVE"/>
		<reference ref_id="CVE-2019-8559" ref_url="https://www.suse.com/security/cve/CVE-2019-8559/" source="CVE"/>
		<reference ref_id="CVE-2019-8563" ref_url="https://www.suse.com/security/cve/CVE-2019-8563/" source="CVE"/>
		<reference ref_id="CVE-2019-8625" ref_url="https://www.suse.com/security/cve/CVE-2019-8625/" source="CVE"/>
		<reference ref_id="CVE-2019-8674" ref_url="https://www.suse.com/security/cve/CVE-2019-8674/" source="CVE"/>
		<reference ref_id="CVE-2019-8681" ref_url="https://www.suse.com/security/cve/CVE-2019-8681/" source="CVE"/>
		<reference ref_id="CVE-2019-8684" ref_url="https://www.suse.com/security/cve/CVE-2019-8684/" source="CVE"/>
		<reference ref_id="CVE-2019-8686" ref_url="https://www.suse.com/security/cve/CVE-2019-8686/" source="CVE"/>
		<reference ref_id="CVE-2019-8687" ref_url="https://www.suse.com/security/cve/CVE-2019-8687/" source="CVE"/>
		<reference ref_id="CVE-2019-8688" ref_url="https://www.suse.com/security/cve/CVE-2019-8688/" source="CVE"/>
		<reference ref_id="CVE-2019-8689" ref_url="https://www.suse.com/security/cve/CVE-2019-8689/" source="CVE"/>
		<reference ref_id="CVE-2019-8690" ref_url="https://www.suse.com/security/cve/CVE-2019-8690/" source="CVE"/>
		<reference ref_id="CVE-2019-8707" ref_url="https://www.suse.com/security/cve/CVE-2019-8707/" source="CVE"/>
		<reference ref_id="CVE-2019-8710" ref_url="https://www.suse.com/security/cve/CVE-2019-8710/" source="CVE"/>
		<reference ref_id="CVE-2019-8719" ref_url="https://www.suse.com/security/cve/CVE-2019-8719/" source="CVE"/>
		<reference ref_id="CVE-2019-8720" ref_url="https://www.suse.com/security/cve/CVE-2019-8720/" source="CVE"/>
		<reference ref_id="CVE-2019-8726" ref_url="https://www.suse.com/security/cve/CVE-2019-8726/" source="CVE"/>
		<reference ref_id="CVE-2019-8733" ref_url="https://www.suse.com/security/cve/CVE-2019-8733/" source="CVE"/>
		<reference ref_id="CVE-2019-8735" ref_url="https://www.suse.com/security/cve/CVE-2019-8735/" source="CVE"/>
		<reference ref_id="CVE-2019-8743" ref_url="https://www.suse.com/security/cve/CVE-2019-8743/" source="CVE"/>
		<reference ref_id="CVE-2019-8763" ref_url="https://www.suse.com/security/cve/CVE-2019-8763/" source="CVE"/>
		<reference ref_id="CVE-2019-8764" ref_url="https://www.suse.com/security/cve/CVE-2019-8764/" source="CVE"/>
		<reference ref_id="CVE-2019-8765" ref_url="https://www.suse.com/security/cve/CVE-2019-8765/" source="CVE"/>
		<reference ref_id="CVE-2019-8766" ref_url="https://www.suse.com/security/cve/CVE-2019-8766/" source="CVE"/>
		<reference ref_id="CVE-2019-8768" ref_url="https://www.suse.com/security/cve/CVE-2019-8768/" source="CVE"/>
		<reference ref_id="CVE-2019-8769" ref_url="https://www.suse.com/security/cve/CVE-2019-8769/" source="CVE"/>
		<reference ref_id="CVE-2019-8771" ref_url="https://www.suse.com/security/cve/CVE-2019-8771/" source="CVE"/>
		<reference ref_id="CVE-2019-8782" ref_url="https://www.suse.com/security/cve/CVE-2019-8782/" source="CVE"/>
		<reference ref_id="CVE-2019-8783" ref_url="https://www.suse.com/security/cve/CVE-2019-8783/" source="CVE"/>
		<reference ref_id="CVE-2019-8808" ref_url="https://www.suse.com/security/cve/CVE-2019-8808/" source="CVE"/>
		<reference ref_id="CVE-2019-8811" ref_url="https://www.suse.com/security/cve/CVE-2019-8811/" source="CVE"/>
		<reference ref_id="CVE-2019-8812" ref_url="https://www.suse.com/security/cve/CVE-2019-8812/" source="CVE"/>
		<reference ref_id="CVE-2019-8813" ref_url="https://www.suse.com/security/cve/CVE-2019-8813/" source="CVE"/>
		<reference ref_id="CVE-2019-8814" ref_url="https://www.suse.com/security/cve/CVE-2019-8814/" source="CVE"/>
		<reference ref_id="CVE-2019-8815" ref_url="https://www.suse.com/security/cve/CVE-2019-8815/" source="CVE"/>
		<reference ref_id="CVE-2019-8816" ref_url="https://www.suse.com/security/cve/CVE-2019-8816/" source="CVE"/>
		<reference ref_id="CVE-2019-8819" ref_url="https://www.suse.com/security/cve/CVE-2019-8819/" source="CVE"/>
		<reference ref_id="CVE-2019-8820" ref_url="https://www.suse.com/security/cve/CVE-2019-8820/" source="CVE"/>
		<reference ref_id="CVE-2019-8821" ref_url="https://www.suse.com/security/cve/CVE-2019-8821/" source="CVE"/>
		<reference ref_id="CVE-2019-8822" ref_url="https://www.suse.com/security/cve/CVE-2019-8822/" source="CVE"/>
		<reference ref_id="CVE-2019-8823" ref_url="https://www.suse.com/security/cve/CVE-2019-8823/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 to version 2.26.2 fixes the following issues:

Webkit2gtk3 was updated to version 2.26.2 (WSA-2019-0005 and WSA-2019-0006, bsc#1155321 bsc#1156318)  

Security issues addressed:

- CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead to
  universal cross site scripting. 
- CVE-2019-8674: Fixed a logic issue where by processing maliciously crafted web content may lead to
  universal cross site scripting.
- CVE-2019-8707: Fixed multiple  memory corruption issues where by processing maliciously crafted web 
  content may lead to arbitrary code execution.
- CVE-2019-8719: Fixed a logic issue where by processing maliciously crafted web content may lead to
  universal cross site scripting.
- CVE-2019-8720: Fixed multiple memory corruption issues where by processing maliciously crafted web   
  content may lead to arbitrary code execution.
- CVE-2019-8726: Fixed multiple memory corruption issues where by processing maliciously crafted web   
  content may lead to arbitrary code execution.
- CVE-2019-8733: Fixed multiple memory corruption issues where by processing maliciously crafted web   
  content may lead to arbitrary code execution.
- CVE-2019-8735: Fixed multiple memory corruption issues where by processing maliciously crafted web   
  content may lead to arbitrary code execution.
- CVE-2019-8763: Fixed multiple  memory corruption issues where by processing maliciously crafted web   
  content may lead to arbitrary code execution.
- CVE-2019-8768: Fixed an issue where a user may be unable to delete browsing history items.
- CVE-2019-8769: Fixed an issue where a maliciously crafted website may reveal browsing history.
- CVE-2019-8771: Fixed an issue where a maliciously crafted web content may violate iframe
  sandboxing policy.
- CVE-2019-8710: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8743: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8764: Fixed a logic issue where by processing maliciously crafted web content may lead to
  universal cross site scripting.
- CVE-2019-8765: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8766: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8782: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8783: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8808: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8811: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8812: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8813: Fixed a logic issue where by processing maliciously crafted web content may lead to
  universal cross site scripting.
- CVE-2019-8814: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8815: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8816: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8819: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8820: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8821: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8822: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8823: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-25"/>
	<updated date="2019-11-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1155321">SUSE bug 1155321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<cve impact="important" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8551/">CVE-2019-8551</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8558/">CVE-2019-8558</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8559/">CVE-2019-8559</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8563/">CVE-2019-8563</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8625/">CVE-2019-8625</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8674/">CVE-2019-8674</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8681/">CVE-2019-8681</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8684/">CVE-2019-8684</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8686/">CVE-2019-8686</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8687/">CVE-2019-8687</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8688/">CVE-2019-8688</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8689/">CVE-2019-8689</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8690/">CVE-2019-8690</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8707/">CVE-2019-8707</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8710/">CVE-2019-8710</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8719/">CVE-2019-8719</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8720/">CVE-2019-8720</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8726/">CVE-2019-8726</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8733/">CVE-2019-8733</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8735/">CVE-2019-8735</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8743/">CVE-2019-8743</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8763/">CVE-2019-8763</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8764/">CVE-2019-8764</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8765/">CVE-2019-8765</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8766/">CVE-2019-8766</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8768/">CVE-2019-8768</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8769/">CVE-2019-8769</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8771/">CVE-2019-8771</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8782/">CVE-2019-8782</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8783/">CVE-2019-8783</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8808/">CVE-2019-8808</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8811/">CVE-2019-8811</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8812/">CVE-2019-8812</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8813/">CVE-2019-8813</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8814/">CVE-2019-8814</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8815/">CVE-2019-8815</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8816/">CVE-2019-8816</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8819/">CVE-2019-8819</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8820/">CVE-2019-8820</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8821/">CVE-2019-8821</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8822/">CVE-2019-8822</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8823/">CVE-2019-8823</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490751" comment="libjavascriptcoregtk-4_0-18-2.26.2-3.34.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490752" comment="libwebkit2gtk-4_0-37-2.26.2-3.34.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490753" comment="libwebkit2gtk3-lang-2.26.2-3.34.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490754" comment="webkit2gtk-4_0-injected-bundles-2.26.2-3.34.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137804" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1013712" ref_url="https://bugzilla.suse.com/1013712" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-9798" ref_url="https://www.suse.com/security/cve/CVE-2016-9798/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006164.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-25"/>
	<updated date="2019-11-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1013712">SUSE bug 1013712</bugzilla>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9798/">CVE-2016-9798</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490755" comment="libbluetooth3-5.48-5.19.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137805" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1144504" ref_url="https://bugzilla.suse.com/1144504" source="BUGZILLA"/>
		<reference ref_id="1149458" ref_url="https://bugzilla.suse.com/1149458" source="BUGZILLA"/>
		<reference ref_id="1151839" ref_url="https://bugzilla.suse.com/1151839" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12625" ref_url="https://www.suse.com/security/cve/CVE-2019-12625/" source="CVE"/>
		<reference ref_id="CVE-2019-12900" ref_url="https://www.suse.com/security/cve/CVE-2019-12900/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3053-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006169.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

Security issue fixed:

- CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files (bsc#1144504).
- CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors (bsc#1149458).

Non-security issues fixed:

- Added the --max-scantime clamscan option and MaxScanTime clamd configuration option (bsc#1144504).
- Increased the startup timeout of clamd to 5 minutes to cater for the grown virus database as a workaround until clamd has learned to talk to systemd to extend the timeout as long as needed (bsc#1151839).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-25"/>
	<updated date="2019-11-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1144504">SUSE bug 1144504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149458">SUSE bug 1149458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151839">SUSE bug 1151839</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12625/">CVE-2019-12625</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12900/">CVE-2019-12900</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490756" comment="clamav-0.100.3-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490757" comment="clamav-devel-0.100.3-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490758" comment="libclamav7-0.100.3-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490759" comment="libclammspack0-0.100.3-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137806" version="1" class="patch">
	<metadata>
		<title>Security update for strongswan (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1093536" ref_url="https://bugzilla.suse.com/1093536" source="BUGZILLA"/>
		<reference ref_id="1094462" ref_url="https://bugzilla.suse.com/1094462" source="BUGZILLA"/>
		<reference ref_id="1107874" ref_url="https://bugzilla.suse.com/1107874" source="BUGZILLA"/>
		<reference ref_id="1109845" ref_url="https://bugzilla.suse.com/1109845" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10811" ref_url="https://www.suse.com/security/cve/CVE-2018-10811/" source="CVE"/>
		<reference ref_id="CVE-2018-16151" ref_url="https://www.suse.com/security/cve/CVE-2018-16151/" source="CVE"/>
		<reference ref_id="CVE-2018-16152" ref_url="https://www.suse.com/security/cve/CVE-2018-16152/" source="CVE"/>
		<reference ref_id="CVE-2018-17540" ref_url="https://www.suse.com/security/cve/CVE-2018-17540/" source="CVE"/>
		<reference ref_id="CVE-2018-5388" ref_url="https://www.suse.com/security/cve/CVE-2018-5388/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3056-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006173.html" source="SUSE-SU"/>
		<description>
This update for strongswan fixes the following issues:

Security issues fixed: 

- CVE-2018-5388: Fixed a buffer underflow which may allow to a remote attacker 
  with local user credentials to resource exhaustion and denial of service while 
  reading from the socket (bsc#1094462).
- CVE-2018-10811: Fixed a denial of service during  the IKEv2 key derivation if 
  the openssl plugin is used in FIPS mode and HMAC-MD5 is negotiated as PRF 
  (bsc#1093536).
- CVE-2018-16151,CVE-2018-16152: Fixed multiple flaws in the gmp plugin which 
  might lead to authorization bypass (bsc#1107874).
- CVE-2018-17540: Fixed an improper input validation in gmp plugin (bsc#1109845).  
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-25"/>
	<updated date="2019-11-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1093536">SUSE bug 1093536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094462">SUSE bug 1094462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107874">SUSE bug 1107874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109845">SUSE bug 1109845</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10811/">CVE-2018-10811</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16151/">CVE-2018-16151</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16152/">CVE-2018-16152</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-17540/">CVE-2018-17540</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5388/">CVE-2018-5388</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490760" comment="strongswan-5.6.0-4.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490761" comment="strongswan-doc-5.6.0-4.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490762" comment="strongswan-hmac-5.6.0-4.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490763" comment="strongswan-ipsec-5.6.0-4.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490764" comment="strongswan-libs0-5.6.0-4.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137807" version="1" class="patch">
	<metadata>
		<title>Security update for cpio (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1155199" ref_url="https://bugzilla.suse.com/1155199" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14866" ref_url="https://www.suse.com/security/cve/CVE-2019-14866/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006174.html" source="SUSE-SU"/>
		<description>
This update for cpio fixes the following issues:

- CVE-2019-14866: Fixed an improper validation of the values written 
  in the header of a TAR file through the to_oct() function which could 
  have led to unexpected TAR generation (bsc#1155199).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-25"/>
	<updated date="2019-11-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1155199">SUSE bug 1155199</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14866/">CVE-2019-14866</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490765" comment="cpio-2.12-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490766" comment="cpio-lang-2.12-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490767" comment="cpio-mt-2.12-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137808" version="1" class="patch">
	<metadata>
		<title>Security update for gcc9 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1114592" ref_url="https://bugzilla.suse.com/1114592" source="BUGZILLA"/>
		<reference ref_id="1135254" ref_url="https://bugzilla.suse.com/1135254" source="BUGZILLA"/>
		<reference ref_id="1141897" ref_url="https://bugzilla.suse.com/1141897" source="BUGZILLA"/>
		<reference ref_id="1142649" ref_url="https://bugzilla.suse.com/1142649" source="BUGZILLA"/>
		<reference ref_id="1142654" ref_url="https://bugzilla.suse.com/1142654" source="BUGZILLA"/>
		<reference ref_id="1148517" ref_url="https://bugzilla.suse.com/1148517" source="BUGZILLA"/>
		<reference ref_id="1149145" ref_url="https://bugzilla.suse.com/1149145" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14250" ref_url="https://www.suse.com/security/cve/CVE-2019-14250/" source="CVE"/>
		<reference ref_id="CVE-2019-15847" ref_url="https://www.suse.com/security/cve/CVE-2019-15847/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006172.html" source="SUSE-SU"/>
		<description>


This update includes the GNU Compiler Collection 9.

A full changelog is provided by the GCC team on:

   https://www.gnu.org/software/gcc/gcc-9/changes.html


The base system compiler libraries libgcc_s1, libstdc++6 and others are
now built by the gcc 9 packages.

To use it, install 'gcc9' or 'gcc9-c++' or other compiler brands and use CC=gcc-9 /
CXX=g++-9 during configuration for using it.


Security issues fixed:

- CVE-2019-15847: Fixed a miscompilation in the POWER9 back end, that optimized multiple calls of the __builtin_darn intrinsic into a single call. (bsc#1149145)
- CVE-2019-14250: Fixed a heap overflow in the LTO linker. (bsc#1142649)

Non-security issues fixed:

- Split out libstdc++ pretty-printers into a separate package supplementing gdb and the installed runtime. (bsc#1135254)
- Fixed miscompilation for vector shift on s390. (bsc#1141897)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-25"/>
	<updated date="2019-11-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1114592">SUSE bug 1114592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135254">SUSE bug 1135254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141897">SUSE bug 1141897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142649">SUSE bug 1142649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142654">SUSE bug 1142654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148517">SUSE bug 1148517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149145">SUSE bug 1149145</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14250/">CVE-2019-14250</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15847/">CVE-2019-15847</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490768" comment="libada9-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490769" comment="libada9-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490770" comment="libasan5-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490771" comment="libasan5-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490772" comment="libatomic1-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490773" comment="libatomic1-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490774" comment="libgcc_s1-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490775" comment="libgcc_s1-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490776" comment="libgfortran5-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490777" comment="libgfortran5-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490778" comment="libgo14-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490779" comment="libgo14-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490780" comment="libgomp1-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490781" comment="libgomp1-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490782" comment="libitm1-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490783" comment="libitm1-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490784" comment="liblsan0-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490785" comment="libquadmath0-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490786" comment="libquadmath0-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490787" comment="libstdc++6-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490788" comment="libstdc++6-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490789" comment="libstdc++6-devel-gcc9-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490790" comment="libstdc++6-locale-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490791" comment="libstdc++6-pp-gcc9-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490792" comment="libtsan0-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490793" comment="libubsan1-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490794" comment="libubsan1-32bit-9.2.1+r275327-1.3.7 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137809" version="1" class="patch">
	<metadata>
		<title>Security update for libidn2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1154884" ref_url="https://bugzilla.suse.com/1154884" source="BUGZILLA"/>
		<reference ref_id="1154887" ref_url="https://bugzilla.suse.com/1154887" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12290" ref_url="https://www.suse.com/security/cve/CVE-2019-12290/" source="CVE"/>
		<reference ref_id="CVE-2019-18224" ref_url="https://www.suse.com/security/cve/CVE-2019-18224/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006193.html" source="SUSE-SU"/>
		<description>
This update for libidn2 to version 2.2.0 fixes the following issues:

- CVE-2019-12290: Fixed an improper round-trip check when converting A-labels to U-labels (bsc#1154884).
- CVE-2019-18224: Fixed a heap-based buffer overflow that was caused by long domain strings (bsc#1154887).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-28"/>
	<updated date="2019-11-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1154884">SUSE bug 1154884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154887">SUSE bug 1154887</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-12290/">CVE-2019-12290</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-18224/">CVE-2019-18224</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490795" comment="libidn2-0-2.2.0-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490796" comment="libidn2-0-32bit-2.2.0-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490797" comment="libidn2-devel-2.2.0-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137810" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1123919" ref_url="https://bugzilla.suse.com/1123919" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2019:3087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006191.html" source="SUSE-SU"/>
		<description>
This update for libxml2 doesn't fix any additional security issues, but correct its rpm changelog to reflect
all CVEs that have been fixed over the past.		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-28"/>
	<updated date="2019-11-28"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490798" comment="libxml2-2-2.9.7-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490799" comment="libxml2-2-32bit-2.9.7-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490800" comment="libxml2-devel-2.9.7-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490801" comment="libxml2-tools-2.9.7-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490803" comment="python3-libxml2-python-2.9.7-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137811" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1157004" ref_url="https://bugzilla.suse.com/1157004" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2019:3089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006194.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

- Updated to 20191115 security release (bsc#1157004)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-28"/>
	<updated date="2019-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1157004">SUSE bug 1157004</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491767" comment="ucode-intel-20191115-3.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137812" version="1" class="patch">
	<metadata>
		<title>Security update for libarchive (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1120653" ref_url="https://bugzilla.suse.com/1120653" source="BUGZILLA"/>
		<reference ref_id="1120654" ref_url="https://bugzilla.suse.com/1120654" source="BUGZILLA"/>
		<reference ref_id="1124341" ref_url="https://bugzilla.suse.com/1124341" source="BUGZILLA"/>
		<reference ref_id="1124342" ref_url="https://bugzilla.suse.com/1124342" source="BUGZILLA"/>
		<reference ref_id="1155079" ref_url="https://bugzilla.suse.com/1155079" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000877" ref_url="https://www.suse.com/security/cve/CVE-2018-1000877/" source="CVE"/>
		<reference ref_id="CVE-2018-1000878" ref_url="https://www.suse.com/security/cve/CVE-2018-1000878/" source="CVE"/>
		<reference ref_id="CVE-2019-1000019" ref_url="https://www.suse.com/security/cve/CVE-2019-1000019/" source="CVE"/>
		<reference ref_id="CVE-2019-1000020" ref_url="https://www.suse.com/security/cve/CVE-2019-1000020/" source="CVE"/>
		<reference ref_id="CVE-2019-18408" ref_url="https://www.suse.com/security/cve/CVE-2019-18408/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006196.html" source="SUSE-SU"/>
		<description>
This update for libarchive fixes the following issues:

Security issues fixed:

- CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653).
- CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654).
- CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341).
- CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342).
- CVE-2019-18408: Fixed a use-after-free in RAR format support (bsc#1155079).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-28"/>
	<updated date="2019-11-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1120653">SUSE bug 1120653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120654">SUSE bug 1120654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124341">SUSE bug 1124341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124342">SUSE bug 1124342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155079">SUSE bug 1155079</bugzilla>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000877/">CVE-2018-1000877</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000878/">CVE-2018-1000878</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1000019/">CVE-2019-1000019</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1000020/">CVE-2019-1000020</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-18408/">CVE-2019-18408</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490805" comment="libarchive-devel-3.3.2-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490806" comment="libarchive13-3.3.2-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137813" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1157763" ref_url="https://bugzilla.suse.com/1157763" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15961" ref_url="https://www.suse.com/security/cve/CVE-2019-15961/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006213.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

- CVE-2019-15961: Fixed a denial of service which might occur when 
  scanning a specially crafted email file as (bsc#1157763).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-05"/>
	<updated date="2019-12-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1157763">SUSE bug 1157763</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15961/">CVE-2019-15961</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490807" comment="clamav-0.100.3-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490808" comment="clamav-devel-0.100.3-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490809" comment="libclamav7-0.100.3-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490810" comment="libclammspack0-0.100.3-3.17.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137814" version="1" class="patch">
	<metadata>
		<title>Security update for permissions (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1093414" ref_url="https://bugzilla.suse.com/1093414" source="BUGZILLA"/>
		<reference ref_id="1150734" ref_url="https://bugzilla.suse.com/1150734" source="BUGZILLA"/>
		<reference ref_id="1157198" ref_url="https://bugzilla.suse.com/1157198" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3688" ref_url="https://www.suse.com/security/cve/CVE-2019-3688/" source="CVE"/>
		<reference ref_id="CVE-2019-3690" ref_url="https://www.suse.com/security/cve/CVE-2019-3690/" source="CVE"/>
		<description>
This update for permissions fixes the following issues:

- CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid
  which could have allowed a squid user to gain persistence by changing the 
  binary (bsc#1093414).
- CVE-2019-3690: Fixed a privilege escalation through untrusted symbolic 
  links (bsc#1150734).
- Fixed a regression which caused sagmentation fault (bsc#1157198).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-05"/>
	<updated date="2019-12-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1093414">SUSE bug 1093414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150734">SUSE bug 1150734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157198">SUSE bug 1157198</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-3688/">CVE-2019-3688</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-3690/">CVE-2019-3690</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491768" comment="permissions-20181116-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491769" comment="permissions-zypp-plugin-20181116-9.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137815" version="1" class="patch">
	<metadata>
		<title>Security update for dnsmasq (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1076958" ref_url="https://bugzilla.suse.com/1076958" source="BUGZILLA"/>
		<reference ref_id="1138743" ref_url="https://bugzilla.suse.com/1138743" source="BUGZILLA"/>
		<reference ref_id="1152539" ref_url="https://bugzilla.suse.com/1152539" source="BUGZILLA"/>
		<reference ref_id="1154849" ref_url="https://bugzilla.suse.com/1154849" source="BUGZILLA"/>
		<reference ref_id="1156543" ref_url="https://bugzilla.suse.com/1156543" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-15107" ref_url="https://www.suse.com/security/cve/CVE-2017-15107/" source="CVE"/>
		<reference ref_id="CVE-2019-14834" ref_url="https://www.suse.com/security/cve/CVE-2019-14834/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3189-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006208.html" source="SUSE-SU"/>
		<description>
This update for dnsmasq fixes the following issues:

Security issues fixed: 	  

- CVE-2019-14834: Fixed a memory leak which could have allowed to remote attackers 
  to cause denial of service via DHCP response creation (bsc#1154849)
- CVE-2017-15107: Fixed a vulnerability in DNSSEC implementation. Processing of
  wildcard synthesized NSEC records may result improper validation for non-existance 
  (bsc#1076958).

Other issues addressed:   
- Included linux/sockios.h to get SIOCGSTAMP (bsc#1156543).
- Removed cache size limit (bsc#1138743).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-05"/>
	<updated date="2019-12-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1076958">SUSE bug 1076958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138743">SUSE bug 1138743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152539">SUSE bug 1152539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154849">SUSE bug 1154849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156543">SUSE bug 1156543</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-15107/">CVE-2017-15107</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14834/">CVE-2019-14834</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491770" comment="dnsmasq-2.78-7.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137816" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1100397" ref_url="https://bugzilla.suse.com/1100397" source="BUGZILLA"/>
		<reference ref_id="1123886" ref_url="https://bugzilla.suse.com/1123886" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2019:3212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006234.html" source="SUSE-SU"/>
		<description>
This update for postgresql fixes the following issues:

- Changed permissions, so that the directory can only be used by users 
  in the postgres group (bsc#1123886).
- Moved bash profile out of /var/lib to allow transactional updates (bsc#1100397).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-10"/>
	<updated date="2019-12-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1100397">SUSE bug 1100397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123886">SUSE bug 1123886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490813" comment="postgresql-10-8.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137817" version="1" class="patch">
	<metadata>
		<title>Security update for libssh (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1158095" ref_url="https://bugzilla.suse.com/1158095" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14889" ref_url="https://www.suse.com/security/cve/CVE-2019-14889/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006238.html" source="SUSE-SU"/>
		<description>
This update for libssh fixes the following issues:

- CVE-2019-14889: Fixed an arbitrary command execution (bsc#1158095).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-11"/>
	<updated date="2019-12-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1158095">SUSE bug 1158095</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14889/">CVE-2019-14889</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491771" comment="libssh-devel-0.8.7-10.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491772" comment="libssh4-0.8.7-10.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491773" comment="libssh4-32bit-0.8.7-10.6.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137818" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1048942" ref_url="https://bugzilla.suse.com/1048942" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1078248" ref_url="https://bugzilla.suse.com/1078248" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1089644" ref_url="https://bugzilla.suse.com/1089644" source="BUGZILLA"/>
		<reference ref_id="1091041" ref_url="https://bugzilla.suse.com/1091041" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1108043" ref_url="https://bugzilla.suse.com/1108043" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1117169" ref_url="https://bugzilla.suse.com/1117169" source="BUGZILLA"/>
		<reference ref_id="1118661" ref_url="https://bugzilla.suse.com/1118661" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1120853" ref_url="https://bugzilla.suse.com/1120853" source="BUGZILLA"/>
		<reference ref_id="1126390" ref_url="https://bugzilla.suse.com/1126390" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1131107" ref_url="https://bugzilla.suse.com/1131107" source="BUGZILLA"/>
		<reference ref_id="1134983" ref_url="https://bugzilla.suse.com/1134983" source="BUGZILLA"/>
		<reference ref_id="1135966" ref_url="https://bugzilla.suse.com/1135966" source="BUGZILLA"/>
		<reference ref_id="1135967" ref_url="https://bugzilla.suse.com/1135967" source="BUGZILLA"/>
		<reference ref_id="1137223" ref_url="https://bugzilla.suse.com/1137223" source="BUGZILLA"/>
		<reference ref_id="1137236" ref_url="https://bugzilla.suse.com/1137236" source="BUGZILLA"/>
		<reference ref_id="1138039" ref_url="https://bugzilla.suse.com/1138039" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1142095" ref_url="https://bugzilla.suse.com/1142095" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142924" ref_url="https://bugzilla.suse.com/1142924" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1149448" ref_url="https://bugzilla.suse.com/1149448" source="BUGZILLA"/>
		<reference ref_id="1150466" ref_url="https://bugzilla.suse.com/1150466" source="BUGZILLA"/>
		<reference ref_id="1151067" ref_url="https://bugzilla.suse.com/1151067" source="BUGZILLA"/>
		<reference ref_id="1151548" ref_url="https://bugzilla.suse.com/1151548" source="BUGZILLA"/>
		<reference ref_id="1151900" ref_url="https://bugzilla.suse.com/1151900" source="BUGZILLA"/>
		<reference ref_id="1152782" ref_url="https://bugzilla.suse.com/1152782" source="BUGZILLA"/>
		<reference ref_id="1153628" ref_url="https://bugzilla.suse.com/1153628" source="BUGZILLA"/>
		<reference ref_id="1153811" ref_url="https://bugzilla.suse.com/1153811" source="BUGZILLA"/>
		<reference ref_id="1154043" ref_url="https://bugzilla.suse.com/1154043" source="BUGZILLA"/>
		<reference ref_id="1154058" ref_url="https://bugzilla.suse.com/1154058" source="BUGZILLA"/>
		<reference ref_id="1154124" ref_url="https://bugzilla.suse.com/1154124" source="BUGZILLA"/>
		<reference ref_id="1154355" ref_url="https://bugzilla.suse.com/1154355" source="BUGZILLA"/>
		<reference ref_id="1154526" ref_url="https://bugzilla.suse.com/1154526" source="BUGZILLA"/>
		<reference ref_id="1154601" ref_url="https://bugzilla.suse.com/1154601" source="BUGZILLA"/>
		<reference ref_id="1155021" ref_url="https://bugzilla.suse.com/1155021" source="BUGZILLA"/>
		<reference ref_id="1155689" ref_url="https://bugzilla.suse.com/1155689" source="BUGZILLA"/>
		<reference ref_id="1155692" ref_url="https://bugzilla.suse.com/1155692" source="BUGZILLA"/>
		<reference ref_id="1155836" ref_url="https://bugzilla.suse.com/1155836" source="BUGZILLA"/>
		<reference ref_id="1155897" ref_url="https://bugzilla.suse.com/1155897" source="BUGZILLA"/>
		<reference ref_id="1155921" ref_url="https://bugzilla.suse.com/1155921" source="BUGZILLA"/>
		<reference ref_id="1155982" ref_url="https://bugzilla.suse.com/1155982" source="BUGZILLA"/>
		<reference ref_id="1156187" ref_url="https://bugzilla.suse.com/1156187" source="BUGZILLA"/>
		<reference ref_id="1156258" ref_url="https://bugzilla.suse.com/1156258" source="BUGZILLA"/>
		<reference ref_id="1156429" ref_url="https://bugzilla.suse.com/1156429" source="BUGZILLA"/>
		<reference ref_id="1156466" ref_url="https://bugzilla.suse.com/1156466" source="BUGZILLA"/>
		<reference ref_id="1156471" ref_url="https://bugzilla.suse.com/1156471" source="BUGZILLA"/>
		<reference ref_id="1156494" ref_url="https://bugzilla.suse.com/1156494" source="BUGZILLA"/>
		<reference ref_id="1156609" ref_url="https://bugzilla.suse.com/1156609" source="BUGZILLA"/>
		<reference ref_id="1156700" ref_url="https://bugzilla.suse.com/1156700" source="BUGZILLA"/>
		<reference ref_id="1156729" ref_url="https://bugzilla.suse.com/1156729" source="BUGZILLA"/>
		<reference ref_id="1156882" ref_url="https://bugzilla.suse.com/1156882" source="BUGZILLA"/>
		<reference ref_id="1156928" ref_url="https://bugzilla.suse.com/1156928" source="BUGZILLA"/>
		<reference ref_id="1157032" ref_url="https://bugzilla.suse.com/1157032" source="BUGZILLA"/>
		<reference ref_id="1157038" ref_url="https://bugzilla.suse.com/1157038" source="BUGZILLA"/>
		<reference ref_id="1157042" ref_url="https://bugzilla.suse.com/1157042" source="BUGZILLA"/>
		<reference ref_id="1157044" ref_url="https://bugzilla.suse.com/1157044" source="BUGZILLA"/>
		<reference ref_id="1157045" ref_url="https://bugzilla.suse.com/1157045" source="BUGZILLA"/>
		<reference ref_id="1157046" ref_url="https://bugzilla.suse.com/1157046" source="BUGZILLA"/>
		<reference ref_id="1157049" ref_url="https://bugzilla.suse.com/1157049" source="BUGZILLA"/>
		<reference ref_id="1157070" ref_url="https://bugzilla.suse.com/1157070" source="BUGZILLA"/>
		<reference ref_id="1157115" ref_url="https://bugzilla.suse.com/1157115" source="BUGZILLA"/>
		<reference ref_id="1157143" ref_url="https://bugzilla.suse.com/1157143" source="BUGZILLA"/>
		<reference ref_id="1157145" ref_url="https://bugzilla.suse.com/1157145" source="BUGZILLA"/>
		<reference ref_id="1157158" ref_url="https://bugzilla.suse.com/1157158" source="BUGZILLA"/>
		<reference ref_id="1157160" ref_url="https://bugzilla.suse.com/1157160" source="BUGZILLA"/>
		<reference ref_id="1157162" ref_url="https://bugzilla.suse.com/1157162" source="BUGZILLA"/>
		<reference ref_id="1157171" ref_url="https://bugzilla.suse.com/1157171" source="BUGZILLA"/>
		<reference ref_id="1157173" ref_url="https://bugzilla.suse.com/1157173" source="BUGZILLA"/>
		<reference ref_id="1157178" ref_url="https://bugzilla.suse.com/1157178" source="BUGZILLA"/>
		<reference ref_id="1157180" ref_url="https://bugzilla.suse.com/1157180" source="BUGZILLA"/>
		<reference ref_id="1157182" ref_url="https://bugzilla.suse.com/1157182" source="BUGZILLA"/>
		<reference ref_id="1157183" ref_url="https://bugzilla.suse.com/1157183" source="BUGZILLA"/>
		<reference ref_id="1157184" ref_url="https://bugzilla.suse.com/1157184" source="BUGZILLA"/>
		<reference ref_id="1157191" ref_url="https://bugzilla.suse.com/1157191" source="BUGZILLA"/>
		<reference ref_id="1157193" ref_url="https://bugzilla.suse.com/1157193" source="BUGZILLA"/>
		<reference ref_id="1157197" ref_url="https://bugzilla.suse.com/1157197" source="BUGZILLA"/>
		<reference ref_id="1157298" ref_url="https://bugzilla.suse.com/1157298" source="BUGZILLA"/>
		<reference ref_id="1157304" ref_url="https://bugzilla.suse.com/1157304" source="BUGZILLA"/>
		<reference ref_id="1157307" ref_url="https://bugzilla.suse.com/1157307" source="BUGZILLA"/>
		<reference ref_id="1157324" ref_url="https://bugzilla.suse.com/1157324" source="BUGZILLA"/>
		<reference ref_id="1157333" ref_url="https://bugzilla.suse.com/1157333" source="BUGZILLA"/>
		<reference ref_id="1157386" ref_url="https://bugzilla.suse.com/1157386" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1157463" ref_url="https://bugzilla.suse.com/1157463" source="BUGZILLA"/>
		<reference ref_id="1157499" ref_url="https://bugzilla.suse.com/1157499" source="BUGZILLA"/>
		<reference ref_id="1157678" ref_url="https://bugzilla.suse.com/1157678" source="BUGZILLA"/>
		<reference ref_id="1157698" ref_url="https://bugzilla.suse.com/1157698" source="BUGZILLA"/>
		<reference ref_id="1157778" ref_url="https://bugzilla.suse.com/1157778" source="BUGZILLA"/>
		<reference ref_id="1157908" ref_url="https://bugzilla.suse.com/1157908" source="BUGZILLA"/>
		<reference ref_id="1158049" ref_url="https://bugzilla.suse.com/1158049" source="BUGZILLA"/>
		<reference ref_id="1158063" ref_url="https://bugzilla.suse.com/1158063" source="BUGZILLA"/>
		<reference ref_id="1158064" ref_url="https://bugzilla.suse.com/1158064" source="BUGZILLA"/>
		<reference ref_id="1158065" ref_url="https://bugzilla.suse.com/1158065" source="BUGZILLA"/>
		<reference ref_id="1158066" ref_url="https://bugzilla.suse.com/1158066" source="BUGZILLA"/>
		<reference ref_id="1158067" ref_url="https://bugzilla.suse.com/1158067" source="BUGZILLA"/>
		<reference ref_id="1158068" ref_url="https://bugzilla.suse.com/1158068" source="BUGZILLA"/>
		<reference ref_id="1158071" ref_url="https://bugzilla.suse.com/1158071" source="BUGZILLA"/>
		<reference ref_id="1158082" ref_url="https://bugzilla.suse.com/1158082" source="BUGZILLA"/>
		<reference ref_id="1158381" ref_url="https://bugzilla.suse.com/1158381" source="BUGZILLA"/>
		<reference ref_id="1158394" ref_url="https://bugzilla.suse.com/1158394" source="BUGZILLA"/>
		<reference ref_id="1158398" ref_url="https://bugzilla.suse.com/1158398" source="BUGZILLA"/>
		<reference ref_id="1158407" ref_url="https://bugzilla.suse.com/1158407" source="BUGZILLA"/>
		<reference ref_id="1158410" ref_url="https://bugzilla.suse.com/1158410" source="BUGZILLA"/>
		<reference ref_id="1158413" ref_url="https://bugzilla.suse.com/1158413" source="BUGZILLA"/>
		<reference ref_id="1158417" ref_url="https://bugzilla.suse.com/1158417" source="BUGZILLA"/>
		<reference ref_id="1158427" ref_url="https://bugzilla.suse.com/1158427" source="BUGZILLA"/>
		<reference ref_id="1158445" ref_url="https://bugzilla.suse.com/1158445" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-0154" ref_url="https://www.suse.com/security/cve/CVE-2019-0154/" source="CVE"/>
		<reference ref_id="CVE-2019-14895" ref_url="https://www.suse.com/security/cve/CVE-2019-14895/" source="CVE"/>
		<reference ref_id="CVE-2019-14901" ref_url="https://www.suse.com/security/cve/CVE-2019-14901/" source="CVE"/>
		<reference ref_id="CVE-2019-15916" ref_url="https://www.suse.com/security/cve/CVE-2019-15916/" source="CVE"/>
		<reference ref_id="CVE-2019-16231" ref_url="https://www.suse.com/security/cve/CVE-2019-16231/" source="CVE"/>
		<reference ref_id="CVE-2019-17055" ref_url="https://www.suse.com/security/cve/CVE-2019-17055/" source="CVE"/>
		<reference ref_id="CVE-2019-18660" ref_url="https://www.suse.com/security/cve/CVE-2019-18660/" source="CVE"/>
		<reference ref_id="CVE-2019-18683" ref_url="https://www.suse.com/security/cve/CVE-2019-18683/" source="CVE"/>
		<reference ref_id="CVE-2019-18805" ref_url="https://www.suse.com/security/cve/CVE-2019-18805/" source="CVE"/>
		<reference ref_id="CVE-2019-18809" ref_url="https://www.suse.com/security/cve/CVE-2019-18809/" source="CVE"/>
		<reference ref_id="CVE-2019-19046" ref_url="https://www.suse.com/security/cve/CVE-2019-19046/" source="CVE"/>
		<reference ref_id="CVE-2019-19049" ref_url="https://www.suse.com/security/cve/CVE-2019-19049/" source="CVE"/>
		<reference ref_id="CVE-2019-19052" ref_url="https://www.suse.com/security/cve/CVE-2019-19052/" source="CVE"/>
		<reference ref_id="CVE-2019-19056" ref_url="https://www.suse.com/security/cve/CVE-2019-19056/" source="CVE"/>
		<reference ref_id="CVE-2019-19057" ref_url="https://www.suse.com/security/cve/CVE-2019-19057/" source="CVE"/>
		<reference ref_id="CVE-2019-19058" ref_url="https://www.suse.com/security/cve/CVE-2019-19058/" source="CVE"/>
		<reference ref_id="CVE-2019-19060" ref_url="https://www.suse.com/security/cve/CVE-2019-19060/" source="CVE"/>
		<reference ref_id="CVE-2019-19062" ref_url="https://www.suse.com/security/cve/CVE-2019-19062/" source="CVE"/>
		<reference ref_id="CVE-2019-19063" ref_url="https://www.suse.com/security/cve/CVE-2019-19063/" source="CVE"/>
		<reference ref_id="CVE-2019-19065" ref_url="https://www.suse.com/security/cve/CVE-2019-19065/" source="CVE"/>
		<reference ref_id="CVE-2019-19067" ref_url="https://www.suse.com/security/cve/CVE-2019-19067/" source="CVE"/>
		<reference ref_id="CVE-2019-19068" ref_url="https://www.suse.com/security/cve/CVE-2019-19068/" source="CVE"/>
		<reference ref_id="CVE-2019-19073" ref_url="https://www.suse.com/security/cve/CVE-2019-19073/" source="CVE"/>
		<reference ref_id="CVE-2019-19074" ref_url="https://www.suse.com/security/cve/CVE-2019-19074/" source="CVE"/>
		<reference ref_id="CVE-2019-19075" ref_url="https://www.suse.com/security/cve/CVE-2019-19075/" source="CVE"/>
		<reference ref_id="CVE-2019-19077" ref_url="https://www.suse.com/security/cve/CVE-2019-19077/" source="CVE"/>
		<reference ref_id="CVE-2019-19078" ref_url="https://www.suse.com/security/cve/CVE-2019-19078/" source="CVE"/>
		<reference ref_id="CVE-2019-19080" ref_url="https://www.suse.com/security/cve/CVE-2019-19080/" source="CVE"/>
		<reference ref_id="CVE-2019-19081" ref_url="https://www.suse.com/security/cve/CVE-2019-19081/" source="CVE"/>
		<reference ref_id="CVE-2019-19082" ref_url="https://www.suse.com/security/cve/CVE-2019-19082/" source="CVE"/>
		<reference ref_id="CVE-2019-19083" ref_url="https://www.suse.com/security/cve/CVE-2019-19083/" source="CVE"/>
		<reference ref_id="CVE-2019-19227" ref_url="https://www.suse.com/security/cve/CVE-2019-19227/" source="CVE"/>
		<reference ref_id="CVE-2019-19524" ref_url="https://www.suse.com/security/cve/CVE-2019-19524/" source="CVE"/>
		<reference ref_id="CVE-2019-19525" ref_url="https://www.suse.com/security/cve/CVE-2019-19525/" source="CVE"/>
		<reference ref_id="CVE-2019-19528" ref_url="https://www.suse.com/security/cve/CVE-2019-19528/" source="CVE"/>
		<reference ref_id="CVE-2019-19529" ref_url="https://www.suse.com/security/cve/CVE-2019-19529/" source="CVE"/>
		<reference ref_id="CVE-2019-19530" ref_url="https://www.suse.com/security/cve/CVE-2019-19530/" source="CVE"/>
		<reference ref_id="CVE-2019-19531" ref_url="https://www.suse.com/security/cve/CVE-2019-19531/" source="CVE"/>
		<reference ref_id="CVE-2019-19534" ref_url="https://www.suse.com/security/cve/CVE-2019-19534/" source="CVE"/>
		<reference ref_id="CVE-2019-19536" ref_url="https://www.suse.com/security/cve/CVE-2019-19536/" source="CVE"/>
		<reference ref_id="CVE-2019-19543" ref_url="https://www.suse.com/security/cve/CVE-2019-19543/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).
- CVE-2019-19543: There was a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c (bnc#1158427).
- CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver (bnc#1158417).
- CVE-2019-19530: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver (bnc#1158410).
- CVE-2019-19536: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver (bnc#1158394).
- CVE-2019-19524: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver (bnc#1158413).
- CVE-2019-19528: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (bnc#1158407).
- CVE-2019-19534: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver (bnc#1158398).
- CVE-2019-19529: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver (bnc#1158381).
- CVE-2019-14901: A heap overflow flaw was found in the Linux kernel in Marvell WiFi chip driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system (bnc#1157042).
- CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could have allowed the remote device to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1157158).
- CVE-2019-18660: The Linux kernel on powerpc allowed Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c (bnc#1157038).
- CVE-2019-18683: An issue was discovered in drivers/media/platform/vivid in the Linux kernel. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free (bnc#1155897).
- CVE-2019-18809: A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1156258).
- CVE-2019-19046: A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure (bnc#1157304).
- CVE-2019-19078: A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157032).
- CVE-2019-19062: A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures (bnc#1157333).
- CVE-2019-19057: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures (bnc#1157197).
- CVE-2019-19056: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures (bnc#1157197).
- CVE-2019-19068: A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157307).
- CVE-2019-19063: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157298).
- CVE-2019-19227: In the AppleTalk subsystem in the Linux kernel there was a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client (bnc#1157678).
- CVE-2019-19081: A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157045).
- CVE-2019-19080: Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157044).
- CVE-2019-19065: A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures (bnc#1157191).
- CVE-2019-19077: A memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering copy to udata failures (bnc#1157171).
- CVE-2019-19052: A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157324).
- CVE-2019-19067: Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures (bsc#1157180).
- CVE-2019-19060: A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157178).
- CVE-2019-19049: A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering of_fdt_unflatten_tree() failures (bsc#1157173).
- CVE-2019-19075: A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering ca8210_get_platform_data() failures (bnc#1157162).
- CVE-2019-19058: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures (bnc#1157145).
- CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157143).
- CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function (bnc#1157070).
- CVE-2019-19083: Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel allowed attackers to cause a denial of service (memory consumption). This affects the dce112_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, the dce100_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, the dcn20_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c, the dce120_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, and the dce80_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce80/dce80_resource.c (bnc#1157049).
- CVE-2019-19082: Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel allowed attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, the dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, and the dce112_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c (bnc#1157046).
- CVE-2019-15916: An issue was discovered in the Linux kernel There was a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service (bnc#1149448).
- CVE-2019-0154: Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1135966).
- CVE-2019-16231: drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150466).
- CVE-2019-18805: An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel There was a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact (bnc#1156187).
- CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket (bnc#1152782).

The following non-security bugs were fixed:

- bnxt_en: Update firmware interface spec. to 1.10.0.47 (bsc#1157115)
- ACPI / LPSS: Exclude I2C busses shared with PUNIT from pmc_atom_d3_mask (bsc#1051510).
- ACPI / SBS: Fix rare oops when removing modules (bsc#1051510).
- ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug bridge (bsc#1111666).
- ACPICA: Never run _REG on system_memory and system_IO (bsc#1051510).
- ACPICA: Use %d for signed int print formatting instead of %u (bsc#1051510).
- ALSA: 6fire: Drop the dead code (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (git-fixes).
- ALSA: cs4236: fix error return comparison of an unsigned integer (git-fixes).
- ALSA: firewire-motu: Correct a typo in the clock proc string (git-fixes).
- ALSA: hda - Add mute led support for HP ProBook 645 G4 (git-fixes).
- ALSA: hda - Fix pending unsol events at shutdown (git-fixes).
- ALSA: hda/ca0132 - Fix possible workqueue stall (bsc#1155836).
- ALSA: hda/hdmi - Clear codec-&gt;relaxed_resume flag at unbinding (git-fixes).
- ALSA: hda/intel: add CometLake PCI IDs (bsc#1156729).
- ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC (git-fixes).
- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (git-fixes).
- ALSA: hda/realtek - Move some alc236 pintbls to fallback table (git-fixes).
- ALSA: hda/realtek - Move some alc256 pintbls to fallback table (git-fixes).
- ALSA: hda: Add Cometlake-S PCI ID (git-fixes).
- ALSA: hda: Fix racy display power access (bsc#1156928).
- ALSA: hda: hdmi - fix port numbering for ICL and TGL platforms (git-fixes).
- ALSA: hda: hdmi - remove redundant code comments (git-fixes).
- ALSA: i2c/cs8427: Fix int to char conversion (bsc#1051510).
- ALSA: intel8x0m: Register irq handler after register initializations (bsc#1051510).
- ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed() (git-fixes).
- ALSA: pcm: Yet another missing check of non-cached buffer type (bsc#1111666).
- ALSA: pcm: signedness bug in snd_pcm_plug_alloc() (bsc#1051510).
- ALSA: seq: Do error checks at creating system ports (bsc#1051510).
- ALSA: timer: Fix incorrectly assigned timer instance (git-fixes).
- ALSA: usb-audio: Add skip_validation option (git-fixes).
- ALSA: usb-audio: Fix Focusrite Scarlett 6i6 gen1 - input handling (git-fixes).
- ALSA: usb-audio: Fix NULL dereference at parsing BADD (git-fixes).
- ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() (git-fixes).
- ALSA: usb-audio: Fix incorrect size check for processing/extension units (git-fixes).
- ALSA: usb-audio: Fix missing error check at mixer resolution test (git-fixes).
- ALSA: usb-audio: not submit urb for stopped endpoint (git-fixes).
- ALSA: usb-audio: sound: usb: usb true/false for bool return type (git-fixes).
- ASoC: Intel: hdac_hdmi: Limit sampling rates at dai creation (bsc#1051510).
- ASoC: davinci-mcasp: Handle return value of devm_kasprintf (stable 4.14.y).
- ASoC: davinci: Kill BUG_ON() usage (stable 4.14.y).
- ASoC: dpcm: Properly initialise hw-&gt;rate_max (bsc#1051510).
- ASoC: kirkwood: fix external clock probe defer (git-fixes).
- ASoC: msm8916-wcd-analog: Fix RX1 selection in RDAC2 MUX (git-fixes).
- ASoC: sgtl5000: avoid division by zero if lo_vag is zero (bsc#1051510).
- ASoC: tegra_sgtl5000: fix device_node refcounting (bsc#1051510).
- ASoC: tlv320aic31xx: Handle inverted BCLK in non-DSP modes (stable 4.14.y).
- ASoC: tlv320dac31xx: mark expected switch fall-through (stable 4.14.y).
- Bluetooth: Fix invalid-free in bcsp_close() (git-fixes).
- Bluetooth: Fix memory leak in hci_connect_le_scan (bsc#1051510).
- Bluetooth: L2CAP: Detect if remote is not able to use the whole MPS (bsc#1051510).
- Bluetooth: btusb: fix PM leak in error case of setup (bsc#1051510).
- Bluetooth: delete a stray unlock (bsc#1051510).
- Bluetooth: hci_core: fix init for HCI_USER_CHANNEL (bsc#1051510).
- Btrfs: fix log context list corruption after rename exchange operation (bsc#1156494).
- CIFS: Fix SMB2 oplock break processing (bsc#1144333, bsc#1154355).
- CIFS: Fix oplock handling for SMB 2.1+ protocols (bsc#1144333, bsc#1154355).
- CIFS: Fix retry mid list corruption on reconnects (bsc#1144333, bsc#1154355).
- CIFS: Fix use after free of file info structures (bsc#1144333, bsc#1154355).
- CIFS: Force reval dentry if LOOKUP_REVAL flag is set (bsc#1144333, bsc#1154355).
- CIFS: Force revalidate inode when dentry is stale (bsc#1144333, bsc#1154355).
- CIFS: Gracefully handle QueryInfo errors during open (bsc#1144333, bsc#1154355).
- CIFS: avoid using MID 0xFFFF (bsc#1144333, bsc#1154355).
- CIFS: fix max ea value size (bsc#1144333, bsc#1154355).
- Documentation: debugfs: Document debugfs helper for unsigned long values (git-fixes).
- Documentation: x86: convert protection-keys.txt to reST (bsc#1078248).
- EDAC/ghes: Fix Use after free in ghes_edac remove path (bsc#1114279).
- HID: Add ASUS T100CHI keyboard dock battery quirks (bsc#1051510).
- HID: Add quirk for Microsoft PIXART OEM mouse (bsc#1051510).
- HID: Fix assumption that devices have inputs (git-fixes).
- HID: asus: Add T100CHI bluetooth keyboard dock special keys mapping (bsc#1051510).
- HID: wacom: generic: Treat serial number and related fields as unsigned (git-fixes).
- IB/mlx5: Free mpi in mp_slave mode (bsc#1103991).
- IB/mlx5: Support MLX5_CMD_OP_QUERY_LAG as a DEVX general command (bsc#1103991).
- Input: ff-memless - kill timer in destroy() (bsc#1051510).
- Input: silead - try firmware reload after unsuccessful resume (bsc#1051510).
- Input: st1232 - set INPUT_PROP_DIRECT property (bsc#1051510).
- Input: synaptics-rmi4 - clear IRQ enables for F54 (bsc#1051510).
- Input: synaptics-rmi4 - destroy F54 poller workqueue when removing (bsc#1051510).
- Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver (bsc#1051510).
- Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) (bsc#1051510).
- Input: synaptics-rmi4 - fix video buffer size (git-fixes).
- KVM: SVM: Guard against DEACTIVATE when performing WBINVD/DF_FLUSH (bsc#1114279).
- KVM: SVM: Serialize access to the SEV ASID bitmap (bsc#1114279).
- KVM: VMX: Consider PID.PIR to determine if vCPU has pending interrupts (bsc#1158064).
- KVM: VMX: Fix conditions for guest IA32_XSS support (bsc#1158065).
- KVM: s390: fix __insn32_query() inline assembly (git-fixes).
- KVM: s390: vsie: Do not shadow CRYCB when no AP and no keys (git-fixes).
- KVM: s390: vsie: Return correct values for Invalid CRYCB format (git-fixes).
- KVM: x86/mmu: Take slots_lock when using kvm_mmu_zap_all_fast() (bsc#1158067).
- KVM: x86: Introduce vcpu-&gt;arch.xsaves_enabled (bsc#1158066).
- NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error (git-fixes).
- PCI/ACPI: Correct error message for ASPM disabling (bsc#1051510).
- PCI/MSI: Fix incorrect MSI-X masking on resume (bsc#1051510).
- PCI/PM: Clear PCIe PME Status even for legacy power management (bsc#1111666).
- PCI/PME: Fix possible use-after-free on remove (git-fixes).
- PCI/PTM: Remove spurious 'd' from granularity message (bsc#1051510).
- PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3 (bsc#1051510).
- PCI: Fix Intel ACS quirk UPDCR register address (bsc#1051510).
- PCI: dwc: Fix find_next_bit() usage (bsc#1051510).
- PCI: pciehp: Do not disable interrupt twice on suspend (bsc#1111666).
- PCI: rcar: Fix missing MACCTLR register setting in initialization sequence (bsc#1051510).
- PCI: sysfs: Ignore lockdep for remove attribute (git-fixes).
- PCI: tegra: Enable Relaxed Ordering only for Tegra20 and Tegra30 (git-fixes).
- PM / devfreq: Check NULL governor in available_governors_show (git-fixes).
- PM / devfreq: Lock devfreq in trans_stat_show (git-fixes).
- PM / devfreq: exynos-bus: Correct clock enable sequence (bsc#1051510).
- PM / devfreq: passive: Use non-devm notifiers (bsc#1051510).
- PM / devfreq: passive: fix compiler warning (bsc#1051510).
- PM / hibernate: Check the success of generating md5 digest before hibernation (bsc#1051510).
- RDMA/bnxt_re: Fix stat push into dma buffer on gen p5 devices (bsc#1157115)
- RDMA/efa: Add Amazon EFA driver (jsc#SLE-4805)
- RDMA/efa: Clear the admin command buffer prior to its submission (git-fixes) Patch was already picked through Amazon driver repo but was not marked with a Git-commit tag
- RDMA/hns: Fix comparison of unsigned long variable 'end' with less than zero (bsc#1104427 bsc#1137236).
- RDMA/hns: Fix wrong assignment of qp_access_flags (bsc#1104427 ).
- RDMA/restrack: Track driver QP types in resource tracker (jsc#SLE-4805)
- Remove patches that reportedly cause regression (bsc#1155689 ltc#182047).
- Revert 'drm/etnaviv: fix dumping of iommuv2 (bsc#1113722)' This reverts commit 71e3a1b8d8cf73f711f3e4100aa51f68e631f94f.
- Revert synaptics-rmi4 patch due to regression (bsc#1155982) Also blacklisting it
- UAS: Revert commit 3ae62a42090f ('UAS: fix alignment of scatter/gather segments').
- USB: chaoskey: fix error case of a timeout (git-fixes).
- USB: gadget: Reject endpoints with 0 maxpacket value (bsc#1051510).
- USB: ldusb: fix control-message timeout (bsc#1051510).
- USB: ldusb: fix ring-buffer locking (bsc#1051510).
- USB: misc: appledisplay: fix backlight update_status return code (bsc#1051510).
- USB: serial: mos7720: fix remote wakeup (git-fixes).
- USB: serial: mos7840: add USB ID to support Moxa UPort 2210 (bsc#1051510).
- USB: serial: mos7840: fix remote wakeup (git-fixes).
- USB: serial: option: add support for DW5821e with eSIM support (bsc#1051510).
- USB: serial: option: add support for Foxconn T77W968 LTE modules (bsc#1051510).
- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: serial: whiteheat: fix potential slab corruption (bsc#1051510).
- USBIP: add config dependency for SGL_ALLOC (git-fixes).
- acpi/nfit, device-dax: Identify differentiated memory with a unique numa-node (bsc#1158071).
- appledisplay: fix error handling in the scheduled work (git-fixes).
- arm64: Update config files. (bsc#1156466) Enable HW_RANDOM_OMAP driver and mark driver omap-rng as supported.
- ata: ep93xx: Use proper enums for directions (bsc#1051510).
- ath10k: Correct error handling of dma_map_single() (bsc#1111666).
- ath10k: allocate small size dma memory in ath10k_pci_diag_write_mem (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3 (bsc#1111666).
- ath10k: avoid possible memory access violation (bsc#1111666).
- ath10k: fix kernel panic by moving pci flush after napi_disable (bsc#1051510).
- ath10k: fix vdev-start timeout on error (bsc#1051510).
- ath10k: limit available channels via DT ieee80211-freq-limit (bsc#1051510).
- ath10k: skip resetting rx filter for WCN3990 (bsc#1111666).
- ath10k: wmi: disable softirq's while calling ieee80211_rx (bsc#1051510).
- ath9k: Fix a locking bug in ath9k_add_interface() (bsc#1051510).
- ath9k: add back support for using active monitor interfaces for tx99 (bsc#1051510).
- ath9k: fix reporting calculated new FFT upper max (bsc#1051510).
- ath9k: fix tx99 with monitor mode interface (bsc#1051510).
- ath9k_hw: fix uninitialized variable data (bsc#1051510).
- ax88172a: fix information leak on short answers (bsc#1051510).
- backlight: lm3639: Unconditionally call led_classdev_unregister (bsc#1051510).
- bnxt_en: Increase timeout for HWRM_DBG_COREDUMP_XX commands (bsc#1104745).
- bnxt_en: Update firmware interface spec. to 1.10.0.89 (bsc#1157115)
- bnxt_en: Update firmware interface to 1.10.0.69 (bsc#1157115)
- bpf: Fix use after free in subprog's jited symbol removal (bsc#1109837).
- bpf: fix BTF limits (bsc#1109837).
- bpf: fix BTF verification of enums (bsc#1109837).
- brcmfmac: fix full timeout waiting for action frame on-channel tx (bsc#1051510).
- brcmfmac: fix wrong strnchr usage (bsc#1111666).
- brcmfmac: increase buffer for obtaining firmware capabilities (bsc#1111666).
- brcmfmac: reduce timeout for action frame scan (bsc#1051510).
- brcmsmac: AP mode: update beacon when TIM changes (bsc#1051510).
- brcmsmac: Use kvmalloc() for ucode allocations (bsc#1111666).
- brcmsmac: never log 'tid x is not agg'able' by default (bsc#1051510).
- can: c_can: c_can_poll(): only read status register after status IRQ (git-fixes).
- can: dev: call netif_carrier_off() in register_candev() (bsc#1051510).
- can: mcba_usb: fix use-after-free on disconnect (git-fixes).
- can: peak_usb: fix a potential out-of-sync while decoding packets (git-fixes).
- can: peak_usb: fix slab info leak (git-fixes).
- can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue beyond skb_queue_len_max (git-fixes).
- can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak (git-fixes).
- can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb mem leak (git-fixes).
- can: usb_8dev: fix use-after-free on disconnect (git-fixes).
- ceph: add missing check in d_revalidate snapdir handling (bsc#1157183).
- ceph: do not try to handle hashed dentries in non-O_CREAT atomic_open (bsc#1157184).
- ceph: fix use-after-free in __ceph_remove_cap() (bsc#1154058).
- ceph: just skip unrecognized info in ceph_reply_info_extra (bsc#1157182).
- cfg80211: Avoid regulatory restore when COUNTRY_IE_IGNORE is set (bsc#1051510).
- cfg80211: Prevent regulatory restore during STA disconnect in concurrent interfaces (bsc#1051510).
- cfg80211: call disconnect_wk when AP stops (bsc#1051510).
- cfg80211: validate wmm rule when setting (bsc#1111666).
- cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (bsc#1144333, bsc#1154355).
- cifs: Fix missed free operations (bsc#1144333, bsc#1154355).
- cifs: Use kzfree() to zero out the password (bsc#1144333, bsc#1154355).
- cifs: add a helper to find an existing readable handle to a file (bsc#1144333, bsc#1154355).
- cifs: create a helper to find a writeable handle by path name (bsc#1144333, bsc#1154355).
- cifs: move cifsFileInfo_put logic into a work-queue (bsc#1144333, bsc#1154355).
- cifs: prepare SMB2_Flush to be usable in compounds (bsc#1144333, bsc#1154355).
- cifs: set domainName when a domain-key is used in multiuser (bsc#1144333, bsc#1154355).
- cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (bsc#1144333, bsc#1154355).
- cifs: use existing handle for compound_op(OP_SET_INFO) when possible (bsc#1144333, bsc#1154355).
- clk: at91: avoid sleeping early (git-fixes).
- clk: pxa: fix one of the pxa RTC clocks (bsc#1051510).
- clk: samsung: Use clk_hw API for calling clk framework from clk notifiers (bsc#1051510).
- clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume (bsc#1051510).
- clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume (git-fixes).
- clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18 (git-fixes).
- clocksource/drivers/sh_cmt: Fix clocksource width for 32-bit machines (bsc#1051510).
- clocksource/drivers/sh_cmt: Fixup for 64-bit machines (bsc#1051510).
- compat_ioctl: handle SIOCOUTQNSD (bsc#1051510).
- component: fix loop condition to call unbind() if bind() fails (bsc#1051510).
- cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init() (bsc#1051510).
- cpufreq: Skip cpufreq resume if it's not suspended (bsc#1051510).
- cpufreq: intel_pstate: Register when ACPI PCCH is present (bsc#1051510).
- cpufreq: powernv: fix stack bloat and hard limit on number of CPUs (bsc#1051510).
- cpufreq: ti-cpufreq: add missing of_node_put() (bsc#1051510).
- cpupower : Fix cpupower working when cpu0 is offline (bsc#1051510).
- cpupower : frequency-set -r option misses the last cpu in related cpu list (bsc#1051510).
- cpupower: Fix coredump on VMWare (bsc#1051510).
- crypto: af_alg - cast ki_complete ternary op to int (bsc#1051510).
- crypto: crypto4xx - fix double-free in crypto4xx_destroy_sdr (bsc#1051510).
- crypto: ecdh - fix big endian bug in ECC library (bsc#1051510).
- crypto: fix a memory leak in rsa-kcs1pad's encryption mode (bsc#1051510).
- crypto: geode-aes - switch to skcipher for cbc(aes) fallback (bsc#1051510).
- crypto: mxs-dcp - Fix AES issues (bsc#1051510).
- crypto: mxs-dcp - Fix SHA null hashes and output length (bsc#1051510).
- crypto: mxs-dcp - make symbols 'sha1_null_hash' and 'sha256_null_hash' static (bsc#1051510).
- crypto: s5p-sss: Fix Fix argument list alignment (bsc#1051510).
- crypto: tgr192 - remove unneeded semicolon (bsc#1051510).
- cw1200: Fix a signedness bug in cw1200_load_firmware() (bsc#1051510).
- cxgb4: fix panic when attaching to ULD fail (networking-stable-19_11_05).
- cxgb4: request the TX CIDX updates to status page (bsc#1127354 bsc#1127371).
- dccp: do not leak jiffies on the wire (networking-stable-19_11_05).
- dlm: do not leak kernel pointer to userspace (bsc#1051510).
- dlm: fix invalid free (bsc#1051510).
- dmaengine: bcm2835: Print error in case setting DMA mask fails (bsc#1051510).
- dmaengine: dma-jz4780: Do not depend on MACH_JZ4780 (bsc#1051510).
- dmaengine: dma-jz4780: Further residue status fix (bsc#1051510).
- dmaengine: ep93xx: Return proper enum in ep93xx_dma_chan_direction (bsc#1051510).
- dmaengine: imx-sdma: fix size check for sdma script_number (bsc#1051510).
- dmaengine: imx-sdma: fix use-after-free on probe error path (bsc#1051510).
- dmaengine: rcar-dmac: set scatter/gather max segment size (bsc#1051510).
- dmaengine: timb_dma: Use proper enum in td_prep_slave_sg (bsc#1051510).
- docs: move protection-keys.rst to the core-api book (bsc#1078248).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported (bsc#1113956)
- drm/amdgpu/powerplay/vega10: allow undervolting in p7 (bsc#1111666).
- drm/amdgpu: fix bad DMA from INTERRUPT_CNTL2 (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/etnaviv: fix dumping of iommuv2 (bsc#1113722)
- drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)
- drm/i915/cmdparser: Ignore Length operands during command matching (bsc#1135967)
- drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)
- drm/i915/gtt: Add read only pages to gen8_pte_encode (bsc#1135967)
- drm/i915/gtt: Disable read-only support under GVT (bsc#1135967)
- drm/i915/gtt: Read-only pages for insert_entries on bdw (bsc#1135967)
- drm/i915/gvt: fix dropping obj reference twice (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no output (bsc#1111666).
- drm/i915/pmu: 'Frequency' is reported as accumulated cycles (bsc#1112178)
- drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)
- drm/i915: Add support for mandatory cmdparsing (bsc#1135967)
- drm/i915: Allow parsing of unsized batches (bsc#1135967)
- drm/i915: Disable Secure Batches for gen6+
- drm/i915: Do not dereference request if it may have been retired when (bsc#1142635)
- drm/i915: Fix and improve MCR selection logic (bsc#1112178)
- drm/i915: Lock the engine while dumping the active request (bsc#1142635)
- drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)
- drm/i915: Prevent writing into a read-only object via a GGTT mmap (bsc#1135967)
- drm/i915: Reacquire priolist cache after dropping the engine lock (bsc#1129770)
- drm/i915: Remove Master tables from cmdparser
- drm/i915: Rename gen7 cmdparser tables (bsc#1135967)
- drm/i915: Skip modeset for cdclk changes if possible (bsc#1156928).
- drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (bsc#1135967)
- drm/msm/dpu: handle failures while initializing displays (bsc#1111666).
- drm/msm: fix memleak on release (bsc#1111666).
- drm/omap: fix max fclk divider for omap36xx (bsc#1113722)
- drm/radeon: fix bad DMA from INTERRUPT_CNTL2 (git-fixes).
- drm/radeon: fix si_enable_smc_cac() failed issue (bsc#1113722)
- drm: fix module name in edid_firmware log message (bsc#1113956)
- e1000e: Drop unnecessary __E1000_DOWN bit twiddling (bsc#1158049).
- e1000e: Use dev_get_drvdata where possible (bsc#1158049).
- e1000e: Use rtnl_lock to prevent race conditions between net and pci/pm (bsc#1158049).
- extcon: cht-wc: Return from default case to avoid warnings (bsc#1051510).
- fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper() (bsc#1051510).
- fbdev: sbuslib: use checked version of put_user() (bsc#1051510).
- fix SCTP regression (bsc#1158082).
- ftrace: Introduce PERMANENT ftrace_ops flag (bsc#1120853).
- gpio: mpc8xxx: Do not overwrite default irq_set_type callback (bsc#1051510).
- gpio: syscon: Fix possible NULL ptr usage (bsc#1051510).
- gpiolib: acpi: Add Terra Pad 1061 to the run_edge_events_on_boot_blacklist (bsc#1051510).
- gsmi: Fix bug in append_to_eventlog sysfs handler (bsc#1051510).
- hwmon: (ina3221) Fix INA3221_CONFIG_MODE macros (bsc#1051510).
- hwmon: (pwm-fan) Silence error on probe deferral (bsc#1051510).
- hwrng: omap - Fix RNG wait loop timeout (bsc#1051510).
- hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled (bsc#1051510).
- hypfs: Fix error number left in struct pointer member (bsc#1051510).
- i2c: of: Try to find an I2C adapter matching the parent (bsc#1129770)
- i40e: enable X710 support (bsc#1151067).
- ibmvnic: Bound waits for device queries (bsc#1155689 ltc#182047).
- ibmvnic: Fix completion structure initialization (bsc#1155689 ltc#182047).
- ibmvnic: Serialize device queries (bsc#1155689 ltc#182047).
- ibmvnic: Terminate waiting device threads after loss of service (bsc#1155689 ltc#182047).
- ice: fix potential infinite loop because loop counter being too small (bsc#1118661).
- iio: adc: max9611: explicitly cast gain_selectors (bsc#1051510).
- iio: adc: stm32-adc: fix stopping dma (git-fixes).
- iio: dac: mcp4922: fix error handling in mcp4922_write_raw (bsc#1051510).
- iio: imu: adis16480: assign bias value only if operation succeeded (git-fixes).
- iio: imu: adis16480: make sure provided frequency is positive (git-fixes).
- iio: imu: adis: assign read val in debugfs hook only if op successful (git-fixes).
- iio: imu: adis: assign value only if return code zero in read funcs (git-fixes).
- include/linux/bitrev.h: fix constant bitrev (bsc#1114279).
- inet: stop leaking jiffies on the wire (networking-stable-19_11_05).
- intel_th: Fix a double put_device() in error path (git-fixes).
- iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros (bsc#1158063).
- ipmi:dmi: Ignore IPMI SMBIOS entries with a zero base address (bsc#1051510).
- ipv4: Return -ENETUNREACH if we can't create route but saddr is valid (networking-stable-19_10_24).
- irqdomain: Add the missing assignment of domain-&gt;fwnode for named fwnode (bsc#1111666).
- iwlwifi: api: annotate compressed BA notif array sizes (bsc#1051510).
- iwlwifi: check kasprintf() return value (bsc#1051510).
- iwlwifi: do not panic in error path on non-msix systems (bsc#1155692).
- iwlwifi: drop packets with bad status in CD (bsc#1111666).
- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- iwlwifi: fw: do not send GEO_TX_POWER_LIMIT command to FW version 36 (bsc#1111666).
- iwlwifi: mvm: avoid sending too many BARs (bsc#1051510).
- iwlwifi: mvm: do not send keys when entering D3 (bsc#1051510).
- iwlwifi: mvm: use correct FIFO length (bsc#1111666).
- iwlwifi: pcie: fit reclaim msg to MAX_MSG_LEN (bsc#1111666).
- iwlwifi: pcie: read correct prph address for newer devices (bsc#1111666).
- ixgbe: fix double clean of Tx descriptors with xdp (bsc#1113994 ).
- ixgbevf: Fix secpath usage for IPsec Tx offload (bsc#1113994 ).
- kABI fixup alloc_dax_region (bsc#1158071).
- kABI workaround for ath10k hw_filter_reset_required field (bsc#1111666).
- kABI workaround for ath10k last_wmi_vdev_start_status field (bsc#1051510).
- kABI workaround for drm_vma_offset_node readonly field addition (bsc#1135967)
- kABI workaround for iwlwifi iwl_rx_cmd_buffer change (bsc#1111666).
- kABI workaround for struct mwifiex_power_cfg change (bsc#1051510).
- kABI: Fix for 'KVM: x86: Introduce vcpu-&gt;arch.xsaves_enabled' (bsc#1158066).
- kabi protect enum RDMA_DRIVER_EFA (jsc#SLE-4805)
- kabi: s390: struct subchannel (git-fixes).
- lib/scatterlist: Fix chaining support in sgl_alloc_order() (git-fixes).
- lib/scatterlist: Introduce sgl_alloc() and sgl_free() (git-fixes).
- libnvdimm: Export the target_node attribute for regions and namespaces (bsc#1158071).
- liquidio: fix race condition in instruction completion processing (bsc#1051510).
- livepatch: Allow to distinguish different version of system state changes (bsc#1071995).
- livepatch: Basic API to track system state changes (bsc#1071995 ).
- livepatch: Keep replaced patches until post_patch callback is called (bsc#1071995).
- livepatch: Selftests of the API for tracking system state changes (bsc#1071995).
- loop: add ioctl for changing logical block size (bsc#1108043).
- lpfc: size cpu map by last cpu id set (bsc#1157160).
- mISDN: Fix type of switch control variable in ctrl_teimanager (bsc#1051510).
- mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED (bsc#1051510).
- mac80211: minstrel: fix CCK rate group streams value (bsc#1051510).
- mac80211: minstrel: fix sampling/reporting of CCK rates in HT mode (bsc#1051510).
- macvlan: schedule bc_work even if error (bsc#1051510).
- mailbox: reset txdone_method TXDONE_BY_POLL if client knows_txdone (git-fixes).
- media: au0828: Fix incorrect error messages (bsc#1051510).
- media: bdisp: fix memleak on release (git-fixes).
- media: cxusb: detect cxusb_ctrl_msg error in query (bsc#1051510).
- media: davinci: Fix implicit enum conversion warning (bsc#1051510).
- media: exynos4-is: Fix recursive locking in isp_video_release() (git-fixes).
- media: fix: media: pci: meye: validate offset to avoid arbitrary access (bsc#1051510).
- media: flexcop-usb: ensure -EIO is returned on error condition (git-fixes).
- media: imon: invalid dereference in imon_touch_event (bsc#1051510).
- media: isif: fix a NULL pointer dereference bug (bsc#1051510).
- media: pci: ivtv: Fix a sleep-in-atomic-context bug in ivtv_yuv_init() (bsc#1051510).
- media: pxa_camera: Fix check for pdev-&gt;dev.of_node (bsc#1051510).
- media: radio: wl1273: fix interrupt masking on release (git-fixes).
- media: ti-vpe: vpe: Fix Motion Vector vpdma stride (git-fixes).
- media: usbvision: Fix races among open, close, and disconnect (bsc#1051510).
- media: vim2m: Fix abort issue (git-fixes).
- media: vivid: Set vid_cap_streaming and vid_out_streaming to true (bsc#1051510).
- mei: fix modalias documentation (git-fixes).
- mei: samples: fix a signedness bug in amt_host_if_call() (bsc#1051510).
- mfd: intel-lpss: Add default I2C device properties for Gemini Lake (bsc#1051510).
- mfd: max8997: Enale irq-wakeup unconditionally (bsc#1051510).
- mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values (bsc#1051510).
- mfd: palmas: Assign the right powerhold mask for tps65917 (git-fixes).
- mfd: ti_am335x_tscadc: Keep ADC interface on if child is wakeup capable (bsc#1051510).
- mlx5: add parameter to disable enhanced IPoIB (bsc#1142095)
- mlx5: add parameter to disable enhanced IPoIB (bsc#1142095) Fix badly backported patch
- mlxsw: spectrum_flower: Fail in case user specifies multiple mirror actions (bsc#1112374).
- mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d() (git fixes (mm/gup)).
- mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone (git fixes (mm/compaction)).
- mm/debug.c: PageAnon() is true for PageKsm() pages (git fixes (mm/debug)).
- mmc: core: fix wl1251 sdio quirks (git-fixes).
- mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of pandora_wl1251_init_card (git-fixes).
- mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail (bsc#1051510).
- mmc: sdhci-esdhc-imx: correct the fix of ERR004536 (git-fixes).
- mmc: sdhci-of-at91: fix quirk2 overwrite (git-fixes).
- mmc: sdio: fix wl1251 vendor id (git-fixes).
- mt7601u: fix bbp version check in mt7601u_wait_bbp_ready (bsc#1051510).
- mt76x0: init hw capabilities.
- mtd: nand: mtk: fix incorrect register setting order about ecc irq.
- mtd: spear_smi: Fix Write Burst mode (bsc#1051510).
- mtd: spi-nor: fix silent truncation in spi_nor_read() (bsc#1051510).
- mwifex: free rx_cmd skb in suspended state (bsc#1111666).
- mwifiex: Fix NL80211_TX_POWER_LIMITED (bsc#1051510).
- mwifiex: do no submit URB in suspended state (bsc#1111666).
- net/ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes).
- net/mlx4_core: Dynamically set guaranteed amount of counters per VF (networking-stable-19_11_05).
- net/mlx5: FWTrace, Reduce stack usage (bsc#1103990).
- net/mlx5e: Fix eswitch debug print of max fdb flow (bsc#1103990 ).
- net/mlx5e: Fix ethtool self test: link speed (bsc#1103990 ).
- net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget (networking-stable-19_11_05).
- net/mlx5e: Print a warning when LRO feature is dropped or not allowed (bsc#1103990).
- net/sched: cbs: Fix not adding cbs instance to list (bsc#1109837).
- net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate (bsc#1109837).
- net/smc: Fix error path in smc_init (git-fixes).
- net/smc: avoid fallback in case of non-blocking connect (git-fixes).
- net/smc: do not schedule tx_work in SMC_CLOSED state (git-fixes).
- net/smc: fix SMCD link group creation with VLAN id (git-fixes).
- net/smc: fix closing of fallback SMC sockets (git-fixes).
- net/smc: fix ethernet interface refcounting (git-fixes).
- net/smc: fix fastopen for non-blocking connect() (git-fixes).
- net/smc: fix refcount non-blocking connect() -part 2 (git-fixes).
- net/smc: fix refcounting for non-blocking connect() (git-fixes).
- net/smc: keep vlan_id for SMC-R in smc_listen_work() (git-fixes).
- net/smc: original socket family in inet_sock_diag (git-fixes).
- net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol() (networking-stable-19_11_05).
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (networking-stable-19_11_05).
- net: add skb_queue_empty_lockless() (networking-stable-19_11_05).
- net: annotate accesses to sk-&gt;sk_incoming_cpu (networking-stable-19_11_05).
- net: annotate lockless accesses to sk-&gt;sk_napi_id (networking-stable-19_11_05).
- net: avoid potential infinite loop in tc_ctl_action() (networking-stable-19_10_24).
- net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3 (networking-stable-19_10_24).
- net: bcmgenet: Set phydev-&gt;dev_flags only for internal PHYs (networking-stable-19_10_24).
- net: bcmgenet: reset 40nm EPHY on energy detect (networking-stable-19_11_05).
- net: dsa: b53: Do not clear existing mirrored port mask (networking-stable-19_11_05).
- net: dsa: bcm_sf2: Fix IMP setup for port different than 8 (networking-stable-19_11_05).
- net: dsa: fix switch tree list (networking-stable-19_11_05).
- net: ethernet: ftgmac100: Fix DMA coherency issue with SW checksum (networking-stable-19_11_05).
- net: fix sk_page_frag() recursion from memory reclaim (networking-stable-19_11_05).
- net: hisilicon: Fix ping latency when deal with high throughput (networking-stable-19_11_05).
- net: hns3: change GFP flag during lock period (bsc#1104353 ).
- net: hns3: do not query unsupported commands in debugfs (bsc#1104353).
- net: hns3: fix GFP flag error in hclge_mac_update_stats() (bsc#1126390).
- net: hns3: fix some reset handshake issue (bsc#1104353 ).
- net: hns3: prevent unnecessary MAC TNL interrupt (bsc#1104353 bsc#1134983).
- net: hns: Fix the stray netpoll locks causing deadlock in NAPI path (bsc#1104353).
- net: phy: bcm7xxx: define soft_reset for 40nm EPHY (bsc#1119113 ).
- net: phylink: Fix flow control resolution (bsc#1119113 ).
- net: sched: cbs: Avoid division by zero when calculating the port rate (bsc#1109837).
- net: sched: fix possible crash in tcf_action_destroy() (bsc#1109837).
- net: sched: fix reordering issues (bsc#1109837).
- net: sock_map, fix missing ulp check in sock hash case (bsc#1109837).
- net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow (networking-stable-19_10_24).
- net: use skb_queue_empty_lockless() in busy poll contexts (networking-stable-19_11_05).
- net: use skb_queue_empty_lockless() in poll() handlers (networking-stable-19_11_05).
- net: wireless: ti: remove local VENDOR_ID and DEVICE_ID definitions (git-fixes).
- net: wireless: ti: wl1251 use new SDIO_VENDOR_ID_TI_WL1251 definition (git-fixes).
- netns: fix GFP flags in rtnl_net_notifyid() (networking-stable-19_11_05).
- nfc: netlink: fix double device reference drop (git-fixes).
- nfc: port100: handle command failure cleanly (git-fixes).
- nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs (bsc#1109837).
- nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs (bsc#1109837).
- nl80211: Fix a GET_KEY reply attribute (bsc#1051510).
- nvme-tcp: support C2HData with SUCCESS flag (bsc#1157386).
- openvswitch: fix flow command message size (git-fixes).
- padata: use smp_mb in padata_reorder to avoid orphaned padata jobs (git-fixes).
- perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp (bsc#1142924).
- phy: phy-twl4030-usb: fix denied runtime access (git-fixes).
- phylink: fix kernel-doc warnings (bsc#1111666).
- pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call (git-fixes).
- pinctrl: at91: do not use the same irqchip with multiple gpiochips (git-fixes).
- pinctrl: cherryview: Allocate IRQ chip dynamic (git-fixes).
- pinctrl: lewisburg: Update pin list according to v1.1v6 (bsc#1051510).
- pinctrl: lpc18xx: Use define directive for PIN_CONFIG_GPIO_PIN_INT (bsc#1051510).
- pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in S3C24xx wakeup controller init (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in S3C64xx wakeup controller init (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in init code (bsc#1051510).
- pinctrl: sunxi: Fix a memory leak in 'sunxi_pinctrl_build_state()' (bsc#1051510).
- pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD (bsc#1051510).
- power: reset: at91-poweroff: do not procede if at91_shdwc is allocated (bsc#1051510).
- power: supply: ab8500_fg: silence uninitialized variable warnings (bsc#1051510).
- power: supply: max14656: fix potential use-after-free (bsc#1051510).
- power: supply: twl4030_charger: disable eoc interrupt on linear charge (bsc#1051510).
- power: supply: twl4030_charger: fix charging current out-of-bounds (bsc#1051510).
- powerpc/64: Make meltdown reporting Book3S 64 specific (bsc#1091041).
- powerpc/book3s64/hash: Use secondary hash for bolted mapping if the primary is full (bsc#1157778 ltc#182520).
- powerpc/bpf: Fix tail call implementation (bsc#1157698).
- powerpc/pseries: Do not fail hash page table insert for bolted mapping (bsc#1157778 ltc#182520).
- powerpc/pseries: Do not opencode HPTE_V_BOLTED (bsc#1157778 ltc#182520).
- powerpc/pseries: address checkpatch warnings in dlpar_offline_cpu (bsc#1156700 ltc#182459).
- powerpc/pseries: safely roll back failed DLPAR cpu add (bsc#1156700 ltc#182459).
- powerpc/security/book3s64: Report L1TF status in sysfs (bsc#1091041).
- powerpc/security: Fix wrong message when RFI Flush is disable (bsc#1131107).
- powerpc/xive: Prevent page fault issues in the machine crash handler (bsc#1156882 ltc#182435).
- ppdev: fix PPGETTIME/PPSETTIME ioctls (bsc#1051510).
- printk: Export console_printk (bsc#1071995).
- pwm: bcm-iproc: Prevent unloading the driver module while in use (git-fixes).
- pwm: lpss: Only set update bit if we are actually changing the settings (bsc#1051510).
- qxl: fix null-pointer crash during suspend (bsc#1111666).
- r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2 (networking-stable-19_11_05).
- regulator: ab8500: Remove AB8505 USB regulator (bsc#1051510).
- regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id (bsc#1051510).
- remoteproc: Check for NULL firmwares in sysfs interface (git-fixes).
- reset: Fix potential use-after-free in __of_reset_control_get() (bsc#1051510).
- reset: fix of_reset_simple_xlate kerneldoc comment (bsc#1051510).
- reset: fix reset_control_get_exclusive kerneldoc comment (bsc#1051510).
- rpm/kernel-binary.spec.in: add COMPRESS_VMLINUX (bnc#1155921) Let COMPRESS_VMLINUX determine the compression used for vmlinux. By default (historically), it is gz.
- rpm/kernel-source.spec.in: Fix dependency of kernel-devel (bsc#1154043)
- rtl8187: Fix warning generated when strncpy() destination length matches the sixe argument (bsc#1051510).
- rtlwifi: Remove unnecessary NULL check in rtl_regd_init (bsc#1051510).
- rtlwifi: btcoex: Use proper enumerated types for Wi-Fi only interface (bsc#1111666).
- rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing enable interrupt flag (bsc#1051510).
- s390/bpf: fix lcgr instruction encoding (bsc#1051510).
- s390/bpf: use 32-bit index for tail calls (bsc#1051510).
- s390/cio: avoid calling strlen on null pointer (bsc#1051510).
- s390/cio: exclude subchannels with no parent from pseudo check (bsc#1051510).
- s390/cio: fix virtio-ccw DMA without PV (git-fixes).
- s390/cmm: fix information leak in cmm_timeout_handler() (bsc#1051510).
- s390/idle: fix cpu idle time calculation (bsc#1051510).
- s390/mm: properly clear _PAGE_NOEXEC bit when it is not supported (bsc#1051510).
- s390/process: avoid potential reading of freed stack (bsc#1051510).
- s390/qdio: (re-)initialize tiqdio list entries (bsc#1051510).
- s390/qdio: do not touch the dsci in tiqdio_add_input_queues() (bsc#1051510).
- s390/qeth: return proper errno on IO error (bsc#1051510).
- s390/setup: fix boot crash for machine without EDAT-1 (bsc#1051510 bsc#1140948).
- s390/setup: fix early warning messages (bsc#1051510 bsc#1140948).
- s390/topology: avoid firing events before kobjs are created (bsc#1051510).
- s390/zcrypt: fix memleak at release (git-fixes).
- s390: fix stfle zero padding (bsc#1051510).
- s390: vsie: Use effective CRYCBD.31 to check CRYCBD validity (git-fixes).
- sc16is7xx: Fix for 'Unexpected interrupt: 8' (bsc#1051510).
- scsi: lpfc: Add enablement of multiple adapter dumps (bsc#1154601).
- scsi: lpfc: Add registration for CPU Offline/Online events (bsc#1154601).
- scsi: lpfc: Change default IRQ model on AMD architectures (bsc#1154601).
- scsi: lpfc: Clarify FAWNN error message (bsc#1154601).
- scsi: lpfc: Fix NULL check before mempool_destroy is not needed (bsc#1154601).
- scsi: lpfc: Fix Oops in nvme_register with target logout/login (bsc#1151900).
- scsi: lpfc: Fix a kernel warning triggered by lpfc_get_sgl_per_hdwq() (bsc#1154601).
- scsi: lpfc: Fix a kernel warning triggered by lpfc_sli4_enable_intr() (bsc#1154601).
- scsi: lpfc: Fix configuration of BB credit recovery in service parameters (bsc#1154601).
- scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow (bsc#1154601).
- scsi: lpfc: Fix dynamic fw log enablement check (bsc#1154601).
- scsi: lpfc: Fix kernel crash at lpfc_nvme_info_show during remote port bounce (bsc#1154601).
- scsi: lpfc: Fix lpfc_cpumask_of_node_init() (bsc#1154601).
- scsi: lpfc: Fix unexpected error messages during RSCN handling (bsc#1154601).
- scsi: lpfc: Honor module parameter lpfc_use_adisc (bsc#1153628).
- scsi: lpfc: Honor module parameter lpfc_use_adisc (bsc#1154601).
- scsi: lpfc: Initialize cpu_map for not present cpus (bsc#1154601).
- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- scsi: lpfc: Make lpfc_debugfs_ras_log_data static (bsc#1154601).
- scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (bsc#1154601).
- scsi: lpfc: Raise config max for lpfc_fcp_mq_threshold variable (bsc#1154601).
- scsi: lpfc: Sync with FC-NVMe-2 SLER change to require Conf with SLER (bsc#1154601).
- scsi: lpfc: Update lpfc version to 12.6.0.1 (bsc#1154601).
- scsi: lpfc: Update lpfc version to 12.6.0.2 (bsc#1154601).
- scsi: lpfc: fix build error of lpfc_debugfs.c for vfree/vmalloc (bsc#1154601).
- scsi: lpfc: fix inlining of lpfc_sli4_cleanup_poll_list() (bsc#1154601).
- scsi: lpfc: fix spelling error in MAGIC_NUMER_xxx (bsc#1154601).
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences (bsc#1154601).
- scsi: lpfc: fix: Coverity: lpfc_get_scsi_buf_s3(): Null pointer dereferences (bsc#1154601).
- scsi: lpfc: lpfc_attr: Fix Use plain integer as NULL pointer (bsc#1154601).
- scsi: lpfc: lpfc_nvmet: Fix Use plain integer as NULL pointer (bsc#1154601).
- scsi: lpfc: revise nvme max queues to be hdwq count (bsc#1154601).
- scsi: lpfc: use hdwq assigned cpu for allocation (bsc#1157160).
- scsi: qla2xxx: Add debug dump of LOGO payload and ELS IOCB (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Allow PLOGI in target mode (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Change discovery state before PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Configure local loop for N2N target (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Do command completion on abort timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do not call qlt_async_event twice (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Do not defer relogin unconditonally (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Drop superfluous INIT_WORK of del_work (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Fix SRB leak on switch command timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Ignore NULL pointer in tcm_qla2xxx_free_mcmd (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Initialize free_work before flushing it (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Remove an include directive (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Send Notify ACK after N2N PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Use correct number of vectors for online CPUs (bsc#1137223).
- scsi: qla2xxx: Use explicit LOGO in target mode (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: do not use zero for FC4_PRIORITY_NVME (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan (bsc#1138039).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: unregister ports after GPN_FT failure (bsc#1138039).
- scsi: sd: Ignore a failure to sync cache due to lack of authorization (git-fixes).
- scsi: storvsc: Add ability to change scsi queue depth (bsc#1155021).
- scsi: zfcp: fix request object use-after-free in send path causing wrong traces (bsc#1051510).
- sctp: change sctp_prot .no_autobind with true (networking-stable-19_10_24).
- selftests: net: reuseport_dualstack: fix uninitalized parameter (networking-stable-19_11_05).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: mxs-auart: Fix potential infinite loop (bsc#1051510).
- serial: samsung: Enable baud clock for UART reset procedure in resume (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- serial: uartps: Fix suspend functionality (bsc#1051510).
- signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal (bsc#1157463).
- slcan: Fix memory leak in error path (bsc#1051510).
- slip: Fix memory leak in slip_open error path (bsc#1051510).
- slip: Fix use-after-free Read in slip_open (bsc#1051510).
- smb3: Incorrect size for netname negotiate context (bsc#1144333, bsc#1154355).
- smb3: fix leak in 'open on server' perf counter (bsc#1144333, bsc#1154355).
- smb3: fix signing verification of large reads (bsc#1144333, bsc#1154355).
- smb3: fix unmount hang in open_shroot (bsc#1144333, bsc#1154355).
- smb3: improve handling of share deleted (and share recreated) (bsc#1144333, bsc#1154355).
- soc: imx: gpc: fix PDN delay (bsc#1051510).
- soc: qcom: wcnss_ctrl: Avoid string overflow (bsc#1051510).
- spi: atmel: Fix CS high support (bsc#1051510).
- spi: atmel: fix handling of cs_change set on non-last xfer (bsc#1051510).
- spi: fsl-lpspi: Prevent FIFO under/overrun by default (bsc#1051510).
- spi: mediatek: Do not modify spi_transfer when transfer (bsc#1051510).
- spi: mediatek: use correct mata-&gt;xfer_len when in fifo transfer (bsc#1051510).
- spi: pic32: Use proper enum in dmaengine_prep_slave_rg (bsc#1051510).
- spi: rockchip: initialize dma_slave_config properly (bsc#1051510).
- spi: spidev: Fix OF tree warning logic (bsc#1051510).
- staging: rtl8188eu: fix null dereference when kzalloc fails (bsc#1051510).
- supported.conf:
- synclink_gt(): fix compat_ioctl() (bsc#1051510).
- tcp_nv: fix potential integer overflow in tcpnv_acked (bsc#1051510).
- thunderbolt: Fix lockdep circular locking depedency warning (git-fixes).
- tipc: Avoid copying bytes beyond the supplied data (bsc#1051510).
- tipc: check bearer name with right length in tipc_nl_compat_bearer_enable (bsc#1051510).
- tipc: check link name with right length in tipc_nl_compat_link_set (bsc#1051510).
- tipc: check msg-&gt;req data len in tipc_nl_compat_bearer_disable (bsc#1051510).
- tipc: compat: allow tipc commands without arguments (bsc#1051510).
- tipc: fix tipc_mon_delete() oops in tipc_enable_bearer() error path (bsc#1051510).
- tipc: fix wrong timeout input for tipc_wait_for_cond() (bsc#1051510).
- tipc: handle the err returned from cmd header function (bsc#1051510).
- tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb (bsc#1051510).
- tipc: tipc clang warning (bsc#1051510).
- tools/power/x86/intel-speed-select: Fix a read overflow in isst_set_tdp_level_msr() (bsc#1111666).
- tools: bpftool: fix arguments for p_err() in do_event_pipe() (bsc#1109837).
- tpm: add check after commands attribs tab allocation (bsc#1051510).
- tracing: Get trace_array reference for available_tracers files (bsc#1156429).
- tty: serial: fsl_lpuart: use the sg count from dma_map_sg (bsc#1051510).
- tty: serial: imx: use the sg count from dma_map_sg (bsc#1051510).
- tty: serial: msm_serial: Fix flow control (bsc#1051510).
- tty: serial: pch_uart: correct usage of dma_unmap_sg (bsc#1051510).
- tun: fix data-race in gro_normal_list() (bsc#1111666).
- udp: use skb_queue_empty_lockless() (networking-stable-19_11_05).
- usb-serial: cp201x: support Mark-10 digital force gauge (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ('usb-storage: Set virt_boundary_mask to avoid SG overflows') (bsc#1051510).
- usb: chipidea: Fix otg event handler (bsc#1051510).
- usb: chipidea: imx: enable OTG overcurrent in case USB subsystem is already started (bsc#1051510).
- usb: dwc3: gadget: Check ENBLSLPM before sending ep command (bsc#1051510).
- usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode (bsc#1051510).
- usb: gadget: udc: fotg210-udc: Fix a sleep-in-atomic-context bug in fotg210_get_status() (bsc#1051510).
- usb: gadget: uvc: Factor out video USB request queueing (bsc#1051510).
- usb: gadget: uvc: Only halt video streaming endpoint in bulk mode (bsc#1051510).
- usb: gadget: uvc: configfs: Drop leaked references to config items (bsc#1051510).
- usb: gadget: uvc: configfs: Prevent format changes after linking header (bsc#1051510).
- usb: handle warm-reset port requests on hub resume (bsc#1051510).
- usb: xhci-mtk: fix ISOC error when interval is zero (bsc#1051510).
- usbip: Fix free of unallocated memory in vhci tx (git-fixes).
- usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path (git-fixes).
- usbip: Implement SG support to vhci-hcd and stub driver (git-fixes).
- usbip: tools: fix fd leakage in the function of read_attr_usbip_status (git-fixes).
- vfio-ccw: Fix misleading comment when setting orb.cmd.c64 (bsc#1051510).
- vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn (bsc#1051510).
- vfio: ccw: push down unsupported IDA check (bsc#1156471 LTC#182362).
- video/hdmi: Fix AVI bar unpack (git-fixes).
- virtio/s390: fix race on airq_areas (bsc#1051510).
- virtio_console: allocate inbufs in add_port() only if it is needed (git-fixes).
- virtio_ring: fix return code on DMA mapping fails (git-fixes).
- vmxnet3: turn off lro when rxcsum is disabled (bsc#1157499).
- vsock/virtio: fix sock refcnt holding during the shutdown (git-fixes).
- watchdog: meson: Fix the wrong value of left time (bsc#1051510).
- wil6210: drop Rx multicast packets that are looped-back to STA (bsc#1111666).
- wil6210: fix L2 RX status handling (bsc#1111666).
- wil6210: fix RGF_CAF_ICR address for Talyn-MB (bsc#1111666).
- wil6210: fix debugfs memory access alignment (bsc#1111666).
- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- wil6210: fix invalid memory access for rx_buff_mgmt debugfs (bsc#1111666).
- wil6210: fix locking in wmi_call (bsc#1111666).
- wil6210: prevent usage of tx ring 0 for eDMA (bsc#1111666).
- wil6210: set edma variables only for Talyn-MB devices (bsc#1111666).
- x86/alternatives: Add int3_emulate_call() selftest (bsc#1153811).
- x86/alternatives: Fix int3_emulate_call() selftest stack corruption (bsc#1153811).
- x86/mm/pkeys: Fix typo in Documentation/x86/protection-keys.txt (bsc#1078248).
- x86/pkeys: Update documentation about availability (bsc#1078248).
- x86/resctrl: Fix potential lockdep warning (bsc#1114279).
- x86/resctrl: Prevent NULL pointer dereference when reading mondata (bsc#1114279).
- x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs (bsc#1158068).
- xfrm: Fix xfrm sel prefix length validation (git-fixes).
- xfrm: fix sa selector validation (bsc#1156609).
- xsk: Fix registration of Rx-only sockets (bsc#1109837).
- xsk: relax UMEM headroom alignment (bsc#1109837).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-17"/>
	<updated date="2019-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1048942">SUSE bug 1048942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078248">SUSE bug 1078248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089644">SUSE bug 1089644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091041">SUSE bug 1091041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108043">SUSE bug 1108043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117169">SUSE bug 1117169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118661">SUSE bug 1118661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120853">SUSE bug 1120853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126390">SUSE bug 1126390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131107">SUSE bug 1131107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134983">SUSE bug 1134983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135966">SUSE bug 1135966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135967">SUSE bug 1135967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137223">SUSE bug 1137223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137236">SUSE bug 1137236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138039">SUSE bug 1138039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142095">SUSE bug 1142095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142924">SUSE bug 1142924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149448">SUSE bug 1149448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150466">SUSE bug 1150466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151067">SUSE bug 1151067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151548">SUSE bug 1151548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151900">SUSE bug 1151900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152782">SUSE bug 1152782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153628">SUSE bug 1153628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153811">SUSE bug 1153811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154043">SUSE bug 1154043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154058">SUSE bug 1154058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154124">SUSE bug 1154124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154355">SUSE bug 1154355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154526">SUSE bug 1154526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154601">SUSE bug 1154601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155021">SUSE bug 1155021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155689">SUSE bug 1155689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155692">SUSE bug 1155692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155836">SUSE bug 1155836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155897">SUSE bug 1155897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155921">SUSE bug 1155921</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155982">SUSE bug 1155982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156187">SUSE bug 1156187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156258">SUSE bug 1156258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156429">SUSE bug 1156429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156466">SUSE bug 1156466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156471">SUSE bug 1156471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156494">SUSE bug 1156494</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156609">SUSE bug 1156609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156700">SUSE bug 1156700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156729">SUSE bug 1156729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156882">SUSE bug 1156882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156928">SUSE bug 1156928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157032">SUSE bug 1157032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157038">SUSE bug 1157038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157042">SUSE bug 1157042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157044">SUSE bug 1157044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157045">SUSE bug 1157045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157046">SUSE bug 1157046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157049">SUSE bug 1157049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157070">SUSE bug 1157070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157115">SUSE bug 1157115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157143">SUSE bug 1157143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157145">SUSE bug 1157145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157158">SUSE bug 1157158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157160">SUSE bug 1157160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157162">SUSE bug 1157162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157171">SUSE bug 1157171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157173">SUSE bug 1157173</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157178">SUSE bug 1157178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157180">SUSE bug 1157180</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157182">SUSE bug 1157182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157183">SUSE bug 1157183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157184">SUSE bug 1157184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157191">SUSE bug 1157191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157193">SUSE bug 1157193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157197">SUSE bug 1157197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157298">SUSE bug 1157298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157304">SUSE bug 1157304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157307">SUSE bug 1157307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157324">SUSE bug 1157324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157333">SUSE bug 1157333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157386">SUSE bug 1157386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157463">SUSE bug 1157463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157499">SUSE bug 1157499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157678">SUSE bug 1157678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157698">SUSE bug 1157698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157778">SUSE bug 1157778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157908">SUSE bug 1157908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158049">SUSE bug 1158049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158063">SUSE bug 1158063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158064">SUSE bug 1158064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158065">SUSE bug 1158065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158066">SUSE bug 1158066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158067">SUSE bug 1158067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158068">SUSE bug 1158068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158071">SUSE bug 1158071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158082">SUSE bug 1158082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158394">SUSE bug 1158394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158398">SUSE bug 1158398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158407">SUSE bug 1158407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158410">SUSE bug 1158410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158413">SUSE bug 1158413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158417">SUSE bug 1158417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158427">SUSE bug 1158427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158445">SUSE bug 1158445</bugzilla>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-0154/">CVE-2019-0154</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14895/">CVE-2019-14895</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14901/">CVE-2019-14901</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15916/">CVE-2019-15916</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16231/">CVE-2019-16231</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17055/">CVE-2019-17055</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-18660/">CVE-2019-18660</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18683/">CVE-2019-18683</cve>
	<cve impact="low" cvss3="2.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-18805/">CVE-2019-18805</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18809/">CVE-2019-18809</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19046/">CVE-2019-19046</cve>
	<cve impact="moderate" cvss3="1.6/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19049/">CVE-2019-19049</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19052/">CVE-2019-19052</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19056/">CVE-2019-19056</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19057/">CVE-2019-19057</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19058/">CVE-2019-19058</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19060/">CVE-2019-19060</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19062/">CVE-2019-19062</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19063/">CVE-2019-19063</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19065/">CVE-2019-19065</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19067/">CVE-2019-19067</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19068/">CVE-2019-19068</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19073/">CVE-2019-19073</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19074/">CVE-2019-19074</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19075/">CVE-2019-19075</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19077/">CVE-2019-19077</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19078/">CVE-2019-19078</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19080/">CVE-2019-19080</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19081/">CVE-2019-19081</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19082/">CVE-2019-19082</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19083/">CVE-2019-19083</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19227/">CVE-2019-19227</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19524/">CVE-2019-19524</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19525/">CVE-2019-19525</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19528/">CVE-2019-19528</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19529/">CVE-2019-19529</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19530/">CVE-2019-19530</cve>
	<cve impact="low" cvss3="2.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19531/">CVE-2019-19531</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19534/">CVE-2019-19534</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19536/">CVE-2019-19536</cve>
	<cve impact="low" cvss3="2.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19543/">CVE-2019-19543</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491774" comment="kernel-default-4.12.14-197.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491775" comment="kernel-default-base-4.12.14-197.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491776" comment="kernel-default-devel-4.12.14-197.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491777" comment="kernel-default-man-4.12.14-197.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491778" comment="kernel-devel-4.12.14-197.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491779" comment="kernel-macros-4.12.14-197.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491780" comment="kernel-zfcpdump-4.12.14-197.29.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137819" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1158108" ref_url="https://bugzilla.suse.com/1158108" source="BUGZILLA"/>
		<reference ref_id="1158109" ref_url="https://bugzilla.suse.com/1158109" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14861" ref_url="https://www.suse.com/security/cve/CVE-2019-14861/" source="CVE"/>
		<reference ref_id="CVE-2019-14870" ref_url="https://www.suse.com/security/cve/CVE-2019-14870/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006265.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

-  CVE-2019-14861: Fixed a DNSServer RPC server crash, that allowed an authenticated user to crash the DCE/RPC DNS management server by creating records with matching the zone name (bsc#1158108).
-  CVE-2019-14870: Fixed a DelegationNotAllowed not being enforced (bsc#1158109).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-17"/>
	<updated date="2019-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1158108">SUSE bug 1158108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158109">SUSE bug 1158109</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14861/">CVE-2019-14861</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-14870/">CVE-2019-14870</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491781" comment="libdcerpc-binding0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491782" comment="libdcerpc-binding0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491783" comment="libdcerpc-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491784" comment="libdcerpc-samr-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491785" comment="libdcerpc-samr0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491786" comment="libdcerpc0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491787" comment="libdcerpc0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491788" comment="libndr-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491789" comment="libndr-krb5pac-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491790" comment="libndr-krb5pac0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491791" comment="libndr-krb5pac0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491792" comment="libndr-nbt-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491793" comment="libndr-nbt0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491794" comment="libndr-nbt0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491795" comment="libndr-standard-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491796" comment="libndr-standard0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491797" comment="libndr-standard0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491798" comment="libndr0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491799" comment="libndr0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491800" comment="libnetapi-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491801" comment="libnetapi0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491802" comment="libnetapi0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491803" comment="libsamba-credentials-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491804" comment="libsamba-credentials0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491805" comment="libsamba-credentials0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491806" comment="libsamba-errors-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491807" comment="libsamba-errors0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491808" comment="libsamba-errors0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491809" comment="libsamba-hostconfig-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491810" comment="libsamba-hostconfig0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491811" comment="libsamba-hostconfig0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491812" comment="libsamba-passdb-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491813" comment="libsamba-passdb0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491814" comment="libsamba-passdb0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491815" comment="libsamba-policy-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491816" comment="libsamba-policy-python3-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491817" comment="libsamba-policy0-python3-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491818" comment="libsamba-util-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491819" comment="libsamba-util0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491820" comment="libsamba-util0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491821" comment="libsamdb-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491822" comment="libsamdb0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491823" comment="libsamdb0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491824" comment="libsmbclient-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491825" comment="libsmbclient0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491826" comment="libsmbconf-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491827" comment="libsmbconf0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491828" comment="libsmbconf0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491829" comment="libsmbldap-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491830" comment="libsmbldap2-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491831" comment="libsmbldap2-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491832" comment="libtevent-util-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491833" comment="libtevent-util0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491834" comment="libtevent-util0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491835" comment="libwbclient-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491836" comment="libwbclient0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491837" comment="libwbclient0-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491838" comment="samba-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491839" comment="samba-client-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491840" comment="samba-core-devel-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491841" comment="samba-libs-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491842" comment="samba-libs-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491843" comment="samba-libs-python3-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491844" comment="samba-python3-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491845" comment="samba-winbind-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491846" comment="samba-winbind-32bit-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137820" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1152497" ref_url="https://bugzilla.suse.com/1152497" source="BUGZILLA"/>
		<reference ref_id="1157047" ref_url="https://bugzilla.suse.com/1157047" source="BUGZILLA"/>
		<reference ref_id="1157888" ref_url="https://bugzilla.suse.com/1157888" source="BUGZILLA"/>
		<reference ref_id="1158003" ref_url="https://bugzilla.suse.com/1158003" source="BUGZILLA"/>
		<reference ref_id="1158004" ref_url="https://bugzilla.suse.com/1158004" source="BUGZILLA"/>
		<reference ref_id="1158005" ref_url="https://bugzilla.suse.com/1158005" source="BUGZILLA"/>
		<reference ref_id="1158006" ref_url="https://bugzilla.suse.com/1158006" source="BUGZILLA"/>
		<reference ref_id="1158007" ref_url="https://bugzilla.suse.com/1158007" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19577" ref_url="https://www.suse.com/security/cve/CVE-2019-19577/" source="CVE"/>
		<reference ref_id="CVE-2019-19578" ref_url="https://www.suse.com/security/cve/CVE-2019-19578/" source="CVE"/>
		<reference ref_id="CVE-2019-19579" ref_url="https://www.suse.com/security/cve/CVE-2019-19579/" source="CVE"/>
		<reference ref_id="CVE-2019-19580" ref_url="https://www.suse.com/security/cve/CVE-2019-19580/" source="CVE"/>
		<reference ref_id="CVE-2019-19581" ref_url="https://www.suse.com/security/cve/CVE-2019-19581/" source="CVE"/>
		<reference ref_id="CVE-2019-19582" ref_url="https://www.suse.com/security/cve/CVE-2019-19582/" source="CVE"/>
		<reference ref_id="CVE-2019-19583" ref_url="https://www.suse.com/security/cve/CVE-2019-19583/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006271.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2019-19581: Fixed a potential out of bounds on 32-bit Arm (bsc#1158003 XSA-307).
- CVE-2019-19582: Fixed a potential infinite loop when x86 accesses to bitmaps with 
  a compile time known size of 64 (bsc#1158003 XSA-307).
- CVE-2019-19583: Fixed improper checks which could have allowed HVM/PVH guest userspace 
  code to crash the guest,leading to a guest denial of service (bsc#1158004 XSA-308).
- CVE-2019-19578: Fixed an issue where a malicious or buggy PV guest could have caused
  hypervisor crash resulting in denial of service affecting the entire host (bsc#1158005 XSA-309).
- CVE-2019-19580: Fixed a privilege escalation where a malicious PV guest administrator 
  could have been able to escalate their privilege to that of the host (bsc#1158006 XSA-310).
- CVE-2019-19577: Fixed an issue where a malicious guest administrator could have caused Xen 
  to access data structures while they are being modified leading to a crash (bsc#1158007 XSA-311). 
- CVE-2019-19579: Fixed a privilege escaltion where an untrusted domain with access 
  to a physical device can DMA into host memory (bsc#1157888 XSA-306).
- Fixed an issue where PCI passthrough failed on AMD machine xen host (bsc#1157047). 
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-18"/>
	<updated date="2019-12-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152497">SUSE bug 1152497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157047">SUSE bug 1157047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157888">SUSE bug 1157888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158003">SUSE bug 1158003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158004">SUSE bug 1158004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158005">SUSE bug 1158005</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158006">SUSE bug 1158006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158007">SUSE bug 1158007</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19577/">CVE-2019-19577</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19578/">CVE-2019-19578</cve>
	<cve impact="moderate" cvss3="6.9/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19579/">CVE-2019-19579</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19580/">CVE-2019-19580</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19581/">CVE-2019-19581</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19582/">CVE-2019-19582</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19583/">CVE-2019-19583</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491847" comment="xen-libs-4.12.1_06-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491848" comment="xen-tools-domU-4.12.1_06-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137821" version="1" class="patch">
	<metadata>
		<title>Security update for spectre-meltdown-checker (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1117665" ref_url="https://bugzilla.suse.com/1117665" source="BUGZILLA"/>
		<reference ref_id="1139073" ref_url="https://bugzilla.suse.com/1139073" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12207" ref_url="https://www.suse.com/security/cve/CVE-2018-12207/" source="CVE"/>
		<reference ref_id="CVE-2019-11135" ref_url="https://www.suse.com/security/cve/CVE-2019-11135/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006275.html" source="SUSE-SU"/>
		<description>
This update for spectre-meltdown-checker fixes the following issues:

  - feat: implement TAA detection (CVE-2019-11135 bsc#1139073)
  - feat: implement MCEPSC / iTLB Multihit detection (CVE-2018-12207 bsc#1117665)
  - feat: taa: add TSX_CTRL MSR detection in hardware info
  - feat: fwdb: use both Intel GitHub repo and MCEdb to build our firmware version database
  - feat: use --live with --kernel/--config/--map to override file detection in live mode
  - enh: rework the vuln logic of MDS with --paranoid (fixes #307)
  - enh: explain that Enhanced IBRS is better for performance than classic IBRS
  - enh: kernel: autodetect customized arch kernels from cmdline
  - enh: kernel decompression: better tolerance against missing tools
  - enh: mock: implement reading from /proc/cmdline
  - fix: variant3a: Silvermont CPUs are not vulnerable to variant 3a
  - fix: lockdown: detect Red Hat locked down kernels (impacts MSR writes)
  - fix: lockdown: detect locked down mode in vanilla 5.4+ kernels
  - fix: sgx: on locked down kernels, fallback to CPUID bit for detection
  - fix: fwdb: builtin version takes precedence if the local cached version is older
  - fix: pteinv: don't check kernel image if not available
  - fix: silence useless error from grep (fixes #322)
  - fix: msr: fix msr module detection under Ubuntu 19.10 (fixes #316)
  - fix: mocking value for read_msr
  - chore: rename mcedb cmdline parameters to fwdb, and change db version scheme
  - chore: fwdb: update to v130.20191104+i20191027
  - chore: add GitHub check workflow
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-19"/>
	<updated date="2019-12-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1117665">SUSE bug 1117665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139073">SUSE bug 1139073</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12207/">CVE-2018-12207</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11135/">CVE-2019-11135</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491849" comment="spectre-meltdown-checker-0.43-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137822" version="1" class="patch">
	<metadata>
		<title>Security update for trousers (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1157651" ref_url="https://bugzilla.suse.com/1157651" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18898" ref_url="https://www.suse.com/security/cve/CVE-2019-18898/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3349-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006277.html" source="SUSE-SU"/>
		<description>
This update for trousers fixes the following issues:

- CVE-2019-18898: Fixed a local symlink attack where a rogue tss user
  could have gain ownership of arbitrary files in the system during
  installation/update of the trousers package (bsc#1157651).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-19"/>
	<updated date="2019-12-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1157651">SUSE bug 1157651</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18898/">CVE-2019-18898</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491850" comment="libtspi1-0.3.14-6.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491851" comment="trousers-0.3.14-6.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491852" comment="trousers-devel-0.3.14-6.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137823" version="1" class="patch">
	<metadata>
		<title>Security update for libgcrypt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1148987" ref_url="https://bugzilla.suse.com/1148987" source="BUGZILLA"/>
		<reference ref_id="1155338" ref_url="https://bugzilla.suse.com/1155338" source="BUGZILLA"/>
		<reference ref_id="1155339" ref_url="https://bugzilla.suse.com/1155339" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13627" ref_url="https://www.suse.com/security/cve/CVE-2019-13627/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006291.html" source="SUSE-SU"/>
		<description>
This update for libgcrypt fixes the following issues:

Security issues fixed:

- CVE-2019-13627: Mitigation against an ECDSA timing attack (bsc#1148987).

Bug fixes:

- Added CMAC AES self test (bsc#1155339).
- Added CMAC TDES self test missing (bsc#1155338).
- Fix test dsa-rfc6979 in FIPS mode.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-27"/>
	<updated date="2019-12-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1148987">SUSE bug 1148987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155338">SUSE bug 1155338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155339">SUSE bug 1155339</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13627/">CVE-2019-13627</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491853" comment="libgcrypt-devel-1.8.2-8.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491854" comment="libgcrypt20-1.8.2-8.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491855" comment="libgcrypt20-32bit-1.8.2-8.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491856" comment="libgcrypt20-hmac-1.8.2-8.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491857" comment="libgcrypt20-hmac-32bit-1.8.2-8.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137824" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nspr, mozilla-nss (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141322" ref_url="https://bugzilla.suse.com/1141322" source="BUGZILLA"/>
		<reference ref_id="1158527" ref_url="https://bugzilla.suse.com/1158527" source="BUGZILLA"/>
		<reference ref_id="1159819" ref_url="https://bugzilla.suse.com/1159819" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-18508" ref_url="https://www.suse.com/security/cve/CVE-2018-18508/" source="CVE"/>
		<reference ref_id="CVE-2019-11745" ref_url="https://www.suse.com/security/cve/CVE-2019-11745/" source="CVE"/>
		<reference ref_id="CVE-2019-17006" ref_url="https://www.suse.com/security/cve/CVE-2019-17006/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006294.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nspr, mozilla-nss fixes the following issues:

mozilla-nss was updated to NSS 3.47.1:

Security issues fixed:

- CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819).
- CVE-2019-11745: EncryptUpdate should use maxout, not block size (bsc#1158527).
- CVE-2019-11727: Fixed vulnerability sign CertificateVerify with PKCS#1 v1.5 signatures issue (bsc#1141322).

mozilla-nspr was updated to version 4.23:

- Whitespace in C files was cleaned up and no longer uses tab characters for indenting.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-30"/>
	<updated date="2019-12-30"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141322">SUSE bug 1141322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158527">SUSE bug 1158527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159819">SUSE bug 1159819</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18508/">CVE-2018-18508</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11745/">CVE-2019-11745</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-17006/">CVE-2019-17006</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490891" comment="libfreebl3-3.47.1-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490892" comment="libfreebl3-32bit-3.47.1-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490895" comment="libsoftokn3-3.47.1-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490896" comment="libsoftokn3-32bit-3.47.1-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490899" comment="mozilla-nspr-4.23-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490900" comment="mozilla-nspr-32bit-4.23-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490901" comment="mozilla-nspr-devel-4.23-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490902" comment="mozilla-nss-3.47.1-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490903" comment="mozilla-nss-32bit-3.47.1-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490904" comment="mozilla-nss-certs-3.47.1-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490905" comment="mozilla-nss-certs-32bit-3.47.1-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490906" comment="mozilla-nss-devel-3.47.1-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490907" comment="mozilla-nss-sysinit-3.47.1-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490908" comment="mozilla-nss-tools-3.47.1-3.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137825" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168422" ref_url="https://bugzilla.suse.com/1168422" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-3898" ref_url="https://www.suse.com/security/cve/CVE-2020-3898/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006728.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:

- CVE-2020-3898: Fixed a heap buffer overflow in ppdFindOption() (bsc#1168422).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-23"/>
	<updated date="2020-04-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168422">SUSE bug 1168422</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3898/">CVE-2020-3898</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491858" comment="cups-2.2.7-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491859" comment="cups-client-2.2.7-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491860" comment="cups-config-2.2.7-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491861" comment="cups-devel-2.2.7-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491862" comment="libcups2-2.2.7-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491863" comment="libcups2-32bit-2.2.7-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491864" comment="libcupscgi1-2.2.7-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491865" comment="libcupsimage2-2.2.7-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491866" comment="libcupsmime1-2.2.7-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491867" comment="libcupsppdc1-2.2.7-3.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137826" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1165528" ref_url="https://bugzilla.suse.com/1165528" source="BUGZILLA"/>
		<reference ref_id="1169658" ref_url="https://bugzilla.suse.com/1169658" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10018" ref_url="https://www.suse.com/security/cve/CVE-2020-10018/" source="CVE"/>
		<reference ref_id="CVE-2020-11793" ref_url="https://www.suse.com/security/cve/CVE-2020-11793/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006739.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 to version 2.28.1 fixes the following issues:

Security issues fixed:

- CVE-2020-10018: Fixed a denial of service because the m_deferredFocusedNodeChange data structure was mishandled (bsc#1165528).
- CVE-2020-11793: Fixed a potential arbitrary code execution caused by a use-after-free vulnerability (bsc#1169658).

Non-security issues fixed:

- Add API to enable Process Swap on (Cross-site) Navigation.
- Add user messages API for the communication with the web extension.
- Add support for same-site cookies.
- Service workers are enabled by default.
- Add support for Pointer Lock API.
- Add flatpak sandbox support.
- Make ondemand hardware acceleration policy never leave accelerated compositing mode.
- Always use a light theme for rendering form controls.
- Add about:gpu to show information about the graphics stack.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-24"/>
	<updated date="2020-04-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1165528">SUSE bug 1165528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169658">SUSE bug 1169658</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10018/">CVE-2020-10018</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11793/">CVE-2020-11793</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491868" comment="libjavascriptcoregtk-4_0-18-2.28.1-3.49.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491869" comment="libwebkit2gtk-4_0-37-2.28.1-3.49.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491870" comment="libwebkit2gtk3-lang-2.28.1-3.49.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491871" comment="webkit2gtk-4_0-injected-bundles-2.28.1-3.49.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137827" version="1" class="patch">
	<metadata>
		<title>Security update for Mesa (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1156015" ref_url="https://bugzilla.suse.com/1156015" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5068" ref_url="https://www.suse.com/security/cve/CVE-2019-5068/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006356.html" source="SUSE-SU"/>
		<description>
This update for Mesa fixes the following issues:

Security issue fixed:

- CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability (bsc#1156015).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-16"/>
	<updated date="2020-01-16"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1156015">SUSE bug 1156015</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-5068/">CVE-2019-5068</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491872" comment="Mesa-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491873" comment="Mesa-32bit-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491874" comment="Mesa-KHR-devel-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491875" comment="Mesa-devel-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491876" comment="Mesa-dri-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491877" comment="Mesa-dri-32bit-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491878" comment="Mesa-dri-devel-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491879" comment="Mesa-gallium-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491880" comment="Mesa-gallium-32bit-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491881" comment="Mesa-libEGL-devel-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491882" comment="Mesa-libEGL1-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491883" comment="Mesa-libEGL1-32bit-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491884" comment="Mesa-libGL-devel-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491885" comment="Mesa-libGL1-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491886" comment="Mesa-libGL1-32bit-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491887" comment="Mesa-libGLESv1_CM-devel-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491888" comment="Mesa-libGLESv1_CM1-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491889" comment="Mesa-libGLESv2-2-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491890" comment="Mesa-libGLESv2-devel-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491891" comment="Mesa-libGLESv3-devel-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491892" comment="Mesa-libVulkan-devel-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491893" comment="Mesa-libd3d-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491894" comment="Mesa-libd3d-devel-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491895" comment="Mesa-libglapi-devel-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491896" comment="Mesa-libglapi0-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491897" comment="Mesa-libglapi0-32bit-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491898" comment="Mesa-libva-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491899" comment="libOSMesa-devel-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491900" comment="libOSMesa8-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491901" comment="libgbm-devel-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491902" comment="libgbm1-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491903" comment="libgbm1-32bit-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491904" comment="libvdpau_r300-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491905" comment="libvdpau_r600-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491906" comment="libvdpau_radeonsi-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491907" comment="libvulkan_intel-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491908" comment="libvulkan_radeon-18.3.2-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491909" comment="libxatracker-devel-1.0.0-34.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491910" comment="libxatracker2-1.0.0-34.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137828" version="1" class="patch">
	<metadata>
		<title>Security update for git (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1063412" ref_url="https://bugzilla.suse.com/1063412" source="BUGZILLA"/>
		<reference ref_id="1095218" ref_url="https://bugzilla.suse.com/1095218" source="BUGZILLA"/>
		<reference ref_id="1095219" ref_url="https://bugzilla.suse.com/1095219" source="BUGZILLA"/>
		<reference ref_id="1110949" ref_url="https://bugzilla.suse.com/1110949" source="BUGZILLA"/>
		<reference ref_id="1112230" ref_url="https://bugzilla.suse.com/1112230" source="BUGZILLA"/>
		<reference ref_id="1114225" ref_url="https://bugzilla.suse.com/1114225" source="BUGZILLA"/>
		<reference ref_id="1132350" ref_url="https://bugzilla.suse.com/1132350" source="BUGZILLA"/>
		<reference ref_id="1149792" ref_url="https://bugzilla.suse.com/1149792" source="BUGZILLA"/>
		<reference ref_id="1156651" ref_url="https://bugzilla.suse.com/1156651" source="BUGZILLA"/>
		<reference ref_id="1158785" ref_url="https://bugzilla.suse.com/1158785" source="BUGZILLA"/>
		<reference ref_id="1158787" ref_url="https://bugzilla.suse.com/1158787" source="BUGZILLA"/>
		<reference ref_id="1158788" ref_url="https://bugzilla.suse.com/1158788" source="BUGZILLA"/>
		<reference ref_id="1158789" ref_url="https://bugzilla.suse.com/1158789" source="BUGZILLA"/>
		<reference ref_id="1158790" ref_url="https://bugzilla.suse.com/1158790" source="BUGZILLA"/>
		<reference ref_id="1158791" ref_url="https://bugzilla.suse.com/1158791" source="BUGZILLA"/>
		<reference ref_id="1158792" ref_url="https://bugzilla.suse.com/1158792" source="BUGZILLA"/>
		<reference ref_id="1158793" ref_url="https://bugzilla.suse.com/1158793" source="BUGZILLA"/>
		<reference ref_id="1158795" ref_url="https://bugzilla.suse.com/1158795" source="BUGZILLA"/>
		<reference ref_id="1167890" ref_url="https://bugzilla.suse.com/1167890" source="BUGZILLA"/>
		<reference ref_id="1168930" ref_url="https://bugzilla.suse.com/1168930" source="BUGZILLA"/>
		<reference ref_id="1169605" ref_url="https://bugzilla.suse.com/1169605" source="BUGZILLA"/>
		<reference ref_id="1169786" ref_url="https://bugzilla.suse.com/1169786" source="BUGZILLA"/>
		<reference ref_id="1169936" ref_url="https://bugzilla.suse.com/1169936" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-15298" ref_url="https://www.suse.com/security/cve/CVE-2017-15298/" source="CVE"/>
		<reference ref_id="CVE-2018-11233" ref_url="https://www.suse.com/security/cve/CVE-2018-11233/" source="CVE"/>
		<reference ref_id="CVE-2018-11235" ref_url="https://www.suse.com/security/cve/CVE-2018-11235/" source="CVE"/>
		<reference ref_id="CVE-2018-17456" ref_url="https://www.suse.com/security/cve/CVE-2018-17456/" source="CVE"/>
		<reference ref_id="CVE-2019-1348" ref_url="https://www.suse.com/security/cve/CVE-2019-1348/" source="CVE"/>
		<reference ref_id="CVE-2019-1349" ref_url="https://www.suse.com/security/cve/CVE-2019-1349/" source="CVE"/>
		<reference ref_id="CVE-2019-1350" ref_url="https://www.suse.com/security/cve/CVE-2019-1350/" source="CVE"/>
		<reference ref_id="CVE-2019-1351" ref_url="https://www.suse.com/security/cve/CVE-2019-1351/" source="CVE"/>
		<reference ref_id="CVE-2019-1352" ref_url="https://www.suse.com/security/cve/CVE-2019-1352/" source="CVE"/>
		<reference ref_id="CVE-2019-1353" ref_url="https://www.suse.com/security/cve/CVE-2019-1353/" source="CVE"/>
		<reference ref_id="CVE-2019-1354" ref_url="https://www.suse.com/security/cve/CVE-2019-1354/" source="CVE"/>
		<reference ref_id="CVE-2019-1387" ref_url="https://www.suse.com/security/cve/CVE-2019-1387/" source="CVE"/>
		<reference ref_id="CVE-2019-19604" ref_url="https://www.suse.com/security/cve/CVE-2019-19604/" source="CVE"/>
		<reference ref_id="CVE-2020-11008" ref_url="https://www.suse.com/security/cve/CVE-2020-11008/" source="CVE"/>
		<reference ref_id="CVE-2020-5260" ref_url="https://www.suse.com/security/cve/CVE-2020-5260/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006748.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

Security issues fixed:

* CVE-2020-11008: Specially crafted URLs may have tricked the
  credentials helper to providing credential information that
  is not appropriate for the protocol in use and host being
  contacted (bsc#1169936)

git was updated to 2.26.1 (bsc#1169786, jsc#ECO-1628, bsc#1149792)

- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).

* CVE-2020-5260: Specially crafted URLs with newline characters
  could have been used to make the Git client to send credential
  information for a wrong host to the attacker's site bsc#1168930

git 2.26.0 (bsc#1167890, jsc#SLE-11608):

* 'git rebase' now uses a different backend that is based on the
  'merge' machinery by default. The 'rebase.backend' configuration
   variable reverts to old behaviour when set to  'apply'
* Improved handling of sparse checkouts
* Improvements to many commands and internal features

git 2.25.2:

* bug fixes to various subcommands in specific operations

git 2.25.1:

* 'git commit' now honors advise.statusHints
* various updates, bug fixes and documentation updates

git 2.25.0

* The branch description ('git branch --edit-description') has been
  used to fill the body of the cover letters by the format-patch
  command; this has been enhanced so that the subject can also be
  filled.
* A few commands learned to take the pathspec from the standard input
  or a named file, instead of taking it as the command line
  arguments, with the '--pathspec-from-file' option.
* Test updates to prepare for SHA-2 transition continues.
* Redo 'git name-rev' to avoid recursive calls.
* When all files from some subdirectory were renamed to the root
  directory, the directory rename heuristics would fail to detect that
  as a rename/merge of the subdirectory to the root directory, which has
  been corrected.
* HTTP transport had possible allocator/deallocator mismatch, which
  has been corrected.

git 2.24.1:

* CVE-2019-1348: The --export-marks option of fast-import is
  exposed also via the in-stream command feature export-marks=...
  and it allows overwriting arbitrary paths (bsc#1158785)
* CVE-2019-1349: on Windows, when submodules are cloned
  recursively, under certain circumstances Git could be fooled
  into using the same Git directory twice (bsc#1158787)
* CVE-2019-1350: Incorrect quoting of command-line arguments
  allowed remote code execution during a recursive clone in
  conjunction with SSH URLs (bsc#1158788)
* CVE-2019-1351: on Windows mistakes drive letters outside of
  the US-English alphabet as relative paths (bsc#1158789)
* CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
  Streams (bsc#1158790)
* CVE-2019-1353: when run in the Windows Subsystem for Linux
  while accessing a working directory on a regular Windows
  drive, none of the NTFS protections were active (bsc#1158791)
* CVE-2019-1354: on Windows refuses to write tracked files with
  filenames that contain backslashes (bsc#1158792)
* CVE-2019-1387: Recursive clones vulnerability that is caused
  by too-lax validation of submodule names, allowing very
  targeted attacks via remote code execution in recursive
  clones (bsc#1158793)
* CVE-2019-19604: a recursive clone followed by a submodule
  update could execute code contained within the repository
  without the user explicitly having asked for that (bsc#1158795)

git 2.24.0

* The command line parser learned '--end-of-options' notation.
* A mechanism to affect the default setting for a (related) group of
  configuration variables is introduced.
* 'git fetch' learned '--set-upstream' option to help those who first
  clone from their private fork they intend to push to, add the true
  upstream via 'git remote add' and then 'git fetch' from it.
* fixes and improvements to UI, workflow and features, bash completion fixes

git 2.23.0:

* The '--base' option of 'format-patch' computed the patch-ids for
  prerequisite patches in an unstable way, which has been updated
  to compute in a way that is compatible with 'git patch-id
  --stable'.
* The 'git log' command by default behaves as if the --mailmap
  option was given.
* fixes and improvements to UI, workflow and features

git 2.22.1

* A relative pathname given to 'git init --template=&lt;path&gt; &lt;repo&gt;'
  ought to be relative to the directory 'git init' gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
* 'git worktree add' used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
* 'git am -i --resolved' segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
* 'git merge --squash' is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the '--commit' option; the command now refuses to work
  when both options are given.
* Update to Unicode 12.1 width table.
* 'git request-pull' learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
* 'git fetch' into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
* The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
* 'git clean' silently skipped a path when it cannot lstat() it; now
  it gives a warning.
* 'git rm' to resolve a conflicted path leaked an internal message
  'needs merge' before actually removing the path, which was
  confusing. This has been corrected.
* Many more bugfixes and code cleanups.

- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld.

- partial fix for git instaweb giving 500 error (bsc#1112230)

git 2.22.0 

* The filter specification '--filter=sparse:path=&lt;path&gt;' used to
  create a lazy/partial clone has been removed. Using a blob that is
  part of the project as sparse specification is still supported with
  the '--filter=sparse:oid=&lt;blob&gt;' option
* 'git checkout --no-overlay' can be used to trigger a new mode of
  checking out paths out of the tree-ish, that allows paths that
  match the pathspec that are in the current index and working tree
  and are not in the tree-ish.
* Four new configuration variables {author,committer}.{name,email}
  have been introduced to override user.{name,email} in more specific
  cases.
* 'git branch' learned a new subcommand '--show-current'.
* The command line completion (in contrib/) has been taught to
  complete more subcommand parameters.
* The completion helper code now pays attention to repository-local
  configuration (when available), which allows --list-cmds to honour
  a repository specific setting of completion.commands, for example.
* The list of conflicted paths shown in the editor while concluding a
  conflicted merge was shown above the scissors line when the
  clean-up mode is set to 'scissors', even though it was commented
  out just like the list of updated paths and other information to
  help the user explain the merge better.
* 'git rebase' that was reimplemented in C did not set ORIG_HEAD
  correctly, which has been corrected.
* 'git worktree add' used to do a 'find an available name with stat
  and then mkdir', which is race-prone. This has been fixed by using
  mkdir and reacting to EEXIST in a loop. 

- Move to DocBook 5.x. Asciidoctor 2.x no longer supports the legacy
  DocBook 4.5 format.

- update git-web AppArmor profile for bash and tar usrMerge (bsc#1132350)

git 2.21.0

* Historically, the '-m' (mainline) option can only be used for 'git
  cherry-pick' and 'git revert' when working with a merge commit.
  This version of Git no longer warns or errors out when working with
  a single-parent commit, as long as the argument to the '-m' option
  is 1 (i.e. it has only one parent, and the request is to pick or
  revert relative to that first parent). Scripts that relied on the
  behaviour may get broken with this change.
* Small fixes and features for fast-export and fast-import.
* The 'http.version' configuration variable can be used with recent
  enough versions of cURL library to force the version of HTTP used
  to talk when fetching and pushing.
* 'git push $there $src:$dst' rejects when $dst is not a fully
    qualified refname and it is not clear what the end user meant.
* Update 'git multimail' from the upstream.
* A new date format '--date=human' that morphs its output depending
  on how far the time is from the current time has been introduced.
  '--date=auto:human' can be used to use this new format (or any
  existing format) when the output is going to the pager or to the
  terminal, and otherwise the default format.

- Fix worktree creation race (bsc#1114225).
- add shadow build dependency to the -daemon subpackage.


git 2.20.1:

* portability fixes
* 'git help -a' did not work well when an overly long alias was
  defined
* no longer squelched an error message when the run_command API
  failed to run a missing command

git 2.20.0

* 'git help -a' now gives verbose output (same as 'git help -av').
  Those who want the old output may say 'git help --no-verbose -a'..
* 'git send-email' learned to grab address-looking string on any
  trailer whose name ends with '-by'.
* 'git format-patch' learned new '--interdiff' and '--range-diff'
  options to explain the difference between this version and the
  previous attempt in the cover letter (or after the three-dashes as
   a comment).
* Developer builds now use -Wunused-function compilation option.
* Fix a bug in which the same path could be registered under multiple
  worktree entries if the path was missing (for instance, was removed
  manually).  Also, as a convenience, expand the number of cases in
  which --force is applicable.
* The overly large Documentation/config.txt file have been split into
  million little pieces.  This potentially allows each individual piece
  to be included into the manual page of the command it affects more easily.
* Malformed or crafted data in packstream can make our code attempt
  to read or write past the allocated buffer and abort, instead of
  reporting an error, which has been fixed.
* Fix for a long-standing bug that leaves the index file corrupt when
  it shrinks during a partial commit.
* 'git merge' and 'git pull' that merges into an unborn branch used
  to completely ignore '--verify-signatures', which has been
  corrected.
* ...and much more features and fixes

git 2.19.2:

* various bug fixes for multiple subcommands and operations

git 2.19.1:

* CVE-2018-17456: Specially crafted .gitmodules files may have
  allowed arbitrary code execution when the repository is cloned
  with --recurse-submodules (bsc#1110949)

git 2.19.0:

* 'git diff' compares the index and the working tree.  For paths
  added with intent-to-add bit, the command shows the full contents
  of them as added, but the paths themselves were not marked as new
  files.  They are now shown as new by default.
* 'git apply' learned the '--intent-to-add' option so that an
  otherwise working-tree-only application of a patch will add new
  paths to the index marked with the 'intent-to-add' bit.
* 'git grep' learned the '--column' option that gives not just the
  line number but the column number of the hit.
* The '-l' option in 'git branch -l' is an unfortunate short-hand for
  '--create-reflog', but many users, both old and new, somehow expect
  it to be something else, perhaps '--list'.  This step warns when '-l'
  is used as a short-hand for '--create-reflog' and warns about the
  future repurposing of the it when it is used.
* The userdiff pattern for .php has been updated.
* The content-transfer-encoding of the message 'git send-email' sends
  out by default was 8bit, which can cause trouble when there is an
  overlong line to bust RFC 5322/2822 limit.  A new option 'auto' to
  automatically switch to quoted-printable when there is such a line
  in the payload has been introduced and is made the default.
* 'git checkout' and 'git worktree add' learned to honor
  checkout.defaultRemote when auto-vivifying a local branch out of a
  remote tracking branch in a repository with multiple remotes that
  have tracking branches that share the same names.
  (merge 8d7b558bae ab/checkout-default-remote later to maint).
* 'git grep' learned the '--only-matching' option.
* 'git rebase --rebase-merges' mode now handles octopus merges as
  well.
* Add a server-side knob to skip commits in exponential/fibbonacci
  stride in an attempt to cover wider swath of history with a smaller
  number of iterations, potentially accepting a larger packfile
  transfer, instead of going back one commit a time during common
  ancestor discovery during the 'git fetch' transaction.
  (merge 42cc7485a2 jt/fetch-negotiator-skipping later to maint).
* A new configuration variable core.usereplacerefs has been added,
  primarily to help server installations that want to ignore the
  replace mechanism altogether.
* Teach 'git tag -s' etc. a few configuration variables (gpg.format
  that can be set to 'openpgp' or 'x509', and gpg.&lt;format&gt;.program
  that is used to specify what program to use to deal with the format)
  to allow x.509 certs with CMS via 'gpgsm' to be used instead of
  openpgp via 'gnupg'.
* Many more strings are prepared for l10n.
* 'git p4 submit' learns to ask its own pre-submit hook if it should
  continue with submitting.
* The test performed at the receiving end of 'git push' to prevent
  bad objects from entering repository can be customized via
  receive.fsck.* configuration variables; we now have gained a
  counterpart to do the same on the 'git fetch' side, with
  fetch.fsck.* configuration variables.
* 'git pull --rebase=interactive' learned 'i' as a short-hand for
  'interactive'.
* 'git instaweb' has been adjusted to run better with newer Apache on
  RedHat based distros.
* 'git range-diff' is a reimplementation of 'git tbdiff' that lets us
  compare individual patches in two iterations of a topic.
* The sideband code learned to optionally paint selected keywords at
  the beginning of incoming lines on the receiving end.
* 'git branch --list' learned to take the default sort order from the
  'branch.sort' configuration variable, just like 'git tag --list'
  pays attention to 'tag.sort'.
* 'git worktree' command learned '--quiet' option to make it less
  verbose.

git 2.18.0:

* improvements to rename detection logic
* When built with more recent cURL, GIT_SSL_VERSION can now
  specify 'tlsv1.3' as its value.
* 'git mergetools' learned talking to guiffy.
* various other workflow improvements and fixes
* performance improvements and other developer visible fixes

git 2.17.1

* Submodule 'names' come from the untrusted .gitmodules file, but
  we blindly append them to $GIT_DIR/modules to create our on-disk
  repo paths. This means you can do bad things by putting '../'
  into the name. We now enforce some rules for submodule names
  which will cause Git to ignore these malicious names
  (CVE-2018-11235, bsc#1095219)
* It was possible to trick the code that sanity-checks paths on
  NTFS into reading random piece of memory
  (CVE-2018-11233, bsc#1095218)
* Support on the server side to reject pushes to repositories
  that attempt to create such problematic .gitmodules file etc.
  as tracked contents, to help hosting sites protect their
  customers by preventing malicious contents from spreading.

git 2.17.0:

* 'diff' family of commands learned '--find-object=&lt;object-id&gt;' option
   to limit the findings to changes that involve the named object.
* 'git format-patch' learned to give 72-cols to diffstat, which is
  consistent with other line length limits the subcommand uses for
  its output meant for e-mails.
* The log from 'git daemon' can be redirected with a new option; one
  relevant use case is to send the log to standard error (instead of
  syslog) when running it from inetd.
* 'git rebase' learned to take '--allow-empty-message' option.
* 'git am' has learned the '--quit' option, in addition to the
  existing '--abort' option; having the pair mirrors a few other
  commands like 'rebase' and 'cherry-pick'.
* 'git worktree add' learned to run the post-checkout hook, just like
  'git clone' runs it upon the initial checkout.
* 'git tag' learned an explicit '--edit' option that allows the
  message given via '-m' and '-F' to be further edited.
* 'git fetch --prune-tags' may be used as a handy short-hand for
  getting rid of stale tags that are locally held.
* The new '--show-current-patch' option gives an end-user facing way
  to get the diff being applied when 'git rebase' (and 'git am')
  stops with a conflict.
* 'git add -p' used to offer '/' (look for a matching hunk) as a
  choice, even there was only one hunk, which has been corrected.
  Also the single-key help is now given only for keys that are
  enabled (e.g. help for '/' won't be shown when there is only one
  hunk).
* Since Git 1.7.9, 'git merge' defaulted to --no-ff (i.e. even when
  the side branch being merged is a descendant of the current commit,
  create a merge commit instead of fast-forwarding) when merging a
  tag object.  This was appropriate default for integrators who pull
  signed tags from their downstream contributors, but caused an
  unnecessary merges when used by downstream contributors who
  habitually 'catch up' their topic branches with tagged releases
  from the upstream.  Update 'git merge' to default to --no-ff only
  when merging a tag object that does *not* sit at its usual place in
  refs/tags/ hierarchy, and allow fast-forwarding otherwise, to
  mitigate the problem.
* 'git status' can spend a lot of cycles to compute the relation
  between the current branch and its upstream, which can now be
  disabled with '--no-ahead-behind' option.
* 'git diff' and friends learned funcname patterns for Go language
  source files.
* 'git send-email' learned '--reply-to=&lt;address&gt;' option.
* Funcname pattern used for C# now recognizes 'async' keyword.
* In a way similar to how 'git tag' learned to honor the pager
  setting only in the list mode, 'git config' learned to ignore the
  pager setting when it is used for setting values (i.e. when the
  purpose of the operation is not to 'show').
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-28"/>
	<updated date="2020-04-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1063412">SUSE bug 1063412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095218">SUSE bug 1095218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095219">SUSE bug 1095219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110949">SUSE bug 1110949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112230">SUSE bug 1112230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114225">SUSE bug 1114225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132350">SUSE bug 1132350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149792">SUSE bug 1149792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156651">SUSE bug 1156651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158785">SUSE bug 1158785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158787">SUSE bug 1158787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158788">SUSE bug 1158788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158789">SUSE bug 1158789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158790">SUSE bug 1158790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158791">SUSE bug 1158791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158792">SUSE bug 1158792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158793">SUSE bug 1158793</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158795">SUSE bug 1158795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167890">SUSE bug 1167890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168930">SUSE bug 1168930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169605">SUSE bug 1169605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169786">SUSE bug 1169786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169936">SUSE bug 1169936</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15298/">CVE-2017-15298</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-11233/">CVE-2018-11233</cve>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11235/">CVE-2018-11235</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17456/">CVE-2018-17456</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-1348/">CVE-2019-1348</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1349/">CVE-2019-1349</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1350/">CVE-2019-1350</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-1351/">CVE-2019-1351</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1352/">CVE-2019-1352</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1353/">CVE-2019-1353</cve>
	<cve impact="low" cvss3="0/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1354/">CVE-2019-1354</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1387/">CVE-2019-1387</cve>
	<cve impact="critical" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19604/">CVE-2019-19604</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11008/">CVE-2020-11008</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-5260/">CVE-2020-5260</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491911" comment="git-core-2.26.1-3.25.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137829" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1134506" ref_url="https://bugzilla.suse.com/1134506" source="BUGZILLA"/>
		<reference ref_id="1155200" ref_url="https://bugzilla.suse.com/1155200" source="BUGZILLA"/>
		<reference ref_id="1157490" ref_url="https://bugzilla.suse.com/1157490" source="BUGZILLA"/>
		<reference ref_id="1160932" ref_url="https://bugzilla.suse.com/1160932" source="BUGZILLA"/>
		<reference ref_id="1165206" ref_url="https://bugzilla.suse.com/1165206" source="BUGZILLA"/>
		<reference ref_id="1167007" ref_url="https://bugzilla.suse.com/1167007" source="BUGZILLA"/>
		<reference ref_id="1167152" ref_url="https://bugzilla.suse.com/1167152" source="BUGZILLA"/>
		<reference ref_id="1168140" ref_url="https://bugzilla.suse.com/1168140" source="BUGZILLA"/>
		<reference ref_id="1168142" ref_url="https://bugzilla.suse.com/1168142" source="BUGZILLA"/>
		<reference ref_id="1168143" ref_url="https://bugzilla.suse.com/1168143" source="BUGZILLA"/>
		<reference ref_id="1169392" ref_url="https://bugzilla.suse.com/1169392" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11739" ref_url="https://www.suse.com/security/cve/CVE-2020-11739/" source="CVE"/>
		<reference ref_id="CVE-2020-11740" ref_url="https://www.suse.com/security/cve/CVE-2020-11740/" source="CVE"/>
		<reference ref_id="CVE-2020-11741" ref_url="https://www.suse.com/security/cve/CVE-2020-11741/" source="CVE"/>
		<reference ref_id="CVE-2020-11742" ref_url="https://www.suse.com/security/cve/CVE-2020-11742/" source="CVE"/>
		<reference ref_id="CVE-2020-11743" ref_url="https://www.suse.com/security/cve/CVE-2020-11743/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006746.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

Security issues fixed:

- CVE-2020-11742: Bad continuation handling in GNTTABOP_copy (bsc#1169392).
- CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues (bsc#1168140).
- CVE-2020-11739: Missing memory barriers in read-write unlock paths (bsc#1168142).
- CVE-2020-11743: Bad error path in GNTTABOP_map_grant (bsc#1168143).
- arm: a CPU may speculate past the ERET instruction (bsc#1160932).

Non-security issues fixed:

- Xenstored Crashed during VM install (bsc#1167152)
- DomU hang: soft lockup CPU #0 stuck under high load (bsc#1165206, bsc#1134506)
- Update API compatibility versions, fixes issues for libvirt. (bsc#1167007, bsc#1157490)
- aacraid blocks xen commands (bsc#1155200)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-28"/>
	<updated date="2020-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134506">SUSE bug 1134506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155200">SUSE bug 1155200</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157490">SUSE bug 1157490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160932">SUSE bug 1160932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165206">SUSE bug 1165206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167007">SUSE bug 1167007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167152">SUSE bug 1167152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168140">SUSE bug 1168140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168142">SUSE bug 1168142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168143">SUSE bug 1168143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169392">SUSE bug 1169392</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11739/">CVE-2020-11739</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11740/">CVE-2020-11740</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11741/">CVE-2020-11741</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11742/">CVE-2020-11742</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11743/">CVE-2020-11743</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491912" comment="xen-libs-4.12.2_04-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491913" comment="xen-tools-domU-4.12.2_04-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137830" version="1" class="patch">
	<metadata>
		<title>Security update for tigervnc (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159856" ref_url="https://bugzilla.suse.com/1159856" source="BUGZILLA"/>
		<reference ref_id="1159858" ref_url="https://bugzilla.suse.com/1159858" source="BUGZILLA"/>
		<reference ref_id="1159860" ref_url="https://bugzilla.suse.com/1159860" source="BUGZILLA"/>
		<reference ref_id="1160250" ref_url="https://bugzilla.suse.com/1160250" source="BUGZILLA"/>
		<reference ref_id="1160251" ref_url="https://bugzilla.suse.com/1160251" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15691" ref_url="https://www.suse.com/security/cve/CVE-2019-15691/" source="CVE"/>
		<reference ref_id="CVE-2019-15692" ref_url="https://www.suse.com/security/cve/CVE-2019-15692/" source="CVE"/>
		<reference ref_id="CVE-2019-15693" ref_url="https://www.suse.com/security/cve/CVE-2019-15693/" source="CVE"/>
		<reference ref_id="CVE-2019-15694" ref_url="https://www.suse.com/security/cve/CVE-2019-15694/" source="CVE"/>
		<reference ref_id="CVE-2019-15695" ref_url="https://www.suse.com/security/cve/CVE-2019-15695/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006358.html" source="SUSE-SU"/>
		<description>
This update for tigervnc fixes the following issues:

- CVE-2019-15691: Fixed a use-after-return due to incorrect usage of stack memory in ZRLEDecoder (bsc#1159856).
- CVE-2019-15692: Fixed a heap-based buffer overflow in CopyRectDecode (bsc#1160250).
- CVE-2019-15693: Fixed a heap-based buffer overflow in TightDecoder::FilterGradient (bsc#1159858).
- CVE-2019-15694: Fixed a heap-based buffer overflow, caused by improper error handling in processing MemOutStream (bsc#1160251).
- CVE-2019-15695: Fixed a stack-based buffer overflow, which could be triggered from CMsgReader::readSetCursor (bsc#1159860).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-16"/>
	<updated date="2020-01-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159856">SUSE bug 1159856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159858">SUSE bug 1159858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159860">SUSE bug 1159860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160250">SUSE bug 1160250</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160251">SUSE bug 1160251</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15691/">CVE-2019-15691</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15692/">CVE-2019-15692</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15693/">CVE-2019-15693</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15694/">CVE-2019-15694</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15695/">CVE-2019-15695</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491914" comment="libXvnc1-1.9.0-19.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491915" comment="tigervnc-1.9.0-19.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491916" comment="xorg-x11-Xvnc-1.9.0-19.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491917" comment="xorg-x11-Xvnc-module-1.9.0-19.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491918" comment="xorg-x11-Xvnc-novnc-1.9.0-19.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137831" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1167070" ref_url="https://bugzilla.suse.com/1167070" source="BUGZILLA"/>
		<reference ref_id="1169473" ref_url="https://bugzilla.suse.com/1169473" source="BUGZILLA"/>
		<reference ref_id="1169851" ref_url="https://bugzilla.suse.com/1169851" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10704" ref_url="https://www.suse.com/security/cve/CVE-2020-10704/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006749.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

Security issue fixed:

- CVE-2020-10704: Fixed a stack overflow in the AD DC (C)LDAP server (bsc#1169851).

Non-security issues fixed:

- Fixed spnego fallback from kerberos to ntlmssp in smbd server (bsc#1169473).
- Fixed warning messages for non root users using smbclient (bsc#1167070).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-28"/>
	<updated date="2020-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1167070">SUSE bug 1167070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169473">SUSE bug 1169473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169851">SUSE bug 1169851</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10704/">CVE-2020-10704</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491919" comment="libdcerpc-binding0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491920" comment="libdcerpc-binding0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491921" comment="libdcerpc-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491922" comment="libdcerpc-samr-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491923" comment="libdcerpc-samr0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491924" comment="libdcerpc0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491925" comment="libdcerpc0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491926" comment="libndr-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491927" comment="libndr-krb5pac-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491928" comment="libndr-krb5pac0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491929" comment="libndr-krb5pac0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491930" comment="libndr-nbt-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491931" comment="libndr-nbt0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491932" comment="libndr-nbt0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491933" comment="libndr-standard-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491934" comment="libndr-standard0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491935" comment="libndr-standard0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491936" comment="libndr0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491937" comment="libndr0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491938" comment="libnetapi-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491939" comment="libnetapi0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491940" comment="libnetapi0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491941" comment="libsamba-credentials-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491942" comment="libsamba-credentials0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491943" comment="libsamba-credentials0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491944" comment="libsamba-errors-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491945" comment="libsamba-errors0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491946" comment="libsamba-errors0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491947" comment="libsamba-hostconfig-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491948" comment="libsamba-hostconfig0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491949" comment="libsamba-hostconfig0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491950" comment="libsamba-passdb-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491951" comment="libsamba-passdb0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491952" comment="libsamba-passdb0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491953" comment="libsamba-policy-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491954" comment="libsamba-policy-python3-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491955" comment="libsamba-policy0-python3-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491956" comment="libsamba-util-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491957" comment="libsamba-util0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491958" comment="libsamba-util0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491959" comment="libsamdb-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491960" comment="libsamdb0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491961" comment="libsamdb0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491962" comment="libsmbclient-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491963" comment="libsmbclient0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491964" comment="libsmbconf-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491965" comment="libsmbconf0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491966" comment="libsmbconf0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491967" comment="libsmbldap-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491968" comment="libsmbldap2-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491969" comment="libsmbldap2-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491970" comment="libtevent-util-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491971" comment="libtevent-util0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491972" comment="libtevent-util0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491973" comment="libwbclient-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491974" comment="libwbclient0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491975" comment="libwbclient0-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491976" comment="samba-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491977" comment="samba-client-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491978" comment="samba-core-devel-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491979" comment="samba-libs-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491980" comment="samba-libs-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491981" comment="samba-libs-python3-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491982" comment="samba-python3-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491983" comment="samba-winbind-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491984" comment="samba-winbind-32bit-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137832" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027282" ref_url="https://bugzilla.suse.com/1027282" source="BUGZILLA"/>
		<reference ref_id="1029377" ref_url="https://bugzilla.suse.com/1029377" source="BUGZILLA"/>
		<reference ref_id="1029902" ref_url="https://bugzilla.suse.com/1029902" source="BUGZILLA"/>
		<reference ref_id="1040164" ref_url="https://bugzilla.suse.com/1040164" source="BUGZILLA"/>
		<reference ref_id="1042670" ref_url="https://bugzilla.suse.com/1042670" source="BUGZILLA"/>
		<reference ref_id="1070853" ref_url="https://bugzilla.suse.com/1070853" source="BUGZILLA"/>
		<reference ref_id="1079761" ref_url="https://bugzilla.suse.com/1079761" source="BUGZILLA"/>
		<reference ref_id="1081750" ref_url="https://bugzilla.suse.com/1081750" source="BUGZILLA"/>
		<reference ref_id="1083507" ref_url="https://bugzilla.suse.com/1083507" source="BUGZILLA"/>
		<reference ref_id="1086001" ref_url="https://bugzilla.suse.com/1086001" source="BUGZILLA"/>
		<reference ref_id="1088004" ref_url="https://bugzilla.suse.com/1088004" source="BUGZILLA"/>
		<reference ref_id="1088009" ref_url="https://bugzilla.suse.com/1088009" source="BUGZILLA"/>
		<reference ref_id="1088573" ref_url="https://bugzilla.suse.com/1088573" source="BUGZILLA"/>
		<reference ref_id="1094814" ref_url="https://bugzilla.suse.com/1094814" source="BUGZILLA"/>
		<reference ref_id="1107030" ref_url="https://bugzilla.suse.com/1107030" source="BUGZILLA"/>
		<reference ref_id="1109663" ref_url="https://bugzilla.suse.com/1109663" source="BUGZILLA"/>
		<reference ref_id="1109847" ref_url="https://bugzilla.suse.com/1109847" source="BUGZILLA"/>
		<reference ref_id="1120644" ref_url="https://bugzilla.suse.com/1120644" source="BUGZILLA"/>
		<reference ref_id="1122191" ref_url="https://bugzilla.suse.com/1122191" source="BUGZILLA"/>
		<reference ref_id="1129346" ref_url="https://bugzilla.suse.com/1129346" source="BUGZILLA"/>
		<reference ref_id="1130840" ref_url="https://bugzilla.suse.com/1130840" source="BUGZILLA"/>
		<reference ref_id="1133452" ref_url="https://bugzilla.suse.com/1133452" source="BUGZILLA"/>
		<reference ref_id="1137942" ref_url="https://bugzilla.suse.com/1137942" source="BUGZILLA"/>
		<reference ref_id="1138459" ref_url="https://bugzilla.suse.com/1138459" source="BUGZILLA"/>
		<reference ref_id="1141853" ref_url="https://bugzilla.suse.com/1141853" source="BUGZILLA"/>
		<reference ref_id="1149121" ref_url="https://bugzilla.suse.com/1149121" source="BUGZILLA"/>
		<reference ref_id="1149792" ref_url="https://bugzilla.suse.com/1149792" source="BUGZILLA"/>
		<reference ref_id="1149955" ref_url="https://bugzilla.suse.com/1149955" source="BUGZILLA"/>
		<reference ref_id="1151490" ref_url="https://bugzilla.suse.com/1151490" source="BUGZILLA"/>
		<reference ref_id="1153238" ref_url="https://bugzilla.suse.com/1153238" source="BUGZILLA"/>
		<reference ref_id="1159035" ref_url="https://bugzilla.suse.com/1159035" source="BUGZILLA"/>
		<reference ref_id="1159622" ref_url="https://bugzilla.suse.com/1159622" source="BUGZILLA"/>
		<reference ref_id="637176" ref_url="https://bugzilla.suse.com/637176" source="BUGZILLA"/>
		<reference ref_id="658604" ref_url="https://bugzilla.suse.com/658604" source="BUGZILLA"/>
		<reference ref_id="673071" ref_url="https://bugzilla.suse.com/673071" source="BUGZILLA"/>
		<reference ref_id="709442" ref_url="https://bugzilla.suse.com/709442" source="BUGZILLA"/>
		<reference ref_id="743787" ref_url="https://bugzilla.suse.com/743787" source="BUGZILLA"/>
		<reference ref_id="747125" ref_url="https://bugzilla.suse.com/747125" source="BUGZILLA"/>
		<reference ref_id="751718" ref_url="https://bugzilla.suse.com/751718" source="BUGZILLA"/>
		<reference ref_id="754447" ref_url="https://bugzilla.suse.com/754447" source="BUGZILLA"/>
		<reference ref_id="754677" ref_url="https://bugzilla.suse.com/754677" source="BUGZILLA"/>
		<reference ref_id="787526" ref_url="https://bugzilla.suse.com/787526" source="BUGZILLA"/>
		<reference ref_id="809831" ref_url="https://bugzilla.suse.com/809831" source="BUGZILLA"/>
		<reference ref_id="831629" ref_url="https://bugzilla.suse.com/831629" source="BUGZILLA"/>
		<reference ref_id="834601" ref_url="https://bugzilla.suse.com/834601" source="BUGZILLA"/>
		<reference ref_id="871152" ref_url="https://bugzilla.suse.com/871152" source="BUGZILLA"/>
		<reference ref_id="885662" ref_url="https://bugzilla.suse.com/885662" source="BUGZILLA"/>
		<reference ref_id="885882" ref_url="https://bugzilla.suse.com/885882" source="BUGZILLA"/>
		<reference ref_id="917607" ref_url="https://bugzilla.suse.com/917607" source="BUGZILLA"/>
		<reference ref_id="942751" ref_url="https://bugzilla.suse.com/942751" source="BUGZILLA"/>
		<reference ref_id="951166" ref_url="https://bugzilla.suse.com/951166" source="BUGZILLA"/>
		<reference ref_id="983582" ref_url="https://bugzilla.suse.com/983582" source="BUGZILLA"/>
		<reference ref_id="984751" ref_url="https://bugzilla.suse.com/984751" source="BUGZILLA"/>
		<reference ref_id="985177" ref_url="https://bugzilla.suse.com/985177" source="BUGZILLA"/>
		<reference ref_id="985348" ref_url="https://bugzilla.suse.com/985348" source="BUGZILLA"/>
		<reference ref_id="989523" ref_url="https://bugzilla.suse.com/989523" source="BUGZILLA"/>
		<reference ref_id="CVE-2011-3389" ref_url="https://www.suse.com/security/cve/CVE-2011-3389/" source="CVE"/>
		<reference ref_id="CVE-2011-4944" ref_url="https://www.suse.com/security/cve/CVE-2011-4944/" source="CVE"/>
		<reference ref_id="CVE-2012-0845" ref_url="https://www.suse.com/security/cve/CVE-2012-0845/" source="CVE"/>
		<reference ref_id="CVE-2012-1150" ref_url="https://www.suse.com/security/cve/CVE-2012-1150/" source="CVE"/>
		<reference ref_id="CVE-2013-1752" ref_url="https://www.suse.com/security/cve/CVE-2013-1752/" source="CVE"/>
		<reference ref_id="CVE-2013-4238" ref_url="https://www.suse.com/security/cve/CVE-2013-4238/" source="CVE"/>
		<reference ref_id="CVE-2014-2667" ref_url="https://www.suse.com/security/cve/CVE-2014-2667/" source="CVE"/>
		<reference ref_id="CVE-2014-4650" ref_url="https://www.suse.com/security/cve/CVE-2014-4650/" source="CVE"/>
		<reference ref_id="CVE-2016-0772" ref_url="https://www.suse.com/security/cve/CVE-2016-0772/" source="CVE"/>
		<reference ref_id="CVE-2016-1000110" ref_url="https://www.suse.com/security/cve/CVE-2016-1000110/" source="CVE"/>
		<reference ref_id="CVE-2016-5636" ref_url="https://www.suse.com/security/cve/CVE-2016-5636/" source="CVE"/>
		<reference ref_id="CVE-2016-5699" ref_url="https://www.suse.com/security/cve/CVE-2016-5699/" source="CVE"/>
		<reference ref_id="CVE-2017-18207" ref_url="https://www.suse.com/security/cve/CVE-2017-18207/" source="CVE"/>
		<reference ref_id="CVE-2018-1000802" ref_url="https://www.suse.com/security/cve/CVE-2018-1000802/" source="CVE"/>
		<reference ref_id="CVE-2018-1060" ref_url="https://www.suse.com/security/cve/CVE-2018-1060/" source="CVE"/>
		<reference ref_id="CVE-2018-1061" ref_url="https://www.suse.com/security/cve/CVE-2018-1061/" source="CVE"/>
		<reference ref_id="CVE-2018-14647" ref_url="https://www.suse.com/security/cve/CVE-2018-14647/" source="CVE"/>
		<reference ref_id="CVE-2018-20406" ref_url="https://www.suse.com/security/cve/CVE-2018-20406/" source="CVE"/>
		<reference ref_id="CVE-2018-20852" ref_url="https://www.suse.com/security/cve/CVE-2018-20852/" source="CVE"/>
		<reference ref_id="CVE-2019-10160" ref_url="https://www.suse.com/security/cve/CVE-2019-10160/" source="CVE"/>
		<reference ref_id="CVE-2019-15903" ref_url="https://www.suse.com/security/cve/CVE-2019-15903/" source="CVE"/>
		<reference ref_id="CVE-2019-16056" ref_url="https://www.suse.com/security/cve/CVE-2019-16056/" source="CVE"/>
		<reference ref_id="CVE-2019-16935" ref_url="https://www.suse.com/security/cve/CVE-2019-16935/" source="CVE"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<reference ref_id="CVE-2019-9636" ref_url="https://www.suse.com/security/cve/CVE-2019-9636/" source="CVE"/>
		<reference ref_id="CVE-2019-9947" ref_url="https://www.suse.com/security/cve/CVE-2019-9947/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<description>
This update for python3 to version 3.6.10 fixes the following issues:

- CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507).
- CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955).
- CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-16"/>
	<updated date="2020-01-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027282">SUSE bug 1027282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1029377">SUSE bug 1029377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1029902">SUSE bug 1029902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1040164">SUSE bug 1040164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042670">SUSE bug 1042670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070853">SUSE bug 1070853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1079761">SUSE bug 1079761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081750">SUSE bug 1081750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083507">SUSE bug 1083507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086001">SUSE bug 1086001</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088004">SUSE bug 1088004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088009">SUSE bug 1088009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088573">SUSE bug 1088573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094814">SUSE bug 1094814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107030">SUSE bug 1107030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109663">SUSE bug 1109663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109847">SUSE bug 1109847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120644">SUSE bug 1120644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122191">SUSE bug 1122191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129346">SUSE bug 1129346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130840">SUSE bug 1130840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133452">SUSE bug 1133452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137942">SUSE bug 1137942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138459">SUSE bug 1138459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141853">SUSE bug 1141853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149121">SUSE bug 1149121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149792">SUSE bug 1149792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149955">SUSE bug 1149955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151490">SUSE bug 1151490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153238">SUSE bug 1153238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159035">SUSE bug 1159035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159622">SUSE bug 1159622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/637176">SUSE bug 637176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/658604">SUSE bug 658604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673071">SUSE bug 673071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/709442">SUSE bug 709442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/743787">SUSE bug 743787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747125">SUSE bug 747125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751718">SUSE bug 751718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754447">SUSE bug 754447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754677">SUSE bug 754677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/787526">SUSE bug 787526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/809831">SUSE bug 809831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831629">SUSE bug 831629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/834601">SUSE bug 834601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871152">SUSE bug 871152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885662">SUSE bug 885662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885882">SUSE bug 885882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917607">SUSE bug 917607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942751">SUSE bug 942751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951166">SUSE bug 951166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983582">SUSE bug 983582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984751">SUSE bug 984751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985177">SUSE bug 985177</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985348">SUSE bug 985348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989523">SUSE bug 989523</bugzilla>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-3389/">CVE-2011-3389</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-4944/">CVE-2011-4944</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-0845/">CVE-2012-0845</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-1150/">CVE-2012-1150</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2013-1752/">CVE-2013-1752</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2013-4238/">CVE-2013-4238</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2014-2667/">CVE-2014-2667</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-4650/">CVE-2014-4650</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-0772/">CVE-2016-0772</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1000110/">CVE-2016-1000110</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5636/">CVE-2016-5636</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5699/">CVE-2016-5699</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18207/">CVE-2017-18207</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000802/">CVE-2018-1000802</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1060/">CVE-2018-1060</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1061/">CVE-2018-1061</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14647/">CVE-2018-14647</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20406/">CVE-2018-20406</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20852/">CVE-2018-20852</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10160/">CVE-2019-10160</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15903/">CVE-2019-15903</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16056/">CVE-2019-16056</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16935/">CVE-2019-16935</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9636/">CVE-2019-9636</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9947/">CVE-2019-9947</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491179" comment="libpython3_6m1_0-3.6.10-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491180" comment="python3-3.6.10-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491181" comment="python3-base-3.6.10-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491182" comment="python3-curses-3.6.10-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491183" comment="python3-dbm-3.6.10-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491184" comment="python3-devel-3.6.10-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491185" comment="python3-idle-3.6.10-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491186" comment="python3-tk-3.6.10-3.42.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137833" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1109911" ref_url="https://bugzilla.suse.com/1109911" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1118338" ref_url="https://bugzilla.suse.com/1118338" source="BUGZILLA"/>
		<reference ref_id="1120386" ref_url="https://bugzilla.suse.com/1120386" source="BUGZILLA"/>
		<reference ref_id="1137325" ref_url="https://bugzilla.suse.com/1137325" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1145051" ref_url="https://bugzilla.suse.com/1145051" source="BUGZILLA"/>
		<reference ref_id="1145929" ref_url="https://bugzilla.suse.com/1145929" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1158983" ref_url="https://bugzilla.suse.com/1158983" source="BUGZILLA"/>
		<reference ref_id="1159037" ref_url="https://bugzilla.suse.com/1159037" source="BUGZILLA"/>
		<reference ref_id="1159198" ref_url="https://bugzilla.suse.com/1159198" source="BUGZILLA"/>
		<reference ref_id="1159199" ref_url="https://bugzilla.suse.com/1159199" source="BUGZILLA"/>
		<reference ref_id="1161561" ref_url="https://bugzilla.suse.com/1161561" source="BUGZILLA"/>
		<reference ref_id="1161951" ref_url="https://bugzilla.suse.com/1161951" source="BUGZILLA"/>
		<reference ref_id="1162171" ref_url="https://bugzilla.suse.com/1162171" source="BUGZILLA"/>
		<reference ref_id="1163403" ref_url="https://bugzilla.suse.com/1163403" source="BUGZILLA"/>
		<reference ref_id="1163897" ref_url="https://bugzilla.suse.com/1163897" source="BUGZILLA"/>
		<reference ref_id="1164284" ref_url="https://bugzilla.suse.com/1164284" source="BUGZILLA"/>
		<reference ref_id="1164777" ref_url="https://bugzilla.suse.com/1164777" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1164893" ref_url="https://bugzilla.suse.com/1164893" source="BUGZILLA"/>
		<reference ref_id="1165019" ref_url="https://bugzilla.suse.com/1165019" source="BUGZILLA"/>
		<reference ref_id="1165182" ref_url="https://bugzilla.suse.com/1165182" source="BUGZILLA"/>
		<reference ref_id="1165185" ref_url="https://bugzilla.suse.com/1165185" source="BUGZILLA"/>
		<reference ref_id="1165211" ref_url="https://bugzilla.suse.com/1165211" source="BUGZILLA"/>
		<reference ref_id="1165823" ref_url="https://bugzilla.suse.com/1165823" source="BUGZILLA"/>
		<reference ref_id="1165949" ref_url="https://bugzilla.suse.com/1165949" source="BUGZILLA"/>
		<reference ref_id="1166780" ref_url="https://bugzilla.suse.com/1166780" source="BUGZILLA"/>
		<reference ref_id="1166860" ref_url="https://bugzilla.suse.com/1166860" source="BUGZILLA"/>
		<reference ref_id="1166861" ref_url="https://bugzilla.suse.com/1166861" source="BUGZILLA"/>
		<reference ref_id="1166862" ref_url="https://bugzilla.suse.com/1166862" source="BUGZILLA"/>
		<reference ref_id="1166864" ref_url="https://bugzilla.suse.com/1166864" source="BUGZILLA"/>
		<reference ref_id="1166866" ref_url="https://bugzilla.suse.com/1166866" source="BUGZILLA"/>
		<reference ref_id="1166867" ref_url="https://bugzilla.suse.com/1166867" source="BUGZILLA"/>
		<reference ref_id="1166868" ref_url="https://bugzilla.suse.com/1166868" source="BUGZILLA"/>
		<reference ref_id="1166870" ref_url="https://bugzilla.suse.com/1166870" source="BUGZILLA"/>
		<reference ref_id="1166940" ref_url="https://bugzilla.suse.com/1166940" source="BUGZILLA"/>
		<reference ref_id="1166982" ref_url="https://bugzilla.suse.com/1166982" source="BUGZILLA"/>
		<reference ref_id="1167005" ref_url="https://bugzilla.suse.com/1167005" source="BUGZILLA"/>
		<reference ref_id="1167216" ref_url="https://bugzilla.suse.com/1167216" source="BUGZILLA"/>
		<reference ref_id="1167288" ref_url="https://bugzilla.suse.com/1167288" source="BUGZILLA"/>
		<reference ref_id="1167290" ref_url="https://bugzilla.suse.com/1167290" source="BUGZILLA"/>
		<reference ref_id="1167316" ref_url="https://bugzilla.suse.com/1167316" source="BUGZILLA"/>
		<reference ref_id="1167421" ref_url="https://bugzilla.suse.com/1167421" source="BUGZILLA"/>
		<reference ref_id="1167423" ref_url="https://bugzilla.suse.com/1167423" source="BUGZILLA"/>
		<reference ref_id="1167627" ref_url="https://bugzilla.suse.com/1167627" source="BUGZILLA"/>
		<reference ref_id="1167629" ref_url="https://bugzilla.suse.com/1167629" source="BUGZILLA"/>
		<reference ref_id="1168075" ref_url="https://bugzilla.suse.com/1168075" source="BUGZILLA"/>
		<reference ref_id="1168202" ref_url="https://bugzilla.suse.com/1168202" source="BUGZILLA"/>
		<reference ref_id="1168273" ref_url="https://bugzilla.suse.com/1168273" source="BUGZILLA"/>
		<reference ref_id="1168276" ref_url="https://bugzilla.suse.com/1168276" source="BUGZILLA"/>
		<reference ref_id="1168295" ref_url="https://bugzilla.suse.com/1168295" source="BUGZILLA"/>
		<reference ref_id="1168367" ref_url="https://bugzilla.suse.com/1168367" source="BUGZILLA"/>
		<reference ref_id="1168424" ref_url="https://bugzilla.suse.com/1168424" source="BUGZILLA"/>
		<reference ref_id="1168443" ref_url="https://bugzilla.suse.com/1168443" source="BUGZILLA"/>
		<reference ref_id="1168486" ref_url="https://bugzilla.suse.com/1168486" source="BUGZILLA"/>
		<reference ref_id="1168552" ref_url="https://bugzilla.suse.com/1168552" source="BUGZILLA"/>
		<reference ref_id="1168760" ref_url="https://bugzilla.suse.com/1168760" source="BUGZILLA"/>
		<reference ref_id="1168762" ref_url="https://bugzilla.suse.com/1168762" source="BUGZILLA"/>
		<reference ref_id="1168763" ref_url="https://bugzilla.suse.com/1168763" source="BUGZILLA"/>
		<reference ref_id="1168764" ref_url="https://bugzilla.suse.com/1168764" source="BUGZILLA"/>
		<reference ref_id="1168765" ref_url="https://bugzilla.suse.com/1168765" source="BUGZILLA"/>
		<reference ref_id="1168829" ref_url="https://bugzilla.suse.com/1168829" source="BUGZILLA"/>
		<reference ref_id="1168854" ref_url="https://bugzilla.suse.com/1168854" source="BUGZILLA"/>
		<reference ref_id="1168881" ref_url="https://bugzilla.suse.com/1168881" source="BUGZILLA"/>
		<reference ref_id="1168884" ref_url="https://bugzilla.suse.com/1168884" source="BUGZILLA"/>
		<reference ref_id="1168952" ref_url="https://bugzilla.suse.com/1168952" source="BUGZILLA"/>
		<reference ref_id="1169013" ref_url="https://bugzilla.suse.com/1169013" source="BUGZILLA"/>
		<reference ref_id="1169057" ref_url="https://bugzilla.suse.com/1169057" source="BUGZILLA"/>
		<reference ref_id="1169307" ref_url="https://bugzilla.suse.com/1169307" source="BUGZILLA"/>
		<reference ref_id="1169308" ref_url="https://bugzilla.suse.com/1169308" source="BUGZILLA"/>
		<reference ref_id="1169390" ref_url="https://bugzilla.suse.com/1169390" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169625" ref_url="https://bugzilla.suse.com/1169625" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19770" ref_url="https://www.suse.com/security/cve/CVE-2019-19770/" source="CVE"/>
		<reference ref_id="CVE-2019-3701" ref_url="https://www.suse.com/security/cve/CVE-2019-3701/" source="CVE"/>
		<reference ref_id="CVE-2019-9458" ref_url="https://www.suse.com/security/cve/CVE-2019-9458/" source="CVE"/>
		<reference ref_id="CVE-2020-10942" ref_url="https://www.suse.com/security/cve/CVE-2020-10942/" source="CVE"/>
		<reference ref_id="CVE-2020-11494" ref_url="https://www.suse.com/security/cve/CVE-2020-11494/" source="CVE"/>
		<reference ref_id="CVE-2020-11669" ref_url="https://www.suse.com/security/cve/CVE-2020-11669/" source="CVE"/>
		<reference ref_id="CVE-2020-8834" ref_url="https://www.suse.com/security/cve/CVE-2020-8834/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006760.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
- CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
- CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
- CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
- CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
- CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).
- CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).

The following non-security bugs were fixed:

- ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
- ACPI: watchdog: Fix gas-&gt;access_width usage (bsc#1051510).
- ahci: Add support for Amazon's Annapurna Labs SATA controller (bsc#1169013).
- ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
- ALSA: core: Add snd_device_get_state() helper (bsc#1051510).
- ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
- ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard (bsc#1051510).
- ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: hda: default enable CA0132 DSP support (bsc#1051510).
- ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
- ALSA: hda/realtek - a fake key event is triggered by running shutup (bsc#1051510).
- ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (git-fixes).
- ALSA: hda/realtek: Enable mute LED on an HP system (bsc#1051510).
- ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (git-fixes).
- ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).
- ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups (bsc#1051510).
- ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).
- ALSA: hda: remove redundant assignment to variable timeout (bsc#1051510).
- ALSA: hda: Use scnprintf() for string truncation (bsc#1051510).
- ALSA: hdsp: remove redundant assignment to variable err (bsc#1051510).
- ALSA: ice1724: Fix invalid access for enumerated ctl items (bsc#1051510).
- ALSA: info: remove redundant assignment to variable c (bsc#1051510).
- ALSA: korg1212: fix if-statement empty body warnings (bsc#1051510).
- ALSA: line6: Fix endless MIDI read loop (git-fixes).
- ALSA: pcm: Fix superfluous snprintf() usage (bsc#1051510).
- ALSA: pcm.h: add for_each_pcm_streams() (bsc#1051510).
- ALSA: pcm: oss: Avoid plugin buffer overflow (git-fixes).
- ALSA: pcm: oss: Fix regression by buffer overflow fix (bsc#1051510).
- ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks (git-fixes).
- ALSA: pcm: oss: Unlock mutex temporarily for sleeping at read/write (bsc#1051510).
- ALSA: pcm: Use a macro for parameter masks to reduce the needed cast (bsc#1051510).
- ALSA: seq: oss: Fix running status after receiving sysex (git-fixes).
- ALSA: seq: virmidi: Fix running status after receiving sysex (git-fixes).
- ALSA: usb-audio: Add delayed_register option (bsc#1051510).
- ALSA: usb-audio: Add support for MOTU MicroBook IIc (bsc#1051510).
- ALSA: usb-audio: Create a registration quirk for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
- ALSA: usb-audio: Do not create a mixer element with bogus volume range (bsc#1051510).
- ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor (bsc#1051510).
- ALSA: usb-audio: Fix mixer controls' USB interface for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
- ALSA: usb-audio: Inform devices that need delayed registration (bsc#1051510).
- ALSA: usb-audio: Parse source ID of UAC2 effect unit (bsc#1051510).
- ALSA: usb-audio: Rewrite registration quirk handling (bsc#1051510).
- ALSA: usb-midi: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: usx2y: use for_each_pcm_streams() macro (bsc#1051510).
- ALSA: via82xx: Fix endianness annotations (bsc#1051510).
- apei/ghes: Do not delay GHES polling (bsc#1166982).
- ASoC: Intel: atom: Take the drv-&gt;lock mutex before calling sst_send_slot_map() (bsc#1051510).
- ASoC: Intel: mrfld: fix incorrect check on p-&gt;sink (bsc#1051510).
- ASoC: Intel: mrfld: return error codes when an error occurs (bsc#1051510).
- ASoC: jz4740-i2s: Fix divider written at incorrect offset in register (bsc#1051510).
- ASoC: sun8i-codec: Remove unused dev from codec struct (bsc#1051510).
- ath9k: Handle txpower changes even when TPC is disabled (bsc#1051510).
- batman-adv: Avoid spurious warnings from bat_v neigh_cmp implementation (bsc#1051510).
- batman-adv: Do not schedule OGM for disabled interface (bsc#1051510).
- batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs (bsc#1051510).
- binfmt_elf: Do not move brk for INTERP-less ET_EXEC (bsc#1169013).
- binfmt_elf: move brk out of mmap when doing direct loader exec (bsc#1169013).
- blk-mq: Allow blocking queue tag iter callbacks (bsc#1167316).
- block, bfq: fix use-after-free in bfq_idle_slice_timer_body (bsc#1168760).
- block: keep bdi-&gt;io_pages in sync with max_sectors_kb for stacked devices (bsc#1168762).
- Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl (bsc#1051510).
- bnxt_en: Support all variants of the 5750X chip family (bsc#1167216).
- bpf: Explicitly memset some bpf info structures declared on the stack (bsc#1083647).
- bpf: Explicitly memset the bpf_attr structure (bsc#1083647).
- brcmfmac: abort and release host after error (bsc#1111666).
- btrfs: Account for trans_block_rsv in may_commit_transaction (bsc#1165949).
- btrfs: add a flush step for delayed iputs (bsc#1165949).
- btrfs: add assertions for releasing trans handle reservations (bsc#1165949).
- btrfs: add btrfs_delete_ref_head helper (bsc#1165949).
- btrfs: add enospc debug messages for ticket failure (bsc#1165949).
- btrfs: Add enospc_debug printing in metadata_reserve_bytes (bsc#1165949).
- btrfs: add new flushing states for the delayed refs rsv (bsc#1165949).
- btrfs: add space reservation tracepoint for reserved bytes (bsc#1165949).
- btrfs: adjust dirty_metadata_bytes after writeback failure of extent buffer (bsc#1168273).
- btrfs: allow us to use up to 90% of the global rsv for unlink (bsc#1165949).
- btrfs: always reserve our entire size for the global reserve (bsc#1165949).
- btrfs: assert on non-empty delayed iputs (bsc##1165949).
- btrfs: be more explicit about allowed flush states (bsc#1165949).
- btrfs: call btrfs_create_pending_block_groups unconditionally (bsc#1165949).
- btrfs: catch cow on deleting snapshots (bsc#1165949).
- btrfs: change the minimum global reserve size (bsc#1165949).
- btrfs: check if there are free block groups for commit (bsc#1165949).
- btrfs: clean up error handling in btrfs_truncate() (bsc#1165949).
- btrfs: cleanup extent_op handling (bsc#1165949).
- btrfs: cleanup root usage by btrfs_get_alloc_profile (bsc#1165949).
- btrfs: cleanup the target logic in __btrfs_block_rsv_release (bsc#1165949).
- btrfs: clear space cache inode generation always (bsc#1165949).
- btrfs: delayed-ref: pass delayed_refs directly to btrfs_delayed_ref_lock (bsc#1165949).
- btrfs: Do mandatory tree block check before submitting bio (bsc#1168273).
- btrfs: do not account global reserve in can_overcommit (bsc#1165949).
- btrfs: do not allow reservations if we have pending tickets (bsc#1165949).
- btrfs: do not call btrfs_start_delalloc_roots in flushoncommit (bsc#1165949).
- btrfs: do not end the transaction for delayed refs in throttle (bsc#1165949).
- btrfs: do not enospc all tickets on flush failure (bsc#1165949).
- btrfs: do not reset bio-&gt;bi_ops while writing bio (bsc#1168273).
- btrfs: do not run delayed_iputs in commit (bsc##1165949).
- btrfs: do not run delayed refs in the end transaction logic (bsc#1165949).
- btrfs: do not use ctl-&gt;free_space for max_extent_size (bsc##1165949).
- btrfs: do not use global reserve for chunk allocation (bsc#1165949).
- btrfs: drop get_extent from extent_page_data (bsc#1168273).
- btrfs: drop min_size from evict_refill_and_join (bsc##1165949).
- btrfs: drop unused space_info parameter from create_space_info (bsc#1165949).
- btrfs: dump block_rsv details when dumping space info  (bsc#1165949).
- btrfs: export block group accounting helpers (bsc#1165949).
- btrfs: export block_rsv_use_bytes (bsc#1165949).
- btrfs: export btrfs_block_rsv_add_bytes (bsc#1165949).
- btrfs: export __btrfs_block_rsv_release (bsc#1165949).
- btrfs: export space_info_add_*_bytes (bsc#1165949).
- btrfs: export the block group caching helpers (bsc#1165949).
- btrfs: export the caching control helpers (bsc#1165949).
- btrfs: export the excluded extents helpers (bsc#1165949).
- btrfs: extent_io: add proper error handling to lock_extent_buffer_for_io() (bsc#1168273).
- btrfs: extent_io: Handle errors better in btree_write_cache_pages() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_write_full_page() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_write_locked_range() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_writepages() (bsc#1168273).
- btrfs: extent_io: Kill dead condition in extent_write_cache_pages() (bsc#1168273).
- btrfs: extent_io: Kill the forward declaration of flush_write_bio (bsc#1168273).
- btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up (bsc#1168273).
- btrfs: extent-tree: Add lockdep assert when updating space info (bsc#1165949).
- btrfs: extent-tree: Add trace events for space info numbers update (bsc#1165949).
- btrfs: extent-tree: Detect bytes_may_use underflow earlier (bsc#1165949).
- btrfs: extent-tree: Detect bytes_pinned underflow earlier (bsc#1165949).
- btrfs: factor our read/write stage off csum_tree_block into its callers (bsc#1168273).
- btrfs: factor out the ticket flush handling (bsc#1165949).
- btrfs: fix insert_reserved error handling (bsc##1165949).
- btrfs: fix may_commit_transaction to deal with no partial filling (bsc#1165949).
- btrfs: fix missing delayed iputs on unmount (bsc#1165949).
- btrfs: fix qgroup double free after failure to reserve metadata for delalloc (bsc#1165949).
- btrfs: fix race leading to metadata space leak after task received signal (bsc#1165949).
- btrfs: fix truncate throttling (bsc#1165949).
- btrfs: fix unwritten extent buffers and hangs on future writeback attempts (bsc#1168273).
- btrfs: force chunk allocation if our global rsv is larger than metadata (bsc#1165949).
- btrfs: Improve global reserve stealing logic (bsc#1165949).
- btrfs: introduce an evict flushing state (bsc#1165949).
- btrfs: introduce delayed_refs_rsv (bsc#1165949).
- btrfs: loop in inode_rsv_refill (bsc#1165949).
- btrfs: make btrfs_destroy_delayed_refs use btrfs_delayed_ref_lock (bsc#1165949).
- btrfs: make btrfs_destroy_delayed_refs use btrfs_delete_ref_head (bsc#1165949).
- btrfs: make caching_thread use btrfs_find_next_key (bsc#1165949).
- btrfs: make plug in writing meta blocks really work (bsc#1168273).
- btrfs: merge two flush_write_bio helpers (bsc#1168273).
- btrfs: migrate btrfs_trans_release_chunk_metadata (bsc#1165949).
- btrfs: migrate inc/dec_block_group_ro code (bsc#1165949).
- btrfs: migrate nocow and reservation helpers (bsc#1165949).
- btrfs: migrate the alloc_profile helpers (bsc#1165949).
- btrfs: migrate the block group caching code (bsc#1165949).
- btrfs: migrate the block group cleanup code (bsc#1165949).
- btrfs: migrate the block group lookup code (bsc#1165949).
- btrfs: migrate the block group read/creation code (bsc#1165949).
- btrfs: migrate the block group ref counting stuff (bsc#1165949).
- btrfs: migrate the block group removal code (bsc#1165949).
- btrfs: migrate the block group space accounting helpers (bsc#1165949).
- btrfs: migrate the block-rsv code to block-rsv.c (bsc#1165949).
- btrfs: migrate the chunk allocation code (bsc#1165949).
- btrfs: migrate the delalloc space stuff to it's own home (bsc#1165949).
- btrfs: migrate the delayed refs rsv code (bsc#1165949).
- btrfs: migrate the dirty bg writeout code (bsc#1165949).
- btrfs: migrate the global_block_rsv helpers to block-rsv.c (bsc#1165949).
- btrfs: move and export can_overcommit (bsc#1165949).
- btrfs: move basic block_group definitions to their own header (bsc#1165949).
- btrfs: move btrfs_add_free_space out of a header file (bsc#1165949).
- btrfs: move btrfs_block_rsv definitions into it's own header (bsc#1165949).
- btrfs: move btrfs_raid_group values to btrfs_raid_attr table (bsc#1165949).
- btrfs: move btrfs_space_info_add_*_bytes to space-info.c (bsc#1165949).
- btrfs: move dump_space_info to space-info.c (bsc#1165949).
- btrfs: move reserve_metadata_bytes and supporting code to space-info.c (bsc#1165949).
- btrfs: move space_info to space-info.h (bsc#1165949).
- btrfs: move the space_info handling code to space-info.c (bsc#1165949).
- btrfs: move the space info update macro to space-info.h (bsc#1165949).
- btrfs: move the subvolume reservation stuff out of extent-tree.c (bsc#1165949).
- btrfs: only check delayed ref usage in should_end_transaction (bsc#1165949).
- btrfs: only check priority tickets for priority flushing (bsc#1165949).
- btrfs: only free reserved extent if we didn't insert it (bsc##1165949).
- btrfs: only reserve metadata_size for inodes (bsc#1165949).
- btrfs: only track ref_heads in delayed_ref_updates (bsc#1165949).
- btrfs: Output ENOSPC debug info in inc_block_group_ro (bsc#1165949).
- btrfs: pass root to various extent ref mod functions (bsc#1165949).
- btrfs: qgroup: Do not hold qgroup_ioctl_lock in btrfs_qgroup_inherit() (bsc#1165823).
- btrfs: qgroup: Mark qgroup inconsistent if we're inherting snapshot to a new qgroup (bsc#1165823).
- btrfs: refactor block group replication factor calculation to a helper (bsc#1165949).
- btrfs: refactor priority_reclaim_metadata_space (bsc#1165949).
- btrfs: refactor the ticket wakeup code (bsc#1165949).
- btrfs: release metadata before running delayed refs (bsc##1165949).
- btrfs: remove bio_flags which indicates a meta block of log-tree (bsc#1168273).
- btrfs: Remove btrfs_inode::delayed_iput_count (bsc#1165949).
- btrfs: Remove fs_info from do_chunk_alloc (bsc#1165949).
- btrfs: remove orig_bytes from reserve_ticket (bsc#1165949).
- btrfs: Remove redundant argument of flush_space (bsc#1165949).
- btrfs: Remove redundant mirror_num arg (bsc#1168273).
- btrfs: Rename bin_search -&gt; btrfs_bin_search (bsc#1168273).
- btrfs: rename btrfs_space_info_add_old_bytes (bsc#1165949).
- btrfs: rename do_chunk_alloc to btrfs_chunk_alloc (bsc#1165949).
- btrfs: rename the btrfs_calc_*_metadata_size helpers (bsc#1165949).
- btrfs: replace cleaner_delayed_iput_mutex with a waitqueue (bsc#1165949).
- btrfs: reserve delalloc metadata differently (bsc#1165949).
- btrfs: reserve extra space during evict (bsc#1165949).
- btrfs: reset max_extent_size on clear in a bitmap (bsc##1165949).
- btrfs: reset max_extent_size properly (bsc##1165949).
- btrfs: rework btrfs_check_space_for_delayed_refs (bsc#1165949).
- btrfs: rework wake_all_tickets (bsc#1165949).
- btrfs: roll tracepoint into btrfs_space_info_update helper (bsc#1165949).
- btrfs: run btrfs_try_granting_tickets if a priority ticket fails (bsc#1165949).
- btrfs: run delayed iput at unlink time (bsc#1165949).
- btrfs: run delayed iputs before committing (bsc#1165949).
- btrfs: set max_extent_size properly (bsc##1165949).
- btrfs: sink extent_write_full_page tree argument (bsc#1168273).
- btrfs: sink extent_write_locked_range tree parameter (bsc#1168273).
- btrfs: sink flush_fn to extent_write_cache_pages (bsc#1168273).
- btrfs: sink get_extent parameter to extent_fiemap (bsc#1168273).
- btrfs: sink get_extent parameter to extent_readpages (bsc#1168273).
- btrfs: sink get_extent parameter to extent_write_full_page (bsc#1168273).
- btrfs: sink get_extent parameter to extent_write_locked_range (bsc#1168273).
- btrfs: sink get_extent parameter to extent_writepages (bsc#1168273).
- btrfs: sink get_extent parameter to get_extent_skip_holes (bsc#1168273).
- btrfs: sink writepage parameter to extent_write_cache_pages (bsc#1168273).
- btrfs: stop partially refilling tickets when releasing space (bsc#1165949).
- btrfs: stop using block_rsv_release_bytes everywhere (bsc#1165949).
- btrfs: switch to on-stack csum buffer in csum_tree_block (bsc#1168273).
- btrfs: temporarily export btrfs_get_restripe_target (bsc#1165949).
- btrfs: temporarily export fragment_free_space (bsc#1165949).
- btrfs: temporarily export inc_block_group_ro (bsc#1165949).
- btrfs: track DIO bytes in flight (bsc#1165949).
- btrfs: tree-checker: Remove comprehensive root owner check (bsc#1168273).
- btrfs: unexport can_overcommit (bsc#1165949).
- btrfs: unexport the temporary exported functions (bsc#1165949).
- btrfs: unify error handling for ticket flushing (bsc#1165949).
- btrfs: unify extent_page_data type passed as void (bsc#1168273).
- btrfs: update may_commit_transaction to use the delayed refs rsv (bsc#1165949).
- btrfs: use btrfs_try_granting_tickets in update_global_rsv (bsc#1165949).
- btrfs: wait on caching when putting the bg cache (bsc#1165949).
- btrfs: wait on ordered extents on abort cleanup (bsc#1165949).
- btrfs: wakeup cleaner thread when adding delayed iput (bsc#1165949).
- ceph: canonicalize server path in place (bsc#1168443).
- ceph: check POOL_FLAG_FULL/NEARFULL in addition to OSDMAP_FULL/NEARFULL (bsc#1169307).
- ceph: remove the extra slashes in the server path (bsc#1168443).
- cfg80211: check reg_rule for NULL in handle_channel_custom() (bsc#1051510).
- cfg80211: check wiphy driver existence for drvinfo report (bsc#1051510).
- cgroup: memcg: net: do not associate sock with unrelated cgroup (bsc#1167290).
- cifs: ignore cached share root handle closing errors (bsc#1166780).
- clk: imx: Align imx sc clock msg structs to 4 (bsc#1111666).
- clk: imx: Align imx sc clock msg structs to 4 (git-fixes).
- clk: qcom: rcg: Return failure for RCG update (bsc#1051510).
- configfs: Fix bool initialization/comparison (bsc#1051510).
- cpufreq: Register drivers only after CPU devices have been registered (bsc#1051510).
- cpuidle: Do not unset the driver if it is there already (bsc#1051510).
- crypto: arm64/sha-ce - implement export/import (bsc#1051510).
- Crypto: chelsio - Fixes a deadlock between rtnl_lock and uld_mutex (bsc#1111666).
- Crypto: chelsio - Fixes a hang issue during driver registration (bsc#1111666).
- crypto: mxs-dcp - fix scatterlist linearization for hash (bsc#1051510).
- crypto: tcrypt - fix printed skcipher [a]sync mode (bsc#1051510).
- debugfs: add support for more elaborate -&gt;d_fsdata (bsc#1159198  bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198). Prerequisite for bsc#1159198.
- debugfs: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: debugfs_real_fops(): drop __must_hold sparse annotation (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: debugfs_use_start/finish do not exist anymore (bsc#1159198). Prerequisite for bsc#1159198.
- debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198). Prerequisite for bsc#1159198.
- debugfs: fix debugfs_real_fops() build error (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: implement per-file removal protection (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: purge obsolete SRCU based removal protection (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: simplify __debugfs_remove_file() (bsc#1159198). Prerequisite for bsc#1159198.
- Deprecate NR_UNSTABLE_NFS, use NR_WRITEBACK (bsc#1163403).
- dmaengine: ste_dma40: fix unneeded variable warning (bsc#1051510).
- drm/amd/amdgpu: Fix GPR read from debugfs (v2) (bsc#1113956)
- drm/amd/display: Add link_rate quirk for Apple 15' MBP 2017 (bsc#1111666).
- drm/amd/display: Fix wrongly passed static prefix (bsc#1111666).
- drm/amd/display: remove duplicated assignment to grph_obj_type (bsc#1051510).
- drm/amdgpu: fix typo for vcn1 idle check (bsc#1111666).
- drm/bochs: downgrade pci_request_region failure from error to warning (bsc#1051510).
- drm/bridge: dw-hdmi: fix AVI frame colorimetry (bsc#1051510).
- drm_dp_mst_topology: fix broken drm_dp_sideband_parse_remote_dpcd_read() (bsc#1051510).
- drm/drm_dp_mst:remove set but not used variable 'origlen' (bsc#1051510).
- drm/exynos: dsi: fix workaround for the legacy clock name (bsc#1111666).
- drm/exynos: dsi: propagate error value and silence meaningless warning (bsc#1111666).
- drm/lease: fix WARNING in idr_destroy (bsc#1113956)
- drm/msm: Set dma maximum segment size for mdss (bsc#1051510).
- drm/msm: stop abusing dma_map/unmap for cache (bsc#1051510).
- drm/msm: Use the correct dma_sync calls harder (bsc#1051510).
- drm/msm: Use the correct dma_sync calls in msm_gem (bsc#1051510).
- drm/sun4i: dsi: Use NULL to signify 'no panel' (bsc#1111666).
- drm/v3d: Replace wait_for macros to remove use of msleep (bsc#1111666).
- drm/vc4: Fix HDMI mode validation (git-fixes).
- dt-bindings: allow up to four clocks for orion-mdio (bsc#1051510).
- efi: Do not attempt to map RCI2 config table if it does not exist (jsc#ECO-366, bsc#1168367).
- efi: Export Runtime Configuration Interface table to sysfs (jsc#ECO-366, bsc#1168367).
- efi: Fix a race and a buffer overflow while reading efivars via sysfs (bsc#1164893).
- efi: x86: move efi_is_table_address() into arch/x86 (jsc#ECO-366, bsc#1168367).
- ext4: add cond_resched() to __ext4_find_entry() (bsc#1166862).
- ext4: Avoid ENOSPC when avoiding to reuse recently deleted inodes (bsc#1165019).
- ext4: Check for non-zero journal inum in ext4_calculate_overhead (bsc#1167288).
- ext4: do not assume that mmp_nodename/bdevname have NUL (bsc#1166860).
- ext4: fix a data race in EXT4_I(inode)-&gt;i_disksize (bsc#1166861).
- ext4: fix incorrect group count in ext4_fill_super error message (bsc#1168765).
- ext4: fix incorrect inodes per group in error message (bsc#1168764).
- ext4: fix potential race between online resizing and write operations (bsc#1166864).
- ext4: fix potential race between s_flex_groups online resizing and access (bsc#1166867).
- ext4: fix potential race between s_group_info online resizing and access (bsc#1166866).
- ext4: fix race between writepages and enabling EXT4_EXTENTS_FL (bsc#1166870).
- ext4: fix support for inode sizes &gt; 1024 bytes (bsc#1164284).
- ext4: potential crash on allocation error in ext4_alloc_flex_bg_array() (bsc#1166940).
- ext4: rename s_journal_flag_rwsem to s_writepages_rwsem (bsc#1166868).
- ext4: validate the debug_want_extra_isize mount option at parse time (bsc#1163897).
- fat: fix uninit-memory access for partial initialized inode (bsc#1051510).
- fat: work around race with userspace's read via blockdev while mounting (bsc#1051510).
- fbdev/g364fb: Fix build failure (bsc#1051510).
- fbdev: potential information leak in do_fb_ioctl() (bsc#1114279)
- fbmem: Adjust indentation in fb_prepare_logo and fb_blank (bsc#1114279)
- firmware: arm_sdei: fix double-lock on hibernate with shared events (bsc#1111666).
- firmware: arm_sdei: fix possible double-lock on hibernate error path (bsc#1111666).
- ftrace/kprobe: Show the maxactive number on kprobe_events (git-fixes).
- HID: apple: Add support for recent firmware on Magic Keyboards (bsc#1051510).
- i2c: hix5hd2: add missed clk_disable_unprepare in remove (bsc#1051510).
- i2c: jz4780: silence log flood on txabrt (bsc#1051510).
- IB/hfi1: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911).
- ibmvfc: do not send implicit logouts prior to NPIV login (bsc#1169625 ltc#184611).
- iio: gyro: adis16136: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis16400: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis16480: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: magnetometer: ak8974: Fix negative raw values in sysfs (bsc#1051510).
- iio: potentiostat: lmp9100: fix iio_triggered_buffer_{predisable,postenable} positions (bsc#1051510).
- Input: add safety guards to input_set_keycode() (bsc#1168075).
- Input: avoid BIT() macro usage in the serio.h UAPI header (bsc#1051510).
- Input: raydium_i2c_ts - fix error codes in raydium_i2c_boot_trigger() (bsc#1051510).
- Input: synaptics - enable RMI on HP Envy 13-ad105ng (bsc#1051510).
- intel_th: Fix user-visible error codes (bsc#1051510).
- intel_th: pci: Add Elkhart Lake CPU support (bsc#1051510).
- iommu/amd: Fix the configuration of GCR3 table root pointer (bsc#1169057).
- ipmi: fix hung processes in __get_guid() (bsc#1111666).
- ipmi: fix hung processes in __get_guid() (git-fixes).
- ipmi:ssif: Handle a possible NULL pointer reference (bsc#1051510).
- ipv6: Fix nlmsg_flags when splitting a multipath route (networking-stable-20_03_01).
- ipv6: Fix route replacement with dev-only route (networking-stable-20_03_01).
- ipvlan: do not add hardware address of master to its unicast filter list (bsc#1137325).
- irqchip/bcm2835: Quiesce IRQs left enabled by bootloader (bsc#1051510).
- irqdomain: Fix a memory leak in irq_domain_push_irq() (bsc#1051510).
- kABI: fixes for debugfs per-file removal protection backports (bsc#1159198 bsc#1109911).
- kABI: restore debugfs_remove_recursive() (bsc#1159198).
- kABI workaround for pcie_port_bus_type change (bsc#1161561).
- KVM: s390: vsie: Fix possible race when shadowing region 3 tables (git-fixes).
- KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks (git-fixes).
- libceph: fix alloc_msg_with_page_vector() memory leaks (bsc#1169308).
- libfs: fix infoleak in simple_attr_read() (bsc#1168881).
- lpfc: add support for translating an RSCN rcv into a discovery rescan (bsc#1164777 bsc#1164780 bsc#1165211).
- lpfc: add support to generate RSCN events for nport (bsc#1164777 bsc#1164780 bsc#1165211).
- mac80211: consider more elements in parsing CRC (bsc#1051510).
- mac80211: Do not send mesh HWMP PREQ if HWMP is disabled (bsc#1051510).
- mac80211: free peer keys before vif down in mesh (bsc#1051510).
- mac80211: mesh: fix RCU warning (bsc#1051510).
- mac80211: only warn once on chanctx_conf being NULL (bsc#1051510).
- mac80211: rx: avoid RCU list traversal under mutex (bsc#1051510).
- macsec: add missing attribute validation for port (bsc#1051510).
- macsec: fix refcnt leak in module exit routine (bsc#1051510).
- media: dib0700: fix rc endpoint lookup (bsc#1051510).
- media: flexcop-usb: fix endpoint sanity check (git-fixes).
- media: go7007: Fix URB type for interrupt handling (bsc#1051510).
- media: ov519: add missing endpoint sanity checks (bsc#1168829).
- media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support (bsc#1051510).
- media: ov6650: Fix some format attributes not under control (bsc#1051510).
- media: ov6650: Fix stored crop rectangle not in sync with hardware (bsc#1051510).
- media: ov6650: Fix stored frame format not in sync with hardware (bsc#1051510).
- media: stv06xx: add missing descriptor sanity checks (bsc#1168854).
- media: tda10071: fix unsigned sign extension overflow (bsc#1051510).
- media: usbtv: fix control-message timeouts (bsc#1051510).
- media: v4l2-core: fix entity initialization in device_register_subdev (bsc#1051510).
- media: vsp1: tidyup VI6_HGT_LBn_H() macro (bsc#1051510).
- media: xirlink_cit: add missing descriptor sanity checks (bsc#1051510).
- mfd: dln2: Fix sanity checking for endpoints (bsc#1051510).
- misc: pci_endpoint_test: Fix to support &gt; 10 pci-endpoint-test devices (bsc#1051510).
- mmc: sdhci-of-at91: fix cd-gpios for SAMA5D2 (bsc#1051510).
- mm/filemap.c: do not initiate writeback if mapping has no dirty pages (bsc#1168884).
- mm/memory_hotplug.c: only respect mem= parameter during boot stage (bsc#1065600).
- mm: replace PF_LESS_THROTTLE with PF_LOCAL_THROTTLE (bsc#1163403).
- mwifiex: set needed_headroom, not hard_header_len (bsc#1051510).
- net: dsa: bcm_sf2: Fix overflow checks (git-fixes).
- net: dsa: tag_qca: Make sure there is headroom for tag (networking-stable-20_02_19).
- net: ena: Add PCI shutdown handler to allow safe kexec (bsc#1167421, bsc#1167423).
- net: fib_rules: Correctly set table field when table number exceeds 8 bits (networking-stable-20_03_01).
- netfilter: conntrack: sctp: use distinct states for new SCTP connections (bsc#1159199).
- net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL (bsc#1051510).
- net: nfc: fix bounds checking bugs on 'pipe' (bsc#1051510).
- net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before accessing PHY registers (bsc#1051510).
- net: phy: restore mdio regs in the iproc mdio driver (networking-stable-20_03_01).
- net/sched: flower: add missing validation of TCA_FLOWER_FLAGS (networking-stable-20_02_19).
- net_sched: keep alloc_hash updated after hash allocation (git-fixes).
- net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS (networking-stable-20_02_19).
- net/smc: fix leak of kernel memory to user space (networking-stable-20_02_19).
- NFC: fdp: Fix a signedness bug in fdp_nci_send_patch() (bsc#1051510).
- nfc: pn544: Fix occasional HW initialization failure (networking-stable-20_03_01).
- NFS: send state management on a single connection (bsc#1167005).
- nvme: fix a possible deadlock when passthru commands sent to a multipath device (bsc#1158983).
- nvme: fix controller removal race with scan work (bsc#1158983).
- nvme-multipath: also check for a disabled path if there is a single sibling (bsc#1158983).
- nvme-multipath: do not select namespaces which are about to be removed (bsc#1158983).
- nvme-multipath: factor out a nvme_path_is_disabled helper (bsc#1158983).
- nvme-multipath: fix crash in nvme_mpath_clear_ctrl_paths (bsc#1158983).
- nvme-multipath: fix possible io hang after ctrl reconnect (bsc#1158983).
- nvme-multipath: fix possible I/O hang when paths are updated (bsc#1158983).
- nvme-multipath: remove unused groups_only mode in ana log (bsc#1158983).
- nvme-multipath: round-robin I/O policy (bsc#1158983).
- objtool: Add is_static_jump() helper (bsc#1169514).
- objtool: Add relocation check for alternative sections (bsc#1169514).
- OMAP: DSS2: remove non-zero check on variable r (bsc#1114279)
- partitions/efi: Fix partition name parsing in GUID partition entry (bsc#1168763).
- PCI/AER: Factor message prefixes with dev_fmt() (bsc#1161561).
- PCI/AER: Log which device prevents error recovery (bsc#1161561).
- PCI/AER: Remove ERR_FATAL code from ERR_NONFATAL path (bsc#1161561).
- PCI/ASPM: Clear the correct bits when enabling L1 substates (bsc#1051510).
- PCI: endpoint: Fix clearing start entry in configfs (bsc#1051510).
- PCI/ERR: Always report current recovery status for udev (bsc#1161561).
- PCI/ERR: Handle fatal error recovery (bsc#1161561).
- PCI/ERR: Remove duplicated include from err.c (bsc#1161561).
- PCI/ERR: Simplify broadcast callouts (bsc#1161561).
- PCI: pciehp: Fix MSI interrupt race (bsc#1159037).
- PCI: portdrv: Initialize service drivers directly (bsc#1161561).
- PCI/portdrv: Remove pcie_port_bus_type link order dependency (bsc#1161561).
- PCI: Simplify disconnected marking (bsc#1161561).
- PCI/switchtec: Fix init_completion race condition with poll_wait() (bsc#1051510).
- PCI: Unify device inaccessible (bsc#1161561).
- perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag (bsc#1114279).
- perf: qcom_l2: fix column exclusion check (git-fixes).
- pinctrl: core: Remove extra kref_get which blocks hogs being freed (bsc#1051510).
- platform/x86: pmc_atom: Add Lex 2I385SW to critclk_systems DMI table (bsc#1051510).
- PM: core: Fix handling of devices deleted during system-wide resume (git-fixes).
- powerpc/64: mark start_here_multiplatform as __ref (bsc#1148868).
- powerpc/64s: Fix section mismatch warnings from boot code (bsc#1148868).
- powerpc/64/tm: Do not let userspace set regs-&gt;trap via sigreturn (bsc#1118338 ltc#173734).
- powerpc/hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE entries (bsc#1065729).
- powerpc/kprobes: Ignore traps that happened in real mode (bsc#1065729).
- powerpc/mm: Fix section mismatch warning in stop_machine_change_mapping() (bsc#1148868).
- powerpc/pseries/ddw: Extend upper limit for huge DMA window for persistent memory (bsc#1142685 ltc#179509).
- powerpc/pseries/iommu: Fix set but not used values (bsc#1142685 ltc#179509).
- powerpc/pseries/iommu: Use memory@ nodes in max RAM address calculation (bsc#1142685 ltc#179509).
- powerpc/vmlinux.lds: Explicitly retain .gnu.hash (bsc#1148868).
- powerpc/xive: Replace msleep(x) with msleep(OPAL_BUSY_DELAY_MS) (bsc#1085030).
- powerpc/xive: Use XIVE_BAD_IRQ instead of zero to catch non configured IPIs (bsc#1085030).
- pwm: bcm2835: Dynamically allocate base (bsc#1051510).
- pwm: meson: Fix confusing indentation (bsc#1051510).
- pwm: pca9685: Fix PWM/GPIO inter-operation (bsc#1051510).
- pwm: rcar: Fix late Runtime PM enablement (bsc#1051510).
- pwm: renesas-tpu: Fix late Runtime PM enablement (bsc#1051510).
- pxa168fb: fix release function mismatch in probe failure (bsc#1051510).
- qede: Fix race between rdma destroy workqueue and link change event (networking-stable-20_03_01).
- qmi_wwan: unconditionally reject 2 ep interfaces (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (git-fixes).
- s390/cio: avoid duplicated 'ADD' uevents (git-fixes).
- s390/cio: generate delayed uevent for vfio-ccw subchannels (git-fixes).
- s390/cpuinfo: fix wrong output when CPU0 is offline (git-fixes).
- s390/diag: fix display of diagnose call statistics (git-fixes).
- s390/gmap: return proper error code on ksm unsharing (git-fixes).
- s390/mm: fix dynamic pagetable upgrade for hugetlbfs (bsc#1165182 LTC#184102).
- s390/qeth: cancel RX reclaim work earlier (git-fixes).
- s390/qeth: do not return -ENOTSUPP to userspace (git-fixes).
- s390/qeth: do not warn for napi with 0 budget (git-fixes).
- s390/qeth: fix off-by-one in RX copybreak check (git-fixes).
- s390/qeth: fix potential deadlock on workqueue flush (bsc#1165185 LTC#184108).
- s390/qeth: fix promiscuous mode after reset (git-fixes).
- s390/qeth: fix qdio teardown after early init error (git-fixes).
- s390/qeth: handle error due to unsupported transport mode (git-fixes).
- s390/qeth: handle error when backing RX buffer (git-fixes).
- s390/qeth: lock the card while changing its hsuid (git-fixes).
- s390/qeth: support net namespaces for L3 devices (git-fixes).
- s390/time: Fix clk type in get_tod_clock (git-fixes).
- scsi: core: avoid repetitive logging of device offline messages (bsc#1145929).
- scsi: core: kABI fix offline_already (bsc#1145929).
- scsi: fc: Update Descriptor definition and add RDF and Link Integrity FPINs (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551). Refresh sorted patches.
- scsi: lpfc: add RDF registration and Link Integrity FPIN logging (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Change default SCSI LUN QD to 64 (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654).
- scsi: lpfc: Clean up hba max_lun_queue_depth checks (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Copyright updates for 12.6.0.4 patches (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix broken Credit Recovery after driver load (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix compiler warning on frame size (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix coverity errors in fmdi attribute handling (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix crash after handling a pci error (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix disablement of FC-AL on lpe35000 models (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix driver nvme rescan logging (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix erroneous cpu limit of 128 on I/O statistics (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix Fabric hostname registration if system hostname changes (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix improper flag check for IO type (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix incomplete NVME discovery when target (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lockdep error - register non-static key (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lpfc_io_buf resource leak in lpfc_get_scsi_buf_s4 error path (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lpfc overwrite of sg_cnt field in nvmefc_tgt_fcp_req (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix MDS Latency Diagnostics Err-drop rates (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix missing check for CSF in Write Object Mbox Rsp (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix ras_log via debugfs (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix registration of ELS type support in fdmi (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix release of hwq to clear the eq relationship (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix: Rework setting of fdmi symbolic node name registration (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix RQ buffer leakage when no IOCBs available (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix scsi host template for SLI3 vports (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: fix spelling mistake 'Notication' -&gt; 'Notification' (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: fix spelling mistakes of asynchronous (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix unmap of dpp bars affecting next driver load (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix update of wq consumer index in lpfc_sli4_wq_release (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Make debugfs ktime stats generic for NVME and SCSI (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Make lpfc_defer_acc_rsp static (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Remove handler for obsolete ELS - Read Port Status (RPS) (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Remove prototype FIPS/DSS options from SLI-3 (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Update lpfc version to 12.8.0.0 (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (bsc#1157424).
- scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point (git-fixes).
- sctp: move the format error check out of __sctp_sf_do_9_1_abort (networking-stable-20_03_01).
- serdev: ttyport: restore client ops on deregistration (bsc#1051510).
- staging: ccree: use signal safe completion wait (git-fixes).
- staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table (bsc#1051510).
- staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi (bsc#1051510).
- staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb (bsc#1051510).
- staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback (bsc#1051510).
- SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202).
- swiotlb: do not panic on mapping failures (bsc#1162171).
- swiotlb: remove the overflow buffer (bsc#1162171).
- thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n (bsc#1051510).
- tpm: ibmvtpm: Wait for buffer to be set before proceeding (bsc#1065729).
- tty: evh_bytechan: Fix out of bounds accesses (bsc#1051510).
- tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode (bsc#1051510).
- tty: serial: imx: setup the correct sg entry for tx dma (bsc#1051510).
- USB: audio-v2: Add uac2_effect_unit_descriptor definition (bsc#1051510).
- USB: cdc-acm: fix rounding error in TIOCSSERIAL (git-fixes).
- USB: core: hub: do error out if usb_autopm_get_interface() fails (git-fixes).
- USB: core: port: do error out if usb_autopm_get_interface() fails (git-fixes).
- USB: Disable LPM on WD19's Realtek Hub (git-fixes).
- USB: dwc2: Fix in ISOC request length checking (git-fixes).
- USB: Fix novation SourceControl XL after suspend (git-fixes).
- USB: gadget: composite: Fix bMaxPower for SuperSpeedPlus (git-fixes).
- USB: gadget: f_fs: Fix use after free issue as part of queue failure (bsc#1051510).
- USB: host: xhci-plat: add a shutdown (git-fixes).
- USB: hub: Do not record a connect-change event during reset-resume (git-fixes).
- USB: misc: iowarrior: add support for 2 OEMed devices (git-fixes).
- USB: misc: iowarrior: add support for the 100 device (git-fixes).
- USB: misc: iowarrior: add support for the 28 and 28L devices (git-fixes).
- USB: musb: Disable pullup at init (git-fixes).
- USB: musb: fix crash with highmen PIO and usbmon (bsc#1051510).
- USB: quirks: add NO_LPM quirk for Logitech Screen Share (git-fixes).
- USB: quirks: add NO_LPM quirk for RTL8153 based ethernet adapters (git-fixes).
- USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback (bsc#1051510).
- USB: serial: option: add ME910G1 ECM composition 0x110b (git-fixes).
- USB: serial: pl2303: add device-id for HP LD381 (git-fixes).
- USB: storage: Add quirk for Samsung Fit flash (git-fixes).
- USB: uas: fix a plug &amp; unplug racing (git-fixes).
- USB: xhci: apply XHCI_SUSPEND_DELAY to AMD XHCI controller 1022:145c (git-fixes).
- virtio-blk: improve virtqueue error to BLK_STS (bsc#1167627).
- virtio_ring: fix unmap of indirect descriptors (bsc#1162171).
- x86/mce: Fix logic and comments around MSR_PPIN_CTL (bsc#1114279).
- x86/pkeys: Manually set X86_FEATURE_OSPKE to preserve existing changes (bsc#1114279).
- x86/xen: fix booting 32-bit pv guest (bsc#1071995).
- x86/xen: Make the boot CPU idle task reliable (bsc#1071995).
- x86/xen: Make the secondary CPU idle tasks reliable (bsc#1071995).
- xen/blkfront: fix memory allocation flags in blkfront_setup_indirect() (bsc#1168486).
- xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms (git-fixes).
- xhci: Do not open code __print_symbolic() in xhci trace events (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-29"/>
	<updated date="2020-04-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109911">SUSE bug 1109911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118338">SUSE bug 1118338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120386">SUSE bug 1120386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137325">SUSE bug 1137325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145051">SUSE bug 1145051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145929">SUSE bug 1145929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158983">SUSE bug 1158983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159037">SUSE bug 1159037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159198">SUSE bug 1159198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159199">SUSE bug 1159199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161561">SUSE bug 1161561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161951">SUSE bug 1161951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162171">SUSE bug 1162171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163403">SUSE bug 1163403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163897">SUSE bug 1163897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164284">SUSE bug 1164284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164777">SUSE bug 1164777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164893">SUSE bug 1164893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165019">SUSE bug 1165019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165182">SUSE bug 1165182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165185">SUSE bug 1165185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165211">SUSE bug 1165211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165823">SUSE bug 1165823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165949">SUSE bug 1165949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166780">SUSE bug 1166780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166860">SUSE bug 1166860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166861">SUSE bug 1166861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166862">SUSE bug 1166862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166864">SUSE bug 1166864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166866">SUSE bug 1166866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166867">SUSE bug 1166867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166868">SUSE bug 1166868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166870">SUSE bug 1166870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166940">SUSE bug 1166940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166982">SUSE bug 1166982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167005">SUSE bug 1167005</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167216">SUSE bug 1167216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167288">SUSE bug 1167288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167290">SUSE bug 1167290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167316">SUSE bug 1167316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167421">SUSE bug 1167421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167423">SUSE bug 1167423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167627">SUSE bug 1167627</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167629">SUSE bug 1167629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168075">SUSE bug 1168075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168202">SUSE bug 1168202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168273">SUSE bug 1168273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168276">SUSE bug 1168276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168295">SUSE bug 1168295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168367">SUSE bug 1168367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168424">SUSE bug 1168424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168443">SUSE bug 1168443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168486">SUSE bug 1168486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168552">SUSE bug 1168552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168760">SUSE bug 1168760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168762">SUSE bug 1168762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168763">SUSE bug 1168763</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168764">SUSE bug 1168764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168765">SUSE bug 1168765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168829">SUSE bug 1168829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168854">SUSE bug 1168854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168881">SUSE bug 1168881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168884">SUSE bug 1168884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168952">SUSE bug 1168952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169013">SUSE bug 1169013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169057">SUSE bug 1169057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169307">SUSE bug 1169307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169308">SUSE bug 1169308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169390">SUSE bug 1169390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169625">SUSE bug 1169625</bugzilla>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19770/">CVE-2019-19770</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3701/">CVE-2019-3701</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9458/">CVE-2019-9458</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10942/">CVE-2020-10942</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11494/">CVE-2020-11494</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11669/">CVE-2020-11669</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8834/">CVE-2020-8834</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491985" comment="kernel-default-4.12.14-197.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491986" comment="kernel-default-base-4.12.14-197.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491987" comment="kernel-default-devel-4.12.14-197.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491988" comment="kernel-default-man-4.12.14-197.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491989" comment="kernel-devel-4.12.14-197.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491990" comment="kernel-macros-4.12.14-197.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137834" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1170595" ref_url="https://bugzilla.suse.com/1170595" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11651" ref_url="https://www.suse.com/security/cve/CVE-2020-11651/" source="CVE"/>
		<reference ref_id="CVE-2020-11652" ref_url="https://www.suse.com/security/cve/CVE-2020-11652/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006766.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Fix CVE-2020-11651 and CVE-2020-11652 (bsc#1170595)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-29"/>
	<updated date="2020-04-29"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1170595">SUSE bug 1170595</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11651/">CVE-2020-11651</cve>
	<cve impact="critical" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11652/">CVE-2020-11652</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491991" comment="python3-salt-2019.2.0-6.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491992" comment="salt-2019.2.0-6.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491993" comment="salt-bash-completion-2019.2.0-6.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491994" comment="salt-doc-2019.2.0-6.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491995" comment="salt-minion-2019.2.0-6.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491996" comment="salt-zsh-completion-2019.2.0-6.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137835" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1170643" ref_url="https://bugzilla.suse.com/1170643" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-3899" ref_url="https://www.suse.com/security/cve/CVE-2020-3899/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006786.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Security issue fixed:

- CVE-2020-3899: Fixed a memory consumption issue that could have led to remote code execution (bsc#1170643).

Non-security issues fixed:

- Update to version 2.28.2 (bsc#1170643):
  + Fix excessive CPU usage due to GdkFrameClock not being stopped.
  + Fix UI process crash when EGL_WL_bind_wayland_display extension
    is not available.
  + Fix position of select popup menus in X11.
  + Fix playing of Youtube 'live stream'/H264 URLs.
  + Fix a crash under X11 when cairo uses xcb.
  + Fix several crashes and rendering issues.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-06"/>
	<updated date="2020-05-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1170643">SUSE bug 1170643</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3899/">CVE-2020-3899</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491997" comment="libjavascriptcoregtk-4_0-18-2.28.2-3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491998" comment="libwebkit2gtk-4_0-37-2.28.2-3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491999" comment="libwebkit2gtk3-lang-2.28.2-3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492000" comment="webkit2gtk-4_0-injected-bundles-2.28.2-3.54.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137836" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1145774" ref_url="https://bugzilla.suse.com/1145774" source="BUGZILLA"/>
		<reference ref_id="1151850" ref_url="https://bugzilla.suse.com/1151850" source="BUGZILLA"/>
		<reference ref_id="1152649" ref_url="https://bugzilla.suse.com/1152649" source="BUGZILLA"/>
		<reference ref_id="1154093" ref_url="https://bugzilla.suse.com/1154093" source="BUGZILLA"/>
		<reference ref_id="1157490" ref_url="https://bugzilla.suse.com/1157490" source="BUGZILLA"/>
		<reference ref_id="1161883" ref_url="https://bugzilla.suse.com/1161883" source="BUGZILLA"/>
		<reference ref_id="1162160" ref_url="https://bugzilla.suse.com/1162160" source="BUGZILLA"/>
		<reference ref_id="1167007" ref_url="https://bugzilla.suse.com/1167007" source="BUGZILLA"/>
		<reference ref_id="1168683" ref_url="https://bugzilla.suse.com/1168683" source="BUGZILLA"/>
		<reference ref_id="1170765" ref_url="https://bugzilla.suse.com/1170765" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10703" ref_url="https://www.suse.com/security/cve/CVE-2020-10703/" source="CVE"/>
		<reference ref_id="CVE-2020-12430" ref_url="https://www.suse.com/security/cve/CVE-2020-12430/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006795.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:

Security issues fixed:

- CVE-2020-10703: Fixed a daemon crash caused by pools without target paths (bsc#1168683).
- CVE-2020-12430: Fixed a memory leak in qemuDomainGetStatsIOThread (bsc#1170765).

Non-security issues fixed:

- Support setting credit2 scheduler parameters for xen (bsc#1162160).
- Add SLE 15 and SLE 12 service packs support to 'libvirtd' (bsc#1154093).
- Add support boot from 'vfio-ccw'and 'mdev' devices (jsc#SLE-5826, FATE#327355, bsc#1152649).
- Fix lock manager lock ordering (bsc#1145774).
- Do not define known no-op features. (bsc#1151850).
- Enable use of newer libxl APIs for retrieving memory statistics (bsc#1157490, bsc#1167007).
- Create multipath targets for qemu PR (bsc#1161883).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-06"/>
	<updated date="2020-05-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1145774">SUSE bug 1145774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151850">SUSE bug 1151850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152649">SUSE bug 1152649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154093">SUSE bug 1154093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157490">SUSE bug 1157490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161883">SUSE bug 1161883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162160">SUSE bug 1162160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167007">SUSE bug 1167007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168683">SUSE bug 1168683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170765">SUSE bug 1170765</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10703/">CVE-2020-10703</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12430/">CVE-2020-12430</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492001" comment="libvirt-libs-5.1.0-8.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137837" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1170771" ref_url="https://bugzilla.suse.com/1170771" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12243" ref_url="https://www.suse.com/security/cve/CVE-2020-12243/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006805.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-07"/>
	<updated date="2020-05-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1170771">SUSE bug 1170771</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12243/">CVE-2020-12243</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492002" comment="libldap-2_4-2-2.4.46-9.28.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492003" comment="libldap-2_4-2-32bit-2.4.46-9.28.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492004" comment="libldap-data-2.4.46-9.28.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492005" comment="openldap2-client-2.4.46-9.28.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492006" comment="openldap2-devel-2.4.46-9.28.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492007" comment="openldap2-devel-static-2.4.46-9.28.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492008" comment="openldap2-ppolicy-check-password-1.2-9.28.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137838" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1170603" ref_url="https://bugzilla.suse.com/1170603" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12268" ref_url="https://www.suse.com/security/cve/CVE-2020-12268/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006802.html" source="SUSE-SU"/>
		<description>
This update for ghostscript to version 9.52 fixes the following issues:

- CVE-2020-12268: Fixed a heap-based buffer overflow in jbig2_image_compose (bsc#1170603).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-07"/>
	<updated date="2020-05-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1170603">SUSE bug 1170603</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-12268/">CVE-2020-12268</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492009" comment="ghostscript-9.52-3.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492010" comment="ghostscript-devel-9.52-3.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492011" comment="ghostscript-x11-9.52-3.27.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137839" version="1" class="patch">
	<metadata>
		<title>Security update for libssh (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1158095" ref_url="https://bugzilla.suse.com/1158095" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14889" ref_url="https://www.suse.com/security/cve/CVE-2019-14889/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0129-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006383.html" source="SUSE-SU"/>
		<description>
This update for libssh fixes the following issues:

- CVE-2019-14889: Fixed an unwanted command execution in scp caused by unsanitized location (bsc#1158095).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-20"/>
	<updated date="2020-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1158095">SUSE bug 1158095</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14889/">CVE-2019-14889</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492012" comment="libssh-devel-0.8.7-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492013" comment="libssh4-0.8.7-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492014" comment="libssh4-32bit-0.8.7-10.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137840" version="1" class="patch">
	<metadata>
		<title>Security update for file (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1154661" ref_url="https://bugzilla.suse.com/1154661" source="BUGZILLA"/>
		<reference ref_id="1169512" ref_url="https://bugzilla.suse.com/1169512" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18218" ref_url="https://www.suse.com/security/cve/CVE-2019-18218/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006824.html" source="SUSE-SU"/>
		<description>
This update for file fixes the following issues:

Security issues fixed:

- CVE-2019-18218: Fixed a heap-based buffer overflow in cdf_read_property_info() (bsc#1154661).

Non-security issue fixed:

- Fixed broken '--help' output (bsc#1169512).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-18"/>
	<updated date="2020-05-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1154661">SUSE bug 1154661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169512">SUSE bug 1169512</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18218/">CVE-2019-18218</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492015" comment="file-5.32-7.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492016" comment="file-devel-5.32-7.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492017" comment="file-magic-5.32-7.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492018" comment="libmagic1-5.32-7.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492019" comment="libmagic1-32bit-5.32-7.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137841" version="1" class="patch">
	<metadata>
		<title>Security update for autoyast2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109310" ref_url="https://bugzilla.suse.com/1109310" source="BUGZILLA"/>
		<reference ref_id="1133045" ref_url="https://bugzilla.suse.com/1133045" source="BUGZILLA"/>
		<reference ref_id="1140711" ref_url="https://bugzilla.suse.com/1140711" source="BUGZILLA"/>
		<reference ref_id="1164105" ref_url="https://bugzilla.suse.com/1164105" source="BUGZILLA"/>
		<reference ref_id="1168123" ref_url="https://bugzilla.suse.com/1168123" source="BUGZILLA"/>
		<reference ref_id="1168281" ref_url="https://bugzilla.suse.com/1168281" source="BUGZILLA"/>
		<reference ref_id="1170082" ref_url="https://bugzilla.suse.com/1170082" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18905" ref_url="https://www.suse.com/security/cve/CVE-2019-18905/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006831.html" source="SUSE-SU"/>
		<description>
This update for autoyast2 to version 4.1.15 fixes the following issues:

Security issue fixed:

- CVE-2019-18905: Removed all '--gpg-auto-import-keys' options from zypper commands (bsc#1140711).

Non-security issue fixed:

- Fix desktop files updating some icons and groups (bsc#1168123).
- Restored some missing icons (bsc#1168123, bsc#1109310 and bsc#1168281).
- Service for init scripts: Try to start 'network-online.target' 
  before starting the autoyast init scripts in order to get a working
  network (bsc#1164105).
- Always re-probe storage after pre-scripts (bsc#1170082, bsc#1133045).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-18"/>
	<updated date="2020-05-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1109310">SUSE bug 1109310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133045">SUSE bug 1133045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140711">SUSE bug 1140711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164105">SUSE bug 1164105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168123">SUSE bug 1168123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168281">SUSE bug 1168281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170082">SUSE bug 1170082</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-18905/">CVE-2019-18905</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492020" comment="autoyast2-4.1.15-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492021" comment="autoyast2-installation-4.1.15-3.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137842" version="1" class="patch">
	<metadata>
		<title>Security update for libvpx (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1166066" ref_url="https://bugzilla.suse.com/1166066" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0034" ref_url="https://www.suse.com/security/cve/CVE-2020-0034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1297-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006827.html" source="SUSE-SU"/>
		<description>
This update for libvpx fixes the following issues:

- CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames (bsc#1166066).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-18"/>
	<updated date="2020-05-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1166066">SUSE bug 1166066</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-0034/">CVE-2020-0034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492022" comment="libvpx4-1.6.1-6.6.8 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137843" version="1" class="patch">
	<metadata>
		<title>Security update for libbsd (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160551" ref_url="https://bugzilla.suse.com/1160551" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20367" ref_url="https://www.suse.com/security/cve/CVE-2019-20367/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1298-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006825.html" source="SUSE-SU"/>
		<description>
This update for libbsd fixes the following issues:

- CVE-2019-20367: Fixed an out-of-bounds read during a comparison for a symbol names from the string table (bsc#1160551).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-18"/>
	<updated date="2020-05-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1160551">SUSE bug 1160551</bugzilla>
	<cve impact="moderate" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20367/">CVE-2019-20367</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492023" comment="libbsd-devel-0.8.7-3.3.17 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492024" comment="libbsd0-0.8.7-3.3.17 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137844" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159928" ref_url="https://bugzilla.suse.com/1159928" source="BUGZILLA"/>
		<reference ref_id="1161517" ref_url="https://bugzilla.suse.com/1161517" source="BUGZILLA"/>
		<reference ref_id="1161521" ref_url="https://bugzilla.suse.com/1161521" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19956" ref_url="https://www.suse.com/security/cve/CVE-2019-19956/" source="CVE"/>
		<reference ref_id="CVE-2019-20388" ref_url="https://www.suse.com/security/cve/CVE-2019-20388/" source="CVE"/>
		<reference ref_id="CVE-2020-7595" ref_url="https://www.suse.com/security/cve/CVE-2020-7595/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006823.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

- CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521).
- CVE-2019-19956: Fixed a memory leak (bsc#1159928).
- CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-18"/>
	<updated date="2020-05-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1159928">SUSE bug 1159928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161517">SUSE bug 1161517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161521">SUSE bug 1161521</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19956/">CVE-2019-19956</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20388/">CVE-2019-20388</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7595/">CVE-2020-7595</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492025" comment="libxml2-2-2.9.7-3.19.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492026" comment="libxml2-2-32bit-2.9.7-3.19.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492027" comment="libxml2-devel-2.9.7-3.19.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492028" comment="libxml2-tools-2.9.7-3.19.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492029" comment="python3-libxml2-python-2.9.7-3.19.10 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137845" version="1" class="patch">
	<metadata>
		<title>Security update for gstreamer-plugins-base (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1133375" ref_url="https://bugzilla.suse.com/1133375" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9928" ref_url="https://www.suse.com/security/cve/CVE-2019-9928/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006832.html" source="SUSE-SU"/>
		<description>
This update for gstreamer-plugins-base fixes the following issue:

Security issue fixed:

- CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser (bsc#1133375).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-18"/>
	<updated date="2020-05-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1133375">SUSE bug 1133375</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9928/">CVE-2019-9928</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492030" comment="gstreamer-plugins-base-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492031" comment="gstreamer-plugins-base-lang-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492032" comment="libgstallocators-1_0-0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492033" comment="libgstapp-1_0-0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492034" comment="libgstaudio-1_0-0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492035" comment="libgstfft-1_0-0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492036" comment="libgstpbutils-1_0-0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492037" comment="libgstriff-1_0-0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492038" comment="libgstrtp-1_0-0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492039" comment="libgstrtsp-1_0-0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492040" comment="libgstsdp-1_0-0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492041" comment="libgsttag-1_0-0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492042" comment="libgstvideo-1_0-0-1.12.5-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137846" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1155094" ref_url="https://bugzilla.suse.com/1155094" source="BUGZILLA"/>
		<reference ref_id="1162825" ref_url="https://bugzilla.suse.com/1162825" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18348" ref_url="https://www.suse.com/security/cve/CVE-2019-18348/" source="CVE"/>
		<reference ref_id="CVE-2019-9674" ref_url="https://www.suse.com/security/cve/CVE-2019-9674/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006835.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

Security issues fixed:

- CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen().
  Now an InvalidURL exception is raised (bsc#1155094).
- CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-19"/>
	<updated date="2020-05-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1155094">SUSE bug 1155094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162825">SUSE bug 1162825</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-18348/">CVE-2019-18348</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9674/">CVE-2019-9674</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492043" comment="libpython2_7-1_0-2.7.17-7.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492044" comment="python-2.7.17-7.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492045" comment="python-base-2.7.17-7.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137847" version="1" class="patch">
	<metadata>
		<title>Security update for freetype2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1079603" ref_url="https://bugzilla.suse.com/1079603" source="BUGZILLA"/>
		<reference ref_id="1091109" ref_url="https://bugzilla.suse.com/1091109" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-6942" ref_url="https://www.suse.com/security/cve/CVE-2018-6942/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006839.html" source="SUSE-SU"/>
		<description>
This update for freetype2 to version 2.10.1 fixes the following issues:

Security issue fixed:

- CVE-2018-6942: Fixed a NULL pointer dereference within ttinerp.c (bsc#1079603).

Non-security issues fixed:

- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring

- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.

- Enable subpixel rendering with infinality config:

- Re-enable freetype-config, there is just too many fallouts. 

- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.

- Update to version 2.10.1
  * The `ftmulti' demo program now  supports multiple hidden axes with
    the same name tag.
  * `ftview', `ftstring', and `ftgrid' got  a `-k' command line option
    to emulate a sequence of keystrokes at start-up.
  * `ftview', `ftstring', and `ftgrid' now support screen dumping to a
    PNG file.
  * The bytecode debugger, `ttdebug',  now supports variation TrueType
    fonts; a variation font instance can be selected with the new `-d'
    command line option.
- Add tarball signatures and freetype2.keyring

- Update to version 2.10.0
  * The  `ftdump' demo  program has new options `-c'  and `-C'  to
    display charmaps in compact and detailed format, respectively.
    Option `-V' has been removed.
  * The `ftview', `ftstring', and `ftgrid' demo programs use a new
    command line option `-d' to specify the program window's width,
    height, and color depth.
  * The `ftview' demo program now displays red boxes for zero-width
    glyphs.
  * `ftglyph' has limited support to display fonts with
    color-layered glyphs.This will be improved later on.
  * `ftgrid' can now display bitmap fonts also.
  * The `ttdebug' demo program has a new option `-f' to select a
    member of a TrueType collection (TTC).
  * Other various improvements to the demo programs.

- Remove 'Supplements: fonts-config' to avoid accidentally pulling
  in Qt dependencies on some non-Qt based desktops.(bsc#1091109)
  fonts-config is fundamental but ft2demos seldom installs by end users.
  only fonts-config maintainers/debuggers may use ft2demos along to
  debug some issues. 

- Update to version 2.9.1
  * No changelog upstream.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-20"/>
	<updated date="2020-05-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1079603">SUSE bug 1079603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091109">SUSE bug 1091109</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6942/">CVE-2018-6942</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492046" comment="freetype2-devel-2.10.1-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492047" comment="libfreetype6-2.10.1-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492048" comment="libfreetype6-32bit-2.10.1-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137848" version="1" class="patch">
	<metadata>
		<title>Security update for libxslt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1140095" ref_url="https://bugzilla.suse.com/1140095" source="BUGZILLA"/>
		<reference ref_id="1140101" ref_url="https://bugzilla.suse.com/1140101" source="BUGZILLA"/>
		<reference ref_id="1154609" ref_url="https://bugzilla.suse.com/1154609" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13117" ref_url="https://www.suse.com/security/cve/CVE-2019-13117/" source="CVE"/>
		<reference ref_id="CVE-2019-13118" ref_url="https://www.suse.com/security/cve/CVE-2019-13118/" source="CVE"/>
		<reference ref_id="CVE-2019-18197" ref_url="https://www.suse.com/security/cve/CVE-2019-18197/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1409-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006855.html" source="SUSE-SU"/>
		<description>
This update for libxslt fixes the following issues:

Security issues fixed: 

- CVE-2019-13118: Fixed a read of uninitialized stack data (bsc#1140101).
- CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains certain special characters (bsc#1140095).
- CVE-2019-18197: Fixed a dangling pointer in xsltCopyText which may have led to information disclosure (bsc#1154609).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-25"/>
	<updated date="2020-05-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1140095">SUSE bug 1140095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140101">SUSE bug 1140101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154609">SUSE bug 1154609</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13117/">CVE-2019-13117</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13118/">CVE-2019-13118</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18197/">CVE-2019-18197</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492049" comment="libxslt-devel-1.1.32-3.8.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492050" comment="libxslt-tools-1.1.32-3.8.24 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492051" comment="libxslt1-1.1.32-3.8.24 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137849" version="1" class="patch">
	<metadata>
		<title>Security update for sysstat (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159104" ref_url="https://bugzilla.suse.com/1159104" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19725" ref_url="https://www.suse.com/security/cve/CVE-2019-19725/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1419-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006856.html" source="SUSE-SU"/>
		<description>
This update for sysstat fixes the following issues:

- CVE-2019-19725: Fixed double free in check_file_actlst in sa_common.c (bsc#1159104).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1159104">SUSE bug 1159104</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19725/">CVE-2019-19725</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492052" comment="sysstat-12.0.2-3.21.18 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137850" version="1" class="patch">
	<metadata>
		<title>Security update for jasper (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1092115" ref_url="https://bugzilla.suse.com/1092115" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-9154" ref_url="https://www.suse.com/security/cve/CVE-2018-9154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1420-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006858.html" source="SUSE-SU"/>
		<description>
This update for jasper fixes the following issues:

- CVE-2018-9154: Fixed a potential denial of service in jpc_dec_process_sot() (bsc#1092115).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1092115">SUSE bug 1092115</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9154/">CVE-2018-9154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492053" comment="libjasper4-2.0.14-3.11.8 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137851" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb-connector-c (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171550" ref_url="https://bugzilla.suse.com/1171550" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13249" ref_url="https://www.suse.com/security/cve/CVE-2020-13249/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1423-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006859.html" source="SUSE-SU"/>
		<description>
This update for mariadb-connector-c fixes the following issues:

Security issue fixed:

- CVE-2020-13249: Fixed an improper validation of OK packets received from clients (bsc#1171550).

Non-security issues fixed:

- Update to release 3.1.8 (bsc#1171550)
  * CONC-304: Rename the static library to libmariadb.a and other libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improper
  * CONC-464: Fix static build for auth_gssapi_client plugin
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171550">SUSE bug 1171550</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-13249/">CVE-2020-13249</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492054" comment="libmariadb3-3.1.8-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492055" comment="libmariadbprivate-3.1.8-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137852" version="1" class="patch">
	<metadata>
		<title>Security update for libvpx (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160611" ref_url="https://bugzilla.suse.com/1160611" source="BUGZILLA"/>
		<reference ref_id="1160612" ref_url="https://bugzilla.suse.com/1160612" source="BUGZILLA"/>
		<reference ref_id="1160613" ref_url="https://bugzilla.suse.com/1160613" source="BUGZILLA"/>
		<reference ref_id="1160614" ref_url="https://bugzilla.suse.com/1160614" source="BUGZILLA"/>
		<reference ref_id="1160615" ref_url="https://bugzilla.suse.com/1160615" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-2126" ref_url="https://www.suse.com/security/cve/CVE-2019-2126/" source="CVE"/>
		<reference ref_id="CVE-2019-9232" ref_url="https://www.suse.com/security/cve/CVE-2019-9232/" source="CVE"/>
		<reference ref_id="CVE-2019-9325" ref_url="https://www.suse.com/security/cve/CVE-2019-9325/" source="CVE"/>
		<reference ref_id="CVE-2019-9371" ref_url="https://www.suse.com/security/cve/CVE-2019-9371/" source="CVE"/>
		<reference ref_id="CVE-2019-9433" ref_url="https://www.suse.com/security/cve/CVE-2019-9433/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006387.html" source="SUSE-SU"/>
		<description>
This update for libvpx fixes the following issues:

- CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry() (bsc#1160611).
- CVE-2019-9325: Fixed an out-of-bounds read (bsc#1160612).
- CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data (bsc#1160613).
- CVE-2019-9433: Fixed a use-after-free in vp8_deblock() (bsc#1160614).
- CVE-2019-9371: Fixed a resource exhaustion after memory leak (bsc#1160615).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-20"/>
	<updated date="2020-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160611">SUSE bug 1160611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160612">SUSE bug 1160612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160613">SUSE bug 1160613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160614">SUSE bug 1160614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160615">SUSE bug 1160615</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2126/">CVE-2019-2126</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9232/">CVE-2019-9232</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9325/">CVE-2019-9325</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9371/">CVE-2019-9371</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9433/">CVE-2019-9433</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491230" comment="libvpx4-1.6.1-6.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137853" version="1" class="patch">
	<metadata>
		<title>Security update for libmspack (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1130489" ref_url="https://bugzilla.suse.com/1130489" source="BUGZILLA"/>
		<reference ref_id="1141680" ref_url="https://bugzilla.suse.com/1141680" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1010305" ref_url="https://www.suse.com/security/cve/CVE-2019-1010305/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006865.html" source="SUSE-SU"/>
		<description>
This update for libmspack fixes the following issues:

Security issue fixed:

- CVE-2019-1010305: Fixed a buffer overflow triggered by a crafted chm file
  which could have led to information disclosure (bsc#1141680).
  
Other issue addressed: 

- Enable build-time tests (bsc#1130489)

		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-27"/>
	<updated date="2020-05-27"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1130489">SUSE bug 1130489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141680">SUSE bug 1141680</bugzilla>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1010305/">CVE-2019-1010305</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492056" comment="libmspack-devel-0.6-3.8.19 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492057" comment="libmspack0-0.6-3.8.19 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137854" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1158880" ref_url="https://bugzilla.suse.com/1158880" source="BUGZILLA"/>
		<reference ref_id="1167816" ref_url="https://bugzilla.suse.com/1167816" source="BUGZILLA"/>
		<reference ref_id="1170940" ref_url="https://bugzilla.suse.com/1170940" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1983" ref_url="https://www.suse.com/security/cve/CVE-2020-1983/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006869.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

Security issue fixed:

- CVE-2020-1983: Fixed a use-after-free in the ip_reass function of slirp (bsc#1170940).

Non-security issues fixed:

- Fixed an issue where limiting the memory bandwidth was not possible (bsc#1167816).
- Fixed the issue that s390x could not read IPL channel program when using dasd as boot device (bsc#1158880).
- Miscellaneous fixes to the in-package support documentation.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-29"/>
	<updated date="2020-05-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1158880">SUSE bug 1158880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167816">SUSE bug 1167816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170940">SUSE bug 1170940</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-1983/">CVE-2020-1983</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492058" comment="qemu-tools-3.1.1.1-9.21.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137855" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1167462" ref_url="https://bugzilla.suse.com/1167462" source="BUGZILLA"/>
		<reference ref_id="1169511" ref_url="https://bugzilla.suse.com/1169511" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-2754" ref_url="https://www.suse.com/security/cve/CVE-2020-2754/" source="CVE"/>
		<reference ref_id="CVE-2020-2755" ref_url="https://www.suse.com/security/cve/CVE-2020-2755/" source="CVE"/>
		<reference ref_id="CVE-2020-2756" ref_url="https://www.suse.com/security/cve/CVE-2020-2756/" source="CVE"/>
		<reference ref_id="CVE-2020-2757" ref_url="https://www.suse.com/security/cve/CVE-2020-2757/" source="CVE"/>
		<reference ref_id="CVE-2020-2767" ref_url="https://www.suse.com/security/cve/CVE-2020-2767/" source="CVE"/>
		<reference ref_id="CVE-2020-2773" ref_url="https://www.suse.com/security/cve/CVE-2020-2773/" source="CVE"/>
		<reference ref_id="CVE-2020-2778" ref_url="https://www.suse.com/security/cve/CVE-2020-2778/" source="CVE"/>
		<reference ref_id="CVE-2020-2781" ref_url="https://www.suse.com/security/cve/CVE-2020-2781/" source="CVE"/>
		<reference ref_id="CVE-2020-2800" ref_url="https://www.suse.com/security/cve/CVE-2020-2800/" source="CVE"/>
		<reference ref_id="CVE-2020-2803" ref_url="https://www.suse.com/security/cve/CVE-2020-2803/" source="CVE"/>
		<reference ref_id="CVE-2020-2805" ref_url="https://www.suse.com/security/cve/CVE-2020-2805/" source="CVE"/>
		<reference ref_id="CVE-2020-2816" ref_url="https://www.suse.com/security/cve/CVE-2020-2816/" source="CVE"/>
		<reference ref_id="CVE-2020-2830" ref_url="https://www.suse.com/security/cve/CVE-2020-2830/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006870.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

Java was updated to jdk-11.0.7+10 (April 2020 CPU, bsc#1169511).

Security issues fixed:

- CVE-2020-2754: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).
- CVE-2020-2755: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).
- CVE-2020-2756: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).
- CVE-2020-2757: Fixed an object deserialization issue that could have resulted in denial of service via crafted serialized input (bsc#1169511).
- CVE-2020-2767: Fixed an incorrect handling of certificate messages during TLS handshakes (bsc#1169511).
- CVE-2020-2773: Fixed the incorrect handling of exceptions thrown by unmarshalKeyInfo() and unmarshalXMLSignature() (bsc#1169511).
- CVE-2020-2778: Fixed the incorrect handling of SSLParameters in setAlgorithmConstraints(), which could have been abused to override the defined systems security policy and lead to the use of weak crypto algorithms (bsc#1169511).
- CVE-2020-2781: Fixed the incorrect re-use of single null TLS sessions (bsc#1169511).
- CVE-2020-2800: Fixed an HTTP header injection issue caused by mishandling of CR/LF in header values (bsc#1169511).
- CVE-2020-2803: Fixed a boundary check and type check issue that could have led to a sandbox bypass (bsc#1169511).
- CVE-2020-2805: Fixed a boundary check and type check issue that could have led to a sandbox bypass (bsc#1169511).
- CVE-2020-2816: Fixed an incorrect handling of application data packets during TLS handshakes  (bsc#1169511).
- CVE-2020-2830: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-29"/>
	<updated date="2020-05-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1167462">SUSE bug 1167462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2754/">CVE-2020-2754</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2755/">CVE-2020-2755</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2756/">CVE-2020-2756</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2757/">CVE-2020-2757</cve>
	<cve impact="important" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2767/">CVE-2020-2767</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2773/">CVE-2020-2773</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2778/">CVE-2020-2778</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2781/">CVE-2020-2781</cve>
	<cve impact="important" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2800/">CVE-2020-2800</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2803/">CVE-2020-2803</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2805/">CVE-2020-2805</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-2816/">CVE-2020-2816</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2830/">CVE-2020-2830</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492059" comment="java-11-openjdk-11.0.7.0-3.42.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492060" comment="java-11-openjdk-demo-11.0.7.0-3.42.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492061" comment="java-11-openjdk-devel-11.0.7.0-3.42.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492062" comment="java-11-openjdk-headless-11.0.7.0-3.42.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137856" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172021" ref_url="https://bugzilla.suse.com/1172021" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19956" ref_url="https://www.suse.com/security/cve/CVE-2019-19956/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006885.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

- CVE-2019-19956: Reverted the upstream fix for this memory leak because it introduced other, more severe vulnerabilities (bsc#1172021).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-04"/>
	<updated date="2020-06-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172021">SUSE bug 1172021</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19956/">CVE-2019-19956</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492063" comment="libxml2-2-2.9.7-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492064" comment="libxml2-2-32bit-2.9.7-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492065" comment="libxml2-devel-2.9.7-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492066" comment="libxml2-tools-2.9.7-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492067" comment="python3-libxml2-python-2.9.7-3.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137857" version="1" class="patch">
	<metadata>
		<title>Security update for libcroco (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1043898" ref_url="https://bugzilla.suse.com/1043898" source="BUGZILLA"/>
		<reference ref_id="1043899" ref_url="https://bugzilla.suse.com/1043899" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-8834" ref_url="https://www.suse.com/security/cve/CVE-2017-8834/" source="CVE"/>
		<reference ref_id="CVE-2017-8871" ref_url="https://www.suse.com/security/cve/CVE-2017-8871/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006883.html" source="SUSE-SU"/>
		<description>
This update for libcroco fixes the following issues:

Security issues fixed:

- CVE-2017-8834: Fixed denial of service (memory allocation error) via a crafted CSS file (bsc#1043898).
- CVE-2017-8871: Fixed denial of service (infinite loop and CPU consumption) via a crafted CSS file (bsc#1043899). 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-04"/>
	<updated date="2020-06-04"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1043898">SUSE bug 1043898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1043899">SUSE bug 1043899</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8834/">CVE-2017-8834</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8871/">CVE-2017-8871</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492068" comment="libcroco-0.6.12-4.3.51 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492069" comment="libcroco-0_6-3-0.6.12-4.3.51 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492070" comment="libcroco-0_6-3-32bit-0.6.12-4.3.51 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492071" comment="libcroco-devel-0.6.12-4.3.51 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137858" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172225" ref_url="https://bugzilla.suse.com/1172225" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20807" ref_url="https://www.suse.com/security/cve/CVE-2019-20807/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006896.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

- CVE-2019-20807: Fixed an issue where escaping from the restrictive mode of vim 
  was possible using interfaces (bsc#1172225). 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-08"/>
	<updated date="2020-06-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172225">SUSE bug 1172225</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-20807/">CVE-2019-20807</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492072" comment="vim-8.0.1568-5.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492073" comment="vim-data-8.0.1568-5.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492074" comment="vim-data-common-8.0.1568-5.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137859" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-bundler (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1143436" ref_url="https://bugzilla.suse.com/1143436" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3881" ref_url="https://www.suse.com/security/cve/CVE-2019-3881/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1582-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006916.html" source="SUSE-SU"/>
		<description>
This update for rubygem-bundler fixes the following issue:

- CVE-2019-3881: Fixed insecure permissions on a directory in /tmp/ that allowed malicious code execution (bsc#1143436).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-09"/>
	<updated date="2020-06-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1143436">SUSE bug 1143436</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3881/">CVE-2019-3881</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492075" comment="ruby2.5-rubygem-bundler-1.16.1-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137860" version="1" class="patch">
	<metadata>
		<title>Security update for gnutls (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172461" ref_url="https://bugzilla.suse.com/1172461" source="BUGZILLA"/>
		<reference ref_id="1172506" ref_url="https://bugzilla.suse.com/1172506" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13777" ref_url="https://www.suse.com/security/cve/CVE-2020-13777/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006910.html" source="SUSE-SU"/>
		<description>
This update for gnutls fixes the following issues:

- CVE-2020-13777: Fixed an insecure session ticket key construction which could 
  have made the TLS server to not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  an attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (bsc#1172506).
- Fixed an  improper handling of certificate chain with cross-signed intermediate
  CA certificates (bsc#1172461).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-09"/>
	<updated date="2020-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172461">SUSE bug 1172461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172506">SUSE bug 1172506</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-13777/">CVE-2020-13777</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492076" comment="gnutls-3.6.7-6.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492077" comment="libgnutls-devel-3.6.7-6.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492078" comment="libgnutls30-3.6.7-6.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492079" comment="libgnutls30-32bit-3.6.7-6.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492080" comment="libgnutls30-hmac-3.6.7-6.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492081" comment="libgnutls30-hmac-32bit-3.6.7-6.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492082" comment="libgnutlsxx-devel-3.6.7-6.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492083" comment="libgnutlsxx28-3.6.7-6.29.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137861" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1154824" ref_url="https://bugzilla.suse.com/1154824" source="BUGZILLA"/>
		<reference ref_id="1156353" ref_url="https://bugzilla.suse.com/1156353" source="BUGZILLA"/>
		<reference ref_id="1172466" ref_url="https://bugzilla.suse.com/1172466" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543/" source="CVE"/>
		<reference ref_id="CVE-2020-0548" ref_url="https://www.suse.com/security/cve/CVE-2020-0548/" source="CVE"/>
		<reference ref_id="CVE-2020-0549" ref_url="https://www.suse.com/security/cve/CVE-2020-0549/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1589-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006917.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

Updated Intel CPU Microcode to 20200602 (prerelease) (bsc#1172466)
  
This update contains security mitigations for:

- CVE-2020-0543: Fixed a side channel attack against special registers
  which could have resulted in leaking of read values to cores other
  than the one which called it.  This attack is known as Special Register
  Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1154824).
- CVE-2020-0548,CVE-2020-0549: Additional ucode updates were supplied to
  mitigate the Vector Register and L1D Eviction Sampling aka 'CacheOutAttack'
  attacks. (bsc#1156353)

Microcode Table:

  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  ---- new platforms ----------------------------------------
  ---- updated platforms ------------------------------------
  HSW          C0       6-3c-3/32 00000027-&gt;00000028 Core Gen4
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002e-&gt;0000002f Core Gen5
  HSW-U        C0/D0    6-45-1/72 00000025-&gt;00000026 Core Gen4
  HSW-H        C0       6-46-1/32 0000001b-&gt;0000001c Core Gen4
  BDW-H/E3     E0/G0    6-47-1/22 00000021-&gt;00000022 Core Gen5
  SKL-U/Y      D0       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKL-U23e     K1       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKX-SP       B1       6-55-3/97 01000151-&gt;01000157 Xeon Scalable
  SKX-SP       H0/M0/U0 6-55-4/b7 02000065-&gt;02006906 Xeon Scalable
  SKX-D        M1       6-55-4/b7 02000065-&gt;02006906 Xeon D-21xx
  CLX-SP       B0       6-55-6/bf 0400002c-&gt;04002f01 Xeon Scalable Gen2
  CLX-SP       B1       6-55-7/bf 0500002c-&gt;04002f01 Xeon Scalable Gen2
  SKL-H/S      R0/N0    6-5e-3/36 000000d6-&gt;000000dc Core Gen6; Xeon E3 v5
  AML-Y22      H0       6-8e-9/10 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-U/Y      H0       6-8e-9/c0 000000ca-&gt;000000d6 Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 000000ca-&gt;000000d6 Core Gen8 Mobile
  WHL-U        W0       6-8e-b/d0 000000ca-&gt;000000d6 Core Gen8 Mobile
  AML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  CML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  WHL-U        V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-G/H/S/E3 B0       6-9e-9/2a 000000ca-&gt;000000d6 Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 000000ca-&gt;000000d6 Core Gen8 Desktop, Mobile, Xeon E
  CFL-S        B0       6-9e-b/02 000000ca-&gt;000000d6 Core Gen8
  CFL-H/S      P0       6-9e-c/22 000000ca-&gt;000000d6 Core Gen9
  CFL-H        R0       6-9e-d/22 000000ca-&gt;000000d6 Core Gen9 Mobile

Also contains the Intel CPU Microcode update to 20200520:

  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  ---- new platforms ----------------------------------------
  ---- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061f-&gt;00000621 Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000718-&gt;0000071a Xeon E3/E5, Core X
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-10"/>
	<updated date="2020-06-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1154824">SUSE bug 1154824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156353">SUSE bug 1156353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172466">SUSE bug 1172466</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<cve impact="moderate" cvss3="2.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0548/">CVE-2020-0548</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0549/">CVE-2020-0549</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492084" comment="ucode-intel-20200602-3.25.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137862" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1089895" ref_url="https://bugzilla.suse.com/1089895" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1124278" ref_url="https://bugzilla.suse.com/1124278" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127355" ref_url="https://bugzilla.suse.com/1127355" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1151794" ref_url="https://bugzilla.suse.com/1151794" source="BUGZILLA"/>
		<reference ref_id="1152489" ref_url="https://bugzilla.suse.com/1152489" source="BUGZILLA"/>
		<reference ref_id="1154824" ref_url="https://bugzilla.suse.com/1154824" source="BUGZILLA"/>
		<reference ref_id="1157169" ref_url="https://bugzilla.suse.com/1157169" source="BUGZILLA"/>
		<reference ref_id="1158265" ref_url="https://bugzilla.suse.com/1158265" source="BUGZILLA"/>
		<reference ref_id="1160388" ref_url="https://bugzilla.suse.com/1160388" source="BUGZILLA"/>
		<reference ref_id="1160947" ref_url="https://bugzilla.suse.com/1160947" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1164871" ref_url="https://bugzilla.suse.com/1164871" source="BUGZILLA"/>
		<reference ref_id="1165183" ref_url="https://bugzilla.suse.com/1165183" source="BUGZILLA"/>
		<reference ref_id="1165478" ref_url="https://bugzilla.suse.com/1165478" source="BUGZILLA"/>
		<reference ref_id="1165741" ref_url="https://bugzilla.suse.com/1165741" source="BUGZILLA"/>
		<reference ref_id="1166969" ref_url="https://bugzilla.suse.com/1166969" source="BUGZILLA"/>
		<reference ref_id="1166978" ref_url="https://bugzilla.suse.com/1166978" source="BUGZILLA"/>
		<reference ref_id="1167574" ref_url="https://bugzilla.suse.com/1167574" source="BUGZILLA"/>
		<reference ref_id="1167851" ref_url="https://bugzilla.suse.com/1167851" source="BUGZILLA"/>
		<reference ref_id="1167867" ref_url="https://bugzilla.suse.com/1167867" source="BUGZILLA"/>
		<reference ref_id="1168332" ref_url="https://bugzilla.suse.com/1168332" source="BUGZILLA"/>
		<reference ref_id="1168670" ref_url="https://bugzilla.suse.com/1168670" source="BUGZILLA"/>
		<reference ref_id="1168789" ref_url="https://bugzilla.suse.com/1168789" source="BUGZILLA"/>
		<reference ref_id="1169020" ref_url="https://bugzilla.suse.com/1169020" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169525" ref_url="https://bugzilla.suse.com/1169525" source="BUGZILLA"/>
		<reference ref_id="1169762" ref_url="https://bugzilla.suse.com/1169762" source="BUGZILLA"/>
		<reference ref_id="1170056" ref_url="https://bugzilla.suse.com/1170056" source="BUGZILLA"/>
		<reference ref_id="1170125" ref_url="https://bugzilla.suse.com/1170125" source="BUGZILLA"/>
		<reference ref_id="1170145" ref_url="https://bugzilla.suse.com/1170145" source="BUGZILLA"/>
		<reference ref_id="1170284" ref_url="https://bugzilla.suse.com/1170284" source="BUGZILLA"/>
		<reference ref_id="1170345" ref_url="https://bugzilla.suse.com/1170345" source="BUGZILLA"/>
		<reference ref_id="1170457" ref_url="https://bugzilla.suse.com/1170457" source="BUGZILLA"/>
		<reference ref_id="1170522" ref_url="https://bugzilla.suse.com/1170522" source="BUGZILLA"/>
		<reference ref_id="1170592" ref_url="https://bugzilla.suse.com/1170592" source="BUGZILLA"/>
		<reference ref_id="1170617" ref_url="https://bugzilla.suse.com/1170617" source="BUGZILLA"/>
		<reference ref_id="1170618" ref_url="https://bugzilla.suse.com/1170618" source="BUGZILLA"/>
		<reference ref_id="1170620" ref_url="https://bugzilla.suse.com/1170620" source="BUGZILLA"/>
		<reference ref_id="1170621" ref_url="https://bugzilla.suse.com/1170621" source="BUGZILLA"/>
		<reference ref_id="1170770" ref_url="https://bugzilla.suse.com/1170770" source="BUGZILLA"/>
		<reference ref_id="1170778" ref_url="https://bugzilla.suse.com/1170778" source="BUGZILLA"/>
		<reference ref_id="1170791" ref_url="https://bugzilla.suse.com/1170791" source="BUGZILLA"/>
		<reference ref_id="1170901" ref_url="https://bugzilla.suse.com/1170901" source="BUGZILLA"/>
		<reference ref_id="1171078" ref_url="https://bugzilla.suse.com/1171078" source="BUGZILLA"/>
		<reference ref_id="1171098" ref_url="https://bugzilla.suse.com/1171098" source="BUGZILLA"/>
		<reference ref_id="1171118" ref_url="https://bugzilla.suse.com/1171118" source="BUGZILLA"/>
		<reference ref_id="1171189" ref_url="https://bugzilla.suse.com/1171189" source="BUGZILLA"/>
		<reference ref_id="1171191" ref_url="https://bugzilla.suse.com/1171191" source="BUGZILLA"/>
		<reference ref_id="1171195" ref_url="https://bugzilla.suse.com/1171195" source="BUGZILLA"/>
		<reference ref_id="1171202" ref_url="https://bugzilla.suse.com/1171202" source="BUGZILLA"/>
		<reference ref_id="1171205" ref_url="https://bugzilla.suse.com/1171205" source="BUGZILLA"/>
		<reference ref_id="1171214" ref_url="https://bugzilla.suse.com/1171214" source="BUGZILLA"/>
		<reference ref_id="1171217" ref_url="https://bugzilla.suse.com/1171217" source="BUGZILLA"/>
		<reference ref_id="1171218" ref_url="https://bugzilla.suse.com/1171218" source="BUGZILLA"/>
		<reference ref_id="1171219" ref_url="https://bugzilla.suse.com/1171219" source="BUGZILLA"/>
		<reference ref_id="1171220" ref_url="https://bugzilla.suse.com/1171220" source="BUGZILLA"/>
		<reference ref_id="1171244" ref_url="https://bugzilla.suse.com/1171244" source="BUGZILLA"/>
		<reference ref_id="1171293" ref_url="https://bugzilla.suse.com/1171293" source="BUGZILLA"/>
		<reference ref_id="1171417" ref_url="https://bugzilla.suse.com/1171417" source="BUGZILLA"/>
		<reference ref_id="1171527" ref_url="https://bugzilla.suse.com/1171527" source="BUGZILLA"/>
		<reference ref_id="1171599" ref_url="https://bugzilla.suse.com/1171599" source="BUGZILLA"/>
		<reference ref_id="1171600" ref_url="https://bugzilla.suse.com/1171600" source="BUGZILLA"/>
		<reference ref_id="1171601" ref_url="https://bugzilla.suse.com/1171601" source="BUGZILLA"/>
		<reference ref_id="1171602" ref_url="https://bugzilla.suse.com/1171602" source="BUGZILLA"/>
		<reference ref_id="1171604" ref_url="https://bugzilla.suse.com/1171604" source="BUGZILLA"/>
		<reference ref_id="1171605" ref_url="https://bugzilla.suse.com/1171605" source="BUGZILLA"/>
		<reference ref_id="1171606" ref_url="https://bugzilla.suse.com/1171606" source="BUGZILLA"/>
		<reference ref_id="1171607" ref_url="https://bugzilla.suse.com/1171607" source="BUGZILLA"/>
		<reference ref_id="1171608" ref_url="https://bugzilla.suse.com/1171608" source="BUGZILLA"/>
		<reference ref_id="1171609" ref_url="https://bugzilla.suse.com/1171609" source="BUGZILLA"/>
		<reference ref_id="1171610" ref_url="https://bugzilla.suse.com/1171610" source="BUGZILLA"/>
		<reference ref_id="1171611" ref_url="https://bugzilla.suse.com/1171611" source="BUGZILLA"/>
		<reference ref_id="1171612" ref_url="https://bugzilla.suse.com/1171612" source="BUGZILLA"/>
		<reference ref_id="1171613" ref_url="https://bugzilla.suse.com/1171613" source="BUGZILLA"/>
		<reference ref_id="1171614" ref_url="https://bugzilla.suse.com/1171614" source="BUGZILLA"/>
		<reference ref_id="1171615" ref_url="https://bugzilla.suse.com/1171615" source="BUGZILLA"/>
		<reference ref_id="1171616" ref_url="https://bugzilla.suse.com/1171616" source="BUGZILLA"/>
		<reference ref_id="1171617" ref_url="https://bugzilla.suse.com/1171617" source="BUGZILLA"/>
		<reference ref_id="1171618" ref_url="https://bugzilla.suse.com/1171618" source="BUGZILLA"/>
		<reference ref_id="1171619" ref_url="https://bugzilla.suse.com/1171619" source="BUGZILLA"/>
		<reference ref_id="1171620" ref_url="https://bugzilla.suse.com/1171620" source="BUGZILLA"/>
		<reference ref_id="1171621" ref_url="https://bugzilla.suse.com/1171621" source="BUGZILLA"/>
		<reference ref_id="1171622" ref_url="https://bugzilla.suse.com/1171622" source="BUGZILLA"/>
		<reference ref_id="1171623" ref_url="https://bugzilla.suse.com/1171623" source="BUGZILLA"/>
		<reference ref_id="1171624" ref_url="https://bugzilla.suse.com/1171624" source="BUGZILLA"/>
		<reference ref_id="1171625" ref_url="https://bugzilla.suse.com/1171625" source="BUGZILLA"/>
		<reference ref_id="1171626" ref_url="https://bugzilla.suse.com/1171626" source="BUGZILLA"/>
		<reference ref_id="1171662" ref_url="https://bugzilla.suse.com/1171662" source="BUGZILLA"/>
		<reference ref_id="1171679" ref_url="https://bugzilla.suse.com/1171679" source="BUGZILLA"/>
		<reference ref_id="1171691" ref_url="https://bugzilla.suse.com/1171691" source="BUGZILLA"/>
		<reference ref_id="1171692" ref_url="https://bugzilla.suse.com/1171692" source="BUGZILLA"/>
		<reference ref_id="1171694" ref_url="https://bugzilla.suse.com/1171694" source="BUGZILLA"/>
		<reference ref_id="1171695" ref_url="https://bugzilla.suse.com/1171695" source="BUGZILLA"/>
		<reference ref_id="1171736" ref_url="https://bugzilla.suse.com/1171736" source="BUGZILLA"/>
		<reference ref_id="1171817" ref_url="https://bugzilla.suse.com/1171817" source="BUGZILLA"/>
		<reference ref_id="1171948" ref_url="https://bugzilla.suse.com/1171948" source="BUGZILLA"/>
		<reference ref_id="1171949" ref_url="https://bugzilla.suse.com/1171949" source="BUGZILLA"/>
		<reference ref_id="1171951" ref_url="https://bugzilla.suse.com/1171951" source="BUGZILLA"/>
		<reference ref_id="1171952" ref_url="https://bugzilla.suse.com/1171952" source="BUGZILLA"/>
		<reference ref_id="1171979" ref_url="https://bugzilla.suse.com/1171979" source="BUGZILLA"/>
		<reference ref_id="1171982" ref_url="https://bugzilla.suse.com/1171982" source="BUGZILLA"/>
		<reference ref_id="1171983" ref_url="https://bugzilla.suse.com/1171983" source="BUGZILLA"/>
		<reference ref_id="1172017" ref_url="https://bugzilla.suse.com/1172017" source="BUGZILLA"/>
		<reference ref_id="1172096" ref_url="https://bugzilla.suse.com/1172096" source="BUGZILLA"/>
		<reference ref_id="1172097" ref_url="https://bugzilla.suse.com/1172097" source="BUGZILLA"/>
		<reference ref_id="1172098" ref_url="https://bugzilla.suse.com/1172098" source="BUGZILLA"/>
		<reference ref_id="1172099" ref_url="https://bugzilla.suse.com/1172099" source="BUGZILLA"/>
		<reference ref_id="1172101" ref_url="https://bugzilla.suse.com/1172101" source="BUGZILLA"/>
		<reference ref_id="1172102" ref_url="https://bugzilla.suse.com/1172102" source="BUGZILLA"/>
		<reference ref_id="1172103" ref_url="https://bugzilla.suse.com/1172103" source="BUGZILLA"/>
		<reference ref_id="1172104" ref_url="https://bugzilla.suse.com/1172104" source="BUGZILLA"/>
		<reference ref_id="1172127" ref_url="https://bugzilla.suse.com/1172127" source="BUGZILLA"/>
		<reference ref_id="1172130" ref_url="https://bugzilla.suse.com/1172130" source="BUGZILLA"/>
		<reference ref_id="1172185" ref_url="https://bugzilla.suse.com/1172185" source="BUGZILLA"/>
		<reference ref_id="1172188" ref_url="https://bugzilla.suse.com/1172188" source="BUGZILLA"/>
		<reference ref_id="1172199" ref_url="https://bugzilla.suse.com/1172199" source="BUGZILLA"/>
		<reference ref_id="1172201" ref_url="https://bugzilla.suse.com/1172201" source="BUGZILLA"/>
		<reference ref_id="1172202" ref_url="https://bugzilla.suse.com/1172202" source="BUGZILLA"/>
		<reference ref_id="1172221" ref_url="https://bugzilla.suse.com/1172221" source="BUGZILLA"/>
		<reference ref_id="1172249" ref_url="https://bugzilla.suse.com/1172249" source="BUGZILLA"/>
		<reference ref_id="1172251" ref_url="https://bugzilla.suse.com/1172251" source="BUGZILLA"/>
		<reference ref_id="1172317" ref_url="https://bugzilla.suse.com/1172317" source="BUGZILLA"/>
		<reference ref_id="1172342" ref_url="https://bugzilla.suse.com/1172342" source="BUGZILLA"/>
		<reference ref_id="1172343" ref_url="https://bugzilla.suse.com/1172343" source="BUGZILLA"/>
		<reference ref_id="1172344" ref_url="https://bugzilla.suse.com/1172344" source="BUGZILLA"/>
		<reference ref_id="1172366" ref_url="https://bugzilla.suse.com/1172366" source="BUGZILLA"/>
		<reference ref_id="1172378" ref_url="https://bugzilla.suse.com/1172378" source="BUGZILLA"/>
		<reference ref_id="1172391" ref_url="https://bugzilla.suse.com/1172391" source="BUGZILLA"/>
		<reference ref_id="1172397" ref_url="https://bugzilla.suse.com/1172397" source="BUGZILLA"/>
		<reference ref_id="1172453" ref_url="https://bugzilla.suse.com/1172453" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2019-19462" ref_url="https://www.suse.com/security/cve/CVE-2019-19462/" source="CVE"/>
		<reference ref_id="CVE-2019-20806" ref_url="https://www.suse.com/security/cve/CVE-2019-20806/" source="CVE"/>
		<reference ref_id="CVE-2019-20812" ref_url="https://www.suse.com/security/cve/CVE-2019-20812/" source="CVE"/>
		<reference ref_id="CVE-2019-9455" ref_url="https://www.suse.com/security/cve/CVE-2019-9455/" source="CVE"/>
		<reference ref_id="CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543/" source="CVE"/>
		<reference ref_id="CVE-2020-10690" ref_url="https://www.suse.com/security/cve/CVE-2020-10690/" source="CVE"/>
		<reference ref_id="CVE-2020-10711" ref_url="https://www.suse.com/security/cve/CVE-2020-10711/" source="CVE"/>
		<reference ref_id="CVE-2020-10720" ref_url="https://www.suse.com/security/cve/CVE-2020-10720/" source="CVE"/>
		<reference ref_id="CVE-2020-10732" ref_url="https://www.suse.com/security/cve/CVE-2020-10732/" source="CVE"/>
		<reference ref_id="CVE-2020-10751" ref_url="https://www.suse.com/security/cve/CVE-2020-10751/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="CVE-2020-12114" ref_url="https://www.suse.com/security/cve/CVE-2020-12114/" source="CVE"/>
		<reference ref_id="CVE-2020-12464" ref_url="https://www.suse.com/security/cve/CVE-2020-12464/" source="CVE"/>
		<reference ref_id="CVE-2020-12652" ref_url="https://www.suse.com/security/cve/CVE-2020-12652/" source="CVE"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="CVE-2020-12655" ref_url="https://www.suse.com/security/cve/CVE-2020-12655/" source="CVE"/>
		<reference ref_id="CVE-2020-12656" ref_url="https://www.suse.com/security/cve/CVE-2020-12656/" source="CVE"/>
		<reference ref_id="CVE-2020-12657" ref_url="https://www.suse.com/security/cve/CVE-2020-12657/" source="CVE"/>
		<reference ref_id="CVE-2020-12659" ref_url="https://www.suse.com/security/cve/CVE-2020-12659/" source="CVE"/>
		<reference ref_id="CVE-2020-12768" ref_url="https://www.suse.com/security/cve/CVE-2020-12768/" source="CVE"/>
		<reference ref_id="CVE-2020-12769" ref_url="https://www.suse.com/security/cve/CVE-2020-12769/" source="CVE"/>
		<reference ref_id="CVE-2020-13143" ref_url="https://www.suse.com/security/cve/CVE-2020-13143/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it.
  This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1154824).
- CVE-2020-13143: Fixed an out-of-bounds read in gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c (bsc#1171982).
- CVE-2020-12769: Fixed an issue which could have allowed attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one (bsc#1171983).
- CVE-2020-12768: Fixed a memory leak in svm_cpu_uninit in arch/x86/kvm/svm.c (bsc#1171736).
- CVE-2020-12659: Fixed an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) due to improper headroom validation (bsc#1171214).
- CVE-2020-12657: An a use-after-free in block/bfq-iosched.c (bsc#1171205).
- CVE-2020-12656: Fixed an improper handling of certain domain_release calls leadingch could have led to a memory leak (bsc#1171219).
- CVE-2020-12655: Fixed an issue which could have allowed attackers to trigger a sync of excessive duration via an XFS v5 image with crafted metadata (bsc#1171217).
- CVE-2020-12654: Fixed an issue in he wifi driver which could have allowed a remote AP to trigger a heap-based buffer overflow (bsc#1171202).
- CVE-2020-12653: Fixed an issue in the wifi driver which could have allowed local users to gain privileges or cause a denial of service (bsc#1171195).
- CVE-2020-12652: Fixed an issue which could have allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition (bsc#1171218).
- CVE-2020-12464: Fixed a use-after-free due to a transfer without a reference (bsc#1170901).
- CVE-2020-12114: Fixed a pivot_root race condition which could have allowed local users to cause a denial of service (panic) by corrupting a mountpoint reference counter (bsc#1171098).
- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172317).
- CVE-2020-10751: Fixed an improper implementation in SELinux LSM hook  where it was assumed that an skb would only contain a single netlink message (bsc#1171189).
- CVE-2020-10732: Fixed kernel data leak in userspace coredumps due to uninitialized data (bsc#1171220).
- CVE-2020-10720: Fixed a use-after-free read in napi_gro_frags() (bsc#1170778).
- CVE-2020-10711: Fixed a null pointer dereference in SELinux subsystem which could have allowed a remote network user to crash the kernel resulting in a denial of service (bsc#1171191).
- CVE-2020-10690: Fixed the race between the release of ptp_clock and cdev (bsc#1170056).
- CVE-2019-9455: Fixed a pointer leak due to a WARN_ON statement in a video driver. This could lead to local information disclosure with System execution privileges needed (bsc#1170345).
- CVE-2019-20812: Fixed an issue in prb_calc_retire_blk_tmo() which could have resulted in a denial of service (bsc#1172453).
- CVE-2019-20806: Fixed a null pointer dereference which may had lead to denial of service (bsc#1172199).
- CVE-2019-19462: Fixed an issue which could have allowed local user to cause denial of service (bsc#1158265).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1089895)

The following non-security bugs were fixed:

- ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe() (bsc#1051510).
- ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile() (bsc#1051510).
- acpi/x86: ignore unspecified bit positions in the ACPI global lock field (bsc#1051510).
- Add br_netfilter to kernel-default-base (bsc#1169020)
- Add commit for git-fix that's not a fix This commit cleans up debug code but does not fix anything, and it relies on a new kernel function that isn't yet in this version of SLE.
- agp/intel: Reinforce the barrier after GTT updates (bsc#1051510).
- ALSA: ctxfi: Remove unnecessary cast in kfree (bsc#1051510).
- ALSA: doc: Document PC Beep Hidden Register on Realtek ALC256 (bsc#1051510).
- ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
- ALSA: hda: Add driver blacklist (bsc#1051510).
- ALSA: hda: Always use jackpoll helper for jack update after resume (bsc#1051510).
- ALSA: hda: call runtime_allow() for all hda controllers (bsc#1051510).
- ALSA: hda: Do not release card at firmware loading error (bsc#1051510).
- ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported (bsc#1051510).
- ALSA: hda/hdmi: fix race in monitor detection during probe (bsc#1051510).
- ALSA: hda/hdmi: fix without unlocked before return (bsc#1051510).
- ALSA: hda: Honor PM disablement in PM freeze and thaw_noirq ops (bsc#1051510).
- ALSA: hda: Keep the controller initialization even if no codecs found (bsc#1051510).
- ALSA: hda: Match both PCI ID and SSID for driver blacklist (bsc#1111666).
- ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround (bsc#1172017).
- ALSA: hda/realtek - Add COEF workaround for ASUS ZenBook UX431DA (git-fixes).
- ALSA: hda/realtek - Add HP new mute led supported for ALC236 (git-fixes).
- ALSA: hda/realtek - Add more fixup entries for Clevo machines (git-fixes).
- ALSA: hda/realtek - Add new codec supported for ALC245 (bsc#1051510).
- ALSA: hda/realtek - Add new codec supported for ALC287 (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Notebook (git-fixes).
- ALSA: hda/realtek - Add supported new mute Led for HP (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS GL503VM with ALC295 (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS UX550GE with ALC295 (git-fixes).
- ALSA: hda/realtek: Enable headset mic of ASUS UX581LV with ALC295 (git-fixes).
- ALSA: hda/realtek - Enable the headset mic on Asus FX505DT (bsc#1051510).
- ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse (git-fixes).
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme (bsc#1111666).
- ALSA: hda/realtek - Fix unexpected init_amp override (bsc#1051510).
- ALSA: hda/realtek - Limit int mic boost for Thinkpad T530 (git-fixes bsc#1171293).
- ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter (bsc#1051510).
- ALSA: hda: Release resources at error in delayed probe (bsc#1051510).
- ALSA: hda: Remove ASUS ROG Zenith from the blacklist (bsc#1051510).
- ALSA: hda: Skip controller resume if not needed (bsc#1051510).
- ALSA: hwdep: fix a left shifting 1 by 31 UB bug (git-fixes).
- ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio option (git-fixes).
- ALSA: opti9xx: shut up gcc-10 range warning (bsc#1051510).
- ALSA: pcm: fix incorrect hw_base increase (git-fixes).
- ALSA: pcm: oss: Place the plugin buffer overflow checks correctly (bsc#1170522).
- ALSA: rawmidi: Fix racy buffer resize under concurrent accesses (git-fixes).
- ALSA: usb-audio: Add connector notifier delegation (bsc#1051510).
- ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset (git-fixes).
- ALSA: usb-audio: add mapping for ASRock TRX40 Creator (git-fixes).
- ALSA: usb-audio: Add mixer workaround for TRX40 and co (bsc#1051510).
- ALSA: usb-audio: Add quirk for Focusrite Scarlett 2i2 (bsc#1051510).
- ALSA: usb-audio: Add static mapping table for ALC1220-VB-based mobos (bsc#1051510).
- ALSA: usb-audio: Apply async workaround for Scarlett 2i4 2nd gen (bsc#1051510).
- ALSA: usb-audio: Check mapping at creating connector controls, too (bsc#1051510).
- ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID (bsc#1051510).
- ALSA: usb-audio: Do not create jack controls for PCM terminals (bsc#1051510).
- ALSA: usb-audio: Do not override ignore_ctl_error value from the map (bsc#1051510).
- ALSA: usb-audio: Filter error from connector kctl ops, too (bsc#1051510).
- ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif (bsc#1051510).
- ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC (git-fixes).
- ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio (git-fixes).
- ALSA: usx2y: Fix potential NULL dereference (bsc#1051510).
- ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry (bsc#1051510).
- ASoC: dapm: connect virtual mux with default value (bsc#1051510).
- ASoC: dapm: fixup dapm kcontrol widget (bsc#1051510).
- ASoC: dpcm: allow start or stop during pause for backend (bsc#1051510).
- ASoC: fix regwmask (bsc#1051510).
- ASoC: msm8916-wcd-digital: Reset RX interpolation path after use (bsc#1051510).
- ASoC: samsung: Prevent clk_get_rate() calls in atomic context (bsc#1111666).
- ASoC: topology: Check return value of pcm_new_ver (bsc#1051510).
- ASoC: topology: use name_prefix for new kcontrol (bsc#1051510).
- b43legacy: Fix case where channel status is corrupted (bsc#1051510).
- batman-adv: fix batadv_nc_random_weight_tq (git-fixes).
- batman-adv: Fix refcnt leak in batadv_show_throughput_override (git-fixes).
- batman-adv: Fix refcnt leak in batadv_store_throughput_override (git-fixes).
- batman-adv: Fix refcnt leak in batadv_v_ogm_process (git-fixes).
- bcache: avoid unnecessary btree nodes flushing in btree_flush_write() (git fixes (block drivers)).
- bcache: fix incorrect data type usage in btree_flush_write() (git fixes (block drivers)).
- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (git fixes (block drivers)).
- blk-mq: honor IO scheduler for multiqueue devices (bsc#1165478).
- blk-mq: simplify blk_mq_make_request() (bsc#1165478).
- block/drbd: delete invalid function drbd_md_mark_dirty_ (bsc#1171527).
- block: drbd: remove a stray unlock in __drbd_send_protocol() (bsc#1171599).
- block: fix busy device checking in blk_drop_partitions again (bsc#1171948).
- block: fix busy device checking in blk_drop_partitions (bsc#1171948).
- block: fix memleak of bio integrity data (git fixes (block drivers)).
- block: remove the bd_openers checks in blk_drop_partitions (bsc#1171948).
- bnxt_en: fix memory leaks in bnxt_dcbnl_ieee_getets() (networking-stable-20_03_28).
- bnxt_en: Reduce BNXT_MSIX_VEC_MAX value to supported CQs per PF (bsc#1104745).
- bnxt_en: reinitialize IRQs when MTU is modified (networking-stable-20_03_14).
- bnxt_en: Return error if bnxt_alloc_ctx_mem() fails (bsc#1104745 ).
- bnxt_en: Return error when allocating zero size context memory (bsc#1104745).
- bonding/alb: make sure arp header is pulled before accessing it (networking-stable-20_03_14).
- bpf: Fix sk_psock refcnt leak when receiving message (bsc#1083647).
- bpf: Forbid XADD on spilled pointers for unprivileged users (bsc#1083647).
- brcmfmac: abort and release host after error (bsc#1051510).
- BTRFS: fix deadlock with memory reclaim during scrub (bsc#1172127).
- BTRFS: fix log context list corruption after rename whiteout error (bsc#1172342).
- BTRFS: fix partial loss of prealloc extent past i_size after fsync (bsc#1172343).
- BTRFS: relocation: add error injection points for cancelling balance (bsc#1171417).
- BTRFS: relocation: Check cancel request after each data page read (bsc#1171417).
- BTRFS: relocation: Check cancel request after each extent found (bsc#1171417).
- BTRFS: relocation: Clear the DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417).
- BTRFS: relocation: Fix reloc root leakage and the NULL pointer reference caused by the leakage (bsc#1171417).
- BTRFS: relocation: Work around dead relocation stage loop (bsc#1171417).
- BTRFS: reloc: clear DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417 bsc#1160947 bsc#1172366).
- BTRFS: reloc: fix reloc root leak and NULL pointer dereference (bsc#1171417 bsc#1160947 bsc#1172366).
- BTRFS: setup a nofs context for memory allocation at btrfs_create_tree() (bsc#1172127).
- BTRFS: setup a nofs context for memory allocation at __btrfs_set_acl (bsc#1172127).
- BTRFS: use nofs context when initializing security xattrs to avoid deadlock (bsc#1172127).
- can: add missing attribute validation for termination (networking-stable-20_03_14).
- cdc-acm: close race betrween suspend() and acm_softint (git-fixes).
- cdc-acm: introduce a cool down (git-fixes).
- ceph: check if file lock exists before sending unlock request (bsc#1168789).
- ceph: demote quotarealm lookup warning to a debug message (bsc#1171692).
- ceph: fix double unlock in handle_cap_export() (bsc#1171694).
- ceph: fix endianness bug when handling MDS session feature bits (bsc#1171695).
- cgroup, netclassid: periodically release file_lock on classid updating (networking-stable-20_03_14).
- cifs: Allocate crypto structures on the fly for calculating signatures of incoming packets (bsc#1144333).
- cifs: Allocate encryption header through kmalloc (bsc#1144333).
- cifs: allow unlock flock and OFD lock across fork (bsc#1144333).
- cifs: check new file size when extending file by fallocate (bsc#1144333).
- cifs: cifspdu.h: Replace zero-length array with flexible-array member (bsc#1144333).
- cifs: clear PF_MEMALLOC before exiting demultiplex thread (bsc#1144333).
- cifs: do not share tcons with DFS (bsc#1144333).
- cifs: dump the session id and keys also for SMB2 sessions (bsc#1144333).
- cifs: ensure correct super block for DFS reconnect (bsc#1144333).
- cifs: Fix bug which the return value by asynchronous read is error (bsc#1144333).
- cifs: fix uninitialised lease_key in open_shroot() (bsc#1144333).
- cifs: improve read performance for page size 64KB &amp; cache=strict &amp; vers=2.1+ (bsc#1144333).
- cifs: Increment num_remote_opens stats counter even in case of smb2_query_dir_first (bsc#1144333).
- cifs: minor update to comments around the cifs_tcp_ses_lock mutex (bsc#1144333).
- cifs: protect updating server-&gt;dstaddr with a spinlock (bsc#1144333).
- cifs: smb2pdu.h: Replace zero-length array with flexible-array member (bsc#1144333).
- cifs: smbd: Calculate the correct maximum packet size for segmented SMBDirect send/receive (bsc#1144333).
- cifs: smbd: Check and extend sender credits in interrupt context (bsc#1144333).
- cifs: smbd: Check send queue size before posting a send (bsc#1144333).
- cifs: smbd: Do not schedule work to send immediate packet on every receive (bsc#1144333).
- cifs: smbd: Merge code to track pending packets (bsc#1144333).
- cifs: smbd: Properly process errors on ib_post_send (bsc#1144333).
- cifs: smbd: Update receive credits before sending and deal with credits roll back on failure before sending (bsc#1144333).
- cifs: Warn less noisily on default mount (bsc#1144333).
- clk: Add clk_hw_unregister_composite helper function definition (bsc#1051510).
- clk: imx6ull: use OSC clock during AXI rate change (bsc#1051510).
- clk: imx: make mux parent strings const (bsc#1051510).
- clk: mediatek: correct the clocks for MT2701 HDMI PHY module (bsc#1051510).
- clk: sunxi-ng: a64: Fix gate bit of DSI DPHY (bsc#1051510).
- clocksource/drivers/hyper-v: Set TSC clocksource as default w/ InvariantTSC (bsc#1170620, bsc#1170621).
- clocksource: dw_apb_timer_of: Fix missing clockevent timers (bsc#1051510).
- component: Silence bind error on -EPROBE_DEFER (bsc#1051510).
- coresight: do not use the BIT() macro in the UAPI header (git fixes (block drivers)).
- cpufreq: s3c64xx: Remove pointless NULL check in s3c64xx_cpufreq_driver_init (bsc#1051510).
- crypto: ccp - AES CFB mode is a stream cipher (git-fixes).
- crypto: ccp - Clean up and exit correctly on allocation failure (git-fixes).
- crypto: ccp - Cleanup misc_dev on sev_exit() (bsc#1114279).
- crypto: ccp - Cleanup sp_dev_master in psp_dev_destroy() (bsc#1114279).
- cxgb4: fix MPS index overwrite when setting MAC address (bsc#1127355).
- cxgb4: fix Txq restart check during backpressure (bsc#1127354 bsc#1127371).
- debugfs: Add debugfs_create_xul() for hexadecimal unsigned long (git-fixes).
- debugfs_lookup(): switch to lookup_one_len_unlocked() (bsc#1171979).
- devlink: fix return value after hitting end in region read (bsc#1109837).
- devlink: validate length of param values (bsc#1109837).
- devlink: validate length of region addr/len (bsc#1109837).
- dmaengine: dmatest: Fix iteration non-stop logic (bsc#1051510).
- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574).
- dm-raid1: fix invalid return value from dm_mirror (bsc#1172378).
- dm writecache: fix data corruption when reloading the target (git fixes (block drivers)).
- dm writecache: fix incorrect flush sequence when doing SSD mode commit (git fixes (block drivers)).
- dm writecache: verify watermark during resume (git fixes (block drivers)).
- dm zoned: fix invalid memory access (git fixes (block drivers)).
- dm zoned: reduce overhead of backing device checks (git fixes (block drivers)).
- dm zoned: remove duplicate nr_rnd_zones increase in dmz_init_zone() (git fixes (block drivers)).
- dm zoned: support zone sizes smaller than 128MiB (git fixes (block drivers)).
- dp83640: reverse arguments to list_add_tail (git-fixes).
- drivers: hv: Add a module description line to the hv_vmbus driver (bsc#1172249, bsc#1172251).
- drivers/net/ibmvnic: Update VNIC protocol version reporting (bsc#1065729).
- drivers: w1: add hwmon support structures (jsc#SLE-11048).
- drivers: w1: add hwmon temp support for w1_therm (jsc#SLE-11048).
- drivers: w1: refactor w1_slave_show to make the temp reading functionality separate (jsc#SLE-11048).
- drm: amd/acp: fix broken menu structure (bsc#1114279) 	* context changes
- drm/amdgpu: Correctly initialize thermal controller for GPUs with Powerplay table v0 (e.g Hawaii) (bsc#1111666).
- drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event (bsc#1111666).
- drm/amd/powerplay: force the trim of the mclk dpm_levels if OD is (bsc#1113956)
- drm/atomic: Take the atomic toys away from X (bsc#1112178) 	* context changes
- drm/crc: Actually allow to change the crc source (bsc#1114279) 	* offset changes
- drm/dp_mst: Fix clearing payload state on topology disable (bsc#1051510).
- drm/dp_mst: Reformat drm_dp_check_act_status() a bit (bsc#1051510).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (bsc#1114279)
- drm/etnaviv: fix perfmon domain interation (bsc#1113956)
- drm/etnaviv: rework perfmon query infrastructure (bsc#1112178)
- drm/i915: Apply Wa_1406680159:icl,ehl as an engine workaround (bsc#1112178) 	* rename gt/intel_workarounds.c to intel_workarounds.c 	* context changes
- drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of (bsc#1114279)
- drm/i915: HDCP: fix Ri prime check done during link check (bsc#1112178) 	* rename display/intel_hdmi.c to intel_hdmi.c 	* context changes
- drm/i915: properly sanity check batch_start_offset (bsc#1114279) 	* renamed display/intel_fbc.c -&gt; intel_fb.c 	* renamed gt/intel_rc6.c -&gt; intel_pm.c 	* context changes
- drm/meson: Delete an error message in meson_dw_hdmi_bind() (bsc#1051510).
- drm: NULL pointer dereference [null-pointer-deref] (CWE 476) problem (bsc#1114279)
- drm/qxl: qxl_release leak in qxl_draw_dirty_fb() (bsc#1051510).
- drm/qxl: qxl_release leak in qxl_hw_surface_alloc() (bsc#1051510).
- drm/qxl: qxl_release use after free (bsc#1051510).
- drm: Remove PageReserved manipulation from drm_pci_alloc (bsc#1114279) 	* offset changes
- drm/sun4i: dsi: Allow binding the host without a panel (bsc#1113956)
- drm/sun4i: dsi: Avoid hotplug race with DRM driver bind (bsc#1113956)
- drm/sun4i: dsi: Remove incorrect use of runtime PM (bsc#1113956) 	* context changes
- drm/sun4i: dsi: Remove unused drv from driver context (bsc#1113956) 	* context changes 	* keep include of sun4i_drv.h
- dump_stack: avoid the livelock of the dump_lock (git fixes (block drivers)).
- EDAC, sb_edac: Add support for systems with segmented PCI buses (bsc#1169525).
- ext4: do not zeroout extents beyond i_disksize (bsc#1167851).
- ext4: fix extent_status fragmentation for plain files (bsc#1171949).
- ext4: use non-movable memory for superblock readahead (bsc#1171952).
- fanotify: fix merging marks masks with FAN_ONDIR (bsc#1171679).
- fbcon: fix null-ptr-deref in fbcon_switch (bsc#1114279) 	* rename drivers/video/fbdev/core to drivers/video/console 	* context changes
- fib: add missing attribute validation for tun_id (networking-stable-20_03_14).
- firmware: qcom: scm: fix compilation error when disabled (bsc#1051510).
- fs/cifs: fix gcc warning in sid_to_id (bsc#1144333).
- fs/seq_file.c: simplify seq_file iteration code and interface (bsc#1170125).
- gpio: tegra: mask GPIO IRQs during IRQ shutdown (bsc#1051510).
- gre: fix uninit-value in __iptunnel_pull_header (networking-stable-20_03_14).
- HID: hid-input: clear unmapped usages (git-fixes).
- HID: Hyper-V: Add a module description line (bsc#1172249, bsc#1172251).
- HID: i2c-hid: add Trekstor Primebook C11B to descriptor override (git-fixes).
- HID: i2c-hid: override HID descriptors for certain devices (git-fixes).
- HID: multitouch: add eGalaxTouch P80H84 support (bsc#1051510).
- HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices (git-fixes).
- hrtimer: Annotate lockless access to timer-&gt;state (git fixes (block drivers)).
- hsr: add restart routine into hsr_get_node_list() (networking-stable-20_03_28).
- hsr: check protocol version in hsr_newlink() (networking-stable-20_04_17).
- hsr: fix general protection fault in hsr_addr_is_self() (networking-stable-20_03_28).
- hsr: set .netnsok flag (networking-stable-20_03_28).
- hsr: use rcu_read_lock() in hsr_get_node_{list/status}() (networking-stable-20_03_28).
- i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present (git-fixes).
- i2c: acpi: put device when verifying client fails (git-fixes).
- i2c: brcmstb: remove unused struct member (git-fixes).
- i2c: core: Allow empty id_table in ACPI case as well (git-fixes).
- i2c: core: decrease reference count of device node in i2c_unregister_device (git-fixes).
- i2c: dev: Fix the race between the release of i2c_dev and cdev (bsc#1051510).
- i2c: fix missing pm_runtime_put_sync in i2c_device_probe (git-fixes).
- i2c-hid: properly terminate i2c_hid_dmi_desc_override_table array (git-fixes).
- i2c: i801: Do not add ICH_RES_IO_SMI for the iTCO_wdt device (git-fixes).
- i2c: iproc: Stop advertising support of SMBUS quick cmd (git-fixes).
- i2c: isch: Remove unnecessary acpi.h include (git-fixes).
- i2c: mux: demux-pinctrl: Fix an error handling path in 'i2c_demux_pinctrl_probe()' (bsc#1051510).
- i2c: st: fix missing struct parameter description (bsc#1051510).
- IB/mlx5: Fix missing congestion control debugfs on rep rdma device (bsc#1103991).
- ibmvnic: Skip fatal error reset after passive init (bsc#1171078 ltc#184239).
- iio:ad7797: Use correct attribute_group (bsc#1051510).
- iio: adc: stm32-adc: fix device used to request dma (bsc#1051510).
- iio: adc: stm32-adc: fix sleep in atomic context (git-fixes).
- iio: adc: stm32-adc: Use dma_request_chan() instead dma_request_slave_channel() (bsc#1051510).
- iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()' (bsc#1051510).
- iio: sca3000: Remove an erroneous 'get_device()' (bsc#1051510).
- iio: xilinx-xadc: Fix ADC-B powerdown (bsc#1051510).
- iio: xilinx-xadc: Fix clearing interrupt when enabling trigger (bsc#1051510).
- iio: xilinx-xadc: Fix sequencer configuration for aux channels in simultaneous mode (bsc#1051510).
- ima: Fix return value of ima_write_policy() (git-fixes).
- Input: evdev - call input_flush_device() on release(), not flush() (bsc#1051510).
- Input: hyperv-keyboard - add module description (bsc#1172249, bsc#1172251).
- Input: i8042 - add Acer Aspire 5738z to nomux list (bsc#1051510).
- Input: i8042 - add ThinkPad S230u to i8042 reset list (bsc#1051510).
- Input: raydium_i2c_ts - use true and false for boolean values (bsc#1051510).
- Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() (bsc#1051510).
- Input: synaptics-rmi4 - really fix attn_data use-after-free (git-fixes).
- Input: usbtouchscreen - add support for BonXeon TP (bsc#1051510).
- Input: xpad - add custom init packet for Xbox One S controllers (bsc#1051510).
- iommu/amd: Call domain_flush_complete() in update_domain() (bsc#1172096).
- iommu/amd: Do not flush Device Table in iommu_map_page() (bsc#1172097).
- iommu/amd: Do not loop forever when trying to increase address space (bsc#1172098).
- iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system (bsc#1172099).
- iommu/amd: Fix over-read of ACPI UID from IVRS table (bsc#1172101).
- iommu/amd: Fix race in increase_address_space()/fetch_pte() (bsc#1172102).
- iommu/amd: Update Device Table in increase_address_space() (bsc#1172103).
- iommu: Fix reference count leak in iommu_group_alloc (bsc#1172397).
- ip6_tunnel: Allow rcv/xmit even if remote address is a local address (bsc#1166978).
- ipv4: fix a RCU-list lock in fib_triestat_seq_show (networking-stable-20_04_02).
- ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface (networking-stable-20_03_14).
- ipv6: do not auto-add link-local address to lag ports (networking-stable-20_04_09).
- ipv6: fix IPV6_ADDRFORM operation logic (bsc#1171662).
- ipv6: fix restrict IPV6_ADDRFORM operation (bsc#1171662).
- ipvlan: add cond_resched_rcu() while processing muticast backlog (networking-stable-20_03_14).
- ipvlan: do not deref eth hdr before checking it's set (networking-stable-20_03_14).
- ipvlan: do not use cond_resched_rcu() in ipvlan_process_multicast() (networking-stable-20_03_14).
- iwlwifi: pcie: actually release queue memory in TVQM (bsc#1051510).
- ixgbe: do not check firmware errors (bsc#1170284).
- kabi fix for early XHCI debug (git-fixes).
- kabi for for md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (git-fixes).
- kabi/severities: Do not track KVM internal symbols.
- kabi/severities: Ingnore get_dev_data() The function is internal to the AMD IOMMU driver and must not be called by any third party.
- kabi workaround for snd_rawmidi buffer_ref field addition (git-fixes).
- KEYS: reaching the keys quotas correctly (bsc#1051510).
- KVM: arm64: Change hyp_panic()s dependency on tpidr_el2 (bsc#1133021).
- KVM: arm64: Stop save/restoring host tpidr_el1 on VHE (bsc#1133021).
- KVM: Check validity of resolved slot when searching memslots (bsc#1172104).
- KVM: s390: vsie: Fix delivery of addressing exceptions (git-fixes).
- KVM: SVM: Fix potential memory leak in svm_cpu_init() (bsc#1171736).
- KVM x86: Extend AMD specific guest behavior to Hygon virtual CPUs (bsc#1152489).
- l2tp: Allow management of tunnels and session in user namespace (networking-stable-20_04_17).
- libata: Remove extra scsi_host_put() in ata_scsi_add_hosts() (bsc#1051510).
- libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set (bsc#1051510).
- lib: raid6: fix awk build warnings (git fixes (block drivers)).
- lib/raid6/test: fix build on distros whose /bin/sh is not bash (git fixes (block drivers)).
- lib/stackdepot.c: fix global out-of-bounds in stack_slabs (git fixes (block drivers)).
- locks: print unsigned ino in /proc/locks (bsc#1171951). 
- mac80211: add ieee80211_is_any_nullfunc() (bsc#1051510).
- mac80211_hwsim: Use kstrndup() in place of kasprintf() (bsc#1051510).
- mac80211: mesh: fix discovery timer re-arming issue / crash (bsc#1051510).
- macsec: avoid to set wrong mtu (bsc#1051510).
- macsec: restrict to ethernet devices (networking-stable-20_03_28).
- macvlan: add cond_resched() during multicast processing (networking-stable-20_03_14).
- macvlan: fix null dereference in macvlan_device_event() (bsc#1051510).
- md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (git-fixes).
- md/raid0: Fix an error message in raid0_make_request() (git fixes (block drivers)).
- md/raid10: prevent access of uninitialized resync_pages offset (git-fixes).
- media: dvb: return -EREMOTEIO on i2c transfer failure (bsc#1051510).
- media: platform: fcp: Set appropriate DMA parameters (bsc#1051510).
- media: ti-vpe: cal: fix disable_irqs to only the intended target (git-fixes).
- mei: release me_cl object reference (bsc#1051510).
- mlxsw: Fix some IS_ERR() vs NULL bugs (networking-stable-20_04_27).
- mlxsw: spectrum_flower: Do not stop at FLOW_ACTION_VLAN_MANGLE (networking-stable-20_04_09).
- mlxsw: spectrum_mr: Fix list iteration in error path (bsc#1112374).
- mmc: atmel-mci: Fix debugfs on 64-bit platforms (git-fixes).
- mmc: core: Check request type before completing the request (git-fixes).
- mmc: core: Fix recursive locking issue in CQE recovery path (git-fixes).
- mmc: cqhci: Avoid false 'cqhci: CQE stuck on' by not open-coding timeout loop (git-fixes).
- mmc: dw_mmc: Fix debugfs on 64-bit platforms (git-fixes).
- mmc: meson-gx: make sure the descriptor is stopped on errors (git-fixes).
- mmc: meson-gx: simplify interrupt handler (git-fixes).
- mmc: renesas_sdhi: limit block count to 16 bit for old revisions (git-fixes).
- mmc: sdhci-esdhc-imx: fix the mask for tuning start point (bsc#1051510).
- mmc: sdhci-msm: Clear tuning done flag while hs400 tuning (bsc#1051510).
- mmc: sdhci-of-at91: fix memleak on clk_get failure (git-fixes).
- mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers (bsc#1051510).
- mmc: sdhci-xenon: fix annoying 1.8V regulator warning (bsc#1051510).
- mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card() (bsc#1051510).
- mmc: tmio: fix access width of Block Count Register (git-fixes).
- mm: limit boost_watermark on small zones (git fixes (mm/pgalloc)).
- mm: thp: handle page cache THP correctly in PageTransCompoundMap (git fixes (block drivers)).
- mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer (bsc#1051510).
- mtd: spi-nor: cadence-quadspi: add a delay in write sequence (git-fixes).
- mtd: spi-nor: enable 4B opcodes for mx66l51235l (git-fixes).
- mwifiex: avoid -Wstringop-overflow warning (bsc#1051510).
- mwifiex: Fix memory corruption in dump_station (bsc#1051510).
- net: bcmgenet: correct per TX/RX ring statistics (networking-stable-20_04_27).
- net: dsa: b53: Fix ARL register definitions (networking-stable-20_04_27).
- net: dsa: b53: Rework ARL bin logic (networking-stable-20_04_27).
- net: dsa: bcm_sf2: Do not register slave MDIO bus with OF (networking-stable-20_04_09).
- net: dsa: bcm_sf2: Ensure correct sub-node is parsed (networking-stable-20_04_09).
- net: dsa: Fix duplicate frames flooded by learning (networking-stable-20_03_28).
- net: dsa: mv88e6xxx: fix lockup on warm boot (networking-stable-20_03_14).
- net/ethernet: add Google GVE driver (jsc#SLE-10538)
- net: fec: add phy_reset_after_clk_enable() support (git-fixes).
- net: fec: validate the new settings in fec_enet_set_coalesce() (networking-stable-20_03_14).
- net: fix race condition in __inet_lookup_established() (bsc#1151794).
- net: fq: add missing attribute validation for orphan mask (networking-stable-20_03_14).
- net: hns3: fix 'tc qdisc del' failed issue (bsc#1109837).
- net, ip_tunnel: fix interface lookup with no key (networking-stable-20_04_02).
- net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin (networking-stable-20_04_17).
- net: ipv6: do not consider routes via gateways for anycast address check (networking-stable-20_04_17).
- netlink: Use netlink header as base to calculate bad attribute offset (networking-stable-20_03_14).
- net: macsec: update SCI upon MAC address change (networking-stable-20_03_14).
- net: memcg: fix lockdep splat in inet_csk_accept() (networking-stable-20_03_14).
- net: memcg: late association of sock to memcg (networking-stable-20_03_14).
- net/mlx4_en: avoid indirect call in TX completion (networking-stable-20_04_27).
- net/mlx5: Add new fields to Port Type and Speed register (bsc#1171118).
- net/mlx5: Expose link speed directly (bsc#1171118).
- net/mlx5: Expose port speed when possible (bsc#1171118).
- net/mlx5: Fix failing fw tracer allocation on s390 (bsc#1103990 ).
- net: mvneta: Fix the case where the last poll did not process all rx (networking-stable-20_03_28).
- net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node (networking-stable-20_04_27).
- net/packet: tpacket_rcv: do not increment ring index on drop (networking-stable-20_03_14).
- net: qmi_wwan: add support for ASKEY WWHC050 (networking-stable-20_03_28).
- net: revert default NAPI poll timeout to 2 jiffies (networking-stable-20_04_17).
- net_sched: cls_route: remove the right filter from hashtable (networking-stable-20_03_28).
- net_sched: sch_skbprio: add message validation to skbprio_change() (bsc#1109837).
- net/x25: Fix x25_neigh refcnt leak when receiving frame (networking-stable-20_04_27).
- nfc: add missing attribute validation for SE API (networking-stable-20_03_14).
- nfc: add missing attribute validation for vendor subcommand (networking-stable-20_03_14).
- nfc: st21nfca: add missed kfree_skb() in an error path (bsc#1051510).
- nfp: abm: fix a memory leak bug (bsc#1109837).
- nfsd4: fix up replay_matches_cache() (git-fixes).
- nfsd: Ensure CLONE persists data and metadata changes to the target file (git-fixes).
- nfsd: fix delay timer on 32-bit architectures (git-fixes).
- nfsd: fix jiffies/time_t mixup in LRU list (git-fixes).
- NFS: Directory page cache pages need to be locked when read (git-fixes).
- nfsd: memory corruption in nfsd4_lock() (git-fixes).
- NFS: Do not call generic_error_remove_page() while holding locks (bsc#1170457).
- NFS: Fix memory leaks and corruption in readdir (git-fixes).
- NFS: Fix O_DIRECT accounting of number of bytes read/written (git-fixes).
- NFS: Fix potential posix_acl refcnt leak in nfs3_set_acl (git-fixes).
- NFS: fix racey wait in nfs_set_open_stateid_locked (bsc#1170592).
- NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O (git-fixes).
- NFS/pnfs: Fix pnfs_generic_prepare_to_resend_writes() (git-fixes).
- NFS: Revalidate the file size on a fatal write error (git-fixes).
- NFSv4.0: nfs4_do_fsinfo() should not do implicit lease renewals (git-fixes).
- NFSv4: Do not allow a cached open with a revoked delegation (git-fixes).
- NFSv4: Fix leak of clp-&gt;cl_acceptor string (git-fixes).
- NFSv4/pnfs: Return valid stateids in nfs_layout_find_inode_by_stateid() (git-fixes).
- NFSv4: try lease recovery on NFS4ERR_EXPIRED (git-fixes).
- NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn (git-fixes).
- nl802154: add missing attribute validation for dev_type (networking-stable-20_03_14).
- nl802154: add missing attribute validation (networking-stable-20_03_14).
- nvme-fc: print proper nvme-fc devloss_tmo value (bsc#1172391).
- objtool: Fix stack offset tracking for indirect CFAs (bsc#1169514).
- objtool: Fix switch table detection in .text.unlikely (bsc#1169514).
- objtool: Make BP scratch register warning more robust (bsc#1169514).
- padata: Remove broken queue flushing (git-fixes).
- Partially revert 'kfifo: fix kfifo_alloc() and kfifo_init()' (git fixes (block drivers)).
- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (bsc#1172201, bsc#1172202).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (bsc#1172201, bsc#1172202).
- pinctrl: baytrail: Enable pin configuration setting for GPIO chip (git-fixes).
- pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler (git-fixes).
- pinctrl: sunrisepoint: Fix PAD lock register offset for SPT-H (git-fixes).
- platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA (bsc#1051510).
- pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors (git-fixes).
- powerpc: Add attributes for setjmp/longjmp (bsc#1065729).
- powerpc/pci/of: Parse unassigned resources (bsc#1065729).
- powerpc/setup_64: Set cache-line-size based on cache-block-size (bsc#1065729).
- powerpc/sstep: Fix DS operand in ld encoding to appropriate value (bsc#1065729).
- r8152: check disconnect status after long sleep (networking-stable-20_03_14).
- raid6/ppc: Fix build for clang (git fixes (block drivers)).
- random: always use batched entropy for get_random_u{32,64} (bsc#1164871).
- rcu: locking and unlocking need to always be at least barriers (git fixes (block drivers)).
- Revert 'ALSA: hda/realtek: Fix pop noise on ALC225' (git-fixes).
- Revert 'drm/panel: simple: Add support for Sharp LQ150X1LG11 panels' (bsc#1114279) 	* offset changes
- Revert 'ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()' (bsc#1172221).
- Revert 'RDMA/cma: Simplify rdma_resolve_addr() error flow' (bsc#1103992).
- rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup() (bsc#1051510).
- s390/cpum_cf: Add new extended counters for IBM z15 (bsc#1169762 LTC#185291).
- s390/ftrace: fix potential crashes when switching tracers (git-fixes).
- s390/ism: fix error return code in ism_probe() (git-fixes).
- s390/pci: do not set affinity for floating irqs (git-fixes).
- s390/pci: Fix possible deadlock in recover_store() (bsc#1165183 LTC#184103).
- s390/pci: Recover handle in clp_set_pci_fn() (bsc#1165183 LTC#184103).
- scripts/decodecode: fix trapping instruction formatting (bsc#1065729).
- scripts/dtc: Remove redundant YYLOC global declaration (bsc#1160388).
- scsi: bnx2i: fix potential use after free (bsc#1171600).
- scsi: core: Handle drivers which set sg_tablesize to zero (bsc#1171601) This commit also required: &gt; scsi: core: avoid preallocating big SGL for data
- scsi: core: save/restore command resid for error handling (bsc#1171602).
- scsi: core: scsi_trace: Use get_unaligned_be*() (bsc#1171604).
- scsi: core: try to get module before removing device (bsc#1171605).
- scsi: csiostor: Adjust indentation in csio_device_reset (bsc#1171606).
- scsi: csiostor: Do not enable IRQs too early (bsc#1171607).
- scsi: esas2r: unlock on error in esas2r_nvram_read_direct() (bsc#1171608).
- scsi: fnic: fix invalid stack access (bsc#1171609).
- scsi: fnic: fix msix interrupt allocation (bsc#1171610).
- scsi: ibmvscsi: Fix WARN_ON during event pool release (bsc#1170791 ltc#185128).
- scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func (bsc#1171611).
- scsi: iscsi: Fix a potential deadlock in the timeout handler (bsc#1171612).
- scsi: iscsi: qla4xxx: fix double free in probe (bsc#1171613).
- scsi: lpfc: Change default queue allocation for reduced memory consumption (bsc#1164780).
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences (bsc#1171614).
- scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG (bsc#1171615).
- scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event (bsc#1164780).
- scsi: lpfc: Fix MDS Diagnostic Enablement definition (bsc#1164780).
- scsi: lpfc: Fix negation of else clause in lpfc_prep_node_fc4type (bsc#1164780).
- scsi: lpfc: Fix noderef and address space warnings (bsc#1164780).
- scsi: lpfc: Maintain atomic consistency of queue_claimed flag (bsc#1164780).
- scsi: lpfc: remove duplicate unloading checks (bsc#1164780).
- scsi: lpfc: Remove re-binding of nvme rport during registration (bsc#1164780).
- scsi: lpfc: Remove redundant initialization to variable rc (bsc#1164780).
- scsi: lpfc: Remove unnecessary lockdep_assert_held calls (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.1 (bsc#1164780).
- scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state (bsc#1171616).
- scsi: qla2xxx: add ring buffer for tracing debug logs (bsc#1157169).
- scsi: qla2xxx: check UNLOADING before posting async work (bsc#1157169).
- scsi: qla2xxx: Delete all sessions before unregister local nvme port (bsc#1157169).
- scsi: qla2xxx: Do not log message when reading port speed via sysfs (bsc#1157169).
- scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV (bsc#1157169).
- scsi: qla2xxx: Fix regression warnings (bsc#1157169).
- scsi: qla2xxx: Remove non functional code (bsc#1157169).
- scsi: qla2xxx: set UNLOADING before waiting for session deletion (bsc#1157169).
- scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free (bsc#1171617).
- scsi: qla4xxx: fix double free bug (bsc#1171618).
- scsi: sd: Clear sdkp-&gt;protection_type if disk is reformatted without PI (bsc#1171619).
- scsi: sg: add sg_remove_request in sg_common_write (bsc#1171620).
- scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) (bsc#1171621).
- scsi: ufs: change msleep to usleep_range (bsc#1171622).
- scsi: ufs: Clean up ufshcd_scale_clks() and clock scaling error out path (bsc#1171623).
- scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic (bsc#1171624).
- scsi: ufs: Fix ufshcd_probe_hba() reture value in case ufshcd_scsi_add_wlus() fails (bsc#1171625).
- scsi: ufs: Recheck bkops level if bkops is disabled (bsc#1171626).
- sctp: fix possibly using a bad saddr with a given dst (networking-stable-20_04_02).
- sctp: fix refcount bug in sctp_wfree (networking-stable-20_04_02).
- selftests/powerpc: Fix build errors in powerpc ptrace selftests (boo#1124278).
- Separate one more kABI fixup from the functional change:
- seq_file: fix problem when seeking mid-record (bsc#1170125).
- serial: uartps: Move the spinlock after the read of the tx empty (git-fixes).
- sfc: detach from cb_page in efx_copy_channel() (networking-stable-20_03_14).
- signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig (bsc#1172185).
- slcan: not call free_netdev before rtnl_unlock in slcan_open (networking-stable-20_03_28).
- slip: make slhc_compress() more robust against malicious packets (networking-stable-20_03_14).
- SMB3: Additional compression structures (bsc#1144333).
- SMB3: Add new compression flags (bsc#1144333).
- SMB3: change noisy error message to FYI (bsc#1144333).
- SMB3: enable swap on SMB3 mounts (bsc#1144333).
- SMB3: Minor cleanup of protocol definitions (bsc#1144333).
- SMB3: remove overly noisy debug line in signing errors (bsc#1144333).
- SMB3: smbdirect support can be configured by default (bsc#1144333).
- SMB3: use SMB2_SIGNATURE_SIZE define (bsc#1144333).
- spi: bcm63xx-hsspi: Really keep pll clk enabled (bsc#1051510).
- spi: bcm-qspi: when tx/rx buffer is NULL set to 0 (bsc#1051510).
- spi: dw: Add SPI Rx-done wait method to DMA-based transfer (bsc#1051510).
- spi: dw: Zero DMA Tx and Rx configurations on stack (bsc#1051510).
- spi: pxa2xx: Add CS control clock quirk (bsc#1051510).
- spi: qup: call spi_qup_pm_resume_runtime before suspending (bsc#1051510).
- spi/zynqmp: remove entry that causes a cs glitch (bsc#1051510).
- staging: comedi: dt2815: fix writing hi byte of analog output (bsc#1051510).
- staging: comedi: Fix comedi_device refcnt leak in comedi_open (bsc#1051510).
- staging: iio: ad2s1210: Fix SPI reading (bsc#1051510).
- supported.conf: Add br_netfilter to base (bsc#1169020).
- supported.conf: support w1 core and thermometer support
- svcrdma: Fix double svc_rdma_send_ctxt_put() in an error path (bsc#1103992).
- svcrdma: Fix leak of transport addresses (git-fixes).
- svcrdma: Fix trace point use-after-free race (bsc#1103992 ).
- taskstats: fix data-race (bsc#1172188).
- tcp: cache line align MAX_TCP_HEADER (networking-stable-20_04_27).
- tcp: repair: fix TCP_QUEUE_SEQ implementation (networking-stable-20_03_28).
- team: add missing attribute validation for array index (networking-stable-20_03_14).
- team: add missing attribute validation for port ifindex (networking-stable-20_03_14).
- team: fix hang in team_mode_get() (networking-stable-20_04_27).
- tools lib traceevent: Remove unneeded qsort and uses memmove instead (git-fixes).
- tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send() (bsc#1065729).
- tpm/tpm_tis: Free IRQ if probing fails (bsc#1082555).
- tun: Do not put_page() for all negative return values from XDP program (bsc#1109837).
- Update config files: Build w1 bus on arm64 (jsc#SLE-11048)
- USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair K70 RGB RAPIDFIRE (git-fixes).
- USB: cdc-acm: restore capability check order (git-fixes).
- USB: core: Fix misleading driver bug report (bsc#1051510).
- USB: dwc3: do not set gadget-&gt;is_otg flag (git-fixes).
- USB: dwc3: gadget: Do link recovery for SS and SSP (git-fixes).
- USB: early: Handle AMD's spec-compliant identifiers, too (git-fixes).
- USB: f_fs: Clear OS Extended descriptor counts to zero in ffs_data_reset() (git-fixes).
- USB: gadget: audio: Fix a missing error return value in audio_bind() (git-fixes).
- USB: gadget: composite: Inform controller driver of self-powered (git-fixes).
- USB: gadget: legacy: fix error return code in cdc_bind() (git-fixes).
- USB: gadget: legacy: fix error return code in gncm_bind() (git-fixes).
- usb: gadget: legacy: fix redundant initialization warnings (bsc#1051510).
- USB: gadget: net2272: Fix a memory leak in an error handling path in 'net2272_plat_probe()' (git-fixes).
- USB: gadget: udc: atmel: Fix vbus disconnect handling (git-fixes).
- USB: gadget: udc: atmel: Make some symbols static (git-fixes).
- USB: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete (git-fixes).
- USB: host: xhci-plat: keep runtime active when removing host (git-fixes).
- USB: hub: Fix handling of connect changes during sleep (git-fixes).
- usbnet: silence an unnecessary warning (bsc#1170770).
- USB: serial: garmin_gps: add sanity checking for data length (git-fixes).
- USB: serial: option: add BroadMobi BM806U (git-fixes).
- USB: serial: option: add support for ASKEY WWHC050 (git-fixes).
- USB: serial: option: add Wistron Neweb D19Q1 (git-fixes).
- USB: serial: qcserial: Add DW5816e support (git-fixes).
- USB: sisusbvga: Change port variable from signed to unsigned (git-fixes).
- usb-storage: Add unusual_devs entry for JMicron JMS566 (git-fixes).
- USB: uas: add quirk for LaCie 2Big Quadra (git-fixes).
- USB: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list (git-fixes).
- video: fbdev: sis: Remove unnecessary parentheses and commented code (bsc#1114279)
- video: fbdev: w100fb: Fix a potential double free (bsc#1051510).
- vrf: Check skb for XFRM_TRANSFORMED flag (networking-stable-20_04_27).
- vxlan: check return value of gro_cells_init() (networking-stable-20_03_28).
- w1: Add subsystem kernel public interface (jsc#SLE-11048).
- w1: Fix slave count on 1-Wire bus (resend) (jsc#SLE-11048).
- w1: keep balance of mutex locks and refcnts (jsc#SLE-11048).
- w1: use put_device() if device_register() fail (jsc#SLE-11048).
- watchdog: reset last_hw_keepalive time at start (git-fixes).
- wcn36xx: Fix error handling path in 'wcn36xx_probe()' (bsc#1051510).
- wil6210: remove reset file from debugfs (git-fixes).
- wimax/i2400m: Fix potential urb refcnt leak (bsc#1051510).
- workqueue: do not use wq_select_unbound_cpu() for bound works (bsc#1172130).
- x86/entry/64: Fix unwind hints in kernel exit path (bsc#1058115).
- x86/entry/64: Fix unwind hints in register clearing code (bsc#1058115).
- x86/entry/64: Fix unwind hints in rewind_stack_do_exit() (bsc#1058115).
- x86/entry/64: Fix unwind hints in __switch_to_asm() (bsc#1058115).
- x86/Hyper-V: Allow guests to enable InvariantTSC (bsc#1170621, bsc#1170620).
- x86/Hyper-V: Free hv_panic_page when fail to register kmsg dump (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash data in die() when panic_on_oops is set (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash register data or kmsg before running crash kernel (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash register data when sysctl_record_panic_msg is not set (bsc#1170617, bsc#1170618).
- x86: Hyper-V: report value of misc_features (git fixes).
- x86/Hyper-V: Trigger crash enlightenment only once during system crash (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Unload vmbus channel in hv panic callback (bsc#1170617, bsc#1170618).
- x86/kprobes: Avoid kretprobe recursion bug (bsc#1114279).
- x86/resctrl: Fix invalid attempt at removing the default resource group (git-fixes).
- x86/resctrl: Preserve CDP enable over CPU hotplug (bsc#1114279).
- x86/unwind/orc: Do not skip the first frame for inactive tasks (bsc#1058115).
- x86/unwind/orc: Fix error handling in __unwind_start() (bsc#1058115).
- x86/unwind/orc: Fix error path for bad ORC entry type (bsc#1058115).
- x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks (bsc#1058115).
- x86/unwind/orc: Prevent unwinding before ORC initialization (bsc#1058115).
- x86/unwind: Prevent false warnings for non-current tasks (bsc#1058115).
- xen/pci: reserve MCFG areas earlier (bsc#1170145).
- xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish (networking-stable-20_04_27).
- xfs: clear PF_MEMALLOC before exiting xfsaild thread (git-fixes).
- xfs: Correctly invert xfs_buftarg LRU isolation logic (git-fixes).
- xfs: do not ever return a stale pointer from __xfs_dir3_free_read (git-fixes).
- xprtrdma: Fix completion wait during device removal (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-10"/>
	<updated date="2020-06-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089895">SUSE bug 1089895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124278">SUSE bug 1124278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127355">SUSE bug 1127355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151794">SUSE bug 1151794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152489">SUSE bug 1152489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154824">SUSE bug 1154824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157169">SUSE bug 1157169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158265">SUSE bug 1158265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160388">SUSE bug 1160388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160947">SUSE bug 1160947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164871">SUSE bug 1164871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165183">SUSE bug 1165183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165478">SUSE bug 1165478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165741">SUSE bug 1165741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166969">SUSE bug 1166969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166978">SUSE bug 1166978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167574">SUSE bug 1167574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167851">SUSE bug 1167851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167867">SUSE bug 1167867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168332">SUSE bug 1168332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168670">SUSE bug 1168670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168789">SUSE bug 1168789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169020">SUSE bug 1169020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169525">SUSE bug 1169525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169762">SUSE bug 1169762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170056">SUSE bug 1170056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170125">SUSE bug 1170125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170145">SUSE bug 1170145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170284">SUSE bug 1170284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170345">SUSE bug 1170345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170457">SUSE bug 1170457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170522">SUSE bug 1170522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170592">SUSE bug 1170592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170617">SUSE bug 1170617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170618">SUSE bug 1170618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170620">SUSE bug 1170620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170621">SUSE bug 1170621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170770">SUSE bug 1170770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170778">SUSE bug 1170778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170791">SUSE bug 1170791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170901">SUSE bug 1170901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171078">SUSE bug 1171078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171098">SUSE bug 1171098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171118">SUSE bug 1171118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171189">SUSE bug 1171189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171191">SUSE bug 1171191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171195">SUSE bug 1171195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171202">SUSE bug 1171202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171205">SUSE bug 1171205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171214">SUSE bug 1171214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171217">SUSE bug 1171217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171218">SUSE bug 1171218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171219">SUSE bug 1171219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171220">SUSE bug 1171220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171244">SUSE bug 1171244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171293">SUSE bug 1171293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171417">SUSE bug 1171417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171527">SUSE bug 1171527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171599">SUSE bug 1171599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171600">SUSE bug 1171600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171601">SUSE bug 1171601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171602">SUSE bug 1171602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171604">SUSE bug 1171604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171605">SUSE bug 1171605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171606">SUSE bug 1171606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171607">SUSE bug 1171607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171608">SUSE bug 1171608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171609">SUSE bug 1171609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171610">SUSE bug 1171610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171611">SUSE bug 1171611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171612">SUSE bug 1171612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171613">SUSE bug 1171613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171614">SUSE bug 1171614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171615">SUSE bug 1171615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171616">SUSE bug 1171616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171617">SUSE bug 1171617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171618">SUSE bug 1171618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171619">SUSE bug 1171619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171620">SUSE bug 1171620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171621">SUSE bug 1171621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171622">SUSE bug 1171622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171623">SUSE bug 1171623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171624">SUSE bug 1171624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171625">SUSE bug 1171625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171626">SUSE bug 1171626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171662">SUSE bug 1171662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171679">SUSE bug 1171679</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171691">SUSE bug 1171691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171692">SUSE bug 1171692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171694">SUSE bug 1171694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171695">SUSE bug 1171695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171736">SUSE bug 1171736</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171817">SUSE bug 1171817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171948">SUSE bug 1171948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171949">SUSE bug 1171949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171951">SUSE bug 1171951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171952">SUSE bug 1171952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171979">SUSE bug 1171979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171982">SUSE bug 1171982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171983">SUSE bug 1171983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172017">SUSE bug 1172017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172096">SUSE bug 1172096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172097">SUSE bug 1172097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172098">SUSE bug 1172098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172099">SUSE bug 1172099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172101">SUSE bug 1172101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172102">SUSE bug 1172102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172103">SUSE bug 1172103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172104">SUSE bug 1172104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172127">SUSE bug 1172127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172130">SUSE bug 1172130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172185">SUSE bug 1172185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172188">SUSE bug 1172188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172199">SUSE bug 1172199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172201">SUSE bug 1172201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172202">SUSE bug 1172202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172221">SUSE bug 1172221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172249">SUSE bug 1172249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172251">SUSE bug 1172251</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172317">SUSE bug 1172317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172342">SUSE bug 1172342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172343">SUSE bug 1172343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172344">SUSE bug 1172344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172366">SUSE bug 1172366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172378">SUSE bug 1172378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172391">SUSE bug 1172391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172397">SUSE bug 1172397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172453">SUSE bug 1172453</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19462/">CVE-2019-19462</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20806/">CVE-2019-20806</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20812/">CVE-2019-20812</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9455/">CVE-2019-9455</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10690/">CVE-2020-10690</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10711/">CVE-2020-10711</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10720/">CVE-2020-10720</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10732/">CVE-2020-10732</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-10751/">CVE-2020-10751</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12114/">CVE-2020-12114</cve>
	<cve impact="low" cvss3="1.8/CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12464/">CVE-2020-12464</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12652/">CVE-2020-12652</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12655/">CVE-2020-12655</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12656/">CVE-2020-12656</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12657/">CVE-2020-12657</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12659/">CVE-2020-12659</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12768/">CVE-2020-12768</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12769/">CVE-2020-12769</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13143/">CVE-2020-13143</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492085" comment="kernel-default-4.12.14-197.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492086" comment="kernel-default-base-4.12.14-197.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492087" comment="kernel-default-devel-4.12.14-197.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492088" comment="kernel-default-man-4.12.14-197.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492089" comment="kernel-devel-4.12.14-197.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492090" comment="kernel-macros-4.12.14-197.45.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137863" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1157490" ref_url="https://bugzilla.suse.com/1157490" source="BUGZILLA"/>
		<reference ref_id="1167007" ref_url="https://bugzilla.suse.com/1167007" source="BUGZILLA"/>
		<reference ref_id="1172205" ref_url="https://bugzilla.suse.com/1172205" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006935.html" source="SUSE-SU"/>
		<description>
This update for xen to version 4.12.3 fixes the following issues:
	  
- CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it.
  This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1172205).
- Added support for new 64bit libxl memory API (bsc#1167007 and bsc#1157490).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-11"/>
	<updated date="2020-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157490">SUSE bug 1157490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167007">SUSE bug 1167007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172205">SUSE bug 1172205</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492091" comment="xen-libs-4.12.3_02-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492092" comment="xen-tools-domU-4.12.3_02-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137864" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nspr, mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159819" ref_url="https://bugzilla.suse.com/1159819" source="BUGZILLA"/>
		<reference ref_id="1169746" ref_url="https://bugzilla.suse.com/1169746" source="BUGZILLA"/>
		<reference ref_id="1171978" ref_url="https://bugzilla.suse.com/1171978" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17006" ref_url="https://www.suse.com/security/cve/CVE-2019-17006/" source="CVE"/>
		<reference ref_id="CVE-2020-12399" ref_url="https://www.suse.com/security/cve/CVE-2020-12399/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1677-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006980.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nspr, mozilla-nss fixes the following issues:

mozilla-nss was updated to version 3.53

- CVE-2020-12399: Fixed a timing attack on DSA signature generation (bsc#1171978).
- CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819).
Release notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53_release_notes

mozilla-nspr to version 4.25
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159819">SUSE bug 1159819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169746">SUSE bug 1169746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171978">SUSE bug 1171978</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-17006/">CVE-2019-17006</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12399/">CVE-2020-12399</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492093" comment="libfreebl3-3.53-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492094" comment="libfreebl3-32bit-3.53-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492095" comment="libsoftokn3-3.53-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492096" comment="libsoftokn3-32bit-3.53-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492097" comment="mozilla-nspr-4.25-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492098" comment="mozilla-nspr-32bit-4.25-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492099" comment="mozilla-nspr-devel-4.25-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492100" comment="mozilla-nss-3.53-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492101" comment="mozilla-nss-32bit-3.53-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492102" comment="mozilla-nss-certs-3.53-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492103" comment="mozilla-nss-certs-32bit-3.53-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492104" comment="mozilla-nss-devel-3.53-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492105" comment="mozilla-nss-sysinit-3.53-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492106" comment="mozilla-nss-tools-3.53-3.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137865" version="1" class="patch">
	<metadata>
		<title>Security update for perl (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171863" ref_url="https://bugzilla.suse.com/1171863" source="BUGZILLA"/>
		<reference ref_id="1171864" ref_url="https://bugzilla.suse.com/1171864" source="BUGZILLA"/>
		<reference ref_id="1171866" ref_url="https://bugzilla.suse.com/1171866" source="BUGZILLA"/>
		<reference ref_id="1172348" ref_url="https://bugzilla.suse.com/1172348" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10543" ref_url="https://www.suse.com/security/cve/CVE-2020-10543/" source="CVE"/>
		<reference ref_id="CVE-2020-10878" ref_url="https://www.suse.com/security/cve/CVE-2020-10878/" source="CVE"/>
		<reference ref_id="CVE-2020-12723" ref_url="https://www.suse.com/security/cve/CVE-2020-12723/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006983.html" source="SUSE-SU"/>
		<description>
This update for perl fixes the following issues:

- CVE-2020-10543: Fixed a heap buffer overflow in regular expression compiler which could have 
  allowed overwriting of allocated memory with attacker's data (bsc#1171863).
- CVE-2020-10878: Fixed multiple integer overflows which could have allowed the insertion of 
  instructions into the compiled form of Perl regular expression (bsc#1171864).
- CVE-2020-12723: Fixed an attacker's corruption of the intermediate language state of a 
  compiled regular expression (bsc#1171866).
- Fixed a bad warning in features.ph (bsc#1172348).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-19"/>
	<updated date="2020-06-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171863">SUSE bug 1171863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171864">SUSE bug 1171864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171866">SUSE bug 1171866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172348">SUSE bug 1172348</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-10543/">CVE-2020-10543</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-10878/">CVE-2020-10878</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12723/">CVE-2020-12723</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492107" comment="perl-5.26.1-7.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492108" comment="perl-base-5.26.1-7.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492109" comment="perl-base-32bit-5.26.1-7.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137866" version="1" class="patch">
	<metadata>
		<title>Security update for libssh2_org (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1154862" ref_url="https://bugzilla.suse.com/1154862" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17498" ref_url="https://www.suse.com/security/cve/CVE-2019-17498/" source="CVE"/>
		<description>
This update for libssh2_org fixes the following issue:

- CVE-2019-17498: Fixed an integer overflow in a bounds check that might have led to the disclosure of sensitive information or a denial of service (bsc#1154862).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-24"/>
	<updated date="2020-06-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1154862">SUSE bug 1154862</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17498/">CVE-2019-17498</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490705" comment="libssh2-1-1.8.0-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492110" comment="libssh2-1-32bit-1.8.0-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490706" comment="libssh2-devel-1.8.0-4.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137867" version="1" class="patch">
	<metadata>
		<title>Security update for ceph (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171921" ref_url="https://bugzilla.suse.com/1171921" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10753" ref_url="https://www.suse.com/security/cve/CVE-2020-10753/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1747-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007030.html" source="SUSE-SU"/>
		<description>
This update for ceph fixes the following issues:

- CVE-2020-10753: Fixed an HTTP header injection via CORS ExposeHeader tag (bsc#1171921).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-25"/>
	<updated date="2020-06-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171921">SUSE bug 1171921</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-10753/">CVE-2020-10753</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492111" comment="ceph-common-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492112" comment="libcephfs-devel-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492113" comment="libcephfs2-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492114" comment="librados-devel-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492115" comment="librados2-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492116" comment="libradospp-devel-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492117" comment="librbd-devel-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492118" comment="librbd1-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492119" comment="librgw-devel-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492120" comment="librgw2-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492121" comment="python3-ceph-argparse-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492122" comment="python3-cephfs-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492123" comment="python3-rados-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492124" comment="python3-rbd-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492125" comment="python3-rgw-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492126" comment="rados-objclass-devel-14.2.9.970+ged84cae0c9-3.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137868" version="1" class="patch">
	<metadata>
		<title>Security update for mutt (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172906" ref_url="https://bugzilla.suse.com/1172906" source="BUGZILLA"/>
		<reference ref_id="1172935" ref_url="https://bugzilla.suse.com/1172935" source="BUGZILLA"/>
		<reference ref_id="1173197" ref_url="https://bugzilla.suse.com/1173197" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14093" ref_url="https://www.suse.com/security/cve/CVE-2020-14093/" source="CVE"/>
		<reference ref_id="CVE-2020-14154" ref_url="https://www.suse.com/security/cve/CVE-2020-14154/" source="CVE"/>
		<reference ref_id="CVE-2020-14954" ref_url="https://www.suse.com/security/cve/CVE-2020-14954/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1771-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007042.html" source="SUSE-SU"/>
		<description>
This update for mutt fixes the following issues:

- CVE-2020-14954: Fixed a response injection due to a STARTTLS buffering issue which was 
  affecting IMAP, SMTP, and POP3 (bsc#1173197).
- CVE-2020-14093: Fixed a potential IMAP Man-in-the-Middle attack via a PREAUTH response (bsc#1172906, bsc#1172935).
- CVE-2020-14154: Fixed an issue where Mutt was ignoring an expired certificate and was 
  proceeding with a connection (bsc#1172906, bsc#1172935). 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-26"/>
	<updated date="2020-06-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172906">SUSE bug 1172906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172935">SUSE bug 1172935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173197">SUSE bug 1173197</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14093/">CVE-2020-14093</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14154/">CVE-2020-14154</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-14954/">CVE-2020-14954</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492127" comment="mutt-1.10.1-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492128" comment="mutt-doc-1.10.1-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492129" comment="mutt-lang-1.10.1-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137869" version="1" class="patch">
	<metadata>
		<title>Security update for unbound (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1157268" ref_url="https://bugzilla.suse.com/1157268" source="BUGZILLA"/>
		<reference ref_id="1171889" ref_url="https://bugzilla.suse.com/1171889" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18934" ref_url="https://www.suse.com/security/cve/CVE-2019-18934/" source="CVE"/>
		<reference ref_id="CVE-2020-12662" ref_url="https://www.suse.com/security/cve/CVE-2020-12662/" source="CVE"/>
		<reference ref_id="CVE-2020-12663" ref_url="https://www.suse.com/security/cve/CVE-2020-12663/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1772-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007040.html" source="SUSE-SU"/>
		<description>
This update for unbound fixes the following issues:

- CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying 
  an incoming query into a large number of queries directed to a target (bsc#1171889).
- CVE-2020-12663: Fixed an issue where malformed answers from upstream name servers 
  could have been used to make unbound unresponsive (bsc#1171889).	  
- CVE-2019-18934: Fixed a vulnerability in the IPSec module which could have allowed 
  code execution after receiving a special crafted answer (bsc#1157268).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-26"/>
	<updated date="2020-06-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1157268">SUSE bug 1157268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171889">SUSE bug 1171889</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18934/">CVE-2019-18934</cve>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12662/">CVE-2020-12662</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12663/">CVE-2020-12663</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492130" comment="libunbound2-1.6.8-10.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492131" comment="unbound-anchor-1.6.8-10.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492132" comment="unbound-devel-1.6.8-10.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137870" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173027" ref_url="https://bugzilla.suse.com/1173027" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8177" ref_url="https://www.suse.com/security/cve/CVE-2020-8177/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007041.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2020-8177: Fixed an issue where curl could have been tricked by a malicious 
  server to overwrite a local file when using the -J option (bsc#1173027).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-26"/>
	<updated date="2020-06-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173027">SUSE bug 1173027</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8177/">CVE-2020-8177</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492133" comment="curl-7.60.0-3.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492134" comment="libcurl-devel-7.60.0-3.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492135" comment="libcurl4-7.60.0-3.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492136" comment="libcurl4-32bit-7.60.0-3.29.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137871" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173274" ref_url="https://bugzilla.suse.com/1173274" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14422" ref_url="https://www.suse.com/security/cve/CVE-2020-14422/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007067.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2020-14422: Fixed an improper computation of hash values in the IPv4Interface and IPv6Interface 
  could have led to denial of service (bsc#1173274).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-02"/>
	<updated date="2020-07-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173274">SUSE bug 1173274</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14422/">CVE-2020-14422</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492137" comment="libpython3_6m1_0-3.6.10-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492138" comment="python3-3.6.10-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492139" comment="python3-base-3.6.10-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492140" comment="python3-curses-3.6.10-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492141" comment="python3-dbm-3.6.10-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492142" comment="python3-devel-3.6.10-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492143" comment="python3-idle-3.6.10-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492144" comment="python3-testsuite-3.6.10-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492145" comment="python3-tk-3.6.10-3.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137872" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168669" ref_url="https://bugzilla.suse.com/1168669" source="BUGZILLA"/>
		<reference ref_id="1173032" ref_url="https://bugzilla.suse.com/1173032" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12402" ref_url="https://www.suse.com/security/cve/CVE-2020-12402/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007074.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

mozilla-nss was updated to version 3.53.1
 
- CVE-2020-12402: Fixed a potential side channel attack during RSA key generation (bsc#1173032)
- Fixed various FIPS issues in libfreebl3 which were causing segfaults in the test suite of chrony (bsc#1168669).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-06"/>
	<updated date="2020-07-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1168669">SUSE bug 1168669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173032">SUSE bug 1173032</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12402/">CVE-2020-12402</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492146" comment="libfreebl3-3.53.1-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492147" comment="libfreebl3-32bit-3.53.1-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492148" comment="libsoftokn3-3.53.1-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492149" comment="libsoftokn3-32bit-3.53.1-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492150" comment="mozilla-nss-3.53.1-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492151" comment="mozilla-nss-32bit-3.53.1-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492152" comment="mozilla-nss-certs-3.53.1-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492153" comment="mozilla-nss-certs-32bit-3.53.1-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492154" comment="mozilla-nss-devel-3.53.1-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492155" comment="mozilla-nss-sysinit-3.53.1-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492156" comment="mozilla-nss-tools-3.53.1-3.45.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137873" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172698" ref_url="https://bugzilla.suse.com/1172698" source="BUGZILLA"/>
		<reference ref_id="1172704" ref_url="https://bugzilla.suse.com/1172704" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8023" ref_url="https://www.suse.com/security/cve/CVE-2020-8023/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1856-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007078.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAP_CONFIG_BACKEND='ldap' was used (bsc#1172698).	  
- Changed DB_CONFIG to root:ldap permissions (bsc#1172704).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-06"/>
	<updated date="2020-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172698">SUSE bug 1172698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172704">SUSE bug 1172704</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8023/">CVE-2020-8023</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492157" comment="libldap-2_4-2-2.4.46-9.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492158" comment="libldap-2_4-2-32bit-2.4.46-9.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492159" comment="libldap-data-2.4.46-9.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492160" comment="openldap2-client-2.4.46-9.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492161" comment="openldap2-devel-2.4.46-9.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492162" comment="openldap2-devel-static-2.4.46-9.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492163" comment="openldap2-ppolicy-check-password-1.2-9.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137874" version="1" class="patch">
	<metadata>
		<title>Security update for permissions (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171883" ref_url="https://bugzilla.suse.com/1171883" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007076.html" source="SUSE-SU"/>
		<description>
This update for permissions fixes the following issues:

- Removed conflicting entries which might expose pcp to security issues (bsc#1171883) 	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-06"/>
	<updated date="2020-07-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1171883">SUSE bug 1171883</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492164" comment="permissions-20181116-9.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492165" comment="permissions-zypp-plugin-20181116-9.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137875" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1172205" ref_url="https://bugzilla.suse.com/1172205" source="BUGZILLA"/>
		<reference ref_id="1173376" ref_url="https://bugzilla.suse.com/1173376" source="BUGZILLA"/>
		<reference ref_id="1173377" ref_url="https://bugzilla.suse.com/1173377" source="BUGZILLA"/>
		<reference ref_id="1173378" ref_url="https://bugzilla.suse.com/1173378" source="BUGZILLA"/>
		<reference ref_id="1173380" ref_url="https://bugzilla.suse.com/1173380" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543/" source="CVE"/>
		<reference ref_id="CVE-2020-15563" ref_url="https://www.suse.com/security/cve/CVE-2020-15563/" source="CVE"/>
		<reference ref_id="CVE-2020-15565" ref_url="https://www.suse.com/security/cve/CVE-2020-15565/" source="CVE"/>
		<reference ref_id="CVE-2020-15566" ref_url="https://www.suse.com/security/cve/CVE-2020-15566/" source="CVE"/>
		<reference ref_id="CVE-2020-15567" ref_url="https://www.suse.com/security/cve/CVE-2020-15567/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007118.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking (bsc#1173377).
- CVE-2020-15565: Fixed insufficient cache write-back under VT-d (bsc#1173378).
- CVE-2020-15566: Fixed incorrect error handling in event channel port allocation (bsc#1173376).
- CVE-2020-15567: Fixed non-atomic modification of live EPT PTE (bsc#1173380).
- CVE-2020-0543: Special Register Buffer Data Sampling (SRBDS) aka 'CrossTalk' (bsc#1172205).

Additional upstream bug fixes (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-10"/>
	<updated date="2020-07-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172205">SUSE bug 1172205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173376">SUSE bug 1173376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173377">SUSE bug 1173377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173378">SUSE bug 1173378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173380">SUSE bug 1173380</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15563/">CVE-2020-15563</cve>
	<cve impact="important" cvss3="7.9/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-15565/">CVE-2020-15565</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15566/">CVE-2020-15566</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-15567/">CVE-2020-15567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492166" comment="xen-libs-4.12.3_04-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492167" comment="xen-tools-domU-4.12.3_04-3.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137876" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171437" ref_url="https://bugzilla.suse.com/1171437" source="BUGZILLA"/>
		<reference ref_id="1172307" ref_url="https://bugzilla.suse.com/1172307" source="BUGZILLA"/>
		<reference ref_id="1173159" ref_url="https://bugzilla.suse.com/1173159" source="BUGZILLA"/>
		<reference ref_id="1173160" ref_url="https://bugzilla.suse.com/1173160" source="BUGZILLA"/>
		<reference ref_id="1173161" ref_url="https://bugzilla.suse.com/1173161" source="BUGZILLA"/>
		<reference ref_id="1173359" ref_url="https://bugzilla.suse.com/1173359" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10730" ref_url="https://www.suse.com/security/cve/CVE-2020-10730/" source="CVE"/>
		<reference ref_id="CVE-2020-10745" ref_url="https://www.suse.com/security/cve/CVE-2020-10745/" source="CVE"/>
		<reference ref_id="CVE-2020-10760" ref_url="https://www.suse.com/security/cve/CVE-2020-10760/" source="CVE"/>
		<reference ref_id="CVE-2020-14303" ref_url="https://www.suse.com/security/cve/CVE-2020-14303/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007127.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets 
  containing dots could potentially have consumed excessive CPU (bsc#1173160).
- CVE-2020-14303: Fixed an endless loop when receiving at AD DC empty UDP packets (bsc#1173359).
- CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined (bsc#1173159).
- CVE-2020-10760: Fixed a use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV (bsc#1173161).
- Added libnetapi-devel to baselibs conf, for wine usage (bsc#1172307).
- Fixed an installing issue where samba - samba-ad-dc.service did not exist and unit was not found (bsc#1171437).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-14"/>
	<updated date="2020-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171437">SUSE bug 1171437</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172307">SUSE bug 1172307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173159">SUSE bug 1173159</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173160">SUSE bug 1173160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173161">SUSE bug 1173161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173359">SUSE bug 1173359</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10730/">CVE-2020-10730</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10745/">CVE-2020-10745</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10760/">CVE-2020-10760</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14303/">CVE-2020-14303</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492168" comment="libdcerpc-binding0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492169" comment="libdcerpc-binding0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492170" comment="libdcerpc-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492171" comment="libdcerpc-samr-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492172" comment="libdcerpc-samr0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492173" comment="libdcerpc0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492174" comment="libdcerpc0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492175" comment="libndr-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492176" comment="libndr-krb5pac-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492177" comment="libndr-krb5pac0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492178" comment="libndr-krb5pac0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492179" comment="libndr-nbt-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492180" comment="libndr-nbt0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492181" comment="libndr-nbt0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492182" comment="libndr-standard-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492183" comment="libndr-standard0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492184" comment="libndr-standard0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492185" comment="libndr0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492186" comment="libndr0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492187" comment="libnetapi-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492188" comment="libnetapi0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492189" comment="libnetapi0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492190" comment="libsamba-credentials-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492191" comment="libsamba-credentials0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492192" comment="libsamba-credentials0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492193" comment="libsamba-errors-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492194" comment="libsamba-errors0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492195" comment="libsamba-errors0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492196" comment="libsamba-hostconfig-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492197" comment="libsamba-hostconfig0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492198" comment="libsamba-hostconfig0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492199" comment="libsamba-passdb-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492200" comment="libsamba-passdb0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492201" comment="libsamba-passdb0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492202" comment="libsamba-policy-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492203" comment="libsamba-policy-python3-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492204" comment="libsamba-policy0-python3-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492205" comment="libsamba-util-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492206" comment="libsamba-util0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492207" comment="libsamba-util0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492208" comment="libsamdb-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492209" comment="libsamdb0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492210" comment="libsamdb0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492211" comment="libsmbclient-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492212" comment="libsmbclient0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492213" comment="libsmbconf-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492214" comment="libsmbconf0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492215" comment="libsmbconf0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492216" comment="libsmbldap-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492217" comment="libsmbldap2-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492218" comment="libsmbldap2-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492219" comment="libtevent-util-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492220" comment="libtevent-util0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492221" comment="libtevent-util0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492222" comment="libwbclient-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492223" comment="libwbclient0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492224" comment="libwbclient0-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492225" comment="samba-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492226" comment="samba-client-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492227" comment="samba-core-devel-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492228" comment="samba-libs-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492229" comment="samba-libs-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492230" comment="samba-libs-python3-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492231" comment="samba-python3-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492232" comment="samba-winbind-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492233" comment="samba-winbind-32bit-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137877" version="1" class="patch">
	<metadata>
		<title>Security update for xrdp (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173580" ref_url="https://bugzilla.suse.com/1173580" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-4044" ref_url="https://www.suse.com/security/cve/CVE-2020-4044/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1933-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-July/015437.html" source="SUSE-SU"/>
		<description>
This update for xrdp fixes the following issues:

- Security fixes (bsc#1173580, CVE-2020-4044):
  + Add patches:
    * xrdp-cve-2020-4044-fix-0.patch
    * xrdp-cve-2020-4044-fix-1.patch
  + Rebase SLE patch:
    * xrdp-fate318398-change-expired-password.patch
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-15"/>
	<updated date="2020-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173580">SUSE bug 1173580</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-4044/">CVE-2020-4044</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492234" comment="libpainter0-0.9.6-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492235" comment="librfxencode0-0.9.6-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492236" comment="xrdp-0.9.6-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492237" comment="xrdp-devel-0.9.6-4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137878" version="1" class="patch">
	<metadata>
		<title>Security update for cairo (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1049092" ref_url="https://bugzilla.suse.com/1049092" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-9814" ref_url="https://www.suse.com/security/cve/CVE-2017-9814/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1937-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007144.html" source="SUSE-SU"/>
		<description>
This update for cairo fixes the following issues:

- Fix a memory corruption in pango.
- Revert 'Correctly decode Adobe CMYK JPEGs in PDF export'.
- Add more FreeeType font color conversions to support COLR/CPAL.
- Fix crash when rendering Microsoft's Segoe UI Emoji Regular font.
- Fix memory leaks found by Coverity.
- Fix assertion failure in the freetype backend. (fdo#105746).
- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc and check cmap size before allocating (bsc#1049092)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-15"/>
	<updated date="2020-07-15"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1049092">SUSE bug 1049092</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9814/">CVE-2017-9814</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492238" comment="cairo-devel-1.16.0-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492239" comment="libcairo-gobject2-1.16.0-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492240" comment="libcairo-script-interpreter2-1.16.0-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492241" comment="libcairo2-1.16.0-4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137879" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159284" ref_url="https://bugzilla.suse.com/1159284" source="BUGZILLA"/>
		<reference ref_id="1165572" ref_url="https://bugzilla.suse.com/1165572" source="BUGZILLA"/>
		<reference ref_id="1167437" ref_url="https://bugzilla.suse.com/1167437" source="BUGZILLA"/>
		<reference ref_id="1168340" ref_url="https://bugzilla.suse.com/1168340" source="BUGZILLA"/>
		<reference ref_id="1169604" ref_url="https://bugzilla.suse.com/1169604" source="BUGZILLA"/>
		<reference ref_id="1170104" ref_url="https://bugzilla.suse.com/1170104" source="BUGZILLA"/>
		<reference ref_id="1170288" ref_url="https://bugzilla.suse.com/1170288" source="BUGZILLA"/>
		<reference ref_id="1171906" ref_url="https://bugzilla.suse.com/1171906" source="BUGZILLA"/>
		<reference ref_id="1172075" ref_url="https://bugzilla.suse.com/1172075" source="BUGZILLA"/>
		<reference ref_id="1173072" ref_url="https://bugzilla.suse.com/1173072" source="BUGZILLA"/>
		<reference ref_id="1174165" ref_url="https://bugzilla.suse.com/1174165" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-15750" ref_url="https://www.suse.com/security/cve/CVE-2018-15750/" source="CVE"/>
		<reference ref_id="CVE-2018-15751" ref_url="https://www.suse.com/security/cve/CVE-2018-15751/" source="CVE"/>
		<reference ref_id="CVE-2020-11651" ref_url="https://www.suse.com/security/cve/CVE-2020-11651/" source="CVE"/>
		<reference ref_id="CVE-2020-11652" ref_url="https://www.suse.com/security/cve/CVE-2020-11652/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007156.html" source="SUSE-SU"/>
		<description>
This update for salt contains the following fixes:

- Fix for TypeError in Tornado importer (bsc#1174165)
- Require python3-distro only for TW (bsc#1173072)
- Update to Salt version 3000:
  See release notes: https://docs.saltstack.com/en/latest/topics/releases/3000.html

- Add docker.logout to docker execution module. (bsc#1165572)
- Add option to enable/disable force refresh for zypper.
- Add publish_batch to ClearFuncs exposed methods.
- Adds test for zypper abbreviation fix.
- Avoid segfault from 'salt-api' under certain conditions of heavy load managing SSH
  minions. (bsc#1169604)
- Avoid traceback on debug logging for swarm module. (bsc#1172075)
- Batch mode now also correctly provides return value. (bsc#1168340)
- Better import cache handline.
- Do not make file.recurse state to fail when msgpack 0.5.4. (bsc#1167437)
- Do not require vendored backports-abc. (bsc#1170288)
- Fix errors from unit tests due NO_MOCK and NO_MOCK_REASON deprecation.
- Fix for low rpm_lowpkg unit test.
- Fix for temp folder definition in loader unit test.
- Fix for unless requisite when pip is not installed.
- Fix integration test failure for test_mod_del_repo_multiline_values.
- Fix regression in service states with reload argument.
- Fix tornado imports and missing _utils after rebasing patches.
- Fix status attribute issue in aptpkg test.
- Improved storage pool or network handling.
- loop: fix variable names for until_no_eval.
- Make 'salt.ext.tornado.gen' to use 'salt.ext.backports_abc' on Python 2.
- Make setup.py script not to require setuptools greater than 9.1.
- More robust remote port detection.
- Prevent sporious 'salt-api' stuck processes when managing SSH minions.
  because of logging deadlock. (bsc#1159284)
- Python3.8 compatibility changes.
- Removes unresolved merge conflict in yumpkg module.
- Returns a the list of IPs filtered by the optional network list.
- Revert broken changes to slspath made on Salt 3000 (saltstack/salt#56341). (bsc#1170104)
- Sanitize grains loaded from roster_grains.json cache during 'state.pkg'.
- Various virt backports from 3000.2.
- zypperpkg: filter patterns that start with dot. (bsc#1171906)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-21"/>
	<updated date="2020-07-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1159284">SUSE bug 1159284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165572">SUSE bug 1165572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167437">SUSE bug 1167437</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168340">SUSE bug 1168340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169604">SUSE bug 1169604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170104">SUSE bug 1170104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170288">SUSE bug 1170288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171906">SUSE bug 1171906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172075">SUSE bug 1172075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173072">SUSE bug 1173072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174165">SUSE bug 1174165</bugzilla>
	<cve impact="important" cvss3="8.7/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-15750/">CVE-2018-15750</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15751/">CVE-2018-15751</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11651/">CVE-2020-11651</cve>
	<cve impact="critical" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11652/">CVE-2020-11652</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492242" comment="python3-salt-3000-6.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492243" comment="salt-3000-6.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492244" comment="salt-bash-completion-3000-6.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492245" comment="salt-doc-3000-6.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492246" comment="salt-minion-3000-6.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492247" comment="salt-zsh-completion-3000-6.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137880" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173998" ref_url="https://bugzilla.suse.com/1173998" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13753" ref_url="https://www.suse.com/security/cve/CVE-2020-13753/" source="CVE"/>
		<reference ref_id="CVE-2020-9802" ref_url="https://www.suse.com/security/cve/CVE-2020-9802/" source="CVE"/>
		<reference ref_id="CVE-2020-9803" ref_url="https://www.suse.com/security/cve/CVE-2020-9803/" source="CVE"/>
		<reference ref_id="CVE-2020-9805" ref_url="https://www.suse.com/security/cve/CVE-2020-9805/" source="CVE"/>
		<reference ref_id="CVE-2020-9806" ref_url="https://www.suse.com/security/cve/CVE-2020-9806/" source="CVE"/>
		<reference ref_id="CVE-2020-9807" ref_url="https://www.suse.com/security/cve/CVE-2020-9807/" source="CVE"/>
		<reference ref_id="CVE-2020-9843" ref_url="https://www.suse.com/security/cve/CVE-2020-9843/" source="CVE"/>
		<reference ref_id="CVE-2020-9850" ref_url="https://www.suse.com/security/cve/CVE-2020-9850/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007167.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.28.3 (bsc#1173998):
  + Enable kinetic scrolling with async scrolling.
  + Fix web process hangs on large GitHub pages.
  + Bubblewrap sandbox should not attempt to bind empty paths.
  + Fix threading issues in the media player.
  + Fix several crashes and rendering issues.
  + Security fixes:  CVE-2020-9802, CVE-2020-9803, CVE-2020-9805,
    CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850,
    CVE-2020-13753.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-21"/>
	<updated date="2020-07-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173998">SUSE bug 1173998</bugzilla>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13753/">CVE-2020-13753</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9802/">CVE-2020-9802</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9803/">CVE-2020-9803</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9805/">CVE-2020-9805</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9806/">CVE-2020-9806</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9807/">CVE-2020-9807</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9843/">CVE-2020-9843</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9850/">CVE-2020-9850</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492248" comment="libjavascriptcoregtk-4_0-18-2.28.3-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492249" comment="libwebkit2gtk-4_0-37-2.28.3-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492250" comment="libwebkit2gtk3-lang-2.28.3-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492251" comment="webkit2gtk-4_0-injected-bundles-2.28.3-3.57.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137881" version="1" class="patch">
	<metadata>
		<title>Security update for ldb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173159" ref_url="https://bugzilla.suse.com/1173159" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10730" ref_url="https://www.suse.com/security/cve/CVE-2020-10730/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007193.html" source="SUSE-SU"/>
		<description>
This update for ldb fixes the following issues:

- CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined (bsc#1173159).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-29"/>
	<updated date="2020-07-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173159">SUSE bug 1173159</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10730/">CVE-2020-10730</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492252" comment="ldb-tools-1.4.6-3.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492253" comment="libldb-devel-1.4.6-3.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492254" comment="libldb1-1.4.6-3.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492255" comment="libldb1-32bit-1.4.6-3.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492256" comment="python3-ldb-1.4.6-3.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492257" comment="python3-ldb-devel-1.4.6-3.5.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137882" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168994" ref_url="https://bugzilla.suse.com/1168994" source="BUGZILLA"/>
		<reference ref_id="1173812" ref_url="https://bugzilla.suse.com/1173812" source="BUGZILLA"/>
		<reference ref_id="1174463" ref_url="https://bugzilla.suse.com/1174463" source="BUGZILLA"/>
		<reference ref_id="1174570" ref_url="https://bugzilla.suse.com/1174570" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10713" ref_url="https://www.suse.com/security/cve/CVE-2020-10713/" source="CVE"/>
		<reference ref_id="CVE-2020-14308" ref_url="https://www.suse.com/security/cve/CVE-2020-14308/" source="CVE"/>
		<reference ref_id="CVE-2020-14309" ref_url="https://www.suse.com/security/cve/CVE-2020-14309/" source="CVE"/>
		<reference ref_id="CVE-2020-14310" ref_url="https://www.suse.com/security/cve/CVE-2020-14310/" source="CVE"/>
		<reference ref_id="CVE-2020-14311" ref_url="https://www.suse.com/security/cve/CVE-2020-14311/" source="CVE"/>
		<reference ref_id="CVE-2020-15706" ref_url="https://www.suse.com/security/cve/CVE-2020-15706/" source="CVE"/>
		<reference ref_id="CVE-2020-15707" ref_url="https://www.suse.com/security/cve/CVE-2020-15707/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007200.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

- CVE-2020-10713 (bsc#1168994)
- CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
- CVE-2020-15706 (bsc#1174463)
- CVE-2020-15707 (bsc#1174570)

- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-29"/>
	<updated date="2020-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168994">SUSE bug 1168994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173812">SUSE bug 1173812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174463">SUSE bug 1174463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174570">SUSE bug 1174570</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10713/">CVE-2020-10713</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14308/">CVE-2020-14308</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14309/">CVE-2020-14309</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14310/">CVE-2020-14310</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14311/">CVE-2020-14311</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15706/">CVE-2020-15706</cve>
	<cve impact="important" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15707/">CVE-2020-15707</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492258" comment="grub2-2.02-26.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492259" comment="grub2-arm64-efi-2.02-26.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492260" comment="grub2-i386-pc-2.02-26.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492261" comment="grub2-powerpc-ieee1275-2.02-26.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492262" comment="grub2-s390x-emu-2.02-26.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492263" comment="grub2-snapper-plugin-2.02-26.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492264" comment="grub2-systemd-sleep-plugin-2.02-26.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492265" comment="grub2-x86_64-efi-2.02-26.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137883" version="1" class="patch">
	<metadata>
		<title>Security update for targetcli-fb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172743" ref_url="https://bugzilla.suse.com/1172743" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13867" ref_url="https://www.suse.com/security/cve/CVE-2020-13867/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007202.html" source="SUSE-SU"/>
		<description>
This update for targetcli-fb fixes the following issues:

- CVE-2020-13867: Fixed the permissions in /etc/target (bsc#1172743)	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-30"/>
	<updated date="2020-07-30"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172743">SUSE bug 1172743</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-13867/">CVE-2020-13867</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492266" comment="python3-targetcli-fb-2.1.49-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492267" comment="targetcli-fb-common-2.1.49-10.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137884" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174415" ref_url="https://bugzilla.suse.com/1174415" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15900" ref_url="https://www.suse.com/security/cve/CVE-2020-15900/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2095-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007203.html" source="SUSE-SU"/>
		<description>
This update for ghostscript fixes the following issues:

- fixed CVE-2020-15900 Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-30"/>
	<updated date="2020-07-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174415">SUSE bug 1174415</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15900/">CVE-2020-15900</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492268" comment="ghostscript-9.52-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492269" comment="ghostscript-devel-9.52-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492270" comment="ghostscript-x11-9.52-3.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137885" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1150660" ref_url="https://bugzilla.suse.com/1150660" source="BUGZILLA"/>
		<reference ref_id="1151927" ref_url="https://bugzilla.suse.com/1151927" source="BUGZILLA"/>
		<reference ref_id="1152107" ref_url="https://bugzilla.suse.com/1152107" source="BUGZILLA"/>
		<reference ref_id="1152624" ref_url="https://bugzilla.suse.com/1152624" source="BUGZILLA"/>
		<reference ref_id="1158983" ref_url="https://bugzilla.suse.com/1158983" source="BUGZILLA"/>
		<reference ref_id="1159058" ref_url="https://bugzilla.suse.com/1159058" source="BUGZILLA"/>
		<reference ref_id="1161016" ref_url="https://bugzilla.suse.com/1161016" source="BUGZILLA"/>
		<reference ref_id="1162002" ref_url="https://bugzilla.suse.com/1162002" source="BUGZILLA"/>
		<reference ref_id="1162063" ref_url="https://bugzilla.suse.com/1162063" source="BUGZILLA"/>
		<reference ref_id="1163309" ref_url="https://bugzilla.suse.com/1163309" source="BUGZILLA"/>
		<reference ref_id="1166985" ref_url="https://bugzilla.suse.com/1166985" source="BUGZILLA"/>
		<reference ref_id="1167104" ref_url="https://bugzilla.suse.com/1167104" source="BUGZILLA"/>
		<reference ref_id="1168081" ref_url="https://bugzilla.suse.com/1168081" source="BUGZILLA"/>
		<reference ref_id="1168959" ref_url="https://bugzilla.suse.com/1168959" source="BUGZILLA"/>
		<reference ref_id="1169194" ref_url="https://bugzilla.suse.com/1169194" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169771" ref_url="https://bugzilla.suse.com/1169771" source="BUGZILLA"/>
		<reference ref_id="1169795" ref_url="https://bugzilla.suse.com/1169795" source="BUGZILLA"/>
		<reference ref_id="1170011" ref_url="https://bugzilla.suse.com/1170011" source="BUGZILLA"/>
		<reference ref_id="1170442" ref_url="https://bugzilla.suse.com/1170442" source="BUGZILLA"/>
		<reference ref_id="1170592" ref_url="https://bugzilla.suse.com/1170592" source="BUGZILLA"/>
		<reference ref_id="1170617" ref_url="https://bugzilla.suse.com/1170617" source="BUGZILLA"/>
		<reference ref_id="1170618" ref_url="https://bugzilla.suse.com/1170618" source="BUGZILLA"/>
		<reference ref_id="1171124" ref_url="https://bugzilla.suse.com/1171124" source="BUGZILLA"/>
		<reference ref_id="1171424" ref_url="https://bugzilla.suse.com/1171424" source="BUGZILLA"/>
		<reference ref_id="1171529" ref_url="https://bugzilla.suse.com/1171529" source="BUGZILLA"/>
		<reference ref_id="1171530" ref_url="https://bugzilla.suse.com/1171530" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1171732" ref_url="https://bugzilla.suse.com/1171732" source="BUGZILLA"/>
		<reference ref_id="1171739" ref_url="https://bugzilla.suse.com/1171739" source="BUGZILLA"/>
		<reference ref_id="1171743" ref_url="https://bugzilla.suse.com/1171743" source="BUGZILLA"/>
		<reference ref_id="1171753" ref_url="https://bugzilla.suse.com/1171753" source="BUGZILLA"/>
		<reference ref_id="1171759" ref_url="https://bugzilla.suse.com/1171759" source="BUGZILLA"/>
		<reference ref_id="1171835" ref_url="https://bugzilla.suse.com/1171835" source="BUGZILLA"/>
		<reference ref_id="1171841" ref_url="https://bugzilla.suse.com/1171841" source="BUGZILLA"/>
		<reference ref_id="1171868" ref_url="https://bugzilla.suse.com/1171868" source="BUGZILLA"/>
		<reference ref_id="1171904" ref_url="https://bugzilla.suse.com/1171904" source="BUGZILLA"/>
		<reference ref_id="1172247" ref_url="https://bugzilla.suse.com/1172247" source="BUGZILLA"/>
		<reference ref_id="1172257" ref_url="https://bugzilla.suse.com/1172257" source="BUGZILLA"/>
		<reference ref_id="1172344" ref_url="https://bugzilla.suse.com/1172344" source="BUGZILLA"/>
		<reference ref_id="1172458" ref_url="https://bugzilla.suse.com/1172458" source="BUGZILLA"/>
		<reference ref_id="1172484" ref_url="https://bugzilla.suse.com/1172484" source="BUGZILLA"/>
		<reference ref_id="1172537" ref_url="https://bugzilla.suse.com/1172537" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1172687" ref_url="https://bugzilla.suse.com/1172687" source="BUGZILLA"/>
		<reference ref_id="1172719" ref_url="https://bugzilla.suse.com/1172719" source="BUGZILLA"/>
		<reference ref_id="1172759" ref_url="https://bugzilla.suse.com/1172759" source="BUGZILLA"/>
		<reference ref_id="1172775" ref_url="https://bugzilla.suse.com/1172775" source="BUGZILLA"/>
		<reference ref_id="1172781" ref_url="https://bugzilla.suse.com/1172781" source="BUGZILLA"/>
		<reference ref_id="1172782" ref_url="https://bugzilla.suse.com/1172782" source="BUGZILLA"/>
		<reference ref_id="1172783" ref_url="https://bugzilla.suse.com/1172783" source="BUGZILLA"/>
		<reference ref_id="1172871" ref_url="https://bugzilla.suse.com/1172871" source="BUGZILLA"/>
		<reference ref_id="1172872" ref_url="https://bugzilla.suse.com/1172872" source="BUGZILLA"/>
		<reference ref_id="1172999" ref_url="https://bugzilla.suse.com/1172999" source="BUGZILLA"/>
		<reference ref_id="1173060" ref_url="https://bugzilla.suse.com/1173060" source="BUGZILLA"/>
		<reference ref_id="1173074" ref_url="https://bugzilla.suse.com/1173074" source="BUGZILLA"/>
		<reference ref_id="1173146" ref_url="https://bugzilla.suse.com/1173146" source="BUGZILLA"/>
		<reference ref_id="1173265" ref_url="https://bugzilla.suse.com/1173265" source="BUGZILLA"/>
		<reference ref_id="1173280" ref_url="https://bugzilla.suse.com/1173280" source="BUGZILLA"/>
		<reference ref_id="1173284" ref_url="https://bugzilla.suse.com/1173284" source="BUGZILLA"/>
		<reference ref_id="1173428" ref_url="https://bugzilla.suse.com/1173428" source="BUGZILLA"/>
		<reference ref_id="1173514" ref_url="https://bugzilla.suse.com/1173514" source="BUGZILLA"/>
		<reference ref_id="1173567" ref_url="https://bugzilla.suse.com/1173567" source="BUGZILLA"/>
		<reference ref_id="1173573" ref_url="https://bugzilla.suse.com/1173573" source="BUGZILLA"/>
		<reference ref_id="1173659" ref_url="https://bugzilla.suse.com/1173659" source="BUGZILLA"/>
		<reference ref_id="1173746" ref_url="https://bugzilla.suse.com/1173746" source="BUGZILLA"/>
		<reference ref_id="1173818" ref_url="https://bugzilla.suse.com/1173818" source="BUGZILLA"/>
		<reference ref_id="1173820" ref_url="https://bugzilla.suse.com/1173820" source="BUGZILLA"/>
		<reference ref_id="1173825" ref_url="https://bugzilla.suse.com/1173825" source="BUGZILLA"/>
		<reference ref_id="1173826" ref_url="https://bugzilla.suse.com/1173826" source="BUGZILLA"/>
		<reference ref_id="1173833" ref_url="https://bugzilla.suse.com/1173833" source="BUGZILLA"/>
		<reference ref_id="1173838" ref_url="https://bugzilla.suse.com/1173838" source="BUGZILLA"/>
		<reference ref_id="1173839" ref_url="https://bugzilla.suse.com/1173839" source="BUGZILLA"/>
		<reference ref_id="1173845" ref_url="https://bugzilla.suse.com/1173845" source="BUGZILLA"/>
		<reference ref_id="1173857" ref_url="https://bugzilla.suse.com/1173857" source="BUGZILLA"/>
		<reference ref_id="1174113" ref_url="https://bugzilla.suse.com/1174113" source="BUGZILLA"/>
		<reference ref_id="1174115" ref_url="https://bugzilla.suse.com/1174115" source="BUGZILLA"/>
		<reference ref_id="1174122" ref_url="https://bugzilla.suse.com/1174122" source="BUGZILLA"/>
		<reference ref_id="1174123" ref_url="https://bugzilla.suse.com/1174123" source="BUGZILLA"/>
		<reference ref_id="1174186" ref_url="https://bugzilla.suse.com/1174186" source="BUGZILLA"/>
		<reference ref_id="1174187" ref_url="https://bugzilla.suse.com/1174187" source="BUGZILLA"/>
		<reference ref_id="1174296" ref_url="https://bugzilla.suse.com/1174296" source="BUGZILLA"/>
		<reference ref_id="1174343" ref_url="https://bugzilla.suse.com/1174343" source="BUGZILLA"/>
		<reference ref_id="1174356" ref_url="https://bugzilla.suse.com/1174356" source="BUGZILLA"/>
		<reference ref_id="1174409" ref_url="https://bugzilla.suse.com/1174409" source="BUGZILLA"/>
		<reference ref_id="1174438" ref_url="https://bugzilla.suse.com/1174438" source="BUGZILLA"/>
		<reference ref_id="1174462" ref_url="https://bugzilla.suse.com/1174462" source="BUGZILLA"/>
		<reference ref_id="1174543" ref_url="https://bugzilla.suse.com/1174543" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16746" ref_url="https://www.suse.com/security/cve/CVE-2019-16746/" source="CVE"/>
		<reference ref_id="CVE-2019-20810" ref_url="https://www.suse.com/security/cve/CVE-2019-20810/" source="CVE"/>
		<reference ref_id="CVE-2019-20908" ref_url="https://www.suse.com/security/cve/CVE-2019-20908/" source="CVE"/>
		<reference ref_id="CVE-2020-0305" ref_url="https://www.suse.com/security/cve/CVE-2020-0305/" source="CVE"/>
		<reference ref_id="CVE-2020-10766" ref_url="https://www.suse.com/security/cve/CVE-2020-10766/" source="CVE"/>
		<reference ref_id="CVE-2020-10767" ref_url="https://www.suse.com/security/cve/CVE-2020-10767/" source="CVE"/>
		<reference ref_id="CVE-2020-10768" ref_url="https://www.suse.com/security/cve/CVE-2020-10768/" source="CVE"/>
		<reference ref_id="CVE-2020-10769" ref_url="https://www.suse.com/security/cve/CVE-2020-10769/" source="CVE"/>
		<reference ref_id="CVE-2020-10773" ref_url="https://www.suse.com/security/cve/CVE-2020-10773/" source="CVE"/>
		<reference ref_id="CVE-2020-10781" ref_url="https://www.suse.com/security/cve/CVE-2020-10781/" source="CVE"/>
		<reference ref_id="CVE-2020-12771" ref_url="https://www.suse.com/security/cve/CVE-2020-12771/" source="CVE"/>
		<reference ref_id="CVE-2020-12888" ref_url="https://www.suse.com/security/cve/CVE-2020-12888/" source="CVE"/>
		<reference ref_id="CVE-2020-13974" ref_url="https://www.suse.com/security/cve/CVE-2020-13974/" source="CVE"/>
		<reference ref_id="CVE-2020-14416" ref_url="https://www.suse.com/security/cve/CVE-2020-14416/" source="CVE"/>
		<reference ref_id="CVE-2020-15393" ref_url="https://www.suse.com/security/cve/CVE-2020-15393/" source="CVE"/>
		<reference ref_id="CVE-2020-15780" ref_url="https://www.suse.com/security/cve/CVE-2020-15780/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:


- CVE-2020-15780: A lockdown bypass for loading unsigned modules using ACPI table injection was fixed. (bsc#1173573)
- CVE-2020-15393: Fixed a memory leak in usbtest_disconnect (bnc#1173514).
- CVE-2020-12771: An issue was discovered in btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails (bnc#1171732).
- CVE-2020-12888: The VFIO PCI driver mishandled attempts to access disabled memory space (bnc#1171868).
- CVE-2020-10773: Fixed a memory leak on s390/s390x, in the cmm_timeout_hander in file arch/s390/mm/cmm.c (bnc#1172999).
- CVE-2020-14416: Fixed a race condition in tty-&gt;disc_data handling in the slip and slcan line discipline could lead to a use-after-free. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002).
- CVE-2020-10768: Fixed an issue with the prctl() function, where indirect branch speculation could be enabled even though it was diabled before (bnc#1172783).
- CVE-2020-10766: Fixed an issue which allowed an attacker with a local account to disable SSBD protection (bnc#1172781).
- CVE-2020-10767: Fixed an issue where Indirect Branch Prediction Barrier was disabled in certain circumstances, leaving the system open to a spectre v2 style attack (bnc#1172782).
- CVE-2020-13974: Fixed a integer overflow in drivers/tty/vt/keyboard.c, if k_ascii is called several times in a row (bnc#1172775).
- CVE-2020-0305: Fixed a possible use-after-free due to a race condition incdev_get of char_dev.c. This could lead to local escalation of privilege. User interaction is not needed for exploitation (bnc#1174462).
- CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265).
- CVE-2020-10781: Fixed a denial of service issue in the ZRAM implementation (bnc#1173074).
- CVE-2019-20908: Fixed incorrect access permissions for the efivar_ssdt ACPI variable, which could be used by attackers to bypass lockdown or secure boot restrictions (bnc#1173567).
- CVE-2019-20810: Fixed a memory leak in go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c because it did not call snd_card_free for a failure path (bnc#1172458).
- CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c, related to invalid length checks for variable elements in a beacon head (bnc#1152107).

The following non-security bugs were fixed:

- ACPI: GED: add support for _Exx / _Lxx handler methods (bsc#1111666).
- ACPI: GED: use correct trigger type field in _Exx / _Lxx handling (bsc#1111666).
- ACPI: NFIT: Fix unlock on error in scrub_show() (bsc#1171753).
- ACPI: PM: Avoid using power resources if there are none for D0 (bsc#1051510).
- ACPI: sysfs: Fix pm_profile_attr type (bsc#1111666).
- ACPI: video: Use native backlight on Acer Aspire 5783z (bsc#1111666).
- ACPI: video: Use native backlight on Acer TravelMate 5735Z (bsc#1111666).
- ALSA: es1688: Add the missed snd_card_free() (bsc#1051510).
- ALSA: hda: Add ElkhartLake HDMI codec vid (bsc#1111666).
- ALSA: hda: add sienna_cichlid audio asic id for sienna_cichlid up (bsc#1111666).
- ALSA: hda/hdmi - enable runtime pm for newer AMD display audio (bsc#1111666).
- ALSA: hda - let hs_mic be picked ahead of hp_mic (bsc#1111666).
- ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines (bsc#1111666).
- ALSA: hda/realtek - Add LED class support for micmute LED (bsc#1111666).
- ALSA: hda/realtek - Enable micmute LED on and HP system (bsc#1111666).
- ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 (bsc#1111666).
- ALSA: hda/realtek - Fix unused variable warning w/o CONFIG_LEDS_TRIGGER_AUDIO (bsc#1111666).
- ALSA: hda/realtek - Introduce polarity for micmute LED GPIO (bsc#1111666).
- ALSA: lx6464es - add support for LX6464ESe pci express variant (bsc#1111666).
- ALSA: opl3: fix infoleak in opl3 (bsc#1111666).
- ALSA: pcm: disallow linking stream to itself (bsc#1111666).
- ALSA: usb-audio: Add duplex sound support for USB devices using implicit feedback (bsc#1111666).
- ALSA: usb-audio: Add Pioneer DJ DJM-900NXS2 support (bsc#1111666).
- ALSA: usb-audio: add quirk for MacroSilicon MS2109 (bsc#1111666).
- ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock (bsc#1111666).
- ALSA: usb-audio: Clean up quirk entries with macros (bsc#1111666).
- ALSA: usb-audio: Fix inconsistent card PM state after resume (bsc#1111666).
- ALSA: usb-audio: Fix packet size calculation (bsc#1111666).
- ALSA: usb-audio: Fix racy list management in output queue (bsc#1111666).
- ALSA: usb-audio: Improve frames size computation (bsc#1111666).
- ALSA: usb-audio: Manage auto-pm of all bundled interfaces (bsc#1111666).
- ALSA: usb-audio: Use the new macro for HP Dock rename quirks (bsc#1111666).
- amdgpu: a NULL -&gt;mm does not mean a thread is a kthread (git-fixes).
- arm64: map FDT as RW for early_init_dt_scan() (jsc#SLE-12423).
- ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (bsc#1111666).
- ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx (bsc#1111666).
- ath9k: Fix use-after-free Write in ath9k_htc_rx_msg (bsc#1111666).
- ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb (bsc#1111666).
- ax25: fix setsockopt(SO_BINDTODEVICE) (networking-stable-20_05_27).
- b43: Fix connection problem with WPA3 (bsc#1111666).
- b43_legacy: Fix connection problem with WPA3 (bsc#1111666).
- bcache: Fix an error code in bch_dump_read() (git fixes (block drivers)).
- be2net: fix link failure after ethtool offline test (git-fixes).
- block: nr_sects_write(): Disable preemption on seqcount write (bsc#1173818).
- block: remove QUEUE_FLAG_STACKABLE (git fixes (block drivers)).
- block: sed-opal: fix sparse warning: convert __be64 data (git fixes (block drivers)).
- Bluetooth: Add SCO fallback for invalid LMP parameters error (bsc#1111666).
- bnxt_en: Fix AER reset logic on 57500 chips (git-fixes).
- bnxt_en: Fix ethtool selftest crash under error conditions (git-fixes).
- bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails (git-fixes).
- bnxt_en: Fix ipv6 RFS filter matching logic (git-fixes).
- bnxt_en: fix NULL dereference in case SR-IOV configuration fails (git-fixes).
- bnxt_en: Fix VF anti-spoof filter setup (networking-stable-20_05_12).
- bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features() (networking-stable-20_05_12).
- bnxt_en: Improve AER slot reset (networking-stable-20_05_12).
- brcmfmac: fix wrong location to get firmware feature (bsc#1111666).
- brcmfmac: Transform compatible string for FW loading (bsc#1169771).
- btrfs: add assertions for tree == inode-&gt;io_tree to extent IO helpers (bsc#1174438).
- btrfs: add new helper btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: Always use a cached extent_state in btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: do not zero f_bavail if we have available space (bsc#1168081).
- btrfs: do not zero f_bavail if we have available space (bsc#1168081).
- btrfs: drop argument tree from btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: fix extent_state leak in btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof (bsc#1174438).
- btrfs: fix hang on snapshot creation after RWF_NOWAIT write (bsc#1174438).
- btrfs: fix RWF_NOWAIT write not failling when we need to cow (bsc#1174438).
- btrfs: fix RWF_NOWAIT writes blocking on extent locks and waiting for IO (bsc#1174438).
- btrfs: qgroup: Fix a bug that prevents qgroup to be re-enabled after disable (bsc#1172247).
- btrfs: Return EAGAIN if we can't start no snpashot write in check_can_nocow (bsc#1174438).
- btrfs: use correct count in btrfs_file_write_iter() (bsc#1174438).
- btrfs: Use newly introduced btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: volumes: Remove ENOSPC-prone btrfs_can_relocate() (bsc#1171124).
- bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads (bsc#1111666).
- carl9170: remove P2P_GO support (bsc#1111666).
- CDC-ACM: heed quirk also in error handling (git-fixes).
- ceph: convert mdsc-&gt;cap_dirty to a per-session list (bsc#1167104).
- ceph: request expedited service on session's last cap flush (bsc#1167104).
- cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages (bsc#1173857).
- char/random: Add a newline at the end of the file (jsc#SLE-12423).
- cifs: get rid of unused parameter in reconn_setup_dfs_targets() (bsc#1144333).
- cifs: handle hostnames that resolve to same ip in failover (bsc#1144333 bsc#1161016).
- cifs: set up next DFS target before generic_ip_connect() (bsc#1144333 bsc#1161016).
- clk: bcm2835: Fix return type of bcm2835_register_gate (bsc#1051510).
- clk: clk-flexgen: fix clock-critical handling (bsc#1051510).
- clk: sunxi: Fix incorrect usage of round_down() (bsc#1051510).
- clocksource: dw_apb_timer: Make CPU-affiliation being optional (bsc#1111666).
- compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE (git fixes (block drivers)).
- compat_ioctl: block: handle Persistent Reservations (git fixes (block drivers)).
- copy_{to,from}_user(): consolidate object size checks (git fixes).
- crypto: algboss - do not wait during notifier callback (bsc#1111666).
- crypto: algif_skcipher - Cap recv SG list at ctx-&gt;used (bsc#1111666).
- crypto: caam - update xts sector size for large input length (bsc#1111666).
- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (bsc#1111666).
- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (git-fixes).
- Crypto/chcr: fix for ccm(aes) failed test (bsc#1111666).
- crypto: chelsio/chtls: properly set tp-&gt;lsndtime (bsc#1111666).
- crypto: talitos - fix IPsec cipher in length (git-fixes).
- crypto: talitos - reorder code in talitos_edesc_alloc() (git-fixes).
- debugfs: Check module state before warning in {full/open}_proxy_open() (bsc#1173746).
- devinet: fix memleak in inetdev_init() (networking-stable-20_06_07).
- dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()' (bsc#1111666).
- dm btree: increase rebalance threshold in __rebalance2() (git fixes (block drivers)).
- dm cache: fix a crash due to incorrect work item cancelling (git fixes (block drivers)).
- dm crypt: fix benbi IV constructor crash if used in authenticated mode (git fixes (block drivers)).
- dm: fix potential for q-&gt;make_request_fn NULL pointer (git fixes (block drivers)).
- dm space map common: fix to ensure new block isn't already in use (git fixes (block drivers)).
- dm: various cleanups to md-&gt;queue initialization code (git fixes).
- dm verity fec: fix hash block number in verity_fec_decode (git fixes (block drivers)).
- dm verity fec: fix memory leak in verity_fec_dtr (git fixes (block drivers)).
- dpaa_eth: fix usage as DSA master, try 3 (networking-stable-20_05_27).
- driver-core, libnvdimm: Let device subsystems add local lockdep coverage (bsc#1171753).
- Drivers: hv: Change flag to write log level in panic msg to false (bsc#1170617, bsc#1170618).
- drivers: soc: ti: knav_qmss_queue: Make knav_gp_range_ops static (bsc#1051510).
- drm: amd/display: fix Kconfig help text (bsc#1113956) 	* only fix DEBUG_KERNEL_DC
- drm: bridge: adv7511: Extend list of audio sample rates (bsc#1111666).
- drm/dp_mst: Increase ACT retry timeout to 3s (bsc#1113956)  * context changes
- drm: encoder_slave: fix refcouting error for modules (bsc#1111666).
- drm: encoder_slave: fix refcouting error for modules (bsc#1114279)
- drm/i915/icl+: Fix hotplug interrupt disabling after storm detection (bsc#1112178)
- drm/i915: Whitelist context-local timestamp in the gen9 cmdparser (bsc#1111666).
- drm/mediatek: Check plane visibility in atomic_update (bsc#1113956)  * context changes
- drm/msm/dpu: fix error return code in dpu_encoder_init (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for Asus T101HA panel (bsc#1111666).
- drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003 (bsc#1111666).
- drm/qxl: Use correct notify port address when creating cursor ring (bsc#1113956)
- drm/radeon: fix double free (bsc#1113956)
- drm/radeon: fix fb_div check in ni_init_smc_spll_table() (bsc#1113956)
- drm/sun4i: hdmi ddc clk: Fix size of m divider (bsc#1111666).
- drm/tegra: hub: Do not enable orphaned window group (bsc#1111666).
- drm/vkms: Hold gem object while still in-use (bsc#1113956)  * context changes
- e1000: Distribute switch variables for initialization (bsc#1111666).
- e1000e: Disable TSO for buffer overrun workaround (bsc#1051510).
- e1000e: Do not wake up the system via WOL if device wakeup is disabled (bsc#1051510).
- e1000e: Relax condition to trigger reset for ME workaround (bsc#1111666).
- EDAC/amd64: Read back the scrub rate PCI register on F15h (bsc#1114279).
- efi/random: Increase size of firmware supplied randomness (jsc#SLE-12423).
- efi/random: Treat EFI_RNG_PROTOCOL output as bootloader randomness (jsc#SLE-12423).
- efi: READ_ONCE rng seed size before munmap (jsc#SLE-12423).
- efi: Reorder pr_notice() with add_device_randomness() call (jsc#SLE-12423).
- evm: Check also if *tfm is an error pointer in init_desc() (bsc#1051510).
- evm: Fix a small race in init_desc() (bsc#1051510).
- ext4: fix a data race at inode-&gt;i_blocks (bsc#1171835).
- ext4: fix partial cluster initialization when splitting extent (bsc#1173839).
- ext4: fix race between ext4_sync_parent() and rename() (bsc#1173838).
- ext4, jbd2: ensure panic by fix a race between jbd2 abort and ext4 error handlers (bsc#1173833).
- extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()' (bsc#1051510).
- fanotify: fix ignore mask logic for events on child and on dir (bsc#1172719).
- fdt: add support for rng-seed (jsc#SLE-12423).
- fdt: Update CRC check for rng-seed (jsc#SLE-12423).
- firmware: imx: scu: Fix corruption of header (git-fixes).
- firmware: imx: scu: Fix possible memory leak in imx_scu_probe() (bsc#1111666).
- Fix boot crash with MD (bsc#1174343)
- fix multiplication overflow in copy_fdtable() (bsc#1173825).
- fpga: dfl: afu: Corrected error handling levels (git-fixes).
- fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (networking-stable-20_05_12).
- gpiolib: Document that GPIO line names are not globally unique (bsc#1051510).
- gpu: host1x: Detach driver on unregister (bsc#1111666).
- gpu: ipu-v3: pre: do not trigger update if buffer address does not change (bsc#1111666).
- HID: magicmouse: do not set up autorepeat (git-fixes).
- HID: sony: Fix for broken buttons on DS3 USB dongles (bsc#1051510).
- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() (bsc#1111666).
- hwmon: (emc2103) fix unable to change fan pwm1_enable attribute (bsc#1111666).
- hwmon: (max6697) Make sure the OVERT mask is set correctly (bsc#1111666).
- i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 (bsc#1111666).
- i2c: eg20t: Load module automatically if ID matches (bsc#1111666).
- i2c: mlxcpld: check correct size of maximum RECV_LEN packet (bsc#1111666).
- i40e: reduce stack usage in i40e_set_fc (git-fixes).
- IB/hfi1: Do not destroy hfi1_wq when the device is shut down (bsc#1174409).
- IB/hfi1: Do not destroy link_wq when the device is shut down (bsc#1174409).
- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- ibmvnic: continue to init in CRQ reset returns H_CLOSED (bsc#1173280 ltc#185369).
- ibmvnic: Flush existing work items before device removal (bsc#1065729).
- ibmvnic: Harden device login requests (bsc#1170011 ltc#183538).
- iio: buffer: Do not allow buffers without any channels enabled to be activated (bsc#1051510).
- iio:health:afe4404 Fix timestamp alignment and prevent data leak (bsc#1111666).
- iio:humidity:hdc100x Fix alignment and data leak issues (bsc#1111666).
- iio:magnetometer:ak8974: Fix alignment and data leak issues (bsc#1111666).
- iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() (bsc#1111666).
- iio: pressure: bmp280: Tolerate IRQ before registering (bsc#1051510).
- iio:pressure:ms5611 Fix buffer element alignment (bsc#1111666).
- iio: pressure: zpa2326: handle pm_runtime_get_sync failure (bsc#1111666).
- ima: Directly assign the ima_default_policy pointer to ima_rules (bsc#1051510).
- ima: Fix ima digest hash table key calculation (bsc#1051510).
- include/asm-generic/topology.h: guard cpumask_of_node() macro argument (bsc#1148868).
- Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list (bsc#1111666).
- input: i8042 - Remove special PowerPC handling (git-fixes).
- Input: synaptics - add a second working PNP_ID for Lenovo T470s (bsc#1111666).
- intel_idle: Graceful probe failure when MWAIT is disabled (bsc#1174115).
- intel_th: Fix a NULL dereference when hub driver is not loaded (bsc#1111666).
- ipvlan: call dev_change_flags when ipvlan mode is reset (git-fixes).
- ixgbevf: Remove limit of 10 entries for unicast filter list (git-fixes).
- jbd2: avoid leaking transaction credits when unreserving handle (bsc#1173845).
- jbd2: Preserve kABI when adding j_abort_mutex (bsc#1173833).
- kabi: hv: prevent struct device_node to become defined (bsc#1172871).
- kabi: ppc64le: prevent struct dma_map_ops to become defined (jsc#SLE-12423).
- kABI: protect struct mlx5_cmd_work_ent (kabi).
- kABI: reintroduce inet_hashtables.h include to l2tp_ip (kabi).
- kernfs: fix barrier usage in __kernfs_new_node() (bsc#1111666).
- KVM: nVMX: Do not reread VMCS-agnostic state when switching VMCS (bsc#1114279).
- KVM: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1114279).
- KVM: x86: Fix APIC page invalidation race (bsc#1174122).
- kvm: x86: Fix L1TF mitigation for shadow MMU (bsc#1171904).
- KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated (bsc#1171904).
- KVM: x86: only do L1TF workaround on affected processors (bsc#1171904).
- l2tp: add sk_family checks to l2tp_validate_socket (networking-stable-20_06_07).
- l2tp: do not use inet_hash()/inet_unhash() (networking-stable-20_06_07).
- libceph: do not omit recovery_deletes in target_copy() (bsc#1174113).
- libceph: ignore pool overlay and cache logic on redirects (bsc#1173146).
- libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock (bsc#1171753).
- libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant (bsc#1171753).
- libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl() (bsc#1171753).
- libnvdimm: cover up changes in struct nvdimm_bus (bsc#1171753).
- libnvdimm: cover up nd_pfn_sb changes (bsc#1171759).
- libnvdimm/dax: Pick the right alignment default when creating dax devices (bsc#1171759).
- libnvdimm/label: Remove the dpa align check (bsc#1171759).
- libnvdimm/of_pmem: Provide a unique name for bus provider (bsc#1171739).
- libnvdimm/pfn_dev: Add a build check to make sure we notice when struct page size change (bsc#1171743).
- libnvdimm/pfn_dev: Add page size and struct page size to pfn superblock (bsc#1171759).
- libnvdimm/pfn: Prevent raw mode fallback if pfn-infoblock valid (bsc#1171743).
- libnvdimm/pmem: Advance namespace seed for specific probe errors (bsc#1171743).
- libnvdimm/region: Initialize bad block for volatile namespaces (bnc#1151927 5.3.6).
- libnvdimm/region: Rewrite _probe_success() to _advance_seeds() (bsc#1171743).
- libnvdimm: Use PAGE_SIZE instead of SZ_4K for align check (bsc#1171759).
- livepatch: Apply vmlinux-specific KLP relocations early (bsc#1071995).
- livepatch: Disallow vmlinux.ko (bsc#1071995).
- livepatch: Make klp_apply_object_relocs static (bsc#1071995).
- livepatch: Prevent module-specific KLP rela sections from referencing vmlinux symbols (bsc#1071995).
- livepatch: Remove .klp.arch (bsc#1071995).
- loop: replace kill_bdev with invalidate_bdev (bsc#1173820).
- lpfc_debugfs: get rid of pointless access_ok() (bsc#1172687 bsc#1171530).
- lpfc: Synchronize NVME transport and lpfc driver devloss_tmo (bcs#1173060).
- mac80211: add option for setting control flags (bsc#1111666).
- mac80211: set IEEE80211_TX_CTRL_PORT_CTRL_PROTO for nl80211 TX (bsc#1111666).
- mailbox: imx: Disable the clock on devm_mbox_controller_register() failure (git-fixes).
- md: Avoid namespace collision with bitmap API (git fixes (block drivers)).
- mdraid: fix read/write bytes accounting (bsc#1172537).
- md: use memalloc scope APIs in mddev_suspend()/mddev_resume() (bsc#1166985)).
- media: cec: silence shift wrapping warning in __cec_s_log_addrs() (git-fixes).
- media: si2157: Better check for running tuner in init (bsc#1111666).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue (git-fixes).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue (git-fixes).
- mlxsw: pci: Return error on PCI reset timeout (git-fixes).
- mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list properly (networking-stable-20_05_12).
- mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed (git-fixes).
- mlxsw: spectrum_dpipe: Add missing error path (git-fixes).
- mlxsw: spectrum: Prevent force of 56G (git-fixes).
- mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead (git-fixes).
- mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON() (git-fixes).
- mlxsw: spectrum_switchdev: Add MDB entries in prepare phase (git-fixes).
- mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky (git-fixes).
- mmc: block: Fix request completion in the CQE timeout path (bsc#1111666).
- mmc: block: Fix use-after-free issue for rpmb (bsc#1111666).
- mmc: fix compilation of user API (bsc#1051510).
- mmc: sdhci: do not enable card detect interrupt for gpio cd type (bsc#1111666).
- mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk (bsc#1111666).
- Move upstreamed lpfc patches into sorted section
- mvpp2: remove misleading comment (git-fixes).
- net: be more gentle about silly gso requests coming from user (networking-stable-20_06_07).
- net: check untrusted gso_size at kernel entry (networking-stable-20_06_07).
- net/cxgb4: Check the return from t4_query_params properly (git-fixes).
- net: dsa: loop: Add module soft dependency (networking-stable-20_05_16).
- net: dsa: mt7530: fix roaming from DSA user ports (networking-stable-20_05_27).
- net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it (git-fixes).
- net: ena: add missing ethtool TX timestamping indication (git-fixes).
- net: ena: avoid memory access violation by validating req_id properly (git-fixes).
- net: ena: do not wake up tx queue when down (git-fixes).
- net: ena: ena-com.c: prevent NULL pointer dereference (git-fixes).
- net: ena: ethtool: use correct value for crc32 hash (git-fixes).
- net: ena: fix continuous keep-alive resets (git-fixes).
- net: ena: fix corruption of dev_idx_to_host_tbl (git-fixes).
- net: ena: fix default tx interrupt moderation interval (git-fixes).
- net: ena: fix incorrect default RSS key (git-fixes).
- net: ena: fix incorrectly saving queue numbers when setting RSS indirection table (git-fixes).
- net: ena: fix issues in setting interrupt moderation params in ethtool (git-fixes).
- net: ena: fix potential crash when rxfh key is NULL (git-fixes).
- net: ena: fix retrieval of nonadaptive interrupt moderation intervals (git-fixes).
- net: ena: fix uses of round_jiffies() (git-fixes).
- net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE (git-fixes).
- net: ena: reimplement set/get_coalesce() (git-fixes).
- net: ena: rss: do not allocate key when not supported (git-fixes).
- net: ena: rss: fix failure to get indirection table (git-fixes).
- net: ena: rss: store hash function as values and not bits (git-fixes).
- netfilter: connlabels: prefer static lock initialiser (git-fixes).
- netfilter: ctnetlink: netns exit must wait for callbacks (bsc#1169795).
- netfilter: not mark a spinlock as __read_mostly (git-fixes).
- net: fix a potential recursive NETDEV_FEAT_CHANGE (networking-stable-20_05_16).
- net: inet_csk: Fix so_reuseport bind-address cache in tb-&gt;fast* (networking-stable-20_05_27).
- net: ipip: fix wrong address family in init error path (networking-stable-20_05_27).
- net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set (git-fixes).
- net: macsec: preserve ingress frame ordering (networking-stable-20_05_12).
- net/mlx4_core: drop useless LIST_HEAD (git-fixes).
- net/mlx4_core: fix a memory leak bug (git-fixes).
- net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (networking-stable-20_05_12).
- net/mlx5: Add command entry handling completion (networking-stable-20_05_27).
- net/mlx5: Avoid panic when setting vport rate (git-fixes).
- net/mlx5: Continue driver initialization despite debugfs failure (git-fixes).
- net/mlx5e: ethtool, Fix a typo in WOL function names (git-fixes).
- net/mlx5e: Fix traffic duplication in ethtool steering (git-fixes).
- net/mlx5e: Remove unnecessary clear_bit()s (git-fixes).
- net/mlx5e: Update netdev txq on completions during closure (networking-stable-20_05_27).
- net/mlx5: Fix command entry leak in Internal Error State (networking-stable-20_05_12).
- net/mlx5: Fix crash upon suspend/resume (networking-stable-20_06_07).
- net/mlx5: Fix forced completion access non initialized command entry (networking-stable-20_05_12).
- net: mvmdio: allow up to four clocks to be specified for orion-mdio (git-fixes).
- net: mvpp2: prs: Do not override the sign bit in SRAM parser shift (git-fixes).
- net: phy: fix aneg restart in phy_ethtool_set_eee (networking-stable-20_05_16).
- netprio_cgroup: Fix unlimited memory leak of v2 cgroups (networking-stable-20_05_16).
- net: qede: stop adding events on an already destroyed workqueue (git-fixes).
- net: qed: fix excessive QM ILT lines consumption (git-fixes).
- net: qed: fix NVMe login fails over VFs (git-fixes).
- net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (networking-stable-20_05_27).
- net: revert 'net: get rid of an signed integer overflow in ip_idents_reserve()' (networking-stable-20_05_27).
- net sched: fix reporting the first-time use timestamp (networking-stable-20_05_27).
- net: stricter validation of untrusted gso packets (networking-stable-20_05_12).
- net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict() (networking-stable-20_05_12).
- net/tls: Fix sk_psock refcnt leak when in tls_data_ready() (networking-stable-20_05_12).
- net: usb: qmi_wwan: add support for DW5816e (networking-stable-20_05_12).
- net: usb: qmi_wwan: add Telit 0x1050 composition (networking-stable-20_06_07).
- net: usb: qmi_wwan: add Telit LE910C1-EUX composition (networking-stable-20_06_07).
- net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() (bsc#1172484).
- nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K (git-fixes).
- NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() (bsc#1170592).
- NFSv4: Retry CLOSE and DELEGRETURN on NFS4ERR_OLD_STATEID (bsc#1170592).
- nilfs2: fix null pointer dereference at nilfs_segctor_do_construct() (bsc#1173857).
- nl80211: fix NL80211_ATTR_CHANNEL_WIDTH attribute type (bsc#1111666).
- nvdimm: Avoid race between probe and reading device attributes (bsc#1170442).
- nvme: check for NVME_CTRL_LIVE in nvme_report_ns_ids() (bcs#1171558 bsc#1159058).
- nvme: do not update multipath disk information if the controller is down (bcs#1171558 bsc#1159058).
- nvme: fail cancelled commands with NVME_SC_HOST_PATH_ERROR (bsc#1158983 bsc#1172538).
- nvme-fc: Fail transport errors with NVME_SC_HOST_PATH (bsc#1158983 bsc#1172538).
- nvme-tcp: fail command with NVME_SC_HOST_PATH_ERROR send failed (bsc#1158983 bsc#1172538).
- objtool: Clean instruction state before each function validation (bsc#1169514).
- objtool: Ignore empty alternatives (bsc#1169514).
- ocfs2: no need try to truncate file beyond i_size (bsc#1171841).
- overflow: Fix -Wtype-limits compilation warnings (git fixes).
- overflow.h: Add arithmetic shift helper (git fixes).
- p54usb: add AirVasT USB stick device-id (bsc#1051510).
- padata: ensure the reorder timer callback runs on the correct CPU (git-fixes).
- padata: reorder work kABI fixup (git-fixes).
- PCI/AER: Remove HEST/FIRMWARE_FIRST parsing for AER ownership (bsc#1174356).
- PCI/AER: Use only _OSC to determine AER ownership (bsc#1174356).
- PCI: Allow pci_resize_resource() for devices on root bus (bsc#1051510).
- PCI: Fix pci_register_host_bridge() device_register() error handling (bsc#1051510).
- PCI: Generalize multi-function power dependency device links (bsc#1111666).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871, bsc#1172872).
- PCI: hv: Fix the PCI HyperV probe failure path to release resource properly (bsc#1172871, bsc#1172872).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871, bsc#1172872).
- PCI: hv: Move hypercall related definitions into tlfs header (bsc#1172871, bsc#1172872).
- PCI: hv: Move retarget related structures into tlfs header (bsc#1172871, bsc#1172872).
- PCI: hv: Reorganize the code in preparation of hibernation (bsc#1172871, bsc#1172872).
- PCI: hv: Retry PCI bus D0 entry on invalid device state (bsc#1172871, bsc#1172872).
- PCI: pciehp: Fix indefinite wait on sysfs requests (git-fixes).
- PCI: pciehp: Support interrupts sent from D3hot (git-fixes).
- PCI/PM: Call .bridge_d3() hook only if non-NULL (git-fixes).
- PCI: Program MPS for RCiEP devices (bsc#1051510).
- PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port (bsc#1051510).
- pci: Revive pci_dev __aer_firmware_first* fields for kABI (bsc#1174356).
- pcm_native: result of put_user() needs to be checked (bsc#1111666).
- perf: Allocate context task_ctx_data for child event (git-fixes).
- perf/cgroup: Fix perf cgroup hierarchy support (git-fixes).
- perf: Copy parent's address filter offsets on clone (git-fixes).
- perf/core: Add sanity check to deal with pinned event failure (git-fixes).
- perf/core: Avoid freeing static PMU contexts when PMU is unregistered (git-fixes).
- perf/core: Correct event creation with PERF_FORMAT_GROUP (git-fixes).
- perf/core: Do not WARN() for impossible ring-buffer sizes (git-fixes).
- perf/core: Fix ctx_event_type in ctx_resched() (git-fixes).
- perf/core: Fix error handling in perf_event_alloc() (git-fixes).
- perf/core: Fix exclusive events' grouping (git-fixes).
- perf/core: Fix group scheduling with mixed hw and sw events (git-fixes).
- perf/core: Fix impossible ring-buffer sizes warning (git-fixes).
- perf/core: Fix locking for children siblings group read (git-fixes).
- perf/core: Fix lock inversion between perf,trace,cpuhp (git-fixes (dependent patch for 18736eef1213)).
- perf/core: Fix perf_event_read_value() locking (git-fixes).
- perf/core: Fix perf_pmu_unregister() locking (git-fixes).
- perf/core: Fix __perf_read_group_add() locking (git-fixes (dependent patch)).
- perf/core: Fix perf_sample_regs_user() mm check (git-fixes).
- perf/core: Fix possible Spectre-v1 indexing for -&gt;aux_pages (git-fixes).
- perf/core: Fix race between close() and fork() (git-fixes).
- perf/core: Fix the address filtering fix (git-fixes).
- perf/core: Fix use-after-free in uprobe_perf_close() (git-fixes).
- perf/core: Force USER_DS when recording user stack data (git-fixes).
- perf/core: Restore mmap record type correctly (git-fixes).
- perf: Fix header.size for namespace events (git-fixes).
- perf/ioctl: Add check for the sample_period value (git-fixes).
- perf, pt, coresight: Fix address filters for vmas with non-zero offset (git-fixes).
- perf: Return proper values for user stack errors (git-fixes).
- perf/x86/amd: Constrain Large Increment per Cycle events (git-fixes).
- perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity (git-fixes).
- perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops (git-fixes).
- perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) (git-fixes).
- perf/x86/amd/iommu: Make the 'amd_iommu_attr_groups' symbol static (git-fixes).
- perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs (git-fixes stable).
- perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs (git-fixes).
- perf/x86/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf events (git-fixes stable).
- perf/x86: Enable free running PEBS for REGS_USER/INTR (git-fixes).
- perf/x86: Fix incorrect PEBS_REGS (git-fixes).
- perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts() (git-fixes).
- perf/x86/intel: Add proper condition to run sched_task callbacks (git-fixes).
- perf/x86/intel/bts: Fix the use of page_private() (git-fixes).
- perf/x86/intel: Fix PT PMI handling (git-fixes).
- perf/x86/intel: Move branch tracing setup to the Intel-specific source file (git-fixes).
- perf/x86/intel/uncore: Add Node ID mask (git-fixes).
- perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX (git-fixes).
- perf/x86/intel/uncore: Handle invalid event coding for free-running counter (git-fixes).
- perf/x86/uncore: Fix event group support (git-fixes).
- pid: Improve the comment about waiting in zap_pid_ns_processes (git fixes)).
- pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()' (bsc#1051510).
- pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()' (bsc#1051510).
- pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs (bsc#1051510).
- platform/x86: dell-laptop: do not register micmute LED if there is no token (bsc#1111666).
- platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() (bsc#1111666).
- PM / Domains: Allow genpd users to specify default active wakeup behavior (git-fixes).
- pnp: Use list_for_each_entry() instead of open coding (git fixes).
- powerpc/64s: Do not let DT CPU features set FSCR_DSCR (bsc#1065729).
- powerpc/64s: Save FSCR to init_task.thread.fscr after feature init (bsc#1065729).
- powerpc/book3s64: Export has_transparent_hugepage() related functions (bsc#1171759).
- powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey (bsc#1065729).
- powerpc/fadump: fix race between pstore write and fadump crash trigger (bsc#1168959 ltc#185010).
- powerpc/xive: Clear the page tables for the ESB IO mapping (bsc#1085030).
- powerpc/xmon: Reset RCU and soft lockup watchdogs (bsc#1065729).
- power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select (bsc#1051510).
- power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()' (bsc#1051510).
- power: supply: smb347-charger: IRQSTAT_D is volatile (bsc#1051510).
- power: vexpress: add suppress_bind_attrs to true (bsc#1111666).
- pppoe: only process PADT targeted at local interfaces (networking-stable-20_05_16).
- qed: reduce maximum stack frame size (git-fixes).
- qlcnic: fix missing release in qlcnic_83xx_interrupt_test (git-fixes).
- r8152: support additional Microsoft Surface Ethernet Adapter variant (networking-stable-20_05_27).
- raid5: remove gfp flags from scribble_alloc() (bsc#1166985).
- RDMA/efa: Fix setting of wrong bit in get/set_feature commands (bsc#1111666)
- RDMA/efa: Set maximum pkeys device attribute (bsc#1111666)
- RDMA/efa: Support remote read access in MR registration (bsc#1111666)
- RDMA/efa: Unified getters/setters for device structs bitmask access (bsc#1111666)
- README.BRANCH: Add Takashi Iwai as primary maintainer.
- regmap: debugfs: Do not sleep while atomic for fast_io regmaps (bsc#1111666).
- resolve KABI warning for perf-pt-coresight (git-fixes).
- Revert 'bcache: ignore pending signals when creating gc and allocator thread' (git fixes (block drivers)).
- Revert commit e918e570415c ('tpm_tis: Remove the HID IFX0102') (bsc#1111666).
- Revert 'dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues' (git fixes (block drivers)).
- Revert 'thermal: mediatek: fix register index error' (bsc#1111666).
- Revert 'tools lib traceevent: Remove unneeded qsort and uses memmove'
- s390/bpf: Maintain 8-byte stack alignment (bsc#1169194).
- s390: fix syscall_get_error for compat processes (git-fixes).
- s390/qdio: consistently restore the IRQ handler (git-fixes).
- s390/qdio: lock device while installing IRQ handler (git-fixes).
- s390/qdio: put thinint indicator after early error (git-fixes).
- s390/qdio: tear down thinint indicator after early error (git-fixes).
- s390/qeth: fix error handling for isolation mode cmds (git-fixes).
- sch_choke: avoid potential panic in choke_reset() (networking-stable-20_05_12).
- sch_sfq: validate silly quantum values (networking-stable-20_05_12).
- scsi: aacraid: fix a signedness bug (bsc#1174296).
- scsi: hisi_sas: fix calls to dma_set_mask_and_coherent() (bsc#1174296).
- scsi: ibmvscsi: Do not send host info in adapter info MAD after LPM (bsc#1172759 ltc#184814).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Avoid another null dereference in lpfc_sli4_hba_unset() (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1158983).
- scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (bsc#1158983).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix less-than-zero comparison of unsigned value (bsc#1158983).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1158983).
- scsi: megaraid_sas: Fix a compilation warning (bsc#1174296).
- scsi: mpt3sas: Fix double free in attach error handling (bsc#1174296).
- scsi: qedf: Add port_id getter (bsc#1150660).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (bsc#1174296).
- scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (bsc#1158983).
- sctp: Do not add the shutdown timer if its already been added (networking-stable-20_05_27).
- sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (networking-stable-20_05_27).
- spi: dw: use 'smp_mb()' to avoid sending spi data error (bsc#1051510).
- spi: fix initial SPI_SR value in spi-fsl-dspi (bsc#1111666).
- spi: pxa2xx: Apply CS clk quirk to BXT (bsc#1111666).
- spi: spidev: fix a race between spidev_release and spidev_remove (bsc#1111666).
- spi: spi-mem: Fix Dual/Quad modes on Octal-capable devices (bsc#1111666).
- spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate (bsc#1111666).
- staging: comedi: verify array index is correct before using it (bsc#1111666).
- staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK (bsc#1051510).
- staging: sm750fb: add missing case while setting FB_VISUAL (bsc#1051510).
- SUNRPC: The TCP back channel mustn't disappear while requests are outstanding (bsc#1152624).
- tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes (bsc#1173284).
- timers: Add a function to start/reduce a timer (networking-stable-20_05_27).
- tpm_tis: extra chip-&gt;ops check on error path in tpm_tis_core_init (bsc#1111666).
- tpm_tis: Remove the HID IFX0102 (bsc#1111666).
- tracing: Fix event trigger to accept redundant spaces (git-fixes).
- tty: n_gsm: Fix bogus i++ in gsm_data_kick (bsc#1051510).
- tty: n_gsm: Fix SOF skipping (bsc#1051510).
- tty: n_gsm: Fix waking up upper tty layer when room available (bsc#1051510).
- tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040 (networking-stable-20_05_12).
- ubifs: remove broken lazytime support (bsc#1173826).
- usb: add USB_QUIRK_DELAY_INIT for Logitech C922 (git-fixes).
- USB: c67x00: fix use after free in c67x00_giveback_urb (bsc#1111666).
- usb: chipidea: core: add wakeup support for extcon (bsc#1111666).
- usb: dwc2: Fix shutdown callback in platform (bsc#1111666).
- usb: dwc2: gadget: move gadget resume after the core is in L0 state (bsc#1051510).
- usb: dwc3: gadget: introduce cancelled_list (git-fixes).
- usb: dwc3: gadget: never call -&gt;complete() from -&gt;ep_queue() (git-fixes).
- usb: dwc3: gadget: Properly handle ClearFeature(halt) (git-fixes).
- usb: dwc3: gadget: Properly handle failed kick_transfer (git-fixes).
- USB: ehci: reopen solution for Synopsys HC bug (git-fixes).
- usb: gadget: fix potential double-free in m66592_probe (bsc#1111666).
- usb: gadget: lpc32xx_udc: do not dereference ep pointer before null check (bsc#1051510).
- usb: gadget: udc: atmel: fix uninitialized read in debug printk (bsc#1111666).
- usb: gadget: udc: atmel: remove outdated comment in usba_ep_disable() (bsc#1111666).
- usb: gadget: udc: Potential Oops in error handling code (bsc#1111666).
- USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke (bsc#1051510).
- usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() (bsc#1111666).
- USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe() (bsc#1051510).
- usb: musb: Fix runtime PM imbalance on error (bsc#1051510).
- usb: musb: start session in resume for host port (bsc#1051510).
- usbnet: smsc95xx: Fix use-after-free after removal (bsc#1111666).
- USB: ohci-sm501: Add missed iounmap() in remove (bsc#1111666).
- USB: serial: ch341: add new Product ID for CH340 (bsc#1111666).
- USB: serial: cypress_m8: enable Simply Automated UPB PIM (bsc#1111666).
- USB: serial: iuu_phoenix: fix memory corruption (bsc#1111666).
- USB: serial: option: add GosunCn GM500 series (bsc#1111666).
- USB: serial: option: add Quectel EG95 LTE modem (bsc#1111666).
- USB: serial: option: add Telit LE910C1-EUX compositions (bsc#1051510).
- USB: serial: qcserial: add DW5816e QDL support (bsc#1051510).
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (bsc#1051510).
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (git-fixes).
- vfio/pci: Fix SR-IOV VF handling with MMIO blocking (bsc#1174123).
- vfs: Fix EOVERFLOW testing in put_compat_statfs64 (bnc#1151927 5.3.6).
- virtio-blk: handle block_device_operations callbacks after hot unplug (git fixes (block drivers)).
- vmxnet3: add geneve and vxlan tunnel offload support (bsc#1172484).
- vmxnet3: add support to get/set rx flow hash (bsc#1172484).
- vmxnet3: allow rx flow hash ops only when rss is enabled (bsc#1172484).
- vmxnet3: avoid format strint overflow warning (bsc#1172484).
- vmxnet3: prepare for version 4 changes (bsc#1172484).
- vmxnet3: Remove always false conditional statement (bsc#1172484).
- vmxnet3: remove redundant initialization of pointer 'rq' (bsc#1172484).
- vmxnet3: remove unused flag 'rxcsum' from struct vmxnet3_adapter (bsc#1172484).
- vmxnet3: Replace msleep(1) with usleep_range() (bsc#1172484).
- vmxnet3: update to version 4 (bsc#1172484).
- vmxnet3: use correct hdr reference when packet is encapsulated (bsc#1172484).
- vsock: fix timeout in vsock_accept() (networking-stable-20_06_07).
- vxlan: Avoid infinite loop when suppressing NS messages with invalid options (git-fixes).
- w1: omap-hdq: cleanup to add missing newline for some dev_dbg (bsc#1051510).
- watchdog: sp805: fix restart handler (bsc#1111666).
- wil6210: add general initialization/size checks (bsc#1111666).
- wil6210: check rx_buff_mgmt before accessing it (bsc#1111666).
- wil6210: ignore HALP ICR if already handled (bsc#1111666).
- wil6210: make sure Rx ring sizes are correlated (git-fixes).
- work around mvfs bug (bsc#1162063).
- x86/apic: Install an empty physflat_init_apic_ldr (bsc#1163309).
- x86/cpu/amd: Make erratum #1054 a legacy erratum (bsc#1114279).
- x86/events/intel/ds: Add PERF_SAMPLE_PERIOD into PEBS_FREERUNNING_FLAGS (git-fixes).
- x86: Fix early boot crash on gcc-10, third try (bsc#1114279).
- x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (bsc#1172257).
- x86/reboot/quirks: Add MacBook6,1 reboot quirk (bsc#1114279).
- xfrm: fix error in comment (git fixes).
- xhci: Fix incorrect EP_STATE_MASK (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-03"/>
	<updated date="2020-08-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150660">SUSE bug 1150660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151927">SUSE bug 1151927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152107">SUSE bug 1152107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152624">SUSE bug 1152624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158983">SUSE bug 1158983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159058">SUSE bug 1159058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161016">SUSE bug 1161016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162002">SUSE bug 1162002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162063">SUSE bug 1162063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163309">SUSE bug 1163309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166985">SUSE bug 1166985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167104">SUSE bug 1167104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168081">SUSE bug 1168081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168959">SUSE bug 1168959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169194">SUSE bug 1169194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169771">SUSE bug 1169771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169795">SUSE bug 1169795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170011">SUSE bug 1170011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170442">SUSE bug 1170442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170592">SUSE bug 1170592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170617">SUSE bug 1170617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170618">SUSE bug 1170618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171124">SUSE bug 1171124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171424">SUSE bug 1171424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171529">SUSE bug 1171529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171530">SUSE bug 1171530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171732">SUSE bug 1171732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171739">SUSE bug 1171739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171743">SUSE bug 1171743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171753">SUSE bug 1171753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171759">SUSE bug 1171759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171835">SUSE bug 1171835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171841">SUSE bug 1171841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171868">SUSE bug 1171868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171904">SUSE bug 1171904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172247">SUSE bug 1172247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172257">SUSE bug 1172257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172344">SUSE bug 1172344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172458">SUSE bug 1172458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172484">SUSE bug 1172484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172537">SUSE bug 1172537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172687">SUSE bug 1172687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172719">SUSE bug 1172719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172759">SUSE bug 1172759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172775">SUSE bug 1172775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172781">SUSE bug 1172781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172782">SUSE bug 1172782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172783">SUSE bug 1172783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172871">SUSE bug 1172871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172872">SUSE bug 1172872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172999">SUSE bug 1172999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173060">SUSE bug 1173060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173074">SUSE bug 1173074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173146">SUSE bug 1173146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173265">SUSE bug 1173265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173280">SUSE bug 1173280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173284">SUSE bug 1173284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173428">SUSE bug 1173428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173514">SUSE bug 1173514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173567">SUSE bug 1173567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173573">SUSE bug 1173573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173659">SUSE bug 1173659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173746">SUSE bug 1173746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173818">SUSE bug 1173818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173820">SUSE bug 1173820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173825">SUSE bug 1173825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173826">SUSE bug 1173826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173833">SUSE bug 1173833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173838">SUSE bug 1173838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173839">SUSE bug 1173839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173845">SUSE bug 1173845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173857">SUSE bug 1173857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174113">SUSE bug 1174113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174115">SUSE bug 1174115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174122">SUSE bug 1174122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174123">SUSE bug 1174123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174186">SUSE bug 1174186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174187">SUSE bug 1174187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174296">SUSE bug 1174296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174343">SUSE bug 1174343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174356">SUSE bug 1174356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174409">SUSE bug 1174409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174438">SUSE bug 1174438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174462">SUSE bug 1174462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174543">SUSE bug 1174543</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16746/">CVE-2019-16746</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20810/">CVE-2019-20810</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20908/">CVE-2019-20908</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0305/">CVE-2020-0305</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10766/">CVE-2020-10766</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10767/">CVE-2020-10767</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10768/">CVE-2020-10768</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10769/">CVE-2020-10769</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10773/">CVE-2020-10773</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10781/">CVE-2020-10781</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12771/">CVE-2020-12771</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12888/">CVE-2020-12888</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13974/">CVE-2020-13974</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14416/">CVE-2020-14416</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15393/">CVE-2020-15393</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15780/">CVE-2020-15780</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492271" comment="kernel-default-4.12.14-197.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492272" comment="kernel-default-base-4.12.14-197.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492273" comment="kernel-default-devel-4.12.14-197.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492274" comment="kernel-default-man-4.12.14-197.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492275" comment="kernel-devel-4.12.14-197.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492276" comment="kernel-macros-4.12.14-197.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137886" version="1" class="patch">
	<metadata>
		<title>Security update for libX11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174628" ref_url="https://bugzilla.suse.com/1174628" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14344" ref_url="https://www.suse.com/security/cve/CVE-2020-14344/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007217.html" source="SUSE-SU"/>
		<description>
This update for libX11 fixes the following issues:

- Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-04"/>
	<updated date="2020-08-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174628">SUSE bug 1174628</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14344/">CVE-2020-14344</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492277" comment="libX11-6-1.6.5-3.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492278" comment="libX11-6-32bit-1.6.5-3.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492279" comment="libX11-data-1.6.5-3.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492280" comment="libX11-devel-1.6.5-3.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492281" comment="libX11-xcb1-1.6.5-3.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492282" comment="libX11-xcb1-32bit-1.6.5-3.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492283" comment="libxcb-composite0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492284" comment="libxcb-damage0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492285" comment="libxcb-devel-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492286" comment="libxcb-devel-doc-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492287" comment="libxcb-dpms0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492288" comment="libxcb-dri2-0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492289" comment="libxcb-dri2-0-32bit-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492290" comment="libxcb-dri3-0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492291" comment="libxcb-dri3-0-32bit-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492292" comment="libxcb-glx0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492293" comment="libxcb-glx0-32bit-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492294" comment="libxcb-present0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492295" comment="libxcb-present0-32bit-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492296" comment="libxcb-randr0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492297" comment="libxcb-record0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492298" comment="libxcb-render0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492299" comment="libxcb-res0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492300" comment="libxcb-screensaver0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492301" comment="libxcb-shape0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492302" comment="libxcb-shm0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492303" comment="libxcb-sync1-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492304" comment="libxcb-sync1-32bit-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492305" comment="libxcb-xf86dri0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492306" comment="libxcb-xfixes0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492307" comment="libxcb-xfixes0-32bit-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492308" comment="libxcb-xinerama0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492309" comment="libxcb-xinput0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492310" comment="libxcb-xkb1-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492311" comment="libxcb-xtest0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492312" comment="libxcb-xv0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492313" comment="libxcb-xvmc0-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492314" comment="libxcb1-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492315" comment="libxcb1-32bit-1.13-3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137887" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160968" ref_url="https://bugzilla.suse.com/1160968" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-2583" ref_url="https://www.suse.com/security/cve/CVE-2020-2583/" source="CVE"/>
		<reference ref_id="CVE-2020-2590" ref_url="https://www.suse.com/security/cve/CVE-2020-2590/" source="CVE"/>
		<reference ref_id="CVE-2020-2593" ref_url="https://www.suse.com/security/cve/CVE-2020-2593/" source="CVE"/>
		<reference ref_id="CVE-2020-2601" ref_url="https://www.suse.com/security/cve/CVE-2020-2601/" source="CVE"/>
		<reference ref_id="CVE-2020-2604" ref_url="https://www.suse.com/security/cve/CVE-2020-2604/" source="CVE"/>
		<reference ref_id="CVE-2020-2654" ref_url="https://www.suse.com/security/cve/CVE-2020-2654/" source="CVE"/>
		<reference ref_id="CVE-2020-2655" ref_url="https://www.suse.com/security/cve/CVE-2020-2655/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006398.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

Update to version jdk-11.0.6-10 (January 2020 CPU, bsc#1160968)

Fixing these security related issues:

- CVE-2020-2583: Unlink Set of LinkedHashSets
- CVE-2020-2590: Improve Kerberos interop capabilities
- CVE-2020-2593: Normalize normalization for all
- CVE-2020-2601: Better Ticket Granting Services
- CVE-2020-2604: Better serial filter handling
- CVE-2020-2655: Better TLS messaging support
- CVE-2020-2654: Improve Object Identifier Processing
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-22"/>
	<updated date="2020-01-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160968">SUSE bug 1160968</bugzilla>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2583/">CVE-2020-2583</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2590/">CVE-2020-2590</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2593/">CVE-2020-2593</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2601/">CVE-2020-2601</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2604/">CVE-2020-2604</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2654/">CVE-2020-2654</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2655/">CVE-2020-2655</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491237" comment="java-11-openjdk-11.0.6.0-3.39.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491238" comment="java-11-openjdk-demo-11.0.6.0-3.39.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491239" comment="java-11-openjdk-devel-11.0.6.0-3.39.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491240" comment="java-11-openjdk-headless-11.0.6.0-3.39.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137888" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174157" ref_url="https://bugzilla.suse.com/1174157" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14556" ref_url="https://www.suse.com/security/cve/CVE-2020-14556/" source="CVE"/>
		<reference ref_id="CVE-2020-14562" ref_url="https://www.suse.com/security/cve/CVE-2020-14562/" source="CVE"/>
		<reference ref_id="CVE-2020-14573" ref_url="https://www.suse.com/security/cve/CVE-2020-14573/" source="CVE"/>
		<reference ref_id="CVE-2020-14577" ref_url="https://www.suse.com/security/cve/CVE-2020-14577/" source="CVE"/>
		<reference ref_id="CVE-2020-14581" ref_url="https://www.suse.com/security/cve/CVE-2020-14581/" source="CVE"/>
		<reference ref_id="CVE-2020-14583" ref_url="https://www.suse.com/security/cve/CVE-2020-14583/" source="CVE"/>
		<reference ref_id="CVE-2020-14593" ref_url="https://www.suse.com/security/cve/CVE-2020-14593/" source="CVE"/>
		<reference ref_id="CVE-2020-14621" ref_url="https://www.suse.com/security/cve/CVE-2020-14621/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007229.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
      Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
      java/awt/dnd/BadSerializationTest/BadSerializationTest.java
      fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
       popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
      ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
      java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
       Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
      in nightly
    + JDK-8080353: JShell: Better error message on attempting to
       add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
      with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
       with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
       ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
      unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
      correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
      method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
       multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
       running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
      intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
      Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
      java/awt/List/EmptyListEventTest/EmptyListEventTest.java
      debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
      /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
      unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
      after JDK-8198801
    + JDK-8203264: JNI exception pending in
      PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
      DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing 'allocate' naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
      deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
      /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
      handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
      /GetCommittedVirtualMemorySize.java fails with Committed
      virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
      with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
      doesn't work with 1GB LargePages
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-06"/>
	<updated date="2020-08-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174157">SUSE bug 1174157</bugzilla>
	<cve impact="important" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14556/">CVE-2020-14556</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14562/">CVE-2020-14562</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14573/">CVE-2020-14573</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14577/">CVE-2020-14577</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14581/">CVE-2020-14581</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14583/">CVE-2020-14583</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-14593/">CVE-2020-14593</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14621/">CVE-2020-14621</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492316" comment="java-11-openjdk-11.0.8.0-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492317" comment="java-11-openjdk-demo-11.0.8.0-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492318" comment="java-11-openjdk-devel-11.0.8.0-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492319" comment="java-11-openjdk-headless-11.0.8.0-3.45.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137889" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1169063" ref_url="https://bugzilla.suse.com/1169063" source="BUGZILLA"/>
		<reference ref_id="1171899" ref_url="https://bugzilla.suse.com/1171899" source="BUGZILLA"/>
		<reference ref_id="1173606" ref_url="https://bugzilla.suse.com/1173606" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11647" ref_url="https://www.suse.com/security/cve/CVE-2020-11647/" source="CVE"/>
		<reference ref_id="CVE-2020-13164" ref_url="https://www.suse.com/security/cve/CVE-2020-13164/" source="CVE"/>
		<reference ref_id="CVE-2020-15466" ref_url="https://www.suse.com/security/cve/CVE-2020-15466/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2144-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007228.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

- Wireshark to 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (bsc#1173606)
  * CVE-2020-13164: NFS dissector crash (bsc#1171899)
  * CVE-2020-11647: The BACapp dissector could crash (bsc#1169063)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-06"/>
	<updated date="2020-08-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1169063">SUSE bug 1169063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171899">SUSE bug 1171899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173606">SUSE bug 1173606</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11647/">CVE-2020-11647</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13164/">CVE-2020-13164</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-15466/">CVE-2020-15466</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492320" comment="libwireshark13-3.2.5-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492321" comment="libwiretap10-3.2.5-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492322" comment="libwsutil11-3.2.5-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492323" comment="wireshark-3.2.5-3.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137890" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 and postgresql12  (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1148643" ref_url="https://bugzilla.suse.com/1148643" source="BUGZILLA"/>
		<reference ref_id="1163985" ref_url="https://bugzilla.suse.com/1163985" source="BUGZILLA"/>
		<reference ref_id="1171924" ref_url="https://bugzilla.suse.com/1171924" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1720" ref_url="https://www.suse.com/security/cve/CVE-2020-1720/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007234.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 and postgresql12 fixes the following issues:

postgresql10 was updated to 10.13 (bsc#1171924).

  https://www.postgresql.org/about/news/2038/
  https://www.postgresql.org/docs/10/release-10-13.html

postgresql10 was updated to 10.12 (CVE-2020-1720, bsc#1163985)

- https://www.postgresql.org/about/news/2011/
- https://www.postgresql.org/docs/10/release-10-12.html

postgresql10 was updated to 10.11:

- https://www.postgresql.org/about/news/1994/
- https://www.postgresql.org/docs/10/release-10-11.html


postgresql12 was updated to 12.3 (bsc#1171924).

Bug Fixes and Improvements:

- Several fixes for GENERATED columns, including an issue where it was possible to crash or corrupt data in a table when the output of the generated column was the exact copy of a physical column on the table, e.g. if the expression called a function which could return its own input.
- Several fixes for ALTER TABLE, including ensuring the SET STORAGE directive is propagated to a table's indexes.
- Fix a potential race condition when using DROP OWNED BY while another session is deleting the same objects.
- Allow for a partition to be detached when it has inherited ROW triggers.
- Several fixes for REINDEX CONCURRENTLY, particularly with issues when a REINDEX CONCURRENTLY operation fails.
- Fix crash when COLLATE is applied to an uncollatable type in a partition bound expression.
- Fix performance regression in floating point overflow/underflow detection.
- Several fixes for full text search, particularly with phrase searching.
- Fix query-lifespan memory leak for a set-returning function used in a query's FROM clause.
- Several reporting fixes for the output of VACUUM VERBOSE.
- Allow input of type circle to accept the format (x,y),r, which is specified in the documentation.
- Allow for the get_bit() and set_bit() functions to not fail on bytea strings longer than 256MB.
- Avoid premature recycling of WAL segments during crash recovery, which could lead to WAL segments being recycled before being archived.
- Avoid attempting to fetch nonexistent WAL files from archive storage during recovery by skipping irrelevant timelines.
- Several fixes for logical replication and replication slots.
- Fix several race conditions in synchronous standby management, including one that occurred when changing the synchronous_standby_names setting.
- Several fixes for GSSAPI support, include a fix for a memory leak that occurred when using GSSAPI encryption.
- Ensure that members of the pg_read_all_stats role can read all statistics views.
- Fix performance regression in information_schema.triggers view.
- Fix memory leak in libpq when using sslmode=verify-full.
- Fix crash in psql when attempting to re-establish a failed connection.
- Allow tab-completion of the filename argument to \gx command in psql.
- Add pg_dump support for ALTER ... DEPENDS ON EXTENSION.
- Several other fixes for pg_dump, which include dumping comments on RLS policies and postponing restore of event triggers until the end.
- Ensure pg_basebackup generates valid tar files.
- pg_checksums skips tablespace subdirectories that belong to a different PostgreSQL major version
- Several Windows compatibility fixes

This update also contains timezone tzdata release 2020a for DST law changes in Morocco and the Canadian Yukon, plus historical corrections for Shanghai. The America/Godthab zone has been renamed to America/Nuuk to reflect current English usage ; however, the old name remains available as a compatibility link. This also updates initdb's list of known Windows time zone names to include recent additions.

For more details, check out:

-  https://www.postgresql.org/docs/12/release-12-3.html

Other fixes:

- Let postgresqlXX conflict with postgresql-noarch &lt; 12.0.1 to get
  a clean and complete cutover to the new packaging schema.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-06"/>
	<updated date="2020-08-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1148643">SUSE bug 1148643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163985">SUSE bug 1163985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171924">SUSE bug 1171924</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-1720/">CVE-2020-1720</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492324" comment="libpq5-12.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492325" comment="libpq5-32bit-12.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492326" comment="postgresql-12.0.1-8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492327" comment="postgresql12-12.3-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137891" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172356" ref_url="https://bugzilla.suse.com/1172356" source="BUGZILLA"/>
		<reference ref_id="1174543" ref_url="https://bugzilla.suse.com/1174543" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:2158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007236.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- bsc#1174543 - secure boot related fixes
- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next 
    reboot while it should be live attached
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-06"/>
	<updated date="2020-08-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172356">SUSE bug 1172356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174543">SUSE bug 1174543</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492328" comment="xen-libs-4.12.3_06-3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492329" comment="xen-tools-domU-4.12.3_06-3.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137892" version="1" class="patch">
	<metadata>
		<title>Security update for perl-XML-Twig (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1008644" ref_url="https://bugzilla.suse.com/1008644" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-9180" ref_url="https://www.suse.com/security/cve/CVE-2016-9180/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007245.html" source="SUSE-SU"/>
		<description>
This update for perl-XML-Twig fixes the following issues:

- Security fix [bsc#1008644, CVE-2016-9180]
  * Setting expand_external_ents to 0 or -1 currently doesn't work
    as expected; To completely turn off expanding external entities
    use no_xxe.
  * Update documentation for XML::Twig to mention problems with
    expand_external_ents and add information about new no_xxe argument
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-07"/>
	<updated date="2020-08-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1008644">SUSE bug 1008644</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9180/">CVE-2016-9180</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492330" comment="perl-XML-Twig-3.52-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137893" version="1" class="patch">
	<metadata>
		<title>Security update for libX11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174628" ref_url="https://bugzilla.suse.com/1174628" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14344" ref_url="https://www.suse.com/security/cve/CVE-2020-14344/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007252.html" source="SUSE-SU"/>
		<description>
This update for libX11 fixes the following issues:

- Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-11"/>
	<updated date="2020-08-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174628">SUSE bug 1174628</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14344/">CVE-2020-14344</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492331" comment="libX11-6-1.6.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492332" comment="libX11-6-32bit-1.6.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492333" comment="libX11-data-1.6.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492334" comment="libX11-devel-1.6.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492335" comment="libX11-xcb1-1.6.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492336" comment="libX11-xcb1-32bit-1.6.5-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137894" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174662" ref_url="https://bugzilla.suse.com/1174662" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-9862" ref_url="https://www.suse.com/security/cve/CVE-2020-9862/" source="CVE"/>
		<reference ref_id="CVE-2020-9893" ref_url="https://www.suse.com/security/cve/CVE-2020-9893/" source="CVE"/>
		<reference ref_id="CVE-2020-9894" ref_url="https://www.suse.com/security/cve/CVE-2020-9894/" source="CVE"/>
		<reference ref_id="CVE-2020-9895" ref_url="https://www.suse.com/security/cve/CVE-2020-9895/" source="CVE"/>
		<reference ref_id="CVE-2020-9915" ref_url="https://www.suse.com/security/cve/CVE-2020-9915/" source="CVE"/>
		<reference ref_id="CVE-2020-9925" ref_url="https://www.suse.com/security/cve/CVE-2020-9925/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007249.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.28.4 (bsc#1174662):
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-9862, CVE-2020-9893, CVE-2020-9894,
    CVE-2020-9895, CVE-2020-9915, CVE-2020-9925.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-11"/>
	<updated date="2020-08-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174662">SUSE bug 1174662</bugzilla>
	<cve impact="important" cvss3="4.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9862/">CVE-2020-9862</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9893/">CVE-2020-9893</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-9894/">CVE-2020-9894</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9895/">CVE-2020-9895</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-9915/">CVE-2020-9915</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-9925/">CVE-2020-9925</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492337" comment="libjavascriptcoregtk-4_0-18-2.28.4-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492338" comment="libwebkit2gtk-4_0-37-2.28.4-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492339" comment="libwebkit2gtk3-lang-2.28.4-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492340" comment="webkit2gtk-4_0-injected-bundles-2.28.4-3.60.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137895" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141320" ref_url="https://bugzilla.suse.com/1141320" source="BUGZILLA"/>
		<reference ref_id="1160850" ref_url="https://bugzilla.suse.com/1160850" source="BUGZILLA"/>
		<reference ref_id="1160852" ref_url="https://bugzilla.suse.com/1160852" source="BUGZILLA"/>
		<reference ref_id="1160888" ref_url="https://bugzilla.suse.com/1160888" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14902" ref_url="https://www.suse.com/security/cve/CVE-2019-14902/" source="CVE"/>
		<reference ref_id="CVE-2019-14907" ref_url="https://www.suse.com/security/cve/CVE-2019-14907/" source="CVE"/>
		<reference ref_id="CVE-2019-19344" ref_url="https://www.suse.com/security/cve/CVE-2019-19344/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006401.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

Security issues fixed:

- CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888).
- CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not working (bsc#1160850).
- CVE-2019-19344: Fixed a server crash when using dns zone scavenging = yes (bsc#1160852).

Non-security issue fixed:

- Fixed Ceph snapshot path handling relative to root (bsc#1141320).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-23"/>
	<updated date="2020-01-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141320">SUSE bug 1141320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160850">SUSE bug 1160850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160852">SUSE bug 1160852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160888">SUSE bug 1160888</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-14902/">CVE-2019-14902</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14907/">CVE-2019-14907</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19344/">CVE-2019-19344</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492341" comment="libdcerpc-binding0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492342" comment="libdcerpc-binding0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492343" comment="libdcerpc-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492344" comment="libdcerpc-samr-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492345" comment="libdcerpc-samr0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492346" comment="libdcerpc0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492347" comment="libdcerpc0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492348" comment="libndr-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492349" comment="libndr-krb5pac-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492350" comment="libndr-krb5pac0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492351" comment="libndr-krb5pac0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492352" comment="libndr-nbt-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492353" comment="libndr-nbt0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492354" comment="libndr-nbt0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492355" comment="libndr-standard-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492356" comment="libndr-standard0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492357" comment="libndr-standard0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492358" comment="libndr0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492359" comment="libndr0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492360" comment="libnetapi-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492361" comment="libnetapi0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492362" comment="libnetapi0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492363" comment="libsamba-credentials-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492364" comment="libsamba-credentials0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492365" comment="libsamba-credentials0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492366" comment="libsamba-errors-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492367" comment="libsamba-errors0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492368" comment="libsamba-errors0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492369" comment="libsamba-hostconfig-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492370" comment="libsamba-hostconfig0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492371" comment="libsamba-hostconfig0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492372" comment="libsamba-passdb-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492373" comment="libsamba-passdb0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492374" comment="libsamba-passdb0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492375" comment="libsamba-policy-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492376" comment="libsamba-policy-python3-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492377" comment="libsamba-policy0-python3-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492378" comment="libsamba-util-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492379" comment="libsamba-util0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492380" comment="libsamba-util0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492381" comment="libsamdb-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492382" comment="libsamdb0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492383" comment="libsamdb0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492384" comment="libsmbclient-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492385" comment="libsmbclient0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492386" comment="libsmbconf-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492387" comment="libsmbconf0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492388" comment="libsmbconf0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492389" comment="libsmbldap-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492390" comment="libsmbldap2-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492391" comment="libsmbldap2-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492392" comment="libtevent-util-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492393" comment="libtevent-util0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492394" comment="libtevent-util0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492395" comment="libwbclient-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492396" comment="libwbclient0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492397" comment="libwbclient0-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492398" comment="samba-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492399" comment="samba-client-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492400" comment="samba-core-devel-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492401" comment="samba-libs-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492402" comment="samba-libs-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492403" comment="samba-libs-python3-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492404" comment="samba-python3-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492405" comment="samba-winbind-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492406" comment="samba-winbind-32bit-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137896" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1161883" ref_url="https://bugzilla.suse.com/1161883" source="BUGZILLA"/>
		<reference ref_id="1167007" ref_url="https://bugzilla.suse.com/1167007" source="BUGZILLA"/>
		<reference ref_id="1171946" ref_url="https://bugzilla.suse.com/1171946" source="BUGZILLA"/>
		<reference ref_id="1172052" ref_url="https://bugzilla.suse.com/1172052" source="BUGZILLA"/>
		<reference ref_id="1174458" ref_url="https://bugzilla.suse.com/1174458" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14339" ref_url="https://www.suse.com/security/cve/CVE-2020-14339/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007268.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:

- CVE-2020-14339: Don't leak /dev/mapper/control into QEMU. Use
  ioctl's to obtain the dependency tree of disks and drop use of
  libdevmapper. - bsc#1161883, bsc#1174458
- qemu: Setup emulator thread and cpuset.mems before exec - bsc#1171946
- libxl: Normalize MAC address in device conf on netdev hotplug - bsc#1172052
- spec: Use a functional requires instead of explicit version
  requires for the new memory-related libxl APIs - bsc#1167007
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-14"/>
	<updated date="2020-08-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1161883">SUSE bug 1161883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167007">SUSE bug 1167007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171946">SUSE bug 1171946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172052">SUSE bug 1172052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174458">SUSE bug 1174458</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14339/">CVE-2020-14339</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492407" comment="libvirt-libs-5.1.0-8.19.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137897" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174633" ref_url="https://bugzilla.suse.com/1174633" source="BUGZILLA"/>
		<reference ref_id="1174635" ref_url="https://bugzilla.suse.com/1174635" source="BUGZILLA"/>
		<reference ref_id="1174638" ref_url="https://bugzilla.suse.com/1174638" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14345" ref_url="https://www.suse.com/security/cve/CVE-2020-14345/" source="CVE"/>
		<reference ref_id="CVE-2020-14346" ref_url="https://www.suse.com/security/cve/CVE-2020-14346/" source="CVE"/>
		<reference ref_id="CVE-2020-14347" ref_url="https://www.suse.com/security/cve/CVE-2020-14347/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007304.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation (bsc#1174633, ZDI-CAN-11426).
- CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability (bsc#1174638, ZDI-CAN-11429).
- CVE-2020-14345: XKB out-of-bounds access privilege escalation vulnerability (bsc#1174635, ZDI-CAN-11428).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-25"/>
	<updated date="2020-08-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174633">SUSE bug 1174633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174635">SUSE bug 1174635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174638">SUSE bug 1174638</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14345/">CVE-2020-14345</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14346/">CVE-2020-14346</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14347/">CVE-2020-14347</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492408" comment="xorg-x11-server-1.20.3-14.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492409" comment="xorg-x11-server-extra-1.20.3-14.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137898" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175193" ref_url="https://bugzilla.suse.com/1175193" source="BUGZILLA"/>
		<reference ref_id="1175194" ref_url="https://bugzilla.suse.com/1175194" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14349" ref_url="https://www.suse.com/security/cve/CVE-2020-14349/" source="CVE"/>
		<reference ref_id="CVE-2020-14350" ref_url="https://www.suse.com/security/cve/CVE-2020-14350/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007280.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

- update to 12.4:
  * CVE-2020-14349, bsc#1175193: Set a secure search_path in
    logical replication walsenders and apply workers
  * CVE-2020-14350, bsc#1175194: Make contrib modules' installation
    scripts more secure.
  * https://www.postgresql.org/docs/12/release-12-4.html
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-18"/>
	<updated date="2020-08-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175193">SUSE bug 1175193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175194">SUSE bug 1175194</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14349/">CVE-2020-14349</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14350/">CVE-2020-14350</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492410" comment="libpq5-12.4-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492411" comment="libpq5-32bit-12.4-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492412" comment="postgresql12-12.4-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137899" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174091" ref_url="https://bugzilla.suse.com/1174091" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20907" ref_url="https://www.suse.com/security/cve/CVE-2019-20907/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007284.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs (bsc#1174091).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-19"/>
	<updated date="2020-08-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1174091">SUSE bug 1174091</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20907/">CVE-2019-20907</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492413" comment="libpython2_7-1_0-2.7.17-7.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492414" comment="python-2.7.17-7.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492415" comment="python-base-2.7.17-7.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137900" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174091" ref_url="https://bugzilla.suse.com/1174091" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20907" ref_url="https://www.suse.com/security/cve/CVE-2019-20907/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007282.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- bsc#1174091, CVE-2019-20907: avoiding possible infinite loop in specifically crafted tarball.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-19"/>
	<updated date="2020-08-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1174091">SUSE bug 1174091</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20907/">CVE-2019-20907</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492416" comment="libpython3_6m1_0-3.6.10-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492417" comment="python3-3.6.10-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492418" comment="python3-base-3.6.10-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492419" comment="python3-curses-3.6.10-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492420" comment="python3-dbm-3.6.10-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492421" comment="python3-devel-3.6.10-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492422" comment="python3-idle-3.6.10-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492423" comment="python3-testsuite-3.6.10-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492424" comment="python3-tk-3.6.10-3.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137901" version="1" class="patch">
	<metadata>
		<title>Security update for gettext-runtime (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1106843" ref_url="https://bugzilla.suse.com/1106843" source="BUGZILLA"/>
		<reference ref_id="1113719" ref_url="https://bugzilla.suse.com/1113719" source="BUGZILLA"/>
		<reference ref_id="941629" ref_url="https://bugzilla.suse.com/941629" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-18751" ref_url="https://www.suse.com/security/cve/CVE-2018-18751/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007288.html" source="SUSE-SU"/>
		<description>
This update for gettext-runtime fixes the following issues:

- Fix boo941629-unnessary-rpath-on-standard-path.patch (bsc#941629) 
- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)
- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (bsc#1106843)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-24"/>
	<updated date="2020-08-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1106843">SUSE bug 1106843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113719">SUSE bug 1113719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/941629">SUSE bug 941629</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18751/">CVE-2018-18751</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492425" comment="gettext-runtime-0.19.8.1-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492426" comment="gettext-runtime-32bit-0.19.8.1-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492427" comment="gettext-tools-0.19.8.1-4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137902" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172745" ref_url="https://bugzilla.suse.com/1172745" source="BUGZILLA"/>
		<reference ref_id="1174421" ref_url="https://bugzilla.suse.com/1174421" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15705" ref_url="https://www.suse.com/security/cve/CVE-2020-15705/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007293.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

- CVE-2020-15705: Fail kernel validation without shim protocol (bsc#1174421).
- Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery (bsc#1172745).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-25"/>
	<updated date="2020-08-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172745">SUSE bug 1172745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174421">SUSE bug 1174421</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15705/">CVE-2020-15705</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492428" comment="grub2-2.02-26.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492429" comment="grub2-arm64-efi-2.02-26.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492430" comment="grub2-i386-pc-2.02-26.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492431" comment="grub2-powerpc-ieee1275-2.02-26.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492432" comment="grub2-s390x-emu-2.02-26.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492433" comment="grub2-snapper-plugin-2.02-26.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492434" comment="grub2-systemd-sleep-plugin-2.02-26.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492435" comment="grub2-x86_64-efi-2.02-26.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137903" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027282" ref_url="https://bugzilla.suse.com/1027282" source="BUGZILLA"/>
		<reference ref_id="1041090" ref_url="https://bugzilla.suse.com/1041090" source="BUGZILLA"/>
		<reference ref_id="1042670" ref_url="https://bugzilla.suse.com/1042670" source="BUGZILLA"/>
		<reference ref_id="1068664" ref_url="https://bugzilla.suse.com/1068664" source="BUGZILLA"/>
		<reference ref_id="1073269" ref_url="https://bugzilla.suse.com/1073269" source="BUGZILLA"/>
		<reference ref_id="1073748" ref_url="https://bugzilla.suse.com/1073748" source="BUGZILLA"/>
		<reference ref_id="1078326" ref_url="https://bugzilla.suse.com/1078326" source="BUGZILLA"/>
		<reference ref_id="1078485" ref_url="https://bugzilla.suse.com/1078485" source="BUGZILLA"/>
		<reference ref_id="1079300" ref_url="https://bugzilla.suse.com/1079300" source="BUGZILLA"/>
		<reference ref_id="1081750" ref_url="https://bugzilla.suse.com/1081750" source="BUGZILLA"/>
		<reference ref_id="1083507" ref_url="https://bugzilla.suse.com/1083507" source="BUGZILLA"/>
		<reference ref_id="1084650" ref_url="https://bugzilla.suse.com/1084650" source="BUGZILLA"/>
		<reference ref_id="1086001" ref_url="https://bugzilla.suse.com/1086001" source="BUGZILLA"/>
		<reference ref_id="1088004" ref_url="https://bugzilla.suse.com/1088004" source="BUGZILLA"/>
		<reference ref_id="1088009" ref_url="https://bugzilla.suse.com/1088009" source="BUGZILLA"/>
		<reference ref_id="1109847" ref_url="https://bugzilla.suse.com/1109847" source="BUGZILLA"/>
		<reference ref_id="1111793" ref_url="https://bugzilla.suse.com/1111793" source="BUGZILLA"/>
		<reference ref_id="1113755" ref_url="https://bugzilla.suse.com/1113755" source="BUGZILLA"/>
		<reference ref_id="1122191" ref_url="https://bugzilla.suse.com/1122191" source="BUGZILLA"/>
		<reference ref_id="1129346" ref_url="https://bugzilla.suse.com/1129346" source="BUGZILLA"/>
		<reference ref_id="1130840" ref_url="https://bugzilla.suse.com/1130840" source="BUGZILLA"/>
		<reference ref_id="1130847" ref_url="https://bugzilla.suse.com/1130847" source="BUGZILLA"/>
		<reference ref_id="1138459" ref_url="https://bugzilla.suse.com/1138459" source="BUGZILLA"/>
		<reference ref_id="1141853" ref_url="https://bugzilla.suse.com/1141853" source="BUGZILLA"/>
		<reference ref_id="1149792" ref_url="https://bugzilla.suse.com/1149792" source="BUGZILLA"/>
		<reference ref_id="1149955" ref_url="https://bugzilla.suse.com/1149955" source="BUGZILLA"/>
		<reference ref_id="1153238" ref_url="https://bugzilla.suse.com/1153238" source="BUGZILLA"/>
		<reference ref_id="1153830" ref_url="https://bugzilla.suse.com/1153830" source="BUGZILLA"/>
		<reference ref_id="1159035" ref_url="https://bugzilla.suse.com/1159035" source="BUGZILLA"/>
		<reference ref_id="214983" ref_url="https://bugzilla.suse.com/214983" source="BUGZILLA"/>
		<reference ref_id="298378" ref_url="https://bugzilla.suse.com/298378" source="BUGZILLA"/>
		<reference ref_id="346490" ref_url="https://bugzilla.suse.com/346490" source="BUGZILLA"/>
		<reference ref_id="367853" ref_url="https://bugzilla.suse.com/367853" source="BUGZILLA"/>
		<reference ref_id="379534" ref_url="https://bugzilla.suse.com/379534" source="BUGZILLA"/>
		<reference ref_id="380942" ref_url="https://bugzilla.suse.com/380942" source="BUGZILLA"/>
		<reference ref_id="399190" ref_url="https://bugzilla.suse.com/399190" source="BUGZILLA"/>
		<reference ref_id="406051" ref_url="https://bugzilla.suse.com/406051" source="BUGZILLA"/>
		<reference ref_id="425138" ref_url="https://bugzilla.suse.com/425138" source="BUGZILLA"/>
		<reference ref_id="426563" ref_url="https://bugzilla.suse.com/426563" source="BUGZILLA"/>
		<reference ref_id="430761" ref_url="https://bugzilla.suse.com/430761" source="BUGZILLA"/>
		<reference ref_id="432677" ref_url="https://bugzilla.suse.com/432677" source="BUGZILLA"/>
		<reference ref_id="436966" ref_url="https://bugzilla.suse.com/436966" source="BUGZILLA"/>
		<reference ref_id="437293" ref_url="https://bugzilla.suse.com/437293" source="BUGZILLA"/>
		<reference ref_id="441088" ref_url="https://bugzilla.suse.com/441088" source="BUGZILLA"/>
		<reference ref_id="462375" ref_url="https://bugzilla.suse.com/462375" source="BUGZILLA"/>
		<reference ref_id="525295" ref_url="https://bugzilla.suse.com/525295" source="BUGZILLA"/>
		<reference ref_id="534721" ref_url="https://bugzilla.suse.com/534721" source="BUGZILLA"/>
		<reference ref_id="551715" ref_url="https://bugzilla.suse.com/551715" source="BUGZILLA"/>
		<reference ref_id="572673" ref_url="https://bugzilla.suse.com/572673" source="BUGZILLA"/>
		<reference ref_id="577032" ref_url="https://bugzilla.suse.com/577032" source="BUGZILLA"/>
		<reference ref_id="581765" ref_url="https://bugzilla.suse.com/581765" source="BUGZILLA"/>
		<reference ref_id="603255" ref_url="https://bugzilla.suse.com/603255" source="BUGZILLA"/>
		<reference ref_id="617751" ref_url="https://bugzilla.suse.com/617751" source="BUGZILLA"/>
		<reference ref_id="637176" ref_url="https://bugzilla.suse.com/637176" source="BUGZILLA"/>
		<reference ref_id="638233" ref_url="https://bugzilla.suse.com/638233" source="BUGZILLA"/>
		<reference ref_id="658604" ref_url="https://bugzilla.suse.com/658604" source="BUGZILLA"/>
		<reference ref_id="673071" ref_url="https://bugzilla.suse.com/673071" source="BUGZILLA"/>
		<reference ref_id="682554" ref_url="https://bugzilla.suse.com/682554" source="BUGZILLA"/>
		<reference ref_id="697251" ref_url="https://bugzilla.suse.com/697251" source="BUGZILLA"/>
		<reference ref_id="707667" ref_url="https://bugzilla.suse.com/707667" source="BUGZILLA"/>
		<reference ref_id="718009" ref_url="https://bugzilla.suse.com/718009" source="BUGZILLA"/>
		<reference ref_id="747125" ref_url="https://bugzilla.suse.com/747125" source="BUGZILLA"/>
		<reference ref_id="747794" ref_url="https://bugzilla.suse.com/747794" source="BUGZILLA"/>
		<reference ref_id="751718" ref_url="https://bugzilla.suse.com/751718" source="BUGZILLA"/>
		<reference ref_id="754447" ref_url="https://bugzilla.suse.com/754447" source="BUGZILLA"/>
		<reference ref_id="766778" ref_url="https://bugzilla.suse.com/766778" source="BUGZILLA"/>
		<reference ref_id="794139" ref_url="https://bugzilla.suse.com/794139" source="BUGZILLA"/>
		<reference ref_id="804978" ref_url="https://bugzilla.suse.com/804978" source="BUGZILLA"/>
		<reference ref_id="827982" ref_url="https://bugzilla.suse.com/827982" source="BUGZILLA"/>
		<reference ref_id="831442" ref_url="https://bugzilla.suse.com/831442" source="BUGZILLA"/>
		<reference ref_id="834601" ref_url="https://bugzilla.suse.com/834601" source="BUGZILLA"/>
		<reference ref_id="836739" ref_url="https://bugzilla.suse.com/836739" source="BUGZILLA"/>
		<reference ref_id="856835" ref_url="https://bugzilla.suse.com/856835" source="BUGZILLA"/>
		<reference ref_id="856836" ref_url="https://bugzilla.suse.com/856836" source="BUGZILLA"/>
		<reference ref_id="857470" ref_url="https://bugzilla.suse.com/857470" source="BUGZILLA"/>
		<reference ref_id="863741" ref_url="https://bugzilla.suse.com/863741" source="BUGZILLA"/>
		<reference ref_id="885882" ref_url="https://bugzilla.suse.com/885882" source="BUGZILLA"/>
		<reference ref_id="898572" ref_url="https://bugzilla.suse.com/898572" source="BUGZILLA"/>
		<reference ref_id="901715" ref_url="https://bugzilla.suse.com/901715" source="BUGZILLA"/>
		<reference ref_id="935856" ref_url="https://bugzilla.suse.com/935856" source="BUGZILLA"/>
		<reference ref_id="945401" ref_url="https://bugzilla.suse.com/945401" source="BUGZILLA"/>
		<reference ref_id="964182" ref_url="https://bugzilla.suse.com/964182" source="BUGZILLA"/>
		<reference ref_id="984751" ref_url="https://bugzilla.suse.com/984751" source="BUGZILLA"/>
		<reference ref_id="985177" ref_url="https://bugzilla.suse.com/985177" source="BUGZILLA"/>
		<reference ref_id="985348" ref_url="https://bugzilla.suse.com/985348" source="BUGZILLA"/>
		<reference ref_id="989523" ref_url="https://bugzilla.suse.com/989523" source="BUGZILLA"/>
		<reference ref_id="997436" ref_url="https://bugzilla.suse.com/997436" source="BUGZILLA"/>
		<reference ref_id="CVE-2007-2052" ref_url="https://www.suse.com/security/cve/CVE-2007-2052/" source="CVE"/>
		<reference ref_id="CVE-2008-1721" ref_url="https://www.suse.com/security/cve/CVE-2008-1721/" source="CVE"/>
		<reference ref_id="CVE-2008-2315" ref_url="https://www.suse.com/security/cve/CVE-2008-2315/" source="CVE"/>
		<reference ref_id="CVE-2008-2316" ref_url="https://www.suse.com/security/cve/CVE-2008-2316/" source="CVE"/>
		<reference ref_id="CVE-2008-3142" ref_url="https://www.suse.com/security/cve/CVE-2008-3142/" source="CVE"/>
		<reference ref_id="CVE-2008-3143" ref_url="https://www.suse.com/security/cve/CVE-2008-3143/" source="CVE"/>
		<reference ref_id="CVE-2008-3144" ref_url="https://www.suse.com/security/cve/CVE-2008-3144/" source="CVE"/>
		<reference ref_id="CVE-2011-1521" ref_url="https://www.suse.com/security/cve/CVE-2011-1521/" source="CVE"/>
		<reference ref_id="CVE-2011-3389" ref_url="https://www.suse.com/security/cve/CVE-2011-3389/" source="CVE"/>
		<reference ref_id="CVE-2011-4944" ref_url="https://www.suse.com/security/cve/CVE-2011-4944/" source="CVE"/>
		<reference ref_id="CVE-2012-0845" ref_url="https://www.suse.com/security/cve/CVE-2012-0845/" source="CVE"/>
		<reference ref_id="CVE-2012-1150" ref_url="https://www.suse.com/security/cve/CVE-2012-1150/" source="CVE"/>
		<reference ref_id="CVE-2013-1752" ref_url="https://www.suse.com/security/cve/CVE-2013-1752/" source="CVE"/>
		<reference ref_id="CVE-2013-1753" ref_url="https://www.suse.com/security/cve/CVE-2013-1753/" source="CVE"/>
		<reference ref_id="CVE-2013-4238" ref_url="https://www.suse.com/security/cve/CVE-2013-4238/" source="CVE"/>
		<reference ref_id="CVE-2014-1912" ref_url="https://www.suse.com/security/cve/CVE-2014-1912/" source="CVE"/>
		<reference ref_id="CVE-2014-4650" ref_url="https://www.suse.com/security/cve/CVE-2014-4650/" source="CVE"/>
		<reference ref_id="CVE-2014-7185" ref_url="https://www.suse.com/security/cve/CVE-2014-7185/" source="CVE"/>
		<reference ref_id="CVE-2016-0772" ref_url="https://www.suse.com/security/cve/CVE-2016-0772/" source="CVE"/>
		<reference ref_id="CVE-2016-1000110" ref_url="https://www.suse.com/security/cve/CVE-2016-1000110/" source="CVE"/>
		<reference ref_id="CVE-2016-5636" ref_url="https://www.suse.com/security/cve/CVE-2016-5636/" source="CVE"/>
		<reference ref_id="CVE-2016-5699" ref_url="https://www.suse.com/security/cve/CVE-2016-5699/" source="CVE"/>
		<reference ref_id="CVE-2017-1000158" ref_url="https://www.suse.com/security/cve/CVE-2017-1000158/" source="CVE"/>
		<reference ref_id="CVE-2017-18207" ref_url="https://www.suse.com/security/cve/CVE-2017-18207/" source="CVE"/>
		<reference ref_id="CVE-2018-1000030" ref_url="https://www.suse.com/security/cve/CVE-2018-1000030/" source="CVE"/>
		<reference ref_id="CVE-2018-1000802" ref_url="https://www.suse.com/security/cve/CVE-2018-1000802/" source="CVE"/>
		<reference ref_id="CVE-2018-1060" ref_url="https://www.suse.com/security/cve/CVE-2018-1060/" source="CVE"/>
		<reference ref_id="CVE-2018-1061" ref_url="https://www.suse.com/security/cve/CVE-2018-1061/" source="CVE"/>
		<reference ref_id="CVE-2018-14647" ref_url="https://www.suse.com/security/cve/CVE-2018-14647/" source="CVE"/>
		<reference ref_id="CVE-2018-20852" ref_url="https://www.suse.com/security/cve/CVE-2018-20852/" source="CVE"/>
		<reference ref_id="CVE-2019-10160" ref_url="https://www.suse.com/security/cve/CVE-2019-10160/" source="CVE"/>
		<reference ref_id="CVE-2019-16056" ref_url="https://www.suse.com/security/cve/CVE-2019-16056/" source="CVE"/>
		<reference ref_id="CVE-2019-16935" ref_url="https://www.suse.com/security/cve/CVE-2019-16935/" source="CVE"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<reference ref_id="CVE-2019-9636" ref_url="https://www.suse.com/security/cve/CVE-2019-9636/" source="CVE"/>
		<reference ref_id="CVE-2019-9947" ref_url="https://www.suse.com/security/cve/CVE-2019-9947/" source="CVE"/>
		<reference ref_id="CVE-2019-9948" ref_url="https://www.suse.com/security/cve/CVE-2019-9948/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-24"/>
	<updated date="2020-01-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027282">SUSE bug 1027282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1041090">SUSE bug 1041090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042670">SUSE bug 1042670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068664">SUSE bug 1068664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073269">SUSE bug 1073269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073748">SUSE bug 1073748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078326">SUSE bug 1078326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078485">SUSE bug 1078485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1079300">SUSE bug 1079300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081750">SUSE bug 1081750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083507">SUSE bug 1083507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084650">SUSE bug 1084650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086001">SUSE bug 1086001</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088004">SUSE bug 1088004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088009">SUSE bug 1088009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109847">SUSE bug 1109847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111793">SUSE bug 1111793</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113755">SUSE bug 1113755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122191">SUSE bug 1122191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129346">SUSE bug 1129346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130840">SUSE bug 1130840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130847">SUSE bug 1130847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138459">SUSE bug 1138459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141853">SUSE bug 1141853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149792">SUSE bug 1149792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149955">SUSE bug 1149955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153238">SUSE bug 1153238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153830">SUSE bug 1153830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159035">SUSE bug 1159035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/214983">SUSE bug 214983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/298378">SUSE bug 298378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/346490">SUSE bug 346490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/367853">SUSE bug 367853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/379534">SUSE bug 379534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/380942">SUSE bug 380942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/399190">SUSE bug 399190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/406051">SUSE bug 406051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/425138">SUSE bug 425138</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/426563">SUSE bug 426563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/430761">SUSE bug 430761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/432677">SUSE bug 432677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/436966">SUSE bug 436966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/437293">SUSE bug 437293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/441088">SUSE bug 441088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/462375">SUSE bug 462375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/525295">SUSE bug 525295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/534721">SUSE bug 534721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/551715">SUSE bug 551715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/572673">SUSE bug 572673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/577032">SUSE bug 577032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581765">SUSE bug 581765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/603255">SUSE bug 603255</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617751">SUSE bug 617751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/637176">SUSE bug 637176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638233">SUSE bug 638233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/658604">SUSE bug 658604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673071">SUSE bug 673071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/682554">SUSE bug 682554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/697251">SUSE bug 697251</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/707667">SUSE bug 707667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/718009">SUSE bug 718009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747125">SUSE bug 747125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747794">SUSE bug 747794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751718">SUSE bug 751718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754447">SUSE bug 754447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/766778">SUSE bug 766778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/794139">SUSE bug 794139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/804978">SUSE bug 804978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/827982">SUSE bug 827982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831442">SUSE bug 831442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/834601">SUSE bug 834601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/836739">SUSE bug 836739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/856835">SUSE bug 856835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/856836">SUSE bug 856836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/857470">SUSE bug 857470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/863741">SUSE bug 863741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885882">SUSE bug 885882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898572">SUSE bug 898572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901715">SUSE bug 901715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/935856">SUSE bug 935856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945401">SUSE bug 945401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964182">SUSE bug 964182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984751">SUSE bug 984751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985177">SUSE bug 985177</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985348">SUSE bug 985348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989523">SUSE bug 989523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/997436">SUSE bug 997436</bugzilla>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-2052/">CVE-2007-2052</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-1721/">CVE-2008-1721</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-2315/">CVE-2008-2315</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-2316/">CVE-2008-2316</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3142/">CVE-2008-3142</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3143/">CVE-2008-3143</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3144/">CVE-2008-3144</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1521/">CVE-2011-1521</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-3389/">CVE-2011-3389</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-4944/">CVE-2011-4944</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-0845/">CVE-2012-0845</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-1150/">CVE-2012-1150</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2013-1752/">CVE-2013-1752</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2013-1753/">CVE-2013-1753</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2013-4238/">CVE-2013-4238</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1912/">CVE-2014-1912</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-4650/">CVE-2014-4650</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7185/">CVE-2014-7185</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-0772/">CVE-2016-0772</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1000110/">CVE-2016-1000110</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5636/">CVE-2016-5636</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5699/">CVE-2016-5699</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000158/">CVE-2017-1000158</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18207/">CVE-2017-18207</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000030/">CVE-2018-1000030</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000802/">CVE-2018-1000802</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1060/">CVE-2018-1060</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1061/">CVE-2018-1061</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14647/">CVE-2018-14647</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20852/">CVE-2018-20852</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10160/">CVE-2019-10160</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16056/">CVE-2019-16056</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16935/">CVE-2019-16935</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9636/">CVE-2019-9636</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9947/">CVE-2019-9947</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9948/">CVE-2019-9948</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491306" comment="libpython2_7-1_0-2.7.17-7.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491307" comment="python-2.7.17-7.32.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491308" comment="python-base-2.7.17-7.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137904" version="1" class="patch">
	<metadata>
		<title>Security update for graphviz (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1093447" ref_url="https://bugzilla.suse.com/1093447" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10196" ref_url="https://www.suse.com/security/cve/CVE-2018-10196/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007306.html" source="SUSE-SU"/>
		<description>
This update for graphviz fixes the following issues:

- CVE-2018-10196: Fixed a null dereference in rebuild_vlis (bsc#1093447).	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-26"/>
	<updated date="2020-08-26"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1093447">SUSE bug 1093447</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10196/">CVE-2018-10196</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492436" comment="graphviz-2.40.1-6.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492437" comment="graphviz-devel-2.40.1-6.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492438" comment="graphviz-plugins-core-2.40.1-6.6.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492439" comment="libgraphviz6-2.40.1-6.6.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137905" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175193" ref_url="https://bugzilla.suse.com/1175193" source="BUGZILLA"/>
		<reference ref_id="1175194" ref_url="https://bugzilla.suse.com/1175194" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14349" ref_url="https://www.suse.com/security/cve/CVE-2020-14349/" source="CVE"/>
		<reference ref_id="CVE-2020-14350" ref_url="https://www.suse.com/security/cve/CVE-2020-14350/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007312.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

- update to 10.14:
  * CVE-2020-14349, bsc#1175193: Set a secure search_path in
    logical replication walsenders and apply workers
  * CVE-2020-14350, bsc#1175194: Make contrib modules' installation
    scripts more secure.
  * https://www.postgresql.org/docs/10/release-10-14.html
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-27"/>
	<updated date="2020-08-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175193">SUSE bug 1175193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175194">SUSE bug 1175194</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14349/">CVE-2020-14349</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14350/">CVE-2020-14350</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492440" comment="postgresql10-10.14-8.19.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137906" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175109" ref_url="https://bugzilla.suse.com/1175109" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8231" ref_url="https://www.suse.com/security/cve/CVE-2020-8231/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2446-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007327.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- An application that performs multiple requests with libcurl's
  multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
  rare circumstances experience that when subsequently using the
  setup connect-only transfer, libcurl will pick and use the wrong
  connection and instead pick another one the application has
  created since then. [bsc#1175109, CVE-2020-8231]
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-02"/>
	<updated date="2020-09-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175109">SUSE bug 1175109</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8231/">CVE-2020-8231</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492441" comment="curl-7.60.0-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492442" comment="libcurl-devel-7.60.0-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492443" comment="libcurl4-7.60.0-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492444" comment="libcurl4-32bit-7.60.0-3.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137907" version="1" class="patch">
	<metadata>
		<title>Security update for libX11 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175239" ref_url="https://bugzilla.suse.com/1175239" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14363" ref_url="https://www.suse.com/security/cve/CVE-2020-14363/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2474-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007343.html" source="SUSE-SU"/>
		<description>
This update for libX11 fixes the following issues:

- CVE-2020-14363: Fix an integer overflow in init_om() (bsc#1175239).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-03"/>
	<updated date="2020-09-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175239">SUSE bug 1175239</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14363/">CVE-2020-14363</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492445" comment="libX11-6-1.6.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492446" comment="libX11-6-32bit-1.6.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492447" comment="libX11-data-1.6.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492448" comment="libX11-devel-1.6.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492449" comment="libX11-xcb1-1.6.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492450" comment="libX11-xcb1-32bit-1.6.5-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137908" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174910" ref_url="https://bugzilla.suse.com/1174910" source="BUGZILLA"/>
		<reference ref_id="1174913" ref_url="https://bugzilla.suse.com/1174913" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14361" ref_url="https://www.suse.com/security/cve/CVE-2020-14361/" source="CVE"/>
		<reference ref_id="CVE-2020-14362" ref_url="https://www.suse.com/security/cve/CVE-2020-14362/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007349.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2020-14361: Fix XkbSelectEvents() integer underflow (bsc#1174910 ZDI-CAN-11573).
- CVE-2020-14362: Fix XRecordRegisterClients() Integer underflow (bsc#1174913 ZDI-CAN-11574).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-03"/>
	<updated date="2020-09-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174910">SUSE bug 1174910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174913">SUSE bug 1174913</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14361/">CVE-2020-14361</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14362/">CVE-2020-14362</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492451" comment="xorg-x11-server-1.20.3-14.5.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492452" comment="xorg-x11-server-extra-1.20.3-14.5.5.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137909" version="1" class="patch">
	<metadata>
		<title>Security update for libjpeg-turbo (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172491" ref_url="https://bugzilla.suse.com/1172491" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13790" ref_url="https://www.suse.com/security/cve/CVE-2020-13790/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007380.html" source="SUSE-SU"/>
		<description>
This update for libjpeg-turbo fixes the following issues:

- CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file (bsc#1172491).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-08"/>
	<updated date="2020-09-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172491">SUSE bug 1172491</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13790/">CVE-2020-13790</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492453" comment="libjpeg62-62.2.0-5.15.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492454" comment="libjpeg62-devel-62.2.0-5.15.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492455" comment="libjpeg8-8.1.2-5.15.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492456" comment="libjpeg8-devel-8.1.2-5.15.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492457" comment="libturbojpeg0-8.1.2-5.15.7 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137910" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083548" ref_url="https://bugzilla.suse.com/1083548" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1120163" ref_url="https://bugzilla.suse.com/1120163" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1136666" ref_url="https://bugzilla.suse.com/1136666" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1152148" ref_url="https://bugzilla.suse.com/1152148" source="BUGZILLA"/>
		<reference ref_id="1163524" ref_url="https://bugzilla.suse.com/1163524" source="BUGZILLA"/>
		<reference ref_id="1165629" ref_url="https://bugzilla.suse.com/1165629" source="BUGZILLA"/>
		<reference ref_id="1166965" ref_url="https://bugzilla.suse.com/1166965" source="BUGZILLA"/>
		<reference ref_id="1169790" ref_url="https://bugzilla.suse.com/1169790" source="BUGZILLA"/>
		<reference ref_id="1170232" ref_url="https://bugzilla.suse.com/1170232" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1171688" ref_url="https://bugzilla.suse.com/1171688" source="BUGZILLA"/>
		<reference ref_id="1171988" ref_url="https://bugzilla.suse.com/1171988" source="BUGZILLA"/>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1172108" ref_url="https://bugzilla.suse.com/1172108" source="BUGZILLA"/>
		<reference ref_id="1172247" ref_url="https://bugzilla.suse.com/1172247" source="BUGZILLA"/>
		<reference ref_id="1172418" ref_url="https://bugzilla.suse.com/1172418" source="BUGZILLA"/>
		<reference ref_id="1172428" ref_url="https://bugzilla.suse.com/1172428" source="BUGZILLA"/>
		<reference ref_id="1172871" ref_url="https://bugzilla.suse.com/1172871" source="BUGZILLA"/>
		<reference ref_id="1172872" ref_url="https://bugzilla.suse.com/1172872" source="BUGZILLA"/>
		<reference ref_id="1172873" ref_url="https://bugzilla.suse.com/1172873" source="BUGZILLA"/>
		<reference ref_id="1172963" ref_url="https://bugzilla.suse.com/1172963" source="BUGZILLA"/>
		<reference ref_id="1173060" ref_url="https://bugzilla.suse.com/1173060" source="BUGZILLA"/>
		<reference ref_id="1173485" ref_url="https://bugzilla.suse.com/1173485" source="BUGZILLA"/>
		<reference ref_id="1173798" ref_url="https://bugzilla.suse.com/1173798" source="BUGZILLA"/>
		<reference ref_id="1173954" ref_url="https://bugzilla.suse.com/1173954" source="BUGZILLA"/>
		<reference ref_id="1174003" ref_url="https://bugzilla.suse.com/1174003" source="BUGZILLA"/>
		<reference ref_id="1174026" ref_url="https://bugzilla.suse.com/1174026" source="BUGZILLA"/>
		<reference ref_id="1174070" ref_url="https://bugzilla.suse.com/1174070" source="BUGZILLA"/>
		<reference ref_id="1174205" ref_url="https://bugzilla.suse.com/1174205" source="BUGZILLA"/>
		<reference ref_id="1174387" ref_url="https://bugzilla.suse.com/1174387" source="BUGZILLA"/>
		<reference ref_id="1174484" ref_url="https://bugzilla.suse.com/1174484" source="BUGZILLA"/>
		<reference ref_id="1174547" ref_url="https://bugzilla.suse.com/1174547" source="BUGZILLA"/>
		<reference ref_id="1174549" ref_url="https://bugzilla.suse.com/1174549" source="BUGZILLA"/>
		<reference ref_id="1174550" ref_url="https://bugzilla.suse.com/1174550" source="BUGZILLA"/>
		<reference ref_id="1174625" ref_url="https://bugzilla.suse.com/1174625" source="BUGZILLA"/>
		<reference ref_id="1174658" ref_url="https://bugzilla.suse.com/1174658" source="BUGZILLA"/>
		<reference ref_id="1174685" ref_url="https://bugzilla.suse.com/1174685" source="BUGZILLA"/>
		<reference ref_id="1174689" ref_url="https://bugzilla.suse.com/1174689" source="BUGZILLA"/>
		<reference ref_id="1174699" ref_url="https://bugzilla.suse.com/1174699" source="BUGZILLA"/>
		<reference ref_id="1174734" ref_url="https://bugzilla.suse.com/1174734" source="BUGZILLA"/>
		<reference ref_id="1174757" ref_url="https://bugzilla.suse.com/1174757" source="BUGZILLA"/>
		<reference ref_id="1174771" ref_url="https://bugzilla.suse.com/1174771" source="BUGZILLA"/>
		<reference ref_id="1174840" ref_url="https://bugzilla.suse.com/1174840" source="BUGZILLA"/>
		<reference ref_id="1174841" ref_url="https://bugzilla.suse.com/1174841" source="BUGZILLA"/>
		<reference ref_id="1174843" ref_url="https://bugzilla.suse.com/1174843" source="BUGZILLA"/>
		<reference ref_id="1174844" ref_url="https://bugzilla.suse.com/1174844" source="BUGZILLA"/>
		<reference ref_id="1174845" ref_url="https://bugzilla.suse.com/1174845" source="BUGZILLA"/>
		<reference ref_id="1174852" ref_url="https://bugzilla.suse.com/1174852" source="BUGZILLA"/>
		<reference ref_id="1174873" ref_url="https://bugzilla.suse.com/1174873" source="BUGZILLA"/>
		<reference ref_id="1174904" ref_url="https://bugzilla.suse.com/1174904" source="BUGZILLA"/>
		<reference ref_id="1174926" ref_url="https://bugzilla.suse.com/1174926" source="BUGZILLA"/>
		<reference ref_id="1174968" ref_url="https://bugzilla.suse.com/1174968" source="BUGZILLA"/>
		<reference ref_id="1175062" ref_url="https://bugzilla.suse.com/1175062" source="BUGZILLA"/>
		<reference ref_id="1175063" ref_url="https://bugzilla.suse.com/1175063" source="BUGZILLA"/>
		<reference ref_id="1175064" ref_url="https://bugzilla.suse.com/1175064" source="BUGZILLA"/>
		<reference ref_id="1175065" ref_url="https://bugzilla.suse.com/1175065" source="BUGZILLA"/>
		<reference ref_id="1175066" ref_url="https://bugzilla.suse.com/1175066" source="BUGZILLA"/>
		<reference ref_id="1175067" ref_url="https://bugzilla.suse.com/1175067" source="BUGZILLA"/>
		<reference ref_id="1175112" ref_url="https://bugzilla.suse.com/1175112" source="BUGZILLA"/>
		<reference ref_id="1175127" ref_url="https://bugzilla.suse.com/1175127" source="BUGZILLA"/>
		<reference ref_id="1175128" ref_url="https://bugzilla.suse.com/1175128" source="BUGZILLA"/>
		<reference ref_id="1175149" ref_url="https://bugzilla.suse.com/1175149" source="BUGZILLA"/>
		<reference ref_id="1175199" ref_url="https://bugzilla.suse.com/1175199" source="BUGZILLA"/>
		<reference ref_id="1175213" ref_url="https://bugzilla.suse.com/1175213" source="BUGZILLA"/>
		<reference ref_id="1175228" ref_url="https://bugzilla.suse.com/1175228" source="BUGZILLA"/>
		<reference ref_id="1175232" ref_url="https://bugzilla.suse.com/1175232" source="BUGZILLA"/>
		<reference ref_id="1175284" ref_url="https://bugzilla.suse.com/1175284" source="BUGZILLA"/>
		<reference ref_id="1175393" ref_url="https://bugzilla.suse.com/1175393" source="BUGZILLA"/>
		<reference ref_id="1175394" ref_url="https://bugzilla.suse.com/1175394" source="BUGZILLA"/>
		<reference ref_id="1175396" ref_url="https://bugzilla.suse.com/1175396" source="BUGZILLA"/>
		<reference ref_id="1175397" ref_url="https://bugzilla.suse.com/1175397" source="BUGZILLA"/>
		<reference ref_id="1175398" ref_url="https://bugzilla.suse.com/1175398" source="BUGZILLA"/>
		<reference ref_id="1175399" ref_url="https://bugzilla.suse.com/1175399" source="BUGZILLA"/>
		<reference ref_id="1175400" ref_url="https://bugzilla.suse.com/1175400" source="BUGZILLA"/>
		<reference ref_id="1175401" ref_url="https://bugzilla.suse.com/1175401" source="BUGZILLA"/>
		<reference ref_id="1175402" ref_url="https://bugzilla.suse.com/1175402" source="BUGZILLA"/>
		<reference ref_id="1175403" ref_url="https://bugzilla.suse.com/1175403" source="BUGZILLA"/>
		<reference ref_id="1175404" ref_url="https://bugzilla.suse.com/1175404" source="BUGZILLA"/>
		<reference ref_id="1175405" ref_url="https://bugzilla.suse.com/1175405" source="BUGZILLA"/>
		<reference ref_id="1175406" ref_url="https://bugzilla.suse.com/1175406" source="BUGZILLA"/>
		<reference ref_id="1175407" ref_url="https://bugzilla.suse.com/1175407" source="BUGZILLA"/>
		<reference ref_id="1175408" ref_url="https://bugzilla.suse.com/1175408" source="BUGZILLA"/>
		<reference ref_id="1175409" ref_url="https://bugzilla.suse.com/1175409" source="BUGZILLA"/>
		<reference ref_id="1175410" ref_url="https://bugzilla.suse.com/1175410" source="BUGZILLA"/>
		<reference ref_id="1175411" ref_url="https://bugzilla.suse.com/1175411" source="BUGZILLA"/>
		<reference ref_id="1175412" ref_url="https://bugzilla.suse.com/1175412" source="BUGZILLA"/>
		<reference ref_id="1175413" ref_url="https://bugzilla.suse.com/1175413" source="BUGZILLA"/>
		<reference ref_id="1175414" ref_url="https://bugzilla.suse.com/1175414" source="BUGZILLA"/>
		<reference ref_id="1175415" ref_url="https://bugzilla.suse.com/1175415" source="BUGZILLA"/>
		<reference ref_id="1175416" ref_url="https://bugzilla.suse.com/1175416" source="BUGZILLA"/>
		<reference ref_id="1175417" ref_url="https://bugzilla.suse.com/1175417" source="BUGZILLA"/>
		<reference ref_id="1175418" ref_url="https://bugzilla.suse.com/1175418" source="BUGZILLA"/>
		<reference ref_id="1175419" ref_url="https://bugzilla.suse.com/1175419" source="BUGZILLA"/>
		<reference ref_id="1175420" ref_url="https://bugzilla.suse.com/1175420" source="BUGZILLA"/>
		<reference ref_id="1175421" ref_url="https://bugzilla.suse.com/1175421" source="BUGZILLA"/>
		<reference ref_id="1175422" ref_url="https://bugzilla.suse.com/1175422" source="BUGZILLA"/>
		<reference ref_id="1175423" ref_url="https://bugzilla.suse.com/1175423" source="BUGZILLA"/>
		<reference ref_id="1175440" ref_url="https://bugzilla.suse.com/1175440" source="BUGZILLA"/>
		<reference ref_id="1175493" ref_url="https://bugzilla.suse.com/1175493" source="BUGZILLA"/>
		<reference ref_id="1175515" ref_url="https://bugzilla.suse.com/1175515" source="BUGZILLA"/>
		<reference ref_id="1175518" ref_url="https://bugzilla.suse.com/1175518" source="BUGZILLA"/>
		<reference ref_id="1175526" ref_url="https://bugzilla.suse.com/1175526" source="BUGZILLA"/>
		<reference ref_id="1175550" ref_url="https://bugzilla.suse.com/1175550" source="BUGZILLA"/>
		<reference ref_id="1175654" ref_url="https://bugzilla.suse.com/1175654" source="BUGZILLA"/>
		<reference ref_id="1175666" ref_url="https://bugzilla.suse.com/1175666" source="BUGZILLA"/>
		<reference ref_id="1175667" ref_url="https://bugzilla.suse.com/1175667" source="BUGZILLA"/>
		<reference ref_id="1175668" ref_url="https://bugzilla.suse.com/1175668" source="BUGZILLA"/>
		<reference ref_id="1175669" ref_url="https://bugzilla.suse.com/1175669" source="BUGZILLA"/>
		<reference ref_id="1175670" ref_url="https://bugzilla.suse.com/1175670" source="BUGZILLA"/>
		<reference ref_id="1175691" ref_url="https://bugzilla.suse.com/1175691" source="BUGZILLA"/>
		<reference ref_id="1175767" ref_url="https://bugzilla.suse.com/1175767" source="BUGZILLA"/>
		<reference ref_id="1175768" ref_url="https://bugzilla.suse.com/1175768" source="BUGZILLA"/>
		<reference ref_id="1175769" ref_url="https://bugzilla.suse.com/1175769" source="BUGZILLA"/>
		<reference ref_id="1175770" ref_url="https://bugzilla.suse.com/1175770" source="BUGZILLA"/>
		<reference ref_id="1175771" ref_url="https://bugzilla.suse.com/1175771" source="BUGZILLA"/>
		<reference ref_id="1175772" ref_url="https://bugzilla.suse.com/1175772" source="BUGZILLA"/>
		<reference ref_id="1175786" ref_url="https://bugzilla.suse.com/1175786" source="BUGZILLA"/>
		<reference ref_id="1175873" ref_url="https://bugzilla.suse.com/1175873" source="BUGZILLA"/>
		<reference ref_id="1176069" ref_url="https://bugzilla.suse.com/1176069" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10135" ref_url="https://www.suse.com/security/cve/CVE-2020-10135/" source="CVE"/>
		<reference ref_id="CVE-2020-14314" ref_url="https://www.suse.com/security/cve/CVE-2020-14314/" source="CVE"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-14356" ref_url="https://www.suse.com/security/cve/CVE-2020-14356/" source="CVE"/>
		<reference ref_id="CVE-2020-14386" ref_url="https://www.suse.com/security/cve/CVE-2020-14386/" source="CVE"/>
		<reference ref_id="CVE-2020-16166" ref_url="https://www.suse.com/security/cve/CVE-2020-16166/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="CVE-2020-24394" ref_url="https://www.suse.com/security/cve/CVE-2020-24394/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007383.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629).
- CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
- CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).
- CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
- CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
- CVE-2020-24394: Fixed an issue which could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support (bsc#1175518).
- CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988).
- CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).
    
The following non-security bugs were fixed:

- ACPI: kABI fixes for subsys exports (bsc#1174968).
- ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq (bsc#1174968).
- ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate (bsc#1174968).
- ACPI: PM: Introduce 'poweroff' callbacks for ACPI PM domain and LPSS (bsc#1174968).
- ACPI: PM: Simplify and fix PM domain hibernation callbacks (bsc#1174968).
- af_key: pfkey_dump needs parameter validation (git-fixes).
- agp/intel: Fix a memory leak on module initialisation failure (git-fixes).
- ALSA: core: pcm_iec958: fix kernel-doc (bsc#1111666).
- ALSA: echoaduio: Drop superfluous volatile modifier (bsc#1111666).
- ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (bsc#1111666).
- ALSA: hda: Add support for Loongson 7A1000 controller (bsc#1111666).
- ALSA: hda/ca0132 - Add new quirk ID for Recon3D (bsc#1111666).
- ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (bsc#1111666).
- ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (bsc#1111666).
- ALSA: hda: fix NULL pointer dereference during suspend (git-fixes).
- ALSA: hda: fix snd_hda_codec_cleanup() documentation (bsc#1111666).
- ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (bsc#1111666).
- ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (bsc#1111666).
- ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes).
- ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (bsc#1111666).
- ALSA: hda/realtek - Add quirk for Lenovo Carbon X1 8th gen (bsc#1111666).
- ALSA: hda/realtek - Add quirk for MSI GE63 laptop (bsc#1111666).
- ALSA: hda/realtek - Add quirk for MSI GL63 (bsc#1111666).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes).
- ALSA: hda/realtek - change to suitable link model for ASUS platform (bsc#1111666).
- ALSA: hda/realtek - Check headset type by unplug and resume (bsc#1111666).
- ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 (bsc#1111666).
- ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (bsc#1111666).
- ALSA: hda/realtek - Enable Speaker for ASUS UX563 (bsc#1111666).
- ALSA: hda/realtek: Fix add a 'ultra_low_power' function for intel reference board (alc256) (bsc#1111666).
- ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung Notebook Pen S (bsc#1111666).
- ALSA: hda/realtek - Fixed HP right speaker no sound (bsc#1111666).
- ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id (bsc#1111666).
- ALSA: hda/realtek: Fix pin default on Intel NUC 8 Rugged (bsc#1111666).
- ALSA: hda/realtek - Fix unused variable warning (bsc#1111666).
- ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus G14(GA401) series with ALC289 (bsc#1111666).
- ALSA: hda - reverse the setting value in the micmute_led_set (bsc#1111666).
- ALSA: hda: Workaround for spurious wakeups on some Intel platforms (git-fixes).
- ALSA: pci: delete repeated words in comments (bsc#1111666).
- ALSA: seq: oss: Serialize ioctls (bsc#1111666).
- ALSA: usb-audio: Add capture support for Saffire 6 (USB 1.1) (git-fixes).
- ALSA: usb-audio: add quirk for Pioneer DDJ-RB (bsc#1111666).
- ALSA: usb-audio: add startech usb audio dock name (bsc#1111666).
- ALSA: usb-audio: Add support for Lenovo ThinkStation P620 (bsc#1111666).
- ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support (bsc#1111666).
- ALSA: usb-audio: Disable Lenovo P620 Rear line-in volume control (bsc#1111666).
- ALSA: usb-audio: endpoint : remove needless check before usb_free_coherent() (bsc#1111666).
- ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 (bsc#1174625).
- ALSA: usb-audio: fix spelling mistake 'buss' -&gt; 'bus' (bsc#1111666).
- ALSA: usb-audio: ignore broken processing/extension unit (git-fixes).
- ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109 (bsc#1111666).
- ALSA: usb/line6: remove 'defined but not used' warning (bsc#1111666).
- arm64: Add MIDR encoding for HiSilicon Taishan CPUs (bsc#1174547).
- arm64: Add MIDR encoding for NVIDIA CPUs (bsc#1174547).
- arm64: add sysfs vulnerability show for meltdown (bsc#1174547).
- arm64: Add sysfs vulnerability show for spectre-v1 (bsc#1174547).
- arm64: add sysfs vulnerability show for spectre-v2 (bsc#1174547).
- arm64: add sysfs vulnerability show for speculative store bypass (bsc#1174547). 
- arm64: Advertise mitigation of Spectre-v2, or lack thereof (bsc#1174547). 
- arm64: Always enable spectre-v2 vulnerability detection (bsc#1174547). 
- arm64: Always enable ssb vulnerability detection (bsc#1174547). 
- arm64: backtrace: Do not bother trying to unwind the userspace stack (bsc#1175397).
- arm64: capabilities: Add NVIDIA Denver CPU to bp_harden list (bsc#1174547).
- arm64: capabilities: Merge duplicate Cavium erratum entries (bsc#1174547).
- arm64: capabilities: Merge entries for ARM64_WORKAROUND_CLEAN_CACHE (bsc#1174547). 
- arm64: cpufeature: Enable Qualcomm Falkor/Kryo errata 1003 (bsc#1175398).
- arm64: Do not mask out PTE_RDONLY in pte_same() (bsc#1175393).
- arm64: enable generic CPU vulnerabilites support (bsc#1174547). Update config/arm64/default
- arm64: Ensure VM_WRITE|VM_SHARED ptes are clean by default (bsc#1175394).
- arm64: errata: Do not define type field twice for arm64_errata entries (bsc#1174547).
- arm64: errata: Update stale comment (bsc#1174547).
- arm64: Get rid of __smccc_workaround_1_hvc_* (bsc#1174547).
- arm64: kpti: Avoid rewriting early page tables when KASLR is enabled (bsc#1174547).
- arm64: kpti: Update arm64_kernel_use_ng_mappings() when forced on (bsc#1174547).
- arm64: kpti: Whitelist Cortex-A CPUs that do not implement the CSV3 field (bsc#1174547).
- arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs (bsc#1174547).
- arm64: KVM: Avoid setting the upper 32 bits of VTCR_EL2 to 1 (bsc#1133021).
- arm64: KVM: Guests can skip __install_bp_hardening_cb()s HYP work (bsc#1174547).
- arm64: KVM: Use SMCCC_ARCH_WORKAROUND_1 for Falkor BP hardening (bsc#1174547). 
- arm64: mm: Fix pte_mkclean, pte_mkdirty semantics (bsc#1175526). 
- arm64: Provide a command line to disable spectre_v2 mitigation (bsc#1174547).
- arm64: Silence clang warning on mismatched value/register sizes (bsc#1175396).
- arm64/speculation: Support 'mitigations=' cmdline option (bsc#1174547). 
- arm64: ssbd: explicitly depend on &lt;linux/prctl.h&gt; (bsc#1175399).
- arm64: ssbs: Do not treat CPUs with SSBS as unaffected by SSB (bsc#1174547).
- arm64: ssbs: Fix context-switch when SSBS is present on all CPUs (bsc#1175669).
- arm64/sve: Fix wrong free for task-&gt;thread.sve_state (bsc#1175400).
- arm64/sve: &lt;uapi/asm/ptrace.h&gt; should not depend on &amp;lt;uapi/linux/prctl.h&gt; (bsc#1175401).
- arm64: tlbflush: avoid writing RES0 bits (bsc#1175402).
- arm64: Use firmware to detect CPUs that are not affected by Spectre-v2 (bsc#1174547).
- ARM: KVM: invalidate BTB on guest exit for Cortex-A12/A17 (bsc#1133021). 
- ARM: KVM: invalidate icache on guest exit for Cortex-A15 (bsc#1133021).
- ARM: spectre-v2: KVM: invalidate icache on guest exit for Brahma B15 (bsc#1133021).
- ASoC: hda/tegra: Set buffer alignment to 128 bytes (bsc#1111666).
- ASoC: intel: Fix memleak in sst_media_open (git-fixes).
- ASoC: rt5670: Correct RT5670_LDO_SEL_MASK (git-fixes).
- AX.25: Fix out-of-bounds read in ax25_connect() (git-fixes).
- AX.25: Prevent integer overflows in connect and sendmsg (git-fixes).
- AX.25: Prevent out-of-bounds read in ax25_sendmsg() (git-fixes).
- ax88172a: fix ax88172a_unbind() failures (git-fixes).
- b43: Remove uninitialized_var() usage (git-fixes).
- bcache: allocate meta data pages as compound pages (bsc#1172873).
- block: check queue's limits.discard_granularity in __blkdev_issue_discard() (bsc#1152148).
- block: Fix use-after-free in blkdev_get() (bsc#1174843).
- block: improve discard bio alignment in __blkdev_issue_discard() (bsc#1152148).
- Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() (bsc#1111666).
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt() (bsc#1111666).
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt() (bsc#1111666).
- bonding: fix active-backup failover for current ARP slave (bsc#1174771).
- bonding: fix a potential double-unregister (git-fixes).
- bonding: show saner speed for broadcast mode (git-fixes).
- bpf: Fix map leak in HASH_OF_MAPS map (git-fixes).
- brcmfmac: keep SDIO watchdog running when console_interval is non-zero (bsc#1111666).
- brcmfmac: set state of hanger slot to FREE when flushing PSQ (bsc#1111666).
- brcmfmac: To fix Bss Info flag definition Bug (bsc#1111666).
- btrfs: change timing for qgroup reserved space for ordered extents to fix reserved space leak (bsc#1172247).
- btrfs: file: reserve qgroup space after the hole punch range is locked (bsc#1172247).
- btrfs: fix a block group ref counter leak after failure to remove block group (bsc#1175149).
- btrfs: fix block group leak when removing fails (bsc#1175149).
- btrfs: fix bytes_may_use underflow when running balance and scrub in parallel (bsc#1175149).
- btrfs: fix corrupt log due to concurrent fsync of inodes with shared extents (bsc#1175149).
- btrfs: fix data block group relocation failure due to concurrent scrub (bsc#1175149).
- btrfs: fix double free on ulist after backref resolution failure (bsc#1175149).
- btrfs: fix fatal extent_buffer readahead vs releasepage race (bsc#1175149).
- btrfs: fix memory leaks after failure to lookup checksums during inode logging (bsc#1175550).
- btrfs: fix page leaks after failure to lock page for delalloc (bsc#1175149).
- btrfs: fix race between block group removal and block group creation (bsc#1175149).
- btrfs: fix space_info bytes_may_use underflow after nocow buffered write (bsc#1175149).
- btrfs: fix space_info bytes_may_use underflow during space cache writeout (bsc#1175149).
- btrfs: fix wrong file range cleanup after an error filling dealloc range (bsc#1175149).
- btrfs: inode: fix NULL pointer dereference if inode does not need compression (bsc#1174484).
- btrfs: inode: move qgroup reserved space release to the callers of insert_reserved_file_extent() (bsc#1172247).
- btrfs: inode: refactor the parameters of insert_reserved_file_extent() (bsc#1172247).
- btrfs: make btrfs_ordered_extent naming consistent with btrfs_file_extent_item (bsc#1172247).
- btrfs: Open code btrfs_write_and_wait_marked_extents (bsc#1175149).
- btrfs: qgroup: allow to unreserve range without releasing other ranges (bsc#1120163).
- btrfs: qgroup: fix data leak caused by race between writeback and truncate (bsc#1172247).
- btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT (bsc#1120163).
- btrfs: qgroup: try to flush qgroup space when we get -EDQUOT (bsc#1120163).
- btrfs: Rename and export clear_btree_io_tree (bsc#1175149).
- btrfs: treat RWF_{,D}SYNC writes as sync for CRCs (bsc#1175493).
- bus: hisi_lpc: Add .remove method to avoid driver unbind crash (bsc#1174658).
- bus: hisi_lpc: Do not fail probe for unrecognised child devices (bsc#1174658).
- bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-free (bsc#1174658).
- cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip (git-fixes).
- cfg80211: check vendor command doit pointer before use (git-fixes).
- char: virtio: Select VIRTIO from VIRTIO_CONSOLE (bsc#1175667).
- cifs: document and cleanup dfs mount (bsc#1144333 bsc#1172428).
- cifs: Fix an error pointer dereference in cifs_mount() (bsc#1144333 bsc#1172428).
- cifs: fix double free error on share and prefix (bsc#1144333 bsc#1172428).
- cifs: handle empty list of targets in cifs_reconnect() (bsc#1144333 bsc#1172428).
- cifs: handle RESP_GET_DFS_REFERRAL.PathConsumed in reconnect (bsc#1144333 bsc#1172428).
- cifs: merge __{cifs,smb2}_reconnect[_tcon]() into cifs_tree_connect() (bsc#1144333 bsc#1172428).
- cifs: only update prefix path of DFS links in cifs_tree_connect() (bsc#1144333 bsc#1172428).
- cifs: reduce number of referral requests in DFS link lookups (bsc#1144333 bsc#1172428).
- cifs: rename reconn_inval_dfs_target() (bsc#1144333 bsc#1172428).
- clk: at91: clk-generated: check best_rate against ranges (bsc#1111666).
- clk: clk-atlas6: fix return value check in atlas6_clk_init() (bsc#1111666).
- clk: iproc: round clock rate to the closest (bsc#1111666).
- clk: spear: Remove uninitialized_var() usage (git-fixes).
- clk: st: Remove uninitialized_var() usage (git-fixes).
- config: arm64: enable CONFIG_IOMMU_DEFAULT_PASSTHROUGH References: bsc#1174549
- console: newport_con: fix an issue about leak related system resources (git-fixes).
- constrants: fix malformed XML Closing tag of an element is '&lt;/foo&gt;', not '&lt;foo/&gt;'. Fixes: 8b37de2eb835 ('rpm/constraints.in: Increase memory for kernel-docs')
- Created new preempt kernel flavor (jsc#SLE-11309) Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT-&gt;y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.
- crypto: ccp - Fix use of merged scatterlists (git-fixes).
- crypto: cpt - do not sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified (git-fixes).
- crypto: qat - fix double free in qat_uclo_create_batch_init_list (git-fixes).
- crypto: rockchip - fix scatterlist nents error (git-fixes).
- crypto: stm32/crc32 - fix ext4 chksum BUG_ON() (git-fixes).
- crypto: talitos - check AES key size (git-fixes).
- crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK (git-fixes).
- crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req() (git-fixes).
- dev: Defer free of skbs in flush_backlog (git-fixes).
- device property: Fix the secondary firmware node handling in set_primary_fwnode() (git-fixes).
- devres: keep both device name and resource name in pretty name (git-fixes).
- dlm: Fix kobject memleak (bsc#1175768).
- dlm: remove BUG() before panic() (bsc#1174844).
- dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler (git-fixes).
- Documentation/networking: Add net DIM documentation (bsc#1174852).
- dpaa2-eth: Fix passing zero to 'PTR_ERR' warning (bsc#1175403).
- dpaa2-eth: free already allocated channels on probe defer (bsc#1175404).
- dpaa2-eth: prevent array underflow in update_cls_rule() (bsc#1175405).
- dpaa_eth: add dropped frames to percpu ethtool stats (bsc#1174550).
- dpaa_eth: add newline in dev_err() msg (bsc#1174550).
- dpaa_eth: avoid timestamp read on error paths (bsc#1175406).
- dpaa_eth: change DMA device (bsc#1174550).
- dpaa_eth: cleanup skb_to_contig_fd() (bsc#1174550).
- dpaa_eth: defer probing after qbman (bsc#1174550).
- dpaa_eth: extend delays in ndo_stop (bsc#1174550).
- dpaa_eth: fix DMA mapping leak (bsc#1174550).
- dpaa_eth: Fix one possible memleak in dpaa_eth_probe (bsc#1174550).
- dpaa_eth: FMan erratum A050385 workaround (bsc#1174550).
- dpaa_eth: perform DMA unmapping before read (bsc#1175407).
- dpaa_eth: register a device link for the qman portal used (bsc#1174550).
- dpaa_eth: remove netdev_err() for user errors (bsc#1174550).
- dpaa_eth: remove redundant code (bsc#1174550).
- dpaa_eth: simplify variables used in dpaa_cleanup_tx_fd() (bsc#1174550).
- dpaa_eth: use a page to store the SGT (bsc#1174550).
- dpaa_eth: use fd information in dpaa_cleanup_tx_fd() (bsc#1174550).
- dpaa_eth: use only one buffer pool per interface (bsc#1174550).
- dpaa_eth: use page backed rx buffers (bsc#1174550).
- driver core: Avoid binding drivers to dead devices (git-fixes).
- Drivers: hv: balloon: Remove dependencies on guest page size (git-fixes).
- Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE (git-fixes).
- Drivers: hv: vmbus: Only notify Hyper-V for die events that are oops (bsc#1175127, bsc#1175128).
- Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup() (git-fixes).
- drivers/perf: hisi: Fix typo in events attribute array (bsc#1175408).
- drivers/perf: hisi: Fixup one DDRC PMU register offset (bsc#1175410).
- drivers/perf: hisi: Fix wrong value for all counters enable (bsc#1175409).
- drm: Added orientation quirk for ASUS tablet model T103HAF (bsc#1111666).
- drm/amd/display: fix pow() crashing when given base 0 (git-fixes).
- drm/amdgpu: avoid dereferencing a NULL pointer (bsc#1111666).
- drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume (bsc#1111666).
- drm/amdgpu: Fix NULL dereference in dpm sysfs handlers (bsc#1113956) 	* refresh for context changes
- drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() (git-fixes).
- drm/amdgpu: Replace invalid device ID with a valid device ID (bsc#1113956)
- drm/arm: fix unintentional integer overflow on left shift (git-fixes).
- drm/bridge: dw-hdmi: Do not cleanup i2c adapter and ddc ptr in (bsc#1113956) 	* refreshed for context changes
- drm/bridge: sil_sii8620: initialize return of sii8620_readb (git-fixes).
- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1113956) 	* move drm_mipi_dbi.c -&gt; tinydrm/mipi-drm.c 	* refresh for context changes
- drm/debugfs: fix plain echo to connector 'force' attribute (bsc#1111666).
- drm/etnaviv: Fix error path on failure to enable bus clk (git-fixes).
- drm/etnaviv: fix ref count leak via pm_runtime_get_sync (bsc#1111666).
- drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi (bsc#1112178) 	* updated names of get/put functions
- drm: hold gem reference until object is no longer accessed (bsc#1113956)
- drm/imx: fix use after free (git-fixes).
- drm/imx: imx-ldb: Disable both channels for split mode in enc-&gt;disable() (git-fixes).
- drm/imx: tve: fix regulator_disable error path (git-fixes).
- drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline (git-fixes).
- drm/msm/adreno: fix updating ring fence (git-fixes).
- drm/msm: ratelimit crtc event overflow error (bsc#1111666).
- drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason (git-fixes).
- drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure (git-fixes).
- drm/nouveau: fix multiple instances of reference count leaks (bsc#1111666).
- drm/panel: otm8009a: Drop unnessary backlight_device_unregister() (git-fixes).
- drm: panel: simple: Fix bpc for LG LB070WV8 panel (git-fixes).
- drm/radeon: disable AGP by default (bsc#1111666).
- drm/radeon: fix array out-of-bounds read and write issues (git-fixes).
- drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync (bsc#1111666).
- drm/rockchip: fix VOP_WIN_GET macro (bsc#1175411).
- drm/tilcdc: fix leak &amp; null ref in panel_connector_get_modes (bsc#1111666).
- drm/ttm/nouveau: do not call tt destroy callback on alloc failure (bsc#1175232).
- drm/vmwgfx: Fix two list_for_each loop exit tests (bsc#1111666).
- drm/vmwgfx: Use correct vmw_legacy_display_unit pointer (bsc#1111666).
- drm/xen-front: Fix misused IS_ERR_OR_NULL checks (bsc#1065600).
- efi/memreserve: deal with memreserve entries in unmapped memory (bsc#1174685).
- ext4: check journal inode extents more carefully (bsc#1173485).
- ext4: do not allow overlapping system zones (bsc#1173485).
- ext4: fix checking of directory entry validity for inline directories (bsc#1175771).
- ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max (bsc#1174840).
- ext4: handle error of ext4_setup_system_zone() on remount (bsc#1173485).
- fat: do not allow to mount if the FAT length == 0 (bsc#1174845).
- fbdev: Detect integer underflow at 'struct fbcon_ops'-&gt;clear_margins. (bsc#1112178) 	* move files drivers/video/fbdev/core -&gt; drivers/video/console 	* refresh for context changes
- firmware: google: check if size is valid when decoding VPD data (git-fixes).
- firmware: google: increment VPD key_len properly (git-fixes).
- fpga: dfl: fix bug in port reset handshake (git-fixes).
- fsl/fman: add API to get the device behind a fman port (bsc#1174550).
- fsl/fman: check dereferencing null pointer (git-fixes).
- fsl/fman: detect FMan erratum A050385 (bsc#1174550).
- fsl/fman: do not touch liodn base regs reserved on non-PAMU SoCs (bsc#1174550).
- fsl/fman: fix dereference null return value (git-fixes).
- fsl/fman: fix eth hash table allocation (git-fixes).
- fsl/fman: fix unreachable code (git-fixes).
- fsl/fman: remove unused struct member (bsc#1174550).
- fsl/fman: use 32-bit unsigned integer (git-fixes).
- fuse: fix memleak in cuse_channel_open (bsc#1174926).
- fuse: fix missing unlock_page in fuse_writepage() (bsc#1174904).
- fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS (bsc#1175062).
- fuse: fix weird page warning (bsc#1175063).
- fuse: flush dirty data/metadata before non-truncate setattr (bsc#1175064).
- fuse: truncate pending writes on O_TRUNC (bsc#1175065).
- fuse: verify attributes (bsc#1175066).
- fuse: verify nlink (bsc#1175067).
- genetlink: remove genl_bind (networking-stable-20_07_17).
- go7007: add sanity checking for endpoints (git-fixes).
- gpu: host1x: debug: Fix multiple channels emitting messages simultaneously (bsc#1111666).
- HID: hiddev: fix mess in hiddev_open() (git-fixes).
- HISI LPC: Re-Add ACPI child enumeration support (bsc#1174658).
- HISI LPC: Stop using MFD APIs (bsc#1174658).
- hv_balloon: Balloon up according to request page number (git-fixes).
- hv_balloon: Use a static page for the balloon_up send buffer (git-fixes).
- hv_netvsc: Allow scatter-gather feature to be tunable (git-fixes).
- hv_netvsc: do not use VF device if link is down (git-fixes).
- hv_netvsc: Fix a warning of suspicious RCU usage (git-fixes).
- hv_netvsc: Fix error handling in netvsc_attach() (git-fixes).
- hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback() (git-fixes).
- hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit() (git-fixes).
- hv_netvsc: Fix unwanted wakeup in netvsc_attach() (git-fixes).
- hv_netvsc: flag software created hash value (git-fixes).
- hv_netvsc: Remove 'unlikely' from netvsc_select_queue (git-fixes).
- i2c: rcar: in slave mode, clear NACK earlier (git-fixes).
- i2c: rcar: slave: only send STOP event when we have been addressed (bsc#1111666).
- i40e: Fix crash during removing i40e driver (git-fixes).
- i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (git-fixes).
- ibmveth: Fix use of ibmveth in a bridge (bsc#1174387 ltc#187506).
- ibmvnic: Fix IRQ mapping disposal in error path (bsc#1175112 ltc#187459).
- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset (bsc#1175873 ltc#187922).
- include/linux/poison.h: remove obsolete comment (git fixes (poison)).
- Input: psmouse - add a newline when printing 'proto' by sysfs (git-fixes).
- Input: sentelic - fix error return when fsp_reg_write fails (bsc#1111666).
- integrity: remove redundant initialization of variable ret (git-fixes).
- io-mapping: indicate mapping failure (git-fixes).
- ip6_gre: fix null-ptr-deref in ip6gre_init_net() (git-fixes).
- ip6_gre: fix use-after-free in ip6gre_tunnel_lookup() (networking-stable-20_06_28).
- ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL (bsc#1175515).
- ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL (bsc#1175515).
- ip_tunnel: Emit events for post-register MTU changes (git-fixes).
- ip_tunnel: fix use-after-free in ip_tunnel_lookup() (networking-stable-20_06_28).
- ip_tunnel: restore binding to ifaces with a large mtu (git-fixes).
- ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg (networking-stable-20_07_17).
- ipv4: Silence suspicious RCU usage warning (git-fixes).
- ipv6: fix memory leaks on IPV6_ADDRFORM path (git-fixes).
- ipvlan: fix device features (git-fixes).
- ipvs: allow connection reuse for unconfirmed conntrack (git-fixes).
- ipvs: fix refcount usage for conns in ops mode (git-fixes).
- ipvs: fix the connection sync failed in some cases (bsc#1174699).
- irqchip/gic: Atomically update affinity (bsc#1111666).
- iwlegacy: Check the return value of pcie_capability_read_*() (bsc#1111666).
- jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock() (bsc#1175772).
- kabi: genetlink: remove genl_bind (kabi).
- kabi: hide new parameter of ip6_dst_lookup_flow() (bsc#1165629).
- kabi: mask changes to struct ipv6_stub (bsc#1165629).
- kernel/cpu_pm: Fix uninitted local in cpu_pm (git fixes (kernel/pm)).
- kernel-docs: Change Requires on python-Sphinx to earlier than version 3 References: bsc#1166965 From 3 on the internal API that the build system uses was rewritten in an incompatible way. See https://github.com/sphinx-doc/sphinx/issues/7421 and https://bugzilla.suse.com/show_bug.cgi?id=1166965#c16 for some details.
- kernel/relay.c: fix memleak on destroy relay channel (git-fixes).
- kernfs: do not call fsnotify() with name without a parent (bsc#1175770).
- KVM: arm64: Ensure 'params' is initialised when looking up sys register (bsc#1133021).
- KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART (bsc#1133021).
- KVM: arm/arm64: Fix young bit from mmu notifier (bsc#1133021).
- KVM: arm/arm64: vgic: Do not rely on the wrong pending table (bsc#1133021).
- KVM: arm/arm64: vgic-its: Fix restoration of unmapped collections (bsc#1133021).
- KVM: arm: Fix DFSR setting for non-LPAE aarch32 guests (bsc#1133021).
- KVM: arm: Make inject_abt32() inject an external abort instead (bsc#1133021).
- KVM: Change offset in kvm_write_guest_offset_cached to unsigned (bsc#1133021).
- KVM: Check for a bad hva before dropping into the ghc slow path (bsc#1133021).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage (bsc#1065729).
- l2tp: remove skb_dst_set() from l2tp_xmit_skb() (networking-stable-20_07_17).
- leds: 88pm860x: fix use-after-free on unbind (git-fixes).
- leds: core: Flush scheduled work for system suspend (git-fixes).
- leds: da903x: fix use-after-free on unbind (git-fixes).
- leds: lm3533: fix use-after-free on unbind (git-fixes).
- leds: lm355x: avoid enum conversion warning (git-fixes).
- leds: wm831x-status: fix use-after-free on unbind (git-fixes).
- lib/dim: Fix -Wunused-const-variable warnings (bsc#1174852).
- lib: dimlib: fix help text typos (bsc#1174852).
- lib: logic_pio: Add logic_pio_unregister_range() (bsc#1174658).
- lib: logic_pio: Avoid possible overlap for unregistering regions (bsc#1174658).
- lib: logic_pio: Fix RCU usage (bsc#1174658).
- linux/dim: Add completions count to dim_sample (bsc#1174852).
- linux/dim: Fix overflow in dim calculation (bsc#1174852).
- linux/dim: Move implementation to .c files (bsc#1174852).
- linux/dim: Move logic to dim.h (bsc#1174852).
- linux/dim: Remove 'net' prefix from internal DIM members (bsc#1174852).
- linux/dim: Rename externally exposed macros (bsc#1174852).
- linux/dim: Rename externally used net_dim members (bsc#1174852).
- linux/dim: Rename net_dim_sample() to net_dim_update_sample() (bsc#1174852).
- liquidio: Fix wrong return value in cn23xx_get_pf_num() (git-fixes).
- llc: make sure applications use ARPHRD_ETHER (networking-stable-20_07_17).
- mac80211: mesh: Free ie data when leaving mesh (git-fixes).
- mac80211: mesh: Free pending skb when destroying a mpath (git-fixes).
- MAINTAINERS: add entry for Dynamic Interrupt Moderation (bsc#1174852).
- md-cluster: Fix potential error pointer dereference in resize_bitmaps() (git-fixes).
- md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 (git-fixes).
- media: budget-core: Improve exception handling in budget_register() (git-fixes).
- media: exynos4-is: Add missed check for pinctrl_lookup_state() (git-fixes).
- media: firewire: Using uninitialized values in node_probe() (git-fixes).
- media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities() (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- mfd: arizona: Ensure 32k clock is put on driver unbind and error (git-fixes).
- mfd: dln2: Run event handler loop under spinlock (git-fixes).
- mfd: rk808: Fix RK818 ID template (bsc#1175412).
- mld: fix memory leak in ipv6_mc_destroy_dev() (networking-stable-20_06_28).
- mm: filemap: clear idle flag for writes (bsc#1175769).
- mm/migrate.c: add missing flush_dcache_page for non-mapped page migrate (git fixes (mm/migrate)).
- mm/mmu_notifier: use hlist_add_head_rcu() (git fixes (mm/mmu_notifiers)).
- mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() (git fixes (mm/compaction)).
- mm/rmap.c: do not reuse anon_vma if we just want a copy (git fixes (mm/rmap)).
- mm/shmem.c: cast the type of unmap_start to u64 (git fixes (mm/shmem)).
- mm, thp: fix defrag setting if newline is not used (git fixes (mm/thp)).
- mm/vunmap: add cond_resched() in vunmap_pmd_range (bsc#1175654 ltc#184617).
- mtd: spi-nor: Fix an error code in spi_nor_read_raw() (bsc#1175413).
- mtd: spi-nor: fix kernel-doc for spi_nor::info (bsc#1175414).
- mtd: spi-nor: fix kernel-doc for spi_nor::reg_proto (bsc#1175415).
- mtd: spi-nor: fix silent truncation in spi_nor_read_raw() (bsc#1175416).
- mwifiex: Prevent memory corruption handling keys (git-fixes).
- net: Added pointer check for dst-&gt;ops-&gt;neigh_lookup in dst_neigh_lookup_skb (git-fixes).
- net: bridge: enfore alignment for ethernet address (networking-stable-20_06_28).
- net: core: reduce recursion limit value (networking-stable-20_06_28).
- net: Do not clear the sock TX queue in sk_set_socket() (networking-stable-20_06_28).
- net: dsa: b53: check for timeout (git-fixes).
- net: dsa: bcm_sf2: Fix node reference count (git-fixes).
- net: ena: Add first_interrupt field to napi struct (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: add support for reporting of packet drops (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool (bsc#1174852).
- net: ena: allow setting the hash function without changing the key (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function set fails (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when busy-polling (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz (bsc#1174852).
- net: ena: change num_queues to num_io_queues for clarity and consistency (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: Change WARN_ON expression in ena_del_napi_in_range() (bsc#1174852).
- net: ena: clean up indentation issue (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64 (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set() (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in comments (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in ena_com.h macros (bsc#1174852).
- net: ena: cosmetic: rename ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: enable support of rss hash key and function changes (bsc#1174852).
- net: ena: enable the interrupt_moderation in driver_supported_features (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue (bsc#1174852).
- net: ena: ethtool: get_channels: use combined only (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc (bsc#1174852).
- net: ena: ethtool: support set_channels callback (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function() (bsc#1174852).
- net: ena: fix incorrect setting of the number of msix vectors (bsc#1174852).
- net: ena: fix incorrect update of intr_delay_resolution (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors (bsc#1174852).
- net: ena: fix update of interrupt moderation register (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in ena_init_napi_in_range (bsc#1174852).
- net: ena: implement XDP drop support (bsc#1174852).
- net: ena: Implement XDP_TX action (bsc#1174852).
- net: ena: make ethtool -l show correct max number of queues (bsc#1174852).
- net: ena: Make missed_tx stat incremental (bsc#1083548).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: move llq configuration from ena_probe to ena_device_init() (bsc#1174852).
- net: ena: multiple queue creation related cleanups (bsc#1174852).
- net: ena: Prevent reset after device destruction (bsc#1083548).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: remove all old adaptive rx interrupt moderation code from ena_com (bsc#1174852).
- net: ena: remove code duplication in ena_com_update_nonadaptive_moderation_interval _*() (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: remove ena_restore_ethtool_params() and relevant fields (bsc#1174852).
- net: ena: remove old adaptive interrupt moderation code from ena_netdev (bsc#1174852).
- net: ena: remove redundant print of number of queues (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key' (bsc#1174852).
- net: ena: remove set but not used variable 'rx_ring' (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform (bsc#1174852).
- net: ena: Select DIMLIB for ENA_ETHERNET (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution() (bsc#1174852).
- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: switch to dim algorithm for rx adaptive interrupt moderation (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface (bsc#1174852).
- net: ena: xdp: update napi budget for DROP and ABORTED (bsc#1174852).
- net: ena: xdp: XDP_TX: fix memory leak (bsc#1174852).
- net: ethernet: aquantia: Fix wrong return value (git-fixes).
- net: ethernet: broadcom: have drivers select DIMLIB as needed (bsc#1174852).
- net: ethernet: stmmac: Disable hardware multicast filter (git-fixes).
- net: fec: correct the error path for regulator disable in probe (git-fixes).
- netfilter: x_tables: add counters allocation wrapper (git-fixes).
- netfilter: x_tables: cap allocations at 512 mbyte (git-fixes).
- netfilter: x_tables: limit allocation requests for blob rule heads (git-fixes).
- net: Fix a documentation bug wrt. ip_unprivileged_port_start (git-fixes). (SLES tuning guide refers to ip-sysctl.txt.)
- net: fix memleak in register_netdevice() (networking-stable-20_06_28).
- net: Fix the arp error in some cases (networking-stable-20_06_28).
- net: gre: recompute gre csum for sctp over gre tunnels (git-fixes).
- net: hns3: add autoneg and change speed support for fibre port (bsc#1174070).
- net: hns3: add support for FEC encoding control (bsc#1174070).
- net: hns3: add support for multiple media type (bsc#1174070).
- net: hns3: fix a not link up issue when fibre port supports autoneg (bsc#1174070).
- net: hns3: fix for FEC configuration (bsc#1174070).
- net: hns3: fix port capbility updating issue (bsc#1174070).
- net: hns3: fix port setting handle for fibre port (bsc#1174070).
- net: hns3: fix selftest fail issue for fibre port with autoneg on (bsc#1174070).
- net: hns3: restore the MAC autoneg state after reset (bsc#1174070).
- net: increment xmit_recursion level in dev_direct_xmit() (networking-stable-20_06_28).
- net: ip6_gre: Request headroom in __gre6_xmit() (git-fixes).
- net: lan78xx: add missing endpoint sanity check (git-fixes).
- net: lan78xx: fix transfer-buffer memory leak (git-fixes).
- net: make symbol 'flush_works' static (git-fixes).
- net/mlx5e: vxlan: Use RCU for vxlan table lookup (git-fixes).
- net: mvpp2: fix memory leak in mvpp2_rx (git-fixes).
- net: netsec: Fix signedness bug in netsec_probe() (bsc#1175417).
- net: netsec: initialize tx ring on ndo_open (bsc#1175418).
- net: phy: Check harder for errors in get_phy_id() (bsc#1111666).
- net: qcom/emac: add missed clk_disable_unprepare in error path of emac_clks_phase1_init (git-fixes).
- net: Set fput_needed iff FDPUT_FPUT is set (git-fixes).
- net: socionext: Fix a signedness bug in ave_probe() (bsc#1175419).
- net: socionext: replace napi_alloc_frag with the netdev variant on init (bsc#1175420).
- net: spider_net: Fix the size used in a 'dma_free_coherent()' call (git-fixes).
- net: stmmac: dwmac1000: provide multicast filter fallback (git-fixes).
- net: stmmac: Fix RX packet size &gt; 8191 (git-fixes).
- net: udp: Fix wrong clean up for IS_UDPLITE macro (git-fixes).
- net: update net_dim documentation after rename (bsc#1174852).
- net: usb: ax88179_178a: fix packet alignment padding (networking-stable-20_06_28).
- net: usb: qmi_wwan: add support for Quectel EG95 LTE modem (networking-stable-20_07_17).
- netvsc: unshare skb in VF rx handler (git-fixes).
- nfc: nci: add missed destroy_workqueue in nci_register_device (git-fixes).
- ntb: Fix an error in get link status (git-fixes).
- ntb_netdev: fix sleep time mismatch (git-fixes).
- ntb: ntb_transport: Use scnprintf() for avoiding potential buffer overflow (git-fixes).
- nvme: fix possible deadlock when I/O is blocked (git-fixes).
- nvme-multipath: do not fall back to __nvme_find_path() for non-optimized paths (bsc#1172108).
- nvme-multipath: fix logic for non-optimized paths (bsc#1172108).
- nvme-multipath: round-robin: eliminate 'fallback' variable (bsc#1172108).
- nvme: multipath: round-robin: fix single non-optimized path case (bsc#1172108).
- obsolete_kmp: provide newer version than the obsoleted one (boo#1170232).
- ocfs2: add trimfs dlm lock resource (bsc#1175228).
- ocfs2: add trimfs lock to avoid duplicated trims in cluster (bsc#1175228).
- ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
- ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
- ocfs2: change slot number type s16 to u16 (bsc#1175786).
- ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
- ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
- ocfs2: fix remounting needed after setfacl command (bsc#1173954).
- ocfs2: fix the application IO timeout when fstrim is running (bsc#1175228).
- ocfs2: fix value of OCFS2_INVALID_SLOT (bsc#1175767).
- ocfs2: load global_inode_alloc (bsc#1172963).
- ocfs2: load global_inode_alloc (bsc#1172963).
- omapfb: dss: Fix max fclk divider for omap36xx (bsc#1113956)
- openvswitch: Prevent kernel-infoleak in ovs_ct_put_key() (git-fixes).
- PCI/ASPM: Add missing newline in sysfs 'policy' (git-fixes).
- PCI: dwc: Move interrupt acking into the proper callback (bsc#1175666).
- PCI: Fix pci_cfg_wait queue locking problem (git-fixes).
- PCI: Fix 'try' semantics of bus and slot reset (git-fixes).
- PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context() (git-fixes).
- PCI: hv: Fix a timing issue which causes kdump to fail occasionally (bsc#1172871, bsc#1172872, git-fixes).
- PCI: Release IVRS table in AMD ACS quirk (git-fixes).
- PCI: switchtec: Add missing __iomem and __user tags to fix sparse warnings (git-fixes).
- PCI: switchtec: Add missing __iomem tag to fix sparse warnings (git-fixes).
- phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked (git-fixes).
- pinctrl: single: fix function name in documentation (git-fixes).
- pinctrl-single: fix pcs_parse_pinconf() return value (git-fixes).
- platform/x86: intel-hid: Fix return value check in check_acpi_dev() (git-fixes).
- platform/x86: intel-vbtn: Fix return value check in check_acpi_dev() (git-fixes).
- PM / CPU: replace raw_notifier with atomic_notifier (git fixes (kernel/pm)).
- PM / devfreq: rk3399_dmc: Add missing of_node_put() (bsc#1175668).
- PM / devfreq: rk3399_dmc: Disable devfreq-event device when fails.
- PM / devfreq: rk3399_dmc: Fix kernel oops when rockchip,pmu is absent (bsc#1175668).
- PM: sleep: core: Fix the handling of pending runtime resume requests (git-fixes).
- powerpc/64s: Do not init FSCR_DSCR in __init_FSCR() (bsc#1065729).
- powerpc/64s: Fix early_init_mmu section mismatch (bsc#1065729).
- powerpc: Allow 4224 bytes of stack expansion for the signal frame (bsc#1065729).
- powerpc/book3s64/pkeys: Use PVR check instead of cpu feature (bsc#1065729).
- powerpc/boot: Fix CONFIG_PPC_MPC52XX references (bsc#1065729).
- powerpc/eeh: Fix pseries_eeh_configure_bridge() (bsc#1174689).
- powerpc/nvdimm: Use HCALL error as the return value (bsc#1175284).
- powerpc/nvdimm: use H_SCM_QUERY hcall on H_OVERLAP error (bsc#1175284).
- powerpc/perf: Fix missing is_sier_aviable() during build (bsc#1065729).
- powerpc/pseries: Do not initiate shutdown when system is running on UPS (bsc#1175440 ltc#187574).
- powerpc/pseries/hotplug-cpu: Remove double free in error path (bsc#1065729).
- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death (bsc#1085030 ltC#165630).
- powerpc/pseries: PCIE PHB reset (bsc#1174689).
- powerpc/pseries: remove cede offline state for CPUs (bsc#1065729).
- powerpc/rtas: do not online CPUs for partition suspend (bsc#1065729).
- powerpc/vdso: Fix vdso cpu truncation (bsc#1065729).
- power: supply: check if calc_soc succeeded in pm860x_init_battery (git-fixes).
- propagate_one(): mnt_set_mountpoint() needs mount_lock (bsc#1174841).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- pwm: bcm-iproc: handle clk_get_rate() return (git-fixes).
- rds: Prevent kernel-infoleak in rds_notify_queue_get() (git-fixes).
- regulator: gpio: Honor regulator-boot-on property (git-fixes).
- Revert 'ALSA: hda: call runtime_allow() for all hda controllers' (bsc#1111666).
- Revert 'drm/amdgpu: Fix NULL dereference in dpm sysfs handlers' (bsc#1113956) 	* refresh for context changes
- Revert 'ocfs2: avoid inode removal while nfsd is accessing it' This reverts commit 9e096c72476eda333a9998ff464580c00ff59c83.
- Revert 'ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).' This reverts commit 0bf6e248f93736b3f17f399b4a8f64ffa30d371e.
- Revert 'ocfs2: load global_inode_alloc (bsc#1172963).' This reverts commit fc476497b53f967dc615b9cbad9427ba3107b5c4.
- Revert 'scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe' (bsc#1171688 bsc#1174003).
- Revert 'scsi: qla2xxx: Fix crash on qla2x00_mailbox_command' (bsc#1171688 bsc#1174003).
- Revert 'xen/balloon: Fix crash when ballooning on x86 32 bit PAE' (bsc#1065600).
- rocker: fix incorrect error handling in dma_rings_init (networking-stable-20_06_28).
- rpm/check-for-config-changes: Ignore CONFIG_CC_VERSION_TEXT
- rpm/check-for-config-changes: Ignore CONFIG_LD_VERSION
- rpm/constraints.in: Increase memory for kernel-docs References: https://build.opensuse.org/request/show/792664
- rpm: drop execute permissions on source files Sometimes a source file with execute permission appears in upstream repository and makes it into our kernel-source packages. This is caught by OBS build checks and may even result in build failures. Sanitize the source tree by removing execute permissions from all C source and header files.
- rpm/kabi.pl: account for namespace field being moved last Upstream is moving the namespace field in Module.symvers last in order to preserve backwards compatibility with kmod tools (depmod, etc). Fix the kabi.pl script to expect the namespace field last. Since split() ignores trailing empty fields and delimeters, switch to using tr to count how many fields/tabs are in a line. Also, in load_symvers(), pass LIMIT of -1 to split() so it does not strip trailing empty fields, as namespace is an optional field.
- rpm/kernel-binary.spec.in: do not run klp-symbols for configs with no modules Starting with 5.8-rc1, s390x/zfcpdump builds fail because rpm/klp-symbols script does not find .tmp_versions directory. This is missing because s390x/zfcpdump is built without modules (CONFIG_MODULES disabled). As livepatching cannot work without modules, the cleanest solution is setting %klp_symbols to 0 if CONFIG_MODULES is disabled. (We cannot simply add another condition to the place where %klp_symbols is set as it can be already set to 1 from prjconf.)
- rpm/kernel-binary.spec.in: restrict livepatch metapackage to default flavor It has been reported that the kernel-*-livepatch metapackage got erroneously enabled for SLE15-SP3's new -preempt flavor, leading to a unresolvable dependency to a non-existing kernel-livepatch-x.y.z-preempt package. As SLE12 and SLE12-SP1 have run out of livepatching support, the need to build said metapackage for the -xen flavor is gone and the only remaining flavor for which they're still wanted is -default. Restrict the build of the kernel-*-livepatch metapackage to the -default flavor.
- rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup Co-Authored-By: Adam Spiers &lt;aspiers@suse.com&gt;
- rpm/kernel-obs-build.spec.in: Enable overlayfs Overlayfs is needed for podman or docker builds when no more specific driver can be used (like lvm or btrfs). As the default build fs is ext4 currently, we need overlayfs kernel modules to be available.
- rpm/kernel-source.spec.in: Add obsolete_rebuilds (boo#1172073).
- rpm/mkspec-dtb: add mt76 based dtb package
- rpm/package-descriptions: garbege collection remove old ARM and Xen flavors.
- rtlwifi: rtl8192cu: Remove uninitialized_var() usage (git-fixes).
- rtnetlink: Fix memory(net_device) leak when -&gt;newlink fails (git-fixes).
- s390, dcssblk: kaddr and pfn can be NULL to -&gt;direct_access() (bsc#1174873).
- sched: consistently handle layer3 header accesses in the presence of VLANs (networking-stable-20_07_17).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1112178).
- scripts/git_sort/git_sort.py: add bluetooth/bluetooth-next.git repository
- scsi: lpfc: Add and rename a whole bunch of function parameter descriptions (bsc#1171558 bsc#1136666).
- scsi: lpfc: Add description for lpfc_release_rpi()'s 'ndlpl param (bsc#1171558 bsc#1136666).
- scsi: lpfc: Add missing misc_deregister() for lpfc_init() (bsc#1171558 bsc#1136666).
- scsi: lpfc: Ensure variable has the same stipulations as code using it (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix a bunch of kerneldoc misdemeanors (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix FCoE speed reporting (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix kerneldoc parameter formatting/misnaming/missing issues (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix LUN loss after cable pull (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix no message shown for lpfc_hdw_queue out of range value (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix oops when unloading driver while running mds diags (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix retry of PRLI when status indicates its unsupported (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix RSCN timeout due to incorrect gidft counter (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix some function parameter descriptions (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix typo in comment for ULP (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix-up around 120 documentation issues (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix-up formatting/docrot where appropriate (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix validation of bsg reply lengths (bsc#1171558 bsc#1136666).
- scsi: lpfc: NVMe remote port devloss_tmo from lldd (bsc#1171558 bsc#1136666 bsc#1173060).
- scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying targetport (bsc#1171558 bsc#1136666).
- scsi: lpfc: Provide description for lpfc_mem_alloc()'s 'align' param (bsc#1171558 bsc#1136666).
- scsi: lpfc: Quieten some printks (bsc#1171558 bsc#1136666).
- scsi: lpfc: Remove unused variable 'pg_addr' (bsc#1171558 bsc#1136666).
- scsi: lpfc: Update lpfc version to 12.8.0.3 (bsc#1171558 bsc#1136666).
- scsi: lpfc: Use __printf() format notation (bsc#1171558 bsc#1136666).
- scsi: dh: Add Fujitsu device to devinfo and dh lists (bsc#1174026).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value 1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in header files (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files (bsc#1171688 bsc#1174003). 
- scsi: qla2xxx: Fix failure message in qlt_disable_vha() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688 bsc#1174003).
- scsi: smartpqi: add bay identifier (bsc#1172418).
- scsi: smartpqi: add gigabyte controller (bsc#1172418).
- scsi: smartpqi: add id support for SmartRAID 3152-8i (bsc#1172418).
- scsi: smartpqi: add inquiry timeouts (bsc#1172418).
- scsi: smartpqi: add module param for exposure order (bsc#1172418).
- scsi: smartpqi: add module param to hide vsep (bsc#1172418).
- scsi: smartpqi: add new pci ids (bsc#1172418).
- scsi: smartpqi: add pci ids for fiberhome controller (bsc#1172418).
- scsi: smartpqi: add RAID bypass counter (bsc#1172418).
- scsi: smartpqi: add sysfs entries (bsc#1172418).
- scsi: smartpqi: Align driver syntax with oob (bsc#1172418).
- scsi: smartpqi: avoid crashing kernel for controller issues (bsc#1172418).
- scsi: smartpqi: bump version (bsc#1172418).
- scsi: smartpqi: bump version (bsc#1172418).
- scsi: smartpqi: bump version to 1.2.16-010 (bsc#1172418).
- scsi: smartpqi: change TMF timeout from 60 to 30 seconds (bsc#1172418).
- scsi: smartpqi: correct hang when deleting 32 lds (bsc#1172418).
- scsi: smartpqi: correct REGNEWD return status (bsc#1172418).
- scsi: smartpqi: correct syntax issue (bsc#1172418).
- scsi: smartpqi: fix call trace in device discovery (bsc#1172418).
- scsi: smartpqi: fix controller lockup observed during force reboot (bsc#1172418).
- scsi: smartpqi: fix LUN reset when fw bkgnd thread is hung (bsc#1172418).
- scsi: smartpqi: fix problem with unique ID for physical device (bsc#1172418).
- scsi: smartpqi: identify physical devices without issuing INQUIRY (bsc#1172418).
- scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask (bsc#1172418).
- scsi: smartpqi: remove unused manifest constants (bsc#1172418).
- scsi: smartpqi: Reporting unhandled SCSI errors (bsc#1172418).
- scsi: smartpqi: support device deletion via sysfs (bsc#1172418).
- scsi: smartpqi: update copyright (bsc#1172418).
- scsi: smartpqi: update logical volume size after expansion (bsc#1172418).
- scsi: smartpqi: Use scnprintf() for avoiding potential buffer overflow (bsc#1172418).
- scsi: storvsc: Correctly set number of hardware queues for IDE disk (git-fixes).
- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- sctp: Do not advertise IPv4 addresses if ipv6only is set on the socket (networking-stable-20_06_28).
- selftests/livepatch: fix mem leaks in test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: more verification in test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: simplify test-klp-callbacks busy target tests (bsc#1071995).
- serial: 8250: change lock order in serial8250_do_startup() (git-fixes).
- serial: pl011: Do not leak amba_ports entry on driver register error (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- Set VIRTIO_CONSOLE=y (bsc#1175667).
- sign also s390x kernel images (bsc#1163524)
- soc: fsl: qbman: allow registering a device link for the portal user (bsc#1174550).
- soc: fsl: qbman_portals: add APIs to retrieve the probing status (bsc#1174550).
- spi: davinci: Remove uninitialized_var() usage (git-fixes).
- spi: lantiq: fix: Rx overflow error in full duplex mode (git-fixes).
- spi: nxp-fspi: Ensure width is respected in spi-mem operations (bsc#1175421).
- spi: spi-fsl-dspi: Fix 16-bit word order in 32-bit XSPI mode (bsc#1175422).
- spi: spi-mem: export spi_mem_default_supports_op() (bsc#1175421).
- staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes).
- staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes).
- staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes).
- staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support (git-fixes).
- staging: fsl-dpaa2: ethsw: Add missing netdevice check (bsc#1175423).
- staging: rtl8192u: fix a dubious looking mask before a shift (git-fixes).
- staging/speakup: fix get_word non-space look-ahead (git-fixes).
- tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT (networking-stable-20_06_28).
- tcp: grow window for OOO packets only for SACK flows (networking-stable-20_06_28).
- tcp: make sure listeners do not initialize congestion-control state (networking-stable-20_07_17).
- tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key() (networking-stable-20_07_17).
- tcp: md5: do not send silly options in SYNCOOKIES (networking-stable-20_07_17).
- tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers (networking-stable-20_07_17).
- tracepoint: Mark __tracepoint_string's __used (git-fixes).
- tracing: Use trace_sched_process_free() instead of exit() for pid tracing (git-fixes).
- tty: hvc_console, fix crashes on parallel open/close (git-fixes).
- tty: serial: fsl_lpuart: add imx8qxp support (bsc#1175670).
- tty: serial: fsl_lpuart: free IDs allocated by IDA (bsc#1175670).
- USB: cdc-acm: rework notification_buffer resizing (git-fixes).
- USB: gadget: f_tcm: Fix some resource leaks in some error paths (git-fixes).
- USB: host: ohci-exynos: Fix error handling in exynos_ohci_probe() (git-fixes).
- USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge (git-fixes).
- USB: iowarrior: fix up report size handling for some devices (git-fixes).
- usbip: tools: fix module name in man page (git-fixes).
- USB: rename USB quirk to USB_QUIRK_ENDPOINT_IGNORE (git-fixes).
- USB: serial: cp210x: enable usb generic throttle/unthrottle (git-fixes).
- USB: serial: cp210x: re-enable auto-RTS on open (git-fixes).
- USB: serial: ftdi_sio: clean up receive processing (git-fixes).
- USB: serial: ftdi_sio: fix break and sysrq handling (git-fixes).
- USB: serial: ftdi_sio: make process-packet buffer unsigned (git-fixes).
- USB: serial: iuu_phoenix: fix led-activity helpers (git-fixes).
- USB: serial: qcserial: add EM7305 QDL product ID (git-fixes).
- USB: xhci: define IDs for various ASMedia host controllers (git-fixes).
- USB: xhci: Fix ASM2142/ASM3142 DMA addressing (git-fixes).
- USB: xhci: Fix ASMedia ASM1142 DMA addressing (git-fixes).
- USB: xhci-mtk: fix the failure of bandwidth allocation (git-fixes).
- VFS: Check rename_lock in lookup_fast() (bsc#1174734).
- video: fbdev: sm712fb: fix an issue about iounmap for a wrong address (git-fixes).
- video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call (git-fixes).
- virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial (git-fixes).
- vlan: consolidate VLAN parsing code and limit max parsing depth (networking-stable-20_07_17).
- vmxnet3: use correct tcp hdr length when packet is encapsulated (bsc#1175199).
- vt_compat_ioctl(): clean up, use compat_ptr() properly (git-fixes).
- vt: vt_ioctl: remove unnecessary console allocation checks (git-fixes).
- vxlan: Ensure FDB dump is performed under RCU (git-fixes).
- watchdog: f71808e_wdt: clear watchdog timeout occurred flag (bsc#1111666).
- watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options (bsc#1111666).
- watchdog: f71808e_wdt: remove use of wrong watchdog_info option (bsc#1111666).
- wl1251: fix always return 0 error (git-fixes).
- x86/hyperv: Create and use Hyper-V page definitions (git-fixes).
- x86/hyper-v: Fix overflow bug in fill_gva_list() (git-fixes).
- x86/hyperv: Make hv_vcpu_is_preempted() visible (git-fixes).
- x86/mce/inject: Fix a wrong assignment of i_mce.status (bsc#1112178).
- x86/unwind/orc: Fix ORC for newly forked tasks (bsc#1058115).
- xen/balloon: fix accounting in alloc_xenballooned_pages error path (bsc#1065600).
- xen/balloon: make the balloon wait interruptible (bsc#1065600).
- xfrm: check id proto in validate_tmpl() (git-fixes).
- xfrm: clean up xfrm protocol checks (git-fixes).
- xfrm_user: uncoditionally validate esn replay attribute struct (git-fixes).
- xfs: fix inode allocation block res calculation precedence (git-fixes).
- xfs: fix reflink quota reservation accounting error (git-fixes).
- xhci: Fix enumeration issue when setting max packet size for FS devices (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-09"/>
	<updated date="2020-09-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083548">SUSE bug 1083548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120163">SUSE bug 1120163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136666">SUSE bug 1136666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152148">SUSE bug 1152148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163524">SUSE bug 1163524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165629">SUSE bug 1165629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166965">SUSE bug 1166965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169790">SUSE bug 1169790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170232">SUSE bug 1170232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171688">SUSE bug 1171688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171988">SUSE bug 1171988</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172108">SUSE bug 1172108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172247">SUSE bug 1172247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172418">SUSE bug 1172418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172428">SUSE bug 1172428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172871">SUSE bug 1172871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172872">SUSE bug 1172872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172873">SUSE bug 1172873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172963">SUSE bug 1172963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173060">SUSE bug 1173060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173485">SUSE bug 1173485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173798">SUSE bug 1173798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173954">SUSE bug 1173954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174003">SUSE bug 1174003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174026">SUSE bug 1174026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174070">SUSE bug 1174070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174205">SUSE bug 1174205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174387">SUSE bug 1174387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174484">SUSE bug 1174484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174547">SUSE bug 1174547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174549">SUSE bug 1174549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174550">SUSE bug 1174550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174625">SUSE bug 1174625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174658">SUSE bug 1174658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174685">SUSE bug 1174685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174689">SUSE bug 1174689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174699">SUSE bug 1174699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174734">SUSE bug 1174734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174757">SUSE bug 1174757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174771">SUSE bug 1174771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174840">SUSE bug 1174840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174841">SUSE bug 1174841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174843">SUSE bug 1174843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174844">SUSE bug 1174844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174845">SUSE bug 1174845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174852">SUSE bug 1174852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174873">SUSE bug 1174873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174904">SUSE bug 1174904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174926">SUSE bug 1174926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174968">SUSE bug 1174968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175062">SUSE bug 1175062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175063">SUSE bug 1175063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175064">SUSE bug 1175064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175065">SUSE bug 1175065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175066">SUSE bug 1175066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175067">SUSE bug 1175067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175112">SUSE bug 1175112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175127">SUSE bug 1175127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175128">SUSE bug 1175128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175149">SUSE bug 1175149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175199">SUSE bug 1175199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175213">SUSE bug 1175213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175228">SUSE bug 1175228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175232">SUSE bug 1175232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175284">SUSE bug 1175284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175393">SUSE bug 1175393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175394">SUSE bug 1175394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175396">SUSE bug 1175396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175397">SUSE bug 1175397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175398">SUSE bug 1175398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175399">SUSE bug 1175399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175400">SUSE bug 1175400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175401">SUSE bug 1175401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175402">SUSE bug 1175402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175403">SUSE bug 1175403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175404">SUSE bug 1175404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175405">SUSE bug 1175405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175406">SUSE bug 1175406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175407">SUSE bug 1175407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175408">SUSE bug 1175408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175409">SUSE bug 1175409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175410">SUSE bug 1175410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175411">SUSE bug 1175411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175412">SUSE bug 1175412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175413">SUSE bug 1175413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175414">SUSE bug 1175414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175415">SUSE bug 1175415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175416">SUSE bug 1175416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175417">SUSE bug 1175417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175418">SUSE bug 1175418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175419">SUSE bug 1175419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175420">SUSE bug 1175420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175421">SUSE bug 1175421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175422">SUSE bug 1175422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175423">SUSE bug 1175423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175440">SUSE bug 1175440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175493">SUSE bug 1175493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175515">SUSE bug 1175515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175518">SUSE bug 1175518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175526">SUSE bug 1175526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175550">SUSE bug 1175550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175654">SUSE bug 1175654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175666">SUSE bug 1175666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175667">SUSE bug 1175667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175668">SUSE bug 1175668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175669">SUSE bug 1175669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175670">SUSE bug 1175670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175691">SUSE bug 1175691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175767">SUSE bug 1175767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175768">SUSE bug 1175768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175769">SUSE bug 1175769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175770">SUSE bug 1175770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175771">SUSE bug 1175771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175772">SUSE bug 1175772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175786">SUSE bug 1175786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175873">SUSE bug 1175873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176069">SUSE bug 1176069</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-10135/">CVE-2020-10135</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14314/">CVE-2020-14314</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14356/">CVE-2020-14356</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14386/">CVE-2020-14386</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16166/">CVE-2020-16166</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24394/">CVE-2020-24394</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492458" comment="kernel-default-4.12.14-197.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492459" comment="kernel-default-base-4.12.14-197.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492460" comment="kernel-default-devel-4.12.14-197.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492461" comment="kernel-default-man-4.12.14-197.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492462" comment="kernel-devel-4.12.14-197.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492463" comment="kernel-macros-4.12.14-197.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137911" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174154" ref_url="https://bugzilla.suse.com/1174154" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15719" ref_url="https://www.suse.com/security/cve/CVE-2020-15719/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2581-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007391.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-09"/>
	<updated date="2020-09-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1174154">SUSE bug 1174154</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15719/">CVE-2020-15719</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492464" comment="libldap-2_4-2-2.4.46-9.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492465" comment="libldap-2_4-2-32bit-2.4.46-9.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492466" comment="libldap-data-2.4.46-9.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492467" comment="openldap2-client-2.4.46-9.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492468" comment="openldap2-devel-2.4.46-9.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492469" comment="openldap2-devel-static-2.4.46-9.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137912" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176179" ref_url="https://bugzilla.suse.com/1176179" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24977" ref_url="https://www.suse.com/security/cve/CVE-2020-24977/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2612-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007411.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

- CVE-2020-24977: Fixed a global-buffer-overflow in xmlEncodeEntitiesInternal (bsc#1176179).  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-11"/>
	<updated date="2020-09-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1176179">SUSE bug 1176179</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24977/">CVE-2020-24977</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492470" comment="libxml2-2-2.9.7-3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492471" comment="libxml2-2-32bit-2.9.7-3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492472" comment="libxml2-devel-2.9.7-3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492473" comment="libxml2-tools-2.9.7-3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492474" comment="python3-libxml2-python-2.9.7-3.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137913" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1149332" ref_url="https://bugzilla.suse.com/1149332" source="BUGZILLA"/>
		<reference ref_id="1151582" ref_url="https://bugzilla.suse.com/1151582" source="BUGZILLA"/>
		<reference ref_id="1157292" ref_url="https://bugzilla.suse.com/1157292" source="BUGZILLA"/>
		<reference ref_id="1157893" ref_url="https://bugzilla.suse.com/1157893" source="BUGZILLA"/>
		<reference ref_id="1158996" ref_url="https://bugzilla.suse.com/1158996" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19126" ref_url="https://www.suse.com/security/cve/CVE-2019-19126/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0262-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006413.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

Security issue fixed:

- CVE-2019-19126: Fixed to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition (bsc#1157292).

Bug fixes:

- Fixed z15 (s390x) strstr implementation that can return incorrect results if search string cross page boundary (bsc#1157893).
- Fixed Hardware support in toolchain (bsc#1151582).
- Fixed syscalls during early process initialization (SLE-8348).
- Fixed an array overflow in backtrace for PowerPC (bsc#1158996).
- Moved to posix_spawn on popen (bsc#1149332).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-30"/>
	<updated date="2020-01-30"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1149332">SUSE bug 1149332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151582">SUSE bug 1151582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157292">SUSE bug 1157292</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157893">SUSE bug 1157893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158996">SUSE bug 1158996</bugzilla>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19126/">CVE-2019-19126</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491313" comment="glibc-2.26-13.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491314" comment="glibc-32bit-2.26-13.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491315" comment="glibc-devel-2.26-13.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491316" comment="glibc-extra-2.26-13.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491317" comment="glibc-i18ndata-2.26-13.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491318" comment="glibc-info-2.26-13.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491319" comment="glibc-locale-2.26-13.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491320" comment="glibc-locale-base-2.26-13.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491321" comment="glibc-locale-base-32bit-2.26-13.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491322" comment="glibc-profile-2.26-13.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491323" comment="nscd-2.26-13.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137914" version="1" class="patch">
	<metadata>
		<title>Security update for shim (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1113225" ref_url="https://bugzilla.suse.com/1113225" source="BUGZILLA"/>
		<reference ref_id="1121268" ref_url="https://bugzilla.suse.com/1121268" source="BUGZILLA"/>
		<reference ref_id="1153953" ref_url="https://bugzilla.suse.com/1153953" source="BUGZILLA"/>
		<reference ref_id="1168104" ref_url="https://bugzilla.suse.com/1168104" source="BUGZILLA"/>
		<reference ref_id="1168994" ref_url="https://bugzilla.suse.com/1168994" source="BUGZILLA"/>
		<reference ref_id="1173411" ref_url="https://bugzilla.suse.com/1173411" source="BUGZILLA"/>
		<reference ref_id="1174320" ref_url="https://bugzilla.suse.com/1174320" source="BUGZILLA"/>
		<reference ref_id="1175626" ref_url="https://bugzilla.suse.com/1175626" source="BUGZILLA"/>
		<reference ref_id="1175656" ref_url="https://bugzilla.suse.com/1175656" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10713" ref_url="https://www.suse.com/security/cve/CVE-2020-10713/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007421.html" source="SUSE-SU"/>
		<description>
This update for shim fixes the following issues:

This update addresses the 'BootHole' security issue (master CVE CVE-2020-10713), by
disallowing binaries signed by the previous SUSE UEFI signing key from booting.

This update should only be installed after updates of grub2, the Linux kernel and (if used)
Xen from July / August 2020 are applied.


Changes:

Use vendor-dbx to block old SUSE/openSUSE signkeys (bsc#1168994)

+ Add dbx-cert.tar.xz which contains the certificates to block
  and a script, generate-vendor-dbx.sh, to generate
  vendor-dbx.bin
+ Add vendor-dbx.bin as the vendor dbx to block unwanted keys


- Update the path to grub-tpm.efi in shim-install (bsc#1174320)
- Only check EFI variable copying when Secure Boot is enabled (bsc#1173411)
- Use the full path of efibootmgr to avoid errors when invoking
  shim-install from packagekitd (bsc#1168104)
- shim-install: add check for btrfs is used as root file system to enable
  relative path lookup for file. (bsc#1153953) 
- shim-install: install MokManager to \EFI\boot to process the
  pending MOK request (bsc#1175626, bsc#1175656)

		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-14"/>
	<updated date="2020-09-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1113225">SUSE bug 1113225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121268">SUSE bug 1121268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153953">SUSE bug 1153953</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168104">SUSE bug 1168104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168994">SUSE bug 1168994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173411">SUSE bug 1173411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174320">SUSE bug 1174320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175626">SUSE bug 1175626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175656">SUSE bug 1175656</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10713/">CVE-2020-10713</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492475" comment="shim-15+git47-3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137915" version="1" class="patch">
	<metadata>
		<title>Security update for wicked (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160903" ref_url="https://bugzilla.suse.com/1160903" source="BUGZILLA"/>
		<reference ref_id="1160905" ref_url="https://bugzilla.suse.com/1160905" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18902" ref_url="https://www.suse.com/security/cve/CVE-2019-18902/" source="CVE"/>
		<reference ref_id="CVE-2020-7216" ref_url="https://www.suse.com/security/cve/CVE-2020-7216/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006416.html" source="SUSE-SU"/>
		<description>
This update for wicked fixes the following issues:

- CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options (bsc#1160903).
- CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing message type option in DHCP4 (bsc#1160905).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-30"/>
	<updated date="2020-01-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160903">SUSE bug 1160903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160905">SUSE bug 1160905</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-18902/">CVE-2019-18902</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7216/">CVE-2020-7216</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492476" comment="wicked-0.6.60-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492477" comment="wicked-service-0.6.60-3.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137916" version="1" class="patch">
	<metadata>
		<title>Security update for perl-DBI (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176409" ref_url="https://bugzilla.suse.com/1176409" source="BUGZILLA"/>
		<reference ref_id="1176412" ref_url="https://bugzilla.suse.com/1176412" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14392" ref_url="https://www.suse.com/security/cve/CVE-2020-14392/" source="CVE"/>
		<reference ref_id="CVE-2020-14393" ref_url="https://www.suse.com/security/cve/CVE-2020-14393/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2645-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007431.html" source="SUSE-SU"/>
		<description>
This update for perl-DBI fixes the following issues:

Security issues fixed:

- CVE-2020-14392: Memory corruption in XS functions when Perl stack is reallocated (bsc#1176412).
- CVE-2020-14393: Fixed a buffer overflow on an overlong DBD class name (bsc#1176409).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-16"/>
	<updated date="2020-09-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176409">SUSE bug 1176409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176412">SUSE bug 1176412</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14392/">CVE-2020-14392</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14393/">CVE-2020-14393</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492478" comment="perl-DBI-1.639-3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137917" version="1" class="patch">
	<metadata>
		<title>Security update for e2fsprogs (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160571" ref_url="https://bugzilla.suse.com/1160571" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5188" ref_url="https://www.suse.com/security/cve/CVE-2019-5188/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0265-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006415.html" source="SUSE-SU"/>
		<description>
This update for e2fsprogs fixes the following issues:

- CVE-2019-5188: Fixed a code execution vulnerability in the directory rehashing functionality (bsc#1160571).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-30"/>
	<updated date="2020-01-30"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1160571">SUSE bug 1160571</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5188/">CVE-2019-5188</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491326" comment="e2fsprogs-1.43.8-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491327" comment="e2fsprogs-devel-1.43.8-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491328" comment="libcom_err-devel-1.43.8-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491329" comment="libcom_err-devel-static-1.43.8-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491330" comment="libcom_err2-1.43.8-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491331" comment="libcom_err2-32bit-1.43.8-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491332" comment="libext2fs-devel-1.43.8-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491333" comment="libext2fs-devel-static-1.43.8-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491334" comment="libext2fs2-1.43.8-4.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137918" version="1" class="patch">
	<metadata>
		<title>Security update for jasper (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1010979" ref_url="https://bugzilla.suse.com/1010979" source="BUGZILLA"/>
		<reference ref_id="1010980" ref_url="https://bugzilla.suse.com/1010980" source="BUGZILLA"/>
		<reference ref_id="1020451" ref_url="https://bugzilla.suse.com/1020451" source="BUGZILLA"/>
		<reference ref_id="1020456" ref_url="https://bugzilla.suse.com/1020456" source="BUGZILLA"/>
		<reference ref_id="1020458" ref_url="https://bugzilla.suse.com/1020458" source="BUGZILLA"/>
		<reference ref_id="1020460" ref_url="https://bugzilla.suse.com/1020460" source="BUGZILLA"/>
		<reference ref_id="1045450" ref_url="https://bugzilla.suse.com/1045450" source="BUGZILLA"/>
		<reference ref_id="1057152" ref_url="https://bugzilla.suse.com/1057152" source="BUGZILLA"/>
		<reference ref_id="1088278" ref_url="https://bugzilla.suse.com/1088278" source="BUGZILLA"/>
		<reference ref_id="1114498" ref_url="https://bugzilla.suse.com/1114498" source="BUGZILLA"/>
		<reference ref_id="1115637" ref_url="https://bugzilla.suse.com/1115637" source="BUGZILLA"/>
		<reference ref_id="1117328" ref_url="https://bugzilla.suse.com/1117328" source="BUGZILLA"/>
		<reference ref_id="1120805" ref_url="https://bugzilla.suse.com/1120805" source="BUGZILLA"/>
		<reference ref_id="1120807" ref_url="https://bugzilla.suse.com/1120807" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-9398" ref_url="https://www.suse.com/security/cve/CVE-2016-9398/" source="CVE"/>
		<reference ref_id="CVE-2016-9399" ref_url="https://www.suse.com/security/cve/CVE-2016-9399/" source="CVE"/>
		<reference ref_id="CVE-2017-14132" ref_url="https://www.suse.com/security/cve/CVE-2017-14132/" source="CVE"/>
		<reference ref_id="CVE-2017-5499" ref_url="https://www.suse.com/security/cve/CVE-2017-5499/" source="CVE"/>
		<reference ref_id="CVE-2017-5503" ref_url="https://www.suse.com/security/cve/CVE-2017-5503/" source="CVE"/>
		<reference ref_id="CVE-2017-5504" ref_url="https://www.suse.com/security/cve/CVE-2017-5504/" source="CVE"/>
		<reference ref_id="CVE-2017-5505" ref_url="https://www.suse.com/security/cve/CVE-2017-5505/" source="CVE"/>
		<reference ref_id="CVE-2017-9782" ref_url="https://www.suse.com/security/cve/CVE-2017-9782/" source="CVE"/>
		<reference ref_id="CVE-2018-18873" ref_url="https://www.suse.com/security/cve/CVE-2018-18873/" source="CVE"/>
		<reference ref_id="CVE-2018-19139" ref_url="https://www.suse.com/security/cve/CVE-2018-19139/" source="CVE"/>
		<reference ref_id="CVE-2018-19543" ref_url="https://www.suse.com/security/cve/CVE-2018-19543/" source="CVE"/>
		<reference ref_id="CVE-2018-20570" ref_url="https://www.suse.com/security/cve/CVE-2018-20570/" source="CVE"/>
		<reference ref_id="CVE-2018-20622" ref_url="https://www.suse.com/security/cve/CVE-2018-20622/" source="CVE"/>
		<reference ref_id="CVE-2018-9252" ref_url="https://www.suse.com/security/cve/CVE-2018-9252/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<description>
This update for jasper fixes the following issues:

- CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979).
- CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980).
- CVE-2017-5499: Validate component depth bit (bsc#1020451).
- CVE-2017-5503: Check bounds in jas_seq2d_bindsub() (bsc#1020456).
- CVE-2017-5504: Check bounds in jas_seq2d_bindsub() (bsc#1020458).
- CVE-2017-5505: Check bounds in jas_seq2d_bindsub() (bsc#1020460).
- CVE-2017-14132: Fix heap base overflow in by checking components (bsc#1057152).
- CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize (bsc#1088278).
- CVE-2018-18873: Fix null pointer deref in ras_putdatastd (bsc#1114498).
- CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms (bsc#1115637).
- CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup (bsc#1117328).
- CVE-2018-20570: Fix heap based buffer over-read in jp2_encode (bsc#1120807).
- CVE-2018-20622: Fix memory leak in jas_malloc.c (bsc#1120805).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-21"/>
	<updated date="2020-09-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1010979">SUSE bug 1010979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010980">SUSE bug 1010980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020451">SUSE bug 1020451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020456">SUSE bug 1020456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020458">SUSE bug 1020458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020460">SUSE bug 1020460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1045450">SUSE bug 1045450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057152">SUSE bug 1057152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088278">SUSE bug 1088278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114498">SUSE bug 1114498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115637">SUSE bug 1115637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117328">SUSE bug 1117328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120805">SUSE bug 1120805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120807">SUSE bug 1120807</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9398/">CVE-2016-9398</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9399/">CVE-2016-9399</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14132/">CVE-2017-14132</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5499/">CVE-2017-5499</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5503/">CVE-2017-5503</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5504/">CVE-2017-5504</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5505/">CVE-2017-5505</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9782/">CVE-2017-9782</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18873/">CVE-2018-18873</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19139/">CVE-2018-19139</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19543/">CVE-2018-19543</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20570/">CVE-2018-20570</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20622/">CVE-2018-20622</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9252/">CVE-2018-9252</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492479" comment="libjasper4-2.0.14-3.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137919" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175568" ref_url="https://bugzilla.suse.com/1175568" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8027" ref_url="https://www.suse.com/security/cve/CVE-2020-8027/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007454.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- CVE-2020-8027: openldap_update_modules_path.sh starts daemons unconditionally and uses fixed paths in /tmp (bsc#1175568).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-22"/>
	<updated date="2020-09-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175568">SUSE bug 1175568</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8027/">CVE-2020-8027</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492480" comment="libldap-2_4-2-2.4.46-9.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492481" comment="libldap-2_4-2-32bit-2.4.46-9.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492482" comment="libldap-data-2.4.46-9.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492483" comment="openldap2-client-2.4.46-9.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492484" comment="openldap2-devel-2.4.46-9.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492485" comment="openldap2-devel-static-2.4.46-9.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137920" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176579" ref_url="https://bugzilla.suse.com/1176579" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1472" ref_url="https://www.suse.com/security/cve/CVE-2020-1472/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007465.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

 - ZeroLogon: An elevation of privilege was possible with some non default configurations when an attacker established
 a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC) 
 (CVE-2020-1472, bsc#1176579).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-23"/>
	<updated date="2020-09-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176579">SUSE bug 1176579</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1472/">CVE-2020-1472</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492486" comment="libdcerpc-binding0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492487" comment="libdcerpc-binding0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492488" comment="libdcerpc-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492489" comment="libdcerpc-samr-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492490" comment="libdcerpc-samr0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492491" comment="libdcerpc0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492492" comment="libdcerpc0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492493" comment="libndr-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492494" comment="libndr-krb5pac-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492495" comment="libndr-krb5pac0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492496" comment="libndr-krb5pac0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492497" comment="libndr-nbt-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492498" comment="libndr-nbt0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492499" comment="libndr-nbt0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492500" comment="libndr-standard-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492501" comment="libndr-standard0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492502" comment="libndr-standard0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492503" comment="libndr0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492504" comment="libndr0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492505" comment="libnetapi-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492506" comment="libnetapi0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492507" comment="libnetapi0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492508" comment="libsamba-credentials-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492509" comment="libsamba-credentials0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492510" comment="libsamba-credentials0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492511" comment="libsamba-errors-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492512" comment="libsamba-errors0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492513" comment="libsamba-errors0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492514" comment="libsamba-hostconfig-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492515" comment="libsamba-hostconfig0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492516" comment="libsamba-hostconfig0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492517" comment="libsamba-passdb-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492518" comment="libsamba-passdb0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492519" comment="libsamba-passdb0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492520" comment="libsamba-policy-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492521" comment="libsamba-policy-python3-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492522" comment="libsamba-policy0-python3-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492523" comment="libsamba-util-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492524" comment="libsamba-util0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492525" comment="libsamba-util0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492526" comment="libsamdb-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492527" comment="libsamdb0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492528" comment="libsamdb0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492529" comment="libsmbclient-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492530" comment="libsmbclient0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492531" comment="libsmbconf-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492532" comment="libsmbconf0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492533" comment="libsmbconf0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492534" comment="libsmbldap-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492535" comment="libsmbldap2-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492536" comment="libsmbldap2-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492537" comment="libtevent-util-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492538" comment="libtevent-util0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492539" comment="libtevent-util0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492540" comment="libwbclient-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492541" comment="libwbclient0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492542" comment="libwbclient0-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492543" comment="samba-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492544" comment="samba-client-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492545" comment="samba-core-devel-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492546" comment="samba-libs-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492547" comment="samba-libs-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492548" comment="samba-libs-python3-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492549" comment="samba-python3-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492550" comment="samba-winbind-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492551" comment="samba-winbind-32bit-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137921" version="1" class="patch">
	<metadata>
		<title>Security update for cifs-utils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1152930" ref_url="https://bugzilla.suse.com/1152930" source="BUGZILLA"/>
		<reference ref_id="1174477" ref_url="https://bugzilla.suse.com/1174477" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14342" ref_url="https://www.suse.com/security/cve/CVE-2020-14342/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007471.html" source="SUSE-SU"/>
		<description>
This update for cifs-utils fixes the following issues:

- CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs (bsc#1174477). 
- Fixed an invalid free in mount.cifs; (bsc#1152930).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-23"/>
	<updated date="2020-09-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1152930">SUSE bug 1152930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174477">SUSE bug 1174477</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14342/">CVE-2020-14342</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492552" comment="cifs-utils-6.9-5.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492553" comment="cifs-utils-devel-6.9-5.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137922" version="1" class="patch">
	<metadata>
		<title>Security update for conmon, fuse-overlayfs, libcontainers-common, podman (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162432" ref_url="https://bugzilla.suse.com/1162432" source="BUGZILLA"/>
		<reference ref_id="1164090" ref_url="https://bugzilla.suse.com/1164090" source="BUGZILLA"/>
		<reference ref_id="1165738" ref_url="https://bugzilla.suse.com/1165738" source="BUGZILLA"/>
		<reference ref_id="1171578" ref_url="https://bugzilla.suse.com/1171578" source="BUGZILLA"/>
		<reference ref_id="1174075" ref_url="https://bugzilla.suse.com/1174075" source="BUGZILLA"/>
		<reference ref_id="1175821" ref_url="https://bugzilla.suse.com/1175821" source="BUGZILLA"/>
		<reference ref_id="1175957" ref_url="https://bugzilla.suse.com/1175957" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1726" ref_url="https://www.suse.com/security/cve/CVE-2020-1726/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007476.html" source="SUSE-SU"/>
		<description>
This update for conmon, fuse-overlayfs, libcontainers-common, podman fixes the following issues:

podman was updated to v2.0.6 (bsc#1175821)

- install missing systemd units for the new Rest API (bsc#1175957)
  and a few man-pages that where missing before
- Drop varlink API related bits (in favor of the new API)
- fix install location for zsh completions

 * Fixed a bug where running systemd in a container on a cgroups v1 system would fail.
 * Fixed a bug where /etc/passwd could be re-created every time a container
   is restarted if the container's /etc/passwd did not contain an entry
   for the user the container was started as.
 * Fixed a bug where containers without an /etc/passwd file specifying
   a non-root user would not start.
 * Fixed a bug where the --remote flag would sometimes not make
   remote connections and would instead attempt to run Podman locally.

Update to v2.0.6:

* Features

  - Rootless Podman will now add an entry to /etc/passwd for the user who ran Podman if run with --userns=keep-id.
  - The podman system connection command has been reworked to support multiple connections, and reenabled for use!
  - Podman now has a new global flag, --connection, to specify a connection to a remote Podman API instance.

* Changes

  - Podman's automatic systemd integration (activated by the --systemd=true flag, set by default) will now activate for containers using /usr/local/sbin/init as their command, instead of just /usr/sbin/init and /sbin/init (and any path ending in systemd).
  - Seccomp profiles specified by the --security-opt seccomp=... flag to podman create and podman run will now be honored even if the container was created using --privileged.

* Bugfixes

  - Fixed a bug where the podman play kube would not honor the hostIP field for port forwarding (#5964).
  - Fixed a bug where the podman generate systemd command would panic on an invalid restart policy being specified (#7271).
  - Fixed a bug where the podman images command could take a very long time (several minutes) to complete when a large number of images were present.
  - Fixed a bug where the podman logs command with the --tail flag would not work properly when a large amount of output would be printed ((#7230)[https://github.com//issues/7230]).
  - Fixed a bug where the podman exec command with remote Podman would not return a non-zero exit code when the exec session failed to start (e.g. invoking a non-existent command) (#6893).
  - Fixed a bug where the podman load command with remote Podman would did not honor user-specified tags (#7124).
  - Fixed a bug where the podman system service command, when run as a non-root user by Systemd, did not properly handle the Podman pause process and would not restart properly as a result (#7180).
  - Fixed a bug where the --publish flag to podman create, podman run, and podman pod create did not properly handle a host IP of 0.0.0.0 (attempting to bind to literal 0.0.0.0, instead of all IPs on the system) (#7104).
  - Fixed a bug where the podman start --attach command would not print the container's exit code when the command exited due to the container exiting.
  - Fixed a bug where the podman rm command with remote Podman would not remove volumes, even if the --volumes flag was specified (#7128).
  - Fixed a bug where the podman run command with remote Podman and the --rm flag could exit before the container was fully removed.
  - Fixed a bug where the --pod new:... flag to podman run and podman create would create a pod that did not share any namespaces.
  - Fixed a bug where the --preserve-fds flag to podman run and podman exec could close the wrong file descriptors while trying to close user-provided descriptors after passing them into the container.
  - Fixed a bug where default environment variables ($PATH and $TERM) were not set in containers when not provided by the image.
  - Fixed a bug where pod infra containers were not properly unmounted after exiting.
  - Fixed a bug where networks created with podman network create with an IPv6 subnet did not properly set an IPv6 default route.
  - Fixed a bug where the podman save command would not work properly when its output was piped to another command (#7017).
  - Fixed a bug where containers using a systemd init on a cgroups v1 system could leak mounts under /sys/fs/cgroup/systemd to the host.
  - Fixed a bug where podman build would not generate an event on completion (#7022).
  - Fixed a bug where the podman history command with remote Podman printed incorrect creation times for layers (#7122).
  - Fixed a bug where Podman would not create working directories specified by the container image if they did not exist.
  - Fixed a bug where Podman did not clear CMD from the container image if the user overrode ENTRYPOINT (#7115).
  - Fixed a bug where error parsing image names were not fully reported (part of the error message containing the exact issue was dropped).
  - Fixed a bug where the podman images command with remote Podman did not support printing image tags in Go templates supplied to the --format flag (#7123).
  - Fixed a bug where the podman rmi --force command would not attempt to unmount containers it was removing, which could cause a failure to remove the image.
  - Fixed a bug where the podman generate systemd --new command could incorrectly quote arguments to Podman that contained whitespace, leading to nonfunctional unit files (#7285).
  - Fixed a bug where the podman version command did not properly include build time and Git commit.
  - Fixed a bug where running systemd in a Podman container on a system that did not use the systemd cgroup manager would fail (#6734).
  - Fixed a bug where capabilities from --cap-add were not properly added when a container was started as a non-root user via --user.
  - Fixed a bug where Pod infra containers were not properly cleaned up when they stopped, causing networking issues (#7103).

* API

  - Fixed a bug where the libpod and compat Build endpoints did not accept the application/tar content type (instead only accepting application/x-tar) (#7185).
  - Fixed a bug where the libpod Exists endpoint would attempt to write a second header in some error conditions (#7197).
  - Fixed a bug where compat and libpod Network Inspect and Network Remove endpoints would return a 500 instead of 404 when the requested network was not found.
  - Added a versioned _ping endpoint (e.g. http://localhost/v1.40/_ping).
  - Fixed a bug where containers started through a systemd-managed instance of the REST API would be shut down when podman system service shut down due to its idle timeout (#7294).
  - Added stronger parameter verification for the libpod Network Create endpoint to ensure subnet mask is a valid value.
  - The Pod URL parameter to the Libpod Container List endpoint has been deprecated; the information previously gated by the Pod boolean will now be included in the response unconditionally.

- Change hard requires for AppArmor to Recommends. They are not
  needed for runtime or with SELinux but already installed if
  AppArmor is used [jsc#SMO-15]
- Add BuildRequires for pkg-config(libselinux) to build with
  SELinux support [jsc#SMO-15] 

Update to v2.0.4

* Fixed a bug where the output of podman image search did not
  populate the Description field as it was mistakenly assigned to
  the ID field.
* Fixed a bug where podman build - and podman build on an HTTP
  target would fail.
* Fixed a bug where rootless Podman would improperly chown the
  copied-up contents of anonymous volumes (#7130).
* Fixed a bug where Podman would sometimes HTML-escape special
  characters in its CLI output.
* Fixed a bug where the podman start --attach --interactive
  command would print the container ID of the container attached
  to when exiting (#7068).
* Fixed a bug where podman run --ipc=host --pid=host would only
  set --pid=host and not --ipc=host (#7100).
* Fixed a bug where the --publish argument to podman run, podman
  create and podman pod create would not allow binding the same
  container port to more than one host port (#7062).
* Fixed a bug where incorrect arguments to podman images --format
  could cause Podman to segfault.
* Fixed a bug where podman rmi --force on an image ID with more
  than one name and at least one container using the image would
  not completely remove containers using the image (#7153).
* Fixed a bug where memory usage in bytes and memory use
  percentage were swapped in the output of podman stats
  --format=json.
* Fixed a bug where the libpod and compat events endpoints would
  fail if no filters were specified (#7078).
* Fixed a bug where the CgroupVersion field in responses from the
  compat Info endpoint was prefixed by 'v' (instead of just being
  '1' or '2', as is documented).

- Suggest katacontainers instead of recommending it. It's not
  enabled by default, so it's just bloat

Update to v2.0.3

* Fix handling of entrypoint
* log API: add context to allow for cancelling
* fix API: Create container with an invalid configuration
* Remove all instances of named return 'err' from Libpod
* Fix: Correct connection counters for hijacked connections
* Fix: Hijacking v2 endpoints to follow rfc 7230 semantics
* Remove hijacked connections from active connections list
* version/info: format: allow more json variants
* Correctly print STDOUT on non-terminal remote exec
* Fix container and pod create commands for remote create
* Mask out /sys/dev to prevent information leak from the host
* Ensure sig-proxy default is propagated in start
* Add SystemdMode to inspect for containers
* When determining systemd mode, use full command
* Fix lint
* Populate remaining unused fields in `pod inspect`
* Include infra container information in `pod inspect`
* play-kube: add suport for 'IfNotPresent' pull type
* docs: user namespace can't be shared in pods
* Fix 'Error: unrecognized protocol \'TCP\' in port mapping'
* Error on rootless mac and ip addresses
* Fix &amp; add notes regarding problematic language in codebase
* abi: set default umask and rlimits
* Used reference package with errors for parsing tag
* fix: system df error when an image has no name
* Fix Generate API title/description
* Add noop function disable-content-trust
* fix play kube doesn't override dockerfile ENTRYPOINT
* Support default profile for apparmor
* Bump github.com/containers/common to v0.14.6
* events endpoint: backwards compat to old type
* events endpoint: fix panic and race condition
* Switch references from libpod.conf to containers.conf
* podman.service: set type to simple
* podman.service: set doc to podman-system-service
* podman.service: use default registries.conf
* podman.service: use default killmode
* podman.service: remove stop timeout
* systemd: symlink user-&gt;system
* vendor golang.org/x/text@v0.3.3
* Fix a bug where --pids-limit was parsed incorrectly
* search: allow wildcards
* [CI:DOCS]Do not copy policy.json into gating image
* Fix systemd pid 1 test
* Cirrus: Rotate keys post repo. rename
* The libpod.conf(5) man page got removed and all references are
  now pointing towards containers.conf(5), which will be part
  of the libcontainers-common package.

Update to podman v2.0.2

* fix race condition in `libpod.GetEvents(...)`
* Fix bug where `podman mount` didn't error as rootless
* remove podman system connection
* Fix imports to ensure v2 is used with libpod
* Update release notes for v2.0.2
* specgen: fix order for setting rlimits
* Ensure umask is set appropriately for 'system service'
* generate systemd: improve pod-flags filter
* Fix a bug with APIv2 compat network remove to log an ErrNetworkNotFound instead of nil
* Fixes --remote flag issues
* Pids-limit should only be set if the user set it
* Set console mode for windows
* Allow empty host port in --publish flag
* Add a note on the APIs supported by `system service`
* fix: Don't override entrypoint if it's `nil`
* Set TMPDIR to /var/tmp by default if not set
* test: add tests for --user and volumes
* container: move volume chown after spec generation
* libpod: volume copyup honors namespace mappings
* Fix `system service` panic from early hangup in events
* stop podman service in e2e tests
* Print errors from individual containers in pods
* auto-update: clarify systemd-unit requirements
* podman ps truncate the command
* move go module to v2
* Vendor containers/common v0.14.4
* Bump to imagebuilder v1.1.6 on v2 branch
* Account for non-default port number in image name
- Changes since v2.0.1
* Update release notes with further v2.0.1 changes
* Fix inspect to display multiple label: changes
* Set syslog for exit commands on log-level=debug
* Friendly amendment for pr 6751
* podman run/create: support all transports
* systemd generate: allow manual restart of container units in pods
* Revert sending --remote flag to containers
* Print port mappings in `ps` for ctrs sharing network
* vendor github.com/containers/common@v0.14.3
* Update release notes for v2.0.1
* utils: drop default mapping when running uid!=0
* Set stop signal to 15 when not explicitly set
* podman untag: error if tag doesn't exist
* Reformat inspect network settings
* APIv2: Return `StatusCreated` from volume creation
* APIv2:fix: Remove `/json` from compat network EPs
* Fix ssh-agent support
* libpod: specify mappings to the storage
* APIv2:doc: Fix swagger doc to refer to volumes
* Add podman network to bash command completions
* Fix typo in manpage for `podman auto update`.
* Add JSON output field for ps
* V2 podman system connection
* image load: no args required
* Re-add PODMAN_USERNS environment variable
* Fix conflicts between privileged and other flags
* Bump required go version to 1.13
* Add explicit command to alpine container in test case.
* Use POLL_DURATION for timer
* Stop following logs using timers
* 'pod' was being truncated to 'po' in the names of the generated systemd unit files.
* rootless_linux: improve error message
* Fix podman build handling of --http-proxy flag
* correct the absolute path of `rm` executable
* Makefile: allow customizable GO_BUILD
* Cirrus: Change DEST_BRANCH to v2.0

Update to podman v2.0.0

* The `podman generate systemd` command now supports the `--new`
  flag when used with pods, allowing portable services for pods
  to be created.
* The `podman play kube` command now supports running Kubernetes
  Deployment YAML.
* The `podman exec` command now supports the `--detach` flag to
  run commands in the container in the background.
* The `-p` flag to `podman run` and `podman create` now supports
  forwarding ports to IPv6 addresses.
* The `podman run`, `podman create` and `podman pod create`
  command now support a `--replace` flag to remove and replace any
  existing container (or, for `pod create`, pod) with the same name
* The `--restart-policy` flag to `podman run` and `podman create`
  now supports the `unless-stopped` restart policy.
* The `--log-driver` flag to `podman run` and `podman create`
  now supports the `none` driver, which does not log the
  container's output.
* The `--mount` flag to `podman run` and `podman create` now
  accepts `readonly` option as an alias to `ro`.
* The `podman generate systemd` command now supports the `--container-prefix`,
  `--pod-prefix`, and `--separator` arguments to control the
  name of generated unit files.
* The `podman network ls` command now supports the `--filter`
  flag to filter results.
* The `podman auto-update` command now supports specifying an
  authfile to use when pulling new images on a per-container
  basis using the `io.containers.autoupdate.authfile` label.
* Fixed a bug where the `podman exec` command would log to journald
  when run in containers loggined to journald
  ([#6555](https://github.com/containers/libpod/issues/6555)).
* Fixed a bug where the `podman auto-update` command would not
  preserve the OS and architecture of the original image when
  pulling a replacement
  ([#6613](https://github.com/containers/libpod/issues/6613)).
* Fixed a bug where the `podman cp` command could create an extra
  `merged` directory when copying into an existing directory
  ([#6596](https://github.com/containers/libpod/issues/6596)).
* Fixed a bug where the `podman pod stats` command would crash
  on pods run with `--network=host`
  ([#5652](https://github.com/containers/libpod/issues/5652)).
* Fixed a bug where containers logs written to journald did not
  include the name of the container.
* Fixed a bug where the `podman network inspect` and
  `podman network rm` commands did not properly handle non-default
  CNI configuration paths ([#6212](https://github.com/containers/libpod/issues/6212)).
* Fixed a bug where Podman did not properly remove containers
  when using the Kata containers OCI runtime.
* Fixed a bug where `podman inspect` would sometimes incorrectly
  report the network mode of containers started with `--net=none`.
* Podman is now better able to deal with cases where `conmon`
  is killed before the container it is monitoring.

Update to podman v1.9.3:

* Fixed a bug where, on FIPS enabled hosts, FIPS mode secrets
  were not properly mounted into containers
* Fixed a bug where builds run over Varlink would hang
* Fixed a bug where podman save would fail when the target
  image was specified by digest
* Fixed a bug where rootless containers with ports forwarded to them
  could panic and dump core due to a concurrency issue (#6018)
* Fixed a bug where rootless Podman could race when opening the
  rootless user namespace, resulting in commands failing to run
* Fixed a bug where HTTP proxy environment variables forwarded into
  the container by the --http-proxy flag could not be overridden by --env or --env-file
* Fixed a bug where rootless Podman was setting resource limits on cgroups
  v2 systems that were not using systemd-managed cgroups
  (and thus did not support resource limits), resulting in containers failing to start

Update podman to v1.9.1:

* Bugfixes

  - Fixed a bug where healthchecks could become nonfunctional if
    container log paths were manually set with --log-path and
    multiple container logs were placed in the same directory
  - Fixed a bug where rootless Podman could, when using an older
    libpod.conf, print numerous warning messages about an invalid
    CGroup manager config
  - Fixed a bug where rootless Podman would sometimes fail to
    close the rootless user namespace when joining it

Update podman to v1.9.0:

* Features

  - Experimental support has been added for podman run
    --userns=auto, which automatically allocates a unique UID and
    GID range for the new container's user namespace
  - The podman play kube command now has a --network flag to
    place the created pod in one or more CNI networks
  - The podman commit command now supports an --iidfile flag to
    write the ID of the committed image to a file
  - Initial support for the new containers.conf configuration
    file has been added. containers.conf allows for much more
    detailed configuration of some Podman functionality

* Changes

  - There has been a major cleanup of the podman info command
    resulting in breaking changes. Many fields have been renamed
    to better suit usage with APIv2
  - All uses of the --timeout flag have been switched to prefer
    the alternative --time. The --timeout flag will continue to
    work, but man pages and --help will use the --time flag
    instead

* Bugfixes

  - Fixed a bug where some volume mounts from the host would
    sometimes not properly determine the flags they should use
    when mounting
  - Fixed a bug where Podman was not propagating $PATH to Conmon
    and the OCI runtime, causing issues for some OCI runtimes
    that required it
  - Fixed a bug where rootless Podman would print error messages
    about missing support for systemd cgroups when run in a
    container with no cgroup support
  - Fixed a bug where podman play kube would not properly handle
    container-only port mappings (#5610)
  - Fixed a bug where the podman container prune command was not
    pruning containers in the created and configured states
  - Fixed a bug where Podman was not properly removing CNI IP
    address allocations after a reboot (#5433)
  - Fixed a bug where Podman was not properly applying the
    default Seccomp profile when --security-opt was not given at
    the command line

* HTTP API

  - Many Libpod API endpoints have been added, including Changes,
    Checkpoint, Init, and Restore
  - Resolved issues where the podman system service command would
    time out and exit while there were still active connections
  - Stability overall has greatly improved as we prepare the API
    for a beta release soon with Podman 2.0

* Misc

  - The default infra image for pods has been upgraded to
    k8s.gcr.io/pause:3.2 (from 3.1) to address a bug in the
    architecture metadata for non-AMD64 images
  - The slirp4netns networking utility in rootless Podman now
    uses Seccomp filtering where available for improved security
  - Updated Buildah to v1.14.8
  - Updated containers/storage to v1.18.2
  - Updated containers/image to v5.4.3
  - Updated containers/common to v0.8.1

- Add 'systemd' BUILDFLAGS to build with support for journald
  logging (bsc#1162432)

Update podman to v1.8.2:

* Features

  - Initial support for automatically updating containers managed
    via Systemd unit files has been merged. This allows
    containers to automatically upgrade if a newer version of
    their image becomes available

* Bugfixes

  - Fixed a bug where unit files generated by podman generate
    systemd --new would not force containers to detach, causing
    the unit to time out when trying to start
  - Fixed a bug where podman system reset could delete important
    system directories if run as rootless on installations
    created by older Podman (#4831)
  - Fixed a bug where image built by podman build would not
    properly set the OS and Architecture they were built with
    (#5503)
  - Fixed a bug where attached podman run with --sig-proxy
    enabled (the default), when built with Go 1.14, would
    repeatedly send signal 23 to the process in the container and
    could generate errors when the container stopped (#5483)
  - Fixed a bug where rootless podman run commands could hang
    when forwarding ports
  - Fixed a bug where rootless Podman would not work when /proc
    was mounted with the hidepid option set
  - Fixed a bug where the podman system service command would use
    large amounts of CPU when --timeout was set to 0 (#5531)

* HTTP API

  - Initial support for Libpod endpoints related to creating and
    operating on image manifest lists has been added
  - The Libpod Healthcheck and Events API endpoints are now
    supported
  - The Swagger endpoint can now handle cases where no Swagger
    documentation has been generated

Update podman to v1.8.1:

* Features

  - Many networking-related flags have been added to podman pod
    create to enable customization of pod networks, including
    --add-host, --dns, --dns-opt, --dns-search, --ip,
    --mac-address, --network, and --no-hosts
  - The podman ps --format=json command now includes the ID of
    the image containers were created with
  - The podman run and podman create commands now feature an
    --rmi flag to remove the image the container was using after
    it exits (if no other containers are using said image)
    ([#4628](https://github.com/containers/libpod/issues/4628))
  - The podman create and podman run commands now support the
    --device-cgroup-rule flag (#4876)
  - While the HTTP API remains in alpha, many fixes and additions
    have landed. These are documented in a separate subsection
    below
  - The podman create and podman run commands now feature a
    --no-healthcheck flag to disable healthchecks for a container
    (#5299)
  - Containers now recognize the io.containers.capabilities
    label, which specifies a list of capabilities required by the
    image to run. These capabilities will be used as long as they
    are more restrictive than the default capabilities used
  - YAML produced by the podman generate kube command now
    includes SELinux configuration passed into the container via
    --security-opt label=... (#4950)

* Bugfixes

  - Fixed CVE-2020-1726, a security issue where volumes manually
    populated before first being mounted into a container could
    have those contents overwritten on first being mounted into a
    container
  - Fixed a bug where Podman containers with user namespaces in
    CNI networks with the DNS plugin enabled would not have the
    DNS plugin's nameserver added to their resolv.conf
    ([#5256](https://github.com/containers/libpod/issues/5256))
  - Fixed a bug where trailing / characters in image volume
    definitions could cause them to not be overridden by a
    user-specified mount at the same location
    ([#5219](https://github.com/containers/libpod/issues/5219))
  - Fixed a bug where the label option in libpod.conf, used to
    disable SELinux by default, was not being respected (#5087)
  - Fixed a bug where the podman login and podman logout commands
    required the registry to log into be specified (#5146)
  - Fixed a bug where detached rootless Podman containers could
    not forward ports (#5167)
  - Fixed a bug where rootless Podman could fail to run if the
    pause process had died
  - Fixed a bug where Podman ignored labels that were specified
    with only a key and no value (#3854)
  - Fixed a bug where Podman would fail to create named volumes
    when the backing filesystem did not support SELinux labelling
    (#5200)
  - Fixed a bug where --detach-keys='' would not disable
    detaching from a container (#5166)
  - Fixed a bug where the podman ps command was too aggressive
    when filtering containers and would force --all on in too
    many situations
  - Fixed a bug where the podman play kube command was ignoring
    image configuration, including volumes, working directory,
    labels, and stop signal (#5174)
  - Fixed a bug where the Created and CreatedTime fields in
    podman images --format=json were misnamed, which also broke
    Go template output for those fields
    ([#5110](https://github.com/containers/libpod/issues/5110))
  - Fixed a bug where rootless Podman containers with ports
    forwarded could hang when started (#5182)
  - Fixed a bug where podman pull could fail to parse registry
    names including port numbers
  - Fixed a bug where Podman would incorrectly attempt to
    validate image OS and architecture when starting containers
  - Fixed a bug where Bash completion for podman build -f would
    not list available files that could be built (#3878)
  - Fixed a bug where podman commit --change would perform
    incorrect validation, resulting in valid changes being
    rejected (#5148)
  - Fixed a bug where podman logs --tail could take large amounts
    of memory when the log file for a container was large (#5131)
  - Fixed a bug where Podman would sometimes incorrectly generate
    firewall rules on systems using firewalld
  - Fixed a bug where the podman inspect command would not
    display network information for containers properly if a
    container joined multiple CNI networks
    ([#4907](https://github.com/containers/libpod/issues/4907))
  - Fixed a bug where the --uts flag to podman create and podman
    run would only allow specifying containers by full ID (#5289)
  - Fixed a bug where rootless Podman could segfault when passed
    a large number of file descriptors
  - Fixed a bug where the podman port command was incorrectly
    interpreting additional arguments as container names, instead
    of port numbers
  - Fixed a bug where units created by podman generate systemd
    did not depend on network targets, and so could start before
    the system network was ready (#4130)
  - Fixed a bug where exec sessions in containers which did not
    specify a user would not inherit supplemental groups added to
    the container via --group-add
  - Fixed a bug where Podman would not respect the $TMPDIR
    environment variable for placing large temporary files during
    some operations (e.g. podman pull)
    ([#5411](https://github.com/containers/libpod/issues/5411))

* HTTP API

  - Initial support for secure connections to servers via SSH
    tunneling has been added
  - Initial support for the libpod create and logs endpoints for
    containers has been added
  - Added a /swagger/ endpoint to serve API documentation
  - The json endpoint for containers has received many fixes
  - Filtering images and containers has been greatly improved,
    with many bugs fixed and documentation improved
  - Image creation endpoints (commit, pull, etc) have seen many
    fixes
  - Server timeout has been fixed so that long operations will no
    longer trigger the timeout and shut the server down
  - The stats endpoint for containers has seen major fixes and
    now provides accurate output
  - Handling the HTTP 304 status code has been fixed for all
    endpoints
  - Many fixes have been made to API documentation to ensure it
    matches the code

* Misc

  - The Created field to podman images --format=json has been
    renamed to CreatedSince as part of the fix for (#5110). Go
    templates using the old name shou ld still work
  - The CreatedTime field to podman images --format=json has been
    renamed to CreatedAt as part of the fix for (#5110). Go
    templates using the old name should still work
  - The before filter to podman images has been renamed to since
    for Docker compatibility. Using before will still work, but
      documentation has been changed to use the new since filter
  - Using the --password flag to podman login now warns that
    passwords are being passed in plaintext
  - Some common cases where Podman would deadlock have been fixed
    to warn the user that podman system renumber must be run to
    resolve the deadlock

- Configure br_netfilter for podman automatically (bsc#1165738)
  The trigger is only excuted when updating podman-cni-config while the
  command was running

conmon was update to v2.0.20 (bsc#1175821)

- journald: fix logging container name
- container logging: Implement none driver - 'off', 'null' or
  'none' all work.
- ctrl: warn if we fail to unlink
- Drop fsync calls
- Reap PIDs before running exit command
- Fix log path parsing
- Add --sync option to prevent conmon from double forking
- Add --no-sync-log option to instruct conmon to not sync the
  logs of the containers upon shutting down. This feature fixes a
  regression where we unconditionally dropped the log sync. It is
  possible the container logs could be corrupted on a sudden
  power-off. If you need container logs to remain in consistent
  state after a sudden shutdown, please update from v2.0.19 to
  v2.0.20

- Update to v2.0.17:

  - Add option to delay execution of exit command

- Update to v2.0.16:

  - tty: flush pending data when fd is ready

- Enable support for journald logging (bsc#1162432)
- Update to v2.0.15:

  - store status while waiting for pid

- Update to v2.0.14:

  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe

- Update to v2.0.12

  - oom: fix potential race between verification steps

- Update to v2.0.11

  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM
  - journal logging: write to /dev/null instead of -1

fuse-overlayfs was updated to 1.1.2 (bsc#1175821):

- fix memory leak when creating whiteout files.
- fix lookup for overflow uid when it is different than the overflow gid.
- use openat2(2) when available.
- accept 'ro' as mount option.
- fix set mtime for a symlink.
- fix some issues reported by static analysis.
- fix potential infinite loop on a short read.
- fix creating a directory if the destination already exists
  in the upper layer.
- report correctly the number of links for a directory also for
  subsequent stat calls
- stop looking up the ino in the lower layers if the file could
  not be opened
- make sure the destination is deleted before doing a rename(2).
  It prevents a left over directory to cause delete to fail with
  EEXIST.
- honor --debug.

libcontainers-common was updated to fix:

- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)
- Added containers/common tarball for containers.conf(5) man page
- Install containers.conf default configuration in
  /usr/share/containers
- libpod repository on github got renamed to podman
- Update to image 5.5.1
  - Add documentation for credHelpera
  - Add defaults for using the rootless policy path
- Update libpod/podman to 2.0.3
  - docs: user namespace can't be shared in pods
  - Switch references from libpod.conf to containers.conf
  - Allow empty host port in --publish flag
  - update document login see config.json as valid
- Update storage to 1.20.2
  - Add back skip_mount_home

- Remove remaining difference between SLE and openSUSE package and
  ship the some mounts.conf default configuration on both platforms.
  As the sources for the mount point do not exist on openSUSE by
  default this config will basically have no effect on openSUSE.
  (jsc#SLE-12122, bsc#1175821) 

- Update to image 5.4.4
  - Remove registries.conf VERSION 2 references from man page
  - Intial authfile man page
  - Add $HOME/.config/containers/certs.d to perHostCertDirPath
  - Add $HOME/.config/containers/registries.conf to config path
  - registries.conf.d: add stances for the registries.conf
- update to libpod 1.9.3
  - userns: support --userns=auto
  - Switch to using --time as opposed to --timeout to better match Docker
  - Add support for specifying CNI networks in podman play kube
  - man pages: fix inconsistencies
- Update to storage 1.19.1
  - userns: add support for auto
  - store: change the default user to containers
  - config: honor XDG_CONFIG_HOME
- Remove the /var/lib/ca-certificates/pem/SUSE.pem workaround again.
  It never ended up in SLES and a different way to fix the underlying
  problem is being worked on.

- Add registry.opensuse.org as default registry [bsc#1171578] 

- Add /var/lib/ca-certificates/pem/SUSE.pem to the SLES mounts.
  This for making container-suseconnect working in the public
  cloud on-demand images. It needs that file for being able to
  verify the server certificates of the RMT servers hosted
  in the public cloud.
  (https://github.com/SUSE/container-suseconnect/issues/41)
  

      		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-24"/>
	<updated date="2020-09-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162432">SUSE bug 1162432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164090">SUSE bug 1164090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165738">SUSE bug 1165738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171578">SUSE bug 1171578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174075">SUSE bug 1174075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175821">SUSE bug 1175821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175957">SUSE bug 1175957</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-1726/">CVE-2020-1726</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492554" comment="libcontainers-common-20200727-3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137923" version="1" class="patch">
	<metadata>
		<title>Security update for libqt5-qtbase (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172515" ref_url="https://bugzilla.suse.com/1172515" source="BUGZILLA"/>
		<reference ref_id="1176315" ref_url="https://bugzilla.suse.com/1176315" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-17507" ref_url="https://www.suse.com/security/cve/CVE-2020-17507/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007478.html" source="SUSE-SU"/>
		<description>
This update for libqt5-qtbase fixes the following issues:

- CVE-2020-17507: Fixed a buffer overflow in XBM parser (bsc#1176315)
- Made handling of XDG_RUNTIME_DIR more secure (bsc#1172515)	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-24"/>
	<updated date="2020-09-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172515">SUSE bug 1172515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176315">SUSE bug 1176315</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-17507/">CVE-2020-17507</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492555" comment="libQt5Concurrent-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492556" comment="libQt5Concurrent5-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492557" comment="libQt5Core-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492558" comment="libQt5Core-private-headers-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492559" comment="libQt5Core5-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492560" comment="libQt5DBus-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492561" comment="libQt5DBus-private-headers-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492562" comment="libQt5DBus5-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492563" comment="libQt5Gui-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492564" comment="libQt5Gui-private-headers-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492565" comment="libQt5Gui5-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492566" comment="libQt5KmsSupport-devel-static-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492567" comment="libQt5KmsSupport-private-headers-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492568" comment="libQt5Network-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492569" comment="libQt5Network-private-headers-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492570" comment="libQt5Network5-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492571" comment="libQt5OpenGL-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492572" comment="libQt5OpenGL-private-headers-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492573" comment="libQt5OpenGL5-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492574" comment="libQt5PlatformHeaders-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492575" comment="libQt5PlatformSupport-devel-static-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492576" comment="libQt5PlatformSupport-private-headers-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492577" comment="libQt5PrintSupport-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492578" comment="libQt5PrintSupport-private-headers-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492579" comment="libQt5PrintSupport5-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492580" comment="libQt5Sql-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492581" comment="libQt5Sql-private-headers-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492582" comment="libQt5Sql5-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492583" comment="libQt5Sql5-sqlite-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492584" comment="libQt5Test-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492585" comment="libQt5Test-private-headers-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492586" comment="libQt5Test5-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492587" comment="libQt5Widgets-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492588" comment="libQt5Widgets-private-headers-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492589" comment="libQt5Widgets5-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492590" comment="libQt5Xml-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492591" comment="libQt5Xml5-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492592" comment="libqt5-qtbase-common-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492593" comment="libqt5-qtbase-devel-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492594" comment="libqt5-qtbase-private-headers-devel-5.9.7-13.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137924" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1146608" ref_url="https://bugzilla.suse.com/1146608" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14973" ref_url="https://www.suse.com/security/cve/CVE-2019-14973/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007480.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2019-14973: Fixed an improper check which was depended on the compiler
  which could have led to integer overflow (bsc#1146608).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-24"/>
	<updated date="2020-09-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1146608">SUSE bug 1146608</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14973/">CVE-2019-14973</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492595" comment="libtiff-devel-4.0.9-5.30.28 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492596" comment="libtiff5-4.0.9-5.30.28 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137925" version="1" class="patch">
	<metadata>
		<title>Security update for python-pip (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007496.html" source="SUSE-SU"/>
		<description>
This update for python-pip fixes the following issues:

- CVE-2019-20916: Fixed a directory traversal in _download_http_url (bsc#1176262)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-29"/>
	<updated date="2020-09-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492597" comment="python3-pip-10.0.1-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137926" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1176339" ref_url="https://bugzilla.suse.com/1176339" source="BUGZILLA"/>
		<reference ref_id="1176341" ref_url="https://bugzilla.suse.com/1176341" source="BUGZILLA"/>
		<reference ref_id="1176343" ref_url="https://bugzilla.suse.com/1176343" source="BUGZILLA"/>
		<reference ref_id="1176344" ref_url="https://bugzilla.suse.com/1176344" source="BUGZILLA"/>
		<reference ref_id="1176345" ref_url="https://bugzilla.suse.com/1176345" source="BUGZILLA"/>
		<reference ref_id="1176346" ref_url="https://bugzilla.suse.com/1176346" source="BUGZILLA"/>
		<reference ref_id="1176347" ref_url="https://bugzilla.suse.com/1176347" source="BUGZILLA"/>
		<reference ref_id="1176348" ref_url="https://bugzilla.suse.com/1176348" source="BUGZILLA"/>
		<reference ref_id="1176349" ref_url="https://bugzilla.suse.com/1176349" source="BUGZILLA"/>
		<reference ref_id="1176350" ref_url="https://bugzilla.suse.com/1176350" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25595" ref_url="https://www.suse.com/security/cve/CVE-2020-25595/" source="CVE"/>
		<reference ref_id="CVE-2020-25596" ref_url="https://www.suse.com/security/cve/CVE-2020-25596/" source="CVE"/>
		<reference ref_id="CVE-2020-25597" ref_url="https://www.suse.com/security/cve/CVE-2020-25597/" source="CVE"/>
		<reference ref_id="CVE-2020-25598" ref_url="https://www.suse.com/security/cve/CVE-2020-25598/" source="CVE"/>
		<reference ref_id="CVE-2020-25599" ref_url="https://www.suse.com/security/cve/CVE-2020-25599/" source="CVE"/>
		<reference ref_id="CVE-2020-25600" ref_url="https://www.suse.com/security/cve/CVE-2020-25600/" source="CVE"/>
		<reference ref_id="CVE-2020-25601" ref_url="https://www.suse.com/security/cve/CVE-2020-25601/" source="CVE"/>
		<reference ref_id="CVE-2020-25602" ref_url="https://www.suse.com/security/cve/CVE-2020-25602/" source="CVE"/>
		<reference ref_id="CVE-2020-25603" ref_url="https://www.suse.com/security/cve/CVE-2020-25603/" source="CVE"/>
		<reference ref_id="CVE-2020-25604" ref_url="https://www.suse.com/security/cve/CVE-2020-25604/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007503.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2020-25602: Fixed an issue where there was a crash when
  handling guest access to MSR_MISC_ENABLE was thrown (bsc#1176339,XSA-333)
- CVE-2020-25598: Added a missing unlock in XENMEM_acquire_resource error path
  (bsc#1176341,XSA-334)
- CVE-2020-25604: Fixed a race condition when migrating timers between x86 
  HVM vCPU-s (bsc#1176343,XSA-336)
- CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337)
- CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338)
- CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339)
- CVE-2020-25603: Fixed an issue due to  missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340)
- CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342)
- CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343)
- CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)	  

- Various bug fixes (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-29"/>
	<updated date="2020-09-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176339">SUSE bug 1176339</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176341">SUSE bug 1176341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176343">SUSE bug 1176343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176344">SUSE bug 1176344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176345">SUSE bug 1176345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176346">SUSE bug 1176346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176347">SUSE bug 1176347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176348">SUSE bug 1176348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176349">SUSE bug 1176349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176350">SUSE bug 1176350</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25595/">CVE-2020-25595</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25596/">CVE-2020-25596</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25597/">CVE-2020-25597</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25598/">CVE-2020-25598</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25599/">CVE-2020-25599</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25600/">CVE-2020-25600</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25601/">CVE-2020-25601</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25602/">CVE-2020-25602</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25603/">CVE-2020-25603</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25604/">CVE-2020-25604</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492598" comment="xen-libs-4.12.3_08-3.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492599" comment="xen-tools-domU-4.12.3_08-3.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137927" version="1" class="patch">
	<metadata>
		<title>Security update for bcm43xx-firmware (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176631" ref_url="https://bugzilla.suse.com/1176631" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:2792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007500.html" source="SUSE-SU"/>
		<description>
This update for bcm43xx-firmware fixes the following issues:

- Update bluetooth firmware to address Sweyntooth and Spectra issues (bsc#1176631):
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-29"/>
	<updated date="2020-09-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1176631">SUSE bug 1176631</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492600" comment="bcm43xx-firmware-20180314-8.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137928" version="1" class="patch">
	<metadata>
		<title>Security update for perl-DBI (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176764" ref_url="https://bugzilla.suse.com/1176764" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20919" ref_url="https://www.suse.com/security/cve/CVE-2019-20919/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007516.html" source="SUSE-SU"/>
		<description>
This update for perl-DBI fixes the following issues:

- CVE-2019-20919: Fixed a NULL profile dereference in dbi_profile (bsc#1176764).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-02"/>
	<updated date="2020-10-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176764">SUSE bug 1176764</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20919/">CVE-2019-20919</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492601" comment="perl-DBI-1.639-3.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137929" version="1" class="patch">
	<metadata>
		<title>Security update for permissions (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1161335" ref_url="https://bugzilla.suse.com/1161335" source="BUGZILLA"/>
		<reference ref_id="1176625" ref_url="https://bugzilla.suse.com/1176625" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:2830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007513.html" source="SUSE-SU"/>
		<description>
This update for permissions fixes the following issues:

- whitelist WMP (bsc#1161335, bsc#1176625)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-02"/>
	<updated date="2020-10-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1161335">SUSE bug 1161335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176625">SUSE bug 1176625</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492602" comment="permissions-20181116-9.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492603" comment="permissions-zypp-plugin-20181116-9.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137930" version="1" class="patch">
	<metadata>
		<title>Security update for tigervnc (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176733" ref_url="https://bugzilla.suse.com/1176733" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26117" ref_url="https://www.suse.com/security/cve/CVE-2020-26117/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007537.html" source="SUSE-SU"/>
		<description>
This update for tigervnc fixes the following issues:

- CVE-2020-26117: Server certificates were stored as certiticate
  authorities, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (bsc#1176733)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-09"/>
	<updated date="2020-10-09"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1176733">SUSE bug 1176733</bugzilla>
	<cve impact="critical" cvss3="9.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26117/">CVE-2020-26117</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492604" comment="libXvnc1-1.9.0-19.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492605" comment="tigervnc-1.9.0-19.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492606" comment="xorg-x11-Xvnc-1.9.0-19.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492607" comment="xorg-x11-Xvnc-module-1.9.0-19.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492608" comment="xorg-x11-Xvnc-novnc-1.9.0-19.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137931" version="1" class="patch">
	<metadata>
		<title>Security update for libproxy (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176410" ref_url="https://bugzilla.suse.com/1176410" source="BUGZILLA"/>
		<reference ref_id="1177143" ref_url="https://bugzilla.suse.com/1177143" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25219" ref_url="https://www.suse.com/security/cve/CVE-2020-25219/" source="CVE"/>
		<reference ref_id="CVE-2020-26154" ref_url="https://www.suse.com/security/cve/CVE-2020-26154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007540.html" source="SUSE-SU"/>
		<description>
This update for libproxy fixes the following issues:

- CVE-2020-25219: Rewrote url::recvline to be nonrecursive (bsc#1176410).
- CVE-2020-26154: Fixed a buffer overflow when PAC is enabled (bsc#1177143).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-13"/>
	<updated date="2020-10-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176410">SUSE bug 1176410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177143">SUSE bug 1177143</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25219/">CVE-2020-25219</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26154/">CVE-2020-26154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492609" comment="libproxy-devel-0.4.15-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492610" comment="libproxy1-0.4.15-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137932" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1094244" ref_url="https://bugzilla.suse.com/1094244" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1154366" ref_url="https://bugzilla.suse.com/1154366" source="BUGZILLA"/>
		<reference ref_id="1167527" ref_url="https://bugzilla.suse.com/1167527" source="BUGZILLA"/>
		<reference ref_id="1168468" ref_url="https://bugzilla.suse.com/1168468" source="BUGZILLA"/>
		<reference ref_id="1169972" ref_url="https://bugzilla.suse.com/1169972" source="BUGZILLA"/>
		<reference ref_id="1171675" ref_url="https://bugzilla.suse.com/1171675" source="BUGZILLA"/>
		<reference ref_id="1171688" ref_url="https://bugzilla.suse.com/1171688" source="BUGZILLA"/>
		<reference ref_id="1171742" ref_url="https://bugzilla.suse.com/1171742" source="BUGZILLA"/>
		<reference ref_id="1173115" ref_url="https://bugzilla.suse.com/1173115" source="BUGZILLA"/>
		<reference ref_id="1174899" ref_url="https://bugzilla.suse.com/1174899" source="BUGZILLA"/>
		<reference ref_id="1175228" ref_url="https://bugzilla.suse.com/1175228" source="BUGZILLA"/>
		<reference ref_id="1175749" ref_url="https://bugzilla.suse.com/1175749" source="BUGZILLA"/>
		<reference ref_id="1175882" ref_url="https://bugzilla.suse.com/1175882" source="BUGZILLA"/>
		<reference ref_id="1176011" ref_url="https://bugzilla.suse.com/1176011" source="BUGZILLA"/>
		<reference ref_id="1176022" ref_url="https://bugzilla.suse.com/1176022" source="BUGZILLA"/>
		<reference ref_id="1176038" ref_url="https://bugzilla.suse.com/1176038" source="BUGZILLA"/>
		<reference ref_id="1176235" ref_url="https://bugzilla.suse.com/1176235" source="BUGZILLA"/>
		<reference ref_id="1176242" ref_url="https://bugzilla.suse.com/1176242" source="BUGZILLA"/>
		<reference ref_id="1176278" ref_url="https://bugzilla.suse.com/1176278" source="BUGZILLA"/>
		<reference ref_id="1176316" ref_url="https://bugzilla.suse.com/1176316" source="BUGZILLA"/>
		<reference ref_id="1176317" ref_url="https://bugzilla.suse.com/1176317" source="BUGZILLA"/>
		<reference ref_id="1176318" ref_url="https://bugzilla.suse.com/1176318" source="BUGZILLA"/>
		<reference ref_id="1176319" ref_url="https://bugzilla.suse.com/1176319" source="BUGZILLA"/>
		<reference ref_id="1176320" ref_url="https://bugzilla.suse.com/1176320" source="BUGZILLA"/>
		<reference ref_id="1176321" ref_url="https://bugzilla.suse.com/1176321" source="BUGZILLA"/>
		<reference ref_id="1176381" ref_url="https://bugzilla.suse.com/1176381" source="BUGZILLA"/>
		<reference ref_id="1176395" ref_url="https://bugzilla.suse.com/1176395" source="BUGZILLA"/>
		<reference ref_id="1176410" ref_url="https://bugzilla.suse.com/1176410" source="BUGZILLA"/>
		<reference ref_id="1176423" ref_url="https://bugzilla.suse.com/1176423" source="BUGZILLA"/>
		<reference ref_id="1176482" ref_url="https://bugzilla.suse.com/1176482" source="BUGZILLA"/>
		<reference ref_id="1176507" ref_url="https://bugzilla.suse.com/1176507" source="BUGZILLA"/>
		<reference ref_id="1176536" ref_url="https://bugzilla.suse.com/1176536" source="BUGZILLA"/>
		<reference ref_id="1176544" ref_url="https://bugzilla.suse.com/1176544" source="BUGZILLA"/>
		<reference ref_id="1176545" ref_url="https://bugzilla.suse.com/1176545" source="BUGZILLA"/>
		<reference ref_id="1176546" ref_url="https://bugzilla.suse.com/1176546" source="BUGZILLA"/>
		<reference ref_id="1176548" ref_url="https://bugzilla.suse.com/1176548" source="BUGZILLA"/>
		<reference ref_id="1176659" ref_url="https://bugzilla.suse.com/1176659" source="BUGZILLA"/>
		<reference ref_id="1176698" ref_url="https://bugzilla.suse.com/1176698" source="BUGZILLA"/>
		<reference ref_id="1176699" ref_url="https://bugzilla.suse.com/1176699" source="BUGZILLA"/>
		<reference ref_id="1176700" ref_url="https://bugzilla.suse.com/1176700" source="BUGZILLA"/>
		<reference ref_id="1176721" ref_url="https://bugzilla.suse.com/1176721" source="BUGZILLA"/>
		<reference ref_id="1176722" ref_url="https://bugzilla.suse.com/1176722" source="BUGZILLA"/>
		<reference ref_id="1176725" ref_url="https://bugzilla.suse.com/1176725" source="BUGZILLA"/>
		<reference ref_id="1176732" ref_url="https://bugzilla.suse.com/1176732" source="BUGZILLA"/>
		<reference ref_id="1176788" ref_url="https://bugzilla.suse.com/1176788" source="BUGZILLA"/>
		<reference ref_id="1176789" ref_url="https://bugzilla.suse.com/1176789" source="BUGZILLA"/>
		<reference ref_id="1176869" ref_url="https://bugzilla.suse.com/1176869" source="BUGZILLA"/>
		<reference ref_id="1176877" ref_url="https://bugzilla.suse.com/1176877" source="BUGZILLA"/>
		<reference ref_id="1176935" ref_url="https://bugzilla.suse.com/1176935" source="BUGZILLA"/>
		<reference ref_id="1176950" ref_url="https://bugzilla.suse.com/1176950" source="BUGZILLA"/>
		<reference ref_id="1176962" ref_url="https://bugzilla.suse.com/1176962" source="BUGZILLA"/>
		<reference ref_id="1176966" ref_url="https://bugzilla.suse.com/1176966" source="BUGZILLA"/>
		<reference ref_id="1176990" ref_url="https://bugzilla.suse.com/1176990" source="BUGZILLA"/>
		<reference ref_id="1177027" ref_url="https://bugzilla.suse.com/1177027" source="BUGZILLA"/>
		<reference ref_id="1177030" ref_url="https://bugzilla.suse.com/1177030" source="BUGZILLA"/>
		<reference ref_id="1177041" ref_url="https://bugzilla.suse.com/1177041" source="BUGZILLA"/>
		<reference ref_id="1177042" ref_url="https://bugzilla.suse.com/1177042" source="BUGZILLA"/>
		<reference ref_id="1177043" ref_url="https://bugzilla.suse.com/1177043" source="BUGZILLA"/>
		<reference ref_id="1177044" ref_url="https://bugzilla.suse.com/1177044" source="BUGZILLA"/>
		<reference ref_id="1177121" ref_url="https://bugzilla.suse.com/1177121" source="BUGZILLA"/>
		<reference ref_id="1177206" ref_url="https://bugzilla.suse.com/1177206" source="BUGZILLA"/>
		<reference ref_id="1177258" ref_url="https://bugzilla.suse.com/1177258" source="BUGZILLA"/>
		<reference ref_id="1177291" ref_url="https://bugzilla.suse.com/1177291" source="BUGZILLA"/>
		<reference ref_id="1177293" ref_url="https://bugzilla.suse.com/1177293" source="BUGZILLA"/>
		<reference ref_id="1177294" ref_url="https://bugzilla.suse.com/1177294" source="BUGZILLA"/>
		<reference ref_id="1177295" ref_url="https://bugzilla.suse.com/1177295" source="BUGZILLA"/>
		<reference ref_id="1177296" ref_url="https://bugzilla.suse.com/1177296" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0404" ref_url="https://www.suse.com/security/cve/CVE-2020-0404/" source="CVE"/>
		<reference ref_id="CVE-2020-0427" ref_url="https://www.suse.com/security/cve/CVE-2020-0427/" source="CVE"/>
		<reference ref_id="CVE-2020-0431" ref_url="https://www.suse.com/security/cve/CVE-2020-0431/" source="CVE"/>
		<reference ref_id="CVE-2020-0432" ref_url="https://www.suse.com/security/cve/CVE-2020-0432/" source="CVE"/>
		<reference ref_id="CVE-2020-14381" ref_url="https://www.suse.com/security/cve/CVE-2020-14381/" source="CVE"/>
		<reference ref_id="CVE-2020-14390" ref_url="https://www.suse.com/security/cve/CVE-2020-14390/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="CVE-2020-25284" ref_url="https://www.suse.com/security/cve/CVE-2020-25284/" source="CVE"/>
		<reference ref_id="CVE-2020-25641" ref_url="https://www.suse.com/security/cve/CVE-2020-25641/" source="CVE"/>
		<reference ref_id="CVE-2020-25643" ref_url="https://www.suse.com/security/cve/CVE-2020-25643/" source="CVE"/>
		<reference ref_id="CVE-2020-26088" ref_url="https://www.suse.com/security/cve/CVE-2020-26088/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007545.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-26088: Fixed an improper CAP_NET_RAW check in NFC socket creation could have been used by local attackers to create raw sockets, bypassing security mechanisms (bsc#1176990).
- CVE-2020-14390: Fixed an out-of-bounds memory write leading to memory corruption or a denial of service when changing screen size (bnc#1176235).
- CVE-2020-0432: Fixed an out of bounds write due to an integer overflow (bsc#1176721).
- CVE-2020-0427: Fixed an out of bounds read due to a use after free (bsc#1176725).
- CVE-2020-0431: Fixed an out of bounds write due to a missing bounds check (bsc#1176722).
- CVE-2020-0404: Fixed a linked list corruption due to an unusual root cause (bsc#1176423).
- CVE-2020-25212: Fixed getxattr kernel panic and memory overflow (bsc#1176381).
- CVE-2020-25284: Fixed an incomplete permission checking for access to rbd devices, which could have been leveraged by local attackers to map or unmap rbd block devices (bsc#1176482).
- CVE-2020-14381: Fixed requeue paths such that filp was valid when dropping the references (bsc#1176011).
- CVE-2019-25643: Fixed an improper input validation in ppp_cp_parse_cr function which could have led to memory corruption and read overflow (bsc#1177206).
- CVE-2020-25641: Fixed ann issue where length bvec was causing softlockups (bsc#1177121).

The following non-security bugs were fixed:

- 9p: Fix memory leak in v9fs_mount (git-fixes).
- ACPI: EC: Reference count query handlers under lock (git-fixes).
- airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE (git-fixes).
- airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE (git-fixes).
- airo: Fix read overflows sending packets (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- ALSA: firewire-digi00x: exclude Avid Adrenaline from detection (git-fixes).
- ALSA; firewire-tascam: exclude Tascam FE-8 from detection (git-fixes).
- ALSA: hda: Fix 2 channel swapping for Tegra (git-fixes).
- ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion NT950XCJ-X716A (git-fixes).
- ALSA: hda/realtek - Improved routing for Thinkpad X1 7th/8th Gen (git-fixes).
- altera-stapl: altera_get_note: prevent write beyond end of 'key' (git-fixes).
- ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter (git-fixes).
- arm64: KVM: Do not generate UNDEF when LORegion feature is present (jsc#SLE-4084).
- arm64: KVM: regmap: Fix unexpected switch fall-through (jsc#SLE-4084).
- asm-generic: fix -Wtype-limits compiler warnings (bsc#1112178).
- ASoC: kirkwood: fix IRQ error handling (git-fixes).
- ASoC: tegra: Fix reference count leaks (git-fixes).
- ath10k: fix array out-of-bounds access (git-fixes).
- ath10k: fix memory leak for tpc_stats_final (git-fixes).
- ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read (git-fixes).
- batman-adv: Add missing include for in_interrupt() (git-fixes).
- batman-adv: Avoid uninitialized chaddr when handling DHCP (git-fixes).
- batman-adv: bla: fix type misuse for backbone_gw hash indexing (git-fixes).
- batman-adv: bla: use netif_rx_ni when not in interrupt context (git-fixes).
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh (git-fixes).
- batman-adv: mcast/TT: fix wrongly dropped or rerouted packets (git-fixes).
- bcache: Convert pr_&lt;level&gt; uses to a more typical style (git fixes (block drivers)).
- bcache: fix overflow in offset_to_stripe() (git fixes (block drivers)).
- bcm63xx_enet: correct clock usage (git-fixes).
- bcm63xx_enet: do not write to random DMA channel on BCM6345 (git-fixes).
- bitfield.h: do not compile-time validate _val in FIELD_FIT (git fixes (bitfield)).
- blktrace: fix debugfs use after free (git fixes (block drivers)).
- block: add docs for gendisk / request_queue refcount helpers (git fixes (block drivers)).
- block: revert back to synchronous request_queue removal (git fixes (block drivers)).
- block: Use non _rcu version of list functions for tag_set_list (git-fixes).
- Bluetooth: Fix refcount use-after-free issue (git-fixes).
- Bluetooth: guard against controllers sending zero'd events (git-fixes).
- Bluetooth: Handle Inquiry Cancel error after Inquiry Complete (git-fixes).
- Bluetooth: L2CAP: handle l2cap config request during open state (git-fixes).
- Bluetooth: prefetch channel before killing sock (git-fixes).
- bnxt_en: Fix completion ring sizing with TPA enabled (networking-stable-20_07_29).
- bonding: use nla_get_u64 to extract the value for IFLA_BOND_AD_ACTOR_SYSTEM (git-fixes).
- btrfs: require only sector size alignment for parent eb bytenr (bsc#1176789).
- btrfs: tree-checker: fix the error message for transid error (bsc#1176788).
- ceph: do not allow setlease on cephfs (bsc#1177041).
- ceph: fix potential mdsc use-after-free crash (bsc#1177042).
- ceph: fix use-after-free for fsc-&gt;mdsc (bsc#1177043).
- ceph: handle zero-length feature mask in session messages (bsc#1177044).
- cfg80211: regulatory: reject invalid hints (bsc#1176699).
- cifs: Fix leak when handling lease break for cached root fid (bsc#1176242).
- cifs/smb3: Fix data inconsistent when punch hole (bsc#1176544).
- cifs/smb3: Fix data inconsistent when zero file range (bsc#1176536).
- clk: Add (devm_)clk_get_optional() functions (git-fixes).
- clk: rockchip: Fix initialization of mux_pll_src_4plls_p (git-fixes).
- clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED (git-fixes).
- clk/ti/adpll: allocate room for terminating null (git-fixes).
- clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() (git-fixes).
- cpufreq: intel_pstate: Fix EPP setting via sysfs in active mode (bsc#1176966).
- dmaengine: at_hdmac: check return value of of_find_device_by_node() in at_dma_xlate() (git-fixes).
- dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling (git-fixes).
- dmaengine: pl330: Fix burst length if burst size is smaller than bus width (git-fixes).
- dmaengine: tegra-apb: Prevent race conditions on channel's freeing (git-fixes).
- dmaengine: zynqmp_dma: fix burst length configuration (git-fixes).
- dm crypt: avoid truncating the logical block size (git fixes (block drivers)).
- dm: fix redundant IO accounting for bios that need splitting (git fixes (block drivers)).
- dm integrity: fix a deadlock due to offloading to an incorrect workqueue (git fixes (block drivers)).
- dm integrity: fix integrity recalculation that is improperly skipped (git fixes (block drivers)).
- dm: report suspended device during destroy (git fixes (block drivers)).
- dm rq: do not call blk_mq_queue_stopped() in dm_stop_queue() (git fixes (block drivers)).
- dm: use noio when sending kobject event (git fixes (block drivers)).
- dm writecache: add cond_resched to loop in persistent_memory_claim() (git fixes (block drivers)).
- dm writecache: correct uncommitted_block when discarding uncommitted entry (git fixes (block drivers)).
- dm zoned: assign max_io_len correctly (git fixes (block drivers)).
- drivers: char: tlclk.c: Avoid data race between init and interrupt handler (git-fixes).
- Drivers: hv: Specify receive buffer size using Hyper-V page size (bsc#1176877).
- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload (git-fixes).
- drivers/net/wan/x25_asy: Fix to make it work (networking-stable-20_07_29).
- drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic (git-fixes).
- drm/amd/display: fix ref count leak in amdgpu_drm_ioctl (git-fixes).
- drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails (git-fixes).
- drm/amdgpu: Fix buffer overflow in INFO ioctl (git-fixes).
- drm/amdgpu: Fix bug in reporting voltage for CIK (git-fixes).
- drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms (git-fixes).
- drm/amdgpu: increase atombios cmd timeout (git-fixes).
- drm/amdgpu/powerplay: fix AVFS handling with custom powerplay table (git-fixes).
- drm/amdgpu/powerplay/smu7: fix AVFS handling with custom powerplay table (git-fixes).
- drm/amdkfd: fix a memory leak issue (git-fixes).
- drm/amdkfd: Fix reference count leaks (git-fixes).
- drm/amd/pm: correct Vega10 swctf limit setting (git-fixes).
- drm/amd/pm: correct Vega12 swctf limit setting (git-fixes).
- drm/ast: Initialize DRAM type before posting GPU (bsc#1113956) 	* context changes
- drm/mediatek: Add exception handing in mtk_drm_probe() if component init fail (git-fixes).
- drm/mediatek: Add missing put_device() call in mtk_hdmi_dt_parse_pdata() (git-fixes).
- drm/msm/a5xx: Always set an OPP supported hardware value (git-fixes).
- drm/msm: add shutdown support for display platform_driver (git-fixes).
- drm/msm: Disable preemption on all 5xx targets (git-fixes).
- drm/msm: fix leaks if initialization fails (git-fixes).
- drm/msm/gpu: make ringbuffer readonly (bsc#1112178) 	* context changes
- drm/nouveau/debugfs: fix runtime pm imbalance on error (git-fixes).
- drm/nouveau/dispnv50: fix runtime pm imbalance on error (git-fixes).
- drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open (git-fixes).
- drm/nouveau: Fix reference count leak in nouveau_connector_detect (git-fixes).
- drm/nouveau: fix reference count leak in nv50_disp_atomic_commit (git-fixes).
- drm/nouveau: fix runtime pm imbalance on error (git-fixes).
- drm/omap: fix possible object reference leak (git-fixes).
- drm/radeon: fix multiple reference count leak (git-fixes).
- drm/radeon: Prefer lower feedback dividers (git-fixes).
- drm/radeon: revert 'Prefer lower feedback dividers' (git-fixes).
- drm/sun4i: Fix dsi dcs long write function (git-fixes).
- drm/sun4i: sun8i-csc: Secondary CSC register correction (git-fixes).
- drm/tve200: Stabilize enable/disable (git-fixes).
- drm/vc4/vc4_hdmi: fill ASoC card owner (git-fixes).
- e1000: Do not perform reset in reset_task if we are already down (git-fixes).
- EDAC: Fix reference count leaks (bsc#1112178).
- fbcon: prevent user font height or width change from causing (bsc#1112178) 	
- Fix error in kabi fix for: NFSv4: Fix OPEN / CLOSE race (bsc#1176950).
- ftrace: Move RCU is watching check after recursion check (git-fixes).
- ftrace: Setup correct FTRACE_FL_REGS flags for module (git-fixes).
- gma/gma500: fix a memory disclosure bug due to uninitialized bytes (git-fixes).
- gpio: tc35894: fix up tc35894 interrupt configuration (git-fixes).
- gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable() (git-fixes).
- gtp: fix Illegal context switch in RCU read-side critical section (git-fixes).
- gtp: fix use-after-free in gtp_newlink() (git-fixes).
- Hide e21a4f3a930c as of its duplication
- HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage() (git-fixes).
- hsr: use netdev_err() instead of WARN_ONCE() (bsc#1176659).
- hv_utils: drain the timesync packets on onchannelcallback (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale (bsc#1176877).
- hwmon: (applesmc) check status earlier (git-fixes).
- i2c: core: Do not fail PRP0001 enumeration when no ID table exist (git-fixes).
- i2c: cpm: Fix i2c_ram structure (git-fixes).
- ibmvnic: add missing parenthesis in do_reset() (bsc#1176700 ltc#188140).
- ieee802154/adf7242: check status of adf7242_read_reg (git-fixes).
- ieee802154: fix one possible memleak in ca8210_dev_com_init (git-fixes).
- iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak (git-fixes).
- iio: accel: kxsd9: Fix alignment of local buffer (git-fixes).
- iio:accel:mma7455: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:adc:ina2xx Fix timestamp alignment issue (git-fixes).
- iio: adc: mcp3422: fix locking on error path (git-fixes).
- iio: adc: mcp3422: fix locking scope (git-fixes).
- iio:adc:ti-adc081c Fix alignment and data leak issues (git-fixes).
- iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set (git-fixes).
- iio: improve IIO_CONCENTRATION channel type description (git-fixes).
- iio:light:ltr501 Fix timestamp alignment issue (git-fixes).
- iio:light:max44000 Fix timestamp alignment and prevent data leak (git-fixes).
- iio:magnetometer:ak8975 Fix alignment and data leak issues (git-fixes).
- include: add additional sizes (bsc#1094244 ltc#168122).
- iommu/amd: Fix IOMMU AVIC not properly update the is_run bit in IRTE (bsc#1177293).
- iommu/amd: Fix potential @entry null deref (bsc#1177294).
- iommu/amd: Print extended features in one line to fix divergent log levels (bsc#1176316).
- iommu/amd: Re-factor guest virtual APIC (de-)activation code (bsc#1177291).
- iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (bsc#1176317).
- iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (bsc#1177295).
- iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (bsc#1176318).
- iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate() (bsc#1177296).
- iommu/omap: Check for failure of a call to omap_iommu_dump_ctx (bsc#1176319).
- iommu/vt-d: Serialize IOMMU GCMD register modifications (bsc#1176320).
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
- KVM: arm64: Change 32-bit handling of VM system registers (jsc#SLE-4084).
- KVM: arm64: Cleanup __activate_traps and __deactive_traps for VHE and non-VHE (jsc#SLE-4084).
- KVM: arm64: Configure c15, PMU, and debug register traps on cpu load/put for VHE (jsc#SLE-4084).
- KVM: arm64: Defer saving/restoring 32-bit sysregs to vcpu load/put (jsc#SLE-4084).
- KVM: arm64: Defer saving/restoring 64-bit sysregs to vcpu load/put on VHE (jsc#SLE-4084).
- KVM: arm64: Directly call VHE and non-VHE FPSIMD enabled functions (jsc#SLE-4084).
- KVM: arm64: Do not deactivate VM on VHE systems (jsc#SLE-4084).
- KVM: arm64: Do not save the host ELR_EL2 and SPSR_EL2 on VHE systems (jsc#SLE-4084).
- KVM: arm64: Factor out fault info population and gic workarounds (jsc#SLE-4084).
- KVM: arm64: Fix order of vcpu_write_sys_reg() arguments (jsc#SLE-4084).
- KVM: arm64: Forbid kprobing of the VHE world-switch code (jsc#SLE-4084).
- KVM: arm64: Improve debug register save/restore flow (jsc#SLE-4084).
- KVM: arm64: Introduce framework for accessing deferred sysregs (jsc#SLE-4084).
- KVM: arm64: Introduce separate VHE/non-VHE sysreg save/restore functions (jsc#SLE-4084).
- KVM: arm64: Introduce VHE-specific kvm_vcpu_run (jsc#SLE-4084).
- KVM: arm64: Move common VHE/non-VHE trap config in separate functions (jsc#SLE-4084).
- KVM: arm64: Move debug dirty flag calculation out of world switch (jsc#SLE-4084).
- KVM: arm64: Move HCR_INT_OVERRIDE to default HCR_EL2 guest flag (jsc#SLE-4084).
- KVM: arm64: Move userspace system registers into separate function (jsc#SLE-4084).
- KVM: arm64: Prepare to handle deferred save/restore of 32-bit registers (jsc#SLE-4084).
- KVM: arm64: Prepare to handle deferred save/restore of ELR_EL1 (jsc#SLE-4084).
- KVM: arm64: Remove kern_hyp_va() use in VHE switch function (jsc#SLE-4084).
- KVM: arm64: Remove noop calls to timer save/restore from VHE switch (jsc#SLE-4084).
- KVM: arm64: Rework hyp_panic for VHE and non-VHE (jsc#SLE-4084).
- KVM: arm64: Rewrite sysreg alternatives to static keys (jsc#SLE-4084).
- KVM: arm64: Rewrite system register accessors to read/write functions (jsc#SLE-4084).
- KVM: arm64: Slightly improve debug save/restore functions (jsc#SLE-4084).
- KVM: arm64: Unify non-VHE host/guest sysreg save and restore functions (jsc#SLE-4084).
- KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE (jsc#SLE-4084).
- KVM: arm/arm64: Avoid vcpu_load for other vcpu ioctls than KVM_RUN (jsc#SLE-4084).
- KVM: arm/arm64: Avoid VGICv3 save/restore on VHE with no IRQs (jsc#SLE-4084).
- KVM: arm/arm64: Get rid of vcpu-&gt;arch.irq_lines (jsc#SLE-4084).
- KVM: arm/arm64: Handle VGICv3 save/restore from the main VGIC code on VHE (jsc#SLE-4084).
- KVM: arm/arm64: Move vcpu_load call after kvm_vcpu_first_run_init (jsc#SLE-4084).
- KVM: arm/arm64: Move VGIC APR save/restore to vgic put/load (jsc#SLE-4084).
- KVM: arm/arm64: Prepare to handle deferred save/restore of SPSR_EL1 (jsc#SLE-4084).
- KVM: arm/arm64: Remove leftover comment from kvm_vcpu_run_vhe (jsc#SLE-4084).
- KVM: introduce kvm_arch_vcpu_async_ioctl (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_fpu (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_mpstate (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_regs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_run (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_fpu (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_guest_debug (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_mpstate (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_regs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_sregs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_translate (jsc#SLE-4084).
- KVM: PPC: Fix compile error that occurs when CONFIG_ALTIVEC=n (jsc#SLE-4084).
- KVM: Prepare for moving vcpu_load/vcpu_put into arch specific code (jsc#SLE-4084).
- KVM: SVM: Add a dedicated INVD intercept routine (bsc#1112178).
- KVM: SVM: Fix disable pause loop exit/pause filtering capability on SVM (bsc#1176321).
- KVM: SVM: fix svn_pin_memory()'s use of get_user_pages_fast() (bsc#1112178).
- KVM: Take vcpu-&gt;mutex outside vcpu_load (jsc#SLE-4084).
- libceph: allow setting abort_on_full for rbd (bsc#1169972).
- libnvdimm: cover up nvdimm_security_ops changes (bsc#1171742).
- libnvdimm: cover up struct nvdimm changes (bsc#1171742).
- libnvdimm/security, acpi/nfit: unify zero-key for all security commands (bsc#1171742).
- libnvdimm/security: fix a typo (bsc#1171742 bsc#1167527).
- libnvdimm/security: Introduce a 'frozen' attribute (bsc#1171742).
- lib/raid6: use vdupq_n_u8 to avoid endianness warnings (git fixes (block drivers)).
- mac802154: tx: fix use-after-free (git-fixes).
- md: raid0/linear: fix dereference before null check on pointer mddev (git fixes (block drivers)).
- media: davinci: vpif_capture: fix potential double free (git-fixes).
- media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq() (git-fixes).
- media: smiapp: Fix error handling at NVM reading (git-fixes).
- media: ti-vpe: cal: Restrict DMA to avoid memory corruption (git-fixes).
- mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs (git-fixes).
- mfd: mfd-core: Protect against NULL call-back function pointer (git-fixes).
- mm: Avoid calling build_all_zonelists_init under hotplug context (bsc#1154366).
- mmc: cqhci: Add cqhci_deactivate() (git-fixes).
- mmc: sdhci-msm: Add retries when all tuning phases are found valid (git-fixes).
- mmc: sdhci-pci: Fix SDHCI_RESET_ALL for CQHCI for Intel GLK-based controllers (git-fixes).
- mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS models (git-fixes).
- mm/page_alloc.c: fix a crash in free_pages_prepare() (git fixes (mm/pgalloc)).
- mm/vmalloc.c: move 'area-&gt;pages' after if statement (git fixes (mm/vmalloc)).
- mtd: cfi_cmdset_0002: do not free cfi-&gt;cfiq in error path of cfi_amdstd_setup() (git-fixes).
- mtd: lpddr: Fix a double free in probe() (git-fixes).
- mtd: phram: fix a double free issue in error path (git-fixes).
- mtd: properly check all write ioctls for permissions (git-fixes).
- net: dsa: b53: Fix sparse warnings in b53_mmap.c (git-fixes).
- net: dsa: b53: Use strlcpy() for ethtool::get_strings (git-fixes).
- net: dsa: mv88e6xxx: fix 6085 frame mode masking (git-fixes).
- net: dsa: mv88e6xxx: Fix interrupt masking on removal (git-fixes).
- net: dsa: mv88e6xxx: Fix name of switch 88E6141 (git-fixes).
- net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge() (git-fixes).
- net: dsa: mv88e6xxx: Unregister MDIO bus on error path (git-fixes).
- net: dsa: qca8k: Allow overwriting CPU port setting (git-fixes).
- net: dsa: qca8k: Enable RXMAC when bringing up a port (git-fixes).
- net: dsa: qca8k: Force CPU port to its highest bandwidth (git-fixes).
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (git-fixes).
- net: fs_enet: do not call phy_stop() in interrupts (git-fixes).
- net: initialize fastreuse on inet_inherit_port (networking-stable-20_08_15).
- net: lan78xx: Bail out if lan78xx_get_endpoints fails (git-fixes).
- net: lan78xx: replace bogus endpoint lookup (networking-stable-20_08_08).
- net: lio_core: fix potential sign-extension overflow on large shift (git-fixes).
- net/mlx5: Add meaningful return codes to status_to_err function (git-fixes).
- net/mlx5: E-Switch, Use correct flags when configuring vlan (git-fixes).
- net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded (git-fixes).
- net: mvneta: fix mtu change on port without link (git-fixes).
- net-next: ax88796: Do not free IRQ in ax_remove() (already freed in ax_close()) (git-fixes).
- net/nfc/rawsock.c: add CAP_NET_RAW check (networking-stable-20_08_15).
- net: qca_spi: Avoid packet drop during initial sync (git-fixes).
- net: qca_spi: Make sure the QCA7000 reset is triggered (git-fixes).
- net: refactor bind_bucket fastreuse into helper (networking-stable-20_08_15).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: fix restoring of fallback changes (git-fixes).
- net/smc: fix sock refcounting in case of termination (git-fixes).
- net/smc: improve close of terminated socket (git-fixes).
- net/smc: Prevent kernel-infoleak in __smc_diag_dump() (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: tolerate future SMCD versions (git-fixes).
- net: stmmac: call correct function in stmmac_mac_config_rx_queues_routing() (git-fixes).
- net: stmmac: Disable ACS Feature for GMAC &gt;= 4 (git-fixes).
- net: stmmac: do not stop NAPI processing when dropping a packet (git-fixes).
- net: stmmac: dwmac4: fix flow control issue (git-fixes).
- net: stmmac: dwmac_lib: fix interchanged sleep/timeout values in DMA reset function (git-fixes).
- net: stmmac: dwmac-meson8b: Add missing boundary to RGMII TX clock array (git-fixes).
- net: stmmac: dwmac-meson8b: fix internal RGMII clock configuration (git-fixes).
- net: stmmac: dwmac-meson8b: fix setting the RGMII TX clock on Meson8b (git-fixes).
- net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on Meson8b/8m2 SoCs (git-fixes).
- net: stmmac: dwmac-meson8b: only configure the clocks in RGMII mode (git-fixes).
- net: stmmac: dwmac-meson8b: propagate rate changes to the parent clock (git-fixes).
- net: stmmac: Fix error handling path in 'alloc_dma_rx_desc_resources()' (git-fixes).
- net: stmmac: Fix error handling path in 'alloc_dma_tx_desc_resources()' (git-fixes).
- net: stmmac: rename dwmac4_tx_queue_routing() to match reality (git-fixes).
- net: stmmac: set MSS for each tx DMA channel (git-fixes).
- net: stmmac: Use correct values in TQS/RQS fields (git-fixes).
- net-sysfs: add a newline when printing 'tx_timeout' by sysfs (networking-stable-20_07_29).
- net: systemport: Fix software statistics for SYSTEMPORT Lite (git-fixes).
- net: systemport: Fix sparse warnings in bcm_sysport_insert_tsb() (git-fixes).
- net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() (git-fixes).
- net: ucc_geth - fix Oops when changing number of buffers in the ring (git-fixes).
- NFSv4: do not mark all open state for recovery when handling recallable state revoked flag (bsc#1176935).
- nvme-fc: set max_segments to lldd max value (bsc#1176038).
- nvme-pci: override the value of the controller's numa node (bsc#1176507).
- ocfs2: give applications more IO opportunities during fstrim (bsc#1175228).
- omapfb: fix multiple reference count leaks due to pm_runtime_get_sync (git-fixes).
- PCI/ASPM: Allow re-enabling Clock PM (git-fixes).
- PCI: Fix pci_create_slot() reference count leak (git-fixes).
- PCI: qcom: Add missing ipq806x clocks in PCIe driver (git-fixes).
- PCI: qcom: Add missing reset for ipq806x (git-fixes).
- PCI: qcom: Add support for tx term offset for rev 2.1.0 (git-fixes).
- PCI: qcom: Define some PARF params needed for ipq8064 SoC (git-fixes).
- PCI: rcar: Fix incorrect programming of OB windows (git-fixes).
- phy: samsung: s5pv210-usb2: Add delay after reset (git-fixes).
- pinctrl: mvebu: Fix i2c sda definition for 98DX3236 (git-fixes).
- powerpc/64s: Blacklist functions invoked on a trap (bsc#1094244 ltc#168122).
- powerpc/64s: Fix HV NMI vs HV interrupt recoverability test (bsc#1094244 ltc#168122).
- powerpc/64s: Fix unrelocated interrupt trampoline address test (bsc#1094244 ltc#168122).
- powerpc/64s: Include &lt;asm/nmi.h&gt; header file to fix a warning (bsc#1094244 ltc#168122).
- powerpc/64s: machine check do not trace real-mode handler (bsc#1094244 ltc#168122).
- powerpc/64s: sreset panic if there is no debugger or crash dump handlers (bsc#1094244 ltc#168122).
- powerpc/64s: system reset interrupt preserve HSRRs (bsc#1094244 ltc#168122).
- powerpc: Add cputime_to_nsecs() (bsc#1065729).
- powerpc/book3s64/radix: Add kernel command line option to disable radix GTSE (bsc#1055186 ltc#153436).
- powerpc/book3s64/radix: Fix boot failure with large amount of guest memory (bsc#1176022 ltc#187208).
- powerpc: Implement ftrace_enabled() helpers (bsc#1094244 ltc#168122).
- powerpc/init: Do not advertise radix during client-architecture-support (bsc#1055186 ltc#153436 ).
- powerpc/kernel: Cleanup machine check function declarations (bsc#1065729).
- powerpc/kernel: Enables memory hot-remove after reboot on pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Enable radix GTSE only if supported (bsc#1055186 ltc#153436).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests only (bsc#1177030 ltc#187588).
- powerpc/mm: Move book3s64 specifics in subdirectory mm/book3s64 (bsc#1176022 ltc#187208).
- powerpc/powernv: Remove real mode access limit for early allocations (bsc#1176022 ltc#187208).
- powerpc/prom: Enable Radix GTSE in cpu pa-features (bsc#1055186 ltc#153436).
- powerpc/pseries/le: Work around a firmware quirk (bsc#1094244 ltc#168122).
- powerpc/pseries: lift RTAS limit for radix (bsc#1176022 ltc#187208).
- powerpc/pseries: Limit machine check stack to 4GB (bsc#1094244 ltc#168122).
- powerpc/pseries: Machine check use rtas_call_unlocked() with args on stack (bsc#1094244 ltc#168122).
- powerpc/pseries: radix is not subject to RMA limit, remove it (bsc#1176022 ltc#187208).
- powerpc/pseries/ras: Avoid calling rtas_token() in NMI paths (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: Fix FWNMI_VALID off by one (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: fwnmi avoid modifying r3 in error case (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: fwnmi sreset should not interlock (bsc#1094244 ltc#168122).
- powerpc/traps: Do not trace system reset (bsc#1094244 ltc#168122).
- powerpc/traps: fix recoverability of machine check handling on book3s/32 (bsc#1094244 ltc#168122).
- powerpc/traps: Make unrecoverable NMIs die instead of panic (bsc#1094244 ltc#168122).
- powerpc/xmon: Use `dcbf` inplace of `dcbi` instruction for 64bit Book3S (bsc#1065729).
- power: supply: max17040: Correct voltage reading (git-fixes).
- rcu: Do RCU GP kthread self-wakeup from softirq and interrupt (git fixes (rcu)).
- regulator: push allocation in set_consumer_device_supply() out of lock (git-fixes).
- rpadlpar_io: Add MODULE_DESCRIPTION entries to kernel modules (bsc#1176869 ltc#188243).
- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- rpm/kernel-binary.spec.in: Also sign ppc64 kernels (jsc#SLE-15857 jsc#SLE-13618).
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115) To avoid the unnecessary key enrollment, when enrolling the signing key of the kernel package, '--ca-check' is added to mokutil so that mokutil will ignore the request if the CA of the signing key already exists in MokList or UEFI db. Since the macro, %_suse_kernel_module_subpackage, is only defined in a kernel module package (KMP), it's used to determine whether the %post script is running in a kernel package, or a kernel module package.
- rpm/kernel-source.spec.in: Also use bz compression (boo#1175882).
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698) The '-c' option wasn't passed down to %_kernel_module_package so the ueficert subpackage wasn't generated even if the certificate is specified in the spec file.
- rtc: ds1374: fix possible race condition (git-fixes).
- rtlwifi: rtl8192cu: Prevent leaking urb (git-fixes).
- rxrpc: Fix race between recvmsg and sendmsg on immediate call failure (networking-stable-20_08_08).
- rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA (networking-stable-20_07_29).
- s390/mm: fix huge pte soft dirty copying (git-fixes).
- s390/qeth: do not process empty bridge port events (git-fixes).
- s390/qeth: integrate RX refill worker with NAPI (git-fixes).
- s390/qeth: tolerate pre-filled RX buffer (git-fixes).
- scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del() (bsc#1174899).
- scsi: fnic: Do not call 'scsi_done()' for unhandled commands (bsc#1168468, bsc#1171675).
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (bsc#1176962 ltc#188304).
- scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling getpeername() (bsc#1177258).
- scsi: libfc: Fix for double free() (bsc#1174899).
- scsi: libfc: free response frame from GPN_ID (bsc#1174899).
- scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases (bsc#1174899).
- scsi: lpfc: Add dependency on CPU_FREQ (git-fixes).
- scsi: lpfc: Fix setting IRQ affinity with an empty CPU mask (git-fixes).
- scsi: qla2xxx: Fix regression on sparc64 (git-fixes).
- scsi: qla2xxx: Fix the return value (bsc#1171688).
- scsi: qla2xxx: Fix the size used in a 'dma_free_coherent()' call (bsc#1171688).
- scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba() (bsc#1171688).
- scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg() (bsc#1171688).
- scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1171688).
- scsi: qla2xxx: Log calling function name in qla2x00_get_sp_from_handle() (bsc#1171688).
- scsi: qla2xxx: Remove pci-dma-compat wrapper API (bsc#1171688).
- scsi: qla2xxx: Remove redundant variable initialization (bsc#1171688).
- scsi: qla2xxx: Remove superfluous memset() (bsc#1171688).
- scsi: qla2xxx: Simplify return value logic in qla2x00_get_sp_from_handle() (bsc#1171688).
- scsi: qla2xxx: Suppress two recently introduced compiler warnings (git-fixes).
- scsi: qla2xxx: Warn if done() or free() are called on an already freed srb (bsc#1171688).
- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for Tegra186 (git-fixes).
- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for Tegra210 (git-fixes).
- serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout (git-fixes).
- serial: 8250_omap: Fix sleeping function called from invalid context during probe (git-fixes).
- serial: 8250_port: Do not service RX FIFO if throttled (git-fixes).
- Set CONFIG_HAVE_KVM_VCPU_ASYNC_IOCTL=y (jsc#SLE-4084).
- SMB3: Honor persistent/resilient handle flags for multiuser mounts (bsc#1176546).
- SMB3: Honor 'seal' flag for multiuser mounts (bsc#1176545).
- SMB3: warn on confusing error scenario with sec=krb5 (bsc#1176548).
- stmmac: Do not access tx_q-&gt;dirty_tx before netif_tx_lock (git-fixes).
- tcp: apply a floor of 1 for RTT samples from TCP timestamps (networking-stable-20_08_08).
- thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430 (git-fixes).
- tools/power/cpupower: Fix initializer override in hsw_ext_cstates (bsc#1112178).
- USB: core: fix slab-out-of-bounds Read in read_descriptors (git-fixes).
- USB: dwc3: Increase timeout for CmdAct cleared by device controller (git-fixes).
- USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() (git-fixes).
- USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int (git-fixes).
- USB: Fix out of sync data toggle if a configured device is reconfigured (git-fixes).
- USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() (git-fixes).
- USB: gadget: f_ncm: Fix NDP16 datagram validation (git-fixes).
- USB: gadget: u_f: add overflow checks to VLA macros (git-fixes).
- USB: gadget: u_f: Unbreak offset calculation in VLAs (git-fixes).
- USB: hso: check for return value in hso_serial_common_create() (networking-stable-20_08_08).
- usblp: fix race between disconnect() and read() (git-fixes).
- USB: lvtest: return proper error code in probe (git-fixes).
- usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set (git-fixes).
- USB: qmi_wwan: add D-Link DWM-222 A2 device ID (git-fixes).
- USB: quirks: Add no-lpm quirk for another Raydium touchscreen (git-fixes).
- USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin notebook (git-fixes).
- USB: quirks: Ignore duplicate endpoint on Sound Devices MixPre-D (git-fixes).
- USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter (git-fixes).
- USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules (git-fixes).
- USB: serial: option: support dynamic Quectel USB compositions (git-fixes).
- USB: sisusbvga: Fix a potential UB casued by left shifting a negative value (git-fixes).
- USB: storage: Add unusual_uas entry for Sony PSZ drives (git-fixes).
- USB: typec: ucsi: acpi: Check the _DEP dependencies (git-fixes).
- USB: uas: Add quirk for PNY Pro Elite (git-fixes).
- USB: UAS: fix disconnect by unplugging a hub (git-fixes).
- USB: yurex: Fix bad gfp argument (git-fixes).
- vgacon: remove software scrollback support (bsc#1176278).
- video: fbdev: fix OOB read in vga_8planes_imageblit() (git-fixes).
- virtio-blk: free vblk-vqs in error path of virtblk_probe() (git fixes (block drivers)).
- vrf: prevent adding upper devices (git-fixes).
- vxge: fix return of a free'd memblock on a failed dma mapping (git-fixes).
- x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task (bsc#1112178).
- xen: do not reschedule in preemption off sections (bsc#1175749).
- xen/events: do not use chip_data for legacy IRQs (bsc#1065600).
- xen uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information (bsc#1065600).
- xhci: Do warm-reset when both CAS and XDEV_RESUME are set (git-fixes).
- yam: fix possible memory leak in yam_init_driver (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-13"/>
	<updated date="2020-10-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094244">SUSE bug 1094244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154366">SUSE bug 1154366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167527">SUSE bug 1167527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168468">SUSE bug 1168468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169972">SUSE bug 1169972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171675">SUSE bug 1171675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171688">SUSE bug 1171688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171742">SUSE bug 1171742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173115">SUSE bug 1173115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174899">SUSE bug 1174899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175228">SUSE bug 1175228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175749">SUSE bug 1175749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175882">SUSE bug 1175882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176011">SUSE bug 1176011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176022">SUSE bug 1176022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176038">SUSE bug 1176038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176235">SUSE bug 1176235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176242">SUSE bug 1176242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176278">SUSE bug 1176278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176316">SUSE bug 1176316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176317">SUSE bug 1176317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176318">SUSE bug 1176318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176319">SUSE bug 1176319</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176320">SUSE bug 1176320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176321">SUSE bug 1176321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176381">SUSE bug 1176381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176395">SUSE bug 1176395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176410">SUSE bug 1176410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176423">SUSE bug 1176423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176482">SUSE bug 1176482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176507">SUSE bug 1176507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176536">SUSE bug 1176536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176544">SUSE bug 1176544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176545">SUSE bug 1176545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176546">SUSE bug 1176546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176548">SUSE bug 1176548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176659">SUSE bug 1176659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176698">SUSE bug 1176698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176699">SUSE bug 1176699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176700">SUSE bug 1176700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176721">SUSE bug 1176721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176722">SUSE bug 1176722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176725">SUSE bug 1176725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176732">SUSE bug 1176732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176788">SUSE bug 1176788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176789">SUSE bug 1176789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176869">SUSE bug 1176869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176877">SUSE bug 1176877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176935">SUSE bug 1176935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176950">SUSE bug 1176950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176962">SUSE bug 1176962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176966">SUSE bug 1176966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176990">SUSE bug 1176990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177027">SUSE bug 1177027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177030">SUSE bug 1177030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177041">SUSE bug 1177041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177042">SUSE bug 1177042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177043">SUSE bug 1177043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177044">SUSE bug 1177044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177121">SUSE bug 1177121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177206">SUSE bug 1177206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177258">SUSE bug 1177258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177291">SUSE bug 1177291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177293">SUSE bug 1177293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177294">SUSE bug 1177294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177295">SUSE bug 1177295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177296">SUSE bug 1177296</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-0404/">CVE-2020-0404</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0427/">CVE-2020-0427</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0431/">CVE-2020-0431</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0432/">CVE-2020-0432</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14381/">CVE-2020-14381</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14390/">CVE-2020-14390</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25284/">CVE-2020-25284</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25641/">CVE-2020-25641</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25643/">CVE-2020-25643</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-26088/">CVE-2020-26088</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492611" comment="kernel-default-4.12.14-197.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492612" comment="kernel-default-base-4.12.14-197.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492613" comment="kernel-default-devel-4.12.14-197.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492614" comment="kernel-default-man-4.12.14-197.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492615" comment="kernel-devel-4.12.14-197.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492616" comment="kernel-macros-4.12.14-197.61.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137933" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1100369" ref_url="https://bugzilla.suse.com/1100369" source="BUGZILLA"/>
		<reference ref_id="1109160" ref_url="https://bugzilla.suse.com/1109160" source="BUGZILLA"/>
		<reference ref_id="1118367" ref_url="https://bugzilla.suse.com/1118367" source="BUGZILLA"/>
		<reference ref_id="1118368" ref_url="https://bugzilla.suse.com/1118368" source="BUGZILLA"/>
		<reference ref_id="1128220" ref_url="https://bugzilla.suse.com/1128220" source="BUGZILLA"/>
		<reference ref_id="1156205" ref_url="https://bugzilla.suse.com/1156205" source="BUGZILLA"/>
		<reference ref_id="1157051" ref_url="https://bugzilla.suse.com/1157051" source="BUGZILLA"/>
		<reference ref_id="1161168" ref_url="https://bugzilla.suse.com/1161168" source="BUGZILLA"/>
		<reference ref_id="1170667" ref_url="https://bugzilla.suse.com/1170667" source="BUGZILLA"/>
		<reference ref_id="1170713" ref_url="https://bugzilla.suse.com/1170713" source="BUGZILLA"/>
		<reference ref_id="1171313" ref_url="https://bugzilla.suse.com/1171313" source="BUGZILLA"/>
		<reference ref_id="1171740" ref_url="https://bugzilla.suse.com/1171740" source="BUGZILLA"/>
		<reference ref_id="1172958" ref_url="https://bugzilla.suse.com/1172958" source="BUGZILLA"/>
		<reference ref_id="1173307" ref_url="https://bugzilla.suse.com/1173307" source="BUGZILLA"/>
		<reference ref_id="1173311" ref_url="https://bugzilla.suse.com/1173311" source="BUGZILLA"/>
		<reference ref_id="1173983" ref_url="https://bugzilla.suse.com/1173983" source="BUGZILLA"/>
		<reference ref_id="1175443" ref_url="https://bugzilla.suse.com/1175443" source="BUGZILLA"/>
		<reference ref_id="1176092" ref_url="https://bugzilla.suse.com/1176092" source="BUGZILLA"/>
		<reference ref_id="1176674" ref_url="https://bugzilla.suse.com/1176674" source="BUGZILLA"/>
		<reference ref_id="906079" ref_url="https://bugzilla.suse.com/906079" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-3136" ref_url="https://www.suse.com/security/cve/CVE-2017-3136/" source="CVE"/>
		<reference ref_id="CVE-2018-5741" ref_url="https://www.suse.com/security/cve/CVE-2018-5741/" source="CVE"/>
		<reference ref_id="CVE-2019-6477" ref_url="https://www.suse.com/security/cve/CVE-2019-6477/" source="CVE"/>
		<reference ref_id="CVE-2020-8616" ref_url="https://www.suse.com/security/cve/CVE-2020-8616/" source="CVE"/>
		<reference ref_id="CVE-2020-8617" ref_url="https://www.suse.com/security/cve/CVE-2020-8617/" source="CVE"/>
		<reference ref_id="CVE-2020-8618" ref_url="https://www.suse.com/security/cve/CVE-2020-8618/" source="CVE"/>
		<reference ref_id="CVE-2020-8619" ref_url="https://www.suse.com/security/cve/CVE-2020-8619/" source="CVE"/>
		<reference ref_id="CVE-2020-8620" ref_url="https://www.suse.com/security/cve/CVE-2020-8620/" source="CVE"/>
		<reference ref_id="CVE-2020-8621" ref_url="https://www.suse.com/security/cve/CVE-2020-8621/" source="CVE"/>
		<reference ref_id="CVE-2020-8622" ref_url="https://www.suse.com/security/cve/CVE-2020-8622/" source="CVE"/>
		<reference ref_id="CVE-2020-8623" ref_url="https://www.suse.com/security/cve/CVE-2020-8623/" source="CVE"/>
		<reference ref_id="CVE-2020-8624" ref_url="https://www.suse.com/security/cve/CVE-2020-8624/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007552.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

BIND was upgraded to version 9.16.6:

Note:

- bind is now more strict in regards to DNSSEC. If queries are not working,
  check for DNSSEC issues. For instance, if bind is used in a namserver
  forwarder chain, the forwarding DNS servers must support DNSSEC.

Fixing security issues:

- CVE-2020-8616: Further limit the number of queries that can be triggered from
  a request.  Root and TLD servers are no longer exempt
  from max-recursion-queries.  Fetches for missing name server. (bsc#1171740)
  Address records are limited to 4 for any domain.
- CVE-2020-8617: Replaying a TSIG BADTIME response as a request could trigger an
  assertion failure. (bsc#1171740)
- CVE-2019-6477: Fixed an issue where TCP-pipelined queries could bypass 
  the tcp-clients limit (bsc#1157051).
- CVE-2018-5741: Fixed the documentation (bsc#1109160).
- CVE-2020-8618: It was possible to trigger an INSIST when determining
  whether a record would fit into a TCP message buffer (bsc#1172958).
- CVE-2020-8619: It was possible to trigger an INSIST in
  lib/dns/rbtdb.c:new_reference() with a particular zone content
  and query patterns (bsc#1172958).
- CVE-2020-8624: 'update-policy' rules of type 'subdomain' were
  incorrectly treated as 'zonesub' rules, which allowed
  keys used in 'subdomain' rules to update names outside
  of the specified subdomains. The problem was fixed by
  making sure 'subdomain' rules are again processed as
  described in the ARM (bsc#1175443).
- CVE-2020-8623: When BIND 9 was compiled with native PKCS#11 support, it
  was possible to trigger an assertion failure in code
  determining the number of bits in the PKCS#11 RSA public
  key with a specially crafted packet (bsc#1175443).
- CVE-2020-8621: named could crash in certain query resolution scenarios
  where QNAME minimization and forwarding were both
  enabled (bsc#1175443).
- CVE-2020-8620: It was possible to trigger an assertion failure by
  sending a specially crafted large TCP DNS message (bsc#1175443).
- CVE-2020-8622: It was possible to trigger an assertion failure when
  verifying the response to a TSIG-signed request (bsc#1175443).

Other issues fixed:

- Add engine support to OpenSSL EdDSA implementation.
- Add engine support to OpenSSL ECDSA implementation.
- Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
- Warn about AXFR streams with inconsistent message IDs.
- Make ISC rwlock implementation the default again.
- Fixed issues when using cookie-secrets for AES and SHA2 (bsc#1161168)
- Installed the default files in /var/lib/named and created 
  chroot environment on systems using transactional-updates (bsc#1100369, fate#325524)
- Fixed an issue where bind was not working in FIPS mode (bsc#906079).
- Fixed dependency issues (bsc#1118367 and bsc#1118368).
- GeoIP support is now discontinued, now GeoIP2 is used(bsc#1156205).
- Fixed an issue with FIPS (bsc#1128220).
- The liblwres library is discontinued upstream and is no longer included.
- Added service dependency on NTP to make sure the clock is accurate when bind is starts (bsc#1170667, bsc#1170713).
- Reject DS records at the zone apex when loading master files. Log but otherwise ignore attempts to add DS records at the zone apex via UPDATE.
- The default value of 'max-stale-ttl' has been changed from 1 week to 12 hours.
- Zone timers are now exported via statistics channel.
- The 'primary' and 'secondary' keywords, when used as parameters for 'check-names', were not processed correctly and were being ignored.
- 'rndc dnstap -roll &lt;value&gt;' did not limit the number of saved files to &lt;value&gt;.
- Add 'rndc dnssec -status' command.
- Addressed a couple of situations where named could crash.
- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the 'named' group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]
- Added '/etc/bind.keys' to NAMED_CONF_INCLUDE_FILES in /etc/sysconfig/named to suppress warning message re missing file (bsc#1173983).
- Removed '-r /dev/urandom' from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  (bsc#1173311, bsc#1176674, bsc#1170713)
- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313]
- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).
- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-13"/>
	<updated date="2020-10-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1100369">SUSE bug 1100369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109160">SUSE bug 1109160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118367">SUSE bug 1118367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118368">SUSE bug 1118368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128220">SUSE bug 1128220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156205">SUSE bug 1156205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157051">SUSE bug 1157051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161168">SUSE bug 1161168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170667">SUSE bug 1170667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170713">SUSE bug 1170713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171313">SUSE bug 1171313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171740">SUSE bug 1171740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172958">SUSE bug 1172958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173307">SUSE bug 1173307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173311">SUSE bug 1173311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173983">SUSE bug 1173983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175443">SUSE bug 1175443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176092">SUSE bug 1176092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176674">SUSE bug 1176674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/906079">SUSE bug 906079</bugzilla>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3136/">CVE-2017-3136</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-5741/">CVE-2018-5741</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6477/">CVE-2019-6477</cve>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8616/">CVE-2020-8616</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8617/">CVE-2020-8617</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8618/">CVE-2020-8618</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8619/">CVE-2020-8619</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8620/">CVE-2020-8620</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8621/">CVE-2020-8621</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8622/">CVE-2020-8622</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8623/">CVE-2020-8623</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8624/">CVE-2020-8624</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492617" comment="bind-devel-9.16.6-12.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492618" comment="bind-utils-9.16.6-12.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492619" comment="libbind9-1600-9.16.6-12.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492620" comment="libdns1605-9.16.6-12.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492621" comment="libirs-devel-9.16.6-12.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492622" comment="libirs1601-9.16.6-12.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492623" comment="libisc1606-9.16.6-12.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492624" comment="libisccc1600-9.16.6-12.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492625" comment="libisccfg1600-9.16.6-12.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492626" comment="libns1604-9.16.6-12.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492627" comment="python3-bind-9.16.6-12.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492628" comment="sysuser-shadow-2.0-4.2.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492629" comment="sysuser-tools-2.0-4.2.8 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137934" version="1" class="patch">
	<metadata>
		<title>Security update for gcc10, nvptx-tools (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172798" ref_url="https://bugzilla.suse.com/1172798" source="BUGZILLA"/>
		<reference ref_id="1172846" ref_url="https://bugzilla.suse.com/1172846" source="BUGZILLA"/>
		<reference ref_id="1173972" ref_url="https://bugzilla.suse.com/1173972" source="BUGZILLA"/>
		<reference ref_id="1174753" ref_url="https://bugzilla.suse.com/1174753" source="BUGZILLA"/>
		<reference ref_id="1174817" ref_url="https://bugzilla.suse.com/1174817" source="BUGZILLA"/>
		<reference ref_id="1175168" ref_url="https://bugzilla.suse.com/1175168" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13844" ref_url="https://www.suse.com/security/cve/CVE-2020-13844/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007583.html" source="SUSE-SU"/>
		<description>
This update for gcc10, nvptx-tools fixes the following issues:

This update provides the GCC10 compiler suite and runtime libraries.

The base SUSE Linux Enterprise libraries libgcc_s1, libstdc++6 are replaced by
the gcc10 variants.

The new compiler variants are available with '-10' suffix, you can specify them
via:

	CC=gcc-10
	CXX=g++-10

or similar commands.

For a detailed changelog check out https://gcc.gnu.org/gcc-10/changes.html

Changes in nvptx-tools:

- Enable build on aarch64
  		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-04"/>
	<updated date="2020-12-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172798">SUSE bug 1172798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172846">SUSE bug 1172846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173972">SUSE bug 1173972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174753">SUSE bug 1174753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174817">SUSE bug 1174817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175168">SUSE bug 1175168</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-13844/">CVE-2020-13844</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492630" comment="libada10-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492631" comment="libada10-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492632" comment="libasan6-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492633" comment="libasan6-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492634" comment="libatomic1-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492635" comment="libatomic1-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492636" comment="libgcc_s1-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492637" comment="libgcc_s1-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492638" comment="libgfortran5-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492639" comment="libgfortran5-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492640" comment="libgo16-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492641" comment="libgo16-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492642" comment="libgomp1-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492643" comment="libgomp1-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492644" comment="libitm1-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492645" comment="libitm1-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492646" comment="liblsan0-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492647" comment="libobjc4-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492648" comment="libquadmath0-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492649" comment="libquadmath0-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492650" comment="libstdc++6-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492651" comment="libstdc++6-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492652" comment="libstdc++6-devel-gcc10-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492653" comment="libstdc++6-locale-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492654" comment="libstdc++6-pp-gcc10-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492655" comment="libstdc++6-pp-gcc10-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492656" comment="libtsan0-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492657" comment="libubsan1-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492658" comment="libubsan1-32bit-10.2.1+git583-1.3.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137935" version="1" class="patch">
	<metadata>
		<title>Security update for ceph (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1161074" ref_url="https://bugzilla.suse.com/1161074" source="BUGZILLA"/>
		<reference ref_id="1161312" ref_url="https://bugzilla.suse.com/1161312" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1699" ref_url="https://www.suse.com/security/cve/CVE-2020-1699/" source="CVE"/>
		<reference ref_id="CVE-2020-1700" ref_url="https://www.suse.com/security/cve/CVE-2020-1700/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006423.html" source="SUSE-SU"/>
		<description>
This update for ceph fixes the following issues:

- CVE-2020-1700: Fixed a denial of service against the RGW server via connection leakage (bsc#1161312).
- CVE-2020-1699: Fixed a information disclosure by improper URL checking (bsc#1161074).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-31"/>
	<updated date="2020-01-31"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1161074">SUSE bug 1161074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161312">SUSE bug 1161312</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1699/">CVE-2020-1699</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-1700/">CVE-2020-1700</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492659" comment="ceph-common-14.2.5.382+g8881d33957-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492660" comment="libcephfs-devel-14.2.5.382+g8881d33957-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492661" comment="libcephfs2-14.2.5.382+g8881d33957-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492662" comment="librados-devel-14.2.5.382+g8881d33957-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492663" comment="librados2-14.2.5.382+g8881d33957-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492664" comment="libradospp-devel-14.2.5.382+g8881d33957-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492665" comment="librbd-devel-14.2.5.382+g8881d33957-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492666" comment="librbd1-14.2.5.382+g8881d33957-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492667" comment="librgw-devel-14.2.5.382+g8881d33957-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492668" comment="librgw2-14.2.5.382+g8881d33957-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492669" comment="python3-ceph-argparse-14.2.5.382+g8881d33957-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492670" comment="python3-cephfs-14.2.5.382+g8881d33957-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492671" comment="python3-rados-14.2.5.382+g8881d33957-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492672" comment="python3-rbd-14.2.5.382+g8881d33957-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492673" comment="python3-rgw-14.2.5.382+g8881d33957-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492674" comment="rados-objclass-devel-14.2.5.382+g8881d33957-3.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137936" version="1" class="patch">
	<metadata>
		<title>Security update for hunspell (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1151867" ref_url="https://bugzilla.suse.com/1151867" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16707" ref_url="https://www.suse.com/security/cve/CVE-2019-16707/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2966-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007597.html" source="SUSE-SU"/>
		<description>
This update for hunspell fixes the following issues:

- CVE-2019-16707: Fixed an invalid read in SuggestMgr:leftcommonsubstring (bsc#1151867).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-20"/>
	<updated date="2020-10-20"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1151867">SUSE bug 1151867</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16707/">CVE-2019-16707</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492675" comment="hunspell-1.6.2-3.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492676" comment="hunspell-devel-1.6.2-3.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492677" comment="hunspell-tools-1.6.2-3.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492678" comment="libhunspell-1_6-0-1.6.2-3.3.7 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137937" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1140683" ref_url="https://bugzilla.suse.com/1140683" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1174748" ref_url="https://bugzilla.suse.com/1174748" source="BUGZILLA"/>
		<reference ref_id="1175520" ref_url="https://bugzilla.suse.com/1175520" source="BUGZILLA"/>
		<reference ref_id="1176400" ref_url="https://bugzilla.suse.com/1176400" source="BUGZILLA"/>
		<reference ref_id="1176946" ref_url="https://bugzilla.suse.com/1176946" source="BUGZILLA"/>
		<reference ref_id="1177027" ref_url="https://bugzilla.suse.com/1177027" source="BUGZILLA"/>
		<reference ref_id="1177340" ref_url="https://bugzilla.suse.com/1177340" source="BUGZILLA"/>
		<reference ref_id="1177511" ref_url="https://bugzilla.suse.com/1177511" source="BUGZILLA"/>
		<reference ref_id="1177685" ref_url="https://bugzilla.suse.com/1177685" source="BUGZILLA"/>
		<reference ref_id="1177724" ref_url="https://bugzilla.suse.com/1177724" source="BUGZILLA"/>
		<reference ref_id="1177725" ref_url="https://bugzilla.suse.com/1177725" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-12352" ref_url="https://www.suse.com/security/cve/CVE-2020-12352/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007592.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724).
- CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' aka 'BadChoice' (bsc#1177725).
- CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted (bsc#1177511).


The following non-security bugs were fixed:

- drm/sun4i: mixer: Extend regmap max_register (git-fixes).
- i2c: meson: fix clock setting overwrite (git-fixes).
- iommu/vt-d: Correctly calculate agaw in domain_init() (bsc#1176400).
- mac80211: do not allow bigger VHT MPDUs than the hardware supports (git-fixes).
- macsec: avoid use-after-free in macsec_handle_frame() (git-fixes).
- mmc: core: do not set limits.discard_granularity as 0 (git-fixes).
- mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() (bsc#1177685).
- NFS: On fatal writeback errors, we need to call nfs_inode_remove_request() (bsc#1177340).
- NFS: Revalidate the file mapping on all fatal writeback errors (bsc#1177340).
- nvme: add a Identify Namespace Identification Descriptor list quirk (bsc#1174748). add two previous futile attempts to fix the bug to blacklist.conf
- nvme: Fix ctrl use-after-free during sysfs deletion (bsc#1174748).
- nvme: fix deadlock caused by ANA update wrong locking (bsc#1174748).
- nvme: fix possible io failures when removing multipathed ns (bsc#1174748).
- nvme: make nvme_identify_ns propagate errors back (bsc#1174748). Refresh:  - patches.suse/nvme-flush-scan_work-when-resetting-controller.patch
- nvme: make nvme_report_ns_ids propagate error back (bsc#1174748).
- nvme-multipath: do not reset on unknown status (bsc#1174748).
- nvme: Namepace identification descriptor list is optional (bsc#1174748).
- nvme: pass status to nvme_error_status (bsc#1174748).
- nvme-rdma: Avoid double freeing of async event data (bsc#1174748).
- nvme: return error from nvme_alloc_ns() (bsc#1174748).
- powerpc/dma: Fix dma_map_ops::get_required_mask (bsc#1065729).
- scsi-hisi-kabi-fixes.patch
- scsi-hisi-kabi-fixes.patch
- scsi: hisi_sas: Add debugfs ITCT file and add file operations (bsc#1140683).
- scsi: hisi_sas: Add manual trigger for debugfs dump (bsc#1140683).
- scsi: hisi_sas: Add missing seq_printf() call in hisi_sas_show_row_32() (bsc#1140683).
- scsi: hisi_sas: Change return variable type in phy_up_v3_hw() (bsc#1140683).
- scsi: hisi_sas: Correct memory allocation size for DQ debugfs (bsc#1140683).
- scsi: hisi_sas: Do some more tidy-up (bsc#1140683).
- scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO (bsc#1140683).
- scsi: hisi_sas: Fix type casting and missing static qualifier in debugfs code (bsc#1140683). Refresh:
- scsi-hisi_sas-Issue-internal-abort-on-all-relevant-q.patch
- scsi: hisi_sas: No need to check return value of debugfs_create functions (bsc#1140683). Update:
- scsi: hisi_sas: Some misc tidy-up (bsc#1140683).
- scsi: qla2xxx: Add IOCB resource tracking (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Add rport fields in debugfs (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Add SLER and PI control support (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Correct the check for sscanf() return value (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix buffer-buffer credit extraction error (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix crash on session cleanup with unload (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix I/O errors during LIP reset tests (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix I/O failures during remote port toggle testing (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix memory size truncation (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix MPI reset needed message (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix reset of MPI firmware (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Make tgt_port_database available in initiator mode (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Performance tweak (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Reduce duplicate code in reporting speed (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Remove unneeded variable 'rval' (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Setup debugfs entries for remote ports (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Update version to 10.02.00.102-k (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Update version to 10.02.00.103-k (bsc#1176946 bsc#1175520 bsc#1172538).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-20"/>
	<updated date="2020-10-20"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140683">SUSE bug 1140683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174748">SUSE bug 1174748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175520">SUSE bug 1175520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176400">SUSE bug 1176400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176946">SUSE bug 1176946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177027">SUSE bug 1177027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177340">SUSE bug 1177340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177511">SUSE bug 1177511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177685">SUSE bug 1177685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177724">SUSE bug 1177724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177725">SUSE bug 1177725</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12352/">CVE-2020-12352</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492679" comment="kernel-default-4.12.14-197.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492680" comment="kernel-default-base-4.12.14-197.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492681" comment="kernel-default-devel-4.12.14-197.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492682" comment="kernel-default-man-4.12.14-197.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492683" comment="kernel-devel-4.12.14-197.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492684" comment="kernel-macros-4.12.14-197.64.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137938" version="1" class="patch">
	<metadata>
		<title>Security update for gnutls (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176086" ref_url="https://bugzilla.suse.com/1176086" source="BUGZILLA"/>
		<reference ref_id="1176181" ref_url="https://bugzilla.suse.com/1176181" source="BUGZILLA"/>
		<reference ref_id="1176671" ref_url="https://bugzilla.suse.com/1176671" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24659" ref_url="https://www.suse.com/security/cve/CVE-2020-24659/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2988-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007605.html" source="SUSE-SU"/>
		<description>
This update for gnutls fixes the following issues:

- Fix heap buffer overflow in handshake with no_renegotiation alert sent (CVE-2020-24659 bsc#1176181)
- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
- FIPS: Add TLS KDF selftest (bsc#1176671)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-21"/>
	<updated date="2020-10-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1176086">SUSE bug 1176086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176181">SUSE bug 1176181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176671">SUSE bug 1176671</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-24659/">CVE-2020-24659</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492685" comment="gnutls-3.6.7-6.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492686" comment="libgnutls-devel-3.6.7-6.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492687" comment="libgnutls30-3.6.7-6.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492688" comment="libgnutls30-32bit-3.6.7-6.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492689" comment="libgnutls30-hmac-3.6.7-6.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492690" comment="libgnutls30-hmac-32bit-3.6.7-6.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492691" comment="libgnutlsxx-devel-3.6.7-6.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492692" comment="libgnutlsxx28-3.6.7-6.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137939" version="1" class="patch">
	<metadata>
		<title>Security update for freetype2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177914" ref_url="https://bugzilla.suse.com/1177914" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15999" ref_url="https://www.suse.com/security/cve/CVE-2020-15999/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2995-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007607.html" source="SUSE-SU"/>
		<description>
This update for freetype2 fixes the following issues:

- CVE-2020-15999: fixed a heap buffer overflow found in the handling of embedded PNG bitmaps (bsc#1177914).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-22"/>
	<updated date="2020-10-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177914">SUSE bug 1177914</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15999/">CVE-2020-15999</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492693" comment="freetype2-devel-2.10.1-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492694" comment="libfreetype6-2.10.1-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492695" comment="libfreetype6-32bit-2.10.1-4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137940" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174955" ref_url="https://bugzilla.suse.com/1174955" source="BUGZILLA"/>
		<reference ref_id="1175465" ref_url="https://bugzilla.suse.com/1175465" source="BUGZILLA"/>
		<reference ref_id="1175574" ref_url="https://bugzilla.suse.com/1175574" source="BUGZILLA"/>
		<reference ref_id="1176430" ref_url="https://bugzilla.suse.com/1176430" source="BUGZILLA"/>
		<reference ref_id="1177155" ref_url="https://bugzilla.suse.com/1177155" source="BUGZILLA"/>
		<reference ref_id="1177480" ref_url="https://bugzilla.suse.com/1177480" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15708" ref_url="https://www.suse.com/security/cve/CVE-2020-15708/" source="CVE"/>
		<reference ref_id="CVE-2020-25637" ref_url="https://www.suse.com/security/cve/CVE-2020-25637/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3037-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007626.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:
	  
- CVE-2020-15708: Added a  note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955).
- CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155).
- qemu: Adjust max memlock on mdev hotplug (bsc#1177480).
- Xen: Don't add dom0 twice on driver reload (bsc#1176430).
- virdevmapper: Handle kernel without device-mapper support (bsc#1175465).
- Fixed an issue where building was failing (bsc#1175574).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-26"/>
	<updated date="2020-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174955">SUSE bug 1174955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175465">SUSE bug 1175465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175574">SUSE bug 1175574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176430">SUSE bug 1176430</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177155">SUSE bug 1177155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177480">SUSE bug 1177480</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15708/">CVE-2020-15708</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25637/">CVE-2020-25637</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492696" comment="libvirt-libs-5.1.0-8.24.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137941" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177409" ref_url="https://bugzilla.suse.com/1177409" source="BUGZILLA"/>
		<reference ref_id="1177412" ref_url="https://bugzilla.suse.com/1177412" source="BUGZILLA"/>
		<reference ref_id="1177413" ref_url="https://bugzilla.suse.com/1177413" source="BUGZILLA"/>
		<reference ref_id="1177414" ref_url="https://bugzilla.suse.com/1177414" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27670" ref_url="https://www.suse.com/security/cve/CVE-2020-27670/" source="CVE"/>
		<reference ref_id="CVE-2020-27671" ref_url="https://www.suse.com/security/cve/CVE-2020-27671/" source="CVE"/>
		<reference ref_id="CVE-2020-27672" ref_url="https://www.suse.com/security/cve/CVE-2020-27672/" source="CVE"/>
		<reference ref_id="CVE-2020-27673" ref_url="https://www.suse.com/security/cve/CVE-2020-27673/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007635.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- bsc#1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286)
- bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345)
- bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346)
- bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-27"/>
	<updated date="2020-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177409">SUSE bug 1177409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177412">SUSE bug 1177412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177413">SUSE bug 1177413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177414">SUSE bug 1177414</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27670/">CVE-2020-27670</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27671/">CVE-2020-27671</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27672/">CVE-2020-27672</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27673/">CVE-2020-27673</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492697" comment="xen-libs-4.12.3_10-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492698" comment="xen-tools-domU-4.12.3_10-3.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137942" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1126826" ref_url="https://bugzilla.suse.com/1126826" source="BUGZILLA"/>
		<reference ref_id="1126829" ref_url="https://bugzilla.suse.com/1126829" source="BUGZILLA"/>
		<reference ref_id="1126831" ref_url="https://bugzilla.suse.com/1126831" source="BUGZILLA"/>
		<reference ref_id="1140126" ref_url="https://bugzilla.suse.com/1140126" source="BUGZILLA"/>
		<reference ref_id="1142649" ref_url="https://bugzilla.suse.com/1142649" source="BUGZILLA"/>
		<reference ref_id="1143609" ref_url="https://bugzilla.suse.com/1143609" source="BUGZILLA"/>
		<reference ref_id="1153768" ref_url="https://bugzilla.suse.com/1153768" source="BUGZILLA"/>
		<reference ref_id="1153770" ref_url="https://bugzilla.suse.com/1153770" source="BUGZILLA"/>
		<reference ref_id="1157755" ref_url="https://bugzilla.suse.com/1157755" source="BUGZILLA"/>
		<reference ref_id="1160254" ref_url="https://bugzilla.suse.com/1160254" source="BUGZILLA"/>
		<reference ref_id="1160590" ref_url="https://bugzilla.suse.com/1160590" source="BUGZILLA"/>
		<reference ref_id="1163333" ref_url="https://bugzilla.suse.com/1163333" source="BUGZILLA"/>
		<reference ref_id="1163744" ref_url="https://bugzilla.suse.com/1163744" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12972" ref_url="https://www.suse.com/security/cve/CVE-2019-12972/" source="CVE"/>
		<reference ref_id="CVE-2019-14250" ref_url="https://www.suse.com/security/cve/CVE-2019-14250/" source="CVE"/>
		<reference ref_id="CVE-2019-14444" ref_url="https://www.suse.com/security/cve/CVE-2019-14444/" source="CVE"/>
		<reference ref_id="CVE-2019-17450" ref_url="https://www.suse.com/security/cve/CVE-2019-17450/" source="CVE"/>
		<reference ref_id="CVE-2019-17451" ref_url="https://www.suse.com/security/cve/CVE-2019-17451/" source="CVE"/>
		<reference ref_id="CVE-2019-9074" ref_url="https://www.suse.com/security/cve/CVE-2019-9074/" source="CVE"/>
		<reference ref_id="CVE-2019-9075" ref_url="https://www.suse.com/security/cve/CVE-2019-9075/" source="CVE"/>
		<reference ref_id="CVE-2019-9077" ref_url="https://www.suse.com/security/cve/CVE-2019-9077/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007650.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

binutils was updated to version 2.35. (jsc#ECO-2373)

Update to binutils 2.35:

* The assembler can now produce DWARF-5 format line number tables.
* Readelf now has a 'lint' mode to enable extra checks of the files it is processing.
* Readelf will now display '[...]' when it has to truncate a symbol name.  
  The old behaviour - of displaying as many characters as possible, up to
  the 80 column limit - can be restored by the use of the --silent-truncation
  option.
* The linker can now produce a dependency file listing the inputs that it
  has processed, much like the -M -MP option supported by the compiler.

- fix DT_NEEDED order with -flto [bsc#1163744]


Update to binutils 2.34:

* The disassembler (objdump --disassemble) now has an option to
  generate ascii art thats show the arcs between that start and end
  points of control flow instructions.
* The binutils tools now have support for debuginfod.  Debuginfod is a 
  HTTP service for distributing ELF/DWARF debugging information as
  well as source code.  The tools can now connect to debuginfod
  servers in order to download debug information about the files that
  they are processing.
* The assembler and linker now support the generation of ELF format
  files for the Z80 architecture.

- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to bsc#1163333.
- Includes fixes for these CVEs:
  bsc#1153768 aka CVE-2019-17451 aka PR25070
  bsc#1153770 aka CVE-2019-17450 aka PR25078

- fix various build fails on aarch64 (PR25210, bsc#1157755).

Update to binutils 2.33.1:

* Adds support for the Arm Scalable Vector Extension version 2
  (SVE2) instructions, the Arm Transactional Memory Extension (TME)
  instructions and the Armv8.1-M Mainline and M-profile Vector
  Extension (MVE) instructions.
* Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
  processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
  Cortex-A76AE, and Cortex-A77 processors.
* Adds a .float16 directive for both Arm and AArch64 to allow
  encoding of 16-bit floating point literals.
* For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
  Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
  configure time option to set the default behavior. Set the default
  if the configure option is not used to 'no'.
* The Cortex-A53 Erratum 843419 workaround now supports a choice of
  which workaround to use.  The option --fix-cortex-a53-843419 now
  takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
  which can be used to force a particular workaround to be used.
  See --help for AArch64 for more details.
* Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
  GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
  in the AArch64 ELF linker. 
* Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
  on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI 
  on inputs and use PLTs protected with BTI.
* Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
* Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
  provides a prefix to source code lines displayed in a disassembly.
* Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
  option to objcopy to allow the changing of section alignments.
* Add --verilog-data-width option to objcopy for verilog targets to
  control width of data elements in verilog hex format.
* The separate debug info file options of readelf (--debug-dump=links
  and --debug-dump=follow) and objdump (--dwarf=links and
  --dwarf=follow-links) will now display and/or follow multiple
  links if more than one are present in a file.  (This usually
  happens when gcc's -gsplit-dwarf option is used).
  In addition objdump's --dwarf=follow-links now also affects its
  other display options, so that for example, when combined with
  --syms it will cause the symbol tables in any linked debug info
  files to also be displayed.  In addition when combined with
  --disassemble the --dwarf= follow-links option will ensure that
  any symbol tables in the linked files are read and used when
  disassembling code in the main file.
* Add support for dumping types encoded in the Compact Type Format
  to objdump and readelf.
- Includes fixes for these CVEs:
  bsc#1126826 aka CVE-2019-9077 aka PR1126826
  bsc#1126829 aka CVE-2019-9075 aka PR1126829
  bsc#1126831 aka CVE-2019-9074 aka PR24235
  bsc#1140126 aka CVE-2019-12972 aka PR23405
  bsc#1143609 aka CVE-2019-14444 aka PR24829
  bsc#1142649 aka CVE-2019-14250 aka PR90924

* Add xBPF target
* Fix various problems with DWARF 5 support in gas
* fix nm -B for objects compiled with -flto and -fcommon.

  		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-28"/>
	<updated date="2020-10-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1126826">SUSE bug 1126826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126829">SUSE bug 1126829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126831">SUSE bug 1126831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140126">SUSE bug 1140126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142649">SUSE bug 1142649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143609">SUSE bug 1143609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153768">SUSE bug 1153768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153770">SUSE bug 1153770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157755">SUSE bug 1157755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160254">SUSE bug 1160254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160590">SUSE bug 1160590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163333">SUSE bug 1163333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163744">SUSE bug 1163744</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12972/">CVE-2019-12972</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14250/">CVE-2019-14250</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14444/">CVE-2019-14444</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17450/">CVE-2019-17450</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17451/">CVE-2019-17451</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9074/">CVE-2019-9074</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9075/">CVE-2019-9075</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9077/">CVE-2019-9077</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492699" comment="binutils-2.35-7.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492700" comment="binutils-devel-2.35-7.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492701" comment="libctf-nobfd0-2.35-7.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492702" comment="libctf0-2.35-7.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137943" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaThunderbird and mozilla-nspr (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174230" ref_url="https://bugzilla.suse.com/1174230" source="BUGZILLA"/>
		<reference ref_id="1176384" ref_url="https://bugzilla.suse.com/1176384" source="BUGZILLA"/>
		<reference ref_id="1176756" ref_url="https://bugzilla.suse.com/1176756" source="BUGZILLA"/>
		<reference ref_id="1176899" ref_url="https://bugzilla.suse.com/1176899" source="BUGZILLA"/>
		<reference ref_id="1177977" ref_url="https://bugzilla.suse.com/1177977" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15673" ref_url="https://www.suse.com/security/cve/CVE-2020-15673/" source="CVE"/>
		<reference ref_id="CVE-2020-15676" ref_url="https://www.suse.com/security/cve/CVE-2020-15676/" source="CVE"/>
		<reference ref_id="CVE-2020-15677" ref_url="https://www.suse.com/security/cve/CVE-2020-15677/" source="CVE"/>
		<reference ref_id="CVE-2020-15678" ref_url="https://www.suse.com/security/cve/CVE-2020-15678/" source="CVE"/>
		<reference ref_id="CVE-2020-15683" ref_url="https://www.suse.com/security/cve/CVE-2020-15683/" source="CVE"/>
		<reference ref_id="CVE-2020-15969" ref_url="https://www.suse.com/security/cve/CVE-2020-15969/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3091-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007671.html" source="SUSE-SU"/>
		<description>
This update for MozillaThunderbird and mozilla-nspr fixes the following issues:

- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
  * new: MailExtensions: messageDisplayScripts API added
  * changed: Yahoo and AOL mail users using password authentication will be migrated to OAuth2
  * changed: MailExtensions: messageDisplay APIs extended to support multiple selected messages
  * changed: MailExtensions: compose.begin functions now support creating a message with attachments
  * fixed: Thunderbird could freeze when updating global search index
  * fixed: Multiple issues with handling of self-signed SSL certificates addressed
  * fixed: Recipient address fields in compose window could expand to fill all available space
  * fixed: Inserting emoji characters in message compose window caused unexpected behavior
  * fixed: Button to restore default folder icon color was not keyboard accessible
  * fixed: Various keyboard navigation fixes
  * fixed: Various color-related theme fixes
  * fixed: MailExtensions: Updating attachments with onBeforeSend.addListener() did not work
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 Use-after-free in usersctp
  * CVE-2020-15683 Memory safety bugs fixed in Thunderbird 78.4
- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP message status icons were not visible in message header pane
  * Creating a new calendar event did not require an event title
- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 Download origin spoofing via redirect
  * CVE-2020-15676 XSS when pasting attacker-controlled data into a contenteditable element
  * CVE-2020-15678 When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after- free scenario
  * CVE-2020-15673 Memory safety bugs fixed in Thunderbird 78.3

- update mozilla-nspr to version 4.25.1
  * The macOS platform code for shared library loading was
    changed to support macOS 11.
  * Dependency needed for the MozillaThunderbird udpate
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-29"/>
	<updated date="2020-10-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174230">SUSE bug 1174230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176384">SUSE bug 1176384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176756">SUSE bug 1176756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176899">SUSE bug 1176899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177977">SUSE bug 1177977</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15673/">CVE-2020-15673</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15676/">CVE-2020-15676</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15677/">CVE-2020-15677</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15678/">CVE-2020-15678</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15683/">CVE-2020-15683</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15969/">CVE-2020-15969</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492703" comment="mozilla-nspr-4.25.1-3.15.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492704" comment="mozilla-nspr-32bit-4.25.1-3.15.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492705" comment="mozilla-nspr-devel-4.25.1-3.15.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137944" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173902" ref_url="https://bugzilla.suse.com/1173902" source="BUGZILLA"/>
		<reference ref_id="1173994" ref_url="https://bugzilla.suse.com/1173994" source="BUGZILLA"/>
		<reference ref_id="1177613" ref_url="https://bugzilla.suse.com/1177613" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14318" ref_url="https://www.suse.com/security/cve/CVE-2020-14318/" source="CVE"/>
		<reference ref_id="CVE-2020-14323" ref_url="https://www.suse.com/security/cve/CVE-2020-14323/" source="CVE"/>
		<reference ref_id="CVE-2020-14383" ref_url="https://www.suse.com/security/cve/CVE-2020-14383/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007675.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613).
- CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994).
- CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-29"/>
	<updated date="2020-10-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173902">SUSE bug 1173902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173994">SUSE bug 1173994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177613">SUSE bug 1177613</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14318/">CVE-2020-14318</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14323/">CVE-2020-14323</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14383/">CVE-2020-14383</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492706" comment="libdcerpc-binding0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492707" comment="libdcerpc-binding0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492708" comment="libdcerpc-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492709" comment="libdcerpc-samr-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492710" comment="libdcerpc-samr0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492711" comment="libdcerpc0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492712" comment="libdcerpc0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492713" comment="libndr-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492714" comment="libndr-krb5pac-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492715" comment="libndr-krb5pac0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492716" comment="libndr-krb5pac0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492717" comment="libndr-nbt-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492718" comment="libndr-nbt0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492719" comment="libndr-nbt0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492720" comment="libndr-standard-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492721" comment="libndr-standard0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492722" comment="libndr-standard0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492723" comment="libndr0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492724" comment="libndr0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492725" comment="libnetapi-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492726" comment="libnetapi0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492727" comment="libnetapi0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492728" comment="libsamba-credentials-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492729" comment="libsamba-credentials0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492730" comment="libsamba-credentials0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492731" comment="libsamba-errors-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492732" comment="libsamba-errors0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492733" comment="libsamba-errors0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492734" comment="libsamba-hostconfig-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492735" comment="libsamba-hostconfig0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492736" comment="libsamba-hostconfig0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492737" comment="libsamba-passdb-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492738" comment="libsamba-passdb0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492739" comment="libsamba-passdb0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492740" comment="libsamba-policy-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492741" comment="libsamba-policy-python3-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492742" comment="libsamba-policy0-python3-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492743" comment="libsamba-util-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492744" comment="libsamba-util0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492745" comment="libsamba-util0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492746" comment="libsamdb-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492747" comment="libsamdb0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492748" comment="libsamdb0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492749" comment="libsmbclient-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492750" comment="libsmbclient0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492751" comment="libsmbconf-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492752" comment="libsmbconf0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492753" comment="libsmbconf0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492754" comment="libsmbldap-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492755" comment="libsmbldap2-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492756" comment="libsmbldap2-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492757" comment="libtevent-util-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492758" comment="libtevent-util0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492759" comment="libtevent-util0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492760" comment="libwbclient-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492761" comment="libwbclient0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492762" comment="libwbclient0-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492763" comment="samba-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492764" comment="samba-client-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492765" comment="samba-core-devel-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492766" comment="samba-libs-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492767" comment="samba-libs-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492768" comment="samba-libs-python3-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492769" comment="samba-python3-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492770" comment="samba-winbind-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492771" comment="samba-winbind-32bit-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137945" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177211" ref_url="https://bugzilla.suse.com/1177211" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26116" ref_url="https://www.suse.com/security/cve/CVE-2020-26116/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007679.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- bsc#1177211 (CVE-2020-26116) no longer allowing special characters in the method parameter 
  of HTTPConnection.putrequest in httplib, stopping injection of headers.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-02"/>
	<updated date="2020-11-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177211">SUSE bug 1177211</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26116/">CVE-2020-26116</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492772" comment="libpython2_7-1_0-2.7.17-7.44.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492773" comment="python-2.7.17-7.44.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492774" comment="python-base-2.7.17-7.44.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137946" version="1" class="patch">
	<metadata>
		<title>Security update for apache-commons-httpclient (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178171" ref_url="https://bugzilla.suse.com/1178171" source="BUGZILLA"/>
		<reference ref_id="945190" ref_url="https://bugzilla.suse.com/945190" source="BUGZILLA"/>
		<reference ref_id="CVE-2014-3577" ref_url="https://www.suse.com/security/cve/CVE-2014-3577/" source="CVE"/>
		<reference ref_id="CVE-2015-5262" ref_url="https://www.suse.com/security/cve/CVE-2015-5262/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3151-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007690.html" source="SUSE-SU"/>
		<description>
This update for apache-commons-httpclient fixes the following issues:

- http/conn/ssl/SSLConnectionSocketFactory.java ignores the
  http.socket.timeout configuration setting during an SSL handshake,
  which allows remote attackers to cause a denial of service (HTTPS
  call hang) via unspecified vectors. [bsc#945190, CVE-2015-5262]
- org.apache.http.conn.ssl.AbstractVerifier does not properly
  verify that the server hostname matches a domain name in the
  subject's Common Name (CN) or subjectAltName field of the X.509
  certificate, which allows MITM attackers to spoof SSL servers
  via a 'CN=' string in a field in the distinguished name (DN)
  of a certificate. [bsc#1178171, CVE-2014-3577]
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-04"/>
	<updated date="2020-11-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178171">SUSE bug 1178171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945190">SUSE bug 945190</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2014-3577/">CVE-2014-3577</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-5262/">CVE-2015-5262</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492775" comment="apache-commons-httpclient-3.1-4.3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137947" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177895" ref_url="https://bugzilla.suse.com/1177895" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27153" ref_url="https://www.suse.com/security/cve/CVE-2020-27153/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007701.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2020-27153: Fixed possible crash on disconnect (bsc#1177895).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177895">SUSE bug 1177895</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-27153/">CVE-2020-27153</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492776" comment="libbluetooth3-5.48-5.28.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137948" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175204" ref_url="https://bugzilla.suse.com/1175204" source="BUGZILLA"/>
		<reference ref_id="1176908" ref_url="https://bugzilla.suse.com/1176908" source="BUGZILLA"/>
		<reference ref_id="1176909" ref_url="https://bugzilla.suse.com/1176909" source="BUGZILLA"/>
		<reference ref_id="1176910" ref_url="https://bugzilla.suse.com/1176910" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-17498" ref_url="https://www.suse.com/security/cve/CVE-2020-17498/" source="CVE"/>
		<reference ref_id="CVE-2020-25862" ref_url="https://www.suse.com/security/cve/CVE-2020-25862/" source="CVE"/>
		<reference ref_id="CVE-2020-25863" ref_url="https://www.suse.com/security/cve/CVE-2020-25863/" source="CVE"/>
		<reference ref_id="CVE-2020-25866" ref_url="https://www.suse.com/security/cve/CVE-2020-25866/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007700.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

- Update to wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (bsc#1176908)
  * CVE-2020-25862: TCP dissector crash (bsc#1176909)
  * CVE-2020-25866: BLIP dissector crash (bsc#1176910)
  * CVE-2020-17498: Kafka dissector crash (bsc#1175204)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175204">SUSE bug 1175204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176908">SUSE bug 1176908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176909">SUSE bug 1176909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176910">SUSE bug 1176910</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-17498/">CVE-2020-17498</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25862/">CVE-2020-25862</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25863/">CVE-2020-25863</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25866/">CVE-2020-25866</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492777" comment="libwireshark13-3.2.7-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492778" comment="libwiretap10-3.2.7-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492779" comment="libwsutil11-3.2.7-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492780" comment="wireshark-3.2.7-3.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137949" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159670" ref_url="https://bugzilla.suse.com/1159670" source="BUGZILLA"/>
		<reference ref_id="1175987" ref_url="https://bugzilla.suse.com/1175987" source="BUGZILLA"/>
		<reference ref_id="1176024" ref_url="https://bugzilla.suse.com/1176024" source="BUGZILLA"/>
		<reference ref_id="1176294" ref_url="https://bugzilla.suse.com/1176294" source="BUGZILLA"/>
		<reference ref_id="1176397" ref_url="https://bugzilla.suse.com/1176397" source="BUGZILLA"/>
		<reference ref_id="1177867" ref_url="https://bugzilla.suse.com/1177867" source="BUGZILLA"/>
		<reference ref_id="1178319" ref_url="https://bugzilla.suse.com/1178319" source="BUGZILLA"/>
		<reference ref_id="1178361" ref_url="https://bugzilla.suse.com/1178361" source="BUGZILLA"/>
		<reference ref_id="1178362" ref_url="https://bugzilla.suse.com/1178362" source="BUGZILLA"/>
		<reference ref_id="1178485" ref_url="https://bugzilla.suse.com/1178485" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-16846" ref_url="https://www.suse.com/security/cve/CVE-2020-16846/" source="CVE"/>
		<reference ref_id="CVE-2020-17490" ref_url="https://www.suse.com/security/cve/CVE-2020-17490/" source="CVE"/>
		<reference ref_id="CVE-2020-25592" ref_url="https://www.suse.com/security/cve/CVE-2020-25592/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007724.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string (bsc#1178485)
- Properly validate eauth credentials and tokens on SSH calls made by Salt API 
  (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846)
- Fix disk.blkid to avoid unexpected keyword argument '__pub_user'. (bsc#1177867)
- Ensure virt.update stop_on_reboot is updated with its default value.
- Do not break package building for systemd OSes.
- Drop wrong mock from chroot unit test.
- Support systemd versions with dot. (bsc#1176294)
- Fix for grains.test_core unit test.
- Fix file/directory user and group ownership containing UTF-8 characters. (bsc#1176024)
- Several changes to virtualization:
  * Fix virt update when cpu and memory are changed.
  * Memory Tuning GSoC.
  * Properly fix memory setting regression in virt.update.
  * Expose libvirt on_reboot in virt states.
- Support transactional systems (MicroOS).
- zypperpkg module ignores retcode 104 for search(). (bsc#1159670)
- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding file or block disk. (bsc#1175987)
- Invalidate file list cache when cache file modified time is in the future. (bsc#1176397)
- Prevent import errors when running test_btrfs unit tests
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-06"/>
	<updated date="2020-11-06"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1159670">SUSE bug 1159670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175987">SUSE bug 1175987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176024">SUSE bug 1176024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176294">SUSE bug 1176294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176397">SUSE bug 1176397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177867">SUSE bug 1177867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178319">SUSE bug 1178319</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178361">SUSE bug 1178361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178362">SUSE bug 1178362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178485">SUSE bug 1178485</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16846/">CVE-2020-16846</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-17490/">CVE-2020-17490</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25592/">CVE-2020-25592</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492781" comment="python3-salt-3000-6.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492782" comment="salt-3000-6.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492783" comment="salt-bash-completion-3000-6.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492784" comment="salt-doc-3000-6.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492785" comment="salt-minion-3000-6.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492786" comment="salt-zsh-completion-3000-6.51.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137950" version="1" class="patch">
	<metadata>
		<title>Security update for zeromq (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176116" ref_url="https://bugzilla.suse.com/1176116" source="BUGZILLA"/>
		<reference ref_id="1176256" ref_url="https://bugzilla.suse.com/1176256" source="BUGZILLA"/>
		<reference ref_id="1176257" ref_url="https://bugzilla.suse.com/1176257" source="BUGZILLA"/>
		<reference ref_id="1176258" ref_url="https://bugzilla.suse.com/1176258" source="BUGZILLA"/>
		<reference ref_id="1176259" ref_url="https://bugzilla.suse.com/1176259" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15166" ref_url="https://www.suse.com/security/cve/CVE-2020-15166/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007741.html" source="SUSE-SU"/>
		<description>
This update for zeromq fixes the following issues:

- CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service (bsc#1176116).
- Fixed a heap overflow when receiving malformed ZMTP v1 packets (bsc#1176256)
- Fixed a memory leak in client induced by malicious server(s) without CURVE/ZAP (bsc#1176257)
- Fixed memory leak when processing PUB messages with metadata (bsc#1176259)
- Fixed a stack overflow in PUB/XPUB subscription store (bsc#1176258)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-10"/>
	<updated date="2020-11-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1176116">SUSE bug 1176116</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176256">SUSE bug 1176256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176257">SUSE bug 1176257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176258">SUSE bug 1176258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176259">SUSE bug 1176259</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15166/">CVE-2020-15166</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492787" comment="libunwind-1.2.1-4.2.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492788" comment="libunwind-32bit-1.2.1-4.2.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492789" comment="libunwind-devel-1.2.1-4.2.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492790" comment="libzmq5-4.2.3-3.15.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492791" comment="libzmq5-32bit-4.2.3-3.15.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492792" comment="zeromq-devel-4.2.3-3.15.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137951" version="1" class="patch">
	<metadata>
		<title>Security update for python-waitress (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160790" ref_url="https://bugzilla.suse.com/1160790" source="BUGZILLA"/>
		<reference ref_id="1161088" ref_url="https://bugzilla.suse.com/1161088" source="BUGZILLA"/>
		<reference ref_id="1161089" ref_url="https://bugzilla.suse.com/1161089" source="BUGZILLA"/>
		<reference ref_id="1161670" ref_url="https://bugzilla.suse.com/1161670" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16785" ref_url="https://www.suse.com/security/cve/CVE-2019-16785/" source="CVE"/>
		<reference ref_id="CVE-2019-16786" ref_url="https://www.suse.com/security/cve/CVE-2019-16786/" source="CVE"/>
		<reference ref_id="CVE-2019-16789" ref_url="https://www.suse.com/security/cve/CVE-2019-16789/" source="CVE"/>
		<reference ref_id="CVE-2019-16792" ref_url="https://www.suse.com/security/cve/CVE-2019-16792/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007743.html" source="SUSE-SU"/>
		<description>
This update for python-waitress to 1.4.3 fixes the following security issues:

- CVE-2019-16785: HTTP request smuggling through LF vs CRLF handling (bsc#1161088).
- CVE-2019-16786: HTTP request smuggling through invalid Transfer-Encoding (bsc#1161089).
- CVE-2019-16789: HTTP request smuggling through invalid whitespace characters (bsc#1160790).
- CVE-2019-16792: HTTP request smuggling by sending the Content-Length header twice (bsc#1161670).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-10"/>
	<updated date="2020-11-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1160790">SUSE bug 1160790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161088">SUSE bug 1161088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161089">SUSE bug 1161089</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161670">SUSE bug 1161670</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16785/">CVE-2019-16785</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16786/">CVE-2019-16786</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16789/">CVE-2019-16789</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16792/">CVE-2019-16792</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492793" comment="python3-waitress-1.4.3-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137952" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1055014" ref_url="https://bugzilla.suse.com/1055014" source="BUGZILLA"/>
		<reference ref_id="1061843" ref_url="https://bugzilla.suse.com/1061843" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066382" ref_url="https://bugzilla.suse.com/1066382" source="BUGZILLA"/>
		<reference ref_id="1077428" ref_url="https://bugzilla.suse.com/1077428" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1131277" ref_url="https://bugzilla.suse.com/1131277" source="BUGZILLA"/>
		<reference ref_id="1134760" ref_url="https://bugzilla.suse.com/1134760" source="BUGZILLA"/>
		<reference ref_id="1170415" ref_url="https://bugzilla.suse.com/1170415" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1173432" ref_url="https://bugzilla.suse.com/1173432" source="BUGZILLA"/>
		<reference ref_id="1174748" ref_url="https://bugzilla.suse.com/1174748" source="BUGZILLA"/>
		<reference ref_id="1176354" ref_url="https://bugzilla.suse.com/1176354" source="BUGZILLA"/>
		<reference ref_id="1176485" ref_url="https://bugzilla.suse.com/1176485" source="BUGZILLA"/>
		<reference ref_id="1176560" ref_url="https://bugzilla.suse.com/1176560" source="BUGZILLA"/>
		<reference ref_id="1176713" ref_url="https://bugzilla.suse.com/1176713" source="BUGZILLA"/>
		<reference ref_id="1176723" ref_url="https://bugzilla.suse.com/1176723" source="BUGZILLA"/>
		<reference ref_id="1177086" ref_url="https://bugzilla.suse.com/1177086" source="BUGZILLA"/>
		<reference ref_id="1177101" ref_url="https://bugzilla.suse.com/1177101" source="BUGZILLA"/>
		<reference ref_id="1177271" ref_url="https://bugzilla.suse.com/1177271" source="BUGZILLA"/>
		<reference ref_id="1177281" ref_url="https://bugzilla.suse.com/1177281" source="BUGZILLA"/>
		<reference ref_id="1177410" ref_url="https://bugzilla.suse.com/1177410" source="BUGZILLA"/>
		<reference ref_id="1177411" ref_url="https://bugzilla.suse.com/1177411" source="BUGZILLA"/>
		<reference ref_id="1177470" ref_url="https://bugzilla.suse.com/1177470" source="BUGZILLA"/>
		<reference ref_id="1177687" ref_url="https://bugzilla.suse.com/1177687" source="BUGZILLA"/>
		<reference ref_id="1177719" ref_url="https://bugzilla.suse.com/1177719" source="BUGZILLA"/>
		<reference ref_id="1177740" ref_url="https://bugzilla.suse.com/1177740" source="BUGZILLA"/>
		<reference ref_id="1177749" ref_url="https://bugzilla.suse.com/1177749" source="BUGZILLA"/>
		<reference ref_id="1177750" ref_url="https://bugzilla.suse.com/1177750" source="BUGZILLA"/>
		<reference ref_id="1177753" ref_url="https://bugzilla.suse.com/1177753" source="BUGZILLA"/>
		<reference ref_id="1177754" ref_url="https://bugzilla.suse.com/1177754" source="BUGZILLA"/>
		<reference ref_id="1177755" ref_url="https://bugzilla.suse.com/1177755" source="BUGZILLA"/>
		<reference ref_id="1177766" ref_url="https://bugzilla.suse.com/1177766" source="BUGZILLA"/>
		<reference ref_id="1177855" ref_url="https://bugzilla.suse.com/1177855" source="BUGZILLA"/>
		<reference ref_id="1177856" ref_url="https://bugzilla.suse.com/1177856" source="BUGZILLA"/>
		<reference ref_id="1177861" ref_url="https://bugzilla.suse.com/1177861" source="BUGZILLA"/>
		<reference ref_id="1178003" ref_url="https://bugzilla.suse.com/1178003" source="BUGZILLA"/>
		<reference ref_id="1178027" ref_url="https://bugzilla.suse.com/1178027" source="BUGZILLA"/>
		<reference ref_id="1178166" ref_url="https://bugzilla.suse.com/1178166" source="BUGZILLA"/>
		<reference ref_id="1178185" ref_url="https://bugzilla.suse.com/1178185" source="BUGZILLA"/>
		<reference ref_id="1178187" ref_url="https://bugzilla.suse.com/1178187" source="BUGZILLA"/>
		<reference ref_id="1178188" ref_url="https://bugzilla.suse.com/1178188" source="BUGZILLA"/>
		<reference ref_id="1178202" ref_url="https://bugzilla.suse.com/1178202" source="BUGZILLA"/>
		<reference ref_id="1178234" ref_url="https://bugzilla.suse.com/1178234" source="BUGZILLA"/>
		<reference ref_id="1178330" ref_url="https://bugzilla.suse.com/1178330" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0430" ref_url="https://www.suse.com/security/cve/CVE-2020-0430/" source="CVE"/>
		<reference ref_id="CVE-2020-14351" ref_url="https://www.suse.com/security/cve/CVE-2020-14351/" source="CVE"/>
		<reference ref_id="CVE-2020-16120" ref_url="https://www.suse.com/security/cve/CVE-2020-16120/" source="CVE"/>
		<reference ref_id="CVE-2020-25285" ref_url="https://www.suse.com/security/cve/CVE-2020-25285/" source="CVE"/>
		<reference ref_id="CVE-2020-25656" ref_url="https://www.suse.com/security/cve/CVE-2020-25656/" source="CVE"/>
		<reference ref_id="CVE-2020-27673" ref_url="https://www.suse.com/security/cve/CVE-2020-27673/" source="CVE"/>
		<reference ref_id="CVE-2020-27675" ref_url="https://www.suse.com/security/cve/CVE-2020-27675/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007748.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bug fixes.


The following security bugs were fixed:

- CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766).
- CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485).
- CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723).
- CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086).
- CVE-2020-16120: Fixed a permissions issue in ovl_path_open() (bsc#1177470).
- CVE-2020-8694: Restricted energy meter to root access (bsc#1170415).
- CVE-2020-27673: Fixed an issue where rogue guests could have caused denial of service of Dom0 via high frequency events (XSA-332 bsc#1177411)
- CVE-2020-27675: Fixed a race condition in event handler which may crash dom0 (XSA-331 bsc#1177410).

The following non-security bugs were fixed:

- ALSA: bebob: potential info leak in hwdep_read() (git-fixes).
- ALSA: compress_offload: remove redundant initialization (git-fixes).
- ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).
- ALSA: core: pcm: simplify locking for timers (git-fixes).
- ALSA: core: timer: clarify operator precedence (git-fixes).
- ALSA: core: timer: remove redundant assignment (git-fixes).
- ALSA: ctl: Workaround for lockdep warning wrt card-&gt;ctl_files_rwlock (git-fixes).
- ALSA: hda - Do not register a cb func if it is registered already (git-fixes).
- ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes).
- ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes).
- ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes).
- ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes).
- ALSA: hda: use semicolons rather than commas to separate statements (git-fixes).
- ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes).
- ALSA: rawmidi: (cosmetic) align function parameters (git-fixes).
- ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes).
- ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes).
- ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes).
- ALSA: usb-audio: fix spelling mistake 'Frequence' -&gt; 'Frequency' (git-fixes).
- ASoC: qcom: lpass-cpu: fix concurrency issue (git-fixes).
- ASoC: qcom: lpass-platform: fix memory leak (git-fixes).
- ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() (git-fixes).
- ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path (git-fixes).
- ath10k: provide survey info as accumulated data (git-fixes).
- ath6kl: prevent potential array overflow in ath6kl_add_new_sta() (git-fixes).
- ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() (git-fixes).
- ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() (git-fixes).
- backlight: sky81452-backlight: Fix refcount imbalance on error (git-fixes).
- blk-mq: order adding requests to hctx-&gt;dispatch and checking SCHED_RESTART (bsc#1177750).
- block: ensure bdi-&gt;io_pages is always initialized (bsc#1177749).
- Bluetooth: MGMT: Fix not checking if BT_HS is enabled (git-fixes).
- Bluetooth: Only mark socket zapped after unlocking (git-fixes).
- bnxt: do not enable NAPI until rings are ready (networking-stable-20_09_11).
- bnxt_en: Check for zero dir entries in NVRAM (networking-stable-20_09_11).
- brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach (git-fixes).
- brcmfmac: check ndev pointer (git-fixes).
- brcmsmac: fix memory leak in wlc_phy_attach_lcnphy (git-fixes).
- btrfs: check the right error variable in btrfs_del_dir_entries_in_log (bsc#1177687).
- btrfs: do not force read-only after error in drop snapshot (bsc#1176354).
- btrfs: do not set the full sync flag on the inode during page release (bsc#1177687).
- btrfs: fix incorrect updating of log root tree (bsc#1177687).
- btrfs: fix race between page release and a fast fsync (bsc#1177687).
- btrfs: only commit delayed items at fsync if we are logging a directory (bsc#1177687).
- btrfs: only commit the delayed inode when doing a full fsync (bsc#1177687).
- btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations (bsc#1177856).
- btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode (bsc#1177855).
- btrfs: reduce contention on log trees when logging checksums (bsc#1177687).
- btrfs: release old extent maps during page release (bsc#1177687).
- btrfs: remove no longer needed use of log_writers for the log root tree (bsc#1177687).
- btrfs: remove root usage from can_overcommit (bsc#1131277).
- btrfs: stop incremening log_batch for the log root tree when syncing log (bsc#1177687).
- btrfs: take overcommit into account in inc_block_group_ro (bsc#1176560).
- btrfs: tree-checker: fix false alert caused by legacy btrfs root item (bsc#1177861).
- can: c_can: reg_map_{c,d}_can: mark as __maybe_unused (git-fixes).
- can: flexcan: flexcan_chip_stop(): add error handling and propagate error value (git-fixes).
- can: softing: softing_card_shutdown(): add braces around empty body in an 'if' statement (git-fixes).
- ceph: fix memory leak in ceph_cleanup_snapid_map() (bsc#1178234).
- ceph: map snapid to anonymous bdev ID (bsc#1178234).
- ceph: promote to unsigned long long before shifting (bsc#1178187).
- clk: at91: clk-main: update key before writing AT91_CKGR_MOR (git-fixes).
- clk: at91: remove the checking of parent_name (git-fixes).
- clk: bcm2835: add missing release if devm_clk_hw_register fails (git-fixes).
- clk: imx8mq: Fix usdhc parents order (git-fixes).
- coredump: fix crash when umh is disabled (bsc#1177753).
- crypto: algif_skcipher - EBUSY on aio should be an error (git-fixes).
- crypto: ccp - fix error handling (git-fixes).
- crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call (git-fixes).
- crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() (git-fixes).
- crypto: omap-sham - fix digcnt register handling with export/import (git-fixes).
- cxl: Rework error message for incompatible slots (bsc#1055014 git-fixes).
- cypto: mediatek - fix leaks in mtk_desc_ring_alloc (git-fixes).
- Disable ipa-clones dump for KMP builds (bsc#1178330) The feature is not really useful for KMP, and rather confusing, so let's disable it at building out-of-tree codes
- dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status (git-fixes).
- drm/amdgpu: prevent double kfree ttm-&gt;sg (git-fixes).
- drm/gma500: fix error check (git-fixes).
- drm/msm: Drop debug print in _dpu_crtc_setup_lm_bounds() (git-fixes).
- drm/nouveau/mem: guard against NULL pointer access in mem_del (git-fixes).
- EDAC/i5100: Fix error handling order in i5100_init_one() (bsc#1112178).
- eeprom: at25: set minimum read/write access stride to 1 (git-fixes).
- Fix use after free in get_capset_info callback (git-fixes).
- gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY (networking-stable-20_08_24).
- gtp: add GTPA_LINK info to msg sent to userspace (networking-stable-20_09_11).
- HID: roccat: add bounds checking in kone_sysfs_write_settings() (git-fixes).
- HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery (git-fixes).
- i2c: imx: Fix external abort on interrupt in exit paths (git-fixes).
- ibmveth: Identify ingress large send packets (bsc#1178185 ltc#188897).
- ibmveth: Switch order of ibmveth_helper calls (bsc#1061843 git-fixes).
- ibmvnic: fix ibmvnic_set_mac (bsc#1066382 ltc#160943 git-fixes).
- ibmvnic: save changed mac address to adapter-&gt;mac_addr (bsc#1134760 ltc#177449 git-fixes).
- iio:accel:bma180: Fix use of true when should be iio_shared_by enum (git-fixes).
- iio:adc:max1118 Fix alignment of timestamp and data leak issues (git-fixes).
- iio:adc:ti-adc0832 Fix alignment issue with timestamp (git-fixes).
- iio:adc:ti-adc12138 Fix alignment issue with timestamp (git-fixes).
- iio:dac:ad5592r: Fix use of true for IIO_SHARED_BY_TYPE (git-fixes).
- iio:gyro:itg3200: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:light:si1145: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:magn:hmc5843: Fix passing true where iio_shared_by enum required (git-fixes).
- ima: Remove semicolon at the end of ima_get_binary_runtime_size() (git-fixes).
- include/linux/swapops.h: correct guards for non_swap_entry() (git-fixes (mm/swap)).
- Input: ep93xx_keypad - fix handling of platform_get_irq() error (git-fixes).
- Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 (git-fixes).
- Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() (git-fixes).
- Input: omap4-keypad - fix handling of platform_get_irq() error (git-fixes).
- Input: sun4i-ps2 - fix handling of platform_get_irq() error (git-fixes).
- Input: twl4030_keypad - fix handling of platform_get_irq() error (git-fixes).
- iomap: Make sure iomap_end is called after iomap_begin (bsc#1177754).
- ip: fix tos reflection in ack and reset packets (networking-stable-20_09_24).
- ipv4: Restore flowi4_oif update before call to xfrm_lookup_route (git-fixes).
- iwlwifi: mvm: split a print to avoid a WARNING in ROC (git-fixes).
- kbuild: enforce -Werror=return-type (bsc#1177281).
- leds: mt6323: move period calculation (git-fixes).
- lib/crc32.c: fix trivial typo in preprocessor condition (git-fixes).
- libceph: clear con-&gt;out_msg on Policy::stateful_server faults (bsc#1178188).
- livepatch: Test if -fdump-ipa-clones is really available As of now we add -fdump-ipa-clones unconditionally. It does not cause a trouble if the kernel is build with the supported toolchain. Otherwise it could fail easily. Do the correct thing and test for the availability.
- mac80211: handle lack of sband-&gt;bitrates in rates (git-fixes).
- mailbox: avoid timer start from callback (git-fixes).
- media: ati_remote: sanity check for both endpoints (git-fixes).
- media: bdisp: Fix runtime PM imbalance on error (git-fixes).
- media: exynos4-is: Fix a reference count leak (git-fixes).
- media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync (git-fixes).
- media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync (git-fixes).
- media: firewire: fix memory leak (git-fixes).
- media: m5mols: Check function pointer in m5mols_sensor_power (git-fixes).
- media: media/pci: prevent memory leak in bttv_probe (git-fixes).
- media: omap3isp: Fix memleak in isp_probe (git-fixes).
- media: platform: fcp: Fix a reference count leak (git-fixes).
- media: platform: s3c-camif: Fix runtime PM imbalance on error (git-fixes).
- media: platform: sti: hva: Fix runtime PM imbalance on error (git-fixes).
- media: Revert 'media: exynos4-is: Add missed check for pinctrl_lookup_state()' (git-fixes).
- media: s5p-mfc: Fix a reference count leak (git-fixes).
- media: saa7134: avoid a shift overflow (git-fixes).
- media: st-delta: Fix reference count leak in delta_run_work (git-fixes).
- media: sti: Fix reference count leaks (git-fixes).
- media: tc358743: initialize variable (git-fixes).
- media: ti-vpe: Fix a missing check and reference count leak (git-fixes).
- media: tuner-simple: fix regression in simple_set_radio_freq (git-fixes).
- media: usbtv: Fix refcounting mixup (git-fixes).
- media: uvcvideo: Ensure all probed info is returned to v4l2 (git-fixes).
- media: vsp1: Fix runtime PM imbalance on error (git-fixes).
- memory: fsl-corenet-cf: Fix handling of platform_get_irq() error (git-fixes).
- memory: omap-gpmc: Fix a couple off by ones (git-fixes).
- mfd: sm501: Fix leaks in probe() (git-fixes).
- mic: vop: copy data to kernel space then write to io memory (git-fixes).
- misc: mic: scif: Fix error handling path (git-fixes).
- misc: rtsx: Fix memory leak in rtsx_pci_probe (git-fixes).
- misc: vop: add round_up(x,4) for vring_size to avoid kernel panic (git-fixes).
- mlx5 PPC ringsize workaround (bsc#1173432).
- mlx5: remove support for ib_get_vector_affinity (bsc#1174748).
- mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa (git-fixes (mm/numa)).
- mm/huge_memory.c: use head to check huge zero page (git-fixes (mm/thp)).
- mm/ksm.c: do not WARN if page is still mapped in remove_stable_node() (git-fixes (mm/hugetlb)).
- mm/mempolicy.c: fix out of bounds write in mpol_parse_str() (git-fixes (mm/mempolicy)).
- mm/mempolicy.c: use match_string() helper to simplify the code (git-fixes (mm/mempolicy)).
- mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() (git-fixes (mm/writeback)).
- mm/page-writeback.c: improve arithmetic divisions (git-fixes (mm/writeback)).
- mm/page-writeback.c: use div64_ul() for u64-by-unsigned-long divide (git-fixes (mm/writeback)).
- mm/page_owner.c: remove drain_all_pages from init_early_allocated_pages (git-fixes (mm/debug)).
- mm/rmap: fixup copying of soft dirty and uffd ptes (git-fixes (mm/rmap)).
- mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: fix race condition in zs_destroy_pool (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: fix the migrated zspage statistics (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely (git-fixes (mm/zsmalloc)).
- mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() (git-fixes (mm/hugetlb)).
- mmc: sdio: Check for CISTPL_VERS_1 buffer size (git-fixes).
- Move upstreamed patches into sorted section
- mtd: lpddr: fix excessive stack usage with clang (git-fixes).
- mtd: mtdoops: Do not write panic data twice (git-fixes).
- mwifiex: do not call del_timer_sync() on uninitialized timer (git-fixes).
- mwifiex: Do not use GFP_KERNEL in atomic context (git-fixes).
- mwifiex: fix double free (git-fixes).
- mwifiex: remove function pointer check (git-fixes).
- mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO (git-fixes).
- net/mlx5e: Take common TIR context settings into a function (bsc#1177740).
- net/mlx5e: Turn on HW tunnel offload in all TIRs (bsc#1177740).
- net: disable netpoll on fresh napis (networking-stable-20_09_11).
- net: fec: Fix PHY init after phy_reset_after_clk_enable() (git-fixes).
- net: fec: Fix phy_device lookup for phy_reset_after_clk_enable() (git-fixes).
- net: Fix potential wrong skb-&gt;protocol in skb_vlan_untag() (networking-stable-20_08_24).
- net: hns: Fix memleak in hns_nic_dev_probe (networking-stable-20_09_11).
- net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC (networking-stable-20_09_24).
- net: phy: Avoid NPD upon phy_detach() when driver is unbound (networking-stable-20_09_24).
- net: qrtr: fix usage of idr in port assignment to socket (networking-stable-20_08_24).
- net: systemport: Fix memleak in bcm_sysport_probe (networking-stable-20_09_11).
- net: usb: dm9601: Add USB ID of Keenetic Plus DSL (networking-stable-20_09_11).
- net: usb: qmi_wwan: add Cellient MPL200 card (git-fixes).
- net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails (git-fixes).
- net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key() (git-fixes).
- netlabel: fix problems with mapping removal (networking-stable-20_09_11).
- nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() (git-fixes).
- nl80211: fix non-split wiphy information (git-fixes).
- NTB: hw: amd: fix an issue about leak system resources (git-fixes).
- nvme-rdma: fix crash due to incorrect cqe (bsc#1174748).
- nvme-rdma: fix crash when connect rejected (bsc#1174748).
- nvme: do not update disk info for multipathed device (bsc#1171558).
- platform/x86: mlx-platform: Remove PSU EEPROM configuration (git-fixes).
- powerpc/hwirq: Remove stale forward irq_chip declaration (bsc#1065729).
- powerpc/icp-hv: Fix missing of_node_put() in success path (bsc#1065729).
- powerpc/irq: Drop forward declaration of struct irqaction (bsc#1065729).
- powerpc/perf/hv-gpci: Fix starting index value (bsc#1065729).
- powerpc/powernv/dump: Fix race while processing OPAL dump (bsc#1065729).
- powerpc/powernv/elog: Fix race while processing OPAL error log event (bsc#1065729).
- powerpc/pseries: explicitly reschedule during drmem_lmb list traversal (bsc#1077428 ltc#163882 git-fixes).
- powerpc/pseries: Fix missing of_node_put() in rng_init() (bsc#1065729).
- powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation (bsc#1065729).
- pty: do tty_flip_buffer_push without port-&gt;lock in pty_write (git-fixes).
- pwm: lpss: Add range limit check for the base_unit register value (git-fixes).
- pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare() (git-fixes).
- ring-buffer: Return 0 on success from ring_buffer_resize() (git-fixes).
- rtl8xxxu: prevent potential memory leak (git-fixes).
- scsi: ibmvfc: Fix error return in ibmvfc_probe() (bsc#1065729).
- scsi: ibmvscsi: Fix potential race after loss of transport (bsc#1178166 ltc#188226).
- sctp: not disable bh in the whole sctp_get_port_local() (networking-stable-20_09_11).
- spi: fsl-espi: Only process interrupts for expected events (git-fixes).
- tg3: Fix soft lockup when tg3_reset_task() fails (networking-stable-20_09_11).
- tipc: fix memory leak caused by tipc_buf_append() (git-fixes).
- tipc: fix shutdown() of connection oriented socket (networking-stable-20_09_24).
- tipc: fix shutdown() of connectionless socket (networking-stable-20_09_11).
- tipc: fix the skb_unshare() in tipc_buf_append() (git-fixes).
- tipc: fix uninit skb-&gt;data in tipc_nl_compat_dumpit() (networking-stable-20_08_24).
- tipc: use skb_unshare() instead in tipc_buf_append() (networking-stable-20_09_24).
- tty: ipwireless: fix error handling (git-fixes).
- tty: serial: earlycon dependency (git-fixes).
- tty: serial: fsl_lpuart: fix lpuart32_poll_get_char (git-fixes).
- usb: cdc-acm: add quirk to blacklist ETAS ES58X devices (git-fixes).
- usb: cdc-acm: handle broken union descriptors (git-fixes).
- usb: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync() (git-fixes).
- usb: core: Solve race condition in anchor cleanup functions (git-fixes).
- usb: dwc2: Fix INTR OUT transfers in DDMA mode (git-fixes).
- usb: dwc2: Fix parameter type in function pointer prototype (git-fixes).
- usb: dwc3: core: add phy cleanup for probe error handling (git-fixes).
- usb: dwc3: core: do not trigger runtime pm when remove driver (git-fixes).
- usb: dwc3: ep0: Fix ZLP for OUT ep0 requests (git-fixes).
- usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets (git-fixes).
- usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above (git-fixes).
- usb: gadget: function: printer: fix use-after-free in __lock_acquire (git-fixes).
- usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well (git-fixes).
- usb: ohci: Default to per-port over-current protection (git-fixes).
- usb: serial: qcserial: fix altsetting probing (git-fixes).
- vfs: fix FIGETBSZ ioctl on an overlayfs file (bsc#1178202).
- video: fbdev: sis: fix null ptr dereference (git-fixes).
- video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error (git-fixes).
- VMCI: check return value of get_user_pages_fast() for errors (git-fixes).
- w1: mxc_w1: Fix timeout resolution problem leading to bus error (git-fixes).
- watchdog: iTCO_wdt: Export vendorsupport (bsc#1177101).
- watchdog: iTCO_wdt: Make ICH_RES_IO_SMI optional (bsc#1177101).
- wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 (git-fixes).
- writeback: Avoid skipping inode writeback (bsc#1177755).
- writeback: Fix sync livelock due to b_dirty_time processing (bsc#1177755).
- writeback: Protect inode-&gt;i_io_list with inode-&gt;i_lock (bsc#1177755).
- x86, fakenuma: Fix invalid starting node ID (git-fixes (mm/x86/fakenuma)).
- x86/apic: Unify duplicated local apic timer clockevent initialization (bsc#1112178).
- x86/fpu: Allow multiple bits in clearcpuid= parameter (bsc#1112178).
- x86/xen: disable Firmware First mode for correctable memory errors (bsc#1176713).
- xen/blkback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/events: add a new 'late EOI' evtchn framework (XSA-332 bsc#1177411).
- xen/events: add a proper barrier to 2-level uevent unmasking (XSA-332 bsc#1177411).
- xen/events: avoid removing an event channel while handling it (XSA-331 bsc#1177410).
- xen/events: block rogue events for some time (XSA-332 bsc#1177411).
- xen/events: defer eoi in case of excessive number of events (XSA-332 bsc#1177411).
- xen/events: do not use chip_data for legacy IRQs (XSA-332 bsc#1065600).
- xen/events: fix race in evtchn_fifo_unmask() (XSA-332 bsc#1177411).
- xen/events: switch user event channels to lateeoi model (XSA-332 bsc#1177411).
- xen/events: use a common cpu hotplug hook for event channels (XSA-332 bsc#1177411).
- xen/gntdev.c: Mark pages as dirty (bsc#1065600).
- xen/netback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/pciback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/scsiback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen: XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information (XSA-332 bsc#1065600).
- xfs: avoid infinite loop when cancelling CoW blocks after writeback failure (bsc#1178027).
- xfs: limit entries returned when counting fsmap records (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-10"/>
	<updated date="2020-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1055014">SUSE bug 1055014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061843">SUSE bug 1061843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066382">SUSE bug 1066382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077428">SUSE bug 1077428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131277">SUSE bug 1131277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134760">SUSE bug 1134760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170415">SUSE bug 1170415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173432">SUSE bug 1173432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174748">SUSE bug 1174748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176354">SUSE bug 1176354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176485">SUSE bug 1176485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176560">SUSE bug 1176560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176713">SUSE bug 1176713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176723">SUSE bug 1176723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177086">SUSE bug 1177086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177101">SUSE bug 1177101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177271">SUSE bug 1177271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177281">SUSE bug 1177281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177410">SUSE bug 1177410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177411">SUSE bug 1177411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177470">SUSE bug 1177470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177687">SUSE bug 1177687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177719">SUSE bug 1177719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177740">SUSE bug 1177740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177749">SUSE bug 1177749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177750">SUSE bug 1177750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177753">SUSE bug 1177753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177754">SUSE bug 1177754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177755">SUSE bug 1177755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177766">SUSE bug 1177766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177855">SUSE bug 1177855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177856">SUSE bug 1177856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177861">SUSE bug 1177861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178003">SUSE bug 1178003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178027">SUSE bug 1178027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178166">SUSE bug 1178166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178185">SUSE bug 1178185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178187">SUSE bug 1178187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178188">SUSE bug 1178188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178202">SUSE bug 1178202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178234">SUSE bug 1178234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178330">SUSE bug 1178330</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0430/">CVE-2020-0430</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14351/">CVE-2020-14351</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16120/">CVE-2020-16120</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25285/">CVE-2020-25285</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25656/">CVE-2020-25656</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27673/">CVE-2020-27673</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27675/">CVE-2020-27675</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492794" comment="kernel-default-4.12.14-197.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492795" comment="kernel-default-base-4.12.14-197.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492796" comment="kernel-default-devel-4.12.14-197.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492797" comment="kernel-default-man-4.12.14-197.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492798" comment="kernel-devel-4.12.14-197.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492799" comment="kernel-macros-4.12.14-197.67.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137953" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1170446" ref_url="https://bugzilla.suse.com/1170446" source="BUGZILLA"/>
		<reference ref_id="1173594" ref_url="https://bugzilla.suse.com/1173594" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8695" ref_url="https://www.suse.com/security/cve/CVE-2020-8695/" source="CVE"/>
		<reference ref_id="CVE-2020-8698" ref_url="https://www.suse.com/security/cve/CVE-2020-8698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007744.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

- Intel CPU Microcode updated to 20201027 prerelease
- CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)
- CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)

# New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10 
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  # Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-10"/>
	<updated date="2020-11-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1170446">SUSE bug 1170446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173594">SUSE bug 1173594</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8695/">CVE-2020-8695</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8698/">CVE-2020-8698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492800" comment="ucode-intel-20201027-3.33.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137954" version="1" class="patch">
	<metadata>
		<title>Security update for u-boot (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1134157" ref_url="https://bugzilla.suse.com/1134157" source="BUGZILLA"/>
		<reference ref_id="1134853" ref_url="https://bugzilla.suse.com/1134853" source="BUGZILLA"/>
		<reference ref_id="1143463" ref_url="https://bugzilla.suse.com/1143463" source="BUGZILLA"/>
		<reference ref_id="1143777" ref_url="https://bugzilla.suse.com/1143777" source="BUGZILLA"/>
		<reference ref_id="1143817" ref_url="https://bugzilla.suse.com/1143817" source="BUGZILLA"/>
		<reference ref_id="1143818" ref_url="https://bugzilla.suse.com/1143818" source="BUGZILLA"/>
		<reference ref_id="1143819" ref_url="https://bugzilla.suse.com/1143819" source="BUGZILLA"/>
		<reference ref_id="1143820" ref_url="https://bugzilla.suse.com/1143820" source="BUGZILLA"/>
		<reference ref_id="1143821" ref_url="https://bugzilla.suse.com/1143821" source="BUGZILLA"/>
		<reference ref_id="1143823" ref_url="https://bugzilla.suse.com/1143823" source="BUGZILLA"/>
		<reference ref_id="1143824" ref_url="https://bugzilla.suse.com/1143824" source="BUGZILLA"/>
		<reference ref_id="1143825" ref_url="https://bugzilla.suse.com/1143825" source="BUGZILLA"/>
		<reference ref_id="1143827" ref_url="https://bugzilla.suse.com/1143827" source="BUGZILLA"/>
		<reference ref_id="1143828" ref_url="https://bugzilla.suse.com/1143828" source="BUGZILLA"/>
		<reference ref_id="1143830" ref_url="https://bugzilla.suse.com/1143830" source="BUGZILLA"/>
		<reference ref_id="1143831" ref_url="https://bugzilla.suse.com/1143831" source="BUGZILLA"/>
		<reference ref_id="1162198" ref_url="https://bugzilla.suse.com/1162198" source="BUGZILLA"/>
		<reference ref_id="1167209" ref_url="https://bugzilla.suse.com/1167209" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11059" ref_url="https://www.suse.com/security/cve/CVE-2019-11059/" source="CVE"/>
		<reference ref_id="CVE-2019-11690" ref_url="https://www.suse.com/security/cve/CVE-2019-11690/" source="CVE"/>
		<reference ref_id="CVE-2019-13103" ref_url="https://www.suse.com/security/cve/CVE-2019-13103/" source="CVE"/>
		<reference ref_id="CVE-2019-14192" ref_url="https://www.suse.com/security/cve/CVE-2019-14192/" source="CVE"/>
		<reference ref_id="CVE-2019-14193" ref_url="https://www.suse.com/security/cve/CVE-2019-14193/" source="CVE"/>
		<reference ref_id="CVE-2019-14194" ref_url="https://www.suse.com/security/cve/CVE-2019-14194/" source="CVE"/>
		<reference ref_id="CVE-2019-14195" ref_url="https://www.suse.com/security/cve/CVE-2019-14195/" source="CVE"/>
		<reference ref_id="CVE-2019-14196" ref_url="https://www.suse.com/security/cve/CVE-2019-14196/" source="CVE"/>
		<reference ref_id="CVE-2019-14197" ref_url="https://www.suse.com/security/cve/CVE-2019-14197/" source="CVE"/>
		<reference ref_id="CVE-2019-14198" ref_url="https://www.suse.com/security/cve/CVE-2019-14198/" source="CVE"/>
		<reference ref_id="CVE-2019-14199" ref_url="https://www.suse.com/security/cve/CVE-2019-14199/" source="CVE"/>
		<reference ref_id="CVE-2019-14200" ref_url="https://www.suse.com/security/cve/CVE-2019-14200/" source="CVE"/>
		<reference ref_id="CVE-2019-14201" ref_url="https://www.suse.com/security/cve/CVE-2019-14201/" source="CVE"/>
		<reference ref_id="CVE-2019-14202" ref_url="https://www.suse.com/security/cve/CVE-2019-14202/" source="CVE"/>
		<reference ref_id="CVE-2019-14203" ref_url="https://www.suse.com/security/cve/CVE-2019-14203/" source="CVE"/>
		<reference ref_id="CVE-2019-14204" ref_url="https://www.suse.com/security/cve/CVE-2019-14204/" source="CVE"/>
		<reference ref_id="CVE-2020-10648" ref_url="https://www.suse.com/security/cve/CVE-2020-10648/" source="CVE"/>
		<reference ref_id="CVE-2020-8432" ref_url="https://www.suse.com/security/cve/CVE-2020-8432/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007758.html" source="SUSE-SU"/>
		<description>
This update for u-boot fixes the following issues:

CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827), 
CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-11"/>
	<updated date="2020-11-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1134157">SUSE bug 1134157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134853">SUSE bug 1134853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143463">SUSE bug 1143463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143777">SUSE bug 1143777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143817">SUSE bug 1143817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143818">SUSE bug 1143818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143819">SUSE bug 1143819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143820">SUSE bug 1143820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143821">SUSE bug 1143821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143823">SUSE bug 1143823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143824">SUSE bug 1143824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143825">SUSE bug 1143825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143827">SUSE bug 1143827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143828">SUSE bug 1143828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143830">SUSE bug 1143830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143831">SUSE bug 1143831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162198">SUSE bug 1162198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167209">SUSE bug 1167209</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-11059/">CVE-2019-11059</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11690/">CVE-2019-11690</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-13103/">CVE-2019-13103</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14192/">CVE-2019-14192</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14193/">CVE-2019-14193</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14194/">CVE-2019-14194</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14195/">CVE-2019-14195</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14196/">CVE-2019-14196</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14197/">CVE-2019-14197</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14198/">CVE-2019-14198</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14199/">CVE-2019-14199</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14200/">CVE-2019-14200</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14201/">CVE-2019-14201</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14202/">CVE-2019-14202</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14203/">CVE-2019-14203</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14204/">CVE-2019-14204</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-10648/">CVE-2020-10648</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8432/">CVE-2020-8432</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492801" comment="u-boot-rpi3-2019.01-7.10.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492802" comment="u-boot-tools-2019.01-7.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137955" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178387" ref_url="https://bugzilla.suse.com/1178387" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25692" ref_url="https://www.suse.com/security/cve/CVE-2020-25692/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007765.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules (bsc#1178387).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-12"/>
	<updated date="2020-11-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178387">SUSE bug 1178387</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25692/">CVE-2020-25692</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492803" comment="libldap-2_4-2-2.4.46-9.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492804" comment="libldap-2_4-2-32bit-2.4.46-9.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492805" comment="libldap-data-2.4.46-9.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492806" comment="openldap2-client-2.4.46-9.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492807" comment="openldap2-devel-2.4.46-9.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492808" comment="openldap2-devel-static-2.4.46-9.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137956" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178671" ref_url="https://bugzilla.suse.com/1178671" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12321" ref_url="https://www.suse.com/security/cve/CVE-2020-12321/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3330-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007778.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issue:

- CVE-2020-12321: Updated the Intel Bluetooth firmware for buffer overflow security bugs (bsc#1178671).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-16"/>
	<updated date="2020-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178671">SUSE bug 1178671</bugzilla>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12321/">CVE-2020-12321</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492809" comment="kernel-firmware-20200107-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492810" comment="ucode-amd-20200107-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137957" version="1" class="patch">
	<metadata>
		<title>Security update for systemd (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1084671" ref_url="https://bugzilla.suse.com/1084671" source="BUGZILLA"/>
		<reference ref_id="1092920" ref_url="https://bugzilla.suse.com/1092920" source="BUGZILLA"/>
		<reference ref_id="1106383" ref_url="https://bugzilla.suse.com/1106383" source="BUGZILLA"/>
		<reference ref_id="1133495" ref_url="https://bugzilla.suse.com/1133495" source="BUGZILLA"/>
		<reference ref_id="1151377" ref_url="https://bugzilla.suse.com/1151377" source="BUGZILLA"/>
		<reference ref_id="1154256" ref_url="https://bugzilla.suse.com/1154256" source="BUGZILLA"/>
		<reference ref_id="1155207" ref_url="https://bugzilla.suse.com/1155207" source="BUGZILLA"/>
		<reference ref_id="1155574" ref_url="https://bugzilla.suse.com/1155574" source="BUGZILLA"/>
		<reference ref_id="1156213" ref_url="https://bugzilla.suse.com/1156213" source="BUGZILLA"/>
		<reference ref_id="1156482" ref_url="https://bugzilla.suse.com/1156482" source="BUGZILLA"/>
		<reference ref_id="1158485" ref_url="https://bugzilla.suse.com/1158485" source="BUGZILLA"/>
		<reference ref_id="1159814" ref_url="https://bugzilla.suse.com/1159814" source="BUGZILLA"/>
		<reference ref_id="1161436" ref_url="https://bugzilla.suse.com/1161436" source="BUGZILLA"/>
		<reference ref_id="1162108" ref_url="https://bugzilla.suse.com/1162108" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20386" ref_url="https://www.suse.com/security/cve/CVE-2019-20386/" source="CVE"/>
		<reference ref_id="CVE-2020-1712" ref_url="https://www.suse.com/security/cve/CVE-2020-1712/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006455.html" source="SUSE-SU"/>
		<description>
This update for systemd fixes the following issues:

- CVE-2020-1712 (bsc#bsc#1162108)
  Fix a heap use-after-free vulnerability, when asynchronous
  Polkit queries were performed while handling Dbus messages. A local
  unprivileged attacker could have abused this flaw to crash systemd services or
  potentially execute code and elevate their privileges, by sending specially
  crafted Dbus messages.

- Use suse.pool.ntp.org server pool on SLE distros (jsc#SLE-7683)

- libblkid: open device in nonblock mode. (bsc#1084671)
- udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256)
- bus_open leak sd_event_source when udevadm trigger。 (bsc#1161436 CVE-2019-20386)
- fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (bsc#1133495 bsc#1159814)
- fileio: initialize errno to zero before we do fread()
- fileio: try to read one byte too much in read_full_stream()
- logind: consider 'greeter' sessions suitable as 'display' sessions of a user (bsc#1158485)
- logind: never elect a session that is stopping as display

- journal: include kmsg lines from the systemd process which exec()d us (#8078)
- udevd: don't use monitor after manager_exit()
- udevd: capitalize log messages in on_sigchld()
- udevd: merge conditions to decrease indentation
- Revert 'udevd: fix crash when workers time out after exit is signal caught'
- core: fragments of masked units ought not be considered for NeedDaemonReload (#7060) (bsc#1156482)
- udevd: fix crash when workers time out after exit is signal caught
- udevd: wait for workers to finish when exiting (bsc#1106383)

- Improve bash completion support (bsc#1155207)
  * shell-completion: systemctl: do not list template units in {re,}start
  * shell-completion: systemctl: pass current word to all list_unit*
  * bash-completion: systemctl: pass current partial unit to list-unit* (bsc#1155207)
  * bash-completion: systemctl: use systemctl --no-pager
  * bash-completion: also suggest template unit files
  * bash-completion: systemctl: add missing options and verbs
  * bash-completion: use the first argument instead of the global variable (#6457)

- networkd: VXLan Make group and remote variable separate (bsc#1156213)
- networkd: vxlan require Remote= to be a non multicast address (#8117) (bsc#1156213)
- fs-util: let's avoid unnecessary strerror()
- fs-util: introduce inotify_add_watch_and_warn() helper
- ask-password: improve log message when inotify limit is reached (bsc#1155574)
- shared/install: failing with -ELOOP can be due to the use of an alias in install_error() (bsc#1151377)
- man: alias names can't be used with enable command (bsc#1151377)

- Add boot option to not use swap at system start (jsc#SLE-7689)

- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
  (bsc#1092920)
  		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-06"/>
	<updated date="2020-02-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1084671">SUSE bug 1084671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092920">SUSE bug 1092920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106383">SUSE bug 1106383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133495">SUSE bug 1133495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151377">SUSE bug 1151377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154256">SUSE bug 1154256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155207">SUSE bug 1155207</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155574">SUSE bug 1155574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156213">SUSE bug 1156213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156482">SUSE bug 1156482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158485">SUSE bug 1158485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159814">SUSE bug 1159814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161436">SUSE bug 1161436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162108">SUSE bug 1162108</bugzilla>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20386/">CVE-2019-20386</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1712/">CVE-2020-1712</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491335" comment="libsystemd0-234-24.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491336" comment="libsystemd0-32bit-234-24.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491337" comment="libudev-devel-234-24.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491338" comment="libudev1-234-24.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491339" comment="libudev1-32bit-234-24.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491340" comment="systemd-234-24.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491341" comment="systemd-32bit-234-24.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491342" comment="systemd-bash-completion-234-24.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491343" comment="systemd-container-234-24.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491344" comment="systemd-coredump-234-24.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491345" comment="systemd-devel-234-24.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491346" comment="systemd-sysvinit-234-24.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491347" comment="udev-234-24.39.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137958" version="1" class="patch">
	<metadata>
		<title>Security update for tcpdump (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178466" ref_url="https://bugzilla.suse.com/1178466" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8037" ref_url="https://www.suse.com/security/cve/CVE-2020-8037/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3358-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007789.html" source="SUSE-SU"/>
		<description>
This update for tcpdump fixes the following issues:

- CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size (bsc#1178466).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-17"/>
	<updated date="2020-11-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1178466">SUSE bug 1178466</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8037/">CVE-2020-8037</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492811" comment="tcpdump-4.9.2-3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137959" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177943" ref_url="https://bugzilla.suse.com/1177943" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14779" ref_url="https://www.suse.com/security/cve/CVE-2020-14779/" source="CVE"/>
		<reference ref_id="CVE-2020-14781" ref_url="https://www.suse.com/security/cve/CVE-2020-14781/" source="CVE"/>
		<reference ref_id="CVE-2020-14782" ref_url="https://www.suse.com/security/cve/CVE-2020-14782/" source="CVE"/>
		<reference ref_id="CVE-2020-14792" ref_url="https://www.suse.com/security/cve/CVE-2020-14792/" source="CVE"/>
		<reference ref_id="CVE-2020-14796" ref_url="https://www.suse.com/security/cve/CVE-2020-14796/" source="CVE"/>
		<reference ref_id="CVE-2020-14797" ref_url="https://www.suse.com/security/cve/CVE-2020-14797/" source="CVE"/>
		<reference ref_id="CVE-2020-14798" ref_url="https://www.suse.com/security/cve/CVE-2020-14798/" source="CVE"/>
		<reference ref_id="CVE-2020-14803" ref_url="https://www.suse.com/security/cve/CVE-2020-14803/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007787.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
      truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
      /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
      /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
      LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
      /CloseServerSocket.java fails intermittently with Address
      already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
      due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
      names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
      before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
      fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
      in table
    + JDK-8203281: [Windows] JComboBox change in ui when
      editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
      resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
      JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
      serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with 'Windbg
      Error: WaitForEvent failed'
    + JDK-8205534: Remove SymbolTable dependency from
      serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
      /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
      version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
      is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
      attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
      should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
      timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
      version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
      ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
      /ap10t001/TestDescription.java failed with ObjectFree:
      GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
      version - step3
    + JDK-8210527: JShell: NullPointerException in
      jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
      tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
      with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
      clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
      version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
      fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
      test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
      by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
      test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
      - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
      (assert when shared java.lang.Object is redefined by JVMTI
      agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
      jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
      lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
      not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
      'Problem cleaning up the following threads:'
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
      testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
      optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
      Windows
    + JDK-8216974: HttpConnection not returned to the pool after
      204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
      reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
      too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
      instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
      patterns
    + JDK-8221759: Crash when completing 'java.io.File.path'
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
      /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
      constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
      on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
      anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
      jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
      algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
      test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
      NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
      decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
      objects
    + JDK-8226575: OperatingSystemMXBean should be made container
      aware
    + JDK-8226697: Several tests which need the @key headful
      keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
      correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
      /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
      fails due to 'exitValue = 6'
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
      tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
      truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
      /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
      arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
      'Leaking compilation tasks?'
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
      test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
      can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
      oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
      implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
      with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
      iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
      CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
      RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
      AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
      non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
      finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
      ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
      /CompressedClassPointers.java fails with 'Narrow klass base:
      0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
      end
    + JDK-8234347: 'Turkey' meta time zone does not generate
      composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
      /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
      for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
      successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
      11
    + JDK-8236548: Localized time zone name inconsistency between
      English and other locales
    + JDK-8236617: jtreg test containers/docker/
      /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
      epsilon files
    + JDK-8237888: security/infra/java/security/cert/
      /CertPathValidator/certification/LuxTrustCA.java fails when
      checking validity interval
    + JDK-8237977: Further update
      javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
      count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
      typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
      'multiple definition' link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
      'multiple definition' link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o 'multiple definition' link
      errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
      using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
      with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
      (known_holder-&gt;is_instance_klass() &amp;&amp;
      (!known_holder-&gt;is_interface() ||
      ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
      'should be non-static concrete method');
    + JDK-8239385: KerberosTicket client name refers wrongly to
      sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
      enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
      Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
      on jdk8
    + JDK-8241007: Shenandoah: remove
      ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
      JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
      failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
      java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
      StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
      fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
      non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
      params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
      /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
      extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
      program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
      program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
      module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
      CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
      HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
      release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
      compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
      compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: 'platform encoding not initialized' exceptions
      with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
      'assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
      remove node from hash table before modifying it'
    + JDK-8244729: Shenandoah: remove resolve paths from
      SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
      337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
      application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
      verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: 'Bad graph detected in build_loop_late' when
      loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert 'redundunt
      OSR recompilation detected. memory leak in CodeCache!'
    + JDK-8245832: JDK build make-static-libs should build all JDK
      libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
      concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
      working
    + JDK-8246153: TestEliminateArrayCopy fails with
      -XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
      fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
      overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with 'all collected exceptions
      must come from the same place'
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
      presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
      mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
      effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
      in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
      working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
      for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
      false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
      fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
      jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
      location
    + JDK-8248851: CMS: Missing memory fences between free chunk
      check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
      Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
      8224650
    + JDK-8249215: JFrame::setVisible crashed with
      -Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
      not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
      timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
      AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
      account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
      requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
      enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
      jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
      FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
      from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
      dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
      the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
      P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
      test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
      I-U
    + JDK-8251469: Better cleanup for
      test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
      final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
      misspells 'occured'
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
      compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
      downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
      in JDK 11
    + JDK-8253283: [11u] Test build/translations/
      /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
      crashes
    + Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*,
      bool)' introduced in jdk 11.0.9
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-17"/>
	<updated date="2020-11-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177943">SUSE bug 1177943</bugzilla>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14779/">CVE-2020-14779</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14781/">CVE-2020-14781</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14782/">CVE-2020-14782</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14792/">CVE-2020-14792</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14796/">CVE-2020-14796</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14797/">CVE-2020-14797</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14798/">CVE-2020-14798</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14803/">CVE-2020-14803</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492812" comment="java-11-openjdk-11.0.9.0-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492813" comment="java-11-openjdk-demo-11.0.9.0-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492814" comment="java-11-openjdk-devel-11.0.9.0-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492815" comment="java-11-openjdk-headless-11.0.9.0-3.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137960" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1170446" ref_url="https://bugzilla.suse.com/1170446" source="BUGZILLA"/>
		<reference ref_id="1173592" ref_url="https://bugzilla.suse.com/1173592" source="BUGZILLA"/>
		<reference ref_id="1173594" ref_url="https://bugzilla.suse.com/1173594" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8695" ref_url="https://www.suse.com/security/cve/CVE-2020-8695/" source="CVE"/>
		<reference ref_id="CVE-2020-8696" ref_url="https://www.suse.com/security/cve/CVE-2020-8696/" source="CVE"/>
		<reference ref_id="CVE-2020-8698" ref_url="https://www.suse.com/security/cve/CVE-2020-8698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007796.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

- Updated Intel CPU Microcode to 20201110 official release.
 - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)
 - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)
 - CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592)

- Release notes:
  - Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html).
  - Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html).
  - Update for functional issues. Refer to [Second Generation Intel? Xeon? Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel? Xeon? Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [Intel? Xeon? Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
  - Update for functional issues. Refer to [10th Gen Intel? Core™ Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
  - Update for functional issues. Refer to [8th and 9th Gen Intel? Core™ Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
  - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel? Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [6th Gen Intel? Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
  - Update for functional issues. Refer to [Intel? Xeon? E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel? Xeon? E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.

  ### New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | LKF            | B2/B3    | 06-8a-01/10 |          | 00000028 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile

  ### Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1170446">SUSE bug 1170446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173592">SUSE bug 1173592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173594">SUSE bug 1173594</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8695/">CVE-2020-8695</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8696/">CVE-2020-8696</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8698/">CVE-2020-8698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492816" comment="ucode-intel-20201110-3.39.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137961" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177406" ref_url="https://bugzilla.suse.com/1177406" source="BUGZILLA"/>
		<reference ref_id="1178291" ref_url="https://bugzilla.suse.com/1178291" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26575" ref_url="https://www.suse.com/security/cve/CVE-2020-26575/" source="CVE"/>
		<reference ref_id="CVE-2020-28030" ref_url="https://www.suse.com/security/cve/CVE-2020-28030/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3376-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007794.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

- wireshark was updated to 3.2.8:
  - CVE-2020-26575: Fixed an issue where FBZERO dissector was entering in infinite loop (bsc#1177406)
  - CVE-2020-28030: Fixed an issue where GQUIC dissector was crashing (bsc#1178291)
  * Infinite memory allocation while parsing this tcp packet
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177406">SUSE bug 1177406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178291">SUSE bug 1178291</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26575/">CVE-2020-26575</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28030/">CVE-2020-28030</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492817" comment="libwireshark13-3.2.8-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492818" comment="libwiretap10-3.2.8-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492819" comment="libwsutil11-3.2.8-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492820" comment="wireshark-3.2.8-3.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137962" version="1" class="patch">
	<metadata>
		<title>Security update for krb5 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178512" ref_url="https://bugzilla.suse.com/1178512" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28196" ref_url="https://www.suse.com/security/cve/CVE-2020-28196/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3377-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007793.html" source="SUSE-SU"/>
		<description>
This update for krb5 fixes the following security issue:

- CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message (bsc#1178512).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1178512">SUSE bug 1178512</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28196/">CVE-2020-28196</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492821" comment="krb5-1.16.3-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492822" comment="krb5-32bit-1.16.3-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492823" comment="krb5-client-1.16.3-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492824" comment="krb5-devel-1.16.3-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492825" comment="krb5-plugin-preauth-otp-1.16.3-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492826" comment="krb5-plugin-preauth-pkinit-1.16.3-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137963" version="1" class="patch">
	<metadata>
		<title>Security update for wpa_supplicant (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1131644" ref_url="https://bugzilla.suse.com/1131644" source="BUGZILLA"/>
		<reference ref_id="1131868" ref_url="https://bugzilla.suse.com/1131868" source="BUGZILLA"/>
		<reference ref_id="1131870" ref_url="https://bugzilla.suse.com/1131870" source="BUGZILLA"/>
		<reference ref_id="1131871" ref_url="https://bugzilla.suse.com/1131871" source="BUGZILLA"/>
		<reference ref_id="1131872" ref_url="https://bugzilla.suse.com/1131872" source="BUGZILLA"/>
		<reference ref_id="1131874" ref_url="https://bugzilla.suse.com/1131874" source="BUGZILLA"/>
		<reference ref_id="1133640" ref_url="https://bugzilla.suse.com/1133640" source="BUGZILLA"/>
		<reference ref_id="1144443" ref_url="https://bugzilla.suse.com/1144443" source="BUGZILLA"/>
		<reference ref_id="1150934" ref_url="https://bugzilla.suse.com/1150934" source="BUGZILLA"/>
		<reference ref_id="1156920" ref_url="https://bugzilla.suse.com/1156920" source="BUGZILLA"/>
		<reference ref_id="1166933" ref_url="https://bugzilla.suse.com/1166933" source="BUGZILLA"/>
		<reference ref_id="1167331" ref_url="https://bugzilla.suse.com/1167331" source="BUGZILLA"/>
		<reference ref_id="930077" ref_url="https://bugzilla.suse.com/930077" source="BUGZILLA"/>
		<reference ref_id="930078" ref_url="https://bugzilla.suse.com/930078" source="BUGZILLA"/>
		<reference ref_id="930079" ref_url="https://bugzilla.suse.com/930079" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-4141" ref_url="https://www.suse.com/security/cve/CVE-2015-4141/" source="CVE"/>
		<reference ref_id="CVE-2015-4142" ref_url="https://www.suse.com/security/cve/CVE-2015-4142/" source="CVE"/>
		<reference ref_id="CVE-2015-4143" ref_url="https://www.suse.com/security/cve/CVE-2015-4143/" source="CVE"/>
		<reference ref_id="CVE-2015-8041" ref_url="https://www.suse.com/security/cve/CVE-2015-8041/" source="CVE"/>
		<reference ref_id="CVE-2017-13077" ref_url="https://www.suse.com/security/cve/CVE-2017-13077/" source="CVE"/>
		<reference ref_id="CVE-2017-13078" ref_url="https://www.suse.com/security/cve/CVE-2017-13078/" source="CVE"/>
		<reference ref_id="CVE-2017-13079" ref_url="https://www.suse.com/security/cve/CVE-2017-13079/" source="CVE"/>
		<reference ref_id="CVE-2017-13080" ref_url="https://www.suse.com/security/cve/CVE-2017-13080/" source="CVE"/>
		<reference ref_id="CVE-2017-13081" ref_url="https://www.suse.com/security/cve/CVE-2017-13081/" source="CVE"/>
		<reference ref_id="CVE-2017-13082" ref_url="https://www.suse.com/security/cve/CVE-2017-13082/" source="CVE"/>
		<reference ref_id="CVE-2017-13086" ref_url="https://www.suse.com/security/cve/CVE-2017-13086/" source="CVE"/>
		<reference ref_id="CVE-2017-13087" ref_url="https://www.suse.com/security/cve/CVE-2017-13087/" source="CVE"/>
		<reference ref_id="CVE-2017-13088" ref_url="https://www.suse.com/security/cve/CVE-2017-13088/" source="CVE"/>
		<reference ref_id="CVE-2018-14526" ref_url="https://www.suse.com/security/cve/CVE-2018-14526/" source="CVE"/>
		<reference ref_id="CVE-2019-11555" ref_url="https://www.suse.com/security/cve/CVE-2019-11555/" source="CVE"/>
		<reference ref_id="CVE-2019-13377" ref_url="https://www.suse.com/security/cve/CVE-2019-13377/" source="CVE"/>
		<reference ref_id="CVE-2019-16275" ref_url="https://www.suse.com/security/cve/CVE-2019-16275/" source="CVE"/>
		<reference ref_id="CVE-2019-9494" ref_url="https://www.suse.com/security/cve/CVE-2019-9494/" source="CVE"/>
		<reference ref_id="CVE-2019-9495" ref_url="https://www.suse.com/security/cve/CVE-2019-9495/" source="CVE"/>
		<reference ref_id="CVE-2019-9497" ref_url="https://www.suse.com/security/cve/CVE-2019-9497/" source="CVE"/>
		<reference ref_id="CVE-2019-9498" ref_url="https://www.suse.com/security/cve/CVE-2019-9498/" source="CVE"/>
		<reference ref_id="CVE-2019-9499" ref_url="https://www.suse.com/security/cve/CVE-2019-9499/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007800.html" source="SUSE-SU"/>
		<description>
This update for wpa_supplicant fixes the following issues:

Security issue fixed:

- CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass (bsc#1150934).

Non-security issues fixed:

- Enable SAE support (jsc#SLE-14992).
- Limit P2P_DEVICE name to appropriate ifname size.
- Fix wicked wlan (bsc#1156920)
- Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331)
- With v2.9 fi.epitest.hostap.WPASupplicant.service is obsolete (bsc#1167331)
- Fix WLAN config on boot with wicked. (bsc#1166933)
- Update to 2.9 release:
   * SAE changes
     - disable use of groups using Brainpool curves
     - improved protection against side channel attacks
     [https://w1.fi/security/2019-6/]
   * EAP-pwd changes
     - disable use of groups using Brainpool curves
     - allow the set of groups to be configured (eap_pwd_groups)
     - improved protection against side channel attacks
     [https://w1.fi/security/2019-6/]
   * fixed FT-EAP initial mobility domain association using PMKSA caching
     (disabled by default for backwards compatibility; can be enabled
     with ft_eap_pmksa_caching=1)
   * fixed a regression in OpenSSL 1.1+ engine loading
   * added validation of RSNE in (Re)Association Response frames
   * fixed DPP bootstrapping URI parser of channel list
   * extended EAP-SIM/AKA fast re-authentication to allow use with FILS
   * extended ca_cert_blob to support PEM format
   * improved robustness of P2P Action frame scheduling
   * added support for EAP-SIM/AKA using anonymous@realm identity
   * fixed Hotspot 2.0 credential selection based on roaming consortium
     to ignore credentials without a specific EAP method
   * added experimental support for EAP-TEAP peer (RFC 7170)
   * added experimental support for EAP-TLS peer with TLS v1.3
   * fixed a regression in WMM parameter configuration for a TDLS peer
   * fixed a regression in operation with drivers that offload 802.1X
     4-way handshake
   * fixed an ECDH operation corner case with OpenSSL
   * SAE changes
     - added support for SAE Password Identifier
     - changed default configuration to enable only groups 19, 20, 21
       (i.e., disable groups 25 and 26) and disable all unsuitable groups
       completely based on REVmd changes
     - do not regenerate PWE unnecessarily when the AP uses the
       anti-clogging token mechanisms
     - fixed some association cases where both SAE and FT-SAE were enabled
       on both the station and the selected AP
     - started to prefer FT-SAE over SAE AKM if both are enabled
     - started to prefer FT-SAE over FT-PSK if both are enabled
     - fixed FT-SAE when SAE PMKSA caching is used
     - reject use of unsuitable groups based on new implementation guidance
       in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
       groups with prime &gt;= 256)
     - minimize timing and memory use differences in PWE derivation
       [https://w1.fi/security/2019-1/] (CVE-2019-9494, bsc#1131868)
   * EAP-pwd changes
     - minimize timing and memory use differences in PWE derivation
       [https://w1.fi/security/2019-2/] (CVE-2019-9495, bsc#1131870)
     - verify server scalar/element
       [https://w1.fi/security/2019-4/] (CVE-2019-9497, CVE-2019-9498,
       CVE-2019-9499, bsc#1131874, bsc#1131872, bsc#1131871, bsc#1131644)
     - fix message reassembly issue with unexpected fragment
       [https://w1.fi/security/2019-5/] (CVE-2019-11555, bsc#1133640)
     - enforce rand,mask generation rules more strictly
     - fix a memory leak in PWE derivation
     - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
       27)
     - SAE/EAP-pwd side-channel attack update
       [https://w1.fi/security/2019-6/] (CVE-2019-13377, bsc#1144443)
   * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y
   * Hotspot 2.0 changes
     - do not indicate release number that is higher than the one
       AP supports
     - added support for release number 3
     - enable PMF automatically for network profiles created from
       credentials
   * fixed OWE network profile saving
   * fixed DPP network profile saving
   * added support for RSN operating channel validation
     (CONFIG_OCV=y and network profile parameter ocv=1)
   * added Multi-AP backhaul STA support
   * fixed build with LibreSSL
   * number of MKA/MACsec fixes and extensions
   * extended domain_match and domain_suffix_match to allow list of values
   * fixed dNSName matching in domain_match and domain_suffix_match when
     using wolfSSL
   * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both
     are enabled
   * extended nl80211 Connect and external authentication to support
     SAE, FT-SAE, FT-EAP-SHA384
   * fixed KEK2 derivation for FILS+FT
   * extended client_cert file to allow loading of a chain of PEM
     encoded certificates
   * extended beacon reporting functionality
   * extended D-Bus interface with number of new properties
   * fixed a regression in FT-over-DS with mac80211-based drivers
   * OpenSSL: allow systemwide policies to be overridden
   * extended driver flags indication for separate 802.1X and PSK
     4-way handshake offload capability
   * added support for random P2P Device/Interface Address use
   * extended PEAP to derive EMSK to enable use with ERP/FILS
   * extended WPS to allow SAE configuration to be added automatically
     for PSK (wps_cred_add_sae=1)
   * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)
   * extended domain_match and domain_suffix_match to allow list of values
   * added a RSN workaround for misbehaving PMF APs that advertise
     IGTK/BIP KeyID using incorrect byte order
   * fixed PTK rekeying with FILS and FT
   * fixed WPA packet number reuse with replayed messages and key
     reinstallation
     [https://w1.fi/security/2017-1/] (CVE-2017-13077, CVE-2017-13078,
     CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082,
     CVE-2017-13086, CVE-2017-13087, CVE-2017-13088)
   * fixed unauthenticated EAPOL-Key decryption in wpa_supplicant
     [https://w1.fi/security/2018-1/] (CVE-2018-14526)
   * added support for FILS (IEEE 802.11ai) shared key authentication
   * added support for OWE (Opportunistic Wireless Encryption, RFC 8110;
     and transition mode defined by WFA)
   * added support for DPP (Wi-Fi Device Provisioning Protocol)
   * added support for RSA 3k key case with Suite B 192-bit level
   * fixed Suite B PMKSA caching not to update PMKID during each 4-way
     handshake
   * fixed EAP-pwd pre-processing with PasswordHashHash
   * added EAP-pwd client support for salted passwords
   * fixed a regression in TDLS prohibited bit validation
   * started to use estimated throughput to avoid undesired signal
     strength based roaming decision
   * MACsec/MKA:
     - new macsec_linux driver interface support for the Linux
       kernel macsec module
     - number of fixes and extensions
   * added support for external persistent storage of PMKSA cache
     (PMKSA_GET/PMKSA_ADD control interface commands; and
      MESH_PMKSA_GET/MESH_PMKSA_SET for the mesh case)
   * fixed mesh channel configuration pri/sec switch case
   * added support for beacon report
   * large number of other fixes, cleanup, and extensions
   * added support for randomizing local address for GAS queries
     (gas_rand_mac_addr parameter)
   * fixed EAP-SIM/AKA/AKA' ext auth cases within TLS tunnel
   * added option for using random WPS UUID (auto_uuid=1)
   * added SHA256-hash support for OCSP certificate matching
   * fixed EAP-AKA' to add AT_KDF into Synchronization-Failure
   * fixed a regression in RSN pre-authentication candidate selection
   * added option to configure allowed group management cipher suites
     (group_mgmt network profile parameter)
   * removed all PeerKey functionality
   * fixed nl80211 AP and mesh mode configuration regression with
     Linux 4.15 and newer
   * added ap_isolate configuration option for AP mode
   * added support for nl80211 to offload 4-way handshake into the driver
   * added support for using wolfSSL cryptographic library
   * SAE
     - added support for configuring SAE password separately of the
       WPA2 PSK/passphrase
     - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection
       for SAE;
       note: this is not backwards compatible, i.e., both the AP and
       station side implementations will need to be update at the same
       time to maintain interoperability
     - added support for Password Identifier
     - fixed FT-SAE PMKID matching
   * Hotspot 2.0
     - added support for fetching of Operator Icon Metadata ANQP-element
     - added support for Roaming Consortium Selection element
     - added support for Terms and Conditions
     - added support for OSEN connection in a shared RSN BSS
     - added support for fetching Venue URL information
   * added support for using OpenSSL 1.1.1
   * FT
     - disabled PMKSA caching with FT since it is not fully functional
     - added support for SHA384 based AKM
     - added support for BIP ciphers BIP-CMAC-256, BIP-GMAC-128,
       BIP-GMAC-256 in addition to previously supported BIP-CMAC-128
     - fixed additional IE inclusion in Reassociation Request frame when
       using FT protocol

- Changed service-files for start after network (systemd-networkd).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1131644">SUSE bug 1131644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131868">SUSE bug 1131868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131870">SUSE bug 1131870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131871">SUSE bug 1131871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131872">SUSE bug 1131872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131874">SUSE bug 1131874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133640">SUSE bug 1133640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144443">SUSE bug 1144443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150934">SUSE bug 1150934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156920">SUSE bug 1156920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166933">SUSE bug 1166933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167331">SUSE bug 1167331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930077">SUSE bug 930077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930078">SUSE bug 930078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930079">SUSE bug 930079</bugzilla>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4141/">CVE-2015-4141</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4142/">CVE-2015-4142</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-4143/">CVE-2015-4143</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2015-8041/">CVE-2015-8041</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13077/">CVE-2017-13077</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13078/">CVE-2017-13078</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13079/">CVE-2017-13079</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13080/">CVE-2017-13080</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13081/">CVE-2017-13081</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13082/">CVE-2017-13082</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13086/">CVE-2017-13086</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13087/">CVE-2017-13087</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-13088/">CVE-2017-13088</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-14526/">CVE-2018-14526</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11555/">CVE-2019-11555</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13377/">CVE-2019-13377</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16275/">CVE-2019-16275</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9494/">CVE-2019-9494</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9495/">CVE-2019-9495</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9497/">CVE-2019-9497</cve>
	<cve impact="important" cvss3="6.8/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-9498/">CVE-2019-9498</cve>
	<cve impact="important" cvss3="6.8/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-9499/">CVE-2019-9499</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492827" comment="wpa_supplicant-2.9-4.20.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137964" version="1" class="patch">
	<metadata>
		<title>Security update for perl-DBI (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176492" ref_url="https://bugzilla.suse.com/1176492" source="BUGZILLA"/>
		<reference ref_id="CVE-2014-10401" ref_url="https://www.suse.com/security/cve/CVE-2014-10401/" source="CVE"/>
		<reference ref_id="CVE-2014-10402" ref_url="https://www.suse.com/security/cve/CVE-2014-10402/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007805.html" source="SUSE-SU"/>
		<description>
This update for perl-DBI fixes the following issues:

- DBD::File drivers could open files from folders other than those specifically
  passed via the f_dir attribute in the data source name (DSN). 
  [bsc#1176492, CVE-2014-10401, CVE-2014-10402]
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1176492">SUSE bug 1176492</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-10401/">CVE-2014-10401</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2014-10402/">CVE-2014-10402</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492828" comment="perl-DBI-1.639-3.14.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137965" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1177950" ref_url="https://bugzilla.suse.com/1177950" source="BUGZILLA"/>
		<reference ref_id="1178591" ref_url="https://bugzilla.suse.com/1178591" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28368" ref_url="https://www.suse.com/security/cve/CVE-2020-28368/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007815.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

Security issue fixed:

- CVE-2020-28368: Fixed the Intel RAPL sidechannel attack, aka PLATYPUS attack, aka XSA-351 (bsc#1178591).

Non-security issues fixed:

- Updated to Xen 4.12.4 bug fix release (bsc#1027519).
- Fixed a panic during MSI cleanup on AMD hardware (bsc#1027519).
- Adjusted help for --max_iters, default is 5 (bsc#1177950).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177950">SUSE bug 1177950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178591">SUSE bug 1178591</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-28368/">CVE-2020-28368</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492829" comment="xen-libs-4.12.4_02-3.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492830" comment="xen-tools-domU-4.12.4_02-3.34.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137966" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178666" ref_url="https://bugzilla.suse.com/1178666" source="BUGZILLA"/>
		<reference ref_id="1178667" ref_url="https://bugzilla.suse.com/1178667" source="BUGZILLA"/>
		<reference ref_id="1178668" ref_url="https://bugzilla.suse.com/1178668" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25694" ref_url="https://www.suse.com/security/cve/CVE-2020-25694/" source="CVE"/>
		<reference ref_id="CVE-2020-25695" ref_url="https://www.suse.com/security/cve/CVE-2020-25695/" source="CVE"/>
		<reference ref_id="CVE-2020-25696" ref_url="https://www.suse.com/security/cve/CVE-2020-25696/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3425-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007818.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

- Upgrade to version 12.5:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/12/release-12-5.html
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178666">SUSE bug 1178666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178667">SUSE bug 1178667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178668">SUSE bug 1178668</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25694/">CVE-2020-25694</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25695/">CVE-2020-25695</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25696/">CVE-2020-25696</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492831" comment="libpq5-12.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492832" comment="libpq5-32bit-12.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492833" comment="postgresql12-12.5-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137967" version="1" class="patch">
	<metadata>
		<title>Security update for ceph (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1151612" ref_url="https://bugzilla.suse.com/1151612" source="BUGZILLA"/>
		<reference ref_id="1158257" ref_url="https://bugzilla.suse.com/1158257" source="BUGZILLA"/>
		<reference ref_id="1169134" ref_url="https://bugzilla.suse.com/1169134" source="BUGZILLA"/>
		<reference ref_id="1170487" ref_url="https://bugzilla.suse.com/1170487" source="BUGZILLA"/>
		<reference ref_id="1174591" ref_url="https://bugzilla.suse.com/1174591" source="BUGZILLA"/>
		<reference ref_id="1175061" ref_url="https://bugzilla.suse.com/1175061" source="BUGZILLA"/>
		<reference ref_id="1175240" ref_url="https://bugzilla.suse.com/1175240" source="BUGZILLA"/>
		<reference ref_id="1175781" ref_url="https://bugzilla.suse.com/1175781" source="BUGZILLA"/>
		<reference ref_id="1177843" ref_url="https://bugzilla.suse.com/1177843" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25660" ref_url="https://www.suse.com/security/cve/CVE-2020-25660/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3459-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007822.html" source="SUSE-SU"/>
		<description>
This update for ceph fixes the following issues:

- CVE-2020-25660: Bring back CEPHX_V2 authorizer challenges (bsc#1177843).
- Major batch refactor of ceph-volume that addresses a couple of issues (bsc#1151612, bsc#1158257)
- Documented Prometheus' security model (bsc#1169134)
- monclient: Fixed an issue where executing several ceph commands in a short amount of time led to a segmentation fault (bsc#1170487)
- Fixed an issue, where it was not possible to edit an iSCSI logged-in client (bsc#1174591)
- Fixed an issue, where OSDs could not get started after they failed (bsc#1175061)
- Fixed an issue with the restful module, where it aborted on execution for POST calls (bsc#1175240)
- Fixed a many-to-many issue in host-details Grafana dashboard (bsc#1175585)
- Fixed collection_list ordering in os/bluestore (bsc#1172546)
- Fixed help output of lvmcache (bsc#1175781)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-20"/>
	<updated date="2020-11-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1151612">SUSE bug 1151612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158257">SUSE bug 1158257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169134">SUSE bug 1169134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170487">SUSE bug 1170487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174591">SUSE bug 1174591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175061">SUSE bug 1175061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175240">SUSE bug 1175240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175781">SUSE bug 1175781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177843">SUSE bug 1177843</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25660/">CVE-2020-25660</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492834" comment="ceph-common-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492835" comment="libcephfs-devel-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492836" comment="libcephfs2-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492837" comment="librados-devel-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492838" comment="librados2-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492839" comment="libradospp-devel-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492840" comment="librbd-devel-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492841" comment="librbd1-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492842" comment="librgw-devel-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492843" comment="librgw2-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492844" comment="python3-ceph-argparse-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492845" comment="python3-cephfs-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492846" comment="python3-rados-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492847" comment="python3-rbd-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492848" comment="python3-rgw-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492849" comment="rados-objclass-devel-14.2.13.450+g65ea1b614d-3.52.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137968" version="1" class="patch">
	<metadata>
		<title>Security update for libqt5-qtbase (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1158667" ref_url="https://bugzilla.suse.com/1158667" source="BUGZILLA"/>
		<reference ref_id="1161167" ref_url="https://bugzilla.suse.com/1161167" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0569" ref_url="https://www.suse.com/security/cve/CVE-2020-0569/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006460.html" source="SUSE-SU"/>
		<description>
This update for libqt5-qtbase fixes the following issues:

Security issue fixed:	  

- CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD (bsc#1161167).

Other issue fixed:

- Fixed comboboxes not showing in correct location (bsc#1158667).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-06"/>
	<updated date="2020-02-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1158667">SUSE bug 1158667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161167">SUSE bug 1161167</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0569/">CVE-2020-0569</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492850" comment="libQt5Concurrent-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492851" comment="libQt5Concurrent5-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492852" comment="libQt5Core-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492853" comment="libQt5Core-private-headers-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492854" comment="libQt5Core5-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492855" comment="libQt5DBus-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492856" comment="libQt5DBus-private-headers-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492857" comment="libQt5DBus5-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492858" comment="libQt5Gui-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492859" comment="libQt5Gui-private-headers-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492860" comment="libQt5Gui5-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492861" comment="libQt5KmsSupport-devel-static-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492862" comment="libQt5KmsSupport-private-headers-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492863" comment="libQt5Network-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492864" comment="libQt5Network-private-headers-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492865" comment="libQt5Network5-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492866" comment="libQt5OpenGL-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492867" comment="libQt5OpenGL-private-headers-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492868" comment="libQt5OpenGL5-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492869" comment="libQt5PlatformHeaders-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492870" comment="libQt5PlatformSupport-devel-static-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492871" comment="libQt5PlatformSupport-private-headers-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492872" comment="libQt5PrintSupport-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492873" comment="libQt5PrintSupport-private-headers-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492874" comment="libQt5PrintSupport5-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492875" comment="libQt5Sql-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492876" comment="libQt5Sql-private-headers-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492877" comment="libQt5Sql5-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492878" comment="libQt5Sql5-sqlite-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492879" comment="libQt5Test-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492880" comment="libQt5Test-private-headers-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492881" comment="libQt5Test5-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492882" comment="libQt5Widgets-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492883" comment="libQt5Widgets-private-headers-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492884" comment="libQt5Widgets5-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492885" comment="libQt5Xml-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492886" comment="libQt5Xml5-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492887" comment="libqt5-qtbase-common-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492888" comment="libqt5-qtbase-devel-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492889" comment="libqt5-qtbase-private-headers-devel-5.9.7-13.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137969" version="1" class="patch">
	<metadata>
		<title>Security update for wicked (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160904" ref_url="https://bugzilla.suse.com/1160904" source="BUGZILLA"/>
		<reference ref_id="1160906" ref_url="https://bugzilla.suse.com/1160906" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18903" ref_url="https://www.suse.com/security/cve/CVE-2019-18903/" source="CVE"/>
		<reference ref_id="CVE-2020-7217" ref_url="https://www.suse.com/security/cve/CVE-2020-7217/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006461.html" source="SUSE-SU"/>
		<description>
This update for wicked fixes the following issues:

- CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IA_PD option (bsc#1160904).
- CVE-2020-7217: Fixed a memory leak in DHCP4 fsm when processing packets for other client ids (bsc#1160906).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-06"/>
	<updated date="2020-02-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160904">SUSE bug 1160904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160906">SUSE bug 1160906</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-18903/">CVE-2019-18903</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7217/">CVE-2020-7217</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492890" comment="wicked-0.6.60-3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492891" comment="wicked-service-0.6.60-3.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137970" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178666" ref_url="https://bugzilla.suse.com/1178666" source="BUGZILLA"/>
		<reference ref_id="1178667" ref_url="https://bugzilla.suse.com/1178667" source="BUGZILLA"/>
		<reference ref_id="1178668" ref_url="https://bugzilla.suse.com/1178668" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25694" ref_url="https://www.suse.com/security/cve/CVE-2020-25694/" source="CVE"/>
		<reference ref_id="CVE-2020-25695" ref_url="https://www.suse.com/security/cve/CVE-2020-25695/" source="CVE"/>
		<reference ref_id="CVE-2020-25696" ref_url="https://www.suse.com/security/cve/CVE-2020-25696/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3476-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007832.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

- Upgrade to version 10.15:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/10/release-10-15.html
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-20"/>
	<updated date="2020-11-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178666">SUSE bug 1178666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178667">SUSE bug 1178667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178668">SUSE bug 1178668</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25694/">CVE-2020-25694</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25695/">CVE-2020-25695</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25696/">CVE-2020-25696</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492892" comment="postgresql10-10.15-8.22.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137971" version="1" class="patch">
	<metadata>
		<title>Security update for c-ares (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178882" ref_url="https://bugzilla.suse.com/1178882" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8277" ref_url="https://www.suse.com/security/cve/CVE-2020-8277/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007840.html" source="SUSE-SU"/>
		<description>
This update for c-ares fixes the following issues:

- Version update to 1.17.0
  * CVE-2020-8277: Fixed a Denial of Service through DNS request (bsc#1178882)
  * For further details see https://c-ares.haxx.se/changelog.html
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-23"/>
	<updated date="2020-11-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1178882">SUSE bug 1178882</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8277/">CVE-2020-8277</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492893" comment="c-ares-devel-1.17.0-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492894" comment="libcares2-1.17.0-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137972" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175596" ref_url="https://bugzilla.suse.com/1175596" source="BUGZILLA"/>
		<reference ref_id="1177472" ref_url="https://bugzilla.suse.com/1177472" source="BUGZILLA"/>
		<reference ref_id="1178428" ref_url="https://bugzilla.suse.com/1178428" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14765" ref_url="https://www.suse.com/security/cve/CVE-2020-14765/" source="CVE"/>
		<reference ref_id="CVE-2020-14776" ref_url="https://www.suse.com/security/cve/CVE-2020-14776/" source="CVE"/>
		<reference ref_id="CVE-2020-14789" ref_url="https://www.suse.com/security/cve/CVE-2020-14789/" source="CVE"/>
		<reference ref_id="CVE-2020-14812" ref_url="https://www.suse.com/security/cve/CVE-2020-14812/" source="CVE"/>
		<reference ref_id="CVE-2020-15180" ref_url="https://www.suse.com/security/cve/CVE-2020-15180/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007844.html" source="SUSE-SU"/>
		<description>
This update for mariadb and mariadb-connector-c fixes the following issues:

- Update mariadb to 10.2.36 GA [bsc#1177472, bsc#1178428] fixing for the 
  following security vulnerabilities:
    CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 CVE-2020-15180

- Update mariadb-connector-c to 3.1.11 [bsc#1177472 and bsc#1178428]
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-24"/>
	<updated date="2020-11-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175596">SUSE bug 1175596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177472">SUSE bug 1177472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178428">SUSE bug 1178428</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14765/">CVE-2020-14765</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14776/">CVE-2020-14776</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14789/">CVE-2020-14789</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14812/">CVE-2020-14812</cve>
	<cve impact="important" cvss3="9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15180/">CVE-2020-15180</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492895" comment="libmariadb3-3.1.11-3.22.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492896" comment="libmariadbprivate-3.1.11-3.22.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137973" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1163592" ref_url="https://bugzilla.suse.com/1163592" source="BUGZILLA"/>
		<reference ref_id="1167030" ref_url="https://bugzilla.suse.com/1167030" source="BUGZILLA"/>
		<reference ref_id="1172873" ref_url="https://bugzilla.suse.com/1172873" source="BUGZILLA"/>
		<reference ref_id="1175306" ref_url="https://bugzilla.suse.com/1175306" source="BUGZILLA"/>
		<reference ref_id="1175721" ref_url="https://bugzilla.suse.com/1175721" source="BUGZILLA"/>
		<reference ref_id="1176855" ref_url="https://bugzilla.suse.com/1176855" source="BUGZILLA"/>
		<reference ref_id="1176907" ref_url="https://bugzilla.suse.com/1176907" source="BUGZILLA"/>
		<reference ref_id="1176983" ref_url="https://bugzilla.suse.com/1176983" source="BUGZILLA"/>
		<reference ref_id="1177703" ref_url="https://bugzilla.suse.com/1177703" source="BUGZILLA"/>
		<reference ref_id="1177819" ref_url="https://bugzilla.suse.com/1177819" source="BUGZILLA"/>
		<reference ref_id="1177820" ref_url="https://bugzilla.suse.com/1177820" source="BUGZILLA"/>
		<reference ref_id="1178123" ref_url="https://bugzilla.suse.com/1178123" source="BUGZILLA"/>
		<reference ref_id="1178393" ref_url="https://bugzilla.suse.com/1178393" source="BUGZILLA"/>
		<reference ref_id="1178589" ref_url="https://bugzilla.suse.com/1178589" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178686" ref_url="https://bugzilla.suse.com/1178686" source="BUGZILLA"/>
		<reference ref_id="1178765" ref_url="https://bugzilla.suse.com/1178765" source="BUGZILLA"/>
		<reference ref_id="1178782" ref_url="https://bugzilla.suse.com/1178782" source="BUGZILLA"/>
		<reference ref_id="927455" ref_url="https://bugzilla.suse.com/927455" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25704" ref_url="https://www.suse.com/security/cve/CVE-2020-25704/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007848.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software and services that rely on UDP source port randomization (like DNS) are indirectly affected as well. Kernel versions may be vulnerable to this issue (bsc#1175721, bsc#1178782).
- CVE-2020-25704: Fixed a memory leak in perf_event_parse_addr_filter() (bsc#1178393).
- CVE-2020-25668: Fixed a use-after-free in con_font_op() (bnc#1178123).

The following non-security bugs were fixed:

- 9P: Cast to loff_t before multiplying (git-fixes).
- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (git-fixes).
- ACPI: debug: do not allow debugging when ACPI is disabled (git-fixes).
- ACPI: dock: fix enum-conversion warning (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- ALSA: hda - Fix the return value if cb func is already registered (git-fixes).
- ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes).
- ata: sata_rcar: Fix DMA boundary mask (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled (git-fixes).
- ath10k: start recovery process when payload length exceeds max htc length for sdio (git-fixes).
- bus/fsl_mc: Do not rely on caller to provide non NULL mc_io (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on (git-fixes).
- can: peak_usb: add range checking in decode operations (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping (git-fixes).
- can: rx-offload: do not call kfree_skb() from IRQ context (git-fixes).
- clk: ti: clockdomain: fix static checker warning (git-fixes).
- crypto: bcm - Verify GCM/CCM key length in setkey (git-fixes).
- device property: Do not clear secondary pointer for shared primary firmware node (git-fixes).
- device property: Keep secondary firmware node secondary by type (git-fixes).
- drbd: code cleanup by using sendpage_ok() to check page for kernel_sendpage() (bsc#1172873).
- drm/amd/display: Do not invoke kgdb_breakpoint() unconditionally (git-fixes).
- drm/amd/display: HDMI remote sink need mode validation for Linux (git-fixes).
- drm/amdgpu: do not map BO in reserved region (git-fixes).
- drm/bridge/synopsys: dsi: add support for non-continuous HS clock (git-fixes).
- drm/brige/megachips: Add checking if ge_b850v3_lvds_init() is working correctly (git-fixes).
- drm/i915: Break up error capture compression loops with cond_resched() (git-fixes).
- drm/i915: Force VT'd workarounds when running as a guest OS (git-fixes).
- drm/imx: tve remove extraneous type qualifier (git-fixes).
- drm/ttm: fix eviction valuable range check (git-fixes).
- drm/vc4: drv: Add error handding for bind (git-fixes).
- efivarfs: Replace invalid slashes with exclamation marks in dentries (git-fixes).
- ftrace: Fix recursion check for NMI test (git-fixes).
- ftrace: Handle tracing when switching between context (git-fixes).
- hv_netvsc: Add XDP support (bsc#1177819, bsc#1177820).
- hv_netvsc: Fix XDP refcnt for synthetic and VF NICs (bsc#1177819, bsc#1177820).
- hyperv_fb: Update screen_info after removing old framebuffer (bsc#1175306).
- icmp: randomize the global rate limiter (git-fixes).
- kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function (git-fixes).
- libceph: use sendpage_ok() in ceph_tcp_sendpage() (bsc#1172873).
- media: platform: Improve queue set up flow for bug fixing (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get (git-fixes).
- memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event (bsc#1177703).
- mmc: sdhci-of-esdhc: Handle pulse width detection erratum for more SoCs (git-fixes).
- mmc: sdhci-of-esdhc: set timeout to max before tuning (git-fixes).
- mm/memcg: fix refcount error while moving and swapping (bsc#1178686).
- Move the upstreamed powercap fix into sorted sectio
- mtd: lpddr: Fix bad logic in print_drs_error (git-fixes).
- net: add WARN_ONCE in kernel_sendpage() for improper zero-copy send (bsc#1172873).
- net: introduce helper sendpage_ok() in include/linux/net.h (bsc#1172873).
- net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition (git-fixes).
- nvme-tcp: check page by sendpage_ok() before calling kernel_sendpage() (bsc#1172873).
- p54: avoid accessing the data mapped to streaming DMA (git-fixes).
- pinctrl: intel: Set default bias in case no particular value given (git-fixes).
- powerpc/pseries/cpuidle: add polling idle for shared processor guests (bsc#1178765 ltc#188968).
- powerpc/vnic: Extend 'failover pending' window (bsc#1176855 ltc#187293).
- power: supply: test_power: add missing newlines when printing parameters by sysfs (git-fixes).
- regulator: defer probe when trying to get voltage from unresolved supply (git-fixes).
- regulator: resolve supply after creating regulator (git-fixes).
- ring-buffer: Fix recursion protection transitions between interrupt context (git-fixes).
- rpm/kernel-module-subpackage: make Group tag optional (bsc#1163592)
- scsi: libiscsi: use sendpage_ok() in iscsi_tcp_segment_map() (bsc#1172873).
- staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error (git-fixes).
- staging: octeon: repair 'fixed-link' support (git-fixes).
- thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() (git-fixes).
- USB: Add NO_LPM quirk for Kingston flash drive (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- usb: host: fsl-mph-dr-of: check return of dma_set_mask() (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231 (git-fixes).
- USB: serial: option: add Quectel EC200T module support (git-fixes).
- USB: serial: option: add Telit FN980 composition 0x1055 (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart (git-fixes).
- usb: typec: tcpm: reset hard_reset_count for any disconnect (git-fixes).
- video: fbdev: pvr2fb: initialize variables (git-fixes).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV Gen 1 VMs (bsc#1175306).
- vt: Disable KD_FONT_OP_COPY (bsc#1178589).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params (bsc#1175306).
- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels (bsc#1058115 bsc#1176907).
- xfs: do not update mtime on COW faults (bsc#1167030).
- xfs: fix a missing unlock on error in xfs_fs_map_blocks (git-fixes).
- xfs: fix flags argument to rmap lookup when converting shared file rmaps (git-fixes).
- xfs: fix rmap key and record comparison functions (git-fixes).
- xfs: flush new eof page on truncate to avoid post-eof corruption (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-24"/>
	<updated date="2020-11-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163592">SUSE bug 1163592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167030">SUSE bug 1167030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172873">SUSE bug 1172873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175306">SUSE bug 1175306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175721">SUSE bug 1175721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176855">SUSE bug 1176855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176907">SUSE bug 1176907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176983">SUSE bug 1176983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177703">SUSE bug 1177703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177819">SUSE bug 1177819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177820">SUSE bug 1177820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178123">SUSE bug 1178123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178393">SUSE bug 1178393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178589">SUSE bug 1178589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178686">SUSE bug 1178686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178765">SUSE bug 1178765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178782">SUSE bug 1178782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927455">SUSE bug 927455</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25704/">CVE-2020-25704</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492897" comment="kernel-default-4.12.14-197.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492898" comment="kernel-default-base-4.12.14-197.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492899" comment="kernel-default-devel-4.12.14-197.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492900" comment="kernel-default-man-4.12.14-197.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492901" comment="kernel-devel-4.12.14-197.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492902" comment="kernel-macros-4.12.14-197.72.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137974" version="1" class="patch">
	<metadata>
		<title>Security update for libssh2_org (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1130103" ref_url="https://bugzilla.suse.com/1130103" source="BUGZILLA"/>
		<reference ref_id="1178083" ref_url="https://bugzilla.suse.com/1178083" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17498" ref_url="https://www.suse.com/security/cve/CVE-2019-17498/" source="CVE"/>
		<reference ref_id="CVE-2019-3855" ref_url="https://www.suse.com/security/cve/CVE-2019-3855/" source="CVE"/>
		<reference ref_id="CVE-2019-3856" ref_url="https://www.suse.com/security/cve/CVE-2019-3856/" source="CVE"/>
		<reference ref_id="CVE-2019-3857" ref_url="https://www.suse.com/security/cve/CVE-2019-3857/" source="CVE"/>
		<reference ref_id="CVE-2019-3858" ref_url="https://www.suse.com/security/cve/CVE-2019-3858/" source="CVE"/>
		<reference ref_id="CVE-2019-3859" ref_url="https://www.suse.com/security/cve/CVE-2019-3859/" source="CVE"/>
		<reference ref_id="CVE-2019-3860" ref_url="https://www.suse.com/security/cve/CVE-2019-3860/" source="CVE"/>
		<reference ref_id="CVE-2019-3861" ref_url="https://www.suse.com/security/cve/CVE-2019-3861/" source="CVE"/>
		<reference ref_id="CVE-2019-3862" ref_url="https://www.suse.com/security/cve/CVE-2019-3862/" source="CVE"/>
		<reference ref_id="CVE-2019-3863" ref_url="https://www.suse.com/security/cve/CVE-2019-3863/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007887.html" source="SUSE-SU"/>
		<description>
This update for libssh2_org fixes the following issues:

- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
   Enhancements and bugfixes:
    * adds ECDSA keys and host key support when using OpenSSL
    * adds ED25519 key and host key support when using OpenSSL 1.1.1
    * adds OpenSSH style key file reading
    * adds AES CTR mode support when using WinCNG
    * adds PEM passphrase protected file support for Libgcrypt and WinCNG
    * adds SHA256 hostkey fingerprint
    * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
    * adds explicit zeroing of sensitive data in memory
    * adds additional bounds checks to network buffer reads
    * adds the ability to use the server default permissions when creating sftp directories
    * adds support for building with OpenSSL no engine flag
    * adds support for building with LibreSSL
    * increased sftp packet size to 256k
    * fixed oversized packet handling in sftp
    * fixed building with OpenSSL 1.1
    * fixed a possible crash if sftp stat gets an unexpected response
    * fixed incorrect parsing of the KEX preference string value
    * fixed conditional RSA and AES-CTR support
    * fixed a small memory leak during the key exchange process
    * fixed a possible memory leak of the ssh banner string
    * fixed various small memory leaks in the backends
    * fixed possible out of bounds read when parsing public keys from the server
    * fixed possible out of bounds read when parsing invalid PEM files
    * no longer null terminates the scp remote exec command
    * now handle errors when diffie hellman key pair generation fails
    * improved building instructions
    * improved unit tests

- Version update to 1.8.2: [bsc#1130103]
   Bug fixes:
    * Fixed the misapplied userauth patch that broke 1.8.1
    * moved the MAX size declarations from the public header		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-27"/>
	<updated date="2020-11-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1130103">SUSE bug 1130103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178083">SUSE bug 1178083</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17498/">CVE-2019-17498</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3855/">CVE-2019-3855</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3856/">CVE-2019-3856</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3857/">CVE-2019-3857</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3858/">CVE-2019-3858</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3859/">CVE-2019-3859</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3860/">CVE-2019-3860</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-3861/">CVE-2019-3861</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3862/">CVE-2019-3862</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3863/">CVE-2019-3863</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492903" comment="libssh2-1-1.9.0-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492904" comment="libssh2-1-32bit-1.9.0-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492905" comment="libssh2-devel-1.9.0-4.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137975" version="1" class="patch">
	<metadata>
		<title>Security update for python-pip (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3565-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007889.html" source="SUSE-SU"/>
		<description>
This update for python-pip fixes the following issues:
  
- Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-30"/>
	<updated date="2020-11-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492906" comment="python3-pip-10.0.1-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137976" version="1" class="patch">
	<metadata>
		<title>Security update for python-setuptools (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3566-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007890.html" source="SUSE-SU"/>
		<description>
This update for python-setuptools fixes the following issues:

- Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-30"/>
	<updated date="2020-11-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492907" comment="python3-setuptools-40.5.0-6.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137977" version="1" class="patch">
	<metadata>
		<title>Security update for mutt (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1179035" ref_url="https://bugzilla.suse.com/1179035" source="BUGZILLA"/>
		<reference ref_id="1179113" ref_url="https://bugzilla.suse.com/1179113" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28896" ref_url="https://www.suse.com/security/cve/CVE-2020-28896/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3568-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007891.html" source="SUSE-SU"/>
		<description>
This update for mutt fixes the following issues:

- CVE-2020-28896: incomplete connection termination could lead to sending credentials over unencrypted connections (bsc#1179035)
- Avoid that message with a million tiny parts can freeze MUA for several minutes (bsc#1179113)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-30"/>
	<updated date="2020-11-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179035">SUSE bug 1179035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179113">SUSE bug 1179113</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-28896/">CVE-2020-28896</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492908" comment="mutt-1.10.1-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492909" comment="mutt-doc-1.10.1-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492910" comment="mutt-lang-1.10.1-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137978" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174908" ref_url="https://bugzilla.suse.com/1174908" source="BUGZILLA"/>
		<reference ref_id="1177596" ref_url="https://bugzilla.suse.com/1177596" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14360" ref_url="https://www.suse.com/security/cve/CVE-2020-14360/" source="CVE"/>
		<reference ref_id="CVE-2020-25712" ref_url="https://www.suse.com/security/cve/CVE-2020-25712/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3586-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007900.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2020-25712: Fixed a heap-based buffer overflow which could have led to privilege escalation (bsc#1177596).
- CVE-2020-14360: Fixed an out of bounds memory accesses on too short request which could lead to denial of service (bsc#1174908).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-01"/>
	<updated date="2020-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174908">SUSE bug 1174908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177596">SUSE bug 1177596</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14360/">CVE-2020-14360</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25712/">CVE-2020-25712</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492911" comment="xorg-x11-server-1.20.3-14.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492912" comment="xorg-x11-server-extra-1.20.3-14.5.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137979" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="1179193" ref_url="https://bugzilla.suse.com/1179193" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007908.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

Update to 3.6.12 (bsc#1179193), including:

- Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-02"/>
	<updated date="2020-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179193">SUSE bug 1179193</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492913" comment="libpython3_6m1_0-3.6.12-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492914" comment="python3-3.6.12-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492915" comment="python3-base-3.6.12-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492916" comment="python3-curses-3.6.12-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492917" comment="python3-dbm-3.6.12-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492918" comment="python3-devel-3.6.12-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492919" comment="python3-idle-3.6.12-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492920" comment="python3-testsuite-3.6.12-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492921" comment="python3-tk-3.6.12-3.64.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137980" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007904.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-02"/>
	<updated date="2020-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492922" comment="libpython2_7-1_0-2.7.17-7.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492923" comment="python-2.7.17-7.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492924" comment="python-base-2.7.17-7.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137981" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177409" ref_url="https://bugzilla.suse.com/1177409" source="BUGZILLA"/>
		<reference ref_id="1177412" ref_url="https://bugzilla.suse.com/1177412" source="BUGZILLA"/>
		<reference ref_id="1177413" ref_url="https://bugzilla.suse.com/1177413" source="BUGZILLA"/>
		<reference ref_id="1177414" ref_url="https://bugzilla.suse.com/1177414" source="BUGZILLA"/>
		<reference ref_id="1178591" ref_url="https://bugzilla.suse.com/1178591" source="BUGZILLA"/>
		<reference ref_id="1178963" ref_url="https://bugzilla.suse.com/1178963" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27670" ref_url="https://www.suse.com/security/cve/CVE-2020-27670/" source="CVE"/>
		<reference ref_id="CVE-2020-27671" ref_url="https://www.suse.com/security/cve/CVE-2020-27671/" source="CVE"/>
		<reference ref_id="CVE-2020-27672" ref_url="https://www.suse.com/security/cve/CVE-2020-27672/" source="CVE"/>
		<reference ref_id="CVE-2020-27674" ref_url="https://www.suse.com/security/cve/CVE-2020-27674/" source="CVE"/>
		<reference ref_id="CVE-2020-28368" ref_url="https://www.suse.com/security/cve/CVE-2020-28368/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007911.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355) 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177409">SUSE bug 1177409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177412">SUSE bug 1177412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177413">SUSE bug 1177413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177414">SUSE bug 1177414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178591">SUSE bug 1178591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178963">SUSE bug 1178963</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27670/">CVE-2020-27670</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27671/">CVE-2020-27671</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27672/">CVE-2020-27672</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27674/">CVE-2020-27674</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-28368/">CVE-2020-28368</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492925" comment="xen-libs-4.12.4_04-3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492926" comment="xen-tools-domU-4.12.4_04-3.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137982" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1067665" ref_url="https://bugzilla.suse.com/1067665" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1158775" ref_url="https://bugzilla.suse.com/1158775" source="BUGZILLA"/>
		<reference ref_id="1170139" ref_url="https://bugzilla.suse.com/1170139" source="BUGZILLA"/>
		<reference ref_id="1170630" ref_url="https://bugzilla.suse.com/1170630" source="BUGZILLA"/>
		<reference ref_id="1172542" ref_url="https://bugzilla.suse.com/1172542" source="BUGZILLA"/>
		<reference ref_id="1174726" ref_url="https://bugzilla.suse.com/1174726" source="BUGZILLA"/>
		<reference ref_id="1175916" ref_url="https://bugzilla.suse.com/1175916" source="BUGZILLA"/>
		<reference ref_id="1176109" ref_url="https://bugzilla.suse.com/1176109" source="BUGZILLA"/>
		<reference ref_id="1177304" ref_url="https://bugzilla.suse.com/1177304" source="BUGZILLA"/>
		<reference ref_id="1177397" ref_url="https://bugzilla.suse.com/1177397" source="BUGZILLA"/>
		<reference ref_id="1177805" ref_url="https://bugzilla.suse.com/1177805" source="BUGZILLA"/>
		<reference ref_id="1177808" ref_url="https://bugzilla.suse.com/1177808" source="BUGZILLA"/>
		<reference ref_id="1177819" ref_url="https://bugzilla.suse.com/1177819" source="BUGZILLA"/>
		<reference ref_id="1177820" ref_url="https://bugzilla.suse.com/1177820" source="BUGZILLA"/>
		<reference ref_id="1178182" ref_url="https://bugzilla.suse.com/1178182" source="BUGZILLA"/>
		<reference ref_id="1178589" ref_url="https://bugzilla.suse.com/1178589" source="BUGZILLA"/>
		<reference ref_id="1178635" ref_url="https://bugzilla.suse.com/1178635" source="BUGZILLA"/>
		<reference ref_id="1178669" ref_url="https://bugzilla.suse.com/1178669" source="BUGZILLA"/>
		<reference ref_id="1178838" ref_url="https://bugzilla.suse.com/1178838" source="BUGZILLA"/>
		<reference ref_id="1178853" ref_url="https://bugzilla.suse.com/1178853" source="BUGZILLA"/>
		<reference ref_id="1178854" ref_url="https://bugzilla.suse.com/1178854" source="BUGZILLA"/>
		<reference ref_id="1178878" ref_url="https://bugzilla.suse.com/1178878" source="BUGZILLA"/>
		<reference ref_id="1178886" ref_url="https://bugzilla.suse.com/1178886" source="BUGZILLA"/>
		<reference ref_id="1178897" ref_url="https://bugzilla.suse.com/1178897" source="BUGZILLA"/>
		<reference ref_id="1178940" ref_url="https://bugzilla.suse.com/1178940" source="BUGZILLA"/>
		<reference ref_id="1178962" ref_url="https://bugzilla.suse.com/1178962" source="BUGZILLA"/>
		<reference ref_id="1179107" ref_url="https://bugzilla.suse.com/1179107" source="BUGZILLA"/>
		<reference ref_id="1179140" ref_url="https://bugzilla.suse.com/1179140" source="BUGZILLA"/>
		<reference ref_id="1179141" ref_url="https://bugzilla.suse.com/1179141" source="BUGZILLA"/>
		<reference ref_id="1179211" ref_url="https://bugzilla.suse.com/1179211" source="BUGZILLA"/>
		<reference ref_id="1179213" ref_url="https://bugzilla.suse.com/1179213" source="BUGZILLA"/>
		<reference ref_id="1179259" ref_url="https://bugzilla.suse.com/1179259" source="BUGZILLA"/>
		<reference ref_id="1179403" ref_url="https://bugzilla.suse.com/1179403" source="BUGZILLA"/>
		<reference ref_id="1179406" ref_url="https://bugzilla.suse.com/1179406" source="BUGZILLA"/>
		<reference ref_id="1179418" ref_url="https://bugzilla.suse.com/1179418" source="BUGZILLA"/>
		<reference ref_id="1179421" ref_url="https://bugzilla.suse.com/1179421" source="BUGZILLA"/>
		<reference ref_id="1179424" ref_url="https://bugzilla.suse.com/1179424" source="BUGZILLA"/>
		<reference ref_id="1179426" ref_url="https://bugzilla.suse.com/1179426" source="BUGZILLA"/>
		<reference ref_id="1179427" ref_url="https://bugzilla.suse.com/1179427" source="BUGZILLA"/>
		<reference ref_id="1179429" ref_url="https://bugzilla.suse.com/1179429" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15436" ref_url="https://www.suse.com/security/cve/CVE-2020-15436/" source="CVE"/>
		<reference ref_id="CVE-2020-15437" ref_url="https://www.suse.com/security/cve/CVE-2020-15437/" source="CVE"/>
		<reference ref_id="CVE-2020-25669" ref_url="https://www.suse.com/security/cve/CVE-2020-25669/" source="CVE"/>
		<reference ref_id="CVE-2020-27777" ref_url="https://www.suse.com/security/cve/CVE-2020-27777/" source="CVE"/>
		<reference ref_id="CVE-2020-28915" ref_url="https://www.suse.com/security/cve/CVE-2020-28915/" source="CVE"/>
		<reference ref_id="CVE-2020-28974" ref_url="https://www.suse.com/security/cve/CVE-2020-28974/" source="CVE"/>
		<reference ref_id="CVE-2020-29371" ref_url="https://www.suse.com/security/cve/CVE-2020-29371/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007941.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141).
- CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140).
- CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182).
- CVE-2020-27777: Restrict RTAS requests from userspace  (bsc#1179107).
- CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory (bsc#1178886).
- CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel (bsc#1178589).
- CVE-2020-29371: Fixed uninitialized memory leaks to userspace (bsc#1179429).

The following non-security bugs were fixed:

- ACPI: GED: fix -Wformat (git-fixes).
- ALSA: ctl: fix error path at adding user-defined element set (git-fixes).
- ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() (git-fixes).
- ALSA: mixart: Fix mutex deadlock (git-fixes).
- arm64: KVM: Fix system register enumeration (bsc#1174726).
- arm/arm64: KVM: Add PSCI version selection API (bsc#1174726).
- ASoC: qcom: lpass-platform: Fix memory leak (git-fixes).
- ath10k: Acquire tx_lock in tx error paths (git-fixes).
- batman-adv: set .owner to THIS_MODULE (git-fixes).
- Bluetooth: btusb: Fix and detect most of the Chinese Bluetooth controllers (git-fixes).
- Bluetooth: hci_bcm: fix freeing not-requested IRQ (git-fixes).
- bpf: Zero-fill re-used per-cpu map element (git-fixes).
- btrfs: account ticket size at add/delete time (bsc#1178897).
- btrfs: add helper to obtain number of devices with ongoing dev-replace (bsc#1178897).
- btrfs: check rw_devices, not num_devices for balance (bsc#1178897).
- btrfs: do not delete mismatched root refs (bsc#1178962).
- btrfs: fix btrfs_calc_reclaim_metadata_size calculation (bsc#1178897).
- btrfs: fix force usage in inc_block_group_ro (bsc#1178897).
- btrfs: fix invalid removal of root ref (bsc#1178962).
- btrfs: fix reclaim counter leak of space_info objects (bsc#1178897).
- btrfs: fix reclaim_size counter leak after stealing from global reserve (bsc#1178897).
- btrfs: kill min_allocable_bytes in inc_block_group_ro (bsc#1178897).
- btrfs: rework arguments of btrfs_unlink_subvol (bsc#1178962).
- btrfs: split dev-replace locking helpers for read and write (bsc#1178897). 
- can: af_can: prevent potential access of uninitialized member in canfd_rcv() (git-fixes).
- can: af_can: prevent potential access of uninitialized member in can_rcv() (git-fixes).
- can: dev: can_restart(): post buffer from the right context (git-fixes).
- can: gs_usb: fix endianess problem with candleLight firmware (git-fixes).
- can: m_can: fix nominal bitiming tseg2 min for version &gt;= 3.1 (git-fixes).
- can: m_can: m_can_handle_state_change(): fix state change (git-fixes).
- can: m_can: m_can_stop(): set device to software init mode before closing (git-fixes).
- can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb() (git-fixes).
- can: peak_usb: fix potential integer overflow on shift of a int (git-fixes).
- ceph: add check_session_state() helper and make it global (bsc#1179259).
- ceph: check session state after bumping session-&gt;s_seq (bsc#1179259).
- ceph: fix race in concurrent __ceph_remove_cap invocations (bsc#1178635).
- cifs: Fix incomplete memory allocation on setxattr path (bsc#1179211).
- cifs: remove bogus debug code (bsc#1179427).
- cifs: Return the error from crypt_message when enc/dec key not found (bsc#1179426).
- Convert trailing spaces and periods in path components (bsc#1179424).
- docs: ABI: stable: remove a duplicated documentation (git-fixes).
- docs: ABI: sysfs-c2port: remove a duplicated entry (git-fixes).
- Drivers: hv: vmbus: Remove the unused 'tsc_page' from struct hv_context (git-fixes).
- drm/i915/gvt: Set ENHANCED_FRAME_CAP bit (git-fixes).
- drm/sun4i: dw-hdmi: fix error return code in sun8i_dw_hdmi_bind() (git-fixes).
- Drop sysctl files for dropped archs, add ppc64le and arm64 (bsc#1178838). Also fix the ppc64 page size.
- efi: cper: Fix possible out-of-bounds access (git-fixes).
- efi/efivars: Add missing kobject_put() in sysfs entry creation error path (git-fixes).
- efi/esrt: Fix reference count leak in esre_create_sysfs_entry (git-fixes).
- efi: provide empty efi_enter_virtual_mode implementation (git-fixes).
- efivarfs: fix memory leak in efivarfs_create() (git-fixes).
- efivarfs: revert 'fix memory leak in efivarfs_create()' (git-fixes).
- efi/x86: Do not panic or BUG() on non-critical error conditions (git-fixes).
- efi/x86: Free efi_pgd with free_pages() (bsc#1112178).
- efi/x86: Ignore the memory attributes table on i386 (git-fixes).
- efi/x86: Map the entire EFI vendor string before copying it (git-fixes).
- fs/proc/array.c: allow reporting eip/esp for all coredumping threads (bsc#1050549).
- fuse: fix page dereference after free (bsc#1179213).
- futex: Do not enable IRQs unconditionally in put_pi_state() (bsc#1067665).
- futex: Handle transient 'ownerless' rtmutex state correctly (bsc#1067665).
- hv_balloon: disable warning when floor reached (git-fixes).
- hv_netvsc: deal with bpf API differences in 4.12 (bsc#1177819, bsc#1177820).
- hv_netvsc: make recording RSS hash depend on feature flag (bsc#1178853, bsc#1178854).
- hv_netvsc: record hardware hash in skb (bsc#1178853, bsc#1178854).
- i40iw: Fix error handling in i40iw_manage_arp_cache() (bsc#1111666)
- i40iw: fix null pointer dereference on a null wqe pointer (bsc#1111666)
- i40iw: Report correct firmware version (bsc#1111666)
- IB/cma: Fix ports memory leak in cma_configfs (bsc#1111666)
- IB/core: Set qp-&gt;real_qp before it may be accessed (bsc#1111666)
- IB/hfi1: Add missing INVALIDATE opcodes for trace (bsc#1111666)
- IB/hfi1: Add RcvShortLengthErrCnt to hfi1stats (bsc#1111666)
- IB/hfi1: Add software counter for ctxt0 seq drop (bsc#1111666)
- IB/hfi1: Avoid hardlockup with flushlist_lock (bsc#1111666)
- IB/hfi1: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666)
- IB/hfi1: Check for error on call to alloc_rsm_map_table (bsc#1111666)
- IB/hfi1: Close PSM sdma_progress sleep window (bsc#1111666)
- IB/hfi1: Define variables as unsigned long to fix KASAN warning (bsc#1111666)
- IB/hfi1: Ensure full Gen3 speed in a Gen4 system (bsc#1111666)
- IB/hfi1: Fix memory leaks in sysfs registration and unregistration (bsc#1111666)
- IB/hfi1: Fix Spectre v1 vulnerability (bsc#1111666)
- IB/hfi1: Handle port down properly in pio (bsc#1111666)
- IB/hfi1: Handle wakeup of orphaned QPs for pio (bsc#1111666)
- IB/hfi1: Insure freeze_work work_struct is canceled on shutdown (bsc#1111666)
- IB/hfi1, qib: Ensure RCU is locked when accessing list (bsc#1111666)
- IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM (bsc#1111666)
- IB/hfi1: Remove unused define (bsc#1111666)
- IB/hfi1: Silence txreq allocation warnings (bsc#1111666)
- IB/hfi1: Validate page aligned for a given virtual address (bsc#1111666)
- IB/hfi1: Wakeup QPs orphaned on wait list after flush (bsc#1111666)
- IB/ipoib: drop useless LIST_HEAD (bsc#1111666)
- IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode (bsc#1111666)
- IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start (bsc#1111666)
- IB/iser: Fix dma_nents type definition (bsc#1111666)
- IB/iser: Pass the correct number of entries for dma mapped SGL (bsc#1111666)
- IB/mad: Fix use-after-free in ib mad completion handling (bsc#1111666)
- IB/mlx4: Add and improve logging (bsc#1111666)
- IB/mlx4: Add support for MRA (bsc#1111666)
- IB/mlx4: Adjust delayed work when a dup is observed (bsc#1111666)
- IB/mlx4: Fix leak in id_map_find_del (bsc#1111666)
- IB/mlx4: Fix memory leak in add_gid error flow (bsc#1111666)
- IB/mlx4: Fix race condition between catas error reset and aliasguid flows (bsc#1111666)
- IB/mlx4: Fix starvation in paravirt mux/demux (bsc#1111666)
- IB/mlx4: Follow mirror sequence of device add during device removal (bsc#1111666)
- IB/mlx4: Remove unneeded NULL check (bsc#1111666)
- IB/mlx4: Test return value of calls to ib_get_cached_pkey (bsc#1111666)
- IB/mlx5: Add missing XRC options to QP optional params mask (bsc#1111666)
- IB/mlx5: Compare only index part of a memory window rkey (bsc#1111666)
- IB/mlx5: Do not override existing ip_protocol (bsc#1111666)
- IB/mlx5: Fix clean_mr() to work in the expected order (bsc#1111666)
- IB/mlx5: Fix implicit MR release flow (bsc#1111666)
- IB/mlx5: Fix outstanding_pi index for GSI qps (bsc#1111666)
- IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification (bsc#1111666)
- IB/mlx5: Fix unreg_umr to ignore the mkey state (bsc#1111666)
- IB/mlx5: Improve ODP debugging messages (bsc#1111666)
- IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache (bsc#1111666)
- IB/mlx5: Prevent concurrent MR updates during invalidation (bsc#1111666)
- IB/mlx5: Reset access mask when looping inside page fault handler (bsc#1111666)
- IB/mlx5: Set correct write permissions for implicit ODP MR (bsc#1111666)
- IB/mlx5: Use direct mkey destroy command upon UMR unreg failure (bsc#1111666)
- IB/mlx5: Use fragmented QP's buffer for in-kernel users (bsc#1111666)
- IB/mlx5: WQE dump jumps over first 16 bytes (bsc#1111666)
- IB/mthca: fix return value of error branch in mthca_init_cq() (bsc#1111666)
- IB/qib: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666)
- IB/qib: Fix an error code in qib_sdma_verbs_send() (bsc#1111666)
- IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value (bsc#1111666)
- IB/qib: Remove a set-but-not-used variable (bsc#1111666)
- IB/rdmavt: Convert timers to use timer_setup() (bsc#1111666)
- IB/rdmavt: Fix alloc_qpn() WARN_ON() (bsc#1111666)
- IB/rdmavt: Fix sizeof mismatch (bsc#1111666)
- IB/rdmavt: Reset all QPs when the device is shut down (bsc#1111666)
- IB/rxe: Fix incorrect cache cleanup in error flow (bsc#1111666)
- IB/rxe: Make counters thread safe (bsc#1111666)
- IB/srpt: Fix memory leak in srpt_add_one (bsc#1111666)
- IB/umad: Avoid additional device reference during open()/close() (bsc#1111666)
- IB/umad: Avoid destroying device while it is accessed (bsc#1111666)
- IB/umad: Do not check status of nonseekable_open() (bsc#1111666)
- IB/umad: Fix kernel crash while unloading ib_umad (bsc#1111666)
- IB/umad: Refactor code to use cdev_device_add() (bsc#1111666)
- IB/umad: Simplify and avoid dynamic allocation of class (bsc#1111666)
- IB/usnic: Fix out of bounds index check in query pkey (bsc#1111666)
- IB/uverbs: Fix OOPs upon device disassociation (bsc#1111666)
- iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode (git-fixes).
- iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum (git-fixes).
- inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() (git-fixes).
- Input: adxl34x - clean up a data type in adxl34x_probe() (git-fixes).
- iw_cxgb4: fix ECN check on the passive accept (bsc#1111666)
- iw_cxgb4: only reconnect with MPAv1 if the peer aborts (bsc#1111666)
- kABI: add back flush_dcache_range (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- kABI workaround for usermodehelper changes (bsc#1179406).
- KVM: arm64: Add missing #include of -&lt;linux/string.h&gt; in guest.c (bsc#1174726).
- KVM: arm64: Factor out core register ID enumeration (bsc#1174726).
- KVM: arm64: Filter out invalid core register IDs in KVM_GET_REG_LIST (bsc#1174726).
- KVM: arm64: Refactor kvm_arm_num_regs() for easier maintenance (bsc#1174726).
- KVM: arm64: Reject ioctl access to FPSIMD V-regs on SVE vcpus (bsc#1174726).
- KVM host: kabi fixes for psci_version (bsc#1174726).
- libnvdimm/nvdimm/flush: Allow architecture to override the flush barrier (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- locking/lockdep: Add debug_locks check in __lock_downgrade() (bsc#1050549).
- locking/percpu-rwsem: Use this_cpu_{inc,dec}() for read_count (bsc#1050549).
- locktorture: Print ratio of acquisitions, not failures (bsc#1050549).
- mac80211: always wind down STA state (git-fixes).
- mac80211: free sta in sta_info_insert_finish() on errors (git-fixes).
- mac80211: minstrel: fix tx status processing corner case (git-fixes).
- mac80211: minstrel: remove deferred sampling code (git-fixes).
- mm: always have io_remap_pfn_range() set pgprot_decrypted() (bsc#1112178).
- net: ena: Capitalize all log strings and improve code readability (bsc#1177397).
- net: ena: Change license into format to SPDX in all files (bsc#1177397).
- net: ena: Change log message to netif/dev function (bsc#1177397).
- net: ena: Change RSS related macros and variables names (bsc#1177397).
- net: ena: ethtool: Add new device statistics (bsc#1177397).
- net: ena: ethtool: add stats printing to XDP queues (bsc#1177397).
- net: ena: ethtool: convert stat_offset to 64 bit resolution (bsc#1177397).
- net: ena: Fix all static chekers' warnings (bsc#1177397).
- net: ena: Remove redundant print of placement policy (bsc#1177397).
- net: ena: xdp: add queue counters for xdp actions (bsc#1177397).
- netfilter: nat: can't use dst_hold on noref dst (bsc#1178878).
- net/mlx4_core: Fix init_hca fields offset (git-fixes).
- nfc: s3fwrn5: use signed integer for parsing GPIO numbers (git-fixes).
- NFS: mark nfsiod as CPU_INTENSIVE (bsc#1177304).
- NFS: only invalidate dentrys that are clearly invalid (bsc#1178669 bsc#1170139).
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (bsc#1170630).
- PCI: pci-hyperv: Fix build errors on non-SYSFS config (git-fixes).
- pinctrl: amd: fix incorrect way to disable debounce filter (git-fixes).
- pinctrl: amd: use higher precision for 512 RtcClk (git-fixes).
- pinctrl: aspeed: Fix GPI only function problem (git-fixes).
- platform/x86: toshiba_acpi: Fix the wrong variable assignment (git-fixes).
- powerpc/32: define helpers to get L1 cache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/64: flush_inval_dcache_range() becomes flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/64: reuse PPC32 static inline flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc: Chunk calls to flush_dcache_range in arch_*_memory (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964 git-fixes).
- powerpc: define helpers to get L1 icache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/mm: Flush cache on memory hot(un)plug (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Add flush routines using new pmem store and sync instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Add new instructions for persistent storage and sync (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Avoid the barrier in flush routines (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Fix kernel crash due to wrong range value usage in flush_dcache_range (jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Initialize pmem device on newer hardware (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Restrict papr_scm to P8 and above (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Update ppc64 to use the new barrier instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- RDMA/bnxt_re: Fix lifetimes in bnxt_re_task (bsc#1111666)
- RDMA/bnxt_re: Fix Send Work Entry state check while polling completions (bsc#1111666)
- RDMA/bnxt_re: Fix sizeof mismatch for allocation of pbl_tbl. (bsc#1111666)
- RDMA/bnxt_re: Fix stack-out-of-bounds in bnxt_qplib_rcfw_send_message (bsc#1111666)
- RDMA/cma: add missed unregister_pernet_subsys in init failure (bsc#1111666)
- RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (bsc#1111666)
- RDMA/cma: Fix false error message (bsc#1111666)
- RDMA/cma: fix null-ptr-deref Read in cma_cleanup (bsc#1111666)
- RDMA/cma: Protect bind_list and listen_list while finding matching cm id (bsc#1111666)
- RDMA/cm: Fix checking for allowed duplicate listens (bsc#1111666)
- RDMA/cm: Remove a race freeing timewait_info (bsc#1111666)
- RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow (bsc#1111666)
- RDMA/core: Do not depend device ODP capabilities on kconfig option (bsc#1111666)
- RDMA/core: Fix invalid memory access in spec_filter_size (bsc#1111666)
- RDMA/core: Fix locking in ib_uverbs_event_read (bsc#1111666)
- RDMA/core: Fix protection fault in ib_mr_pool_destroy (bsc#1111666)
- RDMA/core: Fix race between destroy and release FD object (bsc#1111666)
- RDMA/core: Fix race when resolving IP address (bsc#1111666)
- RDMA/core: Prevent mixed use of FDs between shared ufiles (bsc#1111666)
- RDMA/cxgb3: Delete and properly mark unimplemented resize CQ function (bsc#1111666)
- RDMA: Directly cast the sockaddr union to sockaddr (bsc#1111666)
- RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN (bsc#1111666)
- RDMA/hns: Correct typo of hns_roce_create_cq() (bsc#1111666)
- RDMA/hns: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/hns: Set the unsupported wr opcode (bsc#1111666)
- RDMA/i40iw: fix a potential NULL pointer dereference (bsc#1111666)
- RDMA/i40iw: Set queue pair state when being queried (bsc#1111666)
- RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (bsc#1111666)
- RDMA/ipoib: Remove check for ETH_SS_TEST (bsc#1111666)
- RDMA/ipoib: Return void from ipoib_ib_dev_stop() (bsc#1111666)
- RDMA/ipoib: Set rtnl_link_ops for ipoib interfaces (bsc#1111666)
- RDMA/iwcm: Fix a lock inversion issue (bsc#1111666)
- RDMA/iwcm: Fix iwcm work deallocation (bsc#1111666)
- RDMA/iwcm: move iw_rem_ref() calls out of spinlock (bsc#1111666)
- RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case (bsc#1111666)
- RDMA/iw_cxgb4: Fix the unchecked ep dereference (bsc#1111666)
- RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads() (bsc#1111666)
- RDMA/mlx4: Initialize ib_spec on the stack (bsc#1111666)
- RDMA/mlx4: Read pkey table length instead of hardcoded value (bsc#1111666)
- RDMA/mlx5: Clear old rate limit when closing QP (bsc#1111666)
- RDMA/mlx5: Delete unreachable handle_atomic code by simplifying SW completion (bsc#1111666)
- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (bsc#1111666)
- RDMA/mlx5: Fix a race with mlx5_ib_update_xlt on an implicit MR (bsc#1111666)
- RDMA/mlx5: Fix function name typo 'fileds' -&gt; 'fields' (bsc#1111666)
- RDMA/mlx5: Return proper error value (bsc#1111666)
- RDMA/mlx5: Set GRH fields in query QP on RoCE (bsc#1111666)
- RDMA/mlx5: Verify that QP is created with RQ or SQ (bsc#1111666)
- RDMA/nes: Remove second wait queue initialization call (bsc#1111666)
- RDMA/netlink: Do not always generate an ACK for some netlink operations (bsc#1111666)
- RDMA/ocrdma: Fix out of bounds index check in query pkey (bsc#1111666)
- RDMA/ocrdma: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() (bsc#1111666)
- RDMA/qedr: Endianness warnings cleanup (bsc#1111666)
- RDMA/qedr: Fix doorbell setting (bsc#1111666)
- RDMA/qedr: Fix memory leak in user qp and mr (bsc#1111666)
- RDMA/qedr: Fix reported firmware version (bsc#1111666)
- RDMA/qedr: Fix use of uninitialized field (bsc#1111666)
- RDMA/qedr: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/qedr: SRQ's bug fixes (bsc#1111666)
- RDMA/qib: Delete extra line (bsc#1111666)
- RDMA/qib: Remove all occurrences of BUG_ON() (bsc#1111666)
- RDMA/qib: Validate -&gt;show()/store() callbacks before calling them (bsc#1111666)
- RDMA/rxe: Drop pointless checks in rxe_init_ports (bsc#1111666)
- RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM (bsc#1111666)
- RDMA/rxe: Fix configuration of atomic queue pair attributes (bsc#1111666)
- RDMA/rxe: Fix memleak in rxe_mem_init_user (bsc#1111666)
- RDMA/rxe: Fix slab-out-bounds access which lead to kernel crash later (bsc#1111666)
- RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq (bsc#1111666)
- RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars (bsc#1111666)
- RDMA/rxe: Prevent access to wr-&gt;next ptr afrer wr is posted to send queue (bsc#1111666)
- RDMA/rxe: Remove unused rxe_mem_map_pages (bsc#1111666)
- RDMA/rxe: Remove useless rxe_init_device_param assignments (bsc#1111666)
- RDMA/rxe: Return void from rxe_init_port_param() (bsc#1111666)
- RDMA/rxe: Return void from rxe_mem_init_dma() (bsc#1111666)
- RDMA/rxe: Set default vendor ID (bsc#1111666)
- RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices (bsc#1111666)
- RDMA/rxe: Skip dgid check in loopback mode (bsc#1111666)
- RDMA/rxe: Use for_each_sg_page iterator on umem SGL (bsc#1111666)
- RDMA/srp: Rework SCSI device reset handling (bsc#1111666)
- RDMA/srpt: Fix typo in srpt_unregister_mad_agent docstring (bsc#1111666)
- RDMA/srpt: Report the SCSI residual to the initiator (bsc#1111666)
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (bsc#1111666)
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (bsc#1111666)
- RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated (bsc#1111666)
- RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove (bsc#1111666)
- RDMA/vmw_pvrdma: Use atomic memory allocation in create AH (bsc#1111666)
- reboot: fix overflow parsing reboot cpu number (bsc#1179421).
- regulator: avoid resolve_supply() infinite recursion (git-fixes).
- regulator: fix memory leak with repeated set_machine_constraints() (git-fixes).
- regulator: ti-abb: Fix array out of bound read access on the first transition (git-fixes).
- regulator: workaround self-referent regulators (git-fixes).
- Revert 'cdc-acm: hardening against malicious devices' (git-fixes).
- Revert 'kernel/reboot.c: convert simple_strtoul to kstrtoint' (bsc#1179418).
- RMDA/cm: Fix missing ib_cm_destroy_id() in ib_cm_insert_listen() (bsc#1111666)
- rxe: correctly calculate iCRC for unaligned payloads (bsc#1111666)
- rxe: fix error completion wr_id and qp_num (bsc#1111666)
- s390/cio: add cond_resched() in the slow_eval_known_fn() loop (bsc#1177805 LTC#188737).
- s390/cpum_cf,perf: change DFLT_CCERROR counter name (bsc#1175916 LTC#187937).
- s390/dasd: Fix zero write for FBA devices (bsc#1177808 LTC#188739).
- s390: kernel/uv: handle length extension properly (bsc#1178940 LTC#189323).
- sched/core: Fix PI boosting between RT and DEADLINE tasks (bsc#1112178).
- sched/x86: SaveFLAGS on context switch (bsc#1112178).
- scripts/git_sort/git_sort.py: add ceph maintainers git tree
- scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported (git-fixes).
- scsi: RDMA/srpt: Fix a credit leak for aborted commands (bsc#1111666)
- Staging: rtl8188eu: rtw_mlme: Fix uninitialized variable authmode (git-fixes).
- staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids (git-fixes).
- time: Prevent undefined behaviour in timespec64_to_ns() (git-fixes).
- tracing: Fix out of bounds write in get_trace_buf (bsc#1179403).
- tty: serial: imx: keep console clocks always on (git-fixes).
- Update references in patches.suse/net-smc-tolerate-future-smcd-versions (bsc#1172542 LTC#186070 git-fixes).
- USB: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode (git-fixes).
- USB: core: driver: fix stray tabs in error messages (git-fixes).
- USB: core: Fix regression in Hercules audio card (git-fixes).
- USB: gadget: Fix memleak in gadgetfs_fill_super (git-fixes).
- USB: gadget: f_midi: Fix memleak in f_midi_alloc (git-fixes).
- USB: host: ehci-tegra: Fix error handling in tegra_ehci_probe() (git-fixes).
- USB: host: xhci-mtk: avoid runtime suspend when removing hcd (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race (git-fixes).
- USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters (git-fixes).
- USB: serial: option: add Cellient MPL200 card (git-fixes).
- USB: serial: option: Add Telit FT980-KS composition (git-fixes).
- USB: serial: pl2303: add device-id for HP GC device (git-fixes).
- usermodehelper: reset umask to default before executing user process (bsc#1179406).
- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- x86/hyperv: Clarify comment on x2apic mode (git-fixes).
- x86/hyperv: Make vapic support x2apic mode (git-fixes).
- x86/microcode/intel: Check patch signature before saving microcode for early loading (bsc#1112178).
- x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect (git-fixes).
- x86/PCI: Fix intel_mid_pci.c build error when ACPI is not enabled (git-fixes).
- x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (git-fixes).
- x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP (bsc#1112178).
- x86/sysfb_efi: Add quirks for some devices with swapped width and height (git-fixes).
- xfrm: Fix memleak on xfrm state destroy (bsc#1158775).
- xfs: revert 'xfs: fix rmap key and record comparison functions' (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-09"/>
	<updated date="2020-12-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1067665">SUSE bug 1067665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158775">SUSE bug 1158775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170139">SUSE bug 1170139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170630">SUSE bug 1170630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172542">SUSE bug 1172542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174726">SUSE bug 1174726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175916">SUSE bug 1175916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176109">SUSE bug 1176109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177304">SUSE bug 1177304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177397">SUSE bug 1177397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177805">SUSE bug 1177805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177808">SUSE bug 1177808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177819">SUSE bug 1177819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177820">SUSE bug 1177820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178182">SUSE bug 1178182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178589">SUSE bug 1178589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178635">SUSE bug 1178635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178669">SUSE bug 1178669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178838">SUSE bug 1178838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178853">SUSE bug 1178853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178854">SUSE bug 1178854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178878">SUSE bug 1178878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178886">SUSE bug 1178886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178897">SUSE bug 1178897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178940">SUSE bug 1178940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178962">SUSE bug 1178962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179107">SUSE bug 1179107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179140">SUSE bug 1179140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179141">SUSE bug 1179141</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179211">SUSE bug 1179211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179213">SUSE bug 1179213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179259">SUSE bug 1179259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179403">SUSE bug 1179403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179406">SUSE bug 1179406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179418">SUSE bug 1179418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179421">SUSE bug 1179421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179424">SUSE bug 1179424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179426">SUSE bug 1179426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179427">SUSE bug 1179427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179429">SUSE bug 1179429</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15436/">CVE-2020-15436</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15437/">CVE-2020-15437</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25669/">CVE-2020-25669</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27777/">CVE-2020-27777</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28915/">CVE-2020-28915</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28974/">CVE-2020-28974</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29371/">CVE-2020-29371</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492927" comment="kernel-default-4.12.14-197.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492928" comment="kernel-default-base-4.12.14-197.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492929" comment="kernel-default-devel-4.12.14-197.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492930" comment="kernel-default-man-4.12.14-197.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492931" comment="kernel-devel-4.12.14-197.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492932" comment="kernel-macros-4.12.14-197.75.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137983" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1179491" ref_url="https://bugzilla.suse.com/1179491" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1971" ref_url="https://www.suse.com/security/cve/CVE-2020-1971/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3720-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007945.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-09"/>
	<updated date="2020-12-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179491">SUSE bug 1179491</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-1971/">CVE-2020-1971</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492933" comment="libopenssl-1_1-devel-1.1.0i-14.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492934" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492935" comment="libopenssl1_1-1.1.0i-14.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492936" comment="libopenssl1_1-32bit-1.1.0i-14.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492937" comment="libopenssl1_1-hmac-1.1.0i-14.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492938" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492939" comment="openssl-1_1-1.1.0i-14.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137984" version="1" class="patch">
	<metadata>
		<title>Security update for python-urllib3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177120" ref_url="https://bugzilla.suse.com/1177120" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26137" ref_url="https://www.suse.com/security/cve/CVE-2020-26137/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007944.html" source="SUSE-SU"/>
		<description>
This update for python-urllib3 fixes the following issues:

- CVE-2020-26137: Fixed a CRLF injection via HTTP request method (bsc#1177120).	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-09"/>
	<updated date="2020-12-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177120">SUSE bug 1177120</bugzilla>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26137/">CVE-2020-26137</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492940" comment="python3-urllib3-1.24-9.10.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137985" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1179398" ref_url="https://bugzilla.suse.com/1179398" source="BUGZILLA"/>
		<reference ref_id="1179399" ref_url="https://bugzilla.suse.com/1179399" source="BUGZILLA"/>
		<reference ref_id="1179593" ref_url="https://bugzilla.suse.com/1179593" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8284" ref_url="https://www.suse.com/security/cve/CVE-2020-8284/" source="CVE"/>
		<reference ref_id="CVE-2020-8285" ref_url="https://www.suse.com/security/cve/CVE-2020-8285/" source="CVE"/>
		<reference ref_id="CVE-2020-8286" ref_url="https://www.suse.com/security/cve/CVE-2020-8286/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3733-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007951.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2020-8286: Fixed improper OSCP verification in the client side (bsc#1179593). 
- CVE-2020-8285: Fixed a stack overflow due to FTP wildcard (bsc#1179399).
- CVE-2020-8284: Fixed an issue where a malicius FTP server could make curl connect to a different IP (bsc#1179398).	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-09"/>
	<updated date="2020-12-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179398">SUSE bug 1179398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179399">SUSE bug 1179399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179593">SUSE bug 1179593</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8284/">CVE-2020-8284</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8285/">CVE-2020-8285</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-8286/">CVE-2020-8286</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492941" comment="curl-7.60.0-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492942" comment="libcurl-devel-7.60.0-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492943" comment="libcurl4-7.60.0-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492944" comment="libcurl4-32bit-7.60.0-3.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137986" version="1" class="patch">
	<metadata>
		<title>Security update for python-pip, python-scripttest (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175297" ref_url="https://bugzilla.suse.com/1175297" source="BUGZILLA"/>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007949.html" source="SUSE-SU"/>
		<description>
This update for python-pip, python-scripttest fixes the following issues:

- Update in SLE-15 (bsc#1175297, jsc#ECO-3035, jsc#PM-2318)

python-pip was updated to 20.0.2:

* Fix a regression in generation of compatibility tags
* Rename an internal module, to avoid ImportErrors due to improper uninstallation
* Switch to a dedicated CLI tool for vendoring dependencies.
* Remove wheel tag calculation from pip and use packaging.tags. This should provide more tags ordered better than in prior releases.
*  Deprecate setup.py-based builds that do not generate an .egg-info directory.
*  The pip&gt;=20 wheel cache is not retro-compatible with previous versions. Until pip 21.0, pip will continue to take advantage of existing legacy cache entries.
*  Deprecate undocumented --skip-requirements-regex option.
*  Deprecate passing install-location-related options via --install-option.
*  Use literal 'abi3' for wheel tag on CPython 3.x, to align with PEP 384 which only defines it for this platform.
*  Remove interpreter-specific major version tag e.g. cp3-none-any from consideration. This behavior was not documented strictly, and this tag in particular is not useful. Anyone with a use case can create an issue with pypa/packaging.
*  Wheel processing no longer permits wheels containing more than one top-level .dist-info directory.
*  Support for the git+git@ form of VCS requirement is being deprecated and will be removed in pip 21.0. Switch to git+https:// or git+ssh://. git+git:// also works but its use is discouraged as it is insecure.
*  Default to doing a user install (as if --user was passed) when the main site-packages directory is not writeable and user site-packages are enabled.
*  Warn if a path in PATH starts with tilde during pip install.
*  Cache wheels built from Git requirements that are considered immutable, because they point to a commit hash.
*  Add option --no-python-version-warning to silence warnings related to deprecation of Python versions.
*  Cache wheels that pip wheel built locally, matching what pip install does. This particularly helps performance in workflows where pip wheel is used for building before installing. Users desiring the original behavior can use pip wheel --no-cache-dir
*  Display CA information in pip debug.
*  Show only the filename (instead of full URL), when downloading from PyPI.
*  Suggest a more robust command to upgrade pip itself to avoid confusion when the current pip command is not available as pip.
*  Define all old pip console script entrypoints to prevent import issues in stale wrapper scripts.
*  The build step of pip wheel now builds all wheels to a cache first, then copies them to the wheel directory all at once. Before, it built them to a temporary directory and moved them to the wheel directory one by one.
*  Expand ~ prefix to user directory in path options, configs, and environment variables. Values that may be either URL or path are not currently supported, to avoid ambiguity:

   --find-links
   --constraint, -c
   --requirement, -r
   --editable, -e

*  Correctly handle system site-packages, in virtual environments created with venv (PEP 405).
*  Fix case sensitive comparison of pip freeze when used with -r option.
*  Enforce PEP 508 requirement format in pyproject.toml build-system.requires.
*  Make ensure_dir() also ignore ENOTEMPTY as seen on Windows.
*  Fix building packages which specify backend-path in pyproject.toml.
*  Do not attempt to run setup.py clean after a pep517 build error, since a setup.py may not exist in that case.
*  Fix passwords being visible in the index-url in 'Downloading &lt;url&gt;' message.
*  Change method from shutil.remove to shutil.rmtree in noxfile.py.
*  Skip running tests which require subversion, when svn isn't installed
*  Fix not sending client certificates when using --trusted-host.
*  Make sure pip wheel never outputs pure python wheels with a python implementation tag. Better fix/workaround for #3025 by using a per-implementation wheel cache instead of caching pure python wheels with an implementation tag in their name.
*  Include subdirectory URL fragments in cache keys.
*  Fix typo in warning message when any of --build-option, --global-option and --install-option is used in requirements.txt
*  Fix the logging of cached HTTP response shown as downloading.
*  Effectively disable the wheel cache when it is not writable, as is the case with the http cache.
*  Correctly handle relative cache directory provided via --cache-dir.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-09"/>
	<updated date="2020-12-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175297">SUSE bug 1175297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492945" comment="python3-pip-20.0.2-6.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137987" version="1" class="patch">
	<metadata>
		<title>Security update for gcc7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1150164" ref_url="https://bugzilla.suse.com/1150164" source="BUGZILLA"/>
		<reference ref_id="1161913" ref_url="https://bugzilla.suse.com/1161913" source="BUGZILLA"/>
		<reference ref_id="1167939" ref_url="https://bugzilla.suse.com/1167939" source="BUGZILLA"/>
		<reference ref_id="1172798" ref_url="https://bugzilla.suse.com/1172798" source="BUGZILLA"/>
		<reference ref_id="1178577" ref_url="https://bugzilla.suse.com/1178577" source="BUGZILLA"/>
		<reference ref_id="1178614" ref_url="https://bugzilla.suse.com/1178614" source="BUGZILLA"/>
		<reference ref_id="1178624" ref_url="https://bugzilla.suse.com/1178624" source="BUGZILLA"/>
		<reference ref_id="1178675" ref_url="https://bugzilla.suse.com/1178675" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13844" ref_url="https://www.suse.com/security/cve/CVE-2020-13844/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007963.html" source="SUSE-SU"/>
		<description>
This update for gcc7 fixes the following issues:

- CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue (bsc#1172798)
- Enable fortran for the nvptx offload compiler. 
- Update README.First-for.SuSE.packagers
- avoid assembler errors with AVX512 gather and scatter instructions when using -masm=intel.
- Backport the aarch64 -moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Fixed 32bit libgnat.so link.  [bsc#1178675]
- Fixed memcpy miscompilation on aarch64. [bsc#1178624, bsc#1178577]
- Fixed debug line info for try/catch.  [bsc#1178614]
- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is used to build gcc7 (ie when ada is enabled)
- Fixed corruption of pass private -&gt;aux via DF. [gcc#94148]
- Fixed debug information issue with inlined functions and passed by reference arguments.  [gcc#93888]
- Fixed binutils release date detection issue.
- Fixed register allocation issue with exception handling code on s390x.  [bsc#1161913] 
- Fixed miscompilation of some atomic code on aarch64. [bsc#1150164]
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-10"/>
	<updated date="2020-12-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1150164">SUSE bug 1150164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161913">SUSE bug 1161913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167939">SUSE bug 1167939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172798">SUSE bug 1172798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178577">SUSE bug 1178577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178614">SUSE bug 1178614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178624">SUSE bug 1178624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178675">SUSE bug 1178675</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-13844/">CVE-2020-13844</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492946" comment="cpp7-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492947" comment="gcc7-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492948" comment="gcc7-c++-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492949" comment="gcc7-fortran-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492950" comment="libasan4-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492951" comment="libcilkrts5-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492952" comment="libgfortran4-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492953" comment="libgfortran4-32bit-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492954" comment="libstdc++6-devel-gcc7-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492955" comment="libubsan0-7.5.0+r278197-4.19.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137988" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1104457" ref_url="https://bugzilla.suse.com/1104457" source="BUGZILLA"/>
		<reference ref_id="1118459" ref_url="https://bugzilla.suse.com/1118459" source="BUGZILLA"/>
		<reference ref_id="1130721" ref_url="https://bugzilla.suse.com/1130721" source="BUGZILLA"/>
		<reference ref_id="1144504" ref_url="https://bugzilla.suse.com/1144504" source="BUGZILLA"/>
		<reference ref_id="1149458" ref_url="https://bugzilla.suse.com/1149458" source="BUGZILLA"/>
		<reference ref_id="1157763" ref_url="https://bugzilla.suse.com/1157763" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12625" ref_url="https://www.suse.com/security/cve/CVE-2019-12625/" source="CVE"/>
		<reference ref_id="CVE-2019-12900" ref_url="https://www.suse.com/security/cve/CVE-2019-12900/" source="CVE"/>
		<reference ref_id="CVE-2019-15961" ref_url="https://www.suse.com/security/cve/CVE-2019-15961/" source="CVE"/>
		<reference ref_id="CVE-2019-1785" ref_url="https://www.suse.com/security/cve/CVE-2019-1785/" source="CVE"/>
		<reference ref_id="CVE-2019-1786" ref_url="https://www.suse.com/security/cve/CVE-2019-1786/" source="CVE"/>
		<reference ref_id="CVE-2019-1787" ref_url="https://www.suse.com/security/cve/CVE-2019-1787/" source="CVE"/>
		<reference ref_id="CVE-2019-1788" ref_url="https://www.suse.com/security/cve/CVE-2019-1788/" source="CVE"/>
		<reference ref_id="CVE-2019-1789" ref_url="https://www.suse.com/security/cve/CVE-2019-1789/" source="CVE"/>
		<reference ref_id="CVE-2019-1798" ref_url="https://www.suse.com/security/cve/CVE-2019-1798/" source="CVE"/>
		<reference ref_id="CVE-2020-3123" ref_url="https://www.suse.com/security/cve/CVE-2020-3123/" source="CVE"/>
		<reference ref_id="CVE-2020-3327" ref_url="https://www.suse.com/security/cve/CVE-2020-3327/" source="CVE"/>
		<reference ref_id="CVE-2020-3341" ref_url="https://www.suse.com/security/cve/CVE-2020-3341/" source="CVE"/>
		<reference ref_id="CVE-2020-3350" ref_url="https://www.suse.com/security/cve/CVE-2020-3350/" source="CVE"/>
		<reference ref_id="CVE-2020-3481" ref_url="https://www.suse.com/security/cve/CVE-2020-3481/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008064.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

clamav was updated to the new major release 0.103.0. (jsc#ECO-3010,bsc#1118459)

Note that libclamav was changed incompatible, if you have a 3rd party
application that uses libclamav, it needs to be rebuilt.

Update to 0.103.0

* clamd can now reload the signature database without blocking
  scanning. This multi-threaded database reload improvement was made
  possible thanks to a community effort.

  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
     much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.

  * Fix clamav-milter.service (requires clamd.service to run)

Update to 0.102.4

  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.

Update to 0.102.3

  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix 'Attempt to allocate 0 bytes' error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.

Update to 0.102.2:

  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.

- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)

Update to 0.102.1:

  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
    --gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.

Update to 0.102.0:

  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
    - On-Access scanning for created and moved files (Extra-Scanning)
      is fixed.
    - VirusEvent for On-Access scans is fixed.
    - With clamonacc, it is now possible to copy, move, or remove a
      file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
    - Added support for HTTPS.
    - Support for database mirrors hosted on ports other than 80.
    - Removal of the mirror management feature (mirrors.dat).
    - An all new libfreshclam library API.
- created new subpackage libfreshclam2

Update to 0.101.4:

  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (bsc#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (bsc#1144504)

Update to version 0.101.3:

  * bsc#1144504: ZIP bomb causes extreme CPU spikes

Update to version 0.101.2 (bsc#1130721)

  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-14"/>
	<updated date="2020-12-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1104457">SUSE bug 1104457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118459">SUSE bug 1118459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130721">SUSE bug 1130721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144504">SUSE bug 1144504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149458">SUSE bug 1149458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157763">SUSE bug 1157763</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12625/">CVE-2019-12625</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12900/">CVE-2019-12900</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15961/">CVE-2019-15961</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1785/">CVE-2019-1785</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1786/">CVE-2019-1786</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1787/">CVE-2019-1787</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-1788/">CVE-2019-1788</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1789/">CVE-2019-1789</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-1798/">CVE-2019-1798</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-3123/">CVE-2020-3123</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-3327/">CVE-2020-3327</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3341/">CVE-2020-3341</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3350/">CVE-2020-3350</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-3481/">CVE-2020-3481</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492956" comment="clamav-0.103.0-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492957" comment="clamav-devel-0.103.0-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492958" comment="libclamav9-0.103.0-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492959" comment="libfreshclam2-0.103.0-3.23.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137989" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171531" ref_url="https://bugzilla.suse.com/1171531" source="BUGZILLA"/>
		<reference ref_id="1177087" ref_url="https://bugzilla.suse.com/1177087" source="BUGZILLA"/>
		<reference ref_id="1179122" ref_url="https://bugzilla.suse.com/1179122" source="BUGZILLA"/>
		<reference ref_id="1179451" ref_url="https://bugzilla.suse.com/1179451" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13543" ref_url="https://www.suse.com/security/cve/CVE-2020-13543/" source="CVE"/>
		<reference ref_id="CVE-2020-13584" ref_url="https://www.suse.com/security/cve/CVE-2020-13584/" source="CVE"/>
		<reference ref_id="CVE-2020-9948" ref_url="https://www.suse.com/security/cve/CVE-2020-9948/" source="CVE"/>
		<reference ref_id="CVE-2020-9951" ref_url="https://www.suse.com/security/cve/CVE-2020-9951/" source="CVE"/>
		<reference ref_id="CVE-2020-9983" ref_url="https://www.suse.com/security/cve/CVE-2020-9983/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008080.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

-webkit2gtk3 was updated to version 2.30.3 (bsc#1179122 bsc#1179451):
   - CVE-2021-13543: Fixed a use after free which could have led to arbitrary code execution.
   - CVE-2021-13584: Fixed a use after free which could have led to arbitrary code execution.
   - CVE-2021-9948: Fixed a type confusion which could have led to arbitrary code execution.
   - CVE-2021-9951: Fixed a use after free which could have led to arbitrary code execution.
   - CVE-2021-9983: Fixed an out of bounds write which could have led to arbitrary code execution.
   - Have the libwebkit2gtk package require libjavascriptcoregtk of
     the same version (bsc#1171531).
   - Enable c_loop on aarch64: currently needed for compilation to
     succeed with JIT disabled. Also disable sampling profiler, since
     it conflicts with c_loop (bsc#1177087).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-17"/>
	<updated date="2020-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171531">SUSE bug 1171531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177087">SUSE bug 1177087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179122">SUSE bug 1179122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179451">SUSE bug 1179451</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13543/">CVE-2020-13543</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13584/">CVE-2020-13584</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9948/">CVE-2020-9948</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9951/">CVE-2020-9951</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9983/">CVE-2020-9983</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492960" comment="libjavascriptcoregtk-4_0-18-2.30.3-3.63.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492961" comment="libwebkit2gtk-4_0-37-2.30.3-3.63.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492962" comment="libwebkit2gtk3-lang-2.30.3-3.63.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492963" comment="webkit2gtk-4_0-injected-bundles-2.30.3-3.63.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137990" version="1" class="patch">
	<metadata>
		<title>Security update for openssh (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1115550" ref_url="https://bugzilla.suse.com/1115550" source="BUGZILLA"/>
		<reference ref_id="1139398" ref_url="https://bugzilla.suse.com/1139398" source="BUGZILLA"/>
		<reference ref_id="1142000" ref_url="https://bugzilla.suse.com/1142000" source="BUGZILLA"/>
		<reference ref_id="1148566" ref_url="https://bugzilla.suse.com/1148566" source="BUGZILLA"/>
		<reference ref_id="1173513" ref_url="https://bugzilla.suse.com/1173513" source="BUGZILLA"/>
		<reference ref_id="1174162" ref_url="https://bugzilla.suse.com/1174162" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14145" ref_url="https://www.suse.com/security/cve/CVE-2020-14145/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3866-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008083.html" source="SUSE-SU"/>
		<description>
This update for openssh fixes the following issues:

- CVE-2020-14145: Fixed a potential information leak during host key exchange (bsc#1173513).
- Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install (bsc#1142000)
- Fixed an issue where oracle cluster with  cluvfy using 'scp' failing/missinterpreted (bsc#1148566).
- Fixed sshd termination of multichannel sessions with non-root users (bsc#1115550,bsc#1174162).
- Added speculative hardening for key storage (bsc#1139398).  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-17"/>
	<updated date="2020-12-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1115550">SUSE bug 1115550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139398">SUSE bug 1139398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142000">SUSE bug 1142000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148566">SUSE bug 1148566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173513">SUSE bug 1173513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174162">SUSE bug 1174162</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14145/">CVE-2020-14145</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492964" comment="openssh-7.9p1-6.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492965" comment="openssh-helpers-7.9p1-6.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137991" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1176782" ref_url="https://bugzilla.suse.com/1176782" source="BUGZILLA"/>
		<reference ref_id="1179496" ref_url="https://bugzilla.suse.com/1179496" source="BUGZILLA"/>
		<reference ref_id="1179498" ref_url="https://bugzilla.suse.com/1179498" source="BUGZILLA"/>
		<reference ref_id="1179501" ref_url="https://bugzilla.suse.com/1179501" source="BUGZILLA"/>
		<reference ref_id="1179502" ref_url="https://bugzilla.suse.com/1179502" source="BUGZILLA"/>
		<reference ref_id="1179506" ref_url="https://bugzilla.suse.com/1179506" source="BUGZILLA"/>
		<reference ref_id="1179514" ref_url="https://bugzilla.suse.com/1179514" source="BUGZILLA"/>
		<reference ref_id="1179516" ref_url="https://bugzilla.suse.com/1179516" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-29480" ref_url="https://www.suse.com/security/cve/CVE-2020-29480/" source="CVE"/>
		<reference ref_id="CVE-2020-29481" ref_url="https://www.suse.com/security/cve/CVE-2020-29481/" source="CVE"/>
		<reference ref_id="CVE-2020-29483" ref_url="https://www.suse.com/security/cve/CVE-2020-29483/" source="CVE"/>
		<reference ref_id="CVE-2020-29484" ref_url="https://www.suse.com/security/cve/CVE-2020-29484/" source="CVE"/>
		<reference ref_id="CVE-2020-29566" ref_url="https://www.suse.com/security/cve/CVE-2020-29566/" source="CVE"/>
		<reference ref_id="CVE-2020-29570" ref_url="https://www.suse.com/security/cve/CVE-2020-29570/" source="CVE"/>
		<reference ref_id="CVE-2020-29571" ref_url="https://www.suse.com/security/cve/CVE-2020-29571/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008093.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests (bsc#117949 XSA-115).
- CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions (bsc#1179498 XSA-322). 
- CVE-2020-29483: Fixed an issue where guests could disturb domain cleanup (bsc#1179502 XSA-325).
- CVE-2020-29484: Fixed an issue where guests could crash xenstored via watchs (bsc#1179501 XSA-324). 
- CVE-2020-29566: Fixed an undue recursion in x86 HVM context switch code (bsc#1179506 XSA-348).
- CVE-2020-29570: Fixed an issue where FIFO event channels control block related ordering (bsc#1179514 XSA-358).
- CVE-2020-29571: Fixed an issue where FIFO event channels control structure ordering (bsc#1179516 XSA-359).
- Fixed an issue where dump-core shows missing nr_pages during core (bsc#1176782).
- Multiple other bugs (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-18"/>
	<updated date="2020-12-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176782">SUSE bug 1176782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179496">SUSE bug 1179496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179498">SUSE bug 1179498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179501">SUSE bug 1179501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179502">SUSE bug 1179502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179506">SUSE bug 1179506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179514">SUSE bug 1179514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179516">SUSE bug 1179516</bugzilla>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29480/">CVE-2020-29480</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29481/">CVE-2020-29481</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29483/">CVE-2020-29483</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29484/">CVE-2020-29484</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29566/">CVE-2020-29566</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29570/">CVE-2020-29570</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29571/">CVE-2020-29571</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492966" comment="xen-libs-4.12.4_06-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492967" comment="xen-tools-domU-4.12.4_06-3.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137992" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1155094" ref_url="https://bugzilla.suse.com/1155094" source="BUGZILLA"/>
		<reference ref_id="1174091" ref_url="https://bugzilla.suse.com/1174091" source="BUGZILLA"/>
		<reference ref_id="1174571" ref_url="https://bugzilla.suse.com/1174571" source="BUGZILLA"/>
		<reference ref_id="1174701" ref_url="https://bugzilla.suse.com/1174701" source="BUGZILLA"/>
		<reference ref_id="1177211" ref_url="https://bugzilla.suse.com/1177211" source="BUGZILLA"/>
		<reference ref_id="1178009" ref_url="https://bugzilla.suse.com/1178009" source="BUGZILLA"/>
		<reference ref_id="1179193" ref_url="https://bugzilla.suse.com/1179193" source="BUGZILLA"/>
		<reference ref_id="1179630" ref_url="https://bugzilla.suse.com/1179630" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16935" ref_url="https://www.suse.com/security/cve/CVE-2019-16935/" source="CVE"/>
		<reference ref_id="CVE-2019-18348" ref_url="https://www.suse.com/security/cve/CVE-2019-18348/" source="CVE"/>
		<reference ref_id="CVE-2019-20907" ref_url="https://www.suse.com/security/cve/CVE-2019-20907/" source="CVE"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<reference ref_id="CVE-2020-14422" ref_url="https://www.suse.com/security/cve/CVE-2020-14422/" source="CVE"/>
		<reference ref_id="CVE-2020-26116" ref_url="https://www.suse.com/security/cve/CVE-2020-26116/" source="CVE"/>
		<reference ref_id="CVE-2020-27619" ref_url="https://www.suse.com/security/cve/CVE-2020-27619/" source="CVE"/>
		<reference ref_id="CVE-2020-8492" ref_url="https://www.suse.com/security/cve/CVE-2020-8492/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008118.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- Fixed CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.
- Change setuptools and pip version numbers according to new wheels
- Handful of changes to make python36 compatible with SLE15 and SLE12
  (jsc#ECO-2799, jsc#SLE-13738)
- add triplets for mips-r6 and riscv
- RISC-V needs CTYPES_PASS_BY_REF_HACK

Update to 3.6.12 (bsc#1179193)

* Ensure python3.dll is loaded from correct locations when Python is embedded
* The __hash__() methods of ipaddress.IPv4Interface and ipaddress.IPv6Interface 
  incorrectly generated constant hash values of 32 and 128 respectively. This 
  resulted in always causing hash collisions. The fix uses hash() to generate 
  hash values for the tuple of (address, mask length, network address).
* Prevent http header injection by rejecting control characters in 
  http.client.putrequest(…).
* Unpickling invalid NEWOBJ_EX opcode with the C implementation raises now 
  UnpicklingError instead of crashing.
* Avoid infinite loop when reading specially crafted TAR files using the tarfile 
  module

- This release also fixes CVE-2020-26116 (bsc#1177211) and CVE-2019-20907 (bsc#1174091).

Update to 3.6.11:

- Disallow CR or LF in email.headerregistry. Address
  arguments to guard against header injection attacks.
- Disallow control characters in hostnames in http.client, addressing
  CVE-2019-18348. Such potentially malicious header injection URLs now
  cause a InvalidURL to be raised. (bsc#1155094)
- CVE-2020-8492: The AbstractBasicAuthHandler class
  of the urllib.request module uses an inefficient regular
  expression which can be exploited by an attacker to cause
  a denial of service. Fix the regex to prevent the
  catastrophic backtracking. Vulnerability reported by Ben
  Caller and Matt Schwager.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-23"/>
	<updated date="2020-12-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1155094">SUSE bug 1155094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174091">SUSE bug 1174091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174571">SUSE bug 1174571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174701">SUSE bug 1174701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177211">SUSE bug 1177211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178009">SUSE bug 1178009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179193">SUSE bug 1179193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179630">SUSE bug 1179630</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16935/">CVE-2019-16935</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-18348/">CVE-2019-18348</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20907/">CVE-2019-20907</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14422/">CVE-2020-14422</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26116/">CVE-2020-26116</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27619/">CVE-2020-27619</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8492/">CVE-2020-8492</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492968" comment="libpython3_6m1_0-3.6.12-3.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492969" comment="python3-3.6.12-3.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492970" comment="python3-base-3.6.12-3.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492971" comment="python3-curses-3.6.12-3.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492972" comment="python3-dbm-3.6.12-3.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492973" comment="python3-devel-3.6.12-3.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492974" comment="python3-idle-3.6.12-3.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492975" comment="python3-testsuite-3.6.12-3.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492976" comment="python3-tk-3.6.12-3.67.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137993" version="1" class="patch">
	<metadata>
		<title>Security update for flac (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1180099" ref_url="https://bugzilla.suse.com/1180099" source="BUGZILLA"/>
		<reference ref_id="1180112" ref_url="https://bugzilla.suse.com/1180112" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0487" ref_url="https://www.suse.com/security/cve/CVE-2020-0487/" source="CVE"/>
		<reference ref_id="CVE-2020-0499" ref_url="https://www.suse.com/security/cve/CVE-2020-0499/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008120.html" source="SUSE-SU"/>
		<description>
This update for flac fixes the following issues:

- CVE-2020-0487: Fixed a memory leak (bsc#1180112).
- CVE-2020-0499: Fixed an out-of-bounds access (bsc#1180099).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-24"/>
	<updated date="2020-12-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1180099">SUSE bug 1180099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180112">SUSE bug 1180112</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-0487/">CVE-2020-0487</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0499/">CVE-2020-0499</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492977" comment="flac-devel-1.3.2-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492978" comment="libFLAC++6-1.3.2-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492979" comment="libFLAC8-1.3.2-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137994" version="1" class="patch">
	<metadata>
		<title>Security update for ipmitool (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1163026" ref_url="https://bugzilla.suse.com/1163026" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-5208" ref_url="https://www.suse.com/security/cve/CVE-2020-5208/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006493.html" source="SUSE-SU"/>
		<description>
This update for ipmitool fixes the following security issue:

- CVE-2020-5208: Fixed several buffer overflows (bsc#1163026).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-19"/>
	<updated date="2020-02-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1163026">SUSE bug 1163026</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-5208/">CVE-2020-5208</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492980" comment="ipmitool-1.8.18-7.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137995" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162202" ref_url="https://bugzilla.suse.com/1162202" source="BUGZILLA"/>
		<reference ref_id="1162675" ref_url="https://bugzilla.suse.com/1162675" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18634" ref_url="https://www.suse.com/security/cve/CVE-2019-18634/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006494.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:

Security issue fixed:

- CVE-2019-18634: Fixed a buffer overflow in the passphrase prompt that could occur when pwfeedback was enabled in /etc/sudoers (bsc#1162202).

Non-security issue fixed:

- Fixed an issue where sudo -l would ask for a password even though `listpw` was set to `never` (bsc#1162675).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-19"/>
	<updated date="2020-02-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1162202">SUSE bug 1162202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162675">SUSE bug 1162675</bugzilla>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18634/">CVE-2019-18634</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491390" comment="sudo-1.8.22-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491391" comment="sudo-devel-1.8.22-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137996" version="1" class="patch">
	<metadata>
		<title>Security update for libsolv, libzypp, zypper (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1135114" ref_url="https://bugzilla.suse.com/1135114" source="BUGZILLA"/>
		<reference ref_id="1154804" ref_url="https://bugzilla.suse.com/1154804" source="BUGZILLA"/>
		<reference ref_id="1154805" ref_url="https://bugzilla.suse.com/1154805" source="BUGZILLA"/>
		<reference ref_id="1155198" ref_url="https://bugzilla.suse.com/1155198" source="BUGZILLA"/>
		<reference ref_id="1155205" ref_url="https://bugzilla.suse.com/1155205" source="BUGZILLA"/>
		<reference ref_id="1155298" ref_url="https://bugzilla.suse.com/1155298" source="BUGZILLA"/>
		<reference ref_id="1155678" ref_url="https://bugzilla.suse.com/1155678" source="BUGZILLA"/>
		<reference ref_id="1155819" ref_url="https://bugzilla.suse.com/1155819" source="BUGZILLA"/>
		<reference ref_id="1156158" ref_url="https://bugzilla.suse.com/1156158" source="BUGZILLA"/>
		<reference ref_id="1157377" ref_url="https://bugzilla.suse.com/1157377" source="BUGZILLA"/>
		<reference ref_id="1158763" ref_url="https://bugzilla.suse.com/1158763" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18900" ref_url="https://www.suse.com/security/cve/CVE-2019-18900/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0432-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006510.html" source="SUSE-SU"/>
		<description>
This update for libsolv, libzypp, zypper fixes the following issues:


Security issue fixed:

- CVE-2019-18900: Fixed assert cookie file that was world readable (bsc#1158763).

Bug fixes

- Fixed removing orphaned packages dropped by to-be-installed products (bsc#1155819).
- Adds libzypp API to mark all obsolete kernels according to the existing purge-kernel script rules (bsc#1155198).
- Do not enforce 'en' being in RequestedLocales If the user decides to have a system without explicit language support he may do so (bsc#1155678).                                            
- Load only target resolvables for zypper rm (bsc#1157377).
- Fix broken search by filelist (bsc#1135114).
- Replace python by a bash script in zypper-log (fixes#304, fixes#306, bsc#1156158).
- Do not sort out requested locales which are not available (bsc#1155678).
- Prevent listing duplicate matches in tables. XML result is provided within the new list-patches-byissue element (bsc#1154805).                                                              
- XML add patch issue-date and issue-list (bsc#1154805).
- Fix zypper lp --cve/bugzilla/issue options (bsc#1155298).
- Always execute commit when adding/removing locales (fixes bsc#1155205).
- Fix description of --table-style,-s in man page (bsc#1154804).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-21"/>
	<updated date="2020-02-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1135114">SUSE bug 1135114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154804">SUSE bug 1154804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154805">SUSE bug 1154805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155198">SUSE bug 1155198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155205">SUSE bug 1155205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155298">SUSE bug 1155298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155678">SUSE bug 1155678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155819">SUSE bug 1155819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156158">SUSE bug 1156158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157377">SUSE bug 1157377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158763">SUSE bug 1158763</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-18900/">CVE-2019-18900</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492981" comment="libsolv-devel-0.7.10-3.13.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492982" comment="libsolv-tools-0.7.10-3.13.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492983" comment="libzypp-17.19.0-3.14.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492984" comment="libzypp-devel-17.19.0-3.14.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492985" comment="python3-solv-0.7.10-3.13.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492986" comment="zypper-1.14.33-3.13.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492987" comment="zypper-log-1.14.33-3.13.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492988" comment="zypper-needs-restarting-1.14.33-3.13.5 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137997" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1082023" ref_url="https://bugzilla.suse.com/1082023" source="BUGZILLA"/>
		<reference ref_id="1149792" ref_url="https://bugzilla.suse.com/1149792" source="BUGZILLA"/>
		<reference ref_id="1158785" ref_url="https://bugzilla.suse.com/1158785" source="BUGZILLA"/>
		<reference ref_id="1158787" ref_url="https://bugzilla.suse.com/1158787" source="BUGZILLA"/>
		<reference ref_id="1158788" ref_url="https://bugzilla.suse.com/1158788" source="BUGZILLA"/>
		<reference ref_id="1158789" ref_url="https://bugzilla.suse.com/1158789" source="BUGZILLA"/>
		<reference ref_id="1158790" ref_url="https://bugzilla.suse.com/1158790" source="BUGZILLA"/>
		<reference ref_id="1158791" ref_url="https://bugzilla.suse.com/1158791" source="BUGZILLA"/>
		<reference ref_id="1158792" ref_url="https://bugzilla.suse.com/1158792" source="BUGZILLA"/>
		<reference ref_id="1158793" ref_url="https://bugzilla.suse.com/1158793" source="BUGZILLA"/>
		<reference ref_id="1158795" ref_url="https://bugzilla.suse.com/1158795" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1348" ref_url="https://www.suse.com/security/cve/CVE-2019-1348/" source="CVE"/>
		<reference ref_id="CVE-2019-1349" ref_url="https://www.suse.com/security/cve/CVE-2019-1349/" source="CVE"/>
		<reference ref_id="CVE-2019-1350" ref_url="https://www.suse.com/security/cve/CVE-2019-1350/" source="CVE"/>
		<reference ref_id="CVE-2019-1351" ref_url="https://www.suse.com/security/cve/CVE-2019-1351/" source="CVE"/>
		<reference ref_id="CVE-2019-1352" ref_url="https://www.suse.com/security/cve/CVE-2019-1352/" source="CVE"/>
		<reference ref_id="CVE-2019-1353" ref_url="https://www.suse.com/security/cve/CVE-2019-1353/" source="CVE"/>
		<reference ref_id="CVE-2019-1354" ref_url="https://www.suse.com/security/cve/CVE-2019-1354/" source="CVE"/>
		<reference ref_id="CVE-2019-1387" ref_url="https://www.suse.com/security/cve/CVE-2019-1387/" source="CVE"/>
		<reference ref_id="CVE-2019-19604" ref_url="https://www.suse.com/security/cve/CVE-2019-19604/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006313.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

Security issues fixed:

- CVE-2019-1349: Fixed issue on Windows, when submodules are cloned recursively, under certain circumstances Git could be fooled into using the same Git directory twice (bsc#1158787).
- CVE-2019-19604: Fixed a recursive clone followed by a submodule update could execute code contained within the repository without the user explicitly having asked for that (bsc#1158795).
- CVE-2019-1387: Fixed recursive clones that are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones (bsc#1158793).
- CVE-2019-1354: Fixed issue on Windows that refuses to write tracked files with filenames that contain backslashes (bsc#1158792).
- CVE-2019-1353: Fixed issue when run in the Windows Subsystem for Linux while accessing a working directory on a regular Windows drive, none of the NTFS protections were active (bsc#1158791).
- CVE-2019-1352: Fixed issue on Windows was unaware of NTFS Alternate Data Streams (bsc#1158790).
- CVE-2019-1351: Fixed issue on Windows mistakes drive letters outside of the US-English alphabet as relative paths (bsc#1158789).
- CVE-2019-1350: Fixed incorrect quoting of command-line arguments allowed remote code execution during a recursive clone in conjunction with SSH URLs (bsc#1158788).
- CVE-2019-1348: Fixed the --export-marks option of fast-import is exposed also via  the in-stream command feature export-marks=... and it allows overwriting arbitrary paths (bsc#1158785).
- Fixes an issue where git send-email failed to authenticate with SMTP server (bsc#1082023)

Bug fixes:

- Add zlib dependency, which used to be provided by openssl-devel, so that package can compile successfully after openssl upgrade to 1.1.1. (bsc#1149792).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-08"/>
	<updated date="2020-01-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1082023">SUSE bug 1082023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149792">SUSE bug 1149792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158785">SUSE bug 1158785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158787">SUSE bug 1158787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158788">SUSE bug 1158788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158789">SUSE bug 1158789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158790">SUSE bug 1158790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158791">SUSE bug 1158791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158792">SUSE bug 1158792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158793">SUSE bug 1158793</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158795">SUSE bug 1158795</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-1348/">CVE-2019-1348</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1349/">CVE-2019-1349</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1350/">CVE-2019-1350</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-1351/">CVE-2019-1351</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1352/">CVE-2019-1352</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1353/">CVE-2019-1353</cve>
	<cve impact="low" cvss3="0/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1354/">CVE-2019-1354</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1387/">CVE-2019-1387</cve>
	<cve impact="critical" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19604/">CVE-2019-19604</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491392" comment="git-core-2.16.4-3.17.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137998" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162224" ref_url="https://bugzilla.suse.com/1162224" source="BUGZILLA"/>
		<reference ref_id="1162367" ref_url="https://bugzilla.suse.com/1162367" source="BUGZILLA"/>
		<reference ref_id="1162423" ref_url="https://bugzilla.suse.com/1162423" source="BUGZILLA"/>
		<reference ref_id="1162825" ref_url="https://bugzilla.suse.com/1162825" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9674" ref_url="https://www.suse.com/security/cve/CVE-2019-9674/" source="CVE"/>
		<reference ref_id="CVE-2020-8492" ref_url="https://www.suse.com/security/cve/CVE-2020-8492/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0467-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006520.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

Security issues fixed:

- CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825).
- CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service via HTTP (bsc#1162367).

Non-security issue fixed:

- If the locale is 'C', coerce it to C.UTF-8 (bsc#1162423).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-25"/>
	<updated date="2020-02-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162224">SUSE bug 1162224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162367">SUSE bug 1162367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162423">SUSE bug 1162423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162825">SUSE bug 1162825</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9674/">CVE-2019-9674</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8492/">CVE-2020-8492</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492989" comment="libpython3_6m1_0-3.6.10-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492990" comment="python3-3.6.10-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492991" comment="python3-base-3.6.10-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492992" comment="python3-curses-3.6.10-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492993" comment="python3-dbm-3.6.10-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492994" comment="python3-devel-3.6.10-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492995" comment="python3-idle-3.6.10-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492996" comment="python3-tk-3.6.10-3.47.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:137999" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159329" ref_url="https://bugzilla.suse.com/1159329" source="BUGZILLA"/>
		<reference ref_id="1161719" ref_url="https://bugzilla.suse.com/1161719" source="BUGZILLA"/>
		<reference ref_id="1163809" ref_url="https://bugzilla.suse.com/1163809" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8835" ref_url="https://www.suse.com/security/cve/CVE-2019-8835/" source="CVE"/>
		<reference ref_id="CVE-2019-8844" ref_url="https://www.suse.com/security/cve/CVE-2019-8844/" source="CVE"/>
		<reference ref_id="CVE-2019-8846" ref_url="https://www.suse.com/security/cve/CVE-2019-8846/" source="CVE"/>
		<reference ref_id="CVE-2020-3862" ref_url="https://www.suse.com/security/cve/CVE-2020-3862/" source="CVE"/>
		<reference ref_id="CVE-2020-3864" ref_url="https://www.suse.com/security/cve/CVE-2020-3864/" source="CVE"/>
		<reference ref_id="CVE-2020-3865" ref_url="https://www.suse.com/security/cve/CVE-2020-3865/" source="CVE"/>
		<reference ref_id="CVE-2020-3867" ref_url="https://www.suse.com/security/cve/CVE-2020-3867/" source="CVE"/>
		<reference ref_id="CVE-2020-3868" ref_url="https://www.suse.com/security/cve/CVE-2020-3868/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006522.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 to version 2.26.4 fixes the following issues:

Security issues fixed:

- CVE-2019-8835: Fixed multiple memory corruption issues (bsc#1161719).
- CVE-2019-8844: Fixed multiple memory corruption issues (bsc#1161719).
- CVE-2019-8846: Fixed a use-after-free issue (bsc#1161719).
- CVE-2020-3862: Fixed a memory handling issue (bsc#1163809).
- CVE-2020-3864: Fixed a logic issue in the DOM object context handling (bsc#1163809).
- CVE-2020-3865: Fixed a logic issue in the DOM object context handling (bsc#1163809).
- CVE-2020-3867: Fixed an XSS issue (bsc#1163809).
- CVE-2020-3868: Fixed multiple memory corruption issues that could have lead to arbitrary code execution (bsc#1163809).

Non-security issues fixed:

- Fixed issues while trying to play a video on NextCloud.
- Fixed vertical alignment of text containing arabic diacritics.
- Fixed build with icu 65.1.
- Fixed page loading errors with websites using HSTS.
- Fixed web process crash when displaying a KaTeX formula.
- Fixed several crashes and rendering issues.
- Switched to a single web process for Evolution and geary (bsc#1159329 glgo#GNOME/evolution#587).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-25"/>
	<updated date="2020-02-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159329">SUSE bug 1159329</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161719">SUSE bug 1161719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163809">SUSE bug 1163809</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8835/">CVE-2019-8835</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8844/">CVE-2019-8844</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8846/">CVE-2019-8846</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-3862/">CVE-2020-3862</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-3864/">CVE-2020-3864</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3865/">CVE-2020-3865</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-3867/">CVE-2020-3867</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3868/">CVE-2020-3868</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491393" comment="libjavascriptcoregtk-4_0-18-2.26.4-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491394" comment="libwebkit2gtk-4_0-37-2.26.4-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491395" comment="libwebkit2gtk3-lang-2.26.4-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491396" comment="webkit2gtk-4_0-injected-bundles-2.26.4-3.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138000" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162224" ref_url="https://bugzilla.suse.com/1162224" source="BUGZILLA"/>
		<reference ref_id="1162367" ref_url="https://bugzilla.suse.com/1162367" source="BUGZILLA"/>
		<reference ref_id="1162825" ref_url="https://bugzilla.suse.com/1162825" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9674" ref_url="https://www.suse.com/security/cve/CVE-2019-9674/" source="CVE"/>
		<reference ref_id="CVE-2020-8492" ref_url="https://www.suse.com/security/cve/CVE-2020-8492/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006545.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

Security issues fixed:

- CVE-2019-9674: Improved the documentation, warning about dangers of zip-bombs (bsc#1162825).
- CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service via HTTP (bsc#1162367).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-27"/>
	<updated date="2020-02-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162224">SUSE bug 1162224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162367">SUSE bug 1162367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162825">SUSE bug 1162825</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9674/">CVE-2019-9674</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8492/">CVE-2020-8492</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009492997" comment="libpython2_7-1_0-2.7.17-7.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492998" comment="python-2.7.17-7.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492999" comment="python-base-2.7.17-7.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138001" version="1" class="patch">
	<metadata>
		<title>Security update for log4j (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159646" ref_url="https://bugzilla.suse.com/1159646" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17571" ref_url="https://www.suse.com/security/cve/CVE-2019-17571/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0053-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200053-1.html" source="SUSE-SU"/>
		<description>
This update for log4j fixes the following issues:

- CVE-2019-17571: Fixed a remote code execution by deserialization of untrusted data in SocketServer (bsc#1159646).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-09"/>
	<updated date="2020-01-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159646">SUSE bug 1159646</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17571/">CVE-2019-17571</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491397" comment="log4j-1.2.17-5.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138002" version="1" class="patch">
	<metadata>
		<title>Security update for permissions (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1148788" ref_url="https://bugzilla.suse.com/1148788" source="BUGZILLA"/>
		<reference ref_id="1160594" ref_url="https://bugzilla.suse.com/1160594" source="BUGZILLA"/>
		<reference ref_id="1160764" ref_url="https://bugzilla.suse.com/1160764" source="BUGZILLA"/>
		<reference ref_id="1161779" ref_url="https://bugzilla.suse.com/1161779" source="BUGZILLA"/>
		<reference ref_id="1163922" ref_url="https://bugzilla.suse.com/1163922" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3687" ref_url="https://www.suse.com/security/cve/CVE-2019-3687/" source="CVE"/>
		<reference ref_id="CVE-2020-8013" ref_url="https://www.suse.com/security/cve/CVE-2020-8013/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006556.html" source="SUSE-SU"/>
		<description>
This update for permissions fixes the following issues:

Security issues fixed:

- CVE-2019-3687: Fixed a privilege escalation which could allow a local user to read network traffic if wireshark is installed (bsc#1148788)
- CVE-2020-8013: Fixed an issue where chkstat set unintended setuid/capabilities for mrsh and wodim (bsc#1163922).

Non-security issues fixed:

- Fixed a regression where chkstat breaks without /proc available (bsc#1160764, bsc#1160594).
- Fixed capability handling when doing multiple permission changes at once (bsc#1161779).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-28"/>
	<updated date="2020-02-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1148788">SUSE bug 1148788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160594">SUSE bug 1160594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160764">SUSE bug 1160764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161779">SUSE bug 1161779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163922">SUSE bug 1163922</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-3687/">CVE-2019-3687</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8013/">CVE-2020-8013</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493000" comment="permissions-20181116-9.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493001" comment="permissions-zypp-plugin-20181116-9.23.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138003" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1046303" ref_url="https://bugzilla.suse.com/1046303" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1051858" ref_url="https://bugzilla.suse.com/1051858" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1086301" ref_url="https://bugzilla.suse.com/1086301" source="BUGZILLA"/>
		<reference ref_id="1086313" ref_url="https://bugzilla.suse.com/1086313" source="BUGZILLA"/>
		<reference ref_id="1086314" ref_url="https://bugzilla.suse.com/1086314" source="BUGZILLA"/>
		<reference ref_id="1088810" ref_url="https://bugzilla.suse.com/1088810" source="BUGZILLA"/>
		<reference ref_id="1090888" ref_url="https://bugzilla.suse.com/1090888" source="BUGZILLA"/>
		<reference ref_id="1103989" ref_url="https://bugzilla.suse.com/1103989" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1105392" ref_url="https://bugzilla.suse.com/1105392" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1112504" ref_url="https://bugzilla.suse.com/1112504" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1115026" ref_url="https://bugzilla.suse.com/1115026" source="BUGZILLA"/>
		<reference ref_id="1118338" ref_url="https://bugzilla.suse.com/1118338" source="BUGZILLA"/>
		<reference ref_id="1118661" ref_url="https://bugzilla.suse.com/1118661" source="BUGZILLA"/>
		<reference ref_id="1123328" ref_url="https://bugzilla.suse.com/1123328" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1127682" ref_url="https://bugzilla.suse.com/1127682" source="BUGZILLA"/>
		<reference ref_id="1129551" ref_url="https://bugzilla.suse.com/1129551" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1133147" ref_url="https://bugzilla.suse.com/1133147" source="BUGZILLA"/>
		<reference ref_id="1134973" ref_url="https://bugzilla.suse.com/1134973" source="BUGZILLA"/>
		<reference ref_id="1140025" ref_url="https://bugzilla.suse.com/1140025" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1143959" ref_url="https://bugzilla.suse.com/1143959" source="BUGZILLA"/>
		<reference ref_id="1144162" ref_url="https://bugzilla.suse.com/1144162" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146544" ref_url="https://bugzilla.suse.com/1146544" source="BUGZILLA"/>
		<reference ref_id="1151548" ref_url="https://bugzilla.suse.com/1151548" source="BUGZILLA"/>
		<reference ref_id="1151910" ref_url="https://bugzilla.suse.com/1151910" source="BUGZILLA"/>
		<reference ref_id="1151927" ref_url="https://bugzilla.suse.com/1151927" source="BUGZILLA"/>
		<reference ref_id="1152107" ref_url="https://bugzilla.suse.com/1152107" source="BUGZILLA"/>
		<reference ref_id="1152631" ref_url="https://bugzilla.suse.com/1152631" source="BUGZILLA"/>
		<reference ref_id="1153535" ref_url="https://bugzilla.suse.com/1153535" source="BUGZILLA"/>
		<reference ref_id="1153917" ref_url="https://bugzilla.suse.com/1153917" source="BUGZILLA"/>
		<reference ref_id="1154243" ref_url="https://bugzilla.suse.com/1154243" source="BUGZILLA"/>
		<reference ref_id="1154601" ref_url="https://bugzilla.suse.com/1154601" source="BUGZILLA"/>
		<reference ref_id="1154768" ref_url="https://bugzilla.suse.com/1154768" source="BUGZILLA"/>
		<reference ref_id="1154916" ref_url="https://bugzilla.suse.com/1154916" source="BUGZILLA"/>
		<reference ref_id="1155331" ref_url="https://bugzilla.suse.com/1155331" source="BUGZILLA"/>
		<reference ref_id="1155334" ref_url="https://bugzilla.suse.com/1155334" source="BUGZILLA"/>
		<reference ref_id="1155689" ref_url="https://bugzilla.suse.com/1155689" source="BUGZILLA"/>
		<reference ref_id="1156259" ref_url="https://bugzilla.suse.com/1156259" source="BUGZILLA"/>
		<reference ref_id="1156286" ref_url="https://bugzilla.suse.com/1156286" source="BUGZILLA"/>
		<reference ref_id="1156462" ref_url="https://bugzilla.suse.com/1156462" source="BUGZILLA"/>
		<reference ref_id="1157155" ref_url="https://bugzilla.suse.com/1157155" source="BUGZILLA"/>
		<reference ref_id="1157157" ref_url="https://bugzilla.suse.com/1157157" source="BUGZILLA"/>
		<reference ref_id="1157169" ref_url="https://bugzilla.suse.com/1157169" source="BUGZILLA"/>
		<reference ref_id="1157303" ref_url="https://bugzilla.suse.com/1157303" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1157480" ref_url="https://bugzilla.suse.com/1157480" source="BUGZILLA"/>
		<reference ref_id="1157692" ref_url="https://bugzilla.suse.com/1157692" source="BUGZILLA"/>
		<reference ref_id="1157853" ref_url="https://bugzilla.suse.com/1157853" source="BUGZILLA"/>
		<reference ref_id="1157895" ref_url="https://bugzilla.suse.com/1157895" source="BUGZILLA"/>
		<reference ref_id="1157908" ref_url="https://bugzilla.suse.com/1157908" source="BUGZILLA"/>
		<reference ref_id="1157966" ref_url="https://bugzilla.suse.com/1157966" source="BUGZILLA"/>
		<reference ref_id="1158013" ref_url="https://bugzilla.suse.com/1158013" source="BUGZILLA"/>
		<reference ref_id="1158021" ref_url="https://bugzilla.suse.com/1158021" source="BUGZILLA"/>
		<reference ref_id="1158026" ref_url="https://bugzilla.suse.com/1158026" source="BUGZILLA"/>
		<reference ref_id="1158071" ref_url="https://bugzilla.suse.com/1158071" source="BUGZILLA"/>
		<reference ref_id="1158094" ref_url="https://bugzilla.suse.com/1158094" source="BUGZILLA"/>
		<reference ref_id="1158132" ref_url="https://bugzilla.suse.com/1158132" source="BUGZILLA"/>
		<reference ref_id="1158381" ref_url="https://bugzilla.suse.com/1158381" source="BUGZILLA"/>
		<reference ref_id="1158533" ref_url="https://bugzilla.suse.com/1158533" source="BUGZILLA"/>
		<reference ref_id="1158637" ref_url="https://bugzilla.suse.com/1158637" source="BUGZILLA"/>
		<reference ref_id="1158638" ref_url="https://bugzilla.suse.com/1158638" source="BUGZILLA"/>
		<reference ref_id="1158639" ref_url="https://bugzilla.suse.com/1158639" source="BUGZILLA"/>
		<reference ref_id="1158640" ref_url="https://bugzilla.suse.com/1158640" source="BUGZILLA"/>
		<reference ref_id="1158641" ref_url="https://bugzilla.suse.com/1158641" source="BUGZILLA"/>
		<reference ref_id="1158643" ref_url="https://bugzilla.suse.com/1158643" source="BUGZILLA"/>
		<reference ref_id="1158644" ref_url="https://bugzilla.suse.com/1158644" source="BUGZILLA"/>
		<reference ref_id="1158645" ref_url="https://bugzilla.suse.com/1158645" source="BUGZILLA"/>
		<reference ref_id="1158646" ref_url="https://bugzilla.suse.com/1158646" source="BUGZILLA"/>
		<reference ref_id="1158647" ref_url="https://bugzilla.suse.com/1158647" source="BUGZILLA"/>
		<reference ref_id="1158649" ref_url="https://bugzilla.suse.com/1158649" source="BUGZILLA"/>
		<reference ref_id="1158651" ref_url="https://bugzilla.suse.com/1158651" source="BUGZILLA"/>
		<reference ref_id="1158652" ref_url="https://bugzilla.suse.com/1158652" source="BUGZILLA"/>
		<reference ref_id="1158819" ref_url="https://bugzilla.suse.com/1158819" source="BUGZILLA"/>
		<reference ref_id="1158823" ref_url="https://bugzilla.suse.com/1158823" source="BUGZILLA"/>
		<reference ref_id="1158824" ref_url="https://bugzilla.suse.com/1158824" source="BUGZILLA"/>
		<reference ref_id="1158827" ref_url="https://bugzilla.suse.com/1158827" source="BUGZILLA"/>
		<reference ref_id="1158834" ref_url="https://bugzilla.suse.com/1158834" source="BUGZILLA"/>
		<reference ref_id="1158893" ref_url="https://bugzilla.suse.com/1158893" source="BUGZILLA"/>
		<reference ref_id="1158900" ref_url="https://bugzilla.suse.com/1158900" source="BUGZILLA"/>
		<reference ref_id="1158903" ref_url="https://bugzilla.suse.com/1158903" source="BUGZILLA"/>
		<reference ref_id="1158904" ref_url="https://bugzilla.suse.com/1158904" source="BUGZILLA"/>
		<reference ref_id="1158954" ref_url="https://bugzilla.suse.com/1158954" source="BUGZILLA"/>
		<reference ref_id="1159024" ref_url="https://bugzilla.suse.com/1159024" source="BUGZILLA"/>
		<reference ref_id="1159028" ref_url="https://bugzilla.suse.com/1159028" source="BUGZILLA"/>
		<reference ref_id="1159271" ref_url="https://bugzilla.suse.com/1159271" source="BUGZILLA"/>
		<reference ref_id="1159297" ref_url="https://bugzilla.suse.com/1159297" source="BUGZILLA"/>
		<reference ref_id="1159377" ref_url="https://bugzilla.suse.com/1159377" source="BUGZILLA"/>
		<reference ref_id="1159394" ref_url="https://bugzilla.suse.com/1159394" source="BUGZILLA"/>
		<reference ref_id="1159483" ref_url="https://bugzilla.suse.com/1159483" source="BUGZILLA"/>
		<reference ref_id="1159484" ref_url="https://bugzilla.suse.com/1159484" source="BUGZILLA"/>
		<reference ref_id="1159500" ref_url="https://bugzilla.suse.com/1159500" source="BUGZILLA"/>
		<reference ref_id="1159569" ref_url="https://bugzilla.suse.com/1159569" source="BUGZILLA"/>
		<reference ref_id="1159588" ref_url="https://bugzilla.suse.com/1159588" source="BUGZILLA"/>
		<reference ref_id="1159841" ref_url="https://bugzilla.suse.com/1159841" source="BUGZILLA"/>
		<reference ref_id="1159908" ref_url="https://bugzilla.suse.com/1159908" source="BUGZILLA"/>
		<reference ref_id="1159909" ref_url="https://bugzilla.suse.com/1159909" source="BUGZILLA"/>
		<reference ref_id="1159910" ref_url="https://bugzilla.suse.com/1159910" source="BUGZILLA"/>
		<reference ref_id="1159911" ref_url="https://bugzilla.suse.com/1159911" source="BUGZILLA"/>
		<reference ref_id="1159955" ref_url="https://bugzilla.suse.com/1159955" source="BUGZILLA"/>
		<reference ref_id="1160147" ref_url="https://bugzilla.suse.com/1160147" source="BUGZILLA"/>
		<reference ref_id="1160195" ref_url="https://bugzilla.suse.com/1160195" source="BUGZILLA"/>
		<reference ref_id="1160210" ref_url="https://bugzilla.suse.com/1160210" source="BUGZILLA"/>
		<reference ref_id="1160211" ref_url="https://bugzilla.suse.com/1160211" source="BUGZILLA"/>
		<reference ref_id="1160218" ref_url="https://bugzilla.suse.com/1160218" source="BUGZILLA"/>
		<reference ref_id="1160433" ref_url="https://bugzilla.suse.com/1160433" source="BUGZILLA"/>
		<reference ref_id="1160442" ref_url="https://bugzilla.suse.com/1160442" source="BUGZILLA"/>
		<reference ref_id="1160469" ref_url="https://bugzilla.suse.com/1160469" source="BUGZILLA"/>
		<reference ref_id="1160470" ref_url="https://bugzilla.suse.com/1160470" source="BUGZILLA"/>
		<reference ref_id="1160476" ref_url="https://bugzilla.suse.com/1160476" source="BUGZILLA"/>
		<reference ref_id="1160560" ref_url="https://bugzilla.suse.com/1160560" source="BUGZILLA"/>
		<reference ref_id="1160618" ref_url="https://bugzilla.suse.com/1160618" source="BUGZILLA"/>
		<reference ref_id="1160678" ref_url="https://bugzilla.suse.com/1160678" source="BUGZILLA"/>
		<reference ref_id="1160755" ref_url="https://bugzilla.suse.com/1160755" source="BUGZILLA"/>
		<reference ref_id="1160756" ref_url="https://bugzilla.suse.com/1160756" source="BUGZILLA"/>
		<reference ref_id="1160784" ref_url="https://bugzilla.suse.com/1160784" source="BUGZILLA"/>
		<reference ref_id="1160787" ref_url="https://bugzilla.suse.com/1160787" source="BUGZILLA"/>
		<reference ref_id="1160802" ref_url="https://bugzilla.suse.com/1160802" source="BUGZILLA"/>
		<reference ref_id="1160803" ref_url="https://bugzilla.suse.com/1160803" source="BUGZILLA"/>
		<reference ref_id="1160804" ref_url="https://bugzilla.suse.com/1160804" source="BUGZILLA"/>
		<reference ref_id="1160917" ref_url="https://bugzilla.suse.com/1160917" source="BUGZILLA"/>
		<reference ref_id="1160966" ref_url="https://bugzilla.suse.com/1160966" source="BUGZILLA"/>
		<reference ref_id="1160979" ref_url="https://bugzilla.suse.com/1160979" source="BUGZILLA"/>
		<reference ref_id="1161087" ref_url="https://bugzilla.suse.com/1161087" source="BUGZILLA"/>
		<reference ref_id="1161243" ref_url="https://bugzilla.suse.com/1161243" source="BUGZILLA"/>
		<reference ref_id="1161360" ref_url="https://bugzilla.suse.com/1161360" source="BUGZILLA"/>
		<reference ref_id="1161472" ref_url="https://bugzilla.suse.com/1161472" source="BUGZILLA"/>
		<reference ref_id="1161514" ref_url="https://bugzilla.suse.com/1161514" source="BUGZILLA"/>
		<reference ref_id="1161518" ref_url="https://bugzilla.suse.com/1161518" source="BUGZILLA"/>
		<reference ref_id="1161522" ref_url="https://bugzilla.suse.com/1161522" source="BUGZILLA"/>
		<reference ref_id="1161523" ref_url="https://bugzilla.suse.com/1161523" source="BUGZILLA"/>
		<reference ref_id="1161549" ref_url="https://bugzilla.suse.com/1161549" source="BUGZILLA"/>
		<reference ref_id="1161552" ref_url="https://bugzilla.suse.com/1161552" source="BUGZILLA"/>
		<reference ref_id="1161674" ref_url="https://bugzilla.suse.com/1161674" source="BUGZILLA"/>
		<reference ref_id="1161702" ref_url="https://bugzilla.suse.com/1161702" source="BUGZILLA"/>
		<reference ref_id="1161907" ref_url="https://bugzilla.suse.com/1161907" source="BUGZILLA"/>
		<reference ref_id="1161931" ref_url="https://bugzilla.suse.com/1161931" source="BUGZILLA"/>
		<reference ref_id="1161933" ref_url="https://bugzilla.suse.com/1161933" source="BUGZILLA"/>
		<reference ref_id="1161934" ref_url="https://bugzilla.suse.com/1161934" source="BUGZILLA"/>
		<reference ref_id="1161935" ref_url="https://bugzilla.suse.com/1161935" source="BUGZILLA"/>
		<reference ref_id="1161936" ref_url="https://bugzilla.suse.com/1161936" source="BUGZILLA"/>
		<reference ref_id="1161937" ref_url="https://bugzilla.suse.com/1161937" source="BUGZILLA"/>
		<reference ref_id="1162028" ref_url="https://bugzilla.suse.com/1162028" source="BUGZILLA"/>
		<reference ref_id="1162067" ref_url="https://bugzilla.suse.com/1162067" source="BUGZILLA"/>
		<reference ref_id="1162109" ref_url="https://bugzilla.suse.com/1162109" source="BUGZILLA"/>
		<reference ref_id="1162139" ref_url="https://bugzilla.suse.com/1162139" source="BUGZILLA"/>
		<reference ref_id="1162557" ref_url="https://bugzilla.suse.com/1162557" source="BUGZILLA"/>
		<reference ref_id="1162617" ref_url="https://bugzilla.suse.com/1162617" source="BUGZILLA"/>
		<reference ref_id="1162618" ref_url="https://bugzilla.suse.com/1162618" source="BUGZILLA"/>
		<reference ref_id="1162619" ref_url="https://bugzilla.suse.com/1162619" source="BUGZILLA"/>
		<reference ref_id="1162623" ref_url="https://bugzilla.suse.com/1162623" source="BUGZILLA"/>
		<reference ref_id="1162928" ref_url="https://bugzilla.suse.com/1162928" source="BUGZILLA"/>
		<reference ref_id="1162943" ref_url="https://bugzilla.suse.com/1162943" source="BUGZILLA"/>
		<reference ref_id="1163206" ref_url="https://bugzilla.suse.com/1163206" source="BUGZILLA"/>
		<reference ref_id="1163383" ref_url="https://bugzilla.suse.com/1163383" source="BUGZILLA"/>
		<reference ref_id="1163384" ref_url="https://bugzilla.suse.com/1163384" source="BUGZILLA"/>
		<reference ref_id="1163762" ref_url="https://bugzilla.suse.com/1163762" source="BUGZILLA"/>
		<reference ref_id="1163774" ref_url="https://bugzilla.suse.com/1163774" source="BUGZILLA"/>
		<reference ref_id="1163836" ref_url="https://bugzilla.suse.com/1163836" source="BUGZILLA"/>
		<reference ref_id="1163840" ref_url="https://bugzilla.suse.com/1163840" source="BUGZILLA"/>
		<reference ref_id="1163841" ref_url="https://bugzilla.suse.com/1163841" source="BUGZILLA"/>
		<reference ref_id="1163842" ref_url="https://bugzilla.suse.com/1163842" source="BUGZILLA"/>
		<reference ref_id="1163843" ref_url="https://bugzilla.suse.com/1163843" source="BUGZILLA"/>
		<reference ref_id="1163844" ref_url="https://bugzilla.suse.com/1163844" source="BUGZILLA"/>
		<reference ref_id="1163845" ref_url="https://bugzilla.suse.com/1163845" source="BUGZILLA"/>
		<reference ref_id="1163846" ref_url="https://bugzilla.suse.com/1163846" source="BUGZILLA"/>
		<reference ref_id="1163849" ref_url="https://bugzilla.suse.com/1163849" source="BUGZILLA"/>
		<reference ref_id="1163850" ref_url="https://bugzilla.suse.com/1163850" source="BUGZILLA"/>
		<reference ref_id="1163851" ref_url="https://bugzilla.suse.com/1163851" source="BUGZILLA"/>
		<reference ref_id="1163852" ref_url="https://bugzilla.suse.com/1163852" source="BUGZILLA"/>
		<reference ref_id="1163853" ref_url="https://bugzilla.suse.com/1163853" source="BUGZILLA"/>
		<reference ref_id="1163855" ref_url="https://bugzilla.suse.com/1163855" source="BUGZILLA"/>
		<reference ref_id="1163856" ref_url="https://bugzilla.suse.com/1163856" source="BUGZILLA"/>
		<reference ref_id="1163857" ref_url="https://bugzilla.suse.com/1163857" source="BUGZILLA"/>
		<reference ref_id="1163858" ref_url="https://bugzilla.suse.com/1163858" source="BUGZILLA"/>
		<reference ref_id="1163859" ref_url="https://bugzilla.suse.com/1163859" source="BUGZILLA"/>
		<reference ref_id="1163860" ref_url="https://bugzilla.suse.com/1163860" source="BUGZILLA"/>
		<reference ref_id="1163861" ref_url="https://bugzilla.suse.com/1163861" source="BUGZILLA"/>
		<reference ref_id="1163862" ref_url="https://bugzilla.suse.com/1163862" source="BUGZILLA"/>
		<reference ref_id="1163863" ref_url="https://bugzilla.suse.com/1163863" source="BUGZILLA"/>
		<reference ref_id="1163867" ref_url="https://bugzilla.suse.com/1163867" source="BUGZILLA"/>
		<reference ref_id="1163869" ref_url="https://bugzilla.suse.com/1163869" source="BUGZILLA"/>
		<reference ref_id="1163880" ref_url="https://bugzilla.suse.com/1163880" source="BUGZILLA"/>
		<reference ref_id="1163971" ref_url="https://bugzilla.suse.com/1163971" source="BUGZILLA"/>
		<reference ref_id="1164051" ref_url="https://bugzilla.suse.com/1164051" source="BUGZILLA"/>
		<reference ref_id="1164069" ref_url="https://bugzilla.suse.com/1164069" source="BUGZILLA"/>
		<reference ref_id="1164098" ref_url="https://bugzilla.suse.com/1164098" source="BUGZILLA"/>
		<reference ref_id="1164115" ref_url="https://bugzilla.suse.com/1164115" source="BUGZILLA"/>
		<reference ref_id="1164314" ref_url="https://bugzilla.suse.com/1164314" source="BUGZILLA"/>
		<reference ref_id="1164315" ref_url="https://bugzilla.suse.com/1164315" source="BUGZILLA"/>
		<reference ref_id="1164388" ref_url="https://bugzilla.suse.com/1164388" source="BUGZILLA"/>
		<reference ref_id="1164471" ref_url="https://bugzilla.suse.com/1164471" source="BUGZILLA"/>
		<reference ref_id="1164598" ref_url="https://bugzilla.suse.com/1164598" source="BUGZILLA"/>
		<reference ref_id="1164632" ref_url="https://bugzilla.suse.com/1164632" source="BUGZILLA"/>
		<reference ref_id="1164705" ref_url="https://bugzilla.suse.com/1164705" source="BUGZILLA"/>
		<reference ref_id="1164712" ref_url="https://bugzilla.suse.com/1164712" source="BUGZILLA"/>
		<reference ref_id="1164727" ref_url="https://bugzilla.suse.com/1164727" source="BUGZILLA"/>
		<reference ref_id="1164728" ref_url="https://bugzilla.suse.com/1164728" source="BUGZILLA"/>
		<reference ref_id="1164729" ref_url="https://bugzilla.suse.com/1164729" source="BUGZILLA"/>
		<reference ref_id="1164730" ref_url="https://bugzilla.suse.com/1164730" source="BUGZILLA"/>
		<reference ref_id="1164731" ref_url="https://bugzilla.suse.com/1164731" source="BUGZILLA"/>
		<reference ref_id="1164732" ref_url="https://bugzilla.suse.com/1164732" source="BUGZILLA"/>
		<reference ref_id="1164733" ref_url="https://bugzilla.suse.com/1164733" source="BUGZILLA"/>
		<reference ref_id="1164734" ref_url="https://bugzilla.suse.com/1164734" source="BUGZILLA"/>
		<reference ref_id="1164735" ref_url="https://bugzilla.suse.com/1164735" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14615" ref_url="https://www.suse.com/security/cve/CVE-2019-14615/" source="CVE"/>
		<reference ref_id="CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896/" source="CVE"/>
		<reference ref_id="CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897/" source="CVE"/>
		<reference ref_id="CVE-2019-15213" ref_url="https://www.suse.com/security/cve/CVE-2019-15213/" source="CVE"/>
		<reference ref_id="CVE-2019-16746" ref_url="https://www.suse.com/security/cve/CVE-2019-16746/" source="CVE"/>
		<reference ref_id="CVE-2019-16994" ref_url="https://www.suse.com/security/cve/CVE-2019-16994/" source="CVE"/>
		<reference ref_id="CVE-2019-18808" ref_url="https://www.suse.com/security/cve/CVE-2019-18808/" source="CVE"/>
		<reference ref_id="CVE-2019-19036" ref_url="https://www.suse.com/security/cve/CVE-2019-19036/" source="CVE"/>
		<reference ref_id="CVE-2019-19045" ref_url="https://www.suse.com/security/cve/CVE-2019-19045/" source="CVE"/>
		<reference ref_id="CVE-2019-19051" ref_url="https://www.suse.com/security/cve/CVE-2019-19051/" source="CVE"/>
		<reference ref_id="CVE-2019-19054" ref_url="https://www.suse.com/security/cve/CVE-2019-19054/" source="CVE"/>
		<reference ref_id="CVE-2019-19066" ref_url="https://www.suse.com/security/cve/CVE-2019-19066/" source="CVE"/>
		<reference ref_id="CVE-2019-19318" ref_url="https://www.suse.com/security/cve/CVE-2019-19318/" source="CVE"/>
		<reference ref_id="CVE-2019-19319" ref_url="https://www.suse.com/security/cve/CVE-2019-19319/" source="CVE"/>
		<reference ref_id="CVE-2019-19332" ref_url="https://www.suse.com/security/cve/CVE-2019-19332/" source="CVE"/>
		<reference ref_id="CVE-2019-19338" ref_url="https://www.suse.com/security/cve/CVE-2019-19338/" source="CVE"/>
		<reference ref_id="CVE-2019-19447" ref_url="https://www.suse.com/security/cve/CVE-2019-19447/" source="CVE"/>
		<reference ref_id="CVE-2019-19523" ref_url="https://www.suse.com/security/cve/CVE-2019-19523/" source="CVE"/>
		<reference ref_id="CVE-2019-19526" ref_url="https://www.suse.com/security/cve/CVE-2019-19526/" source="CVE"/>
		<reference ref_id="CVE-2019-19527" ref_url="https://www.suse.com/security/cve/CVE-2019-19527/" source="CVE"/>
		<reference ref_id="CVE-2019-19532" ref_url="https://www.suse.com/security/cve/CVE-2019-19532/" source="CVE"/>
		<reference ref_id="CVE-2019-19533" ref_url="https://www.suse.com/security/cve/CVE-2019-19533/" source="CVE"/>
		<reference ref_id="CVE-2019-19535" ref_url="https://www.suse.com/security/cve/CVE-2019-19535/" source="CVE"/>
		<reference ref_id="CVE-2019-19537" ref_url="https://www.suse.com/security/cve/CVE-2019-19537/" source="CVE"/>
		<reference ref_id="CVE-2019-19767" ref_url="https://www.suse.com/security/cve/CVE-2019-19767/" source="CVE"/>
		<reference ref_id="CVE-2019-19927" ref_url="https://www.suse.com/security/cve/CVE-2019-19927/" source="CVE"/>
		<reference ref_id="CVE-2019-19965" ref_url="https://www.suse.com/security/cve/CVE-2019-19965/" source="CVE"/>
		<reference ref_id="CVE-2019-19966" ref_url="https://www.suse.com/security/cve/CVE-2019-19966/" source="CVE"/>
		<reference ref_id="CVE-2019-20054" ref_url="https://www.suse.com/security/cve/CVE-2019-20054/" source="CVE"/>
		<reference ref_id="CVE-2019-20095" ref_url="https://www.suse.com/security/cve/CVE-2019-20095/" source="CVE"/>
		<reference ref_id="CVE-2019-20096" ref_url="https://www.suse.com/security/cve/CVE-2019-20096/" source="CVE"/>
		<reference ref_id="CVE-2020-2732" ref_url="https://www.suse.com/security/cve/CVE-2020-2732/" source="CVE"/>
		<reference ref_id="CVE-2020-7053" ref_url="https://www.suse.com/security/cve/CVE-2020-7053/" source="CVE"/>
		<reference ref_id="CVE-2020-8428" ref_url="https://www.suse.com/security/cve/CVE-2020-8428/" source="CVE"/>
		<reference ref_id="CVE-2020-8648" ref_url="https://www.suse.com/security/cve/CVE-2020-8648/" source="CVE"/>
		<reference ref_id="CVE-2020-8992" ref_url="https://www.suse.com/security/cve/CVE-2020-8992/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-8992: An issue was discovered in ext4_protect_reserved_inode in fs/ext4/block_validity.c that allowed attackers to cause a soft lockup via a crafted journal size (bnc#1164069).
- CVE-2020-8648: There was a use-after-free vulnerability in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bnc#1162928).
- CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c. It did not check the length of variable elements in a beacon head, leading to a buffer overflow (bnc#1152107).
- CVE-2020-8428: There was a use-after-free bug in fs/namei.c, which allowed local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9 (bnc#1162109).
- CVE-2019-19045: A memory leak in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c allowed attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7 (bnc#1161522).
- CVE-2019-16994: A memory leak existed in sit_init_net() in net/ipv6/sit.c which might have caused denial of service, aka CID-07f12b26e21a (bnc#1161523).
- CVE-2019-19054: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c allowed attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b (bnc#1161518).
- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bnc#1157157).
- CVE-2019-14897: A stack-based buffer overflow was found in the Marvell WiFi driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bnc#1157155).
- CVE-2020-7053: There was a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c (bnc#1160966).
- CVE-2019-19318: Mounting a crafted btrfs image twice could have caused a use-after-free (bnc#1158026).
- CVE-2019-19036: An issue discovered in btrfs_root_node in fs/btrfs/ctree.c allowed a NULL pointer dereference because rcu_dereference(root-&gt;node) can be zero (bnc#1157692).
- CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures for some Intel(R) Processors (bnc#1160195).
- CVE-2019-19965: There was a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5 (bnc#1159911).
- CVE-2019-19927: A slab-out-of-bounds read access could have been caused when mounting a crafted f2fs filesystem image and performing some operations on it, in drivers/gpu/drm/ttm/ttm_page_alloc.c (bnc#1160147).
- CVE-2019-20095: Several memory leaks were found in drivers/net/wireless/marvell/mwifiex/cfg80211.c, aka CID-003b686ace82 (bnc#1159909).
- CVE-2019-20054: There was a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e (bnc#1159910).
- CVE-2019-20096: There was a memory leak in __feat_register_sp() in net/dccp/feat.c, aka CID-1d3ff0950e2b (bnc#1159908).
- CVE-2019-19966: There was a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that could have caused a denial of service, aka CID-dea37a972655 (bnc#1159841).
- CVE-2019-19447: Mounting a crafted ext4 filesystem image, performing some operations, and unmounting could have led to a use-after-free in fs/ext4/super.c (bnc#1158819).
- CVE-2019-19319: A slab-out-of-bounds write access could have occured when setxattr was called after mounting of a specially crafted ext4 image (bnc#1158021).
- CVE-2019-19767: There were multiple use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163 (bnc#1159297).
- CVE-2019-18808: A memory leak in drivers/crypto/ccp/ccp-ops.c allowed attackers to cause a denial of service (memory consumption), aka CID-128c66429247 (bnc#1156259).
- CVE-2019-19066: A memory leak in drivers/scsi/bfa/bfad_attr.c allowed attackers to cause a denial of service (memory consumption), aka CID-0e62395da2bd (bnc#1157303).
- CVE-2019-19051: A memory leak in drivers/net/wimax/i2400m/op-rfkill.c allowed attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7 (bnc#1159024).
- CVE-2019-19338: There was an incomplete fix for an issue with Transactional Synchronisation Extensions in the KVM code (bsc#1158954).
- CVE-2019-19332: An out-of-bounds memory write issue was found in the way the KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could have used this flaw to crash the system (bnc#1158827).
- CVE-2019-19537: There was a race condition bug that could be caused by a malicious USB character device, aka CID-303911cfc5b9. (bsc#1158904).
- CVE-2019-19535: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042 (bsc#1158903).
- CVE-2019-19527: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e (bsc#1158900).
- CVE-2019-19526: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af3aa57a098 (bsc#1158893).
- CVE-2019-19533: There was an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464 (bsc#1158834).
- CVE-2019-19532: There were multiple out-of-bounds write bugs that can be caused by a malicious USB HID device, aka CID-d9d4b1e46d95 (bsc#1158824).
- CVE-2019-19523: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79 (bsc#1158823).
- CVE-2019-15213: A use-after-free bug caused by a malicious USB device was found in drivers/media/usb/dvb-usb/dvb-usb-init.c (bsc#1146544).
- CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L1 resources (bsc#1163971).


The following non-security bugs were fixed:

- 6pack,mkiss: fix possible deadlock (bsc#1051510).
- ACPI / APEI: Do not wait to serialise with oops messages when panic()ing (bsc#1051510).
- ACPI / APEI: Switch estatus pool to use vmalloc memory (bsc#1051510).
- ACPI / LPSS: Ignore acpi_device_fix_up_power() return value (bsc#1051510).
- ACPI / video: Add force_none quirk for Dell OptiPlex 9020M (bsc#1051510).
- ACPI / watchdog: Fix init failure with overlapping register regions (bsc#1162557).
- ACPI / watchdog: Set default timeout in probe (bsc#1162557).
- ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data() (bsc#1051510).
- ACPI: fix acpi_find_child_device() invocation in acpi_preset_companion() (bsc#1051510).
- ACPI: OSL: only free map once in osl.c (bsc#1051510).
- ACPI: PM: Avoid attaching ACPI PM domain to certain devices (bsc#1051510).
- ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 (bsc#1051510).
- ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards (bsc#1051510).
- ACPI: watchdog: Allow disabling WDAT at boot (bsc#1162557).
- af_packet: set defaule value for tmo (bsc#1051510).
- ALSA: control: remove useless assignment in .info callback of PCM chmap element (git-fixes).
- ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
- ALSA: echoaudio: simplify get_audio_levels (bsc#1051510).
- ALSA: fireface: fix return value in error path of isochronous resources reservation (bsc#1051510).
- ALSA: hda - Add docking station support for Lenovo Thinkpad T420s (git-fixes).
- ALSA: hda - Apply sync-write workaround to old Intel platforms, too (bsc#1111666).
- ALSA: hda - constify and cleanup static NodeID tables (bsc#1111666).
- ALSA: hda - Downgrade error message for single-cmd fallback (git-fixes).
- ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen (git-fixes).
- ALSA: hda/analog - Minor optimization for SPDIF mux connections (git-fixes).
- ALSA: hda/ca0132 - Avoid endless loop (git-fixes).
- ALSA: hda/ca0132 - Fix work handling in delayed HP detection (git-fixes).
- ALSA: hda/ca0132 - Keep power on during processing DSP response (git-fixes).
- ALSA: hda/hdmi - Add new pci ids for AMD GPU display audio (git-fixes).
- ALSA: hda/hdmi - add retry logic to parse_intel_hdmi() (git-fixes).
- ALSA: hda/hdmi - Clean up Intel platform-specific fixup checks (bsc#1111666).
- ALSA: hda/hdmi - fix atpx_present when CLASS is not VGA (bsc#1051510).
- ALSA: hda/hdmi - Fix duplicate unref of pci_dev (bsc#1051510).
- ALSA: hda/hdmi - fix vgaswitcheroo detection for AMD (git-fixes).
- ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker (bsc#1111666).
- ALSA: hda/realtek - Add headset Mic no shutup for ALC283 (bsc#1051510).
- ALSA: hda/realtek - Add Headset Mic supported for HP cPC (bsc#1111666).
- ALSA: hda/realtek - Add new codec supported for ALCS1200A (bsc#1111666).
- ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen (bsc#1111666).
- ALSA: hda/realtek - Apply mic mute LED quirk for Dell E7xx laptops, too (bsc#1111666).
- ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 (git-fixes).
- ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC (bsc#1111666).
- ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G (git-fixes).
- ALSA: hda/realtek - Fix silent output on MSI-GL73 (git-fixes).
- ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported (bsc#1111666).
- ALSA: hda/realtek - Line-out jack does not work on a Dell AIO (bsc#1051510).
- ALSA: hda/realtek - More constifications (bsc#1111666).
- ALSA: hda/realtek - Set EAPD control to default for ALC222 (bsc#1111666).
- ALSA: hda: Add Clevo W65_67SB the power_save blacklist (git-fixes).
- ALSA: hda: Add JasperLake PCI ID and codec vid (bsc#1111666).
- ALSA: hda: Clear RIRB status before reading WP (bsc#1111666).
- ALSA: hda: constify copied structure (bsc#1111666).
- ALSA: hda: Constify snd_kcontrol_new items (bsc#1111666).
- ALSA: hda: Constify snd_pci_quirk tables (bsc#1111666).
- ALSA: hda: correct kernel-doc parameter descriptions (bsc#1111666).
- ALSA: hda: hdmi - add Tigerlake support (bsc#1111666).
- ALSA: hda: hdmi - fix pin setup on Tigerlake (bsc#1111666).
- ALSA: hda: More constifications (bsc#1111666).
- ALSA: hda: patch_hdmi: remove warnings with empty body (bsc#1111666).
- ALSA: hda: patch_realtek: fix empty macro usage in if block (bsc#1111666).
- ALSA: hda: Reset stream if DMA RUN bit not cleared (bsc#1111666).
- ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs (git-fixes).
- ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code (bsc#1051510).
- ALSA: oxfw: fix return value in error path of isochronous resources reservation (bsc#1051510).
- ALSA: pcm: Avoid possible info leaks from PCM stream buffers (git-fixes).
- ALSA: pcm: oss: Avoid potential buffer overflows (git-fixes).
- ALSA: seq: Avoid concurrent access to queue flags (git-fixes).
- ALSA: seq: Fix concurrent access to queue current tick/time (git-fixes).
- ALSA: seq: Fix racy access for queue timer in proc read (bsc#1051510).
- ALSA: sh: Fix compile warning wrt const (git-fixes).
- ALSA: sh: Fix unused variable warnings (bsc#1111666).
- ALSA: usb-audio: Apply sample rate quirk for Audioengine D1 (git-fixes).
- ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 (bsc#1111666).
- ALSA: usb-audio: Fix endianess in descriptor validation (bsc#1111666).
- ALSA: usb-audio: fix set_format altsetting sanity check (bsc#1051510).
- ALSA: usb-audio: fix sync-ep altsetting sanity check (bsc#1051510).
- apparmor: fix unsigned len comparison with less than zero (git-fixes).
- ar5523: check NULL before memcpy() in ar5523_cmd() (bsc#1051510).
- arm64: Revert support for execute-only user mappings (bsc#1160218).
- ASoC: au8540: use 64-bit arithmetic instead of 32-bit (bsc#1051510).
- ASoC: compress: fix unsigned integer overflow check (bsc#1051510).
- ASoC: cs4349: Use PM ops 'cs4349_runtime_pm' (bsc#1051510).
- ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report (bsc#1051510).
- ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1 (bsc#1051510).
- ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI (bsc#1111666).
- ASoC: sun8i-codec: Fix setting DAI data format (git-fixes).
- ASoC: wm8962: fix lambda value (git-fixes).
- ata: ahci: Add shutdown to freeze hardware resources of ahci (bsc#1164388).
- ath10k: Correct the DMA direction for management tx buffers (bsc#1111666).
- ath10k: fix fw crash by moving chip reset after napi disabled (bsc#1051510).
- ath10k: pci: Fix comment on ath10k_pci_dump_memory_sram (bsc#1111666).
- ath10k: pci: Only dump ATH10K_MEM_REGION_TYPE_IOREG when safe (bsc#1111666).
- ath6kl: Fix off by one error in scan completion (bsc#1051510).
- ath9k: fix storage endpoint lookup (git-fixes).
- atl1e: checking the status of atl1e_write_phy_reg (bsc#1051510).
- audit: Allow auditd to set pid to 0 to end auditing (bsc#1158094).
- batman-adv: Fix DAT candidate selection on little endian systems (bsc#1051510).
- bcache: add code comment bch_keylist_pop() and bch_keylist_pop_front() (bsc#1163762).
- bcache: add code comments for state-&gt;pool in __btree_sort() (bsc#1163762).
- bcache: add code comments in bch_btree_leaf_dirty() (bsc#1163762).
- bcache: add cond_resched() in __bch_cache_cmp() (bsc#1163762).
- bcache: add idle_max_writeback_rate sysfs interface (bsc#1163762).
- bcache: add more accurate error messages in read_super() (bsc#1163762).
- bcache: add readahead cache policy options via sysfs interface (bsc#1163762).
- bcache: at least try to shrink 1 node in bch_mca_scan() (bsc#1163762).
- bcache: avoid unnecessary btree nodes flushing in btree_flush_write() (bsc#1163762).
- bcache: check return value of prio_read() (bsc#1163762).
- bcache: deleted code comments for dead code in bch_data_insert_keys() (bsc#1163762).
- bcache: do not export symbols (bsc#1163762).
- bcache: explicity type cast in bset_bkey_last() (bsc#1163762).
- bcache: fix a lost wake-up problem caused by mca_cannibalize_lock (bsc#1163762).
- bcache: Fix an error code in bch_dump_read() (bsc#1163762).
- bcache: fix deadlock in bcache_allocator (bsc#1163762).
- bcache: fix incorrect data type usage in btree_flush_write() (bsc#1163762).
- bcache: fix memory corruption in bch_cache_accounting_clear() (bsc#1163762).
- bcache: fix static checker warning in bcache_device_free() (bsc#1163762).
- bcache: ignore pending signals when creating gc and allocator thread (bsc#1163762, bsc#1112504).
- bcache: print written and keys in trace_bcache_btree_write (bsc#1163762).
- bcache: reap c-&gt;btree_cache_freeable from the tail in bch_mca_scan() (bsc#1163762).
- bcache: reap from tail of c-&gt;btree_cache in bch_mca_scan() (bsc#1163762).
- bcache: remove macro nr_to_fifo_front() (bsc#1163762).
- bcache: remove member accessed from struct btree (bsc#1163762).
- bcache: remove the extra cflags for request.o (bsc#1163762).
- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (bsc#1163762, bsc#1112504).
- bcma: remove set but not used variable 'sizel' (git-fixes).
- blk-mq: avoid sysfs buffer overflow with too many CPU cores (bsc#1159377).
- blk-mq: avoid sysfs buffer overflow with too many CPU cores (bsc#1163840).
- blk-mq: make sure that line break can be printed (bsc#1159377).
- blk-mq: make sure that line break can be printed (bsc#1164098).
- Bluetooth: Fix race condition in hci_release_sock() (bsc#1051510).
- Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading (bsc#1051510).
- bnxt: apply computed clamp value for coalece parameter (bsc#1104745).
- bnxt_en: Fix MSIX request logic for RDMA driver (bsc#1104745 ).
- bnxt_en: Return error if FW returns more data than dump length (bsc#1104745).
- bonding: fix active-backup transition after link failure (git-fixes).
- bonding: fix potential NULL deref in bond_update_slave_arr (bsc#1051510).
- bonding: fix slave stuck in BOND_LINK_FAIL state (networking-stable-19_11_10).
- bonding: fix state transition issue in link monitoring (networking-stable-19_11_10).
- bonding: fix unexpected IFF_BONDING bit unset (bsc#1051510).
- bpf, offload: Unlock on error in bpf_offload_dev_create() (bsc#1109837).
- bpf/sockmap: Read psock ingress_msg before sk_receive_queue (bsc#1083647).
- bpf/stackmap: Fix deadlock with rq_lock in bpf_get_stack() (bsc#1083647).
- bpf: add self-check logic to liveness analysis (bsc#1160618).
- bpf: add verifier stats and log_level bit 2 (bsc#1160618).
- bpf: Fix incorrect verifier simulation of ARSH under ALU32 (bsc#1083647).
- bpf: improve stacksafe state comparison (bco#1160618).
- bpf: improve verification speed by droping states (bsc#1160618).
- bpf: improve verification speed by not remarking live_read (bsc#1160618).
- bpf: improve verifier branch analysis (bsc#1160618).
- bpf: increase complexity limit and maximum program size (bsc#1160618).
- bpf: increase verifier log limit (bsc#1160618).
- bpf: Make use of probe_user_write in probe write helper (bsc#1083647).
- bpf: Reject indirect var_off stack access in raw mode (bsc#1160618).
- bpf: Reject indirect var_off stack access in unpriv mode (bco#1160618).
- bpf: Sanity check max value for var_off stack access (bco#1160618).
- bpf: skmsg, fix potential psock NULL pointer dereference (bsc#1109837).
- bpf: speed up stacksafe check (bco#1160618).
- bpf: Support variable offset stack access from helpers (bco#1160618).
- bpf: verifier: teach the verifier to reason about the BPF_JSET instruction (bco#1160618).
- brcmfmac: fix interface sanity check (git-fixes).
- brcmfmac: Fix memory leak in brcmf_p2p_create_p2pdev() (bsc#1111666).
- brcmfmac: Fix memory leak in brcmf_usbdev_qinit (git-fixes).
- brcmfmac: Fix use after free in brcmf_sdio_readframes() (git-fixes).
- brcmfmac: sdio: Fix OOB interrupt initialization on brcm43362 (bsc#1111666).
- brcmfmac: set F2 watermark to 256 for 4373 (bsc#1111666).
- brcmfmac: set SDIO F1 MesBusyCtrl for CYW4373 (bsc#1111666).
- btrfs: abort transaction after failed inode updates in create_subvol (bsc#1161936).
- btrfs: add missing extents release on file extent cluster relocation error (bsc#1159483).
- btrfs: avoid fallback to transaction commit during fsync of files with holes (bsc#1159569).
- btrfs: dev-replace: remove warning for unknown return codes when finished (dependency for bsc#1162067).
- btrfs: do not call synchronize_srcu() in inode_tree_del (bsc#1161934).
- btrfs: do not double lock the subvol_sem for rename exchange (bsc#1162943).
- btrfs: Ensure we trim ranges across block group boundary (bsc#1151910).
- btrfs: fix block group remaining RO forever after error during device replace (bsc#1160442).
- btrfs: fix btrfs_write_inode vs delayed iput deadlock (bsc#1154243).
- btrfs: fix infinite loop during fsync after rename operations (bsc#1163383).
- btrfs: fix infinite loop during nocow writeback due to race (bsc#1160804).
- btrfs: fix integer overflow in calc_reclaim_items_nr (bsc#1160433).
- btrfs: fix missing data checksums after replaying a log tree (bsc#1161931).
- btrfs: fix negative subv_writers counter and data space leak after buffered write (bsc#1160802).
- btrfs: fix race between adding and putting tree mod seq elements and nodes (bsc#1163384).
- btrfs: fix removal logic of the tree mod log that leads to use-after-free issues (bsc#1160803).
- btrfs: fix selftests failure due to uninitialized i_mode in test inodes (Fix for dependency of bsc#1157692).
- btrfs: handle ENOENT in btrfs_uuid_tree_iterate (bsc#1161937).
- btrfs: harden agaist duplicate fsid on scanned devices (bsc#1134973).
- btrfs: inode: Verify inode mode to avoid NULL pointer dereference (dependency for bsc#1157692).
- btrfs: make tree checker detect checksum items with overlapping ranges (bsc#1161931).
- btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it (dependency for bsc#1157692).
- btrfs: record all roots for rename exchange on a subvol (bsc#1161933).
- btrfs: relocation: fix reloc_root lifespan and access (bsc#1159588).
- btrfs: scrub: Require mandatory block group RO for dev-replace (bsc#1162067).
- btrfs: send, skip backreference walking for extents with many references (bsc#1162139).
- btrfs: simplify inode locking for RWF_NOWAIT (git-fixes).
- btrfs: skip log replay on orphaned roots (bsc#1161935).
- btrfs: tree-checker: Check chunk item at tree block read time (dependency for bsc#1157692).
- btrfs: tree-checker: Check level for leaves and nodes (dependency for bsc#1157692).
- btrfs: tree-checker: Enhance chunk checker to validate chunk profile (dependency for bsc#1157692).
- btrfs: tree-checker: Fix wrong check on max devid (fixes for dependency of bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in block_group_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_block_group_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_csum_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_dev_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_dir_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_extent_data_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_inode_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_leaf (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_leaf_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in chunk_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in dev_item_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in dir_item_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in file_extent_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in generic_err (dependency for bsc#1157692).
- btrfs: tree-checker: Make btrfs_check_chunk_valid() return EUCLEAN instead of EIO (dependency for bsc#1157692).
- btrfs: tree-checker: Make chunk item checker messages more readable (dependency for bsc#1157692).
- btrfs: tree-checker: Verify dev item (dependency for bsc#1157692).
- btrfs: tree-checker: Verify inode item (dependency for bsc#1157692).
- btrfs: volumes: Use more straightforward way to calculate map length (bsc#1151910).
- can, slip: Protect tty-&gt;disc_data in write_wakeup and close with RCU (bsc#1051510).
- can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs (bsc#1051510).
- can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open (bsc#1051510).
- can: gs_usb: gs_usb_probe(): use descriptors of current altsetting (bsc#1051510).
- can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling to irq mode (bsc#1051510).
- can: peak_usb: report bus recovery as well (bsc#1051510).
- can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error (bsc#1051510).
- can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error (bsc#1051510).
- can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on queue overflow or OOM (bsc#1051510).
- can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate error value in case of errors (bsc#1051510).
- can: slcan: Fix use-after-free Read in slcan_open (bsc#1051510).
- CDC-NCM: handle incomplete transfer of MTU (networking-stable-19_11_10).
- cdrom: respect device capabilities during opening action (boo#1164632).
- cfg80211/mac80211: make ieee80211_send_layer2_update a public function (bsc#1051510).
- cfg80211: check for set_wiphy_params (bsc#1051510).
- cfg80211: fix deadlocks in autodisconnect work (bsc#1111666).
- cfg80211: fix memory leak in cfg80211_cqm_rssi_update (bsc#1111666).
- cfg80211: fix page refcount issue in A-MSDU decap (bsc#1051510).
- cgroup,writeback: do not switch wbs immediately on dead wbs if the memcg is dead (bsc#1158645).
- cgroup: pids: use atomic64_t for pids-&gt;limit (bsc#1161514).
- chardev: Avoid potential use-after-free in 'chrdev_open()' (bsc#1163849).
- cifs: add support for flock (bsc#1144333).
- cifs: Close cached root handle only if it had a lease (bsc#1144333).
- cifs: Close open handle after interrupted close (bsc#1144333).
- cifs: close the shared root handle on tree disconnect (bsc#1144333).
- cifs: Do not miss cancelled OPEN responses (bsc#1144333).
- cifs: Fix lookup of root ses in DFS referral cache (bsc#1144333).
- cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333).
- cifs: fix mount option display for sec=krb5i (bsc#1161907).
- cifs: Fix mount options set in automount (bsc#1144333).
- cifs: Fix NULL pointer dereference in mid callback (bsc#1144333).
- cifs: Fix NULL-pointer dereference in smb2_push_mandatory_locks (bsc#1144333).
- cifs: Fix potential softlockups while refreshing DFS cache (bsc#1144333).
- cifs: Fix retrieval of DFS referrals in cifs_mount() (bsc#1144333).
- cifs: Fix use-after-free bug in cifs_reconnect() (bsc#1144333).
- cifs: Properly process SMB3 lease breaks (bsc#1144333).
- cifs: remove set but not used variables 'cinode' and 'netfid' (bsc#1144333).
- cifs: Respect O_SYNC and O_DIRECT flags during reconnect (bsc#1144333).
- clk: Do not try to enable critical clocks if prepare failed (bsc#1051510).
- clk: imx: clk-composite-8m: add lock to gate/mux (git-fixes).
- clk: mmp2: Fix the order of timer mux parents (bsc#1051510).
- clk: qcom: rcg2: Do not crash if our parent can't be found; return an error (bsc#1051510).
- clk: rockchip: fix I2S1 clock gate register for rk3328 (bsc#1051510).
- clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328 (bsc#1051510).
- clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering (bsc#1051510).
- clk: rockchip: fix rk3188 sclk_smc gate data (bsc#1051510).
- clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock (bsc#1051510).
- clk: sunxi: sun9i-mmc: Implement reset callback for reset controls (bsc#1051510).
- clk: tegra: Mark fuse clock as critical (bsc#1051510).
- clocksource/drivers/bcm2835_timer: Fix memory leak of timer (bsc#1051510).
- clocksource: Prevent double add_timer_on() for watchdog_timer (bsc#1051510).
- closures: fix a race on wakeup from closure_sync (bsc#1163762).
- configfs_register_group() shouldn't be (and isn't) called in rmdirable parts (bsc#1051510).
- copy/pasted 'Recommends:' instead of 'Provides:', 'Obsoletes:' and 'Conflicts:
- Cover up kABI breakage due to DH key verification (bsc#1155331).
- crypto: af_alg - Use bh_lock_sock in sk_destruct (bsc#1051510).
- crypto: api - Check spawn-&gt;alg under lock in crypto_drop_spawn (bsc#1051510).
- crypto: api - Fix race condition in crypto_spawn_alg (bsc#1051510).
- crypto: atmel-sha - fix error handling when setting hmac key (bsc#1051510).
- crypto: caam/qi2 - fix typo in algorithm's driver name (bsc#1111666).
- crypto: ccp - fix uninitialized list head (bsc#1051510).
- crypto: chelsio - fix writing tfm flags to wrong place (bsc#1051510).
- crypto: dh - add public key verification test (bsc#1155331).
- crypto: dh - fix calculating encoded key size (bsc#1155331).
- crypto: dh - fix memory leak (bsc#1155331).
- crypto: dh - update test for public key verification (bsc#1155331).
- crypto: DRBG - add FIPS 140-2 CTRNG for noise source (bsc#1155334).
- crypto: ecdh - add public key verification test (bsc#1155331).
- crypto: ecdh - fix typo of P-192 b value (bsc#1155331).
- crypto: mxc-scc - fix build warnings on ARM64 (bsc#1051510).
- crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (bsc#1051510).
- crypto: picoxcell - adjust the position of tasklet_init and fix missed tasklet_kill (bsc#1051510).
- crypto: reexport crypto_shoot_alg() (bsc#1051510, kABI fix).
- cxgb4: request the TX CIDX updates to status page (bsc#1127371).
- dma-buf: Fix memory leak in sync_file_merge() (git-fixes).
- dma-mapping: fix return type of dma_set_max_seg_size() (bsc#1051510).
- dmaengine: coh901318: Fix a double-lock bug (bsc#1051510).
- dmaengine: coh901318: Remove unused variable (bsc#1051510).
- dmaengine: Fix access to uninitialized dma_slave_caps (bsc#1051510).
- Documentation: Document arm64 kpti control (bsc#1162623).
- drivers/base/memory.c: cache blocks in radix tree to accelerate lookup (bsc#1159955 ltc#182993).
- drivers/base/memory.c: do not access uninitialized memmaps in soft_offline_page_store() (bsc#1051510).
- drivers/base/platform.c: kmemleak ignore a known leak (bsc#1051510).
- drivers/regulator: fix a missing check of return value (bsc#1051510).
- drm/amd/display: Retrain dongles when SINK_COUNT becomes non-zero (bsc#1111666).
- drm/amd/powerplay: remove set but not used variable 'us_mvdd' (bsc#1111666).
- drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc (bsc#1111666).
- drm/amdgpu: add function parameter description in 'amdgpu_device_set_cg_state' (bsc#1111666).
- drm/amdgpu: add function parameter description in 'amdgpu_gart_bind' (bsc#1051510).
- drm/amdgpu: fix bad DMA from INTERRUPT_CNTL2 (bsc#1114279)
- drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2) (bsc#1111666).
- drm/amdgpu: remove 4 set but not used variable in amdgpu_atombios_get_connector_info_from_object_table (bsc#1051510).
- drm/amdgpu: remove always false comparison in 'amdgpu_atombios_i2c_process_i2c_ch' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'amdgpu_connector' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'dig' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'dig_connector' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'invalid' (bsc#1111666).
- drm/amdgpu: remove set but not used variable 'mc_shared_chmap' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'mc_shared_chmap' from 'gfx_v6_0.c' and 'gfx_v7_0.c' (bsc#1051510).
- drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ (bsc#1051510).
- drm/fb-helper: Round up bits_per_pixel if possible (bsc#1051510).
- drm/i810: Prevent underflow in ioctl (bsc#1114279)
- drm/i915/gvt: Pin vgpu dma address before using (bsc#1112178)
- drm/i915/gvt: set guest display buffer as readonly (bsc#1112178)
- drm/i915/gvt: use vgpu lock for active state setting (bsc#1112178)
- drm/i915/perf: add missing delay for OA muxes configuration (bsc#1111666).
- drm/i915: Add missing include file &lt;linux/math64.h&gt; (bsc#1051510).
- drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (bsc#1111666).
- drm/i915: Fix pid leak with banned clients (bsc#1114279)
- drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set (bsc#1111666).
- drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV (bsc#1111666).
- drm/i915: Reacquire priolist cache after dropping the engine lock (bsc#1129770).
- drm/i915: Sanity check mmap length against object size (bsc#1111666).
- drm/msm: include linux/sched/task.h (bsc#1112178)
- drm/mst: Fix MST sideband up-reply failure handling (bsc#1051510).
- drm/nouveau/bar/gf100: ensure BAR is mapped (bsc#1111666).
- drm/nouveau/bar/nv50: check bar1 vmm return value (bsc#1111666).
- drm/nouveau/mmu: qualify vmm during dtor (bsc#1111666).
- drm/nouveau/secboot/gm20b: initialize pointer in gm20b_secboot_new() (bsc#1051510).
- drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler (bsc#1051510).
- drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028)
- drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028)
- drm/radeon: fix r1xx/r2xx register checker for POT textures (bsc#1114279)
- drm/rect: Avoid division by zero (bsc#1111666).
- drm/rect: update kerneldoc for drm_rect_clip_scaled() (bsc#1111666).
- drm/rockchip: lvds: Fix indentation of a #define (bsc#1051510).
- drm/rockchip: Round up _before_ giving to the clock framework (bsc#1114279)
- drm/sun4i: hdmi: Remove duplicate cleanup calls (bsc#1113956)
- drm/sun4i: tcon: Set min division of TCON0_DCLK to 1 (bsc#1111666).
- drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model (bsc#1111666).
- drm/ttm: ttm_tt_init_fields() can be static (bsc#1111666).
- drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add (bsc#1051510).
- drm: bridge: dw-hdmi: constify copied structure (bsc#1051510).
- drm: limit to INT_MAX in create_blob ioctl (bsc#1051510).
- drm: meson: venc: cvbs: fix CVBS mode matching (bsc#1051510).
- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable (bsc#1111666).
- drm: panel-lvds: Potential Oops in probe error handling (bsc#1114279)
- e1000e: Add support for Comet Lake (bsc#1158533).
- e1000e: Add support for Tiger Lake (bsc#1158533).
- e1000e: Increase pause and refresh time (bsc#1158533).
- e100: Fix passing zero to 'PTR_ERR' warning in e100_load_ucode_wait (bsc#1051510).
- ecryptfs_lookup_interpose(): lower_dentry-&gt;d_inode is not stable (bsc#1158646).
- ecryptfs_lookup_interpose(): lower_dentry-&gt;d_parent is not stable either (bsc#1158647).
- EDAC/ghes: Fix locking and memory barrier issues (bsc#1114279). EDAC/ghes: Do not warn when incrementing refcount on 0 (bsc#1114279).
- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632).
- enic: prevent waking up stopped tx queues over watchdog reset (bsc#1133147).
- exit: panic before exit_mm() on global init exit (bsc#1161549).
- ext2: check err when partial != NULL (bsc#1163859).
- ext4, jbd2: ensure panic when aborting with zero errno (bsc#1163853).
- ext4: check for directory entries too close to block end (bsc#1163861).
- ext4: fix a bug in ext4_wait_for_tail_page_commit (bsc#1163841).
- ext4: fix checksum errors with indexed dirs (bsc#1160979).
- ext4: fix deadlock allocating crypto bounce page from mempool (bsc#1163842).
- ext4: Fix mount failure with quota configured as module (bsc#1164471).
- ext4: fix mount failure with quota configured as module (bsc#1164471).
- ext4: fix punch hole for inline_data file systems (bsc#1158640).
- ext4: improve explanation of a mount failure caused by a misconfigured kernel (bsc#1163843).
- ext4: update direct I/O read lock pattern for IOCB_NOWAIT (bsc#1158639).
- extcon: max8997: Fix lack of path setting in USB device mode (bsc#1051510).
- firestream: fix memory leaks (bsc#1051510).
- fix autofs regression caused by follow_managed() changes (bsc#1159271).
- fix dget_parent() fastpath race (bsc#1159271).
- fix partial checked out tree build ... so that bisection does not break.
- fix the locking in dcache_readdir() and friends (bsc#1123328).
- fjes: fix missed check in fjes_acpi_add (bsc#1051510).
- fs/namei.c: fix missing barriers when checking positivity (bsc#1159271).
- fs/namei.c: pull positivity check into follow_managed() (bsc#1159271).
- fs/open.c: allow opening only regular files during execve() (bsc#1163845).
- fs: cifs: Fix atime update check vs mtime (bsc#1144333).
- fscrypt: do not set policy for a dead directory (bsc#1163846).
- ftrace: Add comment to why rcu_dereference_sched() is open coded (git-fixes).
- ftrace: Avoid potential division by zero in function profiler (bsc#1160784).
- ftrace: Protect ftrace_graph_hash with ftrace_sync (git-fixes).
- genirq/proc: Return proper error code when irq_set_affinity() fails (bnc#1105392).
- genirq: Prevent NULL pointer dereference in resend_irqs() (bsc#1051510).
- genirq: Properly pair kobject_del() with kobject_add() (bsc#1051510).
- gpio: Fix error message on out-of-range GPIO in lookup table (bsc#1051510).
- gtp: avoid zero size hashtable (networking-stable-20_01_01).
- gtp: do not allow adding duplicate tid and ms_addr pdp context (networking-stable-20_01_01).
- gtp: fix an use-after-free in ipv4_pdp_find() (networking-stable-20_01_01).
- gtp: fix wrong condition in gtp_genl_dump_pdp() (networking-stable-20_01_01).
- HID: doc: fix wrong data structure reference for UHID_OUTPUT (bsc#1051510).
- HID: hidraw, uhid: Always report EPOLLOUT (bsc#1051510).
- HID: hidraw: Fix returning EPOLLOUT from hidraw_poll (bsc#1051510).
- HID: intel-ish-hid: fixes incorrect error handling (bsc#1051510).
- HID: uhid: Fix returning EPOLLOUT from uhid_char_poll (bsc#1051510).
- hidraw: Return EPOLLOUT from hidraw_poll (bsc#1051510).
- hotplug/drc-info: Add code to search ibm,drc-info property (bsc#1157480 ltc#181028).
- hv_netvsc: Fix offset usage in netvsc_send_table() (bsc#1164598).
- hv_netvsc: Fix send_table offset in case of a host bug (bsc#1164598).
- hv_netvsc: Fix tx_table init in rndis_set_subchannel() (bsc#1164598).
- hv_netvsc: Fix unwanted rx_table reset (bsc#1164598).
- hwmon: (adt7475) Make volt2reg return same reg as reg2volt input (bsc#1051510).
- hwmon: (core) Do not use device managed functions for memory allocations (bsc#1051510).
- hwmon: (k10temp) Add support for AMD family 17h, model 70h CPUs (bsc#1163206).
- hwmon: (nct7802) Fix voltage limits to wrong registers (bsc#1051510).
- hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions (bsc#1051510).
- hwrng: stm32 - fix unbalanced pm_runtime_enable (bsc#1051510).
- i2c: imx: do not print error message on probe defer (bsc#1051510).
- IB/hfi1: Do not cancel unused work item (bsc#1114685 ).
- IB/mlx5: Fix steering rule of drop and count (bsc#1103991 ).
- IB/mlx5: Remove dead code (bsc#1103991).
- ibmveth: Detect unsupported packets before sending to the hypervisor (bsc#1159484 ltc#182983).
- ibmvnic: Bound waits for device queries (bsc#1155689 ltc#182047).
- ibmvnic: Fix completion structure initialization (bsc#1155689 ltc#182047).
- ibmvnic: Serialize device queries (bsc#1155689 ltc#182047).
- ibmvnic: Terminate waiting device threads after loss of service (bsc#1155689 ltc#182047).
- ice: fix stack leakage (bsc#1118661).
- idr: Fix idr_alloc_u32 on 32-bit systems (bsc#1051510).
- iio: adc: max9611: Fix too short conversion time delay (bsc#1051510).
- iio: buffer: align the size of scan bytes to size of the largest element (bsc#1051510).
- inet: protect against too small mtu values (networking-stable-19_12_16).
- Input: aiptek - fix endpoint sanity check (bsc#1051510).
- Input: cyttsp4_core - fix use after free bug (bsc#1051510).
- Input: goodix - add upside-down quirk for Teclast X89 tablet (bsc#1051510).
- Input: gtco - fix endpoint sanity check (bsc#1051510).
- Input: keyspan-remote - fix control-message timeouts (bsc#1051510).
- Input: pegasus_notetaker - fix endpoint sanity check (bsc#1051510).
- Input: pm8xxx-vib - fix handling of separate enable register (bsc#1051510).
- Input: rmi_f54 - read from FIFO in 32 byte blocks (bsc#1051510).
- Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register (bsc#1051510).
- Input: sur40 - fix interface sanity checks (bsc#1051510).
- Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus (bsc#1051510).
- Input: synaptics-rmi4 - do not increment rmiaddr for SMBus transfers (bsc#1051510).
- Input: synaptics-rmi4 - simplify data read in rmi_f54_work (bsc#1051510).
- iomap: Fix pipe page leakage during splicing (bsc#1158651).
- iommu/amd: Fix IOMMU perf counter clobbering during init (bsc#1162617).
- iommu/arm-smmu-v3: Populate VMID field for CMDQ_OP_TLBI_NH_VA (bsc#1164314).
- iommu/io-pgtable-arm: Fix race handling in split_blk_unmap() (bsc#1164115).
- iommu/iova: Init the struct iova to fix the possible memleak (bsc#1160469).
- iommu/mediatek: Correct the flush_iotlb_all callback (bsc#1160470).
- iommu/vt-d: Unlink device if failed to add to group (bsc#1160756).
- iommu: Remove device link to group on failure (bsc#1160755).
- ipmi: Do not allow device module unload when in use (bsc#1154768).
- ipv4: Fix table id reference in fib_sync_down_addr (networking-stable-19_11_10).
- iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop (git-fixes).
- iwlwifi: change monitor DMA to be coherent (bsc#1161243).
- iwlwifi: clear persistence bit according to device family (bsc#1111666).
- iwlwifi: do not throw error when trying to remove IGTK (bsc#1051510).
- iwlwifi: mvm: fix NVM check for 3168 devices (bsc#1051510).
- iwlwifi: mvm: force TCM re-evaluation on TCM resume (bsc#1111666).
- iwlwifi: mvm: Send non offchannel traffic via AP sta (bsc#1051510).
- iwlwifi: mvm: synchronize TID queue removal (bsc#1051510).
- iwlwifi: pcie: fix erroneous print (bsc#1111666).
- iwlwifi: trans: Clear persistence bit when starting the FW (bsc#1111666).
- jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal (bsc#1163862).
- jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer (bsc#1163836).
- jbd2: Fix possible overflow in jbd2_log_space_left() (bsc#1163860).
- jbd2: make sure ESHUTDOWN to be recorded in the journal superblock (bsc#1163863).
- jbd2: move the clearing of b_modified flag to the journal_unmap_buffer() (bsc#1163880).
- jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record (bsc#1163852).
- kABI fix for 'ipmi: Do not allow device module unload when in use' (bsc#1154768).
- kABI fixup for alloc_dax_region (bsc#1158071,bsc#1160678).
- kABI workaround for can/skb.h inclusion (bsc#1051510).
- kABI/severities: Whitelist rpaphp_get_drc_props (bsc#1157480 ltc#181028).
- kABI: add _q suffix to exports that take struct dh (bsc#1155331).
- kABI: protect struct sctp_ep_common (kabi).
- kABI: Protest new fields in BPF structs (bsc#1160618).
- kconfig: fix broken dependency in randconfig-generated .config (bsc#1051510).
- kernel-binary.spec.in: do not recommend firmware for kvmsmall and azure flavor (boo#1161360).
- kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail (bsc#1160787).
- kernfs: Fix range checks in kernfs_get_target_path (bsc#1051510).
- kexec: bail out upon SIGKILL when allocating memory (git-fixes).
- KVM: Clean up __kvm_gfn_to_hva_cache_init() and its callers (bsc#1133021).
- KVM: fix spectrev1 gadgets (bsc#1164705).
- KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails (bsc#1061840).
- KVM: PPC: Book3S PR: Fix -Werror=return-type build failure (bsc#1061840).
- KVM: PPC: Book3S PR: Free shared page if mmu initialization fails (bsc#1061840).
- KVM: s390: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl (git-fixes).
- KVM: s390: Test for bad access register and size at the start of S390_MEM_OP (git-fixes).
- KVM: SVM: Override default MMIO mask if memory encryption is enabled (bsc#1162618).
- KVM: x86: Host feature SSBD does not imply guest feature SPEC_CTRL_SSBD (bsc#1160476).
- KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks (bsc#1164734).
- KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks (bsc#1164728).
- KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks (bsc#1164729).
- KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF attacks (bsc#1164712).
- KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks (bsc#1164730).
- KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c (bsc#1164733).
- KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks (bsc#1164731).
- KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks (bsc#1164732).
- KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks (bsc#1164735).
- KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks (bsc#1164705).
- KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks (bsc#1164727).
- KVM: x86: Remove a spurious export of a static function (bsc#1158954).
- lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop (bsc#1050549).
- leds: Allow to call led_classdev_unregister() unconditionally (bsc#1161674).
- leds: class: ensure workqueue is initialized before setting brightness (bsc#1161674).
- lib/scatterlist.c: adjust indentation in __sg_alloc_table (bsc#1051510).
- lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more() (bsc#1051510).
- lib: crc64: include &lt;linux/crc64.h&gt; for 'crc64_be' (bsc#1163762).
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (bsc#1153535).
- libnvdimm/pfn: Account for PAGE_SIZE &gt; info-block-size in nd_pfn_init() (bsc#1127682 bsc#1153535 ltc#175033 ltc#181834).
- libnvdimm: Fix devm_nsio_enable() kabi (bsc#1153535).
- livepatch/samples/selftest: Use klp_shadow_alloc() API correctly (bsc#1071995).
- livepatch/selftest: Clean up shadow variable names and type (bsc#1071995).
- locking/rwsem: Prevent decrement of reader count before increment (bsc#1050549).
- loop: fix no-unmap write-zeroes request behavior (bsc#1158637).
- mac80211: Do not send Layer 2 Update frame before authorization (bsc#1051510).
- mac80211: fix ieee80211_txq_setup_flows() failure path (bsc#1111666).
- mac80211: fix station inactive_time shortly after boot (bsc#1051510).
- mac80211: Fix TKIP replay protection immediately after key setup (bsc#1051510).
- mac80211: mesh: restrict airtime metric to peered established plinks (bsc#1051510).
- macvlan: do not assume mac_header is set in macvlan_broadcast() (bsc#1051510).
- macvlan: use skb_reset_mac_header() in macvlan_queue_xmit() (bsc#1051510).
- mailbox: mailbox-test: fix null pointer if no mmio (bsc#1051510).
- md/raid0: Fix buffer overflow at debug print (bsc#1164051).
- media/v4l2-core: set pages dirty upon releasing DMA buffers (bsc#1051510).
- media: af9005: uninitialized variable printked (bsc#1051510).
- media: cec.h: CEC_OP_REC_FLAG_ values were swapped (bsc#1051510).
- media: cec: CEC 2.0-only bcast messages were ignored (git-fixes).
- media: cec: report Vendor ID after initialization (bsc#1051510).
- media: digitv: do not continue if remote control state can't be read (bsc#1051510).
- media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0 (bsc#1051510).
- media: exynos4-is: fix wrong mdev and v4l2 dev order in error path (git-fixes).
- media: gspca: zero usb_buf (bsc#1051510).
- media: iguanair: fix endpoint sanity check (bsc#1051510).
- media: ov6650: Fix control handler not freed on init error (git-fixes).
- media: ov6650: Fix crop rectangle alignment not passed back (git-fixes).
- media: ov6650: Fix incorrect use of JPEG colorspace (git-fixes).
- media: pulse8-cec: fix lost cec_transmit_attempt_done() call.
- media: pulse8-cec: return 0 when invalidating the logical address (bsc#1051510).
- media: stkwebcam: Bugfix for wrong return values (bsc#1051510).
- media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors (bsc#1051510).
- media: uvcvideo: Fix error path in control parsing failure (git-fixes).
- media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE (bsc#1051510).
- media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT (bsc#1051510).
- media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments (bsc#1051510).
- mei: bus: prefix device names on bus with the bus name (bsc#1051510).
- mfd: da9062: Fix watchdog compatible string (bsc#1051510).
- mfd: dln2: More sanity checking for endpoints (bsc#1051510).
- mfd: rn5t618: Mark ADC control register volatile (bsc#1051510).
- missing escaping of backslashes in macro expansions Fixes: f3b74b0ae86b ('rpm/kernel-subpackage-spec: Unify dependency handling.') Fixes: 3fd22e219f77 ('rpm/kernel-subpackage-spec: Fix empty Recommends tag (bsc#1143959)')
- mlxsw: spectrum_qdisc: Ignore grafting of invisible FIFO (bsc#1112374).
- mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel (bsc#1112374).
- mm, memory_hotplug: do not clear numa_node association after hot_remove (bnc#1115026).
- mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock (bsc#1159394).
- mm: memory_hotplug: use put_device() if device_register fail (bsc#1159955 ltc#182993).
- mmc: mediatek: fix CMD_TA to 2 for MT8173 HS200/HS400 mode (bsc#1051510).
- mmc: sdhci-of-esdhc: fix P2020 errata handling (bsc#1051510).
- mmc: sdhci-of-esdhc: Revert 'mmc: sdhci-of-esdhc: add erratum A-009204 support' (bsc#1051510).
- mmc: sdhci: Add a quirk for broken command queuing (git-fixes).
- mmc: sdhci: fix minimum clock rate for v3 controller (bsc#1051510).
- mmc: sdhci: Workaround broken command queuing on Intel GLK (git-fixes).
- mmc: spi: Toggle SPI polarity, do not hardcode it (bsc#1051510).
- mmc: tegra: fix SDR50 tuning override (bsc#1051510).
- moduleparam: fix parameter description mismatch (bsc#1051510).
- mod_devicetable: fix PHY module format (networking-stable-19_12_28).
- mqprio: Fix out-of-bounds access in mqprio_dump (bsc#1109837).
- mtd: fix mtd_oobavail() incoherent returned value (bsc#1051510).
- mwifiex: debugfs: correct histogram spacing, formatting (bsc#1051510).
- mwifiex: delete unused mwifiex_get_intf_num() (bsc#1111666).
- mwifiex: drop most magic numbers from mwifiex_process_tdls_action_frame() (git-fixes).
- mwifiex: fix potential NULL dereference and use after free (bsc#1051510).
- mwifiex: update set_mac_address logic (bsc#1111666).
- namei: only return -ECHILD from follow_dotdot_rcu() (bsc#1163851).
- nbd: prevent memory leak (bsc#1158638).
- net, sysctl: Fix compiler warning when only cBPF is present (bsc#1109837).
- net/ibmvnic: Fix typo in retry check (bsc#1155689 ltc#182047).
- net/mlx4_en: fix mlx4 ethtool -N insertion (networking-stable-19_11_25).
- net/mlx4_en: Fix wrong limitation for number of TX rings (bsc#1103989).
- net/mlx5: Accumulate levels for chains prio namespaces (bsc#1103990).
- net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq (bsc#1046303).
- net/mlx5: Update the list of the PCI supported devices (bsc#1127611).
- net/mlx5e: Fix set vf link state error flow (networking-stable-19_11_25).
- net/mlx5e: Fix SFF 8472 eeprom length (git-fixes).
- net/mlx5e: Query global pause state before setting prio2buffer (bsc#1103990).
- net/mlxfw: Fix out-of-memory error in mfa2 flash burning (bsc#1051858).
- net/sched: act_pedit: fix WARN() in the traffic path (networking-stable-19_11_25).
- net: add sendmsg_locked and sendpage_locked to af_inet6 (bsc#1144162).
- net: bridge: deny dev_set_mac_address() when unregistering (networking-stable-19_12_16).
- net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size() (git-fixes).
- net: dst: Force 4-byte alignment of dst_metrics (networking-stable-19_12_28).
- net: ena: fix napi handler misbehavior when the napi budget is zero (networking-stable-20_01_01).
- net: ethernet: octeon_mgmt: Account for second possible VLAN header (networking-stable-19_11_10).
- net: ethernet: ti: cpsw: fix extra rx interrupt (networking-stable-19_12_16).
- net: fix data-race in neigh_event_send() (networking-stable-19_11_10).
- net: hisilicon: Fix a BUG trigered by wrong bytes_compl (networking-stable-19_12_28).
- net: hns3: fix ETS bandwidth validation bug (bsc#1104353 ).
- net: nfc: nci: fix a possible sleep-in-atomic-context bug in nci_uart_tty_receive() (networking-stable-19_12_28).
- net: phy: at803x: Change error to EINVAL for invalid MAC (bsc#1051510).
- net: phy: broadcom: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: Check against net_device being NULL (bsc#1051510).
- net: phy: dp83867: Set up RGMII TX delay (bsc#1051510).
- net: phy: Fix not to call phy_resume() if PHY is not attached (bsc#1051510).
- net: phy: Fix the register offsets in Broadcom iProc mdio mux driver (bsc#1051510).
- net: phy: fixed_phy: Fix fixed_phy not checking GPIO (bsc#1051510).
- net: phy: marvell: clear wol event before setting it (bsc#1051510).
- net: phy: marvell: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: meson-gxl: check phy_write return value (bsc#1051510).
- net: phy: micrel: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: mscc: read 'vsc8531, edge-slowdown' as an u32 (bsc#1051510).
- net: phy: mscc: read 'vsc8531,vddmac' as an u32 (bsc#1051510).
- net: phy: xgene: disable clk on error paths (bsc#1051510).
- net: phy: xgmiitorgmii: Check phy_driver ready before accessing (bsc#1051510).
- net: phy: xgmiitorgmii: Check read_status results (bsc#1051510).
- net: phy: xgmiitorgmii: Support generic PHY status read (bsc#1051510).
- net: psample: fix skb_over_panic (networking-stable-19_12_03).
- net: qlogic: Fix error paths in ql_alloc_large_buffers() (networking-stable-19_12_28).
- net: rtnetlink: prevent underflows in do_setvfinfo() (networking-stable-19_11_25).
- net: sched: correct flower port blocking (git-fixes).
- net: sched: ensure opts_len &lt;= IP_TUNNEL_OPTS_MAX in act_tunnel_key (bsc#1109837).
- net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues (bsc#1109837).
- net: sched: fix `tc -s class show` no bstats on class with nolock subqueues (networking-stable-19_12_03).
- net: usb: lan78xx: Fix suspend/resume PHY register access error (networking-stable-19_12_28).
- net: usb: lan78xx: limit size of local TSO packets (bsc#1051510).
- net: usb: qmi_wwan: add support for DW5821e with eSIM support (networking-stable-19_11_10).
- net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules (networking-stable-19_11_18).
- netfilter: nf_queue: enqueue skbs with NULL dst (git-fixes).
- new helper: lookup_positive_unlocked() (bsc#1159271).
- NFC: fdp: fix incorrect free object (networking-stable-19_11_10).
- NFC: pn533: fix bulk-message timeout (bsc#1051510).
- NFC: pn544: Adjust indentation in pn544_hci_check_presence (git-fixes).
- NFC: st21nfca: fix double free (networking-stable-19_11_10).
- nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info (bsc#1163774).
- ocfs2: fix panic due to ocfs2_wq is null (bsc#1158644).
- ocfs2: fix passing zero to 'PTR_ERR' warning (bsc#1158649).
- openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() (networking-stable-19_12_03).
- openvswitch: remove another BUG_ON() (networking-stable-19_12_03).
- openvswitch: support asymmetric conntrack (networking-stable-19_12_16).
- orinoco_usb: fix interface sanity check (git-fixes).
- PCI/IOV: Fix memory leak in pci_iov_add_virtfn() (git-fixes).
- PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity() (bsc#1051510).
- PCI/switchtec: Fix vep_vector_number ioread width (bsc#1051510).
- PCI: Add DMA alias quirk for Intel VCA NTB (bsc#1051510).
- PCI: Do not disable bridge BARs when assigning bus resources (bsc#1051510).
- PCI: pciehp: Avoid returning prematurely from sysfs requests (git-fixes).
- PCI: rpaphp: Add drc-info support for hotplug slot registration (bsc#1157480 ltc#181028).
- PCI: rpaphp: Annotate and correctly byte swap DRC properties (bsc#1157480 ltc#181028).
- PCI: rpaphp: Avoid a sometimes-uninitialized warning (bsc#1157480 ltc#181028).
- PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-info (bsc#1157480 ltc#181028).
- PCI: rpaphp: Do not rely on firmware feature to imply drc-info support (bsc#1157480 ltc#181028).
- PCI: rpaphp: Fix up pointer to first drc-info entry (bsc#1157480 ltc#181028).
- percpu: Separate decrypted varaibles anytime encryption can be enabled (bsc#1114279).
- perf/x86/intel: Fix inaccurate period in context switch for auto-reload (bsc#1164315).
- phy: qualcomm: Adjust indentation in read_poll_timeout (bsc#1051510).
- pinctrl: cherryview: Fix irq_valid_mask calculation (bsc#1111666).
- pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues (bsc#1051510).
- pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELF_B and SD1_CLK_B (bsc#1051510).
- pinctrl: xway: fix gpio-hog related boot issues (bsc#1051510).
- pktcdvd: remove warning on attempting to register non-passthrough dev (bsc#1051510).
- platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 (bsc#1051510).
- platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size (bsc#1051510).
- platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer (bsc#1051510).
- platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes (bsc#1051510).
- platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table (bsc#1051510).
- PM / AVS: SmartReflex: NULL check before some freeing functions is not needed (bsc#1051510).
- PM / Domains: Deal with multiple states but no governor in genpd (bsc#1051510).
- power: supply: ltc2941-battery-gauge: fix use-after-free (bsc#1051510).
- powerpc/archrandom: fix arch_get_random_seed_int() (bsc#1065729).
- powerpc/irq: fix stack overflow verification (bsc#1065729).
- powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (bsc#1065729).
- powerpc/mm: Remove kvm radix prefetch workaround for Power9 DD2.2 (bsc#1061840).
- powerpc/papr_scm: Do not enable direct map for a region by default (bsc#1129551).
- powerpc/papr_scm: Fix leaking 'bus_desc.provider_name' in some paths (bsc#1142685 ltc#179509).
- powerpc/pkeys: remove unused pkey_allows_readwrite (bsc#1065729).
- powerpc/powernv: Disable native PCIe port management (bsc#1065729).
- powerpc/pseries/hotplug-memory: Change rc variable to bool (bsc#1065729).
- powerpc/pseries/lparcfg: Fix display of Maximum Memory (bsc#1162028 ltc#181740).
- powerpc/pseries/mobility: notify network peers after migration (bsc#1152631 ltc#181798).
- powerpc/pseries/vio: Fix iommu_table use-after-free refcount warning (bsc#1065729).
- powerpc/pseries: Add cpu DLPAR support for drc-info property (bsc#1157480 ltc#181028).
- powerpc/pseries: Advance pfn if section is not present in lmb_is_removable() (bsc#1065729).
- powerpc/pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce for DDW (bsc#1065729).
- powerpc/pseries: Drop pointless static qualifier in vpa_debugfs_init() (git-fixes).
- powerpc/pseries: Enable support for ibm,drc-info property (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix bad drc_index_start value parsing of drc-info entry (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix drc-info mappings of logical cpus to drc-index (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix vector5 in ibm architecture vector table (bsc#1157480 ltc#181028).
- powerpc/pseries: Revert support for ibm,drc-info devtree property (bsc#1157480 ltc#181028).
- powerpc/security: Fix debugfs data leak on 32-bit (bsc#1065729).
- powerpc/tm: Fix clearing MSR[TS] in current when reclaiming on signal delivery (bsc#1118338 ltc#173734).
- powerpc/tools: Do not quote $objdump in scripts (bsc#1065729).
- powerpc/xive: Discard ESB load value when interrupt is invalid (bsc#1085030).
- powerpc/xive: Skip ioremap() of ESB pages for LSI interrupts (bsc#1085030).
- powerpc/xmon: do not access ASDR in VMs (bsc#1065729).
- powerpc: Allow 64bit VDSO __kernel_sync_dicache to work across ranges &gt;4GB (bnc#1151927 5.3.17).
- powerpc: Allow flush_icache_range to work across ranges &gt;4GB (bnc#1151927 5.3.17).
- powerpc: avoid adjusting memory_limit for capture kernel memory reservation (bsc#1140025 ltc#176086).
- powerpc: Enable support for ibm,drc-info devtree property (bsc#1157480 ltc#181028).
- powerpc: Fix vDSO clock_getres() (bsc#1065729).
- powerpc: reserve memory for capture kernel after hugepages init (bsc#1140025 ltc#176086).
- ppp: Adjust indentation into ppp_async_input (git-fixes).
- prevent active file list thrashing due to refault detection (VM Performance, bsc#1156286).
- pseries/drc-info: Search DRC properties for CPU indexes (bsc#1157480 ltc#181028).
- pstore/ram: Write new dumps to start of recycled zones (bsc#1051510).
- pwm: Clear chip_data in pwm_put() (bsc#1051510).
- pwm: clps711x: Fix period calculation (bsc#1051510).
- pwm: omap-dmtimer: Remove PWM chip in .remove before making it unfunctional (git-fixes).
- pwm: Remove set but not set variable 'pwm' (git-fixes).
- pxa168fb: Fix the function used to release some memory in an error (bsc#1114279)
- qede: Disable hardware gro when xdp prog is installed (bsc#1086314 bsc#1086313 bsc#1086301 ).
- qede: Fix multicast mac configuration (networking-stable-19_12_28).
- qede: fix NULL pointer deref in __qede_remove() (networking-stable-19_11_10).
- qmi_wwan: Add support for Quectel RM500Q (bsc#1051510).
- quota: Check that quota is not dirty before release (bsc#1163858).
- quota: fix livelock in dquot_writeback_dquots (bsc#1163857).
- r8152: add missing endpoint sanity check (bsc#1051510).
- r8152: get default setting of WOL before initializing (bsc#1051510).
- random: move FIPS continuous test to output functions (bsc#1155334).
- RDMA/bnxt_re: Avoid freeing MR resources if dereg fails (bsc#1050244).
- RDMA/bnxt_re: Enable SRIOV VF support on Broadcom's 57500 adapter series (bsc#1154916).
- RDMA/bnxt_re: Fix chip number validation Broadcom's Gen P5 series (bsc#1157895).
- RDMA/bnxt_re: Fix missing le16_to_cpu (bsc#1157895).
- RDMA/hns: Bugfix for qpc/cqc timer configuration (bsc#1104427 bsc#1126206).
- RDMA/hns: Correct the value of srq_desc_size (bsc#1104427 ).
- RDMA/hns: Fix to support 64K page for srq (bsc#1104427 ).
- RDMA/hns: Prevent memory leaks of eq-&gt;buf_list (bsc#1104427 ).
- README.BRANCH: Removing myself from the maintainer list
- README.BRANCH: Update the branch name to cve/linux-4.12
- regulator: Fix return value of _set_load() stub (bsc#1051510).
- regulator: rk808: Lower log level on optional GPIOs being not available (bsc#1051510).
- regulator: rn5t618: fix module aliases (bsc#1051510).
- regulator: tps65910: fix a missing check of return value (bsc#1051510).
- reiserfs: Fix memory leak of journal device string (bsc#1163867).
- reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling (bsc#1163869).
- reset: fix reset_control_ops kerneldoc comment (bsc#1051510).
- resource: fix locking in find_next_iomem_res() (bsc#1114279).
- Revert 'ath10k: fix DMA related firmware crashes on multiple devices' (git-fixes).
- Revert 'Input: synaptics-rmi4 - do not increment rmiaddr for SMBus transfers' (bsc#1051510).
- Revert 'locking/pvqspinlock: Do not wait if vCPU is preempted' (bsc#1050549).
- Revert 'mmc: sdhci: Fix incorrect switch to HS mode' (bsc#1051510).
- rpm/kabi.pl: support new (&gt;=5.4) Module.symvers format (new symbol namespace field)
- rpm/kernel-binary.spec.in: Conflict with too old powerpc-utils (jsc#ECO-920, jsc#SLE-11054, jsc#SLE-11322).
- rpm/kernel-binary.spec.in: Replace Novell with SUSE
- rpm/kernel-subpackage-spec: Exclude kernel-firmware recommends (bsc#1143959) For reducing the dependency on kernel-firmware in sub packages
- rpm/kernel-subpackage-spec: Fix empty Recommends tag (bsc#1143959)
- rpm/kernel-subpackage-spec: fix kernel-default-base build There were some issues with recent changes to subpackage dependencies handling:
- rpm/kernel-subpackage-spec: Unify dependency handling.
- rpm/modules.fips: update module list (bsc#1157853)
- rsi_91x_usb: fix interface sanity check (git-fixes).
- rt2800: remove errornous duplicate condition (git-fixes).
- rtc: cmos: Stop using shared IRQ (bsc#1051510).
- rtc: dt-binding: abx80x: fix resistance scale (bsc#1051510).
- rtc: hym8563: Return -EINVAL if the time is known to be invalid (bsc#1051510).
- rtc: max8997: Fix the returned value in case of error in 'max8997_rtc_read_alarm()' (bsc#1051510).
- rtc: msm6242: Fix reading of 10-hour digit (bsc#1051510).
- rtc: pcf8523: set xtal load capacitance from DT (bsc#1051510).
- rtc: s35390a: Change buf's type to u8 in s35390a_init (bsc#1051510).
- rtl818x: fix potential use after free (bsc#1051510).
- rtl8xxxu: fix interface sanity check (git-fixes).
- rtlwifi: Fix MAX MPDU of VHT capability (git-fixes).
- rtlwifi: Remove redundant semicolon in wifi.h (git-fixes).
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (bsc#1111666).
- s390/qeth: clean up page frag creation (git-fixes).
- s390/qeth: consolidate skb allocation (git-fixes).
- s390/qeth: ensure linear access to packet headers (git-fixes).
- s390/qeth: guard against runt packets (git-fixes).
- sched/fair: Add tmp_alone_branch assertion (bnc#1156462).
- sched/fair: Fix insertion in rq-&gt;leaf_cfs_rq_list (bnc#1156462).
- sched/fair: Fix O(nr_cgroups) in the load balancing path (bnc#1156462).
- sched/fair: Optimize update_blocked_averages() (bnc#1156462).
- sched/fair: WARN() and refuse to set buddy when !se-&gt;on_rq (bsc#1158132).
- scsi: lpfc: fix build failure with DEBUGFS disabled (bsc#1154601).
- scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (bsc#1158013).
- scsi: qla2xxx: Add D-Port Diagnostic reason explanation logs (bsc#1158013).
- scsi: qla2xxx: Added support for MPI and PEP regions for ISP28XX (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Cleanup unused async_logout_done (bsc#1158013).
- scsi: qla2xxx: Consolidate fabric scan (bsc#1158013).
- scsi: qla2xxx: Correct fcport flags handling (bsc#1158013).
- scsi: qla2xxx: Correctly retrieve and interpret active flash region (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Fix a NULL pointer dereference in an error path (bsc#1157966 bsc#1158013 bsc#1157424).
- scsi: qla2xxx: Fix fabric scan hang (bsc#1158013).
- scsi: qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Fix mtcp dump collection failure (bsc#1158013).
- scsi: qla2xxx: Fix RIDA Format-2 (bsc#1158013).
- scsi: qla2xxx: Fix stuck login session using prli_pend_timer (bsc#1158013).
- scsi: qla2xxx: Fix stuck session in GNL (bsc#1158013).
- scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type (bsc#1158013).
- scsi: qla2xxx: Fix unbound NVME response length (bsc#1157966 bsc#1158013 bsc#1157424).
- scsi: qla2xxx: Fix update_fcport for current_topology (bsc#1158013).
- scsi: qla2xxx: Improve readability of the code that handles qla_flt_header (bsc#1158013).
- scsi: qla2xxx: Remove defer flag to indicate immeadiate port loss (bsc#1158013).
- scsi: qla2xxx: Update driver version to 10.01.00.22-k (bsc#1158013).
- scsi: qla2xxx: Use common routine to free fcport struct (bsc#1158013).
- scsi: qla2xxx: Use get_unaligned_*() instead of open-coding these functions (bsc#1158013).
- scsi: zfcp: trace channel log even for FCP command responses (git-fixes).
- sctp: cache netns in sctp_ep_common (networking-stable-19_12_03).
- sctp: fully initialize v4 addr in some functions (networking-stable-19_12_28).
- serial: 8250_bcm2835aux: Fix line mismatch on driver unbind (bsc#1051510).
- serial: ifx6x60: add missed pm_runtime_disable (bsc#1051510).
- serial: max310x: Fix tx_empty() callback (bsc#1051510).
- serial: pl011: Fix DMA -&gt;flush_buffer() (bsc#1051510).
- serial: serial_core: Perform NULL checks for break_ctl ops (bsc#1051510).
- serial: stm32: fix transmit_chars when tx is stopped (bsc#1051510).
- sfc: Only cancel the PPS workqueue if it exists (networking-stable-19_11_25).
- sfc: Remove 'PCIE error reporting unavailable' (bsc#1161472).
- sh_eth: check sh_eth_cpu_data::dual_port when dumping registers (bsc#1051510).
- sh_eth: fix dumping ARSTR (bsc#1051510).
- sh_eth: fix invalid context bug while calling auto-negotiation by ethtool (bsc#1051510).
- sh_eth: fix invalid context bug while changing link options by ethtool (bsc#1051510).
- sh_eth: fix TSU init on SH7734/R8A7740 (bsc#1051510).
- sh_eth: fix TXALCR1 offsets (bsc#1051510).
- sh_eth: TSU_QTAG0/1 registers the same as TSU_QTAGM0/1 (bsc#1051510).
- smb3: Fix crash in SMB2_open_init due to uninitialized field in compounding path (bsc#1144333).
- smb3: Fix persistent handles reconnect (bsc#1144333).
- smb3: fix refcount underflow warning on unmount when no directory leases (bsc#1144333).
- smb3: remove confusing dmesg when mounting with encryption ('seal') (bsc#1144333).
- soc/tegra: fuse: Correct straps' address for older Tegra124 device trees (bsc#1051510).
- soc: renesas: rcar-sysc: Add goto to of_node_put() before return (bsc#1051510).
- soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot (bsc#1051510).
- spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch (bsc#1051510).
- spi: omap2-mcspi: Set FIFO DMA trigger level to word length (bsc#1051510).
- spi: tegra114: clear packed bit for unpacked mode (bsc#1051510).
- spi: tegra114: configure dma burst size to fifo trig level (bsc#1051510).
- spi: tegra114: fix for unpacked mode transfers (bsc#1051510).
- spi: tegra114: flush fifos (bsc#1051510).
- spi: tegra114: terminate dma and reset on transfer timeout (bsc#1051510).
- sr_vendor: support Beurer GL50 evo CD-on-a-chip devices (boo#1164632).
- staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 (bsc#1051510).
- Staging: iio: adt7316: Fix i2c data reading, set the data field (bsc#1051510).
- staging: rtl8188eu: fix interface sanity check (bsc#1051510).
- staging: rtl8192e: fix potential use after free (bsc#1051510).
- staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids (bsc#1051510).
- staging: rtl8723bs: Drop ACPI device ids (bsc#1051510).
- staging: vt6656: correct packet types for CTS protect, mode (bsc#1051510).
- staging: vt6656: Fix false Tx excessive retries reporting (bsc#1051510).
- staging: vt6656: use NULLFUCTION stack on mac80211 (bsc#1051510).
- staging: wlan-ng: ensure error return is actually returned (bsc#1051510).
- stm class: Fix a double free of stm_source_device (bsc#1051510).
- stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (bsc#1088810, bsc#1161702).
- stop_machine: Atomically queue and wake stopper threads (bsc#1088810, bsc#1161702).
- stop_machine: Disable preemption after queueing stopper threads (bsc#1088810, bsc#1161702).
- stop_machine: Disable preemption when waking two stopper threads (bsc#1088810, bsc#1161702).
- tcp: clear tp-&gt;packets_out when purging write queue (bsc#1160560).
- tcp: do not send empty skb from tcp_write_xmit() (networking-stable-20_01_01).
- tcp: exit if nothing to retransmit on RTO timeout (bsc#1160560, stable 4.14.159).
- tcp: md5: fix potential overestimation of TCP option space (networking-stable-19_12_16).
- thermal: Fix deadlock in thermal thermal_zone_device_check (bsc#1051510).
- tipc: fix a missing check of genlmsg_put (bsc#1051510).
- tipc: fix link name length check (bsc#1051510).
- tipc: fix memory leak in tipc_nl_compat_publ_dump (bsc#1051510).
- tipc: fix skb may be leaky in tipc_link_input (bsc#1051510).
- tracing: Annotate ftrace_graph_hash pointer with __rcu (git-fixes).
- tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu (git-fixes).
- tracing: Fix tracing_stat return values in error handling paths (git-fixes).
- tracing: Fix very unlikely race of registering two stat tracers (git-fixes).
- tracing: Have the histogram compare functions convert to u64 first (bsc#1160210).
- tracing: xen: Ordered comparison of function pointers (git-fixes).
- tty/serial: atmel: Add is_half_duplex helper (bsc#1051510).
- tty: n_hdlc: fix build on SPARC (bsc#1051510).
- tty: serial: msm_serial: Fix lockup for sysrq and oops (bsc#1051510).
- tty: vt: keyboard: reject invalid keycodes (bsc#1051510).
- uaccess: Add non-pagefault user-space write function (bsc#1083647).
- ubifs: Correctly initialize c-&gt;min_log_bytes (bsc#1158641).
- ubifs: do not trigger assertion on invalid no-key filename (bsc#1163850).
- ubifs: Fix deadlock in concurrent bulk-read and writepage (bsc#1163856).
- ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag (bsc#1163855).
- ubifs: Limit the number of pages in shrink_liability (bsc#1158643).
- ubifs: Reject unsupported ioctl flags explicitly (bsc#1163844).
- udp: fix integer overflow while computing available space in sk_rcvbuf (networking-stable-20_01_01).
- usb-storage: Disable UAS on JMicron SATA enclosure (bsc#1051510).
- usb: adutux: fix interface sanity check (bsc#1051510).
- usb: Allow USB device to be warm reset in suspended state (bsc#1051510).
- usb: atm: ueagle-atm: add missing endpoint check (bsc#1051510).
- usb: chipidea: host: Disable port power only if previously enabled (bsc#1051510).
- usb: core: fix check for duplicate endpoints (git-fixes).
- usb: core: hub: Improved device recognition on remote wakeup (bsc#1051510).
- usb: core: urb: fix URB structure initialization function (bsc#1051510).
- usb: documentation: flags on usb-storage versus UAS (bsc#1051510).
- usb: dwc3: debugfs: Properly print/set link state for HS (bsc#1051510).
- usb: dwc3: do not log probe deferrals; but do log other error codes (bsc#1051510).
- usb: dwc3: ep0: Clear started flag on completion (bsc#1051510).
- usb: dwc3: turn off VBUS when leaving host mode (bsc#1051510).
- usb: EHCI: Do not return -EPIPE when hub is disconnected (git-fixes).
- usb: gadget: f_ecm: Use atomic_t to track in-flight request (bsc#1051510).
- usb: gadget: f_ncm: Use atomic_t to track in-flight request (bsc#1051510).
- usb: gadget: legacy: set max_speed to super-speed (bsc#1051510).
- usb: gadget: pch_udc: fix use after free (bsc#1051510).
- usb: gadget: u_serial: add missing port entry locking (bsc#1051510).
- usb: gadget: Zero ffs_io_data (bsc#1051510).
- usb: host: xhci-hub: fix extra endianness conversion (bsc#1051510).
- usb: idmouse: fix interface sanity checks (bsc#1051510).
- usb: mon: Fix a deadlock in usbmon between mmap and read (bsc#1051510).
- usb: mtu3: fix dbginfo in qmu_tx_zlp_error_handler (bsc#1051510).
- usb: musb: dma: Correct parameter passed to IRQ handler (bsc#1051510).
- usb: musb: fix idling for suspend after disconnect interrupt (bsc#1051510).
- usb: roles: fix a potential use after free (git-fixes).
- usb: serial: ch341: handle unbound port at reset_resume (bsc#1051510).
- usb: serial: ftdi_sio: add device IDs for U-Blox C099-F9P (bsc#1051510).
- usb: serial: io_edgeport: add missing active-port sanity check (bsc#1051510).
- usb: serial: io_edgeport: fix epic endpoint lookup (bsc#1051510).
- usb: serial: io_edgeport: handle unbound ports on URB completion (bsc#1051510).
- usb: serial: io_edgeport: use irqsave() in USB's complete callback (bsc#1051510).
- usb: serial: ir-usb: add missing endpoint sanity check (bsc#1051510).
- usb: serial: ir-usb: fix IrLAP framing (bsc#1051510).
- usb: serial: ir-usb: fix link-speed handling (bsc#1051510).
- usb: serial: keyspan: handle unbound ports (bsc#1051510).
- usb: serial: opticon: fix control-message timeouts (bsc#1051510).
- usb: serial: option: Add support for Quectel RM500Q (bsc#1051510).
- usb: serial: option: add support for Quectel RM500Q in QDL mode (git-fixes).
- usb: serial: option: add Telit ME910G1 0x110a composition (git-fixes).
- usb: serial: option: add ZLP support for 0x1bc7/0x9010 (git-fixes).
- usb: serial: quatech2: handle unbound ports (bsc#1051510).
- usb: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx (bsc#1051510).
- usb: serial: suppress driver bind attributes (bsc#1051510).
- usb: typec: tcpci: mask event interrupts when remove driver (bsc#1051510).
- usb: uas: heed CAPACITY_HEURISTICS (bsc#1051510).
- usb: uas: honor flag to avoid CAPACITY16 (bsc#1051510).
- usb: xhci: Fix build warning seen with CONFIG_PM=n (bsc#1051510).
- usb: xhci: only set D3hot for pci device (bsc#1051510).
- usbip: Fix error path of vhci_recv_ret_submit() (git-fixes).
- usbip: Fix receive error in vhci-hcd when using scatter-gather (bsc#1051510).
- vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset == -1 (bsc#1051510).
- vhost/vsock: accept only packets with the right dst_cid (networking-stable-20_01_01).
- video: backlight: Add devres versions of of_find_backlight (bsc#1090888) Taken for 6010831dde5.
- video: backlight: Add of_find_backlight helper in backlight.c (bsc#1090888) Taken for 6010831dde5.
- watchdog: max77620_wdt: fix potential build errors (bsc#1051510).
- watchdog: rn5t618_wdt: fix module aliases (bsc#1051510).
- watchdog: sama5d4: fix WDD value to be always set to max (bsc#1051510).
- watchdog: wdat_wdt: fix get_timeleft call for wdat_wdt (bsc#1162557).
- wireless: fix enabling channel 12 for custom regulatory domain (bsc#1051510).
- wireless: wext: avoid gcc -O3 warning (bsc#1051510).
- workqueue: Fix pwq ref leak in rescuer_thread() (bsc#1160211).
- x86/amd_nb: Add PCI device IDs for family 17h, model 70h (bsc#1163206).
- x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR (bsc#1162619).
- x86/intel_rdt: Split resource group removal in two (bsc#1112178).
- x86/intel_rdt: Split resource group removal in two (bsc#1112178).
- x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI (bsc#1114279).
- x86/mce/AMD: Allow any CPU to initialize the smca_banks array (bsc#1114279).
- x86/MCE/AMD: Allow Reserved types to be overwritten in smca_banks (bsc#1114279).
- x86/MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure() (bsc#1114279).
- x86/mce: Fix possibly incorrect severity calculation on AMD (bsc#1114279).
- x86/resctrl: Check monitoring static key in the MBM overflow handler (bsc#1114279).
- x86/resctrl: Fix a deadlock due to inaccurate reference (bsc#1112178).
- x86/resctrl: Fix a deadlock due to inaccurate reference (bsc#1112178).
- x86/resctrl: Fix an imbalance in domain_remove_cpu() (bsc#1114279).
- x86/resctrl: Fix potential memory leak (bsc#1114279).
- x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup (bsc#1112178).
- x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup (bsc#1112178).
- x86/resctrl: Fix use-after-free when deleting resource groups (bsc#1114279).
- x86/speculation: Fix incorrect MDS/TAA mitigation status (bsc#1114279).
- x86/speculation: Fix redundant MDS mitigation message (bsc#1114279).
- xen-blkfront: switch kcalloc to kvcalloc for large array allocation (bsc#1160917).
- xen/balloon: Support xend-based toolstack take two (bsc#1065600).
- xen/blkback: Avoid unmapping unmapped grant pages (bsc#1065600).
- xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk (bsc#1065600).
- xen: Enable interrupts when calling _cond_resched() (bsc#1065600).
- xfrm: Fix transport mode skb control buffer usage (bsc#1161552).
- xfs: Fix tail rounding in xfs_alloc_file_space() (bsc#1161087, bsc#1153917).
- xfs: Sanity check flags of Q_XQUOTARM call (bsc#1158652).
- xhci: Fix memory leak in xhci_add_in_port() (bsc#1051510).
- xhci: fix USB3 device initiated resume race with roothub autosuspend (bsc#1051510).
- xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour (bsc#1051510).
- xhci: Increase STS_HALT timeout in xhci_suspend() (bsc#1051510).
- xhci: make sure interrupts are restored to correct state (bsc#1051510).
- zd1211rw: fix storage endpoint lookup (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-02"/>
	<updated date="2020-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046303">SUSE bug 1046303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051858">SUSE bug 1051858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086301">SUSE bug 1086301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086313">SUSE bug 1086313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086314">SUSE bug 1086314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088810">SUSE bug 1088810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090888">SUSE bug 1090888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103989">SUSE bug 1103989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105392">SUSE bug 1105392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112504">SUSE bug 1112504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115026">SUSE bug 1115026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118338">SUSE bug 1118338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118661">SUSE bug 1118661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123328">SUSE bug 1123328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127682">SUSE bug 1127682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129551">SUSE bug 1129551</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133147">SUSE bug 1133147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134973">SUSE bug 1134973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140025">SUSE bug 1140025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143959">SUSE bug 1143959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144162">SUSE bug 1144162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146544">SUSE bug 1146544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151548">SUSE bug 1151548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151910">SUSE bug 1151910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151927">SUSE bug 1151927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152107">SUSE bug 1152107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152631">SUSE bug 1152631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153535">SUSE bug 1153535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153917">SUSE bug 1153917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154243">SUSE bug 1154243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154601">SUSE bug 1154601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154768">SUSE bug 1154768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154916">SUSE bug 1154916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155331">SUSE bug 1155331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155334">SUSE bug 1155334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155689">SUSE bug 1155689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156259">SUSE bug 1156259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156286">SUSE bug 1156286</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156462">SUSE bug 1156462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157155">SUSE bug 1157155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157157">SUSE bug 1157157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157169">SUSE bug 1157169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157303">SUSE bug 1157303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157480">SUSE bug 1157480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157692">SUSE bug 1157692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157853">SUSE bug 1157853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157895">SUSE bug 1157895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157908">SUSE bug 1157908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157966">SUSE bug 1157966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158013">SUSE bug 1158013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158021">SUSE bug 1158021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158026">SUSE bug 1158026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158071">SUSE bug 1158071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158094">SUSE bug 1158094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158132">SUSE bug 1158132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158533">SUSE bug 1158533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158637">SUSE bug 1158637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158638">SUSE bug 1158638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158639">SUSE bug 1158639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158640">SUSE bug 1158640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158641">SUSE bug 1158641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158643">SUSE bug 1158643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158644">SUSE bug 1158644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158645">SUSE bug 1158645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158646">SUSE bug 1158646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158647">SUSE bug 1158647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158649">SUSE bug 1158649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158651">SUSE bug 1158651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158652">SUSE bug 1158652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158819">SUSE bug 1158819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158823">SUSE bug 1158823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158824">SUSE bug 1158824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158827">SUSE bug 1158827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158893">SUSE bug 1158893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158900">SUSE bug 1158900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158903">SUSE bug 1158903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158904">SUSE bug 1158904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158954">SUSE bug 1158954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159024">SUSE bug 1159024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159028">SUSE bug 1159028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159271">SUSE bug 1159271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159297">SUSE bug 1159297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159377">SUSE bug 1159377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159394">SUSE bug 1159394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159483">SUSE bug 1159483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159484">SUSE bug 1159484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159500">SUSE bug 1159500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159569">SUSE bug 1159569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159588">SUSE bug 1159588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159841">SUSE bug 1159841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159908">SUSE bug 1159908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159909">SUSE bug 1159909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159910">SUSE bug 1159910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159911">SUSE bug 1159911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159955">SUSE bug 1159955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160147">SUSE bug 1160147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160195">SUSE bug 1160195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160210">SUSE bug 1160210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160211">SUSE bug 1160211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160218">SUSE bug 1160218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160433">SUSE bug 1160433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160442">SUSE bug 1160442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160469">SUSE bug 1160469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160470">SUSE bug 1160470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160476">SUSE bug 1160476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160560">SUSE bug 1160560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160618">SUSE bug 1160618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160678">SUSE bug 1160678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160755">SUSE bug 1160755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160756">SUSE bug 1160756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160784">SUSE bug 1160784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160787">SUSE bug 1160787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160802">SUSE bug 1160802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160803">SUSE bug 1160803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160804">SUSE bug 1160804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160917">SUSE bug 1160917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160966">SUSE bug 1160966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160979">SUSE bug 1160979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161087">SUSE bug 1161087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161243">SUSE bug 1161243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161360">SUSE bug 1161360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161472">SUSE bug 1161472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161514">SUSE bug 1161514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161518">SUSE bug 1161518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161522">SUSE bug 1161522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161523">SUSE bug 1161523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161549">SUSE bug 1161549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161552">SUSE bug 1161552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161674">SUSE bug 1161674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161702">SUSE bug 1161702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161907">SUSE bug 1161907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161931">SUSE bug 1161931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161933">SUSE bug 1161933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161934">SUSE bug 1161934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161935">SUSE bug 1161935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161936">SUSE bug 1161936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161937">SUSE bug 1161937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162028">SUSE bug 1162028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162067">SUSE bug 1162067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162109">SUSE bug 1162109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162139">SUSE bug 1162139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162557">SUSE bug 1162557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162617">SUSE bug 1162617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162618">SUSE bug 1162618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162619">SUSE bug 1162619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162623">SUSE bug 1162623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162928">SUSE bug 1162928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162943">SUSE bug 1162943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163206">SUSE bug 1163206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163383">SUSE bug 1163383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163384">SUSE bug 1163384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163762">SUSE bug 1163762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163774">SUSE bug 1163774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163836">SUSE bug 1163836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163840">SUSE bug 1163840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163841">SUSE bug 1163841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163842">SUSE bug 1163842</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163843">SUSE bug 1163843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163844">SUSE bug 1163844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163845">SUSE bug 1163845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163846">SUSE bug 1163846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163849">SUSE bug 1163849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163850">SUSE bug 1163850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163851">SUSE bug 1163851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163852">SUSE bug 1163852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163853">SUSE bug 1163853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163855">SUSE bug 1163855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163856">SUSE bug 1163856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163857">SUSE bug 1163857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163858">SUSE bug 1163858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163859">SUSE bug 1163859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163860">SUSE bug 1163860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163861">SUSE bug 1163861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163862">SUSE bug 1163862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163863">SUSE bug 1163863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163867">SUSE bug 1163867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163869">SUSE bug 1163869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163880">SUSE bug 1163880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163971">SUSE bug 1163971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164051">SUSE bug 1164051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164069">SUSE bug 1164069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164098">SUSE bug 1164098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164115">SUSE bug 1164115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164314">SUSE bug 1164314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164315">SUSE bug 1164315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164388">SUSE bug 1164388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164471">SUSE bug 1164471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164598">SUSE bug 1164598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164632">SUSE bug 1164632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164705">SUSE bug 1164705</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164712">SUSE bug 1164712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164727">SUSE bug 1164727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164728">SUSE bug 1164728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164729">SUSE bug 1164729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164730">SUSE bug 1164730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164731">SUSE bug 1164731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164732">SUSE bug 1164732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164733">SUSE bug 1164733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164734">SUSE bug 1164734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164735">SUSE bug 1164735</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-14615/">CVE-2019-14615</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-15213/">CVE-2019-15213</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16746/">CVE-2019-16746</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16994/">CVE-2019-16994</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18808/">CVE-2019-18808</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19036/">CVE-2019-19036</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19045/">CVE-2019-19045</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19051/">CVE-2019-19051</cve>
	<cve impact="moderate" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19054/">CVE-2019-19054</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19066/">CVE-2019-19066</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19318/">CVE-2019-19318</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19319/">CVE-2019-19319</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19332/">CVE-2019-19332</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19338/">CVE-2019-19338</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19447/">CVE-2019-19447</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19523/">CVE-2019-19523</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19526/">CVE-2019-19526</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19527/">CVE-2019-19527</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19532/">CVE-2019-19532</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19533/">CVE-2019-19533</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19535/">CVE-2019-19535</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19537/">CVE-2019-19537</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19767/">CVE-2019-19767</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19927/">CVE-2019-19927</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19965/">CVE-2019-19965</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19966/">CVE-2019-19966</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20054/">CVE-2019-20054</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20095/">CVE-2019-20095</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20096/">CVE-2019-20096</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2732/">CVE-2020-2732</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-7053/">CVE-2020-7053</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8428/">CVE-2020-8428</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8648/">CVE-2020-8648</cve>
	<cve impact="low" cvss3="2.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8992/">CVE-2020-8992</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493002" comment="kernel-default-4.12.14-197.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493003" comment="kernel-default-base-4.12.14-197.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493004" comment="kernel-default-devel-4.12.14-197.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493005" comment="kernel-default-man-4.12.14-197.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493006" comment="kernel-devel-4.12.14-197.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493007" comment="kernel-macros-4.12.14-197.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493008" comment="kernel-zfcpdump-4.12.14-197.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138004" version="1" class="patch">
	<metadata>
		<title>Security update for LibreOffice (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1061210" ref_url="https://bugzilla.suse.com/1061210" source="BUGZILLA"/>
		<reference ref_id="1105173" ref_url="https://bugzilla.suse.com/1105173" source="BUGZILLA"/>
		<reference ref_id="1144522" ref_url="https://bugzilla.suse.com/1144522" source="BUGZILLA"/>
		<reference ref_id="1152684" ref_url="https://bugzilla.suse.com/1152684" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9853" ref_url="https://www.suse.com/security/cve/CVE-2019-9853/" source="CVE"/>
		<description>
This update libreoffice and libraries fixes the following issues:

LibreOffice was updated to 6.3.3 (jsc#SLE-8705), bringing many bug and stability fixes.

More information for the 6.3 release at: https://wiki.documentfoundation.org/ReleaseNotes/6.3

Security issue fixed: 

- CVE-2019-9853: Fixed an issue where by executing macros, the security settings 
  could have been bypassed (bsc#1152684).

Other issues addressed: 

- Dropped disable-kde4 switch, since it is no longer known by configure
- Disabled gtk2 because it will be removed in future releases 
- librelogo is now a standalone sub-package (bsc#1144522).
- Partial fixes for an issue where Table(s) from  DOCX showed wrong 
  position or color (bsc#1061210).


cmis-client was updated to 0.5.2:

 * Removed header for Uuid's sha1 header(bsc#1105173).
 * Fixed Google Drive login
 * Added support for Google Drive two-factor authentication
 * Fixed access to SharePoint root folder 
 * Limited the maximal number of redirections to 20 
 * Switched library implementation to C++11 (the API remains C++98-compatible)
 * Fixed encoding of OAuth2 credentials
 * Dropped cppcheck run from 'make check'. A new 'make cppcheck' target was created for it
 * Added proper API symbol exporting
 * Speeded up building of tests a bit
 * Fixed a few issues found by coverity and cppcheck


libixion was updated to 0.15.0:

 * Updated for new liborcus
 * Switched to spdlog for compile-time debug log outputs
 * Fixed various issues

libmwaw was updated 0.3.15:
 
 * Fixed fuzzing issues 

liborcus was updated to 0.15.3:

 * Fixed various xml related bugs
 * Improved performance
 * Fixed multiple parser issues 
 * Added map and structure mode to orcus-json
 * Other improvements and fixes

mdds was updated to 1.5.0:

 * API changed to 1.5
 * Moved the API incompatibility notes from README to the rst doc.
 * Added the overview section for flat_segment_tree.

myspell-dictionaries was updated to 20191016:

 * Updated Slovenian thesaurus
 * Updated the da_DK dictionary
 * Removed the abbreviations from Thai hunspell dictionary
 * Updated the English dictionaries
 * Fixed the logo management for 'ca'

spdlog was updated to 0.16.3: 

 * Fixed sleep issue under MSVC that happens when changing
   the clock backwards 
 * Ensured that macros always expand to expressions 
 * Added global flush_on function
 		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-09"/>
	<updated date="2020-01-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1061210">SUSE bug 1061210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105173">SUSE bug 1105173</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144522">SUSE bug 1144522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152684">SUSE bug 1152684</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9853/">CVE-2019-9853</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491398" comment="myspell-de-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493009" comment="myspell-de_AT-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493010" comment="myspell-de_CH-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491399" comment="myspell-de_DE-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491400" comment="myspell-dictionaries-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491401" comment="myspell-en-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491402" comment="myspell-en_US-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491403" comment="myspell-es-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491404" comment="myspell-es_ES-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491405" comment="myspell-hu_HU-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491406" comment="myspell-lightproof-en-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491407" comment="myspell-lightproof-hu_HU-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491408" comment="myspell-lightproof-pt_BR-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491409" comment="myspell-lightproof-ru_RU-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491410" comment="myspell-nb_NO-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491411" comment="myspell-no-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491412" comment="myspell-pt_BR-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491413" comment="myspell-ro-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491414" comment="myspell-ro_RO-20191016-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491415" comment="myspell-ru_RU-20191016-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138005" version="1" class="patch">
	<metadata>
		<title>Security update for gd (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1140120" ref_url="https://bugzilla.suse.com/1140120" source="BUGZILLA"/>
		<reference ref_id="1165471" ref_url="https://bugzilla.suse.com/1165471" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14553" ref_url="https://www.suse.com/security/cve/CVE-2018-14553/" source="CVE"/>
		<reference ref_id="CVE-2019-11038" ref_url="https://www.suse.com/security/cve/CVE-2019-11038/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006579.html" source="SUSE-SU"/>
		<description>
This update for gd fixes the following issues:

Security issue fixed:

- CVE-2018-14553: Fixed a null pointer dereference in gdImageClone (bsc#1165471).
- CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm() (bsc#1140120).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-05"/>
	<updated date="2020-03-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1140120">SUSE bug 1140120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165471">SUSE bug 1165471</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14553/">CVE-2018-14553</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11038/">CVE-2019-11038</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493011" comment="libgd3-2.2.5-4.14.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138006" version="1" class="patch">
	<metadata>
		<title>Security update for librsvg (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162501" ref_url="https://bugzilla.suse.com/1162501" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20446" ref_url="https://www.suse.com/security/cve/CVE-2019-20446/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006591.html" source="SUSE-SU"/>
		<description>
This update for librsvg to version 2.42.8 fixes the following issues:

librsvg was updated to version 2.42.8 fixing the following issues:	  

- CVE-2019-20446: Fixed an issue where a crafted SVG file with nested
  patterns can cause denial of service (bsc#1162501).
  NOTE: Librsvg now has limits on the number of loaded XML elements,
  and the number of referenced elements within an SVG document. 
- Fixed a stack exhaustion with circular references in &lt;use&gt;
  elements.
- Fixed a denial-of-service condition from exponential explosion
  of rendered elements, through nested use of SVG 'use' elements in
  malicious SVGs.  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-07"/>
	<updated date="2020-07-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162501">SUSE bug 1162501</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20446/">CVE-2019-20446</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493012" comment="gdk-pixbuf-loader-rsvg-2.42.8-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493013" comment="librsvg-2-2-2.42.8-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138007" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1163184" ref_url="https://bugzilla.suse.com/1163184" source="BUGZILLA"/>
		<reference ref_id="1164505" ref_url="https://bugzilla.suse.com/1164505" source="BUGZILLA"/>
		<reference ref_id="1165784" ref_url="https://bugzilla.suse.com/1165784" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10029" ref_url="https://www.suse.com/security/cve/CVE-2020-10029/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0668-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006606.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

- CVE-2020-10029: Fixed a potential overflow in  on-stack buffer 
  during range reduction (bsc#1165784).	  
- Fixed an issue where pthread were not always locked correctly (bsc#1164505).
- Document mprotect and introduce section on memory protection (bsc#1163184).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-13"/>
	<updated date="2020-03-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1163184">SUSE bug 1163184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164505">SUSE bug 1164505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165784">SUSE bug 1165784</bugzilla>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10029/">CVE-2020-10029</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493014" comment="glibc-2.26-13.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493015" comment="glibc-32bit-2.26-13.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493016" comment="glibc-devel-2.26-13.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493017" comment="glibc-extra-2.26-13.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493018" comment="glibc-i18ndata-2.26-13.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493019" comment="glibc-info-2.26-13.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493020" comment="glibc-locale-2.26-13.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493021" comment="glibc-locale-base-2.26-13.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493022" comment="glibc-locale-base-32bit-2.26-13.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493023" comment="glibc-profile-2.26-13.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493024" comment="nscd-2.26-13.39.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138008" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1135656" ref_url="https://bugzilla.suse.com/1135656" source="BUGZILLA"/>
		<reference ref_id="1153611" ref_url="https://bugzilla.suse.com/1153611" source="BUGZILLA"/>
		<reference ref_id="1157465" ref_url="https://bugzilla.suse.com/1157465" source="BUGZILLA"/>
		<reference ref_id="1158940" ref_url="https://bugzilla.suse.com/1158940" source="BUGZILLA"/>
		<reference ref_id="1159118" ref_url="https://bugzilla.suse.com/1159118" source="BUGZILLA"/>
		<reference ref_id="1160931" ref_url="https://bugzilla.suse.com/1160931" source="BUGZILLA"/>
		<reference ref_id="1162327" ref_url="https://bugzilla.suse.com/1162327" source="BUGZILLA"/>
		<reference ref_id="1162504" ref_url="https://bugzilla.suse.com/1162504" source="BUGZILLA"/>
		<reference ref_id="1165425" ref_url="https://bugzilla.suse.com/1165425" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17361" ref_url="https://www.suse.com/security/cve/CVE-2019-17361/" source="CVE"/>
		<reference ref_id="CVE-2019-18897" ref_url="https://www.suse.com/security/cve/CVE-2019-18897/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006608.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Avoid possible user escalation upgrading salt-master (bsc#1157465) (CVE-2019-18897)
- Fix unit tests failures in test_batch_async tests
- Batch Async: Handle exceptions, properly unregister and close instances after
  running async batching to avoid CPU starvation of the MWorkers (bsc#1162327)
- RHEL/CentOS 8 uses platform-python instead of python3
- New configuration option for selection of grains in the minion start event.
- Fix 'os_family' grain for Astra Linux Common Edition
- Fix for salt-api NET API where unauthenticated attacker could run
  arbitrary code (CVE-2019-17361) (bsc#1162504)
- Adds disabled parameter to mod_repo in aptpkg module
  Move token with atomic operation
  Bad API token files get deleted (bsc#1160931)
- Support for Btrfs and XFS in parted and mkfs added
- Adds list_downloaded for apt Module to enable pre-downloading support
  Adds virt.(pool|network)_get_xml functions
- Various libvirt updates:
  * Add virt.pool_capabilities function
  * virt.pool_running improvements
  * Add virt.pool_deleted state
  * virt.network_define allow adding IP configuration
- virt: adding kernel boot parameters to libvirt xml
- Fix to scheduler when data['run'] does not exist (bsc#1159118)
- Fix virt states to not fail on VMs already stopped
- Fix applying of attributes for returner rawfile_json (bsc#1158940)
- xfs: do not fail if type is not present (bsc#1153611)
- Fix errors when running virt.get_hypervisor function
- Align virt.full_info fixes with upstream Salt
- Fix for log checking in x509 test
- Read repo info without using interpolation (bsc#1135656)
- Limiting M2Crypto to &gt;= SLE15
- Replacing pycrypto with M2Crypto (bsc#1165425)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-13"/>
	<updated date="2020-03-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1135656">SUSE bug 1135656</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153611">SUSE bug 1153611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157465">SUSE bug 1157465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158940">SUSE bug 1158940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159118">SUSE bug 1159118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160931">SUSE bug 1160931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162327">SUSE bug 1162327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162504">SUSE bug 1162504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165425">SUSE bug 1165425</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17361/">CVE-2019-17361</cve>
	<cve impact="moderate" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18897/">CVE-2019-18897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493025" comment="python3-salt-2019.2.0-6.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493026" comment="salt-2019.2.0-6.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493027" comment="salt-bash-completion-2019.2.0-6.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493028" comment="salt-doc-2019.2.0-6.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493029" comment="salt-minion-2019.2.0-6.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493030" comment="salt-zsh-completion-2019.2.0-6.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138009" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1155346" ref_url="https://bugzilla.suse.com/1155346" source="BUGZILLA"/>
		<reference ref_id="1157775" ref_url="https://bugzilla.suse.com/1157775" source="BUGZILLA"/>
		<reference ref_id="1158101" ref_url="https://bugzilla.suse.com/1158101" source="BUGZILLA"/>
		<reference ref_id="1158809" ref_url="https://bugzilla.suse.com/1158809" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1551" ref_url="https://www.suse.com/security/cve/CVE-2019-1551/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006326.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

Security issue fixed:

- CVE-2019-1551: Fixed an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli (bsc#1158809).                             

Various FIPS related improvements were done:

- FIPS: Backport SSH KDF to openssl (jsc#SLE-8789, bsc#1157775).
- Port FIPS patches from SLE-12 (bsc#1158101).
- Use SHA-2 in the RSA pairwise consistency check (bsc#1155346).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-10"/>
	<updated date="2020-01-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1155346">SUSE bug 1155346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157775">SUSE bug 1157775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158101">SUSE bug 1158101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158809">SUSE bug 1158809</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1551/">CVE-2019-1551</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493031" comment="libopenssl-1_1-devel-1.1.0i-14.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493032" comment="libopenssl1_1-1.1.0i-14.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493033" comment="libopenssl1_1-32bit-1.1.0i-14.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493034" comment="libopenssl1_1-hmac-1.1.0i-14.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493035" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493036" comment="openssl-1_1-1.1.0i-14.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138010" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1093733" ref_url="https://bugzilla.suse.com/1093733" source="BUGZILLA"/>
		<reference ref_id="1094301" ref_url="https://bugzilla.suse.com/1094301" source="BUGZILLA"/>
		<reference ref_id="1101776" ref_url="https://bugzilla.suse.com/1101776" source="BUGZILLA"/>
		<reference ref_id="1101777" ref_url="https://bugzilla.suse.com/1101777" source="BUGZILLA"/>
		<reference ref_id="1101786" ref_url="https://bugzilla.suse.com/1101786" source="BUGZILLA"/>
		<reference ref_id="1101788" ref_url="https://bugzilla.suse.com/1101788" source="BUGZILLA"/>
		<reference ref_id="1101791" ref_url="https://bugzilla.suse.com/1101791" source="BUGZILLA"/>
		<reference ref_id="1101794" ref_url="https://bugzilla.suse.com/1101794" source="BUGZILLA"/>
		<reference ref_id="1101800" ref_url="https://bugzilla.suse.com/1101800" source="BUGZILLA"/>
		<reference ref_id="1101802" ref_url="https://bugzilla.suse.com/1101802" source="BUGZILLA"/>
		<reference ref_id="1101804" ref_url="https://bugzilla.suse.com/1101804" source="BUGZILLA"/>
		<reference ref_id="1101810" ref_url="https://bugzilla.suse.com/1101810" source="BUGZILLA"/>
		<reference ref_id="1106514" ref_url="https://bugzilla.suse.com/1106514" source="BUGZILLA"/>
		<reference ref_id="1111647" ref_url="https://bugzilla.suse.com/1111647" source="BUGZILLA"/>
		<reference ref_id="1117740" ref_url="https://bugzilla.suse.com/1117740" source="BUGZILLA"/>
		<reference ref_id="1121231" ref_url="https://bugzilla.suse.com/1121231" source="BUGZILLA"/>
		<reference ref_id="1121232" ref_url="https://bugzilla.suse.com/1121232" source="BUGZILLA"/>
		<reference ref_id="1121233" ref_url="https://bugzilla.suse.com/1121233" source="BUGZILLA"/>
		<reference ref_id="1121234" ref_url="https://bugzilla.suse.com/1121234" source="BUGZILLA"/>
		<reference ref_id="1121235" ref_url="https://bugzilla.suse.com/1121235" source="BUGZILLA"/>
		<reference ref_id="1127367" ref_url="https://bugzilla.suse.com/1127367" source="BUGZILLA"/>
		<reference ref_id="1127369" ref_url="https://bugzilla.suse.com/1127369" source="BUGZILLA"/>
		<reference ref_id="1127370" ref_url="https://bugzilla.suse.com/1127370" source="BUGZILLA"/>
		<reference ref_id="1131941" ref_url="https://bugzilla.suse.com/1131941" source="BUGZILLA"/>
		<reference ref_id="1131945" ref_url="https://bugzilla.suse.com/1131945" source="BUGZILLA"/>
		<reference ref_id="1136021" ref_url="https://bugzilla.suse.com/1136021" source="BUGZILLA"/>
		<reference ref_id="1141980" ref_url="https://bugzilla.suse.com/1141980" source="BUGZILLA"/>
		<reference ref_id="1150690" ref_url="https://bugzilla.suse.com/1150690" source="BUGZILLA"/>
		<reference ref_id="1156288" ref_url="https://bugzilla.suse.com/1156288" source="BUGZILLA"/>
		<reference ref_id="1158505" ref_url="https://bugzilla.suse.com/1158505" source="BUGZILLA"/>
		<reference ref_id="1161052" ref_url="https://bugzilla.suse.com/1161052" source="BUGZILLA"/>
		<reference ref_id="1165241" ref_url="https://bugzilla.suse.com/1165241" source="BUGZILLA"/>
		<reference ref_id="1165710" ref_url="https://bugzilla.suse.com/1165710" source="BUGZILLA"/>
		<reference ref_id="957624" ref_url="https://bugzilla.suse.com/957624" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11354" ref_url="https://www.suse.com/security/cve/CVE-2018-11354/" source="CVE"/>
		<reference ref_id="CVE-2018-11355" ref_url="https://www.suse.com/security/cve/CVE-2018-11355/" source="CVE"/>
		<reference ref_id="CVE-2018-11356" ref_url="https://www.suse.com/security/cve/CVE-2018-11356/" source="CVE"/>
		<reference ref_id="CVE-2018-11357" ref_url="https://www.suse.com/security/cve/CVE-2018-11357/" source="CVE"/>
		<reference ref_id="CVE-2018-11358" ref_url="https://www.suse.com/security/cve/CVE-2018-11358/" source="CVE"/>
		<reference ref_id="CVE-2018-11359" ref_url="https://www.suse.com/security/cve/CVE-2018-11359/" source="CVE"/>
		<reference ref_id="CVE-2018-11360" ref_url="https://www.suse.com/security/cve/CVE-2018-11360/" source="CVE"/>
		<reference ref_id="CVE-2018-11361" ref_url="https://www.suse.com/security/cve/CVE-2018-11361/" source="CVE"/>
		<reference ref_id="CVE-2018-11362" ref_url="https://www.suse.com/security/cve/CVE-2018-11362/" source="CVE"/>
		<reference ref_id="CVE-2018-12086" ref_url="https://www.suse.com/security/cve/CVE-2018-12086/" source="CVE"/>
		<reference ref_id="CVE-2018-14339" ref_url="https://www.suse.com/security/cve/CVE-2018-14339/" source="CVE"/>
		<reference ref_id="CVE-2018-14340" ref_url="https://www.suse.com/security/cve/CVE-2018-14340/" source="CVE"/>
		<reference ref_id="CVE-2018-14341" ref_url="https://www.suse.com/security/cve/CVE-2018-14341/" source="CVE"/>
		<reference ref_id="CVE-2018-14342" ref_url="https://www.suse.com/security/cve/CVE-2018-14342/" source="CVE"/>
		<reference ref_id="CVE-2018-14343" ref_url="https://www.suse.com/security/cve/CVE-2018-14343/" source="CVE"/>
		<reference ref_id="CVE-2018-14344" ref_url="https://www.suse.com/security/cve/CVE-2018-14344/" source="CVE"/>
		<reference ref_id="CVE-2018-14367" ref_url="https://www.suse.com/security/cve/CVE-2018-14367/" source="CVE"/>
		<reference ref_id="CVE-2018-14368" ref_url="https://www.suse.com/security/cve/CVE-2018-14368/" source="CVE"/>
		<reference ref_id="CVE-2018-14369" ref_url="https://www.suse.com/security/cve/CVE-2018-14369/" source="CVE"/>
		<reference ref_id="CVE-2018-14370" ref_url="https://www.suse.com/security/cve/CVE-2018-14370/" source="CVE"/>
		<reference ref_id="CVE-2018-16056" ref_url="https://www.suse.com/security/cve/CVE-2018-16056/" source="CVE"/>
		<reference ref_id="CVE-2018-16057" ref_url="https://www.suse.com/security/cve/CVE-2018-16057/" source="CVE"/>
		<reference ref_id="CVE-2018-16058" ref_url="https://www.suse.com/security/cve/CVE-2018-16058/" source="CVE"/>
		<reference ref_id="CVE-2018-18225" ref_url="https://www.suse.com/security/cve/CVE-2018-18225/" source="CVE"/>
		<reference ref_id="CVE-2018-18226" ref_url="https://www.suse.com/security/cve/CVE-2018-18226/" source="CVE"/>
		<reference ref_id="CVE-2018-18227" ref_url="https://www.suse.com/security/cve/CVE-2018-18227/" source="CVE"/>
		<reference ref_id="CVE-2018-19622" ref_url="https://www.suse.com/security/cve/CVE-2018-19622/" source="CVE"/>
		<reference ref_id="CVE-2018-19623" ref_url="https://www.suse.com/security/cve/CVE-2018-19623/" source="CVE"/>
		<reference ref_id="CVE-2018-19624" ref_url="https://www.suse.com/security/cve/CVE-2018-19624/" source="CVE"/>
		<reference ref_id="CVE-2018-19625" ref_url="https://www.suse.com/security/cve/CVE-2018-19625/" source="CVE"/>
		<reference ref_id="CVE-2018-19626" ref_url="https://www.suse.com/security/cve/CVE-2018-19626/" source="CVE"/>
		<reference ref_id="CVE-2018-19627" ref_url="https://www.suse.com/security/cve/CVE-2018-19627/" source="CVE"/>
		<reference ref_id="CVE-2018-19628" ref_url="https://www.suse.com/security/cve/CVE-2018-19628/" source="CVE"/>
		<reference ref_id="CVE-2019-10894" ref_url="https://www.suse.com/security/cve/CVE-2019-10894/" source="CVE"/>
		<reference ref_id="CVE-2019-10895" ref_url="https://www.suse.com/security/cve/CVE-2019-10895/" source="CVE"/>
		<reference ref_id="CVE-2019-10896" ref_url="https://www.suse.com/security/cve/CVE-2019-10896/" source="CVE"/>
		<reference ref_id="CVE-2019-10897" ref_url="https://www.suse.com/security/cve/CVE-2019-10897/" source="CVE"/>
		<reference ref_id="CVE-2019-10898" ref_url="https://www.suse.com/security/cve/CVE-2019-10898/" source="CVE"/>
		<reference ref_id="CVE-2019-10899" ref_url="https://www.suse.com/security/cve/CVE-2019-10899/" source="CVE"/>
		<reference ref_id="CVE-2019-10900" ref_url="https://www.suse.com/security/cve/CVE-2019-10900/" source="CVE"/>
		<reference ref_id="CVE-2019-10901" ref_url="https://www.suse.com/security/cve/CVE-2019-10901/" source="CVE"/>
		<reference ref_id="CVE-2019-10902" ref_url="https://www.suse.com/security/cve/CVE-2019-10902/" source="CVE"/>
		<reference ref_id="CVE-2019-10903" ref_url="https://www.suse.com/security/cve/CVE-2019-10903/" source="CVE"/>
		<reference ref_id="CVE-2019-13619" ref_url="https://www.suse.com/security/cve/CVE-2019-13619/" source="CVE"/>
		<reference ref_id="CVE-2019-16319" ref_url="https://www.suse.com/security/cve/CVE-2019-16319/" source="CVE"/>
		<reference ref_id="CVE-2019-19553" ref_url="https://www.suse.com/security/cve/CVE-2019-19553/" source="CVE"/>
		<reference ref_id="CVE-2019-5716" ref_url="https://www.suse.com/security/cve/CVE-2019-5716/" source="CVE"/>
		<reference ref_id="CVE-2019-5717" ref_url="https://www.suse.com/security/cve/CVE-2019-5717/" source="CVE"/>
		<reference ref_id="CVE-2019-5718" ref_url="https://www.suse.com/security/cve/CVE-2019-5718/" source="CVE"/>
		<reference ref_id="CVE-2019-5719" ref_url="https://www.suse.com/security/cve/CVE-2019-5719/" source="CVE"/>
		<reference ref_id="CVE-2019-5721" ref_url="https://www.suse.com/security/cve/CVE-2019-5721/" source="CVE"/>
		<reference ref_id="CVE-2019-9208" ref_url="https://www.suse.com/security/cve/CVE-2019-9208/" source="CVE"/>
		<reference ref_id="CVE-2019-9209" ref_url="https://www.suse.com/security/cve/CVE-2019-9209/" source="CVE"/>
		<reference ref_id="CVE-2019-9214" ref_url="https://www.suse.com/security/cve/CVE-2019-9214/" source="CVE"/>
		<reference ref_id="CVE-2020-7044" ref_url="https://www.suse.com/security/cve/CVE-2020-7044/" source="CVE"/>
		<reference ref_id="CVE-2020-9428" ref_url="https://www.suse.com/security/cve/CVE-2020-9428/" source="CVE"/>
		<reference ref_id="CVE-2020-9429" ref_url="https://www.suse.com/security/cve/CVE-2020-9429/" source="CVE"/>
		<reference ref_id="CVE-2020-9430" ref_url="https://www.suse.com/security/cve/CVE-2020-9430/" source="CVE"/>
		<reference ref_id="CVE-2020-9431" ref_url="https://www.suse.com/security/cve/CVE-2020-9431/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006613.html" source="SUSE-SU"/>
		<description>
This update for wireshark and libmaxminddb fixes the following issues:

Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).

New features include:

- Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC
- Improved support for existing protocols, like HTTP/2
- Improved analytics and usability functionalities
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-08"/>
	<updated date="2020-04-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1093733">SUSE bug 1093733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094301">SUSE bug 1094301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101776">SUSE bug 1101776</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101777">SUSE bug 1101777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101786">SUSE bug 1101786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101788">SUSE bug 1101788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101791">SUSE bug 1101791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101794">SUSE bug 1101794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101800">SUSE bug 1101800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101802">SUSE bug 1101802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101804">SUSE bug 1101804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101810">SUSE bug 1101810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106514">SUSE bug 1106514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111647">SUSE bug 1111647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117740">SUSE bug 1117740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121231">SUSE bug 1121231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121232">SUSE bug 1121232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121233">SUSE bug 1121233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121234">SUSE bug 1121234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121235">SUSE bug 1121235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127367">SUSE bug 1127367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127369">SUSE bug 1127369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127370">SUSE bug 1127370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131941">SUSE bug 1131941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131945">SUSE bug 1131945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136021">SUSE bug 1136021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141980">SUSE bug 1141980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150690">SUSE bug 1150690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156288">SUSE bug 1156288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158505">SUSE bug 1158505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161052">SUSE bug 1161052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165241">SUSE bug 1165241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165710">SUSE bug 1165710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957624">SUSE bug 957624</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11354/">CVE-2018-11354</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11355/">CVE-2018-11355</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11356/">CVE-2018-11356</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11357/">CVE-2018-11357</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11358/">CVE-2018-11358</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11359/">CVE-2018-11359</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11360/">CVE-2018-11360</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11361/">CVE-2018-11361</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11362/">CVE-2018-11362</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12086/">CVE-2018-12086</cve>
	<cve impact="low" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14339/">CVE-2018-14339</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14340/">CVE-2018-14340</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14341/">CVE-2018-14341</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14342/">CVE-2018-14342</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14343/">CVE-2018-14343</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14344/">CVE-2018-14344</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14367/">CVE-2018-14367</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14368/">CVE-2018-14368</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14369/">CVE-2018-14369</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14370/">CVE-2018-14370</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16056/">CVE-2018-16056</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16057/">CVE-2018-16057</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16058/">CVE-2018-16058</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18225/">CVE-2018-18225</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18226/">CVE-2018-18226</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18227/">CVE-2018-18227</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19622/">CVE-2018-19622</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19623/">CVE-2018-19623</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19624/">CVE-2018-19624</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19625/">CVE-2018-19625</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19626/">CVE-2018-19626</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19627/">CVE-2018-19627</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19628/">CVE-2018-19628</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10894/">CVE-2019-10894</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10895/">CVE-2019-10895</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10896/">CVE-2019-10896</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-10897/">CVE-2019-10897</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-10898/">CVE-2019-10898</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10899/">CVE-2019-10899</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-10900/">CVE-2019-10900</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10901/">CVE-2019-10901</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-10902/">CVE-2019-10902</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10903/">CVE-2019-10903</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13619/">CVE-2019-13619</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-16319/">CVE-2019-16319</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19553/">CVE-2019-19553</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5716/">CVE-2019-5716</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5717/">CVE-2019-5717</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5718/">CVE-2019-5718</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5719/">CVE-2019-5719</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5721/">CVE-2019-5721</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9208/">CVE-2019-9208</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9209/">CVE-2019-9209</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9214/">CVE-2019-9214</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-7044/">CVE-2020-7044</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-9428/">CVE-2020-9428</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-9429/">CVE-2020-9429</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-9430/">CVE-2020-9430</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-9431/">CVE-2020-9431</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493037" comment="libmaxminddb-devel-1.4.2-1.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493038" comment="libmaxminddb0-1.4.2-1.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493039" comment="libmaxminddb0-32bit-1.4.2-1.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493040" comment="libspandsp2-0.0.6-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493041" comment="libwireshark13-3.2.2-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493042" comment="libwiretap10-3.2.2-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493043" comment="libwsutil11-3.2.2-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493044" comment="mmdblookup-1.4.2-1.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493045" comment="wireshark-3.2.2-3.35.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138011" version="1" class="patch">
	<metadata>
		<title>Security update for nghttp2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159003" ref_url="https://bugzilla.suse.com/1159003" source="BUGZILLA"/>
		<reference ref_id="1166481" ref_url="https://bugzilla.suse.com/1166481" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18802" ref_url="https://www.suse.com/security/cve/CVE-2019-18802/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006627.html" source="SUSE-SU"/>
		<description>
This update for nghttp2 fixes the following issues:

nghttp2 was update to version 1.40.0 (bsc#1166481)

- lib: Add nghttp2_check_authority as public API
- lib: Fix the bug that stream is closed with wrong error code
- lib: Faster huffman encoding and decoding
- build: Avoid filename collision of static and dynamic lib
- build: Add new flag ENABLE_STATIC_CRT for Windows
- build: cmake: Support building nghttpx with systemd
- third-party: Update neverbleed to fix memory leak
- nghttpx: Fix bug that mruby is incorrectly shared between backends
- nghttpx: Reconnect h1 backend if it lost connection before sending headers
- nghttpx: Returns 408 if backend timed out before sending headers
- nghttpx: Fix request stal

		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-19"/>
	<updated date="2020-03-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1159003">SUSE bug 1159003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166481">SUSE bug 1166481</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18802/">CVE-2019-18802</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493046" comment="libnghttp2-14-1.40.0-3.6.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493047" comment="libnghttp2-14-32bit-1.40.0-3.6.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493048" comment="libnghttp2-devel-1.40.0-3.6.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493049" comment="libnghttp2_asio-devel-1.40.0-3.6.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493050" comment="libnghttp2_asio1-1.40.0-3.6.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138012" version="1" class="patch">
	<metadata>
		<title>Recommended update for ruby2.5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1140844" ref_url="https://bugzilla.suse.com/1140844" source="BUGZILLA"/>
		<reference ref_id="1152990" ref_url="https://bugzilla.suse.com/1152990" source="BUGZILLA"/>
		<reference ref_id="1152992" ref_url="https://bugzilla.suse.com/1152992" source="BUGZILLA"/>
		<reference ref_id="1152994" ref_url="https://bugzilla.suse.com/1152994" source="BUGZILLA"/>
		<reference ref_id="1152995" ref_url="https://bugzilla.suse.com/1152995" source="BUGZILLA"/>
		<reference ref_id="1162396" ref_url="https://bugzilla.suse.com/1162396" source="BUGZILLA"/>
		<reference ref_id="1164804" ref_url="https://bugzilla.suse.com/1164804" source="BUGZILLA"/>
		<reference ref_id="CVE-2012-6708" ref_url="https://www.suse.com/security/cve/CVE-2012-6708/" source="CVE"/>
		<reference ref_id="CVE-2015-9251" ref_url="https://www.suse.com/security/cve/CVE-2015-9251/" source="CVE"/>
		<reference ref_id="CVE-2019-15845" ref_url="https://www.suse.com/security/cve/CVE-2019-15845/" source="CVE"/>
		<reference ref_id="CVE-2019-16201" ref_url="https://www.suse.com/security/cve/CVE-2019-16201/" source="CVE"/>
		<reference ref_id="CVE-2019-16254" ref_url="https://www.suse.com/security/cve/CVE-2019-16254/" source="CVE"/>
		<reference ref_id="CVE-2019-16255" ref_url="https://www.suse.com/security/cve/CVE-2019-16255/" source="CVE"/>
		<reference ref_id="CVE-2020-8130" ref_url="https://www.suse.com/security/cve/CVE-2020-8130/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006630.html" source="SUSE-SU"/>
		<description>
This update for ruby2.5 toversion 2.5.7  fixes the following issues:
	  
ruby 2.5 was updated to version 2.5.7 

- CVE-2020-8130: Fixed a command injection in intree copy of rake (bsc#1164804).
- CVE-2019-16255: Fixed a code injection vulnerability of Shell#[] and 
  Shell#test (bsc#1152990).
- CVE-2019-16254: Fixed am HTTP response splitting in WEBrick (bsc#1152992).
- CVE-2019-15845: Fixed a null injection vulnerability of File.fnmatch and 
  File.fnmatch? (bsc#1152994).
- CVE-2019-16201: Fixed a regular expression denial of service of WEBrick 
  Digest access authentication (bsc#1152995).
- CVE-2012-6708: Fixed an XSS in JQuery
- CVE-2015-9251: Fixed an XSS in JQuery
- Fixed unit tests (bsc#1140844)
- Removed some unneeded test files (bsc#1162396).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-20"/>
	<updated date="2020-03-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140844">SUSE bug 1140844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152990">SUSE bug 1152990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152992">SUSE bug 1152992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152994">SUSE bug 1152994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152995">SUSE bug 1152995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162396">SUSE bug 1162396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164804">SUSE bug 1164804</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2012-6708/">CVE-2012-6708</cve>
	<cve impact="critical" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2015-9251/">CVE-2015-9251</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-15845/">CVE-2019-15845</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-16201/">CVE-2019-16201</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16254/">CVE-2019-16254</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-16255/">CVE-2019-16255</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-8130/">CVE-2020-8130</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493051" comment="libruby2_5-2_5-2.5.7-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493052" comment="ruby2.5-2.5.7-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493053" comment="ruby2.5-devel-2.5.7-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493054" comment="ruby2.5-devel-extra-2.5.7-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493055" comment="ruby2.5-stdlib-2.5.7-4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138013" version="1" class="patch">
	<metadata>
		<title>Security update for strongswan (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1079548" ref_url="https://bugzilla.suse.com/1079548" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-6459" ref_url="https://www.suse.com/security/cve/CVE-2018-6459/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006635.html" source="SUSE-SU"/>
		<description>
This update for strongswan fixes the following issues:

Strongswan was updated to version 5.8.2 (jsc#SLE-11370).

Security issue fixed:

- CVE-2018-6459: Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused by insufficient input validation (bsc#1079548).

Full changelogs:

Version 5.8.2

  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the 'Sales' CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.

Version 5.8.1

  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).

Version 5.8.0

  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID). 
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the 'Decided' state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario. 

Version 5.7.2

  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.

Version 5.7.1

  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.

Version 5.7.0

  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to Ren? Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 'Software Inventory Message and Attributes (SWIMA) for PA-TNC'.
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.

Version 5.6.3

  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).

    Notes for developers:
    * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
    * No reqid is returned anymore when installing trap policies.
    * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
      not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
      delayed packets).
      This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
      has such CHILD_SAs assigned is deleted.

Version 5.6.2

  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.

Version 5.6.1

  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-23"/>
	<updated date="2020-03-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1079548">SUSE bug 1079548</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6459/">CVE-2018-6459</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493056" comment="strongswan-5.8.2-4.6.14 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493057" comment="strongswan-doc-5.8.2-4.6.14 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493058" comment="strongswan-hmac-5.8.2-4.6.14 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493059" comment="strongswan-ipsec-5.8.2-4.6.14 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493060" comment="strongswan-libs0-5.8.2-4.6.14 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138014" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1163985" ref_url="https://bugzilla.suse.com/1163985" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1720" ref_url="https://www.suse.com/security/cve/CVE-2020-1720/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006633.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

PostgreSQL was updated to version 10.12.

Security issue fixed:

- CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension (bsc#1163985).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-23"/>
	<updated date="2020-03-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1163985">SUSE bug 1163985</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-1720/">CVE-2020-1720</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493061" comment="libpq5-10.12-8.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493062" comment="postgresql10-10.12-8.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138015" version="1" class="patch">
	<metadata>
		<title>Security update for ldns (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1068709" ref_url="https://bugzilla.suse.com/1068709" source="BUGZILLA"/>
		<reference ref_id="1068711" ref_url="https://bugzilla.suse.com/1068711" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-1000231" ref_url="https://www.suse.com/security/cve/CVE-2017-1000231/" source="CVE"/>
		<reference ref_id="CVE-2017-1000232" ref_url="https://www.suse.com/security/cve/CVE-2017-1000232/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006645.html" source="SUSE-SU"/>
		<description>
This update for ldns fixes the following issues:

- CVE-2017-1000231: Fixed a buffer overflow during token parsing (bsc#1068711).
- CVE-2017-1000232: Fixed a double-free vulnerability in str2host.c (bsc#1068709).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-26"/>
	<updated date="2020-03-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1068709">SUSE bug 1068709</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068711">SUSE bug 1068711</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000231/">CVE-2017-1000231</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000232/">CVE-2017-1000232</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493063" comment="ldns-devel-1.7.0-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493064" comment="libldns2-1.7.0-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138016" version="1" class="patch">
	<metadata>
		<title>Security update for spamassassin (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1118987" ref_url="https://bugzilla.suse.com/1118987" source="BUGZILLA"/>
		<reference ref_id="1162197" ref_url="https://bugzilla.suse.com/1162197" source="BUGZILLA"/>
		<reference ref_id="1162200" ref_url="https://bugzilla.suse.com/1162200" source="BUGZILLA"/>
		<reference ref_id="862963" ref_url="https://bugzilla.suse.com/862963" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11805" ref_url="https://www.suse.com/security/cve/CVE-2018-11805/" source="CVE"/>
		<reference ref_id="CVE-2020-1930" ref_url="https://www.suse.com/security/cve/CVE-2020-1930/" source="CVE"/>
		<reference ref_id="CVE-2020-1931" ref_url="https://www.suse.com/security/cve/CVE-2020-1931/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006649.html" source="SUSE-SU"/>
		<description>
This update for spamassassin fixes the following issues:

Security issues fixed:

- CVE-2018-11805: Fixed an issue with delimiter handling in rule files 
  related to is_regexp_valid() (bsc#1118987).
- CVE-2020-1930: Fixed an issue with rule configuration (.cf) files which 
  can be configured to run system commands (bsc#1162197).
- CVE-2020-1931: Fixed an issue with rule configuration (.cf) files which 
  can be configured to run system commands with warnings (bsc#1162200).
  
Non-security issue fixed:

- Altering hash requires restarting loop (bsc#862963).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-30"/>
	<updated date="2020-03-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1118987">SUSE bug 1118987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162197">SUSE bug 1162197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162200">SUSE bug 1162200</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/862963">SUSE bug 862963</bugzilla>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11805/">CVE-2018-11805</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1930/">CVE-2020-1930</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1931/">CVE-2020-1931</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493065" comment="perl-Mail-SpamAssassin-3.4.2-12.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493066" comment="spamassassin-3.4.2-12.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138017" version="1" class="patch">
	<metadata>
		<title>Security update for icu (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1166844" ref_url="https://bugzilla.suse.com/1166844" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10531" ref_url="https://www.suse.com/security/cve/CVE-2020-10531/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006653.html" source="SUSE-SU"/>
		<description>
This update for icu fixes the following issues:

- CVE-2020-10531: Fixed a potential integer overflow in UnicodeString:doAppend (bsc#1166844).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-31"/>
	<updated date="2020-03-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1166844">SUSE bug 1166844</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10531/">CVE-2020-10531</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493067" comment="libicu-devel-60.2-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493068" comment="libicu60_2-60.2-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493069" comment="libicu60_2-bedata-60.2-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493070" comment="libicu60_2-ledata-60.2-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138018" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1167631" ref_url="https://bugzilla.suse.com/1167631" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1752" ref_url="https://www.suse.com/security/cve/CVE-2020-1752/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006652.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

- CVE-2020-1752: Fixed a use after free in glob which could have allowed
  a local attacker to create a specially crafted path that, when processed 
  by the glob function, could potentially have led to arbitrary code execution
  (bsc#1167631).
 		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-31"/>
	<updated date="2020-03-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1167631">SUSE bug 1167631</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1752/">CVE-2020-1752</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493071" comment="glibc-2.26-13.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493072" comment="glibc-32bit-2.26-13.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493073" comment="glibc-devel-2.26-13.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493074" comment="glibc-extra-2.26-13.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493075" comment="glibc-i18ndata-2.26-13.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493076" comment="glibc-info-2.26-13.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493077" comment="glibc-locale-2.26-13.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493078" comment="glibc-locale-base-2.26-13.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493079" comment="glibc-locale-base-32bit-2.26-13.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493080" comment="glibc-profile-2.26-13.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493081" comment="nscd-2.26-13.45.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138019" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1044231" ref_url="https://bugzilla.suse.com/1044231" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1051858" ref_url="https://bugzilla.suse.com/1051858" source="BUGZILLA"/>
		<reference ref_id="1056686" ref_url="https://bugzilla.suse.com/1056686" source="BUGZILLA"/>
		<reference ref_id="1060463" ref_url="https://bugzilla.suse.com/1060463" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1111974" ref_url="https://bugzilla.suse.com/1111974" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1119680" ref_url="https://bugzilla.suse.com/1119680" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1136157" ref_url="https://bugzilla.suse.com/1136157" source="BUGZILLA"/>
		<reference ref_id="1141895" ref_url="https://bugzilla.suse.com/1141895" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1146539" ref_url="https://bugzilla.suse.com/1146539" source="BUGZILLA"/>
		<reference ref_id="1156510" ref_url="https://bugzilla.suse.com/1156510" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1158187" ref_url="https://bugzilla.suse.com/1158187" source="BUGZILLA"/>
		<reference ref_id="1159285" ref_url="https://bugzilla.suse.com/1159285" source="BUGZILLA"/>
		<reference ref_id="1160659" ref_url="https://bugzilla.suse.com/1160659" source="BUGZILLA"/>
		<reference ref_id="1161561" ref_url="https://bugzilla.suse.com/1161561" source="BUGZILLA"/>
		<reference ref_id="1161951" ref_url="https://bugzilla.suse.com/1161951" source="BUGZILLA"/>
		<reference ref_id="1162928" ref_url="https://bugzilla.suse.com/1162928" source="BUGZILLA"/>
		<reference ref_id="1162929" ref_url="https://bugzilla.suse.com/1162929" source="BUGZILLA"/>
		<reference ref_id="1162931" ref_url="https://bugzilla.suse.com/1162931" source="BUGZILLA"/>
		<reference ref_id="1164078" ref_url="https://bugzilla.suse.com/1164078" source="BUGZILLA"/>
		<reference ref_id="1164507" ref_url="https://bugzilla.suse.com/1164507" source="BUGZILLA"/>
		<reference ref_id="1165111" ref_url="https://bugzilla.suse.com/1165111" source="BUGZILLA"/>
		<reference ref_id="1165404" ref_url="https://bugzilla.suse.com/1165404" source="BUGZILLA"/>
		<reference ref_id="1165488" ref_url="https://bugzilla.suse.com/1165488" source="BUGZILLA"/>
		<reference ref_id="1165527" ref_url="https://bugzilla.suse.com/1165527" source="BUGZILLA"/>
		<reference ref_id="1165741" ref_url="https://bugzilla.suse.com/1165741" source="BUGZILLA"/>
		<reference ref_id="1165813" ref_url="https://bugzilla.suse.com/1165813" source="BUGZILLA"/>
		<reference ref_id="1165873" ref_url="https://bugzilla.suse.com/1165873" source="BUGZILLA"/>
		<reference ref_id="1165929" ref_url="https://bugzilla.suse.com/1165929" source="BUGZILLA"/>
		<reference ref_id="1165950" ref_url="https://bugzilla.suse.com/1165950" source="BUGZILLA"/>
		<reference ref_id="1165980" ref_url="https://bugzilla.suse.com/1165980" source="BUGZILLA"/>
		<reference ref_id="1165984" ref_url="https://bugzilla.suse.com/1165984" source="BUGZILLA"/>
		<reference ref_id="1165985" ref_url="https://bugzilla.suse.com/1165985" source="BUGZILLA"/>
		<reference ref_id="1166003" ref_url="https://bugzilla.suse.com/1166003" source="BUGZILLA"/>
		<reference ref_id="1166101" ref_url="https://bugzilla.suse.com/1166101" source="BUGZILLA"/>
		<reference ref_id="1166102" ref_url="https://bugzilla.suse.com/1166102" source="BUGZILLA"/>
		<reference ref_id="1166103" ref_url="https://bugzilla.suse.com/1166103" source="BUGZILLA"/>
		<reference ref_id="1166104" ref_url="https://bugzilla.suse.com/1166104" source="BUGZILLA"/>
		<reference ref_id="1166632" ref_url="https://bugzilla.suse.com/1166632" source="BUGZILLA"/>
		<reference ref_id="1166658" ref_url="https://bugzilla.suse.com/1166658" source="BUGZILLA"/>
		<reference ref_id="1166730" ref_url="https://bugzilla.suse.com/1166730" source="BUGZILLA"/>
		<reference ref_id="1166731" ref_url="https://bugzilla.suse.com/1166731" source="BUGZILLA"/>
		<reference ref_id="1166732" ref_url="https://bugzilla.suse.com/1166732" source="BUGZILLA"/>
		<reference ref_id="1166733" ref_url="https://bugzilla.suse.com/1166733" source="BUGZILLA"/>
		<reference ref_id="1166734" ref_url="https://bugzilla.suse.com/1166734" source="BUGZILLA"/>
		<reference ref_id="1166735" ref_url="https://bugzilla.suse.com/1166735" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19768" ref_url="https://www.suse.com/security/cve/CVE-2019-19768/" source="CVE"/>
		<reference ref_id="CVE-2020-8647" ref_url="https://www.suse.com/security/cve/CVE-2020-8647/" source="CVE"/>
		<reference ref_id="CVE-2020-8648" ref_url="https://www.suse.com/security/cve/CVE-2020-8648/" source="CVE"/>
		<reference ref_id="CVE-2020-8649" ref_url="https://www.suse.com/security/cve/CVE-2020-8649/" source="CVE"/>
		<reference ref_id="CVE-2020-9383" ref_url="https://www.suse.com/security/cve/CVE-2020-9383/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006656.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-8647: Fixed a use-after-free in the vc_do_resize function in drivers/tty/vt/vt.c (bsc#1162929).
- CVE-2020-8649: Fixed a use-after-free in the vgacon_invert_region function in drivers/video/console/vgacon.c (bsc#1162931).
- CVE-2020-8648: Fixed a use-after-free in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bsc#1162928).
- CVE-2020-9383: Fixed an out-of-bounds read due to improper error condition check of FDC index (bsc#1165111).
- CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).

The following non-security bugs were fixed:

- ALSA: hda/realtek - Add Headset Button supported for ThinkPad X1 (bsc#1111666).
- ALSA: hda/realtek - Add Headset Mic supported (bsc#1111666).
- ALSA: hda/realtek - Add more codec supported Headset Button (bsc#1111666).
- ALSA: hda/realtek - Apply quirk for MSI GP63, too (bsc#1111666).
- ALSA: hda/realtek - Apply quirk for yet another MSI laptop (bsc#1111666).
- ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294 (bsc#1111666).
- ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1 (bsc#1111666).
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master (bsc#1111666).
- ALSA: usb-audio: Add boot quirk for MOTU M Series (bsc#1111666).
- ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000 (bsc#1111666).
- ALSA: usb-audio: add implicit fb quirk for MOTU M Series (bsc#1111666).
- ALSA: usb-audio: add quirks for Line6 Helix devices fw&gt;=2.82 (bsc#1111666).
- ALSA: usb-audio: Apply 48kHz fixed rate playback for Jabra Evolve 65 headset (bsc#1111666).
- ALSA: usb-audio: fix Corsair Virtuoso mixer label collision (bsc#1111666).
- ALSA: usb-audio: Fix UAC2/3 effect unit parsing (bsc#1111666).
- ALSA: usb-audio: unlock on error in probe (bsc#1111666).
- ALSA: usb-audio: Use lower hex numbers for IDs (bsc#1111666).
- ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status (bsc#1051510).
- amdgpu/gmc_v9: save/restore sdpif regs during S3 (bsc#1113956)
- ASoC: dapm: Correct DAPM handling of active widgets during shutdown (bsc#1051510).
- ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path (bsc#1051510).
- ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output (bsc#1051510).
- ASoC: pcm: update FE/BE trigger order based on the command (bsc#1051510).
- ASoC: topology: Fix memleak in soc_tplg_link_elems_load() (bsc#1051510).
- atm: zatm: Fix empty body Clang warnings (bsc#1051510).
- b43legacy: Fix -Wcast-function-type (bsc#1051510).
- blk: Fix kabi due to blk_trace_mutex addition (bsc#1159285).
- blktrace: fix dereference after null check (bsc#1159285).
- blktrace: fix trace mutex deadlock (bsc#1159285).
- bnxt_en: Fix NTUPLE firmware command failures (bsc#1104745 ).
- bnxt_en: Fix TC queue mapping (networking-stable-20_02_05).
- bnxt_en: Improve device shutdown method (bsc#1104745 ).
- bnxt_en: Issue PCIe FLR in kdump kernel to cleanup pending DMAs (bsc#1134090 jsc#SLE-5954).
- bonding/alb: properly access headers in bond_alb_xmit() (networking-stable-20_02_09).
- bpf, offload: Replace bitwise AND by logical AND in bpf_prog_offload_info_fill (bsc#1109837).
- CIFS: add a debug macro that prints \\server\share for errors (bsc#1144333).
- CIFS: add missing mount option to /proc/mounts (bsc#1144333).
- CIFS: add new debugging macro cifs_server_dbg (bsc#1144333).
- CIFS: add passthrough for smb2 setinfo (bsc#1144333).
- CIFS: add SMB2_open() arg to return POSIX data (bsc#1144333).
- CIFS: add smb2 POSIX info level (bsc#1144333).
- CIFS: add SMB3 change notification support (bsc#1144333).
- CIFS: add support for fallocate mode 0 for non-sparse files (bsc#1144333).
- CIFS: Add support for setting owner info, dos attributes, and create time (bsc#1144333).
- CIFS: Add tracepoints for errors on flush or fsync (bsc#1144333).
- CIFS: Adjust indentation in smb2_open_file (bsc#1144333).
- CIFS: allow chmod to set mode bits using special sid (bsc#1144333).
- CIFS: Avoid doing network I/O while holding cache lock (bsc#1144333).
- CIFS: call wake_up(server-&gt;response_q) inside of cifs_reconnect() (bsc#1144333).
- CIFS: Clean up DFS referral cache (bsc#1144333).
- CIFS: create a helper function to parse the query-directory response buffer (bsc#1144333).
- CIFS: do d_move in rename (bsc#1144333).
- CIFS: Do not display RDMA transport on reconnect (bsc#1144333).
- CIFS: do not ignore the SYNC flags in getattr (bsc#1144333).
- CIFS: do not leak -EAGAIN for stat() during reconnect (bsc#1144333).
- CIFS: do not use 'pre:' for MODULE_SOFTDEP (bsc#1144333).
- CIFS: enable change notification for SMB2.1 dialect (bsc#1144333).
- CIFS: fail i/o on soft mounts if sessionsetup errors out (bsc#1144333).
- CIFS: fix a comment for the timeouts when sending echos (bsc#1144333).
- CIFS: fix a white space issue in cifs_get_inode_info() (bsc#1144333).
- CIFS: fix dereference on ses before it is null checked (bsc#1144333).
- CIFS: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333).
- CIFS: fix mode bits from dir listing when mounted with modefromsid (bsc#1144333).
- CIFS: Fix mode output in debugging statements (bsc#1144333).
- CIFS: Fix mount options set in automount (bsc#1144333).
- CIFS: fix NULL dereference in match_prepath (bsc#1144333).
- CIFS: Fix potential deadlock when updating vol in cifs_reconnect() (bsc#1144333).
- CIFS: fix potential mismatch of UNC paths (bsc#1144333).
- CIFS: fix rename() by ensuring source handle opened with DELETE bit (bsc#1144333).
- CIFS: Fix return value in __update_cache_entry (bsc#1144333).
- CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333).
- CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333).
- CIFS: Fix task struct use-after-free on reconnect (bsc#1144333).
- CIFS: fix unitialized variable poential problem with network I/O cache lock patch (bsc#1144333).
- CIFS: get mode bits from special sid on stat (bsc#1144333).
- CIFS: Get rid of kstrdup_const()'d paths (bsc#1144333).
- CIFS: handle prefix paths in reconnect (bsc#1144333).
- CIFS: Introduce helpers for finding TCP connection (bsc#1144333).
- CIFS: log warning message (once) if out of disk space (bsc#1144333).
- CIFS: make sure we do not overflow the max EA buffer size (bsc#1144333).
- CIFS: make use of cap_unix(ses) in cifs_reconnect_tcon() (bsc#1144333).
- CIFS: Merge is_path_valid() into get_normalized_path() (bsc#1144333).
- CIFS: modefromsid: make room for 4 ACE (bsc#1144333).
- CIFS: modefromsid: write mode ACE first (bsc#1144333).
- CIFS: Optimize readdir on reparse points (bsc#1144333).
- CIFS: plumb smb2 POSIX dir enumeration (bsc#1144333).
- CIFS: potential unintitliazed error code in cifs_getattr() (bsc#1144333).
- CIFS: prepare SMB2_query_directory to be used with compounding (bsc#1144333).
- CIFS: print warning once if mounting with vers=1.0 (bsc#1144333).
- CIFS: refactor cifs_get_inode_info() (bsc#1144333).
- CIFS: remove redundant assignment to pointer pneg_ctxt (bsc#1144333).
- CIFS: remove redundant assignment to variable rc (bsc#1144333).
- CIFS: remove set but not used variables (bsc#1144333).
- CIFS: remove set but not used variable 'server' (bsc#1144333).
- CIFS: remove unused variable (bsc#1144333).
- CIFS: remove unused variable 'sid_user' (bsc#1144333).
- CIFS: rename a variable in SendReceive() (bsc#1144333).
- CIFS: rename posix create rsp (bsc#1144333).
- CIFS: replace various strncpy with strscpy and similar (bsc#1144333).
- CIFS: Return directly after a failed build_path_from_dentry() in cifs_do_create() (bsc#1144333).
- CIFS: set correct max-buffer-size for smb2_ioctl_init() (bsc#1144333).
- CIFS: smbd: Add messages on RDMA session destroy and reconnection (bsc#1144333).
- CIFS: smbd: Invalidate and deregister memory registration on re-send for direct I/O (bsc#1144333).
- CIFS: smbd: Only queue work for error recovery on memory registration (bsc#1144333).
- CIFS: smbd: Return -EAGAIN when transport is reconnecting (bsc#1144333).
- CIFS: smbd: Return -ECONNABORTED when trasnport is not in connected state (bsc#1144333).
- CIFS: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE (bsc#1144333).
- CIFS: Use common error handling code in smb2_ioctl_query_info() (bsc#1144333).
- CIFS: use compounding for open and first query-dir for readdir() (bsc#1144333).
- CIFS: Use #define in cifs_dbg (bsc#1144333).
- CIFS: Use memdup_user() rather than duplicating its implementation (bsc#1144333).
- CIFS: use mod_delayed_work() for server-&gt;reconnect if already queued (bsc#1144333).
- CIFS: use PTR_ERR_OR_ZERO() to simplify code (bsc#1144333).
- cls_rsvp: fix rsvp_policy (networking-stable-20_02_05).
- core: Do not skip generic XDP program execution for cloned SKBs (bsc#1109837).
- cpufreq: powernv: Fix unsafe notifiers (bsc#1065729).
- cpufreq: powernv: Fix use-after-free (bsc#1065729).
- crypto: pcrypt - Fix user-after-free on module unload (git-fixes).
- devlink: report 0 after hitting end in region read (bsc#1109837).
- dmaengine: coh901318: Fix a double lock bug in dma_tc_handle() (bsc#1051510).
- driver core: platform: fix u32 greater or equal to zero comparison (bsc#1051510).
- driver core: platform: Prevent resouce overflow from causing infinite loops (bsc#1051510).
- driver core: Print device when resources present in really_probe() (bsc#1051510).
- drivers/md/raid5.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).
- drivers/md/raid5-ppl.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).
- drm/amd/dm/mst: Ignore payload update failures (bsc#1112178)
- drm/amdkfd: fix a use after free race with mmu_notifer unregister (bsc#1114279)
- drm: atmel-hlcdc: enable clock before configuring timing engine (bsc#1114279)
- drm/etnaviv: fix dumping of iommuv2 (bsc#1114279)
- drm/gma500: Fixup fbdev stolen size usage evaluation (bsc#1051510).
- drm/i915/gvt: Fix orphan vgpu dmabuf_objs' lifetime (git-fixes).
- drm/i915/gvt: Fix unnecessary schedule timer when no vGPU exits (git-fixes).
- drm/i915/gvt: Separate display reset from ALL_ENGINES reset (bsc#1114279)
- drm/i915: Program MBUS with rmw during initialization (git-fixes).
- drm/i915/selftests: Fix return in assert_mmap_offset() (bsc#1114279) 
- drm/i915/userptr: fix size calculation (bsc#1114279)
- drm/i915/userptr: Try to acquire the page lock around (bsc#1114279)
- drm/i915: Wean off drm_pci_alloc/drm_pci_free (bsc#1114279)
- drm/mediatek: Add gamma property according to hardware capability (bsc#1114279)
- drm/mediatek: disable all the planes in atomic_disable (bsc#1114279)
- drm/mediatek: handle events when enabling/disabling crtc (bsc#1051510).
- drm/mipi_dbi: Fix off-by-one bugs in mipi_dbi_blank() (bsc#1114279)
- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable (bsc#1114279)
- drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (bsc#1051510).
- drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from fw (bsc#1051510).
- drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (git-fixes).
- drm: rcar-du: Recognize 'renesas,vsps' in addition to 'vsps' (bsc#1114279)
- drm: remove the newline for CRC source name (bsc#1051510).
- EDAC/mc: Fix use-after-free and memleaks during device removal (bsc#1114279).
- Enabled the following two patches in series.conf, and refresh the KABI patch due to previous md commit (bsc#1119680)
- ethtool: Factored out similar ethtool link settings for virtual devices to core (bsc#1136157 ltc#177197).
- fcntl: fix typo in RWH_WRITE_LIFE_NOT_SET r/w hint name (bsc#1166003).
- firmware: imx: misc: Align imx sc msg structs to 4 (git-fixes).
- firmware: imx: scu: Ensure sequential TX (git-fixes).
- firmware: imx: scu-pd: Align imx sc msg structs to 4 (git-fixes).
- Fixed memory leak in large read decrypt offload (bsc#1144333).
- Fixed some regressions (bsc#1165527 ltc#184149).
- fs/cifs/cifssmb.c: use true,false for bool variable (bsc#1144333).
- fs: cifs: cifsssmb: remove redundant assignment to variable ret (bsc#1144333).
- fs: cifs: Initialize filesystem timestamp ranges (bsc#1144333).
- fs: cifs: mute -Wunused-const-variable message (bsc#1144333).
- fs/cifs/sess.c: Remove set but not used variable 'capabilities' (bsc#1144333).
- fs/cifs/smb2ops.c: use true,false for bool variable (bsc#1144333).
- fs/cifs/smb2pdu.c: Make SMB2_notify_init static (bsc#1144333).
- fs/xfs: fix f_ffree value for statfs when project quota is set (bsc#1165985).
- gtp: make sure only SOCK_DGRAM UDP sockets are accepted (networking-stable-20_01_27).
- gtp: use __GFP_NOWARN to avoid memalloc warning (networking-stable-20_02_05).
- HID: core: fix off-by-one memset in hid_report_raw_event() (bsc#1051510).
- HID: hiddev: Fix race in in hiddev_disconnect() (git-fixes).
- hv_netvsc: Fix memory leak when removing rndis device (networking-stable-20_01_20).
- hwmon: (adt7462) Fix an error return in ADT7462_REG_VOLT() (bsc#1051510).
- IB/hfi1: Close window for pq and request coliding (bsc#1060463 ).
- ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551).
- ibmvnic: Do not process device remove during device reset (bsc#1065729).
- ibmvnic: Warn unknown speed message only when carrier is present (bsc#1065729).
- Input: edt-ft5x06 - work around first register access error (bsc#1051510).
- Input: synaptics - enable SMBus on ThinkPad L470 (bsc#1051510).
- Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list (bsc#1051510).
- Input: synaptics - switch T470s to RMI4 by default (bsc#1051510).
- iommu/amd: Check feature support bit before accessing MSI capability registers (bsc#1166101).
- iommu/amd: Only support x2APIC with IVHD type 11h/40h (bsc#1166102).
- iommu/amd: Remap the IOMMU device table with the memory encryption mask for kdump (bsc#1141895).
- iommu/dma: Fix MSI reservation allocation (bsc#1166730).
- iommu/vt-d: dmar: replace WARN_TAINT with pr_warn + add_taint (bsc#1166731).
- iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys() for huge page (bsc#1166732).
- iommu/vt-d: Fix compile warning from intel-svm.h (bsc#1166103).
- iommu/vt-d: Fix the wrong printing in RHSA parsing (bsc#1166733).
- iommu/vt-d: Ignore devices with out-of-spec domain number (bsc#1166734).
- iommu/vt-d: quirk_ioat_snb_local_iommu: replace WARN_TAINT with pr_warn + add_taint (bsc#1166735).
- ipv4: ensure rcu_read_lock() in cipso_v4_error() (git-fixes).
- ipv6: restrict IPV6_ADDRFORM operation (bsc#1109837).
- iwlegacy: Fix -Wcast-function-type (bsc#1051510).
- iwlwifi: mvm: Do not require PHY_SKU NVM section for 3168 devices (bsc#1166632).
- iwlwifi: mvm: Fix thermal zone registration (bsc#1051510).
- kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (bsc#1141895).
- kernel/module.c: Only return -EEXIST for modules that have finished loading (bsc#1165488).
- kernel/module.c: wakeup processes in module_wq on module unload (bsc#1165488).
- kexec: Allocate decrypted control pages for kdump if SME is enabled (bsc#1141895).
- KVM: arm64: Store vcpu on the stack during __guest_enter() (bsc#1133021).
- KVM: s390: do not clobber registers during guest reset/store status (bsc#1133021).
- KVM: s390: ENOTSUPP -&gt; EOPNOTSUPP fixups (bsc#1133021).
- KVM: VMX: check descriptor table exits on instruction emulation (bsc#1166104).
- l2tp: Allow duplicate session creation with UDP (networking-stable-20_02_05).
- libnvdimm/pfn_dev: Do not clear device memmap area during generic namespace probe (bsc#1165929 bsc#1165950).
- libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields (bsc#1165929).
- libnvdimm: remove redundant __func__ in dev_dbg (bsc#1165929).
- lib/raid6: add missing include for raid6test (bsc#1166003).
- lib/raid6: add option to skip algo benchmarking (bsc#1166003).
- lib/raid6: avoid __attribute_const__ redefinition (bsc#1166003).
- md: add __acquires/__releases annotations to handle_active_stripes (bsc#1166003).
- md: add __acquires/__releases annotations to (un)lock_two_stripes (bsc#1166003).
- md: add a missing endianness conversion in check_sb_changes (bsc#1166003).
- md: add bitmap_abort label in md_run (bsc#1166003).
- md: add feature flag MD_FEATURE_RAID0_LAYOUT (bsc#1166003).
- md: allow last device to be forcibly removed from RAID1/RAID10 (bsc#1166003).
- md: avoid invalid memory access for array sb-&gt;dev_roles (bsc#1166003).
- md/bitmap: avoid race window between md_bitmap_resize and bitmap_file_clear_bit (bsc#1166003).
- md-bitmap: create and destroy wb_info_pool with the change of backlog (bsc#1166003).
- md-bitmap: create and destroy wb_info_pool with the change of bitmap (bsc#1166003).
- md-bitmap: small cleanups (bsc#1166003).
- md/bitmap: use mddev_suspend/resume instead of -&gt;quiesce() (bsc#1166003).
- md-cluster/bitmap: do not call md_bitmap_sync_with_cluster during reshaping stage (bsc#1166003).
- md-cluster: introduce resync_info_get interface for sanity check (bsc#1166003).
- md-cluster/raid10: call update_size in md_reap_sync_thread (bsc#1166003).
- md-cluster/raid10: do not call remove_and_add_spares during reshaping stage (bsc#1166003).
- md-cluster/raid10: resize all the bitmaps before start reshape (bsc#1166003).
- md-cluster/raid10: support add disk under grow mode (bsc#1166003).
- md-cluster: remove suspend_info (bsc#1166003).
- md-cluster: send BITMAP_NEEDS_SYNC message if reshaping is interrupted (bsc#1166003).
- md: convert to kvmalloc (bsc#1166003).
- md: do not call spare_active in md_reap_sync_thread if all member devices can't work (bsc#1166003).
- md: do not set In_sync if array is frozen (bsc#1166003).
- md: fix a typo s/creat/create (bsc#1166003).
- md: fix for divide error in status_resync (bsc#1166003).
- md: fix spelling typo and add necessary space (bsc#1166003).
- md: introduce mddev_create/destroy_wb_pool for the change of member device (bsc#1166003).
- md-linear: use struct_size() in kzalloc() (bsc#1166003).
- md: Make bio_alloc_mddev use bio_alloc_bioset (bsc#1166003).
- md: make sure desc_nr less than MD_SB_DISKS (bsc#1166003).
- md: md.c: Return -ENODEV when mddev is NULL in rdev_attr_show (bsc#1166003).
- md: no longer compare spare disk superblock events in super_load (bsc#1166003).
- md/raid0: Fix an error message in raid0_make_request() (bsc#1166003).
- md raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone (bsc#1166003).
- md/raid10: end bio when the device faulty (bsc#1166003).
- md/raid10: Fix raid10 replace hang when new added disk faulty (bsc#1166003).
- md/raid10: prevent access of uninitialized resync_pages offset (bsc#1166003).
- md/raid10: read balance chooses idlest disk for SSD (bsc#1166003).
- md: raid10: Use struct_size() in kmalloc() (bsc#1166003).
- md/raid1: avoid soft lockup under high load (bsc#1166003).
- md: raid1: check rdev before reference in raid1_sync_request func (bsc#1166003).
- md/raid1: end bio when the device faulty (bsc#1166003).
- md/raid1: fail run raid1 array when active disk less than one (bsc#1166003).
- md/raid1: Fix a warning message in remove_wb() (bsc#1166003).
- md/raid1: fix potential data inconsistency issue with write behind device (bsc#1166003).
- md/raid1: get rid of extra blank line and space (bsc#1166003).
- md/raid5: use bio_end_sector to calculate last_sector (bsc#1166003).
- md/raid6: fix algorithm choice under larger PAGE_SIZE (bsc#1166003).
- md: remove set but not used variable 'bi_rdev' (bsc#1166003).
- md: rename wb stuffs (bsc#1166003).
- md: return -ENODEV if rdev has no mddev assigned (bsc#1166003).
- md: use correct type in super_1_load (bsc#1166003).
- md: use correct type in super_1_sync (bsc#1166003).
- md: use correct types in md_bitmap_print_sb (bsc#1166003).
- media: uvcvideo: Refactor teardown of uvc on USB disconnect (bsc#1164507).
- mlxsw: spectrum_qdisc: Include MC TCs in Qdisc counters (bsc#1112374).
- mlxsw: spectrum: Wipe xstats.backlog of down ports (bsc#1112374).
- net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM (networking-stable-20_01_27).
- net: dsa: mv88e6xxx: Preserve priority when setting CPU port (networking-stable-20_01_11).
- net: dsa: tag_qca: fix doubled Tx statistics (networking-stable-20_01_20).
- net/ethtool: Introduce link_ksettings API for virtual network devices (bsc#1136157 ltc#177197).
- net: Fix Tx hash bound checking (bsc#1109837).
- net: hns3: fix a copying IPv6 address error in hclge_fd_get_flow_tuples() (bsc#1104353).
- net: hns: fix soft lockup when there is not enough memory (networking-stable-20_01_20).
- net: hsr: fix possible NULL deref in hsr_handle_frame() (networking-stable-20_02_05).
- net: ip6_gre: fix moving ip6gre between namespaces (networking-stable-20_01_27).
- net, ip6_tunnel: fix namespaces move (networking-stable-20_01_27).
- net, ip_tunnel: fix namespaces move (networking-stable-20_01_27).
- net: macb: Limit maximum GEM TX length in TSO (networking-stable-20_02_09).
- net: macb: Remove unnecessary alignment check for TSO (networking-stable-20_02_09).
- net/mlx5: Fix lowest FDB pool size (bsc#1103990).
- net/mlx5: IPsec, Fix esp modify function attribute (bsc#1103990 ).
- net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx (bsc#1103990).
- net/mlx5: Update the list of the PCI supported devices (bsc#1127611).
- net/mlxfw: Verify FSM error code translation does not exceed array size (bsc#1051858).
- net: mvneta: move rx_dropped and rx_errors in per-cpu stats (networking-stable-20_02_09).
- net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link() (networking-stable-20_01_27).
- net_sched: ematch: reject invalid TCF_EM_SIMPLE (networking-stable-20_01_30).
- net_sched: fix an OOB access in cls_tcindex (networking-stable-20_02_05).
- net_sched: fix a resource leak in tcindex_set_parms() (networking-stable-20_02_09).
- net_sched: fix datalen for ematch (networking-stable-20_01_27).
- net: sch_prio: When ungrafting, replace with FIFO (networking-stable-20_01_11).
- net/smc: add fallback check to connect() (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- net: stmmac: dwmac-sunxi: Allow all RGMII modes (networking-stable-20_01_11).
- net-sysfs: Fix reference count leak (networking-stable-20_01_27).
- net: systemport: Avoid RBUF stuck in Wake-on-LAN mode (networking-stable-20_02_09).
- net/tls: fix async operation (bsc#1109837).
- net/tls: free the record on encryption error (bsc#1109837).
- net/tls: take into account that bpf_exec_tx_verdict() may free the record (bsc#1109837).
- net: usb: lan78xx: Add .ndo_features_check (networking-stable-20_01_27).
- net: usb: lan78xx: fix possible skb leak (networking-stable-20_01_11).
- net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info (networking-stable-20_01_20).
- NFC: pn544: Fix a typo in a debug message (bsc#1051510).
- NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu() (bsc#1051510).
- nvme: Fix parsing of ANA log page (bsc#1166658).
- nvme: resync include/linux/nvme.h with nvmecli (bsc#1156510).
- nvme: Translate more status codes to blk_status_t (bsc#1156510).
- orinoco: avoid assertion in case of NULL pointer (bsc#1051510).
- padata: always acquire cpu_hotplug_lock before pinst-&gt;lock (git-fixes).
- PCI/AER: Clear device status bits during ERR_COR handling (bsc#1161561).
- PCI/AER: Clear device status bits during ERR_FATAL and ERR_NONFATAL (bsc#1161561).
- PCI/AER: Clear only ERR_FATAL status bits during fatal recovery (bsc#1161561).
- PCI/AER: Clear only ERR_NONFATAL bits during non-fatal recovery (bsc#1161561).
- PCI/AER: Do not clear AER bits if error handling is Firmware-First (bsc#1161561).
- PCI/AER: Do not read upstream ports below fatal errors (bsc#1161561).
- PCI/AER: Factor out ERR_NONFATAL status bit clearing (bsc#1161561).
- PCI/AER: Take reference on error devices (bsc#1161561).
- PCI/ERR: Run error recovery callbacks for all affected devices (bsc#1161561).
- PCI/ERR: Use slot reset if available (bsc#1161561).
- pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled pins (bsc#1051510).
- pinctrl: imx: scu: Align imx sc msg structs to 4 (git-fixes).
- pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs (bsc#1051510).
- pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs (bsc#1051510).
- pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM (networking-stable-20_01_11).
- platform/mellanox: fix potential deadlock in the tmfifo driver (bsc#1136333 jsc#SLE-4994).
- powerpc: fix hardware PMU exception bug on PowerVM compatibility mode systems (bsc#1056686).
- powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (bsc#1160659).
- powerpc/pseries: fix of_read_drc_info_cell() to point at next record (bsc#1165980 ltc#183834).
- powerpc/pseries: group lmb operation and memblock's (bsc#1165404 ltc#183498).
- powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (bsc#1165404 ltc#183498).
- powerpc/pseries: update device tree before ejecting hotplug uevents (bsc#1165404 ltc#183498).
- powerpc/smp: Use nid as fallback for package_id (bsc#1165813 ltc#184091).
- ptr_ring: add include of linux/mm.h (bsc#1109837).
- qmi_wwan: re-add DW5821e pre-production variant (bsc#1051510).
- raid10: refactor common wait code from regular read/write request (bsc#1166003).
- raid1: factor out a common routine to handle the completion of sync write (bsc#1166003).
- raid1: simplify raid1_error function (bsc#1166003).
- raid1: use an int as the return value of raise_barrier() (bsc#1166003).
- raid5: block failing device if raid will be failed (bsc#1166003).
- raid5: do not increment read_errors on EILSEQ return (bsc#1166003).
- raid5: do not set STRIPE_HANDLE to stripe which is in batch list (bsc#1166003).
- raid5 improve too many read errors msg by adding limits (bsc#1166003).
- raid5: need to set STRIPE_HANDLE for batch head (bsc#1166003).
- raid5: remove STRIPE_OPS_REQ_PENDING (bsc#1166003).
- raid5: remove worker_cnt_per_group argument from alloc_thread_groups (bsc#1166003). 
- raid5: set write hint for PPL (bsc#1166003).
- raid5: use bio_end_sector in r5_next_bio (bsc#1166003).
- raid6/test: fix a compilation error (bsc#1166003).
- raid6/test: fix a compilation warning (bsc#1166003).
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (bsc#1103992).
- RDMA/hfi1: Fix memory leak in _dev_comp_vect_mappings_create (bsc#1114685).
- RDMA/uverbs: Verify MR access flags (bsc#1103992).
- remoteproc: Initialize rproc_class before use (bsc#1051510).
- Revert 'HID: add NOGET quirk for Eaton Ellipse MAX UPS' (git-fixes).
- rtlwifi: rtl_pci: Fix -Wcast-function-type (bsc#1051510).
- rxrpc: Fix insufficient receive notification generation (networking-stable-20_02_05).
- s390/pci: Fix unexpected write combine on resource (git-fixes).
- s390/uv: Fix handling of length extensions (git-fixes).
- scsi: fnic: do not queue commands during fwreset (bsc#1146539).
- scsi: ibmvfc: Add failed PRLI to cmd_status lookup array (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Byte swap status and error codes when logging (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Clean up transport events (bsc#1161951 ltc#183551).
- scsi: ibmvfc: constify dev_pm_ops structures (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Do not call fc_block_scsi_eh() on host reset (bsc#1161951 ltc#183551).
- scsi: ibmvfc: ibmvscsi: ibmvscsi_tgt: constify vio_device_id (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Mark expected switch fall-throughs (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Remove 'failed' from logged errors (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Remove unneeded semicolons (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: change strncpy+truncation to strlcpy (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: constify dev_pm_ops structures (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Do not use rc uninitialized in ibmvscsi_do_work (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: fix tripping of blk_mq_run_hw_queue WARN_ON (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Improve strings handling (bsc#1161951 ltc#183551). 
- scsi: ibmvscsi: redo driver work thread to use enum action states (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Wire up host_reset() in the driver's scsi_host_template (bsc#1161951 ltc#183551).
- scsi: qla2xxx: Add 16.0GT for PCI String (bsc#1157424).
- scsi: qla2xxx: Add beacon LED config sysfs interface (bsc#1157424).
- scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (bsc#1157424).
- scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (bsc#1157424).
- scsi: qla2xxx: Add endianizer macro calls to fc host stats (bsc#1157424).
- scsi: qla2xxx: Add fixes for mailbox command (bsc#1157424).
- scsi: qla2xxx: add more FW debug information (bsc#1157424).
- scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (bsc#1157424).
- scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (bsc#1157424).
- scsi: qla2xxx: Add vendor extended FDMI commands (bsc#1157424).
- scsi: qla2xxx: Add vendor extended RDP additions and amendments (bsc#1157424).
- scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options (bsc#1157424).
- scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb() (bsc#1157424).
- scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (bsc#1157424).
- scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function (bsc#1157424).
- scsi: qla2xxx: Correction to selection of loopback/echo test (bsc#1157424).
- scsi: qla2xxx: Display message for FCE enabled (bsc#1157424).
- scsi: qla2xxx: Fix control flags for login/logout IOCB (bsc#1157424).
- scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (bsc#1157424).
- scsi: qla2xxx: fix FW resource count values (bsc#1157424).
- scsi: qla2xxx: Fix NPIV instantiation after FW dump (bsc#1157424).
- scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (bsc#1157424).
- scsi: qla2xxx: Fix RDP respond data format (bsc#1157424).
- scsi: qla2xxx: Fix RDP response size (bsc#1157424).
- scsi: qla2xxx: Fix sparse warning reported by kbuild bot (bsc#1157424).
- scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code (bsc#1157424).
- scsi: qla2xxx: Force semaphore on flash validation failure (bsc#1157424).
- scsi: qla2xxx: Handle cases for limiting RDP response payload length (bsc#1157424).
- scsi: qla2xxx: Handle NVME status iocb correctly (bsc#1157424).
- scsi: qla2xxx: Improved secure flash support messages (bsc#1157424).
- scsi: qla2xxx: Move free of fcport out of interrupt context (bsc#1157424).
- scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (bsc#1157424).
- scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (bsc#1157424).
- scsi: qla2xxx: Return appropriate failure through BSG Interface (bsc#1157424).
- scsi: qla2xxx: Save rscn_gen for new fcport (bsc#1157424).
- scsi: qla2xxx: Serialize fc_port alloc in N2N (bsc#1157424).
- scsi: qla2xxx: Set Nport ID for N2N (bsc#1157424).
- scsi: qla2xxx: Show correct port speed capabilities for RDP command (bsc#1157424).
- scsi: qla2xxx: Simplify the code for aborting SCSI commands (bsc#1157424).
- scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop() (bsc#1157424).
- scsi: qla2xxx: Update BPM enablement semantics (bsc#1157424).
- scsi: qla2xxx: Update driver version to 10.01.00.24-k (bsc#1157424).
- scsi: qla2xxx: Update driver version to 10.01.00.25-k (bsc#1157424).
- scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required' ISPs (bsc#1157424).
- scsi: qla2xxx: Use correct ISP28xx active FW region (bsc#1157424).
- scsi: qla2xxx: Use endian macros to assign static fields in fwdump header (bsc#1157424).
- scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx (bsc#1157424).
- scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (bsc#1157424).
- scsi: tcm_qla2xxx: Make qlt_alloc_qfull_cmd() set cmd-&gt;se_cmd.map_tag (bsc#1157424).
- sctp: free cmd-&gt;obj.chunk for the unprocessed SCTP_CMD_REPLY (networking-stable-20_01_11).
- smb3: add debug messages for closing unmatched open (bsc#1144333).
- smb3: Add defines for new information level, FileIdInformation (bsc#1144333).
- smb3: add dynamic tracepoints for flush and close (bsc#1144333).
- smb3: add missing flag definitions (bsc#1144333).
- smb3: Add missing reparse tags (bsc#1144333).
- smb3: add missing worker function for SMB3 change notify (bsc#1144333).
- smb3: add mount option to allow forced caching of read only share (bsc#1144333).
- smb3: add mount option to allow RW caching of share accessed by only 1 client (bsc#1144333).
- smb3: add one more dynamic tracepoint missing from strict fsync path (bsc#1144333).
- smb3: add some more descriptive messages about share when mounting cache=ro (bsc#1144333).
- smb3: allow decryption keys to be dumped by admin for debugging (bsc#1144333).
- smb3: allow disabling requesting leases (bsc#1144333).
- smb3: allow parallelizing decryption of reads (bsc#1144333).
- smb3: allow skipping signature verification for perf sensitive configurations (bsc#1144333).
- smb3: Backup intent flag missing from some more ops (bsc#1144333).
- smb3: cleanup some recent endian errors spotted by updated sparse (bsc#1144333).
- smb3: display max smb3 requests in flight at any one time (bsc#1144333).
- smb3: dump in_send and num_waiters stats counters by default (bsc#1144333).
- smb3: enable offload of decryption of large reads via mount option (bsc#1144333).
- smb3: fix default permissions on new files when mounting with modefromsid (bsc#1144333).
- smb3: fix mode passed in on create for modetosid mount option (bsc#1144333).
- smb3: fix performance regression with setting mtime (bsc#1144333).
- smb3: fix potential null dereference in decrypt offload (bsc#1144333).
- smb3: fix problem with null cifs super block with previous patch (bsc#1144333).
- smb3: Fix regression in time handling (bsc#1144333).
- smb3: improve check for when we send the security descriptor context on create (bsc#1144333).
- smb3: log warning if CSC policy conflicts with cache mount option (bsc#1144333).
- smb3: missing ACL related flags (bsc#1144333).
- smb3: only offload decryption of read responses if multiple requests (bsc#1144333).
- smb3: pass mode bits into create calls (bsc#1144333).
- smb3: print warning once if posix context returned on open  (bsc#1144333).
- smb3: query attributes on file close (bsc#1144333).
- smb3: remove noisy debug message and minor cleanup (bsc#1144333).
- smb3: remove unused flag passed into close functions (bsc#1144333).
- staging: rtl8188eu: Fix potential overuse of kernel memory (bsc#1051510).
- staging: rtl8188eu: Fix potential security hole (bsc#1051510).
- staging: rtl8723bs: Fix potential overuse of kernel memory (bsc#1051510).
- staging: rtl8723bs: Fix potential security hole (bsc#1051510).
- SUNRPC: Fix svcauth_gss_proxy_init() (bsc#1103992).
- tcp_bbr: improve arithmetic division in bbr_update_bw() (networking-stable-20_01_27).
- tcp: clear tp-&gt;data_segs{in|out} in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;delivered in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;segs_{in|out} in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;total_retrans in tcp_disconnect() (networking-stable-20_02_05).
- tcp: fix marked lost packets not being retransmitted (networking-stable-20_01_20).
- tcp: fix 'old stuff' D-SACK causing SACK to be treated as D-SACK (networking-stable-20_01_11).
- thunderbolt: Prevent crash if non-active NVMem file is read (git-fixes).
- tick: broadcast-hrtimer: Fix a race in bc_set_next (bsc#1044231).
- tools lib traceevent: Do not free tep-&gt;cmdlines in add_new_comm() on failure (git-fixes).
- tools: Update include/uapi/linux/fcntl.h copy from the kernel (bsc#1166003).
- ttyprintk: fix a potential deadlock in interrupt context issue (git-fixes).
- tun: add mutex_unlock() call and napi.skb clearing in tun_get_user() (bsc#1109837).
- Updated block layer, timers and md code for SLE15-SP1 kernel (bsc#1111974).
- Updated 'drm/i915: Wean off drm_pci_alloc/drm_pci_free' (bsc#1114279) 
- USB: core: add endpoint-blacklist quirk (git-fixes).
- USBip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() (git-fixes).
- USB: quirks: blacklist duplicate ep on Sound Devices USBPre2 (git-fixes).
- uvcvideo: Refactor teardown of uvc on USB disconnect (https://patchwork.kernel.org/patch/9683663/) (bsc#1164507)
- vgacon: Fix a UAF in vgacon_invert_region (bsc#1114279)
- virtio-blk: fix hw_queue stopped on arbitrary error (git-fixes).
- vlan: fix memory leak in vlan_dev_set_egress_priority (networking-stable-20_01_11).
- vlan: vlan_changelink() should propagate errors (networking-stable-20_01_11).
- vxlan: fix tos value before xmit (networking-stable-20_01_11).
- x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF (bsc#1114279).
- x86/ioremap: Add an ioremap_encrypted() helper (bsc#1141895).
- x86/kdump: Export the SME mask to vmcoreinfo (bsc#1141895).
- x86/mce/amd: Fix kobject lifetime (bsc#1114279).
- x86/mce/amd: Publish the bank pointer only after setup has succeeded (bsc#1114279).
- x86/mm: Split vmalloc_sync_all() (bsc#1165741).
- xfs: also remove cached ACLs when removing the underlying attr (bsc#1165873).
- xfs: bulkstat should copy lastip whenever userspace supplies one (bsc#1165984).
- xhci: fix runtime pm enabling for quirky Intel hosts (bsc#1051510).
- xhci: Force Maximum Packet size for Full-speed bulk devices to valid range (bsc#1051510).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-31"/>
	<updated date="2020-03-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1044231">SUSE bug 1044231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051858">SUSE bug 1051858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056686">SUSE bug 1056686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060463">SUSE bug 1060463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111974">SUSE bug 1111974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119680">SUSE bug 1119680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136157">SUSE bug 1136157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141895">SUSE bug 1141895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146539">SUSE bug 1146539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156510">SUSE bug 1156510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158187">SUSE bug 1158187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159285">SUSE bug 1159285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160659">SUSE bug 1160659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161561">SUSE bug 1161561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161951">SUSE bug 1161951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162928">SUSE bug 1162928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162929">SUSE bug 1162929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162931">SUSE bug 1162931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164078">SUSE bug 1164078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164507">SUSE bug 1164507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165111">SUSE bug 1165111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165404">SUSE bug 1165404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165488">SUSE bug 1165488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165527">SUSE bug 1165527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165741">SUSE bug 1165741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165813">SUSE bug 1165813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165873">SUSE bug 1165873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165929">SUSE bug 1165929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165950">SUSE bug 1165950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165980">SUSE bug 1165980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165984">SUSE bug 1165984</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165985">SUSE bug 1165985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166003">SUSE bug 1166003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166101">SUSE bug 1166101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166102">SUSE bug 1166102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166103">SUSE bug 1166103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166104">SUSE bug 1166104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166632">SUSE bug 1166632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166658">SUSE bug 1166658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166730">SUSE bug 1166730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166731">SUSE bug 1166731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166732">SUSE bug 1166732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166733">SUSE bug 1166733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166734">SUSE bug 1166734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166735">SUSE bug 1166735</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19768/">CVE-2019-19768</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8647/">CVE-2020-8647</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8648/">CVE-2020-8648</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8649/">CVE-2020-8649</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-9383/">CVE-2020-9383</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493082" comment="kernel-default-4.12.14-197.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493083" comment="kernel-default-base-4.12.14-197.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493084" comment="kernel-default-devel-4.12.14-197.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493085" comment="kernel-default-man-4.12.14-197.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493086" comment="kernel-devel-4.12.14-197.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493087" comment="kernel-macros-4.12.14-197.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138020" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1123156" ref_url="https://bugzilla.suse.com/1123156" source="BUGZILLA"/>
		<reference ref_id="1154790" ref_url="https://bugzilla.suse.com/1154790" source="BUGZILLA"/>
		<reference ref_id="1161066" ref_url="https://bugzilla.suse.com/1161066" source="BUGZILLA"/>
		<reference ref_id="1162729" ref_url="https://bugzilla.suse.com/1162729" source="BUGZILLA"/>
		<reference ref_id="1163018" ref_url="https://bugzilla.suse.com/1163018" source="BUGZILLA"/>
		<reference ref_id="1165776" ref_url="https://bugzilla.suse.com/1165776" source="BUGZILLA"/>
		<reference ref_id="1166240" ref_url="https://bugzilla.suse.com/1166240" source="BUGZILLA"/>
		<reference ref_id="1166379" ref_url="https://bugzilla.suse.com/1166379" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15034" ref_url="https://www.suse.com/security/cve/CVE-2019-15034/" source="CVE"/>
		<reference ref_id="CVE-2019-20382" ref_url="https://www.suse.com/security/cve/CVE-2019-20382/" source="CVE"/>
		<reference ref_id="CVE-2019-6778" ref_url="https://www.suse.com/security/cve/CVE-2019-6778/" source="CVE"/>
		<reference ref_id="CVE-2020-1711" ref_url="https://www.suse.com/security/cve/CVE-2020-1711/" source="CVE"/>
		<reference ref_id="CVE-2020-7039" ref_url="https://www.suse.com/security/cve/CVE-2020-7039/" source="CVE"/>
		<reference ref_id="CVE-2020-8608" ref_url="https://www.suse.com/security/cve/CVE-2020-8608/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006662.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

- CVE-2020-7039: Fixed a heap buffer overflow in tcp_emu() routine while emulating IRC and
  other protocols (bsc#1161066).
- CVE-2019-15034: Fixed a buffer overflow in hw/display/bochs-display.c due to improper PCI 
  config space allocation (bsc#1166379).
- CVE-2020-1711: Fixed an out of bounds heap buffer access iscsi_co_block_status() routine
  which could have allowed a remote denial of service or arbitrary code with privileges 
  of the QEMU process on the host (bsc#1166240).
- CVE-2019-6778: Fixed a heap buffer overflow in tcp_emu() routine while emulating 
  the identification protocol and copying message data to a socket buffer (bsc#1123156).
- CVE-2020-8608: Fixed a heap buffer overflow in tcp_emu() routine while emulating IRC and
  other protocols (bsc#1163018).
- CVE-2019-20382: Fixed a memory leak in the VNC display driver which could have led to 
  exhaustion of the host memory leading to a potential Denial of service (bsc#1165776).
- Fixed a live migration error (bsc#1154790).
- Fixed an issue where migrating VMs on KVM gets missing features:ospke error (bsc#1162729).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-01"/>
	<updated date="2020-04-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1123156">SUSE bug 1123156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154790">SUSE bug 1154790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161066">SUSE bug 1161066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162729">SUSE bug 1162729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163018">SUSE bug 1163018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165776">SUSE bug 1165776</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166240">SUSE bug 1166240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166379">SUSE bug 1166379</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15034/">CVE-2019-15034</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20382/">CVE-2019-20382</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6778/">CVE-2019-6778</cve>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-1711/">CVE-2020-1711</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-7039/">CVE-2020-7039</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-8608/">CVE-2020-8608</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493088" comment="qemu-tools-3.1.1.1-9.14.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138021" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1166751" ref_url="https://bugzilla.suse.com/1166751" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0556" ref_url="https://www.suse.com/security/cve/CVE-2020-0556/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006674.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2020-0556: Fixed an improper access control which could have allowed an unauthenticated 
  user to potentially enable escalation of privilege and denial of service (bsc#1166751).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-03"/>
	<updated date="2020-04-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1166751">SUSE bug 1166751</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-0556/">CVE-2020-0556</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493089" comment="libbluetooth3-5.48-5.25.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138022" version="1" class="patch">
	<metadata>
		<title>Security update for ceph (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1166403" ref_url="https://bugzilla.suse.com/1166403" source="BUGZILLA"/>
		<reference ref_id="1166484" ref_url="https://bugzilla.suse.com/1166484" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1759" ref_url="https://www.suse.com/security/cve/CVE-2020-1759/" source="CVE"/>
		<reference ref_id="CVE-2020-1760" ref_url="https://www.suse.com/security/cve/CVE-2020-1760/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006679.html" source="SUSE-SU"/>
		<description>
This update for ceph fixes the following issues:

- CVE-2020-1759: Fixed once reuse in msgr V2 secure mode (bsc#1166403)
- CVE-2020-1760: Fixed XSS due to RGW GetObject header-splitting (bsc#1166484).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-06"/>
	<updated date="2020-04-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1166403">SUSE bug 1166403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166484">SUSE bug 1166484</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-1759/">CVE-2020-1759</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-1760/">CVE-2020-1760</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493090" comment="ceph-common-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493091" comment="libcephfs-devel-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493092" comment="libcephfs2-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493093" comment="librados-devel-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493094" comment="librados2-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493095" comment="libradospp-devel-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493096" comment="librbd-devel-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493097" comment="librbd1-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493098" comment="librgw-devel-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493099" comment="librgw2-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493100" comment="python3-ceph-argparse-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493101" comment="python3-cephfs-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493102" comment="python3-rados-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493103" comment="python3-rbd-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493104" comment="python3-rgw-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493105" comment="rados-objclass-devel-14.2.5.389+gb0f23ac248-3.35.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138023" version="1" class="patch">
	<metadata>
		<title>Security update for gmp, gnutls, libnettle (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1152692" ref_url="https://bugzilla.suse.com/1152692" source="BUGZILLA"/>
		<reference ref_id="1155327" ref_url="https://bugzilla.suse.com/1155327" source="BUGZILLA"/>
		<reference ref_id="1166881" ref_url="https://bugzilla.suse.com/1166881" source="BUGZILLA"/>
		<reference ref_id="1168345" ref_url="https://bugzilla.suse.com/1168345" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11501" ref_url="https://www.suse.com/security/cve/CVE-2020-11501/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006686.html" source="SUSE-SU"/>
		<description>
This update for gmp, gnutls, libnettle fixes the following issues:

Security issue fixed:

- CVE-2020-11501: Fixed zero random value in DTLS client hello (bsc#1168345)

FIPS related bugfixes:

- FIPS: Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)
- FIPS: Fixed a cfb8 decryption issue, no longer truncate output IV if
  input is shorter than block size. (bsc#1166881)
- FIPS: Added Diffie Hellman public key verification test. (bsc#1155327)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-08"/>
	<updated date="2020-04-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1152692">SUSE bug 1152692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155327">SUSE bug 1155327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166881">SUSE bug 1166881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168345">SUSE bug 1168345</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-11501/">CVE-2020-11501</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493106" comment="gmp-devel-6.1.2-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493107" comment="gnutls-3.6.7-6.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493108" comment="libgmp10-6.1.2-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493109" comment="libgmp10-32bit-6.1.2-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493110" comment="libgmpxx4-6.1.2-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493111" comment="libgnutls-devel-3.6.7-6.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493112" comment="libgnutls30-3.6.7-6.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493113" comment="libgnutls30-32bit-3.6.7-6.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493114" comment="libgnutls30-hmac-3.6.7-6.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493115" comment="libgnutls30-hmac-32bit-3.6.7-6.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493116" comment="libgnutlsxx-devel-3.6.7-6.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493117" comment="libgnutlsxx28-3.6.7-6.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493118" comment="libhogweed4-3.4.1-4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493119" comment="libhogweed4-32bit-3.4.1-4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493120" comment="libnettle-devel-3.4.1-4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493121" comment="libnettle6-3.4.1-4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493122" comment="libnettle6-32bit-3.4.1-4.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138024" version="1" class="patch">
	<metadata>
		<title>Security update for mgetty (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1142770" ref_url="https://bugzilla.suse.com/1142770" source="BUGZILLA"/>
		<reference ref_id="1168170" ref_url="https://bugzilla.suse.com/1168170" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1010190" ref_url="https://www.suse.com/security/cve/CVE-2019-1010190/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0957-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006689.html" source="SUSE-SU"/>
		<description>
This update for mgetty fixes the following issues:

- CVE-2019-1010190: Fixed a denial of service which could be caused by a local attacker in putwhitespan() (bsc#1142770).
- Fixed a permission issue which have resulted in build failures (bsc#1168170).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-08"/>
	<updated date="2020-04-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1142770">SUSE bug 1142770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168170">SUSE bug 1168170</bugzilla>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1010190/">CVE-2019-1010190</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493123" comment="g3utils-1.1.37-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493124" comment="mgetty-1.1.37-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138025" version="1" class="patch">
	<metadata>
		<title>Security update for python-PyYAML (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1165439" ref_url="https://bugzilla.suse.com/1165439" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1747" ref_url="https://www.suse.com/security/cve/CVE-2020-1747/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006690.html" source="SUSE-SU"/>
		<description>
This update for python-PyYAML fixes the following issues:

- CVE-2020-1747: Fixed an arbitrary code execution when YAML files are parsed by FullLoader (bsc#1165439).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-08"/>
	<updated date="2020-04-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1165439">SUSE bug 1165439</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1747/">CVE-2020-1747</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493125" comment="python3-PyYAML-5.1.2-6.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138026" version="1" class="patch">
	<metadata>
		<title>Security update for libssh (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168699" ref_url="https://bugzilla.suse.com/1168699" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1730" ref_url="https://www.suse.com/security/cve/CVE-2020-1730/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0967-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006694.html" source="SUSE-SU"/>
		<description>
This update for libssh fixes the following issues:

- CVE-2020-1730: Fixed a possible denial of service when using AES-CTR (bsc#1168699).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-09"/>
	<updated date="2020-04-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1168699">SUSE bug 1168699</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-1730/">CVE-2020-1730</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493126" comment="libssh-devel-0.8.7-10.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493127" comment="libssh4-0.8.7-10.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493128" comment="libssh4-32bit-0.8.7-10.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138027" version="1" class="patch">
	<metadata>
		<title>Security update for permissions (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168364" ref_url="https://bugzilla.suse.com/1168364" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:0969-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006693.html" source="SUSE-SU"/>
		<description>
This update for permissions fixes the following issues:

- Fixed spelling of icinga group (bsc#1168364)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-09"/>
	<updated date="2020-04-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1168364">SUSE bug 1168364</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493129" comment="permissions-20181116-9.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493130" comment="permissions-zypp-plugin-20181116-9.29.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138028" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168930" ref_url="https://bugzilla.suse.com/1168930" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-5260" ref_url="https://www.suse.com/security/cve/CVE-2020-5260/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0991-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006710.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- CVE-2020-5260: With a crafted URL that contains a newline in it, the credential
  helper machinery can be fooled to give credential information for a wrong host (bsc#1168930). 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-14"/>
	<updated date="2020-04-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168930">SUSE bug 1168930</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-5260/">CVE-2020-5260</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493131" comment="git-core-2.16.4-3.20.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138029" version="1" class="patch">
	<metadata>
		<title>Security update for ruby2.5 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1167244" ref_url="https://bugzilla.suse.com/1167244" source="BUGZILLA"/>
		<reference ref_id="1168938" ref_url="https://bugzilla.suse.com/1168938" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10663" ref_url="https://www.suse.com/security/cve/CVE-2020-10663/" source="CVE"/>
		<reference ref_id="CVE-2020-10933" ref_url="https://www.suse.com/security/cve/CVE-2020-10933/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0995-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006711.html" source="SUSE-SU"/>
		<description>
This update for ruby2.5 to version 2.5.8 fixes the following issues:

- CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (bsc#1167244).
- CVE-2020-10933: Heap exposure vulnerability in the socket library (bsc#1168938).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-15"/>
	<updated date="2020-04-15"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1167244">SUSE bug 1167244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168938">SUSE bug 1168938</bugzilla>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10663/">CVE-2020-10663</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10933/">CVE-2020-10933</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493132" comment="libruby2_5-2_5-2.5.8-4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493133" comment="ruby2.5-2.5.8-4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493134" comment="ruby2.5-devel-2.5.8-4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493135" comment="ruby2.5-devel-extra-2.5.8-4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493136" comment="ruby2.5-stdlib-2.5.8-4.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138030" version="1" class="patch">
	<metadata>
		<title>Security update for zstd (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1082318" ref_url="https://bugzilla.suse.com/1082318" source="BUGZILLA"/>
		<reference ref_id="1133297" ref_url="https://bugzilla.suse.com/1133297" source="BUGZILLA"/>
		<description>
This update for zstd fixes the following issues:

- Fix for build error caused by wrong static libraries. (bsc#1133297)
- Correction in spec file marking the license as documentation. (bsc#1082318)
- Add new package for SLE-15. (jsc#ECO-1886)
  		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-08"/>
	<updated date="2021-04-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1082318">SUSE bug 1082318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133297">SUSE bug 1133297</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493137" comment="libzstd-devel-1.4.4-1.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489337" comment="libzstd1-1.4.4-1.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493138" comment="libzstd1-32bit-1.4.4-1.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493139" comment="zstd-1.4.4-1.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138031" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1040855" ref_url="https://bugzilla.suse.com/1040855" source="BUGZILLA"/>
		<reference ref_id="1044120" ref_url="https://bugzilla.suse.com/1044120" source="BUGZILLA"/>
		<reference ref_id="1044767" ref_url="https://bugzilla.suse.com/1044767" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1056653" ref_url="https://bugzilla.suse.com/1056653" source="BUGZILLA"/>
		<reference ref_id="1056657" ref_url="https://bugzilla.suse.com/1056657" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1094840" ref_url="https://bugzilla.suse.com/1094840" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104389" ref_url="https://bugzilla.suse.com/1104389" source="BUGZILLA"/>
		<reference ref_id="1104393" ref_url="https://bugzilla.suse.com/1104393" source="BUGZILLA"/>
		<reference ref_id="1109695" ref_url="https://bugzilla.suse.com/1109695" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1110096" ref_url="https://bugzilla.suse.com/1110096" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1115431" ref_url="https://bugzilla.suse.com/1115431" source="BUGZILLA"/>
		<reference ref_id="1118657" ref_url="https://bugzilla.suse.com/1118657" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1138374" ref_url="https://bugzilla.suse.com/1138374" source="BUGZILLA"/>
		<reference ref_id="1139944" ref_url="https://bugzilla.suse.com/1139944" source="BUGZILLA"/>
		<reference ref_id="1144912" ref_url="https://bugzilla.suse.com/1144912" source="BUGZILLA"/>
		<reference ref_id="1152457" ref_url="https://bugzilla.suse.com/1152457" source="BUGZILLA"/>
		<reference ref_id="1163727" ref_url="https://bugzilla.suse.com/1163727" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1171078" ref_url="https://bugzilla.suse.com/1171078" source="BUGZILLA"/>
		<reference ref_id="1172145" ref_url="https://bugzilla.suse.com/1172145" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1172694" ref_url="https://bugzilla.suse.com/1172694" source="BUGZILLA"/>
		<reference ref_id="1174784" ref_url="https://bugzilla.suse.com/1174784" source="BUGZILLA"/>
		<reference ref_id="1174852" ref_url="https://bugzilla.suse.com/1174852" source="BUGZILLA"/>
		<reference ref_id="1176558" ref_url="https://bugzilla.suse.com/1176558" source="BUGZILLA"/>
		<reference ref_id="1176559" ref_url="https://bugzilla.suse.com/1176559" source="BUGZILLA"/>
		<reference ref_id="1176956" ref_url="https://bugzilla.suse.com/1176956" source="BUGZILLA"/>
		<reference ref_id="1178270" ref_url="https://bugzilla.suse.com/1178270" source="BUGZILLA"/>
		<reference ref_id="1178372" ref_url="https://bugzilla.suse.com/1178372" source="BUGZILLA"/>
		<reference ref_id="1178401" ref_url="https://bugzilla.suse.com/1178401" source="BUGZILLA"/>
		<reference ref_id="1178590" ref_url="https://bugzilla.suse.com/1178590" source="BUGZILLA"/>
		<reference ref_id="1178634" ref_url="https://bugzilla.suse.com/1178634" source="BUGZILLA"/>
		<reference ref_id="1178762" ref_url="https://bugzilla.suse.com/1178762" source="BUGZILLA"/>
		<reference ref_id="1179014" ref_url="https://bugzilla.suse.com/1179014" source="BUGZILLA"/>
		<reference ref_id="1179015" ref_url="https://bugzilla.suse.com/1179015" source="BUGZILLA"/>
		<reference ref_id="1179045" ref_url="https://bugzilla.suse.com/1179045" source="BUGZILLA"/>
		<reference ref_id="1179082" ref_url="https://bugzilla.suse.com/1179082" source="BUGZILLA"/>
		<reference ref_id="1179107" ref_url="https://bugzilla.suse.com/1179107" source="BUGZILLA"/>
		<reference ref_id="1179142" ref_url="https://bugzilla.suse.com/1179142" source="BUGZILLA"/>
		<reference ref_id="1179204" ref_url="https://bugzilla.suse.com/1179204" source="BUGZILLA"/>
		<reference ref_id="1179419" ref_url="https://bugzilla.suse.com/1179419" source="BUGZILLA"/>
		<reference ref_id="1179444" ref_url="https://bugzilla.suse.com/1179444" source="BUGZILLA"/>
		<reference ref_id="1179520" ref_url="https://bugzilla.suse.com/1179520" source="BUGZILLA"/>
		<reference ref_id="1179578" ref_url="https://bugzilla.suse.com/1179578" source="BUGZILLA"/>
		<reference ref_id="1179601" ref_url="https://bugzilla.suse.com/1179601" source="BUGZILLA"/>
		<reference ref_id="1179663" ref_url="https://bugzilla.suse.com/1179663" source="BUGZILLA"/>
		<reference ref_id="1179666" ref_url="https://bugzilla.suse.com/1179666" source="BUGZILLA"/>
		<reference ref_id="1179670" ref_url="https://bugzilla.suse.com/1179670" source="BUGZILLA"/>
		<reference ref_id="1179671" ref_url="https://bugzilla.suse.com/1179671" source="BUGZILLA"/>
		<reference ref_id="1179672" ref_url="https://bugzilla.suse.com/1179672" source="BUGZILLA"/>
		<reference ref_id="1179673" ref_url="https://bugzilla.suse.com/1179673" source="BUGZILLA"/>
		<reference ref_id="1179711" ref_url="https://bugzilla.suse.com/1179711" source="BUGZILLA"/>
		<reference ref_id="1179713" ref_url="https://bugzilla.suse.com/1179713" source="BUGZILLA"/>
		<reference ref_id="1179714" ref_url="https://bugzilla.suse.com/1179714" source="BUGZILLA"/>
		<reference ref_id="1179715" ref_url="https://bugzilla.suse.com/1179715" source="BUGZILLA"/>
		<reference ref_id="1179716" ref_url="https://bugzilla.suse.com/1179716" source="BUGZILLA"/>
		<reference ref_id="1179722" ref_url="https://bugzilla.suse.com/1179722" source="BUGZILLA"/>
		<reference ref_id="1179723" ref_url="https://bugzilla.suse.com/1179723" source="BUGZILLA"/>
		<reference ref_id="1179724" ref_url="https://bugzilla.suse.com/1179724" source="BUGZILLA"/>
		<reference ref_id="1179745" ref_url="https://bugzilla.suse.com/1179745" source="BUGZILLA"/>
		<reference ref_id="1179810" ref_url="https://bugzilla.suse.com/1179810" source="BUGZILLA"/>
		<reference ref_id="1179888" ref_url="https://bugzilla.suse.com/1179888" source="BUGZILLA"/>
		<reference ref_id="1179895" ref_url="https://bugzilla.suse.com/1179895" source="BUGZILLA"/>
		<reference ref_id="1179896" ref_url="https://bugzilla.suse.com/1179896" source="BUGZILLA"/>
		<reference ref_id="1179960" ref_url="https://bugzilla.suse.com/1179960" source="BUGZILLA"/>
		<reference ref_id="1179963" ref_url="https://bugzilla.suse.com/1179963" source="BUGZILLA"/>
		<reference ref_id="1180027" ref_url="https://bugzilla.suse.com/1180027" source="BUGZILLA"/>
		<reference ref_id="1180029" ref_url="https://bugzilla.suse.com/1180029" source="BUGZILLA"/>
		<reference ref_id="1180031" ref_url="https://bugzilla.suse.com/1180031" source="BUGZILLA"/>
		<reference ref_id="1180052" ref_url="https://bugzilla.suse.com/1180052" source="BUGZILLA"/>
		<reference ref_id="1180086" ref_url="https://bugzilla.suse.com/1180086" source="BUGZILLA"/>
		<reference ref_id="1180117" ref_url="https://bugzilla.suse.com/1180117" source="BUGZILLA"/>
		<reference ref_id="1180258" ref_url="https://bugzilla.suse.com/1180258" source="BUGZILLA"/>
		<reference ref_id="1180506" ref_url="https://bugzilla.suse.com/1180506" source="BUGZILLA"/>
		<reference ref_id="1180559" ref_url="https://bugzilla.suse.com/1180559" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20669" ref_url="https://www.suse.com/security/cve/CVE-2018-20669/" source="CVE"/>
		<reference ref_id="CVE-2019-20934" ref_url="https://www.suse.com/security/cve/CVE-2019-20934/" source="CVE"/>
		<reference ref_id="CVE-2020-0444" ref_url="https://www.suse.com/security/cve/CVE-2020-0444/" source="CVE"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-27068" ref_url="https://www.suse.com/security/cve/CVE-2020-27068/" source="CVE"/>
		<reference ref_id="CVE-2020-27777" ref_url="https://www.suse.com/security/cve/CVE-2020-27777/" source="CVE"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-27825" ref_url="https://www.suse.com/security/cve/CVE-2020-27825/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="CVE-2020-4788" ref_url="https://www.suse.com/security/cve/CVE-2020-4788/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-28374: Fixed a Linux SCSI target issue (bsc#1178372).
- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180559).
- CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls (bsc#1179960).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180031).
- CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds check in the nl80211_policy policy of nl80211.c (bnc#1180086).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180029).
- CVE-2020-0444: Fixed a bad kfree due to a logic error in audit_data_to_entry (bnc#1180027).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bnc#1179745).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179745).
- CVE-2020-27777: Fixed a privilege escalation in the Run-Time Abstraction Services (RTAS) interface, affecting guests running on top of PowerVM or KVM hypervisors (bnc#1179107).
- CVE-2019-20934: Fixed a use-after-free in show_numa_stats() because NUMA fault statistics were inappropriately freed, aka CID-16d51a590a8c (bsc#1179663).
- CVE-2020-27786: Fixed a use after free in kernel midi subsystem snd_rawmidi_kernel_read1() (bsc#1179601).

The following non-security bugs were fixed:

- ACPI: PNP: compare the string length in the matching_id() (git-fixes).
- ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1 (git-fixes).
- ACPICA: Do not increment operation_region reference counts for field units (git-fixes).
- ALSA: ca0106: fix error code handling (git-fixes).
- ALSA: ctl: allow TLV read operation for callback type of element in locked case (git-fixes).
- ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO (git-fixes).
- ALSA: hda/ca0132 - Change Input Source enum strings (git-fixes).
- ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg (git-fixes).
- ALSA: hda/generic: Add option to enforce preferred_dacs pairs (git-fixes).
- ALSA: hda/hdmi: always check pin power status in i915 pin fixup (git-fixes).
- ALSA: hda/realtek - Add new codec supported for ALC897 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (git-fixes).
- ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (git-fixes).
- ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520 (git-fixes).
- ALSA: hda/realtek: Enable headset of ASUS UX482EG &amp; B9400CEA with ALC294 (git-fixes).
- ALSA: hda: Add NVIDIA codec IDs 9a &amp; 9d through a0 to patch table (git-fixes).
- ALSA: hda: Fix potential race in unsol event handler (git-fixes).
- ALSA: hda: Fix regressions on clear and reconfig sysfs (git-fixes).
- ALSA: info: Drop WARN_ON() from buffer NULL sanity check (git-fixes).
- ALSA: isa/wavefront: prevent out of bounds write in ioctl (git-fixes).
- ALSA: line6: Perform sanity check for each URB creation (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: pcm: oss: Fix potential out-of-bounds shift (git-fixes).
- ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check (git-fixes).
- ALSA: timer: Limit max amount of slave instances (git-fixes).
- ALSA: usb-audio: Add delay quirk for all Logitech USB devices (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16 (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2 (git-fixes).
- ALSA: usb-audio: add quirk for Denon DCD-1500RE (git-fixes).
- ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG) (git-fixes).
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Alpha S (git-fixes).
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight S (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware does not give back (git-fixes).
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (git-fixes).
- ALSA: usb-audio: Fix OOB access of mixer element list (git-fixes).
- ALSA: usb-audio: Fix potential out-of-bounds shift (git-fixes).
- ALSA: usb-audio: Fix race against the error recovery URB submission (git-fixes).
- ALSA: usb-audio: US16x08: fix value count for level meters (git-fixes).
- ASoC: arizona: Fix a wrong free in wm8997_probe (git-fixes).
- ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (git-fixes).
- ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed (git-fixes).
- ASoC: jz4740-i2s: add missed checks for clk_get() (git-fixes).
- ASoC: pcm3168a: The codec does not support S32_LE (git-fixes).
- ASoC: pcm: DRAIN support reactivation (git-fixes).
- ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile (git-fixes).
- ASoC: sti: fix possible sleep-in-atomic (git-fixes).
- ASoC: wm8904: fix regcache handling (git-fixes).
- ASoC: wm8998: Fix PM disable depth imbalance on error (git-fixes).
- ASoC: wm_adsp: Do not generate kcontrols without READ flags (git-fixes).
- ASoC: wm_adsp: remove 'ctl' from list on error in wm_adsp_create_control() (git-fixes).
- ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function (git-fixes).
- ath10k: Fix an error handling path (git-fixes).
- ath10k: fix backtrace on coredump (git-fixes).
- ath10k: fix get invalid tx rate for Mesh metric (git-fixes).
- ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq (git-fixes).
- ath10k: Release some resources in an error handling path (git-fixes).
- ath10k: Remove msdu from idr when management pkt send fails (git-fixes).
- ath6kl: fix enum-conversion warning (git-fixes).
- ath9k_htc: Discard undersized packets (git-fixes).
- ath9k_htc: Modify byte order for an error message (git-fixes).
- ath9k_htc: Silence undersized packet warnings (git-fixes).
- ath9k_htc: Use appropriate rs_datalen type (git-fixes).
- Avoid a GCC warning about '/*' within a comment.
- backlight: lp855x: Ensure regulators are disabled on probe failure (git-fixes).
- Bluetooth: add a mutex lock to avoid UAF in do_enale_set (git-fixes).
- Bluetooth: btusb: Fix detection of some fake CSR controllers with a bcdDevice val of 0x0134 (git-fixes).
- Bluetooth: Fix advertising duplicated flags (git-fixes).
- Bluetooth: Fix null pointer dereference in hci_event_packet() (git-fixes).
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (git-fixes).
- bnxt_en: Fix race when modifying pause settings (bsc#1050242 ).
- bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex (bsc#1050242).
- btmrvl: Fix firmware filename for sd8997 chipset (bsc#1172694).
- btrfs: fix use-after-free on readahead extent after failure to create it (bsc#1179963).
- btrfs: qgroup: do not commit transaction when we already hold the handle (bsc#1178634).
- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1174784).
- bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (git-fixes).
- can: mcp251x: add error check when wq alloc failed (git-fixes).
- can: softing: softing_netdev_open(): fix error handling (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- cfg80211: regulatory: Fix inconsistent format argument (git-fixes).
- cifs: add NULL check for ses-&gt;tcon_ipc (bsc#1178270).
- cifs: allow syscalls to be restarted in __smb_send_rqst() (bsc#1176956).
- cifs: fix check of tcon dfs in smb1 (bsc#1178270).
- cifs: fix potential use-after-free in cifs_echo_request() (bsc#1139944).
- cirrus: cs89x0: remove set but not used variable 'lp' (git-fixes).
- cirrus: cs89x0: use devm_platform_ioremap_resource() to simplify code (git-fixes).
- clk: at91: usb: continue if clk_hw_round_rate() return zero (git-fixes).
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (git-fixes).
- clk: qcom: Allow constant ratio freq tables for rcg (git-fixes).
- clk: qcom: msm8916: Fix the address location of pll-&gt;config_reg (git-fixes).
- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (git-fixes).
- clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1 (git-fixes).
- clk: sunxi-ng: Make sure divider tables have sentinel (git-fixes).
- clk: tegra: Fix duplicated SE clock entry (git-fixes).
- clk: tegra: Fix Tegra PMC clock out parents (git-fixes).
- clk: ti: composite: fix memory leak (git-fixes).
- clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call (git-fixes).
- clk: ti: Fix memleak in ti_fapll_synth_setup (git-fixes).
- clocksource/drivers/asm9260: Add a check for of_clk_get (git-fixes).
- coredump: fix core_pattern parse error (git-fixes).
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (git-fixes).
- cpufreq: loongson1: Add missing MODULE_ALIAS (git-fixes).
- cpufreq: scpi: Add missing MODULE_ALIAS (git-fixes).
- cpufreq: st: Add missing MODULE_DEVICE_TABLE (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (git-fixes).
- crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr() (git-fixes).
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (git-fixes).
- cxgb4: Fix offset when clearing filter byte counters (bsc#1064802 bsc#1066129).
- drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish (git-fixes).
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (git-fixes).
- drm/amd/display: remove useless if/else (git-fixes).
- drm/amdgpu: fix build_coefficients() argument (git-fixes).
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (git-fixes).
- drm/gma500: fix double free of gma_connector (git-fixes).
- drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] (bsc#1129770)
- drm/meson: dw-hdmi: Register a callback to disable the regulator (git-fixes).
- drm/msm/dpu: Add newline to printks (git-fixes).
- drm/msm/dsi_phy_10nm: implement PHY disabling (git-fixes).
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (git-fixes).
- drm/rockchip: Avoid uninitialized use of endpoint id in LVDS (git-fixes).
- epoll: Keep a reference on files added to the check list (bsc#1180031).
- ext4: correctly report 'not supported' for {usr,grp}jquota when !CONFIG_QUOTA (bsc#1179672).
- ext4: fix bogus warning in ext4_update_dx_flag() (bsc#1179716).
- ext4: fix error handling code in add_new_gdb (bsc#1179722).
- ext4: fix invalid inode checksum (bsc#1179723).
- ext4: fix leaking sysfs kobject after failed mount (bsc#1179670).
- ext4: limit entries returned when counting fsmap records (bsc#1179671).
- ext4: unlock xattr_sem properly in ext4_inline_data_truncate() (bsc#1179673).
- extcon: max77693: Fix modalias string (git-fixes).
- fbcon: Fix user font detection test at fbcon_resize(). (bsc#1112178) Backporting changes: 	* updated path drivers/video/fbcon/core to drivers/video/console
- fbcon: Remove the superfluous break (bsc#1129770) Backporting changes: 	* updated path drivers/video/fbcon/core to drivers/video/console 	* context changes
- firmware: qcom: scm: Ensure 'a0' status code is treated as signed (git-fixes).
- fix regression in 'epoll: Keep a reference on files added to the check list' (bsc#1180031, git-fixes).
- forcedeth: use per cpu to collect xmit/recv statistics (git-fixes).
- fs: Do not invalidate page buffers in block_write_full_page() (bsc#1179711).
- geneve: change from tx_error to tx_dropped on missing metadata (git-fixes).
- genirq/irqdomain: Add an irq_create_mapping_affinity() function (bsc#1065729).
- gpio: arizona: handle pm_runtime_get_sync failure case (git-fixes).
- gpio: gpio-grgpio: fix possible sleep-in-atomic-context bugs in grgpio_irq_map/unmap() (git-fixes).
- gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP (git-fixes).
- gpio: max77620: Fixup debounce delays (git-fixes).
- gpio: max77620: Use correct unit for debounce times (git-fixes).
- gpio: mpc8xxx: Add platform device to gpiochip-&gt;parent (git-fixes).
- gpio: mvebu: fix potential user-after-free on probe (git-fixes).
- gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism (git-fixes).
- gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 BYT + AXP288 model (git-fixes).
- gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 CHT + AXP288 model (git-fixes).
- gpiolib: acpi: Correct comment for HP x2 10 honor_wakeup quirk (git-fixes).
- gpiolib: acpi: Rework honor_wakeup option into an ignore_wake option (git-fixes).
- gpiolib: acpi: Turn dmi_system_id table into a generic quirk table (git-fixes).
- gpiolib: fix up emulated open drain outputs (git-fixes).
- HID: Add another Primax PIXART OEM mouse quirk (git-fixes).
- HID: apple: Disable Fn-key key-re-mapping on clone keyboards (git-fixes).
- HID: core: check whether Usage Page item is after Usage ID items (git-fixes).
- HID: core: Correctly handle ReportSize being zero (git-fixes).
- HID: cypress: Support Varmilo Keyboards' media hotkeys (git-fixes).
- HID: Fix slab-out-of-bounds read in hid_field_extract (bsc#1180052).
- HID: hid-sensor-hub: Fix issue with devices with no report ID (git-fixes).
- HID: Improve Windows Precision Touchpad detection (git-fixes).
- HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() (git-fixes).
- HID: logitech-hidpp: Silence intermittent get_battery_capacity errors (git-fixes).
- HSI: omap_ssi: Do not jump to free ID in ssi_add_controller() (git-fixes).
- hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow (git-fixes).
- hwmon: (jc42) Fix name to have no illegal characters (git-fixes).
- i2c: algo: pca: Reapply i2c bus settings after reset (git-fixes).
- i2c: i801: Fix resume bug (git-fixes).
- i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets (git-fixes).
- i2c: pxa: clear all master action bits in i2c_pxa_stop_message() (git-fixes).
- i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output (git-fixes).
- i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (git-fixes).
- ibmvnic: add some debugs (bsc#1179896 ltc#190255).
- ibmvnic: avoid memset null scrq msgs (bsc#1044767 ltc#155231 git-fixes).
- ibmvnic: continue fatal error reset after passive init (bsc#1171078 ltc#184239 git-fixes).
- ibmvnic: delay next reset if hard reset fails (bsc#1094840 ltc#167098 git-fixes).
- ibmvnic: enhance resetting status check during module exit (bsc#1065729).
- ibmvnic: fix call_netdevice_notifiers in do_reset (bsc#1115431 ltc#171853 git-fixes).
- ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues (bsc#1040855 ltc#155067 git-fixes).
- ibmvnic: fix: NULL pointer dereference (bsc#1044767 ltc#155231 git-fixes).
- ibmvnic: notify peers when failover and migration happen (bsc#1044120 ltc#155423 git-fixes).
- ibmvnic: restore adapter state on failed reset (bsc#1152457 ltc#174432 git-fixes).
- igc: Fix returning wrong statistics (bsc#1118657).
- iio: adc: max1027: Reset the device at probe time (git-fixes).
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (git-fixes).
- iio: bmp280: fix compensation of humidity (git-fixes).
- iio: buffer: Fix demux update (git-fixes).
- iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw() (git-fixes).
- iio: fix center temperature of bmc150-accel-core (git-fixes).
- iio: humidity: hdc100x: fix IIO_HUMIDITYRELATIVE channel reporting (git-fixes).
- iio: light: bh1750: Resolve compiler warning and make code more readable (git-fixes).
- iio: srf04: fix wrong limitation in distance measuring (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- iio:pressure:mpl3115: Force alignment of buffer (git-fixes).
- inet_ecn: Fix endianness of checksum update when setting ECT(1) (git-fixes).
- Input: ads7846 - fix integer overflow on Rt calculation (git-fixes).
- Input: ads7846 - fix race that causes missing releases (git-fixes).
- Input: ads7846 - fix unaligned access on 7845 (git-fixes).
- Input: atmel_mxt_ts - disable IRQ across suspend (git-fixes).
- Input: cm109 - do not stomp on control URB (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events (git-fixes).
- Input: cyapa_gen6 - fix out-of-bounds stack access (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (git-fixes).
- Input: i8042 - add Acer laptops to the i8042 reset list (git-fixes).
- Input: i8042 - add ByteSpeed touchpad to noloop table (git-fixes).
- Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists (git-fixes).
- Input: i8042 - allow insmod to succeed on devices without an i8042 controller (git-fixes).
- Input: i8042 - fix error return code in i8042_setup_aux() (git-fixes).
- Input: omap4-keypad - fix runtime PM error handling (git-fixes).
- Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen (git-fixes).
- Input: trackpoint - add new trackpoint variant IDs (git-fixes).
- Input: trackpoint - enable Synaptics trackpoints (git-fixes).
- Input: xpad - support Ardwiino Controllers (git-fixes).
- ipw2x00: Fix -Wcast-function-type (git-fixes).
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (git-fixes).
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (git-fixes).
- iwlwifi: mvm: fix unaligned read of rx_pkt_status (git-fixes).
- iwlwifi: pcie: limit memory read spin time (git-fixes).
- kABI fix for g2d (git-fixes).
- kABI workaround for dsa/b53 changes (git-fixes).
- kABI workaround for HD-audio generic parser (git-fixes).
- kABI workaround for net/ipvlan changes (git-fixes).
- kABI: ath10k: move a new structure member to the end (git-fixes).
- kABI: genirq: add back irq_create_mapping (bsc#1065729).
- kernel-source.spec: Fix build with rpm 4.16 (boo#1179015). RPM_BUILD_ROOT is cleared before %%install. Do the unpack into RPM_BUILD_ROOT in %%install
- kernel-{binary,source}.spec.in: do not create loop symlinks (bsc#1179082)
- kgdb: Fix spurious true from in_dbg_master() (git-fixes).
- KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (bsc#1112178).
- mac80211: allow rx of mesh eapol frames with default rx key (git-fixes).
- mac80211: Check port authorization in the ieee80211_tx_dequeue() case (git-fixes).
- mac80211: do not set set TDLS STA bandwidth wider than possible (git-fixes).
- mac80211: fix authentication with iwlwifi/mvm (git-fixes).
- mac80211: fix use of skb payload instead of header (git-fixes).
- mac80211: mesh: fix mesh_pathtbl_init() error path (git-fixes).
- matroxfb: avoid -Warray-bounds warning (git-fixes).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps() (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/cluster: fix deadlock when node is doing resync job (bsc#1163727).
- md/raid5: fix oops during stripe resizing (git-fixes).
- media: am437x-vpfe: Setting STD to current value is not an error (git-fixes).
- media: cec-funcs.h: add status_req checks (git-fixes).
- media: cx88: Fix some error handling path in 'cx8800_initdev()' (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: i2c: mt9v032: fix enum mbus codes and frame sizes (git-fixes).
- media: i2c: ov2659: Fix missing 720p register config (git-fixes).
- media: i2c: ov2659: fix s_stream return value (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: mtk-mdp: Fix a refcounting bug on error in init (git-fixes).
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (git-fixes).
- media: platform: add missing put_device() call in mtk_jpeg_probe() and mtk_jpeg_remove() (git-patches).
- media: pvrusb2: Fix oops on tear-down when radio support is not present (git-fixes).
- media: s5p-g2d: Fix a memory leak in an error handling path in 'g2d_probe()' (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio() (git-fixes).
- media: si470x-i2c: add missed operations in remove (git-fixes).
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling case (git-fixes).
- media: sti: bdisp: fix a possible sleep-in-atomic-context bug in bdisp_device_run() (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous (git-fixes).
- media: ti-vpe: vpe: ensure buffers are cleaned up properly in abort cases (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence number (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid sizeimage (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure causing a kernel panic (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format (git-fixes).
- media: ti-vpe: vpe: Make sure YUYV is set as default format (git-fixes).
- media: uvcvideo: Set media controller entity functions (git-fixes).
- media: uvcvideo: Silence shift-out-of-bounds warning (git-fixes).
- media: v4l2-async: Fix trivial documentation typo (git-fixes).
- media: v4l2-core: fix touch support in v4l_g_fmt (git-fixes).
- media: v4l2-device.h: Explicitly compare grp{id,mask} to zero in v4l2_device macros (git-fixes).
- mei: bus: do not clean driver pointer (git-fixes).
- mei: protect mei_cl_mtu from null dereference (git-fixes).
- memstick: fix a double-free bug in memstick_check (git-fixes).
- memstick: r592: Fix error return in r592_probe() (git-fixes).
- mfd: rt5033: Fix errorneous defines (git-fixes).
- mfd: wm8994: Fix driver operation if loaded as modules (git-fixes).
- mlxsw: core: Fix memory leak on module removal (bsc#1112374).
- mm,memory_failure: always pin the page in madvise_inject_error (bsc#1180258).
- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (bsc#1179204).
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/tls: Fix kmap usage (bsc#1109837).
- net/tls: missing received data after fast remote close (bsc#1109837).
- net/x25: prevent a couple of overflows (bsc#1178590).
- net: aquantia: Fix aq_vec_isr_legacy() return value (git-fixes).
- net: aquantia: fix LRO with FCS error (git-fixes).
- net: DCB: Validate DCB_ATTR_DCB_BUFFER argument (bsc#1103990 ).
- net: dsa: b53: Always use dev-&gt;vlan_enabled in b53_configure_vlan() (git-fixes).
- net: dsa: b53: Ensure the default VID is untagged (git-fixes).
- net: dsa: b53: Fix default VLAN ID (git-fixes).
- net: dsa: b53: Properly account for VLAN filtering (git-fixes).
- net: dsa: bcm_sf2: Do not assume DSA master supports WoL (git-fixes).
- net: dsa: bcm_sf2: potential array overflow in bcm_sf2_sw_suspend() (git-fixes).
- net: dsa: qca8k: remove leftover phy accessors (git-fixes).
- net: ena: fix packet's addresses for rx_offset feature (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (git-fixes).
- net: ethernet: ti: cpsw: fix runtime_pm while add/kill vlan (git-fixes).
- net: hisilicon: Fix signedness bug in hix5hd2_dev_probe() (git-fixes).
- net: macb: add missing barriers when reading descriptors (git-fixes).
- net: macb: fix dropped RX frames due to a race (git-fixes).
- net: macb: fix error format in dev_err() (git-fixes).
- net: macb: fix random memory corruption on RX with 64-bit DMA (git-fixes).
- net: pasemi: fix an use-after-free in pasemi_mac_phy_init() (git-fixes).
- net: phy: Avoid multiple suspends (git-fixes).
- net: qed: fix 'maybe uninitialized' warning (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: qed: fix async event callbacks unregistering (bsc#1104393 bsc#1104389).
- net: qede: fix PTP initialization on recovery (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: qede: fix use-after-free on recovery and AER handling (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: seeq: Fix the function used to release some memory in an error handling path (git-fixes).
- net: sh_eth: fix a missing check of of_get_phy_mode (git-fixes).
- net: sonic: replace dev_kfree_skb in sonic_send_packet (git-fixes).
- net: sonic: return NETDEV_TX_OK if failed to map buffer (git-fixes).
- net: stmmac: fix csr_clk can't be zero issue (git-fixes).
- net: stmmac: Fix reception of Broadcom switches tags (git-fixes).
- net: thunderx: use spin_lock_bh in nicvf_set_rx_mode_task() (bsc#1110096).
- net: usb: sr9800: fix uninitialized local variable (git-fixes).
- net:ethernet:aquantia: Extra spinlocks removed (git-fixes).
- net_sched: fix a memory leak in atm_tc_init() (bsc#1056657 bsc#1056653 bsc#1056787).
- nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame (git-fixes).
- nfc: s3fwrn5: Release the nfc firmware (git-fixes).
- nfc: st95hf: Fix memleak in st95hf_in_send_cmd (git-fixes).
- nfp: use correct define to return NONE fec (bsc#1109837).
- NFS: fix nfs_path in case of a rename retry (git-fixes).
- NFSD: Add missing NFSv2 .pc_func methods (git-fixes).
- NFSv4.2: fix client's attribute cache management for copy_file_range (git-fixes).
- NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag (git-fixes).
- ocfs2: fix unbalanced locking (bsc#1180506).
- ocfs2: initialize ip_next_orphan (bsc#1179724).
- orinoco: Move context allocation after processing the skb (git-fixes).
- parport: load lowlevel driver if ports not found (git-fixes).
- PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges (git-fixes).
- PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge (git-fixes).
- PCI: Do not disable decoding when mmio_always_on is set (git-fixes).
- PCI: Fix pci_slot_release() NULL pointer dereference (git-fixes).
- phy: Revert toggling reset changes (git-fixes).
- pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler() (git-fixes).
- pinctrl: amd: fix npins for uart0 in kerncz_groups (git-fixes).
- pinctrl: amd: remove debounce filter setting in IRQ type setting (git-fixes).
- pinctrl: baytrail: Avoid clearing debounce value when turning it off (git-fixes).
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (git-fixes).
- pinctrl: merrifield: Set default bias in case no particular value given (git-fixes).
- pinctrl: sh-pfc: sh7734: Fix duplicate TCLK1_B (git-fixes).
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (git-fixes).
- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (git-fixes).
- platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (git-fixes).
- platform/x86: mlx-platform: remove an unused variable (git-fixes).
- platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (git-fixes).
- platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (git-fixes).
- PM / hibernate: memory_bm_find_bit(): Tighten node optimisation (git-fixes).
- PM: ACPI: Output correct message on target power state (git-fixes).
- PM: hibernate: Freeze kernel threads in software_resume() (git-fixes).
- PM: hibernate: remove the bogus call to get_gendisk() in software_resume() (git-fixes).
- pNFS/flexfiles: Fix list corruption if the mirror count changes (git-fixes).
- power: supply: bq24190_charger: fix reference leak (git-fixes).
- power: supply: bq27xxx_battery: Silence deferred-probe error (git-fixes).
- powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (bsc#1065729).
- powerpc/64s/pseries: Fix hash tlbiel_all_isa300 for guest kernels (bsc#1179888 ltc#190253).
- powerpc/64s: Fix hash ISA v3.0 TLBIEL instruction generation (bsc#1055117 ltc#159753 git-fixes bsc#1179888 ltc#190253).
- powerpc/pci: Fix broken INTx configuration via OF (bsc#1172145 ltc#184630).
- powerpc/pci: Remove legacy debug code (bsc#1172145 ltc#184630 git-fixes).
- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145 ltc#184630).
- powerpc/pci: Use of_irq_parse_and_map_pci() helper (bsc#1172145 ltc#184630).
- powerpc/perf: Fix crash with is_sier_available when pmu is not set (bsc#1179578 ltc#189313).
- powerpc/pseries/hibernation: remove redundant cacheinfo update (bsc#1138374 ltc#178199 git-fixes).
- powerpc/pseries: Pass MSI affinity to irq_create_mapping() (bsc#1065729).
- powerpc/smp: Add __init to init_big_cores() (bsc#1109695 ltc#171067 git-fixes).
- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- powerpc: Convert to using %pOF instead of full_name (bsc#1172145 ltc#184630).
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (bsc#1065729).
- ppp: remove the PPPIOCDETACH ioctl (git-fixes).
- pwm: lp3943: Dynamically allocate PWM chip base (git-fixes).
- qed: fix error return code in qed_iwarp_ll2_start() (bsc#1050536 bsc#1050545).
- qed: suppress 'do not support RoCE &amp; iWARP' flooding on HW init (bsc#1050536 bsc#1050545).
- qed: suppress false-positives interrupt error messages on HW init (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- quota: clear padding in v2r1_mem2diskdqb() (bsc#1179714).
- radeon: insert 10ms sleep in dce5_crtc_load_lut (git-fixes).
- ravb: Fix use-after-free ravb_tstamp_skb (git-fixes).
- RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532 (bsc#1050545).
- RDMA/qedr: Fix memory leak in iWARP CM (bsc#1050545 ).
- regmap: debugfs: check count when read regmap file (git-fixes).
- regmap: dev_get_regmap_match(): fix string comparison (git-fixes).
- regmap: Remove duplicate `type` field from regmap `regcache_sync` trace event (git-fixes).
- regulator: max8907: Fix the usage of uninitialized variable in max8907_regulator_probe() (git-fixes).
- regulator: pfuze100-regulator: Variable 'val' in pfuze100_regulator_probe() could be uninitialized (git-fixes).
- regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone (git-fixes).
- reiserfs: Fix oops during mount (bsc#1179715).
- reiserfs: Initialize inode keys properly (bsc#1179713).
- remoteproc: Fix wrong rvring index computation (git-fixes).
- rfkill: Fix incorrect check to avoid NULL pointer dereference (git-fixes).
- rtc: 88pm860x: fix possible race condition (git-fixes).
- rtc: hym8563: enable wakeup when applicable (git-fixes).
- rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot (git-fixes).
- rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt() (git-fixes).
- s390/bpf: Fix multiple tail calls (git-fixes).
- s390/cpuinfo: show processor physical address (git-fixes).
- s390/cpum_sf.c: fix file permission for cpum_sfb_size (git-fixes).
- s390/dasd: fix hanging device offline processing (bsc#1144912).
- s390/dasd: fix null pointer dereference for ERP requests (git-fixes).
- s390/pci: fix CPU address in MSI for directed IRQ (git-fixes).
- s390/qeth: fix af_iucv notification race (git-fixes).
- s390/qeth: fix tear down of async TX buffers (git-fixes).
- s390/qeth: make af_iucv TX notification call more robust (git-fixes).
- s390/stp: add locking to sysfs functions (git-fixes).
- s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (git-fixes).
- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- scsi: lpfc: Add FDMI Vendor MIB support (bsc#1164780).
- scsi: lpfc: Convert abort handling to SLI-3 and SLI-4 handlers (bsc#1164780).
- scsi: lpfc: Convert SCSI I/O completions to SLI-3 and SLI-4 handlers (bsc#1164780).
- scsi: lpfc: Convert SCSI path to use common I/O submission path (bsc#1164780).
- scsi: lpfc: Correct null ndlp reference on routine exit (bsc#1164780).
- scsi: lpfc: Drop nodelist reference on error in lpfc_gen_req() (bsc#1164780).
- scsi: lpfc: Enable common send_io interface for SCSI and NVMe (bsc#1164780).
- scsi: lpfc: Enable common wqe_template support for both SCSI and NVMe (bsc#1164780).
- scsi: lpfc: Enlarge max_sectors in scsi host templates (bsc#1164780).
- scsi: lpfc: Extend the RDF FPIN Registration descriptor for additional events (bsc#1164780).
- scsi: lpfc: Fix duplicate wq_create_version check (bsc#1164780).
- scsi: lpfc: Fix fall-through warnings for Clang (bsc#1164780).
- scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery (bsc#1164780).
- scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc() (bsc#1164780).
- scsi: lpfc: Fix memory leak on lcb_context (bsc#1164780).
- scsi: lpfc: Fix missing prototype for lpfc_nvmet_prep_abort_wqe() (bsc#1164780).
- scsi: lpfc: Fix missing prototype warning for lpfc_fdmi_vendor_attr_mi() (bsc#1164780).
- scsi: lpfc: Fix NPIV discovery and Fabric Node detection (bsc#1164780).
- scsi: lpfc: Fix NPIV Fabric Node reference counting (bsc#1164780).
- scsi: lpfc: Fix pointer defereference before it is null checked issue (bsc#1164780).
- scsi: lpfc: Fix refcounting around SCSI and NVMe transport APIs (bsc#1164780).
- scsi: lpfc: Fix removal of SCSI transport device get and put on dev structure (bsc#1164780).
- scsi: lpfc: Fix scheduling call while in softirq context in lpfc_unreg_rpi (bsc#1164780).
- scsi: lpfc: Fix set but not used warnings from Rework remote port lock handling (bsc#1164780).
- scsi: lpfc: Fix set but unused variables in lpfc_dev_loss_tmo_handler() (bsc#1164780).
- scsi: lpfc: Fix spelling mistake 'Cant' -&gt; 'Can't' (bsc#1164780).
- scsi: lpfc: Fix variable 'vport' set but not used in lpfc_sli4_abts_err_handler() (bsc#1164780).
- scsi: lpfc: lpfc_attr: Demote kernel-doc format for redefined functions (bsc#1164780).
- scsi: lpfc: lpfc_attr: Fix-up a bunch of kernel-doc misdemeanours (bsc#1164780).
- scsi: lpfc: lpfc_debugfs: Fix a couple of function documentation issues (bsc#1164780).
- scsi: lpfc: lpfc_scsi: Fix a whole host of kernel-doc issues (bsc#1164780).
- scsi: lpfc: Refactor WQE structure definitions for common use (bsc#1164780).
- scsi: lpfc: Reject CT request for MIB commands (bsc#1164780).
- scsi: lpfc: Remove dead code on second !ndlp check (bsc#1164780).
- scsi: lpfc: Remove ndlp when a PLOGI/ADISC/PRLI/REG_RPI ultimately fails (bsc#1164780).
- scsi: lpfc: Remove set but not used 'qp' (bsc#1164780).
- scsi: lpfc: Remove unneeded variable 'status' in lpfc_fcp_cpu_map_store() (bsc#1164780).
- scsi: lpfc: Removed unused macros in lpfc_attr.c (bsc#1164780).
- scsi: lpfc: Rework locations of ndlp reference taking (bsc#1164780).
- scsi: lpfc: Rework remote port lock handling (bsc#1164780).
- scsi: lpfc: Rework remote port ref counting and node freeing (bsc#1164780).
- scsi: lpfc: Unsolicited ELS leaves node in incorrect state while dropping it (bsc#1164780).
- scsi: lpfc: Update changed file copyrights for 2020 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.4 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.5 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.6 (bsc#1164780).
- scsi: lpfc: Use generic power management (bsc#1164780).
- scsi: qla2xxx: Change post del message from debug level to log level (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Do not check for fw_started while posting NVMe command (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Do not consume srb greedily (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix compilation issue in PPC systems (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix crash during driver load on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix device loss on 4G and older HBAs (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix flash update in 28XX adapters on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix FW initialization error on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix N2N and NVMe connect retry failure (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix return of uninitialized value in rval (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix the call trace for flush workqueue (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Handle aborts correctly for port undergoing deletion (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Initialize variable in qla8044_poll_reg() (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Limit interrupt vectors to number of CPUs (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Move sess cmd list/lock to driver (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove in_interrupt() from qla82xx-specific code (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove in_interrupt() from qla83xx-specific code (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: remove incorrect sparse #ifdef (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove trailing semicolon in macro definition (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Return EBUSY on fcport deletion (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Tear down session if FW say it is down (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Update version to 10.02.00.104-k (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Use constant when it is known (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: Remove unneeded break statements (bsc#1164780).
- scsi: storvsc: Fix error return in storvsc_probe() (git-fixes).
- scsi: target: tcm_qla2xxx: Remove BUG_ON(in_interrupt()) (bsc#1172538 bsc#1179142 bsc#1179810).
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (git-fixes).
- serial: 8250_pci: Add Realtek 816a and 816b (git-fixes).
- serial: amba-pl011: Make sure we initialize the port.lock spinlock (git-fixes).
- serial: ar933x_uart: set UART_CS_{RX,TX}_READY_ORIDE (git-fixes).
- serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init (git-fixes).
- serial_core: Check for port state when tty is in error state (git-fixes).
- SMB3: Honor 'handletimeout' flag for multiuser mounts (bsc#1176558).
- SMB3: Honor 'posix' flag for multiuser mounts (bsc#1176559).
- SMB3: Honor lease disabling for multiuser mounts (git-fixes).
- soc/tegra: fuse: Fix index bug in get_process_id (git-fixes).
- soc: imx: gpc: fix power up sequencing (git-fixes).
- soc: mediatek: Check if power domains can be powered on at boot time (git-fixes).
- soc: qcom: smp2p: Safely acquire spinlock without IRQs (git-fixes).
- soc: ti: Fix reference imbalance in knav_dma_probe (git-fixes).
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (git-fixes).
- spi: Add call to spi_slave_abort() function when spidev driver is released (git-fixes).
- spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (git-fixes).
- spi: davinci: Fix use-after-free on unbind (git-fixes).
- spi: dw: Enable interrupts in accordance with DMA xfer mode (git-fixes).
- spi: dw: Fix Rx-only DMA transfers (git-fixes).
- spi: dw: Return any value retrieved from the dma_transfer callback (git-fixes).
- spi: Fix memory leak on splited transfers (git-fixes).
- spi: img-spfi: fix potential double release (git-fixes).
- spi: img-spfi: fix reference leak in img_spfi_resume (git-fixes).
- spi: pic32: Do not leak DMA channels in probe error path (git-fixes).
- spi: pxa2xx: Add missed security checks (git-fixes).
- spi: spi-cavium-thunderx: Add missing pci_release_regions() (git-fixes).
- spi: spi-loopback-test: Fix out-of-bounds read (git-fixes).
- spi: spi-mem: Fix passing zero to 'PTR_ERR' warning (git-fixes).
- spi: spi-mem: fix reference leak in spi_mem_access_start (git-fixes).
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (git-fixes).
- spi: spidev: fix a potential use-after-free in spidev_release() (git-fixes).
- spi: st-ssc4: add missed pm_runtime_disable (git-fixes).
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (git-fixes).
- spi: tegra114: fix reference leak in tegra spi ops (git-fixes).
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (git-fixes).
- spi: tegra20-slink: add missed clk_unprepare (git-fixes).
- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (git-fixes).
- splice: only read in as much information as there is pipe buffer space (bsc#1179520).
- staging: comedi: check validity of wMaxPacketSize of usb endpoints found (git-fixes).
- staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value (git-fixes).
- staging: comedi: mf6x4: Fix AI end-of-conversion detection (git-fixes).
- staging: olpc_dcon: add a missing dependency (git-fixes).
- staging: olpc_dcon: Do not call platform_device_unregister() in dcon_probe() (git-fixes).
- staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21 (git-fixes).
- staging: rtl8188eu: Add device id for MERCUSYS MW150US v2 (git-fixes).
- staging: rtl8188eu: fix possible null dereference (git-fixes).
- staging: rtl8192u: fix multiple memory leaks on error path (git-fixes).
- staging: vt6656: set usb_set_intfdata on driver fail (git-fixes).
- staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() (git-fixes).
- staging: wlan-ng: properly check endpoint types (git-fixes).
- sunrpc: fix copying of multiple pages in gss_read_proxy_verf() (bsc#1103992).
- sunrpc: fixed rollback in rpc_gssd_dummy_populate() (git-fixes).
- sunrpc: Properly set the @subbuf parameter of xdr_buf_subsegment() (git-fixes).
- sunrpc: The RDMA back channel mustn't disappear while requests are outstanding (git-fixes).
- svcrdma: fix bounce buffers for unaligned offsets and multiple pages (bsc#1103992).
- svcrdma: Fix page leak in svc_rdma_recv_read_chunk() (bsc#1103992).
- tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (bsc#1109837).
- thunderbolt: Use 32-bit writes when writing ring producer/consumer (git-fixes).
- timer: Fix wheel index calculation on last level (git fixes)
- timer: Prevent base-&gt;clk from moving backward (git-fixes)
- tty: always relink the port (git-fixes).
- tty: Fix -&gt;pgrp locking in tiocspgrp() (git-fixes).
- tty: link tty and port before configuring it as console (git-fixes).
- tty: synclink_gt: Adjust indentation in several functions (git-fixes).
- tty: synclinkmp: Adjust indentation in several functions (git-fixes).
- tty:serial:mvebu-uart:fix a wrong return (git-fixes).
- uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define (git-fixes).
- uapi/if_ether.h: prevent redefinition of struct ethhdr (git-fixes).
- usb: add RESET_RESUME quirk for Snapscan 1212 (git-fixes).
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (git-fixes).
- usb: dummy-hcd: Fix uninitialized array use in init() (git-fixes).
- usb: dwc2: Fix IN FIFO allocation (git-fixes).
- usb: dwc3: remove the call trace of USBx_GFLADJ (git-fixes).
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (git-fixes).
- usb: Fix: Do not skip endpoint descriptors with maxpacket=0 (git-fixes).
- usb: fsl: Check memory resource before releasing it (git-fixes).
- usb: gadget: composite: Fix possible double free memory bug (git-fixes).
- usb: gadget: configfs: fix concurrent issue between composite APIs (git-fixes).
- usb: gadget: configfs: Fix missing spin_lock_init() (git-fixes).
- usb: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- usb: gadget: f_fs: Use local copy of descriptors for userspace copy (git-fixes).
- usb: gadget: f_midi: setup SuperSpeed Plus descriptors (git-fixes).
- usb: gadget: f_rndis: fix bitrate for SuperSpeed and above (git-fixes).
- usb: gadget: ffs: ffs_aio_cancel(): Save/restore IRQ flags (git-fixes).
- usb: gadget: fix wrong endpoint desc (git-fixes).
- usb: gadget: goku_udc: fix potential crashes in probe (git-fixes).
- usb: gadget: net2280: fix memory leak on probe error handling paths (git-fixes).
- usb: gadget: serial: fix Tx stall after buffer overflow (git-fixes).
- usb: gadget: udc: fix possible sleep-in-atomic-context bugs in gr_probe() (git-fixes).
- usb: gadget: udc: gr_udc: fix memleak on error handling path in gr_ep_init() (git-fixes).
- usb: hso: Fix debug compile warning on sparc32 (git-fixes).
- usb: ldusb: use unsigned size format specifiers (git-fixes).
- usb: musb: omap2430: Get rid of musb .set_vbus for omap2430 glue (git-fixes).
- usb: oxu210hp-hcd: Fix memory leak in oxu_create (git-fixes).
- usb: serial: ch341: add new Product ID for CH341A (git-fixes).
- usb: serial: ch341: sort device-id entries (git-fixes).
- usb: serial: digi_acceleport: clean up modem-control handling (git-fixes).
- usb: serial: digi_acceleport: clean up set_termios (git-fixes).
- usb: serial: digi_acceleport: fix write-wakeup deadlocks (git-fixes).
- usb: serial: digi_acceleport: remove in_interrupt() usage.
- usb: serial: digi_acceleport: remove redundant assignment to pointer priv (git-fixes).
- usb: serial: digi_acceleport: rename tty flag variable (git-fixes).
- usb: serial: digi_acceleport: use irqsave() in USB's complete callback (git-fixes).
- usb: serial: keyspan_pda: fix dropped unthrottle interrupts (git-fixes).
- usb: serial: keyspan_pda: fix stalled writes (git-fixes).
- usb: serial: keyspan_pda: fix tx-unthrottle use-after-free (git-fixes).
- usb: serial: keyspan_pda: fix write deadlock (git-fixes).
- usb: serial: keyspan_pda: fix write unthrottling (git-fixes).
- usb: serial: keyspan_pda: fix write-wakeup use-after-free (git-fixes).
- usb: serial: kl5kusb105: fix memleak on open (git-fixes).
- usb: serial: mos7720: fix parallel-port state restore (git-fixes).
- usb: serial: option: add Fibocom NL668 variants (git-fixes).
- usb: serial: option: add interface-number sanity check to flag handling (git-fixes).
- usb: serial: option: add support for Thales Cinterion EXS82 (git-fixes).
- usb: serial: option: fix Quectel BG96 matching (git-fixes).
- usb: Skip endpoints with 0 maxpacket length (git-fixes).
- usb: UAS: introduce a quirk to set no_write_same (git-fixes).
- usb: usbfs: Suppress problematic bind and unbind uevents (git-fixes).
- usblp: poison URBs upon disconnect (git-fixes).
- usbnet: ipheth: fix connectivity with iOS 14 (git-fixes).
- video: fbdev: neofb: fix memory leak in neo_scan_monitor() (git-fixes).
- vt: do not hardcode the mem allocation upper bound (git-fixes).
- vt: Reject zero-sized screen buffer size (git-fixes).
- watchdog: coh901327: add COMMON_CLK dependency (git-fixes).
- watchdog: da9062: do not ping the hw during stop() (git-fixes).
- watchdog: da9062: No need to ping manually before setting timeout (git-fixes).
- watchdog: qcom: Avoid context switch in restart handler (git-fixes).
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (git-fixes).
- wimax: fix duplicate initializer warning (git-fixes).
- wireless: Use linux/stddef.h instead of stddef.h (git-fixes).
- wireless: Use offsetof instead of custom macro (git-fixes).
- x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz (bsc#1112178).
- x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes (bsc#1112178).
- x86/mm/ident_map: Check for errors from ident_pud_init() (bsc#1112178).
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (bsc#1112178).
- x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak (bsc#1112178).
- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (bsc#1112178).
- x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak (bsc#1112178).
- x86/resctrl: Remove unused struct mbm_state::chunks_bw (bsc#1112178).
- x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb (bsc#1112178).
- x86/tracing: Introduce a static key for exception tracing (bsc#1179895).
- x86/traps: Simplify pagefault tracing logic (bsc#1179895).
- x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (bsc#1112178).
- xhci: Give USB2 ports time to enter U3 in bus suspend (git-fixes).
- xprtrdma: fix incorrect header size calculations (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-14"/>
	<updated date="2021-01-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1040855">SUSE bug 1040855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044120">SUSE bug 1044120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044767">SUSE bug 1044767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056653">SUSE bug 1056653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056657">SUSE bug 1056657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094840">SUSE bug 1094840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104389">SUSE bug 1104389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104393">SUSE bug 1104393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109695">SUSE bug 1109695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110096">SUSE bug 1110096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115431">SUSE bug 1115431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118657">SUSE bug 1118657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138374">SUSE bug 1138374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139944">SUSE bug 1139944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144912">SUSE bug 1144912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152457">SUSE bug 1152457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163727">SUSE bug 1163727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171078">SUSE bug 1171078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172145">SUSE bug 1172145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172694">SUSE bug 1172694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174784">SUSE bug 1174784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174852">SUSE bug 1174852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176558">SUSE bug 1176558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176559">SUSE bug 1176559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176956">SUSE bug 1176956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178270">SUSE bug 1178270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178372">SUSE bug 1178372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178401">SUSE bug 1178401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178590">SUSE bug 1178590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178634">SUSE bug 1178634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178762">SUSE bug 1178762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179014">SUSE bug 1179014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179015">SUSE bug 1179015</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179045">SUSE bug 1179045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179082">SUSE bug 1179082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179107">SUSE bug 1179107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179142">SUSE bug 1179142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179204">SUSE bug 1179204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179419">SUSE bug 1179419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179444">SUSE bug 1179444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179520">SUSE bug 1179520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179578">SUSE bug 1179578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179601">SUSE bug 1179601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179663">SUSE bug 1179663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179666">SUSE bug 1179666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179670">SUSE bug 1179670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179671">SUSE bug 1179671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179672">SUSE bug 1179672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179673">SUSE bug 1179673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179711">SUSE bug 1179711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179713">SUSE bug 1179713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179714">SUSE bug 1179714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179715">SUSE bug 1179715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179716">SUSE bug 1179716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179722">SUSE bug 1179722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179723">SUSE bug 1179723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179724">SUSE bug 1179724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179745">SUSE bug 1179745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179810">SUSE bug 1179810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179888">SUSE bug 1179888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179895">SUSE bug 1179895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179896">SUSE bug 1179896</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179960">SUSE bug 1179960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179963">SUSE bug 1179963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180027">SUSE bug 1180027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180029">SUSE bug 1180029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180031">SUSE bug 1180031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180052">SUSE bug 1180052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180086">SUSE bug 1180086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180117">SUSE bug 1180117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180258">SUSE bug 1180258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180506">SUSE bug 1180506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180559">SUSE bug 1180559</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20669/">CVE-2018-20669</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-20934/">CVE-2019-20934</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0444/">CVE-2020-0444</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27068/">CVE-2020-27068</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27777/">CVE-2020-27777</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27825/">CVE-2020-27825</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-4788/">CVE-2020-4788</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493140" comment="kernel-default-4.12.14-197.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493141" comment="kernel-default-base-4.12.14-197.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493142" comment="kernel-default-devel-4.12.14-197.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493143" comment="kernel-default-man-4.12.14-197.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493144" comment="kernel-devel-4.12.14-197.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493145" comment="kernel-macros-4.12.14-197.78.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138032" version="1" class="patch">
	<metadata>
		<title>Security update for dnsmasq (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176076" ref_url="https://bugzilla.suse.com/1176076" source="BUGZILLA"/>
		<reference ref_id="1177077" ref_url="https://bugzilla.suse.com/1177077" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25681" ref_url="https://www.suse.com/security/cve/CVE-2020-25681/" source="CVE"/>
		<reference ref_id="CVE-2020-25682" ref_url="https://www.suse.com/security/cve/CVE-2020-25682/" source="CVE"/>
		<reference ref_id="CVE-2020-25683" ref_url="https://www.suse.com/security/cve/CVE-2020-25683/" source="CVE"/>
		<reference ref_id="CVE-2020-25684" ref_url="https://www.suse.com/security/cve/CVE-2020-25684/" source="CVE"/>
		<reference ref_id="CVE-2020-25685" ref_url="https://www.suse.com/security/cve/CVE-2020-25685/" source="CVE"/>
		<reference ref_id="CVE-2020-25686" ref_url="https://www.suse.com/security/cve/CVE-2020-25686/" source="CVE"/>
		<reference ref_id="CVE-2020-25687" ref_url="https://www.suse.com/security/cve/CVE-2020-25687/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008222.html" source="SUSE-SU"/>
		<description>
This update for dnsmasq fixes the following issues:

- bsc#1177077: Fixed DNSpooq vulnerabilities
- CVE-2020-25684, CVE-2020-25685, CVE-2020-25686:
  Fixed multiple Cache Poisoning attacks.
- CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687:
  Fixed multiple potential Heap-based overflows when DNSSEC is
  enabled.

- Retry query to other servers on receipt of SERVFAIL rcode
  (bsc#1176076)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-19"/>
	<updated date="2021-01-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176076">SUSE bug 1176076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177077">SUSE bug 1177077</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25681/">CVE-2020-25681</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25682/">CVE-2020-25682</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25683/">CVE-2020-25683</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-25684/">CVE-2020-25684</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-25685/">CVE-2020-25685</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-25686/">CVE-2020-25686</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25687/">CVE-2020-25687</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493146" comment="dnsmasq-2.78-7.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138033" version="1" class="patch">
	<metadata>
		<title>Security update for perl-Convert-ASN1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168934" ref_url="https://bugzilla.suse.com/1168934" source="BUGZILLA"/>
		<reference ref_id="CVE-2013-7488" ref_url="https://www.suse.com/security/cve/CVE-2013-7488/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008232.html" source="SUSE-SU"/>
		<description>
This update for perl-Convert-ASN1 fixes the following issue:

- CVE-2013-7488: Fixed an infinite loop via unexpected input (bsc#1168934).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-21"/>
	<updated date="2021-01-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1168934">SUSE bug 1168934</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2013-7488/">CVE-2013-7488</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493147" comment="perl-Convert-ASN1-0.27-1.6.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138034" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1180684" ref_url="https://bugzilla.suse.com/1180684" source="BUGZILLA"/>
		<reference ref_id="1180685" ref_url="https://bugzilla.suse.com/1180685" source="BUGZILLA"/>
		<reference ref_id="1180687" ref_url="https://bugzilla.suse.com/1180687" source="BUGZILLA"/>
		<reference ref_id="1181090" ref_url="https://bugzilla.suse.com/1181090" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23239" ref_url="https://www.suse.com/security/cve/CVE-2021-23239/" source="CVE"/>
		<reference ref_id="CVE-2021-23240" ref_url="https://www.suse.com/security/cve/CVE-2021-23240/" source="CVE"/>
		<reference ref_id="CVE-2021-3156" ref_url="https://www.suse.com/security/cve/CVE-2021-3156/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0227-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008250.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:

- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges 
  [bsc#1181090,CVE-2021-3156]
- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`
  [bsc#1180684,CVE-2021-23239]
- A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685,
  CVE-2021-23240]
- It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-26"/>
	<updated date="2021-01-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180684">SUSE bug 1180684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180685">SUSE bug 1180685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180687">SUSE bug 1180687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181090">SUSE bug 1181090</bugzilla>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23239/">CVE-2021-23239</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23240/">CVE-2021-23240</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3156/">CVE-2021-3156</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493148" comment="sudo-1.8.22-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493149" comment="sudo-devel-1.8.22-4.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138035" version="1" class="patch">
	<metadata>
		<title>Security update for ceph (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Basesystem 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178837" ref_url="https://bugzilla.suse.com/1178837" source="BUGZILLA"/>
		<reference ref_id="1179139" ref_url="https://bugzilla.suse.com/1179139" source="BUGZILLA"/>
		<reference ref_id="1179452" ref_url="https://bugzilla.suse.com/1179452" source="BUGZILLA"/>
		<reference ref_id="1179802" ref_url="https://bugzilla.suse.com/1179802" source="BUGZILLA"/>
		<reference ref_id="1180118" ref_url="https://bugzilla.suse.com/1180118" source="BUGZILLA"/>
		<reference ref_id="1180155" ref_url="https://bugzilla.suse.com/1180155" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27781" ref_url="https://www.suse.com/security/cve/CVE-2020-27781/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0023-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008148.html" source="SUSE-SU"/>
		<description>
This update for ceph fixes the following issues:

Security issues fixed:

- CVE-2020-27781: Fixed a privilege escalation via the ceph_volume_client Python interface (bsc#1179802 bsc#1180155).

Non-security issues fixed:

- Fixes an issue when check in legacy collection reaches end. (bsc#1179139)
- Fixes an issue when storage service stops. (bsc#1178837)
- Fix for failing test run due to missing module 'six'. (bsc#1179452)
- Provide a different name for the fallback allocator in bluestore. (bsc#1180118)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-05"/>
	<updated date="2021-01-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1178837">SUSE bug 1178837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179139">SUSE bug 1179139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179452">SUSE bug 1179452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179802">SUSE bug 1179802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180118">SUSE bug 1180118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180155">SUSE bug 1180155</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-27781/">CVE-2020-27781</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-basesystem:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009254629" comment="SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493150" comment="ceph-common-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493151" comment="libcephfs-devel-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493152" comment="libcephfs2-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493153" comment="librados-devel-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493154" comment="librados2-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493155" comment="libradospp-devel-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493156" comment="librbd-devel-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493157" comment="librbd1-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493158" comment="librgw-devel-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493159" comment="librgw2-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493160" comment="python3-ceph-argparse-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493161" comment="python3-cephfs-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493162" comment="python3-rados-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493163" comment="python3-rbd-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493164" comment="python3-rgw-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493165" comment="rados-objclass-devel-14.2.16.402+g7d47dbaf4d-3.57.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138036" version="1" class="patch">
	<metadata>
		<title>Security update for cf-cli (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for CAP 15 SP1</platform>
		</affected>
		<reference ref_id="1132242" ref_url="https://bugzilla.suse.com/1132242" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3781" ref_url="https://www.suse.com/security/cve/CVE-2019-3781/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1220-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005646.html" source="SUSE-SU"/>
		<description>
This update for cf-cli fixes the following issues:

cf-cli was updated: to version 6.43.0 (bsc#1132242)

Enhancements :

- `cf curl` supports a new `--fail` flag (primarily for scripting purposes) which returns exit code `22` for server errors [story](https://www.pivotaltracker.com/story/show/130060949)
- Improves `cf delete-orphaned-routes` such that it uses a different endpoint, reducing the chance of a race condition when two users are simultaneously deleting orphaned routes and associating routes with applications [story](https://www.pivotaltracker.com/story/show/163156064)
- we've improved the speed of cf services - it now hits a single endpoint instead of making individual API calls

Security:

- CVE-2019-3781: CF CLI does not sanitize user’s password in verbose/trace/debug.
- Fixes issue with running cf login in verbose mode whereby passwords which contains regex were not completely redacted
- Fixes issue whilst running commands in verbose mode refresh tokens were not completely redacted

Other Bug Fixes:

- Updates help text for cf curlstory
- Now refresh tokens work properly whilst using cf curl with V3 CC API endpoints story
- Fixes performance degradation for cf services story
- cf delete-service requires that you are targeting a space story
- cf enable-service access for a service in an org will succeed if you have already enabled access for that service in that org story

cf-cli was updated to version 6.42.0:

Minor Enhancements:

- updated `cf restage` help text and the first line in the command's output to indicate that using this command will cause app downtime [story](https://www.pivotaltracker.com/story/show/151841382)
- updated the `cf bind-route-service` help text to clarify usage instructions [story](https://www.pivotaltracker.com/story/show/150111078)
- improved an error message for `cf create-service-boker` to be more helpful when the CC API returns a `502` due to an invalid service broker catalog 
- upgraded to Golang 1.11.4 [story](https://www.pivotaltracker.com/story/show/162745359)
- added a short name `ue` for `cf unset-env` [story](https://www.pivotaltracker.com/story/show/161632713)
- updated `cf marketplace` command to include a new `broker` column to prepare for a upcoming services-related feature which will allow services to have the same name as long as they are associated with different service brokers [story](https://www.pivotaltracker.com/story/show/162699756)

Bugs:

- fix for `cf enable-service-access -p plan` whereby when we refactored the code in CLI `v6.41.0` it created service plan visibilities as part of a subsequent run of the command (the unrefactored code skipped creating the service plan visibilities); now the command will skip creating service plan visibilities as it did prior to the refactor [story](https://www.pivotaltracker.com/story/show/162747373)
- updated the `cf rename-buildpack` help text which was missing reference to the `-s` stack flag [story](https://www.pivotaltracker.com/story/show/162428661)
- updated help text for when users use `brew search cloudfoundry-cli` [story](https://www.pivotaltracker.com/story/show/161770940)
- now when you run `cf service service-instance` for a route service, the route service url appears in the key value table [story](https://www.pivotaltracker.com/story/show/162498211)

Update to version 6.41.0:

Enhancements:

- updated `cf --help` to include the `delete` command [story](https://www.pivotaltracker.com/story/show/161556511)

Update to version 6.40.1:

Bug Fixes:

- Updates the minimum version for the buildpacks-stacks association feature. In [CLI v6.39.0](https://github.com/cloudfoundry/cli/releases/tag/v6.39.0), when the feature was released, we incorrectly set the minimum to cc api version as`2.114`. The minimum cc api version is now correctly set to [`2.112`](https://github.com/cloudfoundry/capi-release/releases/tag/1.58.0).  [story](https://www.pivotaltracker.com/story/show/161464797)
- Fixes a bug with inspecting a service instance `cf service service-instance`, now the `documentation` url displays correctly for services which populate that field [story](https://www.pivotaltracker.com/story/show/161251875)

Update to version 6.40.0:

Bug Fixes:

- Fix bug where trailing slash on cf api would break listing commands for older CC APIs story. For older versions of CC API, if the API URL had a trailing slash, some requests would fail with an 'Unknown request' error. These requests are now handled properly.

Update to version 6.39.0:

Enhancements:

- for users on cc api 3.27, cf start is enhanced to display the new cf app v3 output. For users on cc api 3.27 or lower, users will see the same v2 output. Note that if you use v3 commands to create and start your app, if you subsequently use cf stop and cf start, the routes property in cf app will not populate even though the route exists story
- for users on cc api 3.27, cf restart is enhanced to display the new cf app v3 output. For users on cc api 3.27 or lower, users will see the same v2 output. story
- for users on cc api 3.27, cf restage is enhanced to display the new cf app v3 output. For users on cc api 3.27 or lower, users will see the same v2 output. story
- improved help text for -d domains for cf push to include examples of usage story
- cf v3-scale displays additional app information story
- if you've created an internal domain, and it is the first domain in cc, the CLI will now ignore the internal domain and instead choose the next non-internal domain when you push an app story

Bug Fixes:

- Fix for users on macOS attempting to brew install cf-cli the CF CLI using the unreleased master branch of Homebrew story
- Fixes an issue whereby, due to a recent cc api change, when you execute cf push and watch the cf app command, the app display returned a 400 error story
- Fixes a bug whereby if you logged in using client credentials, cf auth user pass --client credentials you were unable to create an org; now create-org will assign the role to the user id specified in your manifest story
- fixes an issue introduced when we refactored cf start and as part of that work, we stopped blocking on the initial connection with the logging backend; now the CLI blocks until the NOAA connection is made, or the default dial timeout of five seconds is reached story

update to version 6.38.0:

Enhancements:

- v3-ssh process type now defaults to web story
- Support added for setting tags for user provided service instances story
- Now a warning appears if you attempt to use deprecated properties and variable substitution story
- Updated usage so now you can rename the cf binary use it with every command story
- cf events now displays the Diego cell_id and instance guid in crash events story
- Includes cf service service-instance table display improvements wherein the service instance information is now grouped separately from the binding information story
- cf service service-instance table display information for user provided services changed: status has been added to the table story

Bug Fixes:

- the CLI now properly handles escaped commas in the X-Cf-Warnings header

Update to version 6.37.0:

Enhancements

- The api/cloudcontroller/ccv2 package has been updated with more functions #1343
- Now a warning appears if you are using a API version older than 2.69.0, which is no longer officially supported
- Now the CLI reads the username and password from the environment variables #1358

Bug Fixes:

- Fixes bug whereby X-Cf-Warnings were not being unescaped when displayed to user #1361
- When using CF_TRACE=1, passwords are now sanitized #1375 and tracker

Update to version 6.36.0:

Bug Fixes:

- int64 support for cf/flags library, #1333
- Debian package, #1336
- Web action flag not working on CLI 0.6.5, #1337
- When a cf push upload fails/Consul is down, a panic occurs, #1340 and #1351

update to version 6.35.2:

Bug Fixes:

- Providing a clearer services authorization warning message when a service has been disabled for the organization, fixing #1344

		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-02"/>
	<updated date="2019-07-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1132242">SUSE bug 1132242</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-3781/">CVE-2019-3781</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-cap-tools:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009258519" comment="SUSE Linux Enterprise Module for CAP 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494334" comment="cf-cli-6.43.0-3.3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138037" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1114209" ref_url="https://bugzilla.suse.com/1114209" source="BUGZILLA"/>
		<reference ref_id="1114832" ref_url="https://bugzilla.suse.com/1114832" source="BUGZILLA"/>
		<reference ref_id="1118897" ref_url="https://bugzilla.suse.com/1118897" source="BUGZILLA"/>
		<reference ref_id="1118898" ref_url="https://bugzilla.suse.com/1118898" source="BUGZILLA"/>
		<reference ref_id="1118899" ref_url="https://bugzilla.suse.com/1118899" source="BUGZILLA"/>
		<reference ref_id="1121397" ref_url="https://bugzilla.suse.com/1121397" source="BUGZILLA"/>
		<reference ref_id="1121967" ref_url="https://bugzilla.suse.com/1121967" source="BUGZILLA"/>
		<reference ref_id="1123013" ref_url="https://bugzilla.suse.com/1123013" source="BUGZILLA"/>
		<reference ref_id="1128376" ref_url="https://bugzilla.suse.com/1128376" source="BUGZILLA"/>
		<reference ref_id="1128746" ref_url="https://bugzilla.suse.com/1128746" source="BUGZILLA"/>
		<reference ref_id="1134068" ref_url="https://bugzilla.suse.com/1134068" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16873" ref_url="https://www.suse.com/security/cve/CVE-2018-16873/" source="CVE"/>
		<reference ref_id="CVE-2018-16874" ref_url="https://www.suse.com/security/cve/CVE-2018-16874/" source="CVE"/>
		<reference ref_id="CVE-2018-16875" ref_url="https://www.suse.com/security/cve/CVE-2018-16875/" source="CVE"/>
		<reference ref_id="CVE-2019-5736" ref_url="https://www.suse.com/security/cve/CVE-2019-5736/" source="CVE"/>
		<reference ref_id="CVE-2019-6486" ref_url="https://www.suse.com/security/cve/CVE-2019-6486/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1234-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005557.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues:

Security issues fixed:

- CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967).
- CVE-2019-6486: go security release, fixing crypto/elliptic CPU DoS vulnerability affecting P-521 and P-384 (bsc#1123013).
- CVE-2018-16873: go secuirty release, fixing cmd/go remote command execution (bsc#1118897).
- CVE-2018-16874: go security release, fixing cmd/go directory traversal (bsc#1118898).
- CVE-2018-16875: go security release, fixing crypto/x509 CPU denial of service (bsc#1118899).

Other changes and bug fixes:

- Update to containerd v1.2.5, which is required for v18.09.5-ce (bsc#1128376, bsc#1134068).
- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce (bsc#1128376, bsc#1134068).
- Update to Docker 18.09.5-ce see upstream changelog in the packaged (bsc#1128376, bsc#1134068).
- docker-test: Improvements to test packaging (bsc#1128746).
- Move daemon.json file to /etc/docker directory (bsc#1114832).
- Revert golang(API) removal since it turns out this breaks &gt;= requires in certain cases (bsc#1114209).
- Fix go build failures (bsc#1121397).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-13"/>
	<updated date="2019-06-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1114209">SUSE bug 1114209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114832">SUSE bug 1114832</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118897">SUSE bug 1118897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118898">SUSE bug 1118898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118899">SUSE bug 1118899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121397">SUSE bug 1121397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121967">SUSE bug 1121967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123013">SUSE bug 1123013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128376">SUSE bug 1128376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128746">SUSE bug 1128746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134068">SUSE bug 1134068</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16873/">CVE-2018-16873</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-16874/">CVE-2018-16874</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16875/">CVE-2018-16875</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5736/">CVE-2019-5736</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6486/">CVE-2019-6486</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494370" comment="containerd-1.2.5-5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494371" comment="docker-18.09.6_ce-6.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494342" comment="docker-bash-completion-18.09.6_ce-6.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494372" comment="docker-libnetwork-0.7.0.1+gitr2726_872f0a83c98a-4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494373" comment="docker-runc-1.0.0rc6+gitr3804_2b18fe1d885e-6.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138038" version="1" class="patch">
	<metadata>
		<title>Security update for docker (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1096726" ref_url="https://bugzilla.suse.com/1096726" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-15664" ref_url="https://www.suse.com/security/cve/CVE-2018-15664/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1562-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005587.html" source="SUSE-SU"/>
		<description>
This update for docker fixes the following issues:

Security issue fixed: 	  

- CVE-2018-15664: Fixed an issue which could make docker cp vulnerable to symlink-exchange race attacks (bsc#1096726).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-19"/>
	<updated date="2019-06-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1096726">SUSE bug 1096726</bugzilla>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-15664/">CVE-2018-15664</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494374" comment="docker-18.09.6_ce-6.20.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494346" comment="docker-bash-completion-18.09.6_ce-6.20.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138039" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1100331" ref_url="https://bugzilla.suse.com/1100331" source="BUGZILLA"/>
		<reference ref_id="1121967" ref_url="https://bugzilla.suse.com/1121967" source="BUGZILLA"/>
		<reference ref_id="1138920" ref_url="https://bugzilla.suse.com/1138920" source="BUGZILLA"/>
		<reference ref_id="1139649" ref_url="https://bugzilla.suse.com/1139649" source="BUGZILLA"/>
		<reference ref_id="1142160" ref_url="https://bugzilla.suse.com/1142160" source="BUGZILLA"/>
		<reference ref_id="1142413" ref_url="https://bugzilla.suse.com/1142413" source="BUGZILLA"/>
		<reference ref_id="1143409" ref_url="https://bugzilla.suse.com/1143409" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10892" ref_url="https://www.suse.com/security/cve/CVE-2018-10892/" source="CVE"/>
		<reference ref_id="CVE-2019-13509" ref_url="https://www.suse.com/security/cve/CVE-2019-13509/" source="CVE"/>
		<reference ref_id="CVE-2019-14271" ref_url="https://www.suse.com/security/cve/CVE-2019-14271/" source="CVE"/>
		<reference ref_id="CVE-2019-5736" ref_url="https://www.suse.com/security/cve/CVE-2019-5736/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2117-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005812.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues:

Docker:

- CVE-2019-14271: Fixed a code injection if the nsswitch facility dynamically loaded a library inside a chroot (bsc#1143409).
- CVE-2019-13509: Fixed an information leak in the debug log (bsc#1142160).
- Update to version 19.03.1-ce, see changelog at /usr/share/doc/packages/docker/CHANGELOG.md (bsc#1142413, bsc#1139649).

runc:

- Use %config(noreplace) for /etc/docker/daemon.json (bsc#1138920).
- Update to runc 425e105d5a03, which is required by Docker (bsc#1139649).

containerd:

- CVE-2019-5736: Fixed a container breakout vulnerability (bsc#1121967).
- Update to containerd v1.2.6, which is required by docker (bsc#1139649).

golang-github-docker-libnetwork:

- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is required by docker (bsc#1142413, bsc#1139649).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-13"/>
	<updated date="2019-08-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1100331">SUSE bug 1100331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121967">SUSE bug 1121967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138920">SUSE bug 1138920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139649">SUSE bug 1139649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142160">SUSE bug 1142160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142413">SUSE bug 1142413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143409">SUSE bug 1143409</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10892/">CVE-2018-10892</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13509/">CVE-2019-13509</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14271/">CVE-2019-14271</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5736/">CVE-2019-5736</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494375" comment="containerd-1.2.6-5.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494376" comment="docker-19.03.1_ce-6.26.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494349" comment="docker-bash-completion-19.03.1_ce-6.26.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494377" comment="docker-libnetwork-0.7.0.1+gitr2800_fc5a7d91d54c-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494378" comment="docker-runc-1.0.0rc8+gitr3826_425e105d5a03-6.21.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138040" version="1" class="patch">
	<metadata>
		<title>Security update for podman, slirp4netns and libcontainers-common (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1096726" ref_url="https://bugzilla.suse.com/1096726" source="BUGZILLA"/>
		<reference ref_id="1123156" ref_url="https://bugzilla.suse.com/1123156" source="BUGZILLA"/>
		<reference ref_id="1123387" ref_url="https://bugzilla.suse.com/1123387" source="BUGZILLA"/>
		<reference ref_id="1135460" ref_url="https://bugzilla.suse.com/1135460" source="BUGZILLA"/>
		<reference ref_id="1136974" ref_url="https://bugzilla.suse.com/1136974" source="BUGZILLA"/>
		<reference ref_id="1137860" ref_url="https://bugzilla.suse.com/1137860" source="BUGZILLA"/>
		<reference ref_id="1143386" ref_url="https://bugzilla.suse.com/1143386" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-15664" ref_url="https://www.suse.com/security/cve/CVE-2018-15664/" source="CVE"/>
		<reference ref_id="CVE-2019-10152" ref_url="https://www.suse.com/security/cve/CVE-2019-10152/" source="CVE"/>
		<reference ref_id="CVE-2019-6778" ref_url="https://www.suse.com/security/cve/CVE-2019-6778/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005844.html" source="SUSE-SU"/>
		<description>

  
This is a version update for podman to version 1.4.4 (bsc#1143386).

Additional changes by SUSE on top:

- Remove fuse-overlayfs because it's (currently) an unsatisfied dependency on
  SLE (bsc#1143386)
- Update libpod.conf to use correct infra_command
- Update libpod.conf to use better versioned pause container
- Update libpod.conf to use official kubic pause container
- Update libpod.conf to match latest features set:
  detach_keys, lock_type, runtime_supports_json
- Add podman-remote varlink client

Version update podman to v1.4.4:

- Features

  - Podman now has greatly improved support for containers using multiple OCI
    runtimes. Containers now remember if they were created with a different
    runtime using --runtime and will always use that runtime
  - The cached and delegated options for volume mounts are now allowed for
    Docker compatability (#3340)
  - The podman diff command now supports the --latest flag

- Bugfixes

  - Fixed a bug where rootless Podman would attempt to use the entire root
    configuration if no rootless configuration was present for the user,
    breaking rootless Podman for new installations
  - Fixed a bug where rootless Podman's pause process would block SIGTERM,
    preventing graceful system shutdown and hanging until the system's init
    send SIGKILL
  - Fixed a bug where running Podman as root with sudo -E would not work after
    running rootless Podman at least once
  - Fixed a bug where options for tmpfs volumes added with the --tmpfs flag
    were being ignored
  - Fixed a bug where images with no layers could not properly be displayed
    and removed by Podman
  - Fixed a bug where locks were not properly freed on failure to create a
    container or pod
  - Fixed a bug where podman cp on a single file would create a directory at
    the target and place the file in it (#3384)
  - Fixed a bug where podman inspect --format '{{.Mounts}}' would print a
    hexadecimal address instead of a container's mounts
  - Fixed a bug where rootless Podman would not add an entry to container's
    /etc/hosts files for their own hostname (#3405)
  - Fixed a bug where podman ps --sync would segfault (#3411)
  - Fixed a bug where podman generate kube would produce an invalid ports
    configuration (#3408)

- Misc

  - Updated containers/storage to v1.12.13
  - Podman now performs much better on systems with heavy I/O load
  - The --cgroup-manager flag to podman now shows the correct default setting
    in help if the default was overridden by libpod.conf
  - For backwards compatability, setting --log-driver=json-file in podman run
    is now supported as an alias for --log-driver=k8s-file. This is considered
    deprecated, and json-file will be moved to a new implementation in the
    future ([#3363](https://github.com/containers/libpo\
    d/issues/3363))
  - Podman's default libpod.conf file now allows the crun OCI runtime to be
    used if it is installed

Update podman to v1.4.2:

- Fixed a bug where Podman could not run containers using an older version of
  Systemd as init
- Updated vendored Buildah to v1.9.0 to resolve a critical bug with
  Dockerfile RUN instructions
- The error message for running podman kill on containers that are not
  running has been improved
- Podman remote client can now log to a file if syslog is not available
- The podman exec command now sets its error code differently based on
  whether the container does not exist, and the command in the container does
  not exist
- The podman inspect command on containers now outputs Mounts JSON that matches
  that of docker inspect, only including user-specified volumes and
  differentiating bind mounts and named volumes
- The podman inspect command now reports the path to a container's OCI spec
  with the OCIConfigPath key (only included when the container is initialized
  or running)
- The podman run --mount command now supports the bind-nonrecursive option for
  bind mounts
- Fixed a bug where podman play kube would fail to create containers due to an
  unspecified log driver
- Fixed a bug where Podman would fail to build with musl libc
- Fixed a bug where rootless Podman using slirp4netns networking in an
  environment with no nameservers on the host other than localhost would
  result in nonfunctional networking
- Fixed a bug where podman import would not properly set environment
  variables, discarding their values and retaining only keys
- Fixed a bug where Podman would fail to run when built with Apparmor support
  but run on systems without the Apparmor kernel module loaded
- Remote Podman will now default the username it uses to log in to remote
  systems to the username of the current user
- Podman now uses JSON logging with OCI runtimes that support it, allowing for
  better error reporting
- Updated vendored containers/image to v2.0
- Update conmon to v0.3.0
- Support OOM Monitor under cgroup V2
- Add config binary and make target for configuring conmon with a go library
  for importing values

Updated podman to version 1.4.0 (bsc#1137860) and (bsc#1135460) 

- Podman checkpoint and podman restore commands can now be
  used to migrate containers between Podman installations on
  different systems.
- The podman cp now supports pause flag.
- The remote client now supports a configuration file for
  pre-configuring connections to remote Podman installations
- CVE-2019-10152: Fixed an iproper dereference of symlinks of the
  the podman cp command which introduced in version 1.1.0 (bsc#1136974).
- Fixed a bug where podman commit could improperly set environment variables 
  that contained = characters
- Fixed a bug where rootless podman would sometimes fail to start
  containers with forwarded ports
- Fixed a bug where podman version on the remote client could
  segfault
- Fixed a bug where podman container runlabel would use /proc/self/exe instead of 
  the path of the Podman command when printing the command being executed
- Fixed a bug where filtering images by label did not work
- Fixed a bug where specifying a bing mount or tmpfs mount over
  an image volume would cause a container to be unable to start
- Fixed a bug where podman generate kube did not work with
  containers with named volumes
- Fixed a bug where rootless podman would receive permission
  denied errors accessing conmon.pid
- Fixed a bug where podman cp with a folder specified as target
  would replace the folder, as opposed to copying into it
- Fixed a bug where rootless Podman commands could double-unlock
  a lock, causing a crash
- Fixed a bug where podman incorrectly set tmpcopyup on /dev/
  mounts, causing errors when using the Kata containers runtime
- Fixed a bug where podman exec would fail on older kernels
- Podman commit command is now usable with the Podman remote client
- Signature-policy flag has been deprecated
- Updated vendored containers/storage and containers/image libraries 
  with numerous bugfixes
- Updated vendored Buildah to v1.8.3
- Podman now requires Conmon v0.2.0
- The podman cp command is now aliased as podman container cp
- Rootless podman will now default init_path using root Podman's
  configuration files (/etc/containers/libpod.conf and
  /usr/share/containers/libpod.conf) if not overridden in the
  rootless configuration
- Added fuse-overlayfs dependency to support overlay based rootless image
  manipulations
- The podman cp command can now read input redirected to STDIN, and output to
  STDOUT instead of a file, using - instead of an argument.
- The podman remote client now displays version information from both the
  client and server in podman version
- The podman unshare command has been added, allowing easy entry into the
  user namespace set up by rootless Podman (allowing the removal of files
  created by rootless podman, among other things)
- Fixed a bug where Podman containers with the --rm flag were removing
  created volumes when they were automatically removed
- Fixed a bug where container and pod locks were incorrectly marked as
  released after a system reboot, causing errors on container and pod removal
- Fixed a bug where Podman pods could not be removed if any container in the
  pod encountered an error during removal
- Fixed a bug where Podman pods run with the cgroupfs CGroup driver would encounter 
  a race condition during removal, potentially failing to remove the pod CGroup
- Fixed a bug where the podman container checkpoint and podman container
  restore commands were not visible in the remote client
- Fixed a bug where podman remote ps --ns would not print the container's namespaces
- Fixed a bug where removing stopped containers with healthchecks could cause an error
- Fixed a bug where the default libpod.conf file was causing parsing errors
- Fixed a bug where pod locks were not being freed when pods were removed,
  potentially leading to lock exhaustion
- Fixed a bug where 'podman run' with SD_NOTIFY set could, on short-running
  containers, create an inconsistent state rendering the container unusable
- The remote Podman client now uses the Varlink bridge to establish remote
  connections by default
- Fixed an issue with apparmor_parser (bsc#1123387)

- Update to libpod v1.4.0 (bsc#1137860):
- The podman checkpoint and podman restore commands can now be
  used to migrate containers between Podman installations on
  different systems
- The podman cp command now supports a pause flag to pause
  containers while copying into them
- The remote client now supports a configuration file for
  pre-configuring connections to remote Podman installations
- Fixed CVE-2019-10152 - The podman cp command improperly
  dereferenced symlinks in host context
- Fixed a bug where podman commit could improperly set
  environment variables that contained = characters
- Fixed a bug where rootless Podman would sometimes fail to start
  containers with forwarded ports
- Fixed a bug where podman version on the remote client could
  segfault
- Fixed a bug where podman container runlabel would use
  /proc/self/exe instead of the path of the Podman command when
  printing the command being executed
- Fixed a bug where filtering images by label did not work
- Fixed a bug where specifying a bing mount or tmpfs mount over
  an image volume would cause a container to be unable to start
- Fixed a bug where podman generate kube did not work with
  containers with named volumes
- Fixed a bug where rootless Podman would receive permission
  denied errors accessing conmon.pid
- Fixed a bug where podman cp with a folder specified as target
  would replace the folder, as opposed to copying into it
- Fixed a bug where rootless Podman commands could double-unlock
  a lock, causing a crash
- Fixed a bug where Podman incorrectly set tmpcopyup on /dev/
  mounts, causing errors when using the Kata containers runtime
- Fixed a bug where podman exec would fail on older kernels
- The podman commit command is now usable with the Podman remote
  client
- The --signature-policy flag (used with several image-related
  commands) has been deprecated
- The podman unshare command now defines two environment
  variables in the spawned shell: CONTAINERS_RUNROOT and
  CONTAINERS_GRAPHROOT, pointing to temporary and permanent
  storage for rootless containers
- Updated vendored containers/storage and containers/image
  libraries with numerous bugfixes
- Updated vendored Buildah to v1.8.3
- Podman now requires Conmon v0.2.0
- The podman cp command is now aliased as podman container cp
- Rootless Podman will now default init_path using root Podman's
  configuration files (/etc/containers/libpod.conf and
  /usr/share/containers/libpod.conf) if not overridden in the
  rootless configuration

- Update to image v1.5.1
- Vendor in latest containers/storage
- docker/docker_client: Drop redundant Domain(ref.ref) call
- pkg/blobinfocache: Split implementations into subpackages
- copy: progress bar: show messages on completion
- docs: rename manpages to *.5.command
- add container-certs.d.md manpage
- pkg/docker/config: Bring auth tests from
  docker/docker_client_test
- Don't allocate a sync.Mutex separately

Update to storage v1.12.10:

- Add function to parse out mount options from graphdriver
- Merge the disparate parts of all of the Unix-like lockfiles
- Fix unix-but-not-Linux compilation
- Return XDG_RUNTIME_DIR as RootlessRuntimeDir if set
- Cherry-pick moby/moby #39292 for CVE-2018-15664 fixes
- lockfile: add RecursiveLock() API
- Update generated files
- Fix crash on tesing of aufs code
- Let consumers know when Layers and Images came from read-only stores
- chown: do not change owner for the mountpoint
- locks: correctly mark updates to the layers list
- CreateContainer: don't worry about mapping layers unless necessary
- docs: fix manpage for containers-storage.conf
- docs: sort configuration options alphabetically
- docs: document OSTree file deduplication
- Add missing options to man page for containers-storage
- overlay: use the layer idmapping if present
- vfs: prefer layer custom idmappings
- layers: propagate down the idmapping settings
- Recreate symlink when not found
- docs: fix manpage for configuration file
- docs: add special handling for manpages in sect 5
- overlay: fix single-lower test
- Recreate symlink when not found
- overlay: propagate errors from mountProgram
- utils: root in a userns uses global conf file
- Fix handling of additional stores
- Correctly check permissions on rootless directory
- Fix possible integer overflow on 32bit builds
- Evaluate device path for lvm
- lockfile test: make concurrent RW test determinisitc
- lockfile test: make concurrent read tests deterministic
- drivers.DirCopy: fix filemode detection
- storage: move the logic to detect rootless into utils.go
- Don't set (struct flock).l_pid
- Improve documentation of getLockfile
- Rename getLockFile to createLockerForPath, and document it
- Add FILES section to containers-storage.5 man page
- add digest locks
- drivers/copy: add a non-cgo fallback

slirp4netns was updated to 0.3.0:

- CVE-2019-6778: Fixed a heap buffer overflow in tcp_emu() (bsc#1123156)

This update also includes:

- fuse3 and fuse-overlayfs to support rootless containers.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-27"/>
	<updated date="2019-08-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1096726">SUSE bug 1096726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123156">SUSE bug 1123156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123387">SUSE bug 1123387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135460">SUSE bug 1135460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136974">SUSE bug 1136974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137860">SUSE bug 1137860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143386">SUSE bug 1143386</bugzilla>
	<cve impact="moderate" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-15664/">CVE-2018-15664</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-10152/">CVE-2019-10152</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6778/">CVE-2019-6778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494379" comment="fuse-overlayfs-0.4.1-3.3.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494380" comment="fuse3-3.6.1-3.3.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494381" comment="libfuse3-3-3.6.1-3.3.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494382" comment="podman-1.4.4-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494383" comment="podman-cni-config-1.4.4-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494384" comment="slirp4netns-0.3.0-3.3.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138041" version="1" class="patch">
	<metadata>
		<title>Security update for buildah (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1144065" ref_url="https://bugzilla.suse.com/1144065" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10214" ref_url="https://www.suse.com/security/cve/CVE-2019-10214/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2341-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005898.html" source="SUSE-SU"/>
		<description>
This update for buildah fixes the following issues:

Security issue fixed:

- CVE-2019-10214: Fixed missing enforcement of TLS connections. (bsc#1144065)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-10"/>
	<updated date="2019-09-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144065">SUSE bug 1144065</bugzilla>
	<cve impact="important" cvss3="9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10214/">CVE-2019-10214</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494385" comment="buildah-1.7.1-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138042" version="1" class="patch">
	<metadata>
		<title>Security update for podman (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1144065" ref_url="https://bugzilla.suse.com/1144065" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10214" ref_url="https://www.suse.com/security/cve/CVE-2019-10214/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005901.html" source="SUSE-SU"/>
		<description>
This update for podman fixes the following issues:

Security issue fixed:

- CVE-2019-10214: Fixed missing enforcement of TLS connections. (bsc#1144065)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-10"/>
	<updated date="2019-09-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1144065">SUSE bug 1144065</bugzilla>
	<cve impact="important" cvss3="9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10214/">CVE-2019-10214</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494386" comment="podman-1.4.4-4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494387" comment="podman-cni-config-1.4.4-4.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138043" version="1" class="patch">
	<metadata>
		<title>Security update for docker-runc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1152308" ref_url="https://bugzilla.suse.com/1152308" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16884" ref_url="https://www.suse.com/security/cve/CVE-2019-16884/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2786-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192786-1.html" source="SUSE-SU"/>
		<description>
This update for docker-runc fixes the following issues:

- CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. (bsc#1152308)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-25"/>
	<updated date="2019-10-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1152308">SUSE bug 1152308</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16884/">CVE-2019-16884</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494388" comment="docker-runc-1.0.0rc8+gitr3826_425e105d5a03-6.24.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138044" version="1" class="patch">
	<metadata>
		<title>Security update for runc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1131314" ref_url="https://bugzilla.suse.com/1131314" source="BUGZILLA"/>
		<reference ref_id="1131553" ref_url="https://bugzilla.suse.com/1131553" source="BUGZILLA"/>
		<reference ref_id="1152308" ref_url="https://bugzilla.suse.com/1152308" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16884" ref_url="https://www.suse.com/security/cve/CVE-2019-16884/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2810-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006069.html" source="SUSE-SU"/>
		<description>
This update for runc fixes the following issues:

Security issue fixed:

- CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. (bsc#1152308)

Non-security issues fixed:

- Includes upstreamed patches for regressions (bsc#1131314 bsc#1131553).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-29"/>
	<updated date="2019-10-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1131314">SUSE bug 1131314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131553">SUSE bug 1131553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152308">SUSE bug 1152308</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16884/">CVE-2019-16884</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494389" comment="runc-1.0.0~rc8-1.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138045" version="1" class="patch">
	<metadata>
		<title>Security update for helm-mirror (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1116182" ref_url="https://bugzilla.suse.com/1116182" source="BUGZILLA"/>
		<reference ref_id="1118897" ref_url="https://bugzilla.suse.com/1118897" source="BUGZILLA"/>
		<reference ref_id="1118898" ref_url="https://bugzilla.suse.com/1118898" source="BUGZILLA"/>
		<reference ref_id="1118899" ref_url="https://bugzilla.suse.com/1118899" source="BUGZILLA"/>
		<reference ref_id="1120762" ref_url="https://bugzilla.suse.com/1120762" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16873" ref_url="https://www.suse.com/security/cve/CVE-2018-16873/" source="CVE"/>
		<reference ref_id="CVE-2018-16874" ref_url="https://www.suse.com/security/cve/CVE-2018-16874/" source="CVE"/>
		<reference ref_id="CVE-2018-16875" ref_url="https://www.suse.com/security/cve/CVE-2018-16875/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:0048-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005660.html" source="SUSE-SU"/>
		<description>
This update for helm-mirror to version 0.2.1 fixes the following issues:


Security issues fixed:

- CVE-2018-16873: Fixed a remote command execution (bsc#1118897)
- CVE-2018-16874: Fixed a directory traversal in 'go get' via curly braces in import path (bsc#1118898)
- CVE-2018-16875: Fixed a CPU denial of service (bsc#1118899)

Non-security issue fixed:

- Update to v0.2.1 (bsc#1120762)
- Include helm-mirror into the containers module (bsc#1116182)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-04"/>
	<updated date="2019-07-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1116182">SUSE bug 1116182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118897">SUSE bug 1118897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118898">SUSE bug 1118898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118899">SUSE bug 1118899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120762">SUSE bug 1120762</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16873/">CVE-2018-16873</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-16874/">CVE-2018-16874</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16875/">CVE-2018-16875</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494390" comment="helm-mirror-0.2.1-1.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138046" version="1" class="patch">
	<metadata>
		<title>Security update for slirp4netns (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1170940" ref_url="https://bugzilla.suse.com/1170940" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1983" ref_url="https://www.suse.com/security/cve/CVE-2020-1983/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1197-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006785.html" source="SUSE-SU"/>
		<description>
This update for slirp4netns fixes the following issues:

Security issue fixed:

- CVE-2020-1983: Fixed a use-after-free in ip_reass (bsc#1170940).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-06"/>
	<updated date="2020-05-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1170940">SUSE bug 1170940</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-1983/">CVE-2020-1983</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494391" comment="slirp4netns-0.4.5-3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138047" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172377" ref_url="https://bugzilla.suse.com/1172377" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13401" ref_url="https://www.suse.com/security/cve/CVE-2020-13401/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1657-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006974.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues:

Docker was updated to 19.03.11-ce
runc was updated to version 1.0.0-rc10
containerd was updated to version 1.2.13

- CVE-2020-13401: Fixed an issue where an attacker with CAP_NET_RAW capability, could have crafted IPv6 router 
  advertisements, and spoof external IPv6 hosts, resulting in obtaining  sensitive information or causing  denial 
  of service (bsc#1172377).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172377">SUSE bug 1172377</bugzilla>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13401/">CVE-2020-13401</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494392" comment="containerd-1.2.13-5.22.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494393" comment="docker-19.03.11_ce-6.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494394" comment="docker-bash-completion-19.03.11_ce-6.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494395" comment="docker-libnetwork-0.7.0.1+gitr2902_153d0769a118-4.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494396" comment="docker-runc-1.0.0rc10+gitr3981_dc9208a3303f-6.38.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138048" version="1" class="patch">
	<metadata>
		<title>Security update for slirp4netns (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172380" ref_url="https://bugzilla.suse.com/1172380" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10756" ref_url="https://www.suse.com/security/cve/CVE-2020-10756/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1915-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007130.html" source="SUSE-SU"/>
		<description>
This update for slirp4netns fixes the following issues:

- Update to 0.4.7 (bsc#1172380)
  * libslirp: update to v4.3.1 (Fix CVE-2020-10756)
  * Fix config_from_options() to correctly enable ipv6
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-15"/>
	<updated date="2020-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172380">SUSE bug 1172380</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10756/">CVE-2020-10756</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494397" comment="slirp4netns-0.4.7-3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138049" version="1" class="patch">
	<metadata>
		<title>Security update for cni-plugins (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172410" ref_url="https://bugzilla.suse.com/1172410" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10749" ref_url="https://www.suse.com/security/cve/CVE-2020-10749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1957-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007152.html" source="SUSE-SU"/>
		<description>
This update for cni-plugins fixes the following issues:

cni-plugins updated to version 0.8.6	  

- CVE-2020-10749: Fixed a potential Man-in-the-Middle attacks in IPv4 clusters by spoofing IPv6 router advertisements (bsc#1172410).

Release notes: 
https://github.com/containernetworking/plugins/releases/tag/v0.8.6
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-20"/>
	<updated date="2020-07-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172410">SUSE bug 1172410</bugzilla>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-10749/">CVE-2020-10749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494398" comment="cni-plugins-0.8.6-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138050" version="1" class="patch">
	<metadata>
		<title>Security update for conmon, fuse-overlayfs, libcontainers-common, podman (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162432" ref_url="https://bugzilla.suse.com/1162432" source="BUGZILLA"/>
		<reference ref_id="1164090" ref_url="https://bugzilla.suse.com/1164090" source="BUGZILLA"/>
		<reference ref_id="1165738" ref_url="https://bugzilla.suse.com/1165738" source="BUGZILLA"/>
		<reference ref_id="1171578" ref_url="https://bugzilla.suse.com/1171578" source="BUGZILLA"/>
		<reference ref_id="1174075" ref_url="https://bugzilla.suse.com/1174075" source="BUGZILLA"/>
		<reference ref_id="1175821" ref_url="https://bugzilla.suse.com/1175821" source="BUGZILLA"/>
		<reference ref_id="1175957" ref_url="https://bugzilla.suse.com/1175957" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1726" ref_url="https://www.suse.com/security/cve/CVE-2020-1726/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007476.html" source="SUSE-SU"/>
		<description>
This update for conmon, fuse-overlayfs, libcontainers-common, podman fixes the following issues:

podman was updated to v2.0.6 (bsc#1175821)

- install missing systemd units for the new Rest API (bsc#1175957)
  and a few man-pages that where missing before
- Drop varlink API related bits (in favor of the new API)
- fix install location for zsh completions

 * Fixed a bug where running systemd in a container on a cgroups v1 system would fail.
 * Fixed a bug where /etc/passwd could be re-created every time a container
   is restarted if the container's /etc/passwd did not contain an entry
   for the user the container was started as.
 * Fixed a bug where containers without an /etc/passwd file specifying
   a non-root user would not start.
 * Fixed a bug where the --remote flag would sometimes not make
   remote connections and would instead attempt to run Podman locally.

Update to v2.0.6:

* Features

  - Rootless Podman will now add an entry to /etc/passwd for the user who ran Podman if run with --userns=keep-id.
  - The podman system connection command has been reworked to support multiple connections, and reenabled for use!
  - Podman now has a new global flag, --connection, to specify a connection to a remote Podman API instance.

* Changes

  - Podman's automatic systemd integration (activated by the --systemd=true flag, set by default) will now activate for containers using /usr/local/sbin/init as their command, instead of just /usr/sbin/init and /sbin/init (and any path ending in systemd).
  - Seccomp profiles specified by the --security-opt seccomp=... flag to podman create and podman run will now be honored even if the container was created using --privileged.

* Bugfixes

  - Fixed a bug where the podman play kube would not honor the hostIP field for port forwarding (#5964).
  - Fixed a bug where the podman generate systemd command would panic on an invalid restart policy being specified (#7271).
  - Fixed a bug where the podman images command could take a very long time (several minutes) to complete when a large number of images were present.
  - Fixed a bug where the podman logs command with the --tail flag would not work properly when a large amount of output would be printed ((#7230)[https://github.com//issues/7230]).
  - Fixed a bug where the podman exec command with remote Podman would not return a non-zero exit code when the exec session failed to start (e.g. invoking a non-existent command) (#6893).
  - Fixed a bug where the podman load command with remote Podman would did not honor user-specified tags (#7124).
  - Fixed a bug where the podman system service command, when run as a non-root user by Systemd, did not properly handle the Podman pause process and would not restart properly as a result (#7180).
  - Fixed a bug where the --publish flag to podman create, podman run, and podman pod create did not properly handle a host IP of 0.0.0.0 (attempting to bind to literal 0.0.0.0, instead of all IPs on the system) (#7104).
  - Fixed a bug where the podman start --attach command would not print the container's exit code when the command exited due to the container exiting.
  - Fixed a bug where the podman rm command with remote Podman would not remove volumes, even if the --volumes flag was specified (#7128).
  - Fixed a bug where the podman run command with remote Podman and the --rm flag could exit before the container was fully removed.
  - Fixed a bug where the --pod new:... flag to podman run and podman create would create a pod that did not share any namespaces.
  - Fixed a bug where the --preserve-fds flag to podman run and podman exec could close the wrong file descriptors while trying to close user-provided descriptors after passing them into the container.
  - Fixed a bug where default environment variables ($PATH and $TERM) were not set in containers when not provided by the image.
  - Fixed a bug where pod infra containers were not properly unmounted after exiting.
  - Fixed a bug where networks created with podman network create with an IPv6 subnet did not properly set an IPv6 default route.
  - Fixed a bug where the podman save command would not work properly when its output was piped to another command (#7017).
  - Fixed a bug where containers using a systemd init on a cgroups v1 system could leak mounts under /sys/fs/cgroup/systemd to the host.
  - Fixed a bug where podman build would not generate an event on completion (#7022).
  - Fixed a bug where the podman history command with remote Podman printed incorrect creation times for layers (#7122).
  - Fixed a bug where Podman would not create working directories specified by the container image if they did not exist.
  - Fixed a bug where Podman did not clear CMD from the container image if the user overrode ENTRYPOINT (#7115).
  - Fixed a bug where error parsing image names were not fully reported (part of the error message containing the exact issue was dropped).
  - Fixed a bug where the podman images command with remote Podman did not support printing image tags in Go templates supplied to the --format flag (#7123).
  - Fixed a bug where the podman rmi --force command would not attempt to unmount containers it was removing, which could cause a failure to remove the image.
  - Fixed a bug where the podman generate systemd --new command could incorrectly quote arguments to Podman that contained whitespace, leading to nonfunctional unit files (#7285).
  - Fixed a bug where the podman version command did not properly include build time and Git commit.
  - Fixed a bug where running systemd in a Podman container on a system that did not use the systemd cgroup manager would fail (#6734).
  - Fixed a bug where capabilities from --cap-add were not properly added when a container was started as a non-root user via --user.
  - Fixed a bug where Pod infra containers were not properly cleaned up when they stopped, causing networking issues (#7103).

* API

  - Fixed a bug where the libpod and compat Build endpoints did not accept the application/tar content type (instead only accepting application/x-tar) (#7185).
  - Fixed a bug where the libpod Exists endpoint would attempt to write a second header in some error conditions (#7197).
  - Fixed a bug where compat and libpod Network Inspect and Network Remove endpoints would return a 500 instead of 404 when the requested network was not found.
  - Added a versioned _ping endpoint (e.g. http://localhost/v1.40/_ping).
  - Fixed a bug where containers started through a systemd-managed instance of the REST API would be shut down when podman system service shut down due to its idle timeout (#7294).
  - Added stronger parameter verification for the libpod Network Create endpoint to ensure subnet mask is a valid value.
  - The Pod URL parameter to the Libpod Container List endpoint has been deprecated; the information previously gated by the Pod boolean will now be included in the response unconditionally.

- Change hard requires for AppArmor to Recommends. They are not
  needed for runtime or with SELinux but already installed if
  AppArmor is used [jsc#SMO-15]
- Add BuildRequires for pkg-config(libselinux) to build with
  SELinux support [jsc#SMO-15] 

Update to v2.0.4

* Fixed a bug where the output of podman image search did not
  populate the Description field as it was mistakenly assigned to
  the ID field.
* Fixed a bug where podman build - and podman build on an HTTP
  target would fail.
* Fixed a bug where rootless Podman would improperly chown the
  copied-up contents of anonymous volumes (#7130).
* Fixed a bug where Podman would sometimes HTML-escape special
  characters in its CLI output.
* Fixed a bug where the podman start --attach --interactive
  command would print the container ID of the container attached
  to when exiting (#7068).
* Fixed a bug where podman run --ipc=host --pid=host would only
  set --pid=host and not --ipc=host (#7100).
* Fixed a bug where the --publish argument to podman run, podman
  create and podman pod create would not allow binding the same
  container port to more than one host port (#7062).
* Fixed a bug where incorrect arguments to podman images --format
  could cause Podman to segfault.
* Fixed a bug where podman rmi --force on an image ID with more
  than one name and at least one container using the image would
  not completely remove containers using the image (#7153).
* Fixed a bug where memory usage in bytes and memory use
  percentage were swapped in the output of podman stats
  --format=json.
* Fixed a bug where the libpod and compat events endpoints would
  fail if no filters were specified (#7078).
* Fixed a bug where the CgroupVersion field in responses from the
  compat Info endpoint was prefixed by 'v' (instead of just being
  '1' or '2', as is documented).

- Suggest katacontainers instead of recommending it. It's not
  enabled by default, so it's just bloat

Update to v2.0.3

* Fix handling of entrypoint
* log API: add context to allow for cancelling
* fix API: Create container with an invalid configuration
* Remove all instances of named return 'err' from Libpod
* Fix: Correct connection counters for hijacked connections
* Fix: Hijacking v2 endpoints to follow rfc 7230 semantics
* Remove hijacked connections from active connections list
* version/info: format: allow more json variants
* Correctly print STDOUT on non-terminal remote exec
* Fix container and pod create commands for remote create
* Mask out /sys/dev to prevent information leak from the host
* Ensure sig-proxy default is propagated in start
* Add SystemdMode to inspect for containers
* When determining systemd mode, use full command
* Fix lint
* Populate remaining unused fields in `pod inspect`
* Include infra container information in `pod inspect`
* play-kube: add suport for 'IfNotPresent' pull type
* docs: user namespace can't be shared in pods
* Fix 'Error: unrecognized protocol \'TCP\' in port mapping'
* Error on rootless mac and ip addresses
* Fix &amp; add notes regarding problematic language in codebase
* abi: set default umask and rlimits
* Used reference package with errors for parsing tag
* fix: system df error when an image has no name
* Fix Generate API title/description
* Add noop function disable-content-trust
* fix play kube doesn't override dockerfile ENTRYPOINT
* Support default profile for apparmor
* Bump github.com/containers/common to v0.14.6
* events endpoint: backwards compat to old type
* events endpoint: fix panic and race condition
* Switch references from libpod.conf to containers.conf
* podman.service: set type to simple
* podman.service: set doc to podman-system-service
* podman.service: use default registries.conf
* podman.service: use default killmode
* podman.service: remove stop timeout
* systemd: symlink user-&gt;system
* vendor golang.org/x/text@v0.3.3
* Fix a bug where --pids-limit was parsed incorrectly
* search: allow wildcards
* [CI:DOCS]Do not copy policy.json into gating image
* Fix systemd pid 1 test
* Cirrus: Rotate keys post repo. rename
* The libpod.conf(5) man page got removed and all references are
  now pointing towards containers.conf(5), which will be part
  of the libcontainers-common package.

Update to podman v2.0.2

* fix race condition in `libpod.GetEvents(...)`
* Fix bug where `podman mount` didn't error as rootless
* remove podman system connection
* Fix imports to ensure v2 is used with libpod
* Update release notes for v2.0.2
* specgen: fix order for setting rlimits
* Ensure umask is set appropriately for 'system service'
* generate systemd: improve pod-flags filter
* Fix a bug with APIv2 compat network remove to log an ErrNetworkNotFound instead of nil
* Fixes --remote flag issues
* Pids-limit should only be set if the user set it
* Set console mode for windows
* Allow empty host port in --publish flag
* Add a note on the APIs supported by `system service`
* fix: Don't override entrypoint if it's `nil`
* Set TMPDIR to /var/tmp by default if not set
* test: add tests for --user and volumes
* container: move volume chown after spec generation
* libpod: volume copyup honors namespace mappings
* Fix `system service` panic from early hangup in events
* stop podman service in e2e tests
* Print errors from individual containers in pods
* auto-update: clarify systemd-unit requirements
* podman ps truncate the command
* move go module to v2
* Vendor containers/common v0.14.4
* Bump to imagebuilder v1.1.6 on v2 branch
* Account for non-default port number in image name
- Changes since v2.0.1
* Update release notes with further v2.0.1 changes
* Fix inspect to display multiple label: changes
* Set syslog for exit commands on log-level=debug
* Friendly amendment for pr 6751
* podman run/create: support all transports
* systemd generate: allow manual restart of container units in pods
* Revert sending --remote flag to containers
* Print port mappings in `ps` for ctrs sharing network
* vendor github.com/containers/common@v0.14.3
* Update release notes for v2.0.1
* utils: drop default mapping when running uid!=0
* Set stop signal to 15 when not explicitly set
* podman untag: error if tag doesn't exist
* Reformat inspect network settings
* APIv2: Return `StatusCreated` from volume creation
* APIv2:fix: Remove `/json` from compat network EPs
* Fix ssh-agent support
* libpod: specify mappings to the storage
* APIv2:doc: Fix swagger doc to refer to volumes
* Add podman network to bash command completions
* Fix typo in manpage for `podman auto update`.
* Add JSON output field for ps
* V2 podman system connection
* image load: no args required
* Re-add PODMAN_USERNS environment variable
* Fix conflicts between privileged and other flags
* Bump required go version to 1.13
* Add explicit command to alpine container in test case.
* Use POLL_DURATION for timer
* Stop following logs using timers
* 'pod' was being truncated to 'po' in the names of the generated systemd unit files.
* rootless_linux: improve error message
* Fix podman build handling of --http-proxy flag
* correct the absolute path of `rm` executable
* Makefile: allow customizable GO_BUILD
* Cirrus: Change DEST_BRANCH to v2.0

Update to podman v2.0.0

* The `podman generate systemd` command now supports the `--new`
  flag when used with pods, allowing portable services for pods
  to be created.
* The `podman play kube` command now supports running Kubernetes
  Deployment YAML.
* The `podman exec` command now supports the `--detach` flag to
  run commands in the container in the background.
* The `-p` flag to `podman run` and `podman create` now supports
  forwarding ports to IPv6 addresses.
* The `podman run`, `podman create` and `podman pod create`
  command now support a `--replace` flag to remove and replace any
  existing container (or, for `pod create`, pod) with the same name
* The `--restart-policy` flag to `podman run` and `podman create`
  now supports the `unless-stopped` restart policy.
* The `--log-driver` flag to `podman run` and `podman create`
  now supports the `none` driver, which does not log the
  container's output.
* The `--mount` flag to `podman run` and `podman create` now
  accepts `readonly` option as an alias to `ro`.
* The `podman generate systemd` command now supports the `--container-prefix`,
  `--pod-prefix`, and `--separator` arguments to control the
  name of generated unit files.
* The `podman network ls` command now supports the `--filter`
  flag to filter results.
* The `podman auto-update` command now supports specifying an
  authfile to use when pulling new images on a per-container
  basis using the `io.containers.autoupdate.authfile` label.
* Fixed a bug where the `podman exec` command would log to journald
  when run in containers loggined to journald
  ([#6555](https://github.com/containers/libpod/issues/6555)).
* Fixed a bug where the `podman auto-update` command would not
  preserve the OS and architecture of the original image when
  pulling a replacement
  ([#6613](https://github.com/containers/libpod/issues/6613)).
* Fixed a bug where the `podman cp` command could create an extra
  `merged` directory when copying into an existing directory
  ([#6596](https://github.com/containers/libpod/issues/6596)).
* Fixed a bug where the `podman pod stats` command would crash
  on pods run with `--network=host`
  ([#5652](https://github.com/containers/libpod/issues/5652)).
* Fixed a bug where containers logs written to journald did not
  include the name of the container.
* Fixed a bug where the `podman network inspect` and
  `podman network rm` commands did not properly handle non-default
  CNI configuration paths ([#6212](https://github.com/containers/libpod/issues/6212)).
* Fixed a bug where Podman did not properly remove containers
  when using the Kata containers OCI runtime.
* Fixed a bug where `podman inspect` would sometimes incorrectly
  report the network mode of containers started with `--net=none`.
* Podman is now better able to deal with cases where `conmon`
  is killed before the container it is monitoring.

Update to podman v1.9.3:

* Fixed a bug where, on FIPS enabled hosts, FIPS mode secrets
  were not properly mounted into containers
* Fixed a bug where builds run over Varlink would hang
* Fixed a bug where podman save would fail when the target
  image was specified by digest
* Fixed a bug where rootless containers with ports forwarded to them
  could panic and dump core due to a concurrency issue (#6018)
* Fixed a bug where rootless Podman could race when opening the
  rootless user namespace, resulting in commands failing to run
* Fixed a bug where HTTP proxy environment variables forwarded into
  the container by the --http-proxy flag could not be overridden by --env or --env-file
* Fixed a bug where rootless Podman was setting resource limits on cgroups
  v2 systems that were not using systemd-managed cgroups
  (and thus did not support resource limits), resulting in containers failing to start

Update podman to v1.9.1:

* Bugfixes

  - Fixed a bug where healthchecks could become nonfunctional if
    container log paths were manually set with --log-path and
    multiple container logs were placed in the same directory
  - Fixed a bug where rootless Podman could, when using an older
    libpod.conf, print numerous warning messages about an invalid
    CGroup manager config
  - Fixed a bug where rootless Podman would sometimes fail to
    close the rootless user namespace when joining it

Update podman to v1.9.0:

* Features

  - Experimental support has been added for podman run
    --userns=auto, which automatically allocates a unique UID and
    GID range for the new container's user namespace
  - The podman play kube command now has a --network flag to
    place the created pod in one or more CNI networks
  - The podman commit command now supports an --iidfile flag to
    write the ID of the committed image to a file
  - Initial support for the new containers.conf configuration
    file has been added. containers.conf allows for much more
    detailed configuration of some Podman functionality

* Changes

  - There has been a major cleanup of the podman info command
    resulting in breaking changes. Many fields have been renamed
    to better suit usage with APIv2
  - All uses of the --timeout flag have been switched to prefer
    the alternative --time. The --timeout flag will continue to
    work, but man pages and --help will use the --time flag
    instead

* Bugfixes

  - Fixed a bug where some volume mounts from the host would
    sometimes not properly determine the flags they should use
    when mounting
  - Fixed a bug where Podman was not propagating $PATH to Conmon
    and the OCI runtime, causing issues for some OCI runtimes
    that required it
  - Fixed a bug where rootless Podman would print error messages
    about missing support for systemd cgroups when run in a
    container with no cgroup support
  - Fixed a bug where podman play kube would not properly handle
    container-only port mappings (#5610)
  - Fixed a bug where the podman container prune command was not
    pruning containers in the created and configured states
  - Fixed a bug where Podman was not properly removing CNI IP
    address allocations after a reboot (#5433)
  - Fixed a bug where Podman was not properly applying the
    default Seccomp profile when --security-opt was not given at
    the command line

* HTTP API

  - Many Libpod API endpoints have been added, including Changes,
    Checkpoint, Init, and Restore
  - Resolved issues where the podman system service command would
    time out and exit while there were still active connections
  - Stability overall has greatly improved as we prepare the API
    for a beta release soon with Podman 2.0

* Misc

  - The default infra image for pods has been upgraded to
    k8s.gcr.io/pause:3.2 (from 3.1) to address a bug in the
    architecture metadata for non-AMD64 images
  - The slirp4netns networking utility in rootless Podman now
    uses Seccomp filtering where available for improved security
  - Updated Buildah to v1.14.8
  - Updated containers/storage to v1.18.2
  - Updated containers/image to v5.4.3
  - Updated containers/common to v0.8.1

- Add 'systemd' BUILDFLAGS to build with support for journald
  logging (bsc#1162432)

Update podman to v1.8.2:

* Features

  - Initial support for automatically updating containers managed
    via Systemd unit files has been merged. This allows
    containers to automatically upgrade if a newer version of
    their image becomes available

* Bugfixes

  - Fixed a bug where unit files generated by podman generate
    systemd --new would not force containers to detach, causing
    the unit to time out when trying to start
  - Fixed a bug where podman system reset could delete important
    system directories if run as rootless on installations
    created by older Podman (#4831)
  - Fixed a bug where image built by podman build would not
    properly set the OS and Architecture they were built with
    (#5503)
  - Fixed a bug where attached podman run with --sig-proxy
    enabled (the default), when built with Go 1.14, would
    repeatedly send signal 23 to the process in the container and
    could generate errors when the container stopped (#5483)
  - Fixed a bug where rootless podman run commands could hang
    when forwarding ports
  - Fixed a bug where rootless Podman would not work when /proc
    was mounted with the hidepid option set
  - Fixed a bug where the podman system service command would use
    large amounts of CPU when --timeout was set to 0 (#5531)

* HTTP API

  - Initial support for Libpod endpoints related to creating and
    operating on image manifest lists has been added
  - The Libpod Healthcheck and Events API endpoints are now
    supported
  - The Swagger endpoint can now handle cases where no Swagger
    documentation has been generated

Update podman to v1.8.1:

* Features

  - Many networking-related flags have been added to podman pod
    create to enable customization of pod networks, including
    --add-host, --dns, --dns-opt, --dns-search, --ip,
    --mac-address, --network, and --no-hosts
  - The podman ps --format=json command now includes the ID of
    the image containers were created with
  - The podman run and podman create commands now feature an
    --rmi flag to remove the image the container was using after
    it exits (if no other containers are using said image)
    ([#4628](https://github.com/containers/libpod/issues/4628))
  - The podman create and podman run commands now support the
    --device-cgroup-rule flag (#4876)
  - While the HTTP API remains in alpha, many fixes and additions
    have landed. These are documented in a separate subsection
    below
  - The podman create and podman run commands now feature a
    --no-healthcheck flag to disable healthchecks for a container
    (#5299)
  - Containers now recognize the io.containers.capabilities
    label, which specifies a list of capabilities required by the
    image to run. These capabilities will be used as long as they
    are more restrictive than the default capabilities used
  - YAML produced by the podman generate kube command now
    includes SELinux configuration passed into the container via
    --security-opt label=... (#4950)

* Bugfixes

  - Fixed CVE-2020-1726, a security issue where volumes manually
    populated before first being mounted into a container could
    have those contents overwritten on first being mounted into a
    container
  - Fixed a bug where Podman containers with user namespaces in
    CNI networks with the DNS plugin enabled would not have the
    DNS plugin's nameserver added to their resolv.conf
    ([#5256](https://github.com/containers/libpod/issues/5256))
  - Fixed a bug where trailing / characters in image volume
    definitions could cause them to not be overridden by a
    user-specified mount at the same location
    ([#5219](https://github.com/containers/libpod/issues/5219))
  - Fixed a bug where the label option in libpod.conf, used to
    disable SELinux by default, was not being respected (#5087)
  - Fixed a bug where the podman login and podman logout commands
    required the registry to log into be specified (#5146)
  - Fixed a bug where detached rootless Podman containers could
    not forward ports (#5167)
  - Fixed a bug where rootless Podman could fail to run if the
    pause process had died
  - Fixed a bug where Podman ignored labels that were specified
    with only a key and no value (#3854)
  - Fixed a bug where Podman would fail to create named volumes
    when the backing filesystem did not support SELinux labelling
    (#5200)
  - Fixed a bug where --detach-keys='' would not disable
    detaching from a container (#5166)
  - Fixed a bug where the podman ps command was too aggressive
    when filtering containers and would force --all on in too
    many situations
  - Fixed a bug where the podman play kube command was ignoring
    image configuration, including volumes, working directory,
    labels, and stop signal (#5174)
  - Fixed a bug where the Created and CreatedTime fields in
    podman images --format=json were misnamed, which also broke
    Go template output for those fields
    ([#5110](https://github.com/containers/libpod/issues/5110))
  - Fixed a bug where rootless Podman containers with ports
    forwarded could hang when started (#5182)
  - Fixed a bug where podman pull could fail to parse registry
    names including port numbers
  - Fixed a bug where Podman would incorrectly attempt to
    validate image OS and architecture when starting containers
  - Fixed a bug where Bash completion for podman build -f would
    not list available files that could be built (#3878)
  - Fixed a bug where podman commit --change would perform
    incorrect validation, resulting in valid changes being
    rejected (#5148)
  - Fixed a bug where podman logs --tail could take large amounts
    of memory when the log file for a container was large (#5131)
  - Fixed a bug where Podman would sometimes incorrectly generate
    firewall rules on systems using firewalld
  - Fixed a bug where the podman inspect command would not
    display network information for containers properly if a
    container joined multiple CNI networks
    ([#4907](https://github.com/containers/libpod/issues/4907))
  - Fixed a bug where the --uts flag to podman create and podman
    run would only allow specifying containers by full ID (#5289)
  - Fixed a bug where rootless Podman could segfault when passed
    a large number of file descriptors
  - Fixed a bug where the podman port command was incorrectly
    interpreting additional arguments as container names, instead
    of port numbers
  - Fixed a bug where units created by podman generate systemd
    did not depend on network targets, and so could start before
    the system network was ready (#4130)
  - Fixed a bug where exec sessions in containers which did not
    specify a user would not inherit supplemental groups added to
    the container via --group-add
  - Fixed a bug where Podman would not respect the $TMPDIR
    environment variable for placing large temporary files during
    some operations (e.g. podman pull)
    ([#5411](https://github.com/containers/libpod/issues/5411))

* HTTP API

  - Initial support for secure connections to servers via SSH
    tunneling has been added
  - Initial support for the libpod create and logs endpoints for
    containers has been added
  - Added a /swagger/ endpoint to serve API documentation
  - The json endpoint for containers has received many fixes
  - Filtering images and containers has been greatly improved,
    with many bugs fixed and documentation improved
  - Image creation endpoints (commit, pull, etc) have seen many
    fixes
  - Server timeout has been fixed so that long operations will no
    longer trigger the timeout and shut the server down
  - The stats endpoint for containers has seen major fixes and
    now provides accurate output
  - Handling the HTTP 304 status code has been fixed for all
    endpoints
  - Many fixes have been made to API documentation to ensure it
    matches the code

* Misc

  - The Created field to podman images --format=json has been
    renamed to CreatedSince as part of the fix for (#5110). Go
    templates using the old name shou ld still work
  - The CreatedTime field to podman images --format=json has been
    renamed to CreatedAt as part of the fix for (#5110). Go
    templates using the old name should still work
  - The before filter to podman images has been renamed to since
    for Docker compatibility. Using before will still work, but
      documentation has been changed to use the new since filter
  - Using the --password flag to podman login now warns that
    passwords are being passed in plaintext
  - Some common cases where Podman would deadlock have been fixed
    to warn the user that podman system renumber must be run to
    resolve the deadlock

- Configure br_netfilter for podman automatically (bsc#1165738)
  The trigger is only excuted when updating podman-cni-config while the
  command was running

conmon was update to v2.0.20 (bsc#1175821)

- journald: fix logging container name
- container logging: Implement none driver - 'off', 'null' or
  'none' all work.
- ctrl: warn if we fail to unlink
- Drop fsync calls
- Reap PIDs before running exit command
- Fix log path parsing
- Add --sync option to prevent conmon from double forking
- Add --no-sync-log option to instruct conmon to not sync the
  logs of the containers upon shutting down. This feature fixes a
  regression where we unconditionally dropped the log sync. It is
  possible the container logs could be corrupted on a sudden
  power-off. If you need container logs to remain in consistent
  state after a sudden shutdown, please update from v2.0.19 to
  v2.0.20

- Update to v2.0.17:

  - Add option to delay execution of exit command

- Update to v2.0.16:

  - tty: flush pending data when fd is ready

- Enable support for journald logging (bsc#1162432)
- Update to v2.0.15:

  - store status while waiting for pid

- Update to v2.0.14:

  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe

- Update to v2.0.12

  - oom: fix potential race between verification steps

- Update to v2.0.11

  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM
  - journal logging: write to /dev/null instead of -1

fuse-overlayfs was updated to 1.1.2 (bsc#1175821):

- fix memory leak when creating whiteout files.
- fix lookup for overflow uid when it is different than the overflow gid.
- use openat2(2) when available.
- accept 'ro' as mount option.
- fix set mtime for a symlink.
- fix some issues reported by static analysis.
- fix potential infinite loop on a short read.
- fix creating a directory if the destination already exists
  in the upper layer.
- report correctly the number of links for a directory also for
  subsequent stat calls
- stop looking up the ino in the lower layers if the file could
  not be opened
- make sure the destination is deleted before doing a rename(2).
  It prevents a left over directory to cause delete to fail with
  EEXIST.
- honor --debug.

libcontainers-common was updated to fix:

- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)
- Added containers/common tarball for containers.conf(5) man page
- Install containers.conf default configuration in
  /usr/share/containers
- libpod repository on github got renamed to podman
- Update to image 5.5.1
  - Add documentation for credHelpera
  - Add defaults for using the rootless policy path
- Update libpod/podman to 2.0.3
  - docs: user namespace can't be shared in pods
  - Switch references from libpod.conf to containers.conf
  - Allow empty host port in --publish flag
  - update document login see config.json as valid
- Update storage to 1.20.2
  - Add back skip_mount_home

- Remove remaining difference between SLE and openSUSE package and
  ship the some mounts.conf default configuration on both platforms.
  As the sources for the mount point do not exist on openSUSE by
  default this config will basically have no effect on openSUSE.
  (jsc#SLE-12122, bsc#1175821) 

- Update to image 5.4.4
  - Remove registries.conf VERSION 2 references from man page
  - Intial authfile man page
  - Add $HOME/.config/containers/certs.d to perHostCertDirPath
  - Add $HOME/.config/containers/registries.conf to config path
  - registries.conf.d: add stances for the registries.conf
- update to libpod 1.9.3
  - userns: support --userns=auto
  - Switch to using --time as opposed to --timeout to better match Docker
  - Add support for specifying CNI networks in podman play kube
  - man pages: fix inconsistencies
- Update to storage 1.19.1
  - userns: add support for auto
  - store: change the default user to containers
  - config: honor XDG_CONFIG_HOME
- Remove the /var/lib/ca-certificates/pem/SUSE.pem workaround again.
  It never ended up in SLES and a different way to fix the underlying
  problem is being worked on.

- Add registry.opensuse.org as default registry [bsc#1171578] 

- Add /var/lib/ca-certificates/pem/SUSE.pem to the SLES mounts.
  This for making container-suseconnect working in the public
  cloud on-demand images. It needs that file for being able to
  verify the server certificates of the RMT servers hosted
  in the public cloud.
  (https://github.com/SUSE/container-suseconnect/issues/41)
  

      		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-24"/>
	<updated date="2020-09-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162432">SUSE bug 1162432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164090">SUSE bug 1164090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165738">SUSE bug 1165738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171578">SUSE bug 1171578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174075">SUSE bug 1174075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175821">SUSE bug 1175821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175957">SUSE bug 1175957</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-1726/">CVE-2020-1726</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494399" comment="conmon-2.0.20-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494400" comment="fuse-overlayfs-1.1.2-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494401" comment="podman-2.0.6-4.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494402" comment="podman-cni-config-2.0.6-4.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138051" version="1" class="patch">
	<metadata>
		<title>Security update for podman (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176804" ref_url="https://bugzilla.suse.com/1176804" source="BUGZILLA"/>
		<reference ref_id="1178122" ref_url="https://bugzilla.suse.com/1178122" source="BUGZILLA"/>
		<reference ref_id="1178392" ref_url="https://bugzilla.suse.com/1178392" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14370" ref_url="https://www.suse.com/security/cve/CVE-2020-14370/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3378-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007809.html" source="SUSE-SU"/>
		<description>
This update for podman fixes the following issues:

Security issue fixed:

- This release resolves CVE-2020-14370, in which environment variables could be leaked between containers created using the Varlink API (bsc#1176804).

Non-security issues fixed:

- add dependency to timezone package or podman fails to build a 
  container (bsc#1178122)

- Install new auto-update system units
- Update to v2.1.1 (bsc#1178392):
  * Changes
    - The `podman info` command now includes the cgroup manager
      Podman is using.
  * API
    - The REST API now includes a Server header in all responses.
    - Fixed a bug where the Libpod and Compat Attach endpoints
      could terminate early, before sending all output from the
      container.
    - Fixed a bug where the Compat Create endpoint for containers
      did not properly handle the Interactive parameter.
    - Fixed a bug where the Compat Kill endpoint for containers
      could continue to run after a fatal error.
    - Fixed a bug where the Limit parameter of the Compat List
      endpoint for Containers did not properly handle a limit of 0
      (returning nothing, instead of all containers) [#7722].
    - The Libpod Stats endpoint for containers is being deprecated
      and will be replaced by a similar endpoint with additional
      features in a future release.
- Changes in v2.1.0
  * Features
    - A new command, `podman image mount`, has been added. This
      allows for an image to be mounted, read-only, to inspect its
      contents without creating a container from it [#1433].
    - The `podman save` and `podman load` commands can now create
      and load archives containing multiple images [#2669].
    - Rootless Podman now supports all `podman network` commands,
      and rootless containers can now be joined to networks.
    - The performance of `podman build` on `ADD` and `COPY`
      instructions has been greatly improved, especially when a
      `.dockerignore` is present.
    - The `podman run` and `podman create` commands now support a
      new mode for the `--cgroups` option, `--cgroups=split`.
      Podman will create two cgroups under the cgroup it was
      launched in, one for the container and one for Conmon. This
      mode is useful for running Podman in a systemd unit, as it
      ensures that all processes are retained in systemd's cgroup
      hierarchy [#6400].
    - The `podman run` and `podman create` commands can now specify
      options to slirp4netns by using the `--network` option as
      follows:  `--net slirp4netns:opt1,opt2`. This allows for,
      among other things, switching the port forwarder used by
      slirp4netns away from rootlessport.
    - The `podman ps` command now features a new option,
      `--storage`, to show containers from Buildah, CRI-O and other
      applications.
    - The `podman run` and `podman create` commands now feature a
      `--sdnotify` option to control the behavior of systemd's
      sdnotify with containers, enabling improved support for
      Podman in `Type=notify` units.
    - The `podman run` command now features a `--preserve-fds`
      opton to pass file descriptors from the host into the
      container [#6458].
    - The `podman run` and `podman create` commands can now create
      overlay volume mounts, by adding the `:O` option to a bind
      mount (e.g. `-v /test:/test:O`). Overlay volume mounts will
      mount a directory into a container from the host and allow
      changes to it, but not write those changes back to the
      directory on the host.
    - The `podman play kube` command now supports the Socket
      HostPath type [#7112].
    - The `podman play kube` command now supports read-only mounts.
    - The `podman play kube` command now supports setting labels on
      pods from Kubernetes metadata labels.
    - The `podman play kube` command now supports setting container
      restart policy [#7656].
    - The `podman play kube` command now properly handles
      `HostAlias` entries.
    - The `podman generate kube` command now adds entries to
      `/etc/hosts` from `--host-add` generated YAML as `HostAlias`
      entries.
    - The `podman play kube` and `podman generate kube` commands
      now properly support `shareProcessNamespace` to share the PID
      namespace in pods.
    - The `podman volume ls` command now supports the `dangling`
      filter to identify volumes that are dangling (not attached to
      any container).
    - The `podman run` and `podman create` commands now feature a
      `--umask` option to set the umask of the created container.
    - The `podman create` and `podman run` commands now feature a
      `--tz` option to set the timezone within the container [#5128].
    - Environment variables for Podman can now be added in the
      `containers.conf` configuration file.
    - The `--mount` option of `podman run` and `podman create` now
      supports a new mount type, `type=devpts`, to add a `devpts`
      mount to the container. This is useful for containers that
      want to mount `/dev/` from the host into the container, but
      still create a terminal.
    - The `--security-opt` flag to `podman run` and `podman create`
      now supports a new option, `proc-opts`, to specify options
      for the container's `/proc` filesystem.
    - Podman with the `crun` OCI runtime now supports a new option
      to `podman run` and `podman create`, `--cgroup-conf`, which
      allows for advanced configuration of cgroups on cgroups v2
      systems.
    - The `podman create` and `podman run` commands now support a
      `--override-variant` option, to override the architecture
      variant of the image that will be pulled and ran.
    - A new global option has been added to Podman,
      `--runtime-flags`, which allows for setting flags to use when
      the OCI runtime is called.
    - The `podman manifest add` command now supports the
      `--cert-dir`, `--auth-file`, `--creds`, and `--tls-verify`
      options.
  * Security
    - This release resolves CVE-2020-14370, in which environment
      variables could be leaked between containers created using
      the Varlink API.
  * Changes
    - Podman will now retry pulling an image 3 times if a pull
      fails due to network errors.
    - The `podman exec` command would previously print error
      messages (e.g. `exec session exited with non-zero exit code
      -1`) when the command run exited with a non-0 exit code. It
      no longer does this. The `podman exec` command will still
      exit with the same exit code as the command run in the
      container did.
    - Error messages when creating a container or pod with a name
      that is already in use have been improved.
    - For read-only containers running systemd init, Podman creates
      a tmpfs filesystem at `/run`. This was previously limited to
      65k in size and mounted `noexec`, but is now unlimited size
      and mounted `exec`.
    - The `podman system reset` command no longer removes
      configuration files for rootless Podman.
  * API
    - The Libpod API version has been bumped to v2.0.0 due to a
      breaking change in the Image List API.
    - Docker-compatible Volume Endpoints (Create, Inspect, List,
      Remove, Prune) are now available!
    - Added an endpoint for generating systemd unit files for
      containers.
    - The `last` parameter to the Libpod container list endpoint
      now has an alias, `limit` [#6413].
    - The Libpod image list API new returns timestamps in Unix
      format, as integer, as opposed to as strings
    - The Compat Inspect endpoint for containers now includes port
      information in NetworkSettings.
    - The Compat List endpoint for images now features limited
      support for the (deprecated) `filter` query parameter [#6797].
    - Fixed a bug where the Compat Create endpoint for containers
      was not correctly handling bind mounts.
    - Fixed a bug where the Compat Create endpoint for containers
      would not return a 404 when the requested image was not
      present.
    - Fixed a bug where the Compat Create endpoint for containers
      did not properly handle Entrypoint and Command from images.
    - Fixed a bug where name history information was not properly
      added in the Libpod Image List endpoint.
    - Fixed a bug where the Libpod image search endpoint improperly
      populated the Description field of responses.
    - Added a `noTrunc` option to the Libpod image search endpoint.
    - Fixed a bug where the Pod List API would return null, instead
      of an empty array, when no pods were present [#7392].
    - Fixed a bug where endpoints that hijacked would do perform
      the hijack too early, before being ready to send and receive
      data [#7195].
    - Fixed a bug where Pod endpoints that can operate on multiple
      containers at once (e.g. Kill, Pause, Unpause, Stop) would
      not forward errors from individual containers that failed.
    - The Compat List endpoint for networks now supports filtering
      results [#7462].
    - Fixed a bug where the Top endpoint for pods would return both
      a 500 and 404 when run on a non-existent pod.
    - Fixed a bug where Pull endpoints did not stream progress back
      to the client.
    - The Version endpoints (Libpod and Compat) now provide version
      in a format compatible with Docker.
    - All non-hijacking responses to API requests should not
      include headers with the version of the server.
    - Fixed a bug where Libpod and Compat Events endpoints did not
      send response headers until the first event occurred [#7263].
    - Fixed a bug where the Build endpoints (Compat and Libpod) did
      not stream progress to the client.
    - Fixed a bug where the Stats endpoints (Compat and Libpod) did
      not properly handle clients disconnecting.
    - Fixed a bug where the Ignore parameter to the Libpod Stop
      endpoint was not performing properly.
    - Fixed a bug where the Compat Logs endpoint for containers did
      not stream its output in the correct format [#7196].
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1176804">SUSE bug 1176804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178122">SUSE bug 1178122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178392">SUSE bug 1178392</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14370/">CVE-2020-14370</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494403" comment="podman-2.1.1-4.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494404" comment="podman-cni-config-2.1.1-4.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138052" version="1" class="patch">
	<metadata>
		<title>Security update for buildah (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1165184" ref_url="https://bugzilla.suse.com/1165184" source="BUGZILLA"/>
		<reference ref_id="1167864" ref_url="https://bugzilla.suse.com/1167864" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10214" ref_url="https://www.suse.com/security/cve/CVE-2019-10214/" source="CVE"/>
		<reference ref_id="CVE-2020-10696" ref_url="https://www.suse.com/security/cve/CVE-2020-10696/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3423-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007820.html" source="SUSE-SU"/>
		<description>
This update for buildah fixes the following issues:

buildah was updated to v1.17.0 (bsc#1165184):

* Handle cases where other tools mount/unmount containers
* overlay.MountReadOnly: support RO overlay mounts
* overlay: use fusermount for rootless umounts
* overlay: fix umount
* Switch default log level of Buildah to Warn. Users need to see these messages
* Drop error messages about OCI/Docker format to Warning level
* build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2
* tests/testreport: adjust for API break in storage v1.23.6
* build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7
* build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6
* copier: put: ignore Typeflag='g'
* Use curl to get repo file (fix #2714)
* build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0
* build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1
* Remove docs that refer to bors, since we're not using it
* Buildah bud should not use stdin by default
* bump containerd, docker, and golang.org/x/sys
* Makefile: cross: remove windows.386 target
* copier.copierHandlerPut: don't check length when there are errors
* Stop excessive wrapping
* CI: require that conformance tests pass
* bump(github.com/openshift/imagebuilder) to v1.1.8
* Skip tlsVerify insecure BUILD_REGISTRY_SOURCES
* Fix build path wrong containers/podman#7993
* refactor pullpolicy to avoid deps
* build(deps): bump github.com/containers/common from 0.24.0 to 0.25.0
* CI: run gating tasks with a lot more memory
* ADD and COPY: descend into excluded directories, sometimes
* copier: add more context to a couple of error messages
* copier: check an error earlier
* copier: log stderr output as debug on success
* Update nix pin with make nixpkgs
* Set directory ownership when copied with ID mapping
* build(deps): bump github.com/sirupsen/logrus from 1.6.0 to 1.7.0
* build(deps): bump github.com/containers/common from 0.23.0 to 0.24.0
* Cirrus: Remove bors artifacts
* Sort build flag definitions alphabetically
* ADD: only expand archives at the right time
* Remove configuration for bors
* Shell Completion for podman build flags
* Bump c/common to v0.24.0
* New CI check: xref --help vs man pages
* CI: re-enable several linters
* Move --userns-uid-map/--userns-gid-map description into buildah man page
* add: preserve ownerships and permissions on ADDed archives
* Makefile: tweak the cross-compile target
* Bump containers/common to v0.23.0
* chroot: create bind mount targets 0755 instead of 0700
* Change call to Split() to safer SplitN()
* chroot: fix handling of errno seccomp rules
* build(deps): bump github.com/containers/image/v5 from 5.5.2 to 5.6.0
* Add In Progress section to contributing
* integration tests: make sure tests run in ${topdir}/tests
* Run(): ignore containers.conf's environment configuration
* Warn when setting healthcheck in OCI format
* Cirrus: Skip git-validate on branches
* tools: update git-validation to the latest commit
* tools: update golangci-lint to v1.18.0
* Add a few tests of push command
* Add(): fix handling of relative paths with no ContextDir
* build(deps): bump github.com/containers/common from 0.21.0 to 0.22.0
* Lint: Use same linters as podman
* Validate: reference HEAD
* Fix buildah mount to display container names not ids
* Update nix pin with make nixpkgs
* Add missing --format option in buildah from man page
* Fix up code based on codespell
* build(deps): bump github.com/openshift/imagebuilder from 1.1.6 to 1.1.7
* build(deps): bump github.com/containers/storage from 1.23.4 to 1.23.5
* Improve buildah completions
* Cirrus: Fix validate commit epoch
* Fix bash completion of manifest flags
* Uniform some man pages
* Update Buildah Tutorial to address BZ1867426
* Update bash completion of manifest add sub command
* copier.Get(): hard link targets shouldn't be relative paths
* build(deps): bump github.com/onsi/gomega from 1.10.1 to 1.10.2
* Pass timestamp down to history lines
* Timestamp gets updated everytime you inspect an image
* bud.bats: use absolute paths in newly-added tests
* contrib/cirrus/lib.sh: don't use CN for the hostname
* tests: Add some tests
* Update manifest add man page
* Extend flags of manifest add
* build(deps): bump github.com/containers/storage from 1.23.3 to 1.23.4
* build(deps): bump github.com/onsi/ginkgo from 1.14.0 to 1.14.1
* CI: expand cross-compile checks

Update to v1.16.2:

* fix build on 32bit arches
* containerImageRef.NewImageSource(): don't always force timestamps
* Add fuse module warning to image readme
* Heed our retry delay option values when retrying commit/pull/push
* Switch to containers/common for seccomp
* Use --timestamp rather then --omit-timestamp
* docs: remove outdated notice
* docs: remove outdated notice
* build-using-dockerfile: add a hidden --log-rusage flag
* build(deps): bump github.com/containers/image/v5 from 5.5.1 to 5.5.2
* Discard ReportWriter if user sets options.Quiet
* build(deps): bump github.com/containers/common from 0.19.0 to 0.20.3
* Fix ownership of content copied using COPY --from
* newTarDigester: zero out timestamps in tar headers
* Update nix pin with `make nixpkgs`
* bud.bats: correct .dockerignore integration tests
* Use pipes for copying
* run: include stdout in error message
* run: use the correct error for errors.Wrapf
* copier: un-export internal types
* copier: add Mkdir()
* in_podman: don't get tripped up by $CIRRUS_CHANGE_TITLE
* docs/buildah-commit.md: tweak some wording, add a --rm example
* imagebuildah: don’t blank out destination names when COPYing
* Replace retry functions with common/pkg/retry
* StageExecutor.historyMatches: compare timestamps using .Equal
* Update vendor of containers/common
* Fix errors found in coverity scan
* Change namespace handling flags to better match podman commands
* conformance testing: ignore buildah.BuilderIdentityAnnotation labels
* Vendor in containers/storage v1.23.0
* Add buildah.IsContainer interface
* Avoid feeding run_buildah to pipe
* fix(buildahimage): add xz dependency in buildah image
* Bump github.com/containers/common from 0.15.2 to 0.18.0
* Howto for rootless image building from OpenShift
* Add --omit-timestamp flag to buildah bud
* Update nix pin with `make nixpkgs`
* Shutdown storage on failures
* Handle COPY --from when an argument is used
* Bump github.com/seccomp/containers-golang from 0.5.0 to 0.6.0
* Cirrus: Use newly built VM images
* Bump github.com/opencontainers/runc from 1.0.0-rc91 to 1.0.0-rc92
* Enhance the .dockerignore man pages
* conformance: add a test for COPY from subdirectory
* fix  bug manifest inspct
* Add documentation for .dockerignore
* Add BuilderIdentityAnnotation to identify buildah version
* DOC: Add quay.io/containers/buildah image to README.md
* Update buildahimages readme
* fix spelling mistake in 'info' command result display
* Don't bind /etc/host and /etc/resolv.conf if network is not present
* blobcache: avoid an unnecessary NewImage()
* Build static binary with `buildGoModule`
* copier: split StripSetidBits into StripSetuidBit/StripSetgidBit/StripStickyBit
* tarFilterer: handle multiple archives
* Fix a race we hit during conformance tests
* Rework conformance testing
* Update 02-registries-repositories.md
* test-unit: invoke cmd/buildah tests with --flags
* parse: fix a type mismatch in a test
* Fix compilation of tests/testreport/testreport
* build.sh: log the version of Go that we're using
* test-unit: increase the test timeout to 40/45 minutes
* Add the 'copier' package
* Fix &amp; add notes regarding problematic language in codebase
* Add dependency on github.com/stretchr/testify/require
* CompositeDigester: add the ability to filter tar streams
* BATS tests: make more robust
* vendor golang.org/x/text@v0.3.3
* Switch golang 1.12 to golang 1.13
* imagebuildah: wait for stages that might not have even started yet
* chroot, run: not fail on bind mounts from /sys
* chroot: do not use setgroups if it is blocked
* Set engine env from containers.conf
* imagebuildah: return the right stage's image as the 'final' image
* Fix a help string
* Deduplicate environment variables
* switch containers/libpod to containers/podman
* Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3
* Bump github.com/opencontainers/selinux from 1.5.2 to 1.6.0
* Mask out /sys/dev to prevent information leak
* linux: skip errors from the runtime kill
* Mask over the /sys/fs/selinux in mask branch
* Add VFS additional image store to container
* tests: add auth tests
* Allow 'readonly' as alias to 'ro' in mount options
* Ignore OS X specific consistency mount option
* Bump github.com/onsi/ginkgo from 1.13.0 to 1.14.0
* Bump github.com/containers/common from 0.14.0 to 0.15.2
* Rootless Buildah should default to IsolationOCIRootless
* imagebuildah: fix inheriting multi-stage builds
* Make imagebuildah.BuildOptions.Architecture/OS optional
* Make imagebuildah.BuildOptions.Jobs optional
* Resolve a possible race in imagebuildah.Executor.startStage()
* Switch scripts to use containers.conf
* Bump openshift/imagebuilder to v1.1.6
* Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
* buildah, bud: support --jobs=N for parallel execution
* executor: refactor build code inside new function
* Add bud regression tests
* Cirrus: Fix missing htpasswd in registry img
* docs: clarify the 'triples' format
* CHANGELOG.md: Fix markdown formatting
* Add nix derivation for static builds
* Bump to v1.16.0-dev

- Update to v1.15.1
* Mask over the /sys/fs/selinux in mask branch
* chroot: do not use setgroups if it is blocked
* chroot, run: not fail on bind mounts from /sys
* Allow 'readonly' as alias to 'ro' in mount options
* Add VFS additional image store to container
* vendor golang.org/x/text@v0.3.3
* Make imagebuildah.BuildOptions.Architecture/OS optional

Update to v1.15.0:

* Add CVE-2020-10696 to CHANGELOG.md and changelog.txt
* fix lighttpd example
* remove dependency on openshift struct
* Warn on unset build arguments
* vendor: update seccomp/containers-golang to v0.4.1
* Updated docs
* clean up comments
* update exit code for tests
* Implement commit for encryption
* implementation of encrypt/decrypt push/pull/bud/from
* fix resolve docker image name as transport
* Add preliminary profiling support to the CLI
* Evaluate symlinks in build context directory
* fix error info about get signatures for containerImageSource
* Add Security Policy
* Cirrus: Fixes from review feedback
* imagebuildah: stages shouldn't count as their base images
* Update containers/common v0.10.0
* Add registry to buildahimage Dockerfiles
* Cirrus: Use pre-installed VM packages + F32
* Cirrus: Re-enable all distro versions
* Cirrus: Update to F31 + Use cache images
* golangci-lint: Disable gosimple
* Lower number of golangci-lint threads
* Fix permissions on containers.conf
* Don't force tests to use runc
* Return exit code from failed containers
* cgroup_manager should be under [engine]
* Use c/common/pkg/auth in login/logout
* Cirrus: Temporarily disable Ubuntu 19 testing
* Add containers.conf to stablebyhand build
* Update gitignore to exclude test Dockerfiles
* Remove warning for systemd inside of container

Update to v1.14.6:

* Make image history work correctly with new args handling
* Don't add args to the RUN environment from the Builder

Update to v1.14.5:

* Revert FIPS mode change

Update to v1.14.4:

* Update unshare man page to fix script example
* Fix compilation errors on non linux platforms
* Preserve volume uid and gid through subsequent commands
* Fix potential CVE in tarfile w/ symlink
* Fix .dockerignore with globs and ! commands

Update to v1.14.2:

* Search for local runtime per values in containers.conf
* Set correct ownership on working directory
* Improve remote manifest retrieval
* Correct a couple of incorrect format specifiers
* manifest push --format: force an image type, not a list type
* run: adjust the order in which elements are added to $
* getDateAndDigestAndSize(): handle creation time not being set
* Make the commit id clear like Docker
* Show error on copied file above context directory in build
* pull/from/commit/push: retry on most failures
* Repair buildah so it can use containers.conf on the server side
* Fixing formatting &amp; build instructions
* Fix XDG_RUNTIME_DIR for authfile
* Show validation command-line

Update to v1.14.0:

* getDateAndDigestAndSize(): use manifest.Digest
* Touch up os/arch doc
* chroot: handle slightly broken seccomp defaults
* buildahimage: specify fuse-overlayfs mount options
* parse: don't complain about not being able to rename something to itself
* Fix build for 32bit platforms
* Allow users to set OS and architecture on bud
* Fix COPY in containerfile with envvar
* Add --sign-by to bud/commit/push, --remove-signatures for pull/push
* Add support for containers.conf
* manifest push: add --format option

Update to v1.13.1:

* copyFileWithTar: close source files at the right time
* copy: don't digest files that we ignore
* Check for .dockerignore specifically
* Don't setup excludes, if their is only one pattern to match
* set HOME env to /root on chroot-isolation by default
* docs: fix references to containers-*.5
* fix bug Add check .dockerignore COPY file
* buildah bud --volume: run from tmpdir, not source dir
* Fix imageNamePrefix to give consistent names in buildah-from
* cpp: use -traditional and -undef flags
* discard outputs coming from onbuild command on buildah-from --quiet
* make --format columnizing consistent with buildah images
* Fix option handling for volumes in build
* Rework overlay pkg for use with libpod
* Fix buildahimage builds for buildah
* Add support for FIPS-Mode backends
* Set the TMPDIR for pulling/pushing image to $TMPDIR

Update to v1.12.0:

* Allow ADD to use http src
* imgtype: reset storage opts if driver overridden
* Start using containers/common
* overlay.bats typo: fuse-overlays should be fuse-overlayfs
* chroot: Unmount with MNT_DETACH instead of UnmountMountpoints()
* bind: don't complain about missing mountpoints
* imgtype: check earlier for expected manifest type
* Add history names support

Update to v1.11.6:

* Handle missing equal sign in --from and --chown flags for COPY/ADD
* bud COPY does not download URL
* Fix .dockerignore exclude regression
* commit(docker): always set ContainerID and ContainerConfig
* Touch up commit man page image parameter
* Add builder identity annotations.

Update to v1.11.5:

* buildah: add 'manifest' command
* pkg/supplemented: add a package for grouping images together
* pkg/manifests: add a manifest list build/manipulation API
* Update for ErrUnauthorizedForCredentials API change in containers/image
* Update for manifest-lists API changes in containers/image
* version: also note the version of containers/image
* Move to containers/image v5.0.0
* Enable --device directory as src device
* Add clarification to the Tutorial for new users
* Silence 'using cache' to ensure -q is fully quiet
* Move runtime flag to bud from common
* Commit: check for storage.ErrImageUnknown using errors.Cause()
* Fix crash when invalid COPY --from flag is specified.

Update to v1.11.4:

* buildah: add a 'manifest' command
* pkg/manifests: add a manifest list build/manipulation API
* Update for ErrUnauthorizedForCredentials API change in containers/image
* Update for manifest-lists API changes in containers/image
* Move to containers/image v5.0.0
* Enable --device directory as src device
* Add clarification to the Tutorial for new users
* Silence 'using cache' to ensure -q is fully quiet
* Move runtime flag to bud from common
* Commit: check for storage.ErrImageUnknown using errors.Cause()
* Fix crash when invalid COPY --from flag is specified.

Update to v1.11.3:

* Add cgroups2
* Add support for retrieving context from stdin '-'
* Added tutorial on how to include Buildah as library
* Fix --build-args handling
* Print build 'STEP' line to stdout, not stderr
* Use Containerfile by default

Update to v1.11.2:

* Add some cleanup code
* Move devices code to unit specific directory.

Update to v1.11.1:

* Add --devices flag to bud and from
* Add support for /run/.containerenv
* Allow mounts.conf entries for equal source and destination paths
* Fix label and annotation for 1-line Dockerfiles
* Preserve file and directory mount permissions
* Replace --debug=false with --log-level=error
* Set TMPDIR to /var/tmp by default
* Truncate output of too long image names
* Ignore EmptyLayer if Squash is set

Update to v1.11.0:

* Add --digestfile and Re-add push statement as debug
* Add --log-level command line option and deprecate --debug
* Add security-related volume options to validator
* Allow buildah bud to be called without arguments
* Allow to override build date with SOURCE_DATE_EPOCH
* Correctly detect ExitError values from Run()
* Disable empty logrus timestamps to reduce logger noise
* Fix directory pull image names
* Fix handling of /dev/null masked devices
* Fix possible runtime panic on bud
* Update bud/from help to contain indicator for --dns=none
* Update documentation about bud
* Update shebangs to take env into consideration
* Use content digests in ADD/COPY history entries
* add support for cgroupsV2
* add: add a DryRun flag to AddAndCopyOptions
* add: handle hard links when copying with .dockerignore
* add: teach copyFileWithTar() about symlinks and directories
* imagebuilder: fix detection of referenced stage roots
* pull/commit/push: pay attention to $BUILD_REGISTRY_SOURCES
* run_linux: fix mounting /sys in a userns


Update to v1.10.1:

* Add automatic apparmor tag discovery
* Add overlayfs to fuse-overlayfs tip
* Bug fix for volume minus syntax
* Bump container/storage v1.13.1 and containers/image v3.0.1
* Bump containers/image to v3.0.2 to fix keyring issue
* Fix bug whereby --get-login has no effect
* Bump github.com/containernetworking/cni to v0.7.1
- Add appamor-pattern requirement

- Update build process to match the latest repository architecture
- Update to v1.10.0
* vendor github.com/containers/image@v3.0.0
* Remove GO111MODULE in favor of -mod=vendor
* Vendor in containers/storage v1.12.16
* Add '-' minus syntax for removal of config values
* tests: enable overlay tests for rootless
* rootless, overlay: use fuse-overlayfs
* vendor github.com/containers/image@v2.0.1
* Added '-' syntax to remove volume config option
* delete successfully pushed message
* Add golint linter and apply fixes
* vendor github.com/containers/storage@v1.12.15
* Change wait to sleep in buildahimage readme
* Handle ReadOnly images when deleting images
* Add support for listing read/only images
* from/import: record the base image's digest, if it has one
* Fix CNI version retrieval to not require network connection
* Add misspell linter and apply fixes
* Add goimports linter and apply fixes
* Add stylecheck linter and apply fixes
* Add unconvert linter and apply fixes
* image: make sure we don't try to use zstd compression
* run.bats: skip the 'z' flag when testing --mount
* Update to runc v1.0.0-rc8
* Update to match updated runtime-tools API
* bump github.com/opencontainers/runtime-tools to v0.9.0
* Build e2e tests using the proper build tags
* Add unparam linter and apply fixes
* Run: correct a typo in the --cap-add help text
* unshare: add a --mount flag
* fix push check image name is not empty
* add: fix slow copy with no excludes
* Add errcheck linter and fix missing error check
* Improve tests/tools/Makefile parallelism and abstraction
* Fix response body not closed resource leak
* Switch to golangci-lint
* Add gomod instructions and mailing list links
* On Masked path, check if /dev/null already mounted before mounting
* Update to containers/storage v1.12.13
* Refactor code in package imagebuildah
* Add rootless podman with NFS issue in documentation
* Add --mount for buildah run
* import method ValidateVolumeOpts from libpod
* Fix typo
* Makefile: set GO111MODULE=off
* rootless: add the built-in slirp DNS server
* Update docker/libnetwork to get rid of outdated sctp package
* Update buildah-login.md
* migrate to go modules
* install.md: mention go modules
* tests/tools: go module for test binaries
* fix --volume splits comma delimited option
* Add bud test for RUN with a priv'd command
* vendor logrus v1.4.2
* pkg/cli: panic when flags can't be hidden
* pkg/unshare: check all errors
* pull: check error during report write
* run_linux.go: ignore unchecked errors
* conformance test: catch copy error
* chroot/run_test.go: export funcs to actually be executed
* tests/imgtype: ignore error when shutting down the store
* testreport: check json error
* bind/util.go: remove unused func
* rm chroot/util.go
* imagebuildah: remove unused dedupeStringSlice
* StageExecutor: EnsureContainerPath: catch error from SecureJoin()
* imagebuildah/build.go: return instead of branching
* rmi: avoid redundant branching
* conformance tests: nilness: allocate map
* imagebuildah/build.go: avoid redundant filepath.Join()
* imagebuildah/build.go: avoid redundant os.Stat()
* imagebuildah: omit comparison to bool
* fix 'ineffectual assignment' lint errors
* docker: ignore 'repeats json tag' lint error
* pkg/unshare: use ... instead of iterating a slice
* conformance: bud test: use raw strings for regexes
* conformance suite: remove unused func/var
* buildah test suite: remove unused vars/funcs
* testreport: fix golangci-lint errors
* util: remove redundant return statement
* chroot: only log clean-up errors
* images_test: ignore golangci-lint error
* blobcache: log error when draining the pipe
* imagebuildah: check errors in deferred calls
* chroot: fix error handling in deferred funcs
* cmd: check all errors
* chroot/run_test.go: check errors
* chroot/run.go: check errors in deferred calls
* imagebuildah.Executor: remove unused onbuild field
* docker/types.go: remove unused struct fields
* util: use strings.ContainsRune instead of index check
* Cirrus: Initial implementation
* buildah-run: fix-out-of-range panic (2)
* Update containers/image to v2.0.0
* run: fix hang with run and --isolation=chroot
* run: fix hang when using run
* chroot: drop unused function call
* remove --&gt; before imgageID on build
* Always close stdin pipe
* Write deny to setgroups when doing single user mapping
* Avoid including linux/memfd.h
* Add a test for the symlink pointing to a directory
* Add missing continue
* Fix the handling of symlinks to absolute paths
* Only set default network sysctls if not rootless
* Support --dns=none like podman
* fix bug --cpu-shares parsing typo
* Fix validate complaint
* Update vendor on containers/storage to v1.12.10
* Create directory paths for COPY thereby ensuring correct perms
* imagebuildah: use a stable sort for comparing build args
* imagebuildah: tighten up cache checking
* bud.bats: add a test verying the order of --build-args
* add -t to podman run
* imagebuildah: simplify screening by top layers
* imagebuildah: handle ID mappings for COPY --from
* imagebuildah: apply additionalTags ourselves
* bud.bats: test additional tags with cached images
* bud.bats: add a test for WORKDIR and COPY with absolute destinations
* Cleanup Overlay Mounts content
* Add support for file secret mounts
* Add ability to skip secrets in mounts file
* allow 32bit builds
* fix tutorial instructions
* imagebuilder: pass the right contextDir to Add()
* add: use fileutils.PatternMatcher for .dockerignore
* bud.bats: add another .dockerignore test
* unshare: fallback to single usermapping
* addHelperSymlink: clear the destination on os.IsExist errors
* bud.bats: test replacing symbolic links
* imagebuildah: fix handling of destinations that end with '/'
* bud.bats: test COPY with a final '/' in the destination
* linux: add check for sysctl before using it
* unshare: set _CONTAINERS_ROOTLESS_GID
* Rework buildahimamges
* build context: support https git repos
* Add a test for ENV special chars behaviour
* Check in new Dockerfiles
* Apply custom SHELL during build time
* config: expand variables only at the command line
* SetEnv: we only need to expand v once
* Add default /root if empty on chroot iso
* Add support for Overlay volumes into the container.
* Export buildah validate volume functions so it can share code with libpod
* Bump baseline test to F30
* Fix rootless handling of /dev/shm size
* Avoid fmt.Printf() in the library
* imagebuildah: tighten cache checking back up
* Handle WORKDIR with dangling target
* Default Authfile to proper path
* Make buildah run --isolation follow BUILDAH_ISOLATION environment
* Vendor in latest containers/storage and containers/image
* getParent/getChildren: handle layerless images
* imagebuildah: recognize cache images for layerless images
* bud.bats: test scratch images with --layers caching
* Get CHANGELOG.md updates
* Add some symlinks to test our .dockerignore logic
* imagebuildah: addHelper: handle symbolic links
* commit/push: use an everything-allowed policy
* Correct manpage formatting in files section
* Remove must be root statement from buildah doc
* Change image names to stable, testing and upstream
* Don't create directory on container
* Replace kubernetes/pause in tests with k8s.gcr.io/pause
* imagebuildah: don't remove intermediate images if we need them
* Rework buildahimagegit to buildahimageupstream
* Fix Transient Mounts
* Handle WORKDIRs that are symlinks
* allow podman to build a client for windows
* Touch up 1.9-dev to 1.9.0-dev
* Resolve symlink when checking container path
* commit: commit on every instruction, but not always with layers
* CommitOptions: drop the unused OnBuild field
* makeImageRef: pass in the whole CommitOptions structure
* cmd: API cleanup: stores before images
* run: check if SELinux is enabled
* Fix buildahimages Dockerfiles to include support for additionalimages mounted from host.
* Detect changes in rootdir
* Fix typo in buildah-pull(1)
* Vendor in latest containers/storage
* Keep track of any build-args used during buildah bud --layers
* commit: always set a parent ID
* imagebuildah: rework unused-argument detection
* fix bug dest path when COPY .dockerignore
* Move Host IDMAppings code from util to unshare
* Add BUILDAH_ISOLATION rootless back
* Travis CI: fail fast, upon error in any step
* imagebuildah: only commit images for intermediate stages if we have to
* Use errors.Cause() when checking for IsNotExist errors
* auto pass http_proxy to container
* imagebuildah: don't leak image structs
* Add Dockerfiles for buildahimages
* Bump to Replace golang 1.10 with 1.12
* add --dns* flags to buildah bud
* Add hack/build_speed.sh test speeds on building container images
* Create buildahimage Dockerfile for Quay
* rename 'is' to 'expect_output'
* squash.bats: test squashing in multi-layered builds
* bud.bats: test COPY --from in a Dockerfile while using the cache
* commit: make target image names optional
* Fix bud-args to allow comma separation
* oops, missed some tests in commit.bats
* new helper: expect_line_count
* New tests for #1467 (string slices in cmdline opts)
* Workarounds for dealing with travis; review feedback
* BATS tests - extensive but minor cleanup
* imagebuildah: defer pulling images for COPY --from
* imagebuildah: centralize COMMIT and image ID output
* Travis: do not use traviswait
* imagebuildah: only initialize imagebuilder configuration once per stage
* Make cleaner error on Dockerfile build errors
* unshare: move to pkg/
* unshare: move some code from cmd/buildah/unshare
* Fix handling of Slices versus Arrays
* imagebuildah: reorganize stage and per-stage logic
* imagebuildah: add empty layers for instructions
* Add missing step in installing into Ubuntu
* fix bug in .dockerignore support
* imagebuildah: deduplicate prepended 'FROM' instructions
* Touch up intro
* commit: set created-by to the shell if it isn't set
* commit: check that we always set a 'created-by'
* docs/buildah.md: add 'containers-' prefixes under 'SEE ALSO'

Update to v1.7.2

* Updates vendored containers/storage to latest version
* rootless: by default use the host network namespace

- Full changelog: https://github.com/containers/buildah/releases/tag/v1.6
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1165184">SUSE bug 1165184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167864">SUSE bug 1167864</bugzilla>
	<cve impact="important" cvss3="9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10214/">CVE-2019-10214</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10696/">CVE-2020-10696</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494405" comment="buildah-1.17.0-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138053" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122469" ref_url="https://bugzilla.suse.com/1122469" source="BUGZILLA"/>
		<reference ref_id="1143349" ref_url="https://bugzilla.suse.com/1143349" source="BUGZILLA"/>
		<reference ref_id="1150397" ref_url="https://bugzilla.suse.com/1150397" source="BUGZILLA"/>
		<reference ref_id="1152308" ref_url="https://bugzilla.suse.com/1152308" source="BUGZILLA"/>
		<reference ref_id="1153367" ref_url="https://bugzilla.suse.com/1153367" source="BUGZILLA"/>
		<reference ref_id="1158590" ref_url="https://bugzilla.suse.com/1158590" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16884" ref_url="https://www.suse.com/security/cve/CVE-2019-16884/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0035-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006310.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues:

Security issue fixed:

- CVE-2019-16884: Fixed incomplete patch for LSM bypass via malicious Docker image that mount over a /proc directory (bsc#1152308). 

Bug fixes:

- Update to Docker 19.03.5-ce (bsc#1158590).
- Update to Docker 19.03.3-ce (bsc#1153367).
- Update to Docker 19.03.2-ce (bsc#1150397).
- Fixed default installation such that --userns-remap=default works properly (bsc#1143349).
- Fixed nginx blocked by apparmor (bsc#1122469).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-08"/>
	<updated date="2020-01-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1122469">SUSE bug 1122469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143349">SUSE bug 1143349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150397">SUSE bug 1150397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152308">SUSE bug 1152308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153367">SUSE bug 1153367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158590">SUSE bug 1158590</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16884/">CVE-2019-16884</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494406" comment="containerd-1.2.10-5.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494407" comment="docker-19.03.5_ce-6.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494367" comment="docker-bash-completion-19.03.5_ce-6.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494408" comment="docker-libnetwork-0.7.0.1+gitr2877_3eb39382bfa6-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494409" comment="docker-runc-1.0.0rc8+gitr3917_3e425f80a8c9-6.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138054" version="1" class="patch">
	<metadata>
		<title>Security update for docker-runc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160452" ref_url="https://bugzilla.suse.com/1160452" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19921" ref_url="https://www.suse.com/security/cve/CVE-2019-19921/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0375-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006478.html" source="SUSE-SU"/>
		<description>
This update for docker-runc fixes the following issues:

- CVE-2019-19921: Fixed a volume mount race condition with shared mounts (bsc#1160452).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-07"/>
	<updated date="2020-02-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1160452">SUSE bug 1160452</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19921/">CVE-2019-19921</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494410" comment="docker-runc-1.0.0rc8+gitr3917_3e425f80a8c9-6.32.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138055" version="1" class="patch">
	<metadata>
		<title>Security changes in Kubernetes, etcd, and helm; Bugfix in cri-o package (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174219" ref_url="https://bugzilla.suse.com/1174219" source="BUGZILLA"/>
		<reference ref_id="1174951" ref_url="https://bugzilla.suse.com/1174951" source="BUGZILLA"/>
		<reference ref_id="1176752" ref_url="https://bugzilla.suse.com/1176752" source="BUGZILLA"/>
		<reference ref_id="1176753" ref_url="https://bugzilla.suse.com/1176753" source="BUGZILLA"/>
		<reference ref_id="1176754" ref_url="https://bugzilla.suse.com/1176754" source="BUGZILLA"/>
		<reference ref_id="1176755" ref_url="https://bugzilla.suse.com/1176755" source="BUGZILLA"/>
		<reference ref_id="1177661" ref_url="https://bugzilla.suse.com/1177661" source="BUGZILLA"/>
		<reference ref_id="1177662" ref_url="https://bugzilla.suse.com/1177662" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15106" ref_url="https://www.suse.com/security/cve/CVE-2020-15106/" source="CVE"/>
		<reference ref_id="CVE-2020-15112" ref_url="https://www.suse.com/security/cve/CVE-2020-15112/" source="CVE"/>
		<reference ref_id="CVE-2020-15184" ref_url="https://www.suse.com/security/cve/CVE-2020-15184/" source="CVE"/>
		<reference ref_id="CVE-2020-15185" ref_url="https://www.suse.com/security/cve/CVE-2020-15185/" source="CVE"/>
		<reference ref_id="CVE-2020-15186" ref_url="https://www.suse.com/security/cve/CVE-2020-15186/" source="CVE"/>
		<reference ref_id="CVE-2020-15187" ref_url="https://www.suse.com/security/cve/CVE-2020-15187/" source="CVE"/>
		<reference ref_id="CVE-2020-8565" ref_url="https://www.suse.com/security/cve/CVE-2020-8565/" source="CVE"/>
		<reference ref_id="CVE-2020-8566" ref_url="https://www.suse.com/security/cve/CVE-2020-8566/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3760-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007973.html" source="SUSE-SU"/>
		<description>
 = Required Actions

== Kubernetes &amp; etcd (Security fixes)

This fix involves an upgrade of Kubernetes and some add-ons. See https://documentation.suse.com/suse-caasp/4.2/html/caasp-admin/_cluster_updates.html#_updating_kubernetes_components for the upgrade procedure.
   
== Skuba &amp; helm/helm3

In order to update skuba and helm or helm 3, you need to update the management workstation. See detailed instructions at https://documentation.suse.com/suse-caasp/4.2/html/caasp-admin/_cluster_updates.html#_update_management_workstation

= Known Issues

Modifying the file `/etc/sysconfig/kubelet` directly is not supported: documentation at https://documentation.suse.com/suse-caasp/4.2/html/caasp-admin/_miscellaneous.html#_configuring_kubelet

Be sure to check the Release Notes at https://www.suse.com/releasenotes/x86_64/SUSE-CAASP/4/#_changes_in_4_2_4 for any additional known issues or behavioral changes.		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-23"/>
	<updated date="2020-12-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1174219">SUSE bug 1174219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174951">SUSE bug 1174951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176752">SUSE bug 1176752</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176753">SUSE bug 1176753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176754">SUSE bug 1176754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176755">SUSE bug 1176755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177661">SUSE bug 1177661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177662">SUSE bug 1177662</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15106/">CVE-2020-15106</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15112/">CVE-2020-15112</cve>
	<cve impact="low" cvss3="2.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15184/">CVE-2020-15184</cve>
	<cve impact="low" cvss3="2.2/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15185/">CVE-2020-15185</cve>
	<cve impact="low" cvss3="3.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15186/">CVE-2020-15186</cve>
	<cve impact="low" cvss3="3/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15187/">CVE-2020-15187</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8565/">CVE-2020-8565</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8566/">CVE-2020-8566</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494411" comment="kubernetes-client-1.17.13-4.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494412" comment="kubernetes-common-1.17.13-4.21.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138056" version="1" class="patch">
	<metadata>
		<title>Security update for cni, cni-plugins, conmon, fuse-overlayfs, podman (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1155217" ref_url="https://bugzilla.suse.com/1155217" source="BUGZILLA"/>
		<reference ref_id="1160460" ref_url="https://bugzilla.suse.com/1160460" source="BUGZILLA"/>
		<reference ref_id="1164390" ref_url="https://bugzilla.suse.com/1164390" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18466" ref_url="https://www.suse.com/security/cve/CVE-2019-18466/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006616.html" source="SUSE-SU"/>
		<description>
This update for cni, cni-plugins, conmon, fuse-overlayfs, podman fixes the following issues:

podman was updated to 1.8.0:

- CVE-2019-18466: Fixed a bug where podman cp would improperly copy files on the
  host when copying a symlink in the container that included a
  glob operator (#3829 bsc#1155217)

- The name of the cni-bridge in the default config changed from
  'cni0' to 'podman-cni0' with podman-1.6.0. Add a %trigger to
  rename the bridge in the system to the new default if it exists.
  The trigger is only excuted when updating podman-cni-config 
  from something older than 1.6.0. This is mainly needed for SLE
  where we're updating from 1.4.4 to 1.8.0 (bsc#1160460).

Update podman to v1.8.0 (bsc#1160460):

* Features

  - The podman system service command has been added, providing a
    preview of Podman's new Docker-compatible API. This API is
    still very new, and not yet ready for production use, but is
    available for early testing
  - Rootless Podman now uses Rootlesskit for port forwarding,
    which should greatly improve performance and capabilities
  - The podman untag command has been added to remove tags from
    images without deleting them
  - The podman inspect command on images now displays previous
    names they used
  - The podman generate systemd command now supports a --new
    option to generate service files that create and run new
    containers instead of managing existing containers
  - Support for --log-opt tag= to set logging tags has been added
    to the journald log driver
  - Added support for using Seccomp profiles embedded in images
    for podman run and podman create via the new --seccomp-policy
      CLI flag
  - The podman play kube command now honors pull policy

* Bugfixes

  - Fixed a bug where the podman cp command would not copy the
    contents of directories when paths ending in /. were given
  - Fixed a bug where the podman play kube command did not
    properly locate Seccomp profiles specified relative to
    localhost
  - Fixed a bug where the podman info command for remote Podman
    did not show registry information
  - Fixed a bug where the podman exec command did not support
    having input piped into it
  - Fixed a bug where the podman cp command with rootless Podman
    on CGroups v2 systems did not properly determine if the
    container could be paused while copying
  - Fixed a bug where the podman container prune --force command
    could possible remove running containers if they were started
    while the command was running 
  - Fixed a bug where Podman, when run as root, would not
    properly configure slirp4netns networking when requested
  - Fixed a bug where podman run --userns=keep-id did not work
    when the user had a UID over 65535
  - Fixed a bug where rootless podman run and podman create with
    the --userns=keep-id option could change permissions on
    /run/user/$UID and break KDE
  - Fixed a bug where rootless Podman could not be run in a
    systemd service on systems using CGroups v2
  - Fixed a bug where podman inspect would show CPUShares as 0,
    instead of the default (1024), when it was not explicitly set
  - Fixed a bug where podman-remote push would segfault
  - Fixed a bug where image healthchecks were not shown in the
    output of podman inspect
  - Fixed a bug where named volumes created with containers from
    pre-1.6.3 releases of Podman would be autoremoved with their
    containers if the --rm flag was given, even if they were
    given names
  - Fixed a bug where podman history was not computing image
    sizes correctly
  - Fixed a bug where Podman would not error on invalid values to
    the --sort flag to podman images
  - Fixed a bug where providing a name for the image made by
    podman commit was mandatory, not optional as it should be
  - Fixed a bug where the remote Podman client would append an
    extra ' to %PATH
  - Fixed a bug where the podman build command would sometimes
    ignore the -f option and build the wrong Containerfile
  - Fixed a bug where the podman ps --filter command would only
    filter running containers, instead of all containers, if
    --all was not passed
  - Fixed a bug where the podman load command on compressed
    images would leave an extra copy on disk
  - Fixed a bug where the podman restart command would not
    properly clean up the network, causing it to function
    differently from podman stop; podman start
  - Fixed a bug where setting the --memory-swap flag to podman
    create and podman run to -1 (to indicate unlimited) was not
    supported

* Misc

  - Initial work on version 2 of the Podman remote API has been
    merged, but is still in an alpha state and not ready for use.
    Read more here
  - Many formatting corrections have been made to the manpages
  - The changes to address (#5009) may cause anonymous volumes
    created by Podman versions 1.6.3 to 1.7.0 to not be removed
    when their container is removed
  - Updated vendored Buildah to v1.13.1
  - Updated vendored containers/storage to v1.15.8
  - Updated vendored containers/image to v5.2.0

- Add apparmor-abstractions as required runtime dependency to
  have `tunables/global` available.

- fixed the --force flag for the 'container prune' command.
  (https://github.com/containers/libpod/issues/4844)

Update podman to v1.7.0

* Features

  - Added support for setting a static MAC address for containers
  - Added support for creating macvlan networks with podman
    network create, allowing Podman containers to be attached
    directly to networks the host is connected to
  - The podman image prune and podman container prune commands
    now support the --filter flag to filter what will be pruned,
    and now prompts for confirmation when run without --force
    (#4410 and #4411)
  - Podman now creates CGroup namespaces by default on systems
    using CGroups v2 (#4363)
  - Added the podman system reset command to remove all Podman
    files and perform a factory reset of the Podman installation
  - Added the --history flag to podman images to display previous
    names used by images (#4566)
  - Added the --ignore flag to podman rm and podman stop to not
    error when requested containers no longer exist
  - Added the --cidfile flag to podman rm and podman stop to read
    the IDs of containers to be removed or stopped from a file
  - The podman play kube command now honors Seccomp annotations
    (#3111)
  - The podman play kube command now honors RunAsUser,
    RunAsGroup, and selinuxOptions
  - The output format of the podman version command has been
    changed to better match docker version when using the
    --format flag
  - Rootless Podman will no longer initialize containers/storage
    twice, removing a potential deadlock preventing Podman
    commands from running while an image was being pulled (#4591)
  - Added tmpcopyup and notmpcopyup options to the --tmpfs and
    --mount type=tmpfs flags to podman create and podman run to
    control whether the content of directories are copied into
    tmpfs filesystems mounted over them
  - Added support for disabling detaching from containers by
    setting empty detach keys via --detach-keys=''
  - The podman build command now supports the --pull and
    --pull-never flags to control when images are pulled during a
    build
  - The podman ps -p command now shows the name of the pod as
    well as its ID (#4703)
  - The podman inspect command on containers will now display the
    command used to create the container
  - The podman info command now displays information on registry
    mirrors (#4553)

* Bugfixes

  - Fixed a bug where Podman would use an incorrect runtime
    directory as root, causing state to be deleted after root
    logged out and making Podman in systemd services not function
    properly
  - Fixed a bug where the --change flag to podman import and
    podman commit was not being parsed properly in many cases
  - Fixed a bug where detach keys specified in libpod.conf were
    not used by the podman attach and podman exec commands, which
    always used the global default ctrl-p,ctrl-q key combination
    (#4556)
  - Fixed a bug where rootless Podman was not able to run podman
    pod stats even on CGroups v2 enabled systems (#4634)
  - Fixed a bug where rootless Podman would fail on kernels
    without the renameat2 syscall (#4570)
  - Fixed a bug where containers with chained network namespace
    dependencies (IE, container A using --net container=B and
    container B using --net container=C) would not properly mount
    /etc/hosts and /etc/resolv.conf into the container (#4626)
  - Fixed a bug where podman run with the --rm flag and without
    -d could, when run in the background, throw a 'container does
    not exist' error when attempting to remove the container
    after it exited
  - Fixed a bug where named volume locks were not properly
    reacquired after a reboot, potentially leading to deadlocks
    when trying to start containers using the volume (#4605 and
    #4621)
  - Fixed a bug where Podman could not completely remove
    containers if sent SIGKILL during removal, leaving the
    container name unusable without the podman rm --storage
    command to complete removal (#3906)
  - Fixed a bug where checkpointing containers started with --rm
    was allowed when --export was not specified (the container,
    and checkpoint, would be removed after checkpointing was
    complete by --rm) (#3774)
  - Fixed a bug where the podman pod prune command would fail if
    containers were present in the pods and the --force flag was
    not passed (#4346)
  - Fixed a bug where containers could not set a static IP or
    static MAC address if they joined a non-default CNI network
    (#4500)
  - Fixed a bug where podman system renumber would always throw
    an error if a container was mounted when it was run
  - Fixed a bug where podman container restore would fail with
    containers using a user namespace
  - Fixed a bug where rootless Podman would attempt to use the
    journald events backend even on systems without systemd
    installed
  - Fixed a bug where podman history would sometimes not properly
    identify the IDs of layers in an image (#3359)
  - Fixed a bug where containers could not be restarted when
    Conmon v2.0.3 or later was used
  - Fixed a bug where Podman did not check image OS and
    Architecture against the host when starting a container
  - Fixed a bug where containers in pods did not function
    properly with the Kata OCI runtime (#4353)
  - Fixed a bug where `podman info --format '{{ json . }}' would
    not produce JSON output (#4391)
  - Fixed a bug where Podman would not verify if files passed to
    --authfile existed (#4328)
  - Fixed a bug where podman images --digest would not always
    print digests when they were available
  - Fixed a bug where rootless podman run could hang due to a
    race with reading and writing events
  - Fixed a bug where rootless Podman would print warning-level
    logs despite not be instructed to do so (#4456)
  - Fixed a bug where podman pull would attempt to fetch from
    remote registries when pulling an unqualified image using the
    docker-daemon transport (#4434)
  - Fixed a bug where podman cp would not work if STDIN was a
    pipe
  - Fixed a bug where podman exec could stop accepting input if
    anything was typed between the command being run and the exec
    session starting (#4397)
  - Fixed a bug where podman logs --tail 0 would print all lines
    of a container's logs, instead of no lines (#4396)
  - Fixed a bug where the timeout for slirp4netns was incorrectly
    set, resulting in an extremely long timeout (#4344)
  - Fixed a bug where the podman stats command would print CPU
    utilizations figures incorrectly (#4409)
  - Fixed a bug where the podman inspect --size command would not
    print the size of the container's read/write layer if the
    size was 0 (#4744)
  - Fixed a bug where the podman kill command was not properly
    validating signals before use (#4746)
  - Fixed a bug where the --quiet and --format flags to podman ps
    could not be used at the same time
  - Fixed a bug where the podman stop command was not stopping
    exec sessions when a container was created without a PID
    namespace (--pid=host)
  - Fixed a bug where the podman pod rm --force command was not
    removing anonymous volumes for containers that were removed
  - Fixed a bug where the podman checkpoint command would not
    export all changes to the root filesystem of the container if
    performed more than once on the same container (#4606)
  - Fixed a bug where containers started with --rm would not be
    automatically removed on being stopped if an exec session was
    running inside the container (#4666)

* Misc

  - The fixes to runtime directory path as root can cause strange
    behavior if an upgrade is performed while containers are
    running
  - Updated vendored Buildah to v1.12.0
  - Updated vendored containers/storage library to v1.15.4
  - Updated vendored containers/image library to v5.1.0
  - Kata Containers runtimes (kata-runtime, kata-qemu, and
    kata-fc) are now present in the default libpod.conf, but will
    not be available unless Kata containers is installed on the
    system
  - Podman previously did not allow the creation of containers
    with a memory limit lower than 4MB. This restriction has been
    removed, as the crun runtime can create containers with
    significantly less memory

Update podman to v1.6.4
- Remove winsz FIFO on container restart to allow use with Conmon 2.03 and higher
- Ensure volumes reacquire locks on system restart, preventing deadlocks when starting containers
- Suppress spurious log messages when running rootless Podman
- Update vendored containers/storage to v1.13.6
- Fix a deadlock related to writing events
- Do not use the journald event logger when it is not available

Update podman to v1.6.2

* Features

  - Added a --runtime flag to podman system migrate to allow the
    OCI runtime for all containers to be reset, to ease transition
    to the crun runtime on CGroups V2 systems until runc gains full
    support
  - The podman rm command can now remove containers in broken
    states which previously could not be removed
  - The podman info command, when run without root, now shows
    information on UID and GID mappings in the rootless user
    namespace
  - Added podman build --squash-all flag, which squashes all layers
    (including those of the base image) into one layer
  - The --systemd flag to podman run and podman create now accepts
    a string argument and allows a new value, always, which forces
    systemd support without checking if the the container
    entrypoint is systemd

* Bugfixes

  - Fixed a bug where the podman top command did not work on
    systems using CGroups V2 (#4192)
  - Fixed a bug where rootless Podman could double-close a file,
    leading to a panic
  - Fixed a bug where rootless Podman could fail to retrieve some
    containers while refreshing the state
  - Fixed a bug where podman start --attach --sig-proxy=false would
    still proxy signals into the container
  - Fixed a bug where Podman would unconditionally use a
    non-default path for authentication credentials (auth.json),
    breaking podman login integration with skopeo and other tools
    using the containers/image library
  - Fixed a bug where podman ps --format=json and podman images
    --format=json would display null when no results were returned,
    instead of valid JSON
  - Fixed a bug where podman build --squash was incorrectly
    squashing all layers into one, instead of only new layers
  - Fixed a bug where rootless Podman would allow volumes with
    options to be mounted (mounting volumes requires root),
    creating an inconsistent state where volumes reported as
    mounted but were not (#4248)
  - Fixed a bug where volumes which failed to unmount could not be
    removed (#4247)
  - Fixed a bug where Podman incorrectly handled some errors
    relating to unmounted or missing containers in
    containers/storage
  - Fixed a bug where podman stats was broken on systems running
    CGroups V2 when run rootless (#4268)
  - Fixed a bug where the podman start command would print the
    short container ID, instead of the full ID
  - Fixed a bug where containers created with an OCI runtime that
    is no longer available (uninstalled or removed from the config
    file) would not appear in podman ps and could not be removed
    via podman rm
  - Fixed a bug where containers restored via podman container
    restore --import would retain the CGroup path of the original
    container, even if their container ID changed; thus, multiple
    containers created from the same checkpoint would all share the
    same CGroup

* Misc

  - The default PID limit for containers is now set to 4096. It can
    be adjusted back to the old default (unlimited) by passing
    --pids-limit 0 to podman create and podman run
  - The podman start --attach command now automatically attaches
    STDIN if the container was created with -i
  - The podman network create command now validates network names
    using the same regular expression as container and pod names
  - The --systemd flag to podman run and podman create will now
    only enable systemd mode when the binary being run inside the
    container is /sbin/init, /usr/sbin/init, or ends in systemd
    (previously detected any path ending in init or systemd)
  - Updated vendored Buildah to 1.11.3
  - Updated vendored containers/storage to 1.13.5
  - Updated vendored containers/image to 4.0.1

Update podman to v1.6.1

* Features

  - The podman network create, podman network rm, podman network
    inspect, and podman network ls commands have been added to
    manage CNI networks used by Podman
  - The podman volume create command can now create and mount
    volumes with options, allowing volumes backed by NFS, tmpfs,
    and many other filesystems
  - Podman can now run containers without CGroups for better
    integration with systemd by using the --cgroups=disabled flag
    with podman create and podman run. This is presently only
    supported with the crun OCI runtime
  - The podman volume rm and podman volume inspect commands can now
    refer to volumes by an unambiguous partial name, in addition to
    full name (e.g. podman volume rm myvol to remove a volume named
    myvolume) (#3891)
  - The podman run and podman create commands now support the
    --pull flag to allow forced re-pulling of images (#3734)
  - Mounting volumes into a container using --volume, --mount, and
    --tmpfs now allows the suid, dev, and exec mount options (the
    inverse of nosuid, nodev, noexec) (#3819)
  - Mounting volumes into a container using --mount now allows the
    relabel=Z and relabel=z options to relabel mounts.
  - The podman push command now supports the --digestfile option to
    save a file containing the pushed digest
  - Pods can now have their hostname set via podman pod create
    --hostname or providing Pod YAML with a hostname set to podman
    play kube (#3732)
  - The podman image sign command now supports the --cert-dir flag
  - The podman run and podman create commands now support the
    --security-opt label=filetype:$LABEL flag to set the SELinux
    label for container files
  - The remote Podman client now supports healthchecks

* Bugfixes

  - Fixed a bug where remote podman pull would panic if a Varlink
    connection was not available (#4013)
  - Fixed a bug where podman exec would not properly set terminal
    size when creating a new exec session (#3903)
  - Fixed a bug where podman exec would not clean up socket
    symlinks on the host (#3962)
  - Fixed a bug where Podman could not run systemd in containers
    that created a CGroup namespace
  - Fixed a bug where podman prune -a would attempt to prune images
    used by Buildah and CRI-O, causing errors (#3983)
  - Fixed a bug where improper permissions on the ~/.config
    directory could cause rootless Podman to use an incorrect
    directory for storing some files
  - Fixed a bug where the bash completions for podman import threw
    errors
  - Fixed a bug where Podman volumes created with podman volume
    create would not copy the contents of their mountpoint the
    first time they were mounted into a container (#3945)
  - Fixed a bug where rootless Podman could not run podman exec
    when the container was not run inside a CGroup owned by the
    user (#3937)
  - Fixed a bug where podman play kube would panic when given Pod
    YAML without a securityContext (#3956)
  - Fixed a bug where Podman would place files incorrectly when
    storage.conf configuration items were set to the empty string
    (#3952)
  - Fixed a bug where podman build did not correctly inherit
    Podman's CGroup configuration, causing crashed on CGroups V2
    systems (#3938)
  - Fixed a bug where remote podman run --rm would exit before the
    container was completely removed, allowing race conditions when
    removing container resources (#3870)
  - Fixed a bug where rootless Podman would not properly handle
    changes to /etc/subuid and /etc/subgid after a container was
    launched
  - Fixed a bug where rootless Podman could not include some
    devices in a container using the --device flag (#3905)
  - Fixed a bug where the commit Varlink API would segfault if
    provided incorrect arguments (#3897)
  - Fixed a bug where temporary files were not properly cleaned up
    after a build using remote Podman (#3869)
  - Fixed a bug where podman remote cp crashed instead of reporting
    it was not yet supported (#3861)
  - Fixed a bug where podman exec would run as the wrong user when
    execing into a container was started from an image with
    Dockerfile USER (or a user specified via podman run --user)
    (#3838)
  - Fixed a bug where images pulled using the oci: transport would
    be improperly named
  - Fixed a bug where podman varlink would hang when managed by
    systemd due to SD_NOTIFY support conflicting with Varlink
    (#3572)
  - Fixed a bug where mounts to the same destination would
    sometimes not trigger a conflict, causing a race as to which
    was actually mounted
  - Fixed a bug where podman exec --preserve-fds caused Podman to
    hang (#4020)
  - Fixed a bug where removing an unmounted container that was
    unmounted might sometimes not properly clean up the container
    (#4033)
  - Fixed a bug where the Varlink server would freeze when run in a
    systemd unit file (#4005)
  - Fixed a bug where Podman would not properly set the $HOME
    environment variable when the OCI runtime did not set it
  - Fixed a bug where rootless Podman would incorrectly print
    warning messages when an OCI runtime was not found (#4012)
  - Fixed a bug where named volumes would conflict with, instead of
    overriding, tmpfs filesystems added by the --read-only-tmpfs
    flag to podman create and podman run
  - Fixed a bug where podman cp would incorrectly make the target
    directory when copying to a symlink which pointed to a
    nonexistent directory (#3894)
  - Fixed a bug where remote Podman would incorrectly read STDIN
    when the -i flag was not set (#4095)
  - Fixed a bug where podman play kube would create an empty pod
    when given an unsupported YAML type (#4093)
  - Fixed a bug where podman import --change improperly parsed CMD
    (#4000)
  - Fixed a bug where rootless Podman on systems using CGroups V2
    would not function with the cgroupfs CGroups manager
  - Fixed a bug where rootless Podman could not correctly identify
    the DBus session address, causing containers to fail to start
    (#4162)
  - Fixed a bug where rootless Podman with slirp4netns networking
    would fail to start containers due to mount leaks

* Misc

  - Significant changes were made to Podman volumes in this
    release. If you have pre-existing volumes, it is strongly
    recommended to run podman system renumber after upgrading.
  - Version 0.8.1 or greater of the CNI Plugins is now required for
    Podman
  - Version 2.0.1 or greater of Conmon is strongly recommended
  - Updated vendored Buildah to v1.11.2
  - Updated vendored containers/storage library to v1.13.4
  - Improved error messages when trying to create a pod with no
    name via podman play kube
  - Improved error messages when trying to run podman pause or
    podman stats on a rootless container on a system without
    CGroups V2 enabled
  - TMPDIR has been set to /var/tmp by default to better handle
    large temporary files
  - podman wait has been optimized to detect stopped containers
    more rapidly
  - Podman containers now include a ContainerManager annotation
    indicating they were created by libpod
  - The podman info command now includes information about
    slirp4netns and fuse-overlayfs if they are available
  - Podman no longer sets a default size of 65kb for tmpfs
    filesystems
  - The default Podman CNI network has been renamed in an attempt
    to prevent conflicts with CRI-O when both are run on the same
    system. This should only take effect on system restart
  - The output of podman volume inspect has been more closely
    matched to docker volume inspect

- Add katacontainers as a recommended package, and include it as an
  additional OCI runtime in the configuration.

Update podman to v1.5.1

* Features

 - The hostname of pods is now set to the pod's name

* Bugfixes

 - Fixed a bug where podman run and podman create did not honor the --authfile
   option (#3730)
 - Fixed a bug where containers restored with podman container restore
   --import would incorrectly duplicate the Conmon PID file of the original container
 - Fixed a bug where podman build ignored the default OCI runtime configured
   in libpod.conf
 - Fixed a bug where podman run --rm (or force-removing any running container
   with podman rm --force) were not retrieving the correct exit code (#3795)
 - Fixed a bug where Podman would exit with an error if any configured hooks
   directory was not present
 - Fixed a bug where podman inspect and podman commit would not use the
   correct CMD for containers run with podman play kube
 - Fixed a bug created pods when using rootless Podman and CGroups V2 (#3801)
 - Fixed a bug where the podman events command with the --since or --until
   options could take a very long time to complete
* Misc

 - Rootless Podman will now inherit OCI runtime configuration from the root
   configuration (#3781)
 - Podman now properly sets a user agent while contacting registries (#3788)

- Add zsh completion for podman commands

Update podman to v1.5.0

* Features

  - Podman containers can now join the user namespaces of other
    containers with --userns=container:$ID, or a user namespace at
    an arbitary path with --userns=ns:$PATH
  - Rootless Podman can experimentally squash all UIDs and GIDs in
    an image to a single UID and GID (which does not require use of
    the newuidmap and newgidmap executables) by passing
    --storage-opt ignore_chown_errors
  - The podman generate kube command now produces YAML for any bind
    mounts the container has created (#2303)
  - The podman container restore command now features a new flag,
    --ignore-static-ip, that can be used with --import to import a
    single container with a static IP multiple times on the same
    host
  - Added the ability for podman events to output JSON by
    specifying --format=json
  - If the OCI runtime or conmon binary cannot be found at the
    paths specified in libpod.conf, Podman will now also search for
    them in the calling user's path
  - Added the ability to use podman import with URLs (#3609)
  - The podman ps command now supports filtering names using
    regular expressions (#3394)
  - Rootless Podman containers with --privileged set will now mount
    in all host devices that the user can access
  - The podman create and podman run commands now support the
    --env-host flag to forward all environment variables from the
    host into the container
  - Rootless Podman now supports healthchecks (#3523)
  - The format of the HostConfig portion of the output of podman
    inspect on containers has been improved and synced with Docker
  - Podman containers now support CGroup namespaces, and can create
    them by passing --cgroupns=private to podman run or podman
    create
  - The podman create and podman run commands now support the
    --ulimit=host flag, which uses any ulimits currently set on the
    host for the container
  - The podman rm and podman rmi commands now use different exit
    codes to indicate 'no such container' and 'container is
    running' errors
  - Support for CGroups V2 through the crun OCI runtime has been
    greatly improved, allowing resource limits to be set for
    rootless containers when the CGroups V2 hierarchy is in use

* Bugfixes

  - Fixed a bug where a race condition could cause podman restart
    to fail to start containers with ports
  - Fixed a bug where containers restored from a checkpoint would
    not properly report the time they were started at
  - Fixed a bug where podman search would return at most 25
    results, even when the maximum number of results was set higher
  - Fixed a bug where podman play kube would not honor capabilities
    set in imported YAML (#3689)
  - Fixed a bug where podman run --env, when passed a single key
    (to use the value from the host), would set the environment
    variable in the container even if it was not set on the host
    (#3648)
  - Fixed a bug where podman commit --changes would not properly
    set environment variables
  - Fixed a bug where Podman could segfault while working with
    images with no history
  - Fixed a bug where podman volume rm could remove arbitrary
    volumes if given an ambiguous name (#3635)
  - Fixed a bug where podman exec invocations leaked memory by not
    cleaning up files in tmpfs
  - Fixed a bug where the --dns and --net=container flags to podman
    run and podman create were not mutually exclusive (#3553)
  - Fixed a bug where rootless Podman would be unable to run
    containers when less than 5 UIDs were available
  - Fixed a bug where containers in pods could not be removed
    without removing the entire pod (#3556)
  - Fixed a bug where Podman would not properly clean up all CGroup
    controllers for created cgroups when using the cgroupfs CGroup
    driver
  - Fixed a bug where Podman containers did not properly clean up
    files in tmpfs, resulting in a memory leak as containers
    stopped
  - Fixed a bug where healthchecks from images would not use
    default settings for interval, retries, timeout, and start
    period when they were not provided by the image (#3525)
  - Fixed a bug where healthchecks using the HEALTHCHECK CMD format
    where not properly supported (#3507)
  - Fixed a bug where volume mounts using relative source paths
    would not be properly resolved (#3504)
  - Fixed a bug where podman run did not use authorization
    credentials when a custom path was specified (#3524)
  - Fixed a bug where containers checkpointed with podman container
    checkpoint did not properly set their finished time
  - Fixed a bug where running podman inspect on any container not
    created with podman run or podman create (for example, pod
    infra containers) would result in a segfault (#3500)
  - Fixed a bug where healthcheck flags for podman create and
    podman run were incorrectly named (#3455)
  - Fixed a bug where Podman commands would fail to find targets if
    a partial ID was specified that was ambiguous between a
    container and pod (#3487)
  - Fixed a bug where restored containers would not have the
    correct SELinux label
  - Fixed a bug where Varlink endpoints were not working properly
    if more was not correctly specified
  - Fixed a bug where the Varlink PullImage endpoint would crash if
    an error occurred (#3715)
  - Fixed a bug where the --mount flag to podman create and podman
    run did not allow boolean arguments for its ro and rw options
    (#2980)
  - Fixed a bug where pods did not properly share the UTS
    namespace, resulting in incorrect behavior from some utilities
    which rely on hostname (#3547)
  - Fixed a bug where Podman would unconditionally append
    ENTRYPOINT to CMD during podman commit (and when reporting CMD
    in podman inspect) (#3708)
  - Fixed a bug where podman events with the journald events
    backend would incorrectly print 6 previous events when only new
    events were requested (#3616)
  - Fixed a bug where podman port would exit prematurely when a
    port number was specified (#3747)
  - Fixed a bug where passing . as an argument to the --dns-search
    flag to podman create and podman run was not properly clearing
    DNS search domains in the container

* Misc

  - Updated vendored Buildah to v1.10.1
  - Updated vendored containers/image to v3.0.2
  - Updated vendored containers/storage to v1.13.1
  - Podman now requires conmon v2.0.0 or higher
  - The podman info command now displays the events logger being in
    use
  - The podman inspect command on containers now includes the ID of
    the pod a container has joined and the PID of the container's
    conmon process
  - The -v short flag for podman --version has been re-added
  - Error messages from podman pull should be significantly clearer
  - The podman exec command is now available in the remote client
  - The podman-v1.5.0.tar.gz file attached is podman packaged for
    MacOS. It can be installed using Homebrew.
- Update libpod.conf to support latest path discovery feature for
  `runc` and `conmon` binaries.

conmon was included in version 2.0.10. (bsc#1160460, bsc#1164390, jsc#ECO-1048, jsc#SLE-11485, jsc#SLE-11331):

fuse-overlayfs was updated to v0.7.6 (bsc#1160460)

- do not look in lower layers for the ino if there is no origin
  xattr set
- attempt to use the file path if the operation on the fd fails
  with ENXIO
- do not expose internal xattrs through listxattr and getxattr
- fix fallocate for deleted files.
- ignore O_DIRECT.  It causes issues with libfuse not using an
  aligned buffer, causing write(2) to fail with EINVAL.
- on copyup, do not copy the opaque xattr.
- fix a wrong lookup for whiteout files, that could happen on a
  double unlink.
- fix possible segmentation fault in direct_fsync()
- use the data store to create missing whiteouts
- after a rename, force a directory reload
- introduce inodes cache
- correctly read inode for unix sockets
- avoid hash map lookup when possible
- use st_dev for the ino key
- check whether writeback is supported
- set_attrs: don't require write to S_IFREG
- ioctl: do not reuse fi-&gt;fh for directories
- fix skip whiteout deletion optimization
- store the new mode after chmod
- support fuse writeback cache and enable it by default
- add option to disable fsync
- add option to disable xattrs
- add option to skip ino number check in lower layers
- fix fd validity check
- fix memory leak
- fix read after free
- fix type for flistxattr return
- fix warnings reported by lgtm.com
- enable parallel dirops

cni was updated to 0.7.1:

- Set correct CNI version for 99-loopback.conf

Update to version 0.7.1 (bsc#1160460):

* Library changes:

  + invoke : ensure custom envs of CNIArgs are prepended to process envs
  + add GetNetworkListCachedResult to CNI interface
  + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance

* Documentation &amp; Convention changes:

  + Update cnitool documentation for spec v0.4.0
  + Add cni-route-override to CNI plugin list

Update to version 0.7.0:

* Spec changes:

  + Use more RFC2119 style language in specification (must, should...)
  + add notes about ADD/DEL ordering
  + Make the container ID required and unique.
  + remove the version parameter from ADD and DEL commands.
  + Network interface name matters
  + be explicit about optional and required structure members
  + add CHECK method
  + Add a well-known error for 'try again'
  + SPEC.md: clarify meaning of 'routes'

* Library changes:

  + pkg/types: Makes IPAM concrete type
  + libcni: return error if Type is empty
  + skel: VERSION shouldn't block on stdin
  + non-pointer instances of types.Route now correctly marshal to JSON
  + libcni: add ValidateNetwork and ValidateNetworkList functions
  + pkg/skel: return error if JSON config has no network name
  + skel: add support for plugin version string
  + libcni: make exec handling an interface for better downstream testing
  + libcni: api now takes a Context to allow operations to be timed out or cancelled
  + types/version: add helper to parse PrevResult
  + skel: only print about message, not errors
  + skel,invoke,libcni: implementation of CHECK method
  + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
  + cnitool: validate correct number of args
  + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
  + add PrintTo method to Result interface
  + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory

cni-plugins was updated to 0.8.4:

Update to version 0.8.4 (bsc#1160460):

* add support for mips64le
* Add missing cniVersion in README example
* bump go-iptables module to v0.4.5
* iptables: add idempotent functions
* portmap doesn't fail if chain doesn't exist
* fix portmap port forward flakiness
* Add Bruce Ma and Piotr Skarmuk as owners

Update to version 0.8.3:

* Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).

* Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).

* Bugfixes:

  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).

* Docs:

  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).

Update plugins to v0.8.2

+ New features:

  * Support 'args' in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable

+ Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to 'cni0': file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is 'invalid argument' not 'file exists'
  * bump containernetworking/cni to v0.7.1

Updated plugins to v0.8.1:

+ Bugs:

  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface

+ Improvements:
  * host-device: add pciBusID property

Updated plugins to v0.8.0:

+ New plugins:

  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins

+ Plugin features / changelog:

  * CHECK Support
  * macvlan:
    - Allow to configure empty ipam for macvlan
    - Make master config optional
  * bridge:
    - Add vlan tag to the bridge cni plugin
    - Allow the user to assign VLAN tag
    - L2 bridge Implementation.
  * dhcp:
    - Include Subnet Mask option parameter in DHCPREQUEST
    - Add systemd unit file to activate socket with systemd
    - Add container ifName to the dhcp clientID, making the
      clientID value
  * flannel:
    - Pass through runtimeConfig to delegate
  * host-local:
    - host-local: add ifname to file tracking IP address used
  * host-device:
    - Support the IPAM in the host-device
    - Handle empty netns in DEL for loopback and host-device
  * tuning:
    - adds 'ip link' command related feature into tuning
+ Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip

from version v0.7.5:

+ This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules

+ This fixes a potential issue where firewall rules may
  be bypassed by port mapping

		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-16"/>
	<updated date="2020-03-16"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1155217">SUSE bug 1155217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160460">SUSE bug 1160460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164390">SUSE bug 1164390</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-18466/">CVE-2019-18466</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494413" comment="cni-0.7.1-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494414" comment="cni-plugins-0.8.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494415" comment="conmon-2.0.10-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494416" comment="fuse-overlayfs-0.7.6-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494417" comment="podman-1.8.0-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494418" comment="podman-cni-config-1.8.0-4.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138057" version="1" class="patch">
	<metadata>
		<title>Security update for runc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Containers 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1149954" ref_url="https://bugzilla.suse.com/1149954" source="BUGZILLA"/>
		<reference ref_id="1160452" ref_url="https://bugzilla.suse.com/1160452" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19921" ref_url="https://www.suse.com/security/cve/CVE-2019-19921/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0944-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006685.html" source="SUSE-SU"/>
		<description>
This update for runc fixes the following issues:

runc was updated to v1.0.0~rc10

- CVE-2019-19921: Fixed a mount race condition with shared mounts (bsc#1160452).
- Fixed an issue where podman run hangs when spawned by salt-minion process (bsc#1149954).	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-07"/>
	<updated date="2020-04-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1149954">SUSE bug 1149954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160452">SUSE bug 1160452</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19921/">CVE-2019-19921</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-containers:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255094" comment="SUSE Linux Enterprise Module for Containers 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494419" comment="runc-1.0.0~rc10-1.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138058" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1101888" ref_url="https://bugzilla.suse.com/1101888" source="BUGZILLA"/>
		<reference ref_id="1101889" ref_url="https://bugzilla.suse.com/1101889" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14394" ref_url="https://www.suse.com/security/cve/CVE-2018-14394/" source="CVE"/>
		<reference ref_id="CVE-2018-14395" ref_url="https://www.suse.com/security/cve/CVE-2018-14395/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1299-2" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20191299-2.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

Security issue fixed:

- CVE-2018-14395: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a DoS (bsc#1101889)
- CVE-2018-14394: Fixed a divide-by-zero error in libavformat/movenc.c that allowed attackers to cause a DoS (bsc#1101888).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-14"/>
	<updated date="2019-10-14"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1101888">SUSE bug 1101888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101889">SUSE bug 1101889</bugzilla>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14394/">CVE-2018-14394</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14395/">CVE-2018-14395</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494794" comment="libavcodec57-3.4.2-4.17.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494795" comment="libavutil-devel-3.4.2-4.17.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494796" comment="libavutil55-3.4.2-4.17.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494797" comment="libpostproc-devel-3.4.2-4.17.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494798" comment="libpostproc54-3.4.2-4.17.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494799" comment="libswresample-devel-3.4.2-4.17.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494800" comment="libswresample2-3.4.2-4.17.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494801" comment="libswscale-devel-3.4.2-4.17.26 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494802" comment="libswscale4-3.4.2-4.17.26 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138059" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1013708" ref_url="https://bugzilla.suse.com/1013708" source="BUGZILLA"/>
		<reference ref_id="1013712" ref_url="https://bugzilla.suse.com/1013712" source="BUGZILLA"/>
		<reference ref_id="1013893" ref_url="https://bugzilla.suse.com/1013893" source="BUGZILLA"/>
		<reference ref_id="1015171" ref_url="https://bugzilla.suse.com/1015171" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-9797" ref_url="https://www.suse.com/security/cve/CVE-2016-9797/" source="CVE"/>
		<reference ref_id="CVE-2016-9798" ref_url="https://www.suse.com/security/cve/CVE-2016-9798/" source="CVE"/>
		<reference ref_id="CVE-2016-9802" ref_url="https://www.suse.com/security/cve/CVE-2016-9802/" source="CVE"/>
		<reference ref_id="CVE-2016-9917" ref_url="https://www.suse.com/security/cve/CVE-2016-9917/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1353-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006033.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

Security issues fixed:

- CVE-2016-9797: Fixed a buffer over-read in l2cap_dump() (bsc#1013708).
- CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712).
- CVE-2016-9917: Fixed a heap-based buffer overflow in read_n() (bsc#1015171).
- CVE-2016-9802: Fixed a buffer over-read in l2cap_packet() (bsc#1013893).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-18"/>
	<updated date="2019-10-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1013708">SUSE bug 1013708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013712">SUSE bug 1013712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1013893">SUSE bug 1013893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1015171">SUSE bug 1015171</bugzilla>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9797/">CVE-2016-9797</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9798/">CVE-2016-9798</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9802/">CVE-2016-9802</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9917/">CVE-2016-9917</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494805" comment="bluez-5.48-5.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494806" comment="bluez-devel-5.48-5.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138060" version="1" class="patch">
	<metadata>
		<title>Security update for taglib (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1096180" ref_url="https://bugzilla.suse.com/1096180" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11439" ref_url="https://www.suse.com/security/cve/CVE-2018-11439/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1374-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005650.html" source="SUSE-SU"/>
		<description>
This update for taglib fixes the following issues:

- CVE-2018-11439: The TagLib::Ogg::FLAC::File::scan function allowed remote
  attackers to cause information disclosure (heap-based buffer over-read) via a
  crafted audio file (bsc#1096180)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-02"/>
	<updated date="2019-07-02"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1096180">SUSE bug 1096180</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11439/">CVE-2018-11439</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494814" comment="libtag-devel-1.11.1-4.3.62 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494815" comment="libtag_c0-1.11.1-4.3.62 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138061" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1135824" ref_url="https://bugzilla.suse.com/1135824" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11691" ref_url="https://www.suse.com/security/cve/CVE-2019-11691/" source="CVE"/>
		<reference ref_id="CVE-2019-11692" ref_url="https://www.suse.com/security/cve/CVE-2019-11692/" source="CVE"/>
		<reference ref_id="CVE-2019-11693" ref_url="https://www.suse.com/security/cve/CVE-2019-11693/" source="CVE"/>
		<reference ref_id="CVE-2019-11694" ref_url="https://www.suse.com/security/cve/CVE-2019-11694/" source="CVE"/>
		<reference ref_id="CVE-2019-11698" ref_url="https://www.suse.com/security/cve/CVE-2019-11698/" source="CVE"/>
		<reference ref_id="CVE-2019-7317" ref_url="https://www.suse.com/security/cve/CVE-2019-7317/" source="CVE"/>
		<reference ref_id="CVE-2019-9800" ref_url="https://www.suse.com/security/cve/CVE-2019-9800/" source="CVE"/>
		<reference ref_id="CVE-2019-9815" ref_url="https://www.suse.com/security/cve/CVE-2019-9815/" source="CVE"/>
		<reference ref_id="CVE-2019-9816" ref_url="https://www.suse.com/security/cve/CVE-2019-9816/" source="CVE"/>
		<reference ref_id="CVE-2019-9817" ref_url="https://www.suse.com/security/cve/CVE-2019-9817/" source="CVE"/>
		<reference ref_id="CVE-2019-9818" ref_url="https://www.suse.com/security/cve/CVE-2019-9818/" source="CVE"/>
		<reference ref_id="CVE-2019-9819" ref_url="https://www.suse.com/security/cve/CVE-2019-9819/" source="CVE"/>
		<reference ref_id="CVE-2019-9820" ref_url="https://www.suse.com/security/cve/CVE-2019-9820/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005527.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Security issues fixed:

- CVE-2019-11691: Use-after-free in XMLHttpRequest
- CVE-2019-11692: Use-after-free removing listeners in the event listener manager
- CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
- CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox
- CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
- CVE-2019-7317: Use-after-free in png_image_free of libpng library
- CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
- CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
- CVE-2019-9816: Type confusion with object groups and UnboxedObjects
- CVE-2019-9817: Stealing of cross-domain images using canvas
- CVE-2019-9818: Use-after-free in crash generation server
- CVE-2019-9819: Compartment mismatch with fetch API
- CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell

Non-security issues fixed:

- Font and date adjustments to accommodate the new Reiwa era in Japan
- Update to Firefox ESR 60.7 (bsc#1135824)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-03"/>
	<updated date="2019-06-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1135824">SUSE bug 1135824</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11691/">CVE-2019-11691</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11692/">CVE-2019-11692</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11693/">CVE-2019-11693</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11694/">CVE-2019-11694</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11698/">CVE-2019-11698</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-7317/">CVE-2019-7317</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9800/">CVE-2019-9800</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9815/">CVE-2019-9815</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9816/">CVE-2019-9816</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9817/">CVE-2019-9817</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9818/">CVE-2019-9818</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9819/">CVE-2019-9819</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9820/">CVE-2019-9820</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494816" comment="MozillaFirefox-60.7.0-3.40.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495125" comment="MozillaFirefox-devel-60.7.0-3.40.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494818" comment="MozillaFirefox-translations-common-60.7.0-3.40.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494819" comment="MozillaFirefox-translations-other-60.7.0-3.40.6 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138062" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1137443" ref_url="https://bugzilla.suse.com/1137443" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12735" ref_url="https://www.suse.com/security/cve/CVE-2019-12735/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1457-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005545.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issue:

Security issue fixed: 

- CVE-2019-12735: Fixed a potential arbitrary code execution vulnerability in getchar.c (bsc#1137443).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-11"/>
	<updated date="2019-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1137443">SUSE bug 1137443</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12735/">CVE-2019-12735</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494822" comment="gvim-8.0.1568-5.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138063" version="1" class="patch">
	<metadata>
		<title>Security update for gnome-shell (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1124493" ref_url="https://bugzilla.suse.com/1124493" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3820" ref_url="https://www.suse.com/security/cve/CVE-2019-3820/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1459-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005547.html" source="SUSE-SU"/>
		<description>
This update for gnome-shell fixes the following issues:

Security issue fixed:

- CVE-2019-3820: Fixed a partial lock screen bypass (bsc#1124493).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-11"/>
	<updated date="2019-06-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1124493">SUSE bug 1124493</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-3820/">CVE-2019-3820</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494823" comment="gnome-shell-3.26.2+20180130.0d9c74212-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494824" comment="gnome-shell-devel-3.26.2+20180130.0d9c74212-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494825" comment="gnome-shell-lang-3.26.2+20180130.0d9c74212-4.19.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138064" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1133204" ref_url="https://bugzilla.suse.com/1133204" source="BUGZILLA"/>
		<reference ref_id="1133205" ref_url="https://bugzilla.suse.com/1133205" source="BUGZILLA"/>
		<reference ref_id="1133498" ref_url="https://bugzilla.suse.com/1133498" source="BUGZILLA"/>
		<reference ref_id="1133501" ref_url="https://bugzilla.suse.com/1133501" source="BUGZILLA"/>
		<reference ref_id="1136183" ref_url="https://bugzilla.suse.com/1136183" source="BUGZILLA"/>
		<reference ref_id="1136732" ref_url="https://bugzilla.suse.com/1136732" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11470" ref_url="https://www.suse.com/security/cve/CVE-2019-11470/" source="CVE"/>
		<reference ref_id="CVE-2019-11472" ref_url="https://www.suse.com/security/cve/CVE-2019-11472/" source="CVE"/>
		<reference ref_id="CVE-2019-11505" ref_url="https://www.suse.com/security/cve/CVE-2019-11505/" source="CVE"/>
		<reference ref_id="CVE-2019-11506" ref_url="https://www.suse.com/security/cve/CVE-2019-11506/" source="CVE"/>
		<reference ref_id="CVE-2019-11598" ref_url="https://www.suse.com/security/cve/CVE-2019-11598/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1523-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005568.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

Security issues fixed:

- CVE-2019-11472: Fixed a denial-of-service in ReadXWDImage() (bsc#1133204).
- CVE-2019-11470: Fixed a denial-of-service in ReadCINImage() (bsc#1133205).
- CVE-2019-11506: Fixed a heap-based buffer overflow in the WriteMATLABImage() (bsc#1133498).
- CVE-2019-11505: Fixed a heap-based buffer overflow in the WritePDBImage() (bsc#1133501).
- CVE-2019-11598: Fixed a heap-based buffer overread in WritePNMImage() (bsc#1136732)

We also now disable PCL in the -SUSE configuration, as it also uses ghostscript for decoding (bsc#1136183)

		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-17"/>
	<updated date="2019-06-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1133204">SUSE bug 1133204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133205">SUSE bug 1133205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133498">SUSE bug 1133498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133501">SUSE bug 1133501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136183">SUSE bug 1136183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136732">SUSE bug 1136732</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11470/">CVE-2019-11470</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11472/">CVE-2019-11472</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11505/">CVE-2019-11505</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11506/">CVE-2019-11506</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11598/">CVE-2019-11598</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494826" comment="ImageMagick-7.0.7.34-3.61.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494827" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.61.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494829" comment="ImageMagick-devel-7.0.7.34-3.61.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494830" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.61.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494831" comment="libMagick++-devel-7.0.7.34-3.61.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494832" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.61.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494833" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.61.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138065" version="1" class="patch">
	<metadata>
		<title>Security update for netpbm (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1024288" ref_url="https://bugzilla.suse.com/1024288" source="BUGZILLA"/>
		<reference ref_id="1024291" ref_url="https://bugzilla.suse.com/1024291" source="BUGZILLA"/>
		<reference ref_id="1136936" ref_url="https://bugzilla.suse.com/1136936" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-2579" ref_url="https://www.suse.com/security/cve/CVE-2017-2579/" source="CVE"/>
		<reference ref_id="CVE-2017-2580" ref_url="https://www.suse.com/security/cve/CVE-2017-2580/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1525-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005567.html" source="SUSE-SU"/>
		<description>
This update for netpbm fixes the following issues:

Security issues fixed:

- CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack() (bsc#1024288).
- CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster() function (bsc#1024291).
- create netpbm-vulnerable subpackage and move pstopnm there, as ghostscript is used to convert (bsc#1136936)

		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-17"/>
	<updated date="2019-06-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1024288">SUSE bug 1024288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1024291">SUSE bug 1024291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136936">SUSE bug 1136936</bugzilla>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2579/">CVE-2017-2579</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-2580/">CVE-2017-2580</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494834" comment="libnetpbm-devel-10.80.1-3.8.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138066" version="1" class="patch">
	<metadata>
		<title>Security update for exempi (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1098946" ref_url="https://bugzilla.suse.com/1098946" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12648" ref_url="https://www.suse.com/security/cve/CVE-2018-12648/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005607.html" source="SUSE-SU"/>
		<description>
This update for exempi fixes the following issues:

- CVE-2018-12648: Fixed a NULL pointer dereference (crash) issue when processing webp files (bsc#1098946).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-21"/>
	<updated date="2019-06-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1098946">SUSE bug 1098946</bugzilla>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-12648/">CVE-2018-12648</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494835" comment="libexempi-devel-2.4.5-3.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494836" comment="libexempi3-2.4.5-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138067" version="1" class="patch">
	<metadata>
		<title>Security update for SDL2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1124825" ref_url="https://bugzilla.suse.com/1124825" source="BUGZILLA"/>
		<reference ref_id="1134135" ref_url="https://bugzilla.suse.com/1134135" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-7637" ref_url="https://www.suse.com/security/cve/CVE-2019-7637/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1605-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005595.html" source="SUSE-SU"/>
		<description>
This update for SDL2 fixes the following issues:

- Remove the fix for CVE-2019-7637, the modification of function SDL_CalculatePitch is only suited for SDL not SDL2,
  and breaks SDL2 software. (bsc#1134135)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-21"/>
	<updated date="2019-06-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1124825">SUSE bug 1124825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134135">SUSE bug 1134135</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7637/">CVE-2019-7637</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494837" comment="libSDL2-2_0-0-2.0.8-3.12.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494838" comment="libSDL2-devel-2.0.8-3.12.5 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138068" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1136021" ref_url="https://bugzilla.suse.com/1136021" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2019:1607-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005610.html" source="SUSE-SU"/>
		<description>
This update for wireshark to version 2.4.15 fixes the following issues:

Security issue fixed:

- Fixed a denial of service in the dissection engine (bsc#1136021). 
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-21"/>
	<updated date="2019-06-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1136021">SUSE bug 1136021</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494839" comment="wireshark-devel-2.4.15-3.28.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494840" comment="wireshark-ui-qt-2.4.15-3.28.7 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138069" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1137792" ref_url="https://bugzilla.suse.com/1137792" source="BUGZILLA"/>
		<reference ref_id="1138614" ref_url="https://bugzilla.suse.com/1138614" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11707" ref_url="https://www.suse.com/security/cve/CVE-2019-11707/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005600.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox to version 60.7.1 fixes the following issues:

Security issue fixed:    

- CVE-2019-11707: Fixed a type confusion vulnerability in Arrary.pop (bsc#1138614)    

Other issues addressed: 

- Added the new Mozilla's GPG key expiring on 2021-05-29 to the mozilla.keyring file
- Fixed broken language plugins (bsc#1137792)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-21"/>
	<updated date="2019-06-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1137792">SUSE bug 1137792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138614">SUSE bug 1138614</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11707/">CVE-2019-11707</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494841" comment="MozillaFirefox-60.7.1-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495126" comment="MozillaFirefox-devel-60.7.1-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494843" comment="MozillaFirefox-translations-common-60.7.1-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494844" comment="MozillaFirefox-translations-other-60.7.1-3.45.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138070" version="1" class="patch">
	<metadata>
		<title>Recommended update for evince (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122794" ref_url="https://bugzilla.suse.com/1122794" source="BUGZILLA"/>
		<reference ref_id="1133037" ref_url="https://bugzilla.suse.com/1133037" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11459" ref_url="https://www.suse.com/security/cve/CVE-2019-11459/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1648-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005621.html" source="SUSE-SU"/>
		<description>
This update for evince provides the following fixes:
	  
Security issue fixed: 	  

- CVE-2019-11459: Fixed an improper error handling in which could have led to use of unitialized use of memory (bsc#1133037).	  

Other issue addressed:

- Removed Supplements from psdocument package, so that it isn't pulled in by default (bsc#1122794).
  		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-21"/>
	<updated date="2019-06-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1122794">SUSE bug 1122794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133037">SUSE bug 1133037</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11459/">CVE-2019-11459</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494845" comment="evince-3.26.0+20180128.1bd86963-4.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494846" comment="evince-devel-3.26.0+20180128.1bd86963-4.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494847" comment="evince-lang-3.26.0+20180128.1bd86963-4.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494848" comment="evince-plugin-djvudocument-3.26.0+20180128.1bd86963-4.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494849" comment="evince-plugin-dvidocument-3.26.0+20180128.1bd86963-4.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494850" comment="evince-plugin-pdfdocument-3.26.0+20180128.1bd86963-4.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494851" comment="evince-plugin-psdocument-3.26.0+20180128.1bd86963-4.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494852" comment="evince-plugin-tiffdocument-3.26.0+20180128.1bd86963-4.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494853" comment="evince-plugin-xpsdocument-3.26.0+20180128.1bd86963-4.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494854" comment="libevdocument3-4-3.26.0+20180128.1bd86963-4.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494855" comment="libevview3-3-3.26.0+20180128.1bd86963-4.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494856" comment="nautilus-evince-3.26.0+20180128.1bd86963-4.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494857" comment="typelib-1_0-EvinceDocument-3_0-3.26.0+20180128.1bd86963-4.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494858" comment="typelib-1_0-EvinceView-3_0-3.26.0+20180128.1bd86963-4.7.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138071" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1138872" ref_url="https://bugzilla.suse.com/1138872" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11708" ref_url="https://www.suse.com/security/cve/CVE-2019-11708/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005622.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Mozilla Firefox Firefox 60.7.2
  MFSA 2019-19 (bsc#1138872)

- CVE-2019-11708: Fix sandbox escape using Prompt:Open.
  * Insufficient vetting of parameters passed with the Prompt:Open IPC
    message between child and parent processes could result in the non-sandboxed
    parent process opening web content chosen by a compromised child process.
    When combined with additional vulnerabilities this could result in executing
    arbitrary code on the user's computer.

		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-22"/>
	<updated date="2019-06-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1138872">SUSE bug 1138872</bugzilla>
	<cve impact="critical" cvss3="10/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11708/">CVE-2019-11708</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494859" comment="MozillaFirefox-60.7.2-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495127" comment="MozillaFirefox-devel-60.7.2-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494861" comment="MozillaFirefox-translations-common-60.7.2-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494862" comment="MozillaFirefox-translations-other-60.7.2-3.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138072" version="1" class="patch">
	<metadata>
		<title>Security update for gvfs (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1125433" ref_url="https://bugzilla.suse.com/1125433" source="BUGZILLA"/>
		<reference ref_id="1136981" ref_url="https://bugzilla.suse.com/1136981" source="BUGZILLA"/>
		<reference ref_id="1136986" ref_url="https://bugzilla.suse.com/1136986" source="BUGZILLA"/>
		<reference ref_id="1136992" ref_url="https://bugzilla.suse.com/1136992" source="BUGZILLA"/>
		<reference ref_id="1137930" ref_url="https://bugzilla.suse.com/1137930" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12447" ref_url="https://www.suse.com/security/cve/CVE-2019-12447/" source="CVE"/>
		<reference ref_id="CVE-2019-12448" ref_url="https://www.suse.com/security/cve/CVE-2019-12448/" source="CVE"/>
		<reference ref_id="CVE-2019-12449" ref_url="https://www.suse.com/security/cve/CVE-2019-12449/" source="CVE"/>
		<reference ref_id="CVE-2019-12795" ref_url="https://www.suse.com/security/cve/CVE-2019-12795/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005636.html" source="SUSE-SU"/>
		<description>
This update for gvfs fixes the following issues:

Security issues fixed:    
   
- CVE-2019-12795: Fixed a vulnerability which could have allowed attacks via local 
  D-Bus method calls (bsc#1137930).
- CVE-2019-12447: Fixed an improper handling of file ownership in daemon/gvfsbackendadmin.c 
  due to no use of setfsuid (bsc#1136986).    
- CVE-2019-12449: Fixed an improper handling of file's user and group ownership  
  in daemon/gvfsbackendadmin.c (bsc#1136992).
- CVE-2019-12448: Fixed race conditions in daemon/gvfsbackendadmin.c due to implementation 
  of query_info_on_read/write at admin backend (bsc#1136981).

Other issue addressed: 
    
- Drop polkit rules files that are only relevant for wheel group (bsc#1125433).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-01"/>
	<updated date="2019-07-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1125433">SUSE bug 1125433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136981">SUSE bug 1136981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136986">SUSE bug 1136986</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136992">SUSE bug 1136992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137930">SUSE bug 1137930</bugzilla>
	<cve impact="critical" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-12447/">CVE-2019-12447</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12448/">CVE-2019-12448</cve>
	<cve impact="critical" cvss3="5.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-12449/">CVE-2019-12449</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12795/">CVE-2019-12795</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494863" comment="gvfs-1.34.2.1-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494864" comment="gvfs-backend-afc-1.34.2.1-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494865" comment="gvfs-backend-samba-1.34.2.1-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494866" comment="gvfs-backends-1.34.2.1-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494867" comment="gvfs-devel-1.34.2.1-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494868" comment="gvfs-fuse-1.34.2.1-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494869" comment="gvfs-lang-1.34.2.1-4.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138073" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1133291" ref_url="https://bugzilla.suse.com/1133291" source="BUGZILLA"/>
		<reference ref_id="1135715" ref_url="https://bugzilla.suse.com/1135715" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6237" ref_url="https://www.suse.com/security/cve/CVE-2019-6237/" source="CVE"/>
		<reference ref_id="CVE-2019-8571" ref_url="https://www.suse.com/security/cve/CVE-2019-8571/" source="CVE"/>
		<reference ref_id="CVE-2019-8583" ref_url="https://www.suse.com/security/cve/CVE-2019-8583/" source="CVE"/>
		<reference ref_id="CVE-2019-8584" ref_url="https://www.suse.com/security/cve/CVE-2019-8584/" source="CVE"/>
		<reference ref_id="CVE-2019-8586" ref_url="https://www.suse.com/security/cve/CVE-2019-8586/" source="CVE"/>
		<reference ref_id="CVE-2019-8587" ref_url="https://www.suse.com/security/cve/CVE-2019-8587/" source="CVE"/>
		<reference ref_id="CVE-2019-8594" ref_url="https://www.suse.com/security/cve/CVE-2019-8594/" source="CVE"/>
		<reference ref_id="CVE-2019-8595" ref_url="https://www.suse.com/security/cve/CVE-2019-8595/" source="CVE"/>
		<reference ref_id="CVE-2019-8596" ref_url="https://www.suse.com/security/cve/CVE-2019-8596/" source="CVE"/>
		<reference ref_id="CVE-2019-8597" ref_url="https://www.suse.com/security/cve/CVE-2019-8597/" source="CVE"/>
		<reference ref_id="CVE-2019-8601" ref_url="https://www.suse.com/security/cve/CVE-2019-8601/" source="CVE"/>
		<reference ref_id="CVE-2019-8607" ref_url="https://www.suse.com/security/cve/CVE-2019-8607/" source="CVE"/>
		<reference ref_id="CVE-2019-8608" ref_url="https://www.suse.com/security/cve/CVE-2019-8608/" source="CVE"/>
		<reference ref_id="CVE-2019-8609" ref_url="https://www.suse.com/security/cve/CVE-2019-8609/" source="CVE"/>
		<reference ref_id="CVE-2019-8610" ref_url="https://www.suse.com/security/cve/CVE-2019-8610/" source="CVE"/>
		<reference ref_id="CVE-2019-8611" ref_url="https://www.suse.com/security/cve/CVE-2019-8611/" source="CVE"/>
		<reference ref_id="CVE-2019-8615" ref_url="https://www.suse.com/security/cve/CVE-2019-8615/" source="CVE"/>
		<reference ref_id="CVE-2019-8619" ref_url="https://www.suse.com/security/cve/CVE-2019-8619/" source="CVE"/>
		<reference ref_id="CVE-2019-8622" ref_url="https://www.suse.com/security/cve/CVE-2019-8622/" source="CVE"/>
		<reference ref_id="CVE-2019-8623" ref_url="https://www.suse.com/security/cve/CVE-2019-8623/" source="CVE"/>
		<description>
This update for webkit2gtk3 to version 2.24.2 fixes the following issues:

Security issues fixed:

- CVE-2019-6237, CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586,
  CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596, CVE-2019-8597,
  CVE-2019-8601, CVE-2019-8607, CVE-2019-8608, CVE-2019-8609, CVE-2019-8610,
  CVE-2019-8615, CVE-2019-8611, CVE-2019-8619, CVE-2019-8622, CVE-2019-8623 (bsc#1135715).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-08"/>
	<updated date="2019-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1133291">SUSE bug 1133291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135715">SUSE bug 1135715</bugzilla>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6237/">CVE-2019-6237</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8571/">CVE-2019-8571</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8583/">CVE-2019-8583</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8584/">CVE-2019-8584</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8586/">CVE-2019-8586</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8587/">CVE-2019-8587</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8594/">CVE-2019-8594</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8595/">CVE-2019-8595</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8596/">CVE-2019-8596</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8597/">CVE-2019-8597</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8601/">CVE-2019-8601</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8607/">CVE-2019-8607</cve>
	<cve impact="low" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8608/">CVE-2019-8608</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8609/">CVE-2019-8609</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8610/">CVE-2019-8610</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8611/">CVE-2019-8611</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8615/">CVE-2019-8615</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8619/">CVE-2019-8619</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8622/">CVE-2019-8622</cve>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8623/">CVE-2019-8623</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494870" comment="typelib-1_0-JavaScriptCore-4_0-2.24.2-3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494871" comment="typelib-1_0-WebKit2-4_0-2.24.2-3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494872" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.2-3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494873" comment="webkit2gtk3-devel-2.24.2-3.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138074" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1138425" ref_url="https://bugzilla.suse.com/1138425" source="BUGZILLA"/>
		<reference ref_id="1138464" ref_url="https://bugzilla.suse.com/1138464" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11597" ref_url="https://www.suse.com/security/cve/CVE-2019-11597/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005670.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

Security issues fixed:

- CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage() (bsc#1138464).
- Fixed a file content disclosure via SVG and WMF decoding (bsc#1138425).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-08"/>
	<updated date="2019-07-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1138425">SUSE bug 1138425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138464">SUSE bug 1138464</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11597/">CVE-2019-11597</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494874" comment="ImageMagick-7.0.7.34-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494875" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494877" comment="ImageMagick-devel-7.0.7.34-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494878" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494879" comment="libMagick++-devel-7.0.7.34-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494880" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494881" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.64.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138075" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1140868" ref_url="https://bugzilla.suse.com/1140868" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11709" ref_url="https://www.suse.com/security/cve/CVE-2019-11709/" source="CVE"/>
		<reference ref_id="CVE-2019-11711" ref_url="https://www.suse.com/security/cve/CVE-2019-11711/" source="CVE"/>
		<reference ref_id="CVE-2019-11712" ref_url="https://www.suse.com/security/cve/CVE-2019-11712/" source="CVE"/>
		<reference ref_id="CVE-2019-11713" ref_url="https://www.suse.com/security/cve/CVE-2019-11713/" source="CVE"/>
		<reference ref_id="CVE-2019-11715" ref_url="https://www.suse.com/security/cve/CVE-2019-11715/" source="CVE"/>
		<reference ref_id="CVE-2019-11717" ref_url="https://www.suse.com/security/cve/CVE-2019-11717/" source="CVE"/>
		<reference ref_id="CVE-2019-11719" ref_url="https://www.suse.com/security/cve/CVE-2019-11719/" source="CVE"/>
		<reference ref_id="CVE-2019-11729" ref_url="https://www.suse.com/security/cve/CVE-2019-11729/" source="CVE"/>
		<reference ref_id="CVE-2019-11730" ref_url="https://www.suse.com/security/cve/CVE-2019-11730/" source="CVE"/>
		<reference ref_id="CVE-2019-9811" ref_url="https://www.suse.com/security/cve/CVE-2019-9811/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005725.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox, mozilla-nss fixes the following issues:

MozillaFirefox to version ESR 60.8:

- CVE-2019-9811: Sandbox escape via installation of malicious language pack (bsc#1140868).
- CVE-2019-11711: Script injection within domain through inner window reuse (bsc#1140868).
- CVE-2019-11712: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects (bsc#1140868).
- CVE-2019-11713: Use-after-free with HTTP/2 cached stream (bsc#1140868).
- CVE-2019-11729: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (bsc#1140868).
- CVE-2019-11715: HTML parsing error can contribute to content XSS (bsc#1140868).
- CVE-2019-11717: Caret character improperly escaped in origins (bsc#1140868).
- CVE-2019-11719: Out-of-bounds read when importing curve25519 private key (bsc#1140868).
- CVE-2019-11730: Same-origin policy treats all files in a directory as having the same-origin (bsc#1140868).
- CVE-2019-11709: Multiple Memory safety bugs fixed (bsc#1140868).

mozilla-nss to version 3.44.1:

* Added IPSEC IKE support to softoken 
* Many new FIPS test cases
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-17"/>
	<updated date="2019-07-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11709/">CVE-2019-11709</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11711/">CVE-2019-11711</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11712/">CVE-2019-11712</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11713/">CVE-2019-11713</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11715/">CVE-2019-11715</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11717/">CVE-2019-11717</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11719/">CVE-2019-11719</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11729/">CVE-2019-11729</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11730/">CVE-2019-11730</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9811/">CVE-2019-9811</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494883" comment="MozillaFirefox-60.8.0-3.51.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495128" comment="MozillaFirefox-devel-60.8.0-3.51.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494885" comment="MozillaFirefox-translations-common-60.8.0-3.51.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494886" comment="MozillaFirefox-translations-other-60.8.0-3.51.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138076" version="1" class="patch">
	<metadata>
		<title>Security update for openexr (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1040109" ref_url="https://bugzilla.suse.com/1040109" source="BUGZILLA"/>
		<reference ref_id="1040113" ref_url="https://bugzilla.suse.com/1040113" source="BUGZILLA"/>
		<reference ref_id="1040115" ref_url="https://bugzilla.suse.com/1040115" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-9111" ref_url="https://www.suse.com/security/cve/CVE-2017-9111/" source="CVE"/>
		<reference ref_id="CVE-2017-9113" ref_url="https://www.suse.com/security/cve/CVE-2017-9113/" source="CVE"/>
		<reference ref_id="CVE-2017-9115" ref_url="https://www.suse.com/security/cve/CVE-2017-9115/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1963-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005746.html" source="SUSE-SU"/>
		<description>
This update for openexr fixes the following issues:

Security issues fixed: 	  

- CVE-2017-9111: Fixed an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h (bsc#1040109).
- CVE-2017-9113: Fixed an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp (bsc#1040113).
- CVE-2017-9115: Fixed an invalid write of size 2 in the = operator function inhalf.h (bsc#1040115).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-24"/>
	<updated date="2019-07-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1040109">SUSE bug 1040109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1040113">SUSE bug 1040113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1040115">SUSE bug 1040115</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-9111/">CVE-2017-9111</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2017-9113/">CVE-2017-9113</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-9115/">CVE-2017-9115</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494887" comment="libIlmImf-2_2-23-2.2.1-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494888" comment="libIlmImfUtil-2_2-23-2.2.1-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494889" comment="openexr-devel-2.2.1-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138077" version="1" class="patch">
	<metadata>
		<title>Security update for openexr (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1061305" ref_url="https://bugzilla.suse.com/1061305" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-14988" ref_url="https://www.suse.com/security/cve/CVE-2017-14988/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005771.html" source="SUSE-SU"/>
		<description>
This update for openexr fixes the following issues:

- CVE-2017-14988: Fixed a denial of service in Header::readfrom() (bsc#1061305).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-02"/>
	<updated date="2019-08-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1061305">SUSE bug 1061305</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14988/">CVE-2017-14988</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494898" comment="libIlmImf-2_2-23-2.2.1-3.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494899" comment="libIlmImfUtil-2_2-23-2.2.1-3.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494900" comment="openexr-devel-2.2.1-3.9.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138078" version="1" class="patch">
	<metadata>
		<title>Security update for evince (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141619" ref_url="https://bugzilla.suse.com/1141619" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1010006" ref_url="https://www.suse.com/security/cve/CVE-2019-1010006/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005779.html" source="SUSE-SU"/>
		<description>
This update for evince fixes the following issues:

- CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c (bsc#1141619).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-06"/>
	<updated date="2019-08-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1141619">SUSE bug 1141619</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-1010006/">CVE-2019-1010006</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494901" comment="evince-3.26.0+20180128.1bd86963-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494902" comment="evince-devel-3.26.0+20180128.1bd86963-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494903" comment="evince-lang-3.26.0+20180128.1bd86963-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494904" comment="evince-plugin-djvudocument-3.26.0+20180128.1bd86963-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494905" comment="evince-plugin-dvidocument-3.26.0+20180128.1bd86963-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494906" comment="evince-plugin-pdfdocument-3.26.0+20180128.1bd86963-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494907" comment="evince-plugin-psdocument-3.26.0+20180128.1bd86963-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494908" comment="evince-plugin-tiffdocument-3.26.0+20180128.1bd86963-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494909" comment="evince-plugin-xpsdocument-3.26.0+20180128.1bd86963-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494910" comment="libevdocument3-4-3.26.0+20180128.1bd86963-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494911" comment="libevview3-3-3.26.0+20180128.1bd86963-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494912" comment="nautilus-evince-3.26.0+20180128.1bd86963-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494913" comment="typelib-1_0-EvinceDocument-3_0-3.26.0+20180128.1bd86963-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494914" comment="typelib-1_0-EvinceView-3_0-3.26.0+20180128.1bd86963-4.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138079" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1138459" ref_url="https://bugzilla.suse.com/1138459" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10160" ref_url="https://www.suse.com/security/cve/CVE-2019-10160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005783.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

Security issue fixed:

- CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-06"/>
	<updated date="2019-08-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1138459">SUSE bug 1138459</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10160/">CVE-2019-10160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494915" comment="python-tk-2.7.14-7.14.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138080" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141980" ref_url="https://bugzilla.suse.com/1141980" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13619" ref_url="https://www.suse.com/security/cve/CVE-2019-13619/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005808.html" source="SUSE-SU"/>
		<description>
This update for wireshark to version 2.4.16 fixes the following issues:

Security issue fixed:

- CVE-2019-13619: ASN.1 BER and related dissectors crash (bsc#1141980).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-09"/>
	<updated date="2019-08-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141980">SUSE bug 1141980</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13619/">CVE-2019-13619</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494916" comment="wireshark-devel-2.4.16-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494917" comment="wireshark-ui-qt-2.4.16-3.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138081" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1139884" ref_url="https://bugzilla.suse.com/1139884" source="BUGZILLA"/>
		<reference ref_id="1139885" ref_url="https://bugzilla.suse.com/1139885" source="BUGZILLA"/>
		<reference ref_id="1139886" ref_url="https://bugzilla.suse.com/1139886" source="BUGZILLA"/>
		<reference ref_id="1140100" ref_url="https://bugzilla.suse.com/1140100" source="BUGZILLA"/>
		<reference ref_id="1140102" ref_url="https://bugzilla.suse.com/1140102" source="BUGZILLA"/>
		<reference ref_id="1140103" ref_url="https://bugzilla.suse.com/1140103" source="BUGZILLA"/>
		<reference ref_id="1140104" ref_url="https://bugzilla.suse.com/1140104" source="BUGZILLA"/>
		<reference ref_id="1140105" ref_url="https://bugzilla.suse.com/1140105" source="BUGZILLA"/>
		<reference ref_id="1140106" ref_url="https://bugzilla.suse.com/1140106" source="BUGZILLA"/>
		<reference ref_id="1140110" ref_url="https://bugzilla.suse.com/1140110" source="BUGZILLA"/>
		<reference ref_id="1140111" ref_url="https://bugzilla.suse.com/1140111" source="BUGZILLA"/>
		<reference ref_id="1140501" ref_url="https://bugzilla.suse.com/1140501" source="BUGZILLA"/>
		<reference ref_id="1140513" ref_url="https://bugzilla.suse.com/1140513" source="BUGZILLA"/>
		<reference ref_id="1140520" ref_url="https://bugzilla.suse.com/1140520" source="BUGZILLA"/>
		<reference ref_id="1140534" ref_url="https://bugzilla.suse.com/1140534" source="BUGZILLA"/>
		<reference ref_id="1140538" ref_url="https://bugzilla.suse.com/1140538" source="BUGZILLA"/>
		<reference ref_id="1140543" ref_url="https://bugzilla.suse.com/1140543" source="BUGZILLA"/>
		<reference ref_id="1140545" ref_url="https://bugzilla.suse.com/1140545" source="BUGZILLA"/>
		<reference ref_id="1140547" ref_url="https://bugzilla.suse.com/1140547" source="BUGZILLA"/>
		<reference ref_id="1140549" ref_url="https://bugzilla.suse.com/1140549" source="BUGZILLA"/>
		<reference ref_id="1140552" ref_url="https://bugzilla.suse.com/1140552" source="BUGZILLA"/>
		<reference ref_id="1140554" ref_url="https://bugzilla.suse.com/1140554" source="BUGZILLA"/>
		<reference ref_id="1140664" ref_url="https://bugzilla.suse.com/1140664" source="BUGZILLA"/>
		<reference ref_id="1140665" ref_url="https://bugzilla.suse.com/1140665" source="BUGZILLA"/>
		<reference ref_id="1140666" ref_url="https://bugzilla.suse.com/1140666" source="BUGZILLA"/>
		<reference ref_id="1140667" ref_url="https://bugzilla.suse.com/1140667" source="BUGZILLA"/>
		<reference ref_id="1140668" ref_url="https://bugzilla.suse.com/1140668" source="BUGZILLA"/>
		<reference ref_id="1140669" ref_url="https://bugzilla.suse.com/1140669" source="BUGZILLA"/>
		<reference ref_id="1140673" ref_url="https://bugzilla.suse.com/1140673" source="BUGZILLA"/>
		<reference ref_id="1141171" ref_url="https://bugzilla.suse.com/1141171" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12974" ref_url="https://www.suse.com/security/cve/CVE-2019-12974/" source="CVE"/>
		<reference ref_id="CVE-2019-12975" ref_url="https://www.suse.com/security/cve/CVE-2019-12975/" source="CVE"/>
		<reference ref_id="CVE-2019-12976" ref_url="https://www.suse.com/security/cve/CVE-2019-12976/" source="CVE"/>
		<reference ref_id="CVE-2019-12977" ref_url="https://www.suse.com/security/cve/CVE-2019-12977/" source="CVE"/>
		<reference ref_id="CVE-2019-12978" ref_url="https://www.suse.com/security/cve/CVE-2019-12978/" source="CVE"/>
		<reference ref_id="CVE-2019-12979" ref_url="https://www.suse.com/security/cve/CVE-2019-12979/" source="CVE"/>
		<reference ref_id="CVE-2019-13133" ref_url="https://www.suse.com/security/cve/CVE-2019-13133/" source="CVE"/>
		<reference ref_id="CVE-2019-13134" ref_url="https://www.suse.com/security/cve/CVE-2019-13134/" source="CVE"/>
		<reference ref_id="CVE-2019-13135" ref_url="https://www.suse.com/security/cve/CVE-2019-13135/" source="CVE"/>
		<reference ref_id="CVE-2019-13136" ref_url="https://www.suse.com/security/cve/CVE-2019-13136/" source="CVE"/>
		<reference ref_id="CVE-2019-13137" ref_url="https://www.suse.com/security/cve/CVE-2019-13137/" source="CVE"/>
		<reference ref_id="CVE-2019-13295" ref_url="https://www.suse.com/security/cve/CVE-2019-13295/" source="CVE"/>
		<reference ref_id="CVE-2019-13296" ref_url="https://www.suse.com/security/cve/CVE-2019-13296/" source="CVE"/>
		<reference ref_id="CVE-2019-13297" ref_url="https://www.suse.com/security/cve/CVE-2019-13297/" source="CVE"/>
		<reference ref_id="CVE-2019-13298" ref_url="https://www.suse.com/security/cve/CVE-2019-13298/" source="CVE"/>
		<reference ref_id="CVE-2019-13299" ref_url="https://www.suse.com/security/cve/CVE-2019-13299/" source="CVE"/>
		<reference ref_id="CVE-2019-13300" ref_url="https://www.suse.com/security/cve/CVE-2019-13300/" source="CVE"/>
		<reference ref_id="CVE-2019-13301" ref_url="https://www.suse.com/security/cve/CVE-2019-13301/" source="CVE"/>
		<reference ref_id="CVE-2019-13302" ref_url="https://www.suse.com/security/cve/CVE-2019-13302/" source="CVE"/>
		<reference ref_id="CVE-2019-13303" ref_url="https://www.suse.com/security/cve/CVE-2019-13303/" source="CVE"/>
		<reference ref_id="CVE-2019-13304" ref_url="https://www.suse.com/security/cve/CVE-2019-13304/" source="CVE"/>
		<reference ref_id="CVE-2019-13305" ref_url="https://www.suse.com/security/cve/CVE-2019-13305/" source="CVE"/>
		<reference ref_id="CVE-2019-13306" ref_url="https://www.suse.com/security/cve/CVE-2019-13306/" source="CVE"/>
		<reference ref_id="CVE-2019-13307" ref_url="https://www.suse.com/security/cve/CVE-2019-13307/" source="CVE"/>
		<reference ref_id="CVE-2019-13308" ref_url="https://www.suse.com/security/cve/CVE-2019-13308/" source="CVE"/>
		<reference ref_id="CVE-2019-13309" ref_url="https://www.suse.com/security/cve/CVE-2019-13309/" source="CVE"/>
		<reference ref_id="CVE-2019-13310" ref_url="https://www.suse.com/security/cve/CVE-2019-13310/" source="CVE"/>
		<reference ref_id="CVE-2019-13311" ref_url="https://www.suse.com/security/cve/CVE-2019-13311/" source="CVE"/>
		<reference ref_id="CVE-2019-13391" ref_url="https://www.suse.com/security/cve/CVE-2019-13391/" source="CVE"/>
		<reference ref_id="CVE-2019-13454" ref_url="https://www.suse.com/security/cve/CVE-2019-13454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

- CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory() (bsc#1140554).
- CVE-2019-13309: Fixed a memory leak at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages (bsc#1140520).
- CVE-2019-13310: Fixed a memory leak at AcquireMagickMemory because of an error in MagickWand/mogrify.c (bsc#1140501).
- CVE-2019-13311: Fixed a memory leak at AcquireMagickMemory because of a wand/mogrify.c error (bsc#1140513).
- CVE-2019-13303: Fixed a heap-based buffer over-read in MagickCore/composite.c in CompositeImage (bsc#1140549).
- CVE-2019-13296: Fixed a memory leak in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c (bsc#1140665).
- CVE-2019-13299: Fixed a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel (bsc#1140668).
- CVE-2019-13454: Fixed a division by zero in RemoveDuplicateLayers in MagickCore/layer.c (bsc#1141171).
- CVE-2019-13295: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140664).
- CVE-2019-13297: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140666).
- CVE-2019-12979: Fixed the use of uninitialized values in SyncImageSettings() (bsc#1139886).
- CVE-2019-13391: Fixed a heap-based buffer over-read in MagickCore/fourier.c (bsc#1140673).
- CVE-2019-13308: Fixed a heap-based buffer overflow in MagickCore/fourier.c (bsc#1140534).
- CVE-2019-13302: Fixed a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages (bsc#1140552).
- CVE-2019-13298: Fixed a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo (bsc#1140667).
- CVE-2019-13300: Fixed a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages (bsc#1140669).
- CVE-2019-13307: Fixed a heap-based buffer overflow at MagickCore/statistic.c (bsc#1140538).
- CVE-2019-12977: Fixed the use of uninitialized values in WriteJP2Imag() (bsc#1139884).
- CVE-2019-12975: Fixed a memory leak in the WriteDPXImage() in coders/dpx.c (bsc#1140106).
- CVE-2019-13135: Fixed the use of uninitialized values in ReadCUTImage() (bsc#1140103).
- CVE-2019-12978: Fixed the use of uninitialized values in ReadPANGOImage() (bsc#1139885).
- CVE-2019-12974: Fixed a NULL pointer dereference in the ReadPANGOImage() (bsc#1140111).
- CVE-2019-13304: Fixed a stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140547).
- CVE-2019-13305: Fixed one more stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140545).
- CVE-2019-13306: Fixed an additional stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140543).
- CVE-2019-13133: Fixed a memory leak in the ReadBMPImage() (bsc#1140100).
- CVE-2019-13134: Fixed a memory leak in the ReadVIFFImage() (bsc#1140102).
- CVE-2019-13137: Fixed a memory leak in the ReadPSImage() (bsc#1140105).
- CVE-2019-13136: Fixed a integer overflow vulnerability in the TIFFSeekCustomStream() (bsc#1140104).
- CVE-2019-12976: Fixed a memory leak in the ReadPCLImage() in coders/pcl.c(bsc#1140110).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-09"/>
	<updated date="2019-08-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1139884">SUSE bug 1139884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139885">SUSE bug 1139885</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139886">SUSE bug 1139886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140100">SUSE bug 1140100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140102">SUSE bug 1140102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140103">SUSE bug 1140103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140104">SUSE bug 1140104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140105">SUSE bug 1140105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140106">SUSE bug 1140106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140110">SUSE bug 1140110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140111">SUSE bug 1140111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140501">SUSE bug 1140501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140513">SUSE bug 1140513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140520">SUSE bug 1140520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140534">SUSE bug 1140534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140538">SUSE bug 1140538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140543">SUSE bug 1140543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140545">SUSE bug 1140545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140547">SUSE bug 1140547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140549">SUSE bug 1140549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140552">SUSE bug 1140552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140554">SUSE bug 1140554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140664">SUSE bug 1140664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140665">SUSE bug 1140665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140666">SUSE bug 1140666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140667">SUSE bug 1140667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140668">SUSE bug 1140668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140669">SUSE bug 1140669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140673">SUSE bug 1140673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141171">SUSE bug 1141171</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12974/">CVE-2019-12974</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-12975/">CVE-2019-12975</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12976/">CVE-2019-12976</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12977/">CVE-2019-12977</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12978/">CVE-2019-12978</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12979/">CVE-2019-12979</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13133/">CVE-2019-13133</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13134/">CVE-2019-13134</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13135/">CVE-2019-13135</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-13136/">CVE-2019-13136</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13137/">CVE-2019-13137</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13295/">CVE-2019-13295</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13296/">CVE-2019-13296</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13297/">CVE-2019-13297</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13298/">CVE-2019-13298</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13299/">CVE-2019-13299</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13300/">CVE-2019-13300</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13301/">CVE-2019-13301</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13302/">CVE-2019-13302</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13303/">CVE-2019-13303</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13304/">CVE-2019-13304</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13305/">CVE-2019-13305</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13306/">CVE-2019-13306</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13307/">CVE-2019-13307</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13308/">CVE-2019-13308</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13309/">CVE-2019-13309</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13310/">CVE-2019-13310</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13311/">CVE-2019-13311</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13391/">CVE-2019-13391</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13454/">CVE-2019-13454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494918" comment="ImageMagick-7.0.7.34-3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494919" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494921" comment="ImageMagick-devel-7.0.7.34-3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494922" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494923" comment="libMagick++-devel-7.0.7.34-3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494924" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494925" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.67.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138082" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141853" ref_url="https://bugzilla.suse.com/1141853" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20852" ref_url="https://www.suse.com/security/cve/CVE-2018-20852/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005811.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-12"/>
	<updated date="2019-08-12"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141853">SUSE bug 1141853</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20852/">CVE-2018-20852</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494926" comment="python-tk-2.7.14-7.17.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138083" version="1" class="patch">
	<metadata>
		<title>Security update for wavpack (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1133384" ref_url="https://bugzilla.suse.com/1133384" source="BUGZILLA"/>
		<reference ref_id="1141334" ref_url="https://bugzilla.suse.com/1141334" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1010319" ref_url="https://www.suse.com/security/cve/CVE-2019-1010319/" source="CVE"/>
		<reference ref_id="CVE-2019-11498" ref_url="https://www.suse.com/security/cve/CVE-2019-11498/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005836.html" source="SUSE-SU"/>
		<description>
This update for wavpack fixes the following issues:

Security issues fixed:

- CVE-2019-1010319: Fixed use of uninitialized variable in ParseWave64HeaderConfig that can result in unexpected control flow, crashes, and segfaults (bsc#1141334).
- CVE-2019-11498: Fixed possible denial of service (application crash) in WavpackSetConfiguration64 via a DFF file that lacks valid sample-rate data (bsc#1133384).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-21"/>
	<updated date="2019-08-21"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1133384">SUSE bug 1133384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141334">SUSE bug 1141334</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-1010319/">CVE-2019-1010319</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11498/">CVE-2019-11498</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494931" comment="wavpack-5.1.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494932" comment="wavpack-devel-5.1.0-4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138084" version="1" class="patch">
	<metadata>
		<title>Security update for ibus (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1150011" ref_url="https://bugzilla.suse.com/1150011" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14822" ref_url="https://www.suse.com/security/cve/CVE-2019-14822/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005948.html" source="SUSE-SU"/>
		<description>
This update for ibus fixes the following issues:

- CVE-2019-14822: Fixed misconfiguration of the DBus server allows to
  unprivileged user could monitor and send method calls to the ibus bus
  of another user (bsc#1150011).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-20"/>
	<updated date="2019-09-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1150011">SUSE bug 1150011</bugzilla>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14822/">CVE-2019-14822</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495129" comment="ibus-1.5.19-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495130" comment="ibus-devel-1.5.19-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495131" comment="ibus-gtk-1.5.19-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495132" comment="ibus-gtk3-1.5.19-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495133" comment="ibus-lang-1.5.19-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495134" comment="libibus-1_0-5-1.5.19-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495135" comment="typelib-1_0-IBus-1_0-1.5.19-8.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138085" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1148931" ref_url="https://bugzilla.suse.com/1148931" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8595" ref_url="https://www.suse.com/security/cve/CVE-2019-8595/" source="CVE"/>
		<reference ref_id="CVE-2019-8607" ref_url="https://www.suse.com/security/cve/CVE-2019-8607/" source="CVE"/>
		<reference ref_id="CVE-2019-8615" ref_url="https://www.suse.com/security/cve/CVE-2019-8615/" source="CVE"/>
		<reference ref_id="CVE-2019-8644" ref_url="https://www.suse.com/security/cve/CVE-2019-8644/" source="CVE"/>
		<reference ref_id="CVE-2019-8649" ref_url="https://www.suse.com/security/cve/CVE-2019-8649/" source="CVE"/>
		<reference ref_id="CVE-2019-8658" ref_url="https://www.suse.com/security/cve/CVE-2019-8658/" source="CVE"/>
		<reference ref_id="CVE-2019-8666" ref_url="https://www.suse.com/security/cve/CVE-2019-8666/" source="CVE"/>
		<reference ref_id="CVE-2019-8669" ref_url="https://www.suse.com/security/cve/CVE-2019-8669/" source="CVE"/>
		<reference ref_id="CVE-2019-8671" ref_url="https://www.suse.com/security/cve/CVE-2019-8671/" source="CVE"/>
		<reference ref_id="CVE-2019-8672" ref_url="https://www.suse.com/security/cve/CVE-2019-8672/" source="CVE"/>
		<reference ref_id="CVE-2019-8673" ref_url="https://www.suse.com/security/cve/CVE-2019-8673/" source="CVE"/>
		<reference ref_id="CVE-2019-8676" ref_url="https://www.suse.com/security/cve/CVE-2019-8676/" source="CVE"/>
		<reference ref_id="CVE-2019-8677" ref_url="https://www.suse.com/security/cve/CVE-2019-8677/" source="CVE"/>
		<reference ref_id="CVE-2019-8678" ref_url="https://www.suse.com/security/cve/CVE-2019-8678/" source="CVE"/>
		<reference ref_id="CVE-2019-8679" ref_url="https://www.suse.com/security/cve/CVE-2019-8679/" source="CVE"/>
		<reference ref_id="CVE-2019-8680" ref_url="https://www.suse.com/security/cve/CVE-2019-8680/" source="CVE"/>
		<reference ref_id="CVE-2019-8681" ref_url="https://www.suse.com/security/cve/CVE-2019-8681/" source="CVE"/>
		<reference ref_id="CVE-2019-8683" ref_url="https://www.suse.com/security/cve/CVE-2019-8683/" source="CVE"/>
		<reference ref_id="CVE-2019-8684" ref_url="https://www.suse.com/security/cve/CVE-2019-8684/" source="CVE"/>
		<reference ref_id="CVE-2019-8686" ref_url="https://www.suse.com/security/cve/CVE-2019-8686/" source="CVE"/>
		<reference ref_id="CVE-2019-8687" ref_url="https://www.suse.com/security/cve/CVE-2019-8687/" source="CVE"/>
		<reference ref_id="CVE-2019-8688" ref_url="https://www.suse.com/security/cve/CVE-2019-8688/" source="CVE"/>
		<reference ref_id="CVE-2019-8689" ref_url="https://www.suse.com/security/cve/CVE-2019-8689/" source="CVE"/>
		<reference ref_id="CVE-2019-8690" ref_url="https://www.suse.com/security/cve/CVE-2019-8690/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2428-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005951.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Security issues fixed:

- CVE-2019-8673, CVE-2019-8678, CVE-2019-8686, CVE-2019-8683, CVE-2019-8671,
  CVE-2019-8595, CVE-2019-8684, CVE-2019-8681, CVE-2019-8615, CVE-2019-8689,
  CVE-2019-8680, CVE-2019-8672, CVE-2019-8676, CVE-2019-8666, CVE-2019-8644,
  CVE-2019-8658, CVE-2019-8690, CVE-2019-8688, CVE-2019-8649, CVE-2019-8679,
  CVE-2019-8687, CVE-2019-8669, CVE-2019-8677, CVE-2019-8607 (bsc#1148931).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-23"/>
	<updated date="2019-09-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1148931">SUSE bug 1148931</bugzilla>
	<cve impact="low" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8595/">CVE-2019-8595</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8607/">CVE-2019-8607</cve>
	<cve impact="low" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8615/">CVE-2019-8615</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8644/">CVE-2019-8644</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8649/">CVE-2019-8649</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8658/">CVE-2019-8658</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8666/">CVE-2019-8666</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8669/">CVE-2019-8669</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8671/">CVE-2019-8671</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8672/">CVE-2019-8672</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8673/">CVE-2019-8673</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8676/">CVE-2019-8676</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8677/">CVE-2019-8677</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8678/">CVE-2019-8678</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8679/">CVE-2019-8679</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8680/">CVE-2019-8680</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8681/">CVE-2019-8681</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8683/">CVE-2019-8683</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8684/">CVE-2019-8684</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8686/">CVE-2019-8686</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8687/">CVE-2019-8687</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8688/">CVE-2019-8688</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8689/">CVE-2019-8689</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8690/">CVE-2019-8690</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494941" comment="typelib-1_0-JavaScriptCore-4_0-2.24.4-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494942" comment="typelib-1_0-WebKit2-4_0-2.24.4-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494943" comment="typelib-1_0-WebKit2WebExtension-4_0-2.24.4-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494944" comment="webkit2gtk3-devel-2.24.4-3.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138086" version="1" class="patch">
	<metadata>
		<title>Security update for libopenmpt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1143578" ref_url="https://bugzilla.suse.com/1143578" source="BUGZILLA"/>
		<reference ref_id="1143581" ref_url="https://bugzilla.suse.com/1143581" source="BUGZILLA"/>
		<reference ref_id="1143582" ref_url="https://bugzilla.suse.com/1143582" source="BUGZILLA"/>
		<reference ref_id="1143584" ref_url="https://bugzilla.suse.com/1143584" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20860" ref_url="https://www.suse.com/security/cve/CVE-2018-20860/" source="CVE"/>
		<reference ref_id="CVE-2018-20861" ref_url="https://www.suse.com/security/cve/CVE-2018-20861/" source="CVE"/>
		<reference ref_id="CVE-2019-14382" ref_url="https://www.suse.com/security/cve/CVE-2019-14382/" source="CVE"/>
		<reference ref_id="CVE-2019-14383" ref_url="https://www.suse.com/security/cve/CVE-2019-14383/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005954.html" source="SUSE-SU"/>
		<description>
This update for libopenmpt fixes the following issues:

Security issues fixed:

- CVE-2018-20861: Fixed crash with certain malformed custom tunings in MPTM files (bsc#1143578).
- CVE-2018-20860: Fixed crash with malformed MED files (bsc#1143581).
- CVE-2019-14383: Fixed J2B that allows an assertion failure during file parsing with debug STLs (bsc#1143584).
- CVE-2019-14382: Fixed DSM that allows an assertion failure during file parsing with debug STLs (bsc#1143582).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-23"/>
	<updated date="2019-09-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1143578">SUSE bug 1143578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143581">SUSE bug 1143581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143582">SUSE bug 1143582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143584">SUSE bug 1143584</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20860/">CVE-2018-20860</cve>
	<cve impact="moderate" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20861/">CVE-2018-20861</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14382/">CVE-2019-14382</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14383/">CVE-2019-14383</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494945" comment="libmodplug-devel-0.3.17-2.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494946" comment="libmodplug1-0.3.17-2.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494947" comment="libopenmpt-devel-0.3.17-2.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494948" comment="libopenmpt0-0.3.17-2.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494949" comment="libopenmpt_modplug1-0.3.17-2.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138087" version="1" class="patch">
	<metadata>
		<title>Security update for djvulibre (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1146569" ref_url="https://bugzilla.suse.com/1146569" source="BUGZILLA"/>
		<reference ref_id="1146571" ref_url="https://bugzilla.suse.com/1146571" source="BUGZILLA"/>
		<reference ref_id="1146572" ref_url="https://bugzilla.suse.com/1146572" source="BUGZILLA"/>
		<reference ref_id="1146702" ref_url="https://bugzilla.suse.com/1146702" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15142" ref_url="https://www.suse.com/security/cve/CVE-2019-15142/" source="CVE"/>
		<reference ref_id="CVE-2019-15143" ref_url="https://www.suse.com/security/cve/CVE-2019-15143/" source="CVE"/>
		<reference ref_id="CVE-2019-15144" ref_url="https://www.suse.com/security/cve/CVE-2019-15144/" source="CVE"/>
		<reference ref_id="CVE-2019-15145" ref_url="https://www.suse.com/security/cve/CVE-2019-15145/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005960.html" source="SUSE-SU"/>
		<description>
This update for djvulibre fixes the following issues:

Security issues fixed:

- CVE-2019-15142: Fixed heap-based buffer over-read (bsc#1146702).
- CVE-2019-15143: Fixed resource exhaustion caused by corrupted image files (bsc#1146569).
- CVE-2019-15144: Fixed denial-of-service caused by crafted PBM image files (bsc#1146571).
- CVE-2019-15145: Fixed out-of-bounds read caused by corrupted JB2 image files (bsc#1146572).
- Fixed segfault when libtiff encounters corrupted TIFF (upstream issue #295).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-24"/>
	<updated date="2019-09-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1146569">SUSE bug 1146569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146571">SUSE bug 1146571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146572">SUSE bug 1146572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146702">SUSE bug 1146702</bugzilla>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15142/">CVE-2019-15142</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15143/">CVE-2019-15143</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15144/">CVE-2019-15144</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15145/">CVE-2019-15145</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494950" comment="libdjvulibre-devel-3.5.27-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494951" comment="libdjvulibre21-3.5.27-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138088" version="1" class="patch">
	<metadata>
		<title>Security update for SDL2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141844" ref_url="https://bugzilla.suse.com/1141844" source="BUGZILLA"/>
		<reference ref_id="1142031" ref_url="https://bugzilla.suse.com/1142031" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13616" ref_url="https://www.suse.com/security/cve/CVE-2019-13616/" source="CVE"/>
		<reference ref_id="CVE-2019-13626" ref_url="https://www.suse.com/security/cve/CVE-2019-13626/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005965.html" source="SUSE-SU"/>
		<description>
This update for SDL2 fixes the following issues:

Security issues fixed:

- CVE-2019-13616: Fixed heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c (bsc#1141844).
- CVE-2019-13626: Fixed integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c (bsc#1142031).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-25"/>
	<updated date="2019-09-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141844">SUSE bug 1141844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142031">SUSE bug 1142031</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13616/">CVE-2019-13616</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13626/">CVE-2019-13626</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494952" comment="libSDL2-2_0-0-2.0.8-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494953" comment="libSDL2-devel-2.0.8-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138089" version="1" class="patch">
	<metadata>
		<title>Security update for jasper (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1117507" ref_url="https://bugzilla.suse.com/1117507" source="BUGZILLA"/>
		<reference ref_id="1117508" ref_url="https://bugzilla.suse.com/1117508" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19540" ref_url="https://www.suse.com/security/cve/CVE-2018-19540/" source="CVE"/>
		<reference ref_id="CVE-2018-19541" ref_url="https://www.suse.com/security/cve/CVE-2018-19541/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005981.html" source="SUSE-SU"/>
		<description>
This update for jasper fixes the following issues:

Security issues fixed: 

- CVE-2018-19540: Fixed  a heap based overflow in jas_icctxtdesc_input (bsc#1117508).
- CVE-2018-19541: Fix heap based overread in jas_image_depalettize (bsc#1117507).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-02"/>
	<updated date="2019-10-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1117507">SUSE bug 1117507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117508">SUSE bug 1117508</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-19540/">CVE-2018-19540</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19541/">CVE-2018-19541</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494954" comment="libjasper-devel-2.0.14-3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138090" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109465" ref_url="https://bugzilla.suse.com/1109465" source="BUGZILLA"/>
		<reference ref_id="1117473" ref_url="https://bugzilla.suse.com/1117473" source="BUGZILLA"/>
		<reference ref_id="1123482" ref_url="https://bugzilla.suse.com/1123482" source="BUGZILLA"/>
		<reference ref_id="1124525" ref_url="https://bugzilla.suse.com/1124525" source="BUGZILLA"/>
		<reference ref_id="1133810" ref_url="https://bugzilla.suse.com/1133810" source="BUGZILLA"/>
		<reference ref_id="1138688" ref_url="https://bugzilla.suse.com/1138688" source="BUGZILLA"/>
		<reference ref_id="1140868" ref_url="https://bugzilla.suse.com/1140868" source="BUGZILLA"/>
		<reference ref_id="1141322" ref_url="https://bugzilla.suse.com/1141322" source="BUGZILLA"/>
		<reference ref_id="1145665" ref_url="https://bugzilla.suse.com/1145665" source="BUGZILLA"/>
		<reference ref_id="1149292" ref_url="https://bugzilla.suse.com/1149292" source="BUGZILLA"/>
		<reference ref_id="1149293" ref_url="https://bugzilla.suse.com/1149293" source="BUGZILLA"/>
		<reference ref_id="1149294" ref_url="https://bugzilla.suse.com/1149294" source="BUGZILLA"/>
		<reference ref_id="1149295" ref_url="https://bugzilla.suse.com/1149295" source="BUGZILLA"/>
		<reference ref_id="1149296" ref_url="https://bugzilla.suse.com/1149296" source="BUGZILLA"/>
		<reference ref_id="1149297" ref_url="https://bugzilla.suse.com/1149297" source="BUGZILLA"/>
		<reference ref_id="1149298" ref_url="https://bugzilla.suse.com/1149298" source="BUGZILLA"/>
		<reference ref_id="1149299" ref_url="https://bugzilla.suse.com/1149299" source="BUGZILLA"/>
		<reference ref_id="1149302" ref_url="https://bugzilla.suse.com/1149302" source="BUGZILLA"/>
		<reference ref_id="1149303" ref_url="https://bugzilla.suse.com/1149303" source="BUGZILLA"/>
		<reference ref_id="1149304" ref_url="https://bugzilla.suse.com/1149304" source="BUGZILLA"/>
		<reference ref_id="1149323" ref_url="https://bugzilla.suse.com/1149323" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11710" ref_url="https://www.suse.com/security/cve/CVE-2019-11710/" source="CVE"/>
		<reference ref_id="CVE-2019-11714" ref_url="https://www.suse.com/security/cve/CVE-2019-11714/" source="CVE"/>
		<reference ref_id="CVE-2019-11716" ref_url="https://www.suse.com/security/cve/CVE-2019-11716/" source="CVE"/>
		<reference ref_id="CVE-2019-11718" ref_url="https://www.suse.com/security/cve/CVE-2019-11718/" source="CVE"/>
		<reference ref_id="CVE-2019-11720" ref_url="https://www.suse.com/security/cve/CVE-2019-11720/" source="CVE"/>
		<reference ref_id="CVE-2019-11721" ref_url="https://www.suse.com/security/cve/CVE-2019-11721/" source="CVE"/>
		<reference ref_id="CVE-2019-11723" ref_url="https://www.suse.com/security/cve/CVE-2019-11723/" source="CVE"/>
		<reference ref_id="CVE-2019-11724" ref_url="https://www.suse.com/security/cve/CVE-2019-11724/" source="CVE"/>
		<reference ref_id="CVE-2019-11725" ref_url="https://www.suse.com/security/cve/CVE-2019-11725/" source="CVE"/>
		<reference ref_id="CVE-2019-11727" ref_url="https://www.suse.com/security/cve/CVE-2019-11727/" source="CVE"/>
		<reference ref_id="CVE-2019-11728" ref_url="https://www.suse.com/security/cve/CVE-2019-11728/" source="CVE"/>
		<reference ref_id="CVE-2019-11733" ref_url="https://www.suse.com/security/cve/CVE-2019-11733/" source="CVE"/>
		<reference ref_id="CVE-2019-11735" ref_url="https://www.suse.com/security/cve/CVE-2019-11735/" source="CVE"/>
		<reference ref_id="CVE-2019-11736" ref_url="https://www.suse.com/security/cve/CVE-2019-11736/" source="CVE"/>
		<reference ref_id="CVE-2019-11738" ref_url="https://www.suse.com/security/cve/CVE-2019-11738/" source="CVE"/>
		<reference ref_id="CVE-2019-11740" ref_url="https://www.suse.com/security/cve/CVE-2019-11740/" source="CVE"/>
		<reference ref_id="CVE-2019-11742" ref_url="https://www.suse.com/security/cve/CVE-2019-11742/" source="CVE"/>
		<reference ref_id="CVE-2019-11743" ref_url="https://www.suse.com/security/cve/CVE-2019-11743/" source="CVE"/>
		<reference ref_id="CVE-2019-11744" ref_url="https://www.suse.com/security/cve/CVE-2019-11744/" source="CVE"/>
		<reference ref_id="CVE-2019-11746" ref_url="https://www.suse.com/security/cve/CVE-2019-11746/" source="CVE"/>
		<reference ref_id="CVE-2019-11747" ref_url="https://www.suse.com/security/cve/CVE-2019-11747/" source="CVE"/>
		<reference ref_id="CVE-2019-11748" ref_url="https://www.suse.com/security/cve/CVE-2019-11748/" source="CVE"/>
		<reference ref_id="CVE-2019-11749" ref_url="https://www.suse.com/security/cve/CVE-2019-11749/" source="CVE"/>
		<reference ref_id="CVE-2019-11750" ref_url="https://www.suse.com/security/cve/CVE-2019-11750/" source="CVE"/>
		<reference ref_id="CVE-2019-11751" ref_url="https://www.suse.com/security/cve/CVE-2019-11751/" source="CVE"/>
		<reference ref_id="CVE-2019-11752" ref_url="https://www.suse.com/security/cve/CVE-2019-11752/" source="CVE"/>
		<reference ref_id="CVE-2019-11753" ref_url="https://www.suse.com/security/cve/CVE-2019-11753/" source="CVE"/>
		<reference ref_id="CVE-2019-9811" ref_url="https://www.suse.com/security/cve/CVE-2019-9811/" source="CVE"/>
		<reference ref_id="CVE-2019-9812" ref_url="https://www.suse.com/security/cve/CVE-2019-9812/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2545-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005986.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox to 68.1 fixes the following issues:

Security issues fixed:

- CVE-2019-9811: Fixed a sandbox escape via installation of malicious language pack. (bsc#1140868)
- CVE-2019-9812: Fixed a sandbox escape through Firefox Sync. (bsc#1149294)
- CVE-2019-11710: Fixed several memory safety bugs. (bsc#1140868)
- CVE-2019-11714: Fixed a potentially exploitable crash in Necko. (bsc#1140868)
- CVE-2019-11716: Fixed a sandbox bypass. (bsc#1140868)
- CVE-2019-11718: Fixed inadequate sanitation in the Activity Stream component. (bsc#1140868)
- CVE-2019-11720: Fixed a character encoding XSS vulnerability. (bsc#1140868)
- CVE-2019-11721: Fixed a homograph domain spoofing issue through unicode latin 'kra' character. (bsc#1140868)
- CVE-2019-11723: Fixed a cookie leakage during add-on fetching across private browsing boundaries. (bsc#1140868)
- CVE-2019-11724: Fixed an outdated permission, granting access to retired site input.mozilla.org. (bsc#1140868)
- CVE-2019-11725: Fixed a Safebrowsing bypass involving WebSockets. (bsc#1140868)
- CVE-2019-11727: Fixed a vulnerability where it possible to force NSS to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. (bsc#1141322)
- CVE-2019-11728: Fixed an improper handling of the Alt-Svc header that allowed remote port scans. (bsc#1140868)
- CVE-2019-11733: Fixed an insufficient protection of stored passwords in 'Saved Logins'. (bnc#1145665)
- CVE-2019-11735: Fixed several memory safety bugs. (bnc#1149293)
- CVE-2019-11736: Fixed a file manipulation and privilege escalation in Mozilla Maintenance Service. (bnc#1149292) 
- CVE-2019-11738: Fixed a content security policy bypass through hash-based sources in directives. (bnc#1149302)
- CVE-2019-11740: Fixed several memory safety bugs. (bsc#1149299)
- CVE-2019-11742: Fixed a same-origin policy violation involving SVG filters and canvas to steal cross-origin images. (bsc#1149303)
- CVE-2019-11743: Fixed a timing side-channel attack on cross-origin information, utilizing unload event attributes. (bsc#1149298)
- CVE-2019-11744: Fixed an XSS caused by breaking out of title and textarea elements using innerHTML. (bsc#1149304)
- CVE-2019-11746: Fixed a use-after-free while manipulating video. (bsc#1149297)
- CVE-2019-11752: Fixed a use-after-free while extracting a key value in IndexedDB. (bsc#1149296)
- CVE-2019-11753: Fixed a privilege escalation with Mozilla Maintenance Service in custom Firefox installation location. (bsc#1149295)

Non-security issues fixed:
	  
- Latest update now also released for s390x. (bsc#1109465)
- Fixed a segmentation fault on s390vsl082. (bsc#1117473)
- Fixed a crash on SLES15 s390x. (bsc#1124525)
- Fixed a segmentation fault. (bsc#1133810)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-03"/>
	<updated date="2019-10-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1109465">SUSE bug 1109465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117473">SUSE bug 1117473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123482">SUSE bug 1123482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124525">SUSE bug 1124525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133810">SUSE bug 1133810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138688">SUSE bug 1138688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141322">SUSE bug 1141322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145665">SUSE bug 1145665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149292">SUSE bug 1149292</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149293">SUSE bug 1149293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149294">SUSE bug 1149294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149295">SUSE bug 1149295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149296">SUSE bug 1149296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149297">SUSE bug 1149297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149298">SUSE bug 1149298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149299">SUSE bug 1149299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149302">SUSE bug 1149302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149303">SUSE bug 1149303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149304">SUSE bug 1149304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149323">SUSE bug 1149323</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11710/">CVE-2019-11710</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11714/">CVE-2019-11714</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11716/">CVE-2019-11716</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11718/">CVE-2019-11718</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11720/">CVE-2019-11720</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-11721/">CVE-2019-11721</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11723/">CVE-2019-11723</cve>
	<cve impact="important" cvss3="5.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11724/">CVE-2019-11724</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-11725/">CVE-2019-11725</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11727/">CVE-2019-11727</cve>
	<cve impact="important" cvss3="4.7/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11728/">CVE-2019-11728</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11733/">CVE-2019-11733</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11735/">CVE-2019-11735</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11736/">CVE-2019-11736</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11738/">CVE-2019-11738</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11740/">CVE-2019-11740</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11742/">CVE-2019-11742</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11743/">CVE-2019-11743</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11744/">CVE-2019-11744</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11746/">CVE-2019-11746</cve>
	<cve impact="low" cvss3="3.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11747/">CVE-2019-11747</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11748/">CVE-2019-11748</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11749/">CVE-2019-11749</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11750/">CVE-2019-11750</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11751/">CVE-2019-11751</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11752/">CVE-2019-11752</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11753/">CVE-2019-11753</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9811/">CVE-2019-9811</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9812/">CVE-2019-9812</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494955" comment="MozillaFirefox-68.1.0-3.54.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494956" comment="MozillaFirefox-branding-SLE-68-4.8.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495136" comment="MozillaFirefox-devel-68.1.0-3.54.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494958" comment="MozillaFirefox-translations-common-68.1.0-3.54.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494959" comment="MozillaFirefox-translations-other-68.1.0-3.54.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138091" version="1" class="patch">
	<metadata>
		<title>Security update for libopenmpt (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1153102" ref_url="https://bugzilla.suse.com/1153102" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17113" ref_url="https://www.suse.com/security/cve/CVE-2019-17113/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2622-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006001.html" source="SUSE-SU"/>
		<description>
This update for libopenmpt to version 0.3.19 fixes the following issues:

- CVE-2019-17113: Fixed a buffer overflow in ModPlug_InstrumentName and ModPlug_SampleName (bsc#1153102).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-09"/>
	<updated date="2019-10-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153102">SUSE bug 1153102</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17113/">CVE-2019-17113</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494960" comment="libmodplug-devel-0.3.19-2.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494961" comment="libmodplug1-0.3.19-2.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494962" comment="libopenmpt-devel-0.3.19-2.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494963" comment="libopenmpt0-0.3.19-2.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494964" comment="libopenmpt_modplug1-0.3.19-2.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138092" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1130840" ref_url="https://bugzilla.suse.com/1130840" source="BUGZILLA"/>
		<reference ref_id="1149955" ref_url="https://bugzilla.suse.com/1149955" source="BUGZILLA"/>
		<reference ref_id="1153238" ref_url="https://bugzilla.suse.com/1153238" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16056" ref_url="https://www.suse.com/security/cve/CVE-2019-16056/" source="CVE"/>
		<reference ref_id="CVE-2019-16935" ref_url="https://www.suse.com/security/cve/CVE-2019-16935/" source="CVE"/>
		<reference ref_id="CVE-2019-9947" ref_url="https://www.suse.com/security/cve/CVE-2019-9947/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006041.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

Security issues fixed:

- CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840)
- CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955)
- CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-22"/>
	<updated date="2019-10-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1130840">SUSE bug 1130840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149955">SUSE bug 1149955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153238">SUSE bug 1153238</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16056/">CVE-2019-16056</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16935/">CVE-2019-16935</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9947/">CVE-2019-9947</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494970" comment="python-tk-2.7.14-7.24.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138093" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox, MozillaFirefox-branding-SLE (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1104841" ref_url="https://bugzilla.suse.com/1104841" source="BUGZILLA"/>
		<reference ref_id="1129528" ref_url="https://bugzilla.suse.com/1129528" source="BUGZILLA"/>
		<reference ref_id="1137990" ref_url="https://bugzilla.suse.com/1137990" source="BUGZILLA"/>
		<reference ref_id="1149429" ref_url="https://bugzilla.suse.com/1149429" source="BUGZILLA"/>
		<reference ref_id="1151186" ref_url="https://bugzilla.suse.com/1151186" source="BUGZILLA"/>
		<reference ref_id="1153423" ref_url="https://bugzilla.suse.com/1153423" source="BUGZILLA"/>
		<reference ref_id="1153869" ref_url="https://bugzilla.suse.com/1153869" source="BUGZILLA"/>
		<reference ref_id="1154738" ref_url="https://bugzilla.suse.com/1154738" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11757" ref_url="https://www.suse.com/security/cve/CVE-2019-11757/" source="CVE"/>
		<reference ref_id="CVE-2019-11758" ref_url="https://www.suse.com/security/cve/CVE-2019-11758/" source="CVE"/>
		<reference ref_id="CVE-2019-11759" ref_url="https://www.suse.com/security/cve/CVE-2019-11759/" source="CVE"/>
		<reference ref_id="CVE-2019-11760" ref_url="https://www.suse.com/security/cve/CVE-2019-11760/" source="CVE"/>
		<reference ref_id="CVE-2019-11761" ref_url="https://www.suse.com/security/cve/CVE-2019-11761/" source="CVE"/>
		<reference ref_id="CVE-2019-11762" ref_url="https://www.suse.com/security/cve/CVE-2019-11762/" source="CVE"/>
		<reference ref_id="CVE-2019-11763" ref_url="https://www.suse.com/security/cve/CVE-2019-11763/" source="CVE"/>
		<reference ref_id="CVE-2019-11764" ref_url="https://www.suse.com/security/cve/CVE-2019-11764/" source="CVE"/>
		<reference ref_id="CVE-2019-15903" ref_url="https://www.suse.com/security/cve/CVE-2019-15903/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2871-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192871-1.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues:

Changes in MozillaFirefox:

Security issues fixed:

-  CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429).
-  CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB (bsc#1154738).
-  CVE-2019-11758: Fixed a potentially exploitable crash due to 360 Total Security (bsc#1154738).
-  CVE-2019-11759: Fixed a stack buffer overflow in HKDF output (bsc#1154738).
-  CVE-2019-11760: Fixed a stack buffer overflow in WebRTC networking (bsc#1154738).
-  CVE-2019-11761: Fixed an unintended access to a privileged JSONView object (bsc#1154738).
-  CVE-2019-11762: Fixed a same-origin-property violation (bsc#1154738).
-  CVE-2019-11763: Fixed an XSS bypass (bsc#1154738).
-  CVE-2019-11764: Fixed several memory safety bugs (bsc#1154738).

Non-security issues fixed:

- Added Provides-line for translations-common (bsc#1153423) .
- Moved some settings from branding-package here (bsc#1153869).
- Disabled DoH by default.

Changes in MozillaFirefox-branding-SLE:

- Moved extensions preferences to core package (bsc#1153869).

		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-31"/>
	<updated date="2019-10-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1104841">SUSE bug 1104841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129528">SUSE bug 1129528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137990">SUSE bug 1137990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149429">SUSE bug 1149429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151186">SUSE bug 1151186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153423">SUSE bug 1153423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153869">SUSE bug 1153869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154738">SUSE bug 1154738</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11757/">CVE-2019-11757</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11758/">CVE-2019-11758</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11759/">CVE-2019-11759</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11760/">CVE-2019-11760</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11761/">CVE-2019-11761</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11762/">CVE-2019-11762</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11763/">CVE-2019-11763</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11764/">CVE-2019-11764</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15903/">CVE-2019-15903</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494976" comment="MozillaFirefox-68.2.0-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494977" comment="MozillaFirefox-branding-SLE-68-4.11.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495137" comment="MozillaFirefox-devel-68.2.0-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494979" comment="MozillaFirefox-translations-common-68.2.0-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494980" comment="MozillaFirefox-translations-other-68.2.0-3.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138094" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1146065" ref_url="https://bugzilla.suse.com/1146065" source="BUGZILLA"/>
		<reference ref_id="1146068" ref_url="https://bugzilla.suse.com/1146068" source="BUGZILLA"/>
		<reference ref_id="1146211" ref_url="https://bugzilla.suse.com/1146211" source="BUGZILLA"/>
		<reference ref_id="1146212" ref_url="https://bugzilla.suse.com/1146212" source="BUGZILLA"/>
		<reference ref_id="1146213" ref_url="https://bugzilla.suse.com/1146213" source="BUGZILLA"/>
		<reference ref_id="1151781" ref_url="https://bugzilla.suse.com/1151781" source="BUGZILLA"/>
		<reference ref_id="1151782" ref_url="https://bugzilla.suse.com/1151782" source="BUGZILLA"/>
		<reference ref_id="1151783" ref_url="https://bugzilla.suse.com/1151783" source="BUGZILLA"/>
		<reference ref_id="1151784" ref_url="https://bugzilla.suse.com/1151784" source="BUGZILLA"/>
		<reference ref_id="1151785" ref_url="https://bugzilla.suse.com/1151785" source="BUGZILLA"/>
		<reference ref_id="1151786" ref_url="https://bugzilla.suse.com/1151786" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14980" ref_url="https://www.suse.com/security/cve/CVE-2019-14980/" source="CVE"/>
		<reference ref_id="CVE-2019-14981" ref_url="https://www.suse.com/security/cve/CVE-2019-14981/" source="CVE"/>
		<reference ref_id="CVE-2019-15139" ref_url="https://www.suse.com/security/cve/CVE-2019-15139/" source="CVE"/>
		<reference ref_id="CVE-2019-15140" ref_url="https://www.suse.com/security/cve/CVE-2019-15140/" source="CVE"/>
		<reference ref_id="CVE-2019-15141" ref_url="https://www.suse.com/security/cve/CVE-2019-15141/" source="CVE"/>
		<reference ref_id="CVE-2019-16708" ref_url="https://www.suse.com/security/cve/CVE-2019-16708/" source="CVE"/>
		<reference ref_id="CVE-2019-16709" ref_url="https://www.suse.com/security/cve/CVE-2019-16709/" source="CVE"/>
		<reference ref_id="CVE-2019-16710" ref_url="https://www.suse.com/security/cve/CVE-2019-16710/" source="CVE"/>
		<reference ref_id="CVE-2019-16711" ref_url="https://www.suse.com/security/cve/CVE-2019-16711/" source="CVE"/>
		<reference ref_id="CVE-2019-16712" ref_url="https://www.suse.com/security/cve/CVE-2019-16712/" source="CVE"/>
		<reference ref_id="CVE-2019-16713" ref_url="https://www.suse.com/security/cve/CVE-2019-16713/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006088.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

Security issues fixed:

- CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage (bsc#1146213).
- CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser (bsc#1146212).
- CVE-2019-15141: Fixed a divide-by-zero vulnerability in the MeanShiftImage function (bsc#1146211).
- CVE-2019-14980: Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage (bsc#1146068).
- CVE-2019-14981: Fixed a use after free in the UnmapBlob function (bsc#1146065).
- CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781).
- CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782).
- CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783).
- CVE-2019-16711: Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c (bsc#1151784).
- CVE-2019-16712: Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c (bsc#1151785).
- CVE-2019-16713: Fixed a memory leak in coders/dot.c (bsc#1151786).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-05"/>
	<updated date="2019-11-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1146065">SUSE bug 1146065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146068">SUSE bug 1146068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146211">SUSE bug 1146211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146212">SUSE bug 1146212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146213">SUSE bug 1146213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151781">SUSE bug 1151781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151782">SUSE bug 1151782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151783">SUSE bug 1151783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151784">SUSE bug 1151784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151785">SUSE bug 1151785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151786">SUSE bug 1151786</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14980/">CVE-2019-14980</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14981/">CVE-2019-14981</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15139/">CVE-2019-15139</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15140/">CVE-2019-15140</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15141/">CVE-2019-15141</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16708/">CVE-2019-16708</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16709/">CVE-2019-16709</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16710/">CVE-2019-16710</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16711/">CVE-2019-16711</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16712/">CVE-2019-16712</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16713/">CVE-2019-16713</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494981" comment="ImageMagick-7.0.7.34-3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494982" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494984" comment="ImageMagick-devel-7.0.7.34-3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494985" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494986" comment="libMagick++-devel-7.0.7.34-3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494987" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494988" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.72.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138095" version="1" class="patch">
	<metadata>
		<title>Security update for libjpeg-turbo (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1156402" ref_url="https://bugzilla.suse.com/1156402" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-2201" ref_url="https://www.suse.com/security/cve/CVE-2019-2201/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006138.html" source="SUSE-SU"/>
		<description>
This update for libjpeg-turbo fixes the following issues:

- CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo,
  when attempting to compress or decompress gigapixel images. [bsc#1156402]

		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-14"/>
	<updated date="2019-11-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1156402">SUSE bug 1156402</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2201/">CVE-2019-2201</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494989" comment="libjpeg8-32bit-8.1.2-5.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138096" version="1" class="patch">
	<metadata>
		<title>Security update for djvulibre (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1154401" ref_url="https://bugzilla.suse.com/1154401" source="BUGZILLA"/>
		<reference ref_id="1156188" ref_url="https://bugzilla.suse.com/1156188" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18804" ref_url="https://www.suse.com/security/cve/CVE-2019-18804/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3033-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006161.html" source="SUSE-SU"/>
		<description>
This update for djvulibre fixes the following issues:

Security issue fixed: 

- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).

Other issue addressed: 
- Fixed a crash when mmx was enabled (bsc#1154401)		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-21"/>
	<updated date="2019-11-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1154401">SUSE bug 1154401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156188">SUSE bug 1156188</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-18804/">CVE-2019-18804</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494990" comment="libdjvulibre-devel-3.5.27-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494991" comment="libdjvulibre21-3.5.27-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138097" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1155321" ref_url="https://bugzilla.suse.com/1155321" source="BUGZILLA"/>
		<reference ref_id="1156318" ref_url="https://bugzilla.suse.com/1156318" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8551" ref_url="https://www.suse.com/security/cve/CVE-2019-8551/" source="CVE"/>
		<reference ref_id="CVE-2019-8558" ref_url="https://www.suse.com/security/cve/CVE-2019-8558/" source="CVE"/>
		<reference ref_id="CVE-2019-8559" ref_url="https://www.suse.com/security/cve/CVE-2019-8559/" source="CVE"/>
		<reference ref_id="CVE-2019-8563" ref_url="https://www.suse.com/security/cve/CVE-2019-8563/" source="CVE"/>
		<reference ref_id="CVE-2019-8625" ref_url="https://www.suse.com/security/cve/CVE-2019-8625/" source="CVE"/>
		<reference ref_id="CVE-2019-8674" ref_url="https://www.suse.com/security/cve/CVE-2019-8674/" source="CVE"/>
		<reference ref_id="CVE-2019-8681" ref_url="https://www.suse.com/security/cve/CVE-2019-8681/" source="CVE"/>
		<reference ref_id="CVE-2019-8684" ref_url="https://www.suse.com/security/cve/CVE-2019-8684/" source="CVE"/>
		<reference ref_id="CVE-2019-8686" ref_url="https://www.suse.com/security/cve/CVE-2019-8686/" source="CVE"/>
		<reference ref_id="CVE-2019-8687" ref_url="https://www.suse.com/security/cve/CVE-2019-8687/" source="CVE"/>
		<reference ref_id="CVE-2019-8688" ref_url="https://www.suse.com/security/cve/CVE-2019-8688/" source="CVE"/>
		<reference ref_id="CVE-2019-8689" ref_url="https://www.suse.com/security/cve/CVE-2019-8689/" source="CVE"/>
		<reference ref_id="CVE-2019-8690" ref_url="https://www.suse.com/security/cve/CVE-2019-8690/" source="CVE"/>
		<reference ref_id="CVE-2019-8707" ref_url="https://www.suse.com/security/cve/CVE-2019-8707/" source="CVE"/>
		<reference ref_id="CVE-2019-8710" ref_url="https://www.suse.com/security/cve/CVE-2019-8710/" source="CVE"/>
		<reference ref_id="CVE-2019-8719" ref_url="https://www.suse.com/security/cve/CVE-2019-8719/" source="CVE"/>
		<reference ref_id="CVE-2019-8720" ref_url="https://www.suse.com/security/cve/CVE-2019-8720/" source="CVE"/>
		<reference ref_id="CVE-2019-8726" ref_url="https://www.suse.com/security/cve/CVE-2019-8726/" source="CVE"/>
		<reference ref_id="CVE-2019-8733" ref_url="https://www.suse.com/security/cve/CVE-2019-8733/" source="CVE"/>
		<reference ref_id="CVE-2019-8735" ref_url="https://www.suse.com/security/cve/CVE-2019-8735/" source="CVE"/>
		<reference ref_id="CVE-2019-8743" ref_url="https://www.suse.com/security/cve/CVE-2019-8743/" source="CVE"/>
		<reference ref_id="CVE-2019-8763" ref_url="https://www.suse.com/security/cve/CVE-2019-8763/" source="CVE"/>
		<reference ref_id="CVE-2019-8764" ref_url="https://www.suse.com/security/cve/CVE-2019-8764/" source="CVE"/>
		<reference ref_id="CVE-2019-8765" ref_url="https://www.suse.com/security/cve/CVE-2019-8765/" source="CVE"/>
		<reference ref_id="CVE-2019-8766" ref_url="https://www.suse.com/security/cve/CVE-2019-8766/" source="CVE"/>
		<reference ref_id="CVE-2019-8768" ref_url="https://www.suse.com/security/cve/CVE-2019-8768/" source="CVE"/>
		<reference ref_id="CVE-2019-8769" ref_url="https://www.suse.com/security/cve/CVE-2019-8769/" source="CVE"/>
		<reference ref_id="CVE-2019-8771" ref_url="https://www.suse.com/security/cve/CVE-2019-8771/" source="CVE"/>
		<reference ref_id="CVE-2019-8782" ref_url="https://www.suse.com/security/cve/CVE-2019-8782/" source="CVE"/>
		<reference ref_id="CVE-2019-8783" ref_url="https://www.suse.com/security/cve/CVE-2019-8783/" source="CVE"/>
		<reference ref_id="CVE-2019-8808" ref_url="https://www.suse.com/security/cve/CVE-2019-8808/" source="CVE"/>
		<reference ref_id="CVE-2019-8811" ref_url="https://www.suse.com/security/cve/CVE-2019-8811/" source="CVE"/>
		<reference ref_id="CVE-2019-8812" ref_url="https://www.suse.com/security/cve/CVE-2019-8812/" source="CVE"/>
		<reference ref_id="CVE-2019-8813" ref_url="https://www.suse.com/security/cve/CVE-2019-8813/" source="CVE"/>
		<reference ref_id="CVE-2019-8814" ref_url="https://www.suse.com/security/cve/CVE-2019-8814/" source="CVE"/>
		<reference ref_id="CVE-2019-8815" ref_url="https://www.suse.com/security/cve/CVE-2019-8815/" source="CVE"/>
		<reference ref_id="CVE-2019-8816" ref_url="https://www.suse.com/security/cve/CVE-2019-8816/" source="CVE"/>
		<reference ref_id="CVE-2019-8819" ref_url="https://www.suse.com/security/cve/CVE-2019-8819/" source="CVE"/>
		<reference ref_id="CVE-2019-8820" ref_url="https://www.suse.com/security/cve/CVE-2019-8820/" source="CVE"/>
		<reference ref_id="CVE-2019-8821" ref_url="https://www.suse.com/security/cve/CVE-2019-8821/" source="CVE"/>
		<reference ref_id="CVE-2019-8822" ref_url="https://www.suse.com/security/cve/CVE-2019-8822/" source="CVE"/>
		<reference ref_id="CVE-2019-8823" ref_url="https://www.suse.com/security/cve/CVE-2019-8823/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006163.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 to version 2.26.2 fixes the following issues:

Webkit2gtk3 was updated to version 2.26.2 (WSA-2019-0005 and WSA-2019-0006, bsc#1155321 bsc#1156318)  

Security issues addressed:

- CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead to
  universal cross site scripting. 
- CVE-2019-8674: Fixed a logic issue where by processing maliciously crafted web content may lead to
  universal cross site scripting.
- CVE-2019-8707: Fixed multiple  memory corruption issues where by processing maliciously crafted web 
  content may lead to arbitrary code execution.
- CVE-2019-8719: Fixed a logic issue where by processing maliciously crafted web content may lead to
  universal cross site scripting.
- CVE-2019-8720: Fixed multiple memory corruption issues where by processing maliciously crafted web   
  content may lead to arbitrary code execution.
- CVE-2019-8726: Fixed multiple memory corruption issues where by processing maliciously crafted web   
  content may lead to arbitrary code execution.
- CVE-2019-8733: Fixed multiple memory corruption issues where by processing maliciously crafted web   
  content may lead to arbitrary code execution.
- CVE-2019-8735: Fixed multiple memory corruption issues where by processing maliciously crafted web   
  content may lead to arbitrary code execution.
- CVE-2019-8763: Fixed multiple  memory corruption issues where by processing maliciously crafted web   
  content may lead to arbitrary code execution.
- CVE-2019-8768: Fixed an issue where a user may be unable to delete browsing history items.
- CVE-2019-8769: Fixed an issue where a maliciously crafted website may reveal browsing history.
- CVE-2019-8771: Fixed an issue where a maliciously crafted web content may violate iframe
  sandboxing policy.
- CVE-2019-8710: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8743: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8764: Fixed a logic issue where by processing maliciously crafted web content may lead to
  universal cross site scripting.
- CVE-2019-8765: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8766: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8782: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8783: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8808: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8811: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8812: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8813: Fixed a logic issue where by processing maliciously crafted web content may lead to
  universal cross site scripting.
- CVE-2019-8814: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8815: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8816: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8819: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8820: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8821: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8822: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
- CVE-2019-8823: Fixed multiple memory corruption issues where by processing maliciously crafted web
  content may lead to arbitrary code execution.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-25"/>
	<updated date="2019-11-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1155321">SUSE bug 1155321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156318">SUSE bug 1156318</bugzilla>
	<cve impact="important" cvss3="7.6/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8551/">CVE-2019-8551</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8558/">CVE-2019-8558</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8559/">CVE-2019-8559</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8563/">CVE-2019-8563</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8625/">CVE-2019-8625</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8674/">CVE-2019-8674</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8681/">CVE-2019-8681</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8684/">CVE-2019-8684</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8686/">CVE-2019-8686</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8687/">CVE-2019-8687</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8688/">CVE-2019-8688</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8689/">CVE-2019-8689</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8690/">CVE-2019-8690</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8707/">CVE-2019-8707</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8710/">CVE-2019-8710</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8719/">CVE-2019-8719</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8720/">CVE-2019-8720</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8726/">CVE-2019-8726</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8733/">CVE-2019-8733</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8735/">CVE-2019-8735</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8743/">CVE-2019-8743</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8763/">CVE-2019-8763</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8764/">CVE-2019-8764</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8765/">CVE-2019-8765</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8766/">CVE-2019-8766</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8768/">CVE-2019-8768</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8769/">CVE-2019-8769</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8771/">CVE-2019-8771</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8782/">CVE-2019-8782</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8783/">CVE-2019-8783</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8808/">CVE-2019-8808</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8811/">CVE-2019-8811</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8812/">CVE-2019-8812</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-8813/">CVE-2019-8813</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8814/">CVE-2019-8814</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8815/">CVE-2019-8815</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8816/">CVE-2019-8816</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8819/">CVE-2019-8819</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8820/">CVE-2019-8820</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8821/">CVE-2019-8821</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8822/">CVE-2019-8822</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8823/">CVE-2019-8823</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494992" comment="typelib-1_0-JavaScriptCore-4_0-2.26.2-3.34.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494993" comment="typelib-1_0-WebKit2-4_0-2.26.2-3.34.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494994" comment="typelib-1_0-WebKit2WebExtension-4_0-2.26.2-3.34.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494995" comment="webkit2gtk3-devel-2.26.2-3.34.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138098" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1013712" ref_url="https://bugzilla.suse.com/1013712" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-9798" ref_url="https://www.suse.com/security/cve/CVE-2016-9798/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006164.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2016-9798: Fixed a use-after-free in conf_opt() (bsc#1013712).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-25"/>
	<updated date="2019-11-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1013712">SUSE bug 1013712</bugzilla>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-9798/">CVE-2016-9798</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494996" comment="bluez-5.48-5.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494997" comment="bluez-devel-5.48-5.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138099" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1100352" ref_url="https://bugzilla.suse.com/1100352" source="BUGZILLA"/>
		<reference ref_id="1129715" ref_url="https://bugzilla.suse.com/1129715" source="BUGZILLA"/>
		<reference ref_id="1137526" ref_url="https://bugzilla.suse.com/1137526" source="BUGZILLA"/>
		<reference ref_id="1154064" ref_url="https://bugzilla.suse.com/1154064" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13301" ref_url="https://www.suse.com/security/cve/CVE-2018-13301/" source="CVE"/>
		<reference ref_id="CVE-2019-12730" ref_url="https://www.suse.com/security/cve/CVE-2019-12730/" source="CVE"/>
		<reference ref_id="CVE-2019-17542" ref_url="https://www.suse.com/security/cve/CVE-2019-17542/" source="CVE"/>
		<reference ref_id="CVE-2019-9718" ref_url="https://www.suse.com/security/cve/CVE-2019-9718/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006207.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

Security issues fixed:	  
- CVE-2019-17542: Fixed a heap-buffer overflow in vqa_decode_chunk due to an 
  out-of-array access (bsc#1154064).
- CVE-2019-12730: Fixed an uninitialized use of variables due to an improper 
  check (bsc#1137526).
- CVE-2019-9718: Fixed a denial of service in the subtitle decode (bsc#1129715).
- CVE-2018-13301: Fixed a denial of service while converting a crafted AVI file 
  to MPEG4 (bsc#1100352).
  		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-05"/>
	<updated date="2019-12-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1100352">SUSE bug 1100352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129715">SUSE bug 1129715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137526">SUSE bug 1137526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154064">SUSE bug 1154064</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13301/">CVE-2018-13301</cve>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-12730/">CVE-2019-12730</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17542/">CVE-2019-17542</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9718/">CVE-2019-9718</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494998" comment="libavcodec57-3.4.2-4.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494999" comment="libavutil-devel-3.4.2-4.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495000" comment="libavutil55-3.4.2-4.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495001" comment="libpostproc-devel-3.4.2-4.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495002" comment="libpostproc54-3.4.2-4.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495003" comment="libswresample-devel-3.4.2-4.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495004" comment="libswresample2-3.4.2-4.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495005" comment="libswscale-devel-3.4.2-4.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495006" comment="libswscale4-3.4.2-4.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138100" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1157652" ref_url="https://bugzilla.suse.com/1157652" source="BUGZILLA"/>
		<reference ref_id="1158328" ref_url="https://bugzilla.suse.com/1158328" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11745" ref_url="https://www.suse.com/security/cve/CVE-2019-11745/" source="CVE"/>
		<reference ref_id="CVE-2019-13722" ref_url="https://www.suse.com/security/cve/CVE-2019-13722/" source="CVE"/>
		<reference ref_id="CVE-2019-17005" ref_url="https://www.suse.com/security/cve/CVE-2019-17005/" source="CVE"/>
		<reference ref_id="CVE-2019-17008" ref_url="https://www.suse.com/security/cve/CVE-2019-17008/" source="CVE"/>
		<reference ref_id="CVE-2019-17009" ref_url="https://www.suse.com/security/cve/CVE-2019-17009/" source="CVE"/>
		<reference ref_id="CVE-2019-17010" ref_url="https://www.suse.com/security/cve/CVE-2019-17010/" source="CVE"/>
		<reference ref_id="CVE-2019-17011" ref_url="https://www.suse.com/security/cve/CVE-2019-17011/" source="CVE"/>
		<reference ref_id="CVE-2019-17012" ref_url="https://www.suse.com/security/cve/CVE-2019-17012/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3337-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006272.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Mozilla Firefox was updated to 68.3esr (MFSA 2019-37 bsc#1158328)	  
	  
Security issues fixed: 

- CVE-2019-17008: Fixed a use-after-free in worker destruction (bmo#1546331)
- CVE-2019-13722: Fixed a stack corruption due to incorrect number of arguments 
  in WebRTC code (bmo#1580156)
- CVE-2019-11745: Fixed an out of bounds write in NSS when encrypting with a 
  block cipher (bmo#1586176)
- CVE-2019-17009: Fixed an issue where updater temporary files accessible to 
  unprivileged processes (bmo#1510494)
- CVE-2019-17010: Fixed a use-after-free when performing device orientation 
  checks (bmo#1581084)
- CVE-2019-17005: Fixed a buffer overflow in plain text serializer (bmo#1584170)
- CVE-2019-17011: Fixed a use-after-free when retrieving a document 
  in antitracking (bmo#1591334)
- CVE-2019-17012: Fixed multiple memmory issues
  (bmo#1449736, bmo#1533957, bmo#1560667,bmo#1567209, bmo#1580288, bmo#1585760, 
  bmo#1592502)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-18"/>
	<updated date="2019-12-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1157652">SUSE bug 1157652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158328">SUSE bug 1158328</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11745/">CVE-2019-11745</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13722/">CVE-2019-13722</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17005/">CVE-2019-17005</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17008/">CVE-2019-17008</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17009/">CVE-2019-17009</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17010/">CVE-2019-17010</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17011/">CVE-2019-17011</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17012/">CVE-2019-17012</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495007" comment="MozillaFirefox-68.3.0-3.62.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495138" comment="MozillaFirefox-devel-68.3.0-3.62.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495009" comment="MozillaFirefox-translations-common-68.3.0-3.62.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495010" comment="MozillaFirefox-translations-other-68.3.0-3.62.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138101" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1165528" ref_url="https://bugzilla.suse.com/1165528" source="BUGZILLA"/>
		<reference ref_id="1169658" ref_url="https://bugzilla.suse.com/1169658" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10018" ref_url="https://www.suse.com/security/cve/CVE-2020-10018/" source="CVE"/>
		<reference ref_id="CVE-2020-11793" ref_url="https://www.suse.com/security/cve/CVE-2020-11793/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1109-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006739.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 to version 2.28.1 fixes the following issues:

Security issues fixed:

- CVE-2020-10018: Fixed a denial of service because the m_deferredFocusedNodeChange data structure was mishandled (bsc#1165528).
- CVE-2020-11793: Fixed a potential arbitrary code execution caused by a use-after-free vulnerability (bsc#1169658).

Non-security issues fixed:

- Add API to enable Process Swap on (Cross-site) Navigation.
- Add user messages API for the communication with the web extension.
- Add support for same-site cookies.
- Service workers are enabled by default.
- Add support for Pointer Lock API.
- Add flatpak sandbox support.
- Make ondemand hardware acceleration policy never leave accelerated compositing mode.
- Always use a light theme for rendering form controls.
- Add about:gpu to show information about the graphics stack.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-24"/>
	<updated date="2020-04-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1165528">SUSE bug 1165528</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169658">SUSE bug 1169658</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10018/">CVE-2020-10018</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11793/">CVE-2020-11793</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495139" comment="typelib-1_0-JavaScriptCore-4_0-2.28.1-3.49.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495140" comment="typelib-1_0-WebKit2-4_0-2.28.1-3.49.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495141" comment="typelib-1_0-WebKit2WebExtension-4_0-2.28.1-3.49.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495142" comment="webkit2gtk3-devel-2.28.1-3.49.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138102" version="1" class="patch">
	<metadata>
		<title>Security update for tigervnc (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159856" ref_url="https://bugzilla.suse.com/1159856" source="BUGZILLA"/>
		<reference ref_id="1159858" ref_url="https://bugzilla.suse.com/1159858" source="BUGZILLA"/>
		<reference ref_id="1159860" ref_url="https://bugzilla.suse.com/1159860" source="BUGZILLA"/>
		<reference ref_id="1160250" ref_url="https://bugzilla.suse.com/1160250" source="BUGZILLA"/>
		<reference ref_id="1160251" ref_url="https://bugzilla.suse.com/1160251" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15691" ref_url="https://www.suse.com/security/cve/CVE-2019-15691/" source="CVE"/>
		<reference ref_id="CVE-2019-15692" ref_url="https://www.suse.com/security/cve/CVE-2019-15692/" source="CVE"/>
		<reference ref_id="CVE-2019-15693" ref_url="https://www.suse.com/security/cve/CVE-2019-15693/" source="CVE"/>
		<reference ref_id="CVE-2019-15694" ref_url="https://www.suse.com/security/cve/CVE-2019-15694/" source="CVE"/>
		<reference ref_id="CVE-2019-15695" ref_url="https://www.suse.com/security/cve/CVE-2019-15695/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0113-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006358.html" source="SUSE-SU"/>
		<description>
This update for tigervnc fixes the following issues:

- CVE-2019-15691: Fixed a use-after-return due to incorrect usage of stack memory in ZRLEDecoder (bsc#1159856).
- CVE-2019-15692: Fixed a heap-based buffer overflow in CopyRectDecode (bsc#1160250).
- CVE-2019-15693: Fixed a heap-based buffer overflow in TightDecoder::FilterGradient (bsc#1159858).
- CVE-2019-15694: Fixed a heap-based buffer overflow, caused by improper error handling in processing MemOutStream (bsc#1160251).
- CVE-2019-15695: Fixed a stack-based buffer overflow, which could be triggered from CMsgReader::readSetCursor (bsc#1159860).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-16"/>
	<updated date="2020-01-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159856">SUSE bug 1159856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159858">SUSE bug 1159858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159860">SUSE bug 1159860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160250">SUSE bug 1160250</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160251">SUSE bug 1160251</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15691/">CVE-2019-15691</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15692/">CVE-2019-15692</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15693/">CVE-2019-15693</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15694/">CVE-2019-15694</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15695/">CVE-2019-15695</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495143" comment="libXvnc-devel-1.9.0-19.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138103" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1170643" ref_url="https://bugzilla.suse.com/1170643" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-3899" ref_url="https://www.suse.com/security/cve/CVE-2020-3899/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006786.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Security issue fixed:

- CVE-2020-3899: Fixed a memory consumption issue that could have led to remote code execution (bsc#1170643).

Non-security issues fixed:

- Update to version 2.28.2 (bsc#1170643):
  + Fix excessive CPU usage due to GdkFrameClock not being stopped.
  + Fix UI process crash when EGL_WL_bind_wayland_display extension
    is not available.
  + Fix position of select popup menus in X11.
  + Fix playing of Youtube 'live stream'/H264 URLs.
  + Fix a crash under X11 when cairo uses xcb.
  + Fix several crashes and rendering issues.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-06"/>
	<updated date="2020-05-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1170643">SUSE bug 1170643</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3899/">CVE-2020-3899</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495144" comment="typelib-1_0-JavaScriptCore-4_0-2.28.2-3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495145" comment="typelib-1_0-WebKit2-4_0-2.28.2-3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495146" comment="typelib-1_0-WebKit2WebExtension-4_0-2.28.2-3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495147" comment="webkit2gtk3-devel-2.28.2-3.54.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138104" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171186" ref_url="https://bugzilla.suse.com/1171186" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12387" ref_url="https://www.suse.com/security/cve/CVE-2020-12387/" source="CVE"/>
		<reference ref_id="CVE-2020-12388" ref_url="https://www.suse.com/security/cve/CVE-2020-12388/" source="CVE"/>
		<reference ref_id="CVE-2020-12389" ref_url="https://www.suse.com/security/cve/CVE-2020-12389/" source="CVE"/>
		<reference ref_id="CVE-2020-12392" ref_url="https://www.suse.com/security/cve/CVE-2020-12392/" source="CVE"/>
		<reference ref_id="CVE-2020-12393" ref_url="https://www.suse.com/security/cve/CVE-2020-12393/" source="CVE"/>
		<reference ref_id="CVE-2020-12395" ref_url="https://www.suse.com/security/cve/CVE-2020-12395/" source="CVE"/>
		<reference ref_id="CVE-2020-6831" ref_url="https://www.suse.com/security/cve/CVE-2020-6831/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1209-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006799.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Update to version 68.8.0 ESR (bsc#1171186):

- CVE-2020-12387: Use-after-free during worker shutdown
- CVE-2020-12388: Sandbox escape with improperly guarded Access Tokens
- CVE-2020-12389: Sandbox escape with improperly separated process types
- CVE-2020-6831: Buffer overflow in SCTP chunk input validation
- CVE-2020-12392: Arbitrary local file access with 'Copy as cURL'
- CVE-2020-12393: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection
- CVE-2020-12395: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-07"/>
	<updated date="2020-05-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171186">SUSE bug 1171186</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12387/">CVE-2020-12387</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12388/">CVE-2020-12388</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12389/">CVE-2020-12389</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12392/">CVE-2020-12392</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12393/">CVE-2020-12393</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12395/">CVE-2020-12395</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6831/">CVE-2020-6831</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495148" comment="MozillaFirefox-68.8.0-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495149" comment="MozillaFirefox-devel-68.8.0-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495150" comment="MozillaFirefox-translations-common-68.8.0-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495151" comment="MozillaFirefox-translations-other-68.8.0-3.87.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138105" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1170603" ref_url="https://bugzilla.suse.com/1170603" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12268" ref_url="https://www.suse.com/security/cve/CVE-2020-12268/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1220-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006802.html" source="SUSE-SU"/>
		<description>
This update for ghostscript to version 9.52 fixes the following issues:

- CVE-2020-12268: Fixed a heap-based buffer overflow in jbig2_image_compose (bsc#1170603).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-07"/>
	<updated date="2020-05-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1170603">SUSE bug 1170603</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-12268/">CVE-2020-12268</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495152" comment="libspectre-devel-0.2.8-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495153" comment="libspectre1-0.2.8-3.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138106" version="1" class="patch">
	<metadata>
		<title>Security update for openexr (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1146648" ref_url="https://bugzilla.suse.com/1146648" source="BUGZILLA"/>
		<reference ref_id="1169549" ref_url="https://bugzilla.suse.com/1169549" source="BUGZILLA"/>
		<reference ref_id="1169573" ref_url="https://bugzilla.suse.com/1169573" source="BUGZILLA"/>
		<reference ref_id="1169574" ref_url="https://bugzilla.suse.com/1169574" source="BUGZILLA"/>
		<reference ref_id="1169575" ref_url="https://bugzilla.suse.com/1169575" source="BUGZILLA"/>
		<reference ref_id="1169576" ref_url="https://bugzilla.suse.com/1169576" source="BUGZILLA"/>
		<reference ref_id="1169578" ref_url="https://bugzilla.suse.com/1169578" source="BUGZILLA"/>
		<reference ref_id="1169580" ref_url="https://bugzilla.suse.com/1169580" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11758" ref_url="https://www.suse.com/security/cve/CVE-2020-11758/" source="CVE"/>
		<reference ref_id="CVE-2020-11760" ref_url="https://www.suse.com/security/cve/CVE-2020-11760/" source="CVE"/>
		<reference ref_id="CVE-2020-11761" ref_url="https://www.suse.com/security/cve/CVE-2020-11761/" source="CVE"/>
		<reference ref_id="CVE-2020-11762" ref_url="https://www.suse.com/security/cve/CVE-2020-11762/" source="CVE"/>
		<reference ref_id="CVE-2020-11763" ref_url="https://www.suse.com/security/cve/CVE-2020-11763/" source="CVE"/>
		<reference ref_id="CVE-2020-11764" ref_url="https://www.suse.com/security/cve/CVE-2020-11764/" source="CVE"/>
		<reference ref_id="CVE-2020-11765" ref_url="https://www.suse.com/security/cve/CVE-2020-11765/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006826.html" source="SUSE-SU"/>
		<description>
This update for openexr provides the following fix:

Security issues fixed:

- CVE-2020-11765: Fixed an off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier (bsc#1169575).
- CVE-2020-11764: Fixed an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp (bsc#1169574).
- CVE-2020-11763: Fixed an out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp (bsc#1169576).
- CVE-2020-11762: Fixed an out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case (bsc#1169549).
- CVE-2020-11761: Fixed an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp (bsc#1169578).
- CVE-2020-11760: Fixed an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp (bsc#1169580).
- CVE-2020-11758: Fixed an out-of-bounds read in ImfOptimizedPixelReading.h (bsc#1169573).

Non-security issue fixed:

- Enable tests when building the package on x86_64. (bsc#1146648)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-18"/>
	<updated date="2020-05-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1146648">SUSE bug 1146648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169549">SUSE bug 1169549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169573">SUSE bug 1169573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169574">SUSE bug 1169574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169575">SUSE bug 1169575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169576">SUSE bug 1169576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169578">SUSE bug 1169578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169580">SUSE bug 1169580</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11758/">CVE-2020-11758</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11760/">CVE-2020-11760</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11761/">CVE-2020-11761</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-11762/">CVE-2020-11762</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11763/">CVE-2020-11763</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11764/">CVE-2020-11764</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11765/">CVE-2020-11765</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495154" comment="libIlmImf-2_2-23-2.2.1-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495155" comment="libIlmImfUtil-2_2-23-2.2.1-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495156" comment="openexr-devel-2.2.1-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138107" version="1" class="patch">
	<metadata>
		<title>Security update for libvpx (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1166066" ref_url="https://bugzilla.suse.com/1166066" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0034" ref_url="https://www.suse.com/security/cve/CVE-2020-0034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1297-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006827.html" source="SUSE-SU"/>
		<description>
This update for libvpx fixes the following issues:

- CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames (bsc#1166066).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-18"/>
	<updated date="2020-05-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1166066">SUSE bug 1166066</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-0034/">CVE-2020-0034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495157" comment="libvpx-devel-1.6.1-6.6.8 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138108" version="1" class="patch">
	<metadata>
		<title>Security update for gstreamer-plugins-base (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1133375" ref_url="https://bugzilla.suse.com/1133375" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9928" ref_url="https://www.suse.com/security/cve/CVE-2019-9928/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006832.html" source="SUSE-SU"/>
		<description>
This update for gstreamer-plugins-base fixes the following issue:

Security issue fixed:

- CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser (bsc#1133375).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-18"/>
	<updated date="2020-05-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1133375">SUSE bug 1133375</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9928/">CVE-2019-9928</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495158" comment="gstreamer-plugins-base-devel-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495159" comment="typelib-1_0-GstAllocators-1_0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495160" comment="typelib-1_0-GstApp-1_0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495161" comment="typelib-1_0-GstAudio-1_0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495162" comment="typelib-1_0-GstFft-1_0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495163" comment="typelib-1_0-GstPbutils-1_0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495164" comment="typelib-1_0-GstRtp-1_0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495165" comment="typelib-1_0-GstRtsp-1_0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495166" comment="typelib-1_0-GstSdp-1_0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495167" comment="typelib-1_0-GstTag-1_0-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495168" comment="typelib-1_0-GstVideo-1_0-1.12.5-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138109" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1155094" ref_url="https://bugzilla.suse.com/1155094" source="BUGZILLA"/>
		<reference ref_id="1162825" ref_url="https://bugzilla.suse.com/1162825" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18348" ref_url="https://www.suse.com/security/cve/CVE-2019-18348/" source="CVE"/>
		<reference ref_id="CVE-2019-9674" ref_url="https://www.suse.com/security/cve/CVE-2019-9674/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006835.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

Security issues fixed:

- CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen().
  Now an InvalidURL exception is raised (bsc#1155094).
- CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-19"/>
	<updated date="2020-05-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1155094">SUSE bug 1155094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162825">SUSE bug 1162825</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-18348/">CVE-2019-18348</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9674/">CVE-2019-9674</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495169" comment="python-tk-2.7.17-7.38.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138110" version="1" class="patch">
	<metadata>
		<title>Security update for jasper (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1092115" ref_url="https://bugzilla.suse.com/1092115" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-9154" ref_url="https://www.suse.com/security/cve/CVE-2018-9154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1420-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006858.html" source="SUSE-SU"/>
		<description>
This update for jasper fixes the following issues:

- CVE-2018-9154: Fixed a potential denial of service in jpc_dec_process_sot() (bsc#1092115).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1092115">SUSE bug 1092115</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9154/">CVE-2018-9154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495170" comment="libjasper-devel-2.0.14-3.11.8 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138111" version="1" class="patch">
	<metadata>
		<title>Security update for libvpx (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160611" ref_url="https://bugzilla.suse.com/1160611" source="BUGZILLA"/>
		<reference ref_id="1160612" ref_url="https://bugzilla.suse.com/1160612" source="BUGZILLA"/>
		<reference ref_id="1160613" ref_url="https://bugzilla.suse.com/1160613" source="BUGZILLA"/>
		<reference ref_id="1160614" ref_url="https://bugzilla.suse.com/1160614" source="BUGZILLA"/>
		<reference ref_id="1160615" ref_url="https://bugzilla.suse.com/1160615" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-2126" ref_url="https://www.suse.com/security/cve/CVE-2019-2126/" source="CVE"/>
		<reference ref_id="CVE-2019-9232" ref_url="https://www.suse.com/security/cve/CVE-2019-9232/" source="CVE"/>
		<reference ref_id="CVE-2019-9325" ref_url="https://www.suse.com/security/cve/CVE-2019-9325/" source="CVE"/>
		<reference ref_id="CVE-2019-9371" ref_url="https://www.suse.com/security/cve/CVE-2019-9371/" source="CVE"/>
		<reference ref_id="CVE-2019-9433" ref_url="https://www.suse.com/security/cve/CVE-2019-9433/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006387.html" source="SUSE-SU"/>
		<description>
This update for libvpx fixes the following issues:

- CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry() (bsc#1160611).
- CVE-2019-9325: Fixed an out-of-bounds read (bsc#1160612).
- CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data (bsc#1160613).
- CVE-2019-9433: Fixed a use-after-free in vp8_deblock() (bsc#1160614).
- CVE-2019-9371: Fixed a resource exhaustion after memory leak (bsc#1160615).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-20"/>
	<updated date="2020-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160611">SUSE bug 1160611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160612">SUSE bug 1160612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160613">SUSE bug 1160613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160614">SUSE bug 1160614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160615">SUSE bug 1160615</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2126/">CVE-2019-2126</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9232/">CVE-2019-9232</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9325/">CVE-2019-9325</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9371/">CVE-2019-9371</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9433/">CVE-2019-9433</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495091" comment="libvpx-devel-1.6.1-6.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138112" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172225" ref_url="https://bugzilla.suse.com/1172225" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20807" ref_url="https://www.suse.com/security/cve/CVE-2019-20807/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1551-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006896.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

- CVE-2019-20807: Fixed an issue where escaping from the restrictive mode of vim 
  was possible using interfaces (bsc#1172225). 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-08"/>
	<updated date="2020-06-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172225">SUSE bug 1172225</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-20807/">CVE-2019-20807</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495171" comment="gvim-8.0.1568-5.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138113" version="1" class="patch">
	<metadata>
		<title>Security update for libexif (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1055857" ref_url="https://bugzilla.suse.com/1055857" source="BUGZILLA"/>
		<reference ref_id="1059893" ref_url="https://bugzilla.suse.com/1059893" source="BUGZILLA"/>
		<reference ref_id="1120943" ref_url="https://bugzilla.suse.com/1120943" source="BUGZILLA"/>
		<reference ref_id="1160770" ref_url="https://bugzilla.suse.com/1160770" source="BUGZILLA"/>
		<reference ref_id="1171475" ref_url="https://bugzilla.suse.com/1171475" source="BUGZILLA"/>
		<reference ref_id="1171847" ref_url="https://bugzilla.suse.com/1171847" source="BUGZILLA"/>
		<reference ref_id="1172105" ref_url="https://bugzilla.suse.com/1172105" source="BUGZILLA"/>
		<reference ref_id="1172116" ref_url="https://bugzilla.suse.com/1172116" source="BUGZILLA"/>
		<reference ref_id="1172121" ref_url="https://bugzilla.suse.com/1172121" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-6328" ref_url="https://www.suse.com/security/cve/CVE-2016-6328/" source="CVE"/>
		<reference ref_id="CVE-2017-7544" ref_url="https://www.suse.com/security/cve/CVE-2017-7544/" source="CVE"/>
		<reference ref_id="CVE-2018-20030" ref_url="https://www.suse.com/security/cve/CVE-2018-20030/" source="CVE"/>
		<reference ref_id="CVE-2019-9278" ref_url="https://www.suse.com/security/cve/CVE-2019-9278/" source="CVE"/>
		<reference ref_id="CVE-2020-0093" ref_url="https://www.suse.com/security/cve/CVE-2020-0093/" source="CVE"/>
		<reference ref_id="CVE-2020-12767" ref_url="https://www.suse.com/security/cve/CVE-2020-12767/" source="CVE"/>
		<reference ref_id="CVE-2020-13112" ref_url="https://www.suse.com/security/cve/CVE-2020-13112/" source="CVE"/>
		<reference ref_id="CVE-2020-13113" ref_url="https://www.suse.com/security/cve/CVE-2020-13113/" source="CVE"/>
		<reference ref_id="CVE-2020-13114" ref_url="https://www.suse.com/security/cve/CVE-2020-13114/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006894.html" source="SUSE-SU"/>
		<description>
This update for libexif to 0.6.22 fixes the following issues:

Security issues fixed:

- CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file (bsc#1055857).
- CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c (bsc#1059893).
- CVE-2018-20030: Fixed a denial of service by endless recursion (bsc#1120943).
- CVE-2019-9278: Fixed an integer overflow (bsc#1160770).
- CVE-2020-0093: Fixed an out-of-bounds read in exif_data_save_data_entry (bsc#1171847).
- CVE-2020-12767: Fixed a divide-by-zero error in exif_entry_get_value (bsc#1171475).
- CVE-2020-13112: Fixed a time consumption DoS when parsing canon array markers (bsc#1172121).
- CVE-2020-13113: Fixed a potential use of uninitialized memory (bsc#1172105).
- CVE-2020-13114: Fixed various buffer overread fixes due to integer overflows in maker notes (bsc#1172116).

Non-security issues fixed:

- libexif was updated to version 0.6.22:
  * New translations: ms
  * Updated translations for most languages
  * Some useful EXIF 2.3 tag added:
    * EXIF_TAG_GAMMA
    * EXIF_TAG_COMPOSITE_IMAGE
    * EXIF_TAG_SOURCE_IMAGE_NUMBER_OF_COMPOSITE_IMAGE
    * EXIF_TAG_SOURCE_EXPOSURE_TIMES_OF_COMPOSITE_IMAGE
    * EXIF_TAG_GPS_H_POSITIONING_ERROR
    * EXIF_TAG_CAMERA_OWNER_NAME
    * EXIF_TAG_BODY_SERIAL_NUMBER
    * EXIF_TAG_LENS_SPECIFICATION
    * EXIF_TAG_LENS_MAKE
    * EXIF_TAG_LENS_MODEL
    * EXIF_TAG_LENS_SERIAL_NUMBER
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-08"/>
	<updated date="2020-06-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1055857">SUSE bug 1055857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059893">SUSE bug 1059893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120943">SUSE bug 1120943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160770">SUSE bug 1160770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171475">SUSE bug 1171475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171847">SUSE bug 1171847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172105">SUSE bug 1172105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172116">SUSE bug 1172116</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172121">SUSE bug 1172121</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-6328/">CVE-2016-6328</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7544/">CVE-2017-7544</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20030/">CVE-2018-20030</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9278/">CVE-2019-9278</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0093/">CVE-2020-0093</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12767/">CVE-2020-12767</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13112/">CVE-2020-13112</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13113/">CVE-2020-13113</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13114/">CVE-2020-13114</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495172" comment="libexif-devel-0.6.22-5.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495173" comment="libexif12-0.6.22-5.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138114" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172402" ref_url="https://bugzilla.suse.com/1172402" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12405" ref_url="https://www.suse.com/security/cve/CVE-2020-12405/" source="CVE"/>
		<reference ref_id="CVE-2020-12406" ref_url="https://www.suse.com/security/cve/CVE-2020-12406/" source="CVE"/>
		<reference ref_id="CVE-2020-12410" ref_url="https://www.suse.com/security/cve/CVE-2020-12410/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1556-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006900.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- MozillaFirefox was updated to version 68.9.0 Extended Support Release (bsc#1172402).

- CVE-2020-12405: Fixed a use-after-free in SharedWorkerService. 
- CVE-2020-12406: Fixed a JavaScript Type confusion with NativeTypes.
- CVE-2020-12410: Fixed multiple memory safety bugs.	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-08"/>
	<updated date="2020-06-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172402">SUSE bug 1172402</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12405/">CVE-2020-12405</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12406/">CVE-2020-12406</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12410/">CVE-2020-12410</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495174" comment="MozillaFirefox-68.9.0-3.91.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495175" comment="MozillaFirefox-devel-68.9.0-3.91.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495176" comment="MozillaFirefox-translations-common-68.9.0-3.91.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495177" comment="MozillaFirefox-translations-other-68.9.0-3.91.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138115" version="1" class="patch">
	<metadata>
		<title>Security update for file-roller (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1151585" ref_url="https://bugzilla.suse.com/1151585" source="BUGZILLA"/>
		<reference ref_id="1169428" ref_url="https://bugzilla.suse.com/1169428" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16680" ref_url="https://www.suse.com/security/cve/CVE-2019-16680/" source="CVE"/>
		<reference ref_id="CVE-2020-11736" ref_url="https://www.suse.com/security/cve/CVE-2020-11736/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1557-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006898.html" source="SUSE-SU"/>
		<description>
This update for file-roller fixes the following issues:

- CVE-2020-11736: Fixed a directory traversal vulnerability due to improper checking whether a file's parent is an external symlink (bsc#1169428).
- CVE-2019-16680: Fixed a path traversal vulnerability which could have allowed
  an overwriting of a file during extraction (bsc#1151585). 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-08"/>
	<updated date="2020-06-08"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1151585">SUSE bug 1151585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169428">SUSE bug 1169428</bugzilla>
	<cve impact="low" cvss3="3.9/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16680/">CVE-2019-16680</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-11736/">CVE-2020-11736</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495178" comment="file-roller-3.26.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495179" comment="file-roller-lang-3.26.2-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138116" version="1" class="patch">
	<metadata>
		<title>Security update for texlive-filesystem (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1158910" ref_url="https://bugzilla.suse.com/1158910" source="BUGZILLA"/>
		<reference ref_id="1159740" ref_url="https://bugzilla.suse.com/1159740" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8016" ref_url="https://www.suse.com/security/cve/CVE-2020-8016/" source="CVE"/>
		<reference ref_id="CVE-2020-8017" ref_url="https://www.suse.com/security/cve/CVE-2020-8017/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1580-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006914.html" source="SUSE-SU"/>
		<description>
This update for texlive-filesystem fixes the following issues:

Security issues fixed:

- CVE-2020-8016: Fixed a race condition in the spec file (bsc#1159740).
- CVE-2020-8017: Fixed a race condition on a cron job (bsc#1158910).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-09"/>
	<updated date="2020-06-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1158910">SUSE bug 1158910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159740">SUSE bug 1159740</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8016/">CVE-2020-8016</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8017/">CVE-2020-8017</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495180" comment="libkpathsea6-6.2.3-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495181" comment="libptexenc1-1.3.5-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495182" comment="libsynctex1-1.18-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495183" comment="libtexlua52-5-5.2.4-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495184" comment="libtexluajit2-2.1.0beta2-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495185" comment="perl-biber-2017.20170520.svn30357-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495186" comment="texlive-2017.20170520-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495187" comment="texlive-a2ping-bin-2017.20170520.svn27321-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495188" comment="texlive-accfonts-bin-2017.20170520.svn12688-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495189" comment="texlive-adhocfilelist-bin-2017.20170520.svn28038-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495190" comment="texlive-afm2pl-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495191" comment="texlive-aleph-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495192" comment="texlive-amstex-bin-2017.20170520.svn3006-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495193" comment="texlive-arara-bin-2017.20170520.svn29036-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495194" comment="texlive-asymptote-bin-2017.20170520.svn43843-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495195" comment="texlive-authorindex-bin-2017.20170520.svn18790-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495196" comment="texlive-autosp-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495197" comment="texlive-biber-bin-2017.20170520.svn42679-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495198" comment="texlive-bibexport-bin-2017.20170520.svn16219-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495199" comment="texlive-bibtex-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495200" comment="texlive-bibtex8-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495201" comment="texlive-bibtexu-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495202" comment="texlive-bin-devel-2017.20170520-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495203" comment="texlive-bundledoc-bin-2017.20170520.svn17794-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495204" comment="texlive-cachepic-bin-2017.20170520.svn15543-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495205" comment="texlive-checkcites-bin-2017.20170520.svn25623-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495206" comment="texlive-checklistings-bin-2017.20170520.svn38300-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495207" comment="texlive-chktex-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495208" comment="texlive-cjk-gs-integrate-bin-2017.20170520.svn37223-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495209" comment="texlive-cjkutils-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495210" comment="texlive-collection-basic-2017.135.svn41616-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495211" comment="texlive-collection-bibtexextra-2017.135.svn44385-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495212" comment="texlive-collection-binextra-2017.135.svn44515-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495213" comment="texlive-collection-context-2017.135.svn42330-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495214" comment="texlive-collection-fontsextra-2017.135.svn43356-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495215" comment="texlive-collection-fontsrecommended-2017.135.svn35830-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495216" comment="texlive-collection-fontutils-2017.135.svn37105-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495217" comment="texlive-collection-formatsextra-2017.135.svn44177-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495218" comment="texlive-collection-games-2017.135.svn42992-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495219" comment="texlive-collection-humanities-2017.135.svn42268-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495220" comment="texlive-collection-langarabic-2017.135.svn44496-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495221" comment="texlive-collection-langchinese-2017.135.svn42675-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495222" comment="texlive-collection-langcjk-2017.135.svn43009-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495223" comment="texlive-collection-langcyrillic-2017.135.svn44401-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495224" comment="texlive-collection-langczechslovak-2017.135.svn32550-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495225" comment="texlive-collection-langenglish-2017.135.svn43650-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495226" comment="texlive-collection-langeuropean-2017.135.svn44414-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495227" comment="texlive-collection-langfrench-2017.135.svn40375-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495228" comment="texlive-collection-langgerman-2017.135.svn42045-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495229" comment="texlive-collection-langgreek-2017.135.svn44192-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495230" comment="texlive-collection-langitalian-2017.135.svn30372-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495231" comment="texlive-collection-langjapanese-2017.135.svn44554-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495232" comment="texlive-collection-langkorean-2017.135.svn42106-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495233" comment="texlive-collection-langother-2017.135.svn44414-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495234" comment="texlive-collection-langpolish-2017.135.svn44371-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495235" comment="texlive-collection-langportuguese-2017.135.svn30962-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495236" comment="texlive-collection-langspanish-2017.135.svn40587-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495237" comment="texlive-collection-latex-2017.135.svn41614-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495238" comment="texlive-collection-latexextra-2017.135.svn44544-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495239" comment="texlive-collection-latexrecommended-2017.135.svn44177-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495240" comment="texlive-collection-luatex-2017.135.svn44500-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495241" comment="texlive-collection-mathscience-2017.135.svn44396-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495242" comment="texlive-collection-metapost-2017.135.svn44297-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495243" comment="texlive-collection-music-2017.135.svn40561-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495244" comment="texlive-collection-pictures-2017.135.svn44395-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495245" comment="texlive-collection-plaingeneric-2017.135.svn44177-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495246" comment="texlive-collection-pstricks-2017.135.svn44460-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495247" comment="texlive-collection-publishers-2017.135.svn44485-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495248" comment="texlive-collection-xetex-2017.135.svn43059-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495249" comment="texlive-context-bin-2017.20170520.svn34112-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495250" comment="texlive-convbkmk-bin-2017.20170520.svn30408-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495251" comment="texlive-crossrefware-bin-2017.20170520.svn43866-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495252" comment="texlive-cslatex-bin-2017.20170520.svn3006-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495253" comment="texlive-csplain-bin-2017.20170520.svn33902-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495254" comment="texlive-ctanify-bin-2017.20170520.svn24061-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495255" comment="texlive-ctanupload-bin-2017.20170520.svn23866-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495256" comment="texlive-ctie-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495257" comment="texlive-cweb-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495258" comment="texlive-cyrillic-bin-bin-2017.20170520.svn29741-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495259" comment="texlive-de-macro-bin-2017.20170520.svn17399-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495260" comment="texlive-detex-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495261" comment="texlive-devel-2017.135-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495262" comment="texlive-diadia-bin-2017.20170520.svn37645-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495263" comment="texlive-dosepsbin-bin-2017.20170520.svn24759-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495264" comment="texlive-dtl-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495265" comment="texlive-dtxgen-bin-2017.20170520.svn29031-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495266" comment="texlive-dviasm-bin-2017.20170520.svn8329-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495267" comment="texlive-dvicopy-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495268" comment="texlive-dvidvi-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495269" comment="texlive-dviinfox-bin-2017.20170520.svn44515-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495270" comment="texlive-dviljk-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495271" comment="texlive-dvipdfmx-bin-2017.20170520.svn40273-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495272" comment="texlive-dvipng-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495273" comment="texlive-dvipos-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495274" comment="texlive-dvips-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495275" comment="texlive-dvisvgm-bin-2017.20170520.svn40987-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495276" comment="texlive-ebong-bin-2017.20170520.svn21000-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495277" comment="texlive-eplain-bin-2017.20170520.svn3006-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495278" comment="texlive-epspdf-bin-2017.20170520.svn29050-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495279" comment="texlive-epstopdf-bin-2017.20170520.svn18336-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495280" comment="texlive-exceltex-bin-2017.20170520.svn25860-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495281" comment="texlive-extratools-2017.135-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495282" comment="texlive-fig4latex-bin-2017.20170520.svn14752-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495283" comment="texlive-filesystem-2017.135-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495284" comment="texlive-findhyph-bin-2017.20170520.svn14758-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495285" comment="texlive-fontinst-bin-2017.20170520.svn29741-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495286" comment="texlive-fontools-bin-2017.20170520.svn25997-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495287" comment="texlive-fontware-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495288" comment="texlive-fragmaster-bin-2017.20170520.svn13663-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495289" comment="texlive-getmap-bin-2017.20170520.svn34971-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495290" comment="texlive-glossaries-bin-2017.20170520.svn37813-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495291" comment="texlive-gregoriotex-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495292" comment="texlive-gsftopk-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495293" comment="texlive-jadetex-bin-2017.20170520.svn3006-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495294" comment="texlive-kotex-utils-bin-2017.20170520.svn32101-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495295" comment="texlive-kpathsea-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495296" comment="texlive-kpathsea-devel-6.2.3-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495297" comment="texlive-lacheck-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495298" comment="texlive-latex-bin-bin-2017.20170520.svn14050-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495299" comment="texlive-latex-git-log-bin-2017.20170520.svn30983-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495300" comment="texlive-latex-papersize-bin-2017.20170520.svn42296-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495301" comment="texlive-latex2man-bin-2017.20170520.svn13663-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495302" comment="texlive-latex2nemeth-bin-2017.20170520.svn42300-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495303" comment="texlive-latexdiff-bin-2017.20170520.svn16420-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495304" comment="texlive-latexfileversion-bin-2017.20170520.svn25012-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495305" comment="texlive-latexindent-bin-2017.20170520.svn32150-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495306" comment="texlive-latexmk-bin-2017.20170520.svn10937-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495307" comment="texlive-latexpand-bin-2017.20170520.svn27025-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495308" comment="texlive-lcdftypetools-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495309" comment="texlive-lilyglyphs-bin-2017.20170520.svn31696-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495310" comment="texlive-listbib-bin-2017.20170520.svn26126-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495311" comment="texlive-listings-ext-bin-2017.20170520.svn15093-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495312" comment="texlive-lollipop-bin-2017.20170520.svn41465-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495313" comment="texlive-ltxfileinfo-bin-2017.20170520.svn29005-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495314" comment="texlive-ltximg-bin-2017.20170520.svn32346-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495315" comment="texlive-lua2dox-bin-2017.20170520.svn29053-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495316" comment="texlive-luaotfload-bin-2017.20170520.svn34647-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495317" comment="texlive-luatex-bin-2017.20170520.svn44549-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495318" comment="texlive-lwarp-bin-2017.20170520.svn43292-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495319" comment="texlive-m-tx-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495320" comment="texlive-make4ht-bin-2017.20170520.svn37750-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495321" comment="texlive-makedtx-bin-2017.20170520.svn38769-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495322" comment="texlive-makeindex-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495323" comment="texlive-match_parens-bin-2017.20170520.svn23500-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495324" comment="texlive-mathspic-bin-2017.20170520.svn23661-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495325" comment="texlive-metafont-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495326" comment="texlive-metapost-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495327" comment="texlive-mex-bin-2017.20170520.svn3006-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495328" comment="texlive-mf2pt1-bin-2017.20170520.svn23406-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495329" comment="texlive-mflua-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495330" comment="texlive-mfware-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495331" comment="texlive-mkgrkindex-bin-2017.20170520.svn14428-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495332" comment="texlive-mkjobtexmf-bin-2017.20170520.svn8457-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495333" comment="texlive-mkpic-bin-2017.20170520.svn33688-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495334" comment="texlive-mltex-bin-2017.20170520.svn3006-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495335" comment="texlive-mptopdf-bin-2017.20170520.svn18674-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495336" comment="texlive-multibibliography-bin-2017.20170520.svn30534-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495337" comment="texlive-musixtex-bin-2017.20170520.svn37026-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495338" comment="texlive-musixtnt-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495339" comment="texlive-omegaware-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495340" comment="texlive-patgen-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495341" comment="texlive-pax-bin-2017.20170520.svn10843-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495342" comment="texlive-pdfbook2-bin-2017.20170520.svn37537-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495343" comment="texlive-pdfcrop-bin-2017.20170520.svn14387-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495344" comment="texlive-pdfjam-bin-2017.20170520.svn17868-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495345" comment="texlive-pdflatexpicscale-bin-2017.20170520.svn41779-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495346" comment="texlive-pdftex-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495347" comment="texlive-pdftools-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495348" comment="texlive-pdfxup-bin-2017.20170520.svn40690-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495349" comment="texlive-pedigree-perl-bin-2017.20170520.svn25962-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495350" comment="texlive-perltex-bin-2017.20170520.svn16181-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495351" comment="texlive-petri-nets-bin-2017.20170520.svn39165-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495352" comment="texlive-pfarrei-bin-2017.20170520.svn29348-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495353" comment="texlive-pkfix-bin-2017.20170520.svn13364-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495354" comment="texlive-pkfix-helper-bin-2017.20170520.svn13663-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495355" comment="texlive-platex-bin-2017.20170520.svn22859-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495356" comment="texlive-pmx-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495357" comment="texlive-pmxchords-bin-2017.20170520.svn32405-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495358" comment="texlive-ps2pk-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495359" comment="texlive-pst-pdf-bin-2017.20170520.svn7838-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495360" comment="texlive-pst2pdf-bin-2017.20170520.svn29333-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495361" comment="texlive-pstools-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495362" comment="texlive-ptex-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495363" comment="texlive-ptex-fontmaps-bin-2017.20170520.svn44206-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495364" comment="texlive-ptex2pdf-bin-2017.20170520.svn29335-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495365" comment="texlive-ptexenc-devel-1.3.5-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495366" comment="texlive-purifyeps-bin-2017.20170520.svn13663-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495367" comment="texlive-pygmentex-bin-2017.20170520.svn34996-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495368" comment="texlive-pythontex-bin-2017.20170520.svn31638-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495369" comment="texlive-rubik-bin-2017.20170520.svn32919-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495370" comment="texlive-scheme-basic-2017.135.svn25923-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495371" comment="texlive-scheme-context-2017.135.svn35799-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495372" comment="texlive-scheme-full-2017.135.svn44177-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495373" comment="texlive-scheme-gust-2017.135.svn44177-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495374" comment="texlive-scheme-infraonly-2017.135.svn41515-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495375" comment="texlive-scheme-medium-2017.135.svn44177-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495376" comment="texlive-scheme-minimal-2017.135.svn13822-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495377" comment="texlive-scheme-small-2017.135.svn41825-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495378" comment="texlive-scheme-tetex-2017.135.svn44187-9.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495379" comment="texlive-seetexk-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495380" comment="texlive-splitindex-bin-2017.20170520.svn29688-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495381" comment="texlive-srcredact-bin-2017.20170520.svn38710-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495382" comment="texlive-sty2dtx-bin-2017.20170520.svn21215-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495383" comment="texlive-svn-multi-bin-2017.20170520.svn13663-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495384" comment="texlive-synctex-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495385" comment="texlive-synctex-devel-1.18-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495386" comment="texlive-tetex-bin-2017.20170520.svn43957-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495387" comment="texlive-tex-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495388" comment="texlive-tex4ebook-bin-2017.20170520.svn37771-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495389" comment="texlive-tex4ht-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495390" comment="texlive-texconfig-bin-2017.20170520.svn29741-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495391" comment="texlive-texcount-bin-2017.20170520.svn13013-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495392" comment="texlive-texdef-bin-2017.20170520.svn21802-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495393" comment="texlive-texdiff-bin-2017.20170520.svn15506-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495394" comment="texlive-texdirflatten-bin-2017.20170520.svn12782-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495395" comment="texlive-texdoc-bin-2017.20170520.svn29741-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495396" comment="texlive-texfot-bin-2017.20170520.svn33155-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495397" comment="texlive-texliveonfly-bin-2017.20170520.svn24062-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495398" comment="texlive-texloganalyser-bin-2017.20170520.svn13663-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495399" comment="texlive-texlua-devel-5.2.4-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495400" comment="texlive-texluajit-devel-2.1.0beta2-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495401" comment="texlive-texosquery-bin-2017.20170520.svn43596-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495402" comment="texlive-texsis-bin-2017.20170520.svn3006-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495403" comment="texlive-texware-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495404" comment="texlive-thumbpdf-bin-2017.20170520.svn6898-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495405" comment="texlive-tie-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495406" comment="texlive-tpic2pdftex-bin-2017.20170520.svn29741-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495407" comment="texlive-ttfutils-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495408" comment="texlive-typeoutfileinfo-bin-2017.20170520.svn25648-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495409" comment="texlive-ulqda-bin-2017.20170520.svn13663-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495410" comment="texlive-uplatex-bin-2017.20170520.svn26326-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495411" comment="texlive-uptex-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495412" comment="texlive-urlbst-bin-2017.20170520.svn23262-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495413" comment="texlive-velthuis-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495414" comment="texlive-vlna-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495415" comment="texlive-vpe-bin-2017.20170520.svn6897-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495416" comment="texlive-web-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495417" comment="texlive-xdvi-bin-2017.20170520.svn44143-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495418" comment="texlive-xetex-bin-2017.20170520.svn44361-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495419" comment="texlive-xmltex-bin-2017.20170520.svn3006-11.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495420" comment="texlive-yplan-bin-2017.20170520.svn34398-11.13.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138117" version="1" class="patch">
	<metadata>
		<title>Security update for fwupd (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172643" ref_url="https://bugzilla.suse.com/1172643" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10759" ref_url="https://www.suse.com/security/cve/CVE-2020-10759/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1681-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006982.html" source="SUSE-SU"/>
		<description>
This update for fwupd fixes the following issues:

- CVE-2020-10759: Fixed a potential PGP signature bypass, which could have led to installation of unsigned firmware (bsc#1172643)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-19"/>
	<updated date="2020-06-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172643">SUSE bug 1172643</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-10759/">CVE-2020-10759</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495421" comment="fwupd-1.0.9-6.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495422" comment="fwupd-devel-1.0.9-6.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495423" comment="fwupd-lang-1.0.9-6.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495424" comment="libfwupd2-1.0.9-6.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495425" comment="typelib-1_0-Fwupd-2_0-1.0.9-6.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138118" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1166238" ref_url="https://bugzilla.suse.com/1166238" source="BUGZILLA"/>
		<reference ref_id="1173576" ref_url="https://bugzilla.suse.com/1173576" source="BUGZILLA"/>
		<reference ref_id="1173613" ref_url="https://bugzilla.suse.com/1173613" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12402" ref_url="https://www.suse.com/security/cve/CVE-2020-12402/" source="CVE"/>
		<reference ref_id="CVE-2020-12415" ref_url="https://www.suse.com/security/cve/CVE-2020-12415/" source="CVE"/>
		<reference ref_id="CVE-2020-12416" ref_url="https://www.suse.com/security/cve/CVE-2020-12416/" source="CVE"/>
		<reference ref_id="CVE-2020-12417" ref_url="https://www.suse.com/security/cve/CVE-2020-12417/" source="CVE"/>
		<reference ref_id="CVE-2020-12418" ref_url="https://www.suse.com/security/cve/CVE-2020-12418/" source="CVE"/>
		<reference ref_id="CVE-2020-12419" ref_url="https://www.suse.com/security/cve/CVE-2020-12419/" source="CVE"/>
		<reference ref_id="CVE-2020-12420" ref_url="https://www.suse.com/security/cve/CVE-2020-12420/" source="CVE"/>
		<reference ref_id="CVE-2020-12421" ref_url="https://www.suse.com/security/cve/CVE-2020-12421/" source="CVE"/>
		<reference ref_id="CVE-2020-12422" ref_url="https://www.suse.com/security/cve/CVE-2020-12422/" source="CVE"/>
		<reference ref_id="CVE-2020-12423" ref_url="https://www.suse.com/security/cve/CVE-2020-12423/" source="CVE"/>
		<reference ref_id="CVE-2020-12424" ref_url="https://www.suse.com/security/cve/CVE-2020-12424/" source="CVE"/>
		<reference ref_id="CVE-2020-12425" ref_url="https://www.suse.com/security/cve/CVE-2020-12425/" source="CVE"/>
		<reference ref_id="CVE-2020-12426" ref_url="https://www.suse.com/security/cve/CVE-2020-12426/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1898-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007123.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox to version 78.0.1 ESR fixes the following issues:

Security issues fixed:

- CVE-2020-12415: AppCache manifest poisoning due to url encoded character processing (bsc#1173576).
- CVE-2020-12416: Use-after-free in WebRTC VideoBroadcaster (bsc#1173576).
- CVE-2020-12417: Memory corruption due to missing sign-extension for ValueTags on ARM64 (bsc#1173576).
- CVE-2020-12418: Information disclosure due to manipulated URL object (bsc#1173576).
- CVE-2020-12419: Use-after-free in nsGlobalWindowInner (bsc#1173576).
- CVE-2020-12420: Use-After-Free when trying to connect to a STUN server (bsc#1173576).
- CVE-2020-12402: RSA Key Generation vulnerable to side-channel attack (bsc#1173576).
- CVE-2020-12421: Add-On updates did not respect the same certificate trust rules as software updates (bsc#1173576).
- CVE-2020-12422: Integer overflow in nsJPEGEncoder::emptyOutputBuffer (bsc#1173576).
- CVE-2020-12423: DLL Hijacking due to searching %PATH% for a library (bsc#1173576).
- CVE-2020-12424: WebRTC permission prompt could have been bypassed by a compromised content process (bsc#1173576).
- CVE-2020-12425: Out of bound read in Date.parse() (bsc#1173576).
- CVE-2020-12426: Memory safety bugs fixed in Firefox 78 (bsc#1173576).
- FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled (bsc#1167231).

Non-security issues fixed:

- Fixed interaction with freetype6 (bsc#1173613).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-13"/>
	<updated date="2020-07-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1166238">SUSE bug 1166238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173576">SUSE bug 1173576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173613">SUSE bug 1173613</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12402/">CVE-2020-12402</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-12415/">CVE-2020-12415</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12416/">CVE-2020-12416</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12417/">CVE-2020-12417</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12418/">CVE-2020-12418</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12419/">CVE-2020-12419</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12420/">CVE-2020-12420</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-12421/">CVE-2020-12421</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12422/">CVE-2020-12422</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12423/">CVE-2020-12423</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-12424/">CVE-2020-12424</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12425/">CVE-2020-12425</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12426/">CVE-2020-12426</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495426" comment="MozillaFirefox-78.0.1-3.94.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495427" comment="MozillaFirefox-branding-SLE-78-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495428" comment="MozillaFirefox-devel-78.0.1-3.94.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495429" comment="MozillaFirefox-translations-common-78.0.1-3.94.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495430" comment="MozillaFirefox-translations-other-78.0.1-3.94.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138119" version="1" class="patch">
	<metadata>
		<title>Security update for openexr (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173466" ref_url="https://bugzilla.suse.com/1173466" source="BUGZILLA"/>
		<reference ref_id="1173467" ref_url="https://bugzilla.suse.com/1173467" source="BUGZILLA"/>
		<reference ref_id="1173469" ref_url="https://bugzilla.suse.com/1173469" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15304" ref_url="https://www.suse.com/security/cve/CVE-2020-15304/" source="CVE"/>
		<reference ref_id="CVE-2020-15305" ref_url="https://www.suse.com/security/cve/CVE-2020-15305/" source="CVE"/>
		<reference ref_id="CVE-2020-15306" ref_url="https://www.suse.com/security/cve/CVE-2020-15306/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007137.html" source="SUSE-SU"/>
		<description>
This update for openexr fixes the following issues:

- CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile() (bsc#1173466).
- CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile() (bsc#1173467).
- CVE-2020-15306: Fixed a heap buffer overflow in getChunkOffsetTableSize() (bsc#1173469).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-15"/>
	<updated date="2020-07-15"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173466">SUSE bug 1173466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173467">SUSE bug 1173467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173469">SUSE bug 1173469</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-15304/">CVE-2020-15304</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15305/">CVE-2020-15305</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15306/">CVE-2020-15306</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495431" comment="libIlmImf-2_2-23-2.2.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495432" comment="libIlmImfUtil-2_2-23-2.2.1-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495433" comment="openexr-devel-2.2.1-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138120" version="1" class="patch">
	<metadata>
		<title>Security update for cairo (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1049092" ref_url="https://bugzilla.suse.com/1049092" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-9814" ref_url="https://www.suse.com/security/cve/CVE-2017-9814/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1937-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007144.html" source="SUSE-SU"/>
		<description>
This update for cairo fixes the following issues:

- Fix a memory corruption in pango.
- Revert 'Correctly decode Adobe CMYK JPEGs in PDF export'.
- Add more FreeeType font color conversions to support COLR/CPAL.
- Fix crash when rendering Microsoft's Segoe UI Emoji Regular font.
- Fix memory leaks found by Coverity.
- Fix assertion failure in the freetype backend. (fdo#105746).
- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc and check cmap size before allocating (bsc#1049092)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-15"/>
	<updated date="2020-07-15"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1049092">SUSE bug 1049092</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9814/">CVE-2017-9814</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495434" comment="libcairo2-32bit-1.16.0-4.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138121" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173948" ref_url="https://bugzilla.suse.com/1173948" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:1958-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007153.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-20"/>
	<updated date="2020-07-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173948">SUSE bug 1173948</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495435" comment="MozillaFirefox-78.0.2-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495436" comment="MozillaFirefox-devel-78.0.2-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495437" comment="MozillaFirefox-translations-common-78.0.2-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495438" comment="MozillaFirefox-translations-other-78.0.2-3.97.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138122" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173998" ref_url="https://bugzilla.suse.com/1173998" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13753" ref_url="https://www.suse.com/security/cve/CVE-2020-13753/" source="CVE"/>
		<reference ref_id="CVE-2020-9802" ref_url="https://www.suse.com/security/cve/CVE-2020-9802/" source="CVE"/>
		<reference ref_id="CVE-2020-9803" ref_url="https://www.suse.com/security/cve/CVE-2020-9803/" source="CVE"/>
		<reference ref_id="CVE-2020-9805" ref_url="https://www.suse.com/security/cve/CVE-2020-9805/" source="CVE"/>
		<reference ref_id="CVE-2020-9806" ref_url="https://www.suse.com/security/cve/CVE-2020-9806/" source="CVE"/>
		<reference ref_id="CVE-2020-9807" ref_url="https://www.suse.com/security/cve/CVE-2020-9807/" source="CVE"/>
		<reference ref_id="CVE-2020-9843" ref_url="https://www.suse.com/security/cve/CVE-2020-9843/" source="CVE"/>
		<reference ref_id="CVE-2020-9850" ref_url="https://www.suse.com/security/cve/CVE-2020-9850/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007167.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.28.3 (bsc#1173998):
  + Enable kinetic scrolling with async scrolling.
  + Fix web process hangs on large GitHub pages.
  + Bubblewrap sandbox should not attempt to bind empty paths.
  + Fix threading issues in the media player.
  + Fix several crashes and rendering issues.
  + Security fixes:  CVE-2020-9802, CVE-2020-9803, CVE-2020-9805,
    CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850,
    CVE-2020-13753.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-21"/>
	<updated date="2020-07-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173998">SUSE bug 1173998</bugzilla>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13753/">CVE-2020-13753</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9802/">CVE-2020-9802</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9803/">CVE-2020-9803</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9805/">CVE-2020-9805</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9806/">CVE-2020-9806</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9807/">CVE-2020-9807</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9843/">CVE-2020-9843</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9850/">CVE-2020-9850</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495439" comment="typelib-1_0-JavaScriptCore-4_0-2.28.3-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495440" comment="typelib-1_0-WebKit2-4_0-2.28.3-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495441" comment="typelib-1_0-WebKit2WebExtension-4_0-2.28.3-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495442" comment="webkit2gtk3-devel-2.28.3-3.57.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138123" version="1" class="patch">
	<metadata>
		<title>Security update for vino (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1155419" ref_url="https://bugzilla.suse.com/1155419" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15681" ref_url="https://www.suse.com/security/cve/CVE-2019-15681/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2009-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007169.html" source="SUSE-SU"/>
		<description>
This update for vino fixes the following issues:

- CVE-2019-15681: Fixed a memory leak which could have allowed to a 
  remote attacker to read stack memory (bsc#1155419).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-22"/>
	<updated date="2020-07-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1155419">SUSE bug 1155419</bugzilla>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15681/">CVE-2019-15681</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495443" comment="vino-3.22.0-3.6.76 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495444" comment="vino-lang-3.22.0-3.6.76 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138124" version="1" class="patch">
	<metadata>
		<title>Security update for libX11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174628" ref_url="https://bugzilla.suse.com/1174628" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14344" ref_url="https://www.suse.com/security/cve/CVE-2020-14344/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007217.html" source="SUSE-SU"/>
		<description>
This update for libX11 fixes the following issues:

- Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-04"/>
	<updated date="2020-08-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174628">SUSE bug 1174628</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14344/">CVE-2020-14344</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495445" comment="libxcb-render0-32bit-1.13-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495446" comment="libxcb-shm0-32bit-1.13-3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138125" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174538" ref_url="https://bugzilla.suse.com/1174538" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15652" ref_url="https://www.suse.com/security/cve/CVE-2020-15652/" source="CVE"/>
		<reference ref_id="CVE-2020-15653" ref_url="https://www.suse.com/security/cve/CVE-2020-15653/" source="CVE"/>
		<reference ref_id="CVE-2020-15654" ref_url="https://www.suse.com/security/cve/CVE-2020-15654/" source="CVE"/>
		<reference ref_id="CVE-2020-15655" ref_url="https://www.suse.com/security/cve/CVE-2020-15655/" source="CVE"/>
		<reference ref_id="CVE-2020-15656" ref_url="https://www.suse.com/security/cve/CVE-2020-15656/" source="CVE"/>
		<reference ref_id="CVE-2020-15657" ref_url="https://www.suse.com/security/cve/CVE-2020-15657/" source="CVE"/>
		<reference ref_id="CVE-2020-15658" ref_url="https://www.suse.com/security/cve/CVE-2020-15658/" source="CVE"/>
		<reference ref_id="CVE-2020-15659" ref_url="https://www.suse.com/security/cve/CVE-2020-15659/" source="CVE"/>
		<reference ref_id="CVE-2020-6463" ref_url="https://www.suse.com/security/cve/CVE-2020-6463/" source="CVE"/>
		<reference ref_id="CVE-2020-6514" ref_url="https://www.suse.com/security/cve/CVE-2020-6514/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007223.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes (bsc#1174538)
  * CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker
  * CVE-2020-6514: WebRTC data channel leaks internal address to peer
  * CVE-2020-15655: Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653: Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656: Type confusion for special arguments in IonMonkey
  * CVE-2020-15658: Overriding file type when saving to disk
  * CVE-2020-15657: DLL hijacking due to incorrect loading path
  * CVE-2020-15654: Custom cursor can overlay user interface
  * CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-04"/>
	<updated date="2020-08-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174538">SUSE bug 1174538</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-15652/">CVE-2020-15652</cve>
	<cve impact="important" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15653/">CVE-2020-15653</cve>
	<cve impact="important" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15654/">CVE-2020-15654</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15655/">CVE-2020-15655</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-15656/">CVE-2020-15656</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15657/">CVE-2020-15657</cve>
	<cve impact="important" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15658/">CVE-2020-15658</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15659/">CVE-2020-15659</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-6463/">CVE-2020-6463</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6514/">CVE-2020-6514</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495447" comment="MozillaFirefox-78.1.0-3.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495448" comment="MozillaFirefox-devel-78.1.0-3.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495449" comment="MozillaFirefox-translations-common-78.1.0-3.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495450" comment="MozillaFirefox-translations-other-78.1.0-3.100.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138126" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1169063" ref_url="https://bugzilla.suse.com/1169063" source="BUGZILLA"/>
		<reference ref_id="1171899" ref_url="https://bugzilla.suse.com/1171899" source="BUGZILLA"/>
		<reference ref_id="1173606" ref_url="https://bugzilla.suse.com/1173606" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11647" ref_url="https://www.suse.com/security/cve/CVE-2020-11647/" source="CVE"/>
		<reference ref_id="CVE-2020-13164" ref_url="https://www.suse.com/security/cve/CVE-2020-13164/" source="CVE"/>
		<reference ref_id="CVE-2020-15466" ref_url="https://www.suse.com/security/cve/CVE-2020-15466/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2144-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007228.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

- Wireshark to 3.2.5:
  * CVE-2020-15466: GVCP dissector infinite loop (bsc#1173606)
  * CVE-2020-13164: NFS dissector crash (bsc#1171899)
  * CVE-2020-11647: The BACapp dissector could crash (bsc#1169063)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-06"/>
	<updated date="2020-08-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1169063">SUSE bug 1169063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171899">SUSE bug 1171899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173606">SUSE bug 1173606</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11647/">CVE-2020-11647</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13164/">CVE-2020-13164</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-15466/">CVE-2020-15466</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495451" comment="wireshark-devel-3.2.5-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495452" comment="wireshark-ui-qt-3.2.5-3.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138127" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174662" ref_url="https://bugzilla.suse.com/1174662" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-9862" ref_url="https://www.suse.com/security/cve/CVE-2020-9862/" source="CVE"/>
		<reference ref_id="CVE-2020-9893" ref_url="https://www.suse.com/security/cve/CVE-2020-9893/" source="CVE"/>
		<reference ref_id="CVE-2020-9894" ref_url="https://www.suse.com/security/cve/CVE-2020-9894/" source="CVE"/>
		<reference ref_id="CVE-2020-9895" ref_url="https://www.suse.com/security/cve/CVE-2020-9895/" source="CVE"/>
		<reference ref_id="CVE-2020-9915" ref_url="https://www.suse.com/security/cve/CVE-2020-9915/" source="CVE"/>
		<reference ref_id="CVE-2020-9925" ref_url="https://www.suse.com/security/cve/CVE-2020-9925/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2198-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007249.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.28.4 (bsc#1174662):
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-9862, CVE-2020-9893, CVE-2020-9894,
    CVE-2020-9895, CVE-2020-9915, CVE-2020-9925.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-11"/>
	<updated date="2020-08-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174662">SUSE bug 1174662</bugzilla>
	<cve impact="important" cvss3="4.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9862/">CVE-2020-9862</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9893/">CVE-2020-9893</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-9894/">CVE-2020-9894</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9895/">CVE-2020-9895</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-9915/">CVE-2020-9915</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-9925/">CVE-2020-9925</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495453" comment="typelib-1_0-JavaScriptCore-4_0-2.28.4-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495454" comment="typelib-1_0-WebKit2-4_0-2.28.4-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495455" comment="typelib-1_0-WebKit2WebExtension-4_0-2.28.4-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495456" comment="webkit2gtk3-devel-2.28.4-3.60.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138128" version="1" class="patch">
	<metadata>
		<title>Security update for fwupd (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174543" ref_url="https://bugzilla.suse.com/1174543" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:2259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007272.html" source="SUSE-SU"/>
		<description>

This update of fwupd fixes the following issue:

- rebuild with new UEFI signing key (bsc#1174543)
  		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-18"/>
	<updated date="2020-08-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1174543">SUSE bug 1174543</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495457" comment="fwupd-1.0.9-6.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495458" comment="fwupd-devel-1.0.9-6.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495459" comment="fwupd-lang-1.0.9-6.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495460" comment="libfwupd2-1.0.9-6.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495461" comment="typelib-1_0-Fwupd-2_0-1.0.9-6.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138129" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174091" ref_url="https://bugzilla.suse.com/1174091" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20907" ref_url="https://www.suse.com/security/cve/CVE-2019-20907/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007284.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs (bsc#1174091).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-19"/>
	<updated date="2020-08-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1174091">SUSE bug 1174091</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20907/">CVE-2019-20907</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495462" comment="python-tk-2.7.17-7.41.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138130" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027282" ref_url="https://bugzilla.suse.com/1027282" source="BUGZILLA"/>
		<reference ref_id="1041090" ref_url="https://bugzilla.suse.com/1041090" source="BUGZILLA"/>
		<reference ref_id="1042670" ref_url="https://bugzilla.suse.com/1042670" source="BUGZILLA"/>
		<reference ref_id="1068664" ref_url="https://bugzilla.suse.com/1068664" source="BUGZILLA"/>
		<reference ref_id="1073269" ref_url="https://bugzilla.suse.com/1073269" source="BUGZILLA"/>
		<reference ref_id="1073748" ref_url="https://bugzilla.suse.com/1073748" source="BUGZILLA"/>
		<reference ref_id="1078326" ref_url="https://bugzilla.suse.com/1078326" source="BUGZILLA"/>
		<reference ref_id="1078485" ref_url="https://bugzilla.suse.com/1078485" source="BUGZILLA"/>
		<reference ref_id="1079300" ref_url="https://bugzilla.suse.com/1079300" source="BUGZILLA"/>
		<reference ref_id="1081750" ref_url="https://bugzilla.suse.com/1081750" source="BUGZILLA"/>
		<reference ref_id="1083507" ref_url="https://bugzilla.suse.com/1083507" source="BUGZILLA"/>
		<reference ref_id="1084650" ref_url="https://bugzilla.suse.com/1084650" source="BUGZILLA"/>
		<reference ref_id="1086001" ref_url="https://bugzilla.suse.com/1086001" source="BUGZILLA"/>
		<reference ref_id="1088004" ref_url="https://bugzilla.suse.com/1088004" source="BUGZILLA"/>
		<reference ref_id="1088009" ref_url="https://bugzilla.suse.com/1088009" source="BUGZILLA"/>
		<reference ref_id="1109847" ref_url="https://bugzilla.suse.com/1109847" source="BUGZILLA"/>
		<reference ref_id="1111793" ref_url="https://bugzilla.suse.com/1111793" source="BUGZILLA"/>
		<reference ref_id="1113755" ref_url="https://bugzilla.suse.com/1113755" source="BUGZILLA"/>
		<reference ref_id="1122191" ref_url="https://bugzilla.suse.com/1122191" source="BUGZILLA"/>
		<reference ref_id="1129346" ref_url="https://bugzilla.suse.com/1129346" source="BUGZILLA"/>
		<reference ref_id="1130840" ref_url="https://bugzilla.suse.com/1130840" source="BUGZILLA"/>
		<reference ref_id="1130847" ref_url="https://bugzilla.suse.com/1130847" source="BUGZILLA"/>
		<reference ref_id="1138459" ref_url="https://bugzilla.suse.com/1138459" source="BUGZILLA"/>
		<reference ref_id="1141853" ref_url="https://bugzilla.suse.com/1141853" source="BUGZILLA"/>
		<reference ref_id="1149792" ref_url="https://bugzilla.suse.com/1149792" source="BUGZILLA"/>
		<reference ref_id="1149955" ref_url="https://bugzilla.suse.com/1149955" source="BUGZILLA"/>
		<reference ref_id="1153238" ref_url="https://bugzilla.suse.com/1153238" source="BUGZILLA"/>
		<reference ref_id="1153830" ref_url="https://bugzilla.suse.com/1153830" source="BUGZILLA"/>
		<reference ref_id="1159035" ref_url="https://bugzilla.suse.com/1159035" source="BUGZILLA"/>
		<reference ref_id="214983" ref_url="https://bugzilla.suse.com/214983" source="BUGZILLA"/>
		<reference ref_id="298378" ref_url="https://bugzilla.suse.com/298378" source="BUGZILLA"/>
		<reference ref_id="346490" ref_url="https://bugzilla.suse.com/346490" source="BUGZILLA"/>
		<reference ref_id="367853" ref_url="https://bugzilla.suse.com/367853" source="BUGZILLA"/>
		<reference ref_id="379534" ref_url="https://bugzilla.suse.com/379534" source="BUGZILLA"/>
		<reference ref_id="380942" ref_url="https://bugzilla.suse.com/380942" source="BUGZILLA"/>
		<reference ref_id="399190" ref_url="https://bugzilla.suse.com/399190" source="BUGZILLA"/>
		<reference ref_id="406051" ref_url="https://bugzilla.suse.com/406051" source="BUGZILLA"/>
		<reference ref_id="425138" ref_url="https://bugzilla.suse.com/425138" source="BUGZILLA"/>
		<reference ref_id="426563" ref_url="https://bugzilla.suse.com/426563" source="BUGZILLA"/>
		<reference ref_id="430761" ref_url="https://bugzilla.suse.com/430761" source="BUGZILLA"/>
		<reference ref_id="432677" ref_url="https://bugzilla.suse.com/432677" source="BUGZILLA"/>
		<reference ref_id="436966" ref_url="https://bugzilla.suse.com/436966" source="BUGZILLA"/>
		<reference ref_id="437293" ref_url="https://bugzilla.suse.com/437293" source="BUGZILLA"/>
		<reference ref_id="441088" ref_url="https://bugzilla.suse.com/441088" source="BUGZILLA"/>
		<reference ref_id="462375" ref_url="https://bugzilla.suse.com/462375" source="BUGZILLA"/>
		<reference ref_id="525295" ref_url="https://bugzilla.suse.com/525295" source="BUGZILLA"/>
		<reference ref_id="534721" ref_url="https://bugzilla.suse.com/534721" source="BUGZILLA"/>
		<reference ref_id="551715" ref_url="https://bugzilla.suse.com/551715" source="BUGZILLA"/>
		<reference ref_id="572673" ref_url="https://bugzilla.suse.com/572673" source="BUGZILLA"/>
		<reference ref_id="577032" ref_url="https://bugzilla.suse.com/577032" source="BUGZILLA"/>
		<reference ref_id="581765" ref_url="https://bugzilla.suse.com/581765" source="BUGZILLA"/>
		<reference ref_id="603255" ref_url="https://bugzilla.suse.com/603255" source="BUGZILLA"/>
		<reference ref_id="617751" ref_url="https://bugzilla.suse.com/617751" source="BUGZILLA"/>
		<reference ref_id="637176" ref_url="https://bugzilla.suse.com/637176" source="BUGZILLA"/>
		<reference ref_id="638233" ref_url="https://bugzilla.suse.com/638233" source="BUGZILLA"/>
		<reference ref_id="658604" ref_url="https://bugzilla.suse.com/658604" source="BUGZILLA"/>
		<reference ref_id="673071" ref_url="https://bugzilla.suse.com/673071" source="BUGZILLA"/>
		<reference ref_id="682554" ref_url="https://bugzilla.suse.com/682554" source="BUGZILLA"/>
		<reference ref_id="697251" ref_url="https://bugzilla.suse.com/697251" source="BUGZILLA"/>
		<reference ref_id="707667" ref_url="https://bugzilla.suse.com/707667" source="BUGZILLA"/>
		<reference ref_id="718009" ref_url="https://bugzilla.suse.com/718009" source="BUGZILLA"/>
		<reference ref_id="747125" ref_url="https://bugzilla.suse.com/747125" source="BUGZILLA"/>
		<reference ref_id="747794" ref_url="https://bugzilla.suse.com/747794" source="BUGZILLA"/>
		<reference ref_id="751718" ref_url="https://bugzilla.suse.com/751718" source="BUGZILLA"/>
		<reference ref_id="754447" ref_url="https://bugzilla.suse.com/754447" source="BUGZILLA"/>
		<reference ref_id="766778" ref_url="https://bugzilla.suse.com/766778" source="BUGZILLA"/>
		<reference ref_id="794139" ref_url="https://bugzilla.suse.com/794139" source="BUGZILLA"/>
		<reference ref_id="804978" ref_url="https://bugzilla.suse.com/804978" source="BUGZILLA"/>
		<reference ref_id="827982" ref_url="https://bugzilla.suse.com/827982" source="BUGZILLA"/>
		<reference ref_id="831442" ref_url="https://bugzilla.suse.com/831442" source="BUGZILLA"/>
		<reference ref_id="834601" ref_url="https://bugzilla.suse.com/834601" source="BUGZILLA"/>
		<reference ref_id="836739" ref_url="https://bugzilla.suse.com/836739" source="BUGZILLA"/>
		<reference ref_id="856835" ref_url="https://bugzilla.suse.com/856835" source="BUGZILLA"/>
		<reference ref_id="856836" ref_url="https://bugzilla.suse.com/856836" source="BUGZILLA"/>
		<reference ref_id="857470" ref_url="https://bugzilla.suse.com/857470" source="BUGZILLA"/>
		<reference ref_id="863741" ref_url="https://bugzilla.suse.com/863741" source="BUGZILLA"/>
		<reference ref_id="885882" ref_url="https://bugzilla.suse.com/885882" source="BUGZILLA"/>
		<reference ref_id="898572" ref_url="https://bugzilla.suse.com/898572" source="BUGZILLA"/>
		<reference ref_id="901715" ref_url="https://bugzilla.suse.com/901715" source="BUGZILLA"/>
		<reference ref_id="935856" ref_url="https://bugzilla.suse.com/935856" source="BUGZILLA"/>
		<reference ref_id="945401" ref_url="https://bugzilla.suse.com/945401" source="BUGZILLA"/>
		<reference ref_id="964182" ref_url="https://bugzilla.suse.com/964182" source="BUGZILLA"/>
		<reference ref_id="984751" ref_url="https://bugzilla.suse.com/984751" source="BUGZILLA"/>
		<reference ref_id="985177" ref_url="https://bugzilla.suse.com/985177" source="BUGZILLA"/>
		<reference ref_id="985348" ref_url="https://bugzilla.suse.com/985348" source="BUGZILLA"/>
		<reference ref_id="989523" ref_url="https://bugzilla.suse.com/989523" source="BUGZILLA"/>
		<reference ref_id="997436" ref_url="https://bugzilla.suse.com/997436" source="BUGZILLA"/>
		<reference ref_id="CVE-2007-2052" ref_url="https://www.suse.com/security/cve/CVE-2007-2052/" source="CVE"/>
		<reference ref_id="CVE-2008-1721" ref_url="https://www.suse.com/security/cve/CVE-2008-1721/" source="CVE"/>
		<reference ref_id="CVE-2008-2315" ref_url="https://www.suse.com/security/cve/CVE-2008-2315/" source="CVE"/>
		<reference ref_id="CVE-2008-2316" ref_url="https://www.suse.com/security/cve/CVE-2008-2316/" source="CVE"/>
		<reference ref_id="CVE-2008-3142" ref_url="https://www.suse.com/security/cve/CVE-2008-3142/" source="CVE"/>
		<reference ref_id="CVE-2008-3143" ref_url="https://www.suse.com/security/cve/CVE-2008-3143/" source="CVE"/>
		<reference ref_id="CVE-2008-3144" ref_url="https://www.suse.com/security/cve/CVE-2008-3144/" source="CVE"/>
		<reference ref_id="CVE-2011-1521" ref_url="https://www.suse.com/security/cve/CVE-2011-1521/" source="CVE"/>
		<reference ref_id="CVE-2011-3389" ref_url="https://www.suse.com/security/cve/CVE-2011-3389/" source="CVE"/>
		<reference ref_id="CVE-2011-4944" ref_url="https://www.suse.com/security/cve/CVE-2011-4944/" source="CVE"/>
		<reference ref_id="CVE-2012-0845" ref_url="https://www.suse.com/security/cve/CVE-2012-0845/" source="CVE"/>
		<reference ref_id="CVE-2012-1150" ref_url="https://www.suse.com/security/cve/CVE-2012-1150/" source="CVE"/>
		<reference ref_id="CVE-2013-1752" ref_url="https://www.suse.com/security/cve/CVE-2013-1752/" source="CVE"/>
		<reference ref_id="CVE-2013-1753" ref_url="https://www.suse.com/security/cve/CVE-2013-1753/" source="CVE"/>
		<reference ref_id="CVE-2013-4238" ref_url="https://www.suse.com/security/cve/CVE-2013-4238/" source="CVE"/>
		<reference ref_id="CVE-2014-1912" ref_url="https://www.suse.com/security/cve/CVE-2014-1912/" source="CVE"/>
		<reference ref_id="CVE-2014-4650" ref_url="https://www.suse.com/security/cve/CVE-2014-4650/" source="CVE"/>
		<reference ref_id="CVE-2014-7185" ref_url="https://www.suse.com/security/cve/CVE-2014-7185/" source="CVE"/>
		<reference ref_id="CVE-2016-0772" ref_url="https://www.suse.com/security/cve/CVE-2016-0772/" source="CVE"/>
		<reference ref_id="CVE-2016-1000110" ref_url="https://www.suse.com/security/cve/CVE-2016-1000110/" source="CVE"/>
		<reference ref_id="CVE-2016-5636" ref_url="https://www.suse.com/security/cve/CVE-2016-5636/" source="CVE"/>
		<reference ref_id="CVE-2016-5699" ref_url="https://www.suse.com/security/cve/CVE-2016-5699/" source="CVE"/>
		<reference ref_id="CVE-2017-1000158" ref_url="https://www.suse.com/security/cve/CVE-2017-1000158/" source="CVE"/>
		<reference ref_id="CVE-2017-18207" ref_url="https://www.suse.com/security/cve/CVE-2017-18207/" source="CVE"/>
		<reference ref_id="CVE-2018-1000030" ref_url="https://www.suse.com/security/cve/CVE-2018-1000030/" source="CVE"/>
		<reference ref_id="CVE-2018-1000802" ref_url="https://www.suse.com/security/cve/CVE-2018-1000802/" source="CVE"/>
		<reference ref_id="CVE-2018-1060" ref_url="https://www.suse.com/security/cve/CVE-2018-1060/" source="CVE"/>
		<reference ref_id="CVE-2018-1061" ref_url="https://www.suse.com/security/cve/CVE-2018-1061/" source="CVE"/>
		<reference ref_id="CVE-2018-14647" ref_url="https://www.suse.com/security/cve/CVE-2018-14647/" source="CVE"/>
		<reference ref_id="CVE-2018-20852" ref_url="https://www.suse.com/security/cve/CVE-2018-20852/" source="CVE"/>
		<reference ref_id="CVE-2019-10160" ref_url="https://www.suse.com/security/cve/CVE-2019-10160/" source="CVE"/>
		<reference ref_id="CVE-2019-16056" ref_url="https://www.suse.com/security/cve/CVE-2019-16056/" source="CVE"/>
		<reference ref_id="CVE-2019-16935" ref_url="https://www.suse.com/security/cve/CVE-2019-16935/" source="CVE"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<reference ref_id="CVE-2019-9636" ref_url="https://www.suse.com/security/cve/CVE-2019-9636/" source="CVE"/>
		<reference ref_id="CVE-2019-9947" ref_url="https://www.suse.com/security/cve/CVE-2019-9947/" source="CVE"/>
		<reference ref_id="CVE-2019-9948" ref_url="https://www.suse.com/security/cve/CVE-2019-9948/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-24"/>
	<updated date="2020-01-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027282">SUSE bug 1027282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1041090">SUSE bug 1041090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042670">SUSE bug 1042670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068664">SUSE bug 1068664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073269">SUSE bug 1073269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073748">SUSE bug 1073748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078326">SUSE bug 1078326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078485">SUSE bug 1078485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1079300">SUSE bug 1079300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081750">SUSE bug 1081750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083507">SUSE bug 1083507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084650">SUSE bug 1084650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086001">SUSE bug 1086001</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088004">SUSE bug 1088004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088009">SUSE bug 1088009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109847">SUSE bug 1109847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111793">SUSE bug 1111793</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113755">SUSE bug 1113755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122191">SUSE bug 1122191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129346">SUSE bug 1129346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130840">SUSE bug 1130840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130847">SUSE bug 1130847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138459">SUSE bug 1138459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141853">SUSE bug 1141853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149792">SUSE bug 1149792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149955">SUSE bug 1149955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153238">SUSE bug 1153238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153830">SUSE bug 1153830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159035">SUSE bug 1159035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/214983">SUSE bug 214983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/298378">SUSE bug 298378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/346490">SUSE bug 346490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/367853">SUSE bug 367853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/379534">SUSE bug 379534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/380942">SUSE bug 380942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/399190">SUSE bug 399190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/406051">SUSE bug 406051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/425138">SUSE bug 425138</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/426563">SUSE bug 426563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/430761">SUSE bug 430761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/432677">SUSE bug 432677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/436966">SUSE bug 436966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/437293">SUSE bug 437293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/441088">SUSE bug 441088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/462375">SUSE bug 462375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/525295">SUSE bug 525295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/534721">SUSE bug 534721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/551715">SUSE bug 551715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/572673">SUSE bug 572673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/577032">SUSE bug 577032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581765">SUSE bug 581765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/603255">SUSE bug 603255</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617751">SUSE bug 617751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/637176">SUSE bug 637176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638233">SUSE bug 638233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/658604">SUSE bug 658604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673071">SUSE bug 673071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/682554">SUSE bug 682554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/697251">SUSE bug 697251</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/707667">SUSE bug 707667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/718009">SUSE bug 718009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747125">SUSE bug 747125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747794">SUSE bug 747794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751718">SUSE bug 751718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754447">SUSE bug 754447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/766778">SUSE bug 766778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/794139">SUSE bug 794139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/804978">SUSE bug 804978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/827982">SUSE bug 827982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831442">SUSE bug 831442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/834601">SUSE bug 834601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/836739">SUSE bug 836739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/856835">SUSE bug 856835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/856836">SUSE bug 856836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/857470">SUSE bug 857470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/863741">SUSE bug 863741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885882">SUSE bug 885882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898572">SUSE bug 898572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901715">SUSE bug 901715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/935856">SUSE bug 935856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945401">SUSE bug 945401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964182">SUSE bug 964182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984751">SUSE bug 984751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985177">SUSE bug 985177</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985348">SUSE bug 985348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989523">SUSE bug 989523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/997436">SUSE bug 997436</bugzilla>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-2052/">CVE-2007-2052</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-1721/">CVE-2008-1721</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-2315/">CVE-2008-2315</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-2316/">CVE-2008-2316</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3142/">CVE-2008-3142</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3143/">CVE-2008-3143</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3144/">CVE-2008-3144</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1521/">CVE-2011-1521</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-3389/">CVE-2011-3389</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-4944/">CVE-2011-4944</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-0845/">CVE-2012-0845</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-1150/">CVE-2012-1150</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2013-1752/">CVE-2013-1752</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2013-1753/">CVE-2013-1753</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2013-4238/">CVE-2013-4238</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1912/">CVE-2014-1912</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-4650/">CVE-2014-4650</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7185/">CVE-2014-7185</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-0772/">CVE-2016-0772</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1000110/">CVE-2016-1000110</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5636/">CVE-2016-5636</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5699/">CVE-2016-5699</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000158/">CVE-2017-1000158</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18207/">CVE-2017-18207</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000030/">CVE-2018-1000030</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000802/">CVE-2018-1000802</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1060/">CVE-2018-1060</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1061/">CVE-2018-1061</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14647/">CVE-2018-14647</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20852/">CVE-2018-20852</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10160/">CVE-2019-10160</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16056/">CVE-2019-16056</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16935/">CVE-2019-16935</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9636/">CVE-2019-9636</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9947/">CVE-2019-9947</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9948/">CVE-2019-9948</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495092" comment="python-tk-2.7.17-7.32.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138131" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173991" ref_url="https://bugzilla.suse.com/1173991" source="BUGZILLA"/>
		<reference ref_id="1174284" ref_url="https://bugzilla.suse.com/1174284" source="BUGZILLA"/>
		<reference ref_id="1175686" ref_url="https://bugzilla.suse.com/1175686" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15663" ref_url="https://www.suse.com/security/cve/CVE-2020-15663/" source="CVE"/>
		<reference ref_id="CVE-2020-15664" ref_url="https://www.suse.com/security/cve/CVE-2020-15664/" source="CVE"/>
		<reference ref_id="CVE-2020-15670" ref_url="https://www.suse.com/security/cve/CVE-2020-15670/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007378.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2

- Fixed Firefox tab crash in FIPS mode (bsc#1174284).

- Fix broken translation-loading (bsc#1173991) 
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-07"/>
	<updated date="2020-09-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173991">SUSE bug 1173991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174284">SUSE bug 1174284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175686">SUSE bug 1175686</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15663/">CVE-2020-15663</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15664/">CVE-2020-15664</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15670/">CVE-2020-15670</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495463" comment="MozillaFirefox-78.2.0-3.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495464" comment="MozillaFirefox-devel-78.2.0-3.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495465" comment="MozillaFirefox-translations-common-78.2.0-3.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495466" comment="MozillaFirefox-translations-other-78.2.0-3.105.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138132" version="1" class="patch">
	<metadata>
		<title>Security update for libjpeg-turbo (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172491" ref_url="https://bugzilla.suse.com/1172491" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13790" ref_url="https://www.suse.com/security/cve/CVE-2020-13790/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007380.html" source="SUSE-SU"/>
		<description>
This update for libjpeg-turbo fixes the following issues:

- CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file (bsc#1172491).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-08"/>
	<updated date="2020-09-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172491">SUSE bug 1172491</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13790/">CVE-2020-13790</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495467" comment="libjpeg8-32bit-8.1.2-5.15.7 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138133" version="1" class="patch">
	<metadata>
		<title>Security update for jasper (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1010979" ref_url="https://bugzilla.suse.com/1010979" source="BUGZILLA"/>
		<reference ref_id="1010980" ref_url="https://bugzilla.suse.com/1010980" source="BUGZILLA"/>
		<reference ref_id="1020451" ref_url="https://bugzilla.suse.com/1020451" source="BUGZILLA"/>
		<reference ref_id="1020456" ref_url="https://bugzilla.suse.com/1020456" source="BUGZILLA"/>
		<reference ref_id="1020458" ref_url="https://bugzilla.suse.com/1020458" source="BUGZILLA"/>
		<reference ref_id="1020460" ref_url="https://bugzilla.suse.com/1020460" source="BUGZILLA"/>
		<reference ref_id="1045450" ref_url="https://bugzilla.suse.com/1045450" source="BUGZILLA"/>
		<reference ref_id="1057152" ref_url="https://bugzilla.suse.com/1057152" source="BUGZILLA"/>
		<reference ref_id="1088278" ref_url="https://bugzilla.suse.com/1088278" source="BUGZILLA"/>
		<reference ref_id="1114498" ref_url="https://bugzilla.suse.com/1114498" source="BUGZILLA"/>
		<reference ref_id="1115637" ref_url="https://bugzilla.suse.com/1115637" source="BUGZILLA"/>
		<reference ref_id="1117328" ref_url="https://bugzilla.suse.com/1117328" source="BUGZILLA"/>
		<reference ref_id="1120805" ref_url="https://bugzilla.suse.com/1120805" source="BUGZILLA"/>
		<reference ref_id="1120807" ref_url="https://bugzilla.suse.com/1120807" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-9398" ref_url="https://www.suse.com/security/cve/CVE-2016-9398/" source="CVE"/>
		<reference ref_id="CVE-2016-9399" ref_url="https://www.suse.com/security/cve/CVE-2016-9399/" source="CVE"/>
		<reference ref_id="CVE-2017-14132" ref_url="https://www.suse.com/security/cve/CVE-2017-14132/" source="CVE"/>
		<reference ref_id="CVE-2017-5499" ref_url="https://www.suse.com/security/cve/CVE-2017-5499/" source="CVE"/>
		<reference ref_id="CVE-2017-5503" ref_url="https://www.suse.com/security/cve/CVE-2017-5503/" source="CVE"/>
		<reference ref_id="CVE-2017-5504" ref_url="https://www.suse.com/security/cve/CVE-2017-5504/" source="CVE"/>
		<reference ref_id="CVE-2017-5505" ref_url="https://www.suse.com/security/cve/CVE-2017-5505/" source="CVE"/>
		<reference ref_id="CVE-2017-9782" ref_url="https://www.suse.com/security/cve/CVE-2017-9782/" source="CVE"/>
		<reference ref_id="CVE-2018-18873" ref_url="https://www.suse.com/security/cve/CVE-2018-18873/" source="CVE"/>
		<reference ref_id="CVE-2018-19139" ref_url="https://www.suse.com/security/cve/CVE-2018-19139/" source="CVE"/>
		<reference ref_id="CVE-2018-19543" ref_url="https://www.suse.com/security/cve/CVE-2018-19543/" source="CVE"/>
		<reference ref_id="CVE-2018-20570" ref_url="https://www.suse.com/security/cve/CVE-2018-20570/" source="CVE"/>
		<reference ref_id="CVE-2018-20622" ref_url="https://www.suse.com/security/cve/CVE-2018-20622/" source="CVE"/>
		<reference ref_id="CVE-2018-9252" ref_url="https://www.suse.com/security/cve/CVE-2018-9252/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<description>
This update for jasper fixes the following issues:

- CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979).
- CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980).
- CVE-2017-5499: Validate component depth bit (bsc#1020451).
- CVE-2017-5503: Check bounds in jas_seq2d_bindsub() (bsc#1020456).
- CVE-2017-5504: Check bounds in jas_seq2d_bindsub() (bsc#1020458).
- CVE-2017-5505: Check bounds in jas_seq2d_bindsub() (bsc#1020460).
- CVE-2017-14132: Fix heap base overflow in by checking components (bsc#1057152).
- CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize (bsc#1088278).
- CVE-2018-18873: Fix null pointer deref in ras_putdatastd (bsc#1114498).
- CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms (bsc#1115637).
- CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup (bsc#1117328).
- CVE-2018-20570: Fix heap based buffer over-read in jp2_encode (bsc#1120807).
- CVE-2018-20622: Fix memory leak in jas_malloc.c (bsc#1120805).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-21"/>
	<updated date="2020-09-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1010979">SUSE bug 1010979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010980">SUSE bug 1010980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020451">SUSE bug 1020451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020456">SUSE bug 1020456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020458">SUSE bug 1020458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020460">SUSE bug 1020460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1045450">SUSE bug 1045450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057152">SUSE bug 1057152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088278">SUSE bug 1088278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114498">SUSE bug 1114498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115637">SUSE bug 1115637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117328">SUSE bug 1117328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120805">SUSE bug 1120805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120807">SUSE bug 1120807</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9398/">CVE-2016-9398</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9399/">CVE-2016-9399</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14132/">CVE-2017-14132</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5499/">CVE-2017-5499</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5503/">CVE-2017-5503</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5504/">CVE-2017-5504</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5505/">CVE-2017-5505</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9782/">CVE-2017-9782</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18873/">CVE-2018-18873</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19139/">CVE-2018-19139</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19543/">CVE-2018-19543</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20570/">CVE-2018-20570</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20622/">CVE-2018-20622</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9252/">CVE-2018-9252</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495468" comment="libjasper-devel-2.0.14-3.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138134" version="1" class="patch">
	<metadata>
		<title>Security update for libqt5-qtbase (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172515" ref_url="https://bugzilla.suse.com/1172515" source="BUGZILLA"/>
		<reference ref_id="1176315" ref_url="https://bugzilla.suse.com/1176315" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-17507" ref_url="https://www.suse.com/security/cve/CVE-2020-17507/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2741-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007478.html" source="SUSE-SU"/>
		<description>
This update for libqt5-qtbase fixes the following issues:

- CVE-2020-17507: Fixed a buffer overflow in XBM parser (bsc#1176315)
- Made handling of XDG_RUNTIME_DIR more secure (bsc#1172515)	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-24"/>
	<updated date="2020-09-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172515">SUSE bug 1172515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176315">SUSE bug 1176315</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-17507/">CVE-2020-17507</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495469" comment="libQt5OpenGLExtensions-devel-static-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495470" comment="libQt5Sql5-mysql-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495471" comment="libQt5Sql5-postgresql-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495472" comment="libQt5Sql5-unixODBC-5.9.7-13.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495473" comment="libqt5-qtbase-platformtheme-gtk3-5.9.7-13.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138135" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1146608" ref_url="https://bugzilla.suse.com/1146608" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14973" ref_url="https://www.suse.com/security/cve/CVE-2019-14973/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007480.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2019-14973: Fixed an improper check which was depended on the compiler
  which could have led to integer overflow (bsc#1146608).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-24"/>
	<updated date="2020-09-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1146608">SUSE bug 1146608</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14973/">CVE-2019-14973</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495474" comment="libtiff5-32bit-4.0.9-5.30.28 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138136" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1167976" ref_url="https://bugzilla.suse.com/1167976" source="BUGZILLA"/>
		<reference ref_id="1173986" ref_url="https://bugzilla.suse.com/1173986" source="BUGZILLA"/>
		<reference ref_id="1174420" ref_url="https://bugzilla.suse.com/1174420" source="BUGZILLA"/>
		<reference ref_id="1176756" ref_url="https://bugzilla.suse.com/1176756" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15673" ref_url="https://www.suse.com/security/cve/CVE-2020-15673/" source="CVE"/>
		<reference ref_id="CVE-2020-15676" ref_url="https://www.suse.com/security/cve/CVE-2020-15676/" source="CVE"/>
		<reference ref_id="CVE-2020-15677" ref_url="https://www.suse.com/security/cve/CVE-2020-15677/" source="CVE"/>
		<reference ref_id="CVE-2020-15678" ref_url="https://www.suse.com/security/cve/CVE-2020-15678/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2747-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-September/016248.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

-Firefox was updated to 78.3.0 ESR (bsc#1176756, MFSA 2020-43)
   - CVE-2020-15677: Download origin spoofing via redirect
   - CVE-2020-15676: Fixed an XSS when pasting attacker-controlled data into a
     contenteditable element 
   - CVE-2020-15678: When recursing through layers while scrolling, an iterator
     may have become invalid, resulting in a potential use-after-free scenario
   - CVE-2020-15673: Fixed memory safety bugs 
- Enhance fix for wayland-detection (bsc#1174420)
- Attempt to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (bsc#1173986, bsc#1167976)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-25"/>
	<updated date="2020-09-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1167976">SUSE bug 1167976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173986">SUSE bug 1173986</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174420">SUSE bug 1174420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176756">SUSE bug 1176756</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15673/">CVE-2020-15673</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15676/">CVE-2020-15676</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15677/">CVE-2020-15677</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15678/">CVE-2020-15678</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495475" comment="MozillaFirefox-78.3.0-3.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495476" comment="MozillaFirefox-devel-78.3.0-3.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495477" comment="MozillaFirefox-translations-common-78.3.0-3.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495478" comment="MozillaFirefox-translations-other-78.3.0-3.108.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138137" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159861" ref_url="https://bugzilla.suse.com/1159861" source="BUGZILLA"/>
		<reference ref_id="1160369" ref_url="https://bugzilla.suse.com/1160369" source="BUGZILLA"/>
		<reference ref_id="1161194" ref_url="https://bugzilla.suse.com/1161194" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19948" ref_url="https://www.suse.com/security/cve/CVE-2019-19948/" source="CVE"/>
		<reference ref_id="CVE-2019-19949" ref_url="https://www.suse.com/security/cve/CVE-2019-19949/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006417.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

Security issue fixed:

- CVE-2019-19948: Fixed a heap-based buffer overflow in WriteSGIImage() (bsc#1159861).
- CVE-2019-19949: Fixed a heap-based buffer over-read in WritePNGImage() (bsc#1160369).

Non-security issue fixed:

- Fixed an issue where converting tiff to png would lead to unviewable files (bsc#1161194).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-30"/>
	<updated date="2020-01-30"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1159861">SUSE bug 1159861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160369">SUSE bug 1160369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161194">SUSE bug 1161194</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19948/">CVE-2019-19948</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-19949/">CVE-2019-19949</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495093" comment="ImageMagick-7.0.7.34-3.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495094" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495096" comment="ImageMagick-devel-7.0.7.34-3.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495097" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495098" comment="libMagick++-devel-7.0.7.34-3.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495099" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495100" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.79.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138138" version="1" class="patch">
	<metadata>
		<title>Security update for tigervnc (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176733" ref_url="https://bugzilla.suse.com/1176733" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26117" ref_url="https://www.suse.com/security/cve/CVE-2020-26117/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2880-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007537.html" source="SUSE-SU"/>
		<description>
This update for tigervnc fixes the following issues:

- CVE-2020-26117: Server certificates were stored as certiticate
  authorities, allowing malicious owners of these certificates
  to impersonate any server after a client had added an exception
  (bsc#1176733)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-09"/>
	<updated date="2020-10-09"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1176733">SUSE bug 1176733</bugzilla>
	<cve impact="critical" cvss3="9.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26117/">CVE-2020-26117</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495479" comment="libXvnc-devel-1.9.0-19.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138139" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176756" ref_url="https://bugzilla.suse.com/1176756" source="BUGZILLA"/>
		<reference ref_id="1177872" ref_url="https://bugzilla.suse.com/1177872" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15683" ref_url="https://www.suse.com/security/cve/CVE-2020-15683/" source="CVE"/>
		<reference ref_id="CVE-2020-15969" ref_url="https://www.suse.com/security/cve/CVE-2020-15969/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3022-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007616.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes MFSA 2020-46 (bsc#1177872, bsc#1176756)
  * CVE-2020-15969 Use-after-free in usersctp
  * CVE-2020-15683 Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4
  * Fixed: Fixed legacy preferences not being properly applied when set via GPO
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-23"/>
	<updated date="2020-10-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176756">SUSE bug 1176756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177872">SUSE bug 1177872</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15683/">CVE-2020-15683</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15969/">CVE-2020-15969</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495480" comment="MozillaFirefox-78.4.0-3.113.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495481" comment="MozillaFirefox-devel-78.4.0-3.113.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495482" comment="MozillaFirefox-translations-common-78.4.0-3.113.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495483" comment="MozillaFirefox-translations-other-78.4.0-3.113.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138140" version="1" class="patch">
	<metadata>
		<title>Security update for sane-backends (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172524" ref_url="https://bugzilla.suse.com/1172524" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12861" ref_url="https://www.suse.com/security/cve/CVE-2020-12861/" source="CVE"/>
		<reference ref_id="CVE-2020-12862" ref_url="https://www.suse.com/security/cve/CVE-2020-12862/" source="CVE"/>
		<reference ref_id="CVE-2020-12863" ref_url="https://www.suse.com/security/cve/CVE-2020-12863/" source="CVE"/>
		<reference ref_id="CVE-2020-12864" ref_url="https://www.suse.com/security/cve/CVE-2020-12864/" source="CVE"/>
		<reference ref_id="CVE-2020-12865" ref_url="https://www.suse.com/security/cve/CVE-2020-12865/" source="CVE"/>
		<reference ref_id="CVE-2020-12866" ref_url="https://www.suse.com/security/cve/CVE-2020-12866/" source="CVE"/>
		<reference ref_id="CVE-2020-12867" ref_url="https://www.suse.com/security/cve/CVE-2020-12867/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007652.html" source="SUSE-SU"/>
		<description>
This update for sane-backends fixes the following issues:

sane-backends was updated to 1.0.31 to further improve hardware enablement for scanner devices (jsc#ECO-2418 jsc#SLE-15561 jsc#SLE-15560)
and also fix various security issues:

- CVE-2020-12861,CVE-2020-12865: Fixed an out of bounds write (bsc#1172524)
- CVE-2020-12862,CVE-2020-12863,CVE-2020-12864,: Fixed an out of bounds read (bsc#1172524)
- CVE-2020-12866,CVE-2020-12867: Fixed a null pointer dereference (bsc#1172524)

The upstream changelogs can be found here:

- https://gitlab.com/sane-project/backends/-/releases/1.0.28
- https://gitlab.com/sane-project/backends/-/releases/1.0.29
- https://gitlab.com/sane-project/backends/-/releases/1.0.30
- https://gitlab.com/sane-project/backends/-/releases/1.0.31
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-28"/>
	<updated date="2020-10-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172524">SUSE bug 1172524</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12861/">CVE-2020-12861</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12862/">CVE-2020-12862</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12863/">CVE-2020-12863</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12864/">CVE-2020-12864</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12865/">CVE-2020-12865</cve>
	<cve impact="important" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12866/">CVE-2020-12866</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12867/">CVE-2020-12867</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495484" comment="sane-backends-1.0.31-6.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495485" comment="sane-backends-autoconfig-1.0.31-6.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495486" comment="sane-backends-devel-1.0.31-6.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138141" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177211" ref_url="https://bugzilla.suse.com/1177211" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26116" ref_url="https://www.suse.com/security/cve/CVE-2020-26116/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007679.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- bsc#1177211 (CVE-2020-26116) no longer allowing special characters in the method parameter 
  of HTTPConnection.putrequest in httplib, stopping injection of headers.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-02"/>
	<updated date="2020-11-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177211">SUSE bug 1177211</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26116/">CVE-2020-26116</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495487" comment="python-tk-2.7.17-7.44.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138142" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178067" ref_url="https://bugzilla.suse.com/1178067" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27560" ref_url="https://www.suse.com/security/cve/CVE-2020-27560/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007698.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

- CVE-2020-27560: Fixed potential denial of service in OptimizeLayerFrames function in MagickCore/layer.c (bsc#1178067).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1178067">SUSE bug 1178067</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27560/">CVE-2020-27560</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495488" comment="ImageMagick-7.0.7.34-3.85.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495489" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.85.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495490" comment="ImageMagick-devel-7.0.7.34-3.85.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495491" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.85.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495492" comment="libMagick++-devel-7.0.7.34-3.85.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495493" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.85.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495494" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.85.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138143" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177895" ref_url="https://bugzilla.suse.com/1177895" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27153" ref_url="https://www.suse.com/security/cve/CVE-2020-27153/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3165-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007701.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2020-27153: Fixed possible crash on disconnect (bsc#1177895).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177895">SUSE bug 1177895</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-27153/">CVE-2020-27153</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495495" comment="bluez-5.48-5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495496" comment="bluez-devel-5.48-5.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138144" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175204" ref_url="https://bugzilla.suse.com/1175204" source="BUGZILLA"/>
		<reference ref_id="1176908" ref_url="https://bugzilla.suse.com/1176908" source="BUGZILLA"/>
		<reference ref_id="1176909" ref_url="https://bugzilla.suse.com/1176909" source="BUGZILLA"/>
		<reference ref_id="1176910" ref_url="https://bugzilla.suse.com/1176910" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-17498" ref_url="https://www.suse.com/security/cve/CVE-2020-17498/" source="CVE"/>
		<reference ref_id="CVE-2020-25862" ref_url="https://www.suse.com/security/cve/CVE-2020-25862/" source="CVE"/>
		<reference ref_id="CVE-2020-25863" ref_url="https://www.suse.com/security/cve/CVE-2020-25863/" source="CVE"/>
		<reference ref_id="CVE-2020-25866" ref_url="https://www.suse.com/security/cve/CVE-2020-25866/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007700.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

- Update to wireshark 3.2.7:
  * CVE-2020-25863: MIME Multipart dissector crash (bsc#1176908)
  * CVE-2020-25862: TCP dissector crash (bsc#1176909)
  * CVE-2020-25866: BLIP dissector crash (bsc#1176910)
  * CVE-2020-17498: Kafka dissector crash (bsc#1175204)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175204">SUSE bug 1175204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176908">SUSE bug 1176908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176909">SUSE bug 1176909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176910">SUSE bug 1176910</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-17498/">CVE-2020-17498</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25862/">CVE-2020-25862</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25863/">CVE-2020-25863</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25866/">CVE-2020-25866</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495497" comment="wireshark-devel-3.2.7-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495498" comment="wireshark-ui-qt-3.2.7-3.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138145" version="1" class="patch">
	<metadata>
		<title>Security update for SDL (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141844" ref_url="https://bugzilla.suse.com/1141844" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13616" ref_url="https://www.suse.com/security/cve/CVE-2019-13616/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3261-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007740.html" source="SUSE-SU"/>
		<description>
This update for SDL fixes the following issues:

Security issue fixed:

- CVE-2019-13616: Fixed heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit (bsc#1141844).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-10"/>
	<updated date="2020-11-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141844">SUSE bug 1141844</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13616/">CVE-2019-13616</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495499" comment="libSDL-1_2-0-1.2.15-3.12.73 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495500" comment="libSDL-devel-1.2.15-3.12.73 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138146" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178588" ref_url="https://bugzilla.suse.com/1178588" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26950" ref_url="https://www.suse.com/security/cve/CVE-2020-26950/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007766.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-12"/>
	<updated date="2020-11-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178588">SUSE bug 1178588</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26950/">CVE-2020-26950</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495501" comment="MozillaFirefox-78.4.1-3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495502" comment="MozillaFirefox-devel-78.4.1-3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495503" comment="MozillaFirefox-translations-common-78.4.1-3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495504" comment="MozillaFirefox-translations-other-78.4.1-3.116.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138147" version="1" class="patch">
	<metadata>
		<title>Security update for raptor (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178593" ref_url="https://bugzilla.suse.com/1178593" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18926" ref_url="https://www.suse.com/security/cve/CVE-2017-18926/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3350-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007783.html" source="SUSE-SU"/>
		<description>
This update for raptor fixes the following issues:

- Fixed a heap overflow vulnerability (bsc#1178593, CVE-2017-18926).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-16"/>
	<updated date="2020-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178593">SUSE bug 1178593</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18926/">CVE-2017-18926</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495505" comment="libraptor-devel-2.0.15-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495506" comment="libraptor2-0-2.0.15-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495507" comment="raptor-2.0.15-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138148" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177406" ref_url="https://bugzilla.suse.com/1177406" source="BUGZILLA"/>
		<reference ref_id="1178291" ref_url="https://bugzilla.suse.com/1178291" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26575" ref_url="https://www.suse.com/security/cve/CVE-2020-26575/" source="CVE"/>
		<reference ref_id="CVE-2020-28030" ref_url="https://www.suse.com/security/cve/CVE-2020-28030/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3376-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007794.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

- wireshark was updated to 3.2.8:
  - CVE-2020-26575: Fixed an issue where FBZERO dissector was entering in infinite loop (bsc#1177406)
  - CVE-2020-28030: Fixed an issue where GQUIC dissector was crashing (bsc#1178291)
  * Infinite memory allocation while parsing this tcp packet
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177406">SUSE bug 1177406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178291">SUSE bug 1178291</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26575/">CVE-2020-26575</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28030/">CVE-2020-28030</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495508" comment="wireshark-devel-3.2.8-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495509" comment="wireshark-ui-qt-3.2.8-3.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138149" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178824" ref_url="https://bugzilla.suse.com/1178824" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15999" ref_url="https://www.suse.com/security/cve/CVE-2020-15999/" source="CVE"/>
		<reference ref_id="CVE-2020-16012" ref_url="https://www.suse.com/security/cve/CVE-2020-16012/" source="CVE"/>
		<reference ref_id="CVE-2020-26951" ref_url="https://www.suse.com/security/cve/CVE-2020-26951/" source="CVE"/>
		<reference ref_id="CVE-2020-26953" ref_url="https://www.suse.com/security/cve/CVE-2020-26953/" source="CVE"/>
		<reference ref_id="CVE-2020-26956" ref_url="https://www.suse.com/security/cve/CVE-2020-26956/" source="CVE"/>
		<reference ref_id="CVE-2020-26958" ref_url="https://www.suse.com/security/cve/CVE-2020-26958/" source="CVE"/>
		<reference ref_id="CVE-2020-26959" ref_url="https://www.suse.com/security/cve/CVE-2020-26959/" source="CVE"/>
		<reference ref_id="CVE-2020-26960" ref_url="https://www.suse.com/security/cve/CVE-2020-26960/" source="CVE"/>
		<reference ref_id="CVE-2020-26961" ref_url="https://www.suse.com/security/cve/CVE-2020-26961/" source="CVE"/>
		<reference ref_id="CVE-2020-26965" ref_url="https://www.suse.com/security/cve/CVE-2020-26965/" source="CVE"/>
		<reference ref_id="CVE-2020-26966" ref_url="https://www.suse.com/security/cve/CVE-2020-26966/" source="CVE"/>
		<reference ref_id="CVE-2020-26968" ref_url="https://www.suse.com/security/cve/CVE-2020-26968/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007797.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.5.0 ESR (bsc#1178824)
  * CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code
  * CVE-2020-16012: Variable time processing of cross-origin images during drawImage calls
  * CVE-2020-26953: Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956: XSS through paste (manual and clipboard API)
  * CVE-2020-26958: Requests intercepted through ServiceWorkers lacked MIME type restrictions
  * CVE-2020-26959: Use-after-free in WebRequestService
  * CVE-2020-26960: Potential use-after-free in uses of nsTArray
  * CVE-2020-15999: Heap buffer overflow in freetype
  * CVE-2020-26961: DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965: Software keyboards may have remembered typed passwords
  * CVE-2020-26966: Single-word search queries were also broadcast to local network
  * CVE-2020-26968: Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178824">SUSE bug 1178824</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15999/">CVE-2020-15999</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16012/">CVE-2020-16012</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26951/">CVE-2020-26951</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26953/">CVE-2020-26953</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26956/">CVE-2020-26956</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26958/">CVE-2020-26958</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26959/">CVE-2020-26959</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26960/">CVE-2020-26960</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26961/">CVE-2020-26961</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-26965/">CVE-2020-26965</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-26966/">CVE-2020-26966</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26968/">CVE-2020-26968</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495510" comment="MozillaFirefox-78.5.0-3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495511" comment="MozillaFirefox-devel-78.5.0-3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495512" comment="MozillaFirefox-translations-common-78.5.0-3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495513" comment="MozillaFirefox-translations-other-78.5.0-3.119.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138150" version="1" class="patch">
	<metadata>
		<title>Security update for libqt5-qtbase (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1158667" ref_url="https://bugzilla.suse.com/1158667" source="BUGZILLA"/>
		<reference ref_id="1161167" ref_url="https://bugzilla.suse.com/1161167" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0569" ref_url="https://www.suse.com/security/cve/CVE-2020-0569/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006460.html" source="SUSE-SU"/>
		<description>
This update for libqt5-qtbase fixes the following issues:

Security issue fixed:	  

- CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD (bsc#1161167).

Other issue fixed:

- Fixed comboboxes not showing in correct location (bsc#1158667).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-06"/>
	<updated date="2020-02-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1158667">SUSE bug 1158667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161167">SUSE bug 1161167</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0569/">CVE-2020-0569</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495514" comment="libQt5OpenGLExtensions-devel-static-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495515" comment="libQt5Sql5-mysql-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495516" comment="libQt5Sql5-postgresql-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495517" comment="libQt5Sql5-unixODBC-5.9.7-13.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495518" comment="libqt5-qtbase-platformtheme-gtk3-5.9.7-13.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138151" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007904.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-02"/>
	<updated date="2020-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495519" comment="python-tk-2.7.17-7.47.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138152" version="1" class="patch">
	<metadata>
		<title>Security update for gdm (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178150" ref_url="https://bugzilla.suse.com/1178150" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-16125" ref_url="https://www.suse.com/security/cve/CVE-2020-16125/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008065.html" source="SUSE-SU"/>
		<description>
This update for gdm fixes the following issues:

- CVE-2020-16125: Fixed a privilege escalation (bsc#1178150).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-14"/>
	<updated date="2020-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178150">SUSE bug 1178150</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16125/">CVE-2020-16125</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495520" comment="gdm-3.26.2.1-13.39.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495521" comment="gdm-devel-3.26.2.1-13.39.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495522" comment="gdm-lang-3.26.2.1-13.39.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495523" comment="gdmflexiserver-3.26.2.1-13.39.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495524" comment="libgdm1-3.26.2.1-13.39.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495525" comment="typelib-1_0-Gdm-1_0-3.26.2.1-13.39.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138153" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1163368" ref_url="https://bugzilla.suse.com/1163368" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-6796" ref_url="https://www.suse.com/security/cve/CVE-2020-6796/" source="CVE"/>
		<reference ref_id="CVE-2020-6797" ref_url="https://www.suse.com/security/cve/CVE-2020-6797/" source="CVE"/>
		<reference ref_id="CVE-2020-6798" ref_url="https://www.suse.com/security/cve/CVE-2020-6798/" source="CVE"/>
		<reference ref_id="CVE-2020-6799" ref_url="https://www.suse.com/security/cve/CVE-2020-6799/" source="CVE"/>
		<reference ref_id="CVE-2020-6800" ref_url="https://www.suse.com/security/cve/CVE-2020-6800/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0383-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006481.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-17"/>
	<updated date="2020-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1163368">SUSE bug 1163368</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6796/">CVE-2020-6796</cve>
	<cve impact="important" cvss3="5.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6797/">CVE-2020-6797</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-6798/">CVE-2020-6798</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6799/">CVE-2020-6799</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6800/">CVE-2020-6800</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495106" comment="MozillaFirefox-68.5.0-3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495526" comment="MozillaFirefox-devel-68.5.0-3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495108" comment="MozillaFirefox-translations-common-68.5.0-3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495109" comment="MozillaFirefox-translations-other-68.5.0-3.72.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138154" version="1" class="patch">
	<metadata>
		<title>Security update for PackageKit (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1169739" ref_url="https://bugzilla.suse.com/1169739" source="BUGZILLA"/>
		<reference ref_id="1176930" ref_url="https://bugzilla.suse.com/1176930" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-16121" ref_url="https://www.suse.com/security/cve/CVE-2020-16121/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3845-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008075.html" source="SUSE-SU"/>
		<description>
This update for PackageKit fixes the following issue:

- CVE-2020-16121: Fixed an  Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal (bsc#1176930).
- Notify service manager when it shutdown and cleanup temporary files when PackageKit quits. (bsc#1169739)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-16"/>
	<updated date="2020-12-16"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1169739">SUSE bug 1169739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176930">SUSE bug 1176930</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16121/">CVE-2020-16121</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495527" comment="PackageKit-1.1.10-12.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495528" comment="PackageKit-backend-zypp-1.1.10-12.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495529" comment="PackageKit-devel-1.1.10-12.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495530" comment="PackageKit-lang-1.1.10-12.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495531" comment="libpackagekit-glib2-18-1.1.10-12.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495532" comment="libpackagekit-glib2-devel-1.1.10-12.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495533" comment="typelib-1_0-PackageKitGlib-1_0-1.1.10-12.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138155" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171531" ref_url="https://bugzilla.suse.com/1171531" source="BUGZILLA"/>
		<reference ref_id="1177087" ref_url="https://bugzilla.suse.com/1177087" source="BUGZILLA"/>
		<reference ref_id="1179122" ref_url="https://bugzilla.suse.com/1179122" source="BUGZILLA"/>
		<reference ref_id="1179451" ref_url="https://bugzilla.suse.com/1179451" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13543" ref_url="https://www.suse.com/security/cve/CVE-2020-13543/" source="CVE"/>
		<reference ref_id="CVE-2020-13584" ref_url="https://www.suse.com/security/cve/CVE-2020-13584/" source="CVE"/>
		<reference ref_id="CVE-2020-9948" ref_url="https://www.suse.com/security/cve/CVE-2020-9948/" source="CVE"/>
		<reference ref_id="CVE-2020-9951" ref_url="https://www.suse.com/security/cve/CVE-2020-9951/" source="CVE"/>
		<reference ref_id="CVE-2020-9983" ref_url="https://www.suse.com/security/cve/CVE-2020-9983/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008080.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

-webkit2gtk3 was updated to version 2.30.3 (bsc#1179122 bsc#1179451):
   - CVE-2021-13543: Fixed a use after free which could have led to arbitrary code execution.
   - CVE-2021-13584: Fixed a use after free which could have led to arbitrary code execution.
   - CVE-2021-9948: Fixed a type confusion which could have led to arbitrary code execution.
   - CVE-2021-9951: Fixed a use after free which could have led to arbitrary code execution.
   - CVE-2021-9983: Fixed an out of bounds write which could have led to arbitrary code execution.
   - Have the libwebkit2gtk package require libjavascriptcoregtk of
     the same version (bsc#1171531).
   - Enable c_loop on aarch64: currently needed for compilation to
     succeed with JIT disabled. Also disable sampling profiler, since
     it conflicts with c_loop (bsc#1177087).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-17"/>
	<updated date="2020-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171531">SUSE bug 1171531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177087">SUSE bug 1177087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179122">SUSE bug 1179122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179451">SUSE bug 1179451</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13543/">CVE-2020-13543</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13584/">CVE-2020-13584</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9948/">CVE-2020-9948</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9951/">CVE-2020-9951</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9983/">CVE-2020-9983</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495534" comment="typelib-1_0-JavaScriptCore-4_0-2.30.3-3.63.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495535" comment="typelib-1_0-WebKit2-4_0-2.30.3-3.63.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495536" comment="typelib-1_0-WebKit2WebExtension-4_0-2.30.3-3.63.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495537" comment="webkit2gtk3-devel-2.30.3-3.63.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138156" version="1" class="patch">
	<metadata>
		<title>Security update for openssh (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1115550" ref_url="https://bugzilla.suse.com/1115550" source="BUGZILLA"/>
		<reference ref_id="1139398" ref_url="https://bugzilla.suse.com/1139398" source="BUGZILLA"/>
		<reference ref_id="1142000" ref_url="https://bugzilla.suse.com/1142000" source="BUGZILLA"/>
		<reference ref_id="1148566" ref_url="https://bugzilla.suse.com/1148566" source="BUGZILLA"/>
		<reference ref_id="1173513" ref_url="https://bugzilla.suse.com/1173513" source="BUGZILLA"/>
		<reference ref_id="1174162" ref_url="https://bugzilla.suse.com/1174162" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14145" ref_url="https://www.suse.com/security/cve/CVE-2020-14145/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3866-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008083.html" source="SUSE-SU"/>
		<description>
This update for openssh fixes the following issues:

- CVE-2020-14145: Fixed a potential information leak during host key exchange (bsc#1173513).
- Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install (bsc#1142000)
- Fixed an issue where oracle cluster with  cluvfy using 'scp' failing/missinterpreted (bsc#1148566).
- Fixed sshd termination of multichannel sessions with non-root users (bsc#1115550,bsc#1174162).
- Added speculative hardening for key storage (bsc#1139398).  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-17"/>
	<updated date="2020-12-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1115550">SUSE bug 1115550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139398">SUSE bug 1139398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142000">SUSE bug 1142000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148566">SUSE bug 1148566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173513">SUSE bug 1173513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174162">SUSE bug 1174162</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14145/">CVE-2020-14145</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495538" comment="openssh-askpass-gnome-7.9p1-6.22.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138157" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1180039" ref_url="https://bugzilla.suse.com/1180039" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-16042" ref_url="https://www.suse.com/security/cve/CVE-2020-16042/" source="CVE"/>
		<reference ref_id="CVE-2020-26971" ref_url="https://www.suse.com/security/cve/CVE-2020-26971/" source="CVE"/>
		<reference ref_id="CVE-2020-26973" ref_url="https://www.suse.com/security/cve/CVE-2020-26973/" source="CVE"/>
		<reference ref_id="CVE-2020-26974" ref_url="https://www.suse.com/security/cve/CVE-2020-26974/" source="CVE"/>
		<reference ref_id="CVE-2020-26978" ref_url="https://www.suse.com/security/cve/CVE-2020-26978/" source="CVE"/>
		<reference ref_id="CVE-2020-35111" ref_url="https://www.suse.com/security/cve/CVE-2020-35111/" source="CVE"/>
		<reference ref_id="CVE-2020-35112" ref_url="https://www.suse.com/security/cve/CVE-2020-35112/" source="CVE"/>
		<reference ref_id="CVE-2020-35113" ref_url="https://www.suse.com/security/cve/CVE-2020-35113/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3902-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008103.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-21"/>
	<updated date="2020-12-21"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1180039">SUSE bug 1180039</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16042/">CVE-2020-16042</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26971/">CVE-2020-26971</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26973/">CVE-2020-26973</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26974/">CVE-2020-26974</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26978/">CVE-2020-26978</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-35111/">CVE-2020-35111</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35112/">CVE-2020-35112</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35113/">CVE-2020-35113</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495539" comment="MozillaFirefox-78.6.0-3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495540" comment="MozillaFirefox-devel-78.6.0-3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495541" comment="MozillaFirefox-translations-common-78.6.0-3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495542" comment="MozillaFirefox-translations-other-78.6.0-3.122.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138158" version="1" class="patch">
	<metadata>
		<title>Security update for openexr (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1179879" ref_url="https://bugzilla.suse.com/1179879" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-16587" ref_url="https://www.suse.com/security/cve/CVE-2020-16587/" source="CVE"/>
		<reference ref_id="CVE-2020-16588" ref_url="https://www.suse.com/security/cve/CVE-2020-16588/" source="CVE"/>
		<reference ref_id="CVE-2020-16589" ref_url="https://www.suse.com/security/cve/CVE-2020-16589/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008121.html" source="SUSE-SU"/>
		<description>
This update for openexr fixes the following issues:

Security issues fixed:

- CVE-2020-16587: Fixed a heap-based buffer overflow in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp (bsc#1179879).
- CVE-2020-16588: Fixed a null pointer deference in generatePreview (bsc#1179879).
- CVE-2020-16589: Fixed a heap-based buffer overflow in writeTileData in ImfTiledOutputFile.cpp (bsc#1179879).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-24"/>
	<updated date="2020-12-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179879">SUSE bug 1179879</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16587/">CVE-2020-16587</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16588/">CVE-2020-16588</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16589/">CVE-2020-16589</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495543" comment="libIlmImf-2_2-23-2.2.1-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495544" comment="libIlmImfUtil-2_2-23-2.2.1-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495545" comment="openexr-devel-2.2.1-3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138159" version="1" class="patch">
	<metadata>
		<title>Security update for libexif (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1120943" ref_url="https://bugzilla.suse.com/1120943" source="BUGZILLA"/>
		<reference ref_id="1160770" ref_url="https://bugzilla.suse.com/1160770" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20030" ref_url="https://www.suse.com/security/cve/CVE-2018-20030/" source="CVE"/>
		<reference ref_id="CVE-2019-9278" ref_url="https://www.suse.com/security/cve/CVE-2019-9278/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006525.html" source="SUSE-SU"/>
		<description>
This update for libexif fixes the following issues:

- CVE-2019-9278: Fixed an integer overflow (bsc#1160770).
- CVE-2018-20030: Fixed a denial of service by endless recursion (bsc#1120943).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-25"/>
	<updated date="2020-02-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1120943">SUSE bug 1120943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160770">SUSE bug 1160770</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20030/">CVE-2018-20030</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9278/">CVE-2019-9278</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495110" comment="libexif-devel-0.6.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495111" comment="libexif12-0.6.21-5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138160" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159329" ref_url="https://bugzilla.suse.com/1159329" source="BUGZILLA"/>
		<reference ref_id="1161719" ref_url="https://bugzilla.suse.com/1161719" source="BUGZILLA"/>
		<reference ref_id="1163809" ref_url="https://bugzilla.suse.com/1163809" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8835" ref_url="https://www.suse.com/security/cve/CVE-2019-8835/" source="CVE"/>
		<reference ref_id="CVE-2019-8844" ref_url="https://www.suse.com/security/cve/CVE-2019-8844/" source="CVE"/>
		<reference ref_id="CVE-2019-8846" ref_url="https://www.suse.com/security/cve/CVE-2019-8846/" source="CVE"/>
		<reference ref_id="CVE-2020-3862" ref_url="https://www.suse.com/security/cve/CVE-2020-3862/" source="CVE"/>
		<reference ref_id="CVE-2020-3864" ref_url="https://www.suse.com/security/cve/CVE-2020-3864/" source="CVE"/>
		<reference ref_id="CVE-2020-3865" ref_url="https://www.suse.com/security/cve/CVE-2020-3865/" source="CVE"/>
		<reference ref_id="CVE-2020-3867" ref_url="https://www.suse.com/security/cve/CVE-2020-3867/" source="CVE"/>
		<reference ref_id="CVE-2020-3868" ref_url="https://www.suse.com/security/cve/CVE-2020-3868/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006522.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 to version 2.26.4 fixes the following issues:

Security issues fixed:

- CVE-2019-8835: Fixed multiple memory corruption issues (bsc#1161719).
- CVE-2019-8844: Fixed multiple memory corruption issues (bsc#1161719).
- CVE-2019-8846: Fixed a use-after-free issue (bsc#1161719).
- CVE-2020-3862: Fixed a memory handling issue (bsc#1163809).
- CVE-2020-3864: Fixed a logic issue in the DOM object context handling (bsc#1163809).
- CVE-2020-3865: Fixed a logic issue in the DOM object context handling (bsc#1163809).
- CVE-2020-3867: Fixed an XSS issue (bsc#1163809).
- CVE-2020-3868: Fixed multiple memory corruption issues that could have lead to arbitrary code execution (bsc#1163809).

Non-security issues fixed:

- Fixed issues while trying to play a video on NextCloud.
- Fixed vertical alignment of text containing arabic diacritics.
- Fixed build with icu 65.1.
- Fixed page loading errors with websites using HSTS.
- Fixed web process crash when displaying a KaTeX formula.
- Fixed several crashes and rendering issues.
- Switched to a single web process for Evolution and geary (bsc#1159329 glgo#GNOME/evolution#587).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-25"/>
	<updated date="2020-02-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159329">SUSE bug 1159329</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161719">SUSE bug 1161719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163809">SUSE bug 1163809</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8835/">CVE-2019-8835</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8844/">CVE-2019-8844</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-8846/">CVE-2019-8846</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-3862/">CVE-2020-3862</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-3864/">CVE-2020-3864</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3865/">CVE-2020-3865</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-3867/">CVE-2020-3867</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3868/">CVE-2020-3868</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495112" comment="typelib-1_0-JavaScriptCore-4_0-2.26.4-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495113" comment="typelib-1_0-WebKit2-4_0-2.26.4-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495114" comment="typelib-1_0-WebKit2WebExtension-4_0-2.26.4-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495115" comment="webkit2gtk3-devel-2.26.4-3.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138161" version="1" class="patch">
	<metadata>
		<title>Security update for ppp (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162610" ref_url="https://bugzilla.suse.com/1162610" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8597" ref_url="https://www.suse.com/security/cve/CVE-2020-8597/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0489-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006530.html" source="SUSE-SU"/>
		<description>
This update for ppp fixes the following security issue:

- CVE-2020-8597: Fixed a buffer overflow in the eap_request and eap_response functions (bsc#1162610).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-26"/>
	<updated date="2020-02-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1162610">SUSE bug 1162610</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2020-8597/">CVE-2020-8597</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495116" comment="ppp-2.4.7-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495117" comment="ppp-devel-2.4.7-5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138162" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162224" ref_url="https://bugzilla.suse.com/1162224" source="BUGZILLA"/>
		<reference ref_id="1162367" ref_url="https://bugzilla.suse.com/1162367" source="BUGZILLA"/>
		<reference ref_id="1162825" ref_url="https://bugzilla.suse.com/1162825" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9674" ref_url="https://www.suse.com/security/cve/CVE-2019-9674/" source="CVE"/>
		<reference ref_id="CVE-2020-8492" ref_url="https://www.suse.com/security/cve/CVE-2020-8492/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006545.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

Security issues fixed:

- CVE-2019-9674: Improved the documentation, warning about dangers of zip-bombs (bsc#1162825).
- CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service via HTTP (bsc#1162367).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-27"/>
	<updated date="2020-02-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162224">SUSE bug 1162224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162367">SUSE bug 1162367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162825">SUSE bug 1162825</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9674/">CVE-2019-9674</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8492/">CVE-2020-8492</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495546" comment="python-tk-2.7.17-7.35.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138163" version="1" class="patch">
	<metadata>
		<title>Security update for texlive-filesystem (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1150556" ref_url="https://bugzilla.suse.com/1150556" source="BUGZILLA"/>
		<reference ref_id="1155381" ref_url="https://bugzilla.suse.com/1155381" source="BUGZILLA"/>
		<reference ref_id="1158910" ref_url="https://bugzilla.suse.com/1158910" source="BUGZILLA"/>
		<reference ref_id="1159740" ref_url="https://bugzilla.suse.com/1159740" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:0519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006543.html" source="SUSE-SU"/>
		<description>
This update for texlive-filesystem fixes the following issues:

Security issues fixed:

- Changed default user for ls-R files and font cache directories to user nobody (bsc#1159740) 
- Switched to rm instead of safe-rm or safe-rmdir to avoid race conditions (bsc#1158910) .
- Made cron script more failsafe (bsc#1150556)

Non-security issue fixed:

- Refreshed font map files on update (bsc#1155381) 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-27"/>
	<updated date="2020-02-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1150556">SUSE bug 1150556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155381">SUSE bug 1155381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158910">SUSE bug 1158910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159740">SUSE bug 1159740</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495547" comment="texlive-collection-basic-2017.135.svn41616-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495548" comment="texlive-collection-bibtexextra-2017.135.svn44385-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495549" comment="texlive-collection-binextra-2017.135.svn44515-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495550" comment="texlive-collection-context-2017.135.svn42330-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495551" comment="texlive-collection-fontsextra-2017.135.svn43356-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495552" comment="texlive-collection-fontsrecommended-2017.135.svn35830-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495553" comment="texlive-collection-fontutils-2017.135.svn37105-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495554" comment="texlive-collection-formatsextra-2017.135.svn44177-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495555" comment="texlive-collection-games-2017.135.svn42992-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495556" comment="texlive-collection-humanities-2017.135.svn42268-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495557" comment="texlive-collection-langarabic-2017.135.svn44496-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495558" comment="texlive-collection-langchinese-2017.135.svn42675-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495559" comment="texlive-collection-langcjk-2017.135.svn43009-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495560" comment="texlive-collection-langcyrillic-2017.135.svn44401-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495561" comment="texlive-collection-langczechslovak-2017.135.svn32550-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495562" comment="texlive-collection-langenglish-2017.135.svn43650-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495563" comment="texlive-collection-langeuropean-2017.135.svn44414-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495564" comment="texlive-collection-langfrench-2017.135.svn40375-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495565" comment="texlive-collection-langgerman-2017.135.svn42045-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495566" comment="texlive-collection-langgreek-2017.135.svn44192-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495567" comment="texlive-collection-langitalian-2017.135.svn30372-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495568" comment="texlive-collection-langjapanese-2017.135.svn44554-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495569" comment="texlive-collection-langkorean-2017.135.svn42106-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495570" comment="texlive-collection-langother-2017.135.svn44414-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495571" comment="texlive-collection-langpolish-2017.135.svn44371-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495572" comment="texlive-collection-langportuguese-2017.135.svn30962-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495573" comment="texlive-collection-langspanish-2017.135.svn40587-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495574" comment="texlive-collection-latex-2017.135.svn41614-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495575" comment="texlive-collection-latexextra-2017.135.svn44544-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495576" comment="texlive-collection-latexrecommended-2017.135.svn44177-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495577" comment="texlive-collection-luatex-2017.135.svn44500-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495578" comment="texlive-collection-mathscience-2017.135.svn44396-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495579" comment="texlive-collection-metapost-2017.135.svn44297-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495580" comment="texlive-collection-music-2017.135.svn40561-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495581" comment="texlive-collection-pictures-2017.135.svn44395-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495582" comment="texlive-collection-plaingeneric-2017.135.svn44177-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495583" comment="texlive-collection-pstricks-2017.135.svn44460-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495584" comment="texlive-collection-publishers-2017.135.svn44485-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495585" comment="texlive-collection-xetex-2017.135.svn43059-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495586" comment="texlive-devel-2017.135-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495587" comment="texlive-extratools-2017.135-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495588" comment="texlive-filesystem-2017.135-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495589" comment="texlive-scheme-basic-2017.135.svn25923-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495590" comment="texlive-scheme-context-2017.135.svn35799-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495591" comment="texlive-scheme-full-2017.135.svn44177-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495592" comment="texlive-scheme-gust-2017.135.svn44177-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495593" comment="texlive-scheme-infraonly-2017.135.svn41515-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495594" comment="texlive-scheme-medium-2017.135.svn44177-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495595" comment="texlive-scheme-minimal-2017.135.svn13822-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495596" comment="texlive-scheme-small-2017.135.svn41825-9.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495597" comment="texlive-scheme-tetex-2017.135.svn44187-9.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138164" version="1" class="patch">
	<metadata>
		<title>Security update for gd (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1140120" ref_url="https://bugzilla.suse.com/1140120" source="BUGZILLA"/>
		<reference ref_id="1165471" ref_url="https://bugzilla.suse.com/1165471" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14553" ref_url="https://www.suse.com/security/cve/CVE-2018-14553/" source="CVE"/>
		<reference ref_id="CVE-2019-11038" ref_url="https://www.suse.com/security/cve/CVE-2019-11038/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006579.html" source="SUSE-SU"/>
		<description>
This update for gd fixes the following issues:

Security issue fixed:

- CVE-2018-14553: Fixed a null pointer dereference in gdImageClone (bsc#1165471).
- CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm() (bsc#1140120).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-05"/>
	<updated date="2020-03-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1140120">SUSE bug 1140120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165471">SUSE bug 1165471</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14553/">CVE-2018-14553</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11038/">CVE-2019-11038</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495598" comment="gd-2.2.5-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495599" comment="gd-devel-2.2.5-4.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138165" version="1" class="patch">
	<metadata>
		<title>Security update for librsvg (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162501" ref_url="https://bugzilla.suse.com/1162501" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20446" ref_url="https://www.suse.com/security/cve/CVE-2019-20446/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0629-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006591.html" source="SUSE-SU"/>
		<description>
This update for librsvg to version 2.42.8 fixes the following issues:

librsvg was updated to version 2.42.8 fixing the following issues:	  

- CVE-2019-20446: Fixed an issue where a crafted SVG file with nested
  patterns can cause denial of service (bsc#1162501).
  NOTE: Librsvg now has limits on the number of loaded XML elements,
  and the number of referenced elements within an SVG document. 
- Fixed a stack exhaustion with circular references in &lt;use&gt;
  elements.
- Fixed a denial-of-service condition from exponential explosion
  of rendered elements, through nested use of SVG 'use' elements in
  malicious SVGs.  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-07"/>
	<updated date="2020-07-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162501">SUSE bug 1162501</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20446/">CVE-2019-20446</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495600" comment="librsvg-devel-2.42.8-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495601" comment="typelib-1_0-Rsvg-2_0-2.42.8-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138166" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1132665" ref_url="https://bugzilla.suse.com/1132665" source="BUGZILLA"/>
		<reference ref_id="1166238" ref_url="https://bugzilla.suse.com/1166238" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20503" ref_url="https://www.suse.com/security/cve/CVE-2019-20503/" source="CVE"/>
		<reference ref_id="CVE-2020-6805" ref_url="https://www.suse.com/security/cve/CVE-2020-6805/" source="CVE"/>
		<reference ref_id="CVE-2020-6806" ref_url="https://www.suse.com/security/cve/CVE-2020-6806/" source="CVE"/>
		<reference ref_id="CVE-2020-6807" ref_url="https://www.suse.com/security/cve/CVE-2020-6807/" source="CVE"/>
		<reference ref_id="CVE-2020-6811" ref_url="https://www.suse.com/security/cve/CVE-2020-6811/" source="CVE"/>
		<reference ref_id="CVE-2020-6812" ref_url="https://www.suse.com/security/cve/CVE-2020-6812/" source="CVE"/>
		<reference ref_id="CVE-2020-6814" ref_url="https://www.suse.com/security/cve/CVE-2020-6814/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0686-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006609.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

MozillaFirefox was updated to 68.6.0 ESR (MFSA 2020-09 bsc#1132665 bsc#1166238)

- CVE-2020-6805: Fixed a use-after-free when removing data about origins
- CVE-2020-6806: Fixed improper protections against state confusion
- CVE-2020-6807: Fixed a use-after-free in cubeb during stream destruction 
- CVE-2020-6811: Fixed an issue where copy as cURL' feature did not fully 
  escape website-controlled data potentially leading to command injection 
- CVE-2019-20503: Fixed out of bounds reads in sctp_load_addresses_from_init
- CVE-2020-6812: Fixed an issue where the names of AirPods with personally 
  identifiable information were exposed to websites with camera or microphone 
  permission
- CVE-2020-6814: Fixed multiple memory safety bugs
- Fixed an issue with minimizing a window (bsc#1132665).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-13"/>
	<updated date="2020-03-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1132665">SUSE bug 1132665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166238">SUSE bug 1166238</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-20503/">CVE-2019-20503</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6805/">CVE-2020-6805</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6806/">CVE-2020-6806</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6807/">CVE-2020-6807</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6811/">CVE-2020-6811</cve>
	<cve impact="important" cvss3="4.7/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6812/">CVE-2020-6812</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6814/">CVE-2020-6814</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495602" comment="MozillaFirefox-68.6.0-3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495603" comment="MozillaFirefox-devel-68.6.0-3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495604" comment="MozillaFirefox-translations-common-68.6.0-3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495605" comment="MozillaFirefox-translations-other-68.6.0-3.75.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138167" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1093733" ref_url="https://bugzilla.suse.com/1093733" source="BUGZILLA"/>
		<reference ref_id="1094301" ref_url="https://bugzilla.suse.com/1094301" source="BUGZILLA"/>
		<reference ref_id="1101776" ref_url="https://bugzilla.suse.com/1101776" source="BUGZILLA"/>
		<reference ref_id="1101777" ref_url="https://bugzilla.suse.com/1101777" source="BUGZILLA"/>
		<reference ref_id="1101786" ref_url="https://bugzilla.suse.com/1101786" source="BUGZILLA"/>
		<reference ref_id="1101788" ref_url="https://bugzilla.suse.com/1101788" source="BUGZILLA"/>
		<reference ref_id="1101791" ref_url="https://bugzilla.suse.com/1101791" source="BUGZILLA"/>
		<reference ref_id="1101794" ref_url="https://bugzilla.suse.com/1101794" source="BUGZILLA"/>
		<reference ref_id="1101800" ref_url="https://bugzilla.suse.com/1101800" source="BUGZILLA"/>
		<reference ref_id="1101802" ref_url="https://bugzilla.suse.com/1101802" source="BUGZILLA"/>
		<reference ref_id="1101804" ref_url="https://bugzilla.suse.com/1101804" source="BUGZILLA"/>
		<reference ref_id="1101810" ref_url="https://bugzilla.suse.com/1101810" source="BUGZILLA"/>
		<reference ref_id="1106514" ref_url="https://bugzilla.suse.com/1106514" source="BUGZILLA"/>
		<reference ref_id="1111647" ref_url="https://bugzilla.suse.com/1111647" source="BUGZILLA"/>
		<reference ref_id="1117740" ref_url="https://bugzilla.suse.com/1117740" source="BUGZILLA"/>
		<reference ref_id="1121231" ref_url="https://bugzilla.suse.com/1121231" source="BUGZILLA"/>
		<reference ref_id="1121232" ref_url="https://bugzilla.suse.com/1121232" source="BUGZILLA"/>
		<reference ref_id="1121233" ref_url="https://bugzilla.suse.com/1121233" source="BUGZILLA"/>
		<reference ref_id="1121234" ref_url="https://bugzilla.suse.com/1121234" source="BUGZILLA"/>
		<reference ref_id="1121235" ref_url="https://bugzilla.suse.com/1121235" source="BUGZILLA"/>
		<reference ref_id="1127367" ref_url="https://bugzilla.suse.com/1127367" source="BUGZILLA"/>
		<reference ref_id="1127369" ref_url="https://bugzilla.suse.com/1127369" source="BUGZILLA"/>
		<reference ref_id="1127370" ref_url="https://bugzilla.suse.com/1127370" source="BUGZILLA"/>
		<reference ref_id="1131941" ref_url="https://bugzilla.suse.com/1131941" source="BUGZILLA"/>
		<reference ref_id="1131945" ref_url="https://bugzilla.suse.com/1131945" source="BUGZILLA"/>
		<reference ref_id="1136021" ref_url="https://bugzilla.suse.com/1136021" source="BUGZILLA"/>
		<reference ref_id="1141980" ref_url="https://bugzilla.suse.com/1141980" source="BUGZILLA"/>
		<reference ref_id="1150690" ref_url="https://bugzilla.suse.com/1150690" source="BUGZILLA"/>
		<reference ref_id="1156288" ref_url="https://bugzilla.suse.com/1156288" source="BUGZILLA"/>
		<reference ref_id="1158505" ref_url="https://bugzilla.suse.com/1158505" source="BUGZILLA"/>
		<reference ref_id="1161052" ref_url="https://bugzilla.suse.com/1161052" source="BUGZILLA"/>
		<reference ref_id="1165241" ref_url="https://bugzilla.suse.com/1165241" source="BUGZILLA"/>
		<reference ref_id="1165710" ref_url="https://bugzilla.suse.com/1165710" source="BUGZILLA"/>
		<reference ref_id="957624" ref_url="https://bugzilla.suse.com/957624" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11354" ref_url="https://www.suse.com/security/cve/CVE-2018-11354/" source="CVE"/>
		<reference ref_id="CVE-2018-11355" ref_url="https://www.suse.com/security/cve/CVE-2018-11355/" source="CVE"/>
		<reference ref_id="CVE-2018-11356" ref_url="https://www.suse.com/security/cve/CVE-2018-11356/" source="CVE"/>
		<reference ref_id="CVE-2018-11357" ref_url="https://www.suse.com/security/cve/CVE-2018-11357/" source="CVE"/>
		<reference ref_id="CVE-2018-11358" ref_url="https://www.suse.com/security/cve/CVE-2018-11358/" source="CVE"/>
		<reference ref_id="CVE-2018-11359" ref_url="https://www.suse.com/security/cve/CVE-2018-11359/" source="CVE"/>
		<reference ref_id="CVE-2018-11360" ref_url="https://www.suse.com/security/cve/CVE-2018-11360/" source="CVE"/>
		<reference ref_id="CVE-2018-11361" ref_url="https://www.suse.com/security/cve/CVE-2018-11361/" source="CVE"/>
		<reference ref_id="CVE-2018-11362" ref_url="https://www.suse.com/security/cve/CVE-2018-11362/" source="CVE"/>
		<reference ref_id="CVE-2018-12086" ref_url="https://www.suse.com/security/cve/CVE-2018-12086/" source="CVE"/>
		<reference ref_id="CVE-2018-14339" ref_url="https://www.suse.com/security/cve/CVE-2018-14339/" source="CVE"/>
		<reference ref_id="CVE-2018-14340" ref_url="https://www.suse.com/security/cve/CVE-2018-14340/" source="CVE"/>
		<reference ref_id="CVE-2018-14341" ref_url="https://www.suse.com/security/cve/CVE-2018-14341/" source="CVE"/>
		<reference ref_id="CVE-2018-14342" ref_url="https://www.suse.com/security/cve/CVE-2018-14342/" source="CVE"/>
		<reference ref_id="CVE-2018-14343" ref_url="https://www.suse.com/security/cve/CVE-2018-14343/" source="CVE"/>
		<reference ref_id="CVE-2018-14344" ref_url="https://www.suse.com/security/cve/CVE-2018-14344/" source="CVE"/>
		<reference ref_id="CVE-2018-14367" ref_url="https://www.suse.com/security/cve/CVE-2018-14367/" source="CVE"/>
		<reference ref_id="CVE-2018-14368" ref_url="https://www.suse.com/security/cve/CVE-2018-14368/" source="CVE"/>
		<reference ref_id="CVE-2018-14369" ref_url="https://www.suse.com/security/cve/CVE-2018-14369/" source="CVE"/>
		<reference ref_id="CVE-2018-14370" ref_url="https://www.suse.com/security/cve/CVE-2018-14370/" source="CVE"/>
		<reference ref_id="CVE-2018-16056" ref_url="https://www.suse.com/security/cve/CVE-2018-16056/" source="CVE"/>
		<reference ref_id="CVE-2018-16057" ref_url="https://www.suse.com/security/cve/CVE-2018-16057/" source="CVE"/>
		<reference ref_id="CVE-2018-16058" ref_url="https://www.suse.com/security/cve/CVE-2018-16058/" source="CVE"/>
		<reference ref_id="CVE-2018-18225" ref_url="https://www.suse.com/security/cve/CVE-2018-18225/" source="CVE"/>
		<reference ref_id="CVE-2018-18226" ref_url="https://www.suse.com/security/cve/CVE-2018-18226/" source="CVE"/>
		<reference ref_id="CVE-2018-18227" ref_url="https://www.suse.com/security/cve/CVE-2018-18227/" source="CVE"/>
		<reference ref_id="CVE-2018-19622" ref_url="https://www.suse.com/security/cve/CVE-2018-19622/" source="CVE"/>
		<reference ref_id="CVE-2018-19623" ref_url="https://www.suse.com/security/cve/CVE-2018-19623/" source="CVE"/>
		<reference ref_id="CVE-2018-19624" ref_url="https://www.suse.com/security/cve/CVE-2018-19624/" source="CVE"/>
		<reference ref_id="CVE-2018-19625" ref_url="https://www.suse.com/security/cve/CVE-2018-19625/" source="CVE"/>
		<reference ref_id="CVE-2018-19626" ref_url="https://www.suse.com/security/cve/CVE-2018-19626/" source="CVE"/>
		<reference ref_id="CVE-2018-19627" ref_url="https://www.suse.com/security/cve/CVE-2018-19627/" source="CVE"/>
		<reference ref_id="CVE-2018-19628" ref_url="https://www.suse.com/security/cve/CVE-2018-19628/" source="CVE"/>
		<reference ref_id="CVE-2019-10894" ref_url="https://www.suse.com/security/cve/CVE-2019-10894/" source="CVE"/>
		<reference ref_id="CVE-2019-10895" ref_url="https://www.suse.com/security/cve/CVE-2019-10895/" source="CVE"/>
		<reference ref_id="CVE-2019-10896" ref_url="https://www.suse.com/security/cve/CVE-2019-10896/" source="CVE"/>
		<reference ref_id="CVE-2019-10897" ref_url="https://www.suse.com/security/cve/CVE-2019-10897/" source="CVE"/>
		<reference ref_id="CVE-2019-10898" ref_url="https://www.suse.com/security/cve/CVE-2019-10898/" source="CVE"/>
		<reference ref_id="CVE-2019-10899" ref_url="https://www.suse.com/security/cve/CVE-2019-10899/" source="CVE"/>
		<reference ref_id="CVE-2019-10900" ref_url="https://www.suse.com/security/cve/CVE-2019-10900/" source="CVE"/>
		<reference ref_id="CVE-2019-10901" ref_url="https://www.suse.com/security/cve/CVE-2019-10901/" source="CVE"/>
		<reference ref_id="CVE-2019-10902" ref_url="https://www.suse.com/security/cve/CVE-2019-10902/" source="CVE"/>
		<reference ref_id="CVE-2019-10903" ref_url="https://www.suse.com/security/cve/CVE-2019-10903/" source="CVE"/>
		<reference ref_id="CVE-2019-13619" ref_url="https://www.suse.com/security/cve/CVE-2019-13619/" source="CVE"/>
		<reference ref_id="CVE-2019-16319" ref_url="https://www.suse.com/security/cve/CVE-2019-16319/" source="CVE"/>
		<reference ref_id="CVE-2019-19553" ref_url="https://www.suse.com/security/cve/CVE-2019-19553/" source="CVE"/>
		<reference ref_id="CVE-2019-5716" ref_url="https://www.suse.com/security/cve/CVE-2019-5716/" source="CVE"/>
		<reference ref_id="CVE-2019-5717" ref_url="https://www.suse.com/security/cve/CVE-2019-5717/" source="CVE"/>
		<reference ref_id="CVE-2019-5718" ref_url="https://www.suse.com/security/cve/CVE-2019-5718/" source="CVE"/>
		<reference ref_id="CVE-2019-5719" ref_url="https://www.suse.com/security/cve/CVE-2019-5719/" source="CVE"/>
		<reference ref_id="CVE-2019-5721" ref_url="https://www.suse.com/security/cve/CVE-2019-5721/" source="CVE"/>
		<reference ref_id="CVE-2019-9208" ref_url="https://www.suse.com/security/cve/CVE-2019-9208/" source="CVE"/>
		<reference ref_id="CVE-2019-9209" ref_url="https://www.suse.com/security/cve/CVE-2019-9209/" source="CVE"/>
		<reference ref_id="CVE-2019-9214" ref_url="https://www.suse.com/security/cve/CVE-2019-9214/" source="CVE"/>
		<reference ref_id="CVE-2020-7044" ref_url="https://www.suse.com/security/cve/CVE-2020-7044/" source="CVE"/>
		<reference ref_id="CVE-2020-9428" ref_url="https://www.suse.com/security/cve/CVE-2020-9428/" source="CVE"/>
		<reference ref_id="CVE-2020-9429" ref_url="https://www.suse.com/security/cve/CVE-2020-9429/" source="CVE"/>
		<reference ref_id="CVE-2020-9430" ref_url="https://www.suse.com/security/cve/CVE-2020-9430/" source="CVE"/>
		<reference ref_id="CVE-2020-9431" ref_url="https://www.suse.com/security/cve/CVE-2020-9431/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006613.html" source="SUSE-SU"/>
		<description>
This update for wireshark and libmaxminddb fixes the following issues:

Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288).

New features include:

- Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC
- Improved support for existing protocols, like HTTP/2
- Improved analytics and usability functionalities
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-08"/>
	<updated date="2020-04-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1093733">SUSE bug 1093733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094301">SUSE bug 1094301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101776">SUSE bug 1101776</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101777">SUSE bug 1101777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101786">SUSE bug 1101786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101788">SUSE bug 1101788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101791">SUSE bug 1101791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101794">SUSE bug 1101794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101800">SUSE bug 1101800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101802">SUSE bug 1101802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101804">SUSE bug 1101804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101810">SUSE bug 1101810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106514">SUSE bug 1106514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111647">SUSE bug 1111647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117740">SUSE bug 1117740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121231">SUSE bug 1121231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121232">SUSE bug 1121232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121233">SUSE bug 1121233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121234">SUSE bug 1121234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121235">SUSE bug 1121235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127367">SUSE bug 1127367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127369">SUSE bug 1127369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127370">SUSE bug 1127370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131941">SUSE bug 1131941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131945">SUSE bug 1131945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136021">SUSE bug 1136021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141980">SUSE bug 1141980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150690">SUSE bug 1150690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156288">SUSE bug 1156288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158505">SUSE bug 1158505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161052">SUSE bug 1161052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165241">SUSE bug 1165241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165710">SUSE bug 1165710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/957624">SUSE bug 957624</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11354/">CVE-2018-11354</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11355/">CVE-2018-11355</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11356/">CVE-2018-11356</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11357/">CVE-2018-11357</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11358/">CVE-2018-11358</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11359/">CVE-2018-11359</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11360/">CVE-2018-11360</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11361/">CVE-2018-11361</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11362/">CVE-2018-11362</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-12086/">CVE-2018-12086</cve>
	<cve impact="low" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14339/">CVE-2018-14339</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14340/">CVE-2018-14340</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14341/">CVE-2018-14341</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14342/">CVE-2018-14342</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14343/">CVE-2018-14343</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14344/">CVE-2018-14344</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14367/">CVE-2018-14367</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14368/">CVE-2018-14368</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14369/">CVE-2018-14369</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14370/">CVE-2018-14370</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16056/">CVE-2018-16056</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16057/">CVE-2018-16057</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-16058/">CVE-2018-16058</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18225/">CVE-2018-18225</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18226/">CVE-2018-18226</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-18227/">CVE-2018-18227</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19622/">CVE-2018-19622</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19623/">CVE-2018-19623</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19624/">CVE-2018-19624</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19625/">CVE-2018-19625</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19626/">CVE-2018-19626</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19627/">CVE-2018-19627</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19628/">CVE-2018-19628</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10894/">CVE-2019-10894</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10895/">CVE-2019-10895</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10896/">CVE-2019-10896</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-10897/">CVE-2019-10897</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-10898/">CVE-2019-10898</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10899/">CVE-2019-10899</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-10900/">CVE-2019-10900</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10901/">CVE-2019-10901</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-10902/">CVE-2019-10902</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10903/">CVE-2019-10903</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13619/">CVE-2019-13619</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-16319/">CVE-2019-16319</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19553/">CVE-2019-19553</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5716/">CVE-2019-5716</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5717/">CVE-2019-5717</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5718/">CVE-2019-5718</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5719/">CVE-2019-5719</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5721/">CVE-2019-5721</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9208/">CVE-2019-9208</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9209/">CVE-2019-9209</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9214/">CVE-2019-9214</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-7044/">CVE-2020-7044</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-9428/">CVE-2020-9428</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-9429/">CVE-2020-9429</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-9430/">CVE-2020-9430</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-9431/">CVE-2020-9431</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493040" comment="libspandsp2-0.0.6-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495118" comment="spandsp-devel-0.0.6-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495119" comment="wireshark-devel-3.2.2-3.35.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495120" comment="wireshark-ui-qt-3.2.2-3.35.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138168" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160305" ref_url="https://bugzilla.suse.com/1160305" source="BUGZILLA"/>
		<reference ref_id="1160498" ref_url="https://bugzilla.suse.com/1160498" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17015" ref_url="https://www.suse.com/security/cve/CVE-2019-17015/" source="CVE"/>
		<reference ref_id="CVE-2019-17016" ref_url="https://www.suse.com/security/cve/CVE-2019-17016/" source="CVE"/>
		<reference ref_id="CVE-2019-17017" ref_url="https://www.suse.com/security/cve/CVE-2019-17017/" source="CVE"/>
		<reference ref_id="CVE-2019-17021" ref_url="https://www.suse.com/security/cve/CVE-2019-17021/" source="CVE"/>
		<reference ref_id="CVE-2019-17022" ref_url="https://www.suse.com/security/cve/CVE-2019-17022/" source="CVE"/>
		<reference ref_id="CVE-2019-17024" ref_url="https://www.suse.com/security/cve/CVE-2019-17024/" source="CVE"/>
		<reference ref_id="CVE-2019-17026" ref_url="https://www.suse.com/security/cve/CVE-2019-17026/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006331.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement 
- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-13"/>
	<updated date="2020-01-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160305">SUSE bug 1160305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160498">SUSE bug 1160498</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17015/">CVE-2019-17015</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-17016/">CVE-2019-17016</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17017/">CVE-2019-17017</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-17021/">CVE-2019-17021</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-17022/">CVE-2019-17022</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17024/">CVE-2019-17024</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17026/">CVE-2019-17026</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495121" comment="MozillaFirefox-68.4.1-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495606" comment="MozillaFirefox-devel-68.4.1-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495123" comment="MozillaFirefox-translations-common-68.4.1-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495124" comment="MozillaFirefox-translations-other-68.4.1-3.66.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138169" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1166751" ref_url="https://bugzilla.suse.com/1166751" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0556" ref_url="https://www.suse.com/security/cve/CVE-2020-0556/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006674.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2020-0556: Fixed an improper access control which could have allowed an unauthenticated 
  user to potentially enable escalation of privilege and denial of service (bsc#1166751).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-03"/>
	<updated date="2020-04-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1166751">SUSE bug 1166751</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-0556/">CVE-2020-0556</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495607" comment="bluez-5.48-5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495608" comment="bluez-devel-5.48-5.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138170" version="1" class="patch">
	<metadata>
		<title>Security update for exiv2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1040973" ref_url="https://bugzilla.suse.com/1040973" source="BUGZILLA"/>
		<reference ref_id="1068873" ref_url="https://bugzilla.suse.com/1068873" source="BUGZILLA"/>
		<reference ref_id="1088424" ref_url="https://bugzilla.suse.com/1088424" source="BUGZILLA"/>
		<reference ref_id="1097599" ref_url="https://bugzilla.suse.com/1097599" source="BUGZILLA"/>
		<reference ref_id="1097600" ref_url="https://bugzilla.suse.com/1097600" source="BUGZILLA"/>
		<reference ref_id="1109175" ref_url="https://bugzilla.suse.com/1109175" source="BUGZILLA"/>
		<reference ref_id="1109176" ref_url="https://bugzilla.suse.com/1109176" source="BUGZILLA"/>
		<reference ref_id="1109299" ref_url="https://bugzilla.suse.com/1109299" source="BUGZILLA"/>
		<reference ref_id="1115364" ref_url="https://bugzilla.suse.com/1115364" source="BUGZILLA"/>
		<reference ref_id="1117513" ref_url="https://bugzilla.suse.com/1117513" source="BUGZILLA"/>
		<reference ref_id="1142684" ref_url="https://bugzilla.suse.com/1142684" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-1000126" ref_url="https://www.suse.com/security/cve/CVE-2017-1000126/" source="CVE"/>
		<reference ref_id="CVE-2017-9239" ref_url="https://www.suse.com/security/cve/CVE-2017-9239/" source="CVE"/>
		<reference ref_id="CVE-2018-12264" ref_url="https://www.suse.com/security/cve/CVE-2018-12264/" source="CVE"/>
		<reference ref_id="CVE-2018-12265" ref_url="https://www.suse.com/security/cve/CVE-2018-12265/" source="CVE"/>
		<reference ref_id="CVE-2018-17229" ref_url="https://www.suse.com/security/cve/CVE-2018-17229/" source="CVE"/>
		<reference ref_id="CVE-2018-17230" ref_url="https://www.suse.com/security/cve/CVE-2018-17230/" source="CVE"/>
		<reference ref_id="CVE-2018-17282" ref_url="https://www.suse.com/security/cve/CVE-2018-17282/" source="CVE"/>
		<reference ref_id="CVE-2018-19108" ref_url="https://www.suse.com/security/cve/CVE-2018-19108/" source="CVE"/>
		<reference ref_id="CVE-2018-19607" ref_url="https://www.suse.com/security/cve/CVE-2018-19607/" source="CVE"/>
		<reference ref_id="CVE-2018-9305" ref_url="https://www.suse.com/security/cve/CVE-2018-9305/" source="CVE"/>
		<reference ref_id="CVE-2019-13114" ref_url="https://www.suse.com/security/cve/CVE-2019-13114/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0921-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006676.html" source="SUSE-SU"/>
		<description>
This update for exiv2 fixes the following issues:

exiv2 was updated to latest 0.26 branch, fixing bugs and security issues:

- CVE-2017-1000126: Fixed an out of bounds read in webp parser (bsc#1068873).
- CVE-2017-9239: Fixed a segmentation fault in TiffImageEntry::doWriteImage function (bsc#1040973).
- CVE-2018-12264: Fixed an integer overflow in LoaderTiff::getData() which
  might have led to an out-of-bounds read (bsc#1097600).
- CVE-2018-12265: Fixed integer overflows in LoaderExifJpeg which could have 
  led to memory corruption (bsc#1097599).
- CVE-2018-17229: Fixed a heap based buffer overflow in Exiv2::d2Data via a crafted image (bsc#1109175).
- CVE-2018-17230: Fixed a heap based buffer overflow in Exiv2::d2Data via a crafted image (bsc#1109176).
- CVE-2018-17282: Fixed a null pointer dereference in Exiv2::DataValue::copy (bsc#1109299).
- CVE-2018-19108: Fixed an integer overflow in Exiv2::PsdImage::readMetadata which could have 
  led to infinite loop (bsc#1115364).
- CVE-2018-19607: Fixed a null pointer dereference in Exiv2::isoSpeed which might have led to denial 
  of service (bsc#1117513).
- CVE-2018-9305:  Fixed an out of bounds read in IptcData::printStructure which might have led to 
  to information leak or denial of service (bsc#1088424).
- CVE-2019-13114: Fixed a null pointer dereference which might have led to denial of service via 
  a crafted response of an malicious http server (bsc#1142684).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-03"/>
	<updated date="2020-04-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1040973">SUSE bug 1040973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068873">SUSE bug 1068873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088424">SUSE bug 1088424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097599">SUSE bug 1097599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097600">SUSE bug 1097600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109175">SUSE bug 1109175</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109176">SUSE bug 1109176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109299">SUSE bug 1109299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115364">SUSE bug 1115364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117513">SUSE bug 1117513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142684">SUSE bug 1142684</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000126/">CVE-2017-1000126</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9239/">CVE-2017-9239</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12264/">CVE-2018-12264</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12265/">CVE-2018-12265</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17229/">CVE-2018-17229</cve>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17230/">CVE-2018-17230</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17282/">CVE-2018-17282</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19108/">CVE-2018-19108</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19607/">CVE-2018-19607</cve>
	<cve impact="low" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9305/">CVE-2018-9305</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13114/">CVE-2019-13114</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495609" comment="libexiv2-26-0.26-6.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495610" comment="libexiv2-devel-0.26-6.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138171" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168630" ref_url="https://bugzilla.suse.com/1168630" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-6819" ref_url="https://www.suse.com/security/cve/CVE-2020-6819/" source="CVE"/>
		<reference ref_id="CVE-2020-6820" ref_url="https://www.suse.com/security/cve/CVE-2020-6820/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006678.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (bsc#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-06"/>
	<updated date="2020-04-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168630">SUSE bug 1168630</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6819/">CVE-2020-6819</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6820/">CVE-2020-6820</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495611" comment="MozillaFirefox-68.6.1-3.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495612" comment="MozillaFirefox-devel-68.6.1-3.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495613" comment="MozillaFirefox-translations-common-68.6.1-3.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495614" comment="MozillaFirefox-translations-other-68.6.1-3.81.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138172" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168874" ref_url="https://bugzilla.suse.com/1168874" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-6821" ref_url="https://www.suse.com/security/cve/CVE-2020-6821/" source="CVE"/>
		<reference ref_id="CVE-2020-6822" ref_url="https://www.suse.com/security/cve/CVE-2020-6822/" source="CVE"/>
		<reference ref_id="CVE-2020-6825" ref_url="https://www.suse.com/security/cve/CVE-2020-6825/" source="CVE"/>
		<reference ref_id="CVE-2020-6827" ref_url="https://www.suse.com/security/cve/CVE-2020-6827/" source="CVE"/>
		<reference ref_id="CVE-2020-6828" ref_url="https://www.suse.com/security/cve/CVE-2020-6828/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0971-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006695.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox to version 68.7.0 ESR fixes the following issues:

- CVE-2020-6821: Uninitialized memory could be read when using the WebGL copyTexSubImage method (bsc#1168874).
- CVE-2020-6822: Fixed out of bounds write in GMPDecodeData when processing large images (bsc#1168874).
- CVE-2020-6825: Fixed Memory safety bugs (bsc#1168874).
- CVE-2020-6827: Custom Tabs could have the URI spoofed (bsc#1168874).
- CVE-2020-6828: Preference overwrite via crafted Intent (bsc#1168874).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-09"/>
	<updated date="2020-04-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168874">SUSE bug 1168874</bugzilla>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-6821/">CVE-2020-6821</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6822/">CVE-2020-6822</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6825/">CVE-2020-6825</cve>
	<cve impact="important" cvss3="4.7/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-6827/">CVE-2020-6827</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6828/">CVE-2020-6828</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495615" comment="MozillaFirefox-68.7.0-3.84.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495616" comment="MozillaFirefox-devel-68.7.0-3.84.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495617" comment="MozillaFirefox-translations-common-68.7.0-3.84.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495618" comment="MozillaFirefox-translations-other-68.7.0-3.84.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138173" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1179103" ref_url="https://bugzilla.suse.com/1179103" source="BUGZILLA"/>
		<reference ref_id="1179202" ref_url="https://bugzilla.suse.com/1179202" source="BUGZILLA"/>
		<reference ref_id="1179208" ref_url="https://bugzilla.suse.com/1179208" source="BUGZILLA"/>
		<reference ref_id="1179212" ref_url="https://bugzilla.suse.com/1179212" source="BUGZILLA"/>
		<reference ref_id="1179221" ref_url="https://bugzilla.suse.com/1179221" source="BUGZILLA"/>
		<reference ref_id="1179223" ref_url="https://bugzilla.suse.com/1179223" source="BUGZILLA"/>
		<reference ref_id="1179240" ref_url="https://bugzilla.suse.com/1179240" source="BUGZILLA"/>
		<reference ref_id="1179244" ref_url="https://bugzilla.suse.com/1179244" source="BUGZILLA"/>
		<reference ref_id="1179260" ref_url="https://bugzilla.suse.com/1179260" source="BUGZILLA"/>
		<reference ref_id="1179268" ref_url="https://bugzilla.suse.com/1179268" source="BUGZILLA"/>
		<reference ref_id="1179269" ref_url="https://bugzilla.suse.com/1179269" source="BUGZILLA"/>
		<reference ref_id="1179276" ref_url="https://bugzilla.suse.com/1179276" source="BUGZILLA"/>
		<reference ref_id="1179278" ref_url="https://bugzilla.suse.com/1179278" source="BUGZILLA"/>
		<reference ref_id="1179281" ref_url="https://bugzilla.suse.com/1179281" source="BUGZILLA"/>
		<reference ref_id="1179285" ref_url="https://bugzilla.suse.com/1179285" source="BUGZILLA"/>
		<reference ref_id="1179311" ref_url="https://bugzilla.suse.com/1179311" source="BUGZILLA"/>
		<reference ref_id="1179312" ref_url="https://bugzilla.suse.com/1179312" source="BUGZILLA"/>
		<reference ref_id="1179313" ref_url="https://bugzilla.suse.com/1179313" source="BUGZILLA"/>
		<reference ref_id="1179315" ref_url="https://bugzilla.suse.com/1179315" source="BUGZILLA"/>
		<reference ref_id="1179317" ref_url="https://bugzilla.suse.com/1179317" source="BUGZILLA"/>
		<reference ref_id="1179321" ref_url="https://bugzilla.suse.com/1179321" source="BUGZILLA"/>
		<reference ref_id="1179322" ref_url="https://bugzilla.suse.com/1179322" source="BUGZILLA"/>
		<reference ref_id="1179327" ref_url="https://bugzilla.suse.com/1179327" source="BUGZILLA"/>
		<reference ref_id="1179333" ref_url="https://bugzilla.suse.com/1179333" source="BUGZILLA"/>
		<reference ref_id="1179336" ref_url="https://bugzilla.suse.com/1179336" source="BUGZILLA"/>
		<reference ref_id="1179338" ref_url="https://bugzilla.suse.com/1179338" source="BUGZILLA"/>
		<reference ref_id="1179339" ref_url="https://bugzilla.suse.com/1179339" source="BUGZILLA"/>
		<reference ref_id="1179343" ref_url="https://bugzilla.suse.com/1179343" source="BUGZILLA"/>
		<reference ref_id="1179345" ref_url="https://bugzilla.suse.com/1179345" source="BUGZILLA"/>
		<reference ref_id="1179346" ref_url="https://bugzilla.suse.com/1179346" source="BUGZILLA"/>
		<reference ref_id="1179347" ref_url="https://bugzilla.suse.com/1179347" source="BUGZILLA"/>
		<reference ref_id="1179361" ref_url="https://bugzilla.suse.com/1179361" source="BUGZILLA"/>
		<reference ref_id="1179362" ref_url="https://bugzilla.suse.com/1179362" source="BUGZILLA"/>
		<reference ref_id="1179397" ref_url="https://bugzilla.suse.com/1179397" source="BUGZILLA"/>
		<reference ref_id="1179753" ref_url="https://bugzilla.suse.com/1179753" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-19667" ref_url="https://www.suse.com/security/cve/CVE-2020-19667/" source="CVE"/>
		<reference ref_id="CVE-2020-25664" ref_url="https://www.suse.com/security/cve/CVE-2020-25664/" source="CVE"/>
		<reference ref_id="CVE-2020-25665" ref_url="https://www.suse.com/security/cve/CVE-2020-25665/" source="CVE"/>
		<reference ref_id="CVE-2020-25666" ref_url="https://www.suse.com/security/cve/CVE-2020-25666/" source="CVE"/>
		<reference ref_id="CVE-2020-25674" ref_url="https://www.suse.com/security/cve/CVE-2020-25674/" source="CVE"/>
		<reference ref_id="CVE-2020-25675" ref_url="https://www.suse.com/security/cve/CVE-2020-25675/" source="CVE"/>
		<reference ref_id="CVE-2020-25676" ref_url="https://www.suse.com/security/cve/CVE-2020-25676/" source="CVE"/>
		<reference ref_id="CVE-2020-27750" ref_url="https://www.suse.com/security/cve/CVE-2020-27750/" source="CVE"/>
		<reference ref_id="CVE-2020-27751" ref_url="https://www.suse.com/security/cve/CVE-2020-27751/" source="CVE"/>
		<reference ref_id="CVE-2020-27752" ref_url="https://www.suse.com/security/cve/CVE-2020-27752/" source="CVE"/>
		<reference ref_id="CVE-2020-27753" ref_url="https://www.suse.com/security/cve/CVE-2020-27753/" source="CVE"/>
		<reference ref_id="CVE-2020-27754" ref_url="https://www.suse.com/security/cve/CVE-2020-27754/" source="CVE"/>
		<reference ref_id="CVE-2020-27755" ref_url="https://www.suse.com/security/cve/CVE-2020-27755/" source="CVE"/>
		<reference ref_id="CVE-2020-27756" ref_url="https://www.suse.com/security/cve/CVE-2020-27756/" source="CVE"/>
		<reference ref_id="CVE-2020-27757" ref_url="https://www.suse.com/security/cve/CVE-2020-27757/" source="CVE"/>
		<reference ref_id="CVE-2020-27758" ref_url="https://www.suse.com/security/cve/CVE-2020-27758/" source="CVE"/>
		<reference ref_id="CVE-2020-27759" ref_url="https://www.suse.com/security/cve/CVE-2020-27759/" source="CVE"/>
		<reference ref_id="CVE-2020-27760" ref_url="https://www.suse.com/security/cve/CVE-2020-27760/" source="CVE"/>
		<reference ref_id="CVE-2020-27761" ref_url="https://www.suse.com/security/cve/CVE-2020-27761/" source="CVE"/>
		<reference ref_id="CVE-2020-27762" ref_url="https://www.suse.com/security/cve/CVE-2020-27762/" source="CVE"/>
		<reference ref_id="CVE-2020-27763" ref_url="https://www.suse.com/security/cve/CVE-2020-27763/" source="CVE"/>
		<reference ref_id="CVE-2020-27764" ref_url="https://www.suse.com/security/cve/CVE-2020-27764/" source="CVE"/>
		<reference ref_id="CVE-2020-27765" ref_url="https://www.suse.com/security/cve/CVE-2020-27765/" source="CVE"/>
		<reference ref_id="CVE-2020-27766" ref_url="https://www.suse.com/security/cve/CVE-2020-27766/" source="CVE"/>
		<reference ref_id="CVE-2020-27767" ref_url="https://www.suse.com/security/cve/CVE-2020-27767/" source="CVE"/>
		<reference ref_id="CVE-2020-27768" ref_url="https://www.suse.com/security/cve/CVE-2020-27768/" source="CVE"/>
		<reference ref_id="CVE-2020-27769" ref_url="https://www.suse.com/security/cve/CVE-2020-27769/" source="CVE"/>
		<reference ref_id="CVE-2020-27770" ref_url="https://www.suse.com/security/cve/CVE-2020-27770/" source="CVE"/>
		<reference ref_id="CVE-2020-27771" ref_url="https://www.suse.com/security/cve/CVE-2020-27771/" source="CVE"/>
		<reference ref_id="CVE-2020-27772" ref_url="https://www.suse.com/security/cve/CVE-2020-27772/" source="CVE"/>
		<reference ref_id="CVE-2020-27773" ref_url="https://www.suse.com/security/cve/CVE-2020-27773/" source="CVE"/>
		<reference ref_id="CVE-2020-27774" ref_url="https://www.suse.com/security/cve/CVE-2020-27774/" source="CVE"/>
		<reference ref_id="CVE-2020-27775" ref_url="https://www.suse.com/security/cve/CVE-2020-27775/" source="CVE"/>
		<reference ref_id="CVE-2020-27776" ref_url="https://www.suse.com/security/cve/CVE-2020-27776/" source="CVE"/>
		<reference ref_id="CVE-2020-29599" ref_url="https://www.suse.com/security/cve/CVE-2020-29599/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).
- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).
- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).
- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).
- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).
- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).
- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).
- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).
- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).
- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).
- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).
- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).
- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).
- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).
- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).
- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).
- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).
- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).
- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).
- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).
- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).
- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).
- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).
- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).
- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).
- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).
- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).
- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).
- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).
- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).
- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).
- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).
- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).
- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).
- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-18"/>
	<updated date="2021-01-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179103">SUSE bug 1179103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179202">SUSE bug 1179202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179208">SUSE bug 1179208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179212">SUSE bug 1179212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179221">SUSE bug 1179221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179223">SUSE bug 1179223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179240">SUSE bug 1179240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179244">SUSE bug 1179244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179260">SUSE bug 1179260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179268">SUSE bug 1179268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179269">SUSE bug 1179269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179276">SUSE bug 1179276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179278">SUSE bug 1179278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179281">SUSE bug 1179281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179285">SUSE bug 1179285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179311">SUSE bug 1179311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179312">SUSE bug 1179312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179313">SUSE bug 1179313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179315">SUSE bug 1179315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179317">SUSE bug 1179317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179321">SUSE bug 1179321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179322">SUSE bug 1179322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179327">SUSE bug 1179327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179333">SUSE bug 1179333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179336">SUSE bug 1179336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179338">SUSE bug 1179338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179339">SUSE bug 1179339</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179343">SUSE bug 1179343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179345">SUSE bug 1179345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179346">SUSE bug 1179346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179347">SUSE bug 1179347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179361">SUSE bug 1179361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179362">SUSE bug 1179362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179397">SUSE bug 1179397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179753">SUSE bug 1179753</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-19667/">CVE-2020-19667</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-25664/">CVE-2020-25664</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25665/">CVE-2020-25665</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25666/">CVE-2020-25666</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25674/">CVE-2020-25674</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25675/">CVE-2020-25675</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25676/">CVE-2020-25676</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27750/">CVE-2020-27750</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27751/">CVE-2020-27751</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27752/">CVE-2020-27752</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27753/">CVE-2020-27753</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27754/">CVE-2020-27754</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27755/">CVE-2020-27755</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27756/">CVE-2020-27756</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27757/">CVE-2020-27757</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27758/">CVE-2020-27758</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27759/">CVE-2020-27759</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27760/">CVE-2020-27760</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27761/">CVE-2020-27761</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27762/">CVE-2020-27762</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27763/">CVE-2020-27763</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27764/">CVE-2020-27764</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27765/">CVE-2020-27765</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27766/">CVE-2020-27766</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27767/">CVE-2020-27767</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27768/">CVE-2020-27768</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27769/">CVE-2020-27769</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27770/">CVE-2020-27770</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27771/">CVE-2020-27771</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27772/">CVE-2020-27772</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27773/">CVE-2020-27773</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27774/">CVE-2020-27774</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27775/">CVE-2020-27775</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27776/">CVE-2020-27776</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29599/">CVE-2020-29599</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495619" comment="ImageMagick-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495620" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495621" comment="ImageMagick-config-7-upstream-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495622" comment="ImageMagick-devel-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495623" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495624" comment="libMagick++-devel-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495625" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495626" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.90.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138174" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1181414" ref_url="https://bugzilla.suse.com/1181414" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26976" ref_url="https://www.suse.com/security/cve/CVE-2020-26976/" source="CVE"/>
		<reference ref_id="CVE-2021-23953" ref_url="https://www.suse.com/security/cve/CVE-2021-23953/" source="CVE"/>
		<reference ref_id="CVE-2021-23954" ref_url="https://www.suse.com/security/cve/CVE-2021-23954/" source="CVE"/>
		<reference ref_id="CVE-2021-23960" ref_url="https://www.suse.com/security/cve/CVE-2021-23960/" source="CVE"/>
		<reference ref_id="CVE-2021-23964" ref_url="https://www.suse.com/security/cve/CVE-2021-23964/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008257.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.7.0 ESR  (MFSA 2021-04, bsc#1181414)
  * CVE-2021-23953: Fixed a Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954: Fixed a type confusion when using logical assignment operators in JavaScript switch statements
  * CVE-2020-26976: Fixed an issue where HTTPS pages could have been intercepted by a registered service worker when they should not have been
  * CVE-2021-23960: Fixed a use-after-poison for incorrectly redeclared JavaScript variables during GC
  * CVE-2021-23964: Fixed Memory safety bugs 	
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-29"/>
	<updated date="2021-01-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181414">SUSE bug 1181414</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26976/">CVE-2020-26976</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23953/">CVE-2021-23953</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23954/">CVE-2021-23954</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23960/">CVE-2021-23960</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23964/">CVE-2021-23964</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495627" comment="MozillaFirefox-78.7.0-3.128.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495628" comment="MozillaFirefox-devel-78.7.0-3.128.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495629" comment="MozillaFirefox-translations-common-78.7.0-3.128.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495630" comment="MozillaFirefox-translations-other-78.7.0-3.128.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138175" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Desktop Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1180623" ref_url="https://bugzilla.suse.com/1180623" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-16044" ref_url="https://www.suse.com/security/cve/CVE-2020-16044/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0072-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008170.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Critical security issue MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044
    Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-12"/>
	<updated date="2021-01-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180623">SUSE bug 1180623</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16044/">CVE-2020-16044</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-desktop-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255099" comment="SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495631" comment="MozillaFirefox-78.6.1-3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495632" comment="MozillaFirefox-devel-78.6.1-3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495633" comment="MozillaFirefox-translations-common-78.6.1-3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495634" comment="MozillaFirefox-translations-other-78.6.1-3.125.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138176" version="1" class="patch">
	<metadata>
		<title>Security update for graphviz (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1132091" ref_url="https://bugzilla.suse.com/1132091" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11023" ref_url="https://www.suse.com/security/cve/CVE-2019-11023/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1267-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005647.html" source="SUSE-SU"/>
		<description>
This update for graphviz fixes the following issues:

Security issue fixed:

- CVE-2019-11023: Fixed a denial of service vulnerability, which was caused by a NULL pointer dereference in agroot() (bsc#1132091).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-02"/>
	<updated date="2019-07-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1132091">SUSE bug 1132091</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11023/">CVE-2019-11023</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496033" comment="graphviz-perl-2.40.1-6.3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138177" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1130840" ref_url="https://bugzilla.suse.com/1130840" source="BUGZILLA"/>
		<reference ref_id="1133452" ref_url="https://bugzilla.suse.com/1133452" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9947" ref_url="https://www.suse.com/security/cve/CVE-2019-9947/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1352-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005696.html" source="SUSE-SU"/>
		<description>
This update for python3 to version 3.6.8 fixes the following issues:

Security issue fixed:

- CVE-2019-9947: Fixed an issue in urllib2 which allowed CRLF injection if the attacker controls a url parameter (bsc#1130840).

Non-security issue fixed:

- Fixed broken debuginfo packages by switching off LTO and PGO optimization (bsc#1133452).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-12"/>
	<updated date="2019-07-12"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1130840">SUSE bug 1130840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133452">SUSE bug 1133452</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9947/">CVE-2019-9947</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496034" comment="python3-tools-3.6.8-3.16.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138178" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1133204" ref_url="https://bugzilla.suse.com/1133204" source="BUGZILLA"/>
		<reference ref_id="1133205" ref_url="https://bugzilla.suse.com/1133205" source="BUGZILLA"/>
		<reference ref_id="1133498" ref_url="https://bugzilla.suse.com/1133498" source="BUGZILLA"/>
		<reference ref_id="1133501" ref_url="https://bugzilla.suse.com/1133501" source="BUGZILLA"/>
		<reference ref_id="1136183" ref_url="https://bugzilla.suse.com/1136183" source="BUGZILLA"/>
		<reference ref_id="1136732" ref_url="https://bugzilla.suse.com/1136732" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11470" ref_url="https://www.suse.com/security/cve/CVE-2019-11470/" source="CVE"/>
		<reference ref_id="CVE-2019-11472" ref_url="https://www.suse.com/security/cve/CVE-2019-11472/" source="CVE"/>
		<reference ref_id="CVE-2019-11505" ref_url="https://www.suse.com/security/cve/CVE-2019-11505/" source="CVE"/>
		<reference ref_id="CVE-2019-11506" ref_url="https://www.suse.com/security/cve/CVE-2019-11506/" source="CVE"/>
		<reference ref_id="CVE-2019-11598" ref_url="https://www.suse.com/security/cve/CVE-2019-11598/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1523-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005568.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

Security issues fixed:

- CVE-2019-11472: Fixed a denial-of-service in ReadXWDImage() (bsc#1133204).
- CVE-2019-11470: Fixed a denial-of-service in ReadCINImage() (bsc#1133205).
- CVE-2019-11506: Fixed a heap-based buffer overflow in the WriteMATLABImage() (bsc#1133498).
- CVE-2019-11505: Fixed a heap-based buffer overflow in the WritePDBImage() (bsc#1133501).
- CVE-2019-11598: Fixed a heap-based buffer overread in WritePNMImage() (bsc#1136732)

We also now disable PCL in the -SUSE configuration, as it also uses ghostscript for decoding (bsc#1136183)

		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-17"/>
	<updated date="2019-06-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1133204">SUSE bug 1133204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133205">SUSE bug 1133205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133498">SUSE bug 1133498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133501">SUSE bug 1133501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136183">SUSE bug 1136183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136732">SUSE bug 1136732</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11470/">CVE-2019-11470</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11472/">CVE-2019-11472</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11505/">CVE-2019-11505</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11506/">CVE-2019-11506</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11598/">CVE-2019-11598</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496035" comment="perl-PerlMagick-7.0.7.34-3.61.3 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138179" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1012382" ref_url="https://bugzilla.suse.com/1012382" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1052904" ref_url="https://bugzilla.suse.com/1052904" source="BUGZILLA"/>
		<reference ref_id="1053043" ref_url="https://bugzilla.suse.com/1053043" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1055121" ref_url="https://bugzilla.suse.com/1055121" source="BUGZILLA"/>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1063638" ref_url="https://bugzilla.suse.com/1063638" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1068546" ref_url="https://bugzilla.suse.com/1068546" source="BUGZILLA"/>
		<reference ref_id="1070872" ref_url="https://bugzilla.suse.com/1070872" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1075020" ref_url="https://bugzilla.suse.com/1075020" source="BUGZILLA"/>
		<reference ref_id="1082387" ref_url="https://bugzilla.suse.com/1082387" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085535" ref_url="https://bugzilla.suse.com/1085535" source="BUGZILLA"/>
		<reference ref_id="1085536" ref_url="https://bugzilla.suse.com/1085536" source="BUGZILLA"/>
		<reference ref_id="1086657" ref_url="https://bugzilla.suse.com/1086657" source="BUGZILLA"/>
		<reference ref_id="1088804" ref_url="https://bugzilla.suse.com/1088804" source="BUGZILLA"/>
		<reference ref_id="1093389" ref_url="https://bugzilla.suse.com/1093389" source="BUGZILLA"/>
		<reference ref_id="1097583" ref_url="https://bugzilla.suse.com/1097583" source="BUGZILLA"/>
		<reference ref_id="1097584" ref_url="https://bugzilla.suse.com/1097584" source="BUGZILLA"/>
		<reference ref_id="1097585" ref_url="https://bugzilla.suse.com/1097585" source="BUGZILLA"/>
		<reference ref_id="1097586" ref_url="https://bugzilla.suse.com/1097586" source="BUGZILLA"/>
		<reference ref_id="1097587" ref_url="https://bugzilla.suse.com/1097587" source="BUGZILLA"/>
		<reference ref_id="1097588" ref_url="https://bugzilla.suse.com/1097588" source="BUGZILLA"/>
		<reference ref_id="1099658" ref_url="https://bugzilla.suse.com/1099658" source="BUGZILLA"/>
		<reference ref_id="1103186" ref_url="https://bugzilla.suse.com/1103186" source="BUGZILLA"/>
		<reference ref_id="1103259" ref_url="https://bugzilla.suse.com/1103259" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1106011" ref_url="https://bugzilla.suse.com/1106011" source="BUGZILLA"/>
		<reference ref_id="1106284" ref_url="https://bugzilla.suse.com/1106284" source="BUGZILLA"/>
		<reference ref_id="1108193" ref_url="https://bugzilla.suse.com/1108193" source="BUGZILLA"/>
		<reference ref_id="1108838" ref_url="https://bugzilla.suse.com/1108838" source="BUGZILLA"/>
		<reference ref_id="1108937" ref_url="https://bugzilla.suse.com/1108937" source="BUGZILLA"/>
		<reference ref_id="1110946" ref_url="https://bugzilla.suse.com/1110946" source="BUGZILLA"/>
		<reference ref_id="1111331" ref_url="https://bugzilla.suse.com/1111331" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1111696" ref_url="https://bugzilla.suse.com/1111696" source="BUGZILLA"/>
		<reference ref_id="1112063" ref_url="https://bugzilla.suse.com/1112063" source="BUGZILLA"/>
		<reference ref_id="1112128" ref_url="https://bugzilla.suse.com/1112128" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114427" ref_url="https://bugzilla.suse.com/1114427" source="BUGZILLA"/>
		<reference ref_id="1114542" ref_url="https://bugzilla.suse.com/1114542" source="BUGZILLA"/>
		<reference ref_id="1114638" ref_url="https://bugzilla.suse.com/1114638" source="BUGZILLA"/>
		<reference ref_id="1115688" ref_url="https://bugzilla.suse.com/1115688" source="BUGZILLA"/>
		<reference ref_id="1117114" ref_url="https://bugzilla.suse.com/1117114" source="BUGZILLA"/>
		<reference ref_id="1117158" ref_url="https://bugzilla.suse.com/1117158" source="BUGZILLA"/>
		<reference ref_id="1117561" ref_url="https://bugzilla.suse.com/1117561" source="BUGZILLA"/>
		<reference ref_id="1118139" ref_url="https://bugzilla.suse.com/1118139" source="BUGZILLA"/>
		<reference ref_id="1119680" ref_url="https://bugzilla.suse.com/1119680" source="BUGZILLA"/>
		<reference ref_id="1119843" ref_url="https://bugzilla.suse.com/1119843" source="BUGZILLA"/>
		<reference ref_id="1120091" ref_url="https://bugzilla.suse.com/1120091" source="BUGZILLA"/>
		<reference ref_id="1120318" ref_url="https://bugzilla.suse.com/1120318" source="BUGZILLA"/>
		<reference ref_id="1120423" ref_url="https://bugzilla.suse.com/1120423" source="BUGZILLA"/>
		<reference ref_id="1120566" ref_url="https://bugzilla.suse.com/1120566" source="BUGZILLA"/>
		<reference ref_id="1120843" ref_url="https://bugzilla.suse.com/1120843" source="BUGZILLA"/>
		<reference ref_id="1120902" ref_url="https://bugzilla.suse.com/1120902" source="BUGZILLA"/>
		<reference ref_id="1122767" ref_url="https://bugzilla.suse.com/1122767" source="BUGZILLA"/>
		<reference ref_id="1122776" ref_url="https://bugzilla.suse.com/1122776" source="BUGZILLA"/>
		<reference ref_id="1123454" ref_url="https://bugzilla.suse.com/1123454" source="BUGZILLA"/>
		<reference ref_id="1123663" ref_url="https://bugzilla.suse.com/1123663" source="BUGZILLA"/>
		<reference ref_id="1124503" ref_url="https://bugzilla.suse.com/1124503" source="BUGZILLA"/>
		<reference ref_id="1124839" ref_url="https://bugzilla.suse.com/1124839" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1126356" ref_url="https://bugzilla.suse.com/1126356" source="BUGZILLA"/>
		<reference ref_id="1126704" ref_url="https://bugzilla.suse.com/1126704" source="BUGZILLA"/>
		<reference ref_id="1127175" ref_url="https://bugzilla.suse.com/1127175" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1127374" ref_url="https://bugzilla.suse.com/1127374" source="BUGZILLA"/>
		<reference ref_id="1127616" ref_url="https://bugzilla.suse.com/1127616" source="BUGZILLA"/>
		<reference ref_id="1128052" ref_url="https://bugzilla.suse.com/1128052" source="BUGZILLA"/>
		<reference ref_id="1128415" ref_url="https://bugzilla.suse.com/1128415" source="BUGZILLA"/>
		<reference ref_id="1128544" ref_url="https://bugzilla.suse.com/1128544" source="BUGZILLA"/>
		<reference ref_id="1128904" ref_url="https://bugzilla.suse.com/1128904" source="BUGZILLA"/>
		<reference ref_id="1128971" ref_url="https://bugzilla.suse.com/1128971" source="BUGZILLA"/>
		<reference ref_id="1128979" ref_url="https://bugzilla.suse.com/1128979" source="BUGZILLA"/>
		<reference ref_id="1129138" ref_url="https://bugzilla.suse.com/1129138" source="BUGZILLA"/>
		<reference ref_id="1129273" ref_url="https://bugzilla.suse.com/1129273" source="BUGZILLA"/>
		<reference ref_id="1129497" ref_url="https://bugzilla.suse.com/1129497" source="BUGZILLA"/>
		<reference ref_id="1129693" ref_url="https://bugzilla.suse.com/1129693" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1129845" ref_url="https://bugzilla.suse.com/1129845" source="BUGZILLA"/>
		<reference ref_id="1130195" ref_url="https://bugzilla.suse.com/1130195" source="BUGZILLA"/>
		<reference ref_id="1130425" ref_url="https://bugzilla.suse.com/1130425" source="BUGZILLA"/>
		<reference ref_id="1130527" ref_url="https://bugzilla.suse.com/1130527" source="BUGZILLA"/>
		<reference ref_id="1130567" ref_url="https://bugzilla.suse.com/1130567" source="BUGZILLA"/>
		<reference ref_id="1130579" ref_url="https://bugzilla.suse.com/1130579" source="BUGZILLA"/>
		<reference ref_id="1130699" ref_url="https://bugzilla.suse.com/1130699" source="BUGZILLA"/>
		<reference ref_id="1130937" ref_url="https://bugzilla.suse.com/1130937" source="BUGZILLA"/>
		<reference ref_id="1130972" ref_url="https://bugzilla.suse.com/1130972" source="BUGZILLA"/>
		<reference ref_id="1131326" ref_url="https://bugzilla.suse.com/1131326" source="BUGZILLA"/>
		<reference ref_id="1131427" ref_url="https://bugzilla.suse.com/1131427" source="BUGZILLA"/>
		<reference ref_id="1131438" ref_url="https://bugzilla.suse.com/1131438" source="BUGZILLA"/>
		<reference ref_id="1131451" ref_url="https://bugzilla.suse.com/1131451" source="BUGZILLA"/>
		<reference ref_id="1131467" ref_url="https://bugzilla.suse.com/1131467" source="BUGZILLA"/>
		<reference ref_id="1131488" ref_url="https://bugzilla.suse.com/1131488" source="BUGZILLA"/>
		<reference ref_id="1131530" ref_url="https://bugzilla.suse.com/1131530" source="BUGZILLA"/>
		<reference ref_id="1131565" ref_url="https://bugzilla.suse.com/1131565" source="BUGZILLA"/>
		<reference ref_id="1131574" ref_url="https://bugzilla.suse.com/1131574" source="BUGZILLA"/>
		<reference ref_id="1131587" ref_url="https://bugzilla.suse.com/1131587" source="BUGZILLA"/>
		<reference ref_id="1131659" ref_url="https://bugzilla.suse.com/1131659" source="BUGZILLA"/>
		<reference ref_id="1131673" ref_url="https://bugzilla.suse.com/1131673" source="BUGZILLA"/>
		<reference ref_id="1131847" ref_url="https://bugzilla.suse.com/1131847" source="BUGZILLA"/>
		<reference ref_id="1131848" ref_url="https://bugzilla.suse.com/1131848" source="BUGZILLA"/>
		<reference ref_id="1131851" ref_url="https://bugzilla.suse.com/1131851" source="BUGZILLA"/>
		<reference ref_id="1131900" ref_url="https://bugzilla.suse.com/1131900" source="BUGZILLA"/>
		<reference ref_id="1131934" ref_url="https://bugzilla.suse.com/1131934" source="BUGZILLA"/>
		<reference ref_id="1131935" ref_url="https://bugzilla.suse.com/1131935" source="BUGZILLA"/>
		<reference ref_id="1132044" ref_url="https://bugzilla.suse.com/1132044" source="BUGZILLA"/>
		<reference ref_id="1132219" ref_url="https://bugzilla.suse.com/1132219" source="BUGZILLA"/>
		<reference ref_id="1132226" ref_url="https://bugzilla.suse.com/1132226" source="BUGZILLA"/>
		<reference ref_id="1132227" ref_url="https://bugzilla.suse.com/1132227" source="BUGZILLA"/>
		<reference ref_id="1132365" ref_url="https://bugzilla.suse.com/1132365" source="BUGZILLA"/>
		<reference ref_id="1132368" ref_url="https://bugzilla.suse.com/1132368" source="BUGZILLA"/>
		<reference ref_id="1132369" ref_url="https://bugzilla.suse.com/1132369" source="BUGZILLA"/>
		<reference ref_id="1132370" ref_url="https://bugzilla.suse.com/1132370" source="BUGZILLA"/>
		<reference ref_id="1132372" ref_url="https://bugzilla.suse.com/1132372" source="BUGZILLA"/>
		<reference ref_id="1132373" ref_url="https://bugzilla.suse.com/1132373" source="BUGZILLA"/>
		<reference ref_id="1132384" ref_url="https://bugzilla.suse.com/1132384" source="BUGZILLA"/>
		<reference ref_id="1132397" ref_url="https://bugzilla.suse.com/1132397" source="BUGZILLA"/>
		<reference ref_id="1132402" ref_url="https://bugzilla.suse.com/1132402" source="BUGZILLA"/>
		<reference ref_id="1132403" ref_url="https://bugzilla.suse.com/1132403" source="BUGZILLA"/>
		<reference ref_id="1132404" ref_url="https://bugzilla.suse.com/1132404" source="BUGZILLA"/>
		<reference ref_id="1132405" ref_url="https://bugzilla.suse.com/1132405" source="BUGZILLA"/>
		<reference ref_id="1132407" ref_url="https://bugzilla.suse.com/1132407" source="BUGZILLA"/>
		<reference ref_id="1132411" ref_url="https://bugzilla.suse.com/1132411" source="BUGZILLA"/>
		<reference ref_id="1132412" ref_url="https://bugzilla.suse.com/1132412" source="BUGZILLA"/>
		<reference ref_id="1132413" ref_url="https://bugzilla.suse.com/1132413" source="BUGZILLA"/>
		<reference ref_id="1132414" ref_url="https://bugzilla.suse.com/1132414" source="BUGZILLA"/>
		<reference ref_id="1132426" ref_url="https://bugzilla.suse.com/1132426" source="BUGZILLA"/>
		<reference ref_id="1132527" ref_url="https://bugzilla.suse.com/1132527" source="BUGZILLA"/>
		<reference ref_id="1132531" ref_url="https://bugzilla.suse.com/1132531" source="BUGZILLA"/>
		<reference ref_id="1132555" ref_url="https://bugzilla.suse.com/1132555" source="BUGZILLA"/>
		<reference ref_id="1132558" ref_url="https://bugzilla.suse.com/1132558" source="BUGZILLA"/>
		<reference ref_id="1132561" ref_url="https://bugzilla.suse.com/1132561" source="BUGZILLA"/>
		<reference ref_id="1132562" ref_url="https://bugzilla.suse.com/1132562" source="BUGZILLA"/>
		<reference ref_id="1132563" ref_url="https://bugzilla.suse.com/1132563" source="BUGZILLA"/>
		<reference ref_id="1132564" ref_url="https://bugzilla.suse.com/1132564" source="BUGZILLA"/>
		<reference ref_id="1132570" ref_url="https://bugzilla.suse.com/1132570" source="BUGZILLA"/>
		<reference ref_id="1132571" ref_url="https://bugzilla.suse.com/1132571" source="BUGZILLA"/>
		<reference ref_id="1132572" ref_url="https://bugzilla.suse.com/1132572" source="BUGZILLA"/>
		<reference ref_id="1132589" ref_url="https://bugzilla.suse.com/1132589" source="BUGZILLA"/>
		<reference ref_id="1132618" ref_url="https://bugzilla.suse.com/1132618" source="BUGZILLA"/>
		<reference ref_id="1132673" ref_url="https://bugzilla.suse.com/1132673" source="BUGZILLA"/>
		<reference ref_id="1132681" ref_url="https://bugzilla.suse.com/1132681" source="BUGZILLA"/>
		<reference ref_id="1132726" ref_url="https://bugzilla.suse.com/1132726" source="BUGZILLA"/>
		<reference ref_id="1132828" ref_url="https://bugzilla.suse.com/1132828" source="BUGZILLA"/>
		<reference ref_id="1132894" ref_url="https://bugzilla.suse.com/1132894" source="BUGZILLA"/>
		<reference ref_id="1132943" ref_url="https://bugzilla.suse.com/1132943" source="BUGZILLA"/>
		<reference ref_id="1132982" ref_url="https://bugzilla.suse.com/1132982" source="BUGZILLA"/>
		<reference ref_id="1133005" ref_url="https://bugzilla.suse.com/1133005" source="BUGZILLA"/>
		<reference ref_id="1133016" ref_url="https://bugzilla.suse.com/1133016" source="BUGZILLA"/>
		<reference ref_id="1133094" ref_url="https://bugzilla.suse.com/1133094" source="BUGZILLA"/>
		<reference ref_id="1133095" ref_url="https://bugzilla.suse.com/1133095" source="BUGZILLA"/>
		<reference ref_id="1133115" ref_url="https://bugzilla.suse.com/1133115" source="BUGZILLA"/>
		<reference ref_id="1133149" ref_url="https://bugzilla.suse.com/1133149" source="BUGZILLA"/>
		<reference ref_id="1133176" ref_url="https://bugzilla.suse.com/1133176" source="BUGZILLA"/>
		<reference ref_id="1133188" ref_url="https://bugzilla.suse.com/1133188" source="BUGZILLA"/>
		<reference ref_id="1133190" ref_url="https://bugzilla.suse.com/1133190" source="BUGZILLA"/>
		<reference ref_id="1133320" ref_url="https://bugzilla.suse.com/1133320" source="BUGZILLA"/>
		<reference ref_id="1133486" ref_url="https://bugzilla.suse.com/1133486" source="BUGZILLA"/>
		<reference ref_id="1133529" ref_url="https://bugzilla.suse.com/1133529" source="BUGZILLA"/>
		<reference ref_id="1133547" ref_url="https://bugzilla.suse.com/1133547" source="BUGZILLA"/>
		<reference ref_id="1133584" ref_url="https://bugzilla.suse.com/1133584" source="BUGZILLA"/>
		<reference ref_id="1133593" ref_url="https://bugzilla.suse.com/1133593" source="BUGZILLA"/>
		<reference ref_id="1133612" ref_url="https://bugzilla.suse.com/1133612" source="BUGZILLA"/>
		<reference ref_id="1133616" ref_url="https://bugzilla.suse.com/1133616" source="BUGZILLA"/>
		<reference ref_id="1133667" ref_url="https://bugzilla.suse.com/1133667" source="BUGZILLA"/>
		<reference ref_id="1133668" ref_url="https://bugzilla.suse.com/1133668" source="BUGZILLA"/>
		<reference ref_id="1133672" ref_url="https://bugzilla.suse.com/1133672" source="BUGZILLA"/>
		<reference ref_id="1133674" ref_url="https://bugzilla.suse.com/1133674" source="BUGZILLA"/>
		<reference ref_id="1133675" ref_url="https://bugzilla.suse.com/1133675" source="BUGZILLA"/>
		<reference ref_id="1133698" ref_url="https://bugzilla.suse.com/1133698" source="BUGZILLA"/>
		<reference ref_id="1133702" ref_url="https://bugzilla.suse.com/1133702" source="BUGZILLA"/>
		<reference ref_id="1133731" ref_url="https://bugzilla.suse.com/1133731" source="BUGZILLA"/>
		<reference ref_id="1133769" ref_url="https://bugzilla.suse.com/1133769" source="BUGZILLA"/>
		<reference ref_id="1133772" ref_url="https://bugzilla.suse.com/1133772" source="BUGZILLA"/>
		<reference ref_id="1133774" ref_url="https://bugzilla.suse.com/1133774" source="BUGZILLA"/>
		<reference ref_id="1133778" ref_url="https://bugzilla.suse.com/1133778" source="BUGZILLA"/>
		<reference ref_id="1133779" ref_url="https://bugzilla.suse.com/1133779" source="BUGZILLA"/>
		<reference ref_id="1133780" ref_url="https://bugzilla.suse.com/1133780" source="BUGZILLA"/>
		<reference ref_id="1133825" ref_url="https://bugzilla.suse.com/1133825" source="BUGZILLA"/>
		<reference ref_id="1133850" ref_url="https://bugzilla.suse.com/1133850" source="BUGZILLA"/>
		<reference ref_id="1133851" ref_url="https://bugzilla.suse.com/1133851" source="BUGZILLA"/>
		<reference ref_id="1133852" ref_url="https://bugzilla.suse.com/1133852" source="BUGZILLA"/>
		<reference ref_id="1133897" ref_url="https://bugzilla.suse.com/1133897" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1134160" ref_url="https://bugzilla.suse.com/1134160" source="BUGZILLA"/>
		<reference ref_id="1134162" ref_url="https://bugzilla.suse.com/1134162" source="BUGZILLA"/>
		<reference ref_id="1134199" ref_url="https://bugzilla.suse.com/1134199" source="BUGZILLA"/>
		<reference ref_id="1134200" ref_url="https://bugzilla.suse.com/1134200" source="BUGZILLA"/>
		<reference ref_id="1134201" ref_url="https://bugzilla.suse.com/1134201" source="BUGZILLA"/>
		<reference ref_id="1134202" ref_url="https://bugzilla.suse.com/1134202" source="BUGZILLA"/>
		<reference ref_id="1134203" ref_url="https://bugzilla.suse.com/1134203" source="BUGZILLA"/>
		<reference ref_id="1134204" ref_url="https://bugzilla.suse.com/1134204" source="BUGZILLA"/>
		<reference ref_id="1134205" ref_url="https://bugzilla.suse.com/1134205" source="BUGZILLA"/>
		<reference ref_id="1134223" ref_url="https://bugzilla.suse.com/1134223" source="BUGZILLA"/>
		<reference ref_id="1134354" ref_url="https://bugzilla.suse.com/1134354" source="BUGZILLA"/>
		<reference ref_id="1134393" ref_url="https://bugzilla.suse.com/1134393" source="BUGZILLA"/>
		<reference ref_id="1134397" ref_url="https://bugzilla.suse.com/1134397" source="BUGZILLA"/>
		<reference ref_id="1134459" ref_url="https://bugzilla.suse.com/1134459" source="BUGZILLA"/>
		<reference ref_id="1134460" ref_url="https://bugzilla.suse.com/1134460" source="BUGZILLA"/>
		<reference ref_id="1134461" ref_url="https://bugzilla.suse.com/1134461" source="BUGZILLA"/>
		<reference ref_id="1134597" ref_url="https://bugzilla.suse.com/1134597" source="BUGZILLA"/>
		<reference ref_id="1134600" ref_url="https://bugzilla.suse.com/1134600" source="BUGZILLA"/>
		<reference ref_id="1134607" ref_url="https://bugzilla.suse.com/1134607" source="BUGZILLA"/>
		<reference ref_id="1134618" ref_url="https://bugzilla.suse.com/1134618" source="BUGZILLA"/>
		<reference ref_id="1134651" ref_url="https://bugzilla.suse.com/1134651" source="BUGZILLA"/>
		<reference ref_id="1134671" ref_url="https://bugzilla.suse.com/1134671" source="BUGZILLA"/>
		<reference ref_id="1134760" ref_url="https://bugzilla.suse.com/1134760" source="BUGZILLA"/>
		<reference ref_id="1134806" ref_url="https://bugzilla.suse.com/1134806" source="BUGZILLA"/>
		<reference ref_id="1134810" ref_url="https://bugzilla.suse.com/1134810" source="BUGZILLA"/>
		<reference ref_id="1134813" ref_url="https://bugzilla.suse.com/1134813" source="BUGZILLA"/>
		<reference ref_id="1134848" ref_url="https://bugzilla.suse.com/1134848" source="BUGZILLA"/>
		<reference ref_id="1134936" ref_url="https://bugzilla.suse.com/1134936" source="BUGZILLA"/>
		<reference ref_id="1134945" ref_url="https://bugzilla.suse.com/1134945" source="BUGZILLA"/>
		<reference ref_id="1134946" ref_url="https://bugzilla.suse.com/1134946" source="BUGZILLA"/>
		<reference ref_id="1134947" ref_url="https://bugzilla.suse.com/1134947" source="BUGZILLA"/>
		<reference ref_id="1134948" ref_url="https://bugzilla.suse.com/1134948" source="BUGZILLA"/>
		<reference ref_id="1134949" ref_url="https://bugzilla.suse.com/1134949" source="BUGZILLA"/>
		<reference ref_id="1134950" ref_url="https://bugzilla.suse.com/1134950" source="BUGZILLA"/>
		<reference ref_id="1134951" ref_url="https://bugzilla.suse.com/1134951" source="BUGZILLA"/>
		<reference ref_id="1134952" ref_url="https://bugzilla.suse.com/1134952" source="BUGZILLA"/>
		<reference ref_id="1134953" ref_url="https://bugzilla.suse.com/1134953" source="BUGZILLA"/>
		<reference ref_id="1134972" ref_url="https://bugzilla.suse.com/1134972" source="BUGZILLA"/>
		<reference ref_id="1134974" ref_url="https://bugzilla.suse.com/1134974" source="BUGZILLA"/>
		<reference ref_id="1134975" ref_url="https://bugzilla.suse.com/1134975" source="BUGZILLA"/>
		<reference ref_id="1134980" ref_url="https://bugzilla.suse.com/1134980" source="BUGZILLA"/>
		<reference ref_id="1134981" ref_url="https://bugzilla.suse.com/1134981" source="BUGZILLA"/>
		<reference ref_id="1134983" ref_url="https://bugzilla.suse.com/1134983" source="BUGZILLA"/>
		<reference ref_id="1134987" ref_url="https://bugzilla.suse.com/1134987" source="BUGZILLA"/>
		<reference ref_id="1134989" ref_url="https://bugzilla.suse.com/1134989" source="BUGZILLA"/>
		<reference ref_id="1134990" ref_url="https://bugzilla.suse.com/1134990" source="BUGZILLA"/>
		<reference ref_id="1134994" ref_url="https://bugzilla.suse.com/1134994" source="BUGZILLA"/>
		<reference ref_id="1134995" ref_url="https://bugzilla.suse.com/1134995" source="BUGZILLA"/>
		<reference ref_id="1134998" ref_url="https://bugzilla.suse.com/1134998" source="BUGZILLA"/>
		<reference ref_id="1134999" ref_url="https://bugzilla.suse.com/1134999" source="BUGZILLA"/>
		<reference ref_id="1135006" ref_url="https://bugzilla.suse.com/1135006" source="BUGZILLA"/>
		<reference ref_id="1135007" ref_url="https://bugzilla.suse.com/1135007" source="BUGZILLA"/>
		<reference ref_id="1135008" ref_url="https://bugzilla.suse.com/1135008" source="BUGZILLA"/>
		<reference ref_id="1135018" ref_url="https://bugzilla.suse.com/1135018" source="BUGZILLA"/>
		<reference ref_id="1135021" ref_url="https://bugzilla.suse.com/1135021" source="BUGZILLA"/>
		<reference ref_id="1135024" ref_url="https://bugzilla.suse.com/1135024" source="BUGZILLA"/>
		<reference ref_id="1135026" ref_url="https://bugzilla.suse.com/1135026" source="BUGZILLA"/>
		<reference ref_id="1135027" ref_url="https://bugzilla.suse.com/1135027" source="BUGZILLA"/>
		<reference ref_id="1135028" ref_url="https://bugzilla.suse.com/1135028" source="BUGZILLA"/>
		<reference ref_id="1135029" ref_url="https://bugzilla.suse.com/1135029" source="BUGZILLA"/>
		<reference ref_id="1135031" ref_url="https://bugzilla.suse.com/1135031" source="BUGZILLA"/>
		<reference ref_id="1135033" ref_url="https://bugzilla.suse.com/1135033" source="BUGZILLA"/>
		<reference ref_id="1135034" ref_url="https://bugzilla.suse.com/1135034" source="BUGZILLA"/>
		<reference ref_id="1135035" ref_url="https://bugzilla.suse.com/1135035" source="BUGZILLA"/>
		<reference ref_id="1135036" ref_url="https://bugzilla.suse.com/1135036" source="BUGZILLA"/>
		<reference ref_id="1135037" ref_url="https://bugzilla.suse.com/1135037" source="BUGZILLA"/>
		<reference ref_id="1135038" ref_url="https://bugzilla.suse.com/1135038" source="BUGZILLA"/>
		<reference ref_id="1135039" ref_url="https://bugzilla.suse.com/1135039" source="BUGZILLA"/>
		<reference ref_id="1135041" ref_url="https://bugzilla.suse.com/1135041" source="BUGZILLA"/>
		<reference ref_id="1135042" ref_url="https://bugzilla.suse.com/1135042" source="BUGZILLA"/>
		<reference ref_id="1135044" ref_url="https://bugzilla.suse.com/1135044" source="BUGZILLA"/>
		<reference ref_id="1135045" ref_url="https://bugzilla.suse.com/1135045" source="BUGZILLA"/>
		<reference ref_id="1135046" ref_url="https://bugzilla.suse.com/1135046" source="BUGZILLA"/>
		<reference ref_id="1135047" ref_url="https://bugzilla.suse.com/1135047" source="BUGZILLA"/>
		<reference ref_id="1135049" ref_url="https://bugzilla.suse.com/1135049" source="BUGZILLA"/>
		<reference ref_id="1135051" ref_url="https://bugzilla.suse.com/1135051" source="BUGZILLA"/>
		<reference ref_id="1135052" ref_url="https://bugzilla.suse.com/1135052" source="BUGZILLA"/>
		<reference ref_id="1135053" ref_url="https://bugzilla.suse.com/1135053" source="BUGZILLA"/>
		<reference ref_id="1135055" ref_url="https://bugzilla.suse.com/1135055" source="BUGZILLA"/>
		<reference ref_id="1135056" ref_url="https://bugzilla.suse.com/1135056" source="BUGZILLA"/>
		<reference ref_id="1135058" ref_url="https://bugzilla.suse.com/1135058" source="BUGZILLA"/>
		<reference ref_id="1135100" ref_url="https://bugzilla.suse.com/1135100" source="BUGZILLA"/>
		<reference ref_id="1135120" ref_url="https://bugzilla.suse.com/1135120" source="BUGZILLA"/>
		<reference ref_id="1135278" ref_url="https://bugzilla.suse.com/1135278" source="BUGZILLA"/>
		<reference ref_id="1135281" ref_url="https://bugzilla.suse.com/1135281" source="BUGZILLA"/>
		<reference ref_id="1135309" ref_url="https://bugzilla.suse.com/1135309" source="BUGZILLA"/>
		<reference ref_id="1135312" ref_url="https://bugzilla.suse.com/1135312" source="BUGZILLA"/>
		<reference ref_id="1135314" ref_url="https://bugzilla.suse.com/1135314" source="BUGZILLA"/>
		<reference ref_id="1135315" ref_url="https://bugzilla.suse.com/1135315" source="BUGZILLA"/>
		<reference ref_id="1135316" ref_url="https://bugzilla.suse.com/1135316" source="BUGZILLA"/>
		<reference ref_id="1135320" ref_url="https://bugzilla.suse.com/1135320" source="BUGZILLA"/>
		<reference ref_id="1135323" ref_url="https://bugzilla.suse.com/1135323" source="BUGZILLA"/>
		<reference ref_id="1135330" ref_url="https://bugzilla.suse.com/1135330" source="BUGZILLA"/>
		<reference ref_id="1135492" ref_url="https://bugzilla.suse.com/1135492" source="BUGZILLA"/>
		<reference ref_id="1135542" ref_url="https://bugzilla.suse.com/1135542" source="BUGZILLA"/>
		<reference ref_id="1135556" ref_url="https://bugzilla.suse.com/1135556" source="BUGZILLA"/>
		<reference ref_id="1135603" ref_url="https://bugzilla.suse.com/1135603" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135661" ref_url="https://bugzilla.suse.com/1135661" source="BUGZILLA"/>
		<reference ref_id="1135758" ref_url="https://bugzilla.suse.com/1135758" source="BUGZILLA"/>
		<reference ref_id="1136188" ref_url="https://bugzilla.suse.com/1136188" source="BUGZILLA"/>
		<reference ref_id="1136206" ref_url="https://bugzilla.suse.com/1136206" source="BUGZILLA"/>
		<reference ref_id="1136215" ref_url="https://bugzilla.suse.com/1136215" source="BUGZILLA"/>
		<reference ref_id="1136345" ref_url="https://bugzilla.suse.com/1136345" source="BUGZILLA"/>
		<reference ref_id="1136347" ref_url="https://bugzilla.suse.com/1136347" source="BUGZILLA"/>
		<reference ref_id="1136348" ref_url="https://bugzilla.suse.com/1136348" source="BUGZILLA"/>
		<reference ref_id="1136353" ref_url="https://bugzilla.suse.com/1136353" source="BUGZILLA"/>
		<reference ref_id="1136424" ref_url="https://bugzilla.suse.com/1136424" source="BUGZILLA"/>
		<reference ref_id="1136428" ref_url="https://bugzilla.suse.com/1136428" source="BUGZILLA"/>
		<reference ref_id="1136430" ref_url="https://bugzilla.suse.com/1136430" source="BUGZILLA"/>
		<reference ref_id="1136432" ref_url="https://bugzilla.suse.com/1136432" source="BUGZILLA"/>
		<reference ref_id="1136434" ref_url="https://bugzilla.suse.com/1136434" source="BUGZILLA"/>
		<reference ref_id="1136435" ref_url="https://bugzilla.suse.com/1136435" source="BUGZILLA"/>
		<reference ref_id="1136438" ref_url="https://bugzilla.suse.com/1136438" source="BUGZILLA"/>
		<reference ref_id="1136439" ref_url="https://bugzilla.suse.com/1136439" source="BUGZILLA"/>
		<reference ref_id="1136456" ref_url="https://bugzilla.suse.com/1136456" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1136469" ref_url="https://bugzilla.suse.com/1136469" source="BUGZILLA"/>
		<reference ref_id="1136477" ref_url="https://bugzilla.suse.com/1136477" source="BUGZILLA"/>
		<reference ref_id="1136478" ref_url="https://bugzilla.suse.com/1136478" source="BUGZILLA"/>
		<reference ref_id="1136498" ref_url="https://bugzilla.suse.com/1136498" source="BUGZILLA"/>
		<reference ref_id="1136573" ref_url="https://bugzilla.suse.com/1136573" source="BUGZILLA"/>
		<reference ref_id="1136586" ref_url="https://bugzilla.suse.com/1136586" source="BUGZILLA"/>
		<reference ref_id="1136881" ref_url="https://bugzilla.suse.com/1136881" source="BUGZILLA"/>
		<reference ref_id="1136935" ref_url="https://bugzilla.suse.com/1136935" source="BUGZILLA"/>
		<reference ref_id="1136990" ref_url="https://bugzilla.suse.com/1136990" source="BUGZILLA"/>
		<reference ref_id="1137151" ref_url="https://bugzilla.suse.com/1137151" source="BUGZILLA"/>
		<reference ref_id="1137152" ref_url="https://bugzilla.suse.com/1137152" source="BUGZILLA"/>
		<reference ref_id="1137153" ref_url="https://bugzilla.suse.com/1137153" source="BUGZILLA"/>
		<reference ref_id="1137162" ref_url="https://bugzilla.suse.com/1137162" source="BUGZILLA"/>
		<reference ref_id="1137201" ref_url="https://bugzilla.suse.com/1137201" source="BUGZILLA"/>
		<reference ref_id="1137224" ref_url="https://bugzilla.suse.com/1137224" source="BUGZILLA"/>
		<reference ref_id="1137232" ref_url="https://bugzilla.suse.com/1137232" source="BUGZILLA"/>
		<reference ref_id="1137233" ref_url="https://bugzilla.suse.com/1137233" source="BUGZILLA"/>
		<reference ref_id="1137236" ref_url="https://bugzilla.suse.com/1137236" source="BUGZILLA"/>
		<reference ref_id="1137372" ref_url="https://bugzilla.suse.com/1137372" source="BUGZILLA"/>
		<reference ref_id="1137429" ref_url="https://bugzilla.suse.com/1137429" source="BUGZILLA"/>
		<reference ref_id="1137444" ref_url="https://bugzilla.suse.com/1137444" source="BUGZILLA"/>
		<reference ref_id="1137586" ref_url="https://bugzilla.suse.com/1137586" source="BUGZILLA"/>
		<reference ref_id="1137739" ref_url="https://bugzilla.suse.com/1137739" source="BUGZILLA"/>
		<reference ref_id="1137752" ref_url="https://bugzilla.suse.com/1137752" source="BUGZILLA"/>
		<reference ref_id="1138291" ref_url="https://bugzilla.suse.com/1138291" source="BUGZILLA"/>
		<reference ref_id="1138293" ref_url="https://bugzilla.suse.com/1138293" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126/" source="CVE"/>
		<reference ref_id="CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127/" source="CVE"/>
		<reference ref_id="CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130/" source="CVE"/>
		<reference ref_id="CVE-2018-16880" ref_url="https://www.suse.com/security/cve/CVE-2018-16880/" source="CVE"/>
		<reference ref_id="CVE-2018-7191" ref_url="https://www.suse.com/security/cve/CVE-2018-7191/" source="CVE"/>
		<reference ref_id="CVE-2019-10124" ref_url="https://www.suse.com/security/cve/CVE-2019-10124/" source="CVE"/>
		<reference ref_id="CVE-2019-11085" ref_url="https://www.suse.com/security/cve/CVE-2019-11085/" source="CVE"/>
		<reference ref_id="CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091/" source="CVE"/>
		<reference ref_id="CVE-2019-11477" ref_url="https://www.suse.com/security/cve/CVE-2019-11477/" source="CVE"/>
		<reference ref_id="CVE-2019-11478" ref_url="https://www.suse.com/security/cve/CVE-2019-11478/" source="CVE"/>
		<reference ref_id="CVE-2019-11479" ref_url="https://www.suse.com/security/cve/CVE-2019-11479/" source="CVE"/>
		<reference ref_id="CVE-2019-11486" ref_url="https://www.suse.com/security/cve/CVE-2019-11486/" source="CVE"/>
		<reference ref_id="CVE-2019-11487" ref_url="https://www.suse.com/security/cve/CVE-2019-11487/" source="CVE"/>
		<reference ref_id="CVE-2019-11811" ref_url="https://www.suse.com/security/cve/CVE-2019-11811/" source="CVE"/>
		<reference ref_id="CVE-2019-11815" ref_url="https://www.suse.com/security/cve/CVE-2019-11815/" source="CVE"/>
		<reference ref_id="CVE-2019-11833" ref_url="https://www.suse.com/security/cve/CVE-2019-11833/" source="CVE"/>
		<reference ref_id="CVE-2019-11884" ref_url="https://www.suse.com/security/cve/CVE-2019-11884/" source="CVE"/>
		<reference ref_id="CVE-2019-12382" ref_url="https://www.suse.com/security/cve/CVE-2019-12382/" source="CVE"/>
		<reference ref_id="CVE-2019-12818" ref_url="https://www.suse.com/security/cve/CVE-2019-12818/" source="CVE"/>
		<reference ref_id="CVE-2019-12819" ref_url="https://www.suse.com/security/cve/CVE-2019-12819/" source="CVE"/>
		<reference ref_id="CVE-2019-3846" ref_url="https://www.suse.com/security/cve/CVE-2019-3846/" source="CVE"/>
		<reference ref_id="CVE-2019-3882" ref_url="https://www.suse.com/security/cve/CVE-2019-3882/" source="CVE"/>
		<reference ref_id="CVE-2019-5489" ref_url="https://www.suse.com/security/cve/CVE-2019-5489/" source="CVE"/>
		<reference ref_id="CVE-2019-8564" ref_url="https://www.suse.com/security/cve/CVE-2019-8564/" source="CVE"/>
		<reference ref_id="CVE-2019-9003" ref_url="https://www.suse.com/security/cve/CVE-2019-9003/" source="CVE"/>
		<reference ref_id="CVE-2019-9500" ref_url="https://www.suse.com/security/cve/CVE-2019-9500/" source="CVE"/>
		<reference ref_id="CVE-2019-9503" ref_url="https://www.suse.com/security/cve/CVE-2019-9503/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005581.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2019-12819: The function __mdiobus_register() called put_device(), which
  triggered a fixed_mdio_bus_init use-after-free. This would cause a denial of
  service. (bsc#1138291)

- CVE-2019-12818: The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c
  may return NULL. If the caller does not check for this, it will trigger a
  NULL pointer dereference. This will cause denial of service. This used to
  affect nfc_llcp_build_gb in net/nfc/llcp_core.c. (bsc#1138293)

- CVE-2019-11477: A sequence of SACKs may have been crafted such that one can
  trigger an integer overflow, leading to a kernel panic.

- CVE-2019-11478: It was possible to send a crafted sequence of SACKs which
  will fragment the TCP retransmission queue. An attacker may have been able to
  further exploit the fragmented queue to cause an expensive linked-list walk
  for subsequent SACKs received for that same TCP connection.

- CVE-2019-11479: An attacker could force the Linux kernel to segment its
  responses into multiple TCP segments. This would drastically increased the
  bandwidth required to deliver the same amount of data. Further, it would
  consume additional resources such as CPU and NIC processing power.

- CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly
  escalate privileges was found in the mwifiex kernel module while connecting
  to a malicious wireless network. (bsc#1136424)

- CVE-2019-10124: An issue was discovered in the hwpoison implementation in
  mm/memory-failure.c in the Linux kernel. When soft_offline_in_use_page() runs
  on a thp tail page after pmd is split, an attacker could cause a denial of
  service (bsc#1130699, CVE-2019-10124).

- CVE-2019-12382: An issue was discovered in drm_load_edid_firmware in
  drivers/gpu/drm/drm_edid_load.c in the Linux kernel There was an unchecked
  kstrdup of fwstr, which might allow an attacker to cause a denial of service
  (NULL pointer dereference and system crash). (bsc#1136586)

- CVE-2019-11487: The Linux kernel allowed page reference count overflow, with
  resultant use-after-free issues, if about 140 GiB of RAM exists. This is
  related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h,
  include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c.
  It could occur with FUSE requests. (bbsc#1133190)

- CVE-2019-5489: The mincore() implementation in mm/mincore.c in the Linux
  kernel allowed local attackers to observe page cache access patterns of other
  processes on the same system, potentially allowing sniffing of secret
  information. (Fixing this affects the output of the fincore program.) Limited
  remote exploitation may be possible, as demonstrated by latency differences
  in accessing public files from an Apache HTTP Server. (bsc#1120843)

- CVE-2019-11833: fs/ext4/extents.c in the Linux kernel did not zero out the
  unused memory region in the extent tree block, which might allow local users
  to obtain sensitive information by reading uninitialized data in the
  filesystem. (bsc#1135281)

- CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM):
  Uncacheable memory on some microprocessors utilizing speculative execution
  may have allowed an authenticated user to potentially enable information
  disclosure via a side channel with local access. A list of impacted products
  can be found here:
  https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.
  (bsc##1111331)

- CVE-2018-7191: In the tun subsystem in the Linux kernel, dev_get_valid_name
  was not called before register_netdevice. This allowed local users to cause a
  denial of service (NULL pointer dereference and panic) via an
  ioctl(TUNSETIFF) call with a dev name containing a / character. (bsc#1135603)

- CVE-2018-12126 CVE-2018-12127 CVE-2018-12130: Microarchitectural Store Buffer
  Data Sampling (MSBDS): Stored buffers on some microprocessors utilizing
  speculative execution which may have allowed an authenticated user to
  potentially enable information disclosure via a side channel with local
  access. A list of impacted products can be found here:
  https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.
  (bsc#1103186)

- CVE-2019-11085: Insufficient input validation in Kernel Mode Driver in
  Intel(R) i915 Graphics for Linux may have allowed an authenticated user to
  potentially enable escalation of privilege via local access. (bsc#1135278)

- CVE-2019-11815: An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c
  in the Linux kernel There was a race condition leading to a use-after-free,
  related to net namespace cleanup. (bsc#1135278)

- CVE-2019-11884: The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c
  in the Linux kernel allowed a local user to obtain potentially sensitive
  information from kernel stack memory via a hidPCONNADD command, because a
  name field may not end with a '\0' character. (bsc#1134848)

- CVE-2019-11811: An issue was discovered in the Linux kernel There was a
  use-after-free upon attempted read access to /proc/ioports after the ipmi_si
  module was removed, related to drivers/char/ipmi/ipmi_si_intf.c,
  drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c.
  (bsc#1134397)

- CVE-2019-11486: The Siemens R3964 line discipline driver in
  drivers/tty/n_r3964.c in the Linux kernel has multiple race conditions.
  (bsc#1133188)

- CVE-2019-9003: In the Linux kernel, attackers could trigger a
  drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for
  certain simultaneous execution of the code, as demonstrated by a 'service
  ipmievd restart' loop. (bsc#1126704)

- CVE-2018-16880: A flaw was found in the Linux kernel's handle_rx() function
  in the [vhost_net] driver. A malicious virtual guest, under specific
  conditions, could trigger an out-of-bounds write in a kmalloc-8 slab on a
  virtual host which may have lead to a kernel memory corruption and a system
  panic. Due to the nature of the flaw, privilege escalation cannot be fully
  ruled out.(bsc#1122767)

- CVE-2019-9503: An issue was discoved which meant that brcmfmac frame
  validation could be bypassed. (bsc#1132828)

- CVE-2019-9500: An issue was discovered that lead to brcmfmac heap buffer
  overflow. (bsc#1132681)

- CVE-2019-8564: An issue was discoved which meant that brcmfmac frame
  validation could be bypassed. (bsc#1132673)

- CVE-2017-5753: Systems with microprocessors utilizing speculative execution
  and branch prediction may have allowed unauthorized disclosure of information
  to an attacker with local user access via a side-channel analysis.

- CVE-2019-3882: A flaw was found in the Linux kernel's vfio interface
  implementation that permitted violation of the user's locked memory limit. If
  a device was bound to a vfio driver, such as vfio-pci, and the local attacker
  is administratively granted ownership of the device, it may have caused a
  system memory exhaustion and thus a denial of service (DoS). (bsc#1131427)

The following non-security bugs were fixed:

- 9p locks: add mount option for lock retry interval (bsc#1051510).
- 9p: do not trust pdu content for stat item size (bsc#1051510).
- acpi / SBS: Fix GPE storm on recent MacBookPro's (bsc#1051510).
- acpi / utils: Drop reference in test for device presence (bsc#1051510).
- acpi, nfit: Prefer _DSM over _LSR for namespace label reads (bsc#1112128) (bsc#1132426).
- acpi: Add Hygon Dhyana support ().
- acpi: button: reinitialize button state upon resume (bsc#1051510).
- acpi: fix menuconfig presentation of acpi submenu (bsc#1117158).
- acpi: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle (bsc#1111666).
- acpi: property: restore _DSD data subnodes GUID comment (bsc#1111666).
- acpica: AML interpreter: add region addresses in global list during initialization (bsc#1051510).
- acpica: Namespace: remove address node from global list after method termination (bsc#1051510).
- alsa: core: Do not refer to snd_cards array directly (bsc#1051510).
- alsa: core: Fix card races between register and disconnect (bsc#1051510).
- alsa: emu10k1: Drop superfluous id-uniquification behavior (bsc#1051510).
- alsa: hda - Add two more machines to the power_save_blacklist (bsc#1051510).
- alsa: hda - Register irq handler after the chip initialization (bsc#1051510).
- alsa: hda - Use a macro for snd_array iteration loops (bsc#1051510).
- alsa: hda/hdmi - Consider eld_valid when reporting jack event (bsc#1051510).
- alsa: hda/hdmi - Read the pin sense from register when repolling (bsc#1051510).
- alsa: hda/realtek - Add new Dell platform for headset mode (bsc#1051510).
- alsa: hda/realtek - add two more pin configuration sets to quirk table (bsc#1051510).
- alsa: hda/realtek - Apply the fixup for ASUS Q325UAR (bsc#1051510).
- alsa: hda/realtek - Avoid superfluous COEF EAPD setups (bsc#1051510).
- alsa: hda/realtek - Corrected fixup for System76 Gazelle (gaze14) (bsc#1051510).
- alsa: hda/realtek - EAPD turn on later (bsc#1051510).
- alsa: hda/realtek - Enable micmute LED for Huawei laptops (bsc#1051510).
- alsa: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug (bsc#1051510).
- alsa: hda/realtek - Fixed Dell AIO speaker noise (bsc#1051510).
- alsa: hda/realtek - Fixup headphone noise via runtime suspend (bsc#1051510).
- alsa: hda/realtek - Improve the headset mic for Acer Aspire laptops (bsc#1051510).
- alsa: hda/realtek - Move to ACT_INIT state (bsc#1111666).
- alsa: hda/realtek - Support low power consumption for ALC256 (bsc#1051510).
- alsa: hda/realtek - Support low power consumption for ALC295 (bsc#1051510).
- alsa: hda/realtek: Enable headset MIC of Acer TravelMate B114-21 with ALC233 (bsc#1111666).
- alsa: hda: Initialize power_state field properly (bsc#1051510).
- alsa: hdea/realtek - Headset fixup for System76 Gazelle (gaze14) (bsc#1051510).
- alsa: info: Fix racy addition/deletion of nodes (bsc#1051510).
- alsa: line6: Avoid polluting led_* namespace (bsc#1051510).
- alsa: line6: use dynamic buffers (bsc#1051510).
- alsa: PCM: check if ops are defined before suspending PCM (bsc#1051510).
- alsa: seq: Align temporary re-locking with irqsave version (bsc#1051510).
- alsa: seq: Correct unlock sequence at snd_seq_client_ioctl_unlock() (bsc#1051510).
- alsa: seq: Cover unsubscribe_port() in list_mutex (bsc#1051510).
- alsa: seq: Fix OOB-reads from strlcpy (bsc#1051510).
- alsa: seq: Fix race of get-subscription call vs port-delete ioctls (bsc#1051510).
- alsa: seq: Protect in-kernel ioctl calls with mutex (bsc#1051510).
- alsa: seq: Protect racy pool manipulation from OSS sequencer (bsc#1051510).
- alsa: seq: Remove superfluous irqsave flags (bsc#1051510).
- alsa: seq: Simplify snd_seq_kernel_client_enqueue() helper (bsc#1051510).
- alsa: timer: Check ack_list emptiness instead of bit flag (bsc#1051510).
- alsa: timer: Coding style fixes (bsc#1051510).
- alsa: timer: Make snd_timer_close() really kill pending actions (bsc#1051510).
- alsa: timer: Make sure to clear pending ack list (bsc#1051510).
- alsa: timer: Revert active callback sync check at close (bsc#1051510).
- alsa: timer: Simplify error path in snd_timer_open() (bsc#1051510).
- alsa: timer: Unify timer callback process code (bsc#1051510).
- alsa: usb-audio: Fix a memory leak bug (bsc#1051510).
- alsa: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk() (bsc#1051510).
- alsa: usx2y: fix a double free bug (bsc#1051510).
- appletalk: Fix compile regression (bsc#1051510).
- appletalk: Fix use-after-free in atalk_proc_exit (bsc#1051510).
- arch: arm64: acpi: KABI ginore includes (bsc#1117158 bsc#1134671).
- arm64, mm, efi: Account for GICv3 LPI tables in static memblock reserve table (bsc#1117158).
- arm64: acpi: fix alignment fault in accessing acpi (bsc#1117158).
- arm64: Export save_stack_trace_tsk() (jsc#SLE-4214).
- arm64: fix acpi dependencies (bsc#1117158).
- arm: 8824/1: fix a migrating irq bug when hotplug cpu (bsc#1051510).
- arm: 8833/1: Ensure that NEON code always compiles with Clang (bsc#1051510).
- arm: 8839/1: kprobe: make patch_lock a raw_spinlock_t (bsc#1051510).
- arm: 8840/1: use a raw_spinlock_t in unwind (bsc#1051510).
- arm: avoid Cortex-A9 livelock on tight dmb loops (bsc#1051510).
- arm: imx6q: cpuidle: fix bug that CPU might not wake up at expected time (bsc#1051510).
- arm: iop: do not use using 64-bit DMA masks (bsc#1051510).
- arm: OMAP2+: fix lack of timer interrupts on CPU1 after hotplug (bsc#1051510).
- arm: OMAP2+: Variable 'reg' in function omap4_dsi_mux_pads() could be uninitialized (bsc#1051510).
- arm: orion: do not use using 64-bit DMA masks (bsc#1051510).
- arm: pxa: ssp: unneeded to free devm_ allocated data (bsc#1051510).
- arm: s3c24xx: Fix boolean expressions in osiris_dvs_notify (bsc#1051510).
- arm: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms (bsc#1051510).
- asoc: cs4270: Set auto-increment bit for register writes (bsc#1051510).
- asoc: fix valid stream condition (bsc#1051510).
- asoc: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe (bsc#1051510).
- asoc: fsl_esai: fix channel swap issue when stream starts (bsc#1051510).
- asoc: fsl_esai: Fix missing break in switch statement (bsc#1051510).
- asoc: hdmi-codec: fix S/PDIF DAI (bsc#1051510).
- asoc: Intel: avoid Oops if DMA setup fails (bsc#1051510).
- asoc: max98090: Fix restore of DAPM Muxes (bsc#1051510).
- asoc: nau8810: fix the issue of widget with prefixed name (bsc#1051510).
- asoc: nau8824: fix the issue of the widget with prefix name (bsc#1051510).
- asoc: RT5677-SPI: Disable 16Bit SPI Transfers (bsc#1051510).
- asoc: samsung: odroid: Fix clock configuration for 44100 sample rate (bsc#1051510).
- asoc: stm32: fix sai driver name initialisation (bsc#1051510).
- asoc: tlv320aic32x4: Fix Common Pins (bsc#1051510).
- asoc: topology: free created components in tplg load error (bsc#1051510).
- asoc: wm_adsp: Add locking to wm_adsp2_bus_error (bsc#1051510).
- asoc:soc-pcm:fix a codec fixup issue in TDM case (bsc#1051510).
- assume flash part size to be 4MB, if it can't be determined (bsc#1127371).
- at76c50x-usb: Do not register led_trigger if usb_register_driver failed (bsc#1051510).
- ath10k: avoid possible string overflow (bsc#1051510).
- ath10k: snoc: fix unbalanced clock error handling (bsc#1111666).
- audit: fix a memleak caused by auditing load module (bsc#1051510).
- b43: shut up clang -Wuninitialized variable warning (bsc#1051510).
- backlight: lm3630a: Return 0 on success in update_status functions (bsc#1051510).
- batman-adv: Reduce claim hash refcnt only for removed entry (bsc#1051510).
- batman-adv: Reduce tt_global hash refcnt only for removed entry (bsc#1051510).
- batman-adv: Reduce tt_local hash refcnt only for removed entry (bsc#1051510).
- bcache: account size of buckets used in uuid write to ca-&gt;meta_sectors_written (bsc#1130972).
- bcache: add a comment in super.c (bsc#1130972).
- bcache: add code comments for bset.c (bsc#1130972).
- bcache: add comment for cache_set-&gt;fill_iter (bsc#1130972).
- bcache: add identifier names to arguments of function definitions (bsc#1130972).
- bcache: add missing SPDX header (bsc#1130972).
- bcache: add MODULE_DESCRIPTION information (bsc#1130972).
- bcache: add separate workqueue for journal_write to avoid deadlock (bsc#1130972).
- bcache: add static const prefix to char * array declarations (bsc#1130972).
- bcache: add sysfs_strtoul_bool() for setting bit-field variables (bsc#1130972).
- bcache: add the missing comments for smp_mb()/smp_wmb() (bsc#1130972).
- bcache: cannot set writeback_running via sysfs if no writeback kthread created (bsc#1130972).
- bcache: correct dirty data statistics (bsc#1130972).
- bcache: do not assign in if condition in bcache_init() (bsc#1130972).
- bcache: do not assign in if condition register_bcache() (bsc#1130972).
- bcache: do not check if debug dentry is ERR or NULL explicitly on remove (bsc#1130972).
- bcache: do not check NULL pointer before calling kmem_cache_destroy (bsc#1130972).
- bcache: do not clone bio in bch_data_verify (bsc#1130972).
- bcache: do not mark writeback_running too early (bsc#1130972).
- bcache: export backing_dev_name via sysfs (bsc#1130972).
- bcache: export backing_dev_uuid via sysfs (bsc#1130972).
- bcache: fix code comments style (bsc#1130972).
- bcache: fix indent by replacing blank by tabs (bsc#1130972).
- bcache: fix indentation issue, remove tabs on a hunk of code (bsc#1130972).
- bcache: fix input integer overflow of congested threshold (bsc#1130972).
- bcache: fix input overflow to cache set io_error_limit (bsc#1130972).
- bcache: fix input overflow to cache set sysfs file io_error_halflife (bsc#1130972).
- bcache: fix input overflow to journal_delay_ms (bsc#1130972).
- bcache: fix input overflow to sequential_cutoff (bsc#1130972).
- bcache: fix input overflow to writeback_delay (bsc#1130972).
- bcache: fix input overflow to writeback_rate_minimum (bsc#1130972).
- bcache: fix ioctl in flash device (bsc#1130972).
- bcache: fix mistaken code comments in bcache.h (bsc#1130972).
- bcache: fix mistaken comments in request.c (bsc#1130972).
- bcache: fix potential div-zero error of writeback_rate_i_term_inverse (bsc#1130972).
- bcache: fix potential div-zero error of writeback_rate_p_term_inverse (bsc#1130972).
- bcache: fix typo 'succesfully' to 'successfully' (bsc#1130972).
- bcache: fix typo in code comments of closure_return_with_destructor() (bsc#1130972).
- bcache: improve sysfs_strtoul_clamp() (bsc#1130972).
- bcache: introduce force_wake_up_gc() (bsc#1130972).
- bcache: make cutoff_writeback and cutoff_writeback_sync tunable (bsc#1130972).
- bcache: Move couple of functions to sysfs.c (bsc#1130972).
- bcache: Move couple of string arrays to sysfs.c (bsc#1130972).
- bcache: move open brace at end of function definitions to next line (bsc#1130972).
- bcache: never writeback a discard operation (bsc#1130972).
- bcache: not use hard coded memset size in bch_cache_accounting_clear() (bsc#1130972).
- bcache: option to automatically run gc thread after writeback (bsc#1130972).
- bcache: panic fix for making cache device (bsc#1130972).
- bcache: Populate writeback_rate_minimum attribute (bsc#1130972).
- bcache: prefer 'help' in Kconfig (bsc#1130972).
- bcache: print number of keys in trace_bcache_journal_write (bsc#1130972).
- bcache: recal cached_dev_sectors on detach (bsc#1130972).
- bcache: remove unnecessary space before ioctl function pointer arguments (bsc#1130972).
- bcache: remove unused bch_passthrough_cache (bsc#1130972).
- bcache: remove useless parameter of bch_debug_init() (bsc#1130972).
- bcache: replace '%pF' by '%pS' in seq_printf() (bsc#1130972).
- bcache: Replace bch_read_string_list() by __sysfs_match_string() (bsc#1130972).
- bcache: replace hard coded number with BUCKET_GC_GEN_MAX (bsc#1130972).
- bcache: replace printk() by pr_*() routines (bsc#1130972).
- bcache: replace Symbolic permissions by octal permission numbers (bsc#1130972).
- bcache: set writeback_percent in a flexible range (bsc#1130972).
- bcache: split combined if-condition code into separate ones (bsc#1130972).
- bcache: stop bcache device when backing device is offline (bsc#1130972).
- bcache: stop using the deprecated get_seconds() (bsc#1130972).
- bcache: style fix to add a blank line after declarations (bsc#1130972).
- bcache: style fix to replace 'unsigned' by 'unsigned int' (bsc#1130972).
- bcache: style fixes for lines over 80 characters (bsc#1130972).
- bcache: treat stale and dirty keys as bad keys (bsc#1130972).
- bcache: trivial - remove tailing backslash in macro BTREE_FLAG (bsc#1130972).
- bcache: update comment for bch_data_insert (bsc#1130972).
- bcache: update comment in sysfs.c (bsc#1130972).
- bcache: use (REQ_META|REQ_PRIO) to indicate bio for metadata (bsc#1130972).
- bcache: use MAX_CACHES_PER_SET instead of magic number 8 in __bch_bucket_alloc_set (bsc#1130972).
- bcache: use REQ_PRIO to indicate bio for metadata (bsc#1130972).
- bcache: use routines from lib/crc64.c for CRC64 calculation (bsc#1130972).
- bcache: use sysfs_strtoul_bool() to set bit-field variables (bsc#1130972).
- bitmap: Add bitmap_alloc(), bitmap_zalloc() and bitmap_free() (jsc#SLE-4797).
- blk-mq: adjust debugfs and sysfs register when updating nr_hw_queues (bsc#1131673).
- blk-mq: Avoid that submitting a bio concurrently with device removal triggers a crash (bsc#1131673).
- blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs (bsc#1131673).
- blk-mq: fallback to previous nr_hw_queues when updating fails (bsc#1131673).
- blk-mq: init hctx sched after update ctx and hctx mapping (bsc#1131673).
- blk-mq: realloc hctx when hw queue is mapped to another node (bsc#1131673).
- blk-mq: sync the update nr_hw_queues with blk_mq_queue_tag_busy_iter (bsc#1131673).
- blkcg: Introduce blkg_root_lookup() (bsc#1131673).
- blkcg: Make blkg_root_lookup() work for queues in bypass mode (bsc#1131673).
- block: check_events: do not bother with events if unsupported (bsc#1110946, bsc#1119843).
- block: check_events: do not bother with events if unsupported (bsc#1110946, bsc#1119843).
- block: disk_events: introduce event flags (bsc#1110946, bsc#1119843).
- block: disk_events: introduce event flags (bsc#1110946, bsc#1119843).
- block: do not leak memory in bio_copy_user_iov() (bsc#1135309).
- block: Do not revalidate bdev of hidden gendisk (bsc#1120091).
- block: Ensure that a request queue is dissociated from the cgroup controller (bsc#1131673).
- block: Fix a race between request queue removal and the block cgroup controller (bsc#1131673).
- block: fix the return errno for direct IO (bsc#1135320).
- block: fix use-after-free on gendisk (bsc#1135312).
- block: Introduce blk_exit_queue() (bsc#1131673).
- block: kABI fixes for bio_rewind_iter() removal (bsc#1131673).
- block: remove bio_rewind_iter() (bsc#1131673).
- bluetooth: Align minimum encryption key size for LE and BR/EDR connections (bsc#1051510).
- bluetooth: btusb: request wake pin with NOAUTOEN (bsc#1051510).
- bluetooth: Check key sizes only when Secure Simple Pairing is enabled (bsc#1135556).
- bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf() (bsc#1133731).
- bluetooth: hidp: fix buffer overflow (bsc#1051510).
- bnx2x: Add support for detection of P2P event packets (bsc#1136498 jsc#SLE-4699).
- bnx2x: Bump up driver version to 1.713.36 (bsc#1136498 jsc#SLE-4699).
- bnx2x: fix spelling mistake 'dicline' -&gt; 'decline' (bsc#1136498 jsc#SLE-4699).
- bnx2x: fix various indentation issues (bsc#1136498 jsc#SLE-4699).
- bnx2x: Remove set but not used variable 'mfw_vn' (bsc#1136498 jsc#SLE-4699).
- bnx2x: Replace magic numbers with macro definitions (bsc#1136498 jsc#SLE-4699).
- bnx2x: Use struct_size() in kzalloc() (bsc#1136498 jsc#SLE-4699).
- bnx2x: Utilize FW 7.13.11.0 (bsc#1136498 jsc#SLE-4699).
- bnxt_en: Add device IDs 0x1806 and 0x1752 for 57500 devices (bsc#1137224).
- bnxt_en: Add support for BCM957504 (bsc#1137224).
- bnxt_en: Drop oversize TX packets to prevent errors (networking-stable-19_03_07).
- bnxt_en: Fix aggregation buffer leak under OOM condition (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix possible BUG() condition when calling pci_disable_msix() (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix possible crash in bnxt_hwrm_ring_free() under error conditions (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix statistics context reservation logic (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt() (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one() (bsc#1050242).
- bnxt_en: Improve multicast address setup logic (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Improve multicast address setup logic (networking-stable-19_05_04).
- bnxt_en: Improve NQ reservations (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Improve RX consumer index validity check (networking-stable-19_04_10).
- bnxt_en: Pass correct extended TX port statistics size to firmware (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Reduce memory usage when running in kdump kernel (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Reset device on RX buffer errors (networking-stable-19_04_10).
- bonding: fix event handling for stacked bonds (networking-stable-19_04_19).
- bonding: fix PACKET_ORIGDEV regression (git-fixes).
- bpf, lru: avoid messing with eviction heuristics upon syscall lookup (bsc#1083647).
- bpf: add map_lookup_elem_sys_only for lookups from syscall side (bsc#1083647).
- bpf: Add missed newline in verifier verbose log (bsc#1056787).
- bpf: fix use after free in bpf_evict_inode (bsc#1083647).
- brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() (bsc#1051510).
- brcmfmac: fix leak of mypkt on error return path (bsc#1111666).
- broadcom: Mark expected switch fall-throughs (bsc#1136498 jsc#SLE-4699).
- btrfs: add a helper to return a head ref (bsc#1134813).
- btrfs: Avoid possible qgroup_rsv_size overflow in btrfs_calculate_inode_block_rsv_size (git-fixes).
- btrfs: breakout empty head cleanup to a helper (bsc#1134813).
- btrfs: delayed-ref: Introduce better documented delayed ref structures (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: delayed-ref: Use btrfs_ref to refactor btrfs_add_delayed_data_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: delayed-ref: Use btrfs_ref to refactor btrfs_add_delayed_tree_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: do not allow trimming when a fs is mounted with the nologreplay option (bsc#1135758).
- btrfs: do not double unlock on error in btrfs_punch_hole (bsc#1136881).
- btrfs: Do not panic when we can't find a root key (bsc#1112063).
- btrfs: extent-tree: Fix a bug that btrfs is unable to add pinned bytes (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Open-code process_func in __btrfs_mod_ref (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Use btrfs_ref to refactor add_pinned_bytes() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Use btrfs_ref to refactor btrfs_free_extent() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Use btrfs_ref to refactor btrfs_inc_extent_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: Factor out common delayed refs init code (bsc#1134813).
- btrfs: fix assertion failure on fsync with NO_HOLES enabled (bsc#1131848).
- btrfs: Fix bound checking in qgroup_trace_new_subtree_blocks (git-fixes).
- btrfs: fix fsync not persisting changed attributes of a directory (bsc#1137151).
- btrfs: fix incorrect file size after shrinking truncate and fsync (bsc#1130195).
- btrfs: fix race between ranged fsync and writeback of adjacent ranges (bsc#1136477).
- btrfs: fix race updating log root item during fsync (bsc#1137153).
- btrfs: fix wrong ctime and mtime of a directory after log replay (bsc#1137152).
- btrfs: improve performance on fsync of files with multiple hardlinks (bsc#1123454).
- btrfs: Introduce init_delayed_ref_head (bsc#1134813).
- btrfs: move all ref head cleanup to the helper function (bsc#1134813).
- btrfs: move extent_op cleanup to a helper (bsc#1134813).
- btrfs: move ref_mod modification into the if (ref) logic (bsc#1134813).
- btrfs: Open-code add_delayed_data_ref (bsc#1134813).
- btrfs: Open-code add_delayed_tree_ref (bsc#1134813).
- btrfs: qgroup: Check bg while resuming relocation to avoid NULL pointer dereference (bsc#1134806).
- btrfs: qgroup: Do not scan leaf if we're modifying reloc tree (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: qgroup: Move reserved data accounting from btrfs_delayed_ref_head to btrfs_qgroup_extent_record (bsc#1134162).
- btrfs: qgroup: Remove duplicated trace points for qgroup_rsv_add/release (bsc#1134160).
- btrfs: reloc: Also queue orphan reloc tree for cleanup to avoid BUG_ON() (bsc#1133612).
- btrfs: remove delayed_ref_node from ref_head (bsc#1134813).
- btrfs: remove WARN_ON in log_dir_items (bsc#1131847).
- btrfs: send, flush dellaloc in order to avoid data loss (bsc#1133320).
- btrfs: split delayed ref head initialization and addition (bsc#1134813).
- btrfs: track refs in a rb_tree instead of a list (bsc#1134813).
- btrfs: tree-checker: detect file extent items with overlapping ranges (bsc#1136478).
- btrfs: Use init_delayed_ref_common in add_delayed_data_ref (bsc#1134813).
- btrfs: Use init_delayed_ref_common in add_delayed_tree_ref (bsc#1134813).
- btrfs: Use init_delayed_ref_head in add_delayed_ref_head (bsc#1134813).
- cdrom: Fix race condition in cdrom_sysctl_register (bsc#1051510).
- ceph: ensure d_name stability in ceph_dentry_hash() (bsc#1134461).
- ceph: ensure d_name stability in ceph_dentry_hash() (bsc#1134461).
- ceph: fix ci-&gt;i_head_snapc leak (bsc#1122776).
- ceph: fix ci-&gt;i_head_snapc leak (bsc#1122776).
- ceph: fix use-after-free on symlink traversal (bsc#1134459).
- ceph: fix use-after-free on symlink traversal (bsc#1134459).
- ceph: only use d_name directly when parent is locked (bsc#1134460).
- ceph: only use d_name directly when parent is locked (bsc#1134460).
- cfg80211: Handle WMM rules in regulatory domain intersection (bsc#1111666).
- cgroup: fix parsing empty mount option string (bsc#1133094).
- chelsio: use BUG() instead of BUG_ON(1) (bsc#1136345 jsc#SLE-4681).
- cifs: Do not count -ENODATA as failure for query directory (bsc#1051510).
- cifs: do not dereference smb_file_target before null check (bsc#1051510).
- cifs: Do not hide EINTR after sending network packets (bsc#1051510).
- cifs: Do not reconnect TCP session in add_credits() (bsc#1051510).
- cifs: Do not reset lease state to NONE on lease break (bsc#1051510).
- cifs: Fix adjustment of credits for MTU requests (bsc#1051510).
- cifs: Fix credit calculation for encrypted reads with errors (bsc#1051510).
- cifs: Fix credits calculations for reads with errors (bsc#1051510).
- cifs: fix POSIX lock leak and invalid ptr deref (bsc#1114542).
- cifs: Fix possible hang during async MTU reads and writes (bsc#1051510).
- cifs: Fix potential OOB access of lock element array (bsc#1051510).
- cifs: Fix read after write for files with read caching (bsc#1051510).
- cifs: keep FileInfo handle live during oplock break (bsc#1106284, bsc#1131565).
- clk: fractional-divider: check parent rate only if flag is set (bsc#1051510).
- clk: rockchip: fix frac settings of GPLL clock for rk3328 (bsc#1051510).
- clk: rockchip: Fix video codec clocks on rk3288 (bsc#1051510).
- clk: rockchip: fix wrong clock definitions for rk3328 (bsc#1051510).
- clk: x86: Add system specific quirk to mark clocks as critical (bsc#1051510).
- config: arm64: enable CN99xx uncore pmu References: bsc#1117114
- configfs: fix possible use-after-free in configfs_register_group (bsc#1051510).
- configfs: Fix use-after-free when accessing sd-&gt;s_dentry (bsc#1051510).
- cpu/speculation: Add 'mitigations=' cmdline option (bsc#1112178).
- cpufreq: Add Hygon Dhyana support ().
- cpufreq: AMD: Ignore the check for ProcFeedback in ST/CZ ().
- cpupowerutils: bench - Fix cpu online check (bsc#1051510).
- crypto: arm/aes-neonbs - do not access already-freed walk.iv (bsc#1051510).
- crypto: caam - add missing put_device() call (bsc#1129770).
- crypto: caam - fix caam_dump_sg that iterates through scatterlist (bsc#1051510).
- crypto: caam/qi2 - fix DMA mapping of stack memory (bsc#1111666).
- crypto: caam/qi2 - fix zero-length buffer DMA mapping (bsc#1111666).
- crypto: caam/qi2 - generate hash keys in-place (bsc#1111666).
- crypto: ccm - fix incompatibility between 'ccm' and 'ccm_base' (bsc#1051510).
- crypto: ccp - Do not free psp_master when PLATFORM_INIT fails (bsc#1051510).
- crypto: chacha20poly1305 - set cra_name correctly (bsc#1051510).
- crypto: chcr - ESN for Inline IPSec Tx (bsc#1136353 jsc#SLE-4688).
- crypto: chcr - small packet Tx stalls the queue (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - avoid using sa_entry imm (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - check set_msg_len overflow in generate_b0 (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - clean up various indentation issues (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - cleanup:send addr as value in function argument (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - count incomplete block in IV (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix NULL pointer dereference (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix passing zero to 'PTR_ERR' warning in chcr_aead_op (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix softlockup with heavy I/O (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix wrong error counter increments (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fixed Traffic Stall (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Handle pci shutdown event (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Inline single pdu only (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - remove set but not used variable 'kctx_len' (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - remove set but not used variables 'adap' (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Reset counters on cxgb4 Detach (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Swap location of AAD and IV sent in WR (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Use same value for both channel in single WR (bsc#1136353 jsc#SLE-4688).
- crypto: chtls - remove cdev_list_lock (bsc#1136353 jsc#SLE-4688).
- crypto: chtls - remove set but not used variables 'err, adap, request, hws' (bsc#1136353 jsc#SLE-4688).
- crypto: crct10dif-generic - fix use via crypto_shash_digest() (bsc#1051510).
- crypto: crypto4xx - properly set IV after de- and encrypt (bsc#1051510).
- crypto: fips - Grammar s/options/option/, s/to/the/ (bsc#1051510).
- crypto: gcm - fix incompatibility between 'gcm' and 'gcm_base' (bsc#1051510).
- crypto: pcbc - remove bogus memcpy()s with src == dest (bsc#1051510).
- crypto: prefix header search paths with $(srctree)/ (bsc#1136353 jsc#SLE-4688).
- crypto: qat - move temp buffers off the stack (jsc#SLE-4818).
- crypto: qat - no need to check return value of debugfs_create functions (jsc#SLE-4818).
- crypto: qat - Remove unused goto label (jsc#SLE-4818).
- crypto: qat - Remove VLA usage (jsc#SLE-4818).
- crypto: sha256/arm - fix crash bug in Thumb2 build (bsc#1051510).
- crypto: sha512/arm - fix crash bug in Thumb2 build (bsc#1051510).
- crypto: skcipher - do not WARN on unprocessed data after slow walk step (bsc#1051510).
- crypto: sun4i-ss - Fix invalid calculation of hash end (bsc#1051510).
- crypto: vmx - CTR: always increment IV as quadword (bsc#1051510).
- crypto: vmx - fix copy-paste error in CTR mode (bsc#1051510).
- crypto: vmx - ghash: do nosimd fallback manually (bsc#1135661, bsc#1137162).
- crypto: vmx - return correct error code on failed setkey (bsc#1135661, bsc#1137162).
- crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() (bsc#1051510).
- crypto: x86/poly1305 - fix overflow during partial reduction (bsc#1051510).
- cxgb4/chtls: Prefix adapter flags with CXGB4 (bsc#1136345 jsc#SLE-4681).
- cxgb4/cxgb4vf: Add support for SGE doorbell queue timer (bsc#1127371).
- cxgb4/cxgb4vf: Display advertised FEC in ethtool (bsc#1136345 jsc#SLE-4681).
- cxgb4/cxgb4vf: Fix mac_hlist initialization and free (bsc#1127374).
- cxgb4/cxgb4vf: Fix up netdev-&gt;hw_features (bsc#1136345 jsc#SLE-4681).
- cxgb4/cxgb4vf: Link management changes (bsc#1127371).
- cxgb4/cxgb4vf: Program hash region for {t4/t4vf}_change_mac() (bsc#1127371).
- cxgb4/cxgb4vf_main: Mark expected switch fall-through (bsc#1136345 jsc#SLE-4681).
- cxgb4: Add capability to get/set SGE Doorbell Queue Timer Tick (bsc#1127371).
- cxgb4: Add flag tc_flower_initialized (bsc#1127371).
- cxgb4: Add new T5 pci device id 0x50ae (bsc#1127371).
- cxgb4: Add new T5 pci device ids 0x50af and 0x50b0 (bsc#1127371).
- cxgb4: Add new T6 pci device ids 0x608a (bsc#1127371).
- cxgb4: Add new T6 pci device ids 0x608b (bsc#1136345 jsc#SLE-4681).
- cxgb4: add per rx-queue counter for packet errors (bsc#1127371).
- cxgb4: Add support for FW_ETH_TX_PKT_VM_WR (bsc#1127371).
- cxgb4: add support to display DCB info (bsc#1127371).
- cxgb4: Add support to read actual provisioned resources (bsc#1127371).
- cxgb4: add tcb flags and tcb rpl struct (bsc#1136345 jsc#SLE-4681).
- cxgb4: Add VF Link state support (bsc#1136345 jsc#SLE-4681).
- cxgb4: Added missing break in ndo_udp_tunnel_{add/del} (bsc#1127371).
- cxgb4: collect ASIC LA dumps from ULP TX (bsc#1127371).
- cxgb4: collect hardware queue descriptors (bsc#1127371).
- cxgb4: collect number of free PSTRUCT page pointers (bsc#1127371).
- cxgb4: convert flower table to use rhashtable (bsc#1127371).
- cxgb4: cxgb4: use FW_PORT_ACTION_L1_CFG32 for 32 bit capability (bsc#1127371).
- cxgb4: Delete all hash and TCAM filters before resource cleanup (bsc#1136345 jsc#SLE-4681).
- cxgb4: display number of rx and tx pages free (bsc#1127371).
- cxgb4: do not return DUPLEX_UNKNOWN when link is down (bsc#1127371).
- cxgb4: Do not return EAGAIN when TCAM is full (bsc#1136345 jsc#SLE-4681).
- cxgb4: Enable hash filter with offload (bsc#1136345 jsc#SLE-4681).
- cxgb4: Enable outer UDP checksum offload for T6 (bsc#1136345 jsc#SLE-4681).
- cxgb4: Export sge_host_page_size to ulds (bsc#1127371).
- cxgb4: Fix error path in cxgb4_init_module (bsc#1136345 jsc#SLE-4681).
- cxgb4: fix the error path of cxgb4_uld_register() (bsc#1127371).
- cxgb4: free mac_hlist properly (bsc#1136345 jsc#SLE-4681).
- cxgb4: impose mandatory VLAN usage when non-zero TAG ID (bsc#1127371).
- cxgb4: kfree mhp after the debug print (bsc#1136345 jsc#SLE-4681).
- cxgb4: Mask out interrupts that are not enabled (bsc#1127175).
- cxgb4: move Tx/Rx free pages collection to common code (bsc#1127371).
- cxgb4: offload VLAN flows regardless of VLAN ethtype (bsc#1136345 jsc#SLE-4681).
- cxgb4: remove DEFINE_SIMPLE_DEBUGFS_FILE() (bsc#1136345 jsc#SLE-4681).
- cxgb4: remove redundant assignment to vlan_cmd.dropnovlan_fm (bsc#1127371).
- cxgb4: remove set but not used variables 'multitrc, speed' (bsc#1136345 jsc#SLE-4681).
- cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (bsc#1127371).
- cxgb4: remove the unneeded locks (bsc#1127371).
- cxgb4: Revert 'cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size' (bsc#1136345 jsc#SLE-4681).
- cxgb4: specify IQTYPE in fw_iq_cmd (bsc#1127371).
- cxgb4: Support ethtool private flags (bsc#1127371).
- cxgb4: TLS record offload enable (bsc#1136345 jsc#SLE-4681).
- cxgb4: Update 1.23.3.0 as the latest firmware supported (bsc#1136345 jsc#SLE-4681).
- cxgb4: update supported DCB version (bsc#1127371).
- cxgb4: use firmware API for validating filter spec (bsc#1136345 jsc#SLE-4681).
- cxgb4: use new fw interface to get the VIN and smt index (bsc#1127371).
- cxgb4vf: Call netif_carrier_off properly in pci_probe (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Enter debugging mode if FW is inaccessible (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Few more link management changes (bsc#1127374).
- cxgb4vf: fix memleak in mac_hlist initialization (bsc#1127374).
- cxgb4vf: free mac_hlist properly (bsc#1136345 jsc#SLE-4681).
- cxgb4vf: Prefix adapter flags with CXGB4VF (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Revert force link up behaviour (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Update port information in cxgb4vf_open() (bsc#1127374).
- dccp: do not use ipv6 header for ipv4 flow (networking-stable-19_03_28).
- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- device_cgroup: fix RCU imbalance in error case (bsc#1051510).
- devres: Align data[] to ARCH_KMALLOC_MINALIGN (bsc#1051510).
- dm: disable DISCARD if the underlying storage no longer supports it (bsc#1114638).
- dmaengine: axi-dmac: Do not check the number of frames for alignment (bsc#1051510).
- dmaengine: imx-dma: fix warning comparison of distinct pointer types (bsc#1051510).
- dmaengine: qcom_hidma: assign channel cookie correctly (bsc#1051510).
- dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid (bsc#1051510).
- dmaengine: tegra210-adma: Fix crash during probe (bsc#1111666).
- dmaengine: tegra210-dma: free dma controller in remove() (bsc#1051510).
- dmaengine: tegra: avoid overflow of byte tracking (bsc#1051510).
- documentation: Add MDS vulnerability documentation (bsc#1135642).
- documentation: perf: Add documentation for ThunderX2 PMU uncore driver ().
- drivers/perf: Add Cavium ThunderX2 SoC UNCORE PMU driver ().
- drivers: acpi: add dependency of EFI for arm64 (bsc#1117158).
- drivers: hv: vmbus: Offload the handling of channels to two workqueues (bsc#1130567).
- drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind() (bsc#1130567).
- drm/amd/display: extending AUX SW Timeout (bsc#1111666).
- drm/amd/display: fix cursor black issue (bsc#1111666).
- drm/amd/display: If one stream full updates, full update all planes (bsc#1111666).
- drm/amdgpu/gmc9: fix VM_L2_CNTL3 programming (bsc#1111666).
- drm/amdkfd: use init_mqd function to allocate object for hid_mqd (CI) (bsc#1111666).
- drm/bridge: adv7511: Fix low refresh rate selection (bsc#1051510).
- drm/doc: Drop 'content type' from the legacy kms property table (bsc#1111666).
- drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers (bsc#1051510).
- drm/etnaviv: lock MMU while dumping core (bsc#1113722)
- drm/exynos/mixer: fix MIXER shadow registry synchronisation code (bsc#1111666).
- drm/fb-helper: dpms_legacy(): Only set on connectors in use (bsc#1051510).
- drm/fb-helper: generic: Call drm_client_add() after setup is done (bsc#1111666).
- drm/i915/fbc: disable framebuffer compression on GeminiLake (bsc#1051510).
- drm/i915/gvt: add 0x4dfc to gen9 save-restore list (bsc#1113722)
- drm/i915/gvt: Add in context mmio 0x20D8 to gen9 mmio list (bsc#1113722)
- drm/i915/gvt: Add in context mmio 0x20D8 to gen9 mmio list (bsc#1113956)
- drm/i915/gvt: Annotate iomem usage (bsc#1051510).
- drm/i915/gvt: do not deliver a workload if its creation fails (bsc#1051510).
- drm/i915/gvt: do not let pin count of shadow mm go negative (bsc#1113722)
- drm/i915/gvt: do not let pin count of shadow mm go negative (bsc#1113956)
- drm/i915/gvt: do not let TRTTE and 0x4dfc write passthrough to hardware (bsc#1051510).
- drm/i915/gvt: Fix cmd length of VEB_DI_IECP (bsc#1113722)
- drm/i915/gvt: Fix incorrect mask of mmio 0x22028 in gen8/9 mmio list (bnc#1113722)
- drm/i915/gvt: Prevent use-after-free in ppgtt_free_all_spt() (bsc#1111666).
- drm/i915/gvt: refine ggtt range validation (bsc#1113722)
- drm/i915/gvt: Roundup fb-&gt;height into tile's height at calucation fb-&gt;size (bsc#1111666).
- drm/i915/gvt: Tiled Resources mmios are in-context mmios for gen9+ (bsc#1113722)
- drm/i915/icl: Whitelist GEN9_SLICE_COMMON_ECO_CHICKEN1 (bsc#1111666).
- drm/i915: Disable LP3 watermarks on all SNB machines (bsc#1051510).
- drm/i915: Disable tv output on i9x5gm (bsc#1086657, bsc#1133897).
- drm/i915: Downgrade Gen9 Plane WM latency error (bsc#1051510).
- drm/i915: Fix I915_EXEC_RING_MASK (bsc#1051510).
- drm/i915: Force 2*96 MHz cdclk on glk/cnl when audio power is enabled (bsc#1111666).
- drm/imx: do not skip DP channel disable for background plane (bsc#1051510).
- drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata() (bsc#1113722)
- drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata() (bsc#1113956)
- drm/mediatek: fix possible object reference leak (bsc#1051510).
- drm/meson: add size and alignment requirements for dumb buffers (bnc#1113722)
- drm/nouveau/bar/tu104: initial support (bsc#1133593).
- drm/nouveau/bar/tu106: initial support (bsc#1133593).
- drm/nouveau/bios/tu104: initial support (bsc#1133593).
- drm/nouveau/bios/tu106: initial support (bsc#1133593).
- drm/nouveau/bios: translate additional memory types (bsc#1133593).
- drm/nouveau/bios: translate usb-C connector type (bsc#1133593).
- drm/nouveau/bus/tu104: initial support (bsc#1133593).
- drm/nouveau/bus/tu106: initial support (bsc#1133593).
- drm/nouveau/ce/tu104: initial support (bsc#1133593).
- drm/nouveau/ce/tu106: initial support (bsc#1133593).
- drm/nouveau/core: increase maximum number of nvdec instances to 3 (bsc#1133593).
- drm/nouveau/core: recognise TU102 (bsc#1133593).
- drm/nouveau/core: recognise TU104 (bsc#1133593).
- drm/nouveau/core: recognise TU106 (bsc#1133593).
- drm/nouveau/core: support multiple nvdec instances (bsc#1133593).
- drm/nouveau/devinit/gm200-: export function to upload+execute PMU/PRE_OS (bsc#1133593).
- drm/nouveau/devinit/tu104: initial support (bsc#1133593).
- drm/nouveau/devinit/tu106: initial support (bsc#1133593).
- drm/nouveau/disp/gm200-: add scdc parameter setter (bsc#1133593).
- drm/nouveau/disp/gv100: fix name of window channels in debug output (bsc#1133593).
- drm/nouveau/disp/tu104: initial support (bsc#1133593).
- drm/nouveau/disp/tu106: initial support (bsc#1133593).
- drm/nouveau/disp: add a way to configure scrambling/tmds for hdmi 2.0 (bsc#1133593).
- drm/nouveau/disp: add support for setting scdc parameters for high modes (bsc#1133593).
- drm/nouveau/disp: keep track of high-speed state, program into clock (bsc#1133593).
- drm/nouveau/disp: take sink support into account for exposing 594mhz (bsc#1133593).
- drm/nouveau/dma/tu104: initial support (bsc#1133593).
- drm/nouveau/dma/tu106: initial support (bsc#1133593).
- drm/nouveau/drm/nouveau: Do not forget to label dp_aux devices (bsc#1133593).
- drm/nouveau/drm/nouveau: s/nouveau_backlight_exit/nouveau_backlight_fini/ (bsc#1133593).
- drm/nouveau/drm/nouveau: tegra: Call nouveau_drm_device_init() (bsc#1133593).
- drm/nouveau/fault/tu104: initial support (bsc#1133593).
- drm/nouveau/fault/tu106: initial support (bsc#1133593).
- drm/nouveau/fault: add explicit control over fault buffer interrupts (bsc#1133593).
- drm/nouveau/fault: remove manual mapping of fault buffers into BAR2 (bsc#1133593).
- drm/nouveau/fault: store get/put pri address in nvkm_fault_buffer (bsc#1133593).
- drm/nouveau/fb/tu104: initial support (bsc#1133593).
- drm/nouveau/fb/tu106: initial support (bsc#1133593).
- drm/nouveau/fifo/gf100-: call into BAR to reset BARs after MMU fault (bsc#1133593).
- drm/nouveau/fifo/gk104-: group pbdma functions together (bsc#1133593).
- drm/nouveau/fifo/gk104-: return channel instance in ctor args (bsc#1133593).
- drm/nouveau/fifo/gk104-: separate runlist building from committing to hw (bsc#1133593).
- drm/nouveau/fifo/gk104-: support enabling privileged ce functions (bsc#1133593).
- drm/nouveau/fifo/gk104-: virtualise pbdma enable function (bsc#1133593).
- drm/nouveau/fifo/gm200-: read pbdma count more directly (bsc#1133593).
- drm/nouveau/fifo/gv100: allocate method buffer (bsc#1133593).
- drm/nouveau/fifo/gv100: return work submission token in channel ctor args (bsc#1133593).
- drm/nouveau/fifo/tu104: initial support (bsc#1133593).
- drm/nouveau/fifo/tu106: initial support (bsc#1133593).
- drm/nouveau/fuse/tu104: initial support (bsc#1133593).
- drm/nouveau/fuse/tu106: initial support (bsc#1133593).
- drm/nouveau/gpio/tu104: initial support (bsc#1133593).
- drm/nouveau/gpio/tu106: initial support (bsc#1133593).
- drm/nouveau/i2c/tu104: initial support (bsc#1133593).
- drm/nouveau/i2c/tu106: initial support (bsc#1133593).
- drm/nouveau/i2c: Disable i2c bus access after -&gt;fini() (bsc#1113722)
- drm/nouveau/ibus/tu104: initial support (bsc#1133593).
- drm/nouveau/ibus/tu106: initial support (bsc#1133593).
- drm/nouveau/imem/nv50: support pinning objects in BAR2 and returning address (bsc#1133593).
- drm/nouveau/imem/tu104: initial support (bsc#1133593).
- drm/nouveau/imem/tu106: initial support (bsc#1133593).
- drm/nouveau/kms/nv50-: allow more flexibility with lut formats (bsc#1133593).
- drm/nouveau/kms/tu104: initial support (bsc#1133593).
- drm/nouveau/ltc/tu104: initial support (bsc#1133593).
- drm/nouveau/ltc/tu106: initial support (bsc#1133593).
- drm/nouveau/mc/tu104: initial support (bsc#1133593).
- drm/nouveau/mc/tu106: initial support (bsc#1133593).
- drm/nouveau/mmu/tu104: initial support (bsc#1133593).
- drm/nouveau/mmu/tu106: initial support (bsc#1133593).
- drm/nouveau/mmu: add more general vmm free/node handling functions (bsc#1133593).
- drm/nouveau/pci/tu104: initial support (bsc#1133593).
- drm/nouveau/pci/tu106: initial support (bsc#1133593).
- drm/nouveau/pmu/tu104: initial support (bsc#1133593).
- drm/nouveau/pmu/tu106: initial support (bsc#1133593).
- drm/nouveau/therm/tu104: initial support (bsc#1133593).
- drm/nouveau/therm/tu106: initial support (bsc#1133593).
- drm/nouveau/tmr/tu104: initial support (bsc#1133593).
- drm/nouveau/tmr/tu106: initial support (bsc#1133593).
- drm/nouveau/top/tu104: initial support (bsc#1133593).
- drm/nouveau/top/tu106: initial support (bsc#1133593).
- drm/nouveau/volt/gf117: fix speedo readout register (bsc#1051510).
- drm/nouveau: add DisplayPort CEC-Tunneling-over-AUX support (bsc#1133593).
- drm/nouveau: Add NV_PRINTK_ONCE and variants (bsc#1133593).
- drm/nouveau: Add size to vbios.rom file in debugfs (bsc#1133593).
- drm/nouveau: Add strap_peek to debugfs (bsc#1133593).
- drm/nouveau: Cleanup indenting in nouveau_backlight.c (bsc#1133593).
- drm/nouveau: Fix potential memory leak in nouveau_drm_load() (bsc#1133593).
- drm/nouveau: Move backlight device into nouveau_connector (bsc#1133593).
- drm/nouveau: Refactor nvXX_backlight_init() (bsc#1133593).
- drm/nouveau: register backlight on pascal and newer (bsc#1133593).
- drm/nouveau: remove left-over struct member (bsc#1133593).
- drm/nouveau: Remove unecessary dma_fence_ops (bsc#1133593).
- drm/nouveau: Start using new drm_dev initialization helpers (bsc#1133593).
- drm/nouveau: Stop using drm_crtc_force_disable (bsc#1051510).
- drm/omap: hdmi4_cec: Fix CEC clock handling for PM (bsc#1111666).
- drm/panel: panel-innolux: set display off in innolux_panel_unprepare (bsc#1111666).
- drm/pl111: Initialize clock spinlock early (bsc#1111666).
- drm/rockchip: fix for mailbox read validation (bsc#1051510).
- drm/rockchip: fix for mailbox read validation (bsc#1111666).
- drm/rockchip: shutdown drm subsystem on shutdown (bsc#1051510).
- drm/rockchip: vop: reset scale mode when win is disabled (bsc#1113722)
- drm/sun4i: Add missing drm_atomic_helper_shutdown at driver unbind (bsc#1113722)
- drm/sun4i: Fix component unbinding and component master deletion (bsc#1113722)
- drm/sun4i: Fix sun8i HDMI PHY clock initialization (bsc#1111666).
- drm/sun4i: Fix sun8i HDMI PHY configuration for &gt; 148.5 MHz (bsc#1111666).
- drm/sun4i: rgb: Change the pixel clock validation check (bnc#1113722)
- drm/sun4i: Set device driver data at bind time for use in unbind (bsc#1113722)
- drm/sun4i: tcon top: Fix NULL/invalid pointer dereference in sun8i_tcon_top_un/bind (bsc#1111666).
- drm/sun4i: Unbind components before releasing DRM and memory (bsc#1113722)
- drm/tegra: gem: Fix CPU-cache maintenance for BO's allocated using get_pages() (bsc#1111666).
- drm/tegra: hub: Fix dereference before check (bsc#1111666).
- drm/ttm: Fix bo_global and mem_global kfree error (bsc#1111666).
- drm/ttm: fix out-of-bounds read in ttm_put_pages() v2 (bsc#1111666).
- drm/ttm: Remove warning about inconsistent mapping information (bnc#1131488)
- drm/udl: add a release method and delay modeset teardown (bsc#1085536)
- drm/vc4: Fix memory leak during gpu reset. (bsc#1113722)
- drm/vmwgfx: Do not send drm sysfs hotplug events on initial master set (bsc#1051510).
- drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read (bsc#1051510).
- drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() (bsc#1113722)
- drm/vmwgfx: Remove set but not used variable 'restart' (bsc#1111666).
- drm: Auto-set allow_fb_modifiers when given modifiers at plane init (bsc#1051510).
- drm: bridge: dw-hdmi: Fix overflow workaround for Rockchip SoCs (bsc#1113722)
- drm: rcar-du: Fix rcar_du_crtc structure documentation (bsc#1111666).
- dsa: mv88e6xxx: Ensure all pending interrupts are handled prior to exit (networking-stable-19_02_20).
- dt-bindings: clock: r8a7795: Remove CSIREF clock (bsc#1120902).
- dt-bindings: clock: r8a7796: Remove CSIREF clock (bsc#1120902).
- dt-bindings: net: Add binding for the external clock for TI WiLink (bsc#1085535).
- dt-bindings: net: Fix a typo in the phy-mode list for ethernet bindings (bsc#1129770).
- dt-bindings: rtc: sun6i-rtc: Fix register range in example (bsc#1120902).
- dwc2: gadget: Fix completed transfer size calculation in DDMA (bsc#1051510).
- e1000e: Disable runtime PM on CNP+ (jsc#SLE-4804).
- e1000e: Exclude device from suspend direct complete optimization (jsc#SLE-4804).
- e1000e: Fix -Wformat-truncation warnings (bsc#1051510).
- e1000e: fix a missing check for return value (jsc#SLE-4804).
- e1000e: fix cyclic resets at link up with active tx (bsc#1051510).
- edac, amd64: Add Hygon Dhyana support ().
- efi/arm: Defer persistent reservations until after paging_init() (bsc#1117158).
- efi/arm: Do not mark acpi reclaim memory as MEMBLOCK_NOMAP (bsc#1117158 bsc#1115688 bsc#1120566).
- efi/arm: libstub: add a root memreserve config table (bsc#1117158).
- efi/arm: map UEFI memory map even w/o runtime services enabled (bsc#1117158).
- efi/arm: preserve early mapping of UEFI memory map longer for BGRT (bsc#1117158).
- efi/arm: Revert 'Defer persistent reservations until after paging_init()' (bsc#1117158).
- efi/arm: Revert deferred unmap of early memmap mapping (bsc#1117158).
- efi: add API to reserve memory persistently across kexec reboot (bsc#1117158).
- efi: honour memory reservations passed via a linux specific config table (bsc#1117158).
- efi: Permit calling efi_mem_reserve_persistent() from atomic context (bsc#1117158).
- efi: Permit multiple entries in persistent memreserve data structure (bsc#1117158).
- efi: Prevent GICv3 WARN() by mapping the memreserve table before first use (bsc#1117158).
- efi: Reduce the amount of memblock reservations for persistent allocations (bsc#1117158).
- ext4: actually request zeroing of inode table after grow (bsc#1135315).
- ext4: avoid panic during forced reboot due to aborted journal (bsc#1126356).
- ext4: cleanup bh release code in ext4_ind_remove_space() (bsc#1131851).
- ext4: Do not warn when enabling DAX (bsc#1132894).
- ext4: fix data corruption caused by overlapping unaligned and aligned IO (bsc#1136428).
- ext4: fix ext4_show_options for file systems w/o journal (bsc#1135316).
- ext4: fix use-after-free race with debug_want_extra_isize (bsc#1135314).
- ext4: make sanity check in mballoc more strict (bsc#1136439).
- ext4: wait for outstanding dio during truncate in nojournal mode (bsc#1136438).
- fbdev: fbmem: fix memory access if logo is bigger than the screen (bsc#1051510).
- fbdev: fix divide error in fb_var_to_videomode (bsc#1113722)
- fbdev: fix WARNING in __alloc_pages_nodemask bug (bsc#1113722)
- firmware: efi: factor out mem_reserve (bsc#1117158 bsc#1134671).
- fix cgroup_do_mount() handling of failure exits (bsc#1133095).
- fix rtnh_ok() (git-fixes).
- fm10k: Fix a potential NULL pointer dereference (bsc#1051510).
- fm10k: TRIVIAL cleanup of extra spacing in function comment (jsc#SLE-4796).
- fm10k: use struct_size() in kzalloc() (jsc#SLE-4796).
- fs/nfs: Fix nfs_parse_devname to not modify it's argument (git-fixes).
- fs/sync.c: sync_file_range(2) may use WB_SYNC_ALL writeback (bsc#1136432).
- fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount (bsc#1136435).
- fs: avoid fdput() after failed fdget() in vfs_dedupe_file_range() (bsc#1132384, bsc#1132219).
- ftrace/x86_64: Emulate call function while updating in breakpoint handler (bsc#1099658).
- futex: Cure exit race (bsc#1050549).
- futex: Ensure that futex address is aligned in handle_futex_death() (bsc#1050549).
- futex: Handle early deadlock return correctly (bsc#1050549).
- genetlink: Fix a memory leak on error path (networking-stable-19_03_28).
- ghes, EDAC: Fix ghes_edac registration (bsc#1133176).
- gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input (bsc#1051510).
- gpio: aspeed: fix a potential NULL pointer dereference (bsc#1051510).
- gpio: gpio-omap: fix level interrupt idling (bsc#1051510).
- gpio: of: Fix of_gpiochip_add() error path (bsc#1051510).
- gpu: ipu-v3: dp: fix CSC handling (bsc#1051510).
- gre6: use log_ecn_error module parameter in ip6_tnl_rcv() (git-fixes).
- hid: core: move Usage Page concatenation to Main item (bsc#1093389).
- hid: debug: fix race condition with between rdesc_show() and device removal (bsc#1051510).
- hid: i2c-hid: Ignore input report if there's no data present on Elan touchpanels (bsc#1133486).
- hid: input: add mapping for 'Toggle Display' key (bsc#1051510).
- hid: input: add mapping for Assistant key (bsc#1051510).
- hid: input: add mapping for Expose/Overview key (bsc#1051510).
- hid: input: add mapping for keyboard Brightness Up/Down/Toggle keys (bsc#1051510).
- hid: input: fix a4tech horizontal wheel custom usage (bsc#1137429).
- hid: intel-ish-hid: avoid binding wrong ishtp_cl_device (bsc#1051510).
- hid: intel-ish: ipc: handle PIMR before ish_wakeup also clear PISR busy_clear bit (bsc#1051510).
- hid: logitech: check the return value of create_singlethread_workqueue (bsc#1051510).
- hv_netvsc: Fix IP header checksum for coalesced packets (networking-stable-19_03_07).
- hwmon: (f71805f) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (pc87427) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (vt1211) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwrng: virtio - Avoid repeated init of completion (bsc#1051510).
- i2c: imx: correct the method of getting private data in notifier_call (bsc#1111666).
- i2c: Make i2c_unregister_device() NULL-aware (bsc#1108193).
- i2c: synquacer: fix enumeration of slave devices (bsc#1111666).
- i40e: Able to add up to 16 MAC filters on an untrusted VF (jsc#SLE-4797).
- i40e: add new pci id for X710/XXV710 N3000 cards (jsc#SLE-4797).
- i40e: add num_vectors checker in iwarp handler (jsc#SLE-4797).
- i40e: Add support FEC configuration for Fortville 25G (jsc#SLE-4797).
- i40e: Add support for X710 B/P and SFP+ cards (jsc#SLE-4797).
- i40e: add tracking of AF_XDP ZC state for each queue pair (jsc#SLE-4797).
- i40e: change behavior on PF in response to MDD event (jsc#SLE-4797).
- i40e: Change unmatched function types (jsc#SLE-4797).
- i40e: Changed maximum supported FW API version to 1.8 (jsc#SLE-4797).
- i40e: check queue pairs num in config queues handler (jsc#SLE-4797).
- i40e: clean up several indentation issues (jsc#SLE-4797).
- i40e: do not allow changes to HW VLAN stripping on active port VLANs (jsc#SLE-4797).
- i40e: Fix for 10G ports LED not blinking (jsc#SLE-4797).
- i40e: Fix for allowing too many MDD events on VF (jsc#SLE-4797).
- i40e: fix i40e_ptp_adjtime when given a negative delta (jsc#SLE-4797).
- i40e: Fix misleading error message (jsc#SLE-4797).
- i40e: fix misleading message about promisc setting on un-trusted VF (jsc#SLE-4797).
- i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c (jsc#SLE-4797).
- i40e: Fix the typo in adding 40GE KR4 mode (jsc#SLE-4797).
- i40e: Further implementation of LLDP (jsc#SLE-4797).
- i40e: Implement DDP support in i40e driver (jsc#SLE-4797).
- i40e: increase indentation (jsc#SLE-4797).
- i40e: Introduce recovery mode support (jsc#SLE-4797).
- i40e: Limiting RSS queues to CPUs (jsc#SLE-4797).
- i40e: Memory leak in i40e_config_iwarp_qvlist (jsc#SLE-4797).
- i40e: missing input validation on VF message handling by the PF (jsc#SLE-4797).
- i40e: move i40e_xsk_umem function (jsc#SLE-4797).
- i40e: print pci vendor and device ID during probe (jsc#SLE-4797).
- i40e: Queues are reserved despite 'Invalid argument' error (jsc#SLE-4797).
- i40e: remove debugfs tx_timeout support (jsc#SLE-4797).
- i40e: remove error msg when vf with port vlan tries to remove vlan 0 (jsc#SLE-4797).
- i40e: Remove misleading messages for untrusted VF (jsc#SLE-4797).
- i40e: remove out-of-range comparisons in i40e_validate_cloud_filter (jsc#SLE-4797).
- i40e: Remove umem from VSI (jsc#SLE-4797).
- i40e: Report advertised link modes on 40GBase_LR4, CR4 and fibre (jsc#SLE-4797).
- i40e: Report advertised link modes on 40GBASE_SR4 (jsc#SLE-4797).
- i40e: Revert ShadowRAM checksum calculation change (jsc#SLE-4797).
- i40e: save PTP time before a device reset (jsc#SLE-4797).
- i40e: Setting VF to VLAN 0 requires restart (jsc#SLE-4797).
- i40e: ShadowRAM checksum calculation change (jsc#SLE-4797).
- i40e: The driver now prints the API version in error message (jsc#SLE-4797).
- i40e: Use struct_size() in kzalloc() (jsc#SLE-4797).
- i40e: VF's promiscuous attribute is not kept (jsc#SLE-4797).
- i40e: Wrong truncation from u16 to u8 (jsc#SLE-4797).
- i40iw: Avoid panic when handling the inetdev event (jsc#SLE-4793).
- i40iw: remove support for ib_get_vector_affinity (jsc#SLE-4793).
- i40iw: remove use of VLAN_TAG_PRESENT (jsc#SLE-4793).
- ib/hfi1: Add debugfs to control expansion ROM write protect (jsc#SLE-4925).
- ib/hfi1: Add selected Rcv counters (jsc#SLE-4925).
- ib/hfi1: Close VNIC sdma_progress sleep window (jsc#SLE-4925).
- ib/hfi1: Consider LMC in 16B/bypass ingress packet check (jsc#SLE-4925).
- ib/hfi1: Correctly process FECN and BECN in packets (jsc#SLE-4925).
- ib/hfi1: Dump pio info for non-user send contexts (jsc#SLE-4925).
- ib/hfi1: Eliminate opcode tests on mr deref (jsc#SLE-4925).
- ib/hfi1: Failed to drain send queue when QP is put into error state (jsc#SLE-4925).
- ib/hfi1: Fix the allocation of RSM table (jsc#SLE-4925).
- ib/hfi1: Fix two format strings (jsc#SLE-4925).
- ib/hfi1: Fix WQ_MEM_RECLAIM warning (jsc#SLE-4925).
- ib/hfi1: Ignore LNI errors before DC8051 transitions to Polling state (jsc#SLE-4925).
- ib/hfi1: Incorrect sizing of sge for PIO will OOPs (jsc#SLE-4925).
- ib/hfi1: Limit VNIC use of SDMA engines to the available count (jsc#SLE-4925).
- ib/hfi1: Reduce lock contention on iowait_lock for sdma and pio (jsc#SLE-4925).
- ib/hfi1: Remove overly conservative VM_EXEC flag check (jsc#SLE-4925).
- ib/hfi1: Remove WARN_ON when freeing expected receive groups (jsc#SLE-4925).
- ib/hfi1: Unreserve a reserved request when it is completed (jsc#SLE-4925).
- ib/hw: Remove unneeded semicolons (bsc#1136456 jsc#SLE-4689).
- ib/rdmavt: Add wc_flags and wc_immdata to cq entry trace (jsc#SLE-4925).
- ib/rdmavt: Fix frwr memory registration (jsc#SLE-4925).
- ib/rdmavt: Fix loopback send with invalidate ordering (jsc#SLE-4925).
- ib/{rdmavt, hfi1): Miscellaneous comment fixes (jsc#SLE-4925).
- ibmvnic: Add device identification to requested IRQs (bsc#1137739).
- ibmvnic: Do not close unopened driver during reset (bsc#1137752).
- ibmvnic: Enable GRO (bsc#1132227).
- ibmvnic: Fix completion structure initialization (bsc#1131659).
- ibmvnic: Fix netdev feature clobbering during a reset (bsc#1132227).
- ibmvnic: Fix unchecked return codes of memory allocations (bsc#1137752).
- ibmvnic: Refresh device multicast list after reset (bsc#1137752).
- ibmvnic: remove set but not used variable 'netdev' (bsc#1137739).
- ice : Ensure only valid bits are set in ice_aq_set_phy_cfg (jsc#SLE-4803).
- ice: Add 52 byte RSS hash key support (jsc#SLE-4803).
- ice: add and use new ice_for_each_traffic_class() macro (jsc#SLE-4803).
- ice: Add code for DCB initialization part 1/4 (jsc#SLE-4803).
- ice: Add code for DCB initialization part 2/4 (jsc#SLE-4803).
- ice: Add code for DCB initialization part 3/4 (jsc#SLE-4803).
- ice: Add code for DCB initialization part 4/4 (jsc#SLE-4803).
- ice: Add code for DCB rebuild (jsc#SLE-4803).
- ice: Add code to control FW LLDP and DCBX (jsc#SLE-4803).
- ice: Add code to get DCB related statistics (jsc#SLE-4803).
- ice: Add code to process LLDP Mib change events (jsc#SLE-4803).
- ice: add const qualifier to mac_addr parameter (jsc#SLE-4803).
- ice: Add ethtool private flag to make forcing link down optional (jsc#SLE-4803).
- ice: Add ethtool set_phys_id handler (jsc#SLE-4803).
- ice: Add function to program ethertype based filter rule on VSIs (jsc#SLE-4803).
- ice: Add missing case in print_link_msg for printing flow control (jsc#SLE-4803).
- ice: Add missing PHY type to link settings (jsc#SLE-4803).
- ice: Add more validation in ice_vc_cfg_irq_map_msg (jsc#SLE-4803).
- ice: Add priority information into VLAN header (jsc#SLE-4803).
- ice: Add reg_idx variable in ice_q_vector structure (jsc#SLE-4803).
- ice: Add support for adaptive interrupt moderation (jsc#SLE-4803).
- ice: Add support for new PHY types (jsc#SLE-4803).
- ice: Add support for PF/VF promiscuous mode (jsc#SLE-4803).
- ice: Allow for software timestamping (jsc#SLE-4803).
- ice: Always free/allocate q_vectors (jsc#SLE-4803).
- ice: Audit hotpath structures with pahole (jsc#SLE-4803).
- ice: avoid multiple unnecessary de-references in probe (jsc#SLE-4803).
- ice: Bump driver version (jsc#SLE-4803).
- ice: Bump version (jsc#SLE-4803).
- ice: Calculate ITR increment based on direct calculation (jsc#SLE-4803).
- ice: change VF VSI tc info along with num_queues (jsc#SLE-4803).
- ice: check for a leaf node presence (jsc#SLE-4803).
- ice: clear VF ARQLEN register on reset (jsc#SLE-4803).
- ice: code cleanup in ice_sched.c (jsc#SLE-4803).
- ice: configure GLINT_ITR to always have an ITR gran of 2 (jsc#SLE-4803).
- ice: Configure RSS LUT and HASH KEY in rebuild path (jsc#SLE-4803).
- ice: Create a generic name for the ice_rx_flg64_bits structure (jsc#SLE-4803).
- ice: Create framework for VSI queue context (jsc#SLE-4803).
- ice: Determine descriptor count and ring size based on PAGE_SIZE (jsc#SLE-4803).
- ice: Disable sniffing VF traffic on PF (jsc#SLE-4803).
- ice: Do not bail out when filter already exists (jsc#SLE-4803).
- ice: Do not let VF know that it is untrusted (jsc#SLE-4803).
- ice: Do not remove VLAN filters that were never programmed (jsc#SLE-4803).
- ice: Do not set LB_EN for prune switch rules (jsc#SLE-4803).
- ice: do not spam VFs with link messages (jsc#SLE-4803).
- ice: Do not unnecessarily initialize local variable (jsc#SLE-4803).
- ice: Enable LAN_EN for the right recipes (jsc#SLE-4803).
- ice: Enable link events over the ARQ (jsc#SLE-4803).
- ice: Enable MAC anti-spoof by default (jsc#SLE-4803).
- ice: enable VF admin queue interrupts (jsc#SLE-4803).
- ice: Fix added in VSI supported nodes calc (jsc#SLE-4803).
- ice: Fix broadcast traffic in port VLAN mode (jsc#SLE-4803).
- ice: Fix for adaptive interrupt moderation (jsc#SLE-4803).
- ice: Fix for allowing too many MDD events on VF (jsc#SLE-4803).
- ice: Fix for FC get rx/tx pause params (jsc#SLE-4803).
- ice: fix ice_remove_rule_internal vsi_list handling (jsc#SLE-4803).
- ice: Fix incorrect use of abbreviations (jsc#SLE-4803).
- ice: Fix issue reclaiming resources back to the pool after reset (jsc#SLE-4803).
- ice: Fix issue reconfiguring VF queues (jsc#SLE-4803).
- ice: Fix issue when adding more than allowed VLANs (jsc#SLE-4803).
- ice: fix issue where host reboots on unload when iommu=on (jsc#SLE-4803).
- ice: Fix issue with VF reset and multiple VFs support on PFs (jsc#SLE-4803).
- ice: fix numeric overflow warning (jsc#SLE-4803).
- ice: fix some function prototype and signature style issues (jsc#SLE-4803).
- ice: fix stack hogs from struct ice_vsi_ctx structures (jsc#SLE-4803).
- ice: fix static analysis warnings (jsc#SLE-4803).
- ice: Fix the calculation of ICE_MAX_MTU (jsc#SLE-4803).
- ice: fix the divide by zero issue (jsc#SLE-4803).
- ice: Fix typos in code comments (jsc#SLE-4803).
- ice: flush Tx pipe on disable queue timeout (jsc#SLE-4803).
- ice: Gather the rx buf clean-up logic for better reuse (jsc#SLE-4803).
- ice: Get resources per function (jsc#SLE-4803).
- ice: Get rid of ice_pull_tail (jsc#SLE-4803).
- ice: Get VF VSI instances directly via PF (jsc#SLE-4803).
- ice: Implement flow to reset VFs with PFR and other resets (jsc#SLE-4803).
- ice: Implement getting and setting ethtool coalesce (jsc#SLE-4803).
- ice: Implement pci_error_handler ops (jsc#SLE-4803).
- ice: Implement support for normal get_eeprom[_len] ethtool ops (jsc#SLE-4803).
- ice: Limit the ice_add_rx_frag to frag addition (jsc#SLE-4803).
- ice: map Rx buffer pages with DMA attributes (jsc#SLE-4803).
- ice: Move aggregator list into ice_hw instance (jsc#SLE-4803).
- ice: Offload SCTP checksum (jsc#SLE-4803).
- ice: only use the VF for ICE_VSI_VF in ice_vsi_release (jsc#SLE-4803).
- ice: Preserve VLAN Rx stripping settings (jsc#SLE-4803).
- ice: Prevent unintended multiple chain resets (jsc#SLE-4803).
- ice: Pull out page reuse checks onto separate function (jsc#SLE-4803).
- ice: Put __ICE_PREPARED_FOR_RESET check in ice_prepare_for_reset (jsc#SLE-4803).
- ice: Reduce scope of variable in ice_vsi_cfg_rxqs (jsc#SLE-4803).
- ice: Refactor a few Tx scheduler functions (jsc#SLE-4803).
- ice: Refactor getting/setting coalesce (jsc#SLE-4803).
- ice: Refactor link event flow (jsc#SLE-4803).
- ice: Remove '2 BITS' comment (jsc#SLE-4803).
- ice: Remove __always_unused attribute (jsc#SLE-4803).
- ice: remove redundant variable and if condition (jsc#SLE-4803).
- ice: Remove runtime change of PFINT_OICR_ENA register (jsc#SLE-4803).
- ice: Remove unnecessary braces (jsc#SLE-4803).
- ice: Remove unnecessary newlines from log messages (jsc#SLE-4803).
- ice: Remove unnecessary wait when disabling/enabling Rx queues (jsc#SLE-4803).
- ice: Remove unused function prototype (jsc#SLE-4803).
- ice: Remove unused function prototype (jsc#SLE-4803).
- ice: Remove unused vsi_id field (jsc#SLE-4803).
- ice: Reset all VFs with VFLR during SR-IOV init flow (jsc#SLE-4803).
- ice: Resolve static analysis reported issue (jsc#SLE-4803).
- ice: Restore VLAN switch rule if port VLAN existed before (jsc#SLE-4803).
- ice: Retrieve rx_buf in separate function (jsc#SLE-4803).
- ice: Return configuration error without queue to disable (jsc#SLE-4803).
- ice: Rework queue management code for reuse (jsc#SLE-4803).
- ice: Separate if conditions for ice_set_features() (jsc#SLE-4803).
- ice: Set LAN_EN for all directional rules (jsc#SLE-4803).
- ice: Set physical link up/down when an interface is set up/down (jsc#SLE-4803).
- ice: sizeof(type&gt;) should be avoided (jsc#SLE-4803).
- ice: Suppress false-positive style issues reported by static analyzer (jsc#SLE-4803).
- ice: use absolute vector ID for VFs (jsc#SLE-4803).
- ice: Use bitfields where possible (jsc#SLE-4803).
- ice: Use dev_err when ice_cfg_vsi_lan fails (jsc#SLE-4803).
- ice: Use ice_for_each_q_vector macro where possible (jsc#SLE-4803).
- ice: use ice_for_each_vsi macro when possible (jsc#SLE-4803).
- ice: use irq_num var in ice_vsi_req_irq_msix (jsc#SLE-4803).
- ice: Use more efficient structures (jsc#SLE-4803).
- ice: Use pf instead of vsi-back (jsc#SLE-4803).
- ice: use virt channel status codes (jsc#SLE-4803).
- ice: Validate ring existence and its q_vector per VSI (jsc#SLE-4803).
- igb: Bump version number (jsc#SLE-4798).
- igb: Exclude device from suspend direct complete optimization (jsc#SLE-4798).
- igb: fix various indentation issues (jsc#SLE-4798).
- igb: Fix WARN_ONCE on runtime suspend (jsc#SLE-4798).
- igb: use struct_size() helper (jsc#SLE-4798).
- igc: Add ethtool support (jsc#SLE-4799).
- igc: Add multiple receive queues control supporting (jsc#SLE-4799).
- igc: Add support for statistics (jsc#SLE-4799).
- igc: Add support for the ntuple feature (jsc#SLE-4799).
- igc: Extend the ethtool supporting (jsc#SLE-4799).
- igc: Fix code redundancy (jsc#SLE-4799).
- igc: Fix the typo in igc_base.h header definition (jsc#SLE-4799).
- igc: Remove the 'igc_get_phy_id_base' method (jsc#SLE-4799).
- igc: Remove the 'igc_read_mac_addr_base' method (jsc#SLE-4799).
- igc: Remove unneeded code (jsc#SLE-4799).
- igc: Remove unneeded hw_dbg prints (jsc#SLE-4799).
- igc: Remove unreachable code from igc_phy.c file (jsc#SLE-4799).
- igc: Remove unused code (jsc#SLE-4799).
- igc: Use struct_size() helper (jsc#SLE-4799).
- igmp: fix incorrect unsolicit report count when join group (git-fixes).
- iio/gyro/bmg160: Use millidegrees for temperature scale (bsc#1051510).
- iio: ad_sigma_delta: select channel when reading register (bsc#1051510).
- iio: adc: at91: disable adc channel interrupt in timeout case (bsc#1051510).
- iio: adc: fix warning in Qualcomm PM8xxx HK/XOADC driver (bsc#1051510).
- iio: adc: xilinx: fix potential use-after-free on remove (bsc#1051510).
- iio: core: fix a possible circular locking dependency (bsc#1051510).
- iio: cros_ec: Fix the maths for gyro scale calculation (bsc#1051510).
- iio: dac: mcp4725: add missing powerdown bits in store eeprom (bsc#1051510).
- iio: Fix scan mask selection (bsc#1051510).
- iio: gyro: mpu3050: fix chip ID reading (bsc#1051510).
- include/linux/bitops.h: introduce BITS_PER_TYPE (bsc#1136345 jsc#SLE-4681).
- indirect call wrappers: helpers to speed-up indirect calls of builtin (bsc#1124503).
- inetpeer: fix uninit-value in inet_getpeer (git-fixes).
- infiniband/qedr: Potential null ptr dereference of qp (bsc#1136456 jsc#SLE-4689).
- infiniband: hfi1: drop crazy DEBUGFS_SEQ_FILE_CREATE() macro (jsc#SLE-4925).
- infiniband: hfi1: no need to check return value of debugfs_create functions (jsc#SLE-4925).
- input: elan_i2c - add hardware ID for multiple Lenovo laptops (bsc#1051510).
- input: introduce KEY_ASSISTANT (bsc#1051510).
- input: snvs_pwrkey - initialize necessary driver data before enabling IRQ (bsc#1051510).
- input: synaptics-rmi4 - fix possible double free (bsc#1051510).
- input: synaptics-rmi4 - write config register values to the right offset (bsc#1051510).
- intel: correct return from set features callback (jsc#SLE-4795).
- intel_idle: add support for Jacobsville (jsc#SLE-5394).
- intel_th: msu: Fix single mode with IOMMU (bsc#1051510).
- intel_th: pci: Add Comet Lake support (bsc#1051510).
- io: accel: kxcjk1013: restore the range after resume (bsc#1051510).
- iommu/amd: Set exclusion range correctly (bsc#1130425).
- iommu/arm-smmu-v3: Abort all transactions if SMMU is enabled in kdump kernel (bsc#1117158).
- iommu/arm-smmu-v3: Do not disable SMMU in kdump kernel (bsc#1117158 bsc#1134671).
- iommu/vt-d: Do not request page request irq under dmar_global_lock (bsc#1135006).
- iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU (bsc#1135007).
- iommu/vt-d: Set intel_iommu_gfx_mapped correctly (bsc#1135008).
- ip6_tunnel: collect_md xmit: Use ip_tunnel_key's provided src address (git-fixes).
- ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type (networking-stable-19_04_10).
- ip_gre: fix parsing gre header in ipgre_err (git-fixes).
- ip_tunnel: Fix name string concatenate in __ip_tunnel_create() (git-fixes).
- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- ipmi: Fix I2C client removal in the SSIF driver (bsc#1108193).
- ipmi: fix sleep-in-atomic in free_user at cleanup SRCU user-&gt;release_barrier (bsc#1111666).
- ipmi: Prevent use-after-free in deliver_response (bsc#1111666).
- ipmi:ssif: compare block number correctly for multi-part return messages (bsc#1051510).
- ipmi_ssif: Remove duplicate NULL check (bsc#1108193).
- ipv4: add sanity checks in ipv4_link_failure() (git-fixes).
- ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled (git-fixes).
- ipv4: ensure rcu_read_lock() in ipv4_link_failure() (networking-stable-19_04_19).
- ipv4: ip_do_fragment: Preserve skb_iif during fragmentation (networking-stable-19_05_04).
- ipv4: recompile ip options in ipv4_link_failure (networking-stable-19_04_19).
- ipv4: Return error for RTA_VIA attribute (networking-stable-19_03_07).
- ipv4: set the tcp_min_rtt_wlen range from 0 to one day (networking-stable-19_04_30).
- ipv6/flowlabel: wait rcu grace period before put_pid() (git-fixes).
- ipv6: fix cleanup ordering for ip6_mr failure (git-fixes).
- ipv6: fix cleanup ordering for pingv6 registration (git-fixes).
- ipv6: Fix dangling pointer when ipv6 fragment (git-fixes).
- ipv6: invert flowlabel sharing check in process and user mode (git-fixes).
- ipv6: mcast: fix unsolicited report interval after receiving querys (git-fixes).
- ipv6: propagate genlmsg_reply return code (networking-stable-19_02_24).
- ipv6: Return error for RTA_VIA attribute (networking-stable-19_03_07).
- ipv6: sit: reset ip header pointer in ipip6_rcv (git-fixes).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route (bsc#1051510).
- ipvlan: disallow userns cap_net_admin to change global mode/flags (networking-stable-19_03_15).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf (git-fixes).
- ipvs: fix buffer overflow with sync daemon and service (git-fixes).
- ipvs: fix check on xmit to non-local addresses (git-fixes).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest() (bsc#1051510).
- ipvs: fix rtnl_lock lockups caused by start_sync_thread (git-fixes).
- ipvs: Fix signed integer overflow when setsockopt timeout (bsc#1051510).
- ipvs: fix stats update from local clients (git-fixes).
- ipvs: remove IPS_NAT_MASK check to fix passive FTP (git-fixes).
- iw_cxgb*: kzalloc the iwcm verbs struct (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: Check for send WR also while posting write with completion WR (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: complete the cached SRQ buffers (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: cq/qp mask depends on bar2 pages in a host page (bsc#1127371).
- iw_cxgb4: Fix qpid leak (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: fix srqidx leak during connection abort (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: Make function read_tcb() static (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- iw_cxgb4: use listening ep tos when accepting new connections (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: use tos when finding ipv6 routes (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: use tos when importing the endpoint (bsc#1136348 jsc#SLE-4684).
- iwiwifi: fix bad monitor buffer register addresses (bsc#1129770).
- iwlwifi: fix driver operation for 5350 (bsc#1111666).
- iwlwifi: fix send hcmd timeout recovery flow (bsc#1129770).
- ixgbe: fix mdio bus registration (jsc#SLE-4795).
- ixgbe: fix older devices that do not support IXGBE_MRQC_L3L4TXSWEN (jsc#SLE-4795).
- ixgbe: register a mdiobus (jsc#SLE-4795).
- ixgbe: remove magic constant in ixgbe_reset_hw_82599() (jsc#SLE-4795).
- ixgbe: use mii_bus to handle MII related ioctls (jsc#SLE-4795).
- ixgbe: Use struct_size() helper (jsc#SLE-4795).
- jbd2: check superblock mapped prior to committing (bsc#1136430).
- kabi i40e ignore include (jsc#SLE-4797).
- kabi protect struct iw_cm_id (bsc#1136348 jsc#SLE-4684).
- kabi protect struct vf_info (bsc#1136347 jsc#SLE-4683).
- kABI workaround for removed usb_interface.pm_usage_cnt field (bsc#1051510).
- kABI workaround for snd_seq_kernel_client_enqueue() API changes (bsc#1051510).
- kabi/severities: exclude hns3 symbols (bsc#1134948)
- kabi/severities: exclude qed* symbols (bsc#1136461)
- kabi/severities: missed hns roce module
- kabi: arm64: cpuhotplug: Reuse other arch's cpuhp_state ().
- kabi: drop LINUX_Mib_TCPWQUEUETOOBIG snmp counter (bsc#1137586).
- kabi: implement map_lookup_elem_sys_only in another way (bsc#1083647).
- kabi: move sysctl_tcp_min_snd_mss to preserve struct net layout (bsc#1137586).
- kABI: protect dma-mapping.h include (kabi).
- kABI: protect functions using struct net_generic (bsc#1129845 LTC#176252).
- kABI: protect ip_options_rcv_srr (kabi).
- kABI: protect struct mlx5_td (kabi).
- kABI: protect struct pci_dev (kabi).
- kABI: protect struct smc_ib_device (bsc#1129845 LTC#176252).
- kABI: protect struct smcd_dev (bsc#1129845 LTC#176252).
- kABI: restore icmp_send (kabi).
- kbuild: strip whitespace in cmd_record_mcount findstring (bsc#1065729).
- kcm: switch order of device registration to fix a crash (bnc#1130527).
- kernel/signal.c: trace_signal_deliver when signal_group_exit (git-fixes).
- kernel/sys.c: prctl: fix false positive in validate_prctl_map() (git-fixes).
- kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv (bsc#1051510).
- kernel/sysctl.c: fix out-of-bounds access when setting file-max (bsc#1051510).
- kernfs: do not set dentry-&gt;d_fsdata (boo#1133115).
- keys: always initialize keyring_index_key::desc_len (bsc#1051510).
- keys: safe concurrent user-&gt;{session,uid}_keyring access (bsc#1135642).
- keys: user: Align the payload buffer (bsc#1051510).
- kmsg: Update message catalog to latest ibM level (2019/03/08) (bsc#1128904 LTC#176078).
- kvm: Call kvm_arch_memslots_updated() before updating memslots (bsc#1132563).
- kvm: Fix kABI for AMD SMAP Errata workaround (bsc#1133149).
- kvm: Fix UAF in nested posted interrupt processing (bsc#1134199).
- kvm: nVMX: Apply addr size mask to effective address for VMX instructions (bsc#1132561).
- kvm: nVMX: Clear reserved bits of #DB exit qualification (bsc#1134200).
- kvm: nVMX: Ignore limit checks on VMX instructions using flat segments (bsc#1132564).
- kvm: nVMX: restore host state in nested_vmx_vmexit for VMFail (bsc#1134201).
- kvm: nVMX: Sign extend displacements of VMX instr's mem operands (bsc#1132562).
- kvm: PPC: Book3S HV: Fix race between kvm_unmap_hva_range and MMU mode switch (bsc#1061840).
- kvm: s390: fix memory overwrites when not using SCA entries (bsc#1136206).
- kvm: s390: provide io interrupt kvm_stat (bsc#1136206).
- kvm: s390: use created_vcpus in more places (bsc#1136206).
- kvm: s390: vsie: fix 8k check for the itdba (bsc#1136206).
- kvm: SVM: Workaround errata#1096 (insn_len maybe zero on SMAP violation) (bsc#1133149).
- kvm: VMX: Compare only a single byte for VMCS' 'launched' in vCPU-run (bsc#1132555).
- kvm: VMX: Zero out *all* general purpose registers after VM-Exit (bsc#1134202).
- kvm: x86/mmu: Detect MMIO generation wrap in any address space (bsc#1132570).
- kvm: x86/mmu: Do not cache MMIO accesses while memslots are in flux (bsc#1132571).
- kvm: x86: Always use 32-bit SMRAM save state for 32-bit kernels (bsc#1134203).
- kvm: x86: Do not clear EFER during SMM transitions for 32-bit vCPU (bsc#1134204).
- kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (bsc#1114279).
- kvm: x86: Report STibP on GET_SUPPORTED_CPUID (bsc#1111331).
- kvm: x86: svm: make sure NMI is injected after nmi_singlestep (bsc#1134205).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- l2tp: filter out non-PPP sessions in pppol2tp_tunnel_ioctl() (git-fixes).
- l2tp: fix missing refcount drop in pppol2tp_tunnel_ioctl() (git-fixes).
- l2tp: only accept PPP sessions in pppol2tp_connect() (git-fixes).
- l2tp: prevent pppol2tp_connect() from creating kernel sockets (git-fixes).
- l2tp: revert 'l2tp: fix missing print session offset info' (bsc#1051510).
- leds: avoid races with workqueue (bsc#1051510).
- leds: pwm: silently error out on EPROBE_DEFER (bsc#1051510).
- lib: add crc64 calculation routines (bsc#1130972).
- lib: do not depend on linux headers being installed (bsc#1130972).
- libata: fix using DMA buffers on stack (bsc#1051510).
- libcxgb: fix incorrect ppmax calculation (bsc#1136345 jsc#SLE-4681).
- lightnvm: if LUNs are already allocated fix return (bsc#1085535).
- linux/kernel.h: Use parentheses around argument in u64_to_user_ptr() (bsc#1051510).
- livepatch: Convert error about unsupported reliable stacktrace into a warning (bsc#1071995).
- livepatch: Remove custom kobject state handling (bsc#1071995).
- livepatch: Remove duplicated code for early initialization (bsc#1071995).
- lpfc: validate command in lpfc_sli4_scmd_to_wqidx_distr() (bsc#1129138).
- mac80211: do not attempt to rename ERR_PTR() debugfs dirs (bsc#1111666).
- mac80211: do not call driver wake_tx_queue op during reconfig (bsc#1051510).
- mac80211: fix memory accounting with A-MSDU aggregation (bsc#1051510).
- mac80211: fix unaligned access in mesh table hash function (bsc#1051510).
- mac80211: Honor SW_CRYPTO_CONTROL for unicast keys in AP VLAN mode (bsc#1111666).
- mac8390: Fix mmio access size probe (bsc#1051510).
- md/raid1: do not clear bitmap bits on interrupted recovery (git-fixes).
- md/raid5: fix 'out of memory' during raid cache recovery (git-fixes).
- md: batch flush requests (bsc#1119680).
- md: Fix failed allocation of md_register_thread (git-fixes).
- md: fix invalid stored role for a disk (bsc#1051510).
- media: atmel: atmel-isc: fix INIT_WORK misplacement (bsc#1051510).
- media: cx18: update *pos correctly in cx18_read_pos() (bsc#1051510).
- media: cx23885: check allocation return (bsc#1051510).
- media: davinci-isif: avoid uninitialized variable use (bsc#1051510).
- media: davinci/vpbe: array underflow in vpbe_enum_outputs() (bsc#1051510).
- media: ivtv: update *pos correctly in ivtv_read_pos() (bsc#1051510).
- media: mt9m111: set initial frame size other than 0x0 (bsc#1051510).
- media: mtk-jpeg: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: mx2_emmaprp: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: omap_vout: potential buffer overflow in vidioc_dqbuf() (bsc#1051510).
- media: ov2659: fix unbalanced mutex_lock/unlock (bsc#1051510).
- media: pvrusb2: Prevent a buffer overflow (bsc#1129770).
- media: s5p-g2d: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: s5p-jpeg: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: serial_ir: Fix use-after-free in serial_ir_init_module (bsc#1051510).
- media: sh_veu: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame (bsc#1051510).
- media: vivid: use vfree() instead of kfree() for dev-&gt;bitmap_cap (bsc#1051510).
- media: wl128x: Fix an error code in fm_download_firmware() (bsc#1051510).
- media: wl128x: prevent two potential buffer overflows (bsc#1051510).
- memcg: make it work on sparse non-0-node systems (bnc#1133616).
- memcg: make it work on sparse non-0-node systems kabi (bnc#1133616).
- mISDN: Check address length before reading address family (bsc#1051510).
- missing barriers in some of unix_sock -&gt;addr and -&gt;path accesses (networking-stable-19_03_15).
- mlxsw: spectrum: Fix autoneg status in ethtool (networking-stable-19_04_30).
- mm/debug.c: fix __dump_page when mapping-&gt;host is not set (bsc#1131934).
- mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (bsc#1135330).
- mm/page_isolation.c: fix a wrong flag in set_migratetype_isolate() (bsc#1131935).
- mm/vmalloc: fix size check for remap_vmalloc_range_partial() (bsc#1133825).
- mm: create non-atomic version of SetPageReserved for init use (jsc#SLE-6647).
- mm: Fix buggy backport leading to MAP_SYNC failures (bsc#1137372)
- mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (bnc#1012382).
- mmc: bcm2835 MMC issues (bsc#1070872).
- mmc: block: Delete gendisk before cleaning up the request queue (bsc#1127616).
- mmc: core: fix possible use after free of host (bsc#1051510).
- mmc: core: Fix tag set memory leak (bsc#1111666).
- mmc: davinci: remove extraneous __init annotation (bsc#1051510).
- mmc: sdhci: Fix data command CRC error handling (bsc#1051510).
- mmc: sdhci: Handle auto-command errors (bsc#1051510).
- mmc: sdhci: Rename SDHCI_ACMD12_ERR and SDHCI_INT_ACMD12ERR (bsc#1051510).
- mmc: tmio_mmc_core: do not claim spurious interrupts (bsc#1051510).
- mount: copy the port field into the cloned nfs_server structure (bsc#1136990).
- mpls: Return error for RTA_GATEWAY attribute (networking-stable-19_03_07).
- mt7601u: bump supported EEPROM version (bsc#1051510).
- mtd: docg3: fix a possible memory leak of mtd-&gt;name (bsc#1051510).
- mtd: docg3: Fix passing zero to 'PTR_ERR' warning in doc_probe_device (bsc#1051510).
- mtd: nand: omap: Fix comment in platform data using wrong Kconfig symbol (bsc#1051510).
- mtd: part: fix incorrect format specifier for an unsigned long long (bsc#1051510).
- mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write (bsc#1129770).
- mwifiex: do not advertise ibSS features without FW support (bsc#1129770).
- mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (bsc#1136935).
- mwifiex: Fix mem leak in mwifiex_tm_cmd (bsc#1051510).
- mwifiex: Fix possible buffer overflows at parsing bss descriptor
- mwifiex: Make resume actually do something useful again on SDIO cards (bsc#1111666).
- mwifiex: prevent an array overflow (bsc#1051510).
- mwl8k: Fix rate_idx underflow (bsc#1051510).
- neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit (git-fixes).
- net-gro: Fix GRO flush when receiving a GSO packet (networking-stable-19_04_10).
- net/hsr: fix possible crash in add_timer() (networking-stable-19_03_15).
- net/ibmvnic: Remove tests of member address (bsc#1137739).
- net/ibmvnic: Update carrier state after link state change (bsc#1135100).
- net/ibmvnic: Update MAC address settings after adapter reset (bsc#1134760).
- net/ipv4: defensive cipso option parsing (git-fixes).
- net/ipv6: do not reinitialize ndev-&gt;cnf.addr_gen_mode on new inet6_dev (git-fixes).
- net/ipv6: fix addrconf_sysctl_addr_gen_mode (git-fixes).
- net/ipv6: propagate net.ipv6.conf.all.addr_gen_mode to devices (git-fixes).
- net/ipv6: reserve room for IFLA_INET6_ADDR_GEN_MODE (git-fixes).
- net/mlx5: Decrease default mr cache size (networking-stable-19_04_10).
- net/mlx5e: Add a lock on tir list (networking-stable-19_04_10).
- net/mlx5e: Do not overwrite pedit action when multiple pedit used (networking-stable-19_02_24).
- net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query (networking-stable-19_04_30).
- net/mlx5e: Fix error handling when refreshing TIRs (networking-stable-19_04_10).
- net/mlx5e: Fix trailing semicolon (bsc#1075020).
- net/mlx5e: IPoib, Reset QP after channels are closed (bsc#1075020).
- net/packet: fix 4gb buffer limit due to overflow check (networking-stable-19_02_24).
- net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec (git-fixes).
- net/rose: fix unbound loop in rose_loopback_timer() (networking-stable-19_04_30).
- net/sched: act_sample: fix divide by zero in the traffic path (networking-stable-19_04_10).
- net/sched: do not dereference a-&gt;goto_chain to read the chain index (bsc#1064802 bsc#1066129).
- net/sched: fix -&gt;get helper of the matchall cls (networking-stable-19_04_10).
- net/smc: add pnet table namespace support (bsc#1129845 LTC#176252).
- net/smc: add smcd support to the pnet table (bsc#1129845 LTC#176252).
- net/smc: allow pci IDs as ib device names in the pnet table (bsc#1129845 LTC#176252).
- net/smc: allow pnetid-less configuration (bsc#1129845 LTC#176252).
- net/smc: check for ip prefix and subnet (bsc#1134607 LTC#177518).
- net/smc: cleanup for smcr_tx_sndbuf_nonempty (bsc#1129845 LTC#176252).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: consolidate function parameters (bsc#1134607 LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607 LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607 LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607 LTC#177518).
- net/smc: improve smc_conn_create reason codes (bsc#1134607 LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607 LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607 LTC#177518).
- net/smc: rework pnet table (bsc#1129845 LTC#176252).
- net/smc: wait for pending work before clcsock release_sock (bsc#1134607 LTC#177518).
- net/tls: free ctx in sock destruct (bsc#1136353 jsc#SLE-4688).
- net/x25: fix a race in x25_bind() (networking-stable-19_03_15).
- net/x25: fix use-after-free in x25_device_event() (networking-stable-19_03_15).
- net/x25: reset state in x25_connect() (networking-stable-19_03_15).
- net: Add __icmp_send helper (networking-stable-19_03_07).
- net: Add header for usage of fls64() (networking-stable-19_02_20).
- net: aquantia: fix rx checksum offload for UDP/TCP over IPv6 (networking-stable-19_03_28).
- net: atm: Fix potential Spectre v1 vulnerabilities (networking-stable-19_04_19).
- net: avoid false positives in untrusted gso validation (git-fixes).
- net: avoid skb_warn_bad_offload on IS_ERR (git-fixes).
- net: avoid use IPCB in cipso_v4_error (networking-stable-19_03_07).
- net: bridge: add vlan_tunnel to bridge port policies (git-fixes).
- net: bridge: fix per-port af_packet sockets (git-fixes).
- net: bridge: multicast: use rcu to access port list from br_multicast_start_querier (git-fixes).
- net: chelsio: Add a missing check on cudg_get_buffer (bsc#1136345 jsc#SLE-4681).
- net: cxgb4: fix various indentation issues (bsc#1136345 jsc#SLE-4681).
- net: datagram: fix unbounded loop in __skb_try_recv_datagram() (git-fixes).
- net: Do not allocate page fragments that are not skb aligned (networking-stable-19_02_20).
- net: do not keep lonely packets forever in the gro hash (git-fixes).
- net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc (networking-stable-19_05_04).
- net: dsa: legacy: do not unmask port bitmaps (git-fixes).
- net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT (git-fixes).
- net: dsa: mv88e6xxx: Fix u64 statistics (networking-stable-19_03_07).
- net: ena: fix return value of ena_com_config_llq_info() (bsc#1111696 bsc#1117561).
- net: ethtool: not call vzalloc for zero sized memory request (networking-stable-19_04_10).
- net: Fix a bug in removing queues from XPS map (git-fixes).
- net: Fix for_each_netdev_feature on Big endian (networking-stable-19_02_20).
- net: fix IPv6 prefix route residue (networking-stable-19_02_20).
- net: fix uninit-value in __hw_addr_add_ex() (git-fixes).
- net: Fix untag for vlan packets without ethernet header (git-fixes).
- net: Fix vlan untag for bridge and vlan_dev with reorder_hdr off (git-fixes).
- net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv (networking-stable-19_04_19).
- net: hns3: add counter for times RX pages gets allocated (bsc#1104353 bsc#1134947).
- net: hns3: add error handler for initializing command queue (bsc#1104353 bsc#1135058).
- net: hns3: add function type check for debugfs help information (bsc#1104353 bsc#1134980).
- net: hns3: Add handling of MAC tunnel interruption (bsc#1104353 bsc#1134983).
- net: hns3: add hns3_gro_complete for HW GRO process (bsc#1104353 bsc#1135051).
- net: hns3: add linearizing checking for TSO case (bsc#1104353 bsc#1134947).
- net: hns3: add protect when handling mac addr list (bsc#1104353 ).
- net: hns3: add queue's statistics update to service task (bsc#1104353 bsc#1134981).
- net: hns3: add reset statistics for VF (bsc#1104353 bsc#1134995).
- net: hns3: add reset statistics info for PF (bsc#1104353 bsc#1134995).
- net: hns3: add some debug info for hclgevf_get_mbx_resp() (bsc#1104353 bsc#1134994).
- net: hns3: add some debug information for hclge_check_event_cause (bsc#1104353 bsc#1134994).
- net: hns3: add support for dump ncl config by debugfs (bsc#1104353 bsc#1134987).
- net: hns3: Add support for netif message level settings (bsc#1104353 bsc#1134989).
- net: hns3: adjust the timing of hns3_client_stop when unloading (bsc#1104353 bsc#1137201).
- net: hns3: always assume no drop TC for performance reason (bsc#1104353 bsc#1135049).
- net: hns3: check 1000M half for hns3_ethtool_ops.set_link_ksettings (bsc#1104353 bsc#1137201).
- net: hns3: check resetting status in hns3_get_stats() (bsc#1104353 bsc#1137201).
- net: hns3: code optimization for command queue' spin lock (bsc#1104353 bsc#1135042).
- net: hns3: combine len and checksum handling for inner and outer header (bsc#1104353 bsc#1134947).
- net: hns3: deactive the reset timer when reset successfully (bsc#1104353 bsc#1137201).
- net: hns3: divide shared buffer between TC (bsc#1104353 bsc#1135047).
- net: hns3: do not initialize MDIO bus when PHY is inexistent (bsc#1104353 bsc#1135045).
- net: hns3: do not request reset when hardware resetting (bsc#1104353 bsc#1137201).
- net: hns3: dump more information when tx timeout happens (bsc#1104353 bsc#1134990).
- net: hns3: extend the loopback state acquisition time (bsc#1104353).
- net: hns3: fix data race between ring-&gt;next_to_clean (bsc#1104353 bsc#1134975 bsc#1134945).
- net: hns3: fix error handling for desc filling (bsc#1104353 ).
- net: hns3: fix for HNS3_RXD_GRO_SIZE_M macro (bsc#1104353 bsc#1137201).
- net: hns3: fix for tunnel type handling in hns3_rx_checksum (bsc#1104353 bsc#1134946).
- net: hns3: fix for TX clean num when cleaning TX BD (bsc#1104353 ).
- net: hns3: fix for vport-&gt;bw_limit overflow problem (bsc#1104353 bsc#1134998).
- net: hns3: fix keep_alive_timer not stop problem (bsc#1104353 bsc#1135055).
- net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info() (bsc#1104353 bsc#1134990).
- net: hns3: fix pause configure fail problem (bsc#1104353 bsc#1134951 bsc#1134951).
- net: hns3: fix set port based VLAN for PF (bsc#1104353 bsc#1135053).
- net: hns3: fix set port based VLAN issue for VF (bsc#1104353 bsc#1135053).
- net: hns3: fix sparse: warning when calling hclge_set_vlan_filter_hw() (bsc#1104353 bsc#1134999).
- net: hns3: fix VLAN offload handle for VLAN inserted by port (bsc#1104353 bsc#1135053).
- net: hns3: free the pending skb when clean RX ring (bsc#1104353 bsc#1135044).
- net: hns3: handle pending reset while reset fail (bsc#1104353 bsc#1135058).
- net: hns3: handle the BD info on the last BD of the packet (bsc#1104353 bsc#1134974).
- net: hns3: ignore lower-level new coming reset (bsc#1104353 bsc#1137201).
- net: hns3: Make hclge_destroy_cmd_queue static (bsc#1104353 bsc#1137201).
- net: hns3: Make hclgevf_update_link_mode static (bsc#1104353 bsc#1137201).
- net: hns3: minor optimization for datapath (bsc#1104353 ).
- net: hns3: minor optimization for ring_space (bsc#1104353 ).
- net: hns3: minor refactor for hns3_rx_checksum (bsc#1104353 bsc#1135052).
- net: hns3: modify HNS3_NIC_STATE_INITED flag in hns3_reset_notify_uninit_enet (bsc#1104353).
- net: hns3: modify the VF network port media type acquisition method (bsc#1104353 bsc#1137201).
- net: hns3: modify VLAN initialization to be compatible with port based VLAN (bsc#1104353 bsc#1135053).
- net: hns3: not reset TQP in the DOWN while VF resetting (bsc#1104353 bsc#1134952).
- net: hns3: not reset vport who not alive when PF reset (bsc#1104353 bsc#1137201).
- net: hns3: optimize the barrier using when cleaning TX BD (bsc#1104353 bsc#1134945).
- net: hns3: prevent change MTU when resetting (bsc#1104353 bsc#1137201).
- net: hns3: prevent double free in hns3_put_ring_config() (bsc#1104353 bsc#1134950).
- net: hns3: reduce resources use in kdump kernel (bsc#1104353 bsc#1137201).
- net: hns3: refactor BD filling for l2l3l4 info (bsc#1104353 bsc#1134947).
- net: hns3: refine tx timeout count handle (bsc#1104353 bsc#1134990).
- net: hns3: remove redundant assignment of l2_hdr to itself (bsc#1104353).
- net: hns3: remove reset after command send failed (bsc#1104353 bsc#1134949).
- net: hns3: remove resetting check in hclgevf_reset_task_schedule (bsc#1104353 bsc#1135056).
- net: hns3: return 0 and print warning when hit duplicate MAC (bsc#1104353 bsc#1137201).
- net: hns3: set dividual reset level for all RAS and MSI-X errors (bsc#1104353 bsc#1135046).
- net: hns3: set up the vport alive state while reinitializing (bsc#1104353 bsc#1137201).
- net: hns3: set vport alive state to default while resetting (bsc#1104353 bsc#1137201).
- net: hns3: simplify hclgevf_cmd_csq_clean (bsc#1104353 ).
- net: hns3: some cleanup for struct hns3_enet_ring (bsc#1104353 bsc#1134947).
- net: hns3: split function hnae3_match_n_instantiate() (bsc#1104353).
- net: hns3: stop mailbox handling when command queue need re-init (bsc#1104353 bsc#1135058).
- net: hns3: stop sending keep alive msg when VF command queue needs reinit (bsc#1104353 bsc#1134972).
- net: hns3: unify maybe_stop_tx for TSO and non-TSO case (bsc#1104353 bsc#1134947).
- net: hns3: unify the page reusing for page size 4K and 64K (bsc#1104353 bsc#1134947).
- net: hns3: use a reserved byte to identify need_resp flag (bsc#1104353).
- net: hns3: use atomic_t replace u32 for arq's count (bsc#1104353 bsc#1134953).
- net: hns3: use devm_kcalloc when allocating desc_cb (bsc#1104353 bsc#1134947).
- net: hns3: use napi_schedule_irqoff in hard interrupts handlers (bsc#1104353 bsc#1134947).
- net: hsr: fix memory leak in hsr_dev_finalize() (networking-stable-19_03_15).
- net: initialize skb-&gt;peeked when cloning (git-fixes).
- net: make skb_partial_csum_set() more robust against overflows (git-fixes).
- net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails (networking-stable-19_03_07).
- net: phy: marvell: add new default led configure for m88e151x (bsc#1135018).
- net: phy: marvell: change default m88e1510 LED configuration (bsc#1135018).
- net: phy: marvell: Enable interrupt function on LED2 pin (bsc#1135018).
- net: phy: marvell: Fix buffer overrun with stats counters (networking-stable-19_05_04).
- net: rds: exchange of 8K and 1M pool (networking-stable-19_04_30).
- net: rose: fix a possible stack overflow (networking-stable-19_03_28).
- net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables &gt; 255 (networking-stable-19_03_15).
- net: sit: fix memory leak in sit_init_net() (networking-stable-19_03_07).
- net: sit: fix UBSAN Undefined behaviour in check_6rd (networking-stable-19_03_15).
- net: socket: fix potential spectre v1 gadget in socketcall (git-fixes).
- net: socket: set sock-&gt;sk to NULL after calling proto_ops::release() (networking-stable-19_03_07).
- net: stmmac: fix memory corruption with large MTUs (networking-stable-19_03_28).
- net: stmmac: move stmmac_check_ether_addr() to driver probe (networking-stable-19_04_30).
- net: test tailroom before appending to linear skb (git-fixes).
- net: thunderx: do not allow jumbo frames with XDP (networking-stable-19_04_19).
- net: thunderx: raise XDP MTU to 1508 (networking-stable-19_04_19).
- net: unbreak CONFIG_RETPOLINE=n builds (bsc#1124503).
- net: use indirect call wrappers at GRO network layer (bsc#1124503).
- net: use indirect call wrappers at GRO transport layer (bsc#1124503).
- net: validate untrusted gso packets without csum offload (networking-stable-19_02_20).
- net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms() (git-fixes).
- net_sched: fix two more memory leaks in cls_tcindex (networking-stable-19_02_24).
- netfilter: bridge: Do not sabotage nf_hook calls from an l3mdev (git-fixes).
- netfilter: bridge: ebt_among: add missing match size checks (git-fixes).
- netfilter: bridge: ebt_among: add more missing match size checks (git-fixes).
- netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING (git-fixes).
- netfilter: drop template ct when conntrack is skipped (git-fixes).
- netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule (git-fixes).
- netfilter: ebtables: handle string from userspace with care (git-fixes).
- netfilter: ebtables: reject non-bridge targets (git-fixes).
- netfilter: ip6t_MASQUERADE: add dependency on conntrack module (git-fixes).
- netfilter: ipset: do not call ipset_nest_end after nla_nest_cancel (git-fixes).
- netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_exit() (git-fixes).
- netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt (git-fixes).
- netfilter: nf_log: do not hold nf_log_mutex during user access (git-fixes).
- netfilter: nf_log: fix uninit read in nf_log_proc_dostring (git-fixes).
- netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6} (git-fixes).
- netfilter: nf_tables: can't fail after linking rule into active rule list (git-fixes).
- netfilter: nf_tables: check msg_type before nft_trans_set(trans) (git-fixes).
- netfilter: nf_tables: fix leaking object reference count (git-fixes).
- netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump() (git-fixes).
- netfilter: nf_tables: release chain in flushing set (git-fixes).
- netfilter: nft_compat: do not dump private area (git-fixes).
- netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target} (git-fixes).
- netfilter: x_tables: fix int overflow in xt_alloc_table_info() (git-fixes).
- netfilter: x_tables: initialise match/target check parameter struct (git-fixes).
- netlabel: fix out-of-bounds memory accesses (networking-stable-19_03_07).
- netlink: fix uninit-value in netlink_sendmsg (git-fixes).
- nfc: nci: Add some bounds checking in nci_hci_cmd_received() (bsc#1051510).
- nfs/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount (git-fixes).
- nfs: Add missing encode / decode sequence_maxsz to v4.2 operations (git-fixes).
- nfs: add module option to limit NFSv4 minor version (jsc#PM-231).
- nfs: Do not recoalesce on error in nfs_pageio_complete_mirror() (git-fixes).
- nfs: Do not use page_file_mapping after removing the page (git-fixes).
- nfs: Fix a soft lockup in the delegation recovery code (git-fixes).
- nfs: Fix a typo in nfs_init_timeout_values() (git-fixes).
- nfs: Fix an I/O request leakage in nfs_do_recoalesce (git-fixes).
- nfs: Fix dentry revalidation on nfsv4 lookup (bsc#1132618).
- nfs: Fix I/O request leakages (git-fixes).
- nfs: fix mount/umount race in nlmclnt (git-fixes).
- nfsd4: catch some false session retries (git-fixes).
- nfsd4: fix cached replies to solo SEQUENCE compounds (git-fixes).
- nfsv4.1 do not free interrupted slot on open (git-fixes).
- nfsv4.1: Reinitialise sequence results before retransmitting a request (git-fixes).
- nfsv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE() (git-fixes).
- nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands (bsc#1051510).
- nvme-fc: use separate work queue to avoid warning (bsc#1131673).
- nvme-multipath: avoid crash on invalid subsystem cntlid enumeration (bsc#1129273).
- nvme-multipath: avoid crash on invalid subsystem cntlid enumeration (bsc#1130937).
- nvme-multipath: split bios with the ns_head bio_set before submitting (bsc#1103259, bsc#1131673).
- nvme-rdma: fix possible free of a non-allocated async event buffer (bsc#1120423).
- nvme: add proper discard setup for the multipath device (bsc#1114638).
- nvme: Do not remove namespaces during reset (bsc#1131673).
- nvme: fix the dangerous reference of namespaces list (bsc#1131673).
- nvme: flush scan_work when resetting controller (bsc#1131673).
- nvme: make sure ns head inherits underlying device limits (bsc#1131673).
- nvme: only reconfigure discard if necessary (bsc#1114638).
- objtool: Fix function fallthrough detection (bsc#1058115).
- ocfs2: fix ocfs2 read inode data panic in ocfs2_iget (bsc#1136434).
- ocfs2: turn on OCFS2_FS_STATS setting(bsc#1134393) We need to turn on OCFS2_FS_STATS kernel configuration setting, to fix bsc#1134393.
- of: fix clang -Wunsequenced for be32_to_cpu() (bsc#1135642).
- omapfb: add missing of_node_put after of_device_is_available (bsc#1051510).
- openvswitch: add seqadj extension when NAT is used (bsc#1051510).
- openvswitch: fix flow actions reallocation (bsc#1051510).
- overflow: Fix -Wtype-limits compilation warnings (bsc#1111666).
- p54: drop device reference count if fails to enable device (bsc#1135642).
- packet: fix reserve calculation (git-fixes).
- packet: in packet_snd start writing at link layer allocation (git-fixes).
- packet: refine ring v3 block size test to hold one frame (git-fixes).
- packet: reset network header if packet shorter than ll reserved space (git-fixes).
- packet: validate msg_namelen in send directly (git-fixes).
- packets: Always register packet sk in the same order (networking-stable-19_03_28).
- pci: Add function 1 DMA alias quirk for Marvell 9170 SATA controller (bsc#1051510).
- pci: designware-ep: Read-only registers need DBI_RO_WR_EN to be writable (bsc#1051510).
- pci: endpoint: Use EPC's device in dma_alloc_coherent()/dma_free_coherent() (git-fixes).
- pci: Factor out pcie_retrain_link() function (git-fixes).
- pci: Init pcie feature bits for managed host bridge alloc (bsc#1111666).
- pci: Mark AMD Stoney Radeon R7 GPU ATS as broken (bsc#1051510).
- pci: Mark Atheros AR9462 to avoid bus reset (bsc#1051510).
- pci: pciehp: Convert to threaded IRQ (bsc#1133005).
- pci: pciehp: Ignore Link State Changes after powering off a slot (bsc#1133005).
- pci: pciehp: Tolerate Presence Detect hardwired to zero (bsc#1133016).
- pci: Work around Pericom pcie-to-pci bridge Retrain Link erratum (git-fixes).
- perf tools: Add Hygon Dhyana support ().
- perf/x86/amd: Add event map for AMD Family 17h (bsc#1134223).
- perf/x86/amd: Update generic hardware cache events for Family 17h (bsc#1134223).
- phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode (bsc#1051510).
- phy: sun4i-usb: Support set_mode to usb_HOST for non-OTG PHYs (bsc#1051510).
- platform/x86: alienware-wmi: printing the wrong error code (bsc#1051510).
- platform/x86: dell-rbtn: Add missing #include (bsc#1051510).
- platform/x86: intel_pmc_ipc: adding error handling (bsc#1051510).
- platform/x86: intel_punit_ipc: Revert 'Fix resource ioremap warning' (bsc#1051510).
- platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI table (bsc#1051510).
- platform/x86: pmc_atom: Add several Beckhoff Automation boards to critclk_systems DMI table (bsc#1051510).
- platform/x86: pmc_atom: Drop __initconst on dmi table (bsc#1051510).
- platform/x86: sony-laptop: Fix unintentional fall-through (bsc#1051510).
- power: supply: axp20x_usb_power: Fix typo in VBUS current limit macros (bsc#1051510).
- power: supply: axp288_charger: Fix unchecked return value (bsc#1051510).
- powerpc/64: Make meltdown reporting Book3S 64 specific
- powerpc/64s: Fix logic when handling unknown CPU features (bsc#1055117).
- powerpc/64s: Fix page table fragment refcount race vs speculative references (bsc#1131326, bsc#1108937).
- powerpc/eeh: Fix race with driver un/bind (bsc#1065729).
- powerpc/fsl: Add barrier_nospec implementation for NXP PowerPC Book3E
- powerpc/hugetlb: Handle mmap_min_addr correctly in get_unmapped_area callback (bsc#1131900).
- powerpc/kvm: Save and restore host AMR/IAMR/UAMOR (bsc#1061840).
- powerpc/mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown search (bsc#1131900).
- powerpc/mm/radix: Display if mappings are exec or not (bsc#1055186, git-fixes).
- powerpc/mm/radix: Prettify mapped memory range print out (bsc#1055186, git-fixes).
- powerpc/mm: Add missing tracepoint for tlbie (bsc#1055117, git-fixes).
- powerpc/mm: Check secondary hash page table (bsc#1065729).
- powerpc/mm: Fix page table dump to work on Radix (bsc#1055186, git-fixes).
- powerpc/msi: Fix NULL pointer access in teardown code (bsc#1065729).
- powerpc/numa: document topology_updates_enabled, disable by default (bsc#1133584).
- powerpc/numa: improve control of topology updates (bsc#1133584).
- powerpc/perf: Fix MMCRA corruption by bhrb_filter (bsc#1053043).
- powerpc/perf: Fix unit_sel/cache_sel checks (bsc#1053043).
- powerpc/perf: Remove l2 bus events from HW cache event array (bsc#1053043).
- powerpc/powernv/cpuidle: Init all present cpus for deep states (bsc#1055121).
- powerpc/powernv/idle: Restore IAMR after idle (bsc#1065729).
- powerpc/powernv/ioda2: Remove redundant free of TCE pages (bsc#1061840).
- powerpc/powernv/ioda: Allocate indirect TCE levels of cached userspace addresses on demand (bsc#1061840).
- powerpc/powernv/ioda: Fix locked_vm counting for memory used by IOMMU tables (bsc#1061840).
- powerpc/powernv: Do not reprogram SLW image on every kvm guest entry/exit (bsc#1061840).
- powerpc/powernv: Make opal log only readable by root (bsc#1065729).
- powerpc/powernv: Remove never used pnv_power9_force_smt4 (bsc#1061840).
- powerpc/process: Fix sparse address space warnings (bsc#1065729).
- powerpc/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
- powerpc/vdso32: fix CLOCK_MONOTONIC on PPC64 (bsc#1131587).
- powerpc/vdso64: Fix CLOCK_MONOTONIC inconsistencies across Y2038 (bsc#1131587).
- powerpc64/ftrace: Include ftrace.h needed for enable/disable calls (bsc#1088804, git-fixes).
- powerpc: Always initialize input array when calling epapr_hypercall() (bsc#1065729).
- powerpc: avoid -mno-sched-epilog on GCC 4.9 and newer (bsc#1065729).
- powerpc: consolidate -mno-sched-epilog into FTRACE flags (bsc#1065729).
- powerpc: Fix 32-bit kvm-PR lockup and host crash with MacOS guest (bsc#1061840).
- powerpc: Fix HMIs on big-endian with CONFIG_RELOCATABLE=y (bsc#1065729).
- proc/kcore: do not bounds check against address 0 (bsc#1051510).
- proc/sysctl: fix return error for proc_doulongvec_minmax() (bsc#1051510).
- proc: revalidate kernel thread inodes to root:root (bsc#1051510).
- ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK (git-fixes).
- pwm: Fix deadlock warning when removing PWM device (bsc#1051510).
- pwm: meson: Consider 128 a valid pre-divider (bsc#1051510).
- pwm: meson: Do not disable PWM when setting duty repeatedly (bsc#1051510).
- pwm: meson: Use the spin-lock only to protect register modifications (bsc#1051510).
- pwm: tiehrpwm: Update shadow register for disabling PWMs (bsc#1051510).
- qed*: Add iWARP 100g support (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed*: Change hwfn used for sb initialization (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add API for SmartAN query (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add infrastructure for error detection and recovery (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add llh ppfid interface and 100g support for offload protocols (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add qed devlink parameters table (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Define new MF bit for no_vlan config (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Delete redundant doorbell recovery types (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: fix indentation issue with statements in an if-block (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix iWARP buffer size provided for syn packet processing (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix iWARP syn packet mac address validation (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix missing DORQ attentions (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: fix spelling mistake 'faspath' -&gt; 'fastpath' (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: fix spelling mistake 'inculde' -&gt; 'include' (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix static checker warning (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix the doorbell address sanity check (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix the DORQ's attentions handling (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Mark expected switch fall-through (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Modify api for performing a dmae to another PF (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Modify offload protocols to use the affined engine (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Read device port count from the shmem (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Reduce the severity of ptp debug message (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: remove duplicated include from qed_if.h (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: remove redundant assignment to rc (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Revise load sequence to avoid pci errors (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Set the doorbell address correctly (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Add ethtool interface for SmartAN query (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Error recovery process (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Fix internal loopback failure with jumbo mtu configuration (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: fix write to free'd pointer error and double free of ptp (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Handle infinite driver spinning for Tx timestamp (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: place ethtool_rx_flow_spec after code after TC flower codebase (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Populate mbi version in ethtool driver query data (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qedr: Change the MSI-X vectors selection to be based on affined engine (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qla2xxx: allow irqbalance control in non-MQ mode (bsc#1128971).
- qla2xxx: allow irqbalance control in non-MQ mode (bsc#1128979).
- qla2xxx: always allocate qla_tgt_wq (bsc#1131451).
- qla2xxx: kABI fixes for v10.00.00.14-k (bsc#1136215).
- qla2xxx: kABI fixes for v10.01.00.15-k (bsc#1136215).
- qlcnic: remove assumption that vlan_tci != 0 (bsc#1136469 jsc#SLE-4695).
- qlcnic: remove set but not used variables 'cur_rings, max_hw_rings, tx_desc_info' (bsc#1136469 jsc#SLE-4695).
- qlcnic: remove set but not used variables 'op, cmd_op' (bsc#1136469 jsc#SLE-4695).
- qmi_wwan: add Olicard 600 (bsc#1051510).
- qmi_wwan: Add support for Quectel EG12/EM12 (networking-stable-19_03_07).
- ras/cec: Check the correct variable in the debugfs error handling (bsc#1085535).
- ravb: Decrease TxFIFO depth of Q3 and Q2 to one (networking-stable-19_03_15).
- rdma/cxbg: Use correct sizing on buffers holding page DMA addresses (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Add support for 64Byte cqes (bsc#1127371).
- rdma/cxgb4: Add support for kernel mode SRQ's (bsc#1127371).
- rdma/cxgb4: Add support for srq functions and structs (bsc#1127371).
- rdma/cxgb4: Don't expose DMA addresses (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Fix null pointer dereference on alloc_skb failure (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: fix some info leaks (bsc#1127371).
- rdma/cxgb4: Fix spelling mistake 'immedate' -&gt; 'immediate' (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Make c4iw_poll_cq_one() easier to analyze (bsc#1127371).
- rdma/cxgb4: Remove a set-but-not-used variable (bsc#1127371).
- rdma/cxgb4: Remove kref accounting for sync operation (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Use sizeof() notation (bsc#1136348 jsc#SLE-4684).
- rdma/hns: Add constraint on the setting of local ACK timeout (bsc#1104427 bsc#1137233).
- rdma/hns: Add SCC context allocation support for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Add SCC context clr support for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Add the process of AEQ overflow for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Add timer allocation support for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Bugfix for mapping user db (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for posting multiple srq work request (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for SCC hem free (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for sending with invalidate (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for set hem of SCC (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for the scene without receiver queue (bsc#1104427 bsc#1137233).
- rdma/hns: Configure capacity of hns device (bsc#1104427 bsc#1137236).
- rdma/hns: Delete unused variable in hns_roce_v2_modify_qp function (bsc#1104427).
- rdma/hns: Delete useful prints for aeq subtype event (bsc#1104427 bsc#1126206).
- rdma/hns: Fix bad endianess of port_pd variable (bsc#1104427 ).
- rdma/hns: Fix bug that caused srq creation to fail (bsc#1104427 ).
- rdma/hns: Fix the bug with updating rq head pointer when flush cqe (bsc#1104427 bsc#1137233).
- rdma/hns: Fix the chip hanging caused by sending doorbell during reset (bsc#1104427 bsc#1137232).
- rdma/hns: Fix the chip hanging caused by sending mailbox CMQ during reset (bsc#1104427 bsc#1137232).
- rdma/hns: Fix the Oops during rmmod or insmod ko when reset occurs (bsc#1104427 bsc#1137232).
- rdma/hns: Fix the state of rereg mr (bsc#1104427 bsc#1137236).
- rdma/hns: Hide error print information with roce vf device (bsc#1104427 bsc#1137236).
- rdma/hns: Limit minimum ROCE CQ depth to 64 (bsc#1104427 bsc#1137236).
- rdma/hns: Limit scope of hns_roce_cmq_send() (bsc#1104427 ).
- rdma/hns: Make some function static (bsc#1104427 bsc#1126206).
- rdma/hns: Modify qp specification according to UM (bsc#1104427 bsc#1137233).
- rdma/hns: Modify the pbl ba page size for hip08 (bsc#1104427 bsc#1137233).
- rdma/hns: Move spin_lock_irqsave to the correct place (bsc#1104427 bsc#1137236).
- rdma/hns: Only assgin some fields if the relatived attr_mask is set (bsc#1104427).
- rdma/hns: Only assign the fields of the rq psn if ib_QP_RQ_PSN is set (bsc#1104427).
- rdma/hns: Only assign the relatived fields of psn if ib_QP_SQ_PSN is set (bsc#1104427).
- rdma/hns: rdma/hns: Assign rq head pointer when enable rq record db (bsc#1104427 bsc#1137236).
- rdma/hns: Remove jiffies operation in disable interrupt context (bsc#1104427 bsc#1137236).
- rdma/hns: Remove set but not used variable 'rst' (bsc#1104427 bsc#1126206).
- rdma/hns: Set allocated memory to zero for wrid (bsc#1104427 bsc#1137236).
- rdma/hns: Support to create 1M srq queue (bsc#1104427 ).
- rdma/hns: Update CQE specifications (bsc#1104427 bsc#1137236).
- rdma/hns: Update the range of raq_psn field of qp context (bsc#1104427).
- rdma/i40iw: Handle workqueue allocation failure (jsc#SLE-4793).
- rdma/iw_cxgb4: Always disconnect when QP is transitioning to TERMINATE state (bsc#1136348 jsc#SLE-4684).
- rdma/iw_cxgb4: Drop __GFP_NOFAIL (bsc#1127371).
- rdma/iwcm: add tos_set bool to iw_cm struct (bsc#1136348 jsc#SLE-4684).
- rdma/qedr: Fix incorrect device rate (bsc#1136188).
- rdma/qedr: Fix out of bounds index check in query pkey (bsc#1136456 jsc#SLE-4689).
- rdma/rdmavt: Use correct sizing on buffers holding page DMA addresses (jsc#SLE-4925).
- rdma/rxe: Consider skb reserve space based on netdev of GID (bsc#1082387, bsc#1103992).
- rdma/smc: Replace ib_query_gid with rdma_get_gid_attr (bsc#1131530 LTC#176717).
- rds: fix refcount bug in rds_sock_addref (git-fixes).
- rds: tcp: atomically purge entries from rds_tcp_conn_list during netns delete (git-fixes).
- regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB (bsc#1051510).
- ring-buffer: Check if memory is available before allocation (bsc#1132531).
- route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race (networking-stable-19_03_15).
- rt2x00: do not increment sequence number while re-transmitting (bsc#1051510).
- rtc: da9063: set uie_unsupported when relevant (bsc#1051510).
- rtc: sh: Fix invalid alarm warning for non-enabled alarm (bsc#1051510).
- rtlwifi: rtl8723ae: Fix missing break in switch statement (bsc#1051510).
- rxrpc: Do not release call mutex on error pointer (git-fixes).
- rxrpc: Do not treat call aborts as conn aborts (git-fixes).
- rxrpc: Fix client call queueing, waiting for channel (networking-stable-19_03_15).
- rxrpc: Fix error reception on AF_INET6 sockets (git-fixes).
- rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket (git-fixes).
- rxrpc: Fix Tx ring annotation after initial Tx failure (git-fixes).
- s390/dasd: fix panic for failed online processing (bsc#1132589).
- s390/pkey: move pckmo subfunction available checks away from module init (bsc#1128544).
- s390/qdio: clear intparm during shutdown (bsc#1134597 LTC#177516).
- s390/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
- sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init() (bsc#1051510).
- sc16is7xx: move label 'err_spi' to correct section (bsc#1051510).
- sc16is7xx: put err_spi and err_i2c into correct #ifdef (bsc#1051510).
- scripts/git_sort/git_sort.py: remove old SCSI git branches
- scripts: override locale from environment when running recordmcount.pl (bsc#1134354).
- scsi: hisi: KABI ignore new symbols (bsc#1135038).
- scsi: hisi_sas: add host reset interface for test (bsc#1135041).
- scsi: hisi_sas: Add softreset in hisi_sas_I_T_nexus_reset() (bsc#1135033).
- scsi: hisi_sas: Adjust the printk format of functions hisi_sas_init_device() (bsc#1135037).
- scsi: hisi_sas: allocate different SAS address for directly attached situation (bsc#1135036).
- scsi: hisi_sas: Do not fail IT nexus reset for Open Reject timeout (bsc#1135033).
- scsi: hisi_sas: Do not hard reset disk during controller reset (bsc#1135034).
- scsi: hisi_sas: Fix for setting the PHY linkrate when disconnected (bsc#1135038).
- scsi: hisi_sas: Remedy inconsistent PHY down state in software (bsc#1135039).
- scsi: hisi_sas: remove the check of sas_dev status in hisi_sas_I_T_nexus_reset() (bsc#1135037).
- scsi: hisi_sas: Send HARD RESET to clear the previous affiliation of STP target port (bsc#1135037).
- scsi: hisi_sas: Set PHY linkrate when disconnected (bsc#1135038).
- scsi: hisi_sas: Some misc tidy-up (bsc#1135031).
- scsi: hisi_sas: Support all RAS events with MSI interrupts (bsc#1135035).
- scsi: libsas: allocate sense buffer for bsg queue (bsc#1131467).
- scsi: libsas: Do discovery on empty PHY to update PHY info (bsc#1135024).
- scsi: libsas: Improve vague log in SAS rediscovery (bsc#1135027).
- scsi: libsas: Inject revalidate event for root port event (bsc#1135026).
- scsi: libsas: Print expander PHY indexes in decimal (bsc#1135021).
- scsi: libsas: Stop hardcoding SAS address length (bsc#1135029).
- scsi: libsas: Support SATA PHY connection rate unmatch fixing during discovery (bsc#1135028).
- scsi: libsas: Try to retain programmed min linkrate for SATA min pathway unmatch fixing (bsc#1135028).
- scsi: qedf: fixup bit operations (bsc#1135542).
- scsi: qedf: fixup locking in qedf_restart_rport() (bsc#1135542).
- scsi: qedf: missing kref_put in qedf_xmit() (bsc#1135542).
- scsi: qla2xxx: Add 28xx flash primary/secondary status/image mechanism (bsc#1136215).
- scsi: qla2xxx: Add Device ID for ISP28XX (bsc#1136215).
- scsi: qla2xxx: Add First Burst support for FC-NVMe devices (bsc#1136215).
- scsi: qla2xxx: Add fw_attr and port_no SysFS node (bsc#1136215).
- scsi: qla2xxx: Add new FC-NVMe enable BIT to enable FC-NVMe feature (bsc#1130579).
- scsi: qla2xxx: Add new FW dump template entry types (bsc#1136215).
- scsi: qla2xxx: Add protection mask module parameters (bsc#1136215).
- scsi: qla2xxx: Add Serdes support for ISP28XX (bsc#1136215).
- scsi: qla2xxx: Add support for multiple fwdump templates/segments (bsc#1136215).
- scsi: qla2xxx: Add support for setting port speed (bsc#1136215).
- scsi: qla2xxx: Avoid pci IRQ affinity mapping when multiqueue is not supported (bsc#1136215).
- scsi: qla2xxx: avoid printf format warning (bsc#1136215).
- scsi: qla2xxx: Check for FW started flag before aborting (bsc#1136215).
- scsi: qla2xxx: check for kstrtol() failure (bsc#1136215).
- scsi: qla2xxx: Cleanups for NVRAM/Flash read/write path (bsc#1136215).
- scsi: qla2xxx: Correction and improvement to fwdt processing (bsc#1136215).
- scsi: qla2xxx: Correctly report max/min supported speeds (bsc#1136215).
- scsi: qla2xxx: Declare local functions 'static' (bsc#1137444).
- scsi: qla2xxx: Fix code indentation for qla27xx_fwdt_entry (bsc#1136215).
- scsi: qla2xxx: Fix DMA error when the DIF sg buffer crosses 4GB boundary (bsc#1136215).
- scsi: qla2xxx: fix error message on qla2400 (bsc#1118139).
- scsi: qla2xxx: Fix function argument descriptions (bsc#1118139).
- scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware (bsc#1136215).
- scsi: qla2xxx: Fix memory corruption during hba reset test (bsc#1118139).
- scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (bsc#1136215).
- scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (bsc#1132044).
- scsi: qla2xxx: Fix read offset in qla24xx_load_risc_flash() (bsc#1136215).
- scsi: qla2xxx: Fix routine qla27xx_dump_{mpi|ram}() (bsc#1136215).
- scsi: qla2xxx: fix spelling mistake: 'existant' -&gt; 'existent' (bsc#1118139).
- scsi: qla2xxx: Fix unload when NVMe devices are configured (bsc#1136215).
- scsi: qla2xxx: fully convert to the generic DMA API (bsc#1137444).
- scsi: qla2xxx: fx00 copypaste typo (bsc#1118139).
- scsi: qla2xxx: Improve several kernel-doc headers (bsc#1137444).
- scsi: qla2xxx: Introduce a switch/case statement in qlt_xmit_tm_rsp() (bsc#1137444).
- scsi: qla2xxx: Make qla2x00_sysfs_write_nvram() easier to analyze (bsc#1137444).
- scsi: qla2xxx: Make sure that qlafx00_ioctl_iosb_entry() initializes 'res' (bsc#1137444).
- scsi: qla2xxx: Move debug messages before sending srb preventing panic (bsc#1136215).
- scsi: qla2xxx: Move marker request behind QPair (bsc#1136215).
- scsi: qla2xxx: no need to check return value of debugfs_create functions (bsc#1136215).
- scsi: qla2xxx: NULL check before some freeing functions is not needed (bsc#1137444).
- scsi: qla2xxx: Prevent multiple ADISC commands per session (bsc#1136215).
- scsi: qla2xxx: Prevent SysFS access when chip is down (bsc#1136215).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1137444).
- scsi: qla2xxx: Remove FW default template (bsc#1136215).
- scsi: qla2xxx: remove redundant null check on pointer sess (bsc#1136215).
- scsi: qla2xxx: remove the unused tcm_qla2xxx_cmd_wq (bsc#1118139).
- scsi: qla2xxx: Remove two arguments from qlafx00_error_entry() (bsc#1137444).
- scsi: qla2xxx: Remove unused symbols (bsc#1118139).
- scsi: qla2xxx: Secure flash update support for ISP28XX (bsc#1136215).
- scsi: qla2xxx: Set remote port devloss timeout to 0 (bsc#1136215).
- scsi: qla2xxx: Simplification of register address used in qla_tmpl.c (bsc#1136215).
- scsi: qla2xxx: Simplify conditional check again (bsc#1136215).
- scsi: qla2xxx: Split the __qla2x00_abort_all_cmds() function (bsc#1137444).
- scsi: qla2xxx: Update driver version to 10.00.00.14-k (bsc#1136215).
- scsi: qla2xxx: Update driver version to 10.01.00.15-k (bsc#1136215).
- scsi: qla2xxx: Update flash read/write routine (bsc#1136215).
- scsi: qla2xxx: Use %p for printing pointers (bsc#1118139).
- scsi: qla2xxx: use lower_32_bits and upper_32_bits instead of reinventing them (bsc#1137444).
- scsi: smartpqi: add H3C controller IDs (bsc#1133547).
- scsi: smartpqi: add h3c ssid (bsc#1133547).
- scsi: smartpqi: add no_write_same for logical volumes (bsc#1133547).
- scsi: smartpqi: add ofa support (bsc#1133547).
- scsi: smartpqi: Add retries for device reset (bsc#1133547).
- scsi: smartpqi: add smp_utils support (bsc#1133547).
- scsi: smartpqi: add spdx (bsc#1133547).
- scsi: smartpqi: add support for huawei controllers (bsc#1133547).
- scsi: smartpqi: add support for PQI Config Table handshake (bsc#1133547).
- scsi: smartpqi: add sysfs attributes (bsc#1133547).
- scsi: smartpqi: allow for larger raid maps (bsc#1133547).
- scsi: smartpqi: bump driver version (bsc#1133547).
- scsi: smartpqi: bump driver version (bsc#1133547).
- scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown() (bsc#1133547).
- scsi: smartpqi: check for null device pointers (bsc#1133547).
- scsi: smartpqi: correct host serial num for ssa (bsc#1133547).
- scsi: smartpqi: correct lun reset issues (bsc#1133547).
- scsi: smartpqi: correct volume status (bsc#1133547).
- scsi: smartpqi: do not offline disks for transient did no connect conditions (bsc#1133547).
- scsi: smartpqi: enhance numa node detection (bsc#1133547).
- scsi: smartpqi: fix build warnings (bsc#1133547).
- scsi: smartpqi: fix disk name mount point (bsc#1133547).
- scsi: smartpqi: fully convert to the generic DMA API (bsc#1133547).
- scsi: smartpqi: increase fw status register read timeout (bsc#1133547).
- scsi: smartpqi: increase LUN reset timeout (bsc#1133547).
- scsi: smartpqi: refactor sending controller raid requests (bsc#1133547).
- scsi: smartpqi: Reporting 'logical unit failure' (bsc#1133547).
- scsi: smartpqi: turn off lun data caching for ptraid (bsc#1133547).
- scsi: smartpqi: update copyright (bsc#1133547).
- scsi: smartpqi: update driver version (bsc#1133547).
- scsi: smartpqi: wake up drives after os resumes from suspend (bsc#1133547).
- scsi: smartpqi_init: fix boolean expression in pqi_device_remove_start (bsc#1133547).
- scsi: zfcp: make DIX experimental, disabled, and independent of DIF (jsc#SLE-6772).
- sctp: avoid running the sctp state machine recursively (networking-stable-19_05_04).
- sctp: call gso_reset_checksum when computing checksum in sctp_gso_segment (networking-stable-19_02_24).
- sctp: fix identification of new acks for SFR-CACC (git-fixes).
- sctp: get sctphdr by offset in sctp_compute_cksum (networking-stable-19_03_28).
- sctp: initialize _pad of sockaddr_in before copying to user memory (networking-stable-19_04_10).
- sctp: set frag_point in sctp_setsockopt_maxseg correctly` (git-fixes).
- selinux: use kernel linux/socket.h for genheaders and mdp (bsc#1134810).
- serial: 8250_pxa: honor the port number from devicetree (bsc#1051510).
- serial: ar933x_uart: Fix build failure with disabled console (bsc#1051510).
- serial: uartps: console_setup() can't be placed to init section (bsc#1051510).
- signal: Always notice exiting tasks (git-fixes).
- signal: Better detection of synchronous signals (git-fixes).
- signal: Restore the stop PTRACE_EVENT_EXIT (git-fixes).
- sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach() (networking-stable-19_02_24).
- soc/fsl/qe: Fix an error code in qe_pin_request() (bsc#1051510).
- soc/tegra: fuse: Fix illegal free of IO base address (bsc#1051510).
- soc/tegra: pmc: Drop locking from tegra_powergate_is_powered() (bsc#1051510).
- soc: imx-sgtl5000: add missing put_device() (bsc#1051510).
- soc: qcom: gsbi: Fix error handling in gsbi_probe() (bsc#1051510).
- spi-mem: fix kernel-doc for spi_mem_dirmap_{read|write}() (bsc#1111666).
- spi: a3700: Clear DATA_OUT when performing a read (bsc#1051510).
- spi: Add missing pm_runtime_put_noidle() after failed get (bsc#1111666).
- spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios (bsc#1051510).
- spi: bcm2835aux: setup gpio-cs to output and correct level during setup (bsc#1051510).
- spi: bcm2835aux: warn in dmesg that native cs is not really supported (bsc#1051510).
- spi: Micrel eth switch: declare missing of table (bsc#1051510).
- spi: rspi: Fix sequencer reset during initialization (bsc#1051510).
- spi: ST ST95HF NFC: declare missing of table (bsc#1051510).
- ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit (bsc#1051510).
- staging: comedi: ni_usb6501: Fix possible double-free of -&gt;usb_rx_buf (bsc#1051510).
- staging: comedi: ni_usb6501: Fix use of uninitialized mutex (bsc#1051510).
- staging: comedi: vmk80xx: Fix possible double-free of -&gt;usb_rx_buf (bsc#1051510).
- staging: comedi: vmk80xx: Fix use of uninitialized semaphore (bsc#1051510).
- staging: iio: ad7192: Fix ad7193 channel address (bsc#1051510).
- staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc (bsc#1051510).
- staging: rtl8712: uninitialized memory in read_bbreg_hdl() (bsc#1051510).
- staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc (bsc#1111666).
- staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer dereference (bsc#1111666).
- staging: vt6655: Fix interrupt race condition on device start up (bsc#1051510).
- staging: vt6655: Remove vif check from vnt_interrupt (bsc#1051510).
- stm class: Fix an endless loop in channel allocation (bsc#1051510).
- stm class: Fix channel free in stm output free path (bsc#1051510).
- stm class: Prevent division by zero (bsc#1051510).
- stmmac: pci: Adjust IOT2000 matching (networking-stable-19_04_30).
- sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (git-fixes).
- supported.conf: Add openvswitch to kernel-default-base (bsc#1124839).
- supported.conf: Add openvswitch to kernel-default-base (bsc#1124839).
- supported.conf: dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).
- svm/avic: Fix invalidate logical APIC id entry (bsc#1132726).
- svm: Fix AVIC DFR and LDR handling (bsc#1132558).
- switchtec: Fix unintended mask of MRPC event (git-fixes).
- sysctl: handle overflow for file-max (bsc#1051510).
- tcp: add tcp_min_snd_mss sysctl (bsc#1137586).
- tcp: do not use ipv6 header for ipv4 flow (networking-stable-19_03_28).
- tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (bsc#1137586).
- tcp: Ensure DCTCP reacts to losses (networking-stable-19_04_10).
- tcp: fix fack_count accounting on tcp_shift_skb_data() (CVE-2019-11477 bsc#1137586).
- tcp: fix TCP_REPAIR_QUEUE bound checking (git-fixes).
- tcp: limit payload size of sacked skbs (bsc#1137586).
- tcp: purge write queue in tcp_connect_init() (git-fixes).
- tcp: tcp_fragment() should apply sane memory limits (bsc#1137586).
- tcp: tcp_grow_window() needs to respect tcp_space() (networking-stable-19_04_19).
- tcp: tcp_v4_err() should be more careful (networking-stable-19_02_20).
- team: fix possible recursive locking when add slaves (networking-stable-19_04_30).
- team: set slave to promisc if team is already in promisc mode (bsc#1051510).
- testing: nvdimm: provide SZ_4G constant (bsc#1132982).
- thermal/int340x_thermal: Add additional UUIDs (bsc#1051510).
- thermal/int340x_thermal: fix mode setting (bsc#1051510).
- thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power (bsc#1051510).
- thunderx: eliminate extra calls to put_page() for pages held for recycling (networking-stable-19_03_28).
- thunderx: enable page recycling for non-XDP case (networking-stable-19_03_28).
- tipc: fix hanging clients using poll with EPOLLOUT flag (git-fixes).
- tipc: fix race condition causing hung sendto (networking-stable-19_03_07).
- tipc: missing entries in name table of publications (networking-stable-19_04_19).
- tools lib traceevent: Fix missing equality check for strcmp (bsc#1129770).
- tools/cpupower: Add Hygon Dhyana support ().
- tpm: Fix the type of the return value in calc_tpm2_event_size() (bsc#1082555).
- tracing/hrtimer: Fix tracing bugs by taking all clock bases and modes into account (bsc#1132527).
- tracing: Fix a memory leak by early error exit in trace_pid_write() (bsc#1133702).
- tracing: Fix buffer_ref pipe ops (bsc#1133698).
- tracing: Fix partial reading of trace event's id file (bsc#1136573).
- treewide: Use DEVICE_ATTR_WO (bsc#1137739).
- tty: increase the default flip buffer limit to 2*640K (bsc#1051510).
- tty: pty: Fix race condition between release_one_tty and pty_write (bsc#1051510).
- tty: serial_core, add -&gt;install (bnc#1129693).
- tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0 (bsc#1051510).
- tun: add a missing rcu_read_unlock() in error path (networking-stable-19_03_28).
- tun: fix blocking read (networking-stable-19_03_07).
- tun: properly test for IFF_UP (networking-stable-19_03_28).
- tun: remove unnecessary memory barrier (networking-stable-19_03_07).
- uas: fix alignment of scatter/gather segments (bsc#1129770).
- udp: use indirect call wrappers for GRO socket lookup (bsc#1124503).
- ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour (bsc#1135323).
- usb-storage: Set virt_boundary_mask to avoid SG overflows (bsc#1051510).
- usb: cdc-acm: fix unthrottle races (bsc#1051510).
- usb: chipidea: Grab the (legacy) usb PHY by phandle first (bsc#1051510).
- usb: core: Fix bug caused by duplicate interface PM usage counter (bsc#1051510).
- usb: core: Fix unterminated string returned by usb_string() (bsc#1051510).
- usb: dwc3: Fix default lpm_nyet_threshold value (bsc#1051510).
- usb: f_fs: Avoid crash due to out-of-scope stack ptr access (bsc#1051510).
- usb: gadget: net2272: Fix net2272_dequeue() (bsc#1051510).
- usb: gadget: net2280: Fix net2280_dequeue() (bsc#1051510).
- usb: gadget: net2280: Fix overrun of OUT messages (bsc#1051510).
- usb: serial: cp210x: fix GPIO in autosuspend (bsc#1120902).
- usb: serial: f81232: fix interrupt worker not stop (bsc#1051510).
- usb: serial: fix unthrottle races (bsc#1051510).
- usb: u132-hcd: fix resource leak (bsc#1051510).
- usb: usb251xb: fix to avoid potential NULL pointer dereference (bsc#1051510).
- usb: usbip: fix isoc packet num validation in get_pipe (bsc#1051510).
- usb: w1 ds2490: Fix bug caused by improper use of altsetting array (bsc#1051510).
- usb: yurex: Fix protection fault after device removal (bsc#1051510).
- userfaultfd: use RCU to free the task struct when fork fails (git-fixes).
- vfio/mdev: Avoid release parent reference during error path (bsc#1051510).
- vfio/mdev: Fix aborting mdev child device removal if one fails (bsc#1051510).
- vfio/pci: use correct format characters (bsc#1051510).
- vfio_pci: Enable memory accesses before calling pci_map_rom (bsc#1051510).
- vfs: allow dedupe of user owned read-only files (bsc#1133778, bsc#1132219).
- vfs: avoid problematic remapping requests into partial EOF block (bsc#1133850, bsc#1132219).
- vfs: dedupe should return EPERM if permission is not granted (bsc#1133779, bsc#1132219).
- vfs: dedupe: extract helper for a single dedup (bsc#1133769, bsc#1132219).
- vfs: exit early from zero length remap operations (bsc#1132411, bsc#1132219).
- vfs: export vfs_dedupe_file_range_one() to modules (bsc#1133772, bsc#1132219).
- vfs: limit size of dedupe (bsc#1132397, bsc#1132219).
- vfs: rename clone_verify_area to remap_verify_area (bsc#1133852, bsc#1132219).
- vfs: skip zero-length dedupe requests (bsc#1133851, bsc#1132219).
- vfs: swap names of {do,vfs}_clone_file_range() (bsc#1133774, bsc#1132219).
- vfs: vfs_clone_file_prep_inodes should return EINVAL for a clone from beyond EOF (bsc#1133780, bsc#1132219).
- vhost/vsock: fix reset orphans race with close timeout (bsc#1051510).
- vhost: reject zero size iova range (networking-stable-19_04_19).
- virtio-blk: limit number of hw queues by nr_cpu_ids (bsc#1051510).
- virtio: Honour 'may_reduce_num' in vring_create_virtqueue (bsc#1051510).
- virtio_pci: fix a NULL pointer reference in vp_del_vqs (bsc#1051510).
- vrf: check accept_source_route on the original netdevice (networking-stable-19_04_10).
- vsock/virtio: fix kernel panic after device hot-unplug (bsc#1051510).
- vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock (bsc#1051510).
- vsock/virtio: Initialize core virtio vsock before registering the driver (bsc#1051510).
- vsock/virtio: reset connected sockets on device removal (bsc#1051510).
- vt: always call notifier with the console lock held (bsc#1051510).
- vxlan: Do not call gro_cells_destroy() before device is unregistered (networking-stable-19_03_28).
- vxlan: test dev-&gt;flags and IFF_UP before calling netif_rx() (networking-stable-19_02_20).
- wil6210: check null pointer in _wil_cfg80211_merge_extra_ies (bsc#1051510).
- wlcore: Fix memory leak in case wl12xx_fetch_firmware failure (bsc#1051510).
- x86/alternative: Init ideal_nops for Hygon Dhyana ().
- x86/amd_nb: Check vendor in AMD-only functions ().
- x86/apic: Add Hygon Dhyana support ().
- x86/bugs: Add Hygon Dhyana to the respective mitigation machinery ().
- x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die processors ().
- x86/cpu/mtrr: Support TOP_MEM2 and get MTRR number ().
- x86/cpu: Create Hygon Dhyana architecture support file ().
- x86/cpu: Get cache info and setup cache cpumap for Hygon Dhyana ().
- x86/cpu: Sanitize FAM6_ATOM naming (bsc#1111331).
- x86/events: Add Hygon Dhyana support to PMU infrastructure ().
- x86/kvm/hyper-v: avoid spurious pending stimer on vCPU init (bsc#1132572).
- x86/kvm: Add Hygon Dhyana support to kvm ().
- x86/MCE/AMD, EDAC/mce_amd: Add new error descriptions for some SMCA bank types (bsc#1128415).
- x86/MCE/AMD, EDAC/mce_amd: Add new McaTypes for CS, PSP, and SMU units (bsc#1128415).
- x86/MCE/AMD, EDAC/mce_amd: Add new MP5, NBIO, and pciE SMCA bank types (bsc#1128415).
- x86/mce/AMD, EDAC/mce_amd: Enumerate Reserved SMCA bank type (bsc#1128415).
- x86/mce/AMD: Pass the bank number to smca_get_bank_type() (bsc#1128415).
- x86/mce: Add Hygon Dhyana support to the MCA infrastructure ().
- x86/mce: Do not disable MCA banks when offlining a CPU on AMD ().
- x86/MCE: Fix kABI for new AMD bank names (bsc#1128415).
- x86/mce: Handle varying MCA bank counts (bsc#1128415).
- x86/msr-index: Cleanup bit defines (bsc#1111331).
- x86/pci, x86/amd_nb: Add Hygon Dhyana support to pci and northbridge ().
- x86/pci: Fixup RTIT_BAR of Intel Denverton Trace Hub (bsc#1120318).
- x86/perf/amd: Remove need to check 'running' bit in NMI handler (bsc#1131438).
- x86/perf/amd: Resolve NMI latency issues for active PMCs (bsc#1131438).
- x86/perf/amd: Resolve race condition when disabling PMC (bsc#1131438).
- x86/smpboot: Do not use BSP INIT delay and MWAIT to idle on Dhyana ().
- x86/speculation/mds: Fix documentation typo (bsc#1135642).
- x86/speculation: Prevent deadlock on ssb_state::lock (bsc#1114279).
- x86/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
- x86/tsc: Force inlining of cyc2ns bits (bsc#1052904).
- x86/xen: Add Hygon Dhyana support to Xen ().
- x86_64: Add gap to int3 to allow for call emulation (bsc#1099658).
- x86_64: Allow breakpoints to emulate call instructions (bsc#1099658).
- xen-netback: do not populate the hash cache on XenBus disconnect (networking-stable-19_03_07).
- xen-netback: fix occasional leak of grant ref mappings under memory pressure (networking-stable-19_03_07).
- xen: Prevent buffer overflow in privcmd ioctl (bsc#1065600).
- xenbus: drop useless LIST_HEAD in xenbus_write_watch() and xenbus_file_write() (bsc#1065600).
- xfrm6: avoid potential infinite loop in _decode_session6() (git-fixes).
- xfrm6: call kfree_skb when skb is toobig (git-fixes).
- xfrm: do not call rcu_read_unlock when afinfo is NULL in xfrm_get_tos (git-fixes).
- xfrm: fix 'passing zero to ERR_PTR()' warning (git-fixes).
- xfrm: Fix ESN sequence number handling for IPsec GSO packets (git-fixes).
- xfrm: fix missing dst_release() after policy blocking lbcast and multicast (git-fixes).
- xfrm: fix rcu_read_unlock usage in xfrm_local_error (git-fixes).
- xfrm: Fix stack-out-of-bounds read on socket policy lookup (git-fixes).
- xfrm: fix xfrm_do_migrate() with AEAD e.g(AES-GCM) (git-fixes).
- xfrm: reset crypto_done when iterating over multiple input xfrms (git-fixes).
- xfrm: reset transport header back to network header after all input transforms ahave been applied (git-fixes).
- xfrm: Return error on unknown encap_type in init_state (git-fixes).
- xfrm: Validate address prefix lengths in the xfrm selector (git-fixes).
- xfrm_user: prevent leaking 2 bytes of kernel memory (git-fixes).
- xfs: add log item pinning error injection tag (bsc#1114427).
- xfs: add the ability to join a held buffer to a defer_ops (bsc#1133674).
- xfs: allow xfs_lock_two_inodes to take different EXCL/SHARED modes (bsc#1132370, bsc#1132219).
- xfs: buffer lru reference count error injection tag (bsc#1114427).
- xfs: call xfs_qm_dqattach before performing reflink operations (bsc#1132368, bsc#1132219).
- xfs: cap the length of deduplication requests (bsc#1132373, bsc#1132219).
- xfs: check _btree_check_block value (bsc#1123663).
- xfs: clean up xfs_reflink_remap_blocks call site (bsc#1132413, bsc#1132219).
- xfs: convert drop_writes to use the errortag mechanism (bsc#1114427).
- xfs: create block pointer check functions (bsc#1123663).
- xfs: create inode pointer verifiers (bsc#1114427).
- xfs: detect and fix bad summary counts at mount (bsc#1114427).
- xfs: export _inobt_btrec_to_irec and _ialloc_cluster_alignment for scrub (bsc#1114427).
- xfs: export various function for the online scrubber (bsc#1123663).
- xfs: expose errortag knobs via sysfs (bsc#1114427).
- xfs: fix data corruption w/ unaligned dedupe ranges (bsc#1132405, bsc#1132219).
- xfs: fix data corruption w/ unaligned reflink ranges (bsc#1132407, bsc#1132219).
- xfs: fix pagecache truncation prior to reflink (bsc#1132412, bsc#1132219).
- xfs: fix reporting supported extra file attributes for statx() (bsc#1133529).
- xfs: fix unused variable warning in xfs_buf_set_ref() (bsc#1114427).
- xfs: flush removing page cache in xfs_reflink_remap_prep (bsc#1132414, bsc#1132219).
- xfs: force summary counter recalc at next mount (bsc#1114427).
- xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (bsc#1133675).
- xfs: kill meaningless variable 'zero' (bsc#1106011).
- xfs: make errortag a per-mountpoint structure (bsc#1123663).
- xfs: move error injection tags into their own file (bsc#1114427).
- xfs: only grab shared inode locks for source file during reflink (bsc#1132372, bsc#1132219).
- xfs: prepare xfs_break_layouts() for another layout type (bsc#1106011).
- xfs: prepare xfs_break_layouts() to be called with XFS_MMAPLOCK_EXCL (bsc#1106011).
- xfs: refactor btree block header checking functions (bsc#1123663).
- xfs: refactor btree pointer checks (bsc#1123663).
- xfs: refactor clonerange preparation into a separate helper (bsc#1132402, bsc#1132219).
- xfs: refactor unmount record write (bsc#1114427).
- xfs: refactor xfs_trans_roll (bsc#1133667).
- xfs: reflink find shared should take a transaction (bsc#1132226, bsc#1132219).
- xfs: reflink should break pnfs leases before sharing blocks (bsc#1132369, bsc#1132219).
- xfs: remove dest file's post-eof preallocations before reflinking (bsc#1132365, bsc#1132219).
- xfs: remove the ip argument to xfs_defer_finish (bsc#1133672).
- xfs: remove unneeded parameter from XFS_TEST_ERROR (bsc#1123663).
- xfs: remove xfs_zero_range (bsc#1106011).
- xfs: rename MAXPATHLEN to XFS_SYMLINK_MAXLEN (bsc#1123663).
- xfs: rename xfs_defer_join to xfs_defer_ijoin (bsc#1133668).
- xfs: replace log_badcrc_factor knob with error injection tag (bsc#1114427).
- xfs: sanity-check the unused space before trying to use it (bsc#1123663).
- xfs: serialize unaligned dio writes against all other dio writes (bsc#1134936).
- xfs: update ctime and remove suid before cloning files (bsc#1132404, bsc#1132219).
- xfs: zero posteof blocks when cloning above eof (bsc#1132403, bsc#1132219).
- xsk: export xdp_get_umem_from_qid (jsc#SLE-4797).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-18"/>
	<updated date="2019-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1012382">SUSE bug 1012382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052904">SUSE bug 1052904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053043">SUSE bug 1053043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055121">SUSE bug 1055121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063638">SUSE bug 1063638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068546">SUSE bug 1068546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070872">SUSE bug 1070872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075020">SUSE bug 1075020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082387">SUSE bug 1082387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085535">SUSE bug 1085535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085536">SUSE bug 1085536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086657">SUSE bug 1086657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088804">SUSE bug 1088804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093389">SUSE bug 1093389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097583">SUSE bug 1097583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097584">SUSE bug 1097584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097585">SUSE bug 1097585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097586">SUSE bug 1097586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097587">SUSE bug 1097587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097588">SUSE bug 1097588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099658">SUSE bug 1099658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103186">SUSE bug 1103186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103259">SUSE bug 1103259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106011">SUSE bug 1106011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106284">SUSE bug 1106284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108193">SUSE bug 1108193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108838">SUSE bug 1108838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108937">SUSE bug 1108937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110946">SUSE bug 1110946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111331">SUSE bug 1111331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111696">SUSE bug 1111696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112063">SUSE bug 1112063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112128">SUSE bug 1112128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114427">SUSE bug 1114427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114542">SUSE bug 1114542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114638">SUSE bug 1114638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115688">SUSE bug 1115688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117114">SUSE bug 1117114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117158">SUSE bug 1117158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117561">SUSE bug 1117561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118139">SUSE bug 1118139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119680">SUSE bug 1119680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119843">SUSE bug 1119843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120091">SUSE bug 1120091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120318">SUSE bug 1120318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120423">SUSE bug 1120423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120566">SUSE bug 1120566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120843">SUSE bug 1120843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120902">SUSE bug 1120902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122767">SUSE bug 1122767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122776">SUSE bug 1122776</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123454">SUSE bug 1123454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123663">SUSE bug 1123663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124503">SUSE bug 1124503</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124839">SUSE bug 1124839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126356">SUSE bug 1126356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126704">SUSE bug 1126704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127175">SUSE bug 1127175</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127374">SUSE bug 1127374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127616">SUSE bug 1127616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128052">SUSE bug 1128052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128415">SUSE bug 1128415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128544">SUSE bug 1128544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128904">SUSE bug 1128904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128971">SUSE bug 1128971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128979">SUSE bug 1128979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129138">SUSE bug 1129138</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129273">SUSE bug 1129273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129497">SUSE bug 1129497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129693">SUSE bug 1129693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129845">SUSE bug 1129845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130195">SUSE bug 1130195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130425">SUSE bug 1130425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130527">SUSE bug 1130527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130567">SUSE bug 1130567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130579">SUSE bug 1130579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130699">SUSE bug 1130699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130937">SUSE bug 1130937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130972">SUSE bug 1130972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131326">SUSE bug 1131326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131427">SUSE bug 1131427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131438">SUSE bug 1131438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131451">SUSE bug 1131451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131467">SUSE bug 1131467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131488">SUSE bug 1131488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131530">SUSE bug 1131530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131565">SUSE bug 1131565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131574">SUSE bug 1131574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131587">SUSE bug 1131587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131659">SUSE bug 1131659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131673">SUSE bug 1131673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131847">SUSE bug 1131847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131848">SUSE bug 1131848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131851">SUSE bug 1131851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131900">SUSE bug 1131900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131934">SUSE bug 1131934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131935">SUSE bug 1131935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132044">SUSE bug 1132044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132219">SUSE bug 1132219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132226">SUSE bug 1132226</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132227">SUSE bug 1132227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132365">SUSE bug 1132365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132368">SUSE bug 1132368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132369">SUSE bug 1132369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132370">SUSE bug 1132370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132372">SUSE bug 1132372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132373">SUSE bug 1132373</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132384">SUSE bug 1132384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132397">SUSE bug 1132397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132402">SUSE bug 1132402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132403">SUSE bug 1132403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132404">SUSE bug 1132404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132405">SUSE bug 1132405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132407">SUSE bug 1132407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132411">SUSE bug 1132411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132412">SUSE bug 1132412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132413">SUSE bug 1132413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132414">SUSE bug 1132414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132426">SUSE bug 1132426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132527">SUSE bug 1132527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132531">SUSE bug 1132531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132555">SUSE bug 1132555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132558">SUSE bug 1132558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132561">SUSE bug 1132561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132562">SUSE bug 1132562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132563">SUSE bug 1132563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132564">SUSE bug 1132564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132570">SUSE bug 1132570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132571">SUSE bug 1132571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132572">SUSE bug 1132572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132589">SUSE bug 1132589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132618">SUSE bug 1132618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132673">SUSE bug 1132673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132681">SUSE bug 1132681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132726">SUSE bug 1132726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132828">SUSE bug 1132828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132894">SUSE bug 1132894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132943">SUSE bug 1132943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132982">SUSE bug 1132982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133005">SUSE bug 1133005</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133016">SUSE bug 1133016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133094">SUSE bug 1133094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133095">SUSE bug 1133095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133115">SUSE bug 1133115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133149">SUSE bug 1133149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133176">SUSE bug 1133176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133188">SUSE bug 1133188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133190">SUSE bug 1133190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133320">SUSE bug 1133320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133486">SUSE bug 1133486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133529">SUSE bug 1133529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133547">SUSE bug 1133547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133584">SUSE bug 1133584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133593">SUSE bug 1133593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133612">SUSE bug 1133612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133616">SUSE bug 1133616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133667">SUSE bug 1133667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133668">SUSE bug 1133668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133672">SUSE bug 1133672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133674">SUSE bug 1133674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133675">SUSE bug 1133675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133698">SUSE bug 1133698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133702">SUSE bug 1133702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133731">SUSE bug 1133731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133769">SUSE bug 1133769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133772">SUSE bug 1133772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133774">SUSE bug 1133774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133778">SUSE bug 1133778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133779">SUSE bug 1133779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133780">SUSE bug 1133780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133825">SUSE bug 1133825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133850">SUSE bug 1133850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133851">SUSE bug 1133851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133852">SUSE bug 1133852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133897">SUSE bug 1133897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134160">SUSE bug 1134160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134162">SUSE bug 1134162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134199">SUSE bug 1134199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134200">SUSE bug 1134200</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134201">SUSE bug 1134201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134202">SUSE bug 1134202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134203">SUSE bug 1134203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134204">SUSE bug 1134204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134205">SUSE bug 1134205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134223">SUSE bug 1134223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134354">SUSE bug 1134354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134393">SUSE bug 1134393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134397">SUSE bug 1134397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134459">SUSE bug 1134459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134460">SUSE bug 1134460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134461">SUSE bug 1134461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134597">SUSE bug 1134597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134600">SUSE bug 1134600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134607">SUSE bug 1134607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134618">SUSE bug 1134618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134651">SUSE bug 1134651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134671">SUSE bug 1134671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134760">SUSE bug 1134760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134806">SUSE bug 1134806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134810">SUSE bug 1134810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134813">SUSE bug 1134813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134848">SUSE bug 1134848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134936">SUSE bug 1134936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134945">SUSE bug 1134945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134946">SUSE bug 1134946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134947">SUSE bug 1134947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134948">SUSE bug 1134948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134949">SUSE bug 1134949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134950">SUSE bug 1134950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134951">SUSE bug 1134951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134952">SUSE bug 1134952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134953">SUSE bug 1134953</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134972">SUSE bug 1134972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134974">SUSE bug 1134974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134975">SUSE bug 1134975</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134980">SUSE bug 1134980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134981">SUSE bug 1134981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134983">SUSE bug 1134983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134987">SUSE bug 1134987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134989">SUSE bug 1134989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134990">SUSE bug 1134990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134994">SUSE bug 1134994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134995">SUSE bug 1134995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134998">SUSE bug 1134998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134999">SUSE bug 1134999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135006">SUSE bug 1135006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135007">SUSE bug 1135007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135008">SUSE bug 1135008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135018">SUSE bug 1135018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135021">SUSE bug 1135021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135024">SUSE bug 1135024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135026">SUSE bug 1135026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135027">SUSE bug 1135027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135028">SUSE bug 1135028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135029">SUSE bug 1135029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135031">SUSE bug 1135031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135033">SUSE bug 1135033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135034">SUSE bug 1135034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135035">SUSE bug 1135035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135036">SUSE bug 1135036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135037">SUSE bug 1135037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135038">SUSE bug 1135038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135039">SUSE bug 1135039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135041">SUSE bug 1135041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135042">SUSE bug 1135042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135044">SUSE bug 1135044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135045">SUSE bug 1135045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135046">SUSE bug 1135046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135047">SUSE bug 1135047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135049">SUSE bug 1135049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135051">SUSE bug 1135051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135052">SUSE bug 1135052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135053">SUSE bug 1135053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135055">SUSE bug 1135055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135056">SUSE bug 1135056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135058">SUSE bug 1135058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135100">SUSE bug 1135100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135120">SUSE bug 1135120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135278">SUSE bug 1135278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135281">SUSE bug 1135281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135309">SUSE bug 1135309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135312">SUSE bug 1135312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135314">SUSE bug 1135314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135315">SUSE bug 1135315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135316">SUSE bug 1135316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135320">SUSE bug 1135320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135323">SUSE bug 1135323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135330">SUSE bug 1135330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135492">SUSE bug 1135492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135542">SUSE bug 1135542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135556">SUSE bug 1135556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135603">SUSE bug 1135603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135661">SUSE bug 1135661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135758">SUSE bug 1135758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136188">SUSE bug 1136188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136206">SUSE bug 1136206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136215">SUSE bug 1136215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136345">SUSE bug 1136345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136347">SUSE bug 1136347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136348">SUSE bug 1136348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136353">SUSE bug 1136353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136424">SUSE bug 1136424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136428">SUSE bug 1136428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136430">SUSE bug 1136430</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136432">SUSE bug 1136432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136434">SUSE bug 1136434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136435">SUSE bug 1136435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136438">SUSE bug 1136438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136439">SUSE bug 1136439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136456">SUSE bug 1136456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136469">SUSE bug 1136469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136477">SUSE bug 1136477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136478">SUSE bug 1136478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136498">SUSE bug 1136498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136573">SUSE bug 1136573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136586">SUSE bug 1136586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136881">SUSE bug 1136881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136935">SUSE bug 1136935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136990">SUSE bug 1136990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137151">SUSE bug 1137151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137152">SUSE bug 1137152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137153">SUSE bug 1137153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137162">SUSE bug 1137162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137201">SUSE bug 1137201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137224">SUSE bug 1137224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137232">SUSE bug 1137232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137233">SUSE bug 1137233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137236">SUSE bug 1137236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137372">SUSE bug 1137372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137429">SUSE bug 1137429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137444">SUSE bug 1137444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137586">SUSE bug 1137586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137739">SUSE bug 1137739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137752">SUSE bug 1137752</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138291">SUSE bug 1138291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138293">SUSE bug 1138293</bugzilla>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16880/">CVE-2018-16880</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7191/">CVE-2018-7191</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10124/">CVE-2019-10124</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11085/">CVE-2019-11085</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-11477/">CVE-2019-11477</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11478/">CVE-2019-11478</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11479/">CVE-2019-11479</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11486/">CVE-2019-11486</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11487/">CVE-2019-11487</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11811/">CVE-2019-11811</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11815/">CVE-2019-11815</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11833/">CVE-2019-11833</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11884/">CVE-2019-11884</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-12382/">CVE-2019-12382</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12818/">CVE-2019-12818</cve>
	<cve impact="low" cvss3="3.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12819/">CVE-2019-12819</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3846/">CVE-2019-3846</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3882/">CVE-2019-3882</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5489/">CVE-2019-5489</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8564/">CVE-2019-8564</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9003/">CVE-2019-9003</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9500/">CVE-2019-9500</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9503/">CVE-2019-9503</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496204" comment="kernel-docs-4.12.14-197.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496205" comment="kernel-obs-build-4.12.14-197.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496206" comment="kernel-source-4.12.14-197.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496207" comment="kernel-syms-4.12.14-197.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138180" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1094555" ref_url="https://bugzilla.suse.com/1094555" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1128432" ref_url="https://bugzilla.suse.com/1128432" source="BUGZILLA"/>
		<reference ref_id="1134730" ref_url="https://bugzilla.suse.com/1134730" source="BUGZILLA"/>
		<reference ref_id="1134738" ref_url="https://bugzilla.suse.com/1134738" source="BUGZILLA"/>
		<reference ref_id="1135153" ref_url="https://bugzilla.suse.com/1135153" source="BUGZILLA"/>
		<reference ref_id="1135296" ref_url="https://bugzilla.suse.com/1135296" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1136156" ref_url="https://bugzilla.suse.com/1136156" source="BUGZILLA"/>
		<reference ref_id="1136157" ref_url="https://bugzilla.suse.com/1136157" source="BUGZILLA"/>
		<reference ref_id="1136271" ref_url="https://bugzilla.suse.com/1136271" source="BUGZILLA"/>
		<reference ref_id="1136333" ref_url="https://bugzilla.suse.com/1136333" source="BUGZILLA"/>
		<reference ref_id="1137103" ref_url="https://bugzilla.suse.com/1137103" source="BUGZILLA"/>
		<reference ref_id="1137194" ref_url="https://bugzilla.suse.com/1137194" source="BUGZILLA"/>
		<reference ref_id="1137366" ref_url="https://bugzilla.suse.com/1137366" source="BUGZILLA"/>
		<reference ref_id="1137884" ref_url="https://bugzilla.suse.com/1137884" source="BUGZILLA"/>
		<reference ref_id="1137985" ref_url="https://bugzilla.suse.com/1137985" source="BUGZILLA"/>
		<reference ref_id="1138263" ref_url="https://bugzilla.suse.com/1138263" source="BUGZILLA"/>
		<reference ref_id="1138336" ref_url="https://bugzilla.suse.com/1138336" source="BUGZILLA"/>
		<reference ref_id="1138374" ref_url="https://bugzilla.suse.com/1138374" source="BUGZILLA"/>
		<reference ref_id="1138375" ref_url="https://bugzilla.suse.com/1138375" source="BUGZILLA"/>
		<reference ref_id="1138589" ref_url="https://bugzilla.suse.com/1138589" source="BUGZILLA"/>
		<reference ref_id="1138681" ref_url="https://bugzilla.suse.com/1138681" source="BUGZILLA"/>
		<reference ref_id="1138719" ref_url="https://bugzilla.suse.com/1138719" source="BUGZILLA"/>
		<reference ref_id="1138732" ref_url="https://bugzilla.suse.com/1138732" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16871" ref_url="https://www.suse.com/security/cve/CVE-2018-16871/" source="CVE"/>
		<reference ref_id="CVE-2019-12614" ref_url="https://www.suse.com/security/cve/CVE-2019-12614/" source="CVE"/>
		<reference ref_id="CVE-2019-12817" ref_url="https://www.suse.com/security/cve/CVE-2019-12817/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005658.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

This update adds support for the Hygon Dhyana CPU (fate#327735).

The following security bugs were fixed:

- CVE-2019-12614: An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c. There was an unchecked kstrdup of prop-&gt;name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash) (bnc#1137194).
- CVE-2018-16871: A NULL pointer dereference due to an anomalized NFS message sequence was fixed. (bnc#1137103).
- CVE-2019-12817: On the PowerPC architecture, local attackers could access other users processes memory (bnc#1138263).

The following non-security bugs were fixed:

- 6lowpan: Off by one handling -&gt;nexthdr (bsc#1051510).
- acpi: Add Hygon Dhyana support (fate#327735).
- af_key: unconditionally clone on broadcast (bsc#1051510).
- alsa: firewire-motu: fix destruction of data for isochronous resources (bsc#1051510).
- alsa: hda/realtek - Update headset mode for ALC256 (bsc#1051510).
- alsa: oxfw: allow PCM capture for Stanton SCS.1m (bsc#1051510).
- ASoC: cs42xx8: Add regcache mask dirty (bsc#1051510).
- ASoC: fsl_asrc: Fix the issue about unsupported rate (bsc#1051510).
- audit: fix a memory leak bug (bsc#1051510).
- blk-mq: fix hang caused by freeze/unfreeze sequence (bsc#1128432).
- ceph: factor out ceph_lookup_inode() (bsc#1138681).
- ceph: fix NULL pointer deref when debugging is enabled (bsc#1138681).
- ceph: fix potential use-after-free in ceph_mdsc_build_path (bsc#1138681).
- ceph: flush dirty inodes before proceeding with remount (bsc#1138681).
- ceph: print inode number in __caps_issued_mask debugging messages (bsc#1138681).
- ceph: quota: fix quota subdir mounts (bsc#1138681).
- ceph: remove duplicated filelock ref increase (bsc#1138681).
- cfg80211: fix memory leak of wiphy device name (bsc#1051510).
- cpufreq: Add Hygon Dhyana support (fate#327735).
- cpufreq: AMD: Ignore the check for ProcFeedback in ST/CZ  (fate#327735).
- cpu/topology: Export die_id (jsc#SLE-5454).
- Do not restrict NFSv4.2 on openSUSE (bsc#1138719).
- drbd: Avoid Clang warning about pointless switch statment (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote (bsc#1051510).
- drivers: depend on HAS_IOMEM for devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers: fix a typo in the kernel doc for devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers: provide devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers/rapidio/devices/rio_mport_cdev.c: fix resource leak in error handling path in 'rio_dma_transfer()' (bsc#1051510).
- drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen() (bsc#1051510).
- drivers: thermal: tsens: Do not print error message on -EPROBE_DEFER (bsc#1051510).
- drm: add fallback override/firmware EDID modes workaround (bsc#1111666).
- drm/amd/display: Use plane-&gt;color_space for dpp if specified (bsc#1111666).
- drm/edid: abstract override/firmware EDID retrieval (bsc#1111666).
- drm/i915: Add new AML_ULX support list (jsc#SLE-4986).
- drm/i915: Add new ICL PCI ID (jsc#SLE-4986).
- drm/i915/aml: Add new Amber Lake PCI ID (jsc#SLE-4986).
- drm/i915: Apply correct ddi translation table for AML device (jsc#SLE-4986).
- drm/i915: Attach the pci match data to the device upon creation (jsc#SLE-4986).
- drm/i915/cfl: Adding another PCI Device ID (jsc#SLE-4986).
- drm/i915/cml: Add CML PCI IDS (jsc#SLE-4986).
- drm/i915: Fix uninitialized mask in intel_device_info_subplatform_init (jsc#SLE-4986).
- drm/i915/icl: Adding few more device IDs for Ice Lake (jsc#SLE-4986).
- drm/i915: Introduce concept of a sub-platform (jsc#SLE-4986).
- drm/i915: Mark AML 0x87CA as ULX (jsc#SLE-4986).
- drm/i915: Move final cleanup of drm_i915_private to i915_driver_destroy (jsc#SLE-4986).
- drm/i915/perf: fix whitelist on Gen10+ (bsc#1051510).
- drm/i915: Remove redundant device id from IS_IRONLAKE_M macro (jsc#SLE-4986).
- drm/i915/sdvo: Implement proper HDMI audio support for SDVO (bsc#1051510).
- drm/i915: Split Pineview device info into desktop and mobile (jsc#SLE-4986).
- drm/i915: Split some PCI ids into separate groups (jsc#SLE-4986).
- drm/i915: start moving runtime device info to a separate struct (jsc#SLE-4986).
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver (bsc#1111666).
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable() (bsc#1111666).
- drm/mediatek: clear num_pipes when unbind driver (bsc#1111666).
- drm/mediatek: fix unbind functions (bsc#1111666).
- drm/mediatek: unbind components in mtk_drm_unbind() (bsc#1111666).
- drm/nouveau/disp/dp: respect sink limits when selecting failsafe link configuration (bsc#1051510).
- drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when encoders change (bsc#1111666).
- drm/nouveau/kms/gv100-: fix spurious window immediate interlocks (bsc#1111666).
- EDAC, amd64: Add Hygon Dhyana support (fate#327735).
- EDAC/mc: Fix edac_mc_find() in case no device is found (bsc#1114279).
- HID: wacom: Add ability to provide explicit battery status info (bsc#1051510).
- HID: wacom: Add support for 3rd generation Intuos BT (bsc#1051510).
- HID: wacom: Add support for Pro Pen slim (bsc#1051510).
- HID: wacom: convert Wacom custom usages to standard HID usages (bsc#1051510).
- HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth (bsc#1051510).
- HID: wacom: Do not report anything prior to the tool entering range (bsc#1051510).
- HID: wacom: Do not set tool type until we're in range (bsc#1051510).
- HID: wacom: fix mistake in printk (bsc#1051510).
- HID: wacom: generic: add the 'Report Valid' usage (bsc#1051510).
- HID: wacom: generic: Ignore HID_DG_BATTERYSTRENTH == 0 (bsc#1051510).
- HID: wacom: generic: Leave tool in prox until it completely leaves sense (bsc#1051510).
- HID: wacom: generic: Refactor generic battery handling (bsc#1051510).
- HID: wacom: generic: Report AES battery information (bsc#1051510).
- HID: wacom: generic: Reset events back to zero when pen leaves (bsc#1051510).
- HID: wacom: generic: Scale battery capacity measurements to percentages (bsc#1051510).
- HID: wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (bsc#1051510).
- HID: wacom: generic: Send BTN_TOOL_PEN in prox once the pen enters range (bsc#1051510).
- HID: wacom: generic: Support multiple tools per report (bsc#1051510).
- HID: wacom: generic: Use generic codepath terminology in wacom_wac_pen_report (bsc#1051510).
- HID: wacom: Mark expected switch fall-through (bsc#1051510).
- HID: wacom: Move handling of HID quirks into a dedicated function (bsc#1051510).
- HID: wacom: Move HID fix for AES serial number into wacom_hid_usage_quirk (bsc#1051510).
- HID: wacom: Properly handle AES serial number and tool type (bsc#1051510).
- HID: wacom: Queue events with missing type/serial data for later processing (bsc#1051510).
- HID: wacom: Remove comparison of u8 mode with zero and simplify (bsc#1051510).
- HID: wacom: Replace touch_max fixup code with static touch_max definitions (bsc#1051510).
- HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact (bsc#1051510).
- HID: wacom: Support 'in range' for Intuos/Bamboo tablets where possible (bsc#1051510).
- HID: Wacom: switch Dell canvas into highres mode (bsc#1051510).
- HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary (bsc#1051510).
- HID: wacom: wacom_wac_collection() is local to wacom_wac.c (bsc#1051510).
- HID: wacom: Work around HID descriptor bug in DTK-2451 and DTH-2452 (bsc#1051510).
- hwmon/coretemp: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).
- hwmon/coretemp: Support multi-die/package (jsc#SLE-5454).
- hwmon: (k10temp) 27C Offset needed for Threadripper2  (FATE#327735).
- hwmon: (k10temp) Add Hygon Dhyana support (FATE#327735).
- hwmon: (k10temp) Add support for AMD Ryzen w/ Vega graphics  (FATE#327735).
- hwmon: (k10temp) Add support for family 17h (FATE#327735).
- hwmon: (k10temp) Add support for Stoney Ridge and Bristol  Ridge CPUs (FATE#327735).
- hwmon: (k10temp) Add support for temperature offsets  (FATE#327735).
- hwmon: (k10temp) Add temperature offset for Ryzen 1900X  (FATE#327735).
- hwmon: (k10temp) Add temperature offset for Ryzen 2700X  (FATE#327735).
- hwmon: (k10temp) Correct model name for Ryzen 1600X  (FATE#327735).
- hwmon: (k10temp) Display both Tctl and Tdie (FATE#327735).
- hwmon: (k10temp) Fix reading critical temperature register  (FATE#327735).
- hwmon: (k10temp) Make function get_raw_temp static  (FATE#327735).
- hwmon: (k10temp) Move chip specific code into probe function  (FATE#327735).
- hwmon: (k10temp) Only apply temperature offset if result is  positive (FATE#327735).
- hwmon: (k10temp) Support all Family 15h Model 6xh and Model  7xh processors (FATE#327735).
- hwmon: k10temp: Support Threadripper 2920X, 2970WX; simplify  offset table (FATE#327735).
- hwmon: (k10temp) Use API function to access System Management  Network (FATE#327735).
- hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs  (FATE#327735).
- i2c-piix4: Add Hygon Dhyana SMBus support (FATE#327735).
- ibmveth: Update ethtool settings to reflect virtual properties (bsc#1136157, LTC#177197).
- ipv6: fib: Do not assume only nodes hold a reference on routes (bsc#1138732).
- kabi: Mask no_vf_scan in struct pci_dev (jsc#SLE-5803  FATE#327056).
- kabi: s390: enum interruption_class (jsc#SLE-5789 bsc#1134730 LTC#173388).
- kabi: s390: enum interruption_class (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- kabi/severities: Whitelist airq_iv_* (s390-specific)
- kABI workaround for asus-wmi changes (bsc#1051510).
- kABI workaround for the new pci_dev.skip_bus_pm field addition (bsc#1051510).
- kabi: x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).
- kabi: x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).
- kvm: x86: Include CPUID leaf 0x8000001e in kvm's supported CPUID (bsc#1114279).
- kvm: x86: Include multiple indices with CPUID leaf 0x8000001d (bsc#1114279).
- mfd: intel-lpss: Set the device in reset state when init (bsc#1051510).
- mfd: tps65912-spi: Add missing of table registration (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers (bsc#1051510).
- mmc: mmci: Prevent polling for busy detection in IRQ context (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support (bsc#1051510).
- module: Fix livepatch/ftrace module text permissions race  (bsc#1071995 fate#323487).
- new primitive: vmemdup_user() (jsc#SLE-4712 bsc#1136156).
- nl80211: fix station_info pertid memory leak (bsc#1051510).
- {nl,mac}80211: allow 4addr AP operation on crypto controlled devices (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D (bsc#1051510).
- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes (bsc#1051510).
- nvmem: Do not let a NULL cell_id for nvmem_cell_get() crash us (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated function (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read (bsc#1051510).
- nvme: skip nvme_update_disk_info() if the controller is not live (bsc#1128432).
- PCI: Disable VF decoding before pcibios_sriov_disable() updates resources (jsc#SLE-5803).
- PCI/IOV: Add flag so platforms can skip VF scanning  (jsc#SLE-5803 FATE#327056).
- PCI/IOV: Factor out sriov_add_vfs() (jsc#SLE-5803 FATE#327056).
- PCI: PM: Avoid possible suspend-to-idle issue (bsc#1051510).
- perf tools: Add Hygon Dhyana support (fate#327735).
- perf/x86/intel/cstate: Support multi-die/package (jsc#SLE-5454).
- perf/x86/intel/rapl: Cosmetic rename internal variables in response to multi-die/pkg support (jsc#SLE-5454).
- perf/x86/intel/rapl: Support multi-die/package (jsc#SLE-5454).
- perf/x86/intel/uncore: Cosmetic renames in response to multi-die/pkg support (jsc#SLE-5454).
- perf/x86/intel/uncore: Support multi-die/package (jsc#SLE-5454).
- platform/chrome: cros_ec_proto: check for NULL transfer function (bsc#1051510).
- platform_data/mlxreg: Add capability field to core platform data (bsc#1112374).
- platform_data/mlxreg: additions for Mellanox watchdog driver (bsc#1112374).
- platform_data/mlxreg: Document fixes for core platform data (bsc#1112374).
- platform/mellanox: Add new ODM system types to mlx-platform (bsc#1112374).
- platform/mellanox: Add TmFifo driver for Mellanox BlueField Soc (bsc#1136333 jsc#SLE-4994).
- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to remove flow (bsc#1111666).
- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi (bsc#1051510).
- platform/x86: intel_pmc_core: Add ICL platform support (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Add Package cstates residency info (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Avoid a u32 overflow (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Include Reserved IP for LTR (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Mark local function static (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Quirk to ignore XTAL shutdown (jsc#SLE-5226).
- platform/x86: mlx-platform: Add ASIC hotplug device configuration (bsc#1112374).
- platform/x86: mlx-platform: Add definitions for new registers (bsc#1112374).
- platform/x86: mlx-platform: Add extra CPLD for next generation systems (bsc#1112374).
- platform/x86: mlx-platform: Add LED platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlxreg-fan platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlxreg-io platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlx-wdt platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add support for fan capability registers (bsc#1112374).
- platform/x86: mlx-platform: Add support for fan direction register (bsc#1112374).
- platform/x86: mlx-platform: Add support for new VMOD0007 board name (bsc#1112374).
- platform/x86: mlx-platform: Add support for tachometer speed register (bsc#1112374).
- platform/x86: mlx-platform: Add UID LED for the next generation systems (bsc#1112374).
- platform/x86: mlx-platform: Allow mlxreg-io driver activation for more systems (bsc#1112374).
- platform/x86: mlx-platform: Allow mlxreg-io driver activation for new systems (bsc#1112374).
- platform/x86: mlx-platform: Change mlxreg-io configuration for MSN274x systems (bsc#1112374).
- platform/x86: mlx-platform: Convert to use SPDX identifier (bsc#1112374).
- platform/x86: mlx-platform: Fix access mode for fan_dir attribute (bsc#1112374).
- platform/x86: mlx-platform: Fix copy-paste error in mlxplat_init() (bsc#1112374).
- platform/x86: mlx-platform: Fix LED configuration (bsc#1112374).
- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device registration (bsc#1051510).
- platform/x86: mlx-platform: Fix tachometer registers (bsc#1112374).
- platform/x86: mlx-platform: Remove unused define (bsc#1112374).
- platform/x86: mlx-platform: Rename new systems product names (bsc#1112374).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks (bsc#1051510).
- powercap/intel_rapl: Simplify rapl_find_package() (jsc#SLE-5454).
- powercap/intel_rapl: Support multi-die/package (jsc#SLE-5454).
- powercap/intel_rapl: Update RAPL domain name and debug messages (jsc#SLE-5454).
- powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (bsc#1138374, LTC#178199).
- powerpc/pseries: Fix oops in hotplug memory notifier (bsc#1138375, LTC#178204).
- powerpc/pseries/mobility: prevent cpu hotplug during DT update (bsc#1138374, LTC#178199).
- powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (bsc#1138374, LTC#178199).
- power: supply: max14656: fix potential use-before-alloc (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- qmi_wwan: add network device usage statistics for qmimux devices (bsc#1051510).
- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qmi_wwan: add support for QMAP padding in the RX path (bsc#1051510).
- qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode (bsc#1051510).
- qmi_wwan: extend permitted QMAP mux_id value range (bsc#1051510).
- rapidio: fix a NULL pointer dereference when create_workqueue() fails (bsc#1051510).
- RAS/CEC: Convert the timer callback to a workqueue (bsc#1114279).
- RAS/CEC: Fix binary search function (bsc#1114279).
- rbd: do not assert on writes to snapshots (bsc#1137985 bsc#1138681).
- Revert 'ALSA: hda/realtek - Improve the headset mic for Acer Aspire laptops' (bsc#1051510).
- Revert 'HID: wacom: generic: Send BTN_TOOL_PEN in prox once the pen enters range' (bsc#1051510).
- Revert 's390/jump_label: Use 'jdd' constraint on gcc9 (bsc#1138589).' This broke the build with older gcc instead.
- s390/airq: provide cacheline aligned ivs (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/airq: recognize directed interrupts (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/dasd: fix using offset into zero size array error (bsc#1051510).
- s390: enable processes for mio instructions (jsc#SLE-5802  FATE#327055 bsc#1134738 LTC#173387).
- s390/ism: move oddities of device IO to wrapper function  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/jump_label: Use 'jdd' constraint on gcc9 (bsc#1138589).
- s390/pci: add parameter to disable usage of MIO instructions  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: add parameter to force floating irqs (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: clarify interrupt vector usage (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: fix assignment of bus resources (jsc#SLE-5802  FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: fix struct definition for set PCI function  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: gather statistics for floating vs directed irqs  (jsc#SLE-5789 FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: improve bar check (jsc#SLE-5803 FATE#327056).
- s390/pci: map IOV resources (jsc#SLE-5803 FATE#327056).
- s390/pci: mark command line parser data __initdata (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: move everything irq related to pci_irq.c (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: move io address mapping code to pci_insn.c  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: provide support for CPU directed interrupts  (jsc#SLE-5789 FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: provide support for MIO instructions (jsc#SLE-5802  FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: remove stale rc (jsc#SLE-5789 FATE#327042 bsc#1134730  LTC#173388).
- s390/pci: remove unused define (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- s390/pci: skip VF scanning (jsc#SLE-5803 FATE#327056).
- s390/protvirt: add memory sharing for diag 308 set/store  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: block kernel command line alteration  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/qeth: fix race when initializing the IP address table (bsc#1051510).
- s390/qeth: fix VLAN attribute in bridge_hostnotify udev event (bsc#1051510).
- s390/sclp: detect DIRQ facility (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- s390/setup: fix early warning messages (bsc#1051510).
- s390: show statistics for MSI IRQs (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759  FATE#327003 bsc#1135153 LTC#173151).
- s390/virtio: handle find on invalid queue gracefully (bsc#1051510).
- sched/topology: Improve load balancing on AMD EPYC (bsc#1137366).
- scsi: hpsa: bump driver version (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: check for lv removal (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: clean up two indentation issues (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct device id issues (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct device resets (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct ioaccel2 chaining (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct simple mode (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: fix an uninitialized read and dereference of pointer dev (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: mark expected switch fall-throughs (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: remove timeout from TURs (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: switch to generic DMA API (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: Use vmemdup_user to replace the open code (jsc#SLE-4712 bsc#1136156).
- scsi: megaraid_sas: Add support for DEVICE_LIST DCMD in driver (bsc#1136271).
- scsi: megaraid_sas: correct an info message (bsc#1136271).
- scsi: megaraid_sas: driver version update (bsc#1136271).
- scsi: megaraid_sas: Retry reads of outbound_intr_status reg (bsc#1136271).
- scsi: megaraid_sas: Rework code to get PD and LD list (bsc#1136271).
- scsi: megaraid_sas: Rework device add code in AEN path (bsc#1136271).
- scsi: megaraid_sas: Update structures for HOST_DEVICE_LIST DCMD (bsc#1136271).
- scsi: qla2xxx: Fix FC-AL connection target discovery (bsc#1094555).
- scsi: qla2xxx: Fix N2N target discovery with Local loop (bsc#1094555).
- scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (bsc#1135296).
- scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove (bsc#1051510).
- scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host (bsc#1051510).
- scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices (bsc#1051510).
- scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) (bsc#1051510).
- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- SMB3: Fix endian warning (bsc#1137884).
- soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher (bsc#1051510).
- soc: rockchip: Set the proper PWM for rk3288 (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in spi_unregister_master (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: spi-fsl-spi: call spi_finalize_current_message() at the end (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- supported.conf: added mlxbf_tmfifo (bsc#1136333 jsc#SLE-4994)
- thermal: rcar_gen3_thermal: disable interrupt in .remove (bsc#1051510).
- thermal/x86_pkg_temp_thermal: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).
- thermal/x86_pkg_temp_thermal: Support multi-die/package (jsc#SLE-5454).
- tmpfs: fix link accounting when a tmpfile is linked in (bsc#1051510).
- tmpfs: fix uninitialized return value in shmem_link (bsc#1051510).
- tools/cpupower: Add Hygon Dhyana support (fate#327735).
- topology: Create core_cpus and die_cpus sysfs attributes (jsc#SLE-5454).
- topology: Create package_cpus sysfs attribute (jsc#SLE-5454).
- tty: max310x: Fix external crystal register setup (bsc#1051510).
- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- usb: serial: pl2303: fix tranceiver suspend mode (bsc#1135642).
- usb: xhci: avoid null pointer deref when bos field is NULL (bsc#1135642).
- vfio: ccw: only free cp on final interrupt (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference (bsc#1051510).
- video: imsttfb: fix potential NULL pointer dereferences (bsc#1051510).
- virtio_console: initialize vtermno value for ports (bsc#1051510).
- vlan: disable SIOCSHWTSTAMP in container (bsc#1051510).
- watchdog: imx2_wdt: Fix set_timeout for big timeout values (bsc#1051510).
- x86/alternative: Init ideal_nops for Hygon Dhyana (fate#327735).
- x86/amd_nb: Add support for Raven Ridge CPUs (FATE#327735).
- x86/amd_nb: Check vendor in AMD-only functions (fate#327735).
- x86/apic: Add Hygon Dhyana support (fate#327735).
- x86/bugs: Add Hygon Dhyana to the respective mitigation  machinery (fate#327735).
- x86/cpu: Add Icelake model number (jsc#SLE-5226).
- x86/cpu/amd: Do not force the CPB cap when running under a hypervisor (bsc#1114279).
- x86/cpu: Create Hygon Dhyana architecture support file  (fate#327735).
- x86/cpufeatures: Carve out CQM features retrieval (jsc#SLE-5382).
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (jsc#SLE-5382).
- x86/cpufeatures: Enumerate the new AVX512 BFLOAT16 instructions (jsc#SLE-5382).
- x86/cpu: Get cache info and setup cache cpumap for Hygon Dhyana  (fate#327735).
- x86/cpu/hygon: Fix phys_proc_id calculation logic for multi-die processors ().
- x86/cpu/mtrr: Support TOP_MEM2 and get MTRR number  (fate#327735).
- x86/events: Add Hygon Dhyana support to PMU infrastructure  (fate#327735).
- x86/kvm: Add Hygon Dhyana support to KVM (fate#327735).
- x86/mce: Add Hygon Dhyana support to the MCA infrastructure  (fate#327735).
- x86/mce: Do not disable MCA banks when offlining a CPU on AMD  (fate#327735).
- x86/mce: Fix machine_check_poll() tests for error types (bsc#1114279).
- x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback (bsc#1114279).
- x86/microcode: Fix microcode hotplug state (bsc#1114279).
- x86/microcode: Fix the ancient deprecated microcode loading method (bsc#1114279).
- x86/mm/mem_encrypt: Disable all instrumentation for early SME setup (bsc#1114279).
- x86/pci, x86/amd_nb: Add Hygon Dhyana support to PCI and  northbridge (fate#327735).
- x86/smpboot: Do not use BSP INIT delay and MWAIT to idle on  Dhyana (fate#327735).
- x86/smpboot: Rename match_die() to match_pkg() (jsc#SLE-5454).
- x86/speculation/mds: Revert CPU buffer clear on double fault exit (bsc#1114279).
- x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).
- x86/topology: Create topology_max_die_per_package() (jsc#SLE-5454).
- x86/topology: Define topology_die_id() (jsc#SLE-5454).
- x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).
- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- x86/xen: Add Hygon Dhyana support to Xen (fate#327735).
- x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die  processors (fate#327735).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-04"/>
	<updated date="2019-07-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094555">SUSE bug 1094555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128432">SUSE bug 1128432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134730">SUSE bug 1134730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134738">SUSE bug 1134738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135153">SUSE bug 1135153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135296">SUSE bug 1135296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136156">SUSE bug 1136156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136157">SUSE bug 1136157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136271">SUSE bug 1136271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136333">SUSE bug 1136333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137103">SUSE bug 1137103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137194">SUSE bug 1137194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137366">SUSE bug 1137366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137884">SUSE bug 1137884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137985">SUSE bug 1137985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138263">SUSE bug 1138263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138336">SUSE bug 1138336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138374">SUSE bug 1138374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138375">SUSE bug 1138375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138589">SUSE bug 1138589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138681">SUSE bug 1138681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138719">SUSE bug 1138719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138732">SUSE bug 1138732</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16871/">CVE-2018-16871</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12614/">CVE-2019-12614</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-12817/">CVE-2019-12817</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496208" comment="kernel-docs-4.12.14-197.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496209" comment="kernel-obs-build-4.12.14-197.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496210" comment="kernel-source-4.12.14-197.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496211" comment="kernel-syms-4.12.14-197.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138181" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1138425" ref_url="https://bugzilla.suse.com/1138425" source="BUGZILLA"/>
		<reference ref_id="1138464" ref_url="https://bugzilla.suse.com/1138464" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11597" ref_url="https://www.suse.com/security/cve/CVE-2019-11597/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1773-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005670.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

Security issues fixed:

- CVE-2019-11597: Fixed a heap-based buffer over-read in the WriteTIFFImage() (bsc#1138464).
- Fixed a file content disclosure via SVG and WMF decoding (bsc#1138425).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-08"/>
	<updated date="2019-07-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1138425">SUSE bug 1138425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138464">SUSE bug 1138464</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11597/">CVE-2019-11597</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496041" comment="perl-PerlMagick-7.0.7.34-3.64.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138182" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1088047" ref_url="https://bugzilla.suse.com/1088047" source="BUGZILLA"/>
		<reference ref_id="1098633" ref_url="https://bugzilla.suse.com/1098633" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1106383" ref_url="https://bugzilla.suse.com/1106383" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1119532" ref_url="https://bugzilla.suse.com/1119532" source="BUGZILLA"/>
		<reference ref_id="1120423" ref_url="https://bugzilla.suse.com/1120423" source="BUGZILLA"/>
		<reference ref_id="1125703" ref_url="https://bugzilla.suse.com/1125703" source="BUGZILLA"/>
		<reference ref_id="1128902" ref_url="https://bugzilla.suse.com/1128902" source="BUGZILLA"/>
		<reference ref_id="1130836" ref_url="https://bugzilla.suse.com/1130836" source="BUGZILLA"/>
		<reference ref_id="1131645" ref_url="https://bugzilla.suse.com/1131645" source="BUGZILLA"/>
		<reference ref_id="1132390" ref_url="https://bugzilla.suse.com/1132390" source="BUGZILLA"/>
		<reference ref_id="1133401" ref_url="https://bugzilla.suse.com/1133401" source="BUGZILLA"/>
		<reference ref_id="1133738" ref_url="https://bugzilla.suse.com/1133738" source="BUGZILLA"/>
		<reference ref_id="1134303" ref_url="https://bugzilla.suse.com/1134303" source="BUGZILLA"/>
		<reference ref_id="1134395" ref_url="https://bugzilla.suse.com/1134395" source="BUGZILLA"/>
		<reference ref_id="1135556" ref_url="https://bugzilla.suse.com/1135556" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135897" ref_url="https://bugzilla.suse.com/1135897" source="BUGZILLA"/>
		<reference ref_id="1136161" ref_url="https://bugzilla.suse.com/1136161" source="BUGZILLA"/>
		<reference ref_id="1136264" ref_url="https://bugzilla.suse.com/1136264" source="BUGZILLA"/>
		<reference ref_id="1136343" ref_url="https://bugzilla.suse.com/1136343" source="BUGZILLA"/>
		<reference ref_id="1136935" ref_url="https://bugzilla.suse.com/1136935" source="BUGZILLA"/>
		<reference ref_id="1137625" ref_url="https://bugzilla.suse.com/1137625" source="BUGZILLA"/>
		<reference ref_id="1137728" ref_url="https://bugzilla.suse.com/1137728" source="BUGZILLA"/>
		<reference ref_id="1138879" ref_url="https://bugzilla.suse.com/1138879" source="BUGZILLA"/>
		<reference ref_id="1139712" ref_url="https://bugzilla.suse.com/1139712" source="BUGZILLA"/>
		<reference ref_id="1139751" ref_url="https://bugzilla.suse.com/1139751" source="BUGZILLA"/>
		<reference ref_id="1139771" ref_url="https://bugzilla.suse.com/1139771" source="BUGZILLA"/>
		<reference ref_id="1139865" ref_url="https://bugzilla.suse.com/1139865" source="BUGZILLA"/>
		<reference ref_id="1140133" ref_url="https://bugzilla.suse.com/1140133" source="BUGZILLA"/>
		<reference ref_id="1140228" ref_url="https://bugzilla.suse.com/1140228" source="BUGZILLA"/>
		<reference ref_id="1140328" ref_url="https://bugzilla.suse.com/1140328" source="BUGZILLA"/>
		<reference ref_id="1140405" ref_url="https://bugzilla.suse.com/1140405" source="BUGZILLA"/>
		<reference ref_id="1140424" ref_url="https://bugzilla.suse.com/1140424" source="BUGZILLA"/>
		<reference ref_id="1140428" ref_url="https://bugzilla.suse.com/1140428" source="BUGZILLA"/>
		<reference ref_id="1140454" ref_url="https://bugzilla.suse.com/1140454" source="BUGZILLA"/>
		<reference ref_id="1140463" ref_url="https://bugzilla.suse.com/1140463" source="BUGZILLA"/>
		<reference ref_id="1140575" ref_url="https://bugzilla.suse.com/1140575" source="BUGZILLA"/>
		<reference ref_id="1140577" ref_url="https://bugzilla.suse.com/1140577" source="BUGZILLA"/>
		<reference ref_id="1140637" ref_url="https://bugzilla.suse.com/1140637" source="BUGZILLA"/>
		<reference ref_id="1140658" ref_url="https://bugzilla.suse.com/1140658" source="BUGZILLA"/>
		<reference ref_id="1140715" ref_url="https://bugzilla.suse.com/1140715" source="BUGZILLA"/>
		<reference ref_id="1140719" ref_url="https://bugzilla.suse.com/1140719" source="BUGZILLA"/>
		<reference ref_id="1140726" ref_url="https://bugzilla.suse.com/1140726" source="BUGZILLA"/>
		<reference ref_id="1140727" ref_url="https://bugzilla.suse.com/1140727" source="BUGZILLA"/>
		<reference ref_id="1140728" ref_url="https://bugzilla.suse.com/1140728" source="BUGZILLA"/>
		<reference ref_id="1140814" ref_url="https://bugzilla.suse.com/1140814" source="BUGZILLA"/>
		<reference ref_id="1140887" ref_url="https://bugzilla.suse.com/1140887" source="BUGZILLA"/>
		<reference ref_id="1140888" ref_url="https://bugzilla.suse.com/1140888" source="BUGZILLA"/>
		<reference ref_id="1140889" ref_url="https://bugzilla.suse.com/1140889" source="BUGZILLA"/>
		<reference ref_id="1140891" ref_url="https://bugzilla.suse.com/1140891" source="BUGZILLA"/>
		<reference ref_id="1140893" ref_url="https://bugzilla.suse.com/1140893" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1140954" ref_url="https://bugzilla.suse.com/1140954" source="BUGZILLA"/>
		<reference ref_id="1140955" ref_url="https://bugzilla.suse.com/1140955" source="BUGZILLA"/>
		<reference ref_id="1140956" ref_url="https://bugzilla.suse.com/1140956" source="BUGZILLA"/>
		<reference ref_id="1140957" ref_url="https://bugzilla.suse.com/1140957" source="BUGZILLA"/>
		<reference ref_id="1140958" ref_url="https://bugzilla.suse.com/1140958" source="BUGZILLA"/>
		<reference ref_id="1140959" ref_url="https://bugzilla.suse.com/1140959" source="BUGZILLA"/>
		<reference ref_id="1140960" ref_url="https://bugzilla.suse.com/1140960" source="BUGZILLA"/>
		<reference ref_id="1140961" ref_url="https://bugzilla.suse.com/1140961" source="BUGZILLA"/>
		<reference ref_id="1140962" ref_url="https://bugzilla.suse.com/1140962" source="BUGZILLA"/>
		<reference ref_id="1140964" ref_url="https://bugzilla.suse.com/1140964" source="BUGZILLA"/>
		<reference ref_id="1140971" ref_url="https://bugzilla.suse.com/1140971" source="BUGZILLA"/>
		<reference ref_id="1140972" ref_url="https://bugzilla.suse.com/1140972" source="BUGZILLA"/>
		<reference ref_id="1140992" ref_url="https://bugzilla.suse.com/1140992" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20836" ref_url="https://www.suse.com/security/cve/CVE-2018-20836/" source="CVE"/>
		<reference ref_id="CVE-2019-10126" ref_url="https://www.suse.com/security/cve/CVE-2019-10126/" source="CVE"/>
		<reference ref_id="CVE-2019-10638" ref_url="https://www.suse.com/security/cve/CVE-2019-10638/" source="CVE"/>
		<reference ref_id="CVE-2019-10639" ref_url="https://www.suse.com/security/cve/CVE-2019-10639/" source="CVE"/>
		<reference ref_id="CVE-2019-11599" ref_url="https://www.suse.com/security/cve/CVE-2019-11599/" source="CVE"/>
		<reference ref_id="CVE-2019-13233" ref_url="https://www.suse.com/security/cve/CVE-2019-13233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005712.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2019-10638: In the Linux kernel, a device could be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic was sent to multiple destination IP addresses, it was possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may have been conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses (bnc#1140575 1140577).
- CVE-2019-10639: The Linux kernel allowed Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it was possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic was sent to multiple destination IP addresses, it was possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key was extracted (via enumeration), the offset of the kernel image was exposed. This attack could be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker's web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable because IP ID generation was changed to have a dependency on an address associated with a network namespace (bnc#1140577).
- CVE-2019-13233: In arch/x86/lib/insn-eval.c in the Linux kernel, there was a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bnc#1140454).
- CVE-2018-20836: An issue was discovered in the Linux kernel There was a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free (bnc#1134395).
- CVE-2019-10126: A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might have lead to memory corruption and possibly other consequences (bnc#1136935).
- CVE-2019-11599: The coredump implementation in the Linux kernel did not use locking or other mechanisms to prevent vma layout or vma flags changes while it ran, which allowed local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c (bnc#1131645 1133738).

The following non-security bugs were fixed:

- Abort file_remove_privs() for non-reg. files (bsc#1140888).
- acpica: Clear status of GPEs on first direct enable (bsc#1111666).
- acpi: PM: Allow transitions to D0 to occur in special cases (bsc#1051510).
- acpi: PM: Avoid evaluating _PS3 on transitions from D3hot to D3cold (bsc#1051510).
- alsa: firewire-lib/fireworks: fix miss detection of received MIDI messages (bsc#1051510).
- alsa: hda - Force polling mode on CNL for fixing codec communication (bsc#1051510).
- alsa: hda/realtek: Add quirks for several Clevo notebook barebones (bsc#1051510).
- alsa: hda/realtek - Change front mic location for Lenovo M710q (bsc#1051510).
- alsa: line6: Fix write on zero-sized buffer (bsc#1051510).
- alsa: seq: fix incorrect order of dest_client/dest_ports arguments (bsc#1051510).
- alsa: usb-audio: Fix parse of UAC2 Extension Units (bsc#1111666).
- alsa: usb-audio: fix sign unintended sign extension on left shifts (bsc#1051510).
- apparmor: enforce nullbyte at end of tag string (bsc#1051510).
- asoc: cx2072x: fix integer overflow on unsigned int multiply (bsc#1111666).
- ax25: fix inconsistent lock state in ax25_destroy_timer (bsc#1051510).
- Backporting hwpoison fixes  - mm: hugetlb: prevent reuse of hwpoisoned free hugepages   (bsc#1139712).  - mm: hwpoison: change PageHWPoison behavior on hugetlb pages   (bsc#1139712).  - mm: hugetlb: soft-offline: dissolve source hugepage after   successful migration (bsc#1139712).  - mm: soft-offline: dissolve free hugepage if soft-offlined   (bsc#1139712).  - mm: hwpoison: introduce memory_failure_hugetlb() (bsc#1139712).  - mm: hwpoison: dissolve in-use hugepage in unrecoverable memory   error (bsc#1139712).  - mm: hugetlb: delete dequeue_hwpoisoned_huge_page()   (bsc#1139712).  - mm: hwpoison: introduce idenfity_page_state (bsc#1139712).  - mm: hugetlb: soft_offline: save compound page order before   page migration (bsc#1139712)  - fs: hugetlbfs: fix hwpoison reserve accounting (bsc#1139712)  - mm: fix race on soft-offlining free huge pages (bsc#1139712).  - mm: soft-offline: close the race against page allocation   (bsc#1139712).  - mm: soft-offline: return -EBUSY if   set_hwpoison_free_buddy_page() fails (bsc#1139712).  - mm: hugetlb: soft-offline: dissolve_free_huge_page() return   zero on !PageHuge (bsc#bsc#1139712).
- blk-mq: free hw queue's resource in hctx's release handler (bsc#1140637).
- block: Fix a NULL pointer dereference in generic_make_request() (bsc#1139771).
- bluetooth: Fix faulty expression for minimum encryption key size check (bsc#1140328).
- bpf, devmap: Add missing bulk queue free (bsc#1109837).
- bpf, devmap: Add missing RCU read lock on flush (bsc#1109837).
- bpf, devmap: Fix premature entry free on destroying map (bsc#1109837).
- bpf: devmap: fix use-after-free Read in __dev_map_entry_free (bsc#1109837).
- bpf: lpm_trie: check left child of last leftmost node for NULL (bsc#1109837).
- bpf: sockmap fix msg-&gt;sg.size account on ingress skb (bsc#1109837).
- bpf: sockmap, fix use after free from sleep in psock backlog workqueue (bsc#1109837).
- bpf: sockmap remove duplicate queue free (bsc#1109837).
- bpf, tcp: correctly handle DONT_WAIT flags and timeo == 0 (bsc#1109837).
- can: af_can: Fix error path of can_init() (bsc#1051510).
- can: flexcan: fix timeout when set small bitrate (bsc#1051510).
- can: purge socket error queue on sock destruct (bsc#1051510).
- ceph: flush dirty inodes before proceeding with remount (bsc#1140405).
- clk: rockchip: Turn on 'aclk_dmac1' for suspend on rk3288 (bsc#1051510).
- clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider (bsc#1051510).
- coresight: etb10: Fix handling of perf mode (bsc#1051510).
- coresight: etm4x: Add support to enable ETMv4.2 (bsc#1051510).
- crypto: algapi - guard against uninitialized spawn list in crypto_remove_spawns (bsc#1133401).
- crypto: cryptd - Fix skcipher instance memory leak (bsc#1051510).
- crypto: user - prevent operating on larval algorithms (bsc#1133401).
- dax: Fix xarray entry association for mixed mappings (bsc#1140893).
- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- device core: Consolidate locking and unlocking of parent and device (bsc#1106383).
- dmaengine: imx-sdma: remove BD_INTR for channel0 (bsc#1051510).
- doc: Cope with the deprecation of AutoReporter (bsc#1051510).
- documentation/ABI: Document umwait control sysfs interfaces (jsc#SLE-5187).
- documentation: DMA-API: fix a function name of max_mapping_size (bsc#1140954).
- driver core: Establish order of operations for device_add and device_del via bitflag (bsc#1106383).
- driver core: Probe devices asynchronously instead of the driver (bsc#1106383).
- drivers/base/devres: introduce devm_release_action() (bsc#1103992).
- drivers/base: Introduce kill_device() (bsc#1139865).
- drivers/base: kABI fixes for struct device_private (bsc#1106383).
- drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var (bsc#1051510).
- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE (bsc#1051510).
- drm/amd/powerplay: use hardware fan control if no powerplay fan table (bsc#1111666).
- drm/arm/hdlcd: Actually validate CRTC modes (bsc#1111666).
- drm/arm/hdlcd: Allow a bit of clock tolerance (bsc#1051510).
- drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times (bsc#1111666).
- drm/etnaviv: add missing failure path to destroy suballoc (bsc#1111666).
- drm/fb-helper: generic: Do not take module ref for fbcon (bsc#1111666).
- drm: Fix drm_release() and device unplug (bsc#1111666).
- drm/i915/dmc: protect against reading random memory (bsc#1051510).
- drm/i915/gvt: ignore unexpected pvinfo write (bsc#1051510).
- drm/imx: notify drm core before sending event during crtc disable (bsc#1111666).
- drm/imx: only send event on crtc disable if kept disabled (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2 (bsc#1111666).
- drm/vmwgfx: fix a warning due to missing dma_parms (bsc#1111666).
- drm/vmwgfx: Use the backdoor port if the HB port is not available (bsc#1111666).
- ext4: do not delete unlinked inode from orphan list on failed truncate (bsc#1140891).
- failover: allow name change on IFF_UP slave interfaces (bsc#1109837).
- fs/ocfs2: fix race in ocfs2_dentry_attach_lock() (bsc#1140889).
- fs/proc/proc_sysctl.c: Fix a NULL pointer dereference (bsc#1140887).
- fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links (bsc#1140887).
- ftrace/x86: Remove possible deadlock between register_kprobe() and ftrace_run_update_code() (bsc#1071995).
- genirq: Prevent use-after-free and work list corruption (bsc#1051510).
- genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent() (bsc#1051510).
- genwqe: Prevent an integer overflow in the ioctl (bsc#1051510).
- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes (mm/hugetlbfs)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git fixes (mm/hugetlbfs)).
- i2c: acorn: fix i2c warning (bsc#1135642).
- i2c: mlxcpld: Add support for extended transaction length for i2c-mlxcpld (bsc#1112374).
- i2c: mlxcpld: Add support for smbus block read transaction (bsc#1112374).
- i2c: mlxcpld: Allow configurable adapter id for mlxcpld (bsc#1112374).
- i2c: mlxcpld: Fix adapter functionality support callback (bsc#1112374).
- i2c: mlxcpld: Fix wrong initialization order in probe (bsc#1112374).
- i2c: mux: mlxcpld: simplify code to reach the adapter (bsc#1112374).
- ib/hfi1: Clear the IOWAIT pending bits when QP is put into error state (bsc#1114685).
- ib/hfi1: Create inline to get extended headers (bsc#1114685 ).
- ib/hfi1: Validate fault injection opcode user input (bsc#1114685 ).
- ib/mlx5: Verify DEVX general object type correctly (bsc#1103991 ).
- input: synaptics - enable SMBus on ThinkPad E480 and E580 (bsc#1051510).
- input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD (bsc#1051510).
- iommu/amd: Make iommu_disable safer (bsc#1140955).
- iommu/arm-smmu: Add support for qcom,smmu-v2 variant (bsc#1051510).
- iommu/arm-smmu: Avoid constant zero in TLBI writes (bsc#1140956).
- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register (bsc#1051510).
- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer (bsc#1051510).
- iommu: Fix a leak in iommu_insert_resv_region (bsc#1140957).
- iommu: Use right function to get group for device (bsc#1140958).
- iommu/vt-d: Duplicate iommu_resv_region objects per device list (bsc#1140959).
- iommu/vt-d: Handle PCI bridge RMRR device scopes in intel_iommu_get_resv_regions (bsc#1140960).
- iommu/vt-d: Handle RMRR with PCI bridge device scopes (bsc#1140961).
- iommu/vt-d: Introduce is_downstream_to_pci_bridge helper (bsc#1140962).
- iommu/vt-d: Remove unnecessary rcu_read_locks (bsc#1140964).
- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- irqchip/gic-v3-its: fix some definitions of inner cacheability attributes (bsc#1051510).
- irqchip/mbigen: Do not clear eventid when freeing an MSI (bsc#1051510).
- ixgbe: Avoid NULL pointer dereference with VF on non-IPsec hw (bsc#1140228).
- kabi fixup blk_mq_register_dev() (bsc#1140637).
- kernel-binary: fix missing \
- kernel-binary: rpm does not support multiline condition
- kernel-binary: Use -c grep option in klp project detection.
- kvm: svm/avic: fix off-by-one in checking host APIC ID (bsc#1140971).
- kvm: x86: fix return value for reserved EFER (bsc#1140992).
- kvm: x86: Skip EFER vs. guest CPUID checks for host-initiated writes (bsc#1140972).
- libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk (bsc#1051510).
- libceph: assign cookies in linger_submit() (bsc#1135897).
- libceph: check reply num_data_items in setup_request_data() (bsc#1135897).
- libceph: do not consume a ref on pagelist in ceph_msg_data_add_pagelist() (bsc#1135897).
- libceph: enable fallback to ceph_msg_new() in ceph_msgpool_get() (bsc#1135897).
- libceph: introduce alloc_watch_request() (bsc#1135897).
- libceph: introduce ceph_pagelist_alloc() (bsc#1135897).
- libceph: preallocate message data items (bsc#1135897).
- libceph, rbd: add error handling for osd_req_op_cls_init() (bsc#1135897). This feature was requested for SLE15 but aws reverted in packaging and master.
- libceph, rbd, ceph: move ceph_osdc_alloc_messages() calls (bsc#1135897).
- libnvdimm/bus: Prevent duplicate device_unregister() calls (bsc#1139865).
- libnvdimm, pfn: Fix over-trim in trim_pfn_device() (bsc#1140719).
- mac80211: Do not use stack memory with scatterlist for GMAC (bsc#1051510).
- mac80211: drop robust management frames from unknown TA (bsc#1051510).
- mac80211: handle deauthentication/disassociation from TDLS peer (bsc#1051510).
- media: v4l2-ioctl: clear fields in s_parm (bsc#1051510).
- mfd: hi655x: Fix regmap area declared size for hi655x (bsc#1051510).
- mISDN: make sure device name is NUL terminated (bsc#1051510).
- mlxsw: core: Add API for QSFP module temperature thresholds reading (bsc#1112374).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue (bsc#1112374).
- mlxsw: core: mlxsw: core: avoid -Wint-in-bool-context warning (bsc#1112374).
- mlxsw: core: Move ethtool module callbacks to a common location (bsc#1112374).
- mlxsw: core: Prevent reading unsupported slave address from SFP EEPROM (bsc#1112374).
- mlxsw: pci: Reincrease PCI reset timeout (bsc#1112374).
- mlxsw: reg: Add Management Temperature Bulk Register (bsc#1112374).
- mlxsw: spectrum_flower: Fix TOS matching (bsc#1112374).
- mlxsw: spectrum: Move QSFP EEPROM definitions to common location (bsc#1112374).
- mlxsw: spectrum: Put MC TCs into DWRR mode (bsc#1112374).
- mmc: core: complete HS400 before checking status (bsc#1111666).
- mmc: core: Prevent processing SDIO IRQs when the card is suspended (bsc#1051510).
- mm/devm_memremap_pages: introduce devm_memunmap_pages (bsc#1103992).
- mm/page_alloc.c: avoid potential NULL pointer dereference (git fixes (mm/pagealloc)).
- mm/page_alloc.c: fix never set ALLOC_NOFRAGMENT flag (git fixes (mm/pagealloc)).
- mm/vmscan.c: prevent useless kswapd loops (git fixes (mm/vmscan)).
- net: core: support XDP generic on stacked devices (bsc#1109837).
- net: do not clear sock-&gt;sk early to avoid trouble in strparser (bsc#1103990).
- net: ena: add ethtool function for changing io queue sizes (bsc#1138879).
- net: ena: add good checksum counter (bsc#1138879).
- net: ena: add handling of llq max tx burst size (bsc#1138879).
- net: ena: add MAX_QUEUES_EXT get feature admin command (bsc#1138879).
- net: ena: add newline at the end of pr_err prints (bsc#1138879).
- net: ena: add support for changing max_header_size in LLQ mode (bsc#1138879).
- net: ena: allow automatic fallback to polling mode (bsc#1138879).
- net: ena: allow queue allocation backoff when low on memory (bsc#1138879).
- net: ena: arrange ena_probe() function variables in reverse christmas tree (bsc#1138879).
- net: ena: enable negotiating larger Rx ring size (bsc#1138879).
- net: ena: ethtool: add extra properties retrieval via get_priv_flags (bsc#1138879).
- net: ena: Fix bug where ring allocation backoff stopped too late (bsc#1138879).
- net: ena: fix ena_com_fill_hash_function() implementation (bsc#1138879).
- net: ena: fix: Free napi resources when ena_up() fails (bsc#1138879).
- net: ena: fix incorrect test of supported hash function (bsc#1138879).
- net: ena: fix: set freed objects to NULL to avoid failing future allocations (bsc#1138879).
- net: ena: fix swapped parameters when calling ena_com_indirect_table_fill_entry (bsc#1138879).
- net: ena: gcc 8: fix compilation warning (bsc#1138879).
- net: ena: improve latency by disabling adaptive interrupt moderation by default (bsc#1138879).
- net: ena: make ethtool show correct current and max queue sizes (bsc#1138879).
- net: ena: optimise calculations for CQ doorbell (bsc#1138879).
- net: ena: remove inline keyword from functions in *.c (bsc#1138879).
- net: ena: replace free_tx/rx_ids union with single free_ids field in ena_ring (bsc#1138879).
- net: ena: update driver version from 2.0.3 to 2.1.0 (bsc#1138879).
- net: ena: use dev_info_once instead of static variable (bsc#1138879).
- net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set (bsc#1130836).
- net: Fix missing meta data in skb with vlan packet (bsc#1109837).
- net/mlx5: Avoid reloading already removed devices (bsc#1103990 ).
- net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled (bsc#1103990).
- net/mlx5e: Fix the max MTU check in case of XDP (bsc#1103990 ).
- net/mlx5e: Fix use-after-free after xdp_return_frame (bsc#1103990).
- net/mlx5e: Rx, Check ip headers sanity (bsc#1103990 ).
- net/mlx5e: Rx, Fixup skb checksum for packets with tail padding (bsc#1109837).
- net/mlx5e: XDP, Fix shifted flag index in RQ bitmap (bsc#1103990 ).
- net/mlx5: FPGA, tls, hold rcu read lock a bit longer (bsc#1103990).
- net/mlx5: FPGA, tls, idr remove on flow delete (bsc#1103990 ).
- net/mlx5: Set completion EQs as shared resources (bsc#1103991 ).
- net/mlx5: Update pci error handler entries and command translation (bsc#1103991).
- net: mvpp2: prs: Fix parser range for VID filtering (bsc#1098633).
- net: mvpp2: prs: Fix parser range for VID filtering (bsc#1098633).
- net: mvpp2: prs: Use the correct helpers when removing all VID filters (bsc#1098633).
- net: mvpp2: prs: Use the correct helpers when removing all VID filters (bsc#1098633).
- net: mvpp2: Use strscpy to handle stat strings (bsc#1098633).
- net: mvpp2: Use strscpy to handle stat strings (bsc#1098633).
- net: phy: marvell10g: report if the PHY fails to boot firmware (bsc#1119113).
- net/sched: cbs: Fix error path of cbs_module_init (bsc#1109837).
- net/sched: cbs: fix port_rate miscalculation (bsc#1109837).
- net/tls: avoid NULL pointer deref on nskb-&gt;sk in fallback (bsc#1109837).
- net/tls: avoid potential deadlock in tls_set_device_offload_rx() (bsc#1109837).
- net: tls, correctly account for copied bytes with multiple sk_msgs (bsc#1109837).
- net/tls: do not copy negative amounts of data in reencrypt (bsc#1109837).
- net/tls: do not ignore netdev notifications if no TLS features (bsc#1109837).
- net/tls: do not leak IV and record seq when offload fails (bsc#1109837).
- net/tls: do not leak partially sent record in device mode (bsc#1109837).
- net/tls: fix build without CONFIG_TLS_DEVICE (bsc#1109837).
- net/tls: fix copy to fragments in reencrypt (bsc#1109837).
- net/tls: fix page double free on TX cleanup (bsc#1109837).
- net/tls: fix refcount adjustment in fallback (bsc#1109837).
- net/tls: fix state removal with feature flags off (bsc#1109837).
- net/tls: fix the IV leaks (bsc#1109837).
- net/tls: prevent bad memory access in tls_is_sk_tx_device_offloaded() (bsc#1109837).
- net/tls: replace the sleeping lock around RX resync with a bit lock (bsc#1109837).
- net/udp_gso: Allow TX timestamp with UDP GSO (bsc#1109837).
- nfit/ars: Allow root to busy-poll the ARS state machine (bsc#1140814).
- nfit/ars: Avoid stale ARS results (jsc#SLE-5433).
- nfit/ars: Introduce scrub_flags (jsc#SLE-5433).
- nfp: bpf: fix static check error through tightening shift amount adjustment (bsc#1109837).
- nfp: flower: add rcu locks when accessing netdev for tunnels (bsc#1109837).
- ntp: Allow TAI-UTC offset to be set to zero (bsc#1135642).
- nvme: copy MTFA field from identify controller (bsc#1140715).
- nvme-rdma: fix double freeing of async event data (bsc#1120423).
- nvme-rdma: fix possible double free of controller async event buffer (bsc#1120423).
- ocfs2: try to reuse extent block in dealloc without meta_alloc (bsc#1128902).
- pci: Do not poll for PME if the device is in D3cold (bsc#1051510).
- pci/p2pdma: fix the gen_pool_add_virt() failure path (bsc#1103992).
- pci: PM: Skip devices in D0 for suspend-to-idle (bsc#1051510).
- pci: rpadlpar: Fix leaked device_node references in add/remove paths (bsc#1051510).
- pinctrl/amd: add get_direction handler (bsc#1140463).
- pinctrl/amd: fix gpio irq level in debugfs (bsc#1140463).
- pinctrl/amd: fix masking of GPIO interrupts (bsc#1140463).
- pinctrl/amd: make functions amd_gpio_suspend and amd_gpio_resume static (bsc#1140463).
- pinctrl/amd: poll InterruptEnable bits in amd_gpio_irq_set_type (bsc#1140463).
- pinctrl/amd: poll InterruptEnable bits in enable_irq (bsc#1140463).
- pm: ACPI/PCI: Resume all devices during hibernation (bsc#1111666).
- powerpc/perf: Add PM_LD_MISS_L1 and PM_BR_2PATH to power9 event list (bsc#1137728, LTC#178106).
- powerpc/perf: Add POWER9 alternate PM_RUN_CYC and PM_RUN_INST_CMPL events (bsc#1137728, LTC#178106).
- powerpc/rtas: retry when cpu offline races with suspend/migration (bsc#1140428, LTC#178808).
- ppc64le: enable CONFIG_PPC_DT_CPU_FTRS (jsc#SLE-7159).
- ppp: mppe: Add softdep to arc4 (bsc#1088047).
- ptrace: Fix -&gt;ptracer_cred handling for PTRACE_TRACEME (git-fixes).
- ptrace: restore smp_rmb() in __ptrace_may_access() (git-fixes).
- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- rdma/ipoib: Allow user space differentiate between valid dev_port (bsc#1103992).
- rdma/mlx5: Do not allow the user to write to the clock page (bsc#1103991).
- rdma/mlx5: Initialize roce port info before multiport master init (bsc#1103991).
- rdma/mlx5: Use rdma_user_map_io for mapping BAR pages (bsc#1103992).
- regulator: s2mps11: Fix buck7 and buck8 wrong voltages (bsc#1051510).
- Replace the bluetooth fix with the upstream commit (bsc#1135556)
- Revert 'net: ena: ethtool: add extra properties retrieval via get_priv_flags' (bsc#1138879).
- Revert 'net/mlx5e: Enable reporting checksum unnecessary also for L3 packets' (bsc#1103990).
- Revert 'Revert 'Drop multiversion(kernel) from the KMP template ()''
- Revert 'Sign non-x86 kernels when possible (boo#1134303)' This reverts commit bac621c6704610562ebd9e74ae5ad85ca8025681. We do not have reports of this working with all ARM architectures in all cases (boot, kexec, ..) so revert for now.
- Revert 'svm: Fix AVIC incomplete IPI emulation' (bsc#1140133).
- rpm/package-descriptions: fix typo in kernel-azure
- rpm/post.sh: correct typo in err msg (bsc#1137625)
- sbitmap: fix improper use of smp_mb__before_atomic() (bsc#1140658).
- scripts/git_sort/git_sort.py: add djbw/nvdimm nvdimm-pending.
- scripts/git_sort/git_sort.py: add nvdimm/libnvdimm-fixes
- scripts/git_sort/git_sort.py: drop old scsi branches
- scsi: aacraid: change event_wait to a completion (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: change wait_sem to a completion (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: clean up some indentation and formatting issues (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: Mark expected switch fall-through (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: Mark expected switch fall-throughs (jsc#SLE-4710 bsc#1136161).
- scsi: be2iscsi: be_iscsi: Mark expected switch fall-through (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: be_main: Mark expected switch fall-through (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: fix spelling mistake 'Retreiving' -&gt; 'Retrieving' (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: lpfc: fix typo (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: remove unused variable dmsg (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: switch to generic DMA API (jsc#SLE-4721 bsc#1136264).
- scsi: core: add new RDAC LENOVO/DE_Series device (bsc#1132390).
- scsi: csiostor: csio_wr: mark expected switch fall-through (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: drop serial_number usage (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix calls to dma_set_mask_and_coherent() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix incorrect dma device in case of vport (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix missing data copy in csio_scsi_err_handler() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: no need to check return value of debugfs_create functions (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: Remove set but not used variable 'pln' (jsc#SLE-4679 bsc#1136343).
- scsi: mpt3sas: Add Atomic RequestDescriptor support on Aero (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add flag high_iops_queues (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add missing breaks in switch statements (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add support for ATLAS PCIe switch (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add support for NVMe Switch Adapter (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Affinity high iops queues IRQs to local node (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: change _base_get_msix_index prototype (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Enable interrupt coalescing on high iops (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: fix indentation issue (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Fix kernel panic during expander reset (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Fix typo in request_desript_type (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: function pointers of request descriptor (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Improve the threshold value and introduce module param (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Introduce perf_mode module parameter (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Irq poll to avoid CPU hard lockups (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Load balance to improve performance and avoid soft lockups (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Rename mpi endpoint device ID macro (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: save and use MSI-X index for posting RD (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: simplify interrupt handler (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update driver version to 27.102.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update driver version to 29.100.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update mpt3sas driver version to 28.100.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Use high iops queues under some circumstances (bsc#1125703,jsc#SLE-4717).
- scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() (bsc#1140727).
- scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines (bsc#1140728).
- scsi: target/iblock: Fix overrun in WRITE SAME emulation (bsc#1140424).
- scsi: target/iblock: Fix overrun in WRITE SAME emulation (bsc#1140424).
- signal/ptrace: Do not leak unitialized kernel memory with PTRACE_PEEK_SIGINFO (git-fixes).
- staging: comedi: ni_mio_common: Fix divide-by-zero for DIO cmdtest (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- svm: Add warning message for AVIC IPI invalid target (bsc#1140133).
- svm: Fix AVIC incomplete IPI emulation (bsc#1140133).
- sysctl: handle overflow in proc_get_long (bsc#1051510).
- tools: bpftool: fix infinite loop in map create (bsc#1109837).
- tracing/snapshot: Resize spare buffer if size changed (bsc#1140726).
- typec: tcpm: fix compiler warning about stupid things (git-fixes).
- usb: chipidea: udc: workaround for endpoint conflict issue (bsc#1135642).
- usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression) (bsc#1135642).
- usb: Fix chipmunk-like voice when using Logitech C270 for recording audio (bsc#1051510).
- usbnet: ipheth: fix racing condition (bsc#1051510).
- usb: serial: fix initial-termios handling (bsc#1135642).
- usb: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode (bsc#1051510).
- usb: serial: option: add Telit 0x1260 and 0x1261 compositions (bsc#1051510).
- usb: serial: pl2303: add Allied Telesis VT-Kit3 (bsc#1051510).
- usb: usb-storage: Add new ID to ums-realtek (bsc#1051510).
- x86/cpufeatures: Enumerate user wait instructions (jsc#SLE-5187).
- x86/umwait: Add sysfs interface to control umwait C0.2 state (jsc#SLE-5187).
- x86/umwait: Add sysfs interface to control umwait maximum time (jsc#SLE-5187).
- x86/umwait: Initialize umwait control values (jsc#SLE-5187).
- xdp: check device pointer before clearing (bsc#1109837).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-15"/>
	<updated date="2019-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088047">SUSE bug 1088047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098633">SUSE bug 1098633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106383">SUSE bug 1106383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119532">SUSE bug 1119532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120423">SUSE bug 1120423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125703">SUSE bug 1125703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128902">SUSE bug 1128902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130836">SUSE bug 1130836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131645">SUSE bug 1131645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132390">SUSE bug 1132390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133401">SUSE bug 1133401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133738">SUSE bug 1133738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134303">SUSE bug 1134303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134395">SUSE bug 1134395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135556">SUSE bug 1135556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135897">SUSE bug 1135897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136161">SUSE bug 1136161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136264">SUSE bug 1136264</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136343">SUSE bug 1136343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136935">SUSE bug 1136935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137625">SUSE bug 1137625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137728">SUSE bug 1137728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138879">SUSE bug 1138879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139712">SUSE bug 1139712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139751">SUSE bug 1139751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139771">SUSE bug 1139771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139865">SUSE bug 1139865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140133">SUSE bug 1140133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140228">SUSE bug 1140228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140328">SUSE bug 1140328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140405">SUSE bug 1140405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140424">SUSE bug 1140424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140428">SUSE bug 1140428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140454">SUSE bug 1140454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140463">SUSE bug 1140463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140575">SUSE bug 1140575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140577">SUSE bug 1140577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140637">SUSE bug 1140637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140658">SUSE bug 1140658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140715">SUSE bug 1140715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140719">SUSE bug 1140719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140726">SUSE bug 1140726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140727">SUSE bug 1140727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140728">SUSE bug 1140728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140814">SUSE bug 1140814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140887">SUSE bug 1140887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140888">SUSE bug 1140888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140889">SUSE bug 1140889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140891">SUSE bug 1140891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140893">SUSE bug 1140893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140954">SUSE bug 1140954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140955">SUSE bug 1140955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140956">SUSE bug 1140956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140957">SUSE bug 1140957</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140958">SUSE bug 1140958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140959">SUSE bug 1140959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140960">SUSE bug 1140960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140961">SUSE bug 1140961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140962">SUSE bug 1140962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140964">SUSE bug 1140964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140971">SUSE bug 1140971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140972">SUSE bug 1140972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140992">SUSE bug 1140992</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-20836/">CVE-2018-20836</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10126/">CVE-2019-10126</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10638/">CVE-2019-10638</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10639/">CVE-2019-10639</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11599/">CVE-2019-11599</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13233/">CVE-2019-13233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496212" comment="kernel-docs-4.12.14-197.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496213" comment="kernel-obs-build-4.12.14-197.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496214" comment="kernel-source-4.12.14-197.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496215" comment="kernel-syms-4.12.14-197.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138183" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1117993" ref_url="https://bugzilla.suse.com/1117993" source="BUGZILLA"/>
		<reference ref_id="1123710" ref_url="https://bugzilla.suse.com/1123710" source="BUGZILLA"/>
		<reference ref_id="1127223" ref_url="https://bugzilla.suse.com/1127223" source="BUGZILLA"/>
		<reference ref_id="1127308" ref_url="https://bugzilla.suse.com/1127308" source="BUGZILLA"/>
		<reference ref_id="1131330" ref_url="https://bugzilla.suse.com/1131330" source="BUGZILLA"/>
		<reference ref_id="CVE-2009-5155" ref_url="https://www.suse.com/security/cve/CVE-2009-5155/" source="CVE"/>
		<reference ref_id="CVE-2019-9169" ref_url="https://www.suse.com/security/cve/CVE-2019-9169/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005729.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

Security issues fixed:

- CVE-2019-9169: Fixed a heap-based buffer over-read via an attempted case-insensitive regular-expression match (bsc#1127308).
- CVE-2009-5155: Fixed a denial of service in parse_reg_exp() (bsc#1127223).

Non-security issues fixed:

- Does no longer compress debug sections in crt*.o files (bsc#1123710)
- Fixes a concurrency problem in ldconfig (bsc#1117993)
- Fixes a race condition in pthread_mutex_lock while promoting to PTHREAD_MUTEX_ELISION_NP (bsc#1131330)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-18"/>
	<updated date="2019-07-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1117993">SUSE bug 1117993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123710">SUSE bug 1123710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127223">SUSE bug 1127223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127308">SUSE bug 1127308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131330">SUSE bug 1131330</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2009-5155/">CVE-2009-5155</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9169/">CVE-2019-9169</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496047" comment="glibc-devel-32bit-2.26-13.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496048" comment="glibc-devel-static-2.26-13.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496049" comment="glibc-utils-2.26-13.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138184" version="1" class="patch">
	<metadata>
		<title>Security update for subversion (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1142721" ref_url="https://bugzilla.suse.com/1142721" source="BUGZILLA"/>
		<reference ref_id="1142743" ref_url="https://bugzilla.suse.com/1142743" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11782" ref_url="https://www.suse.com/security/cve/CVE-2018-11782/" source="CVE"/>
		<reference ref_id="CVE-2019-0203" ref_url="https://www.suse.com/security/cve/CVE-2019-0203/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2031-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005766.html" source="SUSE-SU"/>
		<description>
This update for subversion to version 1.10.6 fixes the following issues:

Security issues fixed:

- CVE-2018-11782: Fixed a remote denial of service in svnserve 'get-deleted-rev' (bsc#1142743).
- CVE-2019-0203: Fixed a remote, unauthenticated denial of service in svnserve (bsc#1142721).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-31"/>
	<updated date="2019-07-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1142721">SUSE bug 1142721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142743">SUSE bug 1142743</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-11782/">CVE-2018-11782</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-0203/">CVE-2019-0203</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496058" comment="subversion-bash-completion-1.10.6-3.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496059" comment="subversion-perl-1.10.6-3.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496060" comment="subversion-python-1.10.6-3.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496061" comment="subversion-tools-1.10.6-3.6.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138185" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1094814" ref_url="https://bugzilla.suse.com/1094814" source="BUGZILLA"/>
		<reference ref_id="1138459" ref_url="https://bugzilla.suse.com/1138459" source="BUGZILLA"/>
		<reference ref_id="1141853" ref_url="https://bugzilla.suse.com/1141853" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20852" ref_url="https://www.suse.com/security/cve/CVE-2018-20852/" source="CVE"/>
		<reference ref_id="CVE-2019-10160" ref_url="https://www.suse.com/security/cve/CVE-2019-10160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005777.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

Security issue fixed:

- CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459).
- CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853).

Non-security issue fixed:

- Fixed an issue where the SIGINT signal was ignored or not handled (bsc#1094814).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-06"/>
	<updated date="2019-08-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1094814">SUSE bug 1094814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138459">SUSE bug 1138459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141853">SUSE bug 1141853</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20852/">CVE-2018-20852</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10160/">CVE-2019-10160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496062" comment="python3-tools-3.6.8-3.23.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138186" version="1" class="patch">
	<metadata>
		<title>Security update for osc (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1129889" ref_url="https://bugzilla.suse.com/1129889" source="BUGZILLA"/>
		<reference ref_id="1138977" ref_url="https://bugzilla.suse.com/1138977" source="BUGZILLA"/>
		<reference ref_id="1140697" ref_url="https://bugzilla.suse.com/1140697" source="BUGZILLA"/>
		<reference ref_id="1142518" ref_url="https://bugzilla.suse.com/1142518" source="BUGZILLA"/>
		<reference ref_id="1142662" ref_url="https://bugzilla.suse.com/1142662" source="BUGZILLA"/>
		<reference ref_id="1144211" ref_url="https://bugzilla.suse.com/1144211" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3685" ref_url="https://www.suse.com/security/cve/CVE-2019-3685/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005785.html" source="SUSE-SU"/>
		<description>
This update for osc to version 0.165.4 fixes the following issues:

Security issue fixed:

- CVE-2019-3685: Fixed broken TLS certificate handling allowing for a Man-in-the-middle attack (bsc#1142518).

Non-security issues fixed:

- support different token operations (runservice, release and rebuild) (requires OBS 2.10)
- fix osc token decode error
- offline build mode is now really offline and does not try to download the buildconfig
- osc build -define now works with python3
- fixes an issue where the error message on osc meta -e was not parsed correctly
- osc maintainer -s now works with python3
- simplified and fixed osc meta -e (bsc#1138977) 
- osc lbl now works with non utf8 encoding (bsc#1129889)
- add simpleimage as local build type 
- allow optional fork when creating a maintenance request
- fix RPMError fallback
- fix local caching for all package formats
- fix appname for trusted cert store
- osc -h does not break anymore when using plugins 
- switch to difflib.diff_bytes and sys.stdout.buffer.write for diffing.
  This will fix all decoding issues with osc diff, osc ci and osc rq -d
- fix osc ls -lb handling empty size and mtime
- removed decoding on osc api command.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-06"/>
	<updated date="2019-08-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1129889">SUSE bug 1129889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138977">SUSE bug 1138977</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140697">SUSE bug 1140697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142518">SUSE bug 1142518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142662">SUSE bug 1142662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144211">SUSE bug 1144211</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-3685/">CVE-2019-3685</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496216" comment="osc-0.165.4-3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138187" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1083710" ref_url="https://bugzilla.suse.com/1083710" source="BUGZILLA"/>
		<reference ref_id="1102247" ref_url="https://bugzilla.suse.com/1102247" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1119222" ref_url="https://bugzilla.suse.com/1119222" source="BUGZILLA"/>
		<reference ref_id="1123080" ref_url="https://bugzilla.suse.com/1123080" source="BUGZILLA"/>
		<reference ref_id="1127034" ref_url="https://bugzilla.suse.com/1127034" source="BUGZILLA"/>
		<reference ref_id="1127315" ref_url="https://bugzilla.suse.com/1127315" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1130972" ref_url="https://bugzilla.suse.com/1130972" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1134097" ref_url="https://bugzilla.suse.com/1134097" source="BUGZILLA"/>
		<reference ref_id="1134390" ref_url="https://bugzilla.suse.com/1134390" source="BUGZILLA"/>
		<reference ref_id="1134399" ref_url="https://bugzilla.suse.com/1134399" source="BUGZILLA"/>
		<reference ref_id="1135335" ref_url="https://bugzilla.suse.com/1135335" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1136217" ref_url="https://bugzilla.suse.com/1136217" source="BUGZILLA"/>
		<reference ref_id="1136342" ref_url="https://bugzilla.suse.com/1136342" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1136462" ref_url="https://bugzilla.suse.com/1136462" source="BUGZILLA"/>
		<reference ref_id="1136467" ref_url="https://bugzilla.suse.com/1136467" source="BUGZILLA"/>
		<reference ref_id="1137458" ref_url="https://bugzilla.suse.com/1137458" source="BUGZILLA"/>
		<reference ref_id="1137534" ref_url="https://bugzilla.suse.com/1137534" source="BUGZILLA"/>
		<reference ref_id="1137535" ref_url="https://bugzilla.suse.com/1137535" source="BUGZILLA"/>
		<reference ref_id="1137584" ref_url="https://bugzilla.suse.com/1137584" source="BUGZILLA"/>
		<reference ref_id="1137609" ref_url="https://bugzilla.suse.com/1137609" source="BUGZILLA"/>
		<reference ref_id="1137811" ref_url="https://bugzilla.suse.com/1137811" source="BUGZILLA"/>
		<reference ref_id="1137827" ref_url="https://bugzilla.suse.com/1137827" source="BUGZILLA"/>
		<reference ref_id="1138874" ref_url="https://bugzilla.suse.com/1138874" source="BUGZILLA"/>
		<reference ref_id="1139358" ref_url="https://bugzilla.suse.com/1139358" source="BUGZILLA"/>
		<reference ref_id="1139619" ref_url="https://bugzilla.suse.com/1139619" source="BUGZILLA"/>
		<reference ref_id="1140133" ref_url="https://bugzilla.suse.com/1140133" source="BUGZILLA"/>
		<reference ref_id="1140139" ref_url="https://bugzilla.suse.com/1140139" source="BUGZILLA"/>
		<reference ref_id="1140322" ref_url="https://bugzilla.suse.com/1140322" source="BUGZILLA"/>
		<reference ref_id="1140559" ref_url="https://bugzilla.suse.com/1140559" source="BUGZILLA"/>
		<reference ref_id="1140652" ref_url="https://bugzilla.suse.com/1140652" source="BUGZILLA"/>
		<reference ref_id="1140676" ref_url="https://bugzilla.suse.com/1140676" source="BUGZILLA"/>
		<reference ref_id="1140903" ref_url="https://bugzilla.suse.com/1140903" source="BUGZILLA"/>
		<reference ref_id="1140945" ref_url="https://bugzilla.suse.com/1140945" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1141312" ref_url="https://bugzilla.suse.com/1141312" source="BUGZILLA"/>
		<reference ref_id="1141401" ref_url="https://bugzilla.suse.com/1141401" source="BUGZILLA"/>
		<reference ref_id="1141402" ref_url="https://bugzilla.suse.com/1141402" source="BUGZILLA"/>
		<reference ref_id="1141452" ref_url="https://bugzilla.suse.com/1141452" source="BUGZILLA"/>
		<reference ref_id="1141453" ref_url="https://bugzilla.suse.com/1141453" source="BUGZILLA"/>
		<reference ref_id="1141454" ref_url="https://bugzilla.suse.com/1141454" source="BUGZILLA"/>
		<reference ref_id="1141478" ref_url="https://bugzilla.suse.com/1141478" source="BUGZILLA"/>
		<reference ref_id="1141558" ref_url="https://bugzilla.suse.com/1141558" source="BUGZILLA"/>
		<reference ref_id="1142023" ref_url="https://bugzilla.suse.com/1142023" source="BUGZILLA"/>
		<reference ref_id="1142052" ref_url="https://bugzilla.suse.com/1142052" source="BUGZILLA"/>
		<reference ref_id="1142083" ref_url="https://bugzilla.suse.com/1142083" source="BUGZILLA"/>
		<reference ref_id="1142112" ref_url="https://bugzilla.suse.com/1142112" source="BUGZILLA"/>
		<reference ref_id="1142115" ref_url="https://bugzilla.suse.com/1142115" source="BUGZILLA"/>
		<reference ref_id="1142119" ref_url="https://bugzilla.suse.com/1142119" source="BUGZILLA"/>
		<reference ref_id="1142220" ref_url="https://bugzilla.suse.com/1142220" source="BUGZILLA"/>
		<reference ref_id="1142221" ref_url="https://bugzilla.suse.com/1142221" source="BUGZILLA"/>
		<reference ref_id="1142254" ref_url="https://bugzilla.suse.com/1142254" source="BUGZILLA"/>
		<reference ref_id="1142350" ref_url="https://bugzilla.suse.com/1142350" source="BUGZILLA"/>
		<reference ref_id="1142351" ref_url="https://bugzilla.suse.com/1142351" source="BUGZILLA"/>
		<reference ref_id="1142354" ref_url="https://bugzilla.suse.com/1142354" source="BUGZILLA"/>
		<reference ref_id="1142359" ref_url="https://bugzilla.suse.com/1142359" source="BUGZILLA"/>
		<reference ref_id="1142450" ref_url="https://bugzilla.suse.com/1142450" source="BUGZILLA"/>
		<reference ref_id="1142623" ref_url="https://bugzilla.suse.com/1142623" source="BUGZILLA"/>
		<reference ref_id="1142673" ref_url="https://bugzilla.suse.com/1142673" source="BUGZILLA"/>
		<reference ref_id="1142701" ref_url="https://bugzilla.suse.com/1142701" source="BUGZILLA"/>
		<reference ref_id="1142868" ref_url="https://bugzilla.suse.com/1142868" source="BUGZILLA"/>
		<reference ref_id="1143003" ref_url="https://bugzilla.suse.com/1143003" source="BUGZILLA"/>
		<reference ref_id="1143045" ref_url="https://bugzilla.suse.com/1143045" source="BUGZILLA"/>
		<reference ref_id="1143105" ref_url="https://bugzilla.suse.com/1143105" source="BUGZILLA"/>
		<reference ref_id="1143185" ref_url="https://bugzilla.suse.com/1143185" source="BUGZILLA"/>
		<reference ref_id="1143189" ref_url="https://bugzilla.suse.com/1143189" source="BUGZILLA"/>
		<reference ref_id="1143191" ref_url="https://bugzilla.suse.com/1143191" source="BUGZILLA"/>
		<reference ref_id="1143209" ref_url="https://bugzilla.suse.com/1143209" source="BUGZILLA"/>
		<reference ref_id="1143507" ref_url="https://bugzilla.suse.com/1143507" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20855" ref_url="https://www.suse.com/security/cve/CVE-2018-20855/" source="CVE"/>
		<reference ref_id="CVE-2019-1125" ref_url="https://www.suse.com/security/cve/CVE-2019-1125/" source="CVE"/>
		<reference ref_id="CVE-2019-11810" ref_url="https://www.suse.com/security/cve/CVE-2019-11810/" source="CVE"/>
		<reference ref_id="CVE-2019-13631" ref_url="https://www.suse.com/security/cve/CVE-2019-13631/" source="CVE"/>
		<reference ref_id="CVE-2019-13648" ref_url="https://www.suse.com/security/cve/CVE-2019-13648/" source="CVE"/>
		<reference ref_id="CVE-2019-14283" ref_url="https://www.suse.com/security/cve/CVE-2019-14283/" source="CVE"/>
		<reference ref_id="CVE-2019-14284" ref_url="https://www.suse.com/security/cve/CVE-2019-14284/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005789.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2018-20855: An issue was discovered in the Linux kernel In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace(bsc#1143045).
- CVE-2019-1125: Exclude ATOMs from speculation through SWAPGS (bsc#1139358).
- CVE-2019-14283: In the Linux kernel, set_geometry in drivers/block/floppy.c did not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It could be triggered by an unprivileged local user when a floppy disk was inserted. NOTE: QEMU creates the floppy device by default. (bnc#1143191)
- CVE-2019-11810: An issue was discovered in the Linux kernel A NULL pointer dereference could occur when megasas_create_frame_pool() failed in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This caused a Denial of Service, related to a use-after-free (bnc#1134399).
- CVE-2019-13648: In the Linux kernel on the powerpc platform, when hardware transactional memory was disabled, a local user could cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sent a crafted signal frame. (bnc#1142254)
- CVE-2019-13631: In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel, a malicious USB device could send an HID report that triggered an out-of-bounds write during generation of debugging messages. (bnc#1142023)

The following non-security bugs were fixed:

- acpi/nfit: Always dump _DSM output payload (bsc#1142351).
- Add back sibling paca poiter to paca (bsc#1055117).
- Add support for crct10dif-vpmsum ().
- af_unix: remove redundant lockdep class (git-fixes).
- alsa: compress: Be more restrictive about when a drain is allowed (bsc#1051510).
- alsa: compress: Do not allow paritial drain operations on capture streams (bsc#1051510).
- alsa: compress: Fix regression on compressed capture streams (bsc#1051510).
- alsa: compress: Prevent bypasses of set_params (bsc#1051510).
- alsa: hda - Add a conexant codec entry to let mute led work (bsc#1051510).
- alsa: hda - Do not resume forcibly i915 HDMI/DP codec (bsc#1111666).
- alsa: hda - Fix intermittent CORB/RIRB stall on Intel chips (bsc#1111666).
- alsa: hda/hdmi - Fix i915 reverse port/pin mapping (bsc#1111666).
- alsa: hda/hdmi - Remove duplicated define (bsc#1111666).
- alsa: hda - Optimize resume for codecs without jack detection (bsc#1111666).
- alsa: hda/realtek: apply ALC891 headset fixup to one Dell machine (bsc#1051510).
- alsa: hda/realtek - Fixed Headphone Mic can't record on Dell platform (bsc#1051510).
- alsa: hda/realtek - Headphone Mic can't record after S3 (bsc#1051510).
- alsa: line6: Fix a typo (bsc#1051510).
- alsa: line6: Fix wrong altsetting for LINE6_PODHD500_1 (bsc#1051510).
- alsa: seq: Break too long mutex context in the write loop (bsc#1051510).
- alsa: usb-audio: Add quirk for Focusrite Scarlett Solo (bsc#1051510).
- alsa: usb-audio: Add quirk for MOTU MicroBook II (bsc#1051510).
- alsa: usb-audio: Cleanup DSD whitelist (bsc#1051510).
- alsa: usb-audio: Enable .product_name override for Emagic, Unitor 8 (bsc#1051510).
- alsa: usb-audio: fix Line6 Helix audio format rates (bsc#1111666).
- alsa: usb-audio: Sanity checks for each pipe and EP types (bsc#1051510).
- arm64: do not override dma_max_pfn (jsc#SLE-6197 bsc#1140559 LTC#173150).
- asoc : cs4265 : readable register too low (bsc#1051510).
- asoc: max98090: remove 24-bit format support if RJ is 0 (bsc#1051510).
- asoc: soc-pcm: BE dai needs prepare when pause release after resume (bsc#1051510).
- ath10k: add missing error handling (bsc#1111666).
- ath10k: add peer id check in ath10k_peer_find_by_id (bsc#1111666).
- ath10k: destroy sdio workqueue while remove sdio module (bsc#1111666).
- ath10k: Do not send probe response template for mesh (bsc#1111666).
- ath10k: Fix encoding for protected management frames (bsc#1111666).
- ath10k: fix incorrect multicast/broadcast rate setting (bsc#1111666).
- ath10k: fix PCIE device wake up failed (bsc#1111666).
- ath6kl: add some bounds checking (bsc#1051510).
- ath9k: Check for errors when reading SREV register (bsc#1111666).
- ath9k: correctly handle short radar pulses (bsc#1111666).
- ath: DFS JP domain W56 fixed pulse type 3 RADAR detection (bsc#1111666).
- batman-adv: fix for leaked TVLV handler (bsc#1051510).
- bcache: acquire bch_register_lock later in cached_dev_detach_finish() (bsc#1140652).
- bcache: acquire bch_register_lock later in cached_dev_free() (bsc#1140652).
- bcache: add code comments for journal_read_bucket() (bsc#1140652).
- bcache: Add comments for blkdev_put() in registration code path (bsc#1140652).
- bcache: add comments for closure_fn to be called in closure_queue() (bsc#1140652).
- bcache: add comments for kobj release callback routine (bsc#1140652).
- bcache: add comments for mutex_lock(b-&gt;write_lock) (bsc#1140652).
- bcache: add error check for calling register_bdev() (bsc#1140652).
- bcache: add failure check to run_cache_set() for journal replay (bsc#1140652).
- bcache: add io error counting in write_bdev_super_endio() (bsc#1140652).
- bcache: add more error message in bch_cached_dev_attach() (bsc#1140652).
- bcache: add pendings_cleanup to stop pending bcache device (bsc#1140652).
- bcache: add reclaimed_journal_buckets to struct cache_set (bsc#1140652).
- bcache: add return value check to bch_cached_dev_run() (bsc#1140652).
- bcache: avoid a deadlock in bcache_reboot() (bsc#1140652).
- bcache: avoid clang -Wunintialized warning (bsc#1140652).
- bcache: avoid flushing btree node in cache_set_flush() if io disabled (bsc#1140652).
- bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set (bsc#1140652).
- bcache: check CACHE_SET_IO_DISABLE bit in bch_journal() (bsc#1140652).
- bcache: check CACHE_SET_IO_DISABLE in allocator code (bsc#1140652).
- bcache: check c-&gt;gc_thread by IS_ERR_OR_NULL in cache_set_flush() (bsc#1140652).
- bcache: Clean up bch_get_congested() (bsc#1140652).
- bcache: destroy dc-&gt;writeback_write_wq if failed to create dc-&gt;writeback_thread (bsc#1140652).
- bcache: do not assign in if condition in bcache_device_init() (bsc#1140652).
- bcache: do not set max writeback rate if gc is running (bsc#1140652).
- bcache: fix a race between cache register and cacheset unregister (bsc#1140652).
- bcache: fix crashes stopping bcache device before read miss done (bsc#1140652).
- bcache: fix failure in journal relplay (bsc#1140652).
- bcache: fix inaccurate result of unused buckets (bsc#1140652).
- bcache: fix mistaken sysfs entry for io_error counter (bsc#1140652).
- bcache: fix potential deadlock in cached_def_free() (bsc#1140652).
- bcache: fix race in btree_flush_write() (bsc#1140652).
- bcache: fix return value error in bch_journal_read() (bsc#1140652).
- bcache: fix stack corruption by PRECEDING_KEY() (bsc#1140652).
- bcache: fix wrong usage use-after-freed on keylist in out_nocoalesce branch of btree_gc_coalesce (bsc#1140652).
- bcache: ignore read-ahead request failure on backing device (bsc#1140652).
- bcache: improve bcache_reboot() (bsc#1140652).
- bcache: improve error message in bch_cached_dev_run() (bsc#1140652).
- bcache: make bset_search_tree() be more understandable (bsc#1140652).
- bcache: make is_discard_enabled() static (bsc#1140652).
- bcache: more detailed error message to bcache_device_link() (bsc#1140652).
- bcache: move definition of 'int ret' out of macro read_bucket() (bsc#1140652).
- bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() (bsc#1140652).
- bcache: only clear BTREE_NODE_dirty bit when it is set (bsc#1140652).
- bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached (bsc#1140652).
- bcache: performance improvement for btree_flush_write() (bsc#1140652).
- bcache: remove redundant LIST_HEAD(journal) from run_cache_set() (bsc#1140652).
- bcache: remove redundant LIST_HEAD(journal) from run_cache_set() (bsc#1140652).
- bcache: remove retry_flush_write from struct cache_set (bsc#1140652).
- bcache: remove unncessary code in bch_btree_keys_init() (bsc#1140652).
- bcache: remove unnecessary prefetch() in bset_search_tree() (bsc#1140652).
- bcache: return error immediately in bch_journal_replay() (bsc#1140652).
- bcache: Revert 'bcache: fix high CPU occupancy during journal' (bsc#1140652).
- bcache: Revert 'bcache: free heap cache_set-&gt;flush_btree in bch_journal_free' (bsc#1140652).
- bcache: set largest seq to ja-&gt;seq[bucket_index] in journal_read_bucket() (bsc#1140652).
- bcache: shrink btree node cache after bch_btree_check() (bsc#1140652).
- bcache: stop writeback kthread and kworker when bch_cached_dev_run() failed (bsc#1140652).
- bcache: use sysfs_match_string() instead of __sysfs_match_string() (bsc#1140652).
- be2net: Fix number of Rx queues used for flow hashing (networking-stable-19_06_18).
- be2net: Signal that the device cannot transmit during reconfiguration (bsc#1127315).
- be2net: Synchronize be_update_queues with dev_watchdog (bsc#1127315).
- block, bfq: NULL out the bic when it's no longer valid (bsc#1142359).
- bnx2x: Prevent load reordering in tx completion processing (bsc#1142868).
- bnxt_en: Cap the returned MSIX vectors to the RDMA driver (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Disable bus master during PCI shutdown and driver unload (bsc#1104745).
- bnxt_en: Fix aggregation buffer leak under OOM condition (networking-stable-19_05_31).
- bnxt_en: Fix statistics context reservation logic for RDMA driver (bsc#1104745).
- bnxt_en: Suppress error messages when querying DSCP DCB capabilities (bsc#1104745).
- bonding: fix arp_validate toggling in active-backup mode (networking-stable-19_05_14).
- bonding: Force slave speed check after link state recovery for 802.3ad (bsc#1137584).
- bpf: btf: fix the brackets of BTF_INT_OFFSET() (bsc#1083647).
- bpf: fix callees pruning callers (bsc#1109837).
- bpf: fix nested bpf tracepoints with per-cpu data (bsc#1083647).
- bpf, x64: fix stack layout of JITed bpf code (bsc#1083647).
- bpf, x64: save 5 bytes in prologue when ebpf insns came from cbpf (bsc#1083647).
- bridge: Fix error path for kobject_init_and_add() (networking-stable-19_05_14).
- btrfs: fix race between block group removal and block group allocation (bsc#1143003).
- carl9170: fix misuse of device driver API (bsc#1111666).
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() (bsc#1141478).
- clk: qcom: Fix -Wunused-const-variable (bsc#1051510).
- clk: rockchip: Do not yell about bad mmc phases when getting (bsc#1051510).
- clk: tegra210: fix PLLU and PLLU_OUT1 (bsc#1051510).
- Correct iwlwifi 22000 series ucode file name (bsc#1142673)
- Correct the buggy backport about AER / DPC pcie stuff (bsc#1142623)
- cpufreq: acpi-cpufreq: Report if CPU does not support boost technologies (bsc#1051510).
- cpufreq: brcmstb-avs-cpufreq: Fix initial command check (bsc#1051510).
- cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency (bsc#1051510).
- cpufreq: check if policy is inactive early in __cpufreq_get() (bsc#1051510).
- cpufreq: kirkwood: fix possible object reference leak (bsc#1051510).
- cpufreq/pasemi: fix possible object reference leak (bsc#1051510).
- cpufreq: pmac32: fix possible object reference leak (bsc#1051510).
- cpufreq: ppc_cbe: fix possible object reference leak (bsc#1051510).
- cpufreq: Use struct kobj_attribute instead of struct global_attr (bsc#1051510).
- crypto: arm64/sha1-ce - correct digest for empty data in finup (bsc#1051510).
- crypto: arm64/sha2-ce - correct digest for empty data in finup (bsc#1051510).
- crypto: ccp - Fix 3DES complaint from ccp-crypto module (bsc#1051510).
- crypto: ccp - fix AES CFB error exposed by new test vectors (bsc#1051510).
- crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL (bsc#1051510).
- crypto: ccp/gcm - use const time tag comparison (bsc#1051510).
- crypto: ccp - memset structure fields to zero before reuse (bsc#1051510).
- crypto: ccp - Validate the the error value used to index error messages (bsc#1051510).
- crypto: chacha20poly1305 - fix atomic sleep when using async algorithm (bsc#1051510).
- crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe (bsc#1051510).
- crypto: ghash - fix unaligned memory access in ghash_setkey() (bsc#1051510).
- crypto: talitos - Align SEC1 accesses to 32 bits boundaries (bsc#1051510).
- crypto: talitos - check data blocksize in ablkcipher (bsc#1051510).
- crypto: talitos - fix CTR alg blocksize (bsc#1051510).
- crypto: talitos - fix max key size for sha384 and sha512 (bsc#1051510).
- crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking (bsc#1051510).
- crypto: talitos - properly handle split ICV (bsc#1051510).
- crypto: talitos - reduce max key size for SEC1 (bsc#1051510).
- crypto: talitos - rename alternative AEAD algos (bsc#1051510).
- dasd_fba: Display '00000000' for zero page when dumping sense (bsc#1123080).
- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc (bsc#1111666).
- dma-direct: add support for allocation from ZONE_DMA and ZONE_DMA32 (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-direct: do not retry allocation for no-op GFP_DMA (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-direct: retry allocations using GFP_DMA for small masks (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dmaengine: hsu: Revert 'set HSU_CH_MTSR to memory width' (bsc#1051510).
- dma-mapping: move dma_mark_clean to dma-direct.h (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-mapping: move swiotlb arch helpers to a new header (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-mapping: take dma_pfn_offset into account in dma_max_pfn (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dpaa_eth: fix SG frame cleanup (networking-stable-19_05_14).
- drm/amd/display: Make some functions static (bsc#1111666).
- drm/atmel-hlcdc: revert shift by 8 (bsc#1111666).
- drm/i915/cml: Introduce Comet Lake PCH (jsc#SLE-6681).
- drm/i915/icl: Add WaDisableBankHangMode (bsc#1111666).
- drm/meson: Add support for XBGR8888 &amp; ABGR8888 formats (bsc#1051510).
- drm/msm/a3xx: remove TPL1 regs from snapshot (bsc#1051510).
- drm/msm/mdp5: Fix mdp5_cfg_init error return (bsc#1111666).
- drm/nouveau/i2c: Enable i2c pads &amp; busses during preinit (bsc#1051510).
- drm: return -EFAULT if copy_to_user() fails (bsc#1111666).
- drm/rockchip: Properly adjust to a true clock in adjusted_mode (bsc#1051510).
- drm/udl: introduce a macro to convert dev to udl (bsc#1111666).
- drm/udl: move to embedding drm device inside udl device (bsc#1111666).
- drm/udl: Replace drm_dev_unref with drm_dev_put (bsc#1111666).
- drm/vc4: fix fb references in async update (bsc#1141312).
- drm/vmwgfx: Honor the sg list segment size limitation (bsc#1111666).
- e1000e: start network tx queue only when link is up (bsc#1051510).
- Enable intel-speed-select driver and update supported.conf (jsc#SLE-5364)
- ethtool: check the return value of get_regs_len (git-fixes).
- ethtool: fix potential userspace buffer overflow (networking-stable-19_06_09).
- Fix kABI for asus-wmi quirk_entry field addition (bsc#1051510).
- Fix memory leak in sctp_process_init (networking-stable-19_06_09).
- fork, memcg: fix cached_stacks case (bsc#1134097).
- fork, memcg: fix crash in free_thread_stack on memcg charge fail (bsc#1134097).
- fpga: add intel stratix10 soc fpga manager driver (jsc#SLE-7057).
- fpga: stratix10-soc: fix use-after-free on s10_init() (jsc#SLE-7057).
- fpga: stratix10-soc: fix wrong of_node_put() in init function (jsc#jsc#SLE-7057).
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM (bsc#1111666).
- hid: wacom: correct touch resolution x/y typo (bsc#1051510).
- hid: wacom: generic: Correct pad syncing (bsc#1051510).
- hid: wacom: generic: only switch the mode on devices with LEDs (bsc#1051510).
- hid: wacom: generic: read HID_DG_CONTACTMAX from any feature report (bsc#1051510).
- ib/ipoib: Add child to parent list only if device initialized (bsc#1103992).
- ib/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE (bsc#1103991).
- idr: fix overflow case for idr_for_each_entry_ul() (bsc#1109837).
- input: elantech - enable middle button support on 2 ThinkPads (bsc#1051510).
- input: imx_keypad - make sure keyboard can always wake up system (bsc#1051510).
- input: psmouse - fix build error of multiple definition (bsc#1051510).
- input: synaptics - enable SMBUS on T480 thinkpad trackpad (bsc#1051510).
- input: tm2-touchkey - acknowledge that setting brightness is a blocking call (bsc#1129770).
- intel_th: msu: Fix single mode with disabled IOMMU (bsc#1051510).
- iommu-helper: mark iommu_is_span_boundary as inline (jsc#SLE-6197 bsc#1140559 LTC#173150).
- ipv4: Fix raw socket lookup for local traffic (networking-stable-19_05_14).
- ipv4/igmp: fix another memory leak in igmpv3_del_delrec() (networking-stable-19_05_31).
- ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST (networking-stable-19_05_31).
- ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop (git-fixes).
- ipv6: Consider sk_bound_dev_if when binding a raw socket to an address (networking-stable-19_05_31).
- ipv6: fix EFAULT on sendto with icmpv6 and hdrincl (networking-stable-19_06_09).
- ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero (networking-stable-19_06_18).
- ipv6: use READ_ONCE() for inet-&gt;hdrincl as in ipv4 (networking-stable-19_06_09).
- iwlwifi: correct one of the PCI struct names (bsc#1111666).
- iwlwifi: do not WARN when calling iwl_get_shared_mem_conf with RF-Kill (bsc#1111666).
- iwlwifi: fix cfg structs for 22000 with different RF modules (bsc#1111666).
- iwlwifi: fix devices with PCI Device ID 0x34F0 and 11ac RF modules (bsc#1111666).
- iwlwifi: Fix double-free problems in iwl_req_fw_callback() (bsc#1111666).
- iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices (bsc#1111666).
- iwlwifi: mvm: Drop large non sta frames (bsc#1111666).
- iwlwifi: pcie: do not service an interrupt that was masked (bsc#1111666).
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X (bsc#1111666).
- kabi fix for hda_codec.relaxed_resume flag (bsc#1111666).
- kabi: Fix lost iommu-helper symbols on arm64 (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: mask changes made by basic protected virtualization support (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: mask changes made by swiotlb for protected virtualization (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: mask changes made by use of DMA memory for adapter interrupts (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: remove unused hcall definition (bsc#1140322 LTC#176270).
- kbuild: use -flive-patching when CONFIG_LIVEPATCH is enabled (bsc#1071995).
- kernel: jump label transformation performance (bsc#1137534 bsc#1137535 			LTC#178058 LTC#178059).
- kvm: arm/arm64: vgic-its: Take the srcu lock when parsing the memslots (bsc#1133021).
- kvm: arm/arm64: vgic-its: Take the srcu lock when writing to guest memory (bsc#1133021).
- kvm: mmu: Fix overflow on kvm mmu page limit calculation (bsc#1135335).
- kvm/mmu: kABI fix for *_mmu_pages changes in struct kvm_arch (bsc#1135335).
- kvm: polling: add architecture backend to disable polling (bsc#1119222).
- kvm: s390: change default halt poll time to 50us (bsc#1119222).
- kvm: s390: enable CONFIG_HAVE_kvm_NO_POLL (bsc#1119222) We need to enable CONFIG_HAVE_kvm_NO_POLL for bsc#1119222
- kvm: s390: fix typo in parameter description (bsc#1119222).
- kvm: s390: kABI Workaround for 'kvm_vcpu_stat' Add halt_no_poll_steal to kvm_vcpu_stat. Hide it from the kABI checker.
- kvm: s390: kABI Workaround for 'lowcore' (bsc#1119222).
- kvm: s390: provide kvm_arch_no_poll function (bsc#1119222).
- kvm: svm/avic: Do not send AVIC doorbell to self (bsc#1140133).
- kvm: SVM: Fix detection of AMD Errata 1096 (bsc#1142354).
- lapb: fixed leak of control-blocks (networking-stable-19_06_18).
- lib: fix stall in __bitmap_parselist() (bsc#1051510).
- libnvdimm/namespace: Fix label tracking error (bsc#1142350).
- libnvdimm/region: Register badblocks before namespaces (bsc#1143209).
- lib/bitmap.c: make bitmap_parselist() thread-safe and much faster (bsc#1143507).
- lib/scatterlist: Fix mapping iterator when sg-&gt;offset is greater than PAGE_SIZE (bsc#1051510).
- livepatch: Remove duplicate warning about missing reliable stacktrace support (bsc#1071995).
- livepatch: Use static buffer for debugging messages under rq lock (bsc#1071995).
- llc: fix skb leak in llc_build_and_send_ui_pkt() (networking-stable-19_05_31).
- mac80211: do not start any work during reconfigure flow (bsc#1111666).
- mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he() (bsc#1111666).
- mac80211: free peer keys before vif down in mesh (bsc#1111666).
- mac80211: mesh: fix RCU warning (bsc#1111666).
- mac80211: only warn once on chanctx_conf being NULL (bsc#1111666).
- media: cpia2_usb: first wake up, then free in disconnect (bsc#1135642).
- media: marvell-ccic: fix DMA s/g desc number calculation (bsc#1051510).
- media: s5p-mfc: Make additional clocks optional (bsc#1051510).
- media: v4l2: Test type instead of cfg-&gt;type in v4l2_ctrl_new_custom() (bsc#1051510).
- media: vivid: fix incorrect assignment operation when setting video mode (bsc#1051510).
- mei: bus: need to unlink client before freeing (bsc#1051510).
- mei: me: add denverton innovation engine device IDs (bsc#1051510).
- mei: me: add gemini lake devices id (bsc#1051510).
- memory: tegra: Fix integer overflow on tick value calculation (bsc#1051510).
- memstick: Fix error cleanup path of memstick_init (bsc#1051510).
- mfd: intel-lpss: Release IDA resources (bsc#1051510).
- mips: fix an off-by-one in dma_capable (jsc#SLE-6197 bsc#1140559 LTC#173150).
- mlxsw: spectrum_dcb: Configure DSCP map as the last rule is removed (bsc#1112374).
- mmc: sdhci-pci: Try 'cd' for card-detect lookup before using NULL (bsc#1051510).
- mm: migrate: Fix reference check race between __find_get_block() and migration (bnc#1137609).
- mm/nvdimm: add is_ioremap_addr and use that to check ioremap address (bsc#1140322 LTC#176270).
- mm, page_alloc: fix has_unmovable_pages for HugePages (bsc#1127034).
- mm: replace all open encodings for NUMA_NO_NODE (bsc#1140322 LTC#176270).
- mt7601u: do not schedule rx_tasklet when the device has been disconnected (bsc#1111666).
- mt7601u: fix possible memory leak when the device is disconnected (bsc#1111666).
- neigh: fix use-after-free read in pneigh_get_next (networking-stable-19_06_18).
- net/af_iucv: build proper skbs for HiperTransport (bsc#1142221 LTC#179332).
- net/af_iucv: remove GFP_DMA restriction for HiperTransport (bsc#1142112 bsc#1142221 LTC#179334 LTC#179332).
- net/af_iucv: remove GFP_DMA restriction for HiperTransport (bsc#1142221 LTC#179332).
- net: avoid weird emergency message (networking-stable-19_05_21).
- net: fec: fix the clk mismatch in failed_reset path (networking-stable-19_05_31).
- netfilter: conntrack: fix calculation of next bucket number in early_drop (git-fixes).
- net-gro: fix use-after-free read in napi_gro_frags() (networking-stable-19_05_31).
- net: hns3: Fix inconsistent indenting (bsc#1140676).
- net: hns: fix ICMP6 neighbor solicitation messages discard problem (bsc#1140676).
- net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw() (bsc#1140676).
- net: hns: Fix loopback test failed at copper ports (bsc#1140676).
- net: hns: Fix probabilistic memory overwrite when HNS driver initialized (bsc#1140676).
- net: hns: fix unsigned comparison to less than zero (bsc#1140676).
- net: hns: Fix WARNING when remove HNS driver with SMMU enabled (bsc#1140676).
- net: hns: Use NAPI_POLL_WEIGHT for hns driver (bsc#1140676).
- net/mlx4_core: Change the error print to info print (networking-stable-19_05_21).
- net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query (networking-stable-19_06_09).
- net/mlx5: Allocate root ns memory using kzalloc to match kfree (networking-stable-19_05_31).
- net/mlx5: Avoid double free in fs init error unwinding path (networking-stable-19_05_31).
- net/mlx5e: Rx, Fix checksum calculation for new hardware (bsc#1127611).
- net: mvneta: Fix err code path of probe (networking-stable-19_05_31).
- net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value (networking-stable-19_05_31).
- net: openvswitch: do not free vport if register_netdevice() is failed (networking-stable-19_06_18).
- net/packet: fix memory leak in packet_set_ring() (git-fixes).
- net: rds: fix memory leak in rds_ib_flush_mr_pool (networking-stable-19_06_09).
- net: seeq: fix crash caused by not set dev.parent (networking-stable-19_05_14).
- net: stmmac: fix reset gpio free missing (networking-stable-19_05_31).
- net/tls: fix socket wmem accounting on fallback with netem (bsc#1109837).
- net/tls: make sure offload also gets the keys wiped (bsc#1109837).
- net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions (networking-stable-19_05_21).
- nvme: fix memory leak caused by incorrect subsystem free (bsc#1143185).
- ocfs2: add first lock wait time in locking_state (bsc#1134390).
- ocfs2: add last unlock times in locking_state (bsc#1134390).
- ocfs2: add locking filter debugfs file (bsc#1134390).
- p54usb: Fix race between disconnect and firmware loading (bsc#1111666).
- packet: Fix error path in packet_init (networking-stable-19_05_14).
- packet: in recvmsg msg_name return at least sizeof sockaddr_ll (git-fixes).
- pci/aer: Use cached AER Capability offset (bsc#1142623).
- pci: Always allow probing with driver_override (bsc#1051510).
- pci: hv: Add hv_pci_remove_slots() when we unload the driver (bsc#1142701).
- pci: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (bsc#1142701).
- pci: hv: Fix a memory leak in hv_eject_device_work() (bsc#1142701).
- pci: hv: Fix a use-after-free bug in hv_eject_device_work() (bsc#1142701).
- pci: hv: Fix return value check in hv_pci_assign_slots() (bsc#1142701).
- pci: hv: Remove unused reason for refcount handler (bsc#1142701).
- pci: hv: support reporting serial number as slot information (bsc#1142701).
- pci/P2PDMA: Fix missing check for dma_virt_ops (bsc#1111666).
- pci / PM: Use SMART_SUSPEND and LEAVE_SUSPENDED flags for PCIe ports (bsc#1142623).
- pci/portdrv: Add #defines for AER and DPC Interrupt Message Number masks (bsc#1142623).
- pci/portdrv: Consolidate comments (bsc#1142623).
- pci/portdrv: Disable port driver in compat mode (bsc#1142623).
- pci/portdrv: Remove pcie_portdrv_err_handler.slot_reset (bsc#1142623).
- pci: portdrv: Restore PCI config state on slot reset (bsc#1142623).
- pci/portdrv: Support PCIe services on subtractive decode bridges (bsc#1142623).
- pci/portdrv: Use conventional Device ID table formatting (bsc#1142623).
- pci: Return error if cannot probe VF (bsc#1051510).
- pkey: Indicate old mkvp only if old and current mkvp are different (bsc#1137827 LTC#178090).
- pktgen: do not sleep with the thread lock held (git-fixes).
- platform/x86: asus-nb-wmi: Support ALS on the Zenbook UX430UQ (bsc#1051510).
- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi (bsc#1051510).
- platform/x86: intel_turbo_max_3: Remove restriction for HWP platforms (jsc#SLE-5439).
- platform/x86: ISST: Add common API to register and handle ioctls (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mailbox interface via MSRs (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mailbox interface via PCI (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mmio interface (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select PUNIT MSR interface (jsc#SLE-5364).
- platform/x86: ISST: Add IOCTL to Translate Linux logical CPU to PUNIT CPU number (jsc#SLE-5364).
- platform/x86: ISST: Restore state on resume (jsc#SLE-5364).
- platform/x86: ISST: Store per CPU information (jsc#SLE-5364).
- platform/x86: pmc_atom: Add CB4063 Beckhoff Automation board to critclk_systems DMI table (bsc#1051510).
- powerpc/64s: Remove POWER9 DD1 support (bsc#1055117, LTC#159753, git-fixes).
- powerpc/crypto: Use cheaper random numbers for crc-vpmsum self-test ().
- powerpc/mm: Change function prototype (bsc#1055117).
- powerpc/mm: Consolidate numa_enable check and min_common_depth check (bsc#1140322 LTC#176270).
- powerpc/mm/drconf: Use NUMA_NO_NODE on failures instead of node 0 (bsc#1140322 LTC#176270).
- powerpc/mm: Fix node look up with numa=off boot (bsc#1140322 LTC#176270).
- powerpc/mm/hugetlb: Update huge_ptep_set_access_flags to call __ptep_set_access_flags directly (bsc#1055117).
- powerpc/mm/radix: Change pte relax sequence to handle nest MMU hang (bsc#1055117).
- powerpc/mm/radix: Move function from radix.h to pgtable-radix.c (bsc#1055117).
- powerpc/papr_scm: Force a scm-unbind if initial scm-bind fails (bsc#1140322 LTC#176270).
- powerpc/papr_scm: Update drc_pmem_unbind() to use H_SCM_UNBIND_ALL (bsc#1140322 LTC#176270).
- powerpc/pseries: Update SCM hcall op-codes in hvcall.h (bsc#1140322 LTC#176270).
- powerpc/watchpoint: Restore NV GPRs while returning from exception (bsc#1140945 bsc#1141401 bsc#1141402 bsc#1141452 bsc#1141453 bsc#1141454 LTC#178983 LTC#179191 LTC#179192 LTC#179193 LTC#179194 LTC#179195).
- ppc: Convert mmu context allocation to new IDA API (bsc#1139619 LTC#178538).
- ppp: deflate: Fix possible crash in deflate_init (networking-stable-19_05_21).
- qed: Fix build error without CONFIG_DEVLINK (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix -Wmaybe-uninitialized false positive (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index (jsc#SLE-4693 bsc#1136462).
- rdma/odp: Fix missed unlock in non-blocking invalidate_start (bsc#1103992).
- rdma/srp: Accept again source addresses that do not have a port number (bsc#1103992).
- rdma/srp: Document srp_parse_in() arguments (bsc#1103992 ).
- rdma/uverbs: check for allocation failure in uapi_add_elm() (bsc#1103992).
- rds: ib: fix 'passing zero to ERR_PTR()' warning (git-fixes).
- Revert 'bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()' (bsc#1140652).
- Revert 'e1000e: fix cyclic resets at link up with active tx' (bsc#1051510).
- Revert 'livepatch: Remove reliable stacktrace check in klp_try_switch_task()' (bsc#1071995).
- Revert 'serial: 8250: Do not service RX FIFO if interrupts are disabled' (bsc#1051510).
- rtlwifi: rtl8192cu: fix error handle when usb probe failed (bsc#1111666).
- rtnetlink: always put IFLA_LINK for links with a link-netnsid (networking-stable-19_05_21).
- s390: add alignment hints to vector load and store (jsc#SLE-6907 LTC#175887).
- s390/airq: use DMA memory for adapter interrupts (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cio: add basic protected virtualization support (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cio: introduce DMA pools to cio (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cpum_cf: add ctr_stcctm() function (jsc#SLE-6904 ).
- s390/cpum_cf: Add minimal in-kernel interface for counter measurements (jsc#SLE-6904).
- s390/cpum_cf: Add support for CPU-MF SVN 6 (jsc#SLE-6904 ).
- s390/cpum_cf_diag: Add support for CPU-MF SVN 6 (jsc#SLE-6904 ).
- s390/cpum_cf_diag: Add support for s390 counter facility diagnostic trace (jsc#SLE-6904).
- s390/cpum_cf: introduce kernel_cpumcf_alert() to obtain measurement alerts (jsc#SLE-6904).
- s390/cpum_cf: introduce kernel_cpumcf_avail() function (jsc#SLE-6904).
- s390/cpum_cf: move counter set controls to a new header file (jsc#SLE-6904).
- s390/cpum_cf: prepare for in-kernel counter measurements (jsc#SLE-6904).
- s390/cpum_cf: rename per-CPU counter facility structure and variables (jsc#SLE-6904).
- s390/cpumf: Add extended counter set definitions for model 8561 and 8562 (bsc#1142052 LTC#179320).
- s390/cpu_mf: add store cpu counter multiple instruction support (jsc#SLE-6904).
- s390/cpumf: Fix warning from check_processor_id (jsc#SLE-6904 ).
- s390/cpu_mf: move struct cpu_cf_events and per-CPU variable to header file (jsc#SLE-6904).
- s390/cpu_mf: replace stcctm5() with the stcctm() function (jsc#SLE-6904).
- s390/dma: provide proper ARCH_ZONE_DMA_BITS value (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/mm: force swiotlb for protected virtualization (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142119 LTC#179331).
- s390/qeth: be drop monitor friendly (bsc#1142115 LTC#179337).
- s390/qeth: be drop monitor friendly (bsc#1142220 LTC#179335).
- s390: remove the unused dma_capable helper (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390: report new CPU capabilities (jsc#SLE-6907 LTC#175887).
- s390/vtime: steal time exponential moving average (bsc#1119222).
- s390/zcrypt: Fix wrong dispatching for control domain CPRBs (bsc#1137811 LTC#178088).
- scripts/git_sort/git_sort.py: Add mmots tree.
- scsi: cxgb4i: add wait_for_completion() (jsc#SLE-4678 bsc#1136342).
- scsi: cxgbi: KABI: fix handle completion etc (jsc#SLE-4678 bsc#1136342).
- scsi: cxgbi: remove redundant __kfree_skb call on skb and free cst-&gt;atid (jsc#SLE-4678 bsc#1136342).
- scsi: fc: add FPIN ELS definition (bsc#1136217,jsc#SLE-4722).
- scsi/fc: kABI fixes for new ELS_FPIN definition (bsc#1136217,jsc#SLE-4722).
- scsi: ibmvfc: fix WARN_ON during event pool release (bsc#1137458 LTC#178093).
- scsi: lpfc: Add loopback testing to trunking mode (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: add support for posting FC events on FPIN reception (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Annotate switch/case fall-through (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: avoid uninitialized variable warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Cancel queued work for an IO when processing a received ABTS (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Change smp_processor_id() into raw_smp_processor_id() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Convert bootstrap mbx polling from msleep to udelay (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Coordinate adapter error handling with offline handling (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct boot bios information to FDMI registration (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct localport timeout duration error (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct __lpfc_sli_issue_iocb_s4 lockdep check (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct nvmet buffer free race condition (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Declare local functions static (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Enhance 6072 log string (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix 32-bit format string warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix a handful of indentation issues (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix alloc context on oas lun creations (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix a recently introduced compiler warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix BFS crash with DIX enabled (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix build error (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix calls to dma_set_mask_and_coherent() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix deadlock due to nested hbalock call (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix driver crash in target reset handler (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix duplicate log message numbers (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix error code if kcalloc() fails (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix error codes in lpfc_sli4_pci_mem_setup() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix fc4type information for FDMI (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix fcp_rsp_len checking on lun reset (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix FDMI fc4type for nvme support (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix FDMI manufacturer attribute value (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix handling of trunk links state reporting (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix hardlockup in scsi_cmd_iocb_cmpl (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix HDMI2 registration string for symbolic name (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix incorrect logical link speed on trunks when links down (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix indentation and balance braces (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix io lost on host resets (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix kernel warnings related to smp_processor_id() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix link speed reporting for 4-link trunk (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix location of SCSI ktime counters (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix lpfc_nvmet_mrq attribute handling when 0 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix mailbox hang on adapter init (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix memory leak in abnormal exit path from lpfc_eq_create (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix missing wakeups on abort threads (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet async receive buffer replenishment (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet handling of first burst cmd (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet handling of received ABTS for unmapped frames (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet target abort cmd matching (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix oops when driver is loaded with 1 interrupt vector (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix poor use of hardware queues if fewer irq vectors (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix protocol support on G6 and G7 adapters (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix PT2PT PLOGI collison stopping discovery (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix unused variable warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fixup eq_clr_intr references (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix use-after-free mailbox cmd completion (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Make lpfc_sli4_oas_verify static (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Move trunk_errmsg[] from a header file into a .c file (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Prevent 'use after free' memory overwrite in nvmet LS handling (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Reduce memory footprint for lpfc_queue (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove set but not used variable 'phys_id' (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove set-but-not-used variables (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove unused functions (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Resolve inconsistent check of hdwq in lpfc_scsi_cmd_iocb_cmpl (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Resolve irq-unsafe lockdep heirarchy warning in lpfc_io_free (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: resolve static checker warning in lpfc_sli4_hba_unset (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Revert message logging on unsupported topology (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Revise message when stuck due to unresponsive adapter (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Rework misleading nvme not supported in firmware message (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Separate CQ processing for nvmet_fc upcalls (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Specify node affinity for queue memory allocation (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Stop adapter if pci errors detected (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update Copyright in driver version (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update lpfc version to 12.2.0.1 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update lpfc version to 12.2.0.3 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: use dma_set_mask_and_coherent (bsc#1136217,jsc#SLE-4722).
- scsi: qedf: Add additional checks for io_req-&gt;sc_cmd validity (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add a flag to help debugging io_req which could not be cleaned (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add comment to display logging levels (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add driver state to 'driver_stats' debugfs node (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add LBA to underrun debug messages (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload check (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add missing return in qedf_scsi_done() (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add port_id for fcport into initiate_cleanup debug message (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add return value to log message if scsi_add_host fails (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Change MSI-X load error message (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check both the FCF and fabric ID before servicing clear virtual link (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check for fcoe_libfc_config failure (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check for tm_flags instead of cmd_type during cleanup (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check the return value of start_xmit (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Cleanup rrq_work after QEDF_CMD_OUTSTANDING is cleared (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Correctly handle refcounting of rdata (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Do not queue anything if upload is in progress (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Do not send ABTS for under run scenario (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: fc_rport_priv reference counting fixes (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Fix lport may be used uninitialized warning (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Log message if scsi_add_host fails (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Modify flush routine to handle all I/Os and TMF (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Print fcport information on wait for upload timeout (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Print scsi_cmd backpointer in good completion path if the command is still being used (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: remove memset/memcpy to nfunc and use func instead (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Remove set but not used variable 'fr_len' (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: remove set but not used variables (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Update the driver version to 8.37.25.19 (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Update the driver version to 8.37.25.20 (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Wait for upload and link down processing during soft ctx reset (bsc#1136467 jsc#SLE-4694).
- scsi: qedi: add module param to set ping packet size (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Fix spelling mistake 'OUSTANDING' -&gt; 'OUTSTANDING' (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev' (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693 bsc#1136462).
- scsi: qla2xxx: do not crash on uninitialized pool list (boo#1138874).
- scsi: scsi_transport_fc: Add FPIN fc event codes (bsc#1136217,jsc#SLE-4722).
- scsi: scsi_transport_fc: refactor event posting routines (bsc#1136217,jsc#SLE-4722).
- sctp: Free cookie before we memdup a new one (networking-stable-19_06_18).
- sctp: silence warns on sctp_stream_init allocations (bsc#1083710).
- serial: uartps: Do not add a trailing semicolon to macro (bsc#1051510).
- serial: uartps: Fix long line over 80 chars (bsc#1051510).
- serial: uartps: Fix multiple line dereference (bsc#1051510).
- serial: uartps: Remove useless return from cdns_uart_poll_put_char (bsc#1051510).
- staging: comedi: amplc_pci230: fix null pointer deref on interrupt (bsc#1051510).
- staging: comedi: dt282x: fix a null pointer deref on interrupt (bsc#1051510).
- staging: rtl8712: reduce stack usage, again (bsc#1051510).
- sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg (networking-stable-19_06_18).
- tcp: fix tcp_set_congestion_control() use from bpf hook (bsc#1109837).
- tcp: reduce tcp_fastretrans_alert() verbosity (git-fixes).
- team: Always enable vlan tx offload (bsc#1051510).
- tools: bpftool: Fix json dump crash on powerpc (bsc#1109837).
- tools: bpftool: use correct argument in cgroup errors (bsc#1109837).
- tools/power/x86: A tool to validate Intel Speed Select commands (jsc#SLE-5364).
- tty: rocket: fix incorrect forward declaration of 'rp_init()' (bsc#1051510).
- tty: serial_core: Set port active bit in uart_port_activate (bsc#1051510).
- tty: serial: cpm_uart - fix init when SMC is relocated (bsc#1051510).
- tuntap: synchronize through tfiles array instead of tun-&gt;numqueues (networking-stable-19_05_14).
- usb: gadget: ether: Fix race between gether_disconnect and rx_submit (bsc#1051510).
- usb: gadget: fusb300_udc: Fix memory leak of fusb300-&gt;ep[i] (bsc#1051510).
- usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC (bsc#1051510).
- usb: pci-quirks: Correct AMD PLL quirk detection (bsc#1051510).
- usb: serial: ftdi_sio: add ID for isodebug v1 (bsc#1051510).
- usb: serial: option: add support for GosunCn ME3630 RNDIS mode (bsc#1051510).
- virtio/s390: add indirection to indicators access (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: DMA support for virtio-ccw (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: make airq summary indicators DMA (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use cacheline aligned airq bit vectors (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use DMA memory for ccw I/O and classic notifiers (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use vring_create_virtqueue (jsc#SLE-6197 bsc#1140559 LTC#173150).
- vmci: Fix integer overflow in VMCI handle arrays (bsc#1051510).
- vrf: sit mtu should not be updated when vrf netdev is the link (networking-stable-19_05_14).
- vsock/virtio: free packets during the socket release (networking-stable-19_05_21).
- vsock/virtio: set SOCK_DONE on peer shutdown (networking-stable-19_06_18).
- wil6210: drop old event after wmi_call timeout (bsc#1111666).
- wil6210: fix potential out-of-bounds read (bsc#1051510).
- wil6210: fix spurious interrupts in 3-msi (bsc#1111666).
- x86, mm: fix fast GUP with hyper-based TLB flushing (VM Functionality, bsc#1140903).
- xdp: fix possible cq entry leak (bsc#1109837).
- xdp: fix race on generic receive path (bsc#1109837).
- xdp: hold device for umem regardless of zero-copy mode (bsc#1109837).
- xen: let alloc_xenballooned_pages() fail if not enough memory free (bsc#1142450 XSA-300).
- xfs: do not overflow xattr listent buffer (bsc#1143105).
- xprtrdma: Fix use-after-free in rpcrdma_post_recvs (bsc#1103992 ).
- xsk: Properly terminate assignment in xskq_produce_flush_desc (bsc#1109837).

		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-07"/>
	<updated date="2019-08-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083710">SUSE bug 1083710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102247">SUSE bug 1102247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119222">SUSE bug 1119222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123080">SUSE bug 1123080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127034">SUSE bug 1127034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127315">SUSE bug 1127315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130972">SUSE bug 1130972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134097">SUSE bug 1134097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134390">SUSE bug 1134390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134399">SUSE bug 1134399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135335">SUSE bug 1135335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136217">SUSE bug 1136217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136342">SUSE bug 1136342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136462">SUSE bug 1136462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136467">SUSE bug 1136467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137458">SUSE bug 1137458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137534">SUSE bug 1137534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137535">SUSE bug 1137535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137584">SUSE bug 1137584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137609">SUSE bug 1137609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137811">SUSE bug 1137811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137827">SUSE bug 1137827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138874">SUSE bug 1138874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139358">SUSE bug 1139358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139619">SUSE bug 1139619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140133">SUSE bug 1140133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140139">SUSE bug 1140139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140322">SUSE bug 1140322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140559">SUSE bug 1140559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140652">SUSE bug 1140652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140676">SUSE bug 1140676</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140903">SUSE bug 1140903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140945">SUSE bug 1140945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141312">SUSE bug 1141312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141401">SUSE bug 1141401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141402">SUSE bug 1141402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141452">SUSE bug 1141452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141453">SUSE bug 1141453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141454">SUSE bug 1141454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141478">SUSE bug 1141478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141558">SUSE bug 1141558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142023">SUSE bug 1142023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142052">SUSE bug 1142052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142083">SUSE bug 1142083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142112">SUSE bug 1142112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142115">SUSE bug 1142115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142119">SUSE bug 1142119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142220">SUSE bug 1142220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142221">SUSE bug 1142221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142254">SUSE bug 1142254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142350">SUSE bug 1142350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142351">SUSE bug 1142351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142354">SUSE bug 1142354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142359">SUSE bug 1142359</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142450">SUSE bug 1142450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142623">SUSE bug 1142623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142673">SUSE bug 1142673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142701">SUSE bug 1142701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142868">SUSE bug 1142868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143003">SUSE bug 1143003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143045">SUSE bug 1143045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143105">SUSE bug 1143105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143185">SUSE bug 1143185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143189">SUSE bug 1143189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143191">SUSE bug 1143191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143209">SUSE bug 1143209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143507">SUSE bug 1143507</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20855/">CVE-2018-20855</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1125/">CVE-2019-1125</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11810/">CVE-2019-11810</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13631/">CVE-2019-13631</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13648/">CVE-2019-13648</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14283/">CVE-2019-14283</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14284/">CVE-2019-14284</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496217" comment="kernel-docs-4.12.14-197.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496218" comment="kernel-obs-build-4.12.14-197.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496219" comment="kernel-source-4.12.14-197.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496220" comment="kernel-syms-4.12.14-197.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138188" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1139884" ref_url="https://bugzilla.suse.com/1139884" source="BUGZILLA"/>
		<reference ref_id="1139885" ref_url="https://bugzilla.suse.com/1139885" source="BUGZILLA"/>
		<reference ref_id="1139886" ref_url="https://bugzilla.suse.com/1139886" source="BUGZILLA"/>
		<reference ref_id="1140100" ref_url="https://bugzilla.suse.com/1140100" source="BUGZILLA"/>
		<reference ref_id="1140102" ref_url="https://bugzilla.suse.com/1140102" source="BUGZILLA"/>
		<reference ref_id="1140103" ref_url="https://bugzilla.suse.com/1140103" source="BUGZILLA"/>
		<reference ref_id="1140104" ref_url="https://bugzilla.suse.com/1140104" source="BUGZILLA"/>
		<reference ref_id="1140105" ref_url="https://bugzilla.suse.com/1140105" source="BUGZILLA"/>
		<reference ref_id="1140106" ref_url="https://bugzilla.suse.com/1140106" source="BUGZILLA"/>
		<reference ref_id="1140110" ref_url="https://bugzilla.suse.com/1140110" source="BUGZILLA"/>
		<reference ref_id="1140111" ref_url="https://bugzilla.suse.com/1140111" source="BUGZILLA"/>
		<reference ref_id="1140501" ref_url="https://bugzilla.suse.com/1140501" source="BUGZILLA"/>
		<reference ref_id="1140513" ref_url="https://bugzilla.suse.com/1140513" source="BUGZILLA"/>
		<reference ref_id="1140520" ref_url="https://bugzilla.suse.com/1140520" source="BUGZILLA"/>
		<reference ref_id="1140534" ref_url="https://bugzilla.suse.com/1140534" source="BUGZILLA"/>
		<reference ref_id="1140538" ref_url="https://bugzilla.suse.com/1140538" source="BUGZILLA"/>
		<reference ref_id="1140543" ref_url="https://bugzilla.suse.com/1140543" source="BUGZILLA"/>
		<reference ref_id="1140545" ref_url="https://bugzilla.suse.com/1140545" source="BUGZILLA"/>
		<reference ref_id="1140547" ref_url="https://bugzilla.suse.com/1140547" source="BUGZILLA"/>
		<reference ref_id="1140549" ref_url="https://bugzilla.suse.com/1140549" source="BUGZILLA"/>
		<reference ref_id="1140552" ref_url="https://bugzilla.suse.com/1140552" source="BUGZILLA"/>
		<reference ref_id="1140554" ref_url="https://bugzilla.suse.com/1140554" source="BUGZILLA"/>
		<reference ref_id="1140664" ref_url="https://bugzilla.suse.com/1140664" source="BUGZILLA"/>
		<reference ref_id="1140665" ref_url="https://bugzilla.suse.com/1140665" source="BUGZILLA"/>
		<reference ref_id="1140666" ref_url="https://bugzilla.suse.com/1140666" source="BUGZILLA"/>
		<reference ref_id="1140667" ref_url="https://bugzilla.suse.com/1140667" source="BUGZILLA"/>
		<reference ref_id="1140668" ref_url="https://bugzilla.suse.com/1140668" source="BUGZILLA"/>
		<reference ref_id="1140669" ref_url="https://bugzilla.suse.com/1140669" source="BUGZILLA"/>
		<reference ref_id="1140673" ref_url="https://bugzilla.suse.com/1140673" source="BUGZILLA"/>
		<reference ref_id="1141171" ref_url="https://bugzilla.suse.com/1141171" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12974" ref_url="https://www.suse.com/security/cve/CVE-2019-12974/" source="CVE"/>
		<reference ref_id="CVE-2019-12975" ref_url="https://www.suse.com/security/cve/CVE-2019-12975/" source="CVE"/>
		<reference ref_id="CVE-2019-12976" ref_url="https://www.suse.com/security/cve/CVE-2019-12976/" source="CVE"/>
		<reference ref_id="CVE-2019-12977" ref_url="https://www.suse.com/security/cve/CVE-2019-12977/" source="CVE"/>
		<reference ref_id="CVE-2019-12978" ref_url="https://www.suse.com/security/cve/CVE-2019-12978/" source="CVE"/>
		<reference ref_id="CVE-2019-12979" ref_url="https://www.suse.com/security/cve/CVE-2019-12979/" source="CVE"/>
		<reference ref_id="CVE-2019-13133" ref_url="https://www.suse.com/security/cve/CVE-2019-13133/" source="CVE"/>
		<reference ref_id="CVE-2019-13134" ref_url="https://www.suse.com/security/cve/CVE-2019-13134/" source="CVE"/>
		<reference ref_id="CVE-2019-13135" ref_url="https://www.suse.com/security/cve/CVE-2019-13135/" source="CVE"/>
		<reference ref_id="CVE-2019-13136" ref_url="https://www.suse.com/security/cve/CVE-2019-13136/" source="CVE"/>
		<reference ref_id="CVE-2019-13137" ref_url="https://www.suse.com/security/cve/CVE-2019-13137/" source="CVE"/>
		<reference ref_id="CVE-2019-13295" ref_url="https://www.suse.com/security/cve/CVE-2019-13295/" source="CVE"/>
		<reference ref_id="CVE-2019-13296" ref_url="https://www.suse.com/security/cve/CVE-2019-13296/" source="CVE"/>
		<reference ref_id="CVE-2019-13297" ref_url="https://www.suse.com/security/cve/CVE-2019-13297/" source="CVE"/>
		<reference ref_id="CVE-2019-13298" ref_url="https://www.suse.com/security/cve/CVE-2019-13298/" source="CVE"/>
		<reference ref_id="CVE-2019-13299" ref_url="https://www.suse.com/security/cve/CVE-2019-13299/" source="CVE"/>
		<reference ref_id="CVE-2019-13300" ref_url="https://www.suse.com/security/cve/CVE-2019-13300/" source="CVE"/>
		<reference ref_id="CVE-2019-13301" ref_url="https://www.suse.com/security/cve/CVE-2019-13301/" source="CVE"/>
		<reference ref_id="CVE-2019-13302" ref_url="https://www.suse.com/security/cve/CVE-2019-13302/" source="CVE"/>
		<reference ref_id="CVE-2019-13303" ref_url="https://www.suse.com/security/cve/CVE-2019-13303/" source="CVE"/>
		<reference ref_id="CVE-2019-13304" ref_url="https://www.suse.com/security/cve/CVE-2019-13304/" source="CVE"/>
		<reference ref_id="CVE-2019-13305" ref_url="https://www.suse.com/security/cve/CVE-2019-13305/" source="CVE"/>
		<reference ref_id="CVE-2019-13306" ref_url="https://www.suse.com/security/cve/CVE-2019-13306/" source="CVE"/>
		<reference ref_id="CVE-2019-13307" ref_url="https://www.suse.com/security/cve/CVE-2019-13307/" source="CVE"/>
		<reference ref_id="CVE-2019-13308" ref_url="https://www.suse.com/security/cve/CVE-2019-13308/" source="CVE"/>
		<reference ref_id="CVE-2019-13309" ref_url="https://www.suse.com/security/cve/CVE-2019-13309/" source="CVE"/>
		<reference ref_id="CVE-2019-13310" ref_url="https://www.suse.com/security/cve/CVE-2019-13310/" source="CVE"/>
		<reference ref_id="CVE-2019-13311" ref_url="https://www.suse.com/security/cve/CVE-2019-13311/" source="CVE"/>
		<reference ref_id="CVE-2019-13391" ref_url="https://www.suse.com/security/cve/CVE-2019-13391/" source="CVE"/>
		<reference ref_id="CVE-2019-13454" ref_url="https://www.suse.com/security/cve/CVE-2019-13454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2106-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005810.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

- CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory() (bsc#1140554).
- CVE-2019-13309: Fixed a memory leak at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages (bsc#1140520).
- CVE-2019-13310: Fixed a memory leak at AcquireMagickMemory because of an error in MagickWand/mogrify.c (bsc#1140501).
- CVE-2019-13311: Fixed a memory leak at AcquireMagickMemory because of a wand/mogrify.c error (bsc#1140513).
- CVE-2019-13303: Fixed a heap-based buffer over-read in MagickCore/composite.c in CompositeImage (bsc#1140549).
- CVE-2019-13296: Fixed a memory leak in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c (bsc#1140665).
- CVE-2019-13299: Fixed a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel (bsc#1140668).
- CVE-2019-13454: Fixed a division by zero in RemoveDuplicateLayers in MagickCore/layer.c (bsc#1141171).
- CVE-2019-13295: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140664).
- CVE-2019-13297: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140666).
- CVE-2019-12979: Fixed the use of uninitialized values in SyncImageSettings() (bsc#1139886).
- CVE-2019-13391: Fixed a heap-based buffer over-read in MagickCore/fourier.c (bsc#1140673).
- CVE-2019-13308: Fixed a heap-based buffer overflow in MagickCore/fourier.c (bsc#1140534).
- CVE-2019-13302: Fixed a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages (bsc#1140552).
- CVE-2019-13298: Fixed a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo (bsc#1140667).
- CVE-2019-13300: Fixed a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages (bsc#1140669).
- CVE-2019-13307: Fixed a heap-based buffer overflow at MagickCore/statistic.c (bsc#1140538).
- CVE-2019-12977: Fixed the use of uninitialized values in WriteJP2Imag() (bsc#1139884).
- CVE-2019-12975: Fixed a memory leak in the WriteDPXImage() in coders/dpx.c (bsc#1140106).
- CVE-2019-13135: Fixed the use of uninitialized values in ReadCUTImage() (bsc#1140103).
- CVE-2019-12978: Fixed the use of uninitialized values in ReadPANGOImage() (bsc#1139885).
- CVE-2019-12974: Fixed a NULL pointer dereference in the ReadPANGOImage() (bsc#1140111).
- CVE-2019-13304: Fixed a stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140547).
- CVE-2019-13305: Fixed one more stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140545).
- CVE-2019-13306: Fixed an additional stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140543).
- CVE-2019-13133: Fixed a memory leak in the ReadBMPImage() (bsc#1140100).
- CVE-2019-13134: Fixed a memory leak in the ReadVIFFImage() (bsc#1140102).
- CVE-2019-13137: Fixed a memory leak in the ReadPSImage() (bsc#1140105).
- CVE-2019-13136: Fixed a integer overflow vulnerability in the TIFFSeekCustomStream() (bsc#1140104).
- CVE-2019-12976: Fixed a memory leak in the ReadPCLImage() in coders/pcl.c(bsc#1140110).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-09"/>
	<updated date="2019-08-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1139884">SUSE bug 1139884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139885">SUSE bug 1139885</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139886">SUSE bug 1139886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140100">SUSE bug 1140100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140102">SUSE bug 1140102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140103">SUSE bug 1140103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140104">SUSE bug 1140104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140105">SUSE bug 1140105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140106">SUSE bug 1140106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140110">SUSE bug 1140110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140111">SUSE bug 1140111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140501">SUSE bug 1140501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140513">SUSE bug 1140513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140520">SUSE bug 1140520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140534">SUSE bug 1140534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140538">SUSE bug 1140538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140543">SUSE bug 1140543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140545">SUSE bug 1140545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140547">SUSE bug 1140547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140549">SUSE bug 1140549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140552">SUSE bug 1140552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140554">SUSE bug 1140554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140664">SUSE bug 1140664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140665">SUSE bug 1140665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140666">SUSE bug 1140666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140667">SUSE bug 1140667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140668">SUSE bug 1140668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140669">SUSE bug 1140669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140673">SUSE bug 1140673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141171">SUSE bug 1141171</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12974/">CVE-2019-12974</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-12975/">CVE-2019-12975</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12976/">CVE-2019-12976</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12977/">CVE-2019-12977</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12978/">CVE-2019-12978</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12979/">CVE-2019-12979</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13133/">CVE-2019-13133</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13134/">CVE-2019-13134</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13135/">CVE-2019-13135</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-13136/">CVE-2019-13136</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13137/">CVE-2019-13137</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13295/">CVE-2019-13295</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13296/">CVE-2019-13296</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13297/">CVE-2019-13297</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13298/">CVE-2019-13298</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13299/">CVE-2019-13299</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13300/">CVE-2019-13300</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13301/">CVE-2019-13301</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13302/">CVE-2019-13302</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13303/">CVE-2019-13303</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13304/">CVE-2019-13304</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13305/">CVE-2019-13305</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13306/">CVE-2019-13306</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13307/">CVE-2019-13307</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13308/">CVE-2019-13308</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13309/">CVE-2019-13309</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13310/">CVE-2019-13310</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13311/">CVE-2019-13311</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13391/">CVE-2019-13391</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13454/">CVE-2019-13454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496068" comment="perl-PerlMagick-7.0.7.34-3.67.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138189" version="1" class="patch">
	<metadata>
		<title>Security update for slurm (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1140709" ref_url="https://bugzilla.suse.com/1140709" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12838" ref_url="https://www.suse.com/security/cve/CVE-2019-12838/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2229-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005846.html" source="SUSE-SU"/>
		<description>
This update for slurm to version 18.08.8 fixes the following issues:

Security issue fixed:

- CVE-2019-12838: Fixed a SQL injection in slurmdbd (bsc#1140709).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-28"/>
	<updated date="2019-08-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140709">SUSE bug 1140709</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12838/">CVE-2019-12838</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496070" comment="perl-Switch-2.17-3.2.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138190" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1073313" ref_url="https://bugzilla.suse.com/1073313" source="BUGZILLA"/>
		<reference ref_id="1111388" ref_url="https://bugzilla.suse.com/1111388" source="BUGZILLA"/>
		<reference ref_id="1114845" ref_url="https://bugzilla.suse.com/1114845" source="BUGZILLA"/>
		<reference ref_id="1143194" ref_url="https://bugzilla.suse.com/1143194" source="BUGZILLA"/>
		<reference ref_id="1143273" ref_url="https://bugzilla.suse.com/1143273" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17740" ref_url="https://www.suse.com/security/cve/CVE-2017-17740/" source="CVE"/>
		<reference ref_id="CVE-2019-13057" ref_url="https://www.suse.com/security/cve/CVE-2019-13057/" source="CVE"/>
		<reference ref_id="CVE-2019-13565" ref_url="https://www.suse.com/security/cve/CVE-2019-13565/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005929.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

Security issue fixed:

- CVE-2019-13565: Fixed an authentication bypass when using SASL authentication and session encryption (bsc#1143194).
- CVE-2019-13057: Fixed an issue with delegated database admin privileges (bsc#1143273).
- CVE-2017-17740: When both the nops module and the member of overlay
  are enabled, attempts to free a buffer that was allocated on the stack,
  which allows remote attackers to cause a denial of service (slapd crash)
  via a member MODDN operation. (bsc#1073313)

Non-security issues fixed:

- Fixed broken shebang line in openldap_update_modules_path.sh (bsc#1114845).
- Create files in /var/lib/ldap/ during initial start to allow for transactional updates (bsc#1111388)
- Fixed incorrect post script call causing tmpfiles creation not to be run (bsc#1111388).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-18"/>
	<updated date="2019-09-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1073313">SUSE bug 1073313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111388">SUSE bug 1111388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114845">SUSE bug 1114845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143194">SUSE bug 1143194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143273">SUSE bug 1143273</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17740/">CVE-2017-17740</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13057/">CVE-2019-13057</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13565/">CVE-2019-13565</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496076" comment="openldap2-devel-32bit-2.4.46-9.19.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138191" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1047238" ref_url="https://bugzilla.suse.com/1047238" source="BUGZILLA"/>
		<reference ref_id="1050911" ref_url="https://bugzilla.suse.com/1050911" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1054914" ref_url="https://bugzilla.suse.com/1054914" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1056686" ref_url="https://bugzilla.suse.com/1056686" source="BUGZILLA"/>
		<reference ref_id="1060662" ref_url="https://bugzilla.suse.com/1060662" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1061843" ref_url="https://bugzilla.suse.com/1061843" source="BUGZILLA"/>
		<reference ref_id="1064597" ref_url="https://bugzilla.suse.com/1064597" source="BUGZILLA"/>
		<reference ref_id="1064701" ref_url="https://bugzilla.suse.com/1064701" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066369" ref_url="https://bugzilla.suse.com/1066369" source="BUGZILLA"/>
		<reference ref_id="1071009" ref_url="https://bugzilla.suse.com/1071009" source="BUGZILLA"/>
		<reference ref_id="1071306" ref_url="https://bugzilla.suse.com/1071306" source="BUGZILLA"/>
		<reference ref_id="1078248" ref_url="https://bugzilla.suse.com/1078248" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1085536" ref_url="https://bugzilla.suse.com/1085536" source="BUGZILLA"/>
		<reference ref_id="1085539" ref_url="https://bugzilla.suse.com/1085539" source="BUGZILLA"/>
		<reference ref_id="1086103" ref_url="https://bugzilla.suse.com/1086103" source="BUGZILLA"/>
		<reference ref_id="1087092" ref_url="https://bugzilla.suse.com/1087092" source="BUGZILLA"/>
		<reference ref_id="1090734" ref_url="https://bugzilla.suse.com/1090734" source="BUGZILLA"/>
		<reference ref_id="1091171" ref_url="https://bugzilla.suse.com/1091171" source="BUGZILLA"/>
		<reference ref_id="1093205" ref_url="https://bugzilla.suse.com/1093205" source="BUGZILLA"/>
		<reference ref_id="1102097" ref_url="https://bugzilla.suse.com/1102097" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1104902" ref_url="https://bugzilla.suse.com/1104902" source="BUGZILLA"/>
		<reference ref_id="1106061" ref_url="https://bugzilla.suse.com/1106061" source="BUGZILLA"/>
		<reference ref_id="1106284" ref_url="https://bugzilla.suse.com/1106284" source="BUGZILLA"/>
		<reference ref_id="1106434" ref_url="https://bugzilla.suse.com/1106434" source="BUGZILLA"/>
		<reference ref_id="1108382" ref_url="https://bugzilla.suse.com/1108382" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1112894" ref_url="https://bugzilla.suse.com/1112894" source="BUGZILLA"/>
		<reference ref_id="1112899" ref_url="https://bugzilla.suse.com/1112899" source="BUGZILLA"/>
		<reference ref_id="1112902" ref_url="https://bugzilla.suse.com/1112902" source="BUGZILLA"/>
		<reference ref_id="1112903" ref_url="https://bugzilla.suse.com/1112903" source="BUGZILLA"/>
		<reference ref_id="1112905" ref_url="https://bugzilla.suse.com/1112905" source="BUGZILLA"/>
		<reference ref_id="1112906" ref_url="https://bugzilla.suse.com/1112906" source="BUGZILLA"/>
		<reference ref_id="1112907" ref_url="https://bugzilla.suse.com/1112907" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114542" ref_url="https://bugzilla.suse.com/1114542" source="BUGZILLA"/>
		<reference ref_id="1118689" ref_url="https://bugzilla.suse.com/1118689" source="BUGZILLA"/>
		<reference ref_id="1119086" ref_url="https://bugzilla.suse.com/1119086" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1120046" ref_url="https://bugzilla.suse.com/1120046" source="BUGZILLA"/>
		<reference ref_id="1120876" ref_url="https://bugzilla.suse.com/1120876" source="BUGZILLA"/>
		<reference ref_id="1120902" ref_url="https://bugzilla.suse.com/1120902" source="BUGZILLA"/>
		<reference ref_id="1123105" ref_url="https://bugzilla.suse.com/1123105" source="BUGZILLA"/>
		<reference ref_id="1123959" ref_url="https://bugzilla.suse.com/1123959" source="BUGZILLA"/>
		<reference ref_id="1124370" ref_url="https://bugzilla.suse.com/1124370" source="BUGZILLA"/>
		<reference ref_id="1129424" ref_url="https://bugzilla.suse.com/1129424" source="BUGZILLA"/>
		<reference ref_id="1129519" ref_url="https://bugzilla.suse.com/1129519" source="BUGZILLA"/>
		<reference ref_id="1129664" ref_url="https://bugzilla.suse.com/1129664" source="BUGZILLA"/>
		<reference ref_id="1131107" ref_url="https://bugzilla.suse.com/1131107" source="BUGZILLA"/>
		<reference ref_id="1131281" ref_url="https://bugzilla.suse.com/1131281" source="BUGZILLA"/>
		<reference ref_id="1131489" ref_url="https://bugzilla.suse.com/1131489" source="BUGZILLA"/>
		<reference ref_id="1131565" ref_url="https://bugzilla.suse.com/1131565" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134291" ref_url="https://bugzilla.suse.com/1134291" source="BUGZILLA"/>
		<reference ref_id="1134476" ref_url="https://bugzilla.suse.com/1134476" source="BUGZILLA"/>
		<reference ref_id="1134881" ref_url="https://bugzilla.suse.com/1134881" source="BUGZILLA"/>
		<reference ref_id="1134882" ref_url="https://bugzilla.suse.com/1134882" source="BUGZILLA"/>
		<reference ref_id="1135219" ref_url="https://bugzilla.suse.com/1135219" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135897" ref_url="https://bugzilla.suse.com/1135897" source="BUGZILLA"/>
		<reference ref_id="1135990" ref_url="https://bugzilla.suse.com/1135990" source="BUGZILLA"/>
		<reference ref_id="1136039" ref_url="https://bugzilla.suse.com/1136039" source="BUGZILLA"/>
		<reference ref_id="1136261" ref_url="https://bugzilla.suse.com/1136261" source="BUGZILLA"/>
		<reference ref_id="1136346" ref_url="https://bugzilla.suse.com/1136346" source="BUGZILLA"/>
		<reference ref_id="1136349" ref_url="https://bugzilla.suse.com/1136349" source="BUGZILLA"/>
		<reference ref_id="1136352" ref_url="https://bugzilla.suse.com/1136352" source="BUGZILLA"/>
		<reference ref_id="1136496" ref_url="https://bugzilla.suse.com/1136496" source="BUGZILLA"/>
		<reference ref_id="1136498" ref_url="https://bugzilla.suse.com/1136498" source="BUGZILLA"/>
		<reference ref_id="1136502" ref_url="https://bugzilla.suse.com/1136502" source="BUGZILLA"/>
		<reference ref_id="1136682" ref_url="https://bugzilla.suse.com/1136682" source="BUGZILLA"/>
		<reference ref_id="1137322" ref_url="https://bugzilla.suse.com/1137322" source="BUGZILLA"/>
		<reference ref_id="1137323" ref_url="https://bugzilla.suse.com/1137323" source="BUGZILLA"/>
		<reference ref_id="1137884" ref_url="https://bugzilla.suse.com/1137884" source="BUGZILLA"/>
		<reference ref_id="1138099" ref_url="https://bugzilla.suse.com/1138099" source="BUGZILLA"/>
		<reference ref_id="1138100" ref_url="https://bugzilla.suse.com/1138100" source="BUGZILLA"/>
		<reference ref_id="1138539" ref_url="https://bugzilla.suse.com/1138539" source="BUGZILLA"/>
		<reference ref_id="1139020" ref_url="https://bugzilla.suse.com/1139020" source="BUGZILLA"/>
		<reference ref_id="1139021" ref_url="https://bugzilla.suse.com/1139021" source="BUGZILLA"/>
		<reference ref_id="1139101" ref_url="https://bugzilla.suse.com/1139101" source="BUGZILLA"/>
		<reference ref_id="1139500" ref_url="https://bugzilla.suse.com/1139500" source="BUGZILLA"/>
		<reference ref_id="1140012" ref_url="https://bugzilla.suse.com/1140012" source="BUGZILLA"/>
		<reference ref_id="1140426" ref_url="https://bugzilla.suse.com/1140426" source="BUGZILLA"/>
		<reference ref_id="1140487" ref_url="https://bugzilla.suse.com/1140487" source="BUGZILLA"/>
		<reference ref_id="1141340" ref_url="https://bugzilla.suse.com/1141340" source="BUGZILLA"/>
		<reference ref_id="1141450" ref_url="https://bugzilla.suse.com/1141450" source="BUGZILLA"/>
		<reference ref_id="1141543" ref_url="https://bugzilla.suse.com/1141543" source="BUGZILLA"/>
		<reference ref_id="1141554" ref_url="https://bugzilla.suse.com/1141554" source="BUGZILLA"/>
		<reference ref_id="1142019" ref_url="https://bugzilla.suse.com/1142019" source="BUGZILLA"/>
		<reference ref_id="1142076" ref_url="https://bugzilla.suse.com/1142076" source="BUGZILLA"/>
		<reference ref_id="1142109" ref_url="https://bugzilla.suse.com/1142109" source="BUGZILLA"/>
		<reference ref_id="1142117" ref_url="https://bugzilla.suse.com/1142117" source="BUGZILLA"/>
		<reference ref_id="1142118" ref_url="https://bugzilla.suse.com/1142118" source="BUGZILLA"/>
		<reference ref_id="1142119" ref_url="https://bugzilla.suse.com/1142119" source="BUGZILLA"/>
		<reference ref_id="1142496" ref_url="https://bugzilla.suse.com/1142496" source="BUGZILLA"/>
		<reference ref_id="1142541" ref_url="https://bugzilla.suse.com/1142541" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1142701" ref_url="https://bugzilla.suse.com/1142701" source="BUGZILLA"/>
		<reference ref_id="1142857" ref_url="https://bugzilla.suse.com/1142857" source="BUGZILLA"/>
		<reference ref_id="1143300" ref_url="https://bugzilla.suse.com/1143300" source="BUGZILLA"/>
		<reference ref_id="1143331" ref_url="https://bugzilla.suse.com/1143331" source="BUGZILLA"/>
		<reference ref_id="1143466" ref_url="https://bugzilla.suse.com/1143466" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1143738" ref_url="https://bugzilla.suse.com/1143738" source="BUGZILLA"/>
		<reference ref_id="1143765" ref_url="https://bugzilla.suse.com/1143765" source="BUGZILLA"/>
		<reference ref_id="1143841" ref_url="https://bugzilla.suse.com/1143841" source="BUGZILLA"/>
		<reference ref_id="1143843" ref_url="https://bugzilla.suse.com/1143843" source="BUGZILLA"/>
		<reference ref_id="1143962" ref_url="https://bugzilla.suse.com/1143962" source="BUGZILLA"/>
		<reference ref_id="1144123" ref_url="https://bugzilla.suse.com/1144123" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1144375" ref_url="https://bugzilla.suse.com/1144375" source="BUGZILLA"/>
		<reference ref_id="1144474" ref_url="https://bugzilla.suse.com/1144474" source="BUGZILLA"/>
		<reference ref_id="1144518" ref_url="https://bugzilla.suse.com/1144518" source="BUGZILLA"/>
		<reference ref_id="1144582" ref_url="https://bugzilla.suse.com/1144582" source="BUGZILLA"/>
		<reference ref_id="1144718" ref_url="https://bugzilla.suse.com/1144718" source="BUGZILLA"/>
		<reference ref_id="1144813" ref_url="https://bugzilla.suse.com/1144813" source="BUGZILLA"/>
		<reference ref_id="1144880" ref_url="https://bugzilla.suse.com/1144880" source="BUGZILLA"/>
		<reference ref_id="1144886" ref_url="https://bugzilla.suse.com/1144886" source="BUGZILLA"/>
		<reference ref_id="1144912" ref_url="https://bugzilla.suse.com/1144912" source="BUGZILLA"/>
		<reference ref_id="1144920" ref_url="https://bugzilla.suse.com/1144920" source="BUGZILLA"/>
		<reference ref_id="1144979" ref_url="https://bugzilla.suse.com/1144979" source="BUGZILLA"/>
		<reference ref_id="1145010" ref_url="https://bugzilla.suse.com/1145010" source="BUGZILLA"/>
		<reference ref_id="1145018" ref_url="https://bugzilla.suse.com/1145018" source="BUGZILLA"/>
		<reference ref_id="1145051" ref_url="https://bugzilla.suse.com/1145051" source="BUGZILLA"/>
		<reference ref_id="1145059" ref_url="https://bugzilla.suse.com/1145059" source="BUGZILLA"/>
		<reference ref_id="1145189" ref_url="https://bugzilla.suse.com/1145189" source="BUGZILLA"/>
		<reference ref_id="1145235" ref_url="https://bugzilla.suse.com/1145235" source="BUGZILLA"/>
		<reference ref_id="1145256" ref_url="https://bugzilla.suse.com/1145256" source="BUGZILLA"/>
		<reference ref_id="1145300" ref_url="https://bugzilla.suse.com/1145300" source="BUGZILLA"/>
		<reference ref_id="1145302" ref_url="https://bugzilla.suse.com/1145302" source="BUGZILLA"/>
		<reference ref_id="1145357" ref_url="https://bugzilla.suse.com/1145357" source="BUGZILLA"/>
		<reference ref_id="1145388" ref_url="https://bugzilla.suse.com/1145388" source="BUGZILLA"/>
		<reference ref_id="1145389" ref_url="https://bugzilla.suse.com/1145389" source="BUGZILLA"/>
		<reference ref_id="1145390" ref_url="https://bugzilla.suse.com/1145390" source="BUGZILLA"/>
		<reference ref_id="1145391" ref_url="https://bugzilla.suse.com/1145391" source="BUGZILLA"/>
		<reference ref_id="1145392" ref_url="https://bugzilla.suse.com/1145392" source="BUGZILLA"/>
		<reference ref_id="1145393" ref_url="https://bugzilla.suse.com/1145393" source="BUGZILLA"/>
		<reference ref_id="1145394" ref_url="https://bugzilla.suse.com/1145394" source="BUGZILLA"/>
		<reference ref_id="1145395" ref_url="https://bugzilla.suse.com/1145395" source="BUGZILLA"/>
		<reference ref_id="1145396" ref_url="https://bugzilla.suse.com/1145396" source="BUGZILLA"/>
		<reference ref_id="1145397" ref_url="https://bugzilla.suse.com/1145397" source="BUGZILLA"/>
		<reference ref_id="1145408" ref_url="https://bugzilla.suse.com/1145408" source="BUGZILLA"/>
		<reference ref_id="1145409" ref_url="https://bugzilla.suse.com/1145409" source="BUGZILLA"/>
		<reference ref_id="1145446" ref_url="https://bugzilla.suse.com/1145446" source="BUGZILLA"/>
		<reference ref_id="1145661" ref_url="https://bugzilla.suse.com/1145661" source="BUGZILLA"/>
		<reference ref_id="1145678" ref_url="https://bugzilla.suse.com/1145678" source="BUGZILLA"/>
		<reference ref_id="1145687" ref_url="https://bugzilla.suse.com/1145687" source="BUGZILLA"/>
		<reference ref_id="1145920" ref_url="https://bugzilla.suse.com/1145920" source="BUGZILLA"/>
		<reference ref_id="1145922" ref_url="https://bugzilla.suse.com/1145922" source="BUGZILLA"/>
		<reference ref_id="1145934" ref_url="https://bugzilla.suse.com/1145934" source="BUGZILLA"/>
		<reference ref_id="1145937" ref_url="https://bugzilla.suse.com/1145937" source="BUGZILLA"/>
		<reference ref_id="1145940" ref_url="https://bugzilla.suse.com/1145940" source="BUGZILLA"/>
		<reference ref_id="1145941" ref_url="https://bugzilla.suse.com/1145941" source="BUGZILLA"/>
		<reference ref_id="1145942" ref_url="https://bugzilla.suse.com/1145942" source="BUGZILLA"/>
		<reference ref_id="1145946" ref_url="https://bugzilla.suse.com/1145946" source="BUGZILLA"/>
		<reference ref_id="1146074" ref_url="https://bugzilla.suse.com/1146074" source="BUGZILLA"/>
		<reference ref_id="1146084" ref_url="https://bugzilla.suse.com/1146084" source="BUGZILLA"/>
		<reference ref_id="1146141" ref_url="https://bugzilla.suse.com/1146141" source="BUGZILLA"/>
		<reference ref_id="1146163" ref_url="https://bugzilla.suse.com/1146163" source="BUGZILLA"/>
		<reference ref_id="1146215" ref_url="https://bugzilla.suse.com/1146215" source="BUGZILLA"/>
		<reference ref_id="1146285" ref_url="https://bugzilla.suse.com/1146285" source="BUGZILLA"/>
		<reference ref_id="1146346" ref_url="https://bugzilla.suse.com/1146346" source="BUGZILLA"/>
		<reference ref_id="1146351" ref_url="https://bugzilla.suse.com/1146351" source="BUGZILLA"/>
		<reference ref_id="1146352" ref_url="https://bugzilla.suse.com/1146352" source="BUGZILLA"/>
		<reference ref_id="1146361" ref_url="https://bugzilla.suse.com/1146361" source="BUGZILLA"/>
		<reference ref_id="1146368" ref_url="https://bugzilla.suse.com/1146368" source="BUGZILLA"/>
		<reference ref_id="1146376" ref_url="https://bugzilla.suse.com/1146376" source="BUGZILLA"/>
		<reference ref_id="1146378" ref_url="https://bugzilla.suse.com/1146378" source="BUGZILLA"/>
		<reference ref_id="1146381" ref_url="https://bugzilla.suse.com/1146381" source="BUGZILLA"/>
		<reference ref_id="1146391" ref_url="https://bugzilla.suse.com/1146391" source="BUGZILLA"/>
		<reference ref_id="1146399" ref_url="https://bugzilla.suse.com/1146399" source="BUGZILLA"/>
		<reference ref_id="1146413" ref_url="https://bugzilla.suse.com/1146413" source="BUGZILLA"/>
		<reference ref_id="1146425" ref_url="https://bugzilla.suse.com/1146425" source="BUGZILLA"/>
		<reference ref_id="1146516" ref_url="https://bugzilla.suse.com/1146516" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146524" ref_url="https://bugzilla.suse.com/1146524" source="BUGZILLA"/>
		<reference ref_id="1146526" ref_url="https://bugzilla.suse.com/1146526" source="BUGZILLA"/>
		<reference ref_id="1146529" ref_url="https://bugzilla.suse.com/1146529" source="BUGZILLA"/>
		<reference ref_id="1146531" ref_url="https://bugzilla.suse.com/1146531" source="BUGZILLA"/>
		<reference ref_id="1146543" ref_url="https://bugzilla.suse.com/1146543" source="BUGZILLA"/>
		<reference ref_id="1146547" ref_url="https://bugzilla.suse.com/1146547" source="BUGZILLA"/>
		<reference ref_id="1146550" ref_url="https://bugzilla.suse.com/1146550" source="BUGZILLA"/>
		<reference ref_id="1146575" ref_url="https://bugzilla.suse.com/1146575" source="BUGZILLA"/>
		<reference ref_id="1146589" ref_url="https://bugzilla.suse.com/1146589" source="BUGZILLA"/>
		<reference ref_id="1146678" ref_url="https://bugzilla.suse.com/1146678" source="BUGZILLA"/>
		<reference ref_id="1146938" ref_url="https://bugzilla.suse.com/1146938" source="BUGZILLA"/>
		<reference ref_id="1148031" ref_url="https://bugzilla.suse.com/1148031" source="BUGZILLA"/>
		<reference ref_id="1148032" ref_url="https://bugzilla.suse.com/1148032" source="BUGZILLA"/>
		<reference ref_id="1148033" ref_url="https://bugzilla.suse.com/1148033" source="BUGZILLA"/>
		<reference ref_id="1148034" ref_url="https://bugzilla.suse.com/1148034" source="BUGZILLA"/>
		<reference ref_id="1148035" ref_url="https://bugzilla.suse.com/1148035" source="BUGZILLA"/>
		<reference ref_id="1148093" ref_url="https://bugzilla.suse.com/1148093" source="BUGZILLA"/>
		<reference ref_id="1148133" ref_url="https://bugzilla.suse.com/1148133" source="BUGZILLA"/>
		<reference ref_id="1148192" ref_url="https://bugzilla.suse.com/1148192" source="BUGZILLA"/>
		<reference ref_id="1148196" ref_url="https://bugzilla.suse.com/1148196" source="BUGZILLA"/>
		<reference ref_id="1148198" ref_url="https://bugzilla.suse.com/1148198" source="BUGZILLA"/>
		<reference ref_id="1148202" ref_url="https://bugzilla.suse.com/1148202" source="BUGZILLA"/>
		<reference ref_id="1148219" ref_url="https://bugzilla.suse.com/1148219" source="BUGZILLA"/>
		<reference ref_id="1148297" ref_url="https://bugzilla.suse.com/1148297" source="BUGZILLA"/>
		<reference ref_id="1148303" ref_url="https://bugzilla.suse.com/1148303" source="BUGZILLA"/>
		<reference ref_id="1148308" ref_url="https://bugzilla.suse.com/1148308" source="BUGZILLA"/>
		<reference ref_id="1148363" ref_url="https://bugzilla.suse.com/1148363" source="BUGZILLA"/>
		<reference ref_id="1148379" ref_url="https://bugzilla.suse.com/1148379" source="BUGZILLA"/>
		<reference ref_id="1148394" ref_url="https://bugzilla.suse.com/1148394" source="BUGZILLA"/>
		<reference ref_id="1148527" ref_url="https://bugzilla.suse.com/1148527" source="BUGZILLA"/>
		<reference ref_id="1148570" ref_url="https://bugzilla.suse.com/1148570" source="BUGZILLA"/>
		<reference ref_id="1148574" ref_url="https://bugzilla.suse.com/1148574" source="BUGZILLA"/>
		<reference ref_id="1148616" ref_url="https://bugzilla.suse.com/1148616" source="BUGZILLA"/>
		<reference ref_id="1148617" ref_url="https://bugzilla.suse.com/1148617" source="BUGZILLA"/>
		<reference ref_id="1148619" ref_url="https://bugzilla.suse.com/1148619" source="BUGZILLA"/>
		<reference ref_id="1148698" ref_url="https://bugzilla.suse.com/1148698" source="BUGZILLA"/>
		<reference ref_id="1148859" ref_url="https://bugzilla.suse.com/1148859" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1149053" ref_url="https://bugzilla.suse.com/1149053" source="BUGZILLA"/>
		<reference ref_id="1149083" ref_url="https://bugzilla.suse.com/1149083" source="BUGZILLA"/>
		<reference ref_id="1149104" ref_url="https://bugzilla.suse.com/1149104" source="BUGZILLA"/>
		<reference ref_id="1149105" ref_url="https://bugzilla.suse.com/1149105" source="BUGZILLA"/>
		<reference ref_id="1149106" ref_url="https://bugzilla.suse.com/1149106" source="BUGZILLA"/>
		<reference ref_id="1149197" ref_url="https://bugzilla.suse.com/1149197" source="BUGZILLA"/>
		<reference ref_id="1149214" ref_url="https://bugzilla.suse.com/1149214" source="BUGZILLA"/>
		<reference ref_id="1149224" ref_url="https://bugzilla.suse.com/1149224" source="BUGZILLA"/>
		<reference ref_id="1149325" ref_url="https://bugzilla.suse.com/1149325" source="BUGZILLA"/>
		<reference ref_id="1149376" ref_url="https://bugzilla.suse.com/1149376" source="BUGZILLA"/>
		<reference ref_id="1149413" ref_url="https://bugzilla.suse.com/1149413" source="BUGZILLA"/>
		<reference ref_id="1149418" ref_url="https://bugzilla.suse.com/1149418" source="BUGZILLA"/>
		<reference ref_id="1149424" ref_url="https://bugzilla.suse.com/1149424" source="BUGZILLA"/>
		<reference ref_id="1149522" ref_url="https://bugzilla.suse.com/1149522" source="BUGZILLA"/>
		<reference ref_id="1149527" ref_url="https://bugzilla.suse.com/1149527" source="BUGZILLA"/>
		<reference ref_id="1149539" ref_url="https://bugzilla.suse.com/1149539" source="BUGZILLA"/>
		<reference ref_id="1149552" ref_url="https://bugzilla.suse.com/1149552" source="BUGZILLA"/>
		<reference ref_id="1149591" ref_url="https://bugzilla.suse.com/1149591" source="BUGZILLA"/>
		<reference ref_id="1149602" ref_url="https://bugzilla.suse.com/1149602" source="BUGZILLA"/>
		<reference ref_id="1149612" ref_url="https://bugzilla.suse.com/1149612" source="BUGZILLA"/>
		<reference ref_id="1149626" ref_url="https://bugzilla.suse.com/1149626" source="BUGZILLA"/>
		<reference ref_id="1149652" ref_url="https://bugzilla.suse.com/1149652" source="BUGZILLA"/>
		<reference ref_id="1149713" ref_url="https://bugzilla.suse.com/1149713" source="BUGZILLA"/>
		<reference ref_id="1149940" ref_url="https://bugzilla.suse.com/1149940" source="BUGZILLA"/>
		<reference ref_id="1149976" ref_url="https://bugzilla.suse.com/1149976" source="BUGZILLA"/>
		<reference ref_id="1150025" ref_url="https://bugzilla.suse.com/1150025" source="BUGZILLA"/>
		<reference ref_id="1150033" ref_url="https://bugzilla.suse.com/1150033" source="BUGZILLA"/>
		<reference ref_id="1150112" ref_url="https://bugzilla.suse.com/1150112" source="BUGZILLA"/>
		<reference ref_id="1150562" ref_url="https://bugzilla.suse.com/1150562" source="BUGZILLA"/>
		<reference ref_id="1150727" ref_url="https://bugzilla.suse.com/1150727" source="BUGZILLA"/>
		<reference ref_id="1150860" ref_url="https://bugzilla.suse.com/1150860" source="BUGZILLA"/>
		<reference ref_id="1150861" ref_url="https://bugzilla.suse.com/1150861" source="BUGZILLA"/>
		<reference ref_id="1150933" ref_url="https://bugzilla.suse.com/1150933" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18551" ref_url="https://www.suse.com/security/cve/CVE-2017-18551/" source="CVE"/>
		<reference ref_id="CVE-2018-20976" ref_url="https://www.suse.com/security/cve/CVE-2018-20976/" source="CVE"/>
		<reference ref_id="CVE-2018-21008" ref_url="https://www.suse.com/security/cve/CVE-2018-21008/" source="CVE"/>
		<reference ref_id="CVE-2019-10207" ref_url="https://www.suse.com/security/cve/CVE-2019-10207/" source="CVE"/>
		<reference ref_id="CVE-2019-14814" ref_url="https://www.suse.com/security/cve/CVE-2019-14814/" source="CVE"/>
		<reference ref_id="CVE-2019-14815" ref_url="https://www.suse.com/security/cve/CVE-2019-14815/" source="CVE"/>
		<reference ref_id="CVE-2019-14816" ref_url="https://www.suse.com/security/cve/CVE-2019-14816/" source="CVE"/>
		<reference ref_id="CVE-2019-14835" ref_url="https://www.suse.com/security/cve/CVE-2019-14835/" source="CVE"/>
		<reference ref_id="CVE-2019-15030" ref_url="https://www.suse.com/security/cve/CVE-2019-15030/" source="CVE"/>
		<reference ref_id="CVE-2019-15031" ref_url="https://www.suse.com/security/cve/CVE-2019-15031/" source="CVE"/>
		<reference ref_id="CVE-2019-15090" ref_url="https://www.suse.com/security/cve/CVE-2019-15090/" source="CVE"/>
		<reference ref_id="CVE-2019-15098" ref_url="https://www.suse.com/security/cve/CVE-2019-15098/" source="CVE"/>
		<reference ref_id="CVE-2019-15099" ref_url="https://www.suse.com/security/cve/CVE-2019-15099/" source="CVE"/>
		<reference ref_id="CVE-2019-15117" ref_url="https://www.suse.com/security/cve/CVE-2019-15117/" source="CVE"/>
		<reference ref_id="CVE-2019-15118" ref_url="https://www.suse.com/security/cve/CVE-2019-15118/" source="CVE"/>
		<reference ref_id="CVE-2019-15211" ref_url="https://www.suse.com/security/cve/CVE-2019-15211/" source="CVE"/>
		<reference ref_id="CVE-2019-15212" ref_url="https://www.suse.com/security/cve/CVE-2019-15212/" source="CVE"/>
		<reference ref_id="CVE-2019-15214" ref_url="https://www.suse.com/security/cve/CVE-2019-15214/" source="CVE"/>
		<reference ref_id="CVE-2019-15215" ref_url="https://www.suse.com/security/cve/CVE-2019-15215/" source="CVE"/>
		<reference ref_id="CVE-2019-15216" ref_url="https://www.suse.com/security/cve/CVE-2019-15216/" source="CVE"/>
		<reference ref_id="CVE-2019-15217" ref_url="https://www.suse.com/security/cve/CVE-2019-15217/" source="CVE"/>
		<reference ref_id="CVE-2019-15218" ref_url="https://www.suse.com/security/cve/CVE-2019-15218/" source="CVE"/>
		<reference ref_id="CVE-2019-15219" ref_url="https://www.suse.com/security/cve/CVE-2019-15219/" source="CVE"/>
		<reference ref_id="CVE-2019-15220" ref_url="https://www.suse.com/security/cve/CVE-2019-15220/" source="CVE"/>
		<reference ref_id="CVE-2019-15221" ref_url="https://www.suse.com/security/cve/CVE-2019-15221/" source="CVE"/>
		<reference ref_id="CVE-2019-15222" ref_url="https://www.suse.com/security/cve/CVE-2019-15222/" source="CVE"/>
		<reference ref_id="CVE-2019-15239" ref_url="https://www.suse.com/security/cve/CVE-2019-15239/" source="CVE"/>
		<reference ref_id="CVE-2019-15290" ref_url="https://www.suse.com/security/cve/CVE-2019-15290/" source="CVE"/>
		<reference ref_id="CVE-2019-15292" ref_url="https://www.suse.com/security/cve/CVE-2019-15292/" source="CVE"/>
		<reference ref_id="CVE-2019-15538" ref_url="https://www.suse.com/security/cve/CVE-2019-15538/" source="CVE"/>
		<reference ref_id="CVE-2019-15666" ref_url="https://www.suse.com/security/cve/CVE-2019-15666/" source="CVE"/>
		<reference ref_id="CVE-2019-15902" ref_url="https://www.suse.com/security/cve/CVE-2019-15902/" source="CVE"/>
		<reference ref_id="CVE-2019-15917" ref_url="https://www.suse.com/security/cve/CVE-2019-15917/" source="CVE"/>
		<reference ref_id="CVE-2019-15919" ref_url="https://www.suse.com/security/cve/CVE-2019-15919/" source="CVE"/>
		<reference ref_id="CVE-2019-15920" ref_url="https://www.suse.com/security/cve/CVE-2019-15920/" source="CVE"/>
		<reference ref_id="CVE-2019-15921" ref_url="https://www.suse.com/security/cve/CVE-2019-15921/" source="CVE"/>
		<reference ref_id="CVE-2019-15924" ref_url="https://www.suse.com/security/cve/CVE-2019-15924/" source="CVE"/>
		<reference ref_id="CVE-2019-15926" ref_url="https://www.suse.com/security/cve/CVE-2019-15926/" source="CVE"/>
		<reference ref_id="CVE-2019-15927" ref_url="https://www.suse.com/security/cve/CVE-2019-15927/" source="CVE"/>
		<reference ref_id="CVE-2019-9456" ref_url="https://www.suse.com/security/cve/CVE-2019-9456/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005945.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following new features were implemented:

- jsc#SLE-4875: [CML] New device IDs for CML
- jsc#SLE-7294: Add cpufreq driver for Raspberry Pi
- fate#326869: perf: pmu mem_load/store event support
- fate#327380: KVM: Add hardware CPU Model - kernel part
- fate#327377: KVM: Support for configurable virtio-crypto
- fate#327775: vpmem: DRAM backed persistent volumes for improved SAP HANA on POWER restart times
- fate#326472: Marvell Armada 7K/8K Ethernet (incl. 10G) kernel enablement
- fate#326416: Hi1620 (Vendor: Huawei): RDMA kernel enablement
- fate#326415: Hi1620 (Vendor: Huawei): HNS3 (100G) network kernel enablement

The following security bugs were fixed:

- CVE-2019-14835: Fix QEMU-KVM Guest to Host Kernel Escape. (bsc#1150112).
- CVE-2019-15216: Fix a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver. (bsc#1146361).
- CVE-2019-15924: Fix a NULL pointer dereference because there was no -ENOMEM upon an alloc_workqueue failure. (bsc#1149612).
- CVE-2019-9456: In Pixel C USB monitor driver there was a possible OOB write due to a missing bounds check. This could have lead to local escalation of privilege with System execution privileges needed. (bsc#1150025 CVE-2019-9456).
- CVE-2019-15030, CVE-2019-15031: On the powerpc platform, a local user could read vector registers of other users' processes via an interrupt. (bsc#1149713)
- CVE-2019-15920: SMB2_read in fs/cifs/smb2pdu.c had a use-after-free. (bsc#1149626)
- CVE-2019-15921: There was a memory leak issue when idr_alloc() failed (bsc#1149602)
- CVE-2018-21008: A use-after-free can be caused by the function rsi_mac80211_detach (bsc#1149591).
- CVE-2019-15919: SMB2_write in fs/cifs/smb2pdu.c had a use-after-free. (bsc#1149552)
- CVE-2019-15917: There was a use-after-free issue when hci_uart_register_dev() failed in hci_uart_set_proto() (bsc#1149539)
- CVE-2019-15926: Out of bounds access existed in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx (bsc#1149527)
- CVE-2019-15927: An out-of-bounds access existed in the function build_audio_procunit (bsc#1149522)
- CVE-2019-15902: A backporting error reintroduced the Spectre vulnerability that it aimed to eliminate. (bnc#1149376)
- CVE-2019-15666: There was an out-of-bounds array access in __xfrm_policy_unlink, which would cause denial of service, because verify_newpolicy_info mishandled directory validation. (bsc#1148394).
- CVE-2019-15219: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver. (bsc#1146524)
- CVE-2019-14814, CVE-2019-14815, CVE-2019-14816: Fix three heap-based buffer overflows in marvell wifi chip driver kernel, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code. (bnc#1146516)
- CVE-2019-15220: There was a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver. (bsc#1146526)
- CVE-2019-15538: XFS partially wedged when a chgrp failed on account of being out of disk quota. This was primarily a local DoS attack vector, but it could result as well in remote DoS if the XFS filesystem was exported for instance via NFS. (bsc#1148032, bsc#1148093)
- CVE-2019-15290: There was a NULL pointer dereference caused by a malicious USB device in the ath6kl_usb_alloc_urb_from_pipe function (bsc#1146543).
- CVE-2019-15098: USB driver net/wireless/ath/ath6kl/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor. (bsc#1146378).
- CVE-2019-15221, CVE-2019-15222: There was a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver. (bsc#1146529, bsc#1146531)
- CVE-2019-10207: Fix a NULL pointer dereference in hci_uart bluetooth driver (bsc#1142857 bsc#1123959).
- CVE-2019-15117: parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel mishandled a short descriptor, leading to out-of-bounds memory access. (bsc#1145920).
- CVE-2019-15118: check_input_term in sound/usb/mixer.c in the Linux kernel mishandled recursion, leading to kernel stack exhaustion. (bsc#1145922).
- CVE-2017-18551: There was an out of bounds write in the function i2c_smbus_xfer_emulated. (bsc#1146163).
- CVE-2019-15090: In the qedi_dbg_* family of functions, there was an out-of-bounds read. (bsc#1146399)
- CVE-2018-20976: A use after free existed, related to xfs_fs_fill_super failure. (bsc#1146285)
- CVE-2019-15215: There was a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver. (bsc#1135642 bsc#1146425)
- CVE-2019-15212: There was a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver. (bsc#1051510 bsc#1146391).
- CVE-2019-15292: There was a use-after-free in atalk_proc_exit (bsc#1146678)
- CVE-2019-15217: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver. (bsc#1146547).
- CVE-2019-15214: There was a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. (bsc#1146550)
- CVE-2019-15218: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver. (bsc#1051510 bsc#1146413)
- CVE-2019-15211: There was a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c did not properly allocate memory. (bsc#1146519).
- CVE-2019-15239: An incorrect backport of a certain net/ipv4/tcp_output.c fix allowed a local attacker to trigger multiple use-after-free conditions. This could result in a kernel crash, or potentially in privilege escalation. (bsc#1146589)
- CVE-2019-15099: drivers/net/wireless/ath/ath10k/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor. (bsc#1146368)

The following non-security bugs were fixed:

- 9p/rdma: do not disconnect on down_interruptible EAGAIN (bsc#1051510).
- 9p/rdma: remove useless check in cm_event_handler (bsc#1051510).
- 9p/virtio: Add cleanup path in p9_virtio_init (bsc#1051510).
- 9p/xen: Add cleanup path in p9_trans_xen_init (bsc#1051510).
- 9p/xen: fix check for xenbus_read error in front_probe (bsc#1051510).
- 9p: acl: fix uninitialized iattr access (bsc#1051510).
- 9p: p9dirent_read: check network-provided name length (bsc#1051510).
- 9p: pass the correct prototype to read_cache_page (bsc#1051510).
- acpi/IORT: Fix off-by-one check in iort_dev_find_its_id() (bsc#1051510).
- acpi/arm64: ignore 5.1 FADTs that are reported as 5.0 (bsc#1051510).
- acpi: PM: Fix regression in acpi_device_set_power() (bsc#1051510).
- acpi: fix false-positive -Wuninitialized warning (bsc#1051510).
- acpica: Increase total number of possible Owner IDs (bsc#1148859).
- af_key: fix leaks in key_pol_get_resp and dump_sp (bsc#1051510).
- af_packet: Block execution of tasks waiting for transmit to complete in AF_PACKET (networking-stable-19_07_02).
- alsa: firewire: fix a memory leak bug (bsc#1051510).
- alsa: hda - Add a generic reboot_notify (bsc#1051510).
- alsa: hda - Apply workaround for another AMD chip 1022:1487 (bsc#1051510).
- alsa: hda - Do not override global PCM hw info flag (bsc#1051510).
- alsa: hda - Fix a memory leak bug (bsc#1051510).
- alsa: hda - Fix potential endless loop at applying quirks (bsc#1051510).
- alsa: hda - Fixes inverted Conexant GPIO mic mute led (bsc#1051510).
- alsa: hda - Let all conexant codec enter D3 when rebooting (bsc#1051510).
- alsa: hda - Workaround for crackled sound on AMD controller (1022:1457) (bsc#1051510).
- alsa: hda/ca0132 - Add new SBZ quirk (bsc#1051510).
- alsa: hda/realtek - Add quirk for HP Envy x360 (bsc#1051510).
- alsa: hda/realtek - Add quirk for HP Pavilion 15 (bsc#1051510).
- alsa: hda/realtek - Enable internal speaker &amp; headset mic of ASUS UX431FL (bsc#1051510).
- alsa: hda/realtek - Fix overridden device-specific initialization (bsc#1051510).
- alsa: hda/realtek - Fix the problem of two front mics on a ThinkCentre (bsc#1051510).
- alsa: hda: Fix 1-minute detection delay when i915 module is not available (bsc#1111666).
- alsa: hda: kabi workaround for generic parser flag (bsc#1051510).
- alsa: hiface: fix multiple memory leak bugs (bsc#1051510).
- alsa: line6: Fix memory leak at line6_init_pcm() error path (bsc#1051510).
- alsa: pcm: fix lost wakeup event scenarios in snd_pcm_drain (bsc#1051510).
- alsa: seq: Fix potential concurrent access to the deleted pool (bsc#1051510).
- alsa: usb-audio: Add implicit fb quirk for Behringer UFX1604 (bsc#1051510).
- alsa: usb-audio: Check mixer unit bitmap yet more strictly (bsc#1051510).
- alsa: usb-audio: Fix gpf in snd_usb_pipe_sanity_check (bsc#1051510).
- alsa: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate() (bsc#1051510).
- alsa: usb-audio: fix a memory leak bug (bsc#1111666).
- arch: integrate XIVE support (bsc#1085030, bsc#1144518, LTC#178833).
- arm64/kernel: enable A53 erratum #8434319 handling at runtime (bsc#1148219).
- arm64/kernel: rename module_emit_adrp_veneer-&gt;module_emit_veneer_for_adrp (bsc#1148219).
- arm64: fix undefined reference to 'printk' (bsc#1148219).
- arm64: kvm: Fix architecturally invalid reset value for FPEXC32_EL2 (bsc#1133021).
- arm64: module: do not BUG when exceeding preallocated PLT count (bsc#1148219).
- arm64: pci: Preserve firmware configuration when desired (SLE-9332).
- arm: (bsc#1145687) Add the following kernel config to ARM64: CONFIG_ACPI_PCI_SLOT=y CONFIG_HOTPLUG_PCI_ACPI=y
- arm: kvm: Add SMCCC_ARCH_WORKAROUND_1 fast handling (bsc#1133021).
- arm: kvm: report support for SMCCC_ARCH_WORKAROUND_1 (bsc#1133021).
- asoc: Fail card instantiation if DAI format setup fails (bsc#1051510).
- asoc: dapm: Fix handling of custom_stop_condition on DApm graph walks (bsc#1051510).
- ata: libahci: do not complain in case of deferred probe (bsc#1051510).
- ath10k: Change the warning message string (bsc#1051510).
- ath10k: Drop WARN_ON()s that always trigger during system resume (bsc#1111666).
- batman-adv: Only read OGM tvlv_len after buffer len check (bsc#1051510).
- batman-adv: Only read OGM2 tvlv_len after buffer len check (bsc#1051510).
- batman-adv: fix uninit-value in batadv_netlink_get_ifindex() (bsc#1051510).
- bcache: Revert 'bcache: use sysfs_match_string() instead of __sysfs_match_string()' (git fixes).
- bcache: bsc#1144979: kernel oops on reading sysfs cache_mode file
- bcache: fix possible memory leak in bch_cached_dev_run() (git fixes).
- bio: fix improper use of smp_mb__before_atomic() (git fixes).
- blk-mq: Fix spelling in a source code comment (git fixes).
- blk-mq: backport fixes for blk_mq_complete_e_request_sync() (bsc#1145661).
- blk-mq: introduce blk_mq_complete_request_sync() (bsc#1145661).
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait (bsc#1141543).
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait (bsc#1141543).
- block, documentation: Fix wbt_lat_usec documentation (git fixes).
- bluetooth: 6lowpan: search for destination address in all peers (bsc#1051510).
- bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug (bsc#1051510).
- bluetooth: Check state in l2cap_disconnect_rsp (bsc#1051510).
- bluetooth: btqca: Add a short delay before downloading the NVM (bsc#1051510).
- bluetooth: hci_bcsp: Fix memory leak in rx_skb (bsc#1051510).
- bluetooth: validate BLE connection interval updates (bsc#1051510).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502 jsc#SLE-4703).
- bnx2x: Disable multi-cos feature (bsc#1136498 jsc#SLE-4699).
- bnx2x: Prevent ptp_task to be rescheduled indefinitely (networking-stable-19_07_25).
- bnxt_en: Fix VNIC clearing logic for 57500 chips (bsc#1104745 ).
- bnxt_en: Fix to include flow direction in L2 key (bsc#1104745 ).
- bnxt_en: Improve RX doorbell sequence (bsc#1104745).
- bnxt_en: Use correct src_fid to determine direction of the flow (bsc#1104745).
- bonding: Always enable vlan tx offload (networking-stable-19_07_02).
- bonding: validate ip header before check IPPROTO_IGMP (networking-stable-19_07_25).
- bpf: sockmap, only create entry if ulp is not already enabled (bsc#1109837).
- bpf: sockmap, sock_map_delete needs to use xchg (bsc#1109837).
- bpf: sockmap, synchronize_rcu before free'ing map (bsc#1109837).
- btrfs: Fix delalloc inodes invalidation during transaction abort (bsc#1050911).
- btrfs: Split btrfs_del_delalloc_inode into 2 functions (bsc#1050911).
- btrfs: add a helper to retrive extent inline ref type (bsc#1149325).
- btrfs: add cleanup_ref_head_accounting helper (bsc#1050911).
- btrfs: add missing inode version, ctime and mtime updates when punching hole (bsc#1140487).
- btrfs: add one more sanity check for shared ref type (bsc#1149325).
- btrfs: clean up pending block groups when transaction commit aborts (bsc#1050911).
- btrfs: convert to use btrfs_get_extent_inline_ref_type (bsc#1149325).
- btrfs: do not abort transaction at btrfs_update_root() after failure to COW path (bsc#1150933).
- btrfs: fix assertion failure during fsync and use of stale transaction (bsc#1150562).
- btrfs: fix data loss after inode eviction, renaming it, and fsync it (bsc#1145941).
- btrfs: fix fsync not persisting dentry deletions due to inode evictions (bsc#1145942).
- btrfs: fix incremental send failure after deduplication (bsc#1145940).
- btrfs: fix pinned underflow after transaction aborted (bsc#1050911).
- btrfs: fix race between send and deduplication that lead to failures and crashes (bsc#1145059).
- btrfs: fix race leading to fs corruption after transaction abort (bsc#1145937).
- btrfs: handle delayed ref head accounting cleanup in abort (bsc#1050911).
- btrfs: prevent send failures and crashes due to concurrent relocation (bsc#1145059).
- btrfs: remove BUG() in add_data_reference (bsc#1149325).
- btrfs: remove BUG() in btrfs_extent_inline_ref_size (bsc#1149325).
- btrfs: remove BUG() in print_extent_item (bsc#1149325).
- btrfs: remove BUG_ON in __add_tree_block (bsc#1149325).
- btrfs: scrub: add memalloc_nofs protection around init_ipath (bsc#1086103).
- btrfs: start readahead also in seed devices (bsc#1144886).
- btrfs: track running balance in a simpler way (bsc#1145059).
- btrfs: use GFP_KERNEL in init_ipath (bsc#1086103).
- caif-hsi: fix possible deadlock in cfhsi_exit_module() (networking-stable-19_07_25).
- can: m_can: implement errata 'Needless activation of MRAF irq' (bsc#1051510).
- can: mcp251x: add support for mcp25625 (bsc#1051510).
- can: peak_usb: fix potential double kfree_skb() (bsc#1051510).
- can: peak_usb: force the string buffer NULL-terminated (bsc#1051510).
- can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices (bsc#1051510).
- can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices (bsc#1051510).
- can: rcar_canfd: fix possible IRQ storm on high load (bsc#1051510).
- can: sja1000: force the string buffer NULL-terminated (bsc#1051510).
- carl9170: fix misuse of device driver API (bsc#1142635).
- ceph: add btime field to ceph_inode_info (bsc#1148133 bsc#1136682).
- ceph: add ceph.snap.btime vxattr (bsc#1148133 bsc#1148570).
- ceph: add change_attr field to ceph_inode_info (bsc#1148133 bsc#1136682).
- ceph: always get rstat from auth mds (bsc#1146346).
- ceph: carry snapshot creation time with inodes (bsc#1148133 bsc#1148570).
- ceph: clean up ceph.dir.pin vxattr name sizeof() (bsc#1146346).
- ceph: clean up ceph.dir.pin vxattr name sizeof() (bsc#1146346).
- ceph: clear page dirty before invalidate page (bsc#1148133).
- ceph: decode feature bits in session message (bsc#1146346).
- ceph: decode feature bits in session message (bsc#1146346).
- ceph: do not blindly unregister session that is in opening state (bsc#1148133).
- ceph: do not blindly unregister session that is in opening state (bsc#1148133).
- ceph: do not try fill file_lock on unsuccessful GETFILELOCK reply (bsc#1148133).
- ceph: do not try fill file_lock on unsuccessful GETFILELOCK reply (bsc#1148133).
- ceph: fix 'ceph.dir.rctime' vxattr value (bsc#1148133 bsc#1135219).
- ceph: fix 'ceph.dir.rctime' vxattr value (bsc#1148133 bsc#1135219).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in fill_inode() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in fill_inode() (bsc#1148133).
- ceph: fix decode_locker to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- ceph: fix improper use of smp_mb__before_atomic() (bsc#1148133).
- ceph: fix improper use of smp_mb__before_atomic() (bsc#1148133).
- ceph: fix infinite loop in get_quota_realm() (bsc#1148133).
- ceph: fix invalid opcode (bsc#1148133 bsc#1138539).
- ceph: fix iov_iter issues in ceph_direct_read_write() (bsc#1141450).
- ceph: fix listxattr vxattr buffer length calculation (bsc#1148133 bsc#1148570).
- ceph: handle btime in cap messages (bsc#1148133 bsc#1136682).
- ceph: handle change_attr in cap messages (bsc#1148133 bsc#1136682).
- ceph: have MDS map decoding use entity_addr_t decoder (bsc#1148133 bsc#1136682).
- ceph: hold i_ceph_lock when removing caps for freeing inode (bsc#1148133).
- ceph: hold i_ceph_lock when removing caps for freeing inode (bsc#1148133).
- ceph: increment change_attribute on local changes (bsc#1148133 bsc#1136682).
- ceph: initialize superblock s_time_gran to 1 (bsc#1148133).
- ceph: remove request from waiting list before unregister (bsc#1148133).
- ceph: remove request from waiting list before unregister (bsc#1148133).
- ceph: remove unused vxattr length helpers (bsc#1148133 bsc#1148570).
- ceph: silence a checker warning in mdsc_show() (bsc#1148133).
- ceph: silence a checker warning in mdsc_show() (bsc#1148133).
- ceph: support cephfs' own feature bits (bsc#1146346).
- ceph: support getting ceph.dir.pin vxattr (bsc#1146346).
- ceph: support getting ceph.dir.pin vxattr (bsc#1146346).
- ceph: support versioned reply (bsc#1146346).
- ceph: support versioned reply (bsc#1146346).
- ceph: use bit flags to define vxattr attributes (bsc#1146346).
- cifs: Accept validate negotiate if server return NT_STATUS_NOT_SUPPORTED (bsc#1144333).
- cifs: Add DFS cache routines (bsc#1144333).
- cifs: Add direct I/O functions to file_operations (bsc#1144333).
- cifs: Add minor debug message during negprot (bsc#1144333).
- cifs: Add smb2_send_recv (bsc#1144333).
- cifs: Add support for FSCTL passthrough that write data to the server (bsc#1144333).
- cifs: Add support for direct I/O read (bsc#1144333).
- cifs: Add support for direct I/O write (bsc#1144333).
- cifs: Add support for direct pages in rdata (bsc#1144333).
- cifs: Add support for direct pages in wdata (bsc#1144333).
- cifs: Add support for failover in cifs_mount() (bsc#1144333).
- cifs: Add support for failover in cifs_reconnect() (bsc#1144333).
- cifs: Add support for failover in cifs_reconnect_tcon() (bsc#1144333).
- cifs: Add support for failover in smb2_reconnect() (bsc#1144333).
- cifs: Add support for reading attributes on SMB2+ (bsc#1051510, bsc#1144333).
- cifs: Add support for writing attributes on SMB2+ (bsc#1051510, bsc#1144333).
- cifs: Adds information-level logging function (bsc#1144333).
- cifs: Adjust MTU credits before reopening a file (bsc#1144333).
- cifs: Allocate memory for all iovs in smb2_ioctl (bsc#1144333).
- cifs: Allocate validate negotiation request through kmalloc (bsc#1144333).
- cifs: Always reset read error to -EIO if no response (bsc#1144333).
- cifs: Always resolve hostname before reconnecting (bsc#1051510, bsc#1144333).
- cifs: Avoid returning EBUSY to upper layer VFS (bsc#1144333).
- cifs: Calculate the correct request length based on page offset and tail size (bsc#1144333).
- cifs: Call MID callback before destroying transport (bsc#1144333).
- cifs: Change SMB2_open to return an iov for the error parameter (bsc#1144333).
- cifs: Check for reconnects before sending async requests (bsc#1144333).
- cifs: Check for reconnects before sending compound requests (bsc#1144333).
- cifs: Check for timeout on Negotiate stage (bsc#1091171, bsc#1144333).
- cifs: Count SMB3 credits for malformed pending responses (bsc#1144333).
- cifs: Display SMB2 error codes in the hex format (bsc#1144333).
- cifs: Do not assume one credit for async responses (bsc#1144333).
- cifs: Do not consider -ENODATA as stat failure for reads (bsc#1144333).
- cifs: Do not count -ENODATA as failure for query directory (bsc#1051510, bsc#1144333).
- cifs: Do not hide EINTR after sending network packets (bsc#1051510, bsc#1144333).
- cifs: Do not log credits when unmounting a share (bsc#1144333).
- cifs: Do not match port on SMBDirect transport (bsc#1144333).
- cifs: Do not modify mid entry after submitting I/O in cifs_call_async (bsc#1051510, bsc#1144333).
- cifs: Do not reconnect TCP session in add_credits() (bsc#1051510, bsc#1144333).
- cifs: Do not reset lease state to NONE on lease break (bsc#1051510, bsc#1144333).
- cifs: Do not set credits to 1 if the server didn't grant anything (bsc#1144333).
- cifs: Do not skip SMB2 message IDs on send failures (bsc#1144333).
- cifs: Find and reopen a file before get MTU credits in writepages (bsc#1144333).
- cifs: Fix DFS cache refresher for DFS links (bsc#1144333).
- cifs: Fix NULL pointer deref on SMB2_tcon() failure (bsc#1071009, bsc#1144333).
- cifs: Fix NULL pointer dereference of devname (bnc#1129519).
- cifs: Fix NULL ptr deref (bsc#1144333).
- cifs: Fix a debug message (bsc#1144333).
- cifs: Fix a race condition with cifs_echo_request (bsc#1144333).
- cifs: Fix a tiny potential memory leak (bsc#1144333).
- cifs: Fix adjustment of credits for MTU requests (bsc#1051510, bsc#1144333).
- cifs: Fix an issue with re-sending rdata when transport returning -EAGAIN (bsc#1144333).
- cifs: Fix an issue with re-sending wdata when transport returning -EAGAIN (bsc#1144333).
- cifs: Fix autonegotiate security settings mismatch (bsc#1087092, bsc#1144333).
- cifs: Fix check for matching with existing mount (bsc#1144333).
- cifs: Fix credit calculation for encrypted reads with errors (bsc#1051510, bsc#1144333).
- cifs: Fix credit calculations in compound mid callback (bsc#1144333).
- cifs: Fix credit computation for compounded requests (bsc#1144333).
- cifs: Fix credits calculation for cancelled requests (bsc#1144333).
- cifs: Fix credits calculations for reads with errors (bsc#1051510, bsc#1144333).
- cifs: Fix encryption/signing (bsc#1144333).
- cifs: Fix error mapping for SMB2_LOCK command which caused OFD lock problem (bsc#1051510, bsc#1144333).
- cifs: Fix error paths in writeback code (bsc#1144333).
- cifs: Fix infinite loop when using hard mount option (bsc#1091171, bsc#1144333).
- cifs: Fix invalid check in __cifs_calc_signature() (bsc#1144333).
- cifs: Fix kernel oops when traceSMB is enabled (bsc#1144333).
- cifs: Fix leaking locked VFS cache pages in writeback retry (bsc#1144333).
- cifs: Fix lease buffer length error (bsc#1144333).
- cifs: Fix memory leak in smb2_set_ea() (bsc#1051510, bsc#1144333).
- cifs: Fix missing put_xid in cifs_file_strict_mmap (bsc#1087092, bsc#1144333).
- cifs: Fix module dependency (bsc#1144333).
- cifs: Fix mounts if the client is low on credits (bsc#1144333).
- cifs: Fix possible hang during async MTU reads and writes (bsc#1051510, bsc#1144333).
- cifs: Fix possible oops and memory leaks in async IO (bsc#1144333).
- cifs: Fix potential OOB access of lock element array (bsc#1051510, bsc#1144333).
- cifs: Fix read after write for files with read caching (bsc#1051510, bsc#1144333).
- cifs: Fix separator when building path from dentry (bsc#1051510, bsc#1144333).
- cifs: Fix signing for SMB2/3 (bsc#1144333).
- cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (bsc#1144333).
- cifs: Fix slab-out-of-bounds when tracing SMB tcon (bsc#1144333).
- cifs: Fix stack out-of-bounds in smb{2,3}_create_lease_buf() (bsc#1051510, bsc#1144333).
- cifs: Fix to use kmem_cache_free() instead of kfree() (bsc#1144333).
- cifs: Fix trace command logging for SMB2 reads and writes (bsc#1144333).
- cifs: Fix use after free of a mid_q_entry (bsc#1112903, bsc#1144333).
- cifs: Fix use-after-free in SMB2_read (bsc#1144333).
- cifs: Fix use-after-free in SMB2_write (bsc#1144333).
- cifs: Fix validation of signed data in smb2 (bsc#1144333).
- cifs: Fix validation of signed data in smb3+ (bsc#1144333).
- cifs: For SMB2 security informaion query, check for minimum sized security descriptor instead of sizeof FileAllInformation class (bsc#1051510, bsc#1144333).
- cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure cifs) (bsc#1144333).
- cifs: Introduce helper function to get page offset and length in smb_rqst (bsc#1144333).
- cifs: Introduce offset for the 1st page in data transfer structures (bsc#1144333).
- cifs: Limit memory used by lock request calls to a page (bsc#1144333).
- cifs: Make devname param optional in cifs_compose_mount_options() (bsc#1144333).
- cifs: Make sure all data pages are signed correctly (bsc#1144333).
- cifs: Make use of DFS cache to get new DFS referrals (bsc#1144333).
- cifs: Mask off signals when sending SMB packets (bsc#1144333).
- cifs: Minor Kconfig clarification (bsc#1144333).
- cifs: Move credit processing to mid callbacks for SMB3 (bsc#1144333).
- cifs: Move open file handling to writepages (bsc#1144333).
- cifs: Move unlocking pages from wdata_send_pages() (bsc#1144333).
- cifs: OFD locks do not conflict with eachothers (bsc#1051510, bsc#1144333).
- cifs: Only free DFS target list if we actually got one (bsc#1144333).
- cifs: Only send SMB2_NEGOTIATE command on new TCP connections (bsc#1144333).
- cifs: Pass page offset for calculating signature (bsc#1144333).
- cifs: Pass page offset for encrypting (bsc#1144333).
- cifs: Print message when attempting a mount (bsc#1144333).
- cifs: Properly handle auto disabling of serverino option (bsc#1144333).
- cifs: Reconnect expired SMB sessions (bnc#1060662).
- cifs: Refactor out cifs_mount() (bsc#1144333).
- cifs: Remove custom credit adjustments for SMB2 async IO (bsc#1144333).
- cifs: Reopen file before get SMB2 MTU credits for async IO (bsc#1144333).
- cifs: Respect SMB2 hdr preamble size in read responses (bsc#1144333).
- cifs: Respect reconnect in MTU credits calculations (bsc#1144333).
- cifs: Respect reconnect in non-MTU credits calculations (bsc#1144333).
- cifs: Return -EAGAIN instead of -ENOTSOCK (bsc#1144333).
- cifs: Return error code when getting file handle for writeback (bsc#1144333).
- cifs: SMBD: Add SMB Direct debug counters (bsc#1144333).
- cifs: SMBD: Add SMB Direct protocol initial values and constants (bsc#1144333).
- cifs: SMBD: Add parameter rdata to smb2_new_read_req (bsc#1144333).
- cifs: SMBD: Add rdma mount option (bsc#1144333).
- cifs: SMBD: Disable signing on SMB direct transport (bsc#1144333).
- cifs: SMBD: Do not call ib_dereg_mr on invalidated memory registration (bsc#1144333).
- cifs: SMBD: Establish SMB Direct connection (bsc#1144333).
- cifs: SMBD: Fix the definition for SMB2_CHANNEL_RDMA_V1_INVALIDATE (bsc#1144333).
- cifs: SMBD: Implement RDMA memory registration (bsc#1144333).
- cifs: SMBD: Implement function to create a SMB Direct connection (bsc#1144333).
- cifs: SMBD: Implement function to destroy a SMB Direct connection (bsc#1144333).
- cifs: SMBD: Implement function to receive data via RDMA receive (bsc#1144333).
- cifs: SMBD: Implement function to reconnect to a SMB Direct transport (bsc#1144333).
- cifs: SMBD: Implement function to send data via RDMA send (bsc#1144333).
- cifs: SMBD: Read correct returned data length for RDMA write (SMB read) I/O (bsc#1144333).
- cifs: SMBD: Set SMB Direct maximum read or write size for I/O (bsc#1144333).
- cifs: SMBD: Support page offset in RDMA recv (bsc#1144333).
- cifs: SMBD: Support page offset in RDMA send (bsc#1144333).
- cifs: SMBD: Support page offset in memory registration (bsc#1144333).
- cifs: SMBD: Upper layer connects to SMBDirect session (bsc#1144333).
- cifs: SMBD: Upper layer destroys SMB Direct session on shutdown or umount (bsc#1144333).
- cifs: SMBD: Upper layer performs SMB read via RDMA write through memory registration (bsc#1144333).
- cifs: SMBD: Upper layer performs SMB write via RDMA read through memory registration (bsc#1144333).
- cifs: SMBD: Upper layer receives data via RDMA receive (bsc#1144333).
- cifs: SMBD: Upper layer reconnects to SMB Direct session (bsc#1144333).
- cifs: SMBD: Upper layer sends data via RDMA send (bsc#1144333).
- cifs: SMBD: _smbd_get_connection() can be static (bsc#1144333).
- cifs: SMBD: export protocol initial values (bsc#1144333).
- cifs: SMBD: fix spelling mistake: faield and legnth (bsc#1144333).
- cifs: SMBD: work around gcc -Wmaybe-uninitialized warning (bsc#1144333).
- cifs: Save TTL value when parsing DFS referrals (bsc#1144333).
- cifs: Select all required crypto modules (bsc#1085536, bsc#1144333).
- cifs: Set reconnect instance to one initially (bsc#1144333).
- cifs: Show locallease in /proc/mounts for cifs shares mounted with locallease feature (bsc#1144333).
- cifs: Silence uninitialized variable warning (bsc#1144333).
- cifs: Skip any trailing backslashes from UNC (bsc#1144333).
- cifs: Try to acquire credits at once for compound requests (bsc#1144333).
- cifs: Use GFP_ATOMIC when a lock is held in cifs_mount() (bsc#1144333).
- cifs: Use ULL suffix for 64-bit constant (bsc#1051510, bsc#1144333).
- cifs: Use correct packet length in SMB2_TRANSFORM header (bsc#1144333).
- cifs: Use kmemdup in SMB2_ioctl_init() (bsc#1144333).
- cifs: Use kmemdup rather than duplicating its implementation in smb311_posix_mkdir() (bsc#1144333).
- cifs: Use kzfree() to free password (bsc#1144333).
- cifs: Use offset when reading pages (bsc#1144333).
- cifs: Use smb 2 - 3 and cifsacl mount options getacl functions (bsc#1051510, bsc#1144333).
- cifs: Use smb 2 - 3 and cifsacl mount options setacl function (bsc#1051510, bsc#1144333).
- cifs: When sending data on socket, pass the correct page offset (bsc#1144333).
- cifs: a smb2_validate_and_copy_iov failure does not mean the handle is invalid (bsc#1144333).
- cifs: add .splice_write (bsc#1144333).
- cifs: add IOCTL for QUERY_INFO passthrough to userspace (bsc#1144333).
- cifs: add ONCE flag for cifs_dbg type (bsc#1144333).
- cifs: add SFM mapping for 0x01-0x1F (bsc#1144333).
- cifs: add SMB2_close_init()/SMB2_close_free() (bsc#1144333).
- cifs: add SMB2_ioctl_init/free helpers to be used with compounding (bsc#1144333).
- cifs: add SMB2_query_info_[init|free]() (bsc#1144333).
- cifs: add a new SMB2_close_flags function (bsc#1144333).
- cifs: add a smb2_compound_op and change QUERY_INFO to use it (bsc#1144333).
- cifs: add a timeout argument to wait_for_free_credits (bsc#1144333).
- cifs: add a warning if we try to to dequeue a deleted mid (bsc#1144333).
- cifs: add compound_send_recv() (bsc#1144333).
- cifs: add credits from unmatched responses/messages (bsc#1144333).
- cifs: add debug output to show nocase mount option (bsc#1144333).
- cifs: add fiemap support (bsc#1144333).
- cifs: add iface info to struct cifs_ses (bsc#1144333).
- cifs: add lease tracking to the cached root fid (bsc#1144333).
- cifs: add missing GCM module dependency (bsc#1144333).
- cifs: add missing debug entries for kconfig options (bsc#1051510, bsc#1144333).
- cifs: add missing support for ACLs in SMB 3.11 (bsc#1051510, bsc#1144333).
- cifs: add pdu_size to the TCP_Server_Info structure (bsc#1144333).
- cifs: add resp_buf_size to the mid_q_entry structure (bsc#1144333).
- cifs: add server argument to the dump_detail method (bsc#1144333).
- cifs: add server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- cifs: add sha512 secmech (bsc#1051510, bsc#1144333).
- cifs: add spinlock for the openFileList to cifsInodeInfo (bsc#1144333).
- cifs: add support for SEEK_DATA and SEEK_HOLE (bsc#1144333).
- cifs: add support for ioctl on directories (bsc#1144333).
- cifs: address trivial coverity warning (bsc#1144333).
- cifs: allow calling SMB2_xxx_free(NULL) (bsc#1144333).
- cifs: allow disabling less secure legacy dialects (bsc#1144333).
- cifs: allow guest mounts to work for smb3.11 (bsc#1051510, bsc#1144333).
- cifs: always add credits back for unsolicited PDUs (bsc#1144333).
- cifs: auto disable 'serverino' in dfs mounts (bsc#1144333).
- cifs: avoid a kmalloc in smb2_send_recv/SendReceive2 for the common case (bsc#1144333).
- cifs: cache FILE_ALL_INFO for the shared root handle (bsc#1144333).
- cifs: change SMB2_OP_RENAME and SMB2_OP_HARDLINK to use compounding (bsc#1144333).
- cifs: change SMB2_OP_SET_EOF to use compounding (bsc#1144333).
- cifs: change SMB2_OP_SET_INFO to use compounding (bsc#1144333).
- cifs: change mkdir to use a compound (bsc#1144333).
- cifs: change smb2_get_data_area_len to take a smb2_sync_hdr as argument (bsc#1144333).
- cifs: change smb2_query_eas to use the compound query-info helper (bsc#1144333).
- cifs: change unlink to use a compound (bsc#1144333).
- cifs: change validate_buf to validate_iov (bsc#1144333).
- cifs: change wait_for_free_request() to take flags as argument (bsc#1144333).
- cifs: check CIFS_MOUNT_NO_DFS when trying to reuse existing sb (bsc#1144333).
- cifs: check MaxPathNameComponentLength != 0 before using it (bsc#1085536, bsc#1144333).
- cifs: check for STATUS_USER_SESSION_DELETED (bsc#1112902, bsc#1144333).
- cifs: check if SMB2 PDU size has been padded and suppress the warning (bsc#1144333).
- cifs: check kmalloc before use (bsc#1051510, bsc#1144333).
- cifs: check kzalloc return (bsc#1144333).
- cifs: check ntwrk_buf_start for NULL before dereferencing it (bsc#1144333).
- cifs: check rsp for NULL before dereferencing in SMB2_open (bsc#1085536, bsc#1144333).
- cifs: cifs_read_allocate_pages: do not iterate through whole page array on ENOMEM (bsc#1144333).
- cifs: clean up indentation, replace spaces with tab (bsc#1144333).
- cifs: cleanup smb2ops.c and normalize strings (bsc#1144333).
- cifs: complete PDU definitions for interface queries (bsc#1144333).
- cifs: connect to servername instead of IP for IPC$ share (bsc#1051510, bsc#1144333).
- cifs: create SMB2_open_init()/SMB2_open_free() helpers (bsc#1144333).
- cifs: create a define for how many iovs we need for an SMB2_open() (bsc#1144333).
- cifs: create a define for the max number of iov we need for a SMB2 set_info (bsc#1144333).
- cifs: create a helper function for compound query_info (bsc#1144333).
- cifs: create helpers for SMB2_set_info_init/free() (bsc#1144333).
- cifs: do not allow creating sockets except with SMB1 posix exensions (bsc#1102097, bsc#1144333).
- cifs: do not attempt cifs operation on smb2+ rename error (bsc#1144333).
- cifs: do not dereference smb_file_target before null check (bsc#1051510, bsc#1144333).
- cifs: do not log STATUS_NOT_FOUND errors for DFS (bsc#1051510, bsc#1144333).
- cifs: do not return atime less than mtime (bsc#1144333).
- cifs: do not send invalid input buffer on QUERY_INFO requests (bsc#1144333).
- cifs: do not show domain= in mount output when domain is empty (bsc#1144333).
- cifs: do not use __constant_cpu_to_le32() (bsc#1144333).
- cifs: document tcon/ses/server refcount dance (bsc#1144333).
- cifs: dump IPC tcon in debug proc file (bsc#1071306, bsc#1144333).
- cifs: dump every session iface info (bsc#1144333).
- cifs: fallback to older infolevels on findfirst queryinfo retry (bsc#1144333).
- cifs: fix GlobalMid_Lock bug in cifs_reconnect (bsc#1144333).
- cifs: fix NULL deref in SMB2_read (bsc#1085539, bsc#1144333).
- cifs: fix POSIX lock leak and invalid ptr deref (bsc#1114542, bsc#1144333).
- cifs: fix SMB1 breakage (bsc#1144333).
- cifs: fix a buffer leak in smb2_query_symlink (bsc#1144333).
- cifs: fix a credits leak for compund commands (bsc#1144333).
- cifs: fix bi-directional fsctl passthrough calls (bsc#1144333).
- cifs: fix build break when CONFIG_CIFS_DEBUG2 enabled (bsc#1144333).
- cifs: fix build errors for SMB_DIRECT (bsc#1144333).
- cifs: fix circular locking dependency (bsc#1064701, bsc#1144333).
- cifs: fix computation for MAX_SMB2_HDR_SIZE (bsc#1144333).
- cifs: fix confusing warning message on reconnect (bsc#1144333).
- cifs: fix crash in cifs_dfs_do_automount (bsc#1144333).
- cifs: fix crash in smb2_compound_op()/smb2_set_next_command() (bsc#1144333).
- cifs: fix crash querying symlinks stored as reparse-points (bsc#1144333).
- cifs: fix credits leak for SMB1 oplock breaks (bsc#1144333).
- cifs: fix deadlock in cached root handling (bsc#1144333).
- cifs: fix encryption in SMB3.1.1 (bsc#1144333).
- cifs: fix handle leak in smb2_query_symlink() (bsc#1144333).
- cifs: fix incorrect handling of smb2_set_sparse() return in smb3_simple_falloc (bsc#1144333).
- cifs: fix kref underflow in close_shroot() (bsc#1144333).
- cifs: fix memory leak and remove dead code (bsc#1144333).
- cifs: fix memory leak in SMB2_open() (bsc#1112894, bsc#1144333).
- cifs: fix memory leak in SMB2_read (bsc#1144333).
- cifs: fix memory leak of an allocated cifs_ntsd structure (bsc#1144333).
- cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case (bsc#1144333).
- cifs: fix page reference leak with readv/writev (bsc#1144333).
- cifs: fix panic in smb2_reconnect (bsc#1144333).
- cifs: fix parsing of symbolic link error response (bsc#1144333).
- cifs: fix return value for cifs_listxattr (bsc#1051510, bsc#1144333).
- cifs: fix rmmod regression in cifs.ko caused by force_sig changes (bsc#1144333).
- cifs: fix sha512 check in cifs_crypto_secmech_release (bsc#1051510, bsc#1144333).
- cifs: fix signed/unsigned mismatch on aio_read patch (bsc#1144333).
- cifs: fix smb3_zero_range for Azure (bsc#1144333).
- cifs: fix smb3_zero_range so it can expand the file-size when required (bsc#1144333).
- cifs: fix sparse warning on previous patch in a few printks (bsc#1144333).
- cifs: fix spelling mistake, EACCESS -&gt; EACCES (bsc#1144333).
- cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (bsc#1144333).
- cifs: fix typo in cifs_dbg (bsc#1144333).
- cifs: fix typo in debug message with struct field ia_valid (bsc#1144333).
- cifs: fix uninitialized ptr deref in smb2 signing (bsc#1144333).
- cifs: fix use-after-free of the lease keys (bsc#1144333).
- cifs: fix wrapping bugs in num_entries() (bsc#1051510, bsc#1144333).
- cifs: flush before set-info if we have writeable handles (bsc#1144333).
- cifs: handle large EA requests more gracefully in smb2+ (bsc#1144333).
- cifs: handle netapp error codes (bsc#1136261).
- cifs: hide unused functions (bsc#1051510, bsc#1144333).
- cifs: hide unused functions (bsc#1051510, bsc#1144333).
- cifs: implement v3.11 preauth integrity (bsc#1051510, bsc#1144333).
- cifs: integer overflow in in SMB2_ioctl() (bsc#1051510, bsc#1144333).
- cifs: invalidate cache when we truncate a file (bsc#1051510, bsc#1144333).
- cifs: keep FileInfo handle live during oplock break (bsc#1106284, bsc#1131565, bsc#1144333).
- cifs: limit amount of data we request for xattrs to CIFSMaxBufSize (bsc#1144333).
- cifs: make 'nodfs' mount opt a superblock flag (bsc#1051510, bsc#1144333).
- cifs: make IPC a regular tcon (bsc#1071306, bsc#1144333).
- cifs: make arrays static const, reduces object code size (bsc#1144333).
- cifs: make minor clarifications to module params for cifs.ko (bsc#1144333).
- cifs: make mknod() an smb_version_op (bsc#1144333).
- cifs: make rmdir() use compounding (bsc#1144333).
- cifs: make smb_send_rqst take an array of requests (bsc#1144333).
- cifs: minor clarification in comments (bsc#1144333).
- cifs: minor updates to module description for cifs.ko (bsc#1144333).
- cifs: move default port definitions to cifsglob.h (bsc#1144333).
- cifs: move large array from stack to heap (bsc#1144333).
- cifs: only wake the thread for the very last PDU in a compound (bsc#1144333).
- cifs: parse and store info on iface queries (bsc#1144333).
- cifs: pass flags down into wait_for_free_credits() (bsc#1144333).
- cifs: pass page offsets on SMB1 read/write (bsc#1144333).
- cifs: prevent integer overflow in nxt_dir_entry() (bsc#1051510, bsc#1144333).
- cifs: prevent starvation in wait_for_free_credits for multi-credit requests (bsc#1144333).
- cifs: print CIFSMaxBufSize as part of /proc/fs/cifs/DebugData (bsc#1144333).
- cifs: protect against server returning invalid file system block size (bsc#1144333).
- cifs: prototype declaration and definition for smb 2 - 3 and cifsacl mount options (bsc#1051510, bsc#1144333).
- cifs: prototype declaration and definition to set acl for smb 2 - 3 and cifsacl mount options (bsc#1051510, bsc#1144333).
- cifs: push rfc1002 generation down the stack (bsc#1144333).
- cifs: read overflow in is_valid_oplock_break() (bsc#1144333).
- cifs: refactor and clean up arguments in the reparse point parsing (bsc#1144333).
- cifs: refactor crypto shash/sdesc allocation&amp;free (bsc#1051510, bsc#1144333).
- cifs: release auth_key.response for reconnect (bsc#1085536, bsc#1144333).
- cifs: release cifs root_cred after exit_cifs (bsc#1085536, bsc#1144333).
- cifs: remove coverity warning in calc_lanman_hash (bsc#1144333).
- cifs: remove header_preamble_size where it is always 0 (bsc#1144333).
- cifs: remove redundant duplicated assignment of pointer 'node' (bsc#1144333).
- cifs: remove rfc1002 hardcoded constants from cifs_discard_remaining_data() (bsc#1144333).
- cifs: remove rfc1002 header from all SMB2 response structures (bsc#1144333).
- cifs: remove rfc1002 header from smb2 read/write requests (bsc#1144333).
- cifs: remove rfc1002 header from smb2_close_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_create_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_echo_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_flush_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_ioctl_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_lease_ack (bsc#1144333).
- cifs: remove rfc1002 header from smb2_lock_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_logoff_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_negotiate_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_oplock_break we get from server (bsc#1144333).
- cifs: remove rfc1002 header from smb2_query_directory_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_query_info_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_sess_setup_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_set_info_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_tree_connect_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_tree_disconnect_req (bsc#1144333).
- cifs: remove set but not used variable 'cifs_sb' (bsc#1144333).
- cifs: remove set but not used variable 'sep' (bsc#1144333).
- cifs: remove set but not used variable 'server' (bsc#1144333).
- cifs: remove set but not used variable 'smb_buf' (bsc#1144333).
- cifs: remove small_smb2_init (bsc#1144333).
- cifs: remove smb2_send_recv() (bsc#1144333).
- cifs: remove struct smb2_hdr (bsc#1144333).
- cifs: remove struct smb2_oplock_break_rsp (bsc#1144333).
- cifs: remove the is_falloc argument to SMB2_set_eof (bsc#1144333).
- cifs: remove unused stats (bsc#1144333).
- cifs: remove unused value pointed out by Coverity (bsc#1144333).
- cifs: remove unused variable from SMB2_read (bsc#1144333).
- cifs: rename and clarify CIFS_ASYNC_OP and CIFS_NO_RESP (bsc#1144333).
- cifs: replace a 4 with server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- cifs: replace snprintf with scnprintf (bsc#1144333).
- cifs: return -ENODATA when deleting an xattr that does not exist (bsc#1144333).
- cifs: return correct errors when pinning memory failed for direct I/O (bsc#1144333).
- cifs: return error on invalid value written to cifsFYI (bsc#1144333).
- cifs: set *resp_buf_type to NO_BUFFER on error (bsc#1144333).
- cifs: set mapping error when page writeback fails in writepage or launder_pages (bsc#1144333).
- cifs: set oparms.create_options rather than or'ing in CREATE_OPEN_BACKUP_INTENT (bsc#1144333).
- cifs: show 'soft' in the mount options for hard mounts (bsc#1144333).
- cifs: show the w bit for writeable /proc/fs/cifs/* files (bsc#1144333).
- cifs: silence compiler warnings showing up with gcc-8.0.0 (bsc#1090734, bsc#1144333).
- cifs: simple stats should always be enabled (bsc#1144333).
- cifs: simplify code by removing CONFIG_CIFS_ACL ifdef  (bsc#1144333). - Update config files.
- cifs: simplify how we handle credits in compound_send_recv() (bsc#1144333).
- cifs: smb2 commands can not be negative, remove confusing check (bsc#1144333).
- cifs: smb2ops: Fix NULL check in smb2_query_symlink (bsc#1144333).
- cifs: smb2ops: Fix listxattr() when there are no EAs (bsc#1051510, bsc#1144333).
- cifs: smb2pdu: Fix potential NULL pointer dereference (bsc#1144333).
- cifs: smbd: Avoid allocating iov on the stack (bsc#1144333).
- cifs: smbd: Check for iov length on sending the last iov (bsc#1144333).
- cifs: smbd: Do not destroy transport on RDMA disconnect (bsc#1144333).
- cifs: smbd: Do not use RDMA read/write when signing is used (bsc#1144333).
- cifs: smbd: Dump SMB packet when configured (bsc#1144333).
- cifs: smbd: Enable signing with smbdirect (bsc#1144333).
- cifs: smbd: Indicate to retry on transport sending failure (bsc#1144333).
- cifs: smbd: Retry on memory registration failure (bsc#1144333).
- cifs: smbd: Return EINTR when interrupted (bsc#1144333).
- cifs: smbd: avoid reconnect lockup (bsc#1144333).
- cifs: smbd: depend on INFINIBAND_ADDR_TRANS (bsc#1144333).
- cifs: smbd: disconnect transport on RDMA errors (bsc#1144333).
- cifs: smbd: take an array of reqeusts when sending upper layer data (bsc#1144333).
- cifs: start DFS cache refresher in cifs_mount() (bsc#1144333).
- cifs: store the leaseKey in the fid on SMB2_open (bsc#1051510, bsc#1144333).
- cifs: suppress some implicit-fallthrough warnings (bsc#1144333).
- cifs: track writepages in vfs operation counters (bsc#1144333).
- cifs: update __smb_send_rqst() to take an array of requests (bsc#1144333).
- cifs: update calc_size to take a server argument (bsc#1144333).
- cifs: update init_sg, crypt_message to take an array of rqst (bsc#1144333).
- cifs: update internal module number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.12 (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.12 (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.14 (bsc#1144333).
- cifs: update module internal version number (bsc#1144333).
- cifs: update multiplex loop to handle compounded responses (bsc#1144333).
- cifs: update receive_encrypted_standard to handle compounded responses (bsc#1144333).
- cifs: update smb2_calc_size to use smb2_sync_hdr instead of smb2_hdr (bsc#1144333).
- cifs: update smb2_check_message to handle PDUs without a 4 byte length header (bsc#1144333).
- cifs: update smb2_queryfs() to use compounding (bsc#1144333).
- cifs: use a compound for setting an xattr (bsc#1144333).
- cifs: use a refcount to protect open/closing the cached file handle (bsc#1144333).
- cifs: use correct format characters (bsc#1144333).
- cifs: use tcon_ipc instead of use_ipc parameter of SMB2_ioctl (bsc#1071306, bsc#1144333).
- cifs: use the correct length when pinning memory for direct I/O for write (bsc#1144333).
- cifs: wait_for_free_credits() make it possible to wait for &gt;=1 credits (bsc#1144333).
- cifs: we can not use small padding iovs together with encryption (bsc#1144333).
- cifs: zero sensitive data when freeing (bsc#1087092, bsc#1144333).
- cifs: zero-range does not require the file is sparse (bsc#1144333).
- cifs:smbd Use the correct DMA direction when sending data (bsc#1144333).
- cifs:smbd When reconnecting to server, call smbd_destroy() after all MIDs have been called (bsc#1144333).
- cifs_lookup(): cifs_get_inode_...() never returns 0 with *inode left NULL (bsc#1144333).
- cifs_lookup(): switch to d_splice_alias() (bsc#1144333).
- clk: Export clk_bulk_prepare() (bsc#1144813).
- clk: add clk_bulk_get accessories (bsc#1144813).
- clk: bcm2835: remove pllb (jsc#SLE-7294).
- clk: bcm283x: add driver interfacing with Raspberry Pi's firmware (jsc#SLE-7294).
- clk: bulk: silently error out on EPROBE_DEFER (bsc#1144718,bsc#1144813).
- clk: raspberrypi: register platform device for raspberrypi-cpufreq (jsc#SLE-7294).
- clk: renesas: cpg-mssr: Fix reset control race condition (bsc#1051510).
- clk: rockchip: Add 1.6GHz PLL rate for rk3399 (bsc#1144718,bsc#1144813).
- clk: rockchip: assign correct id for pclk_ddr and hclk_sd in rk3399 (bsc#1144718,bsc#1144813).
- compat_ioctl: pppoe: fix PPPOEIOCSFWD handling (bsc#1051510).
- config: arm64: Remove CONFIG_ARM64_MODULE_CMODEL_LARGE Option removed by patches in bsc#1148219
- coredump: split pipe command whitespace before expanding template (bsc#1051510).
- cpu/speculation: Warn on unsupported mitigations= parameter (bsc#1114279).
- cpufreq: add driver for Raspberry Pi (jsc#SLE-7294).
- cpufreq: dt: Try freeing static OPPs only if we have added them (jsc#SLE-7294).
- crypto: ccp - Add support for valid authsize values less than 16 (bsc#1051510).
- crypto: ccp - Fix oops by properly managing allocated structures (bsc#1051510).
- crypto: ccp - Ignore tag length when decrypting GCM ciphertext (bsc#1051510).
- crypto: ccp - Ignore unconfigured CCP device on suspend/resume (bnc#1145934).
- crypto: ccp - Validate buffer lengths for copy operations (bsc#1051510).
- crypto: talitos - fix skcipher failure due to wrong output IV (bsc#1051510).
- crypto: virtio - Read crypto services and algorithm masks (jsc#SLE-5844 jsc#SLE-6331 bsc#1145446 LTC#175307).
- crypto: virtio - Register an algo only if it's supported (jsc#SLE-5844 jsc#SLE-6331 bsc#1145446 LTC#175307).
- cx82310_eth: fix a memory leak bug (bsc#1051510).
- dax: dax_layout_busy_page() should not unmap cow pages (bsc#1148698).
- devres: always use dev_name() in devm_ioremap_resource() (git fixes).
- dfs_cache: fix a wrong use of kfree in flush_cache_ent() (bsc#1144333).
- dm btree: fix order of block initialization in btree_split_beneath (git fixes).
- dm bufio: fix deadlock with loop device (git fixes).
- dm cache metadata: Fix loading discard bitset (git fixes).
- dm crypt: do not overallocate the integrity tag space (git fixes).
- dm crypt: fix parsing of extended IV arguments (git fixes).
- dm delay: fix a crash when invalid device is specified (git fixes).
- dm integrity: change memcmp to strncmp in dm_integrity_ctr (git fixes).
- dm integrity: correctly calculate the size of metadata area (git fixes).
- dm integrity: fix a crash due to BUG_ON in __journal_read_write() (git fixes).
- dm integrity: fix deadlock with overlapping I/O (git fixes).
- dm integrity: limit the rate of error messages (git fixes).
- dm kcopyd: always complete failed jobs (git fixes).
- dm raid: add missing cleanup in raid_ctr() (git fixes).
- dm space map metadata: fix missing store of apply_bops() return value (git fixes).
- dm table: fix invalid memory accesses with too high sector number (git fixes).
- dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (git fixes).
- dm thin: fix bug where bio that overwrites thin block ignores FUA (git fixes).
- dm thin: fix passdown_double_checking_shared_status() (git fixes).
- dm zoned: Fix zone report handling (git fixes).
- dm zoned: Silence a static checker warning (git fixes).
- dm zoned: fix potential NULL dereference in dmz_do_reclaim() (git fixes).
- dm zoned: fix zone state management race (git fixes).
- dm zoned: improve error handling in i/o map code (git fixes).
- dm zoned: improve error handling in reclaim (git fixes).
- dm zoned: properly handle backing device failure (git fixes).
- dm: fix to_sector() for 32bit (git fixes).
- dm: revert 8f50e358153d ('dm: limit the max bio size as BIO_MAX_PAGES * PAGE_SIZE') (git fixes).
- dma-buf: balance refcount inbalance (bsc#1051510).
- dmaengine: rcar-dmac: Reject zero-length slave DMA requests (bsc#1051510).
- documentation/networking: fix default_ttl typo in mpls-sysctl (bsc#1051510).
- documentation: Add nospectre_v1 parameter (bsc#1051510).
- documentation: Update Documentation for iommu.passthrough (bsc#1136039).
- driver core: Fix use-after-free and double free on glue directory (bsc#1131281).
- drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl (bsc#1051510).
- drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings (bsc#1051510).
- drm/amd/display: Always allocate initial connector state state (bsc#1111666).
- drm/amd/display: Disable ABM before destroy ABM struct (bsc#1111666).
- drm/amd/display: Fill prescale_params-&gt;scale for RGB565 (bsc#1111666).
- drm/amd/display: Fix dc_create failure handling and 666 color depths (bsc#1111666).
- drm/amd/display: Increase size of audios array (bsc#1111666).
- drm/amd/display: Only enable audio if speaker allocation exists (bsc#1111666).
- drm/amd/display: Remove redundant non-zero and overflow check (bsc#1145946).
- drm/amd/display: Wait for backlight programming completion in set backlight level (bsc#1111666).
- drm/amd/display: fix compilation error (bsc#1111666).
- drm/amd/display: num of sw i2c/aux engines less than num of connectors (bsc#1145946).
- drm/amd/display: use encoder's engine id to find matched free audio device (bsc#1111666).
- drm/amdgpu/psp: move psp version specific function pointers to (bsc#1135642)
- drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE (bsc#1111666).
- drm/amdgpu: Add APTX quirk for Dell Latitude 5495 (bsc#1142635)
- drm/amdgpu: added support 2nd UVD instance (bsc#1143331).
- drm/amdgpu: fix a potential information leaking bug (bsc#1111666).
- drm/amdgpu:change VEGA booting with firmware loaded by PSP (bsc#1143331).
- drm/amdkfd: Fix a potential memory leak (bsc#1111666).
- drm/amdkfd: Fix sdma queue map issue (bsc#1111666).
- drm/bridge: lvds-encoder: Fix build error while CONFIG_DRM_KMS_HELPER=m (bsc#1111666).
- drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz (bsc#1051510).
- drm/bridge: tc358767: read display_props in get_modes() (bsc#1051510).
- drm/crc-debugfs: Also sprinkle irqrestore over early exits (bsc#1051510).
- drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry (bsc#1051510).
- drm/edid: parse CEA blocks embedded in DisplayID (bsc#1111666).
- drm/etnaviv: add missing failure path to destroy suballoc (bsc#1135642)
- drm/exynos: fix missing decrement of retry counter (bsc#1111666).
- drm/i915/gvt: fix incorrect cache entry for guest page mapping (bsc#1111666).
- drm/i915/perf: ensure we keep a reference on the driver (bsc#1051510).
- drm/i915/perf: ensure we keep a reference on the driver (bsc#1142635)
- drm/i915/perf: fix ICL perf register offsets (bsc#1111666).
- drm/i915/userptr: Acquire the page lock around set_page_dirty() (bsc#1051510).
- drm/i915: Do not deballoon unused ggtt drm_mm_node in linux guest (bsc#1142635)
- drm/i915: Fix GEN8_MCR_SELECTOR programming (bsc#1111666).
- drm/i915: Fix HW readout for crtc_clock in HDMI mode (bsc#1111666).
- drm/i915: Fix the TBT AUX power well enabling (bsc#1111666).
- drm/i915: Fix wrong escape clock divisor init for GLK (bsc#1051510).
- drm/i915: Fix wrong escape clock divisor init for GLK (bsc#1142635)
- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- drm/i915: Revert i915 userptr page lock patch (bsc#1145051)
- drm/imx: notify drm core before sending event during crtc disable (bsc#1135642)
- drm/imx: only send event on crtc disable if kept disabled (bsc#1135642)
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver (bsc#1135642)
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable() (bsc#1135642)
- drm/mediatek: clear num_pipes when unbind driver (bsc#1135642)
- drm/mediatek: fix unbind functions (bsc#1135642)
- drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto (bsc#1111666).
- drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto (bsc#1142635)
- drm/mediatek: unbind components in mtk_drm_unbind() (bsc#1135642)
- drm/mediatek: use correct device to import PRIME buffers (bsc#1111666).
- drm/mediatek: use correct device to import PRIME buffers (bsc#1142635)
- drm/msm/mdp5: Fix mdp5_cfg_init error return (bsc#1142635)
- drm/msm: Depopulate platform on probe failure (bsc#1051510).
- drm/nouveau: Do not retry infinitely when receiving no data on i2c (bsc#1142635)
- drm/nouveau: fix memory leak in nouveau_conn_reset() (bsc#1051510).
- drm/panel: simple: Fix panel_simple_dsi_probe (bsc#1051510).
- drm/rockchip: Suspend DP late (bsc#1051510).
- drm/rockchip: Suspend DP late (bsc#1142635)
- drm/udl: introduce a macro to convert dev to udl. (bsc#1113722)
- drm/udl: move to embedding drm device inside udl device. (bsc#1113722)
- drm/virtio: Add memory barriers for capset cache (bsc#1051510).
- drm/vmwgfx: Use the backdoor port if the HB port is not available (bsc#1135642)
- drm/vmwgfx: fix a warning due to missing dma_parms (bsc#1135642)
- drm/vmwgfx: fix memory leak when too many retries have occurred (bsc#1051510).
- drm: msm: Fix add_gpu_components (bsc#1051510).
- drm: silence variable 'conn' set but not used (bsc#1051510).
- eCryptfs: fix a couple type promotion bugs (bsc#1051510).
- edac, amd64: Add Family 17h, models 10h-2fh support (bsc#1112178).
- edac/amd64: Add Family 17h Model 30h PCI IDs (bsc#1112178).
- edac/amd64: Adjust printed chip select sizes when interleaved (bsc#1131489).
- edac/amd64: Cache secondary Chip Select registers (bsc#1131489).
- edac/amd64: Decode syndrome before translating address (bsc#1131489).
- edac/amd64: Find Chip Select memory size using Address Mask (bsc#1131489).
- edac/amd64: Initialize DIMM info for systems with more than two channels (bsc#1131489).
- edac/amd64: Recognize DRAM device type ECC capability (bsc#1131489).
- edac/amd64: Recognize x16 symbol size (bsc#1131489).
- edac/amd64: Set maximum channel layer size depending on family (bsc#1131489).
- edac/amd64: Support asymmetric dual-rank DIMMs (bsc#1131489).
- edac/amd64: Support more than two Unified Memory Controllers (bsc#1131489).
- edac/amd64: Support more than two controllers for chip selects handling (bsc#1131489).
- edac/amd64: Use a macro for iterating over Unified Memory Controllers (bsc#1131489).
- edac: Fix global-out-of-bounds write when setting edac_mc_poll_msec (bsc#1114279).
- efi/bgrt: Drop BGRT status field reserved bits check (bsc#1051510).
- ehea: Fix a copy-paste err in ehea_init_port_res (bsc#1051510).
- ext4: use jbd2_inode dirty range scoping (bsc#1148616).
- firmware: raspberrypi: register clk device (jsc#SLE-7294).
- firmware: ti_sci: Always request response from firmware (bsc#1051510).
- fix incorrect error code mapping for OBJECTID_NOT_FOUND (bsc#1144333).
- fix smb3-encryption breakage when CONFIG_DEBUG_SG=y (bsc#1051510, bsc#1144333).
- fix struct ufs_req removal of unused field (git-fixes).
- floppy: fix invalid pointer dereference in drive_name (bsc#1111666).
- floppy: fix out-of-bounds read in next_valid_format (bsc#1111666).
- fs/*/Kconfig: drop links to 404-compliant http://acl.bestbits.at (bsc#1144333).
- fs/cifs/cifsacl.c Fixes typo in a comment (bsc#1144333).
- fs/cifs/smb2pdu.c: fix buffer free in SMB2_ioctl_free (bsc#1144333).
- fs/cifs: Simplify ib_post_(send|recv|srq_recv)() calls (bsc#1144333).
- fs/cifs: do not translate SFM_SLASH (U+F026) to backslash (bsc#1144333).
- fs/cifs: fix uninitialised variable warnings (bsc#1144333).
- fs/cifs: require sha512 (bsc#1051510, bsc#1144333).
- fs/cifs: suppress a string overflow warning (bsc#1144333).
- fs/xfs: Fix return code of xfs_break_leased_layouts() (bsc#1148031).
- fs: cifs: Drop unlikely before IS_ERR(_OR_NULL) (bsc#1144333).
- fs: cifs: Kconfig: pedantic formatting (bsc#1144333).
- fs: cifs: Replace _free_xid call in cifs_root_iget function (bsc#1144333).
- fs: cifs: cifsssmb: Change return type of convert_ace_to_cifs_ace (bsc#1144333).
- fs: xfs: xfs_log: Do not use KM_MAYFAIL at xfs_log_reserve() (bsc#1148033).
- fsl/fman: Use GFP_ATOMIC in {memac,tgec}_add_hash_mac_address() (bsc#1051510).
- ftrace: Check for empty hash and comment the race with registering probes (bsc#1149418).
- ftrace: Check for successful allocation of hash (bsc#1149424).
- ftrace: Fix NULL pointer dereference in t_probe_next() (bsc#1149413).
- gpio: Fix build error of function redefinition (bsc#1051510).
- gpio: gpio-omap: add check for off wake capable gpios (bsc#1051510).
- gpio: mxs: Get rid of external API call (bsc#1051510).
- gpio: omap: ensure irq is enabled before wakeup (bsc#1051510).
- gpio: pxa: handle corner case of unprobed device (bsc#1051510).
- gpiolib: fix incorrect IRQ requesting of an active-low lineevent (bsc#1051510).
- gpiolib: never report open-drain/source lines as 'input' to user-space (bsc#1051510).
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM (bsc#1142635)
- hid: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT (bsc#1051510).
- hid: Add quirk for HP X1200 PIXART OEM mouse (bsc#1051510).
- hid: cp2112: prevent sleeping function called from invalid context (bsc#1051510).
- hid: hiddev: avoid opening a disconnected device (bsc#1051510).
- hid: hiddev: do cleanup in failure of opening a device (bsc#1051510).
- hid: holtek: test for sanity of intfdata (bsc#1051510).
- hid: sony: Fix race condition between rumble and device remove (bsc#1051510).
- hid: wacom: Correct distance scale for 2nd-gen Intuos devices (bsc#1142635).
- hid: wacom: correct misreported EKR ring values (bsc#1142635).
- hid: wacom: fix bit shift for Cintiq Companion 2 (bsc#1051510).
- hpet: Fix division by zero in hpet_time_div() (bsc#1051510).
- hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 (bsc#1051510).
- hwmon: (nct7802) Fix wrong detection of in4 presence (bsc#1051510).
- i2c: emev2: avoid race when unregistering slave client (bsc#1051510).
- i2c: piix4: Fix port selection for AMD Family 16h Model 30h (bsc#1051510).
- i2c: qup: fixed releasing dma without flush operation completion (bsc#1051510).
- ia64: Get rid of iommu_pass_through (bsc#1136039).
- ib/mlx5: Fix MR registration flow to use UMR properly (bsc#1093205 bsc#1145678).
- ibmveth: Convert multicast list size for little-endian system (bsc#1061843).
- ibmvnic: Do not process reset during or after device removal (bsc#1149652 ltc#179635).
- ibmvnic: Unmap DMA address of TX descriptor buffers after use (bsc#1146351 ltc#180726).
- igmp: fix memory leak in igmpv3_del_delrec() (networking-stable-19_07_25).
- iio: adc: max9611: Fix misuse of GENMASK macro (bsc#1051510).
- iio: adc: max9611: Fix temperature reading in probe (bsc#1051510).
- iio: iio-utils: Fix possible incorrect mask calculation (bsc#1051510).
- improve security, move default dialect to SMB3 from old CIFS (bsc#1051510, bsc#1144333).
- include/linux/bitops.h: sanitize rotate primitives (git fixes).
- input: alps - do not handle ALPS cs19 trackpoint-only device (bsc#1051510).
- input: alps - fix a mismatch between a condition check and its comment (bsc#1051510).
- input: iforce - add sanity checks (bsc#1051510).
- input: kbtab - sanity check for endpoint type (bsc#1051510).
- input: synaptics - enable RMI mode for HP Spectre X360 (bsc#1051510).
- input: synaptics - whitelist Lenovo T580 SMBus intertouch (bsc#1051510).
- input: trackpoint - only expose supported controls for Elan, ALPS and NXP (bsc#1051510).
- intel_th: pci: Add Ice Lake NNPI support (bsc#1051510).
- intel_th: pci: Add Tiger Lake support (bsc#1051510).
- intel_th: pci: Add support for another Lewisburg PCH (bsc#1051510).
- iommu/amd: Add support for X2APIC IOMMU interrupts (bsc#1145010).
- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- iommu/amd: Move iommu_init_pci() to .init section (bsc#1149105).
- iommu/amd: Request passthrough mode from IOMMU core (bsc#1136039).
- iommu/dma: Handle SG length overflow better (bsc#1146084).
- iommu/iova: Remove stale cached32_node (bsc#1145018).
- iommu/vt-d: Request passthrough mode from IOMMU core (bsc#1136039).
- iommu: Add helpers to set/get default domain type (bsc#1136039).
- iommu: Disable passthrough mode when SME is active (bsc#1136039).
- iommu: Print default domain type on boot (bsc#1136039).
- iommu: Remember when default domain type was set on kernel command line (bsc#1136039).
- iommu: Set default domain type at runtime (bsc#1136039).
- iommu: Use Functions to set default domain type in iommu_set_def_domain_type() (bsc#1136039).
- ipip: validate header length in ipip_tunnel_xmit (git-fixes).
- ipv4: do not set IPv6 only flags to IPv4 addresses (networking-stable-19_07_25).
- irqchip/gic-v2m: Add support for Amazon Graviton variant of GICv3+GICv2m (SLE-9332).
- irqchip/gic-v3-its: fix build warnings (bsc#1144880).
- isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack (bsc#1051510).
- isdn: hfcsusb: checking idx of ep configuration (bsc#1051510).
- isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain() (bsc#1051510).
- iversion: add a routine to update a raw value with a larger one (bsc#1148133).
- iwlwifi: dbg: split iwl_fw_error_dump to two functions (bsc#1119086).
- iwlwifi: do not unmap as page memory that was mapped as single (bsc#1051510).
- iwlwifi: fix bad dma handling in page_mem dumping flow (bsc#1120902).
- iwlwifi: fw: use helper to determine whether to dump paging (bsc#1106434). Patch needed to be adjusted, because our tree does not have the global variable IWL_FW_ERROR_DUMP_PAGING
- iwlwifi: mvm: do not send GEO_TX_POWER_LIMIT on version &amp;lt; 41 (bsc#1142635).
- iwlwifi: mvm: fix an out-of-bound access (bsc#1051510).
- iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support (bsc#1142635).
- iwlwifi: pcie: do not service an interrupt that was masked (bsc#1142635).
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X (bsc#1142635).
- ixgbe: fix possible deadlock in ixgbe_service_task() (bsc#1113994).
- jbd2: flush_descriptor(): Do not decrease buffer head's ref count (bsc#1143843).
- jbd2: introduce jbd2_inode dirty range scoping (bsc#1148616).
- kABI: Fix kABI for 'struct amd_iommu' (bsc#1145010).
- kABI: Fix kABI for x86 pci-dma code (bsc#1136039).
- kabi/severities: Exclude drivers/crypto/ccp/*
- kabi/severities: match SLE15 entry ordering.
- kasan: remove redundant initialization of variable 'real_size' (git fixes).
- kconfig/[mn]conf: handle backspace (^H) key (bsc#1051510).
- keys: Fix missing null pointer check in request_key_auth_describe() (bsc#1051510).
- kvm/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel (bsc#1133021).
- kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (bsc#1134881 bsc#1134882).
- kvm: Disallow wraparound in kvm_gfn_to_hva_cache_init (bsc#1133021).
- kvm: Fix leak vCPU's VMCS value into other pCPU (bsc#1145388).
- kvm: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC (bsc#1145408).
- kvm: PPC: Book3S HV: Fix CR0 setting in TM emulation (bsc#1061840).
- kvm: Reject device ioctls from processes other than the VM's creator (bsc#1133021).
- kvm: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value (bsc#1145393).
- kvm: VMX: Fix handling of #MC that occurs during VM-Entry (bsc#1145395).
- kvm: VMX: check CPUID before allowing read/write of IA32_XSS (bsc#1145394).
- kvm: X86: Reduce the overhead when lapic_timer_advance is disabled (bsc#1149083).
- kvm: arm/arm64: Close VMID generation race (bsc#1133021).
- kvm: arm/arm64: Convert kvm_host_cpu_state to a static per-cpu allocation (bsc#1133021).
- kvm: arm/arm64: Drop resource size check for GICV window (bsc#1133021).
- kvm: arm/arm64: Fix VMID alloc race by reverting to lock-less (bsc#1133021).
- kvm: arm/arm64: Fix lost IRQs from emulated physcial timer when blocked (bsc#1133021).
- kvm: arm/arm64: Handle CPU_PM_ENTER_FAILED (bsc#1133021).
- kvm: arm/arm64: Reduce verbosity of KVM init log (bsc#1133021).
- kvm: arm/arm64: Set dist-&gt;spis to NULL after kfree (bsc#1133021).
- kvm: arm/arm64: Skip updating PMD entry if no change (bsc#1133021).
- kvm: arm/arm64: Skip updating PTE entry if no change (bsc#1133021).
- kvm: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list (bsc#1133021).
- kvm: arm/arm64: vgic-v3: Tighten synchronization for guests using v2 on v3 (bsc#1133021).
- kvm: arm/arm64: vgic: Add missing irq_lock to vgic_mmio_read_pending (bsc#1133021).
- kvm: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy (bsc#1133021).
- kvm: arm64: Fix caching of host MDCR_EL2 value (bsc#1133021).
- kvm: mmu: Fix overlap between public and private memslots (bsc#1133021).
- kvm: nVMX: Remove unnecessary sync_roots from handle_invept (bsc#1145391).
- kvm: nVMX: Use adjusted pin controls for vmcs02 (bsc#1145392).
- kvm: nVMX: allow setting the VMFUNC controls MSR (bsc#1145389).
- kvm: nVMX: do not use dangling shadow VMCS after guest reset (bsc#1145390).
- kvm: s390: add MSA9 to cpumodel (jsc#SLE-6240).
- kvm: s390: add debug logging for cpu model subfunctions (jsc#SLE-6240).
- kvm: s390: add deflate conversion facilty to cpu model (jsc#SLE-6240).
- kvm: s390: add enhanced sort facilty to cpu model (jsc#SLE-6240 ).
- kvm: s390: add vector BCD enhancements facility to cpumodel (jsc#SLE-6240).
- kvm: s390: add vector enhancements facility 2 to cpumodel (jsc#SLE-6240).
- kvm: s390: enable MSA9 keywrapping functions depending on cpu model (jsc#SLE-6240).
- kvm: s390: implement subfunction processor calls (jsc#SLE-6240 ).
- kvm: s390: provide query function for instructions returning 32 byte (jsc#SLE-6240).
- kvm: x86/vPMU: refine kvm_pmu err msg when event creation failed (bsc#1145397).
- kvm: x86: Do not update RIP or do single-step on faulting emulation (bsc#1149104).
- kvm: x86: Unconditionally enable irqs in guest context (bsc#1145396).
- kvm: x86: degrade WARN to pr_warn_ratelimited (bsc#1145409).
- kvm: x86: fix backward migration with async_PF (bsc#1146074).
- lan78xx: Fix memory leaks (bsc#1051510).
- libata: add SG safety checks in SFF pio transfers (bsc#1051510).
- libata: do not request sense data on !ZAC ATA devices (bsc#1051510).
- libata: have ata_scsi_rw_xlat() fail invalid passthrough requests (bsc#1051510).
- libata: zpodd: Fix small read overflow in zpodd_get_mech_type() (bsc#1051510).
- libceph, rbd, ceph: move ceph_osdc_alloc_messages() calls (bsc#1135897).
- libceph, rbd: add error handling for osd_req_op_cls_init() (bsc#1135897).
- libceph, rbd: new bio handling code (aka do not clone bios) (bsc#1141450).
- libceph: ADDR2 support for monmap (bsc#1148133 bsc#1136682).
- libceph: add ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: add osd_req_op_extent_osd_data_bvecs() (bsc#1141450).
- libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer (bsc#1148133).
- libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer (bsc#1148133).
- libceph: assign cookies in linger_submit() (bsc#1135897).
- libceph: check reply num_data_items in setup_request_data() (bsc#1135897).
- libceph: correctly decode ADDR2 addresses in incremental OSD maps (bsc#1148133 bsc#1136682).
- libceph: do not consume a ref on pagelist in ceph_msg_data_add_pagelist() (bsc#1135897).
- libceph: enable fallback to ceph_msg_new() in ceph_msgpool_get() (bsc#1135897).
- libceph: fix PG split vs OSD (re)connect race (bsc#1148133).
- libceph: fix PG split vs OSD (re)connect race (bsc#1148133).
- libceph: fix sa_family just after reading address (bsc#1148133 bsc#1136682).
- libceph: fix unaligned accesses in ceph_entity_addr handling (bsc#1136682).
- libceph: fix watch_item_t decoding to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: handle zero-length data items (bsc#1141450).
- libceph: introduce BVECS data type (bsc#1141450).
- libceph: introduce alloc_watch_request() (bsc#1135897).
- libceph: introduce ceph_pagelist_alloc() (bsc#1135897).
- libceph: make ceph_pr_addr take an struct ceph_entity_addr pointer (bsc#1136682).
- libceph: preallocate message data items (bsc#1135897).
- libceph: rename ceph_encode_addr to ceph_encode_banner_addr (bsc#1148133 bsc#1136682).
- libceph: switch osdmap decoding to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: turn on CEPH_FEATURE_MSG_ADDR2 (bsc#1148133 bsc#1136682).
- libceph: use TYPE_LEGACY for entity addrs instead of TYPE_NONE (bsc#1148133 bsc#1136682).
- libceph: use single request data item for cmp/setxattr (bsc#1139101).
- libnvdimm/pfn: Store correct value of npfns in namespace superblock (bsc#1146381 ltc#180720).
- liquidio: add cleanup in octeon_setup_iq() (bsc#1051510).
- loop: set PF_MEMALLOC_NOIO for the worker thread (git fixes).
- lpfc: fix 12.4.0.0 GPF at boot (bsc#1148308).
- mac80211: Correctly set noencrypt for PAE frames (bsc#1111666).
- mac80211: Do not memset RXCB prior to PAE intercept (bsc#1111666).
- mac80211: do not WARN on short WMM parameters from AP (bsc#1051510).
- mac80211: do not warn about CW params when not using them (bsc#1051510).
- mac80211: fix possible memory leak in ieee80211_assign_beacon (bsc#1142635).
- mac80211: fix possible sta leak (bsc#1051510).
- mac80211_hwsim: Fix possible null-pointer dereferences in hwsim_dump_radio_nl() (bsc#1111666).
- macsec: fix checksumming after decryption (bsc#1051510).
- macsec: fix use-after-free of skb during RX (bsc#1051510).
- macsec: let the administrator set UP state even if lowerdev is down (bsc#1051510).
- macsec: update operstate when lower device changes (bsc#1051510).
- mailbox: handle failed named mailbox channel request (bsc#1051510).
- md/raid: raid5 preserve the writeback action after the parity check (git fixes).
- md: add mddev-&gt;pers to avoid potential NULL pointer dereference (git fixes).
- md: fix invalid stored role for a disk try2 (bsc#1143765).
- media: au0828: fix null dereference in error path (bsc#1051510).
- media: coda: Remove unbalanced and unneeded mutex unlock (bsc#1051510).
- media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP (bsc#1051510).
- media: coda: fix mpeg2 sequence number handling (bsc#1051510).
- media: coda: increment sequence offset for the last returned frame (bsc#1051510).
- media: dvb: usb: fix use after free in dvb_usb_device_exit (bsc#1051510).
- media: hdpvr: fix locking and a missing msleep (bsc#1051510).
- media: media_device_enum_links32: clean a reserved field (bsc#1051510).
- media: pvrusb2: use a different format for warnings (bsc#1051510).
- media: spi: IR LED: add missing of table registration (bsc#1051510).
- media: staging: media: davinci_vpfe: - Fix for memory leak if decoder initialization fails (bsc#1051510).
- media: vpss: fix a potential NULL pointer dereference (bsc#1051510).
- media: wl128x: Fix some error handling in fm_v4l2_init_video_device() (bsc#1051510).
- mfd: arizona: Fix undefined behavior (bsc#1051510).
- mfd: core: Set fwnode for created devices (bsc#1051510).
- mfd: hi655x-pmic: Fix missing return value check for devm_regmap_init_mmio_clk (bsc#1051510).
- mfd: intel-lpss: Add Intel Comet Lake PCI IDs (jsc#SLE-4875).
- mlxsw: spectrum: Fix error path in mlxsw_sp_module_init() (bsc#1112374).
- mm, page_owner: handle THP splits correctly (bsc#1149197, VM Debugging Functionality).
- mm, vmscan: do not special-case slab reclaim when watermarks are boosted (git fixes (mm/vmscan)).
- mm/hmm: fix bad subpage pointer in try_to_unmap_one (bsc#1148202, HMM, VM Functionality).
- mm/hotplug: fix offline undo_isolate_page_range() (bsc#1148196, VM Functionality).
- mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node (bsc#1148379, VM Functionality).
- mm/memcontrol.c: fix use after free in mem_cgroup_iter() (bsc#1149224, VM Functionality).
- mm/memory.c: recheck page table entry with page table lock held (bsc#1148363, VM Functionality).
- mm/migrate.c: initialize pud_entry in migrate_vma() (bsc#1148198, HMM, VM Functionality).
- mm/mlock.c: change count_mm_mlocked_page_nr return type (bsc#1148527, VM Functionality).
- mm/mlock.c: mlockall error for flag MCL_ONFAULT (bsc#1148527, VM Functionality).
- mm/page_alloc.c: fix calculation of pgdat-&gt;nr_zones (bsc#1148192, VM Functionality).
- mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() (bsc#1118689).
- mm/vmscan.c: fix trying to reclaim unevictable LRU page (bsc#1149214, VM Functionality).
- mm: add filemap_fdatawait_range_keep_errors() (bsc#1148616).
- mm: do not stall register_shrinker() (bsc#1104902, VM Performance).
- mm: move MAP_SYNC to asm-generic/mman-common.h (bsc#1148297).
- mm: page_mapped: do not assume compound page is huge or THP (bsc#1148574, VM Functionality).
- mmc: cavium: Add the missing dma unmap when the dma has finished (bsc#1051510).
- mmc: cavium: Set the correct dma max segment size for mmc_host (bsc#1051510).
- mmc: core: Fix init of SD cards reporting an invalid VDD range (bsc#1051510).
- mmc: dw_mmc: Fix occasional hang after tuning on eMMC (bsc#1051510).
- mmc: sdhci-of-at91: add quirk for broken HS200 (bsc#1051510).
- mmc: sdhci-pci: Add support for Intel CML (jsc#SLE-4875).
- mmc: sdhci-pci: Add support for Intel ICP (jsc#SLE-4875).
- mmc: sdhci-pci: Fix BYT OCP setting (bsc#1051510).
- mpls: fix warning with multi-label encap (bsc#1051510).
- nbd: replace kill_bdev() with __invalidate_device() again (git fixes).
- net/9p: include trans_common.h to fix missing prototype warning (bsc#1051510).
- net/ibmvnic: Fix missing { in __ibmvnic_reset (bsc#1149652 ltc#179635).
- net/ibmvnic: free reset work of removed device from queue (bsc#1149652 ltc#179635).
- net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command (bsc#1145678).
- net/mlx5: Fix modify_cq_in alignment (bsc#1103990).
- net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn (networking-stable-19_07_25).
- net/mlx5e: always initialize frag-&gt;last_in_page (bsc#1103990 ).
- net: Fix netdev_WARN_ONCE macro (git-fixes).
- net: Introduce netdev_*_once functions (networking-stable-19_07_25).
- net: Revert 'net: ena: ethtool: add extra properties retrieval via get_priv_flags' (bsc#1139020 bsc#1139021).
- net: bcmgenet: use promisc for unsupported filters (networking-stable-19_07_25).
- net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query (networking-stable-19_07_25).
- net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling (networking-stable-19_07_25).
- net: bridge: stp: do not cache eth dest pointer before skb pull (networking-stable-19_07_25).
- net: dsa: mv88e6xxx: wait after reset deactivation (networking-stable-19_07_25).
- net: ena: Fix bug where ring allocation backoff stopped too late (bsc#1139020 bsc#1139021).
- net: ena: add MAX_QUEUES_EXT get feature admin command (bsc#1139020 bsc#1139021).
- net: ena: add ethtool function for changing io queue sizes (bsc#1139020 bsc#1139021).
- net: ena: add good checksum counter (bsc#1139020 bsc#1139021).
- net: ena: add handling of llq max tx burst size (bsc#1139020 bsc#1139021).
- net: ena: add newline at the end of pr_err prints (bsc#1139020 bsc#1139021).
- net: ena: add support for changing max_header_size in LLQ mode (bsc#1139020 bsc#1139021).
- net: ena: allow automatic fallback to polling mode (bsc#1139020 bsc#1139021).
- net: ena: allow queue allocation backoff when low on memory (bsc#1139020 bsc#1139021).
- net: ena: arrange ena_probe() function variables in reverse christmas tree (bsc#1139020 bsc#1139021).
- net: ena: enable negotiating larger Rx ring size (bsc#1139020 bsc#1139021).
- net: ena: ethtool: add extra properties retrieval via get_priv_flags (bsc#1139020 bsc#1139021).
- net: ena: fix ena_com_fill_hash_function() implementation (bsc#1139020 bsc#1139021).
- net: ena: fix incorrect test of supported hash function (bsc#1139020 bsc#1139021).
- net: ena: fix swapped parameters when calling ena_com_indirect_table_fill_entry (bsc#1139020 bsc#1139021).
- net: ena: fix: Free napi resources when ena_up() fails (bsc#1139020 bsc#1139021).
- net: ena: fix: set freed objects to NULL to avoid failing future allocations (bsc#1139020 bsc#1139021).
- net: ena: gcc 8: fix compilation warning (bsc#1139020 bsc#1139021).
- net: ena: improve latency by disabling adaptive interrupt moderation by default (bsc#1139020 bsc#1139021).
- net: ena: make ethtool show correct current and max queue sizes (bsc#1139020 bsc#1139021).
- net: ena: optimise calculations for CQ doorbell (bsc#1139020 bsc#1139021).
- net: ena: remove inline keyword from functions in *.c (bsc#1139020 bsc#1139021).
- net: ena: replace free_tx/rx_ids union with single free_ids field in ena_ring (bsc#1139020 bsc#1139021).
- net: ena: update driver version from 2.0.3 to 2.1.0 (bsc#1139020 bsc#1139021).
- net: ena: use dev_info_once instead of static variable (bsc#1139020 bsc#1139021).
- net: fix bpf_xdp_adjust_head regression for generic-XDP (bsc#1109837).
- net: hns3: Add missing newline at end of file (bsc#1104353 ).
- net: hns3: add Asym Pause support to fix autoneg problem (bsc#1104353).
- net: hns3: add a check to pointer in error_detected and slot_reset (bsc#1104353).
- net: hns3: add aRFS support for PF (bsc#1104353).
- net: hns3: add all IMP return code (bsc#1104353).
- net: hns3: add check to number of buffer descriptors (bsc#1104353).
- net: hns3: add default value for tc_size and tc_offset (bsc#1104353).
- net: hns3: add exception handling when enable NIC HW error interrupts (bsc#1104353).
- net: hns3: add handling of two bits in MAC tunnel interrupts (bsc#1104353).
- net: hns3: add handshake with hardware while doing reset (bsc#1104353).
- net: hns3: add opcode about query and clear RAS &amp; MSI-X to special opcode (bsc#1104353).
- net: hns3: add recovery for the H/W errors occurred before the HNS dev initialization (bsc#1104353).
- net: hns3: add some error checking in hclge_tm module (bsc#1104353).
- net: hns3: add support for dump firmware statistics by debugfs (bsc#1104353).
- net: hns3: adjust hns3_uninit_phy()'s location in the hns3_client_uninit() (bsc#1104353).
- net: hns3: bitwise operator should use unsigned type (bsc#1104353).
- net: hns3: change SSU's buffer allocation according to UM (bsc#1104353).
- net: hns3: check msg_data before memcpy in hclgevf_send_mbx_msg (bsc#1104353).
- net: hns3: clear restting state when initializing HW device (bsc#1104353).
- net: hns3: code optimizaition of hclge_handle_hw_ras_error() (bsc#1104353).
- net: hns3: delay and separate enabling of NIC and ROCE HW errors (bsc#1104353).
- net: hns3: delay ring buffer clearing during reset (bsc#1104353 ).
- net: hns3: delay setting of reset level for hw errors until slot_reset is called (bsc#1104353).
- net: hns3: delete the redundant user NIC codes (bsc#1104353 ).
- net: hns3: do not configure new VLAN ID into VF VLAN table when it's full (bsc#1104353).
- net: hns3: enable DCB when TC num is one and pfc_en is non-zero (bsc#1104353).
- net: hns3: enable broadcast promisc mode when initializing VF (bsc#1104353).
- net: hns3: extract handling of mpf/pf msi-x errors into functions (bsc#1104353).
- net: hns3: fix VLAN filter restore issue after reset (bsc#1104353).
- net: hns3: fix __QUEUE_STATE_STACK_XOFF not cleared issue (bsc#1104353).
- net: hns3: fix a -Wformat-nonliteral compile warning (bsc#1104353).
- net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector (bsc#1104353).
- net: hns3: fix a statistics issue about l3l4 checksum error (bsc#1104353).
- net: hns3: fix avoid unnecessary resetting for the H/W errors which do not require reset (bsc#1104353).
- net: hns3: fix compile warning without CONFIG_RFS_ACCEL (bsc#1104353).
- net: hns3: fix dereference of ae_dev before it is null checked (bsc#1104353).
- net: hns3: fix flow control configure issue for fibre port (bsc#1104353).
- net: hns3: fix for dereferencing before null checking (bsc#1104353).
- net: hns3: fix for skb leak when doing selftest (bsc#1104353 ).
- net: hns3: fix race conditions between reset and module loading &amp; unloading (bsc#1104353).
- net: hns3: fix some coding style issues (bsc#1104353 ).
- net: hns3: fix wrong size of mailbox responding data (bsc#1104353).
- net: hns3: fixes wrong place enabling ROCE HW error when loading (bsc#1104353).
- net: hns3: free irq when exit from abnormal branch (bsc#1104353 ).
- net: hns3: handle empty unknown interrupt (bsc#1104353 ).
- net: hns3: initialize CPU reverse mapping (bsc#1104353 ).
- net: hns3: log detail error info of ROCEE ECC and AXI errors (bsc#1104353).
- net: hns3: make HW GRO handling compliant with SW GRO (bsc#1104353).
- net: hns3: modify handling of out of memory in hclge_err.c (bsc#1104353).
- net: hns3: modify hclge_init_client_instance() (bsc#1104353 ).
- net: hns3: modify hclgevf_init_client_instance() (bsc#1104353 ).
- net: hns3: optimize the CSQ cmd error handling (bsc#1104353 ).
- net: hns3: process H/W errors occurred before HNS dev initialization (bsc#1104353).
- net: hns3: re-schedule reset task while VF reset fail (bsc#1104353).
- net: hns3: refactor PF/VF RSS hash key configuration (bsc#1104353).
- net: hns3: refactor hns3_get_new_int_gl function (bsc#1104353 ).
- net: hns3: refine the flow director handle (bsc#1104353 ).
- net: hns3: remove RXD_VLD check in hns3_handle_bdinfo (bsc#1104353).
- net: hns3: remove VF VLAN filter entry inexistent warning print (bsc#1104353).
- net: hns3: remove override_pci_need_reset (bsc#1104353 ).
- net: hns3: remove redundant core reset (bsc#1104353 ).
- net: hns3: remove setting bit of reset_requests when handling mac tunnel interrupts (bsc#1104353).
- net: hns3: remove unused linkmode definition (bsc#1104353 ).
- net: hns3: replace numa_node_id with numa_mem_id for buffer reusing (bsc#1104353).
- net: hns3: set default value for param 'type' in hclgevf_bind_ring_to_vector (bsc#1104353).
- net: hns3: set maximum length to resp_data_len for exceptional case (bsc#1104353).
- net: hns3: set ops to null when unregister ad_dev (bsc#1104353 ).
- net: hns3: set the port shaper according to MAC speed (bsc#1104353).
- net: hns3: small changes for magic numbers (bsc#1104353 ).
- net: hns3: some changes of MSI-X bits in PPU(RCB) (bsc#1104353 ).
- net: hns3: some modifications to simplify and optimize code (bsc#1104353).
- net: hns3: some variable modification (bsc#1104353).
- net: hns3: stop schedule reset service while unloading driver (bsc#1104353).
- net: hns3: sync VLAN filter entries when kill VLAN ID failed (bsc#1104353).
- net: hns3: trigger VF reset if a VF has an over_8bd_nfe_err (bsc#1104353).
- net: hns3: typo in the name of a constant (bsc#1104353 ).
- net: hns3: use HCLGEVF_STATE_NIC_REGISTERED to indicate VF NIC client has registered (bsc#1104353).
- net: hns3: use HCLGE_STATE_NIC_REGISTERED to indicate PF NIC client has registered (bsc#1104353).
- net: hns3: use HCLGE_STATE_ROCE_REGISTERED to indicate PF ROCE client has registered (bsc#1104353).
- net: hns3: use macros instead of magic numbers (bsc#1104353 ).
- net: hns: add support for vlan TSO (bsc#1104353).
- net: make skb_dst_force return true when dst is refcounted (networking-stable-19_07_25).
- net: mvpp2: Do not check for 3 consecutive Idle frames for 10G links (bsc#1119113).
- net: neigh: fix multiple neigh timer scheduling (networking-stable-19_07_25).
- net: phylink: Fix flow control for fixed-link (bsc#1119113 ).
- net: remove duplicate fetch in sock_getsockopt (networking-stable-19_07_02).
- net: sched: verify that q!=NULL before setting q-&gt;flags (git-fixes).
- net: stmmac: fixed new system time seconds value calculation (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW timestamp (networking-stable-19_07_02).
- net: usb: pegasus: fix improper read if get_registers() fail (bsc#1051510).
- net_sched: unset TCQ_F_CAN_BYPASS when adding filters (networking-stable-19_07_25).
- netrom: fix a memory leak in nr_rx_frame() (networking-stable-19_07_25).
- netrom: hold sock when setting skb-&gt;destructor (networking-stable-19_07_25).
- nfc: fix potential illegal memory access (bsc#1051510).
- nfs: Cleanup if nfs_match_client is interrupted (bsc#1134291).
- nfs: Fix a double unlock from nfs_match,get_client (bsc#1134291).
- nfs: Fix the inode request accounting when pages have subrequests (bsc#1140012).
- nfs: make nfs_match_client killable (bsc#1134291).
- nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header (git fixes).
- nvme-core: Fix extra device_put() call on error path (bsc#1142541).
- nvme-fc: fix module unloads while lports still pending (bsc#1150033).
- nvme-multipath: fix ana log nsid lookup when nsid is not found (bsc#1141554).
- nvme-multipath: relax ANA state check (bsc#1123105).
- nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns (bsc#1120876).
- nvme: Return BLK_STS_TARGET if the DNR bit is set (bsc#1142076).
- nvme: cancel request synchronously (bsc#1145661).
- nvme: change locking for the per-subsystem controller list (bsc#1142541).
- nvme: fix possible use-after-free in connect error flow (bsc#1139500)
- nvme: fix possible use-after-free in connect error flow (bsc#1139500, bsc#1140426)
- nvme: introduce NVME_QUIRK_IGNORE_DEV_SUBNQN (bsc#1146938).
- objtool: Add rewind_stack_do_exit() to the noreturn list (bsc#1145302).
- objtool: Support GCC 9 cold subfunction naming scheme (bsc#1145300).
- octeon_mgmt: Fix MIX registers configuration on MTU setup (bsc#1051510).
- pci: PM/acpi: Refresh all stale power state data in pci_pm_complete() (bsc#1149106).
- pci: Restore Resizable BAR size bits correctly for 1MB BARs (bsc#1143841).
- pci: al: Add Amazon Annapurna Labs PCIe host controller driver (SLE-9332).
- pci: hv: Fix panic by calling hv_pci_remove_slots() earlier (bsc#1142701).
- pci: qcom: Ensure that PERST is asserted for at least 100 ms (bsc#1142635).
- pci: xilinx-nwl: Fix Multi MSI data programming (bsc#1142635).
- phy: qcom-qusb2: Fix crash if nvmem cell not specified (bsc#1051510).
- phy: renesas: rcar-gen2: Fix memory leak at error paths (bsc#1051510).
- pinctrl: pistachio: fix leaked of_node references (bsc#1051510).
- pinctrl: rockchip: fix leaked of_node references (bsc#1051510).
- pm / OPP: OF: Use pr_debug() instead of pr_err() while adding OPP table (jsc#SLE-7294).
- pm / devfreq: rk3399_dmc: Pass ODT and auto power down parameters to TF-A (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: do not print error when get supply and clk defer (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: fix spelling mistakes (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: remove unneeded semicolon (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: remove wait for dcf irq event (bsc#1144718,bsc#1144813).
- pm / devfreq: rockchip-dfi: Move GRF definitions to a common place (bsc#1144718,bsc#1144813).
- powerpc/64s: Include cpu header (bsc#1065729).
- powerpc/64s: support nospectre_v2 cmdline option (bsc#1131107).
- powerpc/book3s/64: check for NULL pointer in pgd_alloc() (bsc#1078248, git-fixes).
- powerpc/fadump: use kstrtoint to handle sysfs store (bsc#1146376).
- powerpc/fadump: when fadump is supported register the fadump sysfs files (bsc#1146352).
- powerpc/fsl: Add nospectre_v2 command line argument (bsc#1131107).
- powerpc/fsl: Update Spectre v2 reporting (bsc#1131107).
- powerpc/kdump: Handle crashkernel memory reservation failure (bsc#1143466 LTC#179600).
- powerpc/lib: Fix feature fixup test of external branch (bsc#1065729).
- powerpc/mm/hash/4k: Do not use 64K page size for vmemmap with 4K pagesize (bsc#1142685 LTC#179509).
- powerpc/mm/nvdimm: Add an informative message if we fail to allocate altmap block (bsc#1142685 LTC#179509).
- powerpc/mm/radix: Use the right page size for vmemmap mapping (bsc#1055117 bsc#1142685 LTC#179509).
- powerpc/mm: Handle page table allocation failures (bsc#1065729).
- powerpc/nvdimm: Add support for multibyte read/write for metadata (bsc#1142685 LTC#179509).
- powerpc/nvdimm: Pick nearby online node if the device node is not online (bsc#1142685 ltc#179509).
- powerpc/perf: Add constraints for power9 l2/l3 bus events (bsc#1056686).
- powerpc/perf: Add mem access events to sysfs (bsc#1124370).
- powerpc/perf: Cleanup cache_sel bits comment (bsc#1056686).
- powerpc/perf: Fix thresholding counter data for unknown type (bsc#1056686).
- powerpc/perf: Remove PM_BR_CMPL_ALT from power9 event list (bsc#1047238, bsc#1056686).
- powerpc/perf: Update perf_regs structure to include SIER (bsc#1056686).
- powerpc/powernv/opal-dump : Use IRQ_HANDLED instead of numbers in interrupt handler (bsc#1065729).
- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- powerpc/powernv: Return for invalid IMC domain (bsc1054914, git-fixes).
- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- powerpc/pseries, ps3: panic flush kernel messages before halting system (bsc#1149940 ltc#179958).
- powerpc/pseries/scm: Mark the region volatile if cache flush not required (bsc#1142685 LTC#179509).
- powerpc/pseries: Fix xive=off command line (bsc#1085030, git-fixes).
- powerpc/pseries: add missing cpumask.h include file (bsc#1065729).
- powerpc/pseries: correctly track irq state in default idle (bsc#1150727 ltc#178925).
- powerpc/rtas: use device model APIs and serialization during Lpm (bsc#1144123 ltc#178840).
- powerpc/security: Show powerpc_security_features in debugfs (bsc#1131107).
- powerpc/xive: Fix dump of XIVE interrupt under pseries (bsc#1142019).
- powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask() (bsc#1085030, bsc#1145189, LTC#179762).
- powerpc/xmon: Add a dump of all XIVE interrupts (bsc#1142019).
- powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL (bsc#1142019).
- powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (bsc#1146575 ltc#180764).
- powerpc: dump kernel log before carrying out fadump or kdump (bsc#1149940 ltc#179958).
- qede: fix write to free'd pointer error and double free of ptp (bsc#1051510).
- qla2xxx: kABI fixes for v10.01.00.18-k (bcs#1082635 bcs#1141340 bcs#1143706).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- raid5-cache: Need to do start() part job after adding journal device (git fixes).
- rbd: do not (ab)use obj_req-&gt;pages for stat requests (bsc#1141450).
- rbd: do not NULL out -&gt;obj_request in rbd_img_obj_parent_read_full() (bsc#1141450).
- rbd: get rid of img_req-&gt;copyup_pages (bsc#1141450).
- rbd: move from raw pages to bvec data descriptors (bsc#1141450).
- rbd: remove bio cloning helpers (bsc#1141450).
- rbd: start enums at 1 instead of 0 (bsc#1141450).
- rbd: use kmem_cache_zalloc() in rbd_img_request_create() (bsc#1141450).
- rdma/hns: Add mtr support for mixed multihop addressing (bsc#1104427).
- rdma/hns: Bugfix for calculating qp buffer size (bsc#1104427 ).
- rdma/hns: Bugfix for filling the sge of srq (bsc#1104427 ).
- rdma/hns: Do not stuck in endless timeout loop (bsc#1104427 ).
- rdma/hns: Fix an error code in hns_roce_set_user_sq_size() (bsc#1104427).
- rdma/hns: Fixs hw access invalid dma memory error (bsc#1104427 ).
- rdma/hns: Fixup qp release bug (bsc#1104427).
- rdma/hns: Modify ba page size for cqe (bsc#1104427).
- rdma/hns: Remove set but not used variable 'fclr_write_fail_flag' (bsc#1104427).
- rdma/hns: Remove unnecessary print message in aeq (bsc#1104427 ).
- rdma/hns: Replace magic numbers with #defines (bsc#1104427 ).
- rdma/hns: Set reset flag when hw resetting (bsc#1104427 ).
- rdma/hns: Use %pK format pointer print (bsc#1104427 ).
- rdma/hns: fix inverted logic of readl read and shift (bsc#1104427).
- rdma/hns: reset function when removing module (bsc#1104427 ).
- regmap: fix bulk writes on paged registers (bsc#1051510).
- regulator: qcom_spmi: Fix math of spmi_regulator_set_voltage_time_sel (bsc#1051510).
- rpm/kernel-binary.spec.in: Enable missing modules check.
- rpmsg: added MODULE_ALIAS for rpmsg_char (bsc#1051510).
- rpmsg: smd: do not use mananged resources for endpoints and channels (bsc#1051510).
- rpmsg: smd: fix memory leak on channel create (bsc#1051510).
- rsi: improve kernel thread handling to fix kernel panic (bsc#1051510).
- rslib: Fix decoding of shortened codes (bsc#1051510).
- rslib: Fix handling of of caller provided syndrome (bsc#1051510).
- rtc: pcf8523: do not return invalid date when battery is low (bsc#1051510).
- rtc: pcf8563: Clear event flags and disable interrupts before requesting irq (bsc#1051510).
- rtc: pcf8563: Fix interrupt trigger method (bsc#1051510).
- rxrpc: Fix send on a connected, but unbound socket (networking-stable-19_07_25).
- s390/cio: fix ccw_device_start_timeout API (bsc#1142109 LTC#179339).
- s390/dasd: fix endless loop after read unit address configuration (bsc#1144912 LTC#179907).
- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117 bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- s390/qeth: avoid control IO completion stalls (bsc#1142109 LTC#179339).
- s390/qeth: cancel cmd on early error (bsc#1142109 LTC#179339).
- s390/qeth: fix request-side race during cmd IO timeout (bsc#1142109 LTC#179339).
- s390/qeth: release cmd buffer in error paths (bsc#1142109 LTC#179339).
- s390/qeth: simplify reply object handling (bsc#1142109 LTC#179339).
- samples, bpf: fix to change the buffer size for read() (bsc#1051510).
- samples: mei: use /dev/mei0 instead of /dev/mei (bsc#1051510).
- sched/fair: Do not free p-&gt;numa_faults with concurrent readers (bsc#1144920).
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (bsc#1144920).
- scripts/checkstack.pl: Fix arm64 wrong or unknown architecture (bsc#1051510).
- scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE (bsc#1051510).
- scripts/decode_stacktrace: only strip base path when a prefix of the path (bsc#1051510).
- scripts/gdb: fix lx-version string output (bsc#1051510).
- scripts/git_sort/git_sort.py:
- scsi: NCR5380: Always re-enable reselection interrupt (git-fixes).
- scsi: aacraid: Fix missing break in switch statement (git-fixes).
- scsi: aacraid: Fix performance issue on logical drives (git-fixes).
- scsi: aic94xx: fix an error code in aic94xx_init() (git-fixes).
- scsi: aic94xx: fix module loading (git-fixes).
- scsi: bfa: Avoid implicit enum conversion in bfad_im_post_vendor_event (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: Remove unused functions (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_fcs_lport: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_fcs_rport: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_ioc: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: clean up a couple of indentation issues (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: convert to strlcpy/strlcat (git-fixes).
- scsi: bfa: fix calls to dma_set_mask_and_coherent() (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: no need to check return value of debugfs_create functions (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: remove ScsiResult macro (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: use dma_set_mask_and_coherent (bsc#1136496 jsc#SLE-4698).
- scsi: bnx2fc: Do not allow both a cleanup completion and abort completion for the same request (bsc#1144582).
- scsi: bnx2fc: Fix NULL dereference in error handling (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling (git-fixes).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Limit the IO size according to the FW capability (bsc#1144582).
- scsi: bnx2fc: Only put reference to io_req in bnx2fc_abts_cleanup if cleanup times out (bsc#1144582).
- scsi: bnx2fc: Redo setting source FCoE MAC (bsc#1144582).
- scsi: bnx2fc: Remove set but not used variable 'oxid' (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Separate out completion flags and variables for abort and cleanup (bsc#1144582).
- scsi: bnx2fc: Update the driver version to 2.12.10 (bsc#1144582).
- scsi: bnx2fc: fix bnx2fc_cmd refcount imbalance in send_rec (bsc#1144582).
- scsi: bnx2fc: fix bnx2fc_cmd refcount imbalance in send_srr (bsc#1144582).
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation (git-fixes).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502 jsc#SLE-4703).
- scsi: core: Fix race on creating sense cache (git-fixes).
- scsi: core: Synchronize request queue pm status only on successful resume (git-fixes).
- scsi: core: set result when the command cannot be dispatched (git-fixes).
- scsi: cxgb4i: fix incorrect spelling 'reveive' -&gt; 'receive' (bsc#1136346 jsc#SLE-4682).
- scsi: cxgb4i: get pf number from lldi-&gt;pf (bsc#1136346 jsc#SLE-4682).
- scsi: cxgb4i: validate tcp sequence number only if chip version &amp;lt;= T5 (bsc#1136346 jsc#SLE-4682).
- scsi: cxlflash: Mark expected switch fall-throughs (bsc#1148868).
- scsi: cxlflash: Prevent deadlock when adapter probe fails (git-fixes).
- scsi: esp_scsi: Track residual for PIO transfers (git-fixes) Also, mitigate kABI changes.
- scsi: fas216: fix sense buffer initialization (git-fixes).
- scsi: hisi_sas: Add support for DIX feature for v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Change SERDES_CFG init value to increase reliability of HiLink (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Disable stash for v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Fix losing directly attached disk when hot-plug (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Ignore the error code between phy down to phy up (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Issue internal abort on all relevant queues (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Reduce HISI_SAS_SGE_PAGE_CNT in size (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Reject setting programmed minimum linkrate &gt; 1.5G (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Use pci_irq_get_affinity() for v3 hw as experimental (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: change queue depth from 512 to 4096 (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: kabi fixes (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: print PHY RX errors count for later revision of v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: send primitive NOTIFY to SSP situation only (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: isci: initialize shost fully before calling scsi_add_host() (git-fixes).
- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352 jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352 jsc#SLE-4687).
- scsi: libcxgbi: update route finding logic (bsc#1136352 jsc#SLE-4687)
- scsi: libfc: fix null pointer dereference on a null lport (git-fixes).
- scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached (git-fixes).
- scsi: libsas: kABI protect struct sas_task_slow (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: libsas: only clear phy-&gt;in_shutdown after shutdown event done (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: lpfc: Add MDS driver loopback diagnostics support (bsc#1146215).
- scsi: lpfc: Add NVMe sequence level error recovery support (bsc#1146215).
- scsi: lpfc: Add first and second level hardware revisions to sysfs (bsc#1146215).
- scsi: lpfc: Add simple unlikely optimizations to reduce NVME latency (bsc#1146215).
- scsi: lpfc: Avoid unused function warnings (bsc#1148308).
- scsi: lpfc: Convert timers to use timer_setup() (bsc#1148308).
- scsi: lpfc: Default fdmi_on to on (bsc#1148308).
- scsi: lpfc: Fix ADISC reception terminating login state if a NVME (bsc#1146215).
- scsi: lpfc: Fix BlockGuard enablement on FCoE adapters (bsc#1146215).
- scsi: lpfc: Fix ELS field alignments (bsc#1146215).
- scsi: lpfc: Fix FLOGI handling across multiple link up/down (bsc#1146215).
- scsi: lpfc: Fix Max Frame Size value shown in fdmishow output (bsc#1146215).
- scsi: lpfc: Fix Oops in nvme_register with target logout/login (bsc#1146215).
- scsi: lpfc: Fix PLOGI failure with high remoteport count (bsc#1146215).
- scsi: lpfc: Fix coverity warnings (bsc#1146215).
- scsi: lpfc: Fix crash due to port reset racing vs adapter error (bsc#1146215).
- scsi: lpfc: Fix crash on driver unload in wq free (bsc#1146215).
- scsi: lpfc: Fix crash when cpu count is 1 and null irq affinity mask (bsc#1146215).
- scsi: lpfc: Fix deadlock on host_lock during cable pulls (bsc#1146215).
- scsi: lpfc: Fix devices that do not return after devloss followed by (bsc#1146215).
- scsi: lpfc: Fix discovery when target has no GID_FT information (bsc#1146215).
- scsi: lpfc: Fix error in remote port address change (bsc#1146215).
- scsi: lpfc: Fix failure to clear non-zero eq_delay after io rate (bsc#1146215).
- scsi: lpfc: Fix hang when downloading fw on port enabled for nvme (bsc#1146215).
- scsi: lpfc: Fix irq raising in lpfc_sli_hba_down (bsc#1146215).
- scsi: lpfc: Fix issuing init_vpi mbox on SLI-3 card (bsc#1146215).
- scsi: lpfc: Fix leak of ELS completions on adapter reset (bsc#1146215).
- scsi: lpfc: Fix loss of remote port after devloss due to lack of RPIs (bsc#1146215).
- scsi: lpfc: Fix null ptr oops updating lpfc_devloss_tmo via sysfs (bsc#1146215).
- scsi: lpfc: Fix nvme first burst module parameter description (bsc#1146215).
- scsi: lpfc: Fix nvme sg_seg_cnt display if HBA does not support NVME (bsc#1146215).
- scsi: lpfc: Fix nvme target mode ABTSing a received ABTS (bsc#1146215).
- scsi: lpfc: Fix oops when fewer hdwqs than cpus (bsc#1146215).
- scsi: lpfc: Fix port relogin failure due to GID_FT interaction (bsc#1146215).
- scsi: lpfc: Fix propagation of devloss_tmo setting to nvme transport (bsc#1146215).
- scsi: lpfc: Fix reported physical link speed on a disabled trunked (bsc#1146215).
- scsi: lpfc: Fix reset recovery paths that are not recovering (bsc#1144375).
- scsi: lpfc: Fix sg_seg_cnt for HBAs that do not support NVME (bsc#1146215).
- scsi: lpfc: Fix sli4 adapter initialization with MSI (bsc#1146215).
- scsi: lpfc: Fix too many sg segments spamming in kernel log (bsc#1146215).
- scsi: lpfc: Fix upcall to bsg done in non-success cases (bsc#1146215).
- scsi: lpfc: Limit xri count for kdump environment (bsc#1146215).
- scsi: lpfc: Make some symbols static (bsc#1148308).
- scsi: lpfc: Merge per-protocol WQ/CQ pairs into single per-cpu pair (bsc#1146215).
- scsi: lpfc: Merge per-protocol WQ/CQ pairs into single per-cpu pair (bsc#1146215).
- scsi: lpfc: Migrate to %px and %pf in kernel print calls (bsc#1146215).
- scsi: lpfc: Remove bg debugfs buffers (bsc#1144375).
- scsi: lpfc: Remove set but not used variable 'psli' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'fc_hdr' and 'hw_page_size' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'qp' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'tgtp' (bsc#1148308).
- scsi: lpfc: Resolve checker warning for lpfc_new_io_buf() (bsc#1144375).
- scsi: lpfc: Support dynamic unbounded SGL lists on G7 hardware (bsc#1146215).
- scsi: lpfc: Update lpfc version to 12.4.0.0 (bsc#1146215).
- scsi: lpfc: Use dma_zalloc_coherent (bsc#1148308).
- scsi: lpfc: add check for loss of ndlp when sending RRQ (bsc#1148308).
- scsi: lpfc: change snprintf to scnprintf for possible overflow (bsc#1146215).
- scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show (bsc#1148308).
- scsi: lpfc: lpfc_sli: Mark expected switch fall-throughs (bsc#1148308).
- scsi: lpfc: no need to check return value of debugfs_create functions (bsc#1148308).
- scsi: lpfc: nvme: avoid hang / use-after-free when destroying localport (bsc#1148308).
- scsi: lpfc: nvmet: avoid hang / use-after-free when destroying targetport (bsc#1148308).
- scsi: lpfc: remove NULL check before some freeing functions (bsc#1146215).
- scsi: lpfc: remove ScsiResult macro (bsc#1148308).
- scsi: lpfc: remove a bogus pci_dma_sync_single_for_device call (bsc#1148308).
- scsi: lpfc: remove null check on nvmebuf (bsc#1148308).
- scsi: lpfc: resolve lockdep warnings (bsc#1148308).
- scsi: lpfc: use sg helper to iterate over scatterlist (bsc#1148308).
- scsi: mac_scsi: Fix pseudo DMA implementation, take 2 (git-fixes).
- scsi: mac_scsi: Increase PIO/PDMA transfer length threshold (git-fixes).
- scsi: megaraid: fix out-of-bound array accesses (git-fixes).
- scsi: megaraid_sas: Fix calculation of target ID (git-fixes).
- scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (bsc#1143962).
- scsi: megaraid_sas: Release Mutex lock before OCR in case of DCMD timeout (bsc#1143962).
- scsi: mpt3sas: Determine smp affinity on per HBA basis (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode (bsc#1143738).
- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: pmcraid: do not allocate a dma coherent buffer for sense data (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: simplify pmcraid_cancel_all a bit (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: use generic DMA API (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: use sg helper to iterate over scatterlist (bsc#1135990 jsc#SLE-4709).
- scsi: prefix header search paths with $(srctree)/ (bsc#1136346 jsc#SLE-4682).
- scsi: qedf: Add debug information for unsolicited processing (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets and send fipvlan retries (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing link update AEN (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link down (bsc#1149976).
- scsi: qedf: Print message during bailout conditions (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20 (bsc#1149976).
- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: remove memset/memcpy to nfunc and use func instead (git-fixes).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedi: remove declaration of nvm_image from stack (git-fixes).
- scsi: qla2xxx: Add cleanup for PCI EEH recovery (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Add cleanup for PCI EEH recovery (bsc#1129424).
- scsi: qla2xxx: Allow NVMe IO to resume with short cable pull (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value (bsc#1143706).
- scsi: qla2xxx: Avoid that Coverity complains about dereferencing a NULL rport pointer (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qla2x00_mem_free() crashes if called twice (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory (git-fixes).
- scsi: qla2xxx: Change a stack variable into a static const variable (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Change the return type of qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Change the return type of qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary image fails (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size (bsc#1143706).
- scsi: qla2xxx: Check the size of firmware data structures at compile time (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Cleanup fcport memory to prevent leak (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Cleanup redundant qla2x00_abort_all_cmds during unload (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Complain if a command is released that is owned by the firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the completion path (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times out (bsc#1143706).
- scsi: qla2xxx: Complain loudly about reference count underflow (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Correct error handling during initialization failures (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument const (bsc#1143706).
- scsi: qla2xxx: Declare local symbols static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla24xx_build_scsi_crc_2_iocbs() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla2x00_find_new_loop_id() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument const (bsc#1143706).
- scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1143706).
- scsi: qla2xxx: Fix DMA unmap leak (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NVMe port discovery after a short device port loss (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Fix a format specifier (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a format specifier (git-fixes).
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Fix a small typo in qla_bsg.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix abort timeout race condition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix an endian bug in fcpcmd_is_corrupted() (git-fixes).
- scsi: qla2xxx: Fix comment alignment in qla_bsg.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix device staying in blocked state (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix device staying in blocked state (git-fixes).
- scsi: qla2xxx: Fix different size DMA Alloc/Unmap (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd() (git-fixes).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix formatting of pointer types (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix fw dump corruption (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hang in fcport delete path (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hardirq-unsafe locking (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hardlockup in abort command during driver remove (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver (bsc#1143706).
- scsi: qla2xxx: Fix possible fcport null-pointer dereferences (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix premature timer expiration (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work() (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Further limit FLASH region write access from SysFS (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance (bsc#1143706).
- scsi: qla2xxx: Include the &amp;lt;asm/unaligned.h&gt; header file from qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Increase the max_sgl_segments to 1024 (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Increase the size of the mailbox arrays from 4 to 8 (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (bsc#1143706).
- scsi: qla2xxx: Insert spaces where required (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Introduce the dsd32 and dsd64 data structures (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (bsc#1143706).
- scsi: qla2xxx: Leave a blank line after declarations (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI command context pointer (bsc#1143706).
- scsi: qla2xxx: Log the status code if a firmware command fails (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs use little endian (bsc#1143706).
- scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_mem_free() easier to verify (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qla2x00_process_response_queue() easier to read (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Move qla2x00_clear_loop_id() from qla_inline.h into qla_init.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_is_reserved_id() from qla_inline.h into qla_init.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_set_fcport_state() from a .h into a .c file (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_set_reserved_loop_ids() definition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move the &amp;lt;linux/io-64-nonatomic-lo-hi.h&gt; include directive (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move the port_state_str definition from a .h to a .c file (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Pass little-endian values to the firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code (bsc#1143706).
- scsi: qla2xxx: Reduce the number of forward declarations (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Reject EH_{abort|device_reset|target_request} (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a comment that refers to the SCSI host lock (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Remove qla_tgt_cmd.data_work and qla_tgt_cmd.data_work_free (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove qla_tgt_cmd.released (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts (bsc#1143706).
- scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove two superfluous casts (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove unnecessary locking from the target code (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove unnecessary null check (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock() (bsc#1143706).
- scsi: qla2xxx: Remove useless set memory to zero use memset() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Replace vmalloc + memset with vzalloc (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox command fails (bsc#1143706).
- scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Retry fabric Scan on IOCB queue full (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id() (bsc#1143706).
- scsi: qla2xxx: Set the SCSI command result before calling the command done (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Set the qpair in SRB to NULL when SRB is released (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Silence Successful ELS IOCB message (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_send_term_imm_notif() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Skip FW dump on LOOP initialization error (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer overflow (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Uninline qla2x00_init_timer() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Unregister chrdev if module initialization fails (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Unregister chrdev if module initialization fails (git-fixes).
- scsi: qla2xxx: Unregister resources in the opposite order of the registration order (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.16-k (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.18-k (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.19-k (bsc#1143706).
- scsi: qla2xxx: Update two source code comments (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use ARRAY_SIZE() in the definition of QLA_LAST_SPEED (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use Correct index for Q-Pair array (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use __le64 instead of uint32_t[2] for sending DMA addresses to firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use common update-firmware-options routine for ISP27xx+ (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use get/put_unaligned where appropriate (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy() and strncpy() (bsc#1143706).
- scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation (bsc#1143706).
- scsi: qla2xxx: Use tabs to indent code (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime (bsc#1143706).
- scsi: qla2xxx: cleanup trace buffer initialization (bsc#1134476).
- scsi: qla2xxx: fix spelling mistake 'alredy' -&gt; 'already' (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: on session delete, return nvme cmd (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (bsc#1134476).
- scsi: qla2xxx: remove double assignment in qla2x00_update_fcport (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: target: Fix offline port handling and host reset handling (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla4xxx: avoid freeing unallocated dma memory (git-fixes).
- scsi: raid_attrs: fix unused variable warning (git-fixes).
- scsi: sas: Convert timers to use timer_setup() (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: scsi_dh_alua: Fix possible null-ptr-deref (git-fixes).
- scsi: scsi_transport_fc: nvme: display FC-NVMe port roles (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: sd: Defer spinning up drive while SANITIZE is in progress (git-fixes).
- scsi: sd: Fix a race between closing an sd device and sd I/O (git-fixes).
- scsi: sd: Fix cache_type_store() (git-fixes).
- scsi: sd: Optimal I/O size should be a multiple of physical block size (git-fixes).
- scsi: sd: Quiesce warning if device does not report optimal I/O size (git-fixes).
- scsi: sd: use mempool for discard special page (git-fixes).
- scsi: sd_zbc: Fix potential memory leak (git-fixes).
- scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous() (git-fixes).
- scsi: sr: Avoid that opening a CD-ROM hangs with runtime power management enabled (git-fixes).
- scsi: target: iscsi: cxgbit: add missing spin_lock_init() (bsc#1136349 jsc#SLE-4685).
- scsi: tcm_qla2xxx: Minimize #include directives (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: ufs: Avoid runtime suspend possibly being blocked forever (git-fixes).
- scsi: ufs: Check that space was properly alloced in copy_query_response (git-fixes).
- scsi: ufs: Fix NULL pointer dereference in ufshcd_config_vreg_hpm() (git-fixes).
- scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value (git-fixes).
- scsi: ufs: fix wrong command type of UTRD for UFSHCI v2.1 (git-fixes).
- scsi: use dma_get_cache_alignment() as minimum DMA alignment (git-fixes).
- scsi: virtio_scsi: do not send sc payload with tmfs (git-fixes).
- sctp: change to hold sk after auth shkey is created successfully (networking-stable-19_07_02).
- sdhci-fujitsu: add support for setting the CMD_DAT_DELAY attribute (bsc#1145256).
- serial: 8250: Fix TX interrupt handling condition (bsc#1051510).
- signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig (bsc#1144333).
- sis900: fix TX completion (bsc#1051510).
- sky2: Disable MSI on ASUS P6T (bsc#1142496).
- smb2: fix missing files in root share directory listing (bsc#1112907, bsc#1144333).
- smb2: fix typo in definition of a few error flags (bsc#1144333).
- smb2: fix uninitialized variable bug in smb2_ioctl_query_info (bsc#1144333).
- smb3 - clean up debug output displaying network interfaces (bsc#1144333).
- smb3.11: replace a 4 with server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- smb3: Add SMB3.1.1 GCM to negotiated crypto algorigthms (bsc#1144333).
- smb3: Add debug message later in smb2/smb3 reconnect path (bsc#1144333).
- smb3: Add defines for new negotiate contexts (bsc#1144333).
- smb3: Add dynamic trace points for various compounded smb3 ops (bsc#1144333).
- smb3: Add ftrace tracepoints for improved SMB3 debugging (bsc#1144333).
- smb3: Add handling for different FSCTL access flags (bsc#1144333).
- smb3: Add posix create context for smb3.11 posix mounts (bsc#1144333).
- smb3: Add protocol structs for change notify support (bsc#1144333).
- smb3: Add support for multidialect negotiate (SMB2.1 and later) (bsc#1051510, bsc#1144333).
- smb3: Add tracepoints for read, write and query_dir enter (bsc#1144333).
- smb3: Allow SMB3 FSCTL queries to be sent to server from tools (bsc#1144333).
- smb3: Allow persistent handle timeout to be configurable on mount (bsc#1144333).
- smb3: Allow query of symlinks stored as reparse points (bsc#1144333).
- smb3: Backup intent flag missing for directory opens with backupuid mounts (bsc#1051510, bsc#1144333).
- smb3: Backup intent flag missing from compounded ops (bsc#1144333).
- smb3: Clean up query symlink when reparse point (bsc#1144333).
- smb3: Cleanup license mess (bsc#1144333).
- smb3: Do not ignore O_SYNC/O_DSYNC and O_DIRECT flags (bsc#1085536, bsc#1144333).
- smb3: Do not send SMB3 SET_INFO if nothing changed (bsc#1051510, bsc#1144333).
- smb3: Fix 3.11 encryption to Windows and handle encrypted smb3 tcon (bsc#1051510, bsc#1144333).
- smb3: Fix SMB3.1.1 guest mounts to Samba (bsc#1051510, bsc#1144333).
- smb3: Fix deadlock in validate negotiate hits reconnect (bsc#1144333).
- smb3: Fix endian warning (bsc#1144333, bsc#1137884).
- smb3: Fix enumerating snapshots to Azure (bsc#1144333).
- smb3: Fix length checking of SMB3.11 negotiate request (bsc#1051510, bsc#1144333).
- smb3: Fix mode on mkdir on smb311 mounts (bsc#1144333).
- smb3: Fix potential memory leak when processing compound chain (bsc#1144333).
- smb3: Fix rmdir compounding regression to strict servers (bsc#1144333).
- smb3: Fix root directory when server returns inode number of zero (bsc#1051510, bsc#1144333).
- smb3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL (bsc#1144333).
- smb3: Log at least once if tree connect fails during reconnect (bsc#1144333).
- smb3: Number of requests sent should be displayed for SMB3 not just CIFS (bsc#1144333).
- smb3: Send netname context during negotiate protocol (bsc#1144333).
- smb3: Track total time spent on roundtrips for each SMB3 command (bsc#1144333).
- smb3: Update POSIX negotiate context with POSIX ctxt GUID (bsc#1144333).
- smb3: Validate negotiate request must always be signed (bsc#1064597, bsc#1144333).
- smb3: Warn user if trying to sign connection that authenticated as guest (bsc#1085536, bsc#1144333).
- smb3: add additional ftrace entry points for entry/exit to cifs.ko (bsc#1144333).
- smb3: add credits we receive from oplock/break PDUs (bsc#1144333).
- smb3: add debug for unexpected mid cancellation (bsc#1144333).
- smb3: add define for id for posix create context and corresponding struct (bsc#1144333).
- smb3: add dynamic trace point for query_info_enter/done (bsc#1144333).
- smb3: add dynamic trace point for smb3_cmd_enter (bsc#1144333).
- smb3: add dynamic tracepoint for timeout waiting for credits (bsc#1144333).
- smb3: add dynamic tracepoints for simple fallocate and zero range (bsc#1144333).
- smb3: add missing read completion trace point (bsc#1144333).
- smb3: add module alias for smb3 to cifs.ko (bsc#1144333).
- smb3: add new mount option to retrieve mode from special ACE (bsc#1144333).
- smb3: add reconnect tracepoints (bsc#1144333).
- smb3: add smb3.1.1 to default dialect list (bsc#1144333).
- smb3: add support for posix negotiate context (bsc#1144333).
- smb3: add support for statfs for smb3.1.1 posix extensions (bsc#1144333).
- smb3: add trace point for tree connection (bsc#1144333).
- smb3: add tracepoint for sending lease break responses to server (bsc#1144333).
- smb3: add tracepoint for session expired or deleted (bsc#1144333).
- smb3: add tracepoint for slow responses (bsc#1144333).
- smb3: add tracepoint to catch cases where credit refund of failed op overlaps reconnect (bsc#1144333).
- smb3: add tracepoints for query dir (bsc#1144333).
- smb3: add tracepoints for smb2/smb3 open (bsc#1144333).
- smb3: add way to control slow response threshold for logging and stats (bsc#1144333).
- smb3: allow more detailed protocol info on open files for debugging (bsc#1144333).
- smb3: allow posix mount option to enable new SMB311 protocol extensions (bsc#1144333).
- smb3: allow previous versions to be mounted with snapshot= mount parm (bsc#1144333).
- smb3: allow stats which track session and share reconnects to be reset (bsc#1051510, bsc#1144333).
- smb3: check for and properly advertise directory lease support (bsc#1051510, bsc#1144333).
- smb3: create smb3 equivalent alias for cifs pseudo-xattrs (bsc#1144333).
- smb3: directory sync should not return an error (bsc#1051510, bsc#1144333).
- smb3: display bytes_read and bytes_written in smb3 stats (bsc#1144333).
- smb3: display security information in /proc/fs/cifs/DebugData more accurately (bsc#1144333).
- smb3: display session id in debug data (bsc#1144333).
- smb3: display stats counters for number of slow commands (bsc#1144333).
- smb3: display volume serial number for shares in /proc/fs/cifs/DebugData (bsc#1144333).
- smb3: do not allow insecure cifs mounts when using smb3 (bsc#1144333).
- smb3: do not attempt cifs operation in smb3 query info error path (bsc#1051510, bsc#1144333).
- smb3: do not display confusing message on mount to Azure servers (bsc#1144333).
- smb3: do not display empty interface list (bsc#1144333).
- smb3: do not request leases in symlink creation and query (bsc#1051510, bsc#1144333).
- smb3: do not send compression info by default (bsc#1144333).
- smb3: enumerating snapshots was leaving part of the data off end (bsc#1051510, bsc#1144333).
- smb3: fill in statfs fsid and correct namelen (bsc#1112905, bsc#1144333).
- smb3: fix bytes_read statistics (bsc#1144333).
- smb3: fix corrupt path in subdirs on smb311 with posix (bsc#1144333).
- smb3: fix large reads on encrypted connections (bsc#1144333).
- smb3: fix lease break problem introduced by compounding (bsc#1144333).
- smb3: fix minor debug output for CONFIG_CIFS_STATS (bsc#1144333).
- smb3: fix redundant opens on root (bsc#1144333).
- smb3: fix reset of bytes read and written stats (bsc#1112906, bsc#1144333).
- smb3: fix various xid leaks (bsc#1051510, bsc#1144333).
- smb3: for kerberos mounts display the credential uid used (bsc#1144333).
- smb3: handle new statx fields (bsc#1085536, bsc#1144333).
- smb3: if max_credits is specified then display it in /proc/mounts (bsc#1144333).
- smb3: if server does not support posix do not allow posix mount option (bsc#1144333).
- smb3: improve dynamic tracing of open and posix mkdir (bsc#1144333).
- smb3: increase initial number of credits requested to allow write (bsc#1144333).
- smb3: make default i/o size for smb3 mounts larger (bsc#1144333).
- smb3: minor cleanup of compound_send_recv (bsc#1144333).
- smb3: minor debugging clarifications in rfc1001 len processing (bsc#1144333).
- smb3: minor missing defines relating to reparse points (bsc#1144333).
- smb3: missing defines and structs for reparse point handling (bsc#1144333).
- smb3: note that smb3.11 posix extensions mount option is experimental (bsc#1144333).
- smb3: on kerberos mount if server does not specify auth type use krb5 (bsc#1051510, bsc#1144333).
- smb3: on reconnect set PreviousSessionId field (bsc#1112899, bsc#1144333).
- smb3: optimize open to not send query file internal info (bsc#1144333).
- smb3: passthru query info does not check for SMB3 FSCTL passthru (bsc#1144333).
- smb3: print tree id in debugdata in proc to be able to help logging (bsc#1144333).
- smb3: query inode number on open via create context (bsc#1144333).
- smb3: remove noisy warning message on mount (bsc#1129664, bsc#1144333).
- smb3: remove per-session operations from per-tree connection stats (bsc#1144333).
- smb3: rename encryption_required to smb3_encryption_required (bsc#1144333).
- smb3: request more credits on normal (non-large read/write) ops (bsc#1144333).
- smb3: request more credits on tree connect (bsc#1144333).
- smb3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (bsc#1144333).
- smb3: send CAP_DFS capability during session setup (bsc#1144333).
- smb3: send backup intent on compounded query info (bsc#1144333).
- smb3: show number of current open files in /proc/fs/cifs/Stats (bsc#1144333).
- smb3: simplify code by removing CONFIG_CIFS_SMB311 (bsc#1051510, bsc#1144333).
- smb3: smbdirect no longer experimental (bsc#1144333).
- smb3: snapshot mounts are read-only and make sure info is displayable about the mount (bsc#1144333).
- smb3: track the instance of each session for debugging (bsc#1144333).
- smb3: trivial cleanup to smb2ops.c (bsc#1144333).
- smb3: update comment to clarify enumerating snapshots (bsc#1144333).
- smb3: update default requested iosize to 4MB from 1MB for recent dialects (bsc#1144333).
- smb: Add vers=3.0.2 as a valid option for SMBv3.0.2 (bsc#1144333).
- smb: Cleanup some minor endian issues in smb3 rdma (bsc#1144333).
- smb: Do not log confusing message on reconnect by default (bsc#1129664, bsc#1144333).
- smb: Do not log expected error on DFS referral request (bsc#1051510, bsc#1144333).
- smb: Fix SMB3.1.1 guest authentication to Samba (bsc#1085536, bsc#1144333).
- smb: Fix encryption labels and lengths for SMB3.1.1 (bsc#1085536, bsc#1144333).
- smb: Fix match_server check to allow for auto dialect negotiate (bsc#1144333).
- smb: Fix warning messages when mounting to older servers (bsc#1144333).
- smb: SMB3.1.1 dialect is no longer experimental (bsc#1051510, bsc#1144333).
- smb: SMB3.1.1: Add GCM crypto to the encrypt and decrypt functions (bsc#1144333).
- smb: SMB311: Fix reconnect (bsc#1051510, bsc#1144333).
- smb: SMB311: Improve checking of negotiate security contexts (bsc#1051510, bsc#1144333).
- smb: Tree connect for SMB3.1.1 must be signed for non-encrypted shares (bsc#1051510, bsc#1144333).
- smb: Validate negotiate (to protect against downgrade) even if signing off (bsc#1085536, bsc#1144333).
- smb: fix leak of validate negotiate info response buffer (bsc#1064597, bsc#1144333).
- smb: fix validate negotiate info uninitialised memory use (bsc#1064597, bsc#1144333).
- smbd: Make upper layer decide when to destroy the transport (bsc#1144333).
- smpboot: Place the __percpu annotation correctly (git fixes).
- soc: rockchip: power-domain: Add a sanity check on pd-&gt;num_clks (bsc#1144718,bsc#1144813).
- soc: rockchip: power-domain: Use of_clk_get_parent_count() instead of open coding (bsc#1144718,bsc#1144813).
- soc: rockchip: power-domain: use clk_bulk APIs (bsc#1144718,bsc#1144813).
- sound: fix a memory leak bug (bsc#1051510).
- spi: bcm2835aux: fix corruptions for longer spi transfers (bsc#1051510).
- spi: bcm2835aux: remove dangerous uncontrolled read of fifo (bsc#1051510).
- spi: bcm2835aux: unifying code between polling and interrupt driven code (bsc#1051510).
- st21nfca_connectivity_event_received: null check the allocation (bsc#1051510).
- st_nci_hci_connectivity_event_received: null check the allocation (bsc#1051510).
- staging: comedi: dt3000: Fix rounding up of timer divisor (bsc#1051510).
- staging: comedi: dt3000: Fix signed integer overflow 'divider * base' (bsc#1051510).
- staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work (bsc#1111666).
- supported.conf: Add missing modules (bsc#1066369).
- supported.conf: Remove duplicate drivers/ata/libahci_platform
- supported.conf: Remove duplicate entries
- supported.conf: Sort alphabetically, align comments.
- supported.conf: Sort alphabetically, align comments.
- tcp: Reset bytes_acked and bytes_received when disconnecting (networking-stable-19_07_25).
- test_firmware: fix a memory leak bug (bsc#1051510).
- tipc: change to use register_pernet_device (networking-stable-19_07_02).
- tools: bpftool: close prog FD before exit on showing a single program (bsc#1109837).
- tools: bpftool: fix error message (prog -&gt; object) (bsc#1109837).
- tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete (bsc#1082555).
- tpm: Fix Tpm 1.2 Shutdown sequence to prevent future TPM operations (bsc#1082555).
- tpm: Fix off-by-one when reading binary_bios_measurements (bsc#1082555).
- tpm: Unify the send callback behaviour (bsc#1082555).
- tpm: vtpm_proxy: Suppress error logging when in closed state (bsc#1082555).
- tracing: Fix header include guards in trace event headers (bsc#1144474).
- tracing: store path instead of inode (bsc#1120046, bsc#1146141).
- treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 231 (bsc#1144333).
- tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop (bsc#1051510).
- tty/serial: digicolor: Fix digicolor-usart already registered warning (bsc#1051510).
- tty: max310x: Fix invalid baudrate divisors calculator (bsc#1051510).
- tty: serial: msm_serial: avoid system lockup condition (bsc#1051510).
- tua6100: Avoid build warnings (bsc#1051510).
- tun: mark small packets as owned by the tap sock (bsc#1109837).
- tun: wake up waitqueues after IFF_UP is set (networking-stable-19_07_02).
- udf: Fix incorrect final NOT_ALLOCATED (hole) extent length (bsc#1148617).
- update internal version number for cifs.ko (bsc#1144333).
- usb-storage: Add new JMS567 revision to unusual_devs (bsc#1051510).
- usb: CDC: fix sanity checks in CDC union parser (bsc#1142635).
- usb: Handle USB3 remote wakeup for Lpm enabled devices correctly (bsc#1051510).
- usb: cdc-acm: make sure a refcount is taken early enough (bsc#1142635).
- usb: cdc-wdm: fix race between write and disconnect due to flag abuse (bsc#1051510).
- usb: chipidea: udc: do not do hardware access if gadget has stopped (bsc#1051510).
- usb: core: Fix races in character device registration and deregistraion (bsc#1051510).
- usb: core: hub: Disable hub-initiated U1/U2 (bsc#1051510).
- usb: gadget: composite: Clear 'suspended' on reset/disconnect (bsc#1051510).
- usb: gadget: udc: renesas_usb3: Fix sysfs interface of 'role' (bsc#1142635).
- usb: host: fotg2: restart hcd after port reset (bsc#1051510).
- usb: host: ohci: fix a race condition between shutdown and irq (bsc#1051510).
- usb: host: xhci-rcar: Fix timeout in xhci_suspend() (bsc#1051510).
- usb: host: xhci: rcar: Fix typo in compatible string matching (bsc#1051510).
- usb: iowarrior: fix deadlock on disconnect (bsc#1051510).
- usb: serial: option: Add Motorola modem UARTs (bsc#1051510).
- usb: serial: option: Add support for ZTE MF871A (bsc#1051510).
- usb: serial: option: add D-Link DWM-222 device ID (bsc#1051510).
- usb: serial: option: add the BroadMobi BM818 card (bsc#1051510).
- usb: storage: ums-realtek: Update module parameter description for auto_delink_en (bsc#1051510).
- usb: storage: ums-realtek: Whitelist auto-delink support (bsc#1051510).
- usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests (bsc#1111666).
- usb: typec: tcpm: free log buf memory when remove debug file (bsc#1111666).
- usb: typec: tcpm: remove tcpm dir if no children (bsc#1111666).
- usb: usbfs: fix double-free of usb memory upon submiturb error (bsc#1051510).
- usb: wusbcore: fix unbalanced get/put cluster_id (bsc#1051510).
- usb: yurex: Fix use-after-free in yurex_delete (bsc#1051510).
- vfs: fix page locking deadlocks when deduping files (bsc#1148619).
- virtio/s390: fix race on airq_areas (bsc#1145357).
- vmci: Release resource if the work is already queued (bsc#1051510).
- vrf: make sure skb-&gt;data contains ip header to make routing (networking-stable-19_07_25).
- watchdog: bcm2835_wdt: Fix module autoload (bsc#1051510).
- watchdog: core: fix null pointer dereference when releasing cdev (bsc#1051510).
- watchdog: f71808e_wdt: fix F81866 bit operation (bsc#1051510).
- watchdog: fix compile time error of pretimeout governors (bsc#1051510).
- wimax/i2400m: fix a memory leak bug (bsc#1051510).
- x86/asm: Remove dead __GNUC__ conditionals (bsc#1112178).
- x86/boot: Fix memory leak in default_get_smp_config() (bsc#1114279).
- x86/dma: Get rid of iommu_pass_through (bsc#1136039).
- x86/entry/64/compat: Fix stack switching for XEN PV (bsc#1108382).
- x86/microcode: Fix the microcode load on CPU hotplug for real (bsc#1114279).
- x86/mm: Check for pfn instead of page in vmalloc_sync_one() (bsc#1118689).
- x86/mm: Sync also unmappings in vmalloc_sync_all() (bsc#1118689).
- x86/resctrl: Prevent NULL pointer dereference when local MBM is disabled (bsc#1112178).
- x86/speculation/mds: Apply more accurate check on hypervisor platform (bsc#1114279).
- x86/speculation: Allow guests to use SSBD even if host does not (bsc#1114279).
- x86/unwind: Add hardcoded ORC entry for NULL (bsc#1114279).
- x86/unwind: Handle NULL pointer calls better in frame unwinder (bsc#1114279).
- xdp: unpin xdp umem pages in error path (bsc#1109837).
- xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() (bsc#1065600).
- xfrm: Fix NULL pointer dereference in xfrm_input when skb_dst_force clears the dst_entry (bsc#1143300).
- xfrm: Fix NULL pointer dereference when skb_dst_force clears the dst_entry (bsc#1143300).
- xfrm: Fix bucket count reported to userspace (bsc#1143300).
- xfrm: Fix error return code in xfrm_output_one() (bsc#1143300).
- xfs: do not crash on null attr fork xfs_bmapi_read (bsc#1148035).
- xfs: do not trip over uninitialized buffer on extent read of corrupted inode (bsc#1149053).
- xfs: dump transaction usage details on log reservation overrun (bsc#1145235).
- xfs: eliminate duplicate icreate tx reservation functions (bsc#1145235).
- xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (bsc#1148032).
- xfs: fix semicolon.cocci warnings (bsc#1145235).
- xfs: fix up agi unlinked list reservations (bsc#1145235).
- xfs: include an allocfree res for inobt modifications (bsc#1145235).
- xfs: include inobt buffers in ifree tx log reservation (bsc#1145235).
- xfs: print transaction log reservation on overrun (bsc#1145235).
- xfs: refactor inode chunk alloc/free tx reservation (bsc#1145235).
- xfs: refactor xlog_cil_insert_items() to facilitate transaction dump (bsc#1145235).
- xfs: remove more ondisk directory corruption asserts (bsc#1148034).
- xfs: separate shutdown from ticket reservation print helper (bsc#1145235).
- xfs: truncate transaction does not modify the inobt (bsc#1145235).
- {nl,mac}80211: fix interface combinations on crypto controlled devices (bsc#1111666).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-20"/>
	<updated date="2019-09-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1047238">SUSE bug 1047238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050911">SUSE bug 1050911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054914">SUSE bug 1054914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056686">SUSE bug 1056686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060662">SUSE bug 1060662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061843">SUSE bug 1061843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064597">SUSE bug 1064597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064701">SUSE bug 1064701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066369">SUSE bug 1066369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071009">SUSE bug 1071009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071306">SUSE bug 1071306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078248">SUSE bug 1078248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085536">SUSE bug 1085536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085539">SUSE bug 1085539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086103">SUSE bug 1086103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087092">SUSE bug 1087092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090734">SUSE bug 1090734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091171">SUSE bug 1091171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093205">SUSE bug 1093205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102097">SUSE bug 1102097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104902">SUSE bug 1104902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106061">SUSE bug 1106061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106284">SUSE bug 1106284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106434">SUSE bug 1106434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108382">SUSE bug 1108382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112894">SUSE bug 1112894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112899">SUSE bug 1112899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112902">SUSE bug 1112902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112903">SUSE bug 1112903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112905">SUSE bug 1112905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112906">SUSE bug 1112906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112907">SUSE bug 1112907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114542">SUSE bug 1114542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118689">SUSE bug 1118689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119086">SUSE bug 1119086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120046">SUSE bug 1120046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120876">SUSE bug 1120876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120902">SUSE bug 1120902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123105">SUSE bug 1123105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123959">SUSE bug 1123959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124370">SUSE bug 1124370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129424">SUSE bug 1129424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129519">SUSE bug 1129519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129664">SUSE bug 1129664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131107">SUSE bug 1131107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131281">SUSE bug 1131281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131489">SUSE bug 1131489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131565">SUSE bug 1131565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134291">SUSE bug 1134291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134476">SUSE bug 1134476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134881">SUSE bug 1134881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134882">SUSE bug 1134882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135219">SUSE bug 1135219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135897">SUSE bug 1135897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135990">SUSE bug 1135990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136039">SUSE bug 1136039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136261">SUSE bug 1136261</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136346">SUSE bug 1136346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136349">SUSE bug 1136349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136352">SUSE bug 1136352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136496">SUSE bug 1136496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136498">SUSE bug 1136498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136502">SUSE bug 1136502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136682">SUSE bug 1136682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137322">SUSE bug 1137322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137323">SUSE bug 1137323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137884">SUSE bug 1137884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138099">SUSE bug 1138099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138100">SUSE bug 1138100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138539">SUSE bug 1138539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139020">SUSE bug 1139020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139021">SUSE bug 1139021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139101">SUSE bug 1139101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139500">SUSE bug 1139500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140012">SUSE bug 1140012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140426">SUSE bug 1140426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140487">SUSE bug 1140487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141340">SUSE bug 1141340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141450">SUSE bug 1141450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141543">SUSE bug 1141543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141554">SUSE bug 1141554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142019">SUSE bug 1142019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142076">SUSE bug 1142076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142109">SUSE bug 1142109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142117">SUSE bug 1142117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142118">SUSE bug 1142118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142119">SUSE bug 1142119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142496">SUSE bug 1142496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142541">SUSE bug 1142541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142701">SUSE bug 1142701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142857">SUSE bug 1142857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143300">SUSE bug 1143300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143331">SUSE bug 1143331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143466">SUSE bug 1143466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143738">SUSE bug 1143738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143765">SUSE bug 1143765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143841">SUSE bug 1143841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143843">SUSE bug 1143843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143962">SUSE bug 1143962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144123">SUSE bug 1144123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144375">SUSE bug 1144375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144474">SUSE bug 1144474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144518">SUSE bug 1144518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144582">SUSE bug 1144582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144718">SUSE bug 1144718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144813">SUSE bug 1144813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144880">SUSE bug 1144880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144886">SUSE bug 1144886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144912">SUSE bug 1144912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144920">SUSE bug 1144920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144979">SUSE bug 1144979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145010">SUSE bug 1145010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145018">SUSE bug 1145018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145051">SUSE bug 1145051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145059">SUSE bug 1145059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145189">SUSE bug 1145189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145235">SUSE bug 1145235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145256">SUSE bug 1145256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145300">SUSE bug 1145300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145302">SUSE bug 1145302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145357">SUSE bug 1145357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145388">SUSE bug 1145388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145389">SUSE bug 1145389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145390">SUSE bug 1145390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145391">SUSE bug 1145391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145392">SUSE bug 1145392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145393">SUSE bug 1145393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145394">SUSE bug 1145394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145395">SUSE bug 1145395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145396">SUSE bug 1145396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145397">SUSE bug 1145397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145408">SUSE bug 1145408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145409">SUSE bug 1145409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145446">SUSE bug 1145446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145661">SUSE bug 1145661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145678">SUSE bug 1145678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145687">SUSE bug 1145687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145920">SUSE bug 1145920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145922">SUSE bug 1145922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145934">SUSE bug 1145934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145937">SUSE bug 1145937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145940">SUSE bug 1145940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145941">SUSE bug 1145941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145942">SUSE bug 1145942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145946">SUSE bug 1145946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146074">SUSE bug 1146074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146084">SUSE bug 1146084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146141">SUSE bug 1146141</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146163">SUSE bug 1146163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146215">SUSE bug 1146215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146285">SUSE bug 1146285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146346">SUSE bug 1146346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146351">SUSE bug 1146351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146352">SUSE bug 1146352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146361">SUSE bug 1146361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146368">SUSE bug 1146368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146376">SUSE bug 1146376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146378">SUSE bug 1146378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146381">SUSE bug 1146381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146391">SUSE bug 1146391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146399">SUSE bug 1146399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146413">SUSE bug 1146413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146425">SUSE bug 1146425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146516">SUSE bug 1146516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146524">SUSE bug 1146524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146526">SUSE bug 1146526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146529">SUSE bug 1146529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146531">SUSE bug 1146531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146543">SUSE bug 1146543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146547">SUSE bug 1146547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146550">SUSE bug 1146550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146575">SUSE bug 1146575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146589">SUSE bug 1146589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146678">SUSE bug 1146678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146938">SUSE bug 1146938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148031">SUSE bug 1148031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148032">SUSE bug 1148032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148033">SUSE bug 1148033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148034">SUSE bug 1148034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148035">SUSE bug 1148035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148093">SUSE bug 1148093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148133">SUSE bug 1148133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148192">SUSE bug 1148192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148196">SUSE bug 1148196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148198">SUSE bug 1148198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148202">SUSE bug 1148202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148219">SUSE bug 1148219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148297">SUSE bug 1148297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148303">SUSE bug 1148303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148308">SUSE bug 1148308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148363">SUSE bug 1148363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148379">SUSE bug 1148379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148394">SUSE bug 1148394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148527">SUSE bug 1148527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148570">SUSE bug 1148570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148574">SUSE bug 1148574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148616">SUSE bug 1148616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148617">SUSE bug 1148617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148619">SUSE bug 1148619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148698">SUSE bug 1148698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148859">SUSE bug 1148859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149053">SUSE bug 1149053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149083">SUSE bug 1149083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149104">SUSE bug 1149104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149105">SUSE bug 1149105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149106">SUSE bug 1149106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149197">SUSE bug 1149197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149214">SUSE bug 1149214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149224">SUSE bug 1149224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149325">SUSE bug 1149325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149376">SUSE bug 1149376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149413">SUSE bug 1149413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149418">SUSE bug 1149418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149424">SUSE bug 1149424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149522">SUSE bug 1149522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149527">SUSE bug 1149527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149539">SUSE bug 1149539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149552">SUSE bug 1149552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149591">SUSE bug 1149591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149602">SUSE bug 1149602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149612">SUSE bug 1149612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149626">SUSE bug 1149626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149652">SUSE bug 1149652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149713">SUSE bug 1149713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149940">SUSE bug 1149940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149976">SUSE bug 1149976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150025">SUSE bug 1150025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150033">SUSE bug 1150033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150112">SUSE bug 1150112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150562">SUSE bug 1150562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150727">SUSE bug 1150727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150860">SUSE bug 1150860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150861">SUSE bug 1150861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150933">SUSE bug 1150933</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-18551/">CVE-2017-18551</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20976/">CVE-2018-20976</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-21008/">CVE-2018-21008</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10207/">CVE-2019-10207</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14814/">CVE-2019-14814</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14815/">CVE-2019-14815</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14816/">CVE-2019-14816</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14835/">CVE-2019-14835</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15030/">CVE-2019-15030</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15031/">CVE-2019-15031</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15090/">CVE-2019-15090</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15098/">CVE-2019-15098</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15099/">CVE-2019-15099</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15117/">CVE-2019-15117</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15118/">CVE-2019-15118</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15211/">CVE-2019-15211</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-15212/">CVE-2019-15212</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15214/">CVE-2019-15214</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15215/">CVE-2019-15215</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15216/">CVE-2019-15216</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15217/">CVE-2019-15217</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15218/">CVE-2019-15218</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15219/">CVE-2019-15219</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15220/">CVE-2019-15220</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15221/">CVE-2019-15221</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15222/">CVE-2019-15222</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15239/">CVE-2019-15239</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15290/">CVE-2019-15290</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15292/">CVE-2019-15292</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15538/">CVE-2019-15538</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15666/">CVE-2019-15666</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15902/">CVE-2019-15902</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15917/">CVE-2019-15917</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15919/">CVE-2019-15919</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15920/">CVE-2019-15920</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15921/">CVE-2019-15921</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15924/">CVE-2019-15924</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15926/">CVE-2019-15926</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-15927/">CVE-2019-15927</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9456/">CVE-2019-9456</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496221" comment="kernel-docs-4.12.14-197.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496222" comment="kernel-obs-build-4.12.14-197.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496223" comment="kernel-source-4.12.14-197.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496224" comment="kernel-syms-4.12.14-197.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138192" version="1" class="patch">
	<metadata>
		<title>Security update for gcc7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1141897" ref_url="https://bugzilla.suse.com/1141897" source="BUGZILLA"/>
		<reference ref_id="1142649" ref_url="https://bugzilla.suse.com/1142649" source="BUGZILLA"/>
		<reference ref_id="1148517" ref_url="https://bugzilla.suse.com/1148517" source="BUGZILLA"/>
		<reference ref_id="1149145" ref_url="https://bugzilla.suse.com/1149145" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14250" ref_url="https://www.suse.com/security/cve/CVE-2019-14250/" source="CVE"/>
		<reference ref_id="CVE-2019-15847" ref_url="https://www.suse.com/security/cve/CVE-2019-15847/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006024.html" source="SUSE-SU"/>
		<description>
This update for gcc7 to r275405 fixes the following issues:

Security issues fixed:

- CVE-2019-14250: Fixed an integer overflow in binutils (bsc#1142649).
- CVE-2019-15847: Fixed an optimization in the POWER9 backend of gcc that could reduce the entropy of the random number generator (bsc#1149145).

Non-security issue fixed:

- Move Live Patching technology stack from kGraft to upstream klp (bsc#1071995, fate#323487).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-16"/>
	<updated date="2019-10-16"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141897">SUSE bug 1141897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142649">SUSE bug 1142649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148517">SUSE bug 1148517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149145">SUSE bug 1149145</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14250/">CVE-2019-14250</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15847/">CVE-2019-15847</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496091" comment="cross-nvptx-gcc7-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496092" comment="cross-nvptx-newlib7-devel-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496093" comment="gcc7-32bit-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496094" comment="gcc7-ada-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496095" comment="gcc7-c++-32bit-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496096" comment="gcc7-fortran-32bit-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496097" comment="gcc7-info-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496098" comment="gcc7-locale-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496099" comment="gcc7-objc-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496100" comment="libada7-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496101" comment="libasan4-32bit-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496102" comment="libcilkrts5-32bit-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496103" comment="libstdc++6-devel-gcc7-32bit-7.4.1+r275405-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496104" comment="libubsan0-32bit-7.4.1+r275405-4.9.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138193" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1054914" ref_url="https://bugzilla.suse.com/1054914" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1104967" ref_url="https://bugzilla.suse.com/1104967" source="BUGZILLA"/>
		<reference ref_id="1109158" ref_url="https://bugzilla.suse.com/1109158" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1119086" ref_url="https://bugzilla.suse.com/1119086" source="BUGZILLA"/>
		<reference ref_id="1123034" ref_url="https://bugzilla.suse.com/1123034" source="BUGZILLA"/>
		<reference ref_id="1127988" ref_url="https://bugzilla.suse.com/1127988" source="BUGZILLA"/>
		<reference ref_id="1131304" ref_url="https://bugzilla.suse.com/1131304" source="BUGZILLA"/>
		<reference ref_id="1137069" ref_url="https://bugzilla.suse.com/1137069" source="BUGZILLA"/>
		<reference ref_id="1137865" ref_url="https://bugzilla.suse.com/1137865" source="BUGZILLA"/>
		<reference ref_id="1137959" ref_url="https://bugzilla.suse.com/1137959" source="BUGZILLA"/>
		<reference ref_id="1137982" ref_url="https://bugzilla.suse.com/1137982" source="BUGZILLA"/>
		<reference ref_id="1140155" ref_url="https://bugzilla.suse.com/1140155" source="BUGZILLA"/>
		<reference ref_id="1141013" ref_url="https://bugzilla.suse.com/1141013" source="BUGZILLA"/>
		<reference ref_id="1142076" ref_url="https://bugzilla.suse.com/1142076" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1146042" ref_url="https://bugzilla.suse.com/1146042" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146540" ref_url="https://bugzilla.suse.com/1146540" source="BUGZILLA"/>
		<reference ref_id="1146664" ref_url="https://bugzilla.suse.com/1146664" source="BUGZILLA"/>
		<reference ref_id="1148133" ref_url="https://bugzilla.suse.com/1148133" source="BUGZILLA"/>
		<reference ref_id="1148712" ref_url="https://bugzilla.suse.com/1148712" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1149313" ref_url="https://bugzilla.suse.com/1149313" source="BUGZILLA"/>
		<reference ref_id="1149446" ref_url="https://bugzilla.suse.com/1149446" source="BUGZILLA"/>
		<reference ref_id="1149555" ref_url="https://bugzilla.suse.com/1149555" source="BUGZILLA"/>
		<reference ref_id="1149651" ref_url="https://bugzilla.suse.com/1149651" source="BUGZILLA"/>
		<reference ref_id="1150305" ref_url="https://bugzilla.suse.com/1150305" source="BUGZILLA"/>
		<reference ref_id="1150381" ref_url="https://bugzilla.suse.com/1150381" source="BUGZILLA"/>
		<reference ref_id="1150423" ref_url="https://bugzilla.suse.com/1150423" source="BUGZILLA"/>
		<reference ref_id="1150846" ref_url="https://bugzilla.suse.com/1150846" source="BUGZILLA"/>
		<reference ref_id="1151067" ref_url="https://bugzilla.suse.com/1151067" source="BUGZILLA"/>
		<reference ref_id="1151192" ref_url="https://bugzilla.suse.com/1151192" source="BUGZILLA"/>
		<reference ref_id="1151350" ref_url="https://bugzilla.suse.com/1151350" source="BUGZILLA"/>
		<reference ref_id="1151610" ref_url="https://bugzilla.suse.com/1151610" source="BUGZILLA"/>
		<reference ref_id="1151661" ref_url="https://bugzilla.suse.com/1151661" source="BUGZILLA"/>
		<reference ref_id="1151662" ref_url="https://bugzilla.suse.com/1151662" source="BUGZILLA"/>
		<reference ref_id="1151667" ref_url="https://bugzilla.suse.com/1151667" source="BUGZILLA"/>
		<reference ref_id="1151680" ref_url="https://bugzilla.suse.com/1151680" source="BUGZILLA"/>
		<reference ref_id="1151891" ref_url="https://bugzilla.suse.com/1151891" source="BUGZILLA"/>
		<reference ref_id="1151955" ref_url="https://bugzilla.suse.com/1151955" source="BUGZILLA"/>
		<reference ref_id="1152024" ref_url="https://bugzilla.suse.com/1152024" source="BUGZILLA"/>
		<reference ref_id="1152025" ref_url="https://bugzilla.suse.com/1152025" source="BUGZILLA"/>
		<reference ref_id="1152026" ref_url="https://bugzilla.suse.com/1152026" source="BUGZILLA"/>
		<reference ref_id="1152161" ref_url="https://bugzilla.suse.com/1152161" source="BUGZILLA"/>
		<reference ref_id="1152187" ref_url="https://bugzilla.suse.com/1152187" source="BUGZILLA"/>
		<reference ref_id="1152243" ref_url="https://bugzilla.suse.com/1152243" source="BUGZILLA"/>
		<reference ref_id="1152325" ref_url="https://bugzilla.suse.com/1152325" source="BUGZILLA"/>
		<reference ref_id="1152457" ref_url="https://bugzilla.suse.com/1152457" source="BUGZILLA"/>
		<reference ref_id="1152460" ref_url="https://bugzilla.suse.com/1152460" source="BUGZILLA"/>
		<reference ref_id="1152466" ref_url="https://bugzilla.suse.com/1152466" source="BUGZILLA"/>
		<reference ref_id="1152525" ref_url="https://bugzilla.suse.com/1152525" source="BUGZILLA"/>
		<reference ref_id="1152972" ref_url="https://bugzilla.suse.com/1152972" source="BUGZILLA"/>
		<reference ref_id="1152974" ref_url="https://bugzilla.suse.com/1152974" source="BUGZILLA"/>
		<reference ref_id="1152975" ref_url="https://bugzilla.suse.com/1152975" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18595" ref_url="https://www.suse.com/security/cve/CVE-2017-18595/" source="CVE"/>
		<reference ref_id="CVE-2019-14821" ref_url="https://www.suse.com/security/cve/CVE-2019-14821/" source="CVE"/>
		<reference ref_id="CVE-2019-15291" ref_url="https://www.suse.com/security/cve/CVE-2019-15291/" source="CVE"/>
		<reference ref_id="CVE-2019-9506" ref_url="https://www.suse.com/security/cve/CVE-2019-9506/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006028.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2017-18595: A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (bnc#1149555).
- CVE-2019-14821: An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring-&gt;first' and 'ring-&gt;last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350).
- CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver (bnc#1146540).
- CVE-2019-9506: The Bluetooth BR/EDR specification up to and including version 5.1 permitted sufficiently low encryption key length and did not prevent an attacker from influencing the key length negotiation. This allowed practical brute-force attacks (aka 'KNOB') that could decrypt traffic and injected arbitrary ciphertext without the victim noticing (bnc#1137865 bnc#1146042).

The following non-security bugs were fixed:

- ACPI: custom_method: fix memory leaks (bsc#1051510).
- ACPI / PCI: fix acpi_pci_irq_enable() memory leak (bsc#1051510).
- ACPI / property: Fix acpi_graph_get_remote_endpoint() name in kerneldoc (bsc#1051510).
- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- ALSA: aoa: onyx: always initialize register read value (bsc#1051510).
- ALSA: firewire-tascam: check intermediate state of clock status and retry (bsc#1051510).
- ALSA: firewire-tascam: handle error code when getting current source of clock (bsc#1051510).
- ASoC: es8328: Fix copy-paste error in es8328_right_line_controls (bsc#1051510).
- ASoC: Intel: Baytrail: Fix implicit fallthrough warning (bsc#1051510).
- ASoC: sun4i-i2s: RX and TX counter registers are swapped (bsc#1051510).
- ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls (bsc#1051510).
- ASoC: wm8988: fix typo in wm8988_right_line_controls (bsc#1051510).
- ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet (bsc#1111666).
- ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init (bsc#1051510).
- atm: iphase: Fix Spectre v1 vulnerability (networking-stable-19_08_08).
- bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA (bsc#1051510).
- blk-flush: do not run queue for requests bypassing flush (bsc#1137959).
- blk-flush: use blk_mq_request_bypass_insert() (bsc#1137959).
- blk-mq: do not allocate driver tag upfront for flush rq (bsc#1137959).
- blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (bsc#1151610).
- blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue (bsc#1137959).
- blk-mq: introduce blk_mq_request_completed() (bsc#1149446).
- blk-mq: introduce blk_mq_tagset_wait_completed_request() (bsc#1149446).
- blk-mq: kABI fixes for blk-mq.h (bsc#1137959).
- blk-mq: move blk_mq_put_driver_tag*() into blk-mq.h (bsc#1137959).
- blk-mq: punt failed direct issue to dispatch list (bsc#1137959).
- blk-mq: put the driver tag of nxt rq before first one is requeued (bsc#1137959).
- blk-mq-sched: decide how to handle flush rq via RQF_FLUSH_SEQ (bsc#1137959).
- block: fix timeout changes for legacy request drivers (bsc#1149446).
- block: kABI fixes for BLK_EH_DONE renaming (bsc#1142076).
- block: rename BLK_EH_NOT_HANDLED to BLK_EH_DONE (bsc#1142076).
- bnx2x: Disable multi-cos feature (networking-stable-19_08_08).
- bonding/802.3ad: fix link_failure_count tracking (bsc#1137069 bsc#1141013).
- bonding/802.3ad: fix slave link initialization transition states (bsc#1137069 bsc#1141013).
- bonding: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21).
- bonding: set default miimon value for non-arp modes if not set (bsc#1137069 bsc#1141013).
- bonding: speed/duplex update at NETDEV_UP event (bsc#1137069 bsc#1141013).
- btrfs: fix use-after-free when using the tree modification log (bsc#1151891).
- btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls (bsc#1152975).
- btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space (bsc#1152974).
- btrfs: relocation: fix use-after-free on dead relocation roots (bsc#1152972).
- ceph: use ceph_evict_inode to cleanup inode's resource (bsc#1148133).
- clk: at91: fix update bit maps on CFG_MOR write (bsc#1051510).
- clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks (bsc#1051510).
- clk: sunxi-ng: v3s: add the missing PLL_DDR1 (bsc#1051510).
- Compile nvme.ko as module (bsc#1150846)
- crypto: caam - fix concurrency issue in givencrypt descriptor (bsc#1051510).
- crypto: caam - free resources in case caam_rng registration failed (bsc#1051510).
- crypto: caam/qi - fix error handling in ERN handler (bsc#1111666).
- crypto: cavium/zip - Add missing single_release() (bsc#1051510).
- crypto: ccp - Reduce maximum stack usage (bsc#1051510).
- crypto: qat - Silence smp_processor_id() warning (bsc#1051510).
- crypto: skcipher - Unmap pages after an external error (bsc#1051510).
- dma-buf/sw_sync: Synchronize signal vs syncpt free (bsc#1111666).
- dmaengine: dw: platform: Switch to acpi_dma_controller_register() (bsc#1051510).
- dmaengine: iop-adma.c: fix printk format warning (bsc#1051510).
- drivers: thermal: int340x_thermal: Fix sysfs race condition (bsc#1051510).
- drm/i915: Fix various tracepoints for gen2 (bsc#1113722)
- drm/imx: Drop unused imx-ipuv3-crtc.o build (bsc#1113722)
- EDAC/amd64: Decode syndrome before translating address (bsc#1114279).
- eeprom: at24: make spd world-readable again (git-fixes).
- ext4: fix warning inside ext4_convert_unwritten_extents_endio (bsc#1152025).
- ext4: set error return correctly when ext4_htree_store_dirent fails (bsc#1152024).
- Fix kabi for: NFSv4: Fix OPEN / CLOSE race (git-fixes).
- floppy: fix usercopy direction (bsc#1111666).
- gpio: fix line flag validation in lineevent_create (bsc#1051510).
- gpio: fix line flag validation in linehandle_create (bsc#1051510).
- gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist (bsc#1051510).
- gpiolib: only check line handle flags once (bsc#1051510).
- gpio: Move gpiochip_lock/unlock_as_irq to gpio/driver.h (bsc#1051510).
- hwmon: (lm75) Fix write operations for negative temperatures (bsc#1051510).
- hwmon: (shtc1) fix shtc1 and shtw1 id mask (bsc#1051510).
- i2c: designware: Synchronize IRQs when unregistering slave client (bsc#1111666).
- i40e: Add support for X710 device (bsc#1151067).
- ife: error out when nla attributes are empty (networking-stable-19_08_08).
- iio: dac: ad5380: fix incorrect assignment to val (bsc#1051510).
- Input: elan_i2c - remove Lenovo Legion Y7000 PnpID (bsc#1051510).
- iommu/dma: Fix for dereferencing before null checking (bsc#1151667).
- iommu: Do not use sme_active() in generic code (bsc#1151661).
- iommu/iova: Avoid false sharing on fq_timer_on (bsc#1151662).
- ip6_tunnel: fix possible use-after-free on xmit (networking-stable-19_08_08).
- ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set (networking-stable-19_08_28).
- isdn/capi: check message length in capi_write() (bsc#1051510).
- kABI: media: em28xx: fix handler for vidioc_s_input() (bsc#1051510). fixes kABI
- kABI: media: em28xx: stop rewriting device's struct (bsc#1051510). fixes kABI
- KABI protect struct vmem_altmap (bsc#1150305).
- KVM: PPC: Book3S: Fix incorrect guest-to-user-translation error handling (bsc#1061840).
- KVM: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores (bsc#1061840).
- KVM: PPC: Book3S HV: Do not lose pending doorbell request on migration on P9 (bsc#1061840).
- KVM: PPC: Book3S HV: Do not push XIVE context when not using XIVE device (bsc#1061840).
- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest (bsc#1061840).
- KVM: PPC: Book3S HV: Fix race in re-enabling XIVE escalation interrupts (bsc#1061840).
- KVM: PPC: Book3S HV: Handle virtual mode in XIVE VCPU push code (bsc#1061840).
- KVM: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the VP (bsc#1061840).
- leds: leds-lp5562 allow firmware files up to the maximum length (bsc#1051510).
- leds: trigger: gpio: GPIO 0 is valid (bsc#1051510).
- libertas_tf: Use correct channel range in lbtf_geo_init (bsc#1051510).
- libiscsi: do not try to bypass SCSI EH (bsc#1142076).
- libnvdimm/altmap: Track namespace boundaries in altmap (bsc#1150305).
- libnvdimm: prevent nvdimm from requesting key when security is disabled (bsc#1137982).
- lightnvm: remove dependencies on BLK_DEV_NVME and PCI (bsc#1150846).
- livepatch: Nullify obj-&gt;mod in klp_module_coming()'s error path (bsc#1071995).
- mac80211: minstrel_ht: fix per-group max throughput rate initialization (bsc#1051510).
- md: do not report active array_state until after revalidate_disk() completes (git-fixes).
- md: only call set_in_sync() when it is expected to succeed (git-fixes).
- md/raid6: Set R5_ReadError when there is read failure on parity disk (git-fixes).
- media: atmel: atmel-isi: fix timeout value for stop streaming (bsc#1051510).
- media: dib0700: fix link error for dibx000_i2c_set_speed (bsc#1051510).
- media: em28xx: fix handler for vidioc_s_input() (bsc#1051510).
- media: em28xx: stop rewriting device's struct (bsc#1051510).
- media: fdp1: Reduce FCP not found message level to debug (bsc#1051510).
- media: marvell-ccic: do not generate EOF on parallel bus (bsc#1051510).
- media: mc-device.c: do not memset __user pointer contents (bsc#1051510).
- media: ov6650: Fix sensor possibly not detected on probe (bsc#1051510).
- media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper (bsc#1051510).
- media: replace strcpy() by strscpy() (bsc#1051510).
- media: Revert '[media] marvell-ccic: reset ccic phy when stop streaming for stability' (bsc#1051510).
- media: technisat-usb2: break out of loop at end of buffer (bsc#1051510).
- media: tm6000: double free if usb disconnect while streaming (bsc#1051510).
- media: vb2: Fix videobuf2 to map correct area (bsc#1051510).
- mic: avoid statically declaring a 'struct device' (bsc#1051510).
- mmc: sdhci-msm: fix mutex while in spinlock (bsc#1142635).
- mmc: sdhci-of-arasan: Do now show error message in case of deffered probe (bsc#1119086).
- mtd: spi-nor: Fix Cadence QSPI RCU Schedule Stall (bsc#1051510).
- mvpp2: refactor MTU change code (networking-stable-19_08_08).
- net: bridge: delete local fdb on device init failure (networking-stable-19_08_08).
- net: bridge: mcast: do not delete permanent entries when fast leave is enabled (networking-stable-19_08_08).
- net: fix ifindex collision during namespace removal (networking-stable-19_08_08).
- net/ibmvnic: prevent more than one thread from running in reset (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (bsc#1152457 ltc#174432).
- net/mlx5e: Only support tx/rx pause setting for port owner (networking-stable-19_08_21).
- net/mlx5e: Prevent encap flow counter update async to user query (networking-stable-19_08_08).
- net/mlx5e: Use flow keys dissector to parse packets for ARFS (networking-stable-19_08_21).
- net/mlx5: Use reversed order when unregister devices (networking-stable-19_08_08).
- net/packet: fix race in tpacket_snd() (networking-stable-19_08_21).
- net: sched: Fix a possible null-pointer dereference in dequeue_func() (networking-stable-19_08_08).
- net/smc: make sure EPOLLOUT is raised (networking-stable-19_08_28).
- NFS4: Fix v4.0 client state corruption when mount (git-fixes).
- nfsd: degraded slot-count more gracefully as allocation nears exhaustion (bsc#1150381).
- nfsd: Do not release the callback slot unless it was actually held (git-fixes).
- nfsd: Fix overflow causing non-working mounts on 1 TB machines (bsc#1150381).
- nfsd: fix performance-limiting session calculation (bsc#1150381).
- nfsd: give out fewer session slots as limit approaches (bsc#1150381).
- nfsd: handle drc over-allocation gracefully (bsc#1150381).
- nfsd: increase DRC cache limit (bsc#1150381).
- NFS: Do not interrupt file writeout due to fatal errors (git-fixes).
- NFS: Do not open code clearing of delegation state (git-fixes).
- NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0 (git-fixes).
- NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts (git-fixes).
- NFS: Forbid setting AF_INET6 to 'struct sockaddr_in'-&gt;sin_family (git-fixes).
- NFS: Refactor nfs_lookup_revalidate() (git-fixes).
- NFS: Remove redundant semicolon (git-fixes).
- NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter (git-fixes).
- NFSv4.1: Fix open stateid recovery (git-fixes).
- NFSv4.1: Only reap expired delegations (git-fixes).
- NFSv4: Check the return value of update_open_stateid() (git-fixes).
- NFSv4: Fix an Oops in nfs4_do_setattr (git-fixes).
- NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim() (git-fixes).
- NFSv4: Fix delegation state recovery (git-fixes).
- NFSv4: Fix lookup revalidate of regular files (git-fixes).
- NFSv4: Fix OPEN / CLOSE race (git-fixes).
- NFSv4: Handle the special Linux file open access mode (git-fixes).
- NFSv4: Only pass the delegation to setattr if we're sending a truncate (git-fixes).
- NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend() (git-fixes).
- nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds (bsc#1051510).
- null_blk: complete requests from -&gt;timeout (bsc#1149446).
- null_blk: wire up timeouts (bsc#1149446).
- nvme: do not abort completed request in nvme_cancel_request (bsc#1149446).
- nvme: fix multipath crash when ANA is deactivated (bsc#1149446).
- nvme: fix multipath crash when ANA is deactivated (bsc#1149446).
- nvmem: Use the same permissions for eeprom as for nvmem (git-fixes).
- nvme-rdma: Allow DELETING state change failure in (bsc#1104967,).
- nvme-rdma: centralize admin/io queue teardown sequence (bsc#1142076).
- nvme-rdma: centralize controller setup sequence (bsc#1142076).
- nvme-rdma: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-rdma: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-rdma: fix timeout handler (bsc#1149446).
- nvme-rdma: fix timeout handler (bsc#1149446).
- nvme-rdma: remove redundant reference between ib_device and tagset (bsc#1149446).
- nvme-rdma: stop admin queue before freeing it (bsc#1140155).
- nvme-rdma: support up to 4 segments of inline data (bsc#1142076).
- nvme-rdma: unquiesce queues when deleting the controller (bsc#1142076).
- nvme-rdma: use dynamic dma mapping per command (bsc#1149446).
- nvme: remove ns sibling before clearing path (bsc#1140155).
- nvme: return BLK_EH_DONE from -&gt;timeout (bsc#1142076).
- nvme-tcp: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-tcp: fix timeout handler (bsc#1149446).
- nvme: wait until all completed request's complete fn is called (bsc#1149446).
- PCI: Add ACS quirk for Amazon Annapurna Labs root ports (bsc#1152187,bsc#1152525).
- PCI: Add Amazon's Annapurna Labs vendor ID (bsc#1152187,bsc#1152525).
- PCI: Add quirk to disable MSI-X support for Amazon's Annapurna Labs Root Port (bsc#1152187,bsc#1152525).
- PCI: hv: Detect and fix Hyper-V PCI domain number collision (bsc#1150423).
- PCI/VPD: Prevent VPD access for Amazon's Annapurna Labs Root Port (bsc#1152187,bsc#1152525).
- phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current (bsc#1051510).
- platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table (bsc#1051510).
- PM: sleep: Fix possible overflow in pm_system_cancel_wakeup() (bsc#1051510).
- pNFS fallback to MDS if no deviceid found (git-fixes).
- pNFS/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error (git-fixes).
- pNFS/flexfiles: Turn off soft RPC calls (git-fixes).
- powerpc/64: Make sys_switch_endian() traceable (bsc#1065729).
- powerpc/64s/radix: Fix MADV_[FREE|DONTNEED] TLB flush miss problem with THP (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Fix memory hotplug section page table creation (bsc#1065729).
- powerpc/64s/radix: Fix memory hot-unplug page table split (bsc#1065729).
- powerpc/64s/radix: Implement _tlbie(l)_va_range flush functions (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Improve preempt handling in TLB code (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Improve TLB flushing for page table freeing (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Introduce local single page ceiling for TLB range flush (bsc#1055117 bsc#1152161 ltc#181664).
- powerpc/64s/radix: Optimize flush_tlb_range (bsc#1152161 ltc#181664).
- powerpc/book3s64/mm: Do not do tlbie fixup for some hardware revisions (bsc#1152161 ltc#181664).
- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (bsc#1152161 ltc#181664).
- powerpc: bpf: Fix generation of load/store DW instructions (bsc#1065729).
- powerpc/bpf: use unsigned division instruction for 64-bit operations (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range() (bsc#1065729).
- powerpc/irq: Do not WARN continuously in arch_local_irq_restore() (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (bsc#1152161 ltc#181664).
- powerpc/mm/radix: Drop unneeded NULL check (bsc#1152161 ltc#181664).
- powerpc/mm/radix: implement LPID based TLB flushes to be used by KVM (bsc#1152161 ltc#181664).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling (bsc#1065729).
- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get, set} (bsc#1152243 ltc#181472).
- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS (bsc#1065729).
- powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA window (bsc#1061840).
- powerpc/powernv/ioda: Fix race in TCE level allocation (bsc#1061840).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt handling to C (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/pseries: Call H_BLOCK_REMOVE when supported (bsc#1109158).
- powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() (bsc#1065729).
- powerpc/pseries/memory-hotplug: Fix return value type of find_aa_index (bsc#1065729).
- powerpc/pseries: Read TLB Block Invalidate Characteristics (bsc#1109158).
- powerpc/ptrace: Simplify vr_get/set() to avoid GCC warning (bsc#1148868).
- powerpc/xive: Fix bogus error code returned by OPAL (bsc#1065729).
- powerpc/xive: Implement get_irqchip_state method for XIVE to fix shutdown race (bsc#1065729).
- powerpc/xmon: Fix opcode being uninitialized in print_insn_powerpc (bsc#1065729).
- power: reset: gpio-restart: Fix typo when gpio reset is not found (bsc#1051510).
- power: supply: Init device wakeup after device_add() (bsc#1051510).
- ppp: Fix memory leak in ppp_write (git-fixes).
- printk: Do not lose last line in kmsg buffer dump (bsc#1152460).
- printk: fix printk_time race (bsc#1152466).
- printk/panic: Avoid deadlock in printk() after stopping CPUs by NMI (bsc#1148712).
- qla2xxx: kABI fixes for v10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988).
- qla2xxx: remove SGI SN2 support (bsc#1123034 bsc#1131304 bsc#1127988).
- quota: fix wrong condition in is_quota_modification() (bsc#1152026).
- r8152: Set memory to all 0xFFs on failed reg reads (bsc#1051510).
- regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg (bsc#1051510).
- Revert 'mwifiex: fix system hang problem after resume' (bsc#1051510).
- rtlwifi: Fix file release memory leak (bsc#1111666).
- scsi: qla2xxx: Add 28xx flash primary/secondary status/image mechanism (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add Device ID for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add First Burst support for FC-NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add fw_attr and port_no SysFS node (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add new FW dump template entry types (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add pci function reset support (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add protection mask module parameters (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add Serdes support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add support for multiple fwdump templates/segments (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add support for setting port speed (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Allow NVMe IO to resume with short cable pull (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: allow session delete to finish before create (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid PCI IRQ affinity mapping when multiqueue is not supported (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: avoid printf format warning (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that Coverity complains about dereferencing a NULL rport pointer (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that qla2x00_mem_free() crashes if called twice (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change default ZIO threshold (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change the return type of qla24xx_read_flash_data() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change the return type of qla2x00_update_ms_fdmi_iocb() into void (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check for FW started flag before aborting (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: check for kstrtol() failure (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check secondary image if reading the primary image fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check the PCI info string output buffer size (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check the size of firmware data structures at compile time (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanup fcport memory to prevent leak (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanup redundant qla2x00_abort_all_cmds during unload (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanups for NVRAM/Flash read/write path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: cleanup trace buffer initialization (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a command is released that is owned by the firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a mailbox command times out (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if parsing the version string fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the completion path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if waiting for pending commands times out (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain loudly about reference count underflow (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correct error handling during initialization failures (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correction and improvement to fwdt processing (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correctly report max/min supported speeds (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: deadlock by configfs_depend_item (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare local symbols static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla24xx_build_scsi_crc_2_iocbs() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla2x00_find_new_loop_id() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Downgrade driver to 10.01.00.19-k There are upstream bug reports against 10.01.00.19-k which haven't been resolved. Also the newer version failed to get a proper review. For time being it's better to got with the older version and do not introduce new bugs.
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix abort timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a recently introduced kernel warning (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a small typo in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix code indentation for qla27xx_fwdt_entry (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix comment alignment in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix comment in MODULE_PARM_DESC in qla2xxx (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix different size DMA Alloc/Unmap (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix DMA error when the DIF sg buffer crosses 4GB boundary (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix DMA unmap leak (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix fcport null pointer access (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix formatting of pointer types (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix fw dump corruption (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix fw options handle eh_bus_reset() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hang in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hardirq-unsafe locking (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hardlockup in abort command during driver remove (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix message indicating vectors used by driver (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix N2N link reset (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix Nport ID display value (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NVMe port discovery after a short device port loss (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix possible fcport null-pointer dereferences (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix premature timer expiration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix read offset in qla24xx_load_risc_flash() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix routine qla27xx_dump_{mpi|ram}() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix session cleanup hang (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix spelling mistake 'alredy' -&gt; 'already' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix spelling mistake 'initializatin' -&gt; 'initialization' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix SRB allocation flag to avoid sleeping in IRQ context (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stale session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stuck login session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix unload when NVMe devices are configured (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: flush IO on chip reset or sess delete (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Further limit FLASH region write access from SysFS (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Improve Linux kernel coding style conformance (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from qla_dsd.h (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Increase the max_sgl_segments to 1024 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Increase the size of the mailbox arrays from 4 to 8 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Insert spaces where required (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types for FC src/dst IDs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the dsd32 and dsd64 data structures (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Leave a blank line after declarations (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Let the compiler check the type of the SCSI command context pointer (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Log the status code if a firmware command fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs use little endian (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_mem_free() easier to verify (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_process_response_queue() easier to read (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make sure that aborted commands are freed (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move debug messages before sending srb preventing panic (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move marker request behind QPair (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_clear_loop_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_is_reserved_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_set_fcport_state() from a .h into a .c file (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_set_reserved_loop_ids() definition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move the &lt;linux/io-64-nonatomic-lo-hi.h&gt; include directive (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move the port_state_str definition from a .h to a .c file (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: no need to check return value of debugfs_create functions (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: on session delete, return nvme cmd (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Pass little-endian values to the firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent multiple ADISC commands per session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent SysFS access when chip is down (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the number of casts in GID list code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the number of forward declarations (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reject EH_{abort|device_reset|target_request} (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a comment that refers to the SCSI host lock (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove an include directive from qla_mr.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a superfluous forward declaration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove dead code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: remove double assignment in qla2x00_update_fcport (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove FW default template (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove qla_tgt_cmd.data_work and qla_tgt_cmd.data_work_free (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove qla_tgt_cmd.released (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: remove redundant null check on pointer sess (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove set but not used variable 'ptr_dma' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous casts (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unnecessary locking from the target code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unnecessary null check (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove useless set memory to zero use memset() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Replace vmalloc + memset with vzalloc (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Report invalid mailbox status codes (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Report the firmware status code if a mailbox command fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Restore FAWWPN of Physical Port only for loop down (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Retry fabric Scan on IOCB queue full (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Secure flash update support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set remote port devloss timeout to 0 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the qpair in SRB to NULL when SRB is released (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS pass-through IOCBs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the SCSI command result before calling the command done (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Silence fwdump template message (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Silence Successful ELS IOCB message (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplification of register address used in qla_tmpl.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify a debug statement (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify conditional check again (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qlt_send_term_imm_notif() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Skip FW dump on LOOP initialization error (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer overflow (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Suppress multiple Coverity complaint about out-of-bounds accesses (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: target: Fix offline port handling and host reset handling (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Uninline qla2x00_init_timer() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Unregister resources in the opposite order of the registration order (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.00.00.13-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.00.00.14-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.15-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.16-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.19-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update flash read/write routine (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use ARRAY_SIZE() in the definition of QLA_LAST_SPEED (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use common update-firmware-options routine for ISP27xx+ (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use complete switch scan for RSCN events (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use Correct index for Q-Pair array (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use get/put_unaligned where appropriate (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use __le64 instead of uint32_t for sending DMA addresses to firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy() and strncpy() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use tabs instead of spaces for indentation (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use tabs to indent code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Verify locking assumptions at runtime (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: scsi_dh_rdac: zero cdb in send_mode_select() (bsc#1149313).
- scsi: scsi_transport_fc: nvme: display FC-NVMe port roles (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: tcm_qla2xxx: Minimize #include directives (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi_transport_fc: complete requests from -&gt;timeout (bsc#1142076).
- sctp: fix the transport error_count check (networking-stable-19_08_21).
- secure boot lockdown: Fix-up backport of /dev/mem access restriction The upstream-submitted patch set has evolved over time, align our patches (contents and description) to reflect the current status as far as /dev/mem access is concerned.
- sky2: Disable MSI on yet another ASUS boards (P6Xxxx) (bsc#1051510).
- slip: make slhc_free() silently accept an error pointer (bsc#1051510).
- slip: sl_alloc(): remove unused parameter 'dev_t line' (bsc#1051510).
- spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours (bsc#1111666).
- SUNRPC fix regression in umount of a secure mount (git-fixes).
- SUNRPC: Handle connection breakages correctly in call_status() (git-fixes).
- SUNRPC/nfs: Fix return value for nfs4_callback_compound() (git-fixes).
- supported.conf: Add vfio_ccw (bsc#1151192 jsc#SLE-6138).
- supported.conf: Mark vfio_ccw supported by SUSE, because bugs can be routed to IBM via SUSE support (jsc#SLE-6138, bsc#1151192).
- tcp: make sure EPOLLOUT wont be missed (networking-stable-19_08_28).
- team: Add vlan tx offload to hw_enc_features (bsc#1051510).
- team: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21).
- tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts (bsc#1082555).
- tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs (bsc#1111666).
- tun: fix use-after-free when register netdev failed (bsc#1111666).
- Update s390 config files (bsc#1151192).  - VFIO_CCW=m  - S390_CCW_IOMMU=y
- USB: usbcore: Fix slab-out-of-bounds bug during device reset (bsc#1051510).
- vhost/test: fix build for vhost test (bsc#1111666).
- video: ssd1307fb: Start page range at page_offset (bsc#1113722)
- wcn36xx: use dynamic allocation for large variables (bsc#1111666).
- x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h (bsc#1114279).
- x86/fpu: Add FPU state copying quirk to handle XRSTOR failure on Intel Skylake CPUs (bsc#1151955).
- x86/tls: Fix possible spectre-v1 in do_get_thread_area() (bsc#1114279).
- xen/netback: Reset nr_frags before freeing skb (networking-stable-19_08_21).
- xen-netfront: do not assume sk_buff_head list is empty in error handling (bsc#1065600).
- xen-netfront: do not use ~0U as error return value for xennet_fill_frags() (bsc#1065600).
- xen/xenbus: fix self-deadlock after killing user process (bsc#1065600).
- xsk: avoid store-tearing when assigning queues (bsc#1111666).
- xsk: avoid store-tearing when assigning umem (bsc#1111666).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-18"/>
	<updated date="2019-10-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054914">SUSE bug 1054914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104967">SUSE bug 1104967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109158">SUSE bug 1109158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119086">SUSE bug 1119086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123034">SUSE bug 1123034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127988">SUSE bug 1127988</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131304">SUSE bug 1131304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137069">SUSE bug 1137069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137865">SUSE bug 1137865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137959">SUSE bug 1137959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137982">SUSE bug 1137982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140155">SUSE bug 1140155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141013">SUSE bug 1141013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142076">SUSE bug 1142076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146042">SUSE bug 1146042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146540">SUSE bug 1146540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146664">SUSE bug 1146664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148133">SUSE bug 1148133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148712">SUSE bug 1148712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149313">SUSE bug 1149313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149446">SUSE bug 1149446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149555">SUSE bug 1149555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149651">SUSE bug 1149651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150305">SUSE bug 1150305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150381">SUSE bug 1150381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150423">SUSE bug 1150423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150846">SUSE bug 1150846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151067">SUSE bug 1151067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151192">SUSE bug 1151192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151350">SUSE bug 1151350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151610">SUSE bug 1151610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151661">SUSE bug 1151661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151662">SUSE bug 1151662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151667">SUSE bug 1151667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151680">SUSE bug 1151680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151891">SUSE bug 1151891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151955">SUSE bug 1151955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152024">SUSE bug 1152024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152025">SUSE bug 1152025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152026">SUSE bug 1152026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152161">SUSE bug 1152161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152187">SUSE bug 1152187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152243">SUSE bug 1152243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152325">SUSE bug 1152325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152457">SUSE bug 1152457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152460">SUSE bug 1152460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152466">SUSE bug 1152466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152525">SUSE bug 1152525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152972">SUSE bug 1152972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152974">SUSE bug 1152974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152975">SUSE bug 1152975</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18595/">CVE-2017-18595</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-14821/">CVE-2019-14821</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15291/">CVE-2019-15291</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9506/">CVE-2019-9506</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496225" comment="kernel-docs-4.12.14-197.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496226" comment="kernel-obs-build-4.12.14-197.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496227" comment="kernel-source-4.12.14-197.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496228" comment="kernel-syms-4.12.14-197.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138194" version="1" class="patch">
	<metadata>
		<title>Security update for rust (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1096945" ref_url="https://bugzilla.suse.com/1096945" source="BUGZILLA"/>
		<reference ref_id="1100691" ref_url="https://bugzilla.suse.com/1100691" source="BUGZILLA"/>
		<reference ref_id="1133283" ref_url="https://bugzilla.suse.com/1133283" source="BUGZILLA"/>
		<reference ref_id="1134978" ref_url="https://bugzilla.suse.com/1134978" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000622" ref_url="https://www.suse.com/security/cve/CVE-2018-1000622/" source="CVE"/>
		<reference ref_id="CVE-2019-12083" ref_url="https://www.suse.com/security/cve/CVE-2019-12083/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2755-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006048.html" source="SUSE-SU"/>
		<description>
This update for rust fixes the following issues:

Rust was updated to version 1.36.0.

Security issues fixed:

- CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety (bsc#1134978)
- CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)

		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-23"/>
	<updated date="2019-10-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1096945">SUSE bug 1096945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1100691">SUSE bug 1100691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133283">SUSE bug 1133283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134978">SUSE bug 1134978</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000622/">CVE-2018-1000622</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12083/">CVE-2019-12083</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496229" comment="cargo-1.36.0-4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496230" comment="clippy-1.36.0-4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496231" comment="rls-1.36.0-4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496232" comment="rust-1.36.0-4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496233" comment="rust-analysis-1.36.0-4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496234" comment="rust-src-1.36.0-4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496235" comment="rust-std-static-1.36.0-4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496236" comment="rustfmt-1.36.0-4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138195" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1109412" ref_url="https://bugzilla.suse.com/1109412" source="BUGZILLA"/>
		<reference ref_id="1109413" ref_url="https://bugzilla.suse.com/1109413" source="BUGZILLA"/>
		<reference ref_id="1109414" ref_url="https://bugzilla.suse.com/1109414" source="BUGZILLA"/>
		<reference ref_id="1111996" ref_url="https://bugzilla.suse.com/1111996" source="BUGZILLA"/>
		<reference ref_id="1112534" ref_url="https://bugzilla.suse.com/1112534" source="BUGZILLA"/>
		<reference ref_id="1112535" ref_url="https://bugzilla.suse.com/1112535" source="BUGZILLA"/>
		<reference ref_id="1113247" ref_url="https://bugzilla.suse.com/1113247" source="BUGZILLA"/>
		<reference ref_id="1113252" ref_url="https://bugzilla.suse.com/1113252" source="BUGZILLA"/>
		<reference ref_id="1113255" ref_url="https://bugzilla.suse.com/1113255" source="BUGZILLA"/>
		<reference ref_id="1116827" ref_url="https://bugzilla.suse.com/1116827" source="BUGZILLA"/>
		<reference ref_id="1118644" ref_url="https://bugzilla.suse.com/1118644" source="BUGZILLA"/>
		<reference ref_id="1118830" ref_url="https://bugzilla.suse.com/1118830" source="BUGZILLA"/>
		<reference ref_id="1118831" ref_url="https://bugzilla.suse.com/1118831" source="BUGZILLA"/>
		<reference ref_id="1120640" ref_url="https://bugzilla.suse.com/1120640" source="BUGZILLA"/>
		<reference ref_id="1121034" ref_url="https://bugzilla.suse.com/1121034" source="BUGZILLA"/>
		<reference ref_id="1121035" ref_url="https://bugzilla.suse.com/1121035" source="BUGZILLA"/>
		<reference ref_id="1121056" ref_url="https://bugzilla.suse.com/1121056" source="BUGZILLA"/>
		<reference ref_id="1133131" ref_url="https://bugzilla.suse.com/1133131" source="BUGZILLA"/>
		<reference ref_id="1133232" ref_url="https://bugzilla.suse.com/1133232" source="BUGZILLA"/>
		<reference ref_id="1141913" ref_url="https://bugzilla.suse.com/1141913" source="BUGZILLA"/>
		<reference ref_id="1142772" ref_url="https://bugzilla.suse.com/1142772" source="BUGZILLA"/>
		<reference ref_id="1152590" ref_url="https://bugzilla.suse.com/1152590" source="BUGZILLA"/>
		<reference ref_id="1154016" ref_url="https://bugzilla.suse.com/1154016" source="BUGZILLA"/>
		<reference ref_id="1154025" ref_url="https://bugzilla.suse.com/1154025" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000876" ref_url="https://www.suse.com/security/cve/CVE-2018-1000876/" source="CVE"/>
		<reference ref_id="CVE-2018-17358" ref_url="https://www.suse.com/security/cve/CVE-2018-17358/" source="CVE"/>
		<reference ref_id="CVE-2018-17359" ref_url="https://www.suse.com/security/cve/CVE-2018-17359/" source="CVE"/>
		<reference ref_id="CVE-2018-17360" ref_url="https://www.suse.com/security/cve/CVE-2018-17360/" source="CVE"/>
		<reference ref_id="CVE-2018-17985" ref_url="https://www.suse.com/security/cve/CVE-2018-17985/" source="CVE"/>
		<reference ref_id="CVE-2018-18309" ref_url="https://www.suse.com/security/cve/CVE-2018-18309/" source="CVE"/>
		<reference ref_id="CVE-2018-18483" ref_url="https://www.suse.com/security/cve/CVE-2018-18483/" source="CVE"/>
		<reference ref_id="CVE-2018-18484" ref_url="https://www.suse.com/security/cve/CVE-2018-18484/" source="CVE"/>
		<reference ref_id="CVE-2018-18605" ref_url="https://www.suse.com/security/cve/CVE-2018-18605/" source="CVE"/>
		<reference ref_id="CVE-2018-18606" ref_url="https://www.suse.com/security/cve/CVE-2018-18606/" source="CVE"/>
		<reference ref_id="CVE-2018-18607" ref_url="https://www.suse.com/security/cve/CVE-2018-18607/" source="CVE"/>
		<reference ref_id="CVE-2018-19931" ref_url="https://www.suse.com/security/cve/CVE-2018-19931/" source="CVE"/>
		<reference ref_id="CVE-2018-19932" ref_url="https://www.suse.com/security/cve/CVE-2018-19932/" source="CVE"/>
		<reference ref_id="CVE-2018-20623" ref_url="https://www.suse.com/security/cve/CVE-2018-20623/" source="CVE"/>
		<reference ref_id="CVE-2018-20651" ref_url="https://www.suse.com/security/cve/CVE-2018-20651/" source="CVE"/>
		<reference ref_id="CVE-2018-20671" ref_url="https://www.suse.com/security/cve/CVE-2018-20671/" source="CVE"/>
		<reference ref_id="CVE-2018-6323" ref_url="https://www.suse.com/security/cve/CVE-2018-6323/" source="CVE"/>
		<reference ref_id="CVE-2018-6543" ref_url="https://www.suse.com/security/cve/CVE-2018-6543/" source="CVE"/>
		<reference ref_id="CVE-2018-6759" ref_url="https://www.suse.com/security/cve/CVE-2018-6759/" source="CVE"/>
		<reference ref_id="CVE-2018-6872" ref_url="https://www.suse.com/security/cve/CVE-2018-6872/" source="CVE"/>
		<reference ref_id="CVE-2018-7208" ref_url="https://www.suse.com/security/cve/CVE-2018-7208/" source="CVE"/>
		<reference ref_id="CVE-2018-7568" ref_url="https://www.suse.com/security/cve/CVE-2018-7568/" source="CVE"/>
		<reference ref_id="CVE-2018-7569" ref_url="https://www.suse.com/security/cve/CVE-2018-7569/" source="CVE"/>
		<reference ref_id="CVE-2018-7570" ref_url="https://www.suse.com/security/cve/CVE-2018-7570/" source="CVE"/>
		<reference ref_id="CVE-2018-7642" ref_url="https://www.suse.com/security/cve/CVE-2018-7642/" source="CVE"/>
		<reference ref_id="CVE-2018-7643" ref_url="https://www.suse.com/security/cve/CVE-2018-7643/" source="CVE"/>
		<reference ref_id="CVE-2018-8945" ref_url="https://www.suse.com/security/cve/CVE-2018-8945/" source="CVE"/>
		<reference ref_id="CVE-2019-1010180" ref_url="https://www.suse.com/security/cve/CVE-2019-1010180/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

binutils was updated to current 2.32 branch [jsc#ECO-368].

Includes following security fixes:

- CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)
- CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)
- CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)
- CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)
- CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)
- CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)
- CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)
- CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)
- CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)
- CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)
- CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)
- CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)
- CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)
- CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)
- CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in  load_specific_debug_section in objdump.c (bsc#1121056)
- CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)
- CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)

- enable xtensa architecture (Tensilica lc6 and related)
- Use -ffat-lto-objects in order to provide assembly for static libs
  (bsc#1141913).
- Fixed some LTO build issues (bsc#1133131 bsc#1133232).
- riscv: Don't check ABI flags if no code section
- Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).
- Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).

Update to binutils 2.32:

* The binutils now support for the C-SKY processor series.
* The x86 assembler now supports a -mvexwig=[0|1] option to control
  encoding of VEX.W-ignored (WIG) VEX instructions.
  It also has a new -mx86-used-note=[yes|no] option to generate (or
  not) x86 GNU property notes.  
* The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
  the Loongson EXTensions (EXT) instructions, the Loongson Content
  Address Memory (CAM) ASE and the Loongson MultiMedia extensions
  Instructions (MMI) ASE.
* The addr2line, c++filt, nm and objdump tools now have a default
  limit on the maximum amount of recursion that is allowed whilst
  demangling strings.  This limit can be disabled if necessary.
* Objdump's --disassemble option can now take a parameter,
  specifying the starting symbol for disassembly.  Disassembly will
  continue from this symbol up to the next symbol or the end of the
  function.
* The BFD linker will now report property change in linker map file
  when merging GNU properties.
* The BFD linker's -t option now doesn't report members within
  archives, unless -t is given twice.  This makes it more useful
  when generating a list of files that should be packaged for a
  linker bug report.
* The GOLD linker has improved warning messages for relocations that
  refer to discarded sections.

- Improve relro support on s390 [fate#326356]
- Fix broken debug symbols (bsc#1118644)
- Handle ELF compressed header alignment correctly.

		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-24"/>
	<updated date="2019-10-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1109412">SUSE bug 1109412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109413">SUSE bug 1109413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109414">SUSE bug 1109414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111996">SUSE bug 1111996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112534">SUSE bug 1112534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112535">SUSE bug 1112535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113247">SUSE bug 1113247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113252">SUSE bug 1113252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113255">SUSE bug 1113255</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116827">SUSE bug 1116827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118644">SUSE bug 1118644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118830">SUSE bug 1118830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118831">SUSE bug 1118831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120640">SUSE bug 1120640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121034">SUSE bug 1121034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121035">SUSE bug 1121035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121056">SUSE bug 1121056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133131">SUSE bug 1133131</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133232">SUSE bug 1133232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141913">SUSE bug 1141913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142772">SUSE bug 1142772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152590">SUSE bug 1152590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154016">SUSE bug 1154016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154025">SUSE bug 1154025</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000876/">CVE-2018-1000876</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17358/">CVE-2018-17358</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17359/">CVE-2018-17359</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17360/">CVE-2018-17360</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17985/">CVE-2018-17985</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18309/">CVE-2018-18309</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18483/">CVE-2018-18483</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18484/">CVE-2018-18484</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18605/">CVE-2018-18605</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18606/">CVE-2018-18606</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18607/">CVE-2018-18607</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19931/">CVE-2018-19931</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19932/">CVE-2018-19932</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-20623/">CVE-2018-20623</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20651/">CVE-2018-20651</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20671/">CVE-2018-20671</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6323/">CVE-2018-6323</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6543/">CVE-2018-6543</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6759/">CVE-2018-6759</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6872/">CVE-2018-6872</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7208/">CVE-2018-7208</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7568/">CVE-2018-7568</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7569/">CVE-2018-7569</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7570/">CVE-2018-7570</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7642/">CVE-2018-7642</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7643/">CVE-2018-7643</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8945/">CVE-2018-8945</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-1010180/">CVE-2019-1010180</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496237" comment="binutils-devel-32bit-2.32-7.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138196" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1149121" ref_url="https://bugzilla.suse.com/1149121" source="BUGZILLA"/>
		<reference ref_id="1149792" ref_url="https://bugzilla.suse.com/1149792" source="BUGZILLA"/>
		<reference ref_id="1149955" ref_url="https://bugzilla.suse.com/1149955" source="BUGZILLA"/>
		<reference ref_id="1151490" ref_url="https://bugzilla.suse.com/1151490" source="BUGZILLA"/>
		<reference ref_id="1153238" ref_url="https://bugzilla.suse.com/1153238" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16056" ref_url="https://www.suse.com/security/cve/CVE-2019-16056/" source="CVE"/>
		<reference ref_id="CVE-2019-16935" ref_url="https://www.suse.com/security/cve/CVE-2019-16935/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006065.html" source="SUSE-SU"/>
		<description>
This update for python3 to 3.6.9 fixes the following issues:

Security issues fixed:

- CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955)
- CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238).

Non-security issues fixed:

- Fixed regression of OpenSSL 1.1.1b-1 in EVP_PBE_scrypt() with salt=NULL. (bsc#1151490)
- Improved locale handling by implementing PEP 538.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-29"/>
	<updated date="2019-10-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1149121">SUSE bug 1149121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149792">SUSE bug 1149792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149955">SUSE bug 1149955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151490">SUSE bug 1151490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153238">SUSE bug 1153238</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16056/">CVE-2019-16056</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16935/">CVE-2019-16935</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496111" comment="python3-tools-3.6.9-3.39.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138197" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1146065" ref_url="https://bugzilla.suse.com/1146065" source="BUGZILLA"/>
		<reference ref_id="1146068" ref_url="https://bugzilla.suse.com/1146068" source="BUGZILLA"/>
		<reference ref_id="1146211" ref_url="https://bugzilla.suse.com/1146211" source="BUGZILLA"/>
		<reference ref_id="1146212" ref_url="https://bugzilla.suse.com/1146212" source="BUGZILLA"/>
		<reference ref_id="1146213" ref_url="https://bugzilla.suse.com/1146213" source="BUGZILLA"/>
		<reference ref_id="1151781" ref_url="https://bugzilla.suse.com/1151781" source="BUGZILLA"/>
		<reference ref_id="1151782" ref_url="https://bugzilla.suse.com/1151782" source="BUGZILLA"/>
		<reference ref_id="1151783" ref_url="https://bugzilla.suse.com/1151783" source="BUGZILLA"/>
		<reference ref_id="1151784" ref_url="https://bugzilla.suse.com/1151784" source="BUGZILLA"/>
		<reference ref_id="1151785" ref_url="https://bugzilla.suse.com/1151785" source="BUGZILLA"/>
		<reference ref_id="1151786" ref_url="https://bugzilla.suse.com/1151786" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14980" ref_url="https://www.suse.com/security/cve/CVE-2019-14980/" source="CVE"/>
		<reference ref_id="CVE-2019-14981" ref_url="https://www.suse.com/security/cve/CVE-2019-14981/" source="CVE"/>
		<reference ref_id="CVE-2019-15139" ref_url="https://www.suse.com/security/cve/CVE-2019-15139/" source="CVE"/>
		<reference ref_id="CVE-2019-15140" ref_url="https://www.suse.com/security/cve/CVE-2019-15140/" source="CVE"/>
		<reference ref_id="CVE-2019-15141" ref_url="https://www.suse.com/security/cve/CVE-2019-15141/" source="CVE"/>
		<reference ref_id="CVE-2019-16708" ref_url="https://www.suse.com/security/cve/CVE-2019-16708/" source="CVE"/>
		<reference ref_id="CVE-2019-16709" ref_url="https://www.suse.com/security/cve/CVE-2019-16709/" source="CVE"/>
		<reference ref_id="CVE-2019-16710" ref_url="https://www.suse.com/security/cve/CVE-2019-16710/" source="CVE"/>
		<reference ref_id="CVE-2019-16711" ref_url="https://www.suse.com/security/cve/CVE-2019-16711/" source="CVE"/>
		<reference ref_id="CVE-2019-16712" ref_url="https://www.suse.com/security/cve/CVE-2019-16712/" source="CVE"/>
		<reference ref_id="CVE-2019-16713" ref_url="https://www.suse.com/security/cve/CVE-2019-16713/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006088.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

Security issues fixed:

- CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage (bsc#1146213).
- CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser (bsc#1146212).
- CVE-2019-15141: Fixed a divide-by-zero vulnerability in the MeanShiftImage function (bsc#1146211).
- CVE-2019-14980: Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage (bsc#1146068).
- CVE-2019-14981: Fixed a use after free in the UnmapBlob function (bsc#1146065).
- CVE-2019-16708: Fixed a memory leak in magick/xwindow.c (bsc#1151781).
- CVE-2019-16709: Fixed a memory leak in coders/dps.c (bsc#1151782).
- CVE-2019-16710: Fixed a memory leak in coders/dot.c (bsc#1151783).
- CVE-2019-16711: Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c (bsc#1151784).
- CVE-2019-16712: Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c (bsc#1151785).
- CVE-2019-16713: Fixed a memory leak in coders/dot.c (bsc#1151786).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-05"/>
	<updated date="2019-11-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1146065">SUSE bug 1146065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146068">SUSE bug 1146068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146211">SUSE bug 1146211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146212">SUSE bug 1146212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146213">SUSE bug 1146213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151781">SUSE bug 1151781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151782">SUSE bug 1151782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151783">SUSE bug 1151783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151784">SUSE bug 1151784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151785">SUSE bug 1151785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151786">SUSE bug 1151786</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14980/">CVE-2019-14980</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14981/">CVE-2019-14981</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15139/">CVE-2019-15139</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15140/">CVE-2019-15140</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15141/">CVE-2019-15141</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16708/">CVE-2019-16708</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16709/">CVE-2019-16709</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16710/">CVE-2019-16710</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16711/">CVE-2019-16711</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16712/">CVE-2019-16712</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16713/">CVE-2019-16713</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496112" comment="perl-PerlMagick-7.0.7.34-3.72.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138198" version="1" class="patch">
	<metadata>
		<title>Security update for gdb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1115034" ref_url="https://bugzilla.suse.com/1115034" source="BUGZILLA"/>
		<reference ref_id="1142772" ref_url="https://bugzilla.suse.com/1142772" source="BUGZILLA"/>
		<reference ref_id="1145692" ref_url="https://bugzilla.suse.com/1145692" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1010180" ref_url="https://www.suse.com/security/cve/CVE-2019-1010180/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006095.html" source="SUSE-SU"/>
		<description>
This update for gdb fixes the following issues:

Update to gdb 8.3.1: (jsc#ECO-368)

Security issues fixed:

- CVE-2019-1010180: Fixed a potential buffer overflow when loading ELF sections larger than the file. (bsc#1142772)

Upgrade libipt from v2.0 to v2.0.1.

- Enable librpm for version &gt; librpm.so.3 [bsc#1145692]:
  * Allow any librpm.so.x
  * Add %build test to check for 'zypper install &lt;rpm-packagename&gt;'
    message

- Copy gdbinit from fedora master @ 25caf28.  Add
  gdbinit.without-python, and use it for --without=python.

Rebase to 8.3 release (as in fedora 30 @ 1e222a3).

* DWARF index cache: GDB can now automatically save indices of DWARF
  symbols on disk to speed up further loading of the same binaries.
* Ada task switching is now supported on aarch64-elf targets when
  debugging a program using the Ravenscar Profile.
* Terminal styling is now available for the CLI and the TUI.
* Removed support for old demangling styles arm, edg, gnu, hp and
  lucid.
* Support for new native configuration RISC-V GNU/Linux (riscv*-*-linux*).

- Implemented access to more POWER8 registers.  [fate#326120, fate#325178]
- Handle most of new s390 arch13 instructions. [fate#327369, jsc#ECO-368]
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-07"/>
	<updated date="2019-11-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1115034">SUSE bug 1115034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142772">SUSE bug 1142772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145692">SUSE bug 1145692</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-1010180/">CVE-2019-1010180</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496238" comment="gdb-8.3.1-8.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496239" comment="gdbserver-8.3.1-8.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138199" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1046299" ref_url="https://bugzilla.suse.com/1046299" source="BUGZILLA"/>
		<reference ref_id="1046303" ref_url="https://bugzilla.suse.com/1046303" source="BUGZILLA"/>
		<reference ref_id="1046305" ref_url="https://bugzilla.suse.com/1046305" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1073513" ref_url="https://bugzilla.suse.com/1073513" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1086323" ref_url="https://bugzilla.suse.com/1086323" source="BUGZILLA"/>
		<reference ref_id="1087092" ref_url="https://bugzilla.suse.com/1087092" source="BUGZILLA"/>
		<reference ref_id="1089644" ref_url="https://bugzilla.suse.com/1089644" source="BUGZILLA"/>
		<reference ref_id="1090631" ref_url="https://bugzilla.suse.com/1090631" source="BUGZILLA"/>
		<reference ref_id="1093205" ref_url="https://bugzilla.suse.com/1093205" source="BUGZILLA"/>
		<reference ref_id="1096254" ref_url="https://bugzilla.suse.com/1096254" source="BUGZILLA"/>
		<reference ref_id="1097583" ref_url="https://bugzilla.suse.com/1097583" source="BUGZILLA"/>
		<reference ref_id="1097584" ref_url="https://bugzilla.suse.com/1097584" source="BUGZILLA"/>
		<reference ref_id="1097585" ref_url="https://bugzilla.suse.com/1097585" source="BUGZILLA"/>
		<reference ref_id="1097586" ref_url="https://bugzilla.suse.com/1097586" source="BUGZILLA"/>
		<reference ref_id="1097587" ref_url="https://bugzilla.suse.com/1097587" source="BUGZILLA"/>
		<reference ref_id="1097588" ref_url="https://bugzilla.suse.com/1097588" source="BUGZILLA"/>
		<reference ref_id="1098291" ref_url="https://bugzilla.suse.com/1098291" source="BUGZILLA"/>
		<reference ref_id="1101674" ref_url="https://bugzilla.suse.com/1101674" source="BUGZILLA"/>
		<reference ref_id="1109158" ref_url="https://bugzilla.suse.com/1109158" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1117665" ref_url="https://bugzilla.suse.com/1117665" source="BUGZILLA"/>
		<reference ref_id="1119461" ref_url="https://bugzilla.suse.com/1119461" source="BUGZILLA"/>
		<reference ref_id="1119465" ref_url="https://bugzilla.suse.com/1119465" source="BUGZILLA"/>
		<reference ref_id="1123034" ref_url="https://bugzilla.suse.com/1123034" source="BUGZILLA"/>
		<reference ref_id="1123080" ref_url="https://bugzilla.suse.com/1123080" source="BUGZILLA"/>
		<reference ref_id="1133140" ref_url="https://bugzilla.suse.com/1133140" source="BUGZILLA"/>
		<reference ref_id="1134303" ref_url="https://bugzilla.suse.com/1134303" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135854" ref_url="https://bugzilla.suse.com/1135854" source="BUGZILLA"/>
		<reference ref_id="1135873" ref_url="https://bugzilla.suse.com/1135873" source="BUGZILLA"/>
		<reference ref_id="1135967" ref_url="https://bugzilla.suse.com/1135967" source="BUGZILLA"/>
		<reference ref_id="1137040" ref_url="https://bugzilla.suse.com/1137040" source="BUGZILLA"/>
		<reference ref_id="1137799" ref_url="https://bugzilla.suse.com/1137799" source="BUGZILLA"/>
		<reference ref_id="1137861" ref_url="https://bugzilla.suse.com/1137861" source="BUGZILLA"/>
		<reference ref_id="1138190" ref_url="https://bugzilla.suse.com/1138190" source="BUGZILLA"/>
		<reference ref_id="1139073" ref_url="https://bugzilla.suse.com/1139073" source="BUGZILLA"/>
		<reference ref_id="1140090" ref_url="https://bugzilla.suse.com/1140090" source="BUGZILLA"/>
		<reference ref_id="1140729" ref_url="https://bugzilla.suse.com/1140729" source="BUGZILLA"/>
		<reference ref_id="1140845" ref_url="https://bugzilla.suse.com/1140845" source="BUGZILLA"/>
		<reference ref_id="1140883" ref_url="https://bugzilla.suse.com/1140883" source="BUGZILLA"/>
		<reference ref_id="1141600" ref_url="https://bugzilla.suse.com/1141600" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142667" ref_url="https://bugzilla.suse.com/1142667" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1144338" ref_url="https://bugzilla.suse.com/1144338" source="BUGZILLA"/>
		<reference ref_id="1144375" ref_url="https://bugzilla.suse.com/1144375" source="BUGZILLA"/>
		<reference ref_id="1144449" ref_url="https://bugzilla.suse.com/1144449" source="BUGZILLA"/>
		<reference ref_id="1144903" ref_url="https://bugzilla.suse.com/1144903" source="BUGZILLA"/>
		<reference ref_id="1145099" ref_url="https://bugzilla.suse.com/1145099" source="BUGZILLA"/>
		<reference ref_id="1146612" ref_url="https://bugzilla.suse.com/1146612" source="BUGZILLA"/>
		<reference ref_id="1148410" ref_url="https://bugzilla.suse.com/1148410" source="BUGZILLA"/>
		<reference ref_id="1149119" ref_url="https://bugzilla.suse.com/1149119" source="BUGZILLA"/>
		<reference ref_id="1149853" ref_url="https://bugzilla.suse.com/1149853" source="BUGZILLA"/>
		<reference ref_id="1150452" ref_url="https://bugzilla.suse.com/1150452" source="BUGZILLA"/>
		<reference ref_id="1150457" ref_url="https://bugzilla.suse.com/1150457" source="BUGZILLA"/>
		<reference ref_id="1150465" ref_url="https://bugzilla.suse.com/1150465" source="BUGZILLA"/>
		<reference ref_id="1150875" ref_url="https://bugzilla.suse.com/1150875" source="BUGZILLA"/>
		<reference ref_id="1151508" ref_url="https://bugzilla.suse.com/1151508" source="BUGZILLA"/>
		<reference ref_id="1151807" ref_url="https://bugzilla.suse.com/1151807" source="BUGZILLA"/>
		<reference ref_id="1152033" ref_url="https://bugzilla.suse.com/1152033" source="BUGZILLA"/>
		<reference ref_id="1152624" ref_url="https://bugzilla.suse.com/1152624" source="BUGZILLA"/>
		<reference ref_id="1152665" ref_url="https://bugzilla.suse.com/1152665" source="BUGZILLA"/>
		<reference ref_id="1152685" ref_url="https://bugzilla.suse.com/1152685" source="BUGZILLA"/>
		<reference ref_id="1152696" ref_url="https://bugzilla.suse.com/1152696" source="BUGZILLA"/>
		<reference ref_id="1152697" ref_url="https://bugzilla.suse.com/1152697" source="BUGZILLA"/>
		<reference ref_id="1152788" ref_url="https://bugzilla.suse.com/1152788" source="BUGZILLA"/>
		<reference ref_id="1152790" ref_url="https://bugzilla.suse.com/1152790" source="BUGZILLA"/>
		<reference ref_id="1152791" ref_url="https://bugzilla.suse.com/1152791" source="BUGZILLA"/>
		<reference ref_id="1153112" ref_url="https://bugzilla.suse.com/1153112" source="BUGZILLA"/>
		<reference ref_id="1153158" ref_url="https://bugzilla.suse.com/1153158" source="BUGZILLA"/>
		<reference ref_id="1153236" ref_url="https://bugzilla.suse.com/1153236" source="BUGZILLA"/>
		<reference ref_id="1153263" ref_url="https://bugzilla.suse.com/1153263" source="BUGZILLA"/>
		<reference ref_id="1153476" ref_url="https://bugzilla.suse.com/1153476" source="BUGZILLA"/>
		<reference ref_id="1153509" ref_url="https://bugzilla.suse.com/1153509" source="BUGZILLA"/>
		<reference ref_id="1153607" ref_url="https://bugzilla.suse.com/1153607" source="BUGZILLA"/>
		<reference ref_id="1153646" ref_url="https://bugzilla.suse.com/1153646" source="BUGZILLA"/>
		<reference ref_id="1153681" ref_url="https://bugzilla.suse.com/1153681" source="BUGZILLA"/>
		<reference ref_id="1153713" ref_url="https://bugzilla.suse.com/1153713" source="BUGZILLA"/>
		<reference ref_id="1153717" ref_url="https://bugzilla.suse.com/1153717" source="BUGZILLA"/>
		<reference ref_id="1153718" ref_url="https://bugzilla.suse.com/1153718" source="BUGZILLA"/>
		<reference ref_id="1153719" ref_url="https://bugzilla.suse.com/1153719" source="BUGZILLA"/>
		<reference ref_id="1153811" ref_url="https://bugzilla.suse.com/1153811" source="BUGZILLA"/>
		<reference ref_id="1153969" ref_url="https://bugzilla.suse.com/1153969" source="BUGZILLA"/>
		<reference ref_id="1154108" ref_url="https://bugzilla.suse.com/1154108" source="BUGZILLA"/>
		<reference ref_id="1154189" ref_url="https://bugzilla.suse.com/1154189" source="BUGZILLA"/>
		<reference ref_id="1154242" ref_url="https://bugzilla.suse.com/1154242" source="BUGZILLA"/>
		<reference ref_id="1154268" ref_url="https://bugzilla.suse.com/1154268" source="BUGZILLA"/>
		<reference ref_id="1154354" ref_url="https://bugzilla.suse.com/1154354" source="BUGZILLA"/>
		<reference ref_id="1154372" ref_url="https://bugzilla.suse.com/1154372" source="BUGZILLA"/>
		<reference ref_id="1154521" ref_url="https://bugzilla.suse.com/1154521" source="BUGZILLA"/>
		<reference ref_id="1154578" ref_url="https://bugzilla.suse.com/1154578" source="BUGZILLA"/>
		<reference ref_id="1154607" ref_url="https://bugzilla.suse.com/1154607" source="BUGZILLA"/>
		<reference ref_id="1154608" ref_url="https://bugzilla.suse.com/1154608" source="BUGZILLA"/>
		<reference ref_id="1154610" ref_url="https://bugzilla.suse.com/1154610" source="BUGZILLA"/>
		<reference ref_id="1154611" ref_url="https://bugzilla.suse.com/1154611" source="BUGZILLA"/>
		<reference ref_id="1154651" ref_url="https://bugzilla.suse.com/1154651" source="BUGZILLA"/>
		<reference ref_id="1154737" ref_url="https://bugzilla.suse.com/1154737" source="BUGZILLA"/>
		<reference ref_id="1154747" ref_url="https://bugzilla.suse.com/1154747" source="BUGZILLA"/>
		<reference ref_id="1154848" ref_url="https://bugzilla.suse.com/1154848" source="BUGZILLA"/>
		<reference ref_id="1154858" ref_url="https://bugzilla.suse.com/1154858" source="BUGZILLA"/>
		<reference ref_id="1154905" ref_url="https://bugzilla.suse.com/1154905" source="BUGZILLA"/>
		<reference ref_id="1154956" ref_url="https://bugzilla.suse.com/1154956" source="BUGZILLA"/>
		<reference ref_id="1155061" ref_url="https://bugzilla.suse.com/1155061" source="BUGZILLA"/>
		<reference ref_id="1155178" ref_url="https://bugzilla.suse.com/1155178" source="BUGZILLA"/>
		<reference ref_id="1155179" ref_url="https://bugzilla.suse.com/1155179" source="BUGZILLA"/>
		<reference ref_id="1155184" ref_url="https://bugzilla.suse.com/1155184" source="BUGZILLA"/>
		<reference ref_id="1155186" ref_url="https://bugzilla.suse.com/1155186" source="BUGZILLA"/>
		<reference ref_id="1155671" ref_url="https://bugzilla.suse.com/1155671" source="BUGZILLA"/>
		<reference ref_id="802154" ref_url="https://bugzilla.suse.com/802154" source="BUGZILLA"/>
		<reference ref_id="814594" ref_url="https://bugzilla.suse.com/814594" source="BUGZILLA"/>
		<reference ref_id="919448" ref_url="https://bugzilla.suse.com/919448" source="BUGZILLA"/>
		<reference ref_id="987367" ref_url="https://bugzilla.suse.com/987367" source="BUGZILLA"/>
		<reference ref_id="998153" ref_url="https://bugzilla.suse.com/998153" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12207" ref_url="https://www.suse.com/security/cve/CVE-2018-12207/" source="CVE"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-11135" ref_url="https://www.suse.com/security/cve/CVE-2019-11135/" source="CVE"/>
		<reference ref_id="CVE-2019-16232" ref_url="https://www.suse.com/security/cve/CVE-2019-16232/" source="CVE"/>
		<reference ref_id="CVE-2019-16233" ref_url="https://www.suse.com/security/cve/CVE-2019-16233/" source="CVE"/>
		<reference ref_id="CVE-2019-16234" ref_url="https://www.suse.com/security/cve/CVE-2019-16234/" source="CVE"/>
		<reference ref_id="CVE-2019-16995" ref_url="https://www.suse.com/security/cve/CVE-2019-16995/" source="CVE"/>
		<reference ref_id="CVE-2019-17056" ref_url="https://www.suse.com/security/cve/CVE-2019-17056/" source="CVE"/>
		<reference ref_id="CVE-2019-17133" ref_url="https://www.suse.com/security/cve/CVE-2019-17133/" source="CVE"/>
		<reference ref_id="CVE-2019-17666" ref_url="https://www.suse.com/security/cve/CVE-2019-17666/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2947-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race
  condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine
  Exception during Page Size Change, causing the CPU core to be non-functional.

  The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in
  executable pages by splitting / merging huge pages into small pages as
  needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735

- CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with
  Transactional Memory support could be used to facilitate sidechannel
  information leaks out of microarchitectural buffers, similar to the
  previously described 'Microarchitectural Data Sampling' attack.

  The Linux kernel was supplemented with the option to disable TSX operation
  altogether (requiring CPU Microcode updates on older systems) and better
  flushing of microarchitectural buffers (VERW).

  The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251

- CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port
  failed to add a port, which may have caused denial of service (bsc#1152685).

- CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the
  alloc_workqueue return value, leading to a NULL pointer dereference.
  (bsc#1150457).

- CVE-2019-10220: Added sanity checks on the pathnames passed to the user
  space. (bsc#1144903).

- CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).

- CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell
  libertas driver (bsc#1150465).

- CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return
  value, leading to a NULL pointer dereference. (bsc#1150452).

- CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE,
  leading to a Buffer Overflow (bsc#1153158).

- CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which
  meant that unprivileged users could create a raw socket (bsc#1152788).

The following non-security bugs were fixed:

- 9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
- acpi: cppc: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510).
- acpi: cppc: do not require the _PSD method (bsc#1051510).
- acpi: processor: do not print errors for processorIDs == 0xff (bsc#1051510).
- act_mirred: Fix mirred_init_module error handling (bsc#1051510).
- alsa: bebob: Fix prototype of helper function to return negative value (bsc#1051510).
- alsa: firewire-motu: add support for MOTU 4pre (bsc#1111666).
- alsa: hda/hdmi: Do not report spurious jack state changes (bsc#1051510).
- alsa: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510).
- alsa: hda/realtek: Add support for ALC623 (bsc#1051510).
- alsa: hda/realtek: Add support for ALC711 (bsc#1051510).
- alsa: hda/realtek: Check beep whitelist before assigning in all codecs (bsc#1051510).
- alsa: hda/realtek: Enable headset mic on Asus MJ401TA (bsc#1051510).
- alsa: hda/realtek: Fix 2 front mics of codec 0x623 (bsc#1051510).
- alsa: hda/realtek: Fix alienware headset mic (bsc#1051510).
- alsa: hda/realtek: PCI quirk for Medion E4254 (bsc#1051510).
- alsa: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 (bsc#1051510).
- alsa: hda/sigmatel: remove unused variable 'stac9200_core_init' (bsc#1051510).
- alsa: hda: Add Elkhart Lake PCI ID (bsc#1051510).
- alsa: hda: Add Tigerlake/Jasperlake PCI ID (bsc#1051510).
- alsa: hda: Add a quirk model for fixing Huawei Matebook X right speaker (bsc#1051510).
- alsa: hda: Add laptop imic fixup for ASUS M9V laptop (bsc#1051510).
- alsa: hda: Add support of Zhaoxin controller (bsc#1051510).
- alsa: hda: Apply AMD controller workaround for Raven platform (bsc#1051510).
- alsa: hda: Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510).
- alsa: hda: Drop unsol event handler for Intel HDMI codecs (bsc#1051510).
- alsa: hda: Expand pin_match function to match upcoming new tbls (bsc#1051510).
- alsa: hda: Flush interrupts on disabling (bsc#1051510).
- alsa: hda: Force runtime PM on Nvidia HDMI codecs (bsc#1051510).
- alsa: hda: Inform too slow responses (bsc#1051510).
- alsa: hda: Set fifo_size for both playback and capture streams (bsc#1051510).
- alsa: hda: Show the fatal CORB/RIRB error more clearly (bsc#1051510).
- alsa: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() (bsc#1051510).
- alsa: line6: sizeof (byte) is always 1, use that fact (bsc#1051510).
- alsa: timer: Fix mutex deadlock at releasing card (bsc#1051510).
- alsa: usb-audio: Add DSD support for EVGA NU Audio (bsc#1051510).
- alsa: usb-audio: Add DSD support for Gustard U16/X26 USB Interface (bsc#1051510).
- alsa: usb-audio: Add Hiby device family to quirks for native DSD support (bsc#1051510).
- alsa: usb-audio: Add Pioneer DDJ-SX3 PCM quirck (bsc#1051510).
- alsa: usb-audio: Clean up check_input_term() (bsc#1051510).
- alsa: usb-audio: DSD auto-detection for Playback Designs (bsc#1051510).
- alsa: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1051510).
- alsa: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1111666).
- alsa: usb-audio: Fix copy&amp;paste error in the validator (bsc#1111666).
- alsa: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() (bsc#1051510).
- alsa: usb-audio: More validations of descriptor units (bsc#1051510).
- alsa: usb-audio: Remove superfluous bLength checks (bsc#1051510).
- alsa: usb-audio: Simplify parse_audio_unit() (bsc#1051510).
- alsa: usb-audio: Skip bSynchAddress endpoint check if it is invalid (bsc#1051510).
- alsa: usb-audio: Unify audioformat release code (bsc#1051510).
- alsa: usb-audio: Unify the release of usb_mixer_elem_info objects (bsc#1051510).
- alsa: usb-audio: Update DSD support quirks for Oppo and Rotel (bsc#1051510).
- alsa: usb-audio: fix PCM device order (bsc#1051510).
- alsa: usb-audio: remove some dead code (bsc#1051510).
- appletalk: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- arcnet: provide a buffer big enough to actually receive packets (networking-stable-19_09_30).
- asoc: Define a set of DAPM pre/post-up events (bsc#1051510).
- asoc: dmaengine: Make the pcm-&gt;name equal to pcm-&gt;id if the name is not set (bsc#1051510).
- asoc: intel: Fix use of potentially uninitialized variable (bsc#1051510).
- asoc: intel: nhlt: Fix debug print format (bsc#1051510).
- asoc: rockchip: i2s: Fix RPM imbalance (bsc#1051510).
- asoc: rsnd: Reinitialize bit clock inversion flag for every format setting (bsc#1051510).
- asoc: sgtl5000: Fix charge pump source assignment (bsc#1051510).
- auxdisplay: panel: need to delete scan_timer when misc_register fails in panel_attach (bsc#1051510).
- ax25: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- blk-wbt: abstract out end IO completion handler (bsc#1135873).
- blk-wbt: fix has-sleeper queueing check (bsc#1135873).
- blk-wbt: improve waking of tasks (bsc#1135873).
- blk-wbt: move disable check into get_limit() (bsc#1135873).
- blk-wbt: use wq_has_sleeper() for wq active check (bsc#1135873).
- block: add io timeout to sysfs (bsc#1148410).
- block: add io timeout to sysfs (bsc#1148410).
- block: do not show io_timeout if driver has no timeout handler (bsc#1148410).
- block: do not show io_timeout if driver has no timeout handler (bsc#1148410).
- bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices (bsc#1051510).
- bnx2x: Fix VF's VLAN reconfiguration in reload (bsc#1086323 ).
- bnxt_en: Add PCI IDs for 57500 series NPAR devices (bsc#1153607).
- bpf: fix use after free in prog symbol exposure (bsc#1083647).
- brcmfmac: sdio: Disable auto-tuning around commands expected to fail (bsc#1111666).
- brcmfmac: sdio: Do not tune while the card is off (bsc#1111666).
- bridge/mdb: remove wrong use of NLM_F_MULTI (networking-stable-19_09_15).
- btrfs: Ensure btrfs_init_dev_replace_tgtdev sees up to date values (bsc#1154651).
- btrfs: Ensure replaced device does not have pending chunk allocation (bsc#1154607).
- btrfs: bail out gracefully rather than BUG_ON (bsc#1153646).
- btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() (bsc#1155178).
- btrfs: check for the full sync flag while holding the inode lock during fsync (bsc#1153713).
- btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() (bsc#1155179).
- btrfs: remove wrong use of volume_mutex from btrfs_dev_replace_start (bsc#1154651).
- btrfs: tracepoints: Fix bad entry members of qgroup events (bsc#1155186).
- btrfs: tracepoints: Fix wrong parameter order for qgroup events (bsc#1155184).
- can: mcp251x: mcp251x_hw_reset(): allow more time after a reset (bsc#1051510).
- can: xilinx_can: xcan_probe(): skip error message on deferred probe (bsc#1051510).
- cdc_ether: fix rndis support for Mediatek based smartphones (networking-stable-19_09_15).
- cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize (bsc#1051510).
- ceph: fix directories inode i_blkbits initialization (bsc#1153717).
- ceph: reconnect connection if session hang in opening state (bsc#1153718).
- ceph: update the mtime when truncating up (bsc#1153719).
- cfg80211: Purge frame registrations on iftype change (bsc#1051510).
- cfg80211: add and use strongly typed element iteration macros (bsc#1051510).
- clk: at91: select parent if main oscillator or bypass is enabled (bsc#1051510).
- clk: qoriq: Fix -Wunused-const-variable (bsc#1051510).
- clk: sirf: Do not reference clk_init_data after registration (bsc#1051510).
- clk: zx296718: Do not reference clk_init_data after registration (bsc#1051510).
- crypto: af_alg: Fix race around ctx-&gt;rcvused by making it atomic_t (bsc#1154737).
- crypto: af_alg: Initialize sg_num_bytes in error code path (bsc#1051510).
- crypto: af_alg: consolidation of duplicate code (bsc#1154737).
- crypto: af_alg: fix race accessing cipher request (bsc#1154737).
- crypto: af_alg: remove locking in async callback (bsc#1154737).
- crypto: af_alg: update correct dst SGL entry (bsc#1051510).
- crypto: af_alg: wait for data at beginning of recvmsg (bsc#1154737).
- crypto: algif: return error code when no data was processed (bsc#1154737).
- crypto: algif_aead: copy AAD from src to dst (bsc#1154737).
- crypto: algif_aead: fix reference counting of null skcipher (bsc#1154737).
- crypto: algif_aead: overhaul memory management (bsc#1154737).
- crypto: algif_aead: skip SGL entries with NULL page (bsc#1154737).
- crypto: algif_skcipher: overhaul memory management (bsc#1154737).
- crypto: talitos: fix missing break in switch statement (bsc#1142635).
- cxgb4: Signedness bug in init_one() (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584).
- cxgb4: do not dma memory off of the stack (bsc#1152790).
- cxgb4: fix endianness for vlan value in cxgb4_tc_flower (bsc#1064802 bsc#1066129).
- cxgb4: offload VLAN flows regardless of VLAN ethtype (bsc#1064802 bsc#1066129).
- cxgb4: reduce kernel stack usage in cudbg_collect_mem_region() (bsc#1073513).
- cxgb4: smt: Add lock for atomic_dec_and_test (bsc#1064802 bsc#1066129).
- cxgb4:Fix out-of-bounds MSI-X info array access (networking-stable-19_10_05).
- drm/amd/display: Restore backlight brightness after system resume (bsc#1112178)
- drm/amd/display: fix issue where 252-255 values are clipped (bsc#1111666).
- drm/amd/display: reprogram VM config when system resume (bsc#1111666).
- drm/amd/display: support spdif (bsc#1111666).
- drm/amd/dm: Understand why attaching path/tile properties are needed (bsc#1111666).
- drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) (bsc#1051510).
- drm/amd/pp: Fix truncated clock value when set watermark (bsc#1111666).
- drm/amdgpu/gfx9: Update gfx9 golden settings (bsc#1111666).
- drm/amdgpu/si: fix ASIC tests (git-fixes).
- drm/amdgpu: Check for valid number of registers to read (bsc#1051510).
- drm/amdgpu: Fix KFD-related kernel oops on Hawaii (bsc#1111666).
- drm/amdgpu: Update gc_9_0 golden settings (bsc#1111666).
- drm/amdkfd: Add missing Polaris10 ID (bsc#1111666).
- drm/ast: Fixed reboot test may cause system hanged (bsc#1051510).
- drm/atomic_helper: Allow DPMS On&lt;-&gt;Off changes for unregistered connectors (bsc#1111666).
- drm/atomic_helper: Disallow new modesets on unregistered connectors (bsc#1111666).
- drm/atomic_helper: Stop modesets on unregistered connectors harder (bsc#1111666).
- drm/bridge: tc358767: Increase AUX transfer length limit (bsc#1051510).
- drm/bridge: tfp410: fix memleak in get_modes() (bsc#1111666).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 (bsc#1051510).
- drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)
- drm/i915/cmdparser: Ignore Length operands during (bsc#1135967)
- drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)
- drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)
- drm/i915/gvt: update vgpu workload head pointer correctly (bsc#1112178)
- drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)
- drm/i915: Add support for mandatory cmdparsing (bsc#1135967)
- drm/i915: Allow parsing of unsized batches (bsc#1135967)
- drm/i915: Cleanup gt powerstate from gem (bsc#1111666).
- drm/i915: Disable Secure Batches for gen6+ (bsc#1135967)
- drm/i915: Fix intel_dp_mst_best_encoder() (bsc#1111666).
- drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)
- drm/i915: Remove Master tables from cmdparser (bsc#1135967)
- drm/i915: Rename gen7 cmdparser tables (bsc#1135967)
- drm/i915: Restore sane defaults for KMS on GEM error load (bsc#1111666).
- drm/i915: Support ro ppgtt mapped cmdparser shadow (bsc#1135967)
- drm/mediatek: set DMA max segment size (bsc#1111666).
- drm/msm/dsi: Fix return value check for clk_get_parent (bsc#1111666).
- drm/msm/dsi: Implement reset correctly (bsc#1051510).
- drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling (bsc#1111666).
- drm/nouveau/kms/nv50-: Do not create MSTMs for eDP connectors (bsc#1112178)
- drm/nouveau/volt: Fix for some cards having 0 maximum voltage (bsc#1111666).
- drm/omap: fix max fclk divider for omap36xx (bsc#1111666).
- drm/panel: check failure cases in the probe func (bsc#1111666).
- drm/panel: make drm_panel.h self-contained (bsc#1111666).
- drm/panel: simple: fix AUO g185han01 horizontal blanking (bsc#1051510).
- drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed (bsc#1111666).
- drm/radeon: Fix EEH during kexec (bsc#1051510).
- drm/rockchip: Check for fast link training before enabling psr (bsc#1111666).
- drm/stm: attach gem fence to atomic state (bsc#1111666).
- drm/tilcdc: Register cpufreq notifier after we have initialized crtc (bsc#1051510).
- drm/vmwgfx: Fix double free in vmw_recv_msg() (bsc#1051510).
- drm: Flush output polling on shutdown (bsc#1051510).
- drm: add __user attribute to ptr_to_compat() (bsc#1111666).
- drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC (bsc#1111666).
- drm: rcar-du: lvds: Fix bridge_to_rcar_lvds (bsc#1111666).
- e1000e: add workaround for possible stalled packet (bsc#1051510).
- efi/arm: Show SMBIOS bank/device location in CPER and GHES error logs (bsc#1152033).
- efi/memattr: Do not bail on zero VA if it equals the region's PA (bsc#1051510).
- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efivar/ssdt: Do not iterate over EFI vars if no SSDT override was specified (bsc#1051510).
- firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices (git-fixes).
- gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() (bsc#1051510).
- hid: apple: Fix stuck function keys when using FN (bsc#1051510).
- hid: fix error message in hid_open_report() (bsc#1051510).
- hid: hidraw: Fix invalid read in hidraw_ioctl (bsc#1051510).
- hid: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy() (bsc#1051510).
- hid: logitech: Fix general protection fault caused by Logitech driver (bsc#1051510).
- hid: prodikeys: Fix general protection fault during probe (bsc#1051510).
- hid: sony: Fix memory corruption issue on cleanup (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' (bsc#1051510).
- hwrng: core: do not wait on add_early_randomness() (git-fixes).
- hyperv: set nvme msi interrupts to unmanaged (jsc#SLE-8953, jsc#SLE-9221, jsc#SLE-4941, bsc#1119461, bsc#1119465, bsc#1138190, bsc#1154905).
- i2c: riic: Clear NACK in tend isr (bsc#1051510).
- ib/core, ipoib: Do not overreact to SM LID change event (bsc#1154108)
- ib/core: Add mitigation for Spectre V1 (bsc#1155671)
- ib/hfi1: Remove overly conservative VM_EXEC flag check (bsc#1144449).
- ib/mlx5: Consolidate use_umr checks into single function (bsc#1093205).
- ib/mlx5: Fix MR re-registration flow to use UMR properly (bsc#1093205).
- ib/mlx5: Report correctly tag matching rendezvous capability (bsc#1046305).
- ieee802154: atusb: fix use-after-free at disconnect (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- ieee802154: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- iio: adc: ad799x: fix probe error handling (bsc#1051510).
- iio: light: opt3001: fix mutex unlock race (bsc#1051510).
- ima: always return negative code for error (bsc#1051510).
- input: da9063: fix capability and drop KEY_SLEEP (bsc#1051510).
- input: synaptics-rmi4: avoid processing unknown IRQs (bsc#1051510).
- integrity: prevent deadlock during digsig verification (bsc#1090631).
- iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 (bsc#1137799).
- iommu/amd: Check PM_LEVEL_SIZE() condition in locked section (bsc#1154608).
- iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems (bsc#1137799).
- iommu/amd: Remove domain-&gt;updated (bsc#1154610).
- iommu/amd: Wait for completion of IOTLB flush in attach_device (bsc#1154611).
- ipmi_si: Only schedule continuously in the thread in maintenance mode (bsc#1051510).
- ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' (networking-stable-19_09_15).
- ipv6: Handle missing host route in __ipv6_ifa_notify (networking-stable-19_10_05).
- ipv6: drop incoming packets having a v4mapped source address (networking-stable-19_10_05).
- iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init (bsc#1111666).
- ixgbe: Fix secpath usage for IPsec TX offload (bsc#1113994 bsc#1151807).
- ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (bsc#1101674).
- ixgbe: sync the first fragment unconditionally (bsc#1133140).
- kABI workaround for crypto/af_alg changes (bsc#1154737).
- kABI workaround for drm_connector.registered type changes (bsc#1111666).
- kABI workaround for mmc_host retune_crc_disable flag addition (bsc#1111666).
- kABI workaround for snd_hda_pick_pin_fixup() changes (bsc#1051510).
- kabi/severities: Whitelist functions internal to radix mm. To call these functions you have to first detect if you are running in radix mm mode which can't be expected of OOT code.
- kabi: net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05).
- kernel-binary.spec.in: Fix build of non-modular kernels (boo#1154578).
- kernel-binary.spec.in: Obsolete kgraft packages only when not building them.
- kernel-binary: Drop .kernel-binary.spec.buildenv (boo#1154578). Without this patch, /usr/src/linux-@VERSION@-@RELEASE_SHORT@-obj/x86_64/vanilla/.kernel-binary.spec.buildenv contained rpm %_smp_mflags in a line like export MAKE_ARGS=' --output-sync -j4' This made it hard to produce bit-identical builds.
- kernel-binary: check also bzImage on s390/s390x Starting with 4.19-rc1, uncompressed image is no longer built on s390x. If file 'image' is not found in arch/s390/boot after the build, try bzImage instead. For now, install bzImage under the name image-* until we know grub2 and our grub2 scripts can handle correct name.
- kernel-subpackage-build: create zero size ghost for uncompressed vmlinux (bsc#1154354). It is not strictly necessary to uncompress it so maybe the ghost file can be 0 size in this case.
- kernel/sysctl.c: do not override max_threads provided by userspace (bnc#1150875).
- ksm: cleanup stable_node chain collapse case (bnc#1144338).
- ksm: fix use after free with merge_across_nodes = 0 (bnc#1144338).
- ksm: introduce ksm_max_page_sharing per page deduplication limit (bnc#1144338).
- ksm: optimize refile of stable_node_dup at the head of the chain (bnc#1144338).
- ksm: swap the two output parameters of chain/chain_prune (bnc#1144338).
- kvm: Convert kvm_lock to a mutex (bsc#1117665).
- kvm: mmu: drop vcpu param in gpte_access (bsc#1117665).
- kvm: ppc: book3s hv: use smp_mb() when setting/clearing host_ipi flag (bsc#1061840).
- kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bsc#1117665).
- kvm: x86, powerpc: do not allow clearing largepages debugfs entry (bsc#1117665).
- kvm: x86: Do not release the page inside mmu_set_spte() (bsc#1117665).
- kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (bsc#1117665).
- kvm: x86: adjust kvm_mmu_page member to save 8 bytes (bsc#1117665).
- kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (bsc#1117665).
- kvm: x86: make FNAME(fetch) and __direct_map more similar (bsc#1117665).
- kvm: x86: remove now unneeded hugepage gfn adjustment (bsc#1117665).
- lib/mpi: Fix karactx leak in mpi_powm (bsc#1051510).
- libertas: Add missing sentinel at end of if_usb.c fw_table (bsc#1051510).
- libnvdimm/security: provide fix for secure-erase to use zero-key (bsc#1149853).
- lpfc: Add FA-WWN Async Event reporting (bsc#1154521).
- lpfc: Add FC-AL support to lpe32000 models (bsc#1154521).
- lpfc: Add additional discovery log messages (bsc#1154521).
- lpfc: Add log macros to allow print by serverity or verbocity setting (bsc#1154521).
- lpfc: Fix SLI3 hba in loop mode not discovering devices (bsc#1154521).
- lpfc: Fix bad ndlp ptr in xri aborted handling (bsc#1154521).
- lpfc: Fix hardlockup in lpfc_abort_handler (bsc#1154521).
- lpfc: Fix lockdep errors in sli_ringtx_put (bsc#1154521).
- lpfc: Fix reporting of read-only fw error errors (bsc#1154521).
- lpfc: Make FW logging dynamically configurable (bsc#1154521).
- lpfc: Remove lock contention target write path (bsc#1154521).
- lpfc: Revise interrupt coalescing for missing scenarios (bsc#1154521).
- lpfc: Slight fast-path Performance optimizations (bsc#1154521).
- lpfc: Update lpfc version to 12.6.0.0 (bsc#1154521).
- lpfc: fix coverity error of dereference after null check (bsc#1154521).
- lpfc: fix lpfc_nvmet_mrq to be bound by hdw queue count (bsc#1154521).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- mac80211: accept deauth frames in IBSS mode (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- macsec: drop skb sk before calling gro_cells_receive (bsc#1051510).
- md/raid0: avoid RAID0 data corruption due to layout confusion (bsc#1140090).
- md/raid0: fix warning message for parameter default_layout (bsc#1140090).
- media: atmel: atmel-isc: fix asd memory allocation (bsc#1135642).
- media: cpia2_usb: fix memory leaks (bsc#1051510).
- media: dvb-core: fix a memory leak bug (bsc#1051510).
- media: exynos4-is: fix leaked of_node references (bsc#1051510).
- media: gspca: zero usb_buf on error (bsc#1051510).
- media: hdpvr: Add device num check and handling (bsc#1051510).
- media: hdpvr: add terminating 0 at end of string (bsc#1051510).
- media: i2c: ov5645: Fix power sequence (bsc#1051510).
- media: iguanair: add sanity checks (bsc#1051510).
- media: omap3isp: Do not set streaming state on random subdevs (bsc#1051510).
- media: omap3isp: Set device on omap3isp subdevs (bsc#1051510).
- media: ov9650: add a sanity check (bsc#1051510).
- media: radio/si470x: kill urb on error (bsc#1051510).
- media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() (bsc#1051510).
- media: saa7146: add cleanup in hexium_attach() (bsc#1051510).
- media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table (bsc#1051510).
- media: stkwebcam: fix runtime PM after driver unbind (bsc#1051510).
- media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (bsc#1051510).
- memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' (bsc#1051510).
- mfd: intel-lpss: Remove D3cold delay (bsc#1051510).
- misdn: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- mld: fix memory leak in mld_del_delrec() (networking-stable-19_09_05).
- mmc: core: API to temporarily disable retuning for SDIO CRC errors (bsc#1111666).
- mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() (bsc#1111666).
- mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence (bsc#1051510).
- mmc: sdhci: Fix incorrect switch to HS mode (bsc#1051510).
- mmc: sdhci: improve ADMA error reporting (bsc#1051510).
- net/ibmvnic: Fix EOI when running in XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes).
- net/mlx4_en: fix a memory leak bug (bsc#1046299).
- net/mlx5: Add device ID of upcoming BlueField-2 (bsc#1046303 ).
- net/mlx5: Fix error handling in mlx5_load() (bsc#1046305 ).
- net/phy: fix DP83865 10 Mbps HDX loopback disable function (networking-stable-19_09_30).
- net/rds: Fix error handling in rds_ib_add_one() (networking-stable-19_10_05).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- net/rds: remove user triggered WARN_ON in rds_sendmsg (bsc#1154848).
- net/sched: act_sample: do not push mac header on ip6gre ingress (networking-stable-19_09_30).
- net: Fix null de-reference of device refcount (networking-stable-19_09_15).
- net: Replace NF_CT_ASSERT() with WARN_ON() (bsc#1146612).
- net: Unpublish sk from sk_reuseport_cb before call_rcu (networking-stable-19_10_05).
- net: fix skb use after free in netpoll (networking-stable-19_09_05).
- net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list (networking-stable-19_09_15).
- net: openvswitch: free vport unless register_netdevice() succeeds (git-fixes).
- net: qlogic: Fix memory leak in ql_alloc_large_buffers (networking-stable-19_10_05).
- net: qrtr: Stop rx_worker before freeing node (networking-stable-19_09_30).
- net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05).
- net: stmmac: dwmac-rk: Do not fail if phy regulator is absent (networking-stable-19_09_05).
- net_sched: add policy validation for action attributes (networking-stable-19_09_30).
- net_sched: fix backward compatibility for TCA_ACT_KIND (git-fixes).
- netfilter: nf_nat: do not bug when mapping already exists (bsc#1146612).
- nfc: fix attrs checks in netlink interface (bsc#1051510).
- nfc: fix memory leak in llcp_sock_bind() (bsc#1051510).
- nfc: pn533: fix use-after-free and memleaks (bsc#1051510).
- nfsv4.1: backchannel request should hold ref on xprt (bsc#1152624).
- nl80211: fix null pointer dereference (bsc#1051510).
- objtool: Clobber user CFLAGS variable (bsc#1153236).
- openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC (networking-stable-19_09_30).
- packaging: add support for riscv64
- pci: Correct pci=resource_alignment parameter example (bsc#1051510).
- pci: dra7xx: Fix legacy INTD IRQ handling (bsc#1087092).
- pci: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (bsc#1153263).
- pci: pm: Fix pci_power_up() (bsc#1051510).
- pinctrl: cherryview: restore Strago DMI workaround for all versions (bsc#1111666).
- pinctrl: tegra: Fix write barrier placement in pmx_writel (bsc#1051510).
- platform/x86: classmate-laptop: remove unused variable (bsc#1051510).
- platform/x86: i2c-multi-instantiate: Derive the device name from parent (bsc#1111666).
- platform/x86: i2c-multi-instantiate: Fail the probe if no IRQ provided (bsc#1111666).
- platform/x86: pmc_atom: Add Siemens SIMATIC IPC277E to critclk_systems DMI table (bsc#1051510).
- power: supply: sysfs: ratelimit property read error message (bsc#1051510).
- powerpc/64s/pseries: radix flush translations before MMU is enabled at boot (bsc#1055186).
- powerpc/64s/radix: keep kernel ERAT over local process/guest invalidates (bsc#1055186).
- powerpc/64s/radix: tidy up TLB flushing code (bsc#1055186).
- powerpc/64s: Rename PPC_INVALIDATE_ERAT to PPC_ISA_3_0_INVALIDATE_ERAT (bsc#1055186).
- powerpc/mm/book3s64: Move book3s64 code to pgtable-book3s64 (bsc#1055186).
- powerpc/mm/radix: mark __radix__flush_tlb_range_psize() as __always_inline (bsc#1055186).
- powerpc/mm/radix: mark as __tlbie_pid() and friends as__always_inline (bsc#1055186).
- powerpc/mm: Properly invalidate when setting process table base (bsc#1055186).
- powerpc/mm: mark more tlb functions as __always_inline (bsc#1055186).
- powerpc/pseries/mobility: use cond_resched when updating device tree (bsc#1153112 ltc#181778).
- powerpc/pseries: Remove confusing warning message (bsc#1109158).
- powerpc/rtas: allow rescheduling while changing cpu states (bsc#1153112 ltc#181778).
- powerplay: Respect units on max dcfclk watermark (bsc#1111666).
- qed: iwarp: Fix default window size to be based on chip (bsc#1050536 bsc#1050545).
- qed: iwarp: Fix tc for MPA ll2 connection (bsc#1050536 bsc#1050545).
- qed: iwarp: Use READ_ONCE and smp_store_release to access ep-&gt;state (bsc#1050536 bsc#1050545).
- qed: iwarp: fix uninitialized callback (bsc#1050536 bsc#1050545).
- qmi_wwan: add support for Cinterion CLS8 devices (networking-stable-19_10_05).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- rdma/bnxt_re: Fix spelling mistake 'missin_resp' -&gt; 'missing_resp' (bsc#1050244).
- rdma/hns: Add reset process for function-clear (bsc#1155061).
- rdma/hns: Remove the some magic number (bsc#1155061).
- rdma: Fix goto target to release the allocated memory (bsc#1050244).
- rds: Fix warning (bsc#1154848).
- rpm/config.sh: Enable livepatch.
- rpm/constraints.in: lower disk space required for ARM With a requirement of 35GB, only 2 slow workers are usable for ARM. Current aarch64 build requires 27G and armv6/7 requires 14G. Set requirements respectively to 30GB and 20GB.
- rpm/dtb.spec.in.in: do not make dtb directory inaccessible There is no reason to lock down the dtb directory for ordinary users.
- rpm/kernel-binary.spec.in: Fix kernel-livepatch description typo.
- rpm/kernel-binary.spec.in: build kernel-*-kgraft only for default SLE kernel RT and Azure variants are excluded for the moment. (bsc#1141600)
- rpm/kernel-binary.spec.in: handle modules.builtin.modinfo It was added in 5.2.
- rpm/kernel-binary.spec.in: support partial rt debug config.
- rpm/kernel-subpackage-spec: Mention debuginfo in the subpackage description (bsc#1149119).
- rpm/macros.kernel-source: KMPs should depend on kmod-compat to build. kmod-compat links are used in find-provides.ksyms, find-requires.ksyms, and find-supplements.ksyms in rpm-config-SUSE.
- rpm/mkspec: Correct tarball URL for rc kernels.
- rpm/mkspec: Make building DTBs optional.
- rpm/modflist: Simplify compression support.
- rpm: raise required disk space for binary packages Current disk space constraints (10 GB on s390x, 25 GB on other architectures) no longer suffice for 5.3 kernel builds. The statistics show ~30 GB of disk consumption on x86_64 and ~11 GB on s390x so raise the constraints to 35 GB in general and 14 GB on s390x.
- rpm: support compressed modules Some of our scripts and scriptlets in rpm/ do not expect module files not ending with '.ko' which currently leads to failure in preuninstall scriptlet of cluster-md-kmp-default (and probably also other subpackages). Let those which could be run on compressed module files recognize '.ko.xz' in addition to '.ko'.
- rtlwifi: rtl8192cu: Fix value set in descriptor (bsc#1142635).
- s390/cmf: set_schib_wait add timeout (bsc#1153509, bsc#1153476).
- s390/cpumsf: Check for CPU Measurement sampling (bsc#1153681 LTC#181855).
- s390/crypto: fix gcm-aes-s390 selftest failures (bsc#1137861 LTC#178091).
- s390/pci: add mio_enabled attribute (bsc#1152665 LTC#181729).
- s390/pci: correctly handle MIO opt-out (bsc#1152665 LTC#181729).
- s390/pci: deal with devices that have no support for MIO instructions (bsc#1152665 LTC#181729).
- s390/pci: fix MSI message data (bsc#1152697 LTC#181730).
- s390: add support for IBM z15 machines (bsc#1152696 LTC#181731).
- s390: fix setting of mio addressing control (bsc#1152665 LTC#181729).
- sch_cbq: validate TCA_CBQ_WRROPT to avoid crash (networking-stable-19_10_05).
- sch_dsmark: fix potential NULL deref in dsmark_init() (networking-stable-19_10_05).
- sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero (networking-stable-19_09_15).
- sch_netem: fix a divide by zero in tabledist() (networking-stable-19_09_30).
- sched/fair: Avoid divide by zero when rebalancing domains (bsc#1096254).
- scripts/arch-symbols: add missing link.
- scsi: lpfc: Check queue pointer before use (bsc#1154242).
- scsi: lpfc: Complete removal of FCoE T10 PI support on SLI-4 adapters (bsc#1154521).
- scsi: lpfc: Convert existing %pf users to %ps (bsc#1154521).
- scsi: lpfc: Fix GPF on scsi command completion (bsc#1154521).
- scsi: lpfc: Fix NVME io abort failures causing hangs (bsc#1154521).
- scsi: lpfc: Fix NVMe ABTS in response to receiving an ABTS (bsc#1154521).
- scsi: lpfc: Fix coverity errors on NULL pointer checks (bsc#1154521).
- scsi: lpfc: Fix device recovery errors after PLOGI failures (bsc#1154521).
- scsi: lpfc: Fix devices that do not return after devloss followed by rediscovery (bsc#1137040).
- scsi: lpfc: Fix discovery failures when target device connectivity bounces (bsc#1154521).
- scsi: lpfc: Fix hdwq sgl locks and irq handling (bsc#1154521).
- scsi: lpfc: Fix host hang at boot or slow boot (bsc#1154521).
- scsi: lpfc: Fix list corruption detected in lpfc_put_sgl_per_hdwq (bsc#1154521).
- scsi: lpfc: Fix list corruption in lpfc_sli_get_iocbq (bsc#1154521).
- scsi: lpfc: Fix locking on mailbox command completion (bsc#1154521).
- scsi: lpfc: Fix miss of register read failure check (bsc#1154521).
- scsi: lpfc: Fix null ptr oops updating lpfc_devloss_tmo via sysfs attribute (bsc#1140845).
- scsi: lpfc: Fix premature re-enabling of interrupts in lpfc_sli_host_down (bsc#1154521).
- scsi: lpfc: Fix propagation of devloss_tmo setting to nvme transport (bsc#1140883).
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (bsc#1154521).
- scsi: lpfc: Fix rpi release when deleting vport (bsc#1154521).
- scsi: lpfc: Fix spinlock_irq issues in lpfc_els_flush_cmd() (bsc#1154521).
- scsi: lpfc: Make function lpfc_defer_pt2pt_acc static (bsc#1154521).
- scsi: lpfc: Remove bg debugfs buffers (bsc#1144375).
- scsi: lpfc: Update async event logging (bsc#1154521).
- scsi: lpfc: Update lpfc version to 12.4.0.1 (bsc#1154521).
- scsi: lpfc: cleanup: remove unused fcp_txcmlpq_cnt (bsc#1154521).
- scsi: lpfc: remove left-over BUILD_NVME defines (bsc#1154268).
- scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (bsc#1098291).
- scsi: qedf: fc_rport_priv reference counting fixes (bsc#1098291).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix partial flash write of MBI (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix wait condition in loop (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Initialized mailbox to prevent driver load failure (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: fixup incorrect usage of host_byte (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: stop timer in shutdown path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: storvsc: setup 1:1 mapping between hardware queue and CPU queue (bsc#1140729).
- scsi: zfcp: fix reaction on bit error threshold notification (bsc#1154956 LTC#182054).
- sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' (networking-stable-19_09_15).
- sctp: use transport pf_retrans in sctp_do_8_2_transport_strike (networking-stable-19_09_15).
- skge: fix checksum byte order (networking-stable-19_09_30).
- sock_diag: fix autoloading of the raw_diag module (bsc#1152791).
- sock_diag: request _diag module only when the family or proto has been registered (bsc#1152791).
- staging: bcm2835-audio: Fix draining behavior regression (bsc#1111666).
- staging: vt6655: Fix memory leak in vt6655_probe (bsc#1051510).
- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;= NUM_WEPKEYS (bsc#1051510).
- supporte.conf: add efivarfs to kernel-default-base (bsc#1154858).
- tcp: Do not dequeue SYN/FIN-segments from write-queue (git-gixes).
- tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR (networking-stable-19_09_15).
- tcp: inherit timestamp on mtu probe (networking-stable-19_09_05).
- tcp: remove empty skb from write queue in error cases (networking-stable-19_09_05).
- thermal: Fix use-after-free when unregistering thermal zone device (bsc#1051510).
- thermal_hwmon: Sanitize thermal_zone type (bsc#1051510).
- tipc: add NULL pointer check before calling kfree_rcu (networking-stable-19_09_15).
- tipc: fix unlimited bundling of small messages (networking-stable-19_10_05).
- tracing: Initialize iter-&gt;seq after zeroing in tracing_read_pipe() (bsc#1151508).
- tun: fix use-after-free when register netdev failed (networking-stable-19_09_15).
- tuntap: correctly set SOCKWQ_ASYNC_NOSPACE (bsc#1145099).
- usb: adutux: fix NULL-derefs on disconnect (bsc#1142635).
- usb: adutux: fix use-after-free on disconnect (bsc#1142635).
- usb: adutux: fix use-after-free on release (bsc#1051510).
- usb: chaoskey: fix use-after-free on release (bsc#1051510).
- usb: dummy-hcd: fix power budget for SuperSpeed mode (bsc#1051510).
- usb: iowarrior: fix use-after-free after driver unbind (bsc#1051510).
- usb: iowarrior: fix use-after-free on disconnect (bsc#1051510).
- usb: iowarrior: fix use-after-free on release (bsc#1051510).
- usb: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- usb: ldusb: fix memleak on disconnect (bsc#1051510).
- usb: ldusb: fix read info leaks (bsc#1051510).
- usb: legousbtower: fix a signedness bug in tower_probe() (bsc#1051510).
- usb: legousbtower: fix deadlock on disconnect (bsc#1142635).
- usb: legousbtower: fix memleak on disconnect (bsc#1051510).
- usb: legousbtower: fix open after failed reset request (bsc#1142635).
- usb: legousbtower: fix potential NULL-deref on disconnect (bsc#1142635).
- usb: legousbtower: fix slab info leak at probe (bsc#1142635).
- usb: legousbtower: fix use-after-free on release (bsc#1051510).
- usb: microtek: fix info-leak at probe (bsc#1142635).
- usb: serial: fix runtime PM after driver unbind (bsc#1051510).
- usb: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20 (bsc#1051510).
- usb: serial: keyspan: fix NULL-derefs on open() and write() (bsc#1051510).
- usb: serial: option: add Telit FN980 compositions (bsc#1051510).
- usb: serial: option: add support for Cinterion CLS8 devices (bsc#1051510).
- usb: serial: ti_usb_3410_5052: fix port-close races (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- usb: usb-skeleton: fix NULL-deref on disconnect (bsc#1051510).
- usb: usb-skeleton: fix runtime PM after driver unbind (bsc#1051510).
- usb: usb-skeleton: fix use-after-free after driver unbind (bsc#1051510).
- usb: usblcd: fix I/O after disconnect (bsc#1142635).
- usb: usblp: fix runtime PM after driver unbind (bsc#1051510).
- usb: usblp: fix use-after-free on disconnect (bsc#1051510).
- usb: xhci: wait for CNR controller not ready bit in xhci resume (bsc#1051510).
- usb: yurex: Do not retry on unexpected errors (bsc#1051510).
- usb: yurex: fix NULL-derefs on disconnect (bsc#1051510).
- usbnet: ignore endpoints with invalid wMaxPacketSize (bsc#1051510).
- usbnet: sanity checking of packet sizes and device mtu (bsc#1051510).
- vfio_pci: Restore original state on release (bsc#1051510).
- vhost_net: conditionally enable tx polling (bsc#1145099).
- video: of: display_timing: Add of_node_put() in of_get_display_timing() (bsc#1051510).
- vsock: Fix a lockdep warning in __vsock_release() (networking-stable-19_10_05).
- watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout (bsc#1051510).
- x86/asm: Fix MWAITX C-state hint value (bsc#1114279).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area (bnc#1153969).
- x86/boot/64: Round memory hole size up to next PMD page (bnc#1153969).
- x86/mm: Use WRITE_ONCE() when setting PTEs (bsc#1114279).
- xen/netback: fix error path of xenvif_connect_data() (bsc#1065600).
- xen/pv: Fix Xen PV guest int3 handling (bsc#1153811).
- xhci: Check all endpoints for LPM timeout (bsc#1051510).
- xhci: Fix false warning message about wrong bounce buffer write length (bsc#1051510).
- xhci: Increase STS_SAVE timeout in xhci_suspend() (bsc#1051510).
- xhci: Prevent device initiated U1/U2 link pm if exit latency is too long (bsc#1051510).

		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-12"/>
	<updated date="2019-11-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046299">SUSE bug 1046299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046303">SUSE bug 1046303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046305">SUSE bug 1046305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073513">SUSE bug 1073513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086323">SUSE bug 1086323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087092">SUSE bug 1087092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089644">SUSE bug 1089644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090631">SUSE bug 1090631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093205">SUSE bug 1093205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096254">SUSE bug 1096254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097583">SUSE bug 1097583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097584">SUSE bug 1097584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097585">SUSE bug 1097585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097586">SUSE bug 1097586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097587">SUSE bug 1097587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097588">SUSE bug 1097588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098291">SUSE bug 1098291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101674">SUSE bug 1101674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109158">SUSE bug 1109158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117665">SUSE bug 1117665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119461">SUSE bug 1119461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119465">SUSE bug 1119465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123034">SUSE bug 1123034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123080">SUSE bug 1123080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133140">SUSE bug 1133140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134303">SUSE bug 1134303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135854">SUSE bug 1135854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135873">SUSE bug 1135873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135967">SUSE bug 1135967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137040">SUSE bug 1137040</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137799">SUSE bug 1137799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137861">SUSE bug 1137861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138190">SUSE bug 1138190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139073">SUSE bug 1139073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140090">SUSE bug 1140090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140729">SUSE bug 1140729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140845">SUSE bug 1140845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140883">SUSE bug 1140883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141600">SUSE bug 1141600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142667">SUSE bug 1142667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144338">SUSE bug 1144338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144375">SUSE bug 1144375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144449">SUSE bug 1144449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145099">SUSE bug 1145099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146612">SUSE bug 1146612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148410">SUSE bug 1148410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149119">SUSE bug 1149119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149853">SUSE bug 1149853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150452">SUSE bug 1150452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150457">SUSE bug 1150457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150465">SUSE bug 1150465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150875">SUSE bug 1150875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151508">SUSE bug 1151508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151807">SUSE bug 1151807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152033">SUSE bug 1152033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152624">SUSE bug 1152624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152665">SUSE bug 1152665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152685">SUSE bug 1152685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152696">SUSE bug 1152696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152697">SUSE bug 1152697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152788">SUSE bug 1152788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152790">SUSE bug 1152790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152791">SUSE bug 1152791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153112">SUSE bug 1153112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153158">SUSE bug 1153158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153236">SUSE bug 1153236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153263">SUSE bug 1153263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153476">SUSE bug 1153476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153509">SUSE bug 1153509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153607">SUSE bug 1153607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153646">SUSE bug 1153646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153681">SUSE bug 1153681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153713">SUSE bug 1153713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153717">SUSE bug 1153717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153718">SUSE bug 1153718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153719">SUSE bug 1153719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153811">SUSE bug 1153811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153969">SUSE bug 1153969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154108">SUSE bug 1154108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154189">SUSE bug 1154189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154242">SUSE bug 1154242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154268">SUSE bug 1154268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154354">SUSE bug 1154354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154372">SUSE bug 1154372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154521">SUSE bug 1154521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154578">SUSE bug 1154578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154607">SUSE bug 1154607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154608">SUSE bug 1154608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154610">SUSE bug 1154610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154611">SUSE bug 1154611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154651">SUSE bug 1154651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154737">SUSE bug 1154737</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154747">SUSE bug 1154747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154848">SUSE bug 1154848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154858">SUSE bug 1154858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154905">SUSE bug 1154905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154956">SUSE bug 1154956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155061">SUSE bug 1155061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155178">SUSE bug 1155178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155179">SUSE bug 1155179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155184">SUSE bug 1155184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155186">SUSE bug 1155186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155671">SUSE bug 1155671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802154">SUSE bug 802154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/814594">SUSE bug 814594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/919448">SUSE bug 919448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987367">SUSE bug 987367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998153">SUSE bug 998153</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12207/">CVE-2018-12207</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11135/">CVE-2019-11135</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16232/">CVE-2019-16232</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16233/">CVE-2019-16233</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16234/">CVE-2019-16234</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-16995/">CVE-2019-16995</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-17056/">CVE-2019-17056</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17133/">CVE-2019-17133</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-17666/">CVE-2019-17666</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496240" comment="kernel-docs-4.12.14-197.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496241" comment="kernel-obs-build-4.12.14-197.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496242" comment="kernel-source-4.12.14-197.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496243" comment="kernel-syms-4.12.14-197.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138200" version="1" class="patch">
	<metadata>
		<title>Security update for ncurses (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1103320" ref_url="https://bugzilla.suse.com/1103320" source="BUGZILLA"/>
		<reference ref_id="1154036" ref_url="https://bugzilla.suse.com/1154036" source="BUGZILLA"/>
		<reference ref_id="1154037" ref_url="https://bugzilla.suse.com/1154037" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17594" ref_url="https://www.suse.com/security/cve/CVE-2019-17594/" source="CVE"/>
		<reference ref_id="CVE-2019-17595" ref_url="https://www.suse.com/security/cve/CVE-2019-17595/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006155.html" source="SUSE-SU"/>
		<description>
This update for ncurses fixes the following issues:

Security issues fixed:

- CVE-2019-17594: Fixed a heap-based buffer over-read in the _nc_find_entry function (bsc#1154036).
- CVE-2019-17595: Fixed a heap-based buffer over-read in the fmt_entry function (bsc#1154037).

Non-security issue fixed:

- Removed screen.xterm from terminfo database (bsc#1103320).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-18"/>
	<updated date="2019-11-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1103320">SUSE bug 1103320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154036">SUSE bug 1154036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154037">SUSE bug 1154037</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17594/">CVE-2019-17594</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17595/">CVE-2019-17595</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496120" comment="ncurses-devel-32bit-6.1-5.6.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138201" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1146358" ref_url="https://bugzilla.suse.com/1146358" source="BUGZILLA"/>
		<reference ref_id="1146359" ref_url="https://bugzilla.suse.com/1146359" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8675" ref_url="https://www.suse.com/security/cve/CVE-2019-8675/" source="CVE"/>
		<reference ref_id="CVE-2019-8696" ref_url="https://www.suse.com/security/cve/CVE-2019-8696/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006159.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:
	  
- CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1_get_type function(bsc#1146358). 
- CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1_get_packed function (bsc#1146359).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-21"/>
	<updated date="2019-11-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1146358">SUSE bug 1146358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146359">SUSE bug 1146359</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8675/">CVE-2019-8675</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8696/">CVE-2019-8696</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496121" comment="cups-ddk-2.2.7-3.14.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138202" version="1" class="patch">
	<metadata>
		<title>Security update for gcc9 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1114592" ref_url="https://bugzilla.suse.com/1114592" source="BUGZILLA"/>
		<reference ref_id="1135254" ref_url="https://bugzilla.suse.com/1135254" source="BUGZILLA"/>
		<reference ref_id="1141897" ref_url="https://bugzilla.suse.com/1141897" source="BUGZILLA"/>
		<reference ref_id="1142649" ref_url="https://bugzilla.suse.com/1142649" source="BUGZILLA"/>
		<reference ref_id="1142654" ref_url="https://bugzilla.suse.com/1142654" source="BUGZILLA"/>
		<reference ref_id="1148517" ref_url="https://bugzilla.suse.com/1148517" source="BUGZILLA"/>
		<reference ref_id="1149145" ref_url="https://bugzilla.suse.com/1149145" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14250" ref_url="https://www.suse.com/security/cve/CVE-2019-14250/" source="CVE"/>
		<reference ref_id="CVE-2019-15847" ref_url="https://www.suse.com/security/cve/CVE-2019-15847/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006172.html" source="SUSE-SU"/>
		<description>


This update includes the GNU Compiler Collection 9.

A full changelog is provided by the GCC team on:

   https://www.gnu.org/software/gcc/gcc-9/changes.html


The base system compiler libraries libgcc_s1, libstdc++6 and others are
now built by the gcc 9 packages.

To use it, install 'gcc9' or 'gcc9-c++' or other compiler brands and use CC=gcc-9 /
CXX=g++-9 during configuration for using it.


Security issues fixed:

- CVE-2019-15847: Fixed a miscompilation in the POWER9 back end, that optimized multiple calls of the __builtin_darn intrinsic into a single call. (bsc#1149145)
- CVE-2019-14250: Fixed a heap overflow in the LTO linker. (bsc#1142649)

Non-security issues fixed:

- Split out libstdc++ pretty-printers into a separate package supplementing gdb and the installed runtime. (bsc#1135254)
- Fixed miscompilation for vector shift on s390. (bsc#1141897)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-25"/>
	<updated date="2019-11-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1114592">SUSE bug 1114592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135254">SUSE bug 1135254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141897">SUSE bug 1141897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142649">SUSE bug 1142649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142654">SUSE bug 1142654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148517">SUSE bug 1148517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149145">SUSE bug 1149145</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14250/">CVE-2019-14250</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15847/">CVE-2019-15847</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496122" comment="cpp9-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496123" comment="gcc9-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496124" comment="gcc9-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496125" comment="gcc9-ada-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496126" comment="gcc9-ada-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496127" comment="gcc9-c++-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496128" comment="gcc9-c++-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496129" comment="gcc9-fortran-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496130" comment="gcc9-fortran-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496131" comment="gcc9-go-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496132" comment="gcc9-go-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496133" comment="gcc9-info-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496134" comment="gcc9-locale-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496135" comment="libada9-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496136" comment="libada9-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496137" comment="libatomic1-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496244" comment="libstdc++6-devel-gcc9-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496139" comment="libstdc++6-devel-gcc9-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496140" comment="libstdc++6-pp-gcc9-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496141" comment="libstdc++6-pp-gcc9-32bit-9.2.1+r275327-1.3.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496142" comment="libubsan1-32bit-9.2.1+r275327-1.3.7 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138203" version="1" class="patch">
	<metadata>
		<title>Security update for libarchive (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1120653" ref_url="https://bugzilla.suse.com/1120653" source="BUGZILLA"/>
		<reference ref_id="1120654" ref_url="https://bugzilla.suse.com/1120654" source="BUGZILLA"/>
		<reference ref_id="1124341" ref_url="https://bugzilla.suse.com/1124341" source="BUGZILLA"/>
		<reference ref_id="1124342" ref_url="https://bugzilla.suse.com/1124342" source="BUGZILLA"/>
		<reference ref_id="1155079" ref_url="https://bugzilla.suse.com/1155079" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000877" ref_url="https://www.suse.com/security/cve/CVE-2018-1000877/" source="CVE"/>
		<reference ref_id="CVE-2018-1000878" ref_url="https://www.suse.com/security/cve/CVE-2018-1000878/" source="CVE"/>
		<reference ref_id="CVE-2019-1000019" ref_url="https://www.suse.com/security/cve/CVE-2019-1000019/" source="CVE"/>
		<reference ref_id="CVE-2019-1000020" ref_url="https://www.suse.com/security/cve/CVE-2019-1000020/" source="CVE"/>
		<reference ref_id="CVE-2019-18408" ref_url="https://www.suse.com/security/cve/CVE-2019-18408/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3093-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006196.html" source="SUSE-SU"/>
		<description>
This update for libarchive fixes the following issues:

Security issues fixed:

- CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653).
- CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654).
- CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341).
- CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342).
- CVE-2019-18408: Fixed a use-after-free in RAR format support (bsc#1155079).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-28"/>
	<updated date="2019-11-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1120653">SUSE bug 1120653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120654">SUSE bug 1120654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124341">SUSE bug 1124341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124342">SUSE bug 1124342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155079">SUSE bug 1155079</bugzilla>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000877/">CVE-2018-1000877</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000878/">CVE-2018-1000878</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1000019/">CVE-2019-1000019</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1000020/">CVE-2019-1000020</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-18408/">CVE-2019-18408</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496143" comment="bsdtar-3.3.2-3.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138204" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1048942" ref_url="https://bugzilla.suse.com/1048942" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1078248" ref_url="https://bugzilla.suse.com/1078248" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1089644" ref_url="https://bugzilla.suse.com/1089644" source="BUGZILLA"/>
		<reference ref_id="1091041" ref_url="https://bugzilla.suse.com/1091041" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1108043" ref_url="https://bugzilla.suse.com/1108043" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1117169" ref_url="https://bugzilla.suse.com/1117169" source="BUGZILLA"/>
		<reference ref_id="1118661" ref_url="https://bugzilla.suse.com/1118661" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1120853" ref_url="https://bugzilla.suse.com/1120853" source="BUGZILLA"/>
		<reference ref_id="1126390" ref_url="https://bugzilla.suse.com/1126390" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1131107" ref_url="https://bugzilla.suse.com/1131107" source="BUGZILLA"/>
		<reference ref_id="1134983" ref_url="https://bugzilla.suse.com/1134983" source="BUGZILLA"/>
		<reference ref_id="1135966" ref_url="https://bugzilla.suse.com/1135966" source="BUGZILLA"/>
		<reference ref_id="1135967" ref_url="https://bugzilla.suse.com/1135967" source="BUGZILLA"/>
		<reference ref_id="1137223" ref_url="https://bugzilla.suse.com/1137223" source="BUGZILLA"/>
		<reference ref_id="1137236" ref_url="https://bugzilla.suse.com/1137236" source="BUGZILLA"/>
		<reference ref_id="1138039" ref_url="https://bugzilla.suse.com/1138039" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1142095" ref_url="https://bugzilla.suse.com/1142095" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142924" ref_url="https://bugzilla.suse.com/1142924" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1149448" ref_url="https://bugzilla.suse.com/1149448" source="BUGZILLA"/>
		<reference ref_id="1150466" ref_url="https://bugzilla.suse.com/1150466" source="BUGZILLA"/>
		<reference ref_id="1151067" ref_url="https://bugzilla.suse.com/1151067" source="BUGZILLA"/>
		<reference ref_id="1151548" ref_url="https://bugzilla.suse.com/1151548" source="BUGZILLA"/>
		<reference ref_id="1151900" ref_url="https://bugzilla.suse.com/1151900" source="BUGZILLA"/>
		<reference ref_id="1152782" ref_url="https://bugzilla.suse.com/1152782" source="BUGZILLA"/>
		<reference ref_id="1153628" ref_url="https://bugzilla.suse.com/1153628" source="BUGZILLA"/>
		<reference ref_id="1153811" ref_url="https://bugzilla.suse.com/1153811" source="BUGZILLA"/>
		<reference ref_id="1154043" ref_url="https://bugzilla.suse.com/1154043" source="BUGZILLA"/>
		<reference ref_id="1154058" ref_url="https://bugzilla.suse.com/1154058" source="BUGZILLA"/>
		<reference ref_id="1154124" ref_url="https://bugzilla.suse.com/1154124" source="BUGZILLA"/>
		<reference ref_id="1154355" ref_url="https://bugzilla.suse.com/1154355" source="BUGZILLA"/>
		<reference ref_id="1154526" ref_url="https://bugzilla.suse.com/1154526" source="BUGZILLA"/>
		<reference ref_id="1154601" ref_url="https://bugzilla.suse.com/1154601" source="BUGZILLA"/>
		<reference ref_id="1155021" ref_url="https://bugzilla.suse.com/1155021" source="BUGZILLA"/>
		<reference ref_id="1155689" ref_url="https://bugzilla.suse.com/1155689" source="BUGZILLA"/>
		<reference ref_id="1155692" ref_url="https://bugzilla.suse.com/1155692" source="BUGZILLA"/>
		<reference ref_id="1155836" ref_url="https://bugzilla.suse.com/1155836" source="BUGZILLA"/>
		<reference ref_id="1155897" ref_url="https://bugzilla.suse.com/1155897" source="BUGZILLA"/>
		<reference ref_id="1155921" ref_url="https://bugzilla.suse.com/1155921" source="BUGZILLA"/>
		<reference ref_id="1155982" ref_url="https://bugzilla.suse.com/1155982" source="BUGZILLA"/>
		<reference ref_id="1156187" ref_url="https://bugzilla.suse.com/1156187" source="BUGZILLA"/>
		<reference ref_id="1156258" ref_url="https://bugzilla.suse.com/1156258" source="BUGZILLA"/>
		<reference ref_id="1156429" ref_url="https://bugzilla.suse.com/1156429" source="BUGZILLA"/>
		<reference ref_id="1156466" ref_url="https://bugzilla.suse.com/1156466" source="BUGZILLA"/>
		<reference ref_id="1156471" ref_url="https://bugzilla.suse.com/1156471" source="BUGZILLA"/>
		<reference ref_id="1156494" ref_url="https://bugzilla.suse.com/1156494" source="BUGZILLA"/>
		<reference ref_id="1156609" ref_url="https://bugzilla.suse.com/1156609" source="BUGZILLA"/>
		<reference ref_id="1156700" ref_url="https://bugzilla.suse.com/1156700" source="BUGZILLA"/>
		<reference ref_id="1156729" ref_url="https://bugzilla.suse.com/1156729" source="BUGZILLA"/>
		<reference ref_id="1156882" ref_url="https://bugzilla.suse.com/1156882" source="BUGZILLA"/>
		<reference ref_id="1156928" ref_url="https://bugzilla.suse.com/1156928" source="BUGZILLA"/>
		<reference ref_id="1157032" ref_url="https://bugzilla.suse.com/1157032" source="BUGZILLA"/>
		<reference ref_id="1157038" ref_url="https://bugzilla.suse.com/1157038" source="BUGZILLA"/>
		<reference ref_id="1157042" ref_url="https://bugzilla.suse.com/1157042" source="BUGZILLA"/>
		<reference ref_id="1157044" ref_url="https://bugzilla.suse.com/1157044" source="BUGZILLA"/>
		<reference ref_id="1157045" ref_url="https://bugzilla.suse.com/1157045" source="BUGZILLA"/>
		<reference ref_id="1157046" ref_url="https://bugzilla.suse.com/1157046" source="BUGZILLA"/>
		<reference ref_id="1157049" ref_url="https://bugzilla.suse.com/1157049" source="BUGZILLA"/>
		<reference ref_id="1157070" ref_url="https://bugzilla.suse.com/1157070" source="BUGZILLA"/>
		<reference ref_id="1157115" ref_url="https://bugzilla.suse.com/1157115" source="BUGZILLA"/>
		<reference ref_id="1157143" ref_url="https://bugzilla.suse.com/1157143" source="BUGZILLA"/>
		<reference ref_id="1157145" ref_url="https://bugzilla.suse.com/1157145" source="BUGZILLA"/>
		<reference ref_id="1157158" ref_url="https://bugzilla.suse.com/1157158" source="BUGZILLA"/>
		<reference ref_id="1157160" ref_url="https://bugzilla.suse.com/1157160" source="BUGZILLA"/>
		<reference ref_id="1157162" ref_url="https://bugzilla.suse.com/1157162" source="BUGZILLA"/>
		<reference ref_id="1157171" ref_url="https://bugzilla.suse.com/1157171" source="BUGZILLA"/>
		<reference ref_id="1157173" ref_url="https://bugzilla.suse.com/1157173" source="BUGZILLA"/>
		<reference ref_id="1157178" ref_url="https://bugzilla.suse.com/1157178" source="BUGZILLA"/>
		<reference ref_id="1157180" ref_url="https://bugzilla.suse.com/1157180" source="BUGZILLA"/>
		<reference ref_id="1157182" ref_url="https://bugzilla.suse.com/1157182" source="BUGZILLA"/>
		<reference ref_id="1157183" ref_url="https://bugzilla.suse.com/1157183" source="BUGZILLA"/>
		<reference ref_id="1157184" ref_url="https://bugzilla.suse.com/1157184" source="BUGZILLA"/>
		<reference ref_id="1157191" ref_url="https://bugzilla.suse.com/1157191" source="BUGZILLA"/>
		<reference ref_id="1157193" ref_url="https://bugzilla.suse.com/1157193" source="BUGZILLA"/>
		<reference ref_id="1157197" ref_url="https://bugzilla.suse.com/1157197" source="BUGZILLA"/>
		<reference ref_id="1157298" ref_url="https://bugzilla.suse.com/1157298" source="BUGZILLA"/>
		<reference ref_id="1157304" ref_url="https://bugzilla.suse.com/1157304" source="BUGZILLA"/>
		<reference ref_id="1157307" ref_url="https://bugzilla.suse.com/1157307" source="BUGZILLA"/>
		<reference ref_id="1157324" ref_url="https://bugzilla.suse.com/1157324" source="BUGZILLA"/>
		<reference ref_id="1157333" ref_url="https://bugzilla.suse.com/1157333" source="BUGZILLA"/>
		<reference ref_id="1157386" ref_url="https://bugzilla.suse.com/1157386" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1157463" ref_url="https://bugzilla.suse.com/1157463" source="BUGZILLA"/>
		<reference ref_id="1157499" ref_url="https://bugzilla.suse.com/1157499" source="BUGZILLA"/>
		<reference ref_id="1157678" ref_url="https://bugzilla.suse.com/1157678" source="BUGZILLA"/>
		<reference ref_id="1157698" ref_url="https://bugzilla.suse.com/1157698" source="BUGZILLA"/>
		<reference ref_id="1157778" ref_url="https://bugzilla.suse.com/1157778" source="BUGZILLA"/>
		<reference ref_id="1157908" ref_url="https://bugzilla.suse.com/1157908" source="BUGZILLA"/>
		<reference ref_id="1158049" ref_url="https://bugzilla.suse.com/1158049" source="BUGZILLA"/>
		<reference ref_id="1158063" ref_url="https://bugzilla.suse.com/1158063" source="BUGZILLA"/>
		<reference ref_id="1158064" ref_url="https://bugzilla.suse.com/1158064" source="BUGZILLA"/>
		<reference ref_id="1158065" ref_url="https://bugzilla.suse.com/1158065" source="BUGZILLA"/>
		<reference ref_id="1158066" ref_url="https://bugzilla.suse.com/1158066" source="BUGZILLA"/>
		<reference ref_id="1158067" ref_url="https://bugzilla.suse.com/1158067" source="BUGZILLA"/>
		<reference ref_id="1158068" ref_url="https://bugzilla.suse.com/1158068" source="BUGZILLA"/>
		<reference ref_id="1158071" ref_url="https://bugzilla.suse.com/1158071" source="BUGZILLA"/>
		<reference ref_id="1158082" ref_url="https://bugzilla.suse.com/1158082" source="BUGZILLA"/>
		<reference ref_id="1158381" ref_url="https://bugzilla.suse.com/1158381" source="BUGZILLA"/>
		<reference ref_id="1158394" ref_url="https://bugzilla.suse.com/1158394" source="BUGZILLA"/>
		<reference ref_id="1158398" ref_url="https://bugzilla.suse.com/1158398" source="BUGZILLA"/>
		<reference ref_id="1158407" ref_url="https://bugzilla.suse.com/1158407" source="BUGZILLA"/>
		<reference ref_id="1158410" ref_url="https://bugzilla.suse.com/1158410" source="BUGZILLA"/>
		<reference ref_id="1158413" ref_url="https://bugzilla.suse.com/1158413" source="BUGZILLA"/>
		<reference ref_id="1158417" ref_url="https://bugzilla.suse.com/1158417" source="BUGZILLA"/>
		<reference ref_id="1158427" ref_url="https://bugzilla.suse.com/1158427" source="BUGZILLA"/>
		<reference ref_id="1158445" ref_url="https://bugzilla.suse.com/1158445" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-0154" ref_url="https://www.suse.com/security/cve/CVE-2019-0154/" source="CVE"/>
		<reference ref_id="CVE-2019-14895" ref_url="https://www.suse.com/security/cve/CVE-2019-14895/" source="CVE"/>
		<reference ref_id="CVE-2019-14901" ref_url="https://www.suse.com/security/cve/CVE-2019-14901/" source="CVE"/>
		<reference ref_id="CVE-2019-15916" ref_url="https://www.suse.com/security/cve/CVE-2019-15916/" source="CVE"/>
		<reference ref_id="CVE-2019-16231" ref_url="https://www.suse.com/security/cve/CVE-2019-16231/" source="CVE"/>
		<reference ref_id="CVE-2019-17055" ref_url="https://www.suse.com/security/cve/CVE-2019-17055/" source="CVE"/>
		<reference ref_id="CVE-2019-18660" ref_url="https://www.suse.com/security/cve/CVE-2019-18660/" source="CVE"/>
		<reference ref_id="CVE-2019-18683" ref_url="https://www.suse.com/security/cve/CVE-2019-18683/" source="CVE"/>
		<reference ref_id="CVE-2019-18805" ref_url="https://www.suse.com/security/cve/CVE-2019-18805/" source="CVE"/>
		<reference ref_id="CVE-2019-18809" ref_url="https://www.suse.com/security/cve/CVE-2019-18809/" source="CVE"/>
		<reference ref_id="CVE-2019-19046" ref_url="https://www.suse.com/security/cve/CVE-2019-19046/" source="CVE"/>
		<reference ref_id="CVE-2019-19049" ref_url="https://www.suse.com/security/cve/CVE-2019-19049/" source="CVE"/>
		<reference ref_id="CVE-2019-19052" ref_url="https://www.suse.com/security/cve/CVE-2019-19052/" source="CVE"/>
		<reference ref_id="CVE-2019-19056" ref_url="https://www.suse.com/security/cve/CVE-2019-19056/" source="CVE"/>
		<reference ref_id="CVE-2019-19057" ref_url="https://www.suse.com/security/cve/CVE-2019-19057/" source="CVE"/>
		<reference ref_id="CVE-2019-19058" ref_url="https://www.suse.com/security/cve/CVE-2019-19058/" source="CVE"/>
		<reference ref_id="CVE-2019-19060" ref_url="https://www.suse.com/security/cve/CVE-2019-19060/" source="CVE"/>
		<reference ref_id="CVE-2019-19062" ref_url="https://www.suse.com/security/cve/CVE-2019-19062/" source="CVE"/>
		<reference ref_id="CVE-2019-19063" ref_url="https://www.suse.com/security/cve/CVE-2019-19063/" source="CVE"/>
		<reference ref_id="CVE-2019-19065" ref_url="https://www.suse.com/security/cve/CVE-2019-19065/" source="CVE"/>
		<reference ref_id="CVE-2019-19067" ref_url="https://www.suse.com/security/cve/CVE-2019-19067/" source="CVE"/>
		<reference ref_id="CVE-2019-19068" ref_url="https://www.suse.com/security/cve/CVE-2019-19068/" source="CVE"/>
		<reference ref_id="CVE-2019-19073" ref_url="https://www.suse.com/security/cve/CVE-2019-19073/" source="CVE"/>
		<reference ref_id="CVE-2019-19074" ref_url="https://www.suse.com/security/cve/CVE-2019-19074/" source="CVE"/>
		<reference ref_id="CVE-2019-19075" ref_url="https://www.suse.com/security/cve/CVE-2019-19075/" source="CVE"/>
		<reference ref_id="CVE-2019-19077" ref_url="https://www.suse.com/security/cve/CVE-2019-19077/" source="CVE"/>
		<reference ref_id="CVE-2019-19078" ref_url="https://www.suse.com/security/cve/CVE-2019-19078/" source="CVE"/>
		<reference ref_id="CVE-2019-19080" ref_url="https://www.suse.com/security/cve/CVE-2019-19080/" source="CVE"/>
		<reference ref_id="CVE-2019-19081" ref_url="https://www.suse.com/security/cve/CVE-2019-19081/" source="CVE"/>
		<reference ref_id="CVE-2019-19082" ref_url="https://www.suse.com/security/cve/CVE-2019-19082/" source="CVE"/>
		<reference ref_id="CVE-2019-19083" ref_url="https://www.suse.com/security/cve/CVE-2019-19083/" source="CVE"/>
		<reference ref_id="CVE-2019-19227" ref_url="https://www.suse.com/security/cve/CVE-2019-19227/" source="CVE"/>
		<reference ref_id="CVE-2019-19524" ref_url="https://www.suse.com/security/cve/CVE-2019-19524/" source="CVE"/>
		<reference ref_id="CVE-2019-19525" ref_url="https://www.suse.com/security/cve/CVE-2019-19525/" source="CVE"/>
		<reference ref_id="CVE-2019-19528" ref_url="https://www.suse.com/security/cve/CVE-2019-19528/" source="CVE"/>
		<reference ref_id="CVE-2019-19529" ref_url="https://www.suse.com/security/cve/CVE-2019-19529/" source="CVE"/>
		<reference ref_id="CVE-2019-19530" ref_url="https://www.suse.com/security/cve/CVE-2019-19530/" source="CVE"/>
		<reference ref_id="CVE-2019-19531" ref_url="https://www.suse.com/security/cve/CVE-2019-19531/" source="CVE"/>
		<reference ref_id="CVE-2019-19534" ref_url="https://www.suse.com/security/cve/CVE-2019-19534/" source="CVE"/>
		<reference ref_id="CVE-2019-19536" ref_url="https://www.suse.com/security/cve/CVE-2019-19536/" source="CVE"/>
		<reference ref_id="CVE-2019-19543" ref_url="https://www.suse.com/security/cve/CVE-2019-19543/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).
- CVE-2019-19543: There was a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c (bnc#1158427).
- CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver (bnc#1158417).
- CVE-2019-19530: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver (bnc#1158410).
- CVE-2019-19536: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver (bnc#1158394).
- CVE-2019-19524: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver (bnc#1158413).
- CVE-2019-19528: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (bnc#1158407).
- CVE-2019-19534: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver (bnc#1158398).
- CVE-2019-19529: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver (bnc#1158381).
- CVE-2019-14901: A heap overflow flaw was found in the Linux kernel in Marvell WiFi chip driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system (bnc#1157042).
- CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could have allowed the remote device to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1157158).
- CVE-2019-18660: The Linux kernel on powerpc allowed Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c (bnc#1157038).
- CVE-2019-18683: An issue was discovered in drivers/media/platform/vivid in the Linux kernel. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free (bnc#1155897).
- CVE-2019-18809: A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1156258).
- CVE-2019-19046: A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure (bnc#1157304).
- CVE-2019-19078: A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157032).
- CVE-2019-19062: A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures (bnc#1157333).
- CVE-2019-19057: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures (bnc#1157197).
- CVE-2019-19056: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures (bnc#1157197).
- CVE-2019-19068: A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157307).
- CVE-2019-19063: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157298).
- CVE-2019-19227: In the AppleTalk subsystem in the Linux kernel there was a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client (bnc#1157678).
- CVE-2019-19081: A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157045).
- CVE-2019-19080: Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157044).
- CVE-2019-19065: A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures (bnc#1157191).
- CVE-2019-19077: A memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering copy to udata failures (bnc#1157171).
- CVE-2019-19052: A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157324).
- CVE-2019-19067: Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures (bsc#1157180).
- CVE-2019-19060: A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157178).
- CVE-2019-19049: A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering of_fdt_unflatten_tree() failures (bsc#1157173).
- CVE-2019-19075: A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering ca8210_get_platform_data() failures (bnc#1157162).
- CVE-2019-19058: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures (bnc#1157145).
- CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157143).
- CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function (bnc#1157070).
- CVE-2019-19083: Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel allowed attackers to cause a denial of service (memory consumption). This affects the dce112_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, the dce100_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, the dcn20_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c, the dce120_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, and the dce80_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce80/dce80_resource.c (bnc#1157049).
- CVE-2019-19082: Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel allowed attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, the dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, and the dce112_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c (bnc#1157046).
- CVE-2019-15916: An issue was discovered in the Linux kernel There was a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service (bnc#1149448).
- CVE-2019-0154: Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1135966).
- CVE-2019-16231: drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150466).
- CVE-2019-18805: An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel There was a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact (bnc#1156187).
- CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket (bnc#1152782).

The following non-security bugs were fixed:

- bnxt_en: Update firmware interface spec. to 1.10.0.47 (bsc#1157115)
- ACPI / LPSS: Exclude I2C busses shared with PUNIT from pmc_atom_d3_mask (bsc#1051510).
- ACPI / SBS: Fix rare oops when removing modules (bsc#1051510).
- ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug bridge (bsc#1111666).
- ACPICA: Never run _REG on system_memory and system_IO (bsc#1051510).
- ACPICA: Use %d for signed int print formatting instead of %u (bsc#1051510).
- ALSA: 6fire: Drop the dead code (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (git-fixes).
- ALSA: cs4236: fix error return comparison of an unsigned integer (git-fixes).
- ALSA: firewire-motu: Correct a typo in the clock proc string (git-fixes).
- ALSA: hda - Add mute led support for HP ProBook 645 G4 (git-fixes).
- ALSA: hda - Fix pending unsol events at shutdown (git-fixes).
- ALSA: hda/ca0132 - Fix possible workqueue stall (bsc#1155836).
- ALSA: hda/hdmi - Clear codec-&gt;relaxed_resume flag at unbinding (git-fixes).
- ALSA: hda/intel: add CometLake PCI IDs (bsc#1156729).
- ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC (git-fixes).
- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (git-fixes).
- ALSA: hda/realtek - Move some alc236 pintbls to fallback table (git-fixes).
- ALSA: hda/realtek - Move some alc256 pintbls to fallback table (git-fixes).
- ALSA: hda: Add Cometlake-S PCI ID (git-fixes).
- ALSA: hda: Fix racy display power access (bsc#1156928).
- ALSA: hda: hdmi - fix port numbering for ICL and TGL platforms (git-fixes).
- ALSA: hda: hdmi - remove redundant code comments (git-fixes).
- ALSA: i2c/cs8427: Fix int to char conversion (bsc#1051510).
- ALSA: intel8x0m: Register irq handler after register initializations (bsc#1051510).
- ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed() (git-fixes).
- ALSA: pcm: Yet another missing check of non-cached buffer type (bsc#1111666).
- ALSA: pcm: signedness bug in snd_pcm_plug_alloc() (bsc#1051510).
- ALSA: seq: Do error checks at creating system ports (bsc#1051510).
- ALSA: timer: Fix incorrectly assigned timer instance (git-fixes).
- ALSA: usb-audio: Add skip_validation option (git-fixes).
- ALSA: usb-audio: Fix Focusrite Scarlett 6i6 gen1 - input handling (git-fixes).
- ALSA: usb-audio: Fix NULL dereference at parsing BADD (git-fixes).
- ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() (git-fixes).
- ALSA: usb-audio: Fix incorrect size check for processing/extension units (git-fixes).
- ALSA: usb-audio: Fix missing error check at mixer resolution test (git-fixes).
- ALSA: usb-audio: not submit urb for stopped endpoint (git-fixes).
- ALSA: usb-audio: sound: usb: usb true/false for bool return type (git-fixes).
- ASoC: Intel: hdac_hdmi: Limit sampling rates at dai creation (bsc#1051510).
- ASoC: davinci-mcasp: Handle return value of devm_kasprintf (stable 4.14.y).
- ASoC: davinci: Kill BUG_ON() usage (stable 4.14.y).
- ASoC: dpcm: Properly initialise hw-&gt;rate_max (bsc#1051510).
- ASoC: kirkwood: fix external clock probe defer (git-fixes).
- ASoC: msm8916-wcd-analog: Fix RX1 selection in RDAC2 MUX (git-fixes).
- ASoC: sgtl5000: avoid division by zero if lo_vag is zero (bsc#1051510).
- ASoC: tegra_sgtl5000: fix device_node refcounting (bsc#1051510).
- ASoC: tlv320aic31xx: Handle inverted BCLK in non-DSP modes (stable 4.14.y).
- ASoC: tlv320dac31xx: mark expected switch fall-through (stable 4.14.y).
- Bluetooth: Fix invalid-free in bcsp_close() (git-fixes).
- Bluetooth: Fix memory leak in hci_connect_le_scan (bsc#1051510).
- Bluetooth: L2CAP: Detect if remote is not able to use the whole MPS (bsc#1051510).
- Bluetooth: btusb: fix PM leak in error case of setup (bsc#1051510).
- Bluetooth: delete a stray unlock (bsc#1051510).
- Bluetooth: hci_core: fix init for HCI_USER_CHANNEL (bsc#1051510).
- Btrfs: fix log context list corruption after rename exchange operation (bsc#1156494).
- CIFS: Fix SMB2 oplock break processing (bsc#1144333, bsc#1154355).
- CIFS: Fix oplock handling for SMB 2.1+ protocols (bsc#1144333, bsc#1154355).
- CIFS: Fix retry mid list corruption on reconnects (bsc#1144333, bsc#1154355).
- CIFS: Fix use after free of file info structures (bsc#1144333, bsc#1154355).
- CIFS: Force reval dentry if LOOKUP_REVAL flag is set (bsc#1144333, bsc#1154355).
- CIFS: Force revalidate inode when dentry is stale (bsc#1144333, bsc#1154355).
- CIFS: Gracefully handle QueryInfo errors during open (bsc#1144333, bsc#1154355).
- CIFS: avoid using MID 0xFFFF (bsc#1144333, bsc#1154355).
- CIFS: fix max ea value size (bsc#1144333, bsc#1154355).
- Documentation: debugfs: Document debugfs helper for unsigned long values (git-fixes).
- Documentation: x86: convert protection-keys.txt to reST (bsc#1078248).
- EDAC/ghes: Fix Use after free in ghes_edac remove path (bsc#1114279).
- HID: Add ASUS T100CHI keyboard dock battery quirks (bsc#1051510).
- HID: Add quirk for Microsoft PIXART OEM mouse (bsc#1051510).
- HID: Fix assumption that devices have inputs (git-fixes).
- HID: asus: Add T100CHI bluetooth keyboard dock special keys mapping (bsc#1051510).
- HID: wacom: generic: Treat serial number and related fields as unsigned (git-fixes).
- IB/mlx5: Free mpi in mp_slave mode (bsc#1103991).
- IB/mlx5: Support MLX5_CMD_OP_QUERY_LAG as a DEVX general command (bsc#1103991).
- Input: ff-memless - kill timer in destroy() (bsc#1051510).
- Input: silead - try firmware reload after unsuccessful resume (bsc#1051510).
- Input: st1232 - set INPUT_PROP_DIRECT property (bsc#1051510).
- Input: synaptics-rmi4 - clear IRQ enables for F54 (bsc#1051510).
- Input: synaptics-rmi4 - destroy F54 poller workqueue when removing (bsc#1051510).
- Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver (bsc#1051510).
- Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) (bsc#1051510).
- Input: synaptics-rmi4 - fix video buffer size (git-fixes).
- KVM: SVM: Guard against DEACTIVATE when performing WBINVD/DF_FLUSH (bsc#1114279).
- KVM: SVM: Serialize access to the SEV ASID bitmap (bsc#1114279).
- KVM: VMX: Consider PID.PIR to determine if vCPU has pending interrupts (bsc#1158064).
- KVM: VMX: Fix conditions for guest IA32_XSS support (bsc#1158065).
- KVM: s390: fix __insn32_query() inline assembly (git-fixes).
- KVM: s390: vsie: Do not shadow CRYCB when no AP and no keys (git-fixes).
- KVM: s390: vsie: Return correct values for Invalid CRYCB format (git-fixes).
- KVM: x86/mmu: Take slots_lock when using kvm_mmu_zap_all_fast() (bsc#1158067).
- KVM: x86: Introduce vcpu-&gt;arch.xsaves_enabled (bsc#1158066).
- NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error (git-fixes).
- PCI/ACPI: Correct error message for ASPM disabling (bsc#1051510).
- PCI/MSI: Fix incorrect MSI-X masking on resume (bsc#1051510).
- PCI/PM: Clear PCIe PME Status even for legacy power management (bsc#1111666).
- PCI/PME: Fix possible use-after-free on remove (git-fixes).
- PCI/PTM: Remove spurious 'd' from granularity message (bsc#1051510).
- PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3 (bsc#1051510).
- PCI: Fix Intel ACS quirk UPDCR register address (bsc#1051510).
- PCI: dwc: Fix find_next_bit() usage (bsc#1051510).
- PCI: pciehp: Do not disable interrupt twice on suspend (bsc#1111666).
- PCI: rcar: Fix missing MACCTLR register setting in initialization sequence (bsc#1051510).
- PCI: sysfs: Ignore lockdep for remove attribute (git-fixes).
- PCI: tegra: Enable Relaxed Ordering only for Tegra20 and Tegra30 (git-fixes).
- PM / devfreq: Check NULL governor in available_governors_show (git-fixes).
- PM / devfreq: Lock devfreq in trans_stat_show (git-fixes).
- PM / devfreq: exynos-bus: Correct clock enable sequence (bsc#1051510).
- PM / devfreq: passive: Use non-devm notifiers (bsc#1051510).
- PM / devfreq: passive: fix compiler warning (bsc#1051510).
- PM / hibernate: Check the success of generating md5 digest before hibernation (bsc#1051510).
- RDMA/bnxt_re: Fix stat push into dma buffer on gen p5 devices (bsc#1157115)
- RDMA/efa: Add Amazon EFA driver (jsc#SLE-4805)
- RDMA/efa: Clear the admin command buffer prior to its submission (git-fixes) Patch was already picked through Amazon driver repo but was not marked with a Git-commit tag
- RDMA/hns: Fix comparison of unsigned long variable 'end' with less than zero (bsc#1104427 bsc#1137236).
- RDMA/hns: Fix wrong assignment of qp_access_flags (bsc#1104427 ).
- RDMA/restrack: Track driver QP types in resource tracker (jsc#SLE-4805)
- Remove patches that reportedly cause regression (bsc#1155689 ltc#182047).
- Revert 'drm/etnaviv: fix dumping of iommuv2 (bsc#1113722)' This reverts commit 71e3a1b8d8cf73f711f3e4100aa51f68e631f94f.
- Revert synaptics-rmi4 patch due to regression (bsc#1155982) Also blacklisting it
- UAS: Revert commit 3ae62a42090f ('UAS: fix alignment of scatter/gather segments').
- USB: chaoskey: fix error case of a timeout (git-fixes).
- USB: gadget: Reject endpoints with 0 maxpacket value (bsc#1051510).
- USB: ldusb: fix control-message timeout (bsc#1051510).
- USB: ldusb: fix ring-buffer locking (bsc#1051510).
- USB: misc: appledisplay: fix backlight update_status return code (bsc#1051510).
- USB: serial: mos7720: fix remote wakeup (git-fixes).
- USB: serial: mos7840: add USB ID to support Moxa UPort 2210 (bsc#1051510).
- USB: serial: mos7840: fix remote wakeup (git-fixes).
- USB: serial: option: add support for DW5821e with eSIM support (bsc#1051510).
- USB: serial: option: add support for Foxconn T77W968 LTE modules (bsc#1051510).
- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: serial: whiteheat: fix potential slab corruption (bsc#1051510).
- USBIP: add config dependency for SGL_ALLOC (git-fixes).
- acpi/nfit, device-dax: Identify differentiated memory with a unique numa-node (bsc#1158071).
- appledisplay: fix error handling in the scheduled work (git-fixes).
- arm64: Update config files. (bsc#1156466) Enable HW_RANDOM_OMAP driver and mark driver omap-rng as supported.
- ata: ep93xx: Use proper enums for directions (bsc#1051510).
- ath10k: Correct error handling of dma_map_single() (bsc#1111666).
- ath10k: allocate small size dma memory in ath10k_pci_diag_write_mem (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3 (bsc#1111666).
- ath10k: avoid possible memory access violation (bsc#1111666).
- ath10k: fix kernel panic by moving pci flush after napi_disable (bsc#1051510).
- ath10k: fix vdev-start timeout on error (bsc#1051510).
- ath10k: limit available channels via DT ieee80211-freq-limit (bsc#1051510).
- ath10k: skip resetting rx filter for WCN3990 (bsc#1111666).
- ath10k: wmi: disable softirq's while calling ieee80211_rx (bsc#1051510).
- ath9k: Fix a locking bug in ath9k_add_interface() (bsc#1051510).
- ath9k: add back support for using active monitor interfaces for tx99 (bsc#1051510).
- ath9k: fix reporting calculated new FFT upper max (bsc#1051510).
- ath9k: fix tx99 with monitor mode interface (bsc#1051510).
- ath9k_hw: fix uninitialized variable data (bsc#1051510).
- ax88172a: fix information leak on short answers (bsc#1051510).
- backlight: lm3639: Unconditionally call led_classdev_unregister (bsc#1051510).
- bnxt_en: Increase timeout for HWRM_DBG_COREDUMP_XX commands (bsc#1104745).
- bnxt_en: Update firmware interface spec. to 1.10.0.89 (bsc#1157115)
- bnxt_en: Update firmware interface to 1.10.0.69 (bsc#1157115)
- bpf: Fix use after free in subprog's jited symbol removal (bsc#1109837).
- bpf: fix BTF limits (bsc#1109837).
- bpf: fix BTF verification of enums (bsc#1109837).
- brcmfmac: fix full timeout waiting for action frame on-channel tx (bsc#1051510).
- brcmfmac: fix wrong strnchr usage (bsc#1111666).
- brcmfmac: increase buffer for obtaining firmware capabilities (bsc#1111666).
- brcmfmac: reduce timeout for action frame scan (bsc#1051510).
- brcmsmac: AP mode: update beacon when TIM changes (bsc#1051510).
- brcmsmac: Use kvmalloc() for ucode allocations (bsc#1111666).
- brcmsmac: never log 'tid x is not agg'able' by default (bsc#1051510).
- can: c_can: c_can_poll(): only read status register after status IRQ (git-fixes).
- can: dev: call netif_carrier_off() in register_candev() (bsc#1051510).
- can: mcba_usb: fix use-after-free on disconnect (git-fixes).
- can: peak_usb: fix a potential out-of-sync while decoding packets (git-fixes).
- can: peak_usb: fix slab info leak (git-fixes).
- can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue beyond skb_queue_len_max (git-fixes).
- can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak (git-fixes).
- can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb mem leak (git-fixes).
- can: usb_8dev: fix use-after-free on disconnect (git-fixes).
- ceph: add missing check in d_revalidate snapdir handling (bsc#1157183).
- ceph: do not try to handle hashed dentries in non-O_CREAT atomic_open (bsc#1157184).
- ceph: fix use-after-free in __ceph_remove_cap() (bsc#1154058).
- ceph: just skip unrecognized info in ceph_reply_info_extra (bsc#1157182).
- cfg80211: Avoid regulatory restore when COUNTRY_IE_IGNORE is set (bsc#1051510).
- cfg80211: Prevent regulatory restore during STA disconnect in concurrent interfaces (bsc#1051510).
- cfg80211: call disconnect_wk when AP stops (bsc#1051510).
- cfg80211: validate wmm rule when setting (bsc#1111666).
- cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (bsc#1144333, bsc#1154355).
- cifs: Fix missed free operations (bsc#1144333, bsc#1154355).
- cifs: Use kzfree() to zero out the password (bsc#1144333, bsc#1154355).
- cifs: add a helper to find an existing readable handle to a file (bsc#1144333, bsc#1154355).
- cifs: create a helper to find a writeable handle by path name (bsc#1144333, bsc#1154355).
- cifs: move cifsFileInfo_put logic into a work-queue (bsc#1144333, bsc#1154355).
- cifs: prepare SMB2_Flush to be usable in compounds (bsc#1144333, bsc#1154355).
- cifs: set domainName when a domain-key is used in multiuser (bsc#1144333, bsc#1154355).
- cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (bsc#1144333, bsc#1154355).
- cifs: use existing handle for compound_op(OP_SET_INFO) when possible (bsc#1144333, bsc#1154355).
- clk: at91: avoid sleeping early (git-fixes).
- clk: pxa: fix one of the pxa RTC clocks (bsc#1051510).
- clk: samsung: Use clk_hw API for calling clk framework from clk notifiers (bsc#1051510).
- clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume (bsc#1051510).
- clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume (git-fixes).
- clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18 (git-fixes).
- clocksource/drivers/sh_cmt: Fix clocksource width for 32-bit machines (bsc#1051510).
- clocksource/drivers/sh_cmt: Fixup for 64-bit machines (bsc#1051510).
- compat_ioctl: handle SIOCOUTQNSD (bsc#1051510).
- component: fix loop condition to call unbind() if bind() fails (bsc#1051510).
- cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init() (bsc#1051510).
- cpufreq: Skip cpufreq resume if it's not suspended (bsc#1051510).
- cpufreq: intel_pstate: Register when ACPI PCCH is present (bsc#1051510).
- cpufreq: powernv: fix stack bloat and hard limit on number of CPUs (bsc#1051510).
- cpufreq: ti-cpufreq: add missing of_node_put() (bsc#1051510).
- cpupower : Fix cpupower working when cpu0 is offline (bsc#1051510).
- cpupower : frequency-set -r option misses the last cpu in related cpu list (bsc#1051510).
- cpupower: Fix coredump on VMWare (bsc#1051510).
- crypto: af_alg - cast ki_complete ternary op to int (bsc#1051510).
- crypto: crypto4xx - fix double-free in crypto4xx_destroy_sdr (bsc#1051510).
- crypto: ecdh - fix big endian bug in ECC library (bsc#1051510).
- crypto: fix a memory leak in rsa-kcs1pad's encryption mode (bsc#1051510).
- crypto: geode-aes - switch to skcipher for cbc(aes) fallback (bsc#1051510).
- crypto: mxs-dcp - Fix AES issues (bsc#1051510).
- crypto: mxs-dcp - Fix SHA null hashes and output length (bsc#1051510).
- crypto: mxs-dcp - make symbols 'sha1_null_hash' and 'sha256_null_hash' static (bsc#1051510).
- crypto: s5p-sss: Fix Fix argument list alignment (bsc#1051510).
- crypto: tgr192 - remove unneeded semicolon (bsc#1051510).
- cw1200: Fix a signedness bug in cw1200_load_firmware() (bsc#1051510).
- cxgb4: fix panic when attaching to ULD fail (networking-stable-19_11_05).
- cxgb4: request the TX CIDX updates to status page (bsc#1127354 bsc#1127371).
- dccp: do not leak jiffies on the wire (networking-stable-19_11_05).
- dlm: do not leak kernel pointer to userspace (bsc#1051510).
- dlm: fix invalid free (bsc#1051510).
- dmaengine: bcm2835: Print error in case setting DMA mask fails (bsc#1051510).
- dmaengine: dma-jz4780: Do not depend on MACH_JZ4780 (bsc#1051510).
- dmaengine: dma-jz4780: Further residue status fix (bsc#1051510).
- dmaengine: ep93xx: Return proper enum in ep93xx_dma_chan_direction (bsc#1051510).
- dmaengine: imx-sdma: fix size check for sdma script_number (bsc#1051510).
- dmaengine: imx-sdma: fix use-after-free on probe error path (bsc#1051510).
- dmaengine: rcar-dmac: set scatter/gather max segment size (bsc#1051510).
- dmaengine: timb_dma: Use proper enum in td_prep_slave_sg (bsc#1051510).
- docs: move protection-keys.rst to the core-api book (bsc#1078248).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported (bsc#1113956)
- drm/amdgpu/powerplay/vega10: allow undervolting in p7 (bsc#1111666).
- drm/amdgpu: fix bad DMA from INTERRUPT_CNTL2 (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/etnaviv: fix dumping of iommuv2 (bsc#1113722)
- drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)
- drm/i915/cmdparser: Ignore Length operands during command matching (bsc#1135967)
- drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)
- drm/i915/gtt: Add read only pages to gen8_pte_encode (bsc#1135967)
- drm/i915/gtt: Disable read-only support under GVT (bsc#1135967)
- drm/i915/gtt: Read-only pages for insert_entries on bdw (bsc#1135967)
- drm/i915/gvt: fix dropping obj reference twice (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no output (bsc#1111666).
- drm/i915/pmu: 'Frequency' is reported as accumulated cycles (bsc#1112178)
- drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)
- drm/i915: Add support for mandatory cmdparsing (bsc#1135967)
- drm/i915: Allow parsing of unsized batches (bsc#1135967)
- drm/i915: Disable Secure Batches for gen6+
- drm/i915: Do not dereference request if it may have been retired when (bsc#1142635)
- drm/i915: Fix and improve MCR selection logic (bsc#1112178)
- drm/i915: Lock the engine while dumping the active request (bsc#1142635)
- drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)
- drm/i915: Prevent writing into a read-only object via a GGTT mmap (bsc#1135967)
- drm/i915: Reacquire priolist cache after dropping the engine lock (bsc#1129770)
- drm/i915: Remove Master tables from cmdparser
- drm/i915: Rename gen7 cmdparser tables (bsc#1135967)
- drm/i915: Skip modeset for cdclk changes if possible (bsc#1156928).
- drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (bsc#1135967)
- drm/msm/dpu: handle failures while initializing displays (bsc#1111666).
- drm/msm: fix memleak on release (bsc#1111666).
- drm/omap: fix max fclk divider for omap36xx (bsc#1113722)
- drm/radeon: fix bad DMA from INTERRUPT_CNTL2 (git-fixes).
- drm/radeon: fix si_enable_smc_cac() failed issue (bsc#1113722)
- drm: fix module name in edid_firmware log message (bsc#1113956)
- e1000e: Drop unnecessary __E1000_DOWN bit twiddling (bsc#1158049).
- e1000e: Use dev_get_drvdata where possible (bsc#1158049).
- e1000e: Use rtnl_lock to prevent race conditions between net and pci/pm (bsc#1158049).
- extcon: cht-wc: Return from default case to avoid warnings (bsc#1051510).
- fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper() (bsc#1051510).
- fbdev: sbuslib: use checked version of put_user() (bsc#1051510).
- fix SCTP regression (bsc#1158082).
- ftrace: Introduce PERMANENT ftrace_ops flag (bsc#1120853).
- gpio: mpc8xxx: Do not overwrite default irq_set_type callback (bsc#1051510).
- gpio: syscon: Fix possible NULL ptr usage (bsc#1051510).
- gpiolib: acpi: Add Terra Pad 1061 to the run_edge_events_on_boot_blacklist (bsc#1051510).
- gsmi: Fix bug in append_to_eventlog sysfs handler (bsc#1051510).
- hwmon: (ina3221) Fix INA3221_CONFIG_MODE macros (bsc#1051510).
- hwmon: (pwm-fan) Silence error on probe deferral (bsc#1051510).
- hwrng: omap - Fix RNG wait loop timeout (bsc#1051510).
- hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled (bsc#1051510).
- hypfs: Fix error number left in struct pointer member (bsc#1051510).
- i2c: of: Try to find an I2C adapter matching the parent (bsc#1129770)
- i40e: enable X710 support (bsc#1151067).
- ibmvnic: Bound waits for device queries (bsc#1155689 ltc#182047).
- ibmvnic: Fix completion structure initialization (bsc#1155689 ltc#182047).
- ibmvnic: Serialize device queries (bsc#1155689 ltc#182047).
- ibmvnic: Terminate waiting device threads after loss of service (bsc#1155689 ltc#182047).
- ice: fix potential infinite loop because loop counter being too small (bsc#1118661).
- iio: adc: max9611: explicitly cast gain_selectors (bsc#1051510).
- iio: adc: stm32-adc: fix stopping dma (git-fixes).
- iio: dac: mcp4922: fix error handling in mcp4922_write_raw (bsc#1051510).
- iio: imu: adis16480: assign bias value only if operation succeeded (git-fixes).
- iio: imu: adis16480: make sure provided frequency is positive (git-fixes).
- iio: imu: adis: assign read val in debugfs hook only if op successful (git-fixes).
- iio: imu: adis: assign value only if return code zero in read funcs (git-fixes).
- include/linux/bitrev.h: fix constant bitrev (bsc#1114279).
- inet: stop leaking jiffies on the wire (networking-stable-19_11_05).
- intel_th: Fix a double put_device() in error path (git-fixes).
- iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros (bsc#1158063).
- ipmi:dmi: Ignore IPMI SMBIOS entries with a zero base address (bsc#1051510).
- ipv4: Return -ENETUNREACH if we can't create route but saddr is valid (networking-stable-19_10_24).
- irqdomain: Add the missing assignment of domain-&gt;fwnode for named fwnode (bsc#1111666).
- iwlwifi: api: annotate compressed BA notif array sizes (bsc#1051510).
- iwlwifi: check kasprintf() return value (bsc#1051510).
- iwlwifi: do not panic in error path on non-msix systems (bsc#1155692).
- iwlwifi: drop packets with bad status in CD (bsc#1111666).
- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- iwlwifi: fw: do not send GEO_TX_POWER_LIMIT command to FW version 36 (bsc#1111666).
- iwlwifi: mvm: avoid sending too many BARs (bsc#1051510).
- iwlwifi: mvm: do not send keys when entering D3 (bsc#1051510).
- iwlwifi: mvm: use correct FIFO length (bsc#1111666).
- iwlwifi: pcie: fit reclaim msg to MAX_MSG_LEN (bsc#1111666).
- iwlwifi: pcie: read correct prph address for newer devices (bsc#1111666).
- ixgbe: fix double clean of Tx descriptors with xdp (bsc#1113994 ).
- ixgbevf: Fix secpath usage for IPsec Tx offload (bsc#1113994 ).
- kABI fixup alloc_dax_region (bsc#1158071).
- kABI workaround for ath10k hw_filter_reset_required field (bsc#1111666).
- kABI workaround for ath10k last_wmi_vdev_start_status field (bsc#1051510).
- kABI workaround for drm_vma_offset_node readonly field addition (bsc#1135967)
- kABI workaround for iwlwifi iwl_rx_cmd_buffer change (bsc#1111666).
- kABI workaround for struct mwifiex_power_cfg change (bsc#1051510).
- kABI: Fix for 'KVM: x86: Introduce vcpu-&gt;arch.xsaves_enabled' (bsc#1158066).
- kabi protect enum RDMA_DRIVER_EFA (jsc#SLE-4805)
- kabi: s390: struct subchannel (git-fixes).
- lib/scatterlist: Fix chaining support in sgl_alloc_order() (git-fixes).
- lib/scatterlist: Introduce sgl_alloc() and sgl_free() (git-fixes).
- libnvdimm: Export the target_node attribute for regions and namespaces (bsc#1158071).
- liquidio: fix race condition in instruction completion processing (bsc#1051510).
- livepatch: Allow to distinguish different version of system state changes (bsc#1071995).
- livepatch: Basic API to track system state changes (bsc#1071995 ).
- livepatch: Keep replaced patches until post_patch callback is called (bsc#1071995).
- livepatch: Selftests of the API for tracking system state changes (bsc#1071995).
- loop: add ioctl for changing logical block size (bsc#1108043).
- lpfc: size cpu map by last cpu id set (bsc#1157160).
- mISDN: Fix type of switch control variable in ctrl_teimanager (bsc#1051510).
- mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED (bsc#1051510).
- mac80211: minstrel: fix CCK rate group streams value (bsc#1051510).
- mac80211: minstrel: fix sampling/reporting of CCK rates in HT mode (bsc#1051510).
- macvlan: schedule bc_work even if error (bsc#1051510).
- mailbox: reset txdone_method TXDONE_BY_POLL if client knows_txdone (git-fixes).
- media: au0828: Fix incorrect error messages (bsc#1051510).
- media: bdisp: fix memleak on release (git-fixes).
- media: cxusb: detect cxusb_ctrl_msg error in query (bsc#1051510).
- media: davinci: Fix implicit enum conversion warning (bsc#1051510).
- media: exynos4-is: Fix recursive locking in isp_video_release() (git-fixes).
- media: fix: media: pci: meye: validate offset to avoid arbitrary access (bsc#1051510).
- media: flexcop-usb: ensure -EIO is returned on error condition (git-fixes).
- media: imon: invalid dereference in imon_touch_event (bsc#1051510).
- media: isif: fix a NULL pointer dereference bug (bsc#1051510).
- media: pci: ivtv: Fix a sleep-in-atomic-context bug in ivtv_yuv_init() (bsc#1051510).
- media: pxa_camera: Fix check for pdev-&gt;dev.of_node (bsc#1051510).
- media: radio: wl1273: fix interrupt masking on release (git-fixes).
- media: ti-vpe: vpe: Fix Motion Vector vpdma stride (git-fixes).
- media: usbvision: Fix races among open, close, and disconnect (bsc#1051510).
- media: vim2m: Fix abort issue (git-fixes).
- media: vivid: Set vid_cap_streaming and vid_out_streaming to true (bsc#1051510).
- mei: fix modalias documentation (git-fixes).
- mei: samples: fix a signedness bug in amt_host_if_call() (bsc#1051510).
- mfd: intel-lpss: Add default I2C device properties for Gemini Lake (bsc#1051510).
- mfd: max8997: Enale irq-wakeup unconditionally (bsc#1051510).
- mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values (bsc#1051510).
- mfd: palmas: Assign the right powerhold mask for tps65917 (git-fixes).
- mfd: ti_am335x_tscadc: Keep ADC interface on if child is wakeup capable (bsc#1051510).
- mlx5: add parameter to disable enhanced IPoIB (bsc#1142095)
- mlx5: add parameter to disable enhanced IPoIB (bsc#1142095) Fix badly backported patch
- mlxsw: spectrum_flower: Fail in case user specifies multiple mirror actions (bsc#1112374).
- mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d() (git fixes (mm/gup)).
- mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone (git fixes (mm/compaction)).
- mm/debug.c: PageAnon() is true for PageKsm() pages (git fixes (mm/debug)).
- mmc: core: fix wl1251 sdio quirks (git-fixes).
- mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of pandora_wl1251_init_card (git-fixes).
- mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail (bsc#1051510).
- mmc: sdhci-esdhc-imx: correct the fix of ERR004536 (git-fixes).
- mmc: sdhci-of-at91: fix quirk2 overwrite (git-fixes).
- mmc: sdio: fix wl1251 vendor id (git-fixes).
- mt7601u: fix bbp version check in mt7601u_wait_bbp_ready (bsc#1051510).
- mt76x0: init hw capabilities.
- mtd: nand: mtk: fix incorrect register setting order about ecc irq.
- mtd: spear_smi: Fix Write Burst mode (bsc#1051510).
- mtd: spi-nor: fix silent truncation in spi_nor_read() (bsc#1051510).
- mwifex: free rx_cmd skb in suspended state (bsc#1111666).
- mwifiex: Fix NL80211_TX_POWER_LIMITED (bsc#1051510).
- mwifiex: do no submit URB in suspended state (bsc#1111666).
- net/ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes).
- net/mlx4_core: Dynamically set guaranteed amount of counters per VF (networking-stable-19_11_05).
- net/mlx5: FWTrace, Reduce stack usage (bsc#1103990).
- net/mlx5e: Fix eswitch debug print of max fdb flow (bsc#1103990 ).
- net/mlx5e: Fix ethtool self test: link speed (bsc#1103990 ).
- net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget (networking-stable-19_11_05).
- net/mlx5e: Print a warning when LRO feature is dropped or not allowed (bsc#1103990).
- net/sched: cbs: Fix not adding cbs instance to list (bsc#1109837).
- net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate (bsc#1109837).
- net/smc: Fix error path in smc_init (git-fixes).
- net/smc: avoid fallback in case of non-blocking connect (git-fixes).
- net/smc: do not schedule tx_work in SMC_CLOSED state (git-fixes).
- net/smc: fix SMCD link group creation with VLAN id (git-fixes).
- net/smc: fix closing of fallback SMC sockets (git-fixes).
- net/smc: fix ethernet interface refcounting (git-fixes).
- net/smc: fix fastopen for non-blocking connect() (git-fixes).
- net/smc: fix refcount non-blocking connect() -part 2 (git-fixes).
- net/smc: fix refcounting for non-blocking connect() (git-fixes).
- net/smc: keep vlan_id for SMC-R in smc_listen_work() (git-fixes).
- net/smc: original socket family in inet_sock_diag (git-fixes).
- net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol() (networking-stable-19_11_05).
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (networking-stable-19_11_05).
- net: add skb_queue_empty_lockless() (networking-stable-19_11_05).
- net: annotate accesses to sk-&gt;sk_incoming_cpu (networking-stable-19_11_05).
- net: annotate lockless accesses to sk-&gt;sk_napi_id (networking-stable-19_11_05).
- net: avoid potential infinite loop in tc_ctl_action() (networking-stable-19_10_24).
- net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3 (networking-stable-19_10_24).
- net: bcmgenet: Set phydev-&gt;dev_flags only for internal PHYs (networking-stable-19_10_24).
- net: bcmgenet: reset 40nm EPHY on energy detect (networking-stable-19_11_05).
- net: dsa: b53: Do not clear existing mirrored port mask (networking-stable-19_11_05).
- net: dsa: bcm_sf2: Fix IMP setup for port different than 8 (networking-stable-19_11_05).
- net: dsa: fix switch tree list (networking-stable-19_11_05).
- net: ethernet: ftgmac100: Fix DMA coherency issue with SW checksum (networking-stable-19_11_05).
- net: fix sk_page_frag() recursion from memory reclaim (networking-stable-19_11_05).
- net: hisilicon: Fix ping latency when deal with high throughput (networking-stable-19_11_05).
- net: hns3: change GFP flag during lock period (bsc#1104353 ).
- net: hns3: do not query unsupported commands in debugfs (bsc#1104353).
- net: hns3: fix GFP flag error in hclge_mac_update_stats() (bsc#1126390).
- net: hns3: fix some reset handshake issue (bsc#1104353 ).
- net: hns3: prevent unnecessary MAC TNL interrupt (bsc#1104353 bsc#1134983).
- net: hns: Fix the stray netpoll locks causing deadlock in NAPI path (bsc#1104353).
- net: phy: bcm7xxx: define soft_reset for 40nm EPHY (bsc#1119113 ).
- net: phylink: Fix flow control resolution (bsc#1119113 ).
- net: sched: cbs: Avoid division by zero when calculating the port rate (bsc#1109837).
- net: sched: fix possible crash in tcf_action_destroy() (bsc#1109837).
- net: sched: fix reordering issues (bsc#1109837).
- net: sock_map, fix missing ulp check in sock hash case (bsc#1109837).
- net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow (networking-stable-19_10_24).
- net: use skb_queue_empty_lockless() in busy poll contexts (networking-stable-19_11_05).
- net: use skb_queue_empty_lockless() in poll() handlers (networking-stable-19_11_05).
- net: wireless: ti: remove local VENDOR_ID and DEVICE_ID definitions (git-fixes).
- net: wireless: ti: wl1251 use new SDIO_VENDOR_ID_TI_WL1251 definition (git-fixes).
- netns: fix GFP flags in rtnl_net_notifyid() (networking-stable-19_11_05).
- nfc: netlink: fix double device reference drop (git-fixes).
- nfc: port100: handle command failure cleanly (git-fixes).
- nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs (bsc#1109837).
- nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs (bsc#1109837).
- nl80211: Fix a GET_KEY reply attribute (bsc#1051510).
- nvme-tcp: support C2HData with SUCCESS flag (bsc#1157386).
- openvswitch: fix flow command message size (git-fixes).
- padata: use smp_mb in padata_reorder to avoid orphaned padata jobs (git-fixes).
- perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp (bsc#1142924).
- phy: phy-twl4030-usb: fix denied runtime access (git-fixes).
- phylink: fix kernel-doc warnings (bsc#1111666).
- pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call (git-fixes).
- pinctrl: at91: do not use the same irqchip with multiple gpiochips (git-fixes).
- pinctrl: cherryview: Allocate IRQ chip dynamic (git-fixes).
- pinctrl: lewisburg: Update pin list according to v1.1v6 (bsc#1051510).
- pinctrl: lpc18xx: Use define directive for PIN_CONFIG_GPIO_PIN_INT (bsc#1051510).
- pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in S3C24xx wakeup controller init (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in S3C64xx wakeup controller init (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in init code (bsc#1051510).
- pinctrl: sunxi: Fix a memory leak in 'sunxi_pinctrl_build_state()' (bsc#1051510).
- pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD (bsc#1051510).
- power: reset: at91-poweroff: do not procede if at91_shdwc is allocated (bsc#1051510).
- power: supply: ab8500_fg: silence uninitialized variable warnings (bsc#1051510).
- power: supply: max14656: fix potential use-after-free (bsc#1051510).
- power: supply: twl4030_charger: disable eoc interrupt on linear charge (bsc#1051510).
- power: supply: twl4030_charger: fix charging current out-of-bounds (bsc#1051510).
- powerpc/64: Make meltdown reporting Book3S 64 specific (bsc#1091041).
- powerpc/book3s64/hash: Use secondary hash for bolted mapping if the primary is full (bsc#1157778 ltc#182520).
- powerpc/bpf: Fix tail call implementation (bsc#1157698).
- powerpc/pseries: Do not fail hash page table insert for bolted mapping (bsc#1157778 ltc#182520).
- powerpc/pseries: Do not opencode HPTE_V_BOLTED (bsc#1157778 ltc#182520).
- powerpc/pseries: address checkpatch warnings in dlpar_offline_cpu (bsc#1156700 ltc#182459).
- powerpc/pseries: safely roll back failed DLPAR cpu add (bsc#1156700 ltc#182459).
- powerpc/security/book3s64: Report L1TF status in sysfs (bsc#1091041).
- powerpc/security: Fix wrong message when RFI Flush is disable (bsc#1131107).
- powerpc/xive: Prevent page fault issues in the machine crash handler (bsc#1156882 ltc#182435).
- ppdev: fix PPGETTIME/PPSETTIME ioctls (bsc#1051510).
- printk: Export console_printk (bsc#1071995).
- pwm: bcm-iproc: Prevent unloading the driver module while in use (git-fixes).
- pwm: lpss: Only set update bit if we are actually changing the settings (bsc#1051510).
- qxl: fix null-pointer crash during suspend (bsc#1111666).
- r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2 (networking-stable-19_11_05).
- regulator: ab8500: Remove AB8505 USB regulator (bsc#1051510).
- regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id (bsc#1051510).
- remoteproc: Check for NULL firmwares in sysfs interface (git-fixes).
- reset: Fix potential use-after-free in __of_reset_control_get() (bsc#1051510).
- reset: fix of_reset_simple_xlate kerneldoc comment (bsc#1051510).
- reset: fix reset_control_get_exclusive kerneldoc comment (bsc#1051510).
- rpm/kernel-binary.spec.in: add COMPRESS_VMLINUX (bnc#1155921) Let COMPRESS_VMLINUX determine the compression used for vmlinux. By default (historically), it is gz.
- rpm/kernel-source.spec.in: Fix dependency of kernel-devel (bsc#1154043)
- rtl8187: Fix warning generated when strncpy() destination length matches the sixe argument (bsc#1051510).
- rtlwifi: Remove unnecessary NULL check in rtl_regd_init (bsc#1051510).
- rtlwifi: btcoex: Use proper enumerated types for Wi-Fi only interface (bsc#1111666).
- rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing enable interrupt flag (bsc#1051510).
- s390/bpf: fix lcgr instruction encoding (bsc#1051510).
- s390/bpf: use 32-bit index for tail calls (bsc#1051510).
- s390/cio: avoid calling strlen on null pointer (bsc#1051510).
- s390/cio: exclude subchannels with no parent from pseudo check (bsc#1051510).
- s390/cio: fix virtio-ccw DMA without PV (git-fixes).
- s390/cmm: fix information leak in cmm_timeout_handler() (bsc#1051510).
- s390/idle: fix cpu idle time calculation (bsc#1051510).
- s390/mm: properly clear _PAGE_NOEXEC bit when it is not supported (bsc#1051510).
- s390/process: avoid potential reading of freed stack (bsc#1051510).
- s390/qdio: (re-)initialize tiqdio list entries (bsc#1051510).
- s390/qdio: do not touch the dsci in tiqdio_add_input_queues() (bsc#1051510).
- s390/qeth: return proper errno on IO error (bsc#1051510).
- s390/setup: fix boot crash for machine without EDAT-1 (bsc#1051510 bsc#1140948).
- s390/setup: fix early warning messages (bsc#1051510 bsc#1140948).
- s390/topology: avoid firing events before kobjs are created (bsc#1051510).
- s390/zcrypt: fix memleak at release (git-fixes).
- s390: fix stfle zero padding (bsc#1051510).
- s390: vsie: Use effective CRYCBD.31 to check CRYCBD validity (git-fixes).
- sc16is7xx: Fix for 'Unexpected interrupt: 8' (bsc#1051510).
- scsi: lpfc: Add enablement of multiple adapter dumps (bsc#1154601).
- scsi: lpfc: Add registration for CPU Offline/Online events (bsc#1154601).
- scsi: lpfc: Change default IRQ model on AMD architectures (bsc#1154601).
- scsi: lpfc: Clarify FAWNN error message (bsc#1154601).
- scsi: lpfc: Fix NULL check before mempool_destroy is not needed (bsc#1154601).
- scsi: lpfc: Fix Oops in nvme_register with target logout/login (bsc#1151900).
- scsi: lpfc: Fix a kernel warning triggered by lpfc_get_sgl_per_hdwq() (bsc#1154601).
- scsi: lpfc: Fix a kernel warning triggered by lpfc_sli4_enable_intr() (bsc#1154601).
- scsi: lpfc: Fix configuration of BB credit recovery in service parameters (bsc#1154601).
- scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow (bsc#1154601).
- scsi: lpfc: Fix dynamic fw log enablement check (bsc#1154601).
- scsi: lpfc: Fix kernel crash at lpfc_nvme_info_show during remote port bounce (bsc#1154601).
- scsi: lpfc: Fix lpfc_cpumask_of_node_init() (bsc#1154601).
- scsi: lpfc: Fix unexpected error messages during RSCN handling (bsc#1154601).
- scsi: lpfc: Honor module parameter lpfc_use_adisc (bsc#1153628).
- scsi: lpfc: Honor module parameter lpfc_use_adisc (bsc#1154601).
- scsi: lpfc: Initialize cpu_map for not present cpus (bsc#1154601).
- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- scsi: lpfc: Make lpfc_debugfs_ras_log_data static (bsc#1154601).
- scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (bsc#1154601).
- scsi: lpfc: Raise config max for lpfc_fcp_mq_threshold variable (bsc#1154601).
- scsi: lpfc: Sync with FC-NVMe-2 SLER change to require Conf with SLER (bsc#1154601).
- scsi: lpfc: Update lpfc version to 12.6.0.1 (bsc#1154601).
- scsi: lpfc: Update lpfc version to 12.6.0.2 (bsc#1154601).
- scsi: lpfc: fix build error of lpfc_debugfs.c for vfree/vmalloc (bsc#1154601).
- scsi: lpfc: fix inlining of lpfc_sli4_cleanup_poll_list() (bsc#1154601).
- scsi: lpfc: fix spelling error in MAGIC_NUMER_xxx (bsc#1154601).
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences (bsc#1154601).
- scsi: lpfc: fix: Coverity: lpfc_get_scsi_buf_s3(): Null pointer dereferences (bsc#1154601).
- scsi: lpfc: lpfc_attr: Fix Use plain integer as NULL pointer (bsc#1154601).
- scsi: lpfc: lpfc_nvmet: Fix Use plain integer as NULL pointer (bsc#1154601).
- scsi: lpfc: revise nvme max queues to be hdwq count (bsc#1154601).
- scsi: lpfc: use hdwq assigned cpu for allocation (bsc#1157160).
- scsi: qla2xxx: Add debug dump of LOGO payload and ELS IOCB (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Allow PLOGI in target mode (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Change discovery state before PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Configure local loop for N2N target (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Do command completion on abort timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do not call qlt_async_event twice (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Do not defer relogin unconditonally (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Drop superfluous INIT_WORK of del_work (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Fix SRB leak on switch command timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Ignore NULL pointer in tcm_qla2xxx_free_mcmd (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Initialize free_work before flushing it (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Remove an include directive (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Send Notify ACK after N2N PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Use correct number of vectors for online CPUs (bsc#1137223).
- scsi: qla2xxx: Use explicit LOGO in target mode (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: do not use zero for FC4_PRIORITY_NVME (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan (bsc#1138039).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: unregister ports after GPN_FT failure (bsc#1138039).
- scsi: sd: Ignore a failure to sync cache due to lack of authorization (git-fixes).
- scsi: storvsc: Add ability to change scsi queue depth (bsc#1155021).
- scsi: zfcp: fix request object use-after-free in send path causing wrong traces (bsc#1051510).
- sctp: change sctp_prot .no_autobind with true (networking-stable-19_10_24).
- selftests: net: reuseport_dualstack: fix uninitalized parameter (networking-stable-19_11_05).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: mxs-auart: Fix potential infinite loop (bsc#1051510).
- serial: samsung: Enable baud clock for UART reset procedure in resume (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- serial: uartps: Fix suspend functionality (bsc#1051510).
- signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal (bsc#1157463).
- slcan: Fix memory leak in error path (bsc#1051510).
- slip: Fix memory leak in slip_open error path (bsc#1051510).
- slip: Fix use-after-free Read in slip_open (bsc#1051510).
- smb3: Incorrect size for netname negotiate context (bsc#1144333, bsc#1154355).
- smb3: fix leak in 'open on server' perf counter (bsc#1144333, bsc#1154355).
- smb3: fix signing verification of large reads (bsc#1144333, bsc#1154355).
- smb3: fix unmount hang in open_shroot (bsc#1144333, bsc#1154355).
- smb3: improve handling of share deleted (and share recreated) (bsc#1144333, bsc#1154355).
- soc: imx: gpc: fix PDN delay (bsc#1051510).
- soc: qcom: wcnss_ctrl: Avoid string overflow (bsc#1051510).
- spi: atmel: Fix CS high support (bsc#1051510).
- spi: atmel: fix handling of cs_change set on non-last xfer (bsc#1051510).
- spi: fsl-lpspi: Prevent FIFO under/overrun by default (bsc#1051510).
- spi: mediatek: Do not modify spi_transfer when transfer (bsc#1051510).
- spi: mediatek: use correct mata-&gt;xfer_len when in fifo transfer (bsc#1051510).
- spi: pic32: Use proper enum in dmaengine_prep_slave_rg (bsc#1051510).
- spi: rockchip: initialize dma_slave_config properly (bsc#1051510).
- spi: spidev: Fix OF tree warning logic (bsc#1051510).
- staging: rtl8188eu: fix null dereference when kzalloc fails (bsc#1051510).
- supported.conf:
- synclink_gt(): fix compat_ioctl() (bsc#1051510).
- tcp_nv: fix potential integer overflow in tcpnv_acked (bsc#1051510).
- thunderbolt: Fix lockdep circular locking depedency warning (git-fixes).
- tipc: Avoid copying bytes beyond the supplied data (bsc#1051510).
- tipc: check bearer name with right length in tipc_nl_compat_bearer_enable (bsc#1051510).
- tipc: check link name with right length in tipc_nl_compat_link_set (bsc#1051510).
- tipc: check msg-&gt;req data len in tipc_nl_compat_bearer_disable (bsc#1051510).
- tipc: compat: allow tipc commands without arguments (bsc#1051510).
- tipc: fix tipc_mon_delete() oops in tipc_enable_bearer() error path (bsc#1051510).
- tipc: fix wrong timeout input for tipc_wait_for_cond() (bsc#1051510).
- tipc: handle the err returned from cmd header function (bsc#1051510).
- tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb (bsc#1051510).
- tipc: tipc clang warning (bsc#1051510).
- tools/power/x86/intel-speed-select: Fix a read overflow in isst_set_tdp_level_msr() (bsc#1111666).
- tools: bpftool: fix arguments for p_err() in do_event_pipe() (bsc#1109837).
- tpm: add check after commands attribs tab allocation (bsc#1051510).
- tracing: Get trace_array reference for available_tracers files (bsc#1156429).
- tty: serial: fsl_lpuart: use the sg count from dma_map_sg (bsc#1051510).
- tty: serial: imx: use the sg count from dma_map_sg (bsc#1051510).
- tty: serial: msm_serial: Fix flow control (bsc#1051510).
- tty: serial: pch_uart: correct usage of dma_unmap_sg (bsc#1051510).
- tun: fix data-race in gro_normal_list() (bsc#1111666).
- udp: use skb_queue_empty_lockless() (networking-stable-19_11_05).
- usb-serial: cp201x: support Mark-10 digital force gauge (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ('usb-storage: Set virt_boundary_mask to avoid SG overflows') (bsc#1051510).
- usb: chipidea: Fix otg event handler (bsc#1051510).
- usb: chipidea: imx: enable OTG overcurrent in case USB subsystem is already started (bsc#1051510).
- usb: dwc3: gadget: Check ENBLSLPM before sending ep command (bsc#1051510).
- usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode (bsc#1051510).
- usb: gadget: udc: fotg210-udc: Fix a sleep-in-atomic-context bug in fotg210_get_status() (bsc#1051510).
- usb: gadget: uvc: Factor out video USB request queueing (bsc#1051510).
- usb: gadget: uvc: Only halt video streaming endpoint in bulk mode (bsc#1051510).
- usb: gadget: uvc: configfs: Drop leaked references to config items (bsc#1051510).
- usb: gadget: uvc: configfs: Prevent format changes after linking header (bsc#1051510).
- usb: handle warm-reset port requests on hub resume (bsc#1051510).
- usb: xhci-mtk: fix ISOC error when interval is zero (bsc#1051510).
- usbip: Fix free of unallocated memory in vhci tx (git-fixes).
- usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path (git-fixes).
- usbip: Implement SG support to vhci-hcd and stub driver (git-fixes).
- usbip: tools: fix fd leakage in the function of read_attr_usbip_status (git-fixes).
- vfio-ccw: Fix misleading comment when setting orb.cmd.c64 (bsc#1051510).
- vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn (bsc#1051510).
- vfio: ccw: push down unsupported IDA check (bsc#1156471 LTC#182362).
- video/hdmi: Fix AVI bar unpack (git-fixes).
- virtio/s390: fix race on airq_areas (bsc#1051510).
- virtio_console: allocate inbufs in add_port() only if it is needed (git-fixes).
- virtio_ring: fix return code on DMA mapping fails (git-fixes).
- vmxnet3: turn off lro when rxcsum is disabled (bsc#1157499).
- vsock/virtio: fix sock refcnt holding during the shutdown (git-fixes).
- watchdog: meson: Fix the wrong value of left time (bsc#1051510).
- wil6210: drop Rx multicast packets that are looped-back to STA (bsc#1111666).
- wil6210: fix L2 RX status handling (bsc#1111666).
- wil6210: fix RGF_CAF_ICR address for Talyn-MB (bsc#1111666).
- wil6210: fix debugfs memory access alignment (bsc#1111666).
- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- wil6210: fix invalid memory access for rx_buff_mgmt debugfs (bsc#1111666).
- wil6210: fix locking in wmi_call (bsc#1111666).
- wil6210: prevent usage of tx ring 0 for eDMA (bsc#1111666).
- wil6210: set edma variables only for Talyn-MB devices (bsc#1111666).
- x86/alternatives: Add int3_emulate_call() selftest (bsc#1153811).
- x86/alternatives: Fix int3_emulate_call() selftest stack corruption (bsc#1153811).
- x86/mm/pkeys: Fix typo in Documentation/x86/protection-keys.txt (bsc#1078248).
- x86/pkeys: Update documentation about availability (bsc#1078248).
- x86/resctrl: Fix potential lockdep warning (bsc#1114279).
- x86/resctrl: Prevent NULL pointer dereference when reading mondata (bsc#1114279).
- x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs (bsc#1158068).
- xfrm: Fix xfrm sel prefix length validation (git-fixes).
- xfrm: fix sa selector validation (bsc#1156609).
- xsk: Fix registration of Rx-only sockets (bsc#1109837).
- xsk: relax UMEM headroom alignment (bsc#1109837).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-17"/>
	<updated date="2019-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1048942">SUSE bug 1048942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078248">SUSE bug 1078248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089644">SUSE bug 1089644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091041">SUSE bug 1091041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108043">SUSE bug 1108043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117169">SUSE bug 1117169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118661">SUSE bug 1118661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120853">SUSE bug 1120853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126390">SUSE bug 1126390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131107">SUSE bug 1131107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134983">SUSE bug 1134983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135966">SUSE bug 1135966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135967">SUSE bug 1135967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137223">SUSE bug 1137223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137236">SUSE bug 1137236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138039">SUSE bug 1138039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142095">SUSE bug 1142095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142924">SUSE bug 1142924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149448">SUSE bug 1149448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150466">SUSE bug 1150466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151067">SUSE bug 1151067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151548">SUSE bug 1151548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151900">SUSE bug 1151900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152782">SUSE bug 1152782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153628">SUSE bug 1153628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153811">SUSE bug 1153811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154043">SUSE bug 1154043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154058">SUSE bug 1154058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154124">SUSE bug 1154124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154355">SUSE bug 1154355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154526">SUSE bug 1154526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154601">SUSE bug 1154601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155021">SUSE bug 1155021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155689">SUSE bug 1155689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155692">SUSE bug 1155692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155836">SUSE bug 1155836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155897">SUSE bug 1155897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155921">SUSE bug 1155921</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155982">SUSE bug 1155982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156187">SUSE bug 1156187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156258">SUSE bug 1156258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156429">SUSE bug 1156429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156466">SUSE bug 1156466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156471">SUSE bug 1156471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156494">SUSE bug 1156494</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156609">SUSE bug 1156609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156700">SUSE bug 1156700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156729">SUSE bug 1156729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156882">SUSE bug 1156882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156928">SUSE bug 1156928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157032">SUSE bug 1157032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157038">SUSE bug 1157038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157042">SUSE bug 1157042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157044">SUSE bug 1157044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157045">SUSE bug 1157045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157046">SUSE bug 1157046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157049">SUSE bug 1157049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157070">SUSE bug 1157070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157115">SUSE bug 1157115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157143">SUSE bug 1157143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157145">SUSE bug 1157145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157158">SUSE bug 1157158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157160">SUSE bug 1157160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157162">SUSE bug 1157162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157171">SUSE bug 1157171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157173">SUSE bug 1157173</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157178">SUSE bug 1157178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157180">SUSE bug 1157180</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157182">SUSE bug 1157182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157183">SUSE bug 1157183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157184">SUSE bug 1157184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157191">SUSE bug 1157191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157193">SUSE bug 1157193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157197">SUSE bug 1157197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157298">SUSE bug 1157298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157304">SUSE bug 1157304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157307">SUSE bug 1157307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157324">SUSE bug 1157324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157333">SUSE bug 1157333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157386">SUSE bug 1157386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157463">SUSE bug 1157463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157499">SUSE bug 1157499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157678">SUSE bug 1157678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157698">SUSE bug 1157698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157778">SUSE bug 1157778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157908">SUSE bug 1157908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158049">SUSE bug 1158049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158063">SUSE bug 1158063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158064">SUSE bug 1158064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158065">SUSE bug 1158065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158066">SUSE bug 1158066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158067">SUSE bug 1158067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158068">SUSE bug 1158068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158071">SUSE bug 1158071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158082">SUSE bug 1158082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158394">SUSE bug 1158394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158398">SUSE bug 1158398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158407">SUSE bug 1158407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158410">SUSE bug 1158410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158413">SUSE bug 1158413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158417">SUSE bug 1158417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158427">SUSE bug 1158427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158445">SUSE bug 1158445</bugzilla>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-0154/">CVE-2019-0154</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14895/">CVE-2019-14895</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14901/">CVE-2019-14901</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15916/">CVE-2019-15916</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16231/">CVE-2019-16231</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17055/">CVE-2019-17055</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-18660/">CVE-2019-18660</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18683/">CVE-2019-18683</cve>
	<cve impact="low" cvss3="2.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-18805/">CVE-2019-18805</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18809/">CVE-2019-18809</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19046/">CVE-2019-19046</cve>
	<cve impact="moderate" cvss3="1.6/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19049/">CVE-2019-19049</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19052/">CVE-2019-19052</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19056/">CVE-2019-19056</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19057/">CVE-2019-19057</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19058/">CVE-2019-19058</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19060/">CVE-2019-19060</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19062/">CVE-2019-19062</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19063/">CVE-2019-19063</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19065/">CVE-2019-19065</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19067/">CVE-2019-19067</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19068/">CVE-2019-19068</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19073/">CVE-2019-19073</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19074/">CVE-2019-19074</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19075/">CVE-2019-19075</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19077/">CVE-2019-19077</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19078/">CVE-2019-19078</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19080/">CVE-2019-19080</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19081/">CVE-2019-19081</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19082/">CVE-2019-19082</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19083/">CVE-2019-19083</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19227/">CVE-2019-19227</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19524/">CVE-2019-19524</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19525/">CVE-2019-19525</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19528/">CVE-2019-19528</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19529/">CVE-2019-19529</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19530/">CVE-2019-19530</cve>
	<cve impact="low" cvss3="2.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19531/">CVE-2019-19531</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19534/">CVE-2019-19534</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19536/">CVE-2019-19536</cve>
	<cve impact="low" cvss3="2.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19543/">CVE-2019-19543</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496245" comment="kernel-docs-4.12.14-197.29.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496246" comment="kernel-obs-build-4.12.14-197.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496247" comment="kernel-source-4.12.14-197.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496248" comment="kernel-syms-4.12.14-197.29.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138205" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168422" ref_url="https://bugzilla.suse.com/1168422" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-3898" ref_url="https://www.suse.com/security/cve/CVE-2020-3898/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006728.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:

- CVE-2020-3898: Fixed a heap buffer overflow in ppdFindOption() (bsc#1168422).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-23"/>
	<updated date="2020-04-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168422">SUSE bug 1168422</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3898/">CVE-2020-3898</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496249" comment="cups-ddk-2.2.7-3.17.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138206" version="1" class="patch">
	<metadata>
		<title>Security update for git (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1063412" ref_url="https://bugzilla.suse.com/1063412" source="BUGZILLA"/>
		<reference ref_id="1095218" ref_url="https://bugzilla.suse.com/1095218" source="BUGZILLA"/>
		<reference ref_id="1095219" ref_url="https://bugzilla.suse.com/1095219" source="BUGZILLA"/>
		<reference ref_id="1110949" ref_url="https://bugzilla.suse.com/1110949" source="BUGZILLA"/>
		<reference ref_id="1112230" ref_url="https://bugzilla.suse.com/1112230" source="BUGZILLA"/>
		<reference ref_id="1114225" ref_url="https://bugzilla.suse.com/1114225" source="BUGZILLA"/>
		<reference ref_id="1132350" ref_url="https://bugzilla.suse.com/1132350" source="BUGZILLA"/>
		<reference ref_id="1149792" ref_url="https://bugzilla.suse.com/1149792" source="BUGZILLA"/>
		<reference ref_id="1156651" ref_url="https://bugzilla.suse.com/1156651" source="BUGZILLA"/>
		<reference ref_id="1158785" ref_url="https://bugzilla.suse.com/1158785" source="BUGZILLA"/>
		<reference ref_id="1158787" ref_url="https://bugzilla.suse.com/1158787" source="BUGZILLA"/>
		<reference ref_id="1158788" ref_url="https://bugzilla.suse.com/1158788" source="BUGZILLA"/>
		<reference ref_id="1158789" ref_url="https://bugzilla.suse.com/1158789" source="BUGZILLA"/>
		<reference ref_id="1158790" ref_url="https://bugzilla.suse.com/1158790" source="BUGZILLA"/>
		<reference ref_id="1158791" ref_url="https://bugzilla.suse.com/1158791" source="BUGZILLA"/>
		<reference ref_id="1158792" ref_url="https://bugzilla.suse.com/1158792" source="BUGZILLA"/>
		<reference ref_id="1158793" ref_url="https://bugzilla.suse.com/1158793" source="BUGZILLA"/>
		<reference ref_id="1158795" ref_url="https://bugzilla.suse.com/1158795" source="BUGZILLA"/>
		<reference ref_id="1167890" ref_url="https://bugzilla.suse.com/1167890" source="BUGZILLA"/>
		<reference ref_id="1168930" ref_url="https://bugzilla.suse.com/1168930" source="BUGZILLA"/>
		<reference ref_id="1169605" ref_url="https://bugzilla.suse.com/1169605" source="BUGZILLA"/>
		<reference ref_id="1169786" ref_url="https://bugzilla.suse.com/1169786" source="BUGZILLA"/>
		<reference ref_id="1169936" ref_url="https://bugzilla.suse.com/1169936" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-15298" ref_url="https://www.suse.com/security/cve/CVE-2017-15298/" source="CVE"/>
		<reference ref_id="CVE-2018-11233" ref_url="https://www.suse.com/security/cve/CVE-2018-11233/" source="CVE"/>
		<reference ref_id="CVE-2018-11235" ref_url="https://www.suse.com/security/cve/CVE-2018-11235/" source="CVE"/>
		<reference ref_id="CVE-2018-17456" ref_url="https://www.suse.com/security/cve/CVE-2018-17456/" source="CVE"/>
		<reference ref_id="CVE-2019-1348" ref_url="https://www.suse.com/security/cve/CVE-2019-1348/" source="CVE"/>
		<reference ref_id="CVE-2019-1349" ref_url="https://www.suse.com/security/cve/CVE-2019-1349/" source="CVE"/>
		<reference ref_id="CVE-2019-1350" ref_url="https://www.suse.com/security/cve/CVE-2019-1350/" source="CVE"/>
		<reference ref_id="CVE-2019-1351" ref_url="https://www.suse.com/security/cve/CVE-2019-1351/" source="CVE"/>
		<reference ref_id="CVE-2019-1352" ref_url="https://www.suse.com/security/cve/CVE-2019-1352/" source="CVE"/>
		<reference ref_id="CVE-2019-1353" ref_url="https://www.suse.com/security/cve/CVE-2019-1353/" source="CVE"/>
		<reference ref_id="CVE-2019-1354" ref_url="https://www.suse.com/security/cve/CVE-2019-1354/" source="CVE"/>
		<reference ref_id="CVE-2019-1387" ref_url="https://www.suse.com/security/cve/CVE-2019-1387/" source="CVE"/>
		<reference ref_id="CVE-2019-19604" ref_url="https://www.suse.com/security/cve/CVE-2019-19604/" source="CVE"/>
		<reference ref_id="CVE-2020-11008" ref_url="https://www.suse.com/security/cve/CVE-2020-11008/" source="CVE"/>
		<reference ref_id="CVE-2020-5260" ref_url="https://www.suse.com/security/cve/CVE-2020-5260/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1121-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006748.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

Security issues fixed:

* CVE-2020-11008: Specially crafted URLs may have tricked the
  credentials helper to providing credential information that
  is not appropriate for the protocol in use and host being
  contacted (bsc#1169936)

git was updated to 2.26.1 (bsc#1169786, jsc#ECO-1628, bsc#1149792)

- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).

* CVE-2020-5260: Specially crafted URLs with newline characters
  could have been used to make the Git client to send credential
  information for a wrong host to the attacker's site bsc#1168930

git 2.26.0 (bsc#1167890, jsc#SLE-11608):

* 'git rebase' now uses a different backend that is based on the
  'merge' machinery by default. The 'rebase.backend' configuration
   variable reverts to old behaviour when set to  'apply'
* Improved handling of sparse checkouts
* Improvements to many commands and internal features

git 2.25.2:

* bug fixes to various subcommands in specific operations

git 2.25.1:

* 'git commit' now honors advise.statusHints
* various updates, bug fixes and documentation updates

git 2.25.0

* The branch description ('git branch --edit-description') has been
  used to fill the body of the cover letters by the format-patch
  command; this has been enhanced so that the subject can also be
  filled.
* A few commands learned to take the pathspec from the standard input
  or a named file, instead of taking it as the command line
  arguments, with the '--pathspec-from-file' option.
* Test updates to prepare for SHA-2 transition continues.
* Redo 'git name-rev' to avoid recursive calls.
* When all files from some subdirectory were renamed to the root
  directory, the directory rename heuristics would fail to detect that
  as a rename/merge of the subdirectory to the root directory, which has
  been corrected.
* HTTP transport had possible allocator/deallocator mismatch, which
  has been corrected.

git 2.24.1:

* CVE-2019-1348: The --export-marks option of fast-import is
  exposed also via the in-stream command feature export-marks=...
  and it allows overwriting arbitrary paths (bsc#1158785)
* CVE-2019-1349: on Windows, when submodules are cloned
  recursively, under certain circumstances Git could be fooled
  into using the same Git directory twice (bsc#1158787)
* CVE-2019-1350: Incorrect quoting of command-line arguments
  allowed remote code execution during a recursive clone in
  conjunction with SSH URLs (bsc#1158788)
* CVE-2019-1351: on Windows mistakes drive letters outside of
  the US-English alphabet as relative paths (bsc#1158789)
* CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
  Streams (bsc#1158790)
* CVE-2019-1353: when run in the Windows Subsystem for Linux
  while accessing a working directory on a regular Windows
  drive, none of the NTFS protections were active (bsc#1158791)
* CVE-2019-1354: on Windows refuses to write tracked files with
  filenames that contain backslashes (bsc#1158792)
* CVE-2019-1387: Recursive clones vulnerability that is caused
  by too-lax validation of submodule names, allowing very
  targeted attacks via remote code execution in recursive
  clones (bsc#1158793)
* CVE-2019-19604: a recursive clone followed by a submodule
  update could execute code contained within the repository
  without the user explicitly having asked for that (bsc#1158795)

git 2.24.0

* The command line parser learned '--end-of-options' notation.
* A mechanism to affect the default setting for a (related) group of
  configuration variables is introduced.
* 'git fetch' learned '--set-upstream' option to help those who first
  clone from their private fork they intend to push to, add the true
  upstream via 'git remote add' and then 'git fetch' from it.
* fixes and improvements to UI, workflow and features, bash completion fixes

git 2.23.0:

* The '--base' option of 'format-patch' computed the patch-ids for
  prerequisite patches in an unstable way, which has been updated
  to compute in a way that is compatible with 'git patch-id
  --stable'.
* The 'git log' command by default behaves as if the --mailmap
  option was given.
* fixes and improvements to UI, workflow and features

git 2.22.1

* A relative pathname given to 'git init --template=&lt;path&gt; &lt;repo&gt;'
  ought to be relative to the directory 'git init' gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
* 'git worktree add' used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
* 'git am -i --resolved' segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
* 'git merge --squash' is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the '--commit' option; the command now refuses to work
  when both options are given.
* Update to Unicode 12.1 width table.
* 'git request-pull' learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
* 'git fetch' into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
* The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
* 'git clean' silently skipped a path when it cannot lstat() it; now
  it gives a warning.
* 'git rm' to resolve a conflicted path leaked an internal message
  'needs merge' before actually removing the path, which was
  confusing. This has been corrected.
* Many more bugfixes and code cleanups.

- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld.

- partial fix for git instaweb giving 500 error (bsc#1112230)

git 2.22.0 

* The filter specification '--filter=sparse:path=&lt;path&gt;' used to
  create a lazy/partial clone has been removed. Using a blob that is
  part of the project as sparse specification is still supported with
  the '--filter=sparse:oid=&lt;blob&gt;' option
* 'git checkout --no-overlay' can be used to trigger a new mode of
  checking out paths out of the tree-ish, that allows paths that
  match the pathspec that are in the current index and working tree
  and are not in the tree-ish.
* Four new configuration variables {author,committer}.{name,email}
  have been introduced to override user.{name,email} in more specific
  cases.
* 'git branch' learned a new subcommand '--show-current'.
* The command line completion (in contrib/) has been taught to
  complete more subcommand parameters.
* The completion helper code now pays attention to repository-local
  configuration (when available), which allows --list-cmds to honour
  a repository specific setting of completion.commands, for example.
* The list of conflicted paths shown in the editor while concluding a
  conflicted merge was shown above the scissors line when the
  clean-up mode is set to 'scissors', even though it was commented
  out just like the list of updated paths and other information to
  help the user explain the merge better.
* 'git rebase' that was reimplemented in C did not set ORIG_HEAD
  correctly, which has been corrected.
* 'git worktree add' used to do a 'find an available name with stat
  and then mkdir', which is race-prone. This has been fixed by using
  mkdir and reacting to EEXIST in a loop. 

- Move to DocBook 5.x. Asciidoctor 2.x no longer supports the legacy
  DocBook 4.5 format.

- update git-web AppArmor profile for bash and tar usrMerge (bsc#1132350)

git 2.21.0

* Historically, the '-m' (mainline) option can only be used for 'git
  cherry-pick' and 'git revert' when working with a merge commit.
  This version of Git no longer warns or errors out when working with
  a single-parent commit, as long as the argument to the '-m' option
  is 1 (i.e. it has only one parent, and the request is to pick or
  revert relative to that first parent). Scripts that relied on the
  behaviour may get broken with this change.
* Small fixes and features for fast-export and fast-import.
* The 'http.version' configuration variable can be used with recent
  enough versions of cURL library to force the version of HTTP used
  to talk when fetching and pushing.
* 'git push $there $src:$dst' rejects when $dst is not a fully
    qualified refname and it is not clear what the end user meant.
* Update 'git multimail' from the upstream.
* A new date format '--date=human' that morphs its output depending
  on how far the time is from the current time has been introduced.
  '--date=auto:human' can be used to use this new format (or any
  existing format) when the output is going to the pager or to the
  terminal, and otherwise the default format.

- Fix worktree creation race (bsc#1114225).
- add shadow build dependency to the -daemon subpackage.


git 2.20.1:

* portability fixes
* 'git help -a' did not work well when an overly long alias was
  defined
* no longer squelched an error message when the run_command API
  failed to run a missing command

git 2.20.0

* 'git help -a' now gives verbose output (same as 'git help -av').
  Those who want the old output may say 'git help --no-verbose -a'..
* 'git send-email' learned to grab address-looking string on any
  trailer whose name ends with '-by'.
* 'git format-patch' learned new '--interdiff' and '--range-diff'
  options to explain the difference between this version and the
  previous attempt in the cover letter (or after the three-dashes as
   a comment).
* Developer builds now use -Wunused-function compilation option.
* Fix a bug in which the same path could be registered under multiple
  worktree entries if the path was missing (for instance, was removed
  manually).  Also, as a convenience, expand the number of cases in
  which --force is applicable.
* The overly large Documentation/config.txt file have been split into
  million little pieces.  This potentially allows each individual piece
  to be included into the manual page of the command it affects more easily.
* Malformed or crafted data in packstream can make our code attempt
  to read or write past the allocated buffer and abort, instead of
  reporting an error, which has been fixed.
* Fix for a long-standing bug that leaves the index file corrupt when
  it shrinks during a partial commit.
* 'git merge' and 'git pull' that merges into an unborn branch used
  to completely ignore '--verify-signatures', which has been
  corrected.
* ...and much more features and fixes

git 2.19.2:

* various bug fixes for multiple subcommands and operations

git 2.19.1:

* CVE-2018-17456: Specially crafted .gitmodules files may have
  allowed arbitrary code execution when the repository is cloned
  with --recurse-submodules (bsc#1110949)

git 2.19.0:

* 'git diff' compares the index and the working tree.  For paths
  added with intent-to-add bit, the command shows the full contents
  of them as added, but the paths themselves were not marked as new
  files.  They are now shown as new by default.
* 'git apply' learned the '--intent-to-add' option so that an
  otherwise working-tree-only application of a patch will add new
  paths to the index marked with the 'intent-to-add' bit.
* 'git grep' learned the '--column' option that gives not just the
  line number but the column number of the hit.
* The '-l' option in 'git branch -l' is an unfortunate short-hand for
  '--create-reflog', but many users, both old and new, somehow expect
  it to be something else, perhaps '--list'.  This step warns when '-l'
  is used as a short-hand for '--create-reflog' and warns about the
  future repurposing of the it when it is used.
* The userdiff pattern for .php has been updated.
* The content-transfer-encoding of the message 'git send-email' sends
  out by default was 8bit, which can cause trouble when there is an
  overlong line to bust RFC 5322/2822 limit.  A new option 'auto' to
  automatically switch to quoted-printable when there is such a line
  in the payload has been introduced and is made the default.
* 'git checkout' and 'git worktree add' learned to honor
  checkout.defaultRemote when auto-vivifying a local branch out of a
  remote tracking branch in a repository with multiple remotes that
  have tracking branches that share the same names.
  (merge 8d7b558bae ab/checkout-default-remote later to maint).
* 'git grep' learned the '--only-matching' option.
* 'git rebase --rebase-merges' mode now handles octopus merges as
  well.
* Add a server-side knob to skip commits in exponential/fibbonacci
  stride in an attempt to cover wider swath of history with a smaller
  number of iterations, potentially accepting a larger packfile
  transfer, instead of going back one commit a time during common
  ancestor discovery during the 'git fetch' transaction.
  (merge 42cc7485a2 jt/fetch-negotiator-skipping later to maint).
* A new configuration variable core.usereplacerefs has been added,
  primarily to help server installations that want to ignore the
  replace mechanism altogether.
* Teach 'git tag -s' etc. a few configuration variables (gpg.format
  that can be set to 'openpgp' or 'x509', and gpg.&lt;format&gt;.program
  that is used to specify what program to use to deal with the format)
  to allow x.509 certs with CMS via 'gpgsm' to be used instead of
  openpgp via 'gnupg'.
* Many more strings are prepared for l10n.
* 'git p4 submit' learns to ask its own pre-submit hook if it should
  continue with submitting.
* The test performed at the receiving end of 'git push' to prevent
  bad objects from entering repository can be customized via
  receive.fsck.* configuration variables; we now have gained a
  counterpart to do the same on the 'git fetch' side, with
  fetch.fsck.* configuration variables.
* 'git pull --rebase=interactive' learned 'i' as a short-hand for
  'interactive'.
* 'git instaweb' has been adjusted to run better with newer Apache on
  RedHat based distros.
* 'git range-diff' is a reimplementation of 'git tbdiff' that lets us
  compare individual patches in two iterations of a topic.
* The sideband code learned to optionally paint selected keywords at
  the beginning of incoming lines on the receiving end.
* 'git branch --list' learned to take the default sort order from the
  'branch.sort' configuration variable, just like 'git tag --list'
  pays attention to 'tag.sort'.
* 'git worktree' command learned '--quiet' option to make it less
  verbose.

git 2.18.0:

* improvements to rename detection logic
* When built with more recent cURL, GIT_SSL_VERSION can now
  specify 'tlsv1.3' as its value.
* 'git mergetools' learned talking to guiffy.
* various other workflow improvements and fixes
* performance improvements and other developer visible fixes

git 2.17.1

* Submodule 'names' come from the untrusted .gitmodules file, but
  we blindly append them to $GIT_DIR/modules to create our on-disk
  repo paths. This means you can do bad things by putting '../'
  into the name. We now enforce some rules for submodule names
  which will cause Git to ignore these malicious names
  (CVE-2018-11235, bsc#1095219)
* It was possible to trick the code that sanity-checks paths on
  NTFS into reading random piece of memory
  (CVE-2018-11233, bsc#1095218)
* Support on the server side to reject pushes to repositories
  that attempt to create such problematic .gitmodules file etc.
  as tracked contents, to help hosting sites protect their
  customers by preventing malicious contents from spreading.

git 2.17.0:

* 'diff' family of commands learned '--find-object=&lt;object-id&gt;' option
   to limit the findings to changes that involve the named object.
* 'git format-patch' learned to give 72-cols to diffstat, which is
  consistent with other line length limits the subcommand uses for
  its output meant for e-mails.
* The log from 'git daemon' can be redirected with a new option; one
  relevant use case is to send the log to standard error (instead of
  syslog) when running it from inetd.
* 'git rebase' learned to take '--allow-empty-message' option.
* 'git am' has learned the '--quit' option, in addition to the
  existing '--abort' option; having the pair mirrors a few other
  commands like 'rebase' and 'cherry-pick'.
* 'git worktree add' learned to run the post-checkout hook, just like
  'git clone' runs it upon the initial checkout.
* 'git tag' learned an explicit '--edit' option that allows the
  message given via '-m' and '-F' to be further edited.
* 'git fetch --prune-tags' may be used as a handy short-hand for
  getting rid of stale tags that are locally held.
* The new '--show-current-patch' option gives an end-user facing way
  to get the diff being applied when 'git rebase' (and 'git am')
  stops with a conflict.
* 'git add -p' used to offer '/' (look for a matching hunk) as a
  choice, even there was only one hunk, which has been corrected.
  Also the single-key help is now given only for keys that are
  enabled (e.g. help for '/' won't be shown when there is only one
  hunk).
* Since Git 1.7.9, 'git merge' defaulted to --no-ff (i.e. even when
  the side branch being merged is a descendant of the current commit,
  create a merge commit instead of fast-forwarding) when merging a
  tag object.  This was appropriate default for integrators who pull
  signed tags from their downstream contributors, but caused an
  unnecessary merges when used by downstream contributors who
  habitually 'catch up' their topic branches with tagged releases
  from the upstream.  Update 'git merge' to default to --no-ff only
  when merging a tag object that does *not* sit at its usual place in
  refs/tags/ hierarchy, and allow fast-forwarding otherwise, to
  mitigate the problem.
* 'git status' can spend a lot of cycles to compute the relation
  between the current branch and its upstream, which can now be
  disabled with '--no-ahead-behind' option.
* 'git diff' and friends learned funcname patterns for Go language
  source files.
* 'git send-email' learned '--reply-to=&lt;address&gt;' option.
* Funcname pattern used for C# now recognizes 'async' keyword.
* In a way similar to how 'git tag' learned to honor the pager
  setting only in the list mode, 'git config' learned to ignore the
  pager setting when it is used for setting values (i.e. when the
  purpose of the operation is not to 'show').
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-28"/>
	<updated date="2020-04-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1063412">SUSE bug 1063412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095218">SUSE bug 1095218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095219">SUSE bug 1095219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110949">SUSE bug 1110949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112230">SUSE bug 1112230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114225">SUSE bug 1114225</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132350">SUSE bug 1132350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149792">SUSE bug 1149792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156651">SUSE bug 1156651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158785">SUSE bug 1158785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158787">SUSE bug 1158787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158788">SUSE bug 1158788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158789">SUSE bug 1158789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158790">SUSE bug 1158790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158791">SUSE bug 1158791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158792">SUSE bug 1158792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158793">SUSE bug 1158793</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158795">SUSE bug 1158795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167890">SUSE bug 1167890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168930">SUSE bug 1168930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169605">SUSE bug 1169605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169786">SUSE bug 1169786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169936">SUSE bug 1169936</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15298/">CVE-2017-15298</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-11233/">CVE-2018-11233</cve>
	<cve impact="important" cvss3="8/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11235/">CVE-2018-11235</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-17456/">CVE-2018-17456</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-1348/">CVE-2019-1348</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1349/">CVE-2019-1349</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1350/">CVE-2019-1350</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-1351/">CVE-2019-1351</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1352/">CVE-2019-1352</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1353/">CVE-2019-1353</cve>
	<cve impact="low" cvss3="0/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1354/">CVE-2019-1354</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1387/">CVE-2019-1387</cve>
	<cve impact="critical" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19604/">CVE-2019-19604</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11008/">CVE-2020-11008</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-5260/">CVE-2020-5260</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496250" comment="git-2.26.1-3.25.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496251" comment="git-arch-2.26.1-3.25.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496252" comment="git-cvs-2.26.1-3.25.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496253" comment="git-daemon-2.26.1-3.25.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496254" comment="git-doc-2.26.1-3.25.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496255" comment="git-email-2.26.1-3.25.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496256" comment="git-gui-2.26.1-3.25.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496257" comment="git-svn-2.26.1-3.25.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496258" comment="git-web-2.26.1-3.25.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496259" comment="gitk-2.26.1-3.25.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138207" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027282" ref_url="https://bugzilla.suse.com/1027282" source="BUGZILLA"/>
		<reference ref_id="1029377" ref_url="https://bugzilla.suse.com/1029377" source="BUGZILLA"/>
		<reference ref_id="1029902" ref_url="https://bugzilla.suse.com/1029902" source="BUGZILLA"/>
		<reference ref_id="1040164" ref_url="https://bugzilla.suse.com/1040164" source="BUGZILLA"/>
		<reference ref_id="1042670" ref_url="https://bugzilla.suse.com/1042670" source="BUGZILLA"/>
		<reference ref_id="1070853" ref_url="https://bugzilla.suse.com/1070853" source="BUGZILLA"/>
		<reference ref_id="1079761" ref_url="https://bugzilla.suse.com/1079761" source="BUGZILLA"/>
		<reference ref_id="1081750" ref_url="https://bugzilla.suse.com/1081750" source="BUGZILLA"/>
		<reference ref_id="1083507" ref_url="https://bugzilla.suse.com/1083507" source="BUGZILLA"/>
		<reference ref_id="1086001" ref_url="https://bugzilla.suse.com/1086001" source="BUGZILLA"/>
		<reference ref_id="1088004" ref_url="https://bugzilla.suse.com/1088004" source="BUGZILLA"/>
		<reference ref_id="1088009" ref_url="https://bugzilla.suse.com/1088009" source="BUGZILLA"/>
		<reference ref_id="1088573" ref_url="https://bugzilla.suse.com/1088573" source="BUGZILLA"/>
		<reference ref_id="1094814" ref_url="https://bugzilla.suse.com/1094814" source="BUGZILLA"/>
		<reference ref_id="1107030" ref_url="https://bugzilla.suse.com/1107030" source="BUGZILLA"/>
		<reference ref_id="1109663" ref_url="https://bugzilla.suse.com/1109663" source="BUGZILLA"/>
		<reference ref_id="1109847" ref_url="https://bugzilla.suse.com/1109847" source="BUGZILLA"/>
		<reference ref_id="1120644" ref_url="https://bugzilla.suse.com/1120644" source="BUGZILLA"/>
		<reference ref_id="1122191" ref_url="https://bugzilla.suse.com/1122191" source="BUGZILLA"/>
		<reference ref_id="1129346" ref_url="https://bugzilla.suse.com/1129346" source="BUGZILLA"/>
		<reference ref_id="1130840" ref_url="https://bugzilla.suse.com/1130840" source="BUGZILLA"/>
		<reference ref_id="1133452" ref_url="https://bugzilla.suse.com/1133452" source="BUGZILLA"/>
		<reference ref_id="1137942" ref_url="https://bugzilla.suse.com/1137942" source="BUGZILLA"/>
		<reference ref_id="1138459" ref_url="https://bugzilla.suse.com/1138459" source="BUGZILLA"/>
		<reference ref_id="1141853" ref_url="https://bugzilla.suse.com/1141853" source="BUGZILLA"/>
		<reference ref_id="1149121" ref_url="https://bugzilla.suse.com/1149121" source="BUGZILLA"/>
		<reference ref_id="1149792" ref_url="https://bugzilla.suse.com/1149792" source="BUGZILLA"/>
		<reference ref_id="1149955" ref_url="https://bugzilla.suse.com/1149955" source="BUGZILLA"/>
		<reference ref_id="1151490" ref_url="https://bugzilla.suse.com/1151490" source="BUGZILLA"/>
		<reference ref_id="1153238" ref_url="https://bugzilla.suse.com/1153238" source="BUGZILLA"/>
		<reference ref_id="1159035" ref_url="https://bugzilla.suse.com/1159035" source="BUGZILLA"/>
		<reference ref_id="1159622" ref_url="https://bugzilla.suse.com/1159622" source="BUGZILLA"/>
		<reference ref_id="637176" ref_url="https://bugzilla.suse.com/637176" source="BUGZILLA"/>
		<reference ref_id="658604" ref_url="https://bugzilla.suse.com/658604" source="BUGZILLA"/>
		<reference ref_id="673071" ref_url="https://bugzilla.suse.com/673071" source="BUGZILLA"/>
		<reference ref_id="709442" ref_url="https://bugzilla.suse.com/709442" source="BUGZILLA"/>
		<reference ref_id="743787" ref_url="https://bugzilla.suse.com/743787" source="BUGZILLA"/>
		<reference ref_id="747125" ref_url="https://bugzilla.suse.com/747125" source="BUGZILLA"/>
		<reference ref_id="751718" ref_url="https://bugzilla.suse.com/751718" source="BUGZILLA"/>
		<reference ref_id="754447" ref_url="https://bugzilla.suse.com/754447" source="BUGZILLA"/>
		<reference ref_id="754677" ref_url="https://bugzilla.suse.com/754677" source="BUGZILLA"/>
		<reference ref_id="787526" ref_url="https://bugzilla.suse.com/787526" source="BUGZILLA"/>
		<reference ref_id="809831" ref_url="https://bugzilla.suse.com/809831" source="BUGZILLA"/>
		<reference ref_id="831629" ref_url="https://bugzilla.suse.com/831629" source="BUGZILLA"/>
		<reference ref_id="834601" ref_url="https://bugzilla.suse.com/834601" source="BUGZILLA"/>
		<reference ref_id="871152" ref_url="https://bugzilla.suse.com/871152" source="BUGZILLA"/>
		<reference ref_id="885662" ref_url="https://bugzilla.suse.com/885662" source="BUGZILLA"/>
		<reference ref_id="885882" ref_url="https://bugzilla.suse.com/885882" source="BUGZILLA"/>
		<reference ref_id="917607" ref_url="https://bugzilla.suse.com/917607" source="BUGZILLA"/>
		<reference ref_id="942751" ref_url="https://bugzilla.suse.com/942751" source="BUGZILLA"/>
		<reference ref_id="951166" ref_url="https://bugzilla.suse.com/951166" source="BUGZILLA"/>
		<reference ref_id="983582" ref_url="https://bugzilla.suse.com/983582" source="BUGZILLA"/>
		<reference ref_id="984751" ref_url="https://bugzilla.suse.com/984751" source="BUGZILLA"/>
		<reference ref_id="985177" ref_url="https://bugzilla.suse.com/985177" source="BUGZILLA"/>
		<reference ref_id="985348" ref_url="https://bugzilla.suse.com/985348" source="BUGZILLA"/>
		<reference ref_id="989523" ref_url="https://bugzilla.suse.com/989523" source="BUGZILLA"/>
		<reference ref_id="CVE-2011-3389" ref_url="https://www.suse.com/security/cve/CVE-2011-3389/" source="CVE"/>
		<reference ref_id="CVE-2011-4944" ref_url="https://www.suse.com/security/cve/CVE-2011-4944/" source="CVE"/>
		<reference ref_id="CVE-2012-0845" ref_url="https://www.suse.com/security/cve/CVE-2012-0845/" source="CVE"/>
		<reference ref_id="CVE-2012-1150" ref_url="https://www.suse.com/security/cve/CVE-2012-1150/" source="CVE"/>
		<reference ref_id="CVE-2013-1752" ref_url="https://www.suse.com/security/cve/CVE-2013-1752/" source="CVE"/>
		<reference ref_id="CVE-2013-4238" ref_url="https://www.suse.com/security/cve/CVE-2013-4238/" source="CVE"/>
		<reference ref_id="CVE-2014-2667" ref_url="https://www.suse.com/security/cve/CVE-2014-2667/" source="CVE"/>
		<reference ref_id="CVE-2014-4650" ref_url="https://www.suse.com/security/cve/CVE-2014-4650/" source="CVE"/>
		<reference ref_id="CVE-2016-0772" ref_url="https://www.suse.com/security/cve/CVE-2016-0772/" source="CVE"/>
		<reference ref_id="CVE-2016-1000110" ref_url="https://www.suse.com/security/cve/CVE-2016-1000110/" source="CVE"/>
		<reference ref_id="CVE-2016-5636" ref_url="https://www.suse.com/security/cve/CVE-2016-5636/" source="CVE"/>
		<reference ref_id="CVE-2016-5699" ref_url="https://www.suse.com/security/cve/CVE-2016-5699/" source="CVE"/>
		<reference ref_id="CVE-2017-18207" ref_url="https://www.suse.com/security/cve/CVE-2017-18207/" source="CVE"/>
		<reference ref_id="CVE-2018-1000802" ref_url="https://www.suse.com/security/cve/CVE-2018-1000802/" source="CVE"/>
		<reference ref_id="CVE-2018-1060" ref_url="https://www.suse.com/security/cve/CVE-2018-1060/" source="CVE"/>
		<reference ref_id="CVE-2018-1061" ref_url="https://www.suse.com/security/cve/CVE-2018-1061/" source="CVE"/>
		<reference ref_id="CVE-2018-14647" ref_url="https://www.suse.com/security/cve/CVE-2018-14647/" source="CVE"/>
		<reference ref_id="CVE-2018-20406" ref_url="https://www.suse.com/security/cve/CVE-2018-20406/" source="CVE"/>
		<reference ref_id="CVE-2018-20852" ref_url="https://www.suse.com/security/cve/CVE-2018-20852/" source="CVE"/>
		<reference ref_id="CVE-2019-10160" ref_url="https://www.suse.com/security/cve/CVE-2019-10160/" source="CVE"/>
		<reference ref_id="CVE-2019-15903" ref_url="https://www.suse.com/security/cve/CVE-2019-15903/" source="CVE"/>
		<reference ref_id="CVE-2019-16056" ref_url="https://www.suse.com/security/cve/CVE-2019-16056/" source="CVE"/>
		<reference ref_id="CVE-2019-16935" ref_url="https://www.suse.com/security/cve/CVE-2019-16935/" source="CVE"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<reference ref_id="CVE-2019-9636" ref_url="https://www.suse.com/security/cve/CVE-2019-9636/" source="CVE"/>
		<reference ref_id="CVE-2019-9947" ref_url="https://www.suse.com/security/cve/CVE-2019-9947/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006354.html" source="SUSE-SU"/>
		<description>
This update for python3 to version 3.6.10 fixes the following issues:

- CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507).
- CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955).
- CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-16"/>
	<updated date="2020-01-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027282">SUSE bug 1027282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1029377">SUSE bug 1029377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1029902">SUSE bug 1029902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1040164">SUSE bug 1040164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042670">SUSE bug 1042670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070853">SUSE bug 1070853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1079761">SUSE bug 1079761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081750">SUSE bug 1081750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083507">SUSE bug 1083507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086001">SUSE bug 1086001</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088004">SUSE bug 1088004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088009">SUSE bug 1088009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088573">SUSE bug 1088573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094814">SUSE bug 1094814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107030">SUSE bug 1107030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109663">SUSE bug 1109663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109847">SUSE bug 1109847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120644">SUSE bug 1120644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122191">SUSE bug 1122191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129346">SUSE bug 1129346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130840">SUSE bug 1130840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133452">SUSE bug 1133452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137942">SUSE bug 1137942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138459">SUSE bug 1138459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141853">SUSE bug 1141853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149121">SUSE bug 1149121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149792">SUSE bug 1149792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149955">SUSE bug 1149955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151490">SUSE bug 1151490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153238">SUSE bug 1153238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159035">SUSE bug 1159035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159622">SUSE bug 1159622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/637176">SUSE bug 637176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/658604">SUSE bug 658604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673071">SUSE bug 673071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/709442">SUSE bug 709442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/743787">SUSE bug 743787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747125">SUSE bug 747125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751718">SUSE bug 751718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754447">SUSE bug 754447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754677">SUSE bug 754677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/787526">SUSE bug 787526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/809831">SUSE bug 809831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831629">SUSE bug 831629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/834601">SUSE bug 834601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/871152">SUSE bug 871152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885662">SUSE bug 885662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885882">SUSE bug 885882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/917607">SUSE bug 917607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/942751">SUSE bug 942751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951166">SUSE bug 951166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/983582">SUSE bug 983582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984751">SUSE bug 984751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985177">SUSE bug 985177</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985348">SUSE bug 985348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989523">SUSE bug 989523</bugzilla>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-3389/">CVE-2011-3389</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-4944/">CVE-2011-4944</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-0845/">CVE-2012-0845</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-1150/">CVE-2012-1150</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2013-1752/">CVE-2013-1752</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2013-4238/">CVE-2013-4238</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2014-2667/">CVE-2014-2667</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-4650/">CVE-2014-4650</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-0772/">CVE-2016-0772</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1000110/">CVE-2016-1000110</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5636/">CVE-2016-5636</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5699/">CVE-2016-5699</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18207/">CVE-2017-18207</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000802/">CVE-2018-1000802</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1060/">CVE-2018-1060</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1061/">CVE-2018-1061</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14647/">CVE-2018-14647</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20406/">CVE-2018-20406</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20852/">CVE-2018-20852</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10160/">CVE-2019-10160</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15903/">CVE-2019-15903</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16056/">CVE-2019-16056</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16935/">CVE-2019-16935</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9636/">CVE-2019-9636</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9947/">CVE-2019-9947</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496164" comment="python3-tools-3.6.10-3.42.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138208" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1109911" ref_url="https://bugzilla.suse.com/1109911" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1118338" ref_url="https://bugzilla.suse.com/1118338" source="BUGZILLA"/>
		<reference ref_id="1120386" ref_url="https://bugzilla.suse.com/1120386" source="BUGZILLA"/>
		<reference ref_id="1137325" ref_url="https://bugzilla.suse.com/1137325" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1145051" ref_url="https://bugzilla.suse.com/1145051" source="BUGZILLA"/>
		<reference ref_id="1145929" ref_url="https://bugzilla.suse.com/1145929" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1158983" ref_url="https://bugzilla.suse.com/1158983" source="BUGZILLA"/>
		<reference ref_id="1159037" ref_url="https://bugzilla.suse.com/1159037" source="BUGZILLA"/>
		<reference ref_id="1159198" ref_url="https://bugzilla.suse.com/1159198" source="BUGZILLA"/>
		<reference ref_id="1159199" ref_url="https://bugzilla.suse.com/1159199" source="BUGZILLA"/>
		<reference ref_id="1161561" ref_url="https://bugzilla.suse.com/1161561" source="BUGZILLA"/>
		<reference ref_id="1161951" ref_url="https://bugzilla.suse.com/1161951" source="BUGZILLA"/>
		<reference ref_id="1162171" ref_url="https://bugzilla.suse.com/1162171" source="BUGZILLA"/>
		<reference ref_id="1163403" ref_url="https://bugzilla.suse.com/1163403" source="BUGZILLA"/>
		<reference ref_id="1163897" ref_url="https://bugzilla.suse.com/1163897" source="BUGZILLA"/>
		<reference ref_id="1164284" ref_url="https://bugzilla.suse.com/1164284" source="BUGZILLA"/>
		<reference ref_id="1164777" ref_url="https://bugzilla.suse.com/1164777" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1164893" ref_url="https://bugzilla.suse.com/1164893" source="BUGZILLA"/>
		<reference ref_id="1165019" ref_url="https://bugzilla.suse.com/1165019" source="BUGZILLA"/>
		<reference ref_id="1165182" ref_url="https://bugzilla.suse.com/1165182" source="BUGZILLA"/>
		<reference ref_id="1165185" ref_url="https://bugzilla.suse.com/1165185" source="BUGZILLA"/>
		<reference ref_id="1165211" ref_url="https://bugzilla.suse.com/1165211" source="BUGZILLA"/>
		<reference ref_id="1165823" ref_url="https://bugzilla.suse.com/1165823" source="BUGZILLA"/>
		<reference ref_id="1165949" ref_url="https://bugzilla.suse.com/1165949" source="BUGZILLA"/>
		<reference ref_id="1166780" ref_url="https://bugzilla.suse.com/1166780" source="BUGZILLA"/>
		<reference ref_id="1166860" ref_url="https://bugzilla.suse.com/1166860" source="BUGZILLA"/>
		<reference ref_id="1166861" ref_url="https://bugzilla.suse.com/1166861" source="BUGZILLA"/>
		<reference ref_id="1166862" ref_url="https://bugzilla.suse.com/1166862" source="BUGZILLA"/>
		<reference ref_id="1166864" ref_url="https://bugzilla.suse.com/1166864" source="BUGZILLA"/>
		<reference ref_id="1166866" ref_url="https://bugzilla.suse.com/1166866" source="BUGZILLA"/>
		<reference ref_id="1166867" ref_url="https://bugzilla.suse.com/1166867" source="BUGZILLA"/>
		<reference ref_id="1166868" ref_url="https://bugzilla.suse.com/1166868" source="BUGZILLA"/>
		<reference ref_id="1166870" ref_url="https://bugzilla.suse.com/1166870" source="BUGZILLA"/>
		<reference ref_id="1166940" ref_url="https://bugzilla.suse.com/1166940" source="BUGZILLA"/>
		<reference ref_id="1166982" ref_url="https://bugzilla.suse.com/1166982" source="BUGZILLA"/>
		<reference ref_id="1167005" ref_url="https://bugzilla.suse.com/1167005" source="BUGZILLA"/>
		<reference ref_id="1167216" ref_url="https://bugzilla.suse.com/1167216" source="BUGZILLA"/>
		<reference ref_id="1167288" ref_url="https://bugzilla.suse.com/1167288" source="BUGZILLA"/>
		<reference ref_id="1167290" ref_url="https://bugzilla.suse.com/1167290" source="BUGZILLA"/>
		<reference ref_id="1167316" ref_url="https://bugzilla.suse.com/1167316" source="BUGZILLA"/>
		<reference ref_id="1167421" ref_url="https://bugzilla.suse.com/1167421" source="BUGZILLA"/>
		<reference ref_id="1167423" ref_url="https://bugzilla.suse.com/1167423" source="BUGZILLA"/>
		<reference ref_id="1167627" ref_url="https://bugzilla.suse.com/1167627" source="BUGZILLA"/>
		<reference ref_id="1167629" ref_url="https://bugzilla.suse.com/1167629" source="BUGZILLA"/>
		<reference ref_id="1168075" ref_url="https://bugzilla.suse.com/1168075" source="BUGZILLA"/>
		<reference ref_id="1168202" ref_url="https://bugzilla.suse.com/1168202" source="BUGZILLA"/>
		<reference ref_id="1168273" ref_url="https://bugzilla.suse.com/1168273" source="BUGZILLA"/>
		<reference ref_id="1168276" ref_url="https://bugzilla.suse.com/1168276" source="BUGZILLA"/>
		<reference ref_id="1168295" ref_url="https://bugzilla.suse.com/1168295" source="BUGZILLA"/>
		<reference ref_id="1168367" ref_url="https://bugzilla.suse.com/1168367" source="BUGZILLA"/>
		<reference ref_id="1168424" ref_url="https://bugzilla.suse.com/1168424" source="BUGZILLA"/>
		<reference ref_id="1168443" ref_url="https://bugzilla.suse.com/1168443" source="BUGZILLA"/>
		<reference ref_id="1168486" ref_url="https://bugzilla.suse.com/1168486" source="BUGZILLA"/>
		<reference ref_id="1168552" ref_url="https://bugzilla.suse.com/1168552" source="BUGZILLA"/>
		<reference ref_id="1168760" ref_url="https://bugzilla.suse.com/1168760" source="BUGZILLA"/>
		<reference ref_id="1168762" ref_url="https://bugzilla.suse.com/1168762" source="BUGZILLA"/>
		<reference ref_id="1168763" ref_url="https://bugzilla.suse.com/1168763" source="BUGZILLA"/>
		<reference ref_id="1168764" ref_url="https://bugzilla.suse.com/1168764" source="BUGZILLA"/>
		<reference ref_id="1168765" ref_url="https://bugzilla.suse.com/1168765" source="BUGZILLA"/>
		<reference ref_id="1168829" ref_url="https://bugzilla.suse.com/1168829" source="BUGZILLA"/>
		<reference ref_id="1168854" ref_url="https://bugzilla.suse.com/1168854" source="BUGZILLA"/>
		<reference ref_id="1168881" ref_url="https://bugzilla.suse.com/1168881" source="BUGZILLA"/>
		<reference ref_id="1168884" ref_url="https://bugzilla.suse.com/1168884" source="BUGZILLA"/>
		<reference ref_id="1168952" ref_url="https://bugzilla.suse.com/1168952" source="BUGZILLA"/>
		<reference ref_id="1169013" ref_url="https://bugzilla.suse.com/1169013" source="BUGZILLA"/>
		<reference ref_id="1169057" ref_url="https://bugzilla.suse.com/1169057" source="BUGZILLA"/>
		<reference ref_id="1169307" ref_url="https://bugzilla.suse.com/1169307" source="BUGZILLA"/>
		<reference ref_id="1169308" ref_url="https://bugzilla.suse.com/1169308" source="BUGZILLA"/>
		<reference ref_id="1169390" ref_url="https://bugzilla.suse.com/1169390" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169625" ref_url="https://bugzilla.suse.com/1169625" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19770" ref_url="https://www.suse.com/security/cve/CVE-2019-19770/" source="CVE"/>
		<reference ref_id="CVE-2019-3701" ref_url="https://www.suse.com/security/cve/CVE-2019-3701/" source="CVE"/>
		<reference ref_id="CVE-2019-9458" ref_url="https://www.suse.com/security/cve/CVE-2019-9458/" source="CVE"/>
		<reference ref_id="CVE-2020-10942" ref_url="https://www.suse.com/security/cve/CVE-2020-10942/" source="CVE"/>
		<reference ref_id="CVE-2020-11494" ref_url="https://www.suse.com/security/cve/CVE-2020-11494/" source="CVE"/>
		<reference ref_id="CVE-2020-11669" ref_url="https://www.suse.com/security/cve/CVE-2020-11669/" source="CVE"/>
		<reference ref_id="CVE-2020-8834" ref_url="https://www.suse.com/security/cve/CVE-2020-8834/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006760.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
- CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
- CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
- CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
- CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
- CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).
- CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).

The following non-security bugs were fixed:

- ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
- ACPI: watchdog: Fix gas-&gt;access_width usage (bsc#1051510).
- ahci: Add support for Amazon's Annapurna Labs SATA controller (bsc#1169013).
- ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
- ALSA: core: Add snd_device_get_state() helper (bsc#1051510).
- ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
- ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard (bsc#1051510).
- ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: hda: default enable CA0132 DSP support (bsc#1051510).
- ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
- ALSA: hda/realtek - a fake key event is triggered by running shutup (bsc#1051510).
- ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (git-fixes).
- ALSA: hda/realtek: Enable mute LED on an HP system (bsc#1051510).
- ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (git-fixes).
- ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).
- ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups (bsc#1051510).
- ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).
- ALSA: hda: remove redundant assignment to variable timeout (bsc#1051510).
- ALSA: hda: Use scnprintf() for string truncation (bsc#1051510).
- ALSA: hdsp: remove redundant assignment to variable err (bsc#1051510).
- ALSA: ice1724: Fix invalid access for enumerated ctl items (bsc#1051510).
- ALSA: info: remove redundant assignment to variable c (bsc#1051510).
- ALSA: korg1212: fix if-statement empty body warnings (bsc#1051510).
- ALSA: line6: Fix endless MIDI read loop (git-fixes).
- ALSA: pcm: Fix superfluous snprintf() usage (bsc#1051510).
- ALSA: pcm.h: add for_each_pcm_streams() (bsc#1051510).
- ALSA: pcm: oss: Avoid plugin buffer overflow (git-fixes).
- ALSA: pcm: oss: Fix regression by buffer overflow fix (bsc#1051510).
- ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks (git-fixes).
- ALSA: pcm: oss: Unlock mutex temporarily for sleeping at read/write (bsc#1051510).
- ALSA: pcm: Use a macro for parameter masks to reduce the needed cast (bsc#1051510).
- ALSA: seq: oss: Fix running status after receiving sysex (git-fixes).
- ALSA: seq: virmidi: Fix running status after receiving sysex (git-fixes).
- ALSA: usb-audio: Add delayed_register option (bsc#1051510).
- ALSA: usb-audio: Add support for MOTU MicroBook IIc (bsc#1051510).
- ALSA: usb-audio: Create a registration quirk for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
- ALSA: usb-audio: Do not create a mixer element with bogus volume range (bsc#1051510).
- ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor (bsc#1051510).
- ALSA: usb-audio: Fix mixer controls' USB interface for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
- ALSA: usb-audio: Inform devices that need delayed registration (bsc#1051510).
- ALSA: usb-audio: Parse source ID of UAC2 effect unit (bsc#1051510).
- ALSA: usb-audio: Rewrite registration quirk handling (bsc#1051510).
- ALSA: usb-midi: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: usx2y: use for_each_pcm_streams() macro (bsc#1051510).
- ALSA: via82xx: Fix endianness annotations (bsc#1051510).
- apei/ghes: Do not delay GHES polling (bsc#1166982).
- ASoC: Intel: atom: Take the drv-&gt;lock mutex before calling sst_send_slot_map() (bsc#1051510).
- ASoC: Intel: mrfld: fix incorrect check on p-&gt;sink (bsc#1051510).
- ASoC: Intel: mrfld: return error codes when an error occurs (bsc#1051510).
- ASoC: jz4740-i2s: Fix divider written at incorrect offset in register (bsc#1051510).
- ASoC: sun8i-codec: Remove unused dev from codec struct (bsc#1051510).
- ath9k: Handle txpower changes even when TPC is disabled (bsc#1051510).
- batman-adv: Avoid spurious warnings from bat_v neigh_cmp implementation (bsc#1051510).
- batman-adv: Do not schedule OGM for disabled interface (bsc#1051510).
- batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs (bsc#1051510).
- binfmt_elf: Do not move brk for INTERP-less ET_EXEC (bsc#1169013).
- binfmt_elf: move brk out of mmap when doing direct loader exec (bsc#1169013).
- blk-mq: Allow blocking queue tag iter callbacks (bsc#1167316).
- block, bfq: fix use-after-free in bfq_idle_slice_timer_body (bsc#1168760).
- block: keep bdi-&gt;io_pages in sync with max_sectors_kb for stacked devices (bsc#1168762).
- Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl (bsc#1051510).
- bnxt_en: Support all variants of the 5750X chip family (bsc#1167216).
- bpf: Explicitly memset some bpf info structures declared on the stack (bsc#1083647).
- bpf: Explicitly memset the bpf_attr structure (bsc#1083647).
- brcmfmac: abort and release host after error (bsc#1111666).
- btrfs: Account for trans_block_rsv in may_commit_transaction (bsc#1165949).
- btrfs: add a flush step for delayed iputs (bsc#1165949).
- btrfs: add assertions for releasing trans handle reservations (bsc#1165949).
- btrfs: add btrfs_delete_ref_head helper (bsc#1165949).
- btrfs: add enospc debug messages for ticket failure (bsc#1165949).
- btrfs: Add enospc_debug printing in metadata_reserve_bytes (bsc#1165949).
- btrfs: add new flushing states for the delayed refs rsv (bsc#1165949).
- btrfs: add space reservation tracepoint for reserved bytes (bsc#1165949).
- btrfs: adjust dirty_metadata_bytes after writeback failure of extent buffer (bsc#1168273).
- btrfs: allow us to use up to 90% of the global rsv for unlink (bsc#1165949).
- btrfs: always reserve our entire size for the global reserve (bsc#1165949).
- btrfs: assert on non-empty delayed iputs (bsc##1165949).
- btrfs: be more explicit about allowed flush states (bsc#1165949).
- btrfs: call btrfs_create_pending_block_groups unconditionally (bsc#1165949).
- btrfs: catch cow on deleting snapshots (bsc#1165949).
- btrfs: change the minimum global reserve size (bsc#1165949).
- btrfs: check if there are free block groups for commit (bsc#1165949).
- btrfs: clean up error handling in btrfs_truncate() (bsc#1165949).
- btrfs: cleanup extent_op handling (bsc#1165949).
- btrfs: cleanup root usage by btrfs_get_alloc_profile (bsc#1165949).
- btrfs: cleanup the target logic in __btrfs_block_rsv_release (bsc#1165949).
- btrfs: clear space cache inode generation always (bsc#1165949).
- btrfs: delayed-ref: pass delayed_refs directly to btrfs_delayed_ref_lock (bsc#1165949).
- btrfs: Do mandatory tree block check before submitting bio (bsc#1168273).
- btrfs: do not account global reserve in can_overcommit (bsc#1165949).
- btrfs: do not allow reservations if we have pending tickets (bsc#1165949).
- btrfs: do not call btrfs_start_delalloc_roots in flushoncommit (bsc#1165949).
- btrfs: do not end the transaction for delayed refs in throttle (bsc#1165949).
- btrfs: do not enospc all tickets on flush failure (bsc#1165949).
- btrfs: do not reset bio-&gt;bi_ops while writing bio (bsc#1168273).
- btrfs: do not run delayed_iputs in commit (bsc##1165949).
- btrfs: do not run delayed refs in the end transaction logic (bsc#1165949).
- btrfs: do not use ctl-&gt;free_space for max_extent_size (bsc##1165949).
- btrfs: do not use global reserve for chunk allocation (bsc#1165949).
- btrfs: drop get_extent from extent_page_data (bsc#1168273).
- btrfs: drop min_size from evict_refill_and_join (bsc##1165949).
- btrfs: drop unused space_info parameter from create_space_info (bsc#1165949).
- btrfs: dump block_rsv details when dumping space info  (bsc#1165949).
- btrfs: export block group accounting helpers (bsc#1165949).
- btrfs: export block_rsv_use_bytes (bsc#1165949).
- btrfs: export btrfs_block_rsv_add_bytes (bsc#1165949).
- btrfs: export __btrfs_block_rsv_release (bsc#1165949).
- btrfs: export space_info_add_*_bytes (bsc#1165949).
- btrfs: export the block group caching helpers (bsc#1165949).
- btrfs: export the caching control helpers (bsc#1165949).
- btrfs: export the excluded extents helpers (bsc#1165949).
- btrfs: extent_io: add proper error handling to lock_extent_buffer_for_io() (bsc#1168273).
- btrfs: extent_io: Handle errors better in btree_write_cache_pages() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_write_full_page() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_write_locked_range() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_writepages() (bsc#1168273).
- btrfs: extent_io: Kill dead condition in extent_write_cache_pages() (bsc#1168273).
- btrfs: extent_io: Kill the forward declaration of flush_write_bio (bsc#1168273).
- btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up (bsc#1168273).
- btrfs: extent-tree: Add lockdep assert when updating space info (bsc#1165949).
- btrfs: extent-tree: Add trace events for space info numbers update (bsc#1165949).
- btrfs: extent-tree: Detect bytes_may_use underflow earlier (bsc#1165949).
- btrfs: extent-tree: Detect bytes_pinned underflow earlier (bsc#1165949).
- btrfs: factor our read/write stage off csum_tree_block into its callers (bsc#1168273).
- btrfs: factor out the ticket flush handling (bsc#1165949).
- btrfs: fix insert_reserved error handling (bsc##1165949).
- btrfs: fix may_commit_transaction to deal with no partial filling (bsc#1165949).
- btrfs: fix missing delayed iputs on unmount (bsc#1165949).
- btrfs: fix qgroup double free after failure to reserve metadata for delalloc (bsc#1165949).
- btrfs: fix race leading to metadata space leak after task received signal (bsc#1165949).
- btrfs: fix truncate throttling (bsc#1165949).
- btrfs: fix unwritten extent buffers and hangs on future writeback attempts (bsc#1168273).
- btrfs: force chunk allocation if our global rsv is larger than metadata (bsc#1165949).
- btrfs: Improve global reserve stealing logic (bsc#1165949).
- btrfs: introduce an evict flushing state (bsc#1165949).
- btrfs: introduce delayed_refs_rsv (bsc#1165949).
- btrfs: loop in inode_rsv_refill (bsc#1165949).
- btrfs: make btrfs_destroy_delayed_refs use btrfs_delayed_ref_lock (bsc#1165949).
- btrfs: make btrfs_destroy_delayed_refs use btrfs_delete_ref_head (bsc#1165949).
- btrfs: make caching_thread use btrfs_find_next_key (bsc#1165949).
- btrfs: make plug in writing meta blocks really work (bsc#1168273).
- btrfs: merge two flush_write_bio helpers (bsc#1168273).
- btrfs: migrate btrfs_trans_release_chunk_metadata (bsc#1165949).
- btrfs: migrate inc/dec_block_group_ro code (bsc#1165949).
- btrfs: migrate nocow and reservation helpers (bsc#1165949).
- btrfs: migrate the alloc_profile helpers (bsc#1165949).
- btrfs: migrate the block group caching code (bsc#1165949).
- btrfs: migrate the block group cleanup code (bsc#1165949).
- btrfs: migrate the block group lookup code (bsc#1165949).
- btrfs: migrate the block group read/creation code (bsc#1165949).
- btrfs: migrate the block group ref counting stuff (bsc#1165949).
- btrfs: migrate the block group removal code (bsc#1165949).
- btrfs: migrate the block group space accounting helpers (bsc#1165949).
- btrfs: migrate the block-rsv code to block-rsv.c (bsc#1165949).
- btrfs: migrate the chunk allocation code (bsc#1165949).
- btrfs: migrate the delalloc space stuff to it's own home (bsc#1165949).
- btrfs: migrate the delayed refs rsv code (bsc#1165949).
- btrfs: migrate the dirty bg writeout code (bsc#1165949).
- btrfs: migrate the global_block_rsv helpers to block-rsv.c (bsc#1165949).
- btrfs: move and export can_overcommit (bsc#1165949).
- btrfs: move basic block_group definitions to their own header (bsc#1165949).
- btrfs: move btrfs_add_free_space out of a header file (bsc#1165949).
- btrfs: move btrfs_block_rsv definitions into it's own header (bsc#1165949).
- btrfs: move btrfs_raid_group values to btrfs_raid_attr table (bsc#1165949).
- btrfs: move btrfs_space_info_add_*_bytes to space-info.c (bsc#1165949).
- btrfs: move dump_space_info to space-info.c (bsc#1165949).
- btrfs: move reserve_metadata_bytes and supporting code to space-info.c (bsc#1165949).
- btrfs: move space_info to space-info.h (bsc#1165949).
- btrfs: move the space_info handling code to space-info.c (bsc#1165949).
- btrfs: move the space info update macro to space-info.h (bsc#1165949).
- btrfs: move the subvolume reservation stuff out of extent-tree.c (bsc#1165949).
- btrfs: only check delayed ref usage in should_end_transaction (bsc#1165949).
- btrfs: only check priority tickets for priority flushing (bsc#1165949).
- btrfs: only free reserved extent if we didn't insert it (bsc##1165949).
- btrfs: only reserve metadata_size for inodes (bsc#1165949).
- btrfs: only track ref_heads in delayed_ref_updates (bsc#1165949).
- btrfs: Output ENOSPC debug info in inc_block_group_ro (bsc#1165949).
- btrfs: pass root to various extent ref mod functions (bsc#1165949).
- btrfs: qgroup: Do not hold qgroup_ioctl_lock in btrfs_qgroup_inherit() (bsc#1165823).
- btrfs: qgroup: Mark qgroup inconsistent if we're inherting snapshot to a new qgroup (bsc#1165823).
- btrfs: refactor block group replication factor calculation to a helper (bsc#1165949).
- btrfs: refactor priority_reclaim_metadata_space (bsc#1165949).
- btrfs: refactor the ticket wakeup code (bsc#1165949).
- btrfs: release metadata before running delayed refs (bsc##1165949).
- btrfs: remove bio_flags which indicates a meta block of log-tree (bsc#1168273).
- btrfs: Remove btrfs_inode::delayed_iput_count (bsc#1165949).
- btrfs: Remove fs_info from do_chunk_alloc (bsc#1165949).
- btrfs: remove orig_bytes from reserve_ticket (bsc#1165949).
- btrfs: Remove redundant argument of flush_space (bsc#1165949).
- btrfs: Remove redundant mirror_num arg (bsc#1168273).
- btrfs: Rename bin_search -&gt; btrfs_bin_search (bsc#1168273).
- btrfs: rename btrfs_space_info_add_old_bytes (bsc#1165949).
- btrfs: rename do_chunk_alloc to btrfs_chunk_alloc (bsc#1165949).
- btrfs: rename the btrfs_calc_*_metadata_size helpers (bsc#1165949).
- btrfs: replace cleaner_delayed_iput_mutex with a waitqueue (bsc#1165949).
- btrfs: reserve delalloc metadata differently (bsc#1165949).
- btrfs: reserve extra space during evict (bsc#1165949).
- btrfs: reset max_extent_size on clear in a bitmap (bsc##1165949).
- btrfs: reset max_extent_size properly (bsc##1165949).
- btrfs: rework btrfs_check_space_for_delayed_refs (bsc#1165949).
- btrfs: rework wake_all_tickets (bsc#1165949).
- btrfs: roll tracepoint into btrfs_space_info_update helper (bsc#1165949).
- btrfs: run btrfs_try_granting_tickets if a priority ticket fails (bsc#1165949).
- btrfs: run delayed iput at unlink time (bsc#1165949).
- btrfs: run delayed iputs before committing (bsc#1165949).
- btrfs: set max_extent_size properly (bsc##1165949).
- btrfs: sink extent_write_full_page tree argument (bsc#1168273).
- btrfs: sink extent_write_locked_range tree parameter (bsc#1168273).
- btrfs: sink flush_fn to extent_write_cache_pages (bsc#1168273).
- btrfs: sink get_extent parameter to extent_fiemap (bsc#1168273).
- btrfs: sink get_extent parameter to extent_readpages (bsc#1168273).
- btrfs: sink get_extent parameter to extent_write_full_page (bsc#1168273).
- btrfs: sink get_extent parameter to extent_write_locked_range (bsc#1168273).
- btrfs: sink get_extent parameter to extent_writepages (bsc#1168273).
- btrfs: sink get_extent parameter to get_extent_skip_holes (bsc#1168273).
- btrfs: sink writepage parameter to extent_write_cache_pages (bsc#1168273).
- btrfs: stop partially refilling tickets when releasing space (bsc#1165949).
- btrfs: stop using block_rsv_release_bytes everywhere (bsc#1165949).
- btrfs: switch to on-stack csum buffer in csum_tree_block (bsc#1168273).
- btrfs: temporarily export btrfs_get_restripe_target (bsc#1165949).
- btrfs: temporarily export fragment_free_space (bsc#1165949).
- btrfs: temporarily export inc_block_group_ro (bsc#1165949).
- btrfs: track DIO bytes in flight (bsc#1165949).
- btrfs: tree-checker: Remove comprehensive root owner check (bsc#1168273).
- btrfs: unexport can_overcommit (bsc#1165949).
- btrfs: unexport the temporary exported functions (bsc#1165949).
- btrfs: unify error handling for ticket flushing (bsc#1165949).
- btrfs: unify extent_page_data type passed as void (bsc#1168273).
- btrfs: update may_commit_transaction to use the delayed refs rsv (bsc#1165949).
- btrfs: use btrfs_try_granting_tickets in update_global_rsv (bsc#1165949).
- btrfs: wait on caching when putting the bg cache (bsc#1165949).
- btrfs: wait on ordered extents on abort cleanup (bsc#1165949).
- btrfs: wakeup cleaner thread when adding delayed iput (bsc#1165949).
- ceph: canonicalize server path in place (bsc#1168443).
- ceph: check POOL_FLAG_FULL/NEARFULL in addition to OSDMAP_FULL/NEARFULL (bsc#1169307).
- ceph: remove the extra slashes in the server path (bsc#1168443).
- cfg80211: check reg_rule for NULL in handle_channel_custom() (bsc#1051510).
- cfg80211: check wiphy driver existence for drvinfo report (bsc#1051510).
- cgroup: memcg: net: do not associate sock with unrelated cgroup (bsc#1167290).
- cifs: ignore cached share root handle closing errors (bsc#1166780).
- clk: imx: Align imx sc clock msg structs to 4 (bsc#1111666).
- clk: imx: Align imx sc clock msg structs to 4 (git-fixes).
- clk: qcom: rcg: Return failure for RCG update (bsc#1051510).
- configfs: Fix bool initialization/comparison (bsc#1051510).
- cpufreq: Register drivers only after CPU devices have been registered (bsc#1051510).
- cpuidle: Do not unset the driver if it is there already (bsc#1051510).
- crypto: arm64/sha-ce - implement export/import (bsc#1051510).
- Crypto: chelsio - Fixes a deadlock between rtnl_lock and uld_mutex (bsc#1111666).
- Crypto: chelsio - Fixes a hang issue during driver registration (bsc#1111666).
- crypto: mxs-dcp - fix scatterlist linearization for hash (bsc#1051510).
- crypto: tcrypt - fix printed skcipher [a]sync mode (bsc#1051510).
- debugfs: add support for more elaborate -&gt;d_fsdata (bsc#1159198  bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198). Prerequisite for bsc#1159198.
- debugfs: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: debugfs_real_fops(): drop __must_hold sparse annotation (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: debugfs_use_start/finish do not exist anymore (bsc#1159198). Prerequisite for bsc#1159198.
- debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198). Prerequisite for bsc#1159198.
- debugfs: fix debugfs_real_fops() build error (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: implement per-file removal protection (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: purge obsolete SRCU based removal protection (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: simplify __debugfs_remove_file() (bsc#1159198). Prerequisite for bsc#1159198.
- Deprecate NR_UNSTABLE_NFS, use NR_WRITEBACK (bsc#1163403).
- dmaengine: ste_dma40: fix unneeded variable warning (bsc#1051510).
- drm/amd/amdgpu: Fix GPR read from debugfs (v2) (bsc#1113956)
- drm/amd/display: Add link_rate quirk for Apple 15' MBP 2017 (bsc#1111666).
- drm/amd/display: Fix wrongly passed static prefix (bsc#1111666).
- drm/amd/display: remove duplicated assignment to grph_obj_type (bsc#1051510).
- drm/amdgpu: fix typo for vcn1 idle check (bsc#1111666).
- drm/bochs: downgrade pci_request_region failure from error to warning (bsc#1051510).
- drm/bridge: dw-hdmi: fix AVI frame colorimetry (bsc#1051510).
- drm_dp_mst_topology: fix broken drm_dp_sideband_parse_remote_dpcd_read() (bsc#1051510).
- drm/drm_dp_mst:remove set but not used variable 'origlen' (bsc#1051510).
- drm/exynos: dsi: fix workaround for the legacy clock name (bsc#1111666).
- drm/exynos: dsi: propagate error value and silence meaningless warning (bsc#1111666).
- drm/lease: fix WARNING in idr_destroy (bsc#1113956)
- drm/msm: Set dma maximum segment size for mdss (bsc#1051510).
- drm/msm: stop abusing dma_map/unmap for cache (bsc#1051510).
- drm/msm: Use the correct dma_sync calls harder (bsc#1051510).
- drm/msm: Use the correct dma_sync calls in msm_gem (bsc#1051510).
- drm/sun4i: dsi: Use NULL to signify 'no panel' (bsc#1111666).
- drm/v3d: Replace wait_for macros to remove use of msleep (bsc#1111666).
- drm/vc4: Fix HDMI mode validation (git-fixes).
- dt-bindings: allow up to four clocks for orion-mdio (bsc#1051510).
- efi: Do not attempt to map RCI2 config table if it does not exist (jsc#ECO-366, bsc#1168367).
- efi: Export Runtime Configuration Interface table to sysfs (jsc#ECO-366, bsc#1168367).
- efi: Fix a race and a buffer overflow while reading efivars via sysfs (bsc#1164893).
- efi: x86: move efi_is_table_address() into arch/x86 (jsc#ECO-366, bsc#1168367).
- ext4: add cond_resched() to __ext4_find_entry() (bsc#1166862).
- ext4: Avoid ENOSPC when avoiding to reuse recently deleted inodes (bsc#1165019).
- ext4: Check for non-zero journal inum in ext4_calculate_overhead (bsc#1167288).
- ext4: do not assume that mmp_nodename/bdevname have NUL (bsc#1166860).
- ext4: fix a data race in EXT4_I(inode)-&gt;i_disksize (bsc#1166861).
- ext4: fix incorrect group count in ext4_fill_super error message (bsc#1168765).
- ext4: fix incorrect inodes per group in error message (bsc#1168764).
- ext4: fix potential race between online resizing and write operations (bsc#1166864).
- ext4: fix potential race between s_flex_groups online resizing and access (bsc#1166867).
- ext4: fix potential race between s_group_info online resizing and access (bsc#1166866).
- ext4: fix race between writepages and enabling EXT4_EXTENTS_FL (bsc#1166870).
- ext4: fix support for inode sizes &gt; 1024 bytes (bsc#1164284).
- ext4: potential crash on allocation error in ext4_alloc_flex_bg_array() (bsc#1166940).
- ext4: rename s_journal_flag_rwsem to s_writepages_rwsem (bsc#1166868).
- ext4: validate the debug_want_extra_isize mount option at parse time (bsc#1163897).
- fat: fix uninit-memory access for partial initialized inode (bsc#1051510).
- fat: work around race with userspace's read via blockdev while mounting (bsc#1051510).
- fbdev/g364fb: Fix build failure (bsc#1051510).
- fbdev: potential information leak in do_fb_ioctl() (bsc#1114279)
- fbmem: Adjust indentation in fb_prepare_logo and fb_blank (bsc#1114279)
- firmware: arm_sdei: fix double-lock on hibernate with shared events (bsc#1111666).
- firmware: arm_sdei: fix possible double-lock on hibernate error path (bsc#1111666).
- ftrace/kprobe: Show the maxactive number on kprobe_events (git-fixes).
- HID: apple: Add support for recent firmware on Magic Keyboards (bsc#1051510).
- i2c: hix5hd2: add missed clk_disable_unprepare in remove (bsc#1051510).
- i2c: jz4780: silence log flood on txabrt (bsc#1051510).
- IB/hfi1: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911).
- ibmvfc: do not send implicit logouts prior to NPIV login (bsc#1169625 ltc#184611).
- iio: gyro: adis16136: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis16400: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis16480: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: magnetometer: ak8974: Fix negative raw values in sysfs (bsc#1051510).
- iio: potentiostat: lmp9100: fix iio_triggered_buffer_{predisable,postenable} positions (bsc#1051510).
- Input: add safety guards to input_set_keycode() (bsc#1168075).
- Input: avoid BIT() macro usage in the serio.h UAPI header (bsc#1051510).
- Input: raydium_i2c_ts - fix error codes in raydium_i2c_boot_trigger() (bsc#1051510).
- Input: synaptics - enable RMI on HP Envy 13-ad105ng (bsc#1051510).
- intel_th: Fix user-visible error codes (bsc#1051510).
- intel_th: pci: Add Elkhart Lake CPU support (bsc#1051510).
- iommu/amd: Fix the configuration of GCR3 table root pointer (bsc#1169057).
- ipmi: fix hung processes in __get_guid() (bsc#1111666).
- ipmi: fix hung processes in __get_guid() (git-fixes).
- ipmi:ssif: Handle a possible NULL pointer reference (bsc#1051510).
- ipv6: Fix nlmsg_flags when splitting a multipath route (networking-stable-20_03_01).
- ipv6: Fix route replacement with dev-only route (networking-stable-20_03_01).
- ipvlan: do not add hardware address of master to its unicast filter list (bsc#1137325).
- irqchip/bcm2835: Quiesce IRQs left enabled by bootloader (bsc#1051510).
- irqdomain: Fix a memory leak in irq_domain_push_irq() (bsc#1051510).
- kABI: fixes for debugfs per-file removal protection backports (bsc#1159198 bsc#1109911).
- kABI: restore debugfs_remove_recursive() (bsc#1159198).
- kABI workaround for pcie_port_bus_type change (bsc#1161561).
- KVM: s390: vsie: Fix possible race when shadowing region 3 tables (git-fixes).
- KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks (git-fixes).
- libceph: fix alloc_msg_with_page_vector() memory leaks (bsc#1169308).
- libfs: fix infoleak in simple_attr_read() (bsc#1168881).
- lpfc: add support for translating an RSCN rcv into a discovery rescan (bsc#1164777 bsc#1164780 bsc#1165211).
- lpfc: add support to generate RSCN events for nport (bsc#1164777 bsc#1164780 bsc#1165211).
- mac80211: consider more elements in parsing CRC (bsc#1051510).
- mac80211: Do not send mesh HWMP PREQ if HWMP is disabled (bsc#1051510).
- mac80211: free peer keys before vif down in mesh (bsc#1051510).
- mac80211: mesh: fix RCU warning (bsc#1051510).
- mac80211: only warn once on chanctx_conf being NULL (bsc#1051510).
- mac80211: rx: avoid RCU list traversal under mutex (bsc#1051510).
- macsec: add missing attribute validation for port (bsc#1051510).
- macsec: fix refcnt leak in module exit routine (bsc#1051510).
- media: dib0700: fix rc endpoint lookup (bsc#1051510).
- media: flexcop-usb: fix endpoint sanity check (git-fixes).
- media: go7007: Fix URB type for interrupt handling (bsc#1051510).
- media: ov519: add missing endpoint sanity checks (bsc#1168829).
- media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support (bsc#1051510).
- media: ov6650: Fix some format attributes not under control (bsc#1051510).
- media: ov6650: Fix stored crop rectangle not in sync with hardware (bsc#1051510).
- media: ov6650: Fix stored frame format not in sync with hardware (bsc#1051510).
- media: stv06xx: add missing descriptor sanity checks (bsc#1168854).
- media: tda10071: fix unsigned sign extension overflow (bsc#1051510).
- media: usbtv: fix control-message timeouts (bsc#1051510).
- media: v4l2-core: fix entity initialization in device_register_subdev (bsc#1051510).
- media: vsp1: tidyup VI6_HGT_LBn_H() macro (bsc#1051510).
- media: xirlink_cit: add missing descriptor sanity checks (bsc#1051510).
- mfd: dln2: Fix sanity checking for endpoints (bsc#1051510).
- misc: pci_endpoint_test: Fix to support &gt; 10 pci-endpoint-test devices (bsc#1051510).
- mmc: sdhci-of-at91: fix cd-gpios for SAMA5D2 (bsc#1051510).
- mm/filemap.c: do not initiate writeback if mapping has no dirty pages (bsc#1168884).
- mm/memory_hotplug.c: only respect mem= parameter during boot stage (bsc#1065600).
- mm: replace PF_LESS_THROTTLE with PF_LOCAL_THROTTLE (bsc#1163403).
- mwifiex: set needed_headroom, not hard_header_len (bsc#1051510).
- net: dsa: bcm_sf2: Fix overflow checks (git-fixes).
- net: dsa: tag_qca: Make sure there is headroom for tag (networking-stable-20_02_19).
- net: ena: Add PCI shutdown handler to allow safe kexec (bsc#1167421, bsc#1167423).
- net: fib_rules: Correctly set table field when table number exceeds 8 bits (networking-stable-20_03_01).
- netfilter: conntrack: sctp: use distinct states for new SCTP connections (bsc#1159199).
- net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL (bsc#1051510).
- net: nfc: fix bounds checking bugs on 'pipe' (bsc#1051510).
- net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before accessing PHY registers (bsc#1051510).
- net: phy: restore mdio regs in the iproc mdio driver (networking-stable-20_03_01).
- net/sched: flower: add missing validation of TCA_FLOWER_FLAGS (networking-stable-20_02_19).
- net_sched: keep alloc_hash updated after hash allocation (git-fixes).
- net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS (networking-stable-20_02_19).
- net/smc: fix leak of kernel memory to user space (networking-stable-20_02_19).
- NFC: fdp: Fix a signedness bug in fdp_nci_send_patch() (bsc#1051510).
- nfc: pn544: Fix occasional HW initialization failure (networking-stable-20_03_01).
- NFS: send state management on a single connection (bsc#1167005).
- nvme: fix a possible deadlock when passthru commands sent to a multipath device (bsc#1158983).
- nvme: fix controller removal race with scan work (bsc#1158983).
- nvme-multipath: also check for a disabled path if there is a single sibling (bsc#1158983).
- nvme-multipath: do not select namespaces which are about to be removed (bsc#1158983).
- nvme-multipath: factor out a nvme_path_is_disabled helper (bsc#1158983).
- nvme-multipath: fix crash in nvme_mpath_clear_ctrl_paths (bsc#1158983).
- nvme-multipath: fix possible io hang after ctrl reconnect (bsc#1158983).
- nvme-multipath: fix possible I/O hang when paths are updated (bsc#1158983).
- nvme-multipath: remove unused groups_only mode in ana log (bsc#1158983).
- nvme-multipath: round-robin I/O policy (bsc#1158983).
- objtool: Add is_static_jump() helper (bsc#1169514).
- objtool: Add relocation check for alternative sections (bsc#1169514).
- OMAP: DSS2: remove non-zero check on variable r (bsc#1114279)
- partitions/efi: Fix partition name parsing in GUID partition entry (bsc#1168763).
- PCI/AER: Factor message prefixes with dev_fmt() (bsc#1161561).
- PCI/AER: Log which device prevents error recovery (bsc#1161561).
- PCI/AER: Remove ERR_FATAL code from ERR_NONFATAL path (bsc#1161561).
- PCI/ASPM: Clear the correct bits when enabling L1 substates (bsc#1051510).
- PCI: endpoint: Fix clearing start entry in configfs (bsc#1051510).
- PCI/ERR: Always report current recovery status for udev (bsc#1161561).
- PCI/ERR: Handle fatal error recovery (bsc#1161561).
- PCI/ERR: Remove duplicated include from err.c (bsc#1161561).
- PCI/ERR: Simplify broadcast callouts (bsc#1161561).
- PCI: pciehp: Fix MSI interrupt race (bsc#1159037).
- PCI: portdrv: Initialize service drivers directly (bsc#1161561).
- PCI/portdrv: Remove pcie_port_bus_type link order dependency (bsc#1161561).
- PCI: Simplify disconnected marking (bsc#1161561).
- PCI/switchtec: Fix init_completion race condition with poll_wait() (bsc#1051510).
- PCI: Unify device inaccessible (bsc#1161561).
- perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag (bsc#1114279).
- perf: qcom_l2: fix column exclusion check (git-fixes).
- pinctrl: core: Remove extra kref_get which blocks hogs being freed (bsc#1051510).
- platform/x86: pmc_atom: Add Lex 2I385SW to critclk_systems DMI table (bsc#1051510).
- PM: core: Fix handling of devices deleted during system-wide resume (git-fixes).
- powerpc/64: mark start_here_multiplatform as __ref (bsc#1148868).
- powerpc/64s: Fix section mismatch warnings from boot code (bsc#1148868).
- powerpc/64/tm: Do not let userspace set regs-&gt;trap via sigreturn (bsc#1118338 ltc#173734).
- powerpc/hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE entries (bsc#1065729).
- powerpc/kprobes: Ignore traps that happened in real mode (bsc#1065729).
- powerpc/mm: Fix section mismatch warning in stop_machine_change_mapping() (bsc#1148868).
- powerpc/pseries/ddw: Extend upper limit for huge DMA window for persistent memory (bsc#1142685 ltc#179509).
- powerpc/pseries/iommu: Fix set but not used values (bsc#1142685 ltc#179509).
- powerpc/pseries/iommu: Use memory@ nodes in max RAM address calculation (bsc#1142685 ltc#179509).
- powerpc/vmlinux.lds: Explicitly retain .gnu.hash (bsc#1148868).
- powerpc/xive: Replace msleep(x) with msleep(OPAL_BUSY_DELAY_MS) (bsc#1085030).
- powerpc/xive: Use XIVE_BAD_IRQ instead of zero to catch non configured IPIs (bsc#1085030).
- pwm: bcm2835: Dynamically allocate base (bsc#1051510).
- pwm: meson: Fix confusing indentation (bsc#1051510).
- pwm: pca9685: Fix PWM/GPIO inter-operation (bsc#1051510).
- pwm: rcar: Fix late Runtime PM enablement (bsc#1051510).
- pwm: renesas-tpu: Fix late Runtime PM enablement (bsc#1051510).
- pxa168fb: fix release function mismatch in probe failure (bsc#1051510).
- qede: Fix race between rdma destroy workqueue and link change event (networking-stable-20_03_01).
- qmi_wwan: unconditionally reject 2 ep interfaces (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (git-fixes).
- s390/cio: avoid duplicated 'ADD' uevents (git-fixes).
- s390/cio: generate delayed uevent for vfio-ccw subchannels (git-fixes).
- s390/cpuinfo: fix wrong output when CPU0 is offline (git-fixes).
- s390/diag: fix display of diagnose call statistics (git-fixes).
- s390/gmap: return proper error code on ksm unsharing (git-fixes).
- s390/mm: fix dynamic pagetable upgrade for hugetlbfs (bsc#1165182 LTC#184102).
- s390/qeth: cancel RX reclaim work earlier (git-fixes).
- s390/qeth: do not return -ENOTSUPP to userspace (git-fixes).
- s390/qeth: do not warn for napi with 0 budget (git-fixes).
- s390/qeth: fix off-by-one in RX copybreak check (git-fixes).
- s390/qeth: fix potential deadlock on workqueue flush (bsc#1165185 LTC#184108).
- s390/qeth: fix promiscuous mode after reset (git-fixes).
- s390/qeth: fix qdio teardown after early init error (git-fixes).
- s390/qeth: handle error due to unsupported transport mode (git-fixes).
- s390/qeth: handle error when backing RX buffer (git-fixes).
- s390/qeth: lock the card while changing its hsuid (git-fixes).
- s390/qeth: support net namespaces for L3 devices (git-fixes).
- s390/time: Fix clk type in get_tod_clock (git-fixes).
- scsi: core: avoid repetitive logging of device offline messages (bsc#1145929).
- scsi: core: kABI fix offline_already (bsc#1145929).
- scsi: fc: Update Descriptor definition and add RDF and Link Integrity FPINs (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551). Refresh sorted patches.
- scsi: lpfc: add RDF registration and Link Integrity FPIN logging (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Change default SCSI LUN QD to 64 (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654).
- scsi: lpfc: Clean up hba max_lun_queue_depth checks (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Copyright updates for 12.6.0.4 patches (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix broken Credit Recovery after driver load (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix compiler warning on frame size (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix coverity errors in fmdi attribute handling (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix crash after handling a pci error (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix disablement of FC-AL on lpe35000 models (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix driver nvme rescan logging (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix erroneous cpu limit of 128 on I/O statistics (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix Fabric hostname registration if system hostname changes (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix improper flag check for IO type (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix incomplete NVME discovery when target (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lockdep error - register non-static key (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lpfc_io_buf resource leak in lpfc_get_scsi_buf_s4 error path (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lpfc overwrite of sg_cnt field in nvmefc_tgt_fcp_req (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix MDS Latency Diagnostics Err-drop rates (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix missing check for CSF in Write Object Mbox Rsp (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix ras_log via debugfs (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix registration of ELS type support in fdmi (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix release of hwq to clear the eq relationship (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix: Rework setting of fdmi symbolic node name registration (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix RQ buffer leakage when no IOCBs available (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix scsi host template for SLI3 vports (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: fix spelling mistake 'Notication' -&gt; 'Notification' (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: fix spelling mistakes of asynchronous (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix unmap of dpp bars affecting next driver load (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix update of wq consumer index in lpfc_sli4_wq_release (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Make debugfs ktime stats generic for NVME and SCSI (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Make lpfc_defer_acc_rsp static (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Remove handler for obsolete ELS - Read Port Status (RPS) (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Remove prototype FIPS/DSS options from SLI-3 (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Update lpfc version to 12.8.0.0 (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (bsc#1157424).
- scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point (git-fixes).
- sctp: move the format error check out of __sctp_sf_do_9_1_abort (networking-stable-20_03_01).
- serdev: ttyport: restore client ops on deregistration (bsc#1051510).
- staging: ccree: use signal safe completion wait (git-fixes).
- staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table (bsc#1051510).
- staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi (bsc#1051510).
- staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb (bsc#1051510).
- staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback (bsc#1051510).
- SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202).
- swiotlb: do not panic on mapping failures (bsc#1162171).
- swiotlb: remove the overflow buffer (bsc#1162171).
- thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n (bsc#1051510).
- tpm: ibmvtpm: Wait for buffer to be set before proceeding (bsc#1065729).
- tty: evh_bytechan: Fix out of bounds accesses (bsc#1051510).
- tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode (bsc#1051510).
- tty: serial: imx: setup the correct sg entry for tx dma (bsc#1051510).
- USB: audio-v2: Add uac2_effect_unit_descriptor definition (bsc#1051510).
- USB: cdc-acm: fix rounding error in TIOCSSERIAL (git-fixes).
- USB: core: hub: do error out if usb_autopm_get_interface() fails (git-fixes).
- USB: core: port: do error out if usb_autopm_get_interface() fails (git-fixes).
- USB: Disable LPM on WD19's Realtek Hub (git-fixes).
- USB: dwc2: Fix in ISOC request length checking (git-fixes).
- USB: Fix novation SourceControl XL after suspend (git-fixes).
- USB: gadget: composite: Fix bMaxPower for SuperSpeedPlus (git-fixes).
- USB: gadget: f_fs: Fix use after free issue as part of queue failure (bsc#1051510).
- USB: host: xhci-plat: add a shutdown (git-fixes).
- USB: hub: Do not record a connect-change event during reset-resume (git-fixes).
- USB: misc: iowarrior: add support for 2 OEMed devices (git-fixes).
- USB: misc: iowarrior: add support for the 100 device (git-fixes).
- USB: misc: iowarrior: add support for the 28 and 28L devices (git-fixes).
- USB: musb: Disable pullup at init (git-fixes).
- USB: musb: fix crash with highmen PIO and usbmon (bsc#1051510).
- USB: quirks: add NO_LPM quirk for Logitech Screen Share (git-fixes).
- USB: quirks: add NO_LPM quirk for RTL8153 based ethernet adapters (git-fixes).
- USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback (bsc#1051510).
- USB: serial: option: add ME910G1 ECM composition 0x110b (git-fixes).
- USB: serial: pl2303: add device-id for HP LD381 (git-fixes).
- USB: storage: Add quirk for Samsung Fit flash (git-fixes).
- USB: uas: fix a plug &amp; unplug racing (git-fixes).
- USB: xhci: apply XHCI_SUSPEND_DELAY to AMD XHCI controller 1022:145c (git-fixes).
- virtio-blk: improve virtqueue error to BLK_STS (bsc#1167627).
- virtio_ring: fix unmap of indirect descriptors (bsc#1162171).
- x86/mce: Fix logic and comments around MSR_PPIN_CTL (bsc#1114279).
- x86/pkeys: Manually set X86_FEATURE_OSPKE to preserve existing changes (bsc#1114279).
- x86/xen: fix booting 32-bit pv guest (bsc#1071995).
- x86/xen: Make the boot CPU idle task reliable (bsc#1071995).
- x86/xen: Make the secondary CPU idle tasks reliable (bsc#1071995).
- xen/blkfront: fix memory allocation flags in blkfront_setup_indirect() (bsc#1168486).
- xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms (git-fixes).
- xhci: Do not open code __print_symbolic() in xhci trace events (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-29"/>
	<updated date="2020-04-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109911">SUSE bug 1109911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118338">SUSE bug 1118338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120386">SUSE bug 1120386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137325">SUSE bug 1137325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145051">SUSE bug 1145051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145929">SUSE bug 1145929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158983">SUSE bug 1158983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159037">SUSE bug 1159037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159198">SUSE bug 1159198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159199">SUSE bug 1159199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161561">SUSE bug 1161561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161951">SUSE bug 1161951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162171">SUSE bug 1162171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163403">SUSE bug 1163403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163897">SUSE bug 1163897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164284">SUSE bug 1164284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164777">SUSE bug 1164777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164893">SUSE bug 1164893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165019">SUSE bug 1165019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165182">SUSE bug 1165182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165185">SUSE bug 1165185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165211">SUSE bug 1165211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165823">SUSE bug 1165823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165949">SUSE bug 1165949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166780">SUSE bug 1166780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166860">SUSE bug 1166860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166861">SUSE bug 1166861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166862">SUSE bug 1166862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166864">SUSE bug 1166864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166866">SUSE bug 1166866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166867">SUSE bug 1166867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166868">SUSE bug 1166868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166870">SUSE bug 1166870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166940">SUSE bug 1166940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166982">SUSE bug 1166982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167005">SUSE bug 1167005</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167216">SUSE bug 1167216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167288">SUSE bug 1167288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167290">SUSE bug 1167290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167316">SUSE bug 1167316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167421">SUSE bug 1167421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167423">SUSE bug 1167423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167627">SUSE bug 1167627</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167629">SUSE bug 1167629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168075">SUSE bug 1168075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168202">SUSE bug 1168202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168273">SUSE bug 1168273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168276">SUSE bug 1168276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168295">SUSE bug 1168295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168367">SUSE bug 1168367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168424">SUSE bug 1168424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168443">SUSE bug 1168443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168486">SUSE bug 1168486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168552">SUSE bug 1168552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168760">SUSE bug 1168760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168762">SUSE bug 1168762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168763">SUSE bug 1168763</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168764">SUSE bug 1168764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168765">SUSE bug 1168765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168829">SUSE bug 1168829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168854">SUSE bug 1168854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168881">SUSE bug 1168881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168884">SUSE bug 1168884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168952">SUSE bug 1168952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169013">SUSE bug 1169013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169057">SUSE bug 1169057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169307">SUSE bug 1169307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169308">SUSE bug 1169308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169390">SUSE bug 1169390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169625">SUSE bug 1169625</bugzilla>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19770/">CVE-2019-19770</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3701/">CVE-2019-3701</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9458/">CVE-2019-9458</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10942/">CVE-2020-10942</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11494/">CVE-2020-11494</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11669/">CVE-2020-11669</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8834/">CVE-2020-8834</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496260" comment="kernel-docs-4.12.14-197.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496261" comment="kernel-obs-build-4.12.14-197.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496262" comment="kernel-source-4.12.14-197.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496263" comment="kernel-syms-4.12.14-197.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138209" version="1" class="patch">
	<metadata>
		<title>Security update for rpmlint (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1129452" ref_url="https://bugzilla.suse.com/1129452" source="BUGZILLA"/>
		<reference ref_id="1169365" ref_url="https://bugzilla.suse.com/1169365" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:1177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006776.html" source="SUSE-SU"/>
		<description>
This update for rpmlint fixes the following issues:

- whitelist certmonger (bsc#1169365, bsc#1129452)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-05"/>
	<updated date="2020-05-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1129452">SUSE bug 1129452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169365">SUSE bug 1169365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496264" comment="rpmlint-1.10-7.12.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138210" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168326" ref_url="https://bugzilla.suse.com/1168326" source="BUGZILLA"/>
		<reference ref_id="1168352" ref_url="https://bugzilla.suse.com/1168352" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7064" ref_url="https://www.suse.com/security/cve/CVE-2020-7064/" source="CVE"/>
		<reference ref_id="CVE-2020-7066" ref_url="https://www.suse.com/security/cve/CVE-2020-7066/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006787.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2020-7064: Fixed a one byte read of uninitialized memory in exif_read_data() (bsc#1168326).
- CVE-2020-7066: Fixed URL truncation get_headers() if the URL contains zero (\0) character (bsc#1168352).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-06"/>
	<updated date="2020-05-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1168326">SUSE bug 1168326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168352">SUSE bug 1168352</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7064/">CVE-2020-7064</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7066/">CVE-2020-7066</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496265" comment="libtidy-devel-5.4.0-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496266" comment="libtidy5-5.4.0-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496267" comment="tidy-5.4.0-3.2.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138211" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1170771" ref_url="https://bugzilla.suse.com/1170771" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12243" ref_url="https://www.suse.com/security/cve/CVE-2020-12243/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006805.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-07"/>
	<updated date="2020-05-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1170771">SUSE bug 1170771</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12243/">CVE-2020-12243</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496268" comment="openldap2-devel-32bit-2.4.46-9.28.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138212" version="1" class="patch">
	<metadata>
		<title>Security update for file (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1154661" ref_url="https://bugzilla.suse.com/1154661" source="BUGZILLA"/>
		<reference ref_id="1169512" ref_url="https://bugzilla.suse.com/1169512" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18218" ref_url="https://www.suse.com/security/cve/CVE-2019-18218/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006824.html" source="SUSE-SU"/>
		<description>
This update for file fixes the following issues:

Security issues fixed:

- CVE-2019-18218: Fixed a heap-based buffer overflow in cdf_read_property_info() (bsc#1154661).

Non-security issue fixed:

- Fixed broken '--help' output (bsc#1169512).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-18"/>
	<updated date="2020-05-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1154661">SUSE bug 1154661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169512">SUSE bug 1169512</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18218/">CVE-2019-18218</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496269" comment="python3-magic-5.32-7.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138213" version="1" class="patch">
	<metadata>
		<title>Security update for rpmlint (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1129452" ref_url="https://bugzilla.suse.com/1129452" source="BUGZILLA"/>
		<reference ref_id="1169365" ref_url="https://bugzilla.suse.com/1169365" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:1338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006834.html" source="SUSE-SU"/>
		<description>
This update for rpmlint fixes the following issues:

- whitelist certmonger (bsc#1169365, bsc#1129452)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-19"/>
	<updated date="2020-05-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1129452">SUSE bug 1129452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169365">SUSE bug 1169365</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496270" comment="rpmlint-mini-1.10-7.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138214" version="1" class="patch">
	<metadata>
		<title>Security update for ant (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1100053" ref_url="https://bugzilla.suse.com/1100053" source="BUGZILLA"/>
		<reference ref_id="1133997" ref_url="https://bugzilla.suse.com/1133997" source="BUGZILLA"/>
		<reference ref_id="1134001" ref_url="https://bugzilla.suse.com/1134001" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10886" ref_url="https://www.suse.com/security/cve/CVE-2018-10886/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006840.html" source="SUSE-SU"/>
		<description>
This update for ant fixes the following issues:

Security issue fixed:

- CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution (bsc#1100053). 

Non-security issues fixed:

- Add rhino to the ant-apache-bsf optional tasks (bsc#1134001).
- Remove jakarta-commons-logging dependencies (bsc#1133997).
- Use apache-commons-logging in optional tasks
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-20"/>
	<updated date="2020-05-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1100053">SUSE bug 1100053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133997">SUSE bug 1133997</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134001">SUSE bug 1134001</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-10886/">CVE-2018-10886</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496271" comment="ant-1.9.10-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496272" comment="ant-antlr-1.9.10-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496273" comment="ant-apache-bcel-1.9.10-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496274" comment="ant-apache-bsf-1.9.10-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496275" comment="ant-apache-log4j-1.9.10-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496276" comment="ant-apache-oro-1.9.10-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496277" comment="ant-apache-regexp-1.9.10-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496278" comment="ant-apache-resolver-1.9.10-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496279" comment="ant-commons-logging-1.9.10-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496280" comment="ant-javamail-1.9.10-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496281" comment="ant-jdepend-1.9.10-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496282" comment="ant-jmf-1.9.10-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496283" comment="ant-junit-1.9.10-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496284" comment="ant-manual-1.9.10-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496285" comment="ant-scripts-1.9.10-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496286" comment="ant-swing-1.9.10-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138215" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1089895" ref_url="https://bugzilla.suse.com/1089895" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1124278" ref_url="https://bugzilla.suse.com/1124278" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127355" ref_url="https://bugzilla.suse.com/1127355" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1151794" ref_url="https://bugzilla.suse.com/1151794" source="BUGZILLA"/>
		<reference ref_id="1152489" ref_url="https://bugzilla.suse.com/1152489" source="BUGZILLA"/>
		<reference ref_id="1154824" ref_url="https://bugzilla.suse.com/1154824" source="BUGZILLA"/>
		<reference ref_id="1157169" ref_url="https://bugzilla.suse.com/1157169" source="BUGZILLA"/>
		<reference ref_id="1158265" ref_url="https://bugzilla.suse.com/1158265" source="BUGZILLA"/>
		<reference ref_id="1160388" ref_url="https://bugzilla.suse.com/1160388" source="BUGZILLA"/>
		<reference ref_id="1160947" ref_url="https://bugzilla.suse.com/1160947" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1164871" ref_url="https://bugzilla.suse.com/1164871" source="BUGZILLA"/>
		<reference ref_id="1165183" ref_url="https://bugzilla.suse.com/1165183" source="BUGZILLA"/>
		<reference ref_id="1165478" ref_url="https://bugzilla.suse.com/1165478" source="BUGZILLA"/>
		<reference ref_id="1165741" ref_url="https://bugzilla.suse.com/1165741" source="BUGZILLA"/>
		<reference ref_id="1166969" ref_url="https://bugzilla.suse.com/1166969" source="BUGZILLA"/>
		<reference ref_id="1166978" ref_url="https://bugzilla.suse.com/1166978" source="BUGZILLA"/>
		<reference ref_id="1167574" ref_url="https://bugzilla.suse.com/1167574" source="BUGZILLA"/>
		<reference ref_id="1167851" ref_url="https://bugzilla.suse.com/1167851" source="BUGZILLA"/>
		<reference ref_id="1167867" ref_url="https://bugzilla.suse.com/1167867" source="BUGZILLA"/>
		<reference ref_id="1168332" ref_url="https://bugzilla.suse.com/1168332" source="BUGZILLA"/>
		<reference ref_id="1168670" ref_url="https://bugzilla.suse.com/1168670" source="BUGZILLA"/>
		<reference ref_id="1168789" ref_url="https://bugzilla.suse.com/1168789" source="BUGZILLA"/>
		<reference ref_id="1169020" ref_url="https://bugzilla.suse.com/1169020" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169525" ref_url="https://bugzilla.suse.com/1169525" source="BUGZILLA"/>
		<reference ref_id="1169762" ref_url="https://bugzilla.suse.com/1169762" source="BUGZILLA"/>
		<reference ref_id="1170056" ref_url="https://bugzilla.suse.com/1170056" source="BUGZILLA"/>
		<reference ref_id="1170125" ref_url="https://bugzilla.suse.com/1170125" source="BUGZILLA"/>
		<reference ref_id="1170145" ref_url="https://bugzilla.suse.com/1170145" source="BUGZILLA"/>
		<reference ref_id="1170284" ref_url="https://bugzilla.suse.com/1170284" source="BUGZILLA"/>
		<reference ref_id="1170345" ref_url="https://bugzilla.suse.com/1170345" source="BUGZILLA"/>
		<reference ref_id="1170457" ref_url="https://bugzilla.suse.com/1170457" source="BUGZILLA"/>
		<reference ref_id="1170522" ref_url="https://bugzilla.suse.com/1170522" source="BUGZILLA"/>
		<reference ref_id="1170592" ref_url="https://bugzilla.suse.com/1170592" source="BUGZILLA"/>
		<reference ref_id="1170617" ref_url="https://bugzilla.suse.com/1170617" source="BUGZILLA"/>
		<reference ref_id="1170618" ref_url="https://bugzilla.suse.com/1170618" source="BUGZILLA"/>
		<reference ref_id="1170620" ref_url="https://bugzilla.suse.com/1170620" source="BUGZILLA"/>
		<reference ref_id="1170621" ref_url="https://bugzilla.suse.com/1170621" source="BUGZILLA"/>
		<reference ref_id="1170770" ref_url="https://bugzilla.suse.com/1170770" source="BUGZILLA"/>
		<reference ref_id="1170778" ref_url="https://bugzilla.suse.com/1170778" source="BUGZILLA"/>
		<reference ref_id="1170791" ref_url="https://bugzilla.suse.com/1170791" source="BUGZILLA"/>
		<reference ref_id="1170901" ref_url="https://bugzilla.suse.com/1170901" source="BUGZILLA"/>
		<reference ref_id="1171078" ref_url="https://bugzilla.suse.com/1171078" source="BUGZILLA"/>
		<reference ref_id="1171098" ref_url="https://bugzilla.suse.com/1171098" source="BUGZILLA"/>
		<reference ref_id="1171118" ref_url="https://bugzilla.suse.com/1171118" source="BUGZILLA"/>
		<reference ref_id="1171189" ref_url="https://bugzilla.suse.com/1171189" source="BUGZILLA"/>
		<reference ref_id="1171191" ref_url="https://bugzilla.suse.com/1171191" source="BUGZILLA"/>
		<reference ref_id="1171195" ref_url="https://bugzilla.suse.com/1171195" source="BUGZILLA"/>
		<reference ref_id="1171202" ref_url="https://bugzilla.suse.com/1171202" source="BUGZILLA"/>
		<reference ref_id="1171205" ref_url="https://bugzilla.suse.com/1171205" source="BUGZILLA"/>
		<reference ref_id="1171214" ref_url="https://bugzilla.suse.com/1171214" source="BUGZILLA"/>
		<reference ref_id="1171217" ref_url="https://bugzilla.suse.com/1171217" source="BUGZILLA"/>
		<reference ref_id="1171218" ref_url="https://bugzilla.suse.com/1171218" source="BUGZILLA"/>
		<reference ref_id="1171219" ref_url="https://bugzilla.suse.com/1171219" source="BUGZILLA"/>
		<reference ref_id="1171220" ref_url="https://bugzilla.suse.com/1171220" source="BUGZILLA"/>
		<reference ref_id="1171244" ref_url="https://bugzilla.suse.com/1171244" source="BUGZILLA"/>
		<reference ref_id="1171293" ref_url="https://bugzilla.suse.com/1171293" source="BUGZILLA"/>
		<reference ref_id="1171417" ref_url="https://bugzilla.suse.com/1171417" source="BUGZILLA"/>
		<reference ref_id="1171527" ref_url="https://bugzilla.suse.com/1171527" source="BUGZILLA"/>
		<reference ref_id="1171599" ref_url="https://bugzilla.suse.com/1171599" source="BUGZILLA"/>
		<reference ref_id="1171600" ref_url="https://bugzilla.suse.com/1171600" source="BUGZILLA"/>
		<reference ref_id="1171601" ref_url="https://bugzilla.suse.com/1171601" source="BUGZILLA"/>
		<reference ref_id="1171602" ref_url="https://bugzilla.suse.com/1171602" source="BUGZILLA"/>
		<reference ref_id="1171604" ref_url="https://bugzilla.suse.com/1171604" source="BUGZILLA"/>
		<reference ref_id="1171605" ref_url="https://bugzilla.suse.com/1171605" source="BUGZILLA"/>
		<reference ref_id="1171606" ref_url="https://bugzilla.suse.com/1171606" source="BUGZILLA"/>
		<reference ref_id="1171607" ref_url="https://bugzilla.suse.com/1171607" source="BUGZILLA"/>
		<reference ref_id="1171608" ref_url="https://bugzilla.suse.com/1171608" source="BUGZILLA"/>
		<reference ref_id="1171609" ref_url="https://bugzilla.suse.com/1171609" source="BUGZILLA"/>
		<reference ref_id="1171610" ref_url="https://bugzilla.suse.com/1171610" source="BUGZILLA"/>
		<reference ref_id="1171611" ref_url="https://bugzilla.suse.com/1171611" source="BUGZILLA"/>
		<reference ref_id="1171612" ref_url="https://bugzilla.suse.com/1171612" source="BUGZILLA"/>
		<reference ref_id="1171613" ref_url="https://bugzilla.suse.com/1171613" source="BUGZILLA"/>
		<reference ref_id="1171614" ref_url="https://bugzilla.suse.com/1171614" source="BUGZILLA"/>
		<reference ref_id="1171615" ref_url="https://bugzilla.suse.com/1171615" source="BUGZILLA"/>
		<reference ref_id="1171616" ref_url="https://bugzilla.suse.com/1171616" source="BUGZILLA"/>
		<reference ref_id="1171617" ref_url="https://bugzilla.suse.com/1171617" source="BUGZILLA"/>
		<reference ref_id="1171618" ref_url="https://bugzilla.suse.com/1171618" source="BUGZILLA"/>
		<reference ref_id="1171619" ref_url="https://bugzilla.suse.com/1171619" source="BUGZILLA"/>
		<reference ref_id="1171620" ref_url="https://bugzilla.suse.com/1171620" source="BUGZILLA"/>
		<reference ref_id="1171621" ref_url="https://bugzilla.suse.com/1171621" source="BUGZILLA"/>
		<reference ref_id="1171622" ref_url="https://bugzilla.suse.com/1171622" source="BUGZILLA"/>
		<reference ref_id="1171623" ref_url="https://bugzilla.suse.com/1171623" source="BUGZILLA"/>
		<reference ref_id="1171624" ref_url="https://bugzilla.suse.com/1171624" source="BUGZILLA"/>
		<reference ref_id="1171625" ref_url="https://bugzilla.suse.com/1171625" source="BUGZILLA"/>
		<reference ref_id="1171626" ref_url="https://bugzilla.suse.com/1171626" source="BUGZILLA"/>
		<reference ref_id="1171662" ref_url="https://bugzilla.suse.com/1171662" source="BUGZILLA"/>
		<reference ref_id="1171679" ref_url="https://bugzilla.suse.com/1171679" source="BUGZILLA"/>
		<reference ref_id="1171691" ref_url="https://bugzilla.suse.com/1171691" source="BUGZILLA"/>
		<reference ref_id="1171692" ref_url="https://bugzilla.suse.com/1171692" source="BUGZILLA"/>
		<reference ref_id="1171694" ref_url="https://bugzilla.suse.com/1171694" source="BUGZILLA"/>
		<reference ref_id="1171695" ref_url="https://bugzilla.suse.com/1171695" source="BUGZILLA"/>
		<reference ref_id="1171736" ref_url="https://bugzilla.suse.com/1171736" source="BUGZILLA"/>
		<reference ref_id="1171817" ref_url="https://bugzilla.suse.com/1171817" source="BUGZILLA"/>
		<reference ref_id="1171948" ref_url="https://bugzilla.suse.com/1171948" source="BUGZILLA"/>
		<reference ref_id="1171949" ref_url="https://bugzilla.suse.com/1171949" source="BUGZILLA"/>
		<reference ref_id="1171951" ref_url="https://bugzilla.suse.com/1171951" source="BUGZILLA"/>
		<reference ref_id="1171952" ref_url="https://bugzilla.suse.com/1171952" source="BUGZILLA"/>
		<reference ref_id="1171979" ref_url="https://bugzilla.suse.com/1171979" source="BUGZILLA"/>
		<reference ref_id="1171982" ref_url="https://bugzilla.suse.com/1171982" source="BUGZILLA"/>
		<reference ref_id="1171983" ref_url="https://bugzilla.suse.com/1171983" source="BUGZILLA"/>
		<reference ref_id="1172017" ref_url="https://bugzilla.suse.com/1172017" source="BUGZILLA"/>
		<reference ref_id="1172096" ref_url="https://bugzilla.suse.com/1172096" source="BUGZILLA"/>
		<reference ref_id="1172097" ref_url="https://bugzilla.suse.com/1172097" source="BUGZILLA"/>
		<reference ref_id="1172098" ref_url="https://bugzilla.suse.com/1172098" source="BUGZILLA"/>
		<reference ref_id="1172099" ref_url="https://bugzilla.suse.com/1172099" source="BUGZILLA"/>
		<reference ref_id="1172101" ref_url="https://bugzilla.suse.com/1172101" source="BUGZILLA"/>
		<reference ref_id="1172102" ref_url="https://bugzilla.suse.com/1172102" source="BUGZILLA"/>
		<reference ref_id="1172103" ref_url="https://bugzilla.suse.com/1172103" source="BUGZILLA"/>
		<reference ref_id="1172104" ref_url="https://bugzilla.suse.com/1172104" source="BUGZILLA"/>
		<reference ref_id="1172127" ref_url="https://bugzilla.suse.com/1172127" source="BUGZILLA"/>
		<reference ref_id="1172130" ref_url="https://bugzilla.suse.com/1172130" source="BUGZILLA"/>
		<reference ref_id="1172185" ref_url="https://bugzilla.suse.com/1172185" source="BUGZILLA"/>
		<reference ref_id="1172188" ref_url="https://bugzilla.suse.com/1172188" source="BUGZILLA"/>
		<reference ref_id="1172199" ref_url="https://bugzilla.suse.com/1172199" source="BUGZILLA"/>
		<reference ref_id="1172201" ref_url="https://bugzilla.suse.com/1172201" source="BUGZILLA"/>
		<reference ref_id="1172202" ref_url="https://bugzilla.suse.com/1172202" source="BUGZILLA"/>
		<reference ref_id="1172221" ref_url="https://bugzilla.suse.com/1172221" source="BUGZILLA"/>
		<reference ref_id="1172249" ref_url="https://bugzilla.suse.com/1172249" source="BUGZILLA"/>
		<reference ref_id="1172251" ref_url="https://bugzilla.suse.com/1172251" source="BUGZILLA"/>
		<reference ref_id="1172317" ref_url="https://bugzilla.suse.com/1172317" source="BUGZILLA"/>
		<reference ref_id="1172342" ref_url="https://bugzilla.suse.com/1172342" source="BUGZILLA"/>
		<reference ref_id="1172343" ref_url="https://bugzilla.suse.com/1172343" source="BUGZILLA"/>
		<reference ref_id="1172344" ref_url="https://bugzilla.suse.com/1172344" source="BUGZILLA"/>
		<reference ref_id="1172366" ref_url="https://bugzilla.suse.com/1172366" source="BUGZILLA"/>
		<reference ref_id="1172378" ref_url="https://bugzilla.suse.com/1172378" source="BUGZILLA"/>
		<reference ref_id="1172391" ref_url="https://bugzilla.suse.com/1172391" source="BUGZILLA"/>
		<reference ref_id="1172397" ref_url="https://bugzilla.suse.com/1172397" source="BUGZILLA"/>
		<reference ref_id="1172453" ref_url="https://bugzilla.suse.com/1172453" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2019-19462" ref_url="https://www.suse.com/security/cve/CVE-2019-19462/" source="CVE"/>
		<reference ref_id="CVE-2019-20806" ref_url="https://www.suse.com/security/cve/CVE-2019-20806/" source="CVE"/>
		<reference ref_id="CVE-2019-20812" ref_url="https://www.suse.com/security/cve/CVE-2019-20812/" source="CVE"/>
		<reference ref_id="CVE-2019-9455" ref_url="https://www.suse.com/security/cve/CVE-2019-9455/" source="CVE"/>
		<reference ref_id="CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543/" source="CVE"/>
		<reference ref_id="CVE-2020-10690" ref_url="https://www.suse.com/security/cve/CVE-2020-10690/" source="CVE"/>
		<reference ref_id="CVE-2020-10711" ref_url="https://www.suse.com/security/cve/CVE-2020-10711/" source="CVE"/>
		<reference ref_id="CVE-2020-10720" ref_url="https://www.suse.com/security/cve/CVE-2020-10720/" source="CVE"/>
		<reference ref_id="CVE-2020-10732" ref_url="https://www.suse.com/security/cve/CVE-2020-10732/" source="CVE"/>
		<reference ref_id="CVE-2020-10751" ref_url="https://www.suse.com/security/cve/CVE-2020-10751/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="CVE-2020-12114" ref_url="https://www.suse.com/security/cve/CVE-2020-12114/" source="CVE"/>
		<reference ref_id="CVE-2020-12464" ref_url="https://www.suse.com/security/cve/CVE-2020-12464/" source="CVE"/>
		<reference ref_id="CVE-2020-12652" ref_url="https://www.suse.com/security/cve/CVE-2020-12652/" source="CVE"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="CVE-2020-12655" ref_url="https://www.suse.com/security/cve/CVE-2020-12655/" source="CVE"/>
		<reference ref_id="CVE-2020-12656" ref_url="https://www.suse.com/security/cve/CVE-2020-12656/" source="CVE"/>
		<reference ref_id="CVE-2020-12657" ref_url="https://www.suse.com/security/cve/CVE-2020-12657/" source="CVE"/>
		<reference ref_id="CVE-2020-12659" ref_url="https://www.suse.com/security/cve/CVE-2020-12659/" source="CVE"/>
		<reference ref_id="CVE-2020-12768" ref_url="https://www.suse.com/security/cve/CVE-2020-12768/" source="CVE"/>
		<reference ref_id="CVE-2020-12769" ref_url="https://www.suse.com/security/cve/CVE-2020-12769/" source="CVE"/>
		<reference ref_id="CVE-2020-13143" ref_url="https://www.suse.com/security/cve/CVE-2020-13143/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it.
  This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1154824).
- CVE-2020-13143: Fixed an out-of-bounds read in gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c (bsc#1171982).
- CVE-2020-12769: Fixed an issue which could have allowed attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one (bsc#1171983).
- CVE-2020-12768: Fixed a memory leak in svm_cpu_uninit in arch/x86/kvm/svm.c (bsc#1171736).
- CVE-2020-12659: Fixed an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) due to improper headroom validation (bsc#1171214).
- CVE-2020-12657: An a use-after-free in block/bfq-iosched.c (bsc#1171205).
- CVE-2020-12656: Fixed an improper handling of certain domain_release calls leadingch could have led to a memory leak (bsc#1171219).
- CVE-2020-12655: Fixed an issue which could have allowed attackers to trigger a sync of excessive duration via an XFS v5 image with crafted metadata (bsc#1171217).
- CVE-2020-12654: Fixed an issue in he wifi driver which could have allowed a remote AP to trigger a heap-based buffer overflow (bsc#1171202).
- CVE-2020-12653: Fixed an issue in the wifi driver which could have allowed local users to gain privileges or cause a denial of service (bsc#1171195).
- CVE-2020-12652: Fixed an issue which could have allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition (bsc#1171218).
- CVE-2020-12464: Fixed a use-after-free due to a transfer without a reference (bsc#1170901).
- CVE-2020-12114: Fixed a pivot_root race condition which could have allowed local users to cause a denial of service (panic) by corrupting a mountpoint reference counter (bsc#1171098).
- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172317).
- CVE-2020-10751: Fixed an improper implementation in SELinux LSM hook  where it was assumed that an skb would only contain a single netlink message (bsc#1171189).
- CVE-2020-10732: Fixed kernel data leak in userspace coredumps due to uninitialized data (bsc#1171220).
- CVE-2020-10720: Fixed a use-after-free read in napi_gro_frags() (bsc#1170778).
- CVE-2020-10711: Fixed a null pointer dereference in SELinux subsystem which could have allowed a remote network user to crash the kernel resulting in a denial of service (bsc#1171191).
- CVE-2020-10690: Fixed the race between the release of ptp_clock and cdev (bsc#1170056).
- CVE-2019-9455: Fixed a pointer leak due to a WARN_ON statement in a video driver. This could lead to local information disclosure with System execution privileges needed (bsc#1170345).
- CVE-2019-20812: Fixed an issue in prb_calc_retire_blk_tmo() which could have resulted in a denial of service (bsc#1172453).
- CVE-2019-20806: Fixed a null pointer dereference which may had lead to denial of service (bsc#1172199).
- CVE-2019-19462: Fixed an issue which could have allowed local user to cause denial of service (bsc#1158265).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1089895)

The following non-security bugs were fixed:

- ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe() (bsc#1051510).
- ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile() (bsc#1051510).
- acpi/x86: ignore unspecified bit positions in the ACPI global lock field (bsc#1051510).
- Add br_netfilter to kernel-default-base (bsc#1169020)
- Add commit for git-fix that's not a fix This commit cleans up debug code but does not fix anything, and it relies on a new kernel function that isn't yet in this version of SLE.
- agp/intel: Reinforce the barrier after GTT updates (bsc#1051510).
- ALSA: ctxfi: Remove unnecessary cast in kfree (bsc#1051510).
- ALSA: doc: Document PC Beep Hidden Register on Realtek ALC256 (bsc#1051510).
- ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
- ALSA: hda: Add driver blacklist (bsc#1051510).
- ALSA: hda: Always use jackpoll helper for jack update after resume (bsc#1051510).
- ALSA: hda: call runtime_allow() for all hda controllers (bsc#1051510).
- ALSA: hda: Do not release card at firmware loading error (bsc#1051510).
- ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported (bsc#1051510).
- ALSA: hda/hdmi: fix race in monitor detection during probe (bsc#1051510).
- ALSA: hda/hdmi: fix without unlocked before return (bsc#1051510).
- ALSA: hda: Honor PM disablement in PM freeze and thaw_noirq ops (bsc#1051510).
- ALSA: hda: Keep the controller initialization even if no codecs found (bsc#1051510).
- ALSA: hda: Match both PCI ID and SSID for driver blacklist (bsc#1111666).
- ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround (bsc#1172017).
- ALSA: hda/realtek - Add COEF workaround for ASUS ZenBook UX431DA (git-fixes).
- ALSA: hda/realtek - Add HP new mute led supported for ALC236 (git-fixes).
- ALSA: hda/realtek - Add more fixup entries for Clevo machines (git-fixes).
- ALSA: hda/realtek - Add new codec supported for ALC245 (bsc#1051510).
- ALSA: hda/realtek - Add new codec supported for ALC287 (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Notebook (git-fixes).
- ALSA: hda/realtek - Add supported new mute Led for HP (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS GL503VM with ALC295 (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS UX550GE with ALC295 (git-fixes).
- ALSA: hda/realtek: Enable headset mic of ASUS UX581LV with ALC295 (git-fixes).
- ALSA: hda/realtek - Enable the headset mic on Asus FX505DT (bsc#1051510).
- ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse (git-fixes).
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme (bsc#1111666).
- ALSA: hda/realtek - Fix unexpected init_amp override (bsc#1051510).
- ALSA: hda/realtek - Limit int mic boost for Thinkpad T530 (git-fixes bsc#1171293).
- ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter (bsc#1051510).
- ALSA: hda: Release resources at error in delayed probe (bsc#1051510).
- ALSA: hda: Remove ASUS ROG Zenith from the blacklist (bsc#1051510).
- ALSA: hda: Skip controller resume if not needed (bsc#1051510).
- ALSA: hwdep: fix a left shifting 1 by 31 UB bug (git-fixes).
- ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio option (git-fixes).
- ALSA: opti9xx: shut up gcc-10 range warning (bsc#1051510).
- ALSA: pcm: fix incorrect hw_base increase (git-fixes).
- ALSA: pcm: oss: Place the plugin buffer overflow checks correctly (bsc#1170522).
- ALSA: rawmidi: Fix racy buffer resize under concurrent accesses (git-fixes).
- ALSA: usb-audio: Add connector notifier delegation (bsc#1051510).
- ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset (git-fixes).
- ALSA: usb-audio: add mapping for ASRock TRX40 Creator (git-fixes).
- ALSA: usb-audio: Add mixer workaround for TRX40 and co (bsc#1051510).
- ALSA: usb-audio: Add quirk for Focusrite Scarlett 2i2 (bsc#1051510).
- ALSA: usb-audio: Add static mapping table for ALC1220-VB-based mobos (bsc#1051510).
- ALSA: usb-audio: Apply async workaround for Scarlett 2i4 2nd gen (bsc#1051510).
- ALSA: usb-audio: Check mapping at creating connector controls, too (bsc#1051510).
- ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID (bsc#1051510).
- ALSA: usb-audio: Do not create jack controls for PCM terminals (bsc#1051510).
- ALSA: usb-audio: Do not override ignore_ctl_error value from the map (bsc#1051510).
- ALSA: usb-audio: Filter error from connector kctl ops, too (bsc#1051510).
- ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif (bsc#1051510).
- ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC (git-fixes).
- ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio (git-fixes).
- ALSA: usx2y: Fix potential NULL dereference (bsc#1051510).
- ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry (bsc#1051510).
- ASoC: dapm: connect virtual mux with default value (bsc#1051510).
- ASoC: dapm: fixup dapm kcontrol widget (bsc#1051510).
- ASoC: dpcm: allow start or stop during pause for backend (bsc#1051510).
- ASoC: fix regwmask (bsc#1051510).
- ASoC: msm8916-wcd-digital: Reset RX interpolation path after use (bsc#1051510).
- ASoC: samsung: Prevent clk_get_rate() calls in atomic context (bsc#1111666).
- ASoC: topology: Check return value of pcm_new_ver (bsc#1051510).
- ASoC: topology: use name_prefix for new kcontrol (bsc#1051510).
- b43legacy: Fix case where channel status is corrupted (bsc#1051510).
- batman-adv: fix batadv_nc_random_weight_tq (git-fixes).
- batman-adv: Fix refcnt leak in batadv_show_throughput_override (git-fixes).
- batman-adv: Fix refcnt leak in batadv_store_throughput_override (git-fixes).
- batman-adv: Fix refcnt leak in batadv_v_ogm_process (git-fixes).
- bcache: avoid unnecessary btree nodes flushing in btree_flush_write() (git fixes (block drivers)).
- bcache: fix incorrect data type usage in btree_flush_write() (git fixes (block drivers)).
- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (git fixes (block drivers)).
- blk-mq: honor IO scheduler for multiqueue devices (bsc#1165478).
- blk-mq: simplify blk_mq_make_request() (bsc#1165478).
- block/drbd: delete invalid function drbd_md_mark_dirty_ (bsc#1171527).
- block: drbd: remove a stray unlock in __drbd_send_protocol() (bsc#1171599).
- block: fix busy device checking in blk_drop_partitions again (bsc#1171948).
- block: fix busy device checking in blk_drop_partitions (bsc#1171948).
- block: fix memleak of bio integrity data (git fixes (block drivers)).
- block: remove the bd_openers checks in blk_drop_partitions (bsc#1171948).
- bnxt_en: fix memory leaks in bnxt_dcbnl_ieee_getets() (networking-stable-20_03_28).
- bnxt_en: Reduce BNXT_MSIX_VEC_MAX value to supported CQs per PF (bsc#1104745).
- bnxt_en: reinitialize IRQs when MTU is modified (networking-stable-20_03_14).
- bnxt_en: Return error if bnxt_alloc_ctx_mem() fails (bsc#1104745 ).
- bnxt_en: Return error when allocating zero size context memory (bsc#1104745).
- bonding/alb: make sure arp header is pulled before accessing it (networking-stable-20_03_14).
- bpf: Fix sk_psock refcnt leak when receiving message (bsc#1083647).
- bpf: Forbid XADD on spilled pointers for unprivileged users (bsc#1083647).
- brcmfmac: abort and release host after error (bsc#1051510).
- BTRFS: fix deadlock with memory reclaim during scrub (bsc#1172127).
- BTRFS: fix log context list corruption after rename whiteout error (bsc#1172342).
- BTRFS: fix partial loss of prealloc extent past i_size after fsync (bsc#1172343).
- BTRFS: relocation: add error injection points for cancelling balance (bsc#1171417).
- BTRFS: relocation: Check cancel request after each data page read (bsc#1171417).
- BTRFS: relocation: Check cancel request after each extent found (bsc#1171417).
- BTRFS: relocation: Clear the DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417).
- BTRFS: relocation: Fix reloc root leakage and the NULL pointer reference caused by the leakage (bsc#1171417).
- BTRFS: relocation: Work around dead relocation stage loop (bsc#1171417).
- BTRFS: reloc: clear DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417 bsc#1160947 bsc#1172366).
- BTRFS: reloc: fix reloc root leak and NULL pointer dereference (bsc#1171417 bsc#1160947 bsc#1172366).
- BTRFS: setup a nofs context for memory allocation at btrfs_create_tree() (bsc#1172127).
- BTRFS: setup a nofs context for memory allocation at __btrfs_set_acl (bsc#1172127).
- BTRFS: use nofs context when initializing security xattrs to avoid deadlock (bsc#1172127).
- can: add missing attribute validation for termination (networking-stable-20_03_14).
- cdc-acm: close race betrween suspend() and acm_softint (git-fixes).
- cdc-acm: introduce a cool down (git-fixes).
- ceph: check if file lock exists before sending unlock request (bsc#1168789).
- ceph: demote quotarealm lookup warning to a debug message (bsc#1171692).
- ceph: fix double unlock in handle_cap_export() (bsc#1171694).
- ceph: fix endianness bug when handling MDS session feature bits (bsc#1171695).
- cgroup, netclassid: periodically release file_lock on classid updating (networking-stable-20_03_14).
- cifs: Allocate crypto structures on the fly for calculating signatures of incoming packets (bsc#1144333).
- cifs: Allocate encryption header through kmalloc (bsc#1144333).
- cifs: allow unlock flock and OFD lock across fork (bsc#1144333).
- cifs: check new file size when extending file by fallocate (bsc#1144333).
- cifs: cifspdu.h: Replace zero-length array with flexible-array member (bsc#1144333).
- cifs: clear PF_MEMALLOC before exiting demultiplex thread (bsc#1144333).
- cifs: do not share tcons with DFS (bsc#1144333).
- cifs: dump the session id and keys also for SMB2 sessions (bsc#1144333).
- cifs: ensure correct super block for DFS reconnect (bsc#1144333).
- cifs: Fix bug which the return value by asynchronous read is error (bsc#1144333).
- cifs: fix uninitialised lease_key in open_shroot() (bsc#1144333).
- cifs: improve read performance for page size 64KB &amp; cache=strict &amp; vers=2.1+ (bsc#1144333).
- cifs: Increment num_remote_opens stats counter even in case of smb2_query_dir_first (bsc#1144333).
- cifs: minor update to comments around the cifs_tcp_ses_lock mutex (bsc#1144333).
- cifs: protect updating server-&gt;dstaddr with a spinlock (bsc#1144333).
- cifs: smb2pdu.h: Replace zero-length array with flexible-array member (bsc#1144333).
- cifs: smbd: Calculate the correct maximum packet size for segmented SMBDirect send/receive (bsc#1144333).
- cifs: smbd: Check and extend sender credits in interrupt context (bsc#1144333).
- cifs: smbd: Check send queue size before posting a send (bsc#1144333).
- cifs: smbd: Do not schedule work to send immediate packet on every receive (bsc#1144333).
- cifs: smbd: Merge code to track pending packets (bsc#1144333).
- cifs: smbd: Properly process errors on ib_post_send (bsc#1144333).
- cifs: smbd: Update receive credits before sending and deal with credits roll back on failure before sending (bsc#1144333).
- cifs: Warn less noisily on default mount (bsc#1144333).
- clk: Add clk_hw_unregister_composite helper function definition (bsc#1051510).
- clk: imx6ull: use OSC clock during AXI rate change (bsc#1051510).
- clk: imx: make mux parent strings const (bsc#1051510).
- clk: mediatek: correct the clocks for MT2701 HDMI PHY module (bsc#1051510).
- clk: sunxi-ng: a64: Fix gate bit of DSI DPHY (bsc#1051510).
- clocksource/drivers/hyper-v: Set TSC clocksource as default w/ InvariantTSC (bsc#1170620, bsc#1170621).
- clocksource: dw_apb_timer_of: Fix missing clockevent timers (bsc#1051510).
- component: Silence bind error on -EPROBE_DEFER (bsc#1051510).
- coresight: do not use the BIT() macro in the UAPI header (git fixes (block drivers)).
- cpufreq: s3c64xx: Remove pointless NULL check in s3c64xx_cpufreq_driver_init (bsc#1051510).
- crypto: ccp - AES CFB mode is a stream cipher (git-fixes).
- crypto: ccp - Clean up and exit correctly on allocation failure (git-fixes).
- crypto: ccp - Cleanup misc_dev on sev_exit() (bsc#1114279).
- crypto: ccp - Cleanup sp_dev_master in psp_dev_destroy() (bsc#1114279).
- cxgb4: fix MPS index overwrite when setting MAC address (bsc#1127355).
- cxgb4: fix Txq restart check during backpressure (bsc#1127354 bsc#1127371).
- debugfs: Add debugfs_create_xul() for hexadecimal unsigned long (git-fixes).
- debugfs_lookup(): switch to lookup_one_len_unlocked() (bsc#1171979).
- devlink: fix return value after hitting end in region read (bsc#1109837).
- devlink: validate length of param values (bsc#1109837).
- devlink: validate length of region addr/len (bsc#1109837).
- dmaengine: dmatest: Fix iteration non-stop logic (bsc#1051510).
- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574).
- dm-raid1: fix invalid return value from dm_mirror (bsc#1172378).
- dm writecache: fix data corruption when reloading the target (git fixes (block drivers)).
- dm writecache: fix incorrect flush sequence when doing SSD mode commit (git fixes (block drivers)).
- dm writecache: verify watermark during resume (git fixes (block drivers)).
- dm zoned: fix invalid memory access (git fixes (block drivers)).
- dm zoned: reduce overhead of backing device checks (git fixes (block drivers)).
- dm zoned: remove duplicate nr_rnd_zones increase in dmz_init_zone() (git fixes (block drivers)).
- dm zoned: support zone sizes smaller than 128MiB (git fixes (block drivers)).
- dp83640: reverse arguments to list_add_tail (git-fixes).
- drivers: hv: Add a module description line to the hv_vmbus driver (bsc#1172249, bsc#1172251).
- drivers/net/ibmvnic: Update VNIC protocol version reporting (bsc#1065729).
- drivers: w1: add hwmon support structures (jsc#SLE-11048).
- drivers: w1: add hwmon temp support for w1_therm (jsc#SLE-11048).
- drivers: w1: refactor w1_slave_show to make the temp reading functionality separate (jsc#SLE-11048).
- drm: amd/acp: fix broken menu structure (bsc#1114279) 	* context changes
- drm/amdgpu: Correctly initialize thermal controller for GPUs with Powerplay table v0 (e.g Hawaii) (bsc#1111666).
- drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event (bsc#1111666).
- drm/amd/powerplay: force the trim of the mclk dpm_levels if OD is (bsc#1113956)
- drm/atomic: Take the atomic toys away from X (bsc#1112178) 	* context changes
- drm/crc: Actually allow to change the crc source (bsc#1114279) 	* offset changes
- drm/dp_mst: Fix clearing payload state on topology disable (bsc#1051510).
- drm/dp_mst: Reformat drm_dp_check_act_status() a bit (bsc#1051510).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (bsc#1114279)
- drm/etnaviv: fix perfmon domain interation (bsc#1113956)
- drm/etnaviv: rework perfmon query infrastructure (bsc#1112178)
- drm/i915: Apply Wa_1406680159:icl,ehl as an engine workaround (bsc#1112178) 	* rename gt/intel_workarounds.c to intel_workarounds.c 	* context changes
- drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of (bsc#1114279)
- drm/i915: HDCP: fix Ri prime check done during link check (bsc#1112178) 	* rename display/intel_hdmi.c to intel_hdmi.c 	* context changes
- drm/i915: properly sanity check batch_start_offset (bsc#1114279) 	* renamed display/intel_fbc.c -&gt; intel_fb.c 	* renamed gt/intel_rc6.c -&gt; intel_pm.c 	* context changes
- drm/meson: Delete an error message in meson_dw_hdmi_bind() (bsc#1051510).
- drm: NULL pointer dereference [null-pointer-deref] (CWE 476) problem (bsc#1114279)
- drm/qxl: qxl_release leak in qxl_draw_dirty_fb() (bsc#1051510).
- drm/qxl: qxl_release leak in qxl_hw_surface_alloc() (bsc#1051510).
- drm/qxl: qxl_release use after free (bsc#1051510).
- drm: Remove PageReserved manipulation from drm_pci_alloc (bsc#1114279) 	* offset changes
- drm/sun4i: dsi: Allow binding the host without a panel (bsc#1113956)
- drm/sun4i: dsi: Avoid hotplug race with DRM driver bind (bsc#1113956)
- drm/sun4i: dsi: Remove incorrect use of runtime PM (bsc#1113956) 	* context changes
- drm/sun4i: dsi: Remove unused drv from driver context (bsc#1113956) 	* context changes 	* keep include of sun4i_drv.h
- dump_stack: avoid the livelock of the dump_lock (git fixes (block drivers)).
- EDAC, sb_edac: Add support for systems with segmented PCI buses (bsc#1169525).
- ext4: do not zeroout extents beyond i_disksize (bsc#1167851).
- ext4: fix extent_status fragmentation for plain files (bsc#1171949).
- ext4: use non-movable memory for superblock readahead (bsc#1171952).
- fanotify: fix merging marks masks with FAN_ONDIR (bsc#1171679).
- fbcon: fix null-ptr-deref in fbcon_switch (bsc#1114279) 	* rename drivers/video/fbdev/core to drivers/video/console 	* context changes
- fib: add missing attribute validation for tun_id (networking-stable-20_03_14).
- firmware: qcom: scm: fix compilation error when disabled (bsc#1051510).
- fs/cifs: fix gcc warning in sid_to_id (bsc#1144333).
- fs/seq_file.c: simplify seq_file iteration code and interface (bsc#1170125).
- gpio: tegra: mask GPIO IRQs during IRQ shutdown (bsc#1051510).
- gre: fix uninit-value in __iptunnel_pull_header (networking-stable-20_03_14).
- HID: hid-input: clear unmapped usages (git-fixes).
- HID: Hyper-V: Add a module description line (bsc#1172249, bsc#1172251).
- HID: i2c-hid: add Trekstor Primebook C11B to descriptor override (git-fixes).
- HID: i2c-hid: override HID descriptors for certain devices (git-fixes).
- HID: multitouch: add eGalaxTouch P80H84 support (bsc#1051510).
- HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices (git-fixes).
- hrtimer: Annotate lockless access to timer-&gt;state (git fixes (block drivers)).
- hsr: add restart routine into hsr_get_node_list() (networking-stable-20_03_28).
- hsr: check protocol version in hsr_newlink() (networking-stable-20_04_17).
- hsr: fix general protection fault in hsr_addr_is_self() (networking-stable-20_03_28).
- hsr: set .netnsok flag (networking-stable-20_03_28).
- hsr: use rcu_read_lock() in hsr_get_node_{list/status}() (networking-stable-20_03_28).
- i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present (git-fixes).
- i2c: acpi: put device when verifying client fails (git-fixes).
- i2c: brcmstb: remove unused struct member (git-fixes).
- i2c: core: Allow empty id_table in ACPI case as well (git-fixes).
- i2c: core: decrease reference count of device node in i2c_unregister_device (git-fixes).
- i2c: dev: Fix the race between the release of i2c_dev and cdev (bsc#1051510).
- i2c: fix missing pm_runtime_put_sync in i2c_device_probe (git-fixes).
- i2c-hid: properly terminate i2c_hid_dmi_desc_override_table array (git-fixes).
- i2c: i801: Do not add ICH_RES_IO_SMI for the iTCO_wdt device (git-fixes).
- i2c: iproc: Stop advertising support of SMBUS quick cmd (git-fixes).
- i2c: isch: Remove unnecessary acpi.h include (git-fixes).
- i2c: mux: demux-pinctrl: Fix an error handling path in 'i2c_demux_pinctrl_probe()' (bsc#1051510).
- i2c: st: fix missing struct parameter description (bsc#1051510).
- IB/mlx5: Fix missing congestion control debugfs on rep rdma device (bsc#1103991).
- ibmvnic: Skip fatal error reset after passive init (bsc#1171078 ltc#184239).
- iio:ad7797: Use correct attribute_group (bsc#1051510).
- iio: adc: stm32-adc: fix device used to request dma (bsc#1051510).
- iio: adc: stm32-adc: fix sleep in atomic context (git-fixes).
- iio: adc: stm32-adc: Use dma_request_chan() instead dma_request_slave_channel() (bsc#1051510).
- iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()' (bsc#1051510).
- iio: sca3000: Remove an erroneous 'get_device()' (bsc#1051510).
- iio: xilinx-xadc: Fix ADC-B powerdown (bsc#1051510).
- iio: xilinx-xadc: Fix clearing interrupt when enabling trigger (bsc#1051510).
- iio: xilinx-xadc: Fix sequencer configuration for aux channels in simultaneous mode (bsc#1051510).
- ima: Fix return value of ima_write_policy() (git-fixes).
- Input: evdev - call input_flush_device() on release(), not flush() (bsc#1051510).
- Input: hyperv-keyboard - add module description (bsc#1172249, bsc#1172251).
- Input: i8042 - add Acer Aspire 5738z to nomux list (bsc#1051510).
- Input: i8042 - add ThinkPad S230u to i8042 reset list (bsc#1051510).
- Input: raydium_i2c_ts - use true and false for boolean values (bsc#1051510).
- Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() (bsc#1051510).
- Input: synaptics-rmi4 - really fix attn_data use-after-free (git-fixes).
- Input: usbtouchscreen - add support for BonXeon TP (bsc#1051510).
- Input: xpad - add custom init packet for Xbox One S controllers (bsc#1051510).
- iommu/amd: Call domain_flush_complete() in update_domain() (bsc#1172096).
- iommu/amd: Do not flush Device Table in iommu_map_page() (bsc#1172097).
- iommu/amd: Do not loop forever when trying to increase address space (bsc#1172098).
- iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system (bsc#1172099).
- iommu/amd: Fix over-read of ACPI UID from IVRS table (bsc#1172101).
- iommu/amd: Fix race in increase_address_space()/fetch_pte() (bsc#1172102).
- iommu/amd: Update Device Table in increase_address_space() (bsc#1172103).
- iommu: Fix reference count leak in iommu_group_alloc (bsc#1172397).
- ip6_tunnel: Allow rcv/xmit even if remote address is a local address (bsc#1166978).
- ipv4: fix a RCU-list lock in fib_triestat_seq_show (networking-stable-20_04_02).
- ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface (networking-stable-20_03_14).
- ipv6: do not auto-add link-local address to lag ports (networking-stable-20_04_09).
- ipv6: fix IPV6_ADDRFORM operation logic (bsc#1171662).
- ipv6: fix restrict IPV6_ADDRFORM operation (bsc#1171662).
- ipvlan: add cond_resched_rcu() while processing muticast backlog (networking-stable-20_03_14).
- ipvlan: do not deref eth hdr before checking it's set (networking-stable-20_03_14).
- ipvlan: do not use cond_resched_rcu() in ipvlan_process_multicast() (networking-stable-20_03_14).
- iwlwifi: pcie: actually release queue memory in TVQM (bsc#1051510).
- ixgbe: do not check firmware errors (bsc#1170284).
- kabi fix for early XHCI debug (git-fixes).
- kabi for for md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (git-fixes).
- kabi/severities: Do not track KVM internal symbols.
- kabi/severities: Ingnore get_dev_data() The function is internal to the AMD IOMMU driver and must not be called by any third party.
- kabi workaround for snd_rawmidi buffer_ref field addition (git-fixes).
- KEYS: reaching the keys quotas correctly (bsc#1051510).
- KVM: arm64: Change hyp_panic()s dependency on tpidr_el2 (bsc#1133021).
- KVM: arm64: Stop save/restoring host tpidr_el1 on VHE (bsc#1133021).
- KVM: Check validity of resolved slot when searching memslots (bsc#1172104).
- KVM: s390: vsie: Fix delivery of addressing exceptions (git-fixes).
- KVM: SVM: Fix potential memory leak in svm_cpu_init() (bsc#1171736).
- KVM x86: Extend AMD specific guest behavior to Hygon virtual CPUs (bsc#1152489).
- l2tp: Allow management of tunnels and session in user namespace (networking-stable-20_04_17).
- libata: Remove extra scsi_host_put() in ata_scsi_add_hosts() (bsc#1051510).
- libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set (bsc#1051510).
- lib: raid6: fix awk build warnings (git fixes (block drivers)).
- lib/raid6/test: fix build on distros whose /bin/sh is not bash (git fixes (block drivers)).
- lib/stackdepot.c: fix global out-of-bounds in stack_slabs (git fixes (block drivers)).
- locks: print unsigned ino in /proc/locks (bsc#1171951). 
- mac80211: add ieee80211_is_any_nullfunc() (bsc#1051510).
- mac80211_hwsim: Use kstrndup() in place of kasprintf() (bsc#1051510).
- mac80211: mesh: fix discovery timer re-arming issue / crash (bsc#1051510).
- macsec: avoid to set wrong mtu (bsc#1051510).
- macsec: restrict to ethernet devices (networking-stable-20_03_28).
- macvlan: add cond_resched() during multicast processing (networking-stable-20_03_14).
- macvlan: fix null dereference in macvlan_device_event() (bsc#1051510).
- md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (git-fixes).
- md/raid0: Fix an error message in raid0_make_request() (git fixes (block drivers)).
- md/raid10: prevent access of uninitialized resync_pages offset (git-fixes).
- media: dvb: return -EREMOTEIO on i2c transfer failure (bsc#1051510).
- media: platform: fcp: Set appropriate DMA parameters (bsc#1051510).
- media: ti-vpe: cal: fix disable_irqs to only the intended target (git-fixes).
- mei: release me_cl object reference (bsc#1051510).
- mlxsw: Fix some IS_ERR() vs NULL bugs (networking-stable-20_04_27).
- mlxsw: spectrum_flower: Do not stop at FLOW_ACTION_VLAN_MANGLE (networking-stable-20_04_09).
- mlxsw: spectrum_mr: Fix list iteration in error path (bsc#1112374).
- mmc: atmel-mci: Fix debugfs on 64-bit platforms (git-fixes).
- mmc: core: Check request type before completing the request (git-fixes).
- mmc: core: Fix recursive locking issue in CQE recovery path (git-fixes).
- mmc: cqhci: Avoid false 'cqhci: CQE stuck on' by not open-coding timeout loop (git-fixes).
- mmc: dw_mmc: Fix debugfs on 64-bit platforms (git-fixes).
- mmc: meson-gx: make sure the descriptor is stopped on errors (git-fixes).
- mmc: meson-gx: simplify interrupt handler (git-fixes).
- mmc: renesas_sdhi: limit block count to 16 bit for old revisions (git-fixes).
- mmc: sdhci-esdhc-imx: fix the mask for tuning start point (bsc#1051510).
- mmc: sdhci-msm: Clear tuning done flag while hs400 tuning (bsc#1051510).
- mmc: sdhci-of-at91: fix memleak on clk_get failure (git-fixes).
- mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers (bsc#1051510).
- mmc: sdhci-xenon: fix annoying 1.8V regulator warning (bsc#1051510).
- mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card() (bsc#1051510).
- mmc: tmio: fix access width of Block Count Register (git-fixes).
- mm: limit boost_watermark on small zones (git fixes (mm/pgalloc)).
- mm: thp: handle page cache THP correctly in PageTransCompoundMap (git fixes (block drivers)).
- mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer (bsc#1051510).
- mtd: spi-nor: cadence-quadspi: add a delay in write sequence (git-fixes).
- mtd: spi-nor: enable 4B opcodes for mx66l51235l (git-fixes).
- mwifiex: avoid -Wstringop-overflow warning (bsc#1051510).
- mwifiex: Fix memory corruption in dump_station (bsc#1051510).
- net: bcmgenet: correct per TX/RX ring statistics (networking-stable-20_04_27).
- net: dsa: b53: Fix ARL register definitions (networking-stable-20_04_27).
- net: dsa: b53: Rework ARL bin logic (networking-stable-20_04_27).
- net: dsa: bcm_sf2: Do not register slave MDIO bus with OF (networking-stable-20_04_09).
- net: dsa: bcm_sf2: Ensure correct sub-node is parsed (networking-stable-20_04_09).
- net: dsa: Fix duplicate frames flooded by learning (networking-stable-20_03_28).
- net: dsa: mv88e6xxx: fix lockup on warm boot (networking-stable-20_03_14).
- net/ethernet: add Google GVE driver (jsc#SLE-10538)
- net: fec: add phy_reset_after_clk_enable() support (git-fixes).
- net: fec: validate the new settings in fec_enet_set_coalesce() (networking-stable-20_03_14).
- net: fix race condition in __inet_lookup_established() (bsc#1151794).
- net: fq: add missing attribute validation for orphan mask (networking-stable-20_03_14).
- net: hns3: fix 'tc qdisc del' failed issue (bsc#1109837).
- net, ip_tunnel: fix interface lookup with no key (networking-stable-20_04_02).
- net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin (networking-stable-20_04_17).
- net: ipv6: do not consider routes via gateways for anycast address check (networking-stable-20_04_17).
- netlink: Use netlink header as base to calculate bad attribute offset (networking-stable-20_03_14).
- net: macsec: update SCI upon MAC address change (networking-stable-20_03_14).
- net: memcg: fix lockdep splat in inet_csk_accept() (networking-stable-20_03_14).
- net: memcg: late association of sock to memcg (networking-stable-20_03_14).
- net/mlx4_en: avoid indirect call in TX completion (networking-stable-20_04_27).
- net/mlx5: Add new fields to Port Type and Speed register (bsc#1171118).
- net/mlx5: Expose link speed directly (bsc#1171118).
- net/mlx5: Expose port speed when possible (bsc#1171118).
- net/mlx5: Fix failing fw tracer allocation on s390 (bsc#1103990 ).
- net: mvneta: Fix the case where the last poll did not process all rx (networking-stable-20_03_28).
- net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node (networking-stable-20_04_27).
- net/packet: tpacket_rcv: do not increment ring index on drop (networking-stable-20_03_14).
- net: qmi_wwan: add support for ASKEY WWHC050 (networking-stable-20_03_28).
- net: revert default NAPI poll timeout to 2 jiffies (networking-stable-20_04_17).
- net_sched: cls_route: remove the right filter from hashtable (networking-stable-20_03_28).
- net_sched: sch_skbprio: add message validation to skbprio_change() (bsc#1109837).
- net/x25: Fix x25_neigh refcnt leak when receiving frame (networking-stable-20_04_27).
- nfc: add missing attribute validation for SE API (networking-stable-20_03_14).
- nfc: add missing attribute validation for vendor subcommand (networking-stable-20_03_14).
- nfc: st21nfca: add missed kfree_skb() in an error path (bsc#1051510).
- nfp: abm: fix a memory leak bug (bsc#1109837).
- nfsd4: fix up replay_matches_cache() (git-fixes).
- nfsd: Ensure CLONE persists data and metadata changes to the target file (git-fixes).
- nfsd: fix delay timer on 32-bit architectures (git-fixes).
- nfsd: fix jiffies/time_t mixup in LRU list (git-fixes).
- NFS: Directory page cache pages need to be locked when read (git-fixes).
- nfsd: memory corruption in nfsd4_lock() (git-fixes).
- NFS: Do not call generic_error_remove_page() while holding locks (bsc#1170457).
- NFS: Fix memory leaks and corruption in readdir (git-fixes).
- NFS: Fix O_DIRECT accounting of number of bytes read/written (git-fixes).
- NFS: Fix potential posix_acl refcnt leak in nfs3_set_acl (git-fixes).
- NFS: fix racey wait in nfs_set_open_stateid_locked (bsc#1170592).
- NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O (git-fixes).
- NFS/pnfs: Fix pnfs_generic_prepare_to_resend_writes() (git-fixes).
- NFS: Revalidate the file size on a fatal write error (git-fixes).
- NFSv4.0: nfs4_do_fsinfo() should not do implicit lease renewals (git-fixes).
- NFSv4: Do not allow a cached open with a revoked delegation (git-fixes).
- NFSv4: Fix leak of clp-&gt;cl_acceptor string (git-fixes).
- NFSv4/pnfs: Return valid stateids in nfs_layout_find_inode_by_stateid() (git-fixes).
- NFSv4: try lease recovery on NFS4ERR_EXPIRED (git-fixes).
- NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn (git-fixes).
- nl802154: add missing attribute validation for dev_type (networking-stable-20_03_14).
- nl802154: add missing attribute validation (networking-stable-20_03_14).
- nvme-fc: print proper nvme-fc devloss_tmo value (bsc#1172391).
- objtool: Fix stack offset tracking for indirect CFAs (bsc#1169514).
- objtool: Fix switch table detection in .text.unlikely (bsc#1169514).
- objtool: Make BP scratch register warning more robust (bsc#1169514).
- padata: Remove broken queue flushing (git-fixes).
- Partially revert 'kfifo: fix kfifo_alloc() and kfifo_init()' (git fixes (block drivers)).
- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (bsc#1172201, bsc#1172202).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (bsc#1172201, bsc#1172202).
- pinctrl: baytrail: Enable pin configuration setting for GPIO chip (git-fixes).
- pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler (git-fixes).
- pinctrl: sunrisepoint: Fix PAD lock register offset for SPT-H (git-fixes).
- platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA (bsc#1051510).
- pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors (git-fixes).
- powerpc: Add attributes for setjmp/longjmp (bsc#1065729).
- powerpc/pci/of: Parse unassigned resources (bsc#1065729).
- powerpc/setup_64: Set cache-line-size based on cache-block-size (bsc#1065729).
- powerpc/sstep: Fix DS operand in ld encoding to appropriate value (bsc#1065729).
- r8152: check disconnect status after long sleep (networking-stable-20_03_14).
- raid6/ppc: Fix build for clang (git fixes (block drivers)).
- random: always use batched entropy for get_random_u{32,64} (bsc#1164871).
- rcu: locking and unlocking need to always be at least barriers (git fixes (block drivers)).
- Revert 'ALSA: hda/realtek: Fix pop noise on ALC225' (git-fixes).
- Revert 'drm/panel: simple: Add support for Sharp LQ150X1LG11 panels' (bsc#1114279) 	* offset changes
- Revert 'ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()' (bsc#1172221).
- Revert 'RDMA/cma: Simplify rdma_resolve_addr() error flow' (bsc#1103992).
- rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup() (bsc#1051510).
- s390/cpum_cf: Add new extended counters for IBM z15 (bsc#1169762 LTC#185291).
- s390/ftrace: fix potential crashes when switching tracers (git-fixes).
- s390/ism: fix error return code in ism_probe() (git-fixes).
- s390/pci: do not set affinity for floating irqs (git-fixes).
- s390/pci: Fix possible deadlock in recover_store() (bsc#1165183 LTC#184103).
- s390/pci: Recover handle in clp_set_pci_fn() (bsc#1165183 LTC#184103).
- scripts/decodecode: fix trapping instruction formatting (bsc#1065729).
- scripts/dtc: Remove redundant YYLOC global declaration (bsc#1160388).
- scsi: bnx2i: fix potential use after free (bsc#1171600).
- scsi: core: Handle drivers which set sg_tablesize to zero (bsc#1171601) This commit also required: &gt; scsi: core: avoid preallocating big SGL for data
- scsi: core: save/restore command resid for error handling (bsc#1171602).
- scsi: core: scsi_trace: Use get_unaligned_be*() (bsc#1171604).
- scsi: core: try to get module before removing device (bsc#1171605).
- scsi: csiostor: Adjust indentation in csio_device_reset (bsc#1171606).
- scsi: csiostor: Do not enable IRQs too early (bsc#1171607).
- scsi: esas2r: unlock on error in esas2r_nvram_read_direct() (bsc#1171608).
- scsi: fnic: fix invalid stack access (bsc#1171609).
- scsi: fnic: fix msix interrupt allocation (bsc#1171610).
- scsi: ibmvscsi: Fix WARN_ON during event pool release (bsc#1170791 ltc#185128).
- scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func (bsc#1171611).
- scsi: iscsi: Fix a potential deadlock in the timeout handler (bsc#1171612).
- scsi: iscsi: qla4xxx: fix double free in probe (bsc#1171613).
- scsi: lpfc: Change default queue allocation for reduced memory consumption (bsc#1164780).
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences (bsc#1171614).
- scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG (bsc#1171615).
- scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event (bsc#1164780).
- scsi: lpfc: Fix MDS Diagnostic Enablement definition (bsc#1164780).
- scsi: lpfc: Fix negation of else clause in lpfc_prep_node_fc4type (bsc#1164780).
- scsi: lpfc: Fix noderef and address space warnings (bsc#1164780).
- scsi: lpfc: Maintain atomic consistency of queue_claimed flag (bsc#1164780).
- scsi: lpfc: remove duplicate unloading checks (bsc#1164780).
- scsi: lpfc: Remove re-binding of nvme rport during registration (bsc#1164780).
- scsi: lpfc: Remove redundant initialization to variable rc (bsc#1164780).
- scsi: lpfc: Remove unnecessary lockdep_assert_held calls (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.1 (bsc#1164780).
- scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state (bsc#1171616).
- scsi: qla2xxx: add ring buffer for tracing debug logs (bsc#1157169).
- scsi: qla2xxx: check UNLOADING before posting async work (bsc#1157169).
- scsi: qla2xxx: Delete all sessions before unregister local nvme port (bsc#1157169).
- scsi: qla2xxx: Do not log message when reading port speed via sysfs (bsc#1157169).
- scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV (bsc#1157169).
- scsi: qla2xxx: Fix regression warnings (bsc#1157169).
- scsi: qla2xxx: Remove non functional code (bsc#1157169).
- scsi: qla2xxx: set UNLOADING before waiting for session deletion (bsc#1157169).
- scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free (bsc#1171617).
- scsi: qla4xxx: fix double free bug (bsc#1171618).
- scsi: sd: Clear sdkp-&gt;protection_type if disk is reformatted without PI (bsc#1171619).
- scsi: sg: add sg_remove_request in sg_common_write (bsc#1171620).
- scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) (bsc#1171621).
- scsi: ufs: change msleep to usleep_range (bsc#1171622).
- scsi: ufs: Clean up ufshcd_scale_clks() and clock scaling error out path (bsc#1171623).
- scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic (bsc#1171624).
- scsi: ufs: Fix ufshcd_probe_hba() reture value in case ufshcd_scsi_add_wlus() fails (bsc#1171625).
- scsi: ufs: Recheck bkops level if bkops is disabled (bsc#1171626).
- sctp: fix possibly using a bad saddr with a given dst (networking-stable-20_04_02).
- sctp: fix refcount bug in sctp_wfree (networking-stable-20_04_02).
- selftests/powerpc: Fix build errors in powerpc ptrace selftests (boo#1124278).
- Separate one more kABI fixup from the functional change:
- seq_file: fix problem when seeking mid-record (bsc#1170125).
- serial: uartps: Move the spinlock after the read of the tx empty (git-fixes).
- sfc: detach from cb_page in efx_copy_channel() (networking-stable-20_03_14).
- signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig (bsc#1172185).
- slcan: not call free_netdev before rtnl_unlock in slcan_open (networking-stable-20_03_28).
- slip: make slhc_compress() more robust against malicious packets (networking-stable-20_03_14).
- SMB3: Additional compression structures (bsc#1144333).
- SMB3: Add new compression flags (bsc#1144333).
- SMB3: change noisy error message to FYI (bsc#1144333).
- SMB3: enable swap on SMB3 mounts (bsc#1144333).
- SMB3: Minor cleanup of protocol definitions (bsc#1144333).
- SMB3: remove overly noisy debug line in signing errors (bsc#1144333).
- SMB3: smbdirect support can be configured by default (bsc#1144333).
- SMB3: use SMB2_SIGNATURE_SIZE define (bsc#1144333).
- spi: bcm63xx-hsspi: Really keep pll clk enabled (bsc#1051510).
- spi: bcm-qspi: when tx/rx buffer is NULL set to 0 (bsc#1051510).
- spi: dw: Add SPI Rx-done wait method to DMA-based transfer (bsc#1051510).
- spi: dw: Zero DMA Tx and Rx configurations on stack (bsc#1051510).
- spi: pxa2xx: Add CS control clock quirk (bsc#1051510).
- spi: qup: call spi_qup_pm_resume_runtime before suspending (bsc#1051510).
- spi/zynqmp: remove entry that causes a cs glitch (bsc#1051510).
- staging: comedi: dt2815: fix writing hi byte of analog output (bsc#1051510).
- staging: comedi: Fix comedi_device refcnt leak in comedi_open (bsc#1051510).
- staging: iio: ad2s1210: Fix SPI reading (bsc#1051510).
- supported.conf: Add br_netfilter to base (bsc#1169020).
- supported.conf: support w1 core and thermometer support
- svcrdma: Fix double svc_rdma_send_ctxt_put() in an error path (bsc#1103992).
- svcrdma: Fix leak of transport addresses (git-fixes).
- svcrdma: Fix trace point use-after-free race (bsc#1103992 ).
- taskstats: fix data-race (bsc#1172188).
- tcp: cache line align MAX_TCP_HEADER (networking-stable-20_04_27).
- tcp: repair: fix TCP_QUEUE_SEQ implementation (networking-stable-20_03_28).
- team: add missing attribute validation for array index (networking-stable-20_03_14).
- team: add missing attribute validation for port ifindex (networking-stable-20_03_14).
- team: fix hang in team_mode_get() (networking-stable-20_04_27).
- tools lib traceevent: Remove unneeded qsort and uses memmove instead (git-fixes).
- tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send() (bsc#1065729).
- tpm/tpm_tis: Free IRQ if probing fails (bsc#1082555).
- tun: Do not put_page() for all negative return values from XDP program (bsc#1109837).
- Update config files: Build w1 bus on arm64 (jsc#SLE-11048)
- USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair K70 RGB RAPIDFIRE (git-fixes).
- USB: cdc-acm: restore capability check order (git-fixes).
- USB: core: Fix misleading driver bug report (bsc#1051510).
- USB: dwc3: do not set gadget-&gt;is_otg flag (git-fixes).
- USB: dwc3: gadget: Do link recovery for SS and SSP (git-fixes).
- USB: early: Handle AMD's spec-compliant identifiers, too (git-fixes).
- USB: f_fs: Clear OS Extended descriptor counts to zero in ffs_data_reset() (git-fixes).
- USB: gadget: audio: Fix a missing error return value in audio_bind() (git-fixes).
- USB: gadget: composite: Inform controller driver of self-powered (git-fixes).
- USB: gadget: legacy: fix error return code in cdc_bind() (git-fixes).
- USB: gadget: legacy: fix error return code in gncm_bind() (git-fixes).
- usb: gadget: legacy: fix redundant initialization warnings (bsc#1051510).
- USB: gadget: net2272: Fix a memory leak in an error handling path in 'net2272_plat_probe()' (git-fixes).
- USB: gadget: udc: atmel: Fix vbus disconnect handling (git-fixes).
- USB: gadget: udc: atmel: Make some symbols static (git-fixes).
- USB: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete (git-fixes).
- USB: host: xhci-plat: keep runtime active when removing host (git-fixes).
- USB: hub: Fix handling of connect changes during sleep (git-fixes).
- usbnet: silence an unnecessary warning (bsc#1170770).
- USB: serial: garmin_gps: add sanity checking for data length (git-fixes).
- USB: serial: option: add BroadMobi BM806U (git-fixes).
- USB: serial: option: add support for ASKEY WWHC050 (git-fixes).
- USB: serial: option: add Wistron Neweb D19Q1 (git-fixes).
- USB: serial: qcserial: Add DW5816e support (git-fixes).
- USB: sisusbvga: Change port variable from signed to unsigned (git-fixes).
- usb-storage: Add unusual_devs entry for JMicron JMS566 (git-fixes).
- USB: uas: add quirk for LaCie 2Big Quadra (git-fixes).
- USB: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list (git-fixes).
- video: fbdev: sis: Remove unnecessary parentheses and commented code (bsc#1114279)
- video: fbdev: w100fb: Fix a potential double free (bsc#1051510).
- vrf: Check skb for XFRM_TRANSFORMED flag (networking-stable-20_04_27).
- vxlan: check return value of gro_cells_init() (networking-stable-20_03_28).
- w1: Add subsystem kernel public interface (jsc#SLE-11048).
- w1: Fix slave count on 1-Wire bus (resend) (jsc#SLE-11048).
- w1: keep balance of mutex locks and refcnts (jsc#SLE-11048).
- w1: use put_device() if device_register() fail (jsc#SLE-11048).
- watchdog: reset last_hw_keepalive time at start (git-fixes).
- wcn36xx: Fix error handling path in 'wcn36xx_probe()' (bsc#1051510).
- wil6210: remove reset file from debugfs (git-fixes).
- wimax/i2400m: Fix potential urb refcnt leak (bsc#1051510).
- workqueue: do not use wq_select_unbound_cpu() for bound works (bsc#1172130).
- x86/entry/64: Fix unwind hints in kernel exit path (bsc#1058115).
- x86/entry/64: Fix unwind hints in register clearing code (bsc#1058115).
- x86/entry/64: Fix unwind hints in rewind_stack_do_exit() (bsc#1058115).
- x86/entry/64: Fix unwind hints in __switch_to_asm() (bsc#1058115).
- x86/Hyper-V: Allow guests to enable InvariantTSC (bsc#1170621, bsc#1170620).
- x86/Hyper-V: Free hv_panic_page when fail to register kmsg dump (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash data in die() when panic_on_oops is set (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash register data or kmsg before running crash kernel (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash register data when sysctl_record_panic_msg is not set (bsc#1170617, bsc#1170618).
- x86: Hyper-V: report value of misc_features (git fixes).
- x86/Hyper-V: Trigger crash enlightenment only once during system crash (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Unload vmbus channel in hv panic callback (bsc#1170617, bsc#1170618).
- x86/kprobes: Avoid kretprobe recursion bug (bsc#1114279).
- x86/resctrl: Fix invalid attempt at removing the default resource group (git-fixes).
- x86/resctrl: Preserve CDP enable over CPU hotplug (bsc#1114279).
- x86/unwind/orc: Do not skip the first frame for inactive tasks (bsc#1058115).
- x86/unwind/orc: Fix error handling in __unwind_start() (bsc#1058115).
- x86/unwind/orc: Fix error path for bad ORC entry type (bsc#1058115).
- x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks (bsc#1058115).
- x86/unwind/orc: Prevent unwinding before ORC initialization (bsc#1058115).
- x86/unwind: Prevent false warnings for non-current tasks (bsc#1058115).
- xen/pci: reserve MCFG areas earlier (bsc#1170145).
- xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish (networking-stable-20_04_27).
- xfs: clear PF_MEMALLOC before exiting xfsaild thread (git-fixes).
- xfs: Correctly invert xfs_buftarg LRU isolation logic (git-fixes).
- xfs: do not ever return a stale pointer from __xfs_dir3_free_read (git-fixes).
- xprtrdma: Fix completion wait during device removal (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-10"/>
	<updated date="2020-06-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089895">SUSE bug 1089895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124278">SUSE bug 1124278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127355">SUSE bug 1127355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151794">SUSE bug 1151794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152489">SUSE bug 1152489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154824">SUSE bug 1154824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157169">SUSE bug 1157169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158265">SUSE bug 1158265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160388">SUSE bug 1160388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160947">SUSE bug 1160947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164871">SUSE bug 1164871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165183">SUSE bug 1165183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165478">SUSE bug 1165478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165741">SUSE bug 1165741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166969">SUSE bug 1166969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166978">SUSE bug 1166978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167574">SUSE bug 1167574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167851">SUSE bug 1167851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167867">SUSE bug 1167867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168332">SUSE bug 1168332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168670">SUSE bug 1168670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168789">SUSE bug 1168789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169020">SUSE bug 1169020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169525">SUSE bug 1169525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169762">SUSE bug 1169762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170056">SUSE bug 1170056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170125">SUSE bug 1170125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170145">SUSE bug 1170145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170284">SUSE bug 1170284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170345">SUSE bug 1170345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170457">SUSE bug 1170457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170522">SUSE bug 1170522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170592">SUSE bug 1170592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170617">SUSE bug 1170617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170618">SUSE bug 1170618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170620">SUSE bug 1170620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170621">SUSE bug 1170621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170770">SUSE bug 1170770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170778">SUSE bug 1170778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170791">SUSE bug 1170791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170901">SUSE bug 1170901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171078">SUSE bug 1171078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171098">SUSE bug 1171098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171118">SUSE bug 1171118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171189">SUSE bug 1171189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171191">SUSE bug 1171191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171195">SUSE bug 1171195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171202">SUSE bug 1171202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171205">SUSE bug 1171205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171214">SUSE bug 1171214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171217">SUSE bug 1171217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171218">SUSE bug 1171218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171219">SUSE bug 1171219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171220">SUSE bug 1171220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171244">SUSE bug 1171244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171293">SUSE bug 1171293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171417">SUSE bug 1171417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171527">SUSE bug 1171527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171599">SUSE bug 1171599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171600">SUSE bug 1171600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171601">SUSE bug 1171601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171602">SUSE bug 1171602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171604">SUSE bug 1171604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171605">SUSE bug 1171605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171606">SUSE bug 1171606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171607">SUSE bug 1171607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171608">SUSE bug 1171608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171609">SUSE bug 1171609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171610">SUSE bug 1171610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171611">SUSE bug 1171611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171612">SUSE bug 1171612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171613">SUSE bug 1171613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171614">SUSE bug 1171614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171615">SUSE bug 1171615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171616">SUSE bug 1171616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171617">SUSE bug 1171617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171618">SUSE bug 1171618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171619">SUSE bug 1171619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171620">SUSE bug 1171620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171621">SUSE bug 1171621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171622">SUSE bug 1171622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171623">SUSE bug 1171623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171624">SUSE bug 1171624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171625">SUSE bug 1171625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171626">SUSE bug 1171626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171662">SUSE bug 1171662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171679">SUSE bug 1171679</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171691">SUSE bug 1171691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171692">SUSE bug 1171692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171694">SUSE bug 1171694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171695">SUSE bug 1171695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171736">SUSE bug 1171736</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171817">SUSE bug 1171817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171948">SUSE bug 1171948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171949">SUSE bug 1171949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171951">SUSE bug 1171951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171952">SUSE bug 1171952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171979">SUSE bug 1171979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171982">SUSE bug 1171982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171983">SUSE bug 1171983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172017">SUSE bug 1172017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172096">SUSE bug 1172096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172097">SUSE bug 1172097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172098">SUSE bug 1172098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172099">SUSE bug 1172099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172101">SUSE bug 1172101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172102">SUSE bug 1172102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172103">SUSE bug 1172103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172104">SUSE bug 1172104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172127">SUSE bug 1172127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172130">SUSE bug 1172130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172185">SUSE bug 1172185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172188">SUSE bug 1172188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172199">SUSE bug 1172199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172201">SUSE bug 1172201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172202">SUSE bug 1172202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172221">SUSE bug 1172221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172249">SUSE bug 1172249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172251">SUSE bug 1172251</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172317">SUSE bug 1172317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172342">SUSE bug 1172342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172343">SUSE bug 1172343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172344">SUSE bug 1172344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172366">SUSE bug 1172366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172378">SUSE bug 1172378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172391">SUSE bug 1172391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172397">SUSE bug 1172397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172453">SUSE bug 1172453</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19462/">CVE-2019-19462</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20806/">CVE-2019-20806</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20812/">CVE-2019-20812</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9455/">CVE-2019-9455</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10690/">CVE-2020-10690</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10711/">CVE-2020-10711</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10720/">CVE-2020-10720</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10732/">CVE-2020-10732</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-10751/">CVE-2020-10751</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12114/">CVE-2020-12114</cve>
	<cve impact="low" cvss3="1.8/CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12464/">CVE-2020-12464</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12652/">CVE-2020-12652</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12655/">CVE-2020-12655</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12656/">CVE-2020-12656</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12657/">CVE-2020-12657</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12659/">CVE-2020-12659</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12768/">CVE-2020-12768</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12769/">CVE-2020-12769</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13143/">CVE-2020-13143</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496287" comment="kernel-docs-4.12.14-197.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496288" comment="kernel-obs-build-4.12.14-197.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496289" comment="kernel-source-4.12.14-197.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496290" comment="kernel-syms-4.12.14-197.45.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138216" version="1" class="patch">
	<metadata>
		<title>Security update for perl (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171863" ref_url="https://bugzilla.suse.com/1171863" source="BUGZILLA"/>
		<reference ref_id="1171864" ref_url="https://bugzilla.suse.com/1171864" source="BUGZILLA"/>
		<reference ref_id="1171866" ref_url="https://bugzilla.suse.com/1171866" source="BUGZILLA"/>
		<reference ref_id="1172348" ref_url="https://bugzilla.suse.com/1172348" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10543" ref_url="https://www.suse.com/security/cve/CVE-2020-10543/" source="CVE"/>
		<reference ref_id="CVE-2020-10878" ref_url="https://www.suse.com/security/cve/CVE-2020-10878/" source="CVE"/>
		<reference ref_id="CVE-2020-12723" ref_url="https://www.suse.com/security/cve/CVE-2020-12723/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1682-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006983.html" source="SUSE-SU"/>
		<description>
This update for perl fixes the following issues:

- CVE-2020-10543: Fixed a heap buffer overflow in regular expression compiler which could have 
  allowed overwriting of allocated memory with attacker's data (bsc#1171863).
- CVE-2020-10878: Fixed multiple integer overflows which could have allowed the insertion of 
  instructions into the compiled form of Perl regular expression (bsc#1171864).
- CVE-2020-12723: Fixed an attacker's corruption of the intermediate language state of a 
  compiled regular expression (bsc#1171866).
- Fixed a bad warning in features.ph (bsc#1172348).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-19"/>
	<updated date="2020-06-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171863">SUSE bug 1171863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171864">SUSE bug 1171864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171866">SUSE bug 1171866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172348">SUSE bug 1172348</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-10543/">CVE-2020-10543</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-10878/">CVE-2020-10878</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12723/">CVE-2020-12723</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496291" comment="perl-doc-5.26.1-7.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138217" version="1" class="patch">
	<metadata>
		<title>Security update for osc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122675" ref_url="https://bugzilla.suse.com/1122675" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3681" ref_url="https://www.suse.com/security/cve/CVE-2019-3681/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006988.html" source="SUSE-SU"/>
		<description>
This update for osc to 0.169.1 fixes the following issues:

Security issue fixed:

- CVE-2019-3681: Fixed an insufficient validation of network-controlled filesystem paths (bsc#1122675).

Non-security issues fixed:

- Improved the speed and usability of osc bash completion.
- improved some error messages.
- osc add: support git@ (private github) or git:// URLs correctly.
- Split dependson and whatdependson commands.
- Added support for osc build --shell-cmd.
- Added pkg-ccache support for osc build.
- Added --ccache option to osc getbinaries 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-19"/>
	<updated date="2020-06-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1122675">SUSE bug 1122675</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-3681/">CVE-2019-3681</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496292" comment="osc-0.169.1-3.20.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138218" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173274" ref_url="https://bugzilla.suse.com/1173274" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14422" ref_url="https://www.suse.com/security/cve/CVE-2020-14422/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1822-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007067.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2020-14422: Fixed an improper computation of hash values in the IPv4Interface and IPv6Interface 
  could have led to denial of service (bsc#1173274).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-02"/>
	<updated date="2020-07-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173274">SUSE bug 1173274</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14422/">CVE-2020-14422</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496293" comment="python3-tools-3.6.10-3.56.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138219" version="1" class="patch">
	<metadata>
		<title>Security update for nasm (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1084631" ref_url="https://bugzilla.suse.com/1084631" source="BUGZILLA"/>
		<reference ref_id="1086186" ref_url="https://bugzilla.suse.com/1086186" source="BUGZILLA"/>
		<reference ref_id="1086227" ref_url="https://bugzilla.suse.com/1086227" source="BUGZILLA"/>
		<reference ref_id="1086228" ref_url="https://bugzilla.suse.com/1086228" source="BUGZILLA"/>
		<reference ref_id="1090519" ref_url="https://bugzilla.suse.com/1090519" source="BUGZILLA"/>
		<reference ref_id="1090840" ref_url="https://bugzilla.suse.com/1090840" source="BUGZILLA"/>
		<reference ref_id="1106878" ref_url="https://bugzilla.suse.com/1106878" source="BUGZILLA"/>
		<reference ref_id="1107592" ref_url="https://bugzilla.suse.com/1107592" source="BUGZILLA"/>
		<reference ref_id="1107594" ref_url="https://bugzilla.suse.com/1107594" source="BUGZILLA"/>
		<reference ref_id="1108404" ref_url="https://bugzilla.suse.com/1108404" source="BUGZILLA"/>
		<reference ref_id="1115758" ref_url="https://bugzilla.suse.com/1115758" source="BUGZILLA"/>
		<reference ref_id="1115774" ref_url="https://bugzilla.suse.com/1115774" source="BUGZILLA"/>
		<reference ref_id="1115795" ref_url="https://bugzilla.suse.com/1115795" source="BUGZILLA"/>
		<reference ref_id="1173538" ref_url="https://bugzilla.suse.com/1173538" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000667" ref_url="https://www.suse.com/security/cve/CVE-2018-1000667/" source="CVE"/>
		<reference ref_id="CVE-2018-10016" ref_url="https://www.suse.com/security/cve/CVE-2018-10016/" source="CVE"/>
		<reference ref_id="CVE-2018-10254" ref_url="https://www.suse.com/security/cve/CVE-2018-10254/" source="CVE"/>
		<reference ref_id="CVE-2018-10316" ref_url="https://www.suse.com/security/cve/CVE-2018-10316/" source="CVE"/>
		<reference ref_id="CVE-2018-16382" ref_url="https://www.suse.com/security/cve/CVE-2018-16382/" source="CVE"/>
		<reference ref_id="CVE-2018-16517" ref_url="https://www.suse.com/security/cve/CVE-2018-16517/" source="CVE"/>
		<reference ref_id="CVE-2018-16999" ref_url="https://www.suse.com/security/cve/CVE-2018-16999/" source="CVE"/>
		<reference ref_id="CVE-2018-19214" ref_url="https://www.suse.com/security/cve/CVE-2018-19214/" source="CVE"/>
		<reference ref_id="CVE-2018-19215" ref_url="https://www.suse.com/security/cve/CVE-2018-19215/" source="CVE"/>
		<reference ref_id="CVE-2018-19216" ref_url="https://www.suse.com/security/cve/CVE-2018-19216/" source="CVE"/>
		<reference ref_id="CVE-2018-8881" ref_url="https://www.suse.com/security/cve/CVE-2018-8881/" source="CVE"/>
		<reference ref_id="CVE-2018-8882" ref_url="https://www.suse.com/security/cve/CVE-2018-8882/" source="CVE"/>
		<reference ref_id="CVE-2018-8883" ref_url="https://www.suse.com/security/cve/CVE-2018-8883/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007073.html" source="SUSE-SU"/>
		<description>

This update for nasm fixes the following issues:

nasm was updated to version 2.14.02.

This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes
and improvements.

* Fix crash due to multiple errors or warnings during the code generation pass if a list file is specified.
* Create all system-defined macros defore processing command-line given preprocessing directives (-p, -d, -u, --pragma, --before).
* If debugging is enabled, define a __DEBUG_FORMAT__ predefined macro. See section 4.11.7.
* Fix an assert for the case in the obj format when a SEG operator refers to an EXTERN symbol declared further down in the code.
* Fix a corner case in the floating-point code where a binary, octal or
  hexadecimal floating-point having at least 32, 11, or 8 mantissa digits
  could produce slightly incorrect results under very specific conditions.
* Support -MD without a filename, for gcc compatibility. -MF can be used to set the dependencies output filename. See section 2.1.7.
* Fix -E in combination with -MD. See section 2.1.21.
* Fix missing errors on redefined labels; would cause convergence failure instead which is very slow and not easy to debug.
* Duplicate definitions of the same label with the same value is now explicitly permitted (2.14 would allow it in some circumstances.)
* Add the option --no-line to ignore %line directives in the source. See section 2.1.33 and section 4.10.1.
* Changed -I option semantics by adding a trailing path separator unconditionally.
* Fixed null dereference in corrupted invalid single line macros.
* Fixed division by zero which may happen if source code is malformed.
* Fixed out of bound access in processing of malformed segment override.
* Fixed out of bound access in certain EQU parsing.
* Fixed buffer underflow in float parsing.
* Added SGX (Intel Software Guard Extensions) instructions.
* Added +n syntax for multiple contiguous registers.
* Fixed subsections_via_symbols for macho object format.
* Added the --gprefix, --gpostfix, --lprefix, and --lpostfix command line options, to allow command line base symbol renaming. See section 2.1.28.
* Allow label renaming to be specified by %pragma in addition to from the command line. See section 6.9.
* Supported generic %pragma namespaces, output and debug. See section 6.10.
* Added the --pragma command line option to inject a %pragma directive. See section 2.1.29.
* Added the --before command line option to accept preprocess statement before input. See section 2.1.30.
* Added AVX512 VBMI2 (Additional Bit Manipulation), VNNI (Vector Neural Network), BITALG (Bit Algorithm), and GFNI (Galois Field New Instruction) instructions.
* Added the STATIC directive for local symbols that should be renamed using global-symbol rules. See section 6.8.
* Allow a symbol to be defined as EXTERN and then later overridden as GLOBAL or COMMON. Furthermore, a symbol declared EXTERN and then defined will be treated as GLOBAL. See section 6.5.
* The GLOBAL directive no longer is required to precede the definition of the symbol.
* Support private_extern as macho specific extension to the GLOBAL directive. See section 7.8.5.
* Updated UD0 encoding to match with the specification
* Added the --limit-X command line option to set execution limits. See section 2.1.31.
* Updated the Codeview version number to be aligned with MASM.
* Added the --keep-all command line option to preserve output files. See section 2.1.32.
* Added the --include command line option, an alias to -P (section 2.1.18).
* Added the --help command line option as an alias to -h (section 3.1).
* Added -W, -D, and -Q suffix aliases for RET instructions so the operand sizes of these instructions can be encoded without using o16, o32 or o64.

New upstream version 2.13.03:

* Add flags: AES, VAES, VPCLMULQDQ
* Add VPCLMULQDQ instruction
* elf: Add missing dwarf loc section
* documentation updates
  		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-06"/>
	<updated date="2020-07-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1084631">SUSE bug 1084631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086186">SUSE bug 1086186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086227">SUSE bug 1086227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086228">SUSE bug 1086228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090519">SUSE bug 1090519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090840">SUSE bug 1090840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106878">SUSE bug 1106878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107592">SUSE bug 1107592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107594">SUSE bug 1107594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108404">SUSE bug 1108404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115758">SUSE bug 1115758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115774">SUSE bug 1115774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115795">SUSE bug 1115795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173538">SUSE bug 1173538</bugzilla>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000667/">CVE-2018-1000667</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10016/">CVE-2018-10016</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10254/">CVE-2018-10254</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10316/">CVE-2018-10316</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16382/">CVE-2018-16382</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16517/">CVE-2018-16517</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16999/">CVE-2018-16999</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19214/">CVE-2018-19214</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19215/">CVE-2018-19215</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19216/">CVE-2018-19216</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8881/">CVE-2018-8881</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8882/">CVE-2018-8882</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8883/">CVE-2018-8883</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496294" comment="nasm-2.14.02-3.4.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138220" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172698" ref_url="https://bugzilla.suse.com/1172698" source="BUGZILLA"/>
		<reference ref_id="1172704" ref_url="https://bugzilla.suse.com/1172704" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8023" ref_url="https://www.suse.com/security/cve/CVE-2020-8023/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1856-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007078.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAP_CONFIG_BACKEND='ldap' was used (bsc#1172698).	  
- Changed DB_CONFIG to root:ldap permissions (bsc#1172704).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-06"/>
	<updated date="2020-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172698">SUSE bug 1172698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172704">SUSE bug 1172704</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8023/">CVE-2020-8023</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496295" comment="openldap2-devel-32bit-2.4.46-9.31.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138221" version="1" class="patch">
	<metadata>
		<title>Security update for perl-YAML-LibYAML (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173703" ref_url="https://bugzilla.suse.com/1173703" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:2025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007176.html" source="SUSE-SU"/>
		<description>
This update for perl-YAML-LibYAML fixes the following issues:

perl-YAML-LibYAML was updated to 0.69: [bsc#1173703]

* Security fix: Add $LoadBlessed option to turn on/off loading objects:
  Default is set to true. Note that, the behavior is unchanged.
* Clarify documentation about exported functions
* Dump() was modifying original data, adding a PV to numbers
* Support standard tags !!str, !!map and !!seq instead of dying.
* Support JSON::PP::Boolean and boolean.pm via $YAML::XS::Boolean.
* Fix regex roundtrip. Fix loading of many regexes.

		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-23"/>
	<updated date="2020-07-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173703">SUSE bug 1173703</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496296" comment="perl-YAML-LibYAML-0.69-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138222" version="1" class="patch">
	<metadata>
		<title>Security update for rust, rust-cbindgen (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1115645" ref_url="https://bugzilla.suse.com/1115645" source="BUGZILLA"/>
		<reference ref_id="1154817" ref_url="https://bugzilla.suse.com/1154817" source="BUGZILLA"/>
		<reference ref_id="1173202" ref_url="https://bugzilla.suse.com/1173202" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1967" ref_url="https://www.suse.com/security/cve/CVE-2020-1967/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007183.html" source="SUSE-SU"/>
		<description>
This update for rust, rust-cbindgen fixes the following issues:

rust was updated for use by Firefox 76ESR.

- Fixed miscompilations with rustc 1.43 that lead to LTO failures (bsc#1173202)

Update to version 1.43.1

- Updated openssl-src to 1.1.1g for CVE-2020-1967.
- Fixed the stabilization of AVX-512 features.
- Fixed `cargo package --list` not working with unpublished dependencies.

Update to version 1.43.0

+ Language:

- Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`) 
  not having the type inferred correctly.
- Attributes such as `#[cfg()]` can now be used on `if` 
  expressions.
- Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s, 
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust 
    macro_rules! mac_trait {
      ($i:item) =&gt; {
          trait T { $i }
      }
    }
    mac_trait! {
        fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely 
    receive an error but these changes can be seen and parsed by 
    macros and conditional compilation.

+ Compiler

- You can now pass multiple lint flags to rustc to override the previous flags. 

  For example; `rustc -D unused -A unused-variables` denies
  everything in the `unused` lint group except `unused-variables` 
  which is explicitly allowed. However, passing 
  `rustc -A unused-variables -D unused` denies everything in 
  the `unused` lint group **including** `unused-variables` since 
  the allow flag is specified before the deny flag (and therefore 
  overridden).
- rustc will now prefer your system MinGW libraries over its 
  bundled libraries if they are available on `windows-gnu`.
- rustc now buffers errors/warnings printed in JSON.

Libraries:

- `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement 
  `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
  respectively.
  **Note** These conversions are only available when `N` is 
  `0..=32`.
- You can now use associated constants on floats and integers 
  directly, rather than having to import the module.
  e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
- `u8::is_ascii` is now `const`.
- `String` now implements `AsMut&lt;str&gt;`.
- Added the `primitive` module to `std` and `core`. 
  This module reexports Rust's primitive types. This is mainly 
  useful in macros where you want avoid these types being shadowed.
- Relaxed some of the trait bounds on `HashMap` and `HashSet`.
- `string::FromUtf8Error` now implements `Clone + Eq`.

+ Stabilized APIs

- `Once::is_completed`
- `f32::LOG10_2`
- `f32::LOG2_10`
- `f64::LOG10_2`
- `f64::LOG2_10`
- `iter::once_with`

+ Cargo

  - You can now set config `[profile]`s in your `.cargo/config`, 
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a 
    binary's executable path when running integration tests or 
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted 
    the executable path for a binary named `my-program`you would 
    use `env!('CARGO_BIN_EXE_my-program')`.

+ Misc

  - Certain checks in the `const_err` lint were deemed unrelated 
    to const evaluation, and have been moved to the 
    `unconditional_panic` and `arithmetic_overflow` lints.

+ Compatibility Notes

  - Having trailing syntax in the `assert!` macro is now a hard 
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This 
    incorrectly led to some instances being accepted, and now 
    correctly emits a hard error.

Update to version 1.42.0:

+ Language

  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
    * default is syntactically allowed before items in trait
      definitions.
    * Items in impls (i.e. consts, types, and fns) may syntactically
      leave out their bodies in favor of ;.
    * Bounds on associated types in impls are now syntactically
      allowed (e.g. type Foo: Ord;).
    * ... (the C-variadic type) may occur syntactically directly
      as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.

+ Compiler

  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.

+ Libraries

  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.

+ Stabilized APIs

  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts

+ Cargo

  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.

+ Compatibility Notes

  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.

Update to version 1.41.1:

  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`

Update to version 1.41.0:

+ Language

  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  
+ Compiler

  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
  
  Refer to Rust's [platform support page][forge-platform-support] for more
  information on Rust's tiered platform support.
  
+ Libraries

  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  
+ Stabilized APIs

  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  
+ Cargo

  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.

+ Misc

  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  
+ Compatibility Notes

  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.

- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.

Update to version 1.40.0

+ Language

  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
      let constructor = Point;
      constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.

+ Compiler

  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.

+ Libraries

  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.

+ Stabilized APIs

  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!

+ Cargo

  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.

+ Misc

  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.

+ Compatibility Notes

  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.

Update to version 1.39.0

+ Language

  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.

+ Compiler

  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.

+ For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07

- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.

Update to version 1.38.0

+ Language

  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.

+ Compiler

  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.

+ Libraries

  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.

+ Stabilized APIs

  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`

+ Cargo

  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.

+ Misc

  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.

Update to version 1.37.0

  + Language

    - #[must_use] will now warn if the type is contained in a tuple,
      Box, or an array and unused.
    - You can now use the `cfg` and `cfg_attr` attributes on
      generic parameters.
    - You can now use enum variants through type alias. e.g. You can
      write the following:
      ```
      type MyOption = Option&lt;u8&gt;;
      fn increment_or_zero(x: MyOption) -&gt; u8 {
          match x {
              MyOption::Some(y) =&gt; y + 1,
              MyOption::None =&gt; 0,
          }
      }
      ```
    - You can now use `_` as an identifier for consts. e.g. You can write
      `const _: u32 = 5;`.
    - You can now use `#[repr(align(X)]` on enums.
    - The  `?` Kleene macro operator is now available in the
      2015 edition.

  + Compiler

    - You can now enable Profile-Guided Optimization with the `-C profile-generate`
      and `-C profile-use` flags. For more information on how to use profile
      guided optimization, please refer to the rustc book.
    - The `rust-lldb` wrapper script should now work again.

  + Libraries

    - `mem::MaybeUninit&lt;T&gt;` is now ABI-compatible with `T`.

  + Stabilized APIs

    - BufReader::buffer
    - BufWriter::buffer
    - Cell::from_mut
    - Cell&lt;[T]&gt;::as_slice_of_cells
    - Cell&lt;slice&gt;::as_slice_of_cells
    - DoubleEndedIterator::nth_back
    - Option::xor
    - Wrapping::reverse_bits
    - i128::reverse_bits
    - i16::reverse_bits
    - i32::reverse_bits
    - i64::reverse_bits
    - i8::reverse_bits
    - isize::reverse_bits
    - slice::copy_within
    - u128::reverse_bits
    - u16::reverse_bits
    - u32::reverse_bits
    - u64::reverse_bits
    - u8::reverse_bits
    - usize::reverse_bits

  + Cargo

    - Cargo.lock files are now included by default when publishing executable crates
      with executables.
    - You can now specify `default-run='foo'` in `[package]` to specify the
      default executable to use for `cargo run`.
    - cargo-vendor is now provided as a sub-command of cargo

  + Compatibility Notes

    - Using `...` for inclusive range patterns will now warn by default.
      Please transition your code to using the `..=` syntax for inclusive
      ranges instead.
    - Using a trait object without the `dyn` will now warn by default.
      Please transition your code to use `dyn Trait` for trait objects instead.
      Crab(String),
      Lobster(String),
      Person(String),
      let state = Creature::Crab('Ferris');
      if let Creature::Crab(name) | Creature::Person(name) = state {
            println!('This creature's name is: {}', name);
      }
      unsafe { foo() }
    pub fn new(x: i32, y: i32) -&gt; Self {
        Self(x, y)
    }
    pub fn is_origin(&amp;self) -&gt; bool {
        match self {
      Self(0, 0) =&gt; true,
      _ =&gt; false,
        }
    }
    Self: PartialOrd&lt;Self&gt; // can write `Self` instead of `List&lt;T&gt;`
    Nil,
    Cons(T, Box&lt;Self&gt;) // likewise here
    fn test(&amp;self) { println!('one'); } //~ ERROR duplicate definitions with name `test`
    fn test(&amp;self) { println!('two'); }

* Basic procedural macros allowing custom `#[derive]`, aka 'macros 1.1', are
  stable. This allows popular code-generating crates like Serde and Diesel to
  work ergonomically. [RFC 1681].
* [Tuple structs may be empty. Unary and empty tuple structs may be instantiated
  with curly braces][36868]. Part of [RFC 1506].
* [A number of minor changes to name resolution have been activated][37127].
  They add up to more consistent semantics, allowing for future evolution of
  Rust macros. Specified in [RFC 1560], see its section on ['changes'] for
  details of what is different. The breaking changes here have been transitioned
  through the [`legacy_imports`] lint since 1.14, with no known regressions.
* [In `macro_rules`, `path` fragments can now be parsed as type parameter
  bounds][38279]
* [`?Sized` can be used in `where` clauses][37791]
* [There is now a limit on the size of monomorphized types and it can be
  modified with the `#![type_size_limit]` crate attribute, similarly to
  the `#![recursion_limit]` attribute][37789]
* [On Windows, the compiler will apply dllimport attributes when linking to
  extern functions][37973]. Additional attributes and flags can control which
  library kind is linked and its name. [RFC 1717].
* [Rust-ABI symbols are no longer exported from cdylibs][38117]
* [The `--test` flag works with procedural macro crates][38107]
* [Fix `extern 'aapcs' fn` ABI][37814]
* [The `-C no-stack-check` flag is deprecated][37636]. It does nothing.
* [The `format!` expander recognizes incorrect `printf` and shell-style
  formatting directives and suggests the correct format][37613].
* [Only report one error for all unused imports in an import list][37456]
* [Avoid unnecessary `mk_ty` calls in `Ty::super_fold_with`][37705]
* [Avoid more unnecessary `mk_ty` calls in `Ty::super_fold_with`][37979]
* [Don't clone in `UnificationTable::probe`][37848]
* [Remove `scope_auxiliary` to cut RSS by 10%][37764]
* [Use small vectors in type walker][37760]
* [Macro expansion performance was improved][37701]
* [Change `HirVec&lt;P&lt;T&gt;&gt;` to `HirVec&lt;T&gt;` in `hir::Expr`][37642]
* [Replace FNV with a faster hash function][37229]
  https://raw.githubusercontent.com/rust-lang/rust/master/RELEASES.md

rust-cbindgen is shipped in version 0.14.1.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-24"/>
	<updated date="2020-07-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1115645">SUSE bug 1115645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154817">SUSE bug 1154817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173202">SUSE bug 1173202</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-1967/">CVE-2020-1967</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496297" comment="cargo-1.43.1-12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496298" comment="clippy-1.43.1-12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496299" comment="rls-1.43.1-12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496300" comment="rust-1.43.1-12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496301" comment="rust-analysis-1.43.1-12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496302" comment="rust-src-1.43.1-12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496303" comment="rust-std-static-1.43.1-12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496304" comment="rustfmt-1.43.1-12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138223" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1150660" ref_url="https://bugzilla.suse.com/1150660" source="BUGZILLA"/>
		<reference ref_id="1151927" ref_url="https://bugzilla.suse.com/1151927" source="BUGZILLA"/>
		<reference ref_id="1152107" ref_url="https://bugzilla.suse.com/1152107" source="BUGZILLA"/>
		<reference ref_id="1152624" ref_url="https://bugzilla.suse.com/1152624" source="BUGZILLA"/>
		<reference ref_id="1158983" ref_url="https://bugzilla.suse.com/1158983" source="BUGZILLA"/>
		<reference ref_id="1159058" ref_url="https://bugzilla.suse.com/1159058" source="BUGZILLA"/>
		<reference ref_id="1161016" ref_url="https://bugzilla.suse.com/1161016" source="BUGZILLA"/>
		<reference ref_id="1162002" ref_url="https://bugzilla.suse.com/1162002" source="BUGZILLA"/>
		<reference ref_id="1162063" ref_url="https://bugzilla.suse.com/1162063" source="BUGZILLA"/>
		<reference ref_id="1163309" ref_url="https://bugzilla.suse.com/1163309" source="BUGZILLA"/>
		<reference ref_id="1166985" ref_url="https://bugzilla.suse.com/1166985" source="BUGZILLA"/>
		<reference ref_id="1167104" ref_url="https://bugzilla.suse.com/1167104" source="BUGZILLA"/>
		<reference ref_id="1168081" ref_url="https://bugzilla.suse.com/1168081" source="BUGZILLA"/>
		<reference ref_id="1168959" ref_url="https://bugzilla.suse.com/1168959" source="BUGZILLA"/>
		<reference ref_id="1169194" ref_url="https://bugzilla.suse.com/1169194" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169771" ref_url="https://bugzilla.suse.com/1169771" source="BUGZILLA"/>
		<reference ref_id="1169795" ref_url="https://bugzilla.suse.com/1169795" source="BUGZILLA"/>
		<reference ref_id="1170011" ref_url="https://bugzilla.suse.com/1170011" source="BUGZILLA"/>
		<reference ref_id="1170442" ref_url="https://bugzilla.suse.com/1170442" source="BUGZILLA"/>
		<reference ref_id="1170592" ref_url="https://bugzilla.suse.com/1170592" source="BUGZILLA"/>
		<reference ref_id="1170617" ref_url="https://bugzilla.suse.com/1170617" source="BUGZILLA"/>
		<reference ref_id="1170618" ref_url="https://bugzilla.suse.com/1170618" source="BUGZILLA"/>
		<reference ref_id="1171124" ref_url="https://bugzilla.suse.com/1171124" source="BUGZILLA"/>
		<reference ref_id="1171424" ref_url="https://bugzilla.suse.com/1171424" source="BUGZILLA"/>
		<reference ref_id="1171529" ref_url="https://bugzilla.suse.com/1171529" source="BUGZILLA"/>
		<reference ref_id="1171530" ref_url="https://bugzilla.suse.com/1171530" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1171732" ref_url="https://bugzilla.suse.com/1171732" source="BUGZILLA"/>
		<reference ref_id="1171739" ref_url="https://bugzilla.suse.com/1171739" source="BUGZILLA"/>
		<reference ref_id="1171743" ref_url="https://bugzilla.suse.com/1171743" source="BUGZILLA"/>
		<reference ref_id="1171753" ref_url="https://bugzilla.suse.com/1171753" source="BUGZILLA"/>
		<reference ref_id="1171759" ref_url="https://bugzilla.suse.com/1171759" source="BUGZILLA"/>
		<reference ref_id="1171835" ref_url="https://bugzilla.suse.com/1171835" source="BUGZILLA"/>
		<reference ref_id="1171841" ref_url="https://bugzilla.suse.com/1171841" source="BUGZILLA"/>
		<reference ref_id="1171868" ref_url="https://bugzilla.suse.com/1171868" source="BUGZILLA"/>
		<reference ref_id="1171904" ref_url="https://bugzilla.suse.com/1171904" source="BUGZILLA"/>
		<reference ref_id="1172247" ref_url="https://bugzilla.suse.com/1172247" source="BUGZILLA"/>
		<reference ref_id="1172257" ref_url="https://bugzilla.suse.com/1172257" source="BUGZILLA"/>
		<reference ref_id="1172344" ref_url="https://bugzilla.suse.com/1172344" source="BUGZILLA"/>
		<reference ref_id="1172458" ref_url="https://bugzilla.suse.com/1172458" source="BUGZILLA"/>
		<reference ref_id="1172484" ref_url="https://bugzilla.suse.com/1172484" source="BUGZILLA"/>
		<reference ref_id="1172537" ref_url="https://bugzilla.suse.com/1172537" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1172687" ref_url="https://bugzilla.suse.com/1172687" source="BUGZILLA"/>
		<reference ref_id="1172719" ref_url="https://bugzilla.suse.com/1172719" source="BUGZILLA"/>
		<reference ref_id="1172759" ref_url="https://bugzilla.suse.com/1172759" source="BUGZILLA"/>
		<reference ref_id="1172775" ref_url="https://bugzilla.suse.com/1172775" source="BUGZILLA"/>
		<reference ref_id="1172781" ref_url="https://bugzilla.suse.com/1172781" source="BUGZILLA"/>
		<reference ref_id="1172782" ref_url="https://bugzilla.suse.com/1172782" source="BUGZILLA"/>
		<reference ref_id="1172783" ref_url="https://bugzilla.suse.com/1172783" source="BUGZILLA"/>
		<reference ref_id="1172871" ref_url="https://bugzilla.suse.com/1172871" source="BUGZILLA"/>
		<reference ref_id="1172872" ref_url="https://bugzilla.suse.com/1172872" source="BUGZILLA"/>
		<reference ref_id="1172999" ref_url="https://bugzilla.suse.com/1172999" source="BUGZILLA"/>
		<reference ref_id="1173060" ref_url="https://bugzilla.suse.com/1173060" source="BUGZILLA"/>
		<reference ref_id="1173074" ref_url="https://bugzilla.suse.com/1173074" source="BUGZILLA"/>
		<reference ref_id="1173146" ref_url="https://bugzilla.suse.com/1173146" source="BUGZILLA"/>
		<reference ref_id="1173265" ref_url="https://bugzilla.suse.com/1173265" source="BUGZILLA"/>
		<reference ref_id="1173280" ref_url="https://bugzilla.suse.com/1173280" source="BUGZILLA"/>
		<reference ref_id="1173284" ref_url="https://bugzilla.suse.com/1173284" source="BUGZILLA"/>
		<reference ref_id="1173428" ref_url="https://bugzilla.suse.com/1173428" source="BUGZILLA"/>
		<reference ref_id="1173514" ref_url="https://bugzilla.suse.com/1173514" source="BUGZILLA"/>
		<reference ref_id="1173567" ref_url="https://bugzilla.suse.com/1173567" source="BUGZILLA"/>
		<reference ref_id="1173573" ref_url="https://bugzilla.suse.com/1173573" source="BUGZILLA"/>
		<reference ref_id="1173659" ref_url="https://bugzilla.suse.com/1173659" source="BUGZILLA"/>
		<reference ref_id="1173746" ref_url="https://bugzilla.suse.com/1173746" source="BUGZILLA"/>
		<reference ref_id="1173818" ref_url="https://bugzilla.suse.com/1173818" source="BUGZILLA"/>
		<reference ref_id="1173820" ref_url="https://bugzilla.suse.com/1173820" source="BUGZILLA"/>
		<reference ref_id="1173825" ref_url="https://bugzilla.suse.com/1173825" source="BUGZILLA"/>
		<reference ref_id="1173826" ref_url="https://bugzilla.suse.com/1173826" source="BUGZILLA"/>
		<reference ref_id="1173833" ref_url="https://bugzilla.suse.com/1173833" source="BUGZILLA"/>
		<reference ref_id="1173838" ref_url="https://bugzilla.suse.com/1173838" source="BUGZILLA"/>
		<reference ref_id="1173839" ref_url="https://bugzilla.suse.com/1173839" source="BUGZILLA"/>
		<reference ref_id="1173845" ref_url="https://bugzilla.suse.com/1173845" source="BUGZILLA"/>
		<reference ref_id="1173857" ref_url="https://bugzilla.suse.com/1173857" source="BUGZILLA"/>
		<reference ref_id="1174113" ref_url="https://bugzilla.suse.com/1174113" source="BUGZILLA"/>
		<reference ref_id="1174115" ref_url="https://bugzilla.suse.com/1174115" source="BUGZILLA"/>
		<reference ref_id="1174122" ref_url="https://bugzilla.suse.com/1174122" source="BUGZILLA"/>
		<reference ref_id="1174123" ref_url="https://bugzilla.suse.com/1174123" source="BUGZILLA"/>
		<reference ref_id="1174186" ref_url="https://bugzilla.suse.com/1174186" source="BUGZILLA"/>
		<reference ref_id="1174187" ref_url="https://bugzilla.suse.com/1174187" source="BUGZILLA"/>
		<reference ref_id="1174296" ref_url="https://bugzilla.suse.com/1174296" source="BUGZILLA"/>
		<reference ref_id="1174343" ref_url="https://bugzilla.suse.com/1174343" source="BUGZILLA"/>
		<reference ref_id="1174356" ref_url="https://bugzilla.suse.com/1174356" source="BUGZILLA"/>
		<reference ref_id="1174409" ref_url="https://bugzilla.suse.com/1174409" source="BUGZILLA"/>
		<reference ref_id="1174438" ref_url="https://bugzilla.suse.com/1174438" source="BUGZILLA"/>
		<reference ref_id="1174462" ref_url="https://bugzilla.suse.com/1174462" source="BUGZILLA"/>
		<reference ref_id="1174543" ref_url="https://bugzilla.suse.com/1174543" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16746" ref_url="https://www.suse.com/security/cve/CVE-2019-16746/" source="CVE"/>
		<reference ref_id="CVE-2019-20810" ref_url="https://www.suse.com/security/cve/CVE-2019-20810/" source="CVE"/>
		<reference ref_id="CVE-2019-20908" ref_url="https://www.suse.com/security/cve/CVE-2019-20908/" source="CVE"/>
		<reference ref_id="CVE-2020-0305" ref_url="https://www.suse.com/security/cve/CVE-2020-0305/" source="CVE"/>
		<reference ref_id="CVE-2020-10766" ref_url="https://www.suse.com/security/cve/CVE-2020-10766/" source="CVE"/>
		<reference ref_id="CVE-2020-10767" ref_url="https://www.suse.com/security/cve/CVE-2020-10767/" source="CVE"/>
		<reference ref_id="CVE-2020-10768" ref_url="https://www.suse.com/security/cve/CVE-2020-10768/" source="CVE"/>
		<reference ref_id="CVE-2020-10769" ref_url="https://www.suse.com/security/cve/CVE-2020-10769/" source="CVE"/>
		<reference ref_id="CVE-2020-10773" ref_url="https://www.suse.com/security/cve/CVE-2020-10773/" source="CVE"/>
		<reference ref_id="CVE-2020-10781" ref_url="https://www.suse.com/security/cve/CVE-2020-10781/" source="CVE"/>
		<reference ref_id="CVE-2020-12771" ref_url="https://www.suse.com/security/cve/CVE-2020-12771/" source="CVE"/>
		<reference ref_id="CVE-2020-12888" ref_url="https://www.suse.com/security/cve/CVE-2020-12888/" source="CVE"/>
		<reference ref_id="CVE-2020-13974" ref_url="https://www.suse.com/security/cve/CVE-2020-13974/" source="CVE"/>
		<reference ref_id="CVE-2020-14416" ref_url="https://www.suse.com/security/cve/CVE-2020-14416/" source="CVE"/>
		<reference ref_id="CVE-2020-15393" ref_url="https://www.suse.com/security/cve/CVE-2020-15393/" source="CVE"/>
		<reference ref_id="CVE-2020-15780" ref_url="https://www.suse.com/security/cve/CVE-2020-15780/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:


- CVE-2020-15780: A lockdown bypass for loading unsigned modules using ACPI table injection was fixed. (bsc#1173573)
- CVE-2020-15393: Fixed a memory leak in usbtest_disconnect (bnc#1173514).
- CVE-2020-12771: An issue was discovered in btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails (bnc#1171732).
- CVE-2020-12888: The VFIO PCI driver mishandled attempts to access disabled memory space (bnc#1171868).
- CVE-2020-10773: Fixed a memory leak on s390/s390x, in the cmm_timeout_hander in file arch/s390/mm/cmm.c (bnc#1172999).
- CVE-2020-14416: Fixed a race condition in tty-&gt;disc_data handling in the slip and slcan line discipline could lead to a use-after-free. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002).
- CVE-2020-10768: Fixed an issue with the prctl() function, where indirect branch speculation could be enabled even though it was diabled before (bnc#1172783).
- CVE-2020-10766: Fixed an issue which allowed an attacker with a local account to disable SSBD protection (bnc#1172781).
- CVE-2020-10767: Fixed an issue where Indirect Branch Prediction Barrier was disabled in certain circumstances, leaving the system open to a spectre v2 style attack (bnc#1172782).
- CVE-2020-13974: Fixed a integer overflow in drivers/tty/vt/keyboard.c, if k_ascii is called several times in a row (bnc#1172775).
- CVE-2020-0305: Fixed a possible use-after-free due to a race condition incdev_get of char_dev.c. This could lead to local escalation of privilege. User interaction is not needed for exploitation (bnc#1174462).
- CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265).
- CVE-2020-10781: Fixed a denial of service issue in the ZRAM implementation (bnc#1173074).
- CVE-2019-20908: Fixed incorrect access permissions for the efivar_ssdt ACPI variable, which could be used by attackers to bypass lockdown or secure boot restrictions (bnc#1173567).
- CVE-2019-20810: Fixed a memory leak in go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c because it did not call snd_card_free for a failure path (bnc#1172458).
- CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c, related to invalid length checks for variable elements in a beacon head (bnc#1152107).

The following non-security bugs were fixed:

- ACPI: GED: add support for _Exx / _Lxx handler methods (bsc#1111666).
- ACPI: GED: use correct trigger type field in _Exx / _Lxx handling (bsc#1111666).
- ACPI: NFIT: Fix unlock on error in scrub_show() (bsc#1171753).
- ACPI: PM: Avoid using power resources if there are none for D0 (bsc#1051510).
- ACPI: sysfs: Fix pm_profile_attr type (bsc#1111666).
- ACPI: video: Use native backlight on Acer Aspire 5783z (bsc#1111666).
- ACPI: video: Use native backlight on Acer TravelMate 5735Z (bsc#1111666).
- ALSA: es1688: Add the missed snd_card_free() (bsc#1051510).
- ALSA: hda: Add ElkhartLake HDMI codec vid (bsc#1111666).
- ALSA: hda: add sienna_cichlid audio asic id for sienna_cichlid up (bsc#1111666).
- ALSA: hda/hdmi - enable runtime pm for newer AMD display audio (bsc#1111666).
- ALSA: hda - let hs_mic be picked ahead of hp_mic (bsc#1111666).
- ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines (bsc#1111666).
- ALSA: hda/realtek - Add LED class support for micmute LED (bsc#1111666).
- ALSA: hda/realtek - Enable micmute LED on and HP system (bsc#1111666).
- ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 (bsc#1111666).
- ALSA: hda/realtek - Fix unused variable warning w/o CONFIG_LEDS_TRIGGER_AUDIO (bsc#1111666).
- ALSA: hda/realtek - Introduce polarity for micmute LED GPIO (bsc#1111666).
- ALSA: lx6464es - add support for LX6464ESe pci express variant (bsc#1111666).
- ALSA: opl3: fix infoleak in opl3 (bsc#1111666).
- ALSA: pcm: disallow linking stream to itself (bsc#1111666).
- ALSA: usb-audio: Add duplex sound support for USB devices using implicit feedback (bsc#1111666).
- ALSA: usb-audio: Add Pioneer DJ DJM-900NXS2 support (bsc#1111666).
- ALSA: usb-audio: add quirk for MacroSilicon MS2109 (bsc#1111666).
- ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock (bsc#1111666).
- ALSA: usb-audio: Clean up quirk entries with macros (bsc#1111666).
- ALSA: usb-audio: Fix inconsistent card PM state after resume (bsc#1111666).
- ALSA: usb-audio: Fix packet size calculation (bsc#1111666).
- ALSA: usb-audio: Fix racy list management in output queue (bsc#1111666).
- ALSA: usb-audio: Improve frames size computation (bsc#1111666).
- ALSA: usb-audio: Manage auto-pm of all bundled interfaces (bsc#1111666).
- ALSA: usb-audio: Use the new macro for HP Dock rename quirks (bsc#1111666).
- amdgpu: a NULL -&gt;mm does not mean a thread is a kthread (git-fixes).
- arm64: map FDT as RW for early_init_dt_scan() (jsc#SLE-12423).
- ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (bsc#1111666).
- ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx (bsc#1111666).
- ath9k: Fix use-after-free Write in ath9k_htc_rx_msg (bsc#1111666).
- ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb (bsc#1111666).
- ax25: fix setsockopt(SO_BINDTODEVICE) (networking-stable-20_05_27).
- b43: Fix connection problem with WPA3 (bsc#1111666).
- b43_legacy: Fix connection problem with WPA3 (bsc#1111666).
- bcache: Fix an error code in bch_dump_read() (git fixes (block drivers)).
- be2net: fix link failure after ethtool offline test (git-fixes).
- block: nr_sects_write(): Disable preemption on seqcount write (bsc#1173818).
- block: remove QUEUE_FLAG_STACKABLE (git fixes (block drivers)).
- block: sed-opal: fix sparse warning: convert __be64 data (git fixes (block drivers)).
- Bluetooth: Add SCO fallback for invalid LMP parameters error (bsc#1111666).
- bnxt_en: Fix AER reset logic on 57500 chips (git-fixes).
- bnxt_en: Fix ethtool selftest crash under error conditions (git-fixes).
- bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails (git-fixes).
- bnxt_en: Fix ipv6 RFS filter matching logic (git-fixes).
- bnxt_en: fix NULL dereference in case SR-IOV configuration fails (git-fixes).
- bnxt_en: Fix VF anti-spoof filter setup (networking-stable-20_05_12).
- bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features() (networking-stable-20_05_12).
- bnxt_en: Improve AER slot reset (networking-stable-20_05_12).
- brcmfmac: fix wrong location to get firmware feature (bsc#1111666).
- brcmfmac: Transform compatible string for FW loading (bsc#1169771).
- btrfs: add assertions for tree == inode-&gt;io_tree to extent IO helpers (bsc#1174438).
- btrfs: add new helper btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: Always use a cached extent_state in btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: do not zero f_bavail if we have available space (bsc#1168081).
- btrfs: do not zero f_bavail if we have available space (bsc#1168081).
- btrfs: drop argument tree from btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: fix extent_state leak in btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof (bsc#1174438).
- btrfs: fix hang on snapshot creation after RWF_NOWAIT write (bsc#1174438).
- btrfs: fix RWF_NOWAIT write not failling when we need to cow (bsc#1174438).
- btrfs: fix RWF_NOWAIT writes blocking on extent locks and waiting for IO (bsc#1174438).
- btrfs: qgroup: Fix a bug that prevents qgroup to be re-enabled after disable (bsc#1172247).
- btrfs: Return EAGAIN if we can't start no snpashot write in check_can_nocow (bsc#1174438).
- btrfs: use correct count in btrfs_file_write_iter() (bsc#1174438).
- btrfs: Use newly introduced btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: volumes: Remove ENOSPC-prone btrfs_can_relocate() (bsc#1171124).
- bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads (bsc#1111666).
- carl9170: remove P2P_GO support (bsc#1111666).
- CDC-ACM: heed quirk also in error handling (git-fixes).
- ceph: convert mdsc-&gt;cap_dirty to a per-session list (bsc#1167104).
- ceph: request expedited service on session's last cap flush (bsc#1167104).
- cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages (bsc#1173857).
- char/random: Add a newline at the end of the file (jsc#SLE-12423).
- cifs: get rid of unused parameter in reconn_setup_dfs_targets() (bsc#1144333).
- cifs: handle hostnames that resolve to same ip in failover (bsc#1144333 bsc#1161016).
- cifs: set up next DFS target before generic_ip_connect() (bsc#1144333 bsc#1161016).
- clk: bcm2835: Fix return type of bcm2835_register_gate (bsc#1051510).
- clk: clk-flexgen: fix clock-critical handling (bsc#1051510).
- clk: sunxi: Fix incorrect usage of round_down() (bsc#1051510).
- clocksource: dw_apb_timer: Make CPU-affiliation being optional (bsc#1111666).
- compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE (git fixes (block drivers)).
- compat_ioctl: block: handle Persistent Reservations (git fixes (block drivers)).
- copy_{to,from}_user(): consolidate object size checks (git fixes).
- crypto: algboss - do not wait during notifier callback (bsc#1111666).
- crypto: algif_skcipher - Cap recv SG list at ctx-&gt;used (bsc#1111666).
- crypto: caam - update xts sector size for large input length (bsc#1111666).
- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (bsc#1111666).
- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (git-fixes).
- Crypto/chcr: fix for ccm(aes) failed test (bsc#1111666).
- crypto: chelsio/chtls: properly set tp-&gt;lsndtime (bsc#1111666).
- crypto: talitos - fix IPsec cipher in length (git-fixes).
- crypto: talitos - reorder code in talitos_edesc_alloc() (git-fixes).
- debugfs: Check module state before warning in {full/open}_proxy_open() (bsc#1173746).
- devinet: fix memleak in inetdev_init() (networking-stable-20_06_07).
- dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()' (bsc#1111666).
- dm btree: increase rebalance threshold in __rebalance2() (git fixes (block drivers)).
- dm cache: fix a crash due to incorrect work item cancelling (git fixes (block drivers)).
- dm crypt: fix benbi IV constructor crash if used in authenticated mode (git fixes (block drivers)).
- dm: fix potential for q-&gt;make_request_fn NULL pointer (git fixes (block drivers)).
- dm space map common: fix to ensure new block isn't already in use (git fixes (block drivers)).
- dm: various cleanups to md-&gt;queue initialization code (git fixes).
- dm verity fec: fix hash block number in verity_fec_decode (git fixes (block drivers)).
- dm verity fec: fix memory leak in verity_fec_dtr (git fixes (block drivers)).
- dpaa_eth: fix usage as DSA master, try 3 (networking-stable-20_05_27).
- driver-core, libnvdimm: Let device subsystems add local lockdep coverage (bsc#1171753).
- Drivers: hv: Change flag to write log level in panic msg to false (bsc#1170617, bsc#1170618).
- drivers: soc: ti: knav_qmss_queue: Make knav_gp_range_ops static (bsc#1051510).
- drm: amd/display: fix Kconfig help text (bsc#1113956) 	* only fix DEBUG_KERNEL_DC
- drm: bridge: adv7511: Extend list of audio sample rates (bsc#1111666).
- drm/dp_mst: Increase ACT retry timeout to 3s (bsc#1113956)  * context changes
- drm: encoder_slave: fix refcouting error for modules (bsc#1111666).
- drm: encoder_slave: fix refcouting error for modules (bsc#1114279)
- drm/i915/icl+: Fix hotplug interrupt disabling after storm detection (bsc#1112178)
- drm/i915: Whitelist context-local timestamp in the gen9 cmdparser (bsc#1111666).
- drm/mediatek: Check plane visibility in atomic_update (bsc#1113956)  * context changes
- drm/msm/dpu: fix error return code in dpu_encoder_init (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for Asus T101HA panel (bsc#1111666).
- drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003 (bsc#1111666).
- drm/qxl: Use correct notify port address when creating cursor ring (bsc#1113956)
- drm/radeon: fix double free (bsc#1113956)
- drm/radeon: fix fb_div check in ni_init_smc_spll_table() (bsc#1113956)
- drm/sun4i: hdmi ddc clk: Fix size of m divider (bsc#1111666).
- drm/tegra: hub: Do not enable orphaned window group (bsc#1111666).
- drm/vkms: Hold gem object while still in-use (bsc#1113956)  * context changes
- e1000: Distribute switch variables for initialization (bsc#1111666).
- e1000e: Disable TSO for buffer overrun workaround (bsc#1051510).
- e1000e: Do not wake up the system via WOL if device wakeup is disabled (bsc#1051510).
- e1000e: Relax condition to trigger reset for ME workaround (bsc#1111666).
- EDAC/amd64: Read back the scrub rate PCI register on F15h (bsc#1114279).
- efi/random: Increase size of firmware supplied randomness (jsc#SLE-12423).
- efi/random: Treat EFI_RNG_PROTOCOL output as bootloader randomness (jsc#SLE-12423).
- efi: READ_ONCE rng seed size before munmap (jsc#SLE-12423).
- efi: Reorder pr_notice() with add_device_randomness() call (jsc#SLE-12423).
- evm: Check also if *tfm is an error pointer in init_desc() (bsc#1051510).
- evm: Fix a small race in init_desc() (bsc#1051510).
- ext4: fix a data race at inode-&gt;i_blocks (bsc#1171835).
- ext4: fix partial cluster initialization when splitting extent (bsc#1173839).
- ext4: fix race between ext4_sync_parent() and rename() (bsc#1173838).
- ext4, jbd2: ensure panic by fix a race between jbd2 abort and ext4 error handlers (bsc#1173833).
- extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()' (bsc#1051510).
- fanotify: fix ignore mask logic for events on child and on dir (bsc#1172719).
- fdt: add support for rng-seed (jsc#SLE-12423).
- fdt: Update CRC check for rng-seed (jsc#SLE-12423).
- firmware: imx: scu: Fix corruption of header (git-fixes).
- firmware: imx: scu: Fix possible memory leak in imx_scu_probe() (bsc#1111666).
- Fix boot crash with MD (bsc#1174343)
- fix multiplication overflow in copy_fdtable() (bsc#1173825).
- fpga: dfl: afu: Corrected error handling levels (git-fixes).
- fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (networking-stable-20_05_12).
- gpiolib: Document that GPIO line names are not globally unique (bsc#1051510).
- gpu: host1x: Detach driver on unregister (bsc#1111666).
- gpu: ipu-v3: pre: do not trigger update if buffer address does not change (bsc#1111666).
- HID: magicmouse: do not set up autorepeat (git-fixes).
- HID: sony: Fix for broken buttons on DS3 USB dongles (bsc#1051510).
- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() (bsc#1111666).
- hwmon: (emc2103) fix unable to change fan pwm1_enable attribute (bsc#1111666).
- hwmon: (max6697) Make sure the OVERT mask is set correctly (bsc#1111666).
- i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 (bsc#1111666).
- i2c: eg20t: Load module automatically if ID matches (bsc#1111666).
- i2c: mlxcpld: check correct size of maximum RECV_LEN packet (bsc#1111666).
- i40e: reduce stack usage in i40e_set_fc (git-fixes).
- IB/hfi1: Do not destroy hfi1_wq when the device is shut down (bsc#1174409).
- IB/hfi1: Do not destroy link_wq when the device is shut down (bsc#1174409).
- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- ibmvnic: continue to init in CRQ reset returns H_CLOSED (bsc#1173280 ltc#185369).
- ibmvnic: Flush existing work items before device removal (bsc#1065729).
- ibmvnic: Harden device login requests (bsc#1170011 ltc#183538).
- iio: buffer: Do not allow buffers without any channels enabled to be activated (bsc#1051510).
- iio:health:afe4404 Fix timestamp alignment and prevent data leak (bsc#1111666).
- iio:humidity:hdc100x Fix alignment and data leak issues (bsc#1111666).
- iio:magnetometer:ak8974: Fix alignment and data leak issues (bsc#1111666).
- iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() (bsc#1111666).
- iio: pressure: bmp280: Tolerate IRQ before registering (bsc#1051510).
- iio:pressure:ms5611 Fix buffer element alignment (bsc#1111666).
- iio: pressure: zpa2326: handle pm_runtime_get_sync failure (bsc#1111666).
- ima: Directly assign the ima_default_policy pointer to ima_rules (bsc#1051510).
- ima: Fix ima digest hash table key calculation (bsc#1051510).
- include/asm-generic/topology.h: guard cpumask_of_node() macro argument (bsc#1148868).
- Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list (bsc#1111666).
- input: i8042 - Remove special PowerPC handling (git-fixes).
- Input: synaptics - add a second working PNP_ID for Lenovo T470s (bsc#1111666).
- intel_idle: Graceful probe failure when MWAIT is disabled (bsc#1174115).
- intel_th: Fix a NULL dereference when hub driver is not loaded (bsc#1111666).
- ipvlan: call dev_change_flags when ipvlan mode is reset (git-fixes).
- ixgbevf: Remove limit of 10 entries for unicast filter list (git-fixes).
- jbd2: avoid leaking transaction credits when unreserving handle (bsc#1173845).
- jbd2: Preserve kABI when adding j_abort_mutex (bsc#1173833).
- kabi: hv: prevent struct device_node to become defined (bsc#1172871).
- kabi: ppc64le: prevent struct dma_map_ops to become defined (jsc#SLE-12423).
- kABI: protect struct mlx5_cmd_work_ent (kabi).
- kABI: reintroduce inet_hashtables.h include to l2tp_ip (kabi).
- kernfs: fix barrier usage in __kernfs_new_node() (bsc#1111666).
- KVM: nVMX: Do not reread VMCS-agnostic state when switching VMCS (bsc#1114279).
- KVM: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1114279).
- KVM: x86: Fix APIC page invalidation race (bsc#1174122).
- kvm: x86: Fix L1TF mitigation for shadow MMU (bsc#1171904).
- KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated (bsc#1171904).
- KVM: x86: only do L1TF workaround on affected processors (bsc#1171904).
- l2tp: add sk_family checks to l2tp_validate_socket (networking-stable-20_06_07).
- l2tp: do not use inet_hash()/inet_unhash() (networking-stable-20_06_07).
- libceph: do not omit recovery_deletes in target_copy() (bsc#1174113).
- libceph: ignore pool overlay and cache logic on redirects (bsc#1173146).
- libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock (bsc#1171753).
- libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant (bsc#1171753).
- libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl() (bsc#1171753).
- libnvdimm: cover up changes in struct nvdimm_bus (bsc#1171753).
- libnvdimm: cover up nd_pfn_sb changes (bsc#1171759).
- libnvdimm/dax: Pick the right alignment default when creating dax devices (bsc#1171759).
- libnvdimm/label: Remove the dpa align check (bsc#1171759).
- libnvdimm/of_pmem: Provide a unique name for bus provider (bsc#1171739).
- libnvdimm/pfn_dev: Add a build check to make sure we notice when struct page size change (bsc#1171743).
- libnvdimm/pfn_dev: Add page size and struct page size to pfn superblock (bsc#1171759).
- libnvdimm/pfn: Prevent raw mode fallback if pfn-infoblock valid (bsc#1171743).
- libnvdimm/pmem: Advance namespace seed for specific probe errors (bsc#1171743).
- libnvdimm/region: Initialize bad block for volatile namespaces (bnc#1151927 5.3.6).
- libnvdimm/region: Rewrite _probe_success() to _advance_seeds() (bsc#1171743).
- libnvdimm: Use PAGE_SIZE instead of SZ_4K for align check (bsc#1171759).
- livepatch: Apply vmlinux-specific KLP relocations early (bsc#1071995).
- livepatch: Disallow vmlinux.ko (bsc#1071995).
- livepatch: Make klp_apply_object_relocs static (bsc#1071995).
- livepatch: Prevent module-specific KLP rela sections from referencing vmlinux symbols (bsc#1071995).
- livepatch: Remove .klp.arch (bsc#1071995).
- loop: replace kill_bdev with invalidate_bdev (bsc#1173820).
- lpfc_debugfs: get rid of pointless access_ok() (bsc#1172687 bsc#1171530).
- lpfc: Synchronize NVME transport and lpfc driver devloss_tmo (bcs#1173060).
- mac80211: add option for setting control flags (bsc#1111666).
- mac80211: set IEEE80211_TX_CTRL_PORT_CTRL_PROTO for nl80211 TX (bsc#1111666).
- mailbox: imx: Disable the clock on devm_mbox_controller_register() failure (git-fixes).
- md: Avoid namespace collision with bitmap API (git fixes (block drivers)).
- mdraid: fix read/write bytes accounting (bsc#1172537).
- md: use memalloc scope APIs in mddev_suspend()/mddev_resume() (bsc#1166985)).
- media: cec: silence shift wrapping warning in __cec_s_log_addrs() (git-fixes).
- media: si2157: Better check for running tuner in init (bsc#1111666).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue (git-fixes).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue (git-fixes).
- mlxsw: pci: Return error on PCI reset timeout (git-fixes).
- mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list properly (networking-stable-20_05_12).
- mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed (git-fixes).
- mlxsw: spectrum_dpipe: Add missing error path (git-fixes).
- mlxsw: spectrum: Prevent force of 56G (git-fixes).
- mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead (git-fixes).
- mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON() (git-fixes).
- mlxsw: spectrum_switchdev: Add MDB entries in prepare phase (git-fixes).
- mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky (git-fixes).
- mmc: block: Fix request completion in the CQE timeout path (bsc#1111666).
- mmc: block: Fix use-after-free issue for rpmb (bsc#1111666).
- mmc: fix compilation of user API (bsc#1051510).
- mmc: sdhci: do not enable card detect interrupt for gpio cd type (bsc#1111666).
- mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk (bsc#1111666).
- Move upstreamed lpfc patches into sorted section
- mvpp2: remove misleading comment (git-fixes).
- net: be more gentle about silly gso requests coming from user (networking-stable-20_06_07).
- net: check untrusted gso_size at kernel entry (networking-stable-20_06_07).
- net/cxgb4: Check the return from t4_query_params properly (git-fixes).
- net: dsa: loop: Add module soft dependency (networking-stable-20_05_16).
- net: dsa: mt7530: fix roaming from DSA user ports (networking-stable-20_05_27).
- net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it (git-fixes).
- net: ena: add missing ethtool TX timestamping indication (git-fixes).
- net: ena: avoid memory access violation by validating req_id properly (git-fixes).
- net: ena: do not wake up tx queue when down (git-fixes).
- net: ena: ena-com.c: prevent NULL pointer dereference (git-fixes).
- net: ena: ethtool: use correct value for crc32 hash (git-fixes).
- net: ena: fix continuous keep-alive resets (git-fixes).
- net: ena: fix corruption of dev_idx_to_host_tbl (git-fixes).
- net: ena: fix default tx interrupt moderation interval (git-fixes).
- net: ena: fix incorrect default RSS key (git-fixes).
- net: ena: fix incorrectly saving queue numbers when setting RSS indirection table (git-fixes).
- net: ena: fix issues in setting interrupt moderation params in ethtool (git-fixes).
- net: ena: fix potential crash when rxfh key is NULL (git-fixes).
- net: ena: fix retrieval of nonadaptive interrupt moderation intervals (git-fixes).
- net: ena: fix uses of round_jiffies() (git-fixes).
- net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE (git-fixes).
- net: ena: reimplement set/get_coalesce() (git-fixes).
- net: ena: rss: do not allocate key when not supported (git-fixes).
- net: ena: rss: fix failure to get indirection table (git-fixes).
- net: ena: rss: store hash function as values and not bits (git-fixes).
- netfilter: connlabels: prefer static lock initialiser (git-fixes).
- netfilter: ctnetlink: netns exit must wait for callbacks (bsc#1169795).
- netfilter: not mark a spinlock as __read_mostly (git-fixes).
- net: fix a potential recursive NETDEV_FEAT_CHANGE (networking-stable-20_05_16).
- net: inet_csk: Fix so_reuseport bind-address cache in tb-&gt;fast* (networking-stable-20_05_27).
- net: ipip: fix wrong address family in init error path (networking-stable-20_05_27).
- net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set (git-fixes).
- net: macsec: preserve ingress frame ordering (networking-stable-20_05_12).
- net/mlx4_core: drop useless LIST_HEAD (git-fixes).
- net/mlx4_core: fix a memory leak bug (git-fixes).
- net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (networking-stable-20_05_12).
- net/mlx5: Add command entry handling completion (networking-stable-20_05_27).
- net/mlx5: Avoid panic when setting vport rate (git-fixes).
- net/mlx5: Continue driver initialization despite debugfs failure (git-fixes).
- net/mlx5e: ethtool, Fix a typo in WOL function names (git-fixes).
- net/mlx5e: Fix traffic duplication in ethtool steering (git-fixes).
- net/mlx5e: Remove unnecessary clear_bit()s (git-fixes).
- net/mlx5e: Update netdev txq on completions during closure (networking-stable-20_05_27).
- net/mlx5: Fix command entry leak in Internal Error State (networking-stable-20_05_12).
- net/mlx5: Fix crash upon suspend/resume (networking-stable-20_06_07).
- net/mlx5: Fix forced completion access non initialized command entry (networking-stable-20_05_12).
- net: mvmdio: allow up to four clocks to be specified for orion-mdio (git-fixes).
- net: mvpp2: prs: Do not override the sign bit in SRAM parser shift (git-fixes).
- net: phy: fix aneg restart in phy_ethtool_set_eee (networking-stable-20_05_16).
- netprio_cgroup: Fix unlimited memory leak of v2 cgroups (networking-stable-20_05_16).
- net: qede: stop adding events on an already destroyed workqueue (git-fixes).
- net: qed: fix excessive QM ILT lines consumption (git-fixes).
- net: qed: fix NVMe login fails over VFs (git-fixes).
- net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (networking-stable-20_05_27).
- net: revert 'net: get rid of an signed integer overflow in ip_idents_reserve()' (networking-stable-20_05_27).
- net sched: fix reporting the first-time use timestamp (networking-stable-20_05_27).
- net: stricter validation of untrusted gso packets (networking-stable-20_05_12).
- net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict() (networking-stable-20_05_12).
- net/tls: Fix sk_psock refcnt leak when in tls_data_ready() (networking-stable-20_05_12).
- net: usb: qmi_wwan: add support for DW5816e (networking-stable-20_05_12).
- net: usb: qmi_wwan: add Telit 0x1050 composition (networking-stable-20_06_07).
- net: usb: qmi_wwan: add Telit LE910C1-EUX composition (networking-stable-20_06_07).
- net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() (bsc#1172484).
- nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K (git-fixes).
- NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() (bsc#1170592).
- NFSv4: Retry CLOSE and DELEGRETURN on NFS4ERR_OLD_STATEID (bsc#1170592).
- nilfs2: fix null pointer dereference at nilfs_segctor_do_construct() (bsc#1173857).
- nl80211: fix NL80211_ATTR_CHANNEL_WIDTH attribute type (bsc#1111666).
- nvdimm: Avoid race between probe and reading device attributes (bsc#1170442).
- nvme: check for NVME_CTRL_LIVE in nvme_report_ns_ids() (bcs#1171558 bsc#1159058).
- nvme: do not update multipath disk information if the controller is down (bcs#1171558 bsc#1159058).
- nvme: fail cancelled commands with NVME_SC_HOST_PATH_ERROR (bsc#1158983 bsc#1172538).
- nvme-fc: Fail transport errors with NVME_SC_HOST_PATH (bsc#1158983 bsc#1172538).
- nvme-tcp: fail command with NVME_SC_HOST_PATH_ERROR send failed (bsc#1158983 bsc#1172538).
- objtool: Clean instruction state before each function validation (bsc#1169514).
- objtool: Ignore empty alternatives (bsc#1169514).
- ocfs2: no need try to truncate file beyond i_size (bsc#1171841).
- overflow: Fix -Wtype-limits compilation warnings (git fixes).
- overflow.h: Add arithmetic shift helper (git fixes).
- p54usb: add AirVasT USB stick device-id (bsc#1051510).
- padata: ensure the reorder timer callback runs on the correct CPU (git-fixes).
- padata: reorder work kABI fixup (git-fixes).
- PCI/AER: Remove HEST/FIRMWARE_FIRST parsing for AER ownership (bsc#1174356).
- PCI/AER: Use only _OSC to determine AER ownership (bsc#1174356).
- PCI: Allow pci_resize_resource() for devices on root bus (bsc#1051510).
- PCI: Fix pci_register_host_bridge() device_register() error handling (bsc#1051510).
- PCI: Generalize multi-function power dependency device links (bsc#1111666).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871, bsc#1172872).
- PCI: hv: Fix the PCI HyperV probe failure path to release resource properly (bsc#1172871, bsc#1172872).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871, bsc#1172872).
- PCI: hv: Move hypercall related definitions into tlfs header (bsc#1172871, bsc#1172872).
- PCI: hv: Move retarget related structures into tlfs header (bsc#1172871, bsc#1172872).
- PCI: hv: Reorganize the code in preparation of hibernation (bsc#1172871, bsc#1172872).
- PCI: hv: Retry PCI bus D0 entry on invalid device state (bsc#1172871, bsc#1172872).
- PCI: pciehp: Fix indefinite wait on sysfs requests (git-fixes).
- PCI: pciehp: Support interrupts sent from D3hot (git-fixes).
- PCI/PM: Call .bridge_d3() hook only if non-NULL (git-fixes).
- PCI: Program MPS for RCiEP devices (bsc#1051510).
- PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port (bsc#1051510).
- pci: Revive pci_dev __aer_firmware_first* fields for kABI (bsc#1174356).
- pcm_native: result of put_user() needs to be checked (bsc#1111666).
- perf: Allocate context task_ctx_data for child event (git-fixes).
- perf/cgroup: Fix perf cgroup hierarchy support (git-fixes).
- perf: Copy parent's address filter offsets on clone (git-fixes).
- perf/core: Add sanity check to deal with pinned event failure (git-fixes).
- perf/core: Avoid freeing static PMU contexts when PMU is unregistered (git-fixes).
- perf/core: Correct event creation with PERF_FORMAT_GROUP (git-fixes).
- perf/core: Do not WARN() for impossible ring-buffer sizes (git-fixes).
- perf/core: Fix ctx_event_type in ctx_resched() (git-fixes).
- perf/core: Fix error handling in perf_event_alloc() (git-fixes).
- perf/core: Fix exclusive events' grouping (git-fixes).
- perf/core: Fix group scheduling with mixed hw and sw events (git-fixes).
- perf/core: Fix impossible ring-buffer sizes warning (git-fixes).
- perf/core: Fix locking for children siblings group read (git-fixes).
- perf/core: Fix lock inversion between perf,trace,cpuhp (git-fixes (dependent patch for 18736eef1213)).
- perf/core: Fix perf_event_read_value() locking (git-fixes).
- perf/core: Fix perf_pmu_unregister() locking (git-fixes).
- perf/core: Fix __perf_read_group_add() locking (git-fixes (dependent patch)).
- perf/core: Fix perf_sample_regs_user() mm check (git-fixes).
- perf/core: Fix possible Spectre-v1 indexing for -&gt;aux_pages (git-fixes).
- perf/core: Fix race between close() and fork() (git-fixes).
- perf/core: Fix the address filtering fix (git-fixes).
- perf/core: Fix use-after-free in uprobe_perf_close() (git-fixes).
- perf/core: Force USER_DS when recording user stack data (git-fixes).
- perf/core: Restore mmap record type correctly (git-fixes).
- perf: Fix header.size for namespace events (git-fixes).
- perf/ioctl: Add check for the sample_period value (git-fixes).
- perf, pt, coresight: Fix address filters for vmas with non-zero offset (git-fixes).
- perf: Return proper values for user stack errors (git-fixes).
- perf/x86/amd: Constrain Large Increment per Cycle events (git-fixes).
- perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity (git-fixes).
- perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops (git-fixes).
- perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) (git-fixes).
- perf/x86/amd/iommu: Make the 'amd_iommu_attr_groups' symbol static (git-fixes).
- perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs (git-fixes stable).
- perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs (git-fixes).
- perf/x86/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf events (git-fixes stable).
- perf/x86: Enable free running PEBS for REGS_USER/INTR (git-fixes).
- perf/x86: Fix incorrect PEBS_REGS (git-fixes).
- perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts() (git-fixes).
- perf/x86/intel: Add proper condition to run sched_task callbacks (git-fixes).
- perf/x86/intel/bts: Fix the use of page_private() (git-fixes).
- perf/x86/intel: Fix PT PMI handling (git-fixes).
- perf/x86/intel: Move branch tracing setup to the Intel-specific source file (git-fixes).
- perf/x86/intel/uncore: Add Node ID mask (git-fixes).
- perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX (git-fixes).
- perf/x86/intel/uncore: Handle invalid event coding for free-running counter (git-fixes).
- perf/x86/uncore: Fix event group support (git-fixes).
- pid: Improve the comment about waiting in zap_pid_ns_processes (git fixes)).
- pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()' (bsc#1051510).
- pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()' (bsc#1051510).
- pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs (bsc#1051510).
- platform/x86: dell-laptop: do not register micmute LED if there is no token (bsc#1111666).
- platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() (bsc#1111666).
- PM / Domains: Allow genpd users to specify default active wakeup behavior (git-fixes).
- pnp: Use list_for_each_entry() instead of open coding (git fixes).
- powerpc/64s: Do not let DT CPU features set FSCR_DSCR (bsc#1065729).
- powerpc/64s: Save FSCR to init_task.thread.fscr after feature init (bsc#1065729).
- powerpc/book3s64: Export has_transparent_hugepage() related functions (bsc#1171759).
- powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey (bsc#1065729).
- powerpc/fadump: fix race between pstore write and fadump crash trigger (bsc#1168959 ltc#185010).
- powerpc/xive: Clear the page tables for the ESB IO mapping (bsc#1085030).
- powerpc/xmon: Reset RCU and soft lockup watchdogs (bsc#1065729).
- power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select (bsc#1051510).
- power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()' (bsc#1051510).
- power: supply: smb347-charger: IRQSTAT_D is volatile (bsc#1051510).
- power: vexpress: add suppress_bind_attrs to true (bsc#1111666).
- pppoe: only process PADT targeted at local interfaces (networking-stable-20_05_16).
- qed: reduce maximum stack frame size (git-fixes).
- qlcnic: fix missing release in qlcnic_83xx_interrupt_test (git-fixes).
- r8152: support additional Microsoft Surface Ethernet Adapter variant (networking-stable-20_05_27).
- raid5: remove gfp flags from scribble_alloc() (bsc#1166985).
- RDMA/efa: Fix setting of wrong bit in get/set_feature commands (bsc#1111666)
- RDMA/efa: Set maximum pkeys device attribute (bsc#1111666)
- RDMA/efa: Support remote read access in MR registration (bsc#1111666)
- RDMA/efa: Unified getters/setters for device structs bitmask access (bsc#1111666)
- README.BRANCH: Add Takashi Iwai as primary maintainer.
- regmap: debugfs: Do not sleep while atomic for fast_io regmaps (bsc#1111666).
- resolve KABI warning for perf-pt-coresight (git-fixes).
- Revert 'bcache: ignore pending signals when creating gc and allocator thread' (git fixes (block drivers)).
- Revert commit e918e570415c ('tpm_tis: Remove the HID IFX0102') (bsc#1111666).
- Revert 'dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues' (git fixes (block drivers)).
- Revert 'thermal: mediatek: fix register index error' (bsc#1111666).
- Revert 'tools lib traceevent: Remove unneeded qsort and uses memmove'
- s390/bpf: Maintain 8-byte stack alignment (bsc#1169194).
- s390: fix syscall_get_error for compat processes (git-fixes).
- s390/qdio: consistently restore the IRQ handler (git-fixes).
- s390/qdio: lock device while installing IRQ handler (git-fixes).
- s390/qdio: put thinint indicator after early error (git-fixes).
- s390/qdio: tear down thinint indicator after early error (git-fixes).
- s390/qeth: fix error handling for isolation mode cmds (git-fixes).
- sch_choke: avoid potential panic in choke_reset() (networking-stable-20_05_12).
- sch_sfq: validate silly quantum values (networking-stable-20_05_12).
- scsi: aacraid: fix a signedness bug (bsc#1174296).
- scsi: hisi_sas: fix calls to dma_set_mask_and_coherent() (bsc#1174296).
- scsi: ibmvscsi: Do not send host info in adapter info MAD after LPM (bsc#1172759 ltc#184814).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Avoid another null dereference in lpfc_sli4_hba_unset() (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1158983).
- scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (bsc#1158983).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix less-than-zero comparison of unsigned value (bsc#1158983).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1158983).
- scsi: megaraid_sas: Fix a compilation warning (bsc#1174296).
- scsi: mpt3sas: Fix double free in attach error handling (bsc#1174296).
- scsi: qedf: Add port_id getter (bsc#1150660).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (bsc#1174296).
- scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (bsc#1158983).
- sctp: Do not add the shutdown timer if its already been added (networking-stable-20_05_27).
- sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (networking-stable-20_05_27).
- spi: dw: use 'smp_mb()' to avoid sending spi data error (bsc#1051510).
- spi: fix initial SPI_SR value in spi-fsl-dspi (bsc#1111666).
- spi: pxa2xx: Apply CS clk quirk to BXT (bsc#1111666).
- spi: spidev: fix a race between spidev_release and spidev_remove (bsc#1111666).
- spi: spi-mem: Fix Dual/Quad modes on Octal-capable devices (bsc#1111666).
- spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate (bsc#1111666).
- staging: comedi: verify array index is correct before using it (bsc#1111666).
- staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK (bsc#1051510).
- staging: sm750fb: add missing case while setting FB_VISUAL (bsc#1051510).
- SUNRPC: The TCP back channel mustn't disappear while requests are outstanding (bsc#1152624).
- tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes (bsc#1173284).
- timers: Add a function to start/reduce a timer (networking-stable-20_05_27).
- tpm_tis: extra chip-&gt;ops check on error path in tpm_tis_core_init (bsc#1111666).
- tpm_tis: Remove the HID IFX0102 (bsc#1111666).
- tracing: Fix event trigger to accept redundant spaces (git-fixes).
- tty: n_gsm: Fix bogus i++ in gsm_data_kick (bsc#1051510).
- tty: n_gsm: Fix SOF skipping (bsc#1051510).
- tty: n_gsm: Fix waking up upper tty layer when room available (bsc#1051510).
- tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040 (networking-stable-20_05_12).
- ubifs: remove broken lazytime support (bsc#1173826).
- usb: add USB_QUIRK_DELAY_INIT for Logitech C922 (git-fixes).
- USB: c67x00: fix use after free in c67x00_giveback_urb (bsc#1111666).
- usb: chipidea: core: add wakeup support for extcon (bsc#1111666).
- usb: dwc2: Fix shutdown callback in platform (bsc#1111666).
- usb: dwc2: gadget: move gadget resume after the core is in L0 state (bsc#1051510).
- usb: dwc3: gadget: introduce cancelled_list (git-fixes).
- usb: dwc3: gadget: never call -&gt;complete() from -&gt;ep_queue() (git-fixes).
- usb: dwc3: gadget: Properly handle ClearFeature(halt) (git-fixes).
- usb: dwc3: gadget: Properly handle failed kick_transfer (git-fixes).
- USB: ehci: reopen solution for Synopsys HC bug (git-fixes).
- usb: gadget: fix potential double-free in m66592_probe (bsc#1111666).
- usb: gadget: lpc32xx_udc: do not dereference ep pointer before null check (bsc#1051510).
- usb: gadget: udc: atmel: fix uninitialized read in debug printk (bsc#1111666).
- usb: gadget: udc: atmel: remove outdated comment in usba_ep_disable() (bsc#1111666).
- usb: gadget: udc: Potential Oops in error handling code (bsc#1111666).
- USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke (bsc#1051510).
- usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() (bsc#1111666).
- USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe() (bsc#1051510).
- usb: musb: Fix runtime PM imbalance on error (bsc#1051510).
- usb: musb: start session in resume for host port (bsc#1051510).
- usbnet: smsc95xx: Fix use-after-free after removal (bsc#1111666).
- USB: ohci-sm501: Add missed iounmap() in remove (bsc#1111666).
- USB: serial: ch341: add new Product ID for CH340 (bsc#1111666).
- USB: serial: cypress_m8: enable Simply Automated UPB PIM (bsc#1111666).
- USB: serial: iuu_phoenix: fix memory corruption (bsc#1111666).
- USB: serial: option: add GosunCn GM500 series (bsc#1111666).
- USB: serial: option: add Quectel EG95 LTE modem (bsc#1111666).
- USB: serial: option: add Telit LE910C1-EUX compositions (bsc#1051510).
- USB: serial: qcserial: add DW5816e QDL support (bsc#1051510).
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (bsc#1051510).
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (git-fixes).
- vfio/pci: Fix SR-IOV VF handling with MMIO blocking (bsc#1174123).
- vfs: Fix EOVERFLOW testing in put_compat_statfs64 (bnc#1151927 5.3.6).
- virtio-blk: handle block_device_operations callbacks after hot unplug (git fixes (block drivers)).
- vmxnet3: add geneve and vxlan tunnel offload support (bsc#1172484).
- vmxnet3: add support to get/set rx flow hash (bsc#1172484).
- vmxnet3: allow rx flow hash ops only when rss is enabled (bsc#1172484).
- vmxnet3: avoid format strint overflow warning (bsc#1172484).
- vmxnet3: prepare for version 4 changes (bsc#1172484).
- vmxnet3: Remove always false conditional statement (bsc#1172484).
- vmxnet3: remove redundant initialization of pointer 'rq' (bsc#1172484).
- vmxnet3: remove unused flag 'rxcsum' from struct vmxnet3_adapter (bsc#1172484).
- vmxnet3: Replace msleep(1) with usleep_range() (bsc#1172484).
- vmxnet3: update to version 4 (bsc#1172484).
- vmxnet3: use correct hdr reference when packet is encapsulated (bsc#1172484).
- vsock: fix timeout in vsock_accept() (networking-stable-20_06_07).
- vxlan: Avoid infinite loop when suppressing NS messages with invalid options (git-fixes).
- w1: omap-hdq: cleanup to add missing newline for some dev_dbg (bsc#1051510).
- watchdog: sp805: fix restart handler (bsc#1111666).
- wil6210: add general initialization/size checks (bsc#1111666).
- wil6210: check rx_buff_mgmt before accessing it (bsc#1111666).
- wil6210: ignore HALP ICR if already handled (bsc#1111666).
- wil6210: make sure Rx ring sizes are correlated (git-fixes).
- work around mvfs bug (bsc#1162063).
- x86/apic: Install an empty physflat_init_apic_ldr (bsc#1163309).
- x86/cpu/amd: Make erratum #1054 a legacy erratum (bsc#1114279).
- x86/events/intel/ds: Add PERF_SAMPLE_PERIOD into PEBS_FREERUNNING_FLAGS (git-fixes).
- x86: Fix early boot crash on gcc-10, third try (bsc#1114279).
- x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (bsc#1172257).
- x86/reboot/quirks: Add MacBook6,1 reboot quirk (bsc#1114279).
- xfrm: fix error in comment (git fixes).
- xhci: Fix incorrect EP_STATE_MASK (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-03"/>
	<updated date="2020-08-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150660">SUSE bug 1150660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151927">SUSE bug 1151927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152107">SUSE bug 1152107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152624">SUSE bug 1152624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158983">SUSE bug 1158983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159058">SUSE bug 1159058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161016">SUSE bug 1161016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162002">SUSE bug 1162002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162063">SUSE bug 1162063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163309">SUSE bug 1163309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166985">SUSE bug 1166985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167104">SUSE bug 1167104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168081">SUSE bug 1168081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168959">SUSE bug 1168959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169194">SUSE bug 1169194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169771">SUSE bug 1169771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169795">SUSE bug 1169795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170011">SUSE bug 1170011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170442">SUSE bug 1170442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170592">SUSE bug 1170592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170617">SUSE bug 1170617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170618">SUSE bug 1170618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171124">SUSE bug 1171124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171424">SUSE bug 1171424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171529">SUSE bug 1171529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171530">SUSE bug 1171530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171732">SUSE bug 1171732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171739">SUSE bug 1171739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171743">SUSE bug 1171743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171753">SUSE bug 1171753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171759">SUSE bug 1171759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171835">SUSE bug 1171835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171841">SUSE bug 1171841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171868">SUSE bug 1171868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171904">SUSE bug 1171904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172247">SUSE bug 1172247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172257">SUSE bug 1172257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172344">SUSE bug 1172344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172458">SUSE bug 1172458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172484">SUSE bug 1172484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172537">SUSE bug 1172537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172687">SUSE bug 1172687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172719">SUSE bug 1172719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172759">SUSE bug 1172759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172775">SUSE bug 1172775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172781">SUSE bug 1172781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172782">SUSE bug 1172782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172783">SUSE bug 1172783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172871">SUSE bug 1172871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172872">SUSE bug 1172872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172999">SUSE bug 1172999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173060">SUSE bug 1173060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173074">SUSE bug 1173074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173146">SUSE bug 1173146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173265">SUSE bug 1173265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173280">SUSE bug 1173280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173284">SUSE bug 1173284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173428">SUSE bug 1173428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173514">SUSE bug 1173514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173567">SUSE bug 1173567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173573">SUSE bug 1173573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173659">SUSE bug 1173659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173746">SUSE bug 1173746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173818">SUSE bug 1173818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173820">SUSE bug 1173820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173825">SUSE bug 1173825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173826">SUSE bug 1173826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173833">SUSE bug 1173833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173838">SUSE bug 1173838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173839">SUSE bug 1173839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173845">SUSE bug 1173845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173857">SUSE bug 1173857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174113">SUSE bug 1174113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174115">SUSE bug 1174115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174122">SUSE bug 1174122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174123">SUSE bug 1174123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174186">SUSE bug 1174186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174187">SUSE bug 1174187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174296">SUSE bug 1174296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174343">SUSE bug 1174343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174356">SUSE bug 1174356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174409">SUSE bug 1174409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174438">SUSE bug 1174438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174462">SUSE bug 1174462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174543">SUSE bug 1174543</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16746/">CVE-2019-16746</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20810/">CVE-2019-20810</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20908/">CVE-2019-20908</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0305/">CVE-2020-0305</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10766/">CVE-2020-10766</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10767/">CVE-2020-10767</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10768/">CVE-2020-10768</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10769/">CVE-2020-10769</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10773/">CVE-2020-10773</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10781/">CVE-2020-10781</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12771/">CVE-2020-12771</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12888/">CVE-2020-12888</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13974/">CVE-2020-13974</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14416/">CVE-2020-14416</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15393/">CVE-2020-15393</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15780/">CVE-2020-15780</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496305" comment="kernel-docs-4.12.14-197.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496306" comment="kernel-obs-build-4.12.14-197.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496307" comment="kernel-source-4.12.14-197.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496308" comment="kernel-syms-4.12.14-197.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138224" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174633" ref_url="https://bugzilla.suse.com/1174633" source="BUGZILLA"/>
		<reference ref_id="1174635" ref_url="https://bugzilla.suse.com/1174635" source="BUGZILLA"/>
		<reference ref_id="1174638" ref_url="https://bugzilla.suse.com/1174638" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14345" ref_url="https://www.suse.com/security/cve/CVE-2020-14345/" source="CVE"/>
		<reference ref_id="CVE-2020-14346" ref_url="https://www.suse.com/security/cve/CVE-2020-14346/" source="CVE"/>
		<reference ref_id="CVE-2020-14347" ref_url="https://www.suse.com/security/cve/CVE-2020-14347/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2241-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007304.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation (bsc#1174633, ZDI-CAN-11426).
- CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability (bsc#1174638, ZDI-CAN-11429).
- CVE-2020-14345: XKB out-of-bounds access privilege escalation vulnerability (bsc#1174635, ZDI-CAN-11428).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-25"/>
	<updated date="2020-08-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174633">SUSE bug 1174633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174635">SUSE bug 1174635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174638">SUSE bug 1174638</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14345/">CVE-2020-14345</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14346/">CVE-2020-14346</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14347/">CVE-2020-14347</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496309" comment="xorg-x11-server-sdk-1.20.3-14.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138225" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174091" ref_url="https://bugzilla.suse.com/1174091" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20907" ref_url="https://www.suse.com/security/cve/CVE-2019-20907/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2277-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007282.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- bsc#1174091, CVE-2019-20907: avoiding possible infinite loop in specifically crafted tarball.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-19"/>
	<updated date="2020-08-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1174091">SUSE bug 1174091</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20907/">CVE-2019-20907</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496310" comment="python3-tools-3.6.10-3.59.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138226" version="1" class="patch">
	<metadata>
		<title>Security update for graphviz (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1093447" ref_url="https://bugzilla.suse.com/1093447" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10196" ref_url="https://www.suse.com/security/cve/CVE-2018-10196/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007306.html" source="SUSE-SU"/>
		<description>
This update for graphviz fixes the following issues:

- CVE-2018-10196: Fixed a null dereference in rebuild_vlis (bsc#1093447).	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-26"/>
	<updated date="2020-08-26"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1093447">SUSE bug 1093447</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10196/">CVE-2018-10196</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496311" comment="graphviz-perl-2.40.1-6.6.8 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138227" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174910" ref_url="https://bugzilla.suse.com/1174910" source="BUGZILLA"/>
		<reference ref_id="1174913" ref_url="https://bugzilla.suse.com/1174913" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14361" ref_url="https://www.suse.com/security/cve/CVE-2020-14361/" source="CVE"/>
		<reference ref_id="CVE-2020-14362" ref_url="https://www.suse.com/security/cve/CVE-2020-14362/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007349.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2020-14361: Fix XkbSelectEvents() integer underflow (bsc#1174910 ZDI-CAN-11573).
- CVE-2020-14362: Fix XRecordRegisterClients() Integer underflow (bsc#1174913 ZDI-CAN-11574).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-03"/>
	<updated date="2020-09-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174910">SUSE bug 1174910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174913">SUSE bug 1174913</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14361/">CVE-2020-14361</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14362/">CVE-2020-14362</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496312" comment="xorg-x11-server-sdk-1.20.3-14.5.5.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138228" version="1" class="patch">
	<metadata>
		<title>Security update for go1.14 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1164903" ref_url="https://bugzilla.suse.com/1164903" source="BUGZILLA"/>
		<reference ref_id="1169832" ref_url="https://bugzilla.suse.com/1169832" source="BUGZILLA"/>
		<reference ref_id="1170826" ref_url="https://bugzilla.suse.com/1170826" source="BUGZILLA"/>
		<reference ref_id="1172868" ref_url="https://bugzilla.suse.com/1172868" source="BUGZILLA"/>
		<reference ref_id="1174153" ref_url="https://bugzilla.suse.com/1174153" source="BUGZILLA"/>
		<reference ref_id="1174191" ref_url="https://bugzilla.suse.com/1174191" source="BUGZILLA"/>
		<reference ref_id="1174977" ref_url="https://bugzilla.suse.com/1174977" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14039" ref_url="https://www.suse.com/security/cve/CVE-2020-14039/" source="CVE"/>
		<reference ref_id="CVE-2020-15586" ref_url="https://www.suse.com/security/cve/CVE-2020-15586/" source="CVE"/>
		<reference ref_id="CVE-2020-16845" ref_url="https://www.suse.com/security/cve/CVE-2020-16845/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2562-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007377.html" source="SUSE-SU"/>
		<description>
This update for go1.14 fixes the following issues:

- go1.14 was updated to version 1.14.7 
- CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs (bsc#1174977).	  

- go1.14.6 (released 2020-07-16) includes fixes to the go command,
  the compiler, the linker, vet, and the database/sql,
  encoding/json, net/http, reflect, and testing packages.
  Refs bsc#1164903 go1.14 release tracking
  Refs bsc#1174153 bsc#1174191
  * go#39991 runtime: missing deferreturn on linux/ppc64le
  * go#39920 net/http: panic on misformed If-None-Match Header with http.ServeContent
  * go#39849 cmd/compile: internal compile error when using sync.Pool: mismatched zero/store sizes
  * go#39824 cmd/go: TestBuildIDContainsArchModeEnv/386 fails on linux/386 in Go 1.14 and 1.13, not 1.15
  * go#39698 reflect: panic from malloc after MakeFunc function returns value that is also stored globally
  * go#39636 reflect: DeepEqual can return true for values that are not equal
  * go#39585 encoding/json: incorrect object key unmarshaling when using custom TextUnmarshaler as Key with string va
lues
  * go#39562 cmd/compile/internal/ssa: TestNexting/dlv-dbg-hist failing on linux-386-longtest builder because it trie
s to use an older version of dlv which only supports linux/amd64
  * go#39308 testing: streaming output loses parallel subtest associations
  * go#39288 cmd/vet: update for new number formats
  * go#39101 database/sql: context cancellation allows statements to execute after rollback
  * go#38030 doc: BuildNameToCertificate deprecated in go 1.14 not mentioned in the release notes
  * go#40212 net/http: Expect 100-continue panics in httputil.ReverseProxy bsc#1174153 CVE-2020-15586
  * go#40210 crypto/x509: Certificate.Verify method seemingly ignoring EKU requirements on Windows bsc#1174191 CVE-2020-14039 (Windows only)
- Add patch to ensure /etc/hosts is used if /etc/nsswitch.conf is
  not present bsc#1172868 gh#golang/go#35305
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-07"/>
	<updated date="2020-09-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1164903">SUSE bug 1164903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169832">SUSE bug 1169832</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170826">SUSE bug 1170826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172868">SUSE bug 1172868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174153">SUSE bug 1174153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174191">SUSE bug 1174191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174977">SUSE bug 1174977</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14039/">CVE-2020-14039</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15586/">CVE-2020-15586</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16845/">CVE-2020-16845</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496313" comment="go1.14-1.14.7-1.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496314" comment="go1.14-doc-1.14.7-1.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138229" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083548" ref_url="https://bugzilla.suse.com/1083548" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1120163" ref_url="https://bugzilla.suse.com/1120163" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1136666" ref_url="https://bugzilla.suse.com/1136666" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1152148" ref_url="https://bugzilla.suse.com/1152148" source="BUGZILLA"/>
		<reference ref_id="1163524" ref_url="https://bugzilla.suse.com/1163524" source="BUGZILLA"/>
		<reference ref_id="1165629" ref_url="https://bugzilla.suse.com/1165629" source="BUGZILLA"/>
		<reference ref_id="1166965" ref_url="https://bugzilla.suse.com/1166965" source="BUGZILLA"/>
		<reference ref_id="1169790" ref_url="https://bugzilla.suse.com/1169790" source="BUGZILLA"/>
		<reference ref_id="1170232" ref_url="https://bugzilla.suse.com/1170232" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1171688" ref_url="https://bugzilla.suse.com/1171688" source="BUGZILLA"/>
		<reference ref_id="1171988" ref_url="https://bugzilla.suse.com/1171988" source="BUGZILLA"/>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1172108" ref_url="https://bugzilla.suse.com/1172108" source="BUGZILLA"/>
		<reference ref_id="1172247" ref_url="https://bugzilla.suse.com/1172247" source="BUGZILLA"/>
		<reference ref_id="1172418" ref_url="https://bugzilla.suse.com/1172418" source="BUGZILLA"/>
		<reference ref_id="1172428" ref_url="https://bugzilla.suse.com/1172428" source="BUGZILLA"/>
		<reference ref_id="1172871" ref_url="https://bugzilla.suse.com/1172871" source="BUGZILLA"/>
		<reference ref_id="1172872" ref_url="https://bugzilla.suse.com/1172872" source="BUGZILLA"/>
		<reference ref_id="1172873" ref_url="https://bugzilla.suse.com/1172873" source="BUGZILLA"/>
		<reference ref_id="1172963" ref_url="https://bugzilla.suse.com/1172963" source="BUGZILLA"/>
		<reference ref_id="1173060" ref_url="https://bugzilla.suse.com/1173060" source="BUGZILLA"/>
		<reference ref_id="1173485" ref_url="https://bugzilla.suse.com/1173485" source="BUGZILLA"/>
		<reference ref_id="1173798" ref_url="https://bugzilla.suse.com/1173798" source="BUGZILLA"/>
		<reference ref_id="1173954" ref_url="https://bugzilla.suse.com/1173954" source="BUGZILLA"/>
		<reference ref_id="1174003" ref_url="https://bugzilla.suse.com/1174003" source="BUGZILLA"/>
		<reference ref_id="1174026" ref_url="https://bugzilla.suse.com/1174026" source="BUGZILLA"/>
		<reference ref_id="1174070" ref_url="https://bugzilla.suse.com/1174070" source="BUGZILLA"/>
		<reference ref_id="1174205" ref_url="https://bugzilla.suse.com/1174205" source="BUGZILLA"/>
		<reference ref_id="1174387" ref_url="https://bugzilla.suse.com/1174387" source="BUGZILLA"/>
		<reference ref_id="1174484" ref_url="https://bugzilla.suse.com/1174484" source="BUGZILLA"/>
		<reference ref_id="1174547" ref_url="https://bugzilla.suse.com/1174547" source="BUGZILLA"/>
		<reference ref_id="1174549" ref_url="https://bugzilla.suse.com/1174549" source="BUGZILLA"/>
		<reference ref_id="1174550" ref_url="https://bugzilla.suse.com/1174550" source="BUGZILLA"/>
		<reference ref_id="1174625" ref_url="https://bugzilla.suse.com/1174625" source="BUGZILLA"/>
		<reference ref_id="1174658" ref_url="https://bugzilla.suse.com/1174658" source="BUGZILLA"/>
		<reference ref_id="1174685" ref_url="https://bugzilla.suse.com/1174685" source="BUGZILLA"/>
		<reference ref_id="1174689" ref_url="https://bugzilla.suse.com/1174689" source="BUGZILLA"/>
		<reference ref_id="1174699" ref_url="https://bugzilla.suse.com/1174699" source="BUGZILLA"/>
		<reference ref_id="1174734" ref_url="https://bugzilla.suse.com/1174734" source="BUGZILLA"/>
		<reference ref_id="1174757" ref_url="https://bugzilla.suse.com/1174757" source="BUGZILLA"/>
		<reference ref_id="1174771" ref_url="https://bugzilla.suse.com/1174771" source="BUGZILLA"/>
		<reference ref_id="1174840" ref_url="https://bugzilla.suse.com/1174840" source="BUGZILLA"/>
		<reference ref_id="1174841" ref_url="https://bugzilla.suse.com/1174841" source="BUGZILLA"/>
		<reference ref_id="1174843" ref_url="https://bugzilla.suse.com/1174843" source="BUGZILLA"/>
		<reference ref_id="1174844" ref_url="https://bugzilla.suse.com/1174844" source="BUGZILLA"/>
		<reference ref_id="1174845" ref_url="https://bugzilla.suse.com/1174845" source="BUGZILLA"/>
		<reference ref_id="1174852" ref_url="https://bugzilla.suse.com/1174852" source="BUGZILLA"/>
		<reference ref_id="1174873" ref_url="https://bugzilla.suse.com/1174873" source="BUGZILLA"/>
		<reference ref_id="1174904" ref_url="https://bugzilla.suse.com/1174904" source="BUGZILLA"/>
		<reference ref_id="1174926" ref_url="https://bugzilla.suse.com/1174926" source="BUGZILLA"/>
		<reference ref_id="1174968" ref_url="https://bugzilla.suse.com/1174968" source="BUGZILLA"/>
		<reference ref_id="1175062" ref_url="https://bugzilla.suse.com/1175062" source="BUGZILLA"/>
		<reference ref_id="1175063" ref_url="https://bugzilla.suse.com/1175063" source="BUGZILLA"/>
		<reference ref_id="1175064" ref_url="https://bugzilla.suse.com/1175064" source="BUGZILLA"/>
		<reference ref_id="1175065" ref_url="https://bugzilla.suse.com/1175065" source="BUGZILLA"/>
		<reference ref_id="1175066" ref_url="https://bugzilla.suse.com/1175066" source="BUGZILLA"/>
		<reference ref_id="1175067" ref_url="https://bugzilla.suse.com/1175067" source="BUGZILLA"/>
		<reference ref_id="1175112" ref_url="https://bugzilla.suse.com/1175112" source="BUGZILLA"/>
		<reference ref_id="1175127" ref_url="https://bugzilla.suse.com/1175127" source="BUGZILLA"/>
		<reference ref_id="1175128" ref_url="https://bugzilla.suse.com/1175128" source="BUGZILLA"/>
		<reference ref_id="1175149" ref_url="https://bugzilla.suse.com/1175149" source="BUGZILLA"/>
		<reference ref_id="1175199" ref_url="https://bugzilla.suse.com/1175199" source="BUGZILLA"/>
		<reference ref_id="1175213" ref_url="https://bugzilla.suse.com/1175213" source="BUGZILLA"/>
		<reference ref_id="1175228" ref_url="https://bugzilla.suse.com/1175228" source="BUGZILLA"/>
		<reference ref_id="1175232" ref_url="https://bugzilla.suse.com/1175232" source="BUGZILLA"/>
		<reference ref_id="1175284" ref_url="https://bugzilla.suse.com/1175284" source="BUGZILLA"/>
		<reference ref_id="1175393" ref_url="https://bugzilla.suse.com/1175393" source="BUGZILLA"/>
		<reference ref_id="1175394" ref_url="https://bugzilla.suse.com/1175394" source="BUGZILLA"/>
		<reference ref_id="1175396" ref_url="https://bugzilla.suse.com/1175396" source="BUGZILLA"/>
		<reference ref_id="1175397" ref_url="https://bugzilla.suse.com/1175397" source="BUGZILLA"/>
		<reference ref_id="1175398" ref_url="https://bugzilla.suse.com/1175398" source="BUGZILLA"/>
		<reference ref_id="1175399" ref_url="https://bugzilla.suse.com/1175399" source="BUGZILLA"/>
		<reference ref_id="1175400" ref_url="https://bugzilla.suse.com/1175400" source="BUGZILLA"/>
		<reference ref_id="1175401" ref_url="https://bugzilla.suse.com/1175401" source="BUGZILLA"/>
		<reference ref_id="1175402" ref_url="https://bugzilla.suse.com/1175402" source="BUGZILLA"/>
		<reference ref_id="1175403" ref_url="https://bugzilla.suse.com/1175403" source="BUGZILLA"/>
		<reference ref_id="1175404" ref_url="https://bugzilla.suse.com/1175404" source="BUGZILLA"/>
		<reference ref_id="1175405" ref_url="https://bugzilla.suse.com/1175405" source="BUGZILLA"/>
		<reference ref_id="1175406" ref_url="https://bugzilla.suse.com/1175406" source="BUGZILLA"/>
		<reference ref_id="1175407" ref_url="https://bugzilla.suse.com/1175407" source="BUGZILLA"/>
		<reference ref_id="1175408" ref_url="https://bugzilla.suse.com/1175408" source="BUGZILLA"/>
		<reference ref_id="1175409" ref_url="https://bugzilla.suse.com/1175409" source="BUGZILLA"/>
		<reference ref_id="1175410" ref_url="https://bugzilla.suse.com/1175410" source="BUGZILLA"/>
		<reference ref_id="1175411" ref_url="https://bugzilla.suse.com/1175411" source="BUGZILLA"/>
		<reference ref_id="1175412" ref_url="https://bugzilla.suse.com/1175412" source="BUGZILLA"/>
		<reference ref_id="1175413" ref_url="https://bugzilla.suse.com/1175413" source="BUGZILLA"/>
		<reference ref_id="1175414" ref_url="https://bugzilla.suse.com/1175414" source="BUGZILLA"/>
		<reference ref_id="1175415" ref_url="https://bugzilla.suse.com/1175415" source="BUGZILLA"/>
		<reference ref_id="1175416" ref_url="https://bugzilla.suse.com/1175416" source="BUGZILLA"/>
		<reference ref_id="1175417" ref_url="https://bugzilla.suse.com/1175417" source="BUGZILLA"/>
		<reference ref_id="1175418" ref_url="https://bugzilla.suse.com/1175418" source="BUGZILLA"/>
		<reference ref_id="1175419" ref_url="https://bugzilla.suse.com/1175419" source="BUGZILLA"/>
		<reference ref_id="1175420" ref_url="https://bugzilla.suse.com/1175420" source="BUGZILLA"/>
		<reference ref_id="1175421" ref_url="https://bugzilla.suse.com/1175421" source="BUGZILLA"/>
		<reference ref_id="1175422" ref_url="https://bugzilla.suse.com/1175422" source="BUGZILLA"/>
		<reference ref_id="1175423" ref_url="https://bugzilla.suse.com/1175423" source="BUGZILLA"/>
		<reference ref_id="1175440" ref_url="https://bugzilla.suse.com/1175440" source="BUGZILLA"/>
		<reference ref_id="1175493" ref_url="https://bugzilla.suse.com/1175493" source="BUGZILLA"/>
		<reference ref_id="1175515" ref_url="https://bugzilla.suse.com/1175515" source="BUGZILLA"/>
		<reference ref_id="1175518" ref_url="https://bugzilla.suse.com/1175518" source="BUGZILLA"/>
		<reference ref_id="1175526" ref_url="https://bugzilla.suse.com/1175526" source="BUGZILLA"/>
		<reference ref_id="1175550" ref_url="https://bugzilla.suse.com/1175550" source="BUGZILLA"/>
		<reference ref_id="1175654" ref_url="https://bugzilla.suse.com/1175654" source="BUGZILLA"/>
		<reference ref_id="1175666" ref_url="https://bugzilla.suse.com/1175666" source="BUGZILLA"/>
		<reference ref_id="1175667" ref_url="https://bugzilla.suse.com/1175667" source="BUGZILLA"/>
		<reference ref_id="1175668" ref_url="https://bugzilla.suse.com/1175668" source="BUGZILLA"/>
		<reference ref_id="1175669" ref_url="https://bugzilla.suse.com/1175669" source="BUGZILLA"/>
		<reference ref_id="1175670" ref_url="https://bugzilla.suse.com/1175670" source="BUGZILLA"/>
		<reference ref_id="1175691" ref_url="https://bugzilla.suse.com/1175691" source="BUGZILLA"/>
		<reference ref_id="1175767" ref_url="https://bugzilla.suse.com/1175767" source="BUGZILLA"/>
		<reference ref_id="1175768" ref_url="https://bugzilla.suse.com/1175768" source="BUGZILLA"/>
		<reference ref_id="1175769" ref_url="https://bugzilla.suse.com/1175769" source="BUGZILLA"/>
		<reference ref_id="1175770" ref_url="https://bugzilla.suse.com/1175770" source="BUGZILLA"/>
		<reference ref_id="1175771" ref_url="https://bugzilla.suse.com/1175771" source="BUGZILLA"/>
		<reference ref_id="1175772" ref_url="https://bugzilla.suse.com/1175772" source="BUGZILLA"/>
		<reference ref_id="1175786" ref_url="https://bugzilla.suse.com/1175786" source="BUGZILLA"/>
		<reference ref_id="1175873" ref_url="https://bugzilla.suse.com/1175873" source="BUGZILLA"/>
		<reference ref_id="1176069" ref_url="https://bugzilla.suse.com/1176069" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10135" ref_url="https://www.suse.com/security/cve/CVE-2020-10135/" source="CVE"/>
		<reference ref_id="CVE-2020-14314" ref_url="https://www.suse.com/security/cve/CVE-2020-14314/" source="CVE"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-14356" ref_url="https://www.suse.com/security/cve/CVE-2020-14356/" source="CVE"/>
		<reference ref_id="CVE-2020-14386" ref_url="https://www.suse.com/security/cve/CVE-2020-14386/" source="CVE"/>
		<reference ref_id="CVE-2020-16166" ref_url="https://www.suse.com/security/cve/CVE-2020-16166/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="CVE-2020-24394" ref_url="https://www.suse.com/security/cve/CVE-2020-24394/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007383.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629).
- CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
- CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).
- CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
- CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
- CVE-2020-24394: Fixed an issue which could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support (bsc#1175518).
- CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988).
- CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).
    
The following non-security bugs were fixed:

- ACPI: kABI fixes for subsys exports (bsc#1174968).
- ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq (bsc#1174968).
- ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate (bsc#1174968).
- ACPI: PM: Introduce 'poweroff' callbacks for ACPI PM domain and LPSS (bsc#1174968).
- ACPI: PM: Simplify and fix PM domain hibernation callbacks (bsc#1174968).
- af_key: pfkey_dump needs parameter validation (git-fixes).
- agp/intel: Fix a memory leak on module initialisation failure (git-fixes).
- ALSA: core: pcm_iec958: fix kernel-doc (bsc#1111666).
- ALSA: echoaduio: Drop superfluous volatile modifier (bsc#1111666).
- ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (bsc#1111666).
- ALSA: hda: Add support for Loongson 7A1000 controller (bsc#1111666).
- ALSA: hda/ca0132 - Add new quirk ID for Recon3D (bsc#1111666).
- ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (bsc#1111666).
- ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (bsc#1111666).
- ALSA: hda: fix NULL pointer dereference during suspend (git-fixes).
- ALSA: hda: fix snd_hda_codec_cleanup() documentation (bsc#1111666).
- ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (bsc#1111666).
- ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (bsc#1111666).
- ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes).
- ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (bsc#1111666).
- ALSA: hda/realtek - Add quirk for Lenovo Carbon X1 8th gen (bsc#1111666).
- ALSA: hda/realtek - Add quirk for MSI GE63 laptop (bsc#1111666).
- ALSA: hda/realtek - Add quirk for MSI GL63 (bsc#1111666).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes).
- ALSA: hda/realtek - change to suitable link model for ASUS platform (bsc#1111666).
- ALSA: hda/realtek - Check headset type by unplug and resume (bsc#1111666).
- ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 (bsc#1111666).
- ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (bsc#1111666).
- ALSA: hda/realtek - Enable Speaker for ASUS UX563 (bsc#1111666).
- ALSA: hda/realtek: Fix add a 'ultra_low_power' function for intel reference board (alc256) (bsc#1111666).
- ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung Notebook Pen S (bsc#1111666).
- ALSA: hda/realtek - Fixed HP right speaker no sound (bsc#1111666).
- ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id (bsc#1111666).
- ALSA: hda/realtek: Fix pin default on Intel NUC 8 Rugged (bsc#1111666).
- ALSA: hda/realtek - Fix unused variable warning (bsc#1111666).
- ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus G14(GA401) series with ALC289 (bsc#1111666).
- ALSA: hda - reverse the setting value in the micmute_led_set (bsc#1111666).
- ALSA: hda: Workaround for spurious wakeups on some Intel platforms (git-fixes).
- ALSA: pci: delete repeated words in comments (bsc#1111666).
- ALSA: seq: oss: Serialize ioctls (bsc#1111666).
- ALSA: usb-audio: Add capture support for Saffire 6 (USB 1.1) (git-fixes).
- ALSA: usb-audio: add quirk for Pioneer DDJ-RB (bsc#1111666).
- ALSA: usb-audio: add startech usb audio dock name (bsc#1111666).
- ALSA: usb-audio: Add support for Lenovo ThinkStation P620 (bsc#1111666).
- ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support (bsc#1111666).
- ALSA: usb-audio: Disable Lenovo P620 Rear line-in volume control (bsc#1111666).
- ALSA: usb-audio: endpoint : remove needless check before usb_free_coherent() (bsc#1111666).
- ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 (bsc#1174625).
- ALSA: usb-audio: fix spelling mistake 'buss' -&gt; 'bus' (bsc#1111666).
- ALSA: usb-audio: ignore broken processing/extension unit (git-fixes).
- ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109 (bsc#1111666).
- ALSA: usb/line6: remove 'defined but not used' warning (bsc#1111666).
- arm64: Add MIDR encoding for HiSilicon Taishan CPUs (bsc#1174547).
- arm64: Add MIDR encoding for NVIDIA CPUs (bsc#1174547).
- arm64: add sysfs vulnerability show for meltdown (bsc#1174547).
- arm64: Add sysfs vulnerability show for spectre-v1 (bsc#1174547).
- arm64: add sysfs vulnerability show for spectre-v2 (bsc#1174547).
- arm64: add sysfs vulnerability show for speculative store bypass (bsc#1174547). 
- arm64: Advertise mitigation of Spectre-v2, or lack thereof (bsc#1174547). 
- arm64: Always enable spectre-v2 vulnerability detection (bsc#1174547). 
- arm64: Always enable ssb vulnerability detection (bsc#1174547). 
- arm64: backtrace: Do not bother trying to unwind the userspace stack (bsc#1175397).
- arm64: capabilities: Add NVIDIA Denver CPU to bp_harden list (bsc#1174547).
- arm64: capabilities: Merge duplicate Cavium erratum entries (bsc#1174547).
- arm64: capabilities: Merge entries for ARM64_WORKAROUND_CLEAN_CACHE (bsc#1174547). 
- arm64: cpufeature: Enable Qualcomm Falkor/Kryo errata 1003 (bsc#1175398).
- arm64: Do not mask out PTE_RDONLY in pte_same() (bsc#1175393).
- arm64: enable generic CPU vulnerabilites support (bsc#1174547). Update config/arm64/default
- arm64: Ensure VM_WRITE|VM_SHARED ptes are clean by default (bsc#1175394).
- arm64: errata: Do not define type field twice for arm64_errata entries (bsc#1174547).
- arm64: errata: Update stale comment (bsc#1174547).
- arm64: Get rid of __smccc_workaround_1_hvc_* (bsc#1174547).
- arm64: kpti: Avoid rewriting early page tables when KASLR is enabled (bsc#1174547).
- arm64: kpti: Update arm64_kernel_use_ng_mappings() when forced on (bsc#1174547).
- arm64: kpti: Whitelist Cortex-A CPUs that do not implement the CSV3 field (bsc#1174547).
- arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs (bsc#1174547).
- arm64: KVM: Avoid setting the upper 32 bits of VTCR_EL2 to 1 (bsc#1133021).
- arm64: KVM: Guests can skip __install_bp_hardening_cb()s HYP work (bsc#1174547).
- arm64: KVM: Use SMCCC_ARCH_WORKAROUND_1 for Falkor BP hardening (bsc#1174547). 
- arm64: mm: Fix pte_mkclean, pte_mkdirty semantics (bsc#1175526). 
- arm64: Provide a command line to disable spectre_v2 mitigation (bsc#1174547).
- arm64: Silence clang warning on mismatched value/register sizes (bsc#1175396).
- arm64/speculation: Support 'mitigations=' cmdline option (bsc#1174547). 
- arm64: ssbd: explicitly depend on &lt;linux/prctl.h&gt; (bsc#1175399).
- arm64: ssbs: Do not treat CPUs with SSBS as unaffected by SSB (bsc#1174547).
- arm64: ssbs: Fix context-switch when SSBS is present on all CPUs (bsc#1175669).
- arm64/sve: Fix wrong free for task-&gt;thread.sve_state (bsc#1175400).
- arm64/sve: &lt;uapi/asm/ptrace.h&gt; should not depend on &amp;lt;uapi/linux/prctl.h&gt; (bsc#1175401).
- arm64: tlbflush: avoid writing RES0 bits (bsc#1175402).
- arm64: Use firmware to detect CPUs that are not affected by Spectre-v2 (bsc#1174547).
- ARM: KVM: invalidate BTB on guest exit for Cortex-A12/A17 (bsc#1133021). 
- ARM: KVM: invalidate icache on guest exit for Cortex-A15 (bsc#1133021).
- ARM: spectre-v2: KVM: invalidate icache on guest exit for Brahma B15 (bsc#1133021).
- ASoC: hda/tegra: Set buffer alignment to 128 bytes (bsc#1111666).
- ASoC: intel: Fix memleak in sst_media_open (git-fixes).
- ASoC: rt5670: Correct RT5670_LDO_SEL_MASK (git-fixes).
- AX.25: Fix out-of-bounds read in ax25_connect() (git-fixes).
- AX.25: Prevent integer overflows in connect and sendmsg (git-fixes).
- AX.25: Prevent out-of-bounds read in ax25_sendmsg() (git-fixes).
- ax88172a: fix ax88172a_unbind() failures (git-fixes).
- b43: Remove uninitialized_var() usage (git-fixes).
- bcache: allocate meta data pages as compound pages (bsc#1172873).
- block: check queue's limits.discard_granularity in __blkdev_issue_discard() (bsc#1152148).
- block: Fix use-after-free in blkdev_get() (bsc#1174843).
- block: improve discard bio alignment in __blkdev_issue_discard() (bsc#1152148).
- Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() (bsc#1111666).
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt() (bsc#1111666).
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt() (bsc#1111666).
- bonding: fix active-backup failover for current ARP slave (bsc#1174771).
- bonding: fix a potential double-unregister (git-fixes).
- bonding: show saner speed for broadcast mode (git-fixes).
- bpf: Fix map leak in HASH_OF_MAPS map (git-fixes).
- brcmfmac: keep SDIO watchdog running when console_interval is non-zero (bsc#1111666).
- brcmfmac: set state of hanger slot to FREE when flushing PSQ (bsc#1111666).
- brcmfmac: To fix Bss Info flag definition Bug (bsc#1111666).
- btrfs: change timing for qgroup reserved space for ordered extents to fix reserved space leak (bsc#1172247).
- btrfs: file: reserve qgroup space after the hole punch range is locked (bsc#1172247).
- btrfs: fix a block group ref counter leak after failure to remove block group (bsc#1175149).
- btrfs: fix block group leak when removing fails (bsc#1175149).
- btrfs: fix bytes_may_use underflow when running balance and scrub in parallel (bsc#1175149).
- btrfs: fix corrupt log due to concurrent fsync of inodes with shared extents (bsc#1175149).
- btrfs: fix data block group relocation failure due to concurrent scrub (bsc#1175149).
- btrfs: fix double free on ulist after backref resolution failure (bsc#1175149).
- btrfs: fix fatal extent_buffer readahead vs releasepage race (bsc#1175149).
- btrfs: fix memory leaks after failure to lookup checksums during inode logging (bsc#1175550).
- btrfs: fix page leaks after failure to lock page for delalloc (bsc#1175149).
- btrfs: fix race between block group removal and block group creation (bsc#1175149).
- btrfs: fix space_info bytes_may_use underflow after nocow buffered write (bsc#1175149).
- btrfs: fix space_info bytes_may_use underflow during space cache writeout (bsc#1175149).
- btrfs: fix wrong file range cleanup after an error filling dealloc range (bsc#1175149).
- btrfs: inode: fix NULL pointer dereference if inode does not need compression (bsc#1174484).
- btrfs: inode: move qgroup reserved space release to the callers of insert_reserved_file_extent() (bsc#1172247).
- btrfs: inode: refactor the parameters of insert_reserved_file_extent() (bsc#1172247).
- btrfs: make btrfs_ordered_extent naming consistent with btrfs_file_extent_item (bsc#1172247).
- btrfs: Open code btrfs_write_and_wait_marked_extents (bsc#1175149).
- btrfs: qgroup: allow to unreserve range without releasing other ranges (bsc#1120163).
- btrfs: qgroup: fix data leak caused by race between writeback and truncate (bsc#1172247).
- btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT (bsc#1120163).
- btrfs: qgroup: try to flush qgroup space when we get -EDQUOT (bsc#1120163).
- btrfs: Rename and export clear_btree_io_tree (bsc#1175149).
- btrfs: treat RWF_{,D}SYNC writes as sync for CRCs (bsc#1175493).
- bus: hisi_lpc: Add .remove method to avoid driver unbind crash (bsc#1174658).
- bus: hisi_lpc: Do not fail probe for unrecognised child devices (bsc#1174658).
- bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-free (bsc#1174658).
- cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip (git-fixes).
- cfg80211: check vendor command doit pointer before use (git-fixes).
- char: virtio: Select VIRTIO from VIRTIO_CONSOLE (bsc#1175667).
- cifs: document and cleanup dfs mount (bsc#1144333 bsc#1172428).
- cifs: Fix an error pointer dereference in cifs_mount() (bsc#1144333 bsc#1172428).
- cifs: fix double free error on share and prefix (bsc#1144333 bsc#1172428).
- cifs: handle empty list of targets in cifs_reconnect() (bsc#1144333 bsc#1172428).
- cifs: handle RESP_GET_DFS_REFERRAL.PathConsumed in reconnect (bsc#1144333 bsc#1172428).
- cifs: merge __{cifs,smb2}_reconnect[_tcon]() into cifs_tree_connect() (bsc#1144333 bsc#1172428).
- cifs: only update prefix path of DFS links in cifs_tree_connect() (bsc#1144333 bsc#1172428).
- cifs: reduce number of referral requests in DFS link lookups (bsc#1144333 bsc#1172428).
- cifs: rename reconn_inval_dfs_target() (bsc#1144333 bsc#1172428).
- clk: at91: clk-generated: check best_rate against ranges (bsc#1111666).
- clk: clk-atlas6: fix return value check in atlas6_clk_init() (bsc#1111666).
- clk: iproc: round clock rate to the closest (bsc#1111666).
- clk: spear: Remove uninitialized_var() usage (git-fixes).
- clk: st: Remove uninitialized_var() usage (git-fixes).
- config: arm64: enable CONFIG_IOMMU_DEFAULT_PASSTHROUGH References: bsc#1174549
- console: newport_con: fix an issue about leak related system resources (git-fixes).
- constrants: fix malformed XML Closing tag of an element is '&lt;/foo&gt;', not '&lt;foo/&gt;'. Fixes: 8b37de2eb835 ('rpm/constraints.in: Increase memory for kernel-docs')
- Created new preempt kernel flavor (jsc#SLE-11309) Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT-&gt;y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.
- crypto: ccp - Fix use of merged scatterlists (git-fixes).
- crypto: cpt - do not sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified (git-fixes).
- crypto: qat - fix double free in qat_uclo_create_batch_init_list (git-fixes).
- crypto: rockchip - fix scatterlist nents error (git-fixes).
- crypto: stm32/crc32 - fix ext4 chksum BUG_ON() (git-fixes).
- crypto: talitos - check AES key size (git-fixes).
- crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK (git-fixes).
- crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req() (git-fixes).
- dev: Defer free of skbs in flush_backlog (git-fixes).
- device property: Fix the secondary firmware node handling in set_primary_fwnode() (git-fixes).
- devres: keep both device name and resource name in pretty name (git-fixes).
- dlm: Fix kobject memleak (bsc#1175768).
- dlm: remove BUG() before panic() (bsc#1174844).
- dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler (git-fixes).
- Documentation/networking: Add net DIM documentation (bsc#1174852).
- dpaa2-eth: Fix passing zero to 'PTR_ERR' warning (bsc#1175403).
- dpaa2-eth: free already allocated channels on probe defer (bsc#1175404).
- dpaa2-eth: prevent array underflow in update_cls_rule() (bsc#1175405).
- dpaa_eth: add dropped frames to percpu ethtool stats (bsc#1174550).
- dpaa_eth: add newline in dev_err() msg (bsc#1174550).
- dpaa_eth: avoid timestamp read on error paths (bsc#1175406).
- dpaa_eth: change DMA device (bsc#1174550).
- dpaa_eth: cleanup skb_to_contig_fd() (bsc#1174550).
- dpaa_eth: defer probing after qbman (bsc#1174550).
- dpaa_eth: extend delays in ndo_stop (bsc#1174550).
- dpaa_eth: fix DMA mapping leak (bsc#1174550).
- dpaa_eth: Fix one possible memleak in dpaa_eth_probe (bsc#1174550).
- dpaa_eth: FMan erratum A050385 workaround (bsc#1174550).
- dpaa_eth: perform DMA unmapping before read (bsc#1175407).
- dpaa_eth: register a device link for the qman portal used (bsc#1174550).
- dpaa_eth: remove netdev_err() for user errors (bsc#1174550).
- dpaa_eth: remove redundant code (bsc#1174550).
- dpaa_eth: simplify variables used in dpaa_cleanup_tx_fd() (bsc#1174550).
- dpaa_eth: use a page to store the SGT (bsc#1174550).
- dpaa_eth: use fd information in dpaa_cleanup_tx_fd() (bsc#1174550).
- dpaa_eth: use only one buffer pool per interface (bsc#1174550).
- dpaa_eth: use page backed rx buffers (bsc#1174550).
- driver core: Avoid binding drivers to dead devices (git-fixes).
- Drivers: hv: balloon: Remove dependencies on guest page size (git-fixes).
- Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE (git-fixes).
- Drivers: hv: vmbus: Only notify Hyper-V for die events that are oops (bsc#1175127, bsc#1175128).
- Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup() (git-fixes).
- drivers/perf: hisi: Fix typo in events attribute array (bsc#1175408).
- drivers/perf: hisi: Fixup one DDRC PMU register offset (bsc#1175410).
- drivers/perf: hisi: Fix wrong value for all counters enable (bsc#1175409).
- drm: Added orientation quirk for ASUS tablet model T103HAF (bsc#1111666).
- drm/amd/display: fix pow() crashing when given base 0 (git-fixes).
- drm/amdgpu: avoid dereferencing a NULL pointer (bsc#1111666).
- drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume (bsc#1111666).
- drm/amdgpu: Fix NULL dereference in dpm sysfs handlers (bsc#1113956) 	* refresh for context changes
- drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() (git-fixes).
- drm/amdgpu: Replace invalid device ID with a valid device ID (bsc#1113956)
- drm/arm: fix unintentional integer overflow on left shift (git-fixes).
- drm/bridge: dw-hdmi: Do not cleanup i2c adapter and ddc ptr in (bsc#1113956) 	* refreshed for context changes
- drm/bridge: sil_sii8620: initialize return of sii8620_readb (git-fixes).
- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1113956) 	* move drm_mipi_dbi.c -&gt; tinydrm/mipi-drm.c 	* refresh for context changes
- drm/debugfs: fix plain echo to connector 'force' attribute (bsc#1111666).
- drm/etnaviv: Fix error path on failure to enable bus clk (git-fixes).
- drm/etnaviv: fix ref count leak via pm_runtime_get_sync (bsc#1111666).
- drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi (bsc#1112178) 	* updated names of get/put functions
- drm: hold gem reference until object is no longer accessed (bsc#1113956)
- drm/imx: fix use after free (git-fixes).
- drm/imx: imx-ldb: Disable both channels for split mode in enc-&gt;disable() (git-fixes).
- drm/imx: tve: fix regulator_disable error path (git-fixes).
- drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline (git-fixes).
- drm/msm/adreno: fix updating ring fence (git-fixes).
- drm/msm: ratelimit crtc event overflow error (bsc#1111666).
- drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason (git-fixes).
- drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure (git-fixes).
- drm/nouveau: fix multiple instances of reference count leaks (bsc#1111666).
- drm/panel: otm8009a: Drop unnessary backlight_device_unregister() (git-fixes).
- drm: panel: simple: Fix bpc for LG LB070WV8 panel (git-fixes).
- drm/radeon: disable AGP by default (bsc#1111666).
- drm/radeon: fix array out-of-bounds read and write issues (git-fixes).
- drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync (bsc#1111666).
- drm/rockchip: fix VOP_WIN_GET macro (bsc#1175411).
- drm/tilcdc: fix leak &amp; null ref in panel_connector_get_modes (bsc#1111666).
- drm/ttm/nouveau: do not call tt destroy callback on alloc failure (bsc#1175232).
- drm/vmwgfx: Fix two list_for_each loop exit tests (bsc#1111666).
- drm/vmwgfx: Use correct vmw_legacy_display_unit pointer (bsc#1111666).
- drm/xen-front: Fix misused IS_ERR_OR_NULL checks (bsc#1065600).
- efi/memreserve: deal with memreserve entries in unmapped memory (bsc#1174685).
- ext4: check journal inode extents more carefully (bsc#1173485).
- ext4: do not allow overlapping system zones (bsc#1173485).
- ext4: fix checking of directory entry validity for inline directories (bsc#1175771).
- ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max (bsc#1174840).
- ext4: handle error of ext4_setup_system_zone() on remount (bsc#1173485).
- fat: do not allow to mount if the FAT length == 0 (bsc#1174845).
- fbdev: Detect integer underflow at 'struct fbcon_ops'-&gt;clear_margins. (bsc#1112178) 	* move files drivers/video/fbdev/core -&gt; drivers/video/console 	* refresh for context changes
- firmware: google: check if size is valid when decoding VPD data (git-fixes).
- firmware: google: increment VPD key_len properly (git-fixes).
- fpga: dfl: fix bug in port reset handshake (git-fixes).
- fsl/fman: add API to get the device behind a fman port (bsc#1174550).
- fsl/fman: check dereferencing null pointer (git-fixes).
- fsl/fman: detect FMan erratum A050385 (bsc#1174550).
- fsl/fman: do not touch liodn base regs reserved on non-PAMU SoCs (bsc#1174550).
- fsl/fman: fix dereference null return value (git-fixes).
- fsl/fman: fix eth hash table allocation (git-fixes).
- fsl/fman: fix unreachable code (git-fixes).
- fsl/fman: remove unused struct member (bsc#1174550).
- fsl/fman: use 32-bit unsigned integer (git-fixes).
- fuse: fix memleak in cuse_channel_open (bsc#1174926).
- fuse: fix missing unlock_page in fuse_writepage() (bsc#1174904).
- fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS (bsc#1175062).
- fuse: fix weird page warning (bsc#1175063).
- fuse: flush dirty data/metadata before non-truncate setattr (bsc#1175064).
- fuse: truncate pending writes on O_TRUNC (bsc#1175065).
- fuse: verify attributes (bsc#1175066).
- fuse: verify nlink (bsc#1175067).
- genetlink: remove genl_bind (networking-stable-20_07_17).
- go7007: add sanity checking for endpoints (git-fixes).
- gpu: host1x: debug: Fix multiple channels emitting messages simultaneously (bsc#1111666).
- HID: hiddev: fix mess in hiddev_open() (git-fixes).
- HISI LPC: Re-Add ACPI child enumeration support (bsc#1174658).
- HISI LPC: Stop using MFD APIs (bsc#1174658).
- hv_balloon: Balloon up according to request page number (git-fixes).
- hv_balloon: Use a static page for the balloon_up send buffer (git-fixes).
- hv_netvsc: Allow scatter-gather feature to be tunable (git-fixes).
- hv_netvsc: do not use VF device if link is down (git-fixes).
- hv_netvsc: Fix a warning of suspicious RCU usage (git-fixes).
- hv_netvsc: Fix error handling in netvsc_attach() (git-fixes).
- hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback() (git-fixes).
- hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit() (git-fixes).
- hv_netvsc: Fix unwanted wakeup in netvsc_attach() (git-fixes).
- hv_netvsc: flag software created hash value (git-fixes).
- hv_netvsc: Remove 'unlikely' from netvsc_select_queue (git-fixes).
- i2c: rcar: in slave mode, clear NACK earlier (git-fixes).
- i2c: rcar: slave: only send STOP event when we have been addressed (bsc#1111666).
- i40e: Fix crash during removing i40e driver (git-fixes).
- i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (git-fixes).
- ibmveth: Fix use of ibmveth in a bridge (bsc#1174387 ltc#187506).
- ibmvnic: Fix IRQ mapping disposal in error path (bsc#1175112 ltc#187459).
- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset (bsc#1175873 ltc#187922).
- include/linux/poison.h: remove obsolete comment (git fixes (poison)).
- Input: psmouse - add a newline when printing 'proto' by sysfs (git-fixes).
- Input: sentelic - fix error return when fsp_reg_write fails (bsc#1111666).
- integrity: remove redundant initialization of variable ret (git-fixes).
- io-mapping: indicate mapping failure (git-fixes).
- ip6_gre: fix null-ptr-deref in ip6gre_init_net() (git-fixes).
- ip6_gre: fix use-after-free in ip6gre_tunnel_lookup() (networking-stable-20_06_28).
- ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL (bsc#1175515).
- ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL (bsc#1175515).
- ip_tunnel: Emit events for post-register MTU changes (git-fixes).
- ip_tunnel: fix use-after-free in ip_tunnel_lookup() (networking-stable-20_06_28).
- ip_tunnel: restore binding to ifaces with a large mtu (git-fixes).
- ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg (networking-stable-20_07_17).
- ipv4: Silence suspicious RCU usage warning (git-fixes).
- ipv6: fix memory leaks on IPV6_ADDRFORM path (git-fixes).
- ipvlan: fix device features (git-fixes).
- ipvs: allow connection reuse for unconfirmed conntrack (git-fixes).
- ipvs: fix refcount usage for conns in ops mode (git-fixes).
- ipvs: fix the connection sync failed in some cases (bsc#1174699).
- irqchip/gic: Atomically update affinity (bsc#1111666).
- iwlegacy: Check the return value of pcie_capability_read_*() (bsc#1111666).
- jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock() (bsc#1175772).
- kabi: genetlink: remove genl_bind (kabi).
- kabi: hide new parameter of ip6_dst_lookup_flow() (bsc#1165629).
- kabi: mask changes to struct ipv6_stub (bsc#1165629).
- kernel/cpu_pm: Fix uninitted local in cpu_pm (git fixes (kernel/pm)).
- kernel-docs: Change Requires on python-Sphinx to earlier than version 3 References: bsc#1166965 From 3 on the internal API that the build system uses was rewritten in an incompatible way. See https://github.com/sphinx-doc/sphinx/issues/7421 and https://bugzilla.suse.com/show_bug.cgi?id=1166965#c16 for some details.
- kernel/relay.c: fix memleak on destroy relay channel (git-fixes).
- kernfs: do not call fsnotify() with name without a parent (bsc#1175770).
- KVM: arm64: Ensure 'params' is initialised when looking up sys register (bsc#1133021).
- KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART (bsc#1133021).
- KVM: arm/arm64: Fix young bit from mmu notifier (bsc#1133021).
- KVM: arm/arm64: vgic: Do not rely on the wrong pending table (bsc#1133021).
- KVM: arm/arm64: vgic-its: Fix restoration of unmapped collections (bsc#1133021).
- KVM: arm: Fix DFSR setting for non-LPAE aarch32 guests (bsc#1133021).
- KVM: arm: Make inject_abt32() inject an external abort instead (bsc#1133021).
- KVM: Change offset in kvm_write_guest_offset_cached to unsigned (bsc#1133021).
- KVM: Check for a bad hva before dropping into the ghc slow path (bsc#1133021).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage (bsc#1065729).
- l2tp: remove skb_dst_set() from l2tp_xmit_skb() (networking-stable-20_07_17).
- leds: 88pm860x: fix use-after-free on unbind (git-fixes).
- leds: core: Flush scheduled work for system suspend (git-fixes).
- leds: da903x: fix use-after-free on unbind (git-fixes).
- leds: lm3533: fix use-after-free on unbind (git-fixes).
- leds: lm355x: avoid enum conversion warning (git-fixes).
- leds: wm831x-status: fix use-after-free on unbind (git-fixes).
- lib/dim: Fix -Wunused-const-variable warnings (bsc#1174852).
- lib: dimlib: fix help text typos (bsc#1174852).
- lib: logic_pio: Add logic_pio_unregister_range() (bsc#1174658).
- lib: logic_pio: Avoid possible overlap for unregistering regions (bsc#1174658).
- lib: logic_pio: Fix RCU usage (bsc#1174658).
- linux/dim: Add completions count to dim_sample (bsc#1174852).
- linux/dim: Fix overflow in dim calculation (bsc#1174852).
- linux/dim: Move implementation to .c files (bsc#1174852).
- linux/dim: Move logic to dim.h (bsc#1174852).
- linux/dim: Remove 'net' prefix from internal DIM members (bsc#1174852).
- linux/dim: Rename externally exposed macros (bsc#1174852).
- linux/dim: Rename externally used net_dim members (bsc#1174852).
- linux/dim: Rename net_dim_sample() to net_dim_update_sample() (bsc#1174852).
- liquidio: Fix wrong return value in cn23xx_get_pf_num() (git-fixes).
- llc: make sure applications use ARPHRD_ETHER (networking-stable-20_07_17).
- mac80211: mesh: Free ie data when leaving mesh (git-fixes).
- mac80211: mesh: Free pending skb when destroying a mpath (git-fixes).
- MAINTAINERS: add entry for Dynamic Interrupt Moderation (bsc#1174852).
- md-cluster: Fix potential error pointer dereference in resize_bitmaps() (git-fixes).
- md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 (git-fixes).
- media: budget-core: Improve exception handling in budget_register() (git-fixes).
- media: exynos4-is: Add missed check for pinctrl_lookup_state() (git-fixes).
- media: firewire: Using uninitialized values in node_probe() (git-fixes).
- media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities() (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- mfd: arizona: Ensure 32k clock is put on driver unbind and error (git-fixes).
- mfd: dln2: Run event handler loop under spinlock (git-fixes).
- mfd: rk808: Fix RK818 ID template (bsc#1175412).
- mld: fix memory leak in ipv6_mc_destroy_dev() (networking-stable-20_06_28).
- mm: filemap: clear idle flag for writes (bsc#1175769).
- mm/migrate.c: add missing flush_dcache_page for non-mapped page migrate (git fixes (mm/migrate)).
- mm/mmu_notifier: use hlist_add_head_rcu() (git fixes (mm/mmu_notifiers)).
- mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() (git fixes (mm/compaction)).
- mm/rmap.c: do not reuse anon_vma if we just want a copy (git fixes (mm/rmap)).
- mm/shmem.c: cast the type of unmap_start to u64 (git fixes (mm/shmem)).
- mm, thp: fix defrag setting if newline is not used (git fixes (mm/thp)).
- mm/vunmap: add cond_resched() in vunmap_pmd_range (bsc#1175654 ltc#184617).
- mtd: spi-nor: Fix an error code in spi_nor_read_raw() (bsc#1175413).
- mtd: spi-nor: fix kernel-doc for spi_nor::info (bsc#1175414).
- mtd: spi-nor: fix kernel-doc for spi_nor::reg_proto (bsc#1175415).
- mtd: spi-nor: fix silent truncation in spi_nor_read_raw() (bsc#1175416).
- mwifiex: Prevent memory corruption handling keys (git-fixes).
- net: Added pointer check for dst-&gt;ops-&gt;neigh_lookup in dst_neigh_lookup_skb (git-fixes).
- net: bridge: enfore alignment for ethernet address (networking-stable-20_06_28).
- net: core: reduce recursion limit value (networking-stable-20_06_28).
- net: Do not clear the sock TX queue in sk_set_socket() (networking-stable-20_06_28).
- net: dsa: b53: check for timeout (git-fixes).
- net: dsa: bcm_sf2: Fix node reference count (git-fixes).
- net: ena: Add first_interrupt field to napi struct (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: add support for reporting of packet drops (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool (bsc#1174852).
- net: ena: allow setting the hash function without changing the key (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function set fails (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when busy-polling (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz (bsc#1174852).
- net: ena: change num_queues to num_io_queues for clarity and consistency (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: Change WARN_ON expression in ena_del_napi_in_range() (bsc#1174852).
- net: ena: clean up indentation issue (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64 (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set() (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in comments (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in ena_com.h macros (bsc#1174852).
- net: ena: cosmetic: rename ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: enable support of rss hash key and function changes (bsc#1174852).
- net: ena: enable the interrupt_moderation in driver_supported_features (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue (bsc#1174852).
- net: ena: ethtool: get_channels: use combined only (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc (bsc#1174852).
- net: ena: ethtool: support set_channels callback (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function() (bsc#1174852).
- net: ena: fix incorrect setting of the number of msix vectors (bsc#1174852).
- net: ena: fix incorrect update of intr_delay_resolution (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors (bsc#1174852).
- net: ena: fix update of interrupt moderation register (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in ena_init_napi_in_range (bsc#1174852).
- net: ena: implement XDP drop support (bsc#1174852).
- net: ena: Implement XDP_TX action (bsc#1174852).
- net: ena: make ethtool -l show correct max number of queues (bsc#1174852).
- net: ena: Make missed_tx stat incremental (bsc#1083548).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: move llq configuration from ena_probe to ena_device_init() (bsc#1174852).
- net: ena: multiple queue creation related cleanups (bsc#1174852).
- net: ena: Prevent reset after device destruction (bsc#1083548).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: remove all old adaptive rx interrupt moderation code from ena_com (bsc#1174852).
- net: ena: remove code duplication in ena_com_update_nonadaptive_moderation_interval _*() (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: remove ena_restore_ethtool_params() and relevant fields (bsc#1174852).
- net: ena: remove old adaptive interrupt moderation code from ena_netdev (bsc#1174852).
- net: ena: remove redundant print of number of queues (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key' (bsc#1174852).
- net: ena: remove set but not used variable 'rx_ring' (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform (bsc#1174852).
- net: ena: Select DIMLIB for ENA_ETHERNET (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution() (bsc#1174852).
- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: switch to dim algorithm for rx adaptive interrupt moderation (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface (bsc#1174852).
- net: ena: xdp: update napi budget for DROP and ABORTED (bsc#1174852).
- net: ena: xdp: XDP_TX: fix memory leak (bsc#1174852).
- net: ethernet: aquantia: Fix wrong return value (git-fixes).
- net: ethernet: broadcom: have drivers select DIMLIB as needed (bsc#1174852).
- net: ethernet: stmmac: Disable hardware multicast filter (git-fixes).
- net: fec: correct the error path for regulator disable in probe (git-fixes).
- netfilter: x_tables: add counters allocation wrapper (git-fixes).
- netfilter: x_tables: cap allocations at 512 mbyte (git-fixes).
- netfilter: x_tables: limit allocation requests for blob rule heads (git-fixes).
- net: Fix a documentation bug wrt. ip_unprivileged_port_start (git-fixes). (SLES tuning guide refers to ip-sysctl.txt.)
- net: fix memleak in register_netdevice() (networking-stable-20_06_28).
- net: Fix the arp error in some cases (networking-stable-20_06_28).
- net: gre: recompute gre csum for sctp over gre tunnels (git-fixes).
- net: hns3: add autoneg and change speed support for fibre port (bsc#1174070).
- net: hns3: add support for FEC encoding control (bsc#1174070).
- net: hns3: add support for multiple media type (bsc#1174070).
- net: hns3: fix a not link up issue when fibre port supports autoneg (bsc#1174070).
- net: hns3: fix for FEC configuration (bsc#1174070).
- net: hns3: fix port capbility updating issue (bsc#1174070).
- net: hns3: fix port setting handle for fibre port (bsc#1174070).
- net: hns3: fix selftest fail issue for fibre port with autoneg on (bsc#1174070).
- net: hns3: restore the MAC autoneg state after reset (bsc#1174070).
- net: increment xmit_recursion level in dev_direct_xmit() (networking-stable-20_06_28).
- net: ip6_gre: Request headroom in __gre6_xmit() (git-fixes).
- net: lan78xx: add missing endpoint sanity check (git-fixes).
- net: lan78xx: fix transfer-buffer memory leak (git-fixes).
- net: make symbol 'flush_works' static (git-fixes).
- net/mlx5e: vxlan: Use RCU for vxlan table lookup (git-fixes).
- net: mvpp2: fix memory leak in mvpp2_rx (git-fixes).
- net: netsec: Fix signedness bug in netsec_probe() (bsc#1175417).
- net: netsec: initialize tx ring on ndo_open (bsc#1175418).
- net: phy: Check harder for errors in get_phy_id() (bsc#1111666).
- net: qcom/emac: add missed clk_disable_unprepare in error path of emac_clks_phase1_init (git-fixes).
- net: Set fput_needed iff FDPUT_FPUT is set (git-fixes).
- net: socionext: Fix a signedness bug in ave_probe() (bsc#1175419).
- net: socionext: replace napi_alloc_frag with the netdev variant on init (bsc#1175420).
- net: spider_net: Fix the size used in a 'dma_free_coherent()' call (git-fixes).
- net: stmmac: dwmac1000: provide multicast filter fallback (git-fixes).
- net: stmmac: Fix RX packet size &gt; 8191 (git-fixes).
- net: udp: Fix wrong clean up for IS_UDPLITE macro (git-fixes).
- net: update net_dim documentation after rename (bsc#1174852).
- net: usb: ax88179_178a: fix packet alignment padding (networking-stable-20_06_28).
- net: usb: qmi_wwan: add support for Quectel EG95 LTE modem (networking-stable-20_07_17).
- netvsc: unshare skb in VF rx handler (git-fixes).
- nfc: nci: add missed destroy_workqueue in nci_register_device (git-fixes).
- ntb: Fix an error in get link status (git-fixes).
- ntb_netdev: fix sleep time mismatch (git-fixes).
- ntb: ntb_transport: Use scnprintf() for avoiding potential buffer overflow (git-fixes).
- nvme: fix possible deadlock when I/O is blocked (git-fixes).
- nvme-multipath: do not fall back to __nvme_find_path() for non-optimized paths (bsc#1172108).
- nvme-multipath: fix logic for non-optimized paths (bsc#1172108).
- nvme-multipath: round-robin: eliminate 'fallback' variable (bsc#1172108).
- nvme: multipath: round-robin: fix single non-optimized path case (bsc#1172108).
- obsolete_kmp: provide newer version than the obsoleted one (boo#1170232).
- ocfs2: add trimfs dlm lock resource (bsc#1175228).
- ocfs2: add trimfs lock to avoid duplicated trims in cluster (bsc#1175228).
- ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
- ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
- ocfs2: change slot number type s16 to u16 (bsc#1175786).
- ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
- ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
- ocfs2: fix remounting needed after setfacl command (bsc#1173954).
- ocfs2: fix the application IO timeout when fstrim is running (bsc#1175228).
- ocfs2: fix value of OCFS2_INVALID_SLOT (bsc#1175767).
- ocfs2: load global_inode_alloc (bsc#1172963).
- ocfs2: load global_inode_alloc (bsc#1172963).
- omapfb: dss: Fix max fclk divider for omap36xx (bsc#1113956)
- openvswitch: Prevent kernel-infoleak in ovs_ct_put_key() (git-fixes).
- PCI/ASPM: Add missing newline in sysfs 'policy' (git-fixes).
- PCI: dwc: Move interrupt acking into the proper callback (bsc#1175666).
- PCI: Fix pci_cfg_wait queue locking problem (git-fixes).
- PCI: Fix 'try' semantics of bus and slot reset (git-fixes).
- PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context() (git-fixes).
- PCI: hv: Fix a timing issue which causes kdump to fail occasionally (bsc#1172871, bsc#1172872, git-fixes).
- PCI: Release IVRS table in AMD ACS quirk (git-fixes).
- PCI: switchtec: Add missing __iomem and __user tags to fix sparse warnings (git-fixes).
- PCI: switchtec: Add missing __iomem tag to fix sparse warnings (git-fixes).
- phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked (git-fixes).
- pinctrl: single: fix function name in documentation (git-fixes).
- pinctrl-single: fix pcs_parse_pinconf() return value (git-fixes).
- platform/x86: intel-hid: Fix return value check in check_acpi_dev() (git-fixes).
- platform/x86: intel-vbtn: Fix return value check in check_acpi_dev() (git-fixes).
- PM / CPU: replace raw_notifier with atomic_notifier (git fixes (kernel/pm)).
- PM / devfreq: rk3399_dmc: Add missing of_node_put() (bsc#1175668).
- PM / devfreq: rk3399_dmc: Disable devfreq-event device when fails.
- PM / devfreq: rk3399_dmc: Fix kernel oops when rockchip,pmu is absent (bsc#1175668).
- PM: sleep: core: Fix the handling of pending runtime resume requests (git-fixes).
- powerpc/64s: Do not init FSCR_DSCR in __init_FSCR() (bsc#1065729).
- powerpc/64s: Fix early_init_mmu section mismatch (bsc#1065729).
- powerpc: Allow 4224 bytes of stack expansion for the signal frame (bsc#1065729).
- powerpc/book3s64/pkeys: Use PVR check instead of cpu feature (bsc#1065729).
- powerpc/boot: Fix CONFIG_PPC_MPC52XX references (bsc#1065729).
- powerpc/eeh: Fix pseries_eeh_configure_bridge() (bsc#1174689).
- powerpc/nvdimm: Use HCALL error as the return value (bsc#1175284).
- powerpc/nvdimm: use H_SCM_QUERY hcall on H_OVERLAP error (bsc#1175284).
- powerpc/perf: Fix missing is_sier_aviable() during build (bsc#1065729).
- powerpc/pseries: Do not initiate shutdown when system is running on UPS (bsc#1175440 ltc#187574).
- powerpc/pseries/hotplug-cpu: Remove double free in error path (bsc#1065729).
- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death (bsc#1085030 ltC#165630).
- powerpc/pseries: PCIE PHB reset (bsc#1174689).
- powerpc/pseries: remove cede offline state for CPUs (bsc#1065729).
- powerpc/rtas: do not online CPUs for partition suspend (bsc#1065729).
- powerpc/vdso: Fix vdso cpu truncation (bsc#1065729).
- power: supply: check if calc_soc succeeded in pm860x_init_battery (git-fixes).
- propagate_one(): mnt_set_mountpoint() needs mount_lock (bsc#1174841).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- pwm: bcm-iproc: handle clk_get_rate() return (git-fixes).
- rds: Prevent kernel-infoleak in rds_notify_queue_get() (git-fixes).
- regulator: gpio: Honor regulator-boot-on property (git-fixes).
- Revert 'ALSA: hda: call runtime_allow() for all hda controllers' (bsc#1111666).
- Revert 'drm/amdgpu: Fix NULL dereference in dpm sysfs handlers' (bsc#1113956) 	* refresh for context changes
- Revert 'ocfs2: avoid inode removal while nfsd is accessing it' This reverts commit 9e096c72476eda333a9998ff464580c00ff59c83.
- Revert 'ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).' This reverts commit 0bf6e248f93736b3f17f399b4a8f64ffa30d371e.
- Revert 'ocfs2: load global_inode_alloc (bsc#1172963).' This reverts commit fc476497b53f967dc615b9cbad9427ba3107b5c4.
- Revert 'scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe' (bsc#1171688 bsc#1174003).
- Revert 'scsi: qla2xxx: Fix crash on qla2x00_mailbox_command' (bsc#1171688 bsc#1174003).
- Revert 'xen/balloon: Fix crash when ballooning on x86 32 bit PAE' (bsc#1065600).
- rocker: fix incorrect error handling in dma_rings_init (networking-stable-20_06_28).
- rpm/check-for-config-changes: Ignore CONFIG_CC_VERSION_TEXT
- rpm/check-for-config-changes: Ignore CONFIG_LD_VERSION
- rpm/constraints.in: Increase memory for kernel-docs References: https://build.opensuse.org/request/show/792664
- rpm: drop execute permissions on source files Sometimes a source file with execute permission appears in upstream repository and makes it into our kernel-source packages. This is caught by OBS build checks and may even result in build failures. Sanitize the source tree by removing execute permissions from all C source and header files.
- rpm/kabi.pl: account for namespace field being moved last Upstream is moving the namespace field in Module.symvers last in order to preserve backwards compatibility with kmod tools (depmod, etc). Fix the kabi.pl script to expect the namespace field last. Since split() ignores trailing empty fields and delimeters, switch to using tr to count how many fields/tabs are in a line. Also, in load_symvers(), pass LIMIT of -1 to split() so it does not strip trailing empty fields, as namespace is an optional field.
- rpm/kernel-binary.spec.in: do not run klp-symbols for configs with no modules Starting with 5.8-rc1, s390x/zfcpdump builds fail because rpm/klp-symbols script does not find .tmp_versions directory. This is missing because s390x/zfcpdump is built without modules (CONFIG_MODULES disabled). As livepatching cannot work without modules, the cleanest solution is setting %klp_symbols to 0 if CONFIG_MODULES is disabled. (We cannot simply add another condition to the place where %klp_symbols is set as it can be already set to 1 from prjconf.)
- rpm/kernel-binary.spec.in: restrict livepatch metapackage to default flavor It has been reported that the kernel-*-livepatch metapackage got erroneously enabled for SLE15-SP3's new -preempt flavor, leading to a unresolvable dependency to a non-existing kernel-livepatch-x.y.z-preempt package. As SLE12 and SLE12-SP1 have run out of livepatching support, the need to build said metapackage for the -xen flavor is gone and the only remaining flavor for which they're still wanted is -default. Restrict the build of the kernel-*-livepatch metapackage to the -default flavor.
- rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup Co-Authored-By: Adam Spiers &lt;aspiers@suse.com&gt;
- rpm/kernel-obs-build.spec.in: Enable overlayfs Overlayfs is needed for podman or docker builds when no more specific driver can be used (like lvm or btrfs). As the default build fs is ext4 currently, we need overlayfs kernel modules to be available.
- rpm/kernel-source.spec.in: Add obsolete_rebuilds (boo#1172073).
- rpm/mkspec-dtb: add mt76 based dtb package
- rpm/package-descriptions: garbege collection remove old ARM and Xen flavors.
- rtlwifi: rtl8192cu: Remove uninitialized_var() usage (git-fixes).
- rtnetlink: Fix memory(net_device) leak when -&gt;newlink fails (git-fixes).
- s390, dcssblk: kaddr and pfn can be NULL to -&gt;direct_access() (bsc#1174873).
- sched: consistently handle layer3 header accesses in the presence of VLANs (networking-stable-20_07_17).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1112178).
- scripts/git_sort/git_sort.py: add bluetooth/bluetooth-next.git repository
- scsi: lpfc: Add and rename a whole bunch of function parameter descriptions (bsc#1171558 bsc#1136666).
- scsi: lpfc: Add description for lpfc_release_rpi()'s 'ndlpl param (bsc#1171558 bsc#1136666).
- scsi: lpfc: Add missing misc_deregister() for lpfc_init() (bsc#1171558 bsc#1136666).
- scsi: lpfc: Ensure variable has the same stipulations as code using it (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix a bunch of kerneldoc misdemeanors (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix FCoE speed reporting (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix kerneldoc parameter formatting/misnaming/missing issues (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix LUN loss after cable pull (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix no message shown for lpfc_hdw_queue out of range value (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix oops when unloading driver while running mds diags (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix retry of PRLI when status indicates its unsupported (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix RSCN timeout due to incorrect gidft counter (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix some function parameter descriptions (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix typo in comment for ULP (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix-up around 120 documentation issues (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix-up formatting/docrot where appropriate (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix validation of bsg reply lengths (bsc#1171558 bsc#1136666).
- scsi: lpfc: NVMe remote port devloss_tmo from lldd (bsc#1171558 bsc#1136666 bsc#1173060).
- scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying targetport (bsc#1171558 bsc#1136666).
- scsi: lpfc: Provide description for lpfc_mem_alloc()'s 'align' param (bsc#1171558 bsc#1136666).
- scsi: lpfc: Quieten some printks (bsc#1171558 bsc#1136666).
- scsi: lpfc: Remove unused variable 'pg_addr' (bsc#1171558 bsc#1136666).
- scsi: lpfc: Update lpfc version to 12.8.0.3 (bsc#1171558 bsc#1136666).
- scsi: lpfc: Use __printf() format notation (bsc#1171558 bsc#1136666).
- scsi: dh: Add Fujitsu device to devinfo and dh lists (bsc#1174026).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value 1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in header files (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files (bsc#1171688 bsc#1174003). 
- scsi: qla2xxx: Fix failure message in qlt_disable_vha() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688 bsc#1174003).
- scsi: smartpqi: add bay identifier (bsc#1172418).
- scsi: smartpqi: add gigabyte controller (bsc#1172418).
- scsi: smartpqi: add id support for SmartRAID 3152-8i (bsc#1172418).
- scsi: smartpqi: add inquiry timeouts (bsc#1172418).
- scsi: smartpqi: add module param for exposure order (bsc#1172418).
- scsi: smartpqi: add module param to hide vsep (bsc#1172418).
- scsi: smartpqi: add new pci ids (bsc#1172418).
- scsi: smartpqi: add pci ids for fiberhome controller (bsc#1172418).
- scsi: smartpqi: add RAID bypass counter (bsc#1172418).
- scsi: smartpqi: add sysfs entries (bsc#1172418).
- scsi: smartpqi: Align driver syntax with oob (bsc#1172418).
- scsi: smartpqi: avoid crashing kernel for controller issues (bsc#1172418).
- scsi: smartpqi: bump version (bsc#1172418).
- scsi: smartpqi: bump version (bsc#1172418).
- scsi: smartpqi: bump version to 1.2.16-010 (bsc#1172418).
- scsi: smartpqi: change TMF timeout from 60 to 30 seconds (bsc#1172418).
- scsi: smartpqi: correct hang when deleting 32 lds (bsc#1172418).
- scsi: smartpqi: correct REGNEWD return status (bsc#1172418).
- scsi: smartpqi: correct syntax issue (bsc#1172418).
- scsi: smartpqi: fix call trace in device discovery (bsc#1172418).
- scsi: smartpqi: fix controller lockup observed during force reboot (bsc#1172418).
- scsi: smartpqi: fix LUN reset when fw bkgnd thread is hung (bsc#1172418).
- scsi: smartpqi: fix problem with unique ID for physical device (bsc#1172418).
- scsi: smartpqi: identify physical devices without issuing INQUIRY (bsc#1172418).
- scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask (bsc#1172418).
- scsi: smartpqi: remove unused manifest constants (bsc#1172418).
- scsi: smartpqi: Reporting unhandled SCSI errors (bsc#1172418).
- scsi: smartpqi: support device deletion via sysfs (bsc#1172418).
- scsi: smartpqi: update copyright (bsc#1172418).
- scsi: smartpqi: update logical volume size after expansion (bsc#1172418).
- scsi: smartpqi: Use scnprintf() for avoiding potential buffer overflow (bsc#1172418).
- scsi: storvsc: Correctly set number of hardware queues for IDE disk (git-fixes).
- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- sctp: Do not advertise IPv4 addresses if ipv6only is set on the socket (networking-stable-20_06_28).
- selftests/livepatch: fix mem leaks in test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: more verification in test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: simplify test-klp-callbacks busy target tests (bsc#1071995).
- serial: 8250: change lock order in serial8250_do_startup() (git-fixes).
- serial: pl011: Do not leak amba_ports entry on driver register error (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- Set VIRTIO_CONSOLE=y (bsc#1175667).
- sign also s390x kernel images (bsc#1163524)
- soc: fsl: qbman: allow registering a device link for the portal user (bsc#1174550).
- soc: fsl: qbman_portals: add APIs to retrieve the probing status (bsc#1174550).
- spi: davinci: Remove uninitialized_var() usage (git-fixes).
- spi: lantiq: fix: Rx overflow error in full duplex mode (git-fixes).
- spi: nxp-fspi: Ensure width is respected in spi-mem operations (bsc#1175421).
- spi: spi-fsl-dspi: Fix 16-bit word order in 32-bit XSPI mode (bsc#1175422).
- spi: spi-mem: export spi_mem_default_supports_op() (bsc#1175421).
- staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes).
- staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes).
- staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes).
- staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support (git-fixes).
- staging: fsl-dpaa2: ethsw: Add missing netdevice check (bsc#1175423).
- staging: rtl8192u: fix a dubious looking mask before a shift (git-fixes).
- staging/speakup: fix get_word non-space look-ahead (git-fixes).
- tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT (networking-stable-20_06_28).
- tcp: grow window for OOO packets only for SACK flows (networking-stable-20_06_28).
- tcp: make sure listeners do not initialize congestion-control state (networking-stable-20_07_17).
- tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key() (networking-stable-20_07_17).
- tcp: md5: do not send silly options in SYNCOOKIES (networking-stable-20_07_17).
- tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers (networking-stable-20_07_17).
- tracepoint: Mark __tracepoint_string's __used (git-fixes).
- tracing: Use trace_sched_process_free() instead of exit() for pid tracing (git-fixes).
- tty: hvc_console, fix crashes on parallel open/close (git-fixes).
- tty: serial: fsl_lpuart: add imx8qxp support (bsc#1175670).
- tty: serial: fsl_lpuart: free IDs allocated by IDA (bsc#1175670).
- USB: cdc-acm: rework notification_buffer resizing (git-fixes).
- USB: gadget: f_tcm: Fix some resource leaks in some error paths (git-fixes).
- USB: host: ohci-exynos: Fix error handling in exynos_ohci_probe() (git-fixes).
- USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge (git-fixes).
- USB: iowarrior: fix up report size handling for some devices (git-fixes).
- usbip: tools: fix module name in man page (git-fixes).
- USB: rename USB quirk to USB_QUIRK_ENDPOINT_IGNORE (git-fixes).
- USB: serial: cp210x: enable usb generic throttle/unthrottle (git-fixes).
- USB: serial: cp210x: re-enable auto-RTS on open (git-fixes).
- USB: serial: ftdi_sio: clean up receive processing (git-fixes).
- USB: serial: ftdi_sio: fix break and sysrq handling (git-fixes).
- USB: serial: ftdi_sio: make process-packet buffer unsigned (git-fixes).
- USB: serial: iuu_phoenix: fix led-activity helpers (git-fixes).
- USB: serial: qcserial: add EM7305 QDL product ID (git-fixes).
- USB: xhci: define IDs for various ASMedia host controllers (git-fixes).
- USB: xhci: Fix ASM2142/ASM3142 DMA addressing (git-fixes).
- USB: xhci: Fix ASMedia ASM1142 DMA addressing (git-fixes).
- USB: xhci-mtk: fix the failure of bandwidth allocation (git-fixes).
- VFS: Check rename_lock in lookup_fast() (bsc#1174734).
- video: fbdev: sm712fb: fix an issue about iounmap for a wrong address (git-fixes).
- video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call (git-fixes).
- virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial (git-fixes).
- vlan: consolidate VLAN parsing code and limit max parsing depth (networking-stable-20_07_17).
- vmxnet3: use correct tcp hdr length when packet is encapsulated (bsc#1175199).
- vt_compat_ioctl(): clean up, use compat_ptr() properly (git-fixes).
- vt: vt_ioctl: remove unnecessary console allocation checks (git-fixes).
- vxlan: Ensure FDB dump is performed under RCU (git-fixes).
- watchdog: f71808e_wdt: clear watchdog timeout occurred flag (bsc#1111666).
- watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options (bsc#1111666).
- watchdog: f71808e_wdt: remove use of wrong watchdog_info option (bsc#1111666).
- wl1251: fix always return 0 error (git-fixes).
- x86/hyperv: Create and use Hyper-V page definitions (git-fixes).
- x86/hyper-v: Fix overflow bug in fill_gva_list() (git-fixes).
- x86/hyperv: Make hv_vcpu_is_preempted() visible (git-fixes).
- x86/mce/inject: Fix a wrong assignment of i_mce.status (bsc#1112178).
- x86/unwind/orc: Fix ORC for newly forked tasks (bsc#1058115).
- xen/balloon: fix accounting in alloc_xenballooned_pages error path (bsc#1065600).
- xen/balloon: make the balloon wait interruptible (bsc#1065600).
- xfrm: check id proto in validate_tmpl() (git-fixes).
- xfrm: clean up xfrm protocol checks (git-fixes).
- xfrm_user: uncoditionally validate esn replay attribute struct (git-fixes).
- xfs: fix inode allocation block res calculation precedence (git-fixes).
- xfs: fix reflink quota reservation accounting error (git-fixes).
- xhci: Fix enumeration issue when setting max packet size for FS devices (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-09"/>
	<updated date="2020-09-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083548">SUSE bug 1083548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120163">SUSE bug 1120163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136666">SUSE bug 1136666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152148">SUSE bug 1152148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163524">SUSE bug 1163524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165629">SUSE bug 1165629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166965">SUSE bug 1166965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169790">SUSE bug 1169790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170232">SUSE bug 1170232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171688">SUSE bug 1171688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171988">SUSE bug 1171988</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172108">SUSE bug 1172108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172247">SUSE bug 1172247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172418">SUSE bug 1172418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172428">SUSE bug 1172428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172871">SUSE bug 1172871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172872">SUSE bug 1172872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172873">SUSE bug 1172873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172963">SUSE bug 1172963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173060">SUSE bug 1173060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173485">SUSE bug 1173485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173798">SUSE bug 1173798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173954">SUSE bug 1173954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174003">SUSE bug 1174003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174026">SUSE bug 1174026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174070">SUSE bug 1174070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174205">SUSE bug 1174205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174387">SUSE bug 1174387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174484">SUSE bug 1174484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174547">SUSE bug 1174547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174549">SUSE bug 1174549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174550">SUSE bug 1174550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174625">SUSE bug 1174625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174658">SUSE bug 1174658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174685">SUSE bug 1174685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174689">SUSE bug 1174689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174699">SUSE bug 1174699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174734">SUSE bug 1174734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174757">SUSE bug 1174757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174771">SUSE bug 1174771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174840">SUSE bug 1174840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174841">SUSE bug 1174841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174843">SUSE bug 1174843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174844">SUSE bug 1174844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174845">SUSE bug 1174845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174852">SUSE bug 1174852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174873">SUSE bug 1174873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174904">SUSE bug 1174904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174926">SUSE bug 1174926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174968">SUSE bug 1174968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175062">SUSE bug 1175062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175063">SUSE bug 1175063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175064">SUSE bug 1175064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175065">SUSE bug 1175065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175066">SUSE bug 1175066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175067">SUSE bug 1175067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175112">SUSE bug 1175112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175127">SUSE bug 1175127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175128">SUSE bug 1175128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175149">SUSE bug 1175149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175199">SUSE bug 1175199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175213">SUSE bug 1175213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175228">SUSE bug 1175228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175232">SUSE bug 1175232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175284">SUSE bug 1175284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175393">SUSE bug 1175393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175394">SUSE bug 1175394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175396">SUSE bug 1175396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175397">SUSE bug 1175397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175398">SUSE bug 1175398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175399">SUSE bug 1175399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175400">SUSE bug 1175400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175401">SUSE bug 1175401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175402">SUSE bug 1175402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175403">SUSE bug 1175403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175404">SUSE bug 1175404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175405">SUSE bug 1175405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175406">SUSE bug 1175406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175407">SUSE bug 1175407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175408">SUSE bug 1175408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175409">SUSE bug 1175409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175410">SUSE bug 1175410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175411">SUSE bug 1175411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175412">SUSE bug 1175412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175413">SUSE bug 1175413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175414">SUSE bug 1175414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175415">SUSE bug 1175415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175416">SUSE bug 1175416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175417">SUSE bug 1175417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175418">SUSE bug 1175418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175419">SUSE bug 1175419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175420">SUSE bug 1175420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175421">SUSE bug 1175421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175422">SUSE bug 1175422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175423">SUSE bug 1175423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175440">SUSE bug 1175440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175493">SUSE bug 1175493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175515">SUSE bug 1175515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175518">SUSE bug 1175518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175526">SUSE bug 1175526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175550">SUSE bug 1175550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175654">SUSE bug 1175654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175666">SUSE bug 1175666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175667">SUSE bug 1175667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175668">SUSE bug 1175668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175669">SUSE bug 1175669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175670">SUSE bug 1175670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175691">SUSE bug 1175691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175767">SUSE bug 1175767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175768">SUSE bug 1175768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175769">SUSE bug 1175769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175770">SUSE bug 1175770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175771">SUSE bug 1175771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175772">SUSE bug 1175772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175786">SUSE bug 1175786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175873">SUSE bug 1175873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176069">SUSE bug 1176069</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-10135/">CVE-2020-10135</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14314/">CVE-2020-14314</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14356/">CVE-2020-14356</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14386/">CVE-2020-14386</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16166/">CVE-2020-16166</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24394/">CVE-2020-24394</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496315" comment="kernel-docs-4.12.14-197.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496316" comment="kernel-obs-build-4.12.14-197.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496317" comment="kernel-source-4.12.14-197.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496318" comment="kernel-syms-4.12.14-197.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138230" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174154" ref_url="https://bugzilla.suse.com/1174154" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15719" ref_url="https://www.suse.com/security/cve/CVE-2020-15719/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2581-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007391.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-09"/>
	<updated date="2020-09-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1174154">SUSE bug 1174154</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15719/">CVE-2020-15719</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496319" comment="openldap2-devel-32bit-2.4.46-9.34.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138231" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1149332" ref_url="https://bugzilla.suse.com/1149332" source="BUGZILLA"/>
		<reference ref_id="1151582" ref_url="https://bugzilla.suse.com/1151582" source="BUGZILLA"/>
		<reference ref_id="1157292" ref_url="https://bugzilla.suse.com/1157292" source="BUGZILLA"/>
		<reference ref_id="1157893" ref_url="https://bugzilla.suse.com/1157893" source="BUGZILLA"/>
		<reference ref_id="1158996" ref_url="https://bugzilla.suse.com/1158996" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19126" ref_url="https://www.suse.com/security/cve/CVE-2019-19126/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0262-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006413.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

Security issue fixed:

- CVE-2019-19126: Fixed to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition (bsc#1157292).

Bug fixes:

- Fixed z15 (s390x) strstr implementation that can return incorrect results if search string cross page boundary (bsc#1157893).
- Fixed Hardware support in toolchain (bsc#1151582).
- Fixed syscalls during early process initialization (SLE-8348).
- Fixed an array overflow in backtrace for PowerPC (bsc#1158996).
- Moved to posix_spawn on popen (bsc#1149332).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-30"/>
	<updated date="2020-01-30"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1149332">SUSE bug 1149332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151582">SUSE bug 1151582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157292">SUSE bug 1157292</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157893">SUSE bug 1157893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158996">SUSE bug 1158996</bugzilla>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19126/">CVE-2019-19126</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496165" comment="glibc-devel-32bit-2.26-13.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496166" comment="glibc-devel-static-2.26-13.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496167" comment="glibc-utils-2.26-13.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138232" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175568" ref_url="https://bugzilla.suse.com/1175568" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8027" ref_url="https://www.suse.com/security/cve/CVE-2020-8027/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007454.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- CVE-2020-8027: openldap_update_modules_path.sh starts daemons unconditionally and uses fixed paths in /tmp (bsc#1175568).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-22"/>
	<updated date="2020-09-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175568">SUSE bug 1175568</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8027/">CVE-2020-8027</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496320" comment="openldap2-devel-32bit-2.4.46-9.37.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138233" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159861" ref_url="https://bugzilla.suse.com/1159861" source="BUGZILLA"/>
		<reference ref_id="1160369" ref_url="https://bugzilla.suse.com/1160369" source="BUGZILLA"/>
		<reference ref_id="1161194" ref_url="https://bugzilla.suse.com/1161194" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19948" ref_url="https://www.suse.com/security/cve/CVE-2019-19948/" source="CVE"/>
		<reference ref_id="CVE-2019-19949" ref_url="https://www.suse.com/security/cve/CVE-2019-19949/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006417.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

Security issue fixed:

- CVE-2019-19948: Fixed a heap-based buffer overflow in WriteSGIImage() (bsc#1159861).
- CVE-2019-19949: Fixed a heap-based buffer over-read in WritePNGImage() (bsc#1160369).

Non-security issue fixed:

- Fixed an issue where converting tiff to png would lead to unviewable files (bsc#1161194).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-30"/>
	<updated date="2020-01-30"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1159861">SUSE bug 1159861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160369">SUSE bug 1160369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161194">SUSE bug 1161194</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19948/">CVE-2019-19948</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-19949/">CVE-2019-19949</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496168" comment="perl-PerlMagick-7.0.7.34-3.79.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138234" version="1" class="patch">
	<metadata>
		<title>Security update for go1.14 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1164903" ref_url="https://bugzilla.suse.com/1164903" source="BUGZILLA"/>
		<reference ref_id="1176031" ref_url="https://bugzilla.suse.com/1176031" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24553" ref_url="https://www.suse.com/security/cve/CVE-2020-24553/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2761-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007488.html" source="SUSE-SU"/>
		<description>
This update for go1.14 fixes the following issues:

- go1.14.9 (released 2020-09-09) includes fixes to the compiler,
  linker, runtime, documentation, and the net/http and testing
  packages.
  Refs bsc#1164903 go1.14 release tracking
  * go#41192 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41016 net/http: Transport.CancelRequest no longer cancels in-flight request
  * go#40973 net/http: RoundTrip unexpectedly changes Request
  * go#40968 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40938 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40848 testing: '=== PAUSE' lines do not change the test name for the next log line
  * go#40797 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40766 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40501 cmd/compile: for range loop reading past slice end
  * go#40411 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
  * go#40398 runtime: fatal error: checkdead: runnable g
  * go#40192 runtime: pageAlloc.searchAddr may point to unmapped memory in discontiguous heaps, violating its invariant
  * go#39955 cmd/link: incorrect GC bitmap when global's type is in another shared object
  * go#39690 cmd/compile: s390x floating point &lt;-&gt; integer conversions clobbering the condition code
  * go#39279 net/http: Re-connect with upgraded HTTP2 connection fails to send Request.body
  * go#38904 doc: include fix for #34437 in Go 1.14 release notes

- go1.14.8 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs bsc#1164903 go1.14 release tracking
  * bsc#1176031 CVE-2020-24553
  * go#41164 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-28"/>
	<updated date="2020-09-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1164903">SUSE bug 1164903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176031">SUSE bug 1176031</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24553/">CVE-2020-24553</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496321" comment="go1.14-1.14.9-1.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496322" comment="go1.14-doc-1.14.9-1.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138235" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1170826" ref_url="https://bugzilla.suse.com/1170826" source="BUGZILLA"/>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1176031" ref_url="https://bugzilla.suse.com/1176031" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24553" ref_url="https://www.suse.com/security/cve/CVE-2020-24553/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2776-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007495.html" source="SUSE-SU"/>
		<description>

  
go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.

go1.15.x minor releases will be provided through August 2021.

  https://github.com/golang/go/wiki/Go-Release-Cycle

Most changes are in the implementation of the toolchain, runtime,
and libraries. As always, the release maintains the Go 1 promise
of compatibility. We expect almost all Go programs to continue to
compile and run as before.

* See release notes https://golang.org/doc/go1.15. Excerpts
  relevant to OBS environment and for SUSE/openSUSE follow:
* Module support in the go command is ready for production use,
  and we encourage all users to migrate to Go modules for
  dependency management.
* Module cache: The location of the module cache may now be set
  with the GOMODCACHE environment variable. The default value of
  GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
  cache before this change.
* Compiler flag parsing: Various flag parsing issues in go test
  and go vet have been fixed. Notably, flags specified in
  GOFLAGS are handled more consistently, and the -outputdir flag
  now interprets relative paths relative to the working
  directory of the go command (rather than the working directory
  of each individual test).
* The GOPROXY environment variable now supports skipping proxies
  that return errors. Proxy URLs may now be separated with
  either commas (,) or pipe characters (|). If a proxy URL is
  followed by a comma, the go command will only try the next
  proxy in the list after a 404 or 410 HTTP response. If a proxy
  URL is followed by a pipe character, the go command will try
  the next proxy in the list after any error. Note that the
  default value of GOPROXY remains
  https://proxy.golang.org,direct, which does not fall back to
  direct in case of errors.
* On a Unix system, if the kill command or kill system call is
  used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
  program, and if the signal is not being handled via
  os/signal.Notify, the Go program will now reliably crash with
  a stack trace. In earlier releases the behavior was
  unpredictable.
* Allocation of small objects now performs much better at high
  core counts, and has lower worst-case latency.
* Go 1.15 reduces typical binary sizes by around 5% compared to
  Go 1.14 by eliminating certain types of GC metadata and more
  aggressively eliminating unused type metadata.
* The toolchain now mitigates Intel CPU erratum SKX102 on
  GOARCH=amd64 by aligning functions to 32 byte boundaries and
  padding jump instructions. While this padding increases binary
  sizes, this is more than made up for by the binary size
  improvements mentioned above.
* Go 1.15 adds a -spectre flag to both the compiler and the
  assembler, to allow enabling Spectre mitigations. These should
  almost never be needed and are provided mainly as a 'defense
  in depth' mechanism. See the Spectre Go wiki page for details.
* The compiler now rejects //go: compiler directives that have
  no meaning for the declaration they are applied to with a
  'misplaced compiler directive' error. Such misapplied
  directives were broken before, but were silently ignored by
  the compiler.
* Substantial improvements to the Go linker, which reduce linker
  resource usage (both time and memory) and improve code
  robustness/maintainability. Linking is 20% faster and requires
  30% less memory on average. These changes are part of a
  multi-release project to modernize the Go linker, meaning that
  there will be additional linker improvements expected in
  future releases.
* The linker now defaults to internal linking mode for
  -buildmode=pie on linux/amd64 and linux/arm64, so these
  configurations no longer require a C linker.
* There has been progress in improving the stability and
  performance of the 64-bit RISC-V port on Linux (GOOS=linux,
  GOARCH=riscv64). It also now supports asynchronous preemption.
* crypto/x509: The deprecated, legacy behavior of treating the
  CommonName field on X.509 certificates as a host name when no
  Subject Alternative Names are present is now disabled by
  default. It can be temporarily re-enabled by adding the value
  x509ignoreCN=0 to the GODEBUG environment variable. Note that
  if the CommonName is an invalid host name, it's always
  ignored, regardless of GODEBUG settings. Invalid names include
  those with any characters other than letters, digits, hyphens
  and underscores, and those with empty labels or trailing dots.
* crypto/x509: go1.15 applications with an AWS DB instance that
  was created or updated to the rds-ca-2019 certificate prior to
  July 28, 2020, you must update the certificate again. If you
  created your DB instance or updated its certificate after July
  28, 2020, no action is required. For more information, see
  go#39568


This update ships go1.15.2 (released 2020-09-09) includes fixes to the compiler,
runtime, documentation, the go command, and the net/mail, os, sync, and testing packages.

* go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
* go#41178 doc: include fix for #34437 in Go 1.14 release notes
* go#41034 testing: Cleanup races with Logf and Errorf
* go#41011 sync: sync.Map keys will never be garbage collected
* go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
* go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
* go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
* go#40849 testing: '=== PAUSE' lines do not change the test name for the next log line
* go#40845 runtime: Panic if newstack at runtime.acquireLockRank
* go#40805 cmd/test2json: tests that panic are marked as passing
* go#40804 net/mail: change in behavior of ParseAddressList('') in 1.15
* go#40802 cmd/go: in 1.15: change in 'go test' argument parsing
* go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
* go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
* go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
* go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
* go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment

go1.15.1 (released 2020-09-01) includes security fixes to the net/http/cgi and net/http/fcgi packages.

* bsc#1176031 CVE-2020-24553: go net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified
* go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified
  		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-29"/>
	<updated date="2020-09-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1170826">SUSE bug 1170826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176031">SUSE bug 1176031</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24553/">CVE-2020-24553</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496323" comment="go1.15-1.15.2-1.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496324" comment="go1.15-doc-1.15.2-1.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138236" version="1" class="patch">
	<metadata>
		<title>Security update for libproxy (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176410" ref_url="https://bugzilla.suse.com/1176410" source="BUGZILLA"/>
		<reference ref_id="1177143" ref_url="https://bugzilla.suse.com/1177143" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25219" ref_url="https://www.suse.com/security/cve/CVE-2020-25219/" source="CVE"/>
		<reference ref_id="CVE-2020-26154" ref_url="https://www.suse.com/security/cve/CVE-2020-26154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2901-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007540.html" source="SUSE-SU"/>
		<description>
This update for libproxy fixes the following issues:

- CVE-2020-25219: Rewrote url::recvline to be nonrecursive (bsc#1176410).
- CVE-2020-26154: Fixed a buffer overflow when PAC is enabled (bsc#1177143).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-13"/>
	<updated date="2020-10-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176410">SUSE bug 1176410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177143">SUSE bug 1177143</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25219/">CVE-2020-25219</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26154/">CVE-2020-26154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496325" comment="perl-Net-Libproxy-0.4.15-4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138237" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1094244" ref_url="https://bugzilla.suse.com/1094244" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1154366" ref_url="https://bugzilla.suse.com/1154366" source="BUGZILLA"/>
		<reference ref_id="1167527" ref_url="https://bugzilla.suse.com/1167527" source="BUGZILLA"/>
		<reference ref_id="1168468" ref_url="https://bugzilla.suse.com/1168468" source="BUGZILLA"/>
		<reference ref_id="1169972" ref_url="https://bugzilla.suse.com/1169972" source="BUGZILLA"/>
		<reference ref_id="1171675" ref_url="https://bugzilla.suse.com/1171675" source="BUGZILLA"/>
		<reference ref_id="1171688" ref_url="https://bugzilla.suse.com/1171688" source="BUGZILLA"/>
		<reference ref_id="1171742" ref_url="https://bugzilla.suse.com/1171742" source="BUGZILLA"/>
		<reference ref_id="1173115" ref_url="https://bugzilla.suse.com/1173115" source="BUGZILLA"/>
		<reference ref_id="1174899" ref_url="https://bugzilla.suse.com/1174899" source="BUGZILLA"/>
		<reference ref_id="1175228" ref_url="https://bugzilla.suse.com/1175228" source="BUGZILLA"/>
		<reference ref_id="1175749" ref_url="https://bugzilla.suse.com/1175749" source="BUGZILLA"/>
		<reference ref_id="1175882" ref_url="https://bugzilla.suse.com/1175882" source="BUGZILLA"/>
		<reference ref_id="1176011" ref_url="https://bugzilla.suse.com/1176011" source="BUGZILLA"/>
		<reference ref_id="1176022" ref_url="https://bugzilla.suse.com/1176022" source="BUGZILLA"/>
		<reference ref_id="1176038" ref_url="https://bugzilla.suse.com/1176038" source="BUGZILLA"/>
		<reference ref_id="1176235" ref_url="https://bugzilla.suse.com/1176235" source="BUGZILLA"/>
		<reference ref_id="1176242" ref_url="https://bugzilla.suse.com/1176242" source="BUGZILLA"/>
		<reference ref_id="1176278" ref_url="https://bugzilla.suse.com/1176278" source="BUGZILLA"/>
		<reference ref_id="1176316" ref_url="https://bugzilla.suse.com/1176316" source="BUGZILLA"/>
		<reference ref_id="1176317" ref_url="https://bugzilla.suse.com/1176317" source="BUGZILLA"/>
		<reference ref_id="1176318" ref_url="https://bugzilla.suse.com/1176318" source="BUGZILLA"/>
		<reference ref_id="1176319" ref_url="https://bugzilla.suse.com/1176319" source="BUGZILLA"/>
		<reference ref_id="1176320" ref_url="https://bugzilla.suse.com/1176320" source="BUGZILLA"/>
		<reference ref_id="1176321" ref_url="https://bugzilla.suse.com/1176321" source="BUGZILLA"/>
		<reference ref_id="1176381" ref_url="https://bugzilla.suse.com/1176381" source="BUGZILLA"/>
		<reference ref_id="1176395" ref_url="https://bugzilla.suse.com/1176395" source="BUGZILLA"/>
		<reference ref_id="1176410" ref_url="https://bugzilla.suse.com/1176410" source="BUGZILLA"/>
		<reference ref_id="1176423" ref_url="https://bugzilla.suse.com/1176423" source="BUGZILLA"/>
		<reference ref_id="1176482" ref_url="https://bugzilla.suse.com/1176482" source="BUGZILLA"/>
		<reference ref_id="1176507" ref_url="https://bugzilla.suse.com/1176507" source="BUGZILLA"/>
		<reference ref_id="1176536" ref_url="https://bugzilla.suse.com/1176536" source="BUGZILLA"/>
		<reference ref_id="1176544" ref_url="https://bugzilla.suse.com/1176544" source="BUGZILLA"/>
		<reference ref_id="1176545" ref_url="https://bugzilla.suse.com/1176545" source="BUGZILLA"/>
		<reference ref_id="1176546" ref_url="https://bugzilla.suse.com/1176546" source="BUGZILLA"/>
		<reference ref_id="1176548" ref_url="https://bugzilla.suse.com/1176548" source="BUGZILLA"/>
		<reference ref_id="1176659" ref_url="https://bugzilla.suse.com/1176659" source="BUGZILLA"/>
		<reference ref_id="1176698" ref_url="https://bugzilla.suse.com/1176698" source="BUGZILLA"/>
		<reference ref_id="1176699" ref_url="https://bugzilla.suse.com/1176699" source="BUGZILLA"/>
		<reference ref_id="1176700" ref_url="https://bugzilla.suse.com/1176700" source="BUGZILLA"/>
		<reference ref_id="1176721" ref_url="https://bugzilla.suse.com/1176721" source="BUGZILLA"/>
		<reference ref_id="1176722" ref_url="https://bugzilla.suse.com/1176722" source="BUGZILLA"/>
		<reference ref_id="1176725" ref_url="https://bugzilla.suse.com/1176725" source="BUGZILLA"/>
		<reference ref_id="1176732" ref_url="https://bugzilla.suse.com/1176732" source="BUGZILLA"/>
		<reference ref_id="1176788" ref_url="https://bugzilla.suse.com/1176788" source="BUGZILLA"/>
		<reference ref_id="1176789" ref_url="https://bugzilla.suse.com/1176789" source="BUGZILLA"/>
		<reference ref_id="1176869" ref_url="https://bugzilla.suse.com/1176869" source="BUGZILLA"/>
		<reference ref_id="1176877" ref_url="https://bugzilla.suse.com/1176877" source="BUGZILLA"/>
		<reference ref_id="1176935" ref_url="https://bugzilla.suse.com/1176935" source="BUGZILLA"/>
		<reference ref_id="1176950" ref_url="https://bugzilla.suse.com/1176950" source="BUGZILLA"/>
		<reference ref_id="1176962" ref_url="https://bugzilla.suse.com/1176962" source="BUGZILLA"/>
		<reference ref_id="1176966" ref_url="https://bugzilla.suse.com/1176966" source="BUGZILLA"/>
		<reference ref_id="1176990" ref_url="https://bugzilla.suse.com/1176990" source="BUGZILLA"/>
		<reference ref_id="1177027" ref_url="https://bugzilla.suse.com/1177027" source="BUGZILLA"/>
		<reference ref_id="1177030" ref_url="https://bugzilla.suse.com/1177030" source="BUGZILLA"/>
		<reference ref_id="1177041" ref_url="https://bugzilla.suse.com/1177041" source="BUGZILLA"/>
		<reference ref_id="1177042" ref_url="https://bugzilla.suse.com/1177042" source="BUGZILLA"/>
		<reference ref_id="1177043" ref_url="https://bugzilla.suse.com/1177043" source="BUGZILLA"/>
		<reference ref_id="1177044" ref_url="https://bugzilla.suse.com/1177044" source="BUGZILLA"/>
		<reference ref_id="1177121" ref_url="https://bugzilla.suse.com/1177121" source="BUGZILLA"/>
		<reference ref_id="1177206" ref_url="https://bugzilla.suse.com/1177206" source="BUGZILLA"/>
		<reference ref_id="1177258" ref_url="https://bugzilla.suse.com/1177258" source="BUGZILLA"/>
		<reference ref_id="1177291" ref_url="https://bugzilla.suse.com/1177291" source="BUGZILLA"/>
		<reference ref_id="1177293" ref_url="https://bugzilla.suse.com/1177293" source="BUGZILLA"/>
		<reference ref_id="1177294" ref_url="https://bugzilla.suse.com/1177294" source="BUGZILLA"/>
		<reference ref_id="1177295" ref_url="https://bugzilla.suse.com/1177295" source="BUGZILLA"/>
		<reference ref_id="1177296" ref_url="https://bugzilla.suse.com/1177296" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0404" ref_url="https://www.suse.com/security/cve/CVE-2020-0404/" source="CVE"/>
		<reference ref_id="CVE-2020-0427" ref_url="https://www.suse.com/security/cve/CVE-2020-0427/" source="CVE"/>
		<reference ref_id="CVE-2020-0431" ref_url="https://www.suse.com/security/cve/CVE-2020-0431/" source="CVE"/>
		<reference ref_id="CVE-2020-0432" ref_url="https://www.suse.com/security/cve/CVE-2020-0432/" source="CVE"/>
		<reference ref_id="CVE-2020-14381" ref_url="https://www.suse.com/security/cve/CVE-2020-14381/" source="CVE"/>
		<reference ref_id="CVE-2020-14390" ref_url="https://www.suse.com/security/cve/CVE-2020-14390/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="CVE-2020-25284" ref_url="https://www.suse.com/security/cve/CVE-2020-25284/" source="CVE"/>
		<reference ref_id="CVE-2020-25641" ref_url="https://www.suse.com/security/cve/CVE-2020-25641/" source="CVE"/>
		<reference ref_id="CVE-2020-25643" ref_url="https://www.suse.com/security/cve/CVE-2020-25643/" source="CVE"/>
		<reference ref_id="CVE-2020-26088" ref_url="https://www.suse.com/security/cve/CVE-2020-26088/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007545.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-26088: Fixed an improper CAP_NET_RAW check in NFC socket creation could have been used by local attackers to create raw sockets, bypassing security mechanisms (bsc#1176990).
- CVE-2020-14390: Fixed an out-of-bounds memory write leading to memory corruption or a denial of service when changing screen size (bnc#1176235).
- CVE-2020-0432: Fixed an out of bounds write due to an integer overflow (bsc#1176721).
- CVE-2020-0427: Fixed an out of bounds read due to a use after free (bsc#1176725).
- CVE-2020-0431: Fixed an out of bounds write due to a missing bounds check (bsc#1176722).
- CVE-2020-0404: Fixed a linked list corruption due to an unusual root cause (bsc#1176423).
- CVE-2020-25212: Fixed getxattr kernel panic and memory overflow (bsc#1176381).
- CVE-2020-25284: Fixed an incomplete permission checking for access to rbd devices, which could have been leveraged by local attackers to map or unmap rbd block devices (bsc#1176482).
- CVE-2020-14381: Fixed requeue paths such that filp was valid when dropping the references (bsc#1176011).
- CVE-2019-25643: Fixed an improper input validation in ppp_cp_parse_cr function which could have led to memory corruption and read overflow (bsc#1177206).
- CVE-2020-25641: Fixed ann issue where length bvec was causing softlockups (bsc#1177121).

The following non-security bugs were fixed:

- 9p: Fix memory leak in v9fs_mount (git-fixes).
- ACPI: EC: Reference count query handlers under lock (git-fixes).
- airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE (git-fixes).
- airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE (git-fixes).
- airo: Fix read overflows sending packets (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- ALSA: firewire-digi00x: exclude Avid Adrenaline from detection (git-fixes).
- ALSA; firewire-tascam: exclude Tascam FE-8 from detection (git-fixes).
- ALSA: hda: Fix 2 channel swapping for Tegra (git-fixes).
- ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion NT950XCJ-X716A (git-fixes).
- ALSA: hda/realtek - Improved routing for Thinkpad X1 7th/8th Gen (git-fixes).
- altera-stapl: altera_get_note: prevent write beyond end of 'key' (git-fixes).
- ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter (git-fixes).
- arm64: KVM: Do not generate UNDEF when LORegion feature is present (jsc#SLE-4084).
- arm64: KVM: regmap: Fix unexpected switch fall-through (jsc#SLE-4084).
- asm-generic: fix -Wtype-limits compiler warnings (bsc#1112178).
- ASoC: kirkwood: fix IRQ error handling (git-fixes).
- ASoC: tegra: Fix reference count leaks (git-fixes).
- ath10k: fix array out-of-bounds access (git-fixes).
- ath10k: fix memory leak for tpc_stats_final (git-fixes).
- ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read (git-fixes).
- batman-adv: Add missing include for in_interrupt() (git-fixes).
- batman-adv: Avoid uninitialized chaddr when handling DHCP (git-fixes).
- batman-adv: bla: fix type misuse for backbone_gw hash indexing (git-fixes).
- batman-adv: bla: use netif_rx_ni when not in interrupt context (git-fixes).
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh (git-fixes).
- batman-adv: mcast/TT: fix wrongly dropped or rerouted packets (git-fixes).
- bcache: Convert pr_&lt;level&gt; uses to a more typical style (git fixes (block drivers)).
- bcache: fix overflow in offset_to_stripe() (git fixes (block drivers)).
- bcm63xx_enet: correct clock usage (git-fixes).
- bcm63xx_enet: do not write to random DMA channel on BCM6345 (git-fixes).
- bitfield.h: do not compile-time validate _val in FIELD_FIT (git fixes (bitfield)).
- blktrace: fix debugfs use after free (git fixes (block drivers)).
- block: add docs for gendisk / request_queue refcount helpers (git fixes (block drivers)).
- block: revert back to synchronous request_queue removal (git fixes (block drivers)).
- block: Use non _rcu version of list functions for tag_set_list (git-fixes).
- Bluetooth: Fix refcount use-after-free issue (git-fixes).
- Bluetooth: guard against controllers sending zero'd events (git-fixes).
- Bluetooth: Handle Inquiry Cancel error after Inquiry Complete (git-fixes).
- Bluetooth: L2CAP: handle l2cap config request during open state (git-fixes).
- Bluetooth: prefetch channel before killing sock (git-fixes).
- bnxt_en: Fix completion ring sizing with TPA enabled (networking-stable-20_07_29).
- bonding: use nla_get_u64 to extract the value for IFLA_BOND_AD_ACTOR_SYSTEM (git-fixes).
- btrfs: require only sector size alignment for parent eb bytenr (bsc#1176789).
- btrfs: tree-checker: fix the error message for transid error (bsc#1176788).
- ceph: do not allow setlease on cephfs (bsc#1177041).
- ceph: fix potential mdsc use-after-free crash (bsc#1177042).
- ceph: fix use-after-free for fsc-&gt;mdsc (bsc#1177043).
- ceph: handle zero-length feature mask in session messages (bsc#1177044).
- cfg80211: regulatory: reject invalid hints (bsc#1176699).
- cifs: Fix leak when handling lease break for cached root fid (bsc#1176242).
- cifs/smb3: Fix data inconsistent when punch hole (bsc#1176544).
- cifs/smb3: Fix data inconsistent when zero file range (bsc#1176536).
- clk: Add (devm_)clk_get_optional() functions (git-fixes).
- clk: rockchip: Fix initialization of mux_pll_src_4plls_p (git-fixes).
- clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED (git-fixes).
- clk/ti/adpll: allocate room for terminating null (git-fixes).
- clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() (git-fixes).
- cpufreq: intel_pstate: Fix EPP setting via sysfs in active mode (bsc#1176966).
- dmaengine: at_hdmac: check return value of of_find_device_by_node() in at_dma_xlate() (git-fixes).
- dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling (git-fixes).
- dmaengine: pl330: Fix burst length if burst size is smaller than bus width (git-fixes).
- dmaengine: tegra-apb: Prevent race conditions on channel's freeing (git-fixes).
- dmaengine: zynqmp_dma: fix burst length configuration (git-fixes).
- dm crypt: avoid truncating the logical block size (git fixes (block drivers)).
- dm: fix redundant IO accounting for bios that need splitting (git fixes (block drivers)).
- dm integrity: fix a deadlock due to offloading to an incorrect workqueue (git fixes (block drivers)).
- dm integrity: fix integrity recalculation that is improperly skipped (git fixes (block drivers)).
- dm: report suspended device during destroy (git fixes (block drivers)).
- dm rq: do not call blk_mq_queue_stopped() in dm_stop_queue() (git fixes (block drivers)).
- dm: use noio when sending kobject event (git fixes (block drivers)).
- dm writecache: add cond_resched to loop in persistent_memory_claim() (git fixes (block drivers)).
- dm writecache: correct uncommitted_block when discarding uncommitted entry (git fixes (block drivers)).
- dm zoned: assign max_io_len correctly (git fixes (block drivers)).
- drivers: char: tlclk.c: Avoid data race between init and interrupt handler (git-fixes).
- Drivers: hv: Specify receive buffer size using Hyper-V page size (bsc#1176877).
- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload (git-fixes).
- drivers/net/wan/x25_asy: Fix to make it work (networking-stable-20_07_29).
- drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic (git-fixes).
- drm/amd/display: fix ref count leak in amdgpu_drm_ioctl (git-fixes).
- drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails (git-fixes).
- drm/amdgpu: Fix buffer overflow in INFO ioctl (git-fixes).
- drm/amdgpu: Fix bug in reporting voltage for CIK (git-fixes).
- drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms (git-fixes).
- drm/amdgpu: increase atombios cmd timeout (git-fixes).
- drm/amdgpu/powerplay: fix AVFS handling with custom powerplay table (git-fixes).
- drm/amdgpu/powerplay/smu7: fix AVFS handling with custom powerplay table (git-fixes).
- drm/amdkfd: fix a memory leak issue (git-fixes).
- drm/amdkfd: Fix reference count leaks (git-fixes).
- drm/amd/pm: correct Vega10 swctf limit setting (git-fixes).
- drm/amd/pm: correct Vega12 swctf limit setting (git-fixes).
- drm/ast: Initialize DRAM type before posting GPU (bsc#1113956) 	* context changes
- drm/mediatek: Add exception handing in mtk_drm_probe() if component init fail (git-fixes).
- drm/mediatek: Add missing put_device() call in mtk_hdmi_dt_parse_pdata() (git-fixes).
- drm/msm/a5xx: Always set an OPP supported hardware value (git-fixes).
- drm/msm: add shutdown support for display platform_driver (git-fixes).
- drm/msm: Disable preemption on all 5xx targets (git-fixes).
- drm/msm: fix leaks if initialization fails (git-fixes).
- drm/msm/gpu: make ringbuffer readonly (bsc#1112178) 	* context changes
- drm/nouveau/debugfs: fix runtime pm imbalance on error (git-fixes).
- drm/nouveau/dispnv50: fix runtime pm imbalance on error (git-fixes).
- drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open (git-fixes).
- drm/nouveau: Fix reference count leak in nouveau_connector_detect (git-fixes).
- drm/nouveau: fix reference count leak in nv50_disp_atomic_commit (git-fixes).
- drm/nouveau: fix runtime pm imbalance on error (git-fixes).
- drm/omap: fix possible object reference leak (git-fixes).
- drm/radeon: fix multiple reference count leak (git-fixes).
- drm/radeon: Prefer lower feedback dividers (git-fixes).
- drm/radeon: revert 'Prefer lower feedback dividers' (git-fixes).
- drm/sun4i: Fix dsi dcs long write function (git-fixes).
- drm/sun4i: sun8i-csc: Secondary CSC register correction (git-fixes).
- drm/tve200: Stabilize enable/disable (git-fixes).
- drm/vc4/vc4_hdmi: fill ASoC card owner (git-fixes).
- e1000: Do not perform reset in reset_task if we are already down (git-fixes).
- EDAC: Fix reference count leaks (bsc#1112178).
- fbcon: prevent user font height or width change from causing (bsc#1112178) 	
- Fix error in kabi fix for: NFSv4: Fix OPEN / CLOSE race (bsc#1176950).
- ftrace: Move RCU is watching check after recursion check (git-fixes).
- ftrace: Setup correct FTRACE_FL_REGS flags for module (git-fixes).
- gma/gma500: fix a memory disclosure bug due to uninitialized bytes (git-fixes).
- gpio: tc35894: fix up tc35894 interrupt configuration (git-fixes).
- gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable() (git-fixes).
- gtp: fix Illegal context switch in RCU read-side critical section (git-fixes).
- gtp: fix use-after-free in gtp_newlink() (git-fixes).
- Hide e21a4f3a930c as of its duplication
- HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage() (git-fixes).
- hsr: use netdev_err() instead of WARN_ONCE() (bsc#1176659).
- hv_utils: drain the timesync packets on onchannelcallback (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale (bsc#1176877).
- hwmon: (applesmc) check status earlier (git-fixes).
- i2c: core: Do not fail PRP0001 enumeration when no ID table exist (git-fixes).
- i2c: cpm: Fix i2c_ram structure (git-fixes).
- ibmvnic: add missing parenthesis in do_reset() (bsc#1176700 ltc#188140).
- ieee802154/adf7242: check status of adf7242_read_reg (git-fixes).
- ieee802154: fix one possible memleak in ca8210_dev_com_init (git-fixes).
- iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak (git-fixes).
- iio: accel: kxsd9: Fix alignment of local buffer (git-fixes).
- iio:accel:mma7455: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:adc:ina2xx Fix timestamp alignment issue (git-fixes).
- iio: adc: mcp3422: fix locking on error path (git-fixes).
- iio: adc: mcp3422: fix locking scope (git-fixes).
- iio:adc:ti-adc081c Fix alignment and data leak issues (git-fixes).
- iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set (git-fixes).
- iio: improve IIO_CONCENTRATION channel type description (git-fixes).
- iio:light:ltr501 Fix timestamp alignment issue (git-fixes).
- iio:light:max44000 Fix timestamp alignment and prevent data leak (git-fixes).
- iio:magnetometer:ak8975 Fix alignment and data leak issues (git-fixes).
- include: add additional sizes (bsc#1094244 ltc#168122).
- iommu/amd: Fix IOMMU AVIC not properly update the is_run bit in IRTE (bsc#1177293).
- iommu/amd: Fix potential @entry null deref (bsc#1177294).
- iommu/amd: Print extended features in one line to fix divergent log levels (bsc#1176316).
- iommu/amd: Re-factor guest virtual APIC (de-)activation code (bsc#1177291).
- iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (bsc#1176317).
- iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (bsc#1177295).
- iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (bsc#1176318).
- iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate() (bsc#1177296).
- iommu/omap: Check for failure of a call to omap_iommu_dump_ctx (bsc#1176319).
- iommu/vt-d: Serialize IOMMU GCMD register modifications (bsc#1176320).
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
- KVM: arm64: Change 32-bit handling of VM system registers (jsc#SLE-4084).
- KVM: arm64: Cleanup __activate_traps and __deactive_traps for VHE and non-VHE (jsc#SLE-4084).
- KVM: arm64: Configure c15, PMU, and debug register traps on cpu load/put for VHE (jsc#SLE-4084).
- KVM: arm64: Defer saving/restoring 32-bit sysregs to vcpu load/put (jsc#SLE-4084).
- KVM: arm64: Defer saving/restoring 64-bit sysregs to vcpu load/put on VHE (jsc#SLE-4084).
- KVM: arm64: Directly call VHE and non-VHE FPSIMD enabled functions (jsc#SLE-4084).
- KVM: arm64: Do not deactivate VM on VHE systems (jsc#SLE-4084).
- KVM: arm64: Do not save the host ELR_EL2 and SPSR_EL2 on VHE systems (jsc#SLE-4084).
- KVM: arm64: Factor out fault info population and gic workarounds (jsc#SLE-4084).
- KVM: arm64: Fix order of vcpu_write_sys_reg() arguments (jsc#SLE-4084).
- KVM: arm64: Forbid kprobing of the VHE world-switch code (jsc#SLE-4084).
- KVM: arm64: Improve debug register save/restore flow (jsc#SLE-4084).
- KVM: arm64: Introduce framework for accessing deferred sysregs (jsc#SLE-4084).
- KVM: arm64: Introduce separate VHE/non-VHE sysreg save/restore functions (jsc#SLE-4084).
- KVM: arm64: Introduce VHE-specific kvm_vcpu_run (jsc#SLE-4084).
- KVM: arm64: Move common VHE/non-VHE trap config in separate functions (jsc#SLE-4084).
- KVM: arm64: Move debug dirty flag calculation out of world switch (jsc#SLE-4084).
- KVM: arm64: Move HCR_INT_OVERRIDE to default HCR_EL2 guest flag (jsc#SLE-4084).
- KVM: arm64: Move userspace system registers into separate function (jsc#SLE-4084).
- KVM: arm64: Prepare to handle deferred save/restore of 32-bit registers (jsc#SLE-4084).
- KVM: arm64: Prepare to handle deferred save/restore of ELR_EL1 (jsc#SLE-4084).
- KVM: arm64: Remove kern_hyp_va() use in VHE switch function (jsc#SLE-4084).
- KVM: arm64: Remove noop calls to timer save/restore from VHE switch (jsc#SLE-4084).
- KVM: arm64: Rework hyp_panic for VHE and non-VHE (jsc#SLE-4084).
- KVM: arm64: Rewrite sysreg alternatives to static keys (jsc#SLE-4084).
- KVM: arm64: Rewrite system register accessors to read/write functions (jsc#SLE-4084).
- KVM: arm64: Slightly improve debug save/restore functions (jsc#SLE-4084).
- KVM: arm64: Unify non-VHE host/guest sysreg save and restore functions (jsc#SLE-4084).
- KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE (jsc#SLE-4084).
- KVM: arm/arm64: Avoid vcpu_load for other vcpu ioctls than KVM_RUN (jsc#SLE-4084).
- KVM: arm/arm64: Avoid VGICv3 save/restore on VHE with no IRQs (jsc#SLE-4084).
- KVM: arm/arm64: Get rid of vcpu-&gt;arch.irq_lines (jsc#SLE-4084).
- KVM: arm/arm64: Handle VGICv3 save/restore from the main VGIC code on VHE (jsc#SLE-4084).
- KVM: arm/arm64: Move vcpu_load call after kvm_vcpu_first_run_init (jsc#SLE-4084).
- KVM: arm/arm64: Move VGIC APR save/restore to vgic put/load (jsc#SLE-4084).
- KVM: arm/arm64: Prepare to handle deferred save/restore of SPSR_EL1 (jsc#SLE-4084).
- KVM: arm/arm64: Remove leftover comment from kvm_vcpu_run_vhe (jsc#SLE-4084).
- KVM: introduce kvm_arch_vcpu_async_ioctl (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_fpu (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_mpstate (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_regs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_run (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_fpu (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_guest_debug (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_mpstate (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_regs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_sregs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_translate (jsc#SLE-4084).
- KVM: PPC: Fix compile error that occurs when CONFIG_ALTIVEC=n (jsc#SLE-4084).
- KVM: Prepare for moving vcpu_load/vcpu_put into arch specific code (jsc#SLE-4084).
- KVM: SVM: Add a dedicated INVD intercept routine (bsc#1112178).
- KVM: SVM: Fix disable pause loop exit/pause filtering capability on SVM (bsc#1176321).
- KVM: SVM: fix svn_pin_memory()'s use of get_user_pages_fast() (bsc#1112178).
- KVM: Take vcpu-&gt;mutex outside vcpu_load (jsc#SLE-4084).
- libceph: allow setting abort_on_full for rbd (bsc#1169972).
- libnvdimm: cover up nvdimm_security_ops changes (bsc#1171742).
- libnvdimm: cover up struct nvdimm changes (bsc#1171742).
- libnvdimm/security, acpi/nfit: unify zero-key for all security commands (bsc#1171742).
- libnvdimm/security: fix a typo (bsc#1171742 bsc#1167527).
- libnvdimm/security: Introduce a 'frozen' attribute (bsc#1171742).
- lib/raid6: use vdupq_n_u8 to avoid endianness warnings (git fixes (block drivers)).
- mac802154: tx: fix use-after-free (git-fixes).
- md: raid0/linear: fix dereference before null check on pointer mddev (git fixes (block drivers)).
- media: davinci: vpif_capture: fix potential double free (git-fixes).
- media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq() (git-fixes).
- media: smiapp: Fix error handling at NVM reading (git-fixes).
- media: ti-vpe: cal: Restrict DMA to avoid memory corruption (git-fixes).
- mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs (git-fixes).
- mfd: mfd-core: Protect against NULL call-back function pointer (git-fixes).
- mm: Avoid calling build_all_zonelists_init under hotplug context (bsc#1154366).
- mmc: cqhci: Add cqhci_deactivate() (git-fixes).
- mmc: sdhci-msm: Add retries when all tuning phases are found valid (git-fixes).
- mmc: sdhci-pci: Fix SDHCI_RESET_ALL for CQHCI for Intel GLK-based controllers (git-fixes).
- mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS models (git-fixes).
- mm/page_alloc.c: fix a crash in free_pages_prepare() (git fixes (mm/pgalloc)).
- mm/vmalloc.c: move 'area-&gt;pages' after if statement (git fixes (mm/vmalloc)).
- mtd: cfi_cmdset_0002: do not free cfi-&gt;cfiq in error path of cfi_amdstd_setup() (git-fixes).
- mtd: lpddr: Fix a double free in probe() (git-fixes).
- mtd: phram: fix a double free issue in error path (git-fixes).
- mtd: properly check all write ioctls for permissions (git-fixes).
- net: dsa: b53: Fix sparse warnings in b53_mmap.c (git-fixes).
- net: dsa: b53: Use strlcpy() for ethtool::get_strings (git-fixes).
- net: dsa: mv88e6xxx: fix 6085 frame mode masking (git-fixes).
- net: dsa: mv88e6xxx: Fix interrupt masking on removal (git-fixes).
- net: dsa: mv88e6xxx: Fix name of switch 88E6141 (git-fixes).
- net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge() (git-fixes).
- net: dsa: mv88e6xxx: Unregister MDIO bus on error path (git-fixes).
- net: dsa: qca8k: Allow overwriting CPU port setting (git-fixes).
- net: dsa: qca8k: Enable RXMAC when bringing up a port (git-fixes).
- net: dsa: qca8k: Force CPU port to its highest bandwidth (git-fixes).
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (git-fixes).
- net: fs_enet: do not call phy_stop() in interrupts (git-fixes).
- net: initialize fastreuse on inet_inherit_port (networking-stable-20_08_15).
- net: lan78xx: Bail out if lan78xx_get_endpoints fails (git-fixes).
- net: lan78xx: replace bogus endpoint lookup (networking-stable-20_08_08).
- net: lio_core: fix potential sign-extension overflow on large shift (git-fixes).
- net/mlx5: Add meaningful return codes to status_to_err function (git-fixes).
- net/mlx5: E-Switch, Use correct flags when configuring vlan (git-fixes).
- net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded (git-fixes).
- net: mvneta: fix mtu change on port without link (git-fixes).
- net-next: ax88796: Do not free IRQ in ax_remove() (already freed in ax_close()) (git-fixes).
- net/nfc/rawsock.c: add CAP_NET_RAW check (networking-stable-20_08_15).
- net: qca_spi: Avoid packet drop during initial sync (git-fixes).
- net: qca_spi: Make sure the QCA7000 reset is triggered (git-fixes).
- net: refactor bind_bucket fastreuse into helper (networking-stable-20_08_15).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: fix restoring of fallback changes (git-fixes).
- net/smc: fix sock refcounting in case of termination (git-fixes).
- net/smc: improve close of terminated socket (git-fixes).
- net/smc: Prevent kernel-infoleak in __smc_diag_dump() (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: tolerate future SMCD versions (git-fixes).
- net: stmmac: call correct function in stmmac_mac_config_rx_queues_routing() (git-fixes).
- net: stmmac: Disable ACS Feature for GMAC &gt;= 4 (git-fixes).
- net: stmmac: do not stop NAPI processing when dropping a packet (git-fixes).
- net: stmmac: dwmac4: fix flow control issue (git-fixes).
- net: stmmac: dwmac_lib: fix interchanged sleep/timeout values in DMA reset function (git-fixes).
- net: stmmac: dwmac-meson8b: Add missing boundary to RGMII TX clock array (git-fixes).
- net: stmmac: dwmac-meson8b: fix internal RGMII clock configuration (git-fixes).
- net: stmmac: dwmac-meson8b: fix setting the RGMII TX clock on Meson8b (git-fixes).
- net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on Meson8b/8m2 SoCs (git-fixes).
- net: stmmac: dwmac-meson8b: only configure the clocks in RGMII mode (git-fixes).
- net: stmmac: dwmac-meson8b: propagate rate changes to the parent clock (git-fixes).
- net: stmmac: Fix error handling path in 'alloc_dma_rx_desc_resources()' (git-fixes).
- net: stmmac: Fix error handling path in 'alloc_dma_tx_desc_resources()' (git-fixes).
- net: stmmac: rename dwmac4_tx_queue_routing() to match reality (git-fixes).
- net: stmmac: set MSS for each tx DMA channel (git-fixes).
- net: stmmac: Use correct values in TQS/RQS fields (git-fixes).
- net-sysfs: add a newline when printing 'tx_timeout' by sysfs (networking-stable-20_07_29).
- net: systemport: Fix software statistics for SYSTEMPORT Lite (git-fixes).
- net: systemport: Fix sparse warnings in bcm_sysport_insert_tsb() (git-fixes).
- net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() (git-fixes).
- net: ucc_geth - fix Oops when changing number of buffers in the ring (git-fixes).
- NFSv4: do not mark all open state for recovery when handling recallable state revoked flag (bsc#1176935).
- nvme-fc: set max_segments to lldd max value (bsc#1176038).
- nvme-pci: override the value of the controller's numa node (bsc#1176507).
- ocfs2: give applications more IO opportunities during fstrim (bsc#1175228).
- omapfb: fix multiple reference count leaks due to pm_runtime_get_sync (git-fixes).
- PCI/ASPM: Allow re-enabling Clock PM (git-fixes).
- PCI: Fix pci_create_slot() reference count leak (git-fixes).
- PCI: qcom: Add missing ipq806x clocks in PCIe driver (git-fixes).
- PCI: qcom: Add missing reset for ipq806x (git-fixes).
- PCI: qcom: Add support for tx term offset for rev 2.1.0 (git-fixes).
- PCI: qcom: Define some PARF params needed for ipq8064 SoC (git-fixes).
- PCI: rcar: Fix incorrect programming of OB windows (git-fixes).
- phy: samsung: s5pv210-usb2: Add delay after reset (git-fixes).
- pinctrl: mvebu: Fix i2c sda definition for 98DX3236 (git-fixes).
- powerpc/64s: Blacklist functions invoked on a trap (bsc#1094244 ltc#168122).
- powerpc/64s: Fix HV NMI vs HV interrupt recoverability test (bsc#1094244 ltc#168122).
- powerpc/64s: Fix unrelocated interrupt trampoline address test (bsc#1094244 ltc#168122).
- powerpc/64s: Include &lt;asm/nmi.h&gt; header file to fix a warning (bsc#1094244 ltc#168122).
- powerpc/64s: machine check do not trace real-mode handler (bsc#1094244 ltc#168122).
- powerpc/64s: sreset panic if there is no debugger or crash dump handlers (bsc#1094244 ltc#168122).
- powerpc/64s: system reset interrupt preserve HSRRs (bsc#1094244 ltc#168122).
- powerpc: Add cputime_to_nsecs() (bsc#1065729).
- powerpc/book3s64/radix: Add kernel command line option to disable radix GTSE (bsc#1055186 ltc#153436).
- powerpc/book3s64/radix: Fix boot failure with large amount of guest memory (bsc#1176022 ltc#187208).
- powerpc: Implement ftrace_enabled() helpers (bsc#1094244 ltc#168122).
- powerpc/init: Do not advertise radix during client-architecture-support (bsc#1055186 ltc#153436 ).
- powerpc/kernel: Cleanup machine check function declarations (bsc#1065729).
- powerpc/kernel: Enables memory hot-remove after reboot on pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Enable radix GTSE only if supported (bsc#1055186 ltc#153436).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests only (bsc#1177030 ltc#187588).
- powerpc/mm: Move book3s64 specifics in subdirectory mm/book3s64 (bsc#1176022 ltc#187208).
- powerpc/powernv: Remove real mode access limit for early allocations (bsc#1176022 ltc#187208).
- powerpc/prom: Enable Radix GTSE in cpu pa-features (bsc#1055186 ltc#153436).
- powerpc/pseries/le: Work around a firmware quirk (bsc#1094244 ltc#168122).
- powerpc/pseries: lift RTAS limit for radix (bsc#1176022 ltc#187208).
- powerpc/pseries: Limit machine check stack to 4GB (bsc#1094244 ltc#168122).
- powerpc/pseries: Machine check use rtas_call_unlocked() with args on stack (bsc#1094244 ltc#168122).
- powerpc/pseries: radix is not subject to RMA limit, remove it (bsc#1176022 ltc#187208).
- powerpc/pseries/ras: Avoid calling rtas_token() in NMI paths (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: Fix FWNMI_VALID off by one (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: fwnmi avoid modifying r3 in error case (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: fwnmi sreset should not interlock (bsc#1094244 ltc#168122).
- powerpc/traps: Do not trace system reset (bsc#1094244 ltc#168122).
- powerpc/traps: fix recoverability of machine check handling on book3s/32 (bsc#1094244 ltc#168122).
- powerpc/traps: Make unrecoverable NMIs die instead of panic (bsc#1094244 ltc#168122).
- powerpc/xmon: Use `dcbf` inplace of `dcbi` instruction for 64bit Book3S (bsc#1065729).
- power: supply: max17040: Correct voltage reading (git-fixes).
- rcu: Do RCU GP kthread self-wakeup from softirq and interrupt (git fixes (rcu)).
- regulator: push allocation in set_consumer_device_supply() out of lock (git-fixes).
- rpadlpar_io: Add MODULE_DESCRIPTION entries to kernel modules (bsc#1176869 ltc#188243).
- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- rpm/kernel-binary.spec.in: Also sign ppc64 kernels (jsc#SLE-15857 jsc#SLE-13618).
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115) To avoid the unnecessary key enrollment, when enrolling the signing key of the kernel package, '--ca-check' is added to mokutil so that mokutil will ignore the request if the CA of the signing key already exists in MokList or UEFI db. Since the macro, %_suse_kernel_module_subpackage, is only defined in a kernel module package (KMP), it's used to determine whether the %post script is running in a kernel package, or a kernel module package.
- rpm/kernel-source.spec.in: Also use bz compression (boo#1175882).
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698) The '-c' option wasn't passed down to %_kernel_module_package so the ueficert subpackage wasn't generated even if the certificate is specified in the spec file.
- rtc: ds1374: fix possible race condition (git-fixes).
- rtlwifi: rtl8192cu: Prevent leaking urb (git-fixes).
- rxrpc: Fix race between recvmsg and sendmsg on immediate call failure (networking-stable-20_08_08).
- rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA (networking-stable-20_07_29).
- s390/mm: fix huge pte soft dirty copying (git-fixes).
- s390/qeth: do not process empty bridge port events (git-fixes).
- s390/qeth: integrate RX refill worker with NAPI (git-fixes).
- s390/qeth: tolerate pre-filled RX buffer (git-fixes).
- scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del() (bsc#1174899).
- scsi: fnic: Do not call 'scsi_done()' for unhandled commands (bsc#1168468, bsc#1171675).
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (bsc#1176962 ltc#188304).
- scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling getpeername() (bsc#1177258).
- scsi: libfc: Fix for double free() (bsc#1174899).
- scsi: libfc: free response frame from GPN_ID (bsc#1174899).
- scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases (bsc#1174899).
- scsi: lpfc: Add dependency on CPU_FREQ (git-fixes).
- scsi: lpfc: Fix setting IRQ affinity with an empty CPU mask (git-fixes).
- scsi: qla2xxx: Fix regression on sparc64 (git-fixes).
- scsi: qla2xxx: Fix the return value (bsc#1171688).
- scsi: qla2xxx: Fix the size used in a 'dma_free_coherent()' call (bsc#1171688).
- scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba() (bsc#1171688).
- scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg() (bsc#1171688).
- scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1171688).
- scsi: qla2xxx: Log calling function name in qla2x00_get_sp_from_handle() (bsc#1171688).
- scsi: qla2xxx: Remove pci-dma-compat wrapper API (bsc#1171688).
- scsi: qla2xxx: Remove redundant variable initialization (bsc#1171688).
- scsi: qla2xxx: Remove superfluous memset() (bsc#1171688).
- scsi: qla2xxx: Simplify return value logic in qla2x00_get_sp_from_handle() (bsc#1171688).
- scsi: qla2xxx: Suppress two recently introduced compiler warnings (git-fixes).
- scsi: qla2xxx: Warn if done() or free() are called on an already freed srb (bsc#1171688).
- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for Tegra186 (git-fixes).
- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for Tegra210 (git-fixes).
- serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout (git-fixes).
- serial: 8250_omap: Fix sleeping function called from invalid context during probe (git-fixes).
- serial: 8250_port: Do not service RX FIFO if throttled (git-fixes).
- Set CONFIG_HAVE_KVM_VCPU_ASYNC_IOCTL=y (jsc#SLE-4084).
- SMB3: Honor persistent/resilient handle flags for multiuser mounts (bsc#1176546).
- SMB3: Honor 'seal' flag for multiuser mounts (bsc#1176545).
- SMB3: warn on confusing error scenario with sec=krb5 (bsc#1176548).
- stmmac: Do not access tx_q-&gt;dirty_tx before netif_tx_lock (git-fixes).
- tcp: apply a floor of 1 for RTT samples from TCP timestamps (networking-stable-20_08_08).
- thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430 (git-fixes).
- tools/power/cpupower: Fix initializer override in hsw_ext_cstates (bsc#1112178).
- USB: core: fix slab-out-of-bounds Read in read_descriptors (git-fixes).
- USB: dwc3: Increase timeout for CmdAct cleared by device controller (git-fixes).
- USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() (git-fixes).
- USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int (git-fixes).
- USB: Fix out of sync data toggle if a configured device is reconfigured (git-fixes).
- USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() (git-fixes).
- USB: gadget: f_ncm: Fix NDP16 datagram validation (git-fixes).
- USB: gadget: u_f: add overflow checks to VLA macros (git-fixes).
- USB: gadget: u_f: Unbreak offset calculation in VLAs (git-fixes).
- USB: hso: check for return value in hso_serial_common_create() (networking-stable-20_08_08).
- usblp: fix race between disconnect() and read() (git-fixes).
- USB: lvtest: return proper error code in probe (git-fixes).
- usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set (git-fixes).
- USB: qmi_wwan: add D-Link DWM-222 A2 device ID (git-fixes).
- USB: quirks: Add no-lpm quirk for another Raydium touchscreen (git-fixes).
- USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin notebook (git-fixes).
- USB: quirks: Ignore duplicate endpoint on Sound Devices MixPre-D (git-fixes).
- USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter (git-fixes).
- USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules (git-fixes).
- USB: serial: option: support dynamic Quectel USB compositions (git-fixes).
- USB: sisusbvga: Fix a potential UB casued by left shifting a negative value (git-fixes).
- USB: storage: Add unusual_uas entry for Sony PSZ drives (git-fixes).
- USB: typec: ucsi: acpi: Check the _DEP dependencies (git-fixes).
- USB: uas: Add quirk for PNY Pro Elite (git-fixes).
- USB: UAS: fix disconnect by unplugging a hub (git-fixes).
- USB: yurex: Fix bad gfp argument (git-fixes).
- vgacon: remove software scrollback support (bsc#1176278).
- video: fbdev: fix OOB read in vga_8planes_imageblit() (git-fixes).
- virtio-blk: free vblk-vqs in error path of virtblk_probe() (git fixes (block drivers)).
- vrf: prevent adding upper devices (git-fixes).
- vxge: fix return of a free'd memblock on a failed dma mapping (git-fixes).
- x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task (bsc#1112178).
- xen: do not reschedule in preemption off sections (bsc#1175749).
- xen/events: do not use chip_data for legacy IRQs (bsc#1065600).
- xen uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information (bsc#1065600).
- xhci: Do warm-reset when both CAS and XDEV_RESUME are set (git-fixes).
- yam: fix possible memory leak in yam_init_driver (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-13"/>
	<updated date="2020-10-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094244">SUSE bug 1094244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154366">SUSE bug 1154366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167527">SUSE bug 1167527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168468">SUSE bug 1168468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169972">SUSE bug 1169972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171675">SUSE bug 1171675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171688">SUSE bug 1171688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171742">SUSE bug 1171742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173115">SUSE bug 1173115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174899">SUSE bug 1174899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175228">SUSE bug 1175228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175749">SUSE bug 1175749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175882">SUSE bug 1175882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176011">SUSE bug 1176011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176022">SUSE bug 1176022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176038">SUSE bug 1176038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176235">SUSE bug 1176235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176242">SUSE bug 1176242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176278">SUSE bug 1176278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176316">SUSE bug 1176316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176317">SUSE bug 1176317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176318">SUSE bug 1176318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176319">SUSE bug 1176319</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176320">SUSE bug 1176320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176321">SUSE bug 1176321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176381">SUSE bug 1176381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176395">SUSE bug 1176395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176410">SUSE bug 1176410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176423">SUSE bug 1176423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176482">SUSE bug 1176482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176507">SUSE bug 1176507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176536">SUSE bug 1176536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176544">SUSE bug 1176544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176545">SUSE bug 1176545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176546">SUSE bug 1176546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176548">SUSE bug 1176548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176659">SUSE bug 1176659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176698">SUSE bug 1176698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176699">SUSE bug 1176699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176700">SUSE bug 1176700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176721">SUSE bug 1176721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176722">SUSE bug 1176722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176725">SUSE bug 1176725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176732">SUSE bug 1176732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176788">SUSE bug 1176788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176789">SUSE bug 1176789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176869">SUSE bug 1176869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176877">SUSE bug 1176877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176935">SUSE bug 1176935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176950">SUSE bug 1176950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176962">SUSE bug 1176962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176966">SUSE bug 1176966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176990">SUSE bug 1176990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177027">SUSE bug 1177027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177030">SUSE bug 1177030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177041">SUSE bug 1177041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177042">SUSE bug 1177042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177043">SUSE bug 1177043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177044">SUSE bug 1177044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177121">SUSE bug 1177121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177206">SUSE bug 1177206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177258">SUSE bug 1177258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177291">SUSE bug 1177291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177293">SUSE bug 1177293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177294">SUSE bug 1177294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177295">SUSE bug 1177295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177296">SUSE bug 1177296</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-0404/">CVE-2020-0404</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0427/">CVE-2020-0427</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0431/">CVE-2020-0431</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0432/">CVE-2020-0432</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14381/">CVE-2020-14381</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14390/">CVE-2020-14390</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25284/">CVE-2020-25284</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25641/">CVE-2020-25641</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25643/">CVE-2020-25643</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-26088/">CVE-2020-26088</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496326" comment="kernel-docs-4.12.14-197.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496327" comment="kernel-obs-build-4.12.14-197.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496328" comment="kernel-source-4.12.14-197.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496329" comment="kernel-syms-4.12.14-197.61.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138238" version="1" class="patch">
	<metadata>
		<title>Security update for gcc10, nvptx-tools (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172798" ref_url="https://bugzilla.suse.com/1172798" source="BUGZILLA"/>
		<reference ref_id="1172846" ref_url="https://bugzilla.suse.com/1172846" source="BUGZILLA"/>
		<reference ref_id="1173972" ref_url="https://bugzilla.suse.com/1173972" source="BUGZILLA"/>
		<reference ref_id="1174753" ref_url="https://bugzilla.suse.com/1174753" source="BUGZILLA"/>
		<reference ref_id="1174817" ref_url="https://bugzilla.suse.com/1174817" source="BUGZILLA"/>
		<reference ref_id="1175168" ref_url="https://bugzilla.suse.com/1175168" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13844" ref_url="https://www.suse.com/security/cve/CVE-2020-13844/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007583.html" source="SUSE-SU"/>
		<description>
This update for gcc10, nvptx-tools fixes the following issues:

This update provides the GCC10 compiler suite and runtime libraries.

The base SUSE Linux Enterprise libraries libgcc_s1, libstdc++6 are replaced by
the gcc10 variants.

The new compiler variants are available with '-10' suffix, you can specify them
via:

	CC=gcc-10
	CXX=g++-10

or similar commands.

For a detailed changelog check out https://gcc.gnu.org/gcc-10/changes.html

Changes in nvptx-tools:

- Enable build on aarch64
  		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-04"/>
	<updated date="2020-12-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172798">SUSE bug 1172798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172846">SUSE bug 1172846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173972">SUSE bug 1173972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174753">SUSE bug 1174753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174817">SUSE bug 1174817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175168">SUSE bug 1175168</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-13844/">CVE-2020-13844</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496330" comment="cpp10-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496331" comment="cross-nvptx-gcc10-10.2.1+git583-1.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496332" comment="cross-nvptx-newlib10-devel-10.2.1+git583-1.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496333" comment="gcc10-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496334" comment="gcc10-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496335" comment="gcc10-ada-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496336" comment="gcc10-ada-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496337" comment="gcc10-c++-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496338" comment="gcc10-c++-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496339" comment="gcc10-fortran-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496340" comment="gcc10-fortran-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496341" comment="gcc10-go-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496342" comment="gcc10-go-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496343" comment="gcc10-info-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496344" comment="gcc10-locale-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496345" comment="libstdc++6-devel-gcc10-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496346" comment="libstdc++6-devel-gcc10-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496347" comment="libstdc++6-pp-gcc10-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496348" comment="libstdc++6-pp-gcc10-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496349" comment="libubsan1-32bit-10.2.1+git583-1.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496350" comment="nvptx-tools-1.0-4.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138239" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1140683" ref_url="https://bugzilla.suse.com/1140683" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1174748" ref_url="https://bugzilla.suse.com/1174748" source="BUGZILLA"/>
		<reference ref_id="1175520" ref_url="https://bugzilla.suse.com/1175520" source="BUGZILLA"/>
		<reference ref_id="1176400" ref_url="https://bugzilla.suse.com/1176400" source="BUGZILLA"/>
		<reference ref_id="1176946" ref_url="https://bugzilla.suse.com/1176946" source="BUGZILLA"/>
		<reference ref_id="1177027" ref_url="https://bugzilla.suse.com/1177027" source="BUGZILLA"/>
		<reference ref_id="1177340" ref_url="https://bugzilla.suse.com/1177340" source="BUGZILLA"/>
		<reference ref_id="1177511" ref_url="https://bugzilla.suse.com/1177511" source="BUGZILLA"/>
		<reference ref_id="1177685" ref_url="https://bugzilla.suse.com/1177685" source="BUGZILLA"/>
		<reference ref_id="1177724" ref_url="https://bugzilla.suse.com/1177724" source="BUGZILLA"/>
		<reference ref_id="1177725" ref_url="https://bugzilla.suse.com/1177725" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-12352" ref_url="https://www.suse.com/security/cve/CVE-2020-12352/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007592.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724).
- CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' aka 'BadChoice' (bsc#1177725).
- CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted (bsc#1177511).


The following non-security bugs were fixed:

- drm/sun4i: mixer: Extend regmap max_register (git-fixes).
- i2c: meson: fix clock setting overwrite (git-fixes).
- iommu/vt-d: Correctly calculate agaw in domain_init() (bsc#1176400).
- mac80211: do not allow bigger VHT MPDUs than the hardware supports (git-fixes).
- macsec: avoid use-after-free in macsec_handle_frame() (git-fixes).
- mmc: core: do not set limits.discard_granularity as 0 (git-fixes).
- mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() (bsc#1177685).
- NFS: On fatal writeback errors, we need to call nfs_inode_remove_request() (bsc#1177340).
- NFS: Revalidate the file mapping on all fatal writeback errors (bsc#1177340).
- nvme: add a Identify Namespace Identification Descriptor list quirk (bsc#1174748). add two previous futile attempts to fix the bug to blacklist.conf
- nvme: Fix ctrl use-after-free during sysfs deletion (bsc#1174748).
- nvme: fix deadlock caused by ANA update wrong locking (bsc#1174748).
- nvme: fix possible io failures when removing multipathed ns (bsc#1174748).
- nvme: make nvme_identify_ns propagate errors back (bsc#1174748). Refresh:  - patches.suse/nvme-flush-scan_work-when-resetting-controller.patch
- nvme: make nvme_report_ns_ids propagate error back (bsc#1174748).
- nvme-multipath: do not reset on unknown status (bsc#1174748).
- nvme: Namepace identification descriptor list is optional (bsc#1174748).
- nvme: pass status to nvme_error_status (bsc#1174748).
- nvme-rdma: Avoid double freeing of async event data (bsc#1174748).
- nvme: return error from nvme_alloc_ns() (bsc#1174748).
- powerpc/dma: Fix dma_map_ops::get_required_mask (bsc#1065729).
- scsi-hisi-kabi-fixes.patch
- scsi-hisi-kabi-fixes.patch
- scsi: hisi_sas: Add debugfs ITCT file and add file operations (bsc#1140683).
- scsi: hisi_sas: Add manual trigger for debugfs dump (bsc#1140683).
- scsi: hisi_sas: Add missing seq_printf() call in hisi_sas_show_row_32() (bsc#1140683).
- scsi: hisi_sas: Change return variable type in phy_up_v3_hw() (bsc#1140683).
- scsi: hisi_sas: Correct memory allocation size for DQ debugfs (bsc#1140683).
- scsi: hisi_sas: Do some more tidy-up (bsc#1140683).
- scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO (bsc#1140683).
- scsi: hisi_sas: Fix type casting and missing static qualifier in debugfs code (bsc#1140683). Refresh:
- scsi-hisi_sas-Issue-internal-abort-on-all-relevant-q.patch
- scsi: hisi_sas: No need to check return value of debugfs_create functions (bsc#1140683). Update:
- scsi: hisi_sas: Some misc tidy-up (bsc#1140683).
- scsi: qla2xxx: Add IOCB resource tracking (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Add rport fields in debugfs (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Add SLER and PI control support (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Correct the check for sscanf() return value (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix buffer-buffer credit extraction error (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix crash on session cleanup with unload (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix I/O errors during LIP reset tests (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix I/O failures during remote port toggle testing (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix memory size truncation (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix MPI reset needed message (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix reset of MPI firmware (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Make tgt_port_database available in initiator mode (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Performance tweak (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Reduce duplicate code in reporting speed (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Remove unneeded variable 'rval' (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Setup debugfs entries for remote ports (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Update version to 10.02.00.102-k (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Update version to 10.02.00.103-k (bsc#1176946 bsc#1175520 bsc#1172538).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-20"/>
	<updated date="2020-10-20"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140683">SUSE bug 1140683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174748">SUSE bug 1174748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175520">SUSE bug 1175520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176400">SUSE bug 1176400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176946">SUSE bug 1176946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177027">SUSE bug 1177027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177340">SUSE bug 1177340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177511">SUSE bug 1177511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177685">SUSE bug 1177685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177724">SUSE bug 1177724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177725">SUSE bug 1177725</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12352/">CVE-2020-12352</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496351" comment="kernel-docs-4.12.14-197.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496352" comment="kernel-obs-build-4.12.14-197.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496353" comment="kernel-source-4.12.14-197.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496354" comment="kernel-syms-4.12.14-197.64.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138240" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1126826" ref_url="https://bugzilla.suse.com/1126826" source="BUGZILLA"/>
		<reference ref_id="1126829" ref_url="https://bugzilla.suse.com/1126829" source="BUGZILLA"/>
		<reference ref_id="1126831" ref_url="https://bugzilla.suse.com/1126831" source="BUGZILLA"/>
		<reference ref_id="1140126" ref_url="https://bugzilla.suse.com/1140126" source="BUGZILLA"/>
		<reference ref_id="1142649" ref_url="https://bugzilla.suse.com/1142649" source="BUGZILLA"/>
		<reference ref_id="1143609" ref_url="https://bugzilla.suse.com/1143609" source="BUGZILLA"/>
		<reference ref_id="1153768" ref_url="https://bugzilla.suse.com/1153768" source="BUGZILLA"/>
		<reference ref_id="1153770" ref_url="https://bugzilla.suse.com/1153770" source="BUGZILLA"/>
		<reference ref_id="1157755" ref_url="https://bugzilla.suse.com/1157755" source="BUGZILLA"/>
		<reference ref_id="1160254" ref_url="https://bugzilla.suse.com/1160254" source="BUGZILLA"/>
		<reference ref_id="1160590" ref_url="https://bugzilla.suse.com/1160590" source="BUGZILLA"/>
		<reference ref_id="1163333" ref_url="https://bugzilla.suse.com/1163333" source="BUGZILLA"/>
		<reference ref_id="1163744" ref_url="https://bugzilla.suse.com/1163744" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12972" ref_url="https://www.suse.com/security/cve/CVE-2019-12972/" source="CVE"/>
		<reference ref_id="CVE-2019-14250" ref_url="https://www.suse.com/security/cve/CVE-2019-14250/" source="CVE"/>
		<reference ref_id="CVE-2019-14444" ref_url="https://www.suse.com/security/cve/CVE-2019-14444/" source="CVE"/>
		<reference ref_id="CVE-2019-17450" ref_url="https://www.suse.com/security/cve/CVE-2019-17450/" source="CVE"/>
		<reference ref_id="CVE-2019-17451" ref_url="https://www.suse.com/security/cve/CVE-2019-17451/" source="CVE"/>
		<reference ref_id="CVE-2019-9074" ref_url="https://www.suse.com/security/cve/CVE-2019-9074/" source="CVE"/>
		<reference ref_id="CVE-2019-9075" ref_url="https://www.suse.com/security/cve/CVE-2019-9075/" source="CVE"/>
		<reference ref_id="CVE-2019-9077" ref_url="https://www.suse.com/security/cve/CVE-2019-9077/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007650.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

binutils was updated to version 2.35. (jsc#ECO-2373)

Update to binutils 2.35:

* The assembler can now produce DWARF-5 format line number tables.
* Readelf now has a 'lint' mode to enable extra checks of the files it is processing.
* Readelf will now display '[...]' when it has to truncate a symbol name.  
  The old behaviour - of displaying as many characters as possible, up to
  the 80 column limit - can be restored by the use of the --silent-truncation
  option.
* The linker can now produce a dependency file listing the inputs that it
  has processed, much like the -M -MP option supported by the compiler.

- fix DT_NEEDED order with -flto [bsc#1163744]


Update to binutils 2.34:

* The disassembler (objdump --disassemble) now has an option to
  generate ascii art thats show the arcs between that start and end
  points of control flow instructions.
* The binutils tools now have support for debuginfod.  Debuginfod is a 
  HTTP service for distributing ELF/DWARF debugging information as
  well as source code.  The tools can now connect to debuginfod
  servers in order to download debug information about the files that
  they are processing.
* The assembler and linker now support the generation of ELF format
  files for the Z80 architecture.

- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to bsc#1163333.
- Includes fixes for these CVEs:
  bsc#1153768 aka CVE-2019-17451 aka PR25070
  bsc#1153770 aka CVE-2019-17450 aka PR25078

- fix various build fails on aarch64 (PR25210, bsc#1157755).

Update to binutils 2.33.1:

* Adds support for the Arm Scalable Vector Extension version 2
  (SVE2) instructions, the Arm Transactional Memory Extension (TME)
  instructions and the Armv8.1-M Mainline and M-profile Vector
  Extension (MVE) instructions.
* Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
  processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
  Cortex-A76AE, and Cortex-A77 processors.
* Adds a .float16 directive for both Arm and AArch64 to allow
  encoding of 16-bit floating point literals.
* For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
  Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
  configure time option to set the default behavior. Set the default
  if the configure option is not used to 'no'.
* The Cortex-A53 Erratum 843419 workaround now supports a choice of
  which workaround to use.  The option --fix-cortex-a53-843419 now
  takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
  which can be used to force a particular workaround to be used.
  See --help for AArch64 for more details.
* Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
  GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
  in the AArch64 ELF linker. 
* Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
  on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI 
  on inputs and use PLTs protected with BTI.
* Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
* Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
  provides a prefix to source code lines displayed in a disassembly.
* Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
  option to objcopy to allow the changing of section alignments.
* Add --verilog-data-width option to objcopy for verilog targets to
  control width of data elements in verilog hex format.
* The separate debug info file options of readelf (--debug-dump=links
  and --debug-dump=follow) and objdump (--dwarf=links and
  --dwarf=follow-links) will now display and/or follow multiple
  links if more than one are present in a file.  (This usually
  happens when gcc's -gsplit-dwarf option is used).
  In addition objdump's --dwarf=follow-links now also affects its
  other display options, so that for example, when combined with
  --syms it will cause the symbol tables in any linked debug info
  files to also be displayed.  In addition when combined with
  --disassemble the --dwarf= follow-links option will ensure that
  any symbol tables in the linked files are read and used when
  disassembling code in the main file.
* Add support for dumping types encoded in the Compact Type Format
  to objdump and readelf.
- Includes fixes for these CVEs:
  bsc#1126826 aka CVE-2019-9077 aka PR1126826
  bsc#1126829 aka CVE-2019-9075 aka PR1126829
  bsc#1126831 aka CVE-2019-9074 aka PR24235
  bsc#1140126 aka CVE-2019-12972 aka PR23405
  bsc#1143609 aka CVE-2019-14444 aka PR24829
  bsc#1142649 aka CVE-2019-14250 aka PR90924

* Add xBPF target
* Fix various problems with DWARF 5 support in gas
* fix nm -B for objects compiled with -flto and -fcommon.

  		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-28"/>
	<updated date="2020-10-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1126826">SUSE bug 1126826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126829">SUSE bug 1126829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126831">SUSE bug 1126831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140126">SUSE bug 1140126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142649">SUSE bug 1142649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143609">SUSE bug 1143609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153768">SUSE bug 1153768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153770">SUSE bug 1153770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157755">SUSE bug 1157755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160254">SUSE bug 1160254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160590">SUSE bug 1160590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163333">SUSE bug 1163333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163744">SUSE bug 1163744</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12972/">CVE-2019-12972</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14250/">CVE-2019-14250</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14444/">CVE-2019-14444</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17450/">CVE-2019-17450</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17451/">CVE-2019-17451</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9074/">CVE-2019-9074</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9075/">CVE-2019-9075</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9077/">CVE-2019-9077</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496355" comment="binutils-devel-32bit-2.35-7.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138241" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178067" ref_url="https://bugzilla.suse.com/1178067" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27560" ref_url="https://www.suse.com/security/cve/CVE-2020-27560/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3162-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007698.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

- CVE-2020-27560: Fixed potential denial of service in OptimizeLayerFrames function in MagickCore/layer.c (bsc#1178067).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1178067">SUSE bug 1178067</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27560/">CVE-2020-27560</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496356" comment="perl-PerlMagick-7.0.7.34-3.85.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138242" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1055014" ref_url="https://bugzilla.suse.com/1055014" source="BUGZILLA"/>
		<reference ref_id="1061843" ref_url="https://bugzilla.suse.com/1061843" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066382" ref_url="https://bugzilla.suse.com/1066382" source="BUGZILLA"/>
		<reference ref_id="1077428" ref_url="https://bugzilla.suse.com/1077428" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1131277" ref_url="https://bugzilla.suse.com/1131277" source="BUGZILLA"/>
		<reference ref_id="1134760" ref_url="https://bugzilla.suse.com/1134760" source="BUGZILLA"/>
		<reference ref_id="1170415" ref_url="https://bugzilla.suse.com/1170415" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1173432" ref_url="https://bugzilla.suse.com/1173432" source="BUGZILLA"/>
		<reference ref_id="1174748" ref_url="https://bugzilla.suse.com/1174748" source="BUGZILLA"/>
		<reference ref_id="1176354" ref_url="https://bugzilla.suse.com/1176354" source="BUGZILLA"/>
		<reference ref_id="1176485" ref_url="https://bugzilla.suse.com/1176485" source="BUGZILLA"/>
		<reference ref_id="1176560" ref_url="https://bugzilla.suse.com/1176560" source="BUGZILLA"/>
		<reference ref_id="1176713" ref_url="https://bugzilla.suse.com/1176713" source="BUGZILLA"/>
		<reference ref_id="1176723" ref_url="https://bugzilla.suse.com/1176723" source="BUGZILLA"/>
		<reference ref_id="1177086" ref_url="https://bugzilla.suse.com/1177086" source="BUGZILLA"/>
		<reference ref_id="1177101" ref_url="https://bugzilla.suse.com/1177101" source="BUGZILLA"/>
		<reference ref_id="1177271" ref_url="https://bugzilla.suse.com/1177271" source="BUGZILLA"/>
		<reference ref_id="1177281" ref_url="https://bugzilla.suse.com/1177281" source="BUGZILLA"/>
		<reference ref_id="1177410" ref_url="https://bugzilla.suse.com/1177410" source="BUGZILLA"/>
		<reference ref_id="1177411" ref_url="https://bugzilla.suse.com/1177411" source="BUGZILLA"/>
		<reference ref_id="1177470" ref_url="https://bugzilla.suse.com/1177470" source="BUGZILLA"/>
		<reference ref_id="1177687" ref_url="https://bugzilla.suse.com/1177687" source="BUGZILLA"/>
		<reference ref_id="1177719" ref_url="https://bugzilla.suse.com/1177719" source="BUGZILLA"/>
		<reference ref_id="1177740" ref_url="https://bugzilla.suse.com/1177740" source="BUGZILLA"/>
		<reference ref_id="1177749" ref_url="https://bugzilla.suse.com/1177749" source="BUGZILLA"/>
		<reference ref_id="1177750" ref_url="https://bugzilla.suse.com/1177750" source="BUGZILLA"/>
		<reference ref_id="1177753" ref_url="https://bugzilla.suse.com/1177753" source="BUGZILLA"/>
		<reference ref_id="1177754" ref_url="https://bugzilla.suse.com/1177754" source="BUGZILLA"/>
		<reference ref_id="1177755" ref_url="https://bugzilla.suse.com/1177755" source="BUGZILLA"/>
		<reference ref_id="1177766" ref_url="https://bugzilla.suse.com/1177766" source="BUGZILLA"/>
		<reference ref_id="1177855" ref_url="https://bugzilla.suse.com/1177855" source="BUGZILLA"/>
		<reference ref_id="1177856" ref_url="https://bugzilla.suse.com/1177856" source="BUGZILLA"/>
		<reference ref_id="1177861" ref_url="https://bugzilla.suse.com/1177861" source="BUGZILLA"/>
		<reference ref_id="1178003" ref_url="https://bugzilla.suse.com/1178003" source="BUGZILLA"/>
		<reference ref_id="1178027" ref_url="https://bugzilla.suse.com/1178027" source="BUGZILLA"/>
		<reference ref_id="1178166" ref_url="https://bugzilla.suse.com/1178166" source="BUGZILLA"/>
		<reference ref_id="1178185" ref_url="https://bugzilla.suse.com/1178185" source="BUGZILLA"/>
		<reference ref_id="1178187" ref_url="https://bugzilla.suse.com/1178187" source="BUGZILLA"/>
		<reference ref_id="1178188" ref_url="https://bugzilla.suse.com/1178188" source="BUGZILLA"/>
		<reference ref_id="1178202" ref_url="https://bugzilla.suse.com/1178202" source="BUGZILLA"/>
		<reference ref_id="1178234" ref_url="https://bugzilla.suse.com/1178234" source="BUGZILLA"/>
		<reference ref_id="1178330" ref_url="https://bugzilla.suse.com/1178330" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0430" ref_url="https://www.suse.com/security/cve/CVE-2020-0430/" source="CVE"/>
		<reference ref_id="CVE-2020-14351" ref_url="https://www.suse.com/security/cve/CVE-2020-14351/" source="CVE"/>
		<reference ref_id="CVE-2020-16120" ref_url="https://www.suse.com/security/cve/CVE-2020-16120/" source="CVE"/>
		<reference ref_id="CVE-2020-25285" ref_url="https://www.suse.com/security/cve/CVE-2020-25285/" source="CVE"/>
		<reference ref_id="CVE-2020-25656" ref_url="https://www.suse.com/security/cve/CVE-2020-25656/" source="CVE"/>
		<reference ref_id="CVE-2020-27673" ref_url="https://www.suse.com/security/cve/CVE-2020-27673/" source="CVE"/>
		<reference ref_id="CVE-2020-27675" ref_url="https://www.suse.com/security/cve/CVE-2020-27675/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007748.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bug fixes.


The following security bugs were fixed:

- CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766).
- CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485).
- CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723).
- CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086).
- CVE-2020-16120: Fixed a permissions issue in ovl_path_open() (bsc#1177470).
- CVE-2020-8694: Restricted energy meter to root access (bsc#1170415).
- CVE-2020-27673: Fixed an issue where rogue guests could have caused denial of service of Dom0 via high frequency events (XSA-332 bsc#1177411)
- CVE-2020-27675: Fixed a race condition in event handler which may crash dom0 (XSA-331 bsc#1177410).

The following non-security bugs were fixed:

- ALSA: bebob: potential info leak in hwdep_read() (git-fixes).
- ALSA: compress_offload: remove redundant initialization (git-fixes).
- ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).
- ALSA: core: pcm: simplify locking for timers (git-fixes).
- ALSA: core: timer: clarify operator precedence (git-fixes).
- ALSA: core: timer: remove redundant assignment (git-fixes).
- ALSA: ctl: Workaround for lockdep warning wrt card-&gt;ctl_files_rwlock (git-fixes).
- ALSA: hda - Do not register a cb func if it is registered already (git-fixes).
- ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes).
- ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes).
- ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes).
- ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes).
- ALSA: hda: use semicolons rather than commas to separate statements (git-fixes).
- ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes).
- ALSA: rawmidi: (cosmetic) align function parameters (git-fixes).
- ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes).
- ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes).
- ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes).
- ALSA: usb-audio: fix spelling mistake 'Frequence' -&gt; 'Frequency' (git-fixes).
- ASoC: qcom: lpass-cpu: fix concurrency issue (git-fixes).
- ASoC: qcom: lpass-platform: fix memory leak (git-fixes).
- ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() (git-fixes).
- ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path (git-fixes).
- ath10k: provide survey info as accumulated data (git-fixes).
- ath6kl: prevent potential array overflow in ath6kl_add_new_sta() (git-fixes).
- ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() (git-fixes).
- ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() (git-fixes).
- backlight: sky81452-backlight: Fix refcount imbalance on error (git-fixes).
- blk-mq: order adding requests to hctx-&gt;dispatch and checking SCHED_RESTART (bsc#1177750).
- block: ensure bdi-&gt;io_pages is always initialized (bsc#1177749).
- Bluetooth: MGMT: Fix not checking if BT_HS is enabled (git-fixes).
- Bluetooth: Only mark socket zapped after unlocking (git-fixes).
- bnxt: do not enable NAPI until rings are ready (networking-stable-20_09_11).
- bnxt_en: Check for zero dir entries in NVRAM (networking-stable-20_09_11).
- brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach (git-fixes).
- brcmfmac: check ndev pointer (git-fixes).
- brcmsmac: fix memory leak in wlc_phy_attach_lcnphy (git-fixes).
- btrfs: check the right error variable in btrfs_del_dir_entries_in_log (bsc#1177687).
- btrfs: do not force read-only after error in drop snapshot (bsc#1176354).
- btrfs: do not set the full sync flag on the inode during page release (bsc#1177687).
- btrfs: fix incorrect updating of log root tree (bsc#1177687).
- btrfs: fix race between page release and a fast fsync (bsc#1177687).
- btrfs: only commit delayed items at fsync if we are logging a directory (bsc#1177687).
- btrfs: only commit the delayed inode when doing a full fsync (bsc#1177687).
- btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations (bsc#1177856).
- btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode (bsc#1177855).
- btrfs: reduce contention on log trees when logging checksums (bsc#1177687).
- btrfs: release old extent maps during page release (bsc#1177687).
- btrfs: remove no longer needed use of log_writers for the log root tree (bsc#1177687).
- btrfs: remove root usage from can_overcommit (bsc#1131277).
- btrfs: stop incremening log_batch for the log root tree when syncing log (bsc#1177687).
- btrfs: take overcommit into account in inc_block_group_ro (bsc#1176560).
- btrfs: tree-checker: fix false alert caused by legacy btrfs root item (bsc#1177861).
- can: c_can: reg_map_{c,d}_can: mark as __maybe_unused (git-fixes).
- can: flexcan: flexcan_chip_stop(): add error handling and propagate error value (git-fixes).
- can: softing: softing_card_shutdown(): add braces around empty body in an 'if' statement (git-fixes).
- ceph: fix memory leak in ceph_cleanup_snapid_map() (bsc#1178234).
- ceph: map snapid to anonymous bdev ID (bsc#1178234).
- ceph: promote to unsigned long long before shifting (bsc#1178187).
- clk: at91: clk-main: update key before writing AT91_CKGR_MOR (git-fixes).
- clk: at91: remove the checking of parent_name (git-fixes).
- clk: bcm2835: add missing release if devm_clk_hw_register fails (git-fixes).
- clk: imx8mq: Fix usdhc parents order (git-fixes).
- coredump: fix crash when umh is disabled (bsc#1177753).
- crypto: algif_skcipher - EBUSY on aio should be an error (git-fixes).
- crypto: ccp - fix error handling (git-fixes).
- crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call (git-fixes).
- crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() (git-fixes).
- crypto: omap-sham - fix digcnt register handling with export/import (git-fixes).
- cxl: Rework error message for incompatible slots (bsc#1055014 git-fixes).
- cypto: mediatek - fix leaks in mtk_desc_ring_alloc (git-fixes).
- Disable ipa-clones dump for KMP builds (bsc#1178330) The feature is not really useful for KMP, and rather confusing, so let's disable it at building out-of-tree codes
- dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status (git-fixes).
- drm/amdgpu: prevent double kfree ttm-&gt;sg (git-fixes).
- drm/gma500: fix error check (git-fixes).
- drm/msm: Drop debug print in _dpu_crtc_setup_lm_bounds() (git-fixes).
- drm/nouveau/mem: guard against NULL pointer access in mem_del (git-fixes).
- EDAC/i5100: Fix error handling order in i5100_init_one() (bsc#1112178).
- eeprom: at25: set minimum read/write access stride to 1 (git-fixes).
- Fix use after free in get_capset_info callback (git-fixes).
- gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY (networking-stable-20_08_24).
- gtp: add GTPA_LINK info to msg sent to userspace (networking-stable-20_09_11).
- HID: roccat: add bounds checking in kone_sysfs_write_settings() (git-fixes).
- HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery (git-fixes).
- i2c: imx: Fix external abort on interrupt in exit paths (git-fixes).
- ibmveth: Identify ingress large send packets (bsc#1178185 ltc#188897).
- ibmveth: Switch order of ibmveth_helper calls (bsc#1061843 git-fixes).
- ibmvnic: fix ibmvnic_set_mac (bsc#1066382 ltc#160943 git-fixes).
- ibmvnic: save changed mac address to adapter-&gt;mac_addr (bsc#1134760 ltc#177449 git-fixes).
- iio:accel:bma180: Fix use of true when should be iio_shared_by enum (git-fixes).
- iio:adc:max1118 Fix alignment of timestamp and data leak issues (git-fixes).
- iio:adc:ti-adc0832 Fix alignment issue with timestamp (git-fixes).
- iio:adc:ti-adc12138 Fix alignment issue with timestamp (git-fixes).
- iio:dac:ad5592r: Fix use of true for IIO_SHARED_BY_TYPE (git-fixes).
- iio:gyro:itg3200: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:light:si1145: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:magn:hmc5843: Fix passing true where iio_shared_by enum required (git-fixes).
- ima: Remove semicolon at the end of ima_get_binary_runtime_size() (git-fixes).
- include/linux/swapops.h: correct guards for non_swap_entry() (git-fixes (mm/swap)).
- Input: ep93xx_keypad - fix handling of platform_get_irq() error (git-fixes).
- Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 (git-fixes).
- Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() (git-fixes).
- Input: omap4-keypad - fix handling of platform_get_irq() error (git-fixes).
- Input: sun4i-ps2 - fix handling of platform_get_irq() error (git-fixes).
- Input: twl4030_keypad - fix handling of platform_get_irq() error (git-fixes).
- iomap: Make sure iomap_end is called after iomap_begin (bsc#1177754).
- ip: fix tos reflection in ack and reset packets (networking-stable-20_09_24).
- ipv4: Restore flowi4_oif update before call to xfrm_lookup_route (git-fixes).
- iwlwifi: mvm: split a print to avoid a WARNING in ROC (git-fixes).
- kbuild: enforce -Werror=return-type (bsc#1177281).
- leds: mt6323: move period calculation (git-fixes).
- lib/crc32.c: fix trivial typo in preprocessor condition (git-fixes).
- libceph: clear con-&gt;out_msg on Policy::stateful_server faults (bsc#1178188).
- livepatch: Test if -fdump-ipa-clones is really available As of now we add -fdump-ipa-clones unconditionally. It does not cause a trouble if the kernel is build with the supported toolchain. Otherwise it could fail easily. Do the correct thing and test for the availability.
- mac80211: handle lack of sband-&gt;bitrates in rates (git-fixes).
- mailbox: avoid timer start from callback (git-fixes).
- media: ati_remote: sanity check for both endpoints (git-fixes).
- media: bdisp: Fix runtime PM imbalance on error (git-fixes).
- media: exynos4-is: Fix a reference count leak (git-fixes).
- media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync (git-fixes).
- media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync (git-fixes).
- media: firewire: fix memory leak (git-fixes).
- media: m5mols: Check function pointer in m5mols_sensor_power (git-fixes).
- media: media/pci: prevent memory leak in bttv_probe (git-fixes).
- media: omap3isp: Fix memleak in isp_probe (git-fixes).
- media: platform: fcp: Fix a reference count leak (git-fixes).
- media: platform: s3c-camif: Fix runtime PM imbalance on error (git-fixes).
- media: platform: sti: hva: Fix runtime PM imbalance on error (git-fixes).
- media: Revert 'media: exynos4-is: Add missed check for pinctrl_lookup_state()' (git-fixes).
- media: s5p-mfc: Fix a reference count leak (git-fixes).
- media: saa7134: avoid a shift overflow (git-fixes).
- media: st-delta: Fix reference count leak in delta_run_work (git-fixes).
- media: sti: Fix reference count leaks (git-fixes).
- media: tc358743: initialize variable (git-fixes).
- media: ti-vpe: Fix a missing check and reference count leak (git-fixes).
- media: tuner-simple: fix regression in simple_set_radio_freq (git-fixes).
- media: usbtv: Fix refcounting mixup (git-fixes).
- media: uvcvideo: Ensure all probed info is returned to v4l2 (git-fixes).
- media: vsp1: Fix runtime PM imbalance on error (git-fixes).
- memory: fsl-corenet-cf: Fix handling of platform_get_irq() error (git-fixes).
- memory: omap-gpmc: Fix a couple off by ones (git-fixes).
- mfd: sm501: Fix leaks in probe() (git-fixes).
- mic: vop: copy data to kernel space then write to io memory (git-fixes).
- misc: mic: scif: Fix error handling path (git-fixes).
- misc: rtsx: Fix memory leak in rtsx_pci_probe (git-fixes).
- misc: vop: add round_up(x,4) for vring_size to avoid kernel panic (git-fixes).
- mlx5 PPC ringsize workaround (bsc#1173432).
- mlx5: remove support for ib_get_vector_affinity (bsc#1174748).
- mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa (git-fixes (mm/numa)).
- mm/huge_memory.c: use head to check huge zero page (git-fixes (mm/thp)).
- mm/ksm.c: do not WARN if page is still mapped in remove_stable_node() (git-fixes (mm/hugetlb)).
- mm/mempolicy.c: fix out of bounds write in mpol_parse_str() (git-fixes (mm/mempolicy)).
- mm/mempolicy.c: use match_string() helper to simplify the code (git-fixes (mm/mempolicy)).
- mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() (git-fixes (mm/writeback)).
- mm/page-writeback.c: improve arithmetic divisions (git-fixes (mm/writeback)).
- mm/page-writeback.c: use div64_ul() for u64-by-unsigned-long divide (git-fixes (mm/writeback)).
- mm/page_owner.c: remove drain_all_pages from init_early_allocated_pages (git-fixes (mm/debug)).
- mm/rmap: fixup copying of soft dirty and uffd ptes (git-fixes (mm/rmap)).
- mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: fix race condition in zs_destroy_pool (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: fix the migrated zspage statistics (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely (git-fixes (mm/zsmalloc)).
- mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() (git-fixes (mm/hugetlb)).
- mmc: sdio: Check for CISTPL_VERS_1 buffer size (git-fixes).
- Move upstreamed patches into sorted section
- mtd: lpddr: fix excessive stack usage with clang (git-fixes).
- mtd: mtdoops: Do not write panic data twice (git-fixes).
- mwifiex: do not call del_timer_sync() on uninitialized timer (git-fixes).
- mwifiex: Do not use GFP_KERNEL in atomic context (git-fixes).
- mwifiex: fix double free (git-fixes).
- mwifiex: remove function pointer check (git-fixes).
- mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO (git-fixes).
- net/mlx5e: Take common TIR context settings into a function (bsc#1177740).
- net/mlx5e: Turn on HW tunnel offload in all TIRs (bsc#1177740).
- net: disable netpoll on fresh napis (networking-stable-20_09_11).
- net: fec: Fix PHY init after phy_reset_after_clk_enable() (git-fixes).
- net: fec: Fix phy_device lookup for phy_reset_after_clk_enable() (git-fixes).
- net: Fix potential wrong skb-&gt;protocol in skb_vlan_untag() (networking-stable-20_08_24).
- net: hns: Fix memleak in hns_nic_dev_probe (networking-stable-20_09_11).
- net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC (networking-stable-20_09_24).
- net: phy: Avoid NPD upon phy_detach() when driver is unbound (networking-stable-20_09_24).
- net: qrtr: fix usage of idr in port assignment to socket (networking-stable-20_08_24).
- net: systemport: Fix memleak in bcm_sysport_probe (networking-stable-20_09_11).
- net: usb: dm9601: Add USB ID of Keenetic Plus DSL (networking-stable-20_09_11).
- net: usb: qmi_wwan: add Cellient MPL200 card (git-fixes).
- net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails (git-fixes).
- net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key() (git-fixes).
- netlabel: fix problems with mapping removal (networking-stable-20_09_11).
- nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() (git-fixes).
- nl80211: fix non-split wiphy information (git-fixes).
- NTB: hw: amd: fix an issue about leak system resources (git-fixes).
- nvme-rdma: fix crash due to incorrect cqe (bsc#1174748).
- nvme-rdma: fix crash when connect rejected (bsc#1174748).
- nvme: do not update disk info for multipathed device (bsc#1171558).
- platform/x86: mlx-platform: Remove PSU EEPROM configuration (git-fixes).
- powerpc/hwirq: Remove stale forward irq_chip declaration (bsc#1065729).
- powerpc/icp-hv: Fix missing of_node_put() in success path (bsc#1065729).
- powerpc/irq: Drop forward declaration of struct irqaction (bsc#1065729).
- powerpc/perf/hv-gpci: Fix starting index value (bsc#1065729).
- powerpc/powernv/dump: Fix race while processing OPAL dump (bsc#1065729).
- powerpc/powernv/elog: Fix race while processing OPAL error log event (bsc#1065729).
- powerpc/pseries: explicitly reschedule during drmem_lmb list traversal (bsc#1077428 ltc#163882 git-fixes).
- powerpc/pseries: Fix missing of_node_put() in rng_init() (bsc#1065729).
- powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation (bsc#1065729).
- pty: do tty_flip_buffer_push without port-&gt;lock in pty_write (git-fixes).
- pwm: lpss: Add range limit check for the base_unit register value (git-fixes).
- pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare() (git-fixes).
- ring-buffer: Return 0 on success from ring_buffer_resize() (git-fixes).
- rtl8xxxu: prevent potential memory leak (git-fixes).
- scsi: ibmvfc: Fix error return in ibmvfc_probe() (bsc#1065729).
- scsi: ibmvscsi: Fix potential race after loss of transport (bsc#1178166 ltc#188226).
- sctp: not disable bh in the whole sctp_get_port_local() (networking-stable-20_09_11).
- spi: fsl-espi: Only process interrupts for expected events (git-fixes).
- tg3: Fix soft lockup when tg3_reset_task() fails (networking-stable-20_09_11).
- tipc: fix memory leak caused by tipc_buf_append() (git-fixes).
- tipc: fix shutdown() of connection oriented socket (networking-stable-20_09_24).
- tipc: fix shutdown() of connectionless socket (networking-stable-20_09_11).
- tipc: fix the skb_unshare() in tipc_buf_append() (git-fixes).
- tipc: fix uninit skb-&gt;data in tipc_nl_compat_dumpit() (networking-stable-20_08_24).
- tipc: use skb_unshare() instead in tipc_buf_append() (networking-stable-20_09_24).
- tty: ipwireless: fix error handling (git-fixes).
- tty: serial: earlycon dependency (git-fixes).
- tty: serial: fsl_lpuart: fix lpuart32_poll_get_char (git-fixes).
- usb: cdc-acm: add quirk to blacklist ETAS ES58X devices (git-fixes).
- usb: cdc-acm: handle broken union descriptors (git-fixes).
- usb: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync() (git-fixes).
- usb: core: Solve race condition in anchor cleanup functions (git-fixes).
- usb: dwc2: Fix INTR OUT transfers in DDMA mode (git-fixes).
- usb: dwc2: Fix parameter type in function pointer prototype (git-fixes).
- usb: dwc3: core: add phy cleanup for probe error handling (git-fixes).
- usb: dwc3: core: do not trigger runtime pm when remove driver (git-fixes).
- usb: dwc3: ep0: Fix ZLP for OUT ep0 requests (git-fixes).
- usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets (git-fixes).
- usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above (git-fixes).
- usb: gadget: function: printer: fix use-after-free in __lock_acquire (git-fixes).
- usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well (git-fixes).
- usb: ohci: Default to per-port over-current protection (git-fixes).
- usb: serial: qcserial: fix altsetting probing (git-fixes).
- vfs: fix FIGETBSZ ioctl on an overlayfs file (bsc#1178202).
- video: fbdev: sis: fix null ptr dereference (git-fixes).
- video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error (git-fixes).
- VMCI: check return value of get_user_pages_fast() for errors (git-fixes).
- w1: mxc_w1: Fix timeout resolution problem leading to bus error (git-fixes).
- watchdog: iTCO_wdt: Export vendorsupport (bsc#1177101).
- watchdog: iTCO_wdt: Make ICH_RES_IO_SMI optional (bsc#1177101).
- wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 (git-fixes).
- writeback: Avoid skipping inode writeback (bsc#1177755).
- writeback: Fix sync livelock due to b_dirty_time processing (bsc#1177755).
- writeback: Protect inode-&gt;i_io_list with inode-&gt;i_lock (bsc#1177755).
- x86, fakenuma: Fix invalid starting node ID (git-fixes (mm/x86/fakenuma)).
- x86/apic: Unify duplicated local apic timer clockevent initialization (bsc#1112178).
- x86/fpu: Allow multiple bits in clearcpuid= parameter (bsc#1112178).
- x86/xen: disable Firmware First mode for correctable memory errors (bsc#1176713).
- xen/blkback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/events: add a new 'late EOI' evtchn framework (XSA-332 bsc#1177411).
- xen/events: add a proper barrier to 2-level uevent unmasking (XSA-332 bsc#1177411).
- xen/events: avoid removing an event channel while handling it (XSA-331 bsc#1177410).
- xen/events: block rogue events for some time (XSA-332 bsc#1177411).
- xen/events: defer eoi in case of excessive number of events (XSA-332 bsc#1177411).
- xen/events: do not use chip_data for legacy IRQs (XSA-332 bsc#1065600).
- xen/events: fix race in evtchn_fifo_unmask() (XSA-332 bsc#1177411).
- xen/events: switch user event channels to lateeoi model (XSA-332 bsc#1177411).
- xen/events: use a common cpu hotplug hook for event channels (XSA-332 bsc#1177411).
- xen/gntdev.c: Mark pages as dirty (bsc#1065600).
- xen/netback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/pciback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/scsiback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen: XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information (XSA-332 bsc#1065600).
- xfs: avoid infinite loop when cancelling CoW blocks after writeback failure (bsc#1178027).
- xfs: limit entries returned when counting fsmap records (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-10"/>
	<updated date="2020-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1055014">SUSE bug 1055014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061843">SUSE bug 1061843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066382">SUSE bug 1066382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077428">SUSE bug 1077428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131277">SUSE bug 1131277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134760">SUSE bug 1134760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170415">SUSE bug 1170415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173432">SUSE bug 1173432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174748">SUSE bug 1174748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176354">SUSE bug 1176354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176485">SUSE bug 1176485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176560">SUSE bug 1176560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176713">SUSE bug 1176713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176723">SUSE bug 1176723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177086">SUSE bug 1177086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177101">SUSE bug 1177101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177271">SUSE bug 1177271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177281">SUSE bug 1177281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177410">SUSE bug 1177410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177411">SUSE bug 1177411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177470">SUSE bug 1177470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177687">SUSE bug 1177687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177719">SUSE bug 1177719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177740">SUSE bug 1177740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177749">SUSE bug 1177749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177750">SUSE bug 1177750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177753">SUSE bug 1177753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177754">SUSE bug 1177754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177755">SUSE bug 1177755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177766">SUSE bug 1177766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177855">SUSE bug 1177855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177856">SUSE bug 1177856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177861">SUSE bug 1177861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178003">SUSE bug 1178003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178027">SUSE bug 1178027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178166">SUSE bug 1178166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178185">SUSE bug 1178185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178187">SUSE bug 1178187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178188">SUSE bug 1178188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178202">SUSE bug 1178202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178234">SUSE bug 1178234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178330">SUSE bug 1178330</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0430/">CVE-2020-0430</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14351/">CVE-2020-14351</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16120/">CVE-2020-16120</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25285/">CVE-2020-25285</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25656/">CVE-2020-25656</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27673/">CVE-2020-27673</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27675/">CVE-2020-27675</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496357" comment="kernel-docs-4.12.14-197.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496358" comment="kernel-obs-build-4.12.14-197.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496359" comment="kernel-source-4.12.14-197.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496360" comment="kernel-syms-4.12.14-197.67.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138243" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178387" ref_url="https://bugzilla.suse.com/1178387" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25692" ref_url="https://www.suse.com/security/cve/CVE-2020-25692/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007765.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules (bsc#1178387).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-12"/>
	<updated date="2020-11-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178387">SUSE bug 1178387</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25692/">CVE-2020-25692</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496361" comment="openldap2-devel-32bit-2.4.46-9.40.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138244" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1178750" ref_url="https://bugzilla.suse.com/1178750" source="BUGZILLA"/>
		<reference ref_id="1178752" ref_url="https://bugzilla.suse.com/1178752" source="BUGZILLA"/>
		<reference ref_id="1178753" ref_url="https://bugzilla.suse.com/1178753" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28362" ref_url="https://www.suse.com/security/cve/CVE-2020-28362/" source="CVE"/>
		<reference ref_id="CVE-2020-28366" ref_url="https://www.suse.com/security/cve/CVE-2020-28366/" source="CVE"/>
		<reference ref_id="CVE-2020-28367" ref_url="https://www.suse.com/security/cve/CVE-2020-28367/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3368-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007806.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

- go1.15.5 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages.
  * go#42553 math/big: panic during recursive division of very large numbers (bsc#1178750 CVE-2020-28362)
  * go#42560 cmd/go: arbitrary code can be injected into cgo generated files (bsc#1178752 CVE-2020-28367)
  * go#42557 cmd/go: improper validation of cgo flags can lead to remote code execution at build time (bsc#1178753 CVE-2020-28366)
  * go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces
  * go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3
  * go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo
  * go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
  * go#41914 net/http: request.Clone doesn't deep copy TransferEncoding
  * go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
  * go#41463 compress/flate: deflatefast produces corrupted output
  * go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
  * go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178750">SUSE bug 1178750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178752">SUSE bug 1178752</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178753">SUSE bug 1178753</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28362/">CVE-2020-28362</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-28366/">CVE-2020-28366</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-28367/">CVE-2020-28367</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496362" comment="go1.15-1.15.5-1.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496363" comment="go1.15-doc-1.15.5-1.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138245" version="1" class="patch">
	<metadata>
		<title>Security update for go1.14 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1164903" ref_url="https://bugzilla.suse.com/1164903" source="BUGZILLA"/>
		<reference ref_id="1178750" ref_url="https://bugzilla.suse.com/1178750" source="BUGZILLA"/>
		<reference ref_id="1178752" ref_url="https://bugzilla.suse.com/1178752" source="BUGZILLA"/>
		<reference ref_id="1178753" ref_url="https://bugzilla.suse.com/1178753" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28362" ref_url="https://www.suse.com/security/cve/CVE-2020-28362/" source="CVE"/>
		<reference ref_id="CVE-2020-28366" ref_url="https://www.suse.com/security/cve/CVE-2020-28366/" source="CVE"/>
		<reference ref_id="CVE-2020-28367" ref_url="https://www.suse.com/security/cve/CVE-2020-28367/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3369-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007807.html" source="SUSE-SU"/>
		<description>
This update for go1.14 fixes the following issues:

- go1.14.12 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages.
  * go#42553 math/big: panic during recursive division of very large numbers (bsc#1178750 CVE-2020-28362)
  * go#42560 cmd/go: arbitrary code can be injected into cgo generated files (bsc#1178752 CVE-2020-28367)
  * go#42557 cmd/go: improper validation of cgo flags can lead to remote code execution at build time (bsc#1178753 CVE-2020-28366)
  * go#42155 time: Location interprets wrong timezone (DST) with slim zoneinfo
  * go#42112 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
  * go#41991 runtime: macOS-only segfault on 1.14+ with 'split stack overflow'
  * go#41913 net/http: request.Clone doesn't deep copy TransferEncoding
  * go#41703 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
  * go#41386 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1164903">SUSE bug 1164903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178750">SUSE bug 1178750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178752">SUSE bug 1178752</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178753">SUSE bug 1178753</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28362/">CVE-2020-28362</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-28366/">CVE-2020-28366</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-28367/">CVE-2020-28367</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496364" comment="go1.14-1.14.12-1.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496365" comment="go1.14-doc-1.14.12-1.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138246" version="1" class="patch">
	<metadata>
		<title>Security update for dash (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178978" ref_url="https://bugzilla.suse.com/1178978" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:3480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007839.html" source="SUSE-SU"/>
		<description>
This update for dash fixes the following issues:

- Fixed an issue where code was executed even if noexec ('-n')  was specified (bsc#1178978).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-23"/>
	<updated date="2020-11-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1178978">SUSE bug 1178978</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496366" comment="dash-0.5.11.2-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138247" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1163592" ref_url="https://bugzilla.suse.com/1163592" source="BUGZILLA"/>
		<reference ref_id="1167030" ref_url="https://bugzilla.suse.com/1167030" source="BUGZILLA"/>
		<reference ref_id="1172873" ref_url="https://bugzilla.suse.com/1172873" source="BUGZILLA"/>
		<reference ref_id="1175306" ref_url="https://bugzilla.suse.com/1175306" source="BUGZILLA"/>
		<reference ref_id="1175721" ref_url="https://bugzilla.suse.com/1175721" source="BUGZILLA"/>
		<reference ref_id="1176855" ref_url="https://bugzilla.suse.com/1176855" source="BUGZILLA"/>
		<reference ref_id="1176907" ref_url="https://bugzilla.suse.com/1176907" source="BUGZILLA"/>
		<reference ref_id="1176983" ref_url="https://bugzilla.suse.com/1176983" source="BUGZILLA"/>
		<reference ref_id="1177703" ref_url="https://bugzilla.suse.com/1177703" source="BUGZILLA"/>
		<reference ref_id="1177819" ref_url="https://bugzilla.suse.com/1177819" source="BUGZILLA"/>
		<reference ref_id="1177820" ref_url="https://bugzilla.suse.com/1177820" source="BUGZILLA"/>
		<reference ref_id="1178123" ref_url="https://bugzilla.suse.com/1178123" source="BUGZILLA"/>
		<reference ref_id="1178393" ref_url="https://bugzilla.suse.com/1178393" source="BUGZILLA"/>
		<reference ref_id="1178589" ref_url="https://bugzilla.suse.com/1178589" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178686" ref_url="https://bugzilla.suse.com/1178686" source="BUGZILLA"/>
		<reference ref_id="1178765" ref_url="https://bugzilla.suse.com/1178765" source="BUGZILLA"/>
		<reference ref_id="1178782" ref_url="https://bugzilla.suse.com/1178782" source="BUGZILLA"/>
		<reference ref_id="927455" ref_url="https://bugzilla.suse.com/927455" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25704" ref_url="https://www.suse.com/security/cve/CVE-2020-25704/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007848.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software and services that rely on UDP source port randomization (like DNS) are indirectly affected as well. Kernel versions may be vulnerable to this issue (bsc#1175721, bsc#1178782).
- CVE-2020-25704: Fixed a memory leak in perf_event_parse_addr_filter() (bsc#1178393).
- CVE-2020-25668: Fixed a use-after-free in con_font_op() (bnc#1178123).

The following non-security bugs were fixed:

- 9P: Cast to loff_t before multiplying (git-fixes).
- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (git-fixes).
- ACPI: debug: do not allow debugging when ACPI is disabled (git-fixes).
- ACPI: dock: fix enum-conversion warning (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- ALSA: hda - Fix the return value if cb func is already registered (git-fixes).
- ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes).
- ata: sata_rcar: Fix DMA boundary mask (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled (git-fixes).
- ath10k: start recovery process when payload length exceeds max htc length for sdio (git-fixes).
- bus/fsl_mc: Do not rely on caller to provide non NULL mc_io (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on (git-fixes).
- can: peak_usb: add range checking in decode operations (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping (git-fixes).
- can: rx-offload: do not call kfree_skb() from IRQ context (git-fixes).
- clk: ti: clockdomain: fix static checker warning (git-fixes).
- crypto: bcm - Verify GCM/CCM key length in setkey (git-fixes).
- device property: Do not clear secondary pointer for shared primary firmware node (git-fixes).
- device property: Keep secondary firmware node secondary by type (git-fixes).
- drbd: code cleanup by using sendpage_ok() to check page for kernel_sendpage() (bsc#1172873).
- drm/amd/display: Do not invoke kgdb_breakpoint() unconditionally (git-fixes).
- drm/amd/display: HDMI remote sink need mode validation for Linux (git-fixes).
- drm/amdgpu: do not map BO in reserved region (git-fixes).
- drm/bridge/synopsys: dsi: add support for non-continuous HS clock (git-fixes).
- drm/brige/megachips: Add checking if ge_b850v3_lvds_init() is working correctly (git-fixes).
- drm/i915: Break up error capture compression loops with cond_resched() (git-fixes).
- drm/i915: Force VT'd workarounds when running as a guest OS (git-fixes).
- drm/imx: tve remove extraneous type qualifier (git-fixes).
- drm/ttm: fix eviction valuable range check (git-fixes).
- drm/vc4: drv: Add error handding for bind (git-fixes).
- efivarfs: Replace invalid slashes with exclamation marks in dentries (git-fixes).
- ftrace: Fix recursion check for NMI test (git-fixes).
- ftrace: Handle tracing when switching between context (git-fixes).
- hv_netvsc: Add XDP support (bsc#1177819, bsc#1177820).
- hv_netvsc: Fix XDP refcnt for synthetic and VF NICs (bsc#1177819, bsc#1177820).
- hyperv_fb: Update screen_info after removing old framebuffer (bsc#1175306).
- icmp: randomize the global rate limiter (git-fixes).
- kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function (git-fixes).
- libceph: use sendpage_ok() in ceph_tcp_sendpage() (bsc#1172873).
- media: platform: Improve queue set up flow for bug fixing (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get (git-fixes).
- memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event (bsc#1177703).
- mmc: sdhci-of-esdhc: Handle pulse width detection erratum for more SoCs (git-fixes).
- mmc: sdhci-of-esdhc: set timeout to max before tuning (git-fixes).
- mm/memcg: fix refcount error while moving and swapping (bsc#1178686).
- Move the upstreamed powercap fix into sorted sectio
- mtd: lpddr: Fix bad logic in print_drs_error (git-fixes).
- net: add WARN_ONCE in kernel_sendpage() for improper zero-copy send (bsc#1172873).
- net: introduce helper sendpage_ok() in include/linux/net.h (bsc#1172873).
- net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition (git-fixes).
- nvme-tcp: check page by sendpage_ok() before calling kernel_sendpage() (bsc#1172873).
- p54: avoid accessing the data mapped to streaming DMA (git-fixes).
- pinctrl: intel: Set default bias in case no particular value given (git-fixes).
- powerpc/pseries/cpuidle: add polling idle for shared processor guests (bsc#1178765 ltc#188968).
- powerpc/vnic: Extend 'failover pending' window (bsc#1176855 ltc#187293).
- power: supply: test_power: add missing newlines when printing parameters by sysfs (git-fixes).
- regulator: defer probe when trying to get voltage from unresolved supply (git-fixes).
- regulator: resolve supply after creating regulator (git-fixes).
- ring-buffer: Fix recursion protection transitions between interrupt context (git-fixes).
- rpm/kernel-module-subpackage: make Group tag optional (bsc#1163592)
- scsi: libiscsi: use sendpage_ok() in iscsi_tcp_segment_map() (bsc#1172873).
- staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error (git-fixes).
- staging: octeon: repair 'fixed-link' support (git-fixes).
- thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() (git-fixes).
- USB: Add NO_LPM quirk for Kingston flash drive (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- usb: host: fsl-mph-dr-of: check return of dma_set_mask() (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231 (git-fixes).
- USB: serial: option: add Quectel EC200T module support (git-fixes).
- USB: serial: option: add Telit FN980 composition 0x1055 (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart (git-fixes).
- usb: typec: tcpm: reset hard_reset_count for any disconnect (git-fixes).
- video: fbdev: pvr2fb: initialize variables (git-fixes).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV Gen 1 VMs (bsc#1175306).
- vt: Disable KD_FONT_OP_COPY (bsc#1178589).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params (bsc#1175306).
- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels (bsc#1058115 bsc#1176907).
- xfs: do not update mtime on COW faults (bsc#1167030).
- xfs: fix a missing unlock on error in xfs_fs_map_blocks (git-fixes).
- xfs: fix flags argument to rmap lookup when converting shared file rmaps (git-fixes).
- xfs: fix rmap key and record comparison functions (git-fixes).
- xfs: flush new eof page on truncate to avoid post-eof corruption (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-24"/>
	<updated date="2020-11-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163592">SUSE bug 1163592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167030">SUSE bug 1167030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172873">SUSE bug 1172873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175306">SUSE bug 1175306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175721">SUSE bug 1175721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176855">SUSE bug 1176855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176907">SUSE bug 1176907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176983">SUSE bug 1176983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177703">SUSE bug 1177703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177819">SUSE bug 1177819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177820">SUSE bug 1177820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178123">SUSE bug 1178123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178393">SUSE bug 1178393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178589">SUSE bug 1178589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178686">SUSE bug 1178686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178765">SUSE bug 1178765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178782">SUSE bug 1178782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927455">SUSE bug 927455</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25704/">CVE-2020-25704</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496367" comment="kernel-docs-4.12.14-197.72.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496368" comment="kernel-obs-build-4.12.14-197.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496369" comment="kernel-source-4.12.14-197.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496370" comment="kernel-syms-4.12.14-197.72.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138248" version="1" class="patch">
	<metadata>
		<title>Security update for pcp (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1129991" ref_url="https://bugzilla.suse.com/1129991" source="BUGZILLA"/>
		<reference ref_id="1152763" ref_url="https://bugzilla.suse.com/1152763" source="BUGZILLA"/>
		<reference ref_id="1153921" ref_url="https://bugzilla.suse.com/1153921" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3695" ref_url="https://www.suse.com/security/cve/CVE-2019-3695/" source="CVE"/>
		<reference ref_id="CVE-2019-3696" ref_url="https://www.suse.com/security/cve/CVE-2019-3696/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006467.html" source="SUSE-SU"/>
		<description>
This update for pcp fixes the following issues:

Security issue fixed:

- CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update (bsc#1152763).

Non-security issue fixed:

- Fixed an dependency issue with pcp2csv (bsc#1129991).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-07"/>
	<updated date="2020-02-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1129991">SUSE bug 1129991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152763">SUSE bug 1152763</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153921">SUSE bug 1153921</bugzilla>
	<cve impact="moderate" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3695/">CVE-2019-3695</cve>
	<cve impact="moderate" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3696/">CVE-2019-3696</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496371" comment="libpcp-devel-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496372" comment="libpcp3-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496373" comment="libpcp_gui2-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496374" comment="libpcp_import1-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496375" comment="libpcp_mmv1-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496376" comment="libpcp_trace2-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496377" comment="libpcp_web1-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496378" comment="pcp-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496379" comment="pcp-conf-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496380" comment="pcp-devel-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496381" comment="pcp-doc-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496382" comment="pcp-import-iostat2pcp-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496383" comment="pcp-import-mrtg2pcp-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496384" comment="pcp-import-sar2pcp-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496385" comment="pcp-pmda-perfevent-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496386" comment="pcp-system-tools-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496387" comment="perl-PCP-LogImport-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496388" comment="perl-PCP-LogSummary-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496389" comment="perl-PCP-MMV-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496390" comment="perl-PCP-PMDA-4.3.1-3.5.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496391" comment="python3-pcp-4.3.1-3.5.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138249" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174908" ref_url="https://bugzilla.suse.com/1174908" source="BUGZILLA"/>
		<reference ref_id="1177596" ref_url="https://bugzilla.suse.com/1177596" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14360" ref_url="https://www.suse.com/security/cve/CVE-2020-14360/" source="CVE"/>
		<reference ref_id="CVE-2020-25712" ref_url="https://www.suse.com/security/cve/CVE-2020-25712/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3586-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007900.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2020-25712: Fixed a heap-based buffer overflow which could have led to privilege escalation (bsc#1177596).
- CVE-2020-14360: Fixed an out of bounds memory accesses on too short request which could lead to denial of service (bsc#1174908).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-01"/>
	<updated date="2020-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174908">SUSE bug 1174908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177596">SUSE bug 1177596</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14360/">CVE-2020-14360</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25712/">CVE-2020-25712</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496392" comment="xorg-x11-server-sdk-1.20.3-14.5.13.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138250" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="1179193" ref_url="https://bugzilla.suse.com/1179193" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007908.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

Update to 3.6.12 (bsc#1179193), including:

- Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-02"/>
	<updated date="2020-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179193">SUSE bug 1179193</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496393" comment="python3-tools-3.6.12-3.64.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138251" version="1" class="patch">
	<metadata>
		<title>Security update for rpmlint (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1169614" ref_url="https://bugzilla.suse.com/1169614" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:3613-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007913.html" source="SUSE-SU"/>
		<description>
This update for rpmlint fixes the following issues:

- Whitelist PAM modules and DBUS rules for cockpit (bsc#1169614)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1169614">SUSE bug 1169614</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496394" comment="rpmlint-1.10-7.22.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138252" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1067665" ref_url="https://bugzilla.suse.com/1067665" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1158775" ref_url="https://bugzilla.suse.com/1158775" source="BUGZILLA"/>
		<reference ref_id="1170139" ref_url="https://bugzilla.suse.com/1170139" source="BUGZILLA"/>
		<reference ref_id="1170630" ref_url="https://bugzilla.suse.com/1170630" source="BUGZILLA"/>
		<reference ref_id="1172542" ref_url="https://bugzilla.suse.com/1172542" source="BUGZILLA"/>
		<reference ref_id="1174726" ref_url="https://bugzilla.suse.com/1174726" source="BUGZILLA"/>
		<reference ref_id="1175916" ref_url="https://bugzilla.suse.com/1175916" source="BUGZILLA"/>
		<reference ref_id="1176109" ref_url="https://bugzilla.suse.com/1176109" source="BUGZILLA"/>
		<reference ref_id="1177304" ref_url="https://bugzilla.suse.com/1177304" source="BUGZILLA"/>
		<reference ref_id="1177397" ref_url="https://bugzilla.suse.com/1177397" source="BUGZILLA"/>
		<reference ref_id="1177805" ref_url="https://bugzilla.suse.com/1177805" source="BUGZILLA"/>
		<reference ref_id="1177808" ref_url="https://bugzilla.suse.com/1177808" source="BUGZILLA"/>
		<reference ref_id="1177819" ref_url="https://bugzilla.suse.com/1177819" source="BUGZILLA"/>
		<reference ref_id="1177820" ref_url="https://bugzilla.suse.com/1177820" source="BUGZILLA"/>
		<reference ref_id="1178182" ref_url="https://bugzilla.suse.com/1178182" source="BUGZILLA"/>
		<reference ref_id="1178589" ref_url="https://bugzilla.suse.com/1178589" source="BUGZILLA"/>
		<reference ref_id="1178635" ref_url="https://bugzilla.suse.com/1178635" source="BUGZILLA"/>
		<reference ref_id="1178669" ref_url="https://bugzilla.suse.com/1178669" source="BUGZILLA"/>
		<reference ref_id="1178838" ref_url="https://bugzilla.suse.com/1178838" source="BUGZILLA"/>
		<reference ref_id="1178853" ref_url="https://bugzilla.suse.com/1178853" source="BUGZILLA"/>
		<reference ref_id="1178854" ref_url="https://bugzilla.suse.com/1178854" source="BUGZILLA"/>
		<reference ref_id="1178878" ref_url="https://bugzilla.suse.com/1178878" source="BUGZILLA"/>
		<reference ref_id="1178886" ref_url="https://bugzilla.suse.com/1178886" source="BUGZILLA"/>
		<reference ref_id="1178897" ref_url="https://bugzilla.suse.com/1178897" source="BUGZILLA"/>
		<reference ref_id="1178940" ref_url="https://bugzilla.suse.com/1178940" source="BUGZILLA"/>
		<reference ref_id="1178962" ref_url="https://bugzilla.suse.com/1178962" source="BUGZILLA"/>
		<reference ref_id="1179107" ref_url="https://bugzilla.suse.com/1179107" source="BUGZILLA"/>
		<reference ref_id="1179140" ref_url="https://bugzilla.suse.com/1179140" source="BUGZILLA"/>
		<reference ref_id="1179141" ref_url="https://bugzilla.suse.com/1179141" source="BUGZILLA"/>
		<reference ref_id="1179211" ref_url="https://bugzilla.suse.com/1179211" source="BUGZILLA"/>
		<reference ref_id="1179213" ref_url="https://bugzilla.suse.com/1179213" source="BUGZILLA"/>
		<reference ref_id="1179259" ref_url="https://bugzilla.suse.com/1179259" source="BUGZILLA"/>
		<reference ref_id="1179403" ref_url="https://bugzilla.suse.com/1179403" source="BUGZILLA"/>
		<reference ref_id="1179406" ref_url="https://bugzilla.suse.com/1179406" source="BUGZILLA"/>
		<reference ref_id="1179418" ref_url="https://bugzilla.suse.com/1179418" source="BUGZILLA"/>
		<reference ref_id="1179421" ref_url="https://bugzilla.suse.com/1179421" source="BUGZILLA"/>
		<reference ref_id="1179424" ref_url="https://bugzilla.suse.com/1179424" source="BUGZILLA"/>
		<reference ref_id="1179426" ref_url="https://bugzilla.suse.com/1179426" source="BUGZILLA"/>
		<reference ref_id="1179427" ref_url="https://bugzilla.suse.com/1179427" source="BUGZILLA"/>
		<reference ref_id="1179429" ref_url="https://bugzilla.suse.com/1179429" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15436" ref_url="https://www.suse.com/security/cve/CVE-2020-15436/" source="CVE"/>
		<reference ref_id="CVE-2020-15437" ref_url="https://www.suse.com/security/cve/CVE-2020-15437/" source="CVE"/>
		<reference ref_id="CVE-2020-25669" ref_url="https://www.suse.com/security/cve/CVE-2020-25669/" source="CVE"/>
		<reference ref_id="CVE-2020-27777" ref_url="https://www.suse.com/security/cve/CVE-2020-27777/" source="CVE"/>
		<reference ref_id="CVE-2020-28915" ref_url="https://www.suse.com/security/cve/CVE-2020-28915/" source="CVE"/>
		<reference ref_id="CVE-2020-28974" ref_url="https://www.suse.com/security/cve/CVE-2020-28974/" source="CVE"/>
		<reference ref_id="CVE-2020-29371" ref_url="https://www.suse.com/security/cve/CVE-2020-29371/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007941.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141).
- CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140).
- CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182).
- CVE-2020-27777: Restrict RTAS requests from userspace  (bsc#1179107).
- CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory (bsc#1178886).
- CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel (bsc#1178589).
- CVE-2020-29371: Fixed uninitialized memory leaks to userspace (bsc#1179429).

The following non-security bugs were fixed:

- ACPI: GED: fix -Wformat (git-fixes).
- ALSA: ctl: fix error path at adding user-defined element set (git-fixes).
- ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() (git-fixes).
- ALSA: mixart: Fix mutex deadlock (git-fixes).
- arm64: KVM: Fix system register enumeration (bsc#1174726).
- arm/arm64: KVM: Add PSCI version selection API (bsc#1174726).
- ASoC: qcom: lpass-platform: Fix memory leak (git-fixes).
- ath10k: Acquire tx_lock in tx error paths (git-fixes).
- batman-adv: set .owner to THIS_MODULE (git-fixes).
- Bluetooth: btusb: Fix and detect most of the Chinese Bluetooth controllers (git-fixes).
- Bluetooth: hci_bcm: fix freeing not-requested IRQ (git-fixes).
- bpf: Zero-fill re-used per-cpu map element (git-fixes).
- btrfs: account ticket size at add/delete time (bsc#1178897).
- btrfs: add helper to obtain number of devices with ongoing dev-replace (bsc#1178897).
- btrfs: check rw_devices, not num_devices for balance (bsc#1178897).
- btrfs: do not delete mismatched root refs (bsc#1178962).
- btrfs: fix btrfs_calc_reclaim_metadata_size calculation (bsc#1178897).
- btrfs: fix force usage in inc_block_group_ro (bsc#1178897).
- btrfs: fix invalid removal of root ref (bsc#1178962).
- btrfs: fix reclaim counter leak of space_info objects (bsc#1178897).
- btrfs: fix reclaim_size counter leak after stealing from global reserve (bsc#1178897).
- btrfs: kill min_allocable_bytes in inc_block_group_ro (bsc#1178897).
- btrfs: rework arguments of btrfs_unlink_subvol (bsc#1178962).
- btrfs: split dev-replace locking helpers for read and write (bsc#1178897). 
- can: af_can: prevent potential access of uninitialized member in canfd_rcv() (git-fixes).
- can: af_can: prevent potential access of uninitialized member in can_rcv() (git-fixes).
- can: dev: can_restart(): post buffer from the right context (git-fixes).
- can: gs_usb: fix endianess problem with candleLight firmware (git-fixes).
- can: m_can: fix nominal bitiming tseg2 min for version &gt;= 3.1 (git-fixes).
- can: m_can: m_can_handle_state_change(): fix state change (git-fixes).
- can: m_can: m_can_stop(): set device to software init mode before closing (git-fixes).
- can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb() (git-fixes).
- can: peak_usb: fix potential integer overflow on shift of a int (git-fixes).
- ceph: add check_session_state() helper and make it global (bsc#1179259).
- ceph: check session state after bumping session-&gt;s_seq (bsc#1179259).
- ceph: fix race in concurrent __ceph_remove_cap invocations (bsc#1178635).
- cifs: Fix incomplete memory allocation on setxattr path (bsc#1179211).
- cifs: remove bogus debug code (bsc#1179427).
- cifs: Return the error from crypt_message when enc/dec key not found (bsc#1179426).
- Convert trailing spaces and periods in path components (bsc#1179424).
- docs: ABI: stable: remove a duplicated documentation (git-fixes).
- docs: ABI: sysfs-c2port: remove a duplicated entry (git-fixes).
- Drivers: hv: vmbus: Remove the unused 'tsc_page' from struct hv_context (git-fixes).
- drm/i915/gvt: Set ENHANCED_FRAME_CAP bit (git-fixes).
- drm/sun4i: dw-hdmi: fix error return code in sun8i_dw_hdmi_bind() (git-fixes).
- Drop sysctl files for dropped archs, add ppc64le and arm64 (bsc#1178838). Also fix the ppc64 page size.
- efi: cper: Fix possible out-of-bounds access (git-fixes).
- efi/efivars: Add missing kobject_put() in sysfs entry creation error path (git-fixes).
- efi/esrt: Fix reference count leak in esre_create_sysfs_entry (git-fixes).
- efi: provide empty efi_enter_virtual_mode implementation (git-fixes).
- efivarfs: fix memory leak in efivarfs_create() (git-fixes).
- efivarfs: revert 'fix memory leak in efivarfs_create()' (git-fixes).
- efi/x86: Do not panic or BUG() on non-critical error conditions (git-fixes).
- efi/x86: Free efi_pgd with free_pages() (bsc#1112178).
- efi/x86: Ignore the memory attributes table on i386 (git-fixes).
- efi/x86: Map the entire EFI vendor string before copying it (git-fixes).
- fs/proc/array.c: allow reporting eip/esp for all coredumping threads (bsc#1050549).
- fuse: fix page dereference after free (bsc#1179213).
- futex: Do not enable IRQs unconditionally in put_pi_state() (bsc#1067665).
- futex: Handle transient 'ownerless' rtmutex state correctly (bsc#1067665).
- hv_balloon: disable warning when floor reached (git-fixes).
- hv_netvsc: deal with bpf API differences in 4.12 (bsc#1177819, bsc#1177820).
- hv_netvsc: make recording RSS hash depend on feature flag (bsc#1178853, bsc#1178854).
- hv_netvsc: record hardware hash in skb (bsc#1178853, bsc#1178854).
- i40iw: Fix error handling in i40iw_manage_arp_cache() (bsc#1111666)
- i40iw: fix null pointer dereference on a null wqe pointer (bsc#1111666)
- i40iw: Report correct firmware version (bsc#1111666)
- IB/cma: Fix ports memory leak in cma_configfs (bsc#1111666)
- IB/core: Set qp-&gt;real_qp before it may be accessed (bsc#1111666)
- IB/hfi1: Add missing INVALIDATE opcodes for trace (bsc#1111666)
- IB/hfi1: Add RcvShortLengthErrCnt to hfi1stats (bsc#1111666)
- IB/hfi1: Add software counter for ctxt0 seq drop (bsc#1111666)
- IB/hfi1: Avoid hardlockup with flushlist_lock (bsc#1111666)
- IB/hfi1: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666)
- IB/hfi1: Check for error on call to alloc_rsm_map_table (bsc#1111666)
- IB/hfi1: Close PSM sdma_progress sleep window (bsc#1111666)
- IB/hfi1: Define variables as unsigned long to fix KASAN warning (bsc#1111666)
- IB/hfi1: Ensure full Gen3 speed in a Gen4 system (bsc#1111666)
- IB/hfi1: Fix memory leaks in sysfs registration and unregistration (bsc#1111666)
- IB/hfi1: Fix Spectre v1 vulnerability (bsc#1111666)
- IB/hfi1: Handle port down properly in pio (bsc#1111666)
- IB/hfi1: Handle wakeup of orphaned QPs for pio (bsc#1111666)
- IB/hfi1: Insure freeze_work work_struct is canceled on shutdown (bsc#1111666)
- IB/hfi1, qib: Ensure RCU is locked when accessing list (bsc#1111666)
- IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM (bsc#1111666)
- IB/hfi1: Remove unused define (bsc#1111666)
- IB/hfi1: Silence txreq allocation warnings (bsc#1111666)
- IB/hfi1: Validate page aligned for a given virtual address (bsc#1111666)
- IB/hfi1: Wakeup QPs orphaned on wait list after flush (bsc#1111666)
- IB/ipoib: drop useless LIST_HEAD (bsc#1111666)
- IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode (bsc#1111666)
- IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start (bsc#1111666)
- IB/iser: Fix dma_nents type definition (bsc#1111666)
- IB/iser: Pass the correct number of entries for dma mapped SGL (bsc#1111666)
- IB/mad: Fix use-after-free in ib mad completion handling (bsc#1111666)
- IB/mlx4: Add and improve logging (bsc#1111666)
- IB/mlx4: Add support for MRA (bsc#1111666)
- IB/mlx4: Adjust delayed work when a dup is observed (bsc#1111666)
- IB/mlx4: Fix leak in id_map_find_del (bsc#1111666)
- IB/mlx4: Fix memory leak in add_gid error flow (bsc#1111666)
- IB/mlx4: Fix race condition between catas error reset and aliasguid flows (bsc#1111666)
- IB/mlx4: Fix starvation in paravirt mux/demux (bsc#1111666)
- IB/mlx4: Follow mirror sequence of device add during device removal (bsc#1111666)
- IB/mlx4: Remove unneeded NULL check (bsc#1111666)
- IB/mlx4: Test return value of calls to ib_get_cached_pkey (bsc#1111666)
- IB/mlx5: Add missing XRC options to QP optional params mask (bsc#1111666)
- IB/mlx5: Compare only index part of a memory window rkey (bsc#1111666)
- IB/mlx5: Do not override existing ip_protocol (bsc#1111666)
- IB/mlx5: Fix clean_mr() to work in the expected order (bsc#1111666)
- IB/mlx5: Fix implicit MR release flow (bsc#1111666)
- IB/mlx5: Fix outstanding_pi index for GSI qps (bsc#1111666)
- IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification (bsc#1111666)
- IB/mlx5: Fix unreg_umr to ignore the mkey state (bsc#1111666)
- IB/mlx5: Improve ODP debugging messages (bsc#1111666)
- IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache (bsc#1111666)
- IB/mlx5: Prevent concurrent MR updates during invalidation (bsc#1111666)
- IB/mlx5: Reset access mask when looping inside page fault handler (bsc#1111666)
- IB/mlx5: Set correct write permissions for implicit ODP MR (bsc#1111666)
- IB/mlx5: Use direct mkey destroy command upon UMR unreg failure (bsc#1111666)
- IB/mlx5: Use fragmented QP's buffer for in-kernel users (bsc#1111666)
- IB/mlx5: WQE dump jumps over first 16 bytes (bsc#1111666)
- IB/mthca: fix return value of error branch in mthca_init_cq() (bsc#1111666)
- IB/qib: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666)
- IB/qib: Fix an error code in qib_sdma_verbs_send() (bsc#1111666)
- IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value (bsc#1111666)
- IB/qib: Remove a set-but-not-used variable (bsc#1111666)
- IB/rdmavt: Convert timers to use timer_setup() (bsc#1111666)
- IB/rdmavt: Fix alloc_qpn() WARN_ON() (bsc#1111666)
- IB/rdmavt: Fix sizeof mismatch (bsc#1111666)
- IB/rdmavt: Reset all QPs when the device is shut down (bsc#1111666)
- IB/rxe: Fix incorrect cache cleanup in error flow (bsc#1111666)
- IB/rxe: Make counters thread safe (bsc#1111666)
- IB/srpt: Fix memory leak in srpt_add_one (bsc#1111666)
- IB/umad: Avoid additional device reference during open()/close() (bsc#1111666)
- IB/umad: Avoid destroying device while it is accessed (bsc#1111666)
- IB/umad: Do not check status of nonseekable_open() (bsc#1111666)
- IB/umad: Fix kernel crash while unloading ib_umad (bsc#1111666)
- IB/umad: Refactor code to use cdev_device_add() (bsc#1111666)
- IB/umad: Simplify and avoid dynamic allocation of class (bsc#1111666)
- IB/usnic: Fix out of bounds index check in query pkey (bsc#1111666)
- IB/uverbs: Fix OOPs upon device disassociation (bsc#1111666)
- iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode (git-fixes).
- iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum (git-fixes).
- inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() (git-fixes).
- Input: adxl34x - clean up a data type in adxl34x_probe() (git-fixes).
- iw_cxgb4: fix ECN check on the passive accept (bsc#1111666)
- iw_cxgb4: only reconnect with MPAv1 if the peer aborts (bsc#1111666)
- kABI: add back flush_dcache_range (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- kABI workaround for usermodehelper changes (bsc#1179406).
- KVM: arm64: Add missing #include of -&lt;linux/string.h&gt; in guest.c (bsc#1174726).
- KVM: arm64: Factor out core register ID enumeration (bsc#1174726).
- KVM: arm64: Filter out invalid core register IDs in KVM_GET_REG_LIST (bsc#1174726).
- KVM: arm64: Refactor kvm_arm_num_regs() for easier maintenance (bsc#1174726).
- KVM: arm64: Reject ioctl access to FPSIMD V-regs on SVE vcpus (bsc#1174726).
- KVM host: kabi fixes for psci_version (bsc#1174726).
- libnvdimm/nvdimm/flush: Allow architecture to override the flush barrier (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- locking/lockdep: Add debug_locks check in __lock_downgrade() (bsc#1050549).
- locking/percpu-rwsem: Use this_cpu_{inc,dec}() for read_count (bsc#1050549).
- locktorture: Print ratio of acquisitions, not failures (bsc#1050549).
- mac80211: always wind down STA state (git-fixes).
- mac80211: free sta in sta_info_insert_finish() on errors (git-fixes).
- mac80211: minstrel: fix tx status processing corner case (git-fixes).
- mac80211: minstrel: remove deferred sampling code (git-fixes).
- mm: always have io_remap_pfn_range() set pgprot_decrypted() (bsc#1112178).
- net: ena: Capitalize all log strings and improve code readability (bsc#1177397).
- net: ena: Change license into format to SPDX in all files (bsc#1177397).
- net: ena: Change log message to netif/dev function (bsc#1177397).
- net: ena: Change RSS related macros and variables names (bsc#1177397).
- net: ena: ethtool: Add new device statistics (bsc#1177397).
- net: ena: ethtool: add stats printing to XDP queues (bsc#1177397).
- net: ena: ethtool: convert stat_offset to 64 bit resolution (bsc#1177397).
- net: ena: Fix all static chekers' warnings (bsc#1177397).
- net: ena: Remove redundant print of placement policy (bsc#1177397).
- net: ena: xdp: add queue counters for xdp actions (bsc#1177397).
- netfilter: nat: can't use dst_hold on noref dst (bsc#1178878).
- net/mlx4_core: Fix init_hca fields offset (git-fixes).
- nfc: s3fwrn5: use signed integer for parsing GPIO numbers (git-fixes).
- NFS: mark nfsiod as CPU_INTENSIVE (bsc#1177304).
- NFS: only invalidate dentrys that are clearly invalid (bsc#1178669 bsc#1170139).
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (bsc#1170630).
- PCI: pci-hyperv: Fix build errors on non-SYSFS config (git-fixes).
- pinctrl: amd: fix incorrect way to disable debounce filter (git-fixes).
- pinctrl: amd: use higher precision for 512 RtcClk (git-fixes).
- pinctrl: aspeed: Fix GPI only function problem (git-fixes).
- platform/x86: toshiba_acpi: Fix the wrong variable assignment (git-fixes).
- powerpc/32: define helpers to get L1 cache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/64: flush_inval_dcache_range() becomes flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/64: reuse PPC32 static inline flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc: Chunk calls to flush_dcache_range in arch_*_memory (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964 git-fixes).
- powerpc: define helpers to get L1 icache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/mm: Flush cache on memory hot(un)plug (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Add flush routines using new pmem store and sync instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Add new instructions for persistent storage and sync (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Avoid the barrier in flush routines (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Fix kernel crash due to wrong range value usage in flush_dcache_range (jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Initialize pmem device on newer hardware (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Restrict papr_scm to P8 and above (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Update ppc64 to use the new barrier instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- RDMA/bnxt_re: Fix lifetimes in bnxt_re_task (bsc#1111666)
- RDMA/bnxt_re: Fix Send Work Entry state check while polling completions (bsc#1111666)
- RDMA/bnxt_re: Fix sizeof mismatch for allocation of pbl_tbl. (bsc#1111666)
- RDMA/bnxt_re: Fix stack-out-of-bounds in bnxt_qplib_rcfw_send_message (bsc#1111666)
- RDMA/cma: add missed unregister_pernet_subsys in init failure (bsc#1111666)
- RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (bsc#1111666)
- RDMA/cma: Fix false error message (bsc#1111666)
- RDMA/cma: fix null-ptr-deref Read in cma_cleanup (bsc#1111666)
- RDMA/cma: Protect bind_list and listen_list while finding matching cm id (bsc#1111666)
- RDMA/cm: Fix checking for allowed duplicate listens (bsc#1111666)
- RDMA/cm: Remove a race freeing timewait_info (bsc#1111666)
- RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow (bsc#1111666)
- RDMA/core: Do not depend device ODP capabilities on kconfig option (bsc#1111666)
- RDMA/core: Fix invalid memory access in spec_filter_size (bsc#1111666)
- RDMA/core: Fix locking in ib_uverbs_event_read (bsc#1111666)
- RDMA/core: Fix protection fault in ib_mr_pool_destroy (bsc#1111666)
- RDMA/core: Fix race between destroy and release FD object (bsc#1111666)
- RDMA/core: Fix race when resolving IP address (bsc#1111666)
- RDMA/core: Prevent mixed use of FDs between shared ufiles (bsc#1111666)
- RDMA/cxgb3: Delete and properly mark unimplemented resize CQ function (bsc#1111666)
- RDMA: Directly cast the sockaddr union to sockaddr (bsc#1111666)
- RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN (bsc#1111666)
- RDMA/hns: Correct typo of hns_roce_create_cq() (bsc#1111666)
- RDMA/hns: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/hns: Set the unsupported wr opcode (bsc#1111666)
- RDMA/i40iw: fix a potential NULL pointer dereference (bsc#1111666)
- RDMA/i40iw: Set queue pair state when being queried (bsc#1111666)
- RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (bsc#1111666)
- RDMA/ipoib: Remove check for ETH_SS_TEST (bsc#1111666)
- RDMA/ipoib: Return void from ipoib_ib_dev_stop() (bsc#1111666)
- RDMA/ipoib: Set rtnl_link_ops for ipoib interfaces (bsc#1111666)
- RDMA/iwcm: Fix a lock inversion issue (bsc#1111666)
- RDMA/iwcm: Fix iwcm work deallocation (bsc#1111666)
- RDMA/iwcm: move iw_rem_ref() calls out of spinlock (bsc#1111666)
- RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case (bsc#1111666)
- RDMA/iw_cxgb4: Fix the unchecked ep dereference (bsc#1111666)
- RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads() (bsc#1111666)
- RDMA/mlx4: Initialize ib_spec on the stack (bsc#1111666)
- RDMA/mlx4: Read pkey table length instead of hardcoded value (bsc#1111666)
- RDMA/mlx5: Clear old rate limit when closing QP (bsc#1111666)
- RDMA/mlx5: Delete unreachable handle_atomic code by simplifying SW completion (bsc#1111666)
- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (bsc#1111666)
- RDMA/mlx5: Fix a race with mlx5_ib_update_xlt on an implicit MR (bsc#1111666)
- RDMA/mlx5: Fix function name typo 'fileds' -&gt; 'fields' (bsc#1111666)
- RDMA/mlx5: Return proper error value (bsc#1111666)
- RDMA/mlx5: Set GRH fields in query QP on RoCE (bsc#1111666)
- RDMA/mlx5: Verify that QP is created with RQ or SQ (bsc#1111666)
- RDMA/nes: Remove second wait queue initialization call (bsc#1111666)
- RDMA/netlink: Do not always generate an ACK for some netlink operations (bsc#1111666)
- RDMA/ocrdma: Fix out of bounds index check in query pkey (bsc#1111666)
- RDMA/ocrdma: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() (bsc#1111666)
- RDMA/qedr: Endianness warnings cleanup (bsc#1111666)
- RDMA/qedr: Fix doorbell setting (bsc#1111666)
- RDMA/qedr: Fix memory leak in user qp and mr (bsc#1111666)
- RDMA/qedr: Fix reported firmware version (bsc#1111666)
- RDMA/qedr: Fix use of uninitialized field (bsc#1111666)
- RDMA/qedr: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/qedr: SRQ's bug fixes (bsc#1111666)
- RDMA/qib: Delete extra line (bsc#1111666)
- RDMA/qib: Remove all occurrences of BUG_ON() (bsc#1111666)
- RDMA/qib: Validate -&gt;show()/store() callbacks before calling them (bsc#1111666)
- RDMA/rxe: Drop pointless checks in rxe_init_ports (bsc#1111666)
- RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM (bsc#1111666)
- RDMA/rxe: Fix configuration of atomic queue pair attributes (bsc#1111666)
- RDMA/rxe: Fix memleak in rxe_mem_init_user (bsc#1111666)
- RDMA/rxe: Fix slab-out-bounds access which lead to kernel crash later (bsc#1111666)
- RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq (bsc#1111666)
- RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars (bsc#1111666)
- RDMA/rxe: Prevent access to wr-&gt;next ptr afrer wr is posted to send queue (bsc#1111666)
- RDMA/rxe: Remove unused rxe_mem_map_pages (bsc#1111666)
- RDMA/rxe: Remove useless rxe_init_device_param assignments (bsc#1111666)
- RDMA/rxe: Return void from rxe_init_port_param() (bsc#1111666)
- RDMA/rxe: Return void from rxe_mem_init_dma() (bsc#1111666)
- RDMA/rxe: Set default vendor ID (bsc#1111666)
- RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices (bsc#1111666)
- RDMA/rxe: Skip dgid check in loopback mode (bsc#1111666)
- RDMA/rxe: Use for_each_sg_page iterator on umem SGL (bsc#1111666)
- RDMA/srp: Rework SCSI device reset handling (bsc#1111666)
- RDMA/srpt: Fix typo in srpt_unregister_mad_agent docstring (bsc#1111666)
- RDMA/srpt: Report the SCSI residual to the initiator (bsc#1111666)
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (bsc#1111666)
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (bsc#1111666)
- RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated (bsc#1111666)
- RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove (bsc#1111666)
- RDMA/vmw_pvrdma: Use atomic memory allocation in create AH (bsc#1111666)
- reboot: fix overflow parsing reboot cpu number (bsc#1179421).
- regulator: avoid resolve_supply() infinite recursion (git-fixes).
- regulator: fix memory leak with repeated set_machine_constraints() (git-fixes).
- regulator: ti-abb: Fix array out of bound read access on the first transition (git-fixes).
- regulator: workaround self-referent regulators (git-fixes).
- Revert 'cdc-acm: hardening against malicious devices' (git-fixes).
- Revert 'kernel/reboot.c: convert simple_strtoul to kstrtoint' (bsc#1179418).
- RMDA/cm: Fix missing ib_cm_destroy_id() in ib_cm_insert_listen() (bsc#1111666)
- rxe: correctly calculate iCRC for unaligned payloads (bsc#1111666)
- rxe: fix error completion wr_id and qp_num (bsc#1111666)
- s390/cio: add cond_resched() in the slow_eval_known_fn() loop (bsc#1177805 LTC#188737).
- s390/cpum_cf,perf: change DFLT_CCERROR counter name (bsc#1175916 LTC#187937).
- s390/dasd: Fix zero write for FBA devices (bsc#1177808 LTC#188739).
- s390: kernel/uv: handle length extension properly (bsc#1178940 LTC#189323).
- sched/core: Fix PI boosting between RT and DEADLINE tasks (bsc#1112178).
- sched/x86: SaveFLAGS on context switch (bsc#1112178).
- scripts/git_sort/git_sort.py: add ceph maintainers git tree
- scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported (git-fixes).
- scsi: RDMA/srpt: Fix a credit leak for aborted commands (bsc#1111666)
- Staging: rtl8188eu: rtw_mlme: Fix uninitialized variable authmode (git-fixes).
- staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids (git-fixes).
- time: Prevent undefined behaviour in timespec64_to_ns() (git-fixes).
- tracing: Fix out of bounds write in get_trace_buf (bsc#1179403).
- tty: serial: imx: keep console clocks always on (git-fixes).
- Update references in patches.suse/net-smc-tolerate-future-smcd-versions (bsc#1172542 LTC#186070 git-fixes).
- USB: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode (git-fixes).
- USB: core: driver: fix stray tabs in error messages (git-fixes).
- USB: core: Fix regression in Hercules audio card (git-fixes).
- USB: gadget: Fix memleak in gadgetfs_fill_super (git-fixes).
- USB: gadget: f_midi: Fix memleak in f_midi_alloc (git-fixes).
- USB: host: ehci-tegra: Fix error handling in tegra_ehci_probe() (git-fixes).
- USB: host: xhci-mtk: avoid runtime suspend when removing hcd (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race (git-fixes).
- USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters (git-fixes).
- USB: serial: option: add Cellient MPL200 card (git-fixes).
- USB: serial: option: Add Telit FT980-KS composition (git-fixes).
- USB: serial: pl2303: add device-id for HP GC device (git-fixes).
- usermodehelper: reset umask to default before executing user process (bsc#1179406).
- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- x86/hyperv: Clarify comment on x2apic mode (git-fixes).
- x86/hyperv: Make vapic support x2apic mode (git-fixes).
- x86/microcode/intel: Check patch signature before saving microcode for early loading (bsc#1112178).
- x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect (git-fixes).
- x86/PCI: Fix intel_mid_pci.c build error when ACPI is not enabled (git-fixes).
- x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (git-fixes).
- x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP (bsc#1112178).
- x86/sysfb_efi: Add quirks for some devices with swapped width and height (git-fixes).
- xfrm: Fix memleak on xfrm state destroy (bsc#1158775).
- xfs: revert 'xfs: fix rmap key and record comparison functions' (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-09"/>
	<updated date="2020-12-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1067665">SUSE bug 1067665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158775">SUSE bug 1158775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170139">SUSE bug 1170139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170630">SUSE bug 1170630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172542">SUSE bug 1172542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174726">SUSE bug 1174726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175916">SUSE bug 1175916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176109">SUSE bug 1176109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177304">SUSE bug 1177304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177397">SUSE bug 1177397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177805">SUSE bug 1177805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177808">SUSE bug 1177808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177819">SUSE bug 1177819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177820">SUSE bug 1177820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178182">SUSE bug 1178182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178589">SUSE bug 1178589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178635">SUSE bug 1178635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178669">SUSE bug 1178669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178838">SUSE bug 1178838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178853">SUSE bug 1178853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178854">SUSE bug 1178854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178878">SUSE bug 1178878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178886">SUSE bug 1178886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178897">SUSE bug 1178897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178940">SUSE bug 1178940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178962">SUSE bug 1178962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179107">SUSE bug 1179107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179140">SUSE bug 1179140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179141">SUSE bug 1179141</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179211">SUSE bug 1179211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179213">SUSE bug 1179213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179259">SUSE bug 1179259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179403">SUSE bug 1179403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179406">SUSE bug 1179406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179418">SUSE bug 1179418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179421">SUSE bug 1179421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179424">SUSE bug 1179424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179426">SUSE bug 1179426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179427">SUSE bug 1179427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179429">SUSE bug 1179429</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15436/">CVE-2020-15436</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15437/">CVE-2020-15437</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25669/">CVE-2020-25669</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27777/">CVE-2020-27777</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28915/">CVE-2020-28915</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28974/">CVE-2020-28974</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29371/">CVE-2020-29371</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496395" comment="kernel-docs-4.12.14-197.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496396" comment="kernel-obs-build-4.12.14-197.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496397" comment="kernel-source-4.12.14-197.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496398" comment="kernel-syms-4.12.14-197.75.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138253" version="1" class="patch">
	<metadata>
		<title>Security update for gcc7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1150164" ref_url="https://bugzilla.suse.com/1150164" source="BUGZILLA"/>
		<reference ref_id="1161913" ref_url="https://bugzilla.suse.com/1161913" source="BUGZILLA"/>
		<reference ref_id="1167939" ref_url="https://bugzilla.suse.com/1167939" source="BUGZILLA"/>
		<reference ref_id="1172798" ref_url="https://bugzilla.suse.com/1172798" source="BUGZILLA"/>
		<reference ref_id="1178577" ref_url="https://bugzilla.suse.com/1178577" source="BUGZILLA"/>
		<reference ref_id="1178614" ref_url="https://bugzilla.suse.com/1178614" source="BUGZILLA"/>
		<reference ref_id="1178624" ref_url="https://bugzilla.suse.com/1178624" source="BUGZILLA"/>
		<reference ref_id="1178675" ref_url="https://bugzilla.suse.com/1178675" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13844" ref_url="https://www.suse.com/security/cve/CVE-2020-13844/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007963.html" source="SUSE-SU"/>
		<description>
This update for gcc7 fixes the following issues:

- CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue (bsc#1172798)
- Enable fortran for the nvptx offload compiler. 
- Update README.First-for.SuSE.packagers
- avoid assembler errors with AVX512 gather and scatter instructions when using -masm=intel.
- Backport the aarch64 -moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Fixed 32bit libgnat.so link.  [bsc#1178675]
- Fixed memcpy miscompilation on aarch64. [bsc#1178624, bsc#1178577]
- Fixed debug line info for try/catch.  [bsc#1178614]
- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is used to build gcc7 (ie when ada is enabled)
- Fixed corruption of pass private -&gt;aux via DF. [gcc#94148]
- Fixed debug information issue with inlined functions and passed by reference arguments.  [gcc#93888]
- Fixed binutils release date detection issue.
- Fixed register allocation issue with exception handling code on s390x.  [bsc#1161913] 
- Fixed miscompilation of some atomic code on aarch64. [bsc#1150164]
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-10"/>
	<updated date="2020-12-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1150164">SUSE bug 1150164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161913">SUSE bug 1161913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167939">SUSE bug 1167939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172798">SUSE bug 1172798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178577">SUSE bug 1178577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178614">SUSE bug 1178614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178624">SUSE bug 1178624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178675">SUSE bug 1178675</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-13844/">CVE-2020-13844</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496399" comment="cross-nvptx-gcc7-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496400" comment="cross-nvptx-newlib7-devel-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496401" comment="gcc7-32bit-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496402" comment="gcc7-ada-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496403" comment="gcc7-c++-32bit-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496404" comment="gcc7-fortran-32bit-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496405" comment="gcc7-info-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496406" comment="gcc7-locale-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496407" comment="gcc7-objc-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496408" comment="libada7-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496409" comment="libasan4-32bit-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496410" comment="libcilkrts5-32bit-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496411" comment="libstdc++6-devel-gcc7-32bit-7.5.0+r278197-4.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496412" comment="libubsan0-32bit-7.5.0+r278197-4.19.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138254" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1155094" ref_url="https://bugzilla.suse.com/1155094" source="BUGZILLA"/>
		<reference ref_id="1174091" ref_url="https://bugzilla.suse.com/1174091" source="BUGZILLA"/>
		<reference ref_id="1174571" ref_url="https://bugzilla.suse.com/1174571" source="BUGZILLA"/>
		<reference ref_id="1174701" ref_url="https://bugzilla.suse.com/1174701" source="BUGZILLA"/>
		<reference ref_id="1177211" ref_url="https://bugzilla.suse.com/1177211" source="BUGZILLA"/>
		<reference ref_id="1178009" ref_url="https://bugzilla.suse.com/1178009" source="BUGZILLA"/>
		<reference ref_id="1179193" ref_url="https://bugzilla.suse.com/1179193" source="BUGZILLA"/>
		<reference ref_id="1179630" ref_url="https://bugzilla.suse.com/1179630" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16935" ref_url="https://www.suse.com/security/cve/CVE-2019-16935/" source="CVE"/>
		<reference ref_id="CVE-2019-18348" ref_url="https://www.suse.com/security/cve/CVE-2019-18348/" source="CVE"/>
		<reference ref_id="CVE-2019-20907" ref_url="https://www.suse.com/security/cve/CVE-2019-20907/" source="CVE"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<reference ref_id="CVE-2020-14422" ref_url="https://www.suse.com/security/cve/CVE-2020-14422/" source="CVE"/>
		<reference ref_id="CVE-2020-26116" ref_url="https://www.suse.com/security/cve/CVE-2020-26116/" source="CVE"/>
		<reference ref_id="CVE-2020-27619" ref_url="https://www.suse.com/security/cve/CVE-2020-27619/" source="CVE"/>
		<reference ref_id="CVE-2020-8492" ref_url="https://www.suse.com/security/cve/CVE-2020-8492/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3930-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008118.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- Fixed CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.
- Change setuptools and pip version numbers according to new wheels
- Handful of changes to make python36 compatible with SLE15 and SLE12
  (jsc#ECO-2799, jsc#SLE-13738)
- add triplets for mips-r6 and riscv
- RISC-V needs CTYPES_PASS_BY_REF_HACK

Update to 3.6.12 (bsc#1179193)

* Ensure python3.dll is loaded from correct locations when Python is embedded
* The __hash__() methods of ipaddress.IPv4Interface and ipaddress.IPv6Interface 
  incorrectly generated constant hash values of 32 and 128 respectively. This 
  resulted in always causing hash collisions. The fix uses hash() to generate 
  hash values for the tuple of (address, mask length, network address).
* Prevent http header injection by rejecting control characters in 
  http.client.putrequest(…).
* Unpickling invalid NEWOBJ_EX opcode with the C implementation raises now 
  UnpicklingError instead of crashing.
* Avoid infinite loop when reading specially crafted TAR files using the tarfile 
  module

- This release also fixes CVE-2020-26116 (bsc#1177211) and CVE-2019-20907 (bsc#1174091).

Update to 3.6.11:

- Disallow CR or LF in email.headerregistry. Address
  arguments to guard against header injection attacks.
- Disallow control characters in hostnames in http.client, addressing
  CVE-2019-18348. Such potentially malicious header injection URLs now
  cause a InvalidURL to be raised. (bsc#1155094)
- CVE-2020-8492: The AbstractBasicAuthHandler class
  of the urllib.request module uses an inefficient regular
  expression which can be exploited by an attacker to cause
  a denial of service. Fix the regex to prevent the
  catastrophic backtracking. Vulnerability reported by Ben
  Caller and Matt Schwager.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-23"/>
	<updated date="2020-12-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1155094">SUSE bug 1155094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174091">SUSE bug 1174091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174571">SUSE bug 1174571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174701">SUSE bug 1174701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177211">SUSE bug 1177211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178009">SUSE bug 1178009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179193">SUSE bug 1179193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179630">SUSE bug 1179630</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16935/">CVE-2019-16935</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-18348/">CVE-2019-18348</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20907/">CVE-2019-20907</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14422/">CVE-2020-14422</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26116/">CVE-2020-26116</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27619/">CVE-2020-27619</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8492/">CVE-2020-8492</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496413" comment="python3-tools-3.6.12-3.67.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138255" version="1" class="patch">
	<metadata>
		<title>Security update for libsolv, libzypp, zypper (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1135114" ref_url="https://bugzilla.suse.com/1135114" source="BUGZILLA"/>
		<reference ref_id="1154804" ref_url="https://bugzilla.suse.com/1154804" source="BUGZILLA"/>
		<reference ref_id="1154805" ref_url="https://bugzilla.suse.com/1154805" source="BUGZILLA"/>
		<reference ref_id="1155198" ref_url="https://bugzilla.suse.com/1155198" source="BUGZILLA"/>
		<reference ref_id="1155205" ref_url="https://bugzilla.suse.com/1155205" source="BUGZILLA"/>
		<reference ref_id="1155298" ref_url="https://bugzilla.suse.com/1155298" source="BUGZILLA"/>
		<reference ref_id="1155678" ref_url="https://bugzilla.suse.com/1155678" source="BUGZILLA"/>
		<reference ref_id="1155819" ref_url="https://bugzilla.suse.com/1155819" source="BUGZILLA"/>
		<reference ref_id="1156158" ref_url="https://bugzilla.suse.com/1156158" source="BUGZILLA"/>
		<reference ref_id="1157377" ref_url="https://bugzilla.suse.com/1157377" source="BUGZILLA"/>
		<reference ref_id="1158763" ref_url="https://bugzilla.suse.com/1158763" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18900" ref_url="https://www.suse.com/security/cve/CVE-2019-18900/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0432-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006510.html" source="SUSE-SU"/>
		<description>
This update for libsolv, libzypp, zypper fixes the following issues:


Security issue fixed:

- CVE-2019-18900: Fixed assert cookie file that was world readable (bsc#1158763).

Bug fixes

- Fixed removing orphaned packages dropped by to-be-installed products (bsc#1155819).
- Adds libzypp API to mark all obsolete kernels according to the existing purge-kernel script rules (bsc#1155198).
- Do not enforce 'en' being in RequestedLocales If the user decides to have a system without explicit language support he may do so (bsc#1155678).                                            
- Load only target resolvables for zypper rm (bsc#1157377).
- Fix broken search by filelist (bsc#1135114).
- Replace python by a bash script in zypper-log (fixes#304, fixes#306, bsc#1156158).
- Do not sort out requested locales which are not available (bsc#1155678).
- Prevent listing duplicate matches in tables. XML result is provided within the new list-patches-byissue element (bsc#1154805).                                                              
- XML add patch issue-date and issue-list (bsc#1154805).
- Fix zypper lp --cve/bugzilla/issue options (bsc#1155298).
- Always execute commit when adding/removing locales (fixes bsc#1155205).
- Fix description of --table-style,-s in man page (bsc#1154804).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-21"/>
	<updated date="2020-02-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1135114">SUSE bug 1135114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154804">SUSE bug 1154804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154805">SUSE bug 1154805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155198">SUSE bug 1155198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155205">SUSE bug 1155205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155298">SUSE bug 1155298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155678">SUSE bug 1155678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155819">SUSE bug 1155819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156158">SUSE bug 1156158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157377">SUSE bug 1157377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158763">SUSE bug 1158763</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-18900/">CVE-2019-18900</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496414" comment="perl-solv-0.7.10-3.13.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496415" comment="ruby-solv-0.7.10-3.13.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138256" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1082023" ref_url="https://bugzilla.suse.com/1082023" source="BUGZILLA"/>
		<reference ref_id="1149792" ref_url="https://bugzilla.suse.com/1149792" source="BUGZILLA"/>
		<reference ref_id="1158785" ref_url="https://bugzilla.suse.com/1158785" source="BUGZILLA"/>
		<reference ref_id="1158787" ref_url="https://bugzilla.suse.com/1158787" source="BUGZILLA"/>
		<reference ref_id="1158788" ref_url="https://bugzilla.suse.com/1158788" source="BUGZILLA"/>
		<reference ref_id="1158789" ref_url="https://bugzilla.suse.com/1158789" source="BUGZILLA"/>
		<reference ref_id="1158790" ref_url="https://bugzilla.suse.com/1158790" source="BUGZILLA"/>
		<reference ref_id="1158791" ref_url="https://bugzilla.suse.com/1158791" source="BUGZILLA"/>
		<reference ref_id="1158792" ref_url="https://bugzilla.suse.com/1158792" source="BUGZILLA"/>
		<reference ref_id="1158793" ref_url="https://bugzilla.suse.com/1158793" source="BUGZILLA"/>
		<reference ref_id="1158795" ref_url="https://bugzilla.suse.com/1158795" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1348" ref_url="https://www.suse.com/security/cve/CVE-2019-1348/" source="CVE"/>
		<reference ref_id="CVE-2019-1349" ref_url="https://www.suse.com/security/cve/CVE-2019-1349/" source="CVE"/>
		<reference ref_id="CVE-2019-1350" ref_url="https://www.suse.com/security/cve/CVE-2019-1350/" source="CVE"/>
		<reference ref_id="CVE-2019-1351" ref_url="https://www.suse.com/security/cve/CVE-2019-1351/" source="CVE"/>
		<reference ref_id="CVE-2019-1352" ref_url="https://www.suse.com/security/cve/CVE-2019-1352/" source="CVE"/>
		<reference ref_id="CVE-2019-1353" ref_url="https://www.suse.com/security/cve/CVE-2019-1353/" source="CVE"/>
		<reference ref_id="CVE-2019-1354" ref_url="https://www.suse.com/security/cve/CVE-2019-1354/" source="CVE"/>
		<reference ref_id="CVE-2019-1387" ref_url="https://www.suse.com/security/cve/CVE-2019-1387/" source="CVE"/>
		<reference ref_id="CVE-2019-19604" ref_url="https://www.suse.com/security/cve/CVE-2019-19604/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006313.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

Security issues fixed:

- CVE-2019-1349: Fixed issue on Windows, when submodules are cloned recursively, under certain circumstances Git could be fooled into using the same Git directory twice (bsc#1158787).
- CVE-2019-19604: Fixed a recursive clone followed by a submodule update could execute code contained within the repository without the user explicitly having asked for that (bsc#1158795).
- CVE-2019-1387: Fixed recursive clones that are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones (bsc#1158793).
- CVE-2019-1354: Fixed issue on Windows that refuses to write tracked files with filenames that contain backslashes (bsc#1158792).
- CVE-2019-1353: Fixed issue when run in the Windows Subsystem for Linux while accessing a working directory on a regular Windows drive, none of the NTFS protections were active (bsc#1158791).
- CVE-2019-1352: Fixed issue on Windows was unaware of NTFS Alternate Data Streams (bsc#1158790).
- CVE-2019-1351: Fixed issue on Windows mistakes drive letters outside of the US-English alphabet as relative paths (bsc#1158789).
- CVE-2019-1350: Fixed incorrect quoting of command-line arguments allowed remote code execution during a recursive clone in conjunction with SSH URLs (bsc#1158788).
- CVE-2019-1348: Fixed the --export-marks option of fast-import is exposed also via  the in-stream command feature export-marks=... and it allows overwriting arbitrary paths (bsc#1158785).
- Fixes an issue where git send-email failed to authenticate with SMTP server (bsc#1082023)

Bug fixes:

- Add zlib dependency, which used to be provided by openssl-devel, so that package can compile successfully after openssl upgrade to 1.1.1. (bsc#1149792).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-08"/>
	<updated date="2020-01-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1082023">SUSE bug 1082023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149792">SUSE bug 1149792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158785">SUSE bug 1158785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158787">SUSE bug 1158787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158788">SUSE bug 1158788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158789">SUSE bug 1158789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158790">SUSE bug 1158790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158791">SUSE bug 1158791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158792">SUSE bug 1158792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158793">SUSE bug 1158793</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158795">SUSE bug 1158795</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-1348/">CVE-2019-1348</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1349/">CVE-2019-1349</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1350/">CVE-2019-1350</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-1351/">CVE-2019-1351</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1352/">CVE-2019-1352</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1353/">CVE-2019-1353</cve>
	<cve impact="low" cvss3="0/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1354/">CVE-2019-1354</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1387/">CVE-2019-1387</cve>
	<cve impact="critical" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19604/">CVE-2019-19604</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496188" comment="git-2.16.4-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496189" comment="git-arch-2.16.4-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496190" comment="git-cvs-2.16.4-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496191" comment="git-daemon-2.16.4-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496192" comment="git-doc-2.16.4-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496193" comment="git-email-2.16.4-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496194" comment="git-gui-2.16.4-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496195" comment="git-svn-2.16.4-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496196" comment="git-web-2.16.4-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496197" comment="gitk-2.16.4-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496198" comment="perl-Authen-SASL-2.16-1.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496199" comment="perl-Net-SMTP-SSL-1.04-1.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138257" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162224" ref_url="https://bugzilla.suse.com/1162224" source="BUGZILLA"/>
		<reference ref_id="1162367" ref_url="https://bugzilla.suse.com/1162367" source="BUGZILLA"/>
		<reference ref_id="1162423" ref_url="https://bugzilla.suse.com/1162423" source="BUGZILLA"/>
		<reference ref_id="1162825" ref_url="https://bugzilla.suse.com/1162825" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9674" ref_url="https://www.suse.com/security/cve/CVE-2019-9674/" source="CVE"/>
		<reference ref_id="CVE-2020-8492" ref_url="https://www.suse.com/security/cve/CVE-2020-8492/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0467-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006520.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

Security issues fixed:

- CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825).
- CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service via HTTP (bsc#1162367).

Non-security issue fixed:

- If the locale is 'C', coerce it to C.UTF-8 (bsc#1162423).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-25"/>
	<updated date="2020-02-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162224">SUSE bug 1162224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162367">SUSE bug 1162367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162423">SUSE bug 1162423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162825">SUSE bug 1162825</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9674/">CVE-2019-9674</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8492/">CVE-2020-8492</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496416" comment="python3-tools-3.6.10-3.47.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138258" version="1" class="patch">
	<metadata>
		<title>Security update for log4j (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159646" ref_url="https://bugzilla.suse.com/1159646" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17571" ref_url="https://www.suse.com/security/cve/CVE-2019-17571/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0053-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200053-1.html" source="SUSE-SU"/>
		<description>
This update for log4j fixes the following issues:

- CVE-2019-17571: Fixed a remote code execution by deserialization of untrusted data in SocketServer (bsc#1159646).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-09"/>
	<updated date="2020-01-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159646">SUSE bug 1159646</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17571/">CVE-2019-17571</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496200" comment="log4j-manual-1.2.17-5.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138259" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1046303" ref_url="https://bugzilla.suse.com/1046303" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1051858" ref_url="https://bugzilla.suse.com/1051858" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1086301" ref_url="https://bugzilla.suse.com/1086301" source="BUGZILLA"/>
		<reference ref_id="1086313" ref_url="https://bugzilla.suse.com/1086313" source="BUGZILLA"/>
		<reference ref_id="1086314" ref_url="https://bugzilla.suse.com/1086314" source="BUGZILLA"/>
		<reference ref_id="1088810" ref_url="https://bugzilla.suse.com/1088810" source="BUGZILLA"/>
		<reference ref_id="1090888" ref_url="https://bugzilla.suse.com/1090888" source="BUGZILLA"/>
		<reference ref_id="1103989" ref_url="https://bugzilla.suse.com/1103989" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1105392" ref_url="https://bugzilla.suse.com/1105392" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1112504" ref_url="https://bugzilla.suse.com/1112504" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1115026" ref_url="https://bugzilla.suse.com/1115026" source="BUGZILLA"/>
		<reference ref_id="1118338" ref_url="https://bugzilla.suse.com/1118338" source="BUGZILLA"/>
		<reference ref_id="1118661" ref_url="https://bugzilla.suse.com/1118661" source="BUGZILLA"/>
		<reference ref_id="1123328" ref_url="https://bugzilla.suse.com/1123328" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1127682" ref_url="https://bugzilla.suse.com/1127682" source="BUGZILLA"/>
		<reference ref_id="1129551" ref_url="https://bugzilla.suse.com/1129551" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1133147" ref_url="https://bugzilla.suse.com/1133147" source="BUGZILLA"/>
		<reference ref_id="1134973" ref_url="https://bugzilla.suse.com/1134973" source="BUGZILLA"/>
		<reference ref_id="1140025" ref_url="https://bugzilla.suse.com/1140025" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1143959" ref_url="https://bugzilla.suse.com/1143959" source="BUGZILLA"/>
		<reference ref_id="1144162" ref_url="https://bugzilla.suse.com/1144162" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146544" ref_url="https://bugzilla.suse.com/1146544" source="BUGZILLA"/>
		<reference ref_id="1151548" ref_url="https://bugzilla.suse.com/1151548" source="BUGZILLA"/>
		<reference ref_id="1151910" ref_url="https://bugzilla.suse.com/1151910" source="BUGZILLA"/>
		<reference ref_id="1151927" ref_url="https://bugzilla.suse.com/1151927" source="BUGZILLA"/>
		<reference ref_id="1152107" ref_url="https://bugzilla.suse.com/1152107" source="BUGZILLA"/>
		<reference ref_id="1152631" ref_url="https://bugzilla.suse.com/1152631" source="BUGZILLA"/>
		<reference ref_id="1153535" ref_url="https://bugzilla.suse.com/1153535" source="BUGZILLA"/>
		<reference ref_id="1153917" ref_url="https://bugzilla.suse.com/1153917" source="BUGZILLA"/>
		<reference ref_id="1154243" ref_url="https://bugzilla.suse.com/1154243" source="BUGZILLA"/>
		<reference ref_id="1154601" ref_url="https://bugzilla.suse.com/1154601" source="BUGZILLA"/>
		<reference ref_id="1154768" ref_url="https://bugzilla.suse.com/1154768" source="BUGZILLA"/>
		<reference ref_id="1154916" ref_url="https://bugzilla.suse.com/1154916" source="BUGZILLA"/>
		<reference ref_id="1155331" ref_url="https://bugzilla.suse.com/1155331" source="BUGZILLA"/>
		<reference ref_id="1155334" ref_url="https://bugzilla.suse.com/1155334" source="BUGZILLA"/>
		<reference ref_id="1155689" ref_url="https://bugzilla.suse.com/1155689" source="BUGZILLA"/>
		<reference ref_id="1156259" ref_url="https://bugzilla.suse.com/1156259" source="BUGZILLA"/>
		<reference ref_id="1156286" ref_url="https://bugzilla.suse.com/1156286" source="BUGZILLA"/>
		<reference ref_id="1156462" ref_url="https://bugzilla.suse.com/1156462" source="BUGZILLA"/>
		<reference ref_id="1157155" ref_url="https://bugzilla.suse.com/1157155" source="BUGZILLA"/>
		<reference ref_id="1157157" ref_url="https://bugzilla.suse.com/1157157" source="BUGZILLA"/>
		<reference ref_id="1157169" ref_url="https://bugzilla.suse.com/1157169" source="BUGZILLA"/>
		<reference ref_id="1157303" ref_url="https://bugzilla.suse.com/1157303" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1157480" ref_url="https://bugzilla.suse.com/1157480" source="BUGZILLA"/>
		<reference ref_id="1157692" ref_url="https://bugzilla.suse.com/1157692" source="BUGZILLA"/>
		<reference ref_id="1157853" ref_url="https://bugzilla.suse.com/1157853" source="BUGZILLA"/>
		<reference ref_id="1157895" ref_url="https://bugzilla.suse.com/1157895" source="BUGZILLA"/>
		<reference ref_id="1157908" ref_url="https://bugzilla.suse.com/1157908" source="BUGZILLA"/>
		<reference ref_id="1157966" ref_url="https://bugzilla.suse.com/1157966" source="BUGZILLA"/>
		<reference ref_id="1158013" ref_url="https://bugzilla.suse.com/1158013" source="BUGZILLA"/>
		<reference ref_id="1158021" ref_url="https://bugzilla.suse.com/1158021" source="BUGZILLA"/>
		<reference ref_id="1158026" ref_url="https://bugzilla.suse.com/1158026" source="BUGZILLA"/>
		<reference ref_id="1158071" ref_url="https://bugzilla.suse.com/1158071" source="BUGZILLA"/>
		<reference ref_id="1158094" ref_url="https://bugzilla.suse.com/1158094" source="BUGZILLA"/>
		<reference ref_id="1158132" ref_url="https://bugzilla.suse.com/1158132" source="BUGZILLA"/>
		<reference ref_id="1158381" ref_url="https://bugzilla.suse.com/1158381" source="BUGZILLA"/>
		<reference ref_id="1158533" ref_url="https://bugzilla.suse.com/1158533" source="BUGZILLA"/>
		<reference ref_id="1158637" ref_url="https://bugzilla.suse.com/1158637" source="BUGZILLA"/>
		<reference ref_id="1158638" ref_url="https://bugzilla.suse.com/1158638" source="BUGZILLA"/>
		<reference ref_id="1158639" ref_url="https://bugzilla.suse.com/1158639" source="BUGZILLA"/>
		<reference ref_id="1158640" ref_url="https://bugzilla.suse.com/1158640" source="BUGZILLA"/>
		<reference ref_id="1158641" ref_url="https://bugzilla.suse.com/1158641" source="BUGZILLA"/>
		<reference ref_id="1158643" ref_url="https://bugzilla.suse.com/1158643" source="BUGZILLA"/>
		<reference ref_id="1158644" ref_url="https://bugzilla.suse.com/1158644" source="BUGZILLA"/>
		<reference ref_id="1158645" ref_url="https://bugzilla.suse.com/1158645" source="BUGZILLA"/>
		<reference ref_id="1158646" ref_url="https://bugzilla.suse.com/1158646" source="BUGZILLA"/>
		<reference ref_id="1158647" ref_url="https://bugzilla.suse.com/1158647" source="BUGZILLA"/>
		<reference ref_id="1158649" ref_url="https://bugzilla.suse.com/1158649" source="BUGZILLA"/>
		<reference ref_id="1158651" ref_url="https://bugzilla.suse.com/1158651" source="BUGZILLA"/>
		<reference ref_id="1158652" ref_url="https://bugzilla.suse.com/1158652" source="BUGZILLA"/>
		<reference ref_id="1158819" ref_url="https://bugzilla.suse.com/1158819" source="BUGZILLA"/>
		<reference ref_id="1158823" ref_url="https://bugzilla.suse.com/1158823" source="BUGZILLA"/>
		<reference ref_id="1158824" ref_url="https://bugzilla.suse.com/1158824" source="BUGZILLA"/>
		<reference ref_id="1158827" ref_url="https://bugzilla.suse.com/1158827" source="BUGZILLA"/>
		<reference ref_id="1158834" ref_url="https://bugzilla.suse.com/1158834" source="BUGZILLA"/>
		<reference ref_id="1158893" ref_url="https://bugzilla.suse.com/1158893" source="BUGZILLA"/>
		<reference ref_id="1158900" ref_url="https://bugzilla.suse.com/1158900" source="BUGZILLA"/>
		<reference ref_id="1158903" ref_url="https://bugzilla.suse.com/1158903" source="BUGZILLA"/>
		<reference ref_id="1158904" ref_url="https://bugzilla.suse.com/1158904" source="BUGZILLA"/>
		<reference ref_id="1158954" ref_url="https://bugzilla.suse.com/1158954" source="BUGZILLA"/>
		<reference ref_id="1159024" ref_url="https://bugzilla.suse.com/1159024" source="BUGZILLA"/>
		<reference ref_id="1159028" ref_url="https://bugzilla.suse.com/1159028" source="BUGZILLA"/>
		<reference ref_id="1159271" ref_url="https://bugzilla.suse.com/1159271" source="BUGZILLA"/>
		<reference ref_id="1159297" ref_url="https://bugzilla.suse.com/1159297" source="BUGZILLA"/>
		<reference ref_id="1159377" ref_url="https://bugzilla.suse.com/1159377" source="BUGZILLA"/>
		<reference ref_id="1159394" ref_url="https://bugzilla.suse.com/1159394" source="BUGZILLA"/>
		<reference ref_id="1159483" ref_url="https://bugzilla.suse.com/1159483" source="BUGZILLA"/>
		<reference ref_id="1159484" ref_url="https://bugzilla.suse.com/1159484" source="BUGZILLA"/>
		<reference ref_id="1159500" ref_url="https://bugzilla.suse.com/1159500" source="BUGZILLA"/>
		<reference ref_id="1159569" ref_url="https://bugzilla.suse.com/1159569" source="BUGZILLA"/>
		<reference ref_id="1159588" ref_url="https://bugzilla.suse.com/1159588" source="BUGZILLA"/>
		<reference ref_id="1159841" ref_url="https://bugzilla.suse.com/1159841" source="BUGZILLA"/>
		<reference ref_id="1159908" ref_url="https://bugzilla.suse.com/1159908" source="BUGZILLA"/>
		<reference ref_id="1159909" ref_url="https://bugzilla.suse.com/1159909" source="BUGZILLA"/>
		<reference ref_id="1159910" ref_url="https://bugzilla.suse.com/1159910" source="BUGZILLA"/>
		<reference ref_id="1159911" ref_url="https://bugzilla.suse.com/1159911" source="BUGZILLA"/>
		<reference ref_id="1159955" ref_url="https://bugzilla.suse.com/1159955" source="BUGZILLA"/>
		<reference ref_id="1160147" ref_url="https://bugzilla.suse.com/1160147" source="BUGZILLA"/>
		<reference ref_id="1160195" ref_url="https://bugzilla.suse.com/1160195" source="BUGZILLA"/>
		<reference ref_id="1160210" ref_url="https://bugzilla.suse.com/1160210" source="BUGZILLA"/>
		<reference ref_id="1160211" ref_url="https://bugzilla.suse.com/1160211" source="BUGZILLA"/>
		<reference ref_id="1160218" ref_url="https://bugzilla.suse.com/1160218" source="BUGZILLA"/>
		<reference ref_id="1160433" ref_url="https://bugzilla.suse.com/1160433" source="BUGZILLA"/>
		<reference ref_id="1160442" ref_url="https://bugzilla.suse.com/1160442" source="BUGZILLA"/>
		<reference ref_id="1160469" ref_url="https://bugzilla.suse.com/1160469" source="BUGZILLA"/>
		<reference ref_id="1160470" ref_url="https://bugzilla.suse.com/1160470" source="BUGZILLA"/>
		<reference ref_id="1160476" ref_url="https://bugzilla.suse.com/1160476" source="BUGZILLA"/>
		<reference ref_id="1160560" ref_url="https://bugzilla.suse.com/1160560" source="BUGZILLA"/>
		<reference ref_id="1160618" ref_url="https://bugzilla.suse.com/1160618" source="BUGZILLA"/>
		<reference ref_id="1160678" ref_url="https://bugzilla.suse.com/1160678" source="BUGZILLA"/>
		<reference ref_id="1160755" ref_url="https://bugzilla.suse.com/1160755" source="BUGZILLA"/>
		<reference ref_id="1160756" ref_url="https://bugzilla.suse.com/1160756" source="BUGZILLA"/>
		<reference ref_id="1160784" ref_url="https://bugzilla.suse.com/1160784" source="BUGZILLA"/>
		<reference ref_id="1160787" ref_url="https://bugzilla.suse.com/1160787" source="BUGZILLA"/>
		<reference ref_id="1160802" ref_url="https://bugzilla.suse.com/1160802" source="BUGZILLA"/>
		<reference ref_id="1160803" ref_url="https://bugzilla.suse.com/1160803" source="BUGZILLA"/>
		<reference ref_id="1160804" ref_url="https://bugzilla.suse.com/1160804" source="BUGZILLA"/>
		<reference ref_id="1160917" ref_url="https://bugzilla.suse.com/1160917" source="BUGZILLA"/>
		<reference ref_id="1160966" ref_url="https://bugzilla.suse.com/1160966" source="BUGZILLA"/>
		<reference ref_id="1160979" ref_url="https://bugzilla.suse.com/1160979" source="BUGZILLA"/>
		<reference ref_id="1161087" ref_url="https://bugzilla.suse.com/1161087" source="BUGZILLA"/>
		<reference ref_id="1161243" ref_url="https://bugzilla.suse.com/1161243" source="BUGZILLA"/>
		<reference ref_id="1161360" ref_url="https://bugzilla.suse.com/1161360" source="BUGZILLA"/>
		<reference ref_id="1161472" ref_url="https://bugzilla.suse.com/1161472" source="BUGZILLA"/>
		<reference ref_id="1161514" ref_url="https://bugzilla.suse.com/1161514" source="BUGZILLA"/>
		<reference ref_id="1161518" ref_url="https://bugzilla.suse.com/1161518" source="BUGZILLA"/>
		<reference ref_id="1161522" ref_url="https://bugzilla.suse.com/1161522" source="BUGZILLA"/>
		<reference ref_id="1161523" ref_url="https://bugzilla.suse.com/1161523" source="BUGZILLA"/>
		<reference ref_id="1161549" ref_url="https://bugzilla.suse.com/1161549" source="BUGZILLA"/>
		<reference ref_id="1161552" ref_url="https://bugzilla.suse.com/1161552" source="BUGZILLA"/>
		<reference ref_id="1161674" ref_url="https://bugzilla.suse.com/1161674" source="BUGZILLA"/>
		<reference ref_id="1161702" ref_url="https://bugzilla.suse.com/1161702" source="BUGZILLA"/>
		<reference ref_id="1161907" ref_url="https://bugzilla.suse.com/1161907" source="BUGZILLA"/>
		<reference ref_id="1161931" ref_url="https://bugzilla.suse.com/1161931" source="BUGZILLA"/>
		<reference ref_id="1161933" ref_url="https://bugzilla.suse.com/1161933" source="BUGZILLA"/>
		<reference ref_id="1161934" ref_url="https://bugzilla.suse.com/1161934" source="BUGZILLA"/>
		<reference ref_id="1161935" ref_url="https://bugzilla.suse.com/1161935" source="BUGZILLA"/>
		<reference ref_id="1161936" ref_url="https://bugzilla.suse.com/1161936" source="BUGZILLA"/>
		<reference ref_id="1161937" ref_url="https://bugzilla.suse.com/1161937" source="BUGZILLA"/>
		<reference ref_id="1162028" ref_url="https://bugzilla.suse.com/1162028" source="BUGZILLA"/>
		<reference ref_id="1162067" ref_url="https://bugzilla.suse.com/1162067" source="BUGZILLA"/>
		<reference ref_id="1162109" ref_url="https://bugzilla.suse.com/1162109" source="BUGZILLA"/>
		<reference ref_id="1162139" ref_url="https://bugzilla.suse.com/1162139" source="BUGZILLA"/>
		<reference ref_id="1162557" ref_url="https://bugzilla.suse.com/1162557" source="BUGZILLA"/>
		<reference ref_id="1162617" ref_url="https://bugzilla.suse.com/1162617" source="BUGZILLA"/>
		<reference ref_id="1162618" ref_url="https://bugzilla.suse.com/1162618" source="BUGZILLA"/>
		<reference ref_id="1162619" ref_url="https://bugzilla.suse.com/1162619" source="BUGZILLA"/>
		<reference ref_id="1162623" ref_url="https://bugzilla.suse.com/1162623" source="BUGZILLA"/>
		<reference ref_id="1162928" ref_url="https://bugzilla.suse.com/1162928" source="BUGZILLA"/>
		<reference ref_id="1162943" ref_url="https://bugzilla.suse.com/1162943" source="BUGZILLA"/>
		<reference ref_id="1163206" ref_url="https://bugzilla.suse.com/1163206" source="BUGZILLA"/>
		<reference ref_id="1163383" ref_url="https://bugzilla.suse.com/1163383" source="BUGZILLA"/>
		<reference ref_id="1163384" ref_url="https://bugzilla.suse.com/1163384" source="BUGZILLA"/>
		<reference ref_id="1163762" ref_url="https://bugzilla.suse.com/1163762" source="BUGZILLA"/>
		<reference ref_id="1163774" ref_url="https://bugzilla.suse.com/1163774" source="BUGZILLA"/>
		<reference ref_id="1163836" ref_url="https://bugzilla.suse.com/1163836" source="BUGZILLA"/>
		<reference ref_id="1163840" ref_url="https://bugzilla.suse.com/1163840" source="BUGZILLA"/>
		<reference ref_id="1163841" ref_url="https://bugzilla.suse.com/1163841" source="BUGZILLA"/>
		<reference ref_id="1163842" ref_url="https://bugzilla.suse.com/1163842" source="BUGZILLA"/>
		<reference ref_id="1163843" ref_url="https://bugzilla.suse.com/1163843" source="BUGZILLA"/>
		<reference ref_id="1163844" ref_url="https://bugzilla.suse.com/1163844" source="BUGZILLA"/>
		<reference ref_id="1163845" ref_url="https://bugzilla.suse.com/1163845" source="BUGZILLA"/>
		<reference ref_id="1163846" ref_url="https://bugzilla.suse.com/1163846" source="BUGZILLA"/>
		<reference ref_id="1163849" ref_url="https://bugzilla.suse.com/1163849" source="BUGZILLA"/>
		<reference ref_id="1163850" ref_url="https://bugzilla.suse.com/1163850" source="BUGZILLA"/>
		<reference ref_id="1163851" ref_url="https://bugzilla.suse.com/1163851" source="BUGZILLA"/>
		<reference ref_id="1163852" ref_url="https://bugzilla.suse.com/1163852" source="BUGZILLA"/>
		<reference ref_id="1163853" ref_url="https://bugzilla.suse.com/1163853" source="BUGZILLA"/>
		<reference ref_id="1163855" ref_url="https://bugzilla.suse.com/1163855" source="BUGZILLA"/>
		<reference ref_id="1163856" ref_url="https://bugzilla.suse.com/1163856" source="BUGZILLA"/>
		<reference ref_id="1163857" ref_url="https://bugzilla.suse.com/1163857" source="BUGZILLA"/>
		<reference ref_id="1163858" ref_url="https://bugzilla.suse.com/1163858" source="BUGZILLA"/>
		<reference ref_id="1163859" ref_url="https://bugzilla.suse.com/1163859" source="BUGZILLA"/>
		<reference ref_id="1163860" ref_url="https://bugzilla.suse.com/1163860" source="BUGZILLA"/>
		<reference ref_id="1163861" ref_url="https://bugzilla.suse.com/1163861" source="BUGZILLA"/>
		<reference ref_id="1163862" ref_url="https://bugzilla.suse.com/1163862" source="BUGZILLA"/>
		<reference ref_id="1163863" ref_url="https://bugzilla.suse.com/1163863" source="BUGZILLA"/>
		<reference ref_id="1163867" ref_url="https://bugzilla.suse.com/1163867" source="BUGZILLA"/>
		<reference ref_id="1163869" ref_url="https://bugzilla.suse.com/1163869" source="BUGZILLA"/>
		<reference ref_id="1163880" ref_url="https://bugzilla.suse.com/1163880" source="BUGZILLA"/>
		<reference ref_id="1163971" ref_url="https://bugzilla.suse.com/1163971" source="BUGZILLA"/>
		<reference ref_id="1164051" ref_url="https://bugzilla.suse.com/1164051" source="BUGZILLA"/>
		<reference ref_id="1164069" ref_url="https://bugzilla.suse.com/1164069" source="BUGZILLA"/>
		<reference ref_id="1164098" ref_url="https://bugzilla.suse.com/1164098" source="BUGZILLA"/>
		<reference ref_id="1164115" ref_url="https://bugzilla.suse.com/1164115" source="BUGZILLA"/>
		<reference ref_id="1164314" ref_url="https://bugzilla.suse.com/1164314" source="BUGZILLA"/>
		<reference ref_id="1164315" ref_url="https://bugzilla.suse.com/1164315" source="BUGZILLA"/>
		<reference ref_id="1164388" ref_url="https://bugzilla.suse.com/1164388" source="BUGZILLA"/>
		<reference ref_id="1164471" ref_url="https://bugzilla.suse.com/1164471" source="BUGZILLA"/>
		<reference ref_id="1164598" ref_url="https://bugzilla.suse.com/1164598" source="BUGZILLA"/>
		<reference ref_id="1164632" ref_url="https://bugzilla.suse.com/1164632" source="BUGZILLA"/>
		<reference ref_id="1164705" ref_url="https://bugzilla.suse.com/1164705" source="BUGZILLA"/>
		<reference ref_id="1164712" ref_url="https://bugzilla.suse.com/1164712" source="BUGZILLA"/>
		<reference ref_id="1164727" ref_url="https://bugzilla.suse.com/1164727" source="BUGZILLA"/>
		<reference ref_id="1164728" ref_url="https://bugzilla.suse.com/1164728" source="BUGZILLA"/>
		<reference ref_id="1164729" ref_url="https://bugzilla.suse.com/1164729" source="BUGZILLA"/>
		<reference ref_id="1164730" ref_url="https://bugzilla.suse.com/1164730" source="BUGZILLA"/>
		<reference ref_id="1164731" ref_url="https://bugzilla.suse.com/1164731" source="BUGZILLA"/>
		<reference ref_id="1164732" ref_url="https://bugzilla.suse.com/1164732" source="BUGZILLA"/>
		<reference ref_id="1164733" ref_url="https://bugzilla.suse.com/1164733" source="BUGZILLA"/>
		<reference ref_id="1164734" ref_url="https://bugzilla.suse.com/1164734" source="BUGZILLA"/>
		<reference ref_id="1164735" ref_url="https://bugzilla.suse.com/1164735" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14615" ref_url="https://www.suse.com/security/cve/CVE-2019-14615/" source="CVE"/>
		<reference ref_id="CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896/" source="CVE"/>
		<reference ref_id="CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897/" source="CVE"/>
		<reference ref_id="CVE-2019-15213" ref_url="https://www.suse.com/security/cve/CVE-2019-15213/" source="CVE"/>
		<reference ref_id="CVE-2019-16746" ref_url="https://www.suse.com/security/cve/CVE-2019-16746/" source="CVE"/>
		<reference ref_id="CVE-2019-16994" ref_url="https://www.suse.com/security/cve/CVE-2019-16994/" source="CVE"/>
		<reference ref_id="CVE-2019-18808" ref_url="https://www.suse.com/security/cve/CVE-2019-18808/" source="CVE"/>
		<reference ref_id="CVE-2019-19036" ref_url="https://www.suse.com/security/cve/CVE-2019-19036/" source="CVE"/>
		<reference ref_id="CVE-2019-19045" ref_url="https://www.suse.com/security/cve/CVE-2019-19045/" source="CVE"/>
		<reference ref_id="CVE-2019-19051" ref_url="https://www.suse.com/security/cve/CVE-2019-19051/" source="CVE"/>
		<reference ref_id="CVE-2019-19054" ref_url="https://www.suse.com/security/cve/CVE-2019-19054/" source="CVE"/>
		<reference ref_id="CVE-2019-19066" ref_url="https://www.suse.com/security/cve/CVE-2019-19066/" source="CVE"/>
		<reference ref_id="CVE-2019-19318" ref_url="https://www.suse.com/security/cve/CVE-2019-19318/" source="CVE"/>
		<reference ref_id="CVE-2019-19319" ref_url="https://www.suse.com/security/cve/CVE-2019-19319/" source="CVE"/>
		<reference ref_id="CVE-2019-19332" ref_url="https://www.suse.com/security/cve/CVE-2019-19332/" source="CVE"/>
		<reference ref_id="CVE-2019-19338" ref_url="https://www.suse.com/security/cve/CVE-2019-19338/" source="CVE"/>
		<reference ref_id="CVE-2019-19447" ref_url="https://www.suse.com/security/cve/CVE-2019-19447/" source="CVE"/>
		<reference ref_id="CVE-2019-19523" ref_url="https://www.suse.com/security/cve/CVE-2019-19523/" source="CVE"/>
		<reference ref_id="CVE-2019-19526" ref_url="https://www.suse.com/security/cve/CVE-2019-19526/" source="CVE"/>
		<reference ref_id="CVE-2019-19527" ref_url="https://www.suse.com/security/cve/CVE-2019-19527/" source="CVE"/>
		<reference ref_id="CVE-2019-19532" ref_url="https://www.suse.com/security/cve/CVE-2019-19532/" source="CVE"/>
		<reference ref_id="CVE-2019-19533" ref_url="https://www.suse.com/security/cve/CVE-2019-19533/" source="CVE"/>
		<reference ref_id="CVE-2019-19535" ref_url="https://www.suse.com/security/cve/CVE-2019-19535/" source="CVE"/>
		<reference ref_id="CVE-2019-19537" ref_url="https://www.suse.com/security/cve/CVE-2019-19537/" source="CVE"/>
		<reference ref_id="CVE-2019-19767" ref_url="https://www.suse.com/security/cve/CVE-2019-19767/" source="CVE"/>
		<reference ref_id="CVE-2019-19927" ref_url="https://www.suse.com/security/cve/CVE-2019-19927/" source="CVE"/>
		<reference ref_id="CVE-2019-19965" ref_url="https://www.suse.com/security/cve/CVE-2019-19965/" source="CVE"/>
		<reference ref_id="CVE-2019-19966" ref_url="https://www.suse.com/security/cve/CVE-2019-19966/" source="CVE"/>
		<reference ref_id="CVE-2019-20054" ref_url="https://www.suse.com/security/cve/CVE-2019-20054/" source="CVE"/>
		<reference ref_id="CVE-2019-20095" ref_url="https://www.suse.com/security/cve/CVE-2019-20095/" source="CVE"/>
		<reference ref_id="CVE-2019-20096" ref_url="https://www.suse.com/security/cve/CVE-2019-20096/" source="CVE"/>
		<reference ref_id="CVE-2020-2732" ref_url="https://www.suse.com/security/cve/CVE-2020-2732/" source="CVE"/>
		<reference ref_id="CVE-2020-7053" ref_url="https://www.suse.com/security/cve/CVE-2020-7053/" source="CVE"/>
		<reference ref_id="CVE-2020-8428" ref_url="https://www.suse.com/security/cve/CVE-2020-8428/" source="CVE"/>
		<reference ref_id="CVE-2020-8648" ref_url="https://www.suse.com/security/cve/CVE-2020-8648/" source="CVE"/>
		<reference ref_id="CVE-2020-8992" ref_url="https://www.suse.com/security/cve/CVE-2020-8992/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-8992: An issue was discovered in ext4_protect_reserved_inode in fs/ext4/block_validity.c that allowed attackers to cause a soft lockup via a crafted journal size (bnc#1164069).
- CVE-2020-8648: There was a use-after-free vulnerability in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bnc#1162928).
- CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c. It did not check the length of variable elements in a beacon head, leading to a buffer overflow (bnc#1152107).
- CVE-2020-8428: There was a use-after-free bug in fs/namei.c, which allowed local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9 (bnc#1162109).
- CVE-2019-19045: A memory leak in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c allowed attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7 (bnc#1161522).
- CVE-2019-16994: A memory leak existed in sit_init_net() in net/ipv6/sit.c which might have caused denial of service, aka CID-07f12b26e21a (bnc#1161523).
- CVE-2019-19054: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c allowed attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b (bnc#1161518).
- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bnc#1157157).
- CVE-2019-14897: A stack-based buffer overflow was found in the Marvell WiFi driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bnc#1157155).
- CVE-2020-7053: There was a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c (bnc#1160966).
- CVE-2019-19318: Mounting a crafted btrfs image twice could have caused a use-after-free (bnc#1158026).
- CVE-2019-19036: An issue discovered in btrfs_root_node in fs/btrfs/ctree.c allowed a NULL pointer dereference because rcu_dereference(root-&gt;node) can be zero (bnc#1157692).
- CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures for some Intel(R) Processors (bnc#1160195).
- CVE-2019-19965: There was a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5 (bnc#1159911).
- CVE-2019-19927: A slab-out-of-bounds read access could have been caused when mounting a crafted f2fs filesystem image and performing some operations on it, in drivers/gpu/drm/ttm/ttm_page_alloc.c (bnc#1160147).
- CVE-2019-20095: Several memory leaks were found in drivers/net/wireless/marvell/mwifiex/cfg80211.c, aka CID-003b686ace82 (bnc#1159909).
- CVE-2019-20054: There was a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e (bnc#1159910).
- CVE-2019-20096: There was a memory leak in __feat_register_sp() in net/dccp/feat.c, aka CID-1d3ff0950e2b (bnc#1159908).
- CVE-2019-19966: There was a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that could have caused a denial of service, aka CID-dea37a972655 (bnc#1159841).
- CVE-2019-19447: Mounting a crafted ext4 filesystem image, performing some operations, and unmounting could have led to a use-after-free in fs/ext4/super.c (bnc#1158819).
- CVE-2019-19319: A slab-out-of-bounds write access could have occured when setxattr was called after mounting of a specially crafted ext4 image (bnc#1158021).
- CVE-2019-19767: There were multiple use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163 (bnc#1159297).
- CVE-2019-18808: A memory leak in drivers/crypto/ccp/ccp-ops.c allowed attackers to cause a denial of service (memory consumption), aka CID-128c66429247 (bnc#1156259).
- CVE-2019-19066: A memory leak in drivers/scsi/bfa/bfad_attr.c allowed attackers to cause a denial of service (memory consumption), aka CID-0e62395da2bd (bnc#1157303).
- CVE-2019-19051: A memory leak in drivers/net/wimax/i2400m/op-rfkill.c allowed attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7 (bnc#1159024).
- CVE-2019-19338: There was an incomplete fix for an issue with Transactional Synchronisation Extensions in the KVM code (bsc#1158954).
- CVE-2019-19332: An out-of-bounds memory write issue was found in the way the KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could have used this flaw to crash the system (bnc#1158827).
- CVE-2019-19537: There was a race condition bug that could be caused by a malicious USB character device, aka CID-303911cfc5b9. (bsc#1158904).
- CVE-2019-19535: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042 (bsc#1158903).
- CVE-2019-19527: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e (bsc#1158900).
- CVE-2019-19526: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af3aa57a098 (bsc#1158893).
- CVE-2019-19533: There was an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464 (bsc#1158834).
- CVE-2019-19532: There were multiple out-of-bounds write bugs that can be caused by a malicious USB HID device, aka CID-d9d4b1e46d95 (bsc#1158824).
- CVE-2019-19523: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79 (bsc#1158823).
- CVE-2019-15213: A use-after-free bug caused by a malicious USB device was found in drivers/media/usb/dvb-usb/dvb-usb-init.c (bsc#1146544).
- CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L1 resources (bsc#1163971).


The following non-security bugs were fixed:

- 6pack,mkiss: fix possible deadlock (bsc#1051510).
- ACPI / APEI: Do not wait to serialise with oops messages when panic()ing (bsc#1051510).
- ACPI / APEI: Switch estatus pool to use vmalloc memory (bsc#1051510).
- ACPI / LPSS: Ignore acpi_device_fix_up_power() return value (bsc#1051510).
- ACPI / video: Add force_none quirk for Dell OptiPlex 9020M (bsc#1051510).
- ACPI / watchdog: Fix init failure with overlapping register regions (bsc#1162557).
- ACPI / watchdog: Set default timeout in probe (bsc#1162557).
- ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data() (bsc#1051510).
- ACPI: fix acpi_find_child_device() invocation in acpi_preset_companion() (bsc#1051510).
- ACPI: OSL: only free map once in osl.c (bsc#1051510).
- ACPI: PM: Avoid attaching ACPI PM domain to certain devices (bsc#1051510).
- ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 (bsc#1051510).
- ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards (bsc#1051510).
- ACPI: watchdog: Allow disabling WDAT at boot (bsc#1162557).
- af_packet: set defaule value for tmo (bsc#1051510).
- ALSA: control: remove useless assignment in .info callback of PCM chmap element (git-fixes).
- ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
- ALSA: echoaudio: simplify get_audio_levels (bsc#1051510).
- ALSA: fireface: fix return value in error path of isochronous resources reservation (bsc#1051510).
- ALSA: hda - Add docking station support for Lenovo Thinkpad T420s (git-fixes).
- ALSA: hda - Apply sync-write workaround to old Intel platforms, too (bsc#1111666).
- ALSA: hda - constify and cleanup static NodeID tables (bsc#1111666).
- ALSA: hda - Downgrade error message for single-cmd fallback (git-fixes).
- ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen (git-fixes).
- ALSA: hda/analog - Minor optimization for SPDIF mux connections (git-fixes).
- ALSA: hda/ca0132 - Avoid endless loop (git-fixes).
- ALSA: hda/ca0132 - Fix work handling in delayed HP detection (git-fixes).
- ALSA: hda/ca0132 - Keep power on during processing DSP response (git-fixes).
- ALSA: hda/hdmi - Add new pci ids for AMD GPU display audio (git-fixes).
- ALSA: hda/hdmi - add retry logic to parse_intel_hdmi() (git-fixes).
- ALSA: hda/hdmi - Clean up Intel platform-specific fixup checks (bsc#1111666).
- ALSA: hda/hdmi - fix atpx_present when CLASS is not VGA (bsc#1051510).
- ALSA: hda/hdmi - Fix duplicate unref of pci_dev (bsc#1051510).
- ALSA: hda/hdmi - fix vgaswitcheroo detection for AMD (git-fixes).
- ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker (bsc#1111666).
- ALSA: hda/realtek - Add headset Mic no shutup for ALC283 (bsc#1051510).
- ALSA: hda/realtek - Add Headset Mic supported for HP cPC (bsc#1111666).
- ALSA: hda/realtek - Add new codec supported for ALCS1200A (bsc#1111666).
- ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen (bsc#1111666).
- ALSA: hda/realtek - Apply mic mute LED quirk for Dell E7xx laptops, too (bsc#1111666).
- ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 (git-fixes).
- ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC (bsc#1111666).
- ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G (git-fixes).
- ALSA: hda/realtek - Fix silent output on MSI-GL73 (git-fixes).
- ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported (bsc#1111666).
- ALSA: hda/realtek - Line-out jack does not work on a Dell AIO (bsc#1051510).
- ALSA: hda/realtek - More constifications (bsc#1111666).
- ALSA: hda/realtek - Set EAPD control to default for ALC222 (bsc#1111666).
- ALSA: hda: Add Clevo W65_67SB the power_save blacklist (git-fixes).
- ALSA: hda: Add JasperLake PCI ID and codec vid (bsc#1111666).
- ALSA: hda: Clear RIRB status before reading WP (bsc#1111666).
- ALSA: hda: constify copied structure (bsc#1111666).
- ALSA: hda: Constify snd_kcontrol_new items (bsc#1111666).
- ALSA: hda: Constify snd_pci_quirk tables (bsc#1111666).
- ALSA: hda: correct kernel-doc parameter descriptions (bsc#1111666).
- ALSA: hda: hdmi - add Tigerlake support (bsc#1111666).
- ALSA: hda: hdmi - fix pin setup on Tigerlake (bsc#1111666).
- ALSA: hda: More constifications (bsc#1111666).
- ALSA: hda: patch_hdmi: remove warnings with empty body (bsc#1111666).
- ALSA: hda: patch_realtek: fix empty macro usage in if block (bsc#1111666).
- ALSA: hda: Reset stream if DMA RUN bit not cleared (bsc#1111666).
- ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs (git-fixes).
- ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code (bsc#1051510).
- ALSA: oxfw: fix return value in error path of isochronous resources reservation (bsc#1051510).
- ALSA: pcm: Avoid possible info leaks from PCM stream buffers (git-fixes).
- ALSA: pcm: oss: Avoid potential buffer overflows (git-fixes).
- ALSA: seq: Avoid concurrent access to queue flags (git-fixes).
- ALSA: seq: Fix concurrent access to queue current tick/time (git-fixes).
- ALSA: seq: Fix racy access for queue timer in proc read (bsc#1051510).
- ALSA: sh: Fix compile warning wrt const (git-fixes).
- ALSA: sh: Fix unused variable warnings (bsc#1111666).
- ALSA: usb-audio: Apply sample rate quirk for Audioengine D1 (git-fixes).
- ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 (bsc#1111666).
- ALSA: usb-audio: Fix endianess in descriptor validation (bsc#1111666).
- ALSA: usb-audio: fix set_format altsetting sanity check (bsc#1051510).
- ALSA: usb-audio: fix sync-ep altsetting sanity check (bsc#1051510).
- apparmor: fix unsigned len comparison with less than zero (git-fixes).
- ar5523: check NULL before memcpy() in ar5523_cmd() (bsc#1051510).
- arm64: Revert support for execute-only user mappings (bsc#1160218).
- ASoC: au8540: use 64-bit arithmetic instead of 32-bit (bsc#1051510).
- ASoC: compress: fix unsigned integer overflow check (bsc#1051510).
- ASoC: cs4349: Use PM ops 'cs4349_runtime_pm' (bsc#1051510).
- ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report (bsc#1051510).
- ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1 (bsc#1051510).
- ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI (bsc#1111666).
- ASoC: sun8i-codec: Fix setting DAI data format (git-fixes).
- ASoC: wm8962: fix lambda value (git-fixes).
- ata: ahci: Add shutdown to freeze hardware resources of ahci (bsc#1164388).
- ath10k: Correct the DMA direction for management tx buffers (bsc#1111666).
- ath10k: fix fw crash by moving chip reset after napi disabled (bsc#1051510).
- ath10k: pci: Fix comment on ath10k_pci_dump_memory_sram (bsc#1111666).
- ath10k: pci: Only dump ATH10K_MEM_REGION_TYPE_IOREG when safe (bsc#1111666).
- ath6kl: Fix off by one error in scan completion (bsc#1051510).
- ath9k: fix storage endpoint lookup (git-fixes).
- atl1e: checking the status of atl1e_write_phy_reg (bsc#1051510).
- audit: Allow auditd to set pid to 0 to end auditing (bsc#1158094).
- batman-adv: Fix DAT candidate selection on little endian systems (bsc#1051510).
- bcache: add code comment bch_keylist_pop() and bch_keylist_pop_front() (bsc#1163762).
- bcache: add code comments for state-&gt;pool in __btree_sort() (bsc#1163762).
- bcache: add code comments in bch_btree_leaf_dirty() (bsc#1163762).
- bcache: add cond_resched() in __bch_cache_cmp() (bsc#1163762).
- bcache: add idle_max_writeback_rate sysfs interface (bsc#1163762).
- bcache: add more accurate error messages in read_super() (bsc#1163762).
- bcache: add readahead cache policy options via sysfs interface (bsc#1163762).
- bcache: at least try to shrink 1 node in bch_mca_scan() (bsc#1163762).
- bcache: avoid unnecessary btree nodes flushing in btree_flush_write() (bsc#1163762).
- bcache: check return value of prio_read() (bsc#1163762).
- bcache: deleted code comments for dead code in bch_data_insert_keys() (bsc#1163762).
- bcache: do not export symbols (bsc#1163762).
- bcache: explicity type cast in bset_bkey_last() (bsc#1163762).
- bcache: fix a lost wake-up problem caused by mca_cannibalize_lock (bsc#1163762).
- bcache: Fix an error code in bch_dump_read() (bsc#1163762).
- bcache: fix deadlock in bcache_allocator (bsc#1163762).
- bcache: fix incorrect data type usage in btree_flush_write() (bsc#1163762).
- bcache: fix memory corruption in bch_cache_accounting_clear() (bsc#1163762).
- bcache: fix static checker warning in bcache_device_free() (bsc#1163762).
- bcache: ignore pending signals when creating gc and allocator thread (bsc#1163762, bsc#1112504).
- bcache: print written and keys in trace_bcache_btree_write (bsc#1163762).
- bcache: reap c-&gt;btree_cache_freeable from the tail in bch_mca_scan() (bsc#1163762).
- bcache: reap from tail of c-&gt;btree_cache in bch_mca_scan() (bsc#1163762).
- bcache: remove macro nr_to_fifo_front() (bsc#1163762).
- bcache: remove member accessed from struct btree (bsc#1163762).
- bcache: remove the extra cflags for request.o (bsc#1163762).
- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (bsc#1163762, bsc#1112504).
- bcma: remove set but not used variable 'sizel' (git-fixes).
- blk-mq: avoid sysfs buffer overflow with too many CPU cores (bsc#1159377).
- blk-mq: avoid sysfs buffer overflow with too many CPU cores (bsc#1163840).
- blk-mq: make sure that line break can be printed (bsc#1159377).
- blk-mq: make sure that line break can be printed (bsc#1164098).
- Bluetooth: Fix race condition in hci_release_sock() (bsc#1051510).
- Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading (bsc#1051510).
- bnxt: apply computed clamp value for coalece parameter (bsc#1104745).
- bnxt_en: Fix MSIX request logic for RDMA driver (bsc#1104745 ).
- bnxt_en: Return error if FW returns more data than dump length (bsc#1104745).
- bonding: fix active-backup transition after link failure (git-fixes).
- bonding: fix potential NULL deref in bond_update_slave_arr (bsc#1051510).
- bonding: fix slave stuck in BOND_LINK_FAIL state (networking-stable-19_11_10).
- bonding: fix state transition issue in link monitoring (networking-stable-19_11_10).
- bonding: fix unexpected IFF_BONDING bit unset (bsc#1051510).
- bpf, offload: Unlock on error in bpf_offload_dev_create() (bsc#1109837).
- bpf/sockmap: Read psock ingress_msg before sk_receive_queue (bsc#1083647).
- bpf/stackmap: Fix deadlock with rq_lock in bpf_get_stack() (bsc#1083647).
- bpf: add self-check logic to liveness analysis (bsc#1160618).
- bpf: add verifier stats and log_level bit 2 (bsc#1160618).
- bpf: Fix incorrect verifier simulation of ARSH under ALU32 (bsc#1083647).
- bpf: improve stacksafe state comparison (bco#1160618).
- bpf: improve verification speed by droping states (bsc#1160618).
- bpf: improve verification speed by not remarking live_read (bsc#1160618).
- bpf: improve verifier branch analysis (bsc#1160618).
- bpf: increase complexity limit and maximum program size (bsc#1160618).
- bpf: increase verifier log limit (bsc#1160618).
- bpf: Make use of probe_user_write in probe write helper (bsc#1083647).
- bpf: Reject indirect var_off stack access in raw mode (bsc#1160618).
- bpf: Reject indirect var_off stack access in unpriv mode (bco#1160618).
- bpf: Sanity check max value for var_off stack access (bco#1160618).
- bpf: skmsg, fix potential psock NULL pointer dereference (bsc#1109837).
- bpf: speed up stacksafe check (bco#1160618).
- bpf: Support variable offset stack access from helpers (bco#1160618).
- bpf: verifier: teach the verifier to reason about the BPF_JSET instruction (bco#1160618).
- brcmfmac: fix interface sanity check (git-fixes).
- brcmfmac: Fix memory leak in brcmf_p2p_create_p2pdev() (bsc#1111666).
- brcmfmac: Fix memory leak in brcmf_usbdev_qinit (git-fixes).
- brcmfmac: Fix use after free in brcmf_sdio_readframes() (git-fixes).
- brcmfmac: sdio: Fix OOB interrupt initialization on brcm43362 (bsc#1111666).
- brcmfmac: set F2 watermark to 256 for 4373 (bsc#1111666).
- brcmfmac: set SDIO F1 MesBusyCtrl for CYW4373 (bsc#1111666).
- btrfs: abort transaction after failed inode updates in create_subvol (bsc#1161936).
- btrfs: add missing extents release on file extent cluster relocation error (bsc#1159483).
- btrfs: avoid fallback to transaction commit during fsync of files with holes (bsc#1159569).
- btrfs: dev-replace: remove warning for unknown return codes when finished (dependency for bsc#1162067).
- btrfs: do not call synchronize_srcu() in inode_tree_del (bsc#1161934).
- btrfs: do not double lock the subvol_sem for rename exchange (bsc#1162943).
- btrfs: Ensure we trim ranges across block group boundary (bsc#1151910).
- btrfs: fix block group remaining RO forever after error during device replace (bsc#1160442).
- btrfs: fix btrfs_write_inode vs delayed iput deadlock (bsc#1154243).
- btrfs: fix infinite loop during fsync after rename operations (bsc#1163383).
- btrfs: fix infinite loop during nocow writeback due to race (bsc#1160804).
- btrfs: fix integer overflow in calc_reclaim_items_nr (bsc#1160433).
- btrfs: fix missing data checksums after replaying a log tree (bsc#1161931).
- btrfs: fix negative subv_writers counter and data space leak after buffered write (bsc#1160802).
- btrfs: fix race between adding and putting tree mod seq elements and nodes (bsc#1163384).
- btrfs: fix removal logic of the tree mod log that leads to use-after-free issues (bsc#1160803).
- btrfs: fix selftests failure due to uninitialized i_mode in test inodes (Fix for dependency of bsc#1157692).
- btrfs: handle ENOENT in btrfs_uuid_tree_iterate (bsc#1161937).
- btrfs: harden agaist duplicate fsid on scanned devices (bsc#1134973).
- btrfs: inode: Verify inode mode to avoid NULL pointer dereference (dependency for bsc#1157692).
- btrfs: make tree checker detect checksum items with overlapping ranges (bsc#1161931).
- btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it (dependency for bsc#1157692).
- btrfs: record all roots for rename exchange on a subvol (bsc#1161933).
- btrfs: relocation: fix reloc_root lifespan and access (bsc#1159588).
- btrfs: scrub: Require mandatory block group RO for dev-replace (bsc#1162067).
- btrfs: send, skip backreference walking for extents with many references (bsc#1162139).
- btrfs: simplify inode locking for RWF_NOWAIT (git-fixes).
- btrfs: skip log replay on orphaned roots (bsc#1161935).
- btrfs: tree-checker: Check chunk item at tree block read time (dependency for bsc#1157692).
- btrfs: tree-checker: Check level for leaves and nodes (dependency for bsc#1157692).
- btrfs: tree-checker: Enhance chunk checker to validate chunk profile (dependency for bsc#1157692).
- btrfs: tree-checker: Fix wrong check on max devid (fixes for dependency of bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in block_group_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_block_group_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_csum_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_dev_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_dir_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_extent_data_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_inode_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_leaf (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_leaf_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in chunk_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in dev_item_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in dir_item_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in file_extent_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in generic_err (dependency for bsc#1157692).
- btrfs: tree-checker: Make btrfs_check_chunk_valid() return EUCLEAN instead of EIO (dependency for bsc#1157692).
- btrfs: tree-checker: Make chunk item checker messages more readable (dependency for bsc#1157692).
- btrfs: tree-checker: Verify dev item (dependency for bsc#1157692).
- btrfs: tree-checker: Verify inode item (dependency for bsc#1157692).
- btrfs: volumes: Use more straightforward way to calculate map length (bsc#1151910).
- can, slip: Protect tty-&gt;disc_data in write_wakeup and close with RCU (bsc#1051510).
- can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs (bsc#1051510).
- can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open (bsc#1051510).
- can: gs_usb: gs_usb_probe(): use descriptors of current altsetting (bsc#1051510).
- can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling to irq mode (bsc#1051510).
- can: peak_usb: report bus recovery as well (bsc#1051510).
- can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error (bsc#1051510).
- can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error (bsc#1051510).
- can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on queue overflow or OOM (bsc#1051510).
- can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate error value in case of errors (bsc#1051510).
- can: slcan: Fix use-after-free Read in slcan_open (bsc#1051510).
- CDC-NCM: handle incomplete transfer of MTU (networking-stable-19_11_10).
- cdrom: respect device capabilities during opening action (boo#1164632).
- cfg80211/mac80211: make ieee80211_send_layer2_update a public function (bsc#1051510).
- cfg80211: check for set_wiphy_params (bsc#1051510).
- cfg80211: fix deadlocks in autodisconnect work (bsc#1111666).
- cfg80211: fix memory leak in cfg80211_cqm_rssi_update (bsc#1111666).
- cfg80211: fix page refcount issue in A-MSDU decap (bsc#1051510).
- cgroup,writeback: do not switch wbs immediately on dead wbs if the memcg is dead (bsc#1158645).
- cgroup: pids: use atomic64_t for pids-&gt;limit (bsc#1161514).
- chardev: Avoid potential use-after-free in 'chrdev_open()' (bsc#1163849).
- cifs: add support for flock (bsc#1144333).
- cifs: Close cached root handle only if it had a lease (bsc#1144333).
- cifs: Close open handle after interrupted close (bsc#1144333).
- cifs: close the shared root handle on tree disconnect (bsc#1144333).
- cifs: Do not miss cancelled OPEN responses (bsc#1144333).
- cifs: Fix lookup of root ses in DFS referral cache (bsc#1144333).
- cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333).
- cifs: fix mount option display for sec=krb5i (bsc#1161907).
- cifs: Fix mount options set in automount (bsc#1144333).
- cifs: Fix NULL pointer dereference in mid callback (bsc#1144333).
- cifs: Fix NULL-pointer dereference in smb2_push_mandatory_locks (bsc#1144333).
- cifs: Fix potential softlockups while refreshing DFS cache (bsc#1144333).
- cifs: Fix retrieval of DFS referrals in cifs_mount() (bsc#1144333).
- cifs: Fix use-after-free bug in cifs_reconnect() (bsc#1144333).
- cifs: Properly process SMB3 lease breaks (bsc#1144333).
- cifs: remove set but not used variables 'cinode' and 'netfid' (bsc#1144333).
- cifs: Respect O_SYNC and O_DIRECT flags during reconnect (bsc#1144333).
- clk: Do not try to enable critical clocks if prepare failed (bsc#1051510).
- clk: imx: clk-composite-8m: add lock to gate/mux (git-fixes).
- clk: mmp2: Fix the order of timer mux parents (bsc#1051510).
- clk: qcom: rcg2: Do not crash if our parent can't be found; return an error (bsc#1051510).
- clk: rockchip: fix I2S1 clock gate register for rk3328 (bsc#1051510).
- clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328 (bsc#1051510).
- clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering (bsc#1051510).
- clk: rockchip: fix rk3188 sclk_smc gate data (bsc#1051510).
- clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock (bsc#1051510).
- clk: sunxi: sun9i-mmc: Implement reset callback for reset controls (bsc#1051510).
- clk: tegra: Mark fuse clock as critical (bsc#1051510).
- clocksource/drivers/bcm2835_timer: Fix memory leak of timer (bsc#1051510).
- clocksource: Prevent double add_timer_on() for watchdog_timer (bsc#1051510).
- closures: fix a race on wakeup from closure_sync (bsc#1163762).
- configfs_register_group() shouldn't be (and isn't) called in rmdirable parts (bsc#1051510).
- copy/pasted 'Recommends:' instead of 'Provides:', 'Obsoletes:' and 'Conflicts:
- Cover up kABI breakage due to DH key verification (bsc#1155331).
- crypto: af_alg - Use bh_lock_sock in sk_destruct (bsc#1051510).
- crypto: api - Check spawn-&gt;alg under lock in crypto_drop_spawn (bsc#1051510).
- crypto: api - Fix race condition in crypto_spawn_alg (bsc#1051510).
- crypto: atmel-sha - fix error handling when setting hmac key (bsc#1051510).
- crypto: caam/qi2 - fix typo in algorithm's driver name (bsc#1111666).
- crypto: ccp - fix uninitialized list head (bsc#1051510).
- crypto: chelsio - fix writing tfm flags to wrong place (bsc#1051510).
- crypto: dh - add public key verification test (bsc#1155331).
- crypto: dh - fix calculating encoded key size (bsc#1155331).
- crypto: dh - fix memory leak (bsc#1155331).
- crypto: dh - update test for public key verification (bsc#1155331).
- crypto: DRBG - add FIPS 140-2 CTRNG for noise source (bsc#1155334).
- crypto: ecdh - add public key verification test (bsc#1155331).
- crypto: ecdh - fix typo of P-192 b value (bsc#1155331).
- crypto: mxc-scc - fix build warnings on ARM64 (bsc#1051510).
- crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (bsc#1051510).
- crypto: picoxcell - adjust the position of tasklet_init and fix missed tasklet_kill (bsc#1051510).
- crypto: reexport crypto_shoot_alg() (bsc#1051510, kABI fix).
- cxgb4: request the TX CIDX updates to status page (bsc#1127371).
- dma-buf: Fix memory leak in sync_file_merge() (git-fixes).
- dma-mapping: fix return type of dma_set_max_seg_size() (bsc#1051510).
- dmaengine: coh901318: Fix a double-lock bug (bsc#1051510).
- dmaengine: coh901318: Remove unused variable (bsc#1051510).
- dmaengine: Fix access to uninitialized dma_slave_caps (bsc#1051510).
- Documentation: Document arm64 kpti control (bsc#1162623).
- drivers/base/memory.c: cache blocks in radix tree to accelerate lookup (bsc#1159955 ltc#182993).
- drivers/base/memory.c: do not access uninitialized memmaps in soft_offline_page_store() (bsc#1051510).
- drivers/base/platform.c: kmemleak ignore a known leak (bsc#1051510).
- drivers/regulator: fix a missing check of return value (bsc#1051510).
- drm/amd/display: Retrain dongles when SINK_COUNT becomes non-zero (bsc#1111666).
- drm/amd/powerplay: remove set but not used variable 'us_mvdd' (bsc#1111666).
- drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc (bsc#1111666).
- drm/amdgpu: add function parameter description in 'amdgpu_device_set_cg_state' (bsc#1111666).
- drm/amdgpu: add function parameter description in 'amdgpu_gart_bind' (bsc#1051510).
- drm/amdgpu: fix bad DMA from INTERRUPT_CNTL2 (bsc#1114279)
- drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2) (bsc#1111666).
- drm/amdgpu: remove 4 set but not used variable in amdgpu_atombios_get_connector_info_from_object_table (bsc#1051510).
- drm/amdgpu: remove always false comparison in 'amdgpu_atombios_i2c_process_i2c_ch' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'amdgpu_connector' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'dig' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'dig_connector' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'invalid' (bsc#1111666).
- drm/amdgpu: remove set but not used variable 'mc_shared_chmap' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'mc_shared_chmap' from 'gfx_v6_0.c' and 'gfx_v7_0.c' (bsc#1051510).
- drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ (bsc#1051510).
- drm/fb-helper: Round up bits_per_pixel if possible (bsc#1051510).
- drm/i810: Prevent underflow in ioctl (bsc#1114279)
- drm/i915/gvt: Pin vgpu dma address before using (bsc#1112178)
- drm/i915/gvt: set guest display buffer as readonly (bsc#1112178)
- drm/i915/gvt: use vgpu lock for active state setting (bsc#1112178)
- drm/i915/perf: add missing delay for OA muxes configuration (bsc#1111666).
- drm/i915: Add missing include file &lt;linux/math64.h&gt; (bsc#1051510).
- drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (bsc#1111666).
- drm/i915: Fix pid leak with banned clients (bsc#1114279)
- drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set (bsc#1111666).
- drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV (bsc#1111666).
- drm/i915: Reacquire priolist cache after dropping the engine lock (bsc#1129770).
- drm/i915: Sanity check mmap length against object size (bsc#1111666).
- drm/msm: include linux/sched/task.h (bsc#1112178)
- drm/mst: Fix MST sideband up-reply failure handling (bsc#1051510).
- drm/nouveau/bar/gf100: ensure BAR is mapped (bsc#1111666).
- drm/nouveau/bar/nv50: check bar1 vmm return value (bsc#1111666).
- drm/nouveau/mmu: qualify vmm during dtor (bsc#1111666).
- drm/nouveau/secboot/gm20b: initialize pointer in gm20b_secboot_new() (bsc#1051510).
- drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler (bsc#1051510).
- drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028)
- drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028)
- drm/radeon: fix r1xx/r2xx register checker for POT textures (bsc#1114279)
- drm/rect: Avoid division by zero (bsc#1111666).
- drm/rect: update kerneldoc for drm_rect_clip_scaled() (bsc#1111666).
- drm/rockchip: lvds: Fix indentation of a #define (bsc#1051510).
- drm/rockchip: Round up _before_ giving to the clock framework (bsc#1114279)
- drm/sun4i: hdmi: Remove duplicate cleanup calls (bsc#1113956)
- drm/sun4i: tcon: Set min division of TCON0_DCLK to 1 (bsc#1111666).
- drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model (bsc#1111666).
- drm/ttm: ttm_tt_init_fields() can be static (bsc#1111666).
- drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add (bsc#1051510).
- drm: bridge: dw-hdmi: constify copied structure (bsc#1051510).
- drm: limit to INT_MAX in create_blob ioctl (bsc#1051510).
- drm: meson: venc: cvbs: fix CVBS mode matching (bsc#1051510).
- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable (bsc#1111666).
- drm: panel-lvds: Potential Oops in probe error handling (bsc#1114279)
- e1000e: Add support for Comet Lake (bsc#1158533).
- e1000e: Add support for Tiger Lake (bsc#1158533).
- e1000e: Increase pause and refresh time (bsc#1158533).
- e100: Fix passing zero to 'PTR_ERR' warning in e100_load_ucode_wait (bsc#1051510).
- ecryptfs_lookup_interpose(): lower_dentry-&gt;d_inode is not stable (bsc#1158646).
- ecryptfs_lookup_interpose(): lower_dentry-&gt;d_parent is not stable either (bsc#1158647).
- EDAC/ghes: Fix locking and memory barrier issues (bsc#1114279). EDAC/ghes: Do not warn when incrementing refcount on 0 (bsc#1114279).
- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632).
- enic: prevent waking up stopped tx queues over watchdog reset (bsc#1133147).
- exit: panic before exit_mm() on global init exit (bsc#1161549).
- ext2: check err when partial != NULL (bsc#1163859).
- ext4, jbd2: ensure panic when aborting with zero errno (bsc#1163853).
- ext4: check for directory entries too close to block end (bsc#1163861).
- ext4: fix a bug in ext4_wait_for_tail_page_commit (bsc#1163841).
- ext4: fix checksum errors with indexed dirs (bsc#1160979).
- ext4: fix deadlock allocating crypto bounce page from mempool (bsc#1163842).
- ext4: Fix mount failure with quota configured as module (bsc#1164471).
- ext4: fix mount failure with quota configured as module (bsc#1164471).
- ext4: fix punch hole for inline_data file systems (bsc#1158640).
- ext4: improve explanation of a mount failure caused by a misconfigured kernel (bsc#1163843).
- ext4: update direct I/O read lock pattern for IOCB_NOWAIT (bsc#1158639).
- extcon: max8997: Fix lack of path setting in USB device mode (bsc#1051510).
- firestream: fix memory leaks (bsc#1051510).
- fix autofs regression caused by follow_managed() changes (bsc#1159271).
- fix dget_parent() fastpath race (bsc#1159271).
- fix partial checked out tree build ... so that bisection does not break.
- fix the locking in dcache_readdir() and friends (bsc#1123328).
- fjes: fix missed check in fjes_acpi_add (bsc#1051510).
- fs/namei.c: fix missing barriers when checking positivity (bsc#1159271).
- fs/namei.c: pull positivity check into follow_managed() (bsc#1159271).
- fs/open.c: allow opening only regular files during execve() (bsc#1163845).
- fs: cifs: Fix atime update check vs mtime (bsc#1144333).
- fscrypt: do not set policy for a dead directory (bsc#1163846).
- ftrace: Add comment to why rcu_dereference_sched() is open coded (git-fixes).
- ftrace: Avoid potential division by zero in function profiler (bsc#1160784).
- ftrace: Protect ftrace_graph_hash with ftrace_sync (git-fixes).
- genirq/proc: Return proper error code when irq_set_affinity() fails (bnc#1105392).
- genirq: Prevent NULL pointer dereference in resend_irqs() (bsc#1051510).
- genirq: Properly pair kobject_del() with kobject_add() (bsc#1051510).
- gpio: Fix error message on out-of-range GPIO in lookup table (bsc#1051510).
- gtp: avoid zero size hashtable (networking-stable-20_01_01).
- gtp: do not allow adding duplicate tid and ms_addr pdp context (networking-stable-20_01_01).
- gtp: fix an use-after-free in ipv4_pdp_find() (networking-stable-20_01_01).
- gtp: fix wrong condition in gtp_genl_dump_pdp() (networking-stable-20_01_01).
- HID: doc: fix wrong data structure reference for UHID_OUTPUT (bsc#1051510).
- HID: hidraw, uhid: Always report EPOLLOUT (bsc#1051510).
- HID: hidraw: Fix returning EPOLLOUT from hidraw_poll (bsc#1051510).
- HID: intel-ish-hid: fixes incorrect error handling (bsc#1051510).
- HID: uhid: Fix returning EPOLLOUT from uhid_char_poll (bsc#1051510).
- hidraw: Return EPOLLOUT from hidraw_poll (bsc#1051510).
- hotplug/drc-info: Add code to search ibm,drc-info property (bsc#1157480 ltc#181028).
- hv_netvsc: Fix offset usage in netvsc_send_table() (bsc#1164598).
- hv_netvsc: Fix send_table offset in case of a host bug (bsc#1164598).
- hv_netvsc: Fix tx_table init in rndis_set_subchannel() (bsc#1164598).
- hv_netvsc: Fix unwanted rx_table reset (bsc#1164598).
- hwmon: (adt7475) Make volt2reg return same reg as reg2volt input (bsc#1051510).
- hwmon: (core) Do not use device managed functions for memory allocations (bsc#1051510).
- hwmon: (k10temp) Add support for AMD family 17h, model 70h CPUs (bsc#1163206).
- hwmon: (nct7802) Fix voltage limits to wrong registers (bsc#1051510).
- hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions (bsc#1051510).
- hwrng: stm32 - fix unbalanced pm_runtime_enable (bsc#1051510).
- i2c: imx: do not print error message on probe defer (bsc#1051510).
- IB/hfi1: Do not cancel unused work item (bsc#1114685 ).
- IB/mlx5: Fix steering rule of drop and count (bsc#1103991 ).
- IB/mlx5: Remove dead code (bsc#1103991).
- ibmveth: Detect unsupported packets before sending to the hypervisor (bsc#1159484 ltc#182983).
- ibmvnic: Bound waits for device queries (bsc#1155689 ltc#182047).
- ibmvnic: Fix completion structure initialization (bsc#1155689 ltc#182047).
- ibmvnic: Serialize device queries (bsc#1155689 ltc#182047).
- ibmvnic: Terminate waiting device threads after loss of service (bsc#1155689 ltc#182047).
- ice: fix stack leakage (bsc#1118661).
- idr: Fix idr_alloc_u32 on 32-bit systems (bsc#1051510).
- iio: adc: max9611: Fix too short conversion time delay (bsc#1051510).
- iio: buffer: align the size of scan bytes to size of the largest element (bsc#1051510).
- inet: protect against too small mtu values (networking-stable-19_12_16).
- Input: aiptek - fix endpoint sanity check (bsc#1051510).
- Input: cyttsp4_core - fix use after free bug (bsc#1051510).
- Input: goodix - add upside-down quirk for Teclast X89 tablet (bsc#1051510).
- Input: gtco - fix endpoint sanity check (bsc#1051510).
- Input: keyspan-remote - fix control-message timeouts (bsc#1051510).
- Input: pegasus_notetaker - fix endpoint sanity check (bsc#1051510).
- Input: pm8xxx-vib - fix handling of separate enable register (bsc#1051510).
- Input: rmi_f54 - read from FIFO in 32 byte blocks (bsc#1051510).
- Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register (bsc#1051510).
- Input: sur40 - fix interface sanity checks (bsc#1051510).
- Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus (bsc#1051510).
- Input: synaptics-rmi4 - do not increment rmiaddr for SMBus transfers (bsc#1051510).
- Input: synaptics-rmi4 - simplify data read in rmi_f54_work (bsc#1051510).
- iomap: Fix pipe page leakage during splicing (bsc#1158651).
- iommu/amd: Fix IOMMU perf counter clobbering during init (bsc#1162617).
- iommu/arm-smmu-v3: Populate VMID field for CMDQ_OP_TLBI_NH_VA (bsc#1164314).
- iommu/io-pgtable-arm: Fix race handling in split_blk_unmap() (bsc#1164115).
- iommu/iova: Init the struct iova to fix the possible memleak (bsc#1160469).
- iommu/mediatek: Correct the flush_iotlb_all callback (bsc#1160470).
- iommu/vt-d: Unlink device if failed to add to group (bsc#1160756).
- iommu: Remove device link to group on failure (bsc#1160755).
- ipmi: Do not allow device module unload when in use (bsc#1154768).
- ipv4: Fix table id reference in fib_sync_down_addr (networking-stable-19_11_10).
- iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop (git-fixes).
- iwlwifi: change monitor DMA to be coherent (bsc#1161243).
- iwlwifi: clear persistence bit according to device family (bsc#1111666).
- iwlwifi: do not throw error when trying to remove IGTK (bsc#1051510).
- iwlwifi: mvm: fix NVM check for 3168 devices (bsc#1051510).
- iwlwifi: mvm: force TCM re-evaluation on TCM resume (bsc#1111666).
- iwlwifi: mvm: Send non offchannel traffic via AP sta (bsc#1051510).
- iwlwifi: mvm: synchronize TID queue removal (bsc#1051510).
- iwlwifi: pcie: fix erroneous print (bsc#1111666).
- iwlwifi: trans: Clear persistence bit when starting the FW (bsc#1111666).
- jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal (bsc#1163862).
- jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer (bsc#1163836).
- jbd2: Fix possible overflow in jbd2_log_space_left() (bsc#1163860).
- jbd2: make sure ESHUTDOWN to be recorded in the journal superblock (bsc#1163863).
- jbd2: move the clearing of b_modified flag to the journal_unmap_buffer() (bsc#1163880).
- jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record (bsc#1163852).
- kABI fix for 'ipmi: Do not allow device module unload when in use' (bsc#1154768).
- kABI fixup for alloc_dax_region (bsc#1158071,bsc#1160678).
- kABI workaround for can/skb.h inclusion (bsc#1051510).
- kABI/severities: Whitelist rpaphp_get_drc_props (bsc#1157480 ltc#181028).
- kABI: add _q suffix to exports that take struct dh (bsc#1155331).
- kABI: protect struct sctp_ep_common (kabi).
- kABI: Protest new fields in BPF structs (bsc#1160618).
- kconfig: fix broken dependency in randconfig-generated .config (bsc#1051510).
- kernel-binary.spec.in: do not recommend firmware for kvmsmall and azure flavor (boo#1161360).
- kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail (bsc#1160787).
- kernfs: Fix range checks in kernfs_get_target_path (bsc#1051510).
- kexec: bail out upon SIGKILL when allocating memory (git-fixes).
- KVM: Clean up __kvm_gfn_to_hva_cache_init() and its callers (bsc#1133021).
- KVM: fix spectrev1 gadgets (bsc#1164705).
- KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails (bsc#1061840).
- KVM: PPC: Book3S PR: Fix -Werror=return-type build failure (bsc#1061840).
- KVM: PPC: Book3S PR: Free shared page if mmu initialization fails (bsc#1061840).
- KVM: s390: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl (git-fixes).
- KVM: s390: Test for bad access register and size at the start of S390_MEM_OP (git-fixes).
- KVM: SVM: Override default MMIO mask if memory encryption is enabled (bsc#1162618).
- KVM: x86: Host feature SSBD does not imply guest feature SPEC_CTRL_SSBD (bsc#1160476).
- KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks (bsc#1164734).
- KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks (bsc#1164728).
- KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks (bsc#1164729).
- KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF attacks (bsc#1164712).
- KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks (bsc#1164730).
- KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c (bsc#1164733).
- KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks (bsc#1164731).
- KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks (bsc#1164732).
- KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks (bsc#1164735).
- KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks (bsc#1164705).
- KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks (bsc#1164727).
- KVM: x86: Remove a spurious export of a static function (bsc#1158954).
- lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop (bsc#1050549).
- leds: Allow to call led_classdev_unregister() unconditionally (bsc#1161674).
- leds: class: ensure workqueue is initialized before setting brightness (bsc#1161674).
- lib/scatterlist.c: adjust indentation in __sg_alloc_table (bsc#1051510).
- lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more() (bsc#1051510).
- lib: crc64: include &lt;linux/crc64.h&gt; for 'crc64_be' (bsc#1163762).
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (bsc#1153535).
- libnvdimm/pfn: Account for PAGE_SIZE &gt; info-block-size in nd_pfn_init() (bsc#1127682 bsc#1153535 ltc#175033 ltc#181834).
- libnvdimm: Fix devm_nsio_enable() kabi (bsc#1153535).
- livepatch/samples/selftest: Use klp_shadow_alloc() API correctly (bsc#1071995).
- livepatch/selftest: Clean up shadow variable names and type (bsc#1071995).
- locking/rwsem: Prevent decrement of reader count before increment (bsc#1050549).
- loop: fix no-unmap write-zeroes request behavior (bsc#1158637).
- mac80211: Do not send Layer 2 Update frame before authorization (bsc#1051510).
- mac80211: fix ieee80211_txq_setup_flows() failure path (bsc#1111666).
- mac80211: fix station inactive_time shortly after boot (bsc#1051510).
- mac80211: Fix TKIP replay protection immediately after key setup (bsc#1051510).
- mac80211: mesh: restrict airtime metric to peered established plinks (bsc#1051510).
- macvlan: do not assume mac_header is set in macvlan_broadcast() (bsc#1051510).
- macvlan: use skb_reset_mac_header() in macvlan_queue_xmit() (bsc#1051510).
- mailbox: mailbox-test: fix null pointer if no mmio (bsc#1051510).
- md/raid0: Fix buffer overflow at debug print (bsc#1164051).
- media/v4l2-core: set pages dirty upon releasing DMA buffers (bsc#1051510).
- media: af9005: uninitialized variable printked (bsc#1051510).
- media: cec.h: CEC_OP_REC_FLAG_ values were swapped (bsc#1051510).
- media: cec: CEC 2.0-only bcast messages were ignored (git-fixes).
- media: cec: report Vendor ID after initialization (bsc#1051510).
- media: digitv: do not continue if remote control state can't be read (bsc#1051510).
- media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0 (bsc#1051510).
- media: exynos4-is: fix wrong mdev and v4l2 dev order in error path (git-fixes).
- media: gspca: zero usb_buf (bsc#1051510).
- media: iguanair: fix endpoint sanity check (bsc#1051510).
- media: ov6650: Fix control handler not freed on init error (git-fixes).
- media: ov6650: Fix crop rectangle alignment not passed back (git-fixes).
- media: ov6650: Fix incorrect use of JPEG colorspace (git-fixes).
- media: pulse8-cec: fix lost cec_transmit_attempt_done() call.
- media: pulse8-cec: return 0 when invalidating the logical address (bsc#1051510).
- media: stkwebcam: Bugfix for wrong return values (bsc#1051510).
- media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors (bsc#1051510).
- media: uvcvideo: Fix error path in control parsing failure (git-fixes).
- media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE (bsc#1051510).
- media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT (bsc#1051510).
- media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments (bsc#1051510).
- mei: bus: prefix device names on bus with the bus name (bsc#1051510).
- mfd: da9062: Fix watchdog compatible string (bsc#1051510).
- mfd: dln2: More sanity checking for endpoints (bsc#1051510).
- mfd: rn5t618: Mark ADC control register volatile (bsc#1051510).
- missing escaping of backslashes in macro expansions Fixes: f3b74b0ae86b ('rpm/kernel-subpackage-spec: Unify dependency handling.') Fixes: 3fd22e219f77 ('rpm/kernel-subpackage-spec: Fix empty Recommends tag (bsc#1143959)')
- mlxsw: spectrum_qdisc: Ignore grafting of invisible FIFO (bsc#1112374).
- mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel (bsc#1112374).
- mm, memory_hotplug: do not clear numa_node association after hot_remove (bnc#1115026).
- mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock (bsc#1159394).
- mm: memory_hotplug: use put_device() if device_register fail (bsc#1159955 ltc#182993).
- mmc: mediatek: fix CMD_TA to 2 for MT8173 HS200/HS400 mode (bsc#1051510).
- mmc: sdhci-of-esdhc: fix P2020 errata handling (bsc#1051510).
- mmc: sdhci-of-esdhc: Revert 'mmc: sdhci-of-esdhc: add erratum A-009204 support' (bsc#1051510).
- mmc: sdhci: Add a quirk for broken command queuing (git-fixes).
- mmc: sdhci: fix minimum clock rate for v3 controller (bsc#1051510).
- mmc: sdhci: Workaround broken command queuing on Intel GLK (git-fixes).
- mmc: spi: Toggle SPI polarity, do not hardcode it (bsc#1051510).
- mmc: tegra: fix SDR50 tuning override (bsc#1051510).
- moduleparam: fix parameter description mismatch (bsc#1051510).
- mod_devicetable: fix PHY module format (networking-stable-19_12_28).
- mqprio: Fix out-of-bounds access in mqprio_dump (bsc#1109837).
- mtd: fix mtd_oobavail() incoherent returned value (bsc#1051510).
- mwifiex: debugfs: correct histogram spacing, formatting (bsc#1051510).
- mwifiex: delete unused mwifiex_get_intf_num() (bsc#1111666).
- mwifiex: drop most magic numbers from mwifiex_process_tdls_action_frame() (git-fixes).
- mwifiex: fix potential NULL dereference and use after free (bsc#1051510).
- mwifiex: update set_mac_address logic (bsc#1111666).
- namei: only return -ECHILD from follow_dotdot_rcu() (bsc#1163851).
- nbd: prevent memory leak (bsc#1158638).
- net, sysctl: Fix compiler warning when only cBPF is present (bsc#1109837).
- net/ibmvnic: Fix typo in retry check (bsc#1155689 ltc#182047).
- net/mlx4_en: fix mlx4 ethtool -N insertion (networking-stable-19_11_25).
- net/mlx4_en: Fix wrong limitation for number of TX rings (bsc#1103989).
- net/mlx5: Accumulate levels for chains prio namespaces (bsc#1103990).
- net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq (bsc#1046303).
- net/mlx5: Update the list of the PCI supported devices (bsc#1127611).
- net/mlx5e: Fix set vf link state error flow (networking-stable-19_11_25).
- net/mlx5e: Fix SFF 8472 eeprom length (git-fixes).
- net/mlx5e: Query global pause state before setting prio2buffer (bsc#1103990).
- net/mlxfw: Fix out-of-memory error in mfa2 flash burning (bsc#1051858).
- net/sched: act_pedit: fix WARN() in the traffic path (networking-stable-19_11_25).
- net: add sendmsg_locked and sendpage_locked to af_inet6 (bsc#1144162).
- net: bridge: deny dev_set_mac_address() when unregistering (networking-stable-19_12_16).
- net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size() (git-fixes).
- net: dst: Force 4-byte alignment of dst_metrics (networking-stable-19_12_28).
- net: ena: fix napi handler misbehavior when the napi budget is zero (networking-stable-20_01_01).
- net: ethernet: octeon_mgmt: Account for second possible VLAN header (networking-stable-19_11_10).
- net: ethernet: ti: cpsw: fix extra rx interrupt (networking-stable-19_12_16).
- net: fix data-race in neigh_event_send() (networking-stable-19_11_10).
- net: hisilicon: Fix a BUG trigered by wrong bytes_compl (networking-stable-19_12_28).
- net: hns3: fix ETS bandwidth validation bug (bsc#1104353 ).
- net: nfc: nci: fix a possible sleep-in-atomic-context bug in nci_uart_tty_receive() (networking-stable-19_12_28).
- net: phy: at803x: Change error to EINVAL for invalid MAC (bsc#1051510).
- net: phy: broadcom: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: Check against net_device being NULL (bsc#1051510).
- net: phy: dp83867: Set up RGMII TX delay (bsc#1051510).
- net: phy: Fix not to call phy_resume() if PHY is not attached (bsc#1051510).
- net: phy: Fix the register offsets in Broadcom iProc mdio mux driver (bsc#1051510).
- net: phy: fixed_phy: Fix fixed_phy not checking GPIO (bsc#1051510).
- net: phy: marvell: clear wol event before setting it (bsc#1051510).
- net: phy: marvell: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: meson-gxl: check phy_write return value (bsc#1051510).
- net: phy: micrel: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: mscc: read 'vsc8531, edge-slowdown' as an u32 (bsc#1051510).
- net: phy: mscc: read 'vsc8531,vddmac' as an u32 (bsc#1051510).
- net: phy: xgene: disable clk on error paths (bsc#1051510).
- net: phy: xgmiitorgmii: Check phy_driver ready before accessing (bsc#1051510).
- net: phy: xgmiitorgmii: Check read_status results (bsc#1051510).
- net: phy: xgmiitorgmii: Support generic PHY status read (bsc#1051510).
- net: psample: fix skb_over_panic (networking-stable-19_12_03).
- net: qlogic: Fix error paths in ql_alloc_large_buffers() (networking-stable-19_12_28).
- net: rtnetlink: prevent underflows in do_setvfinfo() (networking-stable-19_11_25).
- net: sched: correct flower port blocking (git-fixes).
- net: sched: ensure opts_len &lt;= IP_TUNNEL_OPTS_MAX in act_tunnel_key (bsc#1109837).
- net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues (bsc#1109837).
- net: sched: fix `tc -s class show` no bstats on class with nolock subqueues (networking-stable-19_12_03).
- net: usb: lan78xx: Fix suspend/resume PHY register access error (networking-stable-19_12_28).
- net: usb: lan78xx: limit size of local TSO packets (bsc#1051510).
- net: usb: qmi_wwan: add support for DW5821e with eSIM support (networking-stable-19_11_10).
- net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules (networking-stable-19_11_18).
- netfilter: nf_queue: enqueue skbs with NULL dst (git-fixes).
- new helper: lookup_positive_unlocked() (bsc#1159271).
- NFC: fdp: fix incorrect free object (networking-stable-19_11_10).
- NFC: pn533: fix bulk-message timeout (bsc#1051510).
- NFC: pn544: Adjust indentation in pn544_hci_check_presence (git-fixes).
- NFC: st21nfca: fix double free (networking-stable-19_11_10).
- nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info (bsc#1163774).
- ocfs2: fix panic due to ocfs2_wq is null (bsc#1158644).
- ocfs2: fix passing zero to 'PTR_ERR' warning (bsc#1158649).
- openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() (networking-stable-19_12_03).
- openvswitch: remove another BUG_ON() (networking-stable-19_12_03).
- openvswitch: support asymmetric conntrack (networking-stable-19_12_16).
- orinoco_usb: fix interface sanity check (git-fixes).
- PCI/IOV: Fix memory leak in pci_iov_add_virtfn() (git-fixes).
- PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity() (bsc#1051510).
- PCI/switchtec: Fix vep_vector_number ioread width (bsc#1051510).
- PCI: Add DMA alias quirk for Intel VCA NTB (bsc#1051510).
- PCI: Do not disable bridge BARs when assigning bus resources (bsc#1051510).
- PCI: pciehp: Avoid returning prematurely from sysfs requests (git-fixes).
- PCI: rpaphp: Add drc-info support for hotplug slot registration (bsc#1157480 ltc#181028).
- PCI: rpaphp: Annotate and correctly byte swap DRC properties (bsc#1157480 ltc#181028).
- PCI: rpaphp: Avoid a sometimes-uninitialized warning (bsc#1157480 ltc#181028).
- PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-info (bsc#1157480 ltc#181028).
- PCI: rpaphp: Do not rely on firmware feature to imply drc-info support (bsc#1157480 ltc#181028).
- PCI: rpaphp: Fix up pointer to first drc-info entry (bsc#1157480 ltc#181028).
- percpu: Separate decrypted varaibles anytime encryption can be enabled (bsc#1114279).
- perf/x86/intel: Fix inaccurate period in context switch for auto-reload (bsc#1164315).
- phy: qualcomm: Adjust indentation in read_poll_timeout (bsc#1051510).
- pinctrl: cherryview: Fix irq_valid_mask calculation (bsc#1111666).
- pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues (bsc#1051510).
- pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELF_B and SD1_CLK_B (bsc#1051510).
- pinctrl: xway: fix gpio-hog related boot issues (bsc#1051510).
- pktcdvd: remove warning on attempting to register non-passthrough dev (bsc#1051510).
- platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 (bsc#1051510).
- platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size (bsc#1051510).
- platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer (bsc#1051510).
- platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes (bsc#1051510).
- platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table (bsc#1051510).
- PM / AVS: SmartReflex: NULL check before some freeing functions is not needed (bsc#1051510).
- PM / Domains: Deal with multiple states but no governor in genpd (bsc#1051510).
- power: supply: ltc2941-battery-gauge: fix use-after-free (bsc#1051510).
- powerpc/archrandom: fix arch_get_random_seed_int() (bsc#1065729).
- powerpc/irq: fix stack overflow verification (bsc#1065729).
- powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (bsc#1065729).
- powerpc/mm: Remove kvm radix prefetch workaround for Power9 DD2.2 (bsc#1061840).
- powerpc/papr_scm: Do not enable direct map for a region by default (bsc#1129551).
- powerpc/papr_scm: Fix leaking 'bus_desc.provider_name' in some paths (bsc#1142685 ltc#179509).
- powerpc/pkeys: remove unused pkey_allows_readwrite (bsc#1065729).
- powerpc/powernv: Disable native PCIe port management (bsc#1065729).
- powerpc/pseries/hotplug-memory: Change rc variable to bool (bsc#1065729).
- powerpc/pseries/lparcfg: Fix display of Maximum Memory (bsc#1162028 ltc#181740).
- powerpc/pseries/mobility: notify network peers after migration (bsc#1152631 ltc#181798).
- powerpc/pseries/vio: Fix iommu_table use-after-free refcount warning (bsc#1065729).
- powerpc/pseries: Add cpu DLPAR support for drc-info property (bsc#1157480 ltc#181028).
- powerpc/pseries: Advance pfn if section is not present in lmb_is_removable() (bsc#1065729).
- powerpc/pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce for DDW (bsc#1065729).
- powerpc/pseries: Drop pointless static qualifier in vpa_debugfs_init() (git-fixes).
- powerpc/pseries: Enable support for ibm,drc-info property (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix bad drc_index_start value parsing of drc-info entry (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix drc-info mappings of logical cpus to drc-index (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix vector5 in ibm architecture vector table (bsc#1157480 ltc#181028).
- powerpc/pseries: Revert support for ibm,drc-info devtree property (bsc#1157480 ltc#181028).
- powerpc/security: Fix debugfs data leak on 32-bit (bsc#1065729).
- powerpc/tm: Fix clearing MSR[TS] in current when reclaiming on signal delivery (bsc#1118338 ltc#173734).
- powerpc/tools: Do not quote $objdump in scripts (bsc#1065729).
- powerpc/xive: Discard ESB load value when interrupt is invalid (bsc#1085030).
- powerpc/xive: Skip ioremap() of ESB pages for LSI interrupts (bsc#1085030).
- powerpc/xmon: do not access ASDR in VMs (bsc#1065729).
- powerpc: Allow 64bit VDSO __kernel_sync_dicache to work across ranges &gt;4GB (bnc#1151927 5.3.17).
- powerpc: Allow flush_icache_range to work across ranges &gt;4GB (bnc#1151927 5.3.17).
- powerpc: avoid adjusting memory_limit for capture kernel memory reservation (bsc#1140025 ltc#176086).
- powerpc: Enable support for ibm,drc-info devtree property (bsc#1157480 ltc#181028).
- powerpc: Fix vDSO clock_getres() (bsc#1065729).
- powerpc: reserve memory for capture kernel after hugepages init (bsc#1140025 ltc#176086).
- ppp: Adjust indentation into ppp_async_input (git-fixes).
- prevent active file list thrashing due to refault detection (VM Performance, bsc#1156286).
- pseries/drc-info: Search DRC properties for CPU indexes (bsc#1157480 ltc#181028).
- pstore/ram: Write new dumps to start of recycled zones (bsc#1051510).
- pwm: Clear chip_data in pwm_put() (bsc#1051510).
- pwm: clps711x: Fix period calculation (bsc#1051510).
- pwm: omap-dmtimer: Remove PWM chip in .remove before making it unfunctional (git-fixes).
- pwm: Remove set but not set variable 'pwm' (git-fixes).
- pxa168fb: Fix the function used to release some memory in an error (bsc#1114279)
- qede: Disable hardware gro when xdp prog is installed (bsc#1086314 bsc#1086313 bsc#1086301 ).
- qede: Fix multicast mac configuration (networking-stable-19_12_28).
- qede: fix NULL pointer deref in __qede_remove() (networking-stable-19_11_10).
- qmi_wwan: Add support for Quectel RM500Q (bsc#1051510).
- quota: Check that quota is not dirty before release (bsc#1163858).
- quota: fix livelock in dquot_writeback_dquots (bsc#1163857).
- r8152: add missing endpoint sanity check (bsc#1051510).
- r8152: get default setting of WOL before initializing (bsc#1051510).
- random: move FIPS continuous test to output functions (bsc#1155334).
- RDMA/bnxt_re: Avoid freeing MR resources if dereg fails (bsc#1050244).
- RDMA/bnxt_re: Enable SRIOV VF support on Broadcom's 57500 adapter series (bsc#1154916).
- RDMA/bnxt_re: Fix chip number validation Broadcom's Gen P5 series (bsc#1157895).
- RDMA/bnxt_re: Fix missing le16_to_cpu (bsc#1157895).
- RDMA/hns: Bugfix for qpc/cqc timer configuration (bsc#1104427 bsc#1126206).
- RDMA/hns: Correct the value of srq_desc_size (bsc#1104427 ).
- RDMA/hns: Fix to support 64K page for srq (bsc#1104427 ).
- RDMA/hns: Prevent memory leaks of eq-&gt;buf_list (bsc#1104427 ).
- README.BRANCH: Removing myself from the maintainer list
- README.BRANCH: Update the branch name to cve/linux-4.12
- regulator: Fix return value of _set_load() stub (bsc#1051510).
- regulator: rk808: Lower log level on optional GPIOs being not available (bsc#1051510).
- regulator: rn5t618: fix module aliases (bsc#1051510).
- regulator: tps65910: fix a missing check of return value (bsc#1051510).
- reiserfs: Fix memory leak of journal device string (bsc#1163867).
- reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling (bsc#1163869).
- reset: fix reset_control_ops kerneldoc comment (bsc#1051510).
- resource: fix locking in find_next_iomem_res() (bsc#1114279).
- Revert 'ath10k: fix DMA related firmware crashes on multiple devices' (git-fixes).
- Revert 'Input: synaptics-rmi4 - do not increment rmiaddr for SMBus transfers' (bsc#1051510).
- Revert 'locking/pvqspinlock: Do not wait if vCPU is preempted' (bsc#1050549).
- Revert 'mmc: sdhci: Fix incorrect switch to HS mode' (bsc#1051510).
- rpm/kabi.pl: support new (&gt;=5.4) Module.symvers format (new symbol namespace field)
- rpm/kernel-binary.spec.in: Conflict with too old powerpc-utils (jsc#ECO-920, jsc#SLE-11054, jsc#SLE-11322).
- rpm/kernel-binary.spec.in: Replace Novell with SUSE
- rpm/kernel-subpackage-spec: Exclude kernel-firmware recommends (bsc#1143959) For reducing the dependency on kernel-firmware in sub packages
- rpm/kernel-subpackage-spec: Fix empty Recommends tag (bsc#1143959)
- rpm/kernel-subpackage-spec: fix kernel-default-base build There were some issues with recent changes to subpackage dependencies handling:
- rpm/kernel-subpackage-spec: Unify dependency handling.
- rpm/modules.fips: update module list (bsc#1157853)
- rsi_91x_usb: fix interface sanity check (git-fixes).
- rt2800: remove errornous duplicate condition (git-fixes).
- rtc: cmos: Stop using shared IRQ (bsc#1051510).
- rtc: dt-binding: abx80x: fix resistance scale (bsc#1051510).
- rtc: hym8563: Return -EINVAL if the time is known to be invalid (bsc#1051510).
- rtc: max8997: Fix the returned value in case of error in 'max8997_rtc_read_alarm()' (bsc#1051510).
- rtc: msm6242: Fix reading of 10-hour digit (bsc#1051510).
- rtc: pcf8523: set xtal load capacitance from DT (bsc#1051510).
- rtc: s35390a: Change buf's type to u8 in s35390a_init (bsc#1051510).
- rtl818x: fix potential use after free (bsc#1051510).
- rtl8xxxu: fix interface sanity check (git-fixes).
- rtlwifi: Fix MAX MPDU of VHT capability (git-fixes).
- rtlwifi: Remove redundant semicolon in wifi.h (git-fixes).
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (bsc#1111666).
- s390/qeth: clean up page frag creation (git-fixes).
- s390/qeth: consolidate skb allocation (git-fixes).
- s390/qeth: ensure linear access to packet headers (git-fixes).
- s390/qeth: guard against runt packets (git-fixes).
- sched/fair: Add tmp_alone_branch assertion (bnc#1156462).
- sched/fair: Fix insertion in rq-&gt;leaf_cfs_rq_list (bnc#1156462).
- sched/fair: Fix O(nr_cgroups) in the load balancing path (bnc#1156462).
- sched/fair: Optimize update_blocked_averages() (bnc#1156462).
- sched/fair: WARN() and refuse to set buddy when !se-&gt;on_rq (bsc#1158132).
- scsi: lpfc: fix build failure with DEBUGFS disabled (bsc#1154601).
- scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (bsc#1158013).
- scsi: qla2xxx: Add D-Port Diagnostic reason explanation logs (bsc#1158013).
- scsi: qla2xxx: Added support for MPI and PEP regions for ISP28XX (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Cleanup unused async_logout_done (bsc#1158013).
- scsi: qla2xxx: Consolidate fabric scan (bsc#1158013).
- scsi: qla2xxx: Correct fcport flags handling (bsc#1158013).
- scsi: qla2xxx: Correctly retrieve and interpret active flash region (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Fix a NULL pointer dereference in an error path (bsc#1157966 bsc#1158013 bsc#1157424).
- scsi: qla2xxx: Fix fabric scan hang (bsc#1158013).
- scsi: qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Fix mtcp dump collection failure (bsc#1158013).
- scsi: qla2xxx: Fix RIDA Format-2 (bsc#1158013).
- scsi: qla2xxx: Fix stuck login session using prli_pend_timer (bsc#1158013).
- scsi: qla2xxx: Fix stuck session in GNL (bsc#1158013).
- scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type (bsc#1158013).
- scsi: qla2xxx: Fix unbound NVME response length (bsc#1157966 bsc#1158013 bsc#1157424).
- scsi: qla2xxx: Fix update_fcport for current_topology (bsc#1158013).
- scsi: qla2xxx: Improve readability of the code that handles qla_flt_header (bsc#1158013).
- scsi: qla2xxx: Remove defer flag to indicate immeadiate port loss (bsc#1158013).
- scsi: qla2xxx: Update driver version to 10.01.00.22-k (bsc#1158013).
- scsi: qla2xxx: Use common routine to free fcport struct (bsc#1158013).
- scsi: qla2xxx: Use get_unaligned_*() instead of open-coding these functions (bsc#1158013).
- scsi: zfcp: trace channel log even for FCP command responses (git-fixes).
- sctp: cache netns in sctp_ep_common (networking-stable-19_12_03).
- sctp: fully initialize v4 addr in some functions (networking-stable-19_12_28).
- serial: 8250_bcm2835aux: Fix line mismatch on driver unbind (bsc#1051510).
- serial: ifx6x60: add missed pm_runtime_disable (bsc#1051510).
- serial: max310x: Fix tx_empty() callback (bsc#1051510).
- serial: pl011: Fix DMA -&gt;flush_buffer() (bsc#1051510).
- serial: serial_core: Perform NULL checks for break_ctl ops (bsc#1051510).
- serial: stm32: fix transmit_chars when tx is stopped (bsc#1051510).
- sfc: Only cancel the PPS workqueue if it exists (networking-stable-19_11_25).
- sfc: Remove 'PCIE error reporting unavailable' (bsc#1161472).
- sh_eth: check sh_eth_cpu_data::dual_port when dumping registers (bsc#1051510).
- sh_eth: fix dumping ARSTR (bsc#1051510).
- sh_eth: fix invalid context bug while calling auto-negotiation by ethtool (bsc#1051510).
- sh_eth: fix invalid context bug while changing link options by ethtool (bsc#1051510).
- sh_eth: fix TSU init on SH7734/R8A7740 (bsc#1051510).
- sh_eth: fix TXALCR1 offsets (bsc#1051510).
- sh_eth: TSU_QTAG0/1 registers the same as TSU_QTAGM0/1 (bsc#1051510).
- smb3: Fix crash in SMB2_open_init due to uninitialized field in compounding path (bsc#1144333).
- smb3: Fix persistent handles reconnect (bsc#1144333).
- smb3: fix refcount underflow warning on unmount when no directory leases (bsc#1144333).
- smb3: remove confusing dmesg when mounting with encryption ('seal') (bsc#1144333).
- soc/tegra: fuse: Correct straps' address for older Tegra124 device trees (bsc#1051510).
- soc: renesas: rcar-sysc: Add goto to of_node_put() before return (bsc#1051510).
- soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot (bsc#1051510).
- spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch (bsc#1051510).
- spi: omap2-mcspi: Set FIFO DMA trigger level to word length (bsc#1051510).
- spi: tegra114: clear packed bit for unpacked mode (bsc#1051510).
- spi: tegra114: configure dma burst size to fifo trig level (bsc#1051510).
- spi: tegra114: fix for unpacked mode transfers (bsc#1051510).
- spi: tegra114: flush fifos (bsc#1051510).
- spi: tegra114: terminate dma and reset on transfer timeout (bsc#1051510).
- sr_vendor: support Beurer GL50 evo CD-on-a-chip devices (boo#1164632).
- staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 (bsc#1051510).
- Staging: iio: adt7316: Fix i2c data reading, set the data field (bsc#1051510).
- staging: rtl8188eu: fix interface sanity check (bsc#1051510).
- staging: rtl8192e: fix potential use after free (bsc#1051510).
- staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids (bsc#1051510).
- staging: rtl8723bs: Drop ACPI device ids (bsc#1051510).
- staging: vt6656: correct packet types for CTS protect, mode (bsc#1051510).
- staging: vt6656: Fix false Tx excessive retries reporting (bsc#1051510).
- staging: vt6656: use NULLFUCTION stack on mac80211 (bsc#1051510).
- staging: wlan-ng: ensure error return is actually returned (bsc#1051510).
- stm class: Fix a double free of stm_source_device (bsc#1051510).
- stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (bsc#1088810, bsc#1161702).
- stop_machine: Atomically queue and wake stopper threads (bsc#1088810, bsc#1161702).
- stop_machine: Disable preemption after queueing stopper threads (bsc#1088810, bsc#1161702).
- stop_machine: Disable preemption when waking two stopper threads (bsc#1088810, bsc#1161702).
- tcp: clear tp-&gt;packets_out when purging write queue (bsc#1160560).
- tcp: do not send empty skb from tcp_write_xmit() (networking-stable-20_01_01).
- tcp: exit if nothing to retransmit on RTO timeout (bsc#1160560, stable 4.14.159).
- tcp: md5: fix potential overestimation of TCP option space (networking-stable-19_12_16).
- thermal: Fix deadlock in thermal thermal_zone_device_check (bsc#1051510).
- tipc: fix a missing check of genlmsg_put (bsc#1051510).
- tipc: fix link name length check (bsc#1051510).
- tipc: fix memory leak in tipc_nl_compat_publ_dump (bsc#1051510).
- tipc: fix skb may be leaky in tipc_link_input (bsc#1051510).
- tracing: Annotate ftrace_graph_hash pointer with __rcu (git-fixes).
- tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu (git-fixes).
- tracing: Fix tracing_stat return values in error handling paths (git-fixes).
- tracing: Fix very unlikely race of registering two stat tracers (git-fixes).
- tracing: Have the histogram compare functions convert to u64 first (bsc#1160210).
- tracing: xen: Ordered comparison of function pointers (git-fixes).
- tty/serial: atmel: Add is_half_duplex helper (bsc#1051510).
- tty: n_hdlc: fix build on SPARC (bsc#1051510).
- tty: serial: msm_serial: Fix lockup for sysrq and oops (bsc#1051510).
- tty: vt: keyboard: reject invalid keycodes (bsc#1051510).
- uaccess: Add non-pagefault user-space write function (bsc#1083647).
- ubifs: Correctly initialize c-&gt;min_log_bytes (bsc#1158641).
- ubifs: do not trigger assertion on invalid no-key filename (bsc#1163850).
- ubifs: Fix deadlock in concurrent bulk-read and writepage (bsc#1163856).
- ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag (bsc#1163855).
- ubifs: Limit the number of pages in shrink_liability (bsc#1158643).
- ubifs: Reject unsupported ioctl flags explicitly (bsc#1163844).
- udp: fix integer overflow while computing available space in sk_rcvbuf (networking-stable-20_01_01).
- usb-storage: Disable UAS on JMicron SATA enclosure (bsc#1051510).
- usb: adutux: fix interface sanity check (bsc#1051510).
- usb: Allow USB device to be warm reset in suspended state (bsc#1051510).
- usb: atm: ueagle-atm: add missing endpoint check (bsc#1051510).
- usb: chipidea: host: Disable port power only if previously enabled (bsc#1051510).
- usb: core: fix check for duplicate endpoints (git-fixes).
- usb: core: hub: Improved device recognition on remote wakeup (bsc#1051510).
- usb: core: urb: fix URB structure initialization function (bsc#1051510).
- usb: documentation: flags on usb-storage versus UAS (bsc#1051510).
- usb: dwc3: debugfs: Properly print/set link state for HS (bsc#1051510).
- usb: dwc3: do not log probe deferrals; but do log other error codes (bsc#1051510).
- usb: dwc3: ep0: Clear started flag on completion (bsc#1051510).
- usb: dwc3: turn off VBUS when leaving host mode (bsc#1051510).
- usb: EHCI: Do not return -EPIPE when hub is disconnected (git-fixes).
- usb: gadget: f_ecm: Use atomic_t to track in-flight request (bsc#1051510).
- usb: gadget: f_ncm: Use atomic_t to track in-flight request (bsc#1051510).
- usb: gadget: legacy: set max_speed to super-speed (bsc#1051510).
- usb: gadget: pch_udc: fix use after free (bsc#1051510).
- usb: gadget: u_serial: add missing port entry locking (bsc#1051510).
- usb: gadget: Zero ffs_io_data (bsc#1051510).
- usb: host: xhci-hub: fix extra endianness conversion (bsc#1051510).
- usb: idmouse: fix interface sanity checks (bsc#1051510).
- usb: mon: Fix a deadlock in usbmon between mmap and read (bsc#1051510).
- usb: mtu3: fix dbginfo in qmu_tx_zlp_error_handler (bsc#1051510).
- usb: musb: dma: Correct parameter passed to IRQ handler (bsc#1051510).
- usb: musb: fix idling for suspend after disconnect interrupt (bsc#1051510).
- usb: roles: fix a potential use after free (git-fixes).
- usb: serial: ch341: handle unbound port at reset_resume (bsc#1051510).
- usb: serial: ftdi_sio: add device IDs for U-Blox C099-F9P (bsc#1051510).
- usb: serial: io_edgeport: add missing active-port sanity check (bsc#1051510).
- usb: serial: io_edgeport: fix epic endpoint lookup (bsc#1051510).
- usb: serial: io_edgeport: handle unbound ports on URB completion (bsc#1051510).
- usb: serial: io_edgeport: use irqsave() in USB's complete callback (bsc#1051510).
- usb: serial: ir-usb: add missing endpoint sanity check (bsc#1051510).
- usb: serial: ir-usb: fix IrLAP framing (bsc#1051510).
- usb: serial: ir-usb: fix link-speed handling (bsc#1051510).
- usb: serial: keyspan: handle unbound ports (bsc#1051510).
- usb: serial: opticon: fix control-message timeouts (bsc#1051510).
- usb: serial: option: Add support for Quectel RM500Q (bsc#1051510).
- usb: serial: option: add support for Quectel RM500Q in QDL mode (git-fixes).
- usb: serial: option: add Telit ME910G1 0x110a composition (git-fixes).
- usb: serial: option: add ZLP support for 0x1bc7/0x9010 (git-fixes).
- usb: serial: quatech2: handle unbound ports (bsc#1051510).
- usb: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx (bsc#1051510).
- usb: serial: suppress driver bind attributes (bsc#1051510).
- usb: typec: tcpci: mask event interrupts when remove driver (bsc#1051510).
- usb: uas: heed CAPACITY_HEURISTICS (bsc#1051510).
- usb: uas: honor flag to avoid CAPACITY16 (bsc#1051510).
- usb: xhci: Fix build warning seen with CONFIG_PM=n (bsc#1051510).
- usb: xhci: only set D3hot for pci device (bsc#1051510).
- usbip: Fix error path of vhci_recv_ret_submit() (git-fixes).
- usbip: Fix receive error in vhci-hcd when using scatter-gather (bsc#1051510).
- vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset == -1 (bsc#1051510).
- vhost/vsock: accept only packets with the right dst_cid (networking-stable-20_01_01).
- video: backlight: Add devres versions of of_find_backlight (bsc#1090888) Taken for 6010831dde5.
- video: backlight: Add of_find_backlight helper in backlight.c (bsc#1090888) Taken for 6010831dde5.
- watchdog: max77620_wdt: fix potential build errors (bsc#1051510).
- watchdog: rn5t618_wdt: fix module aliases (bsc#1051510).
- watchdog: sama5d4: fix WDD value to be always set to max (bsc#1051510).
- watchdog: wdat_wdt: fix get_timeleft call for wdat_wdt (bsc#1162557).
- wireless: fix enabling channel 12 for custom regulatory domain (bsc#1051510).
- wireless: wext: avoid gcc -O3 warning (bsc#1051510).
- workqueue: Fix pwq ref leak in rescuer_thread() (bsc#1160211).
- x86/amd_nb: Add PCI device IDs for family 17h, model 70h (bsc#1163206).
- x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR (bsc#1162619).
- x86/intel_rdt: Split resource group removal in two (bsc#1112178).
- x86/intel_rdt: Split resource group removal in two (bsc#1112178).
- x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI (bsc#1114279).
- x86/mce/AMD: Allow any CPU to initialize the smca_banks array (bsc#1114279).
- x86/MCE/AMD: Allow Reserved types to be overwritten in smca_banks (bsc#1114279).
- x86/MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure() (bsc#1114279).
- x86/mce: Fix possibly incorrect severity calculation on AMD (bsc#1114279).
- x86/resctrl: Check monitoring static key in the MBM overflow handler (bsc#1114279).
- x86/resctrl: Fix a deadlock due to inaccurate reference (bsc#1112178).
- x86/resctrl: Fix a deadlock due to inaccurate reference (bsc#1112178).
- x86/resctrl: Fix an imbalance in domain_remove_cpu() (bsc#1114279).
- x86/resctrl: Fix potential memory leak (bsc#1114279).
- x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup (bsc#1112178).
- x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup (bsc#1112178).
- x86/resctrl: Fix use-after-free when deleting resource groups (bsc#1114279).
- x86/speculation: Fix incorrect MDS/TAA mitigation status (bsc#1114279).
- x86/speculation: Fix redundant MDS mitigation message (bsc#1114279).
- xen-blkfront: switch kcalloc to kvcalloc for large array allocation (bsc#1160917).
- xen/balloon: Support xend-based toolstack take two (bsc#1065600).
- xen/blkback: Avoid unmapping unmapped grant pages (bsc#1065600).
- xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk (bsc#1065600).
- xen: Enable interrupts when calling _cond_resched() (bsc#1065600).
- xfrm: Fix transport mode skb control buffer usage (bsc#1161552).
- xfs: Fix tail rounding in xfs_alloc_file_space() (bsc#1161087, bsc#1153917).
- xfs: Sanity check flags of Q_XQUOTARM call (bsc#1158652).
- xhci: Fix memory leak in xhci_add_in_port() (bsc#1051510).
- xhci: fix USB3 device initiated resume race with roothub autosuspend (bsc#1051510).
- xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour (bsc#1051510).
- xhci: Increase STS_HALT timeout in xhci_suspend() (bsc#1051510).
- xhci: make sure interrupts are restored to correct state (bsc#1051510).
- zd1211rw: fix storage endpoint lookup (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-02"/>
	<updated date="2020-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046303">SUSE bug 1046303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051858">SUSE bug 1051858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086301">SUSE bug 1086301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086313">SUSE bug 1086313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086314">SUSE bug 1086314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088810">SUSE bug 1088810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090888">SUSE bug 1090888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103989">SUSE bug 1103989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105392">SUSE bug 1105392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112504">SUSE bug 1112504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115026">SUSE bug 1115026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118338">SUSE bug 1118338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118661">SUSE bug 1118661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123328">SUSE bug 1123328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127682">SUSE bug 1127682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129551">SUSE bug 1129551</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133147">SUSE bug 1133147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134973">SUSE bug 1134973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140025">SUSE bug 1140025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143959">SUSE bug 1143959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144162">SUSE bug 1144162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146544">SUSE bug 1146544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151548">SUSE bug 1151548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151910">SUSE bug 1151910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151927">SUSE bug 1151927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152107">SUSE bug 1152107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152631">SUSE bug 1152631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153535">SUSE bug 1153535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153917">SUSE bug 1153917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154243">SUSE bug 1154243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154601">SUSE bug 1154601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154768">SUSE bug 1154768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154916">SUSE bug 1154916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155331">SUSE bug 1155331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155334">SUSE bug 1155334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155689">SUSE bug 1155689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156259">SUSE bug 1156259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156286">SUSE bug 1156286</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156462">SUSE bug 1156462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157155">SUSE bug 1157155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157157">SUSE bug 1157157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157169">SUSE bug 1157169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157303">SUSE bug 1157303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157480">SUSE bug 1157480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157692">SUSE bug 1157692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157853">SUSE bug 1157853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157895">SUSE bug 1157895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157908">SUSE bug 1157908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157966">SUSE bug 1157966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158013">SUSE bug 1158013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158021">SUSE bug 1158021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158026">SUSE bug 1158026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158071">SUSE bug 1158071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158094">SUSE bug 1158094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158132">SUSE bug 1158132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158533">SUSE bug 1158533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158637">SUSE bug 1158637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158638">SUSE bug 1158638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158639">SUSE bug 1158639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158640">SUSE bug 1158640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158641">SUSE bug 1158641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158643">SUSE bug 1158643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158644">SUSE bug 1158644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158645">SUSE bug 1158645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158646">SUSE bug 1158646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158647">SUSE bug 1158647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158649">SUSE bug 1158649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158651">SUSE bug 1158651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158652">SUSE bug 1158652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158819">SUSE bug 1158819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158823">SUSE bug 1158823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158824">SUSE bug 1158824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158827">SUSE bug 1158827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158893">SUSE bug 1158893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158900">SUSE bug 1158900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158903">SUSE bug 1158903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158904">SUSE bug 1158904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158954">SUSE bug 1158954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159024">SUSE bug 1159024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159028">SUSE bug 1159028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159271">SUSE bug 1159271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159297">SUSE bug 1159297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159377">SUSE bug 1159377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159394">SUSE bug 1159394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159483">SUSE bug 1159483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159484">SUSE bug 1159484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159500">SUSE bug 1159500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159569">SUSE bug 1159569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159588">SUSE bug 1159588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159841">SUSE bug 1159841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159908">SUSE bug 1159908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159909">SUSE bug 1159909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159910">SUSE bug 1159910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159911">SUSE bug 1159911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159955">SUSE bug 1159955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160147">SUSE bug 1160147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160195">SUSE bug 1160195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160210">SUSE bug 1160210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160211">SUSE bug 1160211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160218">SUSE bug 1160218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160433">SUSE bug 1160433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160442">SUSE bug 1160442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160469">SUSE bug 1160469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160470">SUSE bug 1160470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160476">SUSE bug 1160476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160560">SUSE bug 1160560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160618">SUSE bug 1160618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160678">SUSE bug 1160678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160755">SUSE bug 1160755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160756">SUSE bug 1160756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160784">SUSE bug 1160784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160787">SUSE bug 1160787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160802">SUSE bug 1160802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160803">SUSE bug 1160803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160804">SUSE bug 1160804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160917">SUSE bug 1160917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160966">SUSE bug 1160966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160979">SUSE bug 1160979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161087">SUSE bug 1161087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161243">SUSE bug 1161243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161360">SUSE bug 1161360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161472">SUSE bug 1161472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161514">SUSE bug 1161514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161518">SUSE bug 1161518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161522">SUSE bug 1161522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161523">SUSE bug 1161523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161549">SUSE bug 1161549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161552">SUSE bug 1161552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161674">SUSE bug 1161674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161702">SUSE bug 1161702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161907">SUSE bug 1161907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161931">SUSE bug 1161931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161933">SUSE bug 1161933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161934">SUSE bug 1161934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161935">SUSE bug 1161935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161936">SUSE bug 1161936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161937">SUSE bug 1161937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162028">SUSE bug 1162028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162067">SUSE bug 1162067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162109">SUSE bug 1162109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162139">SUSE bug 1162139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162557">SUSE bug 1162557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162617">SUSE bug 1162617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162618">SUSE bug 1162618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162619">SUSE bug 1162619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162623">SUSE bug 1162623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162928">SUSE bug 1162928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162943">SUSE bug 1162943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163206">SUSE bug 1163206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163383">SUSE bug 1163383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163384">SUSE bug 1163384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163762">SUSE bug 1163762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163774">SUSE bug 1163774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163836">SUSE bug 1163836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163840">SUSE bug 1163840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163841">SUSE bug 1163841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163842">SUSE bug 1163842</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163843">SUSE bug 1163843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163844">SUSE bug 1163844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163845">SUSE bug 1163845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163846">SUSE bug 1163846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163849">SUSE bug 1163849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163850">SUSE bug 1163850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163851">SUSE bug 1163851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163852">SUSE bug 1163852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163853">SUSE bug 1163853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163855">SUSE bug 1163855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163856">SUSE bug 1163856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163857">SUSE bug 1163857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163858">SUSE bug 1163858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163859">SUSE bug 1163859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163860">SUSE bug 1163860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163861">SUSE bug 1163861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163862">SUSE bug 1163862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163863">SUSE bug 1163863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163867">SUSE bug 1163867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163869">SUSE bug 1163869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163880">SUSE bug 1163880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163971">SUSE bug 1163971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164051">SUSE bug 1164051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164069">SUSE bug 1164069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164098">SUSE bug 1164098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164115">SUSE bug 1164115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164314">SUSE bug 1164314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164315">SUSE bug 1164315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164388">SUSE bug 1164388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164471">SUSE bug 1164471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164598">SUSE bug 1164598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164632">SUSE bug 1164632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164705">SUSE bug 1164705</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164712">SUSE bug 1164712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164727">SUSE bug 1164727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164728">SUSE bug 1164728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164729">SUSE bug 1164729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164730">SUSE bug 1164730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164731">SUSE bug 1164731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164732">SUSE bug 1164732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164733">SUSE bug 1164733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164734">SUSE bug 1164734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164735">SUSE bug 1164735</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-14615/">CVE-2019-14615</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-15213/">CVE-2019-15213</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16746/">CVE-2019-16746</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16994/">CVE-2019-16994</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18808/">CVE-2019-18808</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19036/">CVE-2019-19036</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19045/">CVE-2019-19045</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19051/">CVE-2019-19051</cve>
	<cve impact="moderate" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19054/">CVE-2019-19054</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19066/">CVE-2019-19066</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19318/">CVE-2019-19318</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19319/">CVE-2019-19319</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19332/">CVE-2019-19332</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19338/">CVE-2019-19338</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19447/">CVE-2019-19447</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19523/">CVE-2019-19523</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19526/">CVE-2019-19526</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19527/">CVE-2019-19527</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19532/">CVE-2019-19532</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19533/">CVE-2019-19533</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19535/">CVE-2019-19535</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19537/">CVE-2019-19537</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19767/">CVE-2019-19767</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19927/">CVE-2019-19927</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19965/">CVE-2019-19965</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19966/">CVE-2019-19966</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20054/">CVE-2019-20054</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20095/">CVE-2019-20095</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20096/">CVE-2019-20096</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2732/">CVE-2020-2732</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-7053/">CVE-2020-7053</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8428/">CVE-2020-8428</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8648/">CVE-2020-8648</cve>
	<cve impact="low" cvss3="2.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8992/">CVE-2020-8992</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496417" comment="kernel-docs-4.12.14-197.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496418" comment="kernel-obs-build-4.12.14-197.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496419" comment="kernel-source-4.12.14-197.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496420" comment="kernel-syms-4.12.14-197.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138260" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1163184" ref_url="https://bugzilla.suse.com/1163184" source="BUGZILLA"/>
		<reference ref_id="1164505" ref_url="https://bugzilla.suse.com/1164505" source="BUGZILLA"/>
		<reference ref_id="1165784" ref_url="https://bugzilla.suse.com/1165784" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10029" ref_url="https://www.suse.com/security/cve/CVE-2020-10029/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0668-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006606.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

- CVE-2020-10029: Fixed a potential overflow in  on-stack buffer 
  during range reduction (bsc#1165784).	  
- Fixed an issue where pthread were not always locked correctly (bsc#1164505).
- Document mprotect and introduce section on memory protection (bsc#1163184).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-13"/>
	<updated date="2020-03-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1163184">SUSE bug 1163184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164505">SUSE bug 1164505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165784">SUSE bug 1165784</bugzilla>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10029/">CVE-2020-10029</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496421" comment="glibc-devel-32bit-2.26-13.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496422" comment="glibc-devel-static-2.26-13.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496423" comment="glibc-utils-2.26-13.39.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138261" version="1" class="patch">
	<metadata>
		<title>Security update for ldns (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1068709" ref_url="https://bugzilla.suse.com/1068709" source="BUGZILLA"/>
		<reference ref_id="1068711" ref_url="https://bugzilla.suse.com/1068711" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-1000231" ref_url="https://www.suse.com/security/cve/CVE-2017-1000231/" source="CVE"/>
		<reference ref_id="CVE-2017-1000232" ref_url="https://www.suse.com/security/cve/CVE-2017-1000232/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006645.html" source="SUSE-SU"/>
		<description>
This update for ldns fixes the following issues:

- CVE-2017-1000231: Fixed a buffer overflow during token parsing (bsc#1068711).
- CVE-2017-1000232: Fixed a double-free vulnerability in str2host.c (bsc#1068709).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-26"/>
	<updated date="2020-03-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1068709">SUSE bug 1068709</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068711">SUSE bug 1068711</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000231/">CVE-2017-1000231</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000232/">CVE-2017-1000232</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496424" comment="perl-DNS-LDNS-1.7.0-4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138262" version="1" class="patch">
	<metadata>
		<title>Security update for spamassassin (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1118987" ref_url="https://bugzilla.suse.com/1118987" source="BUGZILLA"/>
		<reference ref_id="1162197" ref_url="https://bugzilla.suse.com/1162197" source="BUGZILLA"/>
		<reference ref_id="1162200" ref_url="https://bugzilla.suse.com/1162200" source="BUGZILLA"/>
		<reference ref_id="862963" ref_url="https://bugzilla.suse.com/862963" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11805" ref_url="https://www.suse.com/security/cve/CVE-2018-11805/" source="CVE"/>
		<reference ref_id="CVE-2020-1930" ref_url="https://www.suse.com/security/cve/CVE-2020-1930/" source="CVE"/>
		<reference ref_id="CVE-2020-1931" ref_url="https://www.suse.com/security/cve/CVE-2020-1931/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006649.html" source="SUSE-SU"/>
		<description>
This update for spamassassin fixes the following issues:

Security issues fixed:

- CVE-2018-11805: Fixed an issue with delimiter handling in rule files 
  related to is_regexp_valid() (bsc#1118987).
- CVE-2020-1930: Fixed an issue with rule configuration (.cf) files which 
  can be configured to run system commands (bsc#1162197).
- CVE-2020-1931: Fixed an issue with rule configuration (.cf) files which 
  can be configured to run system commands with warnings (bsc#1162200).
  
Non-security issue fixed:

- Altering hash requires restarting loop (bsc#862963).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-30"/>
	<updated date="2020-03-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1118987">SUSE bug 1118987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162197">SUSE bug 1162197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162200">SUSE bug 1162200</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/862963">SUSE bug 862963</bugzilla>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11805/">CVE-2018-11805</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1930/">CVE-2020-1930</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1931/">CVE-2020-1931</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496425" comment="perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138263" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1167631" ref_url="https://bugzilla.suse.com/1167631" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1752" ref_url="https://www.suse.com/security/cve/CVE-2020-1752/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006652.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

- CVE-2020-1752: Fixed a use after free in glob which could have allowed
  a local attacker to create a specially crafted path that, when processed 
  by the glob function, could potentially have led to arbitrary code execution
  (bsc#1167631).
 		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-31"/>
	<updated date="2020-03-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1167631">SUSE bug 1167631</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1752/">CVE-2020-1752</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496426" comment="glibc-devel-32bit-2.26-13.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496427" comment="glibc-devel-static-2.26-13.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496428" comment="glibc-utils-2.26-13.45.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138264" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1044231" ref_url="https://bugzilla.suse.com/1044231" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1051858" ref_url="https://bugzilla.suse.com/1051858" source="BUGZILLA"/>
		<reference ref_id="1056686" ref_url="https://bugzilla.suse.com/1056686" source="BUGZILLA"/>
		<reference ref_id="1060463" ref_url="https://bugzilla.suse.com/1060463" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1111974" ref_url="https://bugzilla.suse.com/1111974" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1119680" ref_url="https://bugzilla.suse.com/1119680" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1136157" ref_url="https://bugzilla.suse.com/1136157" source="BUGZILLA"/>
		<reference ref_id="1141895" ref_url="https://bugzilla.suse.com/1141895" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1146539" ref_url="https://bugzilla.suse.com/1146539" source="BUGZILLA"/>
		<reference ref_id="1156510" ref_url="https://bugzilla.suse.com/1156510" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1158187" ref_url="https://bugzilla.suse.com/1158187" source="BUGZILLA"/>
		<reference ref_id="1159285" ref_url="https://bugzilla.suse.com/1159285" source="BUGZILLA"/>
		<reference ref_id="1160659" ref_url="https://bugzilla.suse.com/1160659" source="BUGZILLA"/>
		<reference ref_id="1161561" ref_url="https://bugzilla.suse.com/1161561" source="BUGZILLA"/>
		<reference ref_id="1161951" ref_url="https://bugzilla.suse.com/1161951" source="BUGZILLA"/>
		<reference ref_id="1162928" ref_url="https://bugzilla.suse.com/1162928" source="BUGZILLA"/>
		<reference ref_id="1162929" ref_url="https://bugzilla.suse.com/1162929" source="BUGZILLA"/>
		<reference ref_id="1162931" ref_url="https://bugzilla.suse.com/1162931" source="BUGZILLA"/>
		<reference ref_id="1164078" ref_url="https://bugzilla.suse.com/1164078" source="BUGZILLA"/>
		<reference ref_id="1164507" ref_url="https://bugzilla.suse.com/1164507" source="BUGZILLA"/>
		<reference ref_id="1165111" ref_url="https://bugzilla.suse.com/1165111" source="BUGZILLA"/>
		<reference ref_id="1165404" ref_url="https://bugzilla.suse.com/1165404" source="BUGZILLA"/>
		<reference ref_id="1165488" ref_url="https://bugzilla.suse.com/1165488" source="BUGZILLA"/>
		<reference ref_id="1165527" ref_url="https://bugzilla.suse.com/1165527" source="BUGZILLA"/>
		<reference ref_id="1165741" ref_url="https://bugzilla.suse.com/1165741" source="BUGZILLA"/>
		<reference ref_id="1165813" ref_url="https://bugzilla.suse.com/1165813" source="BUGZILLA"/>
		<reference ref_id="1165873" ref_url="https://bugzilla.suse.com/1165873" source="BUGZILLA"/>
		<reference ref_id="1165929" ref_url="https://bugzilla.suse.com/1165929" source="BUGZILLA"/>
		<reference ref_id="1165950" ref_url="https://bugzilla.suse.com/1165950" source="BUGZILLA"/>
		<reference ref_id="1165980" ref_url="https://bugzilla.suse.com/1165980" source="BUGZILLA"/>
		<reference ref_id="1165984" ref_url="https://bugzilla.suse.com/1165984" source="BUGZILLA"/>
		<reference ref_id="1165985" ref_url="https://bugzilla.suse.com/1165985" source="BUGZILLA"/>
		<reference ref_id="1166003" ref_url="https://bugzilla.suse.com/1166003" source="BUGZILLA"/>
		<reference ref_id="1166101" ref_url="https://bugzilla.suse.com/1166101" source="BUGZILLA"/>
		<reference ref_id="1166102" ref_url="https://bugzilla.suse.com/1166102" source="BUGZILLA"/>
		<reference ref_id="1166103" ref_url="https://bugzilla.suse.com/1166103" source="BUGZILLA"/>
		<reference ref_id="1166104" ref_url="https://bugzilla.suse.com/1166104" source="BUGZILLA"/>
		<reference ref_id="1166632" ref_url="https://bugzilla.suse.com/1166632" source="BUGZILLA"/>
		<reference ref_id="1166658" ref_url="https://bugzilla.suse.com/1166658" source="BUGZILLA"/>
		<reference ref_id="1166730" ref_url="https://bugzilla.suse.com/1166730" source="BUGZILLA"/>
		<reference ref_id="1166731" ref_url="https://bugzilla.suse.com/1166731" source="BUGZILLA"/>
		<reference ref_id="1166732" ref_url="https://bugzilla.suse.com/1166732" source="BUGZILLA"/>
		<reference ref_id="1166733" ref_url="https://bugzilla.suse.com/1166733" source="BUGZILLA"/>
		<reference ref_id="1166734" ref_url="https://bugzilla.suse.com/1166734" source="BUGZILLA"/>
		<reference ref_id="1166735" ref_url="https://bugzilla.suse.com/1166735" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19768" ref_url="https://www.suse.com/security/cve/CVE-2019-19768/" source="CVE"/>
		<reference ref_id="CVE-2020-8647" ref_url="https://www.suse.com/security/cve/CVE-2020-8647/" source="CVE"/>
		<reference ref_id="CVE-2020-8648" ref_url="https://www.suse.com/security/cve/CVE-2020-8648/" source="CVE"/>
		<reference ref_id="CVE-2020-8649" ref_url="https://www.suse.com/security/cve/CVE-2020-8649/" source="CVE"/>
		<reference ref_id="CVE-2020-9383" ref_url="https://www.suse.com/security/cve/CVE-2020-9383/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006656.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-8647: Fixed a use-after-free in the vc_do_resize function in drivers/tty/vt/vt.c (bsc#1162929).
- CVE-2020-8649: Fixed a use-after-free in the vgacon_invert_region function in drivers/video/console/vgacon.c (bsc#1162931).
- CVE-2020-8648: Fixed a use-after-free in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bsc#1162928).
- CVE-2020-9383: Fixed an out-of-bounds read due to improper error condition check of FDC index (bsc#1165111).
- CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).

The following non-security bugs were fixed:

- ALSA: hda/realtek - Add Headset Button supported for ThinkPad X1 (bsc#1111666).
- ALSA: hda/realtek - Add Headset Mic supported (bsc#1111666).
- ALSA: hda/realtek - Add more codec supported Headset Button (bsc#1111666).
- ALSA: hda/realtek - Apply quirk for MSI GP63, too (bsc#1111666).
- ALSA: hda/realtek - Apply quirk for yet another MSI laptop (bsc#1111666).
- ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294 (bsc#1111666).
- ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1 (bsc#1111666).
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master (bsc#1111666).
- ALSA: usb-audio: Add boot quirk for MOTU M Series (bsc#1111666).
- ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000 (bsc#1111666).
- ALSA: usb-audio: add implicit fb quirk for MOTU M Series (bsc#1111666).
- ALSA: usb-audio: add quirks for Line6 Helix devices fw&gt;=2.82 (bsc#1111666).
- ALSA: usb-audio: Apply 48kHz fixed rate playback for Jabra Evolve 65 headset (bsc#1111666).
- ALSA: usb-audio: fix Corsair Virtuoso mixer label collision (bsc#1111666).
- ALSA: usb-audio: Fix UAC2/3 effect unit parsing (bsc#1111666).
- ALSA: usb-audio: unlock on error in probe (bsc#1111666).
- ALSA: usb-audio: Use lower hex numbers for IDs (bsc#1111666).
- ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status (bsc#1051510).
- amdgpu/gmc_v9: save/restore sdpif regs during S3 (bsc#1113956)
- ASoC: dapm: Correct DAPM handling of active widgets during shutdown (bsc#1051510).
- ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path (bsc#1051510).
- ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output (bsc#1051510).
- ASoC: pcm: update FE/BE trigger order based on the command (bsc#1051510).
- ASoC: topology: Fix memleak in soc_tplg_link_elems_load() (bsc#1051510).
- atm: zatm: Fix empty body Clang warnings (bsc#1051510).
- b43legacy: Fix -Wcast-function-type (bsc#1051510).
- blk: Fix kabi due to blk_trace_mutex addition (bsc#1159285).
- blktrace: fix dereference after null check (bsc#1159285).
- blktrace: fix trace mutex deadlock (bsc#1159285).
- bnxt_en: Fix NTUPLE firmware command failures (bsc#1104745 ).
- bnxt_en: Fix TC queue mapping (networking-stable-20_02_05).
- bnxt_en: Improve device shutdown method (bsc#1104745 ).
- bnxt_en: Issue PCIe FLR in kdump kernel to cleanup pending DMAs (bsc#1134090 jsc#SLE-5954).
- bonding/alb: properly access headers in bond_alb_xmit() (networking-stable-20_02_09).
- bpf, offload: Replace bitwise AND by logical AND in bpf_prog_offload_info_fill (bsc#1109837).
- CIFS: add a debug macro that prints \\server\share for errors (bsc#1144333).
- CIFS: add missing mount option to /proc/mounts (bsc#1144333).
- CIFS: add new debugging macro cifs_server_dbg (bsc#1144333).
- CIFS: add passthrough for smb2 setinfo (bsc#1144333).
- CIFS: add SMB2_open() arg to return POSIX data (bsc#1144333).
- CIFS: add smb2 POSIX info level (bsc#1144333).
- CIFS: add SMB3 change notification support (bsc#1144333).
- CIFS: add support for fallocate mode 0 for non-sparse files (bsc#1144333).
- CIFS: Add support for setting owner info, dos attributes, and create time (bsc#1144333).
- CIFS: Add tracepoints for errors on flush or fsync (bsc#1144333).
- CIFS: Adjust indentation in smb2_open_file (bsc#1144333).
- CIFS: allow chmod to set mode bits using special sid (bsc#1144333).
- CIFS: Avoid doing network I/O while holding cache lock (bsc#1144333).
- CIFS: call wake_up(server-&gt;response_q) inside of cifs_reconnect() (bsc#1144333).
- CIFS: Clean up DFS referral cache (bsc#1144333).
- CIFS: create a helper function to parse the query-directory response buffer (bsc#1144333).
- CIFS: do d_move in rename (bsc#1144333).
- CIFS: Do not display RDMA transport on reconnect (bsc#1144333).
- CIFS: do not ignore the SYNC flags in getattr (bsc#1144333).
- CIFS: do not leak -EAGAIN for stat() during reconnect (bsc#1144333).
- CIFS: do not use 'pre:' for MODULE_SOFTDEP (bsc#1144333).
- CIFS: enable change notification for SMB2.1 dialect (bsc#1144333).
- CIFS: fail i/o on soft mounts if sessionsetup errors out (bsc#1144333).
- CIFS: fix a comment for the timeouts when sending echos (bsc#1144333).
- CIFS: fix a white space issue in cifs_get_inode_info() (bsc#1144333).
- CIFS: fix dereference on ses before it is null checked (bsc#1144333).
- CIFS: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333).
- CIFS: fix mode bits from dir listing when mounted with modefromsid (bsc#1144333).
- CIFS: Fix mode output in debugging statements (bsc#1144333).
- CIFS: Fix mount options set in automount (bsc#1144333).
- CIFS: fix NULL dereference in match_prepath (bsc#1144333).
- CIFS: Fix potential deadlock when updating vol in cifs_reconnect() (bsc#1144333).
- CIFS: fix potential mismatch of UNC paths (bsc#1144333).
- CIFS: fix rename() by ensuring source handle opened with DELETE bit (bsc#1144333).
- CIFS: Fix return value in __update_cache_entry (bsc#1144333).
- CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333).
- CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333).
- CIFS: Fix task struct use-after-free on reconnect (bsc#1144333).
- CIFS: fix unitialized variable poential problem with network I/O cache lock patch (bsc#1144333).
- CIFS: get mode bits from special sid on stat (bsc#1144333).
- CIFS: Get rid of kstrdup_const()'d paths (bsc#1144333).
- CIFS: handle prefix paths in reconnect (bsc#1144333).
- CIFS: Introduce helpers for finding TCP connection (bsc#1144333).
- CIFS: log warning message (once) if out of disk space (bsc#1144333).
- CIFS: make sure we do not overflow the max EA buffer size (bsc#1144333).
- CIFS: make use of cap_unix(ses) in cifs_reconnect_tcon() (bsc#1144333).
- CIFS: Merge is_path_valid() into get_normalized_path() (bsc#1144333).
- CIFS: modefromsid: make room for 4 ACE (bsc#1144333).
- CIFS: modefromsid: write mode ACE first (bsc#1144333).
- CIFS: Optimize readdir on reparse points (bsc#1144333).
- CIFS: plumb smb2 POSIX dir enumeration (bsc#1144333).
- CIFS: potential unintitliazed error code in cifs_getattr() (bsc#1144333).
- CIFS: prepare SMB2_query_directory to be used with compounding (bsc#1144333).
- CIFS: print warning once if mounting with vers=1.0 (bsc#1144333).
- CIFS: refactor cifs_get_inode_info() (bsc#1144333).
- CIFS: remove redundant assignment to pointer pneg_ctxt (bsc#1144333).
- CIFS: remove redundant assignment to variable rc (bsc#1144333).
- CIFS: remove set but not used variables (bsc#1144333).
- CIFS: remove set but not used variable 'server' (bsc#1144333).
- CIFS: remove unused variable (bsc#1144333).
- CIFS: remove unused variable 'sid_user' (bsc#1144333).
- CIFS: rename a variable in SendReceive() (bsc#1144333).
- CIFS: rename posix create rsp (bsc#1144333).
- CIFS: replace various strncpy with strscpy and similar (bsc#1144333).
- CIFS: Return directly after a failed build_path_from_dentry() in cifs_do_create() (bsc#1144333).
- CIFS: set correct max-buffer-size for smb2_ioctl_init() (bsc#1144333).
- CIFS: smbd: Add messages on RDMA session destroy and reconnection (bsc#1144333).
- CIFS: smbd: Invalidate and deregister memory registration on re-send for direct I/O (bsc#1144333).
- CIFS: smbd: Only queue work for error recovery on memory registration (bsc#1144333).
- CIFS: smbd: Return -EAGAIN when transport is reconnecting (bsc#1144333).
- CIFS: smbd: Return -ECONNABORTED when trasnport is not in connected state (bsc#1144333).
- CIFS: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE (bsc#1144333).
- CIFS: Use common error handling code in smb2_ioctl_query_info() (bsc#1144333).
- CIFS: use compounding for open and first query-dir for readdir() (bsc#1144333).
- CIFS: Use #define in cifs_dbg (bsc#1144333).
- CIFS: Use memdup_user() rather than duplicating its implementation (bsc#1144333).
- CIFS: use mod_delayed_work() for server-&gt;reconnect if already queued (bsc#1144333).
- CIFS: use PTR_ERR_OR_ZERO() to simplify code (bsc#1144333).
- cls_rsvp: fix rsvp_policy (networking-stable-20_02_05).
- core: Do not skip generic XDP program execution for cloned SKBs (bsc#1109837).
- cpufreq: powernv: Fix unsafe notifiers (bsc#1065729).
- cpufreq: powernv: Fix use-after-free (bsc#1065729).
- crypto: pcrypt - Fix user-after-free on module unload (git-fixes).
- devlink: report 0 after hitting end in region read (bsc#1109837).
- dmaengine: coh901318: Fix a double lock bug in dma_tc_handle() (bsc#1051510).
- driver core: platform: fix u32 greater or equal to zero comparison (bsc#1051510).
- driver core: platform: Prevent resouce overflow from causing infinite loops (bsc#1051510).
- driver core: Print device when resources present in really_probe() (bsc#1051510).
- drivers/md/raid5.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).
- drivers/md/raid5-ppl.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).
- drm/amd/dm/mst: Ignore payload update failures (bsc#1112178)
- drm/amdkfd: fix a use after free race with mmu_notifer unregister (bsc#1114279)
- drm: atmel-hlcdc: enable clock before configuring timing engine (bsc#1114279)
- drm/etnaviv: fix dumping of iommuv2 (bsc#1114279)
- drm/gma500: Fixup fbdev stolen size usage evaluation (bsc#1051510).
- drm/i915/gvt: Fix orphan vgpu dmabuf_objs' lifetime (git-fixes).
- drm/i915/gvt: Fix unnecessary schedule timer when no vGPU exits (git-fixes).
- drm/i915/gvt: Separate display reset from ALL_ENGINES reset (bsc#1114279)
- drm/i915: Program MBUS with rmw during initialization (git-fixes).
- drm/i915/selftests: Fix return in assert_mmap_offset() (bsc#1114279) 
- drm/i915/userptr: fix size calculation (bsc#1114279)
- drm/i915/userptr: Try to acquire the page lock around (bsc#1114279)
- drm/i915: Wean off drm_pci_alloc/drm_pci_free (bsc#1114279)
- drm/mediatek: Add gamma property according to hardware capability (bsc#1114279)
- drm/mediatek: disable all the planes in atomic_disable (bsc#1114279)
- drm/mediatek: handle events when enabling/disabling crtc (bsc#1051510).
- drm/mipi_dbi: Fix off-by-one bugs in mipi_dbi_blank() (bsc#1114279)
- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable (bsc#1114279)
- drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (bsc#1051510).
- drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from fw (bsc#1051510).
- drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (git-fixes).
- drm: rcar-du: Recognize 'renesas,vsps' in addition to 'vsps' (bsc#1114279)
- drm: remove the newline for CRC source name (bsc#1051510).
- EDAC/mc: Fix use-after-free and memleaks during device removal (bsc#1114279).
- Enabled the following two patches in series.conf, and refresh the KABI patch due to previous md commit (bsc#1119680)
- ethtool: Factored out similar ethtool link settings for virtual devices to core (bsc#1136157 ltc#177197).
- fcntl: fix typo in RWH_WRITE_LIFE_NOT_SET r/w hint name (bsc#1166003).
- firmware: imx: misc: Align imx sc msg structs to 4 (git-fixes).
- firmware: imx: scu: Ensure sequential TX (git-fixes).
- firmware: imx: scu-pd: Align imx sc msg structs to 4 (git-fixes).
- Fixed memory leak in large read decrypt offload (bsc#1144333).
- Fixed some regressions (bsc#1165527 ltc#184149).
- fs/cifs/cifssmb.c: use true,false for bool variable (bsc#1144333).
- fs: cifs: cifsssmb: remove redundant assignment to variable ret (bsc#1144333).
- fs: cifs: Initialize filesystem timestamp ranges (bsc#1144333).
- fs: cifs: mute -Wunused-const-variable message (bsc#1144333).
- fs/cifs/sess.c: Remove set but not used variable 'capabilities' (bsc#1144333).
- fs/cifs/smb2ops.c: use true,false for bool variable (bsc#1144333).
- fs/cifs/smb2pdu.c: Make SMB2_notify_init static (bsc#1144333).
- fs/xfs: fix f_ffree value for statfs when project quota is set (bsc#1165985).
- gtp: make sure only SOCK_DGRAM UDP sockets are accepted (networking-stable-20_01_27).
- gtp: use __GFP_NOWARN to avoid memalloc warning (networking-stable-20_02_05).
- HID: core: fix off-by-one memset in hid_report_raw_event() (bsc#1051510).
- HID: hiddev: Fix race in in hiddev_disconnect() (git-fixes).
- hv_netvsc: Fix memory leak when removing rndis device (networking-stable-20_01_20).
- hwmon: (adt7462) Fix an error return in ADT7462_REG_VOLT() (bsc#1051510).
- IB/hfi1: Close window for pq and request coliding (bsc#1060463 ).
- ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551).
- ibmvnic: Do not process device remove during device reset (bsc#1065729).
- ibmvnic: Warn unknown speed message only when carrier is present (bsc#1065729).
- Input: edt-ft5x06 - work around first register access error (bsc#1051510).
- Input: synaptics - enable SMBus on ThinkPad L470 (bsc#1051510).
- Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list (bsc#1051510).
- Input: synaptics - switch T470s to RMI4 by default (bsc#1051510).
- iommu/amd: Check feature support bit before accessing MSI capability registers (bsc#1166101).
- iommu/amd: Only support x2APIC with IVHD type 11h/40h (bsc#1166102).
- iommu/amd: Remap the IOMMU device table with the memory encryption mask for kdump (bsc#1141895).
- iommu/dma: Fix MSI reservation allocation (bsc#1166730).
- iommu/vt-d: dmar: replace WARN_TAINT with pr_warn + add_taint (bsc#1166731).
- iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys() for huge page (bsc#1166732).
- iommu/vt-d: Fix compile warning from intel-svm.h (bsc#1166103).
- iommu/vt-d: Fix the wrong printing in RHSA parsing (bsc#1166733).
- iommu/vt-d: Ignore devices with out-of-spec domain number (bsc#1166734).
- iommu/vt-d: quirk_ioat_snb_local_iommu: replace WARN_TAINT with pr_warn + add_taint (bsc#1166735).
- ipv4: ensure rcu_read_lock() in cipso_v4_error() (git-fixes).
- ipv6: restrict IPV6_ADDRFORM operation (bsc#1109837).
- iwlegacy: Fix -Wcast-function-type (bsc#1051510).
- iwlwifi: mvm: Do not require PHY_SKU NVM section for 3168 devices (bsc#1166632).
- iwlwifi: mvm: Fix thermal zone registration (bsc#1051510).
- kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (bsc#1141895).
- kernel/module.c: Only return -EEXIST for modules that have finished loading (bsc#1165488).
- kernel/module.c: wakeup processes in module_wq on module unload (bsc#1165488).
- kexec: Allocate decrypted control pages for kdump if SME is enabled (bsc#1141895).
- KVM: arm64: Store vcpu on the stack during __guest_enter() (bsc#1133021).
- KVM: s390: do not clobber registers during guest reset/store status (bsc#1133021).
- KVM: s390: ENOTSUPP -&gt; EOPNOTSUPP fixups (bsc#1133021).
- KVM: VMX: check descriptor table exits on instruction emulation (bsc#1166104).
- l2tp: Allow duplicate session creation with UDP (networking-stable-20_02_05).
- libnvdimm/pfn_dev: Do not clear device memmap area during generic namespace probe (bsc#1165929 bsc#1165950).
- libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields (bsc#1165929).
- libnvdimm: remove redundant __func__ in dev_dbg (bsc#1165929).
- lib/raid6: add missing include for raid6test (bsc#1166003).
- lib/raid6: add option to skip algo benchmarking (bsc#1166003).
- lib/raid6: avoid __attribute_const__ redefinition (bsc#1166003).
- md: add __acquires/__releases annotations to handle_active_stripes (bsc#1166003).
- md: add __acquires/__releases annotations to (un)lock_two_stripes (bsc#1166003).
- md: add a missing endianness conversion in check_sb_changes (bsc#1166003).
- md: add bitmap_abort label in md_run (bsc#1166003).
- md: add feature flag MD_FEATURE_RAID0_LAYOUT (bsc#1166003).
- md: allow last device to be forcibly removed from RAID1/RAID10 (bsc#1166003).
- md: avoid invalid memory access for array sb-&gt;dev_roles (bsc#1166003).
- md/bitmap: avoid race window between md_bitmap_resize and bitmap_file_clear_bit (bsc#1166003).
- md-bitmap: create and destroy wb_info_pool with the change of backlog (bsc#1166003).
- md-bitmap: create and destroy wb_info_pool with the change of bitmap (bsc#1166003).
- md-bitmap: small cleanups (bsc#1166003).
- md/bitmap: use mddev_suspend/resume instead of -&gt;quiesce() (bsc#1166003).
- md-cluster/bitmap: do not call md_bitmap_sync_with_cluster during reshaping stage (bsc#1166003).
- md-cluster: introduce resync_info_get interface for sanity check (bsc#1166003).
- md-cluster/raid10: call update_size in md_reap_sync_thread (bsc#1166003).
- md-cluster/raid10: do not call remove_and_add_spares during reshaping stage (bsc#1166003).
- md-cluster/raid10: resize all the bitmaps before start reshape (bsc#1166003).
- md-cluster/raid10: support add disk under grow mode (bsc#1166003).
- md-cluster: remove suspend_info (bsc#1166003).
- md-cluster: send BITMAP_NEEDS_SYNC message if reshaping is interrupted (bsc#1166003).
- md: convert to kvmalloc (bsc#1166003).
- md: do not call spare_active in md_reap_sync_thread if all member devices can't work (bsc#1166003).
- md: do not set In_sync if array is frozen (bsc#1166003).
- md: fix a typo s/creat/create (bsc#1166003).
- md: fix for divide error in status_resync (bsc#1166003).
- md: fix spelling typo and add necessary space (bsc#1166003).
- md: introduce mddev_create/destroy_wb_pool for the change of member device (bsc#1166003).
- md-linear: use struct_size() in kzalloc() (bsc#1166003).
- md: Make bio_alloc_mddev use bio_alloc_bioset (bsc#1166003).
- md: make sure desc_nr less than MD_SB_DISKS (bsc#1166003).
- md: md.c: Return -ENODEV when mddev is NULL in rdev_attr_show (bsc#1166003).
- md: no longer compare spare disk superblock events in super_load (bsc#1166003).
- md/raid0: Fix an error message in raid0_make_request() (bsc#1166003).
- md raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone (bsc#1166003).
- md/raid10: end bio when the device faulty (bsc#1166003).
- md/raid10: Fix raid10 replace hang when new added disk faulty (bsc#1166003).
- md/raid10: prevent access of uninitialized resync_pages offset (bsc#1166003).
- md/raid10: read balance chooses idlest disk for SSD (bsc#1166003).
- md: raid10: Use struct_size() in kmalloc() (bsc#1166003).
- md/raid1: avoid soft lockup under high load (bsc#1166003).
- md: raid1: check rdev before reference in raid1_sync_request func (bsc#1166003).
- md/raid1: end bio when the device faulty (bsc#1166003).
- md/raid1: fail run raid1 array when active disk less than one (bsc#1166003).
- md/raid1: Fix a warning message in remove_wb() (bsc#1166003).
- md/raid1: fix potential data inconsistency issue with write behind device (bsc#1166003).
- md/raid1: get rid of extra blank line and space (bsc#1166003).
- md/raid5: use bio_end_sector to calculate last_sector (bsc#1166003).
- md/raid6: fix algorithm choice under larger PAGE_SIZE (bsc#1166003).
- md: remove set but not used variable 'bi_rdev' (bsc#1166003).
- md: rename wb stuffs (bsc#1166003).
- md: return -ENODEV if rdev has no mddev assigned (bsc#1166003).
- md: use correct type in super_1_load (bsc#1166003).
- md: use correct type in super_1_sync (bsc#1166003).
- md: use correct types in md_bitmap_print_sb (bsc#1166003).
- media: uvcvideo: Refactor teardown of uvc on USB disconnect (bsc#1164507).
- mlxsw: spectrum_qdisc: Include MC TCs in Qdisc counters (bsc#1112374).
- mlxsw: spectrum: Wipe xstats.backlog of down ports (bsc#1112374).
- net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM (networking-stable-20_01_27).
- net: dsa: mv88e6xxx: Preserve priority when setting CPU port (networking-stable-20_01_11).
- net: dsa: tag_qca: fix doubled Tx statistics (networking-stable-20_01_20).
- net/ethtool: Introduce link_ksettings API for virtual network devices (bsc#1136157 ltc#177197).
- net: Fix Tx hash bound checking (bsc#1109837).
- net: hns3: fix a copying IPv6 address error in hclge_fd_get_flow_tuples() (bsc#1104353).
- net: hns: fix soft lockup when there is not enough memory (networking-stable-20_01_20).
- net: hsr: fix possible NULL deref in hsr_handle_frame() (networking-stable-20_02_05).
- net: ip6_gre: fix moving ip6gre between namespaces (networking-stable-20_01_27).
- net, ip6_tunnel: fix namespaces move (networking-stable-20_01_27).
- net, ip_tunnel: fix namespaces move (networking-stable-20_01_27).
- net: macb: Limit maximum GEM TX length in TSO (networking-stable-20_02_09).
- net: macb: Remove unnecessary alignment check for TSO (networking-stable-20_02_09).
- net/mlx5: Fix lowest FDB pool size (bsc#1103990).
- net/mlx5: IPsec, Fix esp modify function attribute (bsc#1103990 ).
- net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx (bsc#1103990).
- net/mlx5: Update the list of the PCI supported devices (bsc#1127611).
- net/mlxfw: Verify FSM error code translation does not exceed array size (bsc#1051858).
- net: mvneta: move rx_dropped and rx_errors in per-cpu stats (networking-stable-20_02_09).
- net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link() (networking-stable-20_01_27).
- net_sched: ematch: reject invalid TCF_EM_SIMPLE (networking-stable-20_01_30).
- net_sched: fix an OOB access in cls_tcindex (networking-stable-20_02_05).
- net_sched: fix a resource leak in tcindex_set_parms() (networking-stable-20_02_09).
- net_sched: fix datalen for ematch (networking-stable-20_01_27).
- net: sch_prio: When ungrafting, replace with FIFO (networking-stable-20_01_11).
- net/smc: add fallback check to connect() (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- net: stmmac: dwmac-sunxi: Allow all RGMII modes (networking-stable-20_01_11).
- net-sysfs: Fix reference count leak (networking-stable-20_01_27).
- net: systemport: Avoid RBUF stuck in Wake-on-LAN mode (networking-stable-20_02_09).
- net/tls: fix async operation (bsc#1109837).
- net/tls: free the record on encryption error (bsc#1109837).
- net/tls: take into account that bpf_exec_tx_verdict() may free the record (bsc#1109837).
- net: usb: lan78xx: Add .ndo_features_check (networking-stable-20_01_27).
- net: usb: lan78xx: fix possible skb leak (networking-stable-20_01_11).
- net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info (networking-stable-20_01_20).
- NFC: pn544: Fix a typo in a debug message (bsc#1051510).
- NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu() (bsc#1051510).
- nvme: Fix parsing of ANA log page (bsc#1166658).
- nvme: resync include/linux/nvme.h with nvmecli (bsc#1156510).
- nvme: Translate more status codes to blk_status_t (bsc#1156510).
- orinoco: avoid assertion in case of NULL pointer (bsc#1051510).
- padata: always acquire cpu_hotplug_lock before pinst-&gt;lock (git-fixes).
- PCI/AER: Clear device status bits during ERR_COR handling (bsc#1161561).
- PCI/AER: Clear device status bits during ERR_FATAL and ERR_NONFATAL (bsc#1161561).
- PCI/AER: Clear only ERR_FATAL status bits during fatal recovery (bsc#1161561).
- PCI/AER: Clear only ERR_NONFATAL bits during non-fatal recovery (bsc#1161561).
- PCI/AER: Do not clear AER bits if error handling is Firmware-First (bsc#1161561).
- PCI/AER: Do not read upstream ports below fatal errors (bsc#1161561).
- PCI/AER: Factor out ERR_NONFATAL status bit clearing (bsc#1161561).
- PCI/AER: Take reference on error devices (bsc#1161561).
- PCI/ERR: Run error recovery callbacks for all affected devices (bsc#1161561).
- PCI/ERR: Use slot reset if available (bsc#1161561).
- pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled pins (bsc#1051510).
- pinctrl: imx: scu: Align imx sc msg structs to 4 (git-fixes).
- pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs (bsc#1051510).
- pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs (bsc#1051510).
- pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM (networking-stable-20_01_11).
- platform/mellanox: fix potential deadlock in the tmfifo driver (bsc#1136333 jsc#SLE-4994).
- powerpc: fix hardware PMU exception bug on PowerVM compatibility mode systems (bsc#1056686).
- powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (bsc#1160659).
- powerpc/pseries: fix of_read_drc_info_cell() to point at next record (bsc#1165980 ltc#183834).
- powerpc/pseries: group lmb operation and memblock's (bsc#1165404 ltc#183498).
- powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (bsc#1165404 ltc#183498).
- powerpc/pseries: update device tree before ejecting hotplug uevents (bsc#1165404 ltc#183498).
- powerpc/smp: Use nid as fallback for package_id (bsc#1165813 ltc#184091).
- ptr_ring: add include of linux/mm.h (bsc#1109837).
- qmi_wwan: re-add DW5821e pre-production variant (bsc#1051510).
- raid10: refactor common wait code from regular read/write request (bsc#1166003).
- raid1: factor out a common routine to handle the completion of sync write (bsc#1166003).
- raid1: simplify raid1_error function (bsc#1166003).
- raid1: use an int as the return value of raise_barrier() (bsc#1166003).
- raid5: block failing device if raid will be failed (bsc#1166003).
- raid5: do not increment read_errors on EILSEQ return (bsc#1166003).
- raid5: do not set STRIPE_HANDLE to stripe which is in batch list (bsc#1166003).
- raid5 improve too many read errors msg by adding limits (bsc#1166003).
- raid5: need to set STRIPE_HANDLE for batch head (bsc#1166003).
- raid5: remove STRIPE_OPS_REQ_PENDING (bsc#1166003).
- raid5: remove worker_cnt_per_group argument from alloc_thread_groups (bsc#1166003). 
- raid5: set write hint for PPL (bsc#1166003).
- raid5: use bio_end_sector in r5_next_bio (bsc#1166003).
- raid6/test: fix a compilation error (bsc#1166003).
- raid6/test: fix a compilation warning (bsc#1166003).
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (bsc#1103992).
- RDMA/hfi1: Fix memory leak in _dev_comp_vect_mappings_create (bsc#1114685).
- RDMA/uverbs: Verify MR access flags (bsc#1103992).
- remoteproc: Initialize rproc_class before use (bsc#1051510).
- Revert 'HID: add NOGET quirk for Eaton Ellipse MAX UPS' (git-fixes).
- rtlwifi: rtl_pci: Fix -Wcast-function-type (bsc#1051510).
- rxrpc: Fix insufficient receive notification generation (networking-stable-20_02_05).
- s390/pci: Fix unexpected write combine on resource (git-fixes).
- s390/uv: Fix handling of length extensions (git-fixes).
- scsi: fnic: do not queue commands during fwreset (bsc#1146539).
- scsi: ibmvfc: Add failed PRLI to cmd_status lookup array (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Byte swap status and error codes when logging (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Clean up transport events (bsc#1161951 ltc#183551).
- scsi: ibmvfc: constify dev_pm_ops structures (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Do not call fc_block_scsi_eh() on host reset (bsc#1161951 ltc#183551).
- scsi: ibmvfc: ibmvscsi: ibmvscsi_tgt: constify vio_device_id (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Mark expected switch fall-throughs (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Remove 'failed' from logged errors (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Remove unneeded semicolons (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: change strncpy+truncation to strlcpy (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: constify dev_pm_ops structures (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Do not use rc uninitialized in ibmvscsi_do_work (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: fix tripping of blk_mq_run_hw_queue WARN_ON (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Improve strings handling (bsc#1161951 ltc#183551). 
- scsi: ibmvscsi: redo driver work thread to use enum action states (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Wire up host_reset() in the driver's scsi_host_template (bsc#1161951 ltc#183551).
- scsi: qla2xxx: Add 16.0GT for PCI String (bsc#1157424).
- scsi: qla2xxx: Add beacon LED config sysfs interface (bsc#1157424).
- scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (bsc#1157424).
- scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (bsc#1157424).
- scsi: qla2xxx: Add endianizer macro calls to fc host stats (bsc#1157424).
- scsi: qla2xxx: Add fixes for mailbox command (bsc#1157424).
- scsi: qla2xxx: add more FW debug information (bsc#1157424).
- scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (bsc#1157424).
- scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (bsc#1157424).
- scsi: qla2xxx: Add vendor extended FDMI commands (bsc#1157424).
- scsi: qla2xxx: Add vendor extended RDP additions and amendments (bsc#1157424).
- scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options (bsc#1157424).
- scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb() (bsc#1157424).
- scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (bsc#1157424).
- scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function (bsc#1157424).
- scsi: qla2xxx: Correction to selection of loopback/echo test (bsc#1157424).
- scsi: qla2xxx: Display message for FCE enabled (bsc#1157424).
- scsi: qla2xxx: Fix control flags for login/logout IOCB (bsc#1157424).
- scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (bsc#1157424).
- scsi: qla2xxx: fix FW resource count values (bsc#1157424).
- scsi: qla2xxx: Fix NPIV instantiation after FW dump (bsc#1157424).
- scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (bsc#1157424).
- scsi: qla2xxx: Fix RDP respond data format (bsc#1157424).
- scsi: qla2xxx: Fix RDP response size (bsc#1157424).
- scsi: qla2xxx: Fix sparse warning reported by kbuild bot (bsc#1157424).
- scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code (bsc#1157424).
- scsi: qla2xxx: Force semaphore on flash validation failure (bsc#1157424).
- scsi: qla2xxx: Handle cases for limiting RDP response payload length (bsc#1157424).
- scsi: qla2xxx: Handle NVME status iocb correctly (bsc#1157424).
- scsi: qla2xxx: Improved secure flash support messages (bsc#1157424).
- scsi: qla2xxx: Move free of fcport out of interrupt context (bsc#1157424).
- scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (bsc#1157424).
- scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (bsc#1157424).
- scsi: qla2xxx: Return appropriate failure through BSG Interface (bsc#1157424).
- scsi: qla2xxx: Save rscn_gen for new fcport (bsc#1157424).
- scsi: qla2xxx: Serialize fc_port alloc in N2N (bsc#1157424).
- scsi: qla2xxx: Set Nport ID for N2N (bsc#1157424).
- scsi: qla2xxx: Show correct port speed capabilities for RDP command (bsc#1157424).
- scsi: qla2xxx: Simplify the code for aborting SCSI commands (bsc#1157424).
- scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop() (bsc#1157424).
- scsi: qla2xxx: Update BPM enablement semantics (bsc#1157424).
- scsi: qla2xxx: Update driver version to 10.01.00.24-k (bsc#1157424).
- scsi: qla2xxx: Update driver version to 10.01.00.25-k (bsc#1157424).
- scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required' ISPs (bsc#1157424).
- scsi: qla2xxx: Use correct ISP28xx active FW region (bsc#1157424).
- scsi: qla2xxx: Use endian macros to assign static fields in fwdump header (bsc#1157424).
- scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx (bsc#1157424).
- scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (bsc#1157424).
- scsi: tcm_qla2xxx: Make qlt_alloc_qfull_cmd() set cmd-&gt;se_cmd.map_tag (bsc#1157424).
- sctp: free cmd-&gt;obj.chunk for the unprocessed SCTP_CMD_REPLY (networking-stable-20_01_11).
- smb3: add debug messages for closing unmatched open (bsc#1144333).
- smb3: Add defines for new information level, FileIdInformation (bsc#1144333).
- smb3: add dynamic tracepoints for flush and close (bsc#1144333).
- smb3: add missing flag definitions (bsc#1144333).
- smb3: Add missing reparse tags (bsc#1144333).
- smb3: add missing worker function for SMB3 change notify (bsc#1144333).
- smb3: add mount option to allow forced caching of read only share (bsc#1144333).
- smb3: add mount option to allow RW caching of share accessed by only 1 client (bsc#1144333).
- smb3: add one more dynamic tracepoint missing from strict fsync path (bsc#1144333).
- smb3: add some more descriptive messages about share when mounting cache=ro (bsc#1144333).
- smb3: allow decryption keys to be dumped by admin for debugging (bsc#1144333).
- smb3: allow disabling requesting leases (bsc#1144333).
- smb3: allow parallelizing decryption of reads (bsc#1144333).
- smb3: allow skipping signature verification for perf sensitive configurations (bsc#1144333).
- smb3: Backup intent flag missing from some more ops (bsc#1144333).
- smb3: cleanup some recent endian errors spotted by updated sparse (bsc#1144333).
- smb3: display max smb3 requests in flight at any one time (bsc#1144333).
- smb3: dump in_send and num_waiters stats counters by default (bsc#1144333).
- smb3: enable offload of decryption of large reads via mount option (bsc#1144333).
- smb3: fix default permissions on new files when mounting with modefromsid (bsc#1144333).
- smb3: fix mode passed in on create for modetosid mount option (bsc#1144333).
- smb3: fix performance regression with setting mtime (bsc#1144333).
- smb3: fix potential null dereference in decrypt offload (bsc#1144333).
- smb3: fix problem with null cifs super block with previous patch (bsc#1144333).
- smb3: Fix regression in time handling (bsc#1144333).
- smb3: improve check for when we send the security descriptor context on create (bsc#1144333).
- smb3: log warning if CSC policy conflicts with cache mount option (bsc#1144333).
- smb3: missing ACL related flags (bsc#1144333).
- smb3: only offload decryption of read responses if multiple requests (bsc#1144333).
- smb3: pass mode bits into create calls (bsc#1144333).
- smb3: print warning once if posix context returned on open  (bsc#1144333).
- smb3: query attributes on file close (bsc#1144333).
- smb3: remove noisy debug message and minor cleanup (bsc#1144333).
- smb3: remove unused flag passed into close functions (bsc#1144333).
- staging: rtl8188eu: Fix potential overuse of kernel memory (bsc#1051510).
- staging: rtl8188eu: Fix potential security hole (bsc#1051510).
- staging: rtl8723bs: Fix potential overuse of kernel memory (bsc#1051510).
- staging: rtl8723bs: Fix potential security hole (bsc#1051510).
- SUNRPC: Fix svcauth_gss_proxy_init() (bsc#1103992).
- tcp_bbr: improve arithmetic division in bbr_update_bw() (networking-stable-20_01_27).
- tcp: clear tp-&gt;data_segs{in|out} in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;delivered in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;segs_{in|out} in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;total_retrans in tcp_disconnect() (networking-stable-20_02_05).
- tcp: fix marked lost packets not being retransmitted (networking-stable-20_01_20).
- tcp: fix 'old stuff' D-SACK causing SACK to be treated as D-SACK (networking-stable-20_01_11).
- thunderbolt: Prevent crash if non-active NVMem file is read (git-fixes).
- tick: broadcast-hrtimer: Fix a race in bc_set_next (bsc#1044231).
- tools lib traceevent: Do not free tep-&gt;cmdlines in add_new_comm() on failure (git-fixes).
- tools: Update include/uapi/linux/fcntl.h copy from the kernel (bsc#1166003).
- ttyprintk: fix a potential deadlock in interrupt context issue (git-fixes).
- tun: add mutex_unlock() call and napi.skb clearing in tun_get_user() (bsc#1109837).
- Updated block layer, timers and md code for SLE15-SP1 kernel (bsc#1111974).
- Updated 'drm/i915: Wean off drm_pci_alloc/drm_pci_free' (bsc#1114279) 
- USB: core: add endpoint-blacklist quirk (git-fixes).
- USBip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() (git-fixes).
- USB: quirks: blacklist duplicate ep on Sound Devices USBPre2 (git-fixes).
- uvcvideo: Refactor teardown of uvc on USB disconnect (https://patchwork.kernel.org/patch/9683663/) (bsc#1164507)
- vgacon: Fix a UAF in vgacon_invert_region (bsc#1114279)
- virtio-blk: fix hw_queue stopped on arbitrary error (git-fixes).
- vlan: fix memory leak in vlan_dev_set_egress_priority (networking-stable-20_01_11).
- vlan: vlan_changelink() should propagate errors (networking-stable-20_01_11).
- vxlan: fix tos value before xmit (networking-stable-20_01_11).
- x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF (bsc#1114279).
- x86/ioremap: Add an ioremap_encrypted() helper (bsc#1141895).
- x86/kdump: Export the SME mask to vmcoreinfo (bsc#1141895).
- x86/mce/amd: Fix kobject lifetime (bsc#1114279).
- x86/mce/amd: Publish the bank pointer only after setup has succeeded (bsc#1114279).
- x86/mm: Split vmalloc_sync_all() (bsc#1165741).
- xfs: also remove cached ACLs when removing the underlying attr (bsc#1165873).
- xfs: bulkstat should copy lastip whenever userspace supplies one (bsc#1165984).
- xhci: fix runtime pm enabling for quirky Intel hosts (bsc#1051510).
- xhci: Force Maximum Packet size for Full-speed bulk devices to valid range (bsc#1051510).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-31"/>
	<updated date="2020-03-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1044231">SUSE bug 1044231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051858">SUSE bug 1051858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056686">SUSE bug 1056686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060463">SUSE bug 1060463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111974">SUSE bug 1111974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119680">SUSE bug 1119680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136157">SUSE bug 1136157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141895">SUSE bug 1141895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146539">SUSE bug 1146539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156510">SUSE bug 1156510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158187">SUSE bug 1158187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159285">SUSE bug 1159285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160659">SUSE bug 1160659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161561">SUSE bug 1161561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161951">SUSE bug 1161951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162928">SUSE bug 1162928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162929">SUSE bug 1162929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162931">SUSE bug 1162931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164078">SUSE bug 1164078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164507">SUSE bug 1164507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165111">SUSE bug 1165111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165404">SUSE bug 1165404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165488">SUSE bug 1165488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165527">SUSE bug 1165527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165741">SUSE bug 1165741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165813">SUSE bug 1165813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165873">SUSE bug 1165873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165929">SUSE bug 1165929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165950">SUSE bug 1165950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165980">SUSE bug 1165980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165984">SUSE bug 1165984</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165985">SUSE bug 1165985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166003">SUSE bug 1166003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166101">SUSE bug 1166101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166102">SUSE bug 1166102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166103">SUSE bug 1166103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166104">SUSE bug 1166104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166632">SUSE bug 1166632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166658">SUSE bug 1166658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166730">SUSE bug 1166730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166731">SUSE bug 1166731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166732">SUSE bug 1166732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166733">SUSE bug 1166733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166734">SUSE bug 1166734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166735">SUSE bug 1166735</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19768/">CVE-2019-19768</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8647/">CVE-2020-8647</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8648/">CVE-2020-8648</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8649/">CVE-2020-8649</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-9383/">CVE-2020-9383</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496429" comment="kernel-docs-4.12.14-197.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496430" comment="kernel-obs-build-4.12.14-197.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496431" comment="kernel-source-4.12.14-197.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496432" comment="kernel-syms-4.12.14-197.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138265" version="1" class="patch">
	<metadata>
		<title>Security update for gmp, gnutls, libnettle (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1152692" ref_url="https://bugzilla.suse.com/1152692" source="BUGZILLA"/>
		<reference ref_id="1155327" ref_url="https://bugzilla.suse.com/1155327" source="BUGZILLA"/>
		<reference ref_id="1166881" ref_url="https://bugzilla.suse.com/1166881" source="BUGZILLA"/>
		<reference ref_id="1168345" ref_url="https://bugzilla.suse.com/1168345" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11501" ref_url="https://www.suse.com/security/cve/CVE-2020-11501/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006686.html" source="SUSE-SU"/>
		<description>
This update for gmp, gnutls, libnettle fixes the following issues:

Security issue fixed:

- CVE-2020-11501: Fixed zero random value in DTLS client hello (bsc#1168345)

FIPS related bugfixes:

- FIPS: Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)
- FIPS: Fixed a cfb8 decryption issue, no longer truncate output IV if
  input is shorter than block size. (bsc#1166881)
- FIPS: Added Diffie Hellman public key verification test. (bsc#1155327)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-08"/>
	<updated date="2020-04-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1152692">SUSE bug 1152692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155327">SUSE bug 1155327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166881">SUSE bug 1166881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168345">SUSE bug 1168345</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-11501/">CVE-2020-11501</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496433" comment="gmp-devel-32bit-6.1.2-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496434" comment="libgmpxx4-32bit-6.1.2-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138266" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168930" ref_url="https://bugzilla.suse.com/1168930" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-5260" ref_url="https://www.suse.com/security/cve/CVE-2020-5260/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0991-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006710.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- CVE-2020-5260: With a crafted URL that contains a newline in it, the credential
  helper machinery can be fooled to give credential information for a wrong host (bsc#1168930). 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-14"/>
	<updated date="2020-04-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168930">SUSE bug 1168930</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-5260/">CVE-2020-5260</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496435" comment="git-2.16.4-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496436" comment="git-arch-2.16.4-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496437" comment="git-cvs-2.16.4-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496438" comment="git-daemon-2.16.4-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496439" comment="git-doc-2.16.4-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496440" comment="git-email-2.16.4-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496441" comment="git-gui-2.16.4-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496442" comment="git-svn-2.16.4-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496443" comment="git-web-2.16.4-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496444" comment="gitk-2.16.4-3.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138267" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1040855" ref_url="https://bugzilla.suse.com/1040855" source="BUGZILLA"/>
		<reference ref_id="1044120" ref_url="https://bugzilla.suse.com/1044120" source="BUGZILLA"/>
		<reference ref_id="1044767" ref_url="https://bugzilla.suse.com/1044767" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1056653" ref_url="https://bugzilla.suse.com/1056653" source="BUGZILLA"/>
		<reference ref_id="1056657" ref_url="https://bugzilla.suse.com/1056657" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1094840" ref_url="https://bugzilla.suse.com/1094840" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104389" ref_url="https://bugzilla.suse.com/1104389" source="BUGZILLA"/>
		<reference ref_id="1104393" ref_url="https://bugzilla.suse.com/1104393" source="BUGZILLA"/>
		<reference ref_id="1109695" ref_url="https://bugzilla.suse.com/1109695" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1110096" ref_url="https://bugzilla.suse.com/1110096" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1115431" ref_url="https://bugzilla.suse.com/1115431" source="BUGZILLA"/>
		<reference ref_id="1118657" ref_url="https://bugzilla.suse.com/1118657" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1138374" ref_url="https://bugzilla.suse.com/1138374" source="BUGZILLA"/>
		<reference ref_id="1139944" ref_url="https://bugzilla.suse.com/1139944" source="BUGZILLA"/>
		<reference ref_id="1144912" ref_url="https://bugzilla.suse.com/1144912" source="BUGZILLA"/>
		<reference ref_id="1152457" ref_url="https://bugzilla.suse.com/1152457" source="BUGZILLA"/>
		<reference ref_id="1163727" ref_url="https://bugzilla.suse.com/1163727" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1171078" ref_url="https://bugzilla.suse.com/1171078" source="BUGZILLA"/>
		<reference ref_id="1172145" ref_url="https://bugzilla.suse.com/1172145" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1172694" ref_url="https://bugzilla.suse.com/1172694" source="BUGZILLA"/>
		<reference ref_id="1174784" ref_url="https://bugzilla.suse.com/1174784" source="BUGZILLA"/>
		<reference ref_id="1174852" ref_url="https://bugzilla.suse.com/1174852" source="BUGZILLA"/>
		<reference ref_id="1176558" ref_url="https://bugzilla.suse.com/1176558" source="BUGZILLA"/>
		<reference ref_id="1176559" ref_url="https://bugzilla.suse.com/1176559" source="BUGZILLA"/>
		<reference ref_id="1176956" ref_url="https://bugzilla.suse.com/1176956" source="BUGZILLA"/>
		<reference ref_id="1178270" ref_url="https://bugzilla.suse.com/1178270" source="BUGZILLA"/>
		<reference ref_id="1178372" ref_url="https://bugzilla.suse.com/1178372" source="BUGZILLA"/>
		<reference ref_id="1178401" ref_url="https://bugzilla.suse.com/1178401" source="BUGZILLA"/>
		<reference ref_id="1178590" ref_url="https://bugzilla.suse.com/1178590" source="BUGZILLA"/>
		<reference ref_id="1178634" ref_url="https://bugzilla.suse.com/1178634" source="BUGZILLA"/>
		<reference ref_id="1178762" ref_url="https://bugzilla.suse.com/1178762" source="BUGZILLA"/>
		<reference ref_id="1179014" ref_url="https://bugzilla.suse.com/1179014" source="BUGZILLA"/>
		<reference ref_id="1179015" ref_url="https://bugzilla.suse.com/1179015" source="BUGZILLA"/>
		<reference ref_id="1179045" ref_url="https://bugzilla.suse.com/1179045" source="BUGZILLA"/>
		<reference ref_id="1179082" ref_url="https://bugzilla.suse.com/1179082" source="BUGZILLA"/>
		<reference ref_id="1179107" ref_url="https://bugzilla.suse.com/1179107" source="BUGZILLA"/>
		<reference ref_id="1179142" ref_url="https://bugzilla.suse.com/1179142" source="BUGZILLA"/>
		<reference ref_id="1179204" ref_url="https://bugzilla.suse.com/1179204" source="BUGZILLA"/>
		<reference ref_id="1179419" ref_url="https://bugzilla.suse.com/1179419" source="BUGZILLA"/>
		<reference ref_id="1179444" ref_url="https://bugzilla.suse.com/1179444" source="BUGZILLA"/>
		<reference ref_id="1179520" ref_url="https://bugzilla.suse.com/1179520" source="BUGZILLA"/>
		<reference ref_id="1179578" ref_url="https://bugzilla.suse.com/1179578" source="BUGZILLA"/>
		<reference ref_id="1179601" ref_url="https://bugzilla.suse.com/1179601" source="BUGZILLA"/>
		<reference ref_id="1179663" ref_url="https://bugzilla.suse.com/1179663" source="BUGZILLA"/>
		<reference ref_id="1179666" ref_url="https://bugzilla.suse.com/1179666" source="BUGZILLA"/>
		<reference ref_id="1179670" ref_url="https://bugzilla.suse.com/1179670" source="BUGZILLA"/>
		<reference ref_id="1179671" ref_url="https://bugzilla.suse.com/1179671" source="BUGZILLA"/>
		<reference ref_id="1179672" ref_url="https://bugzilla.suse.com/1179672" source="BUGZILLA"/>
		<reference ref_id="1179673" ref_url="https://bugzilla.suse.com/1179673" source="BUGZILLA"/>
		<reference ref_id="1179711" ref_url="https://bugzilla.suse.com/1179711" source="BUGZILLA"/>
		<reference ref_id="1179713" ref_url="https://bugzilla.suse.com/1179713" source="BUGZILLA"/>
		<reference ref_id="1179714" ref_url="https://bugzilla.suse.com/1179714" source="BUGZILLA"/>
		<reference ref_id="1179715" ref_url="https://bugzilla.suse.com/1179715" source="BUGZILLA"/>
		<reference ref_id="1179716" ref_url="https://bugzilla.suse.com/1179716" source="BUGZILLA"/>
		<reference ref_id="1179722" ref_url="https://bugzilla.suse.com/1179722" source="BUGZILLA"/>
		<reference ref_id="1179723" ref_url="https://bugzilla.suse.com/1179723" source="BUGZILLA"/>
		<reference ref_id="1179724" ref_url="https://bugzilla.suse.com/1179724" source="BUGZILLA"/>
		<reference ref_id="1179745" ref_url="https://bugzilla.suse.com/1179745" source="BUGZILLA"/>
		<reference ref_id="1179810" ref_url="https://bugzilla.suse.com/1179810" source="BUGZILLA"/>
		<reference ref_id="1179888" ref_url="https://bugzilla.suse.com/1179888" source="BUGZILLA"/>
		<reference ref_id="1179895" ref_url="https://bugzilla.suse.com/1179895" source="BUGZILLA"/>
		<reference ref_id="1179896" ref_url="https://bugzilla.suse.com/1179896" source="BUGZILLA"/>
		<reference ref_id="1179960" ref_url="https://bugzilla.suse.com/1179960" source="BUGZILLA"/>
		<reference ref_id="1179963" ref_url="https://bugzilla.suse.com/1179963" source="BUGZILLA"/>
		<reference ref_id="1180027" ref_url="https://bugzilla.suse.com/1180027" source="BUGZILLA"/>
		<reference ref_id="1180029" ref_url="https://bugzilla.suse.com/1180029" source="BUGZILLA"/>
		<reference ref_id="1180031" ref_url="https://bugzilla.suse.com/1180031" source="BUGZILLA"/>
		<reference ref_id="1180052" ref_url="https://bugzilla.suse.com/1180052" source="BUGZILLA"/>
		<reference ref_id="1180086" ref_url="https://bugzilla.suse.com/1180086" source="BUGZILLA"/>
		<reference ref_id="1180117" ref_url="https://bugzilla.suse.com/1180117" source="BUGZILLA"/>
		<reference ref_id="1180258" ref_url="https://bugzilla.suse.com/1180258" source="BUGZILLA"/>
		<reference ref_id="1180506" ref_url="https://bugzilla.suse.com/1180506" source="BUGZILLA"/>
		<reference ref_id="1180559" ref_url="https://bugzilla.suse.com/1180559" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20669" ref_url="https://www.suse.com/security/cve/CVE-2018-20669/" source="CVE"/>
		<reference ref_id="CVE-2019-20934" ref_url="https://www.suse.com/security/cve/CVE-2019-20934/" source="CVE"/>
		<reference ref_id="CVE-2020-0444" ref_url="https://www.suse.com/security/cve/CVE-2020-0444/" source="CVE"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-27068" ref_url="https://www.suse.com/security/cve/CVE-2020-27068/" source="CVE"/>
		<reference ref_id="CVE-2020-27777" ref_url="https://www.suse.com/security/cve/CVE-2020-27777/" source="CVE"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-27825" ref_url="https://www.suse.com/security/cve/CVE-2020-27825/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="CVE-2020-4788" ref_url="https://www.suse.com/security/cve/CVE-2020-4788/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-28374: Fixed a Linux SCSI target issue (bsc#1178372).
- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180559).
- CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls (bsc#1179960).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180031).
- CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds check in the nl80211_policy policy of nl80211.c (bnc#1180086).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180029).
- CVE-2020-0444: Fixed a bad kfree due to a logic error in audit_data_to_entry (bnc#1180027).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bnc#1179745).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179745).
- CVE-2020-27777: Fixed a privilege escalation in the Run-Time Abstraction Services (RTAS) interface, affecting guests running on top of PowerVM or KVM hypervisors (bnc#1179107).
- CVE-2019-20934: Fixed a use-after-free in show_numa_stats() because NUMA fault statistics were inappropriately freed, aka CID-16d51a590a8c (bsc#1179663).
- CVE-2020-27786: Fixed a use after free in kernel midi subsystem snd_rawmidi_kernel_read1() (bsc#1179601).

The following non-security bugs were fixed:

- ACPI: PNP: compare the string length in the matching_id() (git-fixes).
- ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1 (git-fixes).
- ACPICA: Do not increment operation_region reference counts for field units (git-fixes).
- ALSA: ca0106: fix error code handling (git-fixes).
- ALSA: ctl: allow TLV read operation for callback type of element in locked case (git-fixes).
- ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO (git-fixes).
- ALSA: hda/ca0132 - Change Input Source enum strings (git-fixes).
- ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg (git-fixes).
- ALSA: hda/generic: Add option to enforce preferred_dacs pairs (git-fixes).
- ALSA: hda/hdmi: always check pin power status in i915 pin fixup (git-fixes).
- ALSA: hda/realtek - Add new codec supported for ALC897 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (git-fixes).
- ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (git-fixes).
- ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520 (git-fixes).
- ALSA: hda/realtek: Enable headset of ASUS UX482EG &amp; B9400CEA with ALC294 (git-fixes).
- ALSA: hda: Add NVIDIA codec IDs 9a &amp; 9d through a0 to patch table (git-fixes).
- ALSA: hda: Fix potential race in unsol event handler (git-fixes).
- ALSA: hda: Fix regressions on clear and reconfig sysfs (git-fixes).
- ALSA: info: Drop WARN_ON() from buffer NULL sanity check (git-fixes).
- ALSA: isa/wavefront: prevent out of bounds write in ioctl (git-fixes).
- ALSA: line6: Perform sanity check for each URB creation (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: pcm: oss: Fix potential out-of-bounds shift (git-fixes).
- ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check (git-fixes).
- ALSA: timer: Limit max amount of slave instances (git-fixes).
- ALSA: usb-audio: Add delay quirk for all Logitech USB devices (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16 (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2 (git-fixes).
- ALSA: usb-audio: add quirk for Denon DCD-1500RE (git-fixes).
- ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG) (git-fixes).
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Alpha S (git-fixes).
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight S (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware does not give back (git-fixes).
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (git-fixes).
- ALSA: usb-audio: Fix OOB access of mixer element list (git-fixes).
- ALSA: usb-audio: Fix potential out-of-bounds shift (git-fixes).
- ALSA: usb-audio: Fix race against the error recovery URB submission (git-fixes).
- ALSA: usb-audio: US16x08: fix value count for level meters (git-fixes).
- ASoC: arizona: Fix a wrong free in wm8997_probe (git-fixes).
- ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (git-fixes).
- ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed (git-fixes).
- ASoC: jz4740-i2s: add missed checks for clk_get() (git-fixes).
- ASoC: pcm3168a: The codec does not support S32_LE (git-fixes).
- ASoC: pcm: DRAIN support reactivation (git-fixes).
- ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile (git-fixes).
- ASoC: sti: fix possible sleep-in-atomic (git-fixes).
- ASoC: wm8904: fix regcache handling (git-fixes).
- ASoC: wm8998: Fix PM disable depth imbalance on error (git-fixes).
- ASoC: wm_adsp: Do not generate kcontrols without READ flags (git-fixes).
- ASoC: wm_adsp: remove 'ctl' from list on error in wm_adsp_create_control() (git-fixes).
- ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function (git-fixes).
- ath10k: Fix an error handling path (git-fixes).
- ath10k: fix backtrace on coredump (git-fixes).
- ath10k: fix get invalid tx rate for Mesh metric (git-fixes).
- ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq (git-fixes).
- ath10k: Release some resources in an error handling path (git-fixes).
- ath10k: Remove msdu from idr when management pkt send fails (git-fixes).
- ath6kl: fix enum-conversion warning (git-fixes).
- ath9k_htc: Discard undersized packets (git-fixes).
- ath9k_htc: Modify byte order for an error message (git-fixes).
- ath9k_htc: Silence undersized packet warnings (git-fixes).
- ath9k_htc: Use appropriate rs_datalen type (git-fixes).
- Avoid a GCC warning about '/*' within a comment.
- backlight: lp855x: Ensure regulators are disabled on probe failure (git-fixes).
- Bluetooth: add a mutex lock to avoid UAF in do_enale_set (git-fixes).
- Bluetooth: btusb: Fix detection of some fake CSR controllers with a bcdDevice val of 0x0134 (git-fixes).
- Bluetooth: Fix advertising duplicated flags (git-fixes).
- Bluetooth: Fix null pointer dereference in hci_event_packet() (git-fixes).
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (git-fixes).
- bnxt_en: Fix race when modifying pause settings (bsc#1050242 ).
- bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex (bsc#1050242).
- btmrvl: Fix firmware filename for sd8997 chipset (bsc#1172694).
- btrfs: fix use-after-free on readahead extent after failure to create it (bsc#1179963).
- btrfs: qgroup: do not commit transaction when we already hold the handle (bsc#1178634).
- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1174784).
- bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (git-fixes).
- can: mcp251x: add error check when wq alloc failed (git-fixes).
- can: softing: softing_netdev_open(): fix error handling (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- cfg80211: regulatory: Fix inconsistent format argument (git-fixes).
- cifs: add NULL check for ses-&gt;tcon_ipc (bsc#1178270).
- cifs: allow syscalls to be restarted in __smb_send_rqst() (bsc#1176956).
- cifs: fix check of tcon dfs in smb1 (bsc#1178270).
- cifs: fix potential use-after-free in cifs_echo_request() (bsc#1139944).
- cirrus: cs89x0: remove set but not used variable 'lp' (git-fixes).
- cirrus: cs89x0: use devm_platform_ioremap_resource() to simplify code (git-fixes).
- clk: at91: usb: continue if clk_hw_round_rate() return zero (git-fixes).
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (git-fixes).
- clk: qcom: Allow constant ratio freq tables for rcg (git-fixes).
- clk: qcom: msm8916: Fix the address location of pll-&gt;config_reg (git-fixes).
- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (git-fixes).
- clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1 (git-fixes).
- clk: sunxi-ng: Make sure divider tables have sentinel (git-fixes).
- clk: tegra: Fix duplicated SE clock entry (git-fixes).
- clk: tegra: Fix Tegra PMC clock out parents (git-fixes).
- clk: ti: composite: fix memory leak (git-fixes).
- clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call (git-fixes).
- clk: ti: Fix memleak in ti_fapll_synth_setup (git-fixes).
- clocksource/drivers/asm9260: Add a check for of_clk_get (git-fixes).
- coredump: fix core_pattern parse error (git-fixes).
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (git-fixes).
- cpufreq: loongson1: Add missing MODULE_ALIAS (git-fixes).
- cpufreq: scpi: Add missing MODULE_ALIAS (git-fixes).
- cpufreq: st: Add missing MODULE_DEVICE_TABLE (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (git-fixes).
- crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr() (git-fixes).
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (git-fixes).
- cxgb4: Fix offset when clearing filter byte counters (bsc#1064802 bsc#1066129).
- drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish (git-fixes).
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (git-fixes).
- drm/amd/display: remove useless if/else (git-fixes).
- drm/amdgpu: fix build_coefficients() argument (git-fixes).
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (git-fixes).
- drm/gma500: fix double free of gma_connector (git-fixes).
- drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] (bsc#1129770)
- drm/meson: dw-hdmi: Register a callback to disable the regulator (git-fixes).
- drm/msm/dpu: Add newline to printks (git-fixes).
- drm/msm/dsi_phy_10nm: implement PHY disabling (git-fixes).
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (git-fixes).
- drm/rockchip: Avoid uninitialized use of endpoint id in LVDS (git-fixes).
- epoll: Keep a reference on files added to the check list (bsc#1180031).
- ext4: correctly report 'not supported' for {usr,grp}jquota when !CONFIG_QUOTA (bsc#1179672).
- ext4: fix bogus warning in ext4_update_dx_flag() (bsc#1179716).
- ext4: fix error handling code in add_new_gdb (bsc#1179722).
- ext4: fix invalid inode checksum (bsc#1179723).
- ext4: fix leaking sysfs kobject after failed mount (bsc#1179670).
- ext4: limit entries returned when counting fsmap records (bsc#1179671).
- ext4: unlock xattr_sem properly in ext4_inline_data_truncate() (bsc#1179673).
- extcon: max77693: Fix modalias string (git-fixes).
- fbcon: Fix user font detection test at fbcon_resize(). (bsc#1112178) Backporting changes: 	* updated path drivers/video/fbcon/core to drivers/video/console
- fbcon: Remove the superfluous break (bsc#1129770) Backporting changes: 	* updated path drivers/video/fbcon/core to drivers/video/console 	* context changes
- firmware: qcom: scm: Ensure 'a0' status code is treated as signed (git-fixes).
- fix regression in 'epoll: Keep a reference on files added to the check list' (bsc#1180031, git-fixes).
- forcedeth: use per cpu to collect xmit/recv statistics (git-fixes).
- fs: Do not invalidate page buffers in block_write_full_page() (bsc#1179711).
- geneve: change from tx_error to tx_dropped on missing metadata (git-fixes).
- genirq/irqdomain: Add an irq_create_mapping_affinity() function (bsc#1065729).
- gpio: arizona: handle pm_runtime_get_sync failure case (git-fixes).
- gpio: gpio-grgpio: fix possible sleep-in-atomic-context bugs in grgpio_irq_map/unmap() (git-fixes).
- gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP (git-fixes).
- gpio: max77620: Fixup debounce delays (git-fixes).
- gpio: max77620: Use correct unit for debounce times (git-fixes).
- gpio: mpc8xxx: Add platform device to gpiochip-&gt;parent (git-fixes).
- gpio: mvebu: fix potential user-after-free on probe (git-fixes).
- gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism (git-fixes).
- gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 BYT + AXP288 model (git-fixes).
- gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 CHT + AXP288 model (git-fixes).
- gpiolib: acpi: Correct comment for HP x2 10 honor_wakeup quirk (git-fixes).
- gpiolib: acpi: Rework honor_wakeup option into an ignore_wake option (git-fixes).
- gpiolib: acpi: Turn dmi_system_id table into a generic quirk table (git-fixes).
- gpiolib: fix up emulated open drain outputs (git-fixes).
- HID: Add another Primax PIXART OEM mouse quirk (git-fixes).
- HID: apple: Disable Fn-key key-re-mapping on clone keyboards (git-fixes).
- HID: core: check whether Usage Page item is after Usage ID items (git-fixes).
- HID: core: Correctly handle ReportSize being zero (git-fixes).
- HID: cypress: Support Varmilo Keyboards' media hotkeys (git-fixes).
- HID: Fix slab-out-of-bounds read in hid_field_extract (bsc#1180052).
- HID: hid-sensor-hub: Fix issue with devices with no report ID (git-fixes).
- HID: Improve Windows Precision Touchpad detection (git-fixes).
- HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() (git-fixes).
- HID: logitech-hidpp: Silence intermittent get_battery_capacity errors (git-fixes).
- HSI: omap_ssi: Do not jump to free ID in ssi_add_controller() (git-fixes).
- hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow (git-fixes).
- hwmon: (jc42) Fix name to have no illegal characters (git-fixes).
- i2c: algo: pca: Reapply i2c bus settings after reset (git-fixes).
- i2c: i801: Fix resume bug (git-fixes).
- i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets (git-fixes).
- i2c: pxa: clear all master action bits in i2c_pxa_stop_message() (git-fixes).
- i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output (git-fixes).
- i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (git-fixes).
- ibmvnic: add some debugs (bsc#1179896 ltc#190255).
- ibmvnic: avoid memset null scrq msgs (bsc#1044767 ltc#155231 git-fixes).
- ibmvnic: continue fatal error reset after passive init (bsc#1171078 ltc#184239 git-fixes).
- ibmvnic: delay next reset if hard reset fails (bsc#1094840 ltc#167098 git-fixes).
- ibmvnic: enhance resetting status check during module exit (bsc#1065729).
- ibmvnic: fix call_netdevice_notifiers in do_reset (bsc#1115431 ltc#171853 git-fixes).
- ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues (bsc#1040855 ltc#155067 git-fixes).
- ibmvnic: fix: NULL pointer dereference (bsc#1044767 ltc#155231 git-fixes).
- ibmvnic: notify peers when failover and migration happen (bsc#1044120 ltc#155423 git-fixes).
- ibmvnic: restore adapter state on failed reset (bsc#1152457 ltc#174432 git-fixes).
- igc: Fix returning wrong statistics (bsc#1118657).
- iio: adc: max1027: Reset the device at probe time (git-fixes).
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (git-fixes).
- iio: bmp280: fix compensation of humidity (git-fixes).
- iio: buffer: Fix demux update (git-fixes).
- iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw() (git-fixes).
- iio: fix center temperature of bmc150-accel-core (git-fixes).
- iio: humidity: hdc100x: fix IIO_HUMIDITYRELATIVE channel reporting (git-fixes).
- iio: light: bh1750: Resolve compiler warning and make code more readable (git-fixes).
- iio: srf04: fix wrong limitation in distance measuring (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- iio:pressure:mpl3115: Force alignment of buffer (git-fixes).
- inet_ecn: Fix endianness of checksum update when setting ECT(1) (git-fixes).
- Input: ads7846 - fix integer overflow on Rt calculation (git-fixes).
- Input: ads7846 - fix race that causes missing releases (git-fixes).
- Input: ads7846 - fix unaligned access on 7845 (git-fixes).
- Input: atmel_mxt_ts - disable IRQ across suspend (git-fixes).
- Input: cm109 - do not stomp on control URB (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events (git-fixes).
- Input: cyapa_gen6 - fix out-of-bounds stack access (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (git-fixes).
- Input: i8042 - add Acer laptops to the i8042 reset list (git-fixes).
- Input: i8042 - add ByteSpeed touchpad to noloop table (git-fixes).
- Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists (git-fixes).
- Input: i8042 - allow insmod to succeed on devices without an i8042 controller (git-fixes).
- Input: i8042 - fix error return code in i8042_setup_aux() (git-fixes).
- Input: omap4-keypad - fix runtime PM error handling (git-fixes).
- Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen (git-fixes).
- Input: trackpoint - add new trackpoint variant IDs (git-fixes).
- Input: trackpoint - enable Synaptics trackpoints (git-fixes).
- Input: xpad - support Ardwiino Controllers (git-fixes).
- ipw2x00: Fix -Wcast-function-type (git-fixes).
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (git-fixes).
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (git-fixes).
- iwlwifi: mvm: fix unaligned read of rx_pkt_status (git-fixes).
- iwlwifi: pcie: limit memory read spin time (git-fixes).
- kABI fix for g2d (git-fixes).
- kABI workaround for dsa/b53 changes (git-fixes).
- kABI workaround for HD-audio generic parser (git-fixes).
- kABI workaround for net/ipvlan changes (git-fixes).
- kABI: ath10k: move a new structure member to the end (git-fixes).
- kABI: genirq: add back irq_create_mapping (bsc#1065729).
- kernel-source.spec: Fix build with rpm 4.16 (boo#1179015). RPM_BUILD_ROOT is cleared before %%install. Do the unpack into RPM_BUILD_ROOT in %%install
- kernel-{binary,source}.spec.in: do not create loop symlinks (bsc#1179082)
- kgdb: Fix spurious true from in_dbg_master() (git-fixes).
- KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (bsc#1112178).
- mac80211: allow rx of mesh eapol frames with default rx key (git-fixes).
- mac80211: Check port authorization in the ieee80211_tx_dequeue() case (git-fixes).
- mac80211: do not set set TDLS STA bandwidth wider than possible (git-fixes).
- mac80211: fix authentication with iwlwifi/mvm (git-fixes).
- mac80211: fix use of skb payload instead of header (git-fixes).
- mac80211: mesh: fix mesh_pathtbl_init() error path (git-fixes).
- matroxfb: avoid -Warray-bounds warning (git-fixes).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps() (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/cluster: fix deadlock when node is doing resync job (bsc#1163727).
- md/raid5: fix oops during stripe resizing (git-fixes).
- media: am437x-vpfe: Setting STD to current value is not an error (git-fixes).
- media: cec-funcs.h: add status_req checks (git-fixes).
- media: cx88: Fix some error handling path in 'cx8800_initdev()' (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: i2c: mt9v032: fix enum mbus codes and frame sizes (git-fixes).
- media: i2c: ov2659: Fix missing 720p register config (git-fixes).
- media: i2c: ov2659: fix s_stream return value (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: mtk-mdp: Fix a refcounting bug on error in init (git-fixes).
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (git-fixes).
- media: platform: add missing put_device() call in mtk_jpeg_probe() and mtk_jpeg_remove() (git-patches).
- media: pvrusb2: Fix oops on tear-down when radio support is not present (git-fixes).
- media: s5p-g2d: Fix a memory leak in an error handling path in 'g2d_probe()' (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio() (git-fixes).
- media: si470x-i2c: add missed operations in remove (git-fixes).
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling case (git-fixes).
- media: sti: bdisp: fix a possible sleep-in-atomic-context bug in bdisp_device_run() (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous (git-fixes).
- media: ti-vpe: vpe: ensure buffers are cleaned up properly in abort cases (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence number (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid sizeimage (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure causing a kernel panic (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format (git-fixes).
- media: ti-vpe: vpe: Make sure YUYV is set as default format (git-fixes).
- media: uvcvideo: Set media controller entity functions (git-fixes).
- media: uvcvideo: Silence shift-out-of-bounds warning (git-fixes).
- media: v4l2-async: Fix trivial documentation typo (git-fixes).
- media: v4l2-core: fix touch support in v4l_g_fmt (git-fixes).
- media: v4l2-device.h: Explicitly compare grp{id,mask} to zero in v4l2_device macros (git-fixes).
- mei: bus: do not clean driver pointer (git-fixes).
- mei: protect mei_cl_mtu from null dereference (git-fixes).
- memstick: fix a double-free bug in memstick_check (git-fixes).
- memstick: r592: Fix error return in r592_probe() (git-fixes).
- mfd: rt5033: Fix errorneous defines (git-fixes).
- mfd: wm8994: Fix driver operation if loaded as modules (git-fixes).
- mlxsw: core: Fix memory leak on module removal (bsc#1112374).
- mm,memory_failure: always pin the page in madvise_inject_error (bsc#1180258).
- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (bsc#1179204).
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/tls: Fix kmap usage (bsc#1109837).
- net/tls: missing received data after fast remote close (bsc#1109837).
- net/x25: prevent a couple of overflows (bsc#1178590).
- net: aquantia: Fix aq_vec_isr_legacy() return value (git-fixes).
- net: aquantia: fix LRO with FCS error (git-fixes).
- net: DCB: Validate DCB_ATTR_DCB_BUFFER argument (bsc#1103990 ).
- net: dsa: b53: Always use dev-&gt;vlan_enabled in b53_configure_vlan() (git-fixes).
- net: dsa: b53: Ensure the default VID is untagged (git-fixes).
- net: dsa: b53: Fix default VLAN ID (git-fixes).
- net: dsa: b53: Properly account for VLAN filtering (git-fixes).
- net: dsa: bcm_sf2: Do not assume DSA master supports WoL (git-fixes).
- net: dsa: bcm_sf2: potential array overflow in bcm_sf2_sw_suspend() (git-fixes).
- net: dsa: qca8k: remove leftover phy accessors (git-fixes).
- net: ena: fix packet's addresses for rx_offset feature (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (git-fixes).
- net: ethernet: ti: cpsw: fix runtime_pm while add/kill vlan (git-fixes).
- net: hisilicon: Fix signedness bug in hix5hd2_dev_probe() (git-fixes).
- net: macb: add missing barriers when reading descriptors (git-fixes).
- net: macb: fix dropped RX frames due to a race (git-fixes).
- net: macb: fix error format in dev_err() (git-fixes).
- net: macb: fix random memory corruption on RX with 64-bit DMA (git-fixes).
- net: pasemi: fix an use-after-free in pasemi_mac_phy_init() (git-fixes).
- net: phy: Avoid multiple suspends (git-fixes).
- net: qed: fix 'maybe uninitialized' warning (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: qed: fix async event callbacks unregistering (bsc#1104393 bsc#1104389).
- net: qede: fix PTP initialization on recovery (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: qede: fix use-after-free on recovery and AER handling (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: seeq: Fix the function used to release some memory in an error handling path (git-fixes).
- net: sh_eth: fix a missing check of of_get_phy_mode (git-fixes).
- net: sonic: replace dev_kfree_skb in sonic_send_packet (git-fixes).
- net: sonic: return NETDEV_TX_OK if failed to map buffer (git-fixes).
- net: stmmac: fix csr_clk can't be zero issue (git-fixes).
- net: stmmac: Fix reception of Broadcom switches tags (git-fixes).
- net: thunderx: use spin_lock_bh in nicvf_set_rx_mode_task() (bsc#1110096).
- net: usb: sr9800: fix uninitialized local variable (git-fixes).
- net:ethernet:aquantia: Extra spinlocks removed (git-fixes).
- net_sched: fix a memory leak in atm_tc_init() (bsc#1056657 bsc#1056653 bsc#1056787).
- nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame (git-fixes).
- nfc: s3fwrn5: Release the nfc firmware (git-fixes).
- nfc: st95hf: Fix memleak in st95hf_in_send_cmd (git-fixes).
- nfp: use correct define to return NONE fec (bsc#1109837).
- NFS: fix nfs_path in case of a rename retry (git-fixes).
- NFSD: Add missing NFSv2 .pc_func methods (git-fixes).
- NFSv4.2: fix client's attribute cache management for copy_file_range (git-fixes).
- NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag (git-fixes).
- ocfs2: fix unbalanced locking (bsc#1180506).
- ocfs2: initialize ip_next_orphan (bsc#1179724).
- orinoco: Move context allocation after processing the skb (git-fixes).
- parport: load lowlevel driver if ports not found (git-fixes).
- PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges (git-fixes).
- PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge (git-fixes).
- PCI: Do not disable decoding when mmio_always_on is set (git-fixes).
- PCI: Fix pci_slot_release() NULL pointer dereference (git-fixes).
- phy: Revert toggling reset changes (git-fixes).
- pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler() (git-fixes).
- pinctrl: amd: fix npins for uart0 in kerncz_groups (git-fixes).
- pinctrl: amd: remove debounce filter setting in IRQ type setting (git-fixes).
- pinctrl: baytrail: Avoid clearing debounce value when turning it off (git-fixes).
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (git-fixes).
- pinctrl: merrifield: Set default bias in case no particular value given (git-fixes).
- pinctrl: sh-pfc: sh7734: Fix duplicate TCLK1_B (git-fixes).
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (git-fixes).
- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (git-fixes).
- platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (git-fixes).
- platform/x86: mlx-platform: remove an unused variable (git-fixes).
- platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (git-fixes).
- platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (git-fixes).
- PM / hibernate: memory_bm_find_bit(): Tighten node optimisation (git-fixes).
- PM: ACPI: Output correct message on target power state (git-fixes).
- PM: hibernate: Freeze kernel threads in software_resume() (git-fixes).
- PM: hibernate: remove the bogus call to get_gendisk() in software_resume() (git-fixes).
- pNFS/flexfiles: Fix list corruption if the mirror count changes (git-fixes).
- power: supply: bq24190_charger: fix reference leak (git-fixes).
- power: supply: bq27xxx_battery: Silence deferred-probe error (git-fixes).
- powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (bsc#1065729).
- powerpc/64s/pseries: Fix hash tlbiel_all_isa300 for guest kernels (bsc#1179888 ltc#190253).
- powerpc/64s: Fix hash ISA v3.0 TLBIEL instruction generation (bsc#1055117 ltc#159753 git-fixes bsc#1179888 ltc#190253).
- powerpc/pci: Fix broken INTx configuration via OF (bsc#1172145 ltc#184630).
- powerpc/pci: Remove legacy debug code (bsc#1172145 ltc#184630 git-fixes).
- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145 ltc#184630).
- powerpc/pci: Use of_irq_parse_and_map_pci() helper (bsc#1172145 ltc#184630).
- powerpc/perf: Fix crash with is_sier_available when pmu is not set (bsc#1179578 ltc#189313).
- powerpc/pseries/hibernation: remove redundant cacheinfo update (bsc#1138374 ltc#178199 git-fixes).
- powerpc/pseries: Pass MSI affinity to irq_create_mapping() (bsc#1065729).
- powerpc/smp: Add __init to init_big_cores() (bsc#1109695 ltc#171067 git-fixes).
- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- powerpc: Convert to using %pOF instead of full_name (bsc#1172145 ltc#184630).
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (bsc#1065729).
- ppp: remove the PPPIOCDETACH ioctl (git-fixes).
- pwm: lp3943: Dynamically allocate PWM chip base (git-fixes).
- qed: fix error return code in qed_iwarp_ll2_start() (bsc#1050536 bsc#1050545).
- qed: suppress 'do not support RoCE &amp; iWARP' flooding on HW init (bsc#1050536 bsc#1050545).
- qed: suppress false-positives interrupt error messages on HW init (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- quota: clear padding in v2r1_mem2diskdqb() (bsc#1179714).
- radeon: insert 10ms sleep in dce5_crtc_load_lut (git-fixes).
- ravb: Fix use-after-free ravb_tstamp_skb (git-fixes).
- RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532 (bsc#1050545).
- RDMA/qedr: Fix memory leak in iWARP CM (bsc#1050545 ).
- regmap: debugfs: check count when read regmap file (git-fixes).
- regmap: dev_get_regmap_match(): fix string comparison (git-fixes).
- regmap: Remove duplicate `type` field from regmap `regcache_sync` trace event (git-fixes).
- regulator: max8907: Fix the usage of uninitialized variable in max8907_regulator_probe() (git-fixes).
- regulator: pfuze100-regulator: Variable 'val' in pfuze100_regulator_probe() could be uninitialized (git-fixes).
- regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone (git-fixes).
- reiserfs: Fix oops during mount (bsc#1179715).
- reiserfs: Initialize inode keys properly (bsc#1179713).
- remoteproc: Fix wrong rvring index computation (git-fixes).
- rfkill: Fix incorrect check to avoid NULL pointer dereference (git-fixes).
- rtc: 88pm860x: fix possible race condition (git-fixes).
- rtc: hym8563: enable wakeup when applicable (git-fixes).
- rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot (git-fixes).
- rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt() (git-fixes).
- s390/bpf: Fix multiple tail calls (git-fixes).
- s390/cpuinfo: show processor physical address (git-fixes).
- s390/cpum_sf.c: fix file permission for cpum_sfb_size (git-fixes).
- s390/dasd: fix hanging device offline processing (bsc#1144912).
- s390/dasd: fix null pointer dereference for ERP requests (git-fixes).
- s390/pci: fix CPU address in MSI for directed IRQ (git-fixes).
- s390/qeth: fix af_iucv notification race (git-fixes).
- s390/qeth: fix tear down of async TX buffers (git-fixes).
- s390/qeth: make af_iucv TX notification call more robust (git-fixes).
- s390/stp: add locking to sysfs functions (git-fixes).
- s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (git-fixes).
- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- scsi: lpfc: Add FDMI Vendor MIB support (bsc#1164780).
- scsi: lpfc: Convert abort handling to SLI-3 and SLI-4 handlers (bsc#1164780).
- scsi: lpfc: Convert SCSI I/O completions to SLI-3 and SLI-4 handlers (bsc#1164780).
- scsi: lpfc: Convert SCSI path to use common I/O submission path (bsc#1164780).
- scsi: lpfc: Correct null ndlp reference on routine exit (bsc#1164780).
- scsi: lpfc: Drop nodelist reference on error in lpfc_gen_req() (bsc#1164780).
- scsi: lpfc: Enable common send_io interface for SCSI and NVMe (bsc#1164780).
- scsi: lpfc: Enable common wqe_template support for both SCSI and NVMe (bsc#1164780).
- scsi: lpfc: Enlarge max_sectors in scsi host templates (bsc#1164780).
- scsi: lpfc: Extend the RDF FPIN Registration descriptor for additional events (bsc#1164780).
- scsi: lpfc: Fix duplicate wq_create_version check (bsc#1164780).
- scsi: lpfc: Fix fall-through warnings for Clang (bsc#1164780).
- scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery (bsc#1164780).
- scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc() (bsc#1164780).
- scsi: lpfc: Fix memory leak on lcb_context (bsc#1164780).
- scsi: lpfc: Fix missing prototype for lpfc_nvmet_prep_abort_wqe() (bsc#1164780).
- scsi: lpfc: Fix missing prototype warning for lpfc_fdmi_vendor_attr_mi() (bsc#1164780).
- scsi: lpfc: Fix NPIV discovery and Fabric Node detection (bsc#1164780).
- scsi: lpfc: Fix NPIV Fabric Node reference counting (bsc#1164780).
- scsi: lpfc: Fix pointer defereference before it is null checked issue (bsc#1164780).
- scsi: lpfc: Fix refcounting around SCSI and NVMe transport APIs (bsc#1164780).
- scsi: lpfc: Fix removal of SCSI transport device get and put on dev structure (bsc#1164780).
- scsi: lpfc: Fix scheduling call while in softirq context in lpfc_unreg_rpi (bsc#1164780).
- scsi: lpfc: Fix set but not used warnings from Rework remote port lock handling (bsc#1164780).
- scsi: lpfc: Fix set but unused variables in lpfc_dev_loss_tmo_handler() (bsc#1164780).
- scsi: lpfc: Fix spelling mistake 'Cant' -&gt; 'Can't' (bsc#1164780).
- scsi: lpfc: Fix variable 'vport' set but not used in lpfc_sli4_abts_err_handler() (bsc#1164780).
- scsi: lpfc: lpfc_attr: Demote kernel-doc format for redefined functions (bsc#1164780).
- scsi: lpfc: lpfc_attr: Fix-up a bunch of kernel-doc misdemeanours (bsc#1164780).
- scsi: lpfc: lpfc_debugfs: Fix a couple of function documentation issues (bsc#1164780).
- scsi: lpfc: lpfc_scsi: Fix a whole host of kernel-doc issues (bsc#1164780).
- scsi: lpfc: Refactor WQE structure definitions for common use (bsc#1164780).
- scsi: lpfc: Reject CT request for MIB commands (bsc#1164780).
- scsi: lpfc: Remove dead code on second !ndlp check (bsc#1164780).
- scsi: lpfc: Remove ndlp when a PLOGI/ADISC/PRLI/REG_RPI ultimately fails (bsc#1164780).
- scsi: lpfc: Remove set but not used 'qp' (bsc#1164780).
- scsi: lpfc: Remove unneeded variable 'status' in lpfc_fcp_cpu_map_store() (bsc#1164780).
- scsi: lpfc: Removed unused macros in lpfc_attr.c (bsc#1164780).
- scsi: lpfc: Rework locations of ndlp reference taking (bsc#1164780).
- scsi: lpfc: Rework remote port lock handling (bsc#1164780).
- scsi: lpfc: Rework remote port ref counting and node freeing (bsc#1164780).
- scsi: lpfc: Unsolicited ELS leaves node in incorrect state while dropping it (bsc#1164780).
- scsi: lpfc: Update changed file copyrights for 2020 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.4 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.5 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.6 (bsc#1164780).
- scsi: lpfc: Use generic power management (bsc#1164780).
- scsi: qla2xxx: Change post del message from debug level to log level (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Do not check for fw_started while posting NVMe command (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Do not consume srb greedily (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix compilation issue in PPC systems (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix crash during driver load on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix device loss on 4G and older HBAs (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix flash update in 28XX adapters on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix FW initialization error on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix N2N and NVMe connect retry failure (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix return of uninitialized value in rval (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix the call trace for flush workqueue (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Handle aborts correctly for port undergoing deletion (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Initialize variable in qla8044_poll_reg() (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Limit interrupt vectors to number of CPUs (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Move sess cmd list/lock to driver (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove in_interrupt() from qla82xx-specific code (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove in_interrupt() from qla83xx-specific code (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: remove incorrect sparse #ifdef (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove trailing semicolon in macro definition (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Return EBUSY on fcport deletion (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Tear down session if FW say it is down (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Update version to 10.02.00.104-k (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Use constant when it is known (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: Remove unneeded break statements (bsc#1164780).
- scsi: storvsc: Fix error return in storvsc_probe() (git-fixes).
- scsi: target: tcm_qla2xxx: Remove BUG_ON(in_interrupt()) (bsc#1172538 bsc#1179142 bsc#1179810).
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (git-fixes).
- serial: 8250_pci: Add Realtek 816a and 816b (git-fixes).
- serial: amba-pl011: Make sure we initialize the port.lock spinlock (git-fixes).
- serial: ar933x_uart: set UART_CS_{RX,TX}_READY_ORIDE (git-fixes).
- serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init (git-fixes).
- serial_core: Check for port state when tty is in error state (git-fixes).
- SMB3: Honor 'handletimeout' flag for multiuser mounts (bsc#1176558).
- SMB3: Honor 'posix' flag for multiuser mounts (bsc#1176559).
- SMB3: Honor lease disabling for multiuser mounts (git-fixes).
- soc/tegra: fuse: Fix index bug in get_process_id (git-fixes).
- soc: imx: gpc: fix power up sequencing (git-fixes).
- soc: mediatek: Check if power domains can be powered on at boot time (git-fixes).
- soc: qcom: smp2p: Safely acquire spinlock without IRQs (git-fixes).
- soc: ti: Fix reference imbalance in knav_dma_probe (git-fixes).
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (git-fixes).
- spi: Add call to spi_slave_abort() function when spidev driver is released (git-fixes).
- spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (git-fixes).
- spi: davinci: Fix use-after-free on unbind (git-fixes).
- spi: dw: Enable interrupts in accordance with DMA xfer mode (git-fixes).
- spi: dw: Fix Rx-only DMA transfers (git-fixes).
- spi: dw: Return any value retrieved from the dma_transfer callback (git-fixes).
- spi: Fix memory leak on splited transfers (git-fixes).
- spi: img-spfi: fix potential double release (git-fixes).
- spi: img-spfi: fix reference leak in img_spfi_resume (git-fixes).
- spi: pic32: Do not leak DMA channels in probe error path (git-fixes).
- spi: pxa2xx: Add missed security checks (git-fixes).
- spi: spi-cavium-thunderx: Add missing pci_release_regions() (git-fixes).
- spi: spi-loopback-test: Fix out-of-bounds read (git-fixes).
- spi: spi-mem: Fix passing zero to 'PTR_ERR' warning (git-fixes).
- spi: spi-mem: fix reference leak in spi_mem_access_start (git-fixes).
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (git-fixes).
- spi: spidev: fix a potential use-after-free in spidev_release() (git-fixes).
- spi: st-ssc4: add missed pm_runtime_disable (git-fixes).
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (git-fixes).
- spi: tegra114: fix reference leak in tegra spi ops (git-fixes).
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (git-fixes).
- spi: tegra20-slink: add missed clk_unprepare (git-fixes).
- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (git-fixes).
- splice: only read in as much information as there is pipe buffer space (bsc#1179520).
- staging: comedi: check validity of wMaxPacketSize of usb endpoints found (git-fixes).
- staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value (git-fixes).
- staging: comedi: mf6x4: Fix AI end-of-conversion detection (git-fixes).
- staging: olpc_dcon: add a missing dependency (git-fixes).
- staging: olpc_dcon: Do not call platform_device_unregister() in dcon_probe() (git-fixes).
- staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21 (git-fixes).
- staging: rtl8188eu: Add device id for MERCUSYS MW150US v2 (git-fixes).
- staging: rtl8188eu: fix possible null dereference (git-fixes).
- staging: rtl8192u: fix multiple memory leaks on error path (git-fixes).
- staging: vt6656: set usb_set_intfdata on driver fail (git-fixes).
- staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() (git-fixes).
- staging: wlan-ng: properly check endpoint types (git-fixes).
- sunrpc: fix copying of multiple pages in gss_read_proxy_verf() (bsc#1103992).
- sunrpc: fixed rollback in rpc_gssd_dummy_populate() (git-fixes).
- sunrpc: Properly set the @subbuf parameter of xdr_buf_subsegment() (git-fixes).
- sunrpc: The RDMA back channel mustn't disappear while requests are outstanding (git-fixes).
- svcrdma: fix bounce buffers for unaligned offsets and multiple pages (bsc#1103992).
- svcrdma: Fix page leak in svc_rdma_recv_read_chunk() (bsc#1103992).
- tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (bsc#1109837).
- thunderbolt: Use 32-bit writes when writing ring producer/consumer (git-fixes).
- timer: Fix wheel index calculation on last level (git fixes)
- timer: Prevent base-&gt;clk from moving backward (git-fixes)
- tty: always relink the port (git-fixes).
- tty: Fix -&gt;pgrp locking in tiocspgrp() (git-fixes).
- tty: link tty and port before configuring it as console (git-fixes).
- tty: synclink_gt: Adjust indentation in several functions (git-fixes).
- tty: synclinkmp: Adjust indentation in several functions (git-fixes).
- tty:serial:mvebu-uart:fix a wrong return (git-fixes).
- uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define (git-fixes).
- uapi/if_ether.h: prevent redefinition of struct ethhdr (git-fixes).
- usb: add RESET_RESUME quirk for Snapscan 1212 (git-fixes).
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (git-fixes).
- usb: dummy-hcd: Fix uninitialized array use in init() (git-fixes).
- usb: dwc2: Fix IN FIFO allocation (git-fixes).
- usb: dwc3: remove the call trace of USBx_GFLADJ (git-fixes).
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (git-fixes).
- usb: Fix: Do not skip endpoint descriptors with maxpacket=0 (git-fixes).
- usb: fsl: Check memory resource before releasing it (git-fixes).
- usb: gadget: composite: Fix possible double free memory bug (git-fixes).
- usb: gadget: configfs: fix concurrent issue between composite APIs (git-fixes).
- usb: gadget: configfs: Fix missing spin_lock_init() (git-fixes).
- usb: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- usb: gadget: f_fs: Use local copy of descriptors for userspace copy (git-fixes).
- usb: gadget: f_midi: setup SuperSpeed Plus descriptors (git-fixes).
- usb: gadget: f_rndis: fix bitrate for SuperSpeed and above (git-fixes).
- usb: gadget: ffs: ffs_aio_cancel(): Save/restore IRQ flags (git-fixes).
- usb: gadget: fix wrong endpoint desc (git-fixes).
- usb: gadget: goku_udc: fix potential crashes in probe (git-fixes).
- usb: gadget: net2280: fix memory leak on probe error handling paths (git-fixes).
- usb: gadget: serial: fix Tx stall after buffer overflow (git-fixes).
- usb: gadget: udc: fix possible sleep-in-atomic-context bugs in gr_probe() (git-fixes).
- usb: gadget: udc: gr_udc: fix memleak on error handling path in gr_ep_init() (git-fixes).
- usb: hso: Fix debug compile warning on sparc32 (git-fixes).
- usb: ldusb: use unsigned size format specifiers (git-fixes).
- usb: musb: omap2430: Get rid of musb .set_vbus for omap2430 glue (git-fixes).
- usb: oxu210hp-hcd: Fix memory leak in oxu_create (git-fixes).
- usb: serial: ch341: add new Product ID for CH341A (git-fixes).
- usb: serial: ch341: sort device-id entries (git-fixes).
- usb: serial: digi_acceleport: clean up modem-control handling (git-fixes).
- usb: serial: digi_acceleport: clean up set_termios (git-fixes).
- usb: serial: digi_acceleport: fix write-wakeup deadlocks (git-fixes).
- usb: serial: digi_acceleport: remove in_interrupt() usage.
- usb: serial: digi_acceleport: remove redundant assignment to pointer priv (git-fixes).
- usb: serial: digi_acceleport: rename tty flag variable (git-fixes).
- usb: serial: digi_acceleport: use irqsave() in USB's complete callback (git-fixes).
- usb: serial: keyspan_pda: fix dropped unthrottle interrupts (git-fixes).
- usb: serial: keyspan_pda: fix stalled writes (git-fixes).
- usb: serial: keyspan_pda: fix tx-unthrottle use-after-free (git-fixes).
- usb: serial: keyspan_pda: fix write deadlock (git-fixes).
- usb: serial: keyspan_pda: fix write unthrottling (git-fixes).
- usb: serial: keyspan_pda: fix write-wakeup use-after-free (git-fixes).
- usb: serial: kl5kusb105: fix memleak on open (git-fixes).
- usb: serial: mos7720: fix parallel-port state restore (git-fixes).
- usb: serial: option: add Fibocom NL668 variants (git-fixes).
- usb: serial: option: add interface-number sanity check to flag handling (git-fixes).
- usb: serial: option: add support for Thales Cinterion EXS82 (git-fixes).
- usb: serial: option: fix Quectel BG96 matching (git-fixes).
- usb: Skip endpoints with 0 maxpacket length (git-fixes).
- usb: UAS: introduce a quirk to set no_write_same (git-fixes).
- usb: usbfs: Suppress problematic bind and unbind uevents (git-fixes).
- usblp: poison URBs upon disconnect (git-fixes).
- usbnet: ipheth: fix connectivity with iOS 14 (git-fixes).
- video: fbdev: neofb: fix memory leak in neo_scan_monitor() (git-fixes).
- vt: do not hardcode the mem allocation upper bound (git-fixes).
- vt: Reject zero-sized screen buffer size (git-fixes).
- watchdog: coh901327: add COMMON_CLK dependency (git-fixes).
- watchdog: da9062: do not ping the hw during stop() (git-fixes).
- watchdog: da9062: No need to ping manually before setting timeout (git-fixes).
- watchdog: qcom: Avoid context switch in restart handler (git-fixes).
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (git-fixes).
- wimax: fix duplicate initializer warning (git-fixes).
- wireless: Use linux/stddef.h instead of stddef.h (git-fixes).
- wireless: Use offsetof instead of custom macro (git-fixes).
- x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz (bsc#1112178).
- x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes (bsc#1112178).
- x86/mm/ident_map: Check for errors from ident_pud_init() (bsc#1112178).
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (bsc#1112178).
- x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak (bsc#1112178).
- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (bsc#1112178).
- x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak (bsc#1112178).
- x86/resctrl: Remove unused struct mbm_state::chunks_bw (bsc#1112178).
- x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb (bsc#1112178).
- x86/tracing: Introduce a static key for exception tracing (bsc#1179895).
- x86/traps: Simplify pagefault tracing logic (bsc#1179895).
- x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (bsc#1112178).
- xhci: Give USB2 ports time to enter U3 in bus suspend (git-fixes).
- xprtrdma: fix incorrect header size calculations (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-14"/>
	<updated date="2021-01-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1040855">SUSE bug 1040855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044120">SUSE bug 1044120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044767">SUSE bug 1044767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056653">SUSE bug 1056653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056657">SUSE bug 1056657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094840">SUSE bug 1094840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104389">SUSE bug 1104389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104393">SUSE bug 1104393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109695">SUSE bug 1109695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110096">SUSE bug 1110096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115431">SUSE bug 1115431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118657">SUSE bug 1118657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138374">SUSE bug 1138374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139944">SUSE bug 1139944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144912">SUSE bug 1144912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152457">SUSE bug 1152457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163727">SUSE bug 1163727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171078">SUSE bug 1171078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172145">SUSE bug 1172145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172694">SUSE bug 1172694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174784">SUSE bug 1174784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174852">SUSE bug 1174852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176558">SUSE bug 1176558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176559">SUSE bug 1176559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176956">SUSE bug 1176956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178270">SUSE bug 1178270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178372">SUSE bug 1178372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178401">SUSE bug 1178401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178590">SUSE bug 1178590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178634">SUSE bug 1178634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178762">SUSE bug 1178762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179014">SUSE bug 1179014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179015">SUSE bug 1179015</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179045">SUSE bug 1179045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179082">SUSE bug 1179082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179107">SUSE bug 1179107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179142">SUSE bug 1179142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179204">SUSE bug 1179204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179419">SUSE bug 1179419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179444">SUSE bug 1179444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179520">SUSE bug 1179520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179578">SUSE bug 1179578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179601">SUSE bug 1179601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179663">SUSE bug 1179663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179666">SUSE bug 1179666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179670">SUSE bug 1179670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179671">SUSE bug 1179671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179672">SUSE bug 1179672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179673">SUSE bug 1179673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179711">SUSE bug 1179711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179713">SUSE bug 1179713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179714">SUSE bug 1179714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179715">SUSE bug 1179715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179716">SUSE bug 1179716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179722">SUSE bug 1179722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179723">SUSE bug 1179723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179724">SUSE bug 1179724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179745">SUSE bug 1179745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179810">SUSE bug 1179810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179888">SUSE bug 1179888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179895">SUSE bug 1179895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179896">SUSE bug 1179896</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179960">SUSE bug 1179960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179963">SUSE bug 1179963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180027">SUSE bug 1180027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180029">SUSE bug 1180029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180031">SUSE bug 1180031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180052">SUSE bug 1180052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180086">SUSE bug 1180086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180117">SUSE bug 1180117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180258">SUSE bug 1180258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180506">SUSE bug 1180506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180559">SUSE bug 1180559</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20669/">CVE-2018-20669</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-20934/">CVE-2019-20934</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0444/">CVE-2020-0444</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27068/">CVE-2020-27068</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27777/">CVE-2020-27777</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27825/">CVE-2020-27825</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-4788/">CVE-2020-4788</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496445" comment="kernel-docs-4.12.14-197.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496446" comment="kernel-obs-build-4.12.14-197.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496447" comment="kernel-source-4.12.14-197.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496448" comment="kernel-syms-4.12.14-197.78.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138268" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Development Tools 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1179103" ref_url="https://bugzilla.suse.com/1179103" source="BUGZILLA"/>
		<reference ref_id="1179202" ref_url="https://bugzilla.suse.com/1179202" source="BUGZILLA"/>
		<reference ref_id="1179208" ref_url="https://bugzilla.suse.com/1179208" source="BUGZILLA"/>
		<reference ref_id="1179212" ref_url="https://bugzilla.suse.com/1179212" source="BUGZILLA"/>
		<reference ref_id="1179221" ref_url="https://bugzilla.suse.com/1179221" source="BUGZILLA"/>
		<reference ref_id="1179223" ref_url="https://bugzilla.suse.com/1179223" source="BUGZILLA"/>
		<reference ref_id="1179240" ref_url="https://bugzilla.suse.com/1179240" source="BUGZILLA"/>
		<reference ref_id="1179244" ref_url="https://bugzilla.suse.com/1179244" source="BUGZILLA"/>
		<reference ref_id="1179260" ref_url="https://bugzilla.suse.com/1179260" source="BUGZILLA"/>
		<reference ref_id="1179268" ref_url="https://bugzilla.suse.com/1179268" source="BUGZILLA"/>
		<reference ref_id="1179269" ref_url="https://bugzilla.suse.com/1179269" source="BUGZILLA"/>
		<reference ref_id="1179276" ref_url="https://bugzilla.suse.com/1179276" source="BUGZILLA"/>
		<reference ref_id="1179278" ref_url="https://bugzilla.suse.com/1179278" source="BUGZILLA"/>
		<reference ref_id="1179281" ref_url="https://bugzilla.suse.com/1179281" source="BUGZILLA"/>
		<reference ref_id="1179285" ref_url="https://bugzilla.suse.com/1179285" source="BUGZILLA"/>
		<reference ref_id="1179311" ref_url="https://bugzilla.suse.com/1179311" source="BUGZILLA"/>
		<reference ref_id="1179312" ref_url="https://bugzilla.suse.com/1179312" source="BUGZILLA"/>
		<reference ref_id="1179313" ref_url="https://bugzilla.suse.com/1179313" source="BUGZILLA"/>
		<reference ref_id="1179315" ref_url="https://bugzilla.suse.com/1179315" source="BUGZILLA"/>
		<reference ref_id="1179317" ref_url="https://bugzilla.suse.com/1179317" source="BUGZILLA"/>
		<reference ref_id="1179321" ref_url="https://bugzilla.suse.com/1179321" source="BUGZILLA"/>
		<reference ref_id="1179322" ref_url="https://bugzilla.suse.com/1179322" source="BUGZILLA"/>
		<reference ref_id="1179327" ref_url="https://bugzilla.suse.com/1179327" source="BUGZILLA"/>
		<reference ref_id="1179333" ref_url="https://bugzilla.suse.com/1179333" source="BUGZILLA"/>
		<reference ref_id="1179336" ref_url="https://bugzilla.suse.com/1179336" source="BUGZILLA"/>
		<reference ref_id="1179338" ref_url="https://bugzilla.suse.com/1179338" source="BUGZILLA"/>
		<reference ref_id="1179339" ref_url="https://bugzilla.suse.com/1179339" source="BUGZILLA"/>
		<reference ref_id="1179343" ref_url="https://bugzilla.suse.com/1179343" source="BUGZILLA"/>
		<reference ref_id="1179345" ref_url="https://bugzilla.suse.com/1179345" source="BUGZILLA"/>
		<reference ref_id="1179346" ref_url="https://bugzilla.suse.com/1179346" source="BUGZILLA"/>
		<reference ref_id="1179347" ref_url="https://bugzilla.suse.com/1179347" source="BUGZILLA"/>
		<reference ref_id="1179361" ref_url="https://bugzilla.suse.com/1179361" source="BUGZILLA"/>
		<reference ref_id="1179362" ref_url="https://bugzilla.suse.com/1179362" source="BUGZILLA"/>
		<reference ref_id="1179397" ref_url="https://bugzilla.suse.com/1179397" source="BUGZILLA"/>
		<reference ref_id="1179753" ref_url="https://bugzilla.suse.com/1179753" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-19667" ref_url="https://www.suse.com/security/cve/CVE-2020-19667/" source="CVE"/>
		<reference ref_id="CVE-2020-25664" ref_url="https://www.suse.com/security/cve/CVE-2020-25664/" source="CVE"/>
		<reference ref_id="CVE-2020-25665" ref_url="https://www.suse.com/security/cve/CVE-2020-25665/" source="CVE"/>
		<reference ref_id="CVE-2020-25666" ref_url="https://www.suse.com/security/cve/CVE-2020-25666/" source="CVE"/>
		<reference ref_id="CVE-2020-25674" ref_url="https://www.suse.com/security/cve/CVE-2020-25674/" source="CVE"/>
		<reference ref_id="CVE-2020-25675" ref_url="https://www.suse.com/security/cve/CVE-2020-25675/" source="CVE"/>
		<reference ref_id="CVE-2020-25676" ref_url="https://www.suse.com/security/cve/CVE-2020-25676/" source="CVE"/>
		<reference ref_id="CVE-2020-27750" ref_url="https://www.suse.com/security/cve/CVE-2020-27750/" source="CVE"/>
		<reference ref_id="CVE-2020-27751" ref_url="https://www.suse.com/security/cve/CVE-2020-27751/" source="CVE"/>
		<reference ref_id="CVE-2020-27752" ref_url="https://www.suse.com/security/cve/CVE-2020-27752/" source="CVE"/>
		<reference ref_id="CVE-2020-27753" ref_url="https://www.suse.com/security/cve/CVE-2020-27753/" source="CVE"/>
		<reference ref_id="CVE-2020-27754" ref_url="https://www.suse.com/security/cve/CVE-2020-27754/" source="CVE"/>
		<reference ref_id="CVE-2020-27755" ref_url="https://www.suse.com/security/cve/CVE-2020-27755/" source="CVE"/>
		<reference ref_id="CVE-2020-27756" ref_url="https://www.suse.com/security/cve/CVE-2020-27756/" source="CVE"/>
		<reference ref_id="CVE-2020-27757" ref_url="https://www.suse.com/security/cve/CVE-2020-27757/" source="CVE"/>
		<reference ref_id="CVE-2020-27758" ref_url="https://www.suse.com/security/cve/CVE-2020-27758/" source="CVE"/>
		<reference ref_id="CVE-2020-27759" ref_url="https://www.suse.com/security/cve/CVE-2020-27759/" source="CVE"/>
		<reference ref_id="CVE-2020-27760" ref_url="https://www.suse.com/security/cve/CVE-2020-27760/" source="CVE"/>
		<reference ref_id="CVE-2020-27761" ref_url="https://www.suse.com/security/cve/CVE-2020-27761/" source="CVE"/>
		<reference ref_id="CVE-2020-27762" ref_url="https://www.suse.com/security/cve/CVE-2020-27762/" source="CVE"/>
		<reference ref_id="CVE-2020-27763" ref_url="https://www.suse.com/security/cve/CVE-2020-27763/" source="CVE"/>
		<reference ref_id="CVE-2020-27764" ref_url="https://www.suse.com/security/cve/CVE-2020-27764/" source="CVE"/>
		<reference ref_id="CVE-2020-27765" ref_url="https://www.suse.com/security/cve/CVE-2020-27765/" source="CVE"/>
		<reference ref_id="CVE-2020-27766" ref_url="https://www.suse.com/security/cve/CVE-2020-27766/" source="CVE"/>
		<reference ref_id="CVE-2020-27767" ref_url="https://www.suse.com/security/cve/CVE-2020-27767/" source="CVE"/>
		<reference ref_id="CVE-2020-27768" ref_url="https://www.suse.com/security/cve/CVE-2020-27768/" source="CVE"/>
		<reference ref_id="CVE-2020-27769" ref_url="https://www.suse.com/security/cve/CVE-2020-27769/" source="CVE"/>
		<reference ref_id="CVE-2020-27770" ref_url="https://www.suse.com/security/cve/CVE-2020-27770/" source="CVE"/>
		<reference ref_id="CVE-2020-27771" ref_url="https://www.suse.com/security/cve/CVE-2020-27771/" source="CVE"/>
		<reference ref_id="CVE-2020-27772" ref_url="https://www.suse.com/security/cve/CVE-2020-27772/" source="CVE"/>
		<reference ref_id="CVE-2020-27773" ref_url="https://www.suse.com/security/cve/CVE-2020-27773/" source="CVE"/>
		<reference ref_id="CVE-2020-27774" ref_url="https://www.suse.com/security/cve/CVE-2020-27774/" source="CVE"/>
		<reference ref_id="CVE-2020-27775" ref_url="https://www.suse.com/security/cve/CVE-2020-27775/" source="CVE"/>
		<reference ref_id="CVE-2020-27776" ref_url="https://www.suse.com/security/cve/CVE-2020-27776/" source="CVE"/>
		<reference ref_id="CVE-2020-29599" ref_url="https://www.suse.com/security/cve/CVE-2020-29599/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).
- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).
- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).
- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).
- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).
- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).
- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).
- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).
- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).
- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).
- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).
- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).
- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).
- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).
- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).
- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).
- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).
- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).
- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).
- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).
- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).
- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).
- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).
- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).
- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).
- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).
- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).
- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).
- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).
- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).
- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).
- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).
- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).
- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).
- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-18"/>
	<updated date="2021-01-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179103">SUSE bug 1179103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179202">SUSE bug 1179202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179208">SUSE bug 1179208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179212">SUSE bug 1179212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179221">SUSE bug 1179221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179223">SUSE bug 1179223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179240">SUSE bug 1179240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179244">SUSE bug 1179244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179260">SUSE bug 1179260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179268">SUSE bug 1179268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179269">SUSE bug 1179269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179276">SUSE bug 1179276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179278">SUSE bug 1179278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179281">SUSE bug 1179281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179285">SUSE bug 1179285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179311">SUSE bug 1179311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179312">SUSE bug 1179312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179313">SUSE bug 1179313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179315">SUSE bug 1179315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179317">SUSE bug 1179317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179321">SUSE bug 1179321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179322">SUSE bug 1179322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179327">SUSE bug 1179327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179333">SUSE bug 1179333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179336">SUSE bug 1179336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179338">SUSE bug 1179338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179339">SUSE bug 1179339</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179343">SUSE bug 1179343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179345">SUSE bug 1179345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179346">SUSE bug 1179346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179347">SUSE bug 1179347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179361">SUSE bug 1179361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179362">SUSE bug 1179362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179397">SUSE bug 1179397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179753">SUSE bug 1179753</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-19667/">CVE-2020-19667</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-25664/">CVE-2020-25664</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25665/">CVE-2020-25665</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25666/">CVE-2020-25666</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25674/">CVE-2020-25674</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25675/">CVE-2020-25675</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25676/">CVE-2020-25676</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27750/">CVE-2020-27750</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27751/">CVE-2020-27751</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27752/">CVE-2020-27752</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27753/">CVE-2020-27753</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27754/">CVE-2020-27754</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27755/">CVE-2020-27755</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27756/">CVE-2020-27756</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27757/">CVE-2020-27757</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27758/">CVE-2020-27758</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27759/">CVE-2020-27759</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27760/">CVE-2020-27760</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27761/">CVE-2020-27761</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27762/">CVE-2020-27762</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27763/">CVE-2020-27763</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27764/">CVE-2020-27764</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27765/">CVE-2020-27765</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27766/">CVE-2020-27766</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27767/">CVE-2020-27767</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27768/">CVE-2020-27768</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27769/">CVE-2020-27769</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27770/">CVE-2020-27770</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27771/">CVE-2020-27771</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27772/">CVE-2020-27772</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27773/">CVE-2020-27773</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27774/">CVE-2020-27774</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27775/">CVE-2020-27775</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27776/">CVE-2020-27776</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29599/">CVE-2020-29599</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-development-tools:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255446" comment="SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496449" comment="perl-PerlMagick-7.0.7.34-3.90.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138269" version="1" class="patch">
	<metadata>
		<title>Security update for slurm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
		</affected>
		<reference ref_id="1140709" ref_url="https://bugzilla.suse.com/1140709" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12838" ref_url="https://www.suse.com/security/cve/CVE-2019-12838/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2229-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005846.html" source="SUSE-SU"/>
		<description>
This update for slurm to version 18.08.8 fixes the following issues:

Security issue fixed:

- CVE-2019-12838: Fixed a SQL injection in slurmdbd (bsc#1140709).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-28"/>
	<updated date="2019-08-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140709">SUSE bug 1140709</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12838/">CVE-2019-12838</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496760" comment="libpmi0-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496761" comment="libslurm33-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496070" comment="perl-Switch-2.17-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496762" comment="perl-slurm-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496763" comment="slurm-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496764" comment="slurm-auth-none-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496765" comment="slurm-config-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496766" comment="slurm-config-man-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496767" comment="slurm-devel-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496768" comment="slurm-doc-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496769" comment="slurm-lua-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496770" comment="slurm-munge-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496771" comment="slurm-node-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496772" comment="slurm-pam_slurm-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496773" comment="slurm-plugins-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496774" comment="slurm-slurmdbd-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496775" comment="slurm-sql-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496776" comment="slurm-sview-18.08.8-3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496777" comment="slurm-torque-18.08.8-3.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138270" version="1" class="patch">
	<metadata>
		<title>Security update for python-numpy (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
		</affected>
		<reference ref_id="1149203" ref_url="https://bugzilla.suse.com/1149203" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6446" ref_url="https://www.suse.com/security/cve/CVE-2019-6446/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2462-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006031.html" source="SUSE-SU"/>
		<description>
This update for python-numpy fixes the following issues:

Non-security issues fixed:

- Updated to upstream version 1.16.1. (bsc#1149203) (jsc#SLE-8532)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-18"/>
	<updated date="2019-10-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1149203">SUSE bug 1149203</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6446/">CVE-2019-6446</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496674" comment="python2-numpy-gnu-hpc-1.16.1-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496675" comment="python2-numpy-gnu-hpc-devel-1.16.1-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496676" comment="python3-numpy-gnu-hpc-1.16.1-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496677" comment="python3-numpy-gnu-hpc-devel-1.16.1-4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138271" version="1" class="patch">
	<metadata>
		<title>Security update for slurm (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
		</affected>
		<reference ref_id="1140709" ref_url="https://bugzilla.suse.com/1140709" source="BUGZILLA"/>
		<reference ref_id="1153095" ref_url="https://bugzilla.suse.com/1153095" source="BUGZILLA"/>
		<reference ref_id="1153245" ref_url="https://bugzilla.suse.com/1153245" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12838" ref_url="https://www.suse.com/security/cve/CVE-2019-12838/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2989-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006149.html" source="SUSE-SU"/>
		<description>
This update for slurm fixes the following issues:

Security issue fixed:

- CVE-2019-12838: Fixed an SQL injection (bsc#1140709).

Non-security issue fixed:

- Added X11-forwarding (bsc#1153245).
- Moved srun from 'slurm' to 'slurm-node': srun is required on the nodes as well so sbatch will work. 'slurm-node' is a requirement when 'slurm' is installed (bsc#1153095). 
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-15"/>
	<updated date="2019-11-15"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1140709">SUSE bug 1140709</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153095">SUSE bug 1153095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153245">SUSE bug 1153245</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12838/">CVE-2019-12838</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496679" comment="libslurm32-17.11.13-6.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138272" version="1" class="patch">
	<metadata>
		<title>Security update for munge (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
		</affected>
		<reference ref_id="1155075" ref_url="https://bugzilla.suse.com/1155075" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3691" ref_url="https://www.suse.com/security/cve/CVE-2019-3691/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006216.html" source="SUSE-SU"/>
		<description>
This update for munge fixes the following issues:

Security issue fixed:	  

- CVE-2019-3691: Fixed a Local privilege escalation vulnerability
  which allowed escalation from munge to root (bsc#1155075).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-05"/>
	<updated date="2019-12-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1155075">SUSE bug 1155075</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3691/">CVE-2019-3691</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496694" comment="libmunge2-0.5.13-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496695" comment="munge-0.5.13-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496696" comment="munge-devel-0.5.13-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138273" version="1" class="patch">
	<metadata>
		<title>Security update for slurm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
		</affected>
		<reference ref_id="1140709" ref_url="https://bugzilla.suse.com/1140709" source="BUGZILLA"/>
		<reference ref_id="1153095" ref_url="https://bugzilla.suse.com/1153095" source="BUGZILLA"/>
		<reference ref_id="1153259" ref_url="https://bugzilla.suse.com/1153259" source="BUGZILLA"/>
		<reference ref_id="1155784" ref_url="https://bugzilla.suse.com/1155784" source="BUGZILLA"/>
		<reference ref_id="1158696" ref_url="https://bugzilla.suse.com/1158696" source="BUGZILLA"/>
		<reference ref_id="1159692" ref_url="https://bugzilla.suse.com/1159692" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12838" ref_url="https://www.suse.com/security/cve/CVE-2019-12838/" source="CVE"/>
		<reference ref_id="CVE-2019-19727" ref_url="https://www.suse.com/security/cve/CVE-2019-19727/" source="CVE"/>
		<reference ref_id="CVE-2019-19728" ref_url="https://www.suse.com/security/cve/CVE-2019-19728/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0110-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006357.html" source="SUSE-SU"/>
		<description>
This update for slurm to version 18.08.9 fixes the following issues:

Security issues fixed:

- CVE-2019-19728: Fixed a privilege escalation with srun, where --uid might have unintended side effects (bsc#1159692).
- CVE-2019-12838: Fixed SchedMD Slurm SQL Injection issue (bnc#1140709).
- CVE-2019-19727: Fixed permissions of slurmdbd.conf (bsc#1155784).
 
Bug fixes:

- Fix ownership of /var/spool/slurm on new installations and upgrade (bsc#1158696).
- Fix %posttrans macro _res_update to cope with added newline (bsc#1153259).
- Move srun from 'slurm' to 'slurm-node': srun is required on the nodes as well so sbatch will work. 'slurm-node' is a requirement when 'slurm' is installed (bsc#1153095).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-16"/>
	<updated date="2020-01-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140709">SUSE bug 1140709</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153095">SUSE bug 1153095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153259">SUSE bug 1153259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155784">SUSE bug 1155784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158696">SUSE bug 1158696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159692">SUSE bug 1159692</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12838/">CVE-2019-12838</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19727/">CVE-2019-19727</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19728/">CVE-2019-19728</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496778" comment="libpmi0-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496779" comment="libslurm33-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496780" comment="perl-slurm-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496781" comment="slurm-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496782" comment="slurm-auth-none-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496783" comment="slurm-config-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496784" comment="slurm-config-man-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496785" comment="slurm-devel-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496786" comment="slurm-doc-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496787" comment="slurm-lua-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496788" comment="slurm-munge-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496789" comment="slurm-node-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496790" comment="slurm-pam_slurm-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496791" comment="slurm-plugins-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496792" comment="slurm-slurmdbd-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496793" comment="slurm-sql-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496794" comment="slurm-sview-18.08.9-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496795" comment="slurm-torque-18.08.9-3.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138274" version="1" class="patch">
	<metadata>
		<title>Security update for slurm_20_02 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
		</affected>
		<reference ref_id="1172004" ref_url="https://bugzilla.suse.com/1172004" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12693" ref_url="https://www.suse.com/security/cve/CVE-2020-12693/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006893.html" source="SUSE-SU"/>
		<description>
This update for slurm_20_02 to version 20.02.3 fixes the following issues:

Security issue fixed:

- CVE-2020-12693: Fixed an authentication bypass via an alternate path or channel (bsc#1172004).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-08"/>
	<updated date="2020-06-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172004">SUSE bug 1172004</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-12693/">CVE-2020-12693</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496796" comment="libnss_slurm2-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496797" comment="libpmi0_20_02-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496798" comment="libslurm35-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496799" comment="perl-slurm_20_02-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496800" comment="slurm_20_02-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496801" comment="slurm_20_02-auth-none-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496802" comment="slurm_20_02-config-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496803" comment="slurm_20_02-config-man-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496804" comment="slurm_20_02-devel-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496805" comment="slurm_20_02-doc-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496806" comment="slurm_20_02-lua-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496807" comment="slurm_20_02-munge-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496808" comment="slurm_20_02-node-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496809" comment="slurm_20_02-pam_slurm-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496810" comment="slurm_20_02-plugins-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496811" comment="slurm_20_02-slurmdbd-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496812" comment="slurm_20_02-sql-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496813" comment="slurm_20_02-sview-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496814" comment="slurm_20_02-torque-20.02.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496815" comment="slurm_20_02-webdoc-20.02.3-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138275" version="1" class="patch">
	<metadata>
		<title>Security update for slurm (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
		</affected>
		<reference ref_id="1153259" ref_url="https://bugzilla.suse.com/1153259" source="BUGZILLA"/>
		<reference ref_id="1155784" ref_url="https://bugzilla.suse.com/1155784" source="BUGZILLA"/>
		<reference ref_id="1158696" ref_url="https://bugzilla.suse.com/1158696" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19727" ref_url="https://www.suse.com/security/cve/CVE-2019-19727/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0228-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200228-1.html" source="SUSE-SU"/>
		<description>
This update for slurm fixes the following issues:

- CVE-2019-19727: Fix permissions of configuration file 'slurmdbd.conf' (bsc#1155784).
- Fix ownership of /var/spool/slurm on new installations and upgrade (bsc#1158696).
- Fix '%posttrans' macro to cope with added newline (bsc#1153259).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-24"/>
	<updated date="2020-01-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1153259">SUSE bug 1153259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155784">SUSE bug 1155784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158696">SUSE bug 1158696</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19727/">CVE-2019-19727</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496722" comment="libslurm32-17.11.13-6.23.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138276" version="1" class="patch">
	<metadata>
		<title>Security update for slurm (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
		</affected>
		<reference ref_id="1172004" ref_url="https://bugzilla.suse.com/1172004" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12693" ref_url="https://www.suse.com/security/cve/CVE-2020-12693/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2598-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007404.html" source="SUSE-SU"/>
		<description>
This update for slurm fixes the following issues:

- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-10"/>
	<updated date="2020-09-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172004">SUSE bug 1172004</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-12693/">CVE-2020-12693</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496816" comment="libpmi0-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496817" comment="libslurm33-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496818" comment="perl-slurm-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496819" comment="slurm-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496820" comment="slurm-auth-none-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496821" comment="slurm-config-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496822" comment="slurm-config-man-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496823" comment="slurm-devel-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496824" comment="slurm-doc-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496825" comment="slurm-lua-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496826" comment="slurm-munge-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496827" comment="slurm-node-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496828" comment="slurm-pam_slurm-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496829" comment="slurm-plugins-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496830" comment="slurm-slurmdbd-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496831" comment="slurm-sql-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496832" comment="slurm-sview-18.08.9-3.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496833" comment="slurm-torque-18.08.9-3.13.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138277" version="1" class="patch">
	<metadata>
		<title>Security update for slurm (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
		</affected>
		<reference ref_id="1172004" ref_url="https://bugzilla.suse.com/1172004" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19727" ref_url="https://www.suse.com/security/cve/CVE-2019-19727/" source="CVE"/>
		<reference ref_id="CVE-2020-12693" ref_url="https://www.suse.com/security/cve/CVE-2020-12693/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007403.html" source="SUSE-SU"/>
		<description>
This update for slurm fixes the following issues:

- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004). 
- Remove unneeded build dependency to postgresql-devel.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-10"/>
	<updated date="2020-09-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172004">SUSE bug 1172004</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19727/">CVE-2019-19727</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-12693/">CVE-2020-12693</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496834" comment="libslurm32-17.11.13-6.31.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138278" version="1" class="patch">
	<metadata>
		<title>Security update for slurm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
		</affected>
		<reference ref_id="1178890" ref_url="https://bugzilla.suse.com/1178890" source="BUGZILLA"/>
		<reference ref_id="1178891" ref_url="https://bugzilla.suse.com/1178891" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27745" ref_url="https://www.suse.com/security/cve/CVE-2020-27745/" source="CVE"/>
		<reference ref_id="CVE-2020-27746" ref_url="https://www.suse.com/security/cve/CVE-2020-27746/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007847.html" source="SUSE-SU"/>
		<description>
This update for slurm fixes the following issues:

- CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem() (bsc#1178890).
- CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when 
  sent as an argument to the xauth command (bsc#1178891).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-24"/>
	<updated date="2020-11-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178890">SUSE bug 1178890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178891">SUSE bug 1178891</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27745/">CVE-2020-27745</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27746/">CVE-2020-27746</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496835" comment="libpmi0-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496836" comment="libslurm33-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496837" comment="perl-slurm-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496838" comment="slurm-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496839" comment="slurm-auth-none-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496840" comment="slurm-config-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496841" comment="slurm-config-man-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496842" comment="slurm-devel-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496843" comment="slurm-doc-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496844" comment="slurm-lua-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496845" comment="slurm-munge-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496846" comment="slurm-node-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496847" comment="slurm-pam_slurm-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496848" comment="slurm-plugins-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496849" comment="slurm-slurmdbd-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496850" comment="slurm-sql-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496851" comment="slurm-sview-18.08.9-3.16.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496852" comment="slurm-torque-18.08.9-3.16.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138279" version="1" class="patch">
	<metadata>
		<title>Security update for slurm_17_11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
		</affected>
		<reference ref_id="1153259" ref_url="https://bugzilla.suse.com/1153259" source="BUGZILLA"/>
		<reference ref_id="1155784" ref_url="https://bugzilla.suse.com/1155784" source="BUGZILLA"/>
		<reference ref_id="1178890" ref_url="https://bugzilla.suse.com/1178890" source="BUGZILLA"/>
		<reference ref_id="1178891" ref_url="https://bugzilla.suse.com/1178891" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27745" ref_url="https://www.suse.com/security/cve/CVE-2020-27745/" source="CVE"/>
		<reference ref_id="CVE-2020-27746" ref_url="https://www.suse.com/security/cve/CVE-2020-27746/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3878-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008090.html" source="SUSE-SU"/>
		<description>
This update for slurm_17_11 fixes the following issues:

- CVE-2020-27745: Fixed potential buffer overflows from use of unpackmem() (bsc#1178890).
- CVE-2020-27746: Fixed a potential leak of the magic cookie when sent as an argument to the xauth command (bsc#1178891).
- Fixed %posttrans macro _res_update to cope with added newline (bsc#1153259).
- Fixed permissions of slurmdbd.conf (bsc#1155784).		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-18"/>
	<updated date="2020-12-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153259">SUSE bug 1153259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155784">SUSE bug 1155784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178890">SUSE bug 1178890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178891">SUSE bug 1178891</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27745/">CVE-2020-27745</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27746/">CVE-2020-27746</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496853" comment="libslurm32-17.11.13-6.34.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138280" version="1" class="patch">
	<metadata>
		<title>Security update for pdsh, slurm_18_08 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
		</affected>
		<reference ref_id="1018371" ref_url="https://bugzilla.suse.com/1018371" source="BUGZILLA"/>
		<reference ref_id="1065697" ref_url="https://bugzilla.suse.com/1065697" source="BUGZILLA"/>
		<reference ref_id="1085240" ref_url="https://bugzilla.suse.com/1085240" source="BUGZILLA"/>
		<reference ref_id="1095508" ref_url="https://bugzilla.suse.com/1095508" source="BUGZILLA"/>
		<reference ref_id="1123304" ref_url="https://bugzilla.suse.com/1123304" source="BUGZILLA"/>
		<reference ref_id="1140709" ref_url="https://bugzilla.suse.com/1140709" source="BUGZILLA"/>
		<reference ref_id="1155784" ref_url="https://bugzilla.suse.com/1155784" source="BUGZILLA"/>
		<reference ref_id="1158709" ref_url="https://bugzilla.suse.com/1158709" source="BUGZILLA"/>
		<reference ref_id="1158798" ref_url="https://bugzilla.suse.com/1158798" source="BUGZILLA"/>
		<reference ref_id="1159692" ref_url="https://bugzilla.suse.com/1159692" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-10030" ref_url="https://www.suse.com/security/cve/CVE-2016-10030/" source="CVE"/>
		<reference ref_id="CVE-2017-15566" ref_url="https://www.suse.com/security/cve/CVE-2017-15566/" source="CVE"/>
		<reference ref_id="CVE-2018-10995" ref_url="https://www.suse.com/security/cve/CVE-2018-10995/" source="CVE"/>
		<reference ref_id="CVE-2018-7033" ref_url="https://www.suse.com/security/cve/CVE-2018-7033/" source="CVE"/>
		<reference ref_id="CVE-2019-12838" ref_url="https://www.suse.com/security/cve/CVE-2019-12838/" source="CVE"/>
		<reference ref_id="CVE-2019-19727" ref_url="https://www.suse.com/security/cve/CVE-2019-19727/" source="CVE"/>
		<reference ref_id="CVE-2019-19728" ref_url="https://www.suse.com/security/cve/CVE-2019-19728/" source="CVE"/>
		<reference ref_id="CVE-2019-6438" ref_url="https://www.suse.com/security/cve/CVE-2019-6438/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006517.html" source="SUSE-SU"/>
		<description>
This update for pdsh, slurm_18_08 fixes the following issues:

Slurm was included in the 18.08 release, as 'slurm_18_08' package. The version 18.08.9 contains all recent security fixes, including:

- CVE-2019-19728: Fixed a privilege escalation with srun, where --uid might have unintended side effects (bsc#1159692).
- CVE-2019-19727: Fixed permissions of slurmdbd.conf (bsc#1155784).

pdsh was updated to:

- Add support for an alternative SLURM version when building the
  slurm plugin.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-24"/>
	<updated date="2020-02-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1018371">SUSE bug 1018371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065697">SUSE bug 1065697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085240">SUSE bug 1085240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095508">SUSE bug 1095508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123304">SUSE bug 1123304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140709">SUSE bug 1140709</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155784">SUSE bug 1155784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158709">SUSE bug 1158709</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158798">SUSE bug 1158798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159692">SUSE bug 1159692</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-10030/">CVE-2016-10030</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15566/">CVE-2017-15566</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-10995/">CVE-2018-10995</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-7033/">CVE-2018-7033</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12838/">CVE-2019-12838</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19727/">CVE-2019-19727</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19728/">CVE-2019-19728</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6438/">CVE-2019-6438</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496739" comment="pdsh-2.33-7.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496740" comment="pdsh-dshgroup-2.33-7.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496741" comment="pdsh-genders-2.33-7.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496742" comment="pdsh-machines-2.33-7.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496743" comment="pdsh-netgroup-2.33-7.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496744" comment="pdsh-slurm-2.33-7.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496745" comment="pdsh-slurm_18_08-2.33-7.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138281" version="1" class="patch">
	<metadata>
		<title>Security update for slurm_20_02 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for HPC 15 SP1</platform>
		</affected>
		<reference ref_id="1178890" ref_url="https://bugzilla.suse.com/1178890" source="BUGZILLA"/>
		<reference ref_id="1178891" ref_url="https://bugzilla.suse.com/1178891" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27745" ref_url="https://www.suse.com/security/cve/CVE-2020-27745/" source="CVE"/>
		<reference ref_id="CVE-2020-27746" ref_url="https://www.suse.com/security/cve/CVE-2020-27746/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008213.html" source="SUSE-SU"/>
		<description>
This update for slurm_20_02 fixes the following issues:

Updated to 20.02.6, addresses two security fixes:

  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
     argument to the xauth command. CVE-2020-27746 (bsc#1178891)

And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html

Updated to 20.02.5, changes:

 * Fix leak of TRESRunMins when job time is changed with --time-min
 * pam_slurm - explicitly initialize slurm config to support configless mode.
 * scontrol - Fix exit code when creating/updating reservations with wrong
   Flags.
 * When a GRES has a no_consume flag, report 0 for allocated.
 * Fix cgroup cleanup by jobacct_gather/cgroup.
 * When creating reservations/jobs don't allow counts on a feature unless
   using an XOR.
 * Improve number of boards discovery
 * Fix updating a reservation NodeCnt on a zero-count reservation.
 * slurmrestd - provide an explicit error messages when PSK auth fails.
 * cons_tres - fix job requesting single gres per-node getting two or more
   nodes with less CPUs than requested per-task.
 * cons_tres - fix calculation of cores when using gres and cpus-per-task.
 * cons_tres - fix job not getting access to socket without GPU or with less
   than --gpus-per-socket when not enough cpus available on required socket
   and not using --gres-flags=enforce binding.
 * Fix HDF5 type version build error.
 * Fix creation of CoreCnt only reservations when the first node isn't
   available.
 * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
 * Improve job constraints XOR option logic.
 * Fix preemption of hetjobs when needed nodes not in leader component.
 * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
   bad node deallocations and even allocation of nodes from other partitions.
 * Fix double-deallocation of preempted non-leader hetjob components.
 * slurmdbd - prevent truncation of the step nodelists over 4095.
 * Fix nodes remaining in drain state state after rebooting with ASAP option.

changes from 20.02.4:

 * srun - suppress job step creation warning message when waiting on
   PrologSlurmctld.
 * slurmrestd - fix incorrect return values in data_list_for_each() functions.
 * mpi/pmix - fix issue where HetJobs could fail to launch.
 * slurmrestd - set content-type header in responses.
 * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
 * Fix cons_res incorrectly filtering cores with respect to GRES locality for
   --gres-flags=disable-binding requests.
 * Fix regression where a dependency on multiple jobs in a single array using
   underscores would only add the first job.
 * slurmrestd - fix corrupted output due to incorrect use of memcpy().
 * slurmrestd - address a number of minor Coverity warnings.
 * Handle retry failure when slurmstepd is communicating with srun correctly.
 * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
 * Fix tasks binding to GRES which are closest to the allocated CPUs.
 * Fix AMD GPU ROCM 3.5 support.
 * Fix handling of job arrays in sacct when querying specific steps.
 * slurmrestd - avoid fallback to local socket authentication if JWT
   authentication is ill-formed.
 * slurmrestd - restrict ability of requests to use different authentication
   plugins.
 * slurmrestd - unlink named unix sockets before closing.
 * slurmrestd - fix invalid formatting in openapi.json.
 * Fix batch jobs stuck in CF state on FrontEnd mode.
 * Add a separate explicit error message when rejecting changes to active node
   features.
 * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
 * Fix updating reservations to set the duration correctly if updating the
   start time.
 * Fix update reservation to promiscuous mode.
 * Fix override of job tasks count to max when ntasks-per-node present.
 * Fix min CPUs per node not being at least CPUs per task requested.
 * Fix CPUs allocated to match CPUs requested when requesting GRES and
   threads per core equal to one.
 * Fix NodeName config parsing with Boards and without CPUs.
 * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
 * Fix error messages for certain invalid salloc/sbatch/srun options.
 * pmi2 - clean up sockets at step termination.
 * Fix 'scontrol hold' to work with 'JobName'.
 * sbatch - handle --uid/--gid in #SBATCH directives properly.
 * Fix race condition in job termination on slurmd.
 * Print specific error messages if trying to run use certain
   priority/multifactor factors that cannot work without SlurmDBD.
 * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
 * Cray - Avoid referencing a variable outside of it's correct scope when
   dealing with creating steps within a het job.
 * slurmrestd - correctly handle larger addresses from accept().
 * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
   with another option after that.
 * Restore MCS label when suspended job is resumed.
 * Fix insufficient lock levels.
 * slurmrestd - use errno from job submission.
 * Fix 'user' filter for sacctmgr show transactions.
 * Fix preemption logic.
 * Fix no_consume GRES for exclusive (whole node) requests.
 * Fix regression in 20.02 that caused an infinite loop in slurmctld when
   requesting --distribution=plane for the job.
 * Fix parsing of the --distribution option.
 * Add CONF READ_LOCK to _handle_fed_send_job_sync.
 * prep/script - always call slurmctld PrEp callback in _run_script().
 * Fix node estimation for jobs that use GPUs or --cpus-per-task.
 * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
   slurmctld and/or job submission CLI tools segfaults due to bad return
   handling when the respective Lua script failed to load.
 * Fix propagation of gpu options through hetjob components.
 * Add SLURM_CLUSTERS environment variable to scancel.
 * Fix packing/unpacking of 'unlinked' jobs.
 * Connect slurmstepd's stderr to srun for steps launched with --pty.
 * Handle MPS correctly when doing exclusive allocations.
 * slurmrestd - fix compiling against libhttpparser in a non-default path.
 * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
 * Fix compile issues when compiling slurmrestd without --enable-debug.
 * Reset idle time on a reservation that is getting purged.
 * Fix reoccurring reservations that have Purge_comp= to keep correct
   duration if they are purged.
 * scontrol - changed the 'PROMISCUOUS' flag to 'MAGNETIC'
 * Early return from epilog_set_env in case of no_consume.
 * Fix cons_common/job_test start time discovery logic to prevent skewed
   results between 'will run test' executions.
 * Ensure TRESRunMins limits are maintained during 'scontrol reconfigure'.
 * Improve error message when host lookup fails.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-15"/>
	<updated date="2021-01-15"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1178890">SUSE bug 1178890</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178891">SUSE bug 1178891</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27745/">CVE-2020-27745</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27746/">CVE-2020-27746</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255498" comment="SUSE Linux Enterprise Module for HPC 15 SP1 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496854" comment="libnss_slurm2_20_02-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496855" comment="libpmi0_20_02-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496856" comment="libslurm35-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496857" comment="perl-slurm_20_02-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496858" comment="slurm_20_02-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496859" comment="slurm_20_02-auth-none-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496860" comment="slurm_20_02-config-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496861" comment="slurm_20_02-config-man-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496862" comment="slurm_20_02-devel-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496863" comment="slurm_20_02-doc-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496864" comment="slurm_20_02-lua-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496865" comment="slurm_20_02-munge-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496866" comment="slurm_20_02-node-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496867" comment="slurm_20_02-pam_slurm-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496868" comment="slurm_20_02-plugins-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496869" comment="slurm_20_02-slurmdbd-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496870" comment="slurm_20_02-sql-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496871" comment="slurm_20_02-sview-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496872" comment="slurm_20_02-torque-20.02.6-3.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496873" comment="slurm_20_02-webdoc-20.02.6-3.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138282" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1132728" ref_url="https://bugzilla.suse.com/1132728" source="BUGZILLA"/>
		<reference ref_id="1132729" ref_url="https://bugzilla.suse.com/1132729" source="BUGZILLA"/>
		<reference ref_id="1132732" ref_url="https://bugzilla.suse.com/1132732" source="BUGZILLA"/>
		<reference ref_id="1133135" ref_url="https://bugzilla.suse.com/1133135" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-3639" ref_url="https://www.suse.com/security/cve/CVE-2018-3639/" source="CVE"/>
		<reference ref_id="CVE-2019-2602" ref_url="https://www.suse.com/security/cve/CVE-2019-2602/" source="CVE"/>
		<reference ref_id="CVE-2019-2684" ref_url="https://www.suse.com/security/cve/CVE-2019-2684/" source="CVE"/>
		<reference ref_id="CVE-2019-2698" ref_url="https://www.suse.com/security/cve/CVE-2019-2698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1211-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005637.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk to version 8u212 fixes the following issues:

Security issues fixed:

- CVE-2019-2602: Better String parsing (bsc#1132728).
- CVE-2019-2684: More dynamic RMI interactions (bsc#1132732).
- CVE-2019-2698: Fuzzing TrueType fonts - setCurrGlyphID() (bsc#1132729).
- CVE-2018-3639: fix revision to prefer PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE

Non-Security issue fixed:

- Disable LTO (bsc#1133135).
- Added Japanese new era name.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-01"/>
	<updated date="2019-07-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1132728">SUSE bug 1132728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132729">SUSE bug 1132729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132732">SUSE bug 1132732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133135">SUSE bug 1133135</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-3639/">CVE-2018-3639</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2602/">CVE-2019-2602</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-2684/">CVE-2019-2684</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-2698/">CVE-2019-2698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496974" comment="java-1_8_0-openjdk-1.8.0.212-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496975" comment="java-1_8_0-openjdk-demo-1.8.0.212-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496976" comment="java-1_8_0-openjdk-devel-1.8.0.212-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496977" comment="java-1_8_0-openjdk-headless-1.8.0.212-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138283" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1132728" ref_url="https://bugzilla.suse.com/1132728" source="BUGZILLA"/>
		<reference ref_id="1132729" ref_url="https://bugzilla.suse.com/1132729" source="BUGZILLA"/>
		<reference ref_id="1132732" ref_url="https://bugzilla.suse.com/1132732" source="BUGZILLA"/>
		<reference ref_id="1132734" ref_url="https://bugzilla.suse.com/1132734" source="BUGZILLA"/>
		<reference ref_id="1134718" ref_url="https://bugzilla.suse.com/1134718" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10245" ref_url="https://www.suse.com/security/cve/CVE-2019-10245/" source="CVE"/>
		<reference ref_id="CVE-2019-2602" ref_url="https://www.suse.com/security/cve/CVE-2019-2602/" source="CVE"/>
		<reference ref_id="CVE-2019-2684" ref_url="https://www.suse.com/security/cve/CVE-2019-2684/" source="CVE"/>
		<reference ref_id="CVE-2019-2697" ref_url="https://www.suse.com/security/cve/CVE-2019-2697/" source="CVE"/>
		<reference ref_id="CVE-2019-2698" ref_url="https://www.suse.com/security/cve/CVE-2019-2698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1308-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005634.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

Update to Java 8.0 Service Refresh 5 Fix Pack 35.

Security issues fixed:

- CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).
- CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).
- CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).
- CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).
- CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-27"/>
	<updated date="2019-06-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1132728">SUSE bug 1132728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132729">SUSE bug 1132729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132732">SUSE bug 1132732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132734">SUSE bug 1132734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134718">SUSE bug 1134718</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-10245/">CVE-2019-10245</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2602/">CVE-2019-2602</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-2684/">CVE-2019-2684</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-2697/">CVE-2019-2697</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-2698/">CVE-2019-2698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496979" comment="java-1_8_0-ibm-1.8.0_sr5.35-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496980" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.35-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496981" comment="java-1_8_0-ibm-devel-1.8.0_sr5.35-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496982" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.35-3.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138284" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1012382" ref_url="https://bugzilla.suse.com/1012382" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1052904" ref_url="https://bugzilla.suse.com/1052904" source="BUGZILLA"/>
		<reference ref_id="1053043" ref_url="https://bugzilla.suse.com/1053043" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1055121" ref_url="https://bugzilla.suse.com/1055121" source="BUGZILLA"/>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1063638" ref_url="https://bugzilla.suse.com/1063638" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1068546" ref_url="https://bugzilla.suse.com/1068546" source="BUGZILLA"/>
		<reference ref_id="1070872" ref_url="https://bugzilla.suse.com/1070872" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1075020" ref_url="https://bugzilla.suse.com/1075020" source="BUGZILLA"/>
		<reference ref_id="1082387" ref_url="https://bugzilla.suse.com/1082387" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085535" ref_url="https://bugzilla.suse.com/1085535" source="BUGZILLA"/>
		<reference ref_id="1085536" ref_url="https://bugzilla.suse.com/1085536" source="BUGZILLA"/>
		<reference ref_id="1086657" ref_url="https://bugzilla.suse.com/1086657" source="BUGZILLA"/>
		<reference ref_id="1088804" ref_url="https://bugzilla.suse.com/1088804" source="BUGZILLA"/>
		<reference ref_id="1093389" ref_url="https://bugzilla.suse.com/1093389" source="BUGZILLA"/>
		<reference ref_id="1097583" ref_url="https://bugzilla.suse.com/1097583" source="BUGZILLA"/>
		<reference ref_id="1097584" ref_url="https://bugzilla.suse.com/1097584" source="BUGZILLA"/>
		<reference ref_id="1097585" ref_url="https://bugzilla.suse.com/1097585" source="BUGZILLA"/>
		<reference ref_id="1097586" ref_url="https://bugzilla.suse.com/1097586" source="BUGZILLA"/>
		<reference ref_id="1097587" ref_url="https://bugzilla.suse.com/1097587" source="BUGZILLA"/>
		<reference ref_id="1097588" ref_url="https://bugzilla.suse.com/1097588" source="BUGZILLA"/>
		<reference ref_id="1099658" ref_url="https://bugzilla.suse.com/1099658" source="BUGZILLA"/>
		<reference ref_id="1103186" ref_url="https://bugzilla.suse.com/1103186" source="BUGZILLA"/>
		<reference ref_id="1103259" ref_url="https://bugzilla.suse.com/1103259" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1106011" ref_url="https://bugzilla.suse.com/1106011" source="BUGZILLA"/>
		<reference ref_id="1106284" ref_url="https://bugzilla.suse.com/1106284" source="BUGZILLA"/>
		<reference ref_id="1108193" ref_url="https://bugzilla.suse.com/1108193" source="BUGZILLA"/>
		<reference ref_id="1108838" ref_url="https://bugzilla.suse.com/1108838" source="BUGZILLA"/>
		<reference ref_id="1108937" ref_url="https://bugzilla.suse.com/1108937" source="BUGZILLA"/>
		<reference ref_id="1110946" ref_url="https://bugzilla.suse.com/1110946" source="BUGZILLA"/>
		<reference ref_id="1111331" ref_url="https://bugzilla.suse.com/1111331" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1111696" ref_url="https://bugzilla.suse.com/1111696" source="BUGZILLA"/>
		<reference ref_id="1112063" ref_url="https://bugzilla.suse.com/1112063" source="BUGZILLA"/>
		<reference ref_id="1112128" ref_url="https://bugzilla.suse.com/1112128" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114427" ref_url="https://bugzilla.suse.com/1114427" source="BUGZILLA"/>
		<reference ref_id="1114542" ref_url="https://bugzilla.suse.com/1114542" source="BUGZILLA"/>
		<reference ref_id="1114638" ref_url="https://bugzilla.suse.com/1114638" source="BUGZILLA"/>
		<reference ref_id="1115688" ref_url="https://bugzilla.suse.com/1115688" source="BUGZILLA"/>
		<reference ref_id="1117114" ref_url="https://bugzilla.suse.com/1117114" source="BUGZILLA"/>
		<reference ref_id="1117158" ref_url="https://bugzilla.suse.com/1117158" source="BUGZILLA"/>
		<reference ref_id="1117561" ref_url="https://bugzilla.suse.com/1117561" source="BUGZILLA"/>
		<reference ref_id="1118139" ref_url="https://bugzilla.suse.com/1118139" source="BUGZILLA"/>
		<reference ref_id="1119680" ref_url="https://bugzilla.suse.com/1119680" source="BUGZILLA"/>
		<reference ref_id="1119843" ref_url="https://bugzilla.suse.com/1119843" source="BUGZILLA"/>
		<reference ref_id="1120091" ref_url="https://bugzilla.suse.com/1120091" source="BUGZILLA"/>
		<reference ref_id="1120318" ref_url="https://bugzilla.suse.com/1120318" source="BUGZILLA"/>
		<reference ref_id="1120423" ref_url="https://bugzilla.suse.com/1120423" source="BUGZILLA"/>
		<reference ref_id="1120566" ref_url="https://bugzilla.suse.com/1120566" source="BUGZILLA"/>
		<reference ref_id="1120843" ref_url="https://bugzilla.suse.com/1120843" source="BUGZILLA"/>
		<reference ref_id="1120902" ref_url="https://bugzilla.suse.com/1120902" source="BUGZILLA"/>
		<reference ref_id="1122767" ref_url="https://bugzilla.suse.com/1122767" source="BUGZILLA"/>
		<reference ref_id="1122776" ref_url="https://bugzilla.suse.com/1122776" source="BUGZILLA"/>
		<reference ref_id="1123454" ref_url="https://bugzilla.suse.com/1123454" source="BUGZILLA"/>
		<reference ref_id="1123663" ref_url="https://bugzilla.suse.com/1123663" source="BUGZILLA"/>
		<reference ref_id="1124503" ref_url="https://bugzilla.suse.com/1124503" source="BUGZILLA"/>
		<reference ref_id="1124839" ref_url="https://bugzilla.suse.com/1124839" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1126356" ref_url="https://bugzilla.suse.com/1126356" source="BUGZILLA"/>
		<reference ref_id="1126704" ref_url="https://bugzilla.suse.com/1126704" source="BUGZILLA"/>
		<reference ref_id="1127175" ref_url="https://bugzilla.suse.com/1127175" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1127374" ref_url="https://bugzilla.suse.com/1127374" source="BUGZILLA"/>
		<reference ref_id="1127616" ref_url="https://bugzilla.suse.com/1127616" source="BUGZILLA"/>
		<reference ref_id="1128052" ref_url="https://bugzilla.suse.com/1128052" source="BUGZILLA"/>
		<reference ref_id="1128415" ref_url="https://bugzilla.suse.com/1128415" source="BUGZILLA"/>
		<reference ref_id="1128544" ref_url="https://bugzilla.suse.com/1128544" source="BUGZILLA"/>
		<reference ref_id="1128904" ref_url="https://bugzilla.suse.com/1128904" source="BUGZILLA"/>
		<reference ref_id="1128971" ref_url="https://bugzilla.suse.com/1128971" source="BUGZILLA"/>
		<reference ref_id="1128979" ref_url="https://bugzilla.suse.com/1128979" source="BUGZILLA"/>
		<reference ref_id="1129138" ref_url="https://bugzilla.suse.com/1129138" source="BUGZILLA"/>
		<reference ref_id="1129273" ref_url="https://bugzilla.suse.com/1129273" source="BUGZILLA"/>
		<reference ref_id="1129497" ref_url="https://bugzilla.suse.com/1129497" source="BUGZILLA"/>
		<reference ref_id="1129693" ref_url="https://bugzilla.suse.com/1129693" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1129845" ref_url="https://bugzilla.suse.com/1129845" source="BUGZILLA"/>
		<reference ref_id="1130195" ref_url="https://bugzilla.suse.com/1130195" source="BUGZILLA"/>
		<reference ref_id="1130425" ref_url="https://bugzilla.suse.com/1130425" source="BUGZILLA"/>
		<reference ref_id="1130527" ref_url="https://bugzilla.suse.com/1130527" source="BUGZILLA"/>
		<reference ref_id="1130567" ref_url="https://bugzilla.suse.com/1130567" source="BUGZILLA"/>
		<reference ref_id="1130579" ref_url="https://bugzilla.suse.com/1130579" source="BUGZILLA"/>
		<reference ref_id="1130699" ref_url="https://bugzilla.suse.com/1130699" source="BUGZILLA"/>
		<reference ref_id="1130937" ref_url="https://bugzilla.suse.com/1130937" source="BUGZILLA"/>
		<reference ref_id="1130972" ref_url="https://bugzilla.suse.com/1130972" source="BUGZILLA"/>
		<reference ref_id="1131326" ref_url="https://bugzilla.suse.com/1131326" source="BUGZILLA"/>
		<reference ref_id="1131427" ref_url="https://bugzilla.suse.com/1131427" source="BUGZILLA"/>
		<reference ref_id="1131438" ref_url="https://bugzilla.suse.com/1131438" source="BUGZILLA"/>
		<reference ref_id="1131451" ref_url="https://bugzilla.suse.com/1131451" source="BUGZILLA"/>
		<reference ref_id="1131467" ref_url="https://bugzilla.suse.com/1131467" source="BUGZILLA"/>
		<reference ref_id="1131488" ref_url="https://bugzilla.suse.com/1131488" source="BUGZILLA"/>
		<reference ref_id="1131530" ref_url="https://bugzilla.suse.com/1131530" source="BUGZILLA"/>
		<reference ref_id="1131565" ref_url="https://bugzilla.suse.com/1131565" source="BUGZILLA"/>
		<reference ref_id="1131574" ref_url="https://bugzilla.suse.com/1131574" source="BUGZILLA"/>
		<reference ref_id="1131587" ref_url="https://bugzilla.suse.com/1131587" source="BUGZILLA"/>
		<reference ref_id="1131659" ref_url="https://bugzilla.suse.com/1131659" source="BUGZILLA"/>
		<reference ref_id="1131673" ref_url="https://bugzilla.suse.com/1131673" source="BUGZILLA"/>
		<reference ref_id="1131847" ref_url="https://bugzilla.suse.com/1131847" source="BUGZILLA"/>
		<reference ref_id="1131848" ref_url="https://bugzilla.suse.com/1131848" source="BUGZILLA"/>
		<reference ref_id="1131851" ref_url="https://bugzilla.suse.com/1131851" source="BUGZILLA"/>
		<reference ref_id="1131900" ref_url="https://bugzilla.suse.com/1131900" source="BUGZILLA"/>
		<reference ref_id="1131934" ref_url="https://bugzilla.suse.com/1131934" source="BUGZILLA"/>
		<reference ref_id="1131935" ref_url="https://bugzilla.suse.com/1131935" source="BUGZILLA"/>
		<reference ref_id="1132044" ref_url="https://bugzilla.suse.com/1132044" source="BUGZILLA"/>
		<reference ref_id="1132219" ref_url="https://bugzilla.suse.com/1132219" source="BUGZILLA"/>
		<reference ref_id="1132226" ref_url="https://bugzilla.suse.com/1132226" source="BUGZILLA"/>
		<reference ref_id="1132227" ref_url="https://bugzilla.suse.com/1132227" source="BUGZILLA"/>
		<reference ref_id="1132365" ref_url="https://bugzilla.suse.com/1132365" source="BUGZILLA"/>
		<reference ref_id="1132368" ref_url="https://bugzilla.suse.com/1132368" source="BUGZILLA"/>
		<reference ref_id="1132369" ref_url="https://bugzilla.suse.com/1132369" source="BUGZILLA"/>
		<reference ref_id="1132370" ref_url="https://bugzilla.suse.com/1132370" source="BUGZILLA"/>
		<reference ref_id="1132372" ref_url="https://bugzilla.suse.com/1132372" source="BUGZILLA"/>
		<reference ref_id="1132373" ref_url="https://bugzilla.suse.com/1132373" source="BUGZILLA"/>
		<reference ref_id="1132384" ref_url="https://bugzilla.suse.com/1132384" source="BUGZILLA"/>
		<reference ref_id="1132397" ref_url="https://bugzilla.suse.com/1132397" source="BUGZILLA"/>
		<reference ref_id="1132402" ref_url="https://bugzilla.suse.com/1132402" source="BUGZILLA"/>
		<reference ref_id="1132403" ref_url="https://bugzilla.suse.com/1132403" source="BUGZILLA"/>
		<reference ref_id="1132404" ref_url="https://bugzilla.suse.com/1132404" source="BUGZILLA"/>
		<reference ref_id="1132405" ref_url="https://bugzilla.suse.com/1132405" source="BUGZILLA"/>
		<reference ref_id="1132407" ref_url="https://bugzilla.suse.com/1132407" source="BUGZILLA"/>
		<reference ref_id="1132411" ref_url="https://bugzilla.suse.com/1132411" source="BUGZILLA"/>
		<reference ref_id="1132412" ref_url="https://bugzilla.suse.com/1132412" source="BUGZILLA"/>
		<reference ref_id="1132413" ref_url="https://bugzilla.suse.com/1132413" source="BUGZILLA"/>
		<reference ref_id="1132414" ref_url="https://bugzilla.suse.com/1132414" source="BUGZILLA"/>
		<reference ref_id="1132426" ref_url="https://bugzilla.suse.com/1132426" source="BUGZILLA"/>
		<reference ref_id="1132527" ref_url="https://bugzilla.suse.com/1132527" source="BUGZILLA"/>
		<reference ref_id="1132531" ref_url="https://bugzilla.suse.com/1132531" source="BUGZILLA"/>
		<reference ref_id="1132555" ref_url="https://bugzilla.suse.com/1132555" source="BUGZILLA"/>
		<reference ref_id="1132558" ref_url="https://bugzilla.suse.com/1132558" source="BUGZILLA"/>
		<reference ref_id="1132561" ref_url="https://bugzilla.suse.com/1132561" source="BUGZILLA"/>
		<reference ref_id="1132562" ref_url="https://bugzilla.suse.com/1132562" source="BUGZILLA"/>
		<reference ref_id="1132563" ref_url="https://bugzilla.suse.com/1132563" source="BUGZILLA"/>
		<reference ref_id="1132564" ref_url="https://bugzilla.suse.com/1132564" source="BUGZILLA"/>
		<reference ref_id="1132570" ref_url="https://bugzilla.suse.com/1132570" source="BUGZILLA"/>
		<reference ref_id="1132571" ref_url="https://bugzilla.suse.com/1132571" source="BUGZILLA"/>
		<reference ref_id="1132572" ref_url="https://bugzilla.suse.com/1132572" source="BUGZILLA"/>
		<reference ref_id="1132589" ref_url="https://bugzilla.suse.com/1132589" source="BUGZILLA"/>
		<reference ref_id="1132618" ref_url="https://bugzilla.suse.com/1132618" source="BUGZILLA"/>
		<reference ref_id="1132673" ref_url="https://bugzilla.suse.com/1132673" source="BUGZILLA"/>
		<reference ref_id="1132681" ref_url="https://bugzilla.suse.com/1132681" source="BUGZILLA"/>
		<reference ref_id="1132726" ref_url="https://bugzilla.suse.com/1132726" source="BUGZILLA"/>
		<reference ref_id="1132828" ref_url="https://bugzilla.suse.com/1132828" source="BUGZILLA"/>
		<reference ref_id="1132894" ref_url="https://bugzilla.suse.com/1132894" source="BUGZILLA"/>
		<reference ref_id="1132943" ref_url="https://bugzilla.suse.com/1132943" source="BUGZILLA"/>
		<reference ref_id="1132982" ref_url="https://bugzilla.suse.com/1132982" source="BUGZILLA"/>
		<reference ref_id="1133005" ref_url="https://bugzilla.suse.com/1133005" source="BUGZILLA"/>
		<reference ref_id="1133016" ref_url="https://bugzilla.suse.com/1133016" source="BUGZILLA"/>
		<reference ref_id="1133094" ref_url="https://bugzilla.suse.com/1133094" source="BUGZILLA"/>
		<reference ref_id="1133095" ref_url="https://bugzilla.suse.com/1133095" source="BUGZILLA"/>
		<reference ref_id="1133115" ref_url="https://bugzilla.suse.com/1133115" source="BUGZILLA"/>
		<reference ref_id="1133149" ref_url="https://bugzilla.suse.com/1133149" source="BUGZILLA"/>
		<reference ref_id="1133176" ref_url="https://bugzilla.suse.com/1133176" source="BUGZILLA"/>
		<reference ref_id="1133188" ref_url="https://bugzilla.suse.com/1133188" source="BUGZILLA"/>
		<reference ref_id="1133190" ref_url="https://bugzilla.suse.com/1133190" source="BUGZILLA"/>
		<reference ref_id="1133320" ref_url="https://bugzilla.suse.com/1133320" source="BUGZILLA"/>
		<reference ref_id="1133486" ref_url="https://bugzilla.suse.com/1133486" source="BUGZILLA"/>
		<reference ref_id="1133529" ref_url="https://bugzilla.suse.com/1133529" source="BUGZILLA"/>
		<reference ref_id="1133547" ref_url="https://bugzilla.suse.com/1133547" source="BUGZILLA"/>
		<reference ref_id="1133584" ref_url="https://bugzilla.suse.com/1133584" source="BUGZILLA"/>
		<reference ref_id="1133593" ref_url="https://bugzilla.suse.com/1133593" source="BUGZILLA"/>
		<reference ref_id="1133612" ref_url="https://bugzilla.suse.com/1133612" source="BUGZILLA"/>
		<reference ref_id="1133616" ref_url="https://bugzilla.suse.com/1133616" source="BUGZILLA"/>
		<reference ref_id="1133667" ref_url="https://bugzilla.suse.com/1133667" source="BUGZILLA"/>
		<reference ref_id="1133668" ref_url="https://bugzilla.suse.com/1133668" source="BUGZILLA"/>
		<reference ref_id="1133672" ref_url="https://bugzilla.suse.com/1133672" source="BUGZILLA"/>
		<reference ref_id="1133674" ref_url="https://bugzilla.suse.com/1133674" source="BUGZILLA"/>
		<reference ref_id="1133675" ref_url="https://bugzilla.suse.com/1133675" source="BUGZILLA"/>
		<reference ref_id="1133698" ref_url="https://bugzilla.suse.com/1133698" source="BUGZILLA"/>
		<reference ref_id="1133702" ref_url="https://bugzilla.suse.com/1133702" source="BUGZILLA"/>
		<reference ref_id="1133731" ref_url="https://bugzilla.suse.com/1133731" source="BUGZILLA"/>
		<reference ref_id="1133769" ref_url="https://bugzilla.suse.com/1133769" source="BUGZILLA"/>
		<reference ref_id="1133772" ref_url="https://bugzilla.suse.com/1133772" source="BUGZILLA"/>
		<reference ref_id="1133774" ref_url="https://bugzilla.suse.com/1133774" source="BUGZILLA"/>
		<reference ref_id="1133778" ref_url="https://bugzilla.suse.com/1133778" source="BUGZILLA"/>
		<reference ref_id="1133779" ref_url="https://bugzilla.suse.com/1133779" source="BUGZILLA"/>
		<reference ref_id="1133780" ref_url="https://bugzilla.suse.com/1133780" source="BUGZILLA"/>
		<reference ref_id="1133825" ref_url="https://bugzilla.suse.com/1133825" source="BUGZILLA"/>
		<reference ref_id="1133850" ref_url="https://bugzilla.suse.com/1133850" source="BUGZILLA"/>
		<reference ref_id="1133851" ref_url="https://bugzilla.suse.com/1133851" source="BUGZILLA"/>
		<reference ref_id="1133852" ref_url="https://bugzilla.suse.com/1133852" source="BUGZILLA"/>
		<reference ref_id="1133897" ref_url="https://bugzilla.suse.com/1133897" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1134160" ref_url="https://bugzilla.suse.com/1134160" source="BUGZILLA"/>
		<reference ref_id="1134162" ref_url="https://bugzilla.suse.com/1134162" source="BUGZILLA"/>
		<reference ref_id="1134199" ref_url="https://bugzilla.suse.com/1134199" source="BUGZILLA"/>
		<reference ref_id="1134200" ref_url="https://bugzilla.suse.com/1134200" source="BUGZILLA"/>
		<reference ref_id="1134201" ref_url="https://bugzilla.suse.com/1134201" source="BUGZILLA"/>
		<reference ref_id="1134202" ref_url="https://bugzilla.suse.com/1134202" source="BUGZILLA"/>
		<reference ref_id="1134203" ref_url="https://bugzilla.suse.com/1134203" source="BUGZILLA"/>
		<reference ref_id="1134204" ref_url="https://bugzilla.suse.com/1134204" source="BUGZILLA"/>
		<reference ref_id="1134205" ref_url="https://bugzilla.suse.com/1134205" source="BUGZILLA"/>
		<reference ref_id="1134223" ref_url="https://bugzilla.suse.com/1134223" source="BUGZILLA"/>
		<reference ref_id="1134354" ref_url="https://bugzilla.suse.com/1134354" source="BUGZILLA"/>
		<reference ref_id="1134393" ref_url="https://bugzilla.suse.com/1134393" source="BUGZILLA"/>
		<reference ref_id="1134397" ref_url="https://bugzilla.suse.com/1134397" source="BUGZILLA"/>
		<reference ref_id="1134459" ref_url="https://bugzilla.suse.com/1134459" source="BUGZILLA"/>
		<reference ref_id="1134460" ref_url="https://bugzilla.suse.com/1134460" source="BUGZILLA"/>
		<reference ref_id="1134461" ref_url="https://bugzilla.suse.com/1134461" source="BUGZILLA"/>
		<reference ref_id="1134597" ref_url="https://bugzilla.suse.com/1134597" source="BUGZILLA"/>
		<reference ref_id="1134600" ref_url="https://bugzilla.suse.com/1134600" source="BUGZILLA"/>
		<reference ref_id="1134607" ref_url="https://bugzilla.suse.com/1134607" source="BUGZILLA"/>
		<reference ref_id="1134618" ref_url="https://bugzilla.suse.com/1134618" source="BUGZILLA"/>
		<reference ref_id="1134651" ref_url="https://bugzilla.suse.com/1134651" source="BUGZILLA"/>
		<reference ref_id="1134671" ref_url="https://bugzilla.suse.com/1134671" source="BUGZILLA"/>
		<reference ref_id="1134760" ref_url="https://bugzilla.suse.com/1134760" source="BUGZILLA"/>
		<reference ref_id="1134806" ref_url="https://bugzilla.suse.com/1134806" source="BUGZILLA"/>
		<reference ref_id="1134810" ref_url="https://bugzilla.suse.com/1134810" source="BUGZILLA"/>
		<reference ref_id="1134813" ref_url="https://bugzilla.suse.com/1134813" source="BUGZILLA"/>
		<reference ref_id="1134848" ref_url="https://bugzilla.suse.com/1134848" source="BUGZILLA"/>
		<reference ref_id="1134936" ref_url="https://bugzilla.suse.com/1134936" source="BUGZILLA"/>
		<reference ref_id="1134945" ref_url="https://bugzilla.suse.com/1134945" source="BUGZILLA"/>
		<reference ref_id="1134946" ref_url="https://bugzilla.suse.com/1134946" source="BUGZILLA"/>
		<reference ref_id="1134947" ref_url="https://bugzilla.suse.com/1134947" source="BUGZILLA"/>
		<reference ref_id="1134948" ref_url="https://bugzilla.suse.com/1134948" source="BUGZILLA"/>
		<reference ref_id="1134949" ref_url="https://bugzilla.suse.com/1134949" source="BUGZILLA"/>
		<reference ref_id="1134950" ref_url="https://bugzilla.suse.com/1134950" source="BUGZILLA"/>
		<reference ref_id="1134951" ref_url="https://bugzilla.suse.com/1134951" source="BUGZILLA"/>
		<reference ref_id="1134952" ref_url="https://bugzilla.suse.com/1134952" source="BUGZILLA"/>
		<reference ref_id="1134953" ref_url="https://bugzilla.suse.com/1134953" source="BUGZILLA"/>
		<reference ref_id="1134972" ref_url="https://bugzilla.suse.com/1134972" source="BUGZILLA"/>
		<reference ref_id="1134974" ref_url="https://bugzilla.suse.com/1134974" source="BUGZILLA"/>
		<reference ref_id="1134975" ref_url="https://bugzilla.suse.com/1134975" source="BUGZILLA"/>
		<reference ref_id="1134980" ref_url="https://bugzilla.suse.com/1134980" source="BUGZILLA"/>
		<reference ref_id="1134981" ref_url="https://bugzilla.suse.com/1134981" source="BUGZILLA"/>
		<reference ref_id="1134983" ref_url="https://bugzilla.suse.com/1134983" source="BUGZILLA"/>
		<reference ref_id="1134987" ref_url="https://bugzilla.suse.com/1134987" source="BUGZILLA"/>
		<reference ref_id="1134989" ref_url="https://bugzilla.suse.com/1134989" source="BUGZILLA"/>
		<reference ref_id="1134990" ref_url="https://bugzilla.suse.com/1134990" source="BUGZILLA"/>
		<reference ref_id="1134994" ref_url="https://bugzilla.suse.com/1134994" source="BUGZILLA"/>
		<reference ref_id="1134995" ref_url="https://bugzilla.suse.com/1134995" source="BUGZILLA"/>
		<reference ref_id="1134998" ref_url="https://bugzilla.suse.com/1134998" source="BUGZILLA"/>
		<reference ref_id="1134999" ref_url="https://bugzilla.suse.com/1134999" source="BUGZILLA"/>
		<reference ref_id="1135006" ref_url="https://bugzilla.suse.com/1135006" source="BUGZILLA"/>
		<reference ref_id="1135007" ref_url="https://bugzilla.suse.com/1135007" source="BUGZILLA"/>
		<reference ref_id="1135008" ref_url="https://bugzilla.suse.com/1135008" source="BUGZILLA"/>
		<reference ref_id="1135018" ref_url="https://bugzilla.suse.com/1135018" source="BUGZILLA"/>
		<reference ref_id="1135021" ref_url="https://bugzilla.suse.com/1135021" source="BUGZILLA"/>
		<reference ref_id="1135024" ref_url="https://bugzilla.suse.com/1135024" source="BUGZILLA"/>
		<reference ref_id="1135026" ref_url="https://bugzilla.suse.com/1135026" source="BUGZILLA"/>
		<reference ref_id="1135027" ref_url="https://bugzilla.suse.com/1135027" source="BUGZILLA"/>
		<reference ref_id="1135028" ref_url="https://bugzilla.suse.com/1135028" source="BUGZILLA"/>
		<reference ref_id="1135029" ref_url="https://bugzilla.suse.com/1135029" source="BUGZILLA"/>
		<reference ref_id="1135031" ref_url="https://bugzilla.suse.com/1135031" source="BUGZILLA"/>
		<reference ref_id="1135033" ref_url="https://bugzilla.suse.com/1135033" source="BUGZILLA"/>
		<reference ref_id="1135034" ref_url="https://bugzilla.suse.com/1135034" source="BUGZILLA"/>
		<reference ref_id="1135035" ref_url="https://bugzilla.suse.com/1135035" source="BUGZILLA"/>
		<reference ref_id="1135036" ref_url="https://bugzilla.suse.com/1135036" source="BUGZILLA"/>
		<reference ref_id="1135037" ref_url="https://bugzilla.suse.com/1135037" source="BUGZILLA"/>
		<reference ref_id="1135038" ref_url="https://bugzilla.suse.com/1135038" source="BUGZILLA"/>
		<reference ref_id="1135039" ref_url="https://bugzilla.suse.com/1135039" source="BUGZILLA"/>
		<reference ref_id="1135041" ref_url="https://bugzilla.suse.com/1135041" source="BUGZILLA"/>
		<reference ref_id="1135042" ref_url="https://bugzilla.suse.com/1135042" source="BUGZILLA"/>
		<reference ref_id="1135044" ref_url="https://bugzilla.suse.com/1135044" source="BUGZILLA"/>
		<reference ref_id="1135045" ref_url="https://bugzilla.suse.com/1135045" source="BUGZILLA"/>
		<reference ref_id="1135046" ref_url="https://bugzilla.suse.com/1135046" source="BUGZILLA"/>
		<reference ref_id="1135047" ref_url="https://bugzilla.suse.com/1135047" source="BUGZILLA"/>
		<reference ref_id="1135049" ref_url="https://bugzilla.suse.com/1135049" source="BUGZILLA"/>
		<reference ref_id="1135051" ref_url="https://bugzilla.suse.com/1135051" source="BUGZILLA"/>
		<reference ref_id="1135052" ref_url="https://bugzilla.suse.com/1135052" source="BUGZILLA"/>
		<reference ref_id="1135053" ref_url="https://bugzilla.suse.com/1135053" source="BUGZILLA"/>
		<reference ref_id="1135055" ref_url="https://bugzilla.suse.com/1135055" source="BUGZILLA"/>
		<reference ref_id="1135056" ref_url="https://bugzilla.suse.com/1135056" source="BUGZILLA"/>
		<reference ref_id="1135058" ref_url="https://bugzilla.suse.com/1135058" source="BUGZILLA"/>
		<reference ref_id="1135100" ref_url="https://bugzilla.suse.com/1135100" source="BUGZILLA"/>
		<reference ref_id="1135120" ref_url="https://bugzilla.suse.com/1135120" source="BUGZILLA"/>
		<reference ref_id="1135278" ref_url="https://bugzilla.suse.com/1135278" source="BUGZILLA"/>
		<reference ref_id="1135281" ref_url="https://bugzilla.suse.com/1135281" source="BUGZILLA"/>
		<reference ref_id="1135309" ref_url="https://bugzilla.suse.com/1135309" source="BUGZILLA"/>
		<reference ref_id="1135312" ref_url="https://bugzilla.suse.com/1135312" source="BUGZILLA"/>
		<reference ref_id="1135314" ref_url="https://bugzilla.suse.com/1135314" source="BUGZILLA"/>
		<reference ref_id="1135315" ref_url="https://bugzilla.suse.com/1135315" source="BUGZILLA"/>
		<reference ref_id="1135316" ref_url="https://bugzilla.suse.com/1135316" source="BUGZILLA"/>
		<reference ref_id="1135320" ref_url="https://bugzilla.suse.com/1135320" source="BUGZILLA"/>
		<reference ref_id="1135323" ref_url="https://bugzilla.suse.com/1135323" source="BUGZILLA"/>
		<reference ref_id="1135330" ref_url="https://bugzilla.suse.com/1135330" source="BUGZILLA"/>
		<reference ref_id="1135492" ref_url="https://bugzilla.suse.com/1135492" source="BUGZILLA"/>
		<reference ref_id="1135542" ref_url="https://bugzilla.suse.com/1135542" source="BUGZILLA"/>
		<reference ref_id="1135556" ref_url="https://bugzilla.suse.com/1135556" source="BUGZILLA"/>
		<reference ref_id="1135603" ref_url="https://bugzilla.suse.com/1135603" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135661" ref_url="https://bugzilla.suse.com/1135661" source="BUGZILLA"/>
		<reference ref_id="1135758" ref_url="https://bugzilla.suse.com/1135758" source="BUGZILLA"/>
		<reference ref_id="1136188" ref_url="https://bugzilla.suse.com/1136188" source="BUGZILLA"/>
		<reference ref_id="1136206" ref_url="https://bugzilla.suse.com/1136206" source="BUGZILLA"/>
		<reference ref_id="1136215" ref_url="https://bugzilla.suse.com/1136215" source="BUGZILLA"/>
		<reference ref_id="1136345" ref_url="https://bugzilla.suse.com/1136345" source="BUGZILLA"/>
		<reference ref_id="1136347" ref_url="https://bugzilla.suse.com/1136347" source="BUGZILLA"/>
		<reference ref_id="1136348" ref_url="https://bugzilla.suse.com/1136348" source="BUGZILLA"/>
		<reference ref_id="1136353" ref_url="https://bugzilla.suse.com/1136353" source="BUGZILLA"/>
		<reference ref_id="1136424" ref_url="https://bugzilla.suse.com/1136424" source="BUGZILLA"/>
		<reference ref_id="1136428" ref_url="https://bugzilla.suse.com/1136428" source="BUGZILLA"/>
		<reference ref_id="1136430" ref_url="https://bugzilla.suse.com/1136430" source="BUGZILLA"/>
		<reference ref_id="1136432" ref_url="https://bugzilla.suse.com/1136432" source="BUGZILLA"/>
		<reference ref_id="1136434" ref_url="https://bugzilla.suse.com/1136434" source="BUGZILLA"/>
		<reference ref_id="1136435" ref_url="https://bugzilla.suse.com/1136435" source="BUGZILLA"/>
		<reference ref_id="1136438" ref_url="https://bugzilla.suse.com/1136438" source="BUGZILLA"/>
		<reference ref_id="1136439" ref_url="https://bugzilla.suse.com/1136439" source="BUGZILLA"/>
		<reference ref_id="1136456" ref_url="https://bugzilla.suse.com/1136456" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1136469" ref_url="https://bugzilla.suse.com/1136469" source="BUGZILLA"/>
		<reference ref_id="1136477" ref_url="https://bugzilla.suse.com/1136477" source="BUGZILLA"/>
		<reference ref_id="1136478" ref_url="https://bugzilla.suse.com/1136478" source="BUGZILLA"/>
		<reference ref_id="1136498" ref_url="https://bugzilla.suse.com/1136498" source="BUGZILLA"/>
		<reference ref_id="1136573" ref_url="https://bugzilla.suse.com/1136573" source="BUGZILLA"/>
		<reference ref_id="1136586" ref_url="https://bugzilla.suse.com/1136586" source="BUGZILLA"/>
		<reference ref_id="1136881" ref_url="https://bugzilla.suse.com/1136881" source="BUGZILLA"/>
		<reference ref_id="1136935" ref_url="https://bugzilla.suse.com/1136935" source="BUGZILLA"/>
		<reference ref_id="1136990" ref_url="https://bugzilla.suse.com/1136990" source="BUGZILLA"/>
		<reference ref_id="1137151" ref_url="https://bugzilla.suse.com/1137151" source="BUGZILLA"/>
		<reference ref_id="1137152" ref_url="https://bugzilla.suse.com/1137152" source="BUGZILLA"/>
		<reference ref_id="1137153" ref_url="https://bugzilla.suse.com/1137153" source="BUGZILLA"/>
		<reference ref_id="1137162" ref_url="https://bugzilla.suse.com/1137162" source="BUGZILLA"/>
		<reference ref_id="1137201" ref_url="https://bugzilla.suse.com/1137201" source="BUGZILLA"/>
		<reference ref_id="1137224" ref_url="https://bugzilla.suse.com/1137224" source="BUGZILLA"/>
		<reference ref_id="1137232" ref_url="https://bugzilla.suse.com/1137232" source="BUGZILLA"/>
		<reference ref_id="1137233" ref_url="https://bugzilla.suse.com/1137233" source="BUGZILLA"/>
		<reference ref_id="1137236" ref_url="https://bugzilla.suse.com/1137236" source="BUGZILLA"/>
		<reference ref_id="1137372" ref_url="https://bugzilla.suse.com/1137372" source="BUGZILLA"/>
		<reference ref_id="1137429" ref_url="https://bugzilla.suse.com/1137429" source="BUGZILLA"/>
		<reference ref_id="1137444" ref_url="https://bugzilla.suse.com/1137444" source="BUGZILLA"/>
		<reference ref_id="1137586" ref_url="https://bugzilla.suse.com/1137586" source="BUGZILLA"/>
		<reference ref_id="1137739" ref_url="https://bugzilla.suse.com/1137739" source="BUGZILLA"/>
		<reference ref_id="1137752" ref_url="https://bugzilla.suse.com/1137752" source="BUGZILLA"/>
		<reference ref_id="1138291" ref_url="https://bugzilla.suse.com/1138291" source="BUGZILLA"/>
		<reference ref_id="1138293" ref_url="https://bugzilla.suse.com/1138293" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126/" source="CVE"/>
		<reference ref_id="CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127/" source="CVE"/>
		<reference ref_id="CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130/" source="CVE"/>
		<reference ref_id="CVE-2018-16880" ref_url="https://www.suse.com/security/cve/CVE-2018-16880/" source="CVE"/>
		<reference ref_id="CVE-2018-7191" ref_url="https://www.suse.com/security/cve/CVE-2018-7191/" source="CVE"/>
		<reference ref_id="CVE-2019-10124" ref_url="https://www.suse.com/security/cve/CVE-2019-10124/" source="CVE"/>
		<reference ref_id="CVE-2019-11085" ref_url="https://www.suse.com/security/cve/CVE-2019-11085/" source="CVE"/>
		<reference ref_id="CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091/" source="CVE"/>
		<reference ref_id="CVE-2019-11477" ref_url="https://www.suse.com/security/cve/CVE-2019-11477/" source="CVE"/>
		<reference ref_id="CVE-2019-11478" ref_url="https://www.suse.com/security/cve/CVE-2019-11478/" source="CVE"/>
		<reference ref_id="CVE-2019-11479" ref_url="https://www.suse.com/security/cve/CVE-2019-11479/" source="CVE"/>
		<reference ref_id="CVE-2019-11486" ref_url="https://www.suse.com/security/cve/CVE-2019-11486/" source="CVE"/>
		<reference ref_id="CVE-2019-11487" ref_url="https://www.suse.com/security/cve/CVE-2019-11487/" source="CVE"/>
		<reference ref_id="CVE-2019-11811" ref_url="https://www.suse.com/security/cve/CVE-2019-11811/" source="CVE"/>
		<reference ref_id="CVE-2019-11815" ref_url="https://www.suse.com/security/cve/CVE-2019-11815/" source="CVE"/>
		<reference ref_id="CVE-2019-11833" ref_url="https://www.suse.com/security/cve/CVE-2019-11833/" source="CVE"/>
		<reference ref_id="CVE-2019-11884" ref_url="https://www.suse.com/security/cve/CVE-2019-11884/" source="CVE"/>
		<reference ref_id="CVE-2019-12382" ref_url="https://www.suse.com/security/cve/CVE-2019-12382/" source="CVE"/>
		<reference ref_id="CVE-2019-12818" ref_url="https://www.suse.com/security/cve/CVE-2019-12818/" source="CVE"/>
		<reference ref_id="CVE-2019-12819" ref_url="https://www.suse.com/security/cve/CVE-2019-12819/" source="CVE"/>
		<reference ref_id="CVE-2019-3846" ref_url="https://www.suse.com/security/cve/CVE-2019-3846/" source="CVE"/>
		<reference ref_id="CVE-2019-3882" ref_url="https://www.suse.com/security/cve/CVE-2019-3882/" source="CVE"/>
		<reference ref_id="CVE-2019-5489" ref_url="https://www.suse.com/security/cve/CVE-2019-5489/" source="CVE"/>
		<reference ref_id="CVE-2019-8564" ref_url="https://www.suse.com/security/cve/CVE-2019-8564/" source="CVE"/>
		<reference ref_id="CVE-2019-9003" ref_url="https://www.suse.com/security/cve/CVE-2019-9003/" source="CVE"/>
		<reference ref_id="CVE-2019-9500" ref_url="https://www.suse.com/security/cve/CVE-2019-9500/" source="CVE"/>
		<reference ref_id="CVE-2019-9503" ref_url="https://www.suse.com/security/cve/CVE-2019-9503/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005581.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2019-12819: The function __mdiobus_register() called put_device(), which
  triggered a fixed_mdio_bus_init use-after-free. This would cause a denial of
  service. (bsc#1138291)

- CVE-2019-12818: The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c
  may return NULL. If the caller does not check for this, it will trigger a
  NULL pointer dereference. This will cause denial of service. This used to
  affect nfc_llcp_build_gb in net/nfc/llcp_core.c. (bsc#1138293)

- CVE-2019-11477: A sequence of SACKs may have been crafted such that one can
  trigger an integer overflow, leading to a kernel panic.

- CVE-2019-11478: It was possible to send a crafted sequence of SACKs which
  will fragment the TCP retransmission queue. An attacker may have been able to
  further exploit the fragmented queue to cause an expensive linked-list walk
  for subsequent SACKs received for that same TCP connection.

- CVE-2019-11479: An attacker could force the Linux kernel to segment its
  responses into multiple TCP segments. This would drastically increased the
  bandwidth required to deliver the same amount of data. Further, it would
  consume additional resources such as CPU and NIC processing power.

- CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly
  escalate privileges was found in the mwifiex kernel module while connecting
  to a malicious wireless network. (bsc#1136424)

- CVE-2019-10124: An issue was discovered in the hwpoison implementation in
  mm/memory-failure.c in the Linux kernel. When soft_offline_in_use_page() runs
  on a thp tail page after pmd is split, an attacker could cause a denial of
  service (bsc#1130699, CVE-2019-10124).

- CVE-2019-12382: An issue was discovered in drm_load_edid_firmware in
  drivers/gpu/drm/drm_edid_load.c in the Linux kernel There was an unchecked
  kstrdup of fwstr, which might allow an attacker to cause a denial of service
  (NULL pointer dereference and system crash). (bsc#1136586)

- CVE-2019-11487: The Linux kernel allowed page reference count overflow, with
  resultant use-after-free issues, if about 140 GiB of RAM exists. This is
  related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h,
  include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c.
  It could occur with FUSE requests. (bbsc#1133190)

- CVE-2019-5489: The mincore() implementation in mm/mincore.c in the Linux
  kernel allowed local attackers to observe page cache access patterns of other
  processes on the same system, potentially allowing sniffing of secret
  information. (Fixing this affects the output of the fincore program.) Limited
  remote exploitation may be possible, as demonstrated by latency differences
  in accessing public files from an Apache HTTP Server. (bsc#1120843)

- CVE-2019-11833: fs/ext4/extents.c in the Linux kernel did not zero out the
  unused memory region in the extent tree block, which might allow local users
  to obtain sensitive information by reading uninitialized data in the
  filesystem. (bsc#1135281)

- CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM):
  Uncacheable memory on some microprocessors utilizing speculative execution
  may have allowed an authenticated user to potentially enable information
  disclosure via a side channel with local access. A list of impacted products
  can be found here:
  https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.
  (bsc##1111331)

- CVE-2018-7191: In the tun subsystem in the Linux kernel, dev_get_valid_name
  was not called before register_netdevice. This allowed local users to cause a
  denial of service (NULL pointer dereference and panic) via an
  ioctl(TUNSETIFF) call with a dev name containing a / character. (bsc#1135603)

- CVE-2018-12126 CVE-2018-12127 CVE-2018-12130: Microarchitectural Store Buffer
  Data Sampling (MSBDS): Stored buffers on some microprocessors utilizing
  speculative execution which may have allowed an authenticated user to
  potentially enable information disclosure via a side channel with local
  access. A list of impacted products can be found here:
  https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.
  (bsc#1103186)

- CVE-2019-11085: Insufficient input validation in Kernel Mode Driver in
  Intel(R) i915 Graphics for Linux may have allowed an authenticated user to
  potentially enable escalation of privilege via local access. (bsc#1135278)

- CVE-2019-11815: An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c
  in the Linux kernel There was a race condition leading to a use-after-free,
  related to net namespace cleanup. (bsc#1135278)

- CVE-2019-11884: The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c
  in the Linux kernel allowed a local user to obtain potentially sensitive
  information from kernel stack memory via a hidPCONNADD command, because a
  name field may not end with a '\0' character. (bsc#1134848)

- CVE-2019-11811: An issue was discovered in the Linux kernel There was a
  use-after-free upon attempted read access to /proc/ioports after the ipmi_si
  module was removed, related to drivers/char/ipmi/ipmi_si_intf.c,
  drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c.
  (bsc#1134397)

- CVE-2019-11486: The Siemens R3964 line discipline driver in
  drivers/tty/n_r3964.c in the Linux kernel has multiple race conditions.
  (bsc#1133188)

- CVE-2019-9003: In the Linux kernel, attackers could trigger a
  drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for
  certain simultaneous execution of the code, as demonstrated by a 'service
  ipmievd restart' loop. (bsc#1126704)

- CVE-2018-16880: A flaw was found in the Linux kernel's handle_rx() function
  in the [vhost_net] driver. A malicious virtual guest, under specific
  conditions, could trigger an out-of-bounds write in a kmalloc-8 slab on a
  virtual host which may have lead to a kernel memory corruption and a system
  panic. Due to the nature of the flaw, privilege escalation cannot be fully
  ruled out.(bsc#1122767)

- CVE-2019-9503: An issue was discoved which meant that brcmfmac frame
  validation could be bypassed. (bsc#1132828)

- CVE-2019-9500: An issue was discovered that lead to brcmfmac heap buffer
  overflow. (bsc#1132681)

- CVE-2019-8564: An issue was discoved which meant that brcmfmac frame
  validation could be bypassed. (bsc#1132673)

- CVE-2017-5753: Systems with microprocessors utilizing speculative execution
  and branch prediction may have allowed unauthorized disclosure of information
  to an attacker with local user access via a side-channel analysis.

- CVE-2019-3882: A flaw was found in the Linux kernel's vfio interface
  implementation that permitted violation of the user's locked memory limit. If
  a device was bound to a vfio driver, such as vfio-pci, and the local attacker
  is administratively granted ownership of the device, it may have caused a
  system memory exhaustion and thus a denial of service (DoS). (bsc#1131427)

The following non-security bugs were fixed:

- 9p locks: add mount option for lock retry interval (bsc#1051510).
- 9p: do not trust pdu content for stat item size (bsc#1051510).
- acpi / SBS: Fix GPE storm on recent MacBookPro's (bsc#1051510).
- acpi / utils: Drop reference in test for device presence (bsc#1051510).
- acpi, nfit: Prefer _DSM over _LSR for namespace label reads (bsc#1112128) (bsc#1132426).
- acpi: Add Hygon Dhyana support ().
- acpi: button: reinitialize button state upon resume (bsc#1051510).
- acpi: fix menuconfig presentation of acpi submenu (bsc#1117158).
- acpi: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle (bsc#1111666).
- acpi: property: restore _DSD data subnodes GUID comment (bsc#1111666).
- acpica: AML interpreter: add region addresses in global list during initialization (bsc#1051510).
- acpica: Namespace: remove address node from global list after method termination (bsc#1051510).
- alsa: core: Do not refer to snd_cards array directly (bsc#1051510).
- alsa: core: Fix card races between register and disconnect (bsc#1051510).
- alsa: emu10k1: Drop superfluous id-uniquification behavior (bsc#1051510).
- alsa: hda - Add two more machines to the power_save_blacklist (bsc#1051510).
- alsa: hda - Register irq handler after the chip initialization (bsc#1051510).
- alsa: hda - Use a macro for snd_array iteration loops (bsc#1051510).
- alsa: hda/hdmi - Consider eld_valid when reporting jack event (bsc#1051510).
- alsa: hda/hdmi - Read the pin sense from register when repolling (bsc#1051510).
- alsa: hda/realtek - Add new Dell platform for headset mode (bsc#1051510).
- alsa: hda/realtek - add two more pin configuration sets to quirk table (bsc#1051510).
- alsa: hda/realtek - Apply the fixup for ASUS Q325UAR (bsc#1051510).
- alsa: hda/realtek - Avoid superfluous COEF EAPD setups (bsc#1051510).
- alsa: hda/realtek - Corrected fixup for System76 Gazelle (gaze14) (bsc#1051510).
- alsa: hda/realtek - EAPD turn on later (bsc#1051510).
- alsa: hda/realtek - Enable micmute LED for Huawei laptops (bsc#1051510).
- alsa: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug (bsc#1051510).
- alsa: hda/realtek - Fixed Dell AIO speaker noise (bsc#1051510).
- alsa: hda/realtek - Fixup headphone noise via runtime suspend (bsc#1051510).
- alsa: hda/realtek - Improve the headset mic for Acer Aspire laptops (bsc#1051510).
- alsa: hda/realtek - Move to ACT_INIT state (bsc#1111666).
- alsa: hda/realtek - Support low power consumption for ALC256 (bsc#1051510).
- alsa: hda/realtek - Support low power consumption for ALC295 (bsc#1051510).
- alsa: hda/realtek: Enable headset MIC of Acer TravelMate B114-21 with ALC233 (bsc#1111666).
- alsa: hda: Initialize power_state field properly (bsc#1051510).
- alsa: hdea/realtek - Headset fixup for System76 Gazelle (gaze14) (bsc#1051510).
- alsa: info: Fix racy addition/deletion of nodes (bsc#1051510).
- alsa: line6: Avoid polluting led_* namespace (bsc#1051510).
- alsa: line6: use dynamic buffers (bsc#1051510).
- alsa: PCM: check if ops are defined before suspending PCM (bsc#1051510).
- alsa: seq: Align temporary re-locking with irqsave version (bsc#1051510).
- alsa: seq: Correct unlock sequence at snd_seq_client_ioctl_unlock() (bsc#1051510).
- alsa: seq: Cover unsubscribe_port() in list_mutex (bsc#1051510).
- alsa: seq: Fix OOB-reads from strlcpy (bsc#1051510).
- alsa: seq: Fix race of get-subscription call vs port-delete ioctls (bsc#1051510).
- alsa: seq: Protect in-kernel ioctl calls with mutex (bsc#1051510).
- alsa: seq: Protect racy pool manipulation from OSS sequencer (bsc#1051510).
- alsa: seq: Remove superfluous irqsave flags (bsc#1051510).
- alsa: seq: Simplify snd_seq_kernel_client_enqueue() helper (bsc#1051510).
- alsa: timer: Check ack_list emptiness instead of bit flag (bsc#1051510).
- alsa: timer: Coding style fixes (bsc#1051510).
- alsa: timer: Make snd_timer_close() really kill pending actions (bsc#1051510).
- alsa: timer: Make sure to clear pending ack list (bsc#1051510).
- alsa: timer: Revert active callback sync check at close (bsc#1051510).
- alsa: timer: Simplify error path in snd_timer_open() (bsc#1051510).
- alsa: timer: Unify timer callback process code (bsc#1051510).
- alsa: usb-audio: Fix a memory leak bug (bsc#1051510).
- alsa: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk() (bsc#1051510).
- alsa: usx2y: fix a double free bug (bsc#1051510).
- appletalk: Fix compile regression (bsc#1051510).
- appletalk: Fix use-after-free in atalk_proc_exit (bsc#1051510).
- arch: arm64: acpi: KABI ginore includes (bsc#1117158 bsc#1134671).
- arm64, mm, efi: Account for GICv3 LPI tables in static memblock reserve table (bsc#1117158).
- arm64: acpi: fix alignment fault in accessing acpi (bsc#1117158).
- arm64: Export save_stack_trace_tsk() (jsc#SLE-4214).
- arm64: fix acpi dependencies (bsc#1117158).
- arm: 8824/1: fix a migrating irq bug when hotplug cpu (bsc#1051510).
- arm: 8833/1: Ensure that NEON code always compiles with Clang (bsc#1051510).
- arm: 8839/1: kprobe: make patch_lock a raw_spinlock_t (bsc#1051510).
- arm: 8840/1: use a raw_spinlock_t in unwind (bsc#1051510).
- arm: avoid Cortex-A9 livelock on tight dmb loops (bsc#1051510).
- arm: imx6q: cpuidle: fix bug that CPU might not wake up at expected time (bsc#1051510).
- arm: iop: do not use using 64-bit DMA masks (bsc#1051510).
- arm: OMAP2+: fix lack of timer interrupts on CPU1 after hotplug (bsc#1051510).
- arm: OMAP2+: Variable 'reg' in function omap4_dsi_mux_pads() could be uninitialized (bsc#1051510).
- arm: orion: do not use using 64-bit DMA masks (bsc#1051510).
- arm: pxa: ssp: unneeded to free devm_ allocated data (bsc#1051510).
- arm: s3c24xx: Fix boolean expressions in osiris_dvs_notify (bsc#1051510).
- arm: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms (bsc#1051510).
- asoc: cs4270: Set auto-increment bit for register writes (bsc#1051510).
- asoc: fix valid stream condition (bsc#1051510).
- asoc: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe (bsc#1051510).
- asoc: fsl_esai: fix channel swap issue when stream starts (bsc#1051510).
- asoc: fsl_esai: Fix missing break in switch statement (bsc#1051510).
- asoc: hdmi-codec: fix S/PDIF DAI (bsc#1051510).
- asoc: Intel: avoid Oops if DMA setup fails (bsc#1051510).
- asoc: max98090: Fix restore of DAPM Muxes (bsc#1051510).
- asoc: nau8810: fix the issue of widget with prefixed name (bsc#1051510).
- asoc: nau8824: fix the issue of the widget with prefix name (bsc#1051510).
- asoc: RT5677-SPI: Disable 16Bit SPI Transfers (bsc#1051510).
- asoc: samsung: odroid: Fix clock configuration for 44100 sample rate (bsc#1051510).
- asoc: stm32: fix sai driver name initialisation (bsc#1051510).
- asoc: tlv320aic32x4: Fix Common Pins (bsc#1051510).
- asoc: topology: free created components in tplg load error (bsc#1051510).
- asoc: wm_adsp: Add locking to wm_adsp2_bus_error (bsc#1051510).
- asoc:soc-pcm:fix a codec fixup issue in TDM case (bsc#1051510).
- assume flash part size to be 4MB, if it can't be determined (bsc#1127371).
- at76c50x-usb: Do not register led_trigger if usb_register_driver failed (bsc#1051510).
- ath10k: avoid possible string overflow (bsc#1051510).
- ath10k: snoc: fix unbalanced clock error handling (bsc#1111666).
- audit: fix a memleak caused by auditing load module (bsc#1051510).
- b43: shut up clang -Wuninitialized variable warning (bsc#1051510).
- backlight: lm3630a: Return 0 on success in update_status functions (bsc#1051510).
- batman-adv: Reduce claim hash refcnt only for removed entry (bsc#1051510).
- batman-adv: Reduce tt_global hash refcnt only for removed entry (bsc#1051510).
- batman-adv: Reduce tt_local hash refcnt only for removed entry (bsc#1051510).
- bcache: account size of buckets used in uuid write to ca-&gt;meta_sectors_written (bsc#1130972).
- bcache: add a comment in super.c (bsc#1130972).
- bcache: add code comments for bset.c (bsc#1130972).
- bcache: add comment for cache_set-&gt;fill_iter (bsc#1130972).
- bcache: add identifier names to arguments of function definitions (bsc#1130972).
- bcache: add missing SPDX header (bsc#1130972).
- bcache: add MODULE_DESCRIPTION information (bsc#1130972).
- bcache: add separate workqueue for journal_write to avoid deadlock (bsc#1130972).
- bcache: add static const prefix to char * array declarations (bsc#1130972).
- bcache: add sysfs_strtoul_bool() for setting bit-field variables (bsc#1130972).
- bcache: add the missing comments for smp_mb()/smp_wmb() (bsc#1130972).
- bcache: cannot set writeback_running via sysfs if no writeback kthread created (bsc#1130972).
- bcache: correct dirty data statistics (bsc#1130972).
- bcache: do not assign in if condition in bcache_init() (bsc#1130972).
- bcache: do not assign in if condition register_bcache() (bsc#1130972).
- bcache: do not check if debug dentry is ERR or NULL explicitly on remove (bsc#1130972).
- bcache: do not check NULL pointer before calling kmem_cache_destroy (bsc#1130972).
- bcache: do not clone bio in bch_data_verify (bsc#1130972).
- bcache: do not mark writeback_running too early (bsc#1130972).
- bcache: export backing_dev_name via sysfs (bsc#1130972).
- bcache: export backing_dev_uuid via sysfs (bsc#1130972).
- bcache: fix code comments style (bsc#1130972).
- bcache: fix indent by replacing blank by tabs (bsc#1130972).
- bcache: fix indentation issue, remove tabs on a hunk of code (bsc#1130972).
- bcache: fix input integer overflow of congested threshold (bsc#1130972).
- bcache: fix input overflow to cache set io_error_limit (bsc#1130972).
- bcache: fix input overflow to cache set sysfs file io_error_halflife (bsc#1130972).
- bcache: fix input overflow to journal_delay_ms (bsc#1130972).
- bcache: fix input overflow to sequential_cutoff (bsc#1130972).
- bcache: fix input overflow to writeback_delay (bsc#1130972).
- bcache: fix input overflow to writeback_rate_minimum (bsc#1130972).
- bcache: fix ioctl in flash device (bsc#1130972).
- bcache: fix mistaken code comments in bcache.h (bsc#1130972).
- bcache: fix mistaken comments in request.c (bsc#1130972).
- bcache: fix potential div-zero error of writeback_rate_i_term_inverse (bsc#1130972).
- bcache: fix potential div-zero error of writeback_rate_p_term_inverse (bsc#1130972).
- bcache: fix typo 'succesfully' to 'successfully' (bsc#1130972).
- bcache: fix typo in code comments of closure_return_with_destructor() (bsc#1130972).
- bcache: improve sysfs_strtoul_clamp() (bsc#1130972).
- bcache: introduce force_wake_up_gc() (bsc#1130972).
- bcache: make cutoff_writeback and cutoff_writeback_sync tunable (bsc#1130972).
- bcache: Move couple of functions to sysfs.c (bsc#1130972).
- bcache: Move couple of string arrays to sysfs.c (bsc#1130972).
- bcache: move open brace at end of function definitions to next line (bsc#1130972).
- bcache: never writeback a discard operation (bsc#1130972).
- bcache: not use hard coded memset size in bch_cache_accounting_clear() (bsc#1130972).
- bcache: option to automatically run gc thread after writeback (bsc#1130972).
- bcache: panic fix for making cache device (bsc#1130972).
- bcache: Populate writeback_rate_minimum attribute (bsc#1130972).
- bcache: prefer 'help' in Kconfig (bsc#1130972).
- bcache: print number of keys in trace_bcache_journal_write (bsc#1130972).
- bcache: recal cached_dev_sectors on detach (bsc#1130972).
- bcache: remove unnecessary space before ioctl function pointer arguments (bsc#1130972).
- bcache: remove unused bch_passthrough_cache (bsc#1130972).
- bcache: remove useless parameter of bch_debug_init() (bsc#1130972).
- bcache: replace '%pF' by '%pS' in seq_printf() (bsc#1130972).
- bcache: Replace bch_read_string_list() by __sysfs_match_string() (bsc#1130972).
- bcache: replace hard coded number with BUCKET_GC_GEN_MAX (bsc#1130972).
- bcache: replace printk() by pr_*() routines (bsc#1130972).
- bcache: replace Symbolic permissions by octal permission numbers (bsc#1130972).
- bcache: set writeback_percent in a flexible range (bsc#1130972).
- bcache: split combined if-condition code into separate ones (bsc#1130972).
- bcache: stop bcache device when backing device is offline (bsc#1130972).
- bcache: stop using the deprecated get_seconds() (bsc#1130972).
- bcache: style fix to add a blank line after declarations (bsc#1130972).
- bcache: style fix to replace 'unsigned' by 'unsigned int' (bsc#1130972).
- bcache: style fixes for lines over 80 characters (bsc#1130972).
- bcache: treat stale and dirty keys as bad keys (bsc#1130972).
- bcache: trivial - remove tailing backslash in macro BTREE_FLAG (bsc#1130972).
- bcache: update comment for bch_data_insert (bsc#1130972).
- bcache: update comment in sysfs.c (bsc#1130972).
- bcache: use (REQ_META|REQ_PRIO) to indicate bio for metadata (bsc#1130972).
- bcache: use MAX_CACHES_PER_SET instead of magic number 8 in __bch_bucket_alloc_set (bsc#1130972).
- bcache: use REQ_PRIO to indicate bio for metadata (bsc#1130972).
- bcache: use routines from lib/crc64.c for CRC64 calculation (bsc#1130972).
- bcache: use sysfs_strtoul_bool() to set bit-field variables (bsc#1130972).
- bitmap: Add bitmap_alloc(), bitmap_zalloc() and bitmap_free() (jsc#SLE-4797).
- blk-mq: adjust debugfs and sysfs register when updating nr_hw_queues (bsc#1131673).
- blk-mq: Avoid that submitting a bio concurrently with device removal triggers a crash (bsc#1131673).
- blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs (bsc#1131673).
- blk-mq: fallback to previous nr_hw_queues when updating fails (bsc#1131673).
- blk-mq: init hctx sched after update ctx and hctx mapping (bsc#1131673).
- blk-mq: realloc hctx when hw queue is mapped to another node (bsc#1131673).
- blk-mq: sync the update nr_hw_queues with blk_mq_queue_tag_busy_iter (bsc#1131673).
- blkcg: Introduce blkg_root_lookup() (bsc#1131673).
- blkcg: Make blkg_root_lookup() work for queues in bypass mode (bsc#1131673).
- block: check_events: do not bother with events if unsupported (bsc#1110946, bsc#1119843).
- block: check_events: do not bother with events if unsupported (bsc#1110946, bsc#1119843).
- block: disk_events: introduce event flags (bsc#1110946, bsc#1119843).
- block: disk_events: introduce event flags (bsc#1110946, bsc#1119843).
- block: do not leak memory in bio_copy_user_iov() (bsc#1135309).
- block: Do not revalidate bdev of hidden gendisk (bsc#1120091).
- block: Ensure that a request queue is dissociated from the cgroup controller (bsc#1131673).
- block: Fix a race between request queue removal and the block cgroup controller (bsc#1131673).
- block: fix the return errno for direct IO (bsc#1135320).
- block: fix use-after-free on gendisk (bsc#1135312).
- block: Introduce blk_exit_queue() (bsc#1131673).
- block: kABI fixes for bio_rewind_iter() removal (bsc#1131673).
- block: remove bio_rewind_iter() (bsc#1131673).
- bluetooth: Align minimum encryption key size for LE and BR/EDR connections (bsc#1051510).
- bluetooth: btusb: request wake pin with NOAUTOEN (bsc#1051510).
- bluetooth: Check key sizes only when Secure Simple Pairing is enabled (bsc#1135556).
- bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf() (bsc#1133731).
- bluetooth: hidp: fix buffer overflow (bsc#1051510).
- bnx2x: Add support for detection of P2P event packets (bsc#1136498 jsc#SLE-4699).
- bnx2x: Bump up driver version to 1.713.36 (bsc#1136498 jsc#SLE-4699).
- bnx2x: fix spelling mistake 'dicline' -&gt; 'decline' (bsc#1136498 jsc#SLE-4699).
- bnx2x: fix various indentation issues (bsc#1136498 jsc#SLE-4699).
- bnx2x: Remove set but not used variable 'mfw_vn' (bsc#1136498 jsc#SLE-4699).
- bnx2x: Replace magic numbers with macro definitions (bsc#1136498 jsc#SLE-4699).
- bnx2x: Use struct_size() in kzalloc() (bsc#1136498 jsc#SLE-4699).
- bnx2x: Utilize FW 7.13.11.0 (bsc#1136498 jsc#SLE-4699).
- bnxt_en: Add device IDs 0x1806 and 0x1752 for 57500 devices (bsc#1137224).
- bnxt_en: Add support for BCM957504 (bsc#1137224).
- bnxt_en: Drop oversize TX packets to prevent errors (networking-stable-19_03_07).
- bnxt_en: Fix aggregation buffer leak under OOM condition (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix possible BUG() condition when calling pci_disable_msix() (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix possible crash in bnxt_hwrm_ring_free() under error conditions (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix statistics context reservation logic (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt() (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one() (bsc#1050242).
- bnxt_en: Improve multicast address setup logic (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Improve multicast address setup logic (networking-stable-19_05_04).
- bnxt_en: Improve NQ reservations (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Improve RX consumer index validity check (networking-stable-19_04_10).
- bnxt_en: Pass correct extended TX port statistics size to firmware (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Reduce memory usage when running in kdump kernel (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Reset device on RX buffer errors (networking-stable-19_04_10).
- bonding: fix event handling for stacked bonds (networking-stable-19_04_19).
- bonding: fix PACKET_ORIGDEV regression (git-fixes).
- bpf, lru: avoid messing with eviction heuristics upon syscall lookup (bsc#1083647).
- bpf: add map_lookup_elem_sys_only for lookups from syscall side (bsc#1083647).
- bpf: Add missed newline in verifier verbose log (bsc#1056787).
- bpf: fix use after free in bpf_evict_inode (bsc#1083647).
- brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() (bsc#1051510).
- brcmfmac: fix leak of mypkt on error return path (bsc#1111666).
- broadcom: Mark expected switch fall-throughs (bsc#1136498 jsc#SLE-4699).
- btrfs: add a helper to return a head ref (bsc#1134813).
- btrfs: Avoid possible qgroup_rsv_size overflow in btrfs_calculate_inode_block_rsv_size (git-fixes).
- btrfs: breakout empty head cleanup to a helper (bsc#1134813).
- btrfs: delayed-ref: Introduce better documented delayed ref structures (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: delayed-ref: Use btrfs_ref to refactor btrfs_add_delayed_data_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: delayed-ref: Use btrfs_ref to refactor btrfs_add_delayed_tree_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: do not allow trimming when a fs is mounted with the nologreplay option (bsc#1135758).
- btrfs: do not double unlock on error in btrfs_punch_hole (bsc#1136881).
- btrfs: Do not panic when we can't find a root key (bsc#1112063).
- btrfs: extent-tree: Fix a bug that btrfs is unable to add pinned bytes (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Open-code process_func in __btrfs_mod_ref (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Use btrfs_ref to refactor add_pinned_bytes() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Use btrfs_ref to refactor btrfs_free_extent() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Use btrfs_ref to refactor btrfs_inc_extent_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: Factor out common delayed refs init code (bsc#1134813).
- btrfs: fix assertion failure on fsync with NO_HOLES enabled (bsc#1131848).
- btrfs: Fix bound checking in qgroup_trace_new_subtree_blocks (git-fixes).
- btrfs: fix fsync not persisting changed attributes of a directory (bsc#1137151).
- btrfs: fix incorrect file size after shrinking truncate and fsync (bsc#1130195).
- btrfs: fix race between ranged fsync and writeback of adjacent ranges (bsc#1136477).
- btrfs: fix race updating log root item during fsync (bsc#1137153).
- btrfs: fix wrong ctime and mtime of a directory after log replay (bsc#1137152).
- btrfs: improve performance on fsync of files with multiple hardlinks (bsc#1123454).
- btrfs: Introduce init_delayed_ref_head (bsc#1134813).
- btrfs: move all ref head cleanup to the helper function (bsc#1134813).
- btrfs: move extent_op cleanup to a helper (bsc#1134813).
- btrfs: move ref_mod modification into the if (ref) logic (bsc#1134813).
- btrfs: Open-code add_delayed_data_ref (bsc#1134813).
- btrfs: Open-code add_delayed_tree_ref (bsc#1134813).
- btrfs: qgroup: Check bg while resuming relocation to avoid NULL pointer dereference (bsc#1134806).
- btrfs: qgroup: Do not scan leaf if we're modifying reloc tree (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: qgroup: Move reserved data accounting from btrfs_delayed_ref_head to btrfs_qgroup_extent_record (bsc#1134162).
- btrfs: qgroup: Remove duplicated trace points for qgroup_rsv_add/release (bsc#1134160).
- btrfs: reloc: Also queue orphan reloc tree for cleanup to avoid BUG_ON() (bsc#1133612).
- btrfs: remove delayed_ref_node from ref_head (bsc#1134813).
- btrfs: remove WARN_ON in log_dir_items (bsc#1131847).
- btrfs: send, flush dellaloc in order to avoid data loss (bsc#1133320).
- btrfs: split delayed ref head initialization and addition (bsc#1134813).
- btrfs: track refs in a rb_tree instead of a list (bsc#1134813).
- btrfs: tree-checker: detect file extent items with overlapping ranges (bsc#1136478).
- btrfs: Use init_delayed_ref_common in add_delayed_data_ref (bsc#1134813).
- btrfs: Use init_delayed_ref_common in add_delayed_tree_ref (bsc#1134813).
- btrfs: Use init_delayed_ref_head in add_delayed_ref_head (bsc#1134813).
- cdrom: Fix race condition in cdrom_sysctl_register (bsc#1051510).
- ceph: ensure d_name stability in ceph_dentry_hash() (bsc#1134461).
- ceph: ensure d_name stability in ceph_dentry_hash() (bsc#1134461).
- ceph: fix ci-&gt;i_head_snapc leak (bsc#1122776).
- ceph: fix ci-&gt;i_head_snapc leak (bsc#1122776).
- ceph: fix use-after-free on symlink traversal (bsc#1134459).
- ceph: fix use-after-free on symlink traversal (bsc#1134459).
- ceph: only use d_name directly when parent is locked (bsc#1134460).
- ceph: only use d_name directly when parent is locked (bsc#1134460).
- cfg80211: Handle WMM rules in regulatory domain intersection (bsc#1111666).
- cgroup: fix parsing empty mount option string (bsc#1133094).
- chelsio: use BUG() instead of BUG_ON(1) (bsc#1136345 jsc#SLE-4681).
- cifs: Do not count -ENODATA as failure for query directory (bsc#1051510).
- cifs: do not dereference smb_file_target before null check (bsc#1051510).
- cifs: Do not hide EINTR after sending network packets (bsc#1051510).
- cifs: Do not reconnect TCP session in add_credits() (bsc#1051510).
- cifs: Do not reset lease state to NONE on lease break (bsc#1051510).
- cifs: Fix adjustment of credits for MTU requests (bsc#1051510).
- cifs: Fix credit calculation for encrypted reads with errors (bsc#1051510).
- cifs: Fix credits calculations for reads with errors (bsc#1051510).
- cifs: fix POSIX lock leak and invalid ptr deref (bsc#1114542).
- cifs: Fix possible hang during async MTU reads and writes (bsc#1051510).
- cifs: Fix potential OOB access of lock element array (bsc#1051510).
- cifs: Fix read after write for files with read caching (bsc#1051510).
- cifs: keep FileInfo handle live during oplock break (bsc#1106284, bsc#1131565).
- clk: fractional-divider: check parent rate only if flag is set (bsc#1051510).
- clk: rockchip: fix frac settings of GPLL clock for rk3328 (bsc#1051510).
- clk: rockchip: Fix video codec clocks on rk3288 (bsc#1051510).
- clk: rockchip: fix wrong clock definitions for rk3328 (bsc#1051510).
- clk: x86: Add system specific quirk to mark clocks as critical (bsc#1051510).
- config: arm64: enable CN99xx uncore pmu References: bsc#1117114
- configfs: fix possible use-after-free in configfs_register_group (bsc#1051510).
- configfs: Fix use-after-free when accessing sd-&gt;s_dentry (bsc#1051510).
- cpu/speculation: Add 'mitigations=' cmdline option (bsc#1112178).
- cpufreq: Add Hygon Dhyana support ().
- cpufreq: AMD: Ignore the check for ProcFeedback in ST/CZ ().
- cpupowerutils: bench - Fix cpu online check (bsc#1051510).
- crypto: arm/aes-neonbs - do not access already-freed walk.iv (bsc#1051510).
- crypto: caam - add missing put_device() call (bsc#1129770).
- crypto: caam - fix caam_dump_sg that iterates through scatterlist (bsc#1051510).
- crypto: caam/qi2 - fix DMA mapping of stack memory (bsc#1111666).
- crypto: caam/qi2 - fix zero-length buffer DMA mapping (bsc#1111666).
- crypto: caam/qi2 - generate hash keys in-place (bsc#1111666).
- crypto: ccm - fix incompatibility between 'ccm' and 'ccm_base' (bsc#1051510).
- crypto: ccp - Do not free psp_master when PLATFORM_INIT fails (bsc#1051510).
- crypto: chacha20poly1305 - set cra_name correctly (bsc#1051510).
- crypto: chcr - ESN for Inline IPSec Tx (bsc#1136353 jsc#SLE-4688).
- crypto: chcr - small packet Tx stalls the queue (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - avoid using sa_entry imm (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - check set_msg_len overflow in generate_b0 (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - clean up various indentation issues (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - cleanup:send addr as value in function argument (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - count incomplete block in IV (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix NULL pointer dereference (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix passing zero to 'PTR_ERR' warning in chcr_aead_op (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix softlockup with heavy I/O (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix wrong error counter increments (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fixed Traffic Stall (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Handle pci shutdown event (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Inline single pdu only (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - remove set but not used variable 'kctx_len' (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - remove set but not used variables 'adap' (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Reset counters on cxgb4 Detach (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Swap location of AAD and IV sent in WR (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Use same value for both channel in single WR (bsc#1136353 jsc#SLE-4688).
- crypto: chtls - remove cdev_list_lock (bsc#1136353 jsc#SLE-4688).
- crypto: chtls - remove set but not used variables 'err, adap, request, hws' (bsc#1136353 jsc#SLE-4688).
- crypto: crct10dif-generic - fix use via crypto_shash_digest() (bsc#1051510).
- crypto: crypto4xx - properly set IV after de- and encrypt (bsc#1051510).
- crypto: fips - Grammar s/options/option/, s/to/the/ (bsc#1051510).
- crypto: gcm - fix incompatibility between 'gcm' and 'gcm_base' (bsc#1051510).
- crypto: pcbc - remove bogus memcpy()s with src == dest (bsc#1051510).
- crypto: prefix header search paths with $(srctree)/ (bsc#1136353 jsc#SLE-4688).
- crypto: qat - move temp buffers off the stack (jsc#SLE-4818).
- crypto: qat - no need to check return value of debugfs_create functions (jsc#SLE-4818).
- crypto: qat - Remove unused goto label (jsc#SLE-4818).
- crypto: qat - Remove VLA usage (jsc#SLE-4818).
- crypto: sha256/arm - fix crash bug in Thumb2 build (bsc#1051510).
- crypto: sha512/arm - fix crash bug in Thumb2 build (bsc#1051510).
- crypto: skcipher - do not WARN on unprocessed data after slow walk step (bsc#1051510).
- crypto: sun4i-ss - Fix invalid calculation of hash end (bsc#1051510).
- crypto: vmx - CTR: always increment IV as quadword (bsc#1051510).
- crypto: vmx - fix copy-paste error in CTR mode (bsc#1051510).
- crypto: vmx - ghash: do nosimd fallback manually (bsc#1135661, bsc#1137162).
- crypto: vmx - return correct error code on failed setkey (bsc#1135661, bsc#1137162).
- crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() (bsc#1051510).
- crypto: x86/poly1305 - fix overflow during partial reduction (bsc#1051510).
- cxgb4/chtls: Prefix adapter flags with CXGB4 (bsc#1136345 jsc#SLE-4681).
- cxgb4/cxgb4vf: Add support for SGE doorbell queue timer (bsc#1127371).
- cxgb4/cxgb4vf: Display advertised FEC in ethtool (bsc#1136345 jsc#SLE-4681).
- cxgb4/cxgb4vf: Fix mac_hlist initialization and free (bsc#1127374).
- cxgb4/cxgb4vf: Fix up netdev-&gt;hw_features (bsc#1136345 jsc#SLE-4681).
- cxgb4/cxgb4vf: Link management changes (bsc#1127371).
- cxgb4/cxgb4vf: Program hash region for {t4/t4vf}_change_mac() (bsc#1127371).
- cxgb4/cxgb4vf_main: Mark expected switch fall-through (bsc#1136345 jsc#SLE-4681).
- cxgb4: Add capability to get/set SGE Doorbell Queue Timer Tick (bsc#1127371).
- cxgb4: Add flag tc_flower_initialized (bsc#1127371).
- cxgb4: Add new T5 pci device id 0x50ae (bsc#1127371).
- cxgb4: Add new T5 pci device ids 0x50af and 0x50b0 (bsc#1127371).
- cxgb4: Add new T6 pci device ids 0x608a (bsc#1127371).
- cxgb4: Add new T6 pci device ids 0x608b (bsc#1136345 jsc#SLE-4681).
- cxgb4: add per rx-queue counter for packet errors (bsc#1127371).
- cxgb4: Add support for FW_ETH_TX_PKT_VM_WR (bsc#1127371).
- cxgb4: add support to display DCB info (bsc#1127371).
- cxgb4: Add support to read actual provisioned resources (bsc#1127371).
- cxgb4: add tcb flags and tcb rpl struct (bsc#1136345 jsc#SLE-4681).
- cxgb4: Add VF Link state support (bsc#1136345 jsc#SLE-4681).
- cxgb4: Added missing break in ndo_udp_tunnel_{add/del} (bsc#1127371).
- cxgb4: collect ASIC LA dumps from ULP TX (bsc#1127371).
- cxgb4: collect hardware queue descriptors (bsc#1127371).
- cxgb4: collect number of free PSTRUCT page pointers (bsc#1127371).
- cxgb4: convert flower table to use rhashtable (bsc#1127371).
- cxgb4: cxgb4: use FW_PORT_ACTION_L1_CFG32 for 32 bit capability (bsc#1127371).
- cxgb4: Delete all hash and TCAM filters before resource cleanup (bsc#1136345 jsc#SLE-4681).
- cxgb4: display number of rx and tx pages free (bsc#1127371).
- cxgb4: do not return DUPLEX_UNKNOWN when link is down (bsc#1127371).
- cxgb4: Do not return EAGAIN when TCAM is full (bsc#1136345 jsc#SLE-4681).
- cxgb4: Enable hash filter with offload (bsc#1136345 jsc#SLE-4681).
- cxgb4: Enable outer UDP checksum offload for T6 (bsc#1136345 jsc#SLE-4681).
- cxgb4: Export sge_host_page_size to ulds (bsc#1127371).
- cxgb4: Fix error path in cxgb4_init_module (bsc#1136345 jsc#SLE-4681).
- cxgb4: fix the error path of cxgb4_uld_register() (bsc#1127371).
- cxgb4: free mac_hlist properly (bsc#1136345 jsc#SLE-4681).
- cxgb4: impose mandatory VLAN usage when non-zero TAG ID (bsc#1127371).
- cxgb4: kfree mhp after the debug print (bsc#1136345 jsc#SLE-4681).
- cxgb4: Mask out interrupts that are not enabled (bsc#1127175).
- cxgb4: move Tx/Rx free pages collection to common code (bsc#1127371).
- cxgb4: offload VLAN flows regardless of VLAN ethtype (bsc#1136345 jsc#SLE-4681).
- cxgb4: remove DEFINE_SIMPLE_DEBUGFS_FILE() (bsc#1136345 jsc#SLE-4681).
- cxgb4: remove redundant assignment to vlan_cmd.dropnovlan_fm (bsc#1127371).
- cxgb4: remove set but not used variables 'multitrc, speed' (bsc#1136345 jsc#SLE-4681).
- cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (bsc#1127371).
- cxgb4: remove the unneeded locks (bsc#1127371).
- cxgb4: Revert 'cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size' (bsc#1136345 jsc#SLE-4681).
- cxgb4: specify IQTYPE in fw_iq_cmd (bsc#1127371).
- cxgb4: Support ethtool private flags (bsc#1127371).
- cxgb4: TLS record offload enable (bsc#1136345 jsc#SLE-4681).
- cxgb4: Update 1.23.3.0 as the latest firmware supported (bsc#1136345 jsc#SLE-4681).
- cxgb4: update supported DCB version (bsc#1127371).
- cxgb4: use firmware API for validating filter spec (bsc#1136345 jsc#SLE-4681).
- cxgb4: use new fw interface to get the VIN and smt index (bsc#1127371).
- cxgb4vf: Call netif_carrier_off properly in pci_probe (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Enter debugging mode if FW is inaccessible (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Few more link management changes (bsc#1127374).
- cxgb4vf: fix memleak in mac_hlist initialization (bsc#1127374).
- cxgb4vf: free mac_hlist properly (bsc#1136345 jsc#SLE-4681).
- cxgb4vf: Prefix adapter flags with CXGB4VF (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Revert force link up behaviour (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Update port information in cxgb4vf_open() (bsc#1127374).
- dccp: do not use ipv6 header for ipv4 flow (networking-stable-19_03_28).
- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- device_cgroup: fix RCU imbalance in error case (bsc#1051510).
- devres: Align data[] to ARCH_KMALLOC_MINALIGN (bsc#1051510).
- dm: disable DISCARD if the underlying storage no longer supports it (bsc#1114638).
- dmaengine: axi-dmac: Do not check the number of frames for alignment (bsc#1051510).
- dmaengine: imx-dma: fix warning comparison of distinct pointer types (bsc#1051510).
- dmaengine: qcom_hidma: assign channel cookie correctly (bsc#1051510).
- dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid (bsc#1051510).
- dmaengine: tegra210-adma: Fix crash during probe (bsc#1111666).
- dmaengine: tegra210-dma: free dma controller in remove() (bsc#1051510).
- dmaengine: tegra: avoid overflow of byte tracking (bsc#1051510).
- documentation: Add MDS vulnerability documentation (bsc#1135642).
- documentation: perf: Add documentation for ThunderX2 PMU uncore driver ().
- drivers/perf: Add Cavium ThunderX2 SoC UNCORE PMU driver ().
- drivers: acpi: add dependency of EFI for arm64 (bsc#1117158).
- drivers: hv: vmbus: Offload the handling of channels to two workqueues (bsc#1130567).
- drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind() (bsc#1130567).
- drm/amd/display: extending AUX SW Timeout (bsc#1111666).
- drm/amd/display: fix cursor black issue (bsc#1111666).
- drm/amd/display: If one stream full updates, full update all planes (bsc#1111666).
- drm/amdgpu/gmc9: fix VM_L2_CNTL3 programming (bsc#1111666).
- drm/amdkfd: use init_mqd function to allocate object for hid_mqd (CI) (bsc#1111666).
- drm/bridge: adv7511: Fix low refresh rate selection (bsc#1051510).
- drm/doc: Drop 'content type' from the legacy kms property table (bsc#1111666).
- drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers (bsc#1051510).
- drm/etnaviv: lock MMU while dumping core (bsc#1113722)
- drm/exynos/mixer: fix MIXER shadow registry synchronisation code (bsc#1111666).
- drm/fb-helper: dpms_legacy(): Only set on connectors in use (bsc#1051510).
- drm/fb-helper: generic: Call drm_client_add() after setup is done (bsc#1111666).
- drm/i915/fbc: disable framebuffer compression on GeminiLake (bsc#1051510).
- drm/i915/gvt: add 0x4dfc to gen9 save-restore list (bsc#1113722)
- drm/i915/gvt: Add in context mmio 0x20D8 to gen9 mmio list (bsc#1113722)
- drm/i915/gvt: Add in context mmio 0x20D8 to gen9 mmio list (bsc#1113956)
- drm/i915/gvt: Annotate iomem usage (bsc#1051510).
- drm/i915/gvt: do not deliver a workload if its creation fails (bsc#1051510).
- drm/i915/gvt: do not let pin count of shadow mm go negative (bsc#1113722)
- drm/i915/gvt: do not let pin count of shadow mm go negative (bsc#1113956)
- drm/i915/gvt: do not let TRTTE and 0x4dfc write passthrough to hardware (bsc#1051510).
- drm/i915/gvt: Fix cmd length of VEB_DI_IECP (bsc#1113722)
- drm/i915/gvt: Fix incorrect mask of mmio 0x22028 in gen8/9 mmio list (bnc#1113722)
- drm/i915/gvt: Prevent use-after-free in ppgtt_free_all_spt() (bsc#1111666).
- drm/i915/gvt: refine ggtt range validation (bsc#1113722)
- drm/i915/gvt: Roundup fb-&gt;height into tile's height at calucation fb-&gt;size (bsc#1111666).
- drm/i915/gvt: Tiled Resources mmios are in-context mmios for gen9+ (bsc#1113722)
- drm/i915/icl: Whitelist GEN9_SLICE_COMMON_ECO_CHICKEN1 (bsc#1111666).
- drm/i915: Disable LP3 watermarks on all SNB machines (bsc#1051510).
- drm/i915: Disable tv output on i9x5gm (bsc#1086657, bsc#1133897).
- drm/i915: Downgrade Gen9 Plane WM latency error (bsc#1051510).
- drm/i915: Fix I915_EXEC_RING_MASK (bsc#1051510).
- drm/i915: Force 2*96 MHz cdclk on glk/cnl when audio power is enabled (bsc#1111666).
- drm/imx: do not skip DP channel disable for background plane (bsc#1051510).
- drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata() (bsc#1113722)
- drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata() (bsc#1113956)
- drm/mediatek: fix possible object reference leak (bsc#1051510).
- drm/meson: add size and alignment requirements for dumb buffers (bnc#1113722)
- drm/nouveau/bar/tu104: initial support (bsc#1133593).
- drm/nouveau/bar/tu106: initial support (bsc#1133593).
- drm/nouveau/bios/tu104: initial support (bsc#1133593).
- drm/nouveau/bios/tu106: initial support (bsc#1133593).
- drm/nouveau/bios: translate additional memory types (bsc#1133593).
- drm/nouveau/bios: translate usb-C connector type (bsc#1133593).
- drm/nouveau/bus/tu104: initial support (bsc#1133593).
- drm/nouveau/bus/tu106: initial support (bsc#1133593).
- drm/nouveau/ce/tu104: initial support (bsc#1133593).
- drm/nouveau/ce/tu106: initial support (bsc#1133593).
- drm/nouveau/core: increase maximum number of nvdec instances to 3 (bsc#1133593).
- drm/nouveau/core: recognise TU102 (bsc#1133593).
- drm/nouveau/core: recognise TU104 (bsc#1133593).
- drm/nouveau/core: recognise TU106 (bsc#1133593).
- drm/nouveau/core: support multiple nvdec instances (bsc#1133593).
- drm/nouveau/devinit/gm200-: export function to upload+execute PMU/PRE_OS (bsc#1133593).
- drm/nouveau/devinit/tu104: initial support (bsc#1133593).
- drm/nouveau/devinit/tu106: initial support (bsc#1133593).
- drm/nouveau/disp/gm200-: add scdc parameter setter (bsc#1133593).
- drm/nouveau/disp/gv100: fix name of window channels in debug output (bsc#1133593).
- drm/nouveau/disp/tu104: initial support (bsc#1133593).
- drm/nouveau/disp/tu106: initial support (bsc#1133593).
- drm/nouveau/disp: add a way to configure scrambling/tmds for hdmi 2.0 (bsc#1133593).
- drm/nouveau/disp: add support for setting scdc parameters for high modes (bsc#1133593).
- drm/nouveau/disp: keep track of high-speed state, program into clock (bsc#1133593).
- drm/nouveau/disp: take sink support into account for exposing 594mhz (bsc#1133593).
- drm/nouveau/dma/tu104: initial support (bsc#1133593).
- drm/nouveau/dma/tu106: initial support (bsc#1133593).
- drm/nouveau/drm/nouveau: Do not forget to label dp_aux devices (bsc#1133593).
- drm/nouveau/drm/nouveau: s/nouveau_backlight_exit/nouveau_backlight_fini/ (bsc#1133593).
- drm/nouveau/drm/nouveau: tegra: Call nouveau_drm_device_init() (bsc#1133593).
- drm/nouveau/fault/tu104: initial support (bsc#1133593).
- drm/nouveau/fault/tu106: initial support (bsc#1133593).
- drm/nouveau/fault: add explicit control over fault buffer interrupts (bsc#1133593).
- drm/nouveau/fault: remove manual mapping of fault buffers into BAR2 (bsc#1133593).
- drm/nouveau/fault: store get/put pri address in nvkm_fault_buffer (bsc#1133593).
- drm/nouveau/fb/tu104: initial support (bsc#1133593).
- drm/nouveau/fb/tu106: initial support (bsc#1133593).
- drm/nouveau/fifo/gf100-: call into BAR to reset BARs after MMU fault (bsc#1133593).
- drm/nouveau/fifo/gk104-: group pbdma functions together (bsc#1133593).
- drm/nouveau/fifo/gk104-: return channel instance in ctor args (bsc#1133593).
- drm/nouveau/fifo/gk104-: separate runlist building from committing to hw (bsc#1133593).
- drm/nouveau/fifo/gk104-: support enabling privileged ce functions (bsc#1133593).
- drm/nouveau/fifo/gk104-: virtualise pbdma enable function (bsc#1133593).
- drm/nouveau/fifo/gm200-: read pbdma count more directly (bsc#1133593).
- drm/nouveau/fifo/gv100: allocate method buffer (bsc#1133593).
- drm/nouveau/fifo/gv100: return work submission token in channel ctor args (bsc#1133593).
- drm/nouveau/fifo/tu104: initial support (bsc#1133593).
- drm/nouveau/fifo/tu106: initial support (bsc#1133593).
- drm/nouveau/fuse/tu104: initial support (bsc#1133593).
- drm/nouveau/fuse/tu106: initial support (bsc#1133593).
- drm/nouveau/gpio/tu104: initial support (bsc#1133593).
- drm/nouveau/gpio/tu106: initial support (bsc#1133593).
- drm/nouveau/i2c/tu104: initial support (bsc#1133593).
- drm/nouveau/i2c/tu106: initial support (bsc#1133593).
- drm/nouveau/i2c: Disable i2c bus access after -&gt;fini() (bsc#1113722)
- drm/nouveau/ibus/tu104: initial support (bsc#1133593).
- drm/nouveau/ibus/tu106: initial support (bsc#1133593).
- drm/nouveau/imem/nv50: support pinning objects in BAR2 and returning address (bsc#1133593).
- drm/nouveau/imem/tu104: initial support (bsc#1133593).
- drm/nouveau/imem/tu106: initial support (bsc#1133593).
- drm/nouveau/kms/nv50-: allow more flexibility with lut formats (bsc#1133593).
- drm/nouveau/kms/tu104: initial support (bsc#1133593).
- drm/nouveau/ltc/tu104: initial support (bsc#1133593).
- drm/nouveau/ltc/tu106: initial support (bsc#1133593).
- drm/nouveau/mc/tu104: initial support (bsc#1133593).
- drm/nouveau/mc/tu106: initial support (bsc#1133593).
- drm/nouveau/mmu/tu104: initial support (bsc#1133593).
- drm/nouveau/mmu/tu106: initial support (bsc#1133593).
- drm/nouveau/mmu: add more general vmm free/node handling functions (bsc#1133593).
- drm/nouveau/pci/tu104: initial support (bsc#1133593).
- drm/nouveau/pci/tu106: initial support (bsc#1133593).
- drm/nouveau/pmu/tu104: initial support (bsc#1133593).
- drm/nouveau/pmu/tu106: initial support (bsc#1133593).
- drm/nouveau/therm/tu104: initial support (bsc#1133593).
- drm/nouveau/therm/tu106: initial support (bsc#1133593).
- drm/nouveau/tmr/tu104: initial support (bsc#1133593).
- drm/nouveau/tmr/tu106: initial support (bsc#1133593).
- drm/nouveau/top/tu104: initial support (bsc#1133593).
- drm/nouveau/top/tu106: initial support (bsc#1133593).
- drm/nouveau/volt/gf117: fix speedo readout register (bsc#1051510).
- drm/nouveau: add DisplayPort CEC-Tunneling-over-AUX support (bsc#1133593).
- drm/nouveau: Add NV_PRINTK_ONCE and variants (bsc#1133593).
- drm/nouveau: Add size to vbios.rom file in debugfs (bsc#1133593).
- drm/nouveau: Add strap_peek to debugfs (bsc#1133593).
- drm/nouveau: Cleanup indenting in nouveau_backlight.c (bsc#1133593).
- drm/nouveau: Fix potential memory leak in nouveau_drm_load() (bsc#1133593).
- drm/nouveau: Move backlight device into nouveau_connector (bsc#1133593).
- drm/nouveau: Refactor nvXX_backlight_init() (bsc#1133593).
- drm/nouveau: register backlight on pascal and newer (bsc#1133593).
- drm/nouveau: remove left-over struct member (bsc#1133593).
- drm/nouveau: Remove unecessary dma_fence_ops (bsc#1133593).
- drm/nouveau: Start using new drm_dev initialization helpers (bsc#1133593).
- drm/nouveau: Stop using drm_crtc_force_disable (bsc#1051510).
- drm/omap: hdmi4_cec: Fix CEC clock handling for PM (bsc#1111666).
- drm/panel: panel-innolux: set display off in innolux_panel_unprepare (bsc#1111666).
- drm/pl111: Initialize clock spinlock early (bsc#1111666).
- drm/rockchip: fix for mailbox read validation (bsc#1051510).
- drm/rockchip: fix for mailbox read validation (bsc#1111666).
- drm/rockchip: shutdown drm subsystem on shutdown (bsc#1051510).
- drm/rockchip: vop: reset scale mode when win is disabled (bsc#1113722)
- drm/sun4i: Add missing drm_atomic_helper_shutdown at driver unbind (bsc#1113722)
- drm/sun4i: Fix component unbinding and component master deletion (bsc#1113722)
- drm/sun4i: Fix sun8i HDMI PHY clock initialization (bsc#1111666).
- drm/sun4i: Fix sun8i HDMI PHY configuration for &gt; 148.5 MHz (bsc#1111666).
- drm/sun4i: rgb: Change the pixel clock validation check (bnc#1113722)
- drm/sun4i: Set device driver data at bind time for use in unbind (bsc#1113722)
- drm/sun4i: tcon top: Fix NULL/invalid pointer dereference in sun8i_tcon_top_un/bind (bsc#1111666).
- drm/sun4i: Unbind components before releasing DRM and memory (bsc#1113722)
- drm/tegra: gem: Fix CPU-cache maintenance for BO's allocated using get_pages() (bsc#1111666).
- drm/tegra: hub: Fix dereference before check (bsc#1111666).
- drm/ttm: Fix bo_global and mem_global kfree error (bsc#1111666).
- drm/ttm: fix out-of-bounds read in ttm_put_pages() v2 (bsc#1111666).
- drm/ttm: Remove warning about inconsistent mapping information (bnc#1131488)
- drm/udl: add a release method and delay modeset teardown (bsc#1085536)
- drm/vc4: Fix memory leak during gpu reset. (bsc#1113722)
- drm/vmwgfx: Do not send drm sysfs hotplug events on initial master set (bsc#1051510).
- drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read (bsc#1051510).
- drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() (bsc#1113722)
- drm/vmwgfx: Remove set but not used variable 'restart' (bsc#1111666).
- drm: Auto-set allow_fb_modifiers when given modifiers at plane init (bsc#1051510).
- drm: bridge: dw-hdmi: Fix overflow workaround for Rockchip SoCs (bsc#1113722)
- drm: rcar-du: Fix rcar_du_crtc structure documentation (bsc#1111666).
- dsa: mv88e6xxx: Ensure all pending interrupts are handled prior to exit (networking-stable-19_02_20).
- dt-bindings: clock: r8a7795: Remove CSIREF clock (bsc#1120902).
- dt-bindings: clock: r8a7796: Remove CSIREF clock (bsc#1120902).
- dt-bindings: net: Add binding for the external clock for TI WiLink (bsc#1085535).
- dt-bindings: net: Fix a typo in the phy-mode list for ethernet bindings (bsc#1129770).
- dt-bindings: rtc: sun6i-rtc: Fix register range in example (bsc#1120902).
- dwc2: gadget: Fix completed transfer size calculation in DDMA (bsc#1051510).
- e1000e: Disable runtime PM on CNP+ (jsc#SLE-4804).
- e1000e: Exclude device from suspend direct complete optimization (jsc#SLE-4804).
- e1000e: Fix -Wformat-truncation warnings (bsc#1051510).
- e1000e: fix a missing check for return value (jsc#SLE-4804).
- e1000e: fix cyclic resets at link up with active tx (bsc#1051510).
- edac, amd64: Add Hygon Dhyana support ().
- efi/arm: Defer persistent reservations until after paging_init() (bsc#1117158).
- efi/arm: Do not mark acpi reclaim memory as MEMBLOCK_NOMAP (bsc#1117158 bsc#1115688 bsc#1120566).
- efi/arm: libstub: add a root memreserve config table (bsc#1117158).
- efi/arm: map UEFI memory map even w/o runtime services enabled (bsc#1117158).
- efi/arm: preserve early mapping of UEFI memory map longer for BGRT (bsc#1117158).
- efi/arm: Revert 'Defer persistent reservations until after paging_init()' (bsc#1117158).
- efi/arm: Revert deferred unmap of early memmap mapping (bsc#1117158).
- efi: add API to reserve memory persistently across kexec reboot (bsc#1117158).
- efi: honour memory reservations passed via a linux specific config table (bsc#1117158).
- efi: Permit calling efi_mem_reserve_persistent() from atomic context (bsc#1117158).
- efi: Permit multiple entries in persistent memreserve data structure (bsc#1117158).
- efi: Prevent GICv3 WARN() by mapping the memreserve table before first use (bsc#1117158).
- efi: Reduce the amount of memblock reservations for persistent allocations (bsc#1117158).
- ext4: actually request zeroing of inode table after grow (bsc#1135315).
- ext4: avoid panic during forced reboot due to aborted journal (bsc#1126356).
- ext4: cleanup bh release code in ext4_ind_remove_space() (bsc#1131851).
- ext4: Do not warn when enabling DAX (bsc#1132894).
- ext4: fix data corruption caused by overlapping unaligned and aligned IO (bsc#1136428).
- ext4: fix ext4_show_options for file systems w/o journal (bsc#1135316).
- ext4: fix use-after-free race with debug_want_extra_isize (bsc#1135314).
- ext4: make sanity check in mballoc more strict (bsc#1136439).
- ext4: wait for outstanding dio during truncate in nojournal mode (bsc#1136438).
- fbdev: fbmem: fix memory access if logo is bigger than the screen (bsc#1051510).
- fbdev: fix divide error in fb_var_to_videomode (bsc#1113722)
- fbdev: fix WARNING in __alloc_pages_nodemask bug (bsc#1113722)
- firmware: efi: factor out mem_reserve (bsc#1117158 bsc#1134671).
- fix cgroup_do_mount() handling of failure exits (bsc#1133095).
- fix rtnh_ok() (git-fixes).
- fm10k: Fix a potential NULL pointer dereference (bsc#1051510).
- fm10k: TRIVIAL cleanup of extra spacing in function comment (jsc#SLE-4796).
- fm10k: use struct_size() in kzalloc() (jsc#SLE-4796).
- fs/nfs: Fix nfs_parse_devname to not modify it's argument (git-fixes).
- fs/sync.c: sync_file_range(2) may use WB_SYNC_ALL writeback (bsc#1136432).
- fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount (bsc#1136435).
- fs: avoid fdput() after failed fdget() in vfs_dedupe_file_range() (bsc#1132384, bsc#1132219).
- ftrace/x86_64: Emulate call function while updating in breakpoint handler (bsc#1099658).
- futex: Cure exit race (bsc#1050549).
- futex: Ensure that futex address is aligned in handle_futex_death() (bsc#1050549).
- futex: Handle early deadlock return correctly (bsc#1050549).
- genetlink: Fix a memory leak on error path (networking-stable-19_03_28).
- ghes, EDAC: Fix ghes_edac registration (bsc#1133176).
- gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input (bsc#1051510).
- gpio: aspeed: fix a potential NULL pointer dereference (bsc#1051510).
- gpio: gpio-omap: fix level interrupt idling (bsc#1051510).
- gpio: of: Fix of_gpiochip_add() error path (bsc#1051510).
- gpu: ipu-v3: dp: fix CSC handling (bsc#1051510).
- gre6: use log_ecn_error module parameter in ip6_tnl_rcv() (git-fixes).
- hid: core: move Usage Page concatenation to Main item (bsc#1093389).
- hid: debug: fix race condition with between rdesc_show() and device removal (bsc#1051510).
- hid: i2c-hid: Ignore input report if there's no data present on Elan touchpanels (bsc#1133486).
- hid: input: add mapping for 'Toggle Display' key (bsc#1051510).
- hid: input: add mapping for Assistant key (bsc#1051510).
- hid: input: add mapping for Expose/Overview key (bsc#1051510).
- hid: input: add mapping for keyboard Brightness Up/Down/Toggle keys (bsc#1051510).
- hid: input: fix a4tech horizontal wheel custom usage (bsc#1137429).
- hid: intel-ish-hid: avoid binding wrong ishtp_cl_device (bsc#1051510).
- hid: intel-ish: ipc: handle PIMR before ish_wakeup also clear PISR busy_clear bit (bsc#1051510).
- hid: logitech: check the return value of create_singlethread_workqueue (bsc#1051510).
- hv_netvsc: Fix IP header checksum for coalesced packets (networking-stable-19_03_07).
- hwmon: (f71805f) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (pc87427) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (vt1211) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwrng: virtio - Avoid repeated init of completion (bsc#1051510).
- i2c: imx: correct the method of getting private data in notifier_call (bsc#1111666).
- i2c: Make i2c_unregister_device() NULL-aware (bsc#1108193).
- i2c: synquacer: fix enumeration of slave devices (bsc#1111666).
- i40e: Able to add up to 16 MAC filters on an untrusted VF (jsc#SLE-4797).
- i40e: add new pci id for X710/XXV710 N3000 cards (jsc#SLE-4797).
- i40e: add num_vectors checker in iwarp handler (jsc#SLE-4797).
- i40e: Add support FEC configuration for Fortville 25G (jsc#SLE-4797).
- i40e: Add support for X710 B/P and SFP+ cards (jsc#SLE-4797).
- i40e: add tracking of AF_XDP ZC state for each queue pair (jsc#SLE-4797).
- i40e: change behavior on PF in response to MDD event (jsc#SLE-4797).
- i40e: Change unmatched function types (jsc#SLE-4797).
- i40e: Changed maximum supported FW API version to 1.8 (jsc#SLE-4797).
- i40e: check queue pairs num in config queues handler (jsc#SLE-4797).
- i40e: clean up several indentation issues (jsc#SLE-4797).
- i40e: do not allow changes to HW VLAN stripping on active port VLANs (jsc#SLE-4797).
- i40e: Fix for 10G ports LED not blinking (jsc#SLE-4797).
- i40e: Fix for allowing too many MDD events on VF (jsc#SLE-4797).
- i40e: fix i40e_ptp_adjtime when given a negative delta (jsc#SLE-4797).
- i40e: Fix misleading error message (jsc#SLE-4797).
- i40e: fix misleading message about promisc setting on un-trusted VF (jsc#SLE-4797).
- i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c (jsc#SLE-4797).
- i40e: Fix the typo in adding 40GE KR4 mode (jsc#SLE-4797).
- i40e: Further implementation of LLDP (jsc#SLE-4797).
- i40e: Implement DDP support in i40e driver (jsc#SLE-4797).
- i40e: increase indentation (jsc#SLE-4797).
- i40e: Introduce recovery mode support (jsc#SLE-4797).
- i40e: Limiting RSS queues to CPUs (jsc#SLE-4797).
- i40e: Memory leak in i40e_config_iwarp_qvlist (jsc#SLE-4797).
- i40e: missing input validation on VF message handling by the PF (jsc#SLE-4797).
- i40e: move i40e_xsk_umem function (jsc#SLE-4797).
- i40e: print pci vendor and device ID during probe (jsc#SLE-4797).
- i40e: Queues are reserved despite 'Invalid argument' error (jsc#SLE-4797).
- i40e: remove debugfs tx_timeout support (jsc#SLE-4797).
- i40e: remove error msg when vf with port vlan tries to remove vlan 0 (jsc#SLE-4797).
- i40e: Remove misleading messages for untrusted VF (jsc#SLE-4797).
- i40e: remove out-of-range comparisons in i40e_validate_cloud_filter (jsc#SLE-4797).
- i40e: Remove umem from VSI (jsc#SLE-4797).
- i40e: Report advertised link modes on 40GBase_LR4, CR4 and fibre (jsc#SLE-4797).
- i40e: Report advertised link modes on 40GBASE_SR4 (jsc#SLE-4797).
- i40e: Revert ShadowRAM checksum calculation change (jsc#SLE-4797).
- i40e: save PTP time before a device reset (jsc#SLE-4797).
- i40e: Setting VF to VLAN 0 requires restart (jsc#SLE-4797).
- i40e: ShadowRAM checksum calculation change (jsc#SLE-4797).
- i40e: The driver now prints the API version in error message (jsc#SLE-4797).
- i40e: Use struct_size() in kzalloc() (jsc#SLE-4797).
- i40e: VF's promiscuous attribute is not kept (jsc#SLE-4797).
- i40e: Wrong truncation from u16 to u8 (jsc#SLE-4797).
- i40iw: Avoid panic when handling the inetdev event (jsc#SLE-4793).
- i40iw: remove support for ib_get_vector_affinity (jsc#SLE-4793).
- i40iw: remove use of VLAN_TAG_PRESENT (jsc#SLE-4793).
- ib/hfi1: Add debugfs to control expansion ROM write protect (jsc#SLE-4925).
- ib/hfi1: Add selected Rcv counters (jsc#SLE-4925).
- ib/hfi1: Close VNIC sdma_progress sleep window (jsc#SLE-4925).
- ib/hfi1: Consider LMC in 16B/bypass ingress packet check (jsc#SLE-4925).
- ib/hfi1: Correctly process FECN and BECN in packets (jsc#SLE-4925).
- ib/hfi1: Dump pio info for non-user send contexts (jsc#SLE-4925).
- ib/hfi1: Eliminate opcode tests on mr deref (jsc#SLE-4925).
- ib/hfi1: Failed to drain send queue when QP is put into error state (jsc#SLE-4925).
- ib/hfi1: Fix the allocation of RSM table (jsc#SLE-4925).
- ib/hfi1: Fix two format strings (jsc#SLE-4925).
- ib/hfi1: Fix WQ_MEM_RECLAIM warning (jsc#SLE-4925).
- ib/hfi1: Ignore LNI errors before DC8051 transitions to Polling state (jsc#SLE-4925).
- ib/hfi1: Incorrect sizing of sge for PIO will OOPs (jsc#SLE-4925).
- ib/hfi1: Limit VNIC use of SDMA engines to the available count (jsc#SLE-4925).
- ib/hfi1: Reduce lock contention on iowait_lock for sdma and pio (jsc#SLE-4925).
- ib/hfi1: Remove overly conservative VM_EXEC flag check (jsc#SLE-4925).
- ib/hfi1: Remove WARN_ON when freeing expected receive groups (jsc#SLE-4925).
- ib/hfi1: Unreserve a reserved request when it is completed (jsc#SLE-4925).
- ib/hw: Remove unneeded semicolons (bsc#1136456 jsc#SLE-4689).
- ib/rdmavt: Add wc_flags and wc_immdata to cq entry trace (jsc#SLE-4925).
- ib/rdmavt: Fix frwr memory registration (jsc#SLE-4925).
- ib/rdmavt: Fix loopback send with invalidate ordering (jsc#SLE-4925).
- ib/{rdmavt, hfi1): Miscellaneous comment fixes (jsc#SLE-4925).
- ibmvnic: Add device identification to requested IRQs (bsc#1137739).
- ibmvnic: Do not close unopened driver during reset (bsc#1137752).
- ibmvnic: Enable GRO (bsc#1132227).
- ibmvnic: Fix completion structure initialization (bsc#1131659).
- ibmvnic: Fix netdev feature clobbering during a reset (bsc#1132227).
- ibmvnic: Fix unchecked return codes of memory allocations (bsc#1137752).
- ibmvnic: Refresh device multicast list after reset (bsc#1137752).
- ibmvnic: remove set but not used variable 'netdev' (bsc#1137739).
- ice : Ensure only valid bits are set in ice_aq_set_phy_cfg (jsc#SLE-4803).
- ice: Add 52 byte RSS hash key support (jsc#SLE-4803).
- ice: add and use new ice_for_each_traffic_class() macro (jsc#SLE-4803).
- ice: Add code for DCB initialization part 1/4 (jsc#SLE-4803).
- ice: Add code for DCB initialization part 2/4 (jsc#SLE-4803).
- ice: Add code for DCB initialization part 3/4 (jsc#SLE-4803).
- ice: Add code for DCB initialization part 4/4 (jsc#SLE-4803).
- ice: Add code for DCB rebuild (jsc#SLE-4803).
- ice: Add code to control FW LLDP and DCBX (jsc#SLE-4803).
- ice: Add code to get DCB related statistics (jsc#SLE-4803).
- ice: Add code to process LLDP Mib change events (jsc#SLE-4803).
- ice: add const qualifier to mac_addr parameter (jsc#SLE-4803).
- ice: Add ethtool private flag to make forcing link down optional (jsc#SLE-4803).
- ice: Add ethtool set_phys_id handler (jsc#SLE-4803).
- ice: Add function to program ethertype based filter rule on VSIs (jsc#SLE-4803).
- ice: Add missing case in print_link_msg for printing flow control (jsc#SLE-4803).
- ice: Add missing PHY type to link settings (jsc#SLE-4803).
- ice: Add more validation in ice_vc_cfg_irq_map_msg (jsc#SLE-4803).
- ice: Add priority information into VLAN header (jsc#SLE-4803).
- ice: Add reg_idx variable in ice_q_vector structure (jsc#SLE-4803).
- ice: Add support for adaptive interrupt moderation (jsc#SLE-4803).
- ice: Add support for new PHY types (jsc#SLE-4803).
- ice: Add support for PF/VF promiscuous mode (jsc#SLE-4803).
- ice: Allow for software timestamping (jsc#SLE-4803).
- ice: Always free/allocate q_vectors (jsc#SLE-4803).
- ice: Audit hotpath structures with pahole (jsc#SLE-4803).
- ice: avoid multiple unnecessary de-references in probe (jsc#SLE-4803).
- ice: Bump driver version (jsc#SLE-4803).
- ice: Bump version (jsc#SLE-4803).
- ice: Calculate ITR increment based on direct calculation (jsc#SLE-4803).
- ice: change VF VSI tc info along with num_queues (jsc#SLE-4803).
- ice: check for a leaf node presence (jsc#SLE-4803).
- ice: clear VF ARQLEN register on reset (jsc#SLE-4803).
- ice: code cleanup in ice_sched.c (jsc#SLE-4803).
- ice: configure GLINT_ITR to always have an ITR gran of 2 (jsc#SLE-4803).
- ice: Configure RSS LUT and HASH KEY in rebuild path (jsc#SLE-4803).
- ice: Create a generic name for the ice_rx_flg64_bits structure (jsc#SLE-4803).
- ice: Create framework for VSI queue context (jsc#SLE-4803).
- ice: Determine descriptor count and ring size based on PAGE_SIZE (jsc#SLE-4803).
- ice: Disable sniffing VF traffic on PF (jsc#SLE-4803).
- ice: Do not bail out when filter already exists (jsc#SLE-4803).
- ice: Do not let VF know that it is untrusted (jsc#SLE-4803).
- ice: Do not remove VLAN filters that were never programmed (jsc#SLE-4803).
- ice: Do not set LB_EN for prune switch rules (jsc#SLE-4803).
- ice: do not spam VFs with link messages (jsc#SLE-4803).
- ice: Do not unnecessarily initialize local variable (jsc#SLE-4803).
- ice: Enable LAN_EN for the right recipes (jsc#SLE-4803).
- ice: Enable link events over the ARQ (jsc#SLE-4803).
- ice: Enable MAC anti-spoof by default (jsc#SLE-4803).
- ice: enable VF admin queue interrupts (jsc#SLE-4803).
- ice: Fix added in VSI supported nodes calc (jsc#SLE-4803).
- ice: Fix broadcast traffic in port VLAN mode (jsc#SLE-4803).
- ice: Fix for adaptive interrupt moderation (jsc#SLE-4803).
- ice: Fix for allowing too many MDD events on VF (jsc#SLE-4803).
- ice: Fix for FC get rx/tx pause params (jsc#SLE-4803).
- ice: fix ice_remove_rule_internal vsi_list handling (jsc#SLE-4803).
- ice: Fix incorrect use of abbreviations (jsc#SLE-4803).
- ice: Fix issue reclaiming resources back to the pool after reset (jsc#SLE-4803).
- ice: Fix issue reconfiguring VF queues (jsc#SLE-4803).
- ice: Fix issue when adding more than allowed VLANs (jsc#SLE-4803).
- ice: fix issue where host reboots on unload when iommu=on (jsc#SLE-4803).
- ice: Fix issue with VF reset and multiple VFs support on PFs (jsc#SLE-4803).
- ice: fix numeric overflow warning (jsc#SLE-4803).
- ice: fix some function prototype and signature style issues (jsc#SLE-4803).
- ice: fix stack hogs from struct ice_vsi_ctx structures (jsc#SLE-4803).
- ice: fix static analysis warnings (jsc#SLE-4803).
- ice: Fix the calculation of ICE_MAX_MTU (jsc#SLE-4803).
- ice: fix the divide by zero issue (jsc#SLE-4803).
- ice: Fix typos in code comments (jsc#SLE-4803).
- ice: flush Tx pipe on disable queue timeout (jsc#SLE-4803).
- ice: Gather the rx buf clean-up logic for better reuse (jsc#SLE-4803).
- ice: Get resources per function (jsc#SLE-4803).
- ice: Get rid of ice_pull_tail (jsc#SLE-4803).
- ice: Get VF VSI instances directly via PF (jsc#SLE-4803).
- ice: Implement flow to reset VFs with PFR and other resets (jsc#SLE-4803).
- ice: Implement getting and setting ethtool coalesce (jsc#SLE-4803).
- ice: Implement pci_error_handler ops (jsc#SLE-4803).
- ice: Implement support for normal get_eeprom[_len] ethtool ops (jsc#SLE-4803).
- ice: Limit the ice_add_rx_frag to frag addition (jsc#SLE-4803).
- ice: map Rx buffer pages with DMA attributes (jsc#SLE-4803).
- ice: Move aggregator list into ice_hw instance (jsc#SLE-4803).
- ice: Offload SCTP checksum (jsc#SLE-4803).
- ice: only use the VF for ICE_VSI_VF in ice_vsi_release (jsc#SLE-4803).
- ice: Preserve VLAN Rx stripping settings (jsc#SLE-4803).
- ice: Prevent unintended multiple chain resets (jsc#SLE-4803).
- ice: Pull out page reuse checks onto separate function (jsc#SLE-4803).
- ice: Put __ICE_PREPARED_FOR_RESET check in ice_prepare_for_reset (jsc#SLE-4803).
- ice: Reduce scope of variable in ice_vsi_cfg_rxqs (jsc#SLE-4803).
- ice: Refactor a few Tx scheduler functions (jsc#SLE-4803).
- ice: Refactor getting/setting coalesce (jsc#SLE-4803).
- ice: Refactor link event flow (jsc#SLE-4803).
- ice: Remove '2 BITS' comment (jsc#SLE-4803).
- ice: Remove __always_unused attribute (jsc#SLE-4803).
- ice: remove redundant variable and if condition (jsc#SLE-4803).
- ice: Remove runtime change of PFINT_OICR_ENA register (jsc#SLE-4803).
- ice: Remove unnecessary braces (jsc#SLE-4803).
- ice: Remove unnecessary newlines from log messages (jsc#SLE-4803).
- ice: Remove unnecessary wait when disabling/enabling Rx queues (jsc#SLE-4803).
- ice: Remove unused function prototype (jsc#SLE-4803).
- ice: Remove unused function prototype (jsc#SLE-4803).
- ice: Remove unused vsi_id field (jsc#SLE-4803).
- ice: Reset all VFs with VFLR during SR-IOV init flow (jsc#SLE-4803).
- ice: Resolve static analysis reported issue (jsc#SLE-4803).
- ice: Restore VLAN switch rule if port VLAN existed before (jsc#SLE-4803).
- ice: Retrieve rx_buf in separate function (jsc#SLE-4803).
- ice: Return configuration error without queue to disable (jsc#SLE-4803).
- ice: Rework queue management code for reuse (jsc#SLE-4803).
- ice: Separate if conditions for ice_set_features() (jsc#SLE-4803).
- ice: Set LAN_EN for all directional rules (jsc#SLE-4803).
- ice: Set physical link up/down when an interface is set up/down (jsc#SLE-4803).
- ice: sizeof(type&gt;) should be avoided (jsc#SLE-4803).
- ice: Suppress false-positive style issues reported by static analyzer (jsc#SLE-4803).
- ice: use absolute vector ID for VFs (jsc#SLE-4803).
- ice: Use bitfields where possible (jsc#SLE-4803).
- ice: Use dev_err when ice_cfg_vsi_lan fails (jsc#SLE-4803).
- ice: Use ice_for_each_q_vector macro where possible (jsc#SLE-4803).
- ice: use ice_for_each_vsi macro when possible (jsc#SLE-4803).
- ice: use irq_num var in ice_vsi_req_irq_msix (jsc#SLE-4803).
- ice: Use more efficient structures (jsc#SLE-4803).
- ice: Use pf instead of vsi-back (jsc#SLE-4803).
- ice: use virt channel status codes (jsc#SLE-4803).
- ice: Validate ring existence and its q_vector per VSI (jsc#SLE-4803).
- igb: Bump version number (jsc#SLE-4798).
- igb: Exclude device from suspend direct complete optimization (jsc#SLE-4798).
- igb: fix various indentation issues (jsc#SLE-4798).
- igb: Fix WARN_ONCE on runtime suspend (jsc#SLE-4798).
- igb: use struct_size() helper (jsc#SLE-4798).
- igc: Add ethtool support (jsc#SLE-4799).
- igc: Add multiple receive queues control supporting (jsc#SLE-4799).
- igc: Add support for statistics (jsc#SLE-4799).
- igc: Add support for the ntuple feature (jsc#SLE-4799).
- igc: Extend the ethtool supporting (jsc#SLE-4799).
- igc: Fix code redundancy (jsc#SLE-4799).
- igc: Fix the typo in igc_base.h header definition (jsc#SLE-4799).
- igc: Remove the 'igc_get_phy_id_base' method (jsc#SLE-4799).
- igc: Remove the 'igc_read_mac_addr_base' method (jsc#SLE-4799).
- igc: Remove unneeded code (jsc#SLE-4799).
- igc: Remove unneeded hw_dbg prints (jsc#SLE-4799).
- igc: Remove unreachable code from igc_phy.c file (jsc#SLE-4799).
- igc: Remove unused code (jsc#SLE-4799).
- igc: Use struct_size() helper (jsc#SLE-4799).
- igmp: fix incorrect unsolicit report count when join group (git-fixes).
- iio/gyro/bmg160: Use millidegrees for temperature scale (bsc#1051510).
- iio: ad_sigma_delta: select channel when reading register (bsc#1051510).
- iio: adc: at91: disable adc channel interrupt in timeout case (bsc#1051510).
- iio: adc: fix warning in Qualcomm PM8xxx HK/XOADC driver (bsc#1051510).
- iio: adc: xilinx: fix potential use-after-free on remove (bsc#1051510).
- iio: core: fix a possible circular locking dependency (bsc#1051510).
- iio: cros_ec: Fix the maths for gyro scale calculation (bsc#1051510).
- iio: dac: mcp4725: add missing powerdown bits in store eeprom (bsc#1051510).
- iio: Fix scan mask selection (bsc#1051510).
- iio: gyro: mpu3050: fix chip ID reading (bsc#1051510).
- include/linux/bitops.h: introduce BITS_PER_TYPE (bsc#1136345 jsc#SLE-4681).
- indirect call wrappers: helpers to speed-up indirect calls of builtin (bsc#1124503).
- inetpeer: fix uninit-value in inet_getpeer (git-fixes).
- infiniband/qedr: Potential null ptr dereference of qp (bsc#1136456 jsc#SLE-4689).
- infiniband: hfi1: drop crazy DEBUGFS_SEQ_FILE_CREATE() macro (jsc#SLE-4925).
- infiniband: hfi1: no need to check return value of debugfs_create functions (jsc#SLE-4925).
- input: elan_i2c - add hardware ID for multiple Lenovo laptops (bsc#1051510).
- input: introduce KEY_ASSISTANT (bsc#1051510).
- input: snvs_pwrkey - initialize necessary driver data before enabling IRQ (bsc#1051510).
- input: synaptics-rmi4 - fix possible double free (bsc#1051510).
- input: synaptics-rmi4 - write config register values to the right offset (bsc#1051510).
- intel: correct return from set features callback (jsc#SLE-4795).
- intel_idle: add support for Jacobsville (jsc#SLE-5394).
- intel_th: msu: Fix single mode with IOMMU (bsc#1051510).
- intel_th: pci: Add Comet Lake support (bsc#1051510).
- io: accel: kxcjk1013: restore the range after resume (bsc#1051510).
- iommu/amd: Set exclusion range correctly (bsc#1130425).
- iommu/arm-smmu-v3: Abort all transactions if SMMU is enabled in kdump kernel (bsc#1117158).
- iommu/arm-smmu-v3: Do not disable SMMU in kdump kernel (bsc#1117158 bsc#1134671).
- iommu/vt-d: Do not request page request irq under dmar_global_lock (bsc#1135006).
- iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU (bsc#1135007).
- iommu/vt-d: Set intel_iommu_gfx_mapped correctly (bsc#1135008).
- ip6_tunnel: collect_md xmit: Use ip_tunnel_key's provided src address (git-fixes).
- ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type (networking-stable-19_04_10).
- ip_gre: fix parsing gre header in ipgre_err (git-fixes).
- ip_tunnel: Fix name string concatenate in __ip_tunnel_create() (git-fixes).
- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- ipmi: Fix I2C client removal in the SSIF driver (bsc#1108193).
- ipmi: fix sleep-in-atomic in free_user at cleanup SRCU user-&gt;release_barrier (bsc#1111666).
- ipmi: Prevent use-after-free in deliver_response (bsc#1111666).
- ipmi:ssif: compare block number correctly for multi-part return messages (bsc#1051510).
- ipmi_ssif: Remove duplicate NULL check (bsc#1108193).
- ipv4: add sanity checks in ipv4_link_failure() (git-fixes).
- ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled (git-fixes).
- ipv4: ensure rcu_read_lock() in ipv4_link_failure() (networking-stable-19_04_19).
- ipv4: ip_do_fragment: Preserve skb_iif during fragmentation (networking-stable-19_05_04).
- ipv4: recompile ip options in ipv4_link_failure (networking-stable-19_04_19).
- ipv4: Return error for RTA_VIA attribute (networking-stable-19_03_07).
- ipv4: set the tcp_min_rtt_wlen range from 0 to one day (networking-stable-19_04_30).
- ipv6/flowlabel: wait rcu grace period before put_pid() (git-fixes).
- ipv6: fix cleanup ordering for ip6_mr failure (git-fixes).
- ipv6: fix cleanup ordering for pingv6 registration (git-fixes).
- ipv6: Fix dangling pointer when ipv6 fragment (git-fixes).
- ipv6: invert flowlabel sharing check in process and user mode (git-fixes).
- ipv6: mcast: fix unsolicited report interval after receiving querys (git-fixes).
- ipv6: propagate genlmsg_reply return code (networking-stable-19_02_24).
- ipv6: Return error for RTA_VIA attribute (networking-stable-19_03_07).
- ipv6: sit: reset ip header pointer in ipip6_rcv (git-fixes).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route (bsc#1051510).
- ipvlan: disallow userns cap_net_admin to change global mode/flags (networking-stable-19_03_15).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf (git-fixes).
- ipvs: fix buffer overflow with sync daemon and service (git-fixes).
- ipvs: fix check on xmit to non-local addresses (git-fixes).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest() (bsc#1051510).
- ipvs: fix rtnl_lock lockups caused by start_sync_thread (git-fixes).
- ipvs: Fix signed integer overflow when setsockopt timeout (bsc#1051510).
- ipvs: fix stats update from local clients (git-fixes).
- ipvs: remove IPS_NAT_MASK check to fix passive FTP (git-fixes).
- iw_cxgb*: kzalloc the iwcm verbs struct (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: Check for send WR also while posting write with completion WR (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: complete the cached SRQ buffers (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: cq/qp mask depends on bar2 pages in a host page (bsc#1127371).
- iw_cxgb4: Fix qpid leak (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: fix srqidx leak during connection abort (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: Make function read_tcb() static (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- iw_cxgb4: use listening ep tos when accepting new connections (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: use tos when finding ipv6 routes (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: use tos when importing the endpoint (bsc#1136348 jsc#SLE-4684).
- iwiwifi: fix bad monitor buffer register addresses (bsc#1129770).
- iwlwifi: fix driver operation for 5350 (bsc#1111666).
- iwlwifi: fix send hcmd timeout recovery flow (bsc#1129770).
- ixgbe: fix mdio bus registration (jsc#SLE-4795).
- ixgbe: fix older devices that do not support IXGBE_MRQC_L3L4TXSWEN (jsc#SLE-4795).
- ixgbe: register a mdiobus (jsc#SLE-4795).
- ixgbe: remove magic constant in ixgbe_reset_hw_82599() (jsc#SLE-4795).
- ixgbe: use mii_bus to handle MII related ioctls (jsc#SLE-4795).
- ixgbe: Use struct_size() helper (jsc#SLE-4795).
- jbd2: check superblock mapped prior to committing (bsc#1136430).
- kabi i40e ignore include (jsc#SLE-4797).
- kabi protect struct iw_cm_id (bsc#1136348 jsc#SLE-4684).
- kabi protect struct vf_info (bsc#1136347 jsc#SLE-4683).
- kABI workaround for removed usb_interface.pm_usage_cnt field (bsc#1051510).
- kABI workaround for snd_seq_kernel_client_enqueue() API changes (bsc#1051510).
- kabi/severities: exclude hns3 symbols (bsc#1134948)
- kabi/severities: exclude qed* symbols (bsc#1136461)
- kabi/severities: missed hns roce module
- kabi: arm64: cpuhotplug: Reuse other arch's cpuhp_state ().
- kabi: drop LINUX_Mib_TCPWQUEUETOOBIG snmp counter (bsc#1137586).
- kabi: implement map_lookup_elem_sys_only in another way (bsc#1083647).
- kabi: move sysctl_tcp_min_snd_mss to preserve struct net layout (bsc#1137586).
- kABI: protect dma-mapping.h include (kabi).
- kABI: protect functions using struct net_generic (bsc#1129845 LTC#176252).
- kABI: protect ip_options_rcv_srr (kabi).
- kABI: protect struct mlx5_td (kabi).
- kABI: protect struct pci_dev (kabi).
- kABI: protect struct smc_ib_device (bsc#1129845 LTC#176252).
- kABI: protect struct smcd_dev (bsc#1129845 LTC#176252).
- kABI: restore icmp_send (kabi).
- kbuild: strip whitespace in cmd_record_mcount findstring (bsc#1065729).
- kcm: switch order of device registration to fix a crash (bnc#1130527).
- kernel/signal.c: trace_signal_deliver when signal_group_exit (git-fixes).
- kernel/sys.c: prctl: fix false positive in validate_prctl_map() (git-fixes).
- kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv (bsc#1051510).
- kernel/sysctl.c: fix out-of-bounds access when setting file-max (bsc#1051510).
- kernfs: do not set dentry-&gt;d_fsdata (boo#1133115).
- keys: always initialize keyring_index_key::desc_len (bsc#1051510).
- keys: safe concurrent user-&gt;{session,uid}_keyring access (bsc#1135642).
- keys: user: Align the payload buffer (bsc#1051510).
- kmsg: Update message catalog to latest ibM level (2019/03/08) (bsc#1128904 LTC#176078).
- kvm: Call kvm_arch_memslots_updated() before updating memslots (bsc#1132563).
- kvm: Fix kABI for AMD SMAP Errata workaround (bsc#1133149).
- kvm: Fix UAF in nested posted interrupt processing (bsc#1134199).
- kvm: nVMX: Apply addr size mask to effective address for VMX instructions (bsc#1132561).
- kvm: nVMX: Clear reserved bits of #DB exit qualification (bsc#1134200).
- kvm: nVMX: Ignore limit checks on VMX instructions using flat segments (bsc#1132564).
- kvm: nVMX: restore host state in nested_vmx_vmexit for VMFail (bsc#1134201).
- kvm: nVMX: Sign extend displacements of VMX instr's mem operands (bsc#1132562).
- kvm: PPC: Book3S HV: Fix race between kvm_unmap_hva_range and MMU mode switch (bsc#1061840).
- kvm: s390: fix memory overwrites when not using SCA entries (bsc#1136206).
- kvm: s390: provide io interrupt kvm_stat (bsc#1136206).
- kvm: s390: use created_vcpus in more places (bsc#1136206).
- kvm: s390: vsie: fix 8k check for the itdba (bsc#1136206).
- kvm: SVM: Workaround errata#1096 (insn_len maybe zero on SMAP violation) (bsc#1133149).
- kvm: VMX: Compare only a single byte for VMCS' 'launched' in vCPU-run (bsc#1132555).
- kvm: VMX: Zero out *all* general purpose registers after VM-Exit (bsc#1134202).
- kvm: x86/mmu: Detect MMIO generation wrap in any address space (bsc#1132570).
- kvm: x86/mmu: Do not cache MMIO accesses while memslots are in flux (bsc#1132571).
- kvm: x86: Always use 32-bit SMRAM save state for 32-bit kernels (bsc#1134203).
- kvm: x86: Do not clear EFER during SMM transitions for 32-bit vCPU (bsc#1134204).
- kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (bsc#1114279).
- kvm: x86: Report STibP on GET_SUPPORTED_CPUID (bsc#1111331).
- kvm: x86: svm: make sure NMI is injected after nmi_singlestep (bsc#1134205).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- l2tp: filter out non-PPP sessions in pppol2tp_tunnel_ioctl() (git-fixes).
- l2tp: fix missing refcount drop in pppol2tp_tunnel_ioctl() (git-fixes).
- l2tp: only accept PPP sessions in pppol2tp_connect() (git-fixes).
- l2tp: prevent pppol2tp_connect() from creating kernel sockets (git-fixes).
- l2tp: revert 'l2tp: fix missing print session offset info' (bsc#1051510).
- leds: avoid races with workqueue (bsc#1051510).
- leds: pwm: silently error out on EPROBE_DEFER (bsc#1051510).
- lib: add crc64 calculation routines (bsc#1130972).
- lib: do not depend on linux headers being installed (bsc#1130972).
- libata: fix using DMA buffers on stack (bsc#1051510).
- libcxgb: fix incorrect ppmax calculation (bsc#1136345 jsc#SLE-4681).
- lightnvm: if LUNs are already allocated fix return (bsc#1085535).
- linux/kernel.h: Use parentheses around argument in u64_to_user_ptr() (bsc#1051510).
- livepatch: Convert error about unsupported reliable stacktrace into a warning (bsc#1071995).
- livepatch: Remove custom kobject state handling (bsc#1071995).
- livepatch: Remove duplicated code for early initialization (bsc#1071995).
- lpfc: validate command in lpfc_sli4_scmd_to_wqidx_distr() (bsc#1129138).
- mac80211: do not attempt to rename ERR_PTR() debugfs dirs (bsc#1111666).
- mac80211: do not call driver wake_tx_queue op during reconfig (bsc#1051510).
- mac80211: fix memory accounting with A-MSDU aggregation (bsc#1051510).
- mac80211: fix unaligned access in mesh table hash function (bsc#1051510).
- mac80211: Honor SW_CRYPTO_CONTROL for unicast keys in AP VLAN mode (bsc#1111666).
- mac8390: Fix mmio access size probe (bsc#1051510).
- md/raid1: do not clear bitmap bits on interrupted recovery (git-fixes).
- md/raid5: fix 'out of memory' during raid cache recovery (git-fixes).
- md: batch flush requests (bsc#1119680).
- md: Fix failed allocation of md_register_thread (git-fixes).
- md: fix invalid stored role for a disk (bsc#1051510).
- media: atmel: atmel-isc: fix INIT_WORK misplacement (bsc#1051510).
- media: cx18: update *pos correctly in cx18_read_pos() (bsc#1051510).
- media: cx23885: check allocation return (bsc#1051510).
- media: davinci-isif: avoid uninitialized variable use (bsc#1051510).
- media: davinci/vpbe: array underflow in vpbe_enum_outputs() (bsc#1051510).
- media: ivtv: update *pos correctly in ivtv_read_pos() (bsc#1051510).
- media: mt9m111: set initial frame size other than 0x0 (bsc#1051510).
- media: mtk-jpeg: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: mx2_emmaprp: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: omap_vout: potential buffer overflow in vidioc_dqbuf() (bsc#1051510).
- media: ov2659: fix unbalanced mutex_lock/unlock (bsc#1051510).
- media: pvrusb2: Prevent a buffer overflow (bsc#1129770).
- media: s5p-g2d: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: s5p-jpeg: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: serial_ir: Fix use-after-free in serial_ir_init_module (bsc#1051510).
- media: sh_veu: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame (bsc#1051510).
- media: vivid: use vfree() instead of kfree() for dev-&gt;bitmap_cap (bsc#1051510).
- media: wl128x: Fix an error code in fm_download_firmware() (bsc#1051510).
- media: wl128x: prevent two potential buffer overflows (bsc#1051510).
- memcg: make it work on sparse non-0-node systems (bnc#1133616).
- memcg: make it work on sparse non-0-node systems kabi (bnc#1133616).
- mISDN: Check address length before reading address family (bsc#1051510).
- missing barriers in some of unix_sock -&gt;addr and -&gt;path accesses (networking-stable-19_03_15).
- mlxsw: spectrum: Fix autoneg status in ethtool (networking-stable-19_04_30).
- mm/debug.c: fix __dump_page when mapping-&gt;host is not set (bsc#1131934).
- mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (bsc#1135330).
- mm/page_isolation.c: fix a wrong flag in set_migratetype_isolate() (bsc#1131935).
- mm/vmalloc: fix size check for remap_vmalloc_range_partial() (bsc#1133825).
- mm: create non-atomic version of SetPageReserved for init use (jsc#SLE-6647).
- mm: Fix buggy backport leading to MAP_SYNC failures (bsc#1137372)
- mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (bnc#1012382).
- mmc: bcm2835 MMC issues (bsc#1070872).
- mmc: block: Delete gendisk before cleaning up the request queue (bsc#1127616).
- mmc: core: fix possible use after free of host (bsc#1051510).
- mmc: core: Fix tag set memory leak (bsc#1111666).
- mmc: davinci: remove extraneous __init annotation (bsc#1051510).
- mmc: sdhci: Fix data command CRC error handling (bsc#1051510).
- mmc: sdhci: Handle auto-command errors (bsc#1051510).
- mmc: sdhci: Rename SDHCI_ACMD12_ERR and SDHCI_INT_ACMD12ERR (bsc#1051510).
- mmc: tmio_mmc_core: do not claim spurious interrupts (bsc#1051510).
- mount: copy the port field into the cloned nfs_server structure (bsc#1136990).
- mpls: Return error for RTA_GATEWAY attribute (networking-stable-19_03_07).
- mt7601u: bump supported EEPROM version (bsc#1051510).
- mtd: docg3: fix a possible memory leak of mtd-&gt;name (bsc#1051510).
- mtd: docg3: Fix passing zero to 'PTR_ERR' warning in doc_probe_device (bsc#1051510).
- mtd: nand: omap: Fix comment in platform data using wrong Kconfig symbol (bsc#1051510).
- mtd: part: fix incorrect format specifier for an unsigned long long (bsc#1051510).
- mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write (bsc#1129770).
- mwifiex: do not advertise ibSS features without FW support (bsc#1129770).
- mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (bsc#1136935).
- mwifiex: Fix mem leak in mwifiex_tm_cmd (bsc#1051510).
- mwifiex: Fix possible buffer overflows at parsing bss descriptor
- mwifiex: Make resume actually do something useful again on SDIO cards (bsc#1111666).
- mwifiex: prevent an array overflow (bsc#1051510).
- mwl8k: Fix rate_idx underflow (bsc#1051510).
- neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit (git-fixes).
- net-gro: Fix GRO flush when receiving a GSO packet (networking-stable-19_04_10).
- net/hsr: fix possible crash in add_timer() (networking-stable-19_03_15).
- net/ibmvnic: Remove tests of member address (bsc#1137739).
- net/ibmvnic: Update carrier state after link state change (bsc#1135100).
- net/ibmvnic: Update MAC address settings after adapter reset (bsc#1134760).
- net/ipv4: defensive cipso option parsing (git-fixes).
- net/ipv6: do not reinitialize ndev-&gt;cnf.addr_gen_mode on new inet6_dev (git-fixes).
- net/ipv6: fix addrconf_sysctl_addr_gen_mode (git-fixes).
- net/ipv6: propagate net.ipv6.conf.all.addr_gen_mode to devices (git-fixes).
- net/ipv6: reserve room for IFLA_INET6_ADDR_GEN_MODE (git-fixes).
- net/mlx5: Decrease default mr cache size (networking-stable-19_04_10).
- net/mlx5e: Add a lock on tir list (networking-stable-19_04_10).
- net/mlx5e: Do not overwrite pedit action when multiple pedit used (networking-stable-19_02_24).
- net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query (networking-stable-19_04_30).
- net/mlx5e: Fix error handling when refreshing TIRs (networking-stable-19_04_10).
- net/mlx5e: Fix trailing semicolon (bsc#1075020).
- net/mlx5e: IPoib, Reset QP after channels are closed (bsc#1075020).
- net/packet: fix 4gb buffer limit due to overflow check (networking-stable-19_02_24).
- net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec (git-fixes).
- net/rose: fix unbound loop in rose_loopback_timer() (networking-stable-19_04_30).
- net/sched: act_sample: fix divide by zero in the traffic path (networking-stable-19_04_10).
- net/sched: do not dereference a-&gt;goto_chain to read the chain index (bsc#1064802 bsc#1066129).
- net/sched: fix -&gt;get helper of the matchall cls (networking-stable-19_04_10).
- net/smc: add pnet table namespace support (bsc#1129845 LTC#176252).
- net/smc: add smcd support to the pnet table (bsc#1129845 LTC#176252).
- net/smc: allow pci IDs as ib device names in the pnet table (bsc#1129845 LTC#176252).
- net/smc: allow pnetid-less configuration (bsc#1129845 LTC#176252).
- net/smc: check for ip prefix and subnet (bsc#1134607 LTC#177518).
- net/smc: cleanup for smcr_tx_sndbuf_nonempty (bsc#1129845 LTC#176252).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: consolidate function parameters (bsc#1134607 LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607 LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607 LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607 LTC#177518).
- net/smc: improve smc_conn_create reason codes (bsc#1134607 LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607 LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607 LTC#177518).
- net/smc: rework pnet table (bsc#1129845 LTC#176252).
- net/smc: wait for pending work before clcsock release_sock (bsc#1134607 LTC#177518).
- net/tls: free ctx in sock destruct (bsc#1136353 jsc#SLE-4688).
- net/x25: fix a race in x25_bind() (networking-stable-19_03_15).
- net/x25: fix use-after-free in x25_device_event() (networking-stable-19_03_15).
- net/x25: reset state in x25_connect() (networking-stable-19_03_15).
- net: Add __icmp_send helper (networking-stable-19_03_07).
- net: Add header for usage of fls64() (networking-stable-19_02_20).
- net: aquantia: fix rx checksum offload for UDP/TCP over IPv6 (networking-stable-19_03_28).
- net: atm: Fix potential Spectre v1 vulnerabilities (networking-stable-19_04_19).
- net: avoid false positives in untrusted gso validation (git-fixes).
- net: avoid skb_warn_bad_offload on IS_ERR (git-fixes).
- net: avoid use IPCB in cipso_v4_error (networking-stable-19_03_07).
- net: bridge: add vlan_tunnel to bridge port policies (git-fixes).
- net: bridge: fix per-port af_packet sockets (git-fixes).
- net: bridge: multicast: use rcu to access port list from br_multicast_start_querier (git-fixes).
- net: chelsio: Add a missing check on cudg_get_buffer (bsc#1136345 jsc#SLE-4681).
- net: cxgb4: fix various indentation issues (bsc#1136345 jsc#SLE-4681).
- net: datagram: fix unbounded loop in __skb_try_recv_datagram() (git-fixes).
- net: Do not allocate page fragments that are not skb aligned (networking-stable-19_02_20).
- net: do not keep lonely packets forever in the gro hash (git-fixes).
- net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc (networking-stable-19_05_04).
- net: dsa: legacy: do not unmask port bitmaps (git-fixes).
- net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT (git-fixes).
- net: dsa: mv88e6xxx: Fix u64 statistics (networking-stable-19_03_07).
- net: ena: fix return value of ena_com_config_llq_info() (bsc#1111696 bsc#1117561).
- net: ethtool: not call vzalloc for zero sized memory request (networking-stable-19_04_10).
- net: Fix a bug in removing queues from XPS map (git-fixes).
- net: Fix for_each_netdev_feature on Big endian (networking-stable-19_02_20).
- net: fix IPv6 prefix route residue (networking-stable-19_02_20).
- net: fix uninit-value in __hw_addr_add_ex() (git-fixes).
- net: Fix untag for vlan packets without ethernet header (git-fixes).
- net: Fix vlan untag for bridge and vlan_dev with reorder_hdr off (git-fixes).
- net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv (networking-stable-19_04_19).
- net: hns3: add counter for times RX pages gets allocated (bsc#1104353 bsc#1134947).
- net: hns3: add error handler for initializing command queue (bsc#1104353 bsc#1135058).
- net: hns3: add function type check for debugfs help information (bsc#1104353 bsc#1134980).
- net: hns3: Add handling of MAC tunnel interruption (bsc#1104353 bsc#1134983).
- net: hns3: add hns3_gro_complete for HW GRO process (bsc#1104353 bsc#1135051).
- net: hns3: add linearizing checking for TSO case (bsc#1104353 bsc#1134947).
- net: hns3: add protect when handling mac addr list (bsc#1104353 ).
- net: hns3: add queue's statistics update to service task (bsc#1104353 bsc#1134981).
- net: hns3: add reset statistics for VF (bsc#1104353 bsc#1134995).
- net: hns3: add reset statistics info for PF (bsc#1104353 bsc#1134995).
- net: hns3: add some debug info for hclgevf_get_mbx_resp() (bsc#1104353 bsc#1134994).
- net: hns3: add some debug information for hclge_check_event_cause (bsc#1104353 bsc#1134994).
- net: hns3: add support for dump ncl config by debugfs (bsc#1104353 bsc#1134987).
- net: hns3: Add support for netif message level settings (bsc#1104353 bsc#1134989).
- net: hns3: adjust the timing of hns3_client_stop when unloading (bsc#1104353 bsc#1137201).
- net: hns3: always assume no drop TC for performance reason (bsc#1104353 bsc#1135049).
- net: hns3: check 1000M half for hns3_ethtool_ops.set_link_ksettings (bsc#1104353 bsc#1137201).
- net: hns3: check resetting status in hns3_get_stats() (bsc#1104353 bsc#1137201).
- net: hns3: code optimization for command queue' spin lock (bsc#1104353 bsc#1135042).
- net: hns3: combine len and checksum handling for inner and outer header (bsc#1104353 bsc#1134947).
- net: hns3: deactive the reset timer when reset successfully (bsc#1104353 bsc#1137201).
- net: hns3: divide shared buffer between TC (bsc#1104353 bsc#1135047).
- net: hns3: do not initialize MDIO bus when PHY is inexistent (bsc#1104353 bsc#1135045).
- net: hns3: do not request reset when hardware resetting (bsc#1104353 bsc#1137201).
- net: hns3: dump more information when tx timeout happens (bsc#1104353 bsc#1134990).
- net: hns3: extend the loopback state acquisition time (bsc#1104353).
- net: hns3: fix data race between ring-&gt;next_to_clean (bsc#1104353 bsc#1134975 bsc#1134945).
- net: hns3: fix error handling for desc filling (bsc#1104353 ).
- net: hns3: fix for HNS3_RXD_GRO_SIZE_M macro (bsc#1104353 bsc#1137201).
- net: hns3: fix for tunnel type handling in hns3_rx_checksum (bsc#1104353 bsc#1134946).
- net: hns3: fix for TX clean num when cleaning TX BD (bsc#1104353 ).
- net: hns3: fix for vport-&gt;bw_limit overflow problem (bsc#1104353 bsc#1134998).
- net: hns3: fix keep_alive_timer not stop problem (bsc#1104353 bsc#1135055).
- net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info() (bsc#1104353 bsc#1134990).
- net: hns3: fix pause configure fail problem (bsc#1104353 bsc#1134951 bsc#1134951).
- net: hns3: fix set port based VLAN for PF (bsc#1104353 bsc#1135053).
- net: hns3: fix set port based VLAN issue for VF (bsc#1104353 bsc#1135053).
- net: hns3: fix sparse: warning when calling hclge_set_vlan_filter_hw() (bsc#1104353 bsc#1134999).
- net: hns3: fix VLAN offload handle for VLAN inserted by port (bsc#1104353 bsc#1135053).
- net: hns3: free the pending skb when clean RX ring (bsc#1104353 bsc#1135044).
- net: hns3: handle pending reset while reset fail (bsc#1104353 bsc#1135058).
- net: hns3: handle the BD info on the last BD of the packet (bsc#1104353 bsc#1134974).
- net: hns3: ignore lower-level new coming reset (bsc#1104353 bsc#1137201).
- net: hns3: Make hclge_destroy_cmd_queue static (bsc#1104353 bsc#1137201).
- net: hns3: Make hclgevf_update_link_mode static (bsc#1104353 bsc#1137201).
- net: hns3: minor optimization for datapath (bsc#1104353 ).
- net: hns3: minor optimization for ring_space (bsc#1104353 ).
- net: hns3: minor refactor for hns3_rx_checksum (bsc#1104353 bsc#1135052).
- net: hns3: modify HNS3_NIC_STATE_INITED flag in hns3_reset_notify_uninit_enet (bsc#1104353).
- net: hns3: modify the VF network port media type acquisition method (bsc#1104353 bsc#1137201).
- net: hns3: modify VLAN initialization to be compatible with port based VLAN (bsc#1104353 bsc#1135053).
- net: hns3: not reset TQP in the DOWN while VF resetting (bsc#1104353 bsc#1134952).
- net: hns3: not reset vport who not alive when PF reset (bsc#1104353 bsc#1137201).
- net: hns3: optimize the barrier using when cleaning TX BD (bsc#1104353 bsc#1134945).
- net: hns3: prevent change MTU when resetting (bsc#1104353 bsc#1137201).
- net: hns3: prevent double free in hns3_put_ring_config() (bsc#1104353 bsc#1134950).
- net: hns3: reduce resources use in kdump kernel (bsc#1104353 bsc#1137201).
- net: hns3: refactor BD filling for l2l3l4 info (bsc#1104353 bsc#1134947).
- net: hns3: refine tx timeout count handle (bsc#1104353 bsc#1134990).
- net: hns3: remove redundant assignment of l2_hdr to itself (bsc#1104353).
- net: hns3: remove reset after command send failed (bsc#1104353 bsc#1134949).
- net: hns3: remove resetting check in hclgevf_reset_task_schedule (bsc#1104353 bsc#1135056).
- net: hns3: return 0 and print warning when hit duplicate MAC (bsc#1104353 bsc#1137201).
- net: hns3: set dividual reset level for all RAS and MSI-X errors (bsc#1104353 bsc#1135046).
- net: hns3: set up the vport alive state while reinitializing (bsc#1104353 bsc#1137201).
- net: hns3: set vport alive state to default while resetting (bsc#1104353 bsc#1137201).
- net: hns3: simplify hclgevf_cmd_csq_clean (bsc#1104353 ).
- net: hns3: some cleanup for struct hns3_enet_ring (bsc#1104353 bsc#1134947).
- net: hns3: split function hnae3_match_n_instantiate() (bsc#1104353).
- net: hns3: stop mailbox handling when command queue need re-init (bsc#1104353 bsc#1135058).
- net: hns3: stop sending keep alive msg when VF command queue needs reinit (bsc#1104353 bsc#1134972).
- net: hns3: unify maybe_stop_tx for TSO and non-TSO case (bsc#1104353 bsc#1134947).
- net: hns3: unify the page reusing for page size 4K and 64K (bsc#1104353 bsc#1134947).
- net: hns3: use a reserved byte to identify need_resp flag (bsc#1104353).
- net: hns3: use atomic_t replace u32 for arq's count (bsc#1104353 bsc#1134953).
- net: hns3: use devm_kcalloc when allocating desc_cb (bsc#1104353 bsc#1134947).
- net: hns3: use napi_schedule_irqoff in hard interrupts handlers (bsc#1104353 bsc#1134947).
- net: hsr: fix memory leak in hsr_dev_finalize() (networking-stable-19_03_15).
- net: initialize skb-&gt;peeked when cloning (git-fixes).
- net: make skb_partial_csum_set() more robust against overflows (git-fixes).
- net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails (networking-stable-19_03_07).
- net: phy: marvell: add new default led configure for m88e151x (bsc#1135018).
- net: phy: marvell: change default m88e1510 LED configuration (bsc#1135018).
- net: phy: marvell: Enable interrupt function on LED2 pin (bsc#1135018).
- net: phy: marvell: Fix buffer overrun with stats counters (networking-stable-19_05_04).
- net: rds: exchange of 8K and 1M pool (networking-stable-19_04_30).
- net: rose: fix a possible stack overflow (networking-stable-19_03_28).
- net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables &gt; 255 (networking-stable-19_03_15).
- net: sit: fix memory leak in sit_init_net() (networking-stable-19_03_07).
- net: sit: fix UBSAN Undefined behaviour in check_6rd (networking-stable-19_03_15).
- net: socket: fix potential spectre v1 gadget in socketcall (git-fixes).
- net: socket: set sock-&gt;sk to NULL after calling proto_ops::release() (networking-stable-19_03_07).
- net: stmmac: fix memory corruption with large MTUs (networking-stable-19_03_28).
- net: stmmac: move stmmac_check_ether_addr() to driver probe (networking-stable-19_04_30).
- net: test tailroom before appending to linear skb (git-fixes).
- net: thunderx: do not allow jumbo frames with XDP (networking-stable-19_04_19).
- net: thunderx: raise XDP MTU to 1508 (networking-stable-19_04_19).
- net: unbreak CONFIG_RETPOLINE=n builds (bsc#1124503).
- net: use indirect call wrappers at GRO network layer (bsc#1124503).
- net: use indirect call wrappers at GRO transport layer (bsc#1124503).
- net: validate untrusted gso packets without csum offload (networking-stable-19_02_20).
- net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms() (git-fixes).
- net_sched: fix two more memory leaks in cls_tcindex (networking-stable-19_02_24).
- netfilter: bridge: Do not sabotage nf_hook calls from an l3mdev (git-fixes).
- netfilter: bridge: ebt_among: add missing match size checks (git-fixes).
- netfilter: bridge: ebt_among: add more missing match size checks (git-fixes).
- netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING (git-fixes).
- netfilter: drop template ct when conntrack is skipped (git-fixes).
- netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule (git-fixes).
- netfilter: ebtables: handle string from userspace with care (git-fixes).
- netfilter: ebtables: reject non-bridge targets (git-fixes).
- netfilter: ip6t_MASQUERADE: add dependency on conntrack module (git-fixes).
- netfilter: ipset: do not call ipset_nest_end after nla_nest_cancel (git-fixes).
- netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_exit() (git-fixes).
- netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt (git-fixes).
- netfilter: nf_log: do not hold nf_log_mutex during user access (git-fixes).
- netfilter: nf_log: fix uninit read in nf_log_proc_dostring (git-fixes).
- netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6} (git-fixes).
- netfilter: nf_tables: can't fail after linking rule into active rule list (git-fixes).
- netfilter: nf_tables: check msg_type before nft_trans_set(trans) (git-fixes).
- netfilter: nf_tables: fix leaking object reference count (git-fixes).
- netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump() (git-fixes).
- netfilter: nf_tables: release chain in flushing set (git-fixes).
- netfilter: nft_compat: do not dump private area (git-fixes).
- netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target} (git-fixes).
- netfilter: x_tables: fix int overflow in xt_alloc_table_info() (git-fixes).
- netfilter: x_tables: initialise match/target check parameter struct (git-fixes).
- netlabel: fix out-of-bounds memory accesses (networking-stable-19_03_07).
- netlink: fix uninit-value in netlink_sendmsg (git-fixes).
- nfc: nci: Add some bounds checking in nci_hci_cmd_received() (bsc#1051510).
- nfs/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount (git-fixes).
- nfs: Add missing encode / decode sequence_maxsz to v4.2 operations (git-fixes).
- nfs: add module option to limit NFSv4 minor version (jsc#PM-231).
- nfs: Do not recoalesce on error in nfs_pageio_complete_mirror() (git-fixes).
- nfs: Do not use page_file_mapping after removing the page (git-fixes).
- nfs: Fix a soft lockup in the delegation recovery code (git-fixes).
- nfs: Fix a typo in nfs_init_timeout_values() (git-fixes).
- nfs: Fix an I/O request leakage in nfs_do_recoalesce (git-fixes).
- nfs: Fix dentry revalidation on nfsv4 lookup (bsc#1132618).
- nfs: Fix I/O request leakages (git-fixes).
- nfs: fix mount/umount race in nlmclnt (git-fixes).
- nfsd4: catch some false session retries (git-fixes).
- nfsd4: fix cached replies to solo SEQUENCE compounds (git-fixes).
- nfsv4.1 do not free interrupted slot on open (git-fixes).
- nfsv4.1: Reinitialise sequence results before retransmitting a request (git-fixes).
- nfsv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE() (git-fixes).
- nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands (bsc#1051510).
- nvme-fc: use separate work queue to avoid warning (bsc#1131673).
- nvme-multipath: avoid crash on invalid subsystem cntlid enumeration (bsc#1129273).
- nvme-multipath: avoid crash on invalid subsystem cntlid enumeration (bsc#1130937).
- nvme-multipath: split bios with the ns_head bio_set before submitting (bsc#1103259, bsc#1131673).
- nvme-rdma: fix possible free of a non-allocated async event buffer (bsc#1120423).
- nvme: add proper discard setup for the multipath device (bsc#1114638).
- nvme: Do not remove namespaces during reset (bsc#1131673).
- nvme: fix the dangerous reference of namespaces list (bsc#1131673).
- nvme: flush scan_work when resetting controller (bsc#1131673).
- nvme: make sure ns head inherits underlying device limits (bsc#1131673).
- nvme: only reconfigure discard if necessary (bsc#1114638).
- objtool: Fix function fallthrough detection (bsc#1058115).
- ocfs2: fix ocfs2 read inode data panic in ocfs2_iget (bsc#1136434).
- ocfs2: turn on OCFS2_FS_STATS setting(bsc#1134393) We need to turn on OCFS2_FS_STATS kernel configuration setting, to fix bsc#1134393.
- of: fix clang -Wunsequenced for be32_to_cpu() (bsc#1135642).
- omapfb: add missing of_node_put after of_device_is_available (bsc#1051510).
- openvswitch: add seqadj extension when NAT is used (bsc#1051510).
- openvswitch: fix flow actions reallocation (bsc#1051510).
- overflow: Fix -Wtype-limits compilation warnings (bsc#1111666).
- p54: drop device reference count if fails to enable device (bsc#1135642).
- packet: fix reserve calculation (git-fixes).
- packet: in packet_snd start writing at link layer allocation (git-fixes).
- packet: refine ring v3 block size test to hold one frame (git-fixes).
- packet: reset network header if packet shorter than ll reserved space (git-fixes).
- packet: validate msg_namelen in send directly (git-fixes).
- packets: Always register packet sk in the same order (networking-stable-19_03_28).
- pci: Add function 1 DMA alias quirk for Marvell 9170 SATA controller (bsc#1051510).
- pci: designware-ep: Read-only registers need DBI_RO_WR_EN to be writable (bsc#1051510).
- pci: endpoint: Use EPC's device in dma_alloc_coherent()/dma_free_coherent() (git-fixes).
- pci: Factor out pcie_retrain_link() function (git-fixes).
- pci: Init pcie feature bits for managed host bridge alloc (bsc#1111666).
- pci: Mark AMD Stoney Radeon R7 GPU ATS as broken (bsc#1051510).
- pci: Mark Atheros AR9462 to avoid bus reset (bsc#1051510).
- pci: pciehp: Convert to threaded IRQ (bsc#1133005).
- pci: pciehp: Ignore Link State Changes after powering off a slot (bsc#1133005).
- pci: pciehp: Tolerate Presence Detect hardwired to zero (bsc#1133016).
- pci: Work around Pericom pcie-to-pci bridge Retrain Link erratum (git-fixes).
- perf tools: Add Hygon Dhyana support ().
- perf/x86/amd: Add event map for AMD Family 17h (bsc#1134223).
- perf/x86/amd: Update generic hardware cache events for Family 17h (bsc#1134223).
- phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode (bsc#1051510).
- phy: sun4i-usb: Support set_mode to usb_HOST for non-OTG PHYs (bsc#1051510).
- platform/x86: alienware-wmi: printing the wrong error code (bsc#1051510).
- platform/x86: dell-rbtn: Add missing #include (bsc#1051510).
- platform/x86: intel_pmc_ipc: adding error handling (bsc#1051510).
- platform/x86: intel_punit_ipc: Revert 'Fix resource ioremap warning' (bsc#1051510).
- platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI table (bsc#1051510).
- platform/x86: pmc_atom: Add several Beckhoff Automation boards to critclk_systems DMI table (bsc#1051510).
- platform/x86: pmc_atom: Drop __initconst on dmi table (bsc#1051510).
- platform/x86: sony-laptop: Fix unintentional fall-through (bsc#1051510).
- power: supply: axp20x_usb_power: Fix typo in VBUS current limit macros (bsc#1051510).
- power: supply: axp288_charger: Fix unchecked return value (bsc#1051510).
- powerpc/64: Make meltdown reporting Book3S 64 specific
- powerpc/64s: Fix logic when handling unknown CPU features (bsc#1055117).
- powerpc/64s: Fix page table fragment refcount race vs speculative references (bsc#1131326, bsc#1108937).
- powerpc/eeh: Fix race with driver un/bind (bsc#1065729).
- powerpc/fsl: Add barrier_nospec implementation for NXP PowerPC Book3E
- powerpc/hugetlb: Handle mmap_min_addr correctly in get_unmapped_area callback (bsc#1131900).
- powerpc/kvm: Save and restore host AMR/IAMR/UAMOR (bsc#1061840).
- powerpc/mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown search (bsc#1131900).
- powerpc/mm/radix: Display if mappings are exec or not (bsc#1055186, git-fixes).
- powerpc/mm/radix: Prettify mapped memory range print out (bsc#1055186, git-fixes).
- powerpc/mm: Add missing tracepoint for tlbie (bsc#1055117, git-fixes).
- powerpc/mm: Check secondary hash page table (bsc#1065729).
- powerpc/mm: Fix page table dump to work on Radix (bsc#1055186, git-fixes).
- powerpc/msi: Fix NULL pointer access in teardown code (bsc#1065729).
- powerpc/numa: document topology_updates_enabled, disable by default (bsc#1133584).
- powerpc/numa: improve control of topology updates (bsc#1133584).
- powerpc/perf: Fix MMCRA corruption by bhrb_filter (bsc#1053043).
- powerpc/perf: Fix unit_sel/cache_sel checks (bsc#1053043).
- powerpc/perf: Remove l2 bus events from HW cache event array (bsc#1053043).
- powerpc/powernv/cpuidle: Init all present cpus for deep states (bsc#1055121).
- powerpc/powernv/idle: Restore IAMR after idle (bsc#1065729).
- powerpc/powernv/ioda2: Remove redundant free of TCE pages (bsc#1061840).
- powerpc/powernv/ioda: Allocate indirect TCE levels of cached userspace addresses on demand (bsc#1061840).
- powerpc/powernv/ioda: Fix locked_vm counting for memory used by IOMMU tables (bsc#1061840).
- powerpc/powernv: Do not reprogram SLW image on every kvm guest entry/exit (bsc#1061840).
- powerpc/powernv: Make opal log only readable by root (bsc#1065729).
- powerpc/powernv: Remove never used pnv_power9_force_smt4 (bsc#1061840).
- powerpc/process: Fix sparse address space warnings (bsc#1065729).
- powerpc/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
- powerpc/vdso32: fix CLOCK_MONOTONIC on PPC64 (bsc#1131587).
- powerpc/vdso64: Fix CLOCK_MONOTONIC inconsistencies across Y2038 (bsc#1131587).
- powerpc64/ftrace: Include ftrace.h needed for enable/disable calls (bsc#1088804, git-fixes).
- powerpc: Always initialize input array when calling epapr_hypercall() (bsc#1065729).
- powerpc: avoid -mno-sched-epilog on GCC 4.9 and newer (bsc#1065729).
- powerpc: consolidate -mno-sched-epilog into FTRACE flags (bsc#1065729).
- powerpc: Fix 32-bit kvm-PR lockup and host crash with MacOS guest (bsc#1061840).
- powerpc: Fix HMIs on big-endian with CONFIG_RELOCATABLE=y (bsc#1065729).
- proc/kcore: do not bounds check against address 0 (bsc#1051510).
- proc/sysctl: fix return error for proc_doulongvec_minmax() (bsc#1051510).
- proc: revalidate kernel thread inodes to root:root (bsc#1051510).
- ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK (git-fixes).
- pwm: Fix deadlock warning when removing PWM device (bsc#1051510).
- pwm: meson: Consider 128 a valid pre-divider (bsc#1051510).
- pwm: meson: Do not disable PWM when setting duty repeatedly (bsc#1051510).
- pwm: meson: Use the spin-lock only to protect register modifications (bsc#1051510).
- pwm: tiehrpwm: Update shadow register for disabling PWMs (bsc#1051510).
- qed*: Add iWARP 100g support (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed*: Change hwfn used for sb initialization (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add API for SmartAN query (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add infrastructure for error detection and recovery (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add llh ppfid interface and 100g support for offload protocols (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add qed devlink parameters table (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Define new MF bit for no_vlan config (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Delete redundant doorbell recovery types (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: fix indentation issue with statements in an if-block (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix iWARP buffer size provided for syn packet processing (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix iWARP syn packet mac address validation (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix missing DORQ attentions (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: fix spelling mistake 'faspath' -&gt; 'fastpath' (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: fix spelling mistake 'inculde' -&gt; 'include' (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix static checker warning (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix the doorbell address sanity check (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix the DORQ's attentions handling (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Mark expected switch fall-through (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Modify api for performing a dmae to another PF (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Modify offload protocols to use the affined engine (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Read device port count from the shmem (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Reduce the severity of ptp debug message (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: remove duplicated include from qed_if.h (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: remove redundant assignment to rc (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Revise load sequence to avoid pci errors (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Set the doorbell address correctly (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Add ethtool interface for SmartAN query (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Error recovery process (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Fix internal loopback failure with jumbo mtu configuration (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: fix write to free'd pointer error and double free of ptp (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Handle infinite driver spinning for Tx timestamp (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: place ethtool_rx_flow_spec after code after TC flower codebase (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Populate mbi version in ethtool driver query data (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qedr: Change the MSI-X vectors selection to be based on affined engine (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qla2xxx: allow irqbalance control in non-MQ mode (bsc#1128971).
- qla2xxx: allow irqbalance control in non-MQ mode (bsc#1128979).
- qla2xxx: always allocate qla_tgt_wq (bsc#1131451).
- qla2xxx: kABI fixes for v10.00.00.14-k (bsc#1136215).
- qla2xxx: kABI fixes for v10.01.00.15-k (bsc#1136215).
- qlcnic: remove assumption that vlan_tci != 0 (bsc#1136469 jsc#SLE-4695).
- qlcnic: remove set but not used variables 'cur_rings, max_hw_rings, tx_desc_info' (bsc#1136469 jsc#SLE-4695).
- qlcnic: remove set but not used variables 'op, cmd_op' (bsc#1136469 jsc#SLE-4695).
- qmi_wwan: add Olicard 600 (bsc#1051510).
- qmi_wwan: Add support for Quectel EG12/EM12 (networking-stable-19_03_07).
- ras/cec: Check the correct variable in the debugfs error handling (bsc#1085535).
- ravb: Decrease TxFIFO depth of Q3 and Q2 to one (networking-stable-19_03_15).
- rdma/cxbg: Use correct sizing on buffers holding page DMA addresses (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Add support for 64Byte cqes (bsc#1127371).
- rdma/cxgb4: Add support for kernel mode SRQ's (bsc#1127371).
- rdma/cxgb4: Add support for srq functions and structs (bsc#1127371).
- rdma/cxgb4: Don't expose DMA addresses (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Fix null pointer dereference on alloc_skb failure (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: fix some info leaks (bsc#1127371).
- rdma/cxgb4: Fix spelling mistake 'immedate' -&gt; 'immediate' (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Make c4iw_poll_cq_one() easier to analyze (bsc#1127371).
- rdma/cxgb4: Remove a set-but-not-used variable (bsc#1127371).
- rdma/cxgb4: Remove kref accounting for sync operation (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Use sizeof() notation (bsc#1136348 jsc#SLE-4684).
- rdma/hns: Add constraint on the setting of local ACK timeout (bsc#1104427 bsc#1137233).
- rdma/hns: Add SCC context allocation support for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Add SCC context clr support for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Add the process of AEQ overflow for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Add timer allocation support for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Bugfix for mapping user db (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for posting multiple srq work request (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for SCC hem free (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for sending with invalidate (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for set hem of SCC (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for the scene without receiver queue (bsc#1104427 bsc#1137233).
- rdma/hns: Configure capacity of hns device (bsc#1104427 bsc#1137236).
- rdma/hns: Delete unused variable in hns_roce_v2_modify_qp function (bsc#1104427).
- rdma/hns: Delete useful prints for aeq subtype event (bsc#1104427 bsc#1126206).
- rdma/hns: Fix bad endianess of port_pd variable (bsc#1104427 ).
- rdma/hns: Fix bug that caused srq creation to fail (bsc#1104427 ).
- rdma/hns: Fix the bug with updating rq head pointer when flush cqe (bsc#1104427 bsc#1137233).
- rdma/hns: Fix the chip hanging caused by sending doorbell during reset (bsc#1104427 bsc#1137232).
- rdma/hns: Fix the chip hanging caused by sending mailbox CMQ during reset (bsc#1104427 bsc#1137232).
- rdma/hns: Fix the Oops during rmmod or insmod ko when reset occurs (bsc#1104427 bsc#1137232).
- rdma/hns: Fix the state of rereg mr (bsc#1104427 bsc#1137236).
- rdma/hns: Hide error print information with roce vf device (bsc#1104427 bsc#1137236).
- rdma/hns: Limit minimum ROCE CQ depth to 64 (bsc#1104427 bsc#1137236).
- rdma/hns: Limit scope of hns_roce_cmq_send() (bsc#1104427 ).
- rdma/hns: Make some function static (bsc#1104427 bsc#1126206).
- rdma/hns: Modify qp specification according to UM (bsc#1104427 bsc#1137233).
- rdma/hns: Modify the pbl ba page size for hip08 (bsc#1104427 bsc#1137233).
- rdma/hns: Move spin_lock_irqsave to the correct place (bsc#1104427 bsc#1137236).
- rdma/hns: Only assgin some fields if the relatived attr_mask is set (bsc#1104427).
- rdma/hns: Only assign the fields of the rq psn if ib_QP_RQ_PSN is set (bsc#1104427).
- rdma/hns: Only assign the relatived fields of psn if ib_QP_SQ_PSN is set (bsc#1104427).
- rdma/hns: rdma/hns: Assign rq head pointer when enable rq record db (bsc#1104427 bsc#1137236).
- rdma/hns: Remove jiffies operation in disable interrupt context (bsc#1104427 bsc#1137236).
- rdma/hns: Remove set but not used variable 'rst' (bsc#1104427 bsc#1126206).
- rdma/hns: Set allocated memory to zero for wrid (bsc#1104427 bsc#1137236).
- rdma/hns: Support to create 1M srq queue (bsc#1104427 ).
- rdma/hns: Update CQE specifications (bsc#1104427 bsc#1137236).
- rdma/hns: Update the range of raq_psn field of qp context (bsc#1104427).
- rdma/i40iw: Handle workqueue allocation failure (jsc#SLE-4793).
- rdma/iw_cxgb4: Always disconnect when QP is transitioning to TERMINATE state (bsc#1136348 jsc#SLE-4684).
- rdma/iw_cxgb4: Drop __GFP_NOFAIL (bsc#1127371).
- rdma/iwcm: add tos_set bool to iw_cm struct (bsc#1136348 jsc#SLE-4684).
- rdma/qedr: Fix incorrect device rate (bsc#1136188).
- rdma/qedr: Fix out of bounds index check in query pkey (bsc#1136456 jsc#SLE-4689).
- rdma/rdmavt: Use correct sizing on buffers holding page DMA addresses (jsc#SLE-4925).
- rdma/rxe: Consider skb reserve space based on netdev of GID (bsc#1082387, bsc#1103992).
- rdma/smc: Replace ib_query_gid with rdma_get_gid_attr (bsc#1131530 LTC#176717).
- rds: fix refcount bug in rds_sock_addref (git-fixes).
- rds: tcp: atomically purge entries from rds_tcp_conn_list during netns delete (git-fixes).
- regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB (bsc#1051510).
- ring-buffer: Check if memory is available before allocation (bsc#1132531).
- route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race (networking-stable-19_03_15).
- rt2x00: do not increment sequence number while re-transmitting (bsc#1051510).
- rtc: da9063: set uie_unsupported when relevant (bsc#1051510).
- rtc: sh: Fix invalid alarm warning for non-enabled alarm (bsc#1051510).
- rtlwifi: rtl8723ae: Fix missing break in switch statement (bsc#1051510).
- rxrpc: Do not release call mutex on error pointer (git-fixes).
- rxrpc: Do not treat call aborts as conn aborts (git-fixes).
- rxrpc: Fix client call queueing, waiting for channel (networking-stable-19_03_15).
- rxrpc: Fix error reception on AF_INET6 sockets (git-fixes).
- rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket (git-fixes).
- rxrpc: Fix Tx ring annotation after initial Tx failure (git-fixes).
- s390/dasd: fix panic for failed online processing (bsc#1132589).
- s390/pkey: move pckmo subfunction available checks away from module init (bsc#1128544).
- s390/qdio: clear intparm during shutdown (bsc#1134597 LTC#177516).
- s390/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
- sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init() (bsc#1051510).
- sc16is7xx: move label 'err_spi' to correct section (bsc#1051510).
- sc16is7xx: put err_spi and err_i2c into correct #ifdef (bsc#1051510).
- scripts/git_sort/git_sort.py: remove old SCSI git branches
- scripts: override locale from environment when running recordmcount.pl (bsc#1134354).
- scsi: hisi: KABI ignore new symbols (bsc#1135038).
- scsi: hisi_sas: add host reset interface for test (bsc#1135041).
- scsi: hisi_sas: Add softreset in hisi_sas_I_T_nexus_reset() (bsc#1135033).
- scsi: hisi_sas: Adjust the printk format of functions hisi_sas_init_device() (bsc#1135037).
- scsi: hisi_sas: allocate different SAS address for directly attached situation (bsc#1135036).
- scsi: hisi_sas: Do not fail IT nexus reset for Open Reject timeout (bsc#1135033).
- scsi: hisi_sas: Do not hard reset disk during controller reset (bsc#1135034).
- scsi: hisi_sas: Fix for setting the PHY linkrate when disconnected (bsc#1135038).
- scsi: hisi_sas: Remedy inconsistent PHY down state in software (bsc#1135039).
- scsi: hisi_sas: remove the check of sas_dev status in hisi_sas_I_T_nexus_reset() (bsc#1135037).
- scsi: hisi_sas: Send HARD RESET to clear the previous affiliation of STP target port (bsc#1135037).
- scsi: hisi_sas: Set PHY linkrate when disconnected (bsc#1135038).
- scsi: hisi_sas: Some misc tidy-up (bsc#1135031).
- scsi: hisi_sas: Support all RAS events with MSI interrupts (bsc#1135035).
- scsi: libsas: allocate sense buffer for bsg queue (bsc#1131467).
- scsi: libsas: Do discovery on empty PHY to update PHY info (bsc#1135024).
- scsi: libsas: Improve vague log in SAS rediscovery (bsc#1135027).
- scsi: libsas: Inject revalidate event for root port event (bsc#1135026).
- scsi: libsas: Print expander PHY indexes in decimal (bsc#1135021).
- scsi: libsas: Stop hardcoding SAS address length (bsc#1135029).
- scsi: libsas: Support SATA PHY connection rate unmatch fixing during discovery (bsc#1135028).
- scsi: libsas: Try to retain programmed min linkrate for SATA min pathway unmatch fixing (bsc#1135028).
- scsi: qedf: fixup bit operations (bsc#1135542).
- scsi: qedf: fixup locking in qedf_restart_rport() (bsc#1135542).
- scsi: qedf: missing kref_put in qedf_xmit() (bsc#1135542).
- scsi: qla2xxx: Add 28xx flash primary/secondary status/image mechanism (bsc#1136215).
- scsi: qla2xxx: Add Device ID for ISP28XX (bsc#1136215).
- scsi: qla2xxx: Add First Burst support for FC-NVMe devices (bsc#1136215).
- scsi: qla2xxx: Add fw_attr and port_no SysFS node (bsc#1136215).
- scsi: qla2xxx: Add new FC-NVMe enable BIT to enable FC-NVMe feature (bsc#1130579).
- scsi: qla2xxx: Add new FW dump template entry types (bsc#1136215).
- scsi: qla2xxx: Add protection mask module parameters (bsc#1136215).
- scsi: qla2xxx: Add Serdes support for ISP28XX (bsc#1136215).
- scsi: qla2xxx: Add support for multiple fwdump templates/segments (bsc#1136215).
- scsi: qla2xxx: Add support for setting port speed (bsc#1136215).
- scsi: qla2xxx: Avoid pci IRQ affinity mapping when multiqueue is not supported (bsc#1136215).
- scsi: qla2xxx: avoid printf format warning (bsc#1136215).
- scsi: qla2xxx: Check for FW started flag before aborting (bsc#1136215).
- scsi: qla2xxx: check for kstrtol() failure (bsc#1136215).
- scsi: qla2xxx: Cleanups for NVRAM/Flash read/write path (bsc#1136215).
- scsi: qla2xxx: Correction and improvement to fwdt processing (bsc#1136215).
- scsi: qla2xxx: Correctly report max/min supported speeds (bsc#1136215).
- scsi: qla2xxx: Declare local functions 'static' (bsc#1137444).
- scsi: qla2xxx: Fix code indentation for qla27xx_fwdt_entry (bsc#1136215).
- scsi: qla2xxx: Fix DMA error when the DIF sg buffer crosses 4GB boundary (bsc#1136215).
- scsi: qla2xxx: fix error message on qla2400 (bsc#1118139).
- scsi: qla2xxx: Fix function argument descriptions (bsc#1118139).
- scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware (bsc#1136215).
- scsi: qla2xxx: Fix memory corruption during hba reset test (bsc#1118139).
- scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (bsc#1136215).
- scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (bsc#1132044).
- scsi: qla2xxx: Fix read offset in qla24xx_load_risc_flash() (bsc#1136215).
- scsi: qla2xxx: Fix routine qla27xx_dump_{mpi|ram}() (bsc#1136215).
- scsi: qla2xxx: fix spelling mistake: 'existant' -&gt; 'existent' (bsc#1118139).
- scsi: qla2xxx: Fix unload when NVMe devices are configured (bsc#1136215).
- scsi: qla2xxx: fully convert to the generic DMA API (bsc#1137444).
- scsi: qla2xxx: fx00 copypaste typo (bsc#1118139).
- scsi: qla2xxx: Improve several kernel-doc headers (bsc#1137444).
- scsi: qla2xxx: Introduce a switch/case statement in qlt_xmit_tm_rsp() (bsc#1137444).
- scsi: qla2xxx: Make qla2x00_sysfs_write_nvram() easier to analyze (bsc#1137444).
- scsi: qla2xxx: Make sure that qlafx00_ioctl_iosb_entry() initializes 'res' (bsc#1137444).
- scsi: qla2xxx: Move debug messages before sending srb preventing panic (bsc#1136215).
- scsi: qla2xxx: Move marker request behind QPair (bsc#1136215).
- scsi: qla2xxx: no need to check return value of debugfs_create functions (bsc#1136215).
- scsi: qla2xxx: NULL check before some freeing functions is not needed (bsc#1137444).
- scsi: qla2xxx: Prevent multiple ADISC commands per session (bsc#1136215).
- scsi: qla2xxx: Prevent SysFS access when chip is down (bsc#1136215).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1137444).
- scsi: qla2xxx: Remove FW default template (bsc#1136215).
- scsi: qla2xxx: remove redundant null check on pointer sess (bsc#1136215).
- scsi: qla2xxx: remove the unused tcm_qla2xxx_cmd_wq (bsc#1118139).
- scsi: qla2xxx: Remove two arguments from qlafx00_error_entry() (bsc#1137444).
- scsi: qla2xxx: Remove unused symbols (bsc#1118139).
- scsi: qla2xxx: Secure flash update support for ISP28XX (bsc#1136215).
- scsi: qla2xxx: Set remote port devloss timeout to 0 (bsc#1136215).
- scsi: qla2xxx: Simplification of register address used in qla_tmpl.c (bsc#1136215).
- scsi: qla2xxx: Simplify conditional check again (bsc#1136215).
- scsi: qla2xxx: Split the __qla2x00_abort_all_cmds() function (bsc#1137444).
- scsi: qla2xxx: Update driver version to 10.00.00.14-k (bsc#1136215).
- scsi: qla2xxx: Update driver version to 10.01.00.15-k (bsc#1136215).
- scsi: qla2xxx: Update flash read/write routine (bsc#1136215).
- scsi: qla2xxx: Use %p for printing pointers (bsc#1118139).
- scsi: qla2xxx: use lower_32_bits and upper_32_bits instead of reinventing them (bsc#1137444).
- scsi: smartpqi: add H3C controller IDs (bsc#1133547).
- scsi: smartpqi: add h3c ssid (bsc#1133547).
- scsi: smartpqi: add no_write_same for logical volumes (bsc#1133547).
- scsi: smartpqi: add ofa support (bsc#1133547).
- scsi: smartpqi: Add retries for device reset (bsc#1133547).
- scsi: smartpqi: add smp_utils support (bsc#1133547).
- scsi: smartpqi: add spdx (bsc#1133547).
- scsi: smartpqi: add support for huawei controllers (bsc#1133547).
- scsi: smartpqi: add support for PQI Config Table handshake (bsc#1133547).
- scsi: smartpqi: add sysfs attributes (bsc#1133547).
- scsi: smartpqi: allow for larger raid maps (bsc#1133547).
- scsi: smartpqi: bump driver version (bsc#1133547).
- scsi: smartpqi: bump driver version (bsc#1133547).
- scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown() (bsc#1133547).
- scsi: smartpqi: check for null device pointers (bsc#1133547).
- scsi: smartpqi: correct host serial num for ssa (bsc#1133547).
- scsi: smartpqi: correct lun reset issues (bsc#1133547).
- scsi: smartpqi: correct volume status (bsc#1133547).
- scsi: smartpqi: do not offline disks for transient did no connect conditions (bsc#1133547).
- scsi: smartpqi: enhance numa node detection (bsc#1133547).
- scsi: smartpqi: fix build warnings (bsc#1133547).
- scsi: smartpqi: fix disk name mount point (bsc#1133547).
- scsi: smartpqi: fully convert to the generic DMA API (bsc#1133547).
- scsi: smartpqi: increase fw status register read timeout (bsc#1133547).
- scsi: smartpqi: increase LUN reset timeout (bsc#1133547).
- scsi: smartpqi: refactor sending controller raid requests (bsc#1133547).
- scsi: smartpqi: Reporting 'logical unit failure' (bsc#1133547).
- scsi: smartpqi: turn off lun data caching for ptraid (bsc#1133547).
- scsi: smartpqi: update copyright (bsc#1133547).
- scsi: smartpqi: update driver version (bsc#1133547).
- scsi: smartpqi: wake up drives after os resumes from suspend (bsc#1133547).
- scsi: smartpqi_init: fix boolean expression in pqi_device_remove_start (bsc#1133547).
- scsi: zfcp: make DIX experimental, disabled, and independent of DIF (jsc#SLE-6772).
- sctp: avoid running the sctp state machine recursively (networking-stable-19_05_04).
- sctp: call gso_reset_checksum when computing checksum in sctp_gso_segment (networking-stable-19_02_24).
- sctp: fix identification of new acks for SFR-CACC (git-fixes).
- sctp: get sctphdr by offset in sctp_compute_cksum (networking-stable-19_03_28).
- sctp: initialize _pad of sockaddr_in before copying to user memory (networking-stable-19_04_10).
- sctp: set frag_point in sctp_setsockopt_maxseg correctly` (git-fixes).
- selinux: use kernel linux/socket.h for genheaders and mdp (bsc#1134810).
- serial: 8250_pxa: honor the port number from devicetree (bsc#1051510).
- serial: ar933x_uart: Fix build failure with disabled console (bsc#1051510).
- serial: uartps: console_setup() can't be placed to init section (bsc#1051510).
- signal: Always notice exiting tasks (git-fixes).
- signal: Better detection of synchronous signals (git-fixes).
- signal: Restore the stop PTRACE_EVENT_EXIT (git-fixes).
- sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach() (networking-stable-19_02_24).
- soc/fsl/qe: Fix an error code in qe_pin_request() (bsc#1051510).
- soc/tegra: fuse: Fix illegal free of IO base address (bsc#1051510).
- soc/tegra: pmc: Drop locking from tegra_powergate_is_powered() (bsc#1051510).
- soc: imx-sgtl5000: add missing put_device() (bsc#1051510).
- soc: qcom: gsbi: Fix error handling in gsbi_probe() (bsc#1051510).
- spi-mem: fix kernel-doc for spi_mem_dirmap_{read|write}() (bsc#1111666).
- spi: a3700: Clear DATA_OUT when performing a read (bsc#1051510).
- spi: Add missing pm_runtime_put_noidle() after failed get (bsc#1111666).
- spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios (bsc#1051510).
- spi: bcm2835aux: setup gpio-cs to output and correct level during setup (bsc#1051510).
- spi: bcm2835aux: warn in dmesg that native cs is not really supported (bsc#1051510).
- spi: Micrel eth switch: declare missing of table (bsc#1051510).
- spi: rspi: Fix sequencer reset during initialization (bsc#1051510).
- spi: ST ST95HF NFC: declare missing of table (bsc#1051510).
- ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit (bsc#1051510).
- staging: comedi: ni_usb6501: Fix possible double-free of -&gt;usb_rx_buf (bsc#1051510).
- staging: comedi: ni_usb6501: Fix use of uninitialized mutex (bsc#1051510).
- staging: comedi: vmk80xx: Fix possible double-free of -&gt;usb_rx_buf (bsc#1051510).
- staging: comedi: vmk80xx: Fix use of uninitialized semaphore (bsc#1051510).
- staging: iio: ad7192: Fix ad7193 channel address (bsc#1051510).
- staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc (bsc#1051510).
- staging: rtl8712: uninitialized memory in read_bbreg_hdl() (bsc#1051510).
- staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc (bsc#1111666).
- staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer dereference (bsc#1111666).
- staging: vt6655: Fix interrupt race condition on device start up (bsc#1051510).
- staging: vt6655: Remove vif check from vnt_interrupt (bsc#1051510).
- stm class: Fix an endless loop in channel allocation (bsc#1051510).
- stm class: Fix channel free in stm output free path (bsc#1051510).
- stm class: Prevent division by zero (bsc#1051510).
- stmmac: pci: Adjust IOT2000 matching (networking-stable-19_04_30).
- sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (git-fixes).
- supported.conf: Add openvswitch to kernel-default-base (bsc#1124839).
- supported.conf: Add openvswitch to kernel-default-base (bsc#1124839).
- supported.conf: dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).
- svm/avic: Fix invalidate logical APIC id entry (bsc#1132726).
- svm: Fix AVIC DFR and LDR handling (bsc#1132558).
- switchtec: Fix unintended mask of MRPC event (git-fixes).
- sysctl: handle overflow for file-max (bsc#1051510).
- tcp: add tcp_min_snd_mss sysctl (bsc#1137586).
- tcp: do not use ipv6 header for ipv4 flow (networking-stable-19_03_28).
- tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (bsc#1137586).
- tcp: Ensure DCTCP reacts to losses (networking-stable-19_04_10).
- tcp: fix fack_count accounting on tcp_shift_skb_data() (CVE-2019-11477 bsc#1137586).
- tcp: fix TCP_REPAIR_QUEUE bound checking (git-fixes).
- tcp: limit payload size of sacked skbs (bsc#1137586).
- tcp: purge write queue in tcp_connect_init() (git-fixes).
- tcp: tcp_fragment() should apply sane memory limits (bsc#1137586).
- tcp: tcp_grow_window() needs to respect tcp_space() (networking-stable-19_04_19).
- tcp: tcp_v4_err() should be more careful (networking-stable-19_02_20).
- team: fix possible recursive locking when add slaves (networking-stable-19_04_30).
- team: set slave to promisc if team is already in promisc mode (bsc#1051510).
- testing: nvdimm: provide SZ_4G constant (bsc#1132982).
- thermal/int340x_thermal: Add additional UUIDs (bsc#1051510).
- thermal/int340x_thermal: fix mode setting (bsc#1051510).
- thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power (bsc#1051510).
- thunderx: eliminate extra calls to put_page() for pages held for recycling (networking-stable-19_03_28).
- thunderx: enable page recycling for non-XDP case (networking-stable-19_03_28).
- tipc: fix hanging clients using poll with EPOLLOUT flag (git-fixes).
- tipc: fix race condition causing hung sendto (networking-stable-19_03_07).
- tipc: missing entries in name table of publications (networking-stable-19_04_19).
- tools lib traceevent: Fix missing equality check for strcmp (bsc#1129770).
- tools/cpupower: Add Hygon Dhyana support ().
- tpm: Fix the type of the return value in calc_tpm2_event_size() (bsc#1082555).
- tracing/hrtimer: Fix tracing bugs by taking all clock bases and modes into account (bsc#1132527).
- tracing: Fix a memory leak by early error exit in trace_pid_write() (bsc#1133702).
- tracing: Fix buffer_ref pipe ops (bsc#1133698).
- tracing: Fix partial reading of trace event's id file (bsc#1136573).
- treewide: Use DEVICE_ATTR_WO (bsc#1137739).
- tty: increase the default flip buffer limit to 2*640K (bsc#1051510).
- tty: pty: Fix race condition between release_one_tty and pty_write (bsc#1051510).
- tty: serial_core, add -&gt;install (bnc#1129693).
- tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0 (bsc#1051510).
- tun: add a missing rcu_read_unlock() in error path (networking-stable-19_03_28).
- tun: fix blocking read (networking-stable-19_03_07).
- tun: properly test for IFF_UP (networking-stable-19_03_28).
- tun: remove unnecessary memory barrier (networking-stable-19_03_07).
- uas: fix alignment of scatter/gather segments (bsc#1129770).
- udp: use indirect call wrappers for GRO socket lookup (bsc#1124503).
- ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour (bsc#1135323).
- usb-storage: Set virt_boundary_mask to avoid SG overflows (bsc#1051510).
- usb: cdc-acm: fix unthrottle races (bsc#1051510).
- usb: chipidea: Grab the (legacy) usb PHY by phandle first (bsc#1051510).
- usb: core: Fix bug caused by duplicate interface PM usage counter (bsc#1051510).
- usb: core: Fix unterminated string returned by usb_string() (bsc#1051510).
- usb: dwc3: Fix default lpm_nyet_threshold value (bsc#1051510).
- usb: f_fs: Avoid crash due to out-of-scope stack ptr access (bsc#1051510).
- usb: gadget: net2272: Fix net2272_dequeue() (bsc#1051510).
- usb: gadget: net2280: Fix net2280_dequeue() (bsc#1051510).
- usb: gadget: net2280: Fix overrun of OUT messages (bsc#1051510).
- usb: serial: cp210x: fix GPIO in autosuspend (bsc#1120902).
- usb: serial: f81232: fix interrupt worker not stop (bsc#1051510).
- usb: serial: fix unthrottle races (bsc#1051510).
- usb: u132-hcd: fix resource leak (bsc#1051510).
- usb: usb251xb: fix to avoid potential NULL pointer dereference (bsc#1051510).
- usb: usbip: fix isoc packet num validation in get_pipe (bsc#1051510).
- usb: w1 ds2490: Fix bug caused by improper use of altsetting array (bsc#1051510).
- usb: yurex: Fix protection fault after device removal (bsc#1051510).
- userfaultfd: use RCU to free the task struct when fork fails (git-fixes).
- vfio/mdev: Avoid release parent reference during error path (bsc#1051510).
- vfio/mdev: Fix aborting mdev child device removal if one fails (bsc#1051510).
- vfio/pci: use correct format characters (bsc#1051510).
- vfio_pci: Enable memory accesses before calling pci_map_rom (bsc#1051510).
- vfs: allow dedupe of user owned read-only files (bsc#1133778, bsc#1132219).
- vfs: avoid problematic remapping requests into partial EOF block (bsc#1133850, bsc#1132219).
- vfs: dedupe should return EPERM if permission is not granted (bsc#1133779, bsc#1132219).
- vfs: dedupe: extract helper for a single dedup (bsc#1133769, bsc#1132219).
- vfs: exit early from zero length remap operations (bsc#1132411, bsc#1132219).
- vfs: export vfs_dedupe_file_range_one() to modules (bsc#1133772, bsc#1132219).
- vfs: limit size of dedupe (bsc#1132397, bsc#1132219).
- vfs: rename clone_verify_area to remap_verify_area (bsc#1133852, bsc#1132219).
- vfs: skip zero-length dedupe requests (bsc#1133851, bsc#1132219).
- vfs: swap names of {do,vfs}_clone_file_range() (bsc#1133774, bsc#1132219).
- vfs: vfs_clone_file_prep_inodes should return EINVAL for a clone from beyond EOF (bsc#1133780, bsc#1132219).
- vhost/vsock: fix reset orphans race with close timeout (bsc#1051510).
- vhost: reject zero size iova range (networking-stable-19_04_19).
- virtio-blk: limit number of hw queues by nr_cpu_ids (bsc#1051510).
- virtio: Honour 'may_reduce_num' in vring_create_virtqueue (bsc#1051510).
- virtio_pci: fix a NULL pointer reference in vp_del_vqs (bsc#1051510).
- vrf: check accept_source_route on the original netdevice (networking-stable-19_04_10).
- vsock/virtio: fix kernel panic after device hot-unplug (bsc#1051510).
- vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock (bsc#1051510).
- vsock/virtio: Initialize core virtio vsock before registering the driver (bsc#1051510).
- vsock/virtio: reset connected sockets on device removal (bsc#1051510).
- vt: always call notifier with the console lock held (bsc#1051510).
- vxlan: Do not call gro_cells_destroy() before device is unregistered (networking-stable-19_03_28).
- vxlan: test dev-&gt;flags and IFF_UP before calling netif_rx() (networking-stable-19_02_20).
- wil6210: check null pointer in _wil_cfg80211_merge_extra_ies (bsc#1051510).
- wlcore: Fix memory leak in case wl12xx_fetch_firmware failure (bsc#1051510).
- x86/alternative: Init ideal_nops for Hygon Dhyana ().
- x86/amd_nb: Check vendor in AMD-only functions ().
- x86/apic: Add Hygon Dhyana support ().
- x86/bugs: Add Hygon Dhyana to the respective mitigation machinery ().
- x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die processors ().
- x86/cpu/mtrr: Support TOP_MEM2 and get MTRR number ().
- x86/cpu: Create Hygon Dhyana architecture support file ().
- x86/cpu: Get cache info and setup cache cpumap for Hygon Dhyana ().
- x86/cpu: Sanitize FAM6_ATOM naming (bsc#1111331).
- x86/events: Add Hygon Dhyana support to PMU infrastructure ().
- x86/kvm/hyper-v: avoid spurious pending stimer on vCPU init (bsc#1132572).
- x86/kvm: Add Hygon Dhyana support to kvm ().
- x86/MCE/AMD, EDAC/mce_amd: Add new error descriptions for some SMCA bank types (bsc#1128415).
- x86/MCE/AMD, EDAC/mce_amd: Add new McaTypes for CS, PSP, and SMU units (bsc#1128415).
- x86/MCE/AMD, EDAC/mce_amd: Add new MP5, NBIO, and pciE SMCA bank types (bsc#1128415).
- x86/mce/AMD, EDAC/mce_amd: Enumerate Reserved SMCA bank type (bsc#1128415).
- x86/mce/AMD: Pass the bank number to smca_get_bank_type() (bsc#1128415).
- x86/mce: Add Hygon Dhyana support to the MCA infrastructure ().
- x86/mce: Do not disable MCA banks when offlining a CPU on AMD ().
- x86/MCE: Fix kABI for new AMD bank names (bsc#1128415).
- x86/mce: Handle varying MCA bank counts (bsc#1128415).
- x86/msr-index: Cleanup bit defines (bsc#1111331).
- x86/pci, x86/amd_nb: Add Hygon Dhyana support to pci and northbridge ().
- x86/pci: Fixup RTIT_BAR of Intel Denverton Trace Hub (bsc#1120318).
- x86/perf/amd: Remove need to check 'running' bit in NMI handler (bsc#1131438).
- x86/perf/amd: Resolve NMI latency issues for active PMCs (bsc#1131438).
- x86/perf/amd: Resolve race condition when disabling PMC (bsc#1131438).
- x86/smpboot: Do not use BSP INIT delay and MWAIT to idle on Dhyana ().
- x86/speculation/mds: Fix documentation typo (bsc#1135642).
- x86/speculation: Prevent deadlock on ssb_state::lock (bsc#1114279).
- x86/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
- x86/tsc: Force inlining of cyc2ns bits (bsc#1052904).
- x86/xen: Add Hygon Dhyana support to Xen ().
- x86_64: Add gap to int3 to allow for call emulation (bsc#1099658).
- x86_64: Allow breakpoints to emulate call instructions (bsc#1099658).
- xen-netback: do not populate the hash cache on XenBus disconnect (networking-stable-19_03_07).
- xen-netback: fix occasional leak of grant ref mappings under memory pressure (networking-stable-19_03_07).
- xen: Prevent buffer overflow in privcmd ioctl (bsc#1065600).
- xenbus: drop useless LIST_HEAD in xenbus_write_watch() and xenbus_file_write() (bsc#1065600).
- xfrm6: avoid potential infinite loop in _decode_session6() (git-fixes).
- xfrm6: call kfree_skb when skb is toobig (git-fixes).
- xfrm: do not call rcu_read_unlock when afinfo is NULL in xfrm_get_tos (git-fixes).
- xfrm: fix 'passing zero to ERR_PTR()' warning (git-fixes).
- xfrm: Fix ESN sequence number handling for IPsec GSO packets (git-fixes).
- xfrm: fix missing dst_release() after policy blocking lbcast and multicast (git-fixes).
- xfrm: fix rcu_read_unlock usage in xfrm_local_error (git-fixes).
- xfrm: Fix stack-out-of-bounds read on socket policy lookup (git-fixes).
- xfrm: fix xfrm_do_migrate() with AEAD e.g(AES-GCM) (git-fixes).
- xfrm: reset crypto_done when iterating over multiple input xfrms (git-fixes).
- xfrm: reset transport header back to network header after all input transforms ahave been applied (git-fixes).
- xfrm: Return error on unknown encap_type in init_state (git-fixes).
- xfrm: Validate address prefix lengths in the xfrm selector (git-fixes).
- xfrm_user: prevent leaking 2 bytes of kernel memory (git-fixes).
- xfs: add log item pinning error injection tag (bsc#1114427).
- xfs: add the ability to join a held buffer to a defer_ops (bsc#1133674).
- xfs: allow xfs_lock_two_inodes to take different EXCL/SHARED modes (bsc#1132370, bsc#1132219).
- xfs: buffer lru reference count error injection tag (bsc#1114427).
- xfs: call xfs_qm_dqattach before performing reflink operations (bsc#1132368, bsc#1132219).
- xfs: cap the length of deduplication requests (bsc#1132373, bsc#1132219).
- xfs: check _btree_check_block value (bsc#1123663).
- xfs: clean up xfs_reflink_remap_blocks call site (bsc#1132413, bsc#1132219).
- xfs: convert drop_writes to use the errortag mechanism (bsc#1114427).
- xfs: create block pointer check functions (bsc#1123663).
- xfs: create inode pointer verifiers (bsc#1114427).
- xfs: detect and fix bad summary counts at mount (bsc#1114427).
- xfs: export _inobt_btrec_to_irec and _ialloc_cluster_alignment for scrub (bsc#1114427).
- xfs: export various function for the online scrubber (bsc#1123663).
- xfs: expose errortag knobs via sysfs (bsc#1114427).
- xfs: fix data corruption w/ unaligned dedupe ranges (bsc#1132405, bsc#1132219).
- xfs: fix data corruption w/ unaligned reflink ranges (bsc#1132407, bsc#1132219).
- xfs: fix pagecache truncation prior to reflink (bsc#1132412, bsc#1132219).
- xfs: fix reporting supported extra file attributes for statx() (bsc#1133529).
- xfs: fix unused variable warning in xfs_buf_set_ref() (bsc#1114427).
- xfs: flush removing page cache in xfs_reflink_remap_prep (bsc#1132414, bsc#1132219).
- xfs: force summary counter recalc at next mount (bsc#1114427).
- xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (bsc#1133675).
- xfs: kill meaningless variable 'zero' (bsc#1106011).
- xfs: make errortag a per-mountpoint structure (bsc#1123663).
- xfs: move error injection tags into their own file (bsc#1114427).
- xfs: only grab shared inode locks for source file during reflink (bsc#1132372, bsc#1132219).
- xfs: prepare xfs_break_layouts() for another layout type (bsc#1106011).
- xfs: prepare xfs_break_layouts() to be called with XFS_MMAPLOCK_EXCL (bsc#1106011).
- xfs: refactor btree block header checking functions (bsc#1123663).
- xfs: refactor btree pointer checks (bsc#1123663).
- xfs: refactor clonerange preparation into a separate helper (bsc#1132402, bsc#1132219).
- xfs: refactor unmount record write (bsc#1114427).
- xfs: refactor xfs_trans_roll (bsc#1133667).
- xfs: reflink find shared should take a transaction (bsc#1132226, bsc#1132219).
- xfs: reflink should break pnfs leases before sharing blocks (bsc#1132369, bsc#1132219).
- xfs: remove dest file's post-eof preallocations before reflinking (bsc#1132365, bsc#1132219).
- xfs: remove the ip argument to xfs_defer_finish (bsc#1133672).
- xfs: remove unneeded parameter from XFS_TEST_ERROR (bsc#1123663).
- xfs: remove xfs_zero_range (bsc#1106011).
- xfs: rename MAXPATHLEN to XFS_SYMLINK_MAXLEN (bsc#1123663).
- xfs: rename xfs_defer_join to xfs_defer_ijoin (bsc#1133668).
- xfs: replace log_badcrc_factor knob with error injection tag (bsc#1114427).
- xfs: sanity-check the unused space before trying to use it (bsc#1123663).
- xfs: serialize unaligned dio writes against all other dio writes (bsc#1134936).
- xfs: update ctime and remove suid before cloning files (bsc#1132404, bsc#1132219).
- xfs: zero posteof blocks when cloning above eof (bsc#1132403, bsc#1132219).
- xsk: export xdp_get_umem_from_qid (jsc#SLE-4797).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-18"/>
	<updated date="2019-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1012382">SUSE bug 1012382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052904">SUSE bug 1052904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053043">SUSE bug 1053043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055121">SUSE bug 1055121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063638">SUSE bug 1063638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068546">SUSE bug 1068546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070872">SUSE bug 1070872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075020">SUSE bug 1075020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082387">SUSE bug 1082387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085535">SUSE bug 1085535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085536">SUSE bug 1085536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086657">SUSE bug 1086657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088804">SUSE bug 1088804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093389">SUSE bug 1093389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097583">SUSE bug 1097583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097584">SUSE bug 1097584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097585">SUSE bug 1097585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097586">SUSE bug 1097586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097587">SUSE bug 1097587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097588">SUSE bug 1097588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099658">SUSE bug 1099658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103186">SUSE bug 1103186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103259">SUSE bug 1103259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106011">SUSE bug 1106011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106284">SUSE bug 1106284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108193">SUSE bug 1108193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108838">SUSE bug 1108838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108937">SUSE bug 1108937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110946">SUSE bug 1110946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111331">SUSE bug 1111331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111696">SUSE bug 1111696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112063">SUSE bug 1112063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112128">SUSE bug 1112128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114427">SUSE bug 1114427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114542">SUSE bug 1114542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114638">SUSE bug 1114638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115688">SUSE bug 1115688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117114">SUSE bug 1117114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117158">SUSE bug 1117158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117561">SUSE bug 1117561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118139">SUSE bug 1118139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119680">SUSE bug 1119680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119843">SUSE bug 1119843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120091">SUSE bug 1120091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120318">SUSE bug 1120318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120423">SUSE bug 1120423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120566">SUSE bug 1120566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120843">SUSE bug 1120843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120902">SUSE bug 1120902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122767">SUSE bug 1122767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122776">SUSE bug 1122776</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123454">SUSE bug 1123454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123663">SUSE bug 1123663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124503">SUSE bug 1124503</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124839">SUSE bug 1124839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126356">SUSE bug 1126356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126704">SUSE bug 1126704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127175">SUSE bug 1127175</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127374">SUSE bug 1127374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127616">SUSE bug 1127616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128052">SUSE bug 1128052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128415">SUSE bug 1128415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128544">SUSE bug 1128544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128904">SUSE bug 1128904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128971">SUSE bug 1128971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128979">SUSE bug 1128979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129138">SUSE bug 1129138</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129273">SUSE bug 1129273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129497">SUSE bug 1129497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129693">SUSE bug 1129693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129845">SUSE bug 1129845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130195">SUSE bug 1130195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130425">SUSE bug 1130425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130527">SUSE bug 1130527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130567">SUSE bug 1130567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130579">SUSE bug 1130579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130699">SUSE bug 1130699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130937">SUSE bug 1130937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130972">SUSE bug 1130972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131326">SUSE bug 1131326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131427">SUSE bug 1131427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131438">SUSE bug 1131438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131451">SUSE bug 1131451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131467">SUSE bug 1131467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131488">SUSE bug 1131488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131530">SUSE bug 1131530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131565">SUSE bug 1131565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131574">SUSE bug 1131574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131587">SUSE bug 1131587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131659">SUSE bug 1131659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131673">SUSE bug 1131673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131847">SUSE bug 1131847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131848">SUSE bug 1131848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131851">SUSE bug 1131851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131900">SUSE bug 1131900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131934">SUSE bug 1131934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131935">SUSE bug 1131935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132044">SUSE bug 1132044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132219">SUSE bug 1132219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132226">SUSE bug 1132226</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132227">SUSE bug 1132227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132365">SUSE bug 1132365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132368">SUSE bug 1132368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132369">SUSE bug 1132369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132370">SUSE bug 1132370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132372">SUSE bug 1132372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132373">SUSE bug 1132373</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132384">SUSE bug 1132384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132397">SUSE bug 1132397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132402">SUSE bug 1132402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132403">SUSE bug 1132403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132404">SUSE bug 1132404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132405">SUSE bug 1132405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132407">SUSE bug 1132407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132411">SUSE bug 1132411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132412">SUSE bug 1132412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132413">SUSE bug 1132413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132414">SUSE bug 1132414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132426">SUSE bug 1132426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132527">SUSE bug 1132527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132531">SUSE bug 1132531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132555">SUSE bug 1132555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132558">SUSE bug 1132558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132561">SUSE bug 1132561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132562">SUSE bug 1132562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132563">SUSE bug 1132563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132564">SUSE bug 1132564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132570">SUSE bug 1132570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132571">SUSE bug 1132571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132572">SUSE bug 1132572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132589">SUSE bug 1132589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132618">SUSE bug 1132618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132673">SUSE bug 1132673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132681">SUSE bug 1132681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132726">SUSE bug 1132726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132828">SUSE bug 1132828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132894">SUSE bug 1132894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132943">SUSE bug 1132943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132982">SUSE bug 1132982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133005">SUSE bug 1133005</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133016">SUSE bug 1133016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133094">SUSE bug 1133094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133095">SUSE bug 1133095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133115">SUSE bug 1133115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133149">SUSE bug 1133149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133176">SUSE bug 1133176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133188">SUSE bug 1133188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133190">SUSE bug 1133190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133320">SUSE bug 1133320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133486">SUSE bug 1133486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133529">SUSE bug 1133529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133547">SUSE bug 1133547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133584">SUSE bug 1133584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133593">SUSE bug 1133593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133612">SUSE bug 1133612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133616">SUSE bug 1133616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133667">SUSE bug 1133667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133668">SUSE bug 1133668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133672">SUSE bug 1133672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133674">SUSE bug 1133674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133675">SUSE bug 1133675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133698">SUSE bug 1133698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133702">SUSE bug 1133702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133731">SUSE bug 1133731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133769">SUSE bug 1133769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133772">SUSE bug 1133772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133774">SUSE bug 1133774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133778">SUSE bug 1133778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133779">SUSE bug 1133779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133780">SUSE bug 1133780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133825">SUSE bug 1133825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133850">SUSE bug 1133850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133851">SUSE bug 1133851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133852">SUSE bug 1133852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133897">SUSE bug 1133897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134160">SUSE bug 1134160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134162">SUSE bug 1134162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134199">SUSE bug 1134199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134200">SUSE bug 1134200</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134201">SUSE bug 1134201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134202">SUSE bug 1134202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134203">SUSE bug 1134203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134204">SUSE bug 1134204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134205">SUSE bug 1134205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134223">SUSE bug 1134223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134354">SUSE bug 1134354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134393">SUSE bug 1134393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134397">SUSE bug 1134397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134459">SUSE bug 1134459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134460">SUSE bug 1134460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134461">SUSE bug 1134461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134597">SUSE bug 1134597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134600">SUSE bug 1134600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134607">SUSE bug 1134607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134618">SUSE bug 1134618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134651">SUSE bug 1134651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134671">SUSE bug 1134671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134760">SUSE bug 1134760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134806">SUSE bug 1134806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134810">SUSE bug 1134810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134813">SUSE bug 1134813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134848">SUSE bug 1134848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134936">SUSE bug 1134936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134945">SUSE bug 1134945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134946">SUSE bug 1134946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134947">SUSE bug 1134947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134948">SUSE bug 1134948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134949">SUSE bug 1134949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134950">SUSE bug 1134950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134951">SUSE bug 1134951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134952">SUSE bug 1134952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134953">SUSE bug 1134953</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134972">SUSE bug 1134972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134974">SUSE bug 1134974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134975">SUSE bug 1134975</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134980">SUSE bug 1134980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134981">SUSE bug 1134981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134983">SUSE bug 1134983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134987">SUSE bug 1134987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134989">SUSE bug 1134989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134990">SUSE bug 1134990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134994">SUSE bug 1134994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134995">SUSE bug 1134995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134998">SUSE bug 1134998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134999">SUSE bug 1134999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135006">SUSE bug 1135006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135007">SUSE bug 1135007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135008">SUSE bug 1135008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135018">SUSE bug 1135018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135021">SUSE bug 1135021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135024">SUSE bug 1135024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135026">SUSE bug 1135026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135027">SUSE bug 1135027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135028">SUSE bug 1135028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135029">SUSE bug 1135029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135031">SUSE bug 1135031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135033">SUSE bug 1135033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135034">SUSE bug 1135034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135035">SUSE bug 1135035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135036">SUSE bug 1135036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135037">SUSE bug 1135037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135038">SUSE bug 1135038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135039">SUSE bug 1135039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135041">SUSE bug 1135041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135042">SUSE bug 1135042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135044">SUSE bug 1135044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135045">SUSE bug 1135045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135046">SUSE bug 1135046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135047">SUSE bug 1135047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135049">SUSE bug 1135049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135051">SUSE bug 1135051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135052">SUSE bug 1135052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135053">SUSE bug 1135053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135055">SUSE bug 1135055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135056">SUSE bug 1135056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135058">SUSE bug 1135058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135100">SUSE bug 1135100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135120">SUSE bug 1135120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135278">SUSE bug 1135278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135281">SUSE bug 1135281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135309">SUSE bug 1135309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135312">SUSE bug 1135312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135314">SUSE bug 1135314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135315">SUSE bug 1135315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135316">SUSE bug 1135316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135320">SUSE bug 1135320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135323">SUSE bug 1135323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135330">SUSE bug 1135330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135492">SUSE bug 1135492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135542">SUSE bug 1135542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135556">SUSE bug 1135556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135603">SUSE bug 1135603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135661">SUSE bug 1135661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135758">SUSE bug 1135758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136188">SUSE bug 1136188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136206">SUSE bug 1136206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136215">SUSE bug 1136215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136345">SUSE bug 1136345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136347">SUSE bug 1136347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136348">SUSE bug 1136348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136353">SUSE bug 1136353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136424">SUSE bug 1136424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136428">SUSE bug 1136428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136430">SUSE bug 1136430</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136432">SUSE bug 1136432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136434">SUSE bug 1136434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136435">SUSE bug 1136435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136438">SUSE bug 1136438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136439">SUSE bug 1136439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136456">SUSE bug 1136456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136469">SUSE bug 1136469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136477">SUSE bug 1136477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136478">SUSE bug 1136478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136498">SUSE bug 1136498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136573">SUSE bug 1136573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136586">SUSE bug 1136586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136881">SUSE bug 1136881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136935">SUSE bug 1136935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136990">SUSE bug 1136990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137151">SUSE bug 1137151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137152">SUSE bug 1137152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137153">SUSE bug 1137153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137162">SUSE bug 1137162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137201">SUSE bug 1137201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137224">SUSE bug 1137224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137232">SUSE bug 1137232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137233">SUSE bug 1137233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137236">SUSE bug 1137236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137372">SUSE bug 1137372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137429">SUSE bug 1137429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137444">SUSE bug 1137444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137586">SUSE bug 1137586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137739">SUSE bug 1137739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137752">SUSE bug 1137752</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138291">SUSE bug 1138291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138293">SUSE bug 1138293</bugzilla>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16880/">CVE-2018-16880</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7191/">CVE-2018-7191</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10124/">CVE-2019-10124</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11085/">CVE-2019-11085</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-11477/">CVE-2019-11477</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11478/">CVE-2019-11478</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11479/">CVE-2019-11479</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11486/">CVE-2019-11486</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11487/">CVE-2019-11487</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11811/">CVE-2019-11811</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11815/">CVE-2019-11815</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11833/">CVE-2019-11833</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11884/">CVE-2019-11884</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-12382/">CVE-2019-12382</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12818/">CVE-2019-12818</cve>
	<cve impact="low" cvss3="3.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12819/">CVE-2019-12819</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3846/">CVE-2019-3846</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3882/">CVE-2019-3882</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5489/">CVE-2019-5489</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8564/">CVE-2019-8564</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9003/">CVE-2019-9003</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9500/">CVE-2019-9500</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9503/">CVE-2019-9503</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497044" comment="reiserfs-kmp-default-4.12.14-197.4.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138285" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1094555" ref_url="https://bugzilla.suse.com/1094555" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1128432" ref_url="https://bugzilla.suse.com/1128432" source="BUGZILLA"/>
		<reference ref_id="1134730" ref_url="https://bugzilla.suse.com/1134730" source="BUGZILLA"/>
		<reference ref_id="1134738" ref_url="https://bugzilla.suse.com/1134738" source="BUGZILLA"/>
		<reference ref_id="1135153" ref_url="https://bugzilla.suse.com/1135153" source="BUGZILLA"/>
		<reference ref_id="1135296" ref_url="https://bugzilla.suse.com/1135296" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1136156" ref_url="https://bugzilla.suse.com/1136156" source="BUGZILLA"/>
		<reference ref_id="1136157" ref_url="https://bugzilla.suse.com/1136157" source="BUGZILLA"/>
		<reference ref_id="1136271" ref_url="https://bugzilla.suse.com/1136271" source="BUGZILLA"/>
		<reference ref_id="1136333" ref_url="https://bugzilla.suse.com/1136333" source="BUGZILLA"/>
		<reference ref_id="1137103" ref_url="https://bugzilla.suse.com/1137103" source="BUGZILLA"/>
		<reference ref_id="1137194" ref_url="https://bugzilla.suse.com/1137194" source="BUGZILLA"/>
		<reference ref_id="1137366" ref_url="https://bugzilla.suse.com/1137366" source="BUGZILLA"/>
		<reference ref_id="1137884" ref_url="https://bugzilla.suse.com/1137884" source="BUGZILLA"/>
		<reference ref_id="1137985" ref_url="https://bugzilla.suse.com/1137985" source="BUGZILLA"/>
		<reference ref_id="1138263" ref_url="https://bugzilla.suse.com/1138263" source="BUGZILLA"/>
		<reference ref_id="1138336" ref_url="https://bugzilla.suse.com/1138336" source="BUGZILLA"/>
		<reference ref_id="1138374" ref_url="https://bugzilla.suse.com/1138374" source="BUGZILLA"/>
		<reference ref_id="1138375" ref_url="https://bugzilla.suse.com/1138375" source="BUGZILLA"/>
		<reference ref_id="1138589" ref_url="https://bugzilla.suse.com/1138589" source="BUGZILLA"/>
		<reference ref_id="1138681" ref_url="https://bugzilla.suse.com/1138681" source="BUGZILLA"/>
		<reference ref_id="1138719" ref_url="https://bugzilla.suse.com/1138719" source="BUGZILLA"/>
		<reference ref_id="1138732" ref_url="https://bugzilla.suse.com/1138732" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16871" ref_url="https://www.suse.com/security/cve/CVE-2018-16871/" source="CVE"/>
		<reference ref_id="CVE-2019-12614" ref_url="https://www.suse.com/security/cve/CVE-2019-12614/" source="CVE"/>
		<reference ref_id="CVE-2019-12817" ref_url="https://www.suse.com/security/cve/CVE-2019-12817/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005658.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

This update adds support for the Hygon Dhyana CPU (fate#327735).

The following security bugs were fixed:

- CVE-2019-12614: An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c. There was an unchecked kstrdup of prop-&gt;name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash) (bnc#1137194).
- CVE-2018-16871: A NULL pointer dereference due to an anomalized NFS message sequence was fixed. (bnc#1137103).
- CVE-2019-12817: On the PowerPC architecture, local attackers could access other users processes memory (bnc#1138263).

The following non-security bugs were fixed:

- 6lowpan: Off by one handling -&gt;nexthdr (bsc#1051510).
- acpi: Add Hygon Dhyana support (fate#327735).
- af_key: unconditionally clone on broadcast (bsc#1051510).
- alsa: firewire-motu: fix destruction of data for isochronous resources (bsc#1051510).
- alsa: hda/realtek - Update headset mode for ALC256 (bsc#1051510).
- alsa: oxfw: allow PCM capture for Stanton SCS.1m (bsc#1051510).
- ASoC: cs42xx8: Add regcache mask dirty (bsc#1051510).
- ASoC: fsl_asrc: Fix the issue about unsupported rate (bsc#1051510).
- audit: fix a memory leak bug (bsc#1051510).
- blk-mq: fix hang caused by freeze/unfreeze sequence (bsc#1128432).
- ceph: factor out ceph_lookup_inode() (bsc#1138681).
- ceph: fix NULL pointer deref when debugging is enabled (bsc#1138681).
- ceph: fix potential use-after-free in ceph_mdsc_build_path (bsc#1138681).
- ceph: flush dirty inodes before proceeding with remount (bsc#1138681).
- ceph: print inode number in __caps_issued_mask debugging messages (bsc#1138681).
- ceph: quota: fix quota subdir mounts (bsc#1138681).
- ceph: remove duplicated filelock ref increase (bsc#1138681).
- cfg80211: fix memory leak of wiphy device name (bsc#1051510).
- cpufreq: Add Hygon Dhyana support (fate#327735).
- cpufreq: AMD: Ignore the check for ProcFeedback in ST/CZ  (fate#327735).
- cpu/topology: Export die_id (jsc#SLE-5454).
- Do not restrict NFSv4.2 on openSUSE (bsc#1138719).
- drbd: Avoid Clang warning about pointless switch statment (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote (bsc#1051510).
- drivers: depend on HAS_IOMEM for devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers: fix a typo in the kernel doc for devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers: provide devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers/rapidio/devices/rio_mport_cdev.c: fix resource leak in error handling path in 'rio_dma_transfer()' (bsc#1051510).
- drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen() (bsc#1051510).
- drivers: thermal: tsens: Do not print error message on -EPROBE_DEFER (bsc#1051510).
- drm: add fallback override/firmware EDID modes workaround (bsc#1111666).
- drm/amd/display: Use plane-&gt;color_space for dpp if specified (bsc#1111666).
- drm/edid: abstract override/firmware EDID retrieval (bsc#1111666).
- drm/i915: Add new AML_ULX support list (jsc#SLE-4986).
- drm/i915: Add new ICL PCI ID (jsc#SLE-4986).
- drm/i915/aml: Add new Amber Lake PCI ID (jsc#SLE-4986).
- drm/i915: Apply correct ddi translation table for AML device (jsc#SLE-4986).
- drm/i915: Attach the pci match data to the device upon creation (jsc#SLE-4986).
- drm/i915/cfl: Adding another PCI Device ID (jsc#SLE-4986).
- drm/i915/cml: Add CML PCI IDS (jsc#SLE-4986).
- drm/i915: Fix uninitialized mask in intel_device_info_subplatform_init (jsc#SLE-4986).
- drm/i915/icl: Adding few more device IDs for Ice Lake (jsc#SLE-4986).
- drm/i915: Introduce concept of a sub-platform (jsc#SLE-4986).
- drm/i915: Mark AML 0x87CA as ULX (jsc#SLE-4986).
- drm/i915: Move final cleanup of drm_i915_private to i915_driver_destroy (jsc#SLE-4986).
- drm/i915/perf: fix whitelist on Gen10+ (bsc#1051510).
- drm/i915: Remove redundant device id from IS_IRONLAKE_M macro (jsc#SLE-4986).
- drm/i915/sdvo: Implement proper HDMI audio support for SDVO (bsc#1051510).
- drm/i915: Split Pineview device info into desktop and mobile (jsc#SLE-4986).
- drm/i915: Split some PCI ids into separate groups (jsc#SLE-4986).
- drm/i915: start moving runtime device info to a separate struct (jsc#SLE-4986).
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver (bsc#1111666).
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable() (bsc#1111666).
- drm/mediatek: clear num_pipes when unbind driver (bsc#1111666).
- drm/mediatek: fix unbind functions (bsc#1111666).
- drm/mediatek: unbind components in mtk_drm_unbind() (bsc#1111666).
- drm/nouveau/disp/dp: respect sink limits when selecting failsafe link configuration (bsc#1051510).
- drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when encoders change (bsc#1111666).
- drm/nouveau/kms/gv100-: fix spurious window immediate interlocks (bsc#1111666).
- EDAC, amd64: Add Hygon Dhyana support (fate#327735).
- EDAC/mc: Fix edac_mc_find() in case no device is found (bsc#1114279).
- HID: wacom: Add ability to provide explicit battery status info (bsc#1051510).
- HID: wacom: Add support for 3rd generation Intuos BT (bsc#1051510).
- HID: wacom: Add support for Pro Pen slim (bsc#1051510).
- HID: wacom: convert Wacom custom usages to standard HID usages (bsc#1051510).
- HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth (bsc#1051510).
- HID: wacom: Do not report anything prior to the tool entering range (bsc#1051510).
- HID: wacom: Do not set tool type until we're in range (bsc#1051510).
- HID: wacom: fix mistake in printk (bsc#1051510).
- HID: wacom: generic: add the 'Report Valid' usage (bsc#1051510).
- HID: wacom: generic: Ignore HID_DG_BATTERYSTRENTH == 0 (bsc#1051510).
- HID: wacom: generic: Leave tool in prox until it completely leaves sense (bsc#1051510).
- HID: wacom: generic: Refactor generic battery handling (bsc#1051510).
- HID: wacom: generic: Report AES battery information (bsc#1051510).
- HID: wacom: generic: Reset events back to zero when pen leaves (bsc#1051510).
- HID: wacom: generic: Scale battery capacity measurements to percentages (bsc#1051510).
- HID: wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (bsc#1051510).
- HID: wacom: generic: Send BTN_TOOL_PEN in prox once the pen enters range (bsc#1051510).
- HID: wacom: generic: Support multiple tools per report (bsc#1051510).
- HID: wacom: generic: Use generic codepath terminology in wacom_wac_pen_report (bsc#1051510).
- HID: wacom: Mark expected switch fall-through (bsc#1051510).
- HID: wacom: Move handling of HID quirks into a dedicated function (bsc#1051510).
- HID: wacom: Move HID fix for AES serial number into wacom_hid_usage_quirk (bsc#1051510).
- HID: wacom: Properly handle AES serial number and tool type (bsc#1051510).
- HID: wacom: Queue events with missing type/serial data for later processing (bsc#1051510).
- HID: wacom: Remove comparison of u8 mode with zero and simplify (bsc#1051510).
- HID: wacom: Replace touch_max fixup code with static touch_max definitions (bsc#1051510).
- HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact (bsc#1051510).
- HID: wacom: Support 'in range' for Intuos/Bamboo tablets where possible (bsc#1051510).
- HID: Wacom: switch Dell canvas into highres mode (bsc#1051510).
- HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary (bsc#1051510).
- HID: wacom: wacom_wac_collection() is local to wacom_wac.c (bsc#1051510).
- HID: wacom: Work around HID descriptor bug in DTK-2451 and DTH-2452 (bsc#1051510).
- hwmon/coretemp: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).
- hwmon/coretemp: Support multi-die/package (jsc#SLE-5454).
- hwmon: (k10temp) 27C Offset needed for Threadripper2  (FATE#327735).
- hwmon: (k10temp) Add Hygon Dhyana support (FATE#327735).
- hwmon: (k10temp) Add support for AMD Ryzen w/ Vega graphics  (FATE#327735).
- hwmon: (k10temp) Add support for family 17h (FATE#327735).
- hwmon: (k10temp) Add support for Stoney Ridge and Bristol  Ridge CPUs (FATE#327735).
- hwmon: (k10temp) Add support for temperature offsets  (FATE#327735).
- hwmon: (k10temp) Add temperature offset for Ryzen 1900X  (FATE#327735).
- hwmon: (k10temp) Add temperature offset for Ryzen 2700X  (FATE#327735).
- hwmon: (k10temp) Correct model name for Ryzen 1600X  (FATE#327735).
- hwmon: (k10temp) Display both Tctl and Tdie (FATE#327735).
- hwmon: (k10temp) Fix reading critical temperature register  (FATE#327735).
- hwmon: (k10temp) Make function get_raw_temp static  (FATE#327735).
- hwmon: (k10temp) Move chip specific code into probe function  (FATE#327735).
- hwmon: (k10temp) Only apply temperature offset if result is  positive (FATE#327735).
- hwmon: (k10temp) Support all Family 15h Model 6xh and Model  7xh processors (FATE#327735).
- hwmon: k10temp: Support Threadripper 2920X, 2970WX; simplify  offset table (FATE#327735).
- hwmon: (k10temp) Use API function to access System Management  Network (FATE#327735).
- hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs  (FATE#327735).
- i2c-piix4: Add Hygon Dhyana SMBus support (FATE#327735).
- ibmveth: Update ethtool settings to reflect virtual properties (bsc#1136157, LTC#177197).
- ipv6: fib: Do not assume only nodes hold a reference on routes (bsc#1138732).
- kabi: Mask no_vf_scan in struct pci_dev (jsc#SLE-5803  FATE#327056).
- kabi: s390: enum interruption_class (jsc#SLE-5789 bsc#1134730 LTC#173388).
- kabi: s390: enum interruption_class (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- kabi/severities: Whitelist airq_iv_* (s390-specific)
- kABI workaround for asus-wmi changes (bsc#1051510).
- kABI workaround for the new pci_dev.skip_bus_pm field addition (bsc#1051510).
- kabi: x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).
- kabi: x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).
- kvm: x86: Include CPUID leaf 0x8000001e in kvm's supported CPUID (bsc#1114279).
- kvm: x86: Include multiple indices with CPUID leaf 0x8000001d (bsc#1114279).
- mfd: intel-lpss: Set the device in reset state when init (bsc#1051510).
- mfd: tps65912-spi: Add missing of table registration (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers (bsc#1051510).
- mmc: mmci: Prevent polling for busy detection in IRQ context (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support (bsc#1051510).
- module: Fix livepatch/ftrace module text permissions race  (bsc#1071995 fate#323487).
- new primitive: vmemdup_user() (jsc#SLE-4712 bsc#1136156).
- nl80211: fix station_info pertid memory leak (bsc#1051510).
- {nl,mac}80211: allow 4addr AP operation on crypto controlled devices (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D (bsc#1051510).
- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes (bsc#1051510).
- nvmem: Do not let a NULL cell_id for nvmem_cell_get() crash us (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated function (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read (bsc#1051510).
- nvme: skip nvme_update_disk_info() if the controller is not live (bsc#1128432).
- PCI: Disable VF decoding before pcibios_sriov_disable() updates resources (jsc#SLE-5803).
- PCI/IOV: Add flag so platforms can skip VF scanning  (jsc#SLE-5803 FATE#327056).
- PCI/IOV: Factor out sriov_add_vfs() (jsc#SLE-5803 FATE#327056).
- PCI: PM: Avoid possible suspend-to-idle issue (bsc#1051510).
- perf tools: Add Hygon Dhyana support (fate#327735).
- perf/x86/intel/cstate: Support multi-die/package (jsc#SLE-5454).
- perf/x86/intel/rapl: Cosmetic rename internal variables in response to multi-die/pkg support (jsc#SLE-5454).
- perf/x86/intel/rapl: Support multi-die/package (jsc#SLE-5454).
- perf/x86/intel/uncore: Cosmetic renames in response to multi-die/pkg support (jsc#SLE-5454).
- perf/x86/intel/uncore: Support multi-die/package (jsc#SLE-5454).
- platform/chrome: cros_ec_proto: check for NULL transfer function (bsc#1051510).
- platform_data/mlxreg: Add capability field to core platform data (bsc#1112374).
- platform_data/mlxreg: additions for Mellanox watchdog driver (bsc#1112374).
- platform_data/mlxreg: Document fixes for core platform data (bsc#1112374).
- platform/mellanox: Add new ODM system types to mlx-platform (bsc#1112374).
- platform/mellanox: Add TmFifo driver for Mellanox BlueField Soc (bsc#1136333 jsc#SLE-4994).
- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to remove flow (bsc#1111666).
- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi (bsc#1051510).
- platform/x86: intel_pmc_core: Add ICL platform support (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Add Package cstates residency info (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Avoid a u32 overflow (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Include Reserved IP for LTR (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Mark local function static (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Quirk to ignore XTAL shutdown (jsc#SLE-5226).
- platform/x86: mlx-platform: Add ASIC hotplug device configuration (bsc#1112374).
- platform/x86: mlx-platform: Add definitions for new registers (bsc#1112374).
- platform/x86: mlx-platform: Add extra CPLD for next generation systems (bsc#1112374).
- platform/x86: mlx-platform: Add LED platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlxreg-fan platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlxreg-io platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlx-wdt platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add support for fan capability registers (bsc#1112374).
- platform/x86: mlx-platform: Add support for fan direction register (bsc#1112374).
- platform/x86: mlx-platform: Add support for new VMOD0007 board name (bsc#1112374).
- platform/x86: mlx-platform: Add support for tachometer speed register (bsc#1112374).
- platform/x86: mlx-platform: Add UID LED for the next generation systems (bsc#1112374).
- platform/x86: mlx-platform: Allow mlxreg-io driver activation for more systems (bsc#1112374).
- platform/x86: mlx-platform: Allow mlxreg-io driver activation for new systems (bsc#1112374).
- platform/x86: mlx-platform: Change mlxreg-io configuration for MSN274x systems (bsc#1112374).
- platform/x86: mlx-platform: Convert to use SPDX identifier (bsc#1112374).
- platform/x86: mlx-platform: Fix access mode for fan_dir attribute (bsc#1112374).
- platform/x86: mlx-platform: Fix copy-paste error in mlxplat_init() (bsc#1112374).
- platform/x86: mlx-platform: Fix LED configuration (bsc#1112374).
- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device registration (bsc#1051510).
- platform/x86: mlx-platform: Fix tachometer registers (bsc#1112374).
- platform/x86: mlx-platform: Remove unused define (bsc#1112374).
- platform/x86: mlx-platform: Rename new systems product names (bsc#1112374).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks (bsc#1051510).
- powercap/intel_rapl: Simplify rapl_find_package() (jsc#SLE-5454).
- powercap/intel_rapl: Support multi-die/package (jsc#SLE-5454).
- powercap/intel_rapl: Update RAPL domain name and debug messages (jsc#SLE-5454).
- powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (bsc#1138374, LTC#178199).
- powerpc/pseries: Fix oops in hotplug memory notifier (bsc#1138375, LTC#178204).
- powerpc/pseries/mobility: prevent cpu hotplug during DT update (bsc#1138374, LTC#178199).
- powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (bsc#1138374, LTC#178199).
- power: supply: max14656: fix potential use-before-alloc (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- qmi_wwan: add network device usage statistics for qmimux devices (bsc#1051510).
- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qmi_wwan: add support for QMAP padding in the RX path (bsc#1051510).
- qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode (bsc#1051510).
- qmi_wwan: extend permitted QMAP mux_id value range (bsc#1051510).
- rapidio: fix a NULL pointer dereference when create_workqueue() fails (bsc#1051510).
- RAS/CEC: Convert the timer callback to a workqueue (bsc#1114279).
- RAS/CEC: Fix binary search function (bsc#1114279).
- rbd: do not assert on writes to snapshots (bsc#1137985 bsc#1138681).
- Revert 'ALSA: hda/realtek - Improve the headset mic for Acer Aspire laptops' (bsc#1051510).
- Revert 'HID: wacom: generic: Send BTN_TOOL_PEN in prox once the pen enters range' (bsc#1051510).
- Revert 's390/jump_label: Use 'jdd' constraint on gcc9 (bsc#1138589).' This broke the build with older gcc instead.
- s390/airq: provide cacheline aligned ivs (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/airq: recognize directed interrupts (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/dasd: fix using offset into zero size array error (bsc#1051510).
- s390: enable processes for mio instructions (jsc#SLE-5802  FATE#327055 bsc#1134738 LTC#173387).
- s390/ism: move oddities of device IO to wrapper function  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/jump_label: Use 'jdd' constraint on gcc9 (bsc#1138589).
- s390/pci: add parameter to disable usage of MIO instructions  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: add parameter to force floating irqs (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: clarify interrupt vector usage (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: fix assignment of bus resources (jsc#SLE-5802  FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: fix struct definition for set PCI function  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: gather statistics for floating vs directed irqs  (jsc#SLE-5789 FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: improve bar check (jsc#SLE-5803 FATE#327056).
- s390/pci: map IOV resources (jsc#SLE-5803 FATE#327056).
- s390/pci: mark command line parser data __initdata (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: move everything irq related to pci_irq.c (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: move io address mapping code to pci_insn.c  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: provide support for CPU directed interrupts  (jsc#SLE-5789 FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: provide support for MIO instructions (jsc#SLE-5802  FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: remove stale rc (jsc#SLE-5789 FATE#327042 bsc#1134730  LTC#173388).
- s390/pci: remove unused define (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- s390/pci: skip VF scanning (jsc#SLE-5803 FATE#327056).
- s390/protvirt: add memory sharing for diag 308 set/store  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: block kernel command line alteration  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/qeth: fix race when initializing the IP address table (bsc#1051510).
- s390/qeth: fix VLAN attribute in bridge_hostnotify udev event (bsc#1051510).
- s390/sclp: detect DIRQ facility (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- s390/setup: fix early warning messages (bsc#1051510).
- s390: show statistics for MSI IRQs (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759  FATE#327003 bsc#1135153 LTC#173151).
- s390/virtio: handle find on invalid queue gracefully (bsc#1051510).
- sched/topology: Improve load balancing on AMD EPYC (bsc#1137366).
- scsi: hpsa: bump driver version (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: check for lv removal (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: clean up two indentation issues (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct device id issues (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct device resets (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct ioaccel2 chaining (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct simple mode (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: fix an uninitialized read and dereference of pointer dev (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: mark expected switch fall-throughs (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: remove timeout from TURs (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: switch to generic DMA API (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: Use vmemdup_user to replace the open code (jsc#SLE-4712 bsc#1136156).
- scsi: megaraid_sas: Add support for DEVICE_LIST DCMD in driver (bsc#1136271).
- scsi: megaraid_sas: correct an info message (bsc#1136271).
- scsi: megaraid_sas: driver version update (bsc#1136271).
- scsi: megaraid_sas: Retry reads of outbound_intr_status reg (bsc#1136271).
- scsi: megaraid_sas: Rework code to get PD and LD list (bsc#1136271).
- scsi: megaraid_sas: Rework device add code in AEN path (bsc#1136271).
- scsi: megaraid_sas: Update structures for HOST_DEVICE_LIST DCMD (bsc#1136271).
- scsi: qla2xxx: Fix FC-AL connection target discovery (bsc#1094555).
- scsi: qla2xxx: Fix N2N target discovery with Local loop (bsc#1094555).
- scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (bsc#1135296).
- scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove (bsc#1051510).
- scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host (bsc#1051510).
- scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices (bsc#1051510).
- scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) (bsc#1051510).
- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- SMB3: Fix endian warning (bsc#1137884).
- soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher (bsc#1051510).
- soc: rockchip: Set the proper PWM for rk3288 (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in spi_unregister_master (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: spi-fsl-spi: call spi_finalize_current_message() at the end (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- supported.conf: added mlxbf_tmfifo (bsc#1136333 jsc#SLE-4994)
- thermal: rcar_gen3_thermal: disable interrupt in .remove (bsc#1051510).
- thermal/x86_pkg_temp_thermal: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).
- thermal/x86_pkg_temp_thermal: Support multi-die/package (jsc#SLE-5454).
- tmpfs: fix link accounting when a tmpfile is linked in (bsc#1051510).
- tmpfs: fix uninitialized return value in shmem_link (bsc#1051510).
- tools/cpupower: Add Hygon Dhyana support (fate#327735).
- topology: Create core_cpus and die_cpus sysfs attributes (jsc#SLE-5454).
- topology: Create package_cpus sysfs attribute (jsc#SLE-5454).
- tty: max310x: Fix external crystal register setup (bsc#1051510).
- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- usb: serial: pl2303: fix tranceiver suspend mode (bsc#1135642).
- usb: xhci: avoid null pointer deref when bos field is NULL (bsc#1135642).
- vfio: ccw: only free cp on final interrupt (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference (bsc#1051510).
- video: imsttfb: fix potential NULL pointer dereferences (bsc#1051510).
- virtio_console: initialize vtermno value for ports (bsc#1051510).
- vlan: disable SIOCSHWTSTAMP in container (bsc#1051510).
- watchdog: imx2_wdt: Fix set_timeout for big timeout values (bsc#1051510).
- x86/alternative: Init ideal_nops for Hygon Dhyana (fate#327735).
- x86/amd_nb: Add support for Raven Ridge CPUs (FATE#327735).
- x86/amd_nb: Check vendor in AMD-only functions (fate#327735).
- x86/apic: Add Hygon Dhyana support (fate#327735).
- x86/bugs: Add Hygon Dhyana to the respective mitigation  machinery (fate#327735).
- x86/cpu: Add Icelake model number (jsc#SLE-5226).
- x86/cpu/amd: Do not force the CPB cap when running under a hypervisor (bsc#1114279).
- x86/cpu: Create Hygon Dhyana architecture support file  (fate#327735).
- x86/cpufeatures: Carve out CQM features retrieval (jsc#SLE-5382).
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (jsc#SLE-5382).
- x86/cpufeatures: Enumerate the new AVX512 BFLOAT16 instructions (jsc#SLE-5382).
- x86/cpu: Get cache info and setup cache cpumap for Hygon Dhyana  (fate#327735).
- x86/cpu/hygon: Fix phys_proc_id calculation logic for multi-die processors ().
- x86/cpu/mtrr: Support TOP_MEM2 and get MTRR number  (fate#327735).
- x86/events: Add Hygon Dhyana support to PMU infrastructure  (fate#327735).
- x86/kvm: Add Hygon Dhyana support to KVM (fate#327735).
- x86/mce: Add Hygon Dhyana support to the MCA infrastructure  (fate#327735).
- x86/mce: Do not disable MCA banks when offlining a CPU on AMD  (fate#327735).
- x86/mce: Fix machine_check_poll() tests for error types (bsc#1114279).
- x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback (bsc#1114279).
- x86/microcode: Fix microcode hotplug state (bsc#1114279).
- x86/microcode: Fix the ancient deprecated microcode loading method (bsc#1114279).
- x86/mm/mem_encrypt: Disable all instrumentation for early SME setup (bsc#1114279).
- x86/pci, x86/amd_nb: Add Hygon Dhyana support to PCI and  northbridge (fate#327735).
- x86/smpboot: Do not use BSP INIT delay and MWAIT to idle on  Dhyana (fate#327735).
- x86/smpboot: Rename match_die() to match_pkg() (jsc#SLE-5454).
- x86/speculation/mds: Revert CPU buffer clear on double fault exit (bsc#1114279).
- x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).
- x86/topology: Create topology_max_die_per_package() (jsc#SLE-5454).
- x86/topology: Define topology_die_id() (jsc#SLE-5454).
- x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).
- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- x86/xen: Add Hygon Dhyana support to Xen (fate#327735).
- x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die  processors (fate#327735).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-04"/>
	<updated date="2019-07-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094555">SUSE bug 1094555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128432">SUSE bug 1128432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134730">SUSE bug 1134730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134738">SUSE bug 1134738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135153">SUSE bug 1135153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135296">SUSE bug 1135296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136156">SUSE bug 1136156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136157">SUSE bug 1136157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136271">SUSE bug 1136271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136333">SUSE bug 1136333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137103">SUSE bug 1137103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137194">SUSE bug 1137194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137366">SUSE bug 1137366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137884">SUSE bug 1137884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137985">SUSE bug 1137985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138263">SUSE bug 1138263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138336">SUSE bug 1138336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138374">SUSE bug 1138374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138375">SUSE bug 1138375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138589">SUSE bug 1138589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138681">SUSE bug 1138681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138719">SUSE bug 1138719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138732">SUSE bug 1138732</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16871/">CVE-2018-16871</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12614/">CVE-2019-12614</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-12817/">CVE-2019-12817</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497045" comment="reiserfs-kmp-default-4.12.14-197.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138286" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1088047" ref_url="https://bugzilla.suse.com/1088047" source="BUGZILLA"/>
		<reference ref_id="1098633" ref_url="https://bugzilla.suse.com/1098633" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1106383" ref_url="https://bugzilla.suse.com/1106383" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1119532" ref_url="https://bugzilla.suse.com/1119532" source="BUGZILLA"/>
		<reference ref_id="1120423" ref_url="https://bugzilla.suse.com/1120423" source="BUGZILLA"/>
		<reference ref_id="1125703" ref_url="https://bugzilla.suse.com/1125703" source="BUGZILLA"/>
		<reference ref_id="1128902" ref_url="https://bugzilla.suse.com/1128902" source="BUGZILLA"/>
		<reference ref_id="1130836" ref_url="https://bugzilla.suse.com/1130836" source="BUGZILLA"/>
		<reference ref_id="1131645" ref_url="https://bugzilla.suse.com/1131645" source="BUGZILLA"/>
		<reference ref_id="1132390" ref_url="https://bugzilla.suse.com/1132390" source="BUGZILLA"/>
		<reference ref_id="1133401" ref_url="https://bugzilla.suse.com/1133401" source="BUGZILLA"/>
		<reference ref_id="1133738" ref_url="https://bugzilla.suse.com/1133738" source="BUGZILLA"/>
		<reference ref_id="1134303" ref_url="https://bugzilla.suse.com/1134303" source="BUGZILLA"/>
		<reference ref_id="1134395" ref_url="https://bugzilla.suse.com/1134395" source="BUGZILLA"/>
		<reference ref_id="1135556" ref_url="https://bugzilla.suse.com/1135556" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135897" ref_url="https://bugzilla.suse.com/1135897" source="BUGZILLA"/>
		<reference ref_id="1136161" ref_url="https://bugzilla.suse.com/1136161" source="BUGZILLA"/>
		<reference ref_id="1136264" ref_url="https://bugzilla.suse.com/1136264" source="BUGZILLA"/>
		<reference ref_id="1136343" ref_url="https://bugzilla.suse.com/1136343" source="BUGZILLA"/>
		<reference ref_id="1136935" ref_url="https://bugzilla.suse.com/1136935" source="BUGZILLA"/>
		<reference ref_id="1137625" ref_url="https://bugzilla.suse.com/1137625" source="BUGZILLA"/>
		<reference ref_id="1137728" ref_url="https://bugzilla.suse.com/1137728" source="BUGZILLA"/>
		<reference ref_id="1138879" ref_url="https://bugzilla.suse.com/1138879" source="BUGZILLA"/>
		<reference ref_id="1139712" ref_url="https://bugzilla.suse.com/1139712" source="BUGZILLA"/>
		<reference ref_id="1139751" ref_url="https://bugzilla.suse.com/1139751" source="BUGZILLA"/>
		<reference ref_id="1139771" ref_url="https://bugzilla.suse.com/1139771" source="BUGZILLA"/>
		<reference ref_id="1139865" ref_url="https://bugzilla.suse.com/1139865" source="BUGZILLA"/>
		<reference ref_id="1140133" ref_url="https://bugzilla.suse.com/1140133" source="BUGZILLA"/>
		<reference ref_id="1140228" ref_url="https://bugzilla.suse.com/1140228" source="BUGZILLA"/>
		<reference ref_id="1140328" ref_url="https://bugzilla.suse.com/1140328" source="BUGZILLA"/>
		<reference ref_id="1140405" ref_url="https://bugzilla.suse.com/1140405" source="BUGZILLA"/>
		<reference ref_id="1140424" ref_url="https://bugzilla.suse.com/1140424" source="BUGZILLA"/>
		<reference ref_id="1140428" ref_url="https://bugzilla.suse.com/1140428" source="BUGZILLA"/>
		<reference ref_id="1140454" ref_url="https://bugzilla.suse.com/1140454" source="BUGZILLA"/>
		<reference ref_id="1140463" ref_url="https://bugzilla.suse.com/1140463" source="BUGZILLA"/>
		<reference ref_id="1140575" ref_url="https://bugzilla.suse.com/1140575" source="BUGZILLA"/>
		<reference ref_id="1140577" ref_url="https://bugzilla.suse.com/1140577" source="BUGZILLA"/>
		<reference ref_id="1140637" ref_url="https://bugzilla.suse.com/1140637" source="BUGZILLA"/>
		<reference ref_id="1140658" ref_url="https://bugzilla.suse.com/1140658" source="BUGZILLA"/>
		<reference ref_id="1140715" ref_url="https://bugzilla.suse.com/1140715" source="BUGZILLA"/>
		<reference ref_id="1140719" ref_url="https://bugzilla.suse.com/1140719" source="BUGZILLA"/>
		<reference ref_id="1140726" ref_url="https://bugzilla.suse.com/1140726" source="BUGZILLA"/>
		<reference ref_id="1140727" ref_url="https://bugzilla.suse.com/1140727" source="BUGZILLA"/>
		<reference ref_id="1140728" ref_url="https://bugzilla.suse.com/1140728" source="BUGZILLA"/>
		<reference ref_id="1140814" ref_url="https://bugzilla.suse.com/1140814" source="BUGZILLA"/>
		<reference ref_id="1140887" ref_url="https://bugzilla.suse.com/1140887" source="BUGZILLA"/>
		<reference ref_id="1140888" ref_url="https://bugzilla.suse.com/1140888" source="BUGZILLA"/>
		<reference ref_id="1140889" ref_url="https://bugzilla.suse.com/1140889" source="BUGZILLA"/>
		<reference ref_id="1140891" ref_url="https://bugzilla.suse.com/1140891" source="BUGZILLA"/>
		<reference ref_id="1140893" ref_url="https://bugzilla.suse.com/1140893" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1140954" ref_url="https://bugzilla.suse.com/1140954" source="BUGZILLA"/>
		<reference ref_id="1140955" ref_url="https://bugzilla.suse.com/1140955" source="BUGZILLA"/>
		<reference ref_id="1140956" ref_url="https://bugzilla.suse.com/1140956" source="BUGZILLA"/>
		<reference ref_id="1140957" ref_url="https://bugzilla.suse.com/1140957" source="BUGZILLA"/>
		<reference ref_id="1140958" ref_url="https://bugzilla.suse.com/1140958" source="BUGZILLA"/>
		<reference ref_id="1140959" ref_url="https://bugzilla.suse.com/1140959" source="BUGZILLA"/>
		<reference ref_id="1140960" ref_url="https://bugzilla.suse.com/1140960" source="BUGZILLA"/>
		<reference ref_id="1140961" ref_url="https://bugzilla.suse.com/1140961" source="BUGZILLA"/>
		<reference ref_id="1140962" ref_url="https://bugzilla.suse.com/1140962" source="BUGZILLA"/>
		<reference ref_id="1140964" ref_url="https://bugzilla.suse.com/1140964" source="BUGZILLA"/>
		<reference ref_id="1140971" ref_url="https://bugzilla.suse.com/1140971" source="BUGZILLA"/>
		<reference ref_id="1140972" ref_url="https://bugzilla.suse.com/1140972" source="BUGZILLA"/>
		<reference ref_id="1140992" ref_url="https://bugzilla.suse.com/1140992" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20836" ref_url="https://www.suse.com/security/cve/CVE-2018-20836/" source="CVE"/>
		<reference ref_id="CVE-2019-10126" ref_url="https://www.suse.com/security/cve/CVE-2019-10126/" source="CVE"/>
		<reference ref_id="CVE-2019-10638" ref_url="https://www.suse.com/security/cve/CVE-2019-10638/" source="CVE"/>
		<reference ref_id="CVE-2019-10639" ref_url="https://www.suse.com/security/cve/CVE-2019-10639/" source="CVE"/>
		<reference ref_id="CVE-2019-11599" ref_url="https://www.suse.com/security/cve/CVE-2019-11599/" source="CVE"/>
		<reference ref_id="CVE-2019-13233" ref_url="https://www.suse.com/security/cve/CVE-2019-13233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005712.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2019-10638: In the Linux kernel, a device could be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic was sent to multiple destination IP addresses, it was possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may have been conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses (bnc#1140575 1140577).
- CVE-2019-10639: The Linux kernel allowed Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it was possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic was sent to multiple destination IP addresses, it was possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key was extracted (via enumeration), the offset of the kernel image was exposed. This attack could be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker's web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable because IP ID generation was changed to have a dependency on an address associated with a network namespace (bnc#1140577).
- CVE-2019-13233: In arch/x86/lib/insn-eval.c in the Linux kernel, there was a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bnc#1140454).
- CVE-2018-20836: An issue was discovered in the Linux kernel There was a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free (bnc#1134395).
- CVE-2019-10126: A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might have lead to memory corruption and possibly other consequences (bnc#1136935).
- CVE-2019-11599: The coredump implementation in the Linux kernel did not use locking or other mechanisms to prevent vma layout or vma flags changes while it ran, which allowed local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c (bnc#1131645 1133738).

The following non-security bugs were fixed:

- Abort file_remove_privs() for non-reg. files (bsc#1140888).
- acpica: Clear status of GPEs on first direct enable (bsc#1111666).
- acpi: PM: Allow transitions to D0 to occur in special cases (bsc#1051510).
- acpi: PM: Avoid evaluating _PS3 on transitions from D3hot to D3cold (bsc#1051510).
- alsa: firewire-lib/fireworks: fix miss detection of received MIDI messages (bsc#1051510).
- alsa: hda - Force polling mode on CNL for fixing codec communication (bsc#1051510).
- alsa: hda/realtek: Add quirks for several Clevo notebook barebones (bsc#1051510).
- alsa: hda/realtek - Change front mic location for Lenovo M710q (bsc#1051510).
- alsa: line6: Fix write on zero-sized buffer (bsc#1051510).
- alsa: seq: fix incorrect order of dest_client/dest_ports arguments (bsc#1051510).
- alsa: usb-audio: Fix parse of UAC2 Extension Units (bsc#1111666).
- alsa: usb-audio: fix sign unintended sign extension on left shifts (bsc#1051510).
- apparmor: enforce nullbyte at end of tag string (bsc#1051510).
- asoc: cx2072x: fix integer overflow on unsigned int multiply (bsc#1111666).
- ax25: fix inconsistent lock state in ax25_destroy_timer (bsc#1051510).
- Backporting hwpoison fixes  - mm: hugetlb: prevent reuse of hwpoisoned free hugepages   (bsc#1139712).  - mm: hwpoison: change PageHWPoison behavior on hugetlb pages   (bsc#1139712).  - mm: hugetlb: soft-offline: dissolve source hugepage after   successful migration (bsc#1139712).  - mm: soft-offline: dissolve free hugepage if soft-offlined   (bsc#1139712).  - mm: hwpoison: introduce memory_failure_hugetlb() (bsc#1139712).  - mm: hwpoison: dissolve in-use hugepage in unrecoverable memory   error (bsc#1139712).  - mm: hugetlb: delete dequeue_hwpoisoned_huge_page()   (bsc#1139712).  - mm: hwpoison: introduce idenfity_page_state (bsc#1139712).  - mm: hugetlb: soft_offline: save compound page order before   page migration (bsc#1139712)  - fs: hugetlbfs: fix hwpoison reserve accounting (bsc#1139712)  - mm: fix race on soft-offlining free huge pages (bsc#1139712).  - mm: soft-offline: close the race against page allocation   (bsc#1139712).  - mm: soft-offline: return -EBUSY if   set_hwpoison_free_buddy_page() fails (bsc#1139712).  - mm: hugetlb: soft-offline: dissolve_free_huge_page() return   zero on !PageHuge (bsc#bsc#1139712).
- blk-mq: free hw queue's resource in hctx's release handler (bsc#1140637).
- block: Fix a NULL pointer dereference in generic_make_request() (bsc#1139771).
- bluetooth: Fix faulty expression for minimum encryption key size check (bsc#1140328).
- bpf, devmap: Add missing bulk queue free (bsc#1109837).
- bpf, devmap: Add missing RCU read lock on flush (bsc#1109837).
- bpf, devmap: Fix premature entry free on destroying map (bsc#1109837).
- bpf: devmap: fix use-after-free Read in __dev_map_entry_free (bsc#1109837).
- bpf: lpm_trie: check left child of last leftmost node for NULL (bsc#1109837).
- bpf: sockmap fix msg-&gt;sg.size account on ingress skb (bsc#1109837).
- bpf: sockmap, fix use after free from sleep in psock backlog workqueue (bsc#1109837).
- bpf: sockmap remove duplicate queue free (bsc#1109837).
- bpf, tcp: correctly handle DONT_WAIT flags and timeo == 0 (bsc#1109837).
- can: af_can: Fix error path of can_init() (bsc#1051510).
- can: flexcan: fix timeout when set small bitrate (bsc#1051510).
- can: purge socket error queue on sock destruct (bsc#1051510).
- ceph: flush dirty inodes before proceeding with remount (bsc#1140405).
- clk: rockchip: Turn on 'aclk_dmac1' for suspend on rk3288 (bsc#1051510).
- clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider (bsc#1051510).
- coresight: etb10: Fix handling of perf mode (bsc#1051510).
- coresight: etm4x: Add support to enable ETMv4.2 (bsc#1051510).
- crypto: algapi - guard against uninitialized spawn list in crypto_remove_spawns (bsc#1133401).
- crypto: cryptd - Fix skcipher instance memory leak (bsc#1051510).
- crypto: user - prevent operating on larval algorithms (bsc#1133401).
- dax: Fix xarray entry association for mixed mappings (bsc#1140893).
- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- device core: Consolidate locking and unlocking of parent and device (bsc#1106383).
- dmaengine: imx-sdma: remove BD_INTR for channel0 (bsc#1051510).
- doc: Cope with the deprecation of AutoReporter (bsc#1051510).
- documentation/ABI: Document umwait control sysfs interfaces (jsc#SLE-5187).
- documentation: DMA-API: fix a function name of max_mapping_size (bsc#1140954).
- driver core: Establish order of operations for device_add and device_del via bitflag (bsc#1106383).
- driver core: Probe devices asynchronously instead of the driver (bsc#1106383).
- drivers/base/devres: introduce devm_release_action() (bsc#1103992).
- drivers/base: Introduce kill_device() (bsc#1139865).
- drivers/base: kABI fixes for struct device_private (bsc#1106383).
- drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var (bsc#1051510).
- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE (bsc#1051510).
- drm/amd/powerplay: use hardware fan control if no powerplay fan table (bsc#1111666).
- drm/arm/hdlcd: Actually validate CRTC modes (bsc#1111666).
- drm/arm/hdlcd: Allow a bit of clock tolerance (bsc#1051510).
- drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times (bsc#1111666).
- drm/etnaviv: add missing failure path to destroy suballoc (bsc#1111666).
- drm/fb-helper: generic: Do not take module ref for fbcon (bsc#1111666).
- drm: Fix drm_release() and device unplug (bsc#1111666).
- drm/i915/dmc: protect against reading random memory (bsc#1051510).
- drm/i915/gvt: ignore unexpected pvinfo write (bsc#1051510).
- drm/imx: notify drm core before sending event during crtc disable (bsc#1111666).
- drm/imx: only send event on crtc disable if kept disabled (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2 (bsc#1111666).
- drm/vmwgfx: fix a warning due to missing dma_parms (bsc#1111666).
- drm/vmwgfx: Use the backdoor port if the HB port is not available (bsc#1111666).
- ext4: do not delete unlinked inode from orphan list on failed truncate (bsc#1140891).
- failover: allow name change on IFF_UP slave interfaces (bsc#1109837).
- fs/ocfs2: fix race in ocfs2_dentry_attach_lock() (bsc#1140889).
- fs/proc/proc_sysctl.c: Fix a NULL pointer dereference (bsc#1140887).
- fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links (bsc#1140887).
- ftrace/x86: Remove possible deadlock between register_kprobe() and ftrace_run_update_code() (bsc#1071995).
- genirq: Prevent use-after-free and work list corruption (bsc#1051510).
- genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent() (bsc#1051510).
- genwqe: Prevent an integer overflow in the ioctl (bsc#1051510).
- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes (mm/hugetlbfs)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git fixes (mm/hugetlbfs)).
- i2c: acorn: fix i2c warning (bsc#1135642).
- i2c: mlxcpld: Add support for extended transaction length for i2c-mlxcpld (bsc#1112374).
- i2c: mlxcpld: Add support for smbus block read transaction (bsc#1112374).
- i2c: mlxcpld: Allow configurable adapter id for mlxcpld (bsc#1112374).
- i2c: mlxcpld: Fix adapter functionality support callback (bsc#1112374).
- i2c: mlxcpld: Fix wrong initialization order in probe (bsc#1112374).
- i2c: mux: mlxcpld: simplify code to reach the adapter (bsc#1112374).
- ib/hfi1: Clear the IOWAIT pending bits when QP is put into error state (bsc#1114685).
- ib/hfi1: Create inline to get extended headers (bsc#1114685 ).
- ib/hfi1: Validate fault injection opcode user input (bsc#1114685 ).
- ib/mlx5: Verify DEVX general object type correctly (bsc#1103991 ).
- input: synaptics - enable SMBus on ThinkPad E480 and E580 (bsc#1051510).
- input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD (bsc#1051510).
- iommu/amd: Make iommu_disable safer (bsc#1140955).
- iommu/arm-smmu: Add support for qcom,smmu-v2 variant (bsc#1051510).
- iommu/arm-smmu: Avoid constant zero in TLBI writes (bsc#1140956).
- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register (bsc#1051510).
- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer (bsc#1051510).
- iommu: Fix a leak in iommu_insert_resv_region (bsc#1140957).
- iommu: Use right function to get group for device (bsc#1140958).
- iommu/vt-d: Duplicate iommu_resv_region objects per device list (bsc#1140959).
- iommu/vt-d: Handle PCI bridge RMRR device scopes in intel_iommu_get_resv_regions (bsc#1140960).
- iommu/vt-d: Handle RMRR with PCI bridge device scopes (bsc#1140961).
- iommu/vt-d: Introduce is_downstream_to_pci_bridge helper (bsc#1140962).
- iommu/vt-d: Remove unnecessary rcu_read_locks (bsc#1140964).
- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- irqchip/gic-v3-its: fix some definitions of inner cacheability attributes (bsc#1051510).
- irqchip/mbigen: Do not clear eventid when freeing an MSI (bsc#1051510).
- ixgbe: Avoid NULL pointer dereference with VF on non-IPsec hw (bsc#1140228).
- kabi fixup blk_mq_register_dev() (bsc#1140637).
- kernel-binary: fix missing \
- kernel-binary: rpm does not support multiline condition
- kernel-binary: Use -c grep option in klp project detection.
- kvm: svm/avic: fix off-by-one in checking host APIC ID (bsc#1140971).
- kvm: x86: fix return value for reserved EFER (bsc#1140992).
- kvm: x86: Skip EFER vs. guest CPUID checks for host-initiated writes (bsc#1140972).
- libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk (bsc#1051510).
- libceph: assign cookies in linger_submit() (bsc#1135897).
- libceph: check reply num_data_items in setup_request_data() (bsc#1135897).
- libceph: do not consume a ref on pagelist in ceph_msg_data_add_pagelist() (bsc#1135897).
- libceph: enable fallback to ceph_msg_new() in ceph_msgpool_get() (bsc#1135897).
- libceph: introduce alloc_watch_request() (bsc#1135897).
- libceph: introduce ceph_pagelist_alloc() (bsc#1135897).
- libceph: preallocate message data items (bsc#1135897).
- libceph, rbd: add error handling for osd_req_op_cls_init() (bsc#1135897). This feature was requested for SLE15 but aws reverted in packaging and master.
- libceph, rbd, ceph: move ceph_osdc_alloc_messages() calls (bsc#1135897).
- libnvdimm/bus: Prevent duplicate device_unregister() calls (bsc#1139865).
- libnvdimm, pfn: Fix over-trim in trim_pfn_device() (bsc#1140719).
- mac80211: Do not use stack memory with scatterlist for GMAC (bsc#1051510).
- mac80211: drop robust management frames from unknown TA (bsc#1051510).
- mac80211: handle deauthentication/disassociation from TDLS peer (bsc#1051510).
- media: v4l2-ioctl: clear fields in s_parm (bsc#1051510).
- mfd: hi655x: Fix regmap area declared size for hi655x (bsc#1051510).
- mISDN: make sure device name is NUL terminated (bsc#1051510).
- mlxsw: core: Add API for QSFP module temperature thresholds reading (bsc#1112374).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue (bsc#1112374).
- mlxsw: core: mlxsw: core: avoid -Wint-in-bool-context warning (bsc#1112374).
- mlxsw: core: Move ethtool module callbacks to a common location (bsc#1112374).
- mlxsw: core: Prevent reading unsupported slave address from SFP EEPROM (bsc#1112374).
- mlxsw: pci: Reincrease PCI reset timeout (bsc#1112374).
- mlxsw: reg: Add Management Temperature Bulk Register (bsc#1112374).
- mlxsw: spectrum_flower: Fix TOS matching (bsc#1112374).
- mlxsw: spectrum: Move QSFP EEPROM definitions to common location (bsc#1112374).
- mlxsw: spectrum: Put MC TCs into DWRR mode (bsc#1112374).
- mmc: core: complete HS400 before checking status (bsc#1111666).
- mmc: core: Prevent processing SDIO IRQs when the card is suspended (bsc#1051510).
- mm/devm_memremap_pages: introduce devm_memunmap_pages (bsc#1103992).
- mm/page_alloc.c: avoid potential NULL pointer dereference (git fixes (mm/pagealloc)).
- mm/page_alloc.c: fix never set ALLOC_NOFRAGMENT flag (git fixes (mm/pagealloc)).
- mm/vmscan.c: prevent useless kswapd loops (git fixes (mm/vmscan)).
- net: core: support XDP generic on stacked devices (bsc#1109837).
- net: do not clear sock-&gt;sk early to avoid trouble in strparser (bsc#1103990).
- net: ena: add ethtool function for changing io queue sizes (bsc#1138879).
- net: ena: add good checksum counter (bsc#1138879).
- net: ena: add handling of llq max tx burst size (bsc#1138879).
- net: ena: add MAX_QUEUES_EXT get feature admin command (bsc#1138879).
- net: ena: add newline at the end of pr_err prints (bsc#1138879).
- net: ena: add support for changing max_header_size in LLQ mode (bsc#1138879).
- net: ena: allow automatic fallback to polling mode (bsc#1138879).
- net: ena: allow queue allocation backoff when low on memory (bsc#1138879).
- net: ena: arrange ena_probe() function variables in reverse christmas tree (bsc#1138879).
- net: ena: enable negotiating larger Rx ring size (bsc#1138879).
- net: ena: ethtool: add extra properties retrieval via get_priv_flags (bsc#1138879).
- net: ena: Fix bug where ring allocation backoff stopped too late (bsc#1138879).
- net: ena: fix ena_com_fill_hash_function() implementation (bsc#1138879).
- net: ena: fix: Free napi resources when ena_up() fails (bsc#1138879).
- net: ena: fix incorrect test of supported hash function (bsc#1138879).
- net: ena: fix: set freed objects to NULL to avoid failing future allocations (bsc#1138879).
- net: ena: fix swapped parameters when calling ena_com_indirect_table_fill_entry (bsc#1138879).
- net: ena: gcc 8: fix compilation warning (bsc#1138879).
- net: ena: improve latency by disabling adaptive interrupt moderation by default (bsc#1138879).
- net: ena: make ethtool show correct current and max queue sizes (bsc#1138879).
- net: ena: optimise calculations for CQ doorbell (bsc#1138879).
- net: ena: remove inline keyword from functions in *.c (bsc#1138879).
- net: ena: replace free_tx/rx_ids union with single free_ids field in ena_ring (bsc#1138879).
- net: ena: update driver version from 2.0.3 to 2.1.0 (bsc#1138879).
- net: ena: use dev_info_once instead of static variable (bsc#1138879).
- net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set (bsc#1130836).
- net: Fix missing meta data in skb with vlan packet (bsc#1109837).
- net/mlx5: Avoid reloading already removed devices (bsc#1103990 ).
- net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled (bsc#1103990).
- net/mlx5e: Fix the max MTU check in case of XDP (bsc#1103990 ).
- net/mlx5e: Fix use-after-free after xdp_return_frame (bsc#1103990).
- net/mlx5e: Rx, Check ip headers sanity (bsc#1103990 ).
- net/mlx5e: Rx, Fixup skb checksum for packets with tail padding (bsc#1109837).
- net/mlx5e: XDP, Fix shifted flag index in RQ bitmap (bsc#1103990 ).
- net/mlx5: FPGA, tls, hold rcu read lock a bit longer (bsc#1103990).
- net/mlx5: FPGA, tls, idr remove on flow delete (bsc#1103990 ).
- net/mlx5: Set completion EQs as shared resources (bsc#1103991 ).
- net/mlx5: Update pci error handler entries and command translation (bsc#1103991).
- net: mvpp2: prs: Fix parser range for VID filtering (bsc#1098633).
- net: mvpp2: prs: Fix parser range for VID filtering (bsc#1098633).
- net: mvpp2: prs: Use the correct helpers when removing all VID filters (bsc#1098633).
- net: mvpp2: prs: Use the correct helpers when removing all VID filters (bsc#1098633).
- net: mvpp2: Use strscpy to handle stat strings (bsc#1098633).
- net: mvpp2: Use strscpy to handle stat strings (bsc#1098633).
- net: phy: marvell10g: report if the PHY fails to boot firmware (bsc#1119113).
- net/sched: cbs: Fix error path of cbs_module_init (bsc#1109837).
- net/sched: cbs: fix port_rate miscalculation (bsc#1109837).
- net/tls: avoid NULL pointer deref on nskb-&gt;sk in fallback (bsc#1109837).
- net/tls: avoid potential deadlock in tls_set_device_offload_rx() (bsc#1109837).
- net: tls, correctly account for copied bytes with multiple sk_msgs (bsc#1109837).
- net/tls: do not copy negative amounts of data in reencrypt (bsc#1109837).
- net/tls: do not ignore netdev notifications if no TLS features (bsc#1109837).
- net/tls: do not leak IV and record seq when offload fails (bsc#1109837).
- net/tls: do not leak partially sent record in device mode (bsc#1109837).
- net/tls: fix build without CONFIG_TLS_DEVICE (bsc#1109837).
- net/tls: fix copy to fragments in reencrypt (bsc#1109837).
- net/tls: fix page double free on TX cleanup (bsc#1109837).
- net/tls: fix refcount adjustment in fallback (bsc#1109837).
- net/tls: fix state removal with feature flags off (bsc#1109837).
- net/tls: fix the IV leaks (bsc#1109837).
- net/tls: prevent bad memory access in tls_is_sk_tx_device_offloaded() (bsc#1109837).
- net/tls: replace the sleeping lock around RX resync with a bit lock (bsc#1109837).
- net/udp_gso: Allow TX timestamp with UDP GSO (bsc#1109837).
- nfit/ars: Allow root to busy-poll the ARS state machine (bsc#1140814).
- nfit/ars: Avoid stale ARS results (jsc#SLE-5433).
- nfit/ars: Introduce scrub_flags (jsc#SLE-5433).
- nfp: bpf: fix static check error through tightening shift amount adjustment (bsc#1109837).
- nfp: flower: add rcu locks when accessing netdev for tunnels (bsc#1109837).
- ntp: Allow TAI-UTC offset to be set to zero (bsc#1135642).
- nvme: copy MTFA field from identify controller (bsc#1140715).
- nvme-rdma: fix double freeing of async event data (bsc#1120423).
- nvme-rdma: fix possible double free of controller async event buffer (bsc#1120423).
- ocfs2: try to reuse extent block in dealloc without meta_alloc (bsc#1128902).
- pci: Do not poll for PME if the device is in D3cold (bsc#1051510).
- pci/p2pdma: fix the gen_pool_add_virt() failure path (bsc#1103992).
- pci: PM: Skip devices in D0 for suspend-to-idle (bsc#1051510).
- pci: rpadlpar: Fix leaked device_node references in add/remove paths (bsc#1051510).
- pinctrl/amd: add get_direction handler (bsc#1140463).
- pinctrl/amd: fix gpio irq level in debugfs (bsc#1140463).
- pinctrl/amd: fix masking of GPIO interrupts (bsc#1140463).
- pinctrl/amd: make functions amd_gpio_suspend and amd_gpio_resume static (bsc#1140463).
- pinctrl/amd: poll InterruptEnable bits in amd_gpio_irq_set_type (bsc#1140463).
- pinctrl/amd: poll InterruptEnable bits in enable_irq (bsc#1140463).
- pm: ACPI/PCI: Resume all devices during hibernation (bsc#1111666).
- powerpc/perf: Add PM_LD_MISS_L1 and PM_BR_2PATH to power9 event list (bsc#1137728, LTC#178106).
- powerpc/perf: Add POWER9 alternate PM_RUN_CYC and PM_RUN_INST_CMPL events (bsc#1137728, LTC#178106).
- powerpc/rtas: retry when cpu offline races with suspend/migration (bsc#1140428, LTC#178808).
- ppc64le: enable CONFIG_PPC_DT_CPU_FTRS (jsc#SLE-7159).
- ppp: mppe: Add softdep to arc4 (bsc#1088047).
- ptrace: Fix -&gt;ptracer_cred handling for PTRACE_TRACEME (git-fixes).
- ptrace: restore smp_rmb() in __ptrace_may_access() (git-fixes).
- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- rdma/ipoib: Allow user space differentiate between valid dev_port (bsc#1103992).
- rdma/mlx5: Do not allow the user to write to the clock page (bsc#1103991).
- rdma/mlx5: Initialize roce port info before multiport master init (bsc#1103991).
- rdma/mlx5: Use rdma_user_map_io for mapping BAR pages (bsc#1103992).
- regulator: s2mps11: Fix buck7 and buck8 wrong voltages (bsc#1051510).
- Replace the bluetooth fix with the upstream commit (bsc#1135556)
- Revert 'net: ena: ethtool: add extra properties retrieval via get_priv_flags' (bsc#1138879).
- Revert 'net/mlx5e: Enable reporting checksum unnecessary also for L3 packets' (bsc#1103990).
- Revert 'Revert 'Drop multiversion(kernel) from the KMP template ()''
- Revert 'Sign non-x86 kernels when possible (boo#1134303)' This reverts commit bac621c6704610562ebd9e74ae5ad85ca8025681. We do not have reports of this working with all ARM architectures in all cases (boot, kexec, ..) so revert for now.
- Revert 'svm: Fix AVIC incomplete IPI emulation' (bsc#1140133).
- rpm/package-descriptions: fix typo in kernel-azure
- rpm/post.sh: correct typo in err msg (bsc#1137625)
- sbitmap: fix improper use of smp_mb__before_atomic() (bsc#1140658).
- scripts/git_sort/git_sort.py: add djbw/nvdimm nvdimm-pending.
- scripts/git_sort/git_sort.py: add nvdimm/libnvdimm-fixes
- scripts/git_sort/git_sort.py: drop old scsi branches
- scsi: aacraid: change event_wait to a completion (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: change wait_sem to a completion (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: clean up some indentation and formatting issues (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: Mark expected switch fall-through (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: Mark expected switch fall-throughs (jsc#SLE-4710 bsc#1136161).
- scsi: be2iscsi: be_iscsi: Mark expected switch fall-through (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: be_main: Mark expected switch fall-through (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: fix spelling mistake 'Retreiving' -&gt; 'Retrieving' (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: lpfc: fix typo (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: remove unused variable dmsg (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: switch to generic DMA API (jsc#SLE-4721 bsc#1136264).
- scsi: core: add new RDAC LENOVO/DE_Series device (bsc#1132390).
- scsi: csiostor: csio_wr: mark expected switch fall-through (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: drop serial_number usage (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix calls to dma_set_mask_and_coherent() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix incorrect dma device in case of vport (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix missing data copy in csio_scsi_err_handler() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: no need to check return value of debugfs_create functions (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: Remove set but not used variable 'pln' (jsc#SLE-4679 bsc#1136343).
- scsi: mpt3sas: Add Atomic RequestDescriptor support on Aero (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add flag high_iops_queues (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add missing breaks in switch statements (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add support for ATLAS PCIe switch (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add support for NVMe Switch Adapter (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Affinity high iops queues IRQs to local node (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: change _base_get_msix_index prototype (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Enable interrupt coalescing on high iops (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: fix indentation issue (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Fix kernel panic during expander reset (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Fix typo in request_desript_type (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: function pointers of request descriptor (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Improve the threshold value and introduce module param (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Introduce perf_mode module parameter (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Irq poll to avoid CPU hard lockups (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Load balance to improve performance and avoid soft lockups (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Rename mpi endpoint device ID macro (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: save and use MSI-X index for posting RD (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: simplify interrupt handler (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update driver version to 27.102.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update driver version to 29.100.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update mpt3sas driver version to 28.100.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Use high iops queues under some circumstances (bsc#1125703,jsc#SLE-4717).
- scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() (bsc#1140727).
- scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines (bsc#1140728).
- scsi: target/iblock: Fix overrun in WRITE SAME emulation (bsc#1140424).
- scsi: target/iblock: Fix overrun in WRITE SAME emulation (bsc#1140424).
- signal/ptrace: Do not leak unitialized kernel memory with PTRACE_PEEK_SIGINFO (git-fixes).
- staging: comedi: ni_mio_common: Fix divide-by-zero for DIO cmdtest (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- svm: Add warning message for AVIC IPI invalid target (bsc#1140133).
- svm: Fix AVIC incomplete IPI emulation (bsc#1140133).
- sysctl: handle overflow in proc_get_long (bsc#1051510).
- tools: bpftool: fix infinite loop in map create (bsc#1109837).
- tracing/snapshot: Resize spare buffer if size changed (bsc#1140726).
- typec: tcpm: fix compiler warning about stupid things (git-fixes).
- usb: chipidea: udc: workaround for endpoint conflict issue (bsc#1135642).
- usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression) (bsc#1135642).
- usb: Fix chipmunk-like voice when using Logitech C270 for recording audio (bsc#1051510).
- usbnet: ipheth: fix racing condition (bsc#1051510).
- usb: serial: fix initial-termios handling (bsc#1135642).
- usb: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode (bsc#1051510).
- usb: serial: option: add Telit 0x1260 and 0x1261 compositions (bsc#1051510).
- usb: serial: pl2303: add Allied Telesis VT-Kit3 (bsc#1051510).
- usb: usb-storage: Add new ID to ums-realtek (bsc#1051510).
- x86/cpufeatures: Enumerate user wait instructions (jsc#SLE-5187).
- x86/umwait: Add sysfs interface to control umwait C0.2 state (jsc#SLE-5187).
- x86/umwait: Add sysfs interface to control umwait maximum time (jsc#SLE-5187).
- x86/umwait: Initialize umwait control values (jsc#SLE-5187).
- xdp: check device pointer before clearing (bsc#1109837).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-15"/>
	<updated date="2019-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088047">SUSE bug 1088047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098633">SUSE bug 1098633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106383">SUSE bug 1106383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119532">SUSE bug 1119532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120423">SUSE bug 1120423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125703">SUSE bug 1125703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128902">SUSE bug 1128902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130836">SUSE bug 1130836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131645">SUSE bug 1131645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132390">SUSE bug 1132390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133401">SUSE bug 1133401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133738">SUSE bug 1133738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134303">SUSE bug 1134303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134395">SUSE bug 1134395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135556">SUSE bug 1135556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135897">SUSE bug 1135897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136161">SUSE bug 1136161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136264">SUSE bug 1136264</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136343">SUSE bug 1136343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136935">SUSE bug 1136935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137625">SUSE bug 1137625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137728">SUSE bug 1137728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138879">SUSE bug 1138879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139712">SUSE bug 1139712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139751">SUSE bug 1139751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139771">SUSE bug 1139771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139865">SUSE bug 1139865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140133">SUSE bug 1140133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140228">SUSE bug 1140228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140328">SUSE bug 1140328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140405">SUSE bug 1140405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140424">SUSE bug 1140424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140428">SUSE bug 1140428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140454">SUSE bug 1140454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140463">SUSE bug 1140463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140575">SUSE bug 1140575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140577">SUSE bug 1140577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140637">SUSE bug 1140637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140658">SUSE bug 1140658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140715">SUSE bug 1140715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140719">SUSE bug 1140719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140726">SUSE bug 1140726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140727">SUSE bug 1140727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140728">SUSE bug 1140728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140814">SUSE bug 1140814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140887">SUSE bug 1140887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140888">SUSE bug 1140888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140889">SUSE bug 1140889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140891">SUSE bug 1140891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140893">SUSE bug 1140893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140954">SUSE bug 1140954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140955">SUSE bug 1140955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140956">SUSE bug 1140956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140957">SUSE bug 1140957</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140958">SUSE bug 1140958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140959">SUSE bug 1140959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140960">SUSE bug 1140960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140961">SUSE bug 1140961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140962">SUSE bug 1140962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140964">SUSE bug 1140964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140971">SUSE bug 1140971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140972">SUSE bug 1140972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140992">SUSE bug 1140992</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-20836/">CVE-2018-20836</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10126/">CVE-2019-10126</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10638/">CVE-2019-10638</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10639/">CVE-2019-10639</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11599/">CVE-2019-11599</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13233/">CVE-2019-13233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497046" comment="reiserfs-kmp-default-4.12.14-197.10.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138287" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1115375" ref_url="https://bugzilla.suse.com/1115375" source="BUGZILLA"/>
		<reference ref_id="1141780" ref_url="https://bugzilla.suse.com/1141780" source="BUGZILLA"/>
		<reference ref_id="1141782" ref_url="https://bugzilla.suse.com/1141782" source="BUGZILLA"/>
		<reference ref_id="1141783" ref_url="https://bugzilla.suse.com/1141783" source="BUGZILLA"/>
		<reference ref_id="1141784" ref_url="https://bugzilla.suse.com/1141784" source="BUGZILLA"/>
		<reference ref_id="1141785" ref_url="https://bugzilla.suse.com/1141785" source="BUGZILLA"/>
		<reference ref_id="1141786" ref_url="https://bugzilla.suse.com/1141786" source="BUGZILLA"/>
		<reference ref_id="1141787" ref_url="https://bugzilla.suse.com/1141787" source="BUGZILLA"/>
		<reference ref_id="1141789" ref_url="https://bugzilla.suse.com/1141789" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-2745" ref_url="https://www.suse.com/security/cve/CVE-2019-2745/" source="CVE"/>
		<reference ref_id="CVE-2019-2762" ref_url="https://www.suse.com/security/cve/CVE-2019-2762/" source="CVE"/>
		<reference ref_id="CVE-2019-2766" ref_url="https://www.suse.com/security/cve/CVE-2019-2766/" source="CVE"/>
		<reference ref_id="CVE-2019-2769" ref_url="https://www.suse.com/security/cve/CVE-2019-2769/" source="CVE"/>
		<reference ref_id="CVE-2019-2786" ref_url="https://www.suse.com/security/cve/CVE-2019-2786/" source="CVE"/>
		<reference ref_id="CVE-2019-2816" ref_url="https://www.suse.com/security/cve/CVE-2019-2816/" source="CVE"/>
		<reference ref_id="CVE-2019-2842" ref_url="https://www.suse.com/security/cve/CVE-2019-2842/" source="CVE"/>
		<reference ref_id="CVE-2019-7317" ref_url="https://www.suse.com/security/cve/CVE-2019-7317/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2021-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005760.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:

Security issues fixed:

- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
- CVE-2019-2762: Exceptional throw cases (bsc#1141782).
- CVE-2019-2766: Improve file protocol handling (bsc#1141789).
- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
- CVE-2019-2786: More limited privilege usage (bsc#1141787).
- CVE-2019-2816: Normalize normalization (bsc#1141785).
- CVE-2019-2842: Extended AES support (bsc#1141786).
- CVE-2019-7317: Improve PNG support (bsc#1141780).
- Certificate validation improvements

Non-security issue fixed:

- Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)

		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-30"/>
	<updated date="2019-07-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1115375">SUSE bug 1115375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141780">SUSE bug 1141780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141782">SUSE bug 1141782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141783">SUSE bug 1141783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141784">SUSE bug 1141784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141785">SUSE bug 1141785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141786">SUSE bug 1141786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141787">SUSE bug 1141787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141789">SUSE bug 1141789</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2745/">CVE-2019-2745</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2762/">CVE-2019-2762</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2766/">CVE-2019-2766</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2769/">CVE-2019-2769</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2786/">CVE-2019-2786</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-2816/">CVE-2019-2816</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2842/">CVE-2019-2842</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-7317/">CVE-2019-7317</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496985" comment="java-1_8_0-openjdk-1.8.0.222-3.24.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496986" comment="java-1_8_0-openjdk-demo-1.8.0.222-3.24.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496987" comment="java-1_8_0-openjdk-devel-1.8.0.222-3.24.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496988" comment="java-1_8_0-openjdk-headless-1.8.0.222-3.24.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138288" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1083710" ref_url="https://bugzilla.suse.com/1083710" source="BUGZILLA"/>
		<reference ref_id="1102247" ref_url="https://bugzilla.suse.com/1102247" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1119222" ref_url="https://bugzilla.suse.com/1119222" source="BUGZILLA"/>
		<reference ref_id="1123080" ref_url="https://bugzilla.suse.com/1123080" source="BUGZILLA"/>
		<reference ref_id="1127034" ref_url="https://bugzilla.suse.com/1127034" source="BUGZILLA"/>
		<reference ref_id="1127315" ref_url="https://bugzilla.suse.com/1127315" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1130972" ref_url="https://bugzilla.suse.com/1130972" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1134097" ref_url="https://bugzilla.suse.com/1134097" source="BUGZILLA"/>
		<reference ref_id="1134390" ref_url="https://bugzilla.suse.com/1134390" source="BUGZILLA"/>
		<reference ref_id="1134399" ref_url="https://bugzilla.suse.com/1134399" source="BUGZILLA"/>
		<reference ref_id="1135335" ref_url="https://bugzilla.suse.com/1135335" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1136217" ref_url="https://bugzilla.suse.com/1136217" source="BUGZILLA"/>
		<reference ref_id="1136342" ref_url="https://bugzilla.suse.com/1136342" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1136462" ref_url="https://bugzilla.suse.com/1136462" source="BUGZILLA"/>
		<reference ref_id="1136467" ref_url="https://bugzilla.suse.com/1136467" source="BUGZILLA"/>
		<reference ref_id="1137458" ref_url="https://bugzilla.suse.com/1137458" source="BUGZILLA"/>
		<reference ref_id="1137534" ref_url="https://bugzilla.suse.com/1137534" source="BUGZILLA"/>
		<reference ref_id="1137535" ref_url="https://bugzilla.suse.com/1137535" source="BUGZILLA"/>
		<reference ref_id="1137584" ref_url="https://bugzilla.suse.com/1137584" source="BUGZILLA"/>
		<reference ref_id="1137609" ref_url="https://bugzilla.suse.com/1137609" source="BUGZILLA"/>
		<reference ref_id="1137811" ref_url="https://bugzilla.suse.com/1137811" source="BUGZILLA"/>
		<reference ref_id="1137827" ref_url="https://bugzilla.suse.com/1137827" source="BUGZILLA"/>
		<reference ref_id="1138874" ref_url="https://bugzilla.suse.com/1138874" source="BUGZILLA"/>
		<reference ref_id="1139358" ref_url="https://bugzilla.suse.com/1139358" source="BUGZILLA"/>
		<reference ref_id="1139619" ref_url="https://bugzilla.suse.com/1139619" source="BUGZILLA"/>
		<reference ref_id="1140133" ref_url="https://bugzilla.suse.com/1140133" source="BUGZILLA"/>
		<reference ref_id="1140139" ref_url="https://bugzilla.suse.com/1140139" source="BUGZILLA"/>
		<reference ref_id="1140322" ref_url="https://bugzilla.suse.com/1140322" source="BUGZILLA"/>
		<reference ref_id="1140559" ref_url="https://bugzilla.suse.com/1140559" source="BUGZILLA"/>
		<reference ref_id="1140652" ref_url="https://bugzilla.suse.com/1140652" source="BUGZILLA"/>
		<reference ref_id="1140676" ref_url="https://bugzilla.suse.com/1140676" source="BUGZILLA"/>
		<reference ref_id="1140903" ref_url="https://bugzilla.suse.com/1140903" source="BUGZILLA"/>
		<reference ref_id="1140945" ref_url="https://bugzilla.suse.com/1140945" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1141312" ref_url="https://bugzilla.suse.com/1141312" source="BUGZILLA"/>
		<reference ref_id="1141401" ref_url="https://bugzilla.suse.com/1141401" source="BUGZILLA"/>
		<reference ref_id="1141402" ref_url="https://bugzilla.suse.com/1141402" source="BUGZILLA"/>
		<reference ref_id="1141452" ref_url="https://bugzilla.suse.com/1141452" source="BUGZILLA"/>
		<reference ref_id="1141453" ref_url="https://bugzilla.suse.com/1141453" source="BUGZILLA"/>
		<reference ref_id="1141454" ref_url="https://bugzilla.suse.com/1141454" source="BUGZILLA"/>
		<reference ref_id="1141478" ref_url="https://bugzilla.suse.com/1141478" source="BUGZILLA"/>
		<reference ref_id="1141558" ref_url="https://bugzilla.suse.com/1141558" source="BUGZILLA"/>
		<reference ref_id="1142023" ref_url="https://bugzilla.suse.com/1142023" source="BUGZILLA"/>
		<reference ref_id="1142052" ref_url="https://bugzilla.suse.com/1142052" source="BUGZILLA"/>
		<reference ref_id="1142083" ref_url="https://bugzilla.suse.com/1142083" source="BUGZILLA"/>
		<reference ref_id="1142112" ref_url="https://bugzilla.suse.com/1142112" source="BUGZILLA"/>
		<reference ref_id="1142115" ref_url="https://bugzilla.suse.com/1142115" source="BUGZILLA"/>
		<reference ref_id="1142119" ref_url="https://bugzilla.suse.com/1142119" source="BUGZILLA"/>
		<reference ref_id="1142220" ref_url="https://bugzilla.suse.com/1142220" source="BUGZILLA"/>
		<reference ref_id="1142221" ref_url="https://bugzilla.suse.com/1142221" source="BUGZILLA"/>
		<reference ref_id="1142254" ref_url="https://bugzilla.suse.com/1142254" source="BUGZILLA"/>
		<reference ref_id="1142350" ref_url="https://bugzilla.suse.com/1142350" source="BUGZILLA"/>
		<reference ref_id="1142351" ref_url="https://bugzilla.suse.com/1142351" source="BUGZILLA"/>
		<reference ref_id="1142354" ref_url="https://bugzilla.suse.com/1142354" source="BUGZILLA"/>
		<reference ref_id="1142359" ref_url="https://bugzilla.suse.com/1142359" source="BUGZILLA"/>
		<reference ref_id="1142450" ref_url="https://bugzilla.suse.com/1142450" source="BUGZILLA"/>
		<reference ref_id="1142623" ref_url="https://bugzilla.suse.com/1142623" source="BUGZILLA"/>
		<reference ref_id="1142673" ref_url="https://bugzilla.suse.com/1142673" source="BUGZILLA"/>
		<reference ref_id="1142701" ref_url="https://bugzilla.suse.com/1142701" source="BUGZILLA"/>
		<reference ref_id="1142868" ref_url="https://bugzilla.suse.com/1142868" source="BUGZILLA"/>
		<reference ref_id="1143003" ref_url="https://bugzilla.suse.com/1143003" source="BUGZILLA"/>
		<reference ref_id="1143045" ref_url="https://bugzilla.suse.com/1143045" source="BUGZILLA"/>
		<reference ref_id="1143105" ref_url="https://bugzilla.suse.com/1143105" source="BUGZILLA"/>
		<reference ref_id="1143185" ref_url="https://bugzilla.suse.com/1143185" source="BUGZILLA"/>
		<reference ref_id="1143189" ref_url="https://bugzilla.suse.com/1143189" source="BUGZILLA"/>
		<reference ref_id="1143191" ref_url="https://bugzilla.suse.com/1143191" source="BUGZILLA"/>
		<reference ref_id="1143209" ref_url="https://bugzilla.suse.com/1143209" source="BUGZILLA"/>
		<reference ref_id="1143507" ref_url="https://bugzilla.suse.com/1143507" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20855" ref_url="https://www.suse.com/security/cve/CVE-2018-20855/" source="CVE"/>
		<reference ref_id="CVE-2019-1125" ref_url="https://www.suse.com/security/cve/CVE-2019-1125/" source="CVE"/>
		<reference ref_id="CVE-2019-11810" ref_url="https://www.suse.com/security/cve/CVE-2019-11810/" source="CVE"/>
		<reference ref_id="CVE-2019-13631" ref_url="https://www.suse.com/security/cve/CVE-2019-13631/" source="CVE"/>
		<reference ref_id="CVE-2019-13648" ref_url="https://www.suse.com/security/cve/CVE-2019-13648/" source="CVE"/>
		<reference ref_id="CVE-2019-14283" ref_url="https://www.suse.com/security/cve/CVE-2019-14283/" source="CVE"/>
		<reference ref_id="CVE-2019-14284" ref_url="https://www.suse.com/security/cve/CVE-2019-14284/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005789.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2018-20855: An issue was discovered in the Linux kernel In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace(bsc#1143045).
- CVE-2019-1125: Exclude ATOMs from speculation through SWAPGS (bsc#1139358).
- CVE-2019-14283: In the Linux kernel, set_geometry in drivers/block/floppy.c did not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It could be triggered by an unprivileged local user when a floppy disk was inserted. NOTE: QEMU creates the floppy device by default. (bnc#1143191)
- CVE-2019-11810: An issue was discovered in the Linux kernel A NULL pointer dereference could occur when megasas_create_frame_pool() failed in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This caused a Denial of Service, related to a use-after-free (bnc#1134399).
- CVE-2019-13648: In the Linux kernel on the powerpc platform, when hardware transactional memory was disabled, a local user could cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sent a crafted signal frame. (bnc#1142254)
- CVE-2019-13631: In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel, a malicious USB device could send an HID report that triggered an out-of-bounds write during generation of debugging messages. (bnc#1142023)

The following non-security bugs were fixed:

- acpi/nfit: Always dump _DSM output payload (bsc#1142351).
- Add back sibling paca poiter to paca (bsc#1055117).
- Add support for crct10dif-vpmsum ().
- af_unix: remove redundant lockdep class (git-fixes).
- alsa: compress: Be more restrictive about when a drain is allowed (bsc#1051510).
- alsa: compress: Do not allow paritial drain operations on capture streams (bsc#1051510).
- alsa: compress: Fix regression on compressed capture streams (bsc#1051510).
- alsa: compress: Prevent bypasses of set_params (bsc#1051510).
- alsa: hda - Add a conexant codec entry to let mute led work (bsc#1051510).
- alsa: hda - Do not resume forcibly i915 HDMI/DP codec (bsc#1111666).
- alsa: hda - Fix intermittent CORB/RIRB stall on Intel chips (bsc#1111666).
- alsa: hda/hdmi - Fix i915 reverse port/pin mapping (bsc#1111666).
- alsa: hda/hdmi - Remove duplicated define (bsc#1111666).
- alsa: hda - Optimize resume for codecs without jack detection (bsc#1111666).
- alsa: hda/realtek: apply ALC891 headset fixup to one Dell machine (bsc#1051510).
- alsa: hda/realtek - Fixed Headphone Mic can't record on Dell platform (bsc#1051510).
- alsa: hda/realtek - Headphone Mic can't record after S3 (bsc#1051510).
- alsa: line6: Fix a typo (bsc#1051510).
- alsa: line6: Fix wrong altsetting for LINE6_PODHD500_1 (bsc#1051510).
- alsa: seq: Break too long mutex context in the write loop (bsc#1051510).
- alsa: usb-audio: Add quirk for Focusrite Scarlett Solo (bsc#1051510).
- alsa: usb-audio: Add quirk for MOTU MicroBook II (bsc#1051510).
- alsa: usb-audio: Cleanup DSD whitelist (bsc#1051510).
- alsa: usb-audio: Enable .product_name override for Emagic, Unitor 8 (bsc#1051510).
- alsa: usb-audio: fix Line6 Helix audio format rates (bsc#1111666).
- alsa: usb-audio: Sanity checks for each pipe and EP types (bsc#1051510).
- arm64: do not override dma_max_pfn (jsc#SLE-6197 bsc#1140559 LTC#173150).
- asoc : cs4265 : readable register too low (bsc#1051510).
- asoc: max98090: remove 24-bit format support if RJ is 0 (bsc#1051510).
- asoc: soc-pcm: BE dai needs prepare when pause release after resume (bsc#1051510).
- ath10k: add missing error handling (bsc#1111666).
- ath10k: add peer id check in ath10k_peer_find_by_id (bsc#1111666).
- ath10k: destroy sdio workqueue while remove sdio module (bsc#1111666).
- ath10k: Do not send probe response template for mesh (bsc#1111666).
- ath10k: Fix encoding for protected management frames (bsc#1111666).
- ath10k: fix incorrect multicast/broadcast rate setting (bsc#1111666).
- ath10k: fix PCIE device wake up failed (bsc#1111666).
- ath6kl: add some bounds checking (bsc#1051510).
- ath9k: Check for errors when reading SREV register (bsc#1111666).
- ath9k: correctly handle short radar pulses (bsc#1111666).
- ath: DFS JP domain W56 fixed pulse type 3 RADAR detection (bsc#1111666).
- batman-adv: fix for leaked TVLV handler (bsc#1051510).
- bcache: acquire bch_register_lock later in cached_dev_detach_finish() (bsc#1140652).
- bcache: acquire bch_register_lock later in cached_dev_free() (bsc#1140652).
- bcache: add code comments for journal_read_bucket() (bsc#1140652).
- bcache: Add comments for blkdev_put() in registration code path (bsc#1140652).
- bcache: add comments for closure_fn to be called in closure_queue() (bsc#1140652).
- bcache: add comments for kobj release callback routine (bsc#1140652).
- bcache: add comments for mutex_lock(b-&gt;write_lock) (bsc#1140652).
- bcache: add error check for calling register_bdev() (bsc#1140652).
- bcache: add failure check to run_cache_set() for journal replay (bsc#1140652).
- bcache: add io error counting in write_bdev_super_endio() (bsc#1140652).
- bcache: add more error message in bch_cached_dev_attach() (bsc#1140652).
- bcache: add pendings_cleanup to stop pending bcache device (bsc#1140652).
- bcache: add reclaimed_journal_buckets to struct cache_set (bsc#1140652).
- bcache: add return value check to bch_cached_dev_run() (bsc#1140652).
- bcache: avoid a deadlock in bcache_reboot() (bsc#1140652).
- bcache: avoid clang -Wunintialized warning (bsc#1140652).
- bcache: avoid flushing btree node in cache_set_flush() if io disabled (bsc#1140652).
- bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set (bsc#1140652).
- bcache: check CACHE_SET_IO_DISABLE bit in bch_journal() (bsc#1140652).
- bcache: check CACHE_SET_IO_DISABLE in allocator code (bsc#1140652).
- bcache: check c-&gt;gc_thread by IS_ERR_OR_NULL in cache_set_flush() (bsc#1140652).
- bcache: Clean up bch_get_congested() (bsc#1140652).
- bcache: destroy dc-&gt;writeback_write_wq if failed to create dc-&gt;writeback_thread (bsc#1140652).
- bcache: do not assign in if condition in bcache_device_init() (bsc#1140652).
- bcache: do not set max writeback rate if gc is running (bsc#1140652).
- bcache: fix a race between cache register and cacheset unregister (bsc#1140652).
- bcache: fix crashes stopping bcache device before read miss done (bsc#1140652).
- bcache: fix failure in journal relplay (bsc#1140652).
- bcache: fix inaccurate result of unused buckets (bsc#1140652).
- bcache: fix mistaken sysfs entry for io_error counter (bsc#1140652).
- bcache: fix potential deadlock in cached_def_free() (bsc#1140652).
- bcache: fix race in btree_flush_write() (bsc#1140652).
- bcache: fix return value error in bch_journal_read() (bsc#1140652).
- bcache: fix stack corruption by PRECEDING_KEY() (bsc#1140652).
- bcache: fix wrong usage use-after-freed on keylist in out_nocoalesce branch of btree_gc_coalesce (bsc#1140652).
- bcache: ignore read-ahead request failure on backing device (bsc#1140652).
- bcache: improve bcache_reboot() (bsc#1140652).
- bcache: improve error message in bch_cached_dev_run() (bsc#1140652).
- bcache: make bset_search_tree() be more understandable (bsc#1140652).
- bcache: make is_discard_enabled() static (bsc#1140652).
- bcache: more detailed error message to bcache_device_link() (bsc#1140652).
- bcache: move definition of 'int ret' out of macro read_bucket() (bsc#1140652).
- bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() (bsc#1140652).
- bcache: only clear BTREE_NODE_dirty bit when it is set (bsc#1140652).
- bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached (bsc#1140652).
- bcache: performance improvement for btree_flush_write() (bsc#1140652).
- bcache: remove redundant LIST_HEAD(journal) from run_cache_set() (bsc#1140652).
- bcache: remove redundant LIST_HEAD(journal) from run_cache_set() (bsc#1140652).
- bcache: remove retry_flush_write from struct cache_set (bsc#1140652).
- bcache: remove unncessary code in bch_btree_keys_init() (bsc#1140652).
- bcache: remove unnecessary prefetch() in bset_search_tree() (bsc#1140652).
- bcache: return error immediately in bch_journal_replay() (bsc#1140652).
- bcache: Revert 'bcache: fix high CPU occupancy during journal' (bsc#1140652).
- bcache: Revert 'bcache: free heap cache_set-&gt;flush_btree in bch_journal_free' (bsc#1140652).
- bcache: set largest seq to ja-&gt;seq[bucket_index] in journal_read_bucket() (bsc#1140652).
- bcache: shrink btree node cache after bch_btree_check() (bsc#1140652).
- bcache: stop writeback kthread and kworker when bch_cached_dev_run() failed (bsc#1140652).
- bcache: use sysfs_match_string() instead of __sysfs_match_string() (bsc#1140652).
- be2net: Fix number of Rx queues used for flow hashing (networking-stable-19_06_18).
- be2net: Signal that the device cannot transmit during reconfiguration (bsc#1127315).
- be2net: Synchronize be_update_queues with dev_watchdog (bsc#1127315).
- block, bfq: NULL out the bic when it's no longer valid (bsc#1142359).
- bnx2x: Prevent load reordering in tx completion processing (bsc#1142868).
- bnxt_en: Cap the returned MSIX vectors to the RDMA driver (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Disable bus master during PCI shutdown and driver unload (bsc#1104745).
- bnxt_en: Fix aggregation buffer leak under OOM condition (networking-stable-19_05_31).
- bnxt_en: Fix statistics context reservation logic for RDMA driver (bsc#1104745).
- bnxt_en: Suppress error messages when querying DSCP DCB capabilities (bsc#1104745).
- bonding: fix arp_validate toggling in active-backup mode (networking-stable-19_05_14).
- bonding: Force slave speed check after link state recovery for 802.3ad (bsc#1137584).
- bpf: btf: fix the brackets of BTF_INT_OFFSET() (bsc#1083647).
- bpf: fix callees pruning callers (bsc#1109837).
- bpf: fix nested bpf tracepoints with per-cpu data (bsc#1083647).
- bpf, x64: fix stack layout of JITed bpf code (bsc#1083647).
- bpf, x64: save 5 bytes in prologue when ebpf insns came from cbpf (bsc#1083647).
- bridge: Fix error path for kobject_init_and_add() (networking-stable-19_05_14).
- btrfs: fix race between block group removal and block group allocation (bsc#1143003).
- carl9170: fix misuse of device driver API (bsc#1111666).
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() (bsc#1141478).
- clk: qcom: Fix -Wunused-const-variable (bsc#1051510).
- clk: rockchip: Do not yell about bad mmc phases when getting (bsc#1051510).
- clk: tegra210: fix PLLU and PLLU_OUT1 (bsc#1051510).
- Correct iwlwifi 22000 series ucode file name (bsc#1142673)
- Correct the buggy backport about AER / DPC pcie stuff (bsc#1142623)
- cpufreq: acpi-cpufreq: Report if CPU does not support boost technologies (bsc#1051510).
- cpufreq: brcmstb-avs-cpufreq: Fix initial command check (bsc#1051510).
- cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency (bsc#1051510).
- cpufreq: check if policy is inactive early in __cpufreq_get() (bsc#1051510).
- cpufreq: kirkwood: fix possible object reference leak (bsc#1051510).
- cpufreq/pasemi: fix possible object reference leak (bsc#1051510).
- cpufreq: pmac32: fix possible object reference leak (bsc#1051510).
- cpufreq: ppc_cbe: fix possible object reference leak (bsc#1051510).
- cpufreq: Use struct kobj_attribute instead of struct global_attr (bsc#1051510).
- crypto: arm64/sha1-ce - correct digest for empty data in finup (bsc#1051510).
- crypto: arm64/sha2-ce - correct digest for empty data in finup (bsc#1051510).
- crypto: ccp - Fix 3DES complaint from ccp-crypto module (bsc#1051510).
- crypto: ccp - fix AES CFB error exposed by new test vectors (bsc#1051510).
- crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL (bsc#1051510).
- crypto: ccp/gcm - use const time tag comparison (bsc#1051510).
- crypto: ccp - memset structure fields to zero before reuse (bsc#1051510).
- crypto: ccp - Validate the the error value used to index error messages (bsc#1051510).
- crypto: chacha20poly1305 - fix atomic sleep when using async algorithm (bsc#1051510).
- crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe (bsc#1051510).
- crypto: ghash - fix unaligned memory access in ghash_setkey() (bsc#1051510).
- crypto: talitos - Align SEC1 accesses to 32 bits boundaries (bsc#1051510).
- crypto: talitos - check data blocksize in ablkcipher (bsc#1051510).
- crypto: talitos - fix CTR alg blocksize (bsc#1051510).
- crypto: talitos - fix max key size for sha384 and sha512 (bsc#1051510).
- crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking (bsc#1051510).
- crypto: talitos - properly handle split ICV (bsc#1051510).
- crypto: talitos - reduce max key size for SEC1 (bsc#1051510).
- crypto: talitos - rename alternative AEAD algos (bsc#1051510).
- dasd_fba: Display '00000000' for zero page when dumping sense (bsc#1123080).
- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc (bsc#1111666).
- dma-direct: add support for allocation from ZONE_DMA and ZONE_DMA32 (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-direct: do not retry allocation for no-op GFP_DMA (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-direct: retry allocations using GFP_DMA for small masks (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dmaengine: hsu: Revert 'set HSU_CH_MTSR to memory width' (bsc#1051510).
- dma-mapping: move dma_mark_clean to dma-direct.h (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-mapping: move swiotlb arch helpers to a new header (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-mapping: take dma_pfn_offset into account in dma_max_pfn (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dpaa_eth: fix SG frame cleanup (networking-stable-19_05_14).
- drm/amd/display: Make some functions static (bsc#1111666).
- drm/atmel-hlcdc: revert shift by 8 (bsc#1111666).
- drm/i915/cml: Introduce Comet Lake PCH (jsc#SLE-6681).
- drm/i915/icl: Add WaDisableBankHangMode (bsc#1111666).
- drm/meson: Add support for XBGR8888 &amp; ABGR8888 formats (bsc#1051510).
- drm/msm/a3xx: remove TPL1 regs from snapshot (bsc#1051510).
- drm/msm/mdp5: Fix mdp5_cfg_init error return (bsc#1111666).
- drm/nouveau/i2c: Enable i2c pads &amp; busses during preinit (bsc#1051510).
- drm: return -EFAULT if copy_to_user() fails (bsc#1111666).
- drm/rockchip: Properly adjust to a true clock in adjusted_mode (bsc#1051510).
- drm/udl: introduce a macro to convert dev to udl (bsc#1111666).
- drm/udl: move to embedding drm device inside udl device (bsc#1111666).
- drm/udl: Replace drm_dev_unref with drm_dev_put (bsc#1111666).
- drm/vc4: fix fb references in async update (bsc#1141312).
- drm/vmwgfx: Honor the sg list segment size limitation (bsc#1111666).
- e1000e: start network tx queue only when link is up (bsc#1051510).
- Enable intel-speed-select driver and update supported.conf (jsc#SLE-5364)
- ethtool: check the return value of get_regs_len (git-fixes).
- ethtool: fix potential userspace buffer overflow (networking-stable-19_06_09).
- Fix kABI for asus-wmi quirk_entry field addition (bsc#1051510).
- Fix memory leak in sctp_process_init (networking-stable-19_06_09).
- fork, memcg: fix cached_stacks case (bsc#1134097).
- fork, memcg: fix crash in free_thread_stack on memcg charge fail (bsc#1134097).
- fpga: add intel stratix10 soc fpga manager driver (jsc#SLE-7057).
- fpga: stratix10-soc: fix use-after-free on s10_init() (jsc#SLE-7057).
- fpga: stratix10-soc: fix wrong of_node_put() in init function (jsc#jsc#SLE-7057).
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM (bsc#1111666).
- hid: wacom: correct touch resolution x/y typo (bsc#1051510).
- hid: wacom: generic: Correct pad syncing (bsc#1051510).
- hid: wacom: generic: only switch the mode on devices with LEDs (bsc#1051510).
- hid: wacom: generic: read HID_DG_CONTACTMAX from any feature report (bsc#1051510).
- ib/ipoib: Add child to parent list only if device initialized (bsc#1103992).
- ib/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE (bsc#1103991).
- idr: fix overflow case for idr_for_each_entry_ul() (bsc#1109837).
- input: elantech - enable middle button support on 2 ThinkPads (bsc#1051510).
- input: imx_keypad - make sure keyboard can always wake up system (bsc#1051510).
- input: psmouse - fix build error of multiple definition (bsc#1051510).
- input: synaptics - enable SMBUS on T480 thinkpad trackpad (bsc#1051510).
- input: tm2-touchkey - acknowledge that setting brightness is a blocking call (bsc#1129770).
- intel_th: msu: Fix single mode with disabled IOMMU (bsc#1051510).
- iommu-helper: mark iommu_is_span_boundary as inline (jsc#SLE-6197 bsc#1140559 LTC#173150).
- ipv4: Fix raw socket lookup for local traffic (networking-stable-19_05_14).
- ipv4/igmp: fix another memory leak in igmpv3_del_delrec() (networking-stable-19_05_31).
- ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST (networking-stable-19_05_31).
- ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop (git-fixes).
- ipv6: Consider sk_bound_dev_if when binding a raw socket to an address (networking-stable-19_05_31).
- ipv6: fix EFAULT on sendto with icmpv6 and hdrincl (networking-stable-19_06_09).
- ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero (networking-stable-19_06_18).
- ipv6: use READ_ONCE() for inet-&gt;hdrincl as in ipv4 (networking-stable-19_06_09).
- iwlwifi: correct one of the PCI struct names (bsc#1111666).
- iwlwifi: do not WARN when calling iwl_get_shared_mem_conf with RF-Kill (bsc#1111666).
- iwlwifi: fix cfg structs for 22000 with different RF modules (bsc#1111666).
- iwlwifi: fix devices with PCI Device ID 0x34F0 and 11ac RF modules (bsc#1111666).
- iwlwifi: Fix double-free problems in iwl_req_fw_callback() (bsc#1111666).
- iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices (bsc#1111666).
- iwlwifi: mvm: Drop large non sta frames (bsc#1111666).
- iwlwifi: pcie: do not service an interrupt that was masked (bsc#1111666).
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X (bsc#1111666).
- kabi fix for hda_codec.relaxed_resume flag (bsc#1111666).
- kabi: Fix lost iommu-helper symbols on arm64 (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: mask changes made by basic protected virtualization support (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: mask changes made by swiotlb for protected virtualization (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: mask changes made by use of DMA memory for adapter interrupts (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: remove unused hcall definition (bsc#1140322 LTC#176270).
- kbuild: use -flive-patching when CONFIG_LIVEPATCH is enabled (bsc#1071995).
- kernel: jump label transformation performance (bsc#1137534 bsc#1137535 			LTC#178058 LTC#178059).
- kvm: arm/arm64: vgic-its: Take the srcu lock when parsing the memslots (bsc#1133021).
- kvm: arm/arm64: vgic-its: Take the srcu lock when writing to guest memory (bsc#1133021).
- kvm: mmu: Fix overflow on kvm mmu page limit calculation (bsc#1135335).
- kvm/mmu: kABI fix for *_mmu_pages changes in struct kvm_arch (bsc#1135335).
- kvm: polling: add architecture backend to disable polling (bsc#1119222).
- kvm: s390: change default halt poll time to 50us (bsc#1119222).
- kvm: s390: enable CONFIG_HAVE_kvm_NO_POLL (bsc#1119222) We need to enable CONFIG_HAVE_kvm_NO_POLL for bsc#1119222
- kvm: s390: fix typo in parameter description (bsc#1119222).
- kvm: s390: kABI Workaround for 'kvm_vcpu_stat' Add halt_no_poll_steal to kvm_vcpu_stat. Hide it from the kABI checker.
- kvm: s390: kABI Workaround for 'lowcore' (bsc#1119222).
- kvm: s390: provide kvm_arch_no_poll function (bsc#1119222).
- kvm: svm/avic: Do not send AVIC doorbell to self (bsc#1140133).
- kvm: SVM: Fix detection of AMD Errata 1096 (bsc#1142354).
- lapb: fixed leak of control-blocks (networking-stable-19_06_18).
- lib: fix stall in __bitmap_parselist() (bsc#1051510).
- libnvdimm/namespace: Fix label tracking error (bsc#1142350).
- libnvdimm/region: Register badblocks before namespaces (bsc#1143209).
- lib/bitmap.c: make bitmap_parselist() thread-safe and much faster (bsc#1143507).
- lib/scatterlist: Fix mapping iterator when sg-&gt;offset is greater than PAGE_SIZE (bsc#1051510).
- livepatch: Remove duplicate warning about missing reliable stacktrace support (bsc#1071995).
- livepatch: Use static buffer for debugging messages under rq lock (bsc#1071995).
- llc: fix skb leak in llc_build_and_send_ui_pkt() (networking-stable-19_05_31).
- mac80211: do not start any work during reconfigure flow (bsc#1111666).
- mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he() (bsc#1111666).
- mac80211: free peer keys before vif down in mesh (bsc#1111666).
- mac80211: mesh: fix RCU warning (bsc#1111666).
- mac80211: only warn once on chanctx_conf being NULL (bsc#1111666).
- media: cpia2_usb: first wake up, then free in disconnect (bsc#1135642).
- media: marvell-ccic: fix DMA s/g desc number calculation (bsc#1051510).
- media: s5p-mfc: Make additional clocks optional (bsc#1051510).
- media: v4l2: Test type instead of cfg-&gt;type in v4l2_ctrl_new_custom() (bsc#1051510).
- media: vivid: fix incorrect assignment operation when setting video mode (bsc#1051510).
- mei: bus: need to unlink client before freeing (bsc#1051510).
- mei: me: add denverton innovation engine device IDs (bsc#1051510).
- mei: me: add gemini lake devices id (bsc#1051510).
- memory: tegra: Fix integer overflow on tick value calculation (bsc#1051510).
- memstick: Fix error cleanup path of memstick_init (bsc#1051510).
- mfd: intel-lpss: Release IDA resources (bsc#1051510).
- mips: fix an off-by-one in dma_capable (jsc#SLE-6197 bsc#1140559 LTC#173150).
- mlxsw: spectrum_dcb: Configure DSCP map as the last rule is removed (bsc#1112374).
- mmc: sdhci-pci: Try 'cd' for card-detect lookup before using NULL (bsc#1051510).
- mm: migrate: Fix reference check race between __find_get_block() and migration (bnc#1137609).
- mm/nvdimm: add is_ioremap_addr and use that to check ioremap address (bsc#1140322 LTC#176270).
- mm, page_alloc: fix has_unmovable_pages for HugePages (bsc#1127034).
- mm: replace all open encodings for NUMA_NO_NODE (bsc#1140322 LTC#176270).
- mt7601u: do not schedule rx_tasklet when the device has been disconnected (bsc#1111666).
- mt7601u: fix possible memory leak when the device is disconnected (bsc#1111666).
- neigh: fix use-after-free read in pneigh_get_next (networking-stable-19_06_18).
- net/af_iucv: build proper skbs for HiperTransport (bsc#1142221 LTC#179332).
- net/af_iucv: remove GFP_DMA restriction for HiperTransport (bsc#1142112 bsc#1142221 LTC#179334 LTC#179332).
- net/af_iucv: remove GFP_DMA restriction for HiperTransport (bsc#1142221 LTC#179332).
- net: avoid weird emergency message (networking-stable-19_05_21).
- net: fec: fix the clk mismatch in failed_reset path (networking-stable-19_05_31).
- netfilter: conntrack: fix calculation of next bucket number in early_drop (git-fixes).
- net-gro: fix use-after-free read in napi_gro_frags() (networking-stable-19_05_31).
- net: hns3: Fix inconsistent indenting (bsc#1140676).
- net: hns: fix ICMP6 neighbor solicitation messages discard problem (bsc#1140676).
- net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw() (bsc#1140676).
- net: hns: Fix loopback test failed at copper ports (bsc#1140676).
- net: hns: Fix probabilistic memory overwrite when HNS driver initialized (bsc#1140676).
- net: hns: fix unsigned comparison to less than zero (bsc#1140676).
- net: hns: Fix WARNING when remove HNS driver with SMMU enabled (bsc#1140676).
- net: hns: Use NAPI_POLL_WEIGHT for hns driver (bsc#1140676).
- net/mlx4_core: Change the error print to info print (networking-stable-19_05_21).
- net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query (networking-stable-19_06_09).
- net/mlx5: Allocate root ns memory using kzalloc to match kfree (networking-stable-19_05_31).
- net/mlx5: Avoid double free in fs init error unwinding path (networking-stable-19_05_31).
- net/mlx5e: Rx, Fix checksum calculation for new hardware (bsc#1127611).
- net: mvneta: Fix err code path of probe (networking-stable-19_05_31).
- net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value (networking-stable-19_05_31).
- net: openvswitch: do not free vport if register_netdevice() is failed (networking-stable-19_06_18).
- net/packet: fix memory leak in packet_set_ring() (git-fixes).
- net: rds: fix memory leak in rds_ib_flush_mr_pool (networking-stable-19_06_09).
- net: seeq: fix crash caused by not set dev.parent (networking-stable-19_05_14).
- net: stmmac: fix reset gpio free missing (networking-stable-19_05_31).
- net/tls: fix socket wmem accounting on fallback with netem (bsc#1109837).
- net/tls: make sure offload also gets the keys wiped (bsc#1109837).
- net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions (networking-stable-19_05_21).
- nvme: fix memory leak caused by incorrect subsystem free (bsc#1143185).
- ocfs2: add first lock wait time in locking_state (bsc#1134390).
- ocfs2: add last unlock times in locking_state (bsc#1134390).
- ocfs2: add locking filter debugfs file (bsc#1134390).
- p54usb: Fix race between disconnect and firmware loading (bsc#1111666).
- packet: Fix error path in packet_init (networking-stable-19_05_14).
- packet: in recvmsg msg_name return at least sizeof sockaddr_ll (git-fixes).
- pci/aer: Use cached AER Capability offset (bsc#1142623).
- pci: Always allow probing with driver_override (bsc#1051510).
- pci: hv: Add hv_pci_remove_slots() when we unload the driver (bsc#1142701).
- pci: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (bsc#1142701).
- pci: hv: Fix a memory leak in hv_eject_device_work() (bsc#1142701).
- pci: hv: Fix a use-after-free bug in hv_eject_device_work() (bsc#1142701).
- pci: hv: Fix return value check in hv_pci_assign_slots() (bsc#1142701).
- pci: hv: Remove unused reason for refcount handler (bsc#1142701).
- pci: hv: support reporting serial number as slot information (bsc#1142701).
- pci/P2PDMA: Fix missing check for dma_virt_ops (bsc#1111666).
- pci / PM: Use SMART_SUSPEND and LEAVE_SUSPENDED flags for PCIe ports (bsc#1142623).
- pci/portdrv: Add #defines for AER and DPC Interrupt Message Number masks (bsc#1142623).
- pci/portdrv: Consolidate comments (bsc#1142623).
- pci/portdrv: Disable port driver in compat mode (bsc#1142623).
- pci/portdrv: Remove pcie_portdrv_err_handler.slot_reset (bsc#1142623).
- pci: portdrv: Restore PCI config state on slot reset (bsc#1142623).
- pci/portdrv: Support PCIe services on subtractive decode bridges (bsc#1142623).
- pci/portdrv: Use conventional Device ID table formatting (bsc#1142623).
- pci: Return error if cannot probe VF (bsc#1051510).
- pkey: Indicate old mkvp only if old and current mkvp are different (bsc#1137827 LTC#178090).
- pktgen: do not sleep with the thread lock held (git-fixes).
- platform/x86: asus-nb-wmi: Support ALS on the Zenbook UX430UQ (bsc#1051510).
- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi (bsc#1051510).
- platform/x86: intel_turbo_max_3: Remove restriction for HWP platforms (jsc#SLE-5439).
- platform/x86: ISST: Add common API to register and handle ioctls (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mailbox interface via MSRs (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mailbox interface via PCI (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mmio interface (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select PUNIT MSR interface (jsc#SLE-5364).
- platform/x86: ISST: Add IOCTL to Translate Linux logical CPU to PUNIT CPU number (jsc#SLE-5364).
- platform/x86: ISST: Restore state on resume (jsc#SLE-5364).
- platform/x86: ISST: Store per CPU information (jsc#SLE-5364).
- platform/x86: pmc_atom: Add CB4063 Beckhoff Automation board to critclk_systems DMI table (bsc#1051510).
- powerpc/64s: Remove POWER9 DD1 support (bsc#1055117, LTC#159753, git-fixes).
- powerpc/crypto: Use cheaper random numbers for crc-vpmsum self-test ().
- powerpc/mm: Change function prototype (bsc#1055117).
- powerpc/mm: Consolidate numa_enable check and min_common_depth check (bsc#1140322 LTC#176270).
- powerpc/mm/drconf: Use NUMA_NO_NODE on failures instead of node 0 (bsc#1140322 LTC#176270).
- powerpc/mm: Fix node look up with numa=off boot (bsc#1140322 LTC#176270).
- powerpc/mm/hugetlb: Update huge_ptep_set_access_flags to call __ptep_set_access_flags directly (bsc#1055117).
- powerpc/mm/radix: Change pte relax sequence to handle nest MMU hang (bsc#1055117).
- powerpc/mm/radix: Move function from radix.h to pgtable-radix.c (bsc#1055117).
- powerpc/papr_scm: Force a scm-unbind if initial scm-bind fails (bsc#1140322 LTC#176270).
- powerpc/papr_scm: Update drc_pmem_unbind() to use H_SCM_UNBIND_ALL (bsc#1140322 LTC#176270).
- powerpc/pseries: Update SCM hcall op-codes in hvcall.h (bsc#1140322 LTC#176270).
- powerpc/watchpoint: Restore NV GPRs while returning from exception (bsc#1140945 bsc#1141401 bsc#1141402 bsc#1141452 bsc#1141453 bsc#1141454 LTC#178983 LTC#179191 LTC#179192 LTC#179193 LTC#179194 LTC#179195).
- ppc: Convert mmu context allocation to new IDA API (bsc#1139619 LTC#178538).
- ppp: deflate: Fix possible crash in deflate_init (networking-stable-19_05_21).
- qed: Fix build error without CONFIG_DEVLINK (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix -Wmaybe-uninitialized false positive (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index (jsc#SLE-4693 bsc#1136462).
- rdma/odp: Fix missed unlock in non-blocking invalidate_start (bsc#1103992).
- rdma/srp: Accept again source addresses that do not have a port number (bsc#1103992).
- rdma/srp: Document srp_parse_in() arguments (bsc#1103992 ).
- rdma/uverbs: check for allocation failure in uapi_add_elm() (bsc#1103992).
- rds: ib: fix 'passing zero to ERR_PTR()' warning (git-fixes).
- Revert 'bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()' (bsc#1140652).
- Revert 'e1000e: fix cyclic resets at link up with active tx' (bsc#1051510).
- Revert 'livepatch: Remove reliable stacktrace check in klp_try_switch_task()' (bsc#1071995).
- Revert 'serial: 8250: Do not service RX FIFO if interrupts are disabled' (bsc#1051510).
- rtlwifi: rtl8192cu: fix error handle when usb probe failed (bsc#1111666).
- rtnetlink: always put IFLA_LINK for links with a link-netnsid (networking-stable-19_05_21).
- s390: add alignment hints to vector load and store (jsc#SLE-6907 LTC#175887).
- s390/airq: use DMA memory for adapter interrupts (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cio: add basic protected virtualization support (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cio: introduce DMA pools to cio (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cpum_cf: add ctr_stcctm() function (jsc#SLE-6904 ).
- s390/cpum_cf: Add minimal in-kernel interface for counter measurements (jsc#SLE-6904).
- s390/cpum_cf: Add support for CPU-MF SVN 6 (jsc#SLE-6904 ).
- s390/cpum_cf_diag: Add support for CPU-MF SVN 6 (jsc#SLE-6904 ).
- s390/cpum_cf_diag: Add support for s390 counter facility diagnostic trace (jsc#SLE-6904).
- s390/cpum_cf: introduce kernel_cpumcf_alert() to obtain measurement alerts (jsc#SLE-6904).
- s390/cpum_cf: introduce kernel_cpumcf_avail() function (jsc#SLE-6904).
- s390/cpum_cf: move counter set controls to a new header file (jsc#SLE-6904).
- s390/cpum_cf: prepare for in-kernel counter measurements (jsc#SLE-6904).
- s390/cpum_cf: rename per-CPU counter facility structure and variables (jsc#SLE-6904).
- s390/cpumf: Add extended counter set definitions for model 8561 and 8562 (bsc#1142052 LTC#179320).
- s390/cpu_mf: add store cpu counter multiple instruction support (jsc#SLE-6904).
- s390/cpumf: Fix warning from check_processor_id (jsc#SLE-6904 ).
- s390/cpu_mf: move struct cpu_cf_events and per-CPU variable to header file (jsc#SLE-6904).
- s390/cpu_mf: replace stcctm5() with the stcctm() function (jsc#SLE-6904).
- s390/dma: provide proper ARCH_ZONE_DMA_BITS value (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/mm: force swiotlb for protected virtualization (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142119 LTC#179331).
- s390/qeth: be drop monitor friendly (bsc#1142115 LTC#179337).
- s390/qeth: be drop monitor friendly (bsc#1142220 LTC#179335).
- s390: remove the unused dma_capable helper (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390: report new CPU capabilities (jsc#SLE-6907 LTC#175887).
- s390/vtime: steal time exponential moving average (bsc#1119222).
- s390/zcrypt: Fix wrong dispatching for control domain CPRBs (bsc#1137811 LTC#178088).
- scripts/git_sort/git_sort.py: Add mmots tree.
- scsi: cxgb4i: add wait_for_completion() (jsc#SLE-4678 bsc#1136342).
- scsi: cxgbi: KABI: fix handle completion etc (jsc#SLE-4678 bsc#1136342).
- scsi: cxgbi: remove redundant __kfree_skb call on skb and free cst-&gt;atid (jsc#SLE-4678 bsc#1136342).
- scsi: fc: add FPIN ELS definition (bsc#1136217,jsc#SLE-4722).
- scsi/fc: kABI fixes for new ELS_FPIN definition (bsc#1136217,jsc#SLE-4722).
- scsi: ibmvfc: fix WARN_ON during event pool release (bsc#1137458 LTC#178093).
- scsi: lpfc: Add loopback testing to trunking mode (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: add support for posting FC events on FPIN reception (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Annotate switch/case fall-through (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: avoid uninitialized variable warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Cancel queued work for an IO when processing a received ABTS (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Change smp_processor_id() into raw_smp_processor_id() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Convert bootstrap mbx polling from msleep to udelay (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Coordinate adapter error handling with offline handling (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct boot bios information to FDMI registration (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct localport timeout duration error (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct __lpfc_sli_issue_iocb_s4 lockdep check (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct nvmet buffer free race condition (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Declare local functions static (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Enhance 6072 log string (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix 32-bit format string warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix a handful of indentation issues (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix alloc context on oas lun creations (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix a recently introduced compiler warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix BFS crash with DIX enabled (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix build error (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix calls to dma_set_mask_and_coherent() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix deadlock due to nested hbalock call (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix driver crash in target reset handler (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix duplicate log message numbers (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix error code if kcalloc() fails (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix error codes in lpfc_sli4_pci_mem_setup() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix fc4type information for FDMI (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix fcp_rsp_len checking on lun reset (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix FDMI fc4type for nvme support (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix FDMI manufacturer attribute value (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix handling of trunk links state reporting (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix hardlockup in scsi_cmd_iocb_cmpl (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix HDMI2 registration string for symbolic name (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix incorrect logical link speed on trunks when links down (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix indentation and balance braces (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix io lost on host resets (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix kernel warnings related to smp_processor_id() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix link speed reporting for 4-link trunk (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix location of SCSI ktime counters (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix lpfc_nvmet_mrq attribute handling when 0 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix mailbox hang on adapter init (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix memory leak in abnormal exit path from lpfc_eq_create (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix missing wakeups on abort threads (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet async receive buffer replenishment (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet handling of first burst cmd (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet handling of received ABTS for unmapped frames (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet target abort cmd matching (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix oops when driver is loaded with 1 interrupt vector (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix poor use of hardware queues if fewer irq vectors (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix protocol support on G6 and G7 adapters (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix PT2PT PLOGI collison stopping discovery (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix unused variable warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fixup eq_clr_intr references (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix use-after-free mailbox cmd completion (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Make lpfc_sli4_oas_verify static (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Move trunk_errmsg[] from a header file into a .c file (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Prevent 'use after free' memory overwrite in nvmet LS handling (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Reduce memory footprint for lpfc_queue (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove set but not used variable 'phys_id' (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove set-but-not-used variables (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove unused functions (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Resolve inconsistent check of hdwq in lpfc_scsi_cmd_iocb_cmpl (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Resolve irq-unsafe lockdep heirarchy warning in lpfc_io_free (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: resolve static checker warning in lpfc_sli4_hba_unset (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Revert message logging on unsupported topology (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Revise message when stuck due to unresponsive adapter (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Rework misleading nvme not supported in firmware message (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Separate CQ processing for nvmet_fc upcalls (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Specify node affinity for queue memory allocation (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Stop adapter if pci errors detected (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update Copyright in driver version (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update lpfc version to 12.2.0.1 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update lpfc version to 12.2.0.3 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: use dma_set_mask_and_coherent (bsc#1136217,jsc#SLE-4722).
- scsi: qedf: Add additional checks for io_req-&gt;sc_cmd validity (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add a flag to help debugging io_req which could not be cleaned (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add comment to display logging levels (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add driver state to 'driver_stats' debugfs node (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add LBA to underrun debug messages (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload check (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add missing return in qedf_scsi_done() (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add port_id for fcport into initiate_cleanup debug message (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add return value to log message if scsi_add_host fails (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Change MSI-X load error message (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check both the FCF and fabric ID before servicing clear virtual link (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check for fcoe_libfc_config failure (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check for tm_flags instead of cmd_type during cleanup (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check the return value of start_xmit (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Cleanup rrq_work after QEDF_CMD_OUTSTANDING is cleared (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Correctly handle refcounting of rdata (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Do not queue anything if upload is in progress (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Do not send ABTS for under run scenario (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: fc_rport_priv reference counting fixes (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Fix lport may be used uninitialized warning (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Log message if scsi_add_host fails (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Modify flush routine to handle all I/Os and TMF (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Print fcport information on wait for upload timeout (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Print scsi_cmd backpointer in good completion path if the command is still being used (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: remove memset/memcpy to nfunc and use func instead (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Remove set but not used variable 'fr_len' (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: remove set but not used variables (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Update the driver version to 8.37.25.19 (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Update the driver version to 8.37.25.20 (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Wait for upload and link down processing during soft ctx reset (bsc#1136467 jsc#SLE-4694).
- scsi: qedi: add module param to set ping packet size (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Fix spelling mistake 'OUSTANDING' -&gt; 'OUTSTANDING' (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev' (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693 bsc#1136462).
- scsi: qla2xxx: do not crash on uninitialized pool list (boo#1138874).
- scsi: scsi_transport_fc: Add FPIN fc event codes (bsc#1136217,jsc#SLE-4722).
- scsi: scsi_transport_fc: refactor event posting routines (bsc#1136217,jsc#SLE-4722).
- sctp: Free cookie before we memdup a new one (networking-stable-19_06_18).
- sctp: silence warns on sctp_stream_init allocations (bsc#1083710).
- serial: uartps: Do not add a trailing semicolon to macro (bsc#1051510).
- serial: uartps: Fix long line over 80 chars (bsc#1051510).
- serial: uartps: Fix multiple line dereference (bsc#1051510).
- serial: uartps: Remove useless return from cdns_uart_poll_put_char (bsc#1051510).
- staging: comedi: amplc_pci230: fix null pointer deref on interrupt (bsc#1051510).
- staging: comedi: dt282x: fix a null pointer deref on interrupt (bsc#1051510).
- staging: rtl8712: reduce stack usage, again (bsc#1051510).
- sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg (networking-stable-19_06_18).
- tcp: fix tcp_set_congestion_control() use from bpf hook (bsc#1109837).
- tcp: reduce tcp_fastretrans_alert() verbosity (git-fixes).
- team: Always enable vlan tx offload (bsc#1051510).
- tools: bpftool: Fix json dump crash on powerpc (bsc#1109837).
- tools: bpftool: use correct argument in cgroup errors (bsc#1109837).
- tools/power/x86: A tool to validate Intel Speed Select commands (jsc#SLE-5364).
- tty: rocket: fix incorrect forward declaration of 'rp_init()' (bsc#1051510).
- tty: serial_core: Set port active bit in uart_port_activate (bsc#1051510).
- tty: serial: cpm_uart - fix init when SMC is relocated (bsc#1051510).
- tuntap: synchronize through tfiles array instead of tun-&gt;numqueues (networking-stable-19_05_14).
- usb: gadget: ether: Fix race between gether_disconnect and rx_submit (bsc#1051510).
- usb: gadget: fusb300_udc: Fix memory leak of fusb300-&gt;ep[i] (bsc#1051510).
- usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC (bsc#1051510).
- usb: pci-quirks: Correct AMD PLL quirk detection (bsc#1051510).
- usb: serial: ftdi_sio: add ID for isodebug v1 (bsc#1051510).
- usb: serial: option: add support for GosunCn ME3630 RNDIS mode (bsc#1051510).
- virtio/s390: add indirection to indicators access (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: DMA support for virtio-ccw (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: make airq summary indicators DMA (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use cacheline aligned airq bit vectors (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use DMA memory for ccw I/O and classic notifiers (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use vring_create_virtqueue (jsc#SLE-6197 bsc#1140559 LTC#173150).
- vmci: Fix integer overflow in VMCI handle arrays (bsc#1051510).
- vrf: sit mtu should not be updated when vrf netdev is the link (networking-stable-19_05_14).
- vsock/virtio: free packets during the socket release (networking-stable-19_05_21).
- vsock/virtio: set SOCK_DONE on peer shutdown (networking-stable-19_06_18).
- wil6210: drop old event after wmi_call timeout (bsc#1111666).
- wil6210: fix potential out-of-bounds read (bsc#1051510).
- wil6210: fix spurious interrupts in 3-msi (bsc#1111666).
- x86, mm: fix fast GUP with hyper-based TLB flushing (VM Functionality, bsc#1140903).
- xdp: fix possible cq entry leak (bsc#1109837).
- xdp: fix race on generic receive path (bsc#1109837).
- xdp: hold device for umem regardless of zero-copy mode (bsc#1109837).
- xen: let alloc_xenballooned_pages() fail if not enough memory free (bsc#1142450 XSA-300).
- xfs: do not overflow xattr listent buffer (bsc#1143105).
- xprtrdma: Fix use-after-free in rpcrdma_post_recvs (bsc#1103992 ).
- xsk: Properly terminate assignment in xskq_produce_flush_desc (bsc#1109837).

		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-07"/>
	<updated date="2019-08-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083710">SUSE bug 1083710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102247">SUSE bug 1102247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119222">SUSE bug 1119222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123080">SUSE bug 1123080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127034">SUSE bug 1127034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127315">SUSE bug 1127315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130972">SUSE bug 1130972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134097">SUSE bug 1134097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134390">SUSE bug 1134390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134399">SUSE bug 1134399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135335">SUSE bug 1135335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136217">SUSE bug 1136217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136342">SUSE bug 1136342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136462">SUSE bug 1136462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136467">SUSE bug 1136467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137458">SUSE bug 1137458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137534">SUSE bug 1137534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137535">SUSE bug 1137535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137584">SUSE bug 1137584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137609">SUSE bug 1137609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137811">SUSE bug 1137811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137827">SUSE bug 1137827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138874">SUSE bug 1138874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139358">SUSE bug 1139358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139619">SUSE bug 1139619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140133">SUSE bug 1140133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140139">SUSE bug 1140139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140322">SUSE bug 1140322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140559">SUSE bug 1140559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140652">SUSE bug 1140652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140676">SUSE bug 1140676</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140903">SUSE bug 1140903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140945">SUSE bug 1140945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141312">SUSE bug 1141312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141401">SUSE bug 1141401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141402">SUSE bug 1141402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141452">SUSE bug 1141452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141453">SUSE bug 1141453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141454">SUSE bug 1141454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141478">SUSE bug 1141478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141558">SUSE bug 1141558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142023">SUSE bug 1142023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142052">SUSE bug 1142052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142083">SUSE bug 1142083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142112">SUSE bug 1142112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142115">SUSE bug 1142115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142119">SUSE bug 1142119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142220">SUSE bug 1142220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142221">SUSE bug 1142221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142254">SUSE bug 1142254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142350">SUSE bug 1142350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142351">SUSE bug 1142351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142354">SUSE bug 1142354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142359">SUSE bug 1142359</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142450">SUSE bug 1142450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142623">SUSE bug 1142623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142673">SUSE bug 1142673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142701">SUSE bug 1142701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142868">SUSE bug 1142868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143003">SUSE bug 1143003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143045">SUSE bug 1143045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143105">SUSE bug 1143105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143185">SUSE bug 1143185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143189">SUSE bug 1143189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143191">SUSE bug 1143191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143209">SUSE bug 1143209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143507">SUSE bug 1143507</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20855/">CVE-2018-20855</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1125/">CVE-2019-1125</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11810/">CVE-2019-11810</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13631/">CVE-2019-13631</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13648/">CVE-2019-13648</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14283/">CVE-2019-14283</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14284/">CVE-2019-14284</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497047" comment="reiserfs-kmp-default-4.12.14-197.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138289" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1122292" ref_url="https://bugzilla.suse.com/1122292" source="BUGZILLA"/>
		<reference ref_id="1122299" ref_url="https://bugzilla.suse.com/1122299" source="BUGZILLA"/>
		<reference ref_id="1141780" ref_url="https://bugzilla.suse.com/1141780" source="BUGZILLA"/>
		<reference ref_id="1141782" ref_url="https://bugzilla.suse.com/1141782" source="BUGZILLA"/>
		<reference ref_id="1141783" ref_url="https://bugzilla.suse.com/1141783" source="BUGZILLA"/>
		<reference ref_id="1141785" ref_url="https://bugzilla.suse.com/1141785" source="BUGZILLA"/>
		<reference ref_id="1141787" ref_url="https://bugzilla.suse.com/1141787" source="BUGZILLA"/>
		<reference ref_id="1141789" ref_url="https://bugzilla.suse.com/1141789" source="BUGZILLA"/>
		<reference ref_id="1147021" ref_url="https://bugzilla.suse.com/1147021" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11212" ref_url="https://www.suse.com/security/cve/CVE-2018-11212/" source="CVE"/>
		<reference ref_id="CVE-2019-11771" ref_url="https://www.suse.com/security/cve/CVE-2019-11771/" source="CVE"/>
		<reference ref_id="CVE-2019-11772" ref_url="https://www.suse.com/security/cve/CVE-2019-11772/" source="CVE"/>
		<reference ref_id="CVE-2019-11775" ref_url="https://www.suse.com/security/cve/CVE-2019-11775/" source="CVE"/>
		<reference ref_id="CVE-2019-2449" ref_url="https://www.suse.com/security/cve/CVE-2019-2449/" source="CVE"/>
		<reference ref_id="CVE-2019-2762" ref_url="https://www.suse.com/security/cve/CVE-2019-2762/" source="CVE"/>
		<reference ref_id="CVE-2019-2766" ref_url="https://www.suse.com/security/cve/CVE-2019-2766/" source="CVE"/>
		<reference ref_id="CVE-2019-2769" ref_url="https://www.suse.com/security/cve/CVE-2019-2769/" source="CVE"/>
		<reference ref_id="CVE-2019-2786" ref_url="https://www.suse.com/security/cve/CVE-2019-2786/" source="CVE"/>
		<reference ref_id="CVE-2019-2816" ref_url="https://www.suse.com/security/cve/CVE-2019-2816/" source="CVE"/>
		<reference ref_id="CVE-2019-4473" ref_url="https://www.suse.com/security/cve/CVE-2019-4473/" source="CVE"/>
		<reference ref_id="CVE-2019-7317" ref_url="https://www.suse.com/security/cve/CVE-2019-7317/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2291-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192291-1.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

Update to Java 8.0 Service Refresh 5 Fix Pack 40.

Security issues fixed:

- CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-11772: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)
- CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).
- CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).
- CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).
- CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).
- CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).
- CVE-2019-2786: Fixed issue inside Component Security (bsc#1141787).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-04"/>
	<updated date="2019-09-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1122292">SUSE bug 1122292</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122299">SUSE bug 1122299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141780">SUSE bug 1141780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141782">SUSE bug 1141782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141783">SUSE bug 1141783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141785">SUSE bug 1141785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141787">SUSE bug 1141787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141789">SUSE bug 1141789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1147021">SUSE bug 1147021</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11212/">CVE-2018-11212</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11771/">CVE-2019-11771</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11772/">CVE-2019-11772</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11775/">CVE-2019-11775</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2449/">CVE-2019-2449</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2762/">CVE-2019-2762</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2766/">CVE-2019-2766</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2769/">CVE-2019-2769</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2786/">CVE-2019-2786</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-2816/">CVE-2019-2816</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-4473/">CVE-2019-4473</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-7317/">CVE-2019-7317</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496991" comment="java-1_8_0-ibm-1.8.0_sr5.40-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496992" comment="java-1_8_0-ibm-alsa-1.8.0_sr5.40-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496993" comment="java-1_8_0-ibm-devel-1.8.0_sr5.40-3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496994" comment="java-1_8_0-ibm-plugin-1.8.0_sr5.40-3.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138290" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1073313" ref_url="https://bugzilla.suse.com/1073313" source="BUGZILLA"/>
		<reference ref_id="1111388" ref_url="https://bugzilla.suse.com/1111388" source="BUGZILLA"/>
		<reference ref_id="1114845" ref_url="https://bugzilla.suse.com/1114845" source="BUGZILLA"/>
		<reference ref_id="1143194" ref_url="https://bugzilla.suse.com/1143194" source="BUGZILLA"/>
		<reference ref_id="1143273" ref_url="https://bugzilla.suse.com/1143273" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17740" ref_url="https://www.suse.com/security/cve/CVE-2017-17740/" source="CVE"/>
		<reference ref_id="CVE-2019-13057" ref_url="https://www.suse.com/security/cve/CVE-2019-13057/" source="CVE"/>
		<reference ref_id="CVE-2019-13565" ref_url="https://www.suse.com/security/cve/CVE-2019-13565/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005929.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

Security issue fixed:

- CVE-2019-13565: Fixed an authentication bypass when using SASL authentication and session encryption (bsc#1143194).
- CVE-2019-13057: Fixed an issue with delegated database admin privileges (bsc#1143273).
- CVE-2017-17740: When both the nops module and the member of overlay
  are enabled, attempts to free a buffer that was allocated on the stack,
  which allows remote attackers to cause a denial of service (slapd crash)
  via a member MODDN operation. (bsc#1073313)

Non-security issues fixed:

- Fixed broken shebang line in openldap_update_modules_path.sh (bsc#1114845).
- Create files in /var/lib/ldap/ during initial start to allow for transactional updates (bsc#1111388)
- Fixed incorrect post script call causing tmpfiles creation not to be run (bsc#1111388).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-18"/>
	<updated date="2019-09-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1073313">SUSE bug 1073313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111388">SUSE bug 1111388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114845">SUSE bug 1114845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143194">SUSE bug 1143194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143273">SUSE bug 1143273</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-17740/">CVE-2017-17740</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13057/">CVE-2019-13057</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13565/">CVE-2019-13565</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496995" comment="openldap2-2.4.46-9.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496996" comment="openldap2-back-meta-2.4.46-9.19.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496997" comment="openldap2-back-perl-2.4.46-9.19.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138291" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1047238" ref_url="https://bugzilla.suse.com/1047238" source="BUGZILLA"/>
		<reference ref_id="1050911" ref_url="https://bugzilla.suse.com/1050911" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1054914" ref_url="https://bugzilla.suse.com/1054914" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1056686" ref_url="https://bugzilla.suse.com/1056686" source="BUGZILLA"/>
		<reference ref_id="1060662" ref_url="https://bugzilla.suse.com/1060662" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1061843" ref_url="https://bugzilla.suse.com/1061843" source="BUGZILLA"/>
		<reference ref_id="1064597" ref_url="https://bugzilla.suse.com/1064597" source="BUGZILLA"/>
		<reference ref_id="1064701" ref_url="https://bugzilla.suse.com/1064701" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066369" ref_url="https://bugzilla.suse.com/1066369" source="BUGZILLA"/>
		<reference ref_id="1071009" ref_url="https://bugzilla.suse.com/1071009" source="BUGZILLA"/>
		<reference ref_id="1071306" ref_url="https://bugzilla.suse.com/1071306" source="BUGZILLA"/>
		<reference ref_id="1078248" ref_url="https://bugzilla.suse.com/1078248" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1085536" ref_url="https://bugzilla.suse.com/1085536" source="BUGZILLA"/>
		<reference ref_id="1085539" ref_url="https://bugzilla.suse.com/1085539" source="BUGZILLA"/>
		<reference ref_id="1086103" ref_url="https://bugzilla.suse.com/1086103" source="BUGZILLA"/>
		<reference ref_id="1087092" ref_url="https://bugzilla.suse.com/1087092" source="BUGZILLA"/>
		<reference ref_id="1090734" ref_url="https://bugzilla.suse.com/1090734" source="BUGZILLA"/>
		<reference ref_id="1091171" ref_url="https://bugzilla.suse.com/1091171" source="BUGZILLA"/>
		<reference ref_id="1093205" ref_url="https://bugzilla.suse.com/1093205" source="BUGZILLA"/>
		<reference ref_id="1102097" ref_url="https://bugzilla.suse.com/1102097" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1104902" ref_url="https://bugzilla.suse.com/1104902" source="BUGZILLA"/>
		<reference ref_id="1106061" ref_url="https://bugzilla.suse.com/1106061" source="BUGZILLA"/>
		<reference ref_id="1106284" ref_url="https://bugzilla.suse.com/1106284" source="BUGZILLA"/>
		<reference ref_id="1106434" ref_url="https://bugzilla.suse.com/1106434" source="BUGZILLA"/>
		<reference ref_id="1108382" ref_url="https://bugzilla.suse.com/1108382" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1112894" ref_url="https://bugzilla.suse.com/1112894" source="BUGZILLA"/>
		<reference ref_id="1112899" ref_url="https://bugzilla.suse.com/1112899" source="BUGZILLA"/>
		<reference ref_id="1112902" ref_url="https://bugzilla.suse.com/1112902" source="BUGZILLA"/>
		<reference ref_id="1112903" ref_url="https://bugzilla.suse.com/1112903" source="BUGZILLA"/>
		<reference ref_id="1112905" ref_url="https://bugzilla.suse.com/1112905" source="BUGZILLA"/>
		<reference ref_id="1112906" ref_url="https://bugzilla.suse.com/1112906" source="BUGZILLA"/>
		<reference ref_id="1112907" ref_url="https://bugzilla.suse.com/1112907" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114542" ref_url="https://bugzilla.suse.com/1114542" source="BUGZILLA"/>
		<reference ref_id="1118689" ref_url="https://bugzilla.suse.com/1118689" source="BUGZILLA"/>
		<reference ref_id="1119086" ref_url="https://bugzilla.suse.com/1119086" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1120046" ref_url="https://bugzilla.suse.com/1120046" source="BUGZILLA"/>
		<reference ref_id="1120876" ref_url="https://bugzilla.suse.com/1120876" source="BUGZILLA"/>
		<reference ref_id="1120902" ref_url="https://bugzilla.suse.com/1120902" source="BUGZILLA"/>
		<reference ref_id="1123105" ref_url="https://bugzilla.suse.com/1123105" source="BUGZILLA"/>
		<reference ref_id="1123959" ref_url="https://bugzilla.suse.com/1123959" source="BUGZILLA"/>
		<reference ref_id="1124370" ref_url="https://bugzilla.suse.com/1124370" source="BUGZILLA"/>
		<reference ref_id="1129424" ref_url="https://bugzilla.suse.com/1129424" source="BUGZILLA"/>
		<reference ref_id="1129519" ref_url="https://bugzilla.suse.com/1129519" source="BUGZILLA"/>
		<reference ref_id="1129664" ref_url="https://bugzilla.suse.com/1129664" source="BUGZILLA"/>
		<reference ref_id="1131107" ref_url="https://bugzilla.suse.com/1131107" source="BUGZILLA"/>
		<reference ref_id="1131281" ref_url="https://bugzilla.suse.com/1131281" source="BUGZILLA"/>
		<reference ref_id="1131489" ref_url="https://bugzilla.suse.com/1131489" source="BUGZILLA"/>
		<reference ref_id="1131565" ref_url="https://bugzilla.suse.com/1131565" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134291" ref_url="https://bugzilla.suse.com/1134291" source="BUGZILLA"/>
		<reference ref_id="1134476" ref_url="https://bugzilla.suse.com/1134476" source="BUGZILLA"/>
		<reference ref_id="1134881" ref_url="https://bugzilla.suse.com/1134881" source="BUGZILLA"/>
		<reference ref_id="1134882" ref_url="https://bugzilla.suse.com/1134882" source="BUGZILLA"/>
		<reference ref_id="1135219" ref_url="https://bugzilla.suse.com/1135219" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135897" ref_url="https://bugzilla.suse.com/1135897" source="BUGZILLA"/>
		<reference ref_id="1135990" ref_url="https://bugzilla.suse.com/1135990" source="BUGZILLA"/>
		<reference ref_id="1136039" ref_url="https://bugzilla.suse.com/1136039" source="BUGZILLA"/>
		<reference ref_id="1136261" ref_url="https://bugzilla.suse.com/1136261" source="BUGZILLA"/>
		<reference ref_id="1136346" ref_url="https://bugzilla.suse.com/1136346" source="BUGZILLA"/>
		<reference ref_id="1136349" ref_url="https://bugzilla.suse.com/1136349" source="BUGZILLA"/>
		<reference ref_id="1136352" ref_url="https://bugzilla.suse.com/1136352" source="BUGZILLA"/>
		<reference ref_id="1136496" ref_url="https://bugzilla.suse.com/1136496" source="BUGZILLA"/>
		<reference ref_id="1136498" ref_url="https://bugzilla.suse.com/1136498" source="BUGZILLA"/>
		<reference ref_id="1136502" ref_url="https://bugzilla.suse.com/1136502" source="BUGZILLA"/>
		<reference ref_id="1136682" ref_url="https://bugzilla.suse.com/1136682" source="BUGZILLA"/>
		<reference ref_id="1137322" ref_url="https://bugzilla.suse.com/1137322" source="BUGZILLA"/>
		<reference ref_id="1137323" ref_url="https://bugzilla.suse.com/1137323" source="BUGZILLA"/>
		<reference ref_id="1137884" ref_url="https://bugzilla.suse.com/1137884" source="BUGZILLA"/>
		<reference ref_id="1138099" ref_url="https://bugzilla.suse.com/1138099" source="BUGZILLA"/>
		<reference ref_id="1138100" ref_url="https://bugzilla.suse.com/1138100" source="BUGZILLA"/>
		<reference ref_id="1138539" ref_url="https://bugzilla.suse.com/1138539" source="BUGZILLA"/>
		<reference ref_id="1139020" ref_url="https://bugzilla.suse.com/1139020" source="BUGZILLA"/>
		<reference ref_id="1139021" ref_url="https://bugzilla.suse.com/1139021" source="BUGZILLA"/>
		<reference ref_id="1139101" ref_url="https://bugzilla.suse.com/1139101" source="BUGZILLA"/>
		<reference ref_id="1139500" ref_url="https://bugzilla.suse.com/1139500" source="BUGZILLA"/>
		<reference ref_id="1140012" ref_url="https://bugzilla.suse.com/1140012" source="BUGZILLA"/>
		<reference ref_id="1140426" ref_url="https://bugzilla.suse.com/1140426" source="BUGZILLA"/>
		<reference ref_id="1140487" ref_url="https://bugzilla.suse.com/1140487" source="BUGZILLA"/>
		<reference ref_id="1141340" ref_url="https://bugzilla.suse.com/1141340" source="BUGZILLA"/>
		<reference ref_id="1141450" ref_url="https://bugzilla.suse.com/1141450" source="BUGZILLA"/>
		<reference ref_id="1141543" ref_url="https://bugzilla.suse.com/1141543" source="BUGZILLA"/>
		<reference ref_id="1141554" ref_url="https://bugzilla.suse.com/1141554" source="BUGZILLA"/>
		<reference ref_id="1142019" ref_url="https://bugzilla.suse.com/1142019" source="BUGZILLA"/>
		<reference ref_id="1142076" ref_url="https://bugzilla.suse.com/1142076" source="BUGZILLA"/>
		<reference ref_id="1142109" ref_url="https://bugzilla.suse.com/1142109" source="BUGZILLA"/>
		<reference ref_id="1142117" ref_url="https://bugzilla.suse.com/1142117" source="BUGZILLA"/>
		<reference ref_id="1142118" ref_url="https://bugzilla.suse.com/1142118" source="BUGZILLA"/>
		<reference ref_id="1142119" ref_url="https://bugzilla.suse.com/1142119" source="BUGZILLA"/>
		<reference ref_id="1142496" ref_url="https://bugzilla.suse.com/1142496" source="BUGZILLA"/>
		<reference ref_id="1142541" ref_url="https://bugzilla.suse.com/1142541" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1142701" ref_url="https://bugzilla.suse.com/1142701" source="BUGZILLA"/>
		<reference ref_id="1142857" ref_url="https://bugzilla.suse.com/1142857" source="BUGZILLA"/>
		<reference ref_id="1143300" ref_url="https://bugzilla.suse.com/1143300" source="BUGZILLA"/>
		<reference ref_id="1143331" ref_url="https://bugzilla.suse.com/1143331" source="BUGZILLA"/>
		<reference ref_id="1143466" ref_url="https://bugzilla.suse.com/1143466" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1143738" ref_url="https://bugzilla.suse.com/1143738" source="BUGZILLA"/>
		<reference ref_id="1143765" ref_url="https://bugzilla.suse.com/1143765" source="BUGZILLA"/>
		<reference ref_id="1143841" ref_url="https://bugzilla.suse.com/1143841" source="BUGZILLA"/>
		<reference ref_id="1143843" ref_url="https://bugzilla.suse.com/1143843" source="BUGZILLA"/>
		<reference ref_id="1143962" ref_url="https://bugzilla.suse.com/1143962" source="BUGZILLA"/>
		<reference ref_id="1144123" ref_url="https://bugzilla.suse.com/1144123" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1144375" ref_url="https://bugzilla.suse.com/1144375" source="BUGZILLA"/>
		<reference ref_id="1144474" ref_url="https://bugzilla.suse.com/1144474" source="BUGZILLA"/>
		<reference ref_id="1144518" ref_url="https://bugzilla.suse.com/1144518" source="BUGZILLA"/>
		<reference ref_id="1144582" ref_url="https://bugzilla.suse.com/1144582" source="BUGZILLA"/>
		<reference ref_id="1144718" ref_url="https://bugzilla.suse.com/1144718" source="BUGZILLA"/>
		<reference ref_id="1144813" ref_url="https://bugzilla.suse.com/1144813" source="BUGZILLA"/>
		<reference ref_id="1144880" ref_url="https://bugzilla.suse.com/1144880" source="BUGZILLA"/>
		<reference ref_id="1144886" ref_url="https://bugzilla.suse.com/1144886" source="BUGZILLA"/>
		<reference ref_id="1144912" ref_url="https://bugzilla.suse.com/1144912" source="BUGZILLA"/>
		<reference ref_id="1144920" ref_url="https://bugzilla.suse.com/1144920" source="BUGZILLA"/>
		<reference ref_id="1144979" ref_url="https://bugzilla.suse.com/1144979" source="BUGZILLA"/>
		<reference ref_id="1145010" ref_url="https://bugzilla.suse.com/1145010" source="BUGZILLA"/>
		<reference ref_id="1145018" ref_url="https://bugzilla.suse.com/1145018" source="BUGZILLA"/>
		<reference ref_id="1145051" ref_url="https://bugzilla.suse.com/1145051" source="BUGZILLA"/>
		<reference ref_id="1145059" ref_url="https://bugzilla.suse.com/1145059" source="BUGZILLA"/>
		<reference ref_id="1145189" ref_url="https://bugzilla.suse.com/1145189" source="BUGZILLA"/>
		<reference ref_id="1145235" ref_url="https://bugzilla.suse.com/1145235" source="BUGZILLA"/>
		<reference ref_id="1145256" ref_url="https://bugzilla.suse.com/1145256" source="BUGZILLA"/>
		<reference ref_id="1145300" ref_url="https://bugzilla.suse.com/1145300" source="BUGZILLA"/>
		<reference ref_id="1145302" ref_url="https://bugzilla.suse.com/1145302" source="BUGZILLA"/>
		<reference ref_id="1145357" ref_url="https://bugzilla.suse.com/1145357" source="BUGZILLA"/>
		<reference ref_id="1145388" ref_url="https://bugzilla.suse.com/1145388" source="BUGZILLA"/>
		<reference ref_id="1145389" ref_url="https://bugzilla.suse.com/1145389" source="BUGZILLA"/>
		<reference ref_id="1145390" ref_url="https://bugzilla.suse.com/1145390" source="BUGZILLA"/>
		<reference ref_id="1145391" ref_url="https://bugzilla.suse.com/1145391" source="BUGZILLA"/>
		<reference ref_id="1145392" ref_url="https://bugzilla.suse.com/1145392" source="BUGZILLA"/>
		<reference ref_id="1145393" ref_url="https://bugzilla.suse.com/1145393" source="BUGZILLA"/>
		<reference ref_id="1145394" ref_url="https://bugzilla.suse.com/1145394" source="BUGZILLA"/>
		<reference ref_id="1145395" ref_url="https://bugzilla.suse.com/1145395" source="BUGZILLA"/>
		<reference ref_id="1145396" ref_url="https://bugzilla.suse.com/1145396" source="BUGZILLA"/>
		<reference ref_id="1145397" ref_url="https://bugzilla.suse.com/1145397" source="BUGZILLA"/>
		<reference ref_id="1145408" ref_url="https://bugzilla.suse.com/1145408" source="BUGZILLA"/>
		<reference ref_id="1145409" ref_url="https://bugzilla.suse.com/1145409" source="BUGZILLA"/>
		<reference ref_id="1145446" ref_url="https://bugzilla.suse.com/1145446" source="BUGZILLA"/>
		<reference ref_id="1145661" ref_url="https://bugzilla.suse.com/1145661" source="BUGZILLA"/>
		<reference ref_id="1145678" ref_url="https://bugzilla.suse.com/1145678" source="BUGZILLA"/>
		<reference ref_id="1145687" ref_url="https://bugzilla.suse.com/1145687" source="BUGZILLA"/>
		<reference ref_id="1145920" ref_url="https://bugzilla.suse.com/1145920" source="BUGZILLA"/>
		<reference ref_id="1145922" ref_url="https://bugzilla.suse.com/1145922" source="BUGZILLA"/>
		<reference ref_id="1145934" ref_url="https://bugzilla.suse.com/1145934" source="BUGZILLA"/>
		<reference ref_id="1145937" ref_url="https://bugzilla.suse.com/1145937" source="BUGZILLA"/>
		<reference ref_id="1145940" ref_url="https://bugzilla.suse.com/1145940" source="BUGZILLA"/>
		<reference ref_id="1145941" ref_url="https://bugzilla.suse.com/1145941" source="BUGZILLA"/>
		<reference ref_id="1145942" ref_url="https://bugzilla.suse.com/1145942" source="BUGZILLA"/>
		<reference ref_id="1145946" ref_url="https://bugzilla.suse.com/1145946" source="BUGZILLA"/>
		<reference ref_id="1146074" ref_url="https://bugzilla.suse.com/1146074" source="BUGZILLA"/>
		<reference ref_id="1146084" ref_url="https://bugzilla.suse.com/1146084" source="BUGZILLA"/>
		<reference ref_id="1146141" ref_url="https://bugzilla.suse.com/1146141" source="BUGZILLA"/>
		<reference ref_id="1146163" ref_url="https://bugzilla.suse.com/1146163" source="BUGZILLA"/>
		<reference ref_id="1146215" ref_url="https://bugzilla.suse.com/1146215" source="BUGZILLA"/>
		<reference ref_id="1146285" ref_url="https://bugzilla.suse.com/1146285" source="BUGZILLA"/>
		<reference ref_id="1146346" ref_url="https://bugzilla.suse.com/1146346" source="BUGZILLA"/>
		<reference ref_id="1146351" ref_url="https://bugzilla.suse.com/1146351" source="BUGZILLA"/>
		<reference ref_id="1146352" ref_url="https://bugzilla.suse.com/1146352" source="BUGZILLA"/>
		<reference ref_id="1146361" ref_url="https://bugzilla.suse.com/1146361" source="BUGZILLA"/>
		<reference ref_id="1146368" ref_url="https://bugzilla.suse.com/1146368" source="BUGZILLA"/>
		<reference ref_id="1146376" ref_url="https://bugzilla.suse.com/1146376" source="BUGZILLA"/>
		<reference ref_id="1146378" ref_url="https://bugzilla.suse.com/1146378" source="BUGZILLA"/>
		<reference ref_id="1146381" ref_url="https://bugzilla.suse.com/1146381" source="BUGZILLA"/>
		<reference ref_id="1146391" ref_url="https://bugzilla.suse.com/1146391" source="BUGZILLA"/>
		<reference ref_id="1146399" ref_url="https://bugzilla.suse.com/1146399" source="BUGZILLA"/>
		<reference ref_id="1146413" ref_url="https://bugzilla.suse.com/1146413" source="BUGZILLA"/>
		<reference ref_id="1146425" ref_url="https://bugzilla.suse.com/1146425" source="BUGZILLA"/>
		<reference ref_id="1146516" ref_url="https://bugzilla.suse.com/1146516" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146524" ref_url="https://bugzilla.suse.com/1146524" source="BUGZILLA"/>
		<reference ref_id="1146526" ref_url="https://bugzilla.suse.com/1146526" source="BUGZILLA"/>
		<reference ref_id="1146529" ref_url="https://bugzilla.suse.com/1146529" source="BUGZILLA"/>
		<reference ref_id="1146531" ref_url="https://bugzilla.suse.com/1146531" source="BUGZILLA"/>
		<reference ref_id="1146543" ref_url="https://bugzilla.suse.com/1146543" source="BUGZILLA"/>
		<reference ref_id="1146547" ref_url="https://bugzilla.suse.com/1146547" source="BUGZILLA"/>
		<reference ref_id="1146550" ref_url="https://bugzilla.suse.com/1146550" source="BUGZILLA"/>
		<reference ref_id="1146575" ref_url="https://bugzilla.suse.com/1146575" source="BUGZILLA"/>
		<reference ref_id="1146589" ref_url="https://bugzilla.suse.com/1146589" source="BUGZILLA"/>
		<reference ref_id="1146678" ref_url="https://bugzilla.suse.com/1146678" source="BUGZILLA"/>
		<reference ref_id="1146938" ref_url="https://bugzilla.suse.com/1146938" source="BUGZILLA"/>
		<reference ref_id="1148031" ref_url="https://bugzilla.suse.com/1148031" source="BUGZILLA"/>
		<reference ref_id="1148032" ref_url="https://bugzilla.suse.com/1148032" source="BUGZILLA"/>
		<reference ref_id="1148033" ref_url="https://bugzilla.suse.com/1148033" source="BUGZILLA"/>
		<reference ref_id="1148034" ref_url="https://bugzilla.suse.com/1148034" source="BUGZILLA"/>
		<reference ref_id="1148035" ref_url="https://bugzilla.suse.com/1148035" source="BUGZILLA"/>
		<reference ref_id="1148093" ref_url="https://bugzilla.suse.com/1148093" source="BUGZILLA"/>
		<reference ref_id="1148133" ref_url="https://bugzilla.suse.com/1148133" source="BUGZILLA"/>
		<reference ref_id="1148192" ref_url="https://bugzilla.suse.com/1148192" source="BUGZILLA"/>
		<reference ref_id="1148196" ref_url="https://bugzilla.suse.com/1148196" source="BUGZILLA"/>
		<reference ref_id="1148198" ref_url="https://bugzilla.suse.com/1148198" source="BUGZILLA"/>
		<reference ref_id="1148202" ref_url="https://bugzilla.suse.com/1148202" source="BUGZILLA"/>
		<reference ref_id="1148219" ref_url="https://bugzilla.suse.com/1148219" source="BUGZILLA"/>
		<reference ref_id="1148297" ref_url="https://bugzilla.suse.com/1148297" source="BUGZILLA"/>
		<reference ref_id="1148303" ref_url="https://bugzilla.suse.com/1148303" source="BUGZILLA"/>
		<reference ref_id="1148308" ref_url="https://bugzilla.suse.com/1148308" source="BUGZILLA"/>
		<reference ref_id="1148363" ref_url="https://bugzilla.suse.com/1148363" source="BUGZILLA"/>
		<reference ref_id="1148379" ref_url="https://bugzilla.suse.com/1148379" source="BUGZILLA"/>
		<reference ref_id="1148394" ref_url="https://bugzilla.suse.com/1148394" source="BUGZILLA"/>
		<reference ref_id="1148527" ref_url="https://bugzilla.suse.com/1148527" source="BUGZILLA"/>
		<reference ref_id="1148570" ref_url="https://bugzilla.suse.com/1148570" source="BUGZILLA"/>
		<reference ref_id="1148574" ref_url="https://bugzilla.suse.com/1148574" source="BUGZILLA"/>
		<reference ref_id="1148616" ref_url="https://bugzilla.suse.com/1148616" source="BUGZILLA"/>
		<reference ref_id="1148617" ref_url="https://bugzilla.suse.com/1148617" source="BUGZILLA"/>
		<reference ref_id="1148619" ref_url="https://bugzilla.suse.com/1148619" source="BUGZILLA"/>
		<reference ref_id="1148698" ref_url="https://bugzilla.suse.com/1148698" source="BUGZILLA"/>
		<reference ref_id="1148859" ref_url="https://bugzilla.suse.com/1148859" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1149053" ref_url="https://bugzilla.suse.com/1149053" source="BUGZILLA"/>
		<reference ref_id="1149083" ref_url="https://bugzilla.suse.com/1149083" source="BUGZILLA"/>
		<reference ref_id="1149104" ref_url="https://bugzilla.suse.com/1149104" source="BUGZILLA"/>
		<reference ref_id="1149105" ref_url="https://bugzilla.suse.com/1149105" source="BUGZILLA"/>
		<reference ref_id="1149106" ref_url="https://bugzilla.suse.com/1149106" source="BUGZILLA"/>
		<reference ref_id="1149197" ref_url="https://bugzilla.suse.com/1149197" source="BUGZILLA"/>
		<reference ref_id="1149214" ref_url="https://bugzilla.suse.com/1149214" source="BUGZILLA"/>
		<reference ref_id="1149224" ref_url="https://bugzilla.suse.com/1149224" source="BUGZILLA"/>
		<reference ref_id="1149325" ref_url="https://bugzilla.suse.com/1149325" source="BUGZILLA"/>
		<reference ref_id="1149376" ref_url="https://bugzilla.suse.com/1149376" source="BUGZILLA"/>
		<reference ref_id="1149413" ref_url="https://bugzilla.suse.com/1149413" source="BUGZILLA"/>
		<reference ref_id="1149418" ref_url="https://bugzilla.suse.com/1149418" source="BUGZILLA"/>
		<reference ref_id="1149424" ref_url="https://bugzilla.suse.com/1149424" source="BUGZILLA"/>
		<reference ref_id="1149522" ref_url="https://bugzilla.suse.com/1149522" source="BUGZILLA"/>
		<reference ref_id="1149527" ref_url="https://bugzilla.suse.com/1149527" source="BUGZILLA"/>
		<reference ref_id="1149539" ref_url="https://bugzilla.suse.com/1149539" source="BUGZILLA"/>
		<reference ref_id="1149552" ref_url="https://bugzilla.suse.com/1149552" source="BUGZILLA"/>
		<reference ref_id="1149591" ref_url="https://bugzilla.suse.com/1149591" source="BUGZILLA"/>
		<reference ref_id="1149602" ref_url="https://bugzilla.suse.com/1149602" source="BUGZILLA"/>
		<reference ref_id="1149612" ref_url="https://bugzilla.suse.com/1149612" source="BUGZILLA"/>
		<reference ref_id="1149626" ref_url="https://bugzilla.suse.com/1149626" source="BUGZILLA"/>
		<reference ref_id="1149652" ref_url="https://bugzilla.suse.com/1149652" source="BUGZILLA"/>
		<reference ref_id="1149713" ref_url="https://bugzilla.suse.com/1149713" source="BUGZILLA"/>
		<reference ref_id="1149940" ref_url="https://bugzilla.suse.com/1149940" source="BUGZILLA"/>
		<reference ref_id="1149976" ref_url="https://bugzilla.suse.com/1149976" source="BUGZILLA"/>
		<reference ref_id="1150025" ref_url="https://bugzilla.suse.com/1150025" source="BUGZILLA"/>
		<reference ref_id="1150033" ref_url="https://bugzilla.suse.com/1150033" source="BUGZILLA"/>
		<reference ref_id="1150112" ref_url="https://bugzilla.suse.com/1150112" source="BUGZILLA"/>
		<reference ref_id="1150562" ref_url="https://bugzilla.suse.com/1150562" source="BUGZILLA"/>
		<reference ref_id="1150727" ref_url="https://bugzilla.suse.com/1150727" source="BUGZILLA"/>
		<reference ref_id="1150860" ref_url="https://bugzilla.suse.com/1150860" source="BUGZILLA"/>
		<reference ref_id="1150861" ref_url="https://bugzilla.suse.com/1150861" source="BUGZILLA"/>
		<reference ref_id="1150933" ref_url="https://bugzilla.suse.com/1150933" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18551" ref_url="https://www.suse.com/security/cve/CVE-2017-18551/" source="CVE"/>
		<reference ref_id="CVE-2018-20976" ref_url="https://www.suse.com/security/cve/CVE-2018-20976/" source="CVE"/>
		<reference ref_id="CVE-2018-21008" ref_url="https://www.suse.com/security/cve/CVE-2018-21008/" source="CVE"/>
		<reference ref_id="CVE-2019-10207" ref_url="https://www.suse.com/security/cve/CVE-2019-10207/" source="CVE"/>
		<reference ref_id="CVE-2019-14814" ref_url="https://www.suse.com/security/cve/CVE-2019-14814/" source="CVE"/>
		<reference ref_id="CVE-2019-14815" ref_url="https://www.suse.com/security/cve/CVE-2019-14815/" source="CVE"/>
		<reference ref_id="CVE-2019-14816" ref_url="https://www.suse.com/security/cve/CVE-2019-14816/" source="CVE"/>
		<reference ref_id="CVE-2019-14835" ref_url="https://www.suse.com/security/cve/CVE-2019-14835/" source="CVE"/>
		<reference ref_id="CVE-2019-15030" ref_url="https://www.suse.com/security/cve/CVE-2019-15030/" source="CVE"/>
		<reference ref_id="CVE-2019-15031" ref_url="https://www.suse.com/security/cve/CVE-2019-15031/" source="CVE"/>
		<reference ref_id="CVE-2019-15090" ref_url="https://www.suse.com/security/cve/CVE-2019-15090/" source="CVE"/>
		<reference ref_id="CVE-2019-15098" ref_url="https://www.suse.com/security/cve/CVE-2019-15098/" source="CVE"/>
		<reference ref_id="CVE-2019-15099" ref_url="https://www.suse.com/security/cve/CVE-2019-15099/" source="CVE"/>
		<reference ref_id="CVE-2019-15117" ref_url="https://www.suse.com/security/cve/CVE-2019-15117/" source="CVE"/>
		<reference ref_id="CVE-2019-15118" ref_url="https://www.suse.com/security/cve/CVE-2019-15118/" source="CVE"/>
		<reference ref_id="CVE-2019-15211" ref_url="https://www.suse.com/security/cve/CVE-2019-15211/" source="CVE"/>
		<reference ref_id="CVE-2019-15212" ref_url="https://www.suse.com/security/cve/CVE-2019-15212/" source="CVE"/>
		<reference ref_id="CVE-2019-15214" ref_url="https://www.suse.com/security/cve/CVE-2019-15214/" source="CVE"/>
		<reference ref_id="CVE-2019-15215" ref_url="https://www.suse.com/security/cve/CVE-2019-15215/" source="CVE"/>
		<reference ref_id="CVE-2019-15216" ref_url="https://www.suse.com/security/cve/CVE-2019-15216/" source="CVE"/>
		<reference ref_id="CVE-2019-15217" ref_url="https://www.suse.com/security/cve/CVE-2019-15217/" source="CVE"/>
		<reference ref_id="CVE-2019-15218" ref_url="https://www.suse.com/security/cve/CVE-2019-15218/" source="CVE"/>
		<reference ref_id="CVE-2019-15219" ref_url="https://www.suse.com/security/cve/CVE-2019-15219/" source="CVE"/>
		<reference ref_id="CVE-2019-15220" ref_url="https://www.suse.com/security/cve/CVE-2019-15220/" source="CVE"/>
		<reference ref_id="CVE-2019-15221" ref_url="https://www.suse.com/security/cve/CVE-2019-15221/" source="CVE"/>
		<reference ref_id="CVE-2019-15222" ref_url="https://www.suse.com/security/cve/CVE-2019-15222/" source="CVE"/>
		<reference ref_id="CVE-2019-15239" ref_url="https://www.suse.com/security/cve/CVE-2019-15239/" source="CVE"/>
		<reference ref_id="CVE-2019-15290" ref_url="https://www.suse.com/security/cve/CVE-2019-15290/" source="CVE"/>
		<reference ref_id="CVE-2019-15292" ref_url="https://www.suse.com/security/cve/CVE-2019-15292/" source="CVE"/>
		<reference ref_id="CVE-2019-15538" ref_url="https://www.suse.com/security/cve/CVE-2019-15538/" source="CVE"/>
		<reference ref_id="CVE-2019-15666" ref_url="https://www.suse.com/security/cve/CVE-2019-15666/" source="CVE"/>
		<reference ref_id="CVE-2019-15902" ref_url="https://www.suse.com/security/cve/CVE-2019-15902/" source="CVE"/>
		<reference ref_id="CVE-2019-15917" ref_url="https://www.suse.com/security/cve/CVE-2019-15917/" source="CVE"/>
		<reference ref_id="CVE-2019-15919" ref_url="https://www.suse.com/security/cve/CVE-2019-15919/" source="CVE"/>
		<reference ref_id="CVE-2019-15920" ref_url="https://www.suse.com/security/cve/CVE-2019-15920/" source="CVE"/>
		<reference ref_id="CVE-2019-15921" ref_url="https://www.suse.com/security/cve/CVE-2019-15921/" source="CVE"/>
		<reference ref_id="CVE-2019-15924" ref_url="https://www.suse.com/security/cve/CVE-2019-15924/" source="CVE"/>
		<reference ref_id="CVE-2019-15926" ref_url="https://www.suse.com/security/cve/CVE-2019-15926/" source="CVE"/>
		<reference ref_id="CVE-2019-15927" ref_url="https://www.suse.com/security/cve/CVE-2019-15927/" source="CVE"/>
		<reference ref_id="CVE-2019-9456" ref_url="https://www.suse.com/security/cve/CVE-2019-9456/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005945.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following new features were implemented:

- jsc#SLE-4875: [CML] New device IDs for CML
- jsc#SLE-7294: Add cpufreq driver for Raspberry Pi
- fate#326869: perf: pmu mem_load/store event support
- fate#327380: KVM: Add hardware CPU Model - kernel part
- fate#327377: KVM: Support for configurable virtio-crypto
- fate#327775: vpmem: DRAM backed persistent volumes for improved SAP HANA on POWER restart times
- fate#326472: Marvell Armada 7K/8K Ethernet (incl. 10G) kernel enablement
- fate#326416: Hi1620 (Vendor: Huawei): RDMA kernel enablement
- fate#326415: Hi1620 (Vendor: Huawei): HNS3 (100G) network kernel enablement

The following security bugs were fixed:

- CVE-2019-14835: Fix QEMU-KVM Guest to Host Kernel Escape. (bsc#1150112).
- CVE-2019-15216: Fix a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver. (bsc#1146361).
- CVE-2019-15924: Fix a NULL pointer dereference because there was no -ENOMEM upon an alloc_workqueue failure. (bsc#1149612).
- CVE-2019-9456: In Pixel C USB monitor driver there was a possible OOB write due to a missing bounds check. This could have lead to local escalation of privilege with System execution privileges needed. (bsc#1150025 CVE-2019-9456).
- CVE-2019-15030, CVE-2019-15031: On the powerpc platform, a local user could read vector registers of other users' processes via an interrupt. (bsc#1149713)
- CVE-2019-15920: SMB2_read in fs/cifs/smb2pdu.c had a use-after-free. (bsc#1149626)
- CVE-2019-15921: There was a memory leak issue when idr_alloc() failed (bsc#1149602)
- CVE-2018-21008: A use-after-free can be caused by the function rsi_mac80211_detach (bsc#1149591).
- CVE-2019-15919: SMB2_write in fs/cifs/smb2pdu.c had a use-after-free. (bsc#1149552)
- CVE-2019-15917: There was a use-after-free issue when hci_uart_register_dev() failed in hci_uart_set_proto() (bsc#1149539)
- CVE-2019-15926: Out of bounds access existed in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx (bsc#1149527)
- CVE-2019-15927: An out-of-bounds access existed in the function build_audio_procunit (bsc#1149522)
- CVE-2019-15902: A backporting error reintroduced the Spectre vulnerability that it aimed to eliminate. (bnc#1149376)
- CVE-2019-15666: There was an out-of-bounds array access in __xfrm_policy_unlink, which would cause denial of service, because verify_newpolicy_info mishandled directory validation. (bsc#1148394).
- CVE-2019-15219: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver. (bsc#1146524)
- CVE-2019-14814, CVE-2019-14815, CVE-2019-14816: Fix three heap-based buffer overflows in marvell wifi chip driver kernel, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code. (bnc#1146516)
- CVE-2019-15220: There was a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver. (bsc#1146526)
- CVE-2019-15538: XFS partially wedged when a chgrp failed on account of being out of disk quota. This was primarily a local DoS attack vector, but it could result as well in remote DoS if the XFS filesystem was exported for instance via NFS. (bsc#1148032, bsc#1148093)
- CVE-2019-15290: There was a NULL pointer dereference caused by a malicious USB device in the ath6kl_usb_alloc_urb_from_pipe function (bsc#1146543).
- CVE-2019-15098: USB driver net/wireless/ath/ath6kl/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor. (bsc#1146378).
- CVE-2019-15221, CVE-2019-15222: There was a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver. (bsc#1146529, bsc#1146531)
- CVE-2019-10207: Fix a NULL pointer dereference in hci_uart bluetooth driver (bsc#1142857 bsc#1123959).
- CVE-2019-15117: parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel mishandled a short descriptor, leading to out-of-bounds memory access. (bsc#1145920).
- CVE-2019-15118: check_input_term in sound/usb/mixer.c in the Linux kernel mishandled recursion, leading to kernel stack exhaustion. (bsc#1145922).
- CVE-2017-18551: There was an out of bounds write in the function i2c_smbus_xfer_emulated. (bsc#1146163).
- CVE-2019-15090: In the qedi_dbg_* family of functions, there was an out-of-bounds read. (bsc#1146399)
- CVE-2018-20976: A use after free existed, related to xfs_fs_fill_super failure. (bsc#1146285)
- CVE-2019-15215: There was a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver. (bsc#1135642 bsc#1146425)
- CVE-2019-15212: There was a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver. (bsc#1051510 bsc#1146391).
- CVE-2019-15292: There was a use-after-free in atalk_proc_exit (bsc#1146678)
- CVE-2019-15217: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver. (bsc#1146547).
- CVE-2019-15214: There was a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. (bsc#1146550)
- CVE-2019-15218: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver. (bsc#1051510 bsc#1146413)
- CVE-2019-15211: There was a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c did not properly allocate memory. (bsc#1146519).
- CVE-2019-15239: An incorrect backport of a certain net/ipv4/tcp_output.c fix allowed a local attacker to trigger multiple use-after-free conditions. This could result in a kernel crash, or potentially in privilege escalation. (bsc#1146589)
- CVE-2019-15099: drivers/net/wireless/ath/ath10k/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor. (bsc#1146368)

The following non-security bugs were fixed:

- 9p/rdma: do not disconnect on down_interruptible EAGAIN (bsc#1051510).
- 9p/rdma: remove useless check in cm_event_handler (bsc#1051510).
- 9p/virtio: Add cleanup path in p9_virtio_init (bsc#1051510).
- 9p/xen: Add cleanup path in p9_trans_xen_init (bsc#1051510).
- 9p/xen: fix check for xenbus_read error in front_probe (bsc#1051510).
- 9p: acl: fix uninitialized iattr access (bsc#1051510).
- 9p: p9dirent_read: check network-provided name length (bsc#1051510).
- 9p: pass the correct prototype to read_cache_page (bsc#1051510).
- acpi/IORT: Fix off-by-one check in iort_dev_find_its_id() (bsc#1051510).
- acpi/arm64: ignore 5.1 FADTs that are reported as 5.0 (bsc#1051510).
- acpi: PM: Fix regression in acpi_device_set_power() (bsc#1051510).
- acpi: fix false-positive -Wuninitialized warning (bsc#1051510).
- acpica: Increase total number of possible Owner IDs (bsc#1148859).
- af_key: fix leaks in key_pol_get_resp and dump_sp (bsc#1051510).
- af_packet: Block execution of tasks waiting for transmit to complete in AF_PACKET (networking-stable-19_07_02).
- alsa: firewire: fix a memory leak bug (bsc#1051510).
- alsa: hda - Add a generic reboot_notify (bsc#1051510).
- alsa: hda - Apply workaround for another AMD chip 1022:1487 (bsc#1051510).
- alsa: hda - Do not override global PCM hw info flag (bsc#1051510).
- alsa: hda - Fix a memory leak bug (bsc#1051510).
- alsa: hda - Fix potential endless loop at applying quirks (bsc#1051510).
- alsa: hda - Fixes inverted Conexant GPIO mic mute led (bsc#1051510).
- alsa: hda - Let all conexant codec enter D3 when rebooting (bsc#1051510).
- alsa: hda - Workaround for crackled sound on AMD controller (1022:1457) (bsc#1051510).
- alsa: hda/ca0132 - Add new SBZ quirk (bsc#1051510).
- alsa: hda/realtek - Add quirk for HP Envy x360 (bsc#1051510).
- alsa: hda/realtek - Add quirk for HP Pavilion 15 (bsc#1051510).
- alsa: hda/realtek - Enable internal speaker &amp; headset mic of ASUS UX431FL (bsc#1051510).
- alsa: hda/realtek - Fix overridden device-specific initialization (bsc#1051510).
- alsa: hda/realtek - Fix the problem of two front mics on a ThinkCentre (bsc#1051510).
- alsa: hda: Fix 1-minute detection delay when i915 module is not available (bsc#1111666).
- alsa: hda: kabi workaround for generic parser flag (bsc#1051510).
- alsa: hiface: fix multiple memory leak bugs (bsc#1051510).
- alsa: line6: Fix memory leak at line6_init_pcm() error path (bsc#1051510).
- alsa: pcm: fix lost wakeup event scenarios in snd_pcm_drain (bsc#1051510).
- alsa: seq: Fix potential concurrent access to the deleted pool (bsc#1051510).
- alsa: usb-audio: Add implicit fb quirk for Behringer UFX1604 (bsc#1051510).
- alsa: usb-audio: Check mixer unit bitmap yet more strictly (bsc#1051510).
- alsa: usb-audio: Fix gpf in snd_usb_pipe_sanity_check (bsc#1051510).
- alsa: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate() (bsc#1051510).
- alsa: usb-audio: fix a memory leak bug (bsc#1111666).
- arch: integrate XIVE support (bsc#1085030, bsc#1144518, LTC#178833).
- arm64/kernel: enable A53 erratum #8434319 handling at runtime (bsc#1148219).
- arm64/kernel: rename module_emit_adrp_veneer-&gt;module_emit_veneer_for_adrp (bsc#1148219).
- arm64: fix undefined reference to 'printk' (bsc#1148219).
- arm64: kvm: Fix architecturally invalid reset value for FPEXC32_EL2 (bsc#1133021).
- arm64: module: do not BUG when exceeding preallocated PLT count (bsc#1148219).
- arm64: pci: Preserve firmware configuration when desired (SLE-9332).
- arm: (bsc#1145687) Add the following kernel config to ARM64: CONFIG_ACPI_PCI_SLOT=y CONFIG_HOTPLUG_PCI_ACPI=y
- arm: kvm: Add SMCCC_ARCH_WORKAROUND_1 fast handling (bsc#1133021).
- arm: kvm: report support for SMCCC_ARCH_WORKAROUND_1 (bsc#1133021).
- asoc: Fail card instantiation if DAI format setup fails (bsc#1051510).
- asoc: dapm: Fix handling of custom_stop_condition on DApm graph walks (bsc#1051510).
- ata: libahci: do not complain in case of deferred probe (bsc#1051510).
- ath10k: Change the warning message string (bsc#1051510).
- ath10k: Drop WARN_ON()s that always trigger during system resume (bsc#1111666).
- batman-adv: Only read OGM tvlv_len after buffer len check (bsc#1051510).
- batman-adv: Only read OGM2 tvlv_len after buffer len check (bsc#1051510).
- batman-adv: fix uninit-value in batadv_netlink_get_ifindex() (bsc#1051510).
- bcache: Revert 'bcache: use sysfs_match_string() instead of __sysfs_match_string()' (git fixes).
- bcache: bsc#1144979: kernel oops on reading sysfs cache_mode file
- bcache: fix possible memory leak in bch_cached_dev_run() (git fixes).
- bio: fix improper use of smp_mb__before_atomic() (git fixes).
- blk-mq: Fix spelling in a source code comment (git fixes).
- blk-mq: backport fixes for blk_mq_complete_e_request_sync() (bsc#1145661).
- blk-mq: introduce blk_mq_complete_request_sync() (bsc#1145661).
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait (bsc#1141543).
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait (bsc#1141543).
- block, documentation: Fix wbt_lat_usec documentation (git fixes).
- bluetooth: 6lowpan: search for destination address in all peers (bsc#1051510).
- bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug (bsc#1051510).
- bluetooth: Check state in l2cap_disconnect_rsp (bsc#1051510).
- bluetooth: btqca: Add a short delay before downloading the NVM (bsc#1051510).
- bluetooth: hci_bcsp: Fix memory leak in rx_skb (bsc#1051510).
- bluetooth: validate BLE connection interval updates (bsc#1051510).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502 jsc#SLE-4703).
- bnx2x: Disable multi-cos feature (bsc#1136498 jsc#SLE-4699).
- bnx2x: Prevent ptp_task to be rescheduled indefinitely (networking-stable-19_07_25).
- bnxt_en: Fix VNIC clearing logic for 57500 chips (bsc#1104745 ).
- bnxt_en: Fix to include flow direction in L2 key (bsc#1104745 ).
- bnxt_en: Improve RX doorbell sequence (bsc#1104745).
- bnxt_en: Use correct src_fid to determine direction of the flow (bsc#1104745).
- bonding: Always enable vlan tx offload (networking-stable-19_07_02).
- bonding: validate ip header before check IPPROTO_IGMP (networking-stable-19_07_25).
- bpf: sockmap, only create entry if ulp is not already enabled (bsc#1109837).
- bpf: sockmap, sock_map_delete needs to use xchg (bsc#1109837).
- bpf: sockmap, synchronize_rcu before free'ing map (bsc#1109837).
- btrfs: Fix delalloc inodes invalidation during transaction abort (bsc#1050911).
- btrfs: Split btrfs_del_delalloc_inode into 2 functions (bsc#1050911).
- btrfs: add a helper to retrive extent inline ref type (bsc#1149325).
- btrfs: add cleanup_ref_head_accounting helper (bsc#1050911).
- btrfs: add missing inode version, ctime and mtime updates when punching hole (bsc#1140487).
- btrfs: add one more sanity check for shared ref type (bsc#1149325).
- btrfs: clean up pending block groups when transaction commit aborts (bsc#1050911).
- btrfs: convert to use btrfs_get_extent_inline_ref_type (bsc#1149325).
- btrfs: do not abort transaction at btrfs_update_root() after failure to COW path (bsc#1150933).
- btrfs: fix assertion failure during fsync and use of stale transaction (bsc#1150562).
- btrfs: fix data loss after inode eviction, renaming it, and fsync it (bsc#1145941).
- btrfs: fix fsync not persisting dentry deletions due to inode evictions (bsc#1145942).
- btrfs: fix incremental send failure after deduplication (bsc#1145940).
- btrfs: fix pinned underflow after transaction aborted (bsc#1050911).
- btrfs: fix race between send and deduplication that lead to failures and crashes (bsc#1145059).
- btrfs: fix race leading to fs corruption after transaction abort (bsc#1145937).
- btrfs: handle delayed ref head accounting cleanup in abort (bsc#1050911).
- btrfs: prevent send failures and crashes due to concurrent relocation (bsc#1145059).
- btrfs: remove BUG() in add_data_reference (bsc#1149325).
- btrfs: remove BUG() in btrfs_extent_inline_ref_size (bsc#1149325).
- btrfs: remove BUG() in print_extent_item (bsc#1149325).
- btrfs: remove BUG_ON in __add_tree_block (bsc#1149325).
- btrfs: scrub: add memalloc_nofs protection around init_ipath (bsc#1086103).
- btrfs: start readahead also in seed devices (bsc#1144886).
- btrfs: track running balance in a simpler way (bsc#1145059).
- btrfs: use GFP_KERNEL in init_ipath (bsc#1086103).
- caif-hsi: fix possible deadlock in cfhsi_exit_module() (networking-stable-19_07_25).
- can: m_can: implement errata 'Needless activation of MRAF irq' (bsc#1051510).
- can: mcp251x: add support for mcp25625 (bsc#1051510).
- can: peak_usb: fix potential double kfree_skb() (bsc#1051510).
- can: peak_usb: force the string buffer NULL-terminated (bsc#1051510).
- can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices (bsc#1051510).
- can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices (bsc#1051510).
- can: rcar_canfd: fix possible IRQ storm on high load (bsc#1051510).
- can: sja1000: force the string buffer NULL-terminated (bsc#1051510).
- carl9170: fix misuse of device driver API (bsc#1142635).
- ceph: add btime field to ceph_inode_info (bsc#1148133 bsc#1136682).
- ceph: add ceph.snap.btime vxattr (bsc#1148133 bsc#1148570).
- ceph: add change_attr field to ceph_inode_info (bsc#1148133 bsc#1136682).
- ceph: always get rstat from auth mds (bsc#1146346).
- ceph: carry snapshot creation time with inodes (bsc#1148133 bsc#1148570).
- ceph: clean up ceph.dir.pin vxattr name sizeof() (bsc#1146346).
- ceph: clean up ceph.dir.pin vxattr name sizeof() (bsc#1146346).
- ceph: clear page dirty before invalidate page (bsc#1148133).
- ceph: decode feature bits in session message (bsc#1146346).
- ceph: decode feature bits in session message (bsc#1146346).
- ceph: do not blindly unregister session that is in opening state (bsc#1148133).
- ceph: do not blindly unregister session that is in opening state (bsc#1148133).
- ceph: do not try fill file_lock on unsuccessful GETFILELOCK reply (bsc#1148133).
- ceph: do not try fill file_lock on unsuccessful GETFILELOCK reply (bsc#1148133).
- ceph: fix 'ceph.dir.rctime' vxattr value (bsc#1148133 bsc#1135219).
- ceph: fix 'ceph.dir.rctime' vxattr value (bsc#1148133 bsc#1135219).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in fill_inode() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in fill_inode() (bsc#1148133).
- ceph: fix decode_locker to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- ceph: fix improper use of smp_mb__before_atomic() (bsc#1148133).
- ceph: fix improper use of smp_mb__before_atomic() (bsc#1148133).
- ceph: fix infinite loop in get_quota_realm() (bsc#1148133).
- ceph: fix invalid opcode (bsc#1148133 bsc#1138539).
- ceph: fix iov_iter issues in ceph_direct_read_write() (bsc#1141450).
- ceph: fix listxattr vxattr buffer length calculation (bsc#1148133 bsc#1148570).
- ceph: handle btime in cap messages (bsc#1148133 bsc#1136682).
- ceph: handle change_attr in cap messages (bsc#1148133 bsc#1136682).
- ceph: have MDS map decoding use entity_addr_t decoder (bsc#1148133 bsc#1136682).
- ceph: hold i_ceph_lock when removing caps for freeing inode (bsc#1148133).
- ceph: hold i_ceph_lock when removing caps for freeing inode (bsc#1148133).
- ceph: increment change_attribute on local changes (bsc#1148133 bsc#1136682).
- ceph: initialize superblock s_time_gran to 1 (bsc#1148133).
- ceph: remove request from waiting list before unregister (bsc#1148133).
- ceph: remove request from waiting list before unregister (bsc#1148133).
- ceph: remove unused vxattr length helpers (bsc#1148133 bsc#1148570).
- ceph: silence a checker warning in mdsc_show() (bsc#1148133).
- ceph: silence a checker warning in mdsc_show() (bsc#1148133).
- ceph: support cephfs' own feature bits (bsc#1146346).
- ceph: support getting ceph.dir.pin vxattr (bsc#1146346).
- ceph: support getting ceph.dir.pin vxattr (bsc#1146346).
- ceph: support versioned reply (bsc#1146346).
- ceph: support versioned reply (bsc#1146346).
- ceph: use bit flags to define vxattr attributes (bsc#1146346).
- cifs: Accept validate negotiate if server return NT_STATUS_NOT_SUPPORTED (bsc#1144333).
- cifs: Add DFS cache routines (bsc#1144333).
- cifs: Add direct I/O functions to file_operations (bsc#1144333).
- cifs: Add minor debug message during negprot (bsc#1144333).
- cifs: Add smb2_send_recv (bsc#1144333).
- cifs: Add support for FSCTL passthrough that write data to the server (bsc#1144333).
- cifs: Add support for direct I/O read (bsc#1144333).
- cifs: Add support for direct I/O write (bsc#1144333).
- cifs: Add support for direct pages in rdata (bsc#1144333).
- cifs: Add support for direct pages in wdata (bsc#1144333).
- cifs: Add support for failover in cifs_mount() (bsc#1144333).
- cifs: Add support for failover in cifs_reconnect() (bsc#1144333).
- cifs: Add support for failover in cifs_reconnect_tcon() (bsc#1144333).
- cifs: Add support for failover in smb2_reconnect() (bsc#1144333).
- cifs: Add support for reading attributes on SMB2+ (bsc#1051510, bsc#1144333).
- cifs: Add support for writing attributes on SMB2+ (bsc#1051510, bsc#1144333).
- cifs: Adds information-level logging function (bsc#1144333).
- cifs: Adjust MTU credits before reopening a file (bsc#1144333).
- cifs: Allocate memory for all iovs in smb2_ioctl (bsc#1144333).
- cifs: Allocate validate negotiation request through kmalloc (bsc#1144333).
- cifs: Always reset read error to -EIO if no response (bsc#1144333).
- cifs: Always resolve hostname before reconnecting (bsc#1051510, bsc#1144333).
- cifs: Avoid returning EBUSY to upper layer VFS (bsc#1144333).
- cifs: Calculate the correct request length based on page offset and tail size (bsc#1144333).
- cifs: Call MID callback before destroying transport (bsc#1144333).
- cifs: Change SMB2_open to return an iov for the error parameter (bsc#1144333).
- cifs: Check for reconnects before sending async requests (bsc#1144333).
- cifs: Check for reconnects before sending compound requests (bsc#1144333).
- cifs: Check for timeout on Negotiate stage (bsc#1091171, bsc#1144333).
- cifs: Count SMB3 credits for malformed pending responses (bsc#1144333).
- cifs: Display SMB2 error codes in the hex format (bsc#1144333).
- cifs: Do not assume one credit for async responses (bsc#1144333).
- cifs: Do not consider -ENODATA as stat failure for reads (bsc#1144333).
- cifs: Do not count -ENODATA as failure for query directory (bsc#1051510, bsc#1144333).
- cifs: Do not hide EINTR after sending network packets (bsc#1051510, bsc#1144333).
- cifs: Do not log credits when unmounting a share (bsc#1144333).
- cifs: Do not match port on SMBDirect transport (bsc#1144333).
- cifs: Do not modify mid entry after submitting I/O in cifs_call_async (bsc#1051510, bsc#1144333).
- cifs: Do not reconnect TCP session in add_credits() (bsc#1051510, bsc#1144333).
- cifs: Do not reset lease state to NONE on lease break (bsc#1051510, bsc#1144333).
- cifs: Do not set credits to 1 if the server didn't grant anything (bsc#1144333).
- cifs: Do not skip SMB2 message IDs on send failures (bsc#1144333).
- cifs: Find and reopen a file before get MTU credits in writepages (bsc#1144333).
- cifs: Fix DFS cache refresher for DFS links (bsc#1144333).
- cifs: Fix NULL pointer deref on SMB2_tcon() failure (bsc#1071009, bsc#1144333).
- cifs: Fix NULL pointer dereference of devname (bnc#1129519).
- cifs: Fix NULL ptr deref (bsc#1144333).
- cifs: Fix a debug message (bsc#1144333).
- cifs: Fix a race condition with cifs_echo_request (bsc#1144333).
- cifs: Fix a tiny potential memory leak (bsc#1144333).
- cifs: Fix adjustment of credits for MTU requests (bsc#1051510, bsc#1144333).
- cifs: Fix an issue with re-sending rdata when transport returning -EAGAIN (bsc#1144333).
- cifs: Fix an issue with re-sending wdata when transport returning -EAGAIN (bsc#1144333).
- cifs: Fix autonegotiate security settings mismatch (bsc#1087092, bsc#1144333).
- cifs: Fix check for matching with existing mount (bsc#1144333).
- cifs: Fix credit calculation for encrypted reads with errors (bsc#1051510, bsc#1144333).
- cifs: Fix credit calculations in compound mid callback (bsc#1144333).
- cifs: Fix credit computation for compounded requests (bsc#1144333).
- cifs: Fix credits calculation for cancelled requests (bsc#1144333).
- cifs: Fix credits calculations for reads with errors (bsc#1051510, bsc#1144333).
- cifs: Fix encryption/signing (bsc#1144333).
- cifs: Fix error mapping for SMB2_LOCK command which caused OFD lock problem (bsc#1051510, bsc#1144333).
- cifs: Fix error paths in writeback code (bsc#1144333).
- cifs: Fix infinite loop when using hard mount option (bsc#1091171, bsc#1144333).
- cifs: Fix invalid check in __cifs_calc_signature() (bsc#1144333).
- cifs: Fix kernel oops when traceSMB is enabled (bsc#1144333).
- cifs: Fix leaking locked VFS cache pages in writeback retry (bsc#1144333).
- cifs: Fix lease buffer length error (bsc#1144333).
- cifs: Fix memory leak in smb2_set_ea() (bsc#1051510, bsc#1144333).
- cifs: Fix missing put_xid in cifs_file_strict_mmap (bsc#1087092, bsc#1144333).
- cifs: Fix module dependency (bsc#1144333).
- cifs: Fix mounts if the client is low on credits (bsc#1144333).
- cifs: Fix possible hang during async MTU reads and writes (bsc#1051510, bsc#1144333).
- cifs: Fix possible oops and memory leaks in async IO (bsc#1144333).
- cifs: Fix potential OOB access of lock element array (bsc#1051510, bsc#1144333).
- cifs: Fix read after write for files with read caching (bsc#1051510, bsc#1144333).
- cifs: Fix separator when building path from dentry (bsc#1051510, bsc#1144333).
- cifs: Fix signing for SMB2/3 (bsc#1144333).
- cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (bsc#1144333).
- cifs: Fix slab-out-of-bounds when tracing SMB tcon (bsc#1144333).
- cifs: Fix stack out-of-bounds in smb{2,3}_create_lease_buf() (bsc#1051510, bsc#1144333).
- cifs: Fix to use kmem_cache_free() instead of kfree() (bsc#1144333).
- cifs: Fix trace command logging for SMB2 reads and writes (bsc#1144333).
- cifs: Fix use after free of a mid_q_entry (bsc#1112903, bsc#1144333).
- cifs: Fix use-after-free in SMB2_read (bsc#1144333).
- cifs: Fix use-after-free in SMB2_write (bsc#1144333).
- cifs: Fix validation of signed data in smb2 (bsc#1144333).
- cifs: Fix validation of signed data in smb3+ (bsc#1144333).
- cifs: For SMB2 security informaion query, check for minimum sized security descriptor instead of sizeof FileAllInformation class (bsc#1051510, bsc#1144333).
- cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure cifs) (bsc#1144333).
- cifs: Introduce helper function to get page offset and length in smb_rqst (bsc#1144333).
- cifs: Introduce offset for the 1st page in data transfer structures (bsc#1144333).
- cifs: Limit memory used by lock request calls to a page (bsc#1144333).
- cifs: Make devname param optional in cifs_compose_mount_options() (bsc#1144333).
- cifs: Make sure all data pages are signed correctly (bsc#1144333).
- cifs: Make use of DFS cache to get new DFS referrals (bsc#1144333).
- cifs: Mask off signals when sending SMB packets (bsc#1144333).
- cifs: Minor Kconfig clarification (bsc#1144333).
- cifs: Move credit processing to mid callbacks for SMB3 (bsc#1144333).
- cifs: Move open file handling to writepages (bsc#1144333).
- cifs: Move unlocking pages from wdata_send_pages() (bsc#1144333).
- cifs: OFD locks do not conflict with eachothers (bsc#1051510, bsc#1144333).
- cifs: Only free DFS target list if we actually got one (bsc#1144333).
- cifs: Only send SMB2_NEGOTIATE command on new TCP connections (bsc#1144333).
- cifs: Pass page offset for calculating signature (bsc#1144333).
- cifs: Pass page offset for encrypting (bsc#1144333).
- cifs: Print message when attempting a mount (bsc#1144333).
- cifs: Properly handle auto disabling of serverino option (bsc#1144333).
- cifs: Reconnect expired SMB sessions (bnc#1060662).
- cifs: Refactor out cifs_mount() (bsc#1144333).
- cifs: Remove custom credit adjustments for SMB2 async IO (bsc#1144333).
- cifs: Reopen file before get SMB2 MTU credits for async IO (bsc#1144333).
- cifs: Respect SMB2 hdr preamble size in read responses (bsc#1144333).
- cifs: Respect reconnect in MTU credits calculations (bsc#1144333).
- cifs: Respect reconnect in non-MTU credits calculations (bsc#1144333).
- cifs: Return -EAGAIN instead of -ENOTSOCK (bsc#1144333).
- cifs: Return error code when getting file handle for writeback (bsc#1144333).
- cifs: SMBD: Add SMB Direct debug counters (bsc#1144333).
- cifs: SMBD: Add SMB Direct protocol initial values and constants (bsc#1144333).
- cifs: SMBD: Add parameter rdata to smb2_new_read_req (bsc#1144333).
- cifs: SMBD: Add rdma mount option (bsc#1144333).
- cifs: SMBD: Disable signing on SMB direct transport (bsc#1144333).
- cifs: SMBD: Do not call ib_dereg_mr on invalidated memory registration (bsc#1144333).
- cifs: SMBD: Establish SMB Direct connection (bsc#1144333).
- cifs: SMBD: Fix the definition for SMB2_CHANNEL_RDMA_V1_INVALIDATE (bsc#1144333).
- cifs: SMBD: Implement RDMA memory registration (bsc#1144333).
- cifs: SMBD: Implement function to create a SMB Direct connection (bsc#1144333).
- cifs: SMBD: Implement function to destroy a SMB Direct connection (bsc#1144333).
- cifs: SMBD: Implement function to receive data via RDMA receive (bsc#1144333).
- cifs: SMBD: Implement function to reconnect to a SMB Direct transport (bsc#1144333).
- cifs: SMBD: Implement function to send data via RDMA send (bsc#1144333).
- cifs: SMBD: Read correct returned data length for RDMA write (SMB read) I/O (bsc#1144333).
- cifs: SMBD: Set SMB Direct maximum read or write size for I/O (bsc#1144333).
- cifs: SMBD: Support page offset in RDMA recv (bsc#1144333).
- cifs: SMBD: Support page offset in RDMA send (bsc#1144333).
- cifs: SMBD: Support page offset in memory registration (bsc#1144333).
- cifs: SMBD: Upper layer connects to SMBDirect session (bsc#1144333).
- cifs: SMBD: Upper layer destroys SMB Direct session on shutdown or umount (bsc#1144333).
- cifs: SMBD: Upper layer performs SMB read via RDMA write through memory registration (bsc#1144333).
- cifs: SMBD: Upper layer performs SMB write via RDMA read through memory registration (bsc#1144333).
- cifs: SMBD: Upper layer receives data via RDMA receive (bsc#1144333).
- cifs: SMBD: Upper layer reconnects to SMB Direct session (bsc#1144333).
- cifs: SMBD: Upper layer sends data via RDMA send (bsc#1144333).
- cifs: SMBD: _smbd_get_connection() can be static (bsc#1144333).
- cifs: SMBD: export protocol initial values (bsc#1144333).
- cifs: SMBD: fix spelling mistake: faield and legnth (bsc#1144333).
- cifs: SMBD: work around gcc -Wmaybe-uninitialized warning (bsc#1144333).
- cifs: Save TTL value when parsing DFS referrals (bsc#1144333).
- cifs: Select all required crypto modules (bsc#1085536, bsc#1144333).
- cifs: Set reconnect instance to one initially (bsc#1144333).
- cifs: Show locallease in /proc/mounts for cifs shares mounted with locallease feature (bsc#1144333).
- cifs: Silence uninitialized variable warning (bsc#1144333).
- cifs: Skip any trailing backslashes from UNC (bsc#1144333).
- cifs: Try to acquire credits at once for compound requests (bsc#1144333).
- cifs: Use GFP_ATOMIC when a lock is held in cifs_mount() (bsc#1144333).
- cifs: Use ULL suffix for 64-bit constant (bsc#1051510, bsc#1144333).
- cifs: Use correct packet length in SMB2_TRANSFORM header (bsc#1144333).
- cifs: Use kmemdup in SMB2_ioctl_init() (bsc#1144333).
- cifs: Use kmemdup rather than duplicating its implementation in smb311_posix_mkdir() (bsc#1144333).
- cifs: Use kzfree() to free password (bsc#1144333).
- cifs: Use offset when reading pages (bsc#1144333).
- cifs: Use smb 2 - 3 and cifsacl mount options getacl functions (bsc#1051510, bsc#1144333).
- cifs: Use smb 2 - 3 and cifsacl mount options setacl function (bsc#1051510, bsc#1144333).
- cifs: When sending data on socket, pass the correct page offset (bsc#1144333).
- cifs: a smb2_validate_and_copy_iov failure does not mean the handle is invalid (bsc#1144333).
- cifs: add .splice_write (bsc#1144333).
- cifs: add IOCTL for QUERY_INFO passthrough to userspace (bsc#1144333).
- cifs: add ONCE flag for cifs_dbg type (bsc#1144333).
- cifs: add SFM mapping for 0x01-0x1F (bsc#1144333).
- cifs: add SMB2_close_init()/SMB2_close_free() (bsc#1144333).
- cifs: add SMB2_ioctl_init/free helpers to be used with compounding (bsc#1144333).
- cifs: add SMB2_query_info_[init|free]() (bsc#1144333).
- cifs: add a new SMB2_close_flags function (bsc#1144333).
- cifs: add a smb2_compound_op and change QUERY_INFO to use it (bsc#1144333).
- cifs: add a timeout argument to wait_for_free_credits (bsc#1144333).
- cifs: add a warning if we try to to dequeue a deleted mid (bsc#1144333).
- cifs: add compound_send_recv() (bsc#1144333).
- cifs: add credits from unmatched responses/messages (bsc#1144333).
- cifs: add debug output to show nocase mount option (bsc#1144333).
- cifs: add fiemap support (bsc#1144333).
- cifs: add iface info to struct cifs_ses (bsc#1144333).
- cifs: add lease tracking to the cached root fid (bsc#1144333).
- cifs: add missing GCM module dependency (bsc#1144333).
- cifs: add missing debug entries for kconfig options (bsc#1051510, bsc#1144333).
- cifs: add missing support for ACLs in SMB 3.11 (bsc#1051510, bsc#1144333).
- cifs: add pdu_size to the TCP_Server_Info structure (bsc#1144333).
- cifs: add resp_buf_size to the mid_q_entry structure (bsc#1144333).
- cifs: add server argument to the dump_detail method (bsc#1144333).
- cifs: add server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- cifs: add sha512 secmech (bsc#1051510, bsc#1144333).
- cifs: add spinlock for the openFileList to cifsInodeInfo (bsc#1144333).
- cifs: add support for SEEK_DATA and SEEK_HOLE (bsc#1144333).
- cifs: add support for ioctl on directories (bsc#1144333).
- cifs: address trivial coverity warning (bsc#1144333).
- cifs: allow calling SMB2_xxx_free(NULL) (bsc#1144333).
- cifs: allow disabling less secure legacy dialects (bsc#1144333).
- cifs: allow guest mounts to work for smb3.11 (bsc#1051510, bsc#1144333).
- cifs: always add credits back for unsolicited PDUs (bsc#1144333).
- cifs: auto disable 'serverino' in dfs mounts (bsc#1144333).
- cifs: avoid a kmalloc in smb2_send_recv/SendReceive2 for the common case (bsc#1144333).
- cifs: cache FILE_ALL_INFO for the shared root handle (bsc#1144333).
- cifs: change SMB2_OP_RENAME and SMB2_OP_HARDLINK to use compounding (bsc#1144333).
- cifs: change SMB2_OP_SET_EOF to use compounding (bsc#1144333).
- cifs: change SMB2_OP_SET_INFO to use compounding (bsc#1144333).
- cifs: change mkdir to use a compound (bsc#1144333).
- cifs: change smb2_get_data_area_len to take a smb2_sync_hdr as argument (bsc#1144333).
- cifs: change smb2_query_eas to use the compound query-info helper (bsc#1144333).
- cifs: change unlink to use a compound (bsc#1144333).
- cifs: change validate_buf to validate_iov (bsc#1144333).
- cifs: change wait_for_free_request() to take flags as argument (bsc#1144333).
- cifs: check CIFS_MOUNT_NO_DFS when trying to reuse existing sb (bsc#1144333).
- cifs: check MaxPathNameComponentLength != 0 before using it (bsc#1085536, bsc#1144333).
- cifs: check for STATUS_USER_SESSION_DELETED (bsc#1112902, bsc#1144333).
- cifs: check if SMB2 PDU size has been padded and suppress the warning (bsc#1144333).
- cifs: check kmalloc before use (bsc#1051510, bsc#1144333).
- cifs: check kzalloc return (bsc#1144333).
- cifs: check ntwrk_buf_start for NULL before dereferencing it (bsc#1144333).
- cifs: check rsp for NULL before dereferencing in SMB2_open (bsc#1085536, bsc#1144333).
- cifs: cifs_read_allocate_pages: do not iterate through whole page array on ENOMEM (bsc#1144333).
- cifs: clean up indentation, replace spaces with tab (bsc#1144333).
- cifs: cleanup smb2ops.c and normalize strings (bsc#1144333).
- cifs: complete PDU definitions for interface queries (bsc#1144333).
- cifs: connect to servername instead of IP for IPC$ share (bsc#1051510, bsc#1144333).
- cifs: create SMB2_open_init()/SMB2_open_free() helpers (bsc#1144333).
- cifs: create a define for how many iovs we need for an SMB2_open() (bsc#1144333).
- cifs: create a define for the max number of iov we need for a SMB2 set_info (bsc#1144333).
- cifs: create a helper function for compound query_info (bsc#1144333).
- cifs: create helpers for SMB2_set_info_init/free() (bsc#1144333).
- cifs: do not allow creating sockets except with SMB1 posix exensions (bsc#1102097, bsc#1144333).
- cifs: do not attempt cifs operation on smb2+ rename error (bsc#1144333).
- cifs: do not dereference smb_file_target before null check (bsc#1051510, bsc#1144333).
- cifs: do not log STATUS_NOT_FOUND errors for DFS (bsc#1051510, bsc#1144333).
- cifs: do not return atime less than mtime (bsc#1144333).
- cifs: do not send invalid input buffer on QUERY_INFO requests (bsc#1144333).
- cifs: do not show domain= in mount output when domain is empty (bsc#1144333).
- cifs: do not use __constant_cpu_to_le32() (bsc#1144333).
- cifs: document tcon/ses/server refcount dance (bsc#1144333).
- cifs: dump IPC tcon in debug proc file (bsc#1071306, bsc#1144333).
- cifs: dump every session iface info (bsc#1144333).
- cifs: fallback to older infolevels on findfirst queryinfo retry (bsc#1144333).
- cifs: fix GlobalMid_Lock bug in cifs_reconnect (bsc#1144333).
- cifs: fix NULL deref in SMB2_read (bsc#1085539, bsc#1144333).
- cifs: fix POSIX lock leak and invalid ptr deref (bsc#1114542, bsc#1144333).
- cifs: fix SMB1 breakage (bsc#1144333).
- cifs: fix a buffer leak in smb2_query_symlink (bsc#1144333).
- cifs: fix a credits leak for compund commands (bsc#1144333).
- cifs: fix bi-directional fsctl passthrough calls (bsc#1144333).
- cifs: fix build break when CONFIG_CIFS_DEBUG2 enabled (bsc#1144333).
- cifs: fix build errors for SMB_DIRECT (bsc#1144333).
- cifs: fix circular locking dependency (bsc#1064701, bsc#1144333).
- cifs: fix computation for MAX_SMB2_HDR_SIZE (bsc#1144333).
- cifs: fix confusing warning message on reconnect (bsc#1144333).
- cifs: fix crash in cifs_dfs_do_automount (bsc#1144333).
- cifs: fix crash in smb2_compound_op()/smb2_set_next_command() (bsc#1144333).
- cifs: fix crash querying symlinks stored as reparse-points (bsc#1144333).
- cifs: fix credits leak for SMB1 oplock breaks (bsc#1144333).
- cifs: fix deadlock in cached root handling (bsc#1144333).
- cifs: fix encryption in SMB3.1.1 (bsc#1144333).
- cifs: fix handle leak in smb2_query_symlink() (bsc#1144333).
- cifs: fix incorrect handling of smb2_set_sparse() return in smb3_simple_falloc (bsc#1144333).
- cifs: fix kref underflow in close_shroot() (bsc#1144333).
- cifs: fix memory leak and remove dead code (bsc#1144333).
- cifs: fix memory leak in SMB2_open() (bsc#1112894, bsc#1144333).
- cifs: fix memory leak in SMB2_read (bsc#1144333).
- cifs: fix memory leak of an allocated cifs_ntsd structure (bsc#1144333).
- cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case (bsc#1144333).
- cifs: fix page reference leak with readv/writev (bsc#1144333).
- cifs: fix panic in smb2_reconnect (bsc#1144333).
- cifs: fix parsing of symbolic link error response (bsc#1144333).
- cifs: fix return value for cifs_listxattr (bsc#1051510, bsc#1144333).
- cifs: fix rmmod regression in cifs.ko caused by force_sig changes (bsc#1144333).
- cifs: fix sha512 check in cifs_crypto_secmech_release (bsc#1051510, bsc#1144333).
- cifs: fix signed/unsigned mismatch on aio_read patch (bsc#1144333).
- cifs: fix smb3_zero_range for Azure (bsc#1144333).
- cifs: fix smb3_zero_range so it can expand the file-size when required (bsc#1144333).
- cifs: fix sparse warning on previous patch in a few printks (bsc#1144333).
- cifs: fix spelling mistake, EACCESS -&gt; EACCES (bsc#1144333).
- cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (bsc#1144333).
- cifs: fix typo in cifs_dbg (bsc#1144333).
- cifs: fix typo in debug message with struct field ia_valid (bsc#1144333).
- cifs: fix uninitialized ptr deref in smb2 signing (bsc#1144333).
- cifs: fix use-after-free of the lease keys (bsc#1144333).
- cifs: fix wrapping bugs in num_entries() (bsc#1051510, bsc#1144333).
- cifs: flush before set-info if we have writeable handles (bsc#1144333).
- cifs: handle large EA requests more gracefully in smb2+ (bsc#1144333).
- cifs: handle netapp error codes (bsc#1136261).
- cifs: hide unused functions (bsc#1051510, bsc#1144333).
- cifs: hide unused functions (bsc#1051510, bsc#1144333).
- cifs: implement v3.11 preauth integrity (bsc#1051510, bsc#1144333).
- cifs: integer overflow in in SMB2_ioctl() (bsc#1051510, bsc#1144333).
- cifs: invalidate cache when we truncate a file (bsc#1051510, bsc#1144333).
- cifs: keep FileInfo handle live during oplock break (bsc#1106284, bsc#1131565, bsc#1144333).
- cifs: limit amount of data we request for xattrs to CIFSMaxBufSize (bsc#1144333).
- cifs: make 'nodfs' mount opt a superblock flag (bsc#1051510, bsc#1144333).
- cifs: make IPC a regular tcon (bsc#1071306, bsc#1144333).
- cifs: make arrays static const, reduces object code size (bsc#1144333).
- cifs: make minor clarifications to module params for cifs.ko (bsc#1144333).
- cifs: make mknod() an smb_version_op (bsc#1144333).
- cifs: make rmdir() use compounding (bsc#1144333).
- cifs: make smb_send_rqst take an array of requests (bsc#1144333).
- cifs: minor clarification in comments (bsc#1144333).
- cifs: minor updates to module description for cifs.ko (bsc#1144333).
- cifs: move default port definitions to cifsglob.h (bsc#1144333).
- cifs: move large array from stack to heap (bsc#1144333).
- cifs: only wake the thread for the very last PDU in a compound (bsc#1144333).
- cifs: parse and store info on iface queries (bsc#1144333).
- cifs: pass flags down into wait_for_free_credits() (bsc#1144333).
- cifs: pass page offsets on SMB1 read/write (bsc#1144333).
- cifs: prevent integer overflow in nxt_dir_entry() (bsc#1051510, bsc#1144333).
- cifs: prevent starvation in wait_for_free_credits for multi-credit requests (bsc#1144333).
- cifs: print CIFSMaxBufSize as part of /proc/fs/cifs/DebugData (bsc#1144333).
- cifs: protect against server returning invalid file system block size (bsc#1144333).
- cifs: prototype declaration and definition for smb 2 - 3 and cifsacl mount options (bsc#1051510, bsc#1144333).
- cifs: prototype declaration and definition to set acl for smb 2 - 3 and cifsacl mount options (bsc#1051510, bsc#1144333).
- cifs: push rfc1002 generation down the stack (bsc#1144333).
- cifs: read overflow in is_valid_oplock_break() (bsc#1144333).
- cifs: refactor and clean up arguments in the reparse point parsing (bsc#1144333).
- cifs: refactor crypto shash/sdesc allocation&amp;free (bsc#1051510, bsc#1144333).
- cifs: release auth_key.response for reconnect (bsc#1085536, bsc#1144333).
- cifs: release cifs root_cred after exit_cifs (bsc#1085536, bsc#1144333).
- cifs: remove coverity warning in calc_lanman_hash (bsc#1144333).
- cifs: remove header_preamble_size where it is always 0 (bsc#1144333).
- cifs: remove redundant duplicated assignment of pointer 'node' (bsc#1144333).
- cifs: remove rfc1002 hardcoded constants from cifs_discard_remaining_data() (bsc#1144333).
- cifs: remove rfc1002 header from all SMB2 response structures (bsc#1144333).
- cifs: remove rfc1002 header from smb2 read/write requests (bsc#1144333).
- cifs: remove rfc1002 header from smb2_close_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_create_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_echo_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_flush_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_ioctl_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_lease_ack (bsc#1144333).
- cifs: remove rfc1002 header from smb2_lock_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_logoff_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_negotiate_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_oplock_break we get from server (bsc#1144333).
- cifs: remove rfc1002 header from smb2_query_directory_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_query_info_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_sess_setup_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_set_info_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_tree_connect_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_tree_disconnect_req (bsc#1144333).
- cifs: remove set but not used variable 'cifs_sb' (bsc#1144333).
- cifs: remove set but not used variable 'sep' (bsc#1144333).
- cifs: remove set but not used variable 'server' (bsc#1144333).
- cifs: remove set but not used variable 'smb_buf' (bsc#1144333).
- cifs: remove small_smb2_init (bsc#1144333).
- cifs: remove smb2_send_recv() (bsc#1144333).
- cifs: remove struct smb2_hdr (bsc#1144333).
- cifs: remove struct smb2_oplock_break_rsp (bsc#1144333).
- cifs: remove the is_falloc argument to SMB2_set_eof (bsc#1144333).
- cifs: remove unused stats (bsc#1144333).
- cifs: remove unused value pointed out by Coverity (bsc#1144333).
- cifs: remove unused variable from SMB2_read (bsc#1144333).
- cifs: rename and clarify CIFS_ASYNC_OP and CIFS_NO_RESP (bsc#1144333).
- cifs: replace a 4 with server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- cifs: replace snprintf with scnprintf (bsc#1144333).
- cifs: return -ENODATA when deleting an xattr that does not exist (bsc#1144333).
- cifs: return correct errors when pinning memory failed for direct I/O (bsc#1144333).
- cifs: return error on invalid value written to cifsFYI (bsc#1144333).
- cifs: set *resp_buf_type to NO_BUFFER on error (bsc#1144333).
- cifs: set mapping error when page writeback fails in writepage or launder_pages (bsc#1144333).
- cifs: set oparms.create_options rather than or'ing in CREATE_OPEN_BACKUP_INTENT (bsc#1144333).
- cifs: show 'soft' in the mount options for hard mounts (bsc#1144333).
- cifs: show the w bit for writeable /proc/fs/cifs/* files (bsc#1144333).
- cifs: silence compiler warnings showing up with gcc-8.0.0 (bsc#1090734, bsc#1144333).
- cifs: simple stats should always be enabled (bsc#1144333).
- cifs: simplify code by removing CONFIG_CIFS_ACL ifdef  (bsc#1144333). - Update config files.
- cifs: simplify how we handle credits in compound_send_recv() (bsc#1144333).
- cifs: smb2 commands can not be negative, remove confusing check (bsc#1144333).
- cifs: smb2ops: Fix NULL check in smb2_query_symlink (bsc#1144333).
- cifs: smb2ops: Fix listxattr() when there are no EAs (bsc#1051510, bsc#1144333).
- cifs: smb2pdu: Fix potential NULL pointer dereference (bsc#1144333).
- cifs: smbd: Avoid allocating iov on the stack (bsc#1144333).
- cifs: smbd: Check for iov length on sending the last iov (bsc#1144333).
- cifs: smbd: Do not destroy transport on RDMA disconnect (bsc#1144333).
- cifs: smbd: Do not use RDMA read/write when signing is used (bsc#1144333).
- cifs: smbd: Dump SMB packet when configured (bsc#1144333).
- cifs: smbd: Enable signing with smbdirect (bsc#1144333).
- cifs: smbd: Indicate to retry on transport sending failure (bsc#1144333).
- cifs: smbd: Retry on memory registration failure (bsc#1144333).
- cifs: smbd: Return EINTR when interrupted (bsc#1144333).
- cifs: smbd: avoid reconnect lockup (bsc#1144333).
- cifs: smbd: depend on INFINIBAND_ADDR_TRANS (bsc#1144333).
- cifs: smbd: disconnect transport on RDMA errors (bsc#1144333).
- cifs: smbd: take an array of reqeusts when sending upper layer data (bsc#1144333).
- cifs: start DFS cache refresher in cifs_mount() (bsc#1144333).
- cifs: store the leaseKey in the fid on SMB2_open (bsc#1051510, bsc#1144333).
- cifs: suppress some implicit-fallthrough warnings (bsc#1144333).
- cifs: track writepages in vfs operation counters (bsc#1144333).
- cifs: update __smb_send_rqst() to take an array of requests (bsc#1144333).
- cifs: update calc_size to take a server argument (bsc#1144333).
- cifs: update init_sg, crypt_message to take an array of rqst (bsc#1144333).
- cifs: update internal module number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.12 (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.12 (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.14 (bsc#1144333).
- cifs: update module internal version number (bsc#1144333).
- cifs: update multiplex loop to handle compounded responses (bsc#1144333).
- cifs: update receive_encrypted_standard to handle compounded responses (bsc#1144333).
- cifs: update smb2_calc_size to use smb2_sync_hdr instead of smb2_hdr (bsc#1144333).
- cifs: update smb2_check_message to handle PDUs without a 4 byte length header (bsc#1144333).
- cifs: update smb2_queryfs() to use compounding (bsc#1144333).
- cifs: use a compound for setting an xattr (bsc#1144333).
- cifs: use a refcount to protect open/closing the cached file handle (bsc#1144333).
- cifs: use correct format characters (bsc#1144333).
- cifs: use tcon_ipc instead of use_ipc parameter of SMB2_ioctl (bsc#1071306, bsc#1144333).
- cifs: use the correct length when pinning memory for direct I/O for write (bsc#1144333).
- cifs: wait_for_free_credits() make it possible to wait for &gt;=1 credits (bsc#1144333).
- cifs: we can not use small padding iovs together with encryption (bsc#1144333).
- cifs: zero sensitive data when freeing (bsc#1087092, bsc#1144333).
- cifs: zero-range does not require the file is sparse (bsc#1144333).
- cifs:smbd Use the correct DMA direction when sending data (bsc#1144333).
- cifs:smbd When reconnecting to server, call smbd_destroy() after all MIDs have been called (bsc#1144333).
- cifs_lookup(): cifs_get_inode_...() never returns 0 with *inode left NULL (bsc#1144333).
- cifs_lookup(): switch to d_splice_alias() (bsc#1144333).
- clk: Export clk_bulk_prepare() (bsc#1144813).
- clk: add clk_bulk_get accessories (bsc#1144813).
- clk: bcm2835: remove pllb (jsc#SLE-7294).
- clk: bcm283x: add driver interfacing with Raspberry Pi's firmware (jsc#SLE-7294).
- clk: bulk: silently error out on EPROBE_DEFER (bsc#1144718,bsc#1144813).
- clk: raspberrypi: register platform device for raspberrypi-cpufreq (jsc#SLE-7294).
- clk: renesas: cpg-mssr: Fix reset control race condition (bsc#1051510).
- clk: rockchip: Add 1.6GHz PLL rate for rk3399 (bsc#1144718,bsc#1144813).
- clk: rockchip: assign correct id for pclk_ddr and hclk_sd in rk3399 (bsc#1144718,bsc#1144813).
- compat_ioctl: pppoe: fix PPPOEIOCSFWD handling (bsc#1051510).
- config: arm64: Remove CONFIG_ARM64_MODULE_CMODEL_LARGE Option removed by patches in bsc#1148219
- coredump: split pipe command whitespace before expanding template (bsc#1051510).
- cpu/speculation: Warn on unsupported mitigations= parameter (bsc#1114279).
- cpufreq: add driver for Raspberry Pi (jsc#SLE-7294).
- cpufreq: dt: Try freeing static OPPs only if we have added them (jsc#SLE-7294).
- crypto: ccp - Add support for valid authsize values less than 16 (bsc#1051510).
- crypto: ccp - Fix oops by properly managing allocated structures (bsc#1051510).
- crypto: ccp - Ignore tag length when decrypting GCM ciphertext (bsc#1051510).
- crypto: ccp - Ignore unconfigured CCP device on suspend/resume (bnc#1145934).
- crypto: ccp - Validate buffer lengths for copy operations (bsc#1051510).
- crypto: talitos - fix skcipher failure due to wrong output IV (bsc#1051510).
- crypto: virtio - Read crypto services and algorithm masks (jsc#SLE-5844 jsc#SLE-6331 bsc#1145446 LTC#175307).
- crypto: virtio - Register an algo only if it's supported (jsc#SLE-5844 jsc#SLE-6331 bsc#1145446 LTC#175307).
- cx82310_eth: fix a memory leak bug (bsc#1051510).
- dax: dax_layout_busy_page() should not unmap cow pages (bsc#1148698).
- devres: always use dev_name() in devm_ioremap_resource() (git fixes).
- dfs_cache: fix a wrong use of kfree in flush_cache_ent() (bsc#1144333).
- dm btree: fix order of block initialization in btree_split_beneath (git fixes).
- dm bufio: fix deadlock with loop device (git fixes).
- dm cache metadata: Fix loading discard bitset (git fixes).
- dm crypt: do not overallocate the integrity tag space (git fixes).
- dm crypt: fix parsing of extended IV arguments (git fixes).
- dm delay: fix a crash when invalid device is specified (git fixes).
- dm integrity: change memcmp to strncmp in dm_integrity_ctr (git fixes).
- dm integrity: correctly calculate the size of metadata area (git fixes).
- dm integrity: fix a crash due to BUG_ON in __journal_read_write() (git fixes).
- dm integrity: fix deadlock with overlapping I/O (git fixes).
- dm integrity: limit the rate of error messages (git fixes).
- dm kcopyd: always complete failed jobs (git fixes).
- dm raid: add missing cleanup in raid_ctr() (git fixes).
- dm space map metadata: fix missing store of apply_bops() return value (git fixes).
- dm table: fix invalid memory accesses with too high sector number (git fixes).
- dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (git fixes).
- dm thin: fix bug where bio that overwrites thin block ignores FUA (git fixes).
- dm thin: fix passdown_double_checking_shared_status() (git fixes).
- dm zoned: Fix zone report handling (git fixes).
- dm zoned: Silence a static checker warning (git fixes).
- dm zoned: fix potential NULL dereference in dmz_do_reclaim() (git fixes).
- dm zoned: fix zone state management race (git fixes).
- dm zoned: improve error handling in i/o map code (git fixes).
- dm zoned: improve error handling in reclaim (git fixes).
- dm zoned: properly handle backing device failure (git fixes).
- dm: fix to_sector() for 32bit (git fixes).
- dm: revert 8f50e358153d ('dm: limit the max bio size as BIO_MAX_PAGES * PAGE_SIZE') (git fixes).
- dma-buf: balance refcount inbalance (bsc#1051510).
- dmaengine: rcar-dmac: Reject zero-length slave DMA requests (bsc#1051510).
- documentation/networking: fix default_ttl typo in mpls-sysctl (bsc#1051510).
- documentation: Add nospectre_v1 parameter (bsc#1051510).
- documentation: Update Documentation for iommu.passthrough (bsc#1136039).
- driver core: Fix use-after-free and double free on glue directory (bsc#1131281).
- drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl (bsc#1051510).
- drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings (bsc#1051510).
- drm/amd/display: Always allocate initial connector state state (bsc#1111666).
- drm/amd/display: Disable ABM before destroy ABM struct (bsc#1111666).
- drm/amd/display: Fill prescale_params-&gt;scale for RGB565 (bsc#1111666).
- drm/amd/display: Fix dc_create failure handling and 666 color depths (bsc#1111666).
- drm/amd/display: Increase size of audios array (bsc#1111666).
- drm/amd/display: Only enable audio if speaker allocation exists (bsc#1111666).
- drm/amd/display: Remove redundant non-zero and overflow check (bsc#1145946).
- drm/amd/display: Wait for backlight programming completion in set backlight level (bsc#1111666).
- drm/amd/display: fix compilation error (bsc#1111666).
- drm/amd/display: num of sw i2c/aux engines less than num of connectors (bsc#1145946).
- drm/amd/display: use encoder's engine id to find matched free audio device (bsc#1111666).
- drm/amdgpu/psp: move psp version specific function pointers to (bsc#1135642)
- drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE (bsc#1111666).
- drm/amdgpu: Add APTX quirk for Dell Latitude 5495 (bsc#1142635)
- drm/amdgpu: added support 2nd UVD instance (bsc#1143331).
- drm/amdgpu: fix a potential information leaking bug (bsc#1111666).
- drm/amdgpu:change VEGA booting with firmware loaded by PSP (bsc#1143331).
- drm/amdkfd: Fix a potential memory leak (bsc#1111666).
- drm/amdkfd: Fix sdma queue map issue (bsc#1111666).
- drm/bridge: lvds-encoder: Fix build error while CONFIG_DRM_KMS_HELPER=m (bsc#1111666).
- drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz (bsc#1051510).
- drm/bridge: tc358767: read display_props in get_modes() (bsc#1051510).
- drm/crc-debugfs: Also sprinkle irqrestore over early exits (bsc#1051510).
- drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry (bsc#1051510).
- drm/edid: parse CEA blocks embedded in DisplayID (bsc#1111666).
- drm/etnaviv: add missing failure path to destroy suballoc (bsc#1135642)
- drm/exynos: fix missing decrement of retry counter (bsc#1111666).
- drm/i915/gvt: fix incorrect cache entry for guest page mapping (bsc#1111666).
- drm/i915/perf: ensure we keep a reference on the driver (bsc#1051510).
- drm/i915/perf: ensure we keep a reference on the driver (bsc#1142635)
- drm/i915/perf: fix ICL perf register offsets (bsc#1111666).
- drm/i915/userptr: Acquire the page lock around set_page_dirty() (bsc#1051510).
- drm/i915: Do not deballoon unused ggtt drm_mm_node in linux guest (bsc#1142635)
- drm/i915: Fix GEN8_MCR_SELECTOR programming (bsc#1111666).
- drm/i915: Fix HW readout for crtc_clock in HDMI mode (bsc#1111666).
- drm/i915: Fix the TBT AUX power well enabling (bsc#1111666).
- drm/i915: Fix wrong escape clock divisor init for GLK (bsc#1051510).
- drm/i915: Fix wrong escape clock divisor init for GLK (bsc#1142635)
- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- drm/i915: Revert i915 userptr page lock patch (bsc#1145051)
- drm/imx: notify drm core before sending event during crtc disable (bsc#1135642)
- drm/imx: only send event on crtc disable if kept disabled (bsc#1135642)
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver (bsc#1135642)
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable() (bsc#1135642)
- drm/mediatek: clear num_pipes when unbind driver (bsc#1135642)
- drm/mediatek: fix unbind functions (bsc#1135642)
- drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto (bsc#1111666).
- drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto (bsc#1142635)
- drm/mediatek: unbind components in mtk_drm_unbind() (bsc#1135642)
- drm/mediatek: use correct device to import PRIME buffers (bsc#1111666).
- drm/mediatek: use correct device to import PRIME buffers (bsc#1142635)
- drm/msm/mdp5: Fix mdp5_cfg_init error return (bsc#1142635)
- drm/msm: Depopulate platform on probe failure (bsc#1051510).
- drm/nouveau: Do not retry infinitely when receiving no data on i2c (bsc#1142635)
- drm/nouveau: fix memory leak in nouveau_conn_reset() (bsc#1051510).
- drm/panel: simple: Fix panel_simple_dsi_probe (bsc#1051510).
- drm/rockchip: Suspend DP late (bsc#1051510).
- drm/rockchip: Suspend DP late (bsc#1142635)
- drm/udl: introduce a macro to convert dev to udl. (bsc#1113722)
- drm/udl: move to embedding drm device inside udl device. (bsc#1113722)
- drm/virtio: Add memory barriers for capset cache (bsc#1051510).
- drm/vmwgfx: Use the backdoor port if the HB port is not available (bsc#1135642)
- drm/vmwgfx: fix a warning due to missing dma_parms (bsc#1135642)
- drm/vmwgfx: fix memory leak when too many retries have occurred (bsc#1051510).
- drm: msm: Fix add_gpu_components (bsc#1051510).
- drm: silence variable 'conn' set but not used (bsc#1051510).
- eCryptfs: fix a couple type promotion bugs (bsc#1051510).
- edac, amd64: Add Family 17h, models 10h-2fh support (bsc#1112178).
- edac/amd64: Add Family 17h Model 30h PCI IDs (bsc#1112178).
- edac/amd64: Adjust printed chip select sizes when interleaved (bsc#1131489).
- edac/amd64: Cache secondary Chip Select registers (bsc#1131489).
- edac/amd64: Decode syndrome before translating address (bsc#1131489).
- edac/amd64: Find Chip Select memory size using Address Mask (bsc#1131489).
- edac/amd64: Initialize DIMM info for systems with more than two channels (bsc#1131489).
- edac/amd64: Recognize DRAM device type ECC capability (bsc#1131489).
- edac/amd64: Recognize x16 symbol size (bsc#1131489).
- edac/amd64: Set maximum channel layer size depending on family (bsc#1131489).
- edac/amd64: Support asymmetric dual-rank DIMMs (bsc#1131489).
- edac/amd64: Support more than two Unified Memory Controllers (bsc#1131489).
- edac/amd64: Support more than two controllers for chip selects handling (bsc#1131489).
- edac/amd64: Use a macro for iterating over Unified Memory Controllers (bsc#1131489).
- edac: Fix global-out-of-bounds write when setting edac_mc_poll_msec (bsc#1114279).
- efi/bgrt: Drop BGRT status field reserved bits check (bsc#1051510).
- ehea: Fix a copy-paste err in ehea_init_port_res (bsc#1051510).
- ext4: use jbd2_inode dirty range scoping (bsc#1148616).
- firmware: raspberrypi: register clk device (jsc#SLE-7294).
- firmware: ti_sci: Always request response from firmware (bsc#1051510).
- fix incorrect error code mapping for OBJECTID_NOT_FOUND (bsc#1144333).
- fix smb3-encryption breakage when CONFIG_DEBUG_SG=y (bsc#1051510, bsc#1144333).
- fix struct ufs_req removal of unused field (git-fixes).
- floppy: fix invalid pointer dereference in drive_name (bsc#1111666).
- floppy: fix out-of-bounds read in next_valid_format (bsc#1111666).
- fs/*/Kconfig: drop links to 404-compliant http://acl.bestbits.at (bsc#1144333).
- fs/cifs/cifsacl.c Fixes typo in a comment (bsc#1144333).
- fs/cifs/smb2pdu.c: fix buffer free in SMB2_ioctl_free (bsc#1144333).
- fs/cifs: Simplify ib_post_(send|recv|srq_recv)() calls (bsc#1144333).
- fs/cifs: do not translate SFM_SLASH (U+F026) to backslash (bsc#1144333).
- fs/cifs: fix uninitialised variable warnings (bsc#1144333).
- fs/cifs: require sha512 (bsc#1051510, bsc#1144333).
- fs/cifs: suppress a string overflow warning (bsc#1144333).
- fs/xfs: Fix return code of xfs_break_leased_layouts() (bsc#1148031).
- fs: cifs: Drop unlikely before IS_ERR(_OR_NULL) (bsc#1144333).
- fs: cifs: Kconfig: pedantic formatting (bsc#1144333).
- fs: cifs: Replace _free_xid call in cifs_root_iget function (bsc#1144333).
- fs: cifs: cifsssmb: Change return type of convert_ace_to_cifs_ace (bsc#1144333).
- fs: xfs: xfs_log: Do not use KM_MAYFAIL at xfs_log_reserve() (bsc#1148033).
- fsl/fman: Use GFP_ATOMIC in {memac,tgec}_add_hash_mac_address() (bsc#1051510).
- ftrace: Check for empty hash and comment the race with registering probes (bsc#1149418).
- ftrace: Check for successful allocation of hash (bsc#1149424).
- ftrace: Fix NULL pointer dereference in t_probe_next() (bsc#1149413).
- gpio: Fix build error of function redefinition (bsc#1051510).
- gpio: gpio-omap: add check for off wake capable gpios (bsc#1051510).
- gpio: mxs: Get rid of external API call (bsc#1051510).
- gpio: omap: ensure irq is enabled before wakeup (bsc#1051510).
- gpio: pxa: handle corner case of unprobed device (bsc#1051510).
- gpiolib: fix incorrect IRQ requesting of an active-low lineevent (bsc#1051510).
- gpiolib: never report open-drain/source lines as 'input' to user-space (bsc#1051510).
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM (bsc#1142635)
- hid: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT (bsc#1051510).
- hid: Add quirk for HP X1200 PIXART OEM mouse (bsc#1051510).
- hid: cp2112: prevent sleeping function called from invalid context (bsc#1051510).
- hid: hiddev: avoid opening a disconnected device (bsc#1051510).
- hid: hiddev: do cleanup in failure of opening a device (bsc#1051510).
- hid: holtek: test for sanity of intfdata (bsc#1051510).
- hid: sony: Fix race condition between rumble and device remove (bsc#1051510).
- hid: wacom: Correct distance scale for 2nd-gen Intuos devices (bsc#1142635).
- hid: wacom: correct misreported EKR ring values (bsc#1142635).
- hid: wacom: fix bit shift for Cintiq Companion 2 (bsc#1051510).
- hpet: Fix division by zero in hpet_time_div() (bsc#1051510).
- hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 (bsc#1051510).
- hwmon: (nct7802) Fix wrong detection of in4 presence (bsc#1051510).
- i2c: emev2: avoid race when unregistering slave client (bsc#1051510).
- i2c: piix4: Fix port selection for AMD Family 16h Model 30h (bsc#1051510).
- i2c: qup: fixed releasing dma without flush operation completion (bsc#1051510).
- ia64: Get rid of iommu_pass_through (bsc#1136039).
- ib/mlx5: Fix MR registration flow to use UMR properly (bsc#1093205 bsc#1145678).
- ibmveth: Convert multicast list size for little-endian system (bsc#1061843).
- ibmvnic: Do not process reset during or after device removal (bsc#1149652 ltc#179635).
- ibmvnic: Unmap DMA address of TX descriptor buffers after use (bsc#1146351 ltc#180726).
- igmp: fix memory leak in igmpv3_del_delrec() (networking-stable-19_07_25).
- iio: adc: max9611: Fix misuse of GENMASK macro (bsc#1051510).
- iio: adc: max9611: Fix temperature reading in probe (bsc#1051510).
- iio: iio-utils: Fix possible incorrect mask calculation (bsc#1051510).
- improve security, move default dialect to SMB3 from old CIFS (bsc#1051510, bsc#1144333).
- include/linux/bitops.h: sanitize rotate primitives (git fixes).
- input: alps - do not handle ALPS cs19 trackpoint-only device (bsc#1051510).
- input: alps - fix a mismatch between a condition check and its comment (bsc#1051510).
- input: iforce - add sanity checks (bsc#1051510).
- input: kbtab - sanity check for endpoint type (bsc#1051510).
- input: synaptics - enable RMI mode for HP Spectre X360 (bsc#1051510).
- input: synaptics - whitelist Lenovo T580 SMBus intertouch (bsc#1051510).
- input: trackpoint - only expose supported controls for Elan, ALPS and NXP (bsc#1051510).
- intel_th: pci: Add Ice Lake NNPI support (bsc#1051510).
- intel_th: pci: Add Tiger Lake support (bsc#1051510).
- intel_th: pci: Add support for another Lewisburg PCH (bsc#1051510).
- iommu/amd: Add support for X2APIC IOMMU interrupts (bsc#1145010).
- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- iommu/amd: Move iommu_init_pci() to .init section (bsc#1149105).
- iommu/amd: Request passthrough mode from IOMMU core (bsc#1136039).
- iommu/dma: Handle SG length overflow better (bsc#1146084).
- iommu/iova: Remove stale cached32_node (bsc#1145018).
- iommu/vt-d: Request passthrough mode from IOMMU core (bsc#1136039).
- iommu: Add helpers to set/get default domain type (bsc#1136039).
- iommu: Disable passthrough mode when SME is active (bsc#1136039).
- iommu: Print default domain type on boot (bsc#1136039).
- iommu: Remember when default domain type was set on kernel command line (bsc#1136039).
- iommu: Set default domain type at runtime (bsc#1136039).
- iommu: Use Functions to set default domain type in iommu_set_def_domain_type() (bsc#1136039).
- ipip: validate header length in ipip_tunnel_xmit (git-fixes).
- ipv4: do not set IPv6 only flags to IPv4 addresses (networking-stable-19_07_25).
- irqchip/gic-v2m: Add support for Amazon Graviton variant of GICv3+GICv2m (SLE-9332).
- irqchip/gic-v3-its: fix build warnings (bsc#1144880).
- isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack (bsc#1051510).
- isdn: hfcsusb: checking idx of ep configuration (bsc#1051510).
- isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain() (bsc#1051510).
- iversion: add a routine to update a raw value with a larger one (bsc#1148133).
- iwlwifi: dbg: split iwl_fw_error_dump to two functions (bsc#1119086).
- iwlwifi: do not unmap as page memory that was mapped as single (bsc#1051510).
- iwlwifi: fix bad dma handling in page_mem dumping flow (bsc#1120902).
- iwlwifi: fw: use helper to determine whether to dump paging (bsc#1106434). Patch needed to be adjusted, because our tree does not have the global variable IWL_FW_ERROR_DUMP_PAGING
- iwlwifi: mvm: do not send GEO_TX_POWER_LIMIT on version &amp;lt; 41 (bsc#1142635).
- iwlwifi: mvm: fix an out-of-bound access (bsc#1051510).
- iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support (bsc#1142635).
- iwlwifi: pcie: do not service an interrupt that was masked (bsc#1142635).
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X (bsc#1142635).
- ixgbe: fix possible deadlock in ixgbe_service_task() (bsc#1113994).
- jbd2: flush_descriptor(): Do not decrease buffer head's ref count (bsc#1143843).
- jbd2: introduce jbd2_inode dirty range scoping (bsc#1148616).
- kABI: Fix kABI for 'struct amd_iommu' (bsc#1145010).
- kABI: Fix kABI for x86 pci-dma code (bsc#1136039).
- kabi/severities: Exclude drivers/crypto/ccp/*
- kabi/severities: match SLE15 entry ordering.
- kasan: remove redundant initialization of variable 'real_size' (git fixes).
- kconfig/[mn]conf: handle backspace (^H) key (bsc#1051510).
- keys: Fix missing null pointer check in request_key_auth_describe() (bsc#1051510).
- kvm/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel (bsc#1133021).
- kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (bsc#1134881 bsc#1134882).
- kvm: Disallow wraparound in kvm_gfn_to_hva_cache_init (bsc#1133021).
- kvm: Fix leak vCPU's VMCS value into other pCPU (bsc#1145388).
- kvm: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC (bsc#1145408).
- kvm: PPC: Book3S HV: Fix CR0 setting in TM emulation (bsc#1061840).
- kvm: Reject device ioctls from processes other than the VM's creator (bsc#1133021).
- kvm: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value (bsc#1145393).
- kvm: VMX: Fix handling of #MC that occurs during VM-Entry (bsc#1145395).
- kvm: VMX: check CPUID before allowing read/write of IA32_XSS (bsc#1145394).
- kvm: X86: Reduce the overhead when lapic_timer_advance is disabled (bsc#1149083).
- kvm: arm/arm64: Close VMID generation race (bsc#1133021).
- kvm: arm/arm64: Convert kvm_host_cpu_state to a static per-cpu allocation (bsc#1133021).
- kvm: arm/arm64: Drop resource size check for GICV window (bsc#1133021).
- kvm: arm/arm64: Fix VMID alloc race by reverting to lock-less (bsc#1133021).
- kvm: arm/arm64: Fix lost IRQs from emulated physcial timer when blocked (bsc#1133021).
- kvm: arm/arm64: Handle CPU_PM_ENTER_FAILED (bsc#1133021).
- kvm: arm/arm64: Reduce verbosity of KVM init log (bsc#1133021).
- kvm: arm/arm64: Set dist-&gt;spis to NULL after kfree (bsc#1133021).
- kvm: arm/arm64: Skip updating PMD entry if no change (bsc#1133021).
- kvm: arm/arm64: Skip updating PTE entry if no change (bsc#1133021).
- kvm: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list (bsc#1133021).
- kvm: arm/arm64: vgic-v3: Tighten synchronization for guests using v2 on v3 (bsc#1133021).
- kvm: arm/arm64: vgic: Add missing irq_lock to vgic_mmio_read_pending (bsc#1133021).
- kvm: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy (bsc#1133021).
- kvm: arm64: Fix caching of host MDCR_EL2 value (bsc#1133021).
- kvm: mmu: Fix overlap between public and private memslots (bsc#1133021).
- kvm: nVMX: Remove unnecessary sync_roots from handle_invept (bsc#1145391).
- kvm: nVMX: Use adjusted pin controls for vmcs02 (bsc#1145392).
- kvm: nVMX: allow setting the VMFUNC controls MSR (bsc#1145389).
- kvm: nVMX: do not use dangling shadow VMCS after guest reset (bsc#1145390).
- kvm: s390: add MSA9 to cpumodel (jsc#SLE-6240).
- kvm: s390: add debug logging for cpu model subfunctions (jsc#SLE-6240).
- kvm: s390: add deflate conversion facilty to cpu model (jsc#SLE-6240).
- kvm: s390: add enhanced sort facilty to cpu model (jsc#SLE-6240 ).
- kvm: s390: add vector BCD enhancements facility to cpumodel (jsc#SLE-6240).
- kvm: s390: add vector enhancements facility 2 to cpumodel (jsc#SLE-6240).
- kvm: s390: enable MSA9 keywrapping functions depending on cpu model (jsc#SLE-6240).
- kvm: s390: implement subfunction processor calls (jsc#SLE-6240 ).
- kvm: s390: provide query function for instructions returning 32 byte (jsc#SLE-6240).
- kvm: x86/vPMU: refine kvm_pmu err msg when event creation failed (bsc#1145397).
- kvm: x86: Do not update RIP or do single-step on faulting emulation (bsc#1149104).
- kvm: x86: Unconditionally enable irqs in guest context (bsc#1145396).
- kvm: x86: degrade WARN to pr_warn_ratelimited (bsc#1145409).
- kvm: x86: fix backward migration with async_PF (bsc#1146074).
- lan78xx: Fix memory leaks (bsc#1051510).
- libata: add SG safety checks in SFF pio transfers (bsc#1051510).
- libata: do not request sense data on !ZAC ATA devices (bsc#1051510).
- libata: have ata_scsi_rw_xlat() fail invalid passthrough requests (bsc#1051510).
- libata: zpodd: Fix small read overflow in zpodd_get_mech_type() (bsc#1051510).
- libceph, rbd, ceph: move ceph_osdc_alloc_messages() calls (bsc#1135897).
- libceph, rbd: add error handling for osd_req_op_cls_init() (bsc#1135897).
- libceph, rbd: new bio handling code (aka do not clone bios) (bsc#1141450).
- libceph: ADDR2 support for monmap (bsc#1148133 bsc#1136682).
- libceph: add ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: add osd_req_op_extent_osd_data_bvecs() (bsc#1141450).
- libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer (bsc#1148133).
- libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer (bsc#1148133).
- libceph: assign cookies in linger_submit() (bsc#1135897).
- libceph: check reply num_data_items in setup_request_data() (bsc#1135897).
- libceph: correctly decode ADDR2 addresses in incremental OSD maps (bsc#1148133 bsc#1136682).
- libceph: do not consume a ref on pagelist in ceph_msg_data_add_pagelist() (bsc#1135897).
- libceph: enable fallback to ceph_msg_new() in ceph_msgpool_get() (bsc#1135897).
- libceph: fix PG split vs OSD (re)connect race (bsc#1148133).
- libceph: fix PG split vs OSD (re)connect race (bsc#1148133).
- libceph: fix sa_family just after reading address (bsc#1148133 bsc#1136682).
- libceph: fix unaligned accesses in ceph_entity_addr handling (bsc#1136682).
- libceph: fix watch_item_t decoding to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: handle zero-length data items (bsc#1141450).
- libceph: introduce BVECS data type (bsc#1141450).
- libceph: introduce alloc_watch_request() (bsc#1135897).
- libceph: introduce ceph_pagelist_alloc() (bsc#1135897).
- libceph: make ceph_pr_addr take an struct ceph_entity_addr pointer (bsc#1136682).
- libceph: preallocate message data items (bsc#1135897).
- libceph: rename ceph_encode_addr to ceph_encode_banner_addr (bsc#1148133 bsc#1136682).
- libceph: switch osdmap decoding to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: turn on CEPH_FEATURE_MSG_ADDR2 (bsc#1148133 bsc#1136682).
- libceph: use TYPE_LEGACY for entity addrs instead of TYPE_NONE (bsc#1148133 bsc#1136682).
- libceph: use single request data item for cmp/setxattr (bsc#1139101).
- libnvdimm/pfn: Store correct value of npfns in namespace superblock (bsc#1146381 ltc#180720).
- liquidio: add cleanup in octeon_setup_iq() (bsc#1051510).
- loop: set PF_MEMALLOC_NOIO for the worker thread (git fixes).
- lpfc: fix 12.4.0.0 GPF at boot (bsc#1148308).
- mac80211: Correctly set noencrypt for PAE frames (bsc#1111666).
- mac80211: Do not memset RXCB prior to PAE intercept (bsc#1111666).
- mac80211: do not WARN on short WMM parameters from AP (bsc#1051510).
- mac80211: do not warn about CW params when not using them (bsc#1051510).
- mac80211: fix possible memory leak in ieee80211_assign_beacon (bsc#1142635).
- mac80211: fix possible sta leak (bsc#1051510).
- mac80211_hwsim: Fix possible null-pointer dereferences in hwsim_dump_radio_nl() (bsc#1111666).
- macsec: fix checksumming after decryption (bsc#1051510).
- macsec: fix use-after-free of skb during RX (bsc#1051510).
- macsec: let the administrator set UP state even if lowerdev is down (bsc#1051510).
- macsec: update operstate when lower device changes (bsc#1051510).
- mailbox: handle failed named mailbox channel request (bsc#1051510).
- md/raid: raid5 preserve the writeback action after the parity check (git fixes).
- md: add mddev-&gt;pers to avoid potential NULL pointer dereference (git fixes).
- md: fix invalid stored role for a disk try2 (bsc#1143765).
- media: au0828: fix null dereference in error path (bsc#1051510).
- media: coda: Remove unbalanced and unneeded mutex unlock (bsc#1051510).
- media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP (bsc#1051510).
- media: coda: fix mpeg2 sequence number handling (bsc#1051510).
- media: coda: increment sequence offset for the last returned frame (bsc#1051510).
- media: dvb: usb: fix use after free in dvb_usb_device_exit (bsc#1051510).
- media: hdpvr: fix locking and a missing msleep (bsc#1051510).
- media: media_device_enum_links32: clean a reserved field (bsc#1051510).
- media: pvrusb2: use a different format for warnings (bsc#1051510).
- media: spi: IR LED: add missing of table registration (bsc#1051510).
- media: staging: media: davinci_vpfe: - Fix for memory leak if decoder initialization fails (bsc#1051510).
- media: vpss: fix a potential NULL pointer dereference (bsc#1051510).
- media: wl128x: Fix some error handling in fm_v4l2_init_video_device() (bsc#1051510).
- mfd: arizona: Fix undefined behavior (bsc#1051510).
- mfd: core: Set fwnode for created devices (bsc#1051510).
- mfd: hi655x-pmic: Fix missing return value check for devm_regmap_init_mmio_clk (bsc#1051510).
- mfd: intel-lpss: Add Intel Comet Lake PCI IDs (jsc#SLE-4875).
- mlxsw: spectrum: Fix error path in mlxsw_sp_module_init() (bsc#1112374).
- mm, page_owner: handle THP splits correctly (bsc#1149197, VM Debugging Functionality).
- mm, vmscan: do not special-case slab reclaim when watermarks are boosted (git fixes (mm/vmscan)).
- mm/hmm: fix bad subpage pointer in try_to_unmap_one (bsc#1148202, HMM, VM Functionality).
- mm/hotplug: fix offline undo_isolate_page_range() (bsc#1148196, VM Functionality).
- mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node (bsc#1148379, VM Functionality).
- mm/memcontrol.c: fix use after free in mem_cgroup_iter() (bsc#1149224, VM Functionality).
- mm/memory.c: recheck page table entry with page table lock held (bsc#1148363, VM Functionality).
- mm/migrate.c: initialize pud_entry in migrate_vma() (bsc#1148198, HMM, VM Functionality).
- mm/mlock.c: change count_mm_mlocked_page_nr return type (bsc#1148527, VM Functionality).
- mm/mlock.c: mlockall error for flag MCL_ONFAULT (bsc#1148527, VM Functionality).
- mm/page_alloc.c: fix calculation of pgdat-&gt;nr_zones (bsc#1148192, VM Functionality).
- mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() (bsc#1118689).
- mm/vmscan.c: fix trying to reclaim unevictable LRU page (bsc#1149214, VM Functionality).
- mm: add filemap_fdatawait_range_keep_errors() (bsc#1148616).
- mm: do not stall register_shrinker() (bsc#1104902, VM Performance).
- mm: move MAP_SYNC to asm-generic/mman-common.h (bsc#1148297).
- mm: page_mapped: do not assume compound page is huge or THP (bsc#1148574, VM Functionality).
- mmc: cavium: Add the missing dma unmap when the dma has finished (bsc#1051510).
- mmc: cavium: Set the correct dma max segment size for mmc_host (bsc#1051510).
- mmc: core: Fix init of SD cards reporting an invalid VDD range (bsc#1051510).
- mmc: dw_mmc: Fix occasional hang after tuning on eMMC (bsc#1051510).
- mmc: sdhci-of-at91: add quirk for broken HS200 (bsc#1051510).
- mmc: sdhci-pci: Add support for Intel CML (jsc#SLE-4875).
- mmc: sdhci-pci: Add support for Intel ICP (jsc#SLE-4875).
- mmc: sdhci-pci: Fix BYT OCP setting (bsc#1051510).
- mpls: fix warning with multi-label encap (bsc#1051510).
- nbd: replace kill_bdev() with __invalidate_device() again (git fixes).
- net/9p: include trans_common.h to fix missing prototype warning (bsc#1051510).
- net/ibmvnic: Fix missing { in __ibmvnic_reset (bsc#1149652 ltc#179635).
- net/ibmvnic: free reset work of removed device from queue (bsc#1149652 ltc#179635).
- net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command (bsc#1145678).
- net/mlx5: Fix modify_cq_in alignment (bsc#1103990).
- net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn (networking-stable-19_07_25).
- net/mlx5e: always initialize frag-&gt;last_in_page (bsc#1103990 ).
- net: Fix netdev_WARN_ONCE macro (git-fixes).
- net: Introduce netdev_*_once functions (networking-stable-19_07_25).
- net: Revert 'net: ena: ethtool: add extra properties retrieval via get_priv_flags' (bsc#1139020 bsc#1139021).
- net: bcmgenet: use promisc for unsupported filters (networking-stable-19_07_25).
- net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query (networking-stable-19_07_25).
- net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling (networking-stable-19_07_25).
- net: bridge: stp: do not cache eth dest pointer before skb pull (networking-stable-19_07_25).
- net: dsa: mv88e6xxx: wait after reset deactivation (networking-stable-19_07_25).
- net: ena: Fix bug where ring allocation backoff stopped too late (bsc#1139020 bsc#1139021).
- net: ena: add MAX_QUEUES_EXT get feature admin command (bsc#1139020 bsc#1139021).
- net: ena: add ethtool function for changing io queue sizes (bsc#1139020 bsc#1139021).
- net: ena: add good checksum counter (bsc#1139020 bsc#1139021).
- net: ena: add handling of llq max tx burst size (bsc#1139020 bsc#1139021).
- net: ena: add newline at the end of pr_err prints (bsc#1139020 bsc#1139021).
- net: ena: add support for changing max_header_size in LLQ mode (bsc#1139020 bsc#1139021).
- net: ena: allow automatic fallback to polling mode (bsc#1139020 bsc#1139021).
- net: ena: allow queue allocation backoff when low on memory (bsc#1139020 bsc#1139021).
- net: ena: arrange ena_probe() function variables in reverse christmas tree (bsc#1139020 bsc#1139021).
- net: ena: enable negotiating larger Rx ring size (bsc#1139020 bsc#1139021).
- net: ena: ethtool: add extra properties retrieval via get_priv_flags (bsc#1139020 bsc#1139021).
- net: ena: fix ena_com_fill_hash_function() implementation (bsc#1139020 bsc#1139021).
- net: ena: fix incorrect test of supported hash function (bsc#1139020 bsc#1139021).
- net: ena: fix swapped parameters when calling ena_com_indirect_table_fill_entry (bsc#1139020 bsc#1139021).
- net: ena: fix: Free napi resources when ena_up() fails (bsc#1139020 bsc#1139021).
- net: ena: fix: set freed objects to NULL to avoid failing future allocations (bsc#1139020 bsc#1139021).
- net: ena: gcc 8: fix compilation warning (bsc#1139020 bsc#1139021).
- net: ena: improve latency by disabling adaptive interrupt moderation by default (bsc#1139020 bsc#1139021).
- net: ena: make ethtool show correct current and max queue sizes (bsc#1139020 bsc#1139021).
- net: ena: optimise calculations for CQ doorbell (bsc#1139020 bsc#1139021).
- net: ena: remove inline keyword from functions in *.c (bsc#1139020 bsc#1139021).
- net: ena: replace free_tx/rx_ids union with single free_ids field in ena_ring (bsc#1139020 bsc#1139021).
- net: ena: update driver version from 2.0.3 to 2.1.0 (bsc#1139020 bsc#1139021).
- net: ena: use dev_info_once instead of static variable (bsc#1139020 bsc#1139021).
- net: fix bpf_xdp_adjust_head regression for generic-XDP (bsc#1109837).
- net: hns3: Add missing newline at end of file (bsc#1104353 ).
- net: hns3: add Asym Pause support to fix autoneg problem (bsc#1104353).
- net: hns3: add a check to pointer in error_detected and slot_reset (bsc#1104353).
- net: hns3: add aRFS support for PF (bsc#1104353).
- net: hns3: add all IMP return code (bsc#1104353).
- net: hns3: add check to number of buffer descriptors (bsc#1104353).
- net: hns3: add default value for tc_size and tc_offset (bsc#1104353).
- net: hns3: add exception handling when enable NIC HW error interrupts (bsc#1104353).
- net: hns3: add handling of two bits in MAC tunnel interrupts (bsc#1104353).
- net: hns3: add handshake with hardware while doing reset (bsc#1104353).
- net: hns3: add opcode about query and clear RAS &amp; MSI-X to special opcode (bsc#1104353).
- net: hns3: add recovery for the H/W errors occurred before the HNS dev initialization (bsc#1104353).
- net: hns3: add some error checking in hclge_tm module (bsc#1104353).
- net: hns3: add support for dump firmware statistics by debugfs (bsc#1104353).
- net: hns3: adjust hns3_uninit_phy()'s location in the hns3_client_uninit() (bsc#1104353).
- net: hns3: bitwise operator should use unsigned type (bsc#1104353).
- net: hns3: change SSU's buffer allocation according to UM (bsc#1104353).
- net: hns3: check msg_data before memcpy in hclgevf_send_mbx_msg (bsc#1104353).
- net: hns3: clear restting state when initializing HW device (bsc#1104353).
- net: hns3: code optimizaition of hclge_handle_hw_ras_error() (bsc#1104353).
- net: hns3: delay and separate enabling of NIC and ROCE HW errors (bsc#1104353).
- net: hns3: delay ring buffer clearing during reset (bsc#1104353 ).
- net: hns3: delay setting of reset level for hw errors until slot_reset is called (bsc#1104353).
- net: hns3: delete the redundant user NIC codes (bsc#1104353 ).
- net: hns3: do not configure new VLAN ID into VF VLAN table when it's full (bsc#1104353).
- net: hns3: enable DCB when TC num is one and pfc_en is non-zero (bsc#1104353).
- net: hns3: enable broadcast promisc mode when initializing VF (bsc#1104353).
- net: hns3: extract handling of mpf/pf msi-x errors into functions (bsc#1104353).
- net: hns3: fix VLAN filter restore issue after reset (bsc#1104353).
- net: hns3: fix __QUEUE_STATE_STACK_XOFF not cleared issue (bsc#1104353).
- net: hns3: fix a -Wformat-nonliteral compile warning (bsc#1104353).
- net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector (bsc#1104353).
- net: hns3: fix a statistics issue about l3l4 checksum error (bsc#1104353).
- net: hns3: fix avoid unnecessary resetting for the H/W errors which do not require reset (bsc#1104353).
- net: hns3: fix compile warning without CONFIG_RFS_ACCEL (bsc#1104353).
- net: hns3: fix dereference of ae_dev before it is null checked (bsc#1104353).
- net: hns3: fix flow control configure issue for fibre port (bsc#1104353).
- net: hns3: fix for dereferencing before null checking (bsc#1104353).
- net: hns3: fix for skb leak when doing selftest (bsc#1104353 ).
- net: hns3: fix race conditions between reset and module loading &amp; unloading (bsc#1104353).
- net: hns3: fix some coding style issues (bsc#1104353 ).
- net: hns3: fix wrong size of mailbox responding data (bsc#1104353).
- net: hns3: fixes wrong place enabling ROCE HW error when loading (bsc#1104353).
- net: hns3: free irq when exit from abnormal branch (bsc#1104353 ).
- net: hns3: handle empty unknown interrupt (bsc#1104353 ).
- net: hns3: initialize CPU reverse mapping (bsc#1104353 ).
- net: hns3: log detail error info of ROCEE ECC and AXI errors (bsc#1104353).
- net: hns3: make HW GRO handling compliant with SW GRO (bsc#1104353).
- net: hns3: modify handling of out of memory in hclge_err.c (bsc#1104353).
- net: hns3: modify hclge_init_client_instance() (bsc#1104353 ).
- net: hns3: modify hclgevf_init_client_instance() (bsc#1104353 ).
- net: hns3: optimize the CSQ cmd error handling (bsc#1104353 ).
- net: hns3: process H/W errors occurred before HNS dev initialization (bsc#1104353).
- net: hns3: re-schedule reset task while VF reset fail (bsc#1104353).
- net: hns3: refactor PF/VF RSS hash key configuration (bsc#1104353).
- net: hns3: refactor hns3_get_new_int_gl function (bsc#1104353 ).
- net: hns3: refine the flow director handle (bsc#1104353 ).
- net: hns3: remove RXD_VLD check in hns3_handle_bdinfo (bsc#1104353).
- net: hns3: remove VF VLAN filter entry inexistent warning print (bsc#1104353).
- net: hns3: remove override_pci_need_reset (bsc#1104353 ).
- net: hns3: remove redundant core reset (bsc#1104353 ).
- net: hns3: remove setting bit of reset_requests when handling mac tunnel interrupts (bsc#1104353).
- net: hns3: remove unused linkmode definition (bsc#1104353 ).
- net: hns3: replace numa_node_id with numa_mem_id for buffer reusing (bsc#1104353).
- net: hns3: set default value for param 'type' in hclgevf_bind_ring_to_vector (bsc#1104353).
- net: hns3: set maximum length to resp_data_len for exceptional case (bsc#1104353).
- net: hns3: set ops to null when unregister ad_dev (bsc#1104353 ).
- net: hns3: set the port shaper according to MAC speed (bsc#1104353).
- net: hns3: small changes for magic numbers (bsc#1104353 ).
- net: hns3: some changes of MSI-X bits in PPU(RCB) (bsc#1104353 ).
- net: hns3: some modifications to simplify and optimize code (bsc#1104353).
- net: hns3: some variable modification (bsc#1104353).
- net: hns3: stop schedule reset service while unloading driver (bsc#1104353).
- net: hns3: sync VLAN filter entries when kill VLAN ID failed (bsc#1104353).
- net: hns3: trigger VF reset if a VF has an over_8bd_nfe_err (bsc#1104353).
- net: hns3: typo in the name of a constant (bsc#1104353 ).
- net: hns3: use HCLGEVF_STATE_NIC_REGISTERED to indicate VF NIC client has registered (bsc#1104353).
- net: hns3: use HCLGE_STATE_NIC_REGISTERED to indicate PF NIC client has registered (bsc#1104353).
- net: hns3: use HCLGE_STATE_ROCE_REGISTERED to indicate PF ROCE client has registered (bsc#1104353).
- net: hns3: use macros instead of magic numbers (bsc#1104353 ).
- net: hns: add support for vlan TSO (bsc#1104353).
- net: make skb_dst_force return true when dst is refcounted (networking-stable-19_07_25).
- net: mvpp2: Do not check for 3 consecutive Idle frames for 10G links (bsc#1119113).
- net: neigh: fix multiple neigh timer scheduling (networking-stable-19_07_25).
- net: phylink: Fix flow control for fixed-link (bsc#1119113 ).
- net: remove duplicate fetch in sock_getsockopt (networking-stable-19_07_02).
- net: sched: verify that q!=NULL before setting q-&gt;flags (git-fixes).
- net: stmmac: fixed new system time seconds value calculation (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW timestamp (networking-stable-19_07_02).
- net: usb: pegasus: fix improper read if get_registers() fail (bsc#1051510).
- net_sched: unset TCQ_F_CAN_BYPASS when adding filters (networking-stable-19_07_25).
- netrom: fix a memory leak in nr_rx_frame() (networking-stable-19_07_25).
- netrom: hold sock when setting skb-&gt;destructor (networking-stable-19_07_25).
- nfc: fix potential illegal memory access (bsc#1051510).
- nfs: Cleanup if nfs_match_client is interrupted (bsc#1134291).
- nfs: Fix a double unlock from nfs_match,get_client (bsc#1134291).
- nfs: Fix the inode request accounting when pages have subrequests (bsc#1140012).
- nfs: make nfs_match_client killable (bsc#1134291).
- nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header (git fixes).
- nvme-core: Fix extra device_put() call on error path (bsc#1142541).
- nvme-fc: fix module unloads while lports still pending (bsc#1150033).
- nvme-multipath: fix ana log nsid lookup when nsid is not found (bsc#1141554).
- nvme-multipath: relax ANA state check (bsc#1123105).
- nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns (bsc#1120876).
- nvme: Return BLK_STS_TARGET if the DNR bit is set (bsc#1142076).
- nvme: cancel request synchronously (bsc#1145661).
- nvme: change locking for the per-subsystem controller list (bsc#1142541).
- nvme: fix possible use-after-free in connect error flow (bsc#1139500)
- nvme: fix possible use-after-free in connect error flow (bsc#1139500, bsc#1140426)
- nvme: introduce NVME_QUIRK_IGNORE_DEV_SUBNQN (bsc#1146938).
- objtool: Add rewind_stack_do_exit() to the noreturn list (bsc#1145302).
- objtool: Support GCC 9 cold subfunction naming scheme (bsc#1145300).
- octeon_mgmt: Fix MIX registers configuration on MTU setup (bsc#1051510).
- pci: PM/acpi: Refresh all stale power state data in pci_pm_complete() (bsc#1149106).
- pci: Restore Resizable BAR size bits correctly for 1MB BARs (bsc#1143841).
- pci: al: Add Amazon Annapurna Labs PCIe host controller driver (SLE-9332).
- pci: hv: Fix panic by calling hv_pci_remove_slots() earlier (bsc#1142701).
- pci: qcom: Ensure that PERST is asserted for at least 100 ms (bsc#1142635).
- pci: xilinx-nwl: Fix Multi MSI data programming (bsc#1142635).
- phy: qcom-qusb2: Fix crash if nvmem cell not specified (bsc#1051510).
- phy: renesas: rcar-gen2: Fix memory leak at error paths (bsc#1051510).
- pinctrl: pistachio: fix leaked of_node references (bsc#1051510).
- pinctrl: rockchip: fix leaked of_node references (bsc#1051510).
- pm / OPP: OF: Use pr_debug() instead of pr_err() while adding OPP table (jsc#SLE-7294).
- pm / devfreq: rk3399_dmc: Pass ODT and auto power down parameters to TF-A (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: do not print error when get supply and clk defer (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: fix spelling mistakes (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: remove unneeded semicolon (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: remove wait for dcf irq event (bsc#1144718,bsc#1144813).
- pm / devfreq: rockchip-dfi: Move GRF definitions to a common place (bsc#1144718,bsc#1144813).
- powerpc/64s: Include cpu header (bsc#1065729).
- powerpc/64s: support nospectre_v2 cmdline option (bsc#1131107).
- powerpc/book3s/64: check for NULL pointer in pgd_alloc() (bsc#1078248, git-fixes).
- powerpc/fadump: use kstrtoint to handle sysfs store (bsc#1146376).
- powerpc/fadump: when fadump is supported register the fadump sysfs files (bsc#1146352).
- powerpc/fsl: Add nospectre_v2 command line argument (bsc#1131107).
- powerpc/fsl: Update Spectre v2 reporting (bsc#1131107).
- powerpc/kdump: Handle crashkernel memory reservation failure (bsc#1143466 LTC#179600).
- powerpc/lib: Fix feature fixup test of external branch (bsc#1065729).
- powerpc/mm/hash/4k: Do not use 64K page size for vmemmap with 4K pagesize (bsc#1142685 LTC#179509).
- powerpc/mm/nvdimm: Add an informative message if we fail to allocate altmap block (bsc#1142685 LTC#179509).
- powerpc/mm/radix: Use the right page size for vmemmap mapping (bsc#1055117 bsc#1142685 LTC#179509).
- powerpc/mm: Handle page table allocation failures (bsc#1065729).
- powerpc/nvdimm: Add support for multibyte read/write for metadata (bsc#1142685 LTC#179509).
- powerpc/nvdimm: Pick nearby online node if the device node is not online (bsc#1142685 ltc#179509).
- powerpc/perf: Add constraints for power9 l2/l3 bus events (bsc#1056686).
- powerpc/perf: Add mem access events to sysfs (bsc#1124370).
- powerpc/perf: Cleanup cache_sel bits comment (bsc#1056686).
- powerpc/perf: Fix thresholding counter data for unknown type (bsc#1056686).
- powerpc/perf: Remove PM_BR_CMPL_ALT from power9 event list (bsc#1047238, bsc#1056686).
- powerpc/perf: Update perf_regs structure to include SIER (bsc#1056686).
- powerpc/powernv/opal-dump : Use IRQ_HANDLED instead of numbers in interrupt handler (bsc#1065729).
- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- powerpc/powernv: Return for invalid IMC domain (bsc1054914, git-fixes).
- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- powerpc/pseries, ps3: panic flush kernel messages before halting system (bsc#1149940 ltc#179958).
- powerpc/pseries/scm: Mark the region volatile if cache flush not required (bsc#1142685 LTC#179509).
- powerpc/pseries: Fix xive=off command line (bsc#1085030, git-fixes).
- powerpc/pseries: add missing cpumask.h include file (bsc#1065729).
- powerpc/pseries: correctly track irq state in default idle (bsc#1150727 ltc#178925).
- powerpc/rtas: use device model APIs and serialization during Lpm (bsc#1144123 ltc#178840).
- powerpc/security: Show powerpc_security_features in debugfs (bsc#1131107).
- powerpc/xive: Fix dump of XIVE interrupt under pseries (bsc#1142019).
- powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask() (bsc#1085030, bsc#1145189, LTC#179762).
- powerpc/xmon: Add a dump of all XIVE interrupts (bsc#1142019).
- powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL (bsc#1142019).
- powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (bsc#1146575 ltc#180764).
- powerpc: dump kernel log before carrying out fadump or kdump (bsc#1149940 ltc#179958).
- qede: fix write to free'd pointer error and double free of ptp (bsc#1051510).
- qla2xxx: kABI fixes for v10.01.00.18-k (bcs#1082635 bcs#1141340 bcs#1143706).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- raid5-cache: Need to do start() part job after adding journal device (git fixes).
- rbd: do not (ab)use obj_req-&gt;pages for stat requests (bsc#1141450).
- rbd: do not NULL out -&gt;obj_request in rbd_img_obj_parent_read_full() (bsc#1141450).
- rbd: get rid of img_req-&gt;copyup_pages (bsc#1141450).
- rbd: move from raw pages to bvec data descriptors (bsc#1141450).
- rbd: remove bio cloning helpers (bsc#1141450).
- rbd: start enums at 1 instead of 0 (bsc#1141450).
- rbd: use kmem_cache_zalloc() in rbd_img_request_create() (bsc#1141450).
- rdma/hns: Add mtr support for mixed multihop addressing (bsc#1104427).
- rdma/hns: Bugfix for calculating qp buffer size (bsc#1104427 ).
- rdma/hns: Bugfix for filling the sge of srq (bsc#1104427 ).
- rdma/hns: Do not stuck in endless timeout loop (bsc#1104427 ).
- rdma/hns: Fix an error code in hns_roce_set_user_sq_size() (bsc#1104427).
- rdma/hns: Fixs hw access invalid dma memory error (bsc#1104427 ).
- rdma/hns: Fixup qp release bug (bsc#1104427).
- rdma/hns: Modify ba page size for cqe (bsc#1104427).
- rdma/hns: Remove set but not used variable 'fclr_write_fail_flag' (bsc#1104427).
- rdma/hns: Remove unnecessary print message in aeq (bsc#1104427 ).
- rdma/hns: Replace magic numbers with #defines (bsc#1104427 ).
- rdma/hns: Set reset flag when hw resetting (bsc#1104427 ).
- rdma/hns: Use %pK format pointer print (bsc#1104427 ).
- rdma/hns: fix inverted logic of readl read and shift (bsc#1104427).
- rdma/hns: reset function when removing module (bsc#1104427 ).
- regmap: fix bulk writes on paged registers (bsc#1051510).
- regulator: qcom_spmi: Fix math of spmi_regulator_set_voltage_time_sel (bsc#1051510).
- rpm/kernel-binary.spec.in: Enable missing modules check.
- rpmsg: added MODULE_ALIAS for rpmsg_char (bsc#1051510).
- rpmsg: smd: do not use mananged resources for endpoints and channels (bsc#1051510).
- rpmsg: smd: fix memory leak on channel create (bsc#1051510).
- rsi: improve kernel thread handling to fix kernel panic (bsc#1051510).
- rslib: Fix decoding of shortened codes (bsc#1051510).
- rslib: Fix handling of of caller provided syndrome (bsc#1051510).
- rtc: pcf8523: do not return invalid date when battery is low (bsc#1051510).
- rtc: pcf8563: Clear event flags and disable interrupts before requesting irq (bsc#1051510).
- rtc: pcf8563: Fix interrupt trigger method (bsc#1051510).
- rxrpc: Fix send on a connected, but unbound socket (networking-stable-19_07_25).
- s390/cio: fix ccw_device_start_timeout API (bsc#1142109 LTC#179339).
- s390/dasd: fix endless loop after read unit address configuration (bsc#1144912 LTC#179907).
- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117 bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- s390/qeth: avoid control IO completion stalls (bsc#1142109 LTC#179339).
- s390/qeth: cancel cmd on early error (bsc#1142109 LTC#179339).
- s390/qeth: fix request-side race during cmd IO timeout (bsc#1142109 LTC#179339).
- s390/qeth: release cmd buffer in error paths (bsc#1142109 LTC#179339).
- s390/qeth: simplify reply object handling (bsc#1142109 LTC#179339).
- samples, bpf: fix to change the buffer size for read() (bsc#1051510).
- samples: mei: use /dev/mei0 instead of /dev/mei (bsc#1051510).
- sched/fair: Do not free p-&gt;numa_faults with concurrent readers (bsc#1144920).
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (bsc#1144920).
- scripts/checkstack.pl: Fix arm64 wrong or unknown architecture (bsc#1051510).
- scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE (bsc#1051510).
- scripts/decode_stacktrace: only strip base path when a prefix of the path (bsc#1051510).
- scripts/gdb: fix lx-version string output (bsc#1051510).
- scripts/git_sort/git_sort.py:
- scsi: NCR5380: Always re-enable reselection interrupt (git-fixes).
- scsi: aacraid: Fix missing break in switch statement (git-fixes).
- scsi: aacraid: Fix performance issue on logical drives (git-fixes).
- scsi: aic94xx: fix an error code in aic94xx_init() (git-fixes).
- scsi: aic94xx: fix module loading (git-fixes).
- scsi: bfa: Avoid implicit enum conversion in bfad_im_post_vendor_event (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: Remove unused functions (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_fcs_lport: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_fcs_rport: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_ioc: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: clean up a couple of indentation issues (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: convert to strlcpy/strlcat (git-fixes).
- scsi: bfa: fix calls to dma_set_mask_and_coherent() (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: no need to check return value of debugfs_create functions (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: remove ScsiResult macro (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: use dma_set_mask_and_coherent (bsc#1136496 jsc#SLE-4698).
- scsi: bnx2fc: Do not allow both a cleanup completion and abort completion for the same request (bsc#1144582).
- scsi: bnx2fc: Fix NULL dereference in error handling (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling (git-fixes).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Limit the IO size according to the FW capability (bsc#1144582).
- scsi: bnx2fc: Only put reference to io_req in bnx2fc_abts_cleanup if cleanup times out (bsc#1144582).
- scsi: bnx2fc: Redo setting source FCoE MAC (bsc#1144582).
- scsi: bnx2fc: Remove set but not used variable 'oxid' (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Separate out completion flags and variables for abort and cleanup (bsc#1144582).
- scsi: bnx2fc: Update the driver version to 2.12.10 (bsc#1144582).
- scsi: bnx2fc: fix bnx2fc_cmd refcount imbalance in send_rec (bsc#1144582).
- scsi: bnx2fc: fix bnx2fc_cmd refcount imbalance in send_srr (bsc#1144582).
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation (git-fixes).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502 jsc#SLE-4703).
- scsi: core: Fix race on creating sense cache (git-fixes).
- scsi: core: Synchronize request queue pm status only on successful resume (git-fixes).
- scsi: core: set result when the command cannot be dispatched (git-fixes).
- scsi: cxgb4i: fix incorrect spelling 'reveive' -&gt; 'receive' (bsc#1136346 jsc#SLE-4682).
- scsi: cxgb4i: get pf number from lldi-&gt;pf (bsc#1136346 jsc#SLE-4682).
- scsi: cxgb4i: validate tcp sequence number only if chip version &amp;lt;= T5 (bsc#1136346 jsc#SLE-4682).
- scsi: cxlflash: Mark expected switch fall-throughs (bsc#1148868).
- scsi: cxlflash: Prevent deadlock when adapter probe fails (git-fixes).
- scsi: esp_scsi: Track residual for PIO transfers (git-fixes) Also, mitigate kABI changes.
- scsi: fas216: fix sense buffer initialization (git-fixes).
- scsi: hisi_sas: Add support for DIX feature for v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Change SERDES_CFG init value to increase reliability of HiLink (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Disable stash for v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Fix losing directly attached disk when hot-plug (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Ignore the error code between phy down to phy up (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Issue internal abort on all relevant queues (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Reduce HISI_SAS_SGE_PAGE_CNT in size (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Reject setting programmed minimum linkrate &gt; 1.5G (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Use pci_irq_get_affinity() for v3 hw as experimental (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: change queue depth from 512 to 4096 (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: kabi fixes (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: print PHY RX errors count for later revision of v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: send primitive NOTIFY to SSP situation only (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: isci: initialize shost fully before calling scsi_add_host() (git-fixes).
- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352 jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352 jsc#SLE-4687).
- scsi: libcxgbi: update route finding logic (bsc#1136352 jsc#SLE-4687)
- scsi: libfc: fix null pointer dereference on a null lport (git-fixes).
- scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached (git-fixes).
- scsi: libsas: kABI protect struct sas_task_slow (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: libsas: only clear phy-&gt;in_shutdown after shutdown event done (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: lpfc: Add MDS driver loopback diagnostics support (bsc#1146215).
- scsi: lpfc: Add NVMe sequence level error recovery support (bsc#1146215).
- scsi: lpfc: Add first and second level hardware revisions to sysfs (bsc#1146215).
- scsi: lpfc: Add simple unlikely optimizations to reduce NVME latency (bsc#1146215).
- scsi: lpfc: Avoid unused function warnings (bsc#1148308).
- scsi: lpfc: Convert timers to use timer_setup() (bsc#1148308).
- scsi: lpfc: Default fdmi_on to on (bsc#1148308).
- scsi: lpfc: Fix ADISC reception terminating login state if a NVME (bsc#1146215).
- scsi: lpfc: Fix BlockGuard enablement on FCoE adapters (bsc#1146215).
- scsi: lpfc: Fix ELS field alignments (bsc#1146215).
- scsi: lpfc: Fix FLOGI handling across multiple link up/down (bsc#1146215).
- scsi: lpfc: Fix Max Frame Size value shown in fdmishow output (bsc#1146215).
- scsi: lpfc: Fix Oops in nvme_register with target logout/login (bsc#1146215).
- scsi: lpfc: Fix PLOGI failure with high remoteport count (bsc#1146215).
- scsi: lpfc: Fix coverity warnings (bsc#1146215).
- scsi: lpfc: Fix crash due to port reset racing vs adapter error (bsc#1146215).
- scsi: lpfc: Fix crash on driver unload in wq free (bsc#1146215).
- scsi: lpfc: Fix crash when cpu count is 1 and null irq affinity mask (bsc#1146215).
- scsi: lpfc: Fix deadlock on host_lock during cable pulls (bsc#1146215).
- scsi: lpfc: Fix devices that do not return after devloss followed by (bsc#1146215).
- scsi: lpfc: Fix discovery when target has no GID_FT information (bsc#1146215).
- scsi: lpfc: Fix error in remote port address change (bsc#1146215).
- scsi: lpfc: Fix failure to clear non-zero eq_delay after io rate (bsc#1146215).
- scsi: lpfc: Fix hang when downloading fw on port enabled for nvme (bsc#1146215).
- scsi: lpfc: Fix irq raising in lpfc_sli_hba_down (bsc#1146215).
- scsi: lpfc: Fix issuing init_vpi mbox on SLI-3 card (bsc#1146215).
- scsi: lpfc: Fix leak of ELS completions on adapter reset (bsc#1146215).
- scsi: lpfc: Fix loss of remote port after devloss due to lack of RPIs (bsc#1146215).
- scsi: lpfc: Fix null ptr oops updating lpfc_devloss_tmo via sysfs (bsc#1146215).
- scsi: lpfc: Fix nvme first burst module parameter description (bsc#1146215).
- scsi: lpfc: Fix nvme sg_seg_cnt display if HBA does not support NVME (bsc#1146215).
- scsi: lpfc: Fix nvme target mode ABTSing a received ABTS (bsc#1146215).
- scsi: lpfc: Fix oops when fewer hdwqs than cpus (bsc#1146215).
- scsi: lpfc: Fix port relogin failure due to GID_FT interaction (bsc#1146215).
- scsi: lpfc: Fix propagation of devloss_tmo setting to nvme transport (bsc#1146215).
- scsi: lpfc: Fix reported physical link speed on a disabled trunked (bsc#1146215).
- scsi: lpfc: Fix reset recovery paths that are not recovering (bsc#1144375).
- scsi: lpfc: Fix sg_seg_cnt for HBAs that do not support NVME (bsc#1146215).
- scsi: lpfc: Fix sli4 adapter initialization with MSI (bsc#1146215).
- scsi: lpfc: Fix too many sg segments spamming in kernel log (bsc#1146215).
- scsi: lpfc: Fix upcall to bsg done in non-success cases (bsc#1146215).
- scsi: lpfc: Limit xri count for kdump environment (bsc#1146215).
- scsi: lpfc: Make some symbols static (bsc#1148308).
- scsi: lpfc: Merge per-protocol WQ/CQ pairs into single per-cpu pair (bsc#1146215).
- scsi: lpfc: Merge per-protocol WQ/CQ pairs into single per-cpu pair (bsc#1146215).
- scsi: lpfc: Migrate to %px and %pf in kernel print calls (bsc#1146215).
- scsi: lpfc: Remove bg debugfs buffers (bsc#1144375).
- scsi: lpfc: Remove set but not used variable 'psli' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'fc_hdr' and 'hw_page_size' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'qp' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'tgtp' (bsc#1148308).
- scsi: lpfc: Resolve checker warning for lpfc_new_io_buf() (bsc#1144375).
- scsi: lpfc: Support dynamic unbounded SGL lists on G7 hardware (bsc#1146215).
- scsi: lpfc: Update lpfc version to 12.4.0.0 (bsc#1146215).
- scsi: lpfc: Use dma_zalloc_coherent (bsc#1148308).
- scsi: lpfc: add check for loss of ndlp when sending RRQ (bsc#1148308).
- scsi: lpfc: change snprintf to scnprintf for possible overflow (bsc#1146215).
- scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show (bsc#1148308).
- scsi: lpfc: lpfc_sli: Mark expected switch fall-throughs (bsc#1148308).
- scsi: lpfc: no need to check return value of debugfs_create functions (bsc#1148308).
- scsi: lpfc: nvme: avoid hang / use-after-free when destroying localport (bsc#1148308).
- scsi: lpfc: nvmet: avoid hang / use-after-free when destroying targetport (bsc#1148308).
- scsi: lpfc: remove NULL check before some freeing functions (bsc#1146215).
- scsi: lpfc: remove ScsiResult macro (bsc#1148308).
- scsi: lpfc: remove a bogus pci_dma_sync_single_for_device call (bsc#1148308).
- scsi: lpfc: remove null check on nvmebuf (bsc#1148308).
- scsi: lpfc: resolve lockdep warnings (bsc#1148308).
- scsi: lpfc: use sg helper to iterate over scatterlist (bsc#1148308).
- scsi: mac_scsi: Fix pseudo DMA implementation, take 2 (git-fixes).
- scsi: mac_scsi: Increase PIO/PDMA transfer length threshold (git-fixes).
- scsi: megaraid: fix out-of-bound array accesses (git-fixes).
- scsi: megaraid_sas: Fix calculation of target ID (git-fixes).
- scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (bsc#1143962).
- scsi: megaraid_sas: Release Mutex lock before OCR in case of DCMD timeout (bsc#1143962).
- scsi: mpt3sas: Determine smp affinity on per HBA basis (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode (bsc#1143738).
- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: pmcraid: do not allocate a dma coherent buffer for sense data (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: simplify pmcraid_cancel_all a bit (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: use generic DMA API (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: use sg helper to iterate over scatterlist (bsc#1135990 jsc#SLE-4709).
- scsi: prefix header search paths with $(srctree)/ (bsc#1136346 jsc#SLE-4682).
- scsi: qedf: Add debug information for unsolicited processing (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets and send fipvlan retries (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing link update AEN (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link down (bsc#1149976).
- scsi: qedf: Print message during bailout conditions (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20 (bsc#1149976).
- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: remove memset/memcpy to nfunc and use func instead (git-fixes).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedi: remove declaration of nvm_image from stack (git-fixes).
- scsi: qla2xxx: Add cleanup for PCI EEH recovery (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Add cleanup for PCI EEH recovery (bsc#1129424).
- scsi: qla2xxx: Allow NVMe IO to resume with short cable pull (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value (bsc#1143706).
- scsi: qla2xxx: Avoid that Coverity complains about dereferencing a NULL rport pointer (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qla2x00_mem_free() crashes if called twice (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory (git-fixes).
- scsi: qla2xxx: Change a stack variable into a static const variable (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Change the return type of qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Change the return type of qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary image fails (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size (bsc#1143706).
- scsi: qla2xxx: Check the size of firmware data structures at compile time (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Cleanup fcport memory to prevent leak (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Cleanup redundant qla2x00_abort_all_cmds during unload (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Complain if a command is released that is owned by the firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the completion path (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times out (bsc#1143706).
- scsi: qla2xxx: Complain loudly about reference count underflow (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Correct error handling during initialization failures (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument const (bsc#1143706).
- scsi: qla2xxx: Declare local symbols static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla24xx_build_scsi_crc_2_iocbs() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla2x00_find_new_loop_id() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument const (bsc#1143706).
- scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1143706).
- scsi: qla2xxx: Fix DMA unmap leak (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NVMe port discovery after a short device port loss (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Fix a format specifier (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a format specifier (git-fixes).
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Fix a small typo in qla_bsg.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix abort timeout race condition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix an endian bug in fcpcmd_is_corrupted() (git-fixes).
- scsi: qla2xxx: Fix comment alignment in qla_bsg.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix device staying in blocked state (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix device staying in blocked state (git-fixes).
- scsi: qla2xxx: Fix different size DMA Alloc/Unmap (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd() (git-fixes).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix formatting of pointer types (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix fw dump corruption (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hang in fcport delete path (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hardirq-unsafe locking (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hardlockup in abort command during driver remove (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver (bsc#1143706).
- scsi: qla2xxx: Fix possible fcport null-pointer dereferences (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix premature timer expiration (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work() (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Further limit FLASH region write access from SysFS (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance (bsc#1143706).
- scsi: qla2xxx: Include the &amp;lt;asm/unaligned.h&gt; header file from qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Increase the max_sgl_segments to 1024 (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Increase the size of the mailbox arrays from 4 to 8 (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (bsc#1143706).
- scsi: qla2xxx: Insert spaces where required (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Introduce the dsd32 and dsd64 data structures (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (bsc#1143706).
- scsi: qla2xxx: Leave a blank line after declarations (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI command context pointer (bsc#1143706).
- scsi: qla2xxx: Log the status code if a firmware command fails (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs use little endian (bsc#1143706).
- scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_mem_free() easier to verify (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qla2x00_process_response_queue() easier to read (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Move qla2x00_clear_loop_id() from qla_inline.h into qla_init.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_is_reserved_id() from qla_inline.h into qla_init.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_set_fcport_state() from a .h into a .c file (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_set_reserved_loop_ids() definition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move the &amp;lt;linux/io-64-nonatomic-lo-hi.h&gt; include directive (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move the port_state_str definition from a .h to a .c file (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Pass little-endian values to the firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code (bsc#1143706).
- scsi: qla2xxx: Reduce the number of forward declarations (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Reject EH_{abort|device_reset|target_request} (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a comment that refers to the SCSI host lock (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Remove qla_tgt_cmd.data_work and qla_tgt_cmd.data_work_free (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove qla_tgt_cmd.released (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts (bsc#1143706).
- scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove two superfluous casts (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove unnecessary locking from the target code (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove unnecessary null check (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock() (bsc#1143706).
- scsi: qla2xxx: Remove useless set memory to zero use memset() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Replace vmalloc + memset with vzalloc (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox command fails (bsc#1143706).
- scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Retry fabric Scan on IOCB queue full (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id() (bsc#1143706).
- scsi: qla2xxx: Set the SCSI command result before calling the command done (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Set the qpair in SRB to NULL when SRB is released (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Silence Successful ELS IOCB message (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_send_term_imm_notif() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Skip FW dump on LOOP initialization error (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer overflow (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Uninline qla2x00_init_timer() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Unregister chrdev if module initialization fails (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Unregister chrdev if module initialization fails (git-fixes).
- scsi: qla2xxx: Unregister resources in the opposite order of the registration order (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.16-k (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.18-k (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.19-k (bsc#1143706).
- scsi: qla2xxx: Update two source code comments (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use ARRAY_SIZE() in the definition of QLA_LAST_SPEED (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use Correct index for Q-Pair array (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use __le64 instead of uint32_t[2] for sending DMA addresses to firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use common update-firmware-options routine for ISP27xx+ (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use get/put_unaligned where appropriate (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy() and strncpy() (bsc#1143706).
- scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation (bsc#1143706).
- scsi: qla2xxx: Use tabs to indent code (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime (bsc#1143706).
- scsi: qla2xxx: cleanup trace buffer initialization (bsc#1134476).
- scsi: qla2xxx: fix spelling mistake 'alredy' -&gt; 'already' (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: on session delete, return nvme cmd (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (bsc#1134476).
- scsi: qla2xxx: remove double assignment in qla2x00_update_fcport (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: target: Fix offline port handling and host reset handling (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla4xxx: avoid freeing unallocated dma memory (git-fixes).
- scsi: raid_attrs: fix unused variable warning (git-fixes).
- scsi: sas: Convert timers to use timer_setup() (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: scsi_dh_alua: Fix possible null-ptr-deref (git-fixes).
- scsi: scsi_transport_fc: nvme: display FC-NVMe port roles (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: sd: Defer spinning up drive while SANITIZE is in progress (git-fixes).
- scsi: sd: Fix a race between closing an sd device and sd I/O (git-fixes).
- scsi: sd: Fix cache_type_store() (git-fixes).
- scsi: sd: Optimal I/O size should be a multiple of physical block size (git-fixes).
- scsi: sd: Quiesce warning if device does not report optimal I/O size (git-fixes).
- scsi: sd: use mempool for discard special page (git-fixes).
- scsi: sd_zbc: Fix potential memory leak (git-fixes).
- scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous() (git-fixes).
- scsi: sr: Avoid that opening a CD-ROM hangs with runtime power management enabled (git-fixes).
- scsi: target: iscsi: cxgbit: add missing spin_lock_init() (bsc#1136349 jsc#SLE-4685).
- scsi: tcm_qla2xxx: Minimize #include directives (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: ufs: Avoid runtime suspend possibly being blocked forever (git-fixes).
- scsi: ufs: Check that space was properly alloced in copy_query_response (git-fixes).
- scsi: ufs: Fix NULL pointer dereference in ufshcd_config_vreg_hpm() (git-fixes).
- scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value (git-fixes).
- scsi: ufs: fix wrong command type of UTRD for UFSHCI v2.1 (git-fixes).
- scsi: use dma_get_cache_alignment() as minimum DMA alignment (git-fixes).
- scsi: virtio_scsi: do not send sc payload with tmfs (git-fixes).
- sctp: change to hold sk after auth shkey is created successfully (networking-stable-19_07_02).
- sdhci-fujitsu: add support for setting the CMD_DAT_DELAY attribute (bsc#1145256).
- serial: 8250: Fix TX interrupt handling condition (bsc#1051510).
- signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig (bsc#1144333).
- sis900: fix TX completion (bsc#1051510).
- sky2: Disable MSI on ASUS P6T (bsc#1142496).
- smb2: fix missing files in root share directory listing (bsc#1112907, bsc#1144333).
- smb2: fix typo in definition of a few error flags (bsc#1144333).
- smb2: fix uninitialized variable bug in smb2_ioctl_query_info (bsc#1144333).
- smb3 - clean up debug output displaying network interfaces (bsc#1144333).
- smb3.11: replace a 4 with server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- smb3: Add SMB3.1.1 GCM to negotiated crypto algorigthms (bsc#1144333).
- smb3: Add debug message later in smb2/smb3 reconnect path (bsc#1144333).
- smb3: Add defines for new negotiate contexts (bsc#1144333).
- smb3: Add dynamic trace points for various compounded smb3 ops (bsc#1144333).
- smb3: Add ftrace tracepoints for improved SMB3 debugging (bsc#1144333).
- smb3: Add handling for different FSCTL access flags (bsc#1144333).
- smb3: Add posix create context for smb3.11 posix mounts (bsc#1144333).
- smb3: Add protocol structs for change notify support (bsc#1144333).
- smb3: Add support for multidialect negotiate (SMB2.1 and later) (bsc#1051510, bsc#1144333).
- smb3: Add tracepoints for read, write and query_dir enter (bsc#1144333).
- smb3: Allow SMB3 FSCTL queries to be sent to server from tools (bsc#1144333).
- smb3: Allow persistent handle timeout to be configurable on mount (bsc#1144333).
- smb3: Allow query of symlinks stored as reparse points (bsc#1144333).
- smb3: Backup intent flag missing for directory opens with backupuid mounts (bsc#1051510, bsc#1144333).
- smb3: Backup intent flag missing from compounded ops (bsc#1144333).
- smb3: Clean up query symlink when reparse point (bsc#1144333).
- smb3: Cleanup license mess (bsc#1144333).
- smb3: Do not ignore O_SYNC/O_DSYNC and O_DIRECT flags (bsc#1085536, bsc#1144333).
- smb3: Do not send SMB3 SET_INFO if nothing changed (bsc#1051510, bsc#1144333).
- smb3: Fix 3.11 encryption to Windows and handle encrypted smb3 tcon (bsc#1051510, bsc#1144333).
- smb3: Fix SMB3.1.1 guest mounts to Samba (bsc#1051510, bsc#1144333).
- smb3: Fix deadlock in validate negotiate hits reconnect (bsc#1144333).
- smb3: Fix endian warning (bsc#1144333, bsc#1137884).
- smb3: Fix enumerating snapshots to Azure (bsc#1144333).
- smb3: Fix length checking of SMB3.11 negotiate request (bsc#1051510, bsc#1144333).
- smb3: Fix mode on mkdir on smb311 mounts (bsc#1144333).
- smb3: Fix potential memory leak when processing compound chain (bsc#1144333).
- smb3: Fix rmdir compounding regression to strict servers (bsc#1144333).
- smb3: Fix root directory when server returns inode number of zero (bsc#1051510, bsc#1144333).
- smb3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL (bsc#1144333).
- smb3: Log at least once if tree connect fails during reconnect (bsc#1144333).
- smb3: Number of requests sent should be displayed for SMB3 not just CIFS (bsc#1144333).
- smb3: Send netname context during negotiate protocol (bsc#1144333).
- smb3: Track total time spent on roundtrips for each SMB3 command (bsc#1144333).
- smb3: Update POSIX negotiate context with POSIX ctxt GUID (bsc#1144333).
- smb3: Validate negotiate request must always be signed (bsc#1064597, bsc#1144333).
- smb3: Warn user if trying to sign connection that authenticated as guest (bsc#1085536, bsc#1144333).
- smb3: add additional ftrace entry points for entry/exit to cifs.ko (bsc#1144333).
- smb3: add credits we receive from oplock/break PDUs (bsc#1144333).
- smb3: add debug for unexpected mid cancellation (bsc#1144333).
- smb3: add define for id for posix create context and corresponding struct (bsc#1144333).
- smb3: add dynamic trace point for query_info_enter/done (bsc#1144333).
- smb3: add dynamic trace point for smb3_cmd_enter (bsc#1144333).
- smb3: add dynamic tracepoint for timeout waiting for credits (bsc#1144333).
- smb3: add dynamic tracepoints for simple fallocate and zero range (bsc#1144333).
- smb3: add missing read completion trace point (bsc#1144333).
- smb3: add module alias for smb3 to cifs.ko (bsc#1144333).
- smb3: add new mount option to retrieve mode from special ACE (bsc#1144333).
- smb3: add reconnect tracepoints (bsc#1144333).
- smb3: add smb3.1.1 to default dialect list (bsc#1144333).
- smb3: add support for posix negotiate context (bsc#1144333).
- smb3: add support for statfs for smb3.1.1 posix extensions (bsc#1144333).
- smb3: add trace point for tree connection (bsc#1144333).
- smb3: add tracepoint for sending lease break responses to server (bsc#1144333).
- smb3: add tracepoint for session expired or deleted (bsc#1144333).
- smb3: add tracepoint for slow responses (bsc#1144333).
- smb3: add tracepoint to catch cases where credit refund of failed op overlaps reconnect (bsc#1144333).
- smb3: add tracepoints for query dir (bsc#1144333).
- smb3: add tracepoints for smb2/smb3 open (bsc#1144333).
- smb3: add way to control slow response threshold for logging and stats (bsc#1144333).
- smb3: allow more detailed protocol info on open files for debugging (bsc#1144333).
- smb3: allow posix mount option to enable new SMB311 protocol extensions (bsc#1144333).
- smb3: allow previous versions to be mounted with snapshot= mount parm (bsc#1144333).
- smb3: allow stats which track session and share reconnects to be reset (bsc#1051510, bsc#1144333).
- smb3: check for and properly advertise directory lease support (bsc#1051510, bsc#1144333).
- smb3: create smb3 equivalent alias for cifs pseudo-xattrs (bsc#1144333).
- smb3: directory sync should not return an error (bsc#1051510, bsc#1144333).
- smb3: display bytes_read and bytes_written in smb3 stats (bsc#1144333).
- smb3: display security information in /proc/fs/cifs/DebugData more accurately (bsc#1144333).
- smb3: display session id in debug data (bsc#1144333).
- smb3: display stats counters for number of slow commands (bsc#1144333).
- smb3: display volume serial number for shares in /proc/fs/cifs/DebugData (bsc#1144333).
- smb3: do not allow insecure cifs mounts when using smb3 (bsc#1144333).
- smb3: do not attempt cifs operation in smb3 query info error path (bsc#1051510, bsc#1144333).
- smb3: do not display confusing message on mount to Azure servers (bsc#1144333).
- smb3: do not display empty interface list (bsc#1144333).
- smb3: do not request leases in symlink creation and query (bsc#1051510, bsc#1144333).
- smb3: do not send compression info by default (bsc#1144333).
- smb3: enumerating snapshots was leaving part of the data off end (bsc#1051510, bsc#1144333).
- smb3: fill in statfs fsid and correct namelen (bsc#1112905, bsc#1144333).
- smb3: fix bytes_read statistics (bsc#1144333).
- smb3: fix corrupt path in subdirs on smb311 with posix (bsc#1144333).
- smb3: fix large reads on encrypted connections (bsc#1144333).
- smb3: fix lease break problem introduced by compounding (bsc#1144333).
- smb3: fix minor debug output for CONFIG_CIFS_STATS (bsc#1144333).
- smb3: fix redundant opens on root (bsc#1144333).
- smb3: fix reset of bytes read and written stats (bsc#1112906, bsc#1144333).
- smb3: fix various xid leaks (bsc#1051510, bsc#1144333).
- smb3: for kerberos mounts display the credential uid used (bsc#1144333).
- smb3: handle new statx fields (bsc#1085536, bsc#1144333).
- smb3: if max_credits is specified then display it in /proc/mounts (bsc#1144333).
- smb3: if server does not support posix do not allow posix mount option (bsc#1144333).
- smb3: improve dynamic tracing of open and posix mkdir (bsc#1144333).
- smb3: increase initial number of credits requested to allow write (bsc#1144333).
- smb3: make default i/o size for smb3 mounts larger (bsc#1144333).
- smb3: minor cleanup of compound_send_recv (bsc#1144333).
- smb3: minor debugging clarifications in rfc1001 len processing (bsc#1144333).
- smb3: minor missing defines relating to reparse points (bsc#1144333).
- smb3: missing defines and structs for reparse point handling (bsc#1144333).
- smb3: note that smb3.11 posix extensions mount option is experimental (bsc#1144333).
- smb3: on kerberos mount if server does not specify auth type use krb5 (bsc#1051510, bsc#1144333).
- smb3: on reconnect set PreviousSessionId field (bsc#1112899, bsc#1144333).
- smb3: optimize open to not send query file internal info (bsc#1144333).
- smb3: passthru query info does not check for SMB3 FSCTL passthru (bsc#1144333).
- smb3: print tree id in debugdata in proc to be able to help logging (bsc#1144333).
- smb3: query inode number on open via create context (bsc#1144333).
- smb3: remove noisy warning message on mount (bsc#1129664, bsc#1144333).
- smb3: remove per-session operations from per-tree connection stats (bsc#1144333).
- smb3: rename encryption_required to smb3_encryption_required (bsc#1144333).
- smb3: request more credits on normal (non-large read/write) ops (bsc#1144333).
- smb3: request more credits on tree connect (bsc#1144333).
- smb3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (bsc#1144333).
- smb3: send CAP_DFS capability during session setup (bsc#1144333).
- smb3: send backup intent on compounded query info (bsc#1144333).
- smb3: show number of current open files in /proc/fs/cifs/Stats (bsc#1144333).
- smb3: simplify code by removing CONFIG_CIFS_SMB311 (bsc#1051510, bsc#1144333).
- smb3: smbdirect no longer experimental (bsc#1144333).
- smb3: snapshot mounts are read-only and make sure info is displayable about the mount (bsc#1144333).
- smb3: track the instance of each session for debugging (bsc#1144333).
- smb3: trivial cleanup to smb2ops.c (bsc#1144333).
- smb3: update comment to clarify enumerating snapshots (bsc#1144333).
- smb3: update default requested iosize to 4MB from 1MB for recent dialects (bsc#1144333).
- smb: Add vers=3.0.2 as a valid option for SMBv3.0.2 (bsc#1144333).
- smb: Cleanup some minor endian issues in smb3 rdma (bsc#1144333).
- smb: Do not log confusing message on reconnect by default (bsc#1129664, bsc#1144333).
- smb: Do not log expected error on DFS referral request (bsc#1051510, bsc#1144333).
- smb: Fix SMB3.1.1 guest authentication to Samba (bsc#1085536, bsc#1144333).
- smb: Fix encryption labels and lengths for SMB3.1.1 (bsc#1085536, bsc#1144333).
- smb: Fix match_server check to allow for auto dialect negotiate (bsc#1144333).
- smb: Fix warning messages when mounting to older servers (bsc#1144333).
- smb: SMB3.1.1 dialect is no longer experimental (bsc#1051510, bsc#1144333).
- smb: SMB3.1.1: Add GCM crypto to the encrypt and decrypt functions (bsc#1144333).
- smb: SMB311: Fix reconnect (bsc#1051510, bsc#1144333).
- smb: SMB311: Improve checking of negotiate security contexts (bsc#1051510, bsc#1144333).
- smb: Tree connect for SMB3.1.1 must be signed for non-encrypted shares (bsc#1051510, bsc#1144333).
- smb: Validate negotiate (to protect against downgrade) even if signing off (bsc#1085536, bsc#1144333).
- smb: fix leak of validate negotiate info response buffer (bsc#1064597, bsc#1144333).
- smb: fix validate negotiate info uninitialised memory use (bsc#1064597, bsc#1144333).
- smbd: Make upper layer decide when to destroy the transport (bsc#1144333).
- smpboot: Place the __percpu annotation correctly (git fixes).
- soc: rockchip: power-domain: Add a sanity check on pd-&gt;num_clks (bsc#1144718,bsc#1144813).
- soc: rockchip: power-domain: Use of_clk_get_parent_count() instead of open coding (bsc#1144718,bsc#1144813).
- soc: rockchip: power-domain: use clk_bulk APIs (bsc#1144718,bsc#1144813).
- sound: fix a memory leak bug (bsc#1051510).
- spi: bcm2835aux: fix corruptions for longer spi transfers (bsc#1051510).
- spi: bcm2835aux: remove dangerous uncontrolled read of fifo (bsc#1051510).
- spi: bcm2835aux: unifying code between polling and interrupt driven code (bsc#1051510).
- st21nfca_connectivity_event_received: null check the allocation (bsc#1051510).
- st_nci_hci_connectivity_event_received: null check the allocation (bsc#1051510).
- staging: comedi: dt3000: Fix rounding up of timer divisor (bsc#1051510).
- staging: comedi: dt3000: Fix signed integer overflow 'divider * base' (bsc#1051510).
- staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work (bsc#1111666).
- supported.conf: Add missing modules (bsc#1066369).
- supported.conf: Remove duplicate drivers/ata/libahci_platform
- supported.conf: Remove duplicate entries
- supported.conf: Sort alphabetically, align comments.
- supported.conf: Sort alphabetically, align comments.
- tcp: Reset bytes_acked and bytes_received when disconnecting (networking-stable-19_07_25).
- test_firmware: fix a memory leak bug (bsc#1051510).
- tipc: change to use register_pernet_device (networking-stable-19_07_02).
- tools: bpftool: close prog FD before exit on showing a single program (bsc#1109837).
- tools: bpftool: fix error message (prog -&gt; object) (bsc#1109837).
- tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete (bsc#1082555).
- tpm: Fix Tpm 1.2 Shutdown sequence to prevent future TPM operations (bsc#1082555).
- tpm: Fix off-by-one when reading binary_bios_measurements (bsc#1082555).
- tpm: Unify the send callback behaviour (bsc#1082555).
- tpm: vtpm_proxy: Suppress error logging when in closed state (bsc#1082555).
- tracing: Fix header include guards in trace event headers (bsc#1144474).
- tracing: store path instead of inode (bsc#1120046, bsc#1146141).
- treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 231 (bsc#1144333).
- tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop (bsc#1051510).
- tty/serial: digicolor: Fix digicolor-usart already registered warning (bsc#1051510).
- tty: max310x: Fix invalid baudrate divisors calculator (bsc#1051510).
- tty: serial: msm_serial: avoid system lockup condition (bsc#1051510).
- tua6100: Avoid build warnings (bsc#1051510).
- tun: mark small packets as owned by the tap sock (bsc#1109837).
- tun: wake up waitqueues after IFF_UP is set (networking-stable-19_07_02).
- udf: Fix incorrect final NOT_ALLOCATED (hole) extent length (bsc#1148617).
- update internal version number for cifs.ko (bsc#1144333).
- usb-storage: Add new JMS567 revision to unusual_devs (bsc#1051510).
- usb: CDC: fix sanity checks in CDC union parser (bsc#1142635).
- usb: Handle USB3 remote wakeup for Lpm enabled devices correctly (bsc#1051510).
- usb: cdc-acm: make sure a refcount is taken early enough (bsc#1142635).
- usb: cdc-wdm: fix race between write and disconnect due to flag abuse (bsc#1051510).
- usb: chipidea: udc: do not do hardware access if gadget has stopped (bsc#1051510).
- usb: core: Fix races in character device registration and deregistraion (bsc#1051510).
- usb: core: hub: Disable hub-initiated U1/U2 (bsc#1051510).
- usb: gadget: composite: Clear 'suspended' on reset/disconnect (bsc#1051510).
- usb: gadget: udc: renesas_usb3: Fix sysfs interface of 'role' (bsc#1142635).
- usb: host: fotg2: restart hcd after port reset (bsc#1051510).
- usb: host: ohci: fix a race condition between shutdown and irq (bsc#1051510).
- usb: host: xhci-rcar: Fix timeout in xhci_suspend() (bsc#1051510).
- usb: host: xhci: rcar: Fix typo in compatible string matching (bsc#1051510).
- usb: iowarrior: fix deadlock on disconnect (bsc#1051510).
- usb: serial: option: Add Motorola modem UARTs (bsc#1051510).
- usb: serial: option: Add support for ZTE MF871A (bsc#1051510).
- usb: serial: option: add D-Link DWM-222 device ID (bsc#1051510).
- usb: serial: option: add the BroadMobi BM818 card (bsc#1051510).
- usb: storage: ums-realtek: Update module parameter description for auto_delink_en (bsc#1051510).
- usb: storage: ums-realtek: Whitelist auto-delink support (bsc#1051510).
- usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests (bsc#1111666).
- usb: typec: tcpm: free log buf memory when remove debug file (bsc#1111666).
- usb: typec: tcpm: remove tcpm dir if no children (bsc#1111666).
- usb: usbfs: fix double-free of usb memory upon submiturb error (bsc#1051510).
- usb: wusbcore: fix unbalanced get/put cluster_id (bsc#1051510).
- usb: yurex: Fix use-after-free in yurex_delete (bsc#1051510).
- vfs: fix page locking deadlocks when deduping files (bsc#1148619).
- virtio/s390: fix race on airq_areas (bsc#1145357).
- vmci: Release resource if the work is already queued (bsc#1051510).
- vrf: make sure skb-&gt;data contains ip header to make routing (networking-stable-19_07_25).
- watchdog: bcm2835_wdt: Fix module autoload (bsc#1051510).
- watchdog: core: fix null pointer dereference when releasing cdev (bsc#1051510).
- watchdog: f71808e_wdt: fix F81866 bit operation (bsc#1051510).
- watchdog: fix compile time error of pretimeout governors (bsc#1051510).
- wimax/i2400m: fix a memory leak bug (bsc#1051510).
- x86/asm: Remove dead __GNUC__ conditionals (bsc#1112178).
- x86/boot: Fix memory leak in default_get_smp_config() (bsc#1114279).
- x86/dma: Get rid of iommu_pass_through (bsc#1136039).
- x86/entry/64/compat: Fix stack switching for XEN PV (bsc#1108382).
- x86/microcode: Fix the microcode load on CPU hotplug for real (bsc#1114279).
- x86/mm: Check for pfn instead of page in vmalloc_sync_one() (bsc#1118689).
- x86/mm: Sync also unmappings in vmalloc_sync_all() (bsc#1118689).
- x86/resctrl: Prevent NULL pointer dereference when local MBM is disabled (bsc#1112178).
- x86/speculation/mds: Apply more accurate check on hypervisor platform (bsc#1114279).
- x86/speculation: Allow guests to use SSBD even if host does not (bsc#1114279).
- x86/unwind: Add hardcoded ORC entry for NULL (bsc#1114279).
- x86/unwind: Handle NULL pointer calls better in frame unwinder (bsc#1114279).
- xdp: unpin xdp umem pages in error path (bsc#1109837).
- xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() (bsc#1065600).
- xfrm: Fix NULL pointer dereference in xfrm_input when skb_dst_force clears the dst_entry (bsc#1143300).
- xfrm: Fix NULL pointer dereference when skb_dst_force clears the dst_entry (bsc#1143300).
- xfrm: Fix bucket count reported to userspace (bsc#1143300).
- xfrm: Fix error return code in xfrm_output_one() (bsc#1143300).
- xfs: do not crash on null attr fork xfs_bmapi_read (bsc#1148035).
- xfs: do not trip over uninitialized buffer on extent read of corrupted inode (bsc#1149053).
- xfs: dump transaction usage details on log reservation overrun (bsc#1145235).
- xfs: eliminate duplicate icreate tx reservation functions (bsc#1145235).
- xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (bsc#1148032).
- xfs: fix semicolon.cocci warnings (bsc#1145235).
- xfs: fix up agi unlinked list reservations (bsc#1145235).
- xfs: include an allocfree res for inobt modifications (bsc#1145235).
- xfs: include inobt buffers in ifree tx log reservation (bsc#1145235).
- xfs: print transaction log reservation on overrun (bsc#1145235).
- xfs: refactor inode chunk alloc/free tx reservation (bsc#1145235).
- xfs: refactor xlog_cil_insert_items() to facilitate transaction dump (bsc#1145235).
- xfs: remove more ondisk directory corruption asserts (bsc#1148034).
- xfs: separate shutdown from ticket reservation print helper (bsc#1145235).
- xfs: truncate transaction does not modify the inobt (bsc#1145235).
- {nl,mac}80211: fix interface combinations on crypto controlled devices (bsc#1111666).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-20"/>
	<updated date="2019-09-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1047238">SUSE bug 1047238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050911">SUSE bug 1050911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054914">SUSE bug 1054914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056686">SUSE bug 1056686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060662">SUSE bug 1060662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061843">SUSE bug 1061843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064597">SUSE bug 1064597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064701">SUSE bug 1064701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066369">SUSE bug 1066369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071009">SUSE bug 1071009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071306">SUSE bug 1071306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078248">SUSE bug 1078248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085536">SUSE bug 1085536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085539">SUSE bug 1085539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086103">SUSE bug 1086103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087092">SUSE bug 1087092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090734">SUSE bug 1090734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091171">SUSE bug 1091171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093205">SUSE bug 1093205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102097">SUSE bug 1102097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104902">SUSE bug 1104902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106061">SUSE bug 1106061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106284">SUSE bug 1106284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106434">SUSE bug 1106434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108382">SUSE bug 1108382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112894">SUSE bug 1112894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112899">SUSE bug 1112899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112902">SUSE bug 1112902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112903">SUSE bug 1112903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112905">SUSE bug 1112905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112906">SUSE bug 1112906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112907">SUSE bug 1112907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114542">SUSE bug 1114542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118689">SUSE bug 1118689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119086">SUSE bug 1119086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120046">SUSE bug 1120046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120876">SUSE bug 1120876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120902">SUSE bug 1120902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123105">SUSE bug 1123105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123959">SUSE bug 1123959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124370">SUSE bug 1124370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129424">SUSE bug 1129424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129519">SUSE bug 1129519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129664">SUSE bug 1129664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131107">SUSE bug 1131107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131281">SUSE bug 1131281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131489">SUSE bug 1131489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131565">SUSE bug 1131565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134291">SUSE bug 1134291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134476">SUSE bug 1134476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134881">SUSE bug 1134881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134882">SUSE bug 1134882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135219">SUSE bug 1135219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135897">SUSE bug 1135897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135990">SUSE bug 1135990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136039">SUSE bug 1136039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136261">SUSE bug 1136261</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136346">SUSE bug 1136346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136349">SUSE bug 1136349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136352">SUSE bug 1136352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136496">SUSE bug 1136496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136498">SUSE bug 1136498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136502">SUSE bug 1136502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136682">SUSE bug 1136682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137322">SUSE bug 1137322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137323">SUSE bug 1137323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137884">SUSE bug 1137884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138099">SUSE bug 1138099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138100">SUSE bug 1138100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138539">SUSE bug 1138539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139020">SUSE bug 1139020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139021">SUSE bug 1139021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139101">SUSE bug 1139101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139500">SUSE bug 1139500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140012">SUSE bug 1140012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140426">SUSE bug 1140426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140487">SUSE bug 1140487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141340">SUSE bug 1141340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141450">SUSE bug 1141450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141543">SUSE bug 1141543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141554">SUSE bug 1141554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142019">SUSE bug 1142019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142076">SUSE bug 1142076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142109">SUSE bug 1142109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142117">SUSE bug 1142117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142118">SUSE bug 1142118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142119">SUSE bug 1142119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142496">SUSE bug 1142496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142541">SUSE bug 1142541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142701">SUSE bug 1142701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142857">SUSE bug 1142857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143300">SUSE bug 1143300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143331">SUSE bug 1143331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143466">SUSE bug 1143466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143738">SUSE bug 1143738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143765">SUSE bug 1143765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143841">SUSE bug 1143841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143843">SUSE bug 1143843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143962">SUSE bug 1143962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144123">SUSE bug 1144123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144375">SUSE bug 1144375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144474">SUSE bug 1144474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144518">SUSE bug 1144518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144582">SUSE bug 1144582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144718">SUSE bug 1144718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144813">SUSE bug 1144813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144880">SUSE bug 1144880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144886">SUSE bug 1144886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144912">SUSE bug 1144912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144920">SUSE bug 1144920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144979">SUSE bug 1144979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145010">SUSE bug 1145010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145018">SUSE bug 1145018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145051">SUSE bug 1145051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145059">SUSE bug 1145059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145189">SUSE bug 1145189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145235">SUSE bug 1145235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145256">SUSE bug 1145256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145300">SUSE bug 1145300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145302">SUSE bug 1145302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145357">SUSE bug 1145357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145388">SUSE bug 1145388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145389">SUSE bug 1145389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145390">SUSE bug 1145390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145391">SUSE bug 1145391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145392">SUSE bug 1145392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145393">SUSE bug 1145393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145394">SUSE bug 1145394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145395">SUSE bug 1145395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145396">SUSE bug 1145396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145397">SUSE bug 1145397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145408">SUSE bug 1145408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145409">SUSE bug 1145409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145446">SUSE bug 1145446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145661">SUSE bug 1145661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145678">SUSE bug 1145678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145687">SUSE bug 1145687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145920">SUSE bug 1145920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145922">SUSE bug 1145922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145934">SUSE bug 1145934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145937">SUSE bug 1145937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145940">SUSE bug 1145940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145941">SUSE bug 1145941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145942">SUSE bug 1145942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145946">SUSE bug 1145946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146074">SUSE bug 1146074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146084">SUSE bug 1146084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146141">SUSE bug 1146141</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146163">SUSE bug 1146163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146215">SUSE bug 1146215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146285">SUSE bug 1146285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146346">SUSE bug 1146346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146351">SUSE bug 1146351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146352">SUSE bug 1146352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146361">SUSE bug 1146361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146368">SUSE bug 1146368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146376">SUSE bug 1146376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146378">SUSE bug 1146378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146381">SUSE bug 1146381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146391">SUSE bug 1146391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146399">SUSE bug 1146399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146413">SUSE bug 1146413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146425">SUSE bug 1146425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146516">SUSE bug 1146516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146524">SUSE bug 1146524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146526">SUSE bug 1146526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146529">SUSE bug 1146529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146531">SUSE bug 1146531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146543">SUSE bug 1146543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146547">SUSE bug 1146547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146550">SUSE bug 1146550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146575">SUSE bug 1146575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146589">SUSE bug 1146589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146678">SUSE bug 1146678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146938">SUSE bug 1146938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148031">SUSE bug 1148031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148032">SUSE bug 1148032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148033">SUSE bug 1148033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148034">SUSE bug 1148034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148035">SUSE bug 1148035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148093">SUSE bug 1148093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148133">SUSE bug 1148133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148192">SUSE bug 1148192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148196">SUSE bug 1148196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148198">SUSE bug 1148198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148202">SUSE bug 1148202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148219">SUSE bug 1148219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148297">SUSE bug 1148297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148303">SUSE bug 1148303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148308">SUSE bug 1148308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148363">SUSE bug 1148363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148379">SUSE bug 1148379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148394">SUSE bug 1148394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148527">SUSE bug 1148527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148570">SUSE bug 1148570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148574">SUSE bug 1148574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148616">SUSE bug 1148616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148617">SUSE bug 1148617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148619">SUSE bug 1148619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148698">SUSE bug 1148698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148859">SUSE bug 1148859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149053">SUSE bug 1149053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149083">SUSE bug 1149083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149104">SUSE bug 1149104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149105">SUSE bug 1149105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149106">SUSE bug 1149106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149197">SUSE bug 1149197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149214">SUSE bug 1149214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149224">SUSE bug 1149224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149325">SUSE bug 1149325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149376">SUSE bug 1149376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149413">SUSE bug 1149413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149418">SUSE bug 1149418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149424">SUSE bug 1149424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149522">SUSE bug 1149522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149527">SUSE bug 1149527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149539">SUSE bug 1149539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149552">SUSE bug 1149552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149591">SUSE bug 1149591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149602">SUSE bug 1149602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149612">SUSE bug 1149612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149626">SUSE bug 1149626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149652">SUSE bug 1149652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149713">SUSE bug 1149713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149940">SUSE bug 1149940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149976">SUSE bug 1149976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150025">SUSE bug 1150025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150033">SUSE bug 1150033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150112">SUSE bug 1150112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150562">SUSE bug 1150562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150727">SUSE bug 1150727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150860">SUSE bug 1150860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150861">SUSE bug 1150861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150933">SUSE bug 1150933</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-18551/">CVE-2017-18551</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20976/">CVE-2018-20976</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-21008/">CVE-2018-21008</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10207/">CVE-2019-10207</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14814/">CVE-2019-14814</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14815/">CVE-2019-14815</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14816/">CVE-2019-14816</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14835/">CVE-2019-14835</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15030/">CVE-2019-15030</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15031/">CVE-2019-15031</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15090/">CVE-2019-15090</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15098/">CVE-2019-15098</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15099/">CVE-2019-15099</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15117/">CVE-2019-15117</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15118/">CVE-2019-15118</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15211/">CVE-2019-15211</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-15212/">CVE-2019-15212</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15214/">CVE-2019-15214</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15215/">CVE-2019-15215</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15216/">CVE-2019-15216</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15217/">CVE-2019-15217</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15218/">CVE-2019-15218</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15219/">CVE-2019-15219</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15220/">CVE-2019-15220</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15221/">CVE-2019-15221</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15222/">CVE-2019-15222</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15239/">CVE-2019-15239</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15290/">CVE-2019-15290</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15292/">CVE-2019-15292</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15538/">CVE-2019-15538</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15666/">CVE-2019-15666</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15902/">CVE-2019-15902</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15917/">CVE-2019-15917</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15919/">CVE-2019-15919</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15920/">CVE-2019-15920</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15921/">CVE-2019-15921</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15924/">CVE-2019-15924</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15926/">CVE-2019-15926</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-15927/">CVE-2019-15927</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9456/">CVE-2019-9456</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497048" comment="reiserfs-kmp-default-4.12.14-197.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138292" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1131291" ref_url="https://bugzilla.suse.com/1131291" source="BUGZILLA"/>
		<reference ref_id="1150003" ref_url="https://bugzilla.suse.com/1150003" source="BUGZILLA"/>
		<reference ref_id="1150250" ref_url="https://bugzilla.suse.com/1150250" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1547" ref_url="https://www.suse.com/security/cve/CVE-2019-1547/" source="CVE"/>
		<reference ref_id="CVE-2019-1563" ref_url="https://www.suse.com/security/cve/CVE-2019-1563/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2561-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005990.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

OpenSSL Security Advisory [10 September 2019]

* CVE-2019-1547: Added EC_GROUP_set_generator side channel attack avoidance. (bsc#1150003)
* CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key (bsc#1150250)

In addition fixed invalid curve attacks by validating that an EC point lies on the curve (bsc#1131291).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-04"/>
	<updated date="2019-10-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1131291">SUSE bug 1131291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150003">SUSE bug 1150003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150250">SUSE bug 1150250</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1547/">CVE-2019-1547</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1563/">CVE-2019-1563</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496999" comment="libopenssl-1_0_0-devel-1.0.2p-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497000" comment="libopenssl1_0_0-1.0.2p-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497001" comment="openssl-1_0_0-1.0.2p-3.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138293" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1054914" ref_url="https://bugzilla.suse.com/1054914" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1104967" ref_url="https://bugzilla.suse.com/1104967" source="BUGZILLA"/>
		<reference ref_id="1109158" ref_url="https://bugzilla.suse.com/1109158" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1119086" ref_url="https://bugzilla.suse.com/1119086" source="BUGZILLA"/>
		<reference ref_id="1123034" ref_url="https://bugzilla.suse.com/1123034" source="BUGZILLA"/>
		<reference ref_id="1127988" ref_url="https://bugzilla.suse.com/1127988" source="BUGZILLA"/>
		<reference ref_id="1131304" ref_url="https://bugzilla.suse.com/1131304" source="BUGZILLA"/>
		<reference ref_id="1137069" ref_url="https://bugzilla.suse.com/1137069" source="BUGZILLA"/>
		<reference ref_id="1137865" ref_url="https://bugzilla.suse.com/1137865" source="BUGZILLA"/>
		<reference ref_id="1137959" ref_url="https://bugzilla.suse.com/1137959" source="BUGZILLA"/>
		<reference ref_id="1137982" ref_url="https://bugzilla.suse.com/1137982" source="BUGZILLA"/>
		<reference ref_id="1140155" ref_url="https://bugzilla.suse.com/1140155" source="BUGZILLA"/>
		<reference ref_id="1141013" ref_url="https://bugzilla.suse.com/1141013" source="BUGZILLA"/>
		<reference ref_id="1142076" ref_url="https://bugzilla.suse.com/1142076" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1146042" ref_url="https://bugzilla.suse.com/1146042" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146540" ref_url="https://bugzilla.suse.com/1146540" source="BUGZILLA"/>
		<reference ref_id="1146664" ref_url="https://bugzilla.suse.com/1146664" source="BUGZILLA"/>
		<reference ref_id="1148133" ref_url="https://bugzilla.suse.com/1148133" source="BUGZILLA"/>
		<reference ref_id="1148712" ref_url="https://bugzilla.suse.com/1148712" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1149313" ref_url="https://bugzilla.suse.com/1149313" source="BUGZILLA"/>
		<reference ref_id="1149446" ref_url="https://bugzilla.suse.com/1149446" source="BUGZILLA"/>
		<reference ref_id="1149555" ref_url="https://bugzilla.suse.com/1149555" source="BUGZILLA"/>
		<reference ref_id="1149651" ref_url="https://bugzilla.suse.com/1149651" source="BUGZILLA"/>
		<reference ref_id="1150305" ref_url="https://bugzilla.suse.com/1150305" source="BUGZILLA"/>
		<reference ref_id="1150381" ref_url="https://bugzilla.suse.com/1150381" source="BUGZILLA"/>
		<reference ref_id="1150423" ref_url="https://bugzilla.suse.com/1150423" source="BUGZILLA"/>
		<reference ref_id="1150846" ref_url="https://bugzilla.suse.com/1150846" source="BUGZILLA"/>
		<reference ref_id="1151067" ref_url="https://bugzilla.suse.com/1151067" source="BUGZILLA"/>
		<reference ref_id="1151192" ref_url="https://bugzilla.suse.com/1151192" source="BUGZILLA"/>
		<reference ref_id="1151350" ref_url="https://bugzilla.suse.com/1151350" source="BUGZILLA"/>
		<reference ref_id="1151610" ref_url="https://bugzilla.suse.com/1151610" source="BUGZILLA"/>
		<reference ref_id="1151661" ref_url="https://bugzilla.suse.com/1151661" source="BUGZILLA"/>
		<reference ref_id="1151662" ref_url="https://bugzilla.suse.com/1151662" source="BUGZILLA"/>
		<reference ref_id="1151667" ref_url="https://bugzilla.suse.com/1151667" source="BUGZILLA"/>
		<reference ref_id="1151680" ref_url="https://bugzilla.suse.com/1151680" source="BUGZILLA"/>
		<reference ref_id="1151891" ref_url="https://bugzilla.suse.com/1151891" source="BUGZILLA"/>
		<reference ref_id="1151955" ref_url="https://bugzilla.suse.com/1151955" source="BUGZILLA"/>
		<reference ref_id="1152024" ref_url="https://bugzilla.suse.com/1152024" source="BUGZILLA"/>
		<reference ref_id="1152025" ref_url="https://bugzilla.suse.com/1152025" source="BUGZILLA"/>
		<reference ref_id="1152026" ref_url="https://bugzilla.suse.com/1152026" source="BUGZILLA"/>
		<reference ref_id="1152161" ref_url="https://bugzilla.suse.com/1152161" source="BUGZILLA"/>
		<reference ref_id="1152187" ref_url="https://bugzilla.suse.com/1152187" source="BUGZILLA"/>
		<reference ref_id="1152243" ref_url="https://bugzilla.suse.com/1152243" source="BUGZILLA"/>
		<reference ref_id="1152325" ref_url="https://bugzilla.suse.com/1152325" source="BUGZILLA"/>
		<reference ref_id="1152457" ref_url="https://bugzilla.suse.com/1152457" source="BUGZILLA"/>
		<reference ref_id="1152460" ref_url="https://bugzilla.suse.com/1152460" source="BUGZILLA"/>
		<reference ref_id="1152466" ref_url="https://bugzilla.suse.com/1152466" source="BUGZILLA"/>
		<reference ref_id="1152525" ref_url="https://bugzilla.suse.com/1152525" source="BUGZILLA"/>
		<reference ref_id="1152972" ref_url="https://bugzilla.suse.com/1152972" source="BUGZILLA"/>
		<reference ref_id="1152974" ref_url="https://bugzilla.suse.com/1152974" source="BUGZILLA"/>
		<reference ref_id="1152975" ref_url="https://bugzilla.suse.com/1152975" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18595" ref_url="https://www.suse.com/security/cve/CVE-2017-18595/" source="CVE"/>
		<reference ref_id="CVE-2019-14821" ref_url="https://www.suse.com/security/cve/CVE-2019-14821/" source="CVE"/>
		<reference ref_id="CVE-2019-15291" ref_url="https://www.suse.com/security/cve/CVE-2019-15291/" source="CVE"/>
		<reference ref_id="CVE-2019-9506" ref_url="https://www.suse.com/security/cve/CVE-2019-9506/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006028.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2017-18595: A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (bnc#1149555).
- CVE-2019-14821: An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring-&gt;first' and 'ring-&gt;last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350).
- CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver (bnc#1146540).
- CVE-2019-9506: The Bluetooth BR/EDR specification up to and including version 5.1 permitted sufficiently low encryption key length and did not prevent an attacker from influencing the key length negotiation. This allowed practical brute-force attacks (aka 'KNOB') that could decrypt traffic and injected arbitrary ciphertext without the victim noticing (bnc#1137865 bnc#1146042).

The following non-security bugs were fixed:

- ACPI: custom_method: fix memory leaks (bsc#1051510).
- ACPI / PCI: fix acpi_pci_irq_enable() memory leak (bsc#1051510).
- ACPI / property: Fix acpi_graph_get_remote_endpoint() name in kerneldoc (bsc#1051510).
- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- ALSA: aoa: onyx: always initialize register read value (bsc#1051510).
- ALSA: firewire-tascam: check intermediate state of clock status and retry (bsc#1051510).
- ALSA: firewire-tascam: handle error code when getting current source of clock (bsc#1051510).
- ASoC: es8328: Fix copy-paste error in es8328_right_line_controls (bsc#1051510).
- ASoC: Intel: Baytrail: Fix implicit fallthrough warning (bsc#1051510).
- ASoC: sun4i-i2s: RX and TX counter registers are swapped (bsc#1051510).
- ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls (bsc#1051510).
- ASoC: wm8988: fix typo in wm8988_right_line_controls (bsc#1051510).
- ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet (bsc#1111666).
- ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init (bsc#1051510).
- atm: iphase: Fix Spectre v1 vulnerability (networking-stable-19_08_08).
- bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA (bsc#1051510).
- blk-flush: do not run queue for requests bypassing flush (bsc#1137959).
- blk-flush: use blk_mq_request_bypass_insert() (bsc#1137959).
- blk-mq: do not allocate driver tag upfront for flush rq (bsc#1137959).
- blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (bsc#1151610).
- blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue (bsc#1137959).
- blk-mq: introduce blk_mq_request_completed() (bsc#1149446).
- blk-mq: introduce blk_mq_tagset_wait_completed_request() (bsc#1149446).
- blk-mq: kABI fixes for blk-mq.h (bsc#1137959).
- blk-mq: move blk_mq_put_driver_tag*() into blk-mq.h (bsc#1137959).
- blk-mq: punt failed direct issue to dispatch list (bsc#1137959).
- blk-mq: put the driver tag of nxt rq before first one is requeued (bsc#1137959).
- blk-mq-sched: decide how to handle flush rq via RQF_FLUSH_SEQ (bsc#1137959).
- block: fix timeout changes for legacy request drivers (bsc#1149446).
- block: kABI fixes for BLK_EH_DONE renaming (bsc#1142076).
- block: rename BLK_EH_NOT_HANDLED to BLK_EH_DONE (bsc#1142076).
- bnx2x: Disable multi-cos feature (networking-stable-19_08_08).
- bonding/802.3ad: fix link_failure_count tracking (bsc#1137069 bsc#1141013).
- bonding/802.3ad: fix slave link initialization transition states (bsc#1137069 bsc#1141013).
- bonding: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21).
- bonding: set default miimon value for non-arp modes if not set (bsc#1137069 bsc#1141013).
- bonding: speed/duplex update at NETDEV_UP event (bsc#1137069 bsc#1141013).
- btrfs: fix use-after-free when using the tree modification log (bsc#1151891).
- btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls (bsc#1152975).
- btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space (bsc#1152974).
- btrfs: relocation: fix use-after-free on dead relocation roots (bsc#1152972).
- ceph: use ceph_evict_inode to cleanup inode's resource (bsc#1148133).
- clk: at91: fix update bit maps on CFG_MOR write (bsc#1051510).
- clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks (bsc#1051510).
- clk: sunxi-ng: v3s: add the missing PLL_DDR1 (bsc#1051510).
- Compile nvme.ko as module (bsc#1150846)
- crypto: caam - fix concurrency issue in givencrypt descriptor (bsc#1051510).
- crypto: caam - free resources in case caam_rng registration failed (bsc#1051510).
- crypto: caam/qi - fix error handling in ERN handler (bsc#1111666).
- crypto: cavium/zip - Add missing single_release() (bsc#1051510).
- crypto: ccp - Reduce maximum stack usage (bsc#1051510).
- crypto: qat - Silence smp_processor_id() warning (bsc#1051510).
- crypto: skcipher - Unmap pages after an external error (bsc#1051510).
- dma-buf/sw_sync: Synchronize signal vs syncpt free (bsc#1111666).
- dmaengine: dw: platform: Switch to acpi_dma_controller_register() (bsc#1051510).
- dmaengine: iop-adma.c: fix printk format warning (bsc#1051510).
- drivers: thermal: int340x_thermal: Fix sysfs race condition (bsc#1051510).
- drm/i915: Fix various tracepoints for gen2 (bsc#1113722)
- drm/imx: Drop unused imx-ipuv3-crtc.o build (bsc#1113722)
- EDAC/amd64: Decode syndrome before translating address (bsc#1114279).
- eeprom: at24: make spd world-readable again (git-fixes).
- ext4: fix warning inside ext4_convert_unwritten_extents_endio (bsc#1152025).
- ext4: set error return correctly when ext4_htree_store_dirent fails (bsc#1152024).
- Fix kabi for: NFSv4: Fix OPEN / CLOSE race (git-fixes).
- floppy: fix usercopy direction (bsc#1111666).
- gpio: fix line flag validation in lineevent_create (bsc#1051510).
- gpio: fix line flag validation in linehandle_create (bsc#1051510).
- gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist (bsc#1051510).
- gpiolib: only check line handle flags once (bsc#1051510).
- gpio: Move gpiochip_lock/unlock_as_irq to gpio/driver.h (bsc#1051510).
- hwmon: (lm75) Fix write operations for negative temperatures (bsc#1051510).
- hwmon: (shtc1) fix shtc1 and shtw1 id mask (bsc#1051510).
- i2c: designware: Synchronize IRQs when unregistering slave client (bsc#1111666).
- i40e: Add support for X710 device (bsc#1151067).
- ife: error out when nla attributes are empty (networking-stable-19_08_08).
- iio: dac: ad5380: fix incorrect assignment to val (bsc#1051510).
- Input: elan_i2c - remove Lenovo Legion Y7000 PnpID (bsc#1051510).
- iommu/dma: Fix for dereferencing before null checking (bsc#1151667).
- iommu: Do not use sme_active() in generic code (bsc#1151661).
- iommu/iova: Avoid false sharing on fq_timer_on (bsc#1151662).
- ip6_tunnel: fix possible use-after-free on xmit (networking-stable-19_08_08).
- ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set (networking-stable-19_08_28).
- isdn/capi: check message length in capi_write() (bsc#1051510).
- kABI: media: em28xx: fix handler for vidioc_s_input() (bsc#1051510). fixes kABI
- kABI: media: em28xx: stop rewriting device's struct (bsc#1051510). fixes kABI
- KABI protect struct vmem_altmap (bsc#1150305).
- KVM: PPC: Book3S: Fix incorrect guest-to-user-translation error handling (bsc#1061840).
- KVM: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores (bsc#1061840).
- KVM: PPC: Book3S HV: Do not lose pending doorbell request on migration on P9 (bsc#1061840).
- KVM: PPC: Book3S HV: Do not push XIVE context when not using XIVE device (bsc#1061840).
- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest (bsc#1061840).
- KVM: PPC: Book3S HV: Fix race in re-enabling XIVE escalation interrupts (bsc#1061840).
- KVM: PPC: Book3S HV: Handle virtual mode in XIVE VCPU push code (bsc#1061840).
- KVM: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the VP (bsc#1061840).
- leds: leds-lp5562 allow firmware files up to the maximum length (bsc#1051510).
- leds: trigger: gpio: GPIO 0 is valid (bsc#1051510).
- libertas_tf: Use correct channel range in lbtf_geo_init (bsc#1051510).
- libiscsi: do not try to bypass SCSI EH (bsc#1142076).
- libnvdimm/altmap: Track namespace boundaries in altmap (bsc#1150305).
- libnvdimm: prevent nvdimm from requesting key when security is disabled (bsc#1137982).
- lightnvm: remove dependencies on BLK_DEV_NVME and PCI (bsc#1150846).
- livepatch: Nullify obj-&gt;mod in klp_module_coming()'s error path (bsc#1071995).
- mac80211: minstrel_ht: fix per-group max throughput rate initialization (bsc#1051510).
- md: do not report active array_state until after revalidate_disk() completes (git-fixes).
- md: only call set_in_sync() when it is expected to succeed (git-fixes).
- md/raid6: Set R5_ReadError when there is read failure on parity disk (git-fixes).
- media: atmel: atmel-isi: fix timeout value for stop streaming (bsc#1051510).
- media: dib0700: fix link error for dibx000_i2c_set_speed (bsc#1051510).
- media: em28xx: fix handler for vidioc_s_input() (bsc#1051510).
- media: em28xx: stop rewriting device's struct (bsc#1051510).
- media: fdp1: Reduce FCP not found message level to debug (bsc#1051510).
- media: marvell-ccic: do not generate EOF on parallel bus (bsc#1051510).
- media: mc-device.c: do not memset __user pointer contents (bsc#1051510).
- media: ov6650: Fix sensor possibly not detected on probe (bsc#1051510).
- media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper (bsc#1051510).
- media: replace strcpy() by strscpy() (bsc#1051510).
- media: Revert '[media] marvell-ccic: reset ccic phy when stop streaming for stability' (bsc#1051510).
- media: technisat-usb2: break out of loop at end of buffer (bsc#1051510).
- media: tm6000: double free if usb disconnect while streaming (bsc#1051510).
- media: vb2: Fix videobuf2 to map correct area (bsc#1051510).
- mic: avoid statically declaring a 'struct device' (bsc#1051510).
- mmc: sdhci-msm: fix mutex while in spinlock (bsc#1142635).
- mmc: sdhci-of-arasan: Do now show error message in case of deffered probe (bsc#1119086).
- mtd: spi-nor: Fix Cadence QSPI RCU Schedule Stall (bsc#1051510).
- mvpp2: refactor MTU change code (networking-stable-19_08_08).
- net: bridge: delete local fdb on device init failure (networking-stable-19_08_08).
- net: bridge: mcast: do not delete permanent entries when fast leave is enabled (networking-stable-19_08_08).
- net: fix ifindex collision during namespace removal (networking-stable-19_08_08).
- net/ibmvnic: prevent more than one thread from running in reset (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (bsc#1152457 ltc#174432).
- net/mlx5e: Only support tx/rx pause setting for port owner (networking-stable-19_08_21).
- net/mlx5e: Prevent encap flow counter update async to user query (networking-stable-19_08_08).
- net/mlx5e: Use flow keys dissector to parse packets for ARFS (networking-stable-19_08_21).
- net/mlx5: Use reversed order when unregister devices (networking-stable-19_08_08).
- net/packet: fix race in tpacket_snd() (networking-stable-19_08_21).
- net: sched: Fix a possible null-pointer dereference in dequeue_func() (networking-stable-19_08_08).
- net/smc: make sure EPOLLOUT is raised (networking-stable-19_08_28).
- NFS4: Fix v4.0 client state corruption when mount (git-fixes).
- nfsd: degraded slot-count more gracefully as allocation nears exhaustion (bsc#1150381).
- nfsd: Do not release the callback slot unless it was actually held (git-fixes).
- nfsd: Fix overflow causing non-working mounts on 1 TB machines (bsc#1150381).
- nfsd: fix performance-limiting session calculation (bsc#1150381).
- nfsd: give out fewer session slots as limit approaches (bsc#1150381).
- nfsd: handle drc over-allocation gracefully (bsc#1150381).
- nfsd: increase DRC cache limit (bsc#1150381).
- NFS: Do not interrupt file writeout due to fatal errors (git-fixes).
- NFS: Do not open code clearing of delegation state (git-fixes).
- NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0 (git-fixes).
- NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts (git-fixes).
- NFS: Forbid setting AF_INET6 to 'struct sockaddr_in'-&gt;sin_family (git-fixes).
- NFS: Refactor nfs_lookup_revalidate() (git-fixes).
- NFS: Remove redundant semicolon (git-fixes).
- NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter (git-fixes).
- NFSv4.1: Fix open stateid recovery (git-fixes).
- NFSv4.1: Only reap expired delegations (git-fixes).
- NFSv4: Check the return value of update_open_stateid() (git-fixes).
- NFSv4: Fix an Oops in nfs4_do_setattr (git-fixes).
- NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim() (git-fixes).
- NFSv4: Fix delegation state recovery (git-fixes).
- NFSv4: Fix lookup revalidate of regular files (git-fixes).
- NFSv4: Fix OPEN / CLOSE race (git-fixes).
- NFSv4: Handle the special Linux file open access mode (git-fixes).
- NFSv4: Only pass the delegation to setattr if we're sending a truncate (git-fixes).
- NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend() (git-fixes).
- nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds (bsc#1051510).
- null_blk: complete requests from -&gt;timeout (bsc#1149446).
- null_blk: wire up timeouts (bsc#1149446).
- nvme: do not abort completed request in nvme_cancel_request (bsc#1149446).
- nvme: fix multipath crash when ANA is deactivated (bsc#1149446).
- nvme: fix multipath crash when ANA is deactivated (bsc#1149446).
- nvmem: Use the same permissions for eeprom as for nvmem (git-fixes).
- nvme-rdma: Allow DELETING state change failure in (bsc#1104967,).
- nvme-rdma: centralize admin/io queue teardown sequence (bsc#1142076).
- nvme-rdma: centralize controller setup sequence (bsc#1142076).
- nvme-rdma: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-rdma: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-rdma: fix timeout handler (bsc#1149446).
- nvme-rdma: fix timeout handler (bsc#1149446).
- nvme-rdma: remove redundant reference between ib_device and tagset (bsc#1149446).
- nvme-rdma: stop admin queue before freeing it (bsc#1140155).
- nvme-rdma: support up to 4 segments of inline data (bsc#1142076).
- nvme-rdma: unquiesce queues when deleting the controller (bsc#1142076).
- nvme-rdma: use dynamic dma mapping per command (bsc#1149446).
- nvme: remove ns sibling before clearing path (bsc#1140155).
- nvme: return BLK_EH_DONE from -&gt;timeout (bsc#1142076).
- nvme-tcp: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-tcp: fix timeout handler (bsc#1149446).
- nvme: wait until all completed request's complete fn is called (bsc#1149446).
- PCI: Add ACS quirk for Amazon Annapurna Labs root ports (bsc#1152187,bsc#1152525).
- PCI: Add Amazon's Annapurna Labs vendor ID (bsc#1152187,bsc#1152525).
- PCI: Add quirk to disable MSI-X support for Amazon's Annapurna Labs Root Port (bsc#1152187,bsc#1152525).
- PCI: hv: Detect and fix Hyper-V PCI domain number collision (bsc#1150423).
- PCI/VPD: Prevent VPD access for Amazon's Annapurna Labs Root Port (bsc#1152187,bsc#1152525).
- phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current (bsc#1051510).
- platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table (bsc#1051510).
- PM: sleep: Fix possible overflow in pm_system_cancel_wakeup() (bsc#1051510).
- pNFS fallback to MDS if no deviceid found (git-fixes).
- pNFS/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error (git-fixes).
- pNFS/flexfiles: Turn off soft RPC calls (git-fixes).
- powerpc/64: Make sys_switch_endian() traceable (bsc#1065729).
- powerpc/64s/radix: Fix MADV_[FREE|DONTNEED] TLB flush miss problem with THP (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Fix memory hotplug section page table creation (bsc#1065729).
- powerpc/64s/radix: Fix memory hot-unplug page table split (bsc#1065729).
- powerpc/64s/radix: Implement _tlbie(l)_va_range flush functions (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Improve preempt handling in TLB code (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Improve TLB flushing for page table freeing (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Introduce local single page ceiling for TLB range flush (bsc#1055117 bsc#1152161 ltc#181664).
- powerpc/64s/radix: Optimize flush_tlb_range (bsc#1152161 ltc#181664).
- powerpc/book3s64/mm: Do not do tlbie fixup for some hardware revisions (bsc#1152161 ltc#181664).
- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (bsc#1152161 ltc#181664).
- powerpc: bpf: Fix generation of load/store DW instructions (bsc#1065729).
- powerpc/bpf: use unsigned division instruction for 64-bit operations (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range() (bsc#1065729).
- powerpc/irq: Do not WARN continuously in arch_local_irq_restore() (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (bsc#1152161 ltc#181664).
- powerpc/mm/radix: Drop unneeded NULL check (bsc#1152161 ltc#181664).
- powerpc/mm/radix: implement LPID based TLB flushes to be used by KVM (bsc#1152161 ltc#181664).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling (bsc#1065729).
- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get, set} (bsc#1152243 ltc#181472).
- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS (bsc#1065729).
- powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA window (bsc#1061840).
- powerpc/powernv/ioda: Fix race in TCE level allocation (bsc#1061840).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt handling to C (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/pseries: Call H_BLOCK_REMOVE when supported (bsc#1109158).
- powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() (bsc#1065729).
- powerpc/pseries/memory-hotplug: Fix return value type of find_aa_index (bsc#1065729).
- powerpc/pseries: Read TLB Block Invalidate Characteristics (bsc#1109158).
- powerpc/ptrace: Simplify vr_get/set() to avoid GCC warning (bsc#1148868).
- powerpc/xive: Fix bogus error code returned by OPAL (bsc#1065729).
- powerpc/xive: Implement get_irqchip_state method for XIVE to fix shutdown race (bsc#1065729).
- powerpc/xmon: Fix opcode being uninitialized in print_insn_powerpc (bsc#1065729).
- power: reset: gpio-restart: Fix typo when gpio reset is not found (bsc#1051510).
- power: supply: Init device wakeup after device_add() (bsc#1051510).
- ppp: Fix memory leak in ppp_write (git-fixes).
- printk: Do not lose last line in kmsg buffer dump (bsc#1152460).
- printk: fix printk_time race (bsc#1152466).
- printk/panic: Avoid deadlock in printk() after stopping CPUs by NMI (bsc#1148712).
- qla2xxx: kABI fixes for v10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988).
- qla2xxx: remove SGI SN2 support (bsc#1123034 bsc#1131304 bsc#1127988).
- quota: fix wrong condition in is_quota_modification() (bsc#1152026).
- r8152: Set memory to all 0xFFs on failed reg reads (bsc#1051510).
- regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg (bsc#1051510).
- Revert 'mwifiex: fix system hang problem after resume' (bsc#1051510).
- rtlwifi: Fix file release memory leak (bsc#1111666).
- scsi: qla2xxx: Add 28xx flash primary/secondary status/image mechanism (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add Device ID for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add First Burst support for FC-NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add fw_attr and port_no SysFS node (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add new FW dump template entry types (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add pci function reset support (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add protection mask module parameters (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add Serdes support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add support for multiple fwdump templates/segments (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add support for setting port speed (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Allow NVMe IO to resume with short cable pull (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: allow session delete to finish before create (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid PCI IRQ affinity mapping when multiqueue is not supported (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: avoid printf format warning (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that Coverity complains about dereferencing a NULL rport pointer (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that qla2x00_mem_free() crashes if called twice (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change default ZIO threshold (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change the return type of qla24xx_read_flash_data() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change the return type of qla2x00_update_ms_fdmi_iocb() into void (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check for FW started flag before aborting (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: check for kstrtol() failure (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check secondary image if reading the primary image fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check the PCI info string output buffer size (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check the size of firmware data structures at compile time (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanup fcport memory to prevent leak (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanup redundant qla2x00_abort_all_cmds during unload (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanups for NVRAM/Flash read/write path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: cleanup trace buffer initialization (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a command is released that is owned by the firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a mailbox command times out (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if parsing the version string fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the completion path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if waiting for pending commands times out (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain loudly about reference count underflow (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correct error handling during initialization failures (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correction and improvement to fwdt processing (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correctly report max/min supported speeds (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: deadlock by configfs_depend_item (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare local symbols static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla24xx_build_scsi_crc_2_iocbs() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla2x00_find_new_loop_id() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Downgrade driver to 10.01.00.19-k There are upstream bug reports against 10.01.00.19-k which haven't been resolved. Also the newer version failed to get a proper review. For time being it's better to got with the older version and do not introduce new bugs.
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix abort timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a recently introduced kernel warning (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a small typo in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix code indentation for qla27xx_fwdt_entry (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix comment alignment in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix comment in MODULE_PARM_DESC in qla2xxx (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix different size DMA Alloc/Unmap (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix DMA error when the DIF sg buffer crosses 4GB boundary (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix DMA unmap leak (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix fcport null pointer access (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix formatting of pointer types (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix fw dump corruption (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix fw options handle eh_bus_reset() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hang in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hardirq-unsafe locking (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hardlockup in abort command during driver remove (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix message indicating vectors used by driver (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix N2N link reset (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix Nport ID display value (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NVMe port discovery after a short device port loss (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix possible fcport null-pointer dereferences (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix premature timer expiration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix read offset in qla24xx_load_risc_flash() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix routine qla27xx_dump_{mpi|ram}() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix session cleanup hang (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix spelling mistake 'alredy' -&gt; 'already' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix spelling mistake 'initializatin' -&gt; 'initialization' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix SRB allocation flag to avoid sleeping in IRQ context (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stale session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stuck login session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix unload when NVMe devices are configured (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: flush IO on chip reset or sess delete (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Further limit FLASH region write access from SysFS (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Improve Linux kernel coding style conformance (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from qla_dsd.h (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Increase the max_sgl_segments to 1024 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Increase the size of the mailbox arrays from 4 to 8 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Insert spaces where required (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types for FC src/dst IDs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the dsd32 and dsd64 data structures (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Leave a blank line after declarations (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Let the compiler check the type of the SCSI command context pointer (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Log the status code if a firmware command fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs use little endian (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_mem_free() easier to verify (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_process_response_queue() easier to read (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make sure that aborted commands are freed (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move debug messages before sending srb preventing panic (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move marker request behind QPair (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_clear_loop_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_is_reserved_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_set_fcport_state() from a .h into a .c file (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_set_reserved_loop_ids() definition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move the &lt;linux/io-64-nonatomic-lo-hi.h&gt; include directive (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move the port_state_str definition from a .h to a .c file (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: no need to check return value of debugfs_create functions (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: on session delete, return nvme cmd (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Pass little-endian values to the firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent multiple ADISC commands per session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent SysFS access when chip is down (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the number of casts in GID list code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the number of forward declarations (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reject EH_{abort|device_reset|target_request} (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a comment that refers to the SCSI host lock (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove an include directive from qla_mr.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a superfluous forward declaration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove dead code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: remove double assignment in qla2x00_update_fcport (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove FW default template (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove qla_tgt_cmd.data_work and qla_tgt_cmd.data_work_free (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove qla_tgt_cmd.released (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: remove redundant null check on pointer sess (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove set but not used variable 'ptr_dma' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous casts (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unnecessary locking from the target code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unnecessary null check (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove useless set memory to zero use memset() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Replace vmalloc + memset with vzalloc (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Report invalid mailbox status codes (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Report the firmware status code if a mailbox command fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Restore FAWWPN of Physical Port only for loop down (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Retry fabric Scan on IOCB queue full (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Secure flash update support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set remote port devloss timeout to 0 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the qpair in SRB to NULL when SRB is released (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS pass-through IOCBs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the SCSI command result before calling the command done (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Silence fwdump template message (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Silence Successful ELS IOCB message (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplification of register address used in qla_tmpl.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify a debug statement (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify conditional check again (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qlt_send_term_imm_notif() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Skip FW dump on LOOP initialization error (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer overflow (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Suppress multiple Coverity complaint about out-of-bounds accesses (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: target: Fix offline port handling and host reset handling (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Uninline qla2x00_init_timer() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Unregister resources in the opposite order of the registration order (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.00.00.13-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.00.00.14-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.15-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.16-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.19-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update flash read/write routine (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use ARRAY_SIZE() in the definition of QLA_LAST_SPEED (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use common update-firmware-options routine for ISP27xx+ (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use complete switch scan for RSCN events (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use Correct index for Q-Pair array (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use get/put_unaligned where appropriate (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use __le64 instead of uint32_t for sending DMA addresses to firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy() and strncpy() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use tabs instead of spaces for indentation (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use tabs to indent code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Verify locking assumptions at runtime (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: scsi_dh_rdac: zero cdb in send_mode_select() (bsc#1149313).
- scsi: scsi_transport_fc: nvme: display FC-NVMe port roles (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: tcm_qla2xxx: Minimize #include directives (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi_transport_fc: complete requests from -&gt;timeout (bsc#1142076).
- sctp: fix the transport error_count check (networking-stable-19_08_21).
- secure boot lockdown: Fix-up backport of /dev/mem access restriction The upstream-submitted patch set has evolved over time, align our patches (contents and description) to reflect the current status as far as /dev/mem access is concerned.
- sky2: Disable MSI on yet another ASUS boards (P6Xxxx) (bsc#1051510).
- slip: make slhc_free() silently accept an error pointer (bsc#1051510).
- slip: sl_alloc(): remove unused parameter 'dev_t line' (bsc#1051510).
- spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours (bsc#1111666).
- SUNRPC fix regression in umount of a secure mount (git-fixes).
- SUNRPC: Handle connection breakages correctly in call_status() (git-fixes).
- SUNRPC/nfs: Fix return value for nfs4_callback_compound() (git-fixes).
- supported.conf: Add vfio_ccw (bsc#1151192 jsc#SLE-6138).
- supported.conf: Mark vfio_ccw supported by SUSE, because bugs can be routed to IBM via SUSE support (jsc#SLE-6138, bsc#1151192).
- tcp: make sure EPOLLOUT wont be missed (networking-stable-19_08_28).
- team: Add vlan tx offload to hw_enc_features (bsc#1051510).
- team: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21).
- tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts (bsc#1082555).
- tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs (bsc#1111666).
- tun: fix use-after-free when register netdev failed (bsc#1111666).
- Update s390 config files (bsc#1151192).  - VFIO_CCW=m  - S390_CCW_IOMMU=y
- USB: usbcore: Fix slab-out-of-bounds bug during device reset (bsc#1051510).
- vhost/test: fix build for vhost test (bsc#1111666).
- video: ssd1307fb: Start page range at page_offset (bsc#1113722)
- wcn36xx: use dynamic allocation for large variables (bsc#1111666).
- x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h (bsc#1114279).
- x86/fpu: Add FPU state copying quirk to handle XRSTOR failure on Intel Skylake CPUs (bsc#1151955).
- x86/tls: Fix possible spectre-v1 in do_get_thread_area() (bsc#1114279).
- xen/netback: Reset nr_frags before freeing skb (networking-stable-19_08_21).
- xen-netfront: do not assume sk_buff_head list is empty in error handling (bsc#1065600).
- xen-netfront: do not use ~0U as error return value for xennet_fill_frags() (bsc#1065600).
- xen/xenbus: fix self-deadlock after killing user process (bsc#1065600).
- xsk: avoid store-tearing when assigning queues (bsc#1111666).
- xsk: avoid store-tearing when assigning umem (bsc#1111666).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-18"/>
	<updated date="2019-10-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054914">SUSE bug 1054914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104967">SUSE bug 1104967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109158">SUSE bug 1109158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119086">SUSE bug 1119086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123034">SUSE bug 1123034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127988">SUSE bug 1127988</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131304">SUSE bug 1131304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137069">SUSE bug 1137069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137865">SUSE bug 1137865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137959">SUSE bug 1137959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137982">SUSE bug 1137982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140155">SUSE bug 1140155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141013">SUSE bug 1141013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142076">SUSE bug 1142076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146042">SUSE bug 1146042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146540">SUSE bug 1146540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146664">SUSE bug 1146664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148133">SUSE bug 1148133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148712">SUSE bug 1148712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149313">SUSE bug 1149313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149446">SUSE bug 1149446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149555">SUSE bug 1149555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149651">SUSE bug 1149651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150305">SUSE bug 1150305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150381">SUSE bug 1150381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150423">SUSE bug 1150423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150846">SUSE bug 1150846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151067">SUSE bug 1151067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151192">SUSE bug 1151192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151350">SUSE bug 1151350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151610">SUSE bug 1151610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151661">SUSE bug 1151661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151662">SUSE bug 1151662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151667">SUSE bug 1151667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151680">SUSE bug 1151680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151891">SUSE bug 1151891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151955">SUSE bug 1151955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152024">SUSE bug 1152024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152025">SUSE bug 1152025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152026">SUSE bug 1152026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152161">SUSE bug 1152161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152187">SUSE bug 1152187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152243">SUSE bug 1152243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152325">SUSE bug 1152325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152457">SUSE bug 1152457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152460">SUSE bug 1152460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152466">SUSE bug 1152466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152525">SUSE bug 1152525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152972">SUSE bug 1152972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152974">SUSE bug 1152974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152975">SUSE bug 1152975</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18595/">CVE-2017-18595</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-14821/">CVE-2019-14821</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15291/">CVE-2019-15291</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9506/">CVE-2019-9506</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497049" comment="reiserfs-kmp-default-4.12.14-197.21.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138294" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1046299" ref_url="https://bugzilla.suse.com/1046299" source="BUGZILLA"/>
		<reference ref_id="1046303" ref_url="https://bugzilla.suse.com/1046303" source="BUGZILLA"/>
		<reference ref_id="1046305" ref_url="https://bugzilla.suse.com/1046305" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1073513" ref_url="https://bugzilla.suse.com/1073513" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1086323" ref_url="https://bugzilla.suse.com/1086323" source="BUGZILLA"/>
		<reference ref_id="1087092" ref_url="https://bugzilla.suse.com/1087092" source="BUGZILLA"/>
		<reference ref_id="1089644" ref_url="https://bugzilla.suse.com/1089644" source="BUGZILLA"/>
		<reference ref_id="1090631" ref_url="https://bugzilla.suse.com/1090631" source="BUGZILLA"/>
		<reference ref_id="1093205" ref_url="https://bugzilla.suse.com/1093205" source="BUGZILLA"/>
		<reference ref_id="1096254" ref_url="https://bugzilla.suse.com/1096254" source="BUGZILLA"/>
		<reference ref_id="1097583" ref_url="https://bugzilla.suse.com/1097583" source="BUGZILLA"/>
		<reference ref_id="1097584" ref_url="https://bugzilla.suse.com/1097584" source="BUGZILLA"/>
		<reference ref_id="1097585" ref_url="https://bugzilla.suse.com/1097585" source="BUGZILLA"/>
		<reference ref_id="1097586" ref_url="https://bugzilla.suse.com/1097586" source="BUGZILLA"/>
		<reference ref_id="1097587" ref_url="https://bugzilla.suse.com/1097587" source="BUGZILLA"/>
		<reference ref_id="1097588" ref_url="https://bugzilla.suse.com/1097588" source="BUGZILLA"/>
		<reference ref_id="1098291" ref_url="https://bugzilla.suse.com/1098291" source="BUGZILLA"/>
		<reference ref_id="1101674" ref_url="https://bugzilla.suse.com/1101674" source="BUGZILLA"/>
		<reference ref_id="1109158" ref_url="https://bugzilla.suse.com/1109158" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1117665" ref_url="https://bugzilla.suse.com/1117665" source="BUGZILLA"/>
		<reference ref_id="1119461" ref_url="https://bugzilla.suse.com/1119461" source="BUGZILLA"/>
		<reference ref_id="1119465" ref_url="https://bugzilla.suse.com/1119465" source="BUGZILLA"/>
		<reference ref_id="1123034" ref_url="https://bugzilla.suse.com/1123034" source="BUGZILLA"/>
		<reference ref_id="1123080" ref_url="https://bugzilla.suse.com/1123080" source="BUGZILLA"/>
		<reference ref_id="1133140" ref_url="https://bugzilla.suse.com/1133140" source="BUGZILLA"/>
		<reference ref_id="1134303" ref_url="https://bugzilla.suse.com/1134303" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135854" ref_url="https://bugzilla.suse.com/1135854" source="BUGZILLA"/>
		<reference ref_id="1135873" ref_url="https://bugzilla.suse.com/1135873" source="BUGZILLA"/>
		<reference ref_id="1135967" ref_url="https://bugzilla.suse.com/1135967" source="BUGZILLA"/>
		<reference ref_id="1137040" ref_url="https://bugzilla.suse.com/1137040" source="BUGZILLA"/>
		<reference ref_id="1137799" ref_url="https://bugzilla.suse.com/1137799" source="BUGZILLA"/>
		<reference ref_id="1137861" ref_url="https://bugzilla.suse.com/1137861" source="BUGZILLA"/>
		<reference ref_id="1138190" ref_url="https://bugzilla.suse.com/1138190" source="BUGZILLA"/>
		<reference ref_id="1139073" ref_url="https://bugzilla.suse.com/1139073" source="BUGZILLA"/>
		<reference ref_id="1140090" ref_url="https://bugzilla.suse.com/1140090" source="BUGZILLA"/>
		<reference ref_id="1140729" ref_url="https://bugzilla.suse.com/1140729" source="BUGZILLA"/>
		<reference ref_id="1140845" ref_url="https://bugzilla.suse.com/1140845" source="BUGZILLA"/>
		<reference ref_id="1140883" ref_url="https://bugzilla.suse.com/1140883" source="BUGZILLA"/>
		<reference ref_id="1141600" ref_url="https://bugzilla.suse.com/1141600" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142667" ref_url="https://bugzilla.suse.com/1142667" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1144338" ref_url="https://bugzilla.suse.com/1144338" source="BUGZILLA"/>
		<reference ref_id="1144375" ref_url="https://bugzilla.suse.com/1144375" source="BUGZILLA"/>
		<reference ref_id="1144449" ref_url="https://bugzilla.suse.com/1144449" source="BUGZILLA"/>
		<reference ref_id="1144903" ref_url="https://bugzilla.suse.com/1144903" source="BUGZILLA"/>
		<reference ref_id="1145099" ref_url="https://bugzilla.suse.com/1145099" source="BUGZILLA"/>
		<reference ref_id="1146612" ref_url="https://bugzilla.suse.com/1146612" source="BUGZILLA"/>
		<reference ref_id="1148410" ref_url="https://bugzilla.suse.com/1148410" source="BUGZILLA"/>
		<reference ref_id="1149119" ref_url="https://bugzilla.suse.com/1149119" source="BUGZILLA"/>
		<reference ref_id="1149853" ref_url="https://bugzilla.suse.com/1149853" source="BUGZILLA"/>
		<reference ref_id="1150452" ref_url="https://bugzilla.suse.com/1150452" source="BUGZILLA"/>
		<reference ref_id="1150457" ref_url="https://bugzilla.suse.com/1150457" source="BUGZILLA"/>
		<reference ref_id="1150465" ref_url="https://bugzilla.suse.com/1150465" source="BUGZILLA"/>
		<reference ref_id="1150875" ref_url="https://bugzilla.suse.com/1150875" source="BUGZILLA"/>
		<reference ref_id="1151508" ref_url="https://bugzilla.suse.com/1151508" source="BUGZILLA"/>
		<reference ref_id="1151807" ref_url="https://bugzilla.suse.com/1151807" source="BUGZILLA"/>
		<reference ref_id="1152033" ref_url="https://bugzilla.suse.com/1152033" source="BUGZILLA"/>
		<reference ref_id="1152624" ref_url="https://bugzilla.suse.com/1152624" source="BUGZILLA"/>
		<reference ref_id="1152665" ref_url="https://bugzilla.suse.com/1152665" source="BUGZILLA"/>
		<reference ref_id="1152685" ref_url="https://bugzilla.suse.com/1152685" source="BUGZILLA"/>
		<reference ref_id="1152696" ref_url="https://bugzilla.suse.com/1152696" source="BUGZILLA"/>
		<reference ref_id="1152697" ref_url="https://bugzilla.suse.com/1152697" source="BUGZILLA"/>
		<reference ref_id="1152788" ref_url="https://bugzilla.suse.com/1152788" source="BUGZILLA"/>
		<reference ref_id="1152790" ref_url="https://bugzilla.suse.com/1152790" source="BUGZILLA"/>
		<reference ref_id="1152791" ref_url="https://bugzilla.suse.com/1152791" source="BUGZILLA"/>
		<reference ref_id="1153112" ref_url="https://bugzilla.suse.com/1153112" source="BUGZILLA"/>
		<reference ref_id="1153158" ref_url="https://bugzilla.suse.com/1153158" source="BUGZILLA"/>
		<reference ref_id="1153236" ref_url="https://bugzilla.suse.com/1153236" source="BUGZILLA"/>
		<reference ref_id="1153263" ref_url="https://bugzilla.suse.com/1153263" source="BUGZILLA"/>
		<reference ref_id="1153476" ref_url="https://bugzilla.suse.com/1153476" source="BUGZILLA"/>
		<reference ref_id="1153509" ref_url="https://bugzilla.suse.com/1153509" source="BUGZILLA"/>
		<reference ref_id="1153607" ref_url="https://bugzilla.suse.com/1153607" source="BUGZILLA"/>
		<reference ref_id="1153646" ref_url="https://bugzilla.suse.com/1153646" source="BUGZILLA"/>
		<reference ref_id="1153681" ref_url="https://bugzilla.suse.com/1153681" source="BUGZILLA"/>
		<reference ref_id="1153713" ref_url="https://bugzilla.suse.com/1153713" source="BUGZILLA"/>
		<reference ref_id="1153717" ref_url="https://bugzilla.suse.com/1153717" source="BUGZILLA"/>
		<reference ref_id="1153718" ref_url="https://bugzilla.suse.com/1153718" source="BUGZILLA"/>
		<reference ref_id="1153719" ref_url="https://bugzilla.suse.com/1153719" source="BUGZILLA"/>
		<reference ref_id="1153811" ref_url="https://bugzilla.suse.com/1153811" source="BUGZILLA"/>
		<reference ref_id="1153969" ref_url="https://bugzilla.suse.com/1153969" source="BUGZILLA"/>
		<reference ref_id="1154108" ref_url="https://bugzilla.suse.com/1154108" source="BUGZILLA"/>
		<reference ref_id="1154189" ref_url="https://bugzilla.suse.com/1154189" source="BUGZILLA"/>
		<reference ref_id="1154242" ref_url="https://bugzilla.suse.com/1154242" source="BUGZILLA"/>
		<reference ref_id="1154268" ref_url="https://bugzilla.suse.com/1154268" source="BUGZILLA"/>
		<reference ref_id="1154354" ref_url="https://bugzilla.suse.com/1154354" source="BUGZILLA"/>
		<reference ref_id="1154372" ref_url="https://bugzilla.suse.com/1154372" source="BUGZILLA"/>
		<reference ref_id="1154521" ref_url="https://bugzilla.suse.com/1154521" source="BUGZILLA"/>
		<reference ref_id="1154578" ref_url="https://bugzilla.suse.com/1154578" source="BUGZILLA"/>
		<reference ref_id="1154607" ref_url="https://bugzilla.suse.com/1154607" source="BUGZILLA"/>
		<reference ref_id="1154608" ref_url="https://bugzilla.suse.com/1154608" source="BUGZILLA"/>
		<reference ref_id="1154610" ref_url="https://bugzilla.suse.com/1154610" source="BUGZILLA"/>
		<reference ref_id="1154611" ref_url="https://bugzilla.suse.com/1154611" source="BUGZILLA"/>
		<reference ref_id="1154651" ref_url="https://bugzilla.suse.com/1154651" source="BUGZILLA"/>
		<reference ref_id="1154737" ref_url="https://bugzilla.suse.com/1154737" source="BUGZILLA"/>
		<reference ref_id="1154747" ref_url="https://bugzilla.suse.com/1154747" source="BUGZILLA"/>
		<reference ref_id="1154848" ref_url="https://bugzilla.suse.com/1154848" source="BUGZILLA"/>
		<reference ref_id="1154858" ref_url="https://bugzilla.suse.com/1154858" source="BUGZILLA"/>
		<reference ref_id="1154905" ref_url="https://bugzilla.suse.com/1154905" source="BUGZILLA"/>
		<reference ref_id="1154956" ref_url="https://bugzilla.suse.com/1154956" source="BUGZILLA"/>
		<reference ref_id="1155061" ref_url="https://bugzilla.suse.com/1155061" source="BUGZILLA"/>
		<reference ref_id="1155178" ref_url="https://bugzilla.suse.com/1155178" source="BUGZILLA"/>
		<reference ref_id="1155179" ref_url="https://bugzilla.suse.com/1155179" source="BUGZILLA"/>
		<reference ref_id="1155184" ref_url="https://bugzilla.suse.com/1155184" source="BUGZILLA"/>
		<reference ref_id="1155186" ref_url="https://bugzilla.suse.com/1155186" source="BUGZILLA"/>
		<reference ref_id="1155671" ref_url="https://bugzilla.suse.com/1155671" source="BUGZILLA"/>
		<reference ref_id="802154" ref_url="https://bugzilla.suse.com/802154" source="BUGZILLA"/>
		<reference ref_id="814594" ref_url="https://bugzilla.suse.com/814594" source="BUGZILLA"/>
		<reference ref_id="919448" ref_url="https://bugzilla.suse.com/919448" source="BUGZILLA"/>
		<reference ref_id="987367" ref_url="https://bugzilla.suse.com/987367" source="BUGZILLA"/>
		<reference ref_id="998153" ref_url="https://bugzilla.suse.com/998153" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12207" ref_url="https://www.suse.com/security/cve/CVE-2018-12207/" source="CVE"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-11135" ref_url="https://www.suse.com/security/cve/CVE-2019-11135/" source="CVE"/>
		<reference ref_id="CVE-2019-16232" ref_url="https://www.suse.com/security/cve/CVE-2019-16232/" source="CVE"/>
		<reference ref_id="CVE-2019-16233" ref_url="https://www.suse.com/security/cve/CVE-2019-16233/" source="CVE"/>
		<reference ref_id="CVE-2019-16234" ref_url="https://www.suse.com/security/cve/CVE-2019-16234/" source="CVE"/>
		<reference ref_id="CVE-2019-16995" ref_url="https://www.suse.com/security/cve/CVE-2019-16995/" source="CVE"/>
		<reference ref_id="CVE-2019-17056" ref_url="https://www.suse.com/security/cve/CVE-2019-17056/" source="CVE"/>
		<reference ref_id="CVE-2019-17133" ref_url="https://www.suse.com/security/cve/CVE-2019-17133/" source="CVE"/>
		<reference ref_id="CVE-2019-17666" ref_url="https://www.suse.com/security/cve/CVE-2019-17666/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2947-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race
  condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine
  Exception during Page Size Change, causing the CPU core to be non-functional.

  The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in
  executable pages by splitting / merging huge pages into small pages as
  needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735

- CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with
  Transactional Memory support could be used to facilitate sidechannel
  information leaks out of microarchitectural buffers, similar to the
  previously described 'Microarchitectural Data Sampling' attack.

  The Linux kernel was supplemented with the option to disable TSX operation
  altogether (requiring CPU Microcode updates on older systems) and better
  flushing of microarchitectural buffers (VERW).

  The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251

- CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port
  failed to add a port, which may have caused denial of service (bsc#1152685).

- CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the
  alloc_workqueue return value, leading to a NULL pointer dereference.
  (bsc#1150457).

- CVE-2019-10220: Added sanity checks on the pathnames passed to the user
  space. (bsc#1144903).

- CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).

- CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell
  libertas driver (bsc#1150465).

- CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return
  value, leading to a NULL pointer dereference. (bsc#1150452).

- CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE,
  leading to a Buffer Overflow (bsc#1153158).

- CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which
  meant that unprivileged users could create a raw socket (bsc#1152788).

The following non-security bugs were fixed:

- 9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
- acpi: cppc: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510).
- acpi: cppc: do not require the _PSD method (bsc#1051510).
- acpi: processor: do not print errors for processorIDs == 0xff (bsc#1051510).
- act_mirred: Fix mirred_init_module error handling (bsc#1051510).
- alsa: bebob: Fix prototype of helper function to return negative value (bsc#1051510).
- alsa: firewire-motu: add support for MOTU 4pre (bsc#1111666).
- alsa: hda/hdmi: Do not report spurious jack state changes (bsc#1051510).
- alsa: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510).
- alsa: hda/realtek: Add support for ALC623 (bsc#1051510).
- alsa: hda/realtek: Add support for ALC711 (bsc#1051510).
- alsa: hda/realtek: Check beep whitelist before assigning in all codecs (bsc#1051510).
- alsa: hda/realtek: Enable headset mic on Asus MJ401TA (bsc#1051510).
- alsa: hda/realtek: Fix 2 front mics of codec 0x623 (bsc#1051510).
- alsa: hda/realtek: Fix alienware headset mic (bsc#1051510).
- alsa: hda/realtek: PCI quirk for Medion E4254 (bsc#1051510).
- alsa: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 (bsc#1051510).
- alsa: hda/sigmatel: remove unused variable 'stac9200_core_init' (bsc#1051510).
- alsa: hda: Add Elkhart Lake PCI ID (bsc#1051510).
- alsa: hda: Add Tigerlake/Jasperlake PCI ID (bsc#1051510).
- alsa: hda: Add a quirk model for fixing Huawei Matebook X right speaker (bsc#1051510).
- alsa: hda: Add laptop imic fixup for ASUS M9V laptop (bsc#1051510).
- alsa: hda: Add support of Zhaoxin controller (bsc#1051510).
- alsa: hda: Apply AMD controller workaround for Raven platform (bsc#1051510).
- alsa: hda: Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510).
- alsa: hda: Drop unsol event handler for Intel HDMI codecs (bsc#1051510).
- alsa: hda: Expand pin_match function to match upcoming new tbls (bsc#1051510).
- alsa: hda: Flush interrupts on disabling (bsc#1051510).
- alsa: hda: Force runtime PM on Nvidia HDMI codecs (bsc#1051510).
- alsa: hda: Inform too slow responses (bsc#1051510).
- alsa: hda: Set fifo_size for both playback and capture streams (bsc#1051510).
- alsa: hda: Show the fatal CORB/RIRB error more clearly (bsc#1051510).
- alsa: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() (bsc#1051510).
- alsa: line6: sizeof (byte) is always 1, use that fact (bsc#1051510).
- alsa: timer: Fix mutex deadlock at releasing card (bsc#1051510).
- alsa: usb-audio: Add DSD support for EVGA NU Audio (bsc#1051510).
- alsa: usb-audio: Add DSD support for Gustard U16/X26 USB Interface (bsc#1051510).
- alsa: usb-audio: Add Hiby device family to quirks for native DSD support (bsc#1051510).
- alsa: usb-audio: Add Pioneer DDJ-SX3 PCM quirck (bsc#1051510).
- alsa: usb-audio: Clean up check_input_term() (bsc#1051510).
- alsa: usb-audio: DSD auto-detection for Playback Designs (bsc#1051510).
- alsa: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1051510).
- alsa: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1111666).
- alsa: usb-audio: Fix copy&amp;paste error in the validator (bsc#1111666).
- alsa: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() (bsc#1051510).
- alsa: usb-audio: More validations of descriptor units (bsc#1051510).
- alsa: usb-audio: Remove superfluous bLength checks (bsc#1051510).
- alsa: usb-audio: Simplify parse_audio_unit() (bsc#1051510).
- alsa: usb-audio: Skip bSynchAddress endpoint check if it is invalid (bsc#1051510).
- alsa: usb-audio: Unify audioformat release code (bsc#1051510).
- alsa: usb-audio: Unify the release of usb_mixer_elem_info objects (bsc#1051510).
- alsa: usb-audio: Update DSD support quirks for Oppo and Rotel (bsc#1051510).
- alsa: usb-audio: fix PCM device order (bsc#1051510).
- alsa: usb-audio: remove some dead code (bsc#1051510).
- appletalk: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- arcnet: provide a buffer big enough to actually receive packets (networking-stable-19_09_30).
- asoc: Define a set of DAPM pre/post-up events (bsc#1051510).
- asoc: dmaengine: Make the pcm-&gt;name equal to pcm-&gt;id if the name is not set (bsc#1051510).
- asoc: intel: Fix use of potentially uninitialized variable (bsc#1051510).
- asoc: intel: nhlt: Fix debug print format (bsc#1051510).
- asoc: rockchip: i2s: Fix RPM imbalance (bsc#1051510).
- asoc: rsnd: Reinitialize bit clock inversion flag for every format setting (bsc#1051510).
- asoc: sgtl5000: Fix charge pump source assignment (bsc#1051510).
- auxdisplay: panel: need to delete scan_timer when misc_register fails in panel_attach (bsc#1051510).
- ax25: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- blk-wbt: abstract out end IO completion handler (bsc#1135873).
- blk-wbt: fix has-sleeper queueing check (bsc#1135873).
- blk-wbt: improve waking of tasks (bsc#1135873).
- blk-wbt: move disable check into get_limit() (bsc#1135873).
- blk-wbt: use wq_has_sleeper() for wq active check (bsc#1135873).
- block: add io timeout to sysfs (bsc#1148410).
- block: add io timeout to sysfs (bsc#1148410).
- block: do not show io_timeout if driver has no timeout handler (bsc#1148410).
- block: do not show io_timeout if driver has no timeout handler (bsc#1148410).
- bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices (bsc#1051510).
- bnx2x: Fix VF's VLAN reconfiguration in reload (bsc#1086323 ).
- bnxt_en: Add PCI IDs for 57500 series NPAR devices (bsc#1153607).
- bpf: fix use after free in prog symbol exposure (bsc#1083647).
- brcmfmac: sdio: Disable auto-tuning around commands expected to fail (bsc#1111666).
- brcmfmac: sdio: Do not tune while the card is off (bsc#1111666).
- bridge/mdb: remove wrong use of NLM_F_MULTI (networking-stable-19_09_15).
- btrfs: Ensure btrfs_init_dev_replace_tgtdev sees up to date values (bsc#1154651).
- btrfs: Ensure replaced device does not have pending chunk allocation (bsc#1154607).
- btrfs: bail out gracefully rather than BUG_ON (bsc#1153646).
- btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() (bsc#1155178).
- btrfs: check for the full sync flag while holding the inode lock during fsync (bsc#1153713).
- btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() (bsc#1155179).
- btrfs: remove wrong use of volume_mutex from btrfs_dev_replace_start (bsc#1154651).
- btrfs: tracepoints: Fix bad entry members of qgroup events (bsc#1155186).
- btrfs: tracepoints: Fix wrong parameter order for qgroup events (bsc#1155184).
- can: mcp251x: mcp251x_hw_reset(): allow more time after a reset (bsc#1051510).
- can: xilinx_can: xcan_probe(): skip error message on deferred probe (bsc#1051510).
- cdc_ether: fix rndis support for Mediatek based smartphones (networking-stable-19_09_15).
- cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize (bsc#1051510).
- ceph: fix directories inode i_blkbits initialization (bsc#1153717).
- ceph: reconnect connection if session hang in opening state (bsc#1153718).
- ceph: update the mtime when truncating up (bsc#1153719).
- cfg80211: Purge frame registrations on iftype change (bsc#1051510).
- cfg80211: add and use strongly typed element iteration macros (bsc#1051510).
- clk: at91: select parent if main oscillator or bypass is enabled (bsc#1051510).
- clk: qoriq: Fix -Wunused-const-variable (bsc#1051510).
- clk: sirf: Do not reference clk_init_data after registration (bsc#1051510).
- clk: zx296718: Do not reference clk_init_data after registration (bsc#1051510).
- crypto: af_alg: Fix race around ctx-&gt;rcvused by making it atomic_t (bsc#1154737).
- crypto: af_alg: Initialize sg_num_bytes in error code path (bsc#1051510).
- crypto: af_alg: consolidation of duplicate code (bsc#1154737).
- crypto: af_alg: fix race accessing cipher request (bsc#1154737).
- crypto: af_alg: remove locking in async callback (bsc#1154737).
- crypto: af_alg: update correct dst SGL entry (bsc#1051510).
- crypto: af_alg: wait for data at beginning of recvmsg (bsc#1154737).
- crypto: algif: return error code when no data was processed (bsc#1154737).
- crypto: algif_aead: copy AAD from src to dst (bsc#1154737).
- crypto: algif_aead: fix reference counting of null skcipher (bsc#1154737).
- crypto: algif_aead: overhaul memory management (bsc#1154737).
- crypto: algif_aead: skip SGL entries with NULL page (bsc#1154737).
- crypto: algif_skcipher: overhaul memory management (bsc#1154737).
- crypto: talitos: fix missing break in switch statement (bsc#1142635).
- cxgb4: Signedness bug in init_one() (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584).
- cxgb4: do not dma memory off of the stack (bsc#1152790).
- cxgb4: fix endianness for vlan value in cxgb4_tc_flower (bsc#1064802 bsc#1066129).
- cxgb4: offload VLAN flows regardless of VLAN ethtype (bsc#1064802 bsc#1066129).
- cxgb4: reduce kernel stack usage in cudbg_collect_mem_region() (bsc#1073513).
- cxgb4: smt: Add lock for atomic_dec_and_test (bsc#1064802 bsc#1066129).
- cxgb4:Fix out-of-bounds MSI-X info array access (networking-stable-19_10_05).
- drm/amd/display: Restore backlight brightness after system resume (bsc#1112178)
- drm/amd/display: fix issue where 252-255 values are clipped (bsc#1111666).
- drm/amd/display: reprogram VM config when system resume (bsc#1111666).
- drm/amd/display: support spdif (bsc#1111666).
- drm/amd/dm: Understand why attaching path/tile properties are needed (bsc#1111666).
- drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) (bsc#1051510).
- drm/amd/pp: Fix truncated clock value when set watermark (bsc#1111666).
- drm/amdgpu/gfx9: Update gfx9 golden settings (bsc#1111666).
- drm/amdgpu/si: fix ASIC tests (git-fixes).
- drm/amdgpu: Check for valid number of registers to read (bsc#1051510).
- drm/amdgpu: Fix KFD-related kernel oops on Hawaii (bsc#1111666).
- drm/amdgpu: Update gc_9_0 golden settings (bsc#1111666).
- drm/amdkfd: Add missing Polaris10 ID (bsc#1111666).
- drm/ast: Fixed reboot test may cause system hanged (bsc#1051510).
- drm/atomic_helper: Allow DPMS On&lt;-&gt;Off changes for unregistered connectors (bsc#1111666).
- drm/atomic_helper: Disallow new modesets on unregistered connectors (bsc#1111666).
- drm/atomic_helper: Stop modesets on unregistered connectors harder (bsc#1111666).
- drm/bridge: tc358767: Increase AUX transfer length limit (bsc#1051510).
- drm/bridge: tfp410: fix memleak in get_modes() (bsc#1111666).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 (bsc#1051510).
- drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)
- drm/i915/cmdparser: Ignore Length operands during (bsc#1135967)
- drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)
- drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)
- drm/i915/gvt: update vgpu workload head pointer correctly (bsc#1112178)
- drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)
- drm/i915: Add support for mandatory cmdparsing (bsc#1135967)
- drm/i915: Allow parsing of unsized batches (bsc#1135967)
- drm/i915: Cleanup gt powerstate from gem (bsc#1111666).
- drm/i915: Disable Secure Batches for gen6+ (bsc#1135967)
- drm/i915: Fix intel_dp_mst_best_encoder() (bsc#1111666).
- drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)
- drm/i915: Remove Master tables from cmdparser (bsc#1135967)
- drm/i915: Rename gen7 cmdparser tables (bsc#1135967)
- drm/i915: Restore sane defaults for KMS on GEM error load (bsc#1111666).
- drm/i915: Support ro ppgtt mapped cmdparser shadow (bsc#1135967)
- drm/mediatek: set DMA max segment size (bsc#1111666).
- drm/msm/dsi: Fix return value check for clk_get_parent (bsc#1111666).
- drm/msm/dsi: Implement reset correctly (bsc#1051510).
- drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling (bsc#1111666).
- drm/nouveau/kms/nv50-: Do not create MSTMs for eDP connectors (bsc#1112178)
- drm/nouveau/volt: Fix for some cards having 0 maximum voltage (bsc#1111666).
- drm/omap: fix max fclk divider for omap36xx (bsc#1111666).
- drm/panel: check failure cases in the probe func (bsc#1111666).
- drm/panel: make drm_panel.h self-contained (bsc#1111666).
- drm/panel: simple: fix AUO g185han01 horizontal blanking (bsc#1051510).
- drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed (bsc#1111666).
- drm/radeon: Fix EEH during kexec (bsc#1051510).
- drm/rockchip: Check for fast link training before enabling psr (bsc#1111666).
- drm/stm: attach gem fence to atomic state (bsc#1111666).
- drm/tilcdc: Register cpufreq notifier after we have initialized crtc (bsc#1051510).
- drm/vmwgfx: Fix double free in vmw_recv_msg() (bsc#1051510).
- drm: Flush output polling on shutdown (bsc#1051510).
- drm: add __user attribute to ptr_to_compat() (bsc#1111666).
- drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC (bsc#1111666).
- drm: rcar-du: lvds: Fix bridge_to_rcar_lvds (bsc#1111666).
- e1000e: add workaround for possible stalled packet (bsc#1051510).
- efi/arm: Show SMBIOS bank/device location in CPER and GHES error logs (bsc#1152033).
- efi/memattr: Do not bail on zero VA if it equals the region's PA (bsc#1051510).
- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efivar/ssdt: Do not iterate over EFI vars if no SSDT override was specified (bsc#1051510).
- firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices (git-fixes).
- gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() (bsc#1051510).
- hid: apple: Fix stuck function keys when using FN (bsc#1051510).
- hid: fix error message in hid_open_report() (bsc#1051510).
- hid: hidraw: Fix invalid read in hidraw_ioctl (bsc#1051510).
- hid: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy() (bsc#1051510).
- hid: logitech: Fix general protection fault caused by Logitech driver (bsc#1051510).
- hid: prodikeys: Fix general protection fault during probe (bsc#1051510).
- hid: sony: Fix memory corruption issue on cleanup (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' (bsc#1051510).
- hwrng: core: do not wait on add_early_randomness() (git-fixes).
- hyperv: set nvme msi interrupts to unmanaged (jsc#SLE-8953, jsc#SLE-9221, jsc#SLE-4941, bsc#1119461, bsc#1119465, bsc#1138190, bsc#1154905).
- i2c: riic: Clear NACK in tend isr (bsc#1051510).
- ib/core, ipoib: Do not overreact to SM LID change event (bsc#1154108)
- ib/core: Add mitigation for Spectre V1 (bsc#1155671)
- ib/hfi1: Remove overly conservative VM_EXEC flag check (bsc#1144449).
- ib/mlx5: Consolidate use_umr checks into single function (bsc#1093205).
- ib/mlx5: Fix MR re-registration flow to use UMR properly (bsc#1093205).
- ib/mlx5: Report correctly tag matching rendezvous capability (bsc#1046305).
- ieee802154: atusb: fix use-after-free at disconnect (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- ieee802154: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- iio: adc: ad799x: fix probe error handling (bsc#1051510).
- iio: light: opt3001: fix mutex unlock race (bsc#1051510).
- ima: always return negative code for error (bsc#1051510).
- input: da9063: fix capability and drop KEY_SLEEP (bsc#1051510).
- input: synaptics-rmi4: avoid processing unknown IRQs (bsc#1051510).
- integrity: prevent deadlock during digsig verification (bsc#1090631).
- iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 (bsc#1137799).
- iommu/amd: Check PM_LEVEL_SIZE() condition in locked section (bsc#1154608).
- iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems (bsc#1137799).
- iommu/amd: Remove domain-&gt;updated (bsc#1154610).
- iommu/amd: Wait for completion of IOTLB flush in attach_device (bsc#1154611).
- ipmi_si: Only schedule continuously in the thread in maintenance mode (bsc#1051510).
- ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' (networking-stable-19_09_15).
- ipv6: Handle missing host route in __ipv6_ifa_notify (networking-stable-19_10_05).
- ipv6: drop incoming packets having a v4mapped source address (networking-stable-19_10_05).
- iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init (bsc#1111666).
- ixgbe: Fix secpath usage for IPsec TX offload (bsc#1113994 bsc#1151807).
- ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (bsc#1101674).
- ixgbe: sync the first fragment unconditionally (bsc#1133140).
- kABI workaround for crypto/af_alg changes (bsc#1154737).
- kABI workaround for drm_connector.registered type changes (bsc#1111666).
- kABI workaround for mmc_host retune_crc_disable flag addition (bsc#1111666).
- kABI workaround for snd_hda_pick_pin_fixup() changes (bsc#1051510).
- kabi/severities: Whitelist functions internal to radix mm. To call these functions you have to first detect if you are running in radix mm mode which can't be expected of OOT code.
- kabi: net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05).
- kernel-binary.spec.in: Fix build of non-modular kernels (boo#1154578).
- kernel-binary.spec.in: Obsolete kgraft packages only when not building them.
- kernel-binary: Drop .kernel-binary.spec.buildenv (boo#1154578). Without this patch, /usr/src/linux-@VERSION@-@RELEASE_SHORT@-obj/x86_64/vanilla/.kernel-binary.spec.buildenv contained rpm %_smp_mflags in a line like export MAKE_ARGS=' --output-sync -j4' This made it hard to produce bit-identical builds.
- kernel-binary: check also bzImage on s390/s390x Starting with 4.19-rc1, uncompressed image is no longer built on s390x. If file 'image' is not found in arch/s390/boot after the build, try bzImage instead. For now, install bzImage under the name image-* until we know grub2 and our grub2 scripts can handle correct name.
- kernel-subpackage-build: create zero size ghost for uncompressed vmlinux (bsc#1154354). It is not strictly necessary to uncompress it so maybe the ghost file can be 0 size in this case.
- kernel/sysctl.c: do not override max_threads provided by userspace (bnc#1150875).
- ksm: cleanup stable_node chain collapse case (bnc#1144338).
- ksm: fix use after free with merge_across_nodes = 0 (bnc#1144338).
- ksm: introduce ksm_max_page_sharing per page deduplication limit (bnc#1144338).
- ksm: optimize refile of stable_node_dup at the head of the chain (bnc#1144338).
- ksm: swap the two output parameters of chain/chain_prune (bnc#1144338).
- kvm: Convert kvm_lock to a mutex (bsc#1117665).
- kvm: mmu: drop vcpu param in gpte_access (bsc#1117665).
- kvm: ppc: book3s hv: use smp_mb() when setting/clearing host_ipi flag (bsc#1061840).
- kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bsc#1117665).
- kvm: x86, powerpc: do not allow clearing largepages debugfs entry (bsc#1117665).
- kvm: x86: Do not release the page inside mmu_set_spte() (bsc#1117665).
- kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (bsc#1117665).
- kvm: x86: adjust kvm_mmu_page member to save 8 bytes (bsc#1117665).
- kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (bsc#1117665).
- kvm: x86: make FNAME(fetch) and __direct_map more similar (bsc#1117665).
- kvm: x86: remove now unneeded hugepage gfn adjustment (bsc#1117665).
- lib/mpi: Fix karactx leak in mpi_powm (bsc#1051510).
- libertas: Add missing sentinel at end of if_usb.c fw_table (bsc#1051510).
- libnvdimm/security: provide fix for secure-erase to use zero-key (bsc#1149853).
- lpfc: Add FA-WWN Async Event reporting (bsc#1154521).
- lpfc: Add FC-AL support to lpe32000 models (bsc#1154521).
- lpfc: Add additional discovery log messages (bsc#1154521).
- lpfc: Add log macros to allow print by serverity or verbocity setting (bsc#1154521).
- lpfc: Fix SLI3 hba in loop mode not discovering devices (bsc#1154521).
- lpfc: Fix bad ndlp ptr in xri aborted handling (bsc#1154521).
- lpfc: Fix hardlockup in lpfc_abort_handler (bsc#1154521).
- lpfc: Fix lockdep errors in sli_ringtx_put (bsc#1154521).
- lpfc: Fix reporting of read-only fw error errors (bsc#1154521).
- lpfc: Make FW logging dynamically configurable (bsc#1154521).
- lpfc: Remove lock contention target write path (bsc#1154521).
- lpfc: Revise interrupt coalescing for missing scenarios (bsc#1154521).
- lpfc: Slight fast-path Performance optimizations (bsc#1154521).
- lpfc: Update lpfc version to 12.6.0.0 (bsc#1154521).
- lpfc: fix coverity error of dereference after null check (bsc#1154521).
- lpfc: fix lpfc_nvmet_mrq to be bound by hdw queue count (bsc#1154521).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- mac80211: accept deauth frames in IBSS mode (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- macsec: drop skb sk before calling gro_cells_receive (bsc#1051510).
- md/raid0: avoid RAID0 data corruption due to layout confusion (bsc#1140090).
- md/raid0: fix warning message for parameter default_layout (bsc#1140090).
- media: atmel: atmel-isc: fix asd memory allocation (bsc#1135642).
- media: cpia2_usb: fix memory leaks (bsc#1051510).
- media: dvb-core: fix a memory leak bug (bsc#1051510).
- media: exynos4-is: fix leaked of_node references (bsc#1051510).
- media: gspca: zero usb_buf on error (bsc#1051510).
- media: hdpvr: Add device num check and handling (bsc#1051510).
- media: hdpvr: add terminating 0 at end of string (bsc#1051510).
- media: i2c: ov5645: Fix power sequence (bsc#1051510).
- media: iguanair: add sanity checks (bsc#1051510).
- media: omap3isp: Do not set streaming state on random subdevs (bsc#1051510).
- media: omap3isp: Set device on omap3isp subdevs (bsc#1051510).
- media: ov9650: add a sanity check (bsc#1051510).
- media: radio/si470x: kill urb on error (bsc#1051510).
- media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() (bsc#1051510).
- media: saa7146: add cleanup in hexium_attach() (bsc#1051510).
- media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table (bsc#1051510).
- media: stkwebcam: fix runtime PM after driver unbind (bsc#1051510).
- media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (bsc#1051510).
- memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' (bsc#1051510).
- mfd: intel-lpss: Remove D3cold delay (bsc#1051510).
- misdn: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- mld: fix memory leak in mld_del_delrec() (networking-stable-19_09_05).
- mmc: core: API to temporarily disable retuning for SDIO CRC errors (bsc#1111666).
- mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() (bsc#1111666).
- mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence (bsc#1051510).
- mmc: sdhci: Fix incorrect switch to HS mode (bsc#1051510).
- mmc: sdhci: improve ADMA error reporting (bsc#1051510).
- net/ibmvnic: Fix EOI when running in XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes).
- net/mlx4_en: fix a memory leak bug (bsc#1046299).
- net/mlx5: Add device ID of upcoming BlueField-2 (bsc#1046303 ).
- net/mlx5: Fix error handling in mlx5_load() (bsc#1046305 ).
- net/phy: fix DP83865 10 Mbps HDX loopback disable function (networking-stable-19_09_30).
- net/rds: Fix error handling in rds_ib_add_one() (networking-stable-19_10_05).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- net/rds: remove user triggered WARN_ON in rds_sendmsg (bsc#1154848).
- net/sched: act_sample: do not push mac header on ip6gre ingress (networking-stable-19_09_30).
- net: Fix null de-reference of device refcount (networking-stable-19_09_15).
- net: Replace NF_CT_ASSERT() with WARN_ON() (bsc#1146612).
- net: Unpublish sk from sk_reuseport_cb before call_rcu (networking-stable-19_10_05).
- net: fix skb use after free in netpoll (networking-stable-19_09_05).
- net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list (networking-stable-19_09_15).
- net: openvswitch: free vport unless register_netdevice() succeeds (git-fixes).
- net: qlogic: Fix memory leak in ql_alloc_large_buffers (networking-stable-19_10_05).
- net: qrtr: Stop rx_worker before freeing node (networking-stable-19_09_30).
- net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05).
- net: stmmac: dwmac-rk: Do not fail if phy regulator is absent (networking-stable-19_09_05).
- net_sched: add policy validation for action attributes (networking-stable-19_09_30).
- net_sched: fix backward compatibility for TCA_ACT_KIND (git-fixes).
- netfilter: nf_nat: do not bug when mapping already exists (bsc#1146612).
- nfc: fix attrs checks in netlink interface (bsc#1051510).
- nfc: fix memory leak in llcp_sock_bind() (bsc#1051510).
- nfc: pn533: fix use-after-free and memleaks (bsc#1051510).
- nfsv4.1: backchannel request should hold ref on xprt (bsc#1152624).
- nl80211: fix null pointer dereference (bsc#1051510).
- objtool: Clobber user CFLAGS variable (bsc#1153236).
- openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC (networking-stable-19_09_30).
- packaging: add support for riscv64
- pci: Correct pci=resource_alignment parameter example (bsc#1051510).
- pci: dra7xx: Fix legacy INTD IRQ handling (bsc#1087092).
- pci: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (bsc#1153263).
- pci: pm: Fix pci_power_up() (bsc#1051510).
- pinctrl: cherryview: restore Strago DMI workaround for all versions (bsc#1111666).
- pinctrl: tegra: Fix write barrier placement in pmx_writel (bsc#1051510).
- platform/x86: classmate-laptop: remove unused variable (bsc#1051510).
- platform/x86: i2c-multi-instantiate: Derive the device name from parent (bsc#1111666).
- platform/x86: i2c-multi-instantiate: Fail the probe if no IRQ provided (bsc#1111666).
- platform/x86: pmc_atom: Add Siemens SIMATIC IPC277E to critclk_systems DMI table (bsc#1051510).
- power: supply: sysfs: ratelimit property read error message (bsc#1051510).
- powerpc/64s/pseries: radix flush translations before MMU is enabled at boot (bsc#1055186).
- powerpc/64s/radix: keep kernel ERAT over local process/guest invalidates (bsc#1055186).
- powerpc/64s/radix: tidy up TLB flushing code (bsc#1055186).
- powerpc/64s: Rename PPC_INVALIDATE_ERAT to PPC_ISA_3_0_INVALIDATE_ERAT (bsc#1055186).
- powerpc/mm/book3s64: Move book3s64 code to pgtable-book3s64 (bsc#1055186).
- powerpc/mm/radix: mark __radix__flush_tlb_range_psize() as __always_inline (bsc#1055186).
- powerpc/mm/radix: mark as __tlbie_pid() and friends as__always_inline (bsc#1055186).
- powerpc/mm: Properly invalidate when setting process table base (bsc#1055186).
- powerpc/mm: mark more tlb functions as __always_inline (bsc#1055186).
- powerpc/pseries/mobility: use cond_resched when updating device tree (bsc#1153112 ltc#181778).
- powerpc/pseries: Remove confusing warning message (bsc#1109158).
- powerpc/rtas: allow rescheduling while changing cpu states (bsc#1153112 ltc#181778).
- powerplay: Respect units on max dcfclk watermark (bsc#1111666).
- qed: iwarp: Fix default window size to be based on chip (bsc#1050536 bsc#1050545).
- qed: iwarp: Fix tc for MPA ll2 connection (bsc#1050536 bsc#1050545).
- qed: iwarp: Use READ_ONCE and smp_store_release to access ep-&gt;state (bsc#1050536 bsc#1050545).
- qed: iwarp: fix uninitialized callback (bsc#1050536 bsc#1050545).
- qmi_wwan: add support for Cinterion CLS8 devices (networking-stable-19_10_05).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- rdma/bnxt_re: Fix spelling mistake 'missin_resp' -&gt; 'missing_resp' (bsc#1050244).
- rdma/hns: Add reset process for function-clear (bsc#1155061).
- rdma/hns: Remove the some magic number (bsc#1155061).
- rdma: Fix goto target to release the allocated memory (bsc#1050244).
- rds: Fix warning (bsc#1154848).
- rpm/config.sh: Enable livepatch.
- rpm/constraints.in: lower disk space required for ARM With a requirement of 35GB, only 2 slow workers are usable for ARM. Current aarch64 build requires 27G and armv6/7 requires 14G. Set requirements respectively to 30GB and 20GB.
- rpm/dtb.spec.in.in: do not make dtb directory inaccessible There is no reason to lock down the dtb directory for ordinary users.
- rpm/kernel-binary.spec.in: Fix kernel-livepatch description typo.
- rpm/kernel-binary.spec.in: build kernel-*-kgraft only for default SLE kernel RT and Azure variants are excluded for the moment. (bsc#1141600)
- rpm/kernel-binary.spec.in: handle modules.builtin.modinfo It was added in 5.2.
- rpm/kernel-binary.spec.in: support partial rt debug config.
- rpm/kernel-subpackage-spec: Mention debuginfo in the subpackage description (bsc#1149119).
- rpm/macros.kernel-source: KMPs should depend on kmod-compat to build. kmod-compat links are used in find-provides.ksyms, find-requires.ksyms, and find-supplements.ksyms in rpm-config-SUSE.
- rpm/mkspec: Correct tarball URL for rc kernels.
- rpm/mkspec: Make building DTBs optional.
- rpm/modflist: Simplify compression support.
- rpm: raise required disk space for binary packages Current disk space constraints (10 GB on s390x, 25 GB on other architectures) no longer suffice for 5.3 kernel builds. The statistics show ~30 GB of disk consumption on x86_64 and ~11 GB on s390x so raise the constraints to 35 GB in general and 14 GB on s390x.
- rpm: support compressed modules Some of our scripts and scriptlets in rpm/ do not expect module files not ending with '.ko' which currently leads to failure in preuninstall scriptlet of cluster-md-kmp-default (and probably also other subpackages). Let those which could be run on compressed module files recognize '.ko.xz' in addition to '.ko'.
- rtlwifi: rtl8192cu: Fix value set in descriptor (bsc#1142635).
- s390/cmf: set_schib_wait add timeout (bsc#1153509, bsc#1153476).
- s390/cpumsf: Check for CPU Measurement sampling (bsc#1153681 LTC#181855).
- s390/crypto: fix gcm-aes-s390 selftest failures (bsc#1137861 LTC#178091).
- s390/pci: add mio_enabled attribute (bsc#1152665 LTC#181729).
- s390/pci: correctly handle MIO opt-out (bsc#1152665 LTC#181729).
- s390/pci: deal with devices that have no support for MIO instructions (bsc#1152665 LTC#181729).
- s390/pci: fix MSI message data (bsc#1152697 LTC#181730).
- s390: add support for IBM z15 machines (bsc#1152696 LTC#181731).
- s390: fix setting of mio addressing control (bsc#1152665 LTC#181729).
- sch_cbq: validate TCA_CBQ_WRROPT to avoid crash (networking-stable-19_10_05).
- sch_dsmark: fix potential NULL deref in dsmark_init() (networking-stable-19_10_05).
- sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero (networking-stable-19_09_15).
- sch_netem: fix a divide by zero in tabledist() (networking-stable-19_09_30).
- sched/fair: Avoid divide by zero when rebalancing domains (bsc#1096254).
- scripts/arch-symbols: add missing link.
- scsi: lpfc: Check queue pointer before use (bsc#1154242).
- scsi: lpfc: Complete removal of FCoE T10 PI support on SLI-4 adapters (bsc#1154521).
- scsi: lpfc: Convert existing %pf users to %ps (bsc#1154521).
- scsi: lpfc: Fix GPF on scsi command completion (bsc#1154521).
- scsi: lpfc: Fix NVME io abort failures causing hangs (bsc#1154521).
- scsi: lpfc: Fix NVMe ABTS in response to receiving an ABTS (bsc#1154521).
- scsi: lpfc: Fix coverity errors on NULL pointer checks (bsc#1154521).
- scsi: lpfc: Fix device recovery errors after PLOGI failures (bsc#1154521).
- scsi: lpfc: Fix devices that do not return after devloss followed by rediscovery (bsc#1137040).
- scsi: lpfc: Fix discovery failures when target device connectivity bounces (bsc#1154521).
- scsi: lpfc: Fix hdwq sgl locks and irq handling (bsc#1154521).
- scsi: lpfc: Fix host hang at boot or slow boot (bsc#1154521).
- scsi: lpfc: Fix list corruption detected in lpfc_put_sgl_per_hdwq (bsc#1154521).
- scsi: lpfc: Fix list corruption in lpfc_sli_get_iocbq (bsc#1154521).
- scsi: lpfc: Fix locking on mailbox command completion (bsc#1154521).
- scsi: lpfc: Fix miss of register read failure check (bsc#1154521).
- scsi: lpfc: Fix null ptr oops updating lpfc_devloss_tmo via sysfs attribute (bsc#1140845).
- scsi: lpfc: Fix premature re-enabling of interrupts in lpfc_sli_host_down (bsc#1154521).
- scsi: lpfc: Fix propagation of devloss_tmo setting to nvme transport (bsc#1140883).
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (bsc#1154521).
- scsi: lpfc: Fix rpi release when deleting vport (bsc#1154521).
- scsi: lpfc: Fix spinlock_irq issues in lpfc_els_flush_cmd() (bsc#1154521).
- scsi: lpfc: Make function lpfc_defer_pt2pt_acc static (bsc#1154521).
- scsi: lpfc: Remove bg debugfs buffers (bsc#1144375).
- scsi: lpfc: Update async event logging (bsc#1154521).
- scsi: lpfc: Update lpfc version to 12.4.0.1 (bsc#1154521).
- scsi: lpfc: cleanup: remove unused fcp_txcmlpq_cnt (bsc#1154521).
- scsi: lpfc: remove left-over BUILD_NVME defines (bsc#1154268).
- scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (bsc#1098291).
- scsi: qedf: fc_rport_priv reference counting fixes (bsc#1098291).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix partial flash write of MBI (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix wait condition in loop (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Initialized mailbox to prevent driver load failure (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: fixup incorrect usage of host_byte (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: stop timer in shutdown path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: storvsc: setup 1:1 mapping between hardware queue and CPU queue (bsc#1140729).
- scsi: zfcp: fix reaction on bit error threshold notification (bsc#1154956 LTC#182054).
- sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' (networking-stable-19_09_15).
- sctp: use transport pf_retrans in sctp_do_8_2_transport_strike (networking-stable-19_09_15).
- skge: fix checksum byte order (networking-stable-19_09_30).
- sock_diag: fix autoloading of the raw_diag module (bsc#1152791).
- sock_diag: request _diag module only when the family or proto has been registered (bsc#1152791).
- staging: bcm2835-audio: Fix draining behavior regression (bsc#1111666).
- staging: vt6655: Fix memory leak in vt6655_probe (bsc#1051510).
- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;= NUM_WEPKEYS (bsc#1051510).
- supporte.conf: add efivarfs to kernel-default-base (bsc#1154858).
- tcp: Do not dequeue SYN/FIN-segments from write-queue (git-gixes).
- tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR (networking-stable-19_09_15).
- tcp: inherit timestamp on mtu probe (networking-stable-19_09_05).
- tcp: remove empty skb from write queue in error cases (networking-stable-19_09_05).
- thermal: Fix use-after-free when unregistering thermal zone device (bsc#1051510).
- thermal_hwmon: Sanitize thermal_zone type (bsc#1051510).
- tipc: add NULL pointer check before calling kfree_rcu (networking-stable-19_09_15).
- tipc: fix unlimited bundling of small messages (networking-stable-19_10_05).
- tracing: Initialize iter-&gt;seq after zeroing in tracing_read_pipe() (bsc#1151508).
- tun: fix use-after-free when register netdev failed (networking-stable-19_09_15).
- tuntap: correctly set SOCKWQ_ASYNC_NOSPACE (bsc#1145099).
- usb: adutux: fix NULL-derefs on disconnect (bsc#1142635).
- usb: adutux: fix use-after-free on disconnect (bsc#1142635).
- usb: adutux: fix use-after-free on release (bsc#1051510).
- usb: chaoskey: fix use-after-free on release (bsc#1051510).
- usb: dummy-hcd: fix power budget for SuperSpeed mode (bsc#1051510).
- usb: iowarrior: fix use-after-free after driver unbind (bsc#1051510).
- usb: iowarrior: fix use-after-free on disconnect (bsc#1051510).
- usb: iowarrior: fix use-after-free on release (bsc#1051510).
- usb: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- usb: ldusb: fix memleak on disconnect (bsc#1051510).
- usb: ldusb: fix read info leaks (bsc#1051510).
- usb: legousbtower: fix a signedness bug in tower_probe() (bsc#1051510).
- usb: legousbtower: fix deadlock on disconnect (bsc#1142635).
- usb: legousbtower: fix memleak on disconnect (bsc#1051510).
- usb: legousbtower: fix open after failed reset request (bsc#1142635).
- usb: legousbtower: fix potential NULL-deref on disconnect (bsc#1142635).
- usb: legousbtower: fix slab info leak at probe (bsc#1142635).
- usb: legousbtower: fix use-after-free on release (bsc#1051510).
- usb: microtek: fix info-leak at probe (bsc#1142635).
- usb: serial: fix runtime PM after driver unbind (bsc#1051510).
- usb: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20 (bsc#1051510).
- usb: serial: keyspan: fix NULL-derefs on open() and write() (bsc#1051510).
- usb: serial: option: add Telit FN980 compositions (bsc#1051510).
- usb: serial: option: add support for Cinterion CLS8 devices (bsc#1051510).
- usb: serial: ti_usb_3410_5052: fix port-close races (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- usb: usb-skeleton: fix NULL-deref on disconnect (bsc#1051510).
- usb: usb-skeleton: fix runtime PM after driver unbind (bsc#1051510).
- usb: usb-skeleton: fix use-after-free after driver unbind (bsc#1051510).
- usb: usblcd: fix I/O after disconnect (bsc#1142635).
- usb: usblp: fix runtime PM after driver unbind (bsc#1051510).
- usb: usblp: fix use-after-free on disconnect (bsc#1051510).
- usb: xhci: wait for CNR controller not ready bit in xhci resume (bsc#1051510).
- usb: yurex: Do not retry on unexpected errors (bsc#1051510).
- usb: yurex: fix NULL-derefs on disconnect (bsc#1051510).
- usbnet: ignore endpoints with invalid wMaxPacketSize (bsc#1051510).
- usbnet: sanity checking of packet sizes and device mtu (bsc#1051510).
- vfio_pci: Restore original state on release (bsc#1051510).
- vhost_net: conditionally enable tx polling (bsc#1145099).
- video: of: display_timing: Add of_node_put() in of_get_display_timing() (bsc#1051510).
- vsock: Fix a lockdep warning in __vsock_release() (networking-stable-19_10_05).
- watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout (bsc#1051510).
- x86/asm: Fix MWAITX C-state hint value (bsc#1114279).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area (bnc#1153969).
- x86/boot/64: Round memory hole size up to next PMD page (bnc#1153969).
- x86/mm: Use WRITE_ONCE() when setting PTEs (bsc#1114279).
- xen/netback: fix error path of xenvif_connect_data() (bsc#1065600).
- xen/pv: Fix Xen PV guest int3 handling (bsc#1153811).
- xhci: Check all endpoints for LPM timeout (bsc#1051510).
- xhci: Fix false warning message about wrong bounce buffer write length (bsc#1051510).
- xhci: Increase STS_SAVE timeout in xhci_suspend() (bsc#1051510).
- xhci: Prevent device initiated U1/U2 link pm if exit latency is too long (bsc#1051510).

		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-12"/>
	<updated date="2019-11-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046299">SUSE bug 1046299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046303">SUSE bug 1046303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046305">SUSE bug 1046305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073513">SUSE bug 1073513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086323">SUSE bug 1086323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087092">SUSE bug 1087092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089644">SUSE bug 1089644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090631">SUSE bug 1090631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093205">SUSE bug 1093205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096254">SUSE bug 1096254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097583">SUSE bug 1097583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097584">SUSE bug 1097584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097585">SUSE bug 1097585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097586">SUSE bug 1097586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097587">SUSE bug 1097587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097588">SUSE bug 1097588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098291">SUSE bug 1098291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101674">SUSE bug 1101674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109158">SUSE bug 1109158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117665">SUSE bug 1117665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119461">SUSE bug 1119461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119465">SUSE bug 1119465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123034">SUSE bug 1123034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123080">SUSE bug 1123080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133140">SUSE bug 1133140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134303">SUSE bug 1134303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135854">SUSE bug 1135854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135873">SUSE bug 1135873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135967">SUSE bug 1135967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137040">SUSE bug 1137040</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137799">SUSE bug 1137799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137861">SUSE bug 1137861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138190">SUSE bug 1138190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139073">SUSE bug 1139073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140090">SUSE bug 1140090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140729">SUSE bug 1140729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140845">SUSE bug 1140845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140883">SUSE bug 1140883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141600">SUSE bug 1141600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142667">SUSE bug 1142667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144338">SUSE bug 1144338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144375">SUSE bug 1144375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144449">SUSE bug 1144449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145099">SUSE bug 1145099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146612">SUSE bug 1146612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148410">SUSE bug 1148410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149119">SUSE bug 1149119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149853">SUSE bug 1149853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150452">SUSE bug 1150452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150457">SUSE bug 1150457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150465">SUSE bug 1150465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150875">SUSE bug 1150875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151508">SUSE bug 1151508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151807">SUSE bug 1151807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152033">SUSE bug 1152033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152624">SUSE bug 1152624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152665">SUSE bug 1152665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152685">SUSE bug 1152685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152696">SUSE bug 1152696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152697">SUSE bug 1152697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152788">SUSE bug 1152788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152790">SUSE bug 1152790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152791">SUSE bug 1152791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153112">SUSE bug 1153112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153158">SUSE bug 1153158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153236">SUSE bug 1153236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153263">SUSE bug 1153263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153476">SUSE bug 1153476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153509">SUSE bug 1153509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153607">SUSE bug 1153607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153646">SUSE bug 1153646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153681">SUSE bug 1153681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153713">SUSE bug 1153713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153717">SUSE bug 1153717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153718">SUSE bug 1153718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153719">SUSE bug 1153719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153811">SUSE bug 1153811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153969">SUSE bug 1153969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154108">SUSE bug 1154108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154189">SUSE bug 1154189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154242">SUSE bug 1154242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154268">SUSE bug 1154268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154354">SUSE bug 1154354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154372">SUSE bug 1154372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154521">SUSE bug 1154521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154578">SUSE bug 1154578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154607">SUSE bug 1154607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154608">SUSE bug 1154608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154610">SUSE bug 1154610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154611">SUSE bug 1154611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154651">SUSE bug 1154651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154737">SUSE bug 1154737</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154747">SUSE bug 1154747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154848">SUSE bug 1154848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154858">SUSE bug 1154858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154905">SUSE bug 1154905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154956">SUSE bug 1154956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155061">SUSE bug 1155061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155178">SUSE bug 1155178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155179">SUSE bug 1155179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155184">SUSE bug 1155184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155186">SUSE bug 1155186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155671">SUSE bug 1155671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802154">SUSE bug 802154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/814594">SUSE bug 814594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/919448">SUSE bug 919448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987367">SUSE bug 987367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998153">SUSE bug 998153</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12207/">CVE-2018-12207</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11135/">CVE-2019-11135</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16232/">CVE-2019-16232</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16233/">CVE-2019-16233</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16234/">CVE-2019-16234</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-16995/">CVE-2019-16995</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-17056/">CVE-2019-17056</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17133/">CVE-2019-17133</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-17666/">CVE-2019-17666</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497050" comment="reiserfs-kmp-default-4.12.14-197.26.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138295" version="1" class="patch">
	<metadata>
		<title>Security update for ncurses (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1103320" ref_url="https://bugzilla.suse.com/1103320" source="BUGZILLA"/>
		<reference ref_id="1154036" ref_url="https://bugzilla.suse.com/1154036" source="BUGZILLA"/>
		<reference ref_id="1154037" ref_url="https://bugzilla.suse.com/1154037" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17594" ref_url="https://www.suse.com/security/cve/CVE-2019-17594/" source="CVE"/>
		<reference ref_id="CVE-2019-17595" ref_url="https://www.suse.com/security/cve/CVE-2019-17595/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006155.html" source="SUSE-SU"/>
		<description>
This update for ncurses fixes the following issues:

Security issues fixed:

- CVE-2019-17594: Fixed a heap-based buffer over-read in the _nc_find_entry function (bsc#1154036).
- CVE-2019-17595: Fixed a heap-based buffer over-read in the fmt_entry function (bsc#1154037).

Non-security issue fixed:

- Removed screen.xterm from terminfo database (bsc#1103320).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-18"/>
	<updated date="2019-11-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1103320">SUSE bug 1103320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154036">SUSE bug 1154036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154037">SUSE bug 1154037</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17594/">CVE-2019-17594</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17595/">CVE-2019-17595</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497004" comment="libncurses5-6.1-5.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497005" comment="libncurses5-32bit-6.1-5.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497006" comment="ncurses5-devel-6.1-5.6.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138296" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1138529" ref_url="https://bugzilla.suse.com/1138529" source="BUGZILLA"/>
		<reference ref_id="1152856" ref_url="https://bugzilla.suse.com/1152856" source="BUGZILLA"/>
		<reference ref_id="1154212" ref_url="https://bugzilla.suse.com/1154212" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-2894" ref_url="https://www.suse.com/security/cve/CVE-2019-2894/" source="CVE"/>
		<reference ref_id="CVE-2019-2933" ref_url="https://www.suse.com/security/cve/CVE-2019-2933/" source="CVE"/>
		<reference ref_id="CVE-2019-2945" ref_url="https://www.suse.com/security/cve/CVE-2019-2945/" source="CVE"/>
		<reference ref_id="CVE-2019-2949" ref_url="https://www.suse.com/security/cve/CVE-2019-2949/" source="CVE"/>
		<reference ref_id="CVE-2019-2958" ref_url="https://www.suse.com/security/cve/CVE-2019-2958/" source="CVE"/>
		<reference ref_id="CVE-2019-2962" ref_url="https://www.suse.com/security/cve/CVE-2019-2962/" source="CVE"/>
		<reference ref_id="CVE-2019-2964" ref_url="https://www.suse.com/security/cve/CVE-2019-2964/" source="CVE"/>
		<reference ref_id="CVE-2019-2973" ref_url="https://www.suse.com/security/cve/CVE-2019-2973/" source="CVE"/>
		<reference ref_id="CVE-2019-2975" ref_url="https://www.suse.com/security/cve/CVE-2019-2975/" source="CVE"/>
		<reference ref_id="CVE-2019-2978" ref_url="https://www.suse.com/security/cve/CVE-2019-2978/" source="CVE"/>
		<reference ref_id="CVE-2019-2981" ref_url="https://www.suse.com/security/cve/CVE-2019-2981/" source="CVE"/>
		<reference ref_id="CVE-2019-2983" ref_url="https://www.suse.com/security/cve/CVE-2019-2983/" source="CVE"/>
		<reference ref_id="CVE-2019-2987" ref_url="https://www.suse.com/security/cve/CVE-2019-2987/" source="CVE"/>
		<reference ref_id="CVE-2019-2988" ref_url="https://www.suse.com/security/cve/CVE-2019-2988/" source="CVE"/>
		<reference ref_id="CVE-2019-2989" ref_url="https://www.suse.com/security/cve/CVE-2019-2989/" source="CVE"/>
		<reference ref_id="CVE-2019-2992" ref_url="https://www.suse.com/security/cve/CVE-2019-2992/" source="CVE"/>
		<reference ref_id="CVE-2019-2999" ref_url="https://www.suse.com/security/cve/CVE-2019-2999/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006231.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk (jdk8u232/icedtea 3.14.0) fixes the following issues:

Security issues fixed (bsc#1154212):

- CVE-2019-2933: Windows file handling redux
- CVE-2019-2945: Better socket support
- CVE-2019-2949: Better Kerberos ccache handling
- CVE-2019-2958: Build Better Processes
- CVE-2019-2964: Better support for patterns
- CVE-2019-2962: Better Glyph Images
- CVE-2019-2973: Better pattern compilation
- CVE-2019-2975: Unexpected exception in jjs
- CVE-2019-2978: Improved handling of jar files
- CVE-2019-2981: Better Path supports
- CVE-2019-2983: Better serial attributes
- CVE-2019-2987: Better rendering of native glyphs
- CVE-2019-2988: Better Graphics2D drawing
- CVE-2019-2989: Improve TLS connection support
- CVE-2019-2992: Enhance font glyph mapping
- CVE-2019-2999: Commentary on Javadoc comments
- CVE-2019-2894: Enhance ECDSA operations (bsc#1152856)

Bug fixes:

- Fixed build failuers on ARM (bsc#1138529).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-10"/>
	<updated date="2019-12-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1138529">SUSE bug 1138529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152856">SUSE bug 1152856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2894/">CVE-2019-2894</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2933/">CVE-2019-2933</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2945/">CVE-2019-2945</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2949/">CVE-2019-2949</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-2958/">CVE-2019-2958</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2962/">CVE-2019-2962</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2964/">CVE-2019-2964</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2973/">CVE-2019-2973</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-2975/">CVE-2019-2975</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2978/">CVE-2019-2978</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2981/">CVE-2019-2981</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2983/">CVE-2019-2983</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2987/">CVE-2019-2987</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2988/">CVE-2019-2988</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-2989/">CVE-2019-2989</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2992/">CVE-2019-2992</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-2999/">CVE-2019-2999</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497007" comment="java-1_8_0-openjdk-1.8.0.232-3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497008" comment="java-1_8_0-openjdk-demo-1.8.0.232-3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497009" comment="java-1_8_0-openjdk-devel-1.8.0.232-3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497010" comment="java-1_8_0-openjdk-headless-1.8.0.232-3.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138297" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1048942" ref_url="https://bugzilla.suse.com/1048942" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1078248" ref_url="https://bugzilla.suse.com/1078248" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1089644" ref_url="https://bugzilla.suse.com/1089644" source="BUGZILLA"/>
		<reference ref_id="1091041" ref_url="https://bugzilla.suse.com/1091041" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1108043" ref_url="https://bugzilla.suse.com/1108043" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1117169" ref_url="https://bugzilla.suse.com/1117169" source="BUGZILLA"/>
		<reference ref_id="1118661" ref_url="https://bugzilla.suse.com/1118661" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1120853" ref_url="https://bugzilla.suse.com/1120853" source="BUGZILLA"/>
		<reference ref_id="1126390" ref_url="https://bugzilla.suse.com/1126390" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1131107" ref_url="https://bugzilla.suse.com/1131107" source="BUGZILLA"/>
		<reference ref_id="1134983" ref_url="https://bugzilla.suse.com/1134983" source="BUGZILLA"/>
		<reference ref_id="1135966" ref_url="https://bugzilla.suse.com/1135966" source="BUGZILLA"/>
		<reference ref_id="1135967" ref_url="https://bugzilla.suse.com/1135967" source="BUGZILLA"/>
		<reference ref_id="1137223" ref_url="https://bugzilla.suse.com/1137223" source="BUGZILLA"/>
		<reference ref_id="1137236" ref_url="https://bugzilla.suse.com/1137236" source="BUGZILLA"/>
		<reference ref_id="1138039" ref_url="https://bugzilla.suse.com/1138039" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1142095" ref_url="https://bugzilla.suse.com/1142095" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142924" ref_url="https://bugzilla.suse.com/1142924" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1149448" ref_url="https://bugzilla.suse.com/1149448" source="BUGZILLA"/>
		<reference ref_id="1150466" ref_url="https://bugzilla.suse.com/1150466" source="BUGZILLA"/>
		<reference ref_id="1151067" ref_url="https://bugzilla.suse.com/1151067" source="BUGZILLA"/>
		<reference ref_id="1151548" ref_url="https://bugzilla.suse.com/1151548" source="BUGZILLA"/>
		<reference ref_id="1151900" ref_url="https://bugzilla.suse.com/1151900" source="BUGZILLA"/>
		<reference ref_id="1152782" ref_url="https://bugzilla.suse.com/1152782" source="BUGZILLA"/>
		<reference ref_id="1153628" ref_url="https://bugzilla.suse.com/1153628" source="BUGZILLA"/>
		<reference ref_id="1153811" ref_url="https://bugzilla.suse.com/1153811" source="BUGZILLA"/>
		<reference ref_id="1154043" ref_url="https://bugzilla.suse.com/1154043" source="BUGZILLA"/>
		<reference ref_id="1154058" ref_url="https://bugzilla.suse.com/1154058" source="BUGZILLA"/>
		<reference ref_id="1154124" ref_url="https://bugzilla.suse.com/1154124" source="BUGZILLA"/>
		<reference ref_id="1154355" ref_url="https://bugzilla.suse.com/1154355" source="BUGZILLA"/>
		<reference ref_id="1154526" ref_url="https://bugzilla.suse.com/1154526" source="BUGZILLA"/>
		<reference ref_id="1154601" ref_url="https://bugzilla.suse.com/1154601" source="BUGZILLA"/>
		<reference ref_id="1155021" ref_url="https://bugzilla.suse.com/1155021" source="BUGZILLA"/>
		<reference ref_id="1155689" ref_url="https://bugzilla.suse.com/1155689" source="BUGZILLA"/>
		<reference ref_id="1155692" ref_url="https://bugzilla.suse.com/1155692" source="BUGZILLA"/>
		<reference ref_id="1155836" ref_url="https://bugzilla.suse.com/1155836" source="BUGZILLA"/>
		<reference ref_id="1155897" ref_url="https://bugzilla.suse.com/1155897" source="BUGZILLA"/>
		<reference ref_id="1155921" ref_url="https://bugzilla.suse.com/1155921" source="BUGZILLA"/>
		<reference ref_id="1155982" ref_url="https://bugzilla.suse.com/1155982" source="BUGZILLA"/>
		<reference ref_id="1156187" ref_url="https://bugzilla.suse.com/1156187" source="BUGZILLA"/>
		<reference ref_id="1156258" ref_url="https://bugzilla.suse.com/1156258" source="BUGZILLA"/>
		<reference ref_id="1156429" ref_url="https://bugzilla.suse.com/1156429" source="BUGZILLA"/>
		<reference ref_id="1156466" ref_url="https://bugzilla.suse.com/1156466" source="BUGZILLA"/>
		<reference ref_id="1156471" ref_url="https://bugzilla.suse.com/1156471" source="BUGZILLA"/>
		<reference ref_id="1156494" ref_url="https://bugzilla.suse.com/1156494" source="BUGZILLA"/>
		<reference ref_id="1156609" ref_url="https://bugzilla.suse.com/1156609" source="BUGZILLA"/>
		<reference ref_id="1156700" ref_url="https://bugzilla.suse.com/1156700" source="BUGZILLA"/>
		<reference ref_id="1156729" ref_url="https://bugzilla.suse.com/1156729" source="BUGZILLA"/>
		<reference ref_id="1156882" ref_url="https://bugzilla.suse.com/1156882" source="BUGZILLA"/>
		<reference ref_id="1156928" ref_url="https://bugzilla.suse.com/1156928" source="BUGZILLA"/>
		<reference ref_id="1157032" ref_url="https://bugzilla.suse.com/1157032" source="BUGZILLA"/>
		<reference ref_id="1157038" ref_url="https://bugzilla.suse.com/1157038" source="BUGZILLA"/>
		<reference ref_id="1157042" ref_url="https://bugzilla.suse.com/1157042" source="BUGZILLA"/>
		<reference ref_id="1157044" ref_url="https://bugzilla.suse.com/1157044" source="BUGZILLA"/>
		<reference ref_id="1157045" ref_url="https://bugzilla.suse.com/1157045" source="BUGZILLA"/>
		<reference ref_id="1157046" ref_url="https://bugzilla.suse.com/1157046" source="BUGZILLA"/>
		<reference ref_id="1157049" ref_url="https://bugzilla.suse.com/1157049" source="BUGZILLA"/>
		<reference ref_id="1157070" ref_url="https://bugzilla.suse.com/1157070" source="BUGZILLA"/>
		<reference ref_id="1157115" ref_url="https://bugzilla.suse.com/1157115" source="BUGZILLA"/>
		<reference ref_id="1157143" ref_url="https://bugzilla.suse.com/1157143" source="BUGZILLA"/>
		<reference ref_id="1157145" ref_url="https://bugzilla.suse.com/1157145" source="BUGZILLA"/>
		<reference ref_id="1157158" ref_url="https://bugzilla.suse.com/1157158" source="BUGZILLA"/>
		<reference ref_id="1157160" ref_url="https://bugzilla.suse.com/1157160" source="BUGZILLA"/>
		<reference ref_id="1157162" ref_url="https://bugzilla.suse.com/1157162" source="BUGZILLA"/>
		<reference ref_id="1157171" ref_url="https://bugzilla.suse.com/1157171" source="BUGZILLA"/>
		<reference ref_id="1157173" ref_url="https://bugzilla.suse.com/1157173" source="BUGZILLA"/>
		<reference ref_id="1157178" ref_url="https://bugzilla.suse.com/1157178" source="BUGZILLA"/>
		<reference ref_id="1157180" ref_url="https://bugzilla.suse.com/1157180" source="BUGZILLA"/>
		<reference ref_id="1157182" ref_url="https://bugzilla.suse.com/1157182" source="BUGZILLA"/>
		<reference ref_id="1157183" ref_url="https://bugzilla.suse.com/1157183" source="BUGZILLA"/>
		<reference ref_id="1157184" ref_url="https://bugzilla.suse.com/1157184" source="BUGZILLA"/>
		<reference ref_id="1157191" ref_url="https://bugzilla.suse.com/1157191" source="BUGZILLA"/>
		<reference ref_id="1157193" ref_url="https://bugzilla.suse.com/1157193" source="BUGZILLA"/>
		<reference ref_id="1157197" ref_url="https://bugzilla.suse.com/1157197" source="BUGZILLA"/>
		<reference ref_id="1157298" ref_url="https://bugzilla.suse.com/1157298" source="BUGZILLA"/>
		<reference ref_id="1157304" ref_url="https://bugzilla.suse.com/1157304" source="BUGZILLA"/>
		<reference ref_id="1157307" ref_url="https://bugzilla.suse.com/1157307" source="BUGZILLA"/>
		<reference ref_id="1157324" ref_url="https://bugzilla.suse.com/1157324" source="BUGZILLA"/>
		<reference ref_id="1157333" ref_url="https://bugzilla.suse.com/1157333" source="BUGZILLA"/>
		<reference ref_id="1157386" ref_url="https://bugzilla.suse.com/1157386" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1157463" ref_url="https://bugzilla.suse.com/1157463" source="BUGZILLA"/>
		<reference ref_id="1157499" ref_url="https://bugzilla.suse.com/1157499" source="BUGZILLA"/>
		<reference ref_id="1157678" ref_url="https://bugzilla.suse.com/1157678" source="BUGZILLA"/>
		<reference ref_id="1157698" ref_url="https://bugzilla.suse.com/1157698" source="BUGZILLA"/>
		<reference ref_id="1157778" ref_url="https://bugzilla.suse.com/1157778" source="BUGZILLA"/>
		<reference ref_id="1157908" ref_url="https://bugzilla.suse.com/1157908" source="BUGZILLA"/>
		<reference ref_id="1158049" ref_url="https://bugzilla.suse.com/1158049" source="BUGZILLA"/>
		<reference ref_id="1158063" ref_url="https://bugzilla.suse.com/1158063" source="BUGZILLA"/>
		<reference ref_id="1158064" ref_url="https://bugzilla.suse.com/1158064" source="BUGZILLA"/>
		<reference ref_id="1158065" ref_url="https://bugzilla.suse.com/1158065" source="BUGZILLA"/>
		<reference ref_id="1158066" ref_url="https://bugzilla.suse.com/1158066" source="BUGZILLA"/>
		<reference ref_id="1158067" ref_url="https://bugzilla.suse.com/1158067" source="BUGZILLA"/>
		<reference ref_id="1158068" ref_url="https://bugzilla.suse.com/1158068" source="BUGZILLA"/>
		<reference ref_id="1158071" ref_url="https://bugzilla.suse.com/1158071" source="BUGZILLA"/>
		<reference ref_id="1158082" ref_url="https://bugzilla.suse.com/1158082" source="BUGZILLA"/>
		<reference ref_id="1158381" ref_url="https://bugzilla.suse.com/1158381" source="BUGZILLA"/>
		<reference ref_id="1158394" ref_url="https://bugzilla.suse.com/1158394" source="BUGZILLA"/>
		<reference ref_id="1158398" ref_url="https://bugzilla.suse.com/1158398" source="BUGZILLA"/>
		<reference ref_id="1158407" ref_url="https://bugzilla.suse.com/1158407" source="BUGZILLA"/>
		<reference ref_id="1158410" ref_url="https://bugzilla.suse.com/1158410" source="BUGZILLA"/>
		<reference ref_id="1158413" ref_url="https://bugzilla.suse.com/1158413" source="BUGZILLA"/>
		<reference ref_id="1158417" ref_url="https://bugzilla.suse.com/1158417" source="BUGZILLA"/>
		<reference ref_id="1158427" ref_url="https://bugzilla.suse.com/1158427" source="BUGZILLA"/>
		<reference ref_id="1158445" ref_url="https://bugzilla.suse.com/1158445" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-0154" ref_url="https://www.suse.com/security/cve/CVE-2019-0154/" source="CVE"/>
		<reference ref_id="CVE-2019-14895" ref_url="https://www.suse.com/security/cve/CVE-2019-14895/" source="CVE"/>
		<reference ref_id="CVE-2019-14901" ref_url="https://www.suse.com/security/cve/CVE-2019-14901/" source="CVE"/>
		<reference ref_id="CVE-2019-15916" ref_url="https://www.suse.com/security/cve/CVE-2019-15916/" source="CVE"/>
		<reference ref_id="CVE-2019-16231" ref_url="https://www.suse.com/security/cve/CVE-2019-16231/" source="CVE"/>
		<reference ref_id="CVE-2019-17055" ref_url="https://www.suse.com/security/cve/CVE-2019-17055/" source="CVE"/>
		<reference ref_id="CVE-2019-18660" ref_url="https://www.suse.com/security/cve/CVE-2019-18660/" source="CVE"/>
		<reference ref_id="CVE-2019-18683" ref_url="https://www.suse.com/security/cve/CVE-2019-18683/" source="CVE"/>
		<reference ref_id="CVE-2019-18805" ref_url="https://www.suse.com/security/cve/CVE-2019-18805/" source="CVE"/>
		<reference ref_id="CVE-2019-18809" ref_url="https://www.suse.com/security/cve/CVE-2019-18809/" source="CVE"/>
		<reference ref_id="CVE-2019-19046" ref_url="https://www.suse.com/security/cve/CVE-2019-19046/" source="CVE"/>
		<reference ref_id="CVE-2019-19049" ref_url="https://www.suse.com/security/cve/CVE-2019-19049/" source="CVE"/>
		<reference ref_id="CVE-2019-19052" ref_url="https://www.suse.com/security/cve/CVE-2019-19052/" source="CVE"/>
		<reference ref_id="CVE-2019-19056" ref_url="https://www.suse.com/security/cve/CVE-2019-19056/" source="CVE"/>
		<reference ref_id="CVE-2019-19057" ref_url="https://www.suse.com/security/cve/CVE-2019-19057/" source="CVE"/>
		<reference ref_id="CVE-2019-19058" ref_url="https://www.suse.com/security/cve/CVE-2019-19058/" source="CVE"/>
		<reference ref_id="CVE-2019-19060" ref_url="https://www.suse.com/security/cve/CVE-2019-19060/" source="CVE"/>
		<reference ref_id="CVE-2019-19062" ref_url="https://www.suse.com/security/cve/CVE-2019-19062/" source="CVE"/>
		<reference ref_id="CVE-2019-19063" ref_url="https://www.suse.com/security/cve/CVE-2019-19063/" source="CVE"/>
		<reference ref_id="CVE-2019-19065" ref_url="https://www.suse.com/security/cve/CVE-2019-19065/" source="CVE"/>
		<reference ref_id="CVE-2019-19067" ref_url="https://www.suse.com/security/cve/CVE-2019-19067/" source="CVE"/>
		<reference ref_id="CVE-2019-19068" ref_url="https://www.suse.com/security/cve/CVE-2019-19068/" source="CVE"/>
		<reference ref_id="CVE-2019-19073" ref_url="https://www.suse.com/security/cve/CVE-2019-19073/" source="CVE"/>
		<reference ref_id="CVE-2019-19074" ref_url="https://www.suse.com/security/cve/CVE-2019-19074/" source="CVE"/>
		<reference ref_id="CVE-2019-19075" ref_url="https://www.suse.com/security/cve/CVE-2019-19075/" source="CVE"/>
		<reference ref_id="CVE-2019-19077" ref_url="https://www.suse.com/security/cve/CVE-2019-19077/" source="CVE"/>
		<reference ref_id="CVE-2019-19078" ref_url="https://www.suse.com/security/cve/CVE-2019-19078/" source="CVE"/>
		<reference ref_id="CVE-2019-19080" ref_url="https://www.suse.com/security/cve/CVE-2019-19080/" source="CVE"/>
		<reference ref_id="CVE-2019-19081" ref_url="https://www.suse.com/security/cve/CVE-2019-19081/" source="CVE"/>
		<reference ref_id="CVE-2019-19082" ref_url="https://www.suse.com/security/cve/CVE-2019-19082/" source="CVE"/>
		<reference ref_id="CVE-2019-19083" ref_url="https://www.suse.com/security/cve/CVE-2019-19083/" source="CVE"/>
		<reference ref_id="CVE-2019-19227" ref_url="https://www.suse.com/security/cve/CVE-2019-19227/" source="CVE"/>
		<reference ref_id="CVE-2019-19524" ref_url="https://www.suse.com/security/cve/CVE-2019-19524/" source="CVE"/>
		<reference ref_id="CVE-2019-19525" ref_url="https://www.suse.com/security/cve/CVE-2019-19525/" source="CVE"/>
		<reference ref_id="CVE-2019-19528" ref_url="https://www.suse.com/security/cve/CVE-2019-19528/" source="CVE"/>
		<reference ref_id="CVE-2019-19529" ref_url="https://www.suse.com/security/cve/CVE-2019-19529/" source="CVE"/>
		<reference ref_id="CVE-2019-19530" ref_url="https://www.suse.com/security/cve/CVE-2019-19530/" source="CVE"/>
		<reference ref_id="CVE-2019-19531" ref_url="https://www.suse.com/security/cve/CVE-2019-19531/" source="CVE"/>
		<reference ref_id="CVE-2019-19534" ref_url="https://www.suse.com/security/cve/CVE-2019-19534/" source="CVE"/>
		<reference ref_id="CVE-2019-19536" ref_url="https://www.suse.com/security/cve/CVE-2019-19536/" source="CVE"/>
		<reference ref_id="CVE-2019-19543" ref_url="https://www.suse.com/security/cve/CVE-2019-19543/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).
- CVE-2019-19543: There was a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c (bnc#1158427).
- CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver (bnc#1158417).
- CVE-2019-19530: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver (bnc#1158410).
- CVE-2019-19536: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver (bnc#1158394).
- CVE-2019-19524: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver (bnc#1158413).
- CVE-2019-19528: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (bnc#1158407).
- CVE-2019-19534: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver (bnc#1158398).
- CVE-2019-19529: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver (bnc#1158381).
- CVE-2019-14901: A heap overflow flaw was found in the Linux kernel in Marvell WiFi chip driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system (bnc#1157042).
- CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could have allowed the remote device to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1157158).
- CVE-2019-18660: The Linux kernel on powerpc allowed Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c (bnc#1157038).
- CVE-2019-18683: An issue was discovered in drivers/media/platform/vivid in the Linux kernel. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free (bnc#1155897).
- CVE-2019-18809: A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1156258).
- CVE-2019-19046: A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure (bnc#1157304).
- CVE-2019-19078: A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157032).
- CVE-2019-19062: A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures (bnc#1157333).
- CVE-2019-19057: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures (bnc#1157197).
- CVE-2019-19056: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures (bnc#1157197).
- CVE-2019-19068: A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157307).
- CVE-2019-19063: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157298).
- CVE-2019-19227: In the AppleTalk subsystem in the Linux kernel there was a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client (bnc#1157678).
- CVE-2019-19081: A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157045).
- CVE-2019-19080: Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157044).
- CVE-2019-19065: A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures (bnc#1157191).
- CVE-2019-19077: A memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering copy to udata failures (bnc#1157171).
- CVE-2019-19052: A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157324).
- CVE-2019-19067: Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures (bsc#1157180).
- CVE-2019-19060: A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157178).
- CVE-2019-19049: A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering of_fdt_unflatten_tree() failures (bsc#1157173).
- CVE-2019-19075: A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering ca8210_get_platform_data() failures (bnc#1157162).
- CVE-2019-19058: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures (bnc#1157145).
- CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157143).
- CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function (bnc#1157070).
- CVE-2019-19083: Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel allowed attackers to cause a denial of service (memory consumption). This affects the dce112_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, the dce100_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, the dcn20_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c, the dce120_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, and the dce80_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce80/dce80_resource.c (bnc#1157049).
- CVE-2019-19082: Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel allowed attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, the dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, and the dce112_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c (bnc#1157046).
- CVE-2019-15916: An issue was discovered in the Linux kernel There was a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service (bnc#1149448).
- CVE-2019-0154: Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1135966).
- CVE-2019-16231: drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150466).
- CVE-2019-18805: An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel There was a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact (bnc#1156187).
- CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket (bnc#1152782).

The following non-security bugs were fixed:

- bnxt_en: Update firmware interface spec. to 1.10.0.47 (bsc#1157115)
- ACPI / LPSS: Exclude I2C busses shared with PUNIT from pmc_atom_d3_mask (bsc#1051510).
- ACPI / SBS: Fix rare oops when removing modules (bsc#1051510).
- ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug bridge (bsc#1111666).
- ACPICA: Never run _REG on system_memory and system_IO (bsc#1051510).
- ACPICA: Use %d for signed int print formatting instead of %u (bsc#1051510).
- ALSA: 6fire: Drop the dead code (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (git-fixes).
- ALSA: cs4236: fix error return comparison of an unsigned integer (git-fixes).
- ALSA: firewire-motu: Correct a typo in the clock proc string (git-fixes).
- ALSA: hda - Add mute led support for HP ProBook 645 G4 (git-fixes).
- ALSA: hda - Fix pending unsol events at shutdown (git-fixes).
- ALSA: hda/ca0132 - Fix possible workqueue stall (bsc#1155836).
- ALSA: hda/hdmi - Clear codec-&gt;relaxed_resume flag at unbinding (git-fixes).
- ALSA: hda/intel: add CometLake PCI IDs (bsc#1156729).
- ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC (git-fixes).
- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (git-fixes).
- ALSA: hda/realtek - Move some alc236 pintbls to fallback table (git-fixes).
- ALSA: hda/realtek - Move some alc256 pintbls to fallback table (git-fixes).
- ALSA: hda: Add Cometlake-S PCI ID (git-fixes).
- ALSA: hda: Fix racy display power access (bsc#1156928).
- ALSA: hda: hdmi - fix port numbering for ICL and TGL platforms (git-fixes).
- ALSA: hda: hdmi - remove redundant code comments (git-fixes).
- ALSA: i2c/cs8427: Fix int to char conversion (bsc#1051510).
- ALSA: intel8x0m: Register irq handler after register initializations (bsc#1051510).
- ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed() (git-fixes).
- ALSA: pcm: Yet another missing check of non-cached buffer type (bsc#1111666).
- ALSA: pcm: signedness bug in snd_pcm_plug_alloc() (bsc#1051510).
- ALSA: seq: Do error checks at creating system ports (bsc#1051510).
- ALSA: timer: Fix incorrectly assigned timer instance (git-fixes).
- ALSA: usb-audio: Add skip_validation option (git-fixes).
- ALSA: usb-audio: Fix Focusrite Scarlett 6i6 gen1 - input handling (git-fixes).
- ALSA: usb-audio: Fix NULL dereference at parsing BADD (git-fixes).
- ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() (git-fixes).
- ALSA: usb-audio: Fix incorrect size check for processing/extension units (git-fixes).
- ALSA: usb-audio: Fix missing error check at mixer resolution test (git-fixes).
- ALSA: usb-audio: not submit urb for stopped endpoint (git-fixes).
- ALSA: usb-audio: sound: usb: usb true/false for bool return type (git-fixes).
- ASoC: Intel: hdac_hdmi: Limit sampling rates at dai creation (bsc#1051510).
- ASoC: davinci-mcasp: Handle return value of devm_kasprintf (stable 4.14.y).
- ASoC: davinci: Kill BUG_ON() usage (stable 4.14.y).
- ASoC: dpcm: Properly initialise hw-&gt;rate_max (bsc#1051510).
- ASoC: kirkwood: fix external clock probe defer (git-fixes).
- ASoC: msm8916-wcd-analog: Fix RX1 selection in RDAC2 MUX (git-fixes).
- ASoC: sgtl5000: avoid division by zero if lo_vag is zero (bsc#1051510).
- ASoC: tegra_sgtl5000: fix device_node refcounting (bsc#1051510).
- ASoC: tlv320aic31xx: Handle inverted BCLK in non-DSP modes (stable 4.14.y).
- ASoC: tlv320dac31xx: mark expected switch fall-through (stable 4.14.y).
- Bluetooth: Fix invalid-free in bcsp_close() (git-fixes).
- Bluetooth: Fix memory leak in hci_connect_le_scan (bsc#1051510).
- Bluetooth: L2CAP: Detect if remote is not able to use the whole MPS (bsc#1051510).
- Bluetooth: btusb: fix PM leak in error case of setup (bsc#1051510).
- Bluetooth: delete a stray unlock (bsc#1051510).
- Bluetooth: hci_core: fix init for HCI_USER_CHANNEL (bsc#1051510).
- Btrfs: fix log context list corruption after rename exchange operation (bsc#1156494).
- CIFS: Fix SMB2 oplock break processing (bsc#1144333, bsc#1154355).
- CIFS: Fix oplock handling for SMB 2.1+ protocols (bsc#1144333, bsc#1154355).
- CIFS: Fix retry mid list corruption on reconnects (bsc#1144333, bsc#1154355).
- CIFS: Fix use after free of file info structures (bsc#1144333, bsc#1154355).
- CIFS: Force reval dentry if LOOKUP_REVAL flag is set (bsc#1144333, bsc#1154355).
- CIFS: Force revalidate inode when dentry is stale (bsc#1144333, bsc#1154355).
- CIFS: Gracefully handle QueryInfo errors during open (bsc#1144333, bsc#1154355).
- CIFS: avoid using MID 0xFFFF (bsc#1144333, bsc#1154355).
- CIFS: fix max ea value size (bsc#1144333, bsc#1154355).
- Documentation: debugfs: Document debugfs helper for unsigned long values (git-fixes).
- Documentation: x86: convert protection-keys.txt to reST (bsc#1078248).
- EDAC/ghes: Fix Use after free in ghes_edac remove path (bsc#1114279).
- HID: Add ASUS T100CHI keyboard dock battery quirks (bsc#1051510).
- HID: Add quirk for Microsoft PIXART OEM mouse (bsc#1051510).
- HID: Fix assumption that devices have inputs (git-fixes).
- HID: asus: Add T100CHI bluetooth keyboard dock special keys mapping (bsc#1051510).
- HID: wacom: generic: Treat serial number and related fields as unsigned (git-fixes).
- IB/mlx5: Free mpi in mp_slave mode (bsc#1103991).
- IB/mlx5: Support MLX5_CMD_OP_QUERY_LAG as a DEVX general command (bsc#1103991).
- Input: ff-memless - kill timer in destroy() (bsc#1051510).
- Input: silead - try firmware reload after unsuccessful resume (bsc#1051510).
- Input: st1232 - set INPUT_PROP_DIRECT property (bsc#1051510).
- Input: synaptics-rmi4 - clear IRQ enables for F54 (bsc#1051510).
- Input: synaptics-rmi4 - destroy F54 poller workqueue when removing (bsc#1051510).
- Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver (bsc#1051510).
- Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) (bsc#1051510).
- Input: synaptics-rmi4 - fix video buffer size (git-fixes).
- KVM: SVM: Guard against DEACTIVATE when performing WBINVD/DF_FLUSH (bsc#1114279).
- KVM: SVM: Serialize access to the SEV ASID bitmap (bsc#1114279).
- KVM: VMX: Consider PID.PIR to determine if vCPU has pending interrupts (bsc#1158064).
- KVM: VMX: Fix conditions for guest IA32_XSS support (bsc#1158065).
- KVM: s390: fix __insn32_query() inline assembly (git-fixes).
- KVM: s390: vsie: Do not shadow CRYCB when no AP and no keys (git-fixes).
- KVM: s390: vsie: Return correct values for Invalid CRYCB format (git-fixes).
- KVM: x86/mmu: Take slots_lock when using kvm_mmu_zap_all_fast() (bsc#1158067).
- KVM: x86: Introduce vcpu-&gt;arch.xsaves_enabled (bsc#1158066).
- NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error (git-fixes).
- PCI/ACPI: Correct error message for ASPM disabling (bsc#1051510).
- PCI/MSI: Fix incorrect MSI-X masking on resume (bsc#1051510).
- PCI/PM: Clear PCIe PME Status even for legacy power management (bsc#1111666).
- PCI/PME: Fix possible use-after-free on remove (git-fixes).
- PCI/PTM: Remove spurious 'd' from granularity message (bsc#1051510).
- PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3 (bsc#1051510).
- PCI: Fix Intel ACS quirk UPDCR register address (bsc#1051510).
- PCI: dwc: Fix find_next_bit() usage (bsc#1051510).
- PCI: pciehp: Do not disable interrupt twice on suspend (bsc#1111666).
- PCI: rcar: Fix missing MACCTLR register setting in initialization sequence (bsc#1051510).
- PCI: sysfs: Ignore lockdep for remove attribute (git-fixes).
- PCI: tegra: Enable Relaxed Ordering only for Tegra20 and Tegra30 (git-fixes).
- PM / devfreq: Check NULL governor in available_governors_show (git-fixes).
- PM / devfreq: Lock devfreq in trans_stat_show (git-fixes).
- PM / devfreq: exynos-bus: Correct clock enable sequence (bsc#1051510).
- PM / devfreq: passive: Use non-devm notifiers (bsc#1051510).
- PM / devfreq: passive: fix compiler warning (bsc#1051510).
- PM / hibernate: Check the success of generating md5 digest before hibernation (bsc#1051510).
- RDMA/bnxt_re: Fix stat push into dma buffer on gen p5 devices (bsc#1157115)
- RDMA/efa: Add Amazon EFA driver (jsc#SLE-4805)
- RDMA/efa: Clear the admin command buffer prior to its submission (git-fixes) Patch was already picked through Amazon driver repo but was not marked with a Git-commit tag
- RDMA/hns: Fix comparison of unsigned long variable 'end' with less than zero (bsc#1104427 bsc#1137236).
- RDMA/hns: Fix wrong assignment of qp_access_flags (bsc#1104427 ).
- RDMA/restrack: Track driver QP types in resource tracker (jsc#SLE-4805)
- Remove patches that reportedly cause regression (bsc#1155689 ltc#182047).
- Revert 'drm/etnaviv: fix dumping of iommuv2 (bsc#1113722)' This reverts commit 71e3a1b8d8cf73f711f3e4100aa51f68e631f94f.
- Revert synaptics-rmi4 patch due to regression (bsc#1155982) Also blacklisting it
- UAS: Revert commit 3ae62a42090f ('UAS: fix alignment of scatter/gather segments').
- USB: chaoskey: fix error case of a timeout (git-fixes).
- USB: gadget: Reject endpoints with 0 maxpacket value (bsc#1051510).
- USB: ldusb: fix control-message timeout (bsc#1051510).
- USB: ldusb: fix ring-buffer locking (bsc#1051510).
- USB: misc: appledisplay: fix backlight update_status return code (bsc#1051510).
- USB: serial: mos7720: fix remote wakeup (git-fixes).
- USB: serial: mos7840: add USB ID to support Moxa UPort 2210 (bsc#1051510).
- USB: serial: mos7840: fix remote wakeup (git-fixes).
- USB: serial: option: add support for DW5821e with eSIM support (bsc#1051510).
- USB: serial: option: add support for Foxconn T77W968 LTE modules (bsc#1051510).
- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: serial: whiteheat: fix potential slab corruption (bsc#1051510).
- USBIP: add config dependency for SGL_ALLOC (git-fixes).
- acpi/nfit, device-dax: Identify differentiated memory with a unique numa-node (bsc#1158071).
- appledisplay: fix error handling in the scheduled work (git-fixes).
- arm64: Update config files. (bsc#1156466) Enable HW_RANDOM_OMAP driver and mark driver omap-rng as supported.
- ata: ep93xx: Use proper enums for directions (bsc#1051510).
- ath10k: Correct error handling of dma_map_single() (bsc#1111666).
- ath10k: allocate small size dma memory in ath10k_pci_diag_write_mem (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3 (bsc#1111666).
- ath10k: avoid possible memory access violation (bsc#1111666).
- ath10k: fix kernel panic by moving pci flush after napi_disable (bsc#1051510).
- ath10k: fix vdev-start timeout on error (bsc#1051510).
- ath10k: limit available channels via DT ieee80211-freq-limit (bsc#1051510).
- ath10k: skip resetting rx filter for WCN3990 (bsc#1111666).
- ath10k: wmi: disable softirq's while calling ieee80211_rx (bsc#1051510).
- ath9k: Fix a locking bug in ath9k_add_interface() (bsc#1051510).
- ath9k: add back support for using active monitor interfaces for tx99 (bsc#1051510).
- ath9k: fix reporting calculated new FFT upper max (bsc#1051510).
- ath9k: fix tx99 with monitor mode interface (bsc#1051510).
- ath9k_hw: fix uninitialized variable data (bsc#1051510).
- ax88172a: fix information leak on short answers (bsc#1051510).
- backlight: lm3639: Unconditionally call led_classdev_unregister (bsc#1051510).
- bnxt_en: Increase timeout for HWRM_DBG_COREDUMP_XX commands (bsc#1104745).
- bnxt_en: Update firmware interface spec. to 1.10.0.89 (bsc#1157115)
- bnxt_en: Update firmware interface to 1.10.0.69 (bsc#1157115)
- bpf: Fix use after free in subprog's jited symbol removal (bsc#1109837).
- bpf: fix BTF limits (bsc#1109837).
- bpf: fix BTF verification of enums (bsc#1109837).
- brcmfmac: fix full timeout waiting for action frame on-channel tx (bsc#1051510).
- brcmfmac: fix wrong strnchr usage (bsc#1111666).
- brcmfmac: increase buffer for obtaining firmware capabilities (bsc#1111666).
- brcmfmac: reduce timeout for action frame scan (bsc#1051510).
- brcmsmac: AP mode: update beacon when TIM changes (bsc#1051510).
- brcmsmac: Use kvmalloc() for ucode allocations (bsc#1111666).
- brcmsmac: never log 'tid x is not agg'able' by default (bsc#1051510).
- can: c_can: c_can_poll(): only read status register after status IRQ (git-fixes).
- can: dev: call netif_carrier_off() in register_candev() (bsc#1051510).
- can: mcba_usb: fix use-after-free on disconnect (git-fixes).
- can: peak_usb: fix a potential out-of-sync while decoding packets (git-fixes).
- can: peak_usb: fix slab info leak (git-fixes).
- can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue beyond skb_queue_len_max (git-fixes).
- can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak (git-fixes).
- can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb mem leak (git-fixes).
- can: usb_8dev: fix use-after-free on disconnect (git-fixes).
- ceph: add missing check in d_revalidate snapdir handling (bsc#1157183).
- ceph: do not try to handle hashed dentries in non-O_CREAT atomic_open (bsc#1157184).
- ceph: fix use-after-free in __ceph_remove_cap() (bsc#1154058).
- ceph: just skip unrecognized info in ceph_reply_info_extra (bsc#1157182).
- cfg80211: Avoid regulatory restore when COUNTRY_IE_IGNORE is set (bsc#1051510).
- cfg80211: Prevent regulatory restore during STA disconnect in concurrent interfaces (bsc#1051510).
- cfg80211: call disconnect_wk when AP stops (bsc#1051510).
- cfg80211: validate wmm rule when setting (bsc#1111666).
- cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (bsc#1144333, bsc#1154355).
- cifs: Fix missed free operations (bsc#1144333, bsc#1154355).
- cifs: Use kzfree() to zero out the password (bsc#1144333, bsc#1154355).
- cifs: add a helper to find an existing readable handle to a file (bsc#1144333, bsc#1154355).
- cifs: create a helper to find a writeable handle by path name (bsc#1144333, bsc#1154355).
- cifs: move cifsFileInfo_put logic into a work-queue (bsc#1144333, bsc#1154355).
- cifs: prepare SMB2_Flush to be usable in compounds (bsc#1144333, bsc#1154355).
- cifs: set domainName when a domain-key is used in multiuser (bsc#1144333, bsc#1154355).
- cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (bsc#1144333, bsc#1154355).
- cifs: use existing handle for compound_op(OP_SET_INFO) when possible (bsc#1144333, bsc#1154355).
- clk: at91: avoid sleeping early (git-fixes).
- clk: pxa: fix one of the pxa RTC clocks (bsc#1051510).
- clk: samsung: Use clk_hw API for calling clk framework from clk notifiers (bsc#1051510).
- clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume (bsc#1051510).
- clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume (git-fixes).
- clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18 (git-fixes).
- clocksource/drivers/sh_cmt: Fix clocksource width for 32-bit machines (bsc#1051510).
- clocksource/drivers/sh_cmt: Fixup for 64-bit machines (bsc#1051510).
- compat_ioctl: handle SIOCOUTQNSD (bsc#1051510).
- component: fix loop condition to call unbind() if bind() fails (bsc#1051510).
- cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init() (bsc#1051510).
- cpufreq: Skip cpufreq resume if it's not suspended (bsc#1051510).
- cpufreq: intel_pstate: Register when ACPI PCCH is present (bsc#1051510).
- cpufreq: powernv: fix stack bloat and hard limit on number of CPUs (bsc#1051510).
- cpufreq: ti-cpufreq: add missing of_node_put() (bsc#1051510).
- cpupower : Fix cpupower working when cpu0 is offline (bsc#1051510).
- cpupower : frequency-set -r option misses the last cpu in related cpu list (bsc#1051510).
- cpupower: Fix coredump on VMWare (bsc#1051510).
- crypto: af_alg - cast ki_complete ternary op to int (bsc#1051510).
- crypto: crypto4xx - fix double-free in crypto4xx_destroy_sdr (bsc#1051510).
- crypto: ecdh - fix big endian bug in ECC library (bsc#1051510).
- crypto: fix a memory leak in rsa-kcs1pad's encryption mode (bsc#1051510).
- crypto: geode-aes - switch to skcipher for cbc(aes) fallback (bsc#1051510).
- crypto: mxs-dcp - Fix AES issues (bsc#1051510).
- crypto: mxs-dcp - Fix SHA null hashes and output length (bsc#1051510).
- crypto: mxs-dcp - make symbols 'sha1_null_hash' and 'sha256_null_hash' static (bsc#1051510).
- crypto: s5p-sss: Fix Fix argument list alignment (bsc#1051510).
- crypto: tgr192 - remove unneeded semicolon (bsc#1051510).
- cw1200: Fix a signedness bug in cw1200_load_firmware() (bsc#1051510).
- cxgb4: fix panic when attaching to ULD fail (networking-stable-19_11_05).
- cxgb4: request the TX CIDX updates to status page (bsc#1127354 bsc#1127371).
- dccp: do not leak jiffies on the wire (networking-stable-19_11_05).
- dlm: do not leak kernel pointer to userspace (bsc#1051510).
- dlm: fix invalid free (bsc#1051510).
- dmaengine: bcm2835: Print error in case setting DMA mask fails (bsc#1051510).
- dmaengine: dma-jz4780: Do not depend on MACH_JZ4780 (bsc#1051510).
- dmaengine: dma-jz4780: Further residue status fix (bsc#1051510).
- dmaengine: ep93xx: Return proper enum in ep93xx_dma_chan_direction (bsc#1051510).
- dmaengine: imx-sdma: fix size check for sdma script_number (bsc#1051510).
- dmaengine: imx-sdma: fix use-after-free on probe error path (bsc#1051510).
- dmaengine: rcar-dmac: set scatter/gather max segment size (bsc#1051510).
- dmaengine: timb_dma: Use proper enum in td_prep_slave_sg (bsc#1051510).
- docs: move protection-keys.rst to the core-api book (bsc#1078248).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported (bsc#1113956)
- drm/amdgpu/powerplay/vega10: allow undervolting in p7 (bsc#1111666).
- drm/amdgpu: fix bad DMA from INTERRUPT_CNTL2 (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/etnaviv: fix dumping of iommuv2 (bsc#1113722)
- drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)
- drm/i915/cmdparser: Ignore Length operands during command matching (bsc#1135967)
- drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)
- drm/i915/gtt: Add read only pages to gen8_pte_encode (bsc#1135967)
- drm/i915/gtt: Disable read-only support under GVT (bsc#1135967)
- drm/i915/gtt: Read-only pages for insert_entries on bdw (bsc#1135967)
- drm/i915/gvt: fix dropping obj reference twice (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no output (bsc#1111666).
- drm/i915/pmu: 'Frequency' is reported as accumulated cycles (bsc#1112178)
- drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)
- drm/i915: Add support for mandatory cmdparsing (bsc#1135967)
- drm/i915: Allow parsing of unsized batches (bsc#1135967)
- drm/i915: Disable Secure Batches for gen6+
- drm/i915: Do not dereference request if it may have been retired when (bsc#1142635)
- drm/i915: Fix and improve MCR selection logic (bsc#1112178)
- drm/i915: Lock the engine while dumping the active request (bsc#1142635)
- drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)
- drm/i915: Prevent writing into a read-only object via a GGTT mmap (bsc#1135967)
- drm/i915: Reacquire priolist cache after dropping the engine lock (bsc#1129770)
- drm/i915: Remove Master tables from cmdparser
- drm/i915: Rename gen7 cmdparser tables (bsc#1135967)
- drm/i915: Skip modeset for cdclk changes if possible (bsc#1156928).
- drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (bsc#1135967)
- drm/msm/dpu: handle failures while initializing displays (bsc#1111666).
- drm/msm: fix memleak on release (bsc#1111666).
- drm/omap: fix max fclk divider for omap36xx (bsc#1113722)
- drm/radeon: fix bad DMA from INTERRUPT_CNTL2 (git-fixes).
- drm/radeon: fix si_enable_smc_cac() failed issue (bsc#1113722)
- drm: fix module name in edid_firmware log message (bsc#1113956)
- e1000e: Drop unnecessary __E1000_DOWN bit twiddling (bsc#1158049).
- e1000e: Use dev_get_drvdata where possible (bsc#1158049).
- e1000e: Use rtnl_lock to prevent race conditions between net and pci/pm (bsc#1158049).
- extcon: cht-wc: Return from default case to avoid warnings (bsc#1051510).
- fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper() (bsc#1051510).
- fbdev: sbuslib: use checked version of put_user() (bsc#1051510).
- fix SCTP regression (bsc#1158082).
- ftrace: Introduce PERMANENT ftrace_ops flag (bsc#1120853).
- gpio: mpc8xxx: Do not overwrite default irq_set_type callback (bsc#1051510).
- gpio: syscon: Fix possible NULL ptr usage (bsc#1051510).
- gpiolib: acpi: Add Terra Pad 1061 to the run_edge_events_on_boot_blacklist (bsc#1051510).
- gsmi: Fix bug in append_to_eventlog sysfs handler (bsc#1051510).
- hwmon: (ina3221) Fix INA3221_CONFIG_MODE macros (bsc#1051510).
- hwmon: (pwm-fan) Silence error on probe deferral (bsc#1051510).
- hwrng: omap - Fix RNG wait loop timeout (bsc#1051510).
- hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled (bsc#1051510).
- hypfs: Fix error number left in struct pointer member (bsc#1051510).
- i2c: of: Try to find an I2C adapter matching the parent (bsc#1129770)
- i40e: enable X710 support (bsc#1151067).
- ibmvnic: Bound waits for device queries (bsc#1155689 ltc#182047).
- ibmvnic: Fix completion structure initialization (bsc#1155689 ltc#182047).
- ibmvnic: Serialize device queries (bsc#1155689 ltc#182047).
- ibmvnic: Terminate waiting device threads after loss of service (bsc#1155689 ltc#182047).
- ice: fix potential infinite loop because loop counter being too small (bsc#1118661).
- iio: adc: max9611: explicitly cast gain_selectors (bsc#1051510).
- iio: adc: stm32-adc: fix stopping dma (git-fixes).
- iio: dac: mcp4922: fix error handling in mcp4922_write_raw (bsc#1051510).
- iio: imu: adis16480: assign bias value only if operation succeeded (git-fixes).
- iio: imu: adis16480: make sure provided frequency is positive (git-fixes).
- iio: imu: adis: assign read val in debugfs hook only if op successful (git-fixes).
- iio: imu: adis: assign value only if return code zero in read funcs (git-fixes).
- include/linux/bitrev.h: fix constant bitrev (bsc#1114279).
- inet: stop leaking jiffies on the wire (networking-stable-19_11_05).
- intel_th: Fix a double put_device() in error path (git-fixes).
- iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros (bsc#1158063).
- ipmi:dmi: Ignore IPMI SMBIOS entries with a zero base address (bsc#1051510).
- ipv4: Return -ENETUNREACH if we can't create route but saddr is valid (networking-stable-19_10_24).
- irqdomain: Add the missing assignment of domain-&gt;fwnode for named fwnode (bsc#1111666).
- iwlwifi: api: annotate compressed BA notif array sizes (bsc#1051510).
- iwlwifi: check kasprintf() return value (bsc#1051510).
- iwlwifi: do not panic in error path on non-msix systems (bsc#1155692).
- iwlwifi: drop packets with bad status in CD (bsc#1111666).
- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- iwlwifi: fw: do not send GEO_TX_POWER_LIMIT command to FW version 36 (bsc#1111666).
- iwlwifi: mvm: avoid sending too many BARs (bsc#1051510).
- iwlwifi: mvm: do not send keys when entering D3 (bsc#1051510).
- iwlwifi: mvm: use correct FIFO length (bsc#1111666).
- iwlwifi: pcie: fit reclaim msg to MAX_MSG_LEN (bsc#1111666).
- iwlwifi: pcie: read correct prph address for newer devices (bsc#1111666).
- ixgbe: fix double clean of Tx descriptors with xdp (bsc#1113994 ).
- ixgbevf: Fix secpath usage for IPsec Tx offload (bsc#1113994 ).
- kABI fixup alloc_dax_region (bsc#1158071).
- kABI workaround for ath10k hw_filter_reset_required field (bsc#1111666).
- kABI workaround for ath10k last_wmi_vdev_start_status field (bsc#1051510).
- kABI workaround for drm_vma_offset_node readonly field addition (bsc#1135967)
- kABI workaround for iwlwifi iwl_rx_cmd_buffer change (bsc#1111666).
- kABI workaround for struct mwifiex_power_cfg change (bsc#1051510).
- kABI: Fix for 'KVM: x86: Introduce vcpu-&gt;arch.xsaves_enabled' (bsc#1158066).
- kabi protect enum RDMA_DRIVER_EFA (jsc#SLE-4805)
- kabi: s390: struct subchannel (git-fixes).
- lib/scatterlist: Fix chaining support in sgl_alloc_order() (git-fixes).
- lib/scatterlist: Introduce sgl_alloc() and sgl_free() (git-fixes).
- libnvdimm: Export the target_node attribute for regions and namespaces (bsc#1158071).
- liquidio: fix race condition in instruction completion processing (bsc#1051510).
- livepatch: Allow to distinguish different version of system state changes (bsc#1071995).
- livepatch: Basic API to track system state changes (bsc#1071995 ).
- livepatch: Keep replaced patches until post_patch callback is called (bsc#1071995).
- livepatch: Selftests of the API for tracking system state changes (bsc#1071995).
- loop: add ioctl for changing logical block size (bsc#1108043).
- lpfc: size cpu map by last cpu id set (bsc#1157160).
- mISDN: Fix type of switch control variable in ctrl_teimanager (bsc#1051510).
- mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED (bsc#1051510).
- mac80211: minstrel: fix CCK rate group streams value (bsc#1051510).
- mac80211: minstrel: fix sampling/reporting of CCK rates in HT mode (bsc#1051510).
- macvlan: schedule bc_work even if error (bsc#1051510).
- mailbox: reset txdone_method TXDONE_BY_POLL if client knows_txdone (git-fixes).
- media: au0828: Fix incorrect error messages (bsc#1051510).
- media: bdisp: fix memleak on release (git-fixes).
- media: cxusb: detect cxusb_ctrl_msg error in query (bsc#1051510).
- media: davinci: Fix implicit enum conversion warning (bsc#1051510).
- media: exynos4-is: Fix recursive locking in isp_video_release() (git-fixes).
- media: fix: media: pci: meye: validate offset to avoid arbitrary access (bsc#1051510).
- media: flexcop-usb: ensure -EIO is returned on error condition (git-fixes).
- media: imon: invalid dereference in imon_touch_event (bsc#1051510).
- media: isif: fix a NULL pointer dereference bug (bsc#1051510).
- media: pci: ivtv: Fix a sleep-in-atomic-context bug in ivtv_yuv_init() (bsc#1051510).
- media: pxa_camera: Fix check for pdev-&gt;dev.of_node (bsc#1051510).
- media: radio: wl1273: fix interrupt masking on release (git-fixes).
- media: ti-vpe: vpe: Fix Motion Vector vpdma stride (git-fixes).
- media: usbvision: Fix races among open, close, and disconnect (bsc#1051510).
- media: vim2m: Fix abort issue (git-fixes).
- media: vivid: Set vid_cap_streaming and vid_out_streaming to true (bsc#1051510).
- mei: fix modalias documentation (git-fixes).
- mei: samples: fix a signedness bug in amt_host_if_call() (bsc#1051510).
- mfd: intel-lpss: Add default I2C device properties for Gemini Lake (bsc#1051510).
- mfd: max8997: Enale irq-wakeup unconditionally (bsc#1051510).
- mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values (bsc#1051510).
- mfd: palmas: Assign the right powerhold mask for tps65917 (git-fixes).
- mfd: ti_am335x_tscadc: Keep ADC interface on if child is wakeup capable (bsc#1051510).
- mlx5: add parameter to disable enhanced IPoIB (bsc#1142095)
- mlx5: add parameter to disable enhanced IPoIB (bsc#1142095) Fix badly backported patch
- mlxsw: spectrum_flower: Fail in case user specifies multiple mirror actions (bsc#1112374).
- mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d() (git fixes (mm/gup)).
- mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone (git fixes (mm/compaction)).
- mm/debug.c: PageAnon() is true for PageKsm() pages (git fixes (mm/debug)).
- mmc: core: fix wl1251 sdio quirks (git-fixes).
- mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of pandora_wl1251_init_card (git-fixes).
- mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail (bsc#1051510).
- mmc: sdhci-esdhc-imx: correct the fix of ERR004536 (git-fixes).
- mmc: sdhci-of-at91: fix quirk2 overwrite (git-fixes).
- mmc: sdio: fix wl1251 vendor id (git-fixes).
- mt7601u: fix bbp version check in mt7601u_wait_bbp_ready (bsc#1051510).
- mt76x0: init hw capabilities.
- mtd: nand: mtk: fix incorrect register setting order about ecc irq.
- mtd: spear_smi: Fix Write Burst mode (bsc#1051510).
- mtd: spi-nor: fix silent truncation in spi_nor_read() (bsc#1051510).
- mwifex: free rx_cmd skb in suspended state (bsc#1111666).
- mwifiex: Fix NL80211_TX_POWER_LIMITED (bsc#1051510).
- mwifiex: do no submit URB in suspended state (bsc#1111666).
- net/ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes).
- net/mlx4_core: Dynamically set guaranteed amount of counters per VF (networking-stable-19_11_05).
- net/mlx5: FWTrace, Reduce stack usage (bsc#1103990).
- net/mlx5e: Fix eswitch debug print of max fdb flow (bsc#1103990 ).
- net/mlx5e: Fix ethtool self test: link speed (bsc#1103990 ).
- net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget (networking-stable-19_11_05).
- net/mlx5e: Print a warning when LRO feature is dropped or not allowed (bsc#1103990).
- net/sched: cbs: Fix not adding cbs instance to list (bsc#1109837).
- net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate (bsc#1109837).
- net/smc: Fix error path in smc_init (git-fixes).
- net/smc: avoid fallback in case of non-blocking connect (git-fixes).
- net/smc: do not schedule tx_work in SMC_CLOSED state (git-fixes).
- net/smc: fix SMCD link group creation with VLAN id (git-fixes).
- net/smc: fix closing of fallback SMC sockets (git-fixes).
- net/smc: fix ethernet interface refcounting (git-fixes).
- net/smc: fix fastopen for non-blocking connect() (git-fixes).
- net/smc: fix refcount non-blocking connect() -part 2 (git-fixes).
- net/smc: fix refcounting for non-blocking connect() (git-fixes).
- net/smc: keep vlan_id for SMC-R in smc_listen_work() (git-fixes).
- net/smc: original socket family in inet_sock_diag (git-fixes).
- net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol() (networking-stable-19_11_05).
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (networking-stable-19_11_05).
- net: add skb_queue_empty_lockless() (networking-stable-19_11_05).
- net: annotate accesses to sk-&gt;sk_incoming_cpu (networking-stable-19_11_05).
- net: annotate lockless accesses to sk-&gt;sk_napi_id (networking-stable-19_11_05).
- net: avoid potential infinite loop in tc_ctl_action() (networking-stable-19_10_24).
- net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3 (networking-stable-19_10_24).
- net: bcmgenet: Set phydev-&gt;dev_flags only for internal PHYs (networking-stable-19_10_24).
- net: bcmgenet: reset 40nm EPHY on energy detect (networking-stable-19_11_05).
- net: dsa: b53: Do not clear existing mirrored port mask (networking-stable-19_11_05).
- net: dsa: bcm_sf2: Fix IMP setup for port different than 8 (networking-stable-19_11_05).
- net: dsa: fix switch tree list (networking-stable-19_11_05).
- net: ethernet: ftgmac100: Fix DMA coherency issue with SW checksum (networking-stable-19_11_05).
- net: fix sk_page_frag() recursion from memory reclaim (networking-stable-19_11_05).
- net: hisilicon: Fix ping latency when deal with high throughput (networking-stable-19_11_05).
- net: hns3: change GFP flag during lock period (bsc#1104353 ).
- net: hns3: do not query unsupported commands in debugfs (bsc#1104353).
- net: hns3: fix GFP flag error in hclge_mac_update_stats() (bsc#1126390).
- net: hns3: fix some reset handshake issue (bsc#1104353 ).
- net: hns3: prevent unnecessary MAC TNL interrupt (bsc#1104353 bsc#1134983).
- net: hns: Fix the stray netpoll locks causing deadlock in NAPI path (bsc#1104353).
- net: phy: bcm7xxx: define soft_reset for 40nm EPHY (bsc#1119113 ).
- net: phylink: Fix flow control resolution (bsc#1119113 ).
- net: sched: cbs: Avoid division by zero when calculating the port rate (bsc#1109837).
- net: sched: fix possible crash in tcf_action_destroy() (bsc#1109837).
- net: sched: fix reordering issues (bsc#1109837).
- net: sock_map, fix missing ulp check in sock hash case (bsc#1109837).
- net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow (networking-stable-19_10_24).
- net: use skb_queue_empty_lockless() in busy poll contexts (networking-stable-19_11_05).
- net: use skb_queue_empty_lockless() in poll() handlers (networking-stable-19_11_05).
- net: wireless: ti: remove local VENDOR_ID and DEVICE_ID definitions (git-fixes).
- net: wireless: ti: wl1251 use new SDIO_VENDOR_ID_TI_WL1251 definition (git-fixes).
- netns: fix GFP flags in rtnl_net_notifyid() (networking-stable-19_11_05).
- nfc: netlink: fix double device reference drop (git-fixes).
- nfc: port100: handle command failure cleanly (git-fixes).
- nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs (bsc#1109837).
- nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs (bsc#1109837).
- nl80211: Fix a GET_KEY reply attribute (bsc#1051510).
- nvme-tcp: support C2HData with SUCCESS flag (bsc#1157386).
- openvswitch: fix flow command message size (git-fixes).
- padata: use smp_mb in padata_reorder to avoid orphaned padata jobs (git-fixes).
- perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp (bsc#1142924).
- phy: phy-twl4030-usb: fix denied runtime access (git-fixes).
- phylink: fix kernel-doc warnings (bsc#1111666).
- pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call (git-fixes).
- pinctrl: at91: do not use the same irqchip with multiple gpiochips (git-fixes).
- pinctrl: cherryview: Allocate IRQ chip dynamic (git-fixes).
- pinctrl: lewisburg: Update pin list according to v1.1v6 (bsc#1051510).
- pinctrl: lpc18xx: Use define directive for PIN_CONFIG_GPIO_PIN_INT (bsc#1051510).
- pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in S3C24xx wakeup controller init (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in S3C64xx wakeup controller init (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in init code (bsc#1051510).
- pinctrl: sunxi: Fix a memory leak in 'sunxi_pinctrl_build_state()' (bsc#1051510).
- pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD (bsc#1051510).
- power: reset: at91-poweroff: do not procede if at91_shdwc is allocated (bsc#1051510).
- power: supply: ab8500_fg: silence uninitialized variable warnings (bsc#1051510).
- power: supply: max14656: fix potential use-after-free (bsc#1051510).
- power: supply: twl4030_charger: disable eoc interrupt on linear charge (bsc#1051510).
- power: supply: twl4030_charger: fix charging current out-of-bounds (bsc#1051510).
- powerpc/64: Make meltdown reporting Book3S 64 specific (bsc#1091041).
- powerpc/book3s64/hash: Use secondary hash for bolted mapping if the primary is full (bsc#1157778 ltc#182520).
- powerpc/bpf: Fix tail call implementation (bsc#1157698).
- powerpc/pseries: Do not fail hash page table insert for bolted mapping (bsc#1157778 ltc#182520).
- powerpc/pseries: Do not opencode HPTE_V_BOLTED (bsc#1157778 ltc#182520).
- powerpc/pseries: address checkpatch warnings in dlpar_offline_cpu (bsc#1156700 ltc#182459).
- powerpc/pseries: safely roll back failed DLPAR cpu add (bsc#1156700 ltc#182459).
- powerpc/security/book3s64: Report L1TF status in sysfs (bsc#1091041).
- powerpc/security: Fix wrong message when RFI Flush is disable (bsc#1131107).
- powerpc/xive: Prevent page fault issues in the machine crash handler (bsc#1156882 ltc#182435).
- ppdev: fix PPGETTIME/PPSETTIME ioctls (bsc#1051510).
- printk: Export console_printk (bsc#1071995).
- pwm: bcm-iproc: Prevent unloading the driver module while in use (git-fixes).
- pwm: lpss: Only set update bit if we are actually changing the settings (bsc#1051510).
- qxl: fix null-pointer crash during suspend (bsc#1111666).
- r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2 (networking-stable-19_11_05).
- regulator: ab8500: Remove AB8505 USB regulator (bsc#1051510).
- regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id (bsc#1051510).
- remoteproc: Check for NULL firmwares in sysfs interface (git-fixes).
- reset: Fix potential use-after-free in __of_reset_control_get() (bsc#1051510).
- reset: fix of_reset_simple_xlate kerneldoc comment (bsc#1051510).
- reset: fix reset_control_get_exclusive kerneldoc comment (bsc#1051510).
- rpm/kernel-binary.spec.in: add COMPRESS_VMLINUX (bnc#1155921) Let COMPRESS_VMLINUX determine the compression used for vmlinux. By default (historically), it is gz.
- rpm/kernel-source.spec.in: Fix dependency of kernel-devel (bsc#1154043)
- rtl8187: Fix warning generated when strncpy() destination length matches the sixe argument (bsc#1051510).
- rtlwifi: Remove unnecessary NULL check in rtl_regd_init (bsc#1051510).
- rtlwifi: btcoex: Use proper enumerated types for Wi-Fi only interface (bsc#1111666).
- rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing enable interrupt flag (bsc#1051510).
- s390/bpf: fix lcgr instruction encoding (bsc#1051510).
- s390/bpf: use 32-bit index for tail calls (bsc#1051510).
- s390/cio: avoid calling strlen on null pointer (bsc#1051510).
- s390/cio: exclude subchannels with no parent from pseudo check (bsc#1051510).
- s390/cio: fix virtio-ccw DMA without PV (git-fixes).
- s390/cmm: fix information leak in cmm_timeout_handler() (bsc#1051510).
- s390/idle: fix cpu idle time calculation (bsc#1051510).
- s390/mm: properly clear _PAGE_NOEXEC bit when it is not supported (bsc#1051510).
- s390/process: avoid potential reading of freed stack (bsc#1051510).
- s390/qdio: (re-)initialize tiqdio list entries (bsc#1051510).
- s390/qdio: do not touch the dsci in tiqdio_add_input_queues() (bsc#1051510).
- s390/qeth: return proper errno on IO error (bsc#1051510).
- s390/setup: fix boot crash for machine without EDAT-1 (bsc#1051510 bsc#1140948).
- s390/setup: fix early warning messages (bsc#1051510 bsc#1140948).
- s390/topology: avoid firing events before kobjs are created (bsc#1051510).
- s390/zcrypt: fix memleak at release (git-fixes).
- s390: fix stfle zero padding (bsc#1051510).
- s390: vsie: Use effective CRYCBD.31 to check CRYCBD validity (git-fixes).
- sc16is7xx: Fix for 'Unexpected interrupt: 8' (bsc#1051510).
- scsi: lpfc: Add enablement of multiple adapter dumps (bsc#1154601).
- scsi: lpfc: Add registration for CPU Offline/Online events (bsc#1154601).
- scsi: lpfc: Change default IRQ model on AMD architectures (bsc#1154601).
- scsi: lpfc: Clarify FAWNN error message (bsc#1154601).
- scsi: lpfc: Fix NULL check before mempool_destroy is not needed (bsc#1154601).
- scsi: lpfc: Fix Oops in nvme_register with target logout/login (bsc#1151900).
- scsi: lpfc: Fix a kernel warning triggered by lpfc_get_sgl_per_hdwq() (bsc#1154601).
- scsi: lpfc: Fix a kernel warning triggered by lpfc_sli4_enable_intr() (bsc#1154601).
- scsi: lpfc: Fix configuration of BB credit recovery in service parameters (bsc#1154601).
- scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow (bsc#1154601).
- scsi: lpfc: Fix dynamic fw log enablement check (bsc#1154601).
- scsi: lpfc: Fix kernel crash at lpfc_nvme_info_show during remote port bounce (bsc#1154601).
- scsi: lpfc: Fix lpfc_cpumask_of_node_init() (bsc#1154601).
- scsi: lpfc: Fix unexpected error messages during RSCN handling (bsc#1154601).
- scsi: lpfc: Honor module parameter lpfc_use_adisc (bsc#1153628).
- scsi: lpfc: Honor module parameter lpfc_use_adisc (bsc#1154601).
- scsi: lpfc: Initialize cpu_map for not present cpus (bsc#1154601).
- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- scsi: lpfc: Make lpfc_debugfs_ras_log_data static (bsc#1154601).
- scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (bsc#1154601).
- scsi: lpfc: Raise config max for lpfc_fcp_mq_threshold variable (bsc#1154601).
- scsi: lpfc: Sync with FC-NVMe-2 SLER change to require Conf with SLER (bsc#1154601).
- scsi: lpfc: Update lpfc version to 12.6.0.1 (bsc#1154601).
- scsi: lpfc: Update lpfc version to 12.6.0.2 (bsc#1154601).
- scsi: lpfc: fix build error of lpfc_debugfs.c for vfree/vmalloc (bsc#1154601).
- scsi: lpfc: fix inlining of lpfc_sli4_cleanup_poll_list() (bsc#1154601).
- scsi: lpfc: fix spelling error in MAGIC_NUMER_xxx (bsc#1154601).
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences (bsc#1154601).
- scsi: lpfc: fix: Coverity: lpfc_get_scsi_buf_s3(): Null pointer dereferences (bsc#1154601).
- scsi: lpfc: lpfc_attr: Fix Use plain integer as NULL pointer (bsc#1154601).
- scsi: lpfc: lpfc_nvmet: Fix Use plain integer as NULL pointer (bsc#1154601).
- scsi: lpfc: revise nvme max queues to be hdwq count (bsc#1154601).
- scsi: lpfc: use hdwq assigned cpu for allocation (bsc#1157160).
- scsi: qla2xxx: Add debug dump of LOGO payload and ELS IOCB (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Allow PLOGI in target mode (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Change discovery state before PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Configure local loop for N2N target (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Do command completion on abort timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do not call qlt_async_event twice (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Do not defer relogin unconditonally (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Drop superfluous INIT_WORK of del_work (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Fix SRB leak on switch command timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Ignore NULL pointer in tcm_qla2xxx_free_mcmd (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Initialize free_work before flushing it (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Remove an include directive (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Send Notify ACK after N2N PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Use correct number of vectors for online CPUs (bsc#1137223).
- scsi: qla2xxx: Use explicit LOGO in target mode (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: do not use zero for FC4_PRIORITY_NVME (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan (bsc#1138039).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: unregister ports after GPN_FT failure (bsc#1138039).
- scsi: sd: Ignore a failure to sync cache due to lack of authorization (git-fixes).
- scsi: storvsc: Add ability to change scsi queue depth (bsc#1155021).
- scsi: zfcp: fix request object use-after-free in send path causing wrong traces (bsc#1051510).
- sctp: change sctp_prot .no_autobind with true (networking-stable-19_10_24).
- selftests: net: reuseport_dualstack: fix uninitalized parameter (networking-stable-19_11_05).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: mxs-auart: Fix potential infinite loop (bsc#1051510).
- serial: samsung: Enable baud clock for UART reset procedure in resume (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- serial: uartps: Fix suspend functionality (bsc#1051510).
- signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal (bsc#1157463).
- slcan: Fix memory leak in error path (bsc#1051510).
- slip: Fix memory leak in slip_open error path (bsc#1051510).
- slip: Fix use-after-free Read in slip_open (bsc#1051510).
- smb3: Incorrect size for netname negotiate context (bsc#1144333, bsc#1154355).
- smb3: fix leak in 'open on server' perf counter (bsc#1144333, bsc#1154355).
- smb3: fix signing verification of large reads (bsc#1144333, bsc#1154355).
- smb3: fix unmount hang in open_shroot (bsc#1144333, bsc#1154355).
- smb3: improve handling of share deleted (and share recreated) (bsc#1144333, bsc#1154355).
- soc: imx: gpc: fix PDN delay (bsc#1051510).
- soc: qcom: wcnss_ctrl: Avoid string overflow (bsc#1051510).
- spi: atmel: Fix CS high support (bsc#1051510).
- spi: atmel: fix handling of cs_change set on non-last xfer (bsc#1051510).
- spi: fsl-lpspi: Prevent FIFO under/overrun by default (bsc#1051510).
- spi: mediatek: Do not modify spi_transfer when transfer (bsc#1051510).
- spi: mediatek: use correct mata-&gt;xfer_len when in fifo transfer (bsc#1051510).
- spi: pic32: Use proper enum in dmaengine_prep_slave_rg (bsc#1051510).
- spi: rockchip: initialize dma_slave_config properly (bsc#1051510).
- spi: spidev: Fix OF tree warning logic (bsc#1051510).
- staging: rtl8188eu: fix null dereference when kzalloc fails (bsc#1051510).
- supported.conf:
- synclink_gt(): fix compat_ioctl() (bsc#1051510).
- tcp_nv: fix potential integer overflow in tcpnv_acked (bsc#1051510).
- thunderbolt: Fix lockdep circular locking depedency warning (git-fixes).
- tipc: Avoid copying bytes beyond the supplied data (bsc#1051510).
- tipc: check bearer name with right length in tipc_nl_compat_bearer_enable (bsc#1051510).
- tipc: check link name with right length in tipc_nl_compat_link_set (bsc#1051510).
- tipc: check msg-&gt;req data len in tipc_nl_compat_bearer_disable (bsc#1051510).
- tipc: compat: allow tipc commands without arguments (bsc#1051510).
- tipc: fix tipc_mon_delete() oops in tipc_enable_bearer() error path (bsc#1051510).
- tipc: fix wrong timeout input for tipc_wait_for_cond() (bsc#1051510).
- tipc: handle the err returned from cmd header function (bsc#1051510).
- tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb (bsc#1051510).
- tipc: tipc clang warning (bsc#1051510).
- tools/power/x86/intel-speed-select: Fix a read overflow in isst_set_tdp_level_msr() (bsc#1111666).
- tools: bpftool: fix arguments for p_err() in do_event_pipe() (bsc#1109837).
- tpm: add check after commands attribs tab allocation (bsc#1051510).
- tracing: Get trace_array reference for available_tracers files (bsc#1156429).
- tty: serial: fsl_lpuart: use the sg count from dma_map_sg (bsc#1051510).
- tty: serial: imx: use the sg count from dma_map_sg (bsc#1051510).
- tty: serial: msm_serial: Fix flow control (bsc#1051510).
- tty: serial: pch_uart: correct usage of dma_unmap_sg (bsc#1051510).
- tun: fix data-race in gro_normal_list() (bsc#1111666).
- udp: use skb_queue_empty_lockless() (networking-stable-19_11_05).
- usb-serial: cp201x: support Mark-10 digital force gauge (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ('usb-storage: Set virt_boundary_mask to avoid SG overflows') (bsc#1051510).
- usb: chipidea: Fix otg event handler (bsc#1051510).
- usb: chipidea: imx: enable OTG overcurrent in case USB subsystem is already started (bsc#1051510).
- usb: dwc3: gadget: Check ENBLSLPM before sending ep command (bsc#1051510).
- usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode (bsc#1051510).
- usb: gadget: udc: fotg210-udc: Fix a sleep-in-atomic-context bug in fotg210_get_status() (bsc#1051510).
- usb: gadget: uvc: Factor out video USB request queueing (bsc#1051510).
- usb: gadget: uvc: Only halt video streaming endpoint in bulk mode (bsc#1051510).
- usb: gadget: uvc: configfs: Drop leaked references to config items (bsc#1051510).
- usb: gadget: uvc: configfs: Prevent format changes after linking header (bsc#1051510).
- usb: handle warm-reset port requests on hub resume (bsc#1051510).
- usb: xhci-mtk: fix ISOC error when interval is zero (bsc#1051510).
- usbip: Fix free of unallocated memory in vhci tx (git-fixes).
- usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path (git-fixes).
- usbip: Implement SG support to vhci-hcd and stub driver (git-fixes).
- usbip: tools: fix fd leakage in the function of read_attr_usbip_status (git-fixes).
- vfio-ccw: Fix misleading comment when setting orb.cmd.c64 (bsc#1051510).
- vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn (bsc#1051510).
- vfio: ccw: push down unsupported IDA check (bsc#1156471 LTC#182362).
- video/hdmi: Fix AVI bar unpack (git-fixes).
- virtio/s390: fix race on airq_areas (bsc#1051510).
- virtio_console: allocate inbufs in add_port() only if it is needed (git-fixes).
- virtio_ring: fix return code on DMA mapping fails (git-fixes).
- vmxnet3: turn off lro when rxcsum is disabled (bsc#1157499).
- vsock/virtio: fix sock refcnt holding during the shutdown (git-fixes).
- watchdog: meson: Fix the wrong value of left time (bsc#1051510).
- wil6210: drop Rx multicast packets that are looped-back to STA (bsc#1111666).
- wil6210: fix L2 RX status handling (bsc#1111666).
- wil6210: fix RGF_CAF_ICR address for Talyn-MB (bsc#1111666).
- wil6210: fix debugfs memory access alignment (bsc#1111666).
- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- wil6210: fix invalid memory access for rx_buff_mgmt debugfs (bsc#1111666).
- wil6210: fix locking in wmi_call (bsc#1111666).
- wil6210: prevent usage of tx ring 0 for eDMA (bsc#1111666).
- wil6210: set edma variables only for Talyn-MB devices (bsc#1111666).
- x86/alternatives: Add int3_emulate_call() selftest (bsc#1153811).
- x86/alternatives: Fix int3_emulate_call() selftest stack corruption (bsc#1153811).
- x86/mm/pkeys: Fix typo in Documentation/x86/protection-keys.txt (bsc#1078248).
- x86/pkeys: Update documentation about availability (bsc#1078248).
- x86/resctrl: Fix potential lockdep warning (bsc#1114279).
- x86/resctrl: Prevent NULL pointer dereference when reading mondata (bsc#1114279).
- x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs (bsc#1158068).
- xfrm: Fix xfrm sel prefix length validation (git-fixes).
- xfrm: fix sa selector validation (bsc#1156609).
- xsk: Fix registration of Rx-only sockets (bsc#1109837).
- xsk: relax UMEM headroom alignment (bsc#1109837).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-17"/>
	<updated date="2019-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1048942">SUSE bug 1048942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078248">SUSE bug 1078248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089644">SUSE bug 1089644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091041">SUSE bug 1091041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108043">SUSE bug 1108043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117169">SUSE bug 1117169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118661">SUSE bug 1118661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120853">SUSE bug 1120853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126390">SUSE bug 1126390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131107">SUSE bug 1131107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134983">SUSE bug 1134983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135966">SUSE bug 1135966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135967">SUSE bug 1135967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137223">SUSE bug 1137223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137236">SUSE bug 1137236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138039">SUSE bug 1138039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142095">SUSE bug 1142095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142924">SUSE bug 1142924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149448">SUSE bug 1149448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150466">SUSE bug 1150466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151067">SUSE bug 1151067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151548">SUSE bug 1151548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151900">SUSE bug 1151900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152782">SUSE bug 1152782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153628">SUSE bug 1153628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153811">SUSE bug 1153811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154043">SUSE bug 1154043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154058">SUSE bug 1154058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154124">SUSE bug 1154124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154355">SUSE bug 1154355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154526">SUSE bug 1154526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154601">SUSE bug 1154601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155021">SUSE bug 1155021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155689">SUSE bug 1155689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155692">SUSE bug 1155692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155836">SUSE bug 1155836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155897">SUSE bug 1155897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155921">SUSE bug 1155921</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155982">SUSE bug 1155982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156187">SUSE bug 1156187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156258">SUSE bug 1156258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156429">SUSE bug 1156429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156466">SUSE bug 1156466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156471">SUSE bug 1156471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156494">SUSE bug 1156494</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156609">SUSE bug 1156609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156700">SUSE bug 1156700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156729">SUSE bug 1156729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156882">SUSE bug 1156882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156928">SUSE bug 1156928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157032">SUSE bug 1157032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157038">SUSE bug 1157038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157042">SUSE bug 1157042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157044">SUSE bug 1157044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157045">SUSE bug 1157045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157046">SUSE bug 1157046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157049">SUSE bug 1157049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157070">SUSE bug 1157070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157115">SUSE bug 1157115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157143">SUSE bug 1157143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157145">SUSE bug 1157145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157158">SUSE bug 1157158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157160">SUSE bug 1157160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157162">SUSE bug 1157162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157171">SUSE bug 1157171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157173">SUSE bug 1157173</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157178">SUSE bug 1157178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157180">SUSE bug 1157180</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157182">SUSE bug 1157182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157183">SUSE bug 1157183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157184">SUSE bug 1157184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157191">SUSE bug 1157191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157193">SUSE bug 1157193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157197">SUSE bug 1157197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157298">SUSE bug 1157298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157304">SUSE bug 1157304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157307">SUSE bug 1157307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157324">SUSE bug 1157324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157333">SUSE bug 1157333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157386">SUSE bug 1157386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157463">SUSE bug 1157463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157499">SUSE bug 1157499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157678">SUSE bug 1157678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157698">SUSE bug 1157698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157778">SUSE bug 1157778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157908">SUSE bug 1157908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158049">SUSE bug 1158049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158063">SUSE bug 1158063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158064">SUSE bug 1158064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158065">SUSE bug 1158065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158066">SUSE bug 1158066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158067">SUSE bug 1158067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158068">SUSE bug 1158068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158071">SUSE bug 1158071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158082">SUSE bug 1158082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158394">SUSE bug 1158394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158398">SUSE bug 1158398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158407">SUSE bug 1158407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158410">SUSE bug 1158410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158413">SUSE bug 1158413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158417">SUSE bug 1158417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158427">SUSE bug 1158427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158445">SUSE bug 1158445</bugzilla>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-0154/">CVE-2019-0154</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14895/">CVE-2019-14895</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14901/">CVE-2019-14901</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15916/">CVE-2019-15916</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16231/">CVE-2019-16231</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17055/">CVE-2019-17055</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-18660/">CVE-2019-18660</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18683/">CVE-2019-18683</cve>
	<cve impact="low" cvss3="2.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-18805/">CVE-2019-18805</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18809/">CVE-2019-18809</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19046/">CVE-2019-19046</cve>
	<cve impact="moderate" cvss3="1.6/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19049/">CVE-2019-19049</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19052/">CVE-2019-19052</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19056/">CVE-2019-19056</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19057/">CVE-2019-19057</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19058/">CVE-2019-19058</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19060/">CVE-2019-19060</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19062/">CVE-2019-19062</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19063/">CVE-2019-19063</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19065/">CVE-2019-19065</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19067/">CVE-2019-19067</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19068/">CVE-2019-19068</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19073/">CVE-2019-19073</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19074/">CVE-2019-19074</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19075/">CVE-2019-19075</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19077/">CVE-2019-19077</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19078/">CVE-2019-19078</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19080/">CVE-2019-19080</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19081/">CVE-2019-19081</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19082/">CVE-2019-19082</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19083/">CVE-2019-19083</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19227/">CVE-2019-19227</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19524/">CVE-2019-19524</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19525/">CVE-2019-19525</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19528/">CVE-2019-19528</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19529/">CVE-2019-19529</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19530/">CVE-2019-19530</cve>
	<cve impact="low" cvss3="2.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19531/">CVE-2019-19531</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19534/">CVE-2019-19534</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19536/">CVE-2019-19536</cve>
	<cve impact="low" cvss3="2.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19543/">CVE-2019-19543</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497051" comment="reiserfs-kmp-default-4.12.14-197.29.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138298" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1154212" ref_url="https://bugzilla.suse.com/1154212" source="BUGZILLA"/>
		<reference ref_id="1158442" ref_url="https://bugzilla.suse.com/1158442" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17631" ref_url="https://www.suse.com/security/cve/CVE-2019-17631/" source="CVE"/>
		<reference ref_id="CVE-2019-2933" ref_url="https://www.suse.com/security/cve/CVE-2019-2933/" source="CVE"/>
		<reference ref_id="CVE-2019-2945" ref_url="https://www.suse.com/security/cve/CVE-2019-2945/" source="CVE"/>
		<reference ref_id="CVE-2019-2958" ref_url="https://www.suse.com/security/cve/CVE-2019-2958/" source="CVE"/>
		<reference ref_id="CVE-2019-2962" ref_url="https://www.suse.com/security/cve/CVE-2019-2962/" source="CVE"/>
		<reference ref_id="CVE-2019-2964" ref_url="https://www.suse.com/security/cve/CVE-2019-2964/" source="CVE"/>
		<reference ref_id="CVE-2019-2973" ref_url="https://www.suse.com/security/cve/CVE-2019-2973/" source="CVE"/>
		<reference ref_id="CVE-2019-2975" ref_url="https://www.suse.com/security/cve/CVE-2019-2975/" source="CVE"/>
		<reference ref_id="CVE-2019-2978" ref_url="https://www.suse.com/security/cve/CVE-2019-2978/" source="CVE"/>
		<reference ref_id="CVE-2019-2981" ref_url="https://www.suse.com/security/cve/CVE-2019-2981/" source="CVE"/>
		<reference ref_id="CVE-2019-2983" ref_url="https://www.suse.com/security/cve/CVE-2019-2983/" source="CVE"/>
		<reference ref_id="CVE-2019-2988" ref_url="https://www.suse.com/security/cve/CVE-2019-2988/" source="CVE"/>
		<reference ref_id="CVE-2019-2989" ref_url="https://www.suse.com/security/cve/CVE-2019-2989/" source="CVE"/>
		<reference ref_id="CVE-2019-2992" ref_url="https://www.suse.com/security/cve/CVE-2019-2992/" source="CVE"/>
		<reference ref_id="CVE-2019-2996" ref_url="https://www.suse.com/security/cve/CVE-2019-2996/" source="CVE"/>
		<reference ref_id="CVE-2019-2999" ref_url="https://www.suse.com/security/cve/CVE-2019-2999/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006298.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

- Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
  * Security fixes:
    CVE-2019-2933 CVE-2019-2945 CVE-2019-2958
    CVE-2019-2962 CVE-2019-2964 CVE-2019-2975
    CVE-2019-2978 CVE-2019-2983 CVE-2019-2988
    CVE-2019-2989 CVE-2019-2992 CVE-2019-2996
    CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
    CVE-2019-17631
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-02"/>
	<updated date="2020-01-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1154212">SUSE bug 1154212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158442">SUSE bug 1158442</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17631/">CVE-2019-17631</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2933/">CVE-2019-2933</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2945/">CVE-2019-2945</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-2958/">CVE-2019-2958</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2962/">CVE-2019-2962</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2964/">CVE-2019-2964</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2973/">CVE-2019-2973</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-2975/">CVE-2019-2975</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2978/">CVE-2019-2978</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2981/">CVE-2019-2981</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2983/">CVE-2019-2983</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2988/">CVE-2019-2988</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-2989/">CVE-2019-2989</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-2992/">CVE-2019-2992</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-2996/">CVE-2019-2996</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-2999/">CVE-2019-2999</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497029" comment="java-1_8_0-ibm-1.8.0_sr6.0-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497030" comment="java-1_8_0-ibm-alsa-1.8.0_sr6.0-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497031" comment="java-1_8_0-ibm-devel-1.8.0_sr6.0-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497032" comment="java-1_8_0-ibm-plugin-1.8.0_sr6.0-3.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138299" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1109911" ref_url="https://bugzilla.suse.com/1109911" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1118338" ref_url="https://bugzilla.suse.com/1118338" source="BUGZILLA"/>
		<reference ref_id="1120386" ref_url="https://bugzilla.suse.com/1120386" source="BUGZILLA"/>
		<reference ref_id="1137325" ref_url="https://bugzilla.suse.com/1137325" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1145051" ref_url="https://bugzilla.suse.com/1145051" source="BUGZILLA"/>
		<reference ref_id="1145929" ref_url="https://bugzilla.suse.com/1145929" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1158983" ref_url="https://bugzilla.suse.com/1158983" source="BUGZILLA"/>
		<reference ref_id="1159037" ref_url="https://bugzilla.suse.com/1159037" source="BUGZILLA"/>
		<reference ref_id="1159198" ref_url="https://bugzilla.suse.com/1159198" source="BUGZILLA"/>
		<reference ref_id="1159199" ref_url="https://bugzilla.suse.com/1159199" source="BUGZILLA"/>
		<reference ref_id="1161561" ref_url="https://bugzilla.suse.com/1161561" source="BUGZILLA"/>
		<reference ref_id="1161951" ref_url="https://bugzilla.suse.com/1161951" source="BUGZILLA"/>
		<reference ref_id="1162171" ref_url="https://bugzilla.suse.com/1162171" source="BUGZILLA"/>
		<reference ref_id="1163403" ref_url="https://bugzilla.suse.com/1163403" source="BUGZILLA"/>
		<reference ref_id="1163897" ref_url="https://bugzilla.suse.com/1163897" source="BUGZILLA"/>
		<reference ref_id="1164284" ref_url="https://bugzilla.suse.com/1164284" source="BUGZILLA"/>
		<reference ref_id="1164777" ref_url="https://bugzilla.suse.com/1164777" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1164893" ref_url="https://bugzilla.suse.com/1164893" source="BUGZILLA"/>
		<reference ref_id="1165019" ref_url="https://bugzilla.suse.com/1165019" source="BUGZILLA"/>
		<reference ref_id="1165182" ref_url="https://bugzilla.suse.com/1165182" source="BUGZILLA"/>
		<reference ref_id="1165185" ref_url="https://bugzilla.suse.com/1165185" source="BUGZILLA"/>
		<reference ref_id="1165211" ref_url="https://bugzilla.suse.com/1165211" source="BUGZILLA"/>
		<reference ref_id="1165823" ref_url="https://bugzilla.suse.com/1165823" source="BUGZILLA"/>
		<reference ref_id="1165949" ref_url="https://bugzilla.suse.com/1165949" source="BUGZILLA"/>
		<reference ref_id="1166780" ref_url="https://bugzilla.suse.com/1166780" source="BUGZILLA"/>
		<reference ref_id="1166860" ref_url="https://bugzilla.suse.com/1166860" source="BUGZILLA"/>
		<reference ref_id="1166861" ref_url="https://bugzilla.suse.com/1166861" source="BUGZILLA"/>
		<reference ref_id="1166862" ref_url="https://bugzilla.suse.com/1166862" source="BUGZILLA"/>
		<reference ref_id="1166864" ref_url="https://bugzilla.suse.com/1166864" source="BUGZILLA"/>
		<reference ref_id="1166866" ref_url="https://bugzilla.suse.com/1166866" source="BUGZILLA"/>
		<reference ref_id="1166867" ref_url="https://bugzilla.suse.com/1166867" source="BUGZILLA"/>
		<reference ref_id="1166868" ref_url="https://bugzilla.suse.com/1166868" source="BUGZILLA"/>
		<reference ref_id="1166870" ref_url="https://bugzilla.suse.com/1166870" source="BUGZILLA"/>
		<reference ref_id="1166940" ref_url="https://bugzilla.suse.com/1166940" source="BUGZILLA"/>
		<reference ref_id="1166982" ref_url="https://bugzilla.suse.com/1166982" source="BUGZILLA"/>
		<reference ref_id="1167005" ref_url="https://bugzilla.suse.com/1167005" source="BUGZILLA"/>
		<reference ref_id="1167216" ref_url="https://bugzilla.suse.com/1167216" source="BUGZILLA"/>
		<reference ref_id="1167288" ref_url="https://bugzilla.suse.com/1167288" source="BUGZILLA"/>
		<reference ref_id="1167290" ref_url="https://bugzilla.suse.com/1167290" source="BUGZILLA"/>
		<reference ref_id="1167316" ref_url="https://bugzilla.suse.com/1167316" source="BUGZILLA"/>
		<reference ref_id="1167421" ref_url="https://bugzilla.suse.com/1167421" source="BUGZILLA"/>
		<reference ref_id="1167423" ref_url="https://bugzilla.suse.com/1167423" source="BUGZILLA"/>
		<reference ref_id="1167627" ref_url="https://bugzilla.suse.com/1167627" source="BUGZILLA"/>
		<reference ref_id="1167629" ref_url="https://bugzilla.suse.com/1167629" source="BUGZILLA"/>
		<reference ref_id="1168075" ref_url="https://bugzilla.suse.com/1168075" source="BUGZILLA"/>
		<reference ref_id="1168202" ref_url="https://bugzilla.suse.com/1168202" source="BUGZILLA"/>
		<reference ref_id="1168273" ref_url="https://bugzilla.suse.com/1168273" source="BUGZILLA"/>
		<reference ref_id="1168276" ref_url="https://bugzilla.suse.com/1168276" source="BUGZILLA"/>
		<reference ref_id="1168295" ref_url="https://bugzilla.suse.com/1168295" source="BUGZILLA"/>
		<reference ref_id="1168367" ref_url="https://bugzilla.suse.com/1168367" source="BUGZILLA"/>
		<reference ref_id="1168424" ref_url="https://bugzilla.suse.com/1168424" source="BUGZILLA"/>
		<reference ref_id="1168443" ref_url="https://bugzilla.suse.com/1168443" source="BUGZILLA"/>
		<reference ref_id="1168486" ref_url="https://bugzilla.suse.com/1168486" source="BUGZILLA"/>
		<reference ref_id="1168552" ref_url="https://bugzilla.suse.com/1168552" source="BUGZILLA"/>
		<reference ref_id="1168760" ref_url="https://bugzilla.suse.com/1168760" source="BUGZILLA"/>
		<reference ref_id="1168762" ref_url="https://bugzilla.suse.com/1168762" source="BUGZILLA"/>
		<reference ref_id="1168763" ref_url="https://bugzilla.suse.com/1168763" source="BUGZILLA"/>
		<reference ref_id="1168764" ref_url="https://bugzilla.suse.com/1168764" source="BUGZILLA"/>
		<reference ref_id="1168765" ref_url="https://bugzilla.suse.com/1168765" source="BUGZILLA"/>
		<reference ref_id="1168829" ref_url="https://bugzilla.suse.com/1168829" source="BUGZILLA"/>
		<reference ref_id="1168854" ref_url="https://bugzilla.suse.com/1168854" source="BUGZILLA"/>
		<reference ref_id="1168881" ref_url="https://bugzilla.suse.com/1168881" source="BUGZILLA"/>
		<reference ref_id="1168884" ref_url="https://bugzilla.suse.com/1168884" source="BUGZILLA"/>
		<reference ref_id="1168952" ref_url="https://bugzilla.suse.com/1168952" source="BUGZILLA"/>
		<reference ref_id="1169013" ref_url="https://bugzilla.suse.com/1169013" source="BUGZILLA"/>
		<reference ref_id="1169057" ref_url="https://bugzilla.suse.com/1169057" source="BUGZILLA"/>
		<reference ref_id="1169307" ref_url="https://bugzilla.suse.com/1169307" source="BUGZILLA"/>
		<reference ref_id="1169308" ref_url="https://bugzilla.suse.com/1169308" source="BUGZILLA"/>
		<reference ref_id="1169390" ref_url="https://bugzilla.suse.com/1169390" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169625" ref_url="https://bugzilla.suse.com/1169625" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19770" ref_url="https://www.suse.com/security/cve/CVE-2019-19770/" source="CVE"/>
		<reference ref_id="CVE-2019-3701" ref_url="https://www.suse.com/security/cve/CVE-2019-3701/" source="CVE"/>
		<reference ref_id="CVE-2019-9458" ref_url="https://www.suse.com/security/cve/CVE-2019-9458/" source="CVE"/>
		<reference ref_id="CVE-2020-10942" ref_url="https://www.suse.com/security/cve/CVE-2020-10942/" source="CVE"/>
		<reference ref_id="CVE-2020-11494" ref_url="https://www.suse.com/security/cve/CVE-2020-11494/" source="CVE"/>
		<reference ref_id="CVE-2020-11669" ref_url="https://www.suse.com/security/cve/CVE-2020-11669/" source="CVE"/>
		<reference ref_id="CVE-2020-8834" ref_url="https://www.suse.com/security/cve/CVE-2020-8834/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006760.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
- CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
- CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
- CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
- CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
- CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).
- CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).

The following non-security bugs were fixed:

- ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
- ACPI: watchdog: Fix gas-&gt;access_width usage (bsc#1051510).
- ahci: Add support for Amazon's Annapurna Labs SATA controller (bsc#1169013).
- ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
- ALSA: core: Add snd_device_get_state() helper (bsc#1051510).
- ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
- ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard (bsc#1051510).
- ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: hda: default enable CA0132 DSP support (bsc#1051510).
- ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
- ALSA: hda/realtek - a fake key event is triggered by running shutup (bsc#1051510).
- ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (git-fixes).
- ALSA: hda/realtek: Enable mute LED on an HP system (bsc#1051510).
- ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (git-fixes).
- ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).
- ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups (bsc#1051510).
- ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).
- ALSA: hda: remove redundant assignment to variable timeout (bsc#1051510).
- ALSA: hda: Use scnprintf() for string truncation (bsc#1051510).
- ALSA: hdsp: remove redundant assignment to variable err (bsc#1051510).
- ALSA: ice1724: Fix invalid access for enumerated ctl items (bsc#1051510).
- ALSA: info: remove redundant assignment to variable c (bsc#1051510).
- ALSA: korg1212: fix if-statement empty body warnings (bsc#1051510).
- ALSA: line6: Fix endless MIDI read loop (git-fixes).
- ALSA: pcm: Fix superfluous snprintf() usage (bsc#1051510).
- ALSA: pcm.h: add for_each_pcm_streams() (bsc#1051510).
- ALSA: pcm: oss: Avoid plugin buffer overflow (git-fixes).
- ALSA: pcm: oss: Fix regression by buffer overflow fix (bsc#1051510).
- ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks (git-fixes).
- ALSA: pcm: oss: Unlock mutex temporarily for sleeping at read/write (bsc#1051510).
- ALSA: pcm: Use a macro for parameter masks to reduce the needed cast (bsc#1051510).
- ALSA: seq: oss: Fix running status after receiving sysex (git-fixes).
- ALSA: seq: virmidi: Fix running status after receiving sysex (git-fixes).
- ALSA: usb-audio: Add delayed_register option (bsc#1051510).
- ALSA: usb-audio: Add support for MOTU MicroBook IIc (bsc#1051510).
- ALSA: usb-audio: Create a registration quirk for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
- ALSA: usb-audio: Do not create a mixer element with bogus volume range (bsc#1051510).
- ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor (bsc#1051510).
- ALSA: usb-audio: Fix mixer controls' USB interface for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
- ALSA: usb-audio: Inform devices that need delayed registration (bsc#1051510).
- ALSA: usb-audio: Parse source ID of UAC2 effect unit (bsc#1051510).
- ALSA: usb-audio: Rewrite registration quirk handling (bsc#1051510).
- ALSA: usb-midi: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: usx2y: use for_each_pcm_streams() macro (bsc#1051510).
- ALSA: via82xx: Fix endianness annotations (bsc#1051510).
- apei/ghes: Do not delay GHES polling (bsc#1166982).
- ASoC: Intel: atom: Take the drv-&gt;lock mutex before calling sst_send_slot_map() (bsc#1051510).
- ASoC: Intel: mrfld: fix incorrect check on p-&gt;sink (bsc#1051510).
- ASoC: Intel: mrfld: return error codes when an error occurs (bsc#1051510).
- ASoC: jz4740-i2s: Fix divider written at incorrect offset in register (bsc#1051510).
- ASoC: sun8i-codec: Remove unused dev from codec struct (bsc#1051510).
- ath9k: Handle txpower changes even when TPC is disabled (bsc#1051510).
- batman-adv: Avoid spurious warnings from bat_v neigh_cmp implementation (bsc#1051510).
- batman-adv: Do not schedule OGM for disabled interface (bsc#1051510).
- batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs (bsc#1051510).
- binfmt_elf: Do not move brk for INTERP-less ET_EXEC (bsc#1169013).
- binfmt_elf: move brk out of mmap when doing direct loader exec (bsc#1169013).
- blk-mq: Allow blocking queue tag iter callbacks (bsc#1167316).
- block, bfq: fix use-after-free in bfq_idle_slice_timer_body (bsc#1168760).
- block: keep bdi-&gt;io_pages in sync with max_sectors_kb for stacked devices (bsc#1168762).
- Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl (bsc#1051510).
- bnxt_en: Support all variants of the 5750X chip family (bsc#1167216).
- bpf: Explicitly memset some bpf info structures declared on the stack (bsc#1083647).
- bpf: Explicitly memset the bpf_attr structure (bsc#1083647).
- brcmfmac: abort and release host after error (bsc#1111666).
- btrfs: Account for trans_block_rsv in may_commit_transaction (bsc#1165949).
- btrfs: add a flush step for delayed iputs (bsc#1165949).
- btrfs: add assertions for releasing trans handle reservations (bsc#1165949).
- btrfs: add btrfs_delete_ref_head helper (bsc#1165949).
- btrfs: add enospc debug messages for ticket failure (bsc#1165949).
- btrfs: Add enospc_debug printing in metadata_reserve_bytes (bsc#1165949).
- btrfs: add new flushing states for the delayed refs rsv (bsc#1165949).
- btrfs: add space reservation tracepoint for reserved bytes (bsc#1165949).
- btrfs: adjust dirty_metadata_bytes after writeback failure of extent buffer (bsc#1168273).
- btrfs: allow us to use up to 90% of the global rsv for unlink (bsc#1165949).
- btrfs: always reserve our entire size for the global reserve (bsc#1165949).
- btrfs: assert on non-empty delayed iputs (bsc##1165949).
- btrfs: be more explicit about allowed flush states (bsc#1165949).
- btrfs: call btrfs_create_pending_block_groups unconditionally (bsc#1165949).
- btrfs: catch cow on deleting snapshots (bsc#1165949).
- btrfs: change the minimum global reserve size (bsc#1165949).
- btrfs: check if there are free block groups for commit (bsc#1165949).
- btrfs: clean up error handling in btrfs_truncate() (bsc#1165949).
- btrfs: cleanup extent_op handling (bsc#1165949).
- btrfs: cleanup root usage by btrfs_get_alloc_profile (bsc#1165949).
- btrfs: cleanup the target logic in __btrfs_block_rsv_release (bsc#1165949).
- btrfs: clear space cache inode generation always (bsc#1165949).
- btrfs: delayed-ref: pass delayed_refs directly to btrfs_delayed_ref_lock (bsc#1165949).
- btrfs: Do mandatory tree block check before submitting bio (bsc#1168273).
- btrfs: do not account global reserve in can_overcommit (bsc#1165949).
- btrfs: do not allow reservations if we have pending tickets (bsc#1165949).
- btrfs: do not call btrfs_start_delalloc_roots in flushoncommit (bsc#1165949).
- btrfs: do not end the transaction for delayed refs in throttle (bsc#1165949).
- btrfs: do not enospc all tickets on flush failure (bsc#1165949).
- btrfs: do not reset bio-&gt;bi_ops while writing bio (bsc#1168273).
- btrfs: do not run delayed_iputs in commit (bsc##1165949).
- btrfs: do not run delayed refs in the end transaction logic (bsc#1165949).
- btrfs: do not use ctl-&gt;free_space for max_extent_size (bsc##1165949).
- btrfs: do not use global reserve for chunk allocation (bsc#1165949).
- btrfs: drop get_extent from extent_page_data (bsc#1168273).
- btrfs: drop min_size from evict_refill_and_join (bsc##1165949).
- btrfs: drop unused space_info parameter from create_space_info (bsc#1165949).
- btrfs: dump block_rsv details when dumping space info  (bsc#1165949).
- btrfs: export block group accounting helpers (bsc#1165949).
- btrfs: export block_rsv_use_bytes (bsc#1165949).
- btrfs: export btrfs_block_rsv_add_bytes (bsc#1165949).
- btrfs: export __btrfs_block_rsv_release (bsc#1165949).
- btrfs: export space_info_add_*_bytes (bsc#1165949).
- btrfs: export the block group caching helpers (bsc#1165949).
- btrfs: export the caching control helpers (bsc#1165949).
- btrfs: export the excluded extents helpers (bsc#1165949).
- btrfs: extent_io: add proper error handling to lock_extent_buffer_for_io() (bsc#1168273).
- btrfs: extent_io: Handle errors better in btree_write_cache_pages() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_write_full_page() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_write_locked_range() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_writepages() (bsc#1168273).
- btrfs: extent_io: Kill dead condition in extent_write_cache_pages() (bsc#1168273).
- btrfs: extent_io: Kill the forward declaration of flush_write_bio (bsc#1168273).
- btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up (bsc#1168273).
- btrfs: extent-tree: Add lockdep assert when updating space info (bsc#1165949).
- btrfs: extent-tree: Add trace events for space info numbers update (bsc#1165949).
- btrfs: extent-tree: Detect bytes_may_use underflow earlier (bsc#1165949).
- btrfs: extent-tree: Detect bytes_pinned underflow earlier (bsc#1165949).
- btrfs: factor our read/write stage off csum_tree_block into its callers (bsc#1168273).
- btrfs: factor out the ticket flush handling (bsc#1165949).
- btrfs: fix insert_reserved error handling (bsc##1165949).
- btrfs: fix may_commit_transaction to deal with no partial filling (bsc#1165949).
- btrfs: fix missing delayed iputs on unmount (bsc#1165949).
- btrfs: fix qgroup double free after failure to reserve metadata for delalloc (bsc#1165949).
- btrfs: fix race leading to metadata space leak after task received signal (bsc#1165949).
- btrfs: fix truncate throttling (bsc#1165949).
- btrfs: fix unwritten extent buffers and hangs on future writeback attempts (bsc#1168273).
- btrfs: force chunk allocation if our global rsv is larger than metadata (bsc#1165949).
- btrfs: Improve global reserve stealing logic (bsc#1165949).
- btrfs: introduce an evict flushing state (bsc#1165949).
- btrfs: introduce delayed_refs_rsv (bsc#1165949).
- btrfs: loop in inode_rsv_refill (bsc#1165949).
- btrfs: make btrfs_destroy_delayed_refs use btrfs_delayed_ref_lock (bsc#1165949).
- btrfs: make btrfs_destroy_delayed_refs use btrfs_delete_ref_head (bsc#1165949).
- btrfs: make caching_thread use btrfs_find_next_key (bsc#1165949).
- btrfs: make plug in writing meta blocks really work (bsc#1168273).
- btrfs: merge two flush_write_bio helpers (bsc#1168273).
- btrfs: migrate btrfs_trans_release_chunk_metadata (bsc#1165949).
- btrfs: migrate inc/dec_block_group_ro code (bsc#1165949).
- btrfs: migrate nocow and reservation helpers (bsc#1165949).
- btrfs: migrate the alloc_profile helpers (bsc#1165949).
- btrfs: migrate the block group caching code (bsc#1165949).
- btrfs: migrate the block group cleanup code (bsc#1165949).
- btrfs: migrate the block group lookup code (bsc#1165949).
- btrfs: migrate the block group read/creation code (bsc#1165949).
- btrfs: migrate the block group ref counting stuff (bsc#1165949).
- btrfs: migrate the block group removal code (bsc#1165949).
- btrfs: migrate the block group space accounting helpers (bsc#1165949).
- btrfs: migrate the block-rsv code to block-rsv.c (bsc#1165949).
- btrfs: migrate the chunk allocation code (bsc#1165949).
- btrfs: migrate the delalloc space stuff to it's own home (bsc#1165949).
- btrfs: migrate the delayed refs rsv code (bsc#1165949).
- btrfs: migrate the dirty bg writeout code (bsc#1165949).
- btrfs: migrate the global_block_rsv helpers to block-rsv.c (bsc#1165949).
- btrfs: move and export can_overcommit (bsc#1165949).
- btrfs: move basic block_group definitions to their own header (bsc#1165949).
- btrfs: move btrfs_add_free_space out of a header file (bsc#1165949).
- btrfs: move btrfs_block_rsv definitions into it's own header (bsc#1165949).
- btrfs: move btrfs_raid_group values to btrfs_raid_attr table (bsc#1165949).
- btrfs: move btrfs_space_info_add_*_bytes to space-info.c (bsc#1165949).
- btrfs: move dump_space_info to space-info.c (bsc#1165949).
- btrfs: move reserve_metadata_bytes and supporting code to space-info.c (bsc#1165949).
- btrfs: move space_info to space-info.h (bsc#1165949).
- btrfs: move the space_info handling code to space-info.c (bsc#1165949).
- btrfs: move the space info update macro to space-info.h (bsc#1165949).
- btrfs: move the subvolume reservation stuff out of extent-tree.c (bsc#1165949).
- btrfs: only check delayed ref usage in should_end_transaction (bsc#1165949).
- btrfs: only check priority tickets for priority flushing (bsc#1165949).
- btrfs: only free reserved extent if we didn't insert it (bsc##1165949).
- btrfs: only reserve metadata_size for inodes (bsc#1165949).
- btrfs: only track ref_heads in delayed_ref_updates (bsc#1165949).
- btrfs: Output ENOSPC debug info in inc_block_group_ro (bsc#1165949).
- btrfs: pass root to various extent ref mod functions (bsc#1165949).
- btrfs: qgroup: Do not hold qgroup_ioctl_lock in btrfs_qgroup_inherit() (bsc#1165823).
- btrfs: qgroup: Mark qgroup inconsistent if we're inherting snapshot to a new qgroup (bsc#1165823).
- btrfs: refactor block group replication factor calculation to a helper (bsc#1165949).
- btrfs: refactor priority_reclaim_metadata_space (bsc#1165949).
- btrfs: refactor the ticket wakeup code (bsc#1165949).
- btrfs: release metadata before running delayed refs (bsc##1165949).
- btrfs: remove bio_flags which indicates a meta block of log-tree (bsc#1168273).
- btrfs: Remove btrfs_inode::delayed_iput_count (bsc#1165949).
- btrfs: Remove fs_info from do_chunk_alloc (bsc#1165949).
- btrfs: remove orig_bytes from reserve_ticket (bsc#1165949).
- btrfs: Remove redundant argument of flush_space (bsc#1165949).
- btrfs: Remove redundant mirror_num arg (bsc#1168273).
- btrfs: Rename bin_search -&gt; btrfs_bin_search (bsc#1168273).
- btrfs: rename btrfs_space_info_add_old_bytes (bsc#1165949).
- btrfs: rename do_chunk_alloc to btrfs_chunk_alloc (bsc#1165949).
- btrfs: rename the btrfs_calc_*_metadata_size helpers (bsc#1165949).
- btrfs: replace cleaner_delayed_iput_mutex with a waitqueue (bsc#1165949).
- btrfs: reserve delalloc metadata differently (bsc#1165949).
- btrfs: reserve extra space during evict (bsc#1165949).
- btrfs: reset max_extent_size on clear in a bitmap (bsc##1165949).
- btrfs: reset max_extent_size properly (bsc##1165949).
- btrfs: rework btrfs_check_space_for_delayed_refs (bsc#1165949).
- btrfs: rework wake_all_tickets (bsc#1165949).
- btrfs: roll tracepoint into btrfs_space_info_update helper (bsc#1165949).
- btrfs: run btrfs_try_granting_tickets if a priority ticket fails (bsc#1165949).
- btrfs: run delayed iput at unlink time (bsc#1165949).
- btrfs: run delayed iputs before committing (bsc#1165949).
- btrfs: set max_extent_size properly (bsc##1165949).
- btrfs: sink extent_write_full_page tree argument (bsc#1168273).
- btrfs: sink extent_write_locked_range tree parameter (bsc#1168273).
- btrfs: sink flush_fn to extent_write_cache_pages (bsc#1168273).
- btrfs: sink get_extent parameter to extent_fiemap (bsc#1168273).
- btrfs: sink get_extent parameter to extent_readpages (bsc#1168273).
- btrfs: sink get_extent parameter to extent_write_full_page (bsc#1168273).
- btrfs: sink get_extent parameter to extent_write_locked_range (bsc#1168273).
- btrfs: sink get_extent parameter to extent_writepages (bsc#1168273).
- btrfs: sink get_extent parameter to get_extent_skip_holes (bsc#1168273).
- btrfs: sink writepage parameter to extent_write_cache_pages (bsc#1168273).
- btrfs: stop partially refilling tickets when releasing space (bsc#1165949).
- btrfs: stop using block_rsv_release_bytes everywhere (bsc#1165949).
- btrfs: switch to on-stack csum buffer in csum_tree_block (bsc#1168273).
- btrfs: temporarily export btrfs_get_restripe_target (bsc#1165949).
- btrfs: temporarily export fragment_free_space (bsc#1165949).
- btrfs: temporarily export inc_block_group_ro (bsc#1165949).
- btrfs: track DIO bytes in flight (bsc#1165949).
- btrfs: tree-checker: Remove comprehensive root owner check (bsc#1168273).
- btrfs: unexport can_overcommit (bsc#1165949).
- btrfs: unexport the temporary exported functions (bsc#1165949).
- btrfs: unify error handling for ticket flushing (bsc#1165949).
- btrfs: unify extent_page_data type passed as void (bsc#1168273).
- btrfs: update may_commit_transaction to use the delayed refs rsv (bsc#1165949).
- btrfs: use btrfs_try_granting_tickets in update_global_rsv (bsc#1165949).
- btrfs: wait on caching when putting the bg cache (bsc#1165949).
- btrfs: wait on ordered extents on abort cleanup (bsc#1165949).
- btrfs: wakeup cleaner thread when adding delayed iput (bsc#1165949).
- ceph: canonicalize server path in place (bsc#1168443).
- ceph: check POOL_FLAG_FULL/NEARFULL in addition to OSDMAP_FULL/NEARFULL (bsc#1169307).
- ceph: remove the extra slashes in the server path (bsc#1168443).
- cfg80211: check reg_rule for NULL in handle_channel_custom() (bsc#1051510).
- cfg80211: check wiphy driver existence for drvinfo report (bsc#1051510).
- cgroup: memcg: net: do not associate sock with unrelated cgroup (bsc#1167290).
- cifs: ignore cached share root handle closing errors (bsc#1166780).
- clk: imx: Align imx sc clock msg structs to 4 (bsc#1111666).
- clk: imx: Align imx sc clock msg structs to 4 (git-fixes).
- clk: qcom: rcg: Return failure for RCG update (bsc#1051510).
- configfs: Fix bool initialization/comparison (bsc#1051510).
- cpufreq: Register drivers only after CPU devices have been registered (bsc#1051510).
- cpuidle: Do not unset the driver if it is there already (bsc#1051510).
- crypto: arm64/sha-ce - implement export/import (bsc#1051510).
- Crypto: chelsio - Fixes a deadlock between rtnl_lock and uld_mutex (bsc#1111666).
- Crypto: chelsio - Fixes a hang issue during driver registration (bsc#1111666).
- crypto: mxs-dcp - fix scatterlist linearization for hash (bsc#1051510).
- crypto: tcrypt - fix printed skcipher [a]sync mode (bsc#1051510).
- debugfs: add support for more elaborate -&gt;d_fsdata (bsc#1159198  bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198). Prerequisite for bsc#1159198.
- debugfs: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: debugfs_real_fops(): drop __must_hold sparse annotation (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: debugfs_use_start/finish do not exist anymore (bsc#1159198). Prerequisite for bsc#1159198.
- debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198). Prerequisite for bsc#1159198.
- debugfs: fix debugfs_real_fops() build error (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: implement per-file removal protection (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: purge obsolete SRCU based removal protection (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: simplify __debugfs_remove_file() (bsc#1159198). Prerequisite for bsc#1159198.
- Deprecate NR_UNSTABLE_NFS, use NR_WRITEBACK (bsc#1163403).
- dmaengine: ste_dma40: fix unneeded variable warning (bsc#1051510).
- drm/amd/amdgpu: Fix GPR read from debugfs (v2) (bsc#1113956)
- drm/amd/display: Add link_rate quirk for Apple 15' MBP 2017 (bsc#1111666).
- drm/amd/display: Fix wrongly passed static prefix (bsc#1111666).
- drm/amd/display: remove duplicated assignment to grph_obj_type (bsc#1051510).
- drm/amdgpu: fix typo for vcn1 idle check (bsc#1111666).
- drm/bochs: downgrade pci_request_region failure from error to warning (bsc#1051510).
- drm/bridge: dw-hdmi: fix AVI frame colorimetry (bsc#1051510).
- drm_dp_mst_topology: fix broken drm_dp_sideband_parse_remote_dpcd_read() (bsc#1051510).
- drm/drm_dp_mst:remove set but not used variable 'origlen' (bsc#1051510).
- drm/exynos: dsi: fix workaround for the legacy clock name (bsc#1111666).
- drm/exynos: dsi: propagate error value and silence meaningless warning (bsc#1111666).
- drm/lease: fix WARNING in idr_destroy (bsc#1113956)
- drm/msm: Set dma maximum segment size for mdss (bsc#1051510).
- drm/msm: stop abusing dma_map/unmap for cache (bsc#1051510).
- drm/msm: Use the correct dma_sync calls harder (bsc#1051510).
- drm/msm: Use the correct dma_sync calls in msm_gem (bsc#1051510).
- drm/sun4i: dsi: Use NULL to signify 'no panel' (bsc#1111666).
- drm/v3d: Replace wait_for macros to remove use of msleep (bsc#1111666).
- drm/vc4: Fix HDMI mode validation (git-fixes).
- dt-bindings: allow up to four clocks for orion-mdio (bsc#1051510).
- efi: Do not attempt to map RCI2 config table if it does not exist (jsc#ECO-366, bsc#1168367).
- efi: Export Runtime Configuration Interface table to sysfs (jsc#ECO-366, bsc#1168367).
- efi: Fix a race and a buffer overflow while reading efivars via sysfs (bsc#1164893).
- efi: x86: move efi_is_table_address() into arch/x86 (jsc#ECO-366, bsc#1168367).
- ext4: add cond_resched() to __ext4_find_entry() (bsc#1166862).
- ext4: Avoid ENOSPC when avoiding to reuse recently deleted inodes (bsc#1165019).
- ext4: Check for non-zero journal inum in ext4_calculate_overhead (bsc#1167288).
- ext4: do not assume that mmp_nodename/bdevname have NUL (bsc#1166860).
- ext4: fix a data race in EXT4_I(inode)-&gt;i_disksize (bsc#1166861).
- ext4: fix incorrect group count in ext4_fill_super error message (bsc#1168765).
- ext4: fix incorrect inodes per group in error message (bsc#1168764).
- ext4: fix potential race between online resizing and write operations (bsc#1166864).
- ext4: fix potential race between s_flex_groups online resizing and access (bsc#1166867).
- ext4: fix potential race between s_group_info online resizing and access (bsc#1166866).
- ext4: fix race between writepages and enabling EXT4_EXTENTS_FL (bsc#1166870).
- ext4: fix support for inode sizes &gt; 1024 bytes (bsc#1164284).
- ext4: potential crash on allocation error in ext4_alloc_flex_bg_array() (bsc#1166940).
- ext4: rename s_journal_flag_rwsem to s_writepages_rwsem (bsc#1166868).
- ext4: validate the debug_want_extra_isize mount option at parse time (bsc#1163897).
- fat: fix uninit-memory access for partial initialized inode (bsc#1051510).
- fat: work around race with userspace's read via blockdev while mounting (bsc#1051510).
- fbdev/g364fb: Fix build failure (bsc#1051510).
- fbdev: potential information leak in do_fb_ioctl() (bsc#1114279)
- fbmem: Adjust indentation in fb_prepare_logo and fb_blank (bsc#1114279)
- firmware: arm_sdei: fix double-lock on hibernate with shared events (bsc#1111666).
- firmware: arm_sdei: fix possible double-lock on hibernate error path (bsc#1111666).
- ftrace/kprobe: Show the maxactive number on kprobe_events (git-fixes).
- HID: apple: Add support for recent firmware on Magic Keyboards (bsc#1051510).
- i2c: hix5hd2: add missed clk_disable_unprepare in remove (bsc#1051510).
- i2c: jz4780: silence log flood on txabrt (bsc#1051510).
- IB/hfi1: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911).
- ibmvfc: do not send implicit logouts prior to NPIV login (bsc#1169625 ltc#184611).
- iio: gyro: adis16136: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis16400: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis16480: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: magnetometer: ak8974: Fix negative raw values in sysfs (bsc#1051510).
- iio: potentiostat: lmp9100: fix iio_triggered_buffer_{predisable,postenable} positions (bsc#1051510).
- Input: add safety guards to input_set_keycode() (bsc#1168075).
- Input: avoid BIT() macro usage in the serio.h UAPI header (bsc#1051510).
- Input: raydium_i2c_ts - fix error codes in raydium_i2c_boot_trigger() (bsc#1051510).
- Input: synaptics - enable RMI on HP Envy 13-ad105ng (bsc#1051510).
- intel_th: Fix user-visible error codes (bsc#1051510).
- intel_th: pci: Add Elkhart Lake CPU support (bsc#1051510).
- iommu/amd: Fix the configuration of GCR3 table root pointer (bsc#1169057).
- ipmi: fix hung processes in __get_guid() (bsc#1111666).
- ipmi: fix hung processes in __get_guid() (git-fixes).
- ipmi:ssif: Handle a possible NULL pointer reference (bsc#1051510).
- ipv6: Fix nlmsg_flags when splitting a multipath route (networking-stable-20_03_01).
- ipv6: Fix route replacement with dev-only route (networking-stable-20_03_01).
- ipvlan: do not add hardware address of master to its unicast filter list (bsc#1137325).
- irqchip/bcm2835: Quiesce IRQs left enabled by bootloader (bsc#1051510).
- irqdomain: Fix a memory leak in irq_domain_push_irq() (bsc#1051510).
- kABI: fixes for debugfs per-file removal protection backports (bsc#1159198 bsc#1109911).
- kABI: restore debugfs_remove_recursive() (bsc#1159198).
- kABI workaround for pcie_port_bus_type change (bsc#1161561).
- KVM: s390: vsie: Fix possible race when shadowing region 3 tables (git-fixes).
- KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks (git-fixes).
- libceph: fix alloc_msg_with_page_vector() memory leaks (bsc#1169308).
- libfs: fix infoleak in simple_attr_read() (bsc#1168881).
- lpfc: add support for translating an RSCN rcv into a discovery rescan (bsc#1164777 bsc#1164780 bsc#1165211).
- lpfc: add support to generate RSCN events for nport (bsc#1164777 bsc#1164780 bsc#1165211).
- mac80211: consider more elements in parsing CRC (bsc#1051510).
- mac80211: Do not send mesh HWMP PREQ if HWMP is disabled (bsc#1051510).
- mac80211: free peer keys before vif down in mesh (bsc#1051510).
- mac80211: mesh: fix RCU warning (bsc#1051510).
- mac80211: only warn once on chanctx_conf being NULL (bsc#1051510).
- mac80211: rx: avoid RCU list traversal under mutex (bsc#1051510).
- macsec: add missing attribute validation for port (bsc#1051510).
- macsec: fix refcnt leak in module exit routine (bsc#1051510).
- media: dib0700: fix rc endpoint lookup (bsc#1051510).
- media: flexcop-usb: fix endpoint sanity check (git-fixes).
- media: go7007: Fix URB type for interrupt handling (bsc#1051510).
- media: ov519: add missing endpoint sanity checks (bsc#1168829).
- media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support (bsc#1051510).
- media: ov6650: Fix some format attributes not under control (bsc#1051510).
- media: ov6650: Fix stored crop rectangle not in sync with hardware (bsc#1051510).
- media: ov6650: Fix stored frame format not in sync with hardware (bsc#1051510).
- media: stv06xx: add missing descriptor sanity checks (bsc#1168854).
- media: tda10071: fix unsigned sign extension overflow (bsc#1051510).
- media: usbtv: fix control-message timeouts (bsc#1051510).
- media: v4l2-core: fix entity initialization in device_register_subdev (bsc#1051510).
- media: vsp1: tidyup VI6_HGT_LBn_H() macro (bsc#1051510).
- media: xirlink_cit: add missing descriptor sanity checks (bsc#1051510).
- mfd: dln2: Fix sanity checking for endpoints (bsc#1051510).
- misc: pci_endpoint_test: Fix to support &gt; 10 pci-endpoint-test devices (bsc#1051510).
- mmc: sdhci-of-at91: fix cd-gpios for SAMA5D2 (bsc#1051510).
- mm/filemap.c: do not initiate writeback if mapping has no dirty pages (bsc#1168884).
- mm/memory_hotplug.c: only respect mem= parameter during boot stage (bsc#1065600).
- mm: replace PF_LESS_THROTTLE with PF_LOCAL_THROTTLE (bsc#1163403).
- mwifiex: set needed_headroom, not hard_header_len (bsc#1051510).
- net: dsa: bcm_sf2: Fix overflow checks (git-fixes).
- net: dsa: tag_qca: Make sure there is headroom for tag (networking-stable-20_02_19).
- net: ena: Add PCI shutdown handler to allow safe kexec (bsc#1167421, bsc#1167423).
- net: fib_rules: Correctly set table field when table number exceeds 8 bits (networking-stable-20_03_01).
- netfilter: conntrack: sctp: use distinct states for new SCTP connections (bsc#1159199).
- net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL (bsc#1051510).
- net: nfc: fix bounds checking bugs on 'pipe' (bsc#1051510).
- net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before accessing PHY registers (bsc#1051510).
- net: phy: restore mdio regs in the iproc mdio driver (networking-stable-20_03_01).
- net/sched: flower: add missing validation of TCA_FLOWER_FLAGS (networking-stable-20_02_19).
- net_sched: keep alloc_hash updated after hash allocation (git-fixes).
- net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS (networking-stable-20_02_19).
- net/smc: fix leak of kernel memory to user space (networking-stable-20_02_19).
- NFC: fdp: Fix a signedness bug in fdp_nci_send_patch() (bsc#1051510).
- nfc: pn544: Fix occasional HW initialization failure (networking-stable-20_03_01).
- NFS: send state management on a single connection (bsc#1167005).
- nvme: fix a possible deadlock when passthru commands sent to a multipath device (bsc#1158983).
- nvme: fix controller removal race with scan work (bsc#1158983).
- nvme-multipath: also check for a disabled path if there is a single sibling (bsc#1158983).
- nvme-multipath: do not select namespaces which are about to be removed (bsc#1158983).
- nvme-multipath: factor out a nvme_path_is_disabled helper (bsc#1158983).
- nvme-multipath: fix crash in nvme_mpath_clear_ctrl_paths (bsc#1158983).
- nvme-multipath: fix possible io hang after ctrl reconnect (bsc#1158983).
- nvme-multipath: fix possible I/O hang when paths are updated (bsc#1158983).
- nvme-multipath: remove unused groups_only mode in ana log (bsc#1158983).
- nvme-multipath: round-robin I/O policy (bsc#1158983).
- objtool: Add is_static_jump() helper (bsc#1169514).
- objtool: Add relocation check for alternative sections (bsc#1169514).
- OMAP: DSS2: remove non-zero check on variable r (bsc#1114279)
- partitions/efi: Fix partition name parsing in GUID partition entry (bsc#1168763).
- PCI/AER: Factor message prefixes with dev_fmt() (bsc#1161561).
- PCI/AER: Log which device prevents error recovery (bsc#1161561).
- PCI/AER: Remove ERR_FATAL code from ERR_NONFATAL path (bsc#1161561).
- PCI/ASPM: Clear the correct bits when enabling L1 substates (bsc#1051510).
- PCI: endpoint: Fix clearing start entry in configfs (bsc#1051510).
- PCI/ERR: Always report current recovery status for udev (bsc#1161561).
- PCI/ERR: Handle fatal error recovery (bsc#1161561).
- PCI/ERR: Remove duplicated include from err.c (bsc#1161561).
- PCI/ERR: Simplify broadcast callouts (bsc#1161561).
- PCI: pciehp: Fix MSI interrupt race (bsc#1159037).
- PCI: portdrv: Initialize service drivers directly (bsc#1161561).
- PCI/portdrv: Remove pcie_port_bus_type link order dependency (bsc#1161561).
- PCI: Simplify disconnected marking (bsc#1161561).
- PCI/switchtec: Fix init_completion race condition with poll_wait() (bsc#1051510).
- PCI: Unify device inaccessible (bsc#1161561).
- perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag (bsc#1114279).
- perf: qcom_l2: fix column exclusion check (git-fixes).
- pinctrl: core: Remove extra kref_get which blocks hogs being freed (bsc#1051510).
- platform/x86: pmc_atom: Add Lex 2I385SW to critclk_systems DMI table (bsc#1051510).
- PM: core: Fix handling of devices deleted during system-wide resume (git-fixes).
- powerpc/64: mark start_here_multiplatform as __ref (bsc#1148868).
- powerpc/64s: Fix section mismatch warnings from boot code (bsc#1148868).
- powerpc/64/tm: Do not let userspace set regs-&gt;trap via sigreturn (bsc#1118338 ltc#173734).
- powerpc/hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE entries (bsc#1065729).
- powerpc/kprobes: Ignore traps that happened in real mode (bsc#1065729).
- powerpc/mm: Fix section mismatch warning in stop_machine_change_mapping() (bsc#1148868).
- powerpc/pseries/ddw: Extend upper limit for huge DMA window for persistent memory (bsc#1142685 ltc#179509).
- powerpc/pseries/iommu: Fix set but not used values (bsc#1142685 ltc#179509).
- powerpc/pseries/iommu: Use memory@ nodes in max RAM address calculation (bsc#1142685 ltc#179509).
- powerpc/vmlinux.lds: Explicitly retain .gnu.hash (bsc#1148868).
- powerpc/xive: Replace msleep(x) with msleep(OPAL_BUSY_DELAY_MS) (bsc#1085030).
- powerpc/xive: Use XIVE_BAD_IRQ instead of zero to catch non configured IPIs (bsc#1085030).
- pwm: bcm2835: Dynamically allocate base (bsc#1051510).
- pwm: meson: Fix confusing indentation (bsc#1051510).
- pwm: pca9685: Fix PWM/GPIO inter-operation (bsc#1051510).
- pwm: rcar: Fix late Runtime PM enablement (bsc#1051510).
- pwm: renesas-tpu: Fix late Runtime PM enablement (bsc#1051510).
- pxa168fb: fix release function mismatch in probe failure (bsc#1051510).
- qede: Fix race between rdma destroy workqueue and link change event (networking-stable-20_03_01).
- qmi_wwan: unconditionally reject 2 ep interfaces (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (git-fixes).
- s390/cio: avoid duplicated 'ADD' uevents (git-fixes).
- s390/cio: generate delayed uevent for vfio-ccw subchannels (git-fixes).
- s390/cpuinfo: fix wrong output when CPU0 is offline (git-fixes).
- s390/diag: fix display of diagnose call statistics (git-fixes).
- s390/gmap: return proper error code on ksm unsharing (git-fixes).
- s390/mm: fix dynamic pagetable upgrade for hugetlbfs (bsc#1165182 LTC#184102).
- s390/qeth: cancel RX reclaim work earlier (git-fixes).
- s390/qeth: do not return -ENOTSUPP to userspace (git-fixes).
- s390/qeth: do not warn for napi with 0 budget (git-fixes).
- s390/qeth: fix off-by-one in RX copybreak check (git-fixes).
- s390/qeth: fix potential deadlock on workqueue flush (bsc#1165185 LTC#184108).
- s390/qeth: fix promiscuous mode after reset (git-fixes).
- s390/qeth: fix qdio teardown after early init error (git-fixes).
- s390/qeth: handle error due to unsupported transport mode (git-fixes).
- s390/qeth: handle error when backing RX buffer (git-fixes).
- s390/qeth: lock the card while changing its hsuid (git-fixes).
- s390/qeth: support net namespaces for L3 devices (git-fixes).
- s390/time: Fix clk type in get_tod_clock (git-fixes).
- scsi: core: avoid repetitive logging of device offline messages (bsc#1145929).
- scsi: core: kABI fix offline_already (bsc#1145929).
- scsi: fc: Update Descriptor definition and add RDF and Link Integrity FPINs (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551). Refresh sorted patches.
- scsi: lpfc: add RDF registration and Link Integrity FPIN logging (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Change default SCSI LUN QD to 64 (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654).
- scsi: lpfc: Clean up hba max_lun_queue_depth checks (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Copyright updates for 12.6.0.4 patches (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix broken Credit Recovery after driver load (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix compiler warning on frame size (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix coverity errors in fmdi attribute handling (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix crash after handling a pci error (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix disablement of FC-AL on lpe35000 models (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix driver nvme rescan logging (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix erroneous cpu limit of 128 on I/O statistics (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix Fabric hostname registration if system hostname changes (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix improper flag check for IO type (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix incomplete NVME discovery when target (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lockdep error - register non-static key (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lpfc_io_buf resource leak in lpfc_get_scsi_buf_s4 error path (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lpfc overwrite of sg_cnt field in nvmefc_tgt_fcp_req (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix MDS Latency Diagnostics Err-drop rates (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix missing check for CSF in Write Object Mbox Rsp (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix ras_log via debugfs (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix registration of ELS type support in fdmi (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix release of hwq to clear the eq relationship (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix: Rework setting of fdmi symbolic node name registration (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix RQ buffer leakage when no IOCBs available (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix scsi host template for SLI3 vports (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: fix spelling mistake 'Notication' -&gt; 'Notification' (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: fix spelling mistakes of asynchronous (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix unmap of dpp bars affecting next driver load (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix update of wq consumer index in lpfc_sli4_wq_release (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Make debugfs ktime stats generic for NVME and SCSI (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Make lpfc_defer_acc_rsp static (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Remove handler for obsolete ELS - Read Port Status (RPS) (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Remove prototype FIPS/DSS options from SLI-3 (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Update lpfc version to 12.8.0.0 (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (bsc#1157424).
- scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point (git-fixes).
- sctp: move the format error check out of __sctp_sf_do_9_1_abort (networking-stable-20_03_01).
- serdev: ttyport: restore client ops on deregistration (bsc#1051510).
- staging: ccree: use signal safe completion wait (git-fixes).
- staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table (bsc#1051510).
- staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi (bsc#1051510).
- staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb (bsc#1051510).
- staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback (bsc#1051510).
- SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202).
- swiotlb: do not panic on mapping failures (bsc#1162171).
- swiotlb: remove the overflow buffer (bsc#1162171).
- thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n (bsc#1051510).
- tpm: ibmvtpm: Wait for buffer to be set before proceeding (bsc#1065729).
- tty: evh_bytechan: Fix out of bounds accesses (bsc#1051510).
- tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode (bsc#1051510).
- tty: serial: imx: setup the correct sg entry for tx dma (bsc#1051510).
- USB: audio-v2: Add uac2_effect_unit_descriptor definition (bsc#1051510).
- USB: cdc-acm: fix rounding error in TIOCSSERIAL (git-fixes).
- USB: core: hub: do error out if usb_autopm_get_interface() fails (git-fixes).
- USB: core: port: do error out if usb_autopm_get_interface() fails (git-fixes).
- USB: Disable LPM on WD19's Realtek Hub (git-fixes).
- USB: dwc2: Fix in ISOC request length checking (git-fixes).
- USB: Fix novation SourceControl XL after suspend (git-fixes).
- USB: gadget: composite: Fix bMaxPower for SuperSpeedPlus (git-fixes).
- USB: gadget: f_fs: Fix use after free issue as part of queue failure (bsc#1051510).
- USB: host: xhci-plat: add a shutdown (git-fixes).
- USB: hub: Do not record a connect-change event during reset-resume (git-fixes).
- USB: misc: iowarrior: add support for 2 OEMed devices (git-fixes).
- USB: misc: iowarrior: add support for the 100 device (git-fixes).
- USB: misc: iowarrior: add support for the 28 and 28L devices (git-fixes).
- USB: musb: Disable pullup at init (git-fixes).
- USB: musb: fix crash with highmen PIO and usbmon (bsc#1051510).
- USB: quirks: add NO_LPM quirk for Logitech Screen Share (git-fixes).
- USB: quirks: add NO_LPM quirk for RTL8153 based ethernet adapters (git-fixes).
- USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback (bsc#1051510).
- USB: serial: option: add ME910G1 ECM composition 0x110b (git-fixes).
- USB: serial: pl2303: add device-id for HP LD381 (git-fixes).
- USB: storage: Add quirk for Samsung Fit flash (git-fixes).
- USB: uas: fix a plug &amp; unplug racing (git-fixes).
- USB: xhci: apply XHCI_SUSPEND_DELAY to AMD XHCI controller 1022:145c (git-fixes).
- virtio-blk: improve virtqueue error to BLK_STS (bsc#1167627).
- virtio_ring: fix unmap of indirect descriptors (bsc#1162171).
- x86/mce: Fix logic and comments around MSR_PPIN_CTL (bsc#1114279).
- x86/pkeys: Manually set X86_FEATURE_OSPKE to preserve existing changes (bsc#1114279).
- x86/xen: fix booting 32-bit pv guest (bsc#1071995).
- x86/xen: Make the boot CPU idle task reliable (bsc#1071995).
- x86/xen: Make the secondary CPU idle tasks reliable (bsc#1071995).
- xen/blkfront: fix memory allocation flags in blkfront_setup_indirect() (bsc#1168486).
- xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms (git-fixes).
- xhci: Do not open code __print_symbolic() in xhci trace events (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-29"/>
	<updated date="2020-04-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109911">SUSE bug 1109911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118338">SUSE bug 1118338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120386">SUSE bug 1120386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137325">SUSE bug 1137325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145051">SUSE bug 1145051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145929">SUSE bug 1145929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158983">SUSE bug 1158983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159037">SUSE bug 1159037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159198">SUSE bug 1159198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159199">SUSE bug 1159199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161561">SUSE bug 1161561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161951">SUSE bug 1161951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162171">SUSE bug 1162171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163403">SUSE bug 1163403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163897">SUSE bug 1163897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164284">SUSE bug 1164284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164777">SUSE bug 1164777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164893">SUSE bug 1164893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165019">SUSE bug 1165019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165182">SUSE bug 1165182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165185">SUSE bug 1165185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165211">SUSE bug 1165211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165823">SUSE bug 1165823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165949">SUSE bug 1165949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166780">SUSE bug 1166780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166860">SUSE bug 1166860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166861">SUSE bug 1166861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166862">SUSE bug 1166862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166864">SUSE bug 1166864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166866">SUSE bug 1166866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166867">SUSE bug 1166867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166868">SUSE bug 1166868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166870">SUSE bug 1166870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166940">SUSE bug 1166940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166982">SUSE bug 1166982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167005">SUSE bug 1167005</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167216">SUSE bug 1167216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167288">SUSE bug 1167288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167290">SUSE bug 1167290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167316">SUSE bug 1167316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167421">SUSE bug 1167421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167423">SUSE bug 1167423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167627">SUSE bug 1167627</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167629">SUSE bug 1167629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168075">SUSE bug 1168075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168202">SUSE bug 1168202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168273">SUSE bug 1168273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168276">SUSE bug 1168276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168295">SUSE bug 1168295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168367">SUSE bug 1168367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168424">SUSE bug 1168424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168443">SUSE bug 1168443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168486">SUSE bug 1168486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168552">SUSE bug 1168552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168760">SUSE bug 1168760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168762">SUSE bug 1168762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168763">SUSE bug 1168763</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168764">SUSE bug 1168764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168765">SUSE bug 1168765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168829">SUSE bug 1168829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168854">SUSE bug 1168854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168881">SUSE bug 1168881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168884">SUSE bug 1168884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168952">SUSE bug 1168952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169013">SUSE bug 1169013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169057">SUSE bug 1169057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169307">SUSE bug 1169307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169308">SUSE bug 1169308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169390">SUSE bug 1169390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169625">SUSE bug 1169625</bugzilla>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19770/">CVE-2019-19770</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3701/">CVE-2019-3701</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9458/">CVE-2019-9458</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10942/">CVE-2020-10942</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11494/">CVE-2020-11494</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11669/">CVE-2020-11669</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8834/">CVE-2020-8834</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497052" comment="reiserfs-kmp-default-4.12.14-197.40.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138300" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1170771" ref_url="https://bugzilla.suse.com/1170771" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12243" ref_url="https://www.suse.com/security/cve/CVE-2020-12243/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1219-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006805.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- CVE-2020-12243: Fixed a denial of service related to recursive filters (bsc#1170771).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-07"/>
	<updated date="2020-05-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1170771">SUSE bug 1170771</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12243/">CVE-2020-12243</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497053" comment="openldap2-2.4.46-9.28.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497054" comment="openldap2-back-meta-2.4.46-9.28.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497055" comment="openldap2-back-perl-2.4.46-9.28.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138301" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160398" ref_url="https://bugzilla.suse.com/1160398" source="BUGZILLA"/>
		<reference ref_id="1169511" ref_url="https://bugzilla.suse.com/1169511" source="BUGZILLA"/>
		<reference ref_id="1171352" ref_url="https://bugzilla.suse.com/1171352" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-2754" ref_url="https://www.suse.com/security/cve/CVE-2020-2754/" source="CVE"/>
		<reference ref_id="CVE-2020-2755" ref_url="https://www.suse.com/security/cve/CVE-2020-2755/" source="CVE"/>
		<reference ref_id="CVE-2020-2756" ref_url="https://www.suse.com/security/cve/CVE-2020-2756/" source="CVE"/>
		<reference ref_id="CVE-2020-2757" ref_url="https://www.suse.com/security/cve/CVE-2020-2757/" source="CVE"/>
		<reference ref_id="CVE-2020-2773" ref_url="https://www.suse.com/security/cve/CVE-2020-2773/" source="CVE"/>
		<reference ref_id="CVE-2020-2781" ref_url="https://www.suse.com/security/cve/CVE-2020-2781/" source="CVE"/>
		<reference ref_id="CVE-2020-2800" ref_url="https://www.suse.com/security/cve/CVE-2020-2800/" source="CVE"/>
		<reference ref_id="CVE-2020-2803" ref_url="https://www.suse.com/security/cve/CVE-2020-2803/" source="CVE"/>
		<reference ref_id="CVE-2020-2805" ref_url="https://www.suse.com/security/cve/CVE-2020-2805/" source="CVE"/>
		<reference ref_id="CVE-2020-2830" ref_url="https://www.suse.com/security/cve/CVE-2020-2830/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006904.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk to version jdk8u252 fixes the following issues:

- CVE-2020-2754: Forward references to Nashorn (bsc#1169511)
- CVE-2020-2755: Improve Nashorn matching (bsc#1169511)
- CVE-2020-2756: Better mapping of serial ENUMs (bsc#1169511)
- CVE-2020-2757: Less Blocking Array Queues (bsc#1169511)
- CVE-2020-2773: Better signatures in XML (bsc#1169511)
- CVE-2020-2781: Improve TLS session handling (bsc#1169511)
- CVE-2020-2800: Better Headings for HTTP Servers (bsc#1169511)
- CVE-2020-2803: Enhance buffering of byte buffers (bsc#1169511)
- CVE-2020-2805: Enhance typing of methods (bsc#1169511)
- CVE-2020-2830: Better Scanner conversions (bsc#1169511)
- Ignore whitespaces after the header or footer in PEM X.509 cert (bsc#1171352)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-09"/>
	<updated date="2020-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160398">SUSE bug 1160398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171352">SUSE bug 1171352</bugzilla>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2754/">CVE-2020-2754</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2755/">CVE-2020-2755</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2756/">CVE-2020-2756</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2757/">CVE-2020-2757</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2773/">CVE-2020-2773</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2781/">CVE-2020-2781</cve>
	<cve impact="important" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2800/">CVE-2020-2800</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2803/">CVE-2020-2803</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2805/">CVE-2020-2805</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2830/">CVE-2020-2830</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497056" comment="java-1_8_0-openjdk-1.8.0.252-3.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497057" comment="java-1_8_0-openjdk-demo-1.8.0.252-3.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497058" comment="java-1_8_0-openjdk-devel-1.8.0.252-3.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497059" comment="java-1_8_0-openjdk-headless-1.8.0.252-3.35.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138302" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1089895" ref_url="https://bugzilla.suse.com/1089895" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1124278" ref_url="https://bugzilla.suse.com/1124278" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127355" ref_url="https://bugzilla.suse.com/1127355" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1151794" ref_url="https://bugzilla.suse.com/1151794" source="BUGZILLA"/>
		<reference ref_id="1152489" ref_url="https://bugzilla.suse.com/1152489" source="BUGZILLA"/>
		<reference ref_id="1154824" ref_url="https://bugzilla.suse.com/1154824" source="BUGZILLA"/>
		<reference ref_id="1157169" ref_url="https://bugzilla.suse.com/1157169" source="BUGZILLA"/>
		<reference ref_id="1158265" ref_url="https://bugzilla.suse.com/1158265" source="BUGZILLA"/>
		<reference ref_id="1160388" ref_url="https://bugzilla.suse.com/1160388" source="BUGZILLA"/>
		<reference ref_id="1160947" ref_url="https://bugzilla.suse.com/1160947" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1164871" ref_url="https://bugzilla.suse.com/1164871" source="BUGZILLA"/>
		<reference ref_id="1165183" ref_url="https://bugzilla.suse.com/1165183" source="BUGZILLA"/>
		<reference ref_id="1165478" ref_url="https://bugzilla.suse.com/1165478" source="BUGZILLA"/>
		<reference ref_id="1165741" ref_url="https://bugzilla.suse.com/1165741" source="BUGZILLA"/>
		<reference ref_id="1166969" ref_url="https://bugzilla.suse.com/1166969" source="BUGZILLA"/>
		<reference ref_id="1166978" ref_url="https://bugzilla.suse.com/1166978" source="BUGZILLA"/>
		<reference ref_id="1167574" ref_url="https://bugzilla.suse.com/1167574" source="BUGZILLA"/>
		<reference ref_id="1167851" ref_url="https://bugzilla.suse.com/1167851" source="BUGZILLA"/>
		<reference ref_id="1167867" ref_url="https://bugzilla.suse.com/1167867" source="BUGZILLA"/>
		<reference ref_id="1168332" ref_url="https://bugzilla.suse.com/1168332" source="BUGZILLA"/>
		<reference ref_id="1168670" ref_url="https://bugzilla.suse.com/1168670" source="BUGZILLA"/>
		<reference ref_id="1168789" ref_url="https://bugzilla.suse.com/1168789" source="BUGZILLA"/>
		<reference ref_id="1169020" ref_url="https://bugzilla.suse.com/1169020" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169525" ref_url="https://bugzilla.suse.com/1169525" source="BUGZILLA"/>
		<reference ref_id="1169762" ref_url="https://bugzilla.suse.com/1169762" source="BUGZILLA"/>
		<reference ref_id="1170056" ref_url="https://bugzilla.suse.com/1170056" source="BUGZILLA"/>
		<reference ref_id="1170125" ref_url="https://bugzilla.suse.com/1170125" source="BUGZILLA"/>
		<reference ref_id="1170145" ref_url="https://bugzilla.suse.com/1170145" source="BUGZILLA"/>
		<reference ref_id="1170284" ref_url="https://bugzilla.suse.com/1170284" source="BUGZILLA"/>
		<reference ref_id="1170345" ref_url="https://bugzilla.suse.com/1170345" source="BUGZILLA"/>
		<reference ref_id="1170457" ref_url="https://bugzilla.suse.com/1170457" source="BUGZILLA"/>
		<reference ref_id="1170522" ref_url="https://bugzilla.suse.com/1170522" source="BUGZILLA"/>
		<reference ref_id="1170592" ref_url="https://bugzilla.suse.com/1170592" source="BUGZILLA"/>
		<reference ref_id="1170617" ref_url="https://bugzilla.suse.com/1170617" source="BUGZILLA"/>
		<reference ref_id="1170618" ref_url="https://bugzilla.suse.com/1170618" source="BUGZILLA"/>
		<reference ref_id="1170620" ref_url="https://bugzilla.suse.com/1170620" source="BUGZILLA"/>
		<reference ref_id="1170621" ref_url="https://bugzilla.suse.com/1170621" source="BUGZILLA"/>
		<reference ref_id="1170770" ref_url="https://bugzilla.suse.com/1170770" source="BUGZILLA"/>
		<reference ref_id="1170778" ref_url="https://bugzilla.suse.com/1170778" source="BUGZILLA"/>
		<reference ref_id="1170791" ref_url="https://bugzilla.suse.com/1170791" source="BUGZILLA"/>
		<reference ref_id="1170901" ref_url="https://bugzilla.suse.com/1170901" source="BUGZILLA"/>
		<reference ref_id="1171078" ref_url="https://bugzilla.suse.com/1171078" source="BUGZILLA"/>
		<reference ref_id="1171098" ref_url="https://bugzilla.suse.com/1171098" source="BUGZILLA"/>
		<reference ref_id="1171118" ref_url="https://bugzilla.suse.com/1171118" source="BUGZILLA"/>
		<reference ref_id="1171189" ref_url="https://bugzilla.suse.com/1171189" source="BUGZILLA"/>
		<reference ref_id="1171191" ref_url="https://bugzilla.suse.com/1171191" source="BUGZILLA"/>
		<reference ref_id="1171195" ref_url="https://bugzilla.suse.com/1171195" source="BUGZILLA"/>
		<reference ref_id="1171202" ref_url="https://bugzilla.suse.com/1171202" source="BUGZILLA"/>
		<reference ref_id="1171205" ref_url="https://bugzilla.suse.com/1171205" source="BUGZILLA"/>
		<reference ref_id="1171214" ref_url="https://bugzilla.suse.com/1171214" source="BUGZILLA"/>
		<reference ref_id="1171217" ref_url="https://bugzilla.suse.com/1171217" source="BUGZILLA"/>
		<reference ref_id="1171218" ref_url="https://bugzilla.suse.com/1171218" source="BUGZILLA"/>
		<reference ref_id="1171219" ref_url="https://bugzilla.suse.com/1171219" source="BUGZILLA"/>
		<reference ref_id="1171220" ref_url="https://bugzilla.suse.com/1171220" source="BUGZILLA"/>
		<reference ref_id="1171244" ref_url="https://bugzilla.suse.com/1171244" source="BUGZILLA"/>
		<reference ref_id="1171293" ref_url="https://bugzilla.suse.com/1171293" source="BUGZILLA"/>
		<reference ref_id="1171417" ref_url="https://bugzilla.suse.com/1171417" source="BUGZILLA"/>
		<reference ref_id="1171527" ref_url="https://bugzilla.suse.com/1171527" source="BUGZILLA"/>
		<reference ref_id="1171599" ref_url="https://bugzilla.suse.com/1171599" source="BUGZILLA"/>
		<reference ref_id="1171600" ref_url="https://bugzilla.suse.com/1171600" source="BUGZILLA"/>
		<reference ref_id="1171601" ref_url="https://bugzilla.suse.com/1171601" source="BUGZILLA"/>
		<reference ref_id="1171602" ref_url="https://bugzilla.suse.com/1171602" source="BUGZILLA"/>
		<reference ref_id="1171604" ref_url="https://bugzilla.suse.com/1171604" source="BUGZILLA"/>
		<reference ref_id="1171605" ref_url="https://bugzilla.suse.com/1171605" source="BUGZILLA"/>
		<reference ref_id="1171606" ref_url="https://bugzilla.suse.com/1171606" source="BUGZILLA"/>
		<reference ref_id="1171607" ref_url="https://bugzilla.suse.com/1171607" source="BUGZILLA"/>
		<reference ref_id="1171608" ref_url="https://bugzilla.suse.com/1171608" source="BUGZILLA"/>
		<reference ref_id="1171609" ref_url="https://bugzilla.suse.com/1171609" source="BUGZILLA"/>
		<reference ref_id="1171610" ref_url="https://bugzilla.suse.com/1171610" source="BUGZILLA"/>
		<reference ref_id="1171611" ref_url="https://bugzilla.suse.com/1171611" source="BUGZILLA"/>
		<reference ref_id="1171612" ref_url="https://bugzilla.suse.com/1171612" source="BUGZILLA"/>
		<reference ref_id="1171613" ref_url="https://bugzilla.suse.com/1171613" source="BUGZILLA"/>
		<reference ref_id="1171614" ref_url="https://bugzilla.suse.com/1171614" source="BUGZILLA"/>
		<reference ref_id="1171615" ref_url="https://bugzilla.suse.com/1171615" source="BUGZILLA"/>
		<reference ref_id="1171616" ref_url="https://bugzilla.suse.com/1171616" source="BUGZILLA"/>
		<reference ref_id="1171617" ref_url="https://bugzilla.suse.com/1171617" source="BUGZILLA"/>
		<reference ref_id="1171618" ref_url="https://bugzilla.suse.com/1171618" source="BUGZILLA"/>
		<reference ref_id="1171619" ref_url="https://bugzilla.suse.com/1171619" source="BUGZILLA"/>
		<reference ref_id="1171620" ref_url="https://bugzilla.suse.com/1171620" source="BUGZILLA"/>
		<reference ref_id="1171621" ref_url="https://bugzilla.suse.com/1171621" source="BUGZILLA"/>
		<reference ref_id="1171622" ref_url="https://bugzilla.suse.com/1171622" source="BUGZILLA"/>
		<reference ref_id="1171623" ref_url="https://bugzilla.suse.com/1171623" source="BUGZILLA"/>
		<reference ref_id="1171624" ref_url="https://bugzilla.suse.com/1171624" source="BUGZILLA"/>
		<reference ref_id="1171625" ref_url="https://bugzilla.suse.com/1171625" source="BUGZILLA"/>
		<reference ref_id="1171626" ref_url="https://bugzilla.suse.com/1171626" source="BUGZILLA"/>
		<reference ref_id="1171662" ref_url="https://bugzilla.suse.com/1171662" source="BUGZILLA"/>
		<reference ref_id="1171679" ref_url="https://bugzilla.suse.com/1171679" source="BUGZILLA"/>
		<reference ref_id="1171691" ref_url="https://bugzilla.suse.com/1171691" source="BUGZILLA"/>
		<reference ref_id="1171692" ref_url="https://bugzilla.suse.com/1171692" source="BUGZILLA"/>
		<reference ref_id="1171694" ref_url="https://bugzilla.suse.com/1171694" source="BUGZILLA"/>
		<reference ref_id="1171695" ref_url="https://bugzilla.suse.com/1171695" source="BUGZILLA"/>
		<reference ref_id="1171736" ref_url="https://bugzilla.suse.com/1171736" source="BUGZILLA"/>
		<reference ref_id="1171817" ref_url="https://bugzilla.suse.com/1171817" source="BUGZILLA"/>
		<reference ref_id="1171948" ref_url="https://bugzilla.suse.com/1171948" source="BUGZILLA"/>
		<reference ref_id="1171949" ref_url="https://bugzilla.suse.com/1171949" source="BUGZILLA"/>
		<reference ref_id="1171951" ref_url="https://bugzilla.suse.com/1171951" source="BUGZILLA"/>
		<reference ref_id="1171952" ref_url="https://bugzilla.suse.com/1171952" source="BUGZILLA"/>
		<reference ref_id="1171979" ref_url="https://bugzilla.suse.com/1171979" source="BUGZILLA"/>
		<reference ref_id="1171982" ref_url="https://bugzilla.suse.com/1171982" source="BUGZILLA"/>
		<reference ref_id="1171983" ref_url="https://bugzilla.suse.com/1171983" source="BUGZILLA"/>
		<reference ref_id="1172017" ref_url="https://bugzilla.suse.com/1172017" source="BUGZILLA"/>
		<reference ref_id="1172096" ref_url="https://bugzilla.suse.com/1172096" source="BUGZILLA"/>
		<reference ref_id="1172097" ref_url="https://bugzilla.suse.com/1172097" source="BUGZILLA"/>
		<reference ref_id="1172098" ref_url="https://bugzilla.suse.com/1172098" source="BUGZILLA"/>
		<reference ref_id="1172099" ref_url="https://bugzilla.suse.com/1172099" source="BUGZILLA"/>
		<reference ref_id="1172101" ref_url="https://bugzilla.suse.com/1172101" source="BUGZILLA"/>
		<reference ref_id="1172102" ref_url="https://bugzilla.suse.com/1172102" source="BUGZILLA"/>
		<reference ref_id="1172103" ref_url="https://bugzilla.suse.com/1172103" source="BUGZILLA"/>
		<reference ref_id="1172104" ref_url="https://bugzilla.suse.com/1172104" source="BUGZILLA"/>
		<reference ref_id="1172127" ref_url="https://bugzilla.suse.com/1172127" source="BUGZILLA"/>
		<reference ref_id="1172130" ref_url="https://bugzilla.suse.com/1172130" source="BUGZILLA"/>
		<reference ref_id="1172185" ref_url="https://bugzilla.suse.com/1172185" source="BUGZILLA"/>
		<reference ref_id="1172188" ref_url="https://bugzilla.suse.com/1172188" source="BUGZILLA"/>
		<reference ref_id="1172199" ref_url="https://bugzilla.suse.com/1172199" source="BUGZILLA"/>
		<reference ref_id="1172201" ref_url="https://bugzilla.suse.com/1172201" source="BUGZILLA"/>
		<reference ref_id="1172202" ref_url="https://bugzilla.suse.com/1172202" source="BUGZILLA"/>
		<reference ref_id="1172221" ref_url="https://bugzilla.suse.com/1172221" source="BUGZILLA"/>
		<reference ref_id="1172249" ref_url="https://bugzilla.suse.com/1172249" source="BUGZILLA"/>
		<reference ref_id="1172251" ref_url="https://bugzilla.suse.com/1172251" source="BUGZILLA"/>
		<reference ref_id="1172317" ref_url="https://bugzilla.suse.com/1172317" source="BUGZILLA"/>
		<reference ref_id="1172342" ref_url="https://bugzilla.suse.com/1172342" source="BUGZILLA"/>
		<reference ref_id="1172343" ref_url="https://bugzilla.suse.com/1172343" source="BUGZILLA"/>
		<reference ref_id="1172344" ref_url="https://bugzilla.suse.com/1172344" source="BUGZILLA"/>
		<reference ref_id="1172366" ref_url="https://bugzilla.suse.com/1172366" source="BUGZILLA"/>
		<reference ref_id="1172378" ref_url="https://bugzilla.suse.com/1172378" source="BUGZILLA"/>
		<reference ref_id="1172391" ref_url="https://bugzilla.suse.com/1172391" source="BUGZILLA"/>
		<reference ref_id="1172397" ref_url="https://bugzilla.suse.com/1172397" source="BUGZILLA"/>
		<reference ref_id="1172453" ref_url="https://bugzilla.suse.com/1172453" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2019-19462" ref_url="https://www.suse.com/security/cve/CVE-2019-19462/" source="CVE"/>
		<reference ref_id="CVE-2019-20806" ref_url="https://www.suse.com/security/cve/CVE-2019-20806/" source="CVE"/>
		<reference ref_id="CVE-2019-20812" ref_url="https://www.suse.com/security/cve/CVE-2019-20812/" source="CVE"/>
		<reference ref_id="CVE-2019-9455" ref_url="https://www.suse.com/security/cve/CVE-2019-9455/" source="CVE"/>
		<reference ref_id="CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543/" source="CVE"/>
		<reference ref_id="CVE-2020-10690" ref_url="https://www.suse.com/security/cve/CVE-2020-10690/" source="CVE"/>
		<reference ref_id="CVE-2020-10711" ref_url="https://www.suse.com/security/cve/CVE-2020-10711/" source="CVE"/>
		<reference ref_id="CVE-2020-10720" ref_url="https://www.suse.com/security/cve/CVE-2020-10720/" source="CVE"/>
		<reference ref_id="CVE-2020-10732" ref_url="https://www.suse.com/security/cve/CVE-2020-10732/" source="CVE"/>
		<reference ref_id="CVE-2020-10751" ref_url="https://www.suse.com/security/cve/CVE-2020-10751/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="CVE-2020-12114" ref_url="https://www.suse.com/security/cve/CVE-2020-12114/" source="CVE"/>
		<reference ref_id="CVE-2020-12464" ref_url="https://www.suse.com/security/cve/CVE-2020-12464/" source="CVE"/>
		<reference ref_id="CVE-2020-12652" ref_url="https://www.suse.com/security/cve/CVE-2020-12652/" source="CVE"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="CVE-2020-12655" ref_url="https://www.suse.com/security/cve/CVE-2020-12655/" source="CVE"/>
		<reference ref_id="CVE-2020-12656" ref_url="https://www.suse.com/security/cve/CVE-2020-12656/" source="CVE"/>
		<reference ref_id="CVE-2020-12657" ref_url="https://www.suse.com/security/cve/CVE-2020-12657/" source="CVE"/>
		<reference ref_id="CVE-2020-12659" ref_url="https://www.suse.com/security/cve/CVE-2020-12659/" source="CVE"/>
		<reference ref_id="CVE-2020-12768" ref_url="https://www.suse.com/security/cve/CVE-2020-12768/" source="CVE"/>
		<reference ref_id="CVE-2020-12769" ref_url="https://www.suse.com/security/cve/CVE-2020-12769/" source="CVE"/>
		<reference ref_id="CVE-2020-13143" ref_url="https://www.suse.com/security/cve/CVE-2020-13143/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it.
  This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1154824).
- CVE-2020-13143: Fixed an out-of-bounds read in gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c (bsc#1171982).
- CVE-2020-12769: Fixed an issue which could have allowed attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one (bsc#1171983).
- CVE-2020-12768: Fixed a memory leak in svm_cpu_uninit in arch/x86/kvm/svm.c (bsc#1171736).
- CVE-2020-12659: Fixed an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) due to improper headroom validation (bsc#1171214).
- CVE-2020-12657: An a use-after-free in block/bfq-iosched.c (bsc#1171205).
- CVE-2020-12656: Fixed an improper handling of certain domain_release calls leadingch could have led to a memory leak (bsc#1171219).
- CVE-2020-12655: Fixed an issue which could have allowed attackers to trigger a sync of excessive duration via an XFS v5 image with crafted metadata (bsc#1171217).
- CVE-2020-12654: Fixed an issue in he wifi driver which could have allowed a remote AP to trigger a heap-based buffer overflow (bsc#1171202).
- CVE-2020-12653: Fixed an issue in the wifi driver which could have allowed local users to gain privileges or cause a denial of service (bsc#1171195).
- CVE-2020-12652: Fixed an issue which could have allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition (bsc#1171218).
- CVE-2020-12464: Fixed a use-after-free due to a transfer without a reference (bsc#1170901).
- CVE-2020-12114: Fixed a pivot_root race condition which could have allowed local users to cause a denial of service (panic) by corrupting a mountpoint reference counter (bsc#1171098).
- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172317).
- CVE-2020-10751: Fixed an improper implementation in SELinux LSM hook  where it was assumed that an skb would only contain a single netlink message (bsc#1171189).
- CVE-2020-10732: Fixed kernel data leak in userspace coredumps due to uninitialized data (bsc#1171220).
- CVE-2020-10720: Fixed a use-after-free read in napi_gro_frags() (bsc#1170778).
- CVE-2020-10711: Fixed a null pointer dereference in SELinux subsystem which could have allowed a remote network user to crash the kernel resulting in a denial of service (bsc#1171191).
- CVE-2020-10690: Fixed the race between the release of ptp_clock and cdev (bsc#1170056).
- CVE-2019-9455: Fixed a pointer leak due to a WARN_ON statement in a video driver. This could lead to local information disclosure with System execution privileges needed (bsc#1170345).
- CVE-2019-20812: Fixed an issue in prb_calc_retire_blk_tmo() which could have resulted in a denial of service (bsc#1172453).
- CVE-2019-20806: Fixed a null pointer dereference which may had lead to denial of service (bsc#1172199).
- CVE-2019-19462: Fixed an issue which could have allowed local user to cause denial of service (bsc#1158265).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1089895)

The following non-security bugs were fixed:

- ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe() (bsc#1051510).
- ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile() (bsc#1051510).
- acpi/x86: ignore unspecified bit positions in the ACPI global lock field (bsc#1051510).
- Add br_netfilter to kernel-default-base (bsc#1169020)
- Add commit for git-fix that's not a fix This commit cleans up debug code but does not fix anything, and it relies on a new kernel function that isn't yet in this version of SLE.
- agp/intel: Reinforce the barrier after GTT updates (bsc#1051510).
- ALSA: ctxfi: Remove unnecessary cast in kfree (bsc#1051510).
- ALSA: doc: Document PC Beep Hidden Register on Realtek ALC256 (bsc#1051510).
- ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
- ALSA: hda: Add driver blacklist (bsc#1051510).
- ALSA: hda: Always use jackpoll helper for jack update after resume (bsc#1051510).
- ALSA: hda: call runtime_allow() for all hda controllers (bsc#1051510).
- ALSA: hda: Do not release card at firmware loading error (bsc#1051510).
- ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported (bsc#1051510).
- ALSA: hda/hdmi: fix race in monitor detection during probe (bsc#1051510).
- ALSA: hda/hdmi: fix without unlocked before return (bsc#1051510).
- ALSA: hda: Honor PM disablement in PM freeze and thaw_noirq ops (bsc#1051510).
- ALSA: hda: Keep the controller initialization even if no codecs found (bsc#1051510).
- ALSA: hda: Match both PCI ID and SSID for driver blacklist (bsc#1111666).
- ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround (bsc#1172017).
- ALSA: hda/realtek - Add COEF workaround for ASUS ZenBook UX431DA (git-fixes).
- ALSA: hda/realtek - Add HP new mute led supported for ALC236 (git-fixes).
- ALSA: hda/realtek - Add more fixup entries for Clevo machines (git-fixes).
- ALSA: hda/realtek - Add new codec supported for ALC245 (bsc#1051510).
- ALSA: hda/realtek - Add new codec supported for ALC287 (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Notebook (git-fixes).
- ALSA: hda/realtek - Add supported new mute Led for HP (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS GL503VM with ALC295 (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS UX550GE with ALC295 (git-fixes).
- ALSA: hda/realtek: Enable headset mic of ASUS UX581LV with ALC295 (git-fixes).
- ALSA: hda/realtek - Enable the headset mic on Asus FX505DT (bsc#1051510).
- ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse (git-fixes).
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme (bsc#1111666).
- ALSA: hda/realtek - Fix unexpected init_amp override (bsc#1051510).
- ALSA: hda/realtek - Limit int mic boost for Thinkpad T530 (git-fixes bsc#1171293).
- ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter (bsc#1051510).
- ALSA: hda: Release resources at error in delayed probe (bsc#1051510).
- ALSA: hda: Remove ASUS ROG Zenith from the blacklist (bsc#1051510).
- ALSA: hda: Skip controller resume if not needed (bsc#1051510).
- ALSA: hwdep: fix a left shifting 1 by 31 UB bug (git-fixes).
- ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio option (git-fixes).
- ALSA: opti9xx: shut up gcc-10 range warning (bsc#1051510).
- ALSA: pcm: fix incorrect hw_base increase (git-fixes).
- ALSA: pcm: oss: Place the plugin buffer overflow checks correctly (bsc#1170522).
- ALSA: rawmidi: Fix racy buffer resize under concurrent accesses (git-fixes).
- ALSA: usb-audio: Add connector notifier delegation (bsc#1051510).
- ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset (git-fixes).
- ALSA: usb-audio: add mapping for ASRock TRX40 Creator (git-fixes).
- ALSA: usb-audio: Add mixer workaround for TRX40 and co (bsc#1051510).
- ALSA: usb-audio: Add quirk for Focusrite Scarlett 2i2 (bsc#1051510).
- ALSA: usb-audio: Add static mapping table for ALC1220-VB-based mobos (bsc#1051510).
- ALSA: usb-audio: Apply async workaround for Scarlett 2i4 2nd gen (bsc#1051510).
- ALSA: usb-audio: Check mapping at creating connector controls, too (bsc#1051510).
- ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID (bsc#1051510).
- ALSA: usb-audio: Do not create jack controls for PCM terminals (bsc#1051510).
- ALSA: usb-audio: Do not override ignore_ctl_error value from the map (bsc#1051510).
- ALSA: usb-audio: Filter error from connector kctl ops, too (bsc#1051510).
- ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif (bsc#1051510).
- ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC (git-fixes).
- ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio (git-fixes).
- ALSA: usx2y: Fix potential NULL dereference (bsc#1051510).
- ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry (bsc#1051510).
- ASoC: dapm: connect virtual mux with default value (bsc#1051510).
- ASoC: dapm: fixup dapm kcontrol widget (bsc#1051510).
- ASoC: dpcm: allow start or stop during pause for backend (bsc#1051510).
- ASoC: fix regwmask (bsc#1051510).
- ASoC: msm8916-wcd-digital: Reset RX interpolation path after use (bsc#1051510).
- ASoC: samsung: Prevent clk_get_rate() calls in atomic context (bsc#1111666).
- ASoC: topology: Check return value of pcm_new_ver (bsc#1051510).
- ASoC: topology: use name_prefix for new kcontrol (bsc#1051510).
- b43legacy: Fix case where channel status is corrupted (bsc#1051510).
- batman-adv: fix batadv_nc_random_weight_tq (git-fixes).
- batman-adv: Fix refcnt leak in batadv_show_throughput_override (git-fixes).
- batman-adv: Fix refcnt leak in batadv_store_throughput_override (git-fixes).
- batman-adv: Fix refcnt leak in batadv_v_ogm_process (git-fixes).
- bcache: avoid unnecessary btree nodes flushing in btree_flush_write() (git fixes (block drivers)).
- bcache: fix incorrect data type usage in btree_flush_write() (git fixes (block drivers)).
- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (git fixes (block drivers)).
- blk-mq: honor IO scheduler for multiqueue devices (bsc#1165478).
- blk-mq: simplify blk_mq_make_request() (bsc#1165478).
- block/drbd: delete invalid function drbd_md_mark_dirty_ (bsc#1171527).
- block: drbd: remove a stray unlock in __drbd_send_protocol() (bsc#1171599).
- block: fix busy device checking in blk_drop_partitions again (bsc#1171948).
- block: fix busy device checking in blk_drop_partitions (bsc#1171948).
- block: fix memleak of bio integrity data (git fixes (block drivers)).
- block: remove the bd_openers checks in blk_drop_partitions (bsc#1171948).
- bnxt_en: fix memory leaks in bnxt_dcbnl_ieee_getets() (networking-stable-20_03_28).
- bnxt_en: Reduce BNXT_MSIX_VEC_MAX value to supported CQs per PF (bsc#1104745).
- bnxt_en: reinitialize IRQs when MTU is modified (networking-stable-20_03_14).
- bnxt_en: Return error if bnxt_alloc_ctx_mem() fails (bsc#1104745 ).
- bnxt_en: Return error when allocating zero size context memory (bsc#1104745).
- bonding/alb: make sure arp header is pulled before accessing it (networking-stable-20_03_14).
- bpf: Fix sk_psock refcnt leak when receiving message (bsc#1083647).
- bpf: Forbid XADD on spilled pointers for unprivileged users (bsc#1083647).
- brcmfmac: abort and release host after error (bsc#1051510).
- BTRFS: fix deadlock with memory reclaim during scrub (bsc#1172127).
- BTRFS: fix log context list corruption after rename whiteout error (bsc#1172342).
- BTRFS: fix partial loss of prealloc extent past i_size after fsync (bsc#1172343).
- BTRFS: relocation: add error injection points for cancelling balance (bsc#1171417).
- BTRFS: relocation: Check cancel request after each data page read (bsc#1171417).
- BTRFS: relocation: Check cancel request after each extent found (bsc#1171417).
- BTRFS: relocation: Clear the DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417).
- BTRFS: relocation: Fix reloc root leakage and the NULL pointer reference caused by the leakage (bsc#1171417).
- BTRFS: relocation: Work around dead relocation stage loop (bsc#1171417).
- BTRFS: reloc: clear DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417 bsc#1160947 bsc#1172366).
- BTRFS: reloc: fix reloc root leak and NULL pointer dereference (bsc#1171417 bsc#1160947 bsc#1172366).
- BTRFS: setup a nofs context for memory allocation at btrfs_create_tree() (bsc#1172127).
- BTRFS: setup a nofs context for memory allocation at __btrfs_set_acl (bsc#1172127).
- BTRFS: use nofs context when initializing security xattrs to avoid deadlock (bsc#1172127).
- can: add missing attribute validation for termination (networking-stable-20_03_14).
- cdc-acm: close race betrween suspend() and acm_softint (git-fixes).
- cdc-acm: introduce a cool down (git-fixes).
- ceph: check if file lock exists before sending unlock request (bsc#1168789).
- ceph: demote quotarealm lookup warning to a debug message (bsc#1171692).
- ceph: fix double unlock in handle_cap_export() (bsc#1171694).
- ceph: fix endianness bug when handling MDS session feature bits (bsc#1171695).
- cgroup, netclassid: periodically release file_lock on classid updating (networking-stable-20_03_14).
- cifs: Allocate crypto structures on the fly for calculating signatures of incoming packets (bsc#1144333).
- cifs: Allocate encryption header through kmalloc (bsc#1144333).
- cifs: allow unlock flock and OFD lock across fork (bsc#1144333).
- cifs: check new file size when extending file by fallocate (bsc#1144333).
- cifs: cifspdu.h: Replace zero-length array with flexible-array member (bsc#1144333).
- cifs: clear PF_MEMALLOC before exiting demultiplex thread (bsc#1144333).
- cifs: do not share tcons with DFS (bsc#1144333).
- cifs: dump the session id and keys also for SMB2 sessions (bsc#1144333).
- cifs: ensure correct super block for DFS reconnect (bsc#1144333).
- cifs: Fix bug which the return value by asynchronous read is error (bsc#1144333).
- cifs: fix uninitialised lease_key in open_shroot() (bsc#1144333).
- cifs: improve read performance for page size 64KB &amp; cache=strict &amp; vers=2.1+ (bsc#1144333).
- cifs: Increment num_remote_opens stats counter even in case of smb2_query_dir_first (bsc#1144333).
- cifs: minor update to comments around the cifs_tcp_ses_lock mutex (bsc#1144333).
- cifs: protect updating server-&gt;dstaddr with a spinlock (bsc#1144333).
- cifs: smb2pdu.h: Replace zero-length array with flexible-array member (bsc#1144333).
- cifs: smbd: Calculate the correct maximum packet size for segmented SMBDirect send/receive (bsc#1144333).
- cifs: smbd: Check and extend sender credits in interrupt context (bsc#1144333).
- cifs: smbd: Check send queue size before posting a send (bsc#1144333).
- cifs: smbd: Do not schedule work to send immediate packet on every receive (bsc#1144333).
- cifs: smbd: Merge code to track pending packets (bsc#1144333).
- cifs: smbd: Properly process errors on ib_post_send (bsc#1144333).
- cifs: smbd: Update receive credits before sending and deal with credits roll back on failure before sending (bsc#1144333).
- cifs: Warn less noisily on default mount (bsc#1144333).
- clk: Add clk_hw_unregister_composite helper function definition (bsc#1051510).
- clk: imx6ull: use OSC clock during AXI rate change (bsc#1051510).
- clk: imx: make mux parent strings const (bsc#1051510).
- clk: mediatek: correct the clocks for MT2701 HDMI PHY module (bsc#1051510).
- clk: sunxi-ng: a64: Fix gate bit of DSI DPHY (bsc#1051510).
- clocksource/drivers/hyper-v: Set TSC clocksource as default w/ InvariantTSC (bsc#1170620, bsc#1170621).
- clocksource: dw_apb_timer_of: Fix missing clockevent timers (bsc#1051510).
- component: Silence bind error on -EPROBE_DEFER (bsc#1051510).
- coresight: do not use the BIT() macro in the UAPI header (git fixes (block drivers)).
- cpufreq: s3c64xx: Remove pointless NULL check in s3c64xx_cpufreq_driver_init (bsc#1051510).
- crypto: ccp - AES CFB mode is a stream cipher (git-fixes).
- crypto: ccp - Clean up and exit correctly on allocation failure (git-fixes).
- crypto: ccp - Cleanup misc_dev on sev_exit() (bsc#1114279).
- crypto: ccp - Cleanup sp_dev_master in psp_dev_destroy() (bsc#1114279).
- cxgb4: fix MPS index overwrite when setting MAC address (bsc#1127355).
- cxgb4: fix Txq restart check during backpressure (bsc#1127354 bsc#1127371).
- debugfs: Add debugfs_create_xul() for hexadecimal unsigned long (git-fixes).
- debugfs_lookup(): switch to lookup_one_len_unlocked() (bsc#1171979).
- devlink: fix return value after hitting end in region read (bsc#1109837).
- devlink: validate length of param values (bsc#1109837).
- devlink: validate length of region addr/len (bsc#1109837).
- dmaengine: dmatest: Fix iteration non-stop logic (bsc#1051510).
- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574).
- dm-raid1: fix invalid return value from dm_mirror (bsc#1172378).
- dm writecache: fix data corruption when reloading the target (git fixes (block drivers)).
- dm writecache: fix incorrect flush sequence when doing SSD mode commit (git fixes (block drivers)).
- dm writecache: verify watermark during resume (git fixes (block drivers)).
- dm zoned: fix invalid memory access (git fixes (block drivers)).
- dm zoned: reduce overhead of backing device checks (git fixes (block drivers)).
- dm zoned: remove duplicate nr_rnd_zones increase in dmz_init_zone() (git fixes (block drivers)).
- dm zoned: support zone sizes smaller than 128MiB (git fixes (block drivers)).
- dp83640: reverse arguments to list_add_tail (git-fixes).
- drivers: hv: Add a module description line to the hv_vmbus driver (bsc#1172249, bsc#1172251).
- drivers/net/ibmvnic: Update VNIC protocol version reporting (bsc#1065729).
- drivers: w1: add hwmon support structures (jsc#SLE-11048).
- drivers: w1: add hwmon temp support for w1_therm (jsc#SLE-11048).
- drivers: w1: refactor w1_slave_show to make the temp reading functionality separate (jsc#SLE-11048).
- drm: amd/acp: fix broken menu structure (bsc#1114279) 	* context changes
- drm/amdgpu: Correctly initialize thermal controller for GPUs with Powerplay table v0 (e.g Hawaii) (bsc#1111666).
- drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event (bsc#1111666).
- drm/amd/powerplay: force the trim of the mclk dpm_levels if OD is (bsc#1113956)
- drm/atomic: Take the atomic toys away from X (bsc#1112178) 	* context changes
- drm/crc: Actually allow to change the crc source (bsc#1114279) 	* offset changes
- drm/dp_mst: Fix clearing payload state on topology disable (bsc#1051510).
- drm/dp_mst: Reformat drm_dp_check_act_status() a bit (bsc#1051510).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (bsc#1114279)
- drm/etnaviv: fix perfmon domain interation (bsc#1113956)
- drm/etnaviv: rework perfmon query infrastructure (bsc#1112178)
- drm/i915: Apply Wa_1406680159:icl,ehl as an engine workaround (bsc#1112178) 	* rename gt/intel_workarounds.c to intel_workarounds.c 	* context changes
- drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of (bsc#1114279)
- drm/i915: HDCP: fix Ri prime check done during link check (bsc#1112178) 	* rename display/intel_hdmi.c to intel_hdmi.c 	* context changes
- drm/i915: properly sanity check batch_start_offset (bsc#1114279) 	* renamed display/intel_fbc.c -&gt; intel_fb.c 	* renamed gt/intel_rc6.c -&gt; intel_pm.c 	* context changes
- drm/meson: Delete an error message in meson_dw_hdmi_bind() (bsc#1051510).
- drm: NULL pointer dereference [null-pointer-deref] (CWE 476) problem (bsc#1114279)
- drm/qxl: qxl_release leak in qxl_draw_dirty_fb() (bsc#1051510).
- drm/qxl: qxl_release leak in qxl_hw_surface_alloc() (bsc#1051510).
- drm/qxl: qxl_release use after free (bsc#1051510).
- drm: Remove PageReserved manipulation from drm_pci_alloc (bsc#1114279) 	* offset changes
- drm/sun4i: dsi: Allow binding the host without a panel (bsc#1113956)
- drm/sun4i: dsi: Avoid hotplug race with DRM driver bind (bsc#1113956)
- drm/sun4i: dsi: Remove incorrect use of runtime PM (bsc#1113956) 	* context changes
- drm/sun4i: dsi: Remove unused drv from driver context (bsc#1113956) 	* context changes 	* keep include of sun4i_drv.h
- dump_stack: avoid the livelock of the dump_lock (git fixes (block drivers)).
- EDAC, sb_edac: Add support for systems with segmented PCI buses (bsc#1169525).
- ext4: do not zeroout extents beyond i_disksize (bsc#1167851).
- ext4: fix extent_status fragmentation for plain files (bsc#1171949).
- ext4: use non-movable memory for superblock readahead (bsc#1171952).
- fanotify: fix merging marks masks with FAN_ONDIR (bsc#1171679).
- fbcon: fix null-ptr-deref in fbcon_switch (bsc#1114279) 	* rename drivers/video/fbdev/core to drivers/video/console 	* context changes
- fib: add missing attribute validation for tun_id (networking-stable-20_03_14).
- firmware: qcom: scm: fix compilation error when disabled (bsc#1051510).
- fs/cifs: fix gcc warning in sid_to_id (bsc#1144333).
- fs/seq_file.c: simplify seq_file iteration code and interface (bsc#1170125).
- gpio: tegra: mask GPIO IRQs during IRQ shutdown (bsc#1051510).
- gre: fix uninit-value in __iptunnel_pull_header (networking-stable-20_03_14).
- HID: hid-input: clear unmapped usages (git-fixes).
- HID: Hyper-V: Add a module description line (bsc#1172249, bsc#1172251).
- HID: i2c-hid: add Trekstor Primebook C11B to descriptor override (git-fixes).
- HID: i2c-hid: override HID descriptors for certain devices (git-fixes).
- HID: multitouch: add eGalaxTouch P80H84 support (bsc#1051510).
- HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices (git-fixes).
- hrtimer: Annotate lockless access to timer-&gt;state (git fixes (block drivers)).
- hsr: add restart routine into hsr_get_node_list() (networking-stable-20_03_28).
- hsr: check protocol version in hsr_newlink() (networking-stable-20_04_17).
- hsr: fix general protection fault in hsr_addr_is_self() (networking-stable-20_03_28).
- hsr: set .netnsok flag (networking-stable-20_03_28).
- hsr: use rcu_read_lock() in hsr_get_node_{list/status}() (networking-stable-20_03_28).
- i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present (git-fixes).
- i2c: acpi: put device when verifying client fails (git-fixes).
- i2c: brcmstb: remove unused struct member (git-fixes).
- i2c: core: Allow empty id_table in ACPI case as well (git-fixes).
- i2c: core: decrease reference count of device node in i2c_unregister_device (git-fixes).
- i2c: dev: Fix the race between the release of i2c_dev and cdev (bsc#1051510).
- i2c: fix missing pm_runtime_put_sync in i2c_device_probe (git-fixes).
- i2c-hid: properly terminate i2c_hid_dmi_desc_override_table array (git-fixes).
- i2c: i801: Do not add ICH_RES_IO_SMI for the iTCO_wdt device (git-fixes).
- i2c: iproc: Stop advertising support of SMBUS quick cmd (git-fixes).
- i2c: isch: Remove unnecessary acpi.h include (git-fixes).
- i2c: mux: demux-pinctrl: Fix an error handling path in 'i2c_demux_pinctrl_probe()' (bsc#1051510).
- i2c: st: fix missing struct parameter description (bsc#1051510).
- IB/mlx5: Fix missing congestion control debugfs on rep rdma device (bsc#1103991).
- ibmvnic: Skip fatal error reset after passive init (bsc#1171078 ltc#184239).
- iio:ad7797: Use correct attribute_group (bsc#1051510).
- iio: adc: stm32-adc: fix device used to request dma (bsc#1051510).
- iio: adc: stm32-adc: fix sleep in atomic context (git-fixes).
- iio: adc: stm32-adc: Use dma_request_chan() instead dma_request_slave_channel() (bsc#1051510).
- iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()' (bsc#1051510).
- iio: sca3000: Remove an erroneous 'get_device()' (bsc#1051510).
- iio: xilinx-xadc: Fix ADC-B powerdown (bsc#1051510).
- iio: xilinx-xadc: Fix clearing interrupt when enabling trigger (bsc#1051510).
- iio: xilinx-xadc: Fix sequencer configuration for aux channels in simultaneous mode (bsc#1051510).
- ima: Fix return value of ima_write_policy() (git-fixes).
- Input: evdev - call input_flush_device() on release(), not flush() (bsc#1051510).
- Input: hyperv-keyboard - add module description (bsc#1172249, bsc#1172251).
- Input: i8042 - add Acer Aspire 5738z to nomux list (bsc#1051510).
- Input: i8042 - add ThinkPad S230u to i8042 reset list (bsc#1051510).
- Input: raydium_i2c_ts - use true and false for boolean values (bsc#1051510).
- Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() (bsc#1051510).
- Input: synaptics-rmi4 - really fix attn_data use-after-free (git-fixes).
- Input: usbtouchscreen - add support for BonXeon TP (bsc#1051510).
- Input: xpad - add custom init packet for Xbox One S controllers (bsc#1051510).
- iommu/amd: Call domain_flush_complete() in update_domain() (bsc#1172096).
- iommu/amd: Do not flush Device Table in iommu_map_page() (bsc#1172097).
- iommu/amd: Do not loop forever when trying to increase address space (bsc#1172098).
- iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system (bsc#1172099).
- iommu/amd: Fix over-read of ACPI UID from IVRS table (bsc#1172101).
- iommu/amd: Fix race in increase_address_space()/fetch_pte() (bsc#1172102).
- iommu/amd: Update Device Table in increase_address_space() (bsc#1172103).
- iommu: Fix reference count leak in iommu_group_alloc (bsc#1172397).
- ip6_tunnel: Allow rcv/xmit even if remote address is a local address (bsc#1166978).
- ipv4: fix a RCU-list lock in fib_triestat_seq_show (networking-stable-20_04_02).
- ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface (networking-stable-20_03_14).
- ipv6: do not auto-add link-local address to lag ports (networking-stable-20_04_09).
- ipv6: fix IPV6_ADDRFORM operation logic (bsc#1171662).
- ipv6: fix restrict IPV6_ADDRFORM operation (bsc#1171662).
- ipvlan: add cond_resched_rcu() while processing muticast backlog (networking-stable-20_03_14).
- ipvlan: do not deref eth hdr before checking it's set (networking-stable-20_03_14).
- ipvlan: do not use cond_resched_rcu() in ipvlan_process_multicast() (networking-stable-20_03_14).
- iwlwifi: pcie: actually release queue memory in TVQM (bsc#1051510).
- ixgbe: do not check firmware errors (bsc#1170284).
- kabi fix for early XHCI debug (git-fixes).
- kabi for for md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (git-fixes).
- kabi/severities: Do not track KVM internal symbols.
- kabi/severities: Ingnore get_dev_data() The function is internal to the AMD IOMMU driver and must not be called by any third party.
- kabi workaround for snd_rawmidi buffer_ref field addition (git-fixes).
- KEYS: reaching the keys quotas correctly (bsc#1051510).
- KVM: arm64: Change hyp_panic()s dependency on tpidr_el2 (bsc#1133021).
- KVM: arm64: Stop save/restoring host tpidr_el1 on VHE (bsc#1133021).
- KVM: Check validity of resolved slot when searching memslots (bsc#1172104).
- KVM: s390: vsie: Fix delivery of addressing exceptions (git-fixes).
- KVM: SVM: Fix potential memory leak in svm_cpu_init() (bsc#1171736).
- KVM x86: Extend AMD specific guest behavior to Hygon virtual CPUs (bsc#1152489).
- l2tp: Allow management of tunnels and session in user namespace (networking-stable-20_04_17).
- libata: Remove extra scsi_host_put() in ata_scsi_add_hosts() (bsc#1051510).
- libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set (bsc#1051510).
- lib: raid6: fix awk build warnings (git fixes (block drivers)).
- lib/raid6/test: fix build on distros whose /bin/sh is not bash (git fixes (block drivers)).
- lib/stackdepot.c: fix global out-of-bounds in stack_slabs (git fixes (block drivers)).
- locks: print unsigned ino in /proc/locks (bsc#1171951). 
- mac80211: add ieee80211_is_any_nullfunc() (bsc#1051510).
- mac80211_hwsim: Use kstrndup() in place of kasprintf() (bsc#1051510).
- mac80211: mesh: fix discovery timer re-arming issue / crash (bsc#1051510).
- macsec: avoid to set wrong mtu (bsc#1051510).
- macsec: restrict to ethernet devices (networking-stable-20_03_28).
- macvlan: add cond_resched() during multicast processing (networking-stable-20_03_14).
- macvlan: fix null dereference in macvlan_device_event() (bsc#1051510).
- md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (git-fixes).
- md/raid0: Fix an error message in raid0_make_request() (git fixes (block drivers)).
- md/raid10: prevent access of uninitialized resync_pages offset (git-fixes).
- media: dvb: return -EREMOTEIO on i2c transfer failure (bsc#1051510).
- media: platform: fcp: Set appropriate DMA parameters (bsc#1051510).
- media: ti-vpe: cal: fix disable_irqs to only the intended target (git-fixes).
- mei: release me_cl object reference (bsc#1051510).
- mlxsw: Fix some IS_ERR() vs NULL bugs (networking-stable-20_04_27).
- mlxsw: spectrum_flower: Do not stop at FLOW_ACTION_VLAN_MANGLE (networking-stable-20_04_09).
- mlxsw: spectrum_mr: Fix list iteration in error path (bsc#1112374).
- mmc: atmel-mci: Fix debugfs on 64-bit platforms (git-fixes).
- mmc: core: Check request type before completing the request (git-fixes).
- mmc: core: Fix recursive locking issue in CQE recovery path (git-fixes).
- mmc: cqhci: Avoid false 'cqhci: CQE stuck on' by not open-coding timeout loop (git-fixes).
- mmc: dw_mmc: Fix debugfs on 64-bit platforms (git-fixes).
- mmc: meson-gx: make sure the descriptor is stopped on errors (git-fixes).
- mmc: meson-gx: simplify interrupt handler (git-fixes).
- mmc: renesas_sdhi: limit block count to 16 bit for old revisions (git-fixes).
- mmc: sdhci-esdhc-imx: fix the mask for tuning start point (bsc#1051510).
- mmc: sdhci-msm: Clear tuning done flag while hs400 tuning (bsc#1051510).
- mmc: sdhci-of-at91: fix memleak on clk_get failure (git-fixes).
- mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers (bsc#1051510).
- mmc: sdhci-xenon: fix annoying 1.8V regulator warning (bsc#1051510).
- mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card() (bsc#1051510).
- mmc: tmio: fix access width of Block Count Register (git-fixes).
- mm: limit boost_watermark on small zones (git fixes (mm/pgalloc)).
- mm: thp: handle page cache THP correctly in PageTransCompoundMap (git fixes (block drivers)).
- mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer (bsc#1051510).
- mtd: spi-nor: cadence-quadspi: add a delay in write sequence (git-fixes).
- mtd: spi-nor: enable 4B opcodes for mx66l51235l (git-fixes).
- mwifiex: avoid -Wstringop-overflow warning (bsc#1051510).
- mwifiex: Fix memory corruption in dump_station (bsc#1051510).
- net: bcmgenet: correct per TX/RX ring statistics (networking-stable-20_04_27).
- net: dsa: b53: Fix ARL register definitions (networking-stable-20_04_27).
- net: dsa: b53: Rework ARL bin logic (networking-stable-20_04_27).
- net: dsa: bcm_sf2: Do not register slave MDIO bus with OF (networking-stable-20_04_09).
- net: dsa: bcm_sf2: Ensure correct sub-node is parsed (networking-stable-20_04_09).
- net: dsa: Fix duplicate frames flooded by learning (networking-stable-20_03_28).
- net: dsa: mv88e6xxx: fix lockup on warm boot (networking-stable-20_03_14).
- net/ethernet: add Google GVE driver (jsc#SLE-10538)
- net: fec: add phy_reset_after_clk_enable() support (git-fixes).
- net: fec: validate the new settings in fec_enet_set_coalesce() (networking-stable-20_03_14).
- net: fix race condition in __inet_lookup_established() (bsc#1151794).
- net: fq: add missing attribute validation for orphan mask (networking-stable-20_03_14).
- net: hns3: fix 'tc qdisc del' failed issue (bsc#1109837).
- net, ip_tunnel: fix interface lookup with no key (networking-stable-20_04_02).
- net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin (networking-stable-20_04_17).
- net: ipv6: do not consider routes via gateways for anycast address check (networking-stable-20_04_17).
- netlink: Use netlink header as base to calculate bad attribute offset (networking-stable-20_03_14).
- net: macsec: update SCI upon MAC address change (networking-stable-20_03_14).
- net: memcg: fix lockdep splat in inet_csk_accept() (networking-stable-20_03_14).
- net: memcg: late association of sock to memcg (networking-stable-20_03_14).
- net/mlx4_en: avoid indirect call in TX completion (networking-stable-20_04_27).
- net/mlx5: Add new fields to Port Type and Speed register (bsc#1171118).
- net/mlx5: Expose link speed directly (bsc#1171118).
- net/mlx5: Expose port speed when possible (bsc#1171118).
- net/mlx5: Fix failing fw tracer allocation on s390 (bsc#1103990 ).
- net: mvneta: Fix the case where the last poll did not process all rx (networking-stable-20_03_28).
- net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node (networking-stable-20_04_27).
- net/packet: tpacket_rcv: do not increment ring index on drop (networking-stable-20_03_14).
- net: qmi_wwan: add support for ASKEY WWHC050 (networking-stable-20_03_28).
- net: revert default NAPI poll timeout to 2 jiffies (networking-stable-20_04_17).
- net_sched: cls_route: remove the right filter from hashtable (networking-stable-20_03_28).
- net_sched: sch_skbprio: add message validation to skbprio_change() (bsc#1109837).
- net/x25: Fix x25_neigh refcnt leak when receiving frame (networking-stable-20_04_27).
- nfc: add missing attribute validation for SE API (networking-stable-20_03_14).
- nfc: add missing attribute validation for vendor subcommand (networking-stable-20_03_14).
- nfc: st21nfca: add missed kfree_skb() in an error path (bsc#1051510).
- nfp: abm: fix a memory leak bug (bsc#1109837).
- nfsd4: fix up replay_matches_cache() (git-fixes).
- nfsd: Ensure CLONE persists data and metadata changes to the target file (git-fixes).
- nfsd: fix delay timer on 32-bit architectures (git-fixes).
- nfsd: fix jiffies/time_t mixup in LRU list (git-fixes).
- NFS: Directory page cache pages need to be locked when read (git-fixes).
- nfsd: memory corruption in nfsd4_lock() (git-fixes).
- NFS: Do not call generic_error_remove_page() while holding locks (bsc#1170457).
- NFS: Fix memory leaks and corruption in readdir (git-fixes).
- NFS: Fix O_DIRECT accounting of number of bytes read/written (git-fixes).
- NFS: Fix potential posix_acl refcnt leak in nfs3_set_acl (git-fixes).
- NFS: fix racey wait in nfs_set_open_stateid_locked (bsc#1170592).
- NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O (git-fixes).
- NFS/pnfs: Fix pnfs_generic_prepare_to_resend_writes() (git-fixes).
- NFS: Revalidate the file size on a fatal write error (git-fixes).
- NFSv4.0: nfs4_do_fsinfo() should not do implicit lease renewals (git-fixes).
- NFSv4: Do not allow a cached open with a revoked delegation (git-fixes).
- NFSv4: Fix leak of clp-&gt;cl_acceptor string (git-fixes).
- NFSv4/pnfs: Return valid stateids in nfs_layout_find_inode_by_stateid() (git-fixes).
- NFSv4: try lease recovery on NFS4ERR_EXPIRED (git-fixes).
- NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn (git-fixes).
- nl802154: add missing attribute validation for dev_type (networking-stable-20_03_14).
- nl802154: add missing attribute validation (networking-stable-20_03_14).
- nvme-fc: print proper nvme-fc devloss_tmo value (bsc#1172391).
- objtool: Fix stack offset tracking for indirect CFAs (bsc#1169514).
- objtool: Fix switch table detection in .text.unlikely (bsc#1169514).
- objtool: Make BP scratch register warning more robust (bsc#1169514).
- padata: Remove broken queue flushing (git-fixes).
- Partially revert 'kfifo: fix kfifo_alloc() and kfifo_init()' (git fixes (block drivers)).
- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (bsc#1172201, bsc#1172202).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (bsc#1172201, bsc#1172202).
- pinctrl: baytrail: Enable pin configuration setting for GPIO chip (git-fixes).
- pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler (git-fixes).
- pinctrl: sunrisepoint: Fix PAD lock register offset for SPT-H (git-fixes).
- platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA (bsc#1051510).
- pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors (git-fixes).
- powerpc: Add attributes for setjmp/longjmp (bsc#1065729).
- powerpc/pci/of: Parse unassigned resources (bsc#1065729).
- powerpc/setup_64: Set cache-line-size based on cache-block-size (bsc#1065729).
- powerpc/sstep: Fix DS operand in ld encoding to appropriate value (bsc#1065729).
- r8152: check disconnect status after long sleep (networking-stable-20_03_14).
- raid6/ppc: Fix build for clang (git fixes (block drivers)).
- random: always use batched entropy for get_random_u{32,64} (bsc#1164871).
- rcu: locking and unlocking need to always be at least barriers (git fixes (block drivers)).
- Revert 'ALSA: hda/realtek: Fix pop noise on ALC225' (git-fixes).
- Revert 'drm/panel: simple: Add support for Sharp LQ150X1LG11 panels' (bsc#1114279) 	* offset changes
- Revert 'ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()' (bsc#1172221).
- Revert 'RDMA/cma: Simplify rdma_resolve_addr() error flow' (bsc#1103992).
- rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup() (bsc#1051510).
- s390/cpum_cf: Add new extended counters for IBM z15 (bsc#1169762 LTC#185291).
- s390/ftrace: fix potential crashes when switching tracers (git-fixes).
- s390/ism: fix error return code in ism_probe() (git-fixes).
- s390/pci: do not set affinity for floating irqs (git-fixes).
- s390/pci: Fix possible deadlock in recover_store() (bsc#1165183 LTC#184103).
- s390/pci: Recover handle in clp_set_pci_fn() (bsc#1165183 LTC#184103).
- scripts/decodecode: fix trapping instruction formatting (bsc#1065729).
- scripts/dtc: Remove redundant YYLOC global declaration (bsc#1160388).
- scsi: bnx2i: fix potential use after free (bsc#1171600).
- scsi: core: Handle drivers which set sg_tablesize to zero (bsc#1171601) This commit also required: &gt; scsi: core: avoid preallocating big SGL for data
- scsi: core: save/restore command resid for error handling (bsc#1171602).
- scsi: core: scsi_trace: Use get_unaligned_be*() (bsc#1171604).
- scsi: core: try to get module before removing device (bsc#1171605).
- scsi: csiostor: Adjust indentation in csio_device_reset (bsc#1171606).
- scsi: csiostor: Do not enable IRQs too early (bsc#1171607).
- scsi: esas2r: unlock on error in esas2r_nvram_read_direct() (bsc#1171608).
- scsi: fnic: fix invalid stack access (bsc#1171609).
- scsi: fnic: fix msix interrupt allocation (bsc#1171610).
- scsi: ibmvscsi: Fix WARN_ON during event pool release (bsc#1170791 ltc#185128).
- scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func (bsc#1171611).
- scsi: iscsi: Fix a potential deadlock in the timeout handler (bsc#1171612).
- scsi: iscsi: qla4xxx: fix double free in probe (bsc#1171613).
- scsi: lpfc: Change default queue allocation for reduced memory consumption (bsc#1164780).
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences (bsc#1171614).
- scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG (bsc#1171615).
- scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event (bsc#1164780).
- scsi: lpfc: Fix MDS Diagnostic Enablement definition (bsc#1164780).
- scsi: lpfc: Fix negation of else clause in lpfc_prep_node_fc4type (bsc#1164780).
- scsi: lpfc: Fix noderef and address space warnings (bsc#1164780).
- scsi: lpfc: Maintain atomic consistency of queue_claimed flag (bsc#1164780).
- scsi: lpfc: remove duplicate unloading checks (bsc#1164780).
- scsi: lpfc: Remove re-binding of nvme rport during registration (bsc#1164780).
- scsi: lpfc: Remove redundant initialization to variable rc (bsc#1164780).
- scsi: lpfc: Remove unnecessary lockdep_assert_held calls (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.1 (bsc#1164780).
- scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state (bsc#1171616).
- scsi: qla2xxx: add ring buffer for tracing debug logs (bsc#1157169).
- scsi: qla2xxx: check UNLOADING before posting async work (bsc#1157169).
- scsi: qla2xxx: Delete all sessions before unregister local nvme port (bsc#1157169).
- scsi: qla2xxx: Do not log message when reading port speed via sysfs (bsc#1157169).
- scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV (bsc#1157169).
- scsi: qla2xxx: Fix regression warnings (bsc#1157169).
- scsi: qla2xxx: Remove non functional code (bsc#1157169).
- scsi: qla2xxx: set UNLOADING before waiting for session deletion (bsc#1157169).
- scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free (bsc#1171617).
- scsi: qla4xxx: fix double free bug (bsc#1171618).
- scsi: sd: Clear sdkp-&gt;protection_type if disk is reformatted without PI (bsc#1171619).
- scsi: sg: add sg_remove_request in sg_common_write (bsc#1171620).
- scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) (bsc#1171621).
- scsi: ufs: change msleep to usleep_range (bsc#1171622).
- scsi: ufs: Clean up ufshcd_scale_clks() and clock scaling error out path (bsc#1171623).
- scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic (bsc#1171624).
- scsi: ufs: Fix ufshcd_probe_hba() reture value in case ufshcd_scsi_add_wlus() fails (bsc#1171625).
- scsi: ufs: Recheck bkops level if bkops is disabled (bsc#1171626).
- sctp: fix possibly using a bad saddr with a given dst (networking-stable-20_04_02).
- sctp: fix refcount bug in sctp_wfree (networking-stable-20_04_02).
- selftests/powerpc: Fix build errors in powerpc ptrace selftests (boo#1124278).
- Separate one more kABI fixup from the functional change:
- seq_file: fix problem when seeking mid-record (bsc#1170125).
- serial: uartps: Move the spinlock after the read of the tx empty (git-fixes).
- sfc: detach from cb_page in efx_copy_channel() (networking-stable-20_03_14).
- signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig (bsc#1172185).
- slcan: not call free_netdev before rtnl_unlock in slcan_open (networking-stable-20_03_28).
- slip: make slhc_compress() more robust against malicious packets (networking-stable-20_03_14).
- SMB3: Additional compression structures (bsc#1144333).
- SMB3: Add new compression flags (bsc#1144333).
- SMB3: change noisy error message to FYI (bsc#1144333).
- SMB3: enable swap on SMB3 mounts (bsc#1144333).
- SMB3: Minor cleanup of protocol definitions (bsc#1144333).
- SMB3: remove overly noisy debug line in signing errors (bsc#1144333).
- SMB3: smbdirect support can be configured by default (bsc#1144333).
- SMB3: use SMB2_SIGNATURE_SIZE define (bsc#1144333).
- spi: bcm63xx-hsspi: Really keep pll clk enabled (bsc#1051510).
- spi: bcm-qspi: when tx/rx buffer is NULL set to 0 (bsc#1051510).
- spi: dw: Add SPI Rx-done wait method to DMA-based transfer (bsc#1051510).
- spi: dw: Zero DMA Tx and Rx configurations on stack (bsc#1051510).
- spi: pxa2xx: Add CS control clock quirk (bsc#1051510).
- spi: qup: call spi_qup_pm_resume_runtime before suspending (bsc#1051510).
- spi/zynqmp: remove entry that causes a cs glitch (bsc#1051510).
- staging: comedi: dt2815: fix writing hi byte of analog output (bsc#1051510).
- staging: comedi: Fix comedi_device refcnt leak in comedi_open (bsc#1051510).
- staging: iio: ad2s1210: Fix SPI reading (bsc#1051510).
- supported.conf: Add br_netfilter to base (bsc#1169020).
- supported.conf: support w1 core and thermometer support
- svcrdma: Fix double svc_rdma_send_ctxt_put() in an error path (bsc#1103992).
- svcrdma: Fix leak of transport addresses (git-fixes).
- svcrdma: Fix trace point use-after-free race (bsc#1103992 ).
- taskstats: fix data-race (bsc#1172188).
- tcp: cache line align MAX_TCP_HEADER (networking-stable-20_04_27).
- tcp: repair: fix TCP_QUEUE_SEQ implementation (networking-stable-20_03_28).
- team: add missing attribute validation for array index (networking-stable-20_03_14).
- team: add missing attribute validation for port ifindex (networking-stable-20_03_14).
- team: fix hang in team_mode_get() (networking-stable-20_04_27).
- tools lib traceevent: Remove unneeded qsort and uses memmove instead (git-fixes).
- tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send() (bsc#1065729).
- tpm/tpm_tis: Free IRQ if probing fails (bsc#1082555).
- tun: Do not put_page() for all negative return values from XDP program (bsc#1109837).
- Update config files: Build w1 bus on arm64 (jsc#SLE-11048)
- USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair K70 RGB RAPIDFIRE (git-fixes).
- USB: cdc-acm: restore capability check order (git-fixes).
- USB: core: Fix misleading driver bug report (bsc#1051510).
- USB: dwc3: do not set gadget-&gt;is_otg flag (git-fixes).
- USB: dwc3: gadget: Do link recovery for SS and SSP (git-fixes).
- USB: early: Handle AMD's spec-compliant identifiers, too (git-fixes).
- USB: f_fs: Clear OS Extended descriptor counts to zero in ffs_data_reset() (git-fixes).
- USB: gadget: audio: Fix a missing error return value in audio_bind() (git-fixes).
- USB: gadget: composite: Inform controller driver of self-powered (git-fixes).
- USB: gadget: legacy: fix error return code in cdc_bind() (git-fixes).
- USB: gadget: legacy: fix error return code in gncm_bind() (git-fixes).
- usb: gadget: legacy: fix redundant initialization warnings (bsc#1051510).
- USB: gadget: net2272: Fix a memory leak in an error handling path in 'net2272_plat_probe()' (git-fixes).
- USB: gadget: udc: atmel: Fix vbus disconnect handling (git-fixes).
- USB: gadget: udc: atmel: Make some symbols static (git-fixes).
- USB: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete (git-fixes).
- USB: host: xhci-plat: keep runtime active when removing host (git-fixes).
- USB: hub: Fix handling of connect changes during sleep (git-fixes).
- usbnet: silence an unnecessary warning (bsc#1170770).
- USB: serial: garmin_gps: add sanity checking for data length (git-fixes).
- USB: serial: option: add BroadMobi BM806U (git-fixes).
- USB: serial: option: add support for ASKEY WWHC050 (git-fixes).
- USB: serial: option: add Wistron Neweb D19Q1 (git-fixes).
- USB: serial: qcserial: Add DW5816e support (git-fixes).
- USB: sisusbvga: Change port variable from signed to unsigned (git-fixes).
- usb-storage: Add unusual_devs entry for JMicron JMS566 (git-fixes).
- USB: uas: add quirk for LaCie 2Big Quadra (git-fixes).
- USB: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list (git-fixes).
- video: fbdev: sis: Remove unnecessary parentheses and commented code (bsc#1114279)
- video: fbdev: w100fb: Fix a potential double free (bsc#1051510).
- vrf: Check skb for XFRM_TRANSFORMED flag (networking-stable-20_04_27).
- vxlan: check return value of gro_cells_init() (networking-stable-20_03_28).
- w1: Add subsystem kernel public interface (jsc#SLE-11048).
- w1: Fix slave count on 1-Wire bus (resend) (jsc#SLE-11048).
- w1: keep balance of mutex locks and refcnts (jsc#SLE-11048).
- w1: use put_device() if device_register() fail (jsc#SLE-11048).
- watchdog: reset last_hw_keepalive time at start (git-fixes).
- wcn36xx: Fix error handling path in 'wcn36xx_probe()' (bsc#1051510).
- wil6210: remove reset file from debugfs (git-fixes).
- wimax/i2400m: Fix potential urb refcnt leak (bsc#1051510).
- workqueue: do not use wq_select_unbound_cpu() for bound works (bsc#1172130).
- x86/entry/64: Fix unwind hints in kernel exit path (bsc#1058115).
- x86/entry/64: Fix unwind hints in register clearing code (bsc#1058115).
- x86/entry/64: Fix unwind hints in rewind_stack_do_exit() (bsc#1058115).
- x86/entry/64: Fix unwind hints in __switch_to_asm() (bsc#1058115).
- x86/Hyper-V: Allow guests to enable InvariantTSC (bsc#1170621, bsc#1170620).
- x86/Hyper-V: Free hv_panic_page when fail to register kmsg dump (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash data in die() when panic_on_oops is set (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash register data or kmsg before running crash kernel (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash register data when sysctl_record_panic_msg is not set (bsc#1170617, bsc#1170618).
- x86: Hyper-V: report value of misc_features (git fixes).
- x86/Hyper-V: Trigger crash enlightenment only once during system crash (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Unload vmbus channel in hv panic callback (bsc#1170617, bsc#1170618).
- x86/kprobes: Avoid kretprobe recursion bug (bsc#1114279).
- x86/resctrl: Fix invalid attempt at removing the default resource group (git-fixes).
- x86/resctrl: Preserve CDP enable over CPU hotplug (bsc#1114279).
- x86/unwind/orc: Do not skip the first frame for inactive tasks (bsc#1058115).
- x86/unwind/orc: Fix error handling in __unwind_start() (bsc#1058115).
- x86/unwind/orc: Fix error path for bad ORC entry type (bsc#1058115).
- x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks (bsc#1058115).
- x86/unwind/orc: Prevent unwinding before ORC initialization (bsc#1058115).
- x86/unwind: Prevent false warnings for non-current tasks (bsc#1058115).
- xen/pci: reserve MCFG areas earlier (bsc#1170145).
- xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish (networking-stable-20_04_27).
- xfs: clear PF_MEMALLOC before exiting xfsaild thread (git-fixes).
- xfs: Correctly invert xfs_buftarg LRU isolation logic (git-fixes).
- xfs: do not ever return a stale pointer from __xfs_dir3_free_read (git-fixes).
- xprtrdma: Fix completion wait during device removal (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-10"/>
	<updated date="2020-06-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089895">SUSE bug 1089895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124278">SUSE bug 1124278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127355">SUSE bug 1127355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151794">SUSE bug 1151794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152489">SUSE bug 1152489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154824">SUSE bug 1154824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157169">SUSE bug 1157169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158265">SUSE bug 1158265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160388">SUSE bug 1160388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160947">SUSE bug 1160947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164871">SUSE bug 1164871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165183">SUSE bug 1165183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165478">SUSE bug 1165478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165741">SUSE bug 1165741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166969">SUSE bug 1166969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166978">SUSE bug 1166978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167574">SUSE bug 1167574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167851">SUSE bug 1167851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167867">SUSE bug 1167867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168332">SUSE bug 1168332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168670">SUSE bug 1168670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168789">SUSE bug 1168789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169020">SUSE bug 1169020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169525">SUSE bug 1169525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169762">SUSE bug 1169762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170056">SUSE bug 1170056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170125">SUSE bug 1170125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170145">SUSE bug 1170145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170284">SUSE bug 1170284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170345">SUSE bug 1170345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170457">SUSE bug 1170457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170522">SUSE bug 1170522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170592">SUSE bug 1170592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170617">SUSE bug 1170617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170618">SUSE bug 1170618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170620">SUSE bug 1170620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170621">SUSE bug 1170621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170770">SUSE bug 1170770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170778">SUSE bug 1170778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170791">SUSE bug 1170791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170901">SUSE bug 1170901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171078">SUSE bug 1171078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171098">SUSE bug 1171098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171118">SUSE bug 1171118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171189">SUSE bug 1171189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171191">SUSE bug 1171191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171195">SUSE bug 1171195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171202">SUSE bug 1171202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171205">SUSE bug 1171205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171214">SUSE bug 1171214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171217">SUSE bug 1171217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171218">SUSE bug 1171218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171219">SUSE bug 1171219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171220">SUSE bug 1171220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171244">SUSE bug 1171244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171293">SUSE bug 1171293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171417">SUSE bug 1171417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171527">SUSE bug 1171527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171599">SUSE bug 1171599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171600">SUSE bug 1171600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171601">SUSE bug 1171601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171602">SUSE bug 1171602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171604">SUSE bug 1171604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171605">SUSE bug 1171605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171606">SUSE bug 1171606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171607">SUSE bug 1171607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171608">SUSE bug 1171608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171609">SUSE bug 1171609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171610">SUSE bug 1171610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171611">SUSE bug 1171611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171612">SUSE bug 1171612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171613">SUSE bug 1171613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171614">SUSE bug 1171614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171615">SUSE bug 1171615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171616">SUSE bug 1171616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171617">SUSE bug 1171617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171618">SUSE bug 1171618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171619">SUSE bug 1171619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171620">SUSE bug 1171620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171621">SUSE bug 1171621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171622">SUSE bug 1171622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171623">SUSE bug 1171623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171624">SUSE bug 1171624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171625">SUSE bug 1171625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171626">SUSE bug 1171626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171662">SUSE bug 1171662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171679">SUSE bug 1171679</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171691">SUSE bug 1171691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171692">SUSE bug 1171692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171694">SUSE bug 1171694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171695">SUSE bug 1171695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171736">SUSE bug 1171736</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171817">SUSE bug 1171817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171948">SUSE bug 1171948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171949">SUSE bug 1171949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171951">SUSE bug 1171951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171952">SUSE bug 1171952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171979">SUSE bug 1171979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171982">SUSE bug 1171982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171983">SUSE bug 1171983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172017">SUSE bug 1172017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172096">SUSE bug 1172096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172097">SUSE bug 1172097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172098">SUSE bug 1172098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172099">SUSE bug 1172099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172101">SUSE bug 1172101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172102">SUSE bug 1172102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172103">SUSE bug 1172103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172104">SUSE bug 1172104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172127">SUSE bug 1172127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172130">SUSE bug 1172130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172185">SUSE bug 1172185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172188">SUSE bug 1172188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172199">SUSE bug 1172199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172201">SUSE bug 1172201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172202">SUSE bug 1172202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172221">SUSE bug 1172221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172249">SUSE bug 1172249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172251">SUSE bug 1172251</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172317">SUSE bug 1172317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172342">SUSE bug 1172342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172343">SUSE bug 1172343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172344">SUSE bug 1172344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172366">SUSE bug 1172366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172378">SUSE bug 1172378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172391">SUSE bug 1172391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172397">SUSE bug 1172397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172453">SUSE bug 1172453</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19462/">CVE-2019-19462</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20806/">CVE-2019-20806</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20812/">CVE-2019-20812</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9455/">CVE-2019-9455</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10690/">CVE-2020-10690</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10711/">CVE-2020-10711</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10720/">CVE-2020-10720</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10732/">CVE-2020-10732</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-10751/">CVE-2020-10751</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12114/">CVE-2020-12114</cve>
	<cve impact="low" cvss3="1.8/CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12464/">CVE-2020-12464</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12652/">CVE-2020-12652</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12655/">CVE-2020-12655</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12656/">CVE-2020-12656</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12657/">CVE-2020-12657</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12659/">CVE-2020-12659</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12768/">CVE-2020-12768</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12769/">CVE-2020-12769</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13143/">CVE-2020-13143</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497060" comment="reiserfs-kmp-default-4.12.14-197.45.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138303" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160968" ref_url="https://bugzilla.suse.com/1160968" source="BUGZILLA"/>
		<reference ref_id="1169511" ref_url="https://bugzilla.suse.com/1169511" source="BUGZILLA"/>
		<reference ref_id="1171352" ref_url="https://bugzilla.suse.com/1171352" source="BUGZILLA"/>
		<reference ref_id="1172277" ref_url="https://bugzilla.suse.com/1172277" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-2949" ref_url="https://www.suse.com/security/cve/CVE-2019-2949/" source="CVE"/>
		<reference ref_id="CVE-2020-2654" ref_url="https://www.suse.com/security/cve/CVE-2020-2654/" source="CVE"/>
		<reference ref_id="CVE-2020-2754" ref_url="https://www.suse.com/security/cve/CVE-2020-2754/" source="CVE"/>
		<reference ref_id="CVE-2020-2755" ref_url="https://www.suse.com/security/cve/CVE-2020-2755/" source="CVE"/>
		<reference ref_id="CVE-2020-2756" ref_url="https://www.suse.com/security/cve/CVE-2020-2756/" source="CVE"/>
		<reference ref_id="CVE-2020-2757" ref_url="https://www.suse.com/security/cve/CVE-2020-2757/" source="CVE"/>
		<reference ref_id="CVE-2020-2781" ref_url="https://www.suse.com/security/cve/CVE-2020-2781/" source="CVE"/>
		<reference ref_id="CVE-2020-2800" ref_url="https://www.suse.com/security/cve/CVE-2020-2800/" source="CVE"/>
		<reference ref_id="CVE-2020-2803" ref_url="https://www.suse.com/security/cve/CVE-2020-2803/" source="CVE"/>
		<reference ref_id="CVE-2020-2805" ref_url="https://www.suse.com/security/cve/CVE-2020-2805/" source="CVE"/>
		<reference ref_id="CVE-2020-2830" ref_url="https://www.suse.com/security/cve/CVE-2020-2830/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006981.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

java-1_8_0-ibm was updated to Java 8.0 Service Refresh 6 Fix Pack 10 (bsc#1172277,bsc#1169511,bsc#1160968)

- CVE-2020-2654: Fixed an issue which could have resulted in unauthorized ability to cause a partial denial of service    
- CVE-2020-2754: Forwarded references to Nashorn 
- CVE-2020-2755: Improved Nashorn matching 
- CVE-2020-2756: Improved mapping of serial ENUMs 
- CVE-2020-2757: Less Blocking Array Queues 
- CVE-2020-2781: Improved TLS session handling 
- CVE-2020-2800: Improved Headings for HTTP Servers 
- CVE-2020-2803: Enhanced buffering of byte buffers 
- CVE-2020-2805: Enhanced typing of methods 
- CVE-2020-2830: Improved Scanner conversions 
- CVE-2019-2949: Fixed an issue which could have resulted in unauthorized access to critical data 
- Added RSA PSS SUPPORT TO IBMPKCS11IMPL
- The pack200 and unpack200 alternatives should be slaves of java (bsc#1171352).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-19"/>
	<updated date="2020-06-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160968">SUSE bug 1160968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171352">SUSE bug 1171352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172277">SUSE bug 1172277</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-2949/">CVE-2019-2949</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2654/">CVE-2020-2654</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2754/">CVE-2020-2754</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2755/">CVE-2020-2755</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2756/">CVE-2020-2756</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2757/">CVE-2020-2757</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2781/">CVE-2020-2781</cve>
	<cve impact="important" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2800/">CVE-2020-2800</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2803/">CVE-2020-2803</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2805/">CVE-2020-2805</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2830/">CVE-2020-2830</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497061" comment="java-1_8_0-ibm-1.8.0_sr6.10-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497062" comment="java-1_8_0-ibm-alsa-1.8.0_sr6.10-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497063" comment="java-1_8_0-ibm-devel-1.8.0_sr6.10-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497064" comment="java-1_8_0-ibm-plugin-1.8.0_sr6.10-3.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138304" version="1" class="patch">
	<metadata>
		<title>Security update for ntp (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1125401" ref_url="https://bugzilla.suse.com/1125401" source="BUGZILLA"/>
		<reference ref_id="1169740" ref_url="https://bugzilla.suse.com/1169740" source="BUGZILLA"/>
		<reference ref_id="1171355" ref_url="https://bugzilla.suse.com/1171355" source="BUGZILLA"/>
		<reference ref_id="1172651" ref_url="https://bugzilla.suse.com/1172651" source="BUGZILLA"/>
		<reference ref_id="1173334" ref_url="https://bugzilla.suse.com/1173334" source="BUGZILLA"/>
		<reference ref_id="992038" ref_url="https://bugzilla.suse.com/992038" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-8956" ref_url="https://www.suse.com/security/cve/CVE-2018-8956/" source="CVE"/>
		<reference ref_id="CVE-2020-11868" ref_url="https://www.suse.com/security/cve/CVE-2020-11868/" source="CVE"/>
		<reference ref_id="CVE-2020-13817" ref_url="https://www.suse.com/security/cve/CVE-2020-13817/" source="CVE"/>
		<reference ref_id="CVE-2020-15025" ref_url="https://www.suse.com/security/cve/CVE-2020-15025/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1823-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007066.html" source="SUSE-SU"/>
		<description>
This update for ntp fixes the following issues:

ntp was updated to 4.2.8p15

- CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address 
  frequently send to the client ntpd could have caused denial of service (bsc#1169740).
- CVE-2018-8956: Fixed an issue which could have allowed remote attackers to prevent 
  a broadcast client from synchronizing its clock with a broadcast NTP server via spoofed 
  mode 3 and mode 5 packets (bsc#1171355).
- CVE-2020-13817: Fixed an issue which an off-path attacker with the ability to query time 
  from victim's ntpd instance could have modified the victim's clock by a limited amount (bsc#1172651).
- CVE-2020-15025: Fixed an issue which remote attacker could have caused denial of service by consuming 
  the memory when a CMAC key was used andassociated with a CMAC algorithm in the ntp.keys (bsc#1173334).
- Removed an OpenSSL version warning (bsc#992038 and bsc#1125401).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-02"/>
	<updated date="2020-07-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1125401">SUSE bug 1125401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169740">SUSE bug 1169740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171355">SUSE bug 1171355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172651">SUSE bug 1172651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173334">SUSE bug 1173334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/992038">SUSE bug 992038</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8956/">CVE-2018-8956</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11868/">CVE-2020-11868</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13817/">CVE-2020-13817</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-15025/">CVE-2020-15025</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497065" comment="ntp-4.2.8p15-4.10.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138305" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172698" ref_url="https://bugzilla.suse.com/1172698" source="BUGZILLA"/>
		<reference ref_id="1172704" ref_url="https://bugzilla.suse.com/1172704" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8023" ref_url="https://www.suse.com/security/cve/CVE-2020-8023/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1856-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007078.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAP_CONFIG_BACKEND='ldap' was used (bsc#1172698).	  
- Changed DB_CONFIG to root:ldap permissions (bsc#1172704).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-06"/>
	<updated date="2020-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172698">SUSE bug 1172698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172704">SUSE bug 1172704</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8023/">CVE-2020-8023</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493170" comment="openldap2-2.4.46-9.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497066" comment="openldap2-back-meta-2.4.46-9.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497067" comment="openldap2-back-perl-2.4.46-9.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138306" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1150660" ref_url="https://bugzilla.suse.com/1150660" source="BUGZILLA"/>
		<reference ref_id="1151927" ref_url="https://bugzilla.suse.com/1151927" source="BUGZILLA"/>
		<reference ref_id="1152107" ref_url="https://bugzilla.suse.com/1152107" source="BUGZILLA"/>
		<reference ref_id="1152624" ref_url="https://bugzilla.suse.com/1152624" source="BUGZILLA"/>
		<reference ref_id="1158983" ref_url="https://bugzilla.suse.com/1158983" source="BUGZILLA"/>
		<reference ref_id="1159058" ref_url="https://bugzilla.suse.com/1159058" source="BUGZILLA"/>
		<reference ref_id="1161016" ref_url="https://bugzilla.suse.com/1161016" source="BUGZILLA"/>
		<reference ref_id="1162002" ref_url="https://bugzilla.suse.com/1162002" source="BUGZILLA"/>
		<reference ref_id="1162063" ref_url="https://bugzilla.suse.com/1162063" source="BUGZILLA"/>
		<reference ref_id="1163309" ref_url="https://bugzilla.suse.com/1163309" source="BUGZILLA"/>
		<reference ref_id="1166985" ref_url="https://bugzilla.suse.com/1166985" source="BUGZILLA"/>
		<reference ref_id="1167104" ref_url="https://bugzilla.suse.com/1167104" source="BUGZILLA"/>
		<reference ref_id="1168081" ref_url="https://bugzilla.suse.com/1168081" source="BUGZILLA"/>
		<reference ref_id="1168959" ref_url="https://bugzilla.suse.com/1168959" source="BUGZILLA"/>
		<reference ref_id="1169194" ref_url="https://bugzilla.suse.com/1169194" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169771" ref_url="https://bugzilla.suse.com/1169771" source="BUGZILLA"/>
		<reference ref_id="1169795" ref_url="https://bugzilla.suse.com/1169795" source="BUGZILLA"/>
		<reference ref_id="1170011" ref_url="https://bugzilla.suse.com/1170011" source="BUGZILLA"/>
		<reference ref_id="1170442" ref_url="https://bugzilla.suse.com/1170442" source="BUGZILLA"/>
		<reference ref_id="1170592" ref_url="https://bugzilla.suse.com/1170592" source="BUGZILLA"/>
		<reference ref_id="1170617" ref_url="https://bugzilla.suse.com/1170617" source="BUGZILLA"/>
		<reference ref_id="1170618" ref_url="https://bugzilla.suse.com/1170618" source="BUGZILLA"/>
		<reference ref_id="1171124" ref_url="https://bugzilla.suse.com/1171124" source="BUGZILLA"/>
		<reference ref_id="1171424" ref_url="https://bugzilla.suse.com/1171424" source="BUGZILLA"/>
		<reference ref_id="1171529" ref_url="https://bugzilla.suse.com/1171529" source="BUGZILLA"/>
		<reference ref_id="1171530" ref_url="https://bugzilla.suse.com/1171530" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1171732" ref_url="https://bugzilla.suse.com/1171732" source="BUGZILLA"/>
		<reference ref_id="1171739" ref_url="https://bugzilla.suse.com/1171739" source="BUGZILLA"/>
		<reference ref_id="1171743" ref_url="https://bugzilla.suse.com/1171743" source="BUGZILLA"/>
		<reference ref_id="1171753" ref_url="https://bugzilla.suse.com/1171753" source="BUGZILLA"/>
		<reference ref_id="1171759" ref_url="https://bugzilla.suse.com/1171759" source="BUGZILLA"/>
		<reference ref_id="1171835" ref_url="https://bugzilla.suse.com/1171835" source="BUGZILLA"/>
		<reference ref_id="1171841" ref_url="https://bugzilla.suse.com/1171841" source="BUGZILLA"/>
		<reference ref_id="1171868" ref_url="https://bugzilla.suse.com/1171868" source="BUGZILLA"/>
		<reference ref_id="1171904" ref_url="https://bugzilla.suse.com/1171904" source="BUGZILLA"/>
		<reference ref_id="1172247" ref_url="https://bugzilla.suse.com/1172247" source="BUGZILLA"/>
		<reference ref_id="1172257" ref_url="https://bugzilla.suse.com/1172257" source="BUGZILLA"/>
		<reference ref_id="1172344" ref_url="https://bugzilla.suse.com/1172344" source="BUGZILLA"/>
		<reference ref_id="1172458" ref_url="https://bugzilla.suse.com/1172458" source="BUGZILLA"/>
		<reference ref_id="1172484" ref_url="https://bugzilla.suse.com/1172484" source="BUGZILLA"/>
		<reference ref_id="1172537" ref_url="https://bugzilla.suse.com/1172537" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1172687" ref_url="https://bugzilla.suse.com/1172687" source="BUGZILLA"/>
		<reference ref_id="1172719" ref_url="https://bugzilla.suse.com/1172719" source="BUGZILLA"/>
		<reference ref_id="1172759" ref_url="https://bugzilla.suse.com/1172759" source="BUGZILLA"/>
		<reference ref_id="1172775" ref_url="https://bugzilla.suse.com/1172775" source="BUGZILLA"/>
		<reference ref_id="1172781" ref_url="https://bugzilla.suse.com/1172781" source="BUGZILLA"/>
		<reference ref_id="1172782" ref_url="https://bugzilla.suse.com/1172782" source="BUGZILLA"/>
		<reference ref_id="1172783" ref_url="https://bugzilla.suse.com/1172783" source="BUGZILLA"/>
		<reference ref_id="1172871" ref_url="https://bugzilla.suse.com/1172871" source="BUGZILLA"/>
		<reference ref_id="1172872" ref_url="https://bugzilla.suse.com/1172872" source="BUGZILLA"/>
		<reference ref_id="1172999" ref_url="https://bugzilla.suse.com/1172999" source="BUGZILLA"/>
		<reference ref_id="1173060" ref_url="https://bugzilla.suse.com/1173060" source="BUGZILLA"/>
		<reference ref_id="1173074" ref_url="https://bugzilla.suse.com/1173074" source="BUGZILLA"/>
		<reference ref_id="1173146" ref_url="https://bugzilla.suse.com/1173146" source="BUGZILLA"/>
		<reference ref_id="1173265" ref_url="https://bugzilla.suse.com/1173265" source="BUGZILLA"/>
		<reference ref_id="1173280" ref_url="https://bugzilla.suse.com/1173280" source="BUGZILLA"/>
		<reference ref_id="1173284" ref_url="https://bugzilla.suse.com/1173284" source="BUGZILLA"/>
		<reference ref_id="1173428" ref_url="https://bugzilla.suse.com/1173428" source="BUGZILLA"/>
		<reference ref_id="1173514" ref_url="https://bugzilla.suse.com/1173514" source="BUGZILLA"/>
		<reference ref_id="1173567" ref_url="https://bugzilla.suse.com/1173567" source="BUGZILLA"/>
		<reference ref_id="1173573" ref_url="https://bugzilla.suse.com/1173573" source="BUGZILLA"/>
		<reference ref_id="1173659" ref_url="https://bugzilla.suse.com/1173659" source="BUGZILLA"/>
		<reference ref_id="1173746" ref_url="https://bugzilla.suse.com/1173746" source="BUGZILLA"/>
		<reference ref_id="1173818" ref_url="https://bugzilla.suse.com/1173818" source="BUGZILLA"/>
		<reference ref_id="1173820" ref_url="https://bugzilla.suse.com/1173820" source="BUGZILLA"/>
		<reference ref_id="1173825" ref_url="https://bugzilla.suse.com/1173825" source="BUGZILLA"/>
		<reference ref_id="1173826" ref_url="https://bugzilla.suse.com/1173826" source="BUGZILLA"/>
		<reference ref_id="1173833" ref_url="https://bugzilla.suse.com/1173833" source="BUGZILLA"/>
		<reference ref_id="1173838" ref_url="https://bugzilla.suse.com/1173838" source="BUGZILLA"/>
		<reference ref_id="1173839" ref_url="https://bugzilla.suse.com/1173839" source="BUGZILLA"/>
		<reference ref_id="1173845" ref_url="https://bugzilla.suse.com/1173845" source="BUGZILLA"/>
		<reference ref_id="1173857" ref_url="https://bugzilla.suse.com/1173857" source="BUGZILLA"/>
		<reference ref_id="1174113" ref_url="https://bugzilla.suse.com/1174113" source="BUGZILLA"/>
		<reference ref_id="1174115" ref_url="https://bugzilla.suse.com/1174115" source="BUGZILLA"/>
		<reference ref_id="1174122" ref_url="https://bugzilla.suse.com/1174122" source="BUGZILLA"/>
		<reference ref_id="1174123" ref_url="https://bugzilla.suse.com/1174123" source="BUGZILLA"/>
		<reference ref_id="1174186" ref_url="https://bugzilla.suse.com/1174186" source="BUGZILLA"/>
		<reference ref_id="1174187" ref_url="https://bugzilla.suse.com/1174187" source="BUGZILLA"/>
		<reference ref_id="1174296" ref_url="https://bugzilla.suse.com/1174296" source="BUGZILLA"/>
		<reference ref_id="1174343" ref_url="https://bugzilla.suse.com/1174343" source="BUGZILLA"/>
		<reference ref_id="1174356" ref_url="https://bugzilla.suse.com/1174356" source="BUGZILLA"/>
		<reference ref_id="1174409" ref_url="https://bugzilla.suse.com/1174409" source="BUGZILLA"/>
		<reference ref_id="1174438" ref_url="https://bugzilla.suse.com/1174438" source="BUGZILLA"/>
		<reference ref_id="1174462" ref_url="https://bugzilla.suse.com/1174462" source="BUGZILLA"/>
		<reference ref_id="1174543" ref_url="https://bugzilla.suse.com/1174543" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16746" ref_url="https://www.suse.com/security/cve/CVE-2019-16746/" source="CVE"/>
		<reference ref_id="CVE-2019-20810" ref_url="https://www.suse.com/security/cve/CVE-2019-20810/" source="CVE"/>
		<reference ref_id="CVE-2019-20908" ref_url="https://www.suse.com/security/cve/CVE-2019-20908/" source="CVE"/>
		<reference ref_id="CVE-2020-0305" ref_url="https://www.suse.com/security/cve/CVE-2020-0305/" source="CVE"/>
		<reference ref_id="CVE-2020-10766" ref_url="https://www.suse.com/security/cve/CVE-2020-10766/" source="CVE"/>
		<reference ref_id="CVE-2020-10767" ref_url="https://www.suse.com/security/cve/CVE-2020-10767/" source="CVE"/>
		<reference ref_id="CVE-2020-10768" ref_url="https://www.suse.com/security/cve/CVE-2020-10768/" source="CVE"/>
		<reference ref_id="CVE-2020-10769" ref_url="https://www.suse.com/security/cve/CVE-2020-10769/" source="CVE"/>
		<reference ref_id="CVE-2020-10773" ref_url="https://www.suse.com/security/cve/CVE-2020-10773/" source="CVE"/>
		<reference ref_id="CVE-2020-10781" ref_url="https://www.suse.com/security/cve/CVE-2020-10781/" source="CVE"/>
		<reference ref_id="CVE-2020-12771" ref_url="https://www.suse.com/security/cve/CVE-2020-12771/" source="CVE"/>
		<reference ref_id="CVE-2020-12888" ref_url="https://www.suse.com/security/cve/CVE-2020-12888/" source="CVE"/>
		<reference ref_id="CVE-2020-13974" ref_url="https://www.suse.com/security/cve/CVE-2020-13974/" source="CVE"/>
		<reference ref_id="CVE-2020-14416" ref_url="https://www.suse.com/security/cve/CVE-2020-14416/" source="CVE"/>
		<reference ref_id="CVE-2020-15393" ref_url="https://www.suse.com/security/cve/CVE-2020-15393/" source="CVE"/>
		<reference ref_id="CVE-2020-15780" ref_url="https://www.suse.com/security/cve/CVE-2020-15780/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:


- CVE-2020-15780: A lockdown bypass for loading unsigned modules using ACPI table injection was fixed. (bsc#1173573)
- CVE-2020-15393: Fixed a memory leak in usbtest_disconnect (bnc#1173514).
- CVE-2020-12771: An issue was discovered in btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails (bnc#1171732).
- CVE-2020-12888: The VFIO PCI driver mishandled attempts to access disabled memory space (bnc#1171868).
- CVE-2020-10773: Fixed a memory leak on s390/s390x, in the cmm_timeout_hander in file arch/s390/mm/cmm.c (bnc#1172999).
- CVE-2020-14416: Fixed a race condition in tty-&gt;disc_data handling in the slip and slcan line discipline could lead to a use-after-free. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002).
- CVE-2020-10768: Fixed an issue with the prctl() function, where indirect branch speculation could be enabled even though it was diabled before (bnc#1172783).
- CVE-2020-10766: Fixed an issue which allowed an attacker with a local account to disable SSBD protection (bnc#1172781).
- CVE-2020-10767: Fixed an issue where Indirect Branch Prediction Barrier was disabled in certain circumstances, leaving the system open to a spectre v2 style attack (bnc#1172782).
- CVE-2020-13974: Fixed a integer overflow in drivers/tty/vt/keyboard.c, if k_ascii is called several times in a row (bnc#1172775).
- CVE-2020-0305: Fixed a possible use-after-free due to a race condition incdev_get of char_dev.c. This could lead to local escalation of privilege. User interaction is not needed for exploitation (bnc#1174462).
- CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265).
- CVE-2020-10781: Fixed a denial of service issue in the ZRAM implementation (bnc#1173074).
- CVE-2019-20908: Fixed incorrect access permissions for the efivar_ssdt ACPI variable, which could be used by attackers to bypass lockdown or secure boot restrictions (bnc#1173567).
- CVE-2019-20810: Fixed a memory leak in go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c because it did not call snd_card_free for a failure path (bnc#1172458).
- CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c, related to invalid length checks for variable elements in a beacon head (bnc#1152107).

The following non-security bugs were fixed:

- ACPI: GED: add support for _Exx / _Lxx handler methods (bsc#1111666).
- ACPI: GED: use correct trigger type field in _Exx / _Lxx handling (bsc#1111666).
- ACPI: NFIT: Fix unlock on error in scrub_show() (bsc#1171753).
- ACPI: PM: Avoid using power resources if there are none for D0 (bsc#1051510).
- ACPI: sysfs: Fix pm_profile_attr type (bsc#1111666).
- ACPI: video: Use native backlight on Acer Aspire 5783z (bsc#1111666).
- ACPI: video: Use native backlight on Acer TravelMate 5735Z (bsc#1111666).
- ALSA: es1688: Add the missed snd_card_free() (bsc#1051510).
- ALSA: hda: Add ElkhartLake HDMI codec vid (bsc#1111666).
- ALSA: hda: add sienna_cichlid audio asic id for sienna_cichlid up (bsc#1111666).
- ALSA: hda/hdmi - enable runtime pm for newer AMD display audio (bsc#1111666).
- ALSA: hda - let hs_mic be picked ahead of hp_mic (bsc#1111666).
- ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines (bsc#1111666).
- ALSA: hda/realtek - Add LED class support for micmute LED (bsc#1111666).
- ALSA: hda/realtek - Enable micmute LED on and HP system (bsc#1111666).
- ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 (bsc#1111666).
- ALSA: hda/realtek - Fix unused variable warning w/o CONFIG_LEDS_TRIGGER_AUDIO (bsc#1111666).
- ALSA: hda/realtek - Introduce polarity for micmute LED GPIO (bsc#1111666).
- ALSA: lx6464es - add support for LX6464ESe pci express variant (bsc#1111666).
- ALSA: opl3: fix infoleak in opl3 (bsc#1111666).
- ALSA: pcm: disallow linking stream to itself (bsc#1111666).
- ALSA: usb-audio: Add duplex sound support for USB devices using implicit feedback (bsc#1111666).
- ALSA: usb-audio: Add Pioneer DJ DJM-900NXS2 support (bsc#1111666).
- ALSA: usb-audio: add quirk for MacroSilicon MS2109 (bsc#1111666).
- ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock (bsc#1111666).
- ALSA: usb-audio: Clean up quirk entries with macros (bsc#1111666).
- ALSA: usb-audio: Fix inconsistent card PM state after resume (bsc#1111666).
- ALSA: usb-audio: Fix packet size calculation (bsc#1111666).
- ALSA: usb-audio: Fix racy list management in output queue (bsc#1111666).
- ALSA: usb-audio: Improve frames size computation (bsc#1111666).
- ALSA: usb-audio: Manage auto-pm of all bundled interfaces (bsc#1111666).
- ALSA: usb-audio: Use the new macro for HP Dock rename quirks (bsc#1111666).
- amdgpu: a NULL -&gt;mm does not mean a thread is a kthread (git-fixes).
- arm64: map FDT as RW for early_init_dt_scan() (jsc#SLE-12423).
- ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (bsc#1111666).
- ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx (bsc#1111666).
- ath9k: Fix use-after-free Write in ath9k_htc_rx_msg (bsc#1111666).
- ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb (bsc#1111666).
- ax25: fix setsockopt(SO_BINDTODEVICE) (networking-stable-20_05_27).
- b43: Fix connection problem with WPA3 (bsc#1111666).
- b43_legacy: Fix connection problem with WPA3 (bsc#1111666).
- bcache: Fix an error code in bch_dump_read() (git fixes (block drivers)).
- be2net: fix link failure after ethtool offline test (git-fixes).
- block: nr_sects_write(): Disable preemption on seqcount write (bsc#1173818).
- block: remove QUEUE_FLAG_STACKABLE (git fixes (block drivers)).
- block: sed-opal: fix sparse warning: convert __be64 data (git fixes (block drivers)).
- Bluetooth: Add SCO fallback for invalid LMP parameters error (bsc#1111666).
- bnxt_en: Fix AER reset logic on 57500 chips (git-fixes).
- bnxt_en: Fix ethtool selftest crash under error conditions (git-fixes).
- bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails (git-fixes).
- bnxt_en: Fix ipv6 RFS filter matching logic (git-fixes).
- bnxt_en: fix NULL dereference in case SR-IOV configuration fails (git-fixes).
- bnxt_en: Fix VF anti-spoof filter setup (networking-stable-20_05_12).
- bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features() (networking-stable-20_05_12).
- bnxt_en: Improve AER slot reset (networking-stable-20_05_12).
- brcmfmac: fix wrong location to get firmware feature (bsc#1111666).
- brcmfmac: Transform compatible string for FW loading (bsc#1169771).
- btrfs: add assertions for tree == inode-&gt;io_tree to extent IO helpers (bsc#1174438).
- btrfs: add new helper btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: Always use a cached extent_state in btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: do not zero f_bavail if we have available space (bsc#1168081).
- btrfs: do not zero f_bavail if we have available space (bsc#1168081).
- btrfs: drop argument tree from btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: fix extent_state leak in btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof (bsc#1174438).
- btrfs: fix hang on snapshot creation after RWF_NOWAIT write (bsc#1174438).
- btrfs: fix RWF_NOWAIT write not failling when we need to cow (bsc#1174438).
- btrfs: fix RWF_NOWAIT writes blocking on extent locks and waiting for IO (bsc#1174438).
- btrfs: qgroup: Fix a bug that prevents qgroup to be re-enabled after disable (bsc#1172247).
- btrfs: Return EAGAIN if we can't start no snpashot write in check_can_nocow (bsc#1174438).
- btrfs: use correct count in btrfs_file_write_iter() (bsc#1174438).
- btrfs: Use newly introduced btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: volumes: Remove ENOSPC-prone btrfs_can_relocate() (bsc#1171124).
- bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads (bsc#1111666).
- carl9170: remove P2P_GO support (bsc#1111666).
- CDC-ACM: heed quirk also in error handling (git-fixes).
- ceph: convert mdsc-&gt;cap_dirty to a per-session list (bsc#1167104).
- ceph: request expedited service on session's last cap flush (bsc#1167104).
- cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages (bsc#1173857).
- char/random: Add a newline at the end of the file (jsc#SLE-12423).
- cifs: get rid of unused parameter in reconn_setup_dfs_targets() (bsc#1144333).
- cifs: handle hostnames that resolve to same ip in failover (bsc#1144333 bsc#1161016).
- cifs: set up next DFS target before generic_ip_connect() (bsc#1144333 bsc#1161016).
- clk: bcm2835: Fix return type of bcm2835_register_gate (bsc#1051510).
- clk: clk-flexgen: fix clock-critical handling (bsc#1051510).
- clk: sunxi: Fix incorrect usage of round_down() (bsc#1051510).
- clocksource: dw_apb_timer: Make CPU-affiliation being optional (bsc#1111666).
- compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE (git fixes (block drivers)).
- compat_ioctl: block: handle Persistent Reservations (git fixes (block drivers)).
- copy_{to,from}_user(): consolidate object size checks (git fixes).
- crypto: algboss - do not wait during notifier callback (bsc#1111666).
- crypto: algif_skcipher - Cap recv SG list at ctx-&gt;used (bsc#1111666).
- crypto: caam - update xts sector size for large input length (bsc#1111666).
- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (bsc#1111666).
- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (git-fixes).
- Crypto/chcr: fix for ccm(aes) failed test (bsc#1111666).
- crypto: chelsio/chtls: properly set tp-&gt;lsndtime (bsc#1111666).
- crypto: talitos - fix IPsec cipher in length (git-fixes).
- crypto: talitos - reorder code in talitos_edesc_alloc() (git-fixes).
- debugfs: Check module state before warning in {full/open}_proxy_open() (bsc#1173746).
- devinet: fix memleak in inetdev_init() (networking-stable-20_06_07).
- dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()' (bsc#1111666).
- dm btree: increase rebalance threshold in __rebalance2() (git fixes (block drivers)).
- dm cache: fix a crash due to incorrect work item cancelling (git fixes (block drivers)).
- dm crypt: fix benbi IV constructor crash if used in authenticated mode (git fixes (block drivers)).
- dm: fix potential for q-&gt;make_request_fn NULL pointer (git fixes (block drivers)).
- dm space map common: fix to ensure new block isn't already in use (git fixes (block drivers)).
- dm: various cleanups to md-&gt;queue initialization code (git fixes).
- dm verity fec: fix hash block number in verity_fec_decode (git fixes (block drivers)).
- dm verity fec: fix memory leak in verity_fec_dtr (git fixes (block drivers)).
- dpaa_eth: fix usage as DSA master, try 3 (networking-stable-20_05_27).
- driver-core, libnvdimm: Let device subsystems add local lockdep coverage (bsc#1171753).
- Drivers: hv: Change flag to write log level in panic msg to false (bsc#1170617, bsc#1170618).
- drivers: soc: ti: knav_qmss_queue: Make knav_gp_range_ops static (bsc#1051510).
- drm: amd/display: fix Kconfig help text (bsc#1113956) 	* only fix DEBUG_KERNEL_DC
- drm: bridge: adv7511: Extend list of audio sample rates (bsc#1111666).
- drm/dp_mst: Increase ACT retry timeout to 3s (bsc#1113956)  * context changes
- drm: encoder_slave: fix refcouting error for modules (bsc#1111666).
- drm: encoder_slave: fix refcouting error for modules (bsc#1114279)
- drm/i915/icl+: Fix hotplug interrupt disabling after storm detection (bsc#1112178)
- drm/i915: Whitelist context-local timestamp in the gen9 cmdparser (bsc#1111666).
- drm/mediatek: Check plane visibility in atomic_update (bsc#1113956)  * context changes
- drm/msm/dpu: fix error return code in dpu_encoder_init (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for Asus T101HA panel (bsc#1111666).
- drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003 (bsc#1111666).
- drm/qxl: Use correct notify port address when creating cursor ring (bsc#1113956)
- drm/radeon: fix double free (bsc#1113956)
- drm/radeon: fix fb_div check in ni_init_smc_spll_table() (bsc#1113956)
- drm/sun4i: hdmi ddc clk: Fix size of m divider (bsc#1111666).
- drm/tegra: hub: Do not enable orphaned window group (bsc#1111666).
- drm/vkms: Hold gem object while still in-use (bsc#1113956)  * context changes
- e1000: Distribute switch variables for initialization (bsc#1111666).
- e1000e: Disable TSO for buffer overrun workaround (bsc#1051510).
- e1000e: Do not wake up the system via WOL if device wakeup is disabled (bsc#1051510).
- e1000e: Relax condition to trigger reset for ME workaround (bsc#1111666).
- EDAC/amd64: Read back the scrub rate PCI register on F15h (bsc#1114279).
- efi/random: Increase size of firmware supplied randomness (jsc#SLE-12423).
- efi/random: Treat EFI_RNG_PROTOCOL output as bootloader randomness (jsc#SLE-12423).
- efi: READ_ONCE rng seed size before munmap (jsc#SLE-12423).
- efi: Reorder pr_notice() with add_device_randomness() call (jsc#SLE-12423).
- evm: Check also if *tfm is an error pointer in init_desc() (bsc#1051510).
- evm: Fix a small race in init_desc() (bsc#1051510).
- ext4: fix a data race at inode-&gt;i_blocks (bsc#1171835).
- ext4: fix partial cluster initialization when splitting extent (bsc#1173839).
- ext4: fix race between ext4_sync_parent() and rename() (bsc#1173838).
- ext4, jbd2: ensure panic by fix a race between jbd2 abort and ext4 error handlers (bsc#1173833).
- extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()' (bsc#1051510).
- fanotify: fix ignore mask logic for events on child and on dir (bsc#1172719).
- fdt: add support for rng-seed (jsc#SLE-12423).
- fdt: Update CRC check for rng-seed (jsc#SLE-12423).
- firmware: imx: scu: Fix corruption of header (git-fixes).
- firmware: imx: scu: Fix possible memory leak in imx_scu_probe() (bsc#1111666).
- Fix boot crash with MD (bsc#1174343)
- fix multiplication overflow in copy_fdtable() (bsc#1173825).
- fpga: dfl: afu: Corrected error handling levels (git-fixes).
- fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (networking-stable-20_05_12).
- gpiolib: Document that GPIO line names are not globally unique (bsc#1051510).
- gpu: host1x: Detach driver on unregister (bsc#1111666).
- gpu: ipu-v3: pre: do not trigger update if buffer address does not change (bsc#1111666).
- HID: magicmouse: do not set up autorepeat (git-fixes).
- HID: sony: Fix for broken buttons on DS3 USB dongles (bsc#1051510).
- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() (bsc#1111666).
- hwmon: (emc2103) fix unable to change fan pwm1_enable attribute (bsc#1111666).
- hwmon: (max6697) Make sure the OVERT mask is set correctly (bsc#1111666).
- i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 (bsc#1111666).
- i2c: eg20t: Load module automatically if ID matches (bsc#1111666).
- i2c: mlxcpld: check correct size of maximum RECV_LEN packet (bsc#1111666).
- i40e: reduce stack usage in i40e_set_fc (git-fixes).
- IB/hfi1: Do not destroy hfi1_wq when the device is shut down (bsc#1174409).
- IB/hfi1: Do not destroy link_wq when the device is shut down (bsc#1174409).
- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- ibmvnic: continue to init in CRQ reset returns H_CLOSED (bsc#1173280 ltc#185369).
- ibmvnic: Flush existing work items before device removal (bsc#1065729).
- ibmvnic: Harden device login requests (bsc#1170011 ltc#183538).
- iio: buffer: Do not allow buffers without any channels enabled to be activated (bsc#1051510).
- iio:health:afe4404 Fix timestamp alignment and prevent data leak (bsc#1111666).
- iio:humidity:hdc100x Fix alignment and data leak issues (bsc#1111666).
- iio:magnetometer:ak8974: Fix alignment and data leak issues (bsc#1111666).
- iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() (bsc#1111666).
- iio: pressure: bmp280: Tolerate IRQ before registering (bsc#1051510).
- iio:pressure:ms5611 Fix buffer element alignment (bsc#1111666).
- iio: pressure: zpa2326: handle pm_runtime_get_sync failure (bsc#1111666).
- ima: Directly assign the ima_default_policy pointer to ima_rules (bsc#1051510).
- ima: Fix ima digest hash table key calculation (bsc#1051510).
- include/asm-generic/topology.h: guard cpumask_of_node() macro argument (bsc#1148868).
- Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list (bsc#1111666).
- input: i8042 - Remove special PowerPC handling (git-fixes).
- Input: synaptics - add a second working PNP_ID for Lenovo T470s (bsc#1111666).
- intel_idle: Graceful probe failure when MWAIT is disabled (bsc#1174115).
- intel_th: Fix a NULL dereference when hub driver is not loaded (bsc#1111666).
- ipvlan: call dev_change_flags when ipvlan mode is reset (git-fixes).
- ixgbevf: Remove limit of 10 entries for unicast filter list (git-fixes).
- jbd2: avoid leaking transaction credits when unreserving handle (bsc#1173845).
- jbd2: Preserve kABI when adding j_abort_mutex (bsc#1173833).
- kabi: hv: prevent struct device_node to become defined (bsc#1172871).
- kabi: ppc64le: prevent struct dma_map_ops to become defined (jsc#SLE-12423).
- kABI: protect struct mlx5_cmd_work_ent (kabi).
- kABI: reintroduce inet_hashtables.h include to l2tp_ip (kabi).
- kernfs: fix barrier usage in __kernfs_new_node() (bsc#1111666).
- KVM: nVMX: Do not reread VMCS-agnostic state when switching VMCS (bsc#1114279).
- KVM: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1114279).
- KVM: x86: Fix APIC page invalidation race (bsc#1174122).
- kvm: x86: Fix L1TF mitigation for shadow MMU (bsc#1171904).
- KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated (bsc#1171904).
- KVM: x86: only do L1TF workaround on affected processors (bsc#1171904).
- l2tp: add sk_family checks to l2tp_validate_socket (networking-stable-20_06_07).
- l2tp: do not use inet_hash()/inet_unhash() (networking-stable-20_06_07).
- libceph: do not omit recovery_deletes in target_copy() (bsc#1174113).
- libceph: ignore pool overlay and cache logic on redirects (bsc#1173146).
- libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock (bsc#1171753).
- libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant (bsc#1171753).
- libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl() (bsc#1171753).
- libnvdimm: cover up changes in struct nvdimm_bus (bsc#1171753).
- libnvdimm: cover up nd_pfn_sb changes (bsc#1171759).
- libnvdimm/dax: Pick the right alignment default when creating dax devices (bsc#1171759).
- libnvdimm/label: Remove the dpa align check (bsc#1171759).
- libnvdimm/of_pmem: Provide a unique name for bus provider (bsc#1171739).
- libnvdimm/pfn_dev: Add a build check to make sure we notice when struct page size change (bsc#1171743).
- libnvdimm/pfn_dev: Add page size and struct page size to pfn superblock (bsc#1171759).
- libnvdimm/pfn: Prevent raw mode fallback if pfn-infoblock valid (bsc#1171743).
- libnvdimm/pmem: Advance namespace seed for specific probe errors (bsc#1171743).
- libnvdimm/region: Initialize bad block for volatile namespaces (bnc#1151927 5.3.6).
- libnvdimm/region: Rewrite _probe_success() to _advance_seeds() (bsc#1171743).
- libnvdimm: Use PAGE_SIZE instead of SZ_4K for align check (bsc#1171759).
- livepatch: Apply vmlinux-specific KLP relocations early (bsc#1071995).
- livepatch: Disallow vmlinux.ko (bsc#1071995).
- livepatch: Make klp_apply_object_relocs static (bsc#1071995).
- livepatch: Prevent module-specific KLP rela sections from referencing vmlinux symbols (bsc#1071995).
- livepatch: Remove .klp.arch (bsc#1071995).
- loop: replace kill_bdev with invalidate_bdev (bsc#1173820).
- lpfc_debugfs: get rid of pointless access_ok() (bsc#1172687 bsc#1171530).
- lpfc: Synchronize NVME transport and lpfc driver devloss_tmo (bcs#1173060).
- mac80211: add option for setting control flags (bsc#1111666).
- mac80211: set IEEE80211_TX_CTRL_PORT_CTRL_PROTO for nl80211 TX (bsc#1111666).
- mailbox: imx: Disable the clock on devm_mbox_controller_register() failure (git-fixes).
- md: Avoid namespace collision with bitmap API (git fixes (block drivers)).
- mdraid: fix read/write bytes accounting (bsc#1172537).
- md: use memalloc scope APIs in mddev_suspend()/mddev_resume() (bsc#1166985)).
- media: cec: silence shift wrapping warning in __cec_s_log_addrs() (git-fixes).
- media: si2157: Better check for running tuner in init (bsc#1111666).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue (git-fixes).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue (git-fixes).
- mlxsw: pci: Return error on PCI reset timeout (git-fixes).
- mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list properly (networking-stable-20_05_12).
- mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed (git-fixes).
- mlxsw: spectrum_dpipe: Add missing error path (git-fixes).
- mlxsw: spectrum: Prevent force of 56G (git-fixes).
- mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead (git-fixes).
- mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON() (git-fixes).
- mlxsw: spectrum_switchdev: Add MDB entries in prepare phase (git-fixes).
- mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky (git-fixes).
- mmc: block: Fix request completion in the CQE timeout path (bsc#1111666).
- mmc: block: Fix use-after-free issue for rpmb (bsc#1111666).
- mmc: fix compilation of user API (bsc#1051510).
- mmc: sdhci: do not enable card detect interrupt for gpio cd type (bsc#1111666).
- mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk (bsc#1111666).
- Move upstreamed lpfc patches into sorted section
- mvpp2: remove misleading comment (git-fixes).
- net: be more gentle about silly gso requests coming from user (networking-stable-20_06_07).
- net: check untrusted gso_size at kernel entry (networking-stable-20_06_07).
- net/cxgb4: Check the return from t4_query_params properly (git-fixes).
- net: dsa: loop: Add module soft dependency (networking-stable-20_05_16).
- net: dsa: mt7530: fix roaming from DSA user ports (networking-stable-20_05_27).
- net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it (git-fixes).
- net: ena: add missing ethtool TX timestamping indication (git-fixes).
- net: ena: avoid memory access violation by validating req_id properly (git-fixes).
- net: ena: do not wake up tx queue when down (git-fixes).
- net: ena: ena-com.c: prevent NULL pointer dereference (git-fixes).
- net: ena: ethtool: use correct value for crc32 hash (git-fixes).
- net: ena: fix continuous keep-alive resets (git-fixes).
- net: ena: fix corruption of dev_idx_to_host_tbl (git-fixes).
- net: ena: fix default tx interrupt moderation interval (git-fixes).
- net: ena: fix incorrect default RSS key (git-fixes).
- net: ena: fix incorrectly saving queue numbers when setting RSS indirection table (git-fixes).
- net: ena: fix issues in setting interrupt moderation params in ethtool (git-fixes).
- net: ena: fix potential crash when rxfh key is NULL (git-fixes).
- net: ena: fix retrieval of nonadaptive interrupt moderation intervals (git-fixes).
- net: ena: fix uses of round_jiffies() (git-fixes).
- net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE (git-fixes).
- net: ena: reimplement set/get_coalesce() (git-fixes).
- net: ena: rss: do not allocate key when not supported (git-fixes).
- net: ena: rss: fix failure to get indirection table (git-fixes).
- net: ena: rss: store hash function as values and not bits (git-fixes).
- netfilter: connlabels: prefer static lock initialiser (git-fixes).
- netfilter: ctnetlink: netns exit must wait for callbacks (bsc#1169795).
- netfilter: not mark a spinlock as __read_mostly (git-fixes).
- net: fix a potential recursive NETDEV_FEAT_CHANGE (networking-stable-20_05_16).
- net: inet_csk: Fix so_reuseport bind-address cache in tb-&gt;fast* (networking-stable-20_05_27).
- net: ipip: fix wrong address family in init error path (networking-stable-20_05_27).
- net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set (git-fixes).
- net: macsec: preserve ingress frame ordering (networking-stable-20_05_12).
- net/mlx4_core: drop useless LIST_HEAD (git-fixes).
- net/mlx4_core: fix a memory leak bug (git-fixes).
- net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (networking-stable-20_05_12).
- net/mlx5: Add command entry handling completion (networking-stable-20_05_27).
- net/mlx5: Avoid panic when setting vport rate (git-fixes).
- net/mlx5: Continue driver initialization despite debugfs failure (git-fixes).
- net/mlx5e: ethtool, Fix a typo in WOL function names (git-fixes).
- net/mlx5e: Fix traffic duplication in ethtool steering (git-fixes).
- net/mlx5e: Remove unnecessary clear_bit()s (git-fixes).
- net/mlx5e: Update netdev txq on completions during closure (networking-stable-20_05_27).
- net/mlx5: Fix command entry leak in Internal Error State (networking-stable-20_05_12).
- net/mlx5: Fix crash upon suspend/resume (networking-stable-20_06_07).
- net/mlx5: Fix forced completion access non initialized command entry (networking-stable-20_05_12).
- net: mvmdio: allow up to four clocks to be specified for orion-mdio (git-fixes).
- net: mvpp2: prs: Do not override the sign bit in SRAM parser shift (git-fixes).
- net: phy: fix aneg restart in phy_ethtool_set_eee (networking-stable-20_05_16).
- netprio_cgroup: Fix unlimited memory leak of v2 cgroups (networking-stable-20_05_16).
- net: qede: stop adding events on an already destroyed workqueue (git-fixes).
- net: qed: fix excessive QM ILT lines consumption (git-fixes).
- net: qed: fix NVMe login fails over VFs (git-fixes).
- net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (networking-stable-20_05_27).
- net: revert 'net: get rid of an signed integer overflow in ip_idents_reserve()' (networking-stable-20_05_27).
- net sched: fix reporting the first-time use timestamp (networking-stable-20_05_27).
- net: stricter validation of untrusted gso packets (networking-stable-20_05_12).
- net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict() (networking-stable-20_05_12).
- net/tls: Fix sk_psock refcnt leak when in tls_data_ready() (networking-stable-20_05_12).
- net: usb: qmi_wwan: add support for DW5816e (networking-stable-20_05_12).
- net: usb: qmi_wwan: add Telit 0x1050 composition (networking-stable-20_06_07).
- net: usb: qmi_wwan: add Telit LE910C1-EUX composition (networking-stable-20_06_07).
- net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() (bsc#1172484).
- nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K (git-fixes).
- NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() (bsc#1170592).
- NFSv4: Retry CLOSE and DELEGRETURN on NFS4ERR_OLD_STATEID (bsc#1170592).
- nilfs2: fix null pointer dereference at nilfs_segctor_do_construct() (bsc#1173857).
- nl80211: fix NL80211_ATTR_CHANNEL_WIDTH attribute type (bsc#1111666).
- nvdimm: Avoid race between probe and reading device attributes (bsc#1170442).
- nvme: check for NVME_CTRL_LIVE in nvme_report_ns_ids() (bcs#1171558 bsc#1159058).
- nvme: do not update multipath disk information if the controller is down (bcs#1171558 bsc#1159058).
- nvme: fail cancelled commands with NVME_SC_HOST_PATH_ERROR (bsc#1158983 bsc#1172538).
- nvme-fc: Fail transport errors with NVME_SC_HOST_PATH (bsc#1158983 bsc#1172538).
- nvme-tcp: fail command with NVME_SC_HOST_PATH_ERROR send failed (bsc#1158983 bsc#1172538).
- objtool: Clean instruction state before each function validation (bsc#1169514).
- objtool: Ignore empty alternatives (bsc#1169514).
- ocfs2: no need try to truncate file beyond i_size (bsc#1171841).
- overflow: Fix -Wtype-limits compilation warnings (git fixes).
- overflow.h: Add arithmetic shift helper (git fixes).
- p54usb: add AirVasT USB stick device-id (bsc#1051510).
- padata: ensure the reorder timer callback runs on the correct CPU (git-fixes).
- padata: reorder work kABI fixup (git-fixes).
- PCI/AER: Remove HEST/FIRMWARE_FIRST parsing for AER ownership (bsc#1174356).
- PCI/AER: Use only _OSC to determine AER ownership (bsc#1174356).
- PCI: Allow pci_resize_resource() for devices on root bus (bsc#1051510).
- PCI: Fix pci_register_host_bridge() device_register() error handling (bsc#1051510).
- PCI: Generalize multi-function power dependency device links (bsc#1111666).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871, bsc#1172872).
- PCI: hv: Fix the PCI HyperV probe failure path to release resource properly (bsc#1172871, bsc#1172872).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871, bsc#1172872).
- PCI: hv: Move hypercall related definitions into tlfs header (bsc#1172871, bsc#1172872).
- PCI: hv: Move retarget related structures into tlfs header (bsc#1172871, bsc#1172872).
- PCI: hv: Reorganize the code in preparation of hibernation (bsc#1172871, bsc#1172872).
- PCI: hv: Retry PCI bus D0 entry on invalid device state (bsc#1172871, bsc#1172872).
- PCI: pciehp: Fix indefinite wait on sysfs requests (git-fixes).
- PCI: pciehp: Support interrupts sent from D3hot (git-fixes).
- PCI/PM: Call .bridge_d3() hook only if non-NULL (git-fixes).
- PCI: Program MPS for RCiEP devices (bsc#1051510).
- PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port (bsc#1051510).
- pci: Revive pci_dev __aer_firmware_first* fields for kABI (bsc#1174356).
- pcm_native: result of put_user() needs to be checked (bsc#1111666).
- perf: Allocate context task_ctx_data for child event (git-fixes).
- perf/cgroup: Fix perf cgroup hierarchy support (git-fixes).
- perf: Copy parent's address filter offsets on clone (git-fixes).
- perf/core: Add sanity check to deal with pinned event failure (git-fixes).
- perf/core: Avoid freeing static PMU contexts when PMU is unregistered (git-fixes).
- perf/core: Correct event creation with PERF_FORMAT_GROUP (git-fixes).
- perf/core: Do not WARN() for impossible ring-buffer sizes (git-fixes).
- perf/core: Fix ctx_event_type in ctx_resched() (git-fixes).
- perf/core: Fix error handling in perf_event_alloc() (git-fixes).
- perf/core: Fix exclusive events' grouping (git-fixes).
- perf/core: Fix group scheduling with mixed hw and sw events (git-fixes).
- perf/core: Fix impossible ring-buffer sizes warning (git-fixes).
- perf/core: Fix locking for children siblings group read (git-fixes).
- perf/core: Fix lock inversion between perf,trace,cpuhp (git-fixes (dependent patch for 18736eef1213)).
- perf/core: Fix perf_event_read_value() locking (git-fixes).
- perf/core: Fix perf_pmu_unregister() locking (git-fixes).
- perf/core: Fix __perf_read_group_add() locking (git-fixes (dependent patch)).
- perf/core: Fix perf_sample_regs_user() mm check (git-fixes).
- perf/core: Fix possible Spectre-v1 indexing for -&gt;aux_pages (git-fixes).
- perf/core: Fix race between close() and fork() (git-fixes).
- perf/core: Fix the address filtering fix (git-fixes).
- perf/core: Fix use-after-free in uprobe_perf_close() (git-fixes).
- perf/core: Force USER_DS when recording user stack data (git-fixes).
- perf/core: Restore mmap record type correctly (git-fixes).
- perf: Fix header.size for namespace events (git-fixes).
- perf/ioctl: Add check for the sample_period value (git-fixes).
- perf, pt, coresight: Fix address filters for vmas with non-zero offset (git-fixes).
- perf: Return proper values for user stack errors (git-fixes).
- perf/x86/amd: Constrain Large Increment per Cycle events (git-fixes).
- perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity (git-fixes).
- perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops (git-fixes).
- perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) (git-fixes).
- perf/x86/amd/iommu: Make the 'amd_iommu_attr_groups' symbol static (git-fixes).
- perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs (git-fixes stable).
- perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs (git-fixes).
- perf/x86/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf events (git-fixes stable).
- perf/x86: Enable free running PEBS for REGS_USER/INTR (git-fixes).
- perf/x86: Fix incorrect PEBS_REGS (git-fixes).
- perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts() (git-fixes).
- perf/x86/intel: Add proper condition to run sched_task callbacks (git-fixes).
- perf/x86/intel/bts: Fix the use of page_private() (git-fixes).
- perf/x86/intel: Fix PT PMI handling (git-fixes).
- perf/x86/intel: Move branch tracing setup to the Intel-specific source file (git-fixes).
- perf/x86/intel/uncore: Add Node ID mask (git-fixes).
- perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX (git-fixes).
- perf/x86/intel/uncore: Handle invalid event coding for free-running counter (git-fixes).
- perf/x86/uncore: Fix event group support (git-fixes).
- pid: Improve the comment about waiting in zap_pid_ns_processes (git fixes)).
- pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()' (bsc#1051510).
- pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()' (bsc#1051510).
- pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs (bsc#1051510).
- platform/x86: dell-laptop: do not register micmute LED if there is no token (bsc#1111666).
- platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() (bsc#1111666).
- PM / Domains: Allow genpd users to specify default active wakeup behavior (git-fixes).
- pnp: Use list_for_each_entry() instead of open coding (git fixes).
- powerpc/64s: Do not let DT CPU features set FSCR_DSCR (bsc#1065729).
- powerpc/64s: Save FSCR to init_task.thread.fscr after feature init (bsc#1065729).
- powerpc/book3s64: Export has_transparent_hugepage() related functions (bsc#1171759).
- powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey (bsc#1065729).
- powerpc/fadump: fix race between pstore write and fadump crash trigger (bsc#1168959 ltc#185010).
- powerpc/xive: Clear the page tables for the ESB IO mapping (bsc#1085030).
- powerpc/xmon: Reset RCU and soft lockup watchdogs (bsc#1065729).
- power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select (bsc#1051510).
- power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()' (bsc#1051510).
- power: supply: smb347-charger: IRQSTAT_D is volatile (bsc#1051510).
- power: vexpress: add suppress_bind_attrs to true (bsc#1111666).
- pppoe: only process PADT targeted at local interfaces (networking-stable-20_05_16).
- qed: reduce maximum stack frame size (git-fixes).
- qlcnic: fix missing release in qlcnic_83xx_interrupt_test (git-fixes).
- r8152: support additional Microsoft Surface Ethernet Adapter variant (networking-stable-20_05_27).
- raid5: remove gfp flags from scribble_alloc() (bsc#1166985).
- RDMA/efa: Fix setting of wrong bit in get/set_feature commands (bsc#1111666)
- RDMA/efa: Set maximum pkeys device attribute (bsc#1111666)
- RDMA/efa: Support remote read access in MR registration (bsc#1111666)
- RDMA/efa: Unified getters/setters for device structs bitmask access (bsc#1111666)
- README.BRANCH: Add Takashi Iwai as primary maintainer.
- regmap: debugfs: Do not sleep while atomic for fast_io regmaps (bsc#1111666).
- resolve KABI warning for perf-pt-coresight (git-fixes).
- Revert 'bcache: ignore pending signals when creating gc and allocator thread' (git fixes (block drivers)).
- Revert commit e918e570415c ('tpm_tis: Remove the HID IFX0102') (bsc#1111666).
- Revert 'dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues' (git fixes (block drivers)).
- Revert 'thermal: mediatek: fix register index error' (bsc#1111666).
- Revert 'tools lib traceevent: Remove unneeded qsort and uses memmove'
- s390/bpf: Maintain 8-byte stack alignment (bsc#1169194).
- s390: fix syscall_get_error for compat processes (git-fixes).
- s390/qdio: consistently restore the IRQ handler (git-fixes).
- s390/qdio: lock device while installing IRQ handler (git-fixes).
- s390/qdio: put thinint indicator after early error (git-fixes).
- s390/qdio: tear down thinint indicator after early error (git-fixes).
- s390/qeth: fix error handling for isolation mode cmds (git-fixes).
- sch_choke: avoid potential panic in choke_reset() (networking-stable-20_05_12).
- sch_sfq: validate silly quantum values (networking-stable-20_05_12).
- scsi: aacraid: fix a signedness bug (bsc#1174296).
- scsi: hisi_sas: fix calls to dma_set_mask_and_coherent() (bsc#1174296).
- scsi: ibmvscsi: Do not send host info in adapter info MAD after LPM (bsc#1172759 ltc#184814).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Avoid another null dereference in lpfc_sli4_hba_unset() (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1158983).
- scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (bsc#1158983).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix less-than-zero comparison of unsigned value (bsc#1158983).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1158983).
- scsi: megaraid_sas: Fix a compilation warning (bsc#1174296).
- scsi: mpt3sas: Fix double free in attach error handling (bsc#1174296).
- scsi: qedf: Add port_id getter (bsc#1150660).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (bsc#1174296).
- scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (bsc#1158983).
- sctp: Do not add the shutdown timer if its already been added (networking-stable-20_05_27).
- sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (networking-stable-20_05_27).
- spi: dw: use 'smp_mb()' to avoid sending spi data error (bsc#1051510).
- spi: fix initial SPI_SR value in spi-fsl-dspi (bsc#1111666).
- spi: pxa2xx: Apply CS clk quirk to BXT (bsc#1111666).
- spi: spidev: fix a race between spidev_release and spidev_remove (bsc#1111666).
- spi: spi-mem: Fix Dual/Quad modes on Octal-capable devices (bsc#1111666).
- spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate (bsc#1111666).
- staging: comedi: verify array index is correct before using it (bsc#1111666).
- staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK (bsc#1051510).
- staging: sm750fb: add missing case while setting FB_VISUAL (bsc#1051510).
- SUNRPC: The TCP back channel mustn't disappear while requests are outstanding (bsc#1152624).
- tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes (bsc#1173284).
- timers: Add a function to start/reduce a timer (networking-stable-20_05_27).
- tpm_tis: extra chip-&gt;ops check on error path in tpm_tis_core_init (bsc#1111666).
- tpm_tis: Remove the HID IFX0102 (bsc#1111666).
- tracing: Fix event trigger to accept redundant spaces (git-fixes).
- tty: n_gsm: Fix bogus i++ in gsm_data_kick (bsc#1051510).
- tty: n_gsm: Fix SOF skipping (bsc#1051510).
- tty: n_gsm: Fix waking up upper tty layer when room available (bsc#1051510).
- tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040 (networking-stable-20_05_12).
- ubifs: remove broken lazytime support (bsc#1173826).
- usb: add USB_QUIRK_DELAY_INIT for Logitech C922 (git-fixes).
- USB: c67x00: fix use after free in c67x00_giveback_urb (bsc#1111666).
- usb: chipidea: core: add wakeup support for extcon (bsc#1111666).
- usb: dwc2: Fix shutdown callback in platform (bsc#1111666).
- usb: dwc2: gadget: move gadget resume after the core is in L0 state (bsc#1051510).
- usb: dwc3: gadget: introduce cancelled_list (git-fixes).
- usb: dwc3: gadget: never call -&gt;complete() from -&gt;ep_queue() (git-fixes).
- usb: dwc3: gadget: Properly handle ClearFeature(halt) (git-fixes).
- usb: dwc3: gadget: Properly handle failed kick_transfer (git-fixes).
- USB: ehci: reopen solution for Synopsys HC bug (git-fixes).
- usb: gadget: fix potential double-free in m66592_probe (bsc#1111666).
- usb: gadget: lpc32xx_udc: do not dereference ep pointer before null check (bsc#1051510).
- usb: gadget: udc: atmel: fix uninitialized read in debug printk (bsc#1111666).
- usb: gadget: udc: atmel: remove outdated comment in usba_ep_disable() (bsc#1111666).
- usb: gadget: udc: Potential Oops in error handling code (bsc#1111666).
- USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke (bsc#1051510).
- usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() (bsc#1111666).
- USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe() (bsc#1051510).
- usb: musb: Fix runtime PM imbalance on error (bsc#1051510).
- usb: musb: start session in resume for host port (bsc#1051510).
- usbnet: smsc95xx: Fix use-after-free after removal (bsc#1111666).
- USB: ohci-sm501: Add missed iounmap() in remove (bsc#1111666).
- USB: serial: ch341: add new Product ID for CH340 (bsc#1111666).
- USB: serial: cypress_m8: enable Simply Automated UPB PIM (bsc#1111666).
- USB: serial: iuu_phoenix: fix memory corruption (bsc#1111666).
- USB: serial: option: add GosunCn GM500 series (bsc#1111666).
- USB: serial: option: add Quectel EG95 LTE modem (bsc#1111666).
- USB: serial: option: add Telit LE910C1-EUX compositions (bsc#1051510).
- USB: serial: qcserial: add DW5816e QDL support (bsc#1051510).
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (bsc#1051510).
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (git-fixes).
- vfio/pci: Fix SR-IOV VF handling with MMIO blocking (bsc#1174123).
- vfs: Fix EOVERFLOW testing in put_compat_statfs64 (bnc#1151927 5.3.6).
- virtio-blk: handle block_device_operations callbacks after hot unplug (git fixes (block drivers)).
- vmxnet3: add geneve and vxlan tunnel offload support (bsc#1172484).
- vmxnet3: add support to get/set rx flow hash (bsc#1172484).
- vmxnet3: allow rx flow hash ops only when rss is enabled (bsc#1172484).
- vmxnet3: avoid format strint overflow warning (bsc#1172484).
- vmxnet3: prepare for version 4 changes (bsc#1172484).
- vmxnet3: Remove always false conditional statement (bsc#1172484).
- vmxnet3: remove redundant initialization of pointer 'rq' (bsc#1172484).
- vmxnet3: remove unused flag 'rxcsum' from struct vmxnet3_adapter (bsc#1172484).
- vmxnet3: Replace msleep(1) with usleep_range() (bsc#1172484).
- vmxnet3: update to version 4 (bsc#1172484).
- vmxnet3: use correct hdr reference when packet is encapsulated (bsc#1172484).
- vsock: fix timeout in vsock_accept() (networking-stable-20_06_07).
- vxlan: Avoid infinite loop when suppressing NS messages with invalid options (git-fixes).
- w1: omap-hdq: cleanup to add missing newline for some dev_dbg (bsc#1051510).
- watchdog: sp805: fix restart handler (bsc#1111666).
- wil6210: add general initialization/size checks (bsc#1111666).
- wil6210: check rx_buff_mgmt before accessing it (bsc#1111666).
- wil6210: ignore HALP ICR if already handled (bsc#1111666).
- wil6210: make sure Rx ring sizes are correlated (git-fixes).
- work around mvfs bug (bsc#1162063).
- x86/apic: Install an empty physflat_init_apic_ldr (bsc#1163309).
- x86/cpu/amd: Make erratum #1054 a legacy erratum (bsc#1114279).
- x86/events/intel/ds: Add PERF_SAMPLE_PERIOD into PEBS_FREERUNNING_FLAGS (git-fixes).
- x86: Fix early boot crash on gcc-10, third try (bsc#1114279).
- x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (bsc#1172257).
- x86/reboot/quirks: Add MacBook6,1 reboot quirk (bsc#1114279).
- xfrm: fix error in comment (git fixes).
- xhci: Fix incorrect EP_STATE_MASK (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-03"/>
	<updated date="2020-08-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150660">SUSE bug 1150660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151927">SUSE bug 1151927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152107">SUSE bug 1152107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152624">SUSE bug 1152624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158983">SUSE bug 1158983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159058">SUSE bug 1159058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161016">SUSE bug 1161016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162002">SUSE bug 1162002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162063">SUSE bug 1162063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163309">SUSE bug 1163309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166985">SUSE bug 1166985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167104">SUSE bug 1167104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168081">SUSE bug 1168081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168959">SUSE bug 1168959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169194">SUSE bug 1169194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169771">SUSE bug 1169771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169795">SUSE bug 1169795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170011">SUSE bug 1170011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170442">SUSE bug 1170442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170592">SUSE bug 1170592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170617">SUSE bug 1170617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170618">SUSE bug 1170618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171124">SUSE bug 1171124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171424">SUSE bug 1171424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171529">SUSE bug 1171529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171530">SUSE bug 1171530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171732">SUSE bug 1171732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171739">SUSE bug 1171739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171743">SUSE bug 1171743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171753">SUSE bug 1171753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171759">SUSE bug 1171759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171835">SUSE bug 1171835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171841">SUSE bug 1171841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171868">SUSE bug 1171868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171904">SUSE bug 1171904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172247">SUSE bug 1172247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172257">SUSE bug 1172257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172344">SUSE bug 1172344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172458">SUSE bug 1172458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172484">SUSE bug 1172484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172537">SUSE bug 1172537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172687">SUSE bug 1172687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172719">SUSE bug 1172719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172759">SUSE bug 1172759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172775">SUSE bug 1172775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172781">SUSE bug 1172781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172782">SUSE bug 1172782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172783">SUSE bug 1172783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172871">SUSE bug 1172871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172872">SUSE bug 1172872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172999">SUSE bug 1172999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173060">SUSE bug 1173060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173074">SUSE bug 1173074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173146">SUSE bug 1173146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173265">SUSE bug 1173265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173280">SUSE bug 1173280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173284">SUSE bug 1173284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173428">SUSE bug 1173428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173514">SUSE bug 1173514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173567">SUSE bug 1173567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173573">SUSE bug 1173573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173659">SUSE bug 1173659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173746">SUSE bug 1173746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173818">SUSE bug 1173818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173820">SUSE bug 1173820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173825">SUSE bug 1173825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173826">SUSE bug 1173826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173833">SUSE bug 1173833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173838">SUSE bug 1173838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173839">SUSE bug 1173839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173845">SUSE bug 1173845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173857">SUSE bug 1173857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174113">SUSE bug 1174113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174115">SUSE bug 1174115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174122">SUSE bug 1174122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174123">SUSE bug 1174123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174186">SUSE bug 1174186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174187">SUSE bug 1174187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174296">SUSE bug 1174296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174343">SUSE bug 1174343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174356">SUSE bug 1174356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174409">SUSE bug 1174409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174438">SUSE bug 1174438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174462">SUSE bug 1174462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174543">SUSE bug 1174543</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16746/">CVE-2019-16746</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20810/">CVE-2019-20810</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20908/">CVE-2019-20908</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0305/">CVE-2020-0305</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10766/">CVE-2020-10766</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10767/">CVE-2020-10767</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10768/">CVE-2020-10768</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10769/">CVE-2020-10769</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10773/">CVE-2020-10773</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10781/">CVE-2020-10781</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12771/">CVE-2020-12771</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12888/">CVE-2020-12888</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13974/">CVE-2020-13974</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14416/">CVE-2020-14416</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15393/">CVE-2020-15393</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15780/">CVE-2020-15780</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497068" comment="reiserfs-kmp-default-4.12.14-197.48.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138307" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160968" ref_url="https://bugzilla.suse.com/1160968" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-2583" ref_url="https://www.suse.com/security/cve/CVE-2020-2583/" source="CVE"/>
		<reference ref_id="CVE-2020-2590" ref_url="https://www.suse.com/security/cve/CVE-2020-2590/" source="CVE"/>
		<reference ref_id="CVE-2020-2593" ref_url="https://www.suse.com/security/cve/CVE-2020-2593/" source="CVE"/>
		<reference ref_id="CVE-2020-2601" ref_url="https://www.suse.com/security/cve/CVE-2020-2601/" source="CVE"/>
		<reference ref_id="CVE-2020-2604" ref_url="https://www.suse.com/security/cve/CVE-2020-2604/" source="CVE"/>
		<reference ref_id="CVE-2020-2654" ref_url="https://www.suse.com/security/cve/CVE-2020-2654/" source="CVE"/>
		<reference ref_id="CVE-2020-2659" ref_url="https://www.suse.com/security/cve/CVE-2020-2659/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0231-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200231-1.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

Update java-1_8_0-openjdk to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU, bsc#1160968):

- CVE-2020-2583: Unlink Set of LinkedHashSets
- CVE-2020-2590: Improve Kerberos interop capabilities
- CVE-2020-2593: Normalize normalization for all
- CVE-2020-2601: Better Ticket Granting Services
- CVE-2020-2604: Better serial filter handling
- CVE-2020-2659: Enhance datagram socket support
- CVE-2020-2654: Improve Object Identifier Processing
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-24"/>
	<updated date="2020-01-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160968">SUSE bug 1160968</bugzilla>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2583/">CVE-2020-2583</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2590/">CVE-2020-2590</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2593/">CVE-2020-2593</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2601/">CVE-2020-2601</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2604/">CVE-2020-2604</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2654/">CVE-2020-2654</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2659/">CVE-2020-2659</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497033" comment="java-1_8_0-openjdk-1.8.0.242-3.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497034" comment="java-1_8_0-openjdk-demo-1.8.0.242-3.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497035" comment="java-1_8_0-openjdk-devel-1.8.0.242-3.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497036" comment="java-1_8_0-openjdk-headless-1.8.0.242-3.30.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138308" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174157" ref_url="https://bugzilla.suse.com/1174157" source="BUGZILLA"/>
		<reference ref_id="1175259" ref_url="https://bugzilla.suse.com/1175259" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17639" ref_url="https://www.suse.com/security/cve/CVE-2019-17639/" source="CVE"/>
		<reference ref_id="CVE-2020-14556" ref_url="https://www.suse.com/security/cve/CVE-2020-14556/" source="CVE"/>
		<reference ref_id="CVE-2020-14577" ref_url="https://www.suse.com/security/cve/CVE-2020-14577/" source="CVE"/>
		<reference ref_id="CVE-2020-14578" ref_url="https://www.suse.com/security/cve/CVE-2020-14578/" source="CVE"/>
		<reference ref_id="CVE-2020-14579" ref_url="https://www.suse.com/security/cve/CVE-2020-14579/" source="CVE"/>
		<reference ref_id="CVE-2020-14581" ref_url="https://www.suse.com/security/cve/CVE-2020-14581/" source="CVE"/>
		<reference ref_id="CVE-2020-14583" ref_url="https://www.suse.com/security/cve/CVE-2020-14583/" source="CVE"/>
		<reference ref_id="CVE-2020-14593" ref_url="https://www.suse.com/security/cve/CVE-2020-14593/" source="CVE"/>
		<reference ref_id="CVE-2020-14621" ref_url="https://www.suse.com/security/cve/CVE-2020-14621/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007336.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
    - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
    - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
    - TRANSLATION MESSAGES UPDATE FOR JCL
    - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
    - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
    - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
    - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
      IN DEBUGGING MODE
    - INTERMITTENT ASSERTION FAILURE REPORTED
    - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
    - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
    - SEGMENTATION FAULT WHILE COMPILING A METHOD
    - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
      APPLICATION ON IBM Z PLATFORM
  * Security:
    - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
      NON DEFAULT VALUE
    - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
    - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
      DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
    - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
      KEYFACTORY CLASS
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-02"/>
	<updated date="2020-09-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1174157">SUSE bug 1174157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175259">SUSE bug 1175259</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-17639/">CVE-2019-17639</cve>
	<cve impact="important" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14556/">CVE-2020-14556</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14577/">CVE-2020-14577</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14578/">CVE-2020-14578</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14579/">CVE-2020-14579</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14581/">CVE-2020-14581</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14583/">CVE-2020-14583</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-14593/">CVE-2020-14593</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14621/">CVE-2020-14621</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497069" comment="java-1_8_0-ibm-1.8.0_sr6.15-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497070" comment="java-1_8_0-ibm-alsa-1.8.0_sr6.15-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497071" comment="java-1_8_0-ibm-devel-1.8.0_sr6.15-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497072" comment="java-1_8_0-ibm-plugin-1.8.0_sr6.15-3.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138309" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083548" ref_url="https://bugzilla.suse.com/1083548" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1120163" ref_url="https://bugzilla.suse.com/1120163" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1136666" ref_url="https://bugzilla.suse.com/1136666" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1152148" ref_url="https://bugzilla.suse.com/1152148" source="BUGZILLA"/>
		<reference ref_id="1163524" ref_url="https://bugzilla.suse.com/1163524" source="BUGZILLA"/>
		<reference ref_id="1165629" ref_url="https://bugzilla.suse.com/1165629" source="BUGZILLA"/>
		<reference ref_id="1166965" ref_url="https://bugzilla.suse.com/1166965" source="BUGZILLA"/>
		<reference ref_id="1169790" ref_url="https://bugzilla.suse.com/1169790" source="BUGZILLA"/>
		<reference ref_id="1170232" ref_url="https://bugzilla.suse.com/1170232" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1171688" ref_url="https://bugzilla.suse.com/1171688" source="BUGZILLA"/>
		<reference ref_id="1171988" ref_url="https://bugzilla.suse.com/1171988" source="BUGZILLA"/>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1172108" ref_url="https://bugzilla.suse.com/1172108" source="BUGZILLA"/>
		<reference ref_id="1172247" ref_url="https://bugzilla.suse.com/1172247" source="BUGZILLA"/>
		<reference ref_id="1172418" ref_url="https://bugzilla.suse.com/1172418" source="BUGZILLA"/>
		<reference ref_id="1172428" ref_url="https://bugzilla.suse.com/1172428" source="BUGZILLA"/>
		<reference ref_id="1172871" ref_url="https://bugzilla.suse.com/1172871" source="BUGZILLA"/>
		<reference ref_id="1172872" ref_url="https://bugzilla.suse.com/1172872" source="BUGZILLA"/>
		<reference ref_id="1172873" ref_url="https://bugzilla.suse.com/1172873" source="BUGZILLA"/>
		<reference ref_id="1172963" ref_url="https://bugzilla.suse.com/1172963" source="BUGZILLA"/>
		<reference ref_id="1173060" ref_url="https://bugzilla.suse.com/1173060" source="BUGZILLA"/>
		<reference ref_id="1173485" ref_url="https://bugzilla.suse.com/1173485" source="BUGZILLA"/>
		<reference ref_id="1173798" ref_url="https://bugzilla.suse.com/1173798" source="BUGZILLA"/>
		<reference ref_id="1173954" ref_url="https://bugzilla.suse.com/1173954" source="BUGZILLA"/>
		<reference ref_id="1174003" ref_url="https://bugzilla.suse.com/1174003" source="BUGZILLA"/>
		<reference ref_id="1174026" ref_url="https://bugzilla.suse.com/1174026" source="BUGZILLA"/>
		<reference ref_id="1174070" ref_url="https://bugzilla.suse.com/1174070" source="BUGZILLA"/>
		<reference ref_id="1174205" ref_url="https://bugzilla.suse.com/1174205" source="BUGZILLA"/>
		<reference ref_id="1174387" ref_url="https://bugzilla.suse.com/1174387" source="BUGZILLA"/>
		<reference ref_id="1174484" ref_url="https://bugzilla.suse.com/1174484" source="BUGZILLA"/>
		<reference ref_id="1174547" ref_url="https://bugzilla.suse.com/1174547" source="BUGZILLA"/>
		<reference ref_id="1174549" ref_url="https://bugzilla.suse.com/1174549" source="BUGZILLA"/>
		<reference ref_id="1174550" ref_url="https://bugzilla.suse.com/1174550" source="BUGZILLA"/>
		<reference ref_id="1174625" ref_url="https://bugzilla.suse.com/1174625" source="BUGZILLA"/>
		<reference ref_id="1174658" ref_url="https://bugzilla.suse.com/1174658" source="BUGZILLA"/>
		<reference ref_id="1174685" ref_url="https://bugzilla.suse.com/1174685" source="BUGZILLA"/>
		<reference ref_id="1174689" ref_url="https://bugzilla.suse.com/1174689" source="BUGZILLA"/>
		<reference ref_id="1174699" ref_url="https://bugzilla.suse.com/1174699" source="BUGZILLA"/>
		<reference ref_id="1174734" ref_url="https://bugzilla.suse.com/1174734" source="BUGZILLA"/>
		<reference ref_id="1174757" ref_url="https://bugzilla.suse.com/1174757" source="BUGZILLA"/>
		<reference ref_id="1174771" ref_url="https://bugzilla.suse.com/1174771" source="BUGZILLA"/>
		<reference ref_id="1174840" ref_url="https://bugzilla.suse.com/1174840" source="BUGZILLA"/>
		<reference ref_id="1174841" ref_url="https://bugzilla.suse.com/1174841" source="BUGZILLA"/>
		<reference ref_id="1174843" ref_url="https://bugzilla.suse.com/1174843" source="BUGZILLA"/>
		<reference ref_id="1174844" ref_url="https://bugzilla.suse.com/1174844" source="BUGZILLA"/>
		<reference ref_id="1174845" ref_url="https://bugzilla.suse.com/1174845" source="BUGZILLA"/>
		<reference ref_id="1174852" ref_url="https://bugzilla.suse.com/1174852" source="BUGZILLA"/>
		<reference ref_id="1174873" ref_url="https://bugzilla.suse.com/1174873" source="BUGZILLA"/>
		<reference ref_id="1174904" ref_url="https://bugzilla.suse.com/1174904" source="BUGZILLA"/>
		<reference ref_id="1174926" ref_url="https://bugzilla.suse.com/1174926" source="BUGZILLA"/>
		<reference ref_id="1174968" ref_url="https://bugzilla.suse.com/1174968" source="BUGZILLA"/>
		<reference ref_id="1175062" ref_url="https://bugzilla.suse.com/1175062" source="BUGZILLA"/>
		<reference ref_id="1175063" ref_url="https://bugzilla.suse.com/1175063" source="BUGZILLA"/>
		<reference ref_id="1175064" ref_url="https://bugzilla.suse.com/1175064" source="BUGZILLA"/>
		<reference ref_id="1175065" ref_url="https://bugzilla.suse.com/1175065" source="BUGZILLA"/>
		<reference ref_id="1175066" ref_url="https://bugzilla.suse.com/1175066" source="BUGZILLA"/>
		<reference ref_id="1175067" ref_url="https://bugzilla.suse.com/1175067" source="BUGZILLA"/>
		<reference ref_id="1175112" ref_url="https://bugzilla.suse.com/1175112" source="BUGZILLA"/>
		<reference ref_id="1175127" ref_url="https://bugzilla.suse.com/1175127" source="BUGZILLA"/>
		<reference ref_id="1175128" ref_url="https://bugzilla.suse.com/1175128" source="BUGZILLA"/>
		<reference ref_id="1175149" ref_url="https://bugzilla.suse.com/1175149" source="BUGZILLA"/>
		<reference ref_id="1175199" ref_url="https://bugzilla.suse.com/1175199" source="BUGZILLA"/>
		<reference ref_id="1175213" ref_url="https://bugzilla.suse.com/1175213" source="BUGZILLA"/>
		<reference ref_id="1175228" ref_url="https://bugzilla.suse.com/1175228" source="BUGZILLA"/>
		<reference ref_id="1175232" ref_url="https://bugzilla.suse.com/1175232" source="BUGZILLA"/>
		<reference ref_id="1175284" ref_url="https://bugzilla.suse.com/1175284" source="BUGZILLA"/>
		<reference ref_id="1175393" ref_url="https://bugzilla.suse.com/1175393" source="BUGZILLA"/>
		<reference ref_id="1175394" ref_url="https://bugzilla.suse.com/1175394" source="BUGZILLA"/>
		<reference ref_id="1175396" ref_url="https://bugzilla.suse.com/1175396" source="BUGZILLA"/>
		<reference ref_id="1175397" ref_url="https://bugzilla.suse.com/1175397" source="BUGZILLA"/>
		<reference ref_id="1175398" ref_url="https://bugzilla.suse.com/1175398" source="BUGZILLA"/>
		<reference ref_id="1175399" ref_url="https://bugzilla.suse.com/1175399" source="BUGZILLA"/>
		<reference ref_id="1175400" ref_url="https://bugzilla.suse.com/1175400" source="BUGZILLA"/>
		<reference ref_id="1175401" ref_url="https://bugzilla.suse.com/1175401" source="BUGZILLA"/>
		<reference ref_id="1175402" ref_url="https://bugzilla.suse.com/1175402" source="BUGZILLA"/>
		<reference ref_id="1175403" ref_url="https://bugzilla.suse.com/1175403" source="BUGZILLA"/>
		<reference ref_id="1175404" ref_url="https://bugzilla.suse.com/1175404" source="BUGZILLA"/>
		<reference ref_id="1175405" ref_url="https://bugzilla.suse.com/1175405" source="BUGZILLA"/>
		<reference ref_id="1175406" ref_url="https://bugzilla.suse.com/1175406" source="BUGZILLA"/>
		<reference ref_id="1175407" ref_url="https://bugzilla.suse.com/1175407" source="BUGZILLA"/>
		<reference ref_id="1175408" ref_url="https://bugzilla.suse.com/1175408" source="BUGZILLA"/>
		<reference ref_id="1175409" ref_url="https://bugzilla.suse.com/1175409" source="BUGZILLA"/>
		<reference ref_id="1175410" ref_url="https://bugzilla.suse.com/1175410" source="BUGZILLA"/>
		<reference ref_id="1175411" ref_url="https://bugzilla.suse.com/1175411" source="BUGZILLA"/>
		<reference ref_id="1175412" ref_url="https://bugzilla.suse.com/1175412" source="BUGZILLA"/>
		<reference ref_id="1175413" ref_url="https://bugzilla.suse.com/1175413" source="BUGZILLA"/>
		<reference ref_id="1175414" ref_url="https://bugzilla.suse.com/1175414" source="BUGZILLA"/>
		<reference ref_id="1175415" ref_url="https://bugzilla.suse.com/1175415" source="BUGZILLA"/>
		<reference ref_id="1175416" ref_url="https://bugzilla.suse.com/1175416" source="BUGZILLA"/>
		<reference ref_id="1175417" ref_url="https://bugzilla.suse.com/1175417" source="BUGZILLA"/>
		<reference ref_id="1175418" ref_url="https://bugzilla.suse.com/1175418" source="BUGZILLA"/>
		<reference ref_id="1175419" ref_url="https://bugzilla.suse.com/1175419" source="BUGZILLA"/>
		<reference ref_id="1175420" ref_url="https://bugzilla.suse.com/1175420" source="BUGZILLA"/>
		<reference ref_id="1175421" ref_url="https://bugzilla.suse.com/1175421" source="BUGZILLA"/>
		<reference ref_id="1175422" ref_url="https://bugzilla.suse.com/1175422" source="BUGZILLA"/>
		<reference ref_id="1175423" ref_url="https://bugzilla.suse.com/1175423" source="BUGZILLA"/>
		<reference ref_id="1175440" ref_url="https://bugzilla.suse.com/1175440" source="BUGZILLA"/>
		<reference ref_id="1175493" ref_url="https://bugzilla.suse.com/1175493" source="BUGZILLA"/>
		<reference ref_id="1175515" ref_url="https://bugzilla.suse.com/1175515" source="BUGZILLA"/>
		<reference ref_id="1175518" ref_url="https://bugzilla.suse.com/1175518" source="BUGZILLA"/>
		<reference ref_id="1175526" ref_url="https://bugzilla.suse.com/1175526" source="BUGZILLA"/>
		<reference ref_id="1175550" ref_url="https://bugzilla.suse.com/1175550" source="BUGZILLA"/>
		<reference ref_id="1175654" ref_url="https://bugzilla.suse.com/1175654" source="BUGZILLA"/>
		<reference ref_id="1175666" ref_url="https://bugzilla.suse.com/1175666" source="BUGZILLA"/>
		<reference ref_id="1175667" ref_url="https://bugzilla.suse.com/1175667" source="BUGZILLA"/>
		<reference ref_id="1175668" ref_url="https://bugzilla.suse.com/1175668" source="BUGZILLA"/>
		<reference ref_id="1175669" ref_url="https://bugzilla.suse.com/1175669" source="BUGZILLA"/>
		<reference ref_id="1175670" ref_url="https://bugzilla.suse.com/1175670" source="BUGZILLA"/>
		<reference ref_id="1175691" ref_url="https://bugzilla.suse.com/1175691" source="BUGZILLA"/>
		<reference ref_id="1175767" ref_url="https://bugzilla.suse.com/1175767" source="BUGZILLA"/>
		<reference ref_id="1175768" ref_url="https://bugzilla.suse.com/1175768" source="BUGZILLA"/>
		<reference ref_id="1175769" ref_url="https://bugzilla.suse.com/1175769" source="BUGZILLA"/>
		<reference ref_id="1175770" ref_url="https://bugzilla.suse.com/1175770" source="BUGZILLA"/>
		<reference ref_id="1175771" ref_url="https://bugzilla.suse.com/1175771" source="BUGZILLA"/>
		<reference ref_id="1175772" ref_url="https://bugzilla.suse.com/1175772" source="BUGZILLA"/>
		<reference ref_id="1175786" ref_url="https://bugzilla.suse.com/1175786" source="BUGZILLA"/>
		<reference ref_id="1175873" ref_url="https://bugzilla.suse.com/1175873" source="BUGZILLA"/>
		<reference ref_id="1176069" ref_url="https://bugzilla.suse.com/1176069" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10135" ref_url="https://www.suse.com/security/cve/CVE-2020-10135/" source="CVE"/>
		<reference ref_id="CVE-2020-14314" ref_url="https://www.suse.com/security/cve/CVE-2020-14314/" source="CVE"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-14356" ref_url="https://www.suse.com/security/cve/CVE-2020-14356/" source="CVE"/>
		<reference ref_id="CVE-2020-14386" ref_url="https://www.suse.com/security/cve/CVE-2020-14386/" source="CVE"/>
		<reference ref_id="CVE-2020-16166" ref_url="https://www.suse.com/security/cve/CVE-2020-16166/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="CVE-2020-24394" ref_url="https://www.suse.com/security/cve/CVE-2020-24394/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007383.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629).
- CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
- CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).
- CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
- CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
- CVE-2020-24394: Fixed an issue which could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support (bsc#1175518).
- CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988).
- CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).
    
The following non-security bugs were fixed:

- ACPI: kABI fixes for subsys exports (bsc#1174968).
- ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq (bsc#1174968).
- ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate (bsc#1174968).
- ACPI: PM: Introduce 'poweroff' callbacks for ACPI PM domain and LPSS (bsc#1174968).
- ACPI: PM: Simplify and fix PM domain hibernation callbacks (bsc#1174968).
- af_key: pfkey_dump needs parameter validation (git-fixes).
- agp/intel: Fix a memory leak on module initialisation failure (git-fixes).
- ALSA: core: pcm_iec958: fix kernel-doc (bsc#1111666).
- ALSA: echoaduio: Drop superfluous volatile modifier (bsc#1111666).
- ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (bsc#1111666).
- ALSA: hda: Add support for Loongson 7A1000 controller (bsc#1111666).
- ALSA: hda/ca0132 - Add new quirk ID for Recon3D (bsc#1111666).
- ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (bsc#1111666).
- ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (bsc#1111666).
- ALSA: hda: fix NULL pointer dereference during suspend (git-fixes).
- ALSA: hda: fix snd_hda_codec_cleanup() documentation (bsc#1111666).
- ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (bsc#1111666).
- ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (bsc#1111666).
- ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes).
- ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (bsc#1111666).
- ALSA: hda/realtek - Add quirk for Lenovo Carbon X1 8th gen (bsc#1111666).
- ALSA: hda/realtek - Add quirk for MSI GE63 laptop (bsc#1111666).
- ALSA: hda/realtek - Add quirk for MSI GL63 (bsc#1111666).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes).
- ALSA: hda/realtek - change to suitable link model for ASUS platform (bsc#1111666).
- ALSA: hda/realtek - Check headset type by unplug and resume (bsc#1111666).
- ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 (bsc#1111666).
- ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (bsc#1111666).
- ALSA: hda/realtek - Enable Speaker for ASUS UX563 (bsc#1111666).
- ALSA: hda/realtek: Fix add a 'ultra_low_power' function for intel reference board (alc256) (bsc#1111666).
- ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung Notebook Pen S (bsc#1111666).
- ALSA: hda/realtek - Fixed HP right speaker no sound (bsc#1111666).
- ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id (bsc#1111666).
- ALSA: hda/realtek: Fix pin default on Intel NUC 8 Rugged (bsc#1111666).
- ALSA: hda/realtek - Fix unused variable warning (bsc#1111666).
- ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus G14(GA401) series with ALC289 (bsc#1111666).
- ALSA: hda - reverse the setting value in the micmute_led_set (bsc#1111666).
- ALSA: hda: Workaround for spurious wakeups on some Intel platforms (git-fixes).
- ALSA: pci: delete repeated words in comments (bsc#1111666).
- ALSA: seq: oss: Serialize ioctls (bsc#1111666).
- ALSA: usb-audio: Add capture support for Saffire 6 (USB 1.1) (git-fixes).
- ALSA: usb-audio: add quirk for Pioneer DDJ-RB (bsc#1111666).
- ALSA: usb-audio: add startech usb audio dock name (bsc#1111666).
- ALSA: usb-audio: Add support for Lenovo ThinkStation P620 (bsc#1111666).
- ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support (bsc#1111666).
- ALSA: usb-audio: Disable Lenovo P620 Rear line-in volume control (bsc#1111666).
- ALSA: usb-audio: endpoint : remove needless check before usb_free_coherent() (bsc#1111666).
- ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 (bsc#1174625).
- ALSA: usb-audio: fix spelling mistake 'buss' -&gt; 'bus' (bsc#1111666).
- ALSA: usb-audio: ignore broken processing/extension unit (git-fixes).
- ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109 (bsc#1111666).
- ALSA: usb/line6: remove 'defined but not used' warning (bsc#1111666).
- arm64: Add MIDR encoding for HiSilicon Taishan CPUs (bsc#1174547).
- arm64: Add MIDR encoding for NVIDIA CPUs (bsc#1174547).
- arm64: add sysfs vulnerability show for meltdown (bsc#1174547).
- arm64: Add sysfs vulnerability show for spectre-v1 (bsc#1174547).
- arm64: add sysfs vulnerability show for spectre-v2 (bsc#1174547).
- arm64: add sysfs vulnerability show for speculative store bypass (bsc#1174547). 
- arm64: Advertise mitigation of Spectre-v2, or lack thereof (bsc#1174547). 
- arm64: Always enable spectre-v2 vulnerability detection (bsc#1174547). 
- arm64: Always enable ssb vulnerability detection (bsc#1174547). 
- arm64: backtrace: Do not bother trying to unwind the userspace stack (bsc#1175397).
- arm64: capabilities: Add NVIDIA Denver CPU to bp_harden list (bsc#1174547).
- arm64: capabilities: Merge duplicate Cavium erratum entries (bsc#1174547).
- arm64: capabilities: Merge entries for ARM64_WORKAROUND_CLEAN_CACHE (bsc#1174547). 
- arm64: cpufeature: Enable Qualcomm Falkor/Kryo errata 1003 (bsc#1175398).
- arm64: Do not mask out PTE_RDONLY in pte_same() (bsc#1175393).
- arm64: enable generic CPU vulnerabilites support (bsc#1174547). Update config/arm64/default
- arm64: Ensure VM_WRITE|VM_SHARED ptes are clean by default (bsc#1175394).
- arm64: errata: Do not define type field twice for arm64_errata entries (bsc#1174547).
- arm64: errata: Update stale comment (bsc#1174547).
- arm64: Get rid of __smccc_workaround_1_hvc_* (bsc#1174547).
- arm64: kpti: Avoid rewriting early page tables when KASLR is enabled (bsc#1174547).
- arm64: kpti: Update arm64_kernel_use_ng_mappings() when forced on (bsc#1174547).
- arm64: kpti: Whitelist Cortex-A CPUs that do not implement the CSV3 field (bsc#1174547).
- arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs (bsc#1174547).
- arm64: KVM: Avoid setting the upper 32 bits of VTCR_EL2 to 1 (bsc#1133021).
- arm64: KVM: Guests can skip __install_bp_hardening_cb()s HYP work (bsc#1174547).
- arm64: KVM: Use SMCCC_ARCH_WORKAROUND_1 for Falkor BP hardening (bsc#1174547). 
- arm64: mm: Fix pte_mkclean, pte_mkdirty semantics (bsc#1175526). 
- arm64: Provide a command line to disable spectre_v2 mitigation (bsc#1174547).
- arm64: Silence clang warning on mismatched value/register sizes (bsc#1175396).
- arm64/speculation: Support 'mitigations=' cmdline option (bsc#1174547). 
- arm64: ssbd: explicitly depend on &lt;linux/prctl.h&gt; (bsc#1175399).
- arm64: ssbs: Do not treat CPUs with SSBS as unaffected by SSB (bsc#1174547).
- arm64: ssbs: Fix context-switch when SSBS is present on all CPUs (bsc#1175669).
- arm64/sve: Fix wrong free for task-&gt;thread.sve_state (bsc#1175400).
- arm64/sve: &lt;uapi/asm/ptrace.h&gt; should not depend on &amp;lt;uapi/linux/prctl.h&gt; (bsc#1175401).
- arm64: tlbflush: avoid writing RES0 bits (bsc#1175402).
- arm64: Use firmware to detect CPUs that are not affected by Spectre-v2 (bsc#1174547).
- ARM: KVM: invalidate BTB on guest exit for Cortex-A12/A17 (bsc#1133021). 
- ARM: KVM: invalidate icache on guest exit for Cortex-A15 (bsc#1133021).
- ARM: spectre-v2: KVM: invalidate icache on guest exit for Brahma B15 (bsc#1133021).
- ASoC: hda/tegra: Set buffer alignment to 128 bytes (bsc#1111666).
- ASoC: intel: Fix memleak in sst_media_open (git-fixes).
- ASoC: rt5670: Correct RT5670_LDO_SEL_MASK (git-fixes).
- AX.25: Fix out-of-bounds read in ax25_connect() (git-fixes).
- AX.25: Prevent integer overflows in connect and sendmsg (git-fixes).
- AX.25: Prevent out-of-bounds read in ax25_sendmsg() (git-fixes).
- ax88172a: fix ax88172a_unbind() failures (git-fixes).
- b43: Remove uninitialized_var() usage (git-fixes).
- bcache: allocate meta data pages as compound pages (bsc#1172873).
- block: check queue's limits.discard_granularity in __blkdev_issue_discard() (bsc#1152148).
- block: Fix use-after-free in blkdev_get() (bsc#1174843).
- block: improve discard bio alignment in __blkdev_issue_discard() (bsc#1152148).
- Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() (bsc#1111666).
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt() (bsc#1111666).
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt() (bsc#1111666).
- bonding: fix active-backup failover for current ARP slave (bsc#1174771).
- bonding: fix a potential double-unregister (git-fixes).
- bonding: show saner speed for broadcast mode (git-fixes).
- bpf: Fix map leak in HASH_OF_MAPS map (git-fixes).
- brcmfmac: keep SDIO watchdog running when console_interval is non-zero (bsc#1111666).
- brcmfmac: set state of hanger slot to FREE when flushing PSQ (bsc#1111666).
- brcmfmac: To fix Bss Info flag definition Bug (bsc#1111666).
- btrfs: change timing for qgroup reserved space for ordered extents to fix reserved space leak (bsc#1172247).
- btrfs: file: reserve qgroup space after the hole punch range is locked (bsc#1172247).
- btrfs: fix a block group ref counter leak after failure to remove block group (bsc#1175149).
- btrfs: fix block group leak when removing fails (bsc#1175149).
- btrfs: fix bytes_may_use underflow when running balance and scrub in parallel (bsc#1175149).
- btrfs: fix corrupt log due to concurrent fsync of inodes with shared extents (bsc#1175149).
- btrfs: fix data block group relocation failure due to concurrent scrub (bsc#1175149).
- btrfs: fix double free on ulist after backref resolution failure (bsc#1175149).
- btrfs: fix fatal extent_buffer readahead vs releasepage race (bsc#1175149).
- btrfs: fix memory leaks after failure to lookup checksums during inode logging (bsc#1175550).
- btrfs: fix page leaks after failure to lock page for delalloc (bsc#1175149).
- btrfs: fix race between block group removal and block group creation (bsc#1175149).
- btrfs: fix space_info bytes_may_use underflow after nocow buffered write (bsc#1175149).
- btrfs: fix space_info bytes_may_use underflow during space cache writeout (bsc#1175149).
- btrfs: fix wrong file range cleanup after an error filling dealloc range (bsc#1175149).
- btrfs: inode: fix NULL pointer dereference if inode does not need compression (bsc#1174484).
- btrfs: inode: move qgroup reserved space release to the callers of insert_reserved_file_extent() (bsc#1172247).
- btrfs: inode: refactor the parameters of insert_reserved_file_extent() (bsc#1172247).
- btrfs: make btrfs_ordered_extent naming consistent with btrfs_file_extent_item (bsc#1172247).
- btrfs: Open code btrfs_write_and_wait_marked_extents (bsc#1175149).
- btrfs: qgroup: allow to unreserve range without releasing other ranges (bsc#1120163).
- btrfs: qgroup: fix data leak caused by race between writeback and truncate (bsc#1172247).
- btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT (bsc#1120163).
- btrfs: qgroup: try to flush qgroup space when we get -EDQUOT (bsc#1120163).
- btrfs: Rename and export clear_btree_io_tree (bsc#1175149).
- btrfs: treat RWF_{,D}SYNC writes as sync for CRCs (bsc#1175493).
- bus: hisi_lpc: Add .remove method to avoid driver unbind crash (bsc#1174658).
- bus: hisi_lpc: Do not fail probe for unrecognised child devices (bsc#1174658).
- bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-free (bsc#1174658).
- cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip (git-fixes).
- cfg80211: check vendor command doit pointer before use (git-fixes).
- char: virtio: Select VIRTIO from VIRTIO_CONSOLE (bsc#1175667).
- cifs: document and cleanup dfs mount (bsc#1144333 bsc#1172428).
- cifs: Fix an error pointer dereference in cifs_mount() (bsc#1144333 bsc#1172428).
- cifs: fix double free error on share and prefix (bsc#1144333 bsc#1172428).
- cifs: handle empty list of targets in cifs_reconnect() (bsc#1144333 bsc#1172428).
- cifs: handle RESP_GET_DFS_REFERRAL.PathConsumed in reconnect (bsc#1144333 bsc#1172428).
- cifs: merge __{cifs,smb2}_reconnect[_tcon]() into cifs_tree_connect() (bsc#1144333 bsc#1172428).
- cifs: only update prefix path of DFS links in cifs_tree_connect() (bsc#1144333 bsc#1172428).
- cifs: reduce number of referral requests in DFS link lookups (bsc#1144333 bsc#1172428).
- cifs: rename reconn_inval_dfs_target() (bsc#1144333 bsc#1172428).
- clk: at91: clk-generated: check best_rate against ranges (bsc#1111666).
- clk: clk-atlas6: fix return value check in atlas6_clk_init() (bsc#1111666).
- clk: iproc: round clock rate to the closest (bsc#1111666).
- clk: spear: Remove uninitialized_var() usage (git-fixes).
- clk: st: Remove uninitialized_var() usage (git-fixes).
- config: arm64: enable CONFIG_IOMMU_DEFAULT_PASSTHROUGH References: bsc#1174549
- console: newport_con: fix an issue about leak related system resources (git-fixes).
- constrants: fix malformed XML Closing tag of an element is '&lt;/foo&gt;', not '&lt;foo/&gt;'. Fixes: 8b37de2eb835 ('rpm/constraints.in: Increase memory for kernel-docs')
- Created new preempt kernel flavor (jsc#SLE-11309) Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT-&gt;y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.
- crypto: ccp - Fix use of merged scatterlists (git-fixes).
- crypto: cpt - do not sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified (git-fixes).
- crypto: qat - fix double free in qat_uclo_create_batch_init_list (git-fixes).
- crypto: rockchip - fix scatterlist nents error (git-fixes).
- crypto: stm32/crc32 - fix ext4 chksum BUG_ON() (git-fixes).
- crypto: talitos - check AES key size (git-fixes).
- crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK (git-fixes).
- crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req() (git-fixes).
- dev: Defer free of skbs in flush_backlog (git-fixes).
- device property: Fix the secondary firmware node handling in set_primary_fwnode() (git-fixes).
- devres: keep both device name and resource name in pretty name (git-fixes).
- dlm: Fix kobject memleak (bsc#1175768).
- dlm: remove BUG() before panic() (bsc#1174844).
- dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler (git-fixes).
- Documentation/networking: Add net DIM documentation (bsc#1174852).
- dpaa2-eth: Fix passing zero to 'PTR_ERR' warning (bsc#1175403).
- dpaa2-eth: free already allocated channels on probe defer (bsc#1175404).
- dpaa2-eth: prevent array underflow in update_cls_rule() (bsc#1175405).
- dpaa_eth: add dropped frames to percpu ethtool stats (bsc#1174550).
- dpaa_eth: add newline in dev_err() msg (bsc#1174550).
- dpaa_eth: avoid timestamp read on error paths (bsc#1175406).
- dpaa_eth: change DMA device (bsc#1174550).
- dpaa_eth: cleanup skb_to_contig_fd() (bsc#1174550).
- dpaa_eth: defer probing after qbman (bsc#1174550).
- dpaa_eth: extend delays in ndo_stop (bsc#1174550).
- dpaa_eth: fix DMA mapping leak (bsc#1174550).
- dpaa_eth: Fix one possible memleak in dpaa_eth_probe (bsc#1174550).
- dpaa_eth: FMan erratum A050385 workaround (bsc#1174550).
- dpaa_eth: perform DMA unmapping before read (bsc#1175407).
- dpaa_eth: register a device link for the qman portal used (bsc#1174550).
- dpaa_eth: remove netdev_err() for user errors (bsc#1174550).
- dpaa_eth: remove redundant code (bsc#1174550).
- dpaa_eth: simplify variables used in dpaa_cleanup_tx_fd() (bsc#1174550).
- dpaa_eth: use a page to store the SGT (bsc#1174550).
- dpaa_eth: use fd information in dpaa_cleanup_tx_fd() (bsc#1174550).
- dpaa_eth: use only one buffer pool per interface (bsc#1174550).
- dpaa_eth: use page backed rx buffers (bsc#1174550).
- driver core: Avoid binding drivers to dead devices (git-fixes).
- Drivers: hv: balloon: Remove dependencies on guest page size (git-fixes).
- Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE (git-fixes).
- Drivers: hv: vmbus: Only notify Hyper-V for die events that are oops (bsc#1175127, bsc#1175128).
- Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup() (git-fixes).
- drivers/perf: hisi: Fix typo in events attribute array (bsc#1175408).
- drivers/perf: hisi: Fixup one DDRC PMU register offset (bsc#1175410).
- drivers/perf: hisi: Fix wrong value for all counters enable (bsc#1175409).
- drm: Added orientation quirk for ASUS tablet model T103HAF (bsc#1111666).
- drm/amd/display: fix pow() crashing when given base 0 (git-fixes).
- drm/amdgpu: avoid dereferencing a NULL pointer (bsc#1111666).
- drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume (bsc#1111666).
- drm/amdgpu: Fix NULL dereference in dpm sysfs handlers (bsc#1113956) 	* refresh for context changes
- drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() (git-fixes).
- drm/amdgpu: Replace invalid device ID with a valid device ID (bsc#1113956)
- drm/arm: fix unintentional integer overflow on left shift (git-fixes).
- drm/bridge: dw-hdmi: Do not cleanup i2c adapter and ddc ptr in (bsc#1113956) 	* refreshed for context changes
- drm/bridge: sil_sii8620: initialize return of sii8620_readb (git-fixes).
- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1113956) 	* move drm_mipi_dbi.c -&gt; tinydrm/mipi-drm.c 	* refresh for context changes
- drm/debugfs: fix plain echo to connector 'force' attribute (bsc#1111666).
- drm/etnaviv: Fix error path on failure to enable bus clk (git-fixes).
- drm/etnaviv: fix ref count leak via pm_runtime_get_sync (bsc#1111666).
- drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi (bsc#1112178) 	* updated names of get/put functions
- drm: hold gem reference until object is no longer accessed (bsc#1113956)
- drm/imx: fix use after free (git-fixes).
- drm/imx: imx-ldb: Disable both channels for split mode in enc-&gt;disable() (git-fixes).
- drm/imx: tve: fix regulator_disable error path (git-fixes).
- drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline (git-fixes).
- drm/msm/adreno: fix updating ring fence (git-fixes).
- drm/msm: ratelimit crtc event overflow error (bsc#1111666).
- drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason (git-fixes).
- drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure (git-fixes).
- drm/nouveau: fix multiple instances of reference count leaks (bsc#1111666).
- drm/panel: otm8009a: Drop unnessary backlight_device_unregister() (git-fixes).
- drm: panel: simple: Fix bpc for LG LB070WV8 panel (git-fixes).
- drm/radeon: disable AGP by default (bsc#1111666).
- drm/radeon: fix array out-of-bounds read and write issues (git-fixes).
- drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync (bsc#1111666).
- drm/rockchip: fix VOP_WIN_GET macro (bsc#1175411).
- drm/tilcdc: fix leak &amp; null ref in panel_connector_get_modes (bsc#1111666).
- drm/ttm/nouveau: do not call tt destroy callback on alloc failure (bsc#1175232).
- drm/vmwgfx: Fix two list_for_each loop exit tests (bsc#1111666).
- drm/vmwgfx: Use correct vmw_legacy_display_unit pointer (bsc#1111666).
- drm/xen-front: Fix misused IS_ERR_OR_NULL checks (bsc#1065600).
- efi/memreserve: deal with memreserve entries in unmapped memory (bsc#1174685).
- ext4: check journal inode extents more carefully (bsc#1173485).
- ext4: do not allow overlapping system zones (bsc#1173485).
- ext4: fix checking of directory entry validity for inline directories (bsc#1175771).
- ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max (bsc#1174840).
- ext4: handle error of ext4_setup_system_zone() on remount (bsc#1173485).
- fat: do not allow to mount if the FAT length == 0 (bsc#1174845).
- fbdev: Detect integer underflow at 'struct fbcon_ops'-&gt;clear_margins. (bsc#1112178) 	* move files drivers/video/fbdev/core -&gt; drivers/video/console 	* refresh for context changes
- firmware: google: check if size is valid when decoding VPD data (git-fixes).
- firmware: google: increment VPD key_len properly (git-fixes).
- fpga: dfl: fix bug in port reset handshake (git-fixes).
- fsl/fman: add API to get the device behind a fman port (bsc#1174550).
- fsl/fman: check dereferencing null pointer (git-fixes).
- fsl/fman: detect FMan erratum A050385 (bsc#1174550).
- fsl/fman: do not touch liodn base regs reserved on non-PAMU SoCs (bsc#1174550).
- fsl/fman: fix dereference null return value (git-fixes).
- fsl/fman: fix eth hash table allocation (git-fixes).
- fsl/fman: fix unreachable code (git-fixes).
- fsl/fman: remove unused struct member (bsc#1174550).
- fsl/fman: use 32-bit unsigned integer (git-fixes).
- fuse: fix memleak in cuse_channel_open (bsc#1174926).
- fuse: fix missing unlock_page in fuse_writepage() (bsc#1174904).
- fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS (bsc#1175062).
- fuse: fix weird page warning (bsc#1175063).
- fuse: flush dirty data/metadata before non-truncate setattr (bsc#1175064).
- fuse: truncate pending writes on O_TRUNC (bsc#1175065).
- fuse: verify attributes (bsc#1175066).
- fuse: verify nlink (bsc#1175067).
- genetlink: remove genl_bind (networking-stable-20_07_17).
- go7007: add sanity checking for endpoints (git-fixes).
- gpu: host1x: debug: Fix multiple channels emitting messages simultaneously (bsc#1111666).
- HID: hiddev: fix mess in hiddev_open() (git-fixes).
- HISI LPC: Re-Add ACPI child enumeration support (bsc#1174658).
- HISI LPC: Stop using MFD APIs (bsc#1174658).
- hv_balloon: Balloon up according to request page number (git-fixes).
- hv_balloon: Use a static page for the balloon_up send buffer (git-fixes).
- hv_netvsc: Allow scatter-gather feature to be tunable (git-fixes).
- hv_netvsc: do not use VF device if link is down (git-fixes).
- hv_netvsc: Fix a warning of suspicious RCU usage (git-fixes).
- hv_netvsc: Fix error handling in netvsc_attach() (git-fixes).
- hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback() (git-fixes).
- hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit() (git-fixes).
- hv_netvsc: Fix unwanted wakeup in netvsc_attach() (git-fixes).
- hv_netvsc: flag software created hash value (git-fixes).
- hv_netvsc: Remove 'unlikely' from netvsc_select_queue (git-fixes).
- i2c: rcar: in slave mode, clear NACK earlier (git-fixes).
- i2c: rcar: slave: only send STOP event when we have been addressed (bsc#1111666).
- i40e: Fix crash during removing i40e driver (git-fixes).
- i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (git-fixes).
- ibmveth: Fix use of ibmveth in a bridge (bsc#1174387 ltc#187506).
- ibmvnic: Fix IRQ mapping disposal in error path (bsc#1175112 ltc#187459).
- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset (bsc#1175873 ltc#187922).
- include/linux/poison.h: remove obsolete comment (git fixes (poison)).
- Input: psmouse - add a newline when printing 'proto' by sysfs (git-fixes).
- Input: sentelic - fix error return when fsp_reg_write fails (bsc#1111666).
- integrity: remove redundant initialization of variable ret (git-fixes).
- io-mapping: indicate mapping failure (git-fixes).
- ip6_gre: fix null-ptr-deref in ip6gre_init_net() (git-fixes).
- ip6_gre: fix use-after-free in ip6gre_tunnel_lookup() (networking-stable-20_06_28).
- ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL (bsc#1175515).
- ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL (bsc#1175515).
- ip_tunnel: Emit events for post-register MTU changes (git-fixes).
- ip_tunnel: fix use-after-free in ip_tunnel_lookup() (networking-stable-20_06_28).
- ip_tunnel: restore binding to ifaces with a large mtu (git-fixes).
- ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg (networking-stable-20_07_17).
- ipv4: Silence suspicious RCU usage warning (git-fixes).
- ipv6: fix memory leaks on IPV6_ADDRFORM path (git-fixes).
- ipvlan: fix device features (git-fixes).
- ipvs: allow connection reuse for unconfirmed conntrack (git-fixes).
- ipvs: fix refcount usage for conns in ops mode (git-fixes).
- ipvs: fix the connection sync failed in some cases (bsc#1174699).
- irqchip/gic: Atomically update affinity (bsc#1111666).
- iwlegacy: Check the return value of pcie_capability_read_*() (bsc#1111666).
- jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock() (bsc#1175772).
- kabi: genetlink: remove genl_bind (kabi).
- kabi: hide new parameter of ip6_dst_lookup_flow() (bsc#1165629).
- kabi: mask changes to struct ipv6_stub (bsc#1165629).
- kernel/cpu_pm: Fix uninitted local in cpu_pm (git fixes (kernel/pm)).
- kernel-docs: Change Requires on python-Sphinx to earlier than version 3 References: bsc#1166965 From 3 on the internal API that the build system uses was rewritten in an incompatible way. See https://github.com/sphinx-doc/sphinx/issues/7421 and https://bugzilla.suse.com/show_bug.cgi?id=1166965#c16 for some details.
- kernel/relay.c: fix memleak on destroy relay channel (git-fixes).
- kernfs: do not call fsnotify() with name without a parent (bsc#1175770).
- KVM: arm64: Ensure 'params' is initialised when looking up sys register (bsc#1133021).
- KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART (bsc#1133021).
- KVM: arm/arm64: Fix young bit from mmu notifier (bsc#1133021).
- KVM: arm/arm64: vgic: Do not rely on the wrong pending table (bsc#1133021).
- KVM: arm/arm64: vgic-its: Fix restoration of unmapped collections (bsc#1133021).
- KVM: arm: Fix DFSR setting for non-LPAE aarch32 guests (bsc#1133021).
- KVM: arm: Make inject_abt32() inject an external abort instead (bsc#1133021).
- KVM: Change offset in kvm_write_guest_offset_cached to unsigned (bsc#1133021).
- KVM: Check for a bad hva before dropping into the ghc slow path (bsc#1133021).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage (bsc#1065729).
- l2tp: remove skb_dst_set() from l2tp_xmit_skb() (networking-stable-20_07_17).
- leds: 88pm860x: fix use-after-free on unbind (git-fixes).
- leds: core: Flush scheduled work for system suspend (git-fixes).
- leds: da903x: fix use-after-free on unbind (git-fixes).
- leds: lm3533: fix use-after-free on unbind (git-fixes).
- leds: lm355x: avoid enum conversion warning (git-fixes).
- leds: wm831x-status: fix use-after-free on unbind (git-fixes).
- lib/dim: Fix -Wunused-const-variable warnings (bsc#1174852).
- lib: dimlib: fix help text typos (bsc#1174852).
- lib: logic_pio: Add logic_pio_unregister_range() (bsc#1174658).
- lib: logic_pio: Avoid possible overlap for unregistering regions (bsc#1174658).
- lib: logic_pio: Fix RCU usage (bsc#1174658).
- linux/dim: Add completions count to dim_sample (bsc#1174852).
- linux/dim: Fix overflow in dim calculation (bsc#1174852).
- linux/dim: Move implementation to .c files (bsc#1174852).
- linux/dim: Move logic to dim.h (bsc#1174852).
- linux/dim: Remove 'net' prefix from internal DIM members (bsc#1174852).
- linux/dim: Rename externally exposed macros (bsc#1174852).
- linux/dim: Rename externally used net_dim members (bsc#1174852).
- linux/dim: Rename net_dim_sample() to net_dim_update_sample() (bsc#1174852).
- liquidio: Fix wrong return value in cn23xx_get_pf_num() (git-fixes).
- llc: make sure applications use ARPHRD_ETHER (networking-stable-20_07_17).
- mac80211: mesh: Free ie data when leaving mesh (git-fixes).
- mac80211: mesh: Free pending skb when destroying a mpath (git-fixes).
- MAINTAINERS: add entry for Dynamic Interrupt Moderation (bsc#1174852).
- md-cluster: Fix potential error pointer dereference in resize_bitmaps() (git-fixes).
- md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 (git-fixes).
- media: budget-core: Improve exception handling in budget_register() (git-fixes).
- media: exynos4-is: Add missed check for pinctrl_lookup_state() (git-fixes).
- media: firewire: Using uninitialized values in node_probe() (git-fixes).
- media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities() (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- mfd: arizona: Ensure 32k clock is put on driver unbind and error (git-fixes).
- mfd: dln2: Run event handler loop under spinlock (git-fixes).
- mfd: rk808: Fix RK818 ID template (bsc#1175412).
- mld: fix memory leak in ipv6_mc_destroy_dev() (networking-stable-20_06_28).
- mm: filemap: clear idle flag for writes (bsc#1175769).
- mm/migrate.c: add missing flush_dcache_page for non-mapped page migrate (git fixes (mm/migrate)).
- mm/mmu_notifier: use hlist_add_head_rcu() (git fixes (mm/mmu_notifiers)).
- mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() (git fixes (mm/compaction)).
- mm/rmap.c: do not reuse anon_vma if we just want a copy (git fixes (mm/rmap)).
- mm/shmem.c: cast the type of unmap_start to u64 (git fixes (mm/shmem)).
- mm, thp: fix defrag setting if newline is not used (git fixes (mm/thp)).
- mm/vunmap: add cond_resched() in vunmap_pmd_range (bsc#1175654 ltc#184617).
- mtd: spi-nor: Fix an error code in spi_nor_read_raw() (bsc#1175413).
- mtd: spi-nor: fix kernel-doc for spi_nor::info (bsc#1175414).
- mtd: spi-nor: fix kernel-doc for spi_nor::reg_proto (bsc#1175415).
- mtd: spi-nor: fix silent truncation in spi_nor_read_raw() (bsc#1175416).
- mwifiex: Prevent memory corruption handling keys (git-fixes).
- net: Added pointer check for dst-&gt;ops-&gt;neigh_lookup in dst_neigh_lookup_skb (git-fixes).
- net: bridge: enfore alignment for ethernet address (networking-stable-20_06_28).
- net: core: reduce recursion limit value (networking-stable-20_06_28).
- net: Do not clear the sock TX queue in sk_set_socket() (networking-stable-20_06_28).
- net: dsa: b53: check for timeout (git-fixes).
- net: dsa: bcm_sf2: Fix node reference count (git-fixes).
- net: ena: Add first_interrupt field to napi struct (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: add support for reporting of packet drops (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool (bsc#1174852).
- net: ena: allow setting the hash function without changing the key (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function set fails (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when busy-polling (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz (bsc#1174852).
- net: ena: change num_queues to num_io_queues for clarity and consistency (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: Change WARN_ON expression in ena_del_napi_in_range() (bsc#1174852).
- net: ena: clean up indentation issue (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64 (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set() (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in comments (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in ena_com.h macros (bsc#1174852).
- net: ena: cosmetic: rename ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: enable support of rss hash key and function changes (bsc#1174852).
- net: ena: enable the interrupt_moderation in driver_supported_features (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue (bsc#1174852).
- net: ena: ethtool: get_channels: use combined only (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc (bsc#1174852).
- net: ena: ethtool: support set_channels callback (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function() (bsc#1174852).
- net: ena: fix incorrect setting of the number of msix vectors (bsc#1174852).
- net: ena: fix incorrect update of intr_delay_resolution (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors (bsc#1174852).
- net: ena: fix update of interrupt moderation register (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in ena_init_napi_in_range (bsc#1174852).
- net: ena: implement XDP drop support (bsc#1174852).
- net: ena: Implement XDP_TX action (bsc#1174852).
- net: ena: make ethtool -l show correct max number of queues (bsc#1174852).
- net: ena: Make missed_tx stat incremental (bsc#1083548).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: move llq configuration from ena_probe to ena_device_init() (bsc#1174852).
- net: ena: multiple queue creation related cleanups (bsc#1174852).
- net: ena: Prevent reset after device destruction (bsc#1083548).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: remove all old adaptive rx interrupt moderation code from ena_com (bsc#1174852).
- net: ena: remove code duplication in ena_com_update_nonadaptive_moderation_interval _*() (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: remove ena_restore_ethtool_params() and relevant fields (bsc#1174852).
- net: ena: remove old adaptive interrupt moderation code from ena_netdev (bsc#1174852).
- net: ena: remove redundant print of number of queues (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key' (bsc#1174852).
- net: ena: remove set but not used variable 'rx_ring' (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform (bsc#1174852).
- net: ena: Select DIMLIB for ENA_ETHERNET (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution() (bsc#1174852).
- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: switch to dim algorithm for rx adaptive interrupt moderation (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface (bsc#1174852).
- net: ena: xdp: update napi budget for DROP and ABORTED (bsc#1174852).
- net: ena: xdp: XDP_TX: fix memory leak (bsc#1174852).
- net: ethernet: aquantia: Fix wrong return value (git-fixes).
- net: ethernet: broadcom: have drivers select DIMLIB as needed (bsc#1174852).
- net: ethernet: stmmac: Disable hardware multicast filter (git-fixes).
- net: fec: correct the error path for regulator disable in probe (git-fixes).
- netfilter: x_tables: add counters allocation wrapper (git-fixes).
- netfilter: x_tables: cap allocations at 512 mbyte (git-fixes).
- netfilter: x_tables: limit allocation requests for blob rule heads (git-fixes).
- net: Fix a documentation bug wrt. ip_unprivileged_port_start (git-fixes). (SLES tuning guide refers to ip-sysctl.txt.)
- net: fix memleak in register_netdevice() (networking-stable-20_06_28).
- net: Fix the arp error in some cases (networking-stable-20_06_28).
- net: gre: recompute gre csum for sctp over gre tunnels (git-fixes).
- net: hns3: add autoneg and change speed support for fibre port (bsc#1174070).
- net: hns3: add support for FEC encoding control (bsc#1174070).
- net: hns3: add support for multiple media type (bsc#1174070).
- net: hns3: fix a not link up issue when fibre port supports autoneg (bsc#1174070).
- net: hns3: fix for FEC configuration (bsc#1174070).
- net: hns3: fix port capbility updating issue (bsc#1174070).
- net: hns3: fix port setting handle for fibre port (bsc#1174070).
- net: hns3: fix selftest fail issue for fibre port with autoneg on (bsc#1174070).
- net: hns3: restore the MAC autoneg state after reset (bsc#1174070).
- net: increment xmit_recursion level in dev_direct_xmit() (networking-stable-20_06_28).
- net: ip6_gre: Request headroom in __gre6_xmit() (git-fixes).
- net: lan78xx: add missing endpoint sanity check (git-fixes).
- net: lan78xx: fix transfer-buffer memory leak (git-fixes).
- net: make symbol 'flush_works' static (git-fixes).
- net/mlx5e: vxlan: Use RCU for vxlan table lookup (git-fixes).
- net: mvpp2: fix memory leak in mvpp2_rx (git-fixes).
- net: netsec: Fix signedness bug in netsec_probe() (bsc#1175417).
- net: netsec: initialize tx ring on ndo_open (bsc#1175418).
- net: phy: Check harder for errors in get_phy_id() (bsc#1111666).
- net: qcom/emac: add missed clk_disable_unprepare in error path of emac_clks_phase1_init (git-fixes).
- net: Set fput_needed iff FDPUT_FPUT is set (git-fixes).
- net: socionext: Fix a signedness bug in ave_probe() (bsc#1175419).
- net: socionext: replace napi_alloc_frag with the netdev variant on init (bsc#1175420).
- net: spider_net: Fix the size used in a 'dma_free_coherent()' call (git-fixes).
- net: stmmac: dwmac1000: provide multicast filter fallback (git-fixes).
- net: stmmac: Fix RX packet size &gt; 8191 (git-fixes).
- net: udp: Fix wrong clean up for IS_UDPLITE macro (git-fixes).
- net: update net_dim documentation after rename (bsc#1174852).
- net: usb: ax88179_178a: fix packet alignment padding (networking-stable-20_06_28).
- net: usb: qmi_wwan: add support for Quectel EG95 LTE modem (networking-stable-20_07_17).
- netvsc: unshare skb in VF rx handler (git-fixes).
- nfc: nci: add missed destroy_workqueue in nci_register_device (git-fixes).
- ntb: Fix an error in get link status (git-fixes).
- ntb_netdev: fix sleep time mismatch (git-fixes).
- ntb: ntb_transport: Use scnprintf() for avoiding potential buffer overflow (git-fixes).
- nvme: fix possible deadlock when I/O is blocked (git-fixes).
- nvme-multipath: do not fall back to __nvme_find_path() for non-optimized paths (bsc#1172108).
- nvme-multipath: fix logic for non-optimized paths (bsc#1172108).
- nvme-multipath: round-robin: eliminate 'fallback' variable (bsc#1172108).
- nvme: multipath: round-robin: fix single non-optimized path case (bsc#1172108).
- obsolete_kmp: provide newer version than the obsoleted one (boo#1170232).
- ocfs2: add trimfs dlm lock resource (bsc#1175228).
- ocfs2: add trimfs lock to avoid duplicated trims in cluster (bsc#1175228).
- ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
- ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
- ocfs2: change slot number type s16 to u16 (bsc#1175786).
- ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
- ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
- ocfs2: fix remounting needed after setfacl command (bsc#1173954).
- ocfs2: fix the application IO timeout when fstrim is running (bsc#1175228).
- ocfs2: fix value of OCFS2_INVALID_SLOT (bsc#1175767).
- ocfs2: load global_inode_alloc (bsc#1172963).
- ocfs2: load global_inode_alloc (bsc#1172963).
- omapfb: dss: Fix max fclk divider for omap36xx (bsc#1113956)
- openvswitch: Prevent kernel-infoleak in ovs_ct_put_key() (git-fixes).
- PCI/ASPM: Add missing newline in sysfs 'policy' (git-fixes).
- PCI: dwc: Move interrupt acking into the proper callback (bsc#1175666).
- PCI: Fix pci_cfg_wait queue locking problem (git-fixes).
- PCI: Fix 'try' semantics of bus and slot reset (git-fixes).
- PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context() (git-fixes).
- PCI: hv: Fix a timing issue which causes kdump to fail occasionally (bsc#1172871, bsc#1172872, git-fixes).
- PCI: Release IVRS table in AMD ACS quirk (git-fixes).
- PCI: switchtec: Add missing __iomem and __user tags to fix sparse warnings (git-fixes).
- PCI: switchtec: Add missing __iomem tag to fix sparse warnings (git-fixes).
- phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked (git-fixes).
- pinctrl: single: fix function name in documentation (git-fixes).
- pinctrl-single: fix pcs_parse_pinconf() return value (git-fixes).
- platform/x86: intel-hid: Fix return value check in check_acpi_dev() (git-fixes).
- platform/x86: intel-vbtn: Fix return value check in check_acpi_dev() (git-fixes).
- PM / CPU: replace raw_notifier with atomic_notifier (git fixes (kernel/pm)).
- PM / devfreq: rk3399_dmc: Add missing of_node_put() (bsc#1175668).
- PM / devfreq: rk3399_dmc: Disable devfreq-event device when fails.
- PM / devfreq: rk3399_dmc: Fix kernel oops when rockchip,pmu is absent (bsc#1175668).
- PM: sleep: core: Fix the handling of pending runtime resume requests (git-fixes).
- powerpc/64s: Do not init FSCR_DSCR in __init_FSCR() (bsc#1065729).
- powerpc/64s: Fix early_init_mmu section mismatch (bsc#1065729).
- powerpc: Allow 4224 bytes of stack expansion for the signal frame (bsc#1065729).
- powerpc/book3s64/pkeys: Use PVR check instead of cpu feature (bsc#1065729).
- powerpc/boot: Fix CONFIG_PPC_MPC52XX references (bsc#1065729).
- powerpc/eeh: Fix pseries_eeh_configure_bridge() (bsc#1174689).
- powerpc/nvdimm: Use HCALL error as the return value (bsc#1175284).
- powerpc/nvdimm: use H_SCM_QUERY hcall on H_OVERLAP error (bsc#1175284).
- powerpc/perf: Fix missing is_sier_aviable() during build (bsc#1065729).
- powerpc/pseries: Do not initiate shutdown when system is running on UPS (bsc#1175440 ltc#187574).
- powerpc/pseries/hotplug-cpu: Remove double free in error path (bsc#1065729).
- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death (bsc#1085030 ltC#165630).
- powerpc/pseries: PCIE PHB reset (bsc#1174689).
- powerpc/pseries: remove cede offline state for CPUs (bsc#1065729).
- powerpc/rtas: do not online CPUs for partition suspend (bsc#1065729).
- powerpc/vdso: Fix vdso cpu truncation (bsc#1065729).
- power: supply: check if calc_soc succeeded in pm860x_init_battery (git-fixes).
- propagate_one(): mnt_set_mountpoint() needs mount_lock (bsc#1174841).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- pwm: bcm-iproc: handle clk_get_rate() return (git-fixes).
- rds: Prevent kernel-infoleak in rds_notify_queue_get() (git-fixes).
- regulator: gpio: Honor regulator-boot-on property (git-fixes).
- Revert 'ALSA: hda: call runtime_allow() for all hda controllers' (bsc#1111666).
- Revert 'drm/amdgpu: Fix NULL dereference in dpm sysfs handlers' (bsc#1113956) 	* refresh for context changes
- Revert 'ocfs2: avoid inode removal while nfsd is accessing it' This reverts commit 9e096c72476eda333a9998ff464580c00ff59c83.
- Revert 'ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).' This reverts commit 0bf6e248f93736b3f17f399b4a8f64ffa30d371e.
- Revert 'ocfs2: load global_inode_alloc (bsc#1172963).' This reverts commit fc476497b53f967dc615b9cbad9427ba3107b5c4.
- Revert 'scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe' (bsc#1171688 bsc#1174003).
- Revert 'scsi: qla2xxx: Fix crash on qla2x00_mailbox_command' (bsc#1171688 bsc#1174003).
- Revert 'xen/balloon: Fix crash when ballooning on x86 32 bit PAE' (bsc#1065600).
- rocker: fix incorrect error handling in dma_rings_init (networking-stable-20_06_28).
- rpm/check-for-config-changes: Ignore CONFIG_CC_VERSION_TEXT
- rpm/check-for-config-changes: Ignore CONFIG_LD_VERSION
- rpm/constraints.in: Increase memory for kernel-docs References: https://build.opensuse.org/request/show/792664
- rpm: drop execute permissions on source files Sometimes a source file with execute permission appears in upstream repository and makes it into our kernel-source packages. This is caught by OBS build checks and may even result in build failures. Sanitize the source tree by removing execute permissions from all C source and header files.
- rpm/kabi.pl: account for namespace field being moved last Upstream is moving the namespace field in Module.symvers last in order to preserve backwards compatibility with kmod tools (depmod, etc). Fix the kabi.pl script to expect the namespace field last. Since split() ignores trailing empty fields and delimeters, switch to using tr to count how many fields/tabs are in a line. Also, in load_symvers(), pass LIMIT of -1 to split() so it does not strip trailing empty fields, as namespace is an optional field.
- rpm/kernel-binary.spec.in: do not run klp-symbols for configs with no modules Starting with 5.8-rc1, s390x/zfcpdump builds fail because rpm/klp-symbols script does not find .tmp_versions directory. This is missing because s390x/zfcpdump is built without modules (CONFIG_MODULES disabled). As livepatching cannot work without modules, the cleanest solution is setting %klp_symbols to 0 if CONFIG_MODULES is disabled. (We cannot simply add another condition to the place where %klp_symbols is set as it can be already set to 1 from prjconf.)
- rpm/kernel-binary.spec.in: restrict livepatch metapackage to default flavor It has been reported that the kernel-*-livepatch metapackage got erroneously enabled for SLE15-SP3's new -preempt flavor, leading to a unresolvable dependency to a non-existing kernel-livepatch-x.y.z-preempt package. As SLE12 and SLE12-SP1 have run out of livepatching support, the need to build said metapackage for the -xen flavor is gone and the only remaining flavor for which they're still wanted is -default. Restrict the build of the kernel-*-livepatch metapackage to the -default flavor.
- rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup Co-Authored-By: Adam Spiers &lt;aspiers@suse.com&gt;
- rpm/kernel-obs-build.spec.in: Enable overlayfs Overlayfs is needed for podman or docker builds when no more specific driver can be used (like lvm or btrfs). As the default build fs is ext4 currently, we need overlayfs kernel modules to be available.
- rpm/kernel-source.spec.in: Add obsolete_rebuilds (boo#1172073).
- rpm/mkspec-dtb: add mt76 based dtb package
- rpm/package-descriptions: garbege collection remove old ARM and Xen flavors.
- rtlwifi: rtl8192cu: Remove uninitialized_var() usage (git-fixes).
- rtnetlink: Fix memory(net_device) leak when -&gt;newlink fails (git-fixes).
- s390, dcssblk: kaddr and pfn can be NULL to -&gt;direct_access() (bsc#1174873).
- sched: consistently handle layer3 header accesses in the presence of VLANs (networking-stable-20_07_17).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1112178).
- scripts/git_sort/git_sort.py: add bluetooth/bluetooth-next.git repository
- scsi: lpfc: Add and rename a whole bunch of function parameter descriptions (bsc#1171558 bsc#1136666).
- scsi: lpfc: Add description for lpfc_release_rpi()'s 'ndlpl param (bsc#1171558 bsc#1136666).
- scsi: lpfc: Add missing misc_deregister() for lpfc_init() (bsc#1171558 bsc#1136666).
- scsi: lpfc: Ensure variable has the same stipulations as code using it (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix a bunch of kerneldoc misdemeanors (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix FCoE speed reporting (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix kerneldoc parameter formatting/misnaming/missing issues (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix LUN loss after cable pull (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix no message shown for lpfc_hdw_queue out of range value (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix oops when unloading driver while running mds diags (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix retry of PRLI when status indicates its unsupported (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix RSCN timeout due to incorrect gidft counter (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix some function parameter descriptions (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix typo in comment for ULP (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix-up around 120 documentation issues (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix-up formatting/docrot where appropriate (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix validation of bsg reply lengths (bsc#1171558 bsc#1136666).
- scsi: lpfc: NVMe remote port devloss_tmo from lldd (bsc#1171558 bsc#1136666 bsc#1173060).
- scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying targetport (bsc#1171558 bsc#1136666).
- scsi: lpfc: Provide description for lpfc_mem_alloc()'s 'align' param (bsc#1171558 bsc#1136666).
- scsi: lpfc: Quieten some printks (bsc#1171558 bsc#1136666).
- scsi: lpfc: Remove unused variable 'pg_addr' (bsc#1171558 bsc#1136666).
- scsi: lpfc: Update lpfc version to 12.8.0.3 (bsc#1171558 bsc#1136666).
- scsi: lpfc: Use __printf() format notation (bsc#1171558 bsc#1136666).
- scsi: dh: Add Fujitsu device to devinfo and dh lists (bsc#1174026).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value 1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in header files (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files (bsc#1171688 bsc#1174003). 
- scsi: qla2xxx: Fix failure message in qlt_disable_vha() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688 bsc#1174003).
- scsi: smartpqi: add bay identifier (bsc#1172418).
- scsi: smartpqi: add gigabyte controller (bsc#1172418).
- scsi: smartpqi: add id support for SmartRAID 3152-8i (bsc#1172418).
- scsi: smartpqi: add inquiry timeouts (bsc#1172418).
- scsi: smartpqi: add module param for exposure order (bsc#1172418).
- scsi: smartpqi: add module param to hide vsep (bsc#1172418).
- scsi: smartpqi: add new pci ids (bsc#1172418).
- scsi: smartpqi: add pci ids for fiberhome controller (bsc#1172418).
- scsi: smartpqi: add RAID bypass counter (bsc#1172418).
- scsi: smartpqi: add sysfs entries (bsc#1172418).
- scsi: smartpqi: Align driver syntax with oob (bsc#1172418).
- scsi: smartpqi: avoid crashing kernel for controller issues (bsc#1172418).
- scsi: smartpqi: bump version (bsc#1172418).
- scsi: smartpqi: bump version (bsc#1172418).
- scsi: smartpqi: bump version to 1.2.16-010 (bsc#1172418).
- scsi: smartpqi: change TMF timeout from 60 to 30 seconds (bsc#1172418).
- scsi: smartpqi: correct hang when deleting 32 lds (bsc#1172418).
- scsi: smartpqi: correct REGNEWD return status (bsc#1172418).
- scsi: smartpqi: correct syntax issue (bsc#1172418).
- scsi: smartpqi: fix call trace in device discovery (bsc#1172418).
- scsi: smartpqi: fix controller lockup observed during force reboot (bsc#1172418).
- scsi: smartpqi: fix LUN reset when fw bkgnd thread is hung (bsc#1172418).
- scsi: smartpqi: fix problem with unique ID for physical device (bsc#1172418).
- scsi: smartpqi: identify physical devices without issuing INQUIRY (bsc#1172418).
- scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask (bsc#1172418).
- scsi: smartpqi: remove unused manifest constants (bsc#1172418).
- scsi: smartpqi: Reporting unhandled SCSI errors (bsc#1172418).
- scsi: smartpqi: support device deletion via sysfs (bsc#1172418).
- scsi: smartpqi: update copyright (bsc#1172418).
- scsi: smartpqi: update logical volume size after expansion (bsc#1172418).
- scsi: smartpqi: Use scnprintf() for avoiding potential buffer overflow (bsc#1172418).
- scsi: storvsc: Correctly set number of hardware queues for IDE disk (git-fixes).
- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- sctp: Do not advertise IPv4 addresses if ipv6only is set on the socket (networking-stable-20_06_28).
- selftests/livepatch: fix mem leaks in test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: more verification in test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: simplify test-klp-callbacks busy target tests (bsc#1071995).
- serial: 8250: change lock order in serial8250_do_startup() (git-fixes).
- serial: pl011: Do not leak amba_ports entry on driver register error (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- Set VIRTIO_CONSOLE=y (bsc#1175667).
- sign also s390x kernel images (bsc#1163524)
- soc: fsl: qbman: allow registering a device link for the portal user (bsc#1174550).
- soc: fsl: qbman_portals: add APIs to retrieve the probing status (bsc#1174550).
- spi: davinci: Remove uninitialized_var() usage (git-fixes).
- spi: lantiq: fix: Rx overflow error in full duplex mode (git-fixes).
- spi: nxp-fspi: Ensure width is respected in spi-mem operations (bsc#1175421).
- spi: spi-fsl-dspi: Fix 16-bit word order in 32-bit XSPI mode (bsc#1175422).
- spi: spi-mem: export spi_mem_default_supports_op() (bsc#1175421).
- staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes).
- staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes).
- staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes).
- staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support (git-fixes).
- staging: fsl-dpaa2: ethsw: Add missing netdevice check (bsc#1175423).
- staging: rtl8192u: fix a dubious looking mask before a shift (git-fixes).
- staging/speakup: fix get_word non-space look-ahead (git-fixes).
- tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT (networking-stable-20_06_28).
- tcp: grow window for OOO packets only for SACK flows (networking-stable-20_06_28).
- tcp: make sure listeners do not initialize congestion-control state (networking-stable-20_07_17).
- tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key() (networking-stable-20_07_17).
- tcp: md5: do not send silly options in SYNCOOKIES (networking-stable-20_07_17).
- tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers (networking-stable-20_07_17).
- tracepoint: Mark __tracepoint_string's __used (git-fixes).
- tracing: Use trace_sched_process_free() instead of exit() for pid tracing (git-fixes).
- tty: hvc_console, fix crashes on parallel open/close (git-fixes).
- tty: serial: fsl_lpuart: add imx8qxp support (bsc#1175670).
- tty: serial: fsl_lpuart: free IDs allocated by IDA (bsc#1175670).
- USB: cdc-acm: rework notification_buffer resizing (git-fixes).
- USB: gadget: f_tcm: Fix some resource leaks in some error paths (git-fixes).
- USB: host: ohci-exynos: Fix error handling in exynos_ohci_probe() (git-fixes).
- USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge (git-fixes).
- USB: iowarrior: fix up report size handling for some devices (git-fixes).
- usbip: tools: fix module name in man page (git-fixes).
- USB: rename USB quirk to USB_QUIRK_ENDPOINT_IGNORE (git-fixes).
- USB: serial: cp210x: enable usb generic throttle/unthrottle (git-fixes).
- USB: serial: cp210x: re-enable auto-RTS on open (git-fixes).
- USB: serial: ftdi_sio: clean up receive processing (git-fixes).
- USB: serial: ftdi_sio: fix break and sysrq handling (git-fixes).
- USB: serial: ftdi_sio: make process-packet buffer unsigned (git-fixes).
- USB: serial: iuu_phoenix: fix led-activity helpers (git-fixes).
- USB: serial: qcserial: add EM7305 QDL product ID (git-fixes).
- USB: xhci: define IDs for various ASMedia host controllers (git-fixes).
- USB: xhci: Fix ASM2142/ASM3142 DMA addressing (git-fixes).
- USB: xhci: Fix ASMedia ASM1142 DMA addressing (git-fixes).
- USB: xhci-mtk: fix the failure of bandwidth allocation (git-fixes).
- VFS: Check rename_lock in lookup_fast() (bsc#1174734).
- video: fbdev: sm712fb: fix an issue about iounmap for a wrong address (git-fixes).
- video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call (git-fixes).
- virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial (git-fixes).
- vlan: consolidate VLAN parsing code and limit max parsing depth (networking-stable-20_07_17).
- vmxnet3: use correct tcp hdr length when packet is encapsulated (bsc#1175199).
- vt_compat_ioctl(): clean up, use compat_ptr() properly (git-fixes).
- vt: vt_ioctl: remove unnecessary console allocation checks (git-fixes).
- vxlan: Ensure FDB dump is performed under RCU (git-fixes).
- watchdog: f71808e_wdt: clear watchdog timeout occurred flag (bsc#1111666).
- watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options (bsc#1111666).
- watchdog: f71808e_wdt: remove use of wrong watchdog_info option (bsc#1111666).
- wl1251: fix always return 0 error (git-fixes).
- x86/hyperv: Create and use Hyper-V page definitions (git-fixes).
- x86/hyper-v: Fix overflow bug in fill_gva_list() (git-fixes).
- x86/hyperv: Make hv_vcpu_is_preempted() visible (git-fixes).
- x86/mce/inject: Fix a wrong assignment of i_mce.status (bsc#1112178).
- x86/unwind/orc: Fix ORC for newly forked tasks (bsc#1058115).
- xen/balloon: fix accounting in alloc_xenballooned_pages error path (bsc#1065600).
- xen/balloon: make the balloon wait interruptible (bsc#1065600).
- xfrm: check id proto in validate_tmpl() (git-fixes).
- xfrm: clean up xfrm protocol checks (git-fixes).
- xfrm_user: uncoditionally validate esn replay attribute struct (git-fixes).
- xfs: fix inode allocation block res calculation precedence (git-fixes).
- xfs: fix reflink quota reservation accounting error (git-fixes).
- xhci: Fix enumeration issue when setting max packet size for FS devices (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-09"/>
	<updated date="2020-09-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083548">SUSE bug 1083548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120163">SUSE bug 1120163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136666">SUSE bug 1136666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152148">SUSE bug 1152148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163524">SUSE bug 1163524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165629">SUSE bug 1165629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166965">SUSE bug 1166965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169790">SUSE bug 1169790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170232">SUSE bug 1170232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171688">SUSE bug 1171688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171988">SUSE bug 1171988</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172108">SUSE bug 1172108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172247">SUSE bug 1172247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172418">SUSE bug 1172418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172428">SUSE bug 1172428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172871">SUSE bug 1172871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172872">SUSE bug 1172872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172873">SUSE bug 1172873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172963">SUSE bug 1172963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173060">SUSE bug 1173060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173485">SUSE bug 1173485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173798">SUSE bug 1173798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173954">SUSE bug 1173954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174003">SUSE bug 1174003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174026">SUSE bug 1174026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174070">SUSE bug 1174070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174205">SUSE bug 1174205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174387">SUSE bug 1174387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174484">SUSE bug 1174484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174547">SUSE bug 1174547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174549">SUSE bug 1174549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174550">SUSE bug 1174550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174625">SUSE bug 1174625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174658">SUSE bug 1174658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174685">SUSE bug 1174685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174689">SUSE bug 1174689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174699">SUSE bug 1174699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174734">SUSE bug 1174734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174757">SUSE bug 1174757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174771">SUSE bug 1174771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174840">SUSE bug 1174840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174841">SUSE bug 1174841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174843">SUSE bug 1174843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174844">SUSE bug 1174844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174845">SUSE bug 1174845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174852">SUSE bug 1174852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174873">SUSE bug 1174873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174904">SUSE bug 1174904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174926">SUSE bug 1174926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174968">SUSE bug 1174968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175062">SUSE bug 1175062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175063">SUSE bug 1175063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175064">SUSE bug 1175064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175065">SUSE bug 1175065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175066">SUSE bug 1175066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175067">SUSE bug 1175067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175112">SUSE bug 1175112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175127">SUSE bug 1175127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175128">SUSE bug 1175128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175149">SUSE bug 1175149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175199">SUSE bug 1175199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175213">SUSE bug 1175213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175228">SUSE bug 1175228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175232">SUSE bug 1175232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175284">SUSE bug 1175284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175393">SUSE bug 1175393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175394">SUSE bug 1175394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175396">SUSE bug 1175396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175397">SUSE bug 1175397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175398">SUSE bug 1175398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175399">SUSE bug 1175399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175400">SUSE bug 1175400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175401">SUSE bug 1175401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175402">SUSE bug 1175402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175403">SUSE bug 1175403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175404">SUSE bug 1175404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175405">SUSE bug 1175405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175406">SUSE bug 1175406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175407">SUSE bug 1175407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175408">SUSE bug 1175408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175409">SUSE bug 1175409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175410">SUSE bug 1175410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175411">SUSE bug 1175411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175412">SUSE bug 1175412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175413">SUSE bug 1175413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175414">SUSE bug 1175414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175415">SUSE bug 1175415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175416">SUSE bug 1175416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175417">SUSE bug 1175417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175418">SUSE bug 1175418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175419">SUSE bug 1175419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175420">SUSE bug 1175420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175421">SUSE bug 1175421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175422">SUSE bug 1175422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175423">SUSE bug 1175423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175440">SUSE bug 1175440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175493">SUSE bug 1175493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175515">SUSE bug 1175515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175518">SUSE bug 1175518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175526">SUSE bug 1175526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175550">SUSE bug 1175550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175654">SUSE bug 1175654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175666">SUSE bug 1175666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175667">SUSE bug 1175667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175668">SUSE bug 1175668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175669">SUSE bug 1175669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175670">SUSE bug 1175670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175691">SUSE bug 1175691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175767">SUSE bug 1175767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175768">SUSE bug 1175768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175769">SUSE bug 1175769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175770">SUSE bug 1175770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175771">SUSE bug 1175771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175772">SUSE bug 1175772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175786">SUSE bug 1175786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175873">SUSE bug 1175873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176069">SUSE bug 1176069</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-10135/">CVE-2020-10135</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14314/">CVE-2020-14314</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14356/">CVE-2020-14356</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14386/">CVE-2020-14386</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16166/">CVE-2020-16166</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24394/">CVE-2020-24394</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497073" comment="reiserfs-kmp-default-4.12.14-197.56.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138310" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174154" ref_url="https://bugzilla.suse.com/1174154" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15719" ref_url="https://www.suse.com/security/cve/CVE-2020-15719/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2581-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007391.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-09"/>
	<updated date="2020-09-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1174154">SUSE bug 1174154</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-15719/">CVE-2020-15719</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497074" comment="openldap2-2.4.46-9.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497075" comment="openldap2-back-meta-2.4.46-9.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497076" comment="openldap2-back-perl-2.4.46-9.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497077" comment="openldap2-ppolicy-check-password-1.2-9.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138311" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175568" ref_url="https://bugzilla.suse.com/1175568" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8027" ref_url="https://www.suse.com/security/cve/CVE-2020-8027/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007454.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- CVE-2020-8027: openldap_update_modules_path.sh starts daemons unconditionally and uses fixed paths in /tmp (bsc#1175568).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-22"/>
	<updated date="2020-09-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175568">SUSE bug 1175568</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8027/">CVE-2020-8027</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497078" comment="openldap2-2.4.46-9.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497079" comment="openldap2-back-meta-2.4.46-9.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497080" comment="openldap2-back-perl-2.4.46-9.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497081" comment="openldap2-ppolicy-check-password-1.2-9.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138312" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1094244" ref_url="https://bugzilla.suse.com/1094244" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1154366" ref_url="https://bugzilla.suse.com/1154366" source="BUGZILLA"/>
		<reference ref_id="1167527" ref_url="https://bugzilla.suse.com/1167527" source="BUGZILLA"/>
		<reference ref_id="1168468" ref_url="https://bugzilla.suse.com/1168468" source="BUGZILLA"/>
		<reference ref_id="1169972" ref_url="https://bugzilla.suse.com/1169972" source="BUGZILLA"/>
		<reference ref_id="1171675" ref_url="https://bugzilla.suse.com/1171675" source="BUGZILLA"/>
		<reference ref_id="1171688" ref_url="https://bugzilla.suse.com/1171688" source="BUGZILLA"/>
		<reference ref_id="1171742" ref_url="https://bugzilla.suse.com/1171742" source="BUGZILLA"/>
		<reference ref_id="1173115" ref_url="https://bugzilla.suse.com/1173115" source="BUGZILLA"/>
		<reference ref_id="1174899" ref_url="https://bugzilla.suse.com/1174899" source="BUGZILLA"/>
		<reference ref_id="1175228" ref_url="https://bugzilla.suse.com/1175228" source="BUGZILLA"/>
		<reference ref_id="1175749" ref_url="https://bugzilla.suse.com/1175749" source="BUGZILLA"/>
		<reference ref_id="1175882" ref_url="https://bugzilla.suse.com/1175882" source="BUGZILLA"/>
		<reference ref_id="1176011" ref_url="https://bugzilla.suse.com/1176011" source="BUGZILLA"/>
		<reference ref_id="1176022" ref_url="https://bugzilla.suse.com/1176022" source="BUGZILLA"/>
		<reference ref_id="1176038" ref_url="https://bugzilla.suse.com/1176038" source="BUGZILLA"/>
		<reference ref_id="1176235" ref_url="https://bugzilla.suse.com/1176235" source="BUGZILLA"/>
		<reference ref_id="1176242" ref_url="https://bugzilla.suse.com/1176242" source="BUGZILLA"/>
		<reference ref_id="1176278" ref_url="https://bugzilla.suse.com/1176278" source="BUGZILLA"/>
		<reference ref_id="1176316" ref_url="https://bugzilla.suse.com/1176316" source="BUGZILLA"/>
		<reference ref_id="1176317" ref_url="https://bugzilla.suse.com/1176317" source="BUGZILLA"/>
		<reference ref_id="1176318" ref_url="https://bugzilla.suse.com/1176318" source="BUGZILLA"/>
		<reference ref_id="1176319" ref_url="https://bugzilla.suse.com/1176319" source="BUGZILLA"/>
		<reference ref_id="1176320" ref_url="https://bugzilla.suse.com/1176320" source="BUGZILLA"/>
		<reference ref_id="1176321" ref_url="https://bugzilla.suse.com/1176321" source="BUGZILLA"/>
		<reference ref_id="1176381" ref_url="https://bugzilla.suse.com/1176381" source="BUGZILLA"/>
		<reference ref_id="1176395" ref_url="https://bugzilla.suse.com/1176395" source="BUGZILLA"/>
		<reference ref_id="1176410" ref_url="https://bugzilla.suse.com/1176410" source="BUGZILLA"/>
		<reference ref_id="1176423" ref_url="https://bugzilla.suse.com/1176423" source="BUGZILLA"/>
		<reference ref_id="1176482" ref_url="https://bugzilla.suse.com/1176482" source="BUGZILLA"/>
		<reference ref_id="1176507" ref_url="https://bugzilla.suse.com/1176507" source="BUGZILLA"/>
		<reference ref_id="1176536" ref_url="https://bugzilla.suse.com/1176536" source="BUGZILLA"/>
		<reference ref_id="1176544" ref_url="https://bugzilla.suse.com/1176544" source="BUGZILLA"/>
		<reference ref_id="1176545" ref_url="https://bugzilla.suse.com/1176545" source="BUGZILLA"/>
		<reference ref_id="1176546" ref_url="https://bugzilla.suse.com/1176546" source="BUGZILLA"/>
		<reference ref_id="1176548" ref_url="https://bugzilla.suse.com/1176548" source="BUGZILLA"/>
		<reference ref_id="1176659" ref_url="https://bugzilla.suse.com/1176659" source="BUGZILLA"/>
		<reference ref_id="1176698" ref_url="https://bugzilla.suse.com/1176698" source="BUGZILLA"/>
		<reference ref_id="1176699" ref_url="https://bugzilla.suse.com/1176699" source="BUGZILLA"/>
		<reference ref_id="1176700" ref_url="https://bugzilla.suse.com/1176700" source="BUGZILLA"/>
		<reference ref_id="1176721" ref_url="https://bugzilla.suse.com/1176721" source="BUGZILLA"/>
		<reference ref_id="1176722" ref_url="https://bugzilla.suse.com/1176722" source="BUGZILLA"/>
		<reference ref_id="1176725" ref_url="https://bugzilla.suse.com/1176725" source="BUGZILLA"/>
		<reference ref_id="1176732" ref_url="https://bugzilla.suse.com/1176732" source="BUGZILLA"/>
		<reference ref_id="1176788" ref_url="https://bugzilla.suse.com/1176788" source="BUGZILLA"/>
		<reference ref_id="1176789" ref_url="https://bugzilla.suse.com/1176789" source="BUGZILLA"/>
		<reference ref_id="1176869" ref_url="https://bugzilla.suse.com/1176869" source="BUGZILLA"/>
		<reference ref_id="1176877" ref_url="https://bugzilla.suse.com/1176877" source="BUGZILLA"/>
		<reference ref_id="1176935" ref_url="https://bugzilla.suse.com/1176935" source="BUGZILLA"/>
		<reference ref_id="1176950" ref_url="https://bugzilla.suse.com/1176950" source="BUGZILLA"/>
		<reference ref_id="1176962" ref_url="https://bugzilla.suse.com/1176962" source="BUGZILLA"/>
		<reference ref_id="1176966" ref_url="https://bugzilla.suse.com/1176966" source="BUGZILLA"/>
		<reference ref_id="1176990" ref_url="https://bugzilla.suse.com/1176990" source="BUGZILLA"/>
		<reference ref_id="1177027" ref_url="https://bugzilla.suse.com/1177027" source="BUGZILLA"/>
		<reference ref_id="1177030" ref_url="https://bugzilla.suse.com/1177030" source="BUGZILLA"/>
		<reference ref_id="1177041" ref_url="https://bugzilla.suse.com/1177041" source="BUGZILLA"/>
		<reference ref_id="1177042" ref_url="https://bugzilla.suse.com/1177042" source="BUGZILLA"/>
		<reference ref_id="1177043" ref_url="https://bugzilla.suse.com/1177043" source="BUGZILLA"/>
		<reference ref_id="1177044" ref_url="https://bugzilla.suse.com/1177044" source="BUGZILLA"/>
		<reference ref_id="1177121" ref_url="https://bugzilla.suse.com/1177121" source="BUGZILLA"/>
		<reference ref_id="1177206" ref_url="https://bugzilla.suse.com/1177206" source="BUGZILLA"/>
		<reference ref_id="1177258" ref_url="https://bugzilla.suse.com/1177258" source="BUGZILLA"/>
		<reference ref_id="1177291" ref_url="https://bugzilla.suse.com/1177291" source="BUGZILLA"/>
		<reference ref_id="1177293" ref_url="https://bugzilla.suse.com/1177293" source="BUGZILLA"/>
		<reference ref_id="1177294" ref_url="https://bugzilla.suse.com/1177294" source="BUGZILLA"/>
		<reference ref_id="1177295" ref_url="https://bugzilla.suse.com/1177295" source="BUGZILLA"/>
		<reference ref_id="1177296" ref_url="https://bugzilla.suse.com/1177296" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0404" ref_url="https://www.suse.com/security/cve/CVE-2020-0404/" source="CVE"/>
		<reference ref_id="CVE-2020-0427" ref_url="https://www.suse.com/security/cve/CVE-2020-0427/" source="CVE"/>
		<reference ref_id="CVE-2020-0431" ref_url="https://www.suse.com/security/cve/CVE-2020-0431/" source="CVE"/>
		<reference ref_id="CVE-2020-0432" ref_url="https://www.suse.com/security/cve/CVE-2020-0432/" source="CVE"/>
		<reference ref_id="CVE-2020-14381" ref_url="https://www.suse.com/security/cve/CVE-2020-14381/" source="CVE"/>
		<reference ref_id="CVE-2020-14390" ref_url="https://www.suse.com/security/cve/CVE-2020-14390/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="CVE-2020-25284" ref_url="https://www.suse.com/security/cve/CVE-2020-25284/" source="CVE"/>
		<reference ref_id="CVE-2020-25641" ref_url="https://www.suse.com/security/cve/CVE-2020-25641/" source="CVE"/>
		<reference ref_id="CVE-2020-25643" ref_url="https://www.suse.com/security/cve/CVE-2020-25643/" source="CVE"/>
		<reference ref_id="CVE-2020-26088" ref_url="https://www.suse.com/security/cve/CVE-2020-26088/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007545.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-26088: Fixed an improper CAP_NET_RAW check in NFC socket creation could have been used by local attackers to create raw sockets, bypassing security mechanisms (bsc#1176990).
- CVE-2020-14390: Fixed an out-of-bounds memory write leading to memory corruption or a denial of service when changing screen size (bnc#1176235).
- CVE-2020-0432: Fixed an out of bounds write due to an integer overflow (bsc#1176721).
- CVE-2020-0427: Fixed an out of bounds read due to a use after free (bsc#1176725).
- CVE-2020-0431: Fixed an out of bounds write due to a missing bounds check (bsc#1176722).
- CVE-2020-0404: Fixed a linked list corruption due to an unusual root cause (bsc#1176423).
- CVE-2020-25212: Fixed getxattr kernel panic and memory overflow (bsc#1176381).
- CVE-2020-25284: Fixed an incomplete permission checking for access to rbd devices, which could have been leveraged by local attackers to map or unmap rbd block devices (bsc#1176482).
- CVE-2020-14381: Fixed requeue paths such that filp was valid when dropping the references (bsc#1176011).
- CVE-2019-25643: Fixed an improper input validation in ppp_cp_parse_cr function which could have led to memory corruption and read overflow (bsc#1177206).
- CVE-2020-25641: Fixed ann issue where length bvec was causing softlockups (bsc#1177121).

The following non-security bugs were fixed:

- 9p: Fix memory leak in v9fs_mount (git-fixes).
- ACPI: EC: Reference count query handlers under lock (git-fixes).
- airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE (git-fixes).
- airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE (git-fixes).
- airo: Fix read overflows sending packets (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- ALSA: firewire-digi00x: exclude Avid Adrenaline from detection (git-fixes).
- ALSA; firewire-tascam: exclude Tascam FE-8 from detection (git-fixes).
- ALSA: hda: Fix 2 channel swapping for Tegra (git-fixes).
- ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion NT950XCJ-X716A (git-fixes).
- ALSA: hda/realtek - Improved routing for Thinkpad X1 7th/8th Gen (git-fixes).
- altera-stapl: altera_get_note: prevent write beyond end of 'key' (git-fixes).
- ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter (git-fixes).
- arm64: KVM: Do not generate UNDEF when LORegion feature is present (jsc#SLE-4084).
- arm64: KVM: regmap: Fix unexpected switch fall-through (jsc#SLE-4084).
- asm-generic: fix -Wtype-limits compiler warnings (bsc#1112178).
- ASoC: kirkwood: fix IRQ error handling (git-fixes).
- ASoC: tegra: Fix reference count leaks (git-fixes).
- ath10k: fix array out-of-bounds access (git-fixes).
- ath10k: fix memory leak for tpc_stats_final (git-fixes).
- ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read (git-fixes).
- batman-adv: Add missing include for in_interrupt() (git-fixes).
- batman-adv: Avoid uninitialized chaddr when handling DHCP (git-fixes).
- batman-adv: bla: fix type misuse for backbone_gw hash indexing (git-fixes).
- batman-adv: bla: use netif_rx_ni when not in interrupt context (git-fixes).
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh (git-fixes).
- batman-adv: mcast/TT: fix wrongly dropped or rerouted packets (git-fixes).
- bcache: Convert pr_&lt;level&gt; uses to a more typical style (git fixes (block drivers)).
- bcache: fix overflow in offset_to_stripe() (git fixes (block drivers)).
- bcm63xx_enet: correct clock usage (git-fixes).
- bcm63xx_enet: do not write to random DMA channel on BCM6345 (git-fixes).
- bitfield.h: do not compile-time validate _val in FIELD_FIT (git fixes (bitfield)).
- blktrace: fix debugfs use after free (git fixes (block drivers)).
- block: add docs for gendisk / request_queue refcount helpers (git fixes (block drivers)).
- block: revert back to synchronous request_queue removal (git fixes (block drivers)).
- block: Use non _rcu version of list functions for tag_set_list (git-fixes).
- Bluetooth: Fix refcount use-after-free issue (git-fixes).
- Bluetooth: guard against controllers sending zero'd events (git-fixes).
- Bluetooth: Handle Inquiry Cancel error after Inquiry Complete (git-fixes).
- Bluetooth: L2CAP: handle l2cap config request during open state (git-fixes).
- Bluetooth: prefetch channel before killing sock (git-fixes).
- bnxt_en: Fix completion ring sizing with TPA enabled (networking-stable-20_07_29).
- bonding: use nla_get_u64 to extract the value for IFLA_BOND_AD_ACTOR_SYSTEM (git-fixes).
- btrfs: require only sector size alignment for parent eb bytenr (bsc#1176789).
- btrfs: tree-checker: fix the error message for transid error (bsc#1176788).
- ceph: do not allow setlease on cephfs (bsc#1177041).
- ceph: fix potential mdsc use-after-free crash (bsc#1177042).
- ceph: fix use-after-free for fsc-&gt;mdsc (bsc#1177043).
- ceph: handle zero-length feature mask in session messages (bsc#1177044).
- cfg80211: regulatory: reject invalid hints (bsc#1176699).
- cifs: Fix leak when handling lease break for cached root fid (bsc#1176242).
- cifs/smb3: Fix data inconsistent when punch hole (bsc#1176544).
- cifs/smb3: Fix data inconsistent when zero file range (bsc#1176536).
- clk: Add (devm_)clk_get_optional() functions (git-fixes).
- clk: rockchip: Fix initialization of mux_pll_src_4plls_p (git-fixes).
- clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED (git-fixes).
- clk/ti/adpll: allocate room for terminating null (git-fixes).
- clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() (git-fixes).
- cpufreq: intel_pstate: Fix EPP setting via sysfs in active mode (bsc#1176966).
- dmaengine: at_hdmac: check return value of of_find_device_by_node() in at_dma_xlate() (git-fixes).
- dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling (git-fixes).
- dmaengine: pl330: Fix burst length if burst size is smaller than bus width (git-fixes).
- dmaengine: tegra-apb: Prevent race conditions on channel's freeing (git-fixes).
- dmaengine: zynqmp_dma: fix burst length configuration (git-fixes).
- dm crypt: avoid truncating the logical block size (git fixes (block drivers)).
- dm: fix redundant IO accounting for bios that need splitting (git fixes (block drivers)).
- dm integrity: fix a deadlock due to offloading to an incorrect workqueue (git fixes (block drivers)).
- dm integrity: fix integrity recalculation that is improperly skipped (git fixes (block drivers)).
- dm: report suspended device during destroy (git fixes (block drivers)).
- dm rq: do not call blk_mq_queue_stopped() in dm_stop_queue() (git fixes (block drivers)).
- dm: use noio when sending kobject event (git fixes (block drivers)).
- dm writecache: add cond_resched to loop in persistent_memory_claim() (git fixes (block drivers)).
- dm writecache: correct uncommitted_block when discarding uncommitted entry (git fixes (block drivers)).
- dm zoned: assign max_io_len correctly (git fixes (block drivers)).
- drivers: char: tlclk.c: Avoid data race between init and interrupt handler (git-fixes).
- Drivers: hv: Specify receive buffer size using Hyper-V page size (bsc#1176877).
- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload (git-fixes).
- drivers/net/wan/x25_asy: Fix to make it work (networking-stable-20_07_29).
- drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic (git-fixes).
- drm/amd/display: fix ref count leak in amdgpu_drm_ioctl (git-fixes).
- drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails (git-fixes).
- drm/amdgpu: Fix buffer overflow in INFO ioctl (git-fixes).
- drm/amdgpu: Fix bug in reporting voltage for CIK (git-fixes).
- drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms (git-fixes).
- drm/amdgpu: increase atombios cmd timeout (git-fixes).
- drm/amdgpu/powerplay: fix AVFS handling with custom powerplay table (git-fixes).
- drm/amdgpu/powerplay/smu7: fix AVFS handling with custom powerplay table (git-fixes).
- drm/amdkfd: fix a memory leak issue (git-fixes).
- drm/amdkfd: Fix reference count leaks (git-fixes).
- drm/amd/pm: correct Vega10 swctf limit setting (git-fixes).
- drm/amd/pm: correct Vega12 swctf limit setting (git-fixes).
- drm/ast: Initialize DRAM type before posting GPU (bsc#1113956) 	* context changes
- drm/mediatek: Add exception handing in mtk_drm_probe() if component init fail (git-fixes).
- drm/mediatek: Add missing put_device() call in mtk_hdmi_dt_parse_pdata() (git-fixes).
- drm/msm/a5xx: Always set an OPP supported hardware value (git-fixes).
- drm/msm: add shutdown support for display platform_driver (git-fixes).
- drm/msm: Disable preemption on all 5xx targets (git-fixes).
- drm/msm: fix leaks if initialization fails (git-fixes).
- drm/msm/gpu: make ringbuffer readonly (bsc#1112178) 	* context changes
- drm/nouveau/debugfs: fix runtime pm imbalance on error (git-fixes).
- drm/nouveau/dispnv50: fix runtime pm imbalance on error (git-fixes).
- drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open (git-fixes).
- drm/nouveau: Fix reference count leak in nouveau_connector_detect (git-fixes).
- drm/nouveau: fix reference count leak in nv50_disp_atomic_commit (git-fixes).
- drm/nouveau: fix runtime pm imbalance on error (git-fixes).
- drm/omap: fix possible object reference leak (git-fixes).
- drm/radeon: fix multiple reference count leak (git-fixes).
- drm/radeon: Prefer lower feedback dividers (git-fixes).
- drm/radeon: revert 'Prefer lower feedback dividers' (git-fixes).
- drm/sun4i: Fix dsi dcs long write function (git-fixes).
- drm/sun4i: sun8i-csc: Secondary CSC register correction (git-fixes).
- drm/tve200: Stabilize enable/disable (git-fixes).
- drm/vc4/vc4_hdmi: fill ASoC card owner (git-fixes).
- e1000: Do not perform reset in reset_task if we are already down (git-fixes).
- EDAC: Fix reference count leaks (bsc#1112178).
- fbcon: prevent user font height or width change from causing (bsc#1112178) 	
- Fix error in kabi fix for: NFSv4: Fix OPEN / CLOSE race (bsc#1176950).
- ftrace: Move RCU is watching check after recursion check (git-fixes).
- ftrace: Setup correct FTRACE_FL_REGS flags for module (git-fixes).
- gma/gma500: fix a memory disclosure bug due to uninitialized bytes (git-fixes).
- gpio: tc35894: fix up tc35894 interrupt configuration (git-fixes).
- gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable() (git-fixes).
- gtp: fix Illegal context switch in RCU read-side critical section (git-fixes).
- gtp: fix use-after-free in gtp_newlink() (git-fixes).
- Hide e21a4f3a930c as of its duplication
- HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage() (git-fixes).
- hsr: use netdev_err() instead of WARN_ONCE() (bsc#1176659).
- hv_utils: drain the timesync packets on onchannelcallback (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale (bsc#1176877).
- hwmon: (applesmc) check status earlier (git-fixes).
- i2c: core: Do not fail PRP0001 enumeration when no ID table exist (git-fixes).
- i2c: cpm: Fix i2c_ram structure (git-fixes).
- ibmvnic: add missing parenthesis in do_reset() (bsc#1176700 ltc#188140).
- ieee802154/adf7242: check status of adf7242_read_reg (git-fixes).
- ieee802154: fix one possible memleak in ca8210_dev_com_init (git-fixes).
- iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak (git-fixes).
- iio: accel: kxsd9: Fix alignment of local buffer (git-fixes).
- iio:accel:mma7455: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:adc:ina2xx Fix timestamp alignment issue (git-fixes).
- iio: adc: mcp3422: fix locking on error path (git-fixes).
- iio: adc: mcp3422: fix locking scope (git-fixes).
- iio:adc:ti-adc081c Fix alignment and data leak issues (git-fixes).
- iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set (git-fixes).
- iio: improve IIO_CONCENTRATION channel type description (git-fixes).
- iio:light:ltr501 Fix timestamp alignment issue (git-fixes).
- iio:light:max44000 Fix timestamp alignment and prevent data leak (git-fixes).
- iio:magnetometer:ak8975 Fix alignment and data leak issues (git-fixes).
- include: add additional sizes (bsc#1094244 ltc#168122).
- iommu/amd: Fix IOMMU AVIC not properly update the is_run bit in IRTE (bsc#1177293).
- iommu/amd: Fix potential @entry null deref (bsc#1177294).
- iommu/amd: Print extended features in one line to fix divergent log levels (bsc#1176316).
- iommu/amd: Re-factor guest virtual APIC (de-)activation code (bsc#1177291).
- iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (bsc#1176317).
- iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (bsc#1177295).
- iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (bsc#1176318).
- iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate() (bsc#1177296).
- iommu/omap: Check for failure of a call to omap_iommu_dump_ctx (bsc#1176319).
- iommu/vt-d: Serialize IOMMU GCMD register modifications (bsc#1176320).
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
- KVM: arm64: Change 32-bit handling of VM system registers (jsc#SLE-4084).
- KVM: arm64: Cleanup __activate_traps and __deactive_traps for VHE and non-VHE (jsc#SLE-4084).
- KVM: arm64: Configure c15, PMU, and debug register traps on cpu load/put for VHE (jsc#SLE-4084).
- KVM: arm64: Defer saving/restoring 32-bit sysregs to vcpu load/put (jsc#SLE-4084).
- KVM: arm64: Defer saving/restoring 64-bit sysregs to vcpu load/put on VHE (jsc#SLE-4084).
- KVM: arm64: Directly call VHE and non-VHE FPSIMD enabled functions (jsc#SLE-4084).
- KVM: arm64: Do not deactivate VM on VHE systems (jsc#SLE-4084).
- KVM: arm64: Do not save the host ELR_EL2 and SPSR_EL2 on VHE systems (jsc#SLE-4084).
- KVM: arm64: Factor out fault info population and gic workarounds (jsc#SLE-4084).
- KVM: arm64: Fix order of vcpu_write_sys_reg() arguments (jsc#SLE-4084).
- KVM: arm64: Forbid kprobing of the VHE world-switch code (jsc#SLE-4084).
- KVM: arm64: Improve debug register save/restore flow (jsc#SLE-4084).
- KVM: arm64: Introduce framework for accessing deferred sysregs (jsc#SLE-4084).
- KVM: arm64: Introduce separate VHE/non-VHE sysreg save/restore functions (jsc#SLE-4084).
- KVM: arm64: Introduce VHE-specific kvm_vcpu_run (jsc#SLE-4084).
- KVM: arm64: Move common VHE/non-VHE trap config in separate functions (jsc#SLE-4084).
- KVM: arm64: Move debug dirty flag calculation out of world switch (jsc#SLE-4084).
- KVM: arm64: Move HCR_INT_OVERRIDE to default HCR_EL2 guest flag (jsc#SLE-4084).
- KVM: arm64: Move userspace system registers into separate function (jsc#SLE-4084).
- KVM: arm64: Prepare to handle deferred save/restore of 32-bit registers (jsc#SLE-4084).
- KVM: arm64: Prepare to handle deferred save/restore of ELR_EL1 (jsc#SLE-4084).
- KVM: arm64: Remove kern_hyp_va() use in VHE switch function (jsc#SLE-4084).
- KVM: arm64: Remove noop calls to timer save/restore from VHE switch (jsc#SLE-4084).
- KVM: arm64: Rework hyp_panic for VHE and non-VHE (jsc#SLE-4084).
- KVM: arm64: Rewrite sysreg alternatives to static keys (jsc#SLE-4084).
- KVM: arm64: Rewrite system register accessors to read/write functions (jsc#SLE-4084).
- KVM: arm64: Slightly improve debug save/restore functions (jsc#SLE-4084).
- KVM: arm64: Unify non-VHE host/guest sysreg save and restore functions (jsc#SLE-4084).
- KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE (jsc#SLE-4084).
- KVM: arm/arm64: Avoid vcpu_load for other vcpu ioctls than KVM_RUN (jsc#SLE-4084).
- KVM: arm/arm64: Avoid VGICv3 save/restore on VHE with no IRQs (jsc#SLE-4084).
- KVM: arm/arm64: Get rid of vcpu-&gt;arch.irq_lines (jsc#SLE-4084).
- KVM: arm/arm64: Handle VGICv3 save/restore from the main VGIC code on VHE (jsc#SLE-4084).
- KVM: arm/arm64: Move vcpu_load call after kvm_vcpu_first_run_init (jsc#SLE-4084).
- KVM: arm/arm64: Move VGIC APR save/restore to vgic put/load (jsc#SLE-4084).
- KVM: arm/arm64: Prepare to handle deferred save/restore of SPSR_EL1 (jsc#SLE-4084).
- KVM: arm/arm64: Remove leftover comment from kvm_vcpu_run_vhe (jsc#SLE-4084).
- KVM: introduce kvm_arch_vcpu_async_ioctl (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_fpu (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_mpstate (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_regs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_run (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_fpu (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_guest_debug (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_mpstate (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_regs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_sregs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_translate (jsc#SLE-4084).
- KVM: PPC: Fix compile error that occurs when CONFIG_ALTIVEC=n (jsc#SLE-4084).
- KVM: Prepare for moving vcpu_load/vcpu_put into arch specific code (jsc#SLE-4084).
- KVM: SVM: Add a dedicated INVD intercept routine (bsc#1112178).
- KVM: SVM: Fix disable pause loop exit/pause filtering capability on SVM (bsc#1176321).
- KVM: SVM: fix svn_pin_memory()'s use of get_user_pages_fast() (bsc#1112178).
- KVM: Take vcpu-&gt;mutex outside vcpu_load (jsc#SLE-4084).
- libceph: allow setting abort_on_full for rbd (bsc#1169972).
- libnvdimm: cover up nvdimm_security_ops changes (bsc#1171742).
- libnvdimm: cover up struct nvdimm changes (bsc#1171742).
- libnvdimm/security, acpi/nfit: unify zero-key for all security commands (bsc#1171742).
- libnvdimm/security: fix a typo (bsc#1171742 bsc#1167527).
- libnvdimm/security: Introduce a 'frozen' attribute (bsc#1171742).
- lib/raid6: use vdupq_n_u8 to avoid endianness warnings (git fixes (block drivers)).
- mac802154: tx: fix use-after-free (git-fixes).
- md: raid0/linear: fix dereference before null check on pointer mddev (git fixes (block drivers)).
- media: davinci: vpif_capture: fix potential double free (git-fixes).
- media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq() (git-fixes).
- media: smiapp: Fix error handling at NVM reading (git-fixes).
- media: ti-vpe: cal: Restrict DMA to avoid memory corruption (git-fixes).
- mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs (git-fixes).
- mfd: mfd-core: Protect against NULL call-back function pointer (git-fixes).
- mm: Avoid calling build_all_zonelists_init under hotplug context (bsc#1154366).
- mmc: cqhci: Add cqhci_deactivate() (git-fixes).
- mmc: sdhci-msm: Add retries when all tuning phases are found valid (git-fixes).
- mmc: sdhci-pci: Fix SDHCI_RESET_ALL for CQHCI for Intel GLK-based controllers (git-fixes).
- mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS models (git-fixes).
- mm/page_alloc.c: fix a crash in free_pages_prepare() (git fixes (mm/pgalloc)).
- mm/vmalloc.c: move 'area-&gt;pages' after if statement (git fixes (mm/vmalloc)).
- mtd: cfi_cmdset_0002: do not free cfi-&gt;cfiq in error path of cfi_amdstd_setup() (git-fixes).
- mtd: lpddr: Fix a double free in probe() (git-fixes).
- mtd: phram: fix a double free issue in error path (git-fixes).
- mtd: properly check all write ioctls for permissions (git-fixes).
- net: dsa: b53: Fix sparse warnings in b53_mmap.c (git-fixes).
- net: dsa: b53: Use strlcpy() for ethtool::get_strings (git-fixes).
- net: dsa: mv88e6xxx: fix 6085 frame mode masking (git-fixes).
- net: dsa: mv88e6xxx: Fix interrupt masking on removal (git-fixes).
- net: dsa: mv88e6xxx: Fix name of switch 88E6141 (git-fixes).
- net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge() (git-fixes).
- net: dsa: mv88e6xxx: Unregister MDIO bus on error path (git-fixes).
- net: dsa: qca8k: Allow overwriting CPU port setting (git-fixes).
- net: dsa: qca8k: Enable RXMAC when bringing up a port (git-fixes).
- net: dsa: qca8k: Force CPU port to its highest bandwidth (git-fixes).
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (git-fixes).
- net: fs_enet: do not call phy_stop() in interrupts (git-fixes).
- net: initialize fastreuse on inet_inherit_port (networking-stable-20_08_15).
- net: lan78xx: Bail out if lan78xx_get_endpoints fails (git-fixes).
- net: lan78xx: replace bogus endpoint lookup (networking-stable-20_08_08).
- net: lio_core: fix potential sign-extension overflow on large shift (git-fixes).
- net/mlx5: Add meaningful return codes to status_to_err function (git-fixes).
- net/mlx5: E-Switch, Use correct flags when configuring vlan (git-fixes).
- net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded (git-fixes).
- net: mvneta: fix mtu change on port without link (git-fixes).
- net-next: ax88796: Do not free IRQ in ax_remove() (already freed in ax_close()) (git-fixes).
- net/nfc/rawsock.c: add CAP_NET_RAW check (networking-stable-20_08_15).
- net: qca_spi: Avoid packet drop during initial sync (git-fixes).
- net: qca_spi: Make sure the QCA7000 reset is triggered (git-fixes).
- net: refactor bind_bucket fastreuse into helper (networking-stable-20_08_15).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: fix restoring of fallback changes (git-fixes).
- net/smc: fix sock refcounting in case of termination (git-fixes).
- net/smc: improve close of terminated socket (git-fixes).
- net/smc: Prevent kernel-infoleak in __smc_diag_dump() (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: tolerate future SMCD versions (git-fixes).
- net: stmmac: call correct function in stmmac_mac_config_rx_queues_routing() (git-fixes).
- net: stmmac: Disable ACS Feature for GMAC &gt;= 4 (git-fixes).
- net: stmmac: do not stop NAPI processing when dropping a packet (git-fixes).
- net: stmmac: dwmac4: fix flow control issue (git-fixes).
- net: stmmac: dwmac_lib: fix interchanged sleep/timeout values in DMA reset function (git-fixes).
- net: stmmac: dwmac-meson8b: Add missing boundary to RGMII TX clock array (git-fixes).
- net: stmmac: dwmac-meson8b: fix internal RGMII clock configuration (git-fixes).
- net: stmmac: dwmac-meson8b: fix setting the RGMII TX clock on Meson8b (git-fixes).
- net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on Meson8b/8m2 SoCs (git-fixes).
- net: stmmac: dwmac-meson8b: only configure the clocks in RGMII mode (git-fixes).
- net: stmmac: dwmac-meson8b: propagate rate changes to the parent clock (git-fixes).
- net: stmmac: Fix error handling path in 'alloc_dma_rx_desc_resources()' (git-fixes).
- net: stmmac: Fix error handling path in 'alloc_dma_tx_desc_resources()' (git-fixes).
- net: stmmac: rename dwmac4_tx_queue_routing() to match reality (git-fixes).
- net: stmmac: set MSS for each tx DMA channel (git-fixes).
- net: stmmac: Use correct values in TQS/RQS fields (git-fixes).
- net-sysfs: add a newline when printing 'tx_timeout' by sysfs (networking-stable-20_07_29).
- net: systemport: Fix software statistics for SYSTEMPORT Lite (git-fixes).
- net: systemport: Fix sparse warnings in bcm_sysport_insert_tsb() (git-fixes).
- net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() (git-fixes).
- net: ucc_geth - fix Oops when changing number of buffers in the ring (git-fixes).
- NFSv4: do not mark all open state for recovery when handling recallable state revoked flag (bsc#1176935).
- nvme-fc: set max_segments to lldd max value (bsc#1176038).
- nvme-pci: override the value of the controller's numa node (bsc#1176507).
- ocfs2: give applications more IO opportunities during fstrim (bsc#1175228).
- omapfb: fix multiple reference count leaks due to pm_runtime_get_sync (git-fixes).
- PCI/ASPM: Allow re-enabling Clock PM (git-fixes).
- PCI: Fix pci_create_slot() reference count leak (git-fixes).
- PCI: qcom: Add missing ipq806x clocks in PCIe driver (git-fixes).
- PCI: qcom: Add missing reset for ipq806x (git-fixes).
- PCI: qcom: Add support for tx term offset for rev 2.1.0 (git-fixes).
- PCI: qcom: Define some PARF params needed for ipq8064 SoC (git-fixes).
- PCI: rcar: Fix incorrect programming of OB windows (git-fixes).
- phy: samsung: s5pv210-usb2: Add delay after reset (git-fixes).
- pinctrl: mvebu: Fix i2c sda definition for 98DX3236 (git-fixes).
- powerpc/64s: Blacklist functions invoked on a trap (bsc#1094244 ltc#168122).
- powerpc/64s: Fix HV NMI vs HV interrupt recoverability test (bsc#1094244 ltc#168122).
- powerpc/64s: Fix unrelocated interrupt trampoline address test (bsc#1094244 ltc#168122).
- powerpc/64s: Include &lt;asm/nmi.h&gt; header file to fix a warning (bsc#1094244 ltc#168122).
- powerpc/64s: machine check do not trace real-mode handler (bsc#1094244 ltc#168122).
- powerpc/64s: sreset panic if there is no debugger or crash dump handlers (bsc#1094244 ltc#168122).
- powerpc/64s: system reset interrupt preserve HSRRs (bsc#1094244 ltc#168122).
- powerpc: Add cputime_to_nsecs() (bsc#1065729).
- powerpc/book3s64/radix: Add kernel command line option to disable radix GTSE (bsc#1055186 ltc#153436).
- powerpc/book3s64/radix: Fix boot failure with large amount of guest memory (bsc#1176022 ltc#187208).
- powerpc: Implement ftrace_enabled() helpers (bsc#1094244 ltc#168122).
- powerpc/init: Do not advertise radix during client-architecture-support (bsc#1055186 ltc#153436 ).
- powerpc/kernel: Cleanup machine check function declarations (bsc#1065729).
- powerpc/kernel: Enables memory hot-remove after reboot on pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Enable radix GTSE only if supported (bsc#1055186 ltc#153436).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests only (bsc#1177030 ltc#187588).
- powerpc/mm: Move book3s64 specifics in subdirectory mm/book3s64 (bsc#1176022 ltc#187208).
- powerpc/powernv: Remove real mode access limit for early allocations (bsc#1176022 ltc#187208).
- powerpc/prom: Enable Radix GTSE in cpu pa-features (bsc#1055186 ltc#153436).
- powerpc/pseries/le: Work around a firmware quirk (bsc#1094244 ltc#168122).
- powerpc/pseries: lift RTAS limit for radix (bsc#1176022 ltc#187208).
- powerpc/pseries: Limit machine check stack to 4GB (bsc#1094244 ltc#168122).
- powerpc/pseries: Machine check use rtas_call_unlocked() with args on stack (bsc#1094244 ltc#168122).
- powerpc/pseries: radix is not subject to RMA limit, remove it (bsc#1176022 ltc#187208).
- powerpc/pseries/ras: Avoid calling rtas_token() in NMI paths (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: Fix FWNMI_VALID off by one (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: fwnmi avoid modifying r3 in error case (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: fwnmi sreset should not interlock (bsc#1094244 ltc#168122).
- powerpc/traps: Do not trace system reset (bsc#1094244 ltc#168122).
- powerpc/traps: fix recoverability of machine check handling on book3s/32 (bsc#1094244 ltc#168122).
- powerpc/traps: Make unrecoverable NMIs die instead of panic (bsc#1094244 ltc#168122).
- powerpc/xmon: Use `dcbf` inplace of `dcbi` instruction for 64bit Book3S (bsc#1065729).
- power: supply: max17040: Correct voltage reading (git-fixes).
- rcu: Do RCU GP kthread self-wakeup from softirq and interrupt (git fixes (rcu)).
- regulator: push allocation in set_consumer_device_supply() out of lock (git-fixes).
- rpadlpar_io: Add MODULE_DESCRIPTION entries to kernel modules (bsc#1176869 ltc#188243).
- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- rpm/kernel-binary.spec.in: Also sign ppc64 kernels (jsc#SLE-15857 jsc#SLE-13618).
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115) To avoid the unnecessary key enrollment, when enrolling the signing key of the kernel package, '--ca-check' is added to mokutil so that mokutil will ignore the request if the CA of the signing key already exists in MokList or UEFI db. Since the macro, %_suse_kernel_module_subpackage, is only defined in a kernel module package (KMP), it's used to determine whether the %post script is running in a kernel package, or a kernel module package.
- rpm/kernel-source.spec.in: Also use bz compression (boo#1175882).
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698) The '-c' option wasn't passed down to %_kernel_module_package so the ueficert subpackage wasn't generated even if the certificate is specified in the spec file.
- rtc: ds1374: fix possible race condition (git-fixes).
- rtlwifi: rtl8192cu: Prevent leaking urb (git-fixes).
- rxrpc: Fix race between recvmsg and sendmsg on immediate call failure (networking-stable-20_08_08).
- rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA (networking-stable-20_07_29).
- s390/mm: fix huge pte soft dirty copying (git-fixes).
- s390/qeth: do not process empty bridge port events (git-fixes).
- s390/qeth: integrate RX refill worker with NAPI (git-fixes).
- s390/qeth: tolerate pre-filled RX buffer (git-fixes).
- scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del() (bsc#1174899).
- scsi: fnic: Do not call 'scsi_done()' for unhandled commands (bsc#1168468, bsc#1171675).
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (bsc#1176962 ltc#188304).
- scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling getpeername() (bsc#1177258).
- scsi: libfc: Fix for double free() (bsc#1174899).
- scsi: libfc: free response frame from GPN_ID (bsc#1174899).
- scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases (bsc#1174899).
- scsi: lpfc: Add dependency on CPU_FREQ (git-fixes).
- scsi: lpfc: Fix setting IRQ affinity with an empty CPU mask (git-fixes).
- scsi: qla2xxx: Fix regression on sparc64 (git-fixes).
- scsi: qla2xxx: Fix the return value (bsc#1171688).
- scsi: qla2xxx: Fix the size used in a 'dma_free_coherent()' call (bsc#1171688).
- scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba() (bsc#1171688).
- scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg() (bsc#1171688).
- scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1171688).
- scsi: qla2xxx: Log calling function name in qla2x00_get_sp_from_handle() (bsc#1171688).
- scsi: qla2xxx: Remove pci-dma-compat wrapper API (bsc#1171688).
- scsi: qla2xxx: Remove redundant variable initialization (bsc#1171688).
- scsi: qla2xxx: Remove superfluous memset() (bsc#1171688).
- scsi: qla2xxx: Simplify return value logic in qla2x00_get_sp_from_handle() (bsc#1171688).
- scsi: qla2xxx: Suppress two recently introduced compiler warnings (git-fixes).
- scsi: qla2xxx: Warn if done() or free() are called on an already freed srb (bsc#1171688).
- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for Tegra186 (git-fixes).
- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for Tegra210 (git-fixes).
- serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout (git-fixes).
- serial: 8250_omap: Fix sleeping function called from invalid context during probe (git-fixes).
- serial: 8250_port: Do not service RX FIFO if throttled (git-fixes).
- Set CONFIG_HAVE_KVM_VCPU_ASYNC_IOCTL=y (jsc#SLE-4084).
- SMB3: Honor persistent/resilient handle flags for multiuser mounts (bsc#1176546).
- SMB3: Honor 'seal' flag for multiuser mounts (bsc#1176545).
- SMB3: warn on confusing error scenario with sec=krb5 (bsc#1176548).
- stmmac: Do not access tx_q-&gt;dirty_tx before netif_tx_lock (git-fixes).
- tcp: apply a floor of 1 for RTT samples from TCP timestamps (networking-stable-20_08_08).
- thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430 (git-fixes).
- tools/power/cpupower: Fix initializer override in hsw_ext_cstates (bsc#1112178).
- USB: core: fix slab-out-of-bounds Read in read_descriptors (git-fixes).
- USB: dwc3: Increase timeout for CmdAct cleared by device controller (git-fixes).
- USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() (git-fixes).
- USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int (git-fixes).
- USB: Fix out of sync data toggle if a configured device is reconfigured (git-fixes).
- USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() (git-fixes).
- USB: gadget: f_ncm: Fix NDP16 datagram validation (git-fixes).
- USB: gadget: u_f: add overflow checks to VLA macros (git-fixes).
- USB: gadget: u_f: Unbreak offset calculation in VLAs (git-fixes).
- USB: hso: check for return value in hso_serial_common_create() (networking-stable-20_08_08).
- usblp: fix race between disconnect() and read() (git-fixes).
- USB: lvtest: return proper error code in probe (git-fixes).
- usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set (git-fixes).
- USB: qmi_wwan: add D-Link DWM-222 A2 device ID (git-fixes).
- USB: quirks: Add no-lpm quirk for another Raydium touchscreen (git-fixes).
- USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin notebook (git-fixes).
- USB: quirks: Ignore duplicate endpoint on Sound Devices MixPre-D (git-fixes).
- USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter (git-fixes).
- USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules (git-fixes).
- USB: serial: option: support dynamic Quectel USB compositions (git-fixes).
- USB: sisusbvga: Fix a potential UB casued by left shifting a negative value (git-fixes).
- USB: storage: Add unusual_uas entry for Sony PSZ drives (git-fixes).
- USB: typec: ucsi: acpi: Check the _DEP dependencies (git-fixes).
- USB: uas: Add quirk for PNY Pro Elite (git-fixes).
- USB: UAS: fix disconnect by unplugging a hub (git-fixes).
- USB: yurex: Fix bad gfp argument (git-fixes).
- vgacon: remove software scrollback support (bsc#1176278).
- video: fbdev: fix OOB read in vga_8planes_imageblit() (git-fixes).
- virtio-blk: free vblk-vqs in error path of virtblk_probe() (git fixes (block drivers)).
- vrf: prevent adding upper devices (git-fixes).
- vxge: fix return of a free'd memblock on a failed dma mapping (git-fixes).
- x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task (bsc#1112178).
- xen: do not reschedule in preemption off sections (bsc#1175749).
- xen/events: do not use chip_data for legacy IRQs (bsc#1065600).
- xen uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information (bsc#1065600).
- xhci: Do warm-reset when both CAS and XDEV_RESUME are set (git-fixes).
- yam: fix possible memory leak in yam_init_driver (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-13"/>
	<updated date="2020-10-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094244">SUSE bug 1094244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154366">SUSE bug 1154366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167527">SUSE bug 1167527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168468">SUSE bug 1168468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169972">SUSE bug 1169972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171675">SUSE bug 1171675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171688">SUSE bug 1171688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171742">SUSE bug 1171742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173115">SUSE bug 1173115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174899">SUSE bug 1174899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175228">SUSE bug 1175228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175749">SUSE bug 1175749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175882">SUSE bug 1175882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176011">SUSE bug 1176011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176022">SUSE bug 1176022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176038">SUSE bug 1176038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176235">SUSE bug 1176235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176242">SUSE bug 1176242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176278">SUSE bug 1176278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176316">SUSE bug 1176316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176317">SUSE bug 1176317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176318">SUSE bug 1176318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176319">SUSE bug 1176319</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176320">SUSE bug 1176320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176321">SUSE bug 1176321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176381">SUSE bug 1176381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176395">SUSE bug 1176395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176410">SUSE bug 1176410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176423">SUSE bug 1176423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176482">SUSE bug 1176482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176507">SUSE bug 1176507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176536">SUSE bug 1176536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176544">SUSE bug 1176544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176545">SUSE bug 1176545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176546">SUSE bug 1176546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176548">SUSE bug 1176548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176659">SUSE bug 1176659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176698">SUSE bug 1176698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176699">SUSE bug 1176699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176700">SUSE bug 1176700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176721">SUSE bug 1176721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176722">SUSE bug 1176722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176725">SUSE bug 1176725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176732">SUSE bug 1176732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176788">SUSE bug 1176788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176789">SUSE bug 1176789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176869">SUSE bug 1176869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176877">SUSE bug 1176877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176935">SUSE bug 1176935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176950">SUSE bug 1176950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176962">SUSE bug 1176962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176966">SUSE bug 1176966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176990">SUSE bug 1176990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177027">SUSE bug 1177027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177030">SUSE bug 1177030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177041">SUSE bug 1177041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177042">SUSE bug 1177042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177043">SUSE bug 1177043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177044">SUSE bug 1177044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177121">SUSE bug 1177121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177206">SUSE bug 1177206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177258">SUSE bug 1177258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177291">SUSE bug 1177291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177293">SUSE bug 1177293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177294">SUSE bug 1177294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177295">SUSE bug 1177295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177296">SUSE bug 1177296</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-0404/">CVE-2020-0404</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0427/">CVE-2020-0427</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0431/">CVE-2020-0431</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0432/">CVE-2020-0432</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14381/">CVE-2020-14381</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14390/">CVE-2020-14390</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25284/">CVE-2020-25284</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25641/">CVE-2020-25641</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25643/">CVE-2020-25643</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-26088/">CVE-2020-26088</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497082" comment="reiserfs-kmp-default-4.12.14-197.61.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138313" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1140683" ref_url="https://bugzilla.suse.com/1140683" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1174748" ref_url="https://bugzilla.suse.com/1174748" source="BUGZILLA"/>
		<reference ref_id="1175520" ref_url="https://bugzilla.suse.com/1175520" source="BUGZILLA"/>
		<reference ref_id="1176400" ref_url="https://bugzilla.suse.com/1176400" source="BUGZILLA"/>
		<reference ref_id="1176946" ref_url="https://bugzilla.suse.com/1176946" source="BUGZILLA"/>
		<reference ref_id="1177027" ref_url="https://bugzilla.suse.com/1177027" source="BUGZILLA"/>
		<reference ref_id="1177340" ref_url="https://bugzilla.suse.com/1177340" source="BUGZILLA"/>
		<reference ref_id="1177511" ref_url="https://bugzilla.suse.com/1177511" source="BUGZILLA"/>
		<reference ref_id="1177685" ref_url="https://bugzilla.suse.com/1177685" source="BUGZILLA"/>
		<reference ref_id="1177724" ref_url="https://bugzilla.suse.com/1177724" source="BUGZILLA"/>
		<reference ref_id="1177725" ref_url="https://bugzilla.suse.com/1177725" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-12352" ref_url="https://www.suse.com/security/cve/CVE-2020-12352/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007592.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724).
- CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' aka 'BadChoice' (bsc#1177725).
- CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted (bsc#1177511).


The following non-security bugs were fixed:

- drm/sun4i: mixer: Extend regmap max_register (git-fixes).
- i2c: meson: fix clock setting overwrite (git-fixes).
- iommu/vt-d: Correctly calculate agaw in domain_init() (bsc#1176400).
- mac80211: do not allow bigger VHT MPDUs than the hardware supports (git-fixes).
- macsec: avoid use-after-free in macsec_handle_frame() (git-fixes).
- mmc: core: do not set limits.discard_granularity as 0 (git-fixes).
- mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() (bsc#1177685).
- NFS: On fatal writeback errors, we need to call nfs_inode_remove_request() (bsc#1177340).
- NFS: Revalidate the file mapping on all fatal writeback errors (bsc#1177340).
- nvme: add a Identify Namespace Identification Descriptor list quirk (bsc#1174748). add two previous futile attempts to fix the bug to blacklist.conf
- nvme: Fix ctrl use-after-free during sysfs deletion (bsc#1174748).
- nvme: fix deadlock caused by ANA update wrong locking (bsc#1174748).
- nvme: fix possible io failures when removing multipathed ns (bsc#1174748).
- nvme: make nvme_identify_ns propagate errors back (bsc#1174748). Refresh:  - patches.suse/nvme-flush-scan_work-when-resetting-controller.patch
- nvme: make nvme_report_ns_ids propagate error back (bsc#1174748).
- nvme-multipath: do not reset on unknown status (bsc#1174748).
- nvme: Namepace identification descriptor list is optional (bsc#1174748).
- nvme: pass status to nvme_error_status (bsc#1174748).
- nvme-rdma: Avoid double freeing of async event data (bsc#1174748).
- nvme: return error from nvme_alloc_ns() (bsc#1174748).
- powerpc/dma: Fix dma_map_ops::get_required_mask (bsc#1065729).
- scsi-hisi-kabi-fixes.patch
- scsi-hisi-kabi-fixes.patch
- scsi: hisi_sas: Add debugfs ITCT file and add file operations (bsc#1140683).
- scsi: hisi_sas: Add manual trigger for debugfs dump (bsc#1140683).
- scsi: hisi_sas: Add missing seq_printf() call in hisi_sas_show_row_32() (bsc#1140683).
- scsi: hisi_sas: Change return variable type in phy_up_v3_hw() (bsc#1140683).
- scsi: hisi_sas: Correct memory allocation size for DQ debugfs (bsc#1140683).
- scsi: hisi_sas: Do some more tidy-up (bsc#1140683).
- scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO (bsc#1140683).
- scsi: hisi_sas: Fix type casting and missing static qualifier in debugfs code (bsc#1140683). Refresh:
- scsi-hisi_sas-Issue-internal-abort-on-all-relevant-q.patch
- scsi: hisi_sas: No need to check return value of debugfs_create functions (bsc#1140683). Update:
- scsi: hisi_sas: Some misc tidy-up (bsc#1140683).
- scsi: qla2xxx: Add IOCB resource tracking (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Add rport fields in debugfs (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Add SLER and PI control support (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Correct the check for sscanf() return value (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix buffer-buffer credit extraction error (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix crash on session cleanup with unload (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix I/O errors during LIP reset tests (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix I/O failures during remote port toggle testing (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix memory size truncation (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix MPI reset needed message (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix reset of MPI firmware (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Make tgt_port_database available in initiator mode (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Performance tweak (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Reduce duplicate code in reporting speed (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Remove unneeded variable 'rval' (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Setup debugfs entries for remote ports (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Update version to 10.02.00.102-k (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Update version to 10.02.00.103-k (bsc#1176946 bsc#1175520 bsc#1172538).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-20"/>
	<updated date="2020-10-20"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140683">SUSE bug 1140683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174748">SUSE bug 1174748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175520">SUSE bug 1175520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176400">SUSE bug 1176400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176946">SUSE bug 1176946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177027">SUSE bug 1177027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177340">SUSE bug 1177340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177511">SUSE bug 1177511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177685">SUSE bug 1177685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177724">SUSE bug 1177724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177725">SUSE bug 1177725</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12352/">CVE-2020-12352</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497083" comment="reiserfs-kmp-default-4.12.14-197.64.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138314" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1055014" ref_url="https://bugzilla.suse.com/1055014" source="BUGZILLA"/>
		<reference ref_id="1061843" ref_url="https://bugzilla.suse.com/1061843" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066382" ref_url="https://bugzilla.suse.com/1066382" source="BUGZILLA"/>
		<reference ref_id="1077428" ref_url="https://bugzilla.suse.com/1077428" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1131277" ref_url="https://bugzilla.suse.com/1131277" source="BUGZILLA"/>
		<reference ref_id="1134760" ref_url="https://bugzilla.suse.com/1134760" source="BUGZILLA"/>
		<reference ref_id="1170415" ref_url="https://bugzilla.suse.com/1170415" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1173432" ref_url="https://bugzilla.suse.com/1173432" source="BUGZILLA"/>
		<reference ref_id="1174748" ref_url="https://bugzilla.suse.com/1174748" source="BUGZILLA"/>
		<reference ref_id="1176354" ref_url="https://bugzilla.suse.com/1176354" source="BUGZILLA"/>
		<reference ref_id="1176485" ref_url="https://bugzilla.suse.com/1176485" source="BUGZILLA"/>
		<reference ref_id="1176560" ref_url="https://bugzilla.suse.com/1176560" source="BUGZILLA"/>
		<reference ref_id="1176713" ref_url="https://bugzilla.suse.com/1176713" source="BUGZILLA"/>
		<reference ref_id="1176723" ref_url="https://bugzilla.suse.com/1176723" source="BUGZILLA"/>
		<reference ref_id="1177086" ref_url="https://bugzilla.suse.com/1177086" source="BUGZILLA"/>
		<reference ref_id="1177101" ref_url="https://bugzilla.suse.com/1177101" source="BUGZILLA"/>
		<reference ref_id="1177271" ref_url="https://bugzilla.suse.com/1177271" source="BUGZILLA"/>
		<reference ref_id="1177281" ref_url="https://bugzilla.suse.com/1177281" source="BUGZILLA"/>
		<reference ref_id="1177410" ref_url="https://bugzilla.suse.com/1177410" source="BUGZILLA"/>
		<reference ref_id="1177411" ref_url="https://bugzilla.suse.com/1177411" source="BUGZILLA"/>
		<reference ref_id="1177470" ref_url="https://bugzilla.suse.com/1177470" source="BUGZILLA"/>
		<reference ref_id="1177687" ref_url="https://bugzilla.suse.com/1177687" source="BUGZILLA"/>
		<reference ref_id="1177719" ref_url="https://bugzilla.suse.com/1177719" source="BUGZILLA"/>
		<reference ref_id="1177740" ref_url="https://bugzilla.suse.com/1177740" source="BUGZILLA"/>
		<reference ref_id="1177749" ref_url="https://bugzilla.suse.com/1177749" source="BUGZILLA"/>
		<reference ref_id="1177750" ref_url="https://bugzilla.suse.com/1177750" source="BUGZILLA"/>
		<reference ref_id="1177753" ref_url="https://bugzilla.suse.com/1177753" source="BUGZILLA"/>
		<reference ref_id="1177754" ref_url="https://bugzilla.suse.com/1177754" source="BUGZILLA"/>
		<reference ref_id="1177755" ref_url="https://bugzilla.suse.com/1177755" source="BUGZILLA"/>
		<reference ref_id="1177766" ref_url="https://bugzilla.suse.com/1177766" source="BUGZILLA"/>
		<reference ref_id="1177855" ref_url="https://bugzilla.suse.com/1177855" source="BUGZILLA"/>
		<reference ref_id="1177856" ref_url="https://bugzilla.suse.com/1177856" source="BUGZILLA"/>
		<reference ref_id="1177861" ref_url="https://bugzilla.suse.com/1177861" source="BUGZILLA"/>
		<reference ref_id="1178003" ref_url="https://bugzilla.suse.com/1178003" source="BUGZILLA"/>
		<reference ref_id="1178027" ref_url="https://bugzilla.suse.com/1178027" source="BUGZILLA"/>
		<reference ref_id="1178166" ref_url="https://bugzilla.suse.com/1178166" source="BUGZILLA"/>
		<reference ref_id="1178185" ref_url="https://bugzilla.suse.com/1178185" source="BUGZILLA"/>
		<reference ref_id="1178187" ref_url="https://bugzilla.suse.com/1178187" source="BUGZILLA"/>
		<reference ref_id="1178188" ref_url="https://bugzilla.suse.com/1178188" source="BUGZILLA"/>
		<reference ref_id="1178202" ref_url="https://bugzilla.suse.com/1178202" source="BUGZILLA"/>
		<reference ref_id="1178234" ref_url="https://bugzilla.suse.com/1178234" source="BUGZILLA"/>
		<reference ref_id="1178330" ref_url="https://bugzilla.suse.com/1178330" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0430" ref_url="https://www.suse.com/security/cve/CVE-2020-0430/" source="CVE"/>
		<reference ref_id="CVE-2020-14351" ref_url="https://www.suse.com/security/cve/CVE-2020-14351/" source="CVE"/>
		<reference ref_id="CVE-2020-16120" ref_url="https://www.suse.com/security/cve/CVE-2020-16120/" source="CVE"/>
		<reference ref_id="CVE-2020-25285" ref_url="https://www.suse.com/security/cve/CVE-2020-25285/" source="CVE"/>
		<reference ref_id="CVE-2020-25656" ref_url="https://www.suse.com/security/cve/CVE-2020-25656/" source="CVE"/>
		<reference ref_id="CVE-2020-27673" ref_url="https://www.suse.com/security/cve/CVE-2020-27673/" source="CVE"/>
		<reference ref_id="CVE-2020-27675" ref_url="https://www.suse.com/security/cve/CVE-2020-27675/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007748.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bug fixes.


The following security bugs were fixed:

- CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766).
- CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485).
- CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723).
- CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086).
- CVE-2020-16120: Fixed a permissions issue in ovl_path_open() (bsc#1177470).
- CVE-2020-8694: Restricted energy meter to root access (bsc#1170415).
- CVE-2020-27673: Fixed an issue where rogue guests could have caused denial of service of Dom0 via high frequency events (XSA-332 bsc#1177411)
- CVE-2020-27675: Fixed a race condition in event handler which may crash dom0 (XSA-331 bsc#1177410).

The following non-security bugs were fixed:

- ALSA: bebob: potential info leak in hwdep_read() (git-fixes).
- ALSA: compress_offload: remove redundant initialization (git-fixes).
- ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).
- ALSA: core: pcm: simplify locking for timers (git-fixes).
- ALSA: core: timer: clarify operator precedence (git-fixes).
- ALSA: core: timer: remove redundant assignment (git-fixes).
- ALSA: ctl: Workaround for lockdep warning wrt card-&gt;ctl_files_rwlock (git-fixes).
- ALSA: hda - Do not register a cb func if it is registered already (git-fixes).
- ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes).
- ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes).
- ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes).
- ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes).
- ALSA: hda: use semicolons rather than commas to separate statements (git-fixes).
- ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes).
- ALSA: rawmidi: (cosmetic) align function parameters (git-fixes).
- ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes).
- ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes).
- ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes).
- ALSA: usb-audio: fix spelling mistake 'Frequence' -&gt; 'Frequency' (git-fixes).
- ASoC: qcom: lpass-cpu: fix concurrency issue (git-fixes).
- ASoC: qcom: lpass-platform: fix memory leak (git-fixes).
- ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() (git-fixes).
- ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path (git-fixes).
- ath10k: provide survey info as accumulated data (git-fixes).
- ath6kl: prevent potential array overflow in ath6kl_add_new_sta() (git-fixes).
- ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() (git-fixes).
- ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() (git-fixes).
- backlight: sky81452-backlight: Fix refcount imbalance on error (git-fixes).
- blk-mq: order adding requests to hctx-&gt;dispatch and checking SCHED_RESTART (bsc#1177750).
- block: ensure bdi-&gt;io_pages is always initialized (bsc#1177749).
- Bluetooth: MGMT: Fix not checking if BT_HS is enabled (git-fixes).
- Bluetooth: Only mark socket zapped after unlocking (git-fixes).
- bnxt: do not enable NAPI until rings are ready (networking-stable-20_09_11).
- bnxt_en: Check for zero dir entries in NVRAM (networking-stable-20_09_11).
- brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach (git-fixes).
- brcmfmac: check ndev pointer (git-fixes).
- brcmsmac: fix memory leak in wlc_phy_attach_lcnphy (git-fixes).
- btrfs: check the right error variable in btrfs_del_dir_entries_in_log (bsc#1177687).
- btrfs: do not force read-only after error in drop snapshot (bsc#1176354).
- btrfs: do not set the full sync flag on the inode during page release (bsc#1177687).
- btrfs: fix incorrect updating of log root tree (bsc#1177687).
- btrfs: fix race between page release and a fast fsync (bsc#1177687).
- btrfs: only commit delayed items at fsync if we are logging a directory (bsc#1177687).
- btrfs: only commit the delayed inode when doing a full fsync (bsc#1177687).
- btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations (bsc#1177856).
- btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode (bsc#1177855).
- btrfs: reduce contention on log trees when logging checksums (bsc#1177687).
- btrfs: release old extent maps during page release (bsc#1177687).
- btrfs: remove no longer needed use of log_writers for the log root tree (bsc#1177687).
- btrfs: remove root usage from can_overcommit (bsc#1131277).
- btrfs: stop incremening log_batch for the log root tree when syncing log (bsc#1177687).
- btrfs: take overcommit into account in inc_block_group_ro (bsc#1176560).
- btrfs: tree-checker: fix false alert caused by legacy btrfs root item (bsc#1177861).
- can: c_can: reg_map_{c,d}_can: mark as __maybe_unused (git-fixes).
- can: flexcan: flexcan_chip_stop(): add error handling and propagate error value (git-fixes).
- can: softing: softing_card_shutdown(): add braces around empty body in an 'if' statement (git-fixes).
- ceph: fix memory leak in ceph_cleanup_snapid_map() (bsc#1178234).
- ceph: map snapid to anonymous bdev ID (bsc#1178234).
- ceph: promote to unsigned long long before shifting (bsc#1178187).
- clk: at91: clk-main: update key before writing AT91_CKGR_MOR (git-fixes).
- clk: at91: remove the checking of parent_name (git-fixes).
- clk: bcm2835: add missing release if devm_clk_hw_register fails (git-fixes).
- clk: imx8mq: Fix usdhc parents order (git-fixes).
- coredump: fix crash when umh is disabled (bsc#1177753).
- crypto: algif_skcipher - EBUSY on aio should be an error (git-fixes).
- crypto: ccp - fix error handling (git-fixes).
- crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call (git-fixes).
- crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() (git-fixes).
- crypto: omap-sham - fix digcnt register handling with export/import (git-fixes).
- cxl: Rework error message for incompatible slots (bsc#1055014 git-fixes).
- cypto: mediatek - fix leaks in mtk_desc_ring_alloc (git-fixes).
- Disable ipa-clones dump for KMP builds (bsc#1178330) The feature is not really useful for KMP, and rather confusing, so let's disable it at building out-of-tree codes
- dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status (git-fixes).
- drm/amdgpu: prevent double kfree ttm-&gt;sg (git-fixes).
- drm/gma500: fix error check (git-fixes).
- drm/msm: Drop debug print in _dpu_crtc_setup_lm_bounds() (git-fixes).
- drm/nouveau/mem: guard against NULL pointer access in mem_del (git-fixes).
- EDAC/i5100: Fix error handling order in i5100_init_one() (bsc#1112178).
- eeprom: at25: set minimum read/write access stride to 1 (git-fixes).
- Fix use after free in get_capset_info callback (git-fixes).
- gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY (networking-stable-20_08_24).
- gtp: add GTPA_LINK info to msg sent to userspace (networking-stable-20_09_11).
- HID: roccat: add bounds checking in kone_sysfs_write_settings() (git-fixes).
- HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery (git-fixes).
- i2c: imx: Fix external abort on interrupt in exit paths (git-fixes).
- ibmveth: Identify ingress large send packets (bsc#1178185 ltc#188897).
- ibmveth: Switch order of ibmveth_helper calls (bsc#1061843 git-fixes).
- ibmvnic: fix ibmvnic_set_mac (bsc#1066382 ltc#160943 git-fixes).
- ibmvnic: save changed mac address to adapter-&gt;mac_addr (bsc#1134760 ltc#177449 git-fixes).
- iio:accel:bma180: Fix use of true when should be iio_shared_by enum (git-fixes).
- iio:adc:max1118 Fix alignment of timestamp and data leak issues (git-fixes).
- iio:adc:ti-adc0832 Fix alignment issue with timestamp (git-fixes).
- iio:adc:ti-adc12138 Fix alignment issue with timestamp (git-fixes).
- iio:dac:ad5592r: Fix use of true for IIO_SHARED_BY_TYPE (git-fixes).
- iio:gyro:itg3200: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:light:si1145: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:magn:hmc5843: Fix passing true where iio_shared_by enum required (git-fixes).
- ima: Remove semicolon at the end of ima_get_binary_runtime_size() (git-fixes).
- include/linux/swapops.h: correct guards for non_swap_entry() (git-fixes (mm/swap)).
- Input: ep93xx_keypad - fix handling of platform_get_irq() error (git-fixes).
- Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 (git-fixes).
- Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() (git-fixes).
- Input: omap4-keypad - fix handling of platform_get_irq() error (git-fixes).
- Input: sun4i-ps2 - fix handling of platform_get_irq() error (git-fixes).
- Input: twl4030_keypad - fix handling of platform_get_irq() error (git-fixes).
- iomap: Make sure iomap_end is called after iomap_begin (bsc#1177754).
- ip: fix tos reflection in ack and reset packets (networking-stable-20_09_24).
- ipv4: Restore flowi4_oif update before call to xfrm_lookup_route (git-fixes).
- iwlwifi: mvm: split a print to avoid a WARNING in ROC (git-fixes).
- kbuild: enforce -Werror=return-type (bsc#1177281).
- leds: mt6323: move period calculation (git-fixes).
- lib/crc32.c: fix trivial typo in preprocessor condition (git-fixes).
- libceph: clear con-&gt;out_msg on Policy::stateful_server faults (bsc#1178188).
- livepatch: Test if -fdump-ipa-clones is really available As of now we add -fdump-ipa-clones unconditionally. It does not cause a trouble if the kernel is build with the supported toolchain. Otherwise it could fail easily. Do the correct thing and test for the availability.
- mac80211: handle lack of sband-&gt;bitrates in rates (git-fixes).
- mailbox: avoid timer start from callback (git-fixes).
- media: ati_remote: sanity check for both endpoints (git-fixes).
- media: bdisp: Fix runtime PM imbalance on error (git-fixes).
- media: exynos4-is: Fix a reference count leak (git-fixes).
- media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync (git-fixes).
- media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync (git-fixes).
- media: firewire: fix memory leak (git-fixes).
- media: m5mols: Check function pointer in m5mols_sensor_power (git-fixes).
- media: media/pci: prevent memory leak in bttv_probe (git-fixes).
- media: omap3isp: Fix memleak in isp_probe (git-fixes).
- media: platform: fcp: Fix a reference count leak (git-fixes).
- media: platform: s3c-camif: Fix runtime PM imbalance on error (git-fixes).
- media: platform: sti: hva: Fix runtime PM imbalance on error (git-fixes).
- media: Revert 'media: exynos4-is: Add missed check for pinctrl_lookup_state()' (git-fixes).
- media: s5p-mfc: Fix a reference count leak (git-fixes).
- media: saa7134: avoid a shift overflow (git-fixes).
- media: st-delta: Fix reference count leak in delta_run_work (git-fixes).
- media: sti: Fix reference count leaks (git-fixes).
- media: tc358743: initialize variable (git-fixes).
- media: ti-vpe: Fix a missing check and reference count leak (git-fixes).
- media: tuner-simple: fix regression in simple_set_radio_freq (git-fixes).
- media: usbtv: Fix refcounting mixup (git-fixes).
- media: uvcvideo: Ensure all probed info is returned to v4l2 (git-fixes).
- media: vsp1: Fix runtime PM imbalance on error (git-fixes).
- memory: fsl-corenet-cf: Fix handling of platform_get_irq() error (git-fixes).
- memory: omap-gpmc: Fix a couple off by ones (git-fixes).
- mfd: sm501: Fix leaks in probe() (git-fixes).
- mic: vop: copy data to kernel space then write to io memory (git-fixes).
- misc: mic: scif: Fix error handling path (git-fixes).
- misc: rtsx: Fix memory leak in rtsx_pci_probe (git-fixes).
- misc: vop: add round_up(x,4) for vring_size to avoid kernel panic (git-fixes).
- mlx5 PPC ringsize workaround (bsc#1173432).
- mlx5: remove support for ib_get_vector_affinity (bsc#1174748).
- mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa (git-fixes (mm/numa)).
- mm/huge_memory.c: use head to check huge zero page (git-fixes (mm/thp)).
- mm/ksm.c: do not WARN if page is still mapped in remove_stable_node() (git-fixes (mm/hugetlb)).
- mm/mempolicy.c: fix out of bounds write in mpol_parse_str() (git-fixes (mm/mempolicy)).
- mm/mempolicy.c: use match_string() helper to simplify the code (git-fixes (mm/mempolicy)).
- mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() (git-fixes (mm/writeback)).
- mm/page-writeback.c: improve arithmetic divisions (git-fixes (mm/writeback)).
- mm/page-writeback.c: use div64_ul() for u64-by-unsigned-long divide (git-fixes (mm/writeback)).
- mm/page_owner.c: remove drain_all_pages from init_early_allocated_pages (git-fixes (mm/debug)).
- mm/rmap: fixup copying of soft dirty and uffd ptes (git-fixes (mm/rmap)).
- mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: fix race condition in zs_destroy_pool (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: fix the migrated zspage statistics (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely (git-fixes (mm/zsmalloc)).
- mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() (git-fixes (mm/hugetlb)).
- mmc: sdio: Check for CISTPL_VERS_1 buffer size (git-fixes).
- Move upstreamed patches into sorted section
- mtd: lpddr: fix excessive stack usage with clang (git-fixes).
- mtd: mtdoops: Do not write panic data twice (git-fixes).
- mwifiex: do not call del_timer_sync() on uninitialized timer (git-fixes).
- mwifiex: Do not use GFP_KERNEL in atomic context (git-fixes).
- mwifiex: fix double free (git-fixes).
- mwifiex: remove function pointer check (git-fixes).
- mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO (git-fixes).
- net/mlx5e: Take common TIR context settings into a function (bsc#1177740).
- net/mlx5e: Turn on HW tunnel offload in all TIRs (bsc#1177740).
- net: disable netpoll on fresh napis (networking-stable-20_09_11).
- net: fec: Fix PHY init after phy_reset_after_clk_enable() (git-fixes).
- net: fec: Fix phy_device lookup for phy_reset_after_clk_enable() (git-fixes).
- net: Fix potential wrong skb-&gt;protocol in skb_vlan_untag() (networking-stable-20_08_24).
- net: hns: Fix memleak in hns_nic_dev_probe (networking-stable-20_09_11).
- net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC (networking-stable-20_09_24).
- net: phy: Avoid NPD upon phy_detach() when driver is unbound (networking-stable-20_09_24).
- net: qrtr: fix usage of idr in port assignment to socket (networking-stable-20_08_24).
- net: systemport: Fix memleak in bcm_sysport_probe (networking-stable-20_09_11).
- net: usb: dm9601: Add USB ID of Keenetic Plus DSL (networking-stable-20_09_11).
- net: usb: qmi_wwan: add Cellient MPL200 card (git-fixes).
- net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails (git-fixes).
- net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key() (git-fixes).
- netlabel: fix problems with mapping removal (networking-stable-20_09_11).
- nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() (git-fixes).
- nl80211: fix non-split wiphy information (git-fixes).
- NTB: hw: amd: fix an issue about leak system resources (git-fixes).
- nvme-rdma: fix crash due to incorrect cqe (bsc#1174748).
- nvme-rdma: fix crash when connect rejected (bsc#1174748).
- nvme: do not update disk info for multipathed device (bsc#1171558).
- platform/x86: mlx-platform: Remove PSU EEPROM configuration (git-fixes).
- powerpc/hwirq: Remove stale forward irq_chip declaration (bsc#1065729).
- powerpc/icp-hv: Fix missing of_node_put() in success path (bsc#1065729).
- powerpc/irq: Drop forward declaration of struct irqaction (bsc#1065729).
- powerpc/perf/hv-gpci: Fix starting index value (bsc#1065729).
- powerpc/powernv/dump: Fix race while processing OPAL dump (bsc#1065729).
- powerpc/powernv/elog: Fix race while processing OPAL error log event (bsc#1065729).
- powerpc/pseries: explicitly reschedule during drmem_lmb list traversal (bsc#1077428 ltc#163882 git-fixes).
- powerpc/pseries: Fix missing of_node_put() in rng_init() (bsc#1065729).
- powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation (bsc#1065729).
- pty: do tty_flip_buffer_push without port-&gt;lock in pty_write (git-fixes).
- pwm: lpss: Add range limit check for the base_unit register value (git-fixes).
- pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare() (git-fixes).
- ring-buffer: Return 0 on success from ring_buffer_resize() (git-fixes).
- rtl8xxxu: prevent potential memory leak (git-fixes).
- scsi: ibmvfc: Fix error return in ibmvfc_probe() (bsc#1065729).
- scsi: ibmvscsi: Fix potential race after loss of transport (bsc#1178166 ltc#188226).
- sctp: not disable bh in the whole sctp_get_port_local() (networking-stable-20_09_11).
- spi: fsl-espi: Only process interrupts for expected events (git-fixes).
- tg3: Fix soft lockup when tg3_reset_task() fails (networking-stable-20_09_11).
- tipc: fix memory leak caused by tipc_buf_append() (git-fixes).
- tipc: fix shutdown() of connection oriented socket (networking-stable-20_09_24).
- tipc: fix shutdown() of connectionless socket (networking-stable-20_09_11).
- tipc: fix the skb_unshare() in tipc_buf_append() (git-fixes).
- tipc: fix uninit skb-&gt;data in tipc_nl_compat_dumpit() (networking-stable-20_08_24).
- tipc: use skb_unshare() instead in tipc_buf_append() (networking-stable-20_09_24).
- tty: ipwireless: fix error handling (git-fixes).
- tty: serial: earlycon dependency (git-fixes).
- tty: serial: fsl_lpuart: fix lpuart32_poll_get_char (git-fixes).
- usb: cdc-acm: add quirk to blacklist ETAS ES58X devices (git-fixes).
- usb: cdc-acm: handle broken union descriptors (git-fixes).
- usb: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync() (git-fixes).
- usb: core: Solve race condition in anchor cleanup functions (git-fixes).
- usb: dwc2: Fix INTR OUT transfers in DDMA mode (git-fixes).
- usb: dwc2: Fix parameter type in function pointer prototype (git-fixes).
- usb: dwc3: core: add phy cleanup for probe error handling (git-fixes).
- usb: dwc3: core: do not trigger runtime pm when remove driver (git-fixes).
- usb: dwc3: ep0: Fix ZLP for OUT ep0 requests (git-fixes).
- usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets (git-fixes).
- usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above (git-fixes).
- usb: gadget: function: printer: fix use-after-free in __lock_acquire (git-fixes).
- usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well (git-fixes).
- usb: ohci: Default to per-port over-current protection (git-fixes).
- usb: serial: qcserial: fix altsetting probing (git-fixes).
- vfs: fix FIGETBSZ ioctl on an overlayfs file (bsc#1178202).
- video: fbdev: sis: fix null ptr dereference (git-fixes).
- video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error (git-fixes).
- VMCI: check return value of get_user_pages_fast() for errors (git-fixes).
- w1: mxc_w1: Fix timeout resolution problem leading to bus error (git-fixes).
- watchdog: iTCO_wdt: Export vendorsupport (bsc#1177101).
- watchdog: iTCO_wdt: Make ICH_RES_IO_SMI optional (bsc#1177101).
- wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 (git-fixes).
- writeback: Avoid skipping inode writeback (bsc#1177755).
- writeback: Fix sync livelock due to b_dirty_time processing (bsc#1177755).
- writeback: Protect inode-&gt;i_io_list with inode-&gt;i_lock (bsc#1177755).
- x86, fakenuma: Fix invalid starting node ID (git-fixes (mm/x86/fakenuma)).
- x86/apic: Unify duplicated local apic timer clockevent initialization (bsc#1112178).
- x86/fpu: Allow multiple bits in clearcpuid= parameter (bsc#1112178).
- x86/xen: disable Firmware First mode for correctable memory errors (bsc#1176713).
- xen/blkback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/events: add a new 'late EOI' evtchn framework (XSA-332 bsc#1177411).
- xen/events: add a proper barrier to 2-level uevent unmasking (XSA-332 bsc#1177411).
- xen/events: avoid removing an event channel while handling it (XSA-331 bsc#1177410).
- xen/events: block rogue events for some time (XSA-332 bsc#1177411).
- xen/events: defer eoi in case of excessive number of events (XSA-332 bsc#1177411).
- xen/events: do not use chip_data for legacy IRQs (XSA-332 bsc#1065600).
- xen/events: fix race in evtchn_fifo_unmask() (XSA-332 bsc#1177411).
- xen/events: switch user event channels to lateeoi model (XSA-332 bsc#1177411).
- xen/events: use a common cpu hotplug hook for event channels (XSA-332 bsc#1177411).
- xen/gntdev.c: Mark pages as dirty (bsc#1065600).
- xen/netback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/pciback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/scsiback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen: XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information (XSA-332 bsc#1065600).
- xfs: avoid infinite loop when cancelling CoW blocks after writeback failure (bsc#1178027).
- xfs: limit entries returned when counting fsmap records (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-10"/>
	<updated date="2020-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1055014">SUSE bug 1055014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061843">SUSE bug 1061843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066382">SUSE bug 1066382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077428">SUSE bug 1077428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131277">SUSE bug 1131277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134760">SUSE bug 1134760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170415">SUSE bug 1170415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173432">SUSE bug 1173432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174748">SUSE bug 1174748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176354">SUSE bug 1176354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176485">SUSE bug 1176485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176560">SUSE bug 1176560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176713">SUSE bug 1176713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176723">SUSE bug 1176723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177086">SUSE bug 1177086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177101">SUSE bug 1177101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177271">SUSE bug 1177271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177281">SUSE bug 1177281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177410">SUSE bug 1177410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177411">SUSE bug 1177411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177470">SUSE bug 1177470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177687">SUSE bug 1177687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177719">SUSE bug 1177719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177740">SUSE bug 1177740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177749">SUSE bug 1177749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177750">SUSE bug 1177750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177753">SUSE bug 1177753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177754">SUSE bug 1177754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177755">SUSE bug 1177755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177766">SUSE bug 1177766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177855">SUSE bug 1177855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177856">SUSE bug 1177856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177861">SUSE bug 1177861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178003">SUSE bug 1178003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178027">SUSE bug 1178027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178166">SUSE bug 1178166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178185">SUSE bug 1178185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178187">SUSE bug 1178187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178188">SUSE bug 1178188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178202">SUSE bug 1178202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178234">SUSE bug 1178234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178330">SUSE bug 1178330</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0430/">CVE-2020-0430</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14351/">CVE-2020-14351</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16120/">CVE-2020-16120</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25285/">CVE-2020-25285</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25656/">CVE-2020-25656</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27673/">CVE-2020-27673</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27675/">CVE-2020-27675</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497084" comment="reiserfs-kmp-default-4.12.14-197.67.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138315" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178387" ref_url="https://bugzilla.suse.com/1178387" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25692" ref_url="https://www.suse.com/security/cve/CVE-2020-25692/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007765.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- CVE-2020-25692: Fixed an unauthenticated remote denial of service due to incorrect validation of modrdn equality rules (bsc#1178387).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-12"/>
	<updated date="2020-11-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178387">SUSE bug 1178387</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25692/">CVE-2020-25692</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497085" comment="openldap2-2.4.46-9.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497086" comment="openldap2-back-meta-2.4.46-9.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497087" comment="openldap2-back-perl-2.4.46-9.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497088" comment="openldap2-ppolicy-check-password-1.2-9.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138316" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174157" ref_url="https://bugzilla.suse.com/1174157" source="BUGZILLA"/>
		<reference ref_id="1177943" ref_url="https://bugzilla.suse.com/1177943" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14556" ref_url="https://www.suse.com/security/cve/CVE-2020-14556/" source="CVE"/>
		<reference ref_id="CVE-2020-14577" ref_url="https://www.suse.com/security/cve/CVE-2020-14577/" source="CVE"/>
		<reference ref_id="CVE-2020-14578" ref_url="https://www.suse.com/security/cve/CVE-2020-14578/" source="CVE"/>
		<reference ref_id="CVE-2020-14579" ref_url="https://www.suse.com/security/cve/CVE-2020-14579/" source="CVE"/>
		<reference ref_id="CVE-2020-14581" ref_url="https://www.suse.com/security/cve/CVE-2020-14581/" source="CVE"/>
		<reference ref_id="CVE-2020-14583" ref_url="https://www.suse.com/security/cve/CVE-2020-14583/" source="CVE"/>
		<reference ref_id="CVE-2020-14593" ref_url="https://www.suse.com/security/cve/CVE-2020-14593/" source="CVE"/>
		<reference ref_id="CVE-2020-14621" ref_url="https://www.suse.com/security/cve/CVE-2020-14621/" source="CVE"/>
		<reference ref_id="CVE-2020-14779" ref_url="https://www.suse.com/security/cve/CVE-2020-14779/" source="CVE"/>
		<reference ref_id="CVE-2020-14781" ref_url="https://www.suse.com/security/cve/CVE-2020-14781/" source="CVE"/>
		<reference ref_id="CVE-2020-14782" ref_url="https://www.suse.com/security/cve/CVE-2020-14782/" source="CVE"/>
		<reference ref_id="CVE-2020-14792" ref_url="https://www.suse.com/security/cve/CVE-2020-14792/" source="CVE"/>
		<reference ref_id="CVE-2020-14796" ref_url="https://www.suse.com/security/cve/CVE-2020-14796/" source="CVE"/>
		<reference ref_id="CVE-2020-14797" ref_url="https://www.suse.com/security/cve/CVE-2020-14797/" source="CVE"/>
		<reference ref_id="CVE-2020-14798" ref_url="https://www.suse.com/security/cve/CVE-2020-14798/" source="CVE"/>
		<reference ref_id="CVE-2020-14803" ref_url="https://www.suse.com/security/cve/CVE-2020-14803/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007829.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

- Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)',
  introduced in October 2020 CPU.

- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
      DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
      sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
      and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
       NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
      /AsyncCloseAndInterrupt.java failing due to 'Connection
      succeeded'
    + JDK-8165675: Trace event for thread park has incorrect unit
       for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
       one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
      missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
      Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
      jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
      with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
      JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
      classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
      1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
      signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
      cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
      -XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
      always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
      resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
      by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
      test
    + JDK-8213966: The ZGC JFR events should be marked as
      experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
      in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
      fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
      getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
      the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
      properly
    + JDK-8216486: Possibility of integer overflow in
      JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
       /runtimeThreadInheritanceLeak/
       /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
      /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
      systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
      TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
      invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
      buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
      notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
      VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails 'assert((((klass)-&gt;trace_id()
      &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
      failed: invariant'
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
      Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
      'awt.robot.gtk' is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
       unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
      JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
      EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
      the package-info
    + JDK-8236008: Some backup files were accidentally left in the
      hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
      validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
      there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
      OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
      compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
      JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
      non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
      in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
      one with 'U.S. International - PC' layout
    + JDK-8240576: JVM crashes after transformation in C2
      IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
      test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
       /JMapHProfLargeHeapTest.java failing because expects HPROF
      JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
      preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
      ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
      version numbers
    + JDK-8239852: java/util/concurrent tests fail with
      -XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
      verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
      when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
      comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
      returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
      throw NPE if timeout is less than, or equal to zero when unit
      == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
      ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
      does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
      serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
      of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
      /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
      CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
      higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
      subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
      IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
      Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
      expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
      in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
      installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
      ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
      test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
      compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
      strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
      /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
      for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
      access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
      /appletviewer/IOExceptionIfEncodedURLTest/
      /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
      /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
      intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
      ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
      public
    + JDK-8156169: Some sound tests rarely hangs because of
      incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
      timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
      javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
      /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
      keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
      throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
      fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
      network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
      VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
      connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
      keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
      truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
      return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
      missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
      abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with 'malformed
      control flow'
    + JDK-8238225: Issues reported after replacing symlink at
      Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
      sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
      enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
      property with a security one
    + JDK-8242498: Invalid 'sun.awt.TimedWindowEvent' object leads
      to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
      CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
      application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
      and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
      for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
      backport
    + JDK-8249610: Make
      sun.security.krb5.Config.getBooleanObject(String... keys)
      method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
      name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
      message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
      /fileaccess/FontFile.java fails
    + JDK-8148854: Class names 'SomeClass' and 'LSomeClass;'
      treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
      card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
      fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
      compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
      /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
      FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of 'initialize' method is not
          used
    + JDK-8219566: JFR did not collect call stacks when
      MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
      RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
      when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
      of path
    + JDK-8231779: crash
      HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
      'multiple definition' link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
      /SctpNet.c 'multiple definition' link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o 'multiple
      definition' link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
      params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
      /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
      javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
      shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
      fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
      Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
      --categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
      check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
      JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
      IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
      Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
      11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
      exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
      extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
      synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
      /LimitSharedSizes.java fails in jdk 9 fcs new
      platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
      hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
      not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
      docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
      incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
      on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
      program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
      primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
      enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
      Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
      AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
      builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
      v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
      names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
      not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
      license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
      buffer can leak
    + JDK-8219919: RuntimeStub name lost with
      PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
      to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
      constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
      SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
      aware
    + JDK-8226809: Circular reference in printed stack trace is not
      correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
      name
    + JDK-8238898, PR3801: Missing hash characters for header on
      license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
      program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
      release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
      RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
      message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
      P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
      set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
      LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
      due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
      Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
      by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
      JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
      String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
      client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
      javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
      closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
      java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
      displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
      the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
      program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
      GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
      javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
      /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
      /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
      JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
      Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
      tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
      passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
      the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
      TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
      fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
      disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
      roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
      roots
    + [backport] 8223774: Shenandoah: Refactor
      ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
      ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
      in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
      shenandoahRootProcessor.inline.hpp with
      --disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
      ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
      select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
      object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
      work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
      ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
      ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
      SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
      assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
      roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
      some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
      cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
      nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
      ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
      mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
      piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
      from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
      mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
      paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
      ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger 'empty
      statement' inspection
    + [backport] 8241081: Shenandoah: Do not modify
      update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
      descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
      exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
      reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
      'aggressive'
    + [backport] 8241520: Shenandoah: simplify region sequence
      numbers handling
    + [backport] 8241534: Shenandoah: region status should include
      update watermark
    + [backport] 8241574: Shenandoah: remove
      ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
      macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
      derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
      padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
      shenandoahSupport.cpp:2858 with
      java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
      ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
      ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
      ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
      ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
      methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
      final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
      counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
      ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
      ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
      to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
      operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
      logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
      account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
      ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
      ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split 'Prepare Evacuation'
      tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
      summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
      region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
      ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
      dispatching
    + [backport] 8242211: Shenandoah: remove
      ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
      ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
      ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
      diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
      when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
      ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
      liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
      aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
      unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
      barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
      in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
      liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
      jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
      ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
      TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
      wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
      ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
      ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
      ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
      time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
      conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
      phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
      related code
    + [backport] 8243848: Shenandoah: Windows build fails after
      JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
      ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
      JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
      worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
      accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
      ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
      update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
      takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
      /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
      gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
      gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
      on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
      to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
      constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
      bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
      efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
      ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
      disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
      after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
      for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
      ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
      roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
      interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
      for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
      instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
      JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
      locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
      reporters
    + [backport] 8247751: Shenandoah: options tests should run with
      smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
      heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
      rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
      miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
      assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
      GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
      should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
      x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
      graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
      integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
      ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
      shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
      PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
      mark
    + Shenandoah: missing SystemDictionary roots in
      ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
      performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
      Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
      compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
      generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
      watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
      in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
      fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
      fails on AArch64
    + JDK-8216989, PR3797:
      CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
      does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
      optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
      ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
      BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
      flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
      fast_storefield and fast_accessfield
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-20"/>
	<updated date="2020-11-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1174157">SUSE bug 1174157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177943">SUSE bug 1177943</bugzilla>
	<cve impact="important" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14556/">CVE-2020-14556</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14577/">CVE-2020-14577</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14578/">CVE-2020-14578</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14579/">CVE-2020-14579</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14581/">CVE-2020-14581</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14583/">CVE-2020-14583</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-14593/">CVE-2020-14593</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14621/">CVE-2020-14621</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14779/">CVE-2020-14779</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14781/">CVE-2020-14781</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14782/">CVE-2020-14782</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14792/">CVE-2020-14792</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14796/">CVE-2020-14796</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14797/">CVE-2020-14797</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14798/">CVE-2020-14798</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14803/">CVE-2020-14803</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497089" comment="java-1_8_0-openjdk-1.8.0.272-3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497090" comment="java-1_8_0-openjdk-demo-1.8.0.272-3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497091" comment="java-1_8_0-openjdk-devel-1.8.0.272-3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497092" comment="java-1_8_0-openjdk-headless-1.8.0.272-3.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138317" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1163592" ref_url="https://bugzilla.suse.com/1163592" source="BUGZILLA"/>
		<reference ref_id="1167030" ref_url="https://bugzilla.suse.com/1167030" source="BUGZILLA"/>
		<reference ref_id="1172873" ref_url="https://bugzilla.suse.com/1172873" source="BUGZILLA"/>
		<reference ref_id="1175306" ref_url="https://bugzilla.suse.com/1175306" source="BUGZILLA"/>
		<reference ref_id="1175721" ref_url="https://bugzilla.suse.com/1175721" source="BUGZILLA"/>
		<reference ref_id="1176855" ref_url="https://bugzilla.suse.com/1176855" source="BUGZILLA"/>
		<reference ref_id="1176907" ref_url="https://bugzilla.suse.com/1176907" source="BUGZILLA"/>
		<reference ref_id="1176983" ref_url="https://bugzilla.suse.com/1176983" source="BUGZILLA"/>
		<reference ref_id="1177703" ref_url="https://bugzilla.suse.com/1177703" source="BUGZILLA"/>
		<reference ref_id="1177819" ref_url="https://bugzilla.suse.com/1177819" source="BUGZILLA"/>
		<reference ref_id="1177820" ref_url="https://bugzilla.suse.com/1177820" source="BUGZILLA"/>
		<reference ref_id="1178123" ref_url="https://bugzilla.suse.com/1178123" source="BUGZILLA"/>
		<reference ref_id="1178393" ref_url="https://bugzilla.suse.com/1178393" source="BUGZILLA"/>
		<reference ref_id="1178589" ref_url="https://bugzilla.suse.com/1178589" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178686" ref_url="https://bugzilla.suse.com/1178686" source="BUGZILLA"/>
		<reference ref_id="1178765" ref_url="https://bugzilla.suse.com/1178765" source="BUGZILLA"/>
		<reference ref_id="1178782" ref_url="https://bugzilla.suse.com/1178782" source="BUGZILLA"/>
		<reference ref_id="927455" ref_url="https://bugzilla.suse.com/927455" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25704" ref_url="https://www.suse.com/security/cve/CVE-2020-25704/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007848.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software and services that rely on UDP source port randomization (like DNS) are indirectly affected as well. Kernel versions may be vulnerable to this issue (bsc#1175721, bsc#1178782).
- CVE-2020-25704: Fixed a memory leak in perf_event_parse_addr_filter() (bsc#1178393).
- CVE-2020-25668: Fixed a use-after-free in con_font_op() (bnc#1178123).

The following non-security bugs were fixed:

- 9P: Cast to loff_t before multiplying (git-fixes).
- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (git-fixes).
- ACPI: debug: do not allow debugging when ACPI is disabled (git-fixes).
- ACPI: dock: fix enum-conversion warning (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- ALSA: hda - Fix the return value if cb func is already registered (git-fixes).
- ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes).
- ata: sata_rcar: Fix DMA boundary mask (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled (git-fixes).
- ath10k: start recovery process when payload length exceeds max htc length for sdio (git-fixes).
- bus/fsl_mc: Do not rely on caller to provide non NULL mc_io (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on (git-fixes).
- can: peak_usb: add range checking in decode operations (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping (git-fixes).
- can: rx-offload: do not call kfree_skb() from IRQ context (git-fixes).
- clk: ti: clockdomain: fix static checker warning (git-fixes).
- crypto: bcm - Verify GCM/CCM key length in setkey (git-fixes).
- device property: Do not clear secondary pointer for shared primary firmware node (git-fixes).
- device property: Keep secondary firmware node secondary by type (git-fixes).
- drbd: code cleanup by using sendpage_ok() to check page for kernel_sendpage() (bsc#1172873).
- drm/amd/display: Do not invoke kgdb_breakpoint() unconditionally (git-fixes).
- drm/amd/display: HDMI remote sink need mode validation for Linux (git-fixes).
- drm/amdgpu: do not map BO in reserved region (git-fixes).
- drm/bridge/synopsys: dsi: add support for non-continuous HS clock (git-fixes).
- drm/brige/megachips: Add checking if ge_b850v3_lvds_init() is working correctly (git-fixes).
- drm/i915: Break up error capture compression loops with cond_resched() (git-fixes).
- drm/i915: Force VT'd workarounds when running as a guest OS (git-fixes).
- drm/imx: tve remove extraneous type qualifier (git-fixes).
- drm/ttm: fix eviction valuable range check (git-fixes).
- drm/vc4: drv: Add error handding for bind (git-fixes).
- efivarfs: Replace invalid slashes with exclamation marks in dentries (git-fixes).
- ftrace: Fix recursion check for NMI test (git-fixes).
- ftrace: Handle tracing when switching between context (git-fixes).
- hv_netvsc: Add XDP support (bsc#1177819, bsc#1177820).
- hv_netvsc: Fix XDP refcnt for synthetic and VF NICs (bsc#1177819, bsc#1177820).
- hyperv_fb: Update screen_info after removing old framebuffer (bsc#1175306).
- icmp: randomize the global rate limiter (git-fixes).
- kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function (git-fixes).
- libceph: use sendpage_ok() in ceph_tcp_sendpage() (bsc#1172873).
- media: platform: Improve queue set up flow for bug fixing (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get (git-fixes).
- memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event (bsc#1177703).
- mmc: sdhci-of-esdhc: Handle pulse width detection erratum for more SoCs (git-fixes).
- mmc: sdhci-of-esdhc: set timeout to max before tuning (git-fixes).
- mm/memcg: fix refcount error while moving and swapping (bsc#1178686).
- Move the upstreamed powercap fix into sorted sectio
- mtd: lpddr: Fix bad logic in print_drs_error (git-fixes).
- net: add WARN_ONCE in kernel_sendpage() for improper zero-copy send (bsc#1172873).
- net: introduce helper sendpage_ok() in include/linux/net.h (bsc#1172873).
- net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition (git-fixes).
- nvme-tcp: check page by sendpage_ok() before calling kernel_sendpage() (bsc#1172873).
- p54: avoid accessing the data mapped to streaming DMA (git-fixes).
- pinctrl: intel: Set default bias in case no particular value given (git-fixes).
- powerpc/pseries/cpuidle: add polling idle for shared processor guests (bsc#1178765 ltc#188968).
- powerpc/vnic: Extend 'failover pending' window (bsc#1176855 ltc#187293).
- power: supply: test_power: add missing newlines when printing parameters by sysfs (git-fixes).
- regulator: defer probe when trying to get voltage from unresolved supply (git-fixes).
- regulator: resolve supply after creating regulator (git-fixes).
- ring-buffer: Fix recursion protection transitions between interrupt context (git-fixes).
- rpm/kernel-module-subpackage: make Group tag optional (bsc#1163592)
- scsi: libiscsi: use sendpage_ok() in iscsi_tcp_segment_map() (bsc#1172873).
- staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error (git-fixes).
- staging: octeon: repair 'fixed-link' support (git-fixes).
- thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() (git-fixes).
- USB: Add NO_LPM quirk for Kingston flash drive (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- usb: host: fsl-mph-dr-of: check return of dma_set_mask() (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231 (git-fixes).
- USB: serial: option: add Quectel EC200T module support (git-fixes).
- USB: serial: option: add Telit FN980 composition 0x1055 (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart (git-fixes).
- usb: typec: tcpm: reset hard_reset_count for any disconnect (git-fixes).
- video: fbdev: pvr2fb: initialize variables (git-fixes).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV Gen 1 VMs (bsc#1175306).
- vt: Disable KD_FONT_OP_COPY (bsc#1178589).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params (bsc#1175306).
- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels (bsc#1058115 bsc#1176907).
- xfs: do not update mtime on COW faults (bsc#1167030).
- xfs: fix a missing unlock on error in xfs_fs_map_blocks (git-fixes).
- xfs: fix flags argument to rmap lookup when converting shared file rmaps (git-fixes).
- xfs: fix rmap key and record comparison functions (git-fixes).
- xfs: flush new eof page on truncate to avoid post-eof corruption (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-24"/>
	<updated date="2020-11-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163592">SUSE bug 1163592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167030">SUSE bug 1167030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172873">SUSE bug 1172873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175306">SUSE bug 1175306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175721">SUSE bug 1175721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176855">SUSE bug 1176855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176907">SUSE bug 1176907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176983">SUSE bug 1176983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177703">SUSE bug 1177703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177819">SUSE bug 1177819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177820">SUSE bug 1177820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178123">SUSE bug 1178123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178393">SUSE bug 1178393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178589">SUSE bug 1178589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178686">SUSE bug 1178686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178765">SUSE bug 1178765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178782">SUSE bug 1178782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927455">SUSE bug 927455</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25704/">CVE-2020-25704</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497093" comment="reiserfs-kmp-default-4.12.14-197.72.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138318" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1179441" ref_url="https://bugzilla.suse.com/1179441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:3591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007906.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

- Update to version jdk8u275 (icedtea 3.17.1)
  * JDK-8214440, bsc#1179441: Fix StartTLS functionality that was broken in openjdk272. (bsc#1179441)
  * JDK-8223940: Private key not supported by chosen signature algorithm
  * JDK-8236512: PKCS11 Connection closed after Cipher.doFinal and NoPadding
  * JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * PR3815: Fix new s390 size_t issue in g1ConcurrentMarkObjArrayProcessor.cpp
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-02"/>
	<updated date="2020-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179441">SUSE bug 1179441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497094" comment="java-1_8_0-openjdk-1.8.0.275-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497095" comment="java-1_8_0-openjdk-demo-1.8.0.275-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497096" comment="java-1_8_0-openjdk-devel-1.8.0.275-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497097" comment="java-1_8_0-openjdk-headless-1.8.0.275-3.45.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138319" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1067665" ref_url="https://bugzilla.suse.com/1067665" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1158775" ref_url="https://bugzilla.suse.com/1158775" source="BUGZILLA"/>
		<reference ref_id="1170139" ref_url="https://bugzilla.suse.com/1170139" source="BUGZILLA"/>
		<reference ref_id="1170630" ref_url="https://bugzilla.suse.com/1170630" source="BUGZILLA"/>
		<reference ref_id="1172542" ref_url="https://bugzilla.suse.com/1172542" source="BUGZILLA"/>
		<reference ref_id="1174726" ref_url="https://bugzilla.suse.com/1174726" source="BUGZILLA"/>
		<reference ref_id="1175916" ref_url="https://bugzilla.suse.com/1175916" source="BUGZILLA"/>
		<reference ref_id="1176109" ref_url="https://bugzilla.suse.com/1176109" source="BUGZILLA"/>
		<reference ref_id="1177304" ref_url="https://bugzilla.suse.com/1177304" source="BUGZILLA"/>
		<reference ref_id="1177397" ref_url="https://bugzilla.suse.com/1177397" source="BUGZILLA"/>
		<reference ref_id="1177805" ref_url="https://bugzilla.suse.com/1177805" source="BUGZILLA"/>
		<reference ref_id="1177808" ref_url="https://bugzilla.suse.com/1177808" source="BUGZILLA"/>
		<reference ref_id="1177819" ref_url="https://bugzilla.suse.com/1177819" source="BUGZILLA"/>
		<reference ref_id="1177820" ref_url="https://bugzilla.suse.com/1177820" source="BUGZILLA"/>
		<reference ref_id="1178182" ref_url="https://bugzilla.suse.com/1178182" source="BUGZILLA"/>
		<reference ref_id="1178589" ref_url="https://bugzilla.suse.com/1178589" source="BUGZILLA"/>
		<reference ref_id="1178635" ref_url="https://bugzilla.suse.com/1178635" source="BUGZILLA"/>
		<reference ref_id="1178669" ref_url="https://bugzilla.suse.com/1178669" source="BUGZILLA"/>
		<reference ref_id="1178838" ref_url="https://bugzilla.suse.com/1178838" source="BUGZILLA"/>
		<reference ref_id="1178853" ref_url="https://bugzilla.suse.com/1178853" source="BUGZILLA"/>
		<reference ref_id="1178854" ref_url="https://bugzilla.suse.com/1178854" source="BUGZILLA"/>
		<reference ref_id="1178878" ref_url="https://bugzilla.suse.com/1178878" source="BUGZILLA"/>
		<reference ref_id="1178886" ref_url="https://bugzilla.suse.com/1178886" source="BUGZILLA"/>
		<reference ref_id="1178897" ref_url="https://bugzilla.suse.com/1178897" source="BUGZILLA"/>
		<reference ref_id="1178940" ref_url="https://bugzilla.suse.com/1178940" source="BUGZILLA"/>
		<reference ref_id="1178962" ref_url="https://bugzilla.suse.com/1178962" source="BUGZILLA"/>
		<reference ref_id="1179107" ref_url="https://bugzilla.suse.com/1179107" source="BUGZILLA"/>
		<reference ref_id="1179140" ref_url="https://bugzilla.suse.com/1179140" source="BUGZILLA"/>
		<reference ref_id="1179141" ref_url="https://bugzilla.suse.com/1179141" source="BUGZILLA"/>
		<reference ref_id="1179211" ref_url="https://bugzilla.suse.com/1179211" source="BUGZILLA"/>
		<reference ref_id="1179213" ref_url="https://bugzilla.suse.com/1179213" source="BUGZILLA"/>
		<reference ref_id="1179259" ref_url="https://bugzilla.suse.com/1179259" source="BUGZILLA"/>
		<reference ref_id="1179403" ref_url="https://bugzilla.suse.com/1179403" source="BUGZILLA"/>
		<reference ref_id="1179406" ref_url="https://bugzilla.suse.com/1179406" source="BUGZILLA"/>
		<reference ref_id="1179418" ref_url="https://bugzilla.suse.com/1179418" source="BUGZILLA"/>
		<reference ref_id="1179421" ref_url="https://bugzilla.suse.com/1179421" source="BUGZILLA"/>
		<reference ref_id="1179424" ref_url="https://bugzilla.suse.com/1179424" source="BUGZILLA"/>
		<reference ref_id="1179426" ref_url="https://bugzilla.suse.com/1179426" source="BUGZILLA"/>
		<reference ref_id="1179427" ref_url="https://bugzilla.suse.com/1179427" source="BUGZILLA"/>
		<reference ref_id="1179429" ref_url="https://bugzilla.suse.com/1179429" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15436" ref_url="https://www.suse.com/security/cve/CVE-2020-15436/" source="CVE"/>
		<reference ref_id="CVE-2020-15437" ref_url="https://www.suse.com/security/cve/CVE-2020-15437/" source="CVE"/>
		<reference ref_id="CVE-2020-25669" ref_url="https://www.suse.com/security/cve/CVE-2020-25669/" source="CVE"/>
		<reference ref_id="CVE-2020-27777" ref_url="https://www.suse.com/security/cve/CVE-2020-27777/" source="CVE"/>
		<reference ref_id="CVE-2020-28915" ref_url="https://www.suse.com/security/cve/CVE-2020-28915/" source="CVE"/>
		<reference ref_id="CVE-2020-28974" ref_url="https://www.suse.com/security/cve/CVE-2020-28974/" source="CVE"/>
		<reference ref_id="CVE-2020-29371" ref_url="https://www.suse.com/security/cve/CVE-2020-29371/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007941.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141).
- CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140).
- CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182).
- CVE-2020-27777: Restrict RTAS requests from userspace  (bsc#1179107).
- CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory (bsc#1178886).
- CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel (bsc#1178589).
- CVE-2020-29371: Fixed uninitialized memory leaks to userspace (bsc#1179429).

The following non-security bugs were fixed:

- ACPI: GED: fix -Wformat (git-fixes).
- ALSA: ctl: fix error path at adding user-defined element set (git-fixes).
- ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() (git-fixes).
- ALSA: mixart: Fix mutex deadlock (git-fixes).
- arm64: KVM: Fix system register enumeration (bsc#1174726).
- arm/arm64: KVM: Add PSCI version selection API (bsc#1174726).
- ASoC: qcom: lpass-platform: Fix memory leak (git-fixes).
- ath10k: Acquire tx_lock in tx error paths (git-fixes).
- batman-adv: set .owner to THIS_MODULE (git-fixes).
- Bluetooth: btusb: Fix and detect most of the Chinese Bluetooth controllers (git-fixes).
- Bluetooth: hci_bcm: fix freeing not-requested IRQ (git-fixes).
- bpf: Zero-fill re-used per-cpu map element (git-fixes).
- btrfs: account ticket size at add/delete time (bsc#1178897).
- btrfs: add helper to obtain number of devices with ongoing dev-replace (bsc#1178897).
- btrfs: check rw_devices, not num_devices for balance (bsc#1178897).
- btrfs: do not delete mismatched root refs (bsc#1178962).
- btrfs: fix btrfs_calc_reclaim_metadata_size calculation (bsc#1178897).
- btrfs: fix force usage in inc_block_group_ro (bsc#1178897).
- btrfs: fix invalid removal of root ref (bsc#1178962).
- btrfs: fix reclaim counter leak of space_info objects (bsc#1178897).
- btrfs: fix reclaim_size counter leak after stealing from global reserve (bsc#1178897).
- btrfs: kill min_allocable_bytes in inc_block_group_ro (bsc#1178897).
- btrfs: rework arguments of btrfs_unlink_subvol (bsc#1178962).
- btrfs: split dev-replace locking helpers for read and write (bsc#1178897). 
- can: af_can: prevent potential access of uninitialized member in canfd_rcv() (git-fixes).
- can: af_can: prevent potential access of uninitialized member in can_rcv() (git-fixes).
- can: dev: can_restart(): post buffer from the right context (git-fixes).
- can: gs_usb: fix endianess problem with candleLight firmware (git-fixes).
- can: m_can: fix nominal bitiming tseg2 min for version &gt;= 3.1 (git-fixes).
- can: m_can: m_can_handle_state_change(): fix state change (git-fixes).
- can: m_can: m_can_stop(): set device to software init mode before closing (git-fixes).
- can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb() (git-fixes).
- can: peak_usb: fix potential integer overflow on shift of a int (git-fixes).
- ceph: add check_session_state() helper and make it global (bsc#1179259).
- ceph: check session state after bumping session-&gt;s_seq (bsc#1179259).
- ceph: fix race in concurrent __ceph_remove_cap invocations (bsc#1178635).
- cifs: Fix incomplete memory allocation on setxattr path (bsc#1179211).
- cifs: remove bogus debug code (bsc#1179427).
- cifs: Return the error from crypt_message when enc/dec key not found (bsc#1179426).
- Convert trailing spaces and periods in path components (bsc#1179424).
- docs: ABI: stable: remove a duplicated documentation (git-fixes).
- docs: ABI: sysfs-c2port: remove a duplicated entry (git-fixes).
- Drivers: hv: vmbus: Remove the unused 'tsc_page' from struct hv_context (git-fixes).
- drm/i915/gvt: Set ENHANCED_FRAME_CAP bit (git-fixes).
- drm/sun4i: dw-hdmi: fix error return code in sun8i_dw_hdmi_bind() (git-fixes).
- Drop sysctl files for dropped archs, add ppc64le and arm64 (bsc#1178838). Also fix the ppc64 page size.
- efi: cper: Fix possible out-of-bounds access (git-fixes).
- efi/efivars: Add missing kobject_put() in sysfs entry creation error path (git-fixes).
- efi/esrt: Fix reference count leak in esre_create_sysfs_entry (git-fixes).
- efi: provide empty efi_enter_virtual_mode implementation (git-fixes).
- efivarfs: fix memory leak in efivarfs_create() (git-fixes).
- efivarfs: revert 'fix memory leak in efivarfs_create()' (git-fixes).
- efi/x86: Do not panic or BUG() on non-critical error conditions (git-fixes).
- efi/x86: Free efi_pgd with free_pages() (bsc#1112178).
- efi/x86: Ignore the memory attributes table on i386 (git-fixes).
- efi/x86: Map the entire EFI vendor string before copying it (git-fixes).
- fs/proc/array.c: allow reporting eip/esp for all coredumping threads (bsc#1050549).
- fuse: fix page dereference after free (bsc#1179213).
- futex: Do not enable IRQs unconditionally in put_pi_state() (bsc#1067665).
- futex: Handle transient 'ownerless' rtmutex state correctly (bsc#1067665).
- hv_balloon: disable warning when floor reached (git-fixes).
- hv_netvsc: deal with bpf API differences in 4.12 (bsc#1177819, bsc#1177820).
- hv_netvsc: make recording RSS hash depend on feature flag (bsc#1178853, bsc#1178854).
- hv_netvsc: record hardware hash in skb (bsc#1178853, bsc#1178854).
- i40iw: Fix error handling in i40iw_manage_arp_cache() (bsc#1111666)
- i40iw: fix null pointer dereference on a null wqe pointer (bsc#1111666)
- i40iw: Report correct firmware version (bsc#1111666)
- IB/cma: Fix ports memory leak in cma_configfs (bsc#1111666)
- IB/core: Set qp-&gt;real_qp before it may be accessed (bsc#1111666)
- IB/hfi1: Add missing INVALIDATE opcodes for trace (bsc#1111666)
- IB/hfi1: Add RcvShortLengthErrCnt to hfi1stats (bsc#1111666)
- IB/hfi1: Add software counter for ctxt0 seq drop (bsc#1111666)
- IB/hfi1: Avoid hardlockup with flushlist_lock (bsc#1111666)
- IB/hfi1: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666)
- IB/hfi1: Check for error on call to alloc_rsm_map_table (bsc#1111666)
- IB/hfi1: Close PSM sdma_progress sleep window (bsc#1111666)
- IB/hfi1: Define variables as unsigned long to fix KASAN warning (bsc#1111666)
- IB/hfi1: Ensure full Gen3 speed in a Gen4 system (bsc#1111666)
- IB/hfi1: Fix memory leaks in sysfs registration and unregistration (bsc#1111666)
- IB/hfi1: Fix Spectre v1 vulnerability (bsc#1111666)
- IB/hfi1: Handle port down properly in pio (bsc#1111666)
- IB/hfi1: Handle wakeup of orphaned QPs for pio (bsc#1111666)
- IB/hfi1: Insure freeze_work work_struct is canceled on shutdown (bsc#1111666)
- IB/hfi1, qib: Ensure RCU is locked when accessing list (bsc#1111666)
- IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM (bsc#1111666)
- IB/hfi1: Remove unused define (bsc#1111666)
- IB/hfi1: Silence txreq allocation warnings (bsc#1111666)
- IB/hfi1: Validate page aligned for a given virtual address (bsc#1111666)
- IB/hfi1: Wakeup QPs orphaned on wait list after flush (bsc#1111666)
- IB/ipoib: drop useless LIST_HEAD (bsc#1111666)
- IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode (bsc#1111666)
- IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start (bsc#1111666)
- IB/iser: Fix dma_nents type definition (bsc#1111666)
- IB/iser: Pass the correct number of entries for dma mapped SGL (bsc#1111666)
- IB/mad: Fix use-after-free in ib mad completion handling (bsc#1111666)
- IB/mlx4: Add and improve logging (bsc#1111666)
- IB/mlx4: Add support for MRA (bsc#1111666)
- IB/mlx4: Adjust delayed work when a dup is observed (bsc#1111666)
- IB/mlx4: Fix leak in id_map_find_del (bsc#1111666)
- IB/mlx4: Fix memory leak in add_gid error flow (bsc#1111666)
- IB/mlx4: Fix race condition between catas error reset and aliasguid flows (bsc#1111666)
- IB/mlx4: Fix starvation in paravirt mux/demux (bsc#1111666)
- IB/mlx4: Follow mirror sequence of device add during device removal (bsc#1111666)
- IB/mlx4: Remove unneeded NULL check (bsc#1111666)
- IB/mlx4: Test return value of calls to ib_get_cached_pkey (bsc#1111666)
- IB/mlx5: Add missing XRC options to QP optional params mask (bsc#1111666)
- IB/mlx5: Compare only index part of a memory window rkey (bsc#1111666)
- IB/mlx5: Do not override existing ip_protocol (bsc#1111666)
- IB/mlx5: Fix clean_mr() to work in the expected order (bsc#1111666)
- IB/mlx5: Fix implicit MR release flow (bsc#1111666)
- IB/mlx5: Fix outstanding_pi index for GSI qps (bsc#1111666)
- IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification (bsc#1111666)
- IB/mlx5: Fix unreg_umr to ignore the mkey state (bsc#1111666)
- IB/mlx5: Improve ODP debugging messages (bsc#1111666)
- IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache (bsc#1111666)
- IB/mlx5: Prevent concurrent MR updates during invalidation (bsc#1111666)
- IB/mlx5: Reset access mask when looping inside page fault handler (bsc#1111666)
- IB/mlx5: Set correct write permissions for implicit ODP MR (bsc#1111666)
- IB/mlx5: Use direct mkey destroy command upon UMR unreg failure (bsc#1111666)
- IB/mlx5: Use fragmented QP's buffer for in-kernel users (bsc#1111666)
- IB/mlx5: WQE dump jumps over first 16 bytes (bsc#1111666)
- IB/mthca: fix return value of error branch in mthca_init_cq() (bsc#1111666)
- IB/qib: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666)
- IB/qib: Fix an error code in qib_sdma_verbs_send() (bsc#1111666)
- IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value (bsc#1111666)
- IB/qib: Remove a set-but-not-used variable (bsc#1111666)
- IB/rdmavt: Convert timers to use timer_setup() (bsc#1111666)
- IB/rdmavt: Fix alloc_qpn() WARN_ON() (bsc#1111666)
- IB/rdmavt: Fix sizeof mismatch (bsc#1111666)
- IB/rdmavt: Reset all QPs when the device is shut down (bsc#1111666)
- IB/rxe: Fix incorrect cache cleanup in error flow (bsc#1111666)
- IB/rxe: Make counters thread safe (bsc#1111666)
- IB/srpt: Fix memory leak in srpt_add_one (bsc#1111666)
- IB/umad: Avoid additional device reference during open()/close() (bsc#1111666)
- IB/umad: Avoid destroying device while it is accessed (bsc#1111666)
- IB/umad: Do not check status of nonseekable_open() (bsc#1111666)
- IB/umad: Fix kernel crash while unloading ib_umad (bsc#1111666)
- IB/umad: Refactor code to use cdev_device_add() (bsc#1111666)
- IB/umad: Simplify and avoid dynamic allocation of class (bsc#1111666)
- IB/usnic: Fix out of bounds index check in query pkey (bsc#1111666)
- IB/uverbs: Fix OOPs upon device disassociation (bsc#1111666)
- iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode (git-fixes).
- iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum (git-fixes).
- inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() (git-fixes).
- Input: adxl34x - clean up a data type in adxl34x_probe() (git-fixes).
- iw_cxgb4: fix ECN check on the passive accept (bsc#1111666)
- iw_cxgb4: only reconnect with MPAv1 if the peer aborts (bsc#1111666)
- kABI: add back flush_dcache_range (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- kABI workaround for usermodehelper changes (bsc#1179406).
- KVM: arm64: Add missing #include of -&lt;linux/string.h&gt; in guest.c (bsc#1174726).
- KVM: arm64: Factor out core register ID enumeration (bsc#1174726).
- KVM: arm64: Filter out invalid core register IDs in KVM_GET_REG_LIST (bsc#1174726).
- KVM: arm64: Refactor kvm_arm_num_regs() for easier maintenance (bsc#1174726).
- KVM: arm64: Reject ioctl access to FPSIMD V-regs on SVE vcpus (bsc#1174726).
- KVM host: kabi fixes for psci_version (bsc#1174726).
- libnvdimm/nvdimm/flush: Allow architecture to override the flush barrier (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- locking/lockdep: Add debug_locks check in __lock_downgrade() (bsc#1050549).
- locking/percpu-rwsem: Use this_cpu_{inc,dec}() for read_count (bsc#1050549).
- locktorture: Print ratio of acquisitions, not failures (bsc#1050549).
- mac80211: always wind down STA state (git-fixes).
- mac80211: free sta in sta_info_insert_finish() on errors (git-fixes).
- mac80211: minstrel: fix tx status processing corner case (git-fixes).
- mac80211: minstrel: remove deferred sampling code (git-fixes).
- mm: always have io_remap_pfn_range() set pgprot_decrypted() (bsc#1112178).
- net: ena: Capitalize all log strings and improve code readability (bsc#1177397).
- net: ena: Change license into format to SPDX in all files (bsc#1177397).
- net: ena: Change log message to netif/dev function (bsc#1177397).
- net: ena: Change RSS related macros and variables names (bsc#1177397).
- net: ena: ethtool: Add new device statistics (bsc#1177397).
- net: ena: ethtool: add stats printing to XDP queues (bsc#1177397).
- net: ena: ethtool: convert stat_offset to 64 bit resolution (bsc#1177397).
- net: ena: Fix all static chekers' warnings (bsc#1177397).
- net: ena: Remove redundant print of placement policy (bsc#1177397).
- net: ena: xdp: add queue counters for xdp actions (bsc#1177397).
- netfilter: nat: can't use dst_hold on noref dst (bsc#1178878).
- net/mlx4_core: Fix init_hca fields offset (git-fixes).
- nfc: s3fwrn5: use signed integer for parsing GPIO numbers (git-fixes).
- NFS: mark nfsiod as CPU_INTENSIVE (bsc#1177304).
- NFS: only invalidate dentrys that are clearly invalid (bsc#1178669 bsc#1170139).
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (bsc#1170630).
- PCI: pci-hyperv: Fix build errors on non-SYSFS config (git-fixes).
- pinctrl: amd: fix incorrect way to disable debounce filter (git-fixes).
- pinctrl: amd: use higher precision for 512 RtcClk (git-fixes).
- pinctrl: aspeed: Fix GPI only function problem (git-fixes).
- platform/x86: toshiba_acpi: Fix the wrong variable assignment (git-fixes).
- powerpc/32: define helpers to get L1 cache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/64: flush_inval_dcache_range() becomes flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/64: reuse PPC32 static inline flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc: Chunk calls to flush_dcache_range in arch_*_memory (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964 git-fixes).
- powerpc: define helpers to get L1 icache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/mm: Flush cache on memory hot(un)plug (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Add flush routines using new pmem store and sync instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Add new instructions for persistent storage and sync (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Avoid the barrier in flush routines (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Fix kernel crash due to wrong range value usage in flush_dcache_range (jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Initialize pmem device on newer hardware (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Restrict papr_scm to P8 and above (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Update ppc64 to use the new barrier instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- RDMA/bnxt_re: Fix lifetimes in bnxt_re_task (bsc#1111666)
- RDMA/bnxt_re: Fix Send Work Entry state check while polling completions (bsc#1111666)
- RDMA/bnxt_re: Fix sizeof mismatch for allocation of pbl_tbl. (bsc#1111666)
- RDMA/bnxt_re: Fix stack-out-of-bounds in bnxt_qplib_rcfw_send_message (bsc#1111666)
- RDMA/cma: add missed unregister_pernet_subsys in init failure (bsc#1111666)
- RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (bsc#1111666)
- RDMA/cma: Fix false error message (bsc#1111666)
- RDMA/cma: fix null-ptr-deref Read in cma_cleanup (bsc#1111666)
- RDMA/cma: Protect bind_list and listen_list while finding matching cm id (bsc#1111666)
- RDMA/cm: Fix checking for allowed duplicate listens (bsc#1111666)
- RDMA/cm: Remove a race freeing timewait_info (bsc#1111666)
- RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow (bsc#1111666)
- RDMA/core: Do not depend device ODP capabilities on kconfig option (bsc#1111666)
- RDMA/core: Fix invalid memory access in spec_filter_size (bsc#1111666)
- RDMA/core: Fix locking in ib_uverbs_event_read (bsc#1111666)
- RDMA/core: Fix protection fault in ib_mr_pool_destroy (bsc#1111666)
- RDMA/core: Fix race between destroy and release FD object (bsc#1111666)
- RDMA/core: Fix race when resolving IP address (bsc#1111666)
- RDMA/core: Prevent mixed use of FDs between shared ufiles (bsc#1111666)
- RDMA/cxgb3: Delete and properly mark unimplemented resize CQ function (bsc#1111666)
- RDMA: Directly cast the sockaddr union to sockaddr (bsc#1111666)
- RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN (bsc#1111666)
- RDMA/hns: Correct typo of hns_roce_create_cq() (bsc#1111666)
- RDMA/hns: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/hns: Set the unsupported wr opcode (bsc#1111666)
- RDMA/i40iw: fix a potential NULL pointer dereference (bsc#1111666)
- RDMA/i40iw: Set queue pair state when being queried (bsc#1111666)
- RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (bsc#1111666)
- RDMA/ipoib: Remove check for ETH_SS_TEST (bsc#1111666)
- RDMA/ipoib: Return void from ipoib_ib_dev_stop() (bsc#1111666)
- RDMA/ipoib: Set rtnl_link_ops for ipoib interfaces (bsc#1111666)
- RDMA/iwcm: Fix a lock inversion issue (bsc#1111666)
- RDMA/iwcm: Fix iwcm work deallocation (bsc#1111666)
- RDMA/iwcm: move iw_rem_ref() calls out of spinlock (bsc#1111666)
- RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case (bsc#1111666)
- RDMA/iw_cxgb4: Fix the unchecked ep dereference (bsc#1111666)
- RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads() (bsc#1111666)
- RDMA/mlx4: Initialize ib_spec on the stack (bsc#1111666)
- RDMA/mlx4: Read pkey table length instead of hardcoded value (bsc#1111666)
- RDMA/mlx5: Clear old rate limit when closing QP (bsc#1111666)
- RDMA/mlx5: Delete unreachable handle_atomic code by simplifying SW completion (bsc#1111666)
- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (bsc#1111666)
- RDMA/mlx5: Fix a race with mlx5_ib_update_xlt on an implicit MR (bsc#1111666)
- RDMA/mlx5: Fix function name typo 'fileds' -&gt; 'fields' (bsc#1111666)
- RDMA/mlx5: Return proper error value (bsc#1111666)
- RDMA/mlx5: Set GRH fields in query QP on RoCE (bsc#1111666)
- RDMA/mlx5: Verify that QP is created with RQ or SQ (bsc#1111666)
- RDMA/nes: Remove second wait queue initialization call (bsc#1111666)
- RDMA/netlink: Do not always generate an ACK for some netlink operations (bsc#1111666)
- RDMA/ocrdma: Fix out of bounds index check in query pkey (bsc#1111666)
- RDMA/ocrdma: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() (bsc#1111666)
- RDMA/qedr: Endianness warnings cleanup (bsc#1111666)
- RDMA/qedr: Fix doorbell setting (bsc#1111666)
- RDMA/qedr: Fix memory leak in user qp and mr (bsc#1111666)
- RDMA/qedr: Fix reported firmware version (bsc#1111666)
- RDMA/qedr: Fix use of uninitialized field (bsc#1111666)
- RDMA/qedr: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/qedr: SRQ's bug fixes (bsc#1111666)
- RDMA/qib: Delete extra line (bsc#1111666)
- RDMA/qib: Remove all occurrences of BUG_ON() (bsc#1111666)
- RDMA/qib: Validate -&gt;show()/store() callbacks before calling them (bsc#1111666)
- RDMA/rxe: Drop pointless checks in rxe_init_ports (bsc#1111666)
- RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM (bsc#1111666)
- RDMA/rxe: Fix configuration of atomic queue pair attributes (bsc#1111666)
- RDMA/rxe: Fix memleak in rxe_mem_init_user (bsc#1111666)
- RDMA/rxe: Fix slab-out-bounds access which lead to kernel crash later (bsc#1111666)
- RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq (bsc#1111666)
- RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars (bsc#1111666)
- RDMA/rxe: Prevent access to wr-&gt;next ptr afrer wr is posted to send queue (bsc#1111666)
- RDMA/rxe: Remove unused rxe_mem_map_pages (bsc#1111666)
- RDMA/rxe: Remove useless rxe_init_device_param assignments (bsc#1111666)
- RDMA/rxe: Return void from rxe_init_port_param() (bsc#1111666)
- RDMA/rxe: Return void from rxe_mem_init_dma() (bsc#1111666)
- RDMA/rxe: Set default vendor ID (bsc#1111666)
- RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices (bsc#1111666)
- RDMA/rxe: Skip dgid check in loopback mode (bsc#1111666)
- RDMA/rxe: Use for_each_sg_page iterator on umem SGL (bsc#1111666)
- RDMA/srp: Rework SCSI device reset handling (bsc#1111666)
- RDMA/srpt: Fix typo in srpt_unregister_mad_agent docstring (bsc#1111666)
- RDMA/srpt: Report the SCSI residual to the initiator (bsc#1111666)
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (bsc#1111666)
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (bsc#1111666)
- RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated (bsc#1111666)
- RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove (bsc#1111666)
- RDMA/vmw_pvrdma: Use atomic memory allocation in create AH (bsc#1111666)
- reboot: fix overflow parsing reboot cpu number (bsc#1179421).
- regulator: avoid resolve_supply() infinite recursion (git-fixes).
- regulator: fix memory leak with repeated set_machine_constraints() (git-fixes).
- regulator: ti-abb: Fix array out of bound read access on the first transition (git-fixes).
- regulator: workaround self-referent regulators (git-fixes).
- Revert 'cdc-acm: hardening against malicious devices' (git-fixes).
- Revert 'kernel/reboot.c: convert simple_strtoul to kstrtoint' (bsc#1179418).
- RMDA/cm: Fix missing ib_cm_destroy_id() in ib_cm_insert_listen() (bsc#1111666)
- rxe: correctly calculate iCRC for unaligned payloads (bsc#1111666)
- rxe: fix error completion wr_id and qp_num (bsc#1111666)
- s390/cio: add cond_resched() in the slow_eval_known_fn() loop (bsc#1177805 LTC#188737).
- s390/cpum_cf,perf: change DFLT_CCERROR counter name (bsc#1175916 LTC#187937).
- s390/dasd: Fix zero write for FBA devices (bsc#1177808 LTC#188739).
- s390: kernel/uv: handle length extension properly (bsc#1178940 LTC#189323).
- sched/core: Fix PI boosting between RT and DEADLINE tasks (bsc#1112178).
- sched/x86: SaveFLAGS on context switch (bsc#1112178).
- scripts/git_sort/git_sort.py: add ceph maintainers git tree
- scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported (git-fixes).
- scsi: RDMA/srpt: Fix a credit leak for aborted commands (bsc#1111666)
- Staging: rtl8188eu: rtw_mlme: Fix uninitialized variable authmode (git-fixes).
- staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids (git-fixes).
- time: Prevent undefined behaviour in timespec64_to_ns() (git-fixes).
- tracing: Fix out of bounds write in get_trace_buf (bsc#1179403).
- tty: serial: imx: keep console clocks always on (git-fixes).
- Update references in patches.suse/net-smc-tolerate-future-smcd-versions (bsc#1172542 LTC#186070 git-fixes).
- USB: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode (git-fixes).
- USB: core: driver: fix stray tabs in error messages (git-fixes).
- USB: core: Fix regression in Hercules audio card (git-fixes).
- USB: gadget: Fix memleak in gadgetfs_fill_super (git-fixes).
- USB: gadget: f_midi: Fix memleak in f_midi_alloc (git-fixes).
- USB: host: ehci-tegra: Fix error handling in tegra_ehci_probe() (git-fixes).
- USB: host: xhci-mtk: avoid runtime suspend when removing hcd (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race (git-fixes).
- USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters (git-fixes).
- USB: serial: option: add Cellient MPL200 card (git-fixes).
- USB: serial: option: Add Telit FT980-KS composition (git-fixes).
- USB: serial: pl2303: add device-id for HP GC device (git-fixes).
- usermodehelper: reset umask to default before executing user process (bsc#1179406).
- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- x86/hyperv: Clarify comment on x2apic mode (git-fixes).
- x86/hyperv: Make vapic support x2apic mode (git-fixes).
- x86/microcode/intel: Check patch signature before saving microcode for early loading (bsc#1112178).
- x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect (git-fixes).
- x86/PCI: Fix intel_mid_pci.c build error when ACPI is not enabled (git-fixes).
- x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (git-fixes).
- x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP (bsc#1112178).
- x86/sysfb_efi: Add quirks for some devices with swapped width and height (git-fixes).
- xfrm: Fix memleak on xfrm state destroy (bsc#1158775).
- xfs: revert 'xfs: fix rmap key and record comparison functions' (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-09"/>
	<updated date="2020-12-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1067665">SUSE bug 1067665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158775">SUSE bug 1158775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170139">SUSE bug 1170139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170630">SUSE bug 1170630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172542">SUSE bug 1172542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174726">SUSE bug 1174726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175916">SUSE bug 1175916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176109">SUSE bug 1176109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177304">SUSE bug 1177304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177397">SUSE bug 1177397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177805">SUSE bug 1177805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177808">SUSE bug 1177808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177819">SUSE bug 1177819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177820">SUSE bug 1177820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178182">SUSE bug 1178182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178589">SUSE bug 1178589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178635">SUSE bug 1178635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178669">SUSE bug 1178669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178838">SUSE bug 1178838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178853">SUSE bug 1178853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178854">SUSE bug 1178854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178878">SUSE bug 1178878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178886">SUSE bug 1178886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178897">SUSE bug 1178897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178940">SUSE bug 1178940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178962">SUSE bug 1178962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179107">SUSE bug 1179107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179140">SUSE bug 1179140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179141">SUSE bug 1179141</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179211">SUSE bug 1179211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179213">SUSE bug 1179213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179259">SUSE bug 1179259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179403">SUSE bug 1179403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179406">SUSE bug 1179406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179418">SUSE bug 1179418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179421">SUSE bug 1179421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179424">SUSE bug 1179424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179426">SUSE bug 1179426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179427">SUSE bug 1179427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179429">SUSE bug 1179429</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15436/">CVE-2020-15436</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15437/">CVE-2020-15437</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25669/">CVE-2020-25669</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27777/">CVE-2020-27777</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28915/">CVE-2020-28915</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28974/">CVE-2020-28974</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29371/">CVE-2020-29371</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497098" comment="reiserfs-kmp-default-4.12.14-197.75.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138320" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1155346" ref_url="https://bugzilla.suse.com/1155346" source="BUGZILLA"/>
		<reference ref_id="1176029" ref_url="https://bugzilla.suse.com/1176029" source="BUGZILLA"/>
		<reference ref_id="1177479" ref_url="https://bugzilla.suse.com/1177479" source="BUGZILLA"/>
		<reference ref_id="1177575" ref_url="https://bugzilla.suse.com/1177575" source="BUGZILLA"/>
		<reference ref_id="1177673" ref_url="https://bugzilla.suse.com/1177673" source="BUGZILLA"/>
		<reference ref_id="1177793" ref_url="https://bugzilla.suse.com/1177793" source="BUGZILLA"/>
		<reference ref_id="1179491" ref_url="https://bugzilla.suse.com/1179491" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1971" ref_url="https://www.suse.com/security/cve/CVE-2020-1971/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3762-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007974.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

- CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).
- Initialized dh-&gt;nid to NID_undef in DH_new_method() (bsc#1177673).
- Fixed a test failure in apache_ssl in fips mode (bsc#1177793).
- Renamed BN_get_rfc3526_prime_* functions back to get_rfc3526_prime_* (bsc#1177575).
- Restored private key check in EC_KEY_check_key (bsc#1177479).
- Added shared secret KAT to FIPS DH selftest (bsc#1176029).
- Included ECDH/DH Requirements from SP800-56Arev3 (bsc#1176029).
- Used SHA-2 in the RSA pairwise consistency check (bsc#1155346)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-11"/>
	<updated date="2020-12-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1155346">SUSE bug 1155346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176029">SUSE bug 1176029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177479">SUSE bug 1177479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177575">SUSE bug 1177575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177673">SUSE bug 1177673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177793">SUSE bug 1177793</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179491">SUSE bug 1179491</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-1971/">CVE-2020-1971</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497099" comment="libopenssl-1_0_0-devel-1.0.2p-3.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497100" comment="libopenssl1_0_0-1.0.2p-3.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497101" comment="openssl-1_0_0-1.0.2p-3.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138321" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177943" ref_url="https://bugzilla.suse.com/1177943" source="BUGZILLA"/>
		<reference ref_id="1180063" ref_url="https://bugzilla.suse.com/1180063" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14779" ref_url="https://www.suse.com/security/cve/CVE-2020-14779/" source="CVE"/>
		<reference ref_id="CVE-2020-14781" ref_url="https://www.suse.com/security/cve/CVE-2020-14781/" source="CVE"/>
		<reference ref_id="CVE-2020-14792" ref_url="https://www.suse.com/security/cve/CVE-2020-14792/" source="CVE"/>
		<reference ref_id="CVE-2020-14796" ref_url="https://www.suse.com/security/cve/CVE-2020-14796/" source="CVE"/>
		<reference ref_id="CVE-2020-14797" ref_url="https://www.suse.com/security/cve/CVE-2020-14797/" source="CVE"/>
		<reference ref_id="CVE-2020-14798" ref_url="https://www.suse.com/security/cve/CVE-2020-14798/" source="CVE"/>
		<reference ref_id="CVE-2020-14803" ref_url="https://www.suse.com/security/cve/CVE-2020-14803/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008117.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
    - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
      that the set timeout
    - Z/OS specific C function send_file is changing the file pointer
      position
  * Java Virtual Machine:
    - Crash on iterate java stack
    - Java process hang on SIGTERM
  * JIT Compiler:
    - JMS performance regression from JDK8 SR5 FP40 TO FP41

  * Class Libraries:
    - z15 high utilization following Z/VM and Linux migration from
      z14 To z15
  * Java Virtual Machine:
    - Assertion failed when trying to write a class file
    - Assertion failure at modronapi.cpp
    - Improve the performance of defining and finding classes
  * JIT Compiler:
    - An assert in ppcbinaryencoding.cpp may trigger when running
      with traps disabled on power
    - AOT field offset off by n bytes
    - Segmentation fault in jit module on ibm z platform		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-23"/>
	<updated date="2020-12-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177943">SUSE bug 1177943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180063">SUSE bug 1180063</bugzilla>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14779/">CVE-2020-14779</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14781/">CVE-2020-14781</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14792/">CVE-2020-14792</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14796/">CVE-2020-14796</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14797/">CVE-2020-14797</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14798/">CVE-2020-14798</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14803/">CVE-2020-14803</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497102" comment="java-1_8_0-ibm-1.8.0_sr6.20-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497103" comment="java-1_8_0-ibm-alsa-1.8.0_sr6.20-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497104" comment="java-1_8_0-ibm-devel-1.8.0_sr6.20-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497105" comment="java-1_8_0-ibm-plugin-1.8.0_sr6.20-3.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138322" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160968" ref_url="https://bugzilla.suse.com/1160968" source="BUGZILLA"/>
		<reference ref_id="1162972" ref_url="https://bugzilla.suse.com/1162972" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-4732" ref_url="https://www.suse.com/security/cve/CVE-2019-4732/" source="CVE"/>
		<reference ref_id="CVE-2020-2583" ref_url="https://www.suse.com/security/cve/CVE-2020-2583/" source="CVE"/>
		<reference ref_id="CVE-2020-2593" ref_url="https://www.suse.com/security/cve/CVE-2020-2593/" source="CVE"/>
		<reference ref_id="CVE-2020-2604" ref_url="https://www.suse.com/security/cve/CVE-2020-2604/" source="CVE"/>
		<reference ref_id="CVE-2020-2659" ref_url="https://www.suse.com/security/cve/CVE-2020-2659/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0466-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006519.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

Java 8.0 was updated to Service Refresh 6 Fix Pack 5 (bsc#1162972, bsc#1160968)

- CVE-2020-2583: Unlink Set of LinkedHashSets
- CVE-2019-4732: Untrusted DLL search path vulnerability 
- CVE-2020-2593: Normalize normalization for all
- CVE-2020-2604: Better serial filter handling
- CVE-2020-2659: Enhance datagram socket support
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-25"/>
	<updated date="2020-02-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160968">SUSE bug 1160968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162972">SUSE bug 1162972</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-4732/">CVE-2019-4732</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2583/">CVE-2020-2583</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2593/">CVE-2020-2593</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2604/">CVE-2020-2604</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2659/">CVE-2020-2659</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497037" comment="java-1_8_0-ibm-1.8.0_sr6.5-3.33.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497038" comment="java-1_8_0-ibm-alsa-1.8.0_sr6.5-3.33.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497039" comment="java-1_8_0-ibm-devel-1.8.0_sr6.5-3.33.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497040" comment="java-1_8_0-ibm-plugin-1.8.0_sr6.5-3.33.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138323" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1046303" ref_url="https://bugzilla.suse.com/1046303" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1051858" ref_url="https://bugzilla.suse.com/1051858" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1086301" ref_url="https://bugzilla.suse.com/1086301" source="BUGZILLA"/>
		<reference ref_id="1086313" ref_url="https://bugzilla.suse.com/1086313" source="BUGZILLA"/>
		<reference ref_id="1086314" ref_url="https://bugzilla.suse.com/1086314" source="BUGZILLA"/>
		<reference ref_id="1088810" ref_url="https://bugzilla.suse.com/1088810" source="BUGZILLA"/>
		<reference ref_id="1090888" ref_url="https://bugzilla.suse.com/1090888" source="BUGZILLA"/>
		<reference ref_id="1103989" ref_url="https://bugzilla.suse.com/1103989" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1105392" ref_url="https://bugzilla.suse.com/1105392" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1112504" ref_url="https://bugzilla.suse.com/1112504" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1115026" ref_url="https://bugzilla.suse.com/1115026" source="BUGZILLA"/>
		<reference ref_id="1118338" ref_url="https://bugzilla.suse.com/1118338" source="BUGZILLA"/>
		<reference ref_id="1118661" ref_url="https://bugzilla.suse.com/1118661" source="BUGZILLA"/>
		<reference ref_id="1123328" ref_url="https://bugzilla.suse.com/1123328" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1127682" ref_url="https://bugzilla.suse.com/1127682" source="BUGZILLA"/>
		<reference ref_id="1129551" ref_url="https://bugzilla.suse.com/1129551" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1133147" ref_url="https://bugzilla.suse.com/1133147" source="BUGZILLA"/>
		<reference ref_id="1134973" ref_url="https://bugzilla.suse.com/1134973" source="BUGZILLA"/>
		<reference ref_id="1140025" ref_url="https://bugzilla.suse.com/1140025" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1143959" ref_url="https://bugzilla.suse.com/1143959" source="BUGZILLA"/>
		<reference ref_id="1144162" ref_url="https://bugzilla.suse.com/1144162" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146544" ref_url="https://bugzilla.suse.com/1146544" source="BUGZILLA"/>
		<reference ref_id="1151548" ref_url="https://bugzilla.suse.com/1151548" source="BUGZILLA"/>
		<reference ref_id="1151910" ref_url="https://bugzilla.suse.com/1151910" source="BUGZILLA"/>
		<reference ref_id="1151927" ref_url="https://bugzilla.suse.com/1151927" source="BUGZILLA"/>
		<reference ref_id="1152107" ref_url="https://bugzilla.suse.com/1152107" source="BUGZILLA"/>
		<reference ref_id="1152631" ref_url="https://bugzilla.suse.com/1152631" source="BUGZILLA"/>
		<reference ref_id="1153535" ref_url="https://bugzilla.suse.com/1153535" source="BUGZILLA"/>
		<reference ref_id="1153917" ref_url="https://bugzilla.suse.com/1153917" source="BUGZILLA"/>
		<reference ref_id="1154243" ref_url="https://bugzilla.suse.com/1154243" source="BUGZILLA"/>
		<reference ref_id="1154601" ref_url="https://bugzilla.suse.com/1154601" source="BUGZILLA"/>
		<reference ref_id="1154768" ref_url="https://bugzilla.suse.com/1154768" source="BUGZILLA"/>
		<reference ref_id="1154916" ref_url="https://bugzilla.suse.com/1154916" source="BUGZILLA"/>
		<reference ref_id="1155331" ref_url="https://bugzilla.suse.com/1155331" source="BUGZILLA"/>
		<reference ref_id="1155334" ref_url="https://bugzilla.suse.com/1155334" source="BUGZILLA"/>
		<reference ref_id="1155689" ref_url="https://bugzilla.suse.com/1155689" source="BUGZILLA"/>
		<reference ref_id="1156259" ref_url="https://bugzilla.suse.com/1156259" source="BUGZILLA"/>
		<reference ref_id="1156286" ref_url="https://bugzilla.suse.com/1156286" source="BUGZILLA"/>
		<reference ref_id="1156462" ref_url="https://bugzilla.suse.com/1156462" source="BUGZILLA"/>
		<reference ref_id="1157155" ref_url="https://bugzilla.suse.com/1157155" source="BUGZILLA"/>
		<reference ref_id="1157157" ref_url="https://bugzilla.suse.com/1157157" source="BUGZILLA"/>
		<reference ref_id="1157169" ref_url="https://bugzilla.suse.com/1157169" source="BUGZILLA"/>
		<reference ref_id="1157303" ref_url="https://bugzilla.suse.com/1157303" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1157480" ref_url="https://bugzilla.suse.com/1157480" source="BUGZILLA"/>
		<reference ref_id="1157692" ref_url="https://bugzilla.suse.com/1157692" source="BUGZILLA"/>
		<reference ref_id="1157853" ref_url="https://bugzilla.suse.com/1157853" source="BUGZILLA"/>
		<reference ref_id="1157895" ref_url="https://bugzilla.suse.com/1157895" source="BUGZILLA"/>
		<reference ref_id="1157908" ref_url="https://bugzilla.suse.com/1157908" source="BUGZILLA"/>
		<reference ref_id="1157966" ref_url="https://bugzilla.suse.com/1157966" source="BUGZILLA"/>
		<reference ref_id="1158013" ref_url="https://bugzilla.suse.com/1158013" source="BUGZILLA"/>
		<reference ref_id="1158021" ref_url="https://bugzilla.suse.com/1158021" source="BUGZILLA"/>
		<reference ref_id="1158026" ref_url="https://bugzilla.suse.com/1158026" source="BUGZILLA"/>
		<reference ref_id="1158071" ref_url="https://bugzilla.suse.com/1158071" source="BUGZILLA"/>
		<reference ref_id="1158094" ref_url="https://bugzilla.suse.com/1158094" source="BUGZILLA"/>
		<reference ref_id="1158132" ref_url="https://bugzilla.suse.com/1158132" source="BUGZILLA"/>
		<reference ref_id="1158381" ref_url="https://bugzilla.suse.com/1158381" source="BUGZILLA"/>
		<reference ref_id="1158533" ref_url="https://bugzilla.suse.com/1158533" source="BUGZILLA"/>
		<reference ref_id="1158637" ref_url="https://bugzilla.suse.com/1158637" source="BUGZILLA"/>
		<reference ref_id="1158638" ref_url="https://bugzilla.suse.com/1158638" source="BUGZILLA"/>
		<reference ref_id="1158639" ref_url="https://bugzilla.suse.com/1158639" source="BUGZILLA"/>
		<reference ref_id="1158640" ref_url="https://bugzilla.suse.com/1158640" source="BUGZILLA"/>
		<reference ref_id="1158641" ref_url="https://bugzilla.suse.com/1158641" source="BUGZILLA"/>
		<reference ref_id="1158643" ref_url="https://bugzilla.suse.com/1158643" source="BUGZILLA"/>
		<reference ref_id="1158644" ref_url="https://bugzilla.suse.com/1158644" source="BUGZILLA"/>
		<reference ref_id="1158645" ref_url="https://bugzilla.suse.com/1158645" source="BUGZILLA"/>
		<reference ref_id="1158646" ref_url="https://bugzilla.suse.com/1158646" source="BUGZILLA"/>
		<reference ref_id="1158647" ref_url="https://bugzilla.suse.com/1158647" source="BUGZILLA"/>
		<reference ref_id="1158649" ref_url="https://bugzilla.suse.com/1158649" source="BUGZILLA"/>
		<reference ref_id="1158651" ref_url="https://bugzilla.suse.com/1158651" source="BUGZILLA"/>
		<reference ref_id="1158652" ref_url="https://bugzilla.suse.com/1158652" source="BUGZILLA"/>
		<reference ref_id="1158819" ref_url="https://bugzilla.suse.com/1158819" source="BUGZILLA"/>
		<reference ref_id="1158823" ref_url="https://bugzilla.suse.com/1158823" source="BUGZILLA"/>
		<reference ref_id="1158824" ref_url="https://bugzilla.suse.com/1158824" source="BUGZILLA"/>
		<reference ref_id="1158827" ref_url="https://bugzilla.suse.com/1158827" source="BUGZILLA"/>
		<reference ref_id="1158834" ref_url="https://bugzilla.suse.com/1158834" source="BUGZILLA"/>
		<reference ref_id="1158893" ref_url="https://bugzilla.suse.com/1158893" source="BUGZILLA"/>
		<reference ref_id="1158900" ref_url="https://bugzilla.suse.com/1158900" source="BUGZILLA"/>
		<reference ref_id="1158903" ref_url="https://bugzilla.suse.com/1158903" source="BUGZILLA"/>
		<reference ref_id="1158904" ref_url="https://bugzilla.suse.com/1158904" source="BUGZILLA"/>
		<reference ref_id="1158954" ref_url="https://bugzilla.suse.com/1158954" source="BUGZILLA"/>
		<reference ref_id="1159024" ref_url="https://bugzilla.suse.com/1159024" source="BUGZILLA"/>
		<reference ref_id="1159028" ref_url="https://bugzilla.suse.com/1159028" source="BUGZILLA"/>
		<reference ref_id="1159271" ref_url="https://bugzilla.suse.com/1159271" source="BUGZILLA"/>
		<reference ref_id="1159297" ref_url="https://bugzilla.suse.com/1159297" source="BUGZILLA"/>
		<reference ref_id="1159377" ref_url="https://bugzilla.suse.com/1159377" source="BUGZILLA"/>
		<reference ref_id="1159394" ref_url="https://bugzilla.suse.com/1159394" source="BUGZILLA"/>
		<reference ref_id="1159483" ref_url="https://bugzilla.suse.com/1159483" source="BUGZILLA"/>
		<reference ref_id="1159484" ref_url="https://bugzilla.suse.com/1159484" source="BUGZILLA"/>
		<reference ref_id="1159500" ref_url="https://bugzilla.suse.com/1159500" source="BUGZILLA"/>
		<reference ref_id="1159569" ref_url="https://bugzilla.suse.com/1159569" source="BUGZILLA"/>
		<reference ref_id="1159588" ref_url="https://bugzilla.suse.com/1159588" source="BUGZILLA"/>
		<reference ref_id="1159841" ref_url="https://bugzilla.suse.com/1159841" source="BUGZILLA"/>
		<reference ref_id="1159908" ref_url="https://bugzilla.suse.com/1159908" source="BUGZILLA"/>
		<reference ref_id="1159909" ref_url="https://bugzilla.suse.com/1159909" source="BUGZILLA"/>
		<reference ref_id="1159910" ref_url="https://bugzilla.suse.com/1159910" source="BUGZILLA"/>
		<reference ref_id="1159911" ref_url="https://bugzilla.suse.com/1159911" source="BUGZILLA"/>
		<reference ref_id="1159955" ref_url="https://bugzilla.suse.com/1159955" source="BUGZILLA"/>
		<reference ref_id="1160147" ref_url="https://bugzilla.suse.com/1160147" source="BUGZILLA"/>
		<reference ref_id="1160195" ref_url="https://bugzilla.suse.com/1160195" source="BUGZILLA"/>
		<reference ref_id="1160210" ref_url="https://bugzilla.suse.com/1160210" source="BUGZILLA"/>
		<reference ref_id="1160211" ref_url="https://bugzilla.suse.com/1160211" source="BUGZILLA"/>
		<reference ref_id="1160218" ref_url="https://bugzilla.suse.com/1160218" source="BUGZILLA"/>
		<reference ref_id="1160433" ref_url="https://bugzilla.suse.com/1160433" source="BUGZILLA"/>
		<reference ref_id="1160442" ref_url="https://bugzilla.suse.com/1160442" source="BUGZILLA"/>
		<reference ref_id="1160469" ref_url="https://bugzilla.suse.com/1160469" source="BUGZILLA"/>
		<reference ref_id="1160470" ref_url="https://bugzilla.suse.com/1160470" source="BUGZILLA"/>
		<reference ref_id="1160476" ref_url="https://bugzilla.suse.com/1160476" source="BUGZILLA"/>
		<reference ref_id="1160560" ref_url="https://bugzilla.suse.com/1160560" source="BUGZILLA"/>
		<reference ref_id="1160618" ref_url="https://bugzilla.suse.com/1160618" source="BUGZILLA"/>
		<reference ref_id="1160678" ref_url="https://bugzilla.suse.com/1160678" source="BUGZILLA"/>
		<reference ref_id="1160755" ref_url="https://bugzilla.suse.com/1160755" source="BUGZILLA"/>
		<reference ref_id="1160756" ref_url="https://bugzilla.suse.com/1160756" source="BUGZILLA"/>
		<reference ref_id="1160784" ref_url="https://bugzilla.suse.com/1160784" source="BUGZILLA"/>
		<reference ref_id="1160787" ref_url="https://bugzilla.suse.com/1160787" source="BUGZILLA"/>
		<reference ref_id="1160802" ref_url="https://bugzilla.suse.com/1160802" source="BUGZILLA"/>
		<reference ref_id="1160803" ref_url="https://bugzilla.suse.com/1160803" source="BUGZILLA"/>
		<reference ref_id="1160804" ref_url="https://bugzilla.suse.com/1160804" source="BUGZILLA"/>
		<reference ref_id="1160917" ref_url="https://bugzilla.suse.com/1160917" source="BUGZILLA"/>
		<reference ref_id="1160966" ref_url="https://bugzilla.suse.com/1160966" source="BUGZILLA"/>
		<reference ref_id="1160979" ref_url="https://bugzilla.suse.com/1160979" source="BUGZILLA"/>
		<reference ref_id="1161087" ref_url="https://bugzilla.suse.com/1161087" source="BUGZILLA"/>
		<reference ref_id="1161243" ref_url="https://bugzilla.suse.com/1161243" source="BUGZILLA"/>
		<reference ref_id="1161360" ref_url="https://bugzilla.suse.com/1161360" source="BUGZILLA"/>
		<reference ref_id="1161472" ref_url="https://bugzilla.suse.com/1161472" source="BUGZILLA"/>
		<reference ref_id="1161514" ref_url="https://bugzilla.suse.com/1161514" source="BUGZILLA"/>
		<reference ref_id="1161518" ref_url="https://bugzilla.suse.com/1161518" source="BUGZILLA"/>
		<reference ref_id="1161522" ref_url="https://bugzilla.suse.com/1161522" source="BUGZILLA"/>
		<reference ref_id="1161523" ref_url="https://bugzilla.suse.com/1161523" source="BUGZILLA"/>
		<reference ref_id="1161549" ref_url="https://bugzilla.suse.com/1161549" source="BUGZILLA"/>
		<reference ref_id="1161552" ref_url="https://bugzilla.suse.com/1161552" source="BUGZILLA"/>
		<reference ref_id="1161674" ref_url="https://bugzilla.suse.com/1161674" source="BUGZILLA"/>
		<reference ref_id="1161702" ref_url="https://bugzilla.suse.com/1161702" source="BUGZILLA"/>
		<reference ref_id="1161907" ref_url="https://bugzilla.suse.com/1161907" source="BUGZILLA"/>
		<reference ref_id="1161931" ref_url="https://bugzilla.suse.com/1161931" source="BUGZILLA"/>
		<reference ref_id="1161933" ref_url="https://bugzilla.suse.com/1161933" source="BUGZILLA"/>
		<reference ref_id="1161934" ref_url="https://bugzilla.suse.com/1161934" source="BUGZILLA"/>
		<reference ref_id="1161935" ref_url="https://bugzilla.suse.com/1161935" source="BUGZILLA"/>
		<reference ref_id="1161936" ref_url="https://bugzilla.suse.com/1161936" source="BUGZILLA"/>
		<reference ref_id="1161937" ref_url="https://bugzilla.suse.com/1161937" source="BUGZILLA"/>
		<reference ref_id="1162028" ref_url="https://bugzilla.suse.com/1162028" source="BUGZILLA"/>
		<reference ref_id="1162067" ref_url="https://bugzilla.suse.com/1162067" source="BUGZILLA"/>
		<reference ref_id="1162109" ref_url="https://bugzilla.suse.com/1162109" source="BUGZILLA"/>
		<reference ref_id="1162139" ref_url="https://bugzilla.suse.com/1162139" source="BUGZILLA"/>
		<reference ref_id="1162557" ref_url="https://bugzilla.suse.com/1162557" source="BUGZILLA"/>
		<reference ref_id="1162617" ref_url="https://bugzilla.suse.com/1162617" source="BUGZILLA"/>
		<reference ref_id="1162618" ref_url="https://bugzilla.suse.com/1162618" source="BUGZILLA"/>
		<reference ref_id="1162619" ref_url="https://bugzilla.suse.com/1162619" source="BUGZILLA"/>
		<reference ref_id="1162623" ref_url="https://bugzilla.suse.com/1162623" source="BUGZILLA"/>
		<reference ref_id="1162928" ref_url="https://bugzilla.suse.com/1162928" source="BUGZILLA"/>
		<reference ref_id="1162943" ref_url="https://bugzilla.suse.com/1162943" source="BUGZILLA"/>
		<reference ref_id="1163206" ref_url="https://bugzilla.suse.com/1163206" source="BUGZILLA"/>
		<reference ref_id="1163383" ref_url="https://bugzilla.suse.com/1163383" source="BUGZILLA"/>
		<reference ref_id="1163384" ref_url="https://bugzilla.suse.com/1163384" source="BUGZILLA"/>
		<reference ref_id="1163762" ref_url="https://bugzilla.suse.com/1163762" source="BUGZILLA"/>
		<reference ref_id="1163774" ref_url="https://bugzilla.suse.com/1163774" source="BUGZILLA"/>
		<reference ref_id="1163836" ref_url="https://bugzilla.suse.com/1163836" source="BUGZILLA"/>
		<reference ref_id="1163840" ref_url="https://bugzilla.suse.com/1163840" source="BUGZILLA"/>
		<reference ref_id="1163841" ref_url="https://bugzilla.suse.com/1163841" source="BUGZILLA"/>
		<reference ref_id="1163842" ref_url="https://bugzilla.suse.com/1163842" source="BUGZILLA"/>
		<reference ref_id="1163843" ref_url="https://bugzilla.suse.com/1163843" source="BUGZILLA"/>
		<reference ref_id="1163844" ref_url="https://bugzilla.suse.com/1163844" source="BUGZILLA"/>
		<reference ref_id="1163845" ref_url="https://bugzilla.suse.com/1163845" source="BUGZILLA"/>
		<reference ref_id="1163846" ref_url="https://bugzilla.suse.com/1163846" source="BUGZILLA"/>
		<reference ref_id="1163849" ref_url="https://bugzilla.suse.com/1163849" source="BUGZILLA"/>
		<reference ref_id="1163850" ref_url="https://bugzilla.suse.com/1163850" source="BUGZILLA"/>
		<reference ref_id="1163851" ref_url="https://bugzilla.suse.com/1163851" source="BUGZILLA"/>
		<reference ref_id="1163852" ref_url="https://bugzilla.suse.com/1163852" source="BUGZILLA"/>
		<reference ref_id="1163853" ref_url="https://bugzilla.suse.com/1163853" source="BUGZILLA"/>
		<reference ref_id="1163855" ref_url="https://bugzilla.suse.com/1163855" source="BUGZILLA"/>
		<reference ref_id="1163856" ref_url="https://bugzilla.suse.com/1163856" source="BUGZILLA"/>
		<reference ref_id="1163857" ref_url="https://bugzilla.suse.com/1163857" source="BUGZILLA"/>
		<reference ref_id="1163858" ref_url="https://bugzilla.suse.com/1163858" source="BUGZILLA"/>
		<reference ref_id="1163859" ref_url="https://bugzilla.suse.com/1163859" source="BUGZILLA"/>
		<reference ref_id="1163860" ref_url="https://bugzilla.suse.com/1163860" source="BUGZILLA"/>
		<reference ref_id="1163861" ref_url="https://bugzilla.suse.com/1163861" source="BUGZILLA"/>
		<reference ref_id="1163862" ref_url="https://bugzilla.suse.com/1163862" source="BUGZILLA"/>
		<reference ref_id="1163863" ref_url="https://bugzilla.suse.com/1163863" source="BUGZILLA"/>
		<reference ref_id="1163867" ref_url="https://bugzilla.suse.com/1163867" source="BUGZILLA"/>
		<reference ref_id="1163869" ref_url="https://bugzilla.suse.com/1163869" source="BUGZILLA"/>
		<reference ref_id="1163880" ref_url="https://bugzilla.suse.com/1163880" source="BUGZILLA"/>
		<reference ref_id="1163971" ref_url="https://bugzilla.suse.com/1163971" source="BUGZILLA"/>
		<reference ref_id="1164051" ref_url="https://bugzilla.suse.com/1164051" source="BUGZILLA"/>
		<reference ref_id="1164069" ref_url="https://bugzilla.suse.com/1164069" source="BUGZILLA"/>
		<reference ref_id="1164098" ref_url="https://bugzilla.suse.com/1164098" source="BUGZILLA"/>
		<reference ref_id="1164115" ref_url="https://bugzilla.suse.com/1164115" source="BUGZILLA"/>
		<reference ref_id="1164314" ref_url="https://bugzilla.suse.com/1164314" source="BUGZILLA"/>
		<reference ref_id="1164315" ref_url="https://bugzilla.suse.com/1164315" source="BUGZILLA"/>
		<reference ref_id="1164388" ref_url="https://bugzilla.suse.com/1164388" source="BUGZILLA"/>
		<reference ref_id="1164471" ref_url="https://bugzilla.suse.com/1164471" source="BUGZILLA"/>
		<reference ref_id="1164598" ref_url="https://bugzilla.suse.com/1164598" source="BUGZILLA"/>
		<reference ref_id="1164632" ref_url="https://bugzilla.suse.com/1164632" source="BUGZILLA"/>
		<reference ref_id="1164705" ref_url="https://bugzilla.suse.com/1164705" source="BUGZILLA"/>
		<reference ref_id="1164712" ref_url="https://bugzilla.suse.com/1164712" source="BUGZILLA"/>
		<reference ref_id="1164727" ref_url="https://bugzilla.suse.com/1164727" source="BUGZILLA"/>
		<reference ref_id="1164728" ref_url="https://bugzilla.suse.com/1164728" source="BUGZILLA"/>
		<reference ref_id="1164729" ref_url="https://bugzilla.suse.com/1164729" source="BUGZILLA"/>
		<reference ref_id="1164730" ref_url="https://bugzilla.suse.com/1164730" source="BUGZILLA"/>
		<reference ref_id="1164731" ref_url="https://bugzilla.suse.com/1164731" source="BUGZILLA"/>
		<reference ref_id="1164732" ref_url="https://bugzilla.suse.com/1164732" source="BUGZILLA"/>
		<reference ref_id="1164733" ref_url="https://bugzilla.suse.com/1164733" source="BUGZILLA"/>
		<reference ref_id="1164734" ref_url="https://bugzilla.suse.com/1164734" source="BUGZILLA"/>
		<reference ref_id="1164735" ref_url="https://bugzilla.suse.com/1164735" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14615" ref_url="https://www.suse.com/security/cve/CVE-2019-14615/" source="CVE"/>
		<reference ref_id="CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896/" source="CVE"/>
		<reference ref_id="CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897/" source="CVE"/>
		<reference ref_id="CVE-2019-15213" ref_url="https://www.suse.com/security/cve/CVE-2019-15213/" source="CVE"/>
		<reference ref_id="CVE-2019-16746" ref_url="https://www.suse.com/security/cve/CVE-2019-16746/" source="CVE"/>
		<reference ref_id="CVE-2019-16994" ref_url="https://www.suse.com/security/cve/CVE-2019-16994/" source="CVE"/>
		<reference ref_id="CVE-2019-18808" ref_url="https://www.suse.com/security/cve/CVE-2019-18808/" source="CVE"/>
		<reference ref_id="CVE-2019-19036" ref_url="https://www.suse.com/security/cve/CVE-2019-19036/" source="CVE"/>
		<reference ref_id="CVE-2019-19045" ref_url="https://www.suse.com/security/cve/CVE-2019-19045/" source="CVE"/>
		<reference ref_id="CVE-2019-19051" ref_url="https://www.suse.com/security/cve/CVE-2019-19051/" source="CVE"/>
		<reference ref_id="CVE-2019-19054" ref_url="https://www.suse.com/security/cve/CVE-2019-19054/" source="CVE"/>
		<reference ref_id="CVE-2019-19066" ref_url="https://www.suse.com/security/cve/CVE-2019-19066/" source="CVE"/>
		<reference ref_id="CVE-2019-19318" ref_url="https://www.suse.com/security/cve/CVE-2019-19318/" source="CVE"/>
		<reference ref_id="CVE-2019-19319" ref_url="https://www.suse.com/security/cve/CVE-2019-19319/" source="CVE"/>
		<reference ref_id="CVE-2019-19332" ref_url="https://www.suse.com/security/cve/CVE-2019-19332/" source="CVE"/>
		<reference ref_id="CVE-2019-19338" ref_url="https://www.suse.com/security/cve/CVE-2019-19338/" source="CVE"/>
		<reference ref_id="CVE-2019-19447" ref_url="https://www.suse.com/security/cve/CVE-2019-19447/" source="CVE"/>
		<reference ref_id="CVE-2019-19523" ref_url="https://www.suse.com/security/cve/CVE-2019-19523/" source="CVE"/>
		<reference ref_id="CVE-2019-19526" ref_url="https://www.suse.com/security/cve/CVE-2019-19526/" source="CVE"/>
		<reference ref_id="CVE-2019-19527" ref_url="https://www.suse.com/security/cve/CVE-2019-19527/" source="CVE"/>
		<reference ref_id="CVE-2019-19532" ref_url="https://www.suse.com/security/cve/CVE-2019-19532/" source="CVE"/>
		<reference ref_id="CVE-2019-19533" ref_url="https://www.suse.com/security/cve/CVE-2019-19533/" source="CVE"/>
		<reference ref_id="CVE-2019-19535" ref_url="https://www.suse.com/security/cve/CVE-2019-19535/" source="CVE"/>
		<reference ref_id="CVE-2019-19537" ref_url="https://www.suse.com/security/cve/CVE-2019-19537/" source="CVE"/>
		<reference ref_id="CVE-2019-19767" ref_url="https://www.suse.com/security/cve/CVE-2019-19767/" source="CVE"/>
		<reference ref_id="CVE-2019-19927" ref_url="https://www.suse.com/security/cve/CVE-2019-19927/" source="CVE"/>
		<reference ref_id="CVE-2019-19965" ref_url="https://www.suse.com/security/cve/CVE-2019-19965/" source="CVE"/>
		<reference ref_id="CVE-2019-19966" ref_url="https://www.suse.com/security/cve/CVE-2019-19966/" source="CVE"/>
		<reference ref_id="CVE-2019-20054" ref_url="https://www.suse.com/security/cve/CVE-2019-20054/" source="CVE"/>
		<reference ref_id="CVE-2019-20095" ref_url="https://www.suse.com/security/cve/CVE-2019-20095/" source="CVE"/>
		<reference ref_id="CVE-2019-20096" ref_url="https://www.suse.com/security/cve/CVE-2019-20096/" source="CVE"/>
		<reference ref_id="CVE-2020-2732" ref_url="https://www.suse.com/security/cve/CVE-2020-2732/" source="CVE"/>
		<reference ref_id="CVE-2020-7053" ref_url="https://www.suse.com/security/cve/CVE-2020-7053/" source="CVE"/>
		<reference ref_id="CVE-2020-8428" ref_url="https://www.suse.com/security/cve/CVE-2020-8428/" source="CVE"/>
		<reference ref_id="CVE-2020-8648" ref_url="https://www.suse.com/security/cve/CVE-2020-8648/" source="CVE"/>
		<reference ref_id="CVE-2020-8992" ref_url="https://www.suse.com/security/cve/CVE-2020-8992/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-8992: An issue was discovered in ext4_protect_reserved_inode in fs/ext4/block_validity.c that allowed attackers to cause a soft lockup via a crafted journal size (bnc#1164069).
- CVE-2020-8648: There was a use-after-free vulnerability in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bnc#1162928).
- CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c. It did not check the length of variable elements in a beacon head, leading to a buffer overflow (bnc#1152107).
- CVE-2020-8428: There was a use-after-free bug in fs/namei.c, which allowed local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9 (bnc#1162109).
- CVE-2019-19045: A memory leak in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c allowed attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7 (bnc#1161522).
- CVE-2019-16994: A memory leak existed in sit_init_net() in net/ipv6/sit.c which might have caused denial of service, aka CID-07f12b26e21a (bnc#1161523).
- CVE-2019-19054: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c allowed attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b (bnc#1161518).
- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bnc#1157157).
- CVE-2019-14897: A stack-based buffer overflow was found in the Marvell WiFi driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bnc#1157155).
- CVE-2020-7053: There was a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c (bnc#1160966).
- CVE-2019-19318: Mounting a crafted btrfs image twice could have caused a use-after-free (bnc#1158026).
- CVE-2019-19036: An issue discovered in btrfs_root_node in fs/btrfs/ctree.c allowed a NULL pointer dereference because rcu_dereference(root-&gt;node) can be zero (bnc#1157692).
- CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures for some Intel(R) Processors (bnc#1160195).
- CVE-2019-19965: There was a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5 (bnc#1159911).
- CVE-2019-19927: A slab-out-of-bounds read access could have been caused when mounting a crafted f2fs filesystem image and performing some operations on it, in drivers/gpu/drm/ttm/ttm_page_alloc.c (bnc#1160147).
- CVE-2019-20095: Several memory leaks were found in drivers/net/wireless/marvell/mwifiex/cfg80211.c, aka CID-003b686ace82 (bnc#1159909).
- CVE-2019-20054: There was a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e (bnc#1159910).
- CVE-2019-20096: There was a memory leak in __feat_register_sp() in net/dccp/feat.c, aka CID-1d3ff0950e2b (bnc#1159908).
- CVE-2019-19966: There was a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that could have caused a denial of service, aka CID-dea37a972655 (bnc#1159841).
- CVE-2019-19447: Mounting a crafted ext4 filesystem image, performing some operations, and unmounting could have led to a use-after-free in fs/ext4/super.c (bnc#1158819).
- CVE-2019-19319: A slab-out-of-bounds write access could have occured when setxattr was called after mounting of a specially crafted ext4 image (bnc#1158021).
- CVE-2019-19767: There were multiple use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163 (bnc#1159297).
- CVE-2019-18808: A memory leak in drivers/crypto/ccp/ccp-ops.c allowed attackers to cause a denial of service (memory consumption), aka CID-128c66429247 (bnc#1156259).
- CVE-2019-19066: A memory leak in drivers/scsi/bfa/bfad_attr.c allowed attackers to cause a denial of service (memory consumption), aka CID-0e62395da2bd (bnc#1157303).
- CVE-2019-19051: A memory leak in drivers/net/wimax/i2400m/op-rfkill.c allowed attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7 (bnc#1159024).
- CVE-2019-19338: There was an incomplete fix for an issue with Transactional Synchronisation Extensions in the KVM code (bsc#1158954).
- CVE-2019-19332: An out-of-bounds memory write issue was found in the way the KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could have used this flaw to crash the system (bnc#1158827).
- CVE-2019-19537: There was a race condition bug that could be caused by a malicious USB character device, aka CID-303911cfc5b9. (bsc#1158904).
- CVE-2019-19535: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042 (bsc#1158903).
- CVE-2019-19527: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e (bsc#1158900).
- CVE-2019-19526: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af3aa57a098 (bsc#1158893).
- CVE-2019-19533: There was an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464 (bsc#1158834).
- CVE-2019-19532: There were multiple out-of-bounds write bugs that can be caused by a malicious USB HID device, aka CID-d9d4b1e46d95 (bsc#1158824).
- CVE-2019-19523: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79 (bsc#1158823).
- CVE-2019-15213: A use-after-free bug caused by a malicious USB device was found in drivers/media/usb/dvb-usb/dvb-usb-init.c (bsc#1146544).
- CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L1 resources (bsc#1163971).


The following non-security bugs were fixed:

- 6pack,mkiss: fix possible deadlock (bsc#1051510).
- ACPI / APEI: Do not wait to serialise with oops messages when panic()ing (bsc#1051510).
- ACPI / APEI: Switch estatus pool to use vmalloc memory (bsc#1051510).
- ACPI / LPSS: Ignore acpi_device_fix_up_power() return value (bsc#1051510).
- ACPI / video: Add force_none quirk for Dell OptiPlex 9020M (bsc#1051510).
- ACPI / watchdog: Fix init failure with overlapping register regions (bsc#1162557).
- ACPI / watchdog: Set default timeout in probe (bsc#1162557).
- ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data() (bsc#1051510).
- ACPI: fix acpi_find_child_device() invocation in acpi_preset_companion() (bsc#1051510).
- ACPI: OSL: only free map once in osl.c (bsc#1051510).
- ACPI: PM: Avoid attaching ACPI PM domain to certain devices (bsc#1051510).
- ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 (bsc#1051510).
- ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards (bsc#1051510).
- ACPI: watchdog: Allow disabling WDAT at boot (bsc#1162557).
- af_packet: set defaule value for tmo (bsc#1051510).
- ALSA: control: remove useless assignment in .info callback of PCM chmap element (git-fixes).
- ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
- ALSA: echoaudio: simplify get_audio_levels (bsc#1051510).
- ALSA: fireface: fix return value in error path of isochronous resources reservation (bsc#1051510).
- ALSA: hda - Add docking station support for Lenovo Thinkpad T420s (git-fixes).
- ALSA: hda - Apply sync-write workaround to old Intel platforms, too (bsc#1111666).
- ALSA: hda - constify and cleanup static NodeID tables (bsc#1111666).
- ALSA: hda - Downgrade error message for single-cmd fallback (git-fixes).
- ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen (git-fixes).
- ALSA: hda/analog - Minor optimization for SPDIF mux connections (git-fixes).
- ALSA: hda/ca0132 - Avoid endless loop (git-fixes).
- ALSA: hda/ca0132 - Fix work handling in delayed HP detection (git-fixes).
- ALSA: hda/ca0132 - Keep power on during processing DSP response (git-fixes).
- ALSA: hda/hdmi - Add new pci ids for AMD GPU display audio (git-fixes).
- ALSA: hda/hdmi - add retry logic to parse_intel_hdmi() (git-fixes).
- ALSA: hda/hdmi - Clean up Intel platform-specific fixup checks (bsc#1111666).
- ALSA: hda/hdmi - fix atpx_present when CLASS is not VGA (bsc#1051510).
- ALSA: hda/hdmi - Fix duplicate unref of pci_dev (bsc#1051510).
- ALSA: hda/hdmi - fix vgaswitcheroo detection for AMD (git-fixes).
- ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker (bsc#1111666).
- ALSA: hda/realtek - Add headset Mic no shutup for ALC283 (bsc#1051510).
- ALSA: hda/realtek - Add Headset Mic supported for HP cPC (bsc#1111666).
- ALSA: hda/realtek - Add new codec supported for ALCS1200A (bsc#1111666).
- ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen (bsc#1111666).
- ALSA: hda/realtek - Apply mic mute LED quirk for Dell E7xx laptops, too (bsc#1111666).
- ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 (git-fixes).
- ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC (bsc#1111666).
- ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G (git-fixes).
- ALSA: hda/realtek - Fix silent output on MSI-GL73 (git-fixes).
- ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported (bsc#1111666).
- ALSA: hda/realtek - Line-out jack does not work on a Dell AIO (bsc#1051510).
- ALSA: hda/realtek - More constifications (bsc#1111666).
- ALSA: hda/realtek - Set EAPD control to default for ALC222 (bsc#1111666).
- ALSA: hda: Add Clevo W65_67SB the power_save blacklist (git-fixes).
- ALSA: hda: Add JasperLake PCI ID and codec vid (bsc#1111666).
- ALSA: hda: Clear RIRB status before reading WP (bsc#1111666).
- ALSA: hda: constify copied structure (bsc#1111666).
- ALSA: hda: Constify snd_kcontrol_new items (bsc#1111666).
- ALSA: hda: Constify snd_pci_quirk tables (bsc#1111666).
- ALSA: hda: correct kernel-doc parameter descriptions (bsc#1111666).
- ALSA: hda: hdmi - add Tigerlake support (bsc#1111666).
- ALSA: hda: hdmi - fix pin setup on Tigerlake (bsc#1111666).
- ALSA: hda: More constifications (bsc#1111666).
- ALSA: hda: patch_hdmi: remove warnings with empty body (bsc#1111666).
- ALSA: hda: patch_realtek: fix empty macro usage in if block (bsc#1111666).
- ALSA: hda: Reset stream if DMA RUN bit not cleared (bsc#1111666).
- ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs (git-fixes).
- ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code (bsc#1051510).
- ALSA: oxfw: fix return value in error path of isochronous resources reservation (bsc#1051510).
- ALSA: pcm: Avoid possible info leaks from PCM stream buffers (git-fixes).
- ALSA: pcm: oss: Avoid potential buffer overflows (git-fixes).
- ALSA: seq: Avoid concurrent access to queue flags (git-fixes).
- ALSA: seq: Fix concurrent access to queue current tick/time (git-fixes).
- ALSA: seq: Fix racy access for queue timer in proc read (bsc#1051510).
- ALSA: sh: Fix compile warning wrt const (git-fixes).
- ALSA: sh: Fix unused variable warnings (bsc#1111666).
- ALSA: usb-audio: Apply sample rate quirk for Audioengine D1 (git-fixes).
- ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 (bsc#1111666).
- ALSA: usb-audio: Fix endianess in descriptor validation (bsc#1111666).
- ALSA: usb-audio: fix set_format altsetting sanity check (bsc#1051510).
- ALSA: usb-audio: fix sync-ep altsetting sanity check (bsc#1051510).
- apparmor: fix unsigned len comparison with less than zero (git-fixes).
- ar5523: check NULL before memcpy() in ar5523_cmd() (bsc#1051510).
- arm64: Revert support for execute-only user mappings (bsc#1160218).
- ASoC: au8540: use 64-bit arithmetic instead of 32-bit (bsc#1051510).
- ASoC: compress: fix unsigned integer overflow check (bsc#1051510).
- ASoC: cs4349: Use PM ops 'cs4349_runtime_pm' (bsc#1051510).
- ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report (bsc#1051510).
- ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1 (bsc#1051510).
- ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI (bsc#1111666).
- ASoC: sun8i-codec: Fix setting DAI data format (git-fixes).
- ASoC: wm8962: fix lambda value (git-fixes).
- ata: ahci: Add shutdown to freeze hardware resources of ahci (bsc#1164388).
- ath10k: Correct the DMA direction for management tx buffers (bsc#1111666).
- ath10k: fix fw crash by moving chip reset after napi disabled (bsc#1051510).
- ath10k: pci: Fix comment on ath10k_pci_dump_memory_sram (bsc#1111666).
- ath10k: pci: Only dump ATH10K_MEM_REGION_TYPE_IOREG when safe (bsc#1111666).
- ath6kl: Fix off by one error in scan completion (bsc#1051510).
- ath9k: fix storage endpoint lookup (git-fixes).
- atl1e: checking the status of atl1e_write_phy_reg (bsc#1051510).
- audit: Allow auditd to set pid to 0 to end auditing (bsc#1158094).
- batman-adv: Fix DAT candidate selection on little endian systems (bsc#1051510).
- bcache: add code comment bch_keylist_pop() and bch_keylist_pop_front() (bsc#1163762).
- bcache: add code comments for state-&gt;pool in __btree_sort() (bsc#1163762).
- bcache: add code comments in bch_btree_leaf_dirty() (bsc#1163762).
- bcache: add cond_resched() in __bch_cache_cmp() (bsc#1163762).
- bcache: add idle_max_writeback_rate sysfs interface (bsc#1163762).
- bcache: add more accurate error messages in read_super() (bsc#1163762).
- bcache: add readahead cache policy options via sysfs interface (bsc#1163762).
- bcache: at least try to shrink 1 node in bch_mca_scan() (bsc#1163762).
- bcache: avoid unnecessary btree nodes flushing in btree_flush_write() (bsc#1163762).
- bcache: check return value of prio_read() (bsc#1163762).
- bcache: deleted code comments for dead code in bch_data_insert_keys() (bsc#1163762).
- bcache: do not export symbols (bsc#1163762).
- bcache: explicity type cast in bset_bkey_last() (bsc#1163762).
- bcache: fix a lost wake-up problem caused by mca_cannibalize_lock (bsc#1163762).
- bcache: Fix an error code in bch_dump_read() (bsc#1163762).
- bcache: fix deadlock in bcache_allocator (bsc#1163762).
- bcache: fix incorrect data type usage in btree_flush_write() (bsc#1163762).
- bcache: fix memory corruption in bch_cache_accounting_clear() (bsc#1163762).
- bcache: fix static checker warning in bcache_device_free() (bsc#1163762).
- bcache: ignore pending signals when creating gc and allocator thread (bsc#1163762, bsc#1112504).
- bcache: print written and keys in trace_bcache_btree_write (bsc#1163762).
- bcache: reap c-&gt;btree_cache_freeable from the tail in bch_mca_scan() (bsc#1163762).
- bcache: reap from tail of c-&gt;btree_cache in bch_mca_scan() (bsc#1163762).
- bcache: remove macro nr_to_fifo_front() (bsc#1163762).
- bcache: remove member accessed from struct btree (bsc#1163762).
- bcache: remove the extra cflags for request.o (bsc#1163762).
- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (bsc#1163762, bsc#1112504).
- bcma: remove set but not used variable 'sizel' (git-fixes).
- blk-mq: avoid sysfs buffer overflow with too many CPU cores (bsc#1159377).
- blk-mq: avoid sysfs buffer overflow with too many CPU cores (bsc#1163840).
- blk-mq: make sure that line break can be printed (bsc#1159377).
- blk-mq: make sure that line break can be printed (bsc#1164098).
- Bluetooth: Fix race condition in hci_release_sock() (bsc#1051510).
- Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading (bsc#1051510).
- bnxt: apply computed clamp value for coalece parameter (bsc#1104745).
- bnxt_en: Fix MSIX request logic for RDMA driver (bsc#1104745 ).
- bnxt_en: Return error if FW returns more data than dump length (bsc#1104745).
- bonding: fix active-backup transition after link failure (git-fixes).
- bonding: fix potential NULL deref in bond_update_slave_arr (bsc#1051510).
- bonding: fix slave stuck in BOND_LINK_FAIL state (networking-stable-19_11_10).
- bonding: fix state transition issue in link monitoring (networking-stable-19_11_10).
- bonding: fix unexpected IFF_BONDING bit unset (bsc#1051510).
- bpf, offload: Unlock on error in bpf_offload_dev_create() (bsc#1109837).
- bpf/sockmap: Read psock ingress_msg before sk_receive_queue (bsc#1083647).
- bpf/stackmap: Fix deadlock with rq_lock in bpf_get_stack() (bsc#1083647).
- bpf: add self-check logic to liveness analysis (bsc#1160618).
- bpf: add verifier stats and log_level bit 2 (bsc#1160618).
- bpf: Fix incorrect verifier simulation of ARSH under ALU32 (bsc#1083647).
- bpf: improve stacksafe state comparison (bco#1160618).
- bpf: improve verification speed by droping states (bsc#1160618).
- bpf: improve verification speed by not remarking live_read (bsc#1160618).
- bpf: improve verifier branch analysis (bsc#1160618).
- bpf: increase complexity limit and maximum program size (bsc#1160618).
- bpf: increase verifier log limit (bsc#1160618).
- bpf: Make use of probe_user_write in probe write helper (bsc#1083647).
- bpf: Reject indirect var_off stack access in raw mode (bsc#1160618).
- bpf: Reject indirect var_off stack access in unpriv mode (bco#1160618).
- bpf: Sanity check max value for var_off stack access (bco#1160618).
- bpf: skmsg, fix potential psock NULL pointer dereference (bsc#1109837).
- bpf: speed up stacksafe check (bco#1160618).
- bpf: Support variable offset stack access from helpers (bco#1160618).
- bpf: verifier: teach the verifier to reason about the BPF_JSET instruction (bco#1160618).
- brcmfmac: fix interface sanity check (git-fixes).
- brcmfmac: Fix memory leak in brcmf_p2p_create_p2pdev() (bsc#1111666).
- brcmfmac: Fix memory leak in brcmf_usbdev_qinit (git-fixes).
- brcmfmac: Fix use after free in brcmf_sdio_readframes() (git-fixes).
- brcmfmac: sdio: Fix OOB interrupt initialization on brcm43362 (bsc#1111666).
- brcmfmac: set F2 watermark to 256 for 4373 (bsc#1111666).
- brcmfmac: set SDIO F1 MesBusyCtrl for CYW4373 (bsc#1111666).
- btrfs: abort transaction after failed inode updates in create_subvol (bsc#1161936).
- btrfs: add missing extents release on file extent cluster relocation error (bsc#1159483).
- btrfs: avoid fallback to transaction commit during fsync of files with holes (bsc#1159569).
- btrfs: dev-replace: remove warning for unknown return codes when finished (dependency for bsc#1162067).
- btrfs: do not call synchronize_srcu() in inode_tree_del (bsc#1161934).
- btrfs: do not double lock the subvol_sem for rename exchange (bsc#1162943).
- btrfs: Ensure we trim ranges across block group boundary (bsc#1151910).
- btrfs: fix block group remaining RO forever after error during device replace (bsc#1160442).
- btrfs: fix btrfs_write_inode vs delayed iput deadlock (bsc#1154243).
- btrfs: fix infinite loop during fsync after rename operations (bsc#1163383).
- btrfs: fix infinite loop during nocow writeback due to race (bsc#1160804).
- btrfs: fix integer overflow in calc_reclaim_items_nr (bsc#1160433).
- btrfs: fix missing data checksums after replaying a log tree (bsc#1161931).
- btrfs: fix negative subv_writers counter and data space leak after buffered write (bsc#1160802).
- btrfs: fix race between adding and putting tree mod seq elements and nodes (bsc#1163384).
- btrfs: fix removal logic of the tree mod log that leads to use-after-free issues (bsc#1160803).
- btrfs: fix selftests failure due to uninitialized i_mode in test inodes (Fix for dependency of bsc#1157692).
- btrfs: handle ENOENT in btrfs_uuid_tree_iterate (bsc#1161937).
- btrfs: harden agaist duplicate fsid on scanned devices (bsc#1134973).
- btrfs: inode: Verify inode mode to avoid NULL pointer dereference (dependency for bsc#1157692).
- btrfs: make tree checker detect checksum items with overlapping ranges (bsc#1161931).
- btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it (dependency for bsc#1157692).
- btrfs: record all roots for rename exchange on a subvol (bsc#1161933).
- btrfs: relocation: fix reloc_root lifespan and access (bsc#1159588).
- btrfs: scrub: Require mandatory block group RO for dev-replace (bsc#1162067).
- btrfs: send, skip backreference walking for extents with many references (bsc#1162139).
- btrfs: simplify inode locking for RWF_NOWAIT (git-fixes).
- btrfs: skip log replay on orphaned roots (bsc#1161935).
- btrfs: tree-checker: Check chunk item at tree block read time (dependency for bsc#1157692).
- btrfs: tree-checker: Check level for leaves and nodes (dependency for bsc#1157692).
- btrfs: tree-checker: Enhance chunk checker to validate chunk profile (dependency for bsc#1157692).
- btrfs: tree-checker: Fix wrong check on max devid (fixes for dependency of bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in block_group_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_block_group_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_csum_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_dev_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_dir_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_extent_data_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_inode_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_leaf (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_leaf_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in chunk_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in dev_item_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in dir_item_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in file_extent_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in generic_err (dependency for bsc#1157692).
- btrfs: tree-checker: Make btrfs_check_chunk_valid() return EUCLEAN instead of EIO (dependency for bsc#1157692).
- btrfs: tree-checker: Make chunk item checker messages more readable (dependency for bsc#1157692).
- btrfs: tree-checker: Verify dev item (dependency for bsc#1157692).
- btrfs: tree-checker: Verify inode item (dependency for bsc#1157692).
- btrfs: volumes: Use more straightforward way to calculate map length (bsc#1151910).
- can, slip: Protect tty-&gt;disc_data in write_wakeup and close with RCU (bsc#1051510).
- can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs (bsc#1051510).
- can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open (bsc#1051510).
- can: gs_usb: gs_usb_probe(): use descriptors of current altsetting (bsc#1051510).
- can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling to irq mode (bsc#1051510).
- can: peak_usb: report bus recovery as well (bsc#1051510).
- can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error (bsc#1051510).
- can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error (bsc#1051510).
- can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on queue overflow or OOM (bsc#1051510).
- can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate error value in case of errors (bsc#1051510).
- can: slcan: Fix use-after-free Read in slcan_open (bsc#1051510).
- CDC-NCM: handle incomplete transfer of MTU (networking-stable-19_11_10).
- cdrom: respect device capabilities during opening action (boo#1164632).
- cfg80211/mac80211: make ieee80211_send_layer2_update a public function (bsc#1051510).
- cfg80211: check for set_wiphy_params (bsc#1051510).
- cfg80211: fix deadlocks in autodisconnect work (bsc#1111666).
- cfg80211: fix memory leak in cfg80211_cqm_rssi_update (bsc#1111666).
- cfg80211: fix page refcount issue in A-MSDU decap (bsc#1051510).
- cgroup,writeback: do not switch wbs immediately on dead wbs if the memcg is dead (bsc#1158645).
- cgroup: pids: use atomic64_t for pids-&gt;limit (bsc#1161514).
- chardev: Avoid potential use-after-free in 'chrdev_open()' (bsc#1163849).
- cifs: add support for flock (bsc#1144333).
- cifs: Close cached root handle only if it had a lease (bsc#1144333).
- cifs: Close open handle after interrupted close (bsc#1144333).
- cifs: close the shared root handle on tree disconnect (bsc#1144333).
- cifs: Do not miss cancelled OPEN responses (bsc#1144333).
- cifs: Fix lookup of root ses in DFS referral cache (bsc#1144333).
- cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333).
- cifs: fix mount option display for sec=krb5i (bsc#1161907).
- cifs: Fix mount options set in automount (bsc#1144333).
- cifs: Fix NULL pointer dereference in mid callback (bsc#1144333).
- cifs: Fix NULL-pointer dereference in smb2_push_mandatory_locks (bsc#1144333).
- cifs: Fix potential softlockups while refreshing DFS cache (bsc#1144333).
- cifs: Fix retrieval of DFS referrals in cifs_mount() (bsc#1144333).
- cifs: Fix use-after-free bug in cifs_reconnect() (bsc#1144333).
- cifs: Properly process SMB3 lease breaks (bsc#1144333).
- cifs: remove set but not used variables 'cinode' and 'netfid' (bsc#1144333).
- cifs: Respect O_SYNC and O_DIRECT flags during reconnect (bsc#1144333).
- clk: Do not try to enable critical clocks if prepare failed (bsc#1051510).
- clk: imx: clk-composite-8m: add lock to gate/mux (git-fixes).
- clk: mmp2: Fix the order of timer mux parents (bsc#1051510).
- clk: qcom: rcg2: Do not crash if our parent can't be found; return an error (bsc#1051510).
- clk: rockchip: fix I2S1 clock gate register for rk3328 (bsc#1051510).
- clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328 (bsc#1051510).
- clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering (bsc#1051510).
- clk: rockchip: fix rk3188 sclk_smc gate data (bsc#1051510).
- clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock (bsc#1051510).
- clk: sunxi: sun9i-mmc: Implement reset callback for reset controls (bsc#1051510).
- clk: tegra: Mark fuse clock as critical (bsc#1051510).
- clocksource/drivers/bcm2835_timer: Fix memory leak of timer (bsc#1051510).
- clocksource: Prevent double add_timer_on() for watchdog_timer (bsc#1051510).
- closures: fix a race on wakeup from closure_sync (bsc#1163762).
- configfs_register_group() shouldn't be (and isn't) called in rmdirable parts (bsc#1051510).
- copy/pasted 'Recommends:' instead of 'Provides:', 'Obsoletes:' and 'Conflicts:
- Cover up kABI breakage due to DH key verification (bsc#1155331).
- crypto: af_alg - Use bh_lock_sock in sk_destruct (bsc#1051510).
- crypto: api - Check spawn-&gt;alg under lock in crypto_drop_spawn (bsc#1051510).
- crypto: api - Fix race condition in crypto_spawn_alg (bsc#1051510).
- crypto: atmel-sha - fix error handling when setting hmac key (bsc#1051510).
- crypto: caam/qi2 - fix typo in algorithm's driver name (bsc#1111666).
- crypto: ccp - fix uninitialized list head (bsc#1051510).
- crypto: chelsio - fix writing tfm flags to wrong place (bsc#1051510).
- crypto: dh - add public key verification test (bsc#1155331).
- crypto: dh - fix calculating encoded key size (bsc#1155331).
- crypto: dh - fix memory leak (bsc#1155331).
- crypto: dh - update test for public key verification (bsc#1155331).
- crypto: DRBG - add FIPS 140-2 CTRNG for noise source (bsc#1155334).
- crypto: ecdh - add public key verification test (bsc#1155331).
- crypto: ecdh - fix typo of P-192 b value (bsc#1155331).
- crypto: mxc-scc - fix build warnings on ARM64 (bsc#1051510).
- crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (bsc#1051510).
- crypto: picoxcell - adjust the position of tasklet_init and fix missed tasklet_kill (bsc#1051510).
- crypto: reexport crypto_shoot_alg() (bsc#1051510, kABI fix).
- cxgb4: request the TX CIDX updates to status page (bsc#1127371).
- dma-buf: Fix memory leak in sync_file_merge() (git-fixes).
- dma-mapping: fix return type of dma_set_max_seg_size() (bsc#1051510).
- dmaengine: coh901318: Fix a double-lock bug (bsc#1051510).
- dmaengine: coh901318: Remove unused variable (bsc#1051510).
- dmaengine: Fix access to uninitialized dma_slave_caps (bsc#1051510).
- Documentation: Document arm64 kpti control (bsc#1162623).
- drivers/base/memory.c: cache blocks in radix tree to accelerate lookup (bsc#1159955 ltc#182993).
- drivers/base/memory.c: do not access uninitialized memmaps in soft_offline_page_store() (bsc#1051510).
- drivers/base/platform.c: kmemleak ignore a known leak (bsc#1051510).
- drivers/regulator: fix a missing check of return value (bsc#1051510).
- drm/amd/display: Retrain dongles when SINK_COUNT becomes non-zero (bsc#1111666).
- drm/amd/powerplay: remove set but not used variable 'us_mvdd' (bsc#1111666).
- drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc (bsc#1111666).
- drm/amdgpu: add function parameter description in 'amdgpu_device_set_cg_state' (bsc#1111666).
- drm/amdgpu: add function parameter description in 'amdgpu_gart_bind' (bsc#1051510).
- drm/amdgpu: fix bad DMA from INTERRUPT_CNTL2 (bsc#1114279)
- drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2) (bsc#1111666).
- drm/amdgpu: remove 4 set but not used variable in amdgpu_atombios_get_connector_info_from_object_table (bsc#1051510).
- drm/amdgpu: remove always false comparison in 'amdgpu_atombios_i2c_process_i2c_ch' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'amdgpu_connector' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'dig' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'dig_connector' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'invalid' (bsc#1111666).
- drm/amdgpu: remove set but not used variable 'mc_shared_chmap' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'mc_shared_chmap' from 'gfx_v6_0.c' and 'gfx_v7_0.c' (bsc#1051510).
- drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ (bsc#1051510).
- drm/fb-helper: Round up bits_per_pixel if possible (bsc#1051510).
- drm/i810: Prevent underflow in ioctl (bsc#1114279)
- drm/i915/gvt: Pin vgpu dma address before using (bsc#1112178)
- drm/i915/gvt: set guest display buffer as readonly (bsc#1112178)
- drm/i915/gvt: use vgpu lock for active state setting (bsc#1112178)
- drm/i915/perf: add missing delay for OA muxes configuration (bsc#1111666).
- drm/i915: Add missing include file &lt;linux/math64.h&gt; (bsc#1051510).
- drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (bsc#1111666).
- drm/i915: Fix pid leak with banned clients (bsc#1114279)
- drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set (bsc#1111666).
- drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV (bsc#1111666).
- drm/i915: Reacquire priolist cache after dropping the engine lock (bsc#1129770).
- drm/i915: Sanity check mmap length against object size (bsc#1111666).
- drm/msm: include linux/sched/task.h (bsc#1112178)
- drm/mst: Fix MST sideband up-reply failure handling (bsc#1051510).
- drm/nouveau/bar/gf100: ensure BAR is mapped (bsc#1111666).
- drm/nouveau/bar/nv50: check bar1 vmm return value (bsc#1111666).
- drm/nouveau/mmu: qualify vmm during dtor (bsc#1111666).
- drm/nouveau/secboot/gm20b: initialize pointer in gm20b_secboot_new() (bsc#1051510).
- drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler (bsc#1051510).
- drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028)
- drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028)
- drm/radeon: fix r1xx/r2xx register checker for POT textures (bsc#1114279)
- drm/rect: Avoid division by zero (bsc#1111666).
- drm/rect: update kerneldoc for drm_rect_clip_scaled() (bsc#1111666).
- drm/rockchip: lvds: Fix indentation of a #define (bsc#1051510).
- drm/rockchip: Round up _before_ giving to the clock framework (bsc#1114279)
- drm/sun4i: hdmi: Remove duplicate cleanup calls (bsc#1113956)
- drm/sun4i: tcon: Set min division of TCON0_DCLK to 1 (bsc#1111666).
- drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model (bsc#1111666).
- drm/ttm: ttm_tt_init_fields() can be static (bsc#1111666).
- drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add (bsc#1051510).
- drm: bridge: dw-hdmi: constify copied structure (bsc#1051510).
- drm: limit to INT_MAX in create_blob ioctl (bsc#1051510).
- drm: meson: venc: cvbs: fix CVBS mode matching (bsc#1051510).
- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable (bsc#1111666).
- drm: panel-lvds: Potential Oops in probe error handling (bsc#1114279)
- e1000e: Add support for Comet Lake (bsc#1158533).
- e1000e: Add support for Tiger Lake (bsc#1158533).
- e1000e: Increase pause and refresh time (bsc#1158533).
- e100: Fix passing zero to 'PTR_ERR' warning in e100_load_ucode_wait (bsc#1051510).
- ecryptfs_lookup_interpose(): lower_dentry-&gt;d_inode is not stable (bsc#1158646).
- ecryptfs_lookup_interpose(): lower_dentry-&gt;d_parent is not stable either (bsc#1158647).
- EDAC/ghes: Fix locking and memory barrier issues (bsc#1114279). EDAC/ghes: Do not warn when incrementing refcount on 0 (bsc#1114279).
- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632).
- enic: prevent waking up stopped tx queues over watchdog reset (bsc#1133147).
- exit: panic before exit_mm() on global init exit (bsc#1161549).
- ext2: check err when partial != NULL (bsc#1163859).
- ext4, jbd2: ensure panic when aborting with zero errno (bsc#1163853).
- ext4: check for directory entries too close to block end (bsc#1163861).
- ext4: fix a bug in ext4_wait_for_tail_page_commit (bsc#1163841).
- ext4: fix checksum errors with indexed dirs (bsc#1160979).
- ext4: fix deadlock allocating crypto bounce page from mempool (bsc#1163842).
- ext4: Fix mount failure with quota configured as module (bsc#1164471).
- ext4: fix mount failure with quota configured as module (bsc#1164471).
- ext4: fix punch hole for inline_data file systems (bsc#1158640).
- ext4: improve explanation of a mount failure caused by a misconfigured kernel (bsc#1163843).
- ext4: update direct I/O read lock pattern for IOCB_NOWAIT (bsc#1158639).
- extcon: max8997: Fix lack of path setting in USB device mode (bsc#1051510).
- firestream: fix memory leaks (bsc#1051510).
- fix autofs regression caused by follow_managed() changes (bsc#1159271).
- fix dget_parent() fastpath race (bsc#1159271).
- fix partial checked out tree build ... so that bisection does not break.
- fix the locking in dcache_readdir() and friends (bsc#1123328).
- fjes: fix missed check in fjes_acpi_add (bsc#1051510).
- fs/namei.c: fix missing barriers when checking positivity (bsc#1159271).
- fs/namei.c: pull positivity check into follow_managed() (bsc#1159271).
- fs/open.c: allow opening only regular files during execve() (bsc#1163845).
- fs: cifs: Fix atime update check vs mtime (bsc#1144333).
- fscrypt: do not set policy for a dead directory (bsc#1163846).
- ftrace: Add comment to why rcu_dereference_sched() is open coded (git-fixes).
- ftrace: Avoid potential division by zero in function profiler (bsc#1160784).
- ftrace: Protect ftrace_graph_hash with ftrace_sync (git-fixes).
- genirq/proc: Return proper error code when irq_set_affinity() fails (bnc#1105392).
- genirq: Prevent NULL pointer dereference in resend_irqs() (bsc#1051510).
- genirq: Properly pair kobject_del() with kobject_add() (bsc#1051510).
- gpio: Fix error message on out-of-range GPIO in lookup table (bsc#1051510).
- gtp: avoid zero size hashtable (networking-stable-20_01_01).
- gtp: do not allow adding duplicate tid and ms_addr pdp context (networking-stable-20_01_01).
- gtp: fix an use-after-free in ipv4_pdp_find() (networking-stable-20_01_01).
- gtp: fix wrong condition in gtp_genl_dump_pdp() (networking-stable-20_01_01).
- HID: doc: fix wrong data structure reference for UHID_OUTPUT (bsc#1051510).
- HID: hidraw, uhid: Always report EPOLLOUT (bsc#1051510).
- HID: hidraw: Fix returning EPOLLOUT from hidraw_poll (bsc#1051510).
- HID: intel-ish-hid: fixes incorrect error handling (bsc#1051510).
- HID: uhid: Fix returning EPOLLOUT from uhid_char_poll (bsc#1051510).
- hidraw: Return EPOLLOUT from hidraw_poll (bsc#1051510).
- hotplug/drc-info: Add code to search ibm,drc-info property (bsc#1157480 ltc#181028).
- hv_netvsc: Fix offset usage in netvsc_send_table() (bsc#1164598).
- hv_netvsc: Fix send_table offset in case of a host bug (bsc#1164598).
- hv_netvsc: Fix tx_table init in rndis_set_subchannel() (bsc#1164598).
- hv_netvsc: Fix unwanted rx_table reset (bsc#1164598).
- hwmon: (adt7475) Make volt2reg return same reg as reg2volt input (bsc#1051510).
- hwmon: (core) Do not use device managed functions for memory allocations (bsc#1051510).
- hwmon: (k10temp) Add support for AMD family 17h, model 70h CPUs (bsc#1163206).
- hwmon: (nct7802) Fix voltage limits to wrong registers (bsc#1051510).
- hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions (bsc#1051510).
- hwrng: stm32 - fix unbalanced pm_runtime_enable (bsc#1051510).
- i2c: imx: do not print error message on probe defer (bsc#1051510).
- IB/hfi1: Do not cancel unused work item (bsc#1114685 ).
- IB/mlx5: Fix steering rule of drop and count (bsc#1103991 ).
- IB/mlx5: Remove dead code (bsc#1103991).
- ibmveth: Detect unsupported packets before sending to the hypervisor (bsc#1159484 ltc#182983).
- ibmvnic: Bound waits for device queries (bsc#1155689 ltc#182047).
- ibmvnic: Fix completion structure initialization (bsc#1155689 ltc#182047).
- ibmvnic: Serialize device queries (bsc#1155689 ltc#182047).
- ibmvnic: Terminate waiting device threads after loss of service (bsc#1155689 ltc#182047).
- ice: fix stack leakage (bsc#1118661).
- idr: Fix idr_alloc_u32 on 32-bit systems (bsc#1051510).
- iio: adc: max9611: Fix too short conversion time delay (bsc#1051510).
- iio: buffer: align the size of scan bytes to size of the largest element (bsc#1051510).
- inet: protect against too small mtu values (networking-stable-19_12_16).
- Input: aiptek - fix endpoint sanity check (bsc#1051510).
- Input: cyttsp4_core - fix use after free bug (bsc#1051510).
- Input: goodix - add upside-down quirk for Teclast X89 tablet (bsc#1051510).
- Input: gtco - fix endpoint sanity check (bsc#1051510).
- Input: keyspan-remote - fix control-message timeouts (bsc#1051510).
- Input: pegasus_notetaker - fix endpoint sanity check (bsc#1051510).
- Input: pm8xxx-vib - fix handling of separate enable register (bsc#1051510).
- Input: rmi_f54 - read from FIFO in 32 byte blocks (bsc#1051510).
- Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register (bsc#1051510).
- Input: sur40 - fix interface sanity checks (bsc#1051510).
- Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus (bsc#1051510).
- Input: synaptics-rmi4 - do not increment rmiaddr for SMBus transfers (bsc#1051510).
- Input: synaptics-rmi4 - simplify data read in rmi_f54_work (bsc#1051510).
- iomap: Fix pipe page leakage during splicing (bsc#1158651).
- iommu/amd: Fix IOMMU perf counter clobbering during init (bsc#1162617).
- iommu/arm-smmu-v3: Populate VMID field for CMDQ_OP_TLBI_NH_VA (bsc#1164314).
- iommu/io-pgtable-arm: Fix race handling in split_blk_unmap() (bsc#1164115).
- iommu/iova: Init the struct iova to fix the possible memleak (bsc#1160469).
- iommu/mediatek: Correct the flush_iotlb_all callback (bsc#1160470).
- iommu/vt-d: Unlink device if failed to add to group (bsc#1160756).
- iommu: Remove device link to group on failure (bsc#1160755).
- ipmi: Do not allow device module unload when in use (bsc#1154768).
- ipv4: Fix table id reference in fib_sync_down_addr (networking-stable-19_11_10).
- iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop (git-fixes).
- iwlwifi: change monitor DMA to be coherent (bsc#1161243).
- iwlwifi: clear persistence bit according to device family (bsc#1111666).
- iwlwifi: do not throw error when trying to remove IGTK (bsc#1051510).
- iwlwifi: mvm: fix NVM check for 3168 devices (bsc#1051510).
- iwlwifi: mvm: force TCM re-evaluation on TCM resume (bsc#1111666).
- iwlwifi: mvm: Send non offchannel traffic via AP sta (bsc#1051510).
- iwlwifi: mvm: synchronize TID queue removal (bsc#1051510).
- iwlwifi: pcie: fix erroneous print (bsc#1111666).
- iwlwifi: trans: Clear persistence bit when starting the FW (bsc#1111666).
- jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal (bsc#1163862).
- jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer (bsc#1163836).
- jbd2: Fix possible overflow in jbd2_log_space_left() (bsc#1163860).
- jbd2: make sure ESHUTDOWN to be recorded in the journal superblock (bsc#1163863).
- jbd2: move the clearing of b_modified flag to the journal_unmap_buffer() (bsc#1163880).
- jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record (bsc#1163852).
- kABI fix for 'ipmi: Do not allow device module unload when in use' (bsc#1154768).
- kABI fixup for alloc_dax_region (bsc#1158071,bsc#1160678).
- kABI workaround for can/skb.h inclusion (bsc#1051510).
- kABI/severities: Whitelist rpaphp_get_drc_props (bsc#1157480 ltc#181028).
- kABI: add _q suffix to exports that take struct dh (bsc#1155331).
- kABI: protect struct sctp_ep_common (kabi).
- kABI: Protest new fields in BPF structs (bsc#1160618).
- kconfig: fix broken dependency in randconfig-generated .config (bsc#1051510).
- kernel-binary.spec.in: do not recommend firmware for kvmsmall and azure flavor (boo#1161360).
- kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail (bsc#1160787).
- kernfs: Fix range checks in kernfs_get_target_path (bsc#1051510).
- kexec: bail out upon SIGKILL when allocating memory (git-fixes).
- KVM: Clean up __kvm_gfn_to_hva_cache_init() and its callers (bsc#1133021).
- KVM: fix spectrev1 gadgets (bsc#1164705).
- KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails (bsc#1061840).
- KVM: PPC: Book3S PR: Fix -Werror=return-type build failure (bsc#1061840).
- KVM: PPC: Book3S PR: Free shared page if mmu initialization fails (bsc#1061840).
- KVM: s390: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl (git-fixes).
- KVM: s390: Test for bad access register and size at the start of S390_MEM_OP (git-fixes).
- KVM: SVM: Override default MMIO mask if memory encryption is enabled (bsc#1162618).
- KVM: x86: Host feature SSBD does not imply guest feature SPEC_CTRL_SSBD (bsc#1160476).
- KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks (bsc#1164734).
- KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks (bsc#1164728).
- KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks (bsc#1164729).
- KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF attacks (bsc#1164712).
- KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks (bsc#1164730).
- KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c (bsc#1164733).
- KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks (bsc#1164731).
- KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks (bsc#1164732).
- KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks (bsc#1164735).
- KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks (bsc#1164705).
- KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks (bsc#1164727).
- KVM: x86: Remove a spurious export of a static function (bsc#1158954).
- lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop (bsc#1050549).
- leds: Allow to call led_classdev_unregister() unconditionally (bsc#1161674).
- leds: class: ensure workqueue is initialized before setting brightness (bsc#1161674).
- lib/scatterlist.c: adjust indentation in __sg_alloc_table (bsc#1051510).
- lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more() (bsc#1051510).
- lib: crc64: include &lt;linux/crc64.h&gt; for 'crc64_be' (bsc#1163762).
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (bsc#1153535).
- libnvdimm/pfn: Account for PAGE_SIZE &gt; info-block-size in nd_pfn_init() (bsc#1127682 bsc#1153535 ltc#175033 ltc#181834).
- libnvdimm: Fix devm_nsio_enable() kabi (bsc#1153535).
- livepatch/samples/selftest: Use klp_shadow_alloc() API correctly (bsc#1071995).
- livepatch/selftest: Clean up shadow variable names and type (bsc#1071995).
- locking/rwsem: Prevent decrement of reader count before increment (bsc#1050549).
- loop: fix no-unmap write-zeroes request behavior (bsc#1158637).
- mac80211: Do not send Layer 2 Update frame before authorization (bsc#1051510).
- mac80211: fix ieee80211_txq_setup_flows() failure path (bsc#1111666).
- mac80211: fix station inactive_time shortly after boot (bsc#1051510).
- mac80211: Fix TKIP replay protection immediately after key setup (bsc#1051510).
- mac80211: mesh: restrict airtime metric to peered established plinks (bsc#1051510).
- macvlan: do not assume mac_header is set in macvlan_broadcast() (bsc#1051510).
- macvlan: use skb_reset_mac_header() in macvlan_queue_xmit() (bsc#1051510).
- mailbox: mailbox-test: fix null pointer if no mmio (bsc#1051510).
- md/raid0: Fix buffer overflow at debug print (bsc#1164051).
- media/v4l2-core: set pages dirty upon releasing DMA buffers (bsc#1051510).
- media: af9005: uninitialized variable printked (bsc#1051510).
- media: cec.h: CEC_OP_REC_FLAG_ values were swapped (bsc#1051510).
- media: cec: CEC 2.0-only bcast messages were ignored (git-fixes).
- media: cec: report Vendor ID after initialization (bsc#1051510).
- media: digitv: do not continue if remote control state can't be read (bsc#1051510).
- media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0 (bsc#1051510).
- media: exynos4-is: fix wrong mdev and v4l2 dev order in error path (git-fixes).
- media: gspca: zero usb_buf (bsc#1051510).
- media: iguanair: fix endpoint sanity check (bsc#1051510).
- media: ov6650: Fix control handler not freed on init error (git-fixes).
- media: ov6650: Fix crop rectangle alignment not passed back (git-fixes).
- media: ov6650: Fix incorrect use of JPEG colorspace (git-fixes).
- media: pulse8-cec: fix lost cec_transmit_attempt_done() call.
- media: pulse8-cec: return 0 when invalidating the logical address (bsc#1051510).
- media: stkwebcam: Bugfix for wrong return values (bsc#1051510).
- media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors (bsc#1051510).
- media: uvcvideo: Fix error path in control parsing failure (git-fixes).
- media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE (bsc#1051510).
- media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT (bsc#1051510).
- media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments (bsc#1051510).
- mei: bus: prefix device names on bus with the bus name (bsc#1051510).
- mfd: da9062: Fix watchdog compatible string (bsc#1051510).
- mfd: dln2: More sanity checking for endpoints (bsc#1051510).
- mfd: rn5t618: Mark ADC control register volatile (bsc#1051510).
- missing escaping of backslashes in macro expansions Fixes: f3b74b0ae86b ('rpm/kernel-subpackage-spec: Unify dependency handling.') Fixes: 3fd22e219f77 ('rpm/kernel-subpackage-spec: Fix empty Recommends tag (bsc#1143959)')
- mlxsw: spectrum_qdisc: Ignore grafting of invisible FIFO (bsc#1112374).
- mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel (bsc#1112374).
- mm, memory_hotplug: do not clear numa_node association after hot_remove (bnc#1115026).
- mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock (bsc#1159394).
- mm: memory_hotplug: use put_device() if device_register fail (bsc#1159955 ltc#182993).
- mmc: mediatek: fix CMD_TA to 2 for MT8173 HS200/HS400 mode (bsc#1051510).
- mmc: sdhci-of-esdhc: fix P2020 errata handling (bsc#1051510).
- mmc: sdhci-of-esdhc: Revert 'mmc: sdhci-of-esdhc: add erratum A-009204 support' (bsc#1051510).
- mmc: sdhci: Add a quirk for broken command queuing (git-fixes).
- mmc: sdhci: fix minimum clock rate for v3 controller (bsc#1051510).
- mmc: sdhci: Workaround broken command queuing on Intel GLK (git-fixes).
- mmc: spi: Toggle SPI polarity, do not hardcode it (bsc#1051510).
- mmc: tegra: fix SDR50 tuning override (bsc#1051510).
- moduleparam: fix parameter description mismatch (bsc#1051510).
- mod_devicetable: fix PHY module format (networking-stable-19_12_28).
- mqprio: Fix out-of-bounds access in mqprio_dump (bsc#1109837).
- mtd: fix mtd_oobavail() incoherent returned value (bsc#1051510).
- mwifiex: debugfs: correct histogram spacing, formatting (bsc#1051510).
- mwifiex: delete unused mwifiex_get_intf_num() (bsc#1111666).
- mwifiex: drop most magic numbers from mwifiex_process_tdls_action_frame() (git-fixes).
- mwifiex: fix potential NULL dereference and use after free (bsc#1051510).
- mwifiex: update set_mac_address logic (bsc#1111666).
- namei: only return -ECHILD from follow_dotdot_rcu() (bsc#1163851).
- nbd: prevent memory leak (bsc#1158638).
- net, sysctl: Fix compiler warning when only cBPF is present (bsc#1109837).
- net/ibmvnic: Fix typo in retry check (bsc#1155689 ltc#182047).
- net/mlx4_en: fix mlx4 ethtool -N insertion (networking-stable-19_11_25).
- net/mlx4_en: Fix wrong limitation for number of TX rings (bsc#1103989).
- net/mlx5: Accumulate levels for chains prio namespaces (bsc#1103990).
- net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq (bsc#1046303).
- net/mlx5: Update the list of the PCI supported devices (bsc#1127611).
- net/mlx5e: Fix set vf link state error flow (networking-stable-19_11_25).
- net/mlx5e: Fix SFF 8472 eeprom length (git-fixes).
- net/mlx5e: Query global pause state before setting prio2buffer (bsc#1103990).
- net/mlxfw: Fix out-of-memory error in mfa2 flash burning (bsc#1051858).
- net/sched: act_pedit: fix WARN() in the traffic path (networking-stable-19_11_25).
- net: add sendmsg_locked and sendpage_locked to af_inet6 (bsc#1144162).
- net: bridge: deny dev_set_mac_address() when unregistering (networking-stable-19_12_16).
- net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size() (git-fixes).
- net: dst: Force 4-byte alignment of dst_metrics (networking-stable-19_12_28).
- net: ena: fix napi handler misbehavior when the napi budget is zero (networking-stable-20_01_01).
- net: ethernet: octeon_mgmt: Account for second possible VLAN header (networking-stable-19_11_10).
- net: ethernet: ti: cpsw: fix extra rx interrupt (networking-stable-19_12_16).
- net: fix data-race in neigh_event_send() (networking-stable-19_11_10).
- net: hisilicon: Fix a BUG trigered by wrong bytes_compl (networking-stable-19_12_28).
- net: hns3: fix ETS bandwidth validation bug (bsc#1104353 ).
- net: nfc: nci: fix a possible sleep-in-atomic-context bug in nci_uart_tty_receive() (networking-stable-19_12_28).
- net: phy: at803x: Change error to EINVAL for invalid MAC (bsc#1051510).
- net: phy: broadcom: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: Check against net_device being NULL (bsc#1051510).
- net: phy: dp83867: Set up RGMII TX delay (bsc#1051510).
- net: phy: Fix not to call phy_resume() if PHY is not attached (bsc#1051510).
- net: phy: Fix the register offsets in Broadcom iProc mdio mux driver (bsc#1051510).
- net: phy: fixed_phy: Fix fixed_phy not checking GPIO (bsc#1051510).
- net: phy: marvell: clear wol event before setting it (bsc#1051510).
- net: phy: marvell: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: meson-gxl: check phy_write return value (bsc#1051510).
- net: phy: micrel: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: mscc: read 'vsc8531, edge-slowdown' as an u32 (bsc#1051510).
- net: phy: mscc: read 'vsc8531,vddmac' as an u32 (bsc#1051510).
- net: phy: xgene: disable clk on error paths (bsc#1051510).
- net: phy: xgmiitorgmii: Check phy_driver ready before accessing (bsc#1051510).
- net: phy: xgmiitorgmii: Check read_status results (bsc#1051510).
- net: phy: xgmiitorgmii: Support generic PHY status read (bsc#1051510).
- net: psample: fix skb_over_panic (networking-stable-19_12_03).
- net: qlogic: Fix error paths in ql_alloc_large_buffers() (networking-stable-19_12_28).
- net: rtnetlink: prevent underflows in do_setvfinfo() (networking-stable-19_11_25).
- net: sched: correct flower port blocking (git-fixes).
- net: sched: ensure opts_len &lt;= IP_TUNNEL_OPTS_MAX in act_tunnel_key (bsc#1109837).
- net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues (bsc#1109837).
- net: sched: fix `tc -s class show` no bstats on class with nolock subqueues (networking-stable-19_12_03).
- net: usb: lan78xx: Fix suspend/resume PHY register access error (networking-stable-19_12_28).
- net: usb: lan78xx: limit size of local TSO packets (bsc#1051510).
- net: usb: qmi_wwan: add support for DW5821e with eSIM support (networking-stable-19_11_10).
- net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules (networking-stable-19_11_18).
- netfilter: nf_queue: enqueue skbs with NULL dst (git-fixes).
- new helper: lookup_positive_unlocked() (bsc#1159271).
- NFC: fdp: fix incorrect free object (networking-stable-19_11_10).
- NFC: pn533: fix bulk-message timeout (bsc#1051510).
- NFC: pn544: Adjust indentation in pn544_hci_check_presence (git-fixes).
- NFC: st21nfca: fix double free (networking-stable-19_11_10).
- nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info (bsc#1163774).
- ocfs2: fix panic due to ocfs2_wq is null (bsc#1158644).
- ocfs2: fix passing zero to 'PTR_ERR' warning (bsc#1158649).
- openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() (networking-stable-19_12_03).
- openvswitch: remove another BUG_ON() (networking-stable-19_12_03).
- openvswitch: support asymmetric conntrack (networking-stable-19_12_16).
- orinoco_usb: fix interface sanity check (git-fixes).
- PCI/IOV: Fix memory leak in pci_iov_add_virtfn() (git-fixes).
- PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity() (bsc#1051510).
- PCI/switchtec: Fix vep_vector_number ioread width (bsc#1051510).
- PCI: Add DMA alias quirk for Intel VCA NTB (bsc#1051510).
- PCI: Do not disable bridge BARs when assigning bus resources (bsc#1051510).
- PCI: pciehp: Avoid returning prematurely from sysfs requests (git-fixes).
- PCI: rpaphp: Add drc-info support for hotplug slot registration (bsc#1157480 ltc#181028).
- PCI: rpaphp: Annotate and correctly byte swap DRC properties (bsc#1157480 ltc#181028).
- PCI: rpaphp: Avoid a sometimes-uninitialized warning (bsc#1157480 ltc#181028).
- PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-info (bsc#1157480 ltc#181028).
- PCI: rpaphp: Do not rely on firmware feature to imply drc-info support (bsc#1157480 ltc#181028).
- PCI: rpaphp: Fix up pointer to first drc-info entry (bsc#1157480 ltc#181028).
- percpu: Separate decrypted varaibles anytime encryption can be enabled (bsc#1114279).
- perf/x86/intel: Fix inaccurate period in context switch for auto-reload (bsc#1164315).
- phy: qualcomm: Adjust indentation in read_poll_timeout (bsc#1051510).
- pinctrl: cherryview: Fix irq_valid_mask calculation (bsc#1111666).
- pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues (bsc#1051510).
- pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELF_B and SD1_CLK_B (bsc#1051510).
- pinctrl: xway: fix gpio-hog related boot issues (bsc#1051510).
- pktcdvd: remove warning on attempting to register non-passthrough dev (bsc#1051510).
- platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 (bsc#1051510).
- platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size (bsc#1051510).
- platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer (bsc#1051510).
- platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes (bsc#1051510).
- platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table (bsc#1051510).
- PM / AVS: SmartReflex: NULL check before some freeing functions is not needed (bsc#1051510).
- PM / Domains: Deal with multiple states but no governor in genpd (bsc#1051510).
- power: supply: ltc2941-battery-gauge: fix use-after-free (bsc#1051510).
- powerpc/archrandom: fix arch_get_random_seed_int() (bsc#1065729).
- powerpc/irq: fix stack overflow verification (bsc#1065729).
- powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (bsc#1065729).
- powerpc/mm: Remove kvm radix prefetch workaround for Power9 DD2.2 (bsc#1061840).
- powerpc/papr_scm: Do not enable direct map for a region by default (bsc#1129551).
- powerpc/papr_scm: Fix leaking 'bus_desc.provider_name' in some paths (bsc#1142685 ltc#179509).
- powerpc/pkeys: remove unused pkey_allows_readwrite (bsc#1065729).
- powerpc/powernv: Disable native PCIe port management (bsc#1065729).
- powerpc/pseries/hotplug-memory: Change rc variable to bool (bsc#1065729).
- powerpc/pseries/lparcfg: Fix display of Maximum Memory (bsc#1162028 ltc#181740).
- powerpc/pseries/mobility: notify network peers after migration (bsc#1152631 ltc#181798).
- powerpc/pseries/vio: Fix iommu_table use-after-free refcount warning (bsc#1065729).
- powerpc/pseries: Add cpu DLPAR support for drc-info property (bsc#1157480 ltc#181028).
- powerpc/pseries: Advance pfn if section is not present in lmb_is_removable() (bsc#1065729).
- powerpc/pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce for DDW (bsc#1065729).
- powerpc/pseries: Drop pointless static qualifier in vpa_debugfs_init() (git-fixes).
- powerpc/pseries: Enable support for ibm,drc-info property (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix bad drc_index_start value parsing of drc-info entry (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix drc-info mappings of logical cpus to drc-index (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix vector5 in ibm architecture vector table (bsc#1157480 ltc#181028).
- powerpc/pseries: Revert support for ibm,drc-info devtree property (bsc#1157480 ltc#181028).
- powerpc/security: Fix debugfs data leak on 32-bit (bsc#1065729).
- powerpc/tm: Fix clearing MSR[TS] in current when reclaiming on signal delivery (bsc#1118338 ltc#173734).
- powerpc/tools: Do not quote $objdump in scripts (bsc#1065729).
- powerpc/xive: Discard ESB load value when interrupt is invalid (bsc#1085030).
- powerpc/xive: Skip ioremap() of ESB pages for LSI interrupts (bsc#1085030).
- powerpc/xmon: do not access ASDR in VMs (bsc#1065729).
- powerpc: Allow 64bit VDSO __kernel_sync_dicache to work across ranges &gt;4GB (bnc#1151927 5.3.17).
- powerpc: Allow flush_icache_range to work across ranges &gt;4GB (bnc#1151927 5.3.17).
- powerpc: avoid adjusting memory_limit for capture kernel memory reservation (bsc#1140025 ltc#176086).
- powerpc: Enable support for ibm,drc-info devtree property (bsc#1157480 ltc#181028).
- powerpc: Fix vDSO clock_getres() (bsc#1065729).
- powerpc: reserve memory for capture kernel after hugepages init (bsc#1140025 ltc#176086).
- ppp: Adjust indentation into ppp_async_input (git-fixes).
- prevent active file list thrashing due to refault detection (VM Performance, bsc#1156286).
- pseries/drc-info: Search DRC properties for CPU indexes (bsc#1157480 ltc#181028).
- pstore/ram: Write new dumps to start of recycled zones (bsc#1051510).
- pwm: Clear chip_data in pwm_put() (bsc#1051510).
- pwm: clps711x: Fix period calculation (bsc#1051510).
- pwm: omap-dmtimer: Remove PWM chip in .remove before making it unfunctional (git-fixes).
- pwm: Remove set but not set variable 'pwm' (git-fixes).
- pxa168fb: Fix the function used to release some memory in an error (bsc#1114279)
- qede: Disable hardware gro when xdp prog is installed (bsc#1086314 bsc#1086313 bsc#1086301 ).
- qede: Fix multicast mac configuration (networking-stable-19_12_28).
- qede: fix NULL pointer deref in __qede_remove() (networking-stable-19_11_10).
- qmi_wwan: Add support for Quectel RM500Q (bsc#1051510).
- quota: Check that quota is not dirty before release (bsc#1163858).
- quota: fix livelock in dquot_writeback_dquots (bsc#1163857).
- r8152: add missing endpoint sanity check (bsc#1051510).
- r8152: get default setting of WOL before initializing (bsc#1051510).
- random: move FIPS continuous test to output functions (bsc#1155334).
- RDMA/bnxt_re: Avoid freeing MR resources if dereg fails (bsc#1050244).
- RDMA/bnxt_re: Enable SRIOV VF support on Broadcom's 57500 adapter series (bsc#1154916).
- RDMA/bnxt_re: Fix chip number validation Broadcom's Gen P5 series (bsc#1157895).
- RDMA/bnxt_re: Fix missing le16_to_cpu (bsc#1157895).
- RDMA/hns: Bugfix for qpc/cqc timer configuration (bsc#1104427 bsc#1126206).
- RDMA/hns: Correct the value of srq_desc_size (bsc#1104427 ).
- RDMA/hns: Fix to support 64K page for srq (bsc#1104427 ).
- RDMA/hns: Prevent memory leaks of eq-&gt;buf_list (bsc#1104427 ).
- README.BRANCH: Removing myself from the maintainer list
- README.BRANCH: Update the branch name to cve/linux-4.12
- regulator: Fix return value of _set_load() stub (bsc#1051510).
- regulator: rk808: Lower log level on optional GPIOs being not available (bsc#1051510).
- regulator: rn5t618: fix module aliases (bsc#1051510).
- regulator: tps65910: fix a missing check of return value (bsc#1051510).
- reiserfs: Fix memory leak of journal device string (bsc#1163867).
- reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling (bsc#1163869).
- reset: fix reset_control_ops kerneldoc comment (bsc#1051510).
- resource: fix locking in find_next_iomem_res() (bsc#1114279).
- Revert 'ath10k: fix DMA related firmware crashes on multiple devices' (git-fixes).
- Revert 'Input: synaptics-rmi4 - do not increment rmiaddr for SMBus transfers' (bsc#1051510).
- Revert 'locking/pvqspinlock: Do not wait if vCPU is preempted' (bsc#1050549).
- Revert 'mmc: sdhci: Fix incorrect switch to HS mode' (bsc#1051510).
- rpm/kabi.pl: support new (&gt;=5.4) Module.symvers format (new symbol namespace field)
- rpm/kernel-binary.spec.in: Conflict with too old powerpc-utils (jsc#ECO-920, jsc#SLE-11054, jsc#SLE-11322).
- rpm/kernel-binary.spec.in: Replace Novell with SUSE
- rpm/kernel-subpackage-spec: Exclude kernel-firmware recommends (bsc#1143959) For reducing the dependency on kernel-firmware in sub packages
- rpm/kernel-subpackage-spec: Fix empty Recommends tag (bsc#1143959)
- rpm/kernel-subpackage-spec: fix kernel-default-base build There were some issues with recent changes to subpackage dependencies handling:
- rpm/kernel-subpackage-spec: Unify dependency handling.
- rpm/modules.fips: update module list (bsc#1157853)
- rsi_91x_usb: fix interface sanity check (git-fixes).
- rt2800: remove errornous duplicate condition (git-fixes).
- rtc: cmos: Stop using shared IRQ (bsc#1051510).
- rtc: dt-binding: abx80x: fix resistance scale (bsc#1051510).
- rtc: hym8563: Return -EINVAL if the time is known to be invalid (bsc#1051510).
- rtc: max8997: Fix the returned value in case of error in 'max8997_rtc_read_alarm()' (bsc#1051510).
- rtc: msm6242: Fix reading of 10-hour digit (bsc#1051510).
- rtc: pcf8523: set xtal load capacitance from DT (bsc#1051510).
- rtc: s35390a: Change buf's type to u8 in s35390a_init (bsc#1051510).
- rtl818x: fix potential use after free (bsc#1051510).
- rtl8xxxu: fix interface sanity check (git-fixes).
- rtlwifi: Fix MAX MPDU of VHT capability (git-fixes).
- rtlwifi: Remove redundant semicolon in wifi.h (git-fixes).
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (bsc#1111666).
- s390/qeth: clean up page frag creation (git-fixes).
- s390/qeth: consolidate skb allocation (git-fixes).
- s390/qeth: ensure linear access to packet headers (git-fixes).
- s390/qeth: guard against runt packets (git-fixes).
- sched/fair: Add tmp_alone_branch assertion (bnc#1156462).
- sched/fair: Fix insertion in rq-&gt;leaf_cfs_rq_list (bnc#1156462).
- sched/fair: Fix O(nr_cgroups) in the load balancing path (bnc#1156462).
- sched/fair: Optimize update_blocked_averages() (bnc#1156462).
- sched/fair: WARN() and refuse to set buddy when !se-&gt;on_rq (bsc#1158132).
- scsi: lpfc: fix build failure with DEBUGFS disabled (bsc#1154601).
- scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (bsc#1158013).
- scsi: qla2xxx: Add D-Port Diagnostic reason explanation logs (bsc#1158013).
- scsi: qla2xxx: Added support for MPI and PEP regions for ISP28XX (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Cleanup unused async_logout_done (bsc#1158013).
- scsi: qla2xxx: Consolidate fabric scan (bsc#1158013).
- scsi: qla2xxx: Correct fcport flags handling (bsc#1158013).
- scsi: qla2xxx: Correctly retrieve and interpret active flash region (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Fix a NULL pointer dereference in an error path (bsc#1157966 bsc#1158013 bsc#1157424).
- scsi: qla2xxx: Fix fabric scan hang (bsc#1158013).
- scsi: qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Fix mtcp dump collection failure (bsc#1158013).
- scsi: qla2xxx: Fix RIDA Format-2 (bsc#1158013).
- scsi: qla2xxx: Fix stuck login session using prli_pend_timer (bsc#1158013).
- scsi: qla2xxx: Fix stuck session in GNL (bsc#1158013).
- scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type (bsc#1158013).
- scsi: qla2xxx: Fix unbound NVME response length (bsc#1157966 bsc#1158013 bsc#1157424).
- scsi: qla2xxx: Fix update_fcport for current_topology (bsc#1158013).
- scsi: qla2xxx: Improve readability of the code that handles qla_flt_header (bsc#1158013).
- scsi: qla2xxx: Remove defer flag to indicate immeadiate port loss (bsc#1158013).
- scsi: qla2xxx: Update driver version to 10.01.00.22-k (bsc#1158013).
- scsi: qla2xxx: Use common routine to free fcport struct (bsc#1158013).
- scsi: qla2xxx: Use get_unaligned_*() instead of open-coding these functions (bsc#1158013).
- scsi: zfcp: trace channel log even for FCP command responses (git-fixes).
- sctp: cache netns in sctp_ep_common (networking-stable-19_12_03).
- sctp: fully initialize v4 addr in some functions (networking-stable-19_12_28).
- serial: 8250_bcm2835aux: Fix line mismatch on driver unbind (bsc#1051510).
- serial: ifx6x60: add missed pm_runtime_disable (bsc#1051510).
- serial: max310x: Fix tx_empty() callback (bsc#1051510).
- serial: pl011: Fix DMA -&gt;flush_buffer() (bsc#1051510).
- serial: serial_core: Perform NULL checks for break_ctl ops (bsc#1051510).
- serial: stm32: fix transmit_chars when tx is stopped (bsc#1051510).
- sfc: Only cancel the PPS workqueue if it exists (networking-stable-19_11_25).
- sfc: Remove 'PCIE error reporting unavailable' (bsc#1161472).
- sh_eth: check sh_eth_cpu_data::dual_port when dumping registers (bsc#1051510).
- sh_eth: fix dumping ARSTR (bsc#1051510).
- sh_eth: fix invalid context bug while calling auto-negotiation by ethtool (bsc#1051510).
- sh_eth: fix invalid context bug while changing link options by ethtool (bsc#1051510).
- sh_eth: fix TSU init on SH7734/R8A7740 (bsc#1051510).
- sh_eth: fix TXALCR1 offsets (bsc#1051510).
- sh_eth: TSU_QTAG0/1 registers the same as TSU_QTAGM0/1 (bsc#1051510).
- smb3: Fix crash in SMB2_open_init due to uninitialized field in compounding path (bsc#1144333).
- smb3: Fix persistent handles reconnect (bsc#1144333).
- smb3: fix refcount underflow warning on unmount when no directory leases (bsc#1144333).
- smb3: remove confusing dmesg when mounting with encryption ('seal') (bsc#1144333).
- soc/tegra: fuse: Correct straps' address for older Tegra124 device trees (bsc#1051510).
- soc: renesas: rcar-sysc: Add goto to of_node_put() before return (bsc#1051510).
- soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot (bsc#1051510).
- spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch (bsc#1051510).
- spi: omap2-mcspi: Set FIFO DMA trigger level to word length (bsc#1051510).
- spi: tegra114: clear packed bit for unpacked mode (bsc#1051510).
- spi: tegra114: configure dma burst size to fifo trig level (bsc#1051510).
- spi: tegra114: fix for unpacked mode transfers (bsc#1051510).
- spi: tegra114: flush fifos (bsc#1051510).
- spi: tegra114: terminate dma and reset on transfer timeout (bsc#1051510).
- sr_vendor: support Beurer GL50 evo CD-on-a-chip devices (boo#1164632).
- staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 (bsc#1051510).
- Staging: iio: adt7316: Fix i2c data reading, set the data field (bsc#1051510).
- staging: rtl8188eu: fix interface sanity check (bsc#1051510).
- staging: rtl8192e: fix potential use after free (bsc#1051510).
- staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids (bsc#1051510).
- staging: rtl8723bs: Drop ACPI device ids (bsc#1051510).
- staging: vt6656: correct packet types for CTS protect, mode (bsc#1051510).
- staging: vt6656: Fix false Tx excessive retries reporting (bsc#1051510).
- staging: vt6656: use NULLFUCTION stack on mac80211 (bsc#1051510).
- staging: wlan-ng: ensure error return is actually returned (bsc#1051510).
- stm class: Fix a double free of stm_source_device (bsc#1051510).
- stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (bsc#1088810, bsc#1161702).
- stop_machine: Atomically queue and wake stopper threads (bsc#1088810, bsc#1161702).
- stop_machine: Disable preemption after queueing stopper threads (bsc#1088810, bsc#1161702).
- stop_machine: Disable preemption when waking two stopper threads (bsc#1088810, bsc#1161702).
- tcp: clear tp-&gt;packets_out when purging write queue (bsc#1160560).
- tcp: do not send empty skb from tcp_write_xmit() (networking-stable-20_01_01).
- tcp: exit if nothing to retransmit on RTO timeout (bsc#1160560, stable 4.14.159).
- tcp: md5: fix potential overestimation of TCP option space (networking-stable-19_12_16).
- thermal: Fix deadlock in thermal thermal_zone_device_check (bsc#1051510).
- tipc: fix a missing check of genlmsg_put (bsc#1051510).
- tipc: fix link name length check (bsc#1051510).
- tipc: fix memory leak in tipc_nl_compat_publ_dump (bsc#1051510).
- tipc: fix skb may be leaky in tipc_link_input (bsc#1051510).
- tracing: Annotate ftrace_graph_hash pointer with __rcu (git-fixes).
- tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu (git-fixes).
- tracing: Fix tracing_stat return values in error handling paths (git-fixes).
- tracing: Fix very unlikely race of registering two stat tracers (git-fixes).
- tracing: Have the histogram compare functions convert to u64 first (bsc#1160210).
- tracing: xen: Ordered comparison of function pointers (git-fixes).
- tty/serial: atmel: Add is_half_duplex helper (bsc#1051510).
- tty: n_hdlc: fix build on SPARC (bsc#1051510).
- tty: serial: msm_serial: Fix lockup for sysrq and oops (bsc#1051510).
- tty: vt: keyboard: reject invalid keycodes (bsc#1051510).
- uaccess: Add non-pagefault user-space write function (bsc#1083647).
- ubifs: Correctly initialize c-&gt;min_log_bytes (bsc#1158641).
- ubifs: do not trigger assertion on invalid no-key filename (bsc#1163850).
- ubifs: Fix deadlock in concurrent bulk-read and writepage (bsc#1163856).
- ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag (bsc#1163855).
- ubifs: Limit the number of pages in shrink_liability (bsc#1158643).
- ubifs: Reject unsupported ioctl flags explicitly (bsc#1163844).
- udp: fix integer overflow while computing available space in sk_rcvbuf (networking-stable-20_01_01).
- usb-storage: Disable UAS on JMicron SATA enclosure (bsc#1051510).
- usb: adutux: fix interface sanity check (bsc#1051510).
- usb: Allow USB device to be warm reset in suspended state (bsc#1051510).
- usb: atm: ueagle-atm: add missing endpoint check (bsc#1051510).
- usb: chipidea: host: Disable port power only if previously enabled (bsc#1051510).
- usb: core: fix check for duplicate endpoints (git-fixes).
- usb: core: hub: Improved device recognition on remote wakeup (bsc#1051510).
- usb: core: urb: fix URB structure initialization function (bsc#1051510).
- usb: documentation: flags on usb-storage versus UAS (bsc#1051510).
- usb: dwc3: debugfs: Properly print/set link state for HS (bsc#1051510).
- usb: dwc3: do not log probe deferrals; but do log other error codes (bsc#1051510).
- usb: dwc3: ep0: Clear started flag on completion (bsc#1051510).
- usb: dwc3: turn off VBUS when leaving host mode (bsc#1051510).
- usb: EHCI: Do not return -EPIPE when hub is disconnected (git-fixes).
- usb: gadget: f_ecm: Use atomic_t to track in-flight request (bsc#1051510).
- usb: gadget: f_ncm: Use atomic_t to track in-flight request (bsc#1051510).
- usb: gadget: legacy: set max_speed to super-speed (bsc#1051510).
- usb: gadget: pch_udc: fix use after free (bsc#1051510).
- usb: gadget: u_serial: add missing port entry locking (bsc#1051510).
- usb: gadget: Zero ffs_io_data (bsc#1051510).
- usb: host: xhci-hub: fix extra endianness conversion (bsc#1051510).
- usb: idmouse: fix interface sanity checks (bsc#1051510).
- usb: mon: Fix a deadlock in usbmon between mmap and read (bsc#1051510).
- usb: mtu3: fix dbginfo in qmu_tx_zlp_error_handler (bsc#1051510).
- usb: musb: dma: Correct parameter passed to IRQ handler (bsc#1051510).
- usb: musb: fix idling for suspend after disconnect interrupt (bsc#1051510).
- usb: roles: fix a potential use after free (git-fixes).
- usb: serial: ch341: handle unbound port at reset_resume (bsc#1051510).
- usb: serial: ftdi_sio: add device IDs for U-Blox C099-F9P (bsc#1051510).
- usb: serial: io_edgeport: add missing active-port sanity check (bsc#1051510).
- usb: serial: io_edgeport: fix epic endpoint lookup (bsc#1051510).
- usb: serial: io_edgeport: handle unbound ports on URB completion (bsc#1051510).
- usb: serial: io_edgeport: use irqsave() in USB's complete callback (bsc#1051510).
- usb: serial: ir-usb: add missing endpoint sanity check (bsc#1051510).
- usb: serial: ir-usb: fix IrLAP framing (bsc#1051510).
- usb: serial: ir-usb: fix link-speed handling (bsc#1051510).
- usb: serial: keyspan: handle unbound ports (bsc#1051510).
- usb: serial: opticon: fix control-message timeouts (bsc#1051510).
- usb: serial: option: Add support for Quectel RM500Q (bsc#1051510).
- usb: serial: option: add support for Quectel RM500Q in QDL mode (git-fixes).
- usb: serial: option: add Telit ME910G1 0x110a composition (git-fixes).
- usb: serial: option: add ZLP support for 0x1bc7/0x9010 (git-fixes).
- usb: serial: quatech2: handle unbound ports (bsc#1051510).
- usb: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx (bsc#1051510).
- usb: serial: suppress driver bind attributes (bsc#1051510).
- usb: typec: tcpci: mask event interrupts when remove driver (bsc#1051510).
- usb: uas: heed CAPACITY_HEURISTICS (bsc#1051510).
- usb: uas: honor flag to avoid CAPACITY16 (bsc#1051510).
- usb: xhci: Fix build warning seen with CONFIG_PM=n (bsc#1051510).
- usb: xhci: only set D3hot for pci device (bsc#1051510).
- usbip: Fix error path of vhci_recv_ret_submit() (git-fixes).
- usbip: Fix receive error in vhci-hcd when using scatter-gather (bsc#1051510).
- vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset == -1 (bsc#1051510).
- vhost/vsock: accept only packets with the right dst_cid (networking-stable-20_01_01).
- video: backlight: Add devres versions of of_find_backlight (bsc#1090888) Taken for 6010831dde5.
- video: backlight: Add of_find_backlight helper in backlight.c (bsc#1090888) Taken for 6010831dde5.
- watchdog: max77620_wdt: fix potential build errors (bsc#1051510).
- watchdog: rn5t618_wdt: fix module aliases (bsc#1051510).
- watchdog: sama5d4: fix WDD value to be always set to max (bsc#1051510).
- watchdog: wdat_wdt: fix get_timeleft call for wdat_wdt (bsc#1162557).
- wireless: fix enabling channel 12 for custom regulatory domain (bsc#1051510).
- wireless: wext: avoid gcc -O3 warning (bsc#1051510).
- workqueue: Fix pwq ref leak in rescuer_thread() (bsc#1160211).
- x86/amd_nb: Add PCI device IDs for family 17h, model 70h (bsc#1163206).
- x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR (bsc#1162619).
- x86/intel_rdt: Split resource group removal in two (bsc#1112178).
- x86/intel_rdt: Split resource group removal in two (bsc#1112178).
- x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI (bsc#1114279).
- x86/mce/AMD: Allow any CPU to initialize the smca_banks array (bsc#1114279).
- x86/MCE/AMD: Allow Reserved types to be overwritten in smca_banks (bsc#1114279).
- x86/MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure() (bsc#1114279).
- x86/mce: Fix possibly incorrect severity calculation on AMD (bsc#1114279).
- x86/resctrl: Check monitoring static key in the MBM overflow handler (bsc#1114279).
- x86/resctrl: Fix a deadlock due to inaccurate reference (bsc#1112178).
- x86/resctrl: Fix a deadlock due to inaccurate reference (bsc#1112178).
- x86/resctrl: Fix an imbalance in domain_remove_cpu() (bsc#1114279).
- x86/resctrl: Fix potential memory leak (bsc#1114279).
- x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup (bsc#1112178).
- x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup (bsc#1112178).
- x86/resctrl: Fix use-after-free when deleting resource groups (bsc#1114279).
- x86/speculation: Fix incorrect MDS/TAA mitigation status (bsc#1114279).
- x86/speculation: Fix redundant MDS mitigation message (bsc#1114279).
- xen-blkfront: switch kcalloc to kvcalloc for large array allocation (bsc#1160917).
- xen/balloon: Support xend-based toolstack take two (bsc#1065600).
- xen/blkback: Avoid unmapping unmapped grant pages (bsc#1065600).
- xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk (bsc#1065600).
- xen: Enable interrupts when calling _cond_resched() (bsc#1065600).
- xfrm: Fix transport mode skb control buffer usage (bsc#1161552).
- xfs: Fix tail rounding in xfs_alloc_file_space() (bsc#1161087, bsc#1153917).
- xfs: Sanity check flags of Q_XQUOTARM call (bsc#1158652).
- xhci: Fix memory leak in xhci_add_in_port() (bsc#1051510).
- xhci: fix USB3 device initiated resume race with roothub autosuspend (bsc#1051510).
- xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour (bsc#1051510).
- xhci: Increase STS_HALT timeout in xhci_suspend() (bsc#1051510).
- xhci: make sure interrupts are restored to correct state (bsc#1051510).
- zd1211rw: fix storage endpoint lookup (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-02"/>
	<updated date="2020-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046303">SUSE bug 1046303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051858">SUSE bug 1051858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086301">SUSE bug 1086301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086313">SUSE bug 1086313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086314">SUSE bug 1086314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088810">SUSE bug 1088810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090888">SUSE bug 1090888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103989">SUSE bug 1103989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105392">SUSE bug 1105392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112504">SUSE bug 1112504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115026">SUSE bug 1115026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118338">SUSE bug 1118338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118661">SUSE bug 1118661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123328">SUSE bug 1123328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127682">SUSE bug 1127682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129551">SUSE bug 1129551</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133147">SUSE bug 1133147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134973">SUSE bug 1134973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140025">SUSE bug 1140025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143959">SUSE bug 1143959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144162">SUSE bug 1144162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146544">SUSE bug 1146544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151548">SUSE bug 1151548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151910">SUSE bug 1151910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151927">SUSE bug 1151927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152107">SUSE bug 1152107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152631">SUSE bug 1152631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153535">SUSE bug 1153535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153917">SUSE bug 1153917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154243">SUSE bug 1154243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154601">SUSE bug 1154601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154768">SUSE bug 1154768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154916">SUSE bug 1154916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155331">SUSE bug 1155331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155334">SUSE bug 1155334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155689">SUSE bug 1155689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156259">SUSE bug 1156259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156286">SUSE bug 1156286</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156462">SUSE bug 1156462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157155">SUSE bug 1157155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157157">SUSE bug 1157157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157169">SUSE bug 1157169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157303">SUSE bug 1157303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157480">SUSE bug 1157480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157692">SUSE bug 1157692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157853">SUSE bug 1157853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157895">SUSE bug 1157895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157908">SUSE bug 1157908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157966">SUSE bug 1157966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158013">SUSE bug 1158013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158021">SUSE bug 1158021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158026">SUSE bug 1158026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158071">SUSE bug 1158071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158094">SUSE bug 1158094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158132">SUSE bug 1158132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158533">SUSE bug 1158533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158637">SUSE bug 1158637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158638">SUSE bug 1158638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158639">SUSE bug 1158639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158640">SUSE bug 1158640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158641">SUSE bug 1158641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158643">SUSE bug 1158643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158644">SUSE bug 1158644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158645">SUSE bug 1158645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158646">SUSE bug 1158646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158647">SUSE bug 1158647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158649">SUSE bug 1158649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158651">SUSE bug 1158651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158652">SUSE bug 1158652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158819">SUSE bug 1158819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158823">SUSE bug 1158823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158824">SUSE bug 1158824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158827">SUSE bug 1158827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158893">SUSE bug 1158893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158900">SUSE bug 1158900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158903">SUSE bug 1158903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158904">SUSE bug 1158904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158954">SUSE bug 1158954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159024">SUSE bug 1159024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159028">SUSE bug 1159028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159271">SUSE bug 1159271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159297">SUSE bug 1159297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159377">SUSE bug 1159377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159394">SUSE bug 1159394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159483">SUSE bug 1159483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159484">SUSE bug 1159484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159500">SUSE bug 1159500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159569">SUSE bug 1159569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159588">SUSE bug 1159588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159841">SUSE bug 1159841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159908">SUSE bug 1159908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159909">SUSE bug 1159909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159910">SUSE bug 1159910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159911">SUSE bug 1159911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159955">SUSE bug 1159955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160147">SUSE bug 1160147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160195">SUSE bug 1160195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160210">SUSE bug 1160210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160211">SUSE bug 1160211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160218">SUSE bug 1160218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160433">SUSE bug 1160433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160442">SUSE bug 1160442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160469">SUSE bug 1160469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160470">SUSE bug 1160470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160476">SUSE bug 1160476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160560">SUSE bug 1160560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160618">SUSE bug 1160618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160678">SUSE bug 1160678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160755">SUSE bug 1160755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160756">SUSE bug 1160756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160784">SUSE bug 1160784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160787">SUSE bug 1160787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160802">SUSE bug 1160802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160803">SUSE bug 1160803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160804">SUSE bug 1160804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160917">SUSE bug 1160917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160966">SUSE bug 1160966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160979">SUSE bug 1160979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161087">SUSE bug 1161087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161243">SUSE bug 1161243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161360">SUSE bug 1161360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161472">SUSE bug 1161472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161514">SUSE bug 1161514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161518">SUSE bug 1161518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161522">SUSE bug 1161522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161523">SUSE bug 1161523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161549">SUSE bug 1161549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161552">SUSE bug 1161552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161674">SUSE bug 1161674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161702">SUSE bug 1161702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161907">SUSE bug 1161907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161931">SUSE bug 1161931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161933">SUSE bug 1161933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161934">SUSE bug 1161934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161935">SUSE bug 1161935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161936">SUSE bug 1161936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161937">SUSE bug 1161937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162028">SUSE bug 1162028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162067">SUSE bug 1162067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162109">SUSE bug 1162109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162139">SUSE bug 1162139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162557">SUSE bug 1162557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162617">SUSE bug 1162617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162618">SUSE bug 1162618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162619">SUSE bug 1162619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162623">SUSE bug 1162623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162928">SUSE bug 1162928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162943">SUSE bug 1162943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163206">SUSE bug 1163206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163383">SUSE bug 1163383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163384">SUSE bug 1163384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163762">SUSE bug 1163762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163774">SUSE bug 1163774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163836">SUSE bug 1163836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163840">SUSE bug 1163840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163841">SUSE bug 1163841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163842">SUSE bug 1163842</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163843">SUSE bug 1163843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163844">SUSE bug 1163844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163845">SUSE bug 1163845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163846">SUSE bug 1163846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163849">SUSE bug 1163849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163850">SUSE bug 1163850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163851">SUSE bug 1163851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163852">SUSE bug 1163852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163853">SUSE bug 1163853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163855">SUSE bug 1163855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163856">SUSE bug 1163856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163857">SUSE bug 1163857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163858">SUSE bug 1163858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163859">SUSE bug 1163859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163860">SUSE bug 1163860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163861">SUSE bug 1163861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163862">SUSE bug 1163862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163863">SUSE bug 1163863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163867">SUSE bug 1163867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163869">SUSE bug 1163869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163880">SUSE bug 1163880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163971">SUSE bug 1163971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164051">SUSE bug 1164051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164069">SUSE bug 1164069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164098">SUSE bug 1164098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164115">SUSE bug 1164115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164314">SUSE bug 1164314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164315">SUSE bug 1164315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164388">SUSE bug 1164388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164471">SUSE bug 1164471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164598">SUSE bug 1164598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164632">SUSE bug 1164632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164705">SUSE bug 1164705</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164712">SUSE bug 1164712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164727">SUSE bug 1164727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164728">SUSE bug 1164728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164729">SUSE bug 1164729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164730">SUSE bug 1164730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164731">SUSE bug 1164731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164732">SUSE bug 1164732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164733">SUSE bug 1164733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164734">SUSE bug 1164734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164735">SUSE bug 1164735</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-14615/">CVE-2019-14615</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-15213/">CVE-2019-15213</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16746/">CVE-2019-16746</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16994/">CVE-2019-16994</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18808/">CVE-2019-18808</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19036/">CVE-2019-19036</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19045/">CVE-2019-19045</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19051/">CVE-2019-19051</cve>
	<cve impact="moderate" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19054/">CVE-2019-19054</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19066/">CVE-2019-19066</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19318/">CVE-2019-19318</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19319/">CVE-2019-19319</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19332/">CVE-2019-19332</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19338/">CVE-2019-19338</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19447/">CVE-2019-19447</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19523/">CVE-2019-19523</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19526/">CVE-2019-19526</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19527/">CVE-2019-19527</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19532/">CVE-2019-19532</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19533/">CVE-2019-19533</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19535/">CVE-2019-19535</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19537/">CVE-2019-19537</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19767/">CVE-2019-19767</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19927/">CVE-2019-19927</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19965/">CVE-2019-19965</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19966/">CVE-2019-19966</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20054/">CVE-2019-20054</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20095/">CVE-2019-20095</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20096/">CVE-2019-20096</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2732/">CVE-2020-2732</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-7053/">CVE-2020-7053</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8428/">CVE-2020-8428</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8648/">CVE-2020-8648</cve>
	<cve impact="low" cvss3="2.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8992/">CVE-2020-8992</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497106" comment="reiserfs-kmp-default-4.12.14-197.34.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138324" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1158809" ref_url="https://bugzilla.suse.com/1158809" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1551" ref_url="https://www.suse.com/security/cve/CVE-2019-1551/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006323.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

Security issue fixed:

- CVE-2019-1551: Fixed an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli (bsc#1158809).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-10"/>
	<updated date="2020-01-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1158809">SUSE bug 1158809</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1551/">CVE-2019-1551</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497041" comment="libopenssl-1_0_0-devel-1.0.2p-3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497042" comment="libopenssl1_0_0-1.0.2p-3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497043" comment="openssl-1_0_0-1.0.2p-3.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138325" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1044231" ref_url="https://bugzilla.suse.com/1044231" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1051858" ref_url="https://bugzilla.suse.com/1051858" source="BUGZILLA"/>
		<reference ref_id="1056686" ref_url="https://bugzilla.suse.com/1056686" source="BUGZILLA"/>
		<reference ref_id="1060463" ref_url="https://bugzilla.suse.com/1060463" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1111974" ref_url="https://bugzilla.suse.com/1111974" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1119680" ref_url="https://bugzilla.suse.com/1119680" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1136157" ref_url="https://bugzilla.suse.com/1136157" source="BUGZILLA"/>
		<reference ref_id="1141895" ref_url="https://bugzilla.suse.com/1141895" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1146539" ref_url="https://bugzilla.suse.com/1146539" source="BUGZILLA"/>
		<reference ref_id="1156510" ref_url="https://bugzilla.suse.com/1156510" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1158187" ref_url="https://bugzilla.suse.com/1158187" source="BUGZILLA"/>
		<reference ref_id="1159285" ref_url="https://bugzilla.suse.com/1159285" source="BUGZILLA"/>
		<reference ref_id="1160659" ref_url="https://bugzilla.suse.com/1160659" source="BUGZILLA"/>
		<reference ref_id="1161561" ref_url="https://bugzilla.suse.com/1161561" source="BUGZILLA"/>
		<reference ref_id="1161951" ref_url="https://bugzilla.suse.com/1161951" source="BUGZILLA"/>
		<reference ref_id="1162928" ref_url="https://bugzilla.suse.com/1162928" source="BUGZILLA"/>
		<reference ref_id="1162929" ref_url="https://bugzilla.suse.com/1162929" source="BUGZILLA"/>
		<reference ref_id="1162931" ref_url="https://bugzilla.suse.com/1162931" source="BUGZILLA"/>
		<reference ref_id="1164078" ref_url="https://bugzilla.suse.com/1164078" source="BUGZILLA"/>
		<reference ref_id="1164507" ref_url="https://bugzilla.suse.com/1164507" source="BUGZILLA"/>
		<reference ref_id="1165111" ref_url="https://bugzilla.suse.com/1165111" source="BUGZILLA"/>
		<reference ref_id="1165404" ref_url="https://bugzilla.suse.com/1165404" source="BUGZILLA"/>
		<reference ref_id="1165488" ref_url="https://bugzilla.suse.com/1165488" source="BUGZILLA"/>
		<reference ref_id="1165527" ref_url="https://bugzilla.suse.com/1165527" source="BUGZILLA"/>
		<reference ref_id="1165741" ref_url="https://bugzilla.suse.com/1165741" source="BUGZILLA"/>
		<reference ref_id="1165813" ref_url="https://bugzilla.suse.com/1165813" source="BUGZILLA"/>
		<reference ref_id="1165873" ref_url="https://bugzilla.suse.com/1165873" source="BUGZILLA"/>
		<reference ref_id="1165929" ref_url="https://bugzilla.suse.com/1165929" source="BUGZILLA"/>
		<reference ref_id="1165950" ref_url="https://bugzilla.suse.com/1165950" source="BUGZILLA"/>
		<reference ref_id="1165980" ref_url="https://bugzilla.suse.com/1165980" source="BUGZILLA"/>
		<reference ref_id="1165984" ref_url="https://bugzilla.suse.com/1165984" source="BUGZILLA"/>
		<reference ref_id="1165985" ref_url="https://bugzilla.suse.com/1165985" source="BUGZILLA"/>
		<reference ref_id="1166003" ref_url="https://bugzilla.suse.com/1166003" source="BUGZILLA"/>
		<reference ref_id="1166101" ref_url="https://bugzilla.suse.com/1166101" source="BUGZILLA"/>
		<reference ref_id="1166102" ref_url="https://bugzilla.suse.com/1166102" source="BUGZILLA"/>
		<reference ref_id="1166103" ref_url="https://bugzilla.suse.com/1166103" source="BUGZILLA"/>
		<reference ref_id="1166104" ref_url="https://bugzilla.suse.com/1166104" source="BUGZILLA"/>
		<reference ref_id="1166632" ref_url="https://bugzilla.suse.com/1166632" source="BUGZILLA"/>
		<reference ref_id="1166658" ref_url="https://bugzilla.suse.com/1166658" source="BUGZILLA"/>
		<reference ref_id="1166730" ref_url="https://bugzilla.suse.com/1166730" source="BUGZILLA"/>
		<reference ref_id="1166731" ref_url="https://bugzilla.suse.com/1166731" source="BUGZILLA"/>
		<reference ref_id="1166732" ref_url="https://bugzilla.suse.com/1166732" source="BUGZILLA"/>
		<reference ref_id="1166733" ref_url="https://bugzilla.suse.com/1166733" source="BUGZILLA"/>
		<reference ref_id="1166734" ref_url="https://bugzilla.suse.com/1166734" source="BUGZILLA"/>
		<reference ref_id="1166735" ref_url="https://bugzilla.suse.com/1166735" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19768" ref_url="https://www.suse.com/security/cve/CVE-2019-19768/" source="CVE"/>
		<reference ref_id="CVE-2020-8647" ref_url="https://www.suse.com/security/cve/CVE-2020-8647/" source="CVE"/>
		<reference ref_id="CVE-2020-8648" ref_url="https://www.suse.com/security/cve/CVE-2020-8648/" source="CVE"/>
		<reference ref_id="CVE-2020-8649" ref_url="https://www.suse.com/security/cve/CVE-2020-8649/" source="CVE"/>
		<reference ref_id="CVE-2020-9383" ref_url="https://www.suse.com/security/cve/CVE-2020-9383/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006656.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-8647: Fixed a use-after-free in the vc_do_resize function in drivers/tty/vt/vt.c (bsc#1162929).
- CVE-2020-8649: Fixed a use-after-free in the vgacon_invert_region function in drivers/video/console/vgacon.c (bsc#1162931).
- CVE-2020-8648: Fixed a use-after-free in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bsc#1162928).
- CVE-2020-9383: Fixed an out-of-bounds read due to improper error condition check of FDC index (bsc#1165111).
- CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).

The following non-security bugs were fixed:

- ALSA: hda/realtek - Add Headset Button supported for ThinkPad X1 (bsc#1111666).
- ALSA: hda/realtek - Add Headset Mic supported (bsc#1111666).
- ALSA: hda/realtek - Add more codec supported Headset Button (bsc#1111666).
- ALSA: hda/realtek - Apply quirk for MSI GP63, too (bsc#1111666).
- ALSA: hda/realtek - Apply quirk for yet another MSI laptop (bsc#1111666).
- ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294 (bsc#1111666).
- ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1 (bsc#1111666).
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master (bsc#1111666).
- ALSA: usb-audio: Add boot quirk for MOTU M Series (bsc#1111666).
- ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000 (bsc#1111666).
- ALSA: usb-audio: add implicit fb quirk for MOTU M Series (bsc#1111666).
- ALSA: usb-audio: add quirks for Line6 Helix devices fw&gt;=2.82 (bsc#1111666).
- ALSA: usb-audio: Apply 48kHz fixed rate playback for Jabra Evolve 65 headset (bsc#1111666).
- ALSA: usb-audio: fix Corsair Virtuoso mixer label collision (bsc#1111666).
- ALSA: usb-audio: Fix UAC2/3 effect unit parsing (bsc#1111666).
- ALSA: usb-audio: unlock on error in probe (bsc#1111666).
- ALSA: usb-audio: Use lower hex numbers for IDs (bsc#1111666).
- ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status (bsc#1051510).
- amdgpu/gmc_v9: save/restore sdpif regs during S3 (bsc#1113956)
- ASoC: dapm: Correct DAPM handling of active widgets during shutdown (bsc#1051510).
- ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path (bsc#1051510).
- ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output (bsc#1051510).
- ASoC: pcm: update FE/BE trigger order based on the command (bsc#1051510).
- ASoC: topology: Fix memleak in soc_tplg_link_elems_load() (bsc#1051510).
- atm: zatm: Fix empty body Clang warnings (bsc#1051510).
- b43legacy: Fix -Wcast-function-type (bsc#1051510).
- blk: Fix kabi due to blk_trace_mutex addition (bsc#1159285).
- blktrace: fix dereference after null check (bsc#1159285).
- blktrace: fix trace mutex deadlock (bsc#1159285).
- bnxt_en: Fix NTUPLE firmware command failures (bsc#1104745 ).
- bnxt_en: Fix TC queue mapping (networking-stable-20_02_05).
- bnxt_en: Improve device shutdown method (bsc#1104745 ).
- bnxt_en: Issue PCIe FLR in kdump kernel to cleanup pending DMAs (bsc#1134090 jsc#SLE-5954).
- bonding/alb: properly access headers in bond_alb_xmit() (networking-stable-20_02_09).
- bpf, offload: Replace bitwise AND by logical AND in bpf_prog_offload_info_fill (bsc#1109837).
- CIFS: add a debug macro that prints \\server\share for errors (bsc#1144333).
- CIFS: add missing mount option to /proc/mounts (bsc#1144333).
- CIFS: add new debugging macro cifs_server_dbg (bsc#1144333).
- CIFS: add passthrough for smb2 setinfo (bsc#1144333).
- CIFS: add SMB2_open() arg to return POSIX data (bsc#1144333).
- CIFS: add smb2 POSIX info level (bsc#1144333).
- CIFS: add SMB3 change notification support (bsc#1144333).
- CIFS: add support for fallocate mode 0 for non-sparse files (bsc#1144333).
- CIFS: Add support for setting owner info, dos attributes, and create time (bsc#1144333).
- CIFS: Add tracepoints for errors on flush or fsync (bsc#1144333).
- CIFS: Adjust indentation in smb2_open_file (bsc#1144333).
- CIFS: allow chmod to set mode bits using special sid (bsc#1144333).
- CIFS: Avoid doing network I/O while holding cache lock (bsc#1144333).
- CIFS: call wake_up(server-&gt;response_q) inside of cifs_reconnect() (bsc#1144333).
- CIFS: Clean up DFS referral cache (bsc#1144333).
- CIFS: create a helper function to parse the query-directory response buffer (bsc#1144333).
- CIFS: do d_move in rename (bsc#1144333).
- CIFS: Do not display RDMA transport on reconnect (bsc#1144333).
- CIFS: do not ignore the SYNC flags in getattr (bsc#1144333).
- CIFS: do not leak -EAGAIN for stat() during reconnect (bsc#1144333).
- CIFS: do not use 'pre:' for MODULE_SOFTDEP (bsc#1144333).
- CIFS: enable change notification for SMB2.1 dialect (bsc#1144333).
- CIFS: fail i/o on soft mounts if sessionsetup errors out (bsc#1144333).
- CIFS: fix a comment for the timeouts when sending echos (bsc#1144333).
- CIFS: fix a white space issue in cifs_get_inode_info() (bsc#1144333).
- CIFS: fix dereference on ses before it is null checked (bsc#1144333).
- CIFS: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333).
- CIFS: fix mode bits from dir listing when mounted with modefromsid (bsc#1144333).
- CIFS: Fix mode output in debugging statements (bsc#1144333).
- CIFS: Fix mount options set in automount (bsc#1144333).
- CIFS: fix NULL dereference in match_prepath (bsc#1144333).
- CIFS: Fix potential deadlock when updating vol in cifs_reconnect() (bsc#1144333).
- CIFS: fix potential mismatch of UNC paths (bsc#1144333).
- CIFS: fix rename() by ensuring source handle opened with DELETE bit (bsc#1144333).
- CIFS: Fix return value in __update_cache_entry (bsc#1144333).
- CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333).
- CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333).
- CIFS: Fix task struct use-after-free on reconnect (bsc#1144333).
- CIFS: fix unitialized variable poential problem with network I/O cache lock patch (bsc#1144333).
- CIFS: get mode bits from special sid on stat (bsc#1144333).
- CIFS: Get rid of kstrdup_const()'d paths (bsc#1144333).
- CIFS: handle prefix paths in reconnect (bsc#1144333).
- CIFS: Introduce helpers for finding TCP connection (bsc#1144333).
- CIFS: log warning message (once) if out of disk space (bsc#1144333).
- CIFS: make sure we do not overflow the max EA buffer size (bsc#1144333).
- CIFS: make use of cap_unix(ses) in cifs_reconnect_tcon() (bsc#1144333).
- CIFS: Merge is_path_valid() into get_normalized_path() (bsc#1144333).
- CIFS: modefromsid: make room for 4 ACE (bsc#1144333).
- CIFS: modefromsid: write mode ACE first (bsc#1144333).
- CIFS: Optimize readdir on reparse points (bsc#1144333).
- CIFS: plumb smb2 POSIX dir enumeration (bsc#1144333).
- CIFS: potential unintitliazed error code in cifs_getattr() (bsc#1144333).
- CIFS: prepare SMB2_query_directory to be used with compounding (bsc#1144333).
- CIFS: print warning once if mounting with vers=1.0 (bsc#1144333).
- CIFS: refactor cifs_get_inode_info() (bsc#1144333).
- CIFS: remove redundant assignment to pointer pneg_ctxt (bsc#1144333).
- CIFS: remove redundant assignment to variable rc (bsc#1144333).
- CIFS: remove set but not used variables (bsc#1144333).
- CIFS: remove set but not used variable 'server' (bsc#1144333).
- CIFS: remove unused variable (bsc#1144333).
- CIFS: remove unused variable 'sid_user' (bsc#1144333).
- CIFS: rename a variable in SendReceive() (bsc#1144333).
- CIFS: rename posix create rsp (bsc#1144333).
- CIFS: replace various strncpy with strscpy and similar (bsc#1144333).
- CIFS: Return directly after a failed build_path_from_dentry() in cifs_do_create() (bsc#1144333).
- CIFS: set correct max-buffer-size for smb2_ioctl_init() (bsc#1144333).
- CIFS: smbd: Add messages on RDMA session destroy and reconnection (bsc#1144333).
- CIFS: smbd: Invalidate and deregister memory registration on re-send for direct I/O (bsc#1144333).
- CIFS: smbd: Only queue work for error recovery on memory registration (bsc#1144333).
- CIFS: smbd: Return -EAGAIN when transport is reconnecting (bsc#1144333).
- CIFS: smbd: Return -ECONNABORTED when trasnport is not in connected state (bsc#1144333).
- CIFS: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE (bsc#1144333).
- CIFS: Use common error handling code in smb2_ioctl_query_info() (bsc#1144333).
- CIFS: use compounding for open and first query-dir for readdir() (bsc#1144333).
- CIFS: Use #define in cifs_dbg (bsc#1144333).
- CIFS: Use memdup_user() rather than duplicating its implementation (bsc#1144333).
- CIFS: use mod_delayed_work() for server-&gt;reconnect if already queued (bsc#1144333).
- CIFS: use PTR_ERR_OR_ZERO() to simplify code (bsc#1144333).
- cls_rsvp: fix rsvp_policy (networking-stable-20_02_05).
- core: Do not skip generic XDP program execution for cloned SKBs (bsc#1109837).
- cpufreq: powernv: Fix unsafe notifiers (bsc#1065729).
- cpufreq: powernv: Fix use-after-free (bsc#1065729).
- crypto: pcrypt - Fix user-after-free on module unload (git-fixes).
- devlink: report 0 after hitting end in region read (bsc#1109837).
- dmaengine: coh901318: Fix a double lock bug in dma_tc_handle() (bsc#1051510).
- driver core: platform: fix u32 greater or equal to zero comparison (bsc#1051510).
- driver core: platform: Prevent resouce overflow from causing infinite loops (bsc#1051510).
- driver core: Print device when resources present in really_probe() (bsc#1051510).
- drivers/md/raid5.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).
- drivers/md/raid5-ppl.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).
- drm/amd/dm/mst: Ignore payload update failures (bsc#1112178)
- drm/amdkfd: fix a use after free race with mmu_notifer unregister (bsc#1114279)
- drm: atmel-hlcdc: enable clock before configuring timing engine (bsc#1114279)
- drm/etnaviv: fix dumping of iommuv2 (bsc#1114279)
- drm/gma500: Fixup fbdev stolen size usage evaluation (bsc#1051510).
- drm/i915/gvt: Fix orphan vgpu dmabuf_objs' lifetime (git-fixes).
- drm/i915/gvt: Fix unnecessary schedule timer when no vGPU exits (git-fixes).
- drm/i915/gvt: Separate display reset from ALL_ENGINES reset (bsc#1114279)
- drm/i915: Program MBUS with rmw during initialization (git-fixes).
- drm/i915/selftests: Fix return in assert_mmap_offset() (bsc#1114279) 
- drm/i915/userptr: fix size calculation (bsc#1114279)
- drm/i915/userptr: Try to acquire the page lock around (bsc#1114279)
- drm/i915: Wean off drm_pci_alloc/drm_pci_free (bsc#1114279)
- drm/mediatek: Add gamma property according to hardware capability (bsc#1114279)
- drm/mediatek: disable all the planes in atomic_disable (bsc#1114279)
- drm/mediatek: handle events when enabling/disabling crtc (bsc#1051510).
- drm/mipi_dbi: Fix off-by-one bugs in mipi_dbi_blank() (bsc#1114279)
- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable (bsc#1114279)
- drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (bsc#1051510).
- drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from fw (bsc#1051510).
- drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (git-fixes).
- drm: rcar-du: Recognize 'renesas,vsps' in addition to 'vsps' (bsc#1114279)
- drm: remove the newline for CRC source name (bsc#1051510).
- EDAC/mc: Fix use-after-free and memleaks during device removal (bsc#1114279).
- Enabled the following two patches in series.conf, and refresh the KABI patch due to previous md commit (bsc#1119680)
- ethtool: Factored out similar ethtool link settings for virtual devices to core (bsc#1136157 ltc#177197).
- fcntl: fix typo in RWH_WRITE_LIFE_NOT_SET r/w hint name (bsc#1166003).
- firmware: imx: misc: Align imx sc msg structs to 4 (git-fixes).
- firmware: imx: scu: Ensure sequential TX (git-fixes).
- firmware: imx: scu-pd: Align imx sc msg structs to 4 (git-fixes).
- Fixed memory leak in large read decrypt offload (bsc#1144333).
- Fixed some regressions (bsc#1165527 ltc#184149).
- fs/cifs/cifssmb.c: use true,false for bool variable (bsc#1144333).
- fs: cifs: cifsssmb: remove redundant assignment to variable ret (bsc#1144333).
- fs: cifs: Initialize filesystem timestamp ranges (bsc#1144333).
- fs: cifs: mute -Wunused-const-variable message (bsc#1144333).
- fs/cifs/sess.c: Remove set but not used variable 'capabilities' (bsc#1144333).
- fs/cifs/smb2ops.c: use true,false for bool variable (bsc#1144333).
- fs/cifs/smb2pdu.c: Make SMB2_notify_init static (bsc#1144333).
- fs/xfs: fix f_ffree value for statfs when project quota is set (bsc#1165985).
- gtp: make sure only SOCK_DGRAM UDP sockets are accepted (networking-stable-20_01_27).
- gtp: use __GFP_NOWARN to avoid memalloc warning (networking-stable-20_02_05).
- HID: core: fix off-by-one memset in hid_report_raw_event() (bsc#1051510).
- HID: hiddev: Fix race in in hiddev_disconnect() (git-fixes).
- hv_netvsc: Fix memory leak when removing rndis device (networking-stable-20_01_20).
- hwmon: (adt7462) Fix an error return in ADT7462_REG_VOLT() (bsc#1051510).
- IB/hfi1: Close window for pq and request coliding (bsc#1060463 ).
- ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551).
- ibmvnic: Do not process device remove during device reset (bsc#1065729).
- ibmvnic: Warn unknown speed message only when carrier is present (bsc#1065729).
- Input: edt-ft5x06 - work around first register access error (bsc#1051510).
- Input: synaptics - enable SMBus on ThinkPad L470 (bsc#1051510).
- Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list (bsc#1051510).
- Input: synaptics - switch T470s to RMI4 by default (bsc#1051510).
- iommu/amd: Check feature support bit before accessing MSI capability registers (bsc#1166101).
- iommu/amd: Only support x2APIC with IVHD type 11h/40h (bsc#1166102).
- iommu/amd: Remap the IOMMU device table with the memory encryption mask for kdump (bsc#1141895).
- iommu/dma: Fix MSI reservation allocation (bsc#1166730).
- iommu/vt-d: dmar: replace WARN_TAINT with pr_warn + add_taint (bsc#1166731).
- iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys() for huge page (bsc#1166732).
- iommu/vt-d: Fix compile warning from intel-svm.h (bsc#1166103).
- iommu/vt-d: Fix the wrong printing in RHSA parsing (bsc#1166733).
- iommu/vt-d: Ignore devices with out-of-spec domain number (bsc#1166734).
- iommu/vt-d: quirk_ioat_snb_local_iommu: replace WARN_TAINT with pr_warn + add_taint (bsc#1166735).
- ipv4: ensure rcu_read_lock() in cipso_v4_error() (git-fixes).
- ipv6: restrict IPV6_ADDRFORM operation (bsc#1109837).
- iwlegacy: Fix -Wcast-function-type (bsc#1051510).
- iwlwifi: mvm: Do not require PHY_SKU NVM section for 3168 devices (bsc#1166632).
- iwlwifi: mvm: Fix thermal zone registration (bsc#1051510).
- kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (bsc#1141895).
- kernel/module.c: Only return -EEXIST for modules that have finished loading (bsc#1165488).
- kernel/module.c: wakeup processes in module_wq on module unload (bsc#1165488).
- kexec: Allocate decrypted control pages for kdump if SME is enabled (bsc#1141895).
- KVM: arm64: Store vcpu on the stack during __guest_enter() (bsc#1133021).
- KVM: s390: do not clobber registers during guest reset/store status (bsc#1133021).
- KVM: s390: ENOTSUPP -&gt; EOPNOTSUPP fixups (bsc#1133021).
- KVM: VMX: check descriptor table exits on instruction emulation (bsc#1166104).
- l2tp: Allow duplicate session creation with UDP (networking-stable-20_02_05).
- libnvdimm/pfn_dev: Do not clear device memmap area during generic namespace probe (bsc#1165929 bsc#1165950).
- libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields (bsc#1165929).
- libnvdimm: remove redundant __func__ in dev_dbg (bsc#1165929).
- lib/raid6: add missing include for raid6test (bsc#1166003).
- lib/raid6: add option to skip algo benchmarking (bsc#1166003).
- lib/raid6: avoid __attribute_const__ redefinition (bsc#1166003).
- md: add __acquires/__releases annotations to handle_active_stripes (bsc#1166003).
- md: add __acquires/__releases annotations to (un)lock_two_stripes (bsc#1166003).
- md: add a missing endianness conversion in check_sb_changes (bsc#1166003).
- md: add bitmap_abort label in md_run (bsc#1166003).
- md: add feature flag MD_FEATURE_RAID0_LAYOUT (bsc#1166003).
- md: allow last device to be forcibly removed from RAID1/RAID10 (bsc#1166003).
- md: avoid invalid memory access for array sb-&gt;dev_roles (bsc#1166003).
- md/bitmap: avoid race window between md_bitmap_resize and bitmap_file_clear_bit (bsc#1166003).
- md-bitmap: create and destroy wb_info_pool with the change of backlog (bsc#1166003).
- md-bitmap: create and destroy wb_info_pool with the change of bitmap (bsc#1166003).
- md-bitmap: small cleanups (bsc#1166003).
- md/bitmap: use mddev_suspend/resume instead of -&gt;quiesce() (bsc#1166003).
- md-cluster/bitmap: do not call md_bitmap_sync_with_cluster during reshaping stage (bsc#1166003).
- md-cluster: introduce resync_info_get interface for sanity check (bsc#1166003).
- md-cluster/raid10: call update_size in md_reap_sync_thread (bsc#1166003).
- md-cluster/raid10: do not call remove_and_add_spares during reshaping stage (bsc#1166003).
- md-cluster/raid10: resize all the bitmaps before start reshape (bsc#1166003).
- md-cluster/raid10: support add disk under grow mode (bsc#1166003).
- md-cluster: remove suspend_info (bsc#1166003).
- md-cluster: send BITMAP_NEEDS_SYNC message if reshaping is interrupted (bsc#1166003).
- md: convert to kvmalloc (bsc#1166003).
- md: do not call spare_active in md_reap_sync_thread if all member devices can't work (bsc#1166003).
- md: do not set In_sync if array is frozen (bsc#1166003).
- md: fix a typo s/creat/create (bsc#1166003).
- md: fix for divide error in status_resync (bsc#1166003).
- md: fix spelling typo and add necessary space (bsc#1166003).
- md: introduce mddev_create/destroy_wb_pool for the change of member device (bsc#1166003).
- md-linear: use struct_size() in kzalloc() (bsc#1166003).
- md: Make bio_alloc_mddev use bio_alloc_bioset (bsc#1166003).
- md: make sure desc_nr less than MD_SB_DISKS (bsc#1166003).
- md: md.c: Return -ENODEV when mddev is NULL in rdev_attr_show (bsc#1166003).
- md: no longer compare spare disk superblock events in super_load (bsc#1166003).
- md/raid0: Fix an error message in raid0_make_request() (bsc#1166003).
- md raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone (bsc#1166003).
- md/raid10: end bio when the device faulty (bsc#1166003).
- md/raid10: Fix raid10 replace hang when new added disk faulty (bsc#1166003).
- md/raid10: prevent access of uninitialized resync_pages offset (bsc#1166003).
- md/raid10: read balance chooses idlest disk for SSD (bsc#1166003).
- md: raid10: Use struct_size() in kmalloc() (bsc#1166003).
- md/raid1: avoid soft lockup under high load (bsc#1166003).
- md: raid1: check rdev before reference in raid1_sync_request func (bsc#1166003).
- md/raid1: end bio when the device faulty (bsc#1166003).
- md/raid1: fail run raid1 array when active disk less than one (bsc#1166003).
- md/raid1: Fix a warning message in remove_wb() (bsc#1166003).
- md/raid1: fix potential data inconsistency issue with write behind device (bsc#1166003).
- md/raid1: get rid of extra blank line and space (bsc#1166003).
- md/raid5: use bio_end_sector to calculate last_sector (bsc#1166003).
- md/raid6: fix algorithm choice under larger PAGE_SIZE (bsc#1166003).
- md: remove set but not used variable 'bi_rdev' (bsc#1166003).
- md: rename wb stuffs (bsc#1166003).
- md: return -ENODEV if rdev has no mddev assigned (bsc#1166003).
- md: use correct type in super_1_load (bsc#1166003).
- md: use correct type in super_1_sync (bsc#1166003).
- md: use correct types in md_bitmap_print_sb (bsc#1166003).
- media: uvcvideo: Refactor teardown of uvc on USB disconnect (bsc#1164507).
- mlxsw: spectrum_qdisc: Include MC TCs in Qdisc counters (bsc#1112374).
- mlxsw: spectrum: Wipe xstats.backlog of down ports (bsc#1112374).
- net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM (networking-stable-20_01_27).
- net: dsa: mv88e6xxx: Preserve priority when setting CPU port (networking-stable-20_01_11).
- net: dsa: tag_qca: fix doubled Tx statistics (networking-stable-20_01_20).
- net/ethtool: Introduce link_ksettings API for virtual network devices (bsc#1136157 ltc#177197).
- net: Fix Tx hash bound checking (bsc#1109837).
- net: hns3: fix a copying IPv6 address error in hclge_fd_get_flow_tuples() (bsc#1104353).
- net: hns: fix soft lockup when there is not enough memory (networking-stable-20_01_20).
- net: hsr: fix possible NULL deref in hsr_handle_frame() (networking-stable-20_02_05).
- net: ip6_gre: fix moving ip6gre between namespaces (networking-stable-20_01_27).
- net, ip6_tunnel: fix namespaces move (networking-stable-20_01_27).
- net, ip_tunnel: fix namespaces move (networking-stable-20_01_27).
- net: macb: Limit maximum GEM TX length in TSO (networking-stable-20_02_09).
- net: macb: Remove unnecessary alignment check for TSO (networking-stable-20_02_09).
- net/mlx5: Fix lowest FDB pool size (bsc#1103990).
- net/mlx5: IPsec, Fix esp modify function attribute (bsc#1103990 ).
- net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx (bsc#1103990).
- net/mlx5: Update the list of the PCI supported devices (bsc#1127611).
- net/mlxfw: Verify FSM error code translation does not exceed array size (bsc#1051858).
- net: mvneta: move rx_dropped and rx_errors in per-cpu stats (networking-stable-20_02_09).
- net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link() (networking-stable-20_01_27).
- net_sched: ematch: reject invalid TCF_EM_SIMPLE (networking-stable-20_01_30).
- net_sched: fix an OOB access in cls_tcindex (networking-stable-20_02_05).
- net_sched: fix a resource leak in tcindex_set_parms() (networking-stable-20_02_09).
- net_sched: fix datalen for ematch (networking-stable-20_01_27).
- net: sch_prio: When ungrafting, replace with FIFO (networking-stable-20_01_11).
- net/smc: add fallback check to connect() (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- net: stmmac: dwmac-sunxi: Allow all RGMII modes (networking-stable-20_01_11).
- net-sysfs: Fix reference count leak (networking-stable-20_01_27).
- net: systemport: Avoid RBUF stuck in Wake-on-LAN mode (networking-stable-20_02_09).
- net/tls: fix async operation (bsc#1109837).
- net/tls: free the record on encryption error (bsc#1109837).
- net/tls: take into account that bpf_exec_tx_verdict() may free the record (bsc#1109837).
- net: usb: lan78xx: Add .ndo_features_check (networking-stable-20_01_27).
- net: usb: lan78xx: fix possible skb leak (networking-stable-20_01_11).
- net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info (networking-stable-20_01_20).
- NFC: pn544: Fix a typo in a debug message (bsc#1051510).
- NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu() (bsc#1051510).
- nvme: Fix parsing of ANA log page (bsc#1166658).
- nvme: resync include/linux/nvme.h with nvmecli (bsc#1156510).
- nvme: Translate more status codes to blk_status_t (bsc#1156510).
- orinoco: avoid assertion in case of NULL pointer (bsc#1051510).
- padata: always acquire cpu_hotplug_lock before pinst-&gt;lock (git-fixes).
- PCI/AER: Clear device status bits during ERR_COR handling (bsc#1161561).
- PCI/AER: Clear device status bits during ERR_FATAL and ERR_NONFATAL (bsc#1161561).
- PCI/AER: Clear only ERR_FATAL status bits during fatal recovery (bsc#1161561).
- PCI/AER: Clear only ERR_NONFATAL bits during non-fatal recovery (bsc#1161561).
- PCI/AER: Do not clear AER bits if error handling is Firmware-First (bsc#1161561).
- PCI/AER: Do not read upstream ports below fatal errors (bsc#1161561).
- PCI/AER: Factor out ERR_NONFATAL status bit clearing (bsc#1161561).
- PCI/AER: Take reference on error devices (bsc#1161561).
- PCI/ERR: Run error recovery callbacks for all affected devices (bsc#1161561).
- PCI/ERR: Use slot reset if available (bsc#1161561).
- pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled pins (bsc#1051510).
- pinctrl: imx: scu: Align imx sc msg structs to 4 (git-fixes).
- pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs (bsc#1051510).
- pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs (bsc#1051510).
- pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM (networking-stable-20_01_11).
- platform/mellanox: fix potential deadlock in the tmfifo driver (bsc#1136333 jsc#SLE-4994).
- powerpc: fix hardware PMU exception bug on PowerVM compatibility mode systems (bsc#1056686).
- powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (bsc#1160659).
- powerpc/pseries: fix of_read_drc_info_cell() to point at next record (bsc#1165980 ltc#183834).
- powerpc/pseries: group lmb operation and memblock's (bsc#1165404 ltc#183498).
- powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (bsc#1165404 ltc#183498).
- powerpc/pseries: update device tree before ejecting hotplug uevents (bsc#1165404 ltc#183498).
- powerpc/smp: Use nid as fallback for package_id (bsc#1165813 ltc#184091).
- ptr_ring: add include of linux/mm.h (bsc#1109837).
- qmi_wwan: re-add DW5821e pre-production variant (bsc#1051510).
- raid10: refactor common wait code from regular read/write request (bsc#1166003).
- raid1: factor out a common routine to handle the completion of sync write (bsc#1166003).
- raid1: simplify raid1_error function (bsc#1166003).
- raid1: use an int as the return value of raise_barrier() (bsc#1166003).
- raid5: block failing device if raid will be failed (bsc#1166003).
- raid5: do not increment read_errors on EILSEQ return (bsc#1166003).
- raid5: do not set STRIPE_HANDLE to stripe which is in batch list (bsc#1166003).
- raid5 improve too many read errors msg by adding limits (bsc#1166003).
- raid5: need to set STRIPE_HANDLE for batch head (bsc#1166003).
- raid5: remove STRIPE_OPS_REQ_PENDING (bsc#1166003).
- raid5: remove worker_cnt_per_group argument from alloc_thread_groups (bsc#1166003). 
- raid5: set write hint for PPL (bsc#1166003).
- raid5: use bio_end_sector in r5_next_bio (bsc#1166003).
- raid6/test: fix a compilation error (bsc#1166003).
- raid6/test: fix a compilation warning (bsc#1166003).
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (bsc#1103992).
- RDMA/hfi1: Fix memory leak in _dev_comp_vect_mappings_create (bsc#1114685).
- RDMA/uverbs: Verify MR access flags (bsc#1103992).
- remoteproc: Initialize rproc_class before use (bsc#1051510).
- Revert 'HID: add NOGET quirk for Eaton Ellipse MAX UPS' (git-fixes).
- rtlwifi: rtl_pci: Fix -Wcast-function-type (bsc#1051510).
- rxrpc: Fix insufficient receive notification generation (networking-stable-20_02_05).
- s390/pci: Fix unexpected write combine on resource (git-fixes).
- s390/uv: Fix handling of length extensions (git-fixes).
- scsi: fnic: do not queue commands during fwreset (bsc#1146539).
- scsi: ibmvfc: Add failed PRLI to cmd_status lookup array (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Byte swap status and error codes when logging (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Clean up transport events (bsc#1161951 ltc#183551).
- scsi: ibmvfc: constify dev_pm_ops structures (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Do not call fc_block_scsi_eh() on host reset (bsc#1161951 ltc#183551).
- scsi: ibmvfc: ibmvscsi: ibmvscsi_tgt: constify vio_device_id (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Mark expected switch fall-throughs (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Remove 'failed' from logged errors (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Remove unneeded semicolons (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: change strncpy+truncation to strlcpy (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: constify dev_pm_ops structures (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Do not use rc uninitialized in ibmvscsi_do_work (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: fix tripping of blk_mq_run_hw_queue WARN_ON (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Improve strings handling (bsc#1161951 ltc#183551). 
- scsi: ibmvscsi: redo driver work thread to use enum action states (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Wire up host_reset() in the driver's scsi_host_template (bsc#1161951 ltc#183551).
- scsi: qla2xxx: Add 16.0GT for PCI String (bsc#1157424).
- scsi: qla2xxx: Add beacon LED config sysfs interface (bsc#1157424).
- scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (bsc#1157424).
- scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (bsc#1157424).
- scsi: qla2xxx: Add endianizer macro calls to fc host stats (bsc#1157424).
- scsi: qla2xxx: Add fixes for mailbox command (bsc#1157424).
- scsi: qla2xxx: add more FW debug information (bsc#1157424).
- scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (bsc#1157424).
- scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (bsc#1157424).
- scsi: qla2xxx: Add vendor extended FDMI commands (bsc#1157424).
- scsi: qla2xxx: Add vendor extended RDP additions and amendments (bsc#1157424).
- scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options (bsc#1157424).
- scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb() (bsc#1157424).
- scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (bsc#1157424).
- scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function (bsc#1157424).
- scsi: qla2xxx: Correction to selection of loopback/echo test (bsc#1157424).
- scsi: qla2xxx: Display message for FCE enabled (bsc#1157424).
- scsi: qla2xxx: Fix control flags for login/logout IOCB (bsc#1157424).
- scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (bsc#1157424).
- scsi: qla2xxx: fix FW resource count values (bsc#1157424).
- scsi: qla2xxx: Fix NPIV instantiation after FW dump (bsc#1157424).
- scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (bsc#1157424).
- scsi: qla2xxx: Fix RDP respond data format (bsc#1157424).
- scsi: qla2xxx: Fix RDP response size (bsc#1157424).
- scsi: qla2xxx: Fix sparse warning reported by kbuild bot (bsc#1157424).
- scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code (bsc#1157424).
- scsi: qla2xxx: Force semaphore on flash validation failure (bsc#1157424).
- scsi: qla2xxx: Handle cases for limiting RDP response payload length (bsc#1157424).
- scsi: qla2xxx: Handle NVME status iocb correctly (bsc#1157424).
- scsi: qla2xxx: Improved secure flash support messages (bsc#1157424).
- scsi: qla2xxx: Move free of fcport out of interrupt context (bsc#1157424).
- scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (bsc#1157424).
- scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (bsc#1157424).
- scsi: qla2xxx: Return appropriate failure through BSG Interface (bsc#1157424).
- scsi: qla2xxx: Save rscn_gen for new fcport (bsc#1157424).
- scsi: qla2xxx: Serialize fc_port alloc in N2N (bsc#1157424).
- scsi: qla2xxx: Set Nport ID for N2N (bsc#1157424).
- scsi: qla2xxx: Show correct port speed capabilities for RDP command (bsc#1157424).
- scsi: qla2xxx: Simplify the code for aborting SCSI commands (bsc#1157424).
- scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop() (bsc#1157424).
- scsi: qla2xxx: Update BPM enablement semantics (bsc#1157424).
- scsi: qla2xxx: Update driver version to 10.01.00.24-k (bsc#1157424).
- scsi: qla2xxx: Update driver version to 10.01.00.25-k (bsc#1157424).
- scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required' ISPs (bsc#1157424).
- scsi: qla2xxx: Use correct ISP28xx active FW region (bsc#1157424).
- scsi: qla2xxx: Use endian macros to assign static fields in fwdump header (bsc#1157424).
- scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx (bsc#1157424).
- scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (bsc#1157424).
- scsi: tcm_qla2xxx: Make qlt_alloc_qfull_cmd() set cmd-&gt;se_cmd.map_tag (bsc#1157424).
- sctp: free cmd-&gt;obj.chunk for the unprocessed SCTP_CMD_REPLY (networking-stable-20_01_11).
- smb3: add debug messages for closing unmatched open (bsc#1144333).
- smb3: Add defines for new information level, FileIdInformation (bsc#1144333).
- smb3: add dynamic tracepoints for flush and close (bsc#1144333).
- smb3: add missing flag definitions (bsc#1144333).
- smb3: Add missing reparse tags (bsc#1144333).
- smb3: add missing worker function for SMB3 change notify (bsc#1144333).
- smb3: add mount option to allow forced caching of read only share (bsc#1144333).
- smb3: add mount option to allow RW caching of share accessed by only 1 client (bsc#1144333).
- smb3: add one more dynamic tracepoint missing from strict fsync path (bsc#1144333).
- smb3: add some more descriptive messages about share when mounting cache=ro (bsc#1144333).
- smb3: allow decryption keys to be dumped by admin for debugging (bsc#1144333).
- smb3: allow disabling requesting leases (bsc#1144333).
- smb3: allow parallelizing decryption of reads (bsc#1144333).
- smb3: allow skipping signature verification for perf sensitive configurations (bsc#1144333).
- smb3: Backup intent flag missing from some more ops (bsc#1144333).
- smb3: cleanup some recent endian errors spotted by updated sparse (bsc#1144333).
- smb3: display max smb3 requests in flight at any one time (bsc#1144333).
- smb3: dump in_send and num_waiters stats counters by default (bsc#1144333).
- smb3: enable offload of decryption of large reads via mount option (bsc#1144333).
- smb3: fix default permissions on new files when mounting with modefromsid (bsc#1144333).
- smb3: fix mode passed in on create for modetosid mount option (bsc#1144333).
- smb3: fix performance regression with setting mtime (bsc#1144333).
- smb3: fix potential null dereference in decrypt offload (bsc#1144333).
- smb3: fix problem with null cifs super block with previous patch (bsc#1144333).
- smb3: Fix regression in time handling (bsc#1144333).
- smb3: improve check for when we send the security descriptor context on create (bsc#1144333).
- smb3: log warning if CSC policy conflicts with cache mount option (bsc#1144333).
- smb3: missing ACL related flags (bsc#1144333).
- smb3: only offload decryption of read responses if multiple requests (bsc#1144333).
- smb3: pass mode bits into create calls (bsc#1144333).
- smb3: print warning once if posix context returned on open  (bsc#1144333).
- smb3: query attributes on file close (bsc#1144333).
- smb3: remove noisy debug message and minor cleanup (bsc#1144333).
- smb3: remove unused flag passed into close functions (bsc#1144333).
- staging: rtl8188eu: Fix potential overuse of kernel memory (bsc#1051510).
- staging: rtl8188eu: Fix potential security hole (bsc#1051510).
- staging: rtl8723bs: Fix potential overuse of kernel memory (bsc#1051510).
- staging: rtl8723bs: Fix potential security hole (bsc#1051510).
- SUNRPC: Fix svcauth_gss_proxy_init() (bsc#1103992).
- tcp_bbr: improve arithmetic division in bbr_update_bw() (networking-stable-20_01_27).
- tcp: clear tp-&gt;data_segs{in|out} in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;delivered in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;segs_{in|out} in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;total_retrans in tcp_disconnect() (networking-stable-20_02_05).
- tcp: fix marked lost packets not being retransmitted (networking-stable-20_01_20).
- tcp: fix 'old stuff' D-SACK causing SACK to be treated as D-SACK (networking-stable-20_01_11).
- thunderbolt: Prevent crash if non-active NVMem file is read (git-fixes).
- tick: broadcast-hrtimer: Fix a race in bc_set_next (bsc#1044231).
- tools lib traceevent: Do not free tep-&gt;cmdlines in add_new_comm() on failure (git-fixes).
- tools: Update include/uapi/linux/fcntl.h copy from the kernel (bsc#1166003).
- ttyprintk: fix a potential deadlock in interrupt context issue (git-fixes).
- tun: add mutex_unlock() call and napi.skb clearing in tun_get_user() (bsc#1109837).
- Updated block layer, timers and md code for SLE15-SP1 kernel (bsc#1111974).
- Updated 'drm/i915: Wean off drm_pci_alloc/drm_pci_free' (bsc#1114279) 
- USB: core: add endpoint-blacklist quirk (git-fixes).
- USBip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() (git-fixes).
- USB: quirks: blacklist duplicate ep on Sound Devices USBPre2 (git-fixes).
- uvcvideo: Refactor teardown of uvc on USB disconnect (https://patchwork.kernel.org/patch/9683663/) (bsc#1164507)
- vgacon: Fix a UAF in vgacon_invert_region (bsc#1114279)
- virtio-blk: fix hw_queue stopped on arbitrary error (git-fixes).
- vlan: fix memory leak in vlan_dev_set_egress_priority (networking-stable-20_01_11).
- vlan: vlan_changelink() should propagate errors (networking-stable-20_01_11).
- vxlan: fix tos value before xmit (networking-stable-20_01_11).
- x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF (bsc#1114279).
- x86/ioremap: Add an ioremap_encrypted() helper (bsc#1141895).
- x86/kdump: Export the SME mask to vmcoreinfo (bsc#1141895).
- x86/mce/amd: Fix kobject lifetime (bsc#1114279).
- x86/mce/amd: Publish the bank pointer only after setup has succeeded (bsc#1114279).
- x86/mm: Split vmalloc_sync_all() (bsc#1165741).
- xfs: also remove cached ACLs when removing the underlying attr (bsc#1165873).
- xfs: bulkstat should copy lastip whenever userspace supplies one (bsc#1165984).
- xhci: fix runtime pm enabling for quirky Intel hosts (bsc#1051510).
- xhci: Force Maximum Packet size for Full-speed bulk devices to valid range (bsc#1051510).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-31"/>
	<updated date="2020-03-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1044231">SUSE bug 1044231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051858">SUSE bug 1051858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056686">SUSE bug 1056686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060463">SUSE bug 1060463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111974">SUSE bug 1111974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119680">SUSE bug 1119680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136157">SUSE bug 1136157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141895">SUSE bug 1141895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146539">SUSE bug 1146539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156510">SUSE bug 1156510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158187">SUSE bug 1158187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159285">SUSE bug 1159285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160659">SUSE bug 1160659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161561">SUSE bug 1161561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161951">SUSE bug 1161951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162928">SUSE bug 1162928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162929">SUSE bug 1162929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162931">SUSE bug 1162931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164078">SUSE bug 1164078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164507">SUSE bug 1164507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165111">SUSE bug 1165111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165404">SUSE bug 1165404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165488">SUSE bug 1165488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165527">SUSE bug 1165527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165741">SUSE bug 1165741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165813">SUSE bug 1165813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165873">SUSE bug 1165873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165929">SUSE bug 1165929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165950">SUSE bug 1165950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165980">SUSE bug 1165980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165984">SUSE bug 1165984</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165985">SUSE bug 1165985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166003">SUSE bug 1166003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166101">SUSE bug 1166101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166102">SUSE bug 1166102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166103">SUSE bug 1166103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166104">SUSE bug 1166104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166632">SUSE bug 1166632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166658">SUSE bug 1166658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166730">SUSE bug 1166730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166731">SUSE bug 1166731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166732">SUSE bug 1166732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166733">SUSE bug 1166733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166734">SUSE bug 1166734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166735">SUSE bug 1166735</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19768/">CVE-2019-19768</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8647/">CVE-2020-8647</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8648/">CVE-2020-8648</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8649/">CVE-2020-8649</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-9383/">CVE-2020-9383</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497107" comment="reiserfs-kmp-default-4.12.14-197.37.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138326" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Legacy 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1040855" ref_url="https://bugzilla.suse.com/1040855" source="BUGZILLA"/>
		<reference ref_id="1044120" ref_url="https://bugzilla.suse.com/1044120" source="BUGZILLA"/>
		<reference ref_id="1044767" ref_url="https://bugzilla.suse.com/1044767" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1056653" ref_url="https://bugzilla.suse.com/1056653" source="BUGZILLA"/>
		<reference ref_id="1056657" ref_url="https://bugzilla.suse.com/1056657" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1094840" ref_url="https://bugzilla.suse.com/1094840" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104389" ref_url="https://bugzilla.suse.com/1104389" source="BUGZILLA"/>
		<reference ref_id="1104393" ref_url="https://bugzilla.suse.com/1104393" source="BUGZILLA"/>
		<reference ref_id="1109695" ref_url="https://bugzilla.suse.com/1109695" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1110096" ref_url="https://bugzilla.suse.com/1110096" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1115431" ref_url="https://bugzilla.suse.com/1115431" source="BUGZILLA"/>
		<reference ref_id="1118657" ref_url="https://bugzilla.suse.com/1118657" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1138374" ref_url="https://bugzilla.suse.com/1138374" source="BUGZILLA"/>
		<reference ref_id="1139944" ref_url="https://bugzilla.suse.com/1139944" source="BUGZILLA"/>
		<reference ref_id="1144912" ref_url="https://bugzilla.suse.com/1144912" source="BUGZILLA"/>
		<reference ref_id="1152457" ref_url="https://bugzilla.suse.com/1152457" source="BUGZILLA"/>
		<reference ref_id="1163727" ref_url="https://bugzilla.suse.com/1163727" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1171078" ref_url="https://bugzilla.suse.com/1171078" source="BUGZILLA"/>
		<reference ref_id="1172145" ref_url="https://bugzilla.suse.com/1172145" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1172694" ref_url="https://bugzilla.suse.com/1172694" source="BUGZILLA"/>
		<reference ref_id="1174784" ref_url="https://bugzilla.suse.com/1174784" source="BUGZILLA"/>
		<reference ref_id="1174852" ref_url="https://bugzilla.suse.com/1174852" source="BUGZILLA"/>
		<reference ref_id="1176558" ref_url="https://bugzilla.suse.com/1176558" source="BUGZILLA"/>
		<reference ref_id="1176559" ref_url="https://bugzilla.suse.com/1176559" source="BUGZILLA"/>
		<reference ref_id="1176956" ref_url="https://bugzilla.suse.com/1176956" source="BUGZILLA"/>
		<reference ref_id="1178270" ref_url="https://bugzilla.suse.com/1178270" source="BUGZILLA"/>
		<reference ref_id="1178372" ref_url="https://bugzilla.suse.com/1178372" source="BUGZILLA"/>
		<reference ref_id="1178401" ref_url="https://bugzilla.suse.com/1178401" source="BUGZILLA"/>
		<reference ref_id="1178590" ref_url="https://bugzilla.suse.com/1178590" source="BUGZILLA"/>
		<reference ref_id="1178634" ref_url="https://bugzilla.suse.com/1178634" source="BUGZILLA"/>
		<reference ref_id="1178762" ref_url="https://bugzilla.suse.com/1178762" source="BUGZILLA"/>
		<reference ref_id="1179014" ref_url="https://bugzilla.suse.com/1179014" source="BUGZILLA"/>
		<reference ref_id="1179015" ref_url="https://bugzilla.suse.com/1179015" source="BUGZILLA"/>
		<reference ref_id="1179045" ref_url="https://bugzilla.suse.com/1179045" source="BUGZILLA"/>
		<reference ref_id="1179082" ref_url="https://bugzilla.suse.com/1179082" source="BUGZILLA"/>
		<reference ref_id="1179107" ref_url="https://bugzilla.suse.com/1179107" source="BUGZILLA"/>
		<reference ref_id="1179142" ref_url="https://bugzilla.suse.com/1179142" source="BUGZILLA"/>
		<reference ref_id="1179204" ref_url="https://bugzilla.suse.com/1179204" source="BUGZILLA"/>
		<reference ref_id="1179419" ref_url="https://bugzilla.suse.com/1179419" source="BUGZILLA"/>
		<reference ref_id="1179444" ref_url="https://bugzilla.suse.com/1179444" source="BUGZILLA"/>
		<reference ref_id="1179520" ref_url="https://bugzilla.suse.com/1179520" source="BUGZILLA"/>
		<reference ref_id="1179578" ref_url="https://bugzilla.suse.com/1179578" source="BUGZILLA"/>
		<reference ref_id="1179601" ref_url="https://bugzilla.suse.com/1179601" source="BUGZILLA"/>
		<reference ref_id="1179663" ref_url="https://bugzilla.suse.com/1179663" source="BUGZILLA"/>
		<reference ref_id="1179666" ref_url="https://bugzilla.suse.com/1179666" source="BUGZILLA"/>
		<reference ref_id="1179670" ref_url="https://bugzilla.suse.com/1179670" source="BUGZILLA"/>
		<reference ref_id="1179671" ref_url="https://bugzilla.suse.com/1179671" source="BUGZILLA"/>
		<reference ref_id="1179672" ref_url="https://bugzilla.suse.com/1179672" source="BUGZILLA"/>
		<reference ref_id="1179673" ref_url="https://bugzilla.suse.com/1179673" source="BUGZILLA"/>
		<reference ref_id="1179711" ref_url="https://bugzilla.suse.com/1179711" source="BUGZILLA"/>
		<reference ref_id="1179713" ref_url="https://bugzilla.suse.com/1179713" source="BUGZILLA"/>
		<reference ref_id="1179714" ref_url="https://bugzilla.suse.com/1179714" source="BUGZILLA"/>
		<reference ref_id="1179715" ref_url="https://bugzilla.suse.com/1179715" source="BUGZILLA"/>
		<reference ref_id="1179716" ref_url="https://bugzilla.suse.com/1179716" source="BUGZILLA"/>
		<reference ref_id="1179722" ref_url="https://bugzilla.suse.com/1179722" source="BUGZILLA"/>
		<reference ref_id="1179723" ref_url="https://bugzilla.suse.com/1179723" source="BUGZILLA"/>
		<reference ref_id="1179724" ref_url="https://bugzilla.suse.com/1179724" source="BUGZILLA"/>
		<reference ref_id="1179745" ref_url="https://bugzilla.suse.com/1179745" source="BUGZILLA"/>
		<reference ref_id="1179810" ref_url="https://bugzilla.suse.com/1179810" source="BUGZILLA"/>
		<reference ref_id="1179888" ref_url="https://bugzilla.suse.com/1179888" source="BUGZILLA"/>
		<reference ref_id="1179895" ref_url="https://bugzilla.suse.com/1179895" source="BUGZILLA"/>
		<reference ref_id="1179896" ref_url="https://bugzilla.suse.com/1179896" source="BUGZILLA"/>
		<reference ref_id="1179960" ref_url="https://bugzilla.suse.com/1179960" source="BUGZILLA"/>
		<reference ref_id="1179963" ref_url="https://bugzilla.suse.com/1179963" source="BUGZILLA"/>
		<reference ref_id="1180027" ref_url="https://bugzilla.suse.com/1180027" source="BUGZILLA"/>
		<reference ref_id="1180029" ref_url="https://bugzilla.suse.com/1180029" source="BUGZILLA"/>
		<reference ref_id="1180031" ref_url="https://bugzilla.suse.com/1180031" source="BUGZILLA"/>
		<reference ref_id="1180052" ref_url="https://bugzilla.suse.com/1180052" source="BUGZILLA"/>
		<reference ref_id="1180086" ref_url="https://bugzilla.suse.com/1180086" source="BUGZILLA"/>
		<reference ref_id="1180117" ref_url="https://bugzilla.suse.com/1180117" source="BUGZILLA"/>
		<reference ref_id="1180258" ref_url="https://bugzilla.suse.com/1180258" source="BUGZILLA"/>
		<reference ref_id="1180506" ref_url="https://bugzilla.suse.com/1180506" source="BUGZILLA"/>
		<reference ref_id="1180559" ref_url="https://bugzilla.suse.com/1180559" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20669" ref_url="https://www.suse.com/security/cve/CVE-2018-20669/" source="CVE"/>
		<reference ref_id="CVE-2019-20934" ref_url="https://www.suse.com/security/cve/CVE-2019-20934/" source="CVE"/>
		<reference ref_id="CVE-2020-0444" ref_url="https://www.suse.com/security/cve/CVE-2020-0444/" source="CVE"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-27068" ref_url="https://www.suse.com/security/cve/CVE-2020-27068/" source="CVE"/>
		<reference ref_id="CVE-2020-27777" ref_url="https://www.suse.com/security/cve/CVE-2020-27777/" source="CVE"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-27825" ref_url="https://www.suse.com/security/cve/CVE-2020-27825/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="CVE-2020-4788" ref_url="https://www.suse.com/security/cve/CVE-2020-4788/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-28374: Fixed a Linux SCSI target issue (bsc#1178372).
- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180559).
- CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls (bsc#1179960).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180031).
- CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds check in the nl80211_policy policy of nl80211.c (bnc#1180086).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180029).
- CVE-2020-0444: Fixed a bad kfree due to a logic error in audit_data_to_entry (bnc#1180027).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bnc#1179745).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179745).
- CVE-2020-27777: Fixed a privilege escalation in the Run-Time Abstraction Services (RTAS) interface, affecting guests running on top of PowerVM or KVM hypervisors (bnc#1179107).
- CVE-2019-20934: Fixed a use-after-free in show_numa_stats() because NUMA fault statistics were inappropriately freed, aka CID-16d51a590a8c (bsc#1179663).
- CVE-2020-27786: Fixed a use after free in kernel midi subsystem snd_rawmidi_kernel_read1() (bsc#1179601).

The following non-security bugs were fixed:

- ACPI: PNP: compare the string length in the matching_id() (git-fixes).
- ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1 (git-fixes).
- ACPICA: Do not increment operation_region reference counts for field units (git-fixes).
- ALSA: ca0106: fix error code handling (git-fixes).
- ALSA: ctl: allow TLV read operation for callback type of element in locked case (git-fixes).
- ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO (git-fixes).
- ALSA: hda/ca0132 - Change Input Source enum strings (git-fixes).
- ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg (git-fixes).
- ALSA: hda/generic: Add option to enforce preferred_dacs pairs (git-fixes).
- ALSA: hda/hdmi: always check pin power status in i915 pin fixup (git-fixes).
- ALSA: hda/realtek - Add new codec supported for ALC897 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (git-fixes).
- ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (git-fixes).
- ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520 (git-fixes).
- ALSA: hda/realtek: Enable headset of ASUS UX482EG &amp; B9400CEA with ALC294 (git-fixes).
- ALSA: hda: Add NVIDIA codec IDs 9a &amp; 9d through a0 to patch table (git-fixes).
- ALSA: hda: Fix potential race in unsol event handler (git-fixes).
- ALSA: hda: Fix regressions on clear and reconfig sysfs (git-fixes).
- ALSA: info: Drop WARN_ON() from buffer NULL sanity check (git-fixes).
- ALSA: isa/wavefront: prevent out of bounds write in ioctl (git-fixes).
- ALSA: line6: Perform sanity check for each URB creation (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: pcm: oss: Fix potential out-of-bounds shift (git-fixes).
- ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check (git-fixes).
- ALSA: timer: Limit max amount of slave instances (git-fixes).
- ALSA: usb-audio: Add delay quirk for all Logitech USB devices (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16 (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2 (git-fixes).
- ALSA: usb-audio: add quirk for Denon DCD-1500RE (git-fixes).
- ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG) (git-fixes).
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Alpha S (git-fixes).
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight S (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware does not give back (git-fixes).
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (git-fixes).
- ALSA: usb-audio: Fix OOB access of mixer element list (git-fixes).
- ALSA: usb-audio: Fix potential out-of-bounds shift (git-fixes).
- ALSA: usb-audio: Fix race against the error recovery URB submission (git-fixes).
- ALSA: usb-audio: US16x08: fix value count for level meters (git-fixes).
- ASoC: arizona: Fix a wrong free in wm8997_probe (git-fixes).
- ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (git-fixes).
- ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed (git-fixes).
- ASoC: jz4740-i2s: add missed checks for clk_get() (git-fixes).
- ASoC: pcm3168a: The codec does not support S32_LE (git-fixes).
- ASoC: pcm: DRAIN support reactivation (git-fixes).
- ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile (git-fixes).
- ASoC: sti: fix possible sleep-in-atomic (git-fixes).
- ASoC: wm8904: fix regcache handling (git-fixes).
- ASoC: wm8998: Fix PM disable depth imbalance on error (git-fixes).
- ASoC: wm_adsp: Do not generate kcontrols without READ flags (git-fixes).
- ASoC: wm_adsp: remove 'ctl' from list on error in wm_adsp_create_control() (git-fixes).
- ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function (git-fixes).
- ath10k: Fix an error handling path (git-fixes).
- ath10k: fix backtrace on coredump (git-fixes).
- ath10k: fix get invalid tx rate for Mesh metric (git-fixes).
- ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq (git-fixes).
- ath10k: Release some resources in an error handling path (git-fixes).
- ath10k: Remove msdu from idr when management pkt send fails (git-fixes).
- ath6kl: fix enum-conversion warning (git-fixes).
- ath9k_htc: Discard undersized packets (git-fixes).
- ath9k_htc: Modify byte order for an error message (git-fixes).
- ath9k_htc: Silence undersized packet warnings (git-fixes).
- ath9k_htc: Use appropriate rs_datalen type (git-fixes).
- Avoid a GCC warning about '/*' within a comment.
- backlight: lp855x: Ensure regulators are disabled on probe failure (git-fixes).
- Bluetooth: add a mutex lock to avoid UAF in do_enale_set (git-fixes).
- Bluetooth: btusb: Fix detection of some fake CSR controllers with a bcdDevice val of 0x0134 (git-fixes).
- Bluetooth: Fix advertising duplicated flags (git-fixes).
- Bluetooth: Fix null pointer dereference in hci_event_packet() (git-fixes).
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (git-fixes).
- bnxt_en: Fix race when modifying pause settings (bsc#1050242 ).
- bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex (bsc#1050242).
- btmrvl: Fix firmware filename for sd8997 chipset (bsc#1172694).
- btrfs: fix use-after-free on readahead extent after failure to create it (bsc#1179963).
- btrfs: qgroup: do not commit transaction when we already hold the handle (bsc#1178634).
- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1174784).
- bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (git-fixes).
- can: mcp251x: add error check when wq alloc failed (git-fixes).
- can: softing: softing_netdev_open(): fix error handling (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- cfg80211: regulatory: Fix inconsistent format argument (git-fixes).
- cifs: add NULL check for ses-&gt;tcon_ipc (bsc#1178270).
- cifs: allow syscalls to be restarted in __smb_send_rqst() (bsc#1176956).
- cifs: fix check of tcon dfs in smb1 (bsc#1178270).
- cifs: fix potential use-after-free in cifs_echo_request() (bsc#1139944).
- cirrus: cs89x0: remove set but not used variable 'lp' (git-fixes).
- cirrus: cs89x0: use devm_platform_ioremap_resource() to simplify code (git-fixes).
- clk: at91: usb: continue if clk_hw_round_rate() return zero (git-fixes).
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (git-fixes).
- clk: qcom: Allow constant ratio freq tables for rcg (git-fixes).
- clk: qcom: msm8916: Fix the address location of pll-&gt;config_reg (git-fixes).
- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (git-fixes).
- clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1 (git-fixes).
- clk: sunxi-ng: Make sure divider tables have sentinel (git-fixes).
- clk: tegra: Fix duplicated SE clock entry (git-fixes).
- clk: tegra: Fix Tegra PMC clock out parents (git-fixes).
- clk: ti: composite: fix memory leak (git-fixes).
- clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call (git-fixes).
- clk: ti: Fix memleak in ti_fapll_synth_setup (git-fixes).
- clocksource/drivers/asm9260: Add a check for of_clk_get (git-fixes).
- coredump: fix core_pattern parse error (git-fixes).
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (git-fixes).
- cpufreq: loongson1: Add missing MODULE_ALIAS (git-fixes).
- cpufreq: scpi: Add missing MODULE_ALIAS (git-fixes).
- cpufreq: st: Add missing MODULE_DEVICE_TABLE (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (git-fixes).
- crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr() (git-fixes).
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (git-fixes).
- cxgb4: Fix offset when clearing filter byte counters (bsc#1064802 bsc#1066129).
- drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish (git-fixes).
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (git-fixes).
- drm/amd/display: remove useless if/else (git-fixes).
- drm/amdgpu: fix build_coefficients() argument (git-fixes).
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (git-fixes).
- drm/gma500: fix double free of gma_connector (git-fixes).
- drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] (bsc#1129770)
- drm/meson: dw-hdmi: Register a callback to disable the regulator (git-fixes).
- drm/msm/dpu: Add newline to printks (git-fixes).
- drm/msm/dsi_phy_10nm: implement PHY disabling (git-fixes).
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (git-fixes).
- drm/rockchip: Avoid uninitialized use of endpoint id in LVDS (git-fixes).
- epoll: Keep a reference on files added to the check list (bsc#1180031).
- ext4: correctly report 'not supported' for {usr,grp}jquota when !CONFIG_QUOTA (bsc#1179672).
- ext4: fix bogus warning in ext4_update_dx_flag() (bsc#1179716).
- ext4: fix error handling code in add_new_gdb (bsc#1179722).
- ext4: fix invalid inode checksum (bsc#1179723).
- ext4: fix leaking sysfs kobject after failed mount (bsc#1179670).
- ext4: limit entries returned when counting fsmap records (bsc#1179671).
- ext4: unlock xattr_sem properly in ext4_inline_data_truncate() (bsc#1179673).
- extcon: max77693: Fix modalias string (git-fixes).
- fbcon: Fix user font detection test at fbcon_resize(). (bsc#1112178) Backporting changes: 	* updated path drivers/video/fbcon/core to drivers/video/console
- fbcon: Remove the superfluous break (bsc#1129770) Backporting changes: 	* updated path drivers/video/fbcon/core to drivers/video/console 	* context changes
- firmware: qcom: scm: Ensure 'a0' status code is treated as signed (git-fixes).
- fix regression in 'epoll: Keep a reference on files added to the check list' (bsc#1180031, git-fixes).
- forcedeth: use per cpu to collect xmit/recv statistics (git-fixes).
- fs: Do not invalidate page buffers in block_write_full_page() (bsc#1179711).
- geneve: change from tx_error to tx_dropped on missing metadata (git-fixes).
- genirq/irqdomain: Add an irq_create_mapping_affinity() function (bsc#1065729).
- gpio: arizona: handle pm_runtime_get_sync failure case (git-fixes).
- gpio: gpio-grgpio: fix possible sleep-in-atomic-context bugs in grgpio_irq_map/unmap() (git-fixes).
- gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP (git-fixes).
- gpio: max77620: Fixup debounce delays (git-fixes).
- gpio: max77620: Use correct unit for debounce times (git-fixes).
- gpio: mpc8xxx: Add platform device to gpiochip-&gt;parent (git-fixes).
- gpio: mvebu: fix potential user-after-free on probe (git-fixes).
- gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism (git-fixes).
- gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 BYT + AXP288 model (git-fixes).
- gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 CHT + AXP288 model (git-fixes).
- gpiolib: acpi: Correct comment for HP x2 10 honor_wakeup quirk (git-fixes).
- gpiolib: acpi: Rework honor_wakeup option into an ignore_wake option (git-fixes).
- gpiolib: acpi: Turn dmi_system_id table into a generic quirk table (git-fixes).
- gpiolib: fix up emulated open drain outputs (git-fixes).
- HID: Add another Primax PIXART OEM mouse quirk (git-fixes).
- HID: apple: Disable Fn-key key-re-mapping on clone keyboards (git-fixes).
- HID: core: check whether Usage Page item is after Usage ID items (git-fixes).
- HID: core: Correctly handle ReportSize being zero (git-fixes).
- HID: cypress: Support Varmilo Keyboards' media hotkeys (git-fixes).
- HID: Fix slab-out-of-bounds read in hid_field_extract (bsc#1180052).
- HID: hid-sensor-hub: Fix issue with devices with no report ID (git-fixes).
- HID: Improve Windows Precision Touchpad detection (git-fixes).
- HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() (git-fixes).
- HID: logitech-hidpp: Silence intermittent get_battery_capacity errors (git-fixes).
- HSI: omap_ssi: Do not jump to free ID in ssi_add_controller() (git-fixes).
- hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow (git-fixes).
- hwmon: (jc42) Fix name to have no illegal characters (git-fixes).
- i2c: algo: pca: Reapply i2c bus settings after reset (git-fixes).
- i2c: i801: Fix resume bug (git-fixes).
- i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets (git-fixes).
- i2c: pxa: clear all master action bits in i2c_pxa_stop_message() (git-fixes).
- i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output (git-fixes).
- i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (git-fixes).
- ibmvnic: add some debugs (bsc#1179896 ltc#190255).
- ibmvnic: avoid memset null scrq msgs (bsc#1044767 ltc#155231 git-fixes).
- ibmvnic: continue fatal error reset after passive init (bsc#1171078 ltc#184239 git-fixes).
- ibmvnic: delay next reset if hard reset fails (bsc#1094840 ltc#167098 git-fixes).
- ibmvnic: enhance resetting status check during module exit (bsc#1065729).
- ibmvnic: fix call_netdevice_notifiers in do_reset (bsc#1115431 ltc#171853 git-fixes).
- ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues (bsc#1040855 ltc#155067 git-fixes).
- ibmvnic: fix: NULL pointer dereference (bsc#1044767 ltc#155231 git-fixes).
- ibmvnic: notify peers when failover and migration happen (bsc#1044120 ltc#155423 git-fixes).
- ibmvnic: restore adapter state on failed reset (bsc#1152457 ltc#174432 git-fixes).
- igc: Fix returning wrong statistics (bsc#1118657).
- iio: adc: max1027: Reset the device at probe time (git-fixes).
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (git-fixes).
- iio: bmp280: fix compensation of humidity (git-fixes).
- iio: buffer: Fix demux update (git-fixes).
- iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw() (git-fixes).
- iio: fix center temperature of bmc150-accel-core (git-fixes).
- iio: humidity: hdc100x: fix IIO_HUMIDITYRELATIVE channel reporting (git-fixes).
- iio: light: bh1750: Resolve compiler warning and make code more readable (git-fixes).
- iio: srf04: fix wrong limitation in distance measuring (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- iio:pressure:mpl3115: Force alignment of buffer (git-fixes).
- inet_ecn: Fix endianness of checksum update when setting ECT(1) (git-fixes).
- Input: ads7846 - fix integer overflow on Rt calculation (git-fixes).
- Input: ads7846 - fix race that causes missing releases (git-fixes).
- Input: ads7846 - fix unaligned access on 7845 (git-fixes).
- Input: atmel_mxt_ts - disable IRQ across suspend (git-fixes).
- Input: cm109 - do not stomp on control URB (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events (git-fixes).
- Input: cyapa_gen6 - fix out-of-bounds stack access (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (git-fixes).
- Input: i8042 - add Acer laptops to the i8042 reset list (git-fixes).
- Input: i8042 - add ByteSpeed touchpad to noloop table (git-fixes).
- Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists (git-fixes).
- Input: i8042 - allow insmod to succeed on devices without an i8042 controller (git-fixes).
- Input: i8042 - fix error return code in i8042_setup_aux() (git-fixes).
- Input: omap4-keypad - fix runtime PM error handling (git-fixes).
- Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen (git-fixes).
- Input: trackpoint - add new trackpoint variant IDs (git-fixes).
- Input: trackpoint - enable Synaptics trackpoints (git-fixes).
- Input: xpad - support Ardwiino Controllers (git-fixes).
- ipw2x00: Fix -Wcast-function-type (git-fixes).
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (git-fixes).
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (git-fixes).
- iwlwifi: mvm: fix unaligned read of rx_pkt_status (git-fixes).
- iwlwifi: pcie: limit memory read spin time (git-fixes).
- kABI fix for g2d (git-fixes).
- kABI workaround for dsa/b53 changes (git-fixes).
- kABI workaround for HD-audio generic parser (git-fixes).
- kABI workaround for net/ipvlan changes (git-fixes).
- kABI: ath10k: move a new structure member to the end (git-fixes).
- kABI: genirq: add back irq_create_mapping (bsc#1065729).
- kernel-source.spec: Fix build with rpm 4.16 (boo#1179015). RPM_BUILD_ROOT is cleared before %%install. Do the unpack into RPM_BUILD_ROOT in %%install
- kernel-{binary,source}.spec.in: do not create loop symlinks (bsc#1179082)
- kgdb: Fix spurious true from in_dbg_master() (git-fixes).
- KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (bsc#1112178).
- mac80211: allow rx of mesh eapol frames with default rx key (git-fixes).
- mac80211: Check port authorization in the ieee80211_tx_dequeue() case (git-fixes).
- mac80211: do not set set TDLS STA bandwidth wider than possible (git-fixes).
- mac80211: fix authentication with iwlwifi/mvm (git-fixes).
- mac80211: fix use of skb payload instead of header (git-fixes).
- mac80211: mesh: fix mesh_pathtbl_init() error path (git-fixes).
- matroxfb: avoid -Warray-bounds warning (git-fixes).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps() (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/cluster: fix deadlock when node is doing resync job (bsc#1163727).
- md/raid5: fix oops during stripe resizing (git-fixes).
- media: am437x-vpfe: Setting STD to current value is not an error (git-fixes).
- media: cec-funcs.h: add status_req checks (git-fixes).
- media: cx88: Fix some error handling path in 'cx8800_initdev()' (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: i2c: mt9v032: fix enum mbus codes and frame sizes (git-fixes).
- media: i2c: ov2659: Fix missing 720p register config (git-fixes).
- media: i2c: ov2659: fix s_stream return value (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: mtk-mdp: Fix a refcounting bug on error in init (git-fixes).
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (git-fixes).
- media: platform: add missing put_device() call in mtk_jpeg_probe() and mtk_jpeg_remove() (git-patches).
- media: pvrusb2: Fix oops on tear-down when radio support is not present (git-fixes).
- media: s5p-g2d: Fix a memory leak in an error handling path in 'g2d_probe()' (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio() (git-fixes).
- media: si470x-i2c: add missed operations in remove (git-fixes).
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling case (git-fixes).
- media: sti: bdisp: fix a possible sleep-in-atomic-context bug in bdisp_device_run() (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous (git-fixes).
- media: ti-vpe: vpe: ensure buffers are cleaned up properly in abort cases (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence number (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid sizeimage (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure causing a kernel panic (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format (git-fixes).
- media: ti-vpe: vpe: Make sure YUYV is set as default format (git-fixes).
- media: uvcvideo: Set media controller entity functions (git-fixes).
- media: uvcvideo: Silence shift-out-of-bounds warning (git-fixes).
- media: v4l2-async: Fix trivial documentation typo (git-fixes).
- media: v4l2-core: fix touch support in v4l_g_fmt (git-fixes).
- media: v4l2-device.h: Explicitly compare grp{id,mask} to zero in v4l2_device macros (git-fixes).
- mei: bus: do not clean driver pointer (git-fixes).
- mei: protect mei_cl_mtu from null dereference (git-fixes).
- memstick: fix a double-free bug in memstick_check (git-fixes).
- memstick: r592: Fix error return in r592_probe() (git-fixes).
- mfd: rt5033: Fix errorneous defines (git-fixes).
- mfd: wm8994: Fix driver operation if loaded as modules (git-fixes).
- mlxsw: core: Fix memory leak on module removal (bsc#1112374).
- mm,memory_failure: always pin the page in madvise_inject_error (bsc#1180258).
- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (bsc#1179204).
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/tls: Fix kmap usage (bsc#1109837).
- net/tls: missing received data after fast remote close (bsc#1109837).
- net/x25: prevent a couple of overflows (bsc#1178590).
- net: aquantia: Fix aq_vec_isr_legacy() return value (git-fixes).
- net: aquantia: fix LRO with FCS error (git-fixes).
- net: DCB: Validate DCB_ATTR_DCB_BUFFER argument (bsc#1103990 ).
- net: dsa: b53: Always use dev-&gt;vlan_enabled in b53_configure_vlan() (git-fixes).
- net: dsa: b53: Ensure the default VID is untagged (git-fixes).
- net: dsa: b53: Fix default VLAN ID (git-fixes).
- net: dsa: b53: Properly account for VLAN filtering (git-fixes).
- net: dsa: bcm_sf2: Do not assume DSA master supports WoL (git-fixes).
- net: dsa: bcm_sf2: potential array overflow in bcm_sf2_sw_suspend() (git-fixes).
- net: dsa: qca8k: remove leftover phy accessors (git-fixes).
- net: ena: fix packet's addresses for rx_offset feature (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (git-fixes).
- net: ethernet: ti: cpsw: fix runtime_pm while add/kill vlan (git-fixes).
- net: hisilicon: Fix signedness bug in hix5hd2_dev_probe() (git-fixes).
- net: macb: add missing barriers when reading descriptors (git-fixes).
- net: macb: fix dropped RX frames due to a race (git-fixes).
- net: macb: fix error format in dev_err() (git-fixes).
- net: macb: fix random memory corruption on RX with 64-bit DMA (git-fixes).
- net: pasemi: fix an use-after-free in pasemi_mac_phy_init() (git-fixes).
- net: phy: Avoid multiple suspends (git-fixes).
- net: qed: fix 'maybe uninitialized' warning (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: qed: fix async event callbacks unregistering (bsc#1104393 bsc#1104389).
- net: qede: fix PTP initialization on recovery (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: qede: fix use-after-free on recovery and AER handling (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: seeq: Fix the function used to release some memory in an error handling path (git-fixes).
- net: sh_eth: fix a missing check of of_get_phy_mode (git-fixes).
- net: sonic: replace dev_kfree_skb in sonic_send_packet (git-fixes).
- net: sonic: return NETDEV_TX_OK if failed to map buffer (git-fixes).
- net: stmmac: fix csr_clk can't be zero issue (git-fixes).
- net: stmmac: Fix reception of Broadcom switches tags (git-fixes).
- net: thunderx: use spin_lock_bh in nicvf_set_rx_mode_task() (bsc#1110096).
- net: usb: sr9800: fix uninitialized local variable (git-fixes).
- net:ethernet:aquantia: Extra spinlocks removed (git-fixes).
- net_sched: fix a memory leak in atm_tc_init() (bsc#1056657 bsc#1056653 bsc#1056787).
- nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame (git-fixes).
- nfc: s3fwrn5: Release the nfc firmware (git-fixes).
- nfc: st95hf: Fix memleak in st95hf_in_send_cmd (git-fixes).
- nfp: use correct define to return NONE fec (bsc#1109837).
- NFS: fix nfs_path in case of a rename retry (git-fixes).
- NFSD: Add missing NFSv2 .pc_func methods (git-fixes).
- NFSv4.2: fix client's attribute cache management for copy_file_range (git-fixes).
- NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag (git-fixes).
- ocfs2: fix unbalanced locking (bsc#1180506).
- ocfs2: initialize ip_next_orphan (bsc#1179724).
- orinoco: Move context allocation after processing the skb (git-fixes).
- parport: load lowlevel driver if ports not found (git-fixes).
- PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges (git-fixes).
- PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge (git-fixes).
- PCI: Do not disable decoding when mmio_always_on is set (git-fixes).
- PCI: Fix pci_slot_release() NULL pointer dereference (git-fixes).
- phy: Revert toggling reset changes (git-fixes).
- pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler() (git-fixes).
- pinctrl: amd: fix npins for uart0 in kerncz_groups (git-fixes).
- pinctrl: amd: remove debounce filter setting in IRQ type setting (git-fixes).
- pinctrl: baytrail: Avoid clearing debounce value when turning it off (git-fixes).
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (git-fixes).
- pinctrl: merrifield: Set default bias in case no particular value given (git-fixes).
- pinctrl: sh-pfc: sh7734: Fix duplicate TCLK1_B (git-fixes).
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (git-fixes).
- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (git-fixes).
- platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (git-fixes).
- platform/x86: mlx-platform: remove an unused variable (git-fixes).
- platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (git-fixes).
- platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (git-fixes).
- PM / hibernate: memory_bm_find_bit(): Tighten node optimisation (git-fixes).
- PM: ACPI: Output correct message on target power state (git-fixes).
- PM: hibernate: Freeze kernel threads in software_resume() (git-fixes).
- PM: hibernate: remove the bogus call to get_gendisk() in software_resume() (git-fixes).
- pNFS/flexfiles: Fix list corruption if the mirror count changes (git-fixes).
- power: supply: bq24190_charger: fix reference leak (git-fixes).
- power: supply: bq27xxx_battery: Silence deferred-probe error (git-fixes).
- powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (bsc#1065729).
- powerpc/64s/pseries: Fix hash tlbiel_all_isa300 for guest kernels (bsc#1179888 ltc#190253).
- powerpc/64s: Fix hash ISA v3.0 TLBIEL instruction generation (bsc#1055117 ltc#159753 git-fixes bsc#1179888 ltc#190253).
- powerpc/pci: Fix broken INTx configuration via OF (bsc#1172145 ltc#184630).
- powerpc/pci: Remove legacy debug code (bsc#1172145 ltc#184630 git-fixes).
- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145 ltc#184630).
- powerpc/pci: Use of_irq_parse_and_map_pci() helper (bsc#1172145 ltc#184630).
- powerpc/perf: Fix crash with is_sier_available when pmu is not set (bsc#1179578 ltc#189313).
- powerpc/pseries/hibernation: remove redundant cacheinfo update (bsc#1138374 ltc#178199 git-fixes).
- powerpc/pseries: Pass MSI affinity to irq_create_mapping() (bsc#1065729).
- powerpc/smp: Add __init to init_big_cores() (bsc#1109695 ltc#171067 git-fixes).
- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- powerpc: Convert to using %pOF instead of full_name (bsc#1172145 ltc#184630).
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (bsc#1065729).
- ppp: remove the PPPIOCDETACH ioctl (git-fixes).
- pwm: lp3943: Dynamically allocate PWM chip base (git-fixes).
- qed: fix error return code in qed_iwarp_ll2_start() (bsc#1050536 bsc#1050545).
- qed: suppress 'do not support RoCE &amp; iWARP' flooding on HW init (bsc#1050536 bsc#1050545).
- qed: suppress false-positives interrupt error messages on HW init (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- quota: clear padding in v2r1_mem2diskdqb() (bsc#1179714).
- radeon: insert 10ms sleep in dce5_crtc_load_lut (git-fixes).
- ravb: Fix use-after-free ravb_tstamp_skb (git-fixes).
- RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532 (bsc#1050545).
- RDMA/qedr: Fix memory leak in iWARP CM (bsc#1050545 ).
- regmap: debugfs: check count when read regmap file (git-fixes).
- regmap: dev_get_regmap_match(): fix string comparison (git-fixes).
- regmap: Remove duplicate `type` field from regmap `regcache_sync` trace event (git-fixes).
- regulator: max8907: Fix the usage of uninitialized variable in max8907_regulator_probe() (git-fixes).
- regulator: pfuze100-regulator: Variable 'val' in pfuze100_regulator_probe() could be uninitialized (git-fixes).
- regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone (git-fixes).
- reiserfs: Fix oops during mount (bsc#1179715).
- reiserfs: Initialize inode keys properly (bsc#1179713).
- remoteproc: Fix wrong rvring index computation (git-fixes).
- rfkill: Fix incorrect check to avoid NULL pointer dereference (git-fixes).
- rtc: 88pm860x: fix possible race condition (git-fixes).
- rtc: hym8563: enable wakeup when applicable (git-fixes).
- rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot (git-fixes).
- rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt() (git-fixes).
- s390/bpf: Fix multiple tail calls (git-fixes).
- s390/cpuinfo: show processor physical address (git-fixes).
- s390/cpum_sf.c: fix file permission for cpum_sfb_size (git-fixes).
- s390/dasd: fix hanging device offline processing (bsc#1144912).
- s390/dasd: fix null pointer dereference for ERP requests (git-fixes).
- s390/pci: fix CPU address in MSI for directed IRQ (git-fixes).
- s390/qeth: fix af_iucv notification race (git-fixes).
- s390/qeth: fix tear down of async TX buffers (git-fixes).
- s390/qeth: make af_iucv TX notification call more robust (git-fixes).
- s390/stp: add locking to sysfs functions (git-fixes).
- s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (git-fixes).
- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- scsi: lpfc: Add FDMI Vendor MIB support (bsc#1164780).
- scsi: lpfc: Convert abort handling to SLI-3 and SLI-4 handlers (bsc#1164780).
- scsi: lpfc: Convert SCSI I/O completions to SLI-3 and SLI-4 handlers (bsc#1164780).
- scsi: lpfc: Convert SCSI path to use common I/O submission path (bsc#1164780).
- scsi: lpfc: Correct null ndlp reference on routine exit (bsc#1164780).
- scsi: lpfc: Drop nodelist reference on error in lpfc_gen_req() (bsc#1164780).
- scsi: lpfc: Enable common send_io interface for SCSI and NVMe (bsc#1164780).
- scsi: lpfc: Enable common wqe_template support for both SCSI and NVMe (bsc#1164780).
- scsi: lpfc: Enlarge max_sectors in scsi host templates (bsc#1164780).
- scsi: lpfc: Extend the RDF FPIN Registration descriptor for additional events (bsc#1164780).
- scsi: lpfc: Fix duplicate wq_create_version check (bsc#1164780).
- scsi: lpfc: Fix fall-through warnings for Clang (bsc#1164780).
- scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery (bsc#1164780).
- scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc() (bsc#1164780).
- scsi: lpfc: Fix memory leak on lcb_context (bsc#1164780).
- scsi: lpfc: Fix missing prototype for lpfc_nvmet_prep_abort_wqe() (bsc#1164780).
- scsi: lpfc: Fix missing prototype warning for lpfc_fdmi_vendor_attr_mi() (bsc#1164780).
- scsi: lpfc: Fix NPIV discovery and Fabric Node detection (bsc#1164780).
- scsi: lpfc: Fix NPIV Fabric Node reference counting (bsc#1164780).
- scsi: lpfc: Fix pointer defereference before it is null checked issue (bsc#1164780).
- scsi: lpfc: Fix refcounting around SCSI and NVMe transport APIs (bsc#1164780).
- scsi: lpfc: Fix removal of SCSI transport device get and put on dev structure (bsc#1164780).
- scsi: lpfc: Fix scheduling call while in softirq context in lpfc_unreg_rpi (bsc#1164780).
- scsi: lpfc: Fix set but not used warnings from Rework remote port lock handling (bsc#1164780).
- scsi: lpfc: Fix set but unused variables in lpfc_dev_loss_tmo_handler() (bsc#1164780).
- scsi: lpfc: Fix spelling mistake 'Cant' -&gt; 'Can't' (bsc#1164780).
- scsi: lpfc: Fix variable 'vport' set but not used in lpfc_sli4_abts_err_handler() (bsc#1164780).
- scsi: lpfc: lpfc_attr: Demote kernel-doc format for redefined functions (bsc#1164780).
- scsi: lpfc: lpfc_attr: Fix-up a bunch of kernel-doc misdemeanours (bsc#1164780).
- scsi: lpfc: lpfc_debugfs: Fix a couple of function documentation issues (bsc#1164780).
- scsi: lpfc: lpfc_scsi: Fix a whole host of kernel-doc issues (bsc#1164780).
- scsi: lpfc: Refactor WQE structure definitions for common use (bsc#1164780).
- scsi: lpfc: Reject CT request for MIB commands (bsc#1164780).
- scsi: lpfc: Remove dead code on second !ndlp check (bsc#1164780).
- scsi: lpfc: Remove ndlp when a PLOGI/ADISC/PRLI/REG_RPI ultimately fails (bsc#1164780).
- scsi: lpfc: Remove set but not used 'qp' (bsc#1164780).
- scsi: lpfc: Remove unneeded variable 'status' in lpfc_fcp_cpu_map_store() (bsc#1164780).
- scsi: lpfc: Removed unused macros in lpfc_attr.c (bsc#1164780).
- scsi: lpfc: Rework locations of ndlp reference taking (bsc#1164780).
- scsi: lpfc: Rework remote port lock handling (bsc#1164780).
- scsi: lpfc: Rework remote port ref counting and node freeing (bsc#1164780).
- scsi: lpfc: Unsolicited ELS leaves node in incorrect state while dropping it (bsc#1164780).
- scsi: lpfc: Update changed file copyrights for 2020 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.4 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.5 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.6 (bsc#1164780).
- scsi: lpfc: Use generic power management (bsc#1164780).
- scsi: qla2xxx: Change post del message from debug level to log level (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Do not check for fw_started while posting NVMe command (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Do not consume srb greedily (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix compilation issue in PPC systems (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix crash during driver load on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix device loss on 4G and older HBAs (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix flash update in 28XX adapters on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix FW initialization error on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix N2N and NVMe connect retry failure (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix return of uninitialized value in rval (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix the call trace for flush workqueue (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Handle aborts correctly for port undergoing deletion (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Initialize variable in qla8044_poll_reg() (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Limit interrupt vectors to number of CPUs (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Move sess cmd list/lock to driver (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove in_interrupt() from qla82xx-specific code (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove in_interrupt() from qla83xx-specific code (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: remove incorrect sparse #ifdef (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove trailing semicolon in macro definition (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Return EBUSY on fcport deletion (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Tear down session if FW say it is down (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Update version to 10.02.00.104-k (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Use constant when it is known (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: Remove unneeded break statements (bsc#1164780).
- scsi: storvsc: Fix error return in storvsc_probe() (git-fixes).
- scsi: target: tcm_qla2xxx: Remove BUG_ON(in_interrupt()) (bsc#1172538 bsc#1179142 bsc#1179810).
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (git-fixes).
- serial: 8250_pci: Add Realtek 816a and 816b (git-fixes).
- serial: amba-pl011: Make sure we initialize the port.lock spinlock (git-fixes).
- serial: ar933x_uart: set UART_CS_{RX,TX}_READY_ORIDE (git-fixes).
- serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init (git-fixes).
- serial_core: Check for port state when tty is in error state (git-fixes).
- SMB3: Honor 'handletimeout' flag for multiuser mounts (bsc#1176558).
- SMB3: Honor 'posix' flag for multiuser mounts (bsc#1176559).
- SMB3: Honor lease disabling for multiuser mounts (git-fixes).
- soc/tegra: fuse: Fix index bug in get_process_id (git-fixes).
- soc: imx: gpc: fix power up sequencing (git-fixes).
- soc: mediatek: Check if power domains can be powered on at boot time (git-fixes).
- soc: qcom: smp2p: Safely acquire spinlock without IRQs (git-fixes).
- soc: ti: Fix reference imbalance in knav_dma_probe (git-fixes).
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (git-fixes).
- spi: Add call to spi_slave_abort() function when spidev driver is released (git-fixes).
- spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (git-fixes).
- spi: davinci: Fix use-after-free on unbind (git-fixes).
- spi: dw: Enable interrupts in accordance with DMA xfer mode (git-fixes).
- spi: dw: Fix Rx-only DMA transfers (git-fixes).
- spi: dw: Return any value retrieved from the dma_transfer callback (git-fixes).
- spi: Fix memory leak on splited transfers (git-fixes).
- spi: img-spfi: fix potential double release (git-fixes).
- spi: img-spfi: fix reference leak in img_spfi_resume (git-fixes).
- spi: pic32: Do not leak DMA channels in probe error path (git-fixes).
- spi: pxa2xx: Add missed security checks (git-fixes).
- spi: spi-cavium-thunderx: Add missing pci_release_regions() (git-fixes).
- spi: spi-loopback-test: Fix out-of-bounds read (git-fixes).
- spi: spi-mem: Fix passing zero to 'PTR_ERR' warning (git-fixes).
- spi: spi-mem: fix reference leak in spi_mem_access_start (git-fixes).
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (git-fixes).
- spi: spidev: fix a potential use-after-free in spidev_release() (git-fixes).
- spi: st-ssc4: add missed pm_runtime_disable (git-fixes).
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (git-fixes).
- spi: tegra114: fix reference leak in tegra spi ops (git-fixes).
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (git-fixes).
- spi: tegra20-slink: add missed clk_unprepare (git-fixes).
- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (git-fixes).
- splice: only read in as much information as there is pipe buffer space (bsc#1179520).
- staging: comedi: check validity of wMaxPacketSize of usb endpoints found (git-fixes).
- staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value (git-fixes).
- staging: comedi: mf6x4: Fix AI end-of-conversion detection (git-fixes).
- staging: olpc_dcon: add a missing dependency (git-fixes).
- staging: olpc_dcon: Do not call platform_device_unregister() in dcon_probe() (git-fixes).
- staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21 (git-fixes).
- staging: rtl8188eu: Add device id for MERCUSYS MW150US v2 (git-fixes).
- staging: rtl8188eu: fix possible null dereference (git-fixes).
- staging: rtl8192u: fix multiple memory leaks on error path (git-fixes).
- staging: vt6656: set usb_set_intfdata on driver fail (git-fixes).
- staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() (git-fixes).
- staging: wlan-ng: properly check endpoint types (git-fixes).
- sunrpc: fix copying of multiple pages in gss_read_proxy_verf() (bsc#1103992).
- sunrpc: fixed rollback in rpc_gssd_dummy_populate() (git-fixes).
- sunrpc: Properly set the @subbuf parameter of xdr_buf_subsegment() (git-fixes).
- sunrpc: The RDMA back channel mustn't disappear while requests are outstanding (git-fixes).
- svcrdma: fix bounce buffers for unaligned offsets and multiple pages (bsc#1103992).
- svcrdma: Fix page leak in svc_rdma_recv_read_chunk() (bsc#1103992).
- tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (bsc#1109837).
- thunderbolt: Use 32-bit writes when writing ring producer/consumer (git-fixes).
- timer: Fix wheel index calculation on last level (git fixes)
- timer: Prevent base-&gt;clk from moving backward (git-fixes)
- tty: always relink the port (git-fixes).
- tty: Fix -&gt;pgrp locking in tiocspgrp() (git-fixes).
- tty: link tty and port before configuring it as console (git-fixes).
- tty: synclink_gt: Adjust indentation in several functions (git-fixes).
- tty: synclinkmp: Adjust indentation in several functions (git-fixes).
- tty:serial:mvebu-uart:fix a wrong return (git-fixes).
- uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define (git-fixes).
- uapi/if_ether.h: prevent redefinition of struct ethhdr (git-fixes).
- usb: add RESET_RESUME quirk for Snapscan 1212 (git-fixes).
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (git-fixes).
- usb: dummy-hcd: Fix uninitialized array use in init() (git-fixes).
- usb: dwc2: Fix IN FIFO allocation (git-fixes).
- usb: dwc3: remove the call trace of USBx_GFLADJ (git-fixes).
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (git-fixes).
- usb: Fix: Do not skip endpoint descriptors with maxpacket=0 (git-fixes).
- usb: fsl: Check memory resource before releasing it (git-fixes).
- usb: gadget: composite: Fix possible double free memory bug (git-fixes).
- usb: gadget: configfs: fix concurrent issue between composite APIs (git-fixes).
- usb: gadget: configfs: Fix missing spin_lock_init() (git-fixes).
- usb: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- usb: gadget: f_fs: Use local copy of descriptors for userspace copy (git-fixes).
- usb: gadget: f_midi: setup SuperSpeed Plus descriptors (git-fixes).
- usb: gadget: f_rndis: fix bitrate for SuperSpeed and above (git-fixes).
- usb: gadget: ffs: ffs_aio_cancel(): Save/restore IRQ flags (git-fixes).
- usb: gadget: fix wrong endpoint desc (git-fixes).
- usb: gadget: goku_udc: fix potential crashes in probe (git-fixes).
- usb: gadget: net2280: fix memory leak on probe error handling paths (git-fixes).
- usb: gadget: serial: fix Tx stall after buffer overflow (git-fixes).
- usb: gadget: udc: fix possible sleep-in-atomic-context bugs in gr_probe() (git-fixes).
- usb: gadget: udc: gr_udc: fix memleak on error handling path in gr_ep_init() (git-fixes).
- usb: hso: Fix debug compile warning on sparc32 (git-fixes).
- usb: ldusb: use unsigned size format specifiers (git-fixes).
- usb: musb: omap2430: Get rid of musb .set_vbus for omap2430 glue (git-fixes).
- usb: oxu210hp-hcd: Fix memory leak in oxu_create (git-fixes).
- usb: serial: ch341: add new Product ID for CH341A (git-fixes).
- usb: serial: ch341: sort device-id entries (git-fixes).
- usb: serial: digi_acceleport: clean up modem-control handling (git-fixes).
- usb: serial: digi_acceleport: clean up set_termios (git-fixes).
- usb: serial: digi_acceleport: fix write-wakeup deadlocks (git-fixes).
- usb: serial: digi_acceleport: remove in_interrupt() usage.
- usb: serial: digi_acceleport: remove redundant assignment to pointer priv (git-fixes).
- usb: serial: digi_acceleport: rename tty flag variable (git-fixes).
- usb: serial: digi_acceleport: use irqsave() in USB's complete callback (git-fixes).
- usb: serial: keyspan_pda: fix dropped unthrottle interrupts (git-fixes).
- usb: serial: keyspan_pda: fix stalled writes (git-fixes).
- usb: serial: keyspan_pda: fix tx-unthrottle use-after-free (git-fixes).
- usb: serial: keyspan_pda: fix write deadlock (git-fixes).
- usb: serial: keyspan_pda: fix write unthrottling (git-fixes).
- usb: serial: keyspan_pda: fix write-wakeup use-after-free (git-fixes).
- usb: serial: kl5kusb105: fix memleak on open (git-fixes).
- usb: serial: mos7720: fix parallel-port state restore (git-fixes).
- usb: serial: option: add Fibocom NL668 variants (git-fixes).
- usb: serial: option: add interface-number sanity check to flag handling (git-fixes).
- usb: serial: option: add support for Thales Cinterion EXS82 (git-fixes).
- usb: serial: option: fix Quectel BG96 matching (git-fixes).
- usb: Skip endpoints with 0 maxpacket length (git-fixes).
- usb: UAS: introduce a quirk to set no_write_same (git-fixes).
- usb: usbfs: Suppress problematic bind and unbind uevents (git-fixes).
- usblp: poison URBs upon disconnect (git-fixes).
- usbnet: ipheth: fix connectivity with iOS 14 (git-fixes).
- video: fbdev: neofb: fix memory leak in neo_scan_monitor() (git-fixes).
- vt: do not hardcode the mem allocation upper bound (git-fixes).
- vt: Reject zero-sized screen buffer size (git-fixes).
- watchdog: coh901327: add COMMON_CLK dependency (git-fixes).
- watchdog: da9062: do not ping the hw during stop() (git-fixes).
- watchdog: da9062: No need to ping manually before setting timeout (git-fixes).
- watchdog: qcom: Avoid context switch in restart handler (git-fixes).
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (git-fixes).
- wimax: fix duplicate initializer warning (git-fixes).
- wireless: Use linux/stddef.h instead of stddef.h (git-fixes).
- wireless: Use offsetof instead of custom macro (git-fixes).
- x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz (bsc#1112178).
- x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes (bsc#1112178).
- x86/mm/ident_map: Check for errors from ident_pud_init() (bsc#1112178).
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (bsc#1112178).
- x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak (bsc#1112178).
- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (bsc#1112178).
- x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak (bsc#1112178).
- x86/resctrl: Remove unused struct mbm_state::chunks_bw (bsc#1112178).
- x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb (bsc#1112178).
- x86/tracing: Introduce a static key for exception tracing (bsc#1179895).
- x86/traps: Simplify pagefault tracing logic (bsc#1179895).
- x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (bsc#1112178).
- xhci: Give USB2 ports time to enter U3 in bus suspend (git-fixes).
- xprtrdma: fix incorrect header size calculations (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-14"/>
	<updated date="2021-01-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1040855">SUSE bug 1040855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044120">SUSE bug 1044120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044767">SUSE bug 1044767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056653">SUSE bug 1056653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056657">SUSE bug 1056657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094840">SUSE bug 1094840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104389">SUSE bug 1104389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104393">SUSE bug 1104393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109695">SUSE bug 1109695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110096">SUSE bug 1110096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115431">SUSE bug 1115431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118657">SUSE bug 1118657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138374">SUSE bug 1138374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139944">SUSE bug 1139944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144912">SUSE bug 1144912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152457">SUSE bug 1152457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163727">SUSE bug 1163727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171078">SUSE bug 1171078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172145">SUSE bug 1172145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172694">SUSE bug 1172694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174784">SUSE bug 1174784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174852">SUSE bug 1174852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176558">SUSE bug 1176558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176559">SUSE bug 1176559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176956">SUSE bug 1176956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178270">SUSE bug 1178270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178372">SUSE bug 1178372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178401">SUSE bug 1178401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178590">SUSE bug 1178590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178634">SUSE bug 1178634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178762">SUSE bug 1178762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179014">SUSE bug 1179014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179015">SUSE bug 1179015</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179045">SUSE bug 1179045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179082">SUSE bug 1179082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179107">SUSE bug 1179107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179142">SUSE bug 1179142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179204">SUSE bug 1179204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179419">SUSE bug 1179419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179444">SUSE bug 1179444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179520">SUSE bug 1179520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179578">SUSE bug 1179578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179601">SUSE bug 1179601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179663">SUSE bug 1179663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179666">SUSE bug 1179666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179670">SUSE bug 1179670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179671">SUSE bug 1179671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179672">SUSE bug 1179672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179673">SUSE bug 1179673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179711">SUSE bug 1179711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179713">SUSE bug 1179713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179714">SUSE bug 1179714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179715">SUSE bug 1179715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179716">SUSE bug 1179716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179722">SUSE bug 1179722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179723">SUSE bug 1179723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179724">SUSE bug 1179724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179745">SUSE bug 1179745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179810">SUSE bug 1179810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179888">SUSE bug 1179888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179895">SUSE bug 1179895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179896">SUSE bug 1179896</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179960">SUSE bug 1179960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179963">SUSE bug 1179963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180027">SUSE bug 1180027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180029">SUSE bug 1180029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180031">SUSE bug 1180031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180052">SUSE bug 1180052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180086">SUSE bug 1180086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180117">SUSE bug 1180117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180258">SUSE bug 1180258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180506">SUSE bug 1180506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180559">SUSE bug 1180559</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20669/">CVE-2018-20669</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-20934/">CVE-2019-20934</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0444/">CVE-2020-0444</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27068/">CVE-2020-27068</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27777/">CVE-2020-27777</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27825/">CVE-2020-27825</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-4788/">CVE-2020-4788</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-legacy:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255499" comment="SUSE Linux Enterprise Module for Legacy 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497108" comment="reiserfs-kmp-default-4.12.14-197.78.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138327" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1012382" ref_url="https://bugzilla.suse.com/1012382" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1052904" ref_url="https://bugzilla.suse.com/1052904" source="BUGZILLA"/>
		<reference ref_id="1053043" ref_url="https://bugzilla.suse.com/1053043" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1055121" ref_url="https://bugzilla.suse.com/1055121" source="BUGZILLA"/>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1063638" ref_url="https://bugzilla.suse.com/1063638" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1068546" ref_url="https://bugzilla.suse.com/1068546" source="BUGZILLA"/>
		<reference ref_id="1070872" ref_url="https://bugzilla.suse.com/1070872" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1075020" ref_url="https://bugzilla.suse.com/1075020" source="BUGZILLA"/>
		<reference ref_id="1082387" ref_url="https://bugzilla.suse.com/1082387" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085535" ref_url="https://bugzilla.suse.com/1085535" source="BUGZILLA"/>
		<reference ref_id="1085536" ref_url="https://bugzilla.suse.com/1085536" source="BUGZILLA"/>
		<reference ref_id="1086657" ref_url="https://bugzilla.suse.com/1086657" source="BUGZILLA"/>
		<reference ref_id="1088804" ref_url="https://bugzilla.suse.com/1088804" source="BUGZILLA"/>
		<reference ref_id="1093389" ref_url="https://bugzilla.suse.com/1093389" source="BUGZILLA"/>
		<reference ref_id="1097583" ref_url="https://bugzilla.suse.com/1097583" source="BUGZILLA"/>
		<reference ref_id="1097584" ref_url="https://bugzilla.suse.com/1097584" source="BUGZILLA"/>
		<reference ref_id="1097585" ref_url="https://bugzilla.suse.com/1097585" source="BUGZILLA"/>
		<reference ref_id="1097586" ref_url="https://bugzilla.suse.com/1097586" source="BUGZILLA"/>
		<reference ref_id="1097587" ref_url="https://bugzilla.suse.com/1097587" source="BUGZILLA"/>
		<reference ref_id="1097588" ref_url="https://bugzilla.suse.com/1097588" source="BUGZILLA"/>
		<reference ref_id="1099658" ref_url="https://bugzilla.suse.com/1099658" source="BUGZILLA"/>
		<reference ref_id="1103186" ref_url="https://bugzilla.suse.com/1103186" source="BUGZILLA"/>
		<reference ref_id="1103259" ref_url="https://bugzilla.suse.com/1103259" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1106011" ref_url="https://bugzilla.suse.com/1106011" source="BUGZILLA"/>
		<reference ref_id="1106284" ref_url="https://bugzilla.suse.com/1106284" source="BUGZILLA"/>
		<reference ref_id="1108193" ref_url="https://bugzilla.suse.com/1108193" source="BUGZILLA"/>
		<reference ref_id="1108838" ref_url="https://bugzilla.suse.com/1108838" source="BUGZILLA"/>
		<reference ref_id="1108937" ref_url="https://bugzilla.suse.com/1108937" source="BUGZILLA"/>
		<reference ref_id="1110946" ref_url="https://bugzilla.suse.com/1110946" source="BUGZILLA"/>
		<reference ref_id="1111331" ref_url="https://bugzilla.suse.com/1111331" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1111696" ref_url="https://bugzilla.suse.com/1111696" source="BUGZILLA"/>
		<reference ref_id="1112063" ref_url="https://bugzilla.suse.com/1112063" source="BUGZILLA"/>
		<reference ref_id="1112128" ref_url="https://bugzilla.suse.com/1112128" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114427" ref_url="https://bugzilla.suse.com/1114427" source="BUGZILLA"/>
		<reference ref_id="1114542" ref_url="https://bugzilla.suse.com/1114542" source="BUGZILLA"/>
		<reference ref_id="1114638" ref_url="https://bugzilla.suse.com/1114638" source="BUGZILLA"/>
		<reference ref_id="1115688" ref_url="https://bugzilla.suse.com/1115688" source="BUGZILLA"/>
		<reference ref_id="1117114" ref_url="https://bugzilla.suse.com/1117114" source="BUGZILLA"/>
		<reference ref_id="1117158" ref_url="https://bugzilla.suse.com/1117158" source="BUGZILLA"/>
		<reference ref_id="1117561" ref_url="https://bugzilla.suse.com/1117561" source="BUGZILLA"/>
		<reference ref_id="1118139" ref_url="https://bugzilla.suse.com/1118139" source="BUGZILLA"/>
		<reference ref_id="1119680" ref_url="https://bugzilla.suse.com/1119680" source="BUGZILLA"/>
		<reference ref_id="1119843" ref_url="https://bugzilla.suse.com/1119843" source="BUGZILLA"/>
		<reference ref_id="1120091" ref_url="https://bugzilla.suse.com/1120091" source="BUGZILLA"/>
		<reference ref_id="1120318" ref_url="https://bugzilla.suse.com/1120318" source="BUGZILLA"/>
		<reference ref_id="1120423" ref_url="https://bugzilla.suse.com/1120423" source="BUGZILLA"/>
		<reference ref_id="1120566" ref_url="https://bugzilla.suse.com/1120566" source="BUGZILLA"/>
		<reference ref_id="1120843" ref_url="https://bugzilla.suse.com/1120843" source="BUGZILLA"/>
		<reference ref_id="1120902" ref_url="https://bugzilla.suse.com/1120902" source="BUGZILLA"/>
		<reference ref_id="1122767" ref_url="https://bugzilla.suse.com/1122767" source="BUGZILLA"/>
		<reference ref_id="1122776" ref_url="https://bugzilla.suse.com/1122776" source="BUGZILLA"/>
		<reference ref_id="1123454" ref_url="https://bugzilla.suse.com/1123454" source="BUGZILLA"/>
		<reference ref_id="1123663" ref_url="https://bugzilla.suse.com/1123663" source="BUGZILLA"/>
		<reference ref_id="1124503" ref_url="https://bugzilla.suse.com/1124503" source="BUGZILLA"/>
		<reference ref_id="1124839" ref_url="https://bugzilla.suse.com/1124839" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1126356" ref_url="https://bugzilla.suse.com/1126356" source="BUGZILLA"/>
		<reference ref_id="1126704" ref_url="https://bugzilla.suse.com/1126704" source="BUGZILLA"/>
		<reference ref_id="1127175" ref_url="https://bugzilla.suse.com/1127175" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1127374" ref_url="https://bugzilla.suse.com/1127374" source="BUGZILLA"/>
		<reference ref_id="1127616" ref_url="https://bugzilla.suse.com/1127616" source="BUGZILLA"/>
		<reference ref_id="1128052" ref_url="https://bugzilla.suse.com/1128052" source="BUGZILLA"/>
		<reference ref_id="1128415" ref_url="https://bugzilla.suse.com/1128415" source="BUGZILLA"/>
		<reference ref_id="1128544" ref_url="https://bugzilla.suse.com/1128544" source="BUGZILLA"/>
		<reference ref_id="1128904" ref_url="https://bugzilla.suse.com/1128904" source="BUGZILLA"/>
		<reference ref_id="1128971" ref_url="https://bugzilla.suse.com/1128971" source="BUGZILLA"/>
		<reference ref_id="1128979" ref_url="https://bugzilla.suse.com/1128979" source="BUGZILLA"/>
		<reference ref_id="1129138" ref_url="https://bugzilla.suse.com/1129138" source="BUGZILLA"/>
		<reference ref_id="1129273" ref_url="https://bugzilla.suse.com/1129273" source="BUGZILLA"/>
		<reference ref_id="1129497" ref_url="https://bugzilla.suse.com/1129497" source="BUGZILLA"/>
		<reference ref_id="1129693" ref_url="https://bugzilla.suse.com/1129693" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1129845" ref_url="https://bugzilla.suse.com/1129845" source="BUGZILLA"/>
		<reference ref_id="1130195" ref_url="https://bugzilla.suse.com/1130195" source="BUGZILLA"/>
		<reference ref_id="1130425" ref_url="https://bugzilla.suse.com/1130425" source="BUGZILLA"/>
		<reference ref_id="1130527" ref_url="https://bugzilla.suse.com/1130527" source="BUGZILLA"/>
		<reference ref_id="1130567" ref_url="https://bugzilla.suse.com/1130567" source="BUGZILLA"/>
		<reference ref_id="1130579" ref_url="https://bugzilla.suse.com/1130579" source="BUGZILLA"/>
		<reference ref_id="1130699" ref_url="https://bugzilla.suse.com/1130699" source="BUGZILLA"/>
		<reference ref_id="1130937" ref_url="https://bugzilla.suse.com/1130937" source="BUGZILLA"/>
		<reference ref_id="1130972" ref_url="https://bugzilla.suse.com/1130972" source="BUGZILLA"/>
		<reference ref_id="1131326" ref_url="https://bugzilla.suse.com/1131326" source="BUGZILLA"/>
		<reference ref_id="1131427" ref_url="https://bugzilla.suse.com/1131427" source="BUGZILLA"/>
		<reference ref_id="1131438" ref_url="https://bugzilla.suse.com/1131438" source="BUGZILLA"/>
		<reference ref_id="1131451" ref_url="https://bugzilla.suse.com/1131451" source="BUGZILLA"/>
		<reference ref_id="1131467" ref_url="https://bugzilla.suse.com/1131467" source="BUGZILLA"/>
		<reference ref_id="1131488" ref_url="https://bugzilla.suse.com/1131488" source="BUGZILLA"/>
		<reference ref_id="1131530" ref_url="https://bugzilla.suse.com/1131530" source="BUGZILLA"/>
		<reference ref_id="1131565" ref_url="https://bugzilla.suse.com/1131565" source="BUGZILLA"/>
		<reference ref_id="1131574" ref_url="https://bugzilla.suse.com/1131574" source="BUGZILLA"/>
		<reference ref_id="1131587" ref_url="https://bugzilla.suse.com/1131587" source="BUGZILLA"/>
		<reference ref_id="1131659" ref_url="https://bugzilla.suse.com/1131659" source="BUGZILLA"/>
		<reference ref_id="1131673" ref_url="https://bugzilla.suse.com/1131673" source="BUGZILLA"/>
		<reference ref_id="1131847" ref_url="https://bugzilla.suse.com/1131847" source="BUGZILLA"/>
		<reference ref_id="1131848" ref_url="https://bugzilla.suse.com/1131848" source="BUGZILLA"/>
		<reference ref_id="1131851" ref_url="https://bugzilla.suse.com/1131851" source="BUGZILLA"/>
		<reference ref_id="1131900" ref_url="https://bugzilla.suse.com/1131900" source="BUGZILLA"/>
		<reference ref_id="1131934" ref_url="https://bugzilla.suse.com/1131934" source="BUGZILLA"/>
		<reference ref_id="1131935" ref_url="https://bugzilla.suse.com/1131935" source="BUGZILLA"/>
		<reference ref_id="1132044" ref_url="https://bugzilla.suse.com/1132044" source="BUGZILLA"/>
		<reference ref_id="1132219" ref_url="https://bugzilla.suse.com/1132219" source="BUGZILLA"/>
		<reference ref_id="1132226" ref_url="https://bugzilla.suse.com/1132226" source="BUGZILLA"/>
		<reference ref_id="1132227" ref_url="https://bugzilla.suse.com/1132227" source="BUGZILLA"/>
		<reference ref_id="1132365" ref_url="https://bugzilla.suse.com/1132365" source="BUGZILLA"/>
		<reference ref_id="1132368" ref_url="https://bugzilla.suse.com/1132368" source="BUGZILLA"/>
		<reference ref_id="1132369" ref_url="https://bugzilla.suse.com/1132369" source="BUGZILLA"/>
		<reference ref_id="1132370" ref_url="https://bugzilla.suse.com/1132370" source="BUGZILLA"/>
		<reference ref_id="1132372" ref_url="https://bugzilla.suse.com/1132372" source="BUGZILLA"/>
		<reference ref_id="1132373" ref_url="https://bugzilla.suse.com/1132373" source="BUGZILLA"/>
		<reference ref_id="1132384" ref_url="https://bugzilla.suse.com/1132384" source="BUGZILLA"/>
		<reference ref_id="1132397" ref_url="https://bugzilla.suse.com/1132397" source="BUGZILLA"/>
		<reference ref_id="1132402" ref_url="https://bugzilla.suse.com/1132402" source="BUGZILLA"/>
		<reference ref_id="1132403" ref_url="https://bugzilla.suse.com/1132403" source="BUGZILLA"/>
		<reference ref_id="1132404" ref_url="https://bugzilla.suse.com/1132404" source="BUGZILLA"/>
		<reference ref_id="1132405" ref_url="https://bugzilla.suse.com/1132405" source="BUGZILLA"/>
		<reference ref_id="1132407" ref_url="https://bugzilla.suse.com/1132407" source="BUGZILLA"/>
		<reference ref_id="1132411" ref_url="https://bugzilla.suse.com/1132411" source="BUGZILLA"/>
		<reference ref_id="1132412" ref_url="https://bugzilla.suse.com/1132412" source="BUGZILLA"/>
		<reference ref_id="1132413" ref_url="https://bugzilla.suse.com/1132413" source="BUGZILLA"/>
		<reference ref_id="1132414" ref_url="https://bugzilla.suse.com/1132414" source="BUGZILLA"/>
		<reference ref_id="1132426" ref_url="https://bugzilla.suse.com/1132426" source="BUGZILLA"/>
		<reference ref_id="1132527" ref_url="https://bugzilla.suse.com/1132527" source="BUGZILLA"/>
		<reference ref_id="1132531" ref_url="https://bugzilla.suse.com/1132531" source="BUGZILLA"/>
		<reference ref_id="1132555" ref_url="https://bugzilla.suse.com/1132555" source="BUGZILLA"/>
		<reference ref_id="1132558" ref_url="https://bugzilla.suse.com/1132558" source="BUGZILLA"/>
		<reference ref_id="1132561" ref_url="https://bugzilla.suse.com/1132561" source="BUGZILLA"/>
		<reference ref_id="1132562" ref_url="https://bugzilla.suse.com/1132562" source="BUGZILLA"/>
		<reference ref_id="1132563" ref_url="https://bugzilla.suse.com/1132563" source="BUGZILLA"/>
		<reference ref_id="1132564" ref_url="https://bugzilla.suse.com/1132564" source="BUGZILLA"/>
		<reference ref_id="1132570" ref_url="https://bugzilla.suse.com/1132570" source="BUGZILLA"/>
		<reference ref_id="1132571" ref_url="https://bugzilla.suse.com/1132571" source="BUGZILLA"/>
		<reference ref_id="1132572" ref_url="https://bugzilla.suse.com/1132572" source="BUGZILLA"/>
		<reference ref_id="1132589" ref_url="https://bugzilla.suse.com/1132589" source="BUGZILLA"/>
		<reference ref_id="1132618" ref_url="https://bugzilla.suse.com/1132618" source="BUGZILLA"/>
		<reference ref_id="1132673" ref_url="https://bugzilla.suse.com/1132673" source="BUGZILLA"/>
		<reference ref_id="1132681" ref_url="https://bugzilla.suse.com/1132681" source="BUGZILLA"/>
		<reference ref_id="1132726" ref_url="https://bugzilla.suse.com/1132726" source="BUGZILLA"/>
		<reference ref_id="1132828" ref_url="https://bugzilla.suse.com/1132828" source="BUGZILLA"/>
		<reference ref_id="1132894" ref_url="https://bugzilla.suse.com/1132894" source="BUGZILLA"/>
		<reference ref_id="1132943" ref_url="https://bugzilla.suse.com/1132943" source="BUGZILLA"/>
		<reference ref_id="1132982" ref_url="https://bugzilla.suse.com/1132982" source="BUGZILLA"/>
		<reference ref_id="1133005" ref_url="https://bugzilla.suse.com/1133005" source="BUGZILLA"/>
		<reference ref_id="1133016" ref_url="https://bugzilla.suse.com/1133016" source="BUGZILLA"/>
		<reference ref_id="1133094" ref_url="https://bugzilla.suse.com/1133094" source="BUGZILLA"/>
		<reference ref_id="1133095" ref_url="https://bugzilla.suse.com/1133095" source="BUGZILLA"/>
		<reference ref_id="1133115" ref_url="https://bugzilla.suse.com/1133115" source="BUGZILLA"/>
		<reference ref_id="1133149" ref_url="https://bugzilla.suse.com/1133149" source="BUGZILLA"/>
		<reference ref_id="1133176" ref_url="https://bugzilla.suse.com/1133176" source="BUGZILLA"/>
		<reference ref_id="1133188" ref_url="https://bugzilla.suse.com/1133188" source="BUGZILLA"/>
		<reference ref_id="1133190" ref_url="https://bugzilla.suse.com/1133190" source="BUGZILLA"/>
		<reference ref_id="1133320" ref_url="https://bugzilla.suse.com/1133320" source="BUGZILLA"/>
		<reference ref_id="1133486" ref_url="https://bugzilla.suse.com/1133486" source="BUGZILLA"/>
		<reference ref_id="1133529" ref_url="https://bugzilla.suse.com/1133529" source="BUGZILLA"/>
		<reference ref_id="1133547" ref_url="https://bugzilla.suse.com/1133547" source="BUGZILLA"/>
		<reference ref_id="1133584" ref_url="https://bugzilla.suse.com/1133584" source="BUGZILLA"/>
		<reference ref_id="1133593" ref_url="https://bugzilla.suse.com/1133593" source="BUGZILLA"/>
		<reference ref_id="1133612" ref_url="https://bugzilla.suse.com/1133612" source="BUGZILLA"/>
		<reference ref_id="1133616" ref_url="https://bugzilla.suse.com/1133616" source="BUGZILLA"/>
		<reference ref_id="1133667" ref_url="https://bugzilla.suse.com/1133667" source="BUGZILLA"/>
		<reference ref_id="1133668" ref_url="https://bugzilla.suse.com/1133668" source="BUGZILLA"/>
		<reference ref_id="1133672" ref_url="https://bugzilla.suse.com/1133672" source="BUGZILLA"/>
		<reference ref_id="1133674" ref_url="https://bugzilla.suse.com/1133674" source="BUGZILLA"/>
		<reference ref_id="1133675" ref_url="https://bugzilla.suse.com/1133675" source="BUGZILLA"/>
		<reference ref_id="1133698" ref_url="https://bugzilla.suse.com/1133698" source="BUGZILLA"/>
		<reference ref_id="1133702" ref_url="https://bugzilla.suse.com/1133702" source="BUGZILLA"/>
		<reference ref_id="1133731" ref_url="https://bugzilla.suse.com/1133731" source="BUGZILLA"/>
		<reference ref_id="1133769" ref_url="https://bugzilla.suse.com/1133769" source="BUGZILLA"/>
		<reference ref_id="1133772" ref_url="https://bugzilla.suse.com/1133772" source="BUGZILLA"/>
		<reference ref_id="1133774" ref_url="https://bugzilla.suse.com/1133774" source="BUGZILLA"/>
		<reference ref_id="1133778" ref_url="https://bugzilla.suse.com/1133778" source="BUGZILLA"/>
		<reference ref_id="1133779" ref_url="https://bugzilla.suse.com/1133779" source="BUGZILLA"/>
		<reference ref_id="1133780" ref_url="https://bugzilla.suse.com/1133780" source="BUGZILLA"/>
		<reference ref_id="1133825" ref_url="https://bugzilla.suse.com/1133825" source="BUGZILLA"/>
		<reference ref_id="1133850" ref_url="https://bugzilla.suse.com/1133850" source="BUGZILLA"/>
		<reference ref_id="1133851" ref_url="https://bugzilla.suse.com/1133851" source="BUGZILLA"/>
		<reference ref_id="1133852" ref_url="https://bugzilla.suse.com/1133852" source="BUGZILLA"/>
		<reference ref_id="1133897" ref_url="https://bugzilla.suse.com/1133897" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1134160" ref_url="https://bugzilla.suse.com/1134160" source="BUGZILLA"/>
		<reference ref_id="1134162" ref_url="https://bugzilla.suse.com/1134162" source="BUGZILLA"/>
		<reference ref_id="1134199" ref_url="https://bugzilla.suse.com/1134199" source="BUGZILLA"/>
		<reference ref_id="1134200" ref_url="https://bugzilla.suse.com/1134200" source="BUGZILLA"/>
		<reference ref_id="1134201" ref_url="https://bugzilla.suse.com/1134201" source="BUGZILLA"/>
		<reference ref_id="1134202" ref_url="https://bugzilla.suse.com/1134202" source="BUGZILLA"/>
		<reference ref_id="1134203" ref_url="https://bugzilla.suse.com/1134203" source="BUGZILLA"/>
		<reference ref_id="1134204" ref_url="https://bugzilla.suse.com/1134204" source="BUGZILLA"/>
		<reference ref_id="1134205" ref_url="https://bugzilla.suse.com/1134205" source="BUGZILLA"/>
		<reference ref_id="1134223" ref_url="https://bugzilla.suse.com/1134223" source="BUGZILLA"/>
		<reference ref_id="1134354" ref_url="https://bugzilla.suse.com/1134354" source="BUGZILLA"/>
		<reference ref_id="1134393" ref_url="https://bugzilla.suse.com/1134393" source="BUGZILLA"/>
		<reference ref_id="1134397" ref_url="https://bugzilla.suse.com/1134397" source="BUGZILLA"/>
		<reference ref_id="1134459" ref_url="https://bugzilla.suse.com/1134459" source="BUGZILLA"/>
		<reference ref_id="1134460" ref_url="https://bugzilla.suse.com/1134460" source="BUGZILLA"/>
		<reference ref_id="1134461" ref_url="https://bugzilla.suse.com/1134461" source="BUGZILLA"/>
		<reference ref_id="1134597" ref_url="https://bugzilla.suse.com/1134597" source="BUGZILLA"/>
		<reference ref_id="1134600" ref_url="https://bugzilla.suse.com/1134600" source="BUGZILLA"/>
		<reference ref_id="1134607" ref_url="https://bugzilla.suse.com/1134607" source="BUGZILLA"/>
		<reference ref_id="1134618" ref_url="https://bugzilla.suse.com/1134618" source="BUGZILLA"/>
		<reference ref_id="1134651" ref_url="https://bugzilla.suse.com/1134651" source="BUGZILLA"/>
		<reference ref_id="1134671" ref_url="https://bugzilla.suse.com/1134671" source="BUGZILLA"/>
		<reference ref_id="1134760" ref_url="https://bugzilla.suse.com/1134760" source="BUGZILLA"/>
		<reference ref_id="1134806" ref_url="https://bugzilla.suse.com/1134806" source="BUGZILLA"/>
		<reference ref_id="1134810" ref_url="https://bugzilla.suse.com/1134810" source="BUGZILLA"/>
		<reference ref_id="1134813" ref_url="https://bugzilla.suse.com/1134813" source="BUGZILLA"/>
		<reference ref_id="1134848" ref_url="https://bugzilla.suse.com/1134848" source="BUGZILLA"/>
		<reference ref_id="1134936" ref_url="https://bugzilla.suse.com/1134936" source="BUGZILLA"/>
		<reference ref_id="1134945" ref_url="https://bugzilla.suse.com/1134945" source="BUGZILLA"/>
		<reference ref_id="1134946" ref_url="https://bugzilla.suse.com/1134946" source="BUGZILLA"/>
		<reference ref_id="1134947" ref_url="https://bugzilla.suse.com/1134947" source="BUGZILLA"/>
		<reference ref_id="1134948" ref_url="https://bugzilla.suse.com/1134948" source="BUGZILLA"/>
		<reference ref_id="1134949" ref_url="https://bugzilla.suse.com/1134949" source="BUGZILLA"/>
		<reference ref_id="1134950" ref_url="https://bugzilla.suse.com/1134950" source="BUGZILLA"/>
		<reference ref_id="1134951" ref_url="https://bugzilla.suse.com/1134951" source="BUGZILLA"/>
		<reference ref_id="1134952" ref_url="https://bugzilla.suse.com/1134952" source="BUGZILLA"/>
		<reference ref_id="1134953" ref_url="https://bugzilla.suse.com/1134953" source="BUGZILLA"/>
		<reference ref_id="1134972" ref_url="https://bugzilla.suse.com/1134972" source="BUGZILLA"/>
		<reference ref_id="1134974" ref_url="https://bugzilla.suse.com/1134974" source="BUGZILLA"/>
		<reference ref_id="1134975" ref_url="https://bugzilla.suse.com/1134975" source="BUGZILLA"/>
		<reference ref_id="1134980" ref_url="https://bugzilla.suse.com/1134980" source="BUGZILLA"/>
		<reference ref_id="1134981" ref_url="https://bugzilla.suse.com/1134981" source="BUGZILLA"/>
		<reference ref_id="1134983" ref_url="https://bugzilla.suse.com/1134983" source="BUGZILLA"/>
		<reference ref_id="1134987" ref_url="https://bugzilla.suse.com/1134987" source="BUGZILLA"/>
		<reference ref_id="1134989" ref_url="https://bugzilla.suse.com/1134989" source="BUGZILLA"/>
		<reference ref_id="1134990" ref_url="https://bugzilla.suse.com/1134990" source="BUGZILLA"/>
		<reference ref_id="1134994" ref_url="https://bugzilla.suse.com/1134994" source="BUGZILLA"/>
		<reference ref_id="1134995" ref_url="https://bugzilla.suse.com/1134995" source="BUGZILLA"/>
		<reference ref_id="1134998" ref_url="https://bugzilla.suse.com/1134998" source="BUGZILLA"/>
		<reference ref_id="1134999" ref_url="https://bugzilla.suse.com/1134999" source="BUGZILLA"/>
		<reference ref_id="1135006" ref_url="https://bugzilla.suse.com/1135006" source="BUGZILLA"/>
		<reference ref_id="1135007" ref_url="https://bugzilla.suse.com/1135007" source="BUGZILLA"/>
		<reference ref_id="1135008" ref_url="https://bugzilla.suse.com/1135008" source="BUGZILLA"/>
		<reference ref_id="1135018" ref_url="https://bugzilla.suse.com/1135018" source="BUGZILLA"/>
		<reference ref_id="1135021" ref_url="https://bugzilla.suse.com/1135021" source="BUGZILLA"/>
		<reference ref_id="1135024" ref_url="https://bugzilla.suse.com/1135024" source="BUGZILLA"/>
		<reference ref_id="1135026" ref_url="https://bugzilla.suse.com/1135026" source="BUGZILLA"/>
		<reference ref_id="1135027" ref_url="https://bugzilla.suse.com/1135027" source="BUGZILLA"/>
		<reference ref_id="1135028" ref_url="https://bugzilla.suse.com/1135028" source="BUGZILLA"/>
		<reference ref_id="1135029" ref_url="https://bugzilla.suse.com/1135029" source="BUGZILLA"/>
		<reference ref_id="1135031" ref_url="https://bugzilla.suse.com/1135031" source="BUGZILLA"/>
		<reference ref_id="1135033" ref_url="https://bugzilla.suse.com/1135033" source="BUGZILLA"/>
		<reference ref_id="1135034" ref_url="https://bugzilla.suse.com/1135034" source="BUGZILLA"/>
		<reference ref_id="1135035" ref_url="https://bugzilla.suse.com/1135035" source="BUGZILLA"/>
		<reference ref_id="1135036" ref_url="https://bugzilla.suse.com/1135036" source="BUGZILLA"/>
		<reference ref_id="1135037" ref_url="https://bugzilla.suse.com/1135037" source="BUGZILLA"/>
		<reference ref_id="1135038" ref_url="https://bugzilla.suse.com/1135038" source="BUGZILLA"/>
		<reference ref_id="1135039" ref_url="https://bugzilla.suse.com/1135039" source="BUGZILLA"/>
		<reference ref_id="1135041" ref_url="https://bugzilla.suse.com/1135041" source="BUGZILLA"/>
		<reference ref_id="1135042" ref_url="https://bugzilla.suse.com/1135042" source="BUGZILLA"/>
		<reference ref_id="1135044" ref_url="https://bugzilla.suse.com/1135044" source="BUGZILLA"/>
		<reference ref_id="1135045" ref_url="https://bugzilla.suse.com/1135045" source="BUGZILLA"/>
		<reference ref_id="1135046" ref_url="https://bugzilla.suse.com/1135046" source="BUGZILLA"/>
		<reference ref_id="1135047" ref_url="https://bugzilla.suse.com/1135047" source="BUGZILLA"/>
		<reference ref_id="1135049" ref_url="https://bugzilla.suse.com/1135049" source="BUGZILLA"/>
		<reference ref_id="1135051" ref_url="https://bugzilla.suse.com/1135051" source="BUGZILLA"/>
		<reference ref_id="1135052" ref_url="https://bugzilla.suse.com/1135052" source="BUGZILLA"/>
		<reference ref_id="1135053" ref_url="https://bugzilla.suse.com/1135053" source="BUGZILLA"/>
		<reference ref_id="1135055" ref_url="https://bugzilla.suse.com/1135055" source="BUGZILLA"/>
		<reference ref_id="1135056" ref_url="https://bugzilla.suse.com/1135056" source="BUGZILLA"/>
		<reference ref_id="1135058" ref_url="https://bugzilla.suse.com/1135058" source="BUGZILLA"/>
		<reference ref_id="1135100" ref_url="https://bugzilla.suse.com/1135100" source="BUGZILLA"/>
		<reference ref_id="1135120" ref_url="https://bugzilla.suse.com/1135120" source="BUGZILLA"/>
		<reference ref_id="1135278" ref_url="https://bugzilla.suse.com/1135278" source="BUGZILLA"/>
		<reference ref_id="1135281" ref_url="https://bugzilla.suse.com/1135281" source="BUGZILLA"/>
		<reference ref_id="1135309" ref_url="https://bugzilla.suse.com/1135309" source="BUGZILLA"/>
		<reference ref_id="1135312" ref_url="https://bugzilla.suse.com/1135312" source="BUGZILLA"/>
		<reference ref_id="1135314" ref_url="https://bugzilla.suse.com/1135314" source="BUGZILLA"/>
		<reference ref_id="1135315" ref_url="https://bugzilla.suse.com/1135315" source="BUGZILLA"/>
		<reference ref_id="1135316" ref_url="https://bugzilla.suse.com/1135316" source="BUGZILLA"/>
		<reference ref_id="1135320" ref_url="https://bugzilla.suse.com/1135320" source="BUGZILLA"/>
		<reference ref_id="1135323" ref_url="https://bugzilla.suse.com/1135323" source="BUGZILLA"/>
		<reference ref_id="1135330" ref_url="https://bugzilla.suse.com/1135330" source="BUGZILLA"/>
		<reference ref_id="1135492" ref_url="https://bugzilla.suse.com/1135492" source="BUGZILLA"/>
		<reference ref_id="1135542" ref_url="https://bugzilla.suse.com/1135542" source="BUGZILLA"/>
		<reference ref_id="1135556" ref_url="https://bugzilla.suse.com/1135556" source="BUGZILLA"/>
		<reference ref_id="1135603" ref_url="https://bugzilla.suse.com/1135603" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135661" ref_url="https://bugzilla.suse.com/1135661" source="BUGZILLA"/>
		<reference ref_id="1135758" ref_url="https://bugzilla.suse.com/1135758" source="BUGZILLA"/>
		<reference ref_id="1136188" ref_url="https://bugzilla.suse.com/1136188" source="BUGZILLA"/>
		<reference ref_id="1136206" ref_url="https://bugzilla.suse.com/1136206" source="BUGZILLA"/>
		<reference ref_id="1136215" ref_url="https://bugzilla.suse.com/1136215" source="BUGZILLA"/>
		<reference ref_id="1136345" ref_url="https://bugzilla.suse.com/1136345" source="BUGZILLA"/>
		<reference ref_id="1136347" ref_url="https://bugzilla.suse.com/1136347" source="BUGZILLA"/>
		<reference ref_id="1136348" ref_url="https://bugzilla.suse.com/1136348" source="BUGZILLA"/>
		<reference ref_id="1136353" ref_url="https://bugzilla.suse.com/1136353" source="BUGZILLA"/>
		<reference ref_id="1136424" ref_url="https://bugzilla.suse.com/1136424" source="BUGZILLA"/>
		<reference ref_id="1136428" ref_url="https://bugzilla.suse.com/1136428" source="BUGZILLA"/>
		<reference ref_id="1136430" ref_url="https://bugzilla.suse.com/1136430" source="BUGZILLA"/>
		<reference ref_id="1136432" ref_url="https://bugzilla.suse.com/1136432" source="BUGZILLA"/>
		<reference ref_id="1136434" ref_url="https://bugzilla.suse.com/1136434" source="BUGZILLA"/>
		<reference ref_id="1136435" ref_url="https://bugzilla.suse.com/1136435" source="BUGZILLA"/>
		<reference ref_id="1136438" ref_url="https://bugzilla.suse.com/1136438" source="BUGZILLA"/>
		<reference ref_id="1136439" ref_url="https://bugzilla.suse.com/1136439" source="BUGZILLA"/>
		<reference ref_id="1136456" ref_url="https://bugzilla.suse.com/1136456" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1136469" ref_url="https://bugzilla.suse.com/1136469" source="BUGZILLA"/>
		<reference ref_id="1136477" ref_url="https://bugzilla.suse.com/1136477" source="BUGZILLA"/>
		<reference ref_id="1136478" ref_url="https://bugzilla.suse.com/1136478" source="BUGZILLA"/>
		<reference ref_id="1136498" ref_url="https://bugzilla.suse.com/1136498" source="BUGZILLA"/>
		<reference ref_id="1136573" ref_url="https://bugzilla.suse.com/1136573" source="BUGZILLA"/>
		<reference ref_id="1136586" ref_url="https://bugzilla.suse.com/1136586" source="BUGZILLA"/>
		<reference ref_id="1136881" ref_url="https://bugzilla.suse.com/1136881" source="BUGZILLA"/>
		<reference ref_id="1136935" ref_url="https://bugzilla.suse.com/1136935" source="BUGZILLA"/>
		<reference ref_id="1136990" ref_url="https://bugzilla.suse.com/1136990" source="BUGZILLA"/>
		<reference ref_id="1137151" ref_url="https://bugzilla.suse.com/1137151" source="BUGZILLA"/>
		<reference ref_id="1137152" ref_url="https://bugzilla.suse.com/1137152" source="BUGZILLA"/>
		<reference ref_id="1137153" ref_url="https://bugzilla.suse.com/1137153" source="BUGZILLA"/>
		<reference ref_id="1137162" ref_url="https://bugzilla.suse.com/1137162" source="BUGZILLA"/>
		<reference ref_id="1137201" ref_url="https://bugzilla.suse.com/1137201" source="BUGZILLA"/>
		<reference ref_id="1137224" ref_url="https://bugzilla.suse.com/1137224" source="BUGZILLA"/>
		<reference ref_id="1137232" ref_url="https://bugzilla.suse.com/1137232" source="BUGZILLA"/>
		<reference ref_id="1137233" ref_url="https://bugzilla.suse.com/1137233" source="BUGZILLA"/>
		<reference ref_id="1137236" ref_url="https://bugzilla.suse.com/1137236" source="BUGZILLA"/>
		<reference ref_id="1137372" ref_url="https://bugzilla.suse.com/1137372" source="BUGZILLA"/>
		<reference ref_id="1137429" ref_url="https://bugzilla.suse.com/1137429" source="BUGZILLA"/>
		<reference ref_id="1137444" ref_url="https://bugzilla.suse.com/1137444" source="BUGZILLA"/>
		<reference ref_id="1137586" ref_url="https://bugzilla.suse.com/1137586" source="BUGZILLA"/>
		<reference ref_id="1137739" ref_url="https://bugzilla.suse.com/1137739" source="BUGZILLA"/>
		<reference ref_id="1137752" ref_url="https://bugzilla.suse.com/1137752" source="BUGZILLA"/>
		<reference ref_id="1138291" ref_url="https://bugzilla.suse.com/1138291" source="BUGZILLA"/>
		<reference ref_id="1138293" ref_url="https://bugzilla.suse.com/1138293" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126/" source="CVE"/>
		<reference ref_id="CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127/" source="CVE"/>
		<reference ref_id="CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130/" source="CVE"/>
		<reference ref_id="CVE-2018-16880" ref_url="https://www.suse.com/security/cve/CVE-2018-16880/" source="CVE"/>
		<reference ref_id="CVE-2018-7191" ref_url="https://www.suse.com/security/cve/CVE-2018-7191/" source="CVE"/>
		<reference ref_id="CVE-2019-10124" ref_url="https://www.suse.com/security/cve/CVE-2019-10124/" source="CVE"/>
		<reference ref_id="CVE-2019-11085" ref_url="https://www.suse.com/security/cve/CVE-2019-11085/" source="CVE"/>
		<reference ref_id="CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091/" source="CVE"/>
		<reference ref_id="CVE-2019-11477" ref_url="https://www.suse.com/security/cve/CVE-2019-11477/" source="CVE"/>
		<reference ref_id="CVE-2019-11478" ref_url="https://www.suse.com/security/cve/CVE-2019-11478/" source="CVE"/>
		<reference ref_id="CVE-2019-11479" ref_url="https://www.suse.com/security/cve/CVE-2019-11479/" source="CVE"/>
		<reference ref_id="CVE-2019-11486" ref_url="https://www.suse.com/security/cve/CVE-2019-11486/" source="CVE"/>
		<reference ref_id="CVE-2019-11487" ref_url="https://www.suse.com/security/cve/CVE-2019-11487/" source="CVE"/>
		<reference ref_id="CVE-2019-11811" ref_url="https://www.suse.com/security/cve/CVE-2019-11811/" source="CVE"/>
		<reference ref_id="CVE-2019-11815" ref_url="https://www.suse.com/security/cve/CVE-2019-11815/" source="CVE"/>
		<reference ref_id="CVE-2019-11833" ref_url="https://www.suse.com/security/cve/CVE-2019-11833/" source="CVE"/>
		<reference ref_id="CVE-2019-11884" ref_url="https://www.suse.com/security/cve/CVE-2019-11884/" source="CVE"/>
		<reference ref_id="CVE-2019-12382" ref_url="https://www.suse.com/security/cve/CVE-2019-12382/" source="CVE"/>
		<reference ref_id="CVE-2019-12818" ref_url="https://www.suse.com/security/cve/CVE-2019-12818/" source="CVE"/>
		<reference ref_id="CVE-2019-12819" ref_url="https://www.suse.com/security/cve/CVE-2019-12819/" source="CVE"/>
		<reference ref_id="CVE-2019-3846" ref_url="https://www.suse.com/security/cve/CVE-2019-3846/" source="CVE"/>
		<reference ref_id="CVE-2019-3882" ref_url="https://www.suse.com/security/cve/CVE-2019-3882/" source="CVE"/>
		<reference ref_id="CVE-2019-5489" ref_url="https://www.suse.com/security/cve/CVE-2019-5489/" source="CVE"/>
		<reference ref_id="CVE-2019-8564" ref_url="https://www.suse.com/security/cve/CVE-2019-8564/" source="CVE"/>
		<reference ref_id="CVE-2019-9003" ref_url="https://www.suse.com/security/cve/CVE-2019-9003/" source="CVE"/>
		<reference ref_id="CVE-2019-9500" ref_url="https://www.suse.com/security/cve/CVE-2019-9500/" source="CVE"/>
		<reference ref_id="CVE-2019-9503" ref_url="https://www.suse.com/security/cve/CVE-2019-9503/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005581.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2019-12819: The function __mdiobus_register() called put_device(), which
  triggered a fixed_mdio_bus_init use-after-free. This would cause a denial of
  service. (bsc#1138291)

- CVE-2019-12818: The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c
  may return NULL. If the caller does not check for this, it will trigger a
  NULL pointer dereference. This will cause denial of service. This used to
  affect nfc_llcp_build_gb in net/nfc/llcp_core.c. (bsc#1138293)

- CVE-2019-11477: A sequence of SACKs may have been crafted such that one can
  trigger an integer overflow, leading to a kernel panic.

- CVE-2019-11478: It was possible to send a crafted sequence of SACKs which
  will fragment the TCP retransmission queue. An attacker may have been able to
  further exploit the fragmented queue to cause an expensive linked-list walk
  for subsequent SACKs received for that same TCP connection.

- CVE-2019-11479: An attacker could force the Linux kernel to segment its
  responses into multiple TCP segments. This would drastically increased the
  bandwidth required to deliver the same amount of data. Further, it would
  consume additional resources such as CPU and NIC processing power.

- CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly
  escalate privileges was found in the mwifiex kernel module while connecting
  to a malicious wireless network. (bsc#1136424)

- CVE-2019-10124: An issue was discovered in the hwpoison implementation in
  mm/memory-failure.c in the Linux kernel. When soft_offline_in_use_page() runs
  on a thp tail page after pmd is split, an attacker could cause a denial of
  service (bsc#1130699, CVE-2019-10124).

- CVE-2019-12382: An issue was discovered in drm_load_edid_firmware in
  drivers/gpu/drm/drm_edid_load.c in the Linux kernel There was an unchecked
  kstrdup of fwstr, which might allow an attacker to cause a denial of service
  (NULL pointer dereference and system crash). (bsc#1136586)

- CVE-2019-11487: The Linux kernel allowed page reference count overflow, with
  resultant use-after-free issues, if about 140 GiB of RAM exists. This is
  related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h,
  include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c.
  It could occur with FUSE requests. (bbsc#1133190)

- CVE-2019-5489: The mincore() implementation in mm/mincore.c in the Linux
  kernel allowed local attackers to observe page cache access patterns of other
  processes on the same system, potentially allowing sniffing of secret
  information. (Fixing this affects the output of the fincore program.) Limited
  remote exploitation may be possible, as demonstrated by latency differences
  in accessing public files from an Apache HTTP Server. (bsc#1120843)

- CVE-2019-11833: fs/ext4/extents.c in the Linux kernel did not zero out the
  unused memory region in the extent tree block, which might allow local users
  to obtain sensitive information by reading uninitialized data in the
  filesystem. (bsc#1135281)

- CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM):
  Uncacheable memory on some microprocessors utilizing speculative execution
  may have allowed an authenticated user to potentially enable information
  disclosure via a side channel with local access. A list of impacted products
  can be found here:
  https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.
  (bsc##1111331)

- CVE-2018-7191: In the tun subsystem in the Linux kernel, dev_get_valid_name
  was not called before register_netdevice. This allowed local users to cause a
  denial of service (NULL pointer dereference and panic) via an
  ioctl(TUNSETIFF) call with a dev name containing a / character. (bsc#1135603)

- CVE-2018-12126 CVE-2018-12127 CVE-2018-12130: Microarchitectural Store Buffer
  Data Sampling (MSBDS): Stored buffers on some microprocessors utilizing
  speculative execution which may have allowed an authenticated user to
  potentially enable information disclosure via a side channel with local
  access. A list of impacted products can be found here:
  https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.
  (bsc#1103186)

- CVE-2019-11085: Insufficient input validation in Kernel Mode Driver in
  Intel(R) i915 Graphics for Linux may have allowed an authenticated user to
  potentially enable escalation of privilege via local access. (bsc#1135278)

- CVE-2019-11815: An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c
  in the Linux kernel There was a race condition leading to a use-after-free,
  related to net namespace cleanup. (bsc#1135278)

- CVE-2019-11884: The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c
  in the Linux kernel allowed a local user to obtain potentially sensitive
  information from kernel stack memory via a hidPCONNADD command, because a
  name field may not end with a '\0' character. (bsc#1134848)

- CVE-2019-11811: An issue was discovered in the Linux kernel There was a
  use-after-free upon attempted read access to /proc/ioports after the ipmi_si
  module was removed, related to drivers/char/ipmi/ipmi_si_intf.c,
  drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c.
  (bsc#1134397)

- CVE-2019-11486: The Siemens R3964 line discipline driver in
  drivers/tty/n_r3964.c in the Linux kernel has multiple race conditions.
  (bsc#1133188)

- CVE-2019-9003: In the Linux kernel, attackers could trigger a
  drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for
  certain simultaneous execution of the code, as demonstrated by a 'service
  ipmievd restart' loop. (bsc#1126704)

- CVE-2018-16880: A flaw was found in the Linux kernel's handle_rx() function
  in the [vhost_net] driver. A malicious virtual guest, under specific
  conditions, could trigger an out-of-bounds write in a kmalloc-8 slab on a
  virtual host which may have lead to a kernel memory corruption and a system
  panic. Due to the nature of the flaw, privilege escalation cannot be fully
  ruled out.(bsc#1122767)

- CVE-2019-9503: An issue was discoved which meant that brcmfmac frame
  validation could be bypassed. (bsc#1132828)

- CVE-2019-9500: An issue was discovered that lead to brcmfmac heap buffer
  overflow. (bsc#1132681)

- CVE-2019-8564: An issue was discoved which meant that brcmfmac frame
  validation could be bypassed. (bsc#1132673)

- CVE-2017-5753: Systems with microprocessors utilizing speculative execution
  and branch prediction may have allowed unauthorized disclosure of information
  to an attacker with local user access via a side-channel analysis.

- CVE-2019-3882: A flaw was found in the Linux kernel's vfio interface
  implementation that permitted violation of the user's locked memory limit. If
  a device was bound to a vfio driver, such as vfio-pci, and the local attacker
  is administratively granted ownership of the device, it may have caused a
  system memory exhaustion and thus a denial of service (DoS). (bsc#1131427)

The following non-security bugs were fixed:

- 9p locks: add mount option for lock retry interval (bsc#1051510).
- 9p: do not trust pdu content for stat item size (bsc#1051510).
- acpi / SBS: Fix GPE storm on recent MacBookPro's (bsc#1051510).
- acpi / utils: Drop reference in test for device presence (bsc#1051510).
- acpi, nfit: Prefer _DSM over _LSR for namespace label reads (bsc#1112128) (bsc#1132426).
- acpi: Add Hygon Dhyana support ().
- acpi: button: reinitialize button state upon resume (bsc#1051510).
- acpi: fix menuconfig presentation of acpi submenu (bsc#1117158).
- acpi: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle (bsc#1111666).
- acpi: property: restore _DSD data subnodes GUID comment (bsc#1111666).
- acpica: AML interpreter: add region addresses in global list during initialization (bsc#1051510).
- acpica: Namespace: remove address node from global list after method termination (bsc#1051510).
- alsa: core: Do not refer to snd_cards array directly (bsc#1051510).
- alsa: core: Fix card races between register and disconnect (bsc#1051510).
- alsa: emu10k1: Drop superfluous id-uniquification behavior (bsc#1051510).
- alsa: hda - Add two more machines to the power_save_blacklist (bsc#1051510).
- alsa: hda - Register irq handler after the chip initialization (bsc#1051510).
- alsa: hda - Use a macro for snd_array iteration loops (bsc#1051510).
- alsa: hda/hdmi - Consider eld_valid when reporting jack event (bsc#1051510).
- alsa: hda/hdmi - Read the pin sense from register when repolling (bsc#1051510).
- alsa: hda/realtek - Add new Dell platform for headset mode (bsc#1051510).
- alsa: hda/realtek - add two more pin configuration sets to quirk table (bsc#1051510).
- alsa: hda/realtek - Apply the fixup for ASUS Q325UAR (bsc#1051510).
- alsa: hda/realtek - Avoid superfluous COEF EAPD setups (bsc#1051510).
- alsa: hda/realtek - Corrected fixup for System76 Gazelle (gaze14) (bsc#1051510).
- alsa: hda/realtek - EAPD turn on later (bsc#1051510).
- alsa: hda/realtek - Enable micmute LED for Huawei laptops (bsc#1051510).
- alsa: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug (bsc#1051510).
- alsa: hda/realtek - Fixed Dell AIO speaker noise (bsc#1051510).
- alsa: hda/realtek - Fixup headphone noise via runtime suspend (bsc#1051510).
- alsa: hda/realtek - Improve the headset mic for Acer Aspire laptops (bsc#1051510).
- alsa: hda/realtek - Move to ACT_INIT state (bsc#1111666).
- alsa: hda/realtek - Support low power consumption for ALC256 (bsc#1051510).
- alsa: hda/realtek - Support low power consumption for ALC295 (bsc#1051510).
- alsa: hda/realtek: Enable headset MIC of Acer TravelMate B114-21 with ALC233 (bsc#1111666).
- alsa: hda: Initialize power_state field properly (bsc#1051510).
- alsa: hdea/realtek - Headset fixup for System76 Gazelle (gaze14) (bsc#1051510).
- alsa: info: Fix racy addition/deletion of nodes (bsc#1051510).
- alsa: line6: Avoid polluting led_* namespace (bsc#1051510).
- alsa: line6: use dynamic buffers (bsc#1051510).
- alsa: PCM: check if ops are defined before suspending PCM (bsc#1051510).
- alsa: seq: Align temporary re-locking with irqsave version (bsc#1051510).
- alsa: seq: Correct unlock sequence at snd_seq_client_ioctl_unlock() (bsc#1051510).
- alsa: seq: Cover unsubscribe_port() in list_mutex (bsc#1051510).
- alsa: seq: Fix OOB-reads from strlcpy (bsc#1051510).
- alsa: seq: Fix race of get-subscription call vs port-delete ioctls (bsc#1051510).
- alsa: seq: Protect in-kernel ioctl calls with mutex (bsc#1051510).
- alsa: seq: Protect racy pool manipulation from OSS sequencer (bsc#1051510).
- alsa: seq: Remove superfluous irqsave flags (bsc#1051510).
- alsa: seq: Simplify snd_seq_kernel_client_enqueue() helper (bsc#1051510).
- alsa: timer: Check ack_list emptiness instead of bit flag (bsc#1051510).
- alsa: timer: Coding style fixes (bsc#1051510).
- alsa: timer: Make snd_timer_close() really kill pending actions (bsc#1051510).
- alsa: timer: Make sure to clear pending ack list (bsc#1051510).
- alsa: timer: Revert active callback sync check at close (bsc#1051510).
- alsa: timer: Simplify error path in snd_timer_open() (bsc#1051510).
- alsa: timer: Unify timer callback process code (bsc#1051510).
- alsa: usb-audio: Fix a memory leak bug (bsc#1051510).
- alsa: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk() (bsc#1051510).
- alsa: usx2y: fix a double free bug (bsc#1051510).
- appletalk: Fix compile regression (bsc#1051510).
- appletalk: Fix use-after-free in atalk_proc_exit (bsc#1051510).
- arch: arm64: acpi: KABI ginore includes (bsc#1117158 bsc#1134671).
- arm64, mm, efi: Account for GICv3 LPI tables in static memblock reserve table (bsc#1117158).
- arm64: acpi: fix alignment fault in accessing acpi (bsc#1117158).
- arm64: Export save_stack_trace_tsk() (jsc#SLE-4214).
- arm64: fix acpi dependencies (bsc#1117158).
- arm: 8824/1: fix a migrating irq bug when hotplug cpu (bsc#1051510).
- arm: 8833/1: Ensure that NEON code always compiles with Clang (bsc#1051510).
- arm: 8839/1: kprobe: make patch_lock a raw_spinlock_t (bsc#1051510).
- arm: 8840/1: use a raw_spinlock_t in unwind (bsc#1051510).
- arm: avoid Cortex-A9 livelock on tight dmb loops (bsc#1051510).
- arm: imx6q: cpuidle: fix bug that CPU might not wake up at expected time (bsc#1051510).
- arm: iop: do not use using 64-bit DMA masks (bsc#1051510).
- arm: OMAP2+: fix lack of timer interrupts on CPU1 after hotplug (bsc#1051510).
- arm: OMAP2+: Variable 'reg' in function omap4_dsi_mux_pads() could be uninitialized (bsc#1051510).
- arm: orion: do not use using 64-bit DMA masks (bsc#1051510).
- arm: pxa: ssp: unneeded to free devm_ allocated data (bsc#1051510).
- arm: s3c24xx: Fix boolean expressions in osiris_dvs_notify (bsc#1051510).
- arm: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms (bsc#1051510).
- asoc: cs4270: Set auto-increment bit for register writes (bsc#1051510).
- asoc: fix valid stream condition (bsc#1051510).
- asoc: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe (bsc#1051510).
- asoc: fsl_esai: fix channel swap issue when stream starts (bsc#1051510).
- asoc: fsl_esai: Fix missing break in switch statement (bsc#1051510).
- asoc: hdmi-codec: fix S/PDIF DAI (bsc#1051510).
- asoc: Intel: avoid Oops if DMA setup fails (bsc#1051510).
- asoc: max98090: Fix restore of DAPM Muxes (bsc#1051510).
- asoc: nau8810: fix the issue of widget with prefixed name (bsc#1051510).
- asoc: nau8824: fix the issue of the widget with prefix name (bsc#1051510).
- asoc: RT5677-SPI: Disable 16Bit SPI Transfers (bsc#1051510).
- asoc: samsung: odroid: Fix clock configuration for 44100 sample rate (bsc#1051510).
- asoc: stm32: fix sai driver name initialisation (bsc#1051510).
- asoc: tlv320aic32x4: Fix Common Pins (bsc#1051510).
- asoc: topology: free created components in tplg load error (bsc#1051510).
- asoc: wm_adsp: Add locking to wm_adsp2_bus_error (bsc#1051510).
- asoc:soc-pcm:fix a codec fixup issue in TDM case (bsc#1051510).
- assume flash part size to be 4MB, if it can't be determined (bsc#1127371).
- at76c50x-usb: Do not register led_trigger if usb_register_driver failed (bsc#1051510).
- ath10k: avoid possible string overflow (bsc#1051510).
- ath10k: snoc: fix unbalanced clock error handling (bsc#1111666).
- audit: fix a memleak caused by auditing load module (bsc#1051510).
- b43: shut up clang -Wuninitialized variable warning (bsc#1051510).
- backlight: lm3630a: Return 0 on success in update_status functions (bsc#1051510).
- batman-adv: Reduce claim hash refcnt only for removed entry (bsc#1051510).
- batman-adv: Reduce tt_global hash refcnt only for removed entry (bsc#1051510).
- batman-adv: Reduce tt_local hash refcnt only for removed entry (bsc#1051510).
- bcache: account size of buckets used in uuid write to ca-&gt;meta_sectors_written (bsc#1130972).
- bcache: add a comment in super.c (bsc#1130972).
- bcache: add code comments for bset.c (bsc#1130972).
- bcache: add comment for cache_set-&gt;fill_iter (bsc#1130972).
- bcache: add identifier names to arguments of function definitions (bsc#1130972).
- bcache: add missing SPDX header (bsc#1130972).
- bcache: add MODULE_DESCRIPTION information (bsc#1130972).
- bcache: add separate workqueue for journal_write to avoid deadlock (bsc#1130972).
- bcache: add static const prefix to char * array declarations (bsc#1130972).
- bcache: add sysfs_strtoul_bool() for setting bit-field variables (bsc#1130972).
- bcache: add the missing comments for smp_mb()/smp_wmb() (bsc#1130972).
- bcache: cannot set writeback_running via sysfs if no writeback kthread created (bsc#1130972).
- bcache: correct dirty data statistics (bsc#1130972).
- bcache: do not assign in if condition in bcache_init() (bsc#1130972).
- bcache: do not assign in if condition register_bcache() (bsc#1130972).
- bcache: do not check if debug dentry is ERR or NULL explicitly on remove (bsc#1130972).
- bcache: do not check NULL pointer before calling kmem_cache_destroy (bsc#1130972).
- bcache: do not clone bio in bch_data_verify (bsc#1130972).
- bcache: do not mark writeback_running too early (bsc#1130972).
- bcache: export backing_dev_name via sysfs (bsc#1130972).
- bcache: export backing_dev_uuid via sysfs (bsc#1130972).
- bcache: fix code comments style (bsc#1130972).
- bcache: fix indent by replacing blank by tabs (bsc#1130972).
- bcache: fix indentation issue, remove tabs on a hunk of code (bsc#1130972).
- bcache: fix input integer overflow of congested threshold (bsc#1130972).
- bcache: fix input overflow to cache set io_error_limit (bsc#1130972).
- bcache: fix input overflow to cache set sysfs file io_error_halflife (bsc#1130972).
- bcache: fix input overflow to journal_delay_ms (bsc#1130972).
- bcache: fix input overflow to sequential_cutoff (bsc#1130972).
- bcache: fix input overflow to writeback_delay (bsc#1130972).
- bcache: fix input overflow to writeback_rate_minimum (bsc#1130972).
- bcache: fix ioctl in flash device (bsc#1130972).
- bcache: fix mistaken code comments in bcache.h (bsc#1130972).
- bcache: fix mistaken comments in request.c (bsc#1130972).
- bcache: fix potential div-zero error of writeback_rate_i_term_inverse (bsc#1130972).
- bcache: fix potential div-zero error of writeback_rate_p_term_inverse (bsc#1130972).
- bcache: fix typo 'succesfully' to 'successfully' (bsc#1130972).
- bcache: fix typo in code comments of closure_return_with_destructor() (bsc#1130972).
- bcache: improve sysfs_strtoul_clamp() (bsc#1130972).
- bcache: introduce force_wake_up_gc() (bsc#1130972).
- bcache: make cutoff_writeback and cutoff_writeback_sync tunable (bsc#1130972).
- bcache: Move couple of functions to sysfs.c (bsc#1130972).
- bcache: Move couple of string arrays to sysfs.c (bsc#1130972).
- bcache: move open brace at end of function definitions to next line (bsc#1130972).
- bcache: never writeback a discard operation (bsc#1130972).
- bcache: not use hard coded memset size in bch_cache_accounting_clear() (bsc#1130972).
- bcache: option to automatically run gc thread after writeback (bsc#1130972).
- bcache: panic fix for making cache device (bsc#1130972).
- bcache: Populate writeback_rate_minimum attribute (bsc#1130972).
- bcache: prefer 'help' in Kconfig (bsc#1130972).
- bcache: print number of keys in trace_bcache_journal_write (bsc#1130972).
- bcache: recal cached_dev_sectors on detach (bsc#1130972).
- bcache: remove unnecessary space before ioctl function pointer arguments (bsc#1130972).
- bcache: remove unused bch_passthrough_cache (bsc#1130972).
- bcache: remove useless parameter of bch_debug_init() (bsc#1130972).
- bcache: replace '%pF' by '%pS' in seq_printf() (bsc#1130972).
- bcache: Replace bch_read_string_list() by __sysfs_match_string() (bsc#1130972).
- bcache: replace hard coded number with BUCKET_GC_GEN_MAX (bsc#1130972).
- bcache: replace printk() by pr_*() routines (bsc#1130972).
- bcache: replace Symbolic permissions by octal permission numbers (bsc#1130972).
- bcache: set writeback_percent in a flexible range (bsc#1130972).
- bcache: split combined if-condition code into separate ones (bsc#1130972).
- bcache: stop bcache device when backing device is offline (bsc#1130972).
- bcache: stop using the deprecated get_seconds() (bsc#1130972).
- bcache: style fix to add a blank line after declarations (bsc#1130972).
- bcache: style fix to replace 'unsigned' by 'unsigned int' (bsc#1130972).
- bcache: style fixes for lines over 80 characters (bsc#1130972).
- bcache: treat stale and dirty keys as bad keys (bsc#1130972).
- bcache: trivial - remove tailing backslash in macro BTREE_FLAG (bsc#1130972).
- bcache: update comment for bch_data_insert (bsc#1130972).
- bcache: update comment in sysfs.c (bsc#1130972).
- bcache: use (REQ_META|REQ_PRIO) to indicate bio for metadata (bsc#1130972).
- bcache: use MAX_CACHES_PER_SET instead of magic number 8 in __bch_bucket_alloc_set (bsc#1130972).
- bcache: use REQ_PRIO to indicate bio for metadata (bsc#1130972).
- bcache: use routines from lib/crc64.c for CRC64 calculation (bsc#1130972).
- bcache: use sysfs_strtoul_bool() to set bit-field variables (bsc#1130972).
- bitmap: Add bitmap_alloc(), bitmap_zalloc() and bitmap_free() (jsc#SLE-4797).
- blk-mq: adjust debugfs and sysfs register when updating nr_hw_queues (bsc#1131673).
- blk-mq: Avoid that submitting a bio concurrently with device removal triggers a crash (bsc#1131673).
- blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs (bsc#1131673).
- blk-mq: fallback to previous nr_hw_queues when updating fails (bsc#1131673).
- blk-mq: init hctx sched after update ctx and hctx mapping (bsc#1131673).
- blk-mq: realloc hctx when hw queue is mapped to another node (bsc#1131673).
- blk-mq: sync the update nr_hw_queues with blk_mq_queue_tag_busy_iter (bsc#1131673).
- blkcg: Introduce blkg_root_lookup() (bsc#1131673).
- blkcg: Make blkg_root_lookup() work for queues in bypass mode (bsc#1131673).
- block: check_events: do not bother with events if unsupported (bsc#1110946, bsc#1119843).
- block: check_events: do not bother with events if unsupported (bsc#1110946, bsc#1119843).
- block: disk_events: introduce event flags (bsc#1110946, bsc#1119843).
- block: disk_events: introduce event flags (bsc#1110946, bsc#1119843).
- block: do not leak memory in bio_copy_user_iov() (bsc#1135309).
- block: Do not revalidate bdev of hidden gendisk (bsc#1120091).
- block: Ensure that a request queue is dissociated from the cgroup controller (bsc#1131673).
- block: Fix a race between request queue removal and the block cgroup controller (bsc#1131673).
- block: fix the return errno for direct IO (bsc#1135320).
- block: fix use-after-free on gendisk (bsc#1135312).
- block: Introduce blk_exit_queue() (bsc#1131673).
- block: kABI fixes for bio_rewind_iter() removal (bsc#1131673).
- block: remove bio_rewind_iter() (bsc#1131673).
- bluetooth: Align minimum encryption key size for LE and BR/EDR connections (bsc#1051510).
- bluetooth: btusb: request wake pin with NOAUTOEN (bsc#1051510).
- bluetooth: Check key sizes only when Secure Simple Pairing is enabled (bsc#1135556).
- bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf() (bsc#1133731).
- bluetooth: hidp: fix buffer overflow (bsc#1051510).
- bnx2x: Add support for detection of P2P event packets (bsc#1136498 jsc#SLE-4699).
- bnx2x: Bump up driver version to 1.713.36 (bsc#1136498 jsc#SLE-4699).
- bnx2x: fix spelling mistake 'dicline' -&gt; 'decline' (bsc#1136498 jsc#SLE-4699).
- bnx2x: fix various indentation issues (bsc#1136498 jsc#SLE-4699).
- bnx2x: Remove set but not used variable 'mfw_vn' (bsc#1136498 jsc#SLE-4699).
- bnx2x: Replace magic numbers with macro definitions (bsc#1136498 jsc#SLE-4699).
- bnx2x: Use struct_size() in kzalloc() (bsc#1136498 jsc#SLE-4699).
- bnx2x: Utilize FW 7.13.11.0 (bsc#1136498 jsc#SLE-4699).
- bnxt_en: Add device IDs 0x1806 and 0x1752 for 57500 devices (bsc#1137224).
- bnxt_en: Add support for BCM957504 (bsc#1137224).
- bnxt_en: Drop oversize TX packets to prevent errors (networking-stable-19_03_07).
- bnxt_en: Fix aggregation buffer leak under OOM condition (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix possible BUG() condition when calling pci_disable_msix() (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix possible crash in bnxt_hwrm_ring_free() under error conditions (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix statistics context reservation logic (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt() (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one() (bsc#1050242).
- bnxt_en: Improve multicast address setup logic (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Improve multicast address setup logic (networking-stable-19_05_04).
- bnxt_en: Improve NQ reservations (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Improve RX consumer index validity check (networking-stable-19_04_10).
- bnxt_en: Pass correct extended TX port statistics size to firmware (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Reduce memory usage when running in kdump kernel (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Reset device on RX buffer errors (networking-stable-19_04_10).
- bonding: fix event handling for stacked bonds (networking-stable-19_04_19).
- bonding: fix PACKET_ORIGDEV regression (git-fixes).
- bpf, lru: avoid messing with eviction heuristics upon syscall lookup (bsc#1083647).
- bpf: add map_lookup_elem_sys_only for lookups from syscall side (bsc#1083647).
- bpf: Add missed newline in verifier verbose log (bsc#1056787).
- bpf: fix use after free in bpf_evict_inode (bsc#1083647).
- brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() (bsc#1051510).
- brcmfmac: fix leak of mypkt on error return path (bsc#1111666).
- broadcom: Mark expected switch fall-throughs (bsc#1136498 jsc#SLE-4699).
- btrfs: add a helper to return a head ref (bsc#1134813).
- btrfs: Avoid possible qgroup_rsv_size overflow in btrfs_calculate_inode_block_rsv_size (git-fixes).
- btrfs: breakout empty head cleanup to a helper (bsc#1134813).
- btrfs: delayed-ref: Introduce better documented delayed ref structures (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: delayed-ref: Use btrfs_ref to refactor btrfs_add_delayed_data_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: delayed-ref: Use btrfs_ref to refactor btrfs_add_delayed_tree_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: do not allow trimming when a fs is mounted with the nologreplay option (bsc#1135758).
- btrfs: do not double unlock on error in btrfs_punch_hole (bsc#1136881).
- btrfs: Do not panic when we can't find a root key (bsc#1112063).
- btrfs: extent-tree: Fix a bug that btrfs is unable to add pinned bytes (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Open-code process_func in __btrfs_mod_ref (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Use btrfs_ref to refactor add_pinned_bytes() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Use btrfs_ref to refactor btrfs_free_extent() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Use btrfs_ref to refactor btrfs_inc_extent_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: Factor out common delayed refs init code (bsc#1134813).
- btrfs: fix assertion failure on fsync with NO_HOLES enabled (bsc#1131848).
- btrfs: Fix bound checking in qgroup_trace_new_subtree_blocks (git-fixes).
- btrfs: fix fsync not persisting changed attributes of a directory (bsc#1137151).
- btrfs: fix incorrect file size after shrinking truncate and fsync (bsc#1130195).
- btrfs: fix race between ranged fsync and writeback of adjacent ranges (bsc#1136477).
- btrfs: fix race updating log root item during fsync (bsc#1137153).
- btrfs: fix wrong ctime and mtime of a directory after log replay (bsc#1137152).
- btrfs: improve performance on fsync of files with multiple hardlinks (bsc#1123454).
- btrfs: Introduce init_delayed_ref_head (bsc#1134813).
- btrfs: move all ref head cleanup to the helper function (bsc#1134813).
- btrfs: move extent_op cleanup to a helper (bsc#1134813).
- btrfs: move ref_mod modification into the if (ref) logic (bsc#1134813).
- btrfs: Open-code add_delayed_data_ref (bsc#1134813).
- btrfs: Open-code add_delayed_tree_ref (bsc#1134813).
- btrfs: qgroup: Check bg while resuming relocation to avoid NULL pointer dereference (bsc#1134806).
- btrfs: qgroup: Do not scan leaf if we're modifying reloc tree (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: qgroup: Move reserved data accounting from btrfs_delayed_ref_head to btrfs_qgroup_extent_record (bsc#1134162).
- btrfs: qgroup: Remove duplicated trace points for qgroup_rsv_add/release (bsc#1134160).
- btrfs: reloc: Also queue orphan reloc tree for cleanup to avoid BUG_ON() (bsc#1133612).
- btrfs: remove delayed_ref_node from ref_head (bsc#1134813).
- btrfs: remove WARN_ON in log_dir_items (bsc#1131847).
- btrfs: send, flush dellaloc in order to avoid data loss (bsc#1133320).
- btrfs: split delayed ref head initialization and addition (bsc#1134813).
- btrfs: track refs in a rb_tree instead of a list (bsc#1134813).
- btrfs: tree-checker: detect file extent items with overlapping ranges (bsc#1136478).
- btrfs: Use init_delayed_ref_common in add_delayed_data_ref (bsc#1134813).
- btrfs: Use init_delayed_ref_common in add_delayed_tree_ref (bsc#1134813).
- btrfs: Use init_delayed_ref_head in add_delayed_ref_head (bsc#1134813).
- cdrom: Fix race condition in cdrom_sysctl_register (bsc#1051510).
- ceph: ensure d_name stability in ceph_dentry_hash() (bsc#1134461).
- ceph: ensure d_name stability in ceph_dentry_hash() (bsc#1134461).
- ceph: fix ci-&gt;i_head_snapc leak (bsc#1122776).
- ceph: fix ci-&gt;i_head_snapc leak (bsc#1122776).
- ceph: fix use-after-free on symlink traversal (bsc#1134459).
- ceph: fix use-after-free on symlink traversal (bsc#1134459).
- ceph: only use d_name directly when parent is locked (bsc#1134460).
- ceph: only use d_name directly when parent is locked (bsc#1134460).
- cfg80211: Handle WMM rules in regulatory domain intersection (bsc#1111666).
- cgroup: fix parsing empty mount option string (bsc#1133094).
- chelsio: use BUG() instead of BUG_ON(1) (bsc#1136345 jsc#SLE-4681).
- cifs: Do not count -ENODATA as failure for query directory (bsc#1051510).
- cifs: do not dereference smb_file_target before null check (bsc#1051510).
- cifs: Do not hide EINTR after sending network packets (bsc#1051510).
- cifs: Do not reconnect TCP session in add_credits() (bsc#1051510).
- cifs: Do not reset lease state to NONE on lease break (bsc#1051510).
- cifs: Fix adjustment of credits for MTU requests (bsc#1051510).
- cifs: Fix credit calculation for encrypted reads with errors (bsc#1051510).
- cifs: Fix credits calculations for reads with errors (bsc#1051510).
- cifs: fix POSIX lock leak and invalid ptr deref (bsc#1114542).
- cifs: Fix possible hang during async MTU reads and writes (bsc#1051510).
- cifs: Fix potential OOB access of lock element array (bsc#1051510).
- cifs: Fix read after write for files with read caching (bsc#1051510).
- cifs: keep FileInfo handle live during oplock break (bsc#1106284, bsc#1131565).
- clk: fractional-divider: check parent rate only if flag is set (bsc#1051510).
- clk: rockchip: fix frac settings of GPLL clock for rk3328 (bsc#1051510).
- clk: rockchip: Fix video codec clocks on rk3288 (bsc#1051510).
- clk: rockchip: fix wrong clock definitions for rk3328 (bsc#1051510).
- clk: x86: Add system specific quirk to mark clocks as critical (bsc#1051510).
- config: arm64: enable CN99xx uncore pmu References: bsc#1117114
- configfs: fix possible use-after-free in configfs_register_group (bsc#1051510).
- configfs: Fix use-after-free when accessing sd-&gt;s_dentry (bsc#1051510).
- cpu/speculation: Add 'mitigations=' cmdline option (bsc#1112178).
- cpufreq: Add Hygon Dhyana support ().
- cpufreq: AMD: Ignore the check for ProcFeedback in ST/CZ ().
- cpupowerutils: bench - Fix cpu online check (bsc#1051510).
- crypto: arm/aes-neonbs - do not access already-freed walk.iv (bsc#1051510).
- crypto: caam - add missing put_device() call (bsc#1129770).
- crypto: caam - fix caam_dump_sg that iterates through scatterlist (bsc#1051510).
- crypto: caam/qi2 - fix DMA mapping of stack memory (bsc#1111666).
- crypto: caam/qi2 - fix zero-length buffer DMA mapping (bsc#1111666).
- crypto: caam/qi2 - generate hash keys in-place (bsc#1111666).
- crypto: ccm - fix incompatibility between 'ccm' and 'ccm_base' (bsc#1051510).
- crypto: ccp - Do not free psp_master when PLATFORM_INIT fails (bsc#1051510).
- crypto: chacha20poly1305 - set cra_name correctly (bsc#1051510).
- crypto: chcr - ESN for Inline IPSec Tx (bsc#1136353 jsc#SLE-4688).
- crypto: chcr - small packet Tx stalls the queue (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - avoid using sa_entry imm (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - check set_msg_len overflow in generate_b0 (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - clean up various indentation issues (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - cleanup:send addr as value in function argument (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - count incomplete block in IV (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix NULL pointer dereference (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix passing zero to 'PTR_ERR' warning in chcr_aead_op (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix softlockup with heavy I/O (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix wrong error counter increments (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fixed Traffic Stall (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Handle pci shutdown event (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Inline single pdu only (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - remove set but not used variable 'kctx_len' (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - remove set but not used variables 'adap' (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Reset counters on cxgb4 Detach (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Swap location of AAD and IV sent in WR (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Use same value for both channel in single WR (bsc#1136353 jsc#SLE-4688).
- crypto: chtls - remove cdev_list_lock (bsc#1136353 jsc#SLE-4688).
- crypto: chtls - remove set but not used variables 'err, adap, request, hws' (bsc#1136353 jsc#SLE-4688).
- crypto: crct10dif-generic - fix use via crypto_shash_digest() (bsc#1051510).
- crypto: crypto4xx - properly set IV after de- and encrypt (bsc#1051510).
- crypto: fips - Grammar s/options/option/, s/to/the/ (bsc#1051510).
- crypto: gcm - fix incompatibility between 'gcm' and 'gcm_base' (bsc#1051510).
- crypto: pcbc - remove bogus memcpy()s with src == dest (bsc#1051510).
- crypto: prefix header search paths with $(srctree)/ (bsc#1136353 jsc#SLE-4688).
- crypto: qat - move temp buffers off the stack (jsc#SLE-4818).
- crypto: qat - no need to check return value of debugfs_create functions (jsc#SLE-4818).
- crypto: qat - Remove unused goto label (jsc#SLE-4818).
- crypto: qat - Remove VLA usage (jsc#SLE-4818).
- crypto: sha256/arm - fix crash bug in Thumb2 build (bsc#1051510).
- crypto: sha512/arm - fix crash bug in Thumb2 build (bsc#1051510).
- crypto: skcipher - do not WARN on unprocessed data after slow walk step (bsc#1051510).
- crypto: sun4i-ss - Fix invalid calculation of hash end (bsc#1051510).
- crypto: vmx - CTR: always increment IV as quadword (bsc#1051510).
- crypto: vmx - fix copy-paste error in CTR mode (bsc#1051510).
- crypto: vmx - ghash: do nosimd fallback manually (bsc#1135661, bsc#1137162).
- crypto: vmx - return correct error code on failed setkey (bsc#1135661, bsc#1137162).
- crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() (bsc#1051510).
- crypto: x86/poly1305 - fix overflow during partial reduction (bsc#1051510).
- cxgb4/chtls: Prefix adapter flags with CXGB4 (bsc#1136345 jsc#SLE-4681).
- cxgb4/cxgb4vf: Add support for SGE doorbell queue timer (bsc#1127371).
- cxgb4/cxgb4vf: Display advertised FEC in ethtool (bsc#1136345 jsc#SLE-4681).
- cxgb4/cxgb4vf: Fix mac_hlist initialization and free (bsc#1127374).
- cxgb4/cxgb4vf: Fix up netdev-&gt;hw_features (bsc#1136345 jsc#SLE-4681).
- cxgb4/cxgb4vf: Link management changes (bsc#1127371).
- cxgb4/cxgb4vf: Program hash region for {t4/t4vf}_change_mac() (bsc#1127371).
- cxgb4/cxgb4vf_main: Mark expected switch fall-through (bsc#1136345 jsc#SLE-4681).
- cxgb4: Add capability to get/set SGE Doorbell Queue Timer Tick (bsc#1127371).
- cxgb4: Add flag tc_flower_initialized (bsc#1127371).
- cxgb4: Add new T5 pci device id 0x50ae (bsc#1127371).
- cxgb4: Add new T5 pci device ids 0x50af and 0x50b0 (bsc#1127371).
- cxgb4: Add new T6 pci device ids 0x608a (bsc#1127371).
- cxgb4: Add new T6 pci device ids 0x608b (bsc#1136345 jsc#SLE-4681).
- cxgb4: add per rx-queue counter for packet errors (bsc#1127371).
- cxgb4: Add support for FW_ETH_TX_PKT_VM_WR (bsc#1127371).
- cxgb4: add support to display DCB info (bsc#1127371).
- cxgb4: Add support to read actual provisioned resources (bsc#1127371).
- cxgb4: add tcb flags and tcb rpl struct (bsc#1136345 jsc#SLE-4681).
- cxgb4: Add VF Link state support (bsc#1136345 jsc#SLE-4681).
- cxgb4: Added missing break in ndo_udp_tunnel_{add/del} (bsc#1127371).
- cxgb4: collect ASIC LA dumps from ULP TX (bsc#1127371).
- cxgb4: collect hardware queue descriptors (bsc#1127371).
- cxgb4: collect number of free PSTRUCT page pointers (bsc#1127371).
- cxgb4: convert flower table to use rhashtable (bsc#1127371).
- cxgb4: cxgb4: use FW_PORT_ACTION_L1_CFG32 for 32 bit capability (bsc#1127371).
- cxgb4: Delete all hash and TCAM filters before resource cleanup (bsc#1136345 jsc#SLE-4681).
- cxgb4: display number of rx and tx pages free (bsc#1127371).
- cxgb4: do not return DUPLEX_UNKNOWN when link is down (bsc#1127371).
- cxgb4: Do not return EAGAIN when TCAM is full (bsc#1136345 jsc#SLE-4681).
- cxgb4: Enable hash filter with offload (bsc#1136345 jsc#SLE-4681).
- cxgb4: Enable outer UDP checksum offload for T6 (bsc#1136345 jsc#SLE-4681).
- cxgb4: Export sge_host_page_size to ulds (bsc#1127371).
- cxgb4: Fix error path in cxgb4_init_module (bsc#1136345 jsc#SLE-4681).
- cxgb4: fix the error path of cxgb4_uld_register() (bsc#1127371).
- cxgb4: free mac_hlist properly (bsc#1136345 jsc#SLE-4681).
- cxgb4: impose mandatory VLAN usage when non-zero TAG ID (bsc#1127371).
- cxgb4: kfree mhp after the debug print (bsc#1136345 jsc#SLE-4681).
- cxgb4: Mask out interrupts that are not enabled (bsc#1127175).
- cxgb4: move Tx/Rx free pages collection to common code (bsc#1127371).
- cxgb4: offload VLAN flows regardless of VLAN ethtype (bsc#1136345 jsc#SLE-4681).
- cxgb4: remove DEFINE_SIMPLE_DEBUGFS_FILE() (bsc#1136345 jsc#SLE-4681).
- cxgb4: remove redundant assignment to vlan_cmd.dropnovlan_fm (bsc#1127371).
- cxgb4: remove set but not used variables 'multitrc, speed' (bsc#1136345 jsc#SLE-4681).
- cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (bsc#1127371).
- cxgb4: remove the unneeded locks (bsc#1127371).
- cxgb4: Revert 'cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size' (bsc#1136345 jsc#SLE-4681).
- cxgb4: specify IQTYPE in fw_iq_cmd (bsc#1127371).
- cxgb4: Support ethtool private flags (bsc#1127371).
- cxgb4: TLS record offload enable (bsc#1136345 jsc#SLE-4681).
- cxgb4: Update 1.23.3.0 as the latest firmware supported (bsc#1136345 jsc#SLE-4681).
- cxgb4: update supported DCB version (bsc#1127371).
- cxgb4: use firmware API for validating filter spec (bsc#1136345 jsc#SLE-4681).
- cxgb4: use new fw interface to get the VIN and smt index (bsc#1127371).
- cxgb4vf: Call netif_carrier_off properly in pci_probe (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Enter debugging mode if FW is inaccessible (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Few more link management changes (bsc#1127374).
- cxgb4vf: fix memleak in mac_hlist initialization (bsc#1127374).
- cxgb4vf: free mac_hlist properly (bsc#1136345 jsc#SLE-4681).
- cxgb4vf: Prefix adapter flags with CXGB4VF (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Revert force link up behaviour (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Update port information in cxgb4vf_open() (bsc#1127374).
- dccp: do not use ipv6 header for ipv4 flow (networking-stable-19_03_28).
- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- device_cgroup: fix RCU imbalance in error case (bsc#1051510).
- devres: Align data[] to ARCH_KMALLOC_MINALIGN (bsc#1051510).
- dm: disable DISCARD if the underlying storage no longer supports it (bsc#1114638).
- dmaengine: axi-dmac: Do not check the number of frames for alignment (bsc#1051510).
- dmaengine: imx-dma: fix warning comparison of distinct pointer types (bsc#1051510).
- dmaengine: qcom_hidma: assign channel cookie correctly (bsc#1051510).
- dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid (bsc#1051510).
- dmaengine: tegra210-adma: Fix crash during probe (bsc#1111666).
- dmaengine: tegra210-dma: free dma controller in remove() (bsc#1051510).
- dmaengine: tegra: avoid overflow of byte tracking (bsc#1051510).
- documentation: Add MDS vulnerability documentation (bsc#1135642).
- documentation: perf: Add documentation for ThunderX2 PMU uncore driver ().
- drivers/perf: Add Cavium ThunderX2 SoC UNCORE PMU driver ().
- drivers: acpi: add dependency of EFI for arm64 (bsc#1117158).
- drivers: hv: vmbus: Offload the handling of channels to two workqueues (bsc#1130567).
- drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind() (bsc#1130567).
- drm/amd/display: extending AUX SW Timeout (bsc#1111666).
- drm/amd/display: fix cursor black issue (bsc#1111666).
- drm/amd/display: If one stream full updates, full update all planes (bsc#1111666).
- drm/amdgpu/gmc9: fix VM_L2_CNTL3 programming (bsc#1111666).
- drm/amdkfd: use init_mqd function to allocate object for hid_mqd (CI) (bsc#1111666).
- drm/bridge: adv7511: Fix low refresh rate selection (bsc#1051510).
- drm/doc: Drop 'content type' from the legacy kms property table (bsc#1111666).
- drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers (bsc#1051510).
- drm/etnaviv: lock MMU while dumping core (bsc#1113722)
- drm/exynos/mixer: fix MIXER shadow registry synchronisation code (bsc#1111666).
- drm/fb-helper: dpms_legacy(): Only set on connectors in use (bsc#1051510).
- drm/fb-helper: generic: Call drm_client_add() after setup is done (bsc#1111666).
- drm/i915/fbc: disable framebuffer compression on GeminiLake (bsc#1051510).
- drm/i915/gvt: add 0x4dfc to gen9 save-restore list (bsc#1113722)
- drm/i915/gvt: Add in context mmio 0x20D8 to gen9 mmio list (bsc#1113722)
- drm/i915/gvt: Add in context mmio 0x20D8 to gen9 mmio list (bsc#1113956)
- drm/i915/gvt: Annotate iomem usage (bsc#1051510).
- drm/i915/gvt: do not deliver a workload if its creation fails (bsc#1051510).
- drm/i915/gvt: do not let pin count of shadow mm go negative (bsc#1113722)
- drm/i915/gvt: do not let pin count of shadow mm go negative (bsc#1113956)
- drm/i915/gvt: do not let TRTTE and 0x4dfc write passthrough to hardware (bsc#1051510).
- drm/i915/gvt: Fix cmd length of VEB_DI_IECP (bsc#1113722)
- drm/i915/gvt: Fix incorrect mask of mmio 0x22028 in gen8/9 mmio list (bnc#1113722)
- drm/i915/gvt: Prevent use-after-free in ppgtt_free_all_spt() (bsc#1111666).
- drm/i915/gvt: refine ggtt range validation (bsc#1113722)
- drm/i915/gvt: Roundup fb-&gt;height into tile's height at calucation fb-&gt;size (bsc#1111666).
- drm/i915/gvt: Tiled Resources mmios are in-context mmios for gen9+ (bsc#1113722)
- drm/i915/icl: Whitelist GEN9_SLICE_COMMON_ECO_CHICKEN1 (bsc#1111666).
- drm/i915: Disable LP3 watermarks on all SNB machines (bsc#1051510).
- drm/i915: Disable tv output on i9x5gm (bsc#1086657, bsc#1133897).
- drm/i915: Downgrade Gen9 Plane WM latency error (bsc#1051510).
- drm/i915: Fix I915_EXEC_RING_MASK (bsc#1051510).
- drm/i915: Force 2*96 MHz cdclk on glk/cnl when audio power is enabled (bsc#1111666).
- drm/imx: do not skip DP channel disable for background plane (bsc#1051510).
- drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata() (bsc#1113722)
- drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata() (bsc#1113956)
- drm/mediatek: fix possible object reference leak (bsc#1051510).
- drm/meson: add size and alignment requirements for dumb buffers (bnc#1113722)
- drm/nouveau/bar/tu104: initial support (bsc#1133593).
- drm/nouveau/bar/tu106: initial support (bsc#1133593).
- drm/nouveau/bios/tu104: initial support (bsc#1133593).
- drm/nouveau/bios/tu106: initial support (bsc#1133593).
- drm/nouveau/bios: translate additional memory types (bsc#1133593).
- drm/nouveau/bios: translate usb-C connector type (bsc#1133593).
- drm/nouveau/bus/tu104: initial support (bsc#1133593).
- drm/nouveau/bus/tu106: initial support (bsc#1133593).
- drm/nouveau/ce/tu104: initial support (bsc#1133593).
- drm/nouveau/ce/tu106: initial support (bsc#1133593).
- drm/nouveau/core: increase maximum number of nvdec instances to 3 (bsc#1133593).
- drm/nouveau/core: recognise TU102 (bsc#1133593).
- drm/nouveau/core: recognise TU104 (bsc#1133593).
- drm/nouveau/core: recognise TU106 (bsc#1133593).
- drm/nouveau/core: support multiple nvdec instances (bsc#1133593).
- drm/nouveau/devinit/gm200-: export function to upload+execute PMU/PRE_OS (bsc#1133593).
- drm/nouveau/devinit/tu104: initial support (bsc#1133593).
- drm/nouveau/devinit/tu106: initial support (bsc#1133593).
- drm/nouveau/disp/gm200-: add scdc parameter setter (bsc#1133593).
- drm/nouveau/disp/gv100: fix name of window channels in debug output (bsc#1133593).
- drm/nouveau/disp/tu104: initial support (bsc#1133593).
- drm/nouveau/disp/tu106: initial support (bsc#1133593).
- drm/nouveau/disp: add a way to configure scrambling/tmds for hdmi 2.0 (bsc#1133593).
- drm/nouveau/disp: add support for setting scdc parameters for high modes (bsc#1133593).
- drm/nouveau/disp: keep track of high-speed state, program into clock (bsc#1133593).
- drm/nouveau/disp: take sink support into account for exposing 594mhz (bsc#1133593).
- drm/nouveau/dma/tu104: initial support (bsc#1133593).
- drm/nouveau/dma/tu106: initial support (bsc#1133593).
- drm/nouveau/drm/nouveau: Do not forget to label dp_aux devices (bsc#1133593).
- drm/nouveau/drm/nouveau: s/nouveau_backlight_exit/nouveau_backlight_fini/ (bsc#1133593).
- drm/nouveau/drm/nouveau: tegra: Call nouveau_drm_device_init() (bsc#1133593).
- drm/nouveau/fault/tu104: initial support (bsc#1133593).
- drm/nouveau/fault/tu106: initial support (bsc#1133593).
- drm/nouveau/fault: add explicit control over fault buffer interrupts (bsc#1133593).
- drm/nouveau/fault: remove manual mapping of fault buffers into BAR2 (bsc#1133593).
- drm/nouveau/fault: store get/put pri address in nvkm_fault_buffer (bsc#1133593).
- drm/nouveau/fb/tu104: initial support (bsc#1133593).
- drm/nouveau/fb/tu106: initial support (bsc#1133593).
- drm/nouveau/fifo/gf100-: call into BAR to reset BARs after MMU fault (bsc#1133593).
- drm/nouveau/fifo/gk104-: group pbdma functions together (bsc#1133593).
- drm/nouveau/fifo/gk104-: return channel instance in ctor args (bsc#1133593).
- drm/nouveau/fifo/gk104-: separate runlist building from committing to hw (bsc#1133593).
- drm/nouveau/fifo/gk104-: support enabling privileged ce functions (bsc#1133593).
- drm/nouveau/fifo/gk104-: virtualise pbdma enable function (bsc#1133593).
- drm/nouveau/fifo/gm200-: read pbdma count more directly (bsc#1133593).
- drm/nouveau/fifo/gv100: allocate method buffer (bsc#1133593).
- drm/nouveau/fifo/gv100: return work submission token in channel ctor args (bsc#1133593).
- drm/nouveau/fifo/tu104: initial support (bsc#1133593).
- drm/nouveau/fifo/tu106: initial support (bsc#1133593).
- drm/nouveau/fuse/tu104: initial support (bsc#1133593).
- drm/nouveau/fuse/tu106: initial support (bsc#1133593).
- drm/nouveau/gpio/tu104: initial support (bsc#1133593).
- drm/nouveau/gpio/tu106: initial support (bsc#1133593).
- drm/nouveau/i2c/tu104: initial support (bsc#1133593).
- drm/nouveau/i2c/tu106: initial support (bsc#1133593).
- drm/nouveau/i2c: Disable i2c bus access after -&gt;fini() (bsc#1113722)
- drm/nouveau/ibus/tu104: initial support (bsc#1133593).
- drm/nouveau/ibus/tu106: initial support (bsc#1133593).
- drm/nouveau/imem/nv50: support pinning objects in BAR2 and returning address (bsc#1133593).
- drm/nouveau/imem/tu104: initial support (bsc#1133593).
- drm/nouveau/imem/tu106: initial support (bsc#1133593).
- drm/nouveau/kms/nv50-: allow more flexibility with lut formats (bsc#1133593).
- drm/nouveau/kms/tu104: initial support (bsc#1133593).
- drm/nouveau/ltc/tu104: initial support (bsc#1133593).
- drm/nouveau/ltc/tu106: initial support (bsc#1133593).
- drm/nouveau/mc/tu104: initial support (bsc#1133593).
- drm/nouveau/mc/tu106: initial support (bsc#1133593).
- drm/nouveau/mmu/tu104: initial support (bsc#1133593).
- drm/nouveau/mmu/tu106: initial support (bsc#1133593).
- drm/nouveau/mmu: add more general vmm free/node handling functions (bsc#1133593).
- drm/nouveau/pci/tu104: initial support (bsc#1133593).
- drm/nouveau/pci/tu106: initial support (bsc#1133593).
- drm/nouveau/pmu/tu104: initial support (bsc#1133593).
- drm/nouveau/pmu/tu106: initial support (bsc#1133593).
- drm/nouveau/therm/tu104: initial support (bsc#1133593).
- drm/nouveau/therm/tu106: initial support (bsc#1133593).
- drm/nouveau/tmr/tu104: initial support (bsc#1133593).
- drm/nouveau/tmr/tu106: initial support (bsc#1133593).
- drm/nouveau/top/tu104: initial support (bsc#1133593).
- drm/nouveau/top/tu106: initial support (bsc#1133593).
- drm/nouveau/volt/gf117: fix speedo readout register (bsc#1051510).
- drm/nouveau: add DisplayPort CEC-Tunneling-over-AUX support (bsc#1133593).
- drm/nouveau: Add NV_PRINTK_ONCE and variants (bsc#1133593).
- drm/nouveau: Add size to vbios.rom file in debugfs (bsc#1133593).
- drm/nouveau: Add strap_peek to debugfs (bsc#1133593).
- drm/nouveau: Cleanup indenting in nouveau_backlight.c (bsc#1133593).
- drm/nouveau: Fix potential memory leak in nouveau_drm_load() (bsc#1133593).
- drm/nouveau: Move backlight device into nouveau_connector (bsc#1133593).
- drm/nouveau: Refactor nvXX_backlight_init() (bsc#1133593).
- drm/nouveau: register backlight on pascal and newer (bsc#1133593).
- drm/nouveau: remove left-over struct member (bsc#1133593).
- drm/nouveau: Remove unecessary dma_fence_ops (bsc#1133593).
- drm/nouveau: Start using new drm_dev initialization helpers (bsc#1133593).
- drm/nouveau: Stop using drm_crtc_force_disable (bsc#1051510).
- drm/omap: hdmi4_cec: Fix CEC clock handling for PM (bsc#1111666).
- drm/panel: panel-innolux: set display off in innolux_panel_unprepare (bsc#1111666).
- drm/pl111: Initialize clock spinlock early (bsc#1111666).
- drm/rockchip: fix for mailbox read validation (bsc#1051510).
- drm/rockchip: fix for mailbox read validation (bsc#1111666).
- drm/rockchip: shutdown drm subsystem on shutdown (bsc#1051510).
- drm/rockchip: vop: reset scale mode when win is disabled (bsc#1113722)
- drm/sun4i: Add missing drm_atomic_helper_shutdown at driver unbind (bsc#1113722)
- drm/sun4i: Fix component unbinding and component master deletion (bsc#1113722)
- drm/sun4i: Fix sun8i HDMI PHY clock initialization (bsc#1111666).
- drm/sun4i: Fix sun8i HDMI PHY configuration for &gt; 148.5 MHz (bsc#1111666).
- drm/sun4i: rgb: Change the pixel clock validation check (bnc#1113722)
- drm/sun4i: Set device driver data at bind time for use in unbind (bsc#1113722)
- drm/sun4i: tcon top: Fix NULL/invalid pointer dereference in sun8i_tcon_top_un/bind (bsc#1111666).
- drm/sun4i: Unbind components before releasing DRM and memory (bsc#1113722)
- drm/tegra: gem: Fix CPU-cache maintenance for BO's allocated using get_pages() (bsc#1111666).
- drm/tegra: hub: Fix dereference before check (bsc#1111666).
- drm/ttm: Fix bo_global and mem_global kfree error (bsc#1111666).
- drm/ttm: fix out-of-bounds read in ttm_put_pages() v2 (bsc#1111666).
- drm/ttm: Remove warning about inconsistent mapping information (bnc#1131488)
- drm/udl: add a release method and delay modeset teardown (bsc#1085536)
- drm/vc4: Fix memory leak during gpu reset. (bsc#1113722)
- drm/vmwgfx: Do not send drm sysfs hotplug events on initial master set (bsc#1051510).
- drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read (bsc#1051510).
- drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() (bsc#1113722)
- drm/vmwgfx: Remove set but not used variable 'restart' (bsc#1111666).
- drm: Auto-set allow_fb_modifiers when given modifiers at plane init (bsc#1051510).
- drm: bridge: dw-hdmi: Fix overflow workaround for Rockchip SoCs (bsc#1113722)
- drm: rcar-du: Fix rcar_du_crtc structure documentation (bsc#1111666).
- dsa: mv88e6xxx: Ensure all pending interrupts are handled prior to exit (networking-stable-19_02_20).
- dt-bindings: clock: r8a7795: Remove CSIREF clock (bsc#1120902).
- dt-bindings: clock: r8a7796: Remove CSIREF clock (bsc#1120902).
- dt-bindings: net: Add binding for the external clock for TI WiLink (bsc#1085535).
- dt-bindings: net: Fix a typo in the phy-mode list for ethernet bindings (bsc#1129770).
- dt-bindings: rtc: sun6i-rtc: Fix register range in example (bsc#1120902).
- dwc2: gadget: Fix completed transfer size calculation in DDMA (bsc#1051510).
- e1000e: Disable runtime PM on CNP+ (jsc#SLE-4804).
- e1000e: Exclude device from suspend direct complete optimization (jsc#SLE-4804).
- e1000e: Fix -Wformat-truncation warnings (bsc#1051510).
- e1000e: fix a missing check for return value (jsc#SLE-4804).
- e1000e: fix cyclic resets at link up with active tx (bsc#1051510).
- edac, amd64: Add Hygon Dhyana support ().
- efi/arm: Defer persistent reservations until after paging_init() (bsc#1117158).
- efi/arm: Do not mark acpi reclaim memory as MEMBLOCK_NOMAP (bsc#1117158 bsc#1115688 bsc#1120566).
- efi/arm: libstub: add a root memreserve config table (bsc#1117158).
- efi/arm: map UEFI memory map even w/o runtime services enabled (bsc#1117158).
- efi/arm: preserve early mapping of UEFI memory map longer for BGRT (bsc#1117158).
- efi/arm: Revert 'Defer persistent reservations until after paging_init()' (bsc#1117158).
- efi/arm: Revert deferred unmap of early memmap mapping (bsc#1117158).
- efi: add API to reserve memory persistently across kexec reboot (bsc#1117158).
- efi: honour memory reservations passed via a linux specific config table (bsc#1117158).
- efi: Permit calling efi_mem_reserve_persistent() from atomic context (bsc#1117158).
- efi: Permit multiple entries in persistent memreserve data structure (bsc#1117158).
- efi: Prevent GICv3 WARN() by mapping the memreserve table before first use (bsc#1117158).
- efi: Reduce the amount of memblock reservations for persistent allocations (bsc#1117158).
- ext4: actually request zeroing of inode table after grow (bsc#1135315).
- ext4: avoid panic during forced reboot due to aborted journal (bsc#1126356).
- ext4: cleanup bh release code in ext4_ind_remove_space() (bsc#1131851).
- ext4: Do not warn when enabling DAX (bsc#1132894).
- ext4: fix data corruption caused by overlapping unaligned and aligned IO (bsc#1136428).
- ext4: fix ext4_show_options for file systems w/o journal (bsc#1135316).
- ext4: fix use-after-free race with debug_want_extra_isize (bsc#1135314).
- ext4: make sanity check in mballoc more strict (bsc#1136439).
- ext4: wait for outstanding dio during truncate in nojournal mode (bsc#1136438).
- fbdev: fbmem: fix memory access if logo is bigger than the screen (bsc#1051510).
- fbdev: fix divide error in fb_var_to_videomode (bsc#1113722)
- fbdev: fix WARNING in __alloc_pages_nodemask bug (bsc#1113722)
- firmware: efi: factor out mem_reserve (bsc#1117158 bsc#1134671).
- fix cgroup_do_mount() handling of failure exits (bsc#1133095).
- fix rtnh_ok() (git-fixes).
- fm10k: Fix a potential NULL pointer dereference (bsc#1051510).
- fm10k: TRIVIAL cleanup of extra spacing in function comment (jsc#SLE-4796).
- fm10k: use struct_size() in kzalloc() (jsc#SLE-4796).
- fs/nfs: Fix nfs_parse_devname to not modify it's argument (git-fixes).
- fs/sync.c: sync_file_range(2) may use WB_SYNC_ALL writeback (bsc#1136432).
- fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount (bsc#1136435).
- fs: avoid fdput() after failed fdget() in vfs_dedupe_file_range() (bsc#1132384, bsc#1132219).
- ftrace/x86_64: Emulate call function while updating in breakpoint handler (bsc#1099658).
- futex: Cure exit race (bsc#1050549).
- futex: Ensure that futex address is aligned in handle_futex_death() (bsc#1050549).
- futex: Handle early deadlock return correctly (bsc#1050549).
- genetlink: Fix a memory leak on error path (networking-stable-19_03_28).
- ghes, EDAC: Fix ghes_edac registration (bsc#1133176).
- gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input (bsc#1051510).
- gpio: aspeed: fix a potential NULL pointer dereference (bsc#1051510).
- gpio: gpio-omap: fix level interrupt idling (bsc#1051510).
- gpio: of: Fix of_gpiochip_add() error path (bsc#1051510).
- gpu: ipu-v3: dp: fix CSC handling (bsc#1051510).
- gre6: use log_ecn_error module parameter in ip6_tnl_rcv() (git-fixes).
- hid: core: move Usage Page concatenation to Main item (bsc#1093389).
- hid: debug: fix race condition with between rdesc_show() and device removal (bsc#1051510).
- hid: i2c-hid: Ignore input report if there's no data present on Elan touchpanels (bsc#1133486).
- hid: input: add mapping for 'Toggle Display' key (bsc#1051510).
- hid: input: add mapping for Assistant key (bsc#1051510).
- hid: input: add mapping for Expose/Overview key (bsc#1051510).
- hid: input: add mapping for keyboard Brightness Up/Down/Toggle keys (bsc#1051510).
- hid: input: fix a4tech horizontal wheel custom usage (bsc#1137429).
- hid: intel-ish-hid: avoid binding wrong ishtp_cl_device (bsc#1051510).
- hid: intel-ish: ipc: handle PIMR before ish_wakeup also clear PISR busy_clear bit (bsc#1051510).
- hid: logitech: check the return value of create_singlethread_workqueue (bsc#1051510).
- hv_netvsc: Fix IP header checksum for coalesced packets (networking-stable-19_03_07).
- hwmon: (f71805f) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (pc87427) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (vt1211) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwrng: virtio - Avoid repeated init of completion (bsc#1051510).
- i2c: imx: correct the method of getting private data in notifier_call (bsc#1111666).
- i2c: Make i2c_unregister_device() NULL-aware (bsc#1108193).
- i2c: synquacer: fix enumeration of slave devices (bsc#1111666).
- i40e: Able to add up to 16 MAC filters on an untrusted VF (jsc#SLE-4797).
- i40e: add new pci id for X710/XXV710 N3000 cards (jsc#SLE-4797).
- i40e: add num_vectors checker in iwarp handler (jsc#SLE-4797).
- i40e: Add support FEC configuration for Fortville 25G (jsc#SLE-4797).
- i40e: Add support for X710 B/P and SFP+ cards (jsc#SLE-4797).
- i40e: add tracking of AF_XDP ZC state for each queue pair (jsc#SLE-4797).
- i40e: change behavior on PF in response to MDD event (jsc#SLE-4797).
- i40e: Change unmatched function types (jsc#SLE-4797).
- i40e: Changed maximum supported FW API version to 1.8 (jsc#SLE-4797).
- i40e: check queue pairs num in config queues handler (jsc#SLE-4797).
- i40e: clean up several indentation issues (jsc#SLE-4797).
- i40e: do not allow changes to HW VLAN stripping on active port VLANs (jsc#SLE-4797).
- i40e: Fix for 10G ports LED not blinking (jsc#SLE-4797).
- i40e: Fix for allowing too many MDD events on VF (jsc#SLE-4797).
- i40e: fix i40e_ptp_adjtime when given a negative delta (jsc#SLE-4797).
- i40e: Fix misleading error message (jsc#SLE-4797).
- i40e: fix misleading message about promisc setting on un-trusted VF (jsc#SLE-4797).
- i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c (jsc#SLE-4797).
- i40e: Fix the typo in adding 40GE KR4 mode (jsc#SLE-4797).
- i40e: Further implementation of LLDP (jsc#SLE-4797).
- i40e: Implement DDP support in i40e driver (jsc#SLE-4797).
- i40e: increase indentation (jsc#SLE-4797).
- i40e: Introduce recovery mode support (jsc#SLE-4797).
- i40e: Limiting RSS queues to CPUs (jsc#SLE-4797).
- i40e: Memory leak in i40e_config_iwarp_qvlist (jsc#SLE-4797).
- i40e: missing input validation on VF message handling by the PF (jsc#SLE-4797).
- i40e: move i40e_xsk_umem function (jsc#SLE-4797).
- i40e: print pci vendor and device ID during probe (jsc#SLE-4797).
- i40e: Queues are reserved despite 'Invalid argument' error (jsc#SLE-4797).
- i40e: remove debugfs tx_timeout support (jsc#SLE-4797).
- i40e: remove error msg when vf with port vlan tries to remove vlan 0 (jsc#SLE-4797).
- i40e: Remove misleading messages for untrusted VF (jsc#SLE-4797).
- i40e: remove out-of-range comparisons in i40e_validate_cloud_filter (jsc#SLE-4797).
- i40e: Remove umem from VSI (jsc#SLE-4797).
- i40e: Report advertised link modes on 40GBase_LR4, CR4 and fibre (jsc#SLE-4797).
- i40e: Report advertised link modes on 40GBASE_SR4 (jsc#SLE-4797).
- i40e: Revert ShadowRAM checksum calculation change (jsc#SLE-4797).
- i40e: save PTP time before a device reset (jsc#SLE-4797).
- i40e: Setting VF to VLAN 0 requires restart (jsc#SLE-4797).
- i40e: ShadowRAM checksum calculation change (jsc#SLE-4797).
- i40e: The driver now prints the API version in error message (jsc#SLE-4797).
- i40e: Use struct_size() in kzalloc() (jsc#SLE-4797).
- i40e: VF's promiscuous attribute is not kept (jsc#SLE-4797).
- i40e: Wrong truncation from u16 to u8 (jsc#SLE-4797).
- i40iw: Avoid panic when handling the inetdev event (jsc#SLE-4793).
- i40iw: remove support for ib_get_vector_affinity (jsc#SLE-4793).
- i40iw: remove use of VLAN_TAG_PRESENT (jsc#SLE-4793).
- ib/hfi1: Add debugfs to control expansion ROM write protect (jsc#SLE-4925).
- ib/hfi1: Add selected Rcv counters (jsc#SLE-4925).
- ib/hfi1: Close VNIC sdma_progress sleep window (jsc#SLE-4925).
- ib/hfi1: Consider LMC in 16B/bypass ingress packet check (jsc#SLE-4925).
- ib/hfi1: Correctly process FECN and BECN in packets (jsc#SLE-4925).
- ib/hfi1: Dump pio info for non-user send contexts (jsc#SLE-4925).
- ib/hfi1: Eliminate opcode tests on mr deref (jsc#SLE-4925).
- ib/hfi1: Failed to drain send queue when QP is put into error state (jsc#SLE-4925).
- ib/hfi1: Fix the allocation of RSM table (jsc#SLE-4925).
- ib/hfi1: Fix two format strings (jsc#SLE-4925).
- ib/hfi1: Fix WQ_MEM_RECLAIM warning (jsc#SLE-4925).
- ib/hfi1: Ignore LNI errors before DC8051 transitions to Polling state (jsc#SLE-4925).
- ib/hfi1: Incorrect sizing of sge for PIO will OOPs (jsc#SLE-4925).
- ib/hfi1: Limit VNIC use of SDMA engines to the available count (jsc#SLE-4925).
- ib/hfi1: Reduce lock contention on iowait_lock for sdma and pio (jsc#SLE-4925).
- ib/hfi1: Remove overly conservative VM_EXEC flag check (jsc#SLE-4925).
- ib/hfi1: Remove WARN_ON when freeing expected receive groups (jsc#SLE-4925).
- ib/hfi1: Unreserve a reserved request when it is completed (jsc#SLE-4925).
- ib/hw: Remove unneeded semicolons (bsc#1136456 jsc#SLE-4689).
- ib/rdmavt: Add wc_flags and wc_immdata to cq entry trace (jsc#SLE-4925).
- ib/rdmavt: Fix frwr memory registration (jsc#SLE-4925).
- ib/rdmavt: Fix loopback send with invalidate ordering (jsc#SLE-4925).
- ib/{rdmavt, hfi1): Miscellaneous comment fixes (jsc#SLE-4925).
- ibmvnic: Add device identification to requested IRQs (bsc#1137739).
- ibmvnic: Do not close unopened driver during reset (bsc#1137752).
- ibmvnic: Enable GRO (bsc#1132227).
- ibmvnic: Fix completion structure initialization (bsc#1131659).
- ibmvnic: Fix netdev feature clobbering during a reset (bsc#1132227).
- ibmvnic: Fix unchecked return codes of memory allocations (bsc#1137752).
- ibmvnic: Refresh device multicast list after reset (bsc#1137752).
- ibmvnic: remove set but not used variable 'netdev' (bsc#1137739).
- ice : Ensure only valid bits are set in ice_aq_set_phy_cfg (jsc#SLE-4803).
- ice: Add 52 byte RSS hash key support (jsc#SLE-4803).
- ice: add and use new ice_for_each_traffic_class() macro (jsc#SLE-4803).
- ice: Add code for DCB initialization part 1/4 (jsc#SLE-4803).
- ice: Add code for DCB initialization part 2/4 (jsc#SLE-4803).
- ice: Add code for DCB initialization part 3/4 (jsc#SLE-4803).
- ice: Add code for DCB initialization part 4/4 (jsc#SLE-4803).
- ice: Add code for DCB rebuild (jsc#SLE-4803).
- ice: Add code to control FW LLDP and DCBX (jsc#SLE-4803).
- ice: Add code to get DCB related statistics (jsc#SLE-4803).
- ice: Add code to process LLDP Mib change events (jsc#SLE-4803).
- ice: add const qualifier to mac_addr parameter (jsc#SLE-4803).
- ice: Add ethtool private flag to make forcing link down optional (jsc#SLE-4803).
- ice: Add ethtool set_phys_id handler (jsc#SLE-4803).
- ice: Add function to program ethertype based filter rule on VSIs (jsc#SLE-4803).
- ice: Add missing case in print_link_msg for printing flow control (jsc#SLE-4803).
- ice: Add missing PHY type to link settings (jsc#SLE-4803).
- ice: Add more validation in ice_vc_cfg_irq_map_msg (jsc#SLE-4803).
- ice: Add priority information into VLAN header (jsc#SLE-4803).
- ice: Add reg_idx variable in ice_q_vector structure (jsc#SLE-4803).
- ice: Add support for adaptive interrupt moderation (jsc#SLE-4803).
- ice: Add support for new PHY types (jsc#SLE-4803).
- ice: Add support for PF/VF promiscuous mode (jsc#SLE-4803).
- ice: Allow for software timestamping (jsc#SLE-4803).
- ice: Always free/allocate q_vectors (jsc#SLE-4803).
- ice: Audit hotpath structures with pahole (jsc#SLE-4803).
- ice: avoid multiple unnecessary de-references in probe (jsc#SLE-4803).
- ice: Bump driver version (jsc#SLE-4803).
- ice: Bump version (jsc#SLE-4803).
- ice: Calculate ITR increment based on direct calculation (jsc#SLE-4803).
- ice: change VF VSI tc info along with num_queues (jsc#SLE-4803).
- ice: check for a leaf node presence (jsc#SLE-4803).
- ice: clear VF ARQLEN register on reset (jsc#SLE-4803).
- ice: code cleanup in ice_sched.c (jsc#SLE-4803).
- ice: configure GLINT_ITR to always have an ITR gran of 2 (jsc#SLE-4803).
- ice: Configure RSS LUT and HASH KEY in rebuild path (jsc#SLE-4803).
- ice: Create a generic name for the ice_rx_flg64_bits structure (jsc#SLE-4803).
- ice: Create framework for VSI queue context (jsc#SLE-4803).
- ice: Determine descriptor count and ring size based on PAGE_SIZE (jsc#SLE-4803).
- ice: Disable sniffing VF traffic on PF (jsc#SLE-4803).
- ice: Do not bail out when filter already exists (jsc#SLE-4803).
- ice: Do not let VF know that it is untrusted (jsc#SLE-4803).
- ice: Do not remove VLAN filters that were never programmed (jsc#SLE-4803).
- ice: Do not set LB_EN for prune switch rules (jsc#SLE-4803).
- ice: do not spam VFs with link messages (jsc#SLE-4803).
- ice: Do not unnecessarily initialize local variable (jsc#SLE-4803).
- ice: Enable LAN_EN for the right recipes (jsc#SLE-4803).
- ice: Enable link events over the ARQ (jsc#SLE-4803).
- ice: Enable MAC anti-spoof by default (jsc#SLE-4803).
- ice: enable VF admin queue interrupts (jsc#SLE-4803).
- ice: Fix added in VSI supported nodes calc (jsc#SLE-4803).
- ice: Fix broadcast traffic in port VLAN mode (jsc#SLE-4803).
- ice: Fix for adaptive interrupt moderation (jsc#SLE-4803).
- ice: Fix for allowing too many MDD events on VF (jsc#SLE-4803).
- ice: Fix for FC get rx/tx pause params (jsc#SLE-4803).
- ice: fix ice_remove_rule_internal vsi_list handling (jsc#SLE-4803).
- ice: Fix incorrect use of abbreviations (jsc#SLE-4803).
- ice: Fix issue reclaiming resources back to the pool after reset (jsc#SLE-4803).
- ice: Fix issue reconfiguring VF queues (jsc#SLE-4803).
- ice: Fix issue when adding more than allowed VLANs (jsc#SLE-4803).
- ice: fix issue where host reboots on unload when iommu=on (jsc#SLE-4803).
- ice: Fix issue with VF reset and multiple VFs support on PFs (jsc#SLE-4803).
- ice: fix numeric overflow warning (jsc#SLE-4803).
- ice: fix some function prototype and signature style issues (jsc#SLE-4803).
- ice: fix stack hogs from struct ice_vsi_ctx structures (jsc#SLE-4803).
- ice: fix static analysis warnings (jsc#SLE-4803).
- ice: Fix the calculation of ICE_MAX_MTU (jsc#SLE-4803).
- ice: fix the divide by zero issue (jsc#SLE-4803).
- ice: Fix typos in code comments (jsc#SLE-4803).
- ice: flush Tx pipe on disable queue timeout (jsc#SLE-4803).
- ice: Gather the rx buf clean-up logic for better reuse (jsc#SLE-4803).
- ice: Get resources per function (jsc#SLE-4803).
- ice: Get rid of ice_pull_tail (jsc#SLE-4803).
- ice: Get VF VSI instances directly via PF (jsc#SLE-4803).
- ice: Implement flow to reset VFs with PFR and other resets (jsc#SLE-4803).
- ice: Implement getting and setting ethtool coalesce (jsc#SLE-4803).
- ice: Implement pci_error_handler ops (jsc#SLE-4803).
- ice: Implement support for normal get_eeprom[_len] ethtool ops (jsc#SLE-4803).
- ice: Limit the ice_add_rx_frag to frag addition (jsc#SLE-4803).
- ice: map Rx buffer pages with DMA attributes (jsc#SLE-4803).
- ice: Move aggregator list into ice_hw instance (jsc#SLE-4803).
- ice: Offload SCTP checksum (jsc#SLE-4803).
- ice: only use the VF for ICE_VSI_VF in ice_vsi_release (jsc#SLE-4803).
- ice: Preserve VLAN Rx stripping settings (jsc#SLE-4803).
- ice: Prevent unintended multiple chain resets (jsc#SLE-4803).
- ice: Pull out page reuse checks onto separate function (jsc#SLE-4803).
- ice: Put __ICE_PREPARED_FOR_RESET check in ice_prepare_for_reset (jsc#SLE-4803).
- ice: Reduce scope of variable in ice_vsi_cfg_rxqs (jsc#SLE-4803).
- ice: Refactor a few Tx scheduler functions (jsc#SLE-4803).
- ice: Refactor getting/setting coalesce (jsc#SLE-4803).
- ice: Refactor link event flow (jsc#SLE-4803).
- ice: Remove '2 BITS' comment (jsc#SLE-4803).
- ice: Remove __always_unused attribute (jsc#SLE-4803).
- ice: remove redundant variable and if condition (jsc#SLE-4803).
- ice: Remove runtime change of PFINT_OICR_ENA register (jsc#SLE-4803).
- ice: Remove unnecessary braces (jsc#SLE-4803).
- ice: Remove unnecessary newlines from log messages (jsc#SLE-4803).
- ice: Remove unnecessary wait when disabling/enabling Rx queues (jsc#SLE-4803).
- ice: Remove unused function prototype (jsc#SLE-4803).
- ice: Remove unused function prototype (jsc#SLE-4803).
- ice: Remove unused vsi_id field (jsc#SLE-4803).
- ice: Reset all VFs with VFLR during SR-IOV init flow (jsc#SLE-4803).
- ice: Resolve static analysis reported issue (jsc#SLE-4803).
- ice: Restore VLAN switch rule if port VLAN existed before (jsc#SLE-4803).
- ice: Retrieve rx_buf in separate function (jsc#SLE-4803).
- ice: Return configuration error without queue to disable (jsc#SLE-4803).
- ice: Rework queue management code for reuse (jsc#SLE-4803).
- ice: Separate if conditions for ice_set_features() (jsc#SLE-4803).
- ice: Set LAN_EN for all directional rules (jsc#SLE-4803).
- ice: Set physical link up/down when an interface is set up/down (jsc#SLE-4803).
- ice: sizeof(type&gt;) should be avoided (jsc#SLE-4803).
- ice: Suppress false-positive style issues reported by static analyzer (jsc#SLE-4803).
- ice: use absolute vector ID for VFs (jsc#SLE-4803).
- ice: Use bitfields where possible (jsc#SLE-4803).
- ice: Use dev_err when ice_cfg_vsi_lan fails (jsc#SLE-4803).
- ice: Use ice_for_each_q_vector macro where possible (jsc#SLE-4803).
- ice: use ice_for_each_vsi macro when possible (jsc#SLE-4803).
- ice: use irq_num var in ice_vsi_req_irq_msix (jsc#SLE-4803).
- ice: Use more efficient structures (jsc#SLE-4803).
- ice: Use pf instead of vsi-back (jsc#SLE-4803).
- ice: use virt channel status codes (jsc#SLE-4803).
- ice: Validate ring existence and its q_vector per VSI (jsc#SLE-4803).
- igb: Bump version number (jsc#SLE-4798).
- igb: Exclude device from suspend direct complete optimization (jsc#SLE-4798).
- igb: fix various indentation issues (jsc#SLE-4798).
- igb: Fix WARN_ONCE on runtime suspend (jsc#SLE-4798).
- igb: use struct_size() helper (jsc#SLE-4798).
- igc: Add ethtool support (jsc#SLE-4799).
- igc: Add multiple receive queues control supporting (jsc#SLE-4799).
- igc: Add support for statistics (jsc#SLE-4799).
- igc: Add support for the ntuple feature (jsc#SLE-4799).
- igc: Extend the ethtool supporting (jsc#SLE-4799).
- igc: Fix code redundancy (jsc#SLE-4799).
- igc: Fix the typo in igc_base.h header definition (jsc#SLE-4799).
- igc: Remove the 'igc_get_phy_id_base' method (jsc#SLE-4799).
- igc: Remove the 'igc_read_mac_addr_base' method (jsc#SLE-4799).
- igc: Remove unneeded code (jsc#SLE-4799).
- igc: Remove unneeded hw_dbg prints (jsc#SLE-4799).
- igc: Remove unreachable code from igc_phy.c file (jsc#SLE-4799).
- igc: Remove unused code (jsc#SLE-4799).
- igc: Use struct_size() helper (jsc#SLE-4799).
- igmp: fix incorrect unsolicit report count when join group (git-fixes).
- iio/gyro/bmg160: Use millidegrees for temperature scale (bsc#1051510).
- iio: ad_sigma_delta: select channel when reading register (bsc#1051510).
- iio: adc: at91: disable adc channel interrupt in timeout case (bsc#1051510).
- iio: adc: fix warning in Qualcomm PM8xxx HK/XOADC driver (bsc#1051510).
- iio: adc: xilinx: fix potential use-after-free on remove (bsc#1051510).
- iio: core: fix a possible circular locking dependency (bsc#1051510).
- iio: cros_ec: Fix the maths for gyro scale calculation (bsc#1051510).
- iio: dac: mcp4725: add missing powerdown bits in store eeprom (bsc#1051510).
- iio: Fix scan mask selection (bsc#1051510).
- iio: gyro: mpu3050: fix chip ID reading (bsc#1051510).
- include/linux/bitops.h: introduce BITS_PER_TYPE (bsc#1136345 jsc#SLE-4681).
- indirect call wrappers: helpers to speed-up indirect calls of builtin (bsc#1124503).
- inetpeer: fix uninit-value in inet_getpeer (git-fixes).
- infiniband/qedr: Potential null ptr dereference of qp (bsc#1136456 jsc#SLE-4689).
- infiniband: hfi1: drop crazy DEBUGFS_SEQ_FILE_CREATE() macro (jsc#SLE-4925).
- infiniband: hfi1: no need to check return value of debugfs_create functions (jsc#SLE-4925).
- input: elan_i2c - add hardware ID for multiple Lenovo laptops (bsc#1051510).
- input: introduce KEY_ASSISTANT (bsc#1051510).
- input: snvs_pwrkey - initialize necessary driver data before enabling IRQ (bsc#1051510).
- input: synaptics-rmi4 - fix possible double free (bsc#1051510).
- input: synaptics-rmi4 - write config register values to the right offset (bsc#1051510).
- intel: correct return from set features callback (jsc#SLE-4795).
- intel_idle: add support for Jacobsville (jsc#SLE-5394).
- intel_th: msu: Fix single mode with IOMMU (bsc#1051510).
- intel_th: pci: Add Comet Lake support (bsc#1051510).
- io: accel: kxcjk1013: restore the range after resume (bsc#1051510).
- iommu/amd: Set exclusion range correctly (bsc#1130425).
- iommu/arm-smmu-v3: Abort all transactions if SMMU is enabled in kdump kernel (bsc#1117158).
- iommu/arm-smmu-v3: Do not disable SMMU in kdump kernel (bsc#1117158 bsc#1134671).
- iommu/vt-d: Do not request page request irq under dmar_global_lock (bsc#1135006).
- iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU (bsc#1135007).
- iommu/vt-d: Set intel_iommu_gfx_mapped correctly (bsc#1135008).
- ip6_tunnel: collect_md xmit: Use ip_tunnel_key's provided src address (git-fixes).
- ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type (networking-stable-19_04_10).
- ip_gre: fix parsing gre header in ipgre_err (git-fixes).
- ip_tunnel: Fix name string concatenate in __ip_tunnel_create() (git-fixes).
- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- ipmi: Fix I2C client removal in the SSIF driver (bsc#1108193).
- ipmi: fix sleep-in-atomic in free_user at cleanup SRCU user-&gt;release_barrier (bsc#1111666).
- ipmi: Prevent use-after-free in deliver_response (bsc#1111666).
- ipmi:ssif: compare block number correctly for multi-part return messages (bsc#1051510).
- ipmi_ssif: Remove duplicate NULL check (bsc#1108193).
- ipv4: add sanity checks in ipv4_link_failure() (git-fixes).
- ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled (git-fixes).
- ipv4: ensure rcu_read_lock() in ipv4_link_failure() (networking-stable-19_04_19).
- ipv4: ip_do_fragment: Preserve skb_iif during fragmentation (networking-stable-19_05_04).
- ipv4: recompile ip options in ipv4_link_failure (networking-stable-19_04_19).
- ipv4: Return error for RTA_VIA attribute (networking-stable-19_03_07).
- ipv4: set the tcp_min_rtt_wlen range from 0 to one day (networking-stable-19_04_30).
- ipv6/flowlabel: wait rcu grace period before put_pid() (git-fixes).
- ipv6: fix cleanup ordering for ip6_mr failure (git-fixes).
- ipv6: fix cleanup ordering for pingv6 registration (git-fixes).
- ipv6: Fix dangling pointer when ipv6 fragment (git-fixes).
- ipv6: invert flowlabel sharing check in process and user mode (git-fixes).
- ipv6: mcast: fix unsolicited report interval after receiving querys (git-fixes).
- ipv6: propagate genlmsg_reply return code (networking-stable-19_02_24).
- ipv6: Return error for RTA_VIA attribute (networking-stable-19_03_07).
- ipv6: sit: reset ip header pointer in ipip6_rcv (git-fixes).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route (bsc#1051510).
- ipvlan: disallow userns cap_net_admin to change global mode/flags (networking-stable-19_03_15).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf (git-fixes).
- ipvs: fix buffer overflow with sync daemon and service (git-fixes).
- ipvs: fix check on xmit to non-local addresses (git-fixes).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest() (bsc#1051510).
- ipvs: fix rtnl_lock lockups caused by start_sync_thread (git-fixes).
- ipvs: Fix signed integer overflow when setsockopt timeout (bsc#1051510).
- ipvs: fix stats update from local clients (git-fixes).
- ipvs: remove IPS_NAT_MASK check to fix passive FTP (git-fixes).
- iw_cxgb*: kzalloc the iwcm verbs struct (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: Check for send WR also while posting write with completion WR (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: complete the cached SRQ buffers (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: cq/qp mask depends on bar2 pages in a host page (bsc#1127371).
- iw_cxgb4: Fix qpid leak (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: fix srqidx leak during connection abort (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: Make function read_tcb() static (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- iw_cxgb4: use listening ep tos when accepting new connections (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: use tos when finding ipv6 routes (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: use tos when importing the endpoint (bsc#1136348 jsc#SLE-4684).
- iwiwifi: fix bad monitor buffer register addresses (bsc#1129770).
- iwlwifi: fix driver operation for 5350 (bsc#1111666).
- iwlwifi: fix send hcmd timeout recovery flow (bsc#1129770).
- ixgbe: fix mdio bus registration (jsc#SLE-4795).
- ixgbe: fix older devices that do not support IXGBE_MRQC_L3L4TXSWEN (jsc#SLE-4795).
- ixgbe: register a mdiobus (jsc#SLE-4795).
- ixgbe: remove magic constant in ixgbe_reset_hw_82599() (jsc#SLE-4795).
- ixgbe: use mii_bus to handle MII related ioctls (jsc#SLE-4795).
- ixgbe: Use struct_size() helper (jsc#SLE-4795).
- jbd2: check superblock mapped prior to committing (bsc#1136430).
- kabi i40e ignore include (jsc#SLE-4797).
- kabi protect struct iw_cm_id (bsc#1136348 jsc#SLE-4684).
- kabi protect struct vf_info (bsc#1136347 jsc#SLE-4683).
- kABI workaround for removed usb_interface.pm_usage_cnt field (bsc#1051510).
- kABI workaround for snd_seq_kernel_client_enqueue() API changes (bsc#1051510).
- kabi/severities: exclude hns3 symbols (bsc#1134948)
- kabi/severities: exclude qed* symbols (bsc#1136461)
- kabi/severities: missed hns roce module
- kabi: arm64: cpuhotplug: Reuse other arch's cpuhp_state ().
- kabi: drop LINUX_Mib_TCPWQUEUETOOBIG snmp counter (bsc#1137586).
- kabi: implement map_lookup_elem_sys_only in another way (bsc#1083647).
- kabi: move sysctl_tcp_min_snd_mss to preserve struct net layout (bsc#1137586).
- kABI: protect dma-mapping.h include (kabi).
- kABI: protect functions using struct net_generic (bsc#1129845 LTC#176252).
- kABI: protect ip_options_rcv_srr (kabi).
- kABI: protect struct mlx5_td (kabi).
- kABI: protect struct pci_dev (kabi).
- kABI: protect struct smc_ib_device (bsc#1129845 LTC#176252).
- kABI: protect struct smcd_dev (bsc#1129845 LTC#176252).
- kABI: restore icmp_send (kabi).
- kbuild: strip whitespace in cmd_record_mcount findstring (bsc#1065729).
- kcm: switch order of device registration to fix a crash (bnc#1130527).
- kernel/signal.c: trace_signal_deliver when signal_group_exit (git-fixes).
- kernel/sys.c: prctl: fix false positive in validate_prctl_map() (git-fixes).
- kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv (bsc#1051510).
- kernel/sysctl.c: fix out-of-bounds access when setting file-max (bsc#1051510).
- kernfs: do not set dentry-&gt;d_fsdata (boo#1133115).
- keys: always initialize keyring_index_key::desc_len (bsc#1051510).
- keys: safe concurrent user-&gt;{session,uid}_keyring access (bsc#1135642).
- keys: user: Align the payload buffer (bsc#1051510).
- kmsg: Update message catalog to latest ibM level (2019/03/08) (bsc#1128904 LTC#176078).
- kvm: Call kvm_arch_memslots_updated() before updating memslots (bsc#1132563).
- kvm: Fix kABI for AMD SMAP Errata workaround (bsc#1133149).
- kvm: Fix UAF in nested posted interrupt processing (bsc#1134199).
- kvm: nVMX: Apply addr size mask to effective address for VMX instructions (bsc#1132561).
- kvm: nVMX: Clear reserved bits of #DB exit qualification (bsc#1134200).
- kvm: nVMX: Ignore limit checks on VMX instructions using flat segments (bsc#1132564).
- kvm: nVMX: restore host state in nested_vmx_vmexit for VMFail (bsc#1134201).
- kvm: nVMX: Sign extend displacements of VMX instr's mem operands (bsc#1132562).
- kvm: PPC: Book3S HV: Fix race between kvm_unmap_hva_range and MMU mode switch (bsc#1061840).
- kvm: s390: fix memory overwrites when not using SCA entries (bsc#1136206).
- kvm: s390: provide io interrupt kvm_stat (bsc#1136206).
- kvm: s390: use created_vcpus in more places (bsc#1136206).
- kvm: s390: vsie: fix 8k check for the itdba (bsc#1136206).
- kvm: SVM: Workaround errata#1096 (insn_len maybe zero on SMAP violation) (bsc#1133149).
- kvm: VMX: Compare only a single byte for VMCS' 'launched' in vCPU-run (bsc#1132555).
- kvm: VMX: Zero out *all* general purpose registers after VM-Exit (bsc#1134202).
- kvm: x86/mmu: Detect MMIO generation wrap in any address space (bsc#1132570).
- kvm: x86/mmu: Do not cache MMIO accesses while memslots are in flux (bsc#1132571).
- kvm: x86: Always use 32-bit SMRAM save state for 32-bit kernels (bsc#1134203).
- kvm: x86: Do not clear EFER during SMM transitions for 32-bit vCPU (bsc#1134204).
- kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (bsc#1114279).
- kvm: x86: Report STibP on GET_SUPPORTED_CPUID (bsc#1111331).
- kvm: x86: svm: make sure NMI is injected after nmi_singlestep (bsc#1134205).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- l2tp: filter out non-PPP sessions in pppol2tp_tunnel_ioctl() (git-fixes).
- l2tp: fix missing refcount drop in pppol2tp_tunnel_ioctl() (git-fixes).
- l2tp: only accept PPP sessions in pppol2tp_connect() (git-fixes).
- l2tp: prevent pppol2tp_connect() from creating kernel sockets (git-fixes).
- l2tp: revert 'l2tp: fix missing print session offset info' (bsc#1051510).
- leds: avoid races with workqueue (bsc#1051510).
- leds: pwm: silently error out on EPROBE_DEFER (bsc#1051510).
- lib: add crc64 calculation routines (bsc#1130972).
- lib: do not depend on linux headers being installed (bsc#1130972).
- libata: fix using DMA buffers on stack (bsc#1051510).
- libcxgb: fix incorrect ppmax calculation (bsc#1136345 jsc#SLE-4681).
- lightnvm: if LUNs are already allocated fix return (bsc#1085535).
- linux/kernel.h: Use parentheses around argument in u64_to_user_ptr() (bsc#1051510).
- livepatch: Convert error about unsupported reliable stacktrace into a warning (bsc#1071995).
- livepatch: Remove custom kobject state handling (bsc#1071995).
- livepatch: Remove duplicated code for early initialization (bsc#1071995).
- lpfc: validate command in lpfc_sli4_scmd_to_wqidx_distr() (bsc#1129138).
- mac80211: do not attempt to rename ERR_PTR() debugfs dirs (bsc#1111666).
- mac80211: do not call driver wake_tx_queue op during reconfig (bsc#1051510).
- mac80211: fix memory accounting with A-MSDU aggregation (bsc#1051510).
- mac80211: fix unaligned access in mesh table hash function (bsc#1051510).
- mac80211: Honor SW_CRYPTO_CONTROL for unicast keys in AP VLAN mode (bsc#1111666).
- mac8390: Fix mmio access size probe (bsc#1051510).
- md/raid1: do not clear bitmap bits on interrupted recovery (git-fixes).
- md/raid5: fix 'out of memory' during raid cache recovery (git-fixes).
- md: batch flush requests (bsc#1119680).
- md: Fix failed allocation of md_register_thread (git-fixes).
- md: fix invalid stored role for a disk (bsc#1051510).
- media: atmel: atmel-isc: fix INIT_WORK misplacement (bsc#1051510).
- media: cx18: update *pos correctly in cx18_read_pos() (bsc#1051510).
- media: cx23885: check allocation return (bsc#1051510).
- media: davinci-isif: avoid uninitialized variable use (bsc#1051510).
- media: davinci/vpbe: array underflow in vpbe_enum_outputs() (bsc#1051510).
- media: ivtv: update *pos correctly in ivtv_read_pos() (bsc#1051510).
- media: mt9m111: set initial frame size other than 0x0 (bsc#1051510).
- media: mtk-jpeg: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: mx2_emmaprp: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: omap_vout: potential buffer overflow in vidioc_dqbuf() (bsc#1051510).
- media: ov2659: fix unbalanced mutex_lock/unlock (bsc#1051510).
- media: pvrusb2: Prevent a buffer overflow (bsc#1129770).
- media: s5p-g2d: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: s5p-jpeg: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: serial_ir: Fix use-after-free in serial_ir_init_module (bsc#1051510).
- media: sh_veu: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame (bsc#1051510).
- media: vivid: use vfree() instead of kfree() for dev-&gt;bitmap_cap (bsc#1051510).
- media: wl128x: Fix an error code in fm_download_firmware() (bsc#1051510).
- media: wl128x: prevent two potential buffer overflows (bsc#1051510).
- memcg: make it work on sparse non-0-node systems (bnc#1133616).
- memcg: make it work on sparse non-0-node systems kabi (bnc#1133616).
- mISDN: Check address length before reading address family (bsc#1051510).
- missing barriers in some of unix_sock -&gt;addr and -&gt;path accesses (networking-stable-19_03_15).
- mlxsw: spectrum: Fix autoneg status in ethtool (networking-stable-19_04_30).
- mm/debug.c: fix __dump_page when mapping-&gt;host is not set (bsc#1131934).
- mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (bsc#1135330).
- mm/page_isolation.c: fix a wrong flag in set_migratetype_isolate() (bsc#1131935).
- mm/vmalloc: fix size check for remap_vmalloc_range_partial() (bsc#1133825).
- mm: create non-atomic version of SetPageReserved for init use (jsc#SLE-6647).
- mm: Fix buggy backport leading to MAP_SYNC failures (bsc#1137372)
- mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (bnc#1012382).
- mmc: bcm2835 MMC issues (bsc#1070872).
- mmc: block: Delete gendisk before cleaning up the request queue (bsc#1127616).
- mmc: core: fix possible use after free of host (bsc#1051510).
- mmc: core: Fix tag set memory leak (bsc#1111666).
- mmc: davinci: remove extraneous __init annotation (bsc#1051510).
- mmc: sdhci: Fix data command CRC error handling (bsc#1051510).
- mmc: sdhci: Handle auto-command errors (bsc#1051510).
- mmc: sdhci: Rename SDHCI_ACMD12_ERR and SDHCI_INT_ACMD12ERR (bsc#1051510).
- mmc: tmio_mmc_core: do not claim spurious interrupts (bsc#1051510).
- mount: copy the port field into the cloned nfs_server structure (bsc#1136990).
- mpls: Return error for RTA_GATEWAY attribute (networking-stable-19_03_07).
- mt7601u: bump supported EEPROM version (bsc#1051510).
- mtd: docg3: fix a possible memory leak of mtd-&gt;name (bsc#1051510).
- mtd: docg3: Fix passing zero to 'PTR_ERR' warning in doc_probe_device (bsc#1051510).
- mtd: nand: omap: Fix comment in platform data using wrong Kconfig symbol (bsc#1051510).
- mtd: part: fix incorrect format specifier for an unsigned long long (bsc#1051510).
- mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write (bsc#1129770).
- mwifiex: do not advertise ibSS features without FW support (bsc#1129770).
- mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (bsc#1136935).
- mwifiex: Fix mem leak in mwifiex_tm_cmd (bsc#1051510).
- mwifiex: Fix possible buffer overflows at parsing bss descriptor
- mwifiex: Make resume actually do something useful again on SDIO cards (bsc#1111666).
- mwifiex: prevent an array overflow (bsc#1051510).
- mwl8k: Fix rate_idx underflow (bsc#1051510).
- neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit (git-fixes).
- net-gro: Fix GRO flush when receiving a GSO packet (networking-stable-19_04_10).
- net/hsr: fix possible crash in add_timer() (networking-stable-19_03_15).
- net/ibmvnic: Remove tests of member address (bsc#1137739).
- net/ibmvnic: Update carrier state after link state change (bsc#1135100).
- net/ibmvnic: Update MAC address settings after adapter reset (bsc#1134760).
- net/ipv4: defensive cipso option parsing (git-fixes).
- net/ipv6: do not reinitialize ndev-&gt;cnf.addr_gen_mode on new inet6_dev (git-fixes).
- net/ipv6: fix addrconf_sysctl_addr_gen_mode (git-fixes).
- net/ipv6: propagate net.ipv6.conf.all.addr_gen_mode to devices (git-fixes).
- net/ipv6: reserve room for IFLA_INET6_ADDR_GEN_MODE (git-fixes).
- net/mlx5: Decrease default mr cache size (networking-stable-19_04_10).
- net/mlx5e: Add a lock on tir list (networking-stable-19_04_10).
- net/mlx5e: Do not overwrite pedit action when multiple pedit used (networking-stable-19_02_24).
- net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query (networking-stable-19_04_30).
- net/mlx5e: Fix error handling when refreshing TIRs (networking-stable-19_04_10).
- net/mlx5e: Fix trailing semicolon (bsc#1075020).
- net/mlx5e: IPoib, Reset QP after channels are closed (bsc#1075020).
- net/packet: fix 4gb buffer limit due to overflow check (networking-stable-19_02_24).
- net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec (git-fixes).
- net/rose: fix unbound loop in rose_loopback_timer() (networking-stable-19_04_30).
- net/sched: act_sample: fix divide by zero in the traffic path (networking-stable-19_04_10).
- net/sched: do not dereference a-&gt;goto_chain to read the chain index (bsc#1064802 bsc#1066129).
- net/sched: fix -&gt;get helper of the matchall cls (networking-stable-19_04_10).
- net/smc: add pnet table namespace support (bsc#1129845 LTC#176252).
- net/smc: add smcd support to the pnet table (bsc#1129845 LTC#176252).
- net/smc: allow pci IDs as ib device names in the pnet table (bsc#1129845 LTC#176252).
- net/smc: allow pnetid-less configuration (bsc#1129845 LTC#176252).
- net/smc: check for ip prefix and subnet (bsc#1134607 LTC#177518).
- net/smc: cleanup for smcr_tx_sndbuf_nonempty (bsc#1129845 LTC#176252).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: consolidate function parameters (bsc#1134607 LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607 LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607 LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607 LTC#177518).
- net/smc: improve smc_conn_create reason codes (bsc#1134607 LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607 LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607 LTC#177518).
- net/smc: rework pnet table (bsc#1129845 LTC#176252).
- net/smc: wait for pending work before clcsock release_sock (bsc#1134607 LTC#177518).
- net/tls: free ctx in sock destruct (bsc#1136353 jsc#SLE-4688).
- net/x25: fix a race in x25_bind() (networking-stable-19_03_15).
- net/x25: fix use-after-free in x25_device_event() (networking-stable-19_03_15).
- net/x25: reset state in x25_connect() (networking-stable-19_03_15).
- net: Add __icmp_send helper (networking-stable-19_03_07).
- net: Add header for usage of fls64() (networking-stable-19_02_20).
- net: aquantia: fix rx checksum offload for UDP/TCP over IPv6 (networking-stable-19_03_28).
- net: atm: Fix potential Spectre v1 vulnerabilities (networking-stable-19_04_19).
- net: avoid false positives in untrusted gso validation (git-fixes).
- net: avoid skb_warn_bad_offload on IS_ERR (git-fixes).
- net: avoid use IPCB in cipso_v4_error (networking-stable-19_03_07).
- net: bridge: add vlan_tunnel to bridge port policies (git-fixes).
- net: bridge: fix per-port af_packet sockets (git-fixes).
- net: bridge: multicast: use rcu to access port list from br_multicast_start_querier (git-fixes).
- net: chelsio: Add a missing check on cudg_get_buffer (bsc#1136345 jsc#SLE-4681).
- net: cxgb4: fix various indentation issues (bsc#1136345 jsc#SLE-4681).
- net: datagram: fix unbounded loop in __skb_try_recv_datagram() (git-fixes).
- net: Do not allocate page fragments that are not skb aligned (networking-stable-19_02_20).
- net: do not keep lonely packets forever in the gro hash (git-fixes).
- net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc (networking-stable-19_05_04).
- net: dsa: legacy: do not unmask port bitmaps (git-fixes).
- net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT (git-fixes).
- net: dsa: mv88e6xxx: Fix u64 statistics (networking-stable-19_03_07).
- net: ena: fix return value of ena_com_config_llq_info() (bsc#1111696 bsc#1117561).
- net: ethtool: not call vzalloc for zero sized memory request (networking-stable-19_04_10).
- net: Fix a bug in removing queues from XPS map (git-fixes).
- net: Fix for_each_netdev_feature on Big endian (networking-stable-19_02_20).
- net: fix IPv6 prefix route residue (networking-stable-19_02_20).
- net: fix uninit-value in __hw_addr_add_ex() (git-fixes).
- net: Fix untag for vlan packets without ethernet header (git-fixes).
- net: Fix vlan untag for bridge and vlan_dev with reorder_hdr off (git-fixes).
- net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv (networking-stable-19_04_19).
- net: hns3: add counter for times RX pages gets allocated (bsc#1104353 bsc#1134947).
- net: hns3: add error handler for initializing command queue (bsc#1104353 bsc#1135058).
- net: hns3: add function type check for debugfs help information (bsc#1104353 bsc#1134980).
- net: hns3: Add handling of MAC tunnel interruption (bsc#1104353 bsc#1134983).
- net: hns3: add hns3_gro_complete for HW GRO process (bsc#1104353 bsc#1135051).
- net: hns3: add linearizing checking for TSO case (bsc#1104353 bsc#1134947).
- net: hns3: add protect when handling mac addr list (bsc#1104353 ).
- net: hns3: add queue's statistics update to service task (bsc#1104353 bsc#1134981).
- net: hns3: add reset statistics for VF (bsc#1104353 bsc#1134995).
- net: hns3: add reset statistics info for PF (bsc#1104353 bsc#1134995).
- net: hns3: add some debug info for hclgevf_get_mbx_resp() (bsc#1104353 bsc#1134994).
- net: hns3: add some debug information for hclge_check_event_cause (bsc#1104353 bsc#1134994).
- net: hns3: add support for dump ncl config by debugfs (bsc#1104353 bsc#1134987).
- net: hns3: Add support for netif message level settings (bsc#1104353 bsc#1134989).
- net: hns3: adjust the timing of hns3_client_stop when unloading (bsc#1104353 bsc#1137201).
- net: hns3: always assume no drop TC for performance reason (bsc#1104353 bsc#1135049).
- net: hns3: check 1000M half for hns3_ethtool_ops.set_link_ksettings (bsc#1104353 bsc#1137201).
- net: hns3: check resetting status in hns3_get_stats() (bsc#1104353 bsc#1137201).
- net: hns3: code optimization for command queue' spin lock (bsc#1104353 bsc#1135042).
- net: hns3: combine len and checksum handling for inner and outer header (bsc#1104353 bsc#1134947).
- net: hns3: deactive the reset timer when reset successfully (bsc#1104353 bsc#1137201).
- net: hns3: divide shared buffer between TC (bsc#1104353 bsc#1135047).
- net: hns3: do not initialize MDIO bus when PHY is inexistent (bsc#1104353 bsc#1135045).
- net: hns3: do not request reset when hardware resetting (bsc#1104353 bsc#1137201).
- net: hns3: dump more information when tx timeout happens (bsc#1104353 bsc#1134990).
- net: hns3: extend the loopback state acquisition time (bsc#1104353).
- net: hns3: fix data race between ring-&gt;next_to_clean (bsc#1104353 bsc#1134975 bsc#1134945).
- net: hns3: fix error handling for desc filling (bsc#1104353 ).
- net: hns3: fix for HNS3_RXD_GRO_SIZE_M macro (bsc#1104353 bsc#1137201).
- net: hns3: fix for tunnel type handling in hns3_rx_checksum (bsc#1104353 bsc#1134946).
- net: hns3: fix for TX clean num when cleaning TX BD (bsc#1104353 ).
- net: hns3: fix for vport-&gt;bw_limit overflow problem (bsc#1104353 bsc#1134998).
- net: hns3: fix keep_alive_timer not stop problem (bsc#1104353 bsc#1135055).
- net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info() (bsc#1104353 bsc#1134990).
- net: hns3: fix pause configure fail problem (bsc#1104353 bsc#1134951 bsc#1134951).
- net: hns3: fix set port based VLAN for PF (bsc#1104353 bsc#1135053).
- net: hns3: fix set port based VLAN issue for VF (bsc#1104353 bsc#1135053).
- net: hns3: fix sparse: warning when calling hclge_set_vlan_filter_hw() (bsc#1104353 bsc#1134999).
- net: hns3: fix VLAN offload handle for VLAN inserted by port (bsc#1104353 bsc#1135053).
- net: hns3: free the pending skb when clean RX ring (bsc#1104353 bsc#1135044).
- net: hns3: handle pending reset while reset fail (bsc#1104353 bsc#1135058).
- net: hns3: handle the BD info on the last BD of the packet (bsc#1104353 bsc#1134974).
- net: hns3: ignore lower-level new coming reset (bsc#1104353 bsc#1137201).
- net: hns3: Make hclge_destroy_cmd_queue static (bsc#1104353 bsc#1137201).
- net: hns3: Make hclgevf_update_link_mode static (bsc#1104353 bsc#1137201).
- net: hns3: minor optimization for datapath (bsc#1104353 ).
- net: hns3: minor optimization for ring_space (bsc#1104353 ).
- net: hns3: minor refactor for hns3_rx_checksum (bsc#1104353 bsc#1135052).
- net: hns3: modify HNS3_NIC_STATE_INITED flag in hns3_reset_notify_uninit_enet (bsc#1104353).
- net: hns3: modify the VF network port media type acquisition method (bsc#1104353 bsc#1137201).
- net: hns3: modify VLAN initialization to be compatible with port based VLAN (bsc#1104353 bsc#1135053).
- net: hns3: not reset TQP in the DOWN while VF resetting (bsc#1104353 bsc#1134952).
- net: hns3: not reset vport who not alive when PF reset (bsc#1104353 bsc#1137201).
- net: hns3: optimize the barrier using when cleaning TX BD (bsc#1104353 bsc#1134945).
- net: hns3: prevent change MTU when resetting (bsc#1104353 bsc#1137201).
- net: hns3: prevent double free in hns3_put_ring_config() (bsc#1104353 bsc#1134950).
- net: hns3: reduce resources use in kdump kernel (bsc#1104353 bsc#1137201).
- net: hns3: refactor BD filling for l2l3l4 info (bsc#1104353 bsc#1134947).
- net: hns3: refine tx timeout count handle (bsc#1104353 bsc#1134990).
- net: hns3: remove redundant assignment of l2_hdr to itself (bsc#1104353).
- net: hns3: remove reset after command send failed (bsc#1104353 bsc#1134949).
- net: hns3: remove resetting check in hclgevf_reset_task_schedule (bsc#1104353 bsc#1135056).
- net: hns3: return 0 and print warning when hit duplicate MAC (bsc#1104353 bsc#1137201).
- net: hns3: set dividual reset level for all RAS and MSI-X errors (bsc#1104353 bsc#1135046).
- net: hns3: set up the vport alive state while reinitializing (bsc#1104353 bsc#1137201).
- net: hns3: set vport alive state to default while resetting (bsc#1104353 bsc#1137201).
- net: hns3: simplify hclgevf_cmd_csq_clean (bsc#1104353 ).
- net: hns3: some cleanup for struct hns3_enet_ring (bsc#1104353 bsc#1134947).
- net: hns3: split function hnae3_match_n_instantiate() (bsc#1104353).
- net: hns3: stop mailbox handling when command queue need re-init (bsc#1104353 bsc#1135058).
- net: hns3: stop sending keep alive msg when VF command queue needs reinit (bsc#1104353 bsc#1134972).
- net: hns3: unify maybe_stop_tx for TSO and non-TSO case (bsc#1104353 bsc#1134947).
- net: hns3: unify the page reusing for page size 4K and 64K (bsc#1104353 bsc#1134947).
- net: hns3: use a reserved byte to identify need_resp flag (bsc#1104353).
- net: hns3: use atomic_t replace u32 for arq's count (bsc#1104353 bsc#1134953).
- net: hns3: use devm_kcalloc when allocating desc_cb (bsc#1104353 bsc#1134947).
- net: hns3: use napi_schedule_irqoff in hard interrupts handlers (bsc#1104353 bsc#1134947).
- net: hsr: fix memory leak in hsr_dev_finalize() (networking-stable-19_03_15).
- net: initialize skb-&gt;peeked when cloning (git-fixes).
- net: make skb_partial_csum_set() more robust against overflows (git-fixes).
- net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails (networking-stable-19_03_07).
- net: phy: marvell: add new default led configure for m88e151x (bsc#1135018).
- net: phy: marvell: change default m88e1510 LED configuration (bsc#1135018).
- net: phy: marvell: Enable interrupt function on LED2 pin (bsc#1135018).
- net: phy: marvell: Fix buffer overrun with stats counters (networking-stable-19_05_04).
- net: rds: exchange of 8K and 1M pool (networking-stable-19_04_30).
- net: rose: fix a possible stack overflow (networking-stable-19_03_28).
- net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables &gt; 255 (networking-stable-19_03_15).
- net: sit: fix memory leak in sit_init_net() (networking-stable-19_03_07).
- net: sit: fix UBSAN Undefined behaviour in check_6rd (networking-stable-19_03_15).
- net: socket: fix potential spectre v1 gadget in socketcall (git-fixes).
- net: socket: set sock-&gt;sk to NULL after calling proto_ops::release() (networking-stable-19_03_07).
- net: stmmac: fix memory corruption with large MTUs (networking-stable-19_03_28).
- net: stmmac: move stmmac_check_ether_addr() to driver probe (networking-stable-19_04_30).
- net: test tailroom before appending to linear skb (git-fixes).
- net: thunderx: do not allow jumbo frames with XDP (networking-stable-19_04_19).
- net: thunderx: raise XDP MTU to 1508 (networking-stable-19_04_19).
- net: unbreak CONFIG_RETPOLINE=n builds (bsc#1124503).
- net: use indirect call wrappers at GRO network layer (bsc#1124503).
- net: use indirect call wrappers at GRO transport layer (bsc#1124503).
- net: validate untrusted gso packets without csum offload (networking-stable-19_02_20).
- net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms() (git-fixes).
- net_sched: fix two more memory leaks in cls_tcindex (networking-stable-19_02_24).
- netfilter: bridge: Do not sabotage nf_hook calls from an l3mdev (git-fixes).
- netfilter: bridge: ebt_among: add missing match size checks (git-fixes).
- netfilter: bridge: ebt_among: add more missing match size checks (git-fixes).
- netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING (git-fixes).
- netfilter: drop template ct when conntrack is skipped (git-fixes).
- netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule (git-fixes).
- netfilter: ebtables: handle string from userspace with care (git-fixes).
- netfilter: ebtables: reject non-bridge targets (git-fixes).
- netfilter: ip6t_MASQUERADE: add dependency on conntrack module (git-fixes).
- netfilter: ipset: do not call ipset_nest_end after nla_nest_cancel (git-fixes).
- netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_exit() (git-fixes).
- netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt (git-fixes).
- netfilter: nf_log: do not hold nf_log_mutex during user access (git-fixes).
- netfilter: nf_log: fix uninit read in nf_log_proc_dostring (git-fixes).
- netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6} (git-fixes).
- netfilter: nf_tables: can't fail after linking rule into active rule list (git-fixes).
- netfilter: nf_tables: check msg_type before nft_trans_set(trans) (git-fixes).
- netfilter: nf_tables: fix leaking object reference count (git-fixes).
- netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump() (git-fixes).
- netfilter: nf_tables: release chain in flushing set (git-fixes).
- netfilter: nft_compat: do not dump private area (git-fixes).
- netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target} (git-fixes).
- netfilter: x_tables: fix int overflow in xt_alloc_table_info() (git-fixes).
- netfilter: x_tables: initialise match/target check parameter struct (git-fixes).
- netlabel: fix out-of-bounds memory accesses (networking-stable-19_03_07).
- netlink: fix uninit-value in netlink_sendmsg (git-fixes).
- nfc: nci: Add some bounds checking in nci_hci_cmd_received() (bsc#1051510).
- nfs/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount (git-fixes).
- nfs: Add missing encode / decode sequence_maxsz to v4.2 operations (git-fixes).
- nfs: add module option to limit NFSv4 minor version (jsc#PM-231).
- nfs: Do not recoalesce on error in nfs_pageio_complete_mirror() (git-fixes).
- nfs: Do not use page_file_mapping after removing the page (git-fixes).
- nfs: Fix a soft lockup in the delegation recovery code (git-fixes).
- nfs: Fix a typo in nfs_init_timeout_values() (git-fixes).
- nfs: Fix an I/O request leakage in nfs_do_recoalesce (git-fixes).
- nfs: Fix dentry revalidation on nfsv4 lookup (bsc#1132618).
- nfs: Fix I/O request leakages (git-fixes).
- nfs: fix mount/umount race in nlmclnt (git-fixes).
- nfsd4: catch some false session retries (git-fixes).
- nfsd4: fix cached replies to solo SEQUENCE compounds (git-fixes).
- nfsv4.1 do not free interrupted slot on open (git-fixes).
- nfsv4.1: Reinitialise sequence results before retransmitting a request (git-fixes).
- nfsv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE() (git-fixes).
- nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands (bsc#1051510).
- nvme-fc: use separate work queue to avoid warning (bsc#1131673).
- nvme-multipath: avoid crash on invalid subsystem cntlid enumeration (bsc#1129273).
- nvme-multipath: avoid crash on invalid subsystem cntlid enumeration (bsc#1130937).
- nvme-multipath: split bios with the ns_head bio_set before submitting (bsc#1103259, bsc#1131673).
- nvme-rdma: fix possible free of a non-allocated async event buffer (bsc#1120423).
- nvme: add proper discard setup for the multipath device (bsc#1114638).
- nvme: Do not remove namespaces during reset (bsc#1131673).
- nvme: fix the dangerous reference of namespaces list (bsc#1131673).
- nvme: flush scan_work when resetting controller (bsc#1131673).
- nvme: make sure ns head inherits underlying device limits (bsc#1131673).
- nvme: only reconfigure discard if necessary (bsc#1114638).
- objtool: Fix function fallthrough detection (bsc#1058115).
- ocfs2: fix ocfs2 read inode data panic in ocfs2_iget (bsc#1136434).
- ocfs2: turn on OCFS2_FS_STATS setting(bsc#1134393) We need to turn on OCFS2_FS_STATS kernel configuration setting, to fix bsc#1134393.
- of: fix clang -Wunsequenced for be32_to_cpu() (bsc#1135642).
- omapfb: add missing of_node_put after of_device_is_available (bsc#1051510).
- openvswitch: add seqadj extension when NAT is used (bsc#1051510).
- openvswitch: fix flow actions reallocation (bsc#1051510).
- overflow: Fix -Wtype-limits compilation warnings (bsc#1111666).
- p54: drop device reference count if fails to enable device (bsc#1135642).
- packet: fix reserve calculation (git-fixes).
- packet: in packet_snd start writing at link layer allocation (git-fixes).
- packet: refine ring v3 block size test to hold one frame (git-fixes).
- packet: reset network header if packet shorter than ll reserved space (git-fixes).
- packet: validate msg_namelen in send directly (git-fixes).
- packets: Always register packet sk in the same order (networking-stable-19_03_28).
- pci: Add function 1 DMA alias quirk for Marvell 9170 SATA controller (bsc#1051510).
- pci: designware-ep: Read-only registers need DBI_RO_WR_EN to be writable (bsc#1051510).
- pci: endpoint: Use EPC's device in dma_alloc_coherent()/dma_free_coherent() (git-fixes).
- pci: Factor out pcie_retrain_link() function (git-fixes).
- pci: Init pcie feature bits for managed host bridge alloc (bsc#1111666).
- pci: Mark AMD Stoney Radeon R7 GPU ATS as broken (bsc#1051510).
- pci: Mark Atheros AR9462 to avoid bus reset (bsc#1051510).
- pci: pciehp: Convert to threaded IRQ (bsc#1133005).
- pci: pciehp: Ignore Link State Changes after powering off a slot (bsc#1133005).
- pci: pciehp: Tolerate Presence Detect hardwired to zero (bsc#1133016).
- pci: Work around Pericom pcie-to-pci bridge Retrain Link erratum (git-fixes).
- perf tools: Add Hygon Dhyana support ().
- perf/x86/amd: Add event map for AMD Family 17h (bsc#1134223).
- perf/x86/amd: Update generic hardware cache events for Family 17h (bsc#1134223).
- phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode (bsc#1051510).
- phy: sun4i-usb: Support set_mode to usb_HOST for non-OTG PHYs (bsc#1051510).
- platform/x86: alienware-wmi: printing the wrong error code (bsc#1051510).
- platform/x86: dell-rbtn: Add missing #include (bsc#1051510).
- platform/x86: intel_pmc_ipc: adding error handling (bsc#1051510).
- platform/x86: intel_punit_ipc: Revert 'Fix resource ioremap warning' (bsc#1051510).
- platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI table (bsc#1051510).
- platform/x86: pmc_atom: Add several Beckhoff Automation boards to critclk_systems DMI table (bsc#1051510).
- platform/x86: pmc_atom: Drop __initconst on dmi table (bsc#1051510).
- platform/x86: sony-laptop: Fix unintentional fall-through (bsc#1051510).
- power: supply: axp20x_usb_power: Fix typo in VBUS current limit macros (bsc#1051510).
- power: supply: axp288_charger: Fix unchecked return value (bsc#1051510).
- powerpc/64: Make meltdown reporting Book3S 64 specific
- powerpc/64s: Fix logic when handling unknown CPU features (bsc#1055117).
- powerpc/64s: Fix page table fragment refcount race vs speculative references (bsc#1131326, bsc#1108937).
- powerpc/eeh: Fix race with driver un/bind (bsc#1065729).
- powerpc/fsl: Add barrier_nospec implementation for NXP PowerPC Book3E
- powerpc/hugetlb: Handle mmap_min_addr correctly in get_unmapped_area callback (bsc#1131900).
- powerpc/kvm: Save and restore host AMR/IAMR/UAMOR (bsc#1061840).
- powerpc/mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown search (bsc#1131900).
- powerpc/mm/radix: Display if mappings are exec or not (bsc#1055186, git-fixes).
- powerpc/mm/radix: Prettify mapped memory range print out (bsc#1055186, git-fixes).
- powerpc/mm: Add missing tracepoint for tlbie (bsc#1055117, git-fixes).
- powerpc/mm: Check secondary hash page table (bsc#1065729).
- powerpc/mm: Fix page table dump to work on Radix (bsc#1055186, git-fixes).
- powerpc/msi: Fix NULL pointer access in teardown code (bsc#1065729).
- powerpc/numa: document topology_updates_enabled, disable by default (bsc#1133584).
- powerpc/numa: improve control of topology updates (bsc#1133584).
- powerpc/perf: Fix MMCRA corruption by bhrb_filter (bsc#1053043).
- powerpc/perf: Fix unit_sel/cache_sel checks (bsc#1053043).
- powerpc/perf: Remove l2 bus events from HW cache event array (bsc#1053043).
- powerpc/powernv/cpuidle: Init all present cpus for deep states (bsc#1055121).
- powerpc/powernv/idle: Restore IAMR after idle (bsc#1065729).
- powerpc/powernv/ioda2: Remove redundant free of TCE pages (bsc#1061840).
- powerpc/powernv/ioda: Allocate indirect TCE levels of cached userspace addresses on demand (bsc#1061840).
- powerpc/powernv/ioda: Fix locked_vm counting for memory used by IOMMU tables (bsc#1061840).
- powerpc/powernv: Do not reprogram SLW image on every kvm guest entry/exit (bsc#1061840).
- powerpc/powernv: Make opal log only readable by root (bsc#1065729).
- powerpc/powernv: Remove never used pnv_power9_force_smt4 (bsc#1061840).
- powerpc/process: Fix sparse address space warnings (bsc#1065729).
- powerpc/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
- powerpc/vdso32: fix CLOCK_MONOTONIC on PPC64 (bsc#1131587).
- powerpc/vdso64: Fix CLOCK_MONOTONIC inconsistencies across Y2038 (bsc#1131587).
- powerpc64/ftrace: Include ftrace.h needed for enable/disable calls (bsc#1088804, git-fixes).
- powerpc: Always initialize input array when calling epapr_hypercall() (bsc#1065729).
- powerpc: avoid -mno-sched-epilog on GCC 4.9 and newer (bsc#1065729).
- powerpc: consolidate -mno-sched-epilog into FTRACE flags (bsc#1065729).
- powerpc: Fix 32-bit kvm-PR lockup and host crash with MacOS guest (bsc#1061840).
- powerpc: Fix HMIs on big-endian with CONFIG_RELOCATABLE=y (bsc#1065729).
- proc/kcore: do not bounds check against address 0 (bsc#1051510).
- proc/sysctl: fix return error for proc_doulongvec_minmax() (bsc#1051510).
- proc: revalidate kernel thread inodes to root:root (bsc#1051510).
- ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK (git-fixes).
- pwm: Fix deadlock warning when removing PWM device (bsc#1051510).
- pwm: meson: Consider 128 a valid pre-divider (bsc#1051510).
- pwm: meson: Do not disable PWM when setting duty repeatedly (bsc#1051510).
- pwm: meson: Use the spin-lock only to protect register modifications (bsc#1051510).
- pwm: tiehrpwm: Update shadow register for disabling PWMs (bsc#1051510).
- qed*: Add iWARP 100g support (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed*: Change hwfn used for sb initialization (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add API for SmartAN query (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add infrastructure for error detection and recovery (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add llh ppfid interface and 100g support for offload protocols (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add qed devlink parameters table (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Define new MF bit for no_vlan config (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Delete redundant doorbell recovery types (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: fix indentation issue with statements in an if-block (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix iWARP buffer size provided for syn packet processing (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix iWARP syn packet mac address validation (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix missing DORQ attentions (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: fix spelling mistake 'faspath' -&gt; 'fastpath' (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: fix spelling mistake 'inculde' -&gt; 'include' (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix static checker warning (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix the doorbell address sanity check (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix the DORQ's attentions handling (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Mark expected switch fall-through (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Modify api for performing a dmae to another PF (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Modify offload protocols to use the affined engine (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Read device port count from the shmem (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Reduce the severity of ptp debug message (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: remove duplicated include from qed_if.h (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: remove redundant assignment to rc (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Revise load sequence to avoid pci errors (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Set the doorbell address correctly (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Add ethtool interface for SmartAN query (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Error recovery process (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Fix internal loopback failure with jumbo mtu configuration (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: fix write to free'd pointer error and double free of ptp (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Handle infinite driver spinning for Tx timestamp (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: place ethtool_rx_flow_spec after code after TC flower codebase (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Populate mbi version in ethtool driver query data (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qedr: Change the MSI-X vectors selection to be based on affined engine (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qla2xxx: allow irqbalance control in non-MQ mode (bsc#1128971).
- qla2xxx: allow irqbalance control in non-MQ mode (bsc#1128979).
- qla2xxx: always allocate qla_tgt_wq (bsc#1131451).
- qla2xxx: kABI fixes for v10.00.00.14-k (bsc#1136215).
- qla2xxx: kABI fixes for v10.01.00.15-k (bsc#1136215).
- qlcnic: remove assumption that vlan_tci != 0 (bsc#1136469 jsc#SLE-4695).
- qlcnic: remove set but not used variables 'cur_rings, max_hw_rings, tx_desc_info' (bsc#1136469 jsc#SLE-4695).
- qlcnic: remove set but not used variables 'op, cmd_op' (bsc#1136469 jsc#SLE-4695).
- qmi_wwan: add Olicard 600 (bsc#1051510).
- qmi_wwan: Add support for Quectel EG12/EM12 (networking-stable-19_03_07).
- ras/cec: Check the correct variable in the debugfs error handling (bsc#1085535).
- ravb: Decrease TxFIFO depth of Q3 and Q2 to one (networking-stable-19_03_15).
- rdma/cxbg: Use correct sizing on buffers holding page DMA addresses (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Add support for 64Byte cqes (bsc#1127371).
- rdma/cxgb4: Add support for kernel mode SRQ's (bsc#1127371).
- rdma/cxgb4: Add support for srq functions and structs (bsc#1127371).
- rdma/cxgb4: Don't expose DMA addresses (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Fix null pointer dereference on alloc_skb failure (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: fix some info leaks (bsc#1127371).
- rdma/cxgb4: Fix spelling mistake 'immedate' -&gt; 'immediate' (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Make c4iw_poll_cq_one() easier to analyze (bsc#1127371).
- rdma/cxgb4: Remove a set-but-not-used variable (bsc#1127371).
- rdma/cxgb4: Remove kref accounting for sync operation (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Use sizeof() notation (bsc#1136348 jsc#SLE-4684).
- rdma/hns: Add constraint on the setting of local ACK timeout (bsc#1104427 bsc#1137233).
- rdma/hns: Add SCC context allocation support for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Add SCC context clr support for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Add the process of AEQ overflow for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Add timer allocation support for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Bugfix for mapping user db (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for posting multiple srq work request (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for SCC hem free (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for sending with invalidate (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for set hem of SCC (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for the scene without receiver queue (bsc#1104427 bsc#1137233).
- rdma/hns: Configure capacity of hns device (bsc#1104427 bsc#1137236).
- rdma/hns: Delete unused variable in hns_roce_v2_modify_qp function (bsc#1104427).
- rdma/hns: Delete useful prints for aeq subtype event (bsc#1104427 bsc#1126206).
- rdma/hns: Fix bad endianess of port_pd variable (bsc#1104427 ).
- rdma/hns: Fix bug that caused srq creation to fail (bsc#1104427 ).
- rdma/hns: Fix the bug with updating rq head pointer when flush cqe (bsc#1104427 bsc#1137233).
- rdma/hns: Fix the chip hanging caused by sending doorbell during reset (bsc#1104427 bsc#1137232).
- rdma/hns: Fix the chip hanging caused by sending mailbox CMQ during reset (bsc#1104427 bsc#1137232).
- rdma/hns: Fix the Oops during rmmod or insmod ko when reset occurs (bsc#1104427 bsc#1137232).
- rdma/hns: Fix the state of rereg mr (bsc#1104427 bsc#1137236).
- rdma/hns: Hide error print information with roce vf device (bsc#1104427 bsc#1137236).
- rdma/hns: Limit minimum ROCE CQ depth to 64 (bsc#1104427 bsc#1137236).
- rdma/hns: Limit scope of hns_roce_cmq_send() (bsc#1104427 ).
- rdma/hns: Make some function static (bsc#1104427 bsc#1126206).
- rdma/hns: Modify qp specification according to UM (bsc#1104427 bsc#1137233).
- rdma/hns: Modify the pbl ba page size for hip08 (bsc#1104427 bsc#1137233).
- rdma/hns: Move spin_lock_irqsave to the correct place (bsc#1104427 bsc#1137236).
- rdma/hns: Only assgin some fields if the relatived attr_mask is set (bsc#1104427).
- rdma/hns: Only assign the fields of the rq psn if ib_QP_RQ_PSN is set (bsc#1104427).
- rdma/hns: Only assign the relatived fields of psn if ib_QP_SQ_PSN is set (bsc#1104427).
- rdma/hns: rdma/hns: Assign rq head pointer when enable rq record db (bsc#1104427 bsc#1137236).
- rdma/hns: Remove jiffies operation in disable interrupt context (bsc#1104427 bsc#1137236).
- rdma/hns: Remove set but not used variable 'rst' (bsc#1104427 bsc#1126206).
- rdma/hns: Set allocated memory to zero for wrid (bsc#1104427 bsc#1137236).
- rdma/hns: Support to create 1M srq queue (bsc#1104427 ).
- rdma/hns: Update CQE specifications (bsc#1104427 bsc#1137236).
- rdma/hns: Update the range of raq_psn field of qp context (bsc#1104427).
- rdma/i40iw: Handle workqueue allocation failure (jsc#SLE-4793).
- rdma/iw_cxgb4: Always disconnect when QP is transitioning to TERMINATE state (bsc#1136348 jsc#SLE-4684).
- rdma/iw_cxgb4: Drop __GFP_NOFAIL (bsc#1127371).
- rdma/iwcm: add tos_set bool to iw_cm struct (bsc#1136348 jsc#SLE-4684).
- rdma/qedr: Fix incorrect device rate (bsc#1136188).
- rdma/qedr: Fix out of bounds index check in query pkey (bsc#1136456 jsc#SLE-4689).
- rdma/rdmavt: Use correct sizing on buffers holding page DMA addresses (jsc#SLE-4925).
- rdma/rxe: Consider skb reserve space based on netdev of GID (bsc#1082387, bsc#1103992).
- rdma/smc: Replace ib_query_gid with rdma_get_gid_attr (bsc#1131530 LTC#176717).
- rds: fix refcount bug in rds_sock_addref (git-fixes).
- rds: tcp: atomically purge entries from rds_tcp_conn_list during netns delete (git-fixes).
- regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB (bsc#1051510).
- ring-buffer: Check if memory is available before allocation (bsc#1132531).
- route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race (networking-stable-19_03_15).
- rt2x00: do not increment sequence number while re-transmitting (bsc#1051510).
- rtc: da9063: set uie_unsupported when relevant (bsc#1051510).
- rtc: sh: Fix invalid alarm warning for non-enabled alarm (bsc#1051510).
- rtlwifi: rtl8723ae: Fix missing break in switch statement (bsc#1051510).
- rxrpc: Do not release call mutex on error pointer (git-fixes).
- rxrpc: Do not treat call aborts as conn aborts (git-fixes).
- rxrpc: Fix client call queueing, waiting for channel (networking-stable-19_03_15).
- rxrpc: Fix error reception on AF_INET6 sockets (git-fixes).
- rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket (git-fixes).
- rxrpc: Fix Tx ring annotation after initial Tx failure (git-fixes).
- s390/dasd: fix panic for failed online processing (bsc#1132589).
- s390/pkey: move pckmo subfunction available checks away from module init (bsc#1128544).
- s390/qdio: clear intparm during shutdown (bsc#1134597 LTC#177516).
- s390/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
- sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init() (bsc#1051510).
- sc16is7xx: move label 'err_spi' to correct section (bsc#1051510).
- sc16is7xx: put err_spi and err_i2c into correct #ifdef (bsc#1051510).
- scripts/git_sort/git_sort.py: remove old SCSI git branches
- scripts: override locale from environment when running recordmcount.pl (bsc#1134354).
- scsi: hisi: KABI ignore new symbols (bsc#1135038).
- scsi: hisi_sas: add host reset interface for test (bsc#1135041).
- scsi: hisi_sas: Add softreset in hisi_sas_I_T_nexus_reset() (bsc#1135033).
- scsi: hisi_sas: Adjust the printk format of functions hisi_sas_init_device() (bsc#1135037).
- scsi: hisi_sas: allocate different SAS address for directly attached situation (bsc#1135036).
- scsi: hisi_sas: Do not fail IT nexus reset for Open Reject timeout (bsc#1135033).
- scsi: hisi_sas: Do not hard reset disk during controller reset (bsc#1135034).
- scsi: hisi_sas: Fix for setting the PHY linkrate when disconnected (bsc#1135038).
- scsi: hisi_sas: Remedy inconsistent PHY down state in software (bsc#1135039).
- scsi: hisi_sas: remove the check of sas_dev status in hisi_sas_I_T_nexus_reset() (bsc#1135037).
- scsi: hisi_sas: Send HARD RESET to clear the previous affiliation of STP target port (bsc#1135037).
- scsi: hisi_sas: Set PHY linkrate when disconnected (bsc#1135038).
- scsi: hisi_sas: Some misc tidy-up (bsc#1135031).
- scsi: hisi_sas: Support all RAS events with MSI interrupts (bsc#1135035).
- scsi: libsas: allocate sense buffer for bsg queue (bsc#1131467).
- scsi: libsas: Do discovery on empty PHY to update PHY info (bsc#1135024).
- scsi: libsas: Improve vague log in SAS rediscovery (bsc#1135027).
- scsi: libsas: Inject revalidate event for root port event (bsc#1135026).
- scsi: libsas: Print expander PHY indexes in decimal (bsc#1135021).
- scsi: libsas: Stop hardcoding SAS address length (bsc#1135029).
- scsi: libsas: Support SATA PHY connection rate unmatch fixing during discovery (bsc#1135028).
- scsi: libsas: Try to retain programmed min linkrate for SATA min pathway unmatch fixing (bsc#1135028).
- scsi: qedf: fixup bit operations (bsc#1135542).
- scsi: qedf: fixup locking in qedf_restart_rport() (bsc#1135542).
- scsi: qedf: missing kref_put in qedf_xmit() (bsc#1135542).
- scsi: qla2xxx: Add 28xx flash primary/secondary status/image mechanism (bsc#1136215).
- scsi: qla2xxx: Add Device ID for ISP28XX (bsc#1136215).
- scsi: qla2xxx: Add First Burst support for FC-NVMe devices (bsc#1136215).
- scsi: qla2xxx: Add fw_attr and port_no SysFS node (bsc#1136215).
- scsi: qla2xxx: Add new FC-NVMe enable BIT to enable FC-NVMe feature (bsc#1130579).
- scsi: qla2xxx: Add new FW dump template entry types (bsc#1136215).
- scsi: qla2xxx: Add protection mask module parameters (bsc#1136215).
- scsi: qla2xxx: Add Serdes support for ISP28XX (bsc#1136215).
- scsi: qla2xxx: Add support for multiple fwdump templates/segments (bsc#1136215).
- scsi: qla2xxx: Add support for setting port speed (bsc#1136215).
- scsi: qla2xxx: Avoid pci IRQ affinity mapping when multiqueue is not supported (bsc#1136215).
- scsi: qla2xxx: avoid printf format warning (bsc#1136215).
- scsi: qla2xxx: Check for FW started flag before aborting (bsc#1136215).
- scsi: qla2xxx: check for kstrtol() failure (bsc#1136215).
- scsi: qla2xxx: Cleanups for NVRAM/Flash read/write path (bsc#1136215).
- scsi: qla2xxx: Correction and improvement to fwdt processing (bsc#1136215).
- scsi: qla2xxx: Correctly report max/min supported speeds (bsc#1136215).
- scsi: qla2xxx: Declare local functions 'static' (bsc#1137444).
- scsi: qla2xxx: Fix code indentation for qla27xx_fwdt_entry (bsc#1136215).
- scsi: qla2xxx: Fix DMA error when the DIF sg buffer crosses 4GB boundary (bsc#1136215).
- scsi: qla2xxx: fix error message on qla2400 (bsc#1118139).
- scsi: qla2xxx: Fix function argument descriptions (bsc#1118139).
- scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware (bsc#1136215).
- scsi: qla2xxx: Fix memory corruption during hba reset test (bsc#1118139).
- scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (bsc#1136215).
- scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (bsc#1132044).
- scsi: qla2xxx: Fix read offset in qla24xx_load_risc_flash() (bsc#1136215).
- scsi: qla2xxx: Fix routine qla27xx_dump_{mpi|ram}() (bsc#1136215).
- scsi: qla2xxx: fix spelling mistake: 'existant' -&gt; 'existent' (bsc#1118139).
- scsi: qla2xxx: Fix unload when NVMe devices are configured (bsc#1136215).
- scsi: qla2xxx: fully convert to the generic DMA API (bsc#1137444).
- scsi: qla2xxx: fx00 copypaste typo (bsc#1118139).
- scsi: qla2xxx: Improve several kernel-doc headers (bsc#1137444).
- scsi: qla2xxx: Introduce a switch/case statement in qlt_xmit_tm_rsp() (bsc#1137444).
- scsi: qla2xxx: Make qla2x00_sysfs_write_nvram() easier to analyze (bsc#1137444).
- scsi: qla2xxx: Make sure that qlafx00_ioctl_iosb_entry() initializes 'res' (bsc#1137444).
- scsi: qla2xxx: Move debug messages before sending srb preventing panic (bsc#1136215).
- scsi: qla2xxx: Move marker request behind QPair (bsc#1136215).
- scsi: qla2xxx: no need to check return value of debugfs_create functions (bsc#1136215).
- scsi: qla2xxx: NULL check before some freeing functions is not needed (bsc#1137444).
- scsi: qla2xxx: Prevent multiple ADISC commands per session (bsc#1136215).
- scsi: qla2xxx: Prevent SysFS access when chip is down (bsc#1136215).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1137444).
- scsi: qla2xxx: Remove FW default template (bsc#1136215).
- scsi: qla2xxx: remove redundant null check on pointer sess (bsc#1136215).
- scsi: qla2xxx: remove the unused tcm_qla2xxx_cmd_wq (bsc#1118139).
- scsi: qla2xxx: Remove two arguments from qlafx00_error_entry() (bsc#1137444).
- scsi: qla2xxx: Remove unused symbols (bsc#1118139).
- scsi: qla2xxx: Secure flash update support for ISP28XX (bsc#1136215).
- scsi: qla2xxx: Set remote port devloss timeout to 0 (bsc#1136215).
- scsi: qla2xxx: Simplification of register address used in qla_tmpl.c (bsc#1136215).
- scsi: qla2xxx: Simplify conditional check again (bsc#1136215).
- scsi: qla2xxx: Split the __qla2x00_abort_all_cmds() function (bsc#1137444).
- scsi: qla2xxx: Update driver version to 10.00.00.14-k (bsc#1136215).
- scsi: qla2xxx: Update driver version to 10.01.00.15-k (bsc#1136215).
- scsi: qla2xxx: Update flash read/write routine (bsc#1136215).
- scsi: qla2xxx: Use %p for printing pointers (bsc#1118139).
- scsi: qla2xxx: use lower_32_bits and upper_32_bits instead of reinventing them (bsc#1137444).
- scsi: smartpqi: add H3C controller IDs (bsc#1133547).
- scsi: smartpqi: add h3c ssid (bsc#1133547).
- scsi: smartpqi: add no_write_same for logical volumes (bsc#1133547).
- scsi: smartpqi: add ofa support (bsc#1133547).
- scsi: smartpqi: Add retries for device reset (bsc#1133547).
- scsi: smartpqi: add smp_utils support (bsc#1133547).
- scsi: smartpqi: add spdx (bsc#1133547).
- scsi: smartpqi: add support for huawei controllers (bsc#1133547).
- scsi: smartpqi: add support for PQI Config Table handshake (bsc#1133547).
- scsi: smartpqi: add sysfs attributes (bsc#1133547).
- scsi: smartpqi: allow for larger raid maps (bsc#1133547).
- scsi: smartpqi: bump driver version (bsc#1133547).
- scsi: smartpqi: bump driver version (bsc#1133547).
- scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown() (bsc#1133547).
- scsi: smartpqi: check for null device pointers (bsc#1133547).
- scsi: smartpqi: correct host serial num for ssa (bsc#1133547).
- scsi: smartpqi: correct lun reset issues (bsc#1133547).
- scsi: smartpqi: correct volume status (bsc#1133547).
- scsi: smartpqi: do not offline disks for transient did no connect conditions (bsc#1133547).
- scsi: smartpqi: enhance numa node detection (bsc#1133547).
- scsi: smartpqi: fix build warnings (bsc#1133547).
- scsi: smartpqi: fix disk name mount point (bsc#1133547).
- scsi: smartpqi: fully convert to the generic DMA API (bsc#1133547).
- scsi: smartpqi: increase fw status register read timeout (bsc#1133547).
- scsi: smartpqi: increase LUN reset timeout (bsc#1133547).
- scsi: smartpqi: refactor sending controller raid requests (bsc#1133547).
- scsi: smartpqi: Reporting 'logical unit failure' (bsc#1133547).
- scsi: smartpqi: turn off lun data caching for ptraid (bsc#1133547).
- scsi: smartpqi: update copyright (bsc#1133547).
- scsi: smartpqi: update driver version (bsc#1133547).
- scsi: smartpqi: wake up drives after os resumes from suspend (bsc#1133547).
- scsi: smartpqi_init: fix boolean expression in pqi_device_remove_start (bsc#1133547).
- scsi: zfcp: make DIX experimental, disabled, and independent of DIF (jsc#SLE-6772).
- sctp: avoid running the sctp state machine recursively (networking-stable-19_05_04).
- sctp: call gso_reset_checksum when computing checksum in sctp_gso_segment (networking-stable-19_02_24).
- sctp: fix identification of new acks for SFR-CACC (git-fixes).
- sctp: get sctphdr by offset in sctp_compute_cksum (networking-stable-19_03_28).
- sctp: initialize _pad of sockaddr_in before copying to user memory (networking-stable-19_04_10).
- sctp: set frag_point in sctp_setsockopt_maxseg correctly` (git-fixes).
- selinux: use kernel linux/socket.h for genheaders and mdp (bsc#1134810).
- serial: 8250_pxa: honor the port number from devicetree (bsc#1051510).
- serial: ar933x_uart: Fix build failure with disabled console (bsc#1051510).
- serial: uartps: console_setup() can't be placed to init section (bsc#1051510).
- signal: Always notice exiting tasks (git-fixes).
- signal: Better detection of synchronous signals (git-fixes).
- signal: Restore the stop PTRACE_EVENT_EXIT (git-fixes).
- sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach() (networking-stable-19_02_24).
- soc/fsl/qe: Fix an error code in qe_pin_request() (bsc#1051510).
- soc/tegra: fuse: Fix illegal free of IO base address (bsc#1051510).
- soc/tegra: pmc: Drop locking from tegra_powergate_is_powered() (bsc#1051510).
- soc: imx-sgtl5000: add missing put_device() (bsc#1051510).
- soc: qcom: gsbi: Fix error handling in gsbi_probe() (bsc#1051510).
- spi-mem: fix kernel-doc for spi_mem_dirmap_{read|write}() (bsc#1111666).
- spi: a3700: Clear DATA_OUT when performing a read (bsc#1051510).
- spi: Add missing pm_runtime_put_noidle() after failed get (bsc#1111666).
- spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios (bsc#1051510).
- spi: bcm2835aux: setup gpio-cs to output and correct level during setup (bsc#1051510).
- spi: bcm2835aux: warn in dmesg that native cs is not really supported (bsc#1051510).
- spi: Micrel eth switch: declare missing of table (bsc#1051510).
- spi: rspi: Fix sequencer reset during initialization (bsc#1051510).
- spi: ST ST95HF NFC: declare missing of table (bsc#1051510).
- ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit (bsc#1051510).
- staging: comedi: ni_usb6501: Fix possible double-free of -&gt;usb_rx_buf (bsc#1051510).
- staging: comedi: ni_usb6501: Fix use of uninitialized mutex (bsc#1051510).
- staging: comedi: vmk80xx: Fix possible double-free of -&gt;usb_rx_buf (bsc#1051510).
- staging: comedi: vmk80xx: Fix use of uninitialized semaphore (bsc#1051510).
- staging: iio: ad7192: Fix ad7193 channel address (bsc#1051510).
- staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc (bsc#1051510).
- staging: rtl8712: uninitialized memory in read_bbreg_hdl() (bsc#1051510).
- staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc (bsc#1111666).
- staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer dereference (bsc#1111666).
- staging: vt6655: Fix interrupt race condition on device start up (bsc#1051510).
- staging: vt6655: Remove vif check from vnt_interrupt (bsc#1051510).
- stm class: Fix an endless loop in channel allocation (bsc#1051510).
- stm class: Fix channel free in stm output free path (bsc#1051510).
- stm class: Prevent division by zero (bsc#1051510).
- stmmac: pci: Adjust IOT2000 matching (networking-stable-19_04_30).
- sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (git-fixes).
- supported.conf: Add openvswitch to kernel-default-base (bsc#1124839).
- supported.conf: Add openvswitch to kernel-default-base (bsc#1124839).
- supported.conf: dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).
- svm/avic: Fix invalidate logical APIC id entry (bsc#1132726).
- svm: Fix AVIC DFR and LDR handling (bsc#1132558).
- switchtec: Fix unintended mask of MRPC event (git-fixes).
- sysctl: handle overflow for file-max (bsc#1051510).
- tcp: add tcp_min_snd_mss sysctl (bsc#1137586).
- tcp: do not use ipv6 header for ipv4 flow (networking-stable-19_03_28).
- tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (bsc#1137586).
- tcp: Ensure DCTCP reacts to losses (networking-stable-19_04_10).
- tcp: fix fack_count accounting on tcp_shift_skb_data() (CVE-2019-11477 bsc#1137586).
- tcp: fix TCP_REPAIR_QUEUE bound checking (git-fixes).
- tcp: limit payload size of sacked skbs (bsc#1137586).
- tcp: purge write queue in tcp_connect_init() (git-fixes).
- tcp: tcp_fragment() should apply sane memory limits (bsc#1137586).
- tcp: tcp_grow_window() needs to respect tcp_space() (networking-stable-19_04_19).
- tcp: tcp_v4_err() should be more careful (networking-stable-19_02_20).
- team: fix possible recursive locking when add slaves (networking-stable-19_04_30).
- team: set slave to promisc if team is already in promisc mode (bsc#1051510).
- testing: nvdimm: provide SZ_4G constant (bsc#1132982).
- thermal/int340x_thermal: Add additional UUIDs (bsc#1051510).
- thermal/int340x_thermal: fix mode setting (bsc#1051510).
- thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power (bsc#1051510).
- thunderx: eliminate extra calls to put_page() for pages held for recycling (networking-stable-19_03_28).
- thunderx: enable page recycling for non-XDP case (networking-stable-19_03_28).
- tipc: fix hanging clients using poll with EPOLLOUT flag (git-fixes).
- tipc: fix race condition causing hung sendto (networking-stable-19_03_07).
- tipc: missing entries in name table of publications (networking-stable-19_04_19).
- tools lib traceevent: Fix missing equality check for strcmp (bsc#1129770).
- tools/cpupower: Add Hygon Dhyana support ().
- tpm: Fix the type of the return value in calc_tpm2_event_size() (bsc#1082555).
- tracing/hrtimer: Fix tracing bugs by taking all clock bases and modes into account (bsc#1132527).
- tracing: Fix a memory leak by early error exit in trace_pid_write() (bsc#1133702).
- tracing: Fix buffer_ref pipe ops (bsc#1133698).
- tracing: Fix partial reading of trace event's id file (bsc#1136573).
- treewide: Use DEVICE_ATTR_WO (bsc#1137739).
- tty: increase the default flip buffer limit to 2*640K (bsc#1051510).
- tty: pty: Fix race condition between release_one_tty and pty_write (bsc#1051510).
- tty: serial_core, add -&gt;install (bnc#1129693).
- tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0 (bsc#1051510).
- tun: add a missing rcu_read_unlock() in error path (networking-stable-19_03_28).
- tun: fix blocking read (networking-stable-19_03_07).
- tun: properly test for IFF_UP (networking-stable-19_03_28).
- tun: remove unnecessary memory barrier (networking-stable-19_03_07).
- uas: fix alignment of scatter/gather segments (bsc#1129770).
- udp: use indirect call wrappers for GRO socket lookup (bsc#1124503).
- ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour (bsc#1135323).
- usb-storage: Set virt_boundary_mask to avoid SG overflows (bsc#1051510).
- usb: cdc-acm: fix unthrottle races (bsc#1051510).
- usb: chipidea: Grab the (legacy) usb PHY by phandle first (bsc#1051510).
- usb: core: Fix bug caused by duplicate interface PM usage counter (bsc#1051510).
- usb: core: Fix unterminated string returned by usb_string() (bsc#1051510).
- usb: dwc3: Fix default lpm_nyet_threshold value (bsc#1051510).
- usb: f_fs: Avoid crash due to out-of-scope stack ptr access (bsc#1051510).
- usb: gadget: net2272: Fix net2272_dequeue() (bsc#1051510).
- usb: gadget: net2280: Fix net2280_dequeue() (bsc#1051510).
- usb: gadget: net2280: Fix overrun of OUT messages (bsc#1051510).
- usb: serial: cp210x: fix GPIO in autosuspend (bsc#1120902).
- usb: serial: f81232: fix interrupt worker not stop (bsc#1051510).
- usb: serial: fix unthrottle races (bsc#1051510).
- usb: u132-hcd: fix resource leak (bsc#1051510).
- usb: usb251xb: fix to avoid potential NULL pointer dereference (bsc#1051510).
- usb: usbip: fix isoc packet num validation in get_pipe (bsc#1051510).
- usb: w1 ds2490: Fix bug caused by improper use of altsetting array (bsc#1051510).
- usb: yurex: Fix protection fault after device removal (bsc#1051510).
- userfaultfd: use RCU to free the task struct when fork fails (git-fixes).
- vfio/mdev: Avoid release parent reference during error path (bsc#1051510).
- vfio/mdev: Fix aborting mdev child device removal if one fails (bsc#1051510).
- vfio/pci: use correct format characters (bsc#1051510).
- vfio_pci: Enable memory accesses before calling pci_map_rom (bsc#1051510).
- vfs: allow dedupe of user owned read-only files (bsc#1133778, bsc#1132219).
- vfs: avoid problematic remapping requests into partial EOF block (bsc#1133850, bsc#1132219).
- vfs: dedupe should return EPERM if permission is not granted (bsc#1133779, bsc#1132219).
- vfs: dedupe: extract helper for a single dedup (bsc#1133769, bsc#1132219).
- vfs: exit early from zero length remap operations (bsc#1132411, bsc#1132219).
- vfs: export vfs_dedupe_file_range_one() to modules (bsc#1133772, bsc#1132219).
- vfs: limit size of dedupe (bsc#1132397, bsc#1132219).
- vfs: rename clone_verify_area to remap_verify_area (bsc#1133852, bsc#1132219).
- vfs: skip zero-length dedupe requests (bsc#1133851, bsc#1132219).
- vfs: swap names of {do,vfs}_clone_file_range() (bsc#1133774, bsc#1132219).
- vfs: vfs_clone_file_prep_inodes should return EINVAL for a clone from beyond EOF (bsc#1133780, bsc#1132219).
- vhost/vsock: fix reset orphans race with close timeout (bsc#1051510).
- vhost: reject zero size iova range (networking-stable-19_04_19).
- virtio-blk: limit number of hw queues by nr_cpu_ids (bsc#1051510).
- virtio: Honour 'may_reduce_num' in vring_create_virtqueue (bsc#1051510).
- virtio_pci: fix a NULL pointer reference in vp_del_vqs (bsc#1051510).
- vrf: check accept_source_route on the original netdevice (networking-stable-19_04_10).
- vsock/virtio: fix kernel panic after device hot-unplug (bsc#1051510).
- vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock (bsc#1051510).
- vsock/virtio: Initialize core virtio vsock before registering the driver (bsc#1051510).
- vsock/virtio: reset connected sockets on device removal (bsc#1051510).
- vt: always call notifier with the console lock held (bsc#1051510).
- vxlan: Do not call gro_cells_destroy() before device is unregistered (networking-stable-19_03_28).
- vxlan: test dev-&gt;flags and IFF_UP before calling netif_rx() (networking-stable-19_02_20).
- wil6210: check null pointer in _wil_cfg80211_merge_extra_ies (bsc#1051510).
- wlcore: Fix memory leak in case wl12xx_fetch_firmware failure (bsc#1051510).
- x86/alternative: Init ideal_nops for Hygon Dhyana ().
- x86/amd_nb: Check vendor in AMD-only functions ().
- x86/apic: Add Hygon Dhyana support ().
- x86/bugs: Add Hygon Dhyana to the respective mitigation machinery ().
- x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die processors ().
- x86/cpu/mtrr: Support TOP_MEM2 and get MTRR number ().
- x86/cpu: Create Hygon Dhyana architecture support file ().
- x86/cpu: Get cache info and setup cache cpumap for Hygon Dhyana ().
- x86/cpu: Sanitize FAM6_ATOM naming (bsc#1111331).
- x86/events: Add Hygon Dhyana support to PMU infrastructure ().
- x86/kvm/hyper-v: avoid spurious pending stimer on vCPU init (bsc#1132572).
- x86/kvm: Add Hygon Dhyana support to kvm ().
- x86/MCE/AMD, EDAC/mce_amd: Add new error descriptions for some SMCA bank types (bsc#1128415).
- x86/MCE/AMD, EDAC/mce_amd: Add new McaTypes for CS, PSP, and SMU units (bsc#1128415).
- x86/MCE/AMD, EDAC/mce_amd: Add new MP5, NBIO, and pciE SMCA bank types (bsc#1128415).
- x86/mce/AMD, EDAC/mce_amd: Enumerate Reserved SMCA bank type (bsc#1128415).
- x86/mce/AMD: Pass the bank number to smca_get_bank_type() (bsc#1128415).
- x86/mce: Add Hygon Dhyana support to the MCA infrastructure ().
- x86/mce: Do not disable MCA banks when offlining a CPU on AMD ().
- x86/MCE: Fix kABI for new AMD bank names (bsc#1128415).
- x86/mce: Handle varying MCA bank counts (bsc#1128415).
- x86/msr-index: Cleanup bit defines (bsc#1111331).
- x86/pci, x86/amd_nb: Add Hygon Dhyana support to pci and northbridge ().
- x86/pci: Fixup RTIT_BAR of Intel Denverton Trace Hub (bsc#1120318).
- x86/perf/amd: Remove need to check 'running' bit in NMI handler (bsc#1131438).
- x86/perf/amd: Resolve NMI latency issues for active PMCs (bsc#1131438).
- x86/perf/amd: Resolve race condition when disabling PMC (bsc#1131438).
- x86/smpboot: Do not use BSP INIT delay and MWAIT to idle on Dhyana ().
- x86/speculation/mds: Fix documentation typo (bsc#1135642).
- x86/speculation: Prevent deadlock on ssb_state::lock (bsc#1114279).
- x86/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
- x86/tsc: Force inlining of cyc2ns bits (bsc#1052904).
- x86/xen: Add Hygon Dhyana support to Xen ().
- x86_64: Add gap to int3 to allow for call emulation (bsc#1099658).
- x86_64: Allow breakpoints to emulate call instructions (bsc#1099658).
- xen-netback: do not populate the hash cache on XenBus disconnect (networking-stable-19_03_07).
- xen-netback: fix occasional leak of grant ref mappings under memory pressure (networking-stable-19_03_07).
- xen: Prevent buffer overflow in privcmd ioctl (bsc#1065600).
- xenbus: drop useless LIST_HEAD in xenbus_write_watch() and xenbus_file_write() (bsc#1065600).
- xfrm6: avoid potential infinite loop in _decode_session6() (git-fixes).
- xfrm6: call kfree_skb when skb is toobig (git-fixes).
- xfrm: do not call rcu_read_unlock when afinfo is NULL in xfrm_get_tos (git-fixes).
- xfrm: fix 'passing zero to ERR_PTR()' warning (git-fixes).
- xfrm: Fix ESN sequence number handling for IPsec GSO packets (git-fixes).
- xfrm: fix missing dst_release() after policy blocking lbcast and multicast (git-fixes).
- xfrm: fix rcu_read_unlock usage in xfrm_local_error (git-fixes).
- xfrm: Fix stack-out-of-bounds read on socket policy lookup (git-fixes).
- xfrm: fix xfrm_do_migrate() with AEAD e.g(AES-GCM) (git-fixes).
- xfrm: reset crypto_done when iterating over multiple input xfrms (git-fixes).
- xfrm: reset transport header back to network header after all input transforms ahave been applied (git-fixes).
- xfrm: Return error on unknown encap_type in init_state (git-fixes).
- xfrm: Validate address prefix lengths in the xfrm selector (git-fixes).
- xfrm_user: prevent leaking 2 bytes of kernel memory (git-fixes).
- xfs: add log item pinning error injection tag (bsc#1114427).
- xfs: add the ability to join a held buffer to a defer_ops (bsc#1133674).
- xfs: allow xfs_lock_two_inodes to take different EXCL/SHARED modes (bsc#1132370, bsc#1132219).
- xfs: buffer lru reference count error injection tag (bsc#1114427).
- xfs: call xfs_qm_dqattach before performing reflink operations (bsc#1132368, bsc#1132219).
- xfs: cap the length of deduplication requests (bsc#1132373, bsc#1132219).
- xfs: check _btree_check_block value (bsc#1123663).
- xfs: clean up xfs_reflink_remap_blocks call site (bsc#1132413, bsc#1132219).
- xfs: convert drop_writes to use the errortag mechanism (bsc#1114427).
- xfs: create block pointer check functions (bsc#1123663).
- xfs: create inode pointer verifiers (bsc#1114427).
- xfs: detect and fix bad summary counts at mount (bsc#1114427).
- xfs: export _inobt_btrec_to_irec and _ialloc_cluster_alignment for scrub (bsc#1114427).
- xfs: export various function for the online scrubber (bsc#1123663).
- xfs: expose errortag knobs via sysfs (bsc#1114427).
- xfs: fix data corruption w/ unaligned dedupe ranges (bsc#1132405, bsc#1132219).
- xfs: fix data corruption w/ unaligned reflink ranges (bsc#1132407, bsc#1132219).
- xfs: fix pagecache truncation prior to reflink (bsc#1132412, bsc#1132219).
- xfs: fix reporting supported extra file attributes for statx() (bsc#1133529).
- xfs: fix unused variable warning in xfs_buf_set_ref() (bsc#1114427).
- xfs: flush removing page cache in xfs_reflink_remap_prep (bsc#1132414, bsc#1132219).
- xfs: force summary counter recalc at next mount (bsc#1114427).
- xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (bsc#1133675).
- xfs: kill meaningless variable 'zero' (bsc#1106011).
- xfs: make errortag a per-mountpoint structure (bsc#1123663).
- xfs: move error injection tags into their own file (bsc#1114427).
- xfs: only grab shared inode locks for source file during reflink (bsc#1132372, bsc#1132219).
- xfs: prepare xfs_break_layouts() for another layout type (bsc#1106011).
- xfs: prepare xfs_break_layouts() to be called with XFS_MMAPLOCK_EXCL (bsc#1106011).
- xfs: refactor btree block header checking functions (bsc#1123663).
- xfs: refactor btree pointer checks (bsc#1123663).
- xfs: refactor clonerange preparation into a separate helper (bsc#1132402, bsc#1132219).
- xfs: refactor unmount record write (bsc#1114427).
- xfs: refactor xfs_trans_roll (bsc#1133667).
- xfs: reflink find shared should take a transaction (bsc#1132226, bsc#1132219).
- xfs: reflink should break pnfs leases before sharing blocks (bsc#1132369, bsc#1132219).
- xfs: remove dest file's post-eof preallocations before reflinking (bsc#1132365, bsc#1132219).
- xfs: remove the ip argument to xfs_defer_finish (bsc#1133672).
- xfs: remove unneeded parameter from XFS_TEST_ERROR (bsc#1123663).
- xfs: remove xfs_zero_range (bsc#1106011).
- xfs: rename MAXPATHLEN to XFS_SYMLINK_MAXLEN (bsc#1123663).
- xfs: rename xfs_defer_join to xfs_defer_ijoin (bsc#1133668).
- xfs: replace log_badcrc_factor knob with error injection tag (bsc#1114427).
- xfs: sanity-check the unused space before trying to use it (bsc#1123663).
- xfs: serialize unaligned dio writes against all other dio writes (bsc#1134936).
- xfs: update ctime and remove suid before cloning files (bsc#1132404, bsc#1132219).
- xfs: zero posteof blocks when cloning above eof (bsc#1132403, bsc#1132219).
- xsk: export xdp_get_umem_from_qid (jsc#SLE-4797).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-18"/>
	<updated date="2019-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1012382">SUSE bug 1012382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052904">SUSE bug 1052904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053043">SUSE bug 1053043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055121">SUSE bug 1055121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063638">SUSE bug 1063638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068546">SUSE bug 1068546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070872">SUSE bug 1070872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075020">SUSE bug 1075020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082387">SUSE bug 1082387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085535">SUSE bug 1085535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085536">SUSE bug 1085536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086657">SUSE bug 1086657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088804">SUSE bug 1088804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093389">SUSE bug 1093389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097583">SUSE bug 1097583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097584">SUSE bug 1097584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097585">SUSE bug 1097585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097586">SUSE bug 1097586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097587">SUSE bug 1097587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097588">SUSE bug 1097588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099658">SUSE bug 1099658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103186">SUSE bug 1103186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103259">SUSE bug 1103259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106011">SUSE bug 1106011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106284">SUSE bug 1106284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108193">SUSE bug 1108193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108838">SUSE bug 1108838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108937">SUSE bug 1108937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110946">SUSE bug 1110946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111331">SUSE bug 1111331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111696">SUSE bug 1111696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112063">SUSE bug 1112063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112128">SUSE bug 1112128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114427">SUSE bug 1114427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114542">SUSE bug 1114542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114638">SUSE bug 1114638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115688">SUSE bug 1115688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117114">SUSE bug 1117114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117158">SUSE bug 1117158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117561">SUSE bug 1117561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118139">SUSE bug 1118139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119680">SUSE bug 1119680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119843">SUSE bug 1119843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120091">SUSE bug 1120091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120318">SUSE bug 1120318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120423">SUSE bug 1120423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120566">SUSE bug 1120566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120843">SUSE bug 1120843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120902">SUSE bug 1120902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122767">SUSE bug 1122767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122776">SUSE bug 1122776</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123454">SUSE bug 1123454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123663">SUSE bug 1123663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124503">SUSE bug 1124503</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124839">SUSE bug 1124839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126356">SUSE bug 1126356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126704">SUSE bug 1126704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127175">SUSE bug 1127175</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127374">SUSE bug 1127374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127616">SUSE bug 1127616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128052">SUSE bug 1128052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128415">SUSE bug 1128415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128544">SUSE bug 1128544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128904">SUSE bug 1128904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128971">SUSE bug 1128971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128979">SUSE bug 1128979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129138">SUSE bug 1129138</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129273">SUSE bug 1129273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129497">SUSE bug 1129497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129693">SUSE bug 1129693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129845">SUSE bug 1129845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130195">SUSE bug 1130195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130425">SUSE bug 1130425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130527">SUSE bug 1130527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130567">SUSE bug 1130567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130579">SUSE bug 1130579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130699">SUSE bug 1130699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130937">SUSE bug 1130937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130972">SUSE bug 1130972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131326">SUSE bug 1131326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131427">SUSE bug 1131427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131438">SUSE bug 1131438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131451">SUSE bug 1131451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131467">SUSE bug 1131467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131488">SUSE bug 1131488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131530">SUSE bug 1131530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131565">SUSE bug 1131565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131574">SUSE bug 1131574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131587">SUSE bug 1131587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131659">SUSE bug 1131659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131673">SUSE bug 1131673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131847">SUSE bug 1131847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131848">SUSE bug 1131848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131851">SUSE bug 1131851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131900">SUSE bug 1131900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131934">SUSE bug 1131934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131935">SUSE bug 1131935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132044">SUSE bug 1132044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132219">SUSE bug 1132219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132226">SUSE bug 1132226</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132227">SUSE bug 1132227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132365">SUSE bug 1132365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132368">SUSE bug 1132368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132369">SUSE bug 1132369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132370">SUSE bug 1132370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132372">SUSE bug 1132372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132373">SUSE bug 1132373</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132384">SUSE bug 1132384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132397">SUSE bug 1132397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132402">SUSE bug 1132402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132403">SUSE bug 1132403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132404">SUSE bug 1132404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132405">SUSE bug 1132405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132407">SUSE bug 1132407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132411">SUSE bug 1132411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132412">SUSE bug 1132412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132413">SUSE bug 1132413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132414">SUSE bug 1132414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132426">SUSE bug 1132426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132527">SUSE bug 1132527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132531">SUSE bug 1132531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132555">SUSE bug 1132555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132558">SUSE bug 1132558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132561">SUSE bug 1132561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132562">SUSE bug 1132562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132563">SUSE bug 1132563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132564">SUSE bug 1132564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132570">SUSE bug 1132570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132571">SUSE bug 1132571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132572">SUSE bug 1132572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132589">SUSE bug 1132589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132618">SUSE bug 1132618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132673">SUSE bug 1132673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132681">SUSE bug 1132681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132726">SUSE bug 1132726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132828">SUSE bug 1132828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132894">SUSE bug 1132894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132943">SUSE bug 1132943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132982">SUSE bug 1132982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133005">SUSE bug 1133005</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133016">SUSE bug 1133016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133094">SUSE bug 1133094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133095">SUSE bug 1133095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133115">SUSE bug 1133115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133149">SUSE bug 1133149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133176">SUSE bug 1133176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133188">SUSE bug 1133188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133190">SUSE bug 1133190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133320">SUSE bug 1133320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133486">SUSE bug 1133486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133529">SUSE bug 1133529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133547">SUSE bug 1133547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133584">SUSE bug 1133584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133593">SUSE bug 1133593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133612">SUSE bug 1133612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133616">SUSE bug 1133616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133667">SUSE bug 1133667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133668">SUSE bug 1133668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133672">SUSE bug 1133672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133674">SUSE bug 1133674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133675">SUSE bug 1133675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133698">SUSE bug 1133698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133702">SUSE bug 1133702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133731">SUSE bug 1133731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133769">SUSE bug 1133769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133772">SUSE bug 1133772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133774">SUSE bug 1133774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133778">SUSE bug 1133778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133779">SUSE bug 1133779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133780">SUSE bug 1133780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133825">SUSE bug 1133825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133850">SUSE bug 1133850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133851">SUSE bug 1133851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133852">SUSE bug 1133852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133897">SUSE bug 1133897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134160">SUSE bug 1134160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134162">SUSE bug 1134162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134199">SUSE bug 1134199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134200">SUSE bug 1134200</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134201">SUSE bug 1134201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134202">SUSE bug 1134202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134203">SUSE bug 1134203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134204">SUSE bug 1134204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134205">SUSE bug 1134205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134223">SUSE bug 1134223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134354">SUSE bug 1134354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134393">SUSE bug 1134393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134397">SUSE bug 1134397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134459">SUSE bug 1134459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134460">SUSE bug 1134460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134461">SUSE bug 1134461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134597">SUSE bug 1134597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134600">SUSE bug 1134600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134607">SUSE bug 1134607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134618">SUSE bug 1134618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134651">SUSE bug 1134651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134671">SUSE bug 1134671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134760">SUSE bug 1134760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134806">SUSE bug 1134806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134810">SUSE bug 1134810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134813">SUSE bug 1134813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134848">SUSE bug 1134848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134936">SUSE bug 1134936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134945">SUSE bug 1134945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134946">SUSE bug 1134946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134947">SUSE bug 1134947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134948">SUSE bug 1134948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134949">SUSE bug 1134949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134950">SUSE bug 1134950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134951">SUSE bug 1134951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134952">SUSE bug 1134952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134953">SUSE bug 1134953</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134972">SUSE bug 1134972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134974">SUSE bug 1134974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134975">SUSE bug 1134975</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134980">SUSE bug 1134980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134981">SUSE bug 1134981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134983">SUSE bug 1134983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134987">SUSE bug 1134987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134989">SUSE bug 1134989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134990">SUSE bug 1134990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134994">SUSE bug 1134994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134995">SUSE bug 1134995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134998">SUSE bug 1134998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134999">SUSE bug 1134999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135006">SUSE bug 1135006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135007">SUSE bug 1135007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135008">SUSE bug 1135008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135018">SUSE bug 1135018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135021">SUSE bug 1135021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135024">SUSE bug 1135024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135026">SUSE bug 1135026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135027">SUSE bug 1135027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135028">SUSE bug 1135028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135029">SUSE bug 1135029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135031">SUSE bug 1135031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135033">SUSE bug 1135033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135034">SUSE bug 1135034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135035">SUSE bug 1135035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135036">SUSE bug 1135036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135037">SUSE bug 1135037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135038">SUSE bug 1135038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135039">SUSE bug 1135039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135041">SUSE bug 1135041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135042">SUSE bug 1135042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135044">SUSE bug 1135044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135045">SUSE bug 1135045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135046">SUSE bug 1135046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135047">SUSE bug 1135047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135049">SUSE bug 1135049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135051">SUSE bug 1135051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135052">SUSE bug 1135052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135053">SUSE bug 1135053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135055">SUSE bug 1135055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135056">SUSE bug 1135056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135058">SUSE bug 1135058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135100">SUSE bug 1135100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135120">SUSE bug 1135120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135278">SUSE bug 1135278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135281">SUSE bug 1135281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135309">SUSE bug 1135309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135312">SUSE bug 1135312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135314">SUSE bug 1135314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135315">SUSE bug 1135315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135316">SUSE bug 1135316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135320">SUSE bug 1135320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135323">SUSE bug 1135323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135330">SUSE bug 1135330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135492">SUSE bug 1135492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135542">SUSE bug 1135542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135556">SUSE bug 1135556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135603">SUSE bug 1135603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135661">SUSE bug 1135661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135758">SUSE bug 1135758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136188">SUSE bug 1136188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136206">SUSE bug 1136206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136215">SUSE bug 1136215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136345">SUSE bug 1136345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136347">SUSE bug 1136347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136348">SUSE bug 1136348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136353">SUSE bug 1136353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136424">SUSE bug 1136424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136428">SUSE bug 1136428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136430">SUSE bug 1136430</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136432">SUSE bug 1136432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136434">SUSE bug 1136434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136435">SUSE bug 1136435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136438">SUSE bug 1136438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136439">SUSE bug 1136439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136456">SUSE bug 1136456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136469">SUSE bug 1136469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136477">SUSE bug 1136477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136478">SUSE bug 1136478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136498">SUSE bug 1136498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136573">SUSE bug 1136573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136586">SUSE bug 1136586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136881">SUSE bug 1136881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136935">SUSE bug 1136935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136990">SUSE bug 1136990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137151">SUSE bug 1137151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137152">SUSE bug 1137152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137153">SUSE bug 1137153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137162">SUSE bug 1137162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137201">SUSE bug 1137201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137224">SUSE bug 1137224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137232">SUSE bug 1137232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137233">SUSE bug 1137233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137236">SUSE bug 1137236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137372">SUSE bug 1137372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137429">SUSE bug 1137429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137444">SUSE bug 1137444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137586">SUSE bug 1137586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137739">SUSE bug 1137739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137752">SUSE bug 1137752</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138291">SUSE bug 1138291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138293">SUSE bug 1138293</bugzilla>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16880/">CVE-2018-16880</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7191/">CVE-2018-7191</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10124/">CVE-2019-10124</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11085/">CVE-2019-11085</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-11477/">CVE-2019-11477</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11478/">CVE-2019-11478</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11479/">CVE-2019-11479</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11486/">CVE-2019-11486</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11487/">CVE-2019-11487</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11811/">CVE-2019-11811</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11815/">CVE-2019-11815</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11833/">CVE-2019-11833</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11884/">CVE-2019-11884</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-12382/">CVE-2019-12382</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12818/">CVE-2019-12818</cve>
	<cve impact="low" cvss3="3.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12819/">CVE-2019-12819</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3846/">CVE-2019-3846</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3882/">CVE-2019-3882</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5489/">CVE-2019-5489</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8564/">CVE-2019-8564</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9003/">CVE-2019-9003</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9500/">CVE-2019-9500</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9503/">CVE-2019-9503</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497386" comment="kernel-default-livepatch-4.12.14-197.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497387" comment="kernel-default-livepatch-devel-4.12.14-197.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497388" comment="kernel-livepatch-4_12_14-197_4-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138328" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1133191" ref_url="https://bugzilla.suse.com/1133191" source="BUGZILLA"/>
		<reference ref_id="1136446" ref_url="https://bugzilla.suse.com/1136446" source="BUGZILLA"/>
		<reference ref_id="1136935" ref_url="https://bugzilla.suse.com/1136935" source="BUGZILLA"/>
		<reference ref_id="1137597" ref_url="https://bugzilla.suse.com/1137597" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11477" ref_url="https://www.suse.com/security/cve/CVE-2019-11477/" source="CVE"/>
		<reference ref_id="CVE-2019-11478" ref_url="https://www.suse.com/security/cve/CVE-2019-11478/" source="CVE"/>
		<reference ref_id="CVE-2019-11487" ref_url="https://www.suse.com/security/cve/CVE-2019-11487/" source="CVE"/>
		<reference ref_id="CVE-2019-3846" ref_url="https://www.suse.com/security/cve/CVE-2019-3846/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005591.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-195 fixes several issues.

The following security issues were fixed:

- CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network (bsc#1136446).
- CVE-2019-11477: A sequence of SACKs may have been crafted by a remote attacker such that one can trigger an integer overflow, leading to a kernel panic. (bsc#1137586).
- CVE-2019-11478: It was possible to send a crafted sequence of SACKs which would fragment the TCP retransmission queue. A remote attacker may have been able to further exploit the fragmented queue to cause an expensive linked-list walk for subsequent SACKs received for that same TCP connection. (bsc#1137586)
- CVE-2019-11487: The Linux kernel allowed page-&gt;_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests (bsc#1133191).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-20"/>
	<updated date="2019-06-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1133191">SUSE bug 1133191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136446">SUSE bug 1136446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136935">SUSE bug 1136935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137597">SUSE bug 1137597</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-11477/">CVE-2019-11477</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11478/">CVE-2019-11478</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11487/">CVE-2019-11487</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3846/">CVE-2019-3846</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720961" comment="kernel-default 4.12.14-195 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719180" comment="kernel-livepatch-4_12_14-195-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497389" comment="kernel-livepatch-4_12_14-195-default-2-4.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138329" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1094555" ref_url="https://bugzilla.suse.com/1094555" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1128432" ref_url="https://bugzilla.suse.com/1128432" source="BUGZILLA"/>
		<reference ref_id="1134730" ref_url="https://bugzilla.suse.com/1134730" source="BUGZILLA"/>
		<reference ref_id="1134738" ref_url="https://bugzilla.suse.com/1134738" source="BUGZILLA"/>
		<reference ref_id="1135153" ref_url="https://bugzilla.suse.com/1135153" source="BUGZILLA"/>
		<reference ref_id="1135296" ref_url="https://bugzilla.suse.com/1135296" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1136156" ref_url="https://bugzilla.suse.com/1136156" source="BUGZILLA"/>
		<reference ref_id="1136157" ref_url="https://bugzilla.suse.com/1136157" source="BUGZILLA"/>
		<reference ref_id="1136271" ref_url="https://bugzilla.suse.com/1136271" source="BUGZILLA"/>
		<reference ref_id="1136333" ref_url="https://bugzilla.suse.com/1136333" source="BUGZILLA"/>
		<reference ref_id="1137103" ref_url="https://bugzilla.suse.com/1137103" source="BUGZILLA"/>
		<reference ref_id="1137194" ref_url="https://bugzilla.suse.com/1137194" source="BUGZILLA"/>
		<reference ref_id="1137366" ref_url="https://bugzilla.suse.com/1137366" source="BUGZILLA"/>
		<reference ref_id="1137884" ref_url="https://bugzilla.suse.com/1137884" source="BUGZILLA"/>
		<reference ref_id="1137985" ref_url="https://bugzilla.suse.com/1137985" source="BUGZILLA"/>
		<reference ref_id="1138263" ref_url="https://bugzilla.suse.com/1138263" source="BUGZILLA"/>
		<reference ref_id="1138336" ref_url="https://bugzilla.suse.com/1138336" source="BUGZILLA"/>
		<reference ref_id="1138374" ref_url="https://bugzilla.suse.com/1138374" source="BUGZILLA"/>
		<reference ref_id="1138375" ref_url="https://bugzilla.suse.com/1138375" source="BUGZILLA"/>
		<reference ref_id="1138589" ref_url="https://bugzilla.suse.com/1138589" source="BUGZILLA"/>
		<reference ref_id="1138681" ref_url="https://bugzilla.suse.com/1138681" source="BUGZILLA"/>
		<reference ref_id="1138719" ref_url="https://bugzilla.suse.com/1138719" source="BUGZILLA"/>
		<reference ref_id="1138732" ref_url="https://bugzilla.suse.com/1138732" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16871" ref_url="https://www.suse.com/security/cve/CVE-2018-16871/" source="CVE"/>
		<reference ref_id="CVE-2019-12614" ref_url="https://www.suse.com/security/cve/CVE-2019-12614/" source="CVE"/>
		<reference ref_id="CVE-2019-12817" ref_url="https://www.suse.com/security/cve/CVE-2019-12817/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005658.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

This update adds support for the Hygon Dhyana CPU (fate#327735).

The following security bugs were fixed:

- CVE-2019-12614: An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c. There was an unchecked kstrdup of prop-&gt;name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash) (bnc#1137194).
- CVE-2018-16871: A NULL pointer dereference due to an anomalized NFS message sequence was fixed. (bnc#1137103).
- CVE-2019-12817: On the PowerPC architecture, local attackers could access other users processes memory (bnc#1138263).

The following non-security bugs were fixed:

- 6lowpan: Off by one handling -&gt;nexthdr (bsc#1051510).
- acpi: Add Hygon Dhyana support (fate#327735).
- af_key: unconditionally clone on broadcast (bsc#1051510).
- alsa: firewire-motu: fix destruction of data for isochronous resources (bsc#1051510).
- alsa: hda/realtek - Update headset mode for ALC256 (bsc#1051510).
- alsa: oxfw: allow PCM capture for Stanton SCS.1m (bsc#1051510).
- ASoC: cs42xx8: Add regcache mask dirty (bsc#1051510).
- ASoC: fsl_asrc: Fix the issue about unsupported rate (bsc#1051510).
- audit: fix a memory leak bug (bsc#1051510).
- blk-mq: fix hang caused by freeze/unfreeze sequence (bsc#1128432).
- ceph: factor out ceph_lookup_inode() (bsc#1138681).
- ceph: fix NULL pointer deref when debugging is enabled (bsc#1138681).
- ceph: fix potential use-after-free in ceph_mdsc_build_path (bsc#1138681).
- ceph: flush dirty inodes before proceeding with remount (bsc#1138681).
- ceph: print inode number in __caps_issued_mask debugging messages (bsc#1138681).
- ceph: quota: fix quota subdir mounts (bsc#1138681).
- ceph: remove duplicated filelock ref increase (bsc#1138681).
- cfg80211: fix memory leak of wiphy device name (bsc#1051510).
- cpufreq: Add Hygon Dhyana support (fate#327735).
- cpufreq: AMD: Ignore the check for ProcFeedback in ST/CZ  (fate#327735).
- cpu/topology: Export die_id (jsc#SLE-5454).
- Do not restrict NFSv4.2 on openSUSE (bsc#1138719).
- drbd: Avoid Clang warning about pointless switch statment (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote (bsc#1051510).
- drivers: depend on HAS_IOMEM for devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers: fix a typo in the kernel doc for devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers: provide devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers/rapidio/devices/rio_mport_cdev.c: fix resource leak in error handling path in 'rio_dma_transfer()' (bsc#1051510).
- drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen() (bsc#1051510).
- drivers: thermal: tsens: Do not print error message on -EPROBE_DEFER (bsc#1051510).
- drm: add fallback override/firmware EDID modes workaround (bsc#1111666).
- drm/amd/display: Use plane-&gt;color_space for dpp if specified (bsc#1111666).
- drm/edid: abstract override/firmware EDID retrieval (bsc#1111666).
- drm/i915: Add new AML_ULX support list (jsc#SLE-4986).
- drm/i915: Add new ICL PCI ID (jsc#SLE-4986).
- drm/i915/aml: Add new Amber Lake PCI ID (jsc#SLE-4986).
- drm/i915: Apply correct ddi translation table for AML device (jsc#SLE-4986).
- drm/i915: Attach the pci match data to the device upon creation (jsc#SLE-4986).
- drm/i915/cfl: Adding another PCI Device ID (jsc#SLE-4986).
- drm/i915/cml: Add CML PCI IDS (jsc#SLE-4986).
- drm/i915: Fix uninitialized mask in intel_device_info_subplatform_init (jsc#SLE-4986).
- drm/i915/icl: Adding few more device IDs for Ice Lake (jsc#SLE-4986).
- drm/i915: Introduce concept of a sub-platform (jsc#SLE-4986).
- drm/i915: Mark AML 0x87CA as ULX (jsc#SLE-4986).
- drm/i915: Move final cleanup of drm_i915_private to i915_driver_destroy (jsc#SLE-4986).
- drm/i915/perf: fix whitelist on Gen10+ (bsc#1051510).
- drm/i915: Remove redundant device id from IS_IRONLAKE_M macro (jsc#SLE-4986).
- drm/i915/sdvo: Implement proper HDMI audio support for SDVO (bsc#1051510).
- drm/i915: Split Pineview device info into desktop and mobile (jsc#SLE-4986).
- drm/i915: Split some PCI ids into separate groups (jsc#SLE-4986).
- drm/i915: start moving runtime device info to a separate struct (jsc#SLE-4986).
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver (bsc#1111666).
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable() (bsc#1111666).
- drm/mediatek: clear num_pipes when unbind driver (bsc#1111666).
- drm/mediatek: fix unbind functions (bsc#1111666).
- drm/mediatek: unbind components in mtk_drm_unbind() (bsc#1111666).
- drm/nouveau/disp/dp: respect sink limits when selecting failsafe link configuration (bsc#1051510).
- drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when encoders change (bsc#1111666).
- drm/nouveau/kms/gv100-: fix spurious window immediate interlocks (bsc#1111666).
- EDAC, amd64: Add Hygon Dhyana support (fate#327735).
- EDAC/mc: Fix edac_mc_find() in case no device is found (bsc#1114279).
- HID: wacom: Add ability to provide explicit battery status info (bsc#1051510).
- HID: wacom: Add support for 3rd generation Intuos BT (bsc#1051510).
- HID: wacom: Add support for Pro Pen slim (bsc#1051510).
- HID: wacom: convert Wacom custom usages to standard HID usages (bsc#1051510).
- HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth (bsc#1051510).
- HID: wacom: Do not report anything prior to the tool entering range (bsc#1051510).
- HID: wacom: Do not set tool type until we're in range (bsc#1051510).
- HID: wacom: fix mistake in printk (bsc#1051510).
- HID: wacom: generic: add the 'Report Valid' usage (bsc#1051510).
- HID: wacom: generic: Ignore HID_DG_BATTERYSTRENTH == 0 (bsc#1051510).
- HID: wacom: generic: Leave tool in prox until it completely leaves sense (bsc#1051510).
- HID: wacom: generic: Refactor generic battery handling (bsc#1051510).
- HID: wacom: generic: Report AES battery information (bsc#1051510).
- HID: wacom: generic: Reset events back to zero when pen leaves (bsc#1051510).
- HID: wacom: generic: Scale battery capacity measurements to percentages (bsc#1051510).
- HID: wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (bsc#1051510).
- HID: wacom: generic: Send BTN_TOOL_PEN in prox once the pen enters range (bsc#1051510).
- HID: wacom: generic: Support multiple tools per report (bsc#1051510).
- HID: wacom: generic: Use generic codepath terminology in wacom_wac_pen_report (bsc#1051510).
- HID: wacom: Mark expected switch fall-through (bsc#1051510).
- HID: wacom: Move handling of HID quirks into a dedicated function (bsc#1051510).
- HID: wacom: Move HID fix for AES serial number into wacom_hid_usage_quirk (bsc#1051510).
- HID: wacom: Properly handle AES serial number and tool type (bsc#1051510).
- HID: wacom: Queue events with missing type/serial data for later processing (bsc#1051510).
- HID: wacom: Remove comparison of u8 mode with zero and simplify (bsc#1051510).
- HID: wacom: Replace touch_max fixup code with static touch_max definitions (bsc#1051510).
- HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact (bsc#1051510).
- HID: wacom: Support 'in range' for Intuos/Bamboo tablets where possible (bsc#1051510).
- HID: Wacom: switch Dell canvas into highres mode (bsc#1051510).
- HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary (bsc#1051510).
- HID: wacom: wacom_wac_collection() is local to wacom_wac.c (bsc#1051510).
- HID: wacom: Work around HID descriptor bug in DTK-2451 and DTH-2452 (bsc#1051510).
- hwmon/coretemp: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).
- hwmon/coretemp: Support multi-die/package (jsc#SLE-5454).
- hwmon: (k10temp) 27C Offset needed for Threadripper2  (FATE#327735).
- hwmon: (k10temp) Add Hygon Dhyana support (FATE#327735).
- hwmon: (k10temp) Add support for AMD Ryzen w/ Vega graphics  (FATE#327735).
- hwmon: (k10temp) Add support for family 17h (FATE#327735).
- hwmon: (k10temp) Add support for Stoney Ridge and Bristol  Ridge CPUs (FATE#327735).
- hwmon: (k10temp) Add support for temperature offsets  (FATE#327735).
- hwmon: (k10temp) Add temperature offset for Ryzen 1900X  (FATE#327735).
- hwmon: (k10temp) Add temperature offset for Ryzen 2700X  (FATE#327735).
- hwmon: (k10temp) Correct model name for Ryzen 1600X  (FATE#327735).
- hwmon: (k10temp) Display both Tctl and Tdie (FATE#327735).
- hwmon: (k10temp) Fix reading critical temperature register  (FATE#327735).
- hwmon: (k10temp) Make function get_raw_temp static  (FATE#327735).
- hwmon: (k10temp) Move chip specific code into probe function  (FATE#327735).
- hwmon: (k10temp) Only apply temperature offset if result is  positive (FATE#327735).
- hwmon: (k10temp) Support all Family 15h Model 6xh and Model  7xh processors (FATE#327735).
- hwmon: k10temp: Support Threadripper 2920X, 2970WX; simplify  offset table (FATE#327735).
- hwmon: (k10temp) Use API function to access System Management  Network (FATE#327735).
- hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs  (FATE#327735).
- i2c-piix4: Add Hygon Dhyana SMBus support (FATE#327735).
- ibmveth: Update ethtool settings to reflect virtual properties (bsc#1136157, LTC#177197).
- ipv6: fib: Do not assume only nodes hold a reference on routes (bsc#1138732).
- kabi: Mask no_vf_scan in struct pci_dev (jsc#SLE-5803  FATE#327056).
- kabi: s390: enum interruption_class (jsc#SLE-5789 bsc#1134730 LTC#173388).
- kabi: s390: enum interruption_class (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- kabi/severities: Whitelist airq_iv_* (s390-specific)
- kABI workaround for asus-wmi changes (bsc#1051510).
- kABI workaround for the new pci_dev.skip_bus_pm field addition (bsc#1051510).
- kabi: x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).
- kabi: x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).
- kvm: x86: Include CPUID leaf 0x8000001e in kvm's supported CPUID (bsc#1114279).
- kvm: x86: Include multiple indices with CPUID leaf 0x8000001d (bsc#1114279).
- mfd: intel-lpss: Set the device in reset state when init (bsc#1051510).
- mfd: tps65912-spi: Add missing of table registration (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers (bsc#1051510).
- mmc: mmci: Prevent polling for busy detection in IRQ context (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support (bsc#1051510).
- module: Fix livepatch/ftrace module text permissions race  (bsc#1071995 fate#323487).
- new primitive: vmemdup_user() (jsc#SLE-4712 bsc#1136156).
- nl80211: fix station_info pertid memory leak (bsc#1051510).
- {nl,mac}80211: allow 4addr AP operation on crypto controlled devices (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D (bsc#1051510).
- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes (bsc#1051510).
- nvmem: Do not let a NULL cell_id for nvmem_cell_get() crash us (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated function (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read (bsc#1051510).
- nvme: skip nvme_update_disk_info() if the controller is not live (bsc#1128432).
- PCI: Disable VF decoding before pcibios_sriov_disable() updates resources (jsc#SLE-5803).
- PCI/IOV: Add flag so platforms can skip VF scanning  (jsc#SLE-5803 FATE#327056).
- PCI/IOV: Factor out sriov_add_vfs() (jsc#SLE-5803 FATE#327056).
- PCI: PM: Avoid possible suspend-to-idle issue (bsc#1051510).
- perf tools: Add Hygon Dhyana support (fate#327735).
- perf/x86/intel/cstate: Support multi-die/package (jsc#SLE-5454).
- perf/x86/intel/rapl: Cosmetic rename internal variables in response to multi-die/pkg support (jsc#SLE-5454).
- perf/x86/intel/rapl: Support multi-die/package (jsc#SLE-5454).
- perf/x86/intel/uncore: Cosmetic renames in response to multi-die/pkg support (jsc#SLE-5454).
- perf/x86/intel/uncore: Support multi-die/package (jsc#SLE-5454).
- platform/chrome: cros_ec_proto: check for NULL transfer function (bsc#1051510).
- platform_data/mlxreg: Add capability field to core platform data (bsc#1112374).
- platform_data/mlxreg: additions for Mellanox watchdog driver (bsc#1112374).
- platform_data/mlxreg: Document fixes for core platform data (bsc#1112374).
- platform/mellanox: Add new ODM system types to mlx-platform (bsc#1112374).
- platform/mellanox: Add TmFifo driver for Mellanox BlueField Soc (bsc#1136333 jsc#SLE-4994).
- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to remove flow (bsc#1111666).
- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi (bsc#1051510).
- platform/x86: intel_pmc_core: Add ICL platform support (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Add Package cstates residency info (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Avoid a u32 overflow (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Include Reserved IP for LTR (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Mark local function static (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Quirk to ignore XTAL shutdown (jsc#SLE-5226).
- platform/x86: mlx-platform: Add ASIC hotplug device configuration (bsc#1112374).
- platform/x86: mlx-platform: Add definitions for new registers (bsc#1112374).
- platform/x86: mlx-platform: Add extra CPLD for next generation systems (bsc#1112374).
- platform/x86: mlx-platform: Add LED platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlxreg-fan platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlxreg-io platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlx-wdt platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add support for fan capability registers (bsc#1112374).
- platform/x86: mlx-platform: Add support for fan direction register (bsc#1112374).
- platform/x86: mlx-platform: Add support for new VMOD0007 board name (bsc#1112374).
- platform/x86: mlx-platform: Add support for tachometer speed register (bsc#1112374).
- platform/x86: mlx-platform: Add UID LED for the next generation systems (bsc#1112374).
- platform/x86: mlx-platform: Allow mlxreg-io driver activation for more systems (bsc#1112374).
- platform/x86: mlx-platform: Allow mlxreg-io driver activation for new systems (bsc#1112374).
- platform/x86: mlx-platform: Change mlxreg-io configuration for MSN274x systems (bsc#1112374).
- platform/x86: mlx-platform: Convert to use SPDX identifier (bsc#1112374).
- platform/x86: mlx-platform: Fix access mode for fan_dir attribute (bsc#1112374).
- platform/x86: mlx-platform: Fix copy-paste error in mlxplat_init() (bsc#1112374).
- platform/x86: mlx-platform: Fix LED configuration (bsc#1112374).
- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device registration (bsc#1051510).
- platform/x86: mlx-platform: Fix tachometer registers (bsc#1112374).
- platform/x86: mlx-platform: Remove unused define (bsc#1112374).
- platform/x86: mlx-platform: Rename new systems product names (bsc#1112374).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks (bsc#1051510).
- powercap/intel_rapl: Simplify rapl_find_package() (jsc#SLE-5454).
- powercap/intel_rapl: Support multi-die/package (jsc#SLE-5454).
- powercap/intel_rapl: Update RAPL domain name and debug messages (jsc#SLE-5454).
- powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (bsc#1138374, LTC#178199).
- powerpc/pseries: Fix oops in hotplug memory notifier (bsc#1138375, LTC#178204).
- powerpc/pseries/mobility: prevent cpu hotplug during DT update (bsc#1138374, LTC#178199).
- powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (bsc#1138374, LTC#178199).
- power: supply: max14656: fix potential use-before-alloc (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- qmi_wwan: add network device usage statistics for qmimux devices (bsc#1051510).
- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qmi_wwan: add support for QMAP padding in the RX path (bsc#1051510).
- qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode (bsc#1051510).
- qmi_wwan: extend permitted QMAP mux_id value range (bsc#1051510).
- rapidio: fix a NULL pointer dereference when create_workqueue() fails (bsc#1051510).
- RAS/CEC: Convert the timer callback to a workqueue (bsc#1114279).
- RAS/CEC: Fix binary search function (bsc#1114279).
- rbd: do not assert on writes to snapshots (bsc#1137985 bsc#1138681).
- Revert 'ALSA: hda/realtek - Improve the headset mic for Acer Aspire laptops' (bsc#1051510).
- Revert 'HID: wacom: generic: Send BTN_TOOL_PEN in prox once the pen enters range' (bsc#1051510).
- Revert 's390/jump_label: Use 'jdd' constraint on gcc9 (bsc#1138589).' This broke the build with older gcc instead.
- s390/airq: provide cacheline aligned ivs (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/airq: recognize directed interrupts (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/dasd: fix using offset into zero size array error (bsc#1051510).
- s390: enable processes for mio instructions (jsc#SLE-5802  FATE#327055 bsc#1134738 LTC#173387).
- s390/ism: move oddities of device IO to wrapper function  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/jump_label: Use 'jdd' constraint on gcc9 (bsc#1138589).
- s390/pci: add parameter to disable usage of MIO instructions  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: add parameter to force floating irqs (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: clarify interrupt vector usage (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: fix assignment of bus resources (jsc#SLE-5802  FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: fix struct definition for set PCI function  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: gather statistics for floating vs directed irqs  (jsc#SLE-5789 FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: improve bar check (jsc#SLE-5803 FATE#327056).
- s390/pci: map IOV resources (jsc#SLE-5803 FATE#327056).
- s390/pci: mark command line parser data __initdata (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: move everything irq related to pci_irq.c (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: move io address mapping code to pci_insn.c  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: provide support for CPU directed interrupts  (jsc#SLE-5789 FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: provide support for MIO instructions (jsc#SLE-5802  FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: remove stale rc (jsc#SLE-5789 FATE#327042 bsc#1134730  LTC#173388).
- s390/pci: remove unused define (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- s390/pci: skip VF scanning (jsc#SLE-5803 FATE#327056).
- s390/protvirt: add memory sharing for diag 308 set/store  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: block kernel command line alteration  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/qeth: fix race when initializing the IP address table (bsc#1051510).
- s390/qeth: fix VLAN attribute in bridge_hostnotify udev event (bsc#1051510).
- s390/sclp: detect DIRQ facility (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- s390/setup: fix early warning messages (bsc#1051510).
- s390: show statistics for MSI IRQs (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759  FATE#327003 bsc#1135153 LTC#173151).
- s390/virtio: handle find on invalid queue gracefully (bsc#1051510).
- sched/topology: Improve load balancing on AMD EPYC (bsc#1137366).
- scsi: hpsa: bump driver version (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: check for lv removal (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: clean up two indentation issues (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct device id issues (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct device resets (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct ioaccel2 chaining (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct simple mode (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: fix an uninitialized read and dereference of pointer dev (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: mark expected switch fall-throughs (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: remove timeout from TURs (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: switch to generic DMA API (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: Use vmemdup_user to replace the open code (jsc#SLE-4712 bsc#1136156).
- scsi: megaraid_sas: Add support for DEVICE_LIST DCMD in driver (bsc#1136271).
- scsi: megaraid_sas: correct an info message (bsc#1136271).
- scsi: megaraid_sas: driver version update (bsc#1136271).
- scsi: megaraid_sas: Retry reads of outbound_intr_status reg (bsc#1136271).
- scsi: megaraid_sas: Rework code to get PD and LD list (bsc#1136271).
- scsi: megaraid_sas: Rework device add code in AEN path (bsc#1136271).
- scsi: megaraid_sas: Update structures for HOST_DEVICE_LIST DCMD (bsc#1136271).
- scsi: qla2xxx: Fix FC-AL connection target discovery (bsc#1094555).
- scsi: qla2xxx: Fix N2N target discovery with Local loop (bsc#1094555).
- scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (bsc#1135296).
- scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove (bsc#1051510).
- scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host (bsc#1051510).
- scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices (bsc#1051510).
- scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) (bsc#1051510).
- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- SMB3: Fix endian warning (bsc#1137884).
- soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher (bsc#1051510).
- soc: rockchip: Set the proper PWM for rk3288 (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in spi_unregister_master (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: spi-fsl-spi: call spi_finalize_current_message() at the end (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- supported.conf: added mlxbf_tmfifo (bsc#1136333 jsc#SLE-4994)
- thermal: rcar_gen3_thermal: disable interrupt in .remove (bsc#1051510).
- thermal/x86_pkg_temp_thermal: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).
- thermal/x86_pkg_temp_thermal: Support multi-die/package (jsc#SLE-5454).
- tmpfs: fix link accounting when a tmpfile is linked in (bsc#1051510).
- tmpfs: fix uninitialized return value in shmem_link (bsc#1051510).
- tools/cpupower: Add Hygon Dhyana support (fate#327735).
- topology: Create core_cpus and die_cpus sysfs attributes (jsc#SLE-5454).
- topology: Create package_cpus sysfs attribute (jsc#SLE-5454).
- tty: max310x: Fix external crystal register setup (bsc#1051510).
- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- usb: serial: pl2303: fix tranceiver suspend mode (bsc#1135642).
- usb: xhci: avoid null pointer deref when bos field is NULL (bsc#1135642).
- vfio: ccw: only free cp on final interrupt (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference (bsc#1051510).
- video: imsttfb: fix potential NULL pointer dereferences (bsc#1051510).
- virtio_console: initialize vtermno value for ports (bsc#1051510).
- vlan: disable SIOCSHWTSTAMP in container (bsc#1051510).
- watchdog: imx2_wdt: Fix set_timeout for big timeout values (bsc#1051510).
- x86/alternative: Init ideal_nops for Hygon Dhyana (fate#327735).
- x86/amd_nb: Add support for Raven Ridge CPUs (FATE#327735).
- x86/amd_nb: Check vendor in AMD-only functions (fate#327735).
- x86/apic: Add Hygon Dhyana support (fate#327735).
- x86/bugs: Add Hygon Dhyana to the respective mitigation  machinery (fate#327735).
- x86/cpu: Add Icelake model number (jsc#SLE-5226).
- x86/cpu/amd: Do not force the CPB cap when running under a hypervisor (bsc#1114279).
- x86/cpu: Create Hygon Dhyana architecture support file  (fate#327735).
- x86/cpufeatures: Carve out CQM features retrieval (jsc#SLE-5382).
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (jsc#SLE-5382).
- x86/cpufeatures: Enumerate the new AVX512 BFLOAT16 instructions (jsc#SLE-5382).
- x86/cpu: Get cache info and setup cache cpumap for Hygon Dhyana  (fate#327735).
- x86/cpu/hygon: Fix phys_proc_id calculation logic for multi-die processors ().
- x86/cpu/mtrr: Support TOP_MEM2 and get MTRR number  (fate#327735).
- x86/events: Add Hygon Dhyana support to PMU infrastructure  (fate#327735).
- x86/kvm: Add Hygon Dhyana support to KVM (fate#327735).
- x86/mce: Add Hygon Dhyana support to the MCA infrastructure  (fate#327735).
- x86/mce: Do not disable MCA banks when offlining a CPU on AMD  (fate#327735).
- x86/mce: Fix machine_check_poll() tests for error types (bsc#1114279).
- x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback (bsc#1114279).
- x86/microcode: Fix microcode hotplug state (bsc#1114279).
- x86/microcode: Fix the ancient deprecated microcode loading method (bsc#1114279).
- x86/mm/mem_encrypt: Disable all instrumentation for early SME setup (bsc#1114279).
- x86/pci, x86/amd_nb: Add Hygon Dhyana support to PCI and  northbridge (fate#327735).
- x86/smpboot: Do not use BSP INIT delay and MWAIT to idle on  Dhyana (fate#327735).
- x86/smpboot: Rename match_die() to match_pkg() (jsc#SLE-5454).
- x86/speculation/mds: Revert CPU buffer clear on double fault exit (bsc#1114279).
- x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).
- x86/topology: Create topology_max_die_per_package() (jsc#SLE-5454).
- x86/topology: Define topology_die_id() (jsc#SLE-5454).
- x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).
- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- x86/xen: Add Hygon Dhyana support to Xen (fate#327735).
- x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die  processors (fate#327735).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-04"/>
	<updated date="2019-07-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094555">SUSE bug 1094555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128432">SUSE bug 1128432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134730">SUSE bug 1134730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134738">SUSE bug 1134738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135153">SUSE bug 1135153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135296">SUSE bug 1135296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136156">SUSE bug 1136156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136157">SUSE bug 1136157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136271">SUSE bug 1136271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136333">SUSE bug 1136333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137103">SUSE bug 1137103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137194">SUSE bug 1137194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137366">SUSE bug 1137366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137884">SUSE bug 1137884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137985">SUSE bug 1137985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138263">SUSE bug 1138263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138336">SUSE bug 1138336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138374">SUSE bug 1138374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138375">SUSE bug 1138375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138589">SUSE bug 1138589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138681">SUSE bug 1138681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138719">SUSE bug 1138719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138732">SUSE bug 1138732</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16871/">CVE-2018-16871</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12614/">CVE-2019-12614</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-12817/">CVE-2019-12817</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497390" comment="kernel-default-livepatch-4.12.14-197.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497391" comment="kernel-default-livepatch-devel-4.12.14-197.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497392" comment="kernel-livepatch-4_12_14-197_7-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138330" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1136446" ref_url="https://bugzilla.suse.com/1136446" source="BUGZILLA"/>
		<reference ref_id="1138264" ref_url="https://bugzilla.suse.com/1138264" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12817" ref_url="https://www.suse.com/security/cve/CVE-2019-12817/" source="CVE"/>
		<reference ref_id="CVE-2019-3846" ref_url="https://www.suse.com/security/cve/CVE-2019-3846/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1765-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005667.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-195 fixes several issues.

The following security issues were fixed:

- CVE-2019-12817: arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel for powerpc had a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected (bsc#1138264).
- CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network (bsc#1136446).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-08"/>
	<updated date="2019-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1136446">SUSE bug 1136446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138264">SUSE bug 1138264</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-12817/">CVE-2019-12817</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3846/">CVE-2019-3846</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720961" comment="kernel-default 4.12.14-195 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719180" comment="kernel-livepatch-4_12_14-195-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497393" comment="kernel-livepatch-4_12_14-195-default-3-7.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138331" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1138264" ref_url="https://bugzilla.suse.com/1138264" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12817" ref_url="https://www.suse.com/security/cve/CVE-2019-12817/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005669.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_4 fixes one issue.

The following security issue was fixed:

- CVE-2019-12817: arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel for powerpc had a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected (bsc#1138264).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-08"/>
	<updated date="2019-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1138264">SUSE bug 1138264</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-12817/">CVE-2019-12817</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720962" comment="kernel-default 4.12.14-197.4 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719181" comment="kernel-livepatch-4_12_14-197_4-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497394" comment="kernel-livepatch-4_12_14-197_4-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138332" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1088047" ref_url="https://bugzilla.suse.com/1088047" source="BUGZILLA"/>
		<reference ref_id="1098633" ref_url="https://bugzilla.suse.com/1098633" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1106383" ref_url="https://bugzilla.suse.com/1106383" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1119532" ref_url="https://bugzilla.suse.com/1119532" source="BUGZILLA"/>
		<reference ref_id="1120423" ref_url="https://bugzilla.suse.com/1120423" source="BUGZILLA"/>
		<reference ref_id="1125703" ref_url="https://bugzilla.suse.com/1125703" source="BUGZILLA"/>
		<reference ref_id="1128902" ref_url="https://bugzilla.suse.com/1128902" source="BUGZILLA"/>
		<reference ref_id="1130836" ref_url="https://bugzilla.suse.com/1130836" source="BUGZILLA"/>
		<reference ref_id="1131645" ref_url="https://bugzilla.suse.com/1131645" source="BUGZILLA"/>
		<reference ref_id="1132390" ref_url="https://bugzilla.suse.com/1132390" source="BUGZILLA"/>
		<reference ref_id="1133401" ref_url="https://bugzilla.suse.com/1133401" source="BUGZILLA"/>
		<reference ref_id="1133738" ref_url="https://bugzilla.suse.com/1133738" source="BUGZILLA"/>
		<reference ref_id="1134303" ref_url="https://bugzilla.suse.com/1134303" source="BUGZILLA"/>
		<reference ref_id="1134395" ref_url="https://bugzilla.suse.com/1134395" source="BUGZILLA"/>
		<reference ref_id="1135556" ref_url="https://bugzilla.suse.com/1135556" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135897" ref_url="https://bugzilla.suse.com/1135897" source="BUGZILLA"/>
		<reference ref_id="1136161" ref_url="https://bugzilla.suse.com/1136161" source="BUGZILLA"/>
		<reference ref_id="1136264" ref_url="https://bugzilla.suse.com/1136264" source="BUGZILLA"/>
		<reference ref_id="1136343" ref_url="https://bugzilla.suse.com/1136343" source="BUGZILLA"/>
		<reference ref_id="1136935" ref_url="https://bugzilla.suse.com/1136935" source="BUGZILLA"/>
		<reference ref_id="1137625" ref_url="https://bugzilla.suse.com/1137625" source="BUGZILLA"/>
		<reference ref_id="1137728" ref_url="https://bugzilla.suse.com/1137728" source="BUGZILLA"/>
		<reference ref_id="1138879" ref_url="https://bugzilla.suse.com/1138879" source="BUGZILLA"/>
		<reference ref_id="1139712" ref_url="https://bugzilla.suse.com/1139712" source="BUGZILLA"/>
		<reference ref_id="1139751" ref_url="https://bugzilla.suse.com/1139751" source="BUGZILLA"/>
		<reference ref_id="1139771" ref_url="https://bugzilla.suse.com/1139771" source="BUGZILLA"/>
		<reference ref_id="1139865" ref_url="https://bugzilla.suse.com/1139865" source="BUGZILLA"/>
		<reference ref_id="1140133" ref_url="https://bugzilla.suse.com/1140133" source="BUGZILLA"/>
		<reference ref_id="1140228" ref_url="https://bugzilla.suse.com/1140228" source="BUGZILLA"/>
		<reference ref_id="1140328" ref_url="https://bugzilla.suse.com/1140328" source="BUGZILLA"/>
		<reference ref_id="1140405" ref_url="https://bugzilla.suse.com/1140405" source="BUGZILLA"/>
		<reference ref_id="1140424" ref_url="https://bugzilla.suse.com/1140424" source="BUGZILLA"/>
		<reference ref_id="1140428" ref_url="https://bugzilla.suse.com/1140428" source="BUGZILLA"/>
		<reference ref_id="1140454" ref_url="https://bugzilla.suse.com/1140454" source="BUGZILLA"/>
		<reference ref_id="1140463" ref_url="https://bugzilla.suse.com/1140463" source="BUGZILLA"/>
		<reference ref_id="1140575" ref_url="https://bugzilla.suse.com/1140575" source="BUGZILLA"/>
		<reference ref_id="1140577" ref_url="https://bugzilla.suse.com/1140577" source="BUGZILLA"/>
		<reference ref_id="1140637" ref_url="https://bugzilla.suse.com/1140637" source="BUGZILLA"/>
		<reference ref_id="1140658" ref_url="https://bugzilla.suse.com/1140658" source="BUGZILLA"/>
		<reference ref_id="1140715" ref_url="https://bugzilla.suse.com/1140715" source="BUGZILLA"/>
		<reference ref_id="1140719" ref_url="https://bugzilla.suse.com/1140719" source="BUGZILLA"/>
		<reference ref_id="1140726" ref_url="https://bugzilla.suse.com/1140726" source="BUGZILLA"/>
		<reference ref_id="1140727" ref_url="https://bugzilla.suse.com/1140727" source="BUGZILLA"/>
		<reference ref_id="1140728" ref_url="https://bugzilla.suse.com/1140728" source="BUGZILLA"/>
		<reference ref_id="1140814" ref_url="https://bugzilla.suse.com/1140814" source="BUGZILLA"/>
		<reference ref_id="1140887" ref_url="https://bugzilla.suse.com/1140887" source="BUGZILLA"/>
		<reference ref_id="1140888" ref_url="https://bugzilla.suse.com/1140888" source="BUGZILLA"/>
		<reference ref_id="1140889" ref_url="https://bugzilla.suse.com/1140889" source="BUGZILLA"/>
		<reference ref_id="1140891" ref_url="https://bugzilla.suse.com/1140891" source="BUGZILLA"/>
		<reference ref_id="1140893" ref_url="https://bugzilla.suse.com/1140893" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1140954" ref_url="https://bugzilla.suse.com/1140954" source="BUGZILLA"/>
		<reference ref_id="1140955" ref_url="https://bugzilla.suse.com/1140955" source="BUGZILLA"/>
		<reference ref_id="1140956" ref_url="https://bugzilla.suse.com/1140956" source="BUGZILLA"/>
		<reference ref_id="1140957" ref_url="https://bugzilla.suse.com/1140957" source="BUGZILLA"/>
		<reference ref_id="1140958" ref_url="https://bugzilla.suse.com/1140958" source="BUGZILLA"/>
		<reference ref_id="1140959" ref_url="https://bugzilla.suse.com/1140959" source="BUGZILLA"/>
		<reference ref_id="1140960" ref_url="https://bugzilla.suse.com/1140960" source="BUGZILLA"/>
		<reference ref_id="1140961" ref_url="https://bugzilla.suse.com/1140961" source="BUGZILLA"/>
		<reference ref_id="1140962" ref_url="https://bugzilla.suse.com/1140962" source="BUGZILLA"/>
		<reference ref_id="1140964" ref_url="https://bugzilla.suse.com/1140964" source="BUGZILLA"/>
		<reference ref_id="1140971" ref_url="https://bugzilla.suse.com/1140971" source="BUGZILLA"/>
		<reference ref_id="1140972" ref_url="https://bugzilla.suse.com/1140972" source="BUGZILLA"/>
		<reference ref_id="1140992" ref_url="https://bugzilla.suse.com/1140992" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20836" ref_url="https://www.suse.com/security/cve/CVE-2018-20836/" source="CVE"/>
		<reference ref_id="CVE-2019-10126" ref_url="https://www.suse.com/security/cve/CVE-2019-10126/" source="CVE"/>
		<reference ref_id="CVE-2019-10638" ref_url="https://www.suse.com/security/cve/CVE-2019-10638/" source="CVE"/>
		<reference ref_id="CVE-2019-10639" ref_url="https://www.suse.com/security/cve/CVE-2019-10639/" source="CVE"/>
		<reference ref_id="CVE-2019-11599" ref_url="https://www.suse.com/security/cve/CVE-2019-11599/" source="CVE"/>
		<reference ref_id="CVE-2019-13233" ref_url="https://www.suse.com/security/cve/CVE-2019-13233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005712.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2019-10638: In the Linux kernel, a device could be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic was sent to multiple destination IP addresses, it was possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may have been conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses (bnc#1140575 1140577).
- CVE-2019-10639: The Linux kernel allowed Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it was possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic was sent to multiple destination IP addresses, it was possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key was extracted (via enumeration), the offset of the kernel image was exposed. This attack could be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker's web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable because IP ID generation was changed to have a dependency on an address associated with a network namespace (bnc#1140577).
- CVE-2019-13233: In arch/x86/lib/insn-eval.c in the Linux kernel, there was a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bnc#1140454).
- CVE-2018-20836: An issue was discovered in the Linux kernel There was a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free (bnc#1134395).
- CVE-2019-10126: A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might have lead to memory corruption and possibly other consequences (bnc#1136935).
- CVE-2019-11599: The coredump implementation in the Linux kernel did not use locking or other mechanisms to prevent vma layout or vma flags changes while it ran, which allowed local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c (bnc#1131645 1133738).

The following non-security bugs were fixed:

- Abort file_remove_privs() for non-reg. files (bsc#1140888).
- acpica: Clear status of GPEs on first direct enable (bsc#1111666).
- acpi: PM: Allow transitions to D0 to occur in special cases (bsc#1051510).
- acpi: PM: Avoid evaluating _PS3 on transitions from D3hot to D3cold (bsc#1051510).
- alsa: firewire-lib/fireworks: fix miss detection of received MIDI messages (bsc#1051510).
- alsa: hda - Force polling mode on CNL for fixing codec communication (bsc#1051510).
- alsa: hda/realtek: Add quirks for several Clevo notebook barebones (bsc#1051510).
- alsa: hda/realtek - Change front mic location for Lenovo M710q (bsc#1051510).
- alsa: line6: Fix write on zero-sized buffer (bsc#1051510).
- alsa: seq: fix incorrect order of dest_client/dest_ports arguments (bsc#1051510).
- alsa: usb-audio: Fix parse of UAC2 Extension Units (bsc#1111666).
- alsa: usb-audio: fix sign unintended sign extension on left shifts (bsc#1051510).
- apparmor: enforce nullbyte at end of tag string (bsc#1051510).
- asoc: cx2072x: fix integer overflow on unsigned int multiply (bsc#1111666).
- ax25: fix inconsistent lock state in ax25_destroy_timer (bsc#1051510).
- Backporting hwpoison fixes  - mm: hugetlb: prevent reuse of hwpoisoned free hugepages   (bsc#1139712).  - mm: hwpoison: change PageHWPoison behavior on hugetlb pages   (bsc#1139712).  - mm: hugetlb: soft-offline: dissolve source hugepage after   successful migration (bsc#1139712).  - mm: soft-offline: dissolve free hugepage if soft-offlined   (bsc#1139712).  - mm: hwpoison: introduce memory_failure_hugetlb() (bsc#1139712).  - mm: hwpoison: dissolve in-use hugepage in unrecoverable memory   error (bsc#1139712).  - mm: hugetlb: delete dequeue_hwpoisoned_huge_page()   (bsc#1139712).  - mm: hwpoison: introduce idenfity_page_state (bsc#1139712).  - mm: hugetlb: soft_offline: save compound page order before   page migration (bsc#1139712)  - fs: hugetlbfs: fix hwpoison reserve accounting (bsc#1139712)  - mm: fix race on soft-offlining free huge pages (bsc#1139712).  - mm: soft-offline: close the race against page allocation   (bsc#1139712).  - mm: soft-offline: return -EBUSY if   set_hwpoison_free_buddy_page() fails (bsc#1139712).  - mm: hugetlb: soft-offline: dissolve_free_huge_page() return   zero on !PageHuge (bsc#bsc#1139712).
- blk-mq: free hw queue's resource in hctx's release handler (bsc#1140637).
- block: Fix a NULL pointer dereference in generic_make_request() (bsc#1139771).
- bluetooth: Fix faulty expression for minimum encryption key size check (bsc#1140328).
- bpf, devmap: Add missing bulk queue free (bsc#1109837).
- bpf, devmap: Add missing RCU read lock on flush (bsc#1109837).
- bpf, devmap: Fix premature entry free on destroying map (bsc#1109837).
- bpf: devmap: fix use-after-free Read in __dev_map_entry_free (bsc#1109837).
- bpf: lpm_trie: check left child of last leftmost node for NULL (bsc#1109837).
- bpf: sockmap fix msg-&gt;sg.size account on ingress skb (bsc#1109837).
- bpf: sockmap, fix use after free from sleep in psock backlog workqueue (bsc#1109837).
- bpf: sockmap remove duplicate queue free (bsc#1109837).
- bpf, tcp: correctly handle DONT_WAIT flags and timeo == 0 (bsc#1109837).
- can: af_can: Fix error path of can_init() (bsc#1051510).
- can: flexcan: fix timeout when set small bitrate (bsc#1051510).
- can: purge socket error queue on sock destruct (bsc#1051510).
- ceph: flush dirty inodes before proceeding with remount (bsc#1140405).
- clk: rockchip: Turn on 'aclk_dmac1' for suspend on rk3288 (bsc#1051510).
- clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider (bsc#1051510).
- coresight: etb10: Fix handling of perf mode (bsc#1051510).
- coresight: etm4x: Add support to enable ETMv4.2 (bsc#1051510).
- crypto: algapi - guard against uninitialized spawn list in crypto_remove_spawns (bsc#1133401).
- crypto: cryptd - Fix skcipher instance memory leak (bsc#1051510).
- crypto: user - prevent operating on larval algorithms (bsc#1133401).
- dax: Fix xarray entry association for mixed mappings (bsc#1140893).
- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- device core: Consolidate locking and unlocking of parent and device (bsc#1106383).
- dmaengine: imx-sdma: remove BD_INTR for channel0 (bsc#1051510).
- doc: Cope with the deprecation of AutoReporter (bsc#1051510).
- documentation/ABI: Document umwait control sysfs interfaces (jsc#SLE-5187).
- documentation: DMA-API: fix a function name of max_mapping_size (bsc#1140954).
- driver core: Establish order of operations for device_add and device_del via bitflag (bsc#1106383).
- driver core: Probe devices asynchronously instead of the driver (bsc#1106383).
- drivers/base/devres: introduce devm_release_action() (bsc#1103992).
- drivers/base: Introduce kill_device() (bsc#1139865).
- drivers/base: kABI fixes for struct device_private (bsc#1106383).
- drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var (bsc#1051510).
- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE (bsc#1051510).
- drm/amd/powerplay: use hardware fan control if no powerplay fan table (bsc#1111666).
- drm/arm/hdlcd: Actually validate CRTC modes (bsc#1111666).
- drm/arm/hdlcd: Allow a bit of clock tolerance (bsc#1051510).
- drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times (bsc#1111666).
- drm/etnaviv: add missing failure path to destroy suballoc (bsc#1111666).
- drm/fb-helper: generic: Do not take module ref for fbcon (bsc#1111666).
- drm: Fix drm_release() and device unplug (bsc#1111666).
- drm/i915/dmc: protect against reading random memory (bsc#1051510).
- drm/i915/gvt: ignore unexpected pvinfo write (bsc#1051510).
- drm/imx: notify drm core before sending event during crtc disable (bsc#1111666).
- drm/imx: only send event on crtc disable if kept disabled (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2 (bsc#1111666).
- drm/vmwgfx: fix a warning due to missing dma_parms (bsc#1111666).
- drm/vmwgfx: Use the backdoor port if the HB port is not available (bsc#1111666).
- ext4: do not delete unlinked inode from orphan list on failed truncate (bsc#1140891).
- failover: allow name change on IFF_UP slave interfaces (bsc#1109837).
- fs/ocfs2: fix race in ocfs2_dentry_attach_lock() (bsc#1140889).
- fs/proc/proc_sysctl.c: Fix a NULL pointer dereference (bsc#1140887).
- fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links (bsc#1140887).
- ftrace/x86: Remove possible deadlock between register_kprobe() and ftrace_run_update_code() (bsc#1071995).
- genirq: Prevent use-after-free and work list corruption (bsc#1051510).
- genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent() (bsc#1051510).
- genwqe: Prevent an integer overflow in the ioctl (bsc#1051510).
- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes (mm/hugetlbfs)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git fixes (mm/hugetlbfs)).
- i2c: acorn: fix i2c warning (bsc#1135642).
- i2c: mlxcpld: Add support for extended transaction length for i2c-mlxcpld (bsc#1112374).
- i2c: mlxcpld: Add support for smbus block read transaction (bsc#1112374).
- i2c: mlxcpld: Allow configurable adapter id for mlxcpld (bsc#1112374).
- i2c: mlxcpld: Fix adapter functionality support callback (bsc#1112374).
- i2c: mlxcpld: Fix wrong initialization order in probe (bsc#1112374).
- i2c: mux: mlxcpld: simplify code to reach the adapter (bsc#1112374).
- ib/hfi1: Clear the IOWAIT pending bits when QP is put into error state (bsc#1114685).
- ib/hfi1: Create inline to get extended headers (bsc#1114685 ).
- ib/hfi1: Validate fault injection opcode user input (bsc#1114685 ).
- ib/mlx5: Verify DEVX general object type correctly (bsc#1103991 ).
- input: synaptics - enable SMBus on ThinkPad E480 and E580 (bsc#1051510).
- input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD (bsc#1051510).
- iommu/amd: Make iommu_disable safer (bsc#1140955).
- iommu/arm-smmu: Add support for qcom,smmu-v2 variant (bsc#1051510).
- iommu/arm-smmu: Avoid constant zero in TLBI writes (bsc#1140956).
- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register (bsc#1051510).
- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer (bsc#1051510).
- iommu: Fix a leak in iommu_insert_resv_region (bsc#1140957).
- iommu: Use right function to get group for device (bsc#1140958).
- iommu/vt-d: Duplicate iommu_resv_region objects per device list (bsc#1140959).
- iommu/vt-d: Handle PCI bridge RMRR device scopes in intel_iommu_get_resv_regions (bsc#1140960).
- iommu/vt-d: Handle RMRR with PCI bridge device scopes (bsc#1140961).
- iommu/vt-d: Introduce is_downstream_to_pci_bridge helper (bsc#1140962).
- iommu/vt-d: Remove unnecessary rcu_read_locks (bsc#1140964).
- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- irqchip/gic-v3-its: fix some definitions of inner cacheability attributes (bsc#1051510).
- irqchip/mbigen: Do not clear eventid when freeing an MSI (bsc#1051510).
- ixgbe: Avoid NULL pointer dereference with VF on non-IPsec hw (bsc#1140228).
- kabi fixup blk_mq_register_dev() (bsc#1140637).
- kernel-binary: fix missing \
- kernel-binary: rpm does not support multiline condition
- kernel-binary: Use -c grep option in klp project detection.
- kvm: svm/avic: fix off-by-one in checking host APIC ID (bsc#1140971).
- kvm: x86: fix return value for reserved EFER (bsc#1140992).
- kvm: x86: Skip EFER vs. guest CPUID checks for host-initiated writes (bsc#1140972).
- libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk (bsc#1051510).
- libceph: assign cookies in linger_submit() (bsc#1135897).
- libceph: check reply num_data_items in setup_request_data() (bsc#1135897).
- libceph: do not consume a ref on pagelist in ceph_msg_data_add_pagelist() (bsc#1135897).
- libceph: enable fallback to ceph_msg_new() in ceph_msgpool_get() (bsc#1135897).
- libceph: introduce alloc_watch_request() (bsc#1135897).
- libceph: introduce ceph_pagelist_alloc() (bsc#1135897).
- libceph: preallocate message data items (bsc#1135897).
- libceph, rbd: add error handling for osd_req_op_cls_init() (bsc#1135897). This feature was requested for SLE15 but aws reverted in packaging and master.
- libceph, rbd, ceph: move ceph_osdc_alloc_messages() calls (bsc#1135897).
- libnvdimm/bus: Prevent duplicate device_unregister() calls (bsc#1139865).
- libnvdimm, pfn: Fix over-trim in trim_pfn_device() (bsc#1140719).
- mac80211: Do not use stack memory with scatterlist for GMAC (bsc#1051510).
- mac80211: drop robust management frames from unknown TA (bsc#1051510).
- mac80211: handle deauthentication/disassociation from TDLS peer (bsc#1051510).
- media: v4l2-ioctl: clear fields in s_parm (bsc#1051510).
- mfd: hi655x: Fix regmap area declared size for hi655x (bsc#1051510).
- mISDN: make sure device name is NUL terminated (bsc#1051510).
- mlxsw: core: Add API for QSFP module temperature thresholds reading (bsc#1112374).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue (bsc#1112374).
- mlxsw: core: mlxsw: core: avoid -Wint-in-bool-context warning (bsc#1112374).
- mlxsw: core: Move ethtool module callbacks to a common location (bsc#1112374).
- mlxsw: core: Prevent reading unsupported slave address from SFP EEPROM (bsc#1112374).
- mlxsw: pci: Reincrease PCI reset timeout (bsc#1112374).
- mlxsw: reg: Add Management Temperature Bulk Register (bsc#1112374).
- mlxsw: spectrum_flower: Fix TOS matching (bsc#1112374).
- mlxsw: spectrum: Move QSFP EEPROM definitions to common location (bsc#1112374).
- mlxsw: spectrum: Put MC TCs into DWRR mode (bsc#1112374).
- mmc: core: complete HS400 before checking status (bsc#1111666).
- mmc: core: Prevent processing SDIO IRQs when the card is suspended (bsc#1051510).
- mm/devm_memremap_pages: introduce devm_memunmap_pages (bsc#1103992).
- mm/page_alloc.c: avoid potential NULL pointer dereference (git fixes (mm/pagealloc)).
- mm/page_alloc.c: fix never set ALLOC_NOFRAGMENT flag (git fixes (mm/pagealloc)).
- mm/vmscan.c: prevent useless kswapd loops (git fixes (mm/vmscan)).
- net: core: support XDP generic on stacked devices (bsc#1109837).
- net: do not clear sock-&gt;sk early to avoid trouble in strparser (bsc#1103990).
- net: ena: add ethtool function for changing io queue sizes (bsc#1138879).
- net: ena: add good checksum counter (bsc#1138879).
- net: ena: add handling of llq max tx burst size (bsc#1138879).
- net: ena: add MAX_QUEUES_EXT get feature admin command (bsc#1138879).
- net: ena: add newline at the end of pr_err prints (bsc#1138879).
- net: ena: add support for changing max_header_size in LLQ mode (bsc#1138879).
- net: ena: allow automatic fallback to polling mode (bsc#1138879).
- net: ena: allow queue allocation backoff when low on memory (bsc#1138879).
- net: ena: arrange ena_probe() function variables in reverse christmas tree (bsc#1138879).
- net: ena: enable negotiating larger Rx ring size (bsc#1138879).
- net: ena: ethtool: add extra properties retrieval via get_priv_flags (bsc#1138879).
- net: ena: Fix bug where ring allocation backoff stopped too late (bsc#1138879).
- net: ena: fix ena_com_fill_hash_function() implementation (bsc#1138879).
- net: ena: fix: Free napi resources when ena_up() fails (bsc#1138879).
- net: ena: fix incorrect test of supported hash function (bsc#1138879).
- net: ena: fix: set freed objects to NULL to avoid failing future allocations (bsc#1138879).
- net: ena: fix swapped parameters when calling ena_com_indirect_table_fill_entry (bsc#1138879).
- net: ena: gcc 8: fix compilation warning (bsc#1138879).
- net: ena: improve latency by disabling adaptive interrupt moderation by default (bsc#1138879).
- net: ena: make ethtool show correct current and max queue sizes (bsc#1138879).
- net: ena: optimise calculations for CQ doorbell (bsc#1138879).
- net: ena: remove inline keyword from functions in *.c (bsc#1138879).
- net: ena: replace free_tx/rx_ids union with single free_ids field in ena_ring (bsc#1138879).
- net: ena: update driver version from 2.0.3 to 2.1.0 (bsc#1138879).
- net: ena: use dev_info_once instead of static variable (bsc#1138879).
- net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set (bsc#1130836).
- net: Fix missing meta data in skb with vlan packet (bsc#1109837).
- net/mlx5: Avoid reloading already removed devices (bsc#1103990 ).
- net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled (bsc#1103990).
- net/mlx5e: Fix the max MTU check in case of XDP (bsc#1103990 ).
- net/mlx5e: Fix use-after-free after xdp_return_frame (bsc#1103990).
- net/mlx5e: Rx, Check ip headers sanity (bsc#1103990 ).
- net/mlx5e: Rx, Fixup skb checksum for packets with tail padding (bsc#1109837).
- net/mlx5e: XDP, Fix shifted flag index in RQ bitmap (bsc#1103990 ).
- net/mlx5: FPGA, tls, hold rcu read lock a bit longer (bsc#1103990).
- net/mlx5: FPGA, tls, idr remove on flow delete (bsc#1103990 ).
- net/mlx5: Set completion EQs as shared resources (bsc#1103991 ).
- net/mlx5: Update pci error handler entries and command translation (bsc#1103991).
- net: mvpp2: prs: Fix parser range for VID filtering (bsc#1098633).
- net: mvpp2: prs: Fix parser range for VID filtering (bsc#1098633).
- net: mvpp2: prs: Use the correct helpers when removing all VID filters (bsc#1098633).
- net: mvpp2: prs: Use the correct helpers when removing all VID filters (bsc#1098633).
- net: mvpp2: Use strscpy to handle stat strings (bsc#1098633).
- net: mvpp2: Use strscpy to handle stat strings (bsc#1098633).
- net: phy: marvell10g: report if the PHY fails to boot firmware (bsc#1119113).
- net/sched: cbs: Fix error path of cbs_module_init (bsc#1109837).
- net/sched: cbs: fix port_rate miscalculation (bsc#1109837).
- net/tls: avoid NULL pointer deref on nskb-&gt;sk in fallback (bsc#1109837).
- net/tls: avoid potential deadlock in tls_set_device_offload_rx() (bsc#1109837).
- net: tls, correctly account for copied bytes with multiple sk_msgs (bsc#1109837).
- net/tls: do not copy negative amounts of data in reencrypt (bsc#1109837).
- net/tls: do not ignore netdev notifications if no TLS features (bsc#1109837).
- net/tls: do not leak IV and record seq when offload fails (bsc#1109837).
- net/tls: do not leak partially sent record in device mode (bsc#1109837).
- net/tls: fix build without CONFIG_TLS_DEVICE (bsc#1109837).
- net/tls: fix copy to fragments in reencrypt (bsc#1109837).
- net/tls: fix page double free on TX cleanup (bsc#1109837).
- net/tls: fix refcount adjustment in fallback (bsc#1109837).
- net/tls: fix state removal with feature flags off (bsc#1109837).
- net/tls: fix the IV leaks (bsc#1109837).
- net/tls: prevent bad memory access in tls_is_sk_tx_device_offloaded() (bsc#1109837).
- net/tls: replace the sleeping lock around RX resync with a bit lock (bsc#1109837).
- net/udp_gso: Allow TX timestamp with UDP GSO (bsc#1109837).
- nfit/ars: Allow root to busy-poll the ARS state machine (bsc#1140814).
- nfit/ars: Avoid stale ARS results (jsc#SLE-5433).
- nfit/ars: Introduce scrub_flags (jsc#SLE-5433).
- nfp: bpf: fix static check error through tightening shift amount adjustment (bsc#1109837).
- nfp: flower: add rcu locks when accessing netdev for tunnels (bsc#1109837).
- ntp: Allow TAI-UTC offset to be set to zero (bsc#1135642).
- nvme: copy MTFA field from identify controller (bsc#1140715).
- nvme-rdma: fix double freeing of async event data (bsc#1120423).
- nvme-rdma: fix possible double free of controller async event buffer (bsc#1120423).
- ocfs2: try to reuse extent block in dealloc without meta_alloc (bsc#1128902).
- pci: Do not poll for PME if the device is in D3cold (bsc#1051510).
- pci/p2pdma: fix the gen_pool_add_virt() failure path (bsc#1103992).
- pci: PM: Skip devices in D0 for suspend-to-idle (bsc#1051510).
- pci: rpadlpar: Fix leaked device_node references in add/remove paths (bsc#1051510).
- pinctrl/amd: add get_direction handler (bsc#1140463).
- pinctrl/amd: fix gpio irq level in debugfs (bsc#1140463).
- pinctrl/amd: fix masking of GPIO interrupts (bsc#1140463).
- pinctrl/amd: make functions amd_gpio_suspend and amd_gpio_resume static (bsc#1140463).
- pinctrl/amd: poll InterruptEnable bits in amd_gpio_irq_set_type (bsc#1140463).
- pinctrl/amd: poll InterruptEnable bits in enable_irq (bsc#1140463).
- pm: ACPI/PCI: Resume all devices during hibernation (bsc#1111666).
- powerpc/perf: Add PM_LD_MISS_L1 and PM_BR_2PATH to power9 event list (bsc#1137728, LTC#178106).
- powerpc/perf: Add POWER9 alternate PM_RUN_CYC and PM_RUN_INST_CMPL events (bsc#1137728, LTC#178106).
- powerpc/rtas: retry when cpu offline races with suspend/migration (bsc#1140428, LTC#178808).
- ppc64le: enable CONFIG_PPC_DT_CPU_FTRS (jsc#SLE-7159).
- ppp: mppe: Add softdep to arc4 (bsc#1088047).
- ptrace: Fix -&gt;ptracer_cred handling for PTRACE_TRACEME (git-fixes).
- ptrace: restore smp_rmb() in __ptrace_may_access() (git-fixes).
- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- rdma/ipoib: Allow user space differentiate between valid dev_port (bsc#1103992).
- rdma/mlx5: Do not allow the user to write to the clock page (bsc#1103991).
- rdma/mlx5: Initialize roce port info before multiport master init (bsc#1103991).
- rdma/mlx5: Use rdma_user_map_io for mapping BAR pages (bsc#1103992).
- regulator: s2mps11: Fix buck7 and buck8 wrong voltages (bsc#1051510).
- Replace the bluetooth fix with the upstream commit (bsc#1135556)
- Revert 'net: ena: ethtool: add extra properties retrieval via get_priv_flags' (bsc#1138879).
- Revert 'net/mlx5e: Enable reporting checksum unnecessary also for L3 packets' (bsc#1103990).
- Revert 'Revert 'Drop multiversion(kernel) from the KMP template ()''
- Revert 'Sign non-x86 kernels when possible (boo#1134303)' This reverts commit bac621c6704610562ebd9e74ae5ad85ca8025681. We do not have reports of this working with all ARM architectures in all cases (boot, kexec, ..) so revert for now.
- Revert 'svm: Fix AVIC incomplete IPI emulation' (bsc#1140133).
- rpm/package-descriptions: fix typo in kernel-azure
- rpm/post.sh: correct typo in err msg (bsc#1137625)
- sbitmap: fix improper use of smp_mb__before_atomic() (bsc#1140658).
- scripts/git_sort/git_sort.py: add djbw/nvdimm nvdimm-pending.
- scripts/git_sort/git_sort.py: add nvdimm/libnvdimm-fixes
- scripts/git_sort/git_sort.py: drop old scsi branches
- scsi: aacraid: change event_wait to a completion (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: change wait_sem to a completion (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: clean up some indentation and formatting issues (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: Mark expected switch fall-through (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: Mark expected switch fall-throughs (jsc#SLE-4710 bsc#1136161).
- scsi: be2iscsi: be_iscsi: Mark expected switch fall-through (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: be_main: Mark expected switch fall-through (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: fix spelling mistake 'Retreiving' -&gt; 'Retrieving' (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: lpfc: fix typo (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: remove unused variable dmsg (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: switch to generic DMA API (jsc#SLE-4721 bsc#1136264).
- scsi: core: add new RDAC LENOVO/DE_Series device (bsc#1132390).
- scsi: csiostor: csio_wr: mark expected switch fall-through (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: drop serial_number usage (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix calls to dma_set_mask_and_coherent() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix incorrect dma device in case of vport (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix missing data copy in csio_scsi_err_handler() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: no need to check return value of debugfs_create functions (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: Remove set but not used variable 'pln' (jsc#SLE-4679 bsc#1136343).
- scsi: mpt3sas: Add Atomic RequestDescriptor support on Aero (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add flag high_iops_queues (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add missing breaks in switch statements (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add support for ATLAS PCIe switch (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add support for NVMe Switch Adapter (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Affinity high iops queues IRQs to local node (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: change _base_get_msix_index prototype (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Enable interrupt coalescing on high iops (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: fix indentation issue (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Fix kernel panic during expander reset (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Fix typo in request_desript_type (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: function pointers of request descriptor (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Improve the threshold value and introduce module param (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Introduce perf_mode module parameter (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Irq poll to avoid CPU hard lockups (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Load balance to improve performance and avoid soft lockups (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Rename mpi endpoint device ID macro (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: save and use MSI-X index for posting RD (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: simplify interrupt handler (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update driver version to 27.102.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update driver version to 29.100.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update mpt3sas driver version to 28.100.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Use high iops queues under some circumstances (bsc#1125703,jsc#SLE-4717).
- scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() (bsc#1140727).
- scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines (bsc#1140728).
- scsi: target/iblock: Fix overrun in WRITE SAME emulation (bsc#1140424).
- scsi: target/iblock: Fix overrun in WRITE SAME emulation (bsc#1140424).
- signal/ptrace: Do not leak unitialized kernel memory with PTRACE_PEEK_SIGINFO (git-fixes).
- staging: comedi: ni_mio_common: Fix divide-by-zero for DIO cmdtest (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- svm: Add warning message for AVIC IPI invalid target (bsc#1140133).
- svm: Fix AVIC incomplete IPI emulation (bsc#1140133).
- sysctl: handle overflow in proc_get_long (bsc#1051510).
- tools: bpftool: fix infinite loop in map create (bsc#1109837).
- tracing/snapshot: Resize spare buffer if size changed (bsc#1140726).
- typec: tcpm: fix compiler warning about stupid things (git-fixes).
- usb: chipidea: udc: workaround for endpoint conflict issue (bsc#1135642).
- usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression) (bsc#1135642).
- usb: Fix chipmunk-like voice when using Logitech C270 for recording audio (bsc#1051510).
- usbnet: ipheth: fix racing condition (bsc#1051510).
- usb: serial: fix initial-termios handling (bsc#1135642).
- usb: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode (bsc#1051510).
- usb: serial: option: add Telit 0x1260 and 0x1261 compositions (bsc#1051510).
- usb: serial: pl2303: add Allied Telesis VT-Kit3 (bsc#1051510).
- usb: usb-storage: Add new ID to ums-realtek (bsc#1051510).
- x86/cpufeatures: Enumerate user wait instructions (jsc#SLE-5187).
- x86/umwait: Add sysfs interface to control umwait C0.2 state (jsc#SLE-5187).
- x86/umwait: Add sysfs interface to control umwait maximum time (jsc#SLE-5187).
- x86/umwait: Initialize umwait control values (jsc#SLE-5187).
- xdp: check device pointer before clearing (bsc#1109837).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-15"/>
	<updated date="2019-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088047">SUSE bug 1088047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098633">SUSE bug 1098633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106383">SUSE bug 1106383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119532">SUSE bug 1119532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120423">SUSE bug 1120423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125703">SUSE bug 1125703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128902">SUSE bug 1128902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130836">SUSE bug 1130836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131645">SUSE bug 1131645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132390">SUSE bug 1132390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133401">SUSE bug 1133401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133738">SUSE bug 1133738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134303">SUSE bug 1134303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134395">SUSE bug 1134395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135556">SUSE bug 1135556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135897">SUSE bug 1135897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136161">SUSE bug 1136161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136264">SUSE bug 1136264</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136343">SUSE bug 1136343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136935">SUSE bug 1136935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137625">SUSE bug 1137625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137728">SUSE bug 1137728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138879">SUSE bug 1138879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139712">SUSE bug 1139712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139751">SUSE bug 1139751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139771">SUSE bug 1139771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139865">SUSE bug 1139865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140133">SUSE bug 1140133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140228">SUSE bug 1140228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140328">SUSE bug 1140328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140405">SUSE bug 1140405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140424">SUSE bug 1140424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140428">SUSE bug 1140428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140454">SUSE bug 1140454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140463">SUSE bug 1140463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140575">SUSE bug 1140575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140577">SUSE bug 1140577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140637">SUSE bug 1140637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140658">SUSE bug 1140658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140715">SUSE bug 1140715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140719">SUSE bug 1140719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140726">SUSE bug 1140726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140727">SUSE bug 1140727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140728">SUSE bug 1140728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140814">SUSE bug 1140814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140887">SUSE bug 1140887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140888">SUSE bug 1140888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140889">SUSE bug 1140889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140891">SUSE bug 1140891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140893">SUSE bug 1140893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140954">SUSE bug 1140954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140955">SUSE bug 1140955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140956">SUSE bug 1140956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140957">SUSE bug 1140957</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140958">SUSE bug 1140958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140959">SUSE bug 1140959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140960">SUSE bug 1140960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140961">SUSE bug 1140961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140962">SUSE bug 1140962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140964">SUSE bug 1140964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140971">SUSE bug 1140971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140972">SUSE bug 1140972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140992">SUSE bug 1140992</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-20836/">CVE-2018-20836</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10126/">CVE-2019-10126</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10638/">CVE-2019-10638</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10639/">CVE-2019-10639</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11599/">CVE-2019-11599</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13233/">CVE-2019-13233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497395" comment="kernel-default-livepatch-4.12.14-197.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497396" comment="kernel-default-livepatch-devel-4.12.14-197.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497397" comment="kernel-livepatch-4_12_14-197_10-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138333" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1137597" ref_url="https://bugzilla.suse.com/1137597" source="BUGZILLA"/>
		<reference ref_id="1140747" ref_url="https://bugzilla.suse.com/1140747" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11477" ref_url="https://www.suse.com/security/cve/CVE-2019-11477/" source="CVE"/>
		<reference ref_id="CVE-2019-11478" ref_url="https://www.suse.com/security/cve/CVE-2019-11478/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005730.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-195 fixes several issues.

The following security issues were fixed:

- CVE-2019-11477: Jonathan Looney discovered that the TCP_SKB_CB(skb)-&gt;tcp_gso_segs value was subject to an integer overflow when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. (bsc#1137586)
- CVE-2019-11478: Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. (bsc#1137586)

This update contains a regression fix for CVE-2019-11477 and CVE-2019-11478 (bsc#1140747).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-18"/>
	<updated date="2019-07-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1137597">SUSE bug 1137597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140747">SUSE bug 1140747</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-11477/">CVE-2019-11477</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11478/">CVE-2019-11478</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720961" comment="kernel-default 4.12.14-195 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719180" comment="kernel-livepatch-4_12_14-195-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497398" comment="kernel-livepatch-4_12_14-195-default-4-10.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138334" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1140747" ref_url="https://bugzilla.suse.com/1140747" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11478" ref_url="https://www.suse.com/security/cve/CVE-2019-11478/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005732.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_4 fixes one issue.

The following security issue was fixed:

This update contains a regression fix for CVE-2019-11478 (bsc#1140747).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-18"/>
	<updated date="2019-07-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140747">SUSE bug 1140747</bugzilla>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11478/">CVE-2019-11478</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720962" comment="kernel-default 4.12.14-197.4 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719181" comment="kernel-livepatch-4_12_14-197_4-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497399" comment="kernel-livepatch-4_12_14-197_4-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138335" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1140747" ref_url="https://bugzilla.suse.com/1140747" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11478" ref_url="https://www.suse.com/security/cve/CVE-2019-11478/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1888-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005732.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_7 fixes one issue.

The following security issue was fixed:

This update contains a regression fix for CVE-2019-11477 and CVE-2019-11478 (bsc#1140747).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-18"/>
	<updated date="2019-07-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140747">SUSE bug 1140747</bugzilla>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11478/">CVE-2019-11478</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720963" comment="kernel-default 4.12.14-197.7 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719182" comment="kernel-livepatch-4_12_14-197_7-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497400" comment="kernel-livepatch-4_12_14-197_7-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138336" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1083710" ref_url="https://bugzilla.suse.com/1083710" source="BUGZILLA"/>
		<reference ref_id="1102247" ref_url="https://bugzilla.suse.com/1102247" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1119222" ref_url="https://bugzilla.suse.com/1119222" source="BUGZILLA"/>
		<reference ref_id="1123080" ref_url="https://bugzilla.suse.com/1123080" source="BUGZILLA"/>
		<reference ref_id="1127034" ref_url="https://bugzilla.suse.com/1127034" source="BUGZILLA"/>
		<reference ref_id="1127315" ref_url="https://bugzilla.suse.com/1127315" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1130972" ref_url="https://bugzilla.suse.com/1130972" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1134097" ref_url="https://bugzilla.suse.com/1134097" source="BUGZILLA"/>
		<reference ref_id="1134390" ref_url="https://bugzilla.suse.com/1134390" source="BUGZILLA"/>
		<reference ref_id="1134399" ref_url="https://bugzilla.suse.com/1134399" source="BUGZILLA"/>
		<reference ref_id="1135335" ref_url="https://bugzilla.suse.com/1135335" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1136217" ref_url="https://bugzilla.suse.com/1136217" source="BUGZILLA"/>
		<reference ref_id="1136342" ref_url="https://bugzilla.suse.com/1136342" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1136462" ref_url="https://bugzilla.suse.com/1136462" source="BUGZILLA"/>
		<reference ref_id="1136467" ref_url="https://bugzilla.suse.com/1136467" source="BUGZILLA"/>
		<reference ref_id="1137458" ref_url="https://bugzilla.suse.com/1137458" source="BUGZILLA"/>
		<reference ref_id="1137534" ref_url="https://bugzilla.suse.com/1137534" source="BUGZILLA"/>
		<reference ref_id="1137535" ref_url="https://bugzilla.suse.com/1137535" source="BUGZILLA"/>
		<reference ref_id="1137584" ref_url="https://bugzilla.suse.com/1137584" source="BUGZILLA"/>
		<reference ref_id="1137609" ref_url="https://bugzilla.suse.com/1137609" source="BUGZILLA"/>
		<reference ref_id="1137811" ref_url="https://bugzilla.suse.com/1137811" source="BUGZILLA"/>
		<reference ref_id="1137827" ref_url="https://bugzilla.suse.com/1137827" source="BUGZILLA"/>
		<reference ref_id="1138874" ref_url="https://bugzilla.suse.com/1138874" source="BUGZILLA"/>
		<reference ref_id="1139358" ref_url="https://bugzilla.suse.com/1139358" source="BUGZILLA"/>
		<reference ref_id="1139619" ref_url="https://bugzilla.suse.com/1139619" source="BUGZILLA"/>
		<reference ref_id="1140133" ref_url="https://bugzilla.suse.com/1140133" source="BUGZILLA"/>
		<reference ref_id="1140139" ref_url="https://bugzilla.suse.com/1140139" source="BUGZILLA"/>
		<reference ref_id="1140322" ref_url="https://bugzilla.suse.com/1140322" source="BUGZILLA"/>
		<reference ref_id="1140559" ref_url="https://bugzilla.suse.com/1140559" source="BUGZILLA"/>
		<reference ref_id="1140652" ref_url="https://bugzilla.suse.com/1140652" source="BUGZILLA"/>
		<reference ref_id="1140676" ref_url="https://bugzilla.suse.com/1140676" source="BUGZILLA"/>
		<reference ref_id="1140903" ref_url="https://bugzilla.suse.com/1140903" source="BUGZILLA"/>
		<reference ref_id="1140945" ref_url="https://bugzilla.suse.com/1140945" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1141312" ref_url="https://bugzilla.suse.com/1141312" source="BUGZILLA"/>
		<reference ref_id="1141401" ref_url="https://bugzilla.suse.com/1141401" source="BUGZILLA"/>
		<reference ref_id="1141402" ref_url="https://bugzilla.suse.com/1141402" source="BUGZILLA"/>
		<reference ref_id="1141452" ref_url="https://bugzilla.suse.com/1141452" source="BUGZILLA"/>
		<reference ref_id="1141453" ref_url="https://bugzilla.suse.com/1141453" source="BUGZILLA"/>
		<reference ref_id="1141454" ref_url="https://bugzilla.suse.com/1141454" source="BUGZILLA"/>
		<reference ref_id="1141478" ref_url="https://bugzilla.suse.com/1141478" source="BUGZILLA"/>
		<reference ref_id="1141558" ref_url="https://bugzilla.suse.com/1141558" source="BUGZILLA"/>
		<reference ref_id="1142023" ref_url="https://bugzilla.suse.com/1142023" source="BUGZILLA"/>
		<reference ref_id="1142052" ref_url="https://bugzilla.suse.com/1142052" source="BUGZILLA"/>
		<reference ref_id="1142083" ref_url="https://bugzilla.suse.com/1142083" source="BUGZILLA"/>
		<reference ref_id="1142112" ref_url="https://bugzilla.suse.com/1142112" source="BUGZILLA"/>
		<reference ref_id="1142115" ref_url="https://bugzilla.suse.com/1142115" source="BUGZILLA"/>
		<reference ref_id="1142119" ref_url="https://bugzilla.suse.com/1142119" source="BUGZILLA"/>
		<reference ref_id="1142220" ref_url="https://bugzilla.suse.com/1142220" source="BUGZILLA"/>
		<reference ref_id="1142221" ref_url="https://bugzilla.suse.com/1142221" source="BUGZILLA"/>
		<reference ref_id="1142254" ref_url="https://bugzilla.suse.com/1142254" source="BUGZILLA"/>
		<reference ref_id="1142350" ref_url="https://bugzilla.suse.com/1142350" source="BUGZILLA"/>
		<reference ref_id="1142351" ref_url="https://bugzilla.suse.com/1142351" source="BUGZILLA"/>
		<reference ref_id="1142354" ref_url="https://bugzilla.suse.com/1142354" source="BUGZILLA"/>
		<reference ref_id="1142359" ref_url="https://bugzilla.suse.com/1142359" source="BUGZILLA"/>
		<reference ref_id="1142450" ref_url="https://bugzilla.suse.com/1142450" source="BUGZILLA"/>
		<reference ref_id="1142623" ref_url="https://bugzilla.suse.com/1142623" source="BUGZILLA"/>
		<reference ref_id="1142673" ref_url="https://bugzilla.suse.com/1142673" source="BUGZILLA"/>
		<reference ref_id="1142701" ref_url="https://bugzilla.suse.com/1142701" source="BUGZILLA"/>
		<reference ref_id="1142868" ref_url="https://bugzilla.suse.com/1142868" source="BUGZILLA"/>
		<reference ref_id="1143003" ref_url="https://bugzilla.suse.com/1143003" source="BUGZILLA"/>
		<reference ref_id="1143045" ref_url="https://bugzilla.suse.com/1143045" source="BUGZILLA"/>
		<reference ref_id="1143105" ref_url="https://bugzilla.suse.com/1143105" source="BUGZILLA"/>
		<reference ref_id="1143185" ref_url="https://bugzilla.suse.com/1143185" source="BUGZILLA"/>
		<reference ref_id="1143189" ref_url="https://bugzilla.suse.com/1143189" source="BUGZILLA"/>
		<reference ref_id="1143191" ref_url="https://bugzilla.suse.com/1143191" source="BUGZILLA"/>
		<reference ref_id="1143209" ref_url="https://bugzilla.suse.com/1143209" source="BUGZILLA"/>
		<reference ref_id="1143507" ref_url="https://bugzilla.suse.com/1143507" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20855" ref_url="https://www.suse.com/security/cve/CVE-2018-20855/" source="CVE"/>
		<reference ref_id="CVE-2019-1125" ref_url="https://www.suse.com/security/cve/CVE-2019-1125/" source="CVE"/>
		<reference ref_id="CVE-2019-11810" ref_url="https://www.suse.com/security/cve/CVE-2019-11810/" source="CVE"/>
		<reference ref_id="CVE-2019-13631" ref_url="https://www.suse.com/security/cve/CVE-2019-13631/" source="CVE"/>
		<reference ref_id="CVE-2019-13648" ref_url="https://www.suse.com/security/cve/CVE-2019-13648/" source="CVE"/>
		<reference ref_id="CVE-2019-14283" ref_url="https://www.suse.com/security/cve/CVE-2019-14283/" source="CVE"/>
		<reference ref_id="CVE-2019-14284" ref_url="https://www.suse.com/security/cve/CVE-2019-14284/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005789.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2018-20855: An issue was discovered in the Linux kernel In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace(bsc#1143045).
- CVE-2019-1125: Exclude ATOMs from speculation through SWAPGS (bsc#1139358).
- CVE-2019-14283: In the Linux kernel, set_geometry in drivers/block/floppy.c did not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It could be triggered by an unprivileged local user when a floppy disk was inserted. NOTE: QEMU creates the floppy device by default. (bnc#1143191)
- CVE-2019-11810: An issue was discovered in the Linux kernel A NULL pointer dereference could occur when megasas_create_frame_pool() failed in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This caused a Denial of Service, related to a use-after-free (bnc#1134399).
- CVE-2019-13648: In the Linux kernel on the powerpc platform, when hardware transactional memory was disabled, a local user could cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sent a crafted signal frame. (bnc#1142254)
- CVE-2019-13631: In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel, a malicious USB device could send an HID report that triggered an out-of-bounds write during generation of debugging messages. (bnc#1142023)

The following non-security bugs were fixed:

- acpi/nfit: Always dump _DSM output payload (bsc#1142351).
- Add back sibling paca poiter to paca (bsc#1055117).
- Add support for crct10dif-vpmsum ().
- af_unix: remove redundant lockdep class (git-fixes).
- alsa: compress: Be more restrictive about when a drain is allowed (bsc#1051510).
- alsa: compress: Do not allow paritial drain operations on capture streams (bsc#1051510).
- alsa: compress: Fix regression on compressed capture streams (bsc#1051510).
- alsa: compress: Prevent bypasses of set_params (bsc#1051510).
- alsa: hda - Add a conexant codec entry to let mute led work (bsc#1051510).
- alsa: hda - Do not resume forcibly i915 HDMI/DP codec (bsc#1111666).
- alsa: hda - Fix intermittent CORB/RIRB stall on Intel chips (bsc#1111666).
- alsa: hda/hdmi - Fix i915 reverse port/pin mapping (bsc#1111666).
- alsa: hda/hdmi - Remove duplicated define (bsc#1111666).
- alsa: hda - Optimize resume for codecs without jack detection (bsc#1111666).
- alsa: hda/realtek: apply ALC891 headset fixup to one Dell machine (bsc#1051510).
- alsa: hda/realtek - Fixed Headphone Mic can't record on Dell platform (bsc#1051510).
- alsa: hda/realtek - Headphone Mic can't record after S3 (bsc#1051510).
- alsa: line6: Fix a typo (bsc#1051510).
- alsa: line6: Fix wrong altsetting for LINE6_PODHD500_1 (bsc#1051510).
- alsa: seq: Break too long mutex context in the write loop (bsc#1051510).
- alsa: usb-audio: Add quirk for Focusrite Scarlett Solo (bsc#1051510).
- alsa: usb-audio: Add quirk for MOTU MicroBook II (bsc#1051510).
- alsa: usb-audio: Cleanup DSD whitelist (bsc#1051510).
- alsa: usb-audio: Enable .product_name override for Emagic, Unitor 8 (bsc#1051510).
- alsa: usb-audio: fix Line6 Helix audio format rates (bsc#1111666).
- alsa: usb-audio: Sanity checks for each pipe and EP types (bsc#1051510).
- arm64: do not override dma_max_pfn (jsc#SLE-6197 bsc#1140559 LTC#173150).
- asoc : cs4265 : readable register too low (bsc#1051510).
- asoc: max98090: remove 24-bit format support if RJ is 0 (bsc#1051510).
- asoc: soc-pcm: BE dai needs prepare when pause release after resume (bsc#1051510).
- ath10k: add missing error handling (bsc#1111666).
- ath10k: add peer id check in ath10k_peer_find_by_id (bsc#1111666).
- ath10k: destroy sdio workqueue while remove sdio module (bsc#1111666).
- ath10k: Do not send probe response template for mesh (bsc#1111666).
- ath10k: Fix encoding for protected management frames (bsc#1111666).
- ath10k: fix incorrect multicast/broadcast rate setting (bsc#1111666).
- ath10k: fix PCIE device wake up failed (bsc#1111666).
- ath6kl: add some bounds checking (bsc#1051510).
- ath9k: Check for errors when reading SREV register (bsc#1111666).
- ath9k: correctly handle short radar pulses (bsc#1111666).
- ath: DFS JP domain W56 fixed pulse type 3 RADAR detection (bsc#1111666).
- batman-adv: fix for leaked TVLV handler (bsc#1051510).
- bcache: acquire bch_register_lock later in cached_dev_detach_finish() (bsc#1140652).
- bcache: acquire bch_register_lock later in cached_dev_free() (bsc#1140652).
- bcache: add code comments for journal_read_bucket() (bsc#1140652).
- bcache: Add comments for blkdev_put() in registration code path (bsc#1140652).
- bcache: add comments for closure_fn to be called in closure_queue() (bsc#1140652).
- bcache: add comments for kobj release callback routine (bsc#1140652).
- bcache: add comments for mutex_lock(b-&gt;write_lock) (bsc#1140652).
- bcache: add error check for calling register_bdev() (bsc#1140652).
- bcache: add failure check to run_cache_set() for journal replay (bsc#1140652).
- bcache: add io error counting in write_bdev_super_endio() (bsc#1140652).
- bcache: add more error message in bch_cached_dev_attach() (bsc#1140652).
- bcache: add pendings_cleanup to stop pending bcache device (bsc#1140652).
- bcache: add reclaimed_journal_buckets to struct cache_set (bsc#1140652).
- bcache: add return value check to bch_cached_dev_run() (bsc#1140652).
- bcache: avoid a deadlock in bcache_reboot() (bsc#1140652).
- bcache: avoid clang -Wunintialized warning (bsc#1140652).
- bcache: avoid flushing btree node in cache_set_flush() if io disabled (bsc#1140652).
- bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set (bsc#1140652).
- bcache: check CACHE_SET_IO_DISABLE bit in bch_journal() (bsc#1140652).
- bcache: check CACHE_SET_IO_DISABLE in allocator code (bsc#1140652).
- bcache: check c-&gt;gc_thread by IS_ERR_OR_NULL in cache_set_flush() (bsc#1140652).
- bcache: Clean up bch_get_congested() (bsc#1140652).
- bcache: destroy dc-&gt;writeback_write_wq if failed to create dc-&gt;writeback_thread (bsc#1140652).
- bcache: do not assign in if condition in bcache_device_init() (bsc#1140652).
- bcache: do not set max writeback rate if gc is running (bsc#1140652).
- bcache: fix a race between cache register and cacheset unregister (bsc#1140652).
- bcache: fix crashes stopping bcache device before read miss done (bsc#1140652).
- bcache: fix failure in journal relplay (bsc#1140652).
- bcache: fix inaccurate result of unused buckets (bsc#1140652).
- bcache: fix mistaken sysfs entry for io_error counter (bsc#1140652).
- bcache: fix potential deadlock in cached_def_free() (bsc#1140652).
- bcache: fix race in btree_flush_write() (bsc#1140652).
- bcache: fix return value error in bch_journal_read() (bsc#1140652).
- bcache: fix stack corruption by PRECEDING_KEY() (bsc#1140652).
- bcache: fix wrong usage use-after-freed on keylist in out_nocoalesce branch of btree_gc_coalesce (bsc#1140652).
- bcache: ignore read-ahead request failure on backing device (bsc#1140652).
- bcache: improve bcache_reboot() (bsc#1140652).
- bcache: improve error message in bch_cached_dev_run() (bsc#1140652).
- bcache: make bset_search_tree() be more understandable (bsc#1140652).
- bcache: make is_discard_enabled() static (bsc#1140652).
- bcache: more detailed error message to bcache_device_link() (bsc#1140652).
- bcache: move definition of 'int ret' out of macro read_bucket() (bsc#1140652).
- bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() (bsc#1140652).
- bcache: only clear BTREE_NODE_dirty bit when it is set (bsc#1140652).
- bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached (bsc#1140652).
- bcache: performance improvement for btree_flush_write() (bsc#1140652).
- bcache: remove redundant LIST_HEAD(journal) from run_cache_set() (bsc#1140652).
- bcache: remove redundant LIST_HEAD(journal) from run_cache_set() (bsc#1140652).
- bcache: remove retry_flush_write from struct cache_set (bsc#1140652).
- bcache: remove unncessary code in bch_btree_keys_init() (bsc#1140652).
- bcache: remove unnecessary prefetch() in bset_search_tree() (bsc#1140652).
- bcache: return error immediately in bch_journal_replay() (bsc#1140652).
- bcache: Revert 'bcache: fix high CPU occupancy during journal' (bsc#1140652).
- bcache: Revert 'bcache: free heap cache_set-&gt;flush_btree in bch_journal_free' (bsc#1140652).
- bcache: set largest seq to ja-&gt;seq[bucket_index] in journal_read_bucket() (bsc#1140652).
- bcache: shrink btree node cache after bch_btree_check() (bsc#1140652).
- bcache: stop writeback kthread and kworker when bch_cached_dev_run() failed (bsc#1140652).
- bcache: use sysfs_match_string() instead of __sysfs_match_string() (bsc#1140652).
- be2net: Fix number of Rx queues used for flow hashing (networking-stable-19_06_18).
- be2net: Signal that the device cannot transmit during reconfiguration (bsc#1127315).
- be2net: Synchronize be_update_queues with dev_watchdog (bsc#1127315).
- block, bfq: NULL out the bic when it's no longer valid (bsc#1142359).
- bnx2x: Prevent load reordering in tx completion processing (bsc#1142868).
- bnxt_en: Cap the returned MSIX vectors to the RDMA driver (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Disable bus master during PCI shutdown and driver unload (bsc#1104745).
- bnxt_en: Fix aggregation buffer leak under OOM condition (networking-stable-19_05_31).
- bnxt_en: Fix statistics context reservation logic for RDMA driver (bsc#1104745).
- bnxt_en: Suppress error messages when querying DSCP DCB capabilities (bsc#1104745).
- bonding: fix arp_validate toggling in active-backup mode (networking-stable-19_05_14).
- bonding: Force slave speed check after link state recovery for 802.3ad (bsc#1137584).
- bpf: btf: fix the brackets of BTF_INT_OFFSET() (bsc#1083647).
- bpf: fix callees pruning callers (bsc#1109837).
- bpf: fix nested bpf tracepoints with per-cpu data (bsc#1083647).
- bpf, x64: fix stack layout of JITed bpf code (bsc#1083647).
- bpf, x64: save 5 bytes in prologue when ebpf insns came from cbpf (bsc#1083647).
- bridge: Fix error path for kobject_init_and_add() (networking-stable-19_05_14).
- btrfs: fix race between block group removal and block group allocation (bsc#1143003).
- carl9170: fix misuse of device driver API (bsc#1111666).
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() (bsc#1141478).
- clk: qcom: Fix -Wunused-const-variable (bsc#1051510).
- clk: rockchip: Do not yell about bad mmc phases when getting (bsc#1051510).
- clk: tegra210: fix PLLU and PLLU_OUT1 (bsc#1051510).
- Correct iwlwifi 22000 series ucode file name (bsc#1142673)
- Correct the buggy backport about AER / DPC pcie stuff (bsc#1142623)
- cpufreq: acpi-cpufreq: Report if CPU does not support boost technologies (bsc#1051510).
- cpufreq: brcmstb-avs-cpufreq: Fix initial command check (bsc#1051510).
- cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency (bsc#1051510).
- cpufreq: check if policy is inactive early in __cpufreq_get() (bsc#1051510).
- cpufreq: kirkwood: fix possible object reference leak (bsc#1051510).
- cpufreq/pasemi: fix possible object reference leak (bsc#1051510).
- cpufreq: pmac32: fix possible object reference leak (bsc#1051510).
- cpufreq: ppc_cbe: fix possible object reference leak (bsc#1051510).
- cpufreq: Use struct kobj_attribute instead of struct global_attr (bsc#1051510).
- crypto: arm64/sha1-ce - correct digest for empty data in finup (bsc#1051510).
- crypto: arm64/sha2-ce - correct digest for empty data in finup (bsc#1051510).
- crypto: ccp - Fix 3DES complaint from ccp-crypto module (bsc#1051510).
- crypto: ccp - fix AES CFB error exposed by new test vectors (bsc#1051510).
- crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL (bsc#1051510).
- crypto: ccp/gcm - use const time tag comparison (bsc#1051510).
- crypto: ccp - memset structure fields to zero before reuse (bsc#1051510).
- crypto: ccp - Validate the the error value used to index error messages (bsc#1051510).
- crypto: chacha20poly1305 - fix atomic sleep when using async algorithm (bsc#1051510).
- crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe (bsc#1051510).
- crypto: ghash - fix unaligned memory access in ghash_setkey() (bsc#1051510).
- crypto: talitos - Align SEC1 accesses to 32 bits boundaries (bsc#1051510).
- crypto: talitos - check data blocksize in ablkcipher (bsc#1051510).
- crypto: talitos - fix CTR alg blocksize (bsc#1051510).
- crypto: talitos - fix max key size for sha384 and sha512 (bsc#1051510).
- crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking (bsc#1051510).
- crypto: talitos - properly handle split ICV (bsc#1051510).
- crypto: talitos - reduce max key size for SEC1 (bsc#1051510).
- crypto: talitos - rename alternative AEAD algos (bsc#1051510).
- dasd_fba: Display '00000000' for zero page when dumping sense (bsc#1123080).
- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc (bsc#1111666).
- dma-direct: add support for allocation from ZONE_DMA and ZONE_DMA32 (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-direct: do not retry allocation for no-op GFP_DMA (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-direct: retry allocations using GFP_DMA for small masks (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dmaengine: hsu: Revert 'set HSU_CH_MTSR to memory width' (bsc#1051510).
- dma-mapping: move dma_mark_clean to dma-direct.h (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-mapping: move swiotlb arch helpers to a new header (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-mapping: take dma_pfn_offset into account in dma_max_pfn (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dpaa_eth: fix SG frame cleanup (networking-stable-19_05_14).
- drm/amd/display: Make some functions static (bsc#1111666).
- drm/atmel-hlcdc: revert shift by 8 (bsc#1111666).
- drm/i915/cml: Introduce Comet Lake PCH (jsc#SLE-6681).
- drm/i915/icl: Add WaDisableBankHangMode (bsc#1111666).
- drm/meson: Add support for XBGR8888 &amp; ABGR8888 formats (bsc#1051510).
- drm/msm/a3xx: remove TPL1 regs from snapshot (bsc#1051510).
- drm/msm/mdp5: Fix mdp5_cfg_init error return (bsc#1111666).
- drm/nouveau/i2c: Enable i2c pads &amp; busses during preinit (bsc#1051510).
- drm: return -EFAULT if copy_to_user() fails (bsc#1111666).
- drm/rockchip: Properly adjust to a true clock in adjusted_mode (bsc#1051510).
- drm/udl: introduce a macro to convert dev to udl (bsc#1111666).
- drm/udl: move to embedding drm device inside udl device (bsc#1111666).
- drm/udl: Replace drm_dev_unref with drm_dev_put (bsc#1111666).
- drm/vc4: fix fb references in async update (bsc#1141312).
- drm/vmwgfx: Honor the sg list segment size limitation (bsc#1111666).
- e1000e: start network tx queue only when link is up (bsc#1051510).
- Enable intel-speed-select driver and update supported.conf (jsc#SLE-5364)
- ethtool: check the return value of get_regs_len (git-fixes).
- ethtool: fix potential userspace buffer overflow (networking-stable-19_06_09).
- Fix kABI for asus-wmi quirk_entry field addition (bsc#1051510).
- Fix memory leak in sctp_process_init (networking-stable-19_06_09).
- fork, memcg: fix cached_stacks case (bsc#1134097).
- fork, memcg: fix crash in free_thread_stack on memcg charge fail (bsc#1134097).
- fpga: add intel stratix10 soc fpga manager driver (jsc#SLE-7057).
- fpga: stratix10-soc: fix use-after-free on s10_init() (jsc#SLE-7057).
- fpga: stratix10-soc: fix wrong of_node_put() in init function (jsc#jsc#SLE-7057).
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM (bsc#1111666).
- hid: wacom: correct touch resolution x/y typo (bsc#1051510).
- hid: wacom: generic: Correct pad syncing (bsc#1051510).
- hid: wacom: generic: only switch the mode on devices with LEDs (bsc#1051510).
- hid: wacom: generic: read HID_DG_CONTACTMAX from any feature report (bsc#1051510).
- ib/ipoib: Add child to parent list only if device initialized (bsc#1103992).
- ib/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE (bsc#1103991).
- idr: fix overflow case for idr_for_each_entry_ul() (bsc#1109837).
- input: elantech - enable middle button support on 2 ThinkPads (bsc#1051510).
- input: imx_keypad - make sure keyboard can always wake up system (bsc#1051510).
- input: psmouse - fix build error of multiple definition (bsc#1051510).
- input: synaptics - enable SMBUS on T480 thinkpad trackpad (bsc#1051510).
- input: tm2-touchkey - acknowledge that setting brightness is a blocking call (bsc#1129770).
- intel_th: msu: Fix single mode with disabled IOMMU (bsc#1051510).
- iommu-helper: mark iommu_is_span_boundary as inline (jsc#SLE-6197 bsc#1140559 LTC#173150).
- ipv4: Fix raw socket lookup for local traffic (networking-stable-19_05_14).
- ipv4/igmp: fix another memory leak in igmpv3_del_delrec() (networking-stable-19_05_31).
- ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST (networking-stable-19_05_31).
- ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop (git-fixes).
- ipv6: Consider sk_bound_dev_if when binding a raw socket to an address (networking-stable-19_05_31).
- ipv6: fix EFAULT on sendto with icmpv6 and hdrincl (networking-stable-19_06_09).
- ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero (networking-stable-19_06_18).
- ipv6: use READ_ONCE() for inet-&gt;hdrincl as in ipv4 (networking-stable-19_06_09).
- iwlwifi: correct one of the PCI struct names (bsc#1111666).
- iwlwifi: do not WARN when calling iwl_get_shared_mem_conf with RF-Kill (bsc#1111666).
- iwlwifi: fix cfg structs for 22000 with different RF modules (bsc#1111666).
- iwlwifi: fix devices with PCI Device ID 0x34F0 and 11ac RF modules (bsc#1111666).
- iwlwifi: Fix double-free problems in iwl_req_fw_callback() (bsc#1111666).
- iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices (bsc#1111666).
- iwlwifi: mvm: Drop large non sta frames (bsc#1111666).
- iwlwifi: pcie: do not service an interrupt that was masked (bsc#1111666).
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X (bsc#1111666).
- kabi fix for hda_codec.relaxed_resume flag (bsc#1111666).
- kabi: Fix lost iommu-helper symbols on arm64 (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: mask changes made by basic protected virtualization support (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: mask changes made by swiotlb for protected virtualization (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: mask changes made by use of DMA memory for adapter interrupts (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: remove unused hcall definition (bsc#1140322 LTC#176270).
- kbuild: use -flive-patching when CONFIG_LIVEPATCH is enabled (bsc#1071995).
- kernel: jump label transformation performance (bsc#1137534 bsc#1137535 			LTC#178058 LTC#178059).
- kvm: arm/arm64: vgic-its: Take the srcu lock when parsing the memslots (bsc#1133021).
- kvm: arm/arm64: vgic-its: Take the srcu lock when writing to guest memory (bsc#1133021).
- kvm: mmu: Fix overflow on kvm mmu page limit calculation (bsc#1135335).
- kvm/mmu: kABI fix for *_mmu_pages changes in struct kvm_arch (bsc#1135335).
- kvm: polling: add architecture backend to disable polling (bsc#1119222).
- kvm: s390: change default halt poll time to 50us (bsc#1119222).
- kvm: s390: enable CONFIG_HAVE_kvm_NO_POLL (bsc#1119222) We need to enable CONFIG_HAVE_kvm_NO_POLL for bsc#1119222
- kvm: s390: fix typo in parameter description (bsc#1119222).
- kvm: s390: kABI Workaround for 'kvm_vcpu_stat' Add halt_no_poll_steal to kvm_vcpu_stat. Hide it from the kABI checker.
- kvm: s390: kABI Workaround for 'lowcore' (bsc#1119222).
- kvm: s390: provide kvm_arch_no_poll function (bsc#1119222).
- kvm: svm/avic: Do not send AVIC doorbell to self (bsc#1140133).
- kvm: SVM: Fix detection of AMD Errata 1096 (bsc#1142354).
- lapb: fixed leak of control-blocks (networking-stable-19_06_18).
- lib: fix stall in __bitmap_parselist() (bsc#1051510).
- libnvdimm/namespace: Fix label tracking error (bsc#1142350).
- libnvdimm/region: Register badblocks before namespaces (bsc#1143209).
- lib/bitmap.c: make bitmap_parselist() thread-safe and much faster (bsc#1143507).
- lib/scatterlist: Fix mapping iterator when sg-&gt;offset is greater than PAGE_SIZE (bsc#1051510).
- livepatch: Remove duplicate warning about missing reliable stacktrace support (bsc#1071995).
- livepatch: Use static buffer for debugging messages under rq lock (bsc#1071995).
- llc: fix skb leak in llc_build_and_send_ui_pkt() (networking-stable-19_05_31).
- mac80211: do not start any work during reconfigure flow (bsc#1111666).
- mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he() (bsc#1111666).
- mac80211: free peer keys before vif down in mesh (bsc#1111666).
- mac80211: mesh: fix RCU warning (bsc#1111666).
- mac80211: only warn once on chanctx_conf being NULL (bsc#1111666).
- media: cpia2_usb: first wake up, then free in disconnect (bsc#1135642).
- media: marvell-ccic: fix DMA s/g desc number calculation (bsc#1051510).
- media: s5p-mfc: Make additional clocks optional (bsc#1051510).
- media: v4l2: Test type instead of cfg-&gt;type in v4l2_ctrl_new_custom() (bsc#1051510).
- media: vivid: fix incorrect assignment operation when setting video mode (bsc#1051510).
- mei: bus: need to unlink client before freeing (bsc#1051510).
- mei: me: add denverton innovation engine device IDs (bsc#1051510).
- mei: me: add gemini lake devices id (bsc#1051510).
- memory: tegra: Fix integer overflow on tick value calculation (bsc#1051510).
- memstick: Fix error cleanup path of memstick_init (bsc#1051510).
- mfd: intel-lpss: Release IDA resources (bsc#1051510).
- mips: fix an off-by-one in dma_capable (jsc#SLE-6197 bsc#1140559 LTC#173150).
- mlxsw: spectrum_dcb: Configure DSCP map as the last rule is removed (bsc#1112374).
- mmc: sdhci-pci: Try 'cd' for card-detect lookup before using NULL (bsc#1051510).
- mm: migrate: Fix reference check race between __find_get_block() and migration (bnc#1137609).
- mm/nvdimm: add is_ioremap_addr and use that to check ioremap address (bsc#1140322 LTC#176270).
- mm, page_alloc: fix has_unmovable_pages for HugePages (bsc#1127034).
- mm: replace all open encodings for NUMA_NO_NODE (bsc#1140322 LTC#176270).
- mt7601u: do not schedule rx_tasklet when the device has been disconnected (bsc#1111666).
- mt7601u: fix possible memory leak when the device is disconnected (bsc#1111666).
- neigh: fix use-after-free read in pneigh_get_next (networking-stable-19_06_18).
- net/af_iucv: build proper skbs for HiperTransport (bsc#1142221 LTC#179332).
- net/af_iucv: remove GFP_DMA restriction for HiperTransport (bsc#1142112 bsc#1142221 LTC#179334 LTC#179332).
- net/af_iucv: remove GFP_DMA restriction for HiperTransport (bsc#1142221 LTC#179332).
- net: avoid weird emergency message (networking-stable-19_05_21).
- net: fec: fix the clk mismatch in failed_reset path (networking-stable-19_05_31).
- netfilter: conntrack: fix calculation of next bucket number in early_drop (git-fixes).
- net-gro: fix use-after-free read in napi_gro_frags() (networking-stable-19_05_31).
- net: hns3: Fix inconsistent indenting (bsc#1140676).
- net: hns: fix ICMP6 neighbor solicitation messages discard problem (bsc#1140676).
- net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw() (bsc#1140676).
- net: hns: Fix loopback test failed at copper ports (bsc#1140676).
- net: hns: Fix probabilistic memory overwrite when HNS driver initialized (bsc#1140676).
- net: hns: fix unsigned comparison to less than zero (bsc#1140676).
- net: hns: Fix WARNING when remove HNS driver with SMMU enabled (bsc#1140676).
- net: hns: Use NAPI_POLL_WEIGHT for hns driver (bsc#1140676).
- net/mlx4_core: Change the error print to info print (networking-stable-19_05_21).
- net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query (networking-stable-19_06_09).
- net/mlx5: Allocate root ns memory using kzalloc to match kfree (networking-stable-19_05_31).
- net/mlx5: Avoid double free in fs init error unwinding path (networking-stable-19_05_31).
- net/mlx5e: Rx, Fix checksum calculation for new hardware (bsc#1127611).
- net: mvneta: Fix err code path of probe (networking-stable-19_05_31).
- net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value (networking-stable-19_05_31).
- net: openvswitch: do not free vport if register_netdevice() is failed (networking-stable-19_06_18).
- net/packet: fix memory leak in packet_set_ring() (git-fixes).
- net: rds: fix memory leak in rds_ib_flush_mr_pool (networking-stable-19_06_09).
- net: seeq: fix crash caused by not set dev.parent (networking-stable-19_05_14).
- net: stmmac: fix reset gpio free missing (networking-stable-19_05_31).
- net/tls: fix socket wmem accounting on fallback with netem (bsc#1109837).
- net/tls: make sure offload also gets the keys wiped (bsc#1109837).
- net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions (networking-stable-19_05_21).
- nvme: fix memory leak caused by incorrect subsystem free (bsc#1143185).
- ocfs2: add first lock wait time in locking_state (bsc#1134390).
- ocfs2: add last unlock times in locking_state (bsc#1134390).
- ocfs2: add locking filter debugfs file (bsc#1134390).
- p54usb: Fix race between disconnect and firmware loading (bsc#1111666).
- packet: Fix error path in packet_init (networking-stable-19_05_14).
- packet: in recvmsg msg_name return at least sizeof sockaddr_ll (git-fixes).
- pci/aer: Use cached AER Capability offset (bsc#1142623).
- pci: Always allow probing with driver_override (bsc#1051510).
- pci: hv: Add hv_pci_remove_slots() when we unload the driver (bsc#1142701).
- pci: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (bsc#1142701).
- pci: hv: Fix a memory leak in hv_eject_device_work() (bsc#1142701).
- pci: hv: Fix a use-after-free bug in hv_eject_device_work() (bsc#1142701).
- pci: hv: Fix return value check in hv_pci_assign_slots() (bsc#1142701).
- pci: hv: Remove unused reason for refcount handler (bsc#1142701).
- pci: hv: support reporting serial number as slot information (bsc#1142701).
- pci/P2PDMA: Fix missing check for dma_virt_ops (bsc#1111666).
- pci / PM: Use SMART_SUSPEND and LEAVE_SUSPENDED flags for PCIe ports (bsc#1142623).
- pci/portdrv: Add #defines for AER and DPC Interrupt Message Number masks (bsc#1142623).
- pci/portdrv: Consolidate comments (bsc#1142623).
- pci/portdrv: Disable port driver in compat mode (bsc#1142623).
- pci/portdrv: Remove pcie_portdrv_err_handler.slot_reset (bsc#1142623).
- pci: portdrv: Restore PCI config state on slot reset (bsc#1142623).
- pci/portdrv: Support PCIe services on subtractive decode bridges (bsc#1142623).
- pci/portdrv: Use conventional Device ID table formatting (bsc#1142623).
- pci: Return error if cannot probe VF (bsc#1051510).
- pkey: Indicate old mkvp only if old and current mkvp are different (bsc#1137827 LTC#178090).
- pktgen: do not sleep with the thread lock held (git-fixes).
- platform/x86: asus-nb-wmi: Support ALS on the Zenbook UX430UQ (bsc#1051510).
- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi (bsc#1051510).
- platform/x86: intel_turbo_max_3: Remove restriction for HWP platforms (jsc#SLE-5439).
- platform/x86: ISST: Add common API to register and handle ioctls (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mailbox interface via MSRs (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mailbox interface via PCI (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mmio interface (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select PUNIT MSR interface (jsc#SLE-5364).
- platform/x86: ISST: Add IOCTL to Translate Linux logical CPU to PUNIT CPU number (jsc#SLE-5364).
- platform/x86: ISST: Restore state on resume (jsc#SLE-5364).
- platform/x86: ISST: Store per CPU information (jsc#SLE-5364).
- platform/x86: pmc_atom: Add CB4063 Beckhoff Automation board to critclk_systems DMI table (bsc#1051510).
- powerpc/64s: Remove POWER9 DD1 support (bsc#1055117, LTC#159753, git-fixes).
- powerpc/crypto: Use cheaper random numbers for crc-vpmsum self-test ().
- powerpc/mm: Change function prototype (bsc#1055117).
- powerpc/mm: Consolidate numa_enable check and min_common_depth check (bsc#1140322 LTC#176270).
- powerpc/mm/drconf: Use NUMA_NO_NODE on failures instead of node 0 (bsc#1140322 LTC#176270).
- powerpc/mm: Fix node look up with numa=off boot (bsc#1140322 LTC#176270).
- powerpc/mm/hugetlb: Update huge_ptep_set_access_flags to call __ptep_set_access_flags directly (bsc#1055117).
- powerpc/mm/radix: Change pte relax sequence to handle nest MMU hang (bsc#1055117).
- powerpc/mm/radix: Move function from radix.h to pgtable-radix.c (bsc#1055117).
- powerpc/papr_scm: Force a scm-unbind if initial scm-bind fails (bsc#1140322 LTC#176270).
- powerpc/papr_scm: Update drc_pmem_unbind() to use H_SCM_UNBIND_ALL (bsc#1140322 LTC#176270).
- powerpc/pseries: Update SCM hcall op-codes in hvcall.h (bsc#1140322 LTC#176270).
- powerpc/watchpoint: Restore NV GPRs while returning from exception (bsc#1140945 bsc#1141401 bsc#1141402 bsc#1141452 bsc#1141453 bsc#1141454 LTC#178983 LTC#179191 LTC#179192 LTC#179193 LTC#179194 LTC#179195).
- ppc: Convert mmu context allocation to new IDA API (bsc#1139619 LTC#178538).
- ppp: deflate: Fix possible crash in deflate_init (networking-stable-19_05_21).
- qed: Fix build error without CONFIG_DEVLINK (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix -Wmaybe-uninitialized false positive (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index (jsc#SLE-4693 bsc#1136462).
- rdma/odp: Fix missed unlock in non-blocking invalidate_start (bsc#1103992).
- rdma/srp: Accept again source addresses that do not have a port number (bsc#1103992).
- rdma/srp: Document srp_parse_in() arguments (bsc#1103992 ).
- rdma/uverbs: check for allocation failure in uapi_add_elm() (bsc#1103992).
- rds: ib: fix 'passing zero to ERR_PTR()' warning (git-fixes).
- Revert 'bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()' (bsc#1140652).
- Revert 'e1000e: fix cyclic resets at link up with active tx' (bsc#1051510).
- Revert 'livepatch: Remove reliable stacktrace check in klp_try_switch_task()' (bsc#1071995).
- Revert 'serial: 8250: Do not service RX FIFO if interrupts are disabled' (bsc#1051510).
- rtlwifi: rtl8192cu: fix error handle when usb probe failed (bsc#1111666).
- rtnetlink: always put IFLA_LINK for links with a link-netnsid (networking-stable-19_05_21).
- s390: add alignment hints to vector load and store (jsc#SLE-6907 LTC#175887).
- s390/airq: use DMA memory for adapter interrupts (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cio: add basic protected virtualization support (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cio: introduce DMA pools to cio (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cpum_cf: add ctr_stcctm() function (jsc#SLE-6904 ).
- s390/cpum_cf: Add minimal in-kernel interface for counter measurements (jsc#SLE-6904).
- s390/cpum_cf: Add support for CPU-MF SVN 6 (jsc#SLE-6904 ).
- s390/cpum_cf_diag: Add support for CPU-MF SVN 6 (jsc#SLE-6904 ).
- s390/cpum_cf_diag: Add support for s390 counter facility diagnostic trace (jsc#SLE-6904).
- s390/cpum_cf: introduce kernel_cpumcf_alert() to obtain measurement alerts (jsc#SLE-6904).
- s390/cpum_cf: introduce kernel_cpumcf_avail() function (jsc#SLE-6904).
- s390/cpum_cf: move counter set controls to a new header file (jsc#SLE-6904).
- s390/cpum_cf: prepare for in-kernel counter measurements (jsc#SLE-6904).
- s390/cpum_cf: rename per-CPU counter facility structure and variables (jsc#SLE-6904).
- s390/cpumf: Add extended counter set definitions for model 8561 and 8562 (bsc#1142052 LTC#179320).
- s390/cpu_mf: add store cpu counter multiple instruction support (jsc#SLE-6904).
- s390/cpumf: Fix warning from check_processor_id (jsc#SLE-6904 ).
- s390/cpu_mf: move struct cpu_cf_events and per-CPU variable to header file (jsc#SLE-6904).
- s390/cpu_mf: replace stcctm5() with the stcctm() function (jsc#SLE-6904).
- s390/dma: provide proper ARCH_ZONE_DMA_BITS value (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/mm: force swiotlb for protected virtualization (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142119 LTC#179331).
- s390/qeth: be drop monitor friendly (bsc#1142115 LTC#179337).
- s390/qeth: be drop monitor friendly (bsc#1142220 LTC#179335).
- s390: remove the unused dma_capable helper (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390: report new CPU capabilities (jsc#SLE-6907 LTC#175887).
- s390/vtime: steal time exponential moving average (bsc#1119222).
- s390/zcrypt: Fix wrong dispatching for control domain CPRBs (bsc#1137811 LTC#178088).
- scripts/git_sort/git_sort.py: Add mmots tree.
- scsi: cxgb4i: add wait_for_completion() (jsc#SLE-4678 bsc#1136342).
- scsi: cxgbi: KABI: fix handle completion etc (jsc#SLE-4678 bsc#1136342).
- scsi: cxgbi: remove redundant __kfree_skb call on skb and free cst-&gt;atid (jsc#SLE-4678 bsc#1136342).
- scsi: fc: add FPIN ELS definition (bsc#1136217,jsc#SLE-4722).
- scsi/fc: kABI fixes for new ELS_FPIN definition (bsc#1136217,jsc#SLE-4722).
- scsi: ibmvfc: fix WARN_ON during event pool release (bsc#1137458 LTC#178093).
- scsi: lpfc: Add loopback testing to trunking mode (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: add support for posting FC events on FPIN reception (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Annotate switch/case fall-through (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: avoid uninitialized variable warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Cancel queued work for an IO when processing a received ABTS (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Change smp_processor_id() into raw_smp_processor_id() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Convert bootstrap mbx polling from msleep to udelay (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Coordinate adapter error handling with offline handling (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct boot bios information to FDMI registration (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct localport timeout duration error (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct __lpfc_sli_issue_iocb_s4 lockdep check (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct nvmet buffer free race condition (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Declare local functions static (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Enhance 6072 log string (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix 32-bit format string warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix a handful of indentation issues (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix alloc context on oas lun creations (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix a recently introduced compiler warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix BFS crash with DIX enabled (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix build error (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix calls to dma_set_mask_and_coherent() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix deadlock due to nested hbalock call (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix driver crash in target reset handler (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix duplicate log message numbers (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix error code if kcalloc() fails (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix error codes in lpfc_sli4_pci_mem_setup() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix fc4type information for FDMI (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix fcp_rsp_len checking on lun reset (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix FDMI fc4type for nvme support (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix FDMI manufacturer attribute value (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix handling of trunk links state reporting (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix hardlockup in scsi_cmd_iocb_cmpl (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix HDMI2 registration string for symbolic name (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix incorrect logical link speed on trunks when links down (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix indentation and balance braces (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix io lost on host resets (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix kernel warnings related to smp_processor_id() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix link speed reporting for 4-link trunk (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix location of SCSI ktime counters (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix lpfc_nvmet_mrq attribute handling when 0 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix mailbox hang on adapter init (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix memory leak in abnormal exit path from lpfc_eq_create (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix missing wakeups on abort threads (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet async receive buffer replenishment (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet handling of first burst cmd (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet handling of received ABTS for unmapped frames (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet target abort cmd matching (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix oops when driver is loaded with 1 interrupt vector (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix poor use of hardware queues if fewer irq vectors (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix protocol support on G6 and G7 adapters (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix PT2PT PLOGI collison stopping discovery (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix unused variable warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fixup eq_clr_intr references (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix use-after-free mailbox cmd completion (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Make lpfc_sli4_oas_verify static (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Move trunk_errmsg[] from a header file into a .c file (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Prevent 'use after free' memory overwrite in nvmet LS handling (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Reduce memory footprint for lpfc_queue (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove set but not used variable 'phys_id' (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove set-but-not-used variables (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove unused functions (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Resolve inconsistent check of hdwq in lpfc_scsi_cmd_iocb_cmpl (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Resolve irq-unsafe lockdep heirarchy warning in lpfc_io_free (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: resolve static checker warning in lpfc_sli4_hba_unset (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Revert message logging on unsupported topology (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Revise message when stuck due to unresponsive adapter (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Rework misleading nvme not supported in firmware message (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Separate CQ processing for nvmet_fc upcalls (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Specify node affinity for queue memory allocation (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Stop adapter if pci errors detected (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update Copyright in driver version (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update lpfc version to 12.2.0.1 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update lpfc version to 12.2.0.3 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: use dma_set_mask_and_coherent (bsc#1136217,jsc#SLE-4722).
- scsi: qedf: Add additional checks for io_req-&gt;sc_cmd validity (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add a flag to help debugging io_req which could not be cleaned (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add comment to display logging levels (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add driver state to 'driver_stats' debugfs node (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add LBA to underrun debug messages (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload check (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add missing return in qedf_scsi_done() (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add port_id for fcport into initiate_cleanup debug message (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add return value to log message if scsi_add_host fails (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Change MSI-X load error message (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check both the FCF and fabric ID before servicing clear virtual link (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check for fcoe_libfc_config failure (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check for tm_flags instead of cmd_type during cleanup (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check the return value of start_xmit (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Cleanup rrq_work after QEDF_CMD_OUTSTANDING is cleared (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Correctly handle refcounting of rdata (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Do not queue anything if upload is in progress (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Do not send ABTS for under run scenario (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: fc_rport_priv reference counting fixes (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Fix lport may be used uninitialized warning (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Log message if scsi_add_host fails (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Modify flush routine to handle all I/Os and TMF (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Print fcport information on wait for upload timeout (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Print scsi_cmd backpointer in good completion path if the command is still being used (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: remove memset/memcpy to nfunc and use func instead (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Remove set but not used variable 'fr_len' (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: remove set but not used variables (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Update the driver version to 8.37.25.19 (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Update the driver version to 8.37.25.20 (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Wait for upload and link down processing during soft ctx reset (bsc#1136467 jsc#SLE-4694).
- scsi: qedi: add module param to set ping packet size (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Fix spelling mistake 'OUSTANDING' -&gt; 'OUTSTANDING' (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev' (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693 bsc#1136462).
- scsi: qla2xxx: do not crash on uninitialized pool list (boo#1138874).
- scsi: scsi_transport_fc: Add FPIN fc event codes (bsc#1136217,jsc#SLE-4722).
- scsi: scsi_transport_fc: refactor event posting routines (bsc#1136217,jsc#SLE-4722).
- sctp: Free cookie before we memdup a new one (networking-stable-19_06_18).
- sctp: silence warns on sctp_stream_init allocations (bsc#1083710).
- serial: uartps: Do not add a trailing semicolon to macro (bsc#1051510).
- serial: uartps: Fix long line over 80 chars (bsc#1051510).
- serial: uartps: Fix multiple line dereference (bsc#1051510).
- serial: uartps: Remove useless return from cdns_uart_poll_put_char (bsc#1051510).
- staging: comedi: amplc_pci230: fix null pointer deref on interrupt (bsc#1051510).
- staging: comedi: dt282x: fix a null pointer deref on interrupt (bsc#1051510).
- staging: rtl8712: reduce stack usage, again (bsc#1051510).
- sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg (networking-stable-19_06_18).
- tcp: fix tcp_set_congestion_control() use from bpf hook (bsc#1109837).
- tcp: reduce tcp_fastretrans_alert() verbosity (git-fixes).
- team: Always enable vlan tx offload (bsc#1051510).
- tools: bpftool: Fix json dump crash on powerpc (bsc#1109837).
- tools: bpftool: use correct argument in cgroup errors (bsc#1109837).
- tools/power/x86: A tool to validate Intel Speed Select commands (jsc#SLE-5364).
- tty: rocket: fix incorrect forward declaration of 'rp_init()' (bsc#1051510).
- tty: serial_core: Set port active bit in uart_port_activate (bsc#1051510).
- tty: serial: cpm_uart - fix init when SMC is relocated (bsc#1051510).
- tuntap: synchronize through tfiles array instead of tun-&gt;numqueues (networking-stable-19_05_14).
- usb: gadget: ether: Fix race between gether_disconnect and rx_submit (bsc#1051510).
- usb: gadget: fusb300_udc: Fix memory leak of fusb300-&gt;ep[i] (bsc#1051510).
- usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC (bsc#1051510).
- usb: pci-quirks: Correct AMD PLL quirk detection (bsc#1051510).
- usb: serial: ftdi_sio: add ID for isodebug v1 (bsc#1051510).
- usb: serial: option: add support for GosunCn ME3630 RNDIS mode (bsc#1051510).
- virtio/s390: add indirection to indicators access (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: DMA support for virtio-ccw (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: make airq summary indicators DMA (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use cacheline aligned airq bit vectors (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use DMA memory for ccw I/O and classic notifiers (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use vring_create_virtqueue (jsc#SLE-6197 bsc#1140559 LTC#173150).
- vmci: Fix integer overflow in VMCI handle arrays (bsc#1051510).
- vrf: sit mtu should not be updated when vrf netdev is the link (networking-stable-19_05_14).
- vsock/virtio: free packets during the socket release (networking-stable-19_05_21).
- vsock/virtio: set SOCK_DONE on peer shutdown (networking-stable-19_06_18).
- wil6210: drop old event after wmi_call timeout (bsc#1111666).
- wil6210: fix potential out-of-bounds read (bsc#1051510).
- wil6210: fix spurious interrupts in 3-msi (bsc#1111666).
- x86, mm: fix fast GUP with hyper-based TLB flushing (VM Functionality, bsc#1140903).
- xdp: fix possible cq entry leak (bsc#1109837).
- xdp: fix race on generic receive path (bsc#1109837).
- xdp: hold device for umem regardless of zero-copy mode (bsc#1109837).
- xen: let alloc_xenballooned_pages() fail if not enough memory free (bsc#1142450 XSA-300).
- xfs: do not overflow xattr listent buffer (bsc#1143105).
- xprtrdma: Fix use-after-free in rpcrdma_post_recvs (bsc#1103992 ).
- xsk: Properly terminate assignment in xskq_produce_flush_desc (bsc#1109837).

		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-04"/>
	<updated date="2019-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083710">SUSE bug 1083710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102247">SUSE bug 1102247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119222">SUSE bug 1119222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123080">SUSE bug 1123080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127034">SUSE bug 1127034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127315">SUSE bug 1127315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130972">SUSE bug 1130972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134097">SUSE bug 1134097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134390">SUSE bug 1134390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134399">SUSE bug 1134399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135335">SUSE bug 1135335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136217">SUSE bug 1136217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136342">SUSE bug 1136342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136462">SUSE bug 1136462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136467">SUSE bug 1136467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137458">SUSE bug 1137458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137534">SUSE bug 1137534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137535">SUSE bug 1137535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137584">SUSE bug 1137584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137609">SUSE bug 1137609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137811">SUSE bug 1137811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137827">SUSE bug 1137827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138874">SUSE bug 1138874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139358">SUSE bug 1139358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139619">SUSE bug 1139619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140133">SUSE bug 1140133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140139">SUSE bug 1140139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140322">SUSE bug 1140322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140559">SUSE bug 1140559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140652">SUSE bug 1140652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140676">SUSE bug 1140676</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140903">SUSE bug 1140903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140945">SUSE bug 1140945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141312">SUSE bug 1141312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141401">SUSE bug 1141401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141402">SUSE bug 1141402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141452">SUSE bug 1141452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141453">SUSE bug 1141453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141454">SUSE bug 1141454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141478">SUSE bug 1141478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141558">SUSE bug 1141558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142023">SUSE bug 1142023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142052">SUSE bug 1142052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142083">SUSE bug 1142083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142112">SUSE bug 1142112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142115">SUSE bug 1142115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142119">SUSE bug 1142119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142220">SUSE bug 1142220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142221">SUSE bug 1142221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142254">SUSE bug 1142254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142350">SUSE bug 1142350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142351">SUSE bug 1142351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142354">SUSE bug 1142354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142359">SUSE bug 1142359</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142450">SUSE bug 1142450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142623">SUSE bug 1142623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142673">SUSE bug 1142673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142701">SUSE bug 1142701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142868">SUSE bug 1142868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143003">SUSE bug 1143003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143045">SUSE bug 1143045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143105">SUSE bug 1143105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143185">SUSE bug 1143185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143189">SUSE bug 1143189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143191">SUSE bug 1143191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143209">SUSE bug 1143209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143507">SUSE bug 1143507</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20855/">CVE-2018-20855</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1125/">CVE-2019-1125</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11810/">CVE-2019-11810</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13631/">CVE-2019-13631</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13648/">CVE-2019-13648</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14283/">CVE-2019-14283</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14284/">CVE-2019-14284</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497401" comment="kernel-default-livepatch-4.12.14-197.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497402" comment="kernel-default-livepatch-devel-4.12.14-197.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497403" comment="kernel-livepatch-4_12_14-197_15-default-1-3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138337" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1144502" ref_url="https://bugzilla.suse.com/1144502" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13233" ref_url="https://www.suse.com/security/cve/CVE-2019-13233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005850.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_7 fixes one issue.

The following security issue was fixed:

- CVE-2019-13233: Fixed use-after-free for access to an LDT entry caused by a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bsc#1140454).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-28"/>
	<updated date="2019-08-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144502">SUSE bug 1144502</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13233/">CVE-2019-13233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720963" comment="kernel-default 4.12.14-197.7 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719182" comment="kernel-livepatch-4_12_14-197_7-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497404" comment="kernel-livepatch-4_12_14-197_7-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138338" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1144502" ref_url="https://bugzilla.suse.com/1144502" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13233" ref_url="https://www.suse.com/security/cve/CVE-2019-13233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005850.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_4 fixes one issue.

The following security issue was fixed:

- CVE-2019-13233: Fixed use-after-free for access to an LDT entry caused by a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bsc#1140454).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-28"/>
	<updated date="2019-08-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144502">SUSE bug 1144502</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13233/">CVE-2019-13233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720962" comment="kernel-default 4.12.14-197.4 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719181" comment="kernel-livepatch-4_12_14-197_4-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497405" comment="kernel-livepatch-4_12_14-197_4-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138339" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1144502" ref_url="https://bugzilla.suse.com/1144502" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13233" ref_url="https://www.suse.com/security/cve/CVE-2019-13233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2232-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005850.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-195 fixes one issue.

The following security issue was fixed:

- CVE-2019-13233: Fixed use-after-free for access to an LDT entry caused by a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bsc#1140454).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-28"/>
	<updated date="2019-08-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144502">SUSE bug 1144502</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13233/">CVE-2019-13233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720961" comment="kernel-default 4.12.14-195 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719180" comment="kernel-livepatch-4_12_14-195-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497406" comment="kernel-livepatch-4_12_14-195-default-5-13.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138340" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1047238" ref_url="https://bugzilla.suse.com/1047238" source="BUGZILLA"/>
		<reference ref_id="1050911" ref_url="https://bugzilla.suse.com/1050911" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1054914" ref_url="https://bugzilla.suse.com/1054914" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1056686" ref_url="https://bugzilla.suse.com/1056686" source="BUGZILLA"/>
		<reference ref_id="1060662" ref_url="https://bugzilla.suse.com/1060662" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1061843" ref_url="https://bugzilla.suse.com/1061843" source="BUGZILLA"/>
		<reference ref_id="1064597" ref_url="https://bugzilla.suse.com/1064597" source="BUGZILLA"/>
		<reference ref_id="1064701" ref_url="https://bugzilla.suse.com/1064701" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066369" ref_url="https://bugzilla.suse.com/1066369" source="BUGZILLA"/>
		<reference ref_id="1071009" ref_url="https://bugzilla.suse.com/1071009" source="BUGZILLA"/>
		<reference ref_id="1071306" ref_url="https://bugzilla.suse.com/1071306" source="BUGZILLA"/>
		<reference ref_id="1078248" ref_url="https://bugzilla.suse.com/1078248" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1085536" ref_url="https://bugzilla.suse.com/1085536" source="BUGZILLA"/>
		<reference ref_id="1085539" ref_url="https://bugzilla.suse.com/1085539" source="BUGZILLA"/>
		<reference ref_id="1086103" ref_url="https://bugzilla.suse.com/1086103" source="BUGZILLA"/>
		<reference ref_id="1087092" ref_url="https://bugzilla.suse.com/1087092" source="BUGZILLA"/>
		<reference ref_id="1090734" ref_url="https://bugzilla.suse.com/1090734" source="BUGZILLA"/>
		<reference ref_id="1091171" ref_url="https://bugzilla.suse.com/1091171" source="BUGZILLA"/>
		<reference ref_id="1093205" ref_url="https://bugzilla.suse.com/1093205" source="BUGZILLA"/>
		<reference ref_id="1102097" ref_url="https://bugzilla.suse.com/1102097" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1104902" ref_url="https://bugzilla.suse.com/1104902" source="BUGZILLA"/>
		<reference ref_id="1106061" ref_url="https://bugzilla.suse.com/1106061" source="BUGZILLA"/>
		<reference ref_id="1106284" ref_url="https://bugzilla.suse.com/1106284" source="BUGZILLA"/>
		<reference ref_id="1106434" ref_url="https://bugzilla.suse.com/1106434" source="BUGZILLA"/>
		<reference ref_id="1108382" ref_url="https://bugzilla.suse.com/1108382" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1112894" ref_url="https://bugzilla.suse.com/1112894" source="BUGZILLA"/>
		<reference ref_id="1112899" ref_url="https://bugzilla.suse.com/1112899" source="BUGZILLA"/>
		<reference ref_id="1112902" ref_url="https://bugzilla.suse.com/1112902" source="BUGZILLA"/>
		<reference ref_id="1112903" ref_url="https://bugzilla.suse.com/1112903" source="BUGZILLA"/>
		<reference ref_id="1112905" ref_url="https://bugzilla.suse.com/1112905" source="BUGZILLA"/>
		<reference ref_id="1112906" ref_url="https://bugzilla.suse.com/1112906" source="BUGZILLA"/>
		<reference ref_id="1112907" ref_url="https://bugzilla.suse.com/1112907" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114542" ref_url="https://bugzilla.suse.com/1114542" source="BUGZILLA"/>
		<reference ref_id="1118689" ref_url="https://bugzilla.suse.com/1118689" source="BUGZILLA"/>
		<reference ref_id="1119086" ref_url="https://bugzilla.suse.com/1119086" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1120046" ref_url="https://bugzilla.suse.com/1120046" source="BUGZILLA"/>
		<reference ref_id="1120876" ref_url="https://bugzilla.suse.com/1120876" source="BUGZILLA"/>
		<reference ref_id="1120902" ref_url="https://bugzilla.suse.com/1120902" source="BUGZILLA"/>
		<reference ref_id="1123105" ref_url="https://bugzilla.suse.com/1123105" source="BUGZILLA"/>
		<reference ref_id="1123959" ref_url="https://bugzilla.suse.com/1123959" source="BUGZILLA"/>
		<reference ref_id="1124370" ref_url="https://bugzilla.suse.com/1124370" source="BUGZILLA"/>
		<reference ref_id="1129424" ref_url="https://bugzilla.suse.com/1129424" source="BUGZILLA"/>
		<reference ref_id="1129519" ref_url="https://bugzilla.suse.com/1129519" source="BUGZILLA"/>
		<reference ref_id="1129664" ref_url="https://bugzilla.suse.com/1129664" source="BUGZILLA"/>
		<reference ref_id="1131107" ref_url="https://bugzilla.suse.com/1131107" source="BUGZILLA"/>
		<reference ref_id="1131281" ref_url="https://bugzilla.suse.com/1131281" source="BUGZILLA"/>
		<reference ref_id="1131489" ref_url="https://bugzilla.suse.com/1131489" source="BUGZILLA"/>
		<reference ref_id="1131565" ref_url="https://bugzilla.suse.com/1131565" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134291" ref_url="https://bugzilla.suse.com/1134291" source="BUGZILLA"/>
		<reference ref_id="1134476" ref_url="https://bugzilla.suse.com/1134476" source="BUGZILLA"/>
		<reference ref_id="1134881" ref_url="https://bugzilla.suse.com/1134881" source="BUGZILLA"/>
		<reference ref_id="1134882" ref_url="https://bugzilla.suse.com/1134882" source="BUGZILLA"/>
		<reference ref_id="1135219" ref_url="https://bugzilla.suse.com/1135219" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135897" ref_url="https://bugzilla.suse.com/1135897" source="BUGZILLA"/>
		<reference ref_id="1135990" ref_url="https://bugzilla.suse.com/1135990" source="BUGZILLA"/>
		<reference ref_id="1136039" ref_url="https://bugzilla.suse.com/1136039" source="BUGZILLA"/>
		<reference ref_id="1136261" ref_url="https://bugzilla.suse.com/1136261" source="BUGZILLA"/>
		<reference ref_id="1136346" ref_url="https://bugzilla.suse.com/1136346" source="BUGZILLA"/>
		<reference ref_id="1136349" ref_url="https://bugzilla.suse.com/1136349" source="BUGZILLA"/>
		<reference ref_id="1136352" ref_url="https://bugzilla.suse.com/1136352" source="BUGZILLA"/>
		<reference ref_id="1136496" ref_url="https://bugzilla.suse.com/1136496" source="BUGZILLA"/>
		<reference ref_id="1136498" ref_url="https://bugzilla.suse.com/1136498" source="BUGZILLA"/>
		<reference ref_id="1136502" ref_url="https://bugzilla.suse.com/1136502" source="BUGZILLA"/>
		<reference ref_id="1136682" ref_url="https://bugzilla.suse.com/1136682" source="BUGZILLA"/>
		<reference ref_id="1137322" ref_url="https://bugzilla.suse.com/1137322" source="BUGZILLA"/>
		<reference ref_id="1137323" ref_url="https://bugzilla.suse.com/1137323" source="BUGZILLA"/>
		<reference ref_id="1137884" ref_url="https://bugzilla.suse.com/1137884" source="BUGZILLA"/>
		<reference ref_id="1138099" ref_url="https://bugzilla.suse.com/1138099" source="BUGZILLA"/>
		<reference ref_id="1138100" ref_url="https://bugzilla.suse.com/1138100" source="BUGZILLA"/>
		<reference ref_id="1138539" ref_url="https://bugzilla.suse.com/1138539" source="BUGZILLA"/>
		<reference ref_id="1139020" ref_url="https://bugzilla.suse.com/1139020" source="BUGZILLA"/>
		<reference ref_id="1139021" ref_url="https://bugzilla.suse.com/1139021" source="BUGZILLA"/>
		<reference ref_id="1139101" ref_url="https://bugzilla.suse.com/1139101" source="BUGZILLA"/>
		<reference ref_id="1139500" ref_url="https://bugzilla.suse.com/1139500" source="BUGZILLA"/>
		<reference ref_id="1140012" ref_url="https://bugzilla.suse.com/1140012" source="BUGZILLA"/>
		<reference ref_id="1140426" ref_url="https://bugzilla.suse.com/1140426" source="BUGZILLA"/>
		<reference ref_id="1140487" ref_url="https://bugzilla.suse.com/1140487" source="BUGZILLA"/>
		<reference ref_id="1141340" ref_url="https://bugzilla.suse.com/1141340" source="BUGZILLA"/>
		<reference ref_id="1141450" ref_url="https://bugzilla.suse.com/1141450" source="BUGZILLA"/>
		<reference ref_id="1141543" ref_url="https://bugzilla.suse.com/1141543" source="BUGZILLA"/>
		<reference ref_id="1141554" ref_url="https://bugzilla.suse.com/1141554" source="BUGZILLA"/>
		<reference ref_id="1142019" ref_url="https://bugzilla.suse.com/1142019" source="BUGZILLA"/>
		<reference ref_id="1142076" ref_url="https://bugzilla.suse.com/1142076" source="BUGZILLA"/>
		<reference ref_id="1142109" ref_url="https://bugzilla.suse.com/1142109" source="BUGZILLA"/>
		<reference ref_id="1142117" ref_url="https://bugzilla.suse.com/1142117" source="BUGZILLA"/>
		<reference ref_id="1142118" ref_url="https://bugzilla.suse.com/1142118" source="BUGZILLA"/>
		<reference ref_id="1142119" ref_url="https://bugzilla.suse.com/1142119" source="BUGZILLA"/>
		<reference ref_id="1142496" ref_url="https://bugzilla.suse.com/1142496" source="BUGZILLA"/>
		<reference ref_id="1142541" ref_url="https://bugzilla.suse.com/1142541" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1142701" ref_url="https://bugzilla.suse.com/1142701" source="BUGZILLA"/>
		<reference ref_id="1142857" ref_url="https://bugzilla.suse.com/1142857" source="BUGZILLA"/>
		<reference ref_id="1143300" ref_url="https://bugzilla.suse.com/1143300" source="BUGZILLA"/>
		<reference ref_id="1143331" ref_url="https://bugzilla.suse.com/1143331" source="BUGZILLA"/>
		<reference ref_id="1143466" ref_url="https://bugzilla.suse.com/1143466" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1143738" ref_url="https://bugzilla.suse.com/1143738" source="BUGZILLA"/>
		<reference ref_id="1143765" ref_url="https://bugzilla.suse.com/1143765" source="BUGZILLA"/>
		<reference ref_id="1143841" ref_url="https://bugzilla.suse.com/1143841" source="BUGZILLA"/>
		<reference ref_id="1143843" ref_url="https://bugzilla.suse.com/1143843" source="BUGZILLA"/>
		<reference ref_id="1143962" ref_url="https://bugzilla.suse.com/1143962" source="BUGZILLA"/>
		<reference ref_id="1144123" ref_url="https://bugzilla.suse.com/1144123" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1144375" ref_url="https://bugzilla.suse.com/1144375" source="BUGZILLA"/>
		<reference ref_id="1144474" ref_url="https://bugzilla.suse.com/1144474" source="BUGZILLA"/>
		<reference ref_id="1144518" ref_url="https://bugzilla.suse.com/1144518" source="BUGZILLA"/>
		<reference ref_id="1144582" ref_url="https://bugzilla.suse.com/1144582" source="BUGZILLA"/>
		<reference ref_id="1144718" ref_url="https://bugzilla.suse.com/1144718" source="BUGZILLA"/>
		<reference ref_id="1144813" ref_url="https://bugzilla.suse.com/1144813" source="BUGZILLA"/>
		<reference ref_id="1144880" ref_url="https://bugzilla.suse.com/1144880" source="BUGZILLA"/>
		<reference ref_id="1144886" ref_url="https://bugzilla.suse.com/1144886" source="BUGZILLA"/>
		<reference ref_id="1144912" ref_url="https://bugzilla.suse.com/1144912" source="BUGZILLA"/>
		<reference ref_id="1144920" ref_url="https://bugzilla.suse.com/1144920" source="BUGZILLA"/>
		<reference ref_id="1144979" ref_url="https://bugzilla.suse.com/1144979" source="BUGZILLA"/>
		<reference ref_id="1145010" ref_url="https://bugzilla.suse.com/1145010" source="BUGZILLA"/>
		<reference ref_id="1145018" ref_url="https://bugzilla.suse.com/1145018" source="BUGZILLA"/>
		<reference ref_id="1145051" ref_url="https://bugzilla.suse.com/1145051" source="BUGZILLA"/>
		<reference ref_id="1145059" ref_url="https://bugzilla.suse.com/1145059" source="BUGZILLA"/>
		<reference ref_id="1145189" ref_url="https://bugzilla.suse.com/1145189" source="BUGZILLA"/>
		<reference ref_id="1145235" ref_url="https://bugzilla.suse.com/1145235" source="BUGZILLA"/>
		<reference ref_id="1145256" ref_url="https://bugzilla.suse.com/1145256" source="BUGZILLA"/>
		<reference ref_id="1145300" ref_url="https://bugzilla.suse.com/1145300" source="BUGZILLA"/>
		<reference ref_id="1145302" ref_url="https://bugzilla.suse.com/1145302" source="BUGZILLA"/>
		<reference ref_id="1145357" ref_url="https://bugzilla.suse.com/1145357" source="BUGZILLA"/>
		<reference ref_id="1145388" ref_url="https://bugzilla.suse.com/1145388" source="BUGZILLA"/>
		<reference ref_id="1145389" ref_url="https://bugzilla.suse.com/1145389" source="BUGZILLA"/>
		<reference ref_id="1145390" ref_url="https://bugzilla.suse.com/1145390" source="BUGZILLA"/>
		<reference ref_id="1145391" ref_url="https://bugzilla.suse.com/1145391" source="BUGZILLA"/>
		<reference ref_id="1145392" ref_url="https://bugzilla.suse.com/1145392" source="BUGZILLA"/>
		<reference ref_id="1145393" ref_url="https://bugzilla.suse.com/1145393" source="BUGZILLA"/>
		<reference ref_id="1145394" ref_url="https://bugzilla.suse.com/1145394" source="BUGZILLA"/>
		<reference ref_id="1145395" ref_url="https://bugzilla.suse.com/1145395" source="BUGZILLA"/>
		<reference ref_id="1145396" ref_url="https://bugzilla.suse.com/1145396" source="BUGZILLA"/>
		<reference ref_id="1145397" ref_url="https://bugzilla.suse.com/1145397" source="BUGZILLA"/>
		<reference ref_id="1145408" ref_url="https://bugzilla.suse.com/1145408" source="BUGZILLA"/>
		<reference ref_id="1145409" ref_url="https://bugzilla.suse.com/1145409" source="BUGZILLA"/>
		<reference ref_id="1145446" ref_url="https://bugzilla.suse.com/1145446" source="BUGZILLA"/>
		<reference ref_id="1145661" ref_url="https://bugzilla.suse.com/1145661" source="BUGZILLA"/>
		<reference ref_id="1145678" ref_url="https://bugzilla.suse.com/1145678" source="BUGZILLA"/>
		<reference ref_id="1145687" ref_url="https://bugzilla.suse.com/1145687" source="BUGZILLA"/>
		<reference ref_id="1145920" ref_url="https://bugzilla.suse.com/1145920" source="BUGZILLA"/>
		<reference ref_id="1145922" ref_url="https://bugzilla.suse.com/1145922" source="BUGZILLA"/>
		<reference ref_id="1145934" ref_url="https://bugzilla.suse.com/1145934" source="BUGZILLA"/>
		<reference ref_id="1145937" ref_url="https://bugzilla.suse.com/1145937" source="BUGZILLA"/>
		<reference ref_id="1145940" ref_url="https://bugzilla.suse.com/1145940" source="BUGZILLA"/>
		<reference ref_id="1145941" ref_url="https://bugzilla.suse.com/1145941" source="BUGZILLA"/>
		<reference ref_id="1145942" ref_url="https://bugzilla.suse.com/1145942" source="BUGZILLA"/>
		<reference ref_id="1145946" ref_url="https://bugzilla.suse.com/1145946" source="BUGZILLA"/>
		<reference ref_id="1146074" ref_url="https://bugzilla.suse.com/1146074" source="BUGZILLA"/>
		<reference ref_id="1146084" ref_url="https://bugzilla.suse.com/1146084" source="BUGZILLA"/>
		<reference ref_id="1146141" ref_url="https://bugzilla.suse.com/1146141" source="BUGZILLA"/>
		<reference ref_id="1146163" ref_url="https://bugzilla.suse.com/1146163" source="BUGZILLA"/>
		<reference ref_id="1146215" ref_url="https://bugzilla.suse.com/1146215" source="BUGZILLA"/>
		<reference ref_id="1146285" ref_url="https://bugzilla.suse.com/1146285" source="BUGZILLA"/>
		<reference ref_id="1146346" ref_url="https://bugzilla.suse.com/1146346" source="BUGZILLA"/>
		<reference ref_id="1146351" ref_url="https://bugzilla.suse.com/1146351" source="BUGZILLA"/>
		<reference ref_id="1146352" ref_url="https://bugzilla.suse.com/1146352" source="BUGZILLA"/>
		<reference ref_id="1146361" ref_url="https://bugzilla.suse.com/1146361" source="BUGZILLA"/>
		<reference ref_id="1146368" ref_url="https://bugzilla.suse.com/1146368" source="BUGZILLA"/>
		<reference ref_id="1146376" ref_url="https://bugzilla.suse.com/1146376" source="BUGZILLA"/>
		<reference ref_id="1146378" ref_url="https://bugzilla.suse.com/1146378" source="BUGZILLA"/>
		<reference ref_id="1146381" ref_url="https://bugzilla.suse.com/1146381" source="BUGZILLA"/>
		<reference ref_id="1146391" ref_url="https://bugzilla.suse.com/1146391" source="BUGZILLA"/>
		<reference ref_id="1146399" ref_url="https://bugzilla.suse.com/1146399" source="BUGZILLA"/>
		<reference ref_id="1146413" ref_url="https://bugzilla.suse.com/1146413" source="BUGZILLA"/>
		<reference ref_id="1146425" ref_url="https://bugzilla.suse.com/1146425" source="BUGZILLA"/>
		<reference ref_id="1146516" ref_url="https://bugzilla.suse.com/1146516" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146524" ref_url="https://bugzilla.suse.com/1146524" source="BUGZILLA"/>
		<reference ref_id="1146526" ref_url="https://bugzilla.suse.com/1146526" source="BUGZILLA"/>
		<reference ref_id="1146529" ref_url="https://bugzilla.suse.com/1146529" source="BUGZILLA"/>
		<reference ref_id="1146531" ref_url="https://bugzilla.suse.com/1146531" source="BUGZILLA"/>
		<reference ref_id="1146543" ref_url="https://bugzilla.suse.com/1146543" source="BUGZILLA"/>
		<reference ref_id="1146547" ref_url="https://bugzilla.suse.com/1146547" source="BUGZILLA"/>
		<reference ref_id="1146550" ref_url="https://bugzilla.suse.com/1146550" source="BUGZILLA"/>
		<reference ref_id="1146575" ref_url="https://bugzilla.suse.com/1146575" source="BUGZILLA"/>
		<reference ref_id="1146589" ref_url="https://bugzilla.suse.com/1146589" source="BUGZILLA"/>
		<reference ref_id="1146678" ref_url="https://bugzilla.suse.com/1146678" source="BUGZILLA"/>
		<reference ref_id="1146938" ref_url="https://bugzilla.suse.com/1146938" source="BUGZILLA"/>
		<reference ref_id="1148031" ref_url="https://bugzilla.suse.com/1148031" source="BUGZILLA"/>
		<reference ref_id="1148032" ref_url="https://bugzilla.suse.com/1148032" source="BUGZILLA"/>
		<reference ref_id="1148033" ref_url="https://bugzilla.suse.com/1148033" source="BUGZILLA"/>
		<reference ref_id="1148034" ref_url="https://bugzilla.suse.com/1148034" source="BUGZILLA"/>
		<reference ref_id="1148035" ref_url="https://bugzilla.suse.com/1148035" source="BUGZILLA"/>
		<reference ref_id="1148093" ref_url="https://bugzilla.suse.com/1148093" source="BUGZILLA"/>
		<reference ref_id="1148133" ref_url="https://bugzilla.suse.com/1148133" source="BUGZILLA"/>
		<reference ref_id="1148192" ref_url="https://bugzilla.suse.com/1148192" source="BUGZILLA"/>
		<reference ref_id="1148196" ref_url="https://bugzilla.suse.com/1148196" source="BUGZILLA"/>
		<reference ref_id="1148198" ref_url="https://bugzilla.suse.com/1148198" source="BUGZILLA"/>
		<reference ref_id="1148202" ref_url="https://bugzilla.suse.com/1148202" source="BUGZILLA"/>
		<reference ref_id="1148219" ref_url="https://bugzilla.suse.com/1148219" source="BUGZILLA"/>
		<reference ref_id="1148297" ref_url="https://bugzilla.suse.com/1148297" source="BUGZILLA"/>
		<reference ref_id="1148303" ref_url="https://bugzilla.suse.com/1148303" source="BUGZILLA"/>
		<reference ref_id="1148308" ref_url="https://bugzilla.suse.com/1148308" source="BUGZILLA"/>
		<reference ref_id="1148363" ref_url="https://bugzilla.suse.com/1148363" source="BUGZILLA"/>
		<reference ref_id="1148379" ref_url="https://bugzilla.suse.com/1148379" source="BUGZILLA"/>
		<reference ref_id="1148394" ref_url="https://bugzilla.suse.com/1148394" source="BUGZILLA"/>
		<reference ref_id="1148527" ref_url="https://bugzilla.suse.com/1148527" source="BUGZILLA"/>
		<reference ref_id="1148570" ref_url="https://bugzilla.suse.com/1148570" source="BUGZILLA"/>
		<reference ref_id="1148574" ref_url="https://bugzilla.suse.com/1148574" source="BUGZILLA"/>
		<reference ref_id="1148616" ref_url="https://bugzilla.suse.com/1148616" source="BUGZILLA"/>
		<reference ref_id="1148617" ref_url="https://bugzilla.suse.com/1148617" source="BUGZILLA"/>
		<reference ref_id="1148619" ref_url="https://bugzilla.suse.com/1148619" source="BUGZILLA"/>
		<reference ref_id="1148698" ref_url="https://bugzilla.suse.com/1148698" source="BUGZILLA"/>
		<reference ref_id="1148859" ref_url="https://bugzilla.suse.com/1148859" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1149053" ref_url="https://bugzilla.suse.com/1149053" source="BUGZILLA"/>
		<reference ref_id="1149083" ref_url="https://bugzilla.suse.com/1149083" source="BUGZILLA"/>
		<reference ref_id="1149104" ref_url="https://bugzilla.suse.com/1149104" source="BUGZILLA"/>
		<reference ref_id="1149105" ref_url="https://bugzilla.suse.com/1149105" source="BUGZILLA"/>
		<reference ref_id="1149106" ref_url="https://bugzilla.suse.com/1149106" source="BUGZILLA"/>
		<reference ref_id="1149197" ref_url="https://bugzilla.suse.com/1149197" source="BUGZILLA"/>
		<reference ref_id="1149214" ref_url="https://bugzilla.suse.com/1149214" source="BUGZILLA"/>
		<reference ref_id="1149224" ref_url="https://bugzilla.suse.com/1149224" source="BUGZILLA"/>
		<reference ref_id="1149325" ref_url="https://bugzilla.suse.com/1149325" source="BUGZILLA"/>
		<reference ref_id="1149376" ref_url="https://bugzilla.suse.com/1149376" source="BUGZILLA"/>
		<reference ref_id="1149413" ref_url="https://bugzilla.suse.com/1149413" source="BUGZILLA"/>
		<reference ref_id="1149418" ref_url="https://bugzilla.suse.com/1149418" source="BUGZILLA"/>
		<reference ref_id="1149424" ref_url="https://bugzilla.suse.com/1149424" source="BUGZILLA"/>
		<reference ref_id="1149522" ref_url="https://bugzilla.suse.com/1149522" source="BUGZILLA"/>
		<reference ref_id="1149527" ref_url="https://bugzilla.suse.com/1149527" source="BUGZILLA"/>
		<reference ref_id="1149539" ref_url="https://bugzilla.suse.com/1149539" source="BUGZILLA"/>
		<reference ref_id="1149552" ref_url="https://bugzilla.suse.com/1149552" source="BUGZILLA"/>
		<reference ref_id="1149591" ref_url="https://bugzilla.suse.com/1149591" source="BUGZILLA"/>
		<reference ref_id="1149602" ref_url="https://bugzilla.suse.com/1149602" source="BUGZILLA"/>
		<reference ref_id="1149612" ref_url="https://bugzilla.suse.com/1149612" source="BUGZILLA"/>
		<reference ref_id="1149626" ref_url="https://bugzilla.suse.com/1149626" source="BUGZILLA"/>
		<reference ref_id="1149652" ref_url="https://bugzilla.suse.com/1149652" source="BUGZILLA"/>
		<reference ref_id="1149713" ref_url="https://bugzilla.suse.com/1149713" source="BUGZILLA"/>
		<reference ref_id="1149940" ref_url="https://bugzilla.suse.com/1149940" source="BUGZILLA"/>
		<reference ref_id="1149976" ref_url="https://bugzilla.suse.com/1149976" source="BUGZILLA"/>
		<reference ref_id="1150025" ref_url="https://bugzilla.suse.com/1150025" source="BUGZILLA"/>
		<reference ref_id="1150033" ref_url="https://bugzilla.suse.com/1150033" source="BUGZILLA"/>
		<reference ref_id="1150112" ref_url="https://bugzilla.suse.com/1150112" source="BUGZILLA"/>
		<reference ref_id="1150562" ref_url="https://bugzilla.suse.com/1150562" source="BUGZILLA"/>
		<reference ref_id="1150727" ref_url="https://bugzilla.suse.com/1150727" source="BUGZILLA"/>
		<reference ref_id="1150860" ref_url="https://bugzilla.suse.com/1150860" source="BUGZILLA"/>
		<reference ref_id="1150861" ref_url="https://bugzilla.suse.com/1150861" source="BUGZILLA"/>
		<reference ref_id="1150933" ref_url="https://bugzilla.suse.com/1150933" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18551" ref_url="https://www.suse.com/security/cve/CVE-2017-18551/" source="CVE"/>
		<reference ref_id="CVE-2018-20976" ref_url="https://www.suse.com/security/cve/CVE-2018-20976/" source="CVE"/>
		<reference ref_id="CVE-2018-21008" ref_url="https://www.suse.com/security/cve/CVE-2018-21008/" source="CVE"/>
		<reference ref_id="CVE-2019-10207" ref_url="https://www.suse.com/security/cve/CVE-2019-10207/" source="CVE"/>
		<reference ref_id="CVE-2019-14814" ref_url="https://www.suse.com/security/cve/CVE-2019-14814/" source="CVE"/>
		<reference ref_id="CVE-2019-14815" ref_url="https://www.suse.com/security/cve/CVE-2019-14815/" source="CVE"/>
		<reference ref_id="CVE-2019-14816" ref_url="https://www.suse.com/security/cve/CVE-2019-14816/" source="CVE"/>
		<reference ref_id="CVE-2019-14835" ref_url="https://www.suse.com/security/cve/CVE-2019-14835/" source="CVE"/>
		<reference ref_id="CVE-2019-15030" ref_url="https://www.suse.com/security/cve/CVE-2019-15030/" source="CVE"/>
		<reference ref_id="CVE-2019-15031" ref_url="https://www.suse.com/security/cve/CVE-2019-15031/" source="CVE"/>
		<reference ref_id="CVE-2019-15090" ref_url="https://www.suse.com/security/cve/CVE-2019-15090/" source="CVE"/>
		<reference ref_id="CVE-2019-15098" ref_url="https://www.suse.com/security/cve/CVE-2019-15098/" source="CVE"/>
		<reference ref_id="CVE-2019-15099" ref_url="https://www.suse.com/security/cve/CVE-2019-15099/" source="CVE"/>
		<reference ref_id="CVE-2019-15117" ref_url="https://www.suse.com/security/cve/CVE-2019-15117/" source="CVE"/>
		<reference ref_id="CVE-2019-15118" ref_url="https://www.suse.com/security/cve/CVE-2019-15118/" source="CVE"/>
		<reference ref_id="CVE-2019-15211" ref_url="https://www.suse.com/security/cve/CVE-2019-15211/" source="CVE"/>
		<reference ref_id="CVE-2019-15212" ref_url="https://www.suse.com/security/cve/CVE-2019-15212/" source="CVE"/>
		<reference ref_id="CVE-2019-15214" ref_url="https://www.suse.com/security/cve/CVE-2019-15214/" source="CVE"/>
		<reference ref_id="CVE-2019-15215" ref_url="https://www.suse.com/security/cve/CVE-2019-15215/" source="CVE"/>
		<reference ref_id="CVE-2019-15216" ref_url="https://www.suse.com/security/cve/CVE-2019-15216/" source="CVE"/>
		<reference ref_id="CVE-2019-15217" ref_url="https://www.suse.com/security/cve/CVE-2019-15217/" source="CVE"/>
		<reference ref_id="CVE-2019-15218" ref_url="https://www.suse.com/security/cve/CVE-2019-15218/" source="CVE"/>
		<reference ref_id="CVE-2019-15219" ref_url="https://www.suse.com/security/cve/CVE-2019-15219/" source="CVE"/>
		<reference ref_id="CVE-2019-15220" ref_url="https://www.suse.com/security/cve/CVE-2019-15220/" source="CVE"/>
		<reference ref_id="CVE-2019-15221" ref_url="https://www.suse.com/security/cve/CVE-2019-15221/" source="CVE"/>
		<reference ref_id="CVE-2019-15222" ref_url="https://www.suse.com/security/cve/CVE-2019-15222/" source="CVE"/>
		<reference ref_id="CVE-2019-15239" ref_url="https://www.suse.com/security/cve/CVE-2019-15239/" source="CVE"/>
		<reference ref_id="CVE-2019-15290" ref_url="https://www.suse.com/security/cve/CVE-2019-15290/" source="CVE"/>
		<reference ref_id="CVE-2019-15292" ref_url="https://www.suse.com/security/cve/CVE-2019-15292/" source="CVE"/>
		<reference ref_id="CVE-2019-15538" ref_url="https://www.suse.com/security/cve/CVE-2019-15538/" source="CVE"/>
		<reference ref_id="CVE-2019-15666" ref_url="https://www.suse.com/security/cve/CVE-2019-15666/" source="CVE"/>
		<reference ref_id="CVE-2019-15902" ref_url="https://www.suse.com/security/cve/CVE-2019-15902/" source="CVE"/>
		<reference ref_id="CVE-2019-15917" ref_url="https://www.suse.com/security/cve/CVE-2019-15917/" source="CVE"/>
		<reference ref_id="CVE-2019-15919" ref_url="https://www.suse.com/security/cve/CVE-2019-15919/" source="CVE"/>
		<reference ref_id="CVE-2019-15920" ref_url="https://www.suse.com/security/cve/CVE-2019-15920/" source="CVE"/>
		<reference ref_id="CVE-2019-15921" ref_url="https://www.suse.com/security/cve/CVE-2019-15921/" source="CVE"/>
		<reference ref_id="CVE-2019-15924" ref_url="https://www.suse.com/security/cve/CVE-2019-15924/" source="CVE"/>
		<reference ref_id="CVE-2019-15926" ref_url="https://www.suse.com/security/cve/CVE-2019-15926/" source="CVE"/>
		<reference ref_id="CVE-2019-15927" ref_url="https://www.suse.com/security/cve/CVE-2019-15927/" source="CVE"/>
		<reference ref_id="CVE-2019-9456" ref_url="https://www.suse.com/security/cve/CVE-2019-9456/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005945.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following new features were implemented:

- jsc#SLE-4875: [CML] New device IDs for CML
- jsc#SLE-7294: Add cpufreq driver for Raspberry Pi
- fate#326869: perf: pmu mem_load/store event support
- fate#327380: KVM: Add hardware CPU Model - kernel part
- fate#327377: KVM: Support for configurable virtio-crypto
- fate#327775: vpmem: DRAM backed persistent volumes for improved SAP HANA on POWER restart times
- fate#326472: Marvell Armada 7K/8K Ethernet (incl. 10G) kernel enablement
- fate#326416: Hi1620 (Vendor: Huawei): RDMA kernel enablement
- fate#326415: Hi1620 (Vendor: Huawei): HNS3 (100G) network kernel enablement

The following security bugs were fixed:

- CVE-2019-14835: Fix QEMU-KVM Guest to Host Kernel Escape. (bsc#1150112).
- CVE-2019-15216: Fix a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver. (bsc#1146361).
- CVE-2019-15924: Fix a NULL pointer dereference because there was no -ENOMEM upon an alloc_workqueue failure. (bsc#1149612).
- CVE-2019-9456: In Pixel C USB monitor driver there was a possible OOB write due to a missing bounds check. This could have lead to local escalation of privilege with System execution privileges needed. (bsc#1150025 CVE-2019-9456).
- CVE-2019-15030, CVE-2019-15031: On the powerpc platform, a local user could read vector registers of other users' processes via an interrupt. (bsc#1149713)
- CVE-2019-15920: SMB2_read in fs/cifs/smb2pdu.c had a use-after-free. (bsc#1149626)
- CVE-2019-15921: There was a memory leak issue when idr_alloc() failed (bsc#1149602)
- CVE-2018-21008: A use-after-free can be caused by the function rsi_mac80211_detach (bsc#1149591).
- CVE-2019-15919: SMB2_write in fs/cifs/smb2pdu.c had a use-after-free. (bsc#1149552)
- CVE-2019-15917: There was a use-after-free issue when hci_uart_register_dev() failed in hci_uart_set_proto() (bsc#1149539)
- CVE-2019-15926: Out of bounds access existed in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx (bsc#1149527)
- CVE-2019-15927: An out-of-bounds access existed in the function build_audio_procunit (bsc#1149522)
- CVE-2019-15902: A backporting error reintroduced the Spectre vulnerability that it aimed to eliminate. (bnc#1149376)
- CVE-2019-15666: There was an out-of-bounds array access in __xfrm_policy_unlink, which would cause denial of service, because verify_newpolicy_info mishandled directory validation. (bsc#1148394).
- CVE-2019-15219: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver. (bsc#1146524)
- CVE-2019-14814, CVE-2019-14815, CVE-2019-14816: Fix three heap-based buffer overflows in marvell wifi chip driver kernel, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code. (bnc#1146516)
- CVE-2019-15220: There was a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver. (bsc#1146526)
- CVE-2019-15538: XFS partially wedged when a chgrp failed on account of being out of disk quota. This was primarily a local DoS attack vector, but it could result as well in remote DoS if the XFS filesystem was exported for instance via NFS. (bsc#1148032, bsc#1148093)
- CVE-2019-15290: There was a NULL pointer dereference caused by a malicious USB device in the ath6kl_usb_alloc_urb_from_pipe function (bsc#1146543).
- CVE-2019-15098: USB driver net/wireless/ath/ath6kl/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor. (bsc#1146378).
- CVE-2019-15221, CVE-2019-15222: There was a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver. (bsc#1146529, bsc#1146531)
- CVE-2019-10207: Fix a NULL pointer dereference in hci_uart bluetooth driver (bsc#1142857 bsc#1123959).
- CVE-2019-15117: parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel mishandled a short descriptor, leading to out-of-bounds memory access. (bsc#1145920).
- CVE-2019-15118: check_input_term in sound/usb/mixer.c in the Linux kernel mishandled recursion, leading to kernel stack exhaustion. (bsc#1145922).
- CVE-2017-18551: There was an out of bounds write in the function i2c_smbus_xfer_emulated. (bsc#1146163).
- CVE-2019-15090: In the qedi_dbg_* family of functions, there was an out-of-bounds read. (bsc#1146399)
- CVE-2018-20976: A use after free existed, related to xfs_fs_fill_super failure. (bsc#1146285)
- CVE-2019-15215: There was a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver. (bsc#1135642 bsc#1146425)
- CVE-2019-15212: There was a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver. (bsc#1051510 bsc#1146391).
- CVE-2019-15292: There was a use-after-free in atalk_proc_exit (bsc#1146678)
- CVE-2019-15217: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver. (bsc#1146547).
- CVE-2019-15214: There was a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. (bsc#1146550)
- CVE-2019-15218: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver. (bsc#1051510 bsc#1146413)
- CVE-2019-15211: There was a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c did not properly allocate memory. (bsc#1146519).
- CVE-2019-15239: An incorrect backport of a certain net/ipv4/tcp_output.c fix allowed a local attacker to trigger multiple use-after-free conditions. This could result in a kernel crash, or potentially in privilege escalation. (bsc#1146589)
- CVE-2019-15099: drivers/net/wireless/ath/ath10k/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor. (bsc#1146368)

The following non-security bugs were fixed:

- 9p/rdma: do not disconnect on down_interruptible EAGAIN (bsc#1051510).
- 9p/rdma: remove useless check in cm_event_handler (bsc#1051510).
- 9p/virtio: Add cleanup path in p9_virtio_init (bsc#1051510).
- 9p/xen: Add cleanup path in p9_trans_xen_init (bsc#1051510).
- 9p/xen: fix check for xenbus_read error in front_probe (bsc#1051510).
- 9p: acl: fix uninitialized iattr access (bsc#1051510).
- 9p: p9dirent_read: check network-provided name length (bsc#1051510).
- 9p: pass the correct prototype to read_cache_page (bsc#1051510).
- acpi/IORT: Fix off-by-one check in iort_dev_find_its_id() (bsc#1051510).
- acpi/arm64: ignore 5.1 FADTs that are reported as 5.0 (bsc#1051510).
- acpi: PM: Fix regression in acpi_device_set_power() (bsc#1051510).
- acpi: fix false-positive -Wuninitialized warning (bsc#1051510).
- acpica: Increase total number of possible Owner IDs (bsc#1148859).
- af_key: fix leaks in key_pol_get_resp and dump_sp (bsc#1051510).
- af_packet: Block execution of tasks waiting for transmit to complete in AF_PACKET (networking-stable-19_07_02).
- alsa: firewire: fix a memory leak bug (bsc#1051510).
- alsa: hda - Add a generic reboot_notify (bsc#1051510).
- alsa: hda - Apply workaround for another AMD chip 1022:1487 (bsc#1051510).
- alsa: hda - Do not override global PCM hw info flag (bsc#1051510).
- alsa: hda - Fix a memory leak bug (bsc#1051510).
- alsa: hda - Fix potential endless loop at applying quirks (bsc#1051510).
- alsa: hda - Fixes inverted Conexant GPIO mic mute led (bsc#1051510).
- alsa: hda - Let all conexant codec enter D3 when rebooting (bsc#1051510).
- alsa: hda - Workaround for crackled sound on AMD controller (1022:1457) (bsc#1051510).
- alsa: hda/ca0132 - Add new SBZ quirk (bsc#1051510).
- alsa: hda/realtek - Add quirk for HP Envy x360 (bsc#1051510).
- alsa: hda/realtek - Add quirk for HP Pavilion 15 (bsc#1051510).
- alsa: hda/realtek - Enable internal speaker &amp; headset mic of ASUS UX431FL (bsc#1051510).
- alsa: hda/realtek - Fix overridden device-specific initialization (bsc#1051510).
- alsa: hda/realtek - Fix the problem of two front mics on a ThinkCentre (bsc#1051510).
- alsa: hda: Fix 1-minute detection delay when i915 module is not available (bsc#1111666).
- alsa: hda: kabi workaround for generic parser flag (bsc#1051510).
- alsa: hiface: fix multiple memory leak bugs (bsc#1051510).
- alsa: line6: Fix memory leak at line6_init_pcm() error path (bsc#1051510).
- alsa: pcm: fix lost wakeup event scenarios in snd_pcm_drain (bsc#1051510).
- alsa: seq: Fix potential concurrent access to the deleted pool (bsc#1051510).
- alsa: usb-audio: Add implicit fb quirk for Behringer UFX1604 (bsc#1051510).
- alsa: usb-audio: Check mixer unit bitmap yet more strictly (bsc#1051510).
- alsa: usb-audio: Fix gpf in snd_usb_pipe_sanity_check (bsc#1051510).
- alsa: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate() (bsc#1051510).
- alsa: usb-audio: fix a memory leak bug (bsc#1111666).
- arch: integrate XIVE support (bsc#1085030, bsc#1144518, LTC#178833).
- arm64/kernel: enable A53 erratum #8434319 handling at runtime (bsc#1148219).
- arm64/kernel: rename module_emit_adrp_veneer-&gt;module_emit_veneer_for_adrp (bsc#1148219).
- arm64: fix undefined reference to 'printk' (bsc#1148219).
- arm64: kvm: Fix architecturally invalid reset value for FPEXC32_EL2 (bsc#1133021).
- arm64: module: do not BUG when exceeding preallocated PLT count (bsc#1148219).
- arm64: pci: Preserve firmware configuration when desired (SLE-9332).
- arm: (bsc#1145687) Add the following kernel config to ARM64: CONFIG_ACPI_PCI_SLOT=y CONFIG_HOTPLUG_PCI_ACPI=y
- arm: kvm: Add SMCCC_ARCH_WORKAROUND_1 fast handling (bsc#1133021).
- arm: kvm: report support for SMCCC_ARCH_WORKAROUND_1 (bsc#1133021).
- asoc: Fail card instantiation if DAI format setup fails (bsc#1051510).
- asoc: dapm: Fix handling of custom_stop_condition on DApm graph walks (bsc#1051510).
- ata: libahci: do not complain in case of deferred probe (bsc#1051510).
- ath10k: Change the warning message string (bsc#1051510).
- ath10k: Drop WARN_ON()s that always trigger during system resume (bsc#1111666).
- batman-adv: Only read OGM tvlv_len after buffer len check (bsc#1051510).
- batman-adv: Only read OGM2 tvlv_len after buffer len check (bsc#1051510).
- batman-adv: fix uninit-value in batadv_netlink_get_ifindex() (bsc#1051510).
- bcache: Revert 'bcache: use sysfs_match_string() instead of __sysfs_match_string()' (git fixes).
- bcache: bsc#1144979: kernel oops on reading sysfs cache_mode file
- bcache: fix possible memory leak in bch_cached_dev_run() (git fixes).
- bio: fix improper use of smp_mb__before_atomic() (git fixes).
- blk-mq: Fix spelling in a source code comment (git fixes).
- blk-mq: backport fixes for blk_mq_complete_e_request_sync() (bsc#1145661).
- blk-mq: introduce blk_mq_complete_request_sync() (bsc#1145661).
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait (bsc#1141543).
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait (bsc#1141543).
- block, documentation: Fix wbt_lat_usec documentation (git fixes).
- bluetooth: 6lowpan: search for destination address in all peers (bsc#1051510).
- bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug (bsc#1051510).
- bluetooth: Check state in l2cap_disconnect_rsp (bsc#1051510).
- bluetooth: btqca: Add a short delay before downloading the NVM (bsc#1051510).
- bluetooth: hci_bcsp: Fix memory leak in rx_skb (bsc#1051510).
- bluetooth: validate BLE connection interval updates (bsc#1051510).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502 jsc#SLE-4703).
- bnx2x: Disable multi-cos feature (bsc#1136498 jsc#SLE-4699).
- bnx2x: Prevent ptp_task to be rescheduled indefinitely (networking-stable-19_07_25).
- bnxt_en: Fix VNIC clearing logic for 57500 chips (bsc#1104745 ).
- bnxt_en: Fix to include flow direction in L2 key (bsc#1104745 ).
- bnxt_en: Improve RX doorbell sequence (bsc#1104745).
- bnxt_en: Use correct src_fid to determine direction of the flow (bsc#1104745).
- bonding: Always enable vlan tx offload (networking-stable-19_07_02).
- bonding: validate ip header before check IPPROTO_IGMP (networking-stable-19_07_25).
- bpf: sockmap, only create entry if ulp is not already enabled (bsc#1109837).
- bpf: sockmap, sock_map_delete needs to use xchg (bsc#1109837).
- bpf: sockmap, synchronize_rcu before free'ing map (bsc#1109837).
- btrfs: Fix delalloc inodes invalidation during transaction abort (bsc#1050911).
- btrfs: Split btrfs_del_delalloc_inode into 2 functions (bsc#1050911).
- btrfs: add a helper to retrive extent inline ref type (bsc#1149325).
- btrfs: add cleanup_ref_head_accounting helper (bsc#1050911).
- btrfs: add missing inode version, ctime and mtime updates when punching hole (bsc#1140487).
- btrfs: add one more sanity check for shared ref type (bsc#1149325).
- btrfs: clean up pending block groups when transaction commit aborts (bsc#1050911).
- btrfs: convert to use btrfs_get_extent_inline_ref_type (bsc#1149325).
- btrfs: do not abort transaction at btrfs_update_root() after failure to COW path (bsc#1150933).
- btrfs: fix assertion failure during fsync and use of stale transaction (bsc#1150562).
- btrfs: fix data loss after inode eviction, renaming it, and fsync it (bsc#1145941).
- btrfs: fix fsync not persisting dentry deletions due to inode evictions (bsc#1145942).
- btrfs: fix incremental send failure after deduplication (bsc#1145940).
- btrfs: fix pinned underflow after transaction aborted (bsc#1050911).
- btrfs: fix race between send and deduplication that lead to failures and crashes (bsc#1145059).
- btrfs: fix race leading to fs corruption after transaction abort (bsc#1145937).
- btrfs: handle delayed ref head accounting cleanup in abort (bsc#1050911).
- btrfs: prevent send failures and crashes due to concurrent relocation (bsc#1145059).
- btrfs: remove BUG() in add_data_reference (bsc#1149325).
- btrfs: remove BUG() in btrfs_extent_inline_ref_size (bsc#1149325).
- btrfs: remove BUG() in print_extent_item (bsc#1149325).
- btrfs: remove BUG_ON in __add_tree_block (bsc#1149325).
- btrfs: scrub: add memalloc_nofs protection around init_ipath (bsc#1086103).
- btrfs: start readahead also in seed devices (bsc#1144886).
- btrfs: track running balance in a simpler way (bsc#1145059).
- btrfs: use GFP_KERNEL in init_ipath (bsc#1086103).
- caif-hsi: fix possible deadlock in cfhsi_exit_module() (networking-stable-19_07_25).
- can: m_can: implement errata 'Needless activation of MRAF irq' (bsc#1051510).
- can: mcp251x: add support for mcp25625 (bsc#1051510).
- can: peak_usb: fix potential double kfree_skb() (bsc#1051510).
- can: peak_usb: force the string buffer NULL-terminated (bsc#1051510).
- can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices (bsc#1051510).
- can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices (bsc#1051510).
- can: rcar_canfd: fix possible IRQ storm on high load (bsc#1051510).
- can: sja1000: force the string buffer NULL-terminated (bsc#1051510).
- carl9170: fix misuse of device driver API (bsc#1142635).
- ceph: add btime field to ceph_inode_info (bsc#1148133 bsc#1136682).
- ceph: add ceph.snap.btime vxattr (bsc#1148133 bsc#1148570).
- ceph: add change_attr field to ceph_inode_info (bsc#1148133 bsc#1136682).
- ceph: always get rstat from auth mds (bsc#1146346).
- ceph: carry snapshot creation time with inodes (bsc#1148133 bsc#1148570).
- ceph: clean up ceph.dir.pin vxattr name sizeof() (bsc#1146346).
- ceph: clean up ceph.dir.pin vxattr name sizeof() (bsc#1146346).
- ceph: clear page dirty before invalidate page (bsc#1148133).
- ceph: decode feature bits in session message (bsc#1146346).
- ceph: decode feature bits in session message (bsc#1146346).
- ceph: do not blindly unregister session that is in opening state (bsc#1148133).
- ceph: do not blindly unregister session that is in opening state (bsc#1148133).
- ceph: do not try fill file_lock on unsuccessful GETFILELOCK reply (bsc#1148133).
- ceph: do not try fill file_lock on unsuccessful GETFILELOCK reply (bsc#1148133).
- ceph: fix 'ceph.dir.rctime' vxattr value (bsc#1148133 bsc#1135219).
- ceph: fix 'ceph.dir.rctime' vxattr value (bsc#1148133 bsc#1135219).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in fill_inode() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in fill_inode() (bsc#1148133).
- ceph: fix decode_locker to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- ceph: fix improper use of smp_mb__before_atomic() (bsc#1148133).
- ceph: fix improper use of smp_mb__before_atomic() (bsc#1148133).
- ceph: fix infinite loop in get_quota_realm() (bsc#1148133).
- ceph: fix invalid opcode (bsc#1148133 bsc#1138539).
- ceph: fix iov_iter issues in ceph_direct_read_write() (bsc#1141450).
- ceph: fix listxattr vxattr buffer length calculation (bsc#1148133 bsc#1148570).
- ceph: handle btime in cap messages (bsc#1148133 bsc#1136682).
- ceph: handle change_attr in cap messages (bsc#1148133 bsc#1136682).
- ceph: have MDS map decoding use entity_addr_t decoder (bsc#1148133 bsc#1136682).
- ceph: hold i_ceph_lock when removing caps for freeing inode (bsc#1148133).
- ceph: hold i_ceph_lock when removing caps for freeing inode (bsc#1148133).
- ceph: increment change_attribute on local changes (bsc#1148133 bsc#1136682).
- ceph: initialize superblock s_time_gran to 1 (bsc#1148133).
- ceph: remove request from waiting list before unregister (bsc#1148133).
- ceph: remove request from waiting list before unregister (bsc#1148133).
- ceph: remove unused vxattr length helpers (bsc#1148133 bsc#1148570).
- ceph: silence a checker warning in mdsc_show() (bsc#1148133).
- ceph: silence a checker warning in mdsc_show() (bsc#1148133).
- ceph: support cephfs' own feature bits (bsc#1146346).
- ceph: support getting ceph.dir.pin vxattr (bsc#1146346).
- ceph: support getting ceph.dir.pin vxattr (bsc#1146346).
- ceph: support versioned reply (bsc#1146346).
- ceph: support versioned reply (bsc#1146346).
- ceph: use bit flags to define vxattr attributes (bsc#1146346).
- cifs: Accept validate negotiate if server return NT_STATUS_NOT_SUPPORTED (bsc#1144333).
- cifs: Add DFS cache routines (bsc#1144333).
- cifs: Add direct I/O functions to file_operations (bsc#1144333).
- cifs: Add minor debug message during negprot (bsc#1144333).
- cifs: Add smb2_send_recv (bsc#1144333).
- cifs: Add support for FSCTL passthrough that write data to the server (bsc#1144333).
- cifs: Add support for direct I/O read (bsc#1144333).
- cifs: Add support for direct I/O write (bsc#1144333).
- cifs: Add support for direct pages in rdata (bsc#1144333).
- cifs: Add support for direct pages in wdata (bsc#1144333).
- cifs: Add support for failover in cifs_mount() (bsc#1144333).
- cifs: Add support for failover in cifs_reconnect() (bsc#1144333).
- cifs: Add support for failover in cifs_reconnect_tcon() (bsc#1144333).
- cifs: Add support for failover in smb2_reconnect() (bsc#1144333).
- cifs: Add support for reading attributes on SMB2+ (bsc#1051510, bsc#1144333).
- cifs: Add support for writing attributes on SMB2+ (bsc#1051510, bsc#1144333).
- cifs: Adds information-level logging function (bsc#1144333).
- cifs: Adjust MTU credits before reopening a file (bsc#1144333).
- cifs: Allocate memory for all iovs in smb2_ioctl (bsc#1144333).
- cifs: Allocate validate negotiation request through kmalloc (bsc#1144333).
- cifs: Always reset read error to -EIO if no response (bsc#1144333).
- cifs: Always resolve hostname before reconnecting (bsc#1051510, bsc#1144333).
- cifs: Avoid returning EBUSY to upper layer VFS (bsc#1144333).
- cifs: Calculate the correct request length based on page offset and tail size (bsc#1144333).
- cifs: Call MID callback before destroying transport (bsc#1144333).
- cifs: Change SMB2_open to return an iov for the error parameter (bsc#1144333).
- cifs: Check for reconnects before sending async requests (bsc#1144333).
- cifs: Check for reconnects before sending compound requests (bsc#1144333).
- cifs: Check for timeout on Negotiate stage (bsc#1091171, bsc#1144333).
- cifs: Count SMB3 credits for malformed pending responses (bsc#1144333).
- cifs: Display SMB2 error codes in the hex format (bsc#1144333).
- cifs: Do not assume one credit for async responses (bsc#1144333).
- cifs: Do not consider -ENODATA as stat failure for reads (bsc#1144333).
- cifs: Do not count -ENODATA as failure for query directory (bsc#1051510, bsc#1144333).
- cifs: Do not hide EINTR after sending network packets (bsc#1051510, bsc#1144333).
- cifs: Do not log credits when unmounting a share (bsc#1144333).
- cifs: Do not match port on SMBDirect transport (bsc#1144333).
- cifs: Do not modify mid entry after submitting I/O in cifs_call_async (bsc#1051510, bsc#1144333).
- cifs: Do not reconnect TCP session in add_credits() (bsc#1051510, bsc#1144333).
- cifs: Do not reset lease state to NONE on lease break (bsc#1051510, bsc#1144333).
- cifs: Do not set credits to 1 if the server didn't grant anything (bsc#1144333).
- cifs: Do not skip SMB2 message IDs on send failures (bsc#1144333).
- cifs: Find and reopen a file before get MTU credits in writepages (bsc#1144333).
- cifs: Fix DFS cache refresher for DFS links (bsc#1144333).
- cifs: Fix NULL pointer deref on SMB2_tcon() failure (bsc#1071009, bsc#1144333).
- cifs: Fix NULL pointer dereference of devname (bnc#1129519).
- cifs: Fix NULL ptr deref (bsc#1144333).
- cifs: Fix a debug message (bsc#1144333).
- cifs: Fix a race condition with cifs_echo_request (bsc#1144333).
- cifs: Fix a tiny potential memory leak (bsc#1144333).
- cifs: Fix adjustment of credits for MTU requests (bsc#1051510, bsc#1144333).
- cifs: Fix an issue with re-sending rdata when transport returning -EAGAIN (bsc#1144333).
- cifs: Fix an issue with re-sending wdata when transport returning -EAGAIN (bsc#1144333).
- cifs: Fix autonegotiate security settings mismatch (bsc#1087092, bsc#1144333).
- cifs: Fix check for matching with existing mount (bsc#1144333).
- cifs: Fix credit calculation for encrypted reads with errors (bsc#1051510, bsc#1144333).
- cifs: Fix credit calculations in compound mid callback (bsc#1144333).
- cifs: Fix credit computation for compounded requests (bsc#1144333).
- cifs: Fix credits calculation for cancelled requests (bsc#1144333).
- cifs: Fix credits calculations for reads with errors (bsc#1051510, bsc#1144333).
- cifs: Fix encryption/signing (bsc#1144333).
- cifs: Fix error mapping for SMB2_LOCK command which caused OFD lock problem (bsc#1051510, bsc#1144333).
- cifs: Fix error paths in writeback code (bsc#1144333).
- cifs: Fix infinite loop when using hard mount option (bsc#1091171, bsc#1144333).
- cifs: Fix invalid check in __cifs_calc_signature() (bsc#1144333).
- cifs: Fix kernel oops when traceSMB is enabled (bsc#1144333).
- cifs: Fix leaking locked VFS cache pages in writeback retry (bsc#1144333).
- cifs: Fix lease buffer length error (bsc#1144333).
- cifs: Fix memory leak in smb2_set_ea() (bsc#1051510, bsc#1144333).
- cifs: Fix missing put_xid in cifs_file_strict_mmap (bsc#1087092, bsc#1144333).
- cifs: Fix module dependency (bsc#1144333).
- cifs: Fix mounts if the client is low on credits (bsc#1144333).
- cifs: Fix possible hang during async MTU reads and writes (bsc#1051510, bsc#1144333).
- cifs: Fix possible oops and memory leaks in async IO (bsc#1144333).
- cifs: Fix potential OOB access of lock element array (bsc#1051510, bsc#1144333).
- cifs: Fix read after write for files with read caching (bsc#1051510, bsc#1144333).
- cifs: Fix separator when building path from dentry (bsc#1051510, bsc#1144333).
- cifs: Fix signing for SMB2/3 (bsc#1144333).
- cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (bsc#1144333).
- cifs: Fix slab-out-of-bounds when tracing SMB tcon (bsc#1144333).
- cifs: Fix stack out-of-bounds in smb{2,3}_create_lease_buf() (bsc#1051510, bsc#1144333).
- cifs: Fix to use kmem_cache_free() instead of kfree() (bsc#1144333).
- cifs: Fix trace command logging for SMB2 reads and writes (bsc#1144333).
- cifs: Fix use after free of a mid_q_entry (bsc#1112903, bsc#1144333).
- cifs: Fix use-after-free in SMB2_read (bsc#1144333).
- cifs: Fix use-after-free in SMB2_write (bsc#1144333).
- cifs: Fix validation of signed data in smb2 (bsc#1144333).
- cifs: Fix validation of signed data in smb3+ (bsc#1144333).
- cifs: For SMB2 security informaion query, check for minimum sized security descriptor instead of sizeof FileAllInformation class (bsc#1051510, bsc#1144333).
- cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure cifs) (bsc#1144333).
- cifs: Introduce helper function to get page offset and length in smb_rqst (bsc#1144333).
- cifs: Introduce offset for the 1st page in data transfer structures (bsc#1144333).
- cifs: Limit memory used by lock request calls to a page (bsc#1144333).
- cifs: Make devname param optional in cifs_compose_mount_options() (bsc#1144333).
- cifs: Make sure all data pages are signed correctly (bsc#1144333).
- cifs: Make use of DFS cache to get new DFS referrals (bsc#1144333).
- cifs: Mask off signals when sending SMB packets (bsc#1144333).
- cifs: Minor Kconfig clarification (bsc#1144333).
- cifs: Move credit processing to mid callbacks for SMB3 (bsc#1144333).
- cifs: Move open file handling to writepages (bsc#1144333).
- cifs: Move unlocking pages from wdata_send_pages() (bsc#1144333).
- cifs: OFD locks do not conflict with eachothers (bsc#1051510, bsc#1144333).
- cifs: Only free DFS target list if we actually got one (bsc#1144333).
- cifs: Only send SMB2_NEGOTIATE command on new TCP connections (bsc#1144333).
- cifs: Pass page offset for calculating signature (bsc#1144333).
- cifs: Pass page offset for encrypting (bsc#1144333).
- cifs: Print message when attempting a mount (bsc#1144333).
- cifs: Properly handle auto disabling of serverino option (bsc#1144333).
- cifs: Reconnect expired SMB sessions (bnc#1060662).
- cifs: Refactor out cifs_mount() (bsc#1144333).
- cifs: Remove custom credit adjustments for SMB2 async IO (bsc#1144333).
- cifs: Reopen file before get SMB2 MTU credits for async IO (bsc#1144333).
- cifs: Respect SMB2 hdr preamble size in read responses (bsc#1144333).
- cifs: Respect reconnect in MTU credits calculations (bsc#1144333).
- cifs: Respect reconnect in non-MTU credits calculations (bsc#1144333).
- cifs: Return -EAGAIN instead of -ENOTSOCK (bsc#1144333).
- cifs: Return error code when getting file handle for writeback (bsc#1144333).
- cifs: SMBD: Add SMB Direct debug counters (bsc#1144333).
- cifs: SMBD: Add SMB Direct protocol initial values and constants (bsc#1144333).
- cifs: SMBD: Add parameter rdata to smb2_new_read_req (bsc#1144333).
- cifs: SMBD: Add rdma mount option (bsc#1144333).
- cifs: SMBD: Disable signing on SMB direct transport (bsc#1144333).
- cifs: SMBD: Do not call ib_dereg_mr on invalidated memory registration (bsc#1144333).
- cifs: SMBD: Establish SMB Direct connection (bsc#1144333).
- cifs: SMBD: Fix the definition for SMB2_CHANNEL_RDMA_V1_INVALIDATE (bsc#1144333).
- cifs: SMBD: Implement RDMA memory registration (bsc#1144333).
- cifs: SMBD: Implement function to create a SMB Direct connection (bsc#1144333).
- cifs: SMBD: Implement function to destroy a SMB Direct connection (bsc#1144333).
- cifs: SMBD: Implement function to receive data via RDMA receive (bsc#1144333).
- cifs: SMBD: Implement function to reconnect to a SMB Direct transport (bsc#1144333).
- cifs: SMBD: Implement function to send data via RDMA send (bsc#1144333).
- cifs: SMBD: Read correct returned data length for RDMA write (SMB read) I/O (bsc#1144333).
- cifs: SMBD: Set SMB Direct maximum read or write size for I/O (bsc#1144333).
- cifs: SMBD: Support page offset in RDMA recv (bsc#1144333).
- cifs: SMBD: Support page offset in RDMA send (bsc#1144333).
- cifs: SMBD: Support page offset in memory registration (bsc#1144333).
- cifs: SMBD: Upper layer connects to SMBDirect session (bsc#1144333).
- cifs: SMBD: Upper layer destroys SMB Direct session on shutdown or umount (bsc#1144333).
- cifs: SMBD: Upper layer performs SMB read via RDMA write through memory registration (bsc#1144333).
- cifs: SMBD: Upper layer performs SMB write via RDMA read through memory registration (bsc#1144333).
- cifs: SMBD: Upper layer receives data via RDMA receive (bsc#1144333).
- cifs: SMBD: Upper layer reconnects to SMB Direct session (bsc#1144333).
- cifs: SMBD: Upper layer sends data via RDMA send (bsc#1144333).
- cifs: SMBD: _smbd_get_connection() can be static (bsc#1144333).
- cifs: SMBD: export protocol initial values (bsc#1144333).
- cifs: SMBD: fix spelling mistake: faield and legnth (bsc#1144333).
- cifs: SMBD: work around gcc -Wmaybe-uninitialized warning (bsc#1144333).
- cifs: Save TTL value when parsing DFS referrals (bsc#1144333).
- cifs: Select all required crypto modules (bsc#1085536, bsc#1144333).
- cifs: Set reconnect instance to one initially (bsc#1144333).
- cifs: Show locallease in /proc/mounts for cifs shares mounted with locallease feature (bsc#1144333).
- cifs: Silence uninitialized variable warning (bsc#1144333).
- cifs: Skip any trailing backslashes from UNC (bsc#1144333).
- cifs: Try to acquire credits at once for compound requests (bsc#1144333).
- cifs: Use GFP_ATOMIC when a lock is held in cifs_mount() (bsc#1144333).
- cifs: Use ULL suffix for 64-bit constant (bsc#1051510, bsc#1144333).
- cifs: Use correct packet length in SMB2_TRANSFORM header (bsc#1144333).
- cifs: Use kmemdup in SMB2_ioctl_init() (bsc#1144333).
- cifs: Use kmemdup rather than duplicating its implementation in smb311_posix_mkdir() (bsc#1144333).
- cifs: Use kzfree() to free password (bsc#1144333).
- cifs: Use offset when reading pages (bsc#1144333).
- cifs: Use smb 2 - 3 and cifsacl mount options getacl functions (bsc#1051510, bsc#1144333).
- cifs: Use smb 2 - 3 and cifsacl mount options setacl function (bsc#1051510, bsc#1144333).
- cifs: When sending data on socket, pass the correct page offset (bsc#1144333).
- cifs: a smb2_validate_and_copy_iov failure does not mean the handle is invalid (bsc#1144333).
- cifs: add .splice_write (bsc#1144333).
- cifs: add IOCTL for QUERY_INFO passthrough to userspace (bsc#1144333).
- cifs: add ONCE flag for cifs_dbg type (bsc#1144333).
- cifs: add SFM mapping for 0x01-0x1F (bsc#1144333).
- cifs: add SMB2_close_init()/SMB2_close_free() (bsc#1144333).
- cifs: add SMB2_ioctl_init/free helpers to be used with compounding (bsc#1144333).
- cifs: add SMB2_query_info_[init|free]() (bsc#1144333).
- cifs: add a new SMB2_close_flags function (bsc#1144333).
- cifs: add a smb2_compound_op and change QUERY_INFO to use it (bsc#1144333).
- cifs: add a timeout argument to wait_for_free_credits (bsc#1144333).
- cifs: add a warning if we try to to dequeue a deleted mid (bsc#1144333).
- cifs: add compound_send_recv() (bsc#1144333).
- cifs: add credits from unmatched responses/messages (bsc#1144333).
- cifs: add debug output to show nocase mount option (bsc#1144333).
- cifs: add fiemap support (bsc#1144333).
- cifs: add iface info to struct cifs_ses (bsc#1144333).
- cifs: add lease tracking to the cached root fid (bsc#1144333).
- cifs: add missing GCM module dependency (bsc#1144333).
- cifs: add missing debug entries for kconfig options (bsc#1051510, bsc#1144333).
- cifs: add missing support for ACLs in SMB 3.11 (bsc#1051510, bsc#1144333).
- cifs: add pdu_size to the TCP_Server_Info structure (bsc#1144333).
- cifs: add resp_buf_size to the mid_q_entry structure (bsc#1144333).
- cifs: add server argument to the dump_detail method (bsc#1144333).
- cifs: add server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- cifs: add sha512 secmech (bsc#1051510, bsc#1144333).
- cifs: add spinlock for the openFileList to cifsInodeInfo (bsc#1144333).
- cifs: add support for SEEK_DATA and SEEK_HOLE (bsc#1144333).
- cifs: add support for ioctl on directories (bsc#1144333).
- cifs: address trivial coverity warning (bsc#1144333).
- cifs: allow calling SMB2_xxx_free(NULL) (bsc#1144333).
- cifs: allow disabling less secure legacy dialects (bsc#1144333).
- cifs: allow guest mounts to work for smb3.11 (bsc#1051510, bsc#1144333).
- cifs: always add credits back for unsolicited PDUs (bsc#1144333).
- cifs: auto disable 'serverino' in dfs mounts (bsc#1144333).
- cifs: avoid a kmalloc in smb2_send_recv/SendReceive2 for the common case (bsc#1144333).
- cifs: cache FILE_ALL_INFO for the shared root handle (bsc#1144333).
- cifs: change SMB2_OP_RENAME and SMB2_OP_HARDLINK to use compounding (bsc#1144333).
- cifs: change SMB2_OP_SET_EOF to use compounding (bsc#1144333).
- cifs: change SMB2_OP_SET_INFO to use compounding (bsc#1144333).
- cifs: change mkdir to use a compound (bsc#1144333).
- cifs: change smb2_get_data_area_len to take a smb2_sync_hdr as argument (bsc#1144333).
- cifs: change smb2_query_eas to use the compound query-info helper (bsc#1144333).
- cifs: change unlink to use a compound (bsc#1144333).
- cifs: change validate_buf to validate_iov (bsc#1144333).
- cifs: change wait_for_free_request() to take flags as argument (bsc#1144333).
- cifs: check CIFS_MOUNT_NO_DFS when trying to reuse existing sb (bsc#1144333).
- cifs: check MaxPathNameComponentLength != 0 before using it (bsc#1085536, bsc#1144333).
- cifs: check for STATUS_USER_SESSION_DELETED (bsc#1112902, bsc#1144333).
- cifs: check if SMB2 PDU size has been padded and suppress the warning (bsc#1144333).
- cifs: check kmalloc before use (bsc#1051510, bsc#1144333).
- cifs: check kzalloc return (bsc#1144333).
- cifs: check ntwrk_buf_start for NULL before dereferencing it (bsc#1144333).
- cifs: check rsp for NULL before dereferencing in SMB2_open (bsc#1085536, bsc#1144333).
- cifs: cifs_read_allocate_pages: do not iterate through whole page array on ENOMEM (bsc#1144333).
- cifs: clean up indentation, replace spaces with tab (bsc#1144333).
- cifs: cleanup smb2ops.c and normalize strings (bsc#1144333).
- cifs: complete PDU definitions for interface queries (bsc#1144333).
- cifs: connect to servername instead of IP for IPC$ share (bsc#1051510, bsc#1144333).
- cifs: create SMB2_open_init()/SMB2_open_free() helpers (bsc#1144333).
- cifs: create a define for how many iovs we need for an SMB2_open() (bsc#1144333).
- cifs: create a define for the max number of iov we need for a SMB2 set_info (bsc#1144333).
- cifs: create a helper function for compound query_info (bsc#1144333).
- cifs: create helpers for SMB2_set_info_init/free() (bsc#1144333).
- cifs: do not allow creating sockets except with SMB1 posix exensions (bsc#1102097, bsc#1144333).
- cifs: do not attempt cifs operation on smb2+ rename error (bsc#1144333).
- cifs: do not dereference smb_file_target before null check (bsc#1051510, bsc#1144333).
- cifs: do not log STATUS_NOT_FOUND errors for DFS (bsc#1051510, bsc#1144333).
- cifs: do not return atime less than mtime (bsc#1144333).
- cifs: do not send invalid input buffer on QUERY_INFO requests (bsc#1144333).
- cifs: do not show domain= in mount output when domain is empty (bsc#1144333).
- cifs: do not use __constant_cpu_to_le32() (bsc#1144333).
- cifs: document tcon/ses/server refcount dance (bsc#1144333).
- cifs: dump IPC tcon in debug proc file (bsc#1071306, bsc#1144333).
- cifs: dump every session iface info (bsc#1144333).
- cifs: fallback to older infolevels on findfirst queryinfo retry (bsc#1144333).
- cifs: fix GlobalMid_Lock bug in cifs_reconnect (bsc#1144333).
- cifs: fix NULL deref in SMB2_read (bsc#1085539, bsc#1144333).
- cifs: fix POSIX lock leak and invalid ptr deref (bsc#1114542, bsc#1144333).
- cifs: fix SMB1 breakage (bsc#1144333).
- cifs: fix a buffer leak in smb2_query_symlink (bsc#1144333).
- cifs: fix a credits leak for compund commands (bsc#1144333).
- cifs: fix bi-directional fsctl passthrough calls (bsc#1144333).
- cifs: fix build break when CONFIG_CIFS_DEBUG2 enabled (bsc#1144333).
- cifs: fix build errors for SMB_DIRECT (bsc#1144333).
- cifs: fix circular locking dependency (bsc#1064701, bsc#1144333).
- cifs: fix computation for MAX_SMB2_HDR_SIZE (bsc#1144333).
- cifs: fix confusing warning message on reconnect (bsc#1144333).
- cifs: fix crash in cifs_dfs_do_automount (bsc#1144333).
- cifs: fix crash in smb2_compound_op()/smb2_set_next_command() (bsc#1144333).
- cifs: fix crash querying symlinks stored as reparse-points (bsc#1144333).
- cifs: fix credits leak for SMB1 oplock breaks (bsc#1144333).
- cifs: fix deadlock in cached root handling (bsc#1144333).
- cifs: fix encryption in SMB3.1.1 (bsc#1144333).
- cifs: fix handle leak in smb2_query_symlink() (bsc#1144333).
- cifs: fix incorrect handling of smb2_set_sparse() return in smb3_simple_falloc (bsc#1144333).
- cifs: fix kref underflow in close_shroot() (bsc#1144333).
- cifs: fix memory leak and remove dead code (bsc#1144333).
- cifs: fix memory leak in SMB2_open() (bsc#1112894, bsc#1144333).
- cifs: fix memory leak in SMB2_read (bsc#1144333).
- cifs: fix memory leak of an allocated cifs_ntsd structure (bsc#1144333).
- cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case (bsc#1144333).
- cifs: fix page reference leak with readv/writev (bsc#1144333).
- cifs: fix panic in smb2_reconnect (bsc#1144333).
- cifs: fix parsing of symbolic link error response (bsc#1144333).
- cifs: fix return value for cifs_listxattr (bsc#1051510, bsc#1144333).
- cifs: fix rmmod regression in cifs.ko caused by force_sig changes (bsc#1144333).
- cifs: fix sha512 check in cifs_crypto_secmech_release (bsc#1051510, bsc#1144333).
- cifs: fix signed/unsigned mismatch on aio_read patch (bsc#1144333).
- cifs: fix smb3_zero_range for Azure (bsc#1144333).
- cifs: fix smb3_zero_range so it can expand the file-size when required (bsc#1144333).
- cifs: fix sparse warning on previous patch in a few printks (bsc#1144333).
- cifs: fix spelling mistake, EACCESS -&gt; EACCES (bsc#1144333).
- cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (bsc#1144333).
- cifs: fix typo in cifs_dbg (bsc#1144333).
- cifs: fix typo in debug message with struct field ia_valid (bsc#1144333).
- cifs: fix uninitialized ptr deref in smb2 signing (bsc#1144333).
- cifs: fix use-after-free of the lease keys (bsc#1144333).
- cifs: fix wrapping bugs in num_entries() (bsc#1051510, bsc#1144333).
- cifs: flush before set-info if we have writeable handles (bsc#1144333).
- cifs: handle large EA requests more gracefully in smb2+ (bsc#1144333).
- cifs: handle netapp error codes (bsc#1136261).
- cifs: hide unused functions (bsc#1051510, bsc#1144333).
- cifs: hide unused functions (bsc#1051510, bsc#1144333).
- cifs: implement v3.11 preauth integrity (bsc#1051510, bsc#1144333).
- cifs: integer overflow in in SMB2_ioctl() (bsc#1051510, bsc#1144333).
- cifs: invalidate cache when we truncate a file (bsc#1051510, bsc#1144333).
- cifs: keep FileInfo handle live during oplock break (bsc#1106284, bsc#1131565, bsc#1144333).
- cifs: limit amount of data we request for xattrs to CIFSMaxBufSize (bsc#1144333).
- cifs: make 'nodfs' mount opt a superblock flag (bsc#1051510, bsc#1144333).
- cifs: make IPC a regular tcon (bsc#1071306, bsc#1144333).
- cifs: make arrays static const, reduces object code size (bsc#1144333).
- cifs: make minor clarifications to module params for cifs.ko (bsc#1144333).
- cifs: make mknod() an smb_version_op (bsc#1144333).
- cifs: make rmdir() use compounding (bsc#1144333).
- cifs: make smb_send_rqst take an array of requests (bsc#1144333).
- cifs: minor clarification in comments (bsc#1144333).
- cifs: minor updates to module description for cifs.ko (bsc#1144333).
- cifs: move default port definitions to cifsglob.h (bsc#1144333).
- cifs: move large array from stack to heap (bsc#1144333).
- cifs: only wake the thread for the very last PDU in a compound (bsc#1144333).
- cifs: parse and store info on iface queries (bsc#1144333).
- cifs: pass flags down into wait_for_free_credits() (bsc#1144333).
- cifs: pass page offsets on SMB1 read/write (bsc#1144333).
- cifs: prevent integer overflow in nxt_dir_entry() (bsc#1051510, bsc#1144333).
- cifs: prevent starvation in wait_for_free_credits for multi-credit requests (bsc#1144333).
- cifs: print CIFSMaxBufSize as part of /proc/fs/cifs/DebugData (bsc#1144333).
- cifs: protect against server returning invalid file system block size (bsc#1144333).
- cifs: prototype declaration and definition for smb 2 - 3 and cifsacl mount options (bsc#1051510, bsc#1144333).
- cifs: prototype declaration and definition to set acl for smb 2 - 3 and cifsacl mount options (bsc#1051510, bsc#1144333).
- cifs: push rfc1002 generation down the stack (bsc#1144333).
- cifs: read overflow in is_valid_oplock_break() (bsc#1144333).
- cifs: refactor and clean up arguments in the reparse point parsing (bsc#1144333).
- cifs: refactor crypto shash/sdesc allocation&amp;free (bsc#1051510, bsc#1144333).
- cifs: release auth_key.response for reconnect (bsc#1085536, bsc#1144333).
- cifs: release cifs root_cred after exit_cifs (bsc#1085536, bsc#1144333).
- cifs: remove coverity warning in calc_lanman_hash (bsc#1144333).
- cifs: remove header_preamble_size where it is always 0 (bsc#1144333).
- cifs: remove redundant duplicated assignment of pointer 'node' (bsc#1144333).
- cifs: remove rfc1002 hardcoded constants from cifs_discard_remaining_data() (bsc#1144333).
- cifs: remove rfc1002 header from all SMB2 response structures (bsc#1144333).
- cifs: remove rfc1002 header from smb2 read/write requests (bsc#1144333).
- cifs: remove rfc1002 header from smb2_close_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_create_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_echo_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_flush_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_ioctl_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_lease_ack (bsc#1144333).
- cifs: remove rfc1002 header from smb2_lock_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_logoff_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_negotiate_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_oplock_break we get from server (bsc#1144333).
- cifs: remove rfc1002 header from smb2_query_directory_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_query_info_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_sess_setup_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_set_info_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_tree_connect_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_tree_disconnect_req (bsc#1144333).
- cifs: remove set but not used variable 'cifs_sb' (bsc#1144333).
- cifs: remove set but not used variable 'sep' (bsc#1144333).
- cifs: remove set but not used variable 'server' (bsc#1144333).
- cifs: remove set but not used variable 'smb_buf' (bsc#1144333).
- cifs: remove small_smb2_init (bsc#1144333).
- cifs: remove smb2_send_recv() (bsc#1144333).
- cifs: remove struct smb2_hdr (bsc#1144333).
- cifs: remove struct smb2_oplock_break_rsp (bsc#1144333).
- cifs: remove the is_falloc argument to SMB2_set_eof (bsc#1144333).
- cifs: remove unused stats (bsc#1144333).
- cifs: remove unused value pointed out by Coverity (bsc#1144333).
- cifs: remove unused variable from SMB2_read (bsc#1144333).
- cifs: rename and clarify CIFS_ASYNC_OP and CIFS_NO_RESP (bsc#1144333).
- cifs: replace a 4 with server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- cifs: replace snprintf with scnprintf (bsc#1144333).
- cifs: return -ENODATA when deleting an xattr that does not exist (bsc#1144333).
- cifs: return correct errors when pinning memory failed for direct I/O (bsc#1144333).
- cifs: return error on invalid value written to cifsFYI (bsc#1144333).
- cifs: set *resp_buf_type to NO_BUFFER on error (bsc#1144333).
- cifs: set mapping error when page writeback fails in writepage or launder_pages (bsc#1144333).
- cifs: set oparms.create_options rather than or'ing in CREATE_OPEN_BACKUP_INTENT (bsc#1144333).
- cifs: show 'soft' in the mount options for hard mounts (bsc#1144333).
- cifs: show the w bit for writeable /proc/fs/cifs/* files (bsc#1144333).
- cifs: silence compiler warnings showing up with gcc-8.0.0 (bsc#1090734, bsc#1144333).
- cifs: simple stats should always be enabled (bsc#1144333).
- cifs: simplify code by removing CONFIG_CIFS_ACL ifdef  (bsc#1144333). - Update config files.
- cifs: simplify how we handle credits in compound_send_recv() (bsc#1144333).
- cifs: smb2 commands can not be negative, remove confusing check (bsc#1144333).
- cifs: smb2ops: Fix NULL check in smb2_query_symlink (bsc#1144333).
- cifs: smb2ops: Fix listxattr() when there are no EAs (bsc#1051510, bsc#1144333).
- cifs: smb2pdu: Fix potential NULL pointer dereference (bsc#1144333).
- cifs: smbd: Avoid allocating iov on the stack (bsc#1144333).
- cifs: smbd: Check for iov length on sending the last iov (bsc#1144333).
- cifs: smbd: Do not destroy transport on RDMA disconnect (bsc#1144333).
- cifs: smbd: Do not use RDMA read/write when signing is used (bsc#1144333).
- cifs: smbd: Dump SMB packet when configured (bsc#1144333).
- cifs: smbd: Enable signing with smbdirect (bsc#1144333).
- cifs: smbd: Indicate to retry on transport sending failure (bsc#1144333).
- cifs: smbd: Retry on memory registration failure (bsc#1144333).
- cifs: smbd: Return EINTR when interrupted (bsc#1144333).
- cifs: smbd: avoid reconnect lockup (bsc#1144333).
- cifs: smbd: depend on INFINIBAND_ADDR_TRANS (bsc#1144333).
- cifs: smbd: disconnect transport on RDMA errors (bsc#1144333).
- cifs: smbd: take an array of reqeusts when sending upper layer data (bsc#1144333).
- cifs: start DFS cache refresher in cifs_mount() (bsc#1144333).
- cifs: store the leaseKey in the fid on SMB2_open (bsc#1051510, bsc#1144333).
- cifs: suppress some implicit-fallthrough warnings (bsc#1144333).
- cifs: track writepages in vfs operation counters (bsc#1144333).
- cifs: update __smb_send_rqst() to take an array of requests (bsc#1144333).
- cifs: update calc_size to take a server argument (bsc#1144333).
- cifs: update init_sg, crypt_message to take an array of rqst (bsc#1144333).
- cifs: update internal module number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.12 (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.12 (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.14 (bsc#1144333).
- cifs: update module internal version number (bsc#1144333).
- cifs: update multiplex loop to handle compounded responses (bsc#1144333).
- cifs: update receive_encrypted_standard to handle compounded responses (bsc#1144333).
- cifs: update smb2_calc_size to use smb2_sync_hdr instead of smb2_hdr (bsc#1144333).
- cifs: update smb2_check_message to handle PDUs without a 4 byte length header (bsc#1144333).
- cifs: update smb2_queryfs() to use compounding (bsc#1144333).
- cifs: use a compound for setting an xattr (bsc#1144333).
- cifs: use a refcount to protect open/closing the cached file handle (bsc#1144333).
- cifs: use correct format characters (bsc#1144333).
- cifs: use tcon_ipc instead of use_ipc parameter of SMB2_ioctl (bsc#1071306, bsc#1144333).
- cifs: use the correct length when pinning memory for direct I/O for write (bsc#1144333).
- cifs: wait_for_free_credits() make it possible to wait for &gt;=1 credits (bsc#1144333).
- cifs: we can not use small padding iovs together with encryption (bsc#1144333).
- cifs: zero sensitive data when freeing (bsc#1087092, bsc#1144333).
- cifs: zero-range does not require the file is sparse (bsc#1144333).
- cifs:smbd Use the correct DMA direction when sending data (bsc#1144333).
- cifs:smbd When reconnecting to server, call smbd_destroy() after all MIDs have been called (bsc#1144333).
- cifs_lookup(): cifs_get_inode_...() never returns 0 with *inode left NULL (bsc#1144333).
- cifs_lookup(): switch to d_splice_alias() (bsc#1144333).
- clk: Export clk_bulk_prepare() (bsc#1144813).
- clk: add clk_bulk_get accessories (bsc#1144813).
- clk: bcm2835: remove pllb (jsc#SLE-7294).
- clk: bcm283x: add driver interfacing with Raspberry Pi's firmware (jsc#SLE-7294).
- clk: bulk: silently error out on EPROBE_DEFER (bsc#1144718,bsc#1144813).
- clk: raspberrypi: register platform device for raspberrypi-cpufreq (jsc#SLE-7294).
- clk: renesas: cpg-mssr: Fix reset control race condition (bsc#1051510).
- clk: rockchip: Add 1.6GHz PLL rate for rk3399 (bsc#1144718,bsc#1144813).
- clk: rockchip: assign correct id for pclk_ddr and hclk_sd in rk3399 (bsc#1144718,bsc#1144813).
- compat_ioctl: pppoe: fix PPPOEIOCSFWD handling (bsc#1051510).
- config: arm64: Remove CONFIG_ARM64_MODULE_CMODEL_LARGE Option removed by patches in bsc#1148219
- coredump: split pipe command whitespace before expanding template (bsc#1051510).
- cpu/speculation: Warn on unsupported mitigations= parameter (bsc#1114279).
- cpufreq: add driver for Raspberry Pi (jsc#SLE-7294).
- cpufreq: dt: Try freeing static OPPs only if we have added them (jsc#SLE-7294).
- crypto: ccp - Add support for valid authsize values less than 16 (bsc#1051510).
- crypto: ccp - Fix oops by properly managing allocated structures (bsc#1051510).
- crypto: ccp - Ignore tag length when decrypting GCM ciphertext (bsc#1051510).
- crypto: ccp - Ignore unconfigured CCP device on suspend/resume (bnc#1145934).
- crypto: ccp - Validate buffer lengths for copy operations (bsc#1051510).
- crypto: talitos - fix skcipher failure due to wrong output IV (bsc#1051510).
- crypto: virtio - Read crypto services and algorithm masks (jsc#SLE-5844 jsc#SLE-6331 bsc#1145446 LTC#175307).
- crypto: virtio - Register an algo only if it's supported (jsc#SLE-5844 jsc#SLE-6331 bsc#1145446 LTC#175307).
- cx82310_eth: fix a memory leak bug (bsc#1051510).
- dax: dax_layout_busy_page() should not unmap cow pages (bsc#1148698).
- devres: always use dev_name() in devm_ioremap_resource() (git fixes).
- dfs_cache: fix a wrong use of kfree in flush_cache_ent() (bsc#1144333).
- dm btree: fix order of block initialization in btree_split_beneath (git fixes).
- dm bufio: fix deadlock with loop device (git fixes).
- dm cache metadata: Fix loading discard bitset (git fixes).
- dm crypt: do not overallocate the integrity tag space (git fixes).
- dm crypt: fix parsing of extended IV arguments (git fixes).
- dm delay: fix a crash when invalid device is specified (git fixes).
- dm integrity: change memcmp to strncmp in dm_integrity_ctr (git fixes).
- dm integrity: correctly calculate the size of metadata area (git fixes).
- dm integrity: fix a crash due to BUG_ON in __journal_read_write() (git fixes).
- dm integrity: fix deadlock with overlapping I/O (git fixes).
- dm integrity: limit the rate of error messages (git fixes).
- dm kcopyd: always complete failed jobs (git fixes).
- dm raid: add missing cleanup in raid_ctr() (git fixes).
- dm space map metadata: fix missing store of apply_bops() return value (git fixes).
- dm table: fix invalid memory accesses with too high sector number (git fixes).
- dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (git fixes).
- dm thin: fix bug where bio that overwrites thin block ignores FUA (git fixes).
- dm thin: fix passdown_double_checking_shared_status() (git fixes).
- dm zoned: Fix zone report handling (git fixes).
- dm zoned: Silence a static checker warning (git fixes).
- dm zoned: fix potential NULL dereference in dmz_do_reclaim() (git fixes).
- dm zoned: fix zone state management race (git fixes).
- dm zoned: improve error handling in i/o map code (git fixes).
- dm zoned: improve error handling in reclaim (git fixes).
- dm zoned: properly handle backing device failure (git fixes).
- dm: fix to_sector() for 32bit (git fixes).
- dm: revert 8f50e358153d ('dm: limit the max bio size as BIO_MAX_PAGES * PAGE_SIZE') (git fixes).
- dma-buf: balance refcount inbalance (bsc#1051510).
- dmaengine: rcar-dmac: Reject zero-length slave DMA requests (bsc#1051510).
- documentation/networking: fix default_ttl typo in mpls-sysctl (bsc#1051510).
- documentation: Add nospectre_v1 parameter (bsc#1051510).
- documentation: Update Documentation for iommu.passthrough (bsc#1136039).
- driver core: Fix use-after-free and double free on glue directory (bsc#1131281).
- drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl (bsc#1051510).
- drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings (bsc#1051510).
- drm/amd/display: Always allocate initial connector state state (bsc#1111666).
- drm/amd/display: Disable ABM before destroy ABM struct (bsc#1111666).
- drm/amd/display: Fill prescale_params-&gt;scale for RGB565 (bsc#1111666).
- drm/amd/display: Fix dc_create failure handling and 666 color depths (bsc#1111666).
- drm/amd/display: Increase size of audios array (bsc#1111666).
- drm/amd/display: Only enable audio if speaker allocation exists (bsc#1111666).
- drm/amd/display: Remove redundant non-zero and overflow check (bsc#1145946).
- drm/amd/display: Wait for backlight programming completion in set backlight level (bsc#1111666).
- drm/amd/display: fix compilation error (bsc#1111666).
- drm/amd/display: num of sw i2c/aux engines less than num of connectors (bsc#1145946).
- drm/amd/display: use encoder's engine id to find matched free audio device (bsc#1111666).
- drm/amdgpu/psp: move psp version specific function pointers to (bsc#1135642)
- drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE (bsc#1111666).
- drm/amdgpu: Add APTX quirk for Dell Latitude 5495 (bsc#1142635)
- drm/amdgpu: added support 2nd UVD instance (bsc#1143331).
- drm/amdgpu: fix a potential information leaking bug (bsc#1111666).
- drm/amdgpu:change VEGA booting with firmware loaded by PSP (bsc#1143331).
- drm/amdkfd: Fix a potential memory leak (bsc#1111666).
- drm/amdkfd: Fix sdma queue map issue (bsc#1111666).
- drm/bridge: lvds-encoder: Fix build error while CONFIG_DRM_KMS_HELPER=m (bsc#1111666).
- drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz (bsc#1051510).
- drm/bridge: tc358767: read display_props in get_modes() (bsc#1051510).
- drm/crc-debugfs: Also sprinkle irqrestore over early exits (bsc#1051510).
- drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry (bsc#1051510).
- drm/edid: parse CEA blocks embedded in DisplayID (bsc#1111666).
- drm/etnaviv: add missing failure path to destroy suballoc (bsc#1135642)
- drm/exynos: fix missing decrement of retry counter (bsc#1111666).
- drm/i915/gvt: fix incorrect cache entry for guest page mapping (bsc#1111666).
- drm/i915/perf: ensure we keep a reference on the driver (bsc#1051510).
- drm/i915/perf: ensure we keep a reference on the driver (bsc#1142635)
- drm/i915/perf: fix ICL perf register offsets (bsc#1111666).
- drm/i915/userptr: Acquire the page lock around set_page_dirty() (bsc#1051510).
- drm/i915: Do not deballoon unused ggtt drm_mm_node in linux guest (bsc#1142635)
- drm/i915: Fix GEN8_MCR_SELECTOR programming (bsc#1111666).
- drm/i915: Fix HW readout for crtc_clock in HDMI mode (bsc#1111666).
- drm/i915: Fix the TBT AUX power well enabling (bsc#1111666).
- drm/i915: Fix wrong escape clock divisor init for GLK (bsc#1051510).
- drm/i915: Fix wrong escape clock divisor init for GLK (bsc#1142635)
- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- drm/i915: Revert i915 userptr page lock patch (bsc#1145051)
- drm/imx: notify drm core before sending event during crtc disable (bsc#1135642)
- drm/imx: only send event on crtc disable if kept disabled (bsc#1135642)
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver (bsc#1135642)
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable() (bsc#1135642)
- drm/mediatek: clear num_pipes when unbind driver (bsc#1135642)
- drm/mediatek: fix unbind functions (bsc#1135642)
- drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto (bsc#1111666).
- drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto (bsc#1142635)
- drm/mediatek: unbind components in mtk_drm_unbind() (bsc#1135642)
- drm/mediatek: use correct device to import PRIME buffers (bsc#1111666).
- drm/mediatek: use correct device to import PRIME buffers (bsc#1142635)
- drm/msm/mdp5: Fix mdp5_cfg_init error return (bsc#1142635)
- drm/msm: Depopulate platform on probe failure (bsc#1051510).
- drm/nouveau: Do not retry infinitely when receiving no data on i2c (bsc#1142635)
- drm/nouveau: fix memory leak in nouveau_conn_reset() (bsc#1051510).
- drm/panel: simple: Fix panel_simple_dsi_probe (bsc#1051510).
- drm/rockchip: Suspend DP late (bsc#1051510).
- drm/rockchip: Suspend DP late (bsc#1142635)
- drm/udl: introduce a macro to convert dev to udl. (bsc#1113722)
- drm/udl: move to embedding drm device inside udl device. (bsc#1113722)
- drm/virtio: Add memory barriers for capset cache (bsc#1051510).
- drm/vmwgfx: Use the backdoor port if the HB port is not available (bsc#1135642)
- drm/vmwgfx: fix a warning due to missing dma_parms (bsc#1135642)
- drm/vmwgfx: fix memory leak when too many retries have occurred (bsc#1051510).
- drm: msm: Fix add_gpu_components (bsc#1051510).
- drm: silence variable 'conn' set but not used (bsc#1051510).
- eCryptfs: fix a couple type promotion bugs (bsc#1051510).
- edac, amd64: Add Family 17h, models 10h-2fh support (bsc#1112178).
- edac/amd64: Add Family 17h Model 30h PCI IDs (bsc#1112178).
- edac/amd64: Adjust printed chip select sizes when interleaved (bsc#1131489).
- edac/amd64: Cache secondary Chip Select registers (bsc#1131489).
- edac/amd64: Decode syndrome before translating address (bsc#1131489).
- edac/amd64: Find Chip Select memory size using Address Mask (bsc#1131489).
- edac/amd64: Initialize DIMM info for systems with more than two channels (bsc#1131489).
- edac/amd64: Recognize DRAM device type ECC capability (bsc#1131489).
- edac/amd64: Recognize x16 symbol size (bsc#1131489).
- edac/amd64: Set maximum channel layer size depending on family (bsc#1131489).
- edac/amd64: Support asymmetric dual-rank DIMMs (bsc#1131489).
- edac/amd64: Support more than two Unified Memory Controllers (bsc#1131489).
- edac/amd64: Support more than two controllers for chip selects handling (bsc#1131489).
- edac/amd64: Use a macro for iterating over Unified Memory Controllers (bsc#1131489).
- edac: Fix global-out-of-bounds write when setting edac_mc_poll_msec (bsc#1114279).
- efi/bgrt: Drop BGRT status field reserved bits check (bsc#1051510).
- ehea: Fix a copy-paste err in ehea_init_port_res (bsc#1051510).
- ext4: use jbd2_inode dirty range scoping (bsc#1148616).
- firmware: raspberrypi: register clk device (jsc#SLE-7294).
- firmware: ti_sci: Always request response from firmware (bsc#1051510).
- fix incorrect error code mapping for OBJECTID_NOT_FOUND (bsc#1144333).
- fix smb3-encryption breakage when CONFIG_DEBUG_SG=y (bsc#1051510, bsc#1144333).
- fix struct ufs_req removal of unused field (git-fixes).
- floppy: fix invalid pointer dereference in drive_name (bsc#1111666).
- floppy: fix out-of-bounds read in next_valid_format (bsc#1111666).
- fs/*/Kconfig: drop links to 404-compliant http://acl.bestbits.at (bsc#1144333).
- fs/cifs/cifsacl.c Fixes typo in a comment (bsc#1144333).
- fs/cifs/smb2pdu.c: fix buffer free in SMB2_ioctl_free (bsc#1144333).
- fs/cifs: Simplify ib_post_(send|recv|srq_recv)() calls (bsc#1144333).
- fs/cifs: do not translate SFM_SLASH (U+F026) to backslash (bsc#1144333).
- fs/cifs: fix uninitialised variable warnings (bsc#1144333).
- fs/cifs: require sha512 (bsc#1051510, bsc#1144333).
- fs/cifs: suppress a string overflow warning (bsc#1144333).
- fs/xfs: Fix return code of xfs_break_leased_layouts() (bsc#1148031).
- fs: cifs: Drop unlikely before IS_ERR(_OR_NULL) (bsc#1144333).
- fs: cifs: Kconfig: pedantic formatting (bsc#1144333).
- fs: cifs: Replace _free_xid call in cifs_root_iget function (bsc#1144333).
- fs: cifs: cifsssmb: Change return type of convert_ace_to_cifs_ace (bsc#1144333).
- fs: xfs: xfs_log: Do not use KM_MAYFAIL at xfs_log_reserve() (bsc#1148033).
- fsl/fman: Use GFP_ATOMIC in {memac,tgec}_add_hash_mac_address() (bsc#1051510).
- ftrace: Check for empty hash and comment the race with registering probes (bsc#1149418).
- ftrace: Check for successful allocation of hash (bsc#1149424).
- ftrace: Fix NULL pointer dereference in t_probe_next() (bsc#1149413).
- gpio: Fix build error of function redefinition (bsc#1051510).
- gpio: gpio-omap: add check for off wake capable gpios (bsc#1051510).
- gpio: mxs: Get rid of external API call (bsc#1051510).
- gpio: omap: ensure irq is enabled before wakeup (bsc#1051510).
- gpio: pxa: handle corner case of unprobed device (bsc#1051510).
- gpiolib: fix incorrect IRQ requesting of an active-low lineevent (bsc#1051510).
- gpiolib: never report open-drain/source lines as 'input' to user-space (bsc#1051510).
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM (bsc#1142635)
- hid: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT (bsc#1051510).
- hid: Add quirk for HP X1200 PIXART OEM mouse (bsc#1051510).
- hid: cp2112: prevent sleeping function called from invalid context (bsc#1051510).
- hid: hiddev: avoid opening a disconnected device (bsc#1051510).
- hid: hiddev: do cleanup in failure of opening a device (bsc#1051510).
- hid: holtek: test for sanity of intfdata (bsc#1051510).
- hid: sony: Fix race condition between rumble and device remove (bsc#1051510).
- hid: wacom: Correct distance scale for 2nd-gen Intuos devices (bsc#1142635).
- hid: wacom: correct misreported EKR ring values (bsc#1142635).
- hid: wacom: fix bit shift for Cintiq Companion 2 (bsc#1051510).
- hpet: Fix division by zero in hpet_time_div() (bsc#1051510).
- hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 (bsc#1051510).
- hwmon: (nct7802) Fix wrong detection of in4 presence (bsc#1051510).
- i2c: emev2: avoid race when unregistering slave client (bsc#1051510).
- i2c: piix4: Fix port selection for AMD Family 16h Model 30h (bsc#1051510).
- i2c: qup: fixed releasing dma without flush operation completion (bsc#1051510).
- ia64: Get rid of iommu_pass_through (bsc#1136039).
- ib/mlx5: Fix MR registration flow to use UMR properly (bsc#1093205 bsc#1145678).
- ibmveth: Convert multicast list size for little-endian system (bsc#1061843).
- ibmvnic: Do not process reset during or after device removal (bsc#1149652 ltc#179635).
- ibmvnic: Unmap DMA address of TX descriptor buffers after use (bsc#1146351 ltc#180726).
- igmp: fix memory leak in igmpv3_del_delrec() (networking-stable-19_07_25).
- iio: adc: max9611: Fix misuse of GENMASK macro (bsc#1051510).
- iio: adc: max9611: Fix temperature reading in probe (bsc#1051510).
- iio: iio-utils: Fix possible incorrect mask calculation (bsc#1051510).
- improve security, move default dialect to SMB3 from old CIFS (bsc#1051510, bsc#1144333).
- include/linux/bitops.h: sanitize rotate primitives (git fixes).
- input: alps - do not handle ALPS cs19 trackpoint-only device (bsc#1051510).
- input: alps - fix a mismatch between a condition check and its comment (bsc#1051510).
- input: iforce - add sanity checks (bsc#1051510).
- input: kbtab - sanity check for endpoint type (bsc#1051510).
- input: synaptics - enable RMI mode for HP Spectre X360 (bsc#1051510).
- input: synaptics - whitelist Lenovo T580 SMBus intertouch (bsc#1051510).
- input: trackpoint - only expose supported controls for Elan, ALPS and NXP (bsc#1051510).
- intel_th: pci: Add Ice Lake NNPI support (bsc#1051510).
- intel_th: pci: Add Tiger Lake support (bsc#1051510).
- intel_th: pci: Add support for another Lewisburg PCH (bsc#1051510).
- iommu/amd: Add support for X2APIC IOMMU interrupts (bsc#1145010).
- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- iommu/amd: Move iommu_init_pci() to .init section (bsc#1149105).
- iommu/amd: Request passthrough mode from IOMMU core (bsc#1136039).
- iommu/dma: Handle SG length overflow better (bsc#1146084).
- iommu/iova: Remove stale cached32_node (bsc#1145018).
- iommu/vt-d: Request passthrough mode from IOMMU core (bsc#1136039).
- iommu: Add helpers to set/get default domain type (bsc#1136039).
- iommu: Disable passthrough mode when SME is active (bsc#1136039).
- iommu: Print default domain type on boot (bsc#1136039).
- iommu: Remember when default domain type was set on kernel command line (bsc#1136039).
- iommu: Set default domain type at runtime (bsc#1136039).
- iommu: Use Functions to set default domain type in iommu_set_def_domain_type() (bsc#1136039).
- ipip: validate header length in ipip_tunnel_xmit (git-fixes).
- ipv4: do not set IPv6 only flags to IPv4 addresses (networking-stable-19_07_25).
- irqchip/gic-v2m: Add support for Amazon Graviton variant of GICv3+GICv2m (SLE-9332).
- irqchip/gic-v3-its: fix build warnings (bsc#1144880).
- isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack (bsc#1051510).
- isdn: hfcsusb: checking idx of ep configuration (bsc#1051510).
- isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain() (bsc#1051510).
- iversion: add a routine to update a raw value with a larger one (bsc#1148133).
- iwlwifi: dbg: split iwl_fw_error_dump to two functions (bsc#1119086).
- iwlwifi: do not unmap as page memory that was mapped as single (bsc#1051510).
- iwlwifi: fix bad dma handling in page_mem dumping flow (bsc#1120902).
- iwlwifi: fw: use helper to determine whether to dump paging (bsc#1106434). Patch needed to be adjusted, because our tree does not have the global variable IWL_FW_ERROR_DUMP_PAGING
- iwlwifi: mvm: do not send GEO_TX_POWER_LIMIT on version &amp;lt; 41 (bsc#1142635).
- iwlwifi: mvm: fix an out-of-bound access (bsc#1051510).
- iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support (bsc#1142635).
- iwlwifi: pcie: do not service an interrupt that was masked (bsc#1142635).
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X (bsc#1142635).
- ixgbe: fix possible deadlock in ixgbe_service_task() (bsc#1113994).
- jbd2: flush_descriptor(): Do not decrease buffer head's ref count (bsc#1143843).
- jbd2: introduce jbd2_inode dirty range scoping (bsc#1148616).
- kABI: Fix kABI for 'struct amd_iommu' (bsc#1145010).
- kABI: Fix kABI for x86 pci-dma code (bsc#1136039).
- kabi/severities: Exclude drivers/crypto/ccp/*
- kabi/severities: match SLE15 entry ordering.
- kasan: remove redundant initialization of variable 'real_size' (git fixes).
- kconfig/[mn]conf: handle backspace (^H) key (bsc#1051510).
- keys: Fix missing null pointer check in request_key_auth_describe() (bsc#1051510).
- kvm/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel (bsc#1133021).
- kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (bsc#1134881 bsc#1134882).
- kvm: Disallow wraparound in kvm_gfn_to_hva_cache_init (bsc#1133021).
- kvm: Fix leak vCPU's VMCS value into other pCPU (bsc#1145388).
- kvm: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC (bsc#1145408).
- kvm: PPC: Book3S HV: Fix CR0 setting in TM emulation (bsc#1061840).
- kvm: Reject device ioctls from processes other than the VM's creator (bsc#1133021).
- kvm: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value (bsc#1145393).
- kvm: VMX: Fix handling of #MC that occurs during VM-Entry (bsc#1145395).
- kvm: VMX: check CPUID before allowing read/write of IA32_XSS (bsc#1145394).
- kvm: X86: Reduce the overhead when lapic_timer_advance is disabled (bsc#1149083).
- kvm: arm/arm64: Close VMID generation race (bsc#1133021).
- kvm: arm/arm64: Convert kvm_host_cpu_state to a static per-cpu allocation (bsc#1133021).
- kvm: arm/arm64: Drop resource size check for GICV window (bsc#1133021).
- kvm: arm/arm64: Fix VMID alloc race by reverting to lock-less (bsc#1133021).
- kvm: arm/arm64: Fix lost IRQs from emulated physcial timer when blocked (bsc#1133021).
- kvm: arm/arm64: Handle CPU_PM_ENTER_FAILED (bsc#1133021).
- kvm: arm/arm64: Reduce verbosity of KVM init log (bsc#1133021).
- kvm: arm/arm64: Set dist-&gt;spis to NULL after kfree (bsc#1133021).
- kvm: arm/arm64: Skip updating PMD entry if no change (bsc#1133021).
- kvm: arm/arm64: Skip updating PTE entry if no change (bsc#1133021).
- kvm: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list (bsc#1133021).
- kvm: arm/arm64: vgic-v3: Tighten synchronization for guests using v2 on v3 (bsc#1133021).
- kvm: arm/arm64: vgic: Add missing irq_lock to vgic_mmio_read_pending (bsc#1133021).
- kvm: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy (bsc#1133021).
- kvm: arm64: Fix caching of host MDCR_EL2 value (bsc#1133021).
- kvm: mmu: Fix overlap between public and private memslots (bsc#1133021).
- kvm: nVMX: Remove unnecessary sync_roots from handle_invept (bsc#1145391).
- kvm: nVMX: Use adjusted pin controls for vmcs02 (bsc#1145392).
- kvm: nVMX: allow setting the VMFUNC controls MSR (bsc#1145389).
- kvm: nVMX: do not use dangling shadow VMCS after guest reset (bsc#1145390).
- kvm: s390: add MSA9 to cpumodel (jsc#SLE-6240).
- kvm: s390: add debug logging for cpu model subfunctions (jsc#SLE-6240).
- kvm: s390: add deflate conversion facilty to cpu model (jsc#SLE-6240).
- kvm: s390: add enhanced sort facilty to cpu model (jsc#SLE-6240 ).
- kvm: s390: add vector BCD enhancements facility to cpumodel (jsc#SLE-6240).
- kvm: s390: add vector enhancements facility 2 to cpumodel (jsc#SLE-6240).
- kvm: s390: enable MSA9 keywrapping functions depending on cpu model (jsc#SLE-6240).
- kvm: s390: implement subfunction processor calls (jsc#SLE-6240 ).
- kvm: s390: provide query function for instructions returning 32 byte (jsc#SLE-6240).
- kvm: x86/vPMU: refine kvm_pmu err msg when event creation failed (bsc#1145397).
- kvm: x86: Do not update RIP or do single-step on faulting emulation (bsc#1149104).
- kvm: x86: Unconditionally enable irqs in guest context (bsc#1145396).
- kvm: x86: degrade WARN to pr_warn_ratelimited (bsc#1145409).
- kvm: x86: fix backward migration with async_PF (bsc#1146074).
- lan78xx: Fix memory leaks (bsc#1051510).
- libata: add SG safety checks in SFF pio transfers (bsc#1051510).
- libata: do not request sense data on !ZAC ATA devices (bsc#1051510).
- libata: have ata_scsi_rw_xlat() fail invalid passthrough requests (bsc#1051510).
- libata: zpodd: Fix small read overflow in zpodd_get_mech_type() (bsc#1051510).
- libceph, rbd, ceph: move ceph_osdc_alloc_messages() calls (bsc#1135897).
- libceph, rbd: add error handling for osd_req_op_cls_init() (bsc#1135897).
- libceph, rbd: new bio handling code (aka do not clone bios) (bsc#1141450).
- libceph: ADDR2 support for monmap (bsc#1148133 bsc#1136682).
- libceph: add ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: add osd_req_op_extent_osd_data_bvecs() (bsc#1141450).
- libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer (bsc#1148133).
- libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer (bsc#1148133).
- libceph: assign cookies in linger_submit() (bsc#1135897).
- libceph: check reply num_data_items in setup_request_data() (bsc#1135897).
- libceph: correctly decode ADDR2 addresses in incremental OSD maps (bsc#1148133 bsc#1136682).
- libceph: do not consume a ref on pagelist in ceph_msg_data_add_pagelist() (bsc#1135897).
- libceph: enable fallback to ceph_msg_new() in ceph_msgpool_get() (bsc#1135897).
- libceph: fix PG split vs OSD (re)connect race (bsc#1148133).
- libceph: fix PG split vs OSD (re)connect race (bsc#1148133).
- libceph: fix sa_family just after reading address (bsc#1148133 bsc#1136682).
- libceph: fix unaligned accesses in ceph_entity_addr handling (bsc#1136682).
- libceph: fix watch_item_t decoding to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: handle zero-length data items (bsc#1141450).
- libceph: introduce BVECS data type (bsc#1141450).
- libceph: introduce alloc_watch_request() (bsc#1135897).
- libceph: introduce ceph_pagelist_alloc() (bsc#1135897).
- libceph: make ceph_pr_addr take an struct ceph_entity_addr pointer (bsc#1136682).
- libceph: preallocate message data items (bsc#1135897).
- libceph: rename ceph_encode_addr to ceph_encode_banner_addr (bsc#1148133 bsc#1136682).
- libceph: switch osdmap decoding to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: turn on CEPH_FEATURE_MSG_ADDR2 (bsc#1148133 bsc#1136682).
- libceph: use TYPE_LEGACY for entity addrs instead of TYPE_NONE (bsc#1148133 bsc#1136682).
- libceph: use single request data item for cmp/setxattr (bsc#1139101).
- libnvdimm/pfn: Store correct value of npfns in namespace superblock (bsc#1146381 ltc#180720).
- liquidio: add cleanup in octeon_setup_iq() (bsc#1051510).
- loop: set PF_MEMALLOC_NOIO for the worker thread (git fixes).
- lpfc: fix 12.4.0.0 GPF at boot (bsc#1148308).
- mac80211: Correctly set noencrypt for PAE frames (bsc#1111666).
- mac80211: Do not memset RXCB prior to PAE intercept (bsc#1111666).
- mac80211: do not WARN on short WMM parameters from AP (bsc#1051510).
- mac80211: do not warn about CW params when not using them (bsc#1051510).
- mac80211: fix possible memory leak in ieee80211_assign_beacon (bsc#1142635).
- mac80211: fix possible sta leak (bsc#1051510).
- mac80211_hwsim: Fix possible null-pointer dereferences in hwsim_dump_radio_nl() (bsc#1111666).
- macsec: fix checksumming after decryption (bsc#1051510).
- macsec: fix use-after-free of skb during RX (bsc#1051510).
- macsec: let the administrator set UP state even if lowerdev is down (bsc#1051510).
- macsec: update operstate when lower device changes (bsc#1051510).
- mailbox: handle failed named mailbox channel request (bsc#1051510).
- md/raid: raid5 preserve the writeback action after the parity check (git fixes).
- md: add mddev-&gt;pers to avoid potential NULL pointer dereference (git fixes).
- md: fix invalid stored role for a disk try2 (bsc#1143765).
- media: au0828: fix null dereference in error path (bsc#1051510).
- media: coda: Remove unbalanced and unneeded mutex unlock (bsc#1051510).
- media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP (bsc#1051510).
- media: coda: fix mpeg2 sequence number handling (bsc#1051510).
- media: coda: increment sequence offset for the last returned frame (bsc#1051510).
- media: dvb: usb: fix use after free in dvb_usb_device_exit (bsc#1051510).
- media: hdpvr: fix locking and a missing msleep (bsc#1051510).
- media: media_device_enum_links32: clean a reserved field (bsc#1051510).
- media: pvrusb2: use a different format for warnings (bsc#1051510).
- media: spi: IR LED: add missing of table registration (bsc#1051510).
- media: staging: media: davinci_vpfe: - Fix for memory leak if decoder initialization fails (bsc#1051510).
- media: vpss: fix a potential NULL pointer dereference (bsc#1051510).
- media: wl128x: Fix some error handling in fm_v4l2_init_video_device() (bsc#1051510).
- mfd: arizona: Fix undefined behavior (bsc#1051510).
- mfd: core: Set fwnode for created devices (bsc#1051510).
- mfd: hi655x-pmic: Fix missing return value check for devm_regmap_init_mmio_clk (bsc#1051510).
- mfd: intel-lpss: Add Intel Comet Lake PCI IDs (jsc#SLE-4875).
- mlxsw: spectrum: Fix error path in mlxsw_sp_module_init() (bsc#1112374).
- mm, page_owner: handle THP splits correctly (bsc#1149197, VM Debugging Functionality).
- mm, vmscan: do not special-case slab reclaim when watermarks are boosted (git fixes (mm/vmscan)).
- mm/hmm: fix bad subpage pointer in try_to_unmap_one (bsc#1148202, HMM, VM Functionality).
- mm/hotplug: fix offline undo_isolate_page_range() (bsc#1148196, VM Functionality).
- mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node (bsc#1148379, VM Functionality).
- mm/memcontrol.c: fix use after free in mem_cgroup_iter() (bsc#1149224, VM Functionality).
- mm/memory.c: recheck page table entry with page table lock held (bsc#1148363, VM Functionality).
- mm/migrate.c: initialize pud_entry in migrate_vma() (bsc#1148198, HMM, VM Functionality).
- mm/mlock.c: change count_mm_mlocked_page_nr return type (bsc#1148527, VM Functionality).
- mm/mlock.c: mlockall error for flag MCL_ONFAULT (bsc#1148527, VM Functionality).
- mm/page_alloc.c: fix calculation of pgdat-&gt;nr_zones (bsc#1148192, VM Functionality).
- mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() (bsc#1118689).
- mm/vmscan.c: fix trying to reclaim unevictable LRU page (bsc#1149214, VM Functionality).
- mm: add filemap_fdatawait_range_keep_errors() (bsc#1148616).
- mm: do not stall register_shrinker() (bsc#1104902, VM Performance).
- mm: move MAP_SYNC to asm-generic/mman-common.h (bsc#1148297).
- mm: page_mapped: do not assume compound page is huge or THP (bsc#1148574, VM Functionality).
- mmc: cavium: Add the missing dma unmap when the dma has finished (bsc#1051510).
- mmc: cavium: Set the correct dma max segment size for mmc_host (bsc#1051510).
- mmc: core: Fix init of SD cards reporting an invalid VDD range (bsc#1051510).
- mmc: dw_mmc: Fix occasional hang after tuning on eMMC (bsc#1051510).
- mmc: sdhci-of-at91: add quirk for broken HS200 (bsc#1051510).
- mmc: sdhci-pci: Add support for Intel CML (jsc#SLE-4875).
- mmc: sdhci-pci: Add support for Intel ICP (jsc#SLE-4875).
- mmc: sdhci-pci: Fix BYT OCP setting (bsc#1051510).
- mpls: fix warning with multi-label encap (bsc#1051510).
- nbd: replace kill_bdev() with __invalidate_device() again (git fixes).
- net/9p: include trans_common.h to fix missing prototype warning (bsc#1051510).
- net/ibmvnic: Fix missing { in __ibmvnic_reset (bsc#1149652 ltc#179635).
- net/ibmvnic: free reset work of removed device from queue (bsc#1149652 ltc#179635).
- net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command (bsc#1145678).
- net/mlx5: Fix modify_cq_in alignment (bsc#1103990).
- net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn (networking-stable-19_07_25).
- net/mlx5e: always initialize frag-&gt;last_in_page (bsc#1103990 ).
- net: Fix netdev_WARN_ONCE macro (git-fixes).
- net: Introduce netdev_*_once functions (networking-stable-19_07_25).
- net: Revert 'net: ena: ethtool: add extra properties retrieval via get_priv_flags' (bsc#1139020 bsc#1139021).
- net: bcmgenet: use promisc for unsupported filters (networking-stable-19_07_25).
- net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query (networking-stable-19_07_25).
- net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling (networking-stable-19_07_25).
- net: bridge: stp: do not cache eth dest pointer before skb pull (networking-stable-19_07_25).
- net: dsa: mv88e6xxx: wait after reset deactivation (networking-stable-19_07_25).
- net: ena: Fix bug where ring allocation backoff stopped too late (bsc#1139020 bsc#1139021).
- net: ena: add MAX_QUEUES_EXT get feature admin command (bsc#1139020 bsc#1139021).
- net: ena: add ethtool function for changing io queue sizes (bsc#1139020 bsc#1139021).
- net: ena: add good checksum counter (bsc#1139020 bsc#1139021).
- net: ena: add handling of llq max tx burst size (bsc#1139020 bsc#1139021).
- net: ena: add newline at the end of pr_err prints (bsc#1139020 bsc#1139021).
- net: ena: add support for changing max_header_size in LLQ mode (bsc#1139020 bsc#1139021).
- net: ena: allow automatic fallback to polling mode (bsc#1139020 bsc#1139021).
- net: ena: allow queue allocation backoff when low on memory (bsc#1139020 bsc#1139021).
- net: ena: arrange ena_probe() function variables in reverse christmas tree (bsc#1139020 bsc#1139021).
- net: ena: enable negotiating larger Rx ring size (bsc#1139020 bsc#1139021).
- net: ena: ethtool: add extra properties retrieval via get_priv_flags (bsc#1139020 bsc#1139021).
- net: ena: fix ena_com_fill_hash_function() implementation (bsc#1139020 bsc#1139021).
- net: ena: fix incorrect test of supported hash function (bsc#1139020 bsc#1139021).
- net: ena: fix swapped parameters when calling ena_com_indirect_table_fill_entry (bsc#1139020 bsc#1139021).
- net: ena: fix: Free napi resources when ena_up() fails (bsc#1139020 bsc#1139021).
- net: ena: fix: set freed objects to NULL to avoid failing future allocations (bsc#1139020 bsc#1139021).
- net: ena: gcc 8: fix compilation warning (bsc#1139020 bsc#1139021).
- net: ena: improve latency by disabling adaptive interrupt moderation by default (bsc#1139020 bsc#1139021).
- net: ena: make ethtool show correct current and max queue sizes (bsc#1139020 bsc#1139021).
- net: ena: optimise calculations for CQ doorbell (bsc#1139020 bsc#1139021).
- net: ena: remove inline keyword from functions in *.c (bsc#1139020 bsc#1139021).
- net: ena: replace free_tx/rx_ids union with single free_ids field in ena_ring (bsc#1139020 bsc#1139021).
- net: ena: update driver version from 2.0.3 to 2.1.0 (bsc#1139020 bsc#1139021).
- net: ena: use dev_info_once instead of static variable (bsc#1139020 bsc#1139021).
- net: fix bpf_xdp_adjust_head regression for generic-XDP (bsc#1109837).
- net: hns3: Add missing newline at end of file (bsc#1104353 ).
- net: hns3: add Asym Pause support to fix autoneg problem (bsc#1104353).
- net: hns3: add a check to pointer in error_detected and slot_reset (bsc#1104353).
- net: hns3: add aRFS support for PF (bsc#1104353).
- net: hns3: add all IMP return code (bsc#1104353).
- net: hns3: add check to number of buffer descriptors (bsc#1104353).
- net: hns3: add default value for tc_size and tc_offset (bsc#1104353).
- net: hns3: add exception handling when enable NIC HW error interrupts (bsc#1104353).
- net: hns3: add handling of two bits in MAC tunnel interrupts (bsc#1104353).
- net: hns3: add handshake with hardware while doing reset (bsc#1104353).
- net: hns3: add opcode about query and clear RAS &amp; MSI-X to special opcode (bsc#1104353).
- net: hns3: add recovery for the H/W errors occurred before the HNS dev initialization (bsc#1104353).
- net: hns3: add some error checking in hclge_tm module (bsc#1104353).
- net: hns3: add support for dump firmware statistics by debugfs (bsc#1104353).
- net: hns3: adjust hns3_uninit_phy()'s location in the hns3_client_uninit() (bsc#1104353).
- net: hns3: bitwise operator should use unsigned type (bsc#1104353).
- net: hns3: change SSU's buffer allocation according to UM (bsc#1104353).
- net: hns3: check msg_data before memcpy in hclgevf_send_mbx_msg (bsc#1104353).
- net: hns3: clear restting state when initializing HW device (bsc#1104353).
- net: hns3: code optimizaition of hclge_handle_hw_ras_error() (bsc#1104353).
- net: hns3: delay and separate enabling of NIC and ROCE HW errors (bsc#1104353).
- net: hns3: delay ring buffer clearing during reset (bsc#1104353 ).
- net: hns3: delay setting of reset level for hw errors until slot_reset is called (bsc#1104353).
- net: hns3: delete the redundant user NIC codes (bsc#1104353 ).
- net: hns3: do not configure new VLAN ID into VF VLAN table when it's full (bsc#1104353).
- net: hns3: enable DCB when TC num is one and pfc_en is non-zero (bsc#1104353).
- net: hns3: enable broadcast promisc mode when initializing VF (bsc#1104353).
- net: hns3: extract handling of mpf/pf msi-x errors into functions (bsc#1104353).
- net: hns3: fix VLAN filter restore issue after reset (bsc#1104353).
- net: hns3: fix __QUEUE_STATE_STACK_XOFF not cleared issue (bsc#1104353).
- net: hns3: fix a -Wformat-nonliteral compile warning (bsc#1104353).
- net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector (bsc#1104353).
- net: hns3: fix a statistics issue about l3l4 checksum error (bsc#1104353).
- net: hns3: fix avoid unnecessary resetting for the H/W errors which do not require reset (bsc#1104353).
- net: hns3: fix compile warning without CONFIG_RFS_ACCEL (bsc#1104353).
- net: hns3: fix dereference of ae_dev before it is null checked (bsc#1104353).
- net: hns3: fix flow control configure issue for fibre port (bsc#1104353).
- net: hns3: fix for dereferencing before null checking (bsc#1104353).
- net: hns3: fix for skb leak when doing selftest (bsc#1104353 ).
- net: hns3: fix race conditions between reset and module loading &amp; unloading (bsc#1104353).
- net: hns3: fix some coding style issues (bsc#1104353 ).
- net: hns3: fix wrong size of mailbox responding data (bsc#1104353).
- net: hns3: fixes wrong place enabling ROCE HW error when loading (bsc#1104353).
- net: hns3: free irq when exit from abnormal branch (bsc#1104353 ).
- net: hns3: handle empty unknown interrupt (bsc#1104353 ).
- net: hns3: initialize CPU reverse mapping (bsc#1104353 ).
- net: hns3: log detail error info of ROCEE ECC and AXI errors (bsc#1104353).
- net: hns3: make HW GRO handling compliant with SW GRO (bsc#1104353).
- net: hns3: modify handling of out of memory in hclge_err.c (bsc#1104353).
- net: hns3: modify hclge_init_client_instance() (bsc#1104353 ).
- net: hns3: modify hclgevf_init_client_instance() (bsc#1104353 ).
- net: hns3: optimize the CSQ cmd error handling (bsc#1104353 ).
- net: hns3: process H/W errors occurred before HNS dev initialization (bsc#1104353).
- net: hns3: re-schedule reset task while VF reset fail (bsc#1104353).
- net: hns3: refactor PF/VF RSS hash key configuration (bsc#1104353).
- net: hns3: refactor hns3_get_new_int_gl function (bsc#1104353 ).
- net: hns3: refine the flow director handle (bsc#1104353 ).
- net: hns3: remove RXD_VLD check in hns3_handle_bdinfo (bsc#1104353).
- net: hns3: remove VF VLAN filter entry inexistent warning print (bsc#1104353).
- net: hns3: remove override_pci_need_reset (bsc#1104353 ).
- net: hns3: remove redundant core reset (bsc#1104353 ).
- net: hns3: remove setting bit of reset_requests when handling mac tunnel interrupts (bsc#1104353).
- net: hns3: remove unused linkmode definition (bsc#1104353 ).
- net: hns3: replace numa_node_id with numa_mem_id for buffer reusing (bsc#1104353).
- net: hns3: set default value for param 'type' in hclgevf_bind_ring_to_vector (bsc#1104353).
- net: hns3: set maximum length to resp_data_len for exceptional case (bsc#1104353).
- net: hns3: set ops to null when unregister ad_dev (bsc#1104353 ).
- net: hns3: set the port shaper according to MAC speed (bsc#1104353).
- net: hns3: small changes for magic numbers (bsc#1104353 ).
- net: hns3: some changes of MSI-X bits in PPU(RCB) (bsc#1104353 ).
- net: hns3: some modifications to simplify and optimize code (bsc#1104353).
- net: hns3: some variable modification (bsc#1104353).
- net: hns3: stop schedule reset service while unloading driver (bsc#1104353).
- net: hns3: sync VLAN filter entries when kill VLAN ID failed (bsc#1104353).
- net: hns3: trigger VF reset if a VF has an over_8bd_nfe_err (bsc#1104353).
- net: hns3: typo in the name of a constant (bsc#1104353 ).
- net: hns3: use HCLGEVF_STATE_NIC_REGISTERED to indicate VF NIC client has registered (bsc#1104353).
- net: hns3: use HCLGE_STATE_NIC_REGISTERED to indicate PF NIC client has registered (bsc#1104353).
- net: hns3: use HCLGE_STATE_ROCE_REGISTERED to indicate PF ROCE client has registered (bsc#1104353).
- net: hns3: use macros instead of magic numbers (bsc#1104353 ).
- net: hns: add support for vlan TSO (bsc#1104353).
- net: make skb_dst_force return true when dst is refcounted (networking-stable-19_07_25).
- net: mvpp2: Do not check for 3 consecutive Idle frames for 10G links (bsc#1119113).
- net: neigh: fix multiple neigh timer scheduling (networking-stable-19_07_25).
- net: phylink: Fix flow control for fixed-link (bsc#1119113 ).
- net: remove duplicate fetch in sock_getsockopt (networking-stable-19_07_02).
- net: sched: verify that q!=NULL before setting q-&gt;flags (git-fixes).
- net: stmmac: fixed new system time seconds value calculation (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW timestamp (networking-stable-19_07_02).
- net: usb: pegasus: fix improper read if get_registers() fail (bsc#1051510).
- net_sched: unset TCQ_F_CAN_BYPASS when adding filters (networking-stable-19_07_25).
- netrom: fix a memory leak in nr_rx_frame() (networking-stable-19_07_25).
- netrom: hold sock when setting skb-&gt;destructor (networking-stable-19_07_25).
- nfc: fix potential illegal memory access (bsc#1051510).
- nfs: Cleanup if nfs_match_client is interrupted (bsc#1134291).
- nfs: Fix a double unlock from nfs_match,get_client (bsc#1134291).
- nfs: Fix the inode request accounting when pages have subrequests (bsc#1140012).
- nfs: make nfs_match_client killable (bsc#1134291).
- nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header (git fixes).
- nvme-core: Fix extra device_put() call on error path (bsc#1142541).
- nvme-fc: fix module unloads while lports still pending (bsc#1150033).
- nvme-multipath: fix ana log nsid lookup when nsid is not found (bsc#1141554).
- nvme-multipath: relax ANA state check (bsc#1123105).
- nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns (bsc#1120876).
- nvme: Return BLK_STS_TARGET if the DNR bit is set (bsc#1142076).
- nvme: cancel request synchronously (bsc#1145661).
- nvme: change locking for the per-subsystem controller list (bsc#1142541).
- nvme: fix possible use-after-free in connect error flow (bsc#1139500)
- nvme: fix possible use-after-free in connect error flow (bsc#1139500, bsc#1140426)
- nvme: introduce NVME_QUIRK_IGNORE_DEV_SUBNQN (bsc#1146938).
- objtool: Add rewind_stack_do_exit() to the noreturn list (bsc#1145302).
- objtool: Support GCC 9 cold subfunction naming scheme (bsc#1145300).
- octeon_mgmt: Fix MIX registers configuration on MTU setup (bsc#1051510).
- pci: PM/acpi: Refresh all stale power state data in pci_pm_complete() (bsc#1149106).
- pci: Restore Resizable BAR size bits correctly for 1MB BARs (bsc#1143841).
- pci: al: Add Amazon Annapurna Labs PCIe host controller driver (SLE-9332).
- pci: hv: Fix panic by calling hv_pci_remove_slots() earlier (bsc#1142701).
- pci: qcom: Ensure that PERST is asserted for at least 100 ms (bsc#1142635).
- pci: xilinx-nwl: Fix Multi MSI data programming (bsc#1142635).
- phy: qcom-qusb2: Fix crash if nvmem cell not specified (bsc#1051510).
- phy: renesas: rcar-gen2: Fix memory leak at error paths (bsc#1051510).
- pinctrl: pistachio: fix leaked of_node references (bsc#1051510).
- pinctrl: rockchip: fix leaked of_node references (bsc#1051510).
- pm / OPP: OF: Use pr_debug() instead of pr_err() while adding OPP table (jsc#SLE-7294).
- pm / devfreq: rk3399_dmc: Pass ODT and auto power down parameters to TF-A (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: do not print error when get supply and clk defer (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: fix spelling mistakes (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: remove unneeded semicolon (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: remove wait for dcf irq event (bsc#1144718,bsc#1144813).
- pm / devfreq: rockchip-dfi: Move GRF definitions to a common place (bsc#1144718,bsc#1144813).
- powerpc/64s: Include cpu header (bsc#1065729).
- powerpc/64s: support nospectre_v2 cmdline option (bsc#1131107).
- powerpc/book3s/64: check for NULL pointer in pgd_alloc() (bsc#1078248, git-fixes).
- powerpc/fadump: use kstrtoint to handle sysfs store (bsc#1146376).
- powerpc/fadump: when fadump is supported register the fadump sysfs files (bsc#1146352).
- powerpc/fsl: Add nospectre_v2 command line argument (bsc#1131107).
- powerpc/fsl: Update Spectre v2 reporting (bsc#1131107).
- powerpc/kdump: Handle crashkernel memory reservation failure (bsc#1143466 LTC#179600).
- powerpc/lib: Fix feature fixup test of external branch (bsc#1065729).
- powerpc/mm/hash/4k: Do not use 64K page size for vmemmap with 4K pagesize (bsc#1142685 LTC#179509).
- powerpc/mm/nvdimm: Add an informative message if we fail to allocate altmap block (bsc#1142685 LTC#179509).
- powerpc/mm/radix: Use the right page size for vmemmap mapping (bsc#1055117 bsc#1142685 LTC#179509).
- powerpc/mm: Handle page table allocation failures (bsc#1065729).
- powerpc/nvdimm: Add support for multibyte read/write for metadata (bsc#1142685 LTC#179509).
- powerpc/nvdimm: Pick nearby online node if the device node is not online (bsc#1142685 ltc#179509).
- powerpc/perf: Add constraints for power9 l2/l3 bus events (bsc#1056686).
- powerpc/perf: Add mem access events to sysfs (bsc#1124370).
- powerpc/perf: Cleanup cache_sel bits comment (bsc#1056686).
- powerpc/perf: Fix thresholding counter data for unknown type (bsc#1056686).
- powerpc/perf: Remove PM_BR_CMPL_ALT from power9 event list (bsc#1047238, bsc#1056686).
- powerpc/perf: Update perf_regs structure to include SIER (bsc#1056686).
- powerpc/powernv/opal-dump : Use IRQ_HANDLED instead of numbers in interrupt handler (bsc#1065729).
- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- powerpc/powernv: Return for invalid IMC domain (bsc1054914, git-fixes).
- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- powerpc/pseries, ps3: panic flush kernel messages before halting system (bsc#1149940 ltc#179958).
- powerpc/pseries/scm: Mark the region volatile if cache flush not required (bsc#1142685 LTC#179509).
- powerpc/pseries: Fix xive=off command line (bsc#1085030, git-fixes).
- powerpc/pseries: add missing cpumask.h include file (bsc#1065729).
- powerpc/pseries: correctly track irq state in default idle (bsc#1150727 ltc#178925).
- powerpc/rtas: use device model APIs and serialization during Lpm (bsc#1144123 ltc#178840).
- powerpc/security: Show powerpc_security_features in debugfs (bsc#1131107).
- powerpc/xive: Fix dump of XIVE interrupt under pseries (bsc#1142019).
- powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask() (bsc#1085030, bsc#1145189, LTC#179762).
- powerpc/xmon: Add a dump of all XIVE interrupts (bsc#1142019).
- powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL (bsc#1142019).
- powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (bsc#1146575 ltc#180764).
- powerpc: dump kernel log before carrying out fadump or kdump (bsc#1149940 ltc#179958).
- qede: fix write to free'd pointer error and double free of ptp (bsc#1051510).
- qla2xxx: kABI fixes for v10.01.00.18-k (bcs#1082635 bcs#1141340 bcs#1143706).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- raid5-cache: Need to do start() part job after adding journal device (git fixes).
- rbd: do not (ab)use obj_req-&gt;pages for stat requests (bsc#1141450).
- rbd: do not NULL out -&gt;obj_request in rbd_img_obj_parent_read_full() (bsc#1141450).
- rbd: get rid of img_req-&gt;copyup_pages (bsc#1141450).
- rbd: move from raw pages to bvec data descriptors (bsc#1141450).
- rbd: remove bio cloning helpers (bsc#1141450).
- rbd: start enums at 1 instead of 0 (bsc#1141450).
- rbd: use kmem_cache_zalloc() in rbd_img_request_create() (bsc#1141450).
- rdma/hns: Add mtr support for mixed multihop addressing (bsc#1104427).
- rdma/hns: Bugfix for calculating qp buffer size (bsc#1104427 ).
- rdma/hns: Bugfix for filling the sge of srq (bsc#1104427 ).
- rdma/hns: Do not stuck in endless timeout loop (bsc#1104427 ).
- rdma/hns: Fix an error code in hns_roce_set_user_sq_size() (bsc#1104427).
- rdma/hns: Fixs hw access invalid dma memory error (bsc#1104427 ).
- rdma/hns: Fixup qp release bug (bsc#1104427).
- rdma/hns: Modify ba page size for cqe (bsc#1104427).
- rdma/hns: Remove set but not used variable 'fclr_write_fail_flag' (bsc#1104427).
- rdma/hns: Remove unnecessary print message in aeq (bsc#1104427 ).
- rdma/hns: Replace magic numbers with #defines (bsc#1104427 ).
- rdma/hns: Set reset flag when hw resetting (bsc#1104427 ).
- rdma/hns: Use %pK format pointer print (bsc#1104427 ).
- rdma/hns: fix inverted logic of readl read and shift (bsc#1104427).
- rdma/hns: reset function when removing module (bsc#1104427 ).
- regmap: fix bulk writes on paged registers (bsc#1051510).
- regulator: qcom_spmi: Fix math of spmi_regulator_set_voltage_time_sel (bsc#1051510).
- rpm/kernel-binary.spec.in: Enable missing modules check.
- rpmsg: added MODULE_ALIAS for rpmsg_char (bsc#1051510).
- rpmsg: smd: do not use mananged resources for endpoints and channels (bsc#1051510).
- rpmsg: smd: fix memory leak on channel create (bsc#1051510).
- rsi: improve kernel thread handling to fix kernel panic (bsc#1051510).
- rslib: Fix decoding of shortened codes (bsc#1051510).
- rslib: Fix handling of of caller provided syndrome (bsc#1051510).
- rtc: pcf8523: do not return invalid date when battery is low (bsc#1051510).
- rtc: pcf8563: Clear event flags and disable interrupts before requesting irq (bsc#1051510).
- rtc: pcf8563: Fix interrupt trigger method (bsc#1051510).
- rxrpc: Fix send on a connected, but unbound socket (networking-stable-19_07_25).
- s390/cio: fix ccw_device_start_timeout API (bsc#1142109 LTC#179339).
- s390/dasd: fix endless loop after read unit address configuration (bsc#1144912 LTC#179907).
- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117 bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- s390/qeth: avoid control IO completion stalls (bsc#1142109 LTC#179339).
- s390/qeth: cancel cmd on early error (bsc#1142109 LTC#179339).
- s390/qeth: fix request-side race during cmd IO timeout (bsc#1142109 LTC#179339).
- s390/qeth: release cmd buffer in error paths (bsc#1142109 LTC#179339).
- s390/qeth: simplify reply object handling (bsc#1142109 LTC#179339).
- samples, bpf: fix to change the buffer size for read() (bsc#1051510).
- samples: mei: use /dev/mei0 instead of /dev/mei (bsc#1051510).
- sched/fair: Do not free p-&gt;numa_faults with concurrent readers (bsc#1144920).
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (bsc#1144920).
- scripts/checkstack.pl: Fix arm64 wrong or unknown architecture (bsc#1051510).
- scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE (bsc#1051510).
- scripts/decode_stacktrace: only strip base path when a prefix of the path (bsc#1051510).
- scripts/gdb: fix lx-version string output (bsc#1051510).
- scripts/git_sort/git_sort.py:
- scsi: NCR5380: Always re-enable reselection interrupt (git-fixes).
- scsi: aacraid: Fix missing break in switch statement (git-fixes).
- scsi: aacraid: Fix performance issue on logical drives (git-fixes).
- scsi: aic94xx: fix an error code in aic94xx_init() (git-fixes).
- scsi: aic94xx: fix module loading (git-fixes).
- scsi: bfa: Avoid implicit enum conversion in bfad_im_post_vendor_event (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: Remove unused functions (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_fcs_lport: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_fcs_rport: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_ioc: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: clean up a couple of indentation issues (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: convert to strlcpy/strlcat (git-fixes).
- scsi: bfa: fix calls to dma_set_mask_and_coherent() (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: no need to check return value of debugfs_create functions (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: remove ScsiResult macro (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: use dma_set_mask_and_coherent (bsc#1136496 jsc#SLE-4698).
- scsi: bnx2fc: Do not allow both a cleanup completion and abort completion for the same request (bsc#1144582).
- scsi: bnx2fc: Fix NULL dereference in error handling (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling (git-fixes).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Limit the IO size according to the FW capability (bsc#1144582).
- scsi: bnx2fc: Only put reference to io_req in bnx2fc_abts_cleanup if cleanup times out (bsc#1144582).
- scsi: bnx2fc: Redo setting source FCoE MAC (bsc#1144582).
- scsi: bnx2fc: Remove set but not used variable 'oxid' (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Separate out completion flags and variables for abort and cleanup (bsc#1144582).
- scsi: bnx2fc: Update the driver version to 2.12.10 (bsc#1144582).
- scsi: bnx2fc: fix bnx2fc_cmd refcount imbalance in send_rec (bsc#1144582).
- scsi: bnx2fc: fix bnx2fc_cmd refcount imbalance in send_srr (bsc#1144582).
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation (git-fixes).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502 jsc#SLE-4703).
- scsi: core: Fix race on creating sense cache (git-fixes).
- scsi: core: Synchronize request queue pm status only on successful resume (git-fixes).
- scsi: core: set result when the command cannot be dispatched (git-fixes).
- scsi: cxgb4i: fix incorrect spelling 'reveive' -&gt; 'receive' (bsc#1136346 jsc#SLE-4682).
- scsi: cxgb4i: get pf number from lldi-&gt;pf (bsc#1136346 jsc#SLE-4682).
- scsi: cxgb4i: validate tcp sequence number only if chip version &amp;lt;= T5 (bsc#1136346 jsc#SLE-4682).
- scsi: cxlflash: Mark expected switch fall-throughs (bsc#1148868).
- scsi: cxlflash: Prevent deadlock when adapter probe fails (git-fixes).
- scsi: esp_scsi: Track residual for PIO transfers (git-fixes) Also, mitigate kABI changes.
- scsi: fas216: fix sense buffer initialization (git-fixes).
- scsi: hisi_sas: Add support for DIX feature for v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Change SERDES_CFG init value to increase reliability of HiLink (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Disable stash for v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Fix losing directly attached disk when hot-plug (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Ignore the error code between phy down to phy up (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Issue internal abort on all relevant queues (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Reduce HISI_SAS_SGE_PAGE_CNT in size (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Reject setting programmed minimum linkrate &gt; 1.5G (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Use pci_irq_get_affinity() for v3 hw as experimental (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: change queue depth from 512 to 4096 (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: kabi fixes (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: print PHY RX errors count for later revision of v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: send primitive NOTIFY to SSP situation only (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: isci: initialize shost fully before calling scsi_add_host() (git-fixes).
- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352 jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352 jsc#SLE-4687).
- scsi: libcxgbi: update route finding logic (bsc#1136352 jsc#SLE-4687)
- scsi: libfc: fix null pointer dereference on a null lport (git-fixes).
- scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached (git-fixes).
- scsi: libsas: kABI protect struct sas_task_slow (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: libsas: only clear phy-&gt;in_shutdown after shutdown event done (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: lpfc: Add MDS driver loopback diagnostics support (bsc#1146215).
- scsi: lpfc: Add NVMe sequence level error recovery support (bsc#1146215).
- scsi: lpfc: Add first and second level hardware revisions to sysfs (bsc#1146215).
- scsi: lpfc: Add simple unlikely optimizations to reduce NVME latency (bsc#1146215).
- scsi: lpfc: Avoid unused function warnings (bsc#1148308).
- scsi: lpfc: Convert timers to use timer_setup() (bsc#1148308).
- scsi: lpfc: Default fdmi_on to on (bsc#1148308).
- scsi: lpfc: Fix ADISC reception terminating login state if a NVME (bsc#1146215).
- scsi: lpfc: Fix BlockGuard enablement on FCoE adapters (bsc#1146215).
- scsi: lpfc: Fix ELS field alignments (bsc#1146215).
- scsi: lpfc: Fix FLOGI handling across multiple link up/down (bsc#1146215).
- scsi: lpfc: Fix Max Frame Size value shown in fdmishow output (bsc#1146215).
- scsi: lpfc: Fix Oops in nvme_register with target logout/login (bsc#1146215).
- scsi: lpfc: Fix PLOGI failure with high remoteport count (bsc#1146215).
- scsi: lpfc: Fix coverity warnings (bsc#1146215).
- scsi: lpfc: Fix crash due to port reset racing vs adapter error (bsc#1146215).
- scsi: lpfc: Fix crash on driver unload in wq free (bsc#1146215).
- scsi: lpfc: Fix crash when cpu count is 1 and null irq affinity mask (bsc#1146215).
- scsi: lpfc: Fix deadlock on host_lock during cable pulls (bsc#1146215).
- scsi: lpfc: Fix devices that do not return after devloss followed by (bsc#1146215).
- scsi: lpfc: Fix discovery when target has no GID_FT information (bsc#1146215).
- scsi: lpfc: Fix error in remote port address change (bsc#1146215).
- scsi: lpfc: Fix failure to clear non-zero eq_delay after io rate (bsc#1146215).
- scsi: lpfc: Fix hang when downloading fw on port enabled for nvme (bsc#1146215).
- scsi: lpfc: Fix irq raising in lpfc_sli_hba_down (bsc#1146215).
- scsi: lpfc: Fix issuing init_vpi mbox on SLI-3 card (bsc#1146215).
- scsi: lpfc: Fix leak of ELS completions on adapter reset (bsc#1146215).
- scsi: lpfc: Fix loss of remote port after devloss due to lack of RPIs (bsc#1146215).
- scsi: lpfc: Fix null ptr oops updating lpfc_devloss_tmo via sysfs (bsc#1146215).
- scsi: lpfc: Fix nvme first burst module parameter description (bsc#1146215).
- scsi: lpfc: Fix nvme sg_seg_cnt display if HBA does not support NVME (bsc#1146215).
- scsi: lpfc: Fix nvme target mode ABTSing a received ABTS (bsc#1146215).
- scsi: lpfc: Fix oops when fewer hdwqs than cpus (bsc#1146215).
- scsi: lpfc: Fix port relogin failure due to GID_FT interaction (bsc#1146215).
- scsi: lpfc: Fix propagation of devloss_tmo setting to nvme transport (bsc#1146215).
- scsi: lpfc: Fix reported physical link speed on a disabled trunked (bsc#1146215).
- scsi: lpfc: Fix reset recovery paths that are not recovering (bsc#1144375).
- scsi: lpfc: Fix sg_seg_cnt for HBAs that do not support NVME (bsc#1146215).
- scsi: lpfc: Fix sli4 adapter initialization with MSI (bsc#1146215).
- scsi: lpfc: Fix too many sg segments spamming in kernel log (bsc#1146215).
- scsi: lpfc: Fix upcall to bsg done in non-success cases (bsc#1146215).
- scsi: lpfc: Limit xri count for kdump environment (bsc#1146215).
- scsi: lpfc: Make some symbols static (bsc#1148308).
- scsi: lpfc: Merge per-protocol WQ/CQ pairs into single per-cpu pair (bsc#1146215).
- scsi: lpfc: Merge per-protocol WQ/CQ pairs into single per-cpu pair (bsc#1146215).
- scsi: lpfc: Migrate to %px and %pf in kernel print calls (bsc#1146215).
- scsi: lpfc: Remove bg debugfs buffers (bsc#1144375).
- scsi: lpfc: Remove set but not used variable 'psli' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'fc_hdr' and 'hw_page_size' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'qp' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'tgtp' (bsc#1148308).
- scsi: lpfc: Resolve checker warning for lpfc_new_io_buf() (bsc#1144375).
- scsi: lpfc: Support dynamic unbounded SGL lists on G7 hardware (bsc#1146215).
- scsi: lpfc: Update lpfc version to 12.4.0.0 (bsc#1146215).
- scsi: lpfc: Use dma_zalloc_coherent (bsc#1148308).
- scsi: lpfc: add check for loss of ndlp when sending RRQ (bsc#1148308).
- scsi: lpfc: change snprintf to scnprintf for possible overflow (bsc#1146215).
- scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show (bsc#1148308).
- scsi: lpfc: lpfc_sli: Mark expected switch fall-throughs (bsc#1148308).
- scsi: lpfc: no need to check return value of debugfs_create functions (bsc#1148308).
- scsi: lpfc: nvme: avoid hang / use-after-free when destroying localport (bsc#1148308).
- scsi: lpfc: nvmet: avoid hang / use-after-free when destroying targetport (bsc#1148308).
- scsi: lpfc: remove NULL check before some freeing functions (bsc#1146215).
- scsi: lpfc: remove ScsiResult macro (bsc#1148308).
- scsi: lpfc: remove a bogus pci_dma_sync_single_for_device call (bsc#1148308).
- scsi: lpfc: remove null check on nvmebuf (bsc#1148308).
- scsi: lpfc: resolve lockdep warnings (bsc#1148308).
- scsi: lpfc: use sg helper to iterate over scatterlist (bsc#1148308).
- scsi: mac_scsi: Fix pseudo DMA implementation, take 2 (git-fixes).
- scsi: mac_scsi: Increase PIO/PDMA transfer length threshold (git-fixes).
- scsi: megaraid: fix out-of-bound array accesses (git-fixes).
- scsi: megaraid_sas: Fix calculation of target ID (git-fixes).
- scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (bsc#1143962).
- scsi: megaraid_sas: Release Mutex lock before OCR in case of DCMD timeout (bsc#1143962).
- scsi: mpt3sas: Determine smp affinity on per HBA basis (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode (bsc#1143738).
- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: pmcraid: do not allocate a dma coherent buffer for sense data (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: simplify pmcraid_cancel_all a bit (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: use generic DMA API (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: use sg helper to iterate over scatterlist (bsc#1135990 jsc#SLE-4709).
- scsi: prefix header search paths with $(srctree)/ (bsc#1136346 jsc#SLE-4682).
- scsi: qedf: Add debug information for unsolicited processing (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets and send fipvlan retries (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing link update AEN (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link down (bsc#1149976).
- scsi: qedf: Print message during bailout conditions (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20 (bsc#1149976).
- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: remove memset/memcpy to nfunc and use func instead (git-fixes).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedi: remove declaration of nvm_image from stack (git-fixes).
- scsi: qla2xxx: Add cleanup for PCI EEH recovery (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Add cleanup for PCI EEH recovery (bsc#1129424).
- scsi: qla2xxx: Allow NVMe IO to resume with short cable pull (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value (bsc#1143706).
- scsi: qla2xxx: Avoid that Coverity complains about dereferencing a NULL rport pointer (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qla2x00_mem_free() crashes if called twice (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory (git-fixes).
- scsi: qla2xxx: Change a stack variable into a static const variable (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Change the return type of qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Change the return type of qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary image fails (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size (bsc#1143706).
- scsi: qla2xxx: Check the size of firmware data structures at compile time (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Cleanup fcport memory to prevent leak (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Cleanup redundant qla2x00_abort_all_cmds during unload (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Complain if a command is released that is owned by the firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the completion path (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times out (bsc#1143706).
- scsi: qla2xxx: Complain loudly about reference count underflow (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Correct error handling during initialization failures (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument const (bsc#1143706).
- scsi: qla2xxx: Declare local symbols static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla24xx_build_scsi_crc_2_iocbs() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla2x00_find_new_loop_id() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument const (bsc#1143706).
- scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1143706).
- scsi: qla2xxx: Fix DMA unmap leak (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NVMe port discovery after a short device port loss (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Fix a format specifier (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a format specifier (git-fixes).
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Fix a small typo in qla_bsg.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix abort timeout race condition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix an endian bug in fcpcmd_is_corrupted() (git-fixes).
- scsi: qla2xxx: Fix comment alignment in qla_bsg.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix device staying in blocked state (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix device staying in blocked state (git-fixes).
- scsi: qla2xxx: Fix different size DMA Alloc/Unmap (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd() (git-fixes).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix formatting of pointer types (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix fw dump corruption (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hang in fcport delete path (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hardirq-unsafe locking (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hardlockup in abort command during driver remove (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver (bsc#1143706).
- scsi: qla2xxx: Fix possible fcport null-pointer dereferences (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix premature timer expiration (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work() (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Further limit FLASH region write access from SysFS (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance (bsc#1143706).
- scsi: qla2xxx: Include the &amp;lt;asm/unaligned.h&gt; header file from qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Increase the max_sgl_segments to 1024 (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Increase the size of the mailbox arrays from 4 to 8 (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (bsc#1143706).
- scsi: qla2xxx: Insert spaces where required (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Introduce the dsd32 and dsd64 data structures (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (bsc#1143706).
- scsi: qla2xxx: Leave a blank line after declarations (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI command context pointer (bsc#1143706).
- scsi: qla2xxx: Log the status code if a firmware command fails (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs use little endian (bsc#1143706).
- scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_mem_free() easier to verify (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qla2x00_process_response_queue() easier to read (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Move qla2x00_clear_loop_id() from qla_inline.h into qla_init.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_is_reserved_id() from qla_inline.h into qla_init.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_set_fcport_state() from a .h into a .c file (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_set_reserved_loop_ids() definition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move the &amp;lt;linux/io-64-nonatomic-lo-hi.h&gt; include directive (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move the port_state_str definition from a .h to a .c file (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Pass little-endian values to the firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code (bsc#1143706).
- scsi: qla2xxx: Reduce the number of forward declarations (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Reject EH_{abort|device_reset|target_request} (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a comment that refers to the SCSI host lock (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Remove qla_tgt_cmd.data_work and qla_tgt_cmd.data_work_free (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove qla_tgt_cmd.released (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts (bsc#1143706).
- scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove two superfluous casts (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove unnecessary locking from the target code (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove unnecessary null check (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock() (bsc#1143706).
- scsi: qla2xxx: Remove useless set memory to zero use memset() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Replace vmalloc + memset with vzalloc (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox command fails (bsc#1143706).
- scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Retry fabric Scan on IOCB queue full (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id() (bsc#1143706).
- scsi: qla2xxx: Set the SCSI command result before calling the command done (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Set the qpair in SRB to NULL when SRB is released (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Silence Successful ELS IOCB message (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_send_term_imm_notif() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Skip FW dump on LOOP initialization error (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer overflow (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Uninline qla2x00_init_timer() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Unregister chrdev if module initialization fails (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Unregister chrdev if module initialization fails (git-fixes).
- scsi: qla2xxx: Unregister resources in the opposite order of the registration order (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.16-k (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.18-k (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.19-k (bsc#1143706).
- scsi: qla2xxx: Update two source code comments (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use ARRAY_SIZE() in the definition of QLA_LAST_SPEED (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use Correct index for Q-Pair array (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use __le64 instead of uint32_t[2] for sending DMA addresses to firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use common update-firmware-options routine for ISP27xx+ (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use get/put_unaligned where appropriate (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy() and strncpy() (bsc#1143706).
- scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation (bsc#1143706).
- scsi: qla2xxx: Use tabs to indent code (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime (bsc#1143706).
- scsi: qla2xxx: cleanup trace buffer initialization (bsc#1134476).
- scsi: qla2xxx: fix spelling mistake 'alredy' -&gt; 'already' (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: on session delete, return nvme cmd (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (bsc#1134476).
- scsi: qla2xxx: remove double assignment in qla2x00_update_fcport (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: target: Fix offline port handling and host reset handling (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla4xxx: avoid freeing unallocated dma memory (git-fixes).
- scsi: raid_attrs: fix unused variable warning (git-fixes).
- scsi: sas: Convert timers to use timer_setup() (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: scsi_dh_alua: Fix possible null-ptr-deref (git-fixes).
- scsi: scsi_transport_fc: nvme: display FC-NVMe port roles (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: sd: Defer spinning up drive while SANITIZE is in progress (git-fixes).
- scsi: sd: Fix a race between closing an sd device and sd I/O (git-fixes).
- scsi: sd: Fix cache_type_store() (git-fixes).
- scsi: sd: Optimal I/O size should be a multiple of physical block size (git-fixes).
- scsi: sd: Quiesce warning if device does not report optimal I/O size (git-fixes).
- scsi: sd: use mempool for discard special page (git-fixes).
- scsi: sd_zbc: Fix potential memory leak (git-fixes).
- scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous() (git-fixes).
- scsi: sr: Avoid that opening a CD-ROM hangs with runtime power management enabled (git-fixes).
- scsi: target: iscsi: cxgbit: add missing spin_lock_init() (bsc#1136349 jsc#SLE-4685).
- scsi: tcm_qla2xxx: Minimize #include directives (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: ufs: Avoid runtime suspend possibly being blocked forever (git-fixes).
- scsi: ufs: Check that space was properly alloced in copy_query_response (git-fixes).
- scsi: ufs: Fix NULL pointer dereference in ufshcd_config_vreg_hpm() (git-fixes).
- scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value (git-fixes).
- scsi: ufs: fix wrong command type of UTRD for UFSHCI v2.1 (git-fixes).
- scsi: use dma_get_cache_alignment() as minimum DMA alignment (git-fixes).
- scsi: virtio_scsi: do not send sc payload with tmfs (git-fixes).
- sctp: change to hold sk after auth shkey is created successfully (networking-stable-19_07_02).
- sdhci-fujitsu: add support for setting the CMD_DAT_DELAY attribute (bsc#1145256).
- serial: 8250: Fix TX interrupt handling condition (bsc#1051510).
- signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig (bsc#1144333).
- sis900: fix TX completion (bsc#1051510).
- sky2: Disable MSI on ASUS P6T (bsc#1142496).
- smb2: fix missing files in root share directory listing (bsc#1112907, bsc#1144333).
- smb2: fix typo in definition of a few error flags (bsc#1144333).
- smb2: fix uninitialized variable bug in smb2_ioctl_query_info (bsc#1144333).
- smb3 - clean up debug output displaying network interfaces (bsc#1144333).
- smb3.11: replace a 4 with server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- smb3: Add SMB3.1.1 GCM to negotiated crypto algorigthms (bsc#1144333).
- smb3: Add debug message later in smb2/smb3 reconnect path (bsc#1144333).
- smb3: Add defines for new negotiate contexts (bsc#1144333).
- smb3: Add dynamic trace points for various compounded smb3 ops (bsc#1144333).
- smb3: Add ftrace tracepoints for improved SMB3 debugging (bsc#1144333).
- smb3: Add handling for different FSCTL access flags (bsc#1144333).
- smb3: Add posix create context for smb3.11 posix mounts (bsc#1144333).
- smb3: Add protocol structs for change notify support (bsc#1144333).
- smb3: Add support for multidialect negotiate (SMB2.1 and later) (bsc#1051510, bsc#1144333).
- smb3: Add tracepoints for read, write and query_dir enter (bsc#1144333).
- smb3: Allow SMB3 FSCTL queries to be sent to server from tools (bsc#1144333).
- smb3: Allow persistent handle timeout to be configurable on mount (bsc#1144333).
- smb3: Allow query of symlinks stored as reparse points (bsc#1144333).
- smb3: Backup intent flag missing for directory opens with backupuid mounts (bsc#1051510, bsc#1144333).
- smb3: Backup intent flag missing from compounded ops (bsc#1144333).
- smb3: Clean up query symlink when reparse point (bsc#1144333).
- smb3: Cleanup license mess (bsc#1144333).
- smb3: Do not ignore O_SYNC/O_DSYNC and O_DIRECT flags (bsc#1085536, bsc#1144333).
- smb3: Do not send SMB3 SET_INFO if nothing changed (bsc#1051510, bsc#1144333).
- smb3: Fix 3.11 encryption to Windows and handle encrypted smb3 tcon (bsc#1051510, bsc#1144333).
- smb3: Fix SMB3.1.1 guest mounts to Samba (bsc#1051510, bsc#1144333).
- smb3: Fix deadlock in validate negotiate hits reconnect (bsc#1144333).
- smb3: Fix endian warning (bsc#1144333, bsc#1137884).
- smb3: Fix enumerating snapshots to Azure (bsc#1144333).
- smb3: Fix length checking of SMB3.11 negotiate request (bsc#1051510, bsc#1144333).
- smb3: Fix mode on mkdir on smb311 mounts (bsc#1144333).
- smb3: Fix potential memory leak when processing compound chain (bsc#1144333).
- smb3: Fix rmdir compounding regression to strict servers (bsc#1144333).
- smb3: Fix root directory when server returns inode number of zero (bsc#1051510, bsc#1144333).
- smb3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL (bsc#1144333).
- smb3: Log at least once if tree connect fails during reconnect (bsc#1144333).
- smb3: Number of requests sent should be displayed for SMB3 not just CIFS (bsc#1144333).
- smb3: Send netname context during negotiate protocol (bsc#1144333).
- smb3: Track total time spent on roundtrips for each SMB3 command (bsc#1144333).
- smb3: Update POSIX negotiate context with POSIX ctxt GUID (bsc#1144333).
- smb3: Validate negotiate request must always be signed (bsc#1064597, bsc#1144333).
- smb3: Warn user if trying to sign connection that authenticated as guest (bsc#1085536, bsc#1144333).
- smb3: add additional ftrace entry points for entry/exit to cifs.ko (bsc#1144333).
- smb3: add credits we receive from oplock/break PDUs (bsc#1144333).
- smb3: add debug for unexpected mid cancellation (bsc#1144333).
- smb3: add define for id for posix create context and corresponding struct (bsc#1144333).
- smb3: add dynamic trace point for query_info_enter/done (bsc#1144333).
- smb3: add dynamic trace point for smb3_cmd_enter (bsc#1144333).
- smb3: add dynamic tracepoint for timeout waiting for credits (bsc#1144333).
- smb3: add dynamic tracepoints for simple fallocate and zero range (bsc#1144333).
- smb3: add missing read completion trace point (bsc#1144333).
- smb3: add module alias for smb3 to cifs.ko (bsc#1144333).
- smb3: add new mount option to retrieve mode from special ACE (bsc#1144333).
- smb3: add reconnect tracepoints (bsc#1144333).
- smb3: add smb3.1.1 to default dialect list (bsc#1144333).
- smb3: add support for posix negotiate context (bsc#1144333).
- smb3: add support for statfs for smb3.1.1 posix extensions (bsc#1144333).
- smb3: add trace point for tree connection (bsc#1144333).
- smb3: add tracepoint for sending lease break responses to server (bsc#1144333).
- smb3: add tracepoint for session expired or deleted (bsc#1144333).
- smb3: add tracepoint for slow responses (bsc#1144333).
- smb3: add tracepoint to catch cases where credit refund of failed op overlaps reconnect (bsc#1144333).
- smb3: add tracepoints for query dir (bsc#1144333).
- smb3: add tracepoints for smb2/smb3 open (bsc#1144333).
- smb3: add way to control slow response threshold for logging and stats (bsc#1144333).
- smb3: allow more detailed protocol info on open files for debugging (bsc#1144333).
- smb3: allow posix mount option to enable new SMB311 protocol extensions (bsc#1144333).
- smb3: allow previous versions to be mounted with snapshot= mount parm (bsc#1144333).
- smb3: allow stats which track session and share reconnects to be reset (bsc#1051510, bsc#1144333).
- smb3: check for and properly advertise directory lease support (bsc#1051510, bsc#1144333).
- smb3: create smb3 equivalent alias for cifs pseudo-xattrs (bsc#1144333).
- smb3: directory sync should not return an error (bsc#1051510, bsc#1144333).
- smb3: display bytes_read and bytes_written in smb3 stats (bsc#1144333).
- smb3: display security information in /proc/fs/cifs/DebugData more accurately (bsc#1144333).
- smb3: display session id in debug data (bsc#1144333).
- smb3: display stats counters for number of slow commands (bsc#1144333).
- smb3: display volume serial number for shares in /proc/fs/cifs/DebugData (bsc#1144333).
- smb3: do not allow insecure cifs mounts when using smb3 (bsc#1144333).
- smb3: do not attempt cifs operation in smb3 query info error path (bsc#1051510, bsc#1144333).
- smb3: do not display confusing message on mount to Azure servers (bsc#1144333).
- smb3: do not display empty interface list (bsc#1144333).
- smb3: do not request leases in symlink creation and query (bsc#1051510, bsc#1144333).
- smb3: do not send compression info by default (bsc#1144333).
- smb3: enumerating snapshots was leaving part of the data off end (bsc#1051510, bsc#1144333).
- smb3: fill in statfs fsid and correct namelen (bsc#1112905, bsc#1144333).
- smb3: fix bytes_read statistics (bsc#1144333).
- smb3: fix corrupt path in subdirs on smb311 with posix (bsc#1144333).
- smb3: fix large reads on encrypted connections (bsc#1144333).
- smb3: fix lease break problem introduced by compounding (bsc#1144333).
- smb3: fix minor debug output for CONFIG_CIFS_STATS (bsc#1144333).
- smb3: fix redundant opens on root (bsc#1144333).
- smb3: fix reset of bytes read and written stats (bsc#1112906, bsc#1144333).
- smb3: fix various xid leaks (bsc#1051510, bsc#1144333).
- smb3: for kerberos mounts display the credential uid used (bsc#1144333).
- smb3: handle new statx fields (bsc#1085536, bsc#1144333).
- smb3: if max_credits is specified then display it in /proc/mounts (bsc#1144333).
- smb3: if server does not support posix do not allow posix mount option (bsc#1144333).
- smb3: improve dynamic tracing of open and posix mkdir (bsc#1144333).
- smb3: increase initial number of credits requested to allow write (bsc#1144333).
- smb3: make default i/o size for smb3 mounts larger (bsc#1144333).
- smb3: minor cleanup of compound_send_recv (bsc#1144333).
- smb3: minor debugging clarifications in rfc1001 len processing (bsc#1144333).
- smb3: minor missing defines relating to reparse points (bsc#1144333).
- smb3: missing defines and structs for reparse point handling (bsc#1144333).
- smb3: note that smb3.11 posix extensions mount option is experimental (bsc#1144333).
- smb3: on kerberos mount if server does not specify auth type use krb5 (bsc#1051510, bsc#1144333).
- smb3: on reconnect set PreviousSessionId field (bsc#1112899, bsc#1144333).
- smb3: optimize open to not send query file internal info (bsc#1144333).
- smb3: passthru query info does not check for SMB3 FSCTL passthru (bsc#1144333).
- smb3: print tree id in debugdata in proc to be able to help logging (bsc#1144333).
- smb3: query inode number on open via create context (bsc#1144333).
- smb3: remove noisy warning message on mount (bsc#1129664, bsc#1144333).
- smb3: remove per-session operations from per-tree connection stats (bsc#1144333).
- smb3: rename encryption_required to smb3_encryption_required (bsc#1144333).
- smb3: request more credits on normal (non-large read/write) ops (bsc#1144333).
- smb3: request more credits on tree connect (bsc#1144333).
- smb3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (bsc#1144333).
- smb3: send CAP_DFS capability during session setup (bsc#1144333).
- smb3: send backup intent on compounded query info (bsc#1144333).
- smb3: show number of current open files in /proc/fs/cifs/Stats (bsc#1144333).
- smb3: simplify code by removing CONFIG_CIFS_SMB311 (bsc#1051510, bsc#1144333).
- smb3: smbdirect no longer experimental (bsc#1144333).
- smb3: snapshot mounts are read-only and make sure info is displayable about the mount (bsc#1144333).
- smb3: track the instance of each session for debugging (bsc#1144333).
- smb3: trivial cleanup to smb2ops.c (bsc#1144333).
- smb3: update comment to clarify enumerating snapshots (bsc#1144333).
- smb3: update default requested iosize to 4MB from 1MB for recent dialects (bsc#1144333).
- smb: Add vers=3.0.2 as a valid option for SMBv3.0.2 (bsc#1144333).
- smb: Cleanup some minor endian issues in smb3 rdma (bsc#1144333).
- smb: Do not log confusing message on reconnect by default (bsc#1129664, bsc#1144333).
- smb: Do not log expected error on DFS referral request (bsc#1051510, bsc#1144333).
- smb: Fix SMB3.1.1 guest authentication to Samba (bsc#1085536, bsc#1144333).
- smb: Fix encryption labels and lengths for SMB3.1.1 (bsc#1085536, bsc#1144333).
- smb: Fix match_server check to allow for auto dialect negotiate (bsc#1144333).
- smb: Fix warning messages when mounting to older servers (bsc#1144333).
- smb: SMB3.1.1 dialect is no longer experimental (bsc#1051510, bsc#1144333).
- smb: SMB3.1.1: Add GCM crypto to the encrypt and decrypt functions (bsc#1144333).
- smb: SMB311: Fix reconnect (bsc#1051510, bsc#1144333).
- smb: SMB311: Improve checking of negotiate security contexts (bsc#1051510, bsc#1144333).
- smb: Tree connect for SMB3.1.1 must be signed for non-encrypted shares (bsc#1051510, bsc#1144333).
- smb: Validate negotiate (to protect against downgrade) even if signing off (bsc#1085536, bsc#1144333).
- smb: fix leak of validate negotiate info response buffer (bsc#1064597, bsc#1144333).
- smb: fix validate negotiate info uninitialised memory use (bsc#1064597, bsc#1144333).
- smbd: Make upper layer decide when to destroy the transport (bsc#1144333).
- smpboot: Place the __percpu annotation correctly (git fixes).
- soc: rockchip: power-domain: Add a sanity check on pd-&gt;num_clks (bsc#1144718,bsc#1144813).
- soc: rockchip: power-domain: Use of_clk_get_parent_count() instead of open coding (bsc#1144718,bsc#1144813).
- soc: rockchip: power-domain: use clk_bulk APIs (bsc#1144718,bsc#1144813).
- sound: fix a memory leak bug (bsc#1051510).
- spi: bcm2835aux: fix corruptions for longer spi transfers (bsc#1051510).
- spi: bcm2835aux: remove dangerous uncontrolled read of fifo (bsc#1051510).
- spi: bcm2835aux: unifying code between polling and interrupt driven code (bsc#1051510).
- st21nfca_connectivity_event_received: null check the allocation (bsc#1051510).
- st_nci_hci_connectivity_event_received: null check the allocation (bsc#1051510).
- staging: comedi: dt3000: Fix rounding up of timer divisor (bsc#1051510).
- staging: comedi: dt3000: Fix signed integer overflow 'divider * base' (bsc#1051510).
- staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work (bsc#1111666).
- supported.conf: Add missing modules (bsc#1066369).
- supported.conf: Remove duplicate drivers/ata/libahci_platform
- supported.conf: Remove duplicate entries
- supported.conf: Sort alphabetically, align comments.
- supported.conf: Sort alphabetically, align comments.
- tcp: Reset bytes_acked and bytes_received when disconnecting (networking-stable-19_07_25).
- test_firmware: fix a memory leak bug (bsc#1051510).
- tipc: change to use register_pernet_device (networking-stable-19_07_02).
- tools: bpftool: close prog FD before exit on showing a single program (bsc#1109837).
- tools: bpftool: fix error message (prog -&gt; object) (bsc#1109837).
- tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete (bsc#1082555).
- tpm: Fix Tpm 1.2 Shutdown sequence to prevent future TPM operations (bsc#1082555).
- tpm: Fix off-by-one when reading binary_bios_measurements (bsc#1082555).
- tpm: Unify the send callback behaviour (bsc#1082555).
- tpm: vtpm_proxy: Suppress error logging when in closed state (bsc#1082555).
- tracing: Fix header include guards in trace event headers (bsc#1144474).
- tracing: store path instead of inode (bsc#1120046, bsc#1146141).
- treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 231 (bsc#1144333).
- tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop (bsc#1051510).
- tty/serial: digicolor: Fix digicolor-usart already registered warning (bsc#1051510).
- tty: max310x: Fix invalid baudrate divisors calculator (bsc#1051510).
- tty: serial: msm_serial: avoid system lockup condition (bsc#1051510).
- tua6100: Avoid build warnings (bsc#1051510).
- tun: mark small packets as owned by the tap sock (bsc#1109837).
- tun: wake up waitqueues after IFF_UP is set (networking-stable-19_07_02).
- udf: Fix incorrect final NOT_ALLOCATED (hole) extent length (bsc#1148617).
- update internal version number for cifs.ko (bsc#1144333).
- usb-storage: Add new JMS567 revision to unusual_devs (bsc#1051510).
- usb: CDC: fix sanity checks in CDC union parser (bsc#1142635).
- usb: Handle USB3 remote wakeup for Lpm enabled devices correctly (bsc#1051510).
- usb: cdc-acm: make sure a refcount is taken early enough (bsc#1142635).
- usb: cdc-wdm: fix race between write and disconnect due to flag abuse (bsc#1051510).
- usb: chipidea: udc: do not do hardware access if gadget has stopped (bsc#1051510).
- usb: core: Fix races in character device registration and deregistraion (bsc#1051510).
- usb: core: hub: Disable hub-initiated U1/U2 (bsc#1051510).
- usb: gadget: composite: Clear 'suspended' on reset/disconnect (bsc#1051510).
- usb: gadget: udc: renesas_usb3: Fix sysfs interface of 'role' (bsc#1142635).
- usb: host: fotg2: restart hcd after port reset (bsc#1051510).
- usb: host: ohci: fix a race condition between shutdown and irq (bsc#1051510).
- usb: host: xhci-rcar: Fix timeout in xhci_suspend() (bsc#1051510).
- usb: host: xhci: rcar: Fix typo in compatible string matching (bsc#1051510).
- usb: iowarrior: fix deadlock on disconnect (bsc#1051510).
- usb: serial: option: Add Motorola modem UARTs (bsc#1051510).
- usb: serial: option: Add support for ZTE MF871A (bsc#1051510).
- usb: serial: option: add D-Link DWM-222 device ID (bsc#1051510).
- usb: serial: option: add the BroadMobi BM818 card (bsc#1051510).
- usb: storage: ums-realtek: Update module parameter description for auto_delink_en (bsc#1051510).
- usb: storage: ums-realtek: Whitelist auto-delink support (bsc#1051510).
- usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests (bsc#1111666).
- usb: typec: tcpm: free log buf memory when remove debug file (bsc#1111666).
- usb: typec: tcpm: remove tcpm dir if no children (bsc#1111666).
- usb: usbfs: fix double-free of usb memory upon submiturb error (bsc#1051510).
- usb: wusbcore: fix unbalanced get/put cluster_id (bsc#1051510).
- usb: yurex: Fix use-after-free in yurex_delete (bsc#1051510).
- vfs: fix page locking deadlocks when deduping files (bsc#1148619).
- virtio/s390: fix race on airq_areas (bsc#1145357).
- vmci: Release resource if the work is already queued (bsc#1051510).
- vrf: make sure skb-&gt;data contains ip header to make routing (networking-stable-19_07_25).
- watchdog: bcm2835_wdt: Fix module autoload (bsc#1051510).
- watchdog: core: fix null pointer dereference when releasing cdev (bsc#1051510).
- watchdog: f71808e_wdt: fix F81866 bit operation (bsc#1051510).
- watchdog: fix compile time error of pretimeout governors (bsc#1051510).
- wimax/i2400m: fix a memory leak bug (bsc#1051510).
- x86/asm: Remove dead __GNUC__ conditionals (bsc#1112178).
- x86/boot: Fix memory leak in default_get_smp_config() (bsc#1114279).
- x86/dma: Get rid of iommu_pass_through (bsc#1136039).
- x86/entry/64/compat: Fix stack switching for XEN PV (bsc#1108382).
- x86/microcode: Fix the microcode load on CPU hotplug for real (bsc#1114279).
- x86/mm: Check for pfn instead of page in vmalloc_sync_one() (bsc#1118689).
- x86/mm: Sync also unmappings in vmalloc_sync_all() (bsc#1118689).
- x86/resctrl: Prevent NULL pointer dereference when local MBM is disabled (bsc#1112178).
- x86/speculation/mds: Apply more accurate check on hypervisor platform (bsc#1114279).
- x86/speculation: Allow guests to use SSBD even if host does not (bsc#1114279).
- x86/unwind: Add hardcoded ORC entry for NULL (bsc#1114279).
- x86/unwind: Handle NULL pointer calls better in frame unwinder (bsc#1114279).
- xdp: unpin xdp umem pages in error path (bsc#1109837).
- xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() (bsc#1065600).
- xfrm: Fix NULL pointer dereference in xfrm_input when skb_dst_force clears the dst_entry (bsc#1143300).
- xfrm: Fix NULL pointer dereference when skb_dst_force clears the dst_entry (bsc#1143300).
- xfrm: Fix bucket count reported to userspace (bsc#1143300).
- xfrm: Fix error return code in xfrm_output_one() (bsc#1143300).
- xfs: do not crash on null attr fork xfs_bmapi_read (bsc#1148035).
- xfs: do not trip over uninitialized buffer on extent read of corrupted inode (bsc#1149053).
- xfs: dump transaction usage details on log reservation overrun (bsc#1145235).
- xfs: eliminate duplicate icreate tx reservation functions (bsc#1145235).
- xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (bsc#1148032).
- xfs: fix semicolon.cocci warnings (bsc#1145235).
- xfs: fix up agi unlinked list reservations (bsc#1145235).
- xfs: include an allocfree res for inobt modifications (bsc#1145235).
- xfs: include inobt buffers in ifree tx log reservation (bsc#1145235).
- xfs: print transaction log reservation on overrun (bsc#1145235).
- xfs: refactor inode chunk alloc/free tx reservation (bsc#1145235).
- xfs: refactor xlog_cil_insert_items() to facilitate transaction dump (bsc#1145235).
- xfs: remove more ondisk directory corruption asserts (bsc#1148034).
- xfs: separate shutdown from ticket reservation print helper (bsc#1145235).
- xfs: truncate transaction does not modify the inobt (bsc#1145235).
- {nl,mac}80211: fix interface combinations on crypto controlled devices (bsc#1111666).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-20"/>
	<updated date="2019-09-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1047238">SUSE bug 1047238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050911">SUSE bug 1050911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054914">SUSE bug 1054914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056686">SUSE bug 1056686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060662">SUSE bug 1060662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061843">SUSE bug 1061843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064597">SUSE bug 1064597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064701">SUSE bug 1064701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066369">SUSE bug 1066369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071009">SUSE bug 1071009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071306">SUSE bug 1071306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078248">SUSE bug 1078248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085536">SUSE bug 1085536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085539">SUSE bug 1085539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086103">SUSE bug 1086103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087092">SUSE bug 1087092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090734">SUSE bug 1090734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091171">SUSE bug 1091171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093205">SUSE bug 1093205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102097">SUSE bug 1102097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104902">SUSE bug 1104902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106061">SUSE bug 1106061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106284">SUSE bug 1106284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106434">SUSE bug 1106434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108382">SUSE bug 1108382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112894">SUSE bug 1112894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112899">SUSE bug 1112899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112902">SUSE bug 1112902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112903">SUSE bug 1112903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112905">SUSE bug 1112905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112906">SUSE bug 1112906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112907">SUSE bug 1112907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114542">SUSE bug 1114542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118689">SUSE bug 1118689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119086">SUSE bug 1119086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120046">SUSE bug 1120046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120876">SUSE bug 1120876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120902">SUSE bug 1120902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123105">SUSE bug 1123105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123959">SUSE bug 1123959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124370">SUSE bug 1124370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129424">SUSE bug 1129424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129519">SUSE bug 1129519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129664">SUSE bug 1129664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131107">SUSE bug 1131107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131281">SUSE bug 1131281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131489">SUSE bug 1131489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131565">SUSE bug 1131565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134291">SUSE bug 1134291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134476">SUSE bug 1134476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134881">SUSE bug 1134881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134882">SUSE bug 1134882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135219">SUSE bug 1135219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135897">SUSE bug 1135897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135990">SUSE bug 1135990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136039">SUSE bug 1136039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136261">SUSE bug 1136261</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136346">SUSE bug 1136346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136349">SUSE bug 1136349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136352">SUSE bug 1136352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136496">SUSE bug 1136496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136498">SUSE bug 1136498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136502">SUSE bug 1136502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136682">SUSE bug 1136682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137322">SUSE bug 1137322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137323">SUSE bug 1137323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137884">SUSE bug 1137884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138099">SUSE bug 1138099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138100">SUSE bug 1138100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138539">SUSE bug 1138539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139020">SUSE bug 1139020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139021">SUSE bug 1139021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139101">SUSE bug 1139101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139500">SUSE bug 1139500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140012">SUSE bug 1140012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140426">SUSE bug 1140426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140487">SUSE bug 1140487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141340">SUSE bug 1141340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141450">SUSE bug 1141450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141543">SUSE bug 1141543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141554">SUSE bug 1141554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142019">SUSE bug 1142019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142076">SUSE bug 1142076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142109">SUSE bug 1142109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142117">SUSE bug 1142117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142118">SUSE bug 1142118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142119">SUSE bug 1142119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142496">SUSE bug 1142496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142541">SUSE bug 1142541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142701">SUSE bug 1142701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142857">SUSE bug 1142857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143300">SUSE bug 1143300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143331">SUSE bug 1143331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143466">SUSE bug 1143466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143738">SUSE bug 1143738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143765">SUSE bug 1143765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143841">SUSE bug 1143841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143843">SUSE bug 1143843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143962">SUSE bug 1143962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144123">SUSE bug 1144123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144375">SUSE bug 1144375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144474">SUSE bug 1144474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144518">SUSE bug 1144518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144582">SUSE bug 1144582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144718">SUSE bug 1144718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144813">SUSE bug 1144813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144880">SUSE bug 1144880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144886">SUSE bug 1144886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144912">SUSE bug 1144912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144920">SUSE bug 1144920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144979">SUSE bug 1144979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145010">SUSE bug 1145010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145018">SUSE bug 1145018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145051">SUSE bug 1145051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145059">SUSE bug 1145059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145189">SUSE bug 1145189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145235">SUSE bug 1145235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145256">SUSE bug 1145256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145300">SUSE bug 1145300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145302">SUSE bug 1145302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145357">SUSE bug 1145357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145388">SUSE bug 1145388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145389">SUSE bug 1145389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145390">SUSE bug 1145390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145391">SUSE bug 1145391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145392">SUSE bug 1145392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145393">SUSE bug 1145393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145394">SUSE bug 1145394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145395">SUSE bug 1145395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145396">SUSE bug 1145396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145397">SUSE bug 1145397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145408">SUSE bug 1145408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145409">SUSE bug 1145409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145446">SUSE bug 1145446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145661">SUSE bug 1145661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145678">SUSE bug 1145678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145687">SUSE bug 1145687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145920">SUSE bug 1145920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145922">SUSE bug 1145922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145934">SUSE bug 1145934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145937">SUSE bug 1145937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145940">SUSE bug 1145940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145941">SUSE bug 1145941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145942">SUSE bug 1145942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145946">SUSE bug 1145946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146074">SUSE bug 1146074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146084">SUSE bug 1146084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146141">SUSE bug 1146141</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146163">SUSE bug 1146163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146215">SUSE bug 1146215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146285">SUSE bug 1146285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146346">SUSE bug 1146346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146351">SUSE bug 1146351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146352">SUSE bug 1146352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146361">SUSE bug 1146361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146368">SUSE bug 1146368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146376">SUSE bug 1146376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146378">SUSE bug 1146378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146381">SUSE bug 1146381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146391">SUSE bug 1146391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146399">SUSE bug 1146399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146413">SUSE bug 1146413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146425">SUSE bug 1146425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146516">SUSE bug 1146516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146524">SUSE bug 1146524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146526">SUSE bug 1146526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146529">SUSE bug 1146529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146531">SUSE bug 1146531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146543">SUSE bug 1146543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146547">SUSE bug 1146547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146550">SUSE bug 1146550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146575">SUSE bug 1146575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146589">SUSE bug 1146589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146678">SUSE bug 1146678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146938">SUSE bug 1146938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148031">SUSE bug 1148031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148032">SUSE bug 1148032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148033">SUSE bug 1148033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148034">SUSE bug 1148034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148035">SUSE bug 1148035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148093">SUSE bug 1148093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148133">SUSE bug 1148133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148192">SUSE bug 1148192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148196">SUSE bug 1148196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148198">SUSE bug 1148198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148202">SUSE bug 1148202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148219">SUSE bug 1148219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148297">SUSE bug 1148297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148303">SUSE bug 1148303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148308">SUSE bug 1148308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148363">SUSE bug 1148363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148379">SUSE bug 1148379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148394">SUSE bug 1148394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148527">SUSE bug 1148527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148570">SUSE bug 1148570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148574">SUSE bug 1148574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148616">SUSE bug 1148616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148617">SUSE bug 1148617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148619">SUSE bug 1148619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148698">SUSE bug 1148698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148859">SUSE bug 1148859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149053">SUSE bug 1149053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149083">SUSE bug 1149083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149104">SUSE bug 1149104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149105">SUSE bug 1149105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149106">SUSE bug 1149106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149197">SUSE bug 1149197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149214">SUSE bug 1149214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149224">SUSE bug 1149224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149325">SUSE bug 1149325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149376">SUSE bug 1149376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149413">SUSE bug 1149413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149418">SUSE bug 1149418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149424">SUSE bug 1149424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149522">SUSE bug 1149522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149527">SUSE bug 1149527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149539">SUSE bug 1149539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149552">SUSE bug 1149552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149591">SUSE bug 1149591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149602">SUSE bug 1149602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149612">SUSE bug 1149612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149626">SUSE bug 1149626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149652">SUSE bug 1149652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149713">SUSE bug 1149713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149940">SUSE bug 1149940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149976">SUSE bug 1149976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150025">SUSE bug 1150025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150033">SUSE bug 1150033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150112">SUSE bug 1150112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150562">SUSE bug 1150562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150727">SUSE bug 1150727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150860">SUSE bug 1150860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150861">SUSE bug 1150861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150933">SUSE bug 1150933</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-18551/">CVE-2017-18551</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20976/">CVE-2018-20976</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-21008/">CVE-2018-21008</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10207/">CVE-2019-10207</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14814/">CVE-2019-14814</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14815/">CVE-2019-14815</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14816/">CVE-2019-14816</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14835/">CVE-2019-14835</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15030/">CVE-2019-15030</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15031/">CVE-2019-15031</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15090/">CVE-2019-15090</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15098/">CVE-2019-15098</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15099/">CVE-2019-15099</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15117/">CVE-2019-15117</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15118/">CVE-2019-15118</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15211/">CVE-2019-15211</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-15212/">CVE-2019-15212</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15214/">CVE-2019-15214</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15215/">CVE-2019-15215</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15216/">CVE-2019-15216</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15217/">CVE-2019-15217</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15218/">CVE-2019-15218</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15219/">CVE-2019-15219</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15220/">CVE-2019-15220</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15221/">CVE-2019-15221</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15222/">CVE-2019-15222</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15239/">CVE-2019-15239</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15290/">CVE-2019-15290</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15292/">CVE-2019-15292</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15538/">CVE-2019-15538</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15666/">CVE-2019-15666</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15902/">CVE-2019-15902</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15917/">CVE-2019-15917</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15919/">CVE-2019-15919</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15920/">CVE-2019-15920</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15921/">CVE-2019-15921</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15924/">CVE-2019-15924</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15926/">CVE-2019-15926</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-15927/">CVE-2019-15927</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9456/">CVE-2019-9456</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497407" comment="kernel-default-livepatch-4.12.14-197.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497408" comment="kernel-default-livepatch-devel-4.12.14-197.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497409" comment="kernel-livepatch-4_12_14-197_18-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138341" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1149841" ref_url="https://bugzilla.suse.com/1149841" source="BUGZILLA"/>
		<reference ref_id="1151021" ref_url="https://bugzilla.suse.com/1151021" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14835" ref_url="https://www.suse.com/security/cve/CVE-2019-14835/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005993.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_4 fixes several issues.

The following security issue was fixed:

- CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-08"/>
	<updated date="2019-10-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1149841">SUSE bug 1149841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151021">SUSE bug 1151021</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14835/">CVE-2019-14835</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720962" comment="kernel-default 4.12.14-197.4 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719181" comment="kernel-livepatch-4_12_14-197_4-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497410" comment="kernel-livepatch-4_12_14-197_4-default-5-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138342" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1149841" ref_url="https://bugzilla.suse.com/1149841" source="BUGZILLA"/>
		<reference ref_id="1151021" ref_url="https://bugzilla.suse.com/1151021" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14835" ref_url="https://www.suse.com/security/cve/CVE-2019-14835/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005993.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_7 fixes several issues.

The following security issue was fixed:

- CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-08"/>
	<updated date="2019-10-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1149841">SUSE bug 1149841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151021">SUSE bug 1151021</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14835/">CVE-2019-14835</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720963" comment="kernel-default 4.12.14-197.7 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719182" comment="kernel-livepatch-4_12_14-197_7-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497411" comment="kernel-livepatch-4_12_14-197_7-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138343" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1149841" ref_url="https://bugzilla.suse.com/1149841" source="BUGZILLA"/>
		<reference ref_id="1151021" ref_url="https://bugzilla.suse.com/1151021" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14835" ref_url="https://www.suse.com/security/cve/CVE-2019-14835/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005993.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_10 fixes several issues.

The following security issue was fixed:

- CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-08"/>
	<updated date="2019-10-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1149841">SUSE bug 1149841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151021">SUSE bug 1151021</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14835/">CVE-2019-14835</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720964" comment="kernel-default 4.12.14-197.10 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719183" comment="kernel-livepatch-4_12_14-197_10-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497412" comment="kernel-livepatch-4_12_14-197_10-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138344" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1149841" ref_url="https://bugzilla.suse.com/1149841" source="BUGZILLA"/>
		<reference ref_id="1151021" ref_url="https://bugzilla.suse.com/1151021" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14835" ref_url="https://www.suse.com/security/cve/CVE-2019-14835/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005993.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_13 fixes several issues.

The following security issue was fixed:

- CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-08"/>
	<updated date="2019-10-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1149841">SUSE bug 1149841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151021">SUSE bug 1151021</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14835/">CVE-2019-14835</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720965" comment="kernel-default 4.12.14-197.15 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719184" comment="kernel-livepatch-4_12_14-197_15-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497413" comment="kernel-livepatch-4_12_14-197_15-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138345" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1149841" ref_url="https://bugzilla.suse.com/1149841" source="BUGZILLA"/>
		<reference ref_id="1151021" ref_url="https://bugzilla.suse.com/1151021" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14835" ref_url="https://www.suse.com/security/cve/CVE-2019-14835/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005993.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-195 fixes several issues.

The following security issue was fixed:

- CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-08"/>
	<updated date="2019-10-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1149841">SUSE bug 1149841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151021">SUSE bug 1151021</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14835/">CVE-2019-14835</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720961" comment="kernel-default 4.12.14-195 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719180" comment="kernel-livepatch-4_12_14-195-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497414" comment="kernel-livepatch-4_12_14-195-default-6-16.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138346" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1054914" ref_url="https://bugzilla.suse.com/1054914" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1104967" ref_url="https://bugzilla.suse.com/1104967" source="BUGZILLA"/>
		<reference ref_id="1109158" ref_url="https://bugzilla.suse.com/1109158" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1119086" ref_url="https://bugzilla.suse.com/1119086" source="BUGZILLA"/>
		<reference ref_id="1123034" ref_url="https://bugzilla.suse.com/1123034" source="BUGZILLA"/>
		<reference ref_id="1127988" ref_url="https://bugzilla.suse.com/1127988" source="BUGZILLA"/>
		<reference ref_id="1131304" ref_url="https://bugzilla.suse.com/1131304" source="BUGZILLA"/>
		<reference ref_id="1137069" ref_url="https://bugzilla.suse.com/1137069" source="BUGZILLA"/>
		<reference ref_id="1137865" ref_url="https://bugzilla.suse.com/1137865" source="BUGZILLA"/>
		<reference ref_id="1137959" ref_url="https://bugzilla.suse.com/1137959" source="BUGZILLA"/>
		<reference ref_id="1137982" ref_url="https://bugzilla.suse.com/1137982" source="BUGZILLA"/>
		<reference ref_id="1140155" ref_url="https://bugzilla.suse.com/1140155" source="BUGZILLA"/>
		<reference ref_id="1141013" ref_url="https://bugzilla.suse.com/1141013" source="BUGZILLA"/>
		<reference ref_id="1142076" ref_url="https://bugzilla.suse.com/1142076" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1146042" ref_url="https://bugzilla.suse.com/1146042" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146540" ref_url="https://bugzilla.suse.com/1146540" source="BUGZILLA"/>
		<reference ref_id="1146664" ref_url="https://bugzilla.suse.com/1146664" source="BUGZILLA"/>
		<reference ref_id="1148133" ref_url="https://bugzilla.suse.com/1148133" source="BUGZILLA"/>
		<reference ref_id="1148712" ref_url="https://bugzilla.suse.com/1148712" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1149313" ref_url="https://bugzilla.suse.com/1149313" source="BUGZILLA"/>
		<reference ref_id="1149446" ref_url="https://bugzilla.suse.com/1149446" source="BUGZILLA"/>
		<reference ref_id="1149555" ref_url="https://bugzilla.suse.com/1149555" source="BUGZILLA"/>
		<reference ref_id="1149651" ref_url="https://bugzilla.suse.com/1149651" source="BUGZILLA"/>
		<reference ref_id="1150305" ref_url="https://bugzilla.suse.com/1150305" source="BUGZILLA"/>
		<reference ref_id="1150381" ref_url="https://bugzilla.suse.com/1150381" source="BUGZILLA"/>
		<reference ref_id="1150423" ref_url="https://bugzilla.suse.com/1150423" source="BUGZILLA"/>
		<reference ref_id="1150846" ref_url="https://bugzilla.suse.com/1150846" source="BUGZILLA"/>
		<reference ref_id="1151067" ref_url="https://bugzilla.suse.com/1151067" source="BUGZILLA"/>
		<reference ref_id="1151192" ref_url="https://bugzilla.suse.com/1151192" source="BUGZILLA"/>
		<reference ref_id="1151350" ref_url="https://bugzilla.suse.com/1151350" source="BUGZILLA"/>
		<reference ref_id="1151610" ref_url="https://bugzilla.suse.com/1151610" source="BUGZILLA"/>
		<reference ref_id="1151661" ref_url="https://bugzilla.suse.com/1151661" source="BUGZILLA"/>
		<reference ref_id="1151662" ref_url="https://bugzilla.suse.com/1151662" source="BUGZILLA"/>
		<reference ref_id="1151667" ref_url="https://bugzilla.suse.com/1151667" source="BUGZILLA"/>
		<reference ref_id="1151680" ref_url="https://bugzilla.suse.com/1151680" source="BUGZILLA"/>
		<reference ref_id="1151891" ref_url="https://bugzilla.suse.com/1151891" source="BUGZILLA"/>
		<reference ref_id="1151955" ref_url="https://bugzilla.suse.com/1151955" source="BUGZILLA"/>
		<reference ref_id="1152024" ref_url="https://bugzilla.suse.com/1152024" source="BUGZILLA"/>
		<reference ref_id="1152025" ref_url="https://bugzilla.suse.com/1152025" source="BUGZILLA"/>
		<reference ref_id="1152026" ref_url="https://bugzilla.suse.com/1152026" source="BUGZILLA"/>
		<reference ref_id="1152161" ref_url="https://bugzilla.suse.com/1152161" source="BUGZILLA"/>
		<reference ref_id="1152187" ref_url="https://bugzilla.suse.com/1152187" source="BUGZILLA"/>
		<reference ref_id="1152243" ref_url="https://bugzilla.suse.com/1152243" source="BUGZILLA"/>
		<reference ref_id="1152325" ref_url="https://bugzilla.suse.com/1152325" source="BUGZILLA"/>
		<reference ref_id="1152457" ref_url="https://bugzilla.suse.com/1152457" source="BUGZILLA"/>
		<reference ref_id="1152460" ref_url="https://bugzilla.suse.com/1152460" source="BUGZILLA"/>
		<reference ref_id="1152466" ref_url="https://bugzilla.suse.com/1152466" source="BUGZILLA"/>
		<reference ref_id="1152525" ref_url="https://bugzilla.suse.com/1152525" source="BUGZILLA"/>
		<reference ref_id="1152972" ref_url="https://bugzilla.suse.com/1152972" source="BUGZILLA"/>
		<reference ref_id="1152974" ref_url="https://bugzilla.suse.com/1152974" source="BUGZILLA"/>
		<reference ref_id="1152975" ref_url="https://bugzilla.suse.com/1152975" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18595" ref_url="https://www.suse.com/security/cve/CVE-2017-18595/" source="CVE"/>
		<reference ref_id="CVE-2019-14821" ref_url="https://www.suse.com/security/cve/CVE-2019-14821/" source="CVE"/>
		<reference ref_id="CVE-2019-15291" ref_url="https://www.suse.com/security/cve/CVE-2019-15291/" source="CVE"/>
		<reference ref_id="CVE-2019-9506" ref_url="https://www.suse.com/security/cve/CVE-2019-9506/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006028.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2017-18595: A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (bnc#1149555).
- CVE-2019-14821: An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring-&gt;first' and 'ring-&gt;last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350).
- CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver (bnc#1146540).
- CVE-2019-9506: The Bluetooth BR/EDR specification up to and including version 5.1 permitted sufficiently low encryption key length and did not prevent an attacker from influencing the key length negotiation. This allowed practical brute-force attacks (aka 'KNOB') that could decrypt traffic and injected arbitrary ciphertext without the victim noticing (bnc#1137865 bnc#1146042).

The following non-security bugs were fixed:

- ACPI: custom_method: fix memory leaks (bsc#1051510).
- ACPI / PCI: fix acpi_pci_irq_enable() memory leak (bsc#1051510).
- ACPI / property: Fix acpi_graph_get_remote_endpoint() name in kerneldoc (bsc#1051510).
- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- ALSA: aoa: onyx: always initialize register read value (bsc#1051510).
- ALSA: firewire-tascam: check intermediate state of clock status and retry (bsc#1051510).
- ALSA: firewire-tascam: handle error code when getting current source of clock (bsc#1051510).
- ASoC: es8328: Fix copy-paste error in es8328_right_line_controls (bsc#1051510).
- ASoC: Intel: Baytrail: Fix implicit fallthrough warning (bsc#1051510).
- ASoC: sun4i-i2s: RX and TX counter registers are swapped (bsc#1051510).
- ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls (bsc#1051510).
- ASoC: wm8988: fix typo in wm8988_right_line_controls (bsc#1051510).
- ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet (bsc#1111666).
- ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init (bsc#1051510).
- atm: iphase: Fix Spectre v1 vulnerability (networking-stable-19_08_08).
- bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA (bsc#1051510).
- blk-flush: do not run queue for requests bypassing flush (bsc#1137959).
- blk-flush: use blk_mq_request_bypass_insert() (bsc#1137959).
- blk-mq: do not allocate driver tag upfront for flush rq (bsc#1137959).
- blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (bsc#1151610).
- blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue (bsc#1137959).
- blk-mq: introduce blk_mq_request_completed() (bsc#1149446).
- blk-mq: introduce blk_mq_tagset_wait_completed_request() (bsc#1149446).
- blk-mq: kABI fixes for blk-mq.h (bsc#1137959).
- blk-mq: move blk_mq_put_driver_tag*() into blk-mq.h (bsc#1137959).
- blk-mq: punt failed direct issue to dispatch list (bsc#1137959).
- blk-mq: put the driver tag of nxt rq before first one is requeued (bsc#1137959).
- blk-mq-sched: decide how to handle flush rq via RQF_FLUSH_SEQ (bsc#1137959).
- block: fix timeout changes for legacy request drivers (bsc#1149446).
- block: kABI fixes for BLK_EH_DONE renaming (bsc#1142076).
- block: rename BLK_EH_NOT_HANDLED to BLK_EH_DONE (bsc#1142076).
- bnx2x: Disable multi-cos feature (networking-stable-19_08_08).
- bonding/802.3ad: fix link_failure_count tracking (bsc#1137069 bsc#1141013).
- bonding/802.3ad: fix slave link initialization transition states (bsc#1137069 bsc#1141013).
- bonding: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21).
- bonding: set default miimon value for non-arp modes if not set (bsc#1137069 bsc#1141013).
- bonding: speed/duplex update at NETDEV_UP event (bsc#1137069 bsc#1141013).
- btrfs: fix use-after-free when using the tree modification log (bsc#1151891).
- btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls (bsc#1152975).
- btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space (bsc#1152974).
- btrfs: relocation: fix use-after-free on dead relocation roots (bsc#1152972).
- ceph: use ceph_evict_inode to cleanup inode's resource (bsc#1148133).
- clk: at91: fix update bit maps on CFG_MOR write (bsc#1051510).
- clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks (bsc#1051510).
- clk: sunxi-ng: v3s: add the missing PLL_DDR1 (bsc#1051510).
- Compile nvme.ko as module (bsc#1150846)
- crypto: caam - fix concurrency issue in givencrypt descriptor (bsc#1051510).
- crypto: caam - free resources in case caam_rng registration failed (bsc#1051510).
- crypto: caam/qi - fix error handling in ERN handler (bsc#1111666).
- crypto: cavium/zip - Add missing single_release() (bsc#1051510).
- crypto: ccp - Reduce maximum stack usage (bsc#1051510).
- crypto: qat - Silence smp_processor_id() warning (bsc#1051510).
- crypto: skcipher - Unmap pages after an external error (bsc#1051510).
- dma-buf/sw_sync: Synchronize signal vs syncpt free (bsc#1111666).
- dmaengine: dw: platform: Switch to acpi_dma_controller_register() (bsc#1051510).
- dmaengine: iop-adma.c: fix printk format warning (bsc#1051510).
- drivers: thermal: int340x_thermal: Fix sysfs race condition (bsc#1051510).
- drm/i915: Fix various tracepoints for gen2 (bsc#1113722)
- drm/imx: Drop unused imx-ipuv3-crtc.o build (bsc#1113722)
- EDAC/amd64: Decode syndrome before translating address (bsc#1114279).
- eeprom: at24: make spd world-readable again (git-fixes).
- ext4: fix warning inside ext4_convert_unwritten_extents_endio (bsc#1152025).
- ext4: set error return correctly when ext4_htree_store_dirent fails (bsc#1152024).
- Fix kabi for: NFSv4: Fix OPEN / CLOSE race (git-fixes).
- floppy: fix usercopy direction (bsc#1111666).
- gpio: fix line flag validation in lineevent_create (bsc#1051510).
- gpio: fix line flag validation in linehandle_create (bsc#1051510).
- gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist (bsc#1051510).
- gpiolib: only check line handle flags once (bsc#1051510).
- gpio: Move gpiochip_lock/unlock_as_irq to gpio/driver.h (bsc#1051510).
- hwmon: (lm75) Fix write operations for negative temperatures (bsc#1051510).
- hwmon: (shtc1) fix shtc1 and shtw1 id mask (bsc#1051510).
- i2c: designware: Synchronize IRQs when unregistering slave client (bsc#1111666).
- i40e: Add support for X710 device (bsc#1151067).
- ife: error out when nla attributes are empty (networking-stable-19_08_08).
- iio: dac: ad5380: fix incorrect assignment to val (bsc#1051510).
- Input: elan_i2c - remove Lenovo Legion Y7000 PnpID (bsc#1051510).
- iommu/dma: Fix for dereferencing before null checking (bsc#1151667).
- iommu: Do not use sme_active() in generic code (bsc#1151661).
- iommu/iova: Avoid false sharing on fq_timer_on (bsc#1151662).
- ip6_tunnel: fix possible use-after-free on xmit (networking-stable-19_08_08).
- ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set (networking-stable-19_08_28).
- isdn/capi: check message length in capi_write() (bsc#1051510).
- kABI: media: em28xx: fix handler for vidioc_s_input() (bsc#1051510). fixes kABI
- kABI: media: em28xx: stop rewriting device's struct (bsc#1051510). fixes kABI
- KABI protect struct vmem_altmap (bsc#1150305).
- KVM: PPC: Book3S: Fix incorrect guest-to-user-translation error handling (bsc#1061840).
- KVM: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores (bsc#1061840).
- KVM: PPC: Book3S HV: Do not lose pending doorbell request on migration on P9 (bsc#1061840).
- KVM: PPC: Book3S HV: Do not push XIVE context when not using XIVE device (bsc#1061840).
- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest (bsc#1061840).
- KVM: PPC: Book3S HV: Fix race in re-enabling XIVE escalation interrupts (bsc#1061840).
- KVM: PPC: Book3S HV: Handle virtual mode in XIVE VCPU push code (bsc#1061840).
- KVM: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the VP (bsc#1061840).
- leds: leds-lp5562 allow firmware files up to the maximum length (bsc#1051510).
- leds: trigger: gpio: GPIO 0 is valid (bsc#1051510).
- libertas_tf: Use correct channel range in lbtf_geo_init (bsc#1051510).
- libiscsi: do not try to bypass SCSI EH (bsc#1142076).
- libnvdimm/altmap: Track namespace boundaries in altmap (bsc#1150305).
- libnvdimm: prevent nvdimm from requesting key when security is disabled (bsc#1137982).
- lightnvm: remove dependencies on BLK_DEV_NVME and PCI (bsc#1150846).
- livepatch: Nullify obj-&gt;mod in klp_module_coming()'s error path (bsc#1071995).
- mac80211: minstrel_ht: fix per-group max throughput rate initialization (bsc#1051510).
- md: do not report active array_state until after revalidate_disk() completes (git-fixes).
- md: only call set_in_sync() when it is expected to succeed (git-fixes).
- md/raid6: Set R5_ReadError when there is read failure on parity disk (git-fixes).
- media: atmel: atmel-isi: fix timeout value for stop streaming (bsc#1051510).
- media: dib0700: fix link error for dibx000_i2c_set_speed (bsc#1051510).
- media: em28xx: fix handler for vidioc_s_input() (bsc#1051510).
- media: em28xx: stop rewriting device's struct (bsc#1051510).
- media: fdp1: Reduce FCP not found message level to debug (bsc#1051510).
- media: marvell-ccic: do not generate EOF on parallel bus (bsc#1051510).
- media: mc-device.c: do not memset __user pointer contents (bsc#1051510).
- media: ov6650: Fix sensor possibly not detected on probe (bsc#1051510).
- media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper (bsc#1051510).
- media: replace strcpy() by strscpy() (bsc#1051510).
- media: Revert '[media] marvell-ccic: reset ccic phy when stop streaming for stability' (bsc#1051510).
- media: technisat-usb2: break out of loop at end of buffer (bsc#1051510).
- media: tm6000: double free if usb disconnect while streaming (bsc#1051510).
- media: vb2: Fix videobuf2 to map correct area (bsc#1051510).
- mic: avoid statically declaring a 'struct device' (bsc#1051510).
- mmc: sdhci-msm: fix mutex while in spinlock (bsc#1142635).
- mmc: sdhci-of-arasan: Do now show error message in case of deffered probe (bsc#1119086).
- mtd: spi-nor: Fix Cadence QSPI RCU Schedule Stall (bsc#1051510).
- mvpp2: refactor MTU change code (networking-stable-19_08_08).
- net: bridge: delete local fdb on device init failure (networking-stable-19_08_08).
- net: bridge: mcast: do not delete permanent entries when fast leave is enabled (networking-stable-19_08_08).
- net: fix ifindex collision during namespace removal (networking-stable-19_08_08).
- net/ibmvnic: prevent more than one thread from running in reset (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (bsc#1152457 ltc#174432).
- net/mlx5e: Only support tx/rx pause setting for port owner (networking-stable-19_08_21).
- net/mlx5e: Prevent encap flow counter update async to user query (networking-stable-19_08_08).
- net/mlx5e: Use flow keys dissector to parse packets for ARFS (networking-stable-19_08_21).
- net/mlx5: Use reversed order when unregister devices (networking-stable-19_08_08).
- net/packet: fix race in tpacket_snd() (networking-stable-19_08_21).
- net: sched: Fix a possible null-pointer dereference in dequeue_func() (networking-stable-19_08_08).
- net/smc: make sure EPOLLOUT is raised (networking-stable-19_08_28).
- NFS4: Fix v4.0 client state corruption when mount (git-fixes).
- nfsd: degraded slot-count more gracefully as allocation nears exhaustion (bsc#1150381).
- nfsd: Do not release the callback slot unless it was actually held (git-fixes).
- nfsd: Fix overflow causing non-working mounts on 1 TB machines (bsc#1150381).
- nfsd: fix performance-limiting session calculation (bsc#1150381).
- nfsd: give out fewer session slots as limit approaches (bsc#1150381).
- nfsd: handle drc over-allocation gracefully (bsc#1150381).
- nfsd: increase DRC cache limit (bsc#1150381).
- NFS: Do not interrupt file writeout due to fatal errors (git-fixes).
- NFS: Do not open code clearing of delegation state (git-fixes).
- NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0 (git-fixes).
- NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts (git-fixes).
- NFS: Forbid setting AF_INET6 to 'struct sockaddr_in'-&gt;sin_family (git-fixes).
- NFS: Refactor nfs_lookup_revalidate() (git-fixes).
- NFS: Remove redundant semicolon (git-fixes).
- NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter (git-fixes).
- NFSv4.1: Fix open stateid recovery (git-fixes).
- NFSv4.1: Only reap expired delegations (git-fixes).
- NFSv4: Check the return value of update_open_stateid() (git-fixes).
- NFSv4: Fix an Oops in nfs4_do_setattr (git-fixes).
- NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim() (git-fixes).
- NFSv4: Fix delegation state recovery (git-fixes).
- NFSv4: Fix lookup revalidate of regular files (git-fixes).
- NFSv4: Fix OPEN / CLOSE race (git-fixes).
- NFSv4: Handle the special Linux file open access mode (git-fixes).
- NFSv4: Only pass the delegation to setattr if we're sending a truncate (git-fixes).
- NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend() (git-fixes).
- nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds (bsc#1051510).
- null_blk: complete requests from -&gt;timeout (bsc#1149446).
- null_blk: wire up timeouts (bsc#1149446).
- nvme: do not abort completed request in nvme_cancel_request (bsc#1149446).
- nvme: fix multipath crash when ANA is deactivated (bsc#1149446).
- nvme: fix multipath crash when ANA is deactivated (bsc#1149446).
- nvmem: Use the same permissions for eeprom as for nvmem (git-fixes).
- nvme-rdma: Allow DELETING state change failure in (bsc#1104967,).
- nvme-rdma: centralize admin/io queue teardown sequence (bsc#1142076).
- nvme-rdma: centralize controller setup sequence (bsc#1142076).
- nvme-rdma: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-rdma: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-rdma: fix timeout handler (bsc#1149446).
- nvme-rdma: fix timeout handler (bsc#1149446).
- nvme-rdma: remove redundant reference between ib_device and tagset (bsc#1149446).
- nvme-rdma: stop admin queue before freeing it (bsc#1140155).
- nvme-rdma: support up to 4 segments of inline data (bsc#1142076).
- nvme-rdma: unquiesce queues when deleting the controller (bsc#1142076).
- nvme-rdma: use dynamic dma mapping per command (bsc#1149446).
- nvme: remove ns sibling before clearing path (bsc#1140155).
- nvme: return BLK_EH_DONE from -&gt;timeout (bsc#1142076).
- nvme-tcp: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-tcp: fix timeout handler (bsc#1149446).
- nvme: wait until all completed request's complete fn is called (bsc#1149446).
- PCI: Add ACS quirk for Amazon Annapurna Labs root ports (bsc#1152187,bsc#1152525).
- PCI: Add Amazon's Annapurna Labs vendor ID (bsc#1152187,bsc#1152525).
- PCI: Add quirk to disable MSI-X support for Amazon's Annapurna Labs Root Port (bsc#1152187,bsc#1152525).
- PCI: hv: Detect and fix Hyper-V PCI domain number collision (bsc#1150423).
- PCI/VPD: Prevent VPD access for Amazon's Annapurna Labs Root Port (bsc#1152187,bsc#1152525).
- phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current (bsc#1051510).
- platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table (bsc#1051510).
- PM: sleep: Fix possible overflow in pm_system_cancel_wakeup() (bsc#1051510).
- pNFS fallback to MDS if no deviceid found (git-fixes).
- pNFS/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error (git-fixes).
- pNFS/flexfiles: Turn off soft RPC calls (git-fixes).
- powerpc/64: Make sys_switch_endian() traceable (bsc#1065729).
- powerpc/64s/radix: Fix MADV_[FREE|DONTNEED] TLB flush miss problem with THP (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Fix memory hotplug section page table creation (bsc#1065729).
- powerpc/64s/radix: Fix memory hot-unplug page table split (bsc#1065729).
- powerpc/64s/radix: Implement _tlbie(l)_va_range flush functions (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Improve preempt handling in TLB code (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Improve TLB flushing for page table freeing (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Introduce local single page ceiling for TLB range flush (bsc#1055117 bsc#1152161 ltc#181664).
- powerpc/64s/radix: Optimize flush_tlb_range (bsc#1152161 ltc#181664).
- powerpc/book3s64/mm: Do not do tlbie fixup for some hardware revisions (bsc#1152161 ltc#181664).
- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (bsc#1152161 ltc#181664).
- powerpc: bpf: Fix generation of load/store DW instructions (bsc#1065729).
- powerpc/bpf: use unsigned division instruction for 64-bit operations (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range() (bsc#1065729).
- powerpc/irq: Do not WARN continuously in arch_local_irq_restore() (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (bsc#1152161 ltc#181664).
- powerpc/mm/radix: Drop unneeded NULL check (bsc#1152161 ltc#181664).
- powerpc/mm/radix: implement LPID based TLB flushes to be used by KVM (bsc#1152161 ltc#181664).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling (bsc#1065729).
- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get, set} (bsc#1152243 ltc#181472).
- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS (bsc#1065729).
- powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA window (bsc#1061840).
- powerpc/powernv/ioda: Fix race in TCE level allocation (bsc#1061840).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt handling to C (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/pseries: Call H_BLOCK_REMOVE when supported (bsc#1109158).
- powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() (bsc#1065729).
- powerpc/pseries/memory-hotplug: Fix return value type of find_aa_index (bsc#1065729).
- powerpc/pseries: Read TLB Block Invalidate Characteristics (bsc#1109158).
- powerpc/ptrace: Simplify vr_get/set() to avoid GCC warning (bsc#1148868).
- powerpc/xive: Fix bogus error code returned by OPAL (bsc#1065729).
- powerpc/xive: Implement get_irqchip_state method for XIVE to fix shutdown race (bsc#1065729).
- powerpc/xmon: Fix opcode being uninitialized in print_insn_powerpc (bsc#1065729).
- power: reset: gpio-restart: Fix typo when gpio reset is not found (bsc#1051510).
- power: supply: Init device wakeup after device_add() (bsc#1051510).
- ppp: Fix memory leak in ppp_write (git-fixes).
- printk: Do not lose last line in kmsg buffer dump (bsc#1152460).
- printk: fix printk_time race (bsc#1152466).
- printk/panic: Avoid deadlock in printk() after stopping CPUs by NMI (bsc#1148712).
- qla2xxx: kABI fixes for v10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988).
- qla2xxx: remove SGI SN2 support (bsc#1123034 bsc#1131304 bsc#1127988).
- quota: fix wrong condition in is_quota_modification() (bsc#1152026).
- r8152: Set memory to all 0xFFs on failed reg reads (bsc#1051510).
- regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg (bsc#1051510).
- Revert 'mwifiex: fix system hang problem after resume' (bsc#1051510).
- rtlwifi: Fix file release memory leak (bsc#1111666).
- scsi: qla2xxx: Add 28xx flash primary/secondary status/image mechanism (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add Device ID for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add First Burst support for FC-NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add fw_attr and port_no SysFS node (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add new FW dump template entry types (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add pci function reset support (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add protection mask module parameters (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add Serdes support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add support for multiple fwdump templates/segments (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add support for setting port speed (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Allow NVMe IO to resume with short cable pull (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: allow session delete to finish before create (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid PCI IRQ affinity mapping when multiqueue is not supported (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: avoid printf format warning (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that Coverity complains about dereferencing a NULL rport pointer (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that qla2x00_mem_free() crashes if called twice (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change default ZIO threshold (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change the return type of qla24xx_read_flash_data() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change the return type of qla2x00_update_ms_fdmi_iocb() into void (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check for FW started flag before aborting (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: check for kstrtol() failure (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check secondary image if reading the primary image fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check the PCI info string output buffer size (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check the size of firmware data structures at compile time (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanup fcport memory to prevent leak (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanup redundant qla2x00_abort_all_cmds during unload (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanups for NVRAM/Flash read/write path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: cleanup trace buffer initialization (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a command is released that is owned by the firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a mailbox command times out (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if parsing the version string fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the completion path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if waiting for pending commands times out (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain loudly about reference count underflow (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correct error handling during initialization failures (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correction and improvement to fwdt processing (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correctly report max/min supported speeds (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: deadlock by configfs_depend_item (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare local symbols static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla24xx_build_scsi_crc_2_iocbs() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla2x00_find_new_loop_id() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Downgrade driver to 10.01.00.19-k There are upstream bug reports against 10.01.00.19-k which haven't been resolved. Also the newer version failed to get a proper review. For time being it's better to got with the older version and do not introduce new bugs.
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix abort timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a recently introduced kernel warning (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a small typo in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix code indentation for qla27xx_fwdt_entry (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix comment alignment in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix comment in MODULE_PARM_DESC in qla2xxx (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix different size DMA Alloc/Unmap (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix DMA error when the DIF sg buffer crosses 4GB boundary (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix DMA unmap leak (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix fcport null pointer access (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix formatting of pointer types (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix fw dump corruption (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix fw options handle eh_bus_reset() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hang in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hardirq-unsafe locking (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hardlockup in abort command during driver remove (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix message indicating vectors used by driver (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix N2N link reset (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix Nport ID display value (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NVMe port discovery after a short device port loss (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix possible fcport null-pointer dereferences (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix premature timer expiration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix read offset in qla24xx_load_risc_flash() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix routine qla27xx_dump_{mpi|ram}() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix session cleanup hang (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix spelling mistake 'alredy' -&gt; 'already' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix spelling mistake 'initializatin' -&gt; 'initialization' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix SRB allocation flag to avoid sleeping in IRQ context (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stale session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stuck login session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix unload when NVMe devices are configured (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: flush IO on chip reset or sess delete (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Further limit FLASH region write access from SysFS (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Improve Linux kernel coding style conformance (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from qla_dsd.h (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Increase the max_sgl_segments to 1024 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Increase the size of the mailbox arrays from 4 to 8 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Insert spaces where required (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types for FC src/dst IDs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the dsd32 and dsd64 data structures (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Leave a blank line after declarations (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Let the compiler check the type of the SCSI command context pointer (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Log the status code if a firmware command fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs use little endian (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_mem_free() easier to verify (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_process_response_queue() easier to read (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make sure that aborted commands are freed (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move debug messages before sending srb preventing panic (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move marker request behind QPair (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_clear_loop_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_is_reserved_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_set_fcport_state() from a .h into a .c file (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_set_reserved_loop_ids() definition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move the &lt;linux/io-64-nonatomic-lo-hi.h&gt; include directive (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move the port_state_str definition from a .h to a .c file (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: no need to check return value of debugfs_create functions (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: on session delete, return nvme cmd (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Pass little-endian values to the firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent multiple ADISC commands per session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent SysFS access when chip is down (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the number of casts in GID list code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the number of forward declarations (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reject EH_{abort|device_reset|target_request} (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a comment that refers to the SCSI host lock (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove an include directive from qla_mr.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a superfluous forward declaration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove dead code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: remove double assignment in qla2x00_update_fcport (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove FW default template (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove qla_tgt_cmd.data_work and qla_tgt_cmd.data_work_free (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove qla_tgt_cmd.released (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: remove redundant null check on pointer sess (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove set but not used variable 'ptr_dma' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous casts (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unnecessary locking from the target code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unnecessary null check (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove useless set memory to zero use memset() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Replace vmalloc + memset with vzalloc (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Report invalid mailbox status codes (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Report the firmware status code if a mailbox command fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Restore FAWWPN of Physical Port only for loop down (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Retry fabric Scan on IOCB queue full (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Secure flash update support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set remote port devloss timeout to 0 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the qpair in SRB to NULL when SRB is released (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS pass-through IOCBs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the SCSI command result before calling the command done (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Silence fwdump template message (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Silence Successful ELS IOCB message (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplification of register address used in qla_tmpl.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify a debug statement (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify conditional check again (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qlt_send_term_imm_notif() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Skip FW dump on LOOP initialization error (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer overflow (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Suppress multiple Coverity complaint about out-of-bounds accesses (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: target: Fix offline port handling and host reset handling (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Uninline qla2x00_init_timer() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Unregister resources in the opposite order of the registration order (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.00.00.13-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.00.00.14-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.15-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.16-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.19-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update flash read/write routine (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use ARRAY_SIZE() in the definition of QLA_LAST_SPEED (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use common update-firmware-options routine for ISP27xx+ (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use complete switch scan for RSCN events (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use Correct index for Q-Pair array (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use get/put_unaligned where appropriate (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use __le64 instead of uint32_t for sending DMA addresses to firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy() and strncpy() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use tabs instead of spaces for indentation (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use tabs to indent code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Verify locking assumptions at runtime (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: scsi_dh_rdac: zero cdb in send_mode_select() (bsc#1149313).
- scsi: scsi_transport_fc: nvme: display FC-NVMe port roles (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: tcm_qla2xxx: Minimize #include directives (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi_transport_fc: complete requests from -&gt;timeout (bsc#1142076).
- sctp: fix the transport error_count check (networking-stable-19_08_21).
- secure boot lockdown: Fix-up backport of /dev/mem access restriction The upstream-submitted patch set has evolved over time, align our patches (contents and description) to reflect the current status as far as /dev/mem access is concerned.
- sky2: Disable MSI on yet another ASUS boards (P6Xxxx) (bsc#1051510).
- slip: make slhc_free() silently accept an error pointer (bsc#1051510).
- slip: sl_alloc(): remove unused parameter 'dev_t line' (bsc#1051510).
- spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours (bsc#1111666).
- SUNRPC fix regression in umount of a secure mount (git-fixes).
- SUNRPC: Handle connection breakages correctly in call_status() (git-fixes).
- SUNRPC/nfs: Fix return value for nfs4_callback_compound() (git-fixes).
- supported.conf: Add vfio_ccw (bsc#1151192 jsc#SLE-6138).
- supported.conf: Mark vfio_ccw supported by SUSE, because bugs can be routed to IBM via SUSE support (jsc#SLE-6138, bsc#1151192).
- tcp: make sure EPOLLOUT wont be missed (networking-stable-19_08_28).
- team: Add vlan tx offload to hw_enc_features (bsc#1051510).
- team: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21).
- tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts (bsc#1082555).
- tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs (bsc#1111666).
- tun: fix use-after-free when register netdev failed (bsc#1111666).
- Update s390 config files (bsc#1151192).  - VFIO_CCW=m  - S390_CCW_IOMMU=y
- USB: usbcore: Fix slab-out-of-bounds bug during device reset (bsc#1051510).
- vhost/test: fix build for vhost test (bsc#1111666).
- video: ssd1307fb: Start page range at page_offset (bsc#1113722)
- wcn36xx: use dynamic allocation for large variables (bsc#1111666).
- x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h (bsc#1114279).
- x86/fpu: Add FPU state copying quirk to handle XRSTOR failure on Intel Skylake CPUs (bsc#1151955).
- x86/tls: Fix possible spectre-v1 in do_get_thread_area() (bsc#1114279).
- xen/netback: Reset nr_frags before freeing skb (networking-stable-19_08_21).
- xen-netfront: do not assume sk_buff_head list is empty in error handling (bsc#1065600).
- xen-netfront: do not use ~0U as error return value for xennet_fill_frags() (bsc#1065600).
- xen/xenbus: fix self-deadlock after killing user process (bsc#1065600).
- xsk: avoid store-tearing when assigning queues (bsc#1111666).
- xsk: avoid store-tearing when assigning umem (bsc#1111666).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-18"/>
	<updated date="2019-10-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054914">SUSE bug 1054914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104967">SUSE bug 1104967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109158">SUSE bug 1109158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119086">SUSE bug 1119086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123034">SUSE bug 1123034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127988">SUSE bug 1127988</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131304">SUSE bug 1131304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137069">SUSE bug 1137069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137865">SUSE bug 1137865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137959">SUSE bug 1137959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137982">SUSE bug 1137982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140155">SUSE bug 1140155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141013">SUSE bug 1141013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142076">SUSE bug 1142076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146042">SUSE bug 1146042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146540">SUSE bug 1146540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146664">SUSE bug 1146664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148133">SUSE bug 1148133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148712">SUSE bug 1148712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149313">SUSE bug 1149313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149446">SUSE bug 1149446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149555">SUSE bug 1149555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149651">SUSE bug 1149651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150305">SUSE bug 1150305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150381">SUSE bug 1150381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150423">SUSE bug 1150423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150846">SUSE bug 1150846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151067">SUSE bug 1151067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151192">SUSE bug 1151192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151350">SUSE bug 1151350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151610">SUSE bug 1151610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151661">SUSE bug 1151661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151662">SUSE bug 1151662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151667">SUSE bug 1151667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151680">SUSE bug 1151680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151891">SUSE bug 1151891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151955">SUSE bug 1151955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152024">SUSE bug 1152024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152025">SUSE bug 1152025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152026">SUSE bug 1152026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152161">SUSE bug 1152161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152187">SUSE bug 1152187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152243">SUSE bug 1152243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152325">SUSE bug 1152325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152457">SUSE bug 1152457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152460">SUSE bug 1152460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152466">SUSE bug 1152466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152525">SUSE bug 1152525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152972">SUSE bug 1152972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152974">SUSE bug 1152974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152975">SUSE bug 1152975</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18595/">CVE-2017-18595</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-14821/">CVE-2019-14821</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15291/">CVE-2019-15291</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9506/">CVE-2019-9506</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497415" comment="kernel-default-livepatch-4.12.14-197.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497416" comment="kernel-default-livepatch-devel-4.12.14-197.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497417" comment="kernel-livepatch-4_12_14-197_21-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138347" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1144903" ref_url="https://bugzilla.suse.com/1144903" source="BUGZILLA"/>
		<reference ref_id="1153108" ref_url="https://bugzilla.suse.com/1153108" source="BUGZILLA"/>
		<reference ref_id="1153158" ref_url="https://bugzilla.suse.com/1153158" source="BUGZILLA"/>
		<reference ref_id="1153161" ref_url="https://bugzilla.suse.com/1153161" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-17133" ref_url="https://www.suse.com/security/cve/CVE-2019-17133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2829-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192829-1.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_10 fixes several issues.

The following security issues were fixed:

- CVE-2019-10220: Fixed a relative path escape in the Samba client module (bsc#1144903, bsc#1153108).
- CVE-2019-17133: Fixed a buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c caused by long SSID IEs (bsc#1153158).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-30"/>
	<updated date="2019-10-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153108">SUSE bug 1153108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153158">SUSE bug 1153158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153161">SUSE bug 1153161</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17133/">CVE-2019-17133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720964" comment="kernel-default 4.12.14-197.10 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719183" comment="kernel-livepatch-4_12_14-197_10-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497418" comment="kernel-livepatch-4_12_14-197_10-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138348" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1144903" ref_url="https://bugzilla.suse.com/1144903" source="BUGZILLA"/>
		<reference ref_id="1153108" ref_url="https://bugzilla.suse.com/1153108" source="BUGZILLA"/>
		<reference ref_id="1153158" ref_url="https://bugzilla.suse.com/1153158" source="BUGZILLA"/>
		<reference ref_id="1153161" ref_url="https://bugzilla.suse.com/1153161" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-17133" ref_url="https://www.suse.com/security/cve/CVE-2019-17133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2829-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192829-1.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_21 fixes several issues.

The following security issues were fixed:

- CVE-2019-10220: Fixed a relative path escape in the Samba client module (bsc#1144903, bsc#1153108).
- CVE-2019-17133: Fixed a buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c caused by long SSID IEs (bsc#1153158).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-30"/>
	<updated date="2019-10-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153108">SUSE bug 1153108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153158">SUSE bug 1153158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153161">SUSE bug 1153161</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17133/">CVE-2019-17133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720966" comment="kernel-default 4.12.14-197.21 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719185" comment="kernel-livepatch-4_12_14-197_21-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497419" comment="kernel-livepatch-4_12_14-197_21-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138349" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1144903" ref_url="https://bugzilla.suse.com/1144903" source="BUGZILLA"/>
		<reference ref_id="1153108" ref_url="https://bugzilla.suse.com/1153108" source="BUGZILLA"/>
		<reference ref_id="1153158" ref_url="https://bugzilla.suse.com/1153158" source="BUGZILLA"/>
		<reference ref_id="1153161" ref_url="https://bugzilla.suse.com/1153161" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-17133" ref_url="https://www.suse.com/security/cve/CVE-2019-17133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2829-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192829-1.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-195 fixes several issues.

The following security issues were fixed:

- CVE-2019-10220: Fixed a relative path escape in the Samba client module (bsc#1144903, bsc#1153108).
- CVE-2019-17133: Fixed a buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c caused by long SSID IEs (bsc#1153158).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-30"/>
	<updated date="2019-10-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153108">SUSE bug 1153108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153158">SUSE bug 1153158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153161">SUSE bug 1153161</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17133/">CVE-2019-17133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720961" comment="kernel-default 4.12.14-195 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719180" comment="kernel-livepatch-4_12_14-195-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497420" comment="kernel-livepatch-4_12_14-195-default-7-19.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138350" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1144903" ref_url="https://bugzilla.suse.com/1144903" source="BUGZILLA"/>
		<reference ref_id="1153108" ref_url="https://bugzilla.suse.com/1153108" source="BUGZILLA"/>
		<reference ref_id="1153158" ref_url="https://bugzilla.suse.com/1153158" source="BUGZILLA"/>
		<reference ref_id="1153161" ref_url="https://bugzilla.suse.com/1153161" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-17133" ref_url="https://www.suse.com/security/cve/CVE-2019-17133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2829-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192829-1.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_4 fixes several issues.

The following security issues were fixed:

- CVE-2019-10220: Fixed a relative path escape in the Samba client module (bsc#1144903, bsc#1153108).
- CVE-2019-17133: Fixed a buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c caused by long SSID IEs (bsc#1153158).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-30"/>
	<updated date="2019-10-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153108">SUSE bug 1153108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153158">SUSE bug 1153158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153161">SUSE bug 1153161</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17133/">CVE-2019-17133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720962" comment="kernel-default 4.12.14-197.4 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719181" comment="kernel-livepatch-4_12_14-197_4-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497421" comment="kernel-livepatch-4_12_14-197_4-default-6-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138351" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1144903" ref_url="https://bugzilla.suse.com/1144903" source="BUGZILLA"/>
		<reference ref_id="1153108" ref_url="https://bugzilla.suse.com/1153108" source="BUGZILLA"/>
		<reference ref_id="1153158" ref_url="https://bugzilla.suse.com/1153158" source="BUGZILLA"/>
		<reference ref_id="1153161" ref_url="https://bugzilla.suse.com/1153161" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-17133" ref_url="https://www.suse.com/security/cve/CVE-2019-17133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2829-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192829-1.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_7 fixes several issues.

The following security issues were fixed:

- CVE-2019-10220: Fixed a relative path escape in the Samba client module (bsc#1144903, bsc#1153108).
- CVE-2019-17133: Fixed a buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c caused by long SSID IEs (bsc#1153158).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-30"/>
	<updated date="2019-10-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153108">SUSE bug 1153108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153158">SUSE bug 1153158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153161">SUSE bug 1153161</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17133/">CVE-2019-17133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720963" comment="kernel-default 4.12.14-197.7 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719182" comment="kernel-livepatch-4_12_14-197_7-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497422" comment="kernel-livepatch-4_12_14-197_7-default-5-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138352" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1103203" ref_url="https://bugzilla.suse.com/1103203" source="BUGZILLA"/>
		<reference ref_id="1144903" ref_url="https://bugzilla.suse.com/1144903" source="BUGZILLA"/>
		<reference ref_id="1149841" ref_url="https://bugzilla.suse.com/1149841" source="BUGZILLA"/>
		<reference ref_id="1151021" ref_url="https://bugzilla.suse.com/1151021" source="BUGZILLA"/>
		<reference ref_id="1153108" ref_url="https://bugzilla.suse.com/1153108" source="BUGZILLA"/>
		<reference ref_id="1153158" ref_url="https://bugzilla.suse.com/1153158" source="BUGZILLA"/>
		<reference ref_id="1153161" ref_url="https://bugzilla.suse.com/1153161" source="BUGZILLA"/>
		<reference ref_id="904970" ref_url="https://bugzilla.suse.com/904970" source="BUGZILLA"/>
		<reference ref_id="907150" ref_url="https://bugzilla.suse.com/907150" source="BUGZILLA"/>
		<reference ref_id="920615" ref_url="https://bugzilla.suse.com/920615" source="BUGZILLA"/>
		<reference ref_id="920633" ref_url="https://bugzilla.suse.com/920633" source="BUGZILLA"/>
		<reference ref_id="930408" ref_url="https://bugzilla.suse.com/930408" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-14835" ref_url="https://www.suse.com/security/cve/CVE-2019-14835/" source="CVE"/>
		<reference ref_id="CVE-2019-17133" ref_url="https://www.suse.com/security/cve/CVE-2019-17133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006074.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_15 fixes several issues.

The following security issues were fixed:

- CVE-2019-10220: Fixed a relative path escape in the Samba client module (bsc#1144903, bsc#1153108).
- CVE-2019-17133: Fixed a buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c caused by long SSID IEs (bsc#1153158).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-30"/>
	<updated date="2019-10-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1103203">SUSE bug 1103203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149841">SUSE bug 1149841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151021">SUSE bug 1151021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153108">SUSE bug 1153108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153158">SUSE bug 1153158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153161">SUSE bug 1153161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/904970">SUSE bug 904970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/907150">SUSE bug 907150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920615">SUSE bug 920615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/920633">SUSE bug 920633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/930408">SUSE bug 930408</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14835/">CVE-2019-14835</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17133/">CVE-2019-17133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720965" comment="kernel-default 4.12.14-197.15 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719184" comment="kernel-livepatch-4_12_14-197_15-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497423" comment="kernel-livepatch-4_12_14-197_15-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138353" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1144903" ref_url="https://bugzilla.suse.com/1144903" source="BUGZILLA"/>
		<reference ref_id="1149841" ref_url="https://bugzilla.suse.com/1149841" source="BUGZILLA"/>
		<reference ref_id="1153108" ref_url="https://bugzilla.suse.com/1153108" source="BUGZILLA"/>
		<reference ref_id="1153158" ref_url="https://bugzilla.suse.com/1153158" source="BUGZILLA"/>
		<reference ref_id="1153161" ref_url="https://bugzilla.suse.com/1153161" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-17133" ref_url="https://www.suse.com/security/cve/CVE-2019-17133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2859-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192859-1.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_18 fixes several issues.

The following security issues were fixed:

- CVE-2019-10220: Fixed a relative path escape in the Samba client module (bsc#1144903, bsc#1153108).
- CVE-2019-17133: Fixed a buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c caused by long SSID IEs (bsc#1153158).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-30"/>
	<updated date="2019-10-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149841">SUSE bug 1149841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153108">SUSE bug 1153108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153158">SUSE bug 1153158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153161">SUSE bug 1153161</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17133/">CVE-2019-17133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720967" comment="kernel-default 4.12.14-197.18 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719186" comment="kernel-livepatch-4_12_14-197_18-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497424" comment="kernel-livepatch-4_12_14-197_18-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138354" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1046299" ref_url="https://bugzilla.suse.com/1046299" source="BUGZILLA"/>
		<reference ref_id="1046303" ref_url="https://bugzilla.suse.com/1046303" source="BUGZILLA"/>
		<reference ref_id="1046305" ref_url="https://bugzilla.suse.com/1046305" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1073513" ref_url="https://bugzilla.suse.com/1073513" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1086323" ref_url="https://bugzilla.suse.com/1086323" source="BUGZILLA"/>
		<reference ref_id="1087092" ref_url="https://bugzilla.suse.com/1087092" source="BUGZILLA"/>
		<reference ref_id="1089644" ref_url="https://bugzilla.suse.com/1089644" source="BUGZILLA"/>
		<reference ref_id="1090631" ref_url="https://bugzilla.suse.com/1090631" source="BUGZILLA"/>
		<reference ref_id="1093205" ref_url="https://bugzilla.suse.com/1093205" source="BUGZILLA"/>
		<reference ref_id="1096254" ref_url="https://bugzilla.suse.com/1096254" source="BUGZILLA"/>
		<reference ref_id="1097583" ref_url="https://bugzilla.suse.com/1097583" source="BUGZILLA"/>
		<reference ref_id="1097584" ref_url="https://bugzilla.suse.com/1097584" source="BUGZILLA"/>
		<reference ref_id="1097585" ref_url="https://bugzilla.suse.com/1097585" source="BUGZILLA"/>
		<reference ref_id="1097586" ref_url="https://bugzilla.suse.com/1097586" source="BUGZILLA"/>
		<reference ref_id="1097587" ref_url="https://bugzilla.suse.com/1097587" source="BUGZILLA"/>
		<reference ref_id="1097588" ref_url="https://bugzilla.suse.com/1097588" source="BUGZILLA"/>
		<reference ref_id="1098291" ref_url="https://bugzilla.suse.com/1098291" source="BUGZILLA"/>
		<reference ref_id="1101674" ref_url="https://bugzilla.suse.com/1101674" source="BUGZILLA"/>
		<reference ref_id="1109158" ref_url="https://bugzilla.suse.com/1109158" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1117665" ref_url="https://bugzilla.suse.com/1117665" source="BUGZILLA"/>
		<reference ref_id="1119461" ref_url="https://bugzilla.suse.com/1119461" source="BUGZILLA"/>
		<reference ref_id="1119465" ref_url="https://bugzilla.suse.com/1119465" source="BUGZILLA"/>
		<reference ref_id="1123034" ref_url="https://bugzilla.suse.com/1123034" source="BUGZILLA"/>
		<reference ref_id="1123080" ref_url="https://bugzilla.suse.com/1123080" source="BUGZILLA"/>
		<reference ref_id="1133140" ref_url="https://bugzilla.suse.com/1133140" source="BUGZILLA"/>
		<reference ref_id="1134303" ref_url="https://bugzilla.suse.com/1134303" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135854" ref_url="https://bugzilla.suse.com/1135854" source="BUGZILLA"/>
		<reference ref_id="1135873" ref_url="https://bugzilla.suse.com/1135873" source="BUGZILLA"/>
		<reference ref_id="1135967" ref_url="https://bugzilla.suse.com/1135967" source="BUGZILLA"/>
		<reference ref_id="1137040" ref_url="https://bugzilla.suse.com/1137040" source="BUGZILLA"/>
		<reference ref_id="1137799" ref_url="https://bugzilla.suse.com/1137799" source="BUGZILLA"/>
		<reference ref_id="1137861" ref_url="https://bugzilla.suse.com/1137861" source="BUGZILLA"/>
		<reference ref_id="1138190" ref_url="https://bugzilla.suse.com/1138190" source="BUGZILLA"/>
		<reference ref_id="1139073" ref_url="https://bugzilla.suse.com/1139073" source="BUGZILLA"/>
		<reference ref_id="1140090" ref_url="https://bugzilla.suse.com/1140090" source="BUGZILLA"/>
		<reference ref_id="1140729" ref_url="https://bugzilla.suse.com/1140729" source="BUGZILLA"/>
		<reference ref_id="1140845" ref_url="https://bugzilla.suse.com/1140845" source="BUGZILLA"/>
		<reference ref_id="1140883" ref_url="https://bugzilla.suse.com/1140883" source="BUGZILLA"/>
		<reference ref_id="1141600" ref_url="https://bugzilla.suse.com/1141600" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142667" ref_url="https://bugzilla.suse.com/1142667" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1144338" ref_url="https://bugzilla.suse.com/1144338" source="BUGZILLA"/>
		<reference ref_id="1144375" ref_url="https://bugzilla.suse.com/1144375" source="BUGZILLA"/>
		<reference ref_id="1144449" ref_url="https://bugzilla.suse.com/1144449" source="BUGZILLA"/>
		<reference ref_id="1144903" ref_url="https://bugzilla.suse.com/1144903" source="BUGZILLA"/>
		<reference ref_id="1145099" ref_url="https://bugzilla.suse.com/1145099" source="BUGZILLA"/>
		<reference ref_id="1146612" ref_url="https://bugzilla.suse.com/1146612" source="BUGZILLA"/>
		<reference ref_id="1148410" ref_url="https://bugzilla.suse.com/1148410" source="BUGZILLA"/>
		<reference ref_id="1149119" ref_url="https://bugzilla.suse.com/1149119" source="BUGZILLA"/>
		<reference ref_id="1149853" ref_url="https://bugzilla.suse.com/1149853" source="BUGZILLA"/>
		<reference ref_id="1150452" ref_url="https://bugzilla.suse.com/1150452" source="BUGZILLA"/>
		<reference ref_id="1150457" ref_url="https://bugzilla.suse.com/1150457" source="BUGZILLA"/>
		<reference ref_id="1150465" ref_url="https://bugzilla.suse.com/1150465" source="BUGZILLA"/>
		<reference ref_id="1150875" ref_url="https://bugzilla.suse.com/1150875" source="BUGZILLA"/>
		<reference ref_id="1151508" ref_url="https://bugzilla.suse.com/1151508" source="BUGZILLA"/>
		<reference ref_id="1151807" ref_url="https://bugzilla.suse.com/1151807" source="BUGZILLA"/>
		<reference ref_id="1152033" ref_url="https://bugzilla.suse.com/1152033" source="BUGZILLA"/>
		<reference ref_id="1152624" ref_url="https://bugzilla.suse.com/1152624" source="BUGZILLA"/>
		<reference ref_id="1152665" ref_url="https://bugzilla.suse.com/1152665" source="BUGZILLA"/>
		<reference ref_id="1152685" ref_url="https://bugzilla.suse.com/1152685" source="BUGZILLA"/>
		<reference ref_id="1152696" ref_url="https://bugzilla.suse.com/1152696" source="BUGZILLA"/>
		<reference ref_id="1152697" ref_url="https://bugzilla.suse.com/1152697" source="BUGZILLA"/>
		<reference ref_id="1152788" ref_url="https://bugzilla.suse.com/1152788" source="BUGZILLA"/>
		<reference ref_id="1152790" ref_url="https://bugzilla.suse.com/1152790" source="BUGZILLA"/>
		<reference ref_id="1152791" ref_url="https://bugzilla.suse.com/1152791" source="BUGZILLA"/>
		<reference ref_id="1153112" ref_url="https://bugzilla.suse.com/1153112" source="BUGZILLA"/>
		<reference ref_id="1153158" ref_url="https://bugzilla.suse.com/1153158" source="BUGZILLA"/>
		<reference ref_id="1153236" ref_url="https://bugzilla.suse.com/1153236" source="BUGZILLA"/>
		<reference ref_id="1153263" ref_url="https://bugzilla.suse.com/1153263" source="BUGZILLA"/>
		<reference ref_id="1153476" ref_url="https://bugzilla.suse.com/1153476" source="BUGZILLA"/>
		<reference ref_id="1153509" ref_url="https://bugzilla.suse.com/1153509" source="BUGZILLA"/>
		<reference ref_id="1153607" ref_url="https://bugzilla.suse.com/1153607" source="BUGZILLA"/>
		<reference ref_id="1153646" ref_url="https://bugzilla.suse.com/1153646" source="BUGZILLA"/>
		<reference ref_id="1153681" ref_url="https://bugzilla.suse.com/1153681" source="BUGZILLA"/>
		<reference ref_id="1153713" ref_url="https://bugzilla.suse.com/1153713" source="BUGZILLA"/>
		<reference ref_id="1153717" ref_url="https://bugzilla.suse.com/1153717" source="BUGZILLA"/>
		<reference ref_id="1153718" ref_url="https://bugzilla.suse.com/1153718" source="BUGZILLA"/>
		<reference ref_id="1153719" ref_url="https://bugzilla.suse.com/1153719" source="BUGZILLA"/>
		<reference ref_id="1153811" ref_url="https://bugzilla.suse.com/1153811" source="BUGZILLA"/>
		<reference ref_id="1153969" ref_url="https://bugzilla.suse.com/1153969" source="BUGZILLA"/>
		<reference ref_id="1154108" ref_url="https://bugzilla.suse.com/1154108" source="BUGZILLA"/>
		<reference ref_id="1154189" ref_url="https://bugzilla.suse.com/1154189" source="BUGZILLA"/>
		<reference ref_id="1154242" ref_url="https://bugzilla.suse.com/1154242" source="BUGZILLA"/>
		<reference ref_id="1154268" ref_url="https://bugzilla.suse.com/1154268" source="BUGZILLA"/>
		<reference ref_id="1154354" ref_url="https://bugzilla.suse.com/1154354" source="BUGZILLA"/>
		<reference ref_id="1154372" ref_url="https://bugzilla.suse.com/1154372" source="BUGZILLA"/>
		<reference ref_id="1154521" ref_url="https://bugzilla.suse.com/1154521" source="BUGZILLA"/>
		<reference ref_id="1154578" ref_url="https://bugzilla.suse.com/1154578" source="BUGZILLA"/>
		<reference ref_id="1154607" ref_url="https://bugzilla.suse.com/1154607" source="BUGZILLA"/>
		<reference ref_id="1154608" ref_url="https://bugzilla.suse.com/1154608" source="BUGZILLA"/>
		<reference ref_id="1154610" ref_url="https://bugzilla.suse.com/1154610" source="BUGZILLA"/>
		<reference ref_id="1154611" ref_url="https://bugzilla.suse.com/1154611" source="BUGZILLA"/>
		<reference ref_id="1154651" ref_url="https://bugzilla.suse.com/1154651" source="BUGZILLA"/>
		<reference ref_id="1154737" ref_url="https://bugzilla.suse.com/1154737" source="BUGZILLA"/>
		<reference ref_id="1154747" ref_url="https://bugzilla.suse.com/1154747" source="BUGZILLA"/>
		<reference ref_id="1154848" ref_url="https://bugzilla.suse.com/1154848" source="BUGZILLA"/>
		<reference ref_id="1154858" ref_url="https://bugzilla.suse.com/1154858" source="BUGZILLA"/>
		<reference ref_id="1154905" ref_url="https://bugzilla.suse.com/1154905" source="BUGZILLA"/>
		<reference ref_id="1154956" ref_url="https://bugzilla.suse.com/1154956" source="BUGZILLA"/>
		<reference ref_id="1155061" ref_url="https://bugzilla.suse.com/1155061" source="BUGZILLA"/>
		<reference ref_id="1155178" ref_url="https://bugzilla.suse.com/1155178" source="BUGZILLA"/>
		<reference ref_id="1155179" ref_url="https://bugzilla.suse.com/1155179" source="BUGZILLA"/>
		<reference ref_id="1155184" ref_url="https://bugzilla.suse.com/1155184" source="BUGZILLA"/>
		<reference ref_id="1155186" ref_url="https://bugzilla.suse.com/1155186" source="BUGZILLA"/>
		<reference ref_id="1155671" ref_url="https://bugzilla.suse.com/1155671" source="BUGZILLA"/>
		<reference ref_id="802154" ref_url="https://bugzilla.suse.com/802154" source="BUGZILLA"/>
		<reference ref_id="814594" ref_url="https://bugzilla.suse.com/814594" source="BUGZILLA"/>
		<reference ref_id="919448" ref_url="https://bugzilla.suse.com/919448" source="BUGZILLA"/>
		<reference ref_id="987367" ref_url="https://bugzilla.suse.com/987367" source="BUGZILLA"/>
		<reference ref_id="998153" ref_url="https://bugzilla.suse.com/998153" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12207" ref_url="https://www.suse.com/security/cve/CVE-2018-12207/" source="CVE"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-11135" ref_url="https://www.suse.com/security/cve/CVE-2019-11135/" source="CVE"/>
		<reference ref_id="CVE-2019-16232" ref_url="https://www.suse.com/security/cve/CVE-2019-16232/" source="CVE"/>
		<reference ref_id="CVE-2019-16233" ref_url="https://www.suse.com/security/cve/CVE-2019-16233/" source="CVE"/>
		<reference ref_id="CVE-2019-16234" ref_url="https://www.suse.com/security/cve/CVE-2019-16234/" source="CVE"/>
		<reference ref_id="CVE-2019-16995" ref_url="https://www.suse.com/security/cve/CVE-2019-16995/" source="CVE"/>
		<reference ref_id="CVE-2019-17056" ref_url="https://www.suse.com/security/cve/CVE-2019-17056/" source="CVE"/>
		<reference ref_id="CVE-2019-17133" ref_url="https://www.suse.com/security/cve/CVE-2019-17133/" source="CVE"/>
		<reference ref_id="CVE-2019-17666" ref_url="https://www.suse.com/security/cve/CVE-2019-17666/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2947-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race
  condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine
  Exception during Page Size Change, causing the CPU core to be non-functional.

  The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in
  executable pages by splitting / merging huge pages into small pages as
  needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735

- CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with
  Transactional Memory support could be used to facilitate sidechannel
  information leaks out of microarchitectural buffers, similar to the
  previously described 'Microarchitectural Data Sampling' attack.

  The Linux kernel was supplemented with the option to disable TSX operation
  altogether (requiring CPU Microcode updates on older systems) and better
  flushing of microarchitectural buffers (VERW).

  The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251

- CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port
  failed to add a port, which may have caused denial of service (bsc#1152685).

- CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the
  alloc_workqueue return value, leading to a NULL pointer dereference.
  (bsc#1150457).

- CVE-2019-10220: Added sanity checks on the pathnames passed to the user
  space. (bsc#1144903).

- CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).

- CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell
  libertas driver (bsc#1150465).

- CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return
  value, leading to a NULL pointer dereference. (bsc#1150452).

- CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE,
  leading to a Buffer Overflow (bsc#1153158).

- CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which
  meant that unprivileged users could create a raw socket (bsc#1152788).

The following non-security bugs were fixed:

- 9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
- acpi: cppc: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510).
- acpi: cppc: do not require the _PSD method (bsc#1051510).
- acpi: processor: do not print errors for processorIDs == 0xff (bsc#1051510).
- act_mirred: Fix mirred_init_module error handling (bsc#1051510).
- alsa: bebob: Fix prototype of helper function to return negative value (bsc#1051510).
- alsa: firewire-motu: add support for MOTU 4pre (bsc#1111666).
- alsa: hda/hdmi: Do not report spurious jack state changes (bsc#1051510).
- alsa: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510).
- alsa: hda/realtek: Add support for ALC623 (bsc#1051510).
- alsa: hda/realtek: Add support for ALC711 (bsc#1051510).
- alsa: hda/realtek: Check beep whitelist before assigning in all codecs (bsc#1051510).
- alsa: hda/realtek: Enable headset mic on Asus MJ401TA (bsc#1051510).
- alsa: hda/realtek: Fix 2 front mics of codec 0x623 (bsc#1051510).
- alsa: hda/realtek: Fix alienware headset mic (bsc#1051510).
- alsa: hda/realtek: PCI quirk for Medion E4254 (bsc#1051510).
- alsa: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 (bsc#1051510).
- alsa: hda/sigmatel: remove unused variable 'stac9200_core_init' (bsc#1051510).
- alsa: hda: Add Elkhart Lake PCI ID (bsc#1051510).
- alsa: hda: Add Tigerlake/Jasperlake PCI ID (bsc#1051510).
- alsa: hda: Add a quirk model for fixing Huawei Matebook X right speaker (bsc#1051510).
- alsa: hda: Add laptop imic fixup for ASUS M9V laptop (bsc#1051510).
- alsa: hda: Add support of Zhaoxin controller (bsc#1051510).
- alsa: hda: Apply AMD controller workaround for Raven platform (bsc#1051510).
- alsa: hda: Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510).
- alsa: hda: Drop unsol event handler for Intel HDMI codecs (bsc#1051510).
- alsa: hda: Expand pin_match function to match upcoming new tbls (bsc#1051510).
- alsa: hda: Flush interrupts on disabling (bsc#1051510).
- alsa: hda: Force runtime PM on Nvidia HDMI codecs (bsc#1051510).
- alsa: hda: Inform too slow responses (bsc#1051510).
- alsa: hda: Set fifo_size for both playback and capture streams (bsc#1051510).
- alsa: hda: Show the fatal CORB/RIRB error more clearly (bsc#1051510).
- alsa: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() (bsc#1051510).
- alsa: line6: sizeof (byte) is always 1, use that fact (bsc#1051510).
- alsa: timer: Fix mutex deadlock at releasing card (bsc#1051510).
- alsa: usb-audio: Add DSD support for EVGA NU Audio (bsc#1051510).
- alsa: usb-audio: Add DSD support for Gustard U16/X26 USB Interface (bsc#1051510).
- alsa: usb-audio: Add Hiby device family to quirks for native DSD support (bsc#1051510).
- alsa: usb-audio: Add Pioneer DDJ-SX3 PCM quirck (bsc#1051510).
- alsa: usb-audio: Clean up check_input_term() (bsc#1051510).
- alsa: usb-audio: DSD auto-detection for Playback Designs (bsc#1051510).
- alsa: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1051510).
- alsa: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1111666).
- alsa: usb-audio: Fix copy&amp;paste error in the validator (bsc#1111666).
- alsa: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() (bsc#1051510).
- alsa: usb-audio: More validations of descriptor units (bsc#1051510).
- alsa: usb-audio: Remove superfluous bLength checks (bsc#1051510).
- alsa: usb-audio: Simplify parse_audio_unit() (bsc#1051510).
- alsa: usb-audio: Skip bSynchAddress endpoint check if it is invalid (bsc#1051510).
- alsa: usb-audio: Unify audioformat release code (bsc#1051510).
- alsa: usb-audio: Unify the release of usb_mixer_elem_info objects (bsc#1051510).
- alsa: usb-audio: Update DSD support quirks for Oppo and Rotel (bsc#1051510).
- alsa: usb-audio: fix PCM device order (bsc#1051510).
- alsa: usb-audio: remove some dead code (bsc#1051510).
- appletalk: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- arcnet: provide a buffer big enough to actually receive packets (networking-stable-19_09_30).
- asoc: Define a set of DAPM pre/post-up events (bsc#1051510).
- asoc: dmaengine: Make the pcm-&gt;name equal to pcm-&gt;id if the name is not set (bsc#1051510).
- asoc: intel: Fix use of potentially uninitialized variable (bsc#1051510).
- asoc: intel: nhlt: Fix debug print format (bsc#1051510).
- asoc: rockchip: i2s: Fix RPM imbalance (bsc#1051510).
- asoc: rsnd: Reinitialize bit clock inversion flag for every format setting (bsc#1051510).
- asoc: sgtl5000: Fix charge pump source assignment (bsc#1051510).
- auxdisplay: panel: need to delete scan_timer when misc_register fails in panel_attach (bsc#1051510).
- ax25: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- blk-wbt: abstract out end IO completion handler (bsc#1135873).
- blk-wbt: fix has-sleeper queueing check (bsc#1135873).
- blk-wbt: improve waking of tasks (bsc#1135873).
- blk-wbt: move disable check into get_limit() (bsc#1135873).
- blk-wbt: use wq_has_sleeper() for wq active check (bsc#1135873).
- block: add io timeout to sysfs (bsc#1148410).
- block: add io timeout to sysfs (bsc#1148410).
- block: do not show io_timeout if driver has no timeout handler (bsc#1148410).
- block: do not show io_timeout if driver has no timeout handler (bsc#1148410).
- bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices (bsc#1051510).
- bnx2x: Fix VF's VLAN reconfiguration in reload (bsc#1086323 ).
- bnxt_en: Add PCI IDs for 57500 series NPAR devices (bsc#1153607).
- bpf: fix use after free in prog symbol exposure (bsc#1083647).
- brcmfmac: sdio: Disable auto-tuning around commands expected to fail (bsc#1111666).
- brcmfmac: sdio: Do not tune while the card is off (bsc#1111666).
- bridge/mdb: remove wrong use of NLM_F_MULTI (networking-stable-19_09_15).
- btrfs: Ensure btrfs_init_dev_replace_tgtdev sees up to date values (bsc#1154651).
- btrfs: Ensure replaced device does not have pending chunk allocation (bsc#1154607).
- btrfs: bail out gracefully rather than BUG_ON (bsc#1153646).
- btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() (bsc#1155178).
- btrfs: check for the full sync flag while holding the inode lock during fsync (bsc#1153713).
- btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() (bsc#1155179).
- btrfs: remove wrong use of volume_mutex from btrfs_dev_replace_start (bsc#1154651).
- btrfs: tracepoints: Fix bad entry members of qgroup events (bsc#1155186).
- btrfs: tracepoints: Fix wrong parameter order for qgroup events (bsc#1155184).
- can: mcp251x: mcp251x_hw_reset(): allow more time after a reset (bsc#1051510).
- can: xilinx_can: xcan_probe(): skip error message on deferred probe (bsc#1051510).
- cdc_ether: fix rndis support for Mediatek based smartphones (networking-stable-19_09_15).
- cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize (bsc#1051510).
- ceph: fix directories inode i_blkbits initialization (bsc#1153717).
- ceph: reconnect connection if session hang in opening state (bsc#1153718).
- ceph: update the mtime when truncating up (bsc#1153719).
- cfg80211: Purge frame registrations on iftype change (bsc#1051510).
- cfg80211: add and use strongly typed element iteration macros (bsc#1051510).
- clk: at91: select parent if main oscillator or bypass is enabled (bsc#1051510).
- clk: qoriq: Fix -Wunused-const-variable (bsc#1051510).
- clk: sirf: Do not reference clk_init_data after registration (bsc#1051510).
- clk: zx296718: Do not reference clk_init_data after registration (bsc#1051510).
- crypto: af_alg: Fix race around ctx-&gt;rcvused by making it atomic_t (bsc#1154737).
- crypto: af_alg: Initialize sg_num_bytes in error code path (bsc#1051510).
- crypto: af_alg: consolidation of duplicate code (bsc#1154737).
- crypto: af_alg: fix race accessing cipher request (bsc#1154737).
- crypto: af_alg: remove locking in async callback (bsc#1154737).
- crypto: af_alg: update correct dst SGL entry (bsc#1051510).
- crypto: af_alg: wait for data at beginning of recvmsg (bsc#1154737).
- crypto: algif: return error code when no data was processed (bsc#1154737).
- crypto: algif_aead: copy AAD from src to dst (bsc#1154737).
- crypto: algif_aead: fix reference counting of null skcipher (bsc#1154737).
- crypto: algif_aead: overhaul memory management (bsc#1154737).
- crypto: algif_aead: skip SGL entries with NULL page (bsc#1154737).
- crypto: algif_skcipher: overhaul memory management (bsc#1154737).
- crypto: talitos: fix missing break in switch statement (bsc#1142635).
- cxgb4: Signedness bug in init_one() (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584).
- cxgb4: do not dma memory off of the stack (bsc#1152790).
- cxgb4: fix endianness for vlan value in cxgb4_tc_flower (bsc#1064802 bsc#1066129).
- cxgb4: offload VLAN flows regardless of VLAN ethtype (bsc#1064802 bsc#1066129).
- cxgb4: reduce kernel stack usage in cudbg_collect_mem_region() (bsc#1073513).
- cxgb4: smt: Add lock for atomic_dec_and_test (bsc#1064802 bsc#1066129).
- cxgb4:Fix out-of-bounds MSI-X info array access (networking-stable-19_10_05).
- drm/amd/display: Restore backlight brightness after system resume (bsc#1112178)
- drm/amd/display: fix issue where 252-255 values are clipped (bsc#1111666).
- drm/amd/display: reprogram VM config when system resume (bsc#1111666).
- drm/amd/display: support spdif (bsc#1111666).
- drm/amd/dm: Understand why attaching path/tile properties are needed (bsc#1111666).
- drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) (bsc#1051510).
- drm/amd/pp: Fix truncated clock value when set watermark (bsc#1111666).
- drm/amdgpu/gfx9: Update gfx9 golden settings (bsc#1111666).
- drm/amdgpu/si: fix ASIC tests (git-fixes).
- drm/amdgpu: Check for valid number of registers to read (bsc#1051510).
- drm/amdgpu: Fix KFD-related kernel oops on Hawaii (bsc#1111666).
- drm/amdgpu: Update gc_9_0 golden settings (bsc#1111666).
- drm/amdkfd: Add missing Polaris10 ID (bsc#1111666).
- drm/ast: Fixed reboot test may cause system hanged (bsc#1051510).
- drm/atomic_helper: Allow DPMS On&lt;-&gt;Off changes for unregistered connectors (bsc#1111666).
- drm/atomic_helper: Disallow new modesets on unregistered connectors (bsc#1111666).
- drm/atomic_helper: Stop modesets on unregistered connectors harder (bsc#1111666).
- drm/bridge: tc358767: Increase AUX transfer length limit (bsc#1051510).
- drm/bridge: tfp410: fix memleak in get_modes() (bsc#1111666).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 (bsc#1051510).
- drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)
- drm/i915/cmdparser: Ignore Length operands during (bsc#1135967)
- drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)
- drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)
- drm/i915/gvt: update vgpu workload head pointer correctly (bsc#1112178)
- drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)
- drm/i915: Add support for mandatory cmdparsing (bsc#1135967)
- drm/i915: Allow parsing of unsized batches (bsc#1135967)
- drm/i915: Cleanup gt powerstate from gem (bsc#1111666).
- drm/i915: Disable Secure Batches for gen6+ (bsc#1135967)
- drm/i915: Fix intel_dp_mst_best_encoder() (bsc#1111666).
- drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)
- drm/i915: Remove Master tables from cmdparser (bsc#1135967)
- drm/i915: Rename gen7 cmdparser tables (bsc#1135967)
- drm/i915: Restore sane defaults for KMS on GEM error load (bsc#1111666).
- drm/i915: Support ro ppgtt mapped cmdparser shadow (bsc#1135967)
- drm/mediatek: set DMA max segment size (bsc#1111666).
- drm/msm/dsi: Fix return value check for clk_get_parent (bsc#1111666).
- drm/msm/dsi: Implement reset correctly (bsc#1051510).
- drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling (bsc#1111666).
- drm/nouveau/kms/nv50-: Do not create MSTMs for eDP connectors (bsc#1112178)
- drm/nouveau/volt: Fix for some cards having 0 maximum voltage (bsc#1111666).
- drm/omap: fix max fclk divider for omap36xx (bsc#1111666).
- drm/panel: check failure cases in the probe func (bsc#1111666).
- drm/panel: make drm_panel.h self-contained (bsc#1111666).
- drm/panel: simple: fix AUO g185han01 horizontal blanking (bsc#1051510).
- drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed (bsc#1111666).
- drm/radeon: Fix EEH during kexec (bsc#1051510).
- drm/rockchip: Check for fast link training before enabling psr (bsc#1111666).
- drm/stm: attach gem fence to atomic state (bsc#1111666).
- drm/tilcdc: Register cpufreq notifier after we have initialized crtc (bsc#1051510).
- drm/vmwgfx: Fix double free in vmw_recv_msg() (bsc#1051510).
- drm: Flush output polling on shutdown (bsc#1051510).
- drm: add __user attribute to ptr_to_compat() (bsc#1111666).
- drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC (bsc#1111666).
- drm: rcar-du: lvds: Fix bridge_to_rcar_lvds (bsc#1111666).
- e1000e: add workaround for possible stalled packet (bsc#1051510).
- efi/arm: Show SMBIOS bank/device location in CPER and GHES error logs (bsc#1152033).
- efi/memattr: Do not bail on zero VA if it equals the region's PA (bsc#1051510).
- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efivar/ssdt: Do not iterate over EFI vars if no SSDT override was specified (bsc#1051510).
- firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices (git-fixes).
- gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() (bsc#1051510).
- hid: apple: Fix stuck function keys when using FN (bsc#1051510).
- hid: fix error message in hid_open_report() (bsc#1051510).
- hid: hidraw: Fix invalid read in hidraw_ioctl (bsc#1051510).
- hid: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy() (bsc#1051510).
- hid: logitech: Fix general protection fault caused by Logitech driver (bsc#1051510).
- hid: prodikeys: Fix general protection fault during probe (bsc#1051510).
- hid: sony: Fix memory corruption issue on cleanup (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' (bsc#1051510).
- hwrng: core: do not wait on add_early_randomness() (git-fixes).
- hyperv: set nvme msi interrupts to unmanaged (jsc#SLE-8953, jsc#SLE-9221, jsc#SLE-4941, bsc#1119461, bsc#1119465, bsc#1138190, bsc#1154905).
- i2c: riic: Clear NACK in tend isr (bsc#1051510).
- ib/core, ipoib: Do not overreact to SM LID change event (bsc#1154108)
- ib/core: Add mitigation for Spectre V1 (bsc#1155671)
- ib/hfi1: Remove overly conservative VM_EXEC flag check (bsc#1144449).
- ib/mlx5: Consolidate use_umr checks into single function (bsc#1093205).
- ib/mlx5: Fix MR re-registration flow to use UMR properly (bsc#1093205).
- ib/mlx5: Report correctly tag matching rendezvous capability (bsc#1046305).
- ieee802154: atusb: fix use-after-free at disconnect (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- ieee802154: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- iio: adc: ad799x: fix probe error handling (bsc#1051510).
- iio: light: opt3001: fix mutex unlock race (bsc#1051510).
- ima: always return negative code for error (bsc#1051510).
- input: da9063: fix capability and drop KEY_SLEEP (bsc#1051510).
- input: synaptics-rmi4: avoid processing unknown IRQs (bsc#1051510).
- integrity: prevent deadlock during digsig verification (bsc#1090631).
- iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 (bsc#1137799).
- iommu/amd: Check PM_LEVEL_SIZE() condition in locked section (bsc#1154608).
- iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems (bsc#1137799).
- iommu/amd: Remove domain-&gt;updated (bsc#1154610).
- iommu/amd: Wait for completion of IOTLB flush in attach_device (bsc#1154611).
- ipmi_si: Only schedule continuously in the thread in maintenance mode (bsc#1051510).
- ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' (networking-stable-19_09_15).
- ipv6: Handle missing host route in __ipv6_ifa_notify (networking-stable-19_10_05).
- ipv6: drop incoming packets having a v4mapped source address (networking-stable-19_10_05).
- iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init (bsc#1111666).
- ixgbe: Fix secpath usage for IPsec TX offload (bsc#1113994 bsc#1151807).
- ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (bsc#1101674).
- ixgbe: sync the first fragment unconditionally (bsc#1133140).
- kABI workaround for crypto/af_alg changes (bsc#1154737).
- kABI workaround for drm_connector.registered type changes (bsc#1111666).
- kABI workaround for mmc_host retune_crc_disable flag addition (bsc#1111666).
- kABI workaround for snd_hda_pick_pin_fixup() changes (bsc#1051510).
- kabi/severities: Whitelist functions internal to radix mm. To call these functions you have to first detect if you are running in radix mm mode which can't be expected of OOT code.
- kabi: net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05).
- kernel-binary.spec.in: Fix build of non-modular kernels (boo#1154578).
- kernel-binary.spec.in: Obsolete kgraft packages only when not building them.
- kernel-binary: Drop .kernel-binary.spec.buildenv (boo#1154578). Without this patch, /usr/src/linux-@VERSION@-@RELEASE_SHORT@-obj/x86_64/vanilla/.kernel-binary.spec.buildenv contained rpm %_smp_mflags in a line like export MAKE_ARGS=' --output-sync -j4' This made it hard to produce bit-identical builds.
- kernel-binary: check also bzImage on s390/s390x Starting with 4.19-rc1, uncompressed image is no longer built on s390x. If file 'image' is not found in arch/s390/boot after the build, try bzImage instead. For now, install bzImage under the name image-* until we know grub2 and our grub2 scripts can handle correct name.
- kernel-subpackage-build: create zero size ghost for uncompressed vmlinux (bsc#1154354). It is not strictly necessary to uncompress it so maybe the ghost file can be 0 size in this case.
- kernel/sysctl.c: do not override max_threads provided by userspace (bnc#1150875).
- ksm: cleanup stable_node chain collapse case (bnc#1144338).
- ksm: fix use after free with merge_across_nodes = 0 (bnc#1144338).
- ksm: introduce ksm_max_page_sharing per page deduplication limit (bnc#1144338).
- ksm: optimize refile of stable_node_dup at the head of the chain (bnc#1144338).
- ksm: swap the two output parameters of chain/chain_prune (bnc#1144338).
- kvm: Convert kvm_lock to a mutex (bsc#1117665).
- kvm: mmu: drop vcpu param in gpte_access (bsc#1117665).
- kvm: ppc: book3s hv: use smp_mb() when setting/clearing host_ipi flag (bsc#1061840).
- kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bsc#1117665).
- kvm: x86, powerpc: do not allow clearing largepages debugfs entry (bsc#1117665).
- kvm: x86: Do not release the page inside mmu_set_spte() (bsc#1117665).
- kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (bsc#1117665).
- kvm: x86: adjust kvm_mmu_page member to save 8 bytes (bsc#1117665).
- kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (bsc#1117665).
- kvm: x86: make FNAME(fetch) and __direct_map more similar (bsc#1117665).
- kvm: x86: remove now unneeded hugepage gfn adjustment (bsc#1117665).
- lib/mpi: Fix karactx leak in mpi_powm (bsc#1051510).
- libertas: Add missing sentinel at end of if_usb.c fw_table (bsc#1051510).
- libnvdimm/security: provide fix for secure-erase to use zero-key (bsc#1149853).
- lpfc: Add FA-WWN Async Event reporting (bsc#1154521).
- lpfc: Add FC-AL support to lpe32000 models (bsc#1154521).
- lpfc: Add additional discovery log messages (bsc#1154521).
- lpfc: Add log macros to allow print by serverity or verbocity setting (bsc#1154521).
- lpfc: Fix SLI3 hba in loop mode not discovering devices (bsc#1154521).
- lpfc: Fix bad ndlp ptr in xri aborted handling (bsc#1154521).
- lpfc: Fix hardlockup in lpfc_abort_handler (bsc#1154521).
- lpfc: Fix lockdep errors in sli_ringtx_put (bsc#1154521).
- lpfc: Fix reporting of read-only fw error errors (bsc#1154521).
- lpfc: Make FW logging dynamically configurable (bsc#1154521).
- lpfc: Remove lock contention target write path (bsc#1154521).
- lpfc: Revise interrupt coalescing for missing scenarios (bsc#1154521).
- lpfc: Slight fast-path Performance optimizations (bsc#1154521).
- lpfc: Update lpfc version to 12.6.0.0 (bsc#1154521).
- lpfc: fix coverity error of dereference after null check (bsc#1154521).
- lpfc: fix lpfc_nvmet_mrq to be bound by hdw queue count (bsc#1154521).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- mac80211: accept deauth frames in IBSS mode (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- macsec: drop skb sk before calling gro_cells_receive (bsc#1051510).
- md/raid0: avoid RAID0 data corruption due to layout confusion (bsc#1140090).
- md/raid0: fix warning message for parameter default_layout (bsc#1140090).
- media: atmel: atmel-isc: fix asd memory allocation (bsc#1135642).
- media: cpia2_usb: fix memory leaks (bsc#1051510).
- media: dvb-core: fix a memory leak bug (bsc#1051510).
- media: exynos4-is: fix leaked of_node references (bsc#1051510).
- media: gspca: zero usb_buf on error (bsc#1051510).
- media: hdpvr: Add device num check and handling (bsc#1051510).
- media: hdpvr: add terminating 0 at end of string (bsc#1051510).
- media: i2c: ov5645: Fix power sequence (bsc#1051510).
- media: iguanair: add sanity checks (bsc#1051510).
- media: omap3isp: Do not set streaming state on random subdevs (bsc#1051510).
- media: omap3isp: Set device on omap3isp subdevs (bsc#1051510).
- media: ov9650: add a sanity check (bsc#1051510).
- media: radio/si470x: kill urb on error (bsc#1051510).
- media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() (bsc#1051510).
- media: saa7146: add cleanup in hexium_attach() (bsc#1051510).
- media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table (bsc#1051510).
- media: stkwebcam: fix runtime PM after driver unbind (bsc#1051510).
- media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (bsc#1051510).
- memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' (bsc#1051510).
- mfd: intel-lpss: Remove D3cold delay (bsc#1051510).
- misdn: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- mld: fix memory leak in mld_del_delrec() (networking-stable-19_09_05).
- mmc: core: API to temporarily disable retuning for SDIO CRC errors (bsc#1111666).
- mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() (bsc#1111666).
- mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence (bsc#1051510).
- mmc: sdhci: Fix incorrect switch to HS mode (bsc#1051510).
- mmc: sdhci: improve ADMA error reporting (bsc#1051510).
- net/ibmvnic: Fix EOI when running in XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes).
- net/mlx4_en: fix a memory leak bug (bsc#1046299).
- net/mlx5: Add device ID of upcoming BlueField-2 (bsc#1046303 ).
- net/mlx5: Fix error handling in mlx5_load() (bsc#1046305 ).
- net/phy: fix DP83865 10 Mbps HDX loopback disable function (networking-stable-19_09_30).
- net/rds: Fix error handling in rds_ib_add_one() (networking-stable-19_10_05).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- net/rds: remove user triggered WARN_ON in rds_sendmsg (bsc#1154848).
- net/sched: act_sample: do not push mac header on ip6gre ingress (networking-stable-19_09_30).
- net: Fix null de-reference of device refcount (networking-stable-19_09_15).
- net: Replace NF_CT_ASSERT() with WARN_ON() (bsc#1146612).
- net: Unpublish sk from sk_reuseport_cb before call_rcu (networking-stable-19_10_05).
- net: fix skb use after free in netpoll (networking-stable-19_09_05).
- net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list (networking-stable-19_09_15).
- net: openvswitch: free vport unless register_netdevice() succeeds (git-fixes).
- net: qlogic: Fix memory leak in ql_alloc_large_buffers (networking-stable-19_10_05).
- net: qrtr: Stop rx_worker before freeing node (networking-stable-19_09_30).
- net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05).
- net: stmmac: dwmac-rk: Do not fail if phy regulator is absent (networking-stable-19_09_05).
- net_sched: add policy validation for action attributes (networking-stable-19_09_30).
- net_sched: fix backward compatibility for TCA_ACT_KIND (git-fixes).
- netfilter: nf_nat: do not bug when mapping already exists (bsc#1146612).
- nfc: fix attrs checks in netlink interface (bsc#1051510).
- nfc: fix memory leak in llcp_sock_bind() (bsc#1051510).
- nfc: pn533: fix use-after-free and memleaks (bsc#1051510).
- nfsv4.1: backchannel request should hold ref on xprt (bsc#1152624).
- nl80211: fix null pointer dereference (bsc#1051510).
- objtool: Clobber user CFLAGS variable (bsc#1153236).
- openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC (networking-stable-19_09_30).
- packaging: add support for riscv64
- pci: Correct pci=resource_alignment parameter example (bsc#1051510).
- pci: dra7xx: Fix legacy INTD IRQ handling (bsc#1087092).
- pci: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (bsc#1153263).
- pci: pm: Fix pci_power_up() (bsc#1051510).
- pinctrl: cherryview: restore Strago DMI workaround for all versions (bsc#1111666).
- pinctrl: tegra: Fix write barrier placement in pmx_writel (bsc#1051510).
- platform/x86: classmate-laptop: remove unused variable (bsc#1051510).
- platform/x86: i2c-multi-instantiate: Derive the device name from parent (bsc#1111666).
- platform/x86: i2c-multi-instantiate: Fail the probe if no IRQ provided (bsc#1111666).
- platform/x86: pmc_atom: Add Siemens SIMATIC IPC277E to critclk_systems DMI table (bsc#1051510).
- power: supply: sysfs: ratelimit property read error message (bsc#1051510).
- powerpc/64s/pseries: radix flush translations before MMU is enabled at boot (bsc#1055186).
- powerpc/64s/radix: keep kernel ERAT over local process/guest invalidates (bsc#1055186).
- powerpc/64s/radix: tidy up TLB flushing code (bsc#1055186).
- powerpc/64s: Rename PPC_INVALIDATE_ERAT to PPC_ISA_3_0_INVALIDATE_ERAT (bsc#1055186).
- powerpc/mm/book3s64: Move book3s64 code to pgtable-book3s64 (bsc#1055186).
- powerpc/mm/radix: mark __radix__flush_tlb_range_psize() as __always_inline (bsc#1055186).
- powerpc/mm/radix: mark as __tlbie_pid() and friends as__always_inline (bsc#1055186).
- powerpc/mm: Properly invalidate when setting process table base (bsc#1055186).
- powerpc/mm: mark more tlb functions as __always_inline (bsc#1055186).
- powerpc/pseries/mobility: use cond_resched when updating device tree (bsc#1153112 ltc#181778).
- powerpc/pseries: Remove confusing warning message (bsc#1109158).
- powerpc/rtas: allow rescheduling while changing cpu states (bsc#1153112 ltc#181778).
- powerplay: Respect units on max dcfclk watermark (bsc#1111666).
- qed: iwarp: Fix default window size to be based on chip (bsc#1050536 bsc#1050545).
- qed: iwarp: Fix tc for MPA ll2 connection (bsc#1050536 bsc#1050545).
- qed: iwarp: Use READ_ONCE and smp_store_release to access ep-&gt;state (bsc#1050536 bsc#1050545).
- qed: iwarp: fix uninitialized callback (bsc#1050536 bsc#1050545).
- qmi_wwan: add support for Cinterion CLS8 devices (networking-stable-19_10_05).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- rdma/bnxt_re: Fix spelling mistake 'missin_resp' -&gt; 'missing_resp' (bsc#1050244).
- rdma/hns: Add reset process for function-clear (bsc#1155061).
- rdma/hns: Remove the some magic number (bsc#1155061).
- rdma: Fix goto target to release the allocated memory (bsc#1050244).
- rds: Fix warning (bsc#1154848).
- rpm/config.sh: Enable livepatch.
- rpm/constraints.in: lower disk space required for ARM With a requirement of 35GB, only 2 slow workers are usable for ARM. Current aarch64 build requires 27G and armv6/7 requires 14G. Set requirements respectively to 30GB and 20GB.
- rpm/dtb.spec.in.in: do not make dtb directory inaccessible There is no reason to lock down the dtb directory for ordinary users.
- rpm/kernel-binary.spec.in: Fix kernel-livepatch description typo.
- rpm/kernel-binary.spec.in: build kernel-*-kgraft only for default SLE kernel RT and Azure variants are excluded for the moment. (bsc#1141600)
- rpm/kernel-binary.spec.in: handle modules.builtin.modinfo It was added in 5.2.
- rpm/kernel-binary.spec.in: support partial rt debug config.
- rpm/kernel-subpackage-spec: Mention debuginfo in the subpackage description (bsc#1149119).
- rpm/macros.kernel-source: KMPs should depend on kmod-compat to build. kmod-compat links are used in find-provides.ksyms, find-requires.ksyms, and find-supplements.ksyms in rpm-config-SUSE.
- rpm/mkspec: Correct tarball URL for rc kernels.
- rpm/mkspec: Make building DTBs optional.
- rpm/modflist: Simplify compression support.
- rpm: raise required disk space for binary packages Current disk space constraints (10 GB on s390x, 25 GB on other architectures) no longer suffice for 5.3 kernel builds. The statistics show ~30 GB of disk consumption on x86_64 and ~11 GB on s390x so raise the constraints to 35 GB in general and 14 GB on s390x.
- rpm: support compressed modules Some of our scripts and scriptlets in rpm/ do not expect module files not ending with '.ko' which currently leads to failure in preuninstall scriptlet of cluster-md-kmp-default (and probably also other subpackages). Let those which could be run on compressed module files recognize '.ko.xz' in addition to '.ko'.
- rtlwifi: rtl8192cu: Fix value set in descriptor (bsc#1142635).
- s390/cmf: set_schib_wait add timeout (bsc#1153509, bsc#1153476).
- s390/cpumsf: Check for CPU Measurement sampling (bsc#1153681 LTC#181855).
- s390/crypto: fix gcm-aes-s390 selftest failures (bsc#1137861 LTC#178091).
- s390/pci: add mio_enabled attribute (bsc#1152665 LTC#181729).
- s390/pci: correctly handle MIO opt-out (bsc#1152665 LTC#181729).
- s390/pci: deal with devices that have no support for MIO instructions (bsc#1152665 LTC#181729).
- s390/pci: fix MSI message data (bsc#1152697 LTC#181730).
- s390: add support for IBM z15 machines (bsc#1152696 LTC#181731).
- s390: fix setting of mio addressing control (bsc#1152665 LTC#181729).
- sch_cbq: validate TCA_CBQ_WRROPT to avoid crash (networking-stable-19_10_05).
- sch_dsmark: fix potential NULL deref in dsmark_init() (networking-stable-19_10_05).
- sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero (networking-stable-19_09_15).
- sch_netem: fix a divide by zero in tabledist() (networking-stable-19_09_30).
- sched/fair: Avoid divide by zero when rebalancing domains (bsc#1096254).
- scripts/arch-symbols: add missing link.
- scsi: lpfc: Check queue pointer before use (bsc#1154242).
- scsi: lpfc: Complete removal of FCoE T10 PI support on SLI-4 adapters (bsc#1154521).
- scsi: lpfc: Convert existing %pf users to %ps (bsc#1154521).
- scsi: lpfc: Fix GPF on scsi command completion (bsc#1154521).
- scsi: lpfc: Fix NVME io abort failures causing hangs (bsc#1154521).
- scsi: lpfc: Fix NVMe ABTS in response to receiving an ABTS (bsc#1154521).
- scsi: lpfc: Fix coverity errors on NULL pointer checks (bsc#1154521).
- scsi: lpfc: Fix device recovery errors after PLOGI failures (bsc#1154521).
- scsi: lpfc: Fix devices that do not return after devloss followed by rediscovery (bsc#1137040).
- scsi: lpfc: Fix discovery failures when target device connectivity bounces (bsc#1154521).
- scsi: lpfc: Fix hdwq sgl locks and irq handling (bsc#1154521).
- scsi: lpfc: Fix host hang at boot or slow boot (bsc#1154521).
- scsi: lpfc: Fix list corruption detected in lpfc_put_sgl_per_hdwq (bsc#1154521).
- scsi: lpfc: Fix list corruption in lpfc_sli_get_iocbq (bsc#1154521).
- scsi: lpfc: Fix locking on mailbox command completion (bsc#1154521).
- scsi: lpfc: Fix miss of register read failure check (bsc#1154521).
- scsi: lpfc: Fix null ptr oops updating lpfc_devloss_tmo via sysfs attribute (bsc#1140845).
- scsi: lpfc: Fix premature re-enabling of interrupts in lpfc_sli_host_down (bsc#1154521).
- scsi: lpfc: Fix propagation of devloss_tmo setting to nvme transport (bsc#1140883).
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (bsc#1154521).
- scsi: lpfc: Fix rpi release when deleting vport (bsc#1154521).
- scsi: lpfc: Fix spinlock_irq issues in lpfc_els_flush_cmd() (bsc#1154521).
- scsi: lpfc: Make function lpfc_defer_pt2pt_acc static (bsc#1154521).
- scsi: lpfc: Remove bg debugfs buffers (bsc#1144375).
- scsi: lpfc: Update async event logging (bsc#1154521).
- scsi: lpfc: Update lpfc version to 12.4.0.1 (bsc#1154521).
- scsi: lpfc: cleanup: remove unused fcp_txcmlpq_cnt (bsc#1154521).
- scsi: lpfc: remove left-over BUILD_NVME defines (bsc#1154268).
- scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (bsc#1098291).
- scsi: qedf: fc_rport_priv reference counting fixes (bsc#1098291).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix partial flash write of MBI (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix wait condition in loop (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Initialized mailbox to prevent driver load failure (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: fixup incorrect usage of host_byte (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: stop timer in shutdown path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: storvsc: setup 1:1 mapping between hardware queue and CPU queue (bsc#1140729).
- scsi: zfcp: fix reaction on bit error threshold notification (bsc#1154956 LTC#182054).
- sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' (networking-stable-19_09_15).
- sctp: use transport pf_retrans in sctp_do_8_2_transport_strike (networking-stable-19_09_15).
- skge: fix checksum byte order (networking-stable-19_09_30).
- sock_diag: fix autoloading of the raw_diag module (bsc#1152791).
- sock_diag: request _diag module only when the family or proto has been registered (bsc#1152791).
- staging: bcm2835-audio: Fix draining behavior regression (bsc#1111666).
- staging: vt6655: Fix memory leak in vt6655_probe (bsc#1051510).
- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;= NUM_WEPKEYS (bsc#1051510).
- supporte.conf: add efivarfs to kernel-default-base (bsc#1154858).
- tcp: Do not dequeue SYN/FIN-segments from write-queue (git-gixes).
- tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR (networking-stable-19_09_15).
- tcp: inherit timestamp on mtu probe (networking-stable-19_09_05).
- tcp: remove empty skb from write queue in error cases (networking-stable-19_09_05).
- thermal: Fix use-after-free when unregistering thermal zone device (bsc#1051510).
- thermal_hwmon: Sanitize thermal_zone type (bsc#1051510).
- tipc: add NULL pointer check before calling kfree_rcu (networking-stable-19_09_15).
- tipc: fix unlimited bundling of small messages (networking-stable-19_10_05).
- tracing: Initialize iter-&gt;seq after zeroing in tracing_read_pipe() (bsc#1151508).
- tun: fix use-after-free when register netdev failed (networking-stable-19_09_15).
- tuntap: correctly set SOCKWQ_ASYNC_NOSPACE (bsc#1145099).
- usb: adutux: fix NULL-derefs on disconnect (bsc#1142635).
- usb: adutux: fix use-after-free on disconnect (bsc#1142635).
- usb: adutux: fix use-after-free on release (bsc#1051510).
- usb: chaoskey: fix use-after-free on release (bsc#1051510).
- usb: dummy-hcd: fix power budget for SuperSpeed mode (bsc#1051510).
- usb: iowarrior: fix use-after-free after driver unbind (bsc#1051510).
- usb: iowarrior: fix use-after-free on disconnect (bsc#1051510).
- usb: iowarrior: fix use-after-free on release (bsc#1051510).
- usb: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- usb: ldusb: fix memleak on disconnect (bsc#1051510).
- usb: ldusb: fix read info leaks (bsc#1051510).
- usb: legousbtower: fix a signedness bug in tower_probe() (bsc#1051510).
- usb: legousbtower: fix deadlock on disconnect (bsc#1142635).
- usb: legousbtower: fix memleak on disconnect (bsc#1051510).
- usb: legousbtower: fix open after failed reset request (bsc#1142635).
- usb: legousbtower: fix potential NULL-deref on disconnect (bsc#1142635).
- usb: legousbtower: fix slab info leak at probe (bsc#1142635).
- usb: legousbtower: fix use-after-free on release (bsc#1051510).
- usb: microtek: fix info-leak at probe (bsc#1142635).
- usb: serial: fix runtime PM after driver unbind (bsc#1051510).
- usb: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20 (bsc#1051510).
- usb: serial: keyspan: fix NULL-derefs on open() and write() (bsc#1051510).
- usb: serial: option: add Telit FN980 compositions (bsc#1051510).
- usb: serial: option: add support for Cinterion CLS8 devices (bsc#1051510).
- usb: serial: ti_usb_3410_5052: fix port-close races (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- usb: usb-skeleton: fix NULL-deref on disconnect (bsc#1051510).
- usb: usb-skeleton: fix runtime PM after driver unbind (bsc#1051510).
- usb: usb-skeleton: fix use-after-free after driver unbind (bsc#1051510).
- usb: usblcd: fix I/O after disconnect (bsc#1142635).
- usb: usblp: fix runtime PM after driver unbind (bsc#1051510).
- usb: usblp: fix use-after-free on disconnect (bsc#1051510).
- usb: xhci: wait for CNR controller not ready bit in xhci resume (bsc#1051510).
- usb: yurex: Do not retry on unexpected errors (bsc#1051510).
- usb: yurex: fix NULL-derefs on disconnect (bsc#1051510).
- usbnet: ignore endpoints with invalid wMaxPacketSize (bsc#1051510).
- usbnet: sanity checking of packet sizes and device mtu (bsc#1051510).
- vfio_pci: Restore original state on release (bsc#1051510).
- vhost_net: conditionally enable tx polling (bsc#1145099).
- video: of: display_timing: Add of_node_put() in of_get_display_timing() (bsc#1051510).
- vsock: Fix a lockdep warning in __vsock_release() (networking-stable-19_10_05).
- watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout (bsc#1051510).
- x86/asm: Fix MWAITX C-state hint value (bsc#1114279).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area (bnc#1153969).
- x86/boot/64: Round memory hole size up to next PMD page (bnc#1153969).
- x86/mm: Use WRITE_ONCE() when setting PTEs (bsc#1114279).
- xen/netback: fix error path of xenvif_connect_data() (bsc#1065600).
- xen/pv: Fix Xen PV guest int3 handling (bsc#1153811).
- xhci: Check all endpoints for LPM timeout (bsc#1051510).
- xhci: Fix false warning message about wrong bounce buffer write length (bsc#1051510).
- xhci: Increase STS_SAVE timeout in xhci_suspend() (bsc#1051510).
- xhci: Prevent device initiated U1/U2 link pm if exit latency is too long (bsc#1051510).

		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-12"/>
	<updated date="2019-11-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046299">SUSE bug 1046299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046303">SUSE bug 1046303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046305">SUSE bug 1046305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073513">SUSE bug 1073513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086323">SUSE bug 1086323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087092">SUSE bug 1087092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089644">SUSE bug 1089644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090631">SUSE bug 1090631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093205">SUSE bug 1093205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096254">SUSE bug 1096254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097583">SUSE bug 1097583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097584">SUSE bug 1097584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097585">SUSE bug 1097585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097586">SUSE bug 1097586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097587">SUSE bug 1097587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097588">SUSE bug 1097588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098291">SUSE bug 1098291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101674">SUSE bug 1101674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109158">SUSE bug 1109158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117665">SUSE bug 1117665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119461">SUSE bug 1119461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119465">SUSE bug 1119465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123034">SUSE bug 1123034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123080">SUSE bug 1123080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133140">SUSE bug 1133140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134303">SUSE bug 1134303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135854">SUSE bug 1135854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135873">SUSE bug 1135873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135967">SUSE bug 1135967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137040">SUSE bug 1137040</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137799">SUSE bug 1137799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137861">SUSE bug 1137861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138190">SUSE bug 1138190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139073">SUSE bug 1139073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140090">SUSE bug 1140090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140729">SUSE bug 1140729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140845">SUSE bug 1140845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140883">SUSE bug 1140883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141600">SUSE bug 1141600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142667">SUSE bug 1142667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144338">SUSE bug 1144338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144375">SUSE bug 1144375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144449">SUSE bug 1144449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145099">SUSE bug 1145099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146612">SUSE bug 1146612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148410">SUSE bug 1148410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149119">SUSE bug 1149119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149853">SUSE bug 1149853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150452">SUSE bug 1150452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150457">SUSE bug 1150457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150465">SUSE bug 1150465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150875">SUSE bug 1150875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151508">SUSE bug 1151508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151807">SUSE bug 1151807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152033">SUSE bug 1152033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152624">SUSE bug 1152624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152665">SUSE bug 1152665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152685">SUSE bug 1152685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152696">SUSE bug 1152696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152697">SUSE bug 1152697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152788">SUSE bug 1152788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152790">SUSE bug 1152790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152791">SUSE bug 1152791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153112">SUSE bug 1153112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153158">SUSE bug 1153158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153236">SUSE bug 1153236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153263">SUSE bug 1153263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153476">SUSE bug 1153476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153509">SUSE bug 1153509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153607">SUSE bug 1153607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153646">SUSE bug 1153646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153681">SUSE bug 1153681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153713">SUSE bug 1153713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153717">SUSE bug 1153717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153718">SUSE bug 1153718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153719">SUSE bug 1153719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153811">SUSE bug 1153811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153969">SUSE bug 1153969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154108">SUSE bug 1154108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154189">SUSE bug 1154189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154242">SUSE bug 1154242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154268">SUSE bug 1154268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154354">SUSE bug 1154354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154372">SUSE bug 1154372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154521">SUSE bug 1154521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154578">SUSE bug 1154578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154607">SUSE bug 1154607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154608">SUSE bug 1154608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154610">SUSE bug 1154610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154611">SUSE bug 1154611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154651">SUSE bug 1154651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154737">SUSE bug 1154737</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154747">SUSE bug 1154747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154848">SUSE bug 1154848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154858">SUSE bug 1154858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154905">SUSE bug 1154905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154956">SUSE bug 1154956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155061">SUSE bug 1155061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155178">SUSE bug 1155178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155179">SUSE bug 1155179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155184">SUSE bug 1155184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155186">SUSE bug 1155186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155671">SUSE bug 1155671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802154">SUSE bug 802154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/814594">SUSE bug 814594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/919448">SUSE bug 919448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987367">SUSE bug 987367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998153">SUSE bug 998153</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12207/">CVE-2018-12207</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11135/">CVE-2019-11135</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16232/">CVE-2019-16232</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16233/">CVE-2019-16233</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16234/">CVE-2019-16234</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-16995/">CVE-2019-16995</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-17056/">CVE-2019-17056</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17133/">CVE-2019-17133</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-17666/">CVE-2019-17666</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497425" comment="kernel-default-livepatch-4.12.14-197.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497426" comment="kernel-default-livepatch-devel-4.12.14-197.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497427" comment="kernel-livepatch-4_12_14-197_26-default-1-3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138355" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1153108" ref_url="https://bugzilla.suse.com/1153108" source="BUGZILLA"/>
		<reference ref_id="1156317" ref_url="https://bugzilla.suse.com/1156317" source="BUGZILLA"/>
		<reference ref_id="1156321" ref_url="https://bugzilla.suse.com/1156321" source="BUGZILLA"/>
		<reference ref_id="1157770" ref_url="https://bugzilla.suse.com/1157770" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-13272" ref_url="https://www.suse.com/security/cve/CVE-2019-13272/" source="CVE"/>
		<reference ref_id="CVE-2019-15239" ref_url="https://www.suse.com/security/cve/CVE-2019-15239/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006235.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_7 fixes several issues.

The following security issues were fixed:

- CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship (bsc#1156321).
- CVE-2019-15239: Fixed a vulnerability where a local attacker could have triggered multiple use-after-free conditions resulted in privilege escalation (bsc#1156317).
- CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108).

The following bugs were fixed:

- Fixed boot up hang revealed by int3 self test (bsc#1157770).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-10"/>
	<updated date="2019-12-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153108">SUSE bug 1153108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156317">SUSE bug 1156317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156321">SUSE bug 1156321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157770">SUSE bug 1157770</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13272/">CVE-2019-13272</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15239/">CVE-2019-15239</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720963" comment="kernel-default 4.12.14-197.7 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719182" comment="kernel-livepatch-4_12_14-197_7-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497428" comment="kernel-livepatch-4_12_14-197_7-default-6-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138356" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1153108" ref_url="https://bugzilla.suse.com/1153108" source="BUGZILLA"/>
		<reference ref_id="1156317" ref_url="https://bugzilla.suse.com/1156317" source="BUGZILLA"/>
		<reference ref_id="1157770" ref_url="https://bugzilla.suse.com/1157770" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-15239" ref_url="https://www.suse.com/security/cve/CVE-2019-15239/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006226.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_10 fixes several issues.

The following security issues were fixed:

- CVE-2019-15239: Fixed a vulnerability where a local attacker could have triggered multiple use-after-free conditions resulted in privilege escalation (bsc#1156317).
- CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108).

The following bugs were fixed:

- Fixed boot up hang revealed by int3 self test (bsc#1157770).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-10"/>
	<updated date="2019-12-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153108">SUSE bug 1153108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156317">SUSE bug 1156317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157770">SUSE bug 1157770</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15239/">CVE-2019-15239</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720964" comment="kernel-default 4.12.14-197.10 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719183" comment="kernel-livepatch-4_12_14-197_10-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497429" comment="kernel-livepatch-4_12_14-197_10-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138357" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1153108" ref_url="https://bugzilla.suse.com/1153108" source="BUGZILLA"/>
		<reference ref_id="1156317" ref_url="https://bugzilla.suse.com/1156317" source="BUGZILLA"/>
		<reference ref_id="1157770" ref_url="https://bugzilla.suse.com/1157770" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-15239" ref_url="https://www.suse.com/security/cve/CVE-2019-15239/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3215-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006226.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_15 fixes several issues.

The following security issues were fixed:

- CVE-2019-15239: Fixed a vulnerability where a local attacker could have triggered multiple use-after-free conditions resulted in privilege escalation (bsc#1156317).
- CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108).

The following bugs were fixed:

- Fixed boot up hang revealed by int3 self test (bsc#1157770).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-10"/>
	<updated date="2019-12-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153108">SUSE bug 1153108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156317">SUSE bug 1156317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157770">SUSE bug 1157770</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15239/">CVE-2019-15239</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720965" comment="kernel-default 4.12.14-197.15 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719184" comment="kernel-livepatch-4_12_14-197_15-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497430" comment="kernel-livepatch-4_12_14-197_15-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138358" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1153108" ref_url="https://bugzilla.suse.com/1153108" source="BUGZILLA"/>
		<reference ref_id="1157770" ref_url="https://bugzilla.suse.com/1157770" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006232.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_18 fixes several issues.

The following security issue was fixed:

- CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108).

The following bugs were fixed:

- Fixed boot up hang revealed by int3 self test (bsc#1157770).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-10"/>
	<updated date="2019-12-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153108">SUSE bug 1153108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157770">SUSE bug 1157770</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720967" comment="kernel-default 4.12.14-197.18 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719186" comment="kernel-livepatch-4_12_14-197_18-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497431" comment="kernel-livepatch-4_12_14-197_18-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138359" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1153108" ref_url="https://bugzilla.suse.com/1153108" source="BUGZILLA"/>
		<reference ref_id="1157770" ref_url="https://bugzilla.suse.com/1157770" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3216-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006232.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_21 fixes several issues.

The following security issue was fixed:

- CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108).

The following bugs were fixed:

- Fixed boot up hang revealed by int3 self test (bsc#1157770).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-10"/>
	<updated date="2019-12-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153108">SUSE bug 1153108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157770">SUSE bug 1157770</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720966" comment="kernel-default 4.12.14-197.21 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719185" comment="kernel-livepatch-4_12_14-197_21-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497432" comment="kernel-livepatch-4_12_14-197_21-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138360" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1153108" ref_url="https://bugzilla.suse.com/1153108" source="BUGZILLA"/>
		<reference ref_id="1156321" ref_url="https://bugzilla.suse.com/1156321" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-13272" ref_url="https://www.suse.com/security/cve/CVE-2019-13272/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3248-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006242.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-195 fixes several issues.

The following security issues were fixed:

- CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging
  certain scenarios with a parent-child process relationship (bsc#1156321).
- CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-11"/>
	<updated date="2019-12-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153108">SUSE bug 1153108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156321">SUSE bug 1156321</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13272/">CVE-2019-13272</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720961" comment="kernel-default 4.12.14-195 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719180" comment="kernel-livepatch-4_12_14-195-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497433" comment="kernel-livepatch-4_12_14-195-default-8-22.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138361" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1153108" ref_url="https://bugzilla.suse.com/1153108" source="BUGZILLA"/>
		<reference ref_id="1156317" ref_url="https://bugzilla.suse.com/1156317" source="BUGZILLA"/>
		<reference ref_id="1156321" ref_url="https://bugzilla.suse.com/1156321" source="BUGZILLA"/>
		<reference ref_id="1157770" ref_url="https://bugzilla.suse.com/1157770" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-13272" ref_url="https://www.suse.com/security/cve/CVE-2019-13272/" source="CVE"/>
		<reference ref_id="CVE-2019-15239" ref_url="https://www.suse.com/security/cve/CVE-2019-15239/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006245.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_4 fixes several issues.

The following security issues were fixed:

- CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship (bsc#1156321).
- CVE-2019-15239: Fixed a vulnerability where a local attacker could have triggered multiple use-after-free conditions resulted in privilege escalation (bsc#1156317).
- CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108).

The following bugs were fixed:

- Fixed boot up hang revealed by int3 self test (bsc#1157770).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-11"/>
	<updated date="2019-12-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153108">SUSE bug 1153108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156317">SUSE bug 1156317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156321">SUSE bug 1156321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157770">SUSE bug 1157770</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13272/">CVE-2019-13272</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15239/">CVE-2019-15239</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720962" comment="kernel-default 4.12.14-197.4 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719181" comment="kernel-livepatch-4_12_14-197_4-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497434" comment="kernel-livepatch-4_12_14-197_4-default-7-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138362" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1048942" ref_url="https://bugzilla.suse.com/1048942" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1078248" ref_url="https://bugzilla.suse.com/1078248" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1089644" ref_url="https://bugzilla.suse.com/1089644" source="BUGZILLA"/>
		<reference ref_id="1091041" ref_url="https://bugzilla.suse.com/1091041" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1108043" ref_url="https://bugzilla.suse.com/1108043" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1117169" ref_url="https://bugzilla.suse.com/1117169" source="BUGZILLA"/>
		<reference ref_id="1118661" ref_url="https://bugzilla.suse.com/1118661" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1120853" ref_url="https://bugzilla.suse.com/1120853" source="BUGZILLA"/>
		<reference ref_id="1126390" ref_url="https://bugzilla.suse.com/1126390" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1131107" ref_url="https://bugzilla.suse.com/1131107" source="BUGZILLA"/>
		<reference ref_id="1134983" ref_url="https://bugzilla.suse.com/1134983" source="BUGZILLA"/>
		<reference ref_id="1135966" ref_url="https://bugzilla.suse.com/1135966" source="BUGZILLA"/>
		<reference ref_id="1135967" ref_url="https://bugzilla.suse.com/1135967" source="BUGZILLA"/>
		<reference ref_id="1137223" ref_url="https://bugzilla.suse.com/1137223" source="BUGZILLA"/>
		<reference ref_id="1137236" ref_url="https://bugzilla.suse.com/1137236" source="BUGZILLA"/>
		<reference ref_id="1138039" ref_url="https://bugzilla.suse.com/1138039" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1142095" ref_url="https://bugzilla.suse.com/1142095" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142924" ref_url="https://bugzilla.suse.com/1142924" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1149448" ref_url="https://bugzilla.suse.com/1149448" source="BUGZILLA"/>
		<reference ref_id="1150466" ref_url="https://bugzilla.suse.com/1150466" source="BUGZILLA"/>
		<reference ref_id="1151067" ref_url="https://bugzilla.suse.com/1151067" source="BUGZILLA"/>
		<reference ref_id="1151548" ref_url="https://bugzilla.suse.com/1151548" source="BUGZILLA"/>
		<reference ref_id="1151900" ref_url="https://bugzilla.suse.com/1151900" source="BUGZILLA"/>
		<reference ref_id="1152782" ref_url="https://bugzilla.suse.com/1152782" source="BUGZILLA"/>
		<reference ref_id="1153628" ref_url="https://bugzilla.suse.com/1153628" source="BUGZILLA"/>
		<reference ref_id="1153811" ref_url="https://bugzilla.suse.com/1153811" source="BUGZILLA"/>
		<reference ref_id="1154043" ref_url="https://bugzilla.suse.com/1154043" source="BUGZILLA"/>
		<reference ref_id="1154058" ref_url="https://bugzilla.suse.com/1154058" source="BUGZILLA"/>
		<reference ref_id="1154124" ref_url="https://bugzilla.suse.com/1154124" source="BUGZILLA"/>
		<reference ref_id="1154355" ref_url="https://bugzilla.suse.com/1154355" source="BUGZILLA"/>
		<reference ref_id="1154526" ref_url="https://bugzilla.suse.com/1154526" source="BUGZILLA"/>
		<reference ref_id="1154601" ref_url="https://bugzilla.suse.com/1154601" source="BUGZILLA"/>
		<reference ref_id="1155021" ref_url="https://bugzilla.suse.com/1155021" source="BUGZILLA"/>
		<reference ref_id="1155689" ref_url="https://bugzilla.suse.com/1155689" source="BUGZILLA"/>
		<reference ref_id="1155692" ref_url="https://bugzilla.suse.com/1155692" source="BUGZILLA"/>
		<reference ref_id="1155836" ref_url="https://bugzilla.suse.com/1155836" source="BUGZILLA"/>
		<reference ref_id="1155897" ref_url="https://bugzilla.suse.com/1155897" source="BUGZILLA"/>
		<reference ref_id="1155921" ref_url="https://bugzilla.suse.com/1155921" source="BUGZILLA"/>
		<reference ref_id="1155982" ref_url="https://bugzilla.suse.com/1155982" source="BUGZILLA"/>
		<reference ref_id="1156187" ref_url="https://bugzilla.suse.com/1156187" source="BUGZILLA"/>
		<reference ref_id="1156258" ref_url="https://bugzilla.suse.com/1156258" source="BUGZILLA"/>
		<reference ref_id="1156429" ref_url="https://bugzilla.suse.com/1156429" source="BUGZILLA"/>
		<reference ref_id="1156466" ref_url="https://bugzilla.suse.com/1156466" source="BUGZILLA"/>
		<reference ref_id="1156471" ref_url="https://bugzilla.suse.com/1156471" source="BUGZILLA"/>
		<reference ref_id="1156494" ref_url="https://bugzilla.suse.com/1156494" source="BUGZILLA"/>
		<reference ref_id="1156609" ref_url="https://bugzilla.suse.com/1156609" source="BUGZILLA"/>
		<reference ref_id="1156700" ref_url="https://bugzilla.suse.com/1156700" source="BUGZILLA"/>
		<reference ref_id="1156729" ref_url="https://bugzilla.suse.com/1156729" source="BUGZILLA"/>
		<reference ref_id="1156882" ref_url="https://bugzilla.suse.com/1156882" source="BUGZILLA"/>
		<reference ref_id="1156928" ref_url="https://bugzilla.suse.com/1156928" source="BUGZILLA"/>
		<reference ref_id="1157032" ref_url="https://bugzilla.suse.com/1157032" source="BUGZILLA"/>
		<reference ref_id="1157038" ref_url="https://bugzilla.suse.com/1157038" source="BUGZILLA"/>
		<reference ref_id="1157042" ref_url="https://bugzilla.suse.com/1157042" source="BUGZILLA"/>
		<reference ref_id="1157044" ref_url="https://bugzilla.suse.com/1157044" source="BUGZILLA"/>
		<reference ref_id="1157045" ref_url="https://bugzilla.suse.com/1157045" source="BUGZILLA"/>
		<reference ref_id="1157046" ref_url="https://bugzilla.suse.com/1157046" source="BUGZILLA"/>
		<reference ref_id="1157049" ref_url="https://bugzilla.suse.com/1157049" source="BUGZILLA"/>
		<reference ref_id="1157070" ref_url="https://bugzilla.suse.com/1157070" source="BUGZILLA"/>
		<reference ref_id="1157115" ref_url="https://bugzilla.suse.com/1157115" source="BUGZILLA"/>
		<reference ref_id="1157143" ref_url="https://bugzilla.suse.com/1157143" source="BUGZILLA"/>
		<reference ref_id="1157145" ref_url="https://bugzilla.suse.com/1157145" source="BUGZILLA"/>
		<reference ref_id="1157158" ref_url="https://bugzilla.suse.com/1157158" source="BUGZILLA"/>
		<reference ref_id="1157160" ref_url="https://bugzilla.suse.com/1157160" source="BUGZILLA"/>
		<reference ref_id="1157162" ref_url="https://bugzilla.suse.com/1157162" source="BUGZILLA"/>
		<reference ref_id="1157171" ref_url="https://bugzilla.suse.com/1157171" source="BUGZILLA"/>
		<reference ref_id="1157173" ref_url="https://bugzilla.suse.com/1157173" source="BUGZILLA"/>
		<reference ref_id="1157178" ref_url="https://bugzilla.suse.com/1157178" source="BUGZILLA"/>
		<reference ref_id="1157180" ref_url="https://bugzilla.suse.com/1157180" source="BUGZILLA"/>
		<reference ref_id="1157182" ref_url="https://bugzilla.suse.com/1157182" source="BUGZILLA"/>
		<reference ref_id="1157183" ref_url="https://bugzilla.suse.com/1157183" source="BUGZILLA"/>
		<reference ref_id="1157184" ref_url="https://bugzilla.suse.com/1157184" source="BUGZILLA"/>
		<reference ref_id="1157191" ref_url="https://bugzilla.suse.com/1157191" source="BUGZILLA"/>
		<reference ref_id="1157193" ref_url="https://bugzilla.suse.com/1157193" source="BUGZILLA"/>
		<reference ref_id="1157197" ref_url="https://bugzilla.suse.com/1157197" source="BUGZILLA"/>
		<reference ref_id="1157298" ref_url="https://bugzilla.suse.com/1157298" source="BUGZILLA"/>
		<reference ref_id="1157304" ref_url="https://bugzilla.suse.com/1157304" source="BUGZILLA"/>
		<reference ref_id="1157307" ref_url="https://bugzilla.suse.com/1157307" source="BUGZILLA"/>
		<reference ref_id="1157324" ref_url="https://bugzilla.suse.com/1157324" source="BUGZILLA"/>
		<reference ref_id="1157333" ref_url="https://bugzilla.suse.com/1157333" source="BUGZILLA"/>
		<reference ref_id="1157386" ref_url="https://bugzilla.suse.com/1157386" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1157463" ref_url="https://bugzilla.suse.com/1157463" source="BUGZILLA"/>
		<reference ref_id="1157499" ref_url="https://bugzilla.suse.com/1157499" source="BUGZILLA"/>
		<reference ref_id="1157678" ref_url="https://bugzilla.suse.com/1157678" source="BUGZILLA"/>
		<reference ref_id="1157698" ref_url="https://bugzilla.suse.com/1157698" source="BUGZILLA"/>
		<reference ref_id="1157778" ref_url="https://bugzilla.suse.com/1157778" source="BUGZILLA"/>
		<reference ref_id="1157908" ref_url="https://bugzilla.suse.com/1157908" source="BUGZILLA"/>
		<reference ref_id="1158049" ref_url="https://bugzilla.suse.com/1158049" source="BUGZILLA"/>
		<reference ref_id="1158063" ref_url="https://bugzilla.suse.com/1158063" source="BUGZILLA"/>
		<reference ref_id="1158064" ref_url="https://bugzilla.suse.com/1158064" source="BUGZILLA"/>
		<reference ref_id="1158065" ref_url="https://bugzilla.suse.com/1158065" source="BUGZILLA"/>
		<reference ref_id="1158066" ref_url="https://bugzilla.suse.com/1158066" source="BUGZILLA"/>
		<reference ref_id="1158067" ref_url="https://bugzilla.suse.com/1158067" source="BUGZILLA"/>
		<reference ref_id="1158068" ref_url="https://bugzilla.suse.com/1158068" source="BUGZILLA"/>
		<reference ref_id="1158071" ref_url="https://bugzilla.suse.com/1158071" source="BUGZILLA"/>
		<reference ref_id="1158082" ref_url="https://bugzilla.suse.com/1158082" source="BUGZILLA"/>
		<reference ref_id="1158381" ref_url="https://bugzilla.suse.com/1158381" source="BUGZILLA"/>
		<reference ref_id="1158394" ref_url="https://bugzilla.suse.com/1158394" source="BUGZILLA"/>
		<reference ref_id="1158398" ref_url="https://bugzilla.suse.com/1158398" source="BUGZILLA"/>
		<reference ref_id="1158407" ref_url="https://bugzilla.suse.com/1158407" source="BUGZILLA"/>
		<reference ref_id="1158410" ref_url="https://bugzilla.suse.com/1158410" source="BUGZILLA"/>
		<reference ref_id="1158413" ref_url="https://bugzilla.suse.com/1158413" source="BUGZILLA"/>
		<reference ref_id="1158417" ref_url="https://bugzilla.suse.com/1158417" source="BUGZILLA"/>
		<reference ref_id="1158427" ref_url="https://bugzilla.suse.com/1158427" source="BUGZILLA"/>
		<reference ref_id="1158445" ref_url="https://bugzilla.suse.com/1158445" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-0154" ref_url="https://www.suse.com/security/cve/CVE-2019-0154/" source="CVE"/>
		<reference ref_id="CVE-2019-14895" ref_url="https://www.suse.com/security/cve/CVE-2019-14895/" source="CVE"/>
		<reference ref_id="CVE-2019-14901" ref_url="https://www.suse.com/security/cve/CVE-2019-14901/" source="CVE"/>
		<reference ref_id="CVE-2019-15916" ref_url="https://www.suse.com/security/cve/CVE-2019-15916/" source="CVE"/>
		<reference ref_id="CVE-2019-16231" ref_url="https://www.suse.com/security/cve/CVE-2019-16231/" source="CVE"/>
		<reference ref_id="CVE-2019-17055" ref_url="https://www.suse.com/security/cve/CVE-2019-17055/" source="CVE"/>
		<reference ref_id="CVE-2019-18660" ref_url="https://www.suse.com/security/cve/CVE-2019-18660/" source="CVE"/>
		<reference ref_id="CVE-2019-18683" ref_url="https://www.suse.com/security/cve/CVE-2019-18683/" source="CVE"/>
		<reference ref_id="CVE-2019-18805" ref_url="https://www.suse.com/security/cve/CVE-2019-18805/" source="CVE"/>
		<reference ref_id="CVE-2019-18809" ref_url="https://www.suse.com/security/cve/CVE-2019-18809/" source="CVE"/>
		<reference ref_id="CVE-2019-19046" ref_url="https://www.suse.com/security/cve/CVE-2019-19046/" source="CVE"/>
		<reference ref_id="CVE-2019-19049" ref_url="https://www.suse.com/security/cve/CVE-2019-19049/" source="CVE"/>
		<reference ref_id="CVE-2019-19052" ref_url="https://www.suse.com/security/cve/CVE-2019-19052/" source="CVE"/>
		<reference ref_id="CVE-2019-19056" ref_url="https://www.suse.com/security/cve/CVE-2019-19056/" source="CVE"/>
		<reference ref_id="CVE-2019-19057" ref_url="https://www.suse.com/security/cve/CVE-2019-19057/" source="CVE"/>
		<reference ref_id="CVE-2019-19058" ref_url="https://www.suse.com/security/cve/CVE-2019-19058/" source="CVE"/>
		<reference ref_id="CVE-2019-19060" ref_url="https://www.suse.com/security/cve/CVE-2019-19060/" source="CVE"/>
		<reference ref_id="CVE-2019-19062" ref_url="https://www.suse.com/security/cve/CVE-2019-19062/" source="CVE"/>
		<reference ref_id="CVE-2019-19063" ref_url="https://www.suse.com/security/cve/CVE-2019-19063/" source="CVE"/>
		<reference ref_id="CVE-2019-19065" ref_url="https://www.suse.com/security/cve/CVE-2019-19065/" source="CVE"/>
		<reference ref_id="CVE-2019-19067" ref_url="https://www.suse.com/security/cve/CVE-2019-19067/" source="CVE"/>
		<reference ref_id="CVE-2019-19068" ref_url="https://www.suse.com/security/cve/CVE-2019-19068/" source="CVE"/>
		<reference ref_id="CVE-2019-19073" ref_url="https://www.suse.com/security/cve/CVE-2019-19073/" source="CVE"/>
		<reference ref_id="CVE-2019-19074" ref_url="https://www.suse.com/security/cve/CVE-2019-19074/" source="CVE"/>
		<reference ref_id="CVE-2019-19075" ref_url="https://www.suse.com/security/cve/CVE-2019-19075/" source="CVE"/>
		<reference ref_id="CVE-2019-19077" ref_url="https://www.suse.com/security/cve/CVE-2019-19077/" source="CVE"/>
		<reference ref_id="CVE-2019-19078" ref_url="https://www.suse.com/security/cve/CVE-2019-19078/" source="CVE"/>
		<reference ref_id="CVE-2019-19080" ref_url="https://www.suse.com/security/cve/CVE-2019-19080/" source="CVE"/>
		<reference ref_id="CVE-2019-19081" ref_url="https://www.suse.com/security/cve/CVE-2019-19081/" source="CVE"/>
		<reference ref_id="CVE-2019-19082" ref_url="https://www.suse.com/security/cve/CVE-2019-19082/" source="CVE"/>
		<reference ref_id="CVE-2019-19083" ref_url="https://www.suse.com/security/cve/CVE-2019-19083/" source="CVE"/>
		<reference ref_id="CVE-2019-19227" ref_url="https://www.suse.com/security/cve/CVE-2019-19227/" source="CVE"/>
		<reference ref_id="CVE-2019-19524" ref_url="https://www.suse.com/security/cve/CVE-2019-19524/" source="CVE"/>
		<reference ref_id="CVE-2019-19525" ref_url="https://www.suse.com/security/cve/CVE-2019-19525/" source="CVE"/>
		<reference ref_id="CVE-2019-19528" ref_url="https://www.suse.com/security/cve/CVE-2019-19528/" source="CVE"/>
		<reference ref_id="CVE-2019-19529" ref_url="https://www.suse.com/security/cve/CVE-2019-19529/" source="CVE"/>
		<reference ref_id="CVE-2019-19530" ref_url="https://www.suse.com/security/cve/CVE-2019-19530/" source="CVE"/>
		<reference ref_id="CVE-2019-19531" ref_url="https://www.suse.com/security/cve/CVE-2019-19531/" source="CVE"/>
		<reference ref_id="CVE-2019-19534" ref_url="https://www.suse.com/security/cve/CVE-2019-19534/" source="CVE"/>
		<reference ref_id="CVE-2019-19536" ref_url="https://www.suse.com/security/cve/CVE-2019-19536/" source="CVE"/>
		<reference ref_id="CVE-2019-19543" ref_url="https://www.suse.com/security/cve/CVE-2019-19543/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).
- CVE-2019-19543: There was a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c (bnc#1158427).
- CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver (bnc#1158417).
- CVE-2019-19530: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver (bnc#1158410).
- CVE-2019-19536: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver (bnc#1158394).
- CVE-2019-19524: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver (bnc#1158413).
- CVE-2019-19528: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (bnc#1158407).
- CVE-2019-19534: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver (bnc#1158398).
- CVE-2019-19529: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver (bnc#1158381).
- CVE-2019-14901: A heap overflow flaw was found in the Linux kernel in Marvell WiFi chip driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system (bnc#1157042).
- CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could have allowed the remote device to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1157158).
- CVE-2019-18660: The Linux kernel on powerpc allowed Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c (bnc#1157038).
- CVE-2019-18683: An issue was discovered in drivers/media/platform/vivid in the Linux kernel. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free (bnc#1155897).
- CVE-2019-18809: A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1156258).
- CVE-2019-19046: A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure (bnc#1157304).
- CVE-2019-19078: A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157032).
- CVE-2019-19062: A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures (bnc#1157333).
- CVE-2019-19057: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures (bnc#1157197).
- CVE-2019-19056: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures (bnc#1157197).
- CVE-2019-19068: A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157307).
- CVE-2019-19063: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157298).
- CVE-2019-19227: In the AppleTalk subsystem in the Linux kernel there was a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client (bnc#1157678).
- CVE-2019-19081: A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157045).
- CVE-2019-19080: Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157044).
- CVE-2019-19065: A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures (bnc#1157191).
- CVE-2019-19077: A memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering copy to udata failures (bnc#1157171).
- CVE-2019-19052: A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157324).
- CVE-2019-19067: Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures (bsc#1157180).
- CVE-2019-19060: A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157178).
- CVE-2019-19049: A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering of_fdt_unflatten_tree() failures (bsc#1157173).
- CVE-2019-19075: A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering ca8210_get_platform_data() failures (bnc#1157162).
- CVE-2019-19058: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures (bnc#1157145).
- CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157143).
- CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function (bnc#1157070).
- CVE-2019-19083: Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel allowed attackers to cause a denial of service (memory consumption). This affects the dce112_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, the dce100_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, the dcn20_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c, the dce120_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, and the dce80_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce80/dce80_resource.c (bnc#1157049).
- CVE-2019-19082: Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel allowed attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, the dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, and the dce112_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c (bnc#1157046).
- CVE-2019-15916: An issue was discovered in the Linux kernel There was a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service (bnc#1149448).
- CVE-2019-0154: Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1135966).
- CVE-2019-16231: drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150466).
- CVE-2019-18805: An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel There was a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact (bnc#1156187).
- CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket (bnc#1152782).

The following non-security bugs were fixed:

- bnxt_en: Update firmware interface spec. to 1.10.0.47 (bsc#1157115)
- ACPI / LPSS: Exclude I2C busses shared with PUNIT from pmc_atom_d3_mask (bsc#1051510).
- ACPI / SBS: Fix rare oops when removing modules (bsc#1051510).
- ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug bridge (bsc#1111666).
- ACPICA: Never run _REG on system_memory and system_IO (bsc#1051510).
- ACPICA: Use %d for signed int print formatting instead of %u (bsc#1051510).
- ALSA: 6fire: Drop the dead code (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (git-fixes).
- ALSA: cs4236: fix error return comparison of an unsigned integer (git-fixes).
- ALSA: firewire-motu: Correct a typo in the clock proc string (git-fixes).
- ALSA: hda - Add mute led support for HP ProBook 645 G4 (git-fixes).
- ALSA: hda - Fix pending unsol events at shutdown (git-fixes).
- ALSA: hda/ca0132 - Fix possible workqueue stall (bsc#1155836).
- ALSA: hda/hdmi - Clear codec-&gt;relaxed_resume flag at unbinding (git-fixes).
- ALSA: hda/intel: add CometLake PCI IDs (bsc#1156729).
- ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC (git-fixes).
- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (git-fixes).
- ALSA: hda/realtek - Move some alc236 pintbls to fallback table (git-fixes).
- ALSA: hda/realtek - Move some alc256 pintbls to fallback table (git-fixes).
- ALSA: hda: Add Cometlake-S PCI ID (git-fixes).
- ALSA: hda: Fix racy display power access (bsc#1156928).
- ALSA: hda: hdmi - fix port numbering for ICL and TGL platforms (git-fixes).
- ALSA: hda: hdmi - remove redundant code comments (git-fixes).
- ALSA: i2c/cs8427: Fix int to char conversion (bsc#1051510).
- ALSA: intel8x0m: Register irq handler after register initializations (bsc#1051510).
- ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed() (git-fixes).
- ALSA: pcm: Yet another missing check of non-cached buffer type (bsc#1111666).
- ALSA: pcm: signedness bug in snd_pcm_plug_alloc() (bsc#1051510).
- ALSA: seq: Do error checks at creating system ports (bsc#1051510).
- ALSA: timer: Fix incorrectly assigned timer instance (git-fixes).
- ALSA: usb-audio: Add skip_validation option (git-fixes).
- ALSA: usb-audio: Fix Focusrite Scarlett 6i6 gen1 - input handling (git-fixes).
- ALSA: usb-audio: Fix NULL dereference at parsing BADD (git-fixes).
- ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() (git-fixes).
- ALSA: usb-audio: Fix incorrect size check for processing/extension units (git-fixes).
- ALSA: usb-audio: Fix missing error check at mixer resolution test (git-fixes).
- ALSA: usb-audio: not submit urb for stopped endpoint (git-fixes).
- ALSA: usb-audio: sound: usb: usb true/false for bool return type (git-fixes).
- ASoC: Intel: hdac_hdmi: Limit sampling rates at dai creation (bsc#1051510).
- ASoC: davinci-mcasp: Handle return value of devm_kasprintf (stable 4.14.y).
- ASoC: davinci: Kill BUG_ON() usage (stable 4.14.y).
- ASoC: dpcm: Properly initialise hw-&gt;rate_max (bsc#1051510).
- ASoC: kirkwood: fix external clock probe defer (git-fixes).
- ASoC: msm8916-wcd-analog: Fix RX1 selection in RDAC2 MUX (git-fixes).
- ASoC: sgtl5000: avoid division by zero if lo_vag is zero (bsc#1051510).
- ASoC: tegra_sgtl5000: fix device_node refcounting (bsc#1051510).
- ASoC: tlv320aic31xx: Handle inverted BCLK in non-DSP modes (stable 4.14.y).
- ASoC: tlv320dac31xx: mark expected switch fall-through (stable 4.14.y).
- Bluetooth: Fix invalid-free in bcsp_close() (git-fixes).
- Bluetooth: Fix memory leak in hci_connect_le_scan (bsc#1051510).
- Bluetooth: L2CAP: Detect if remote is not able to use the whole MPS (bsc#1051510).
- Bluetooth: btusb: fix PM leak in error case of setup (bsc#1051510).
- Bluetooth: delete a stray unlock (bsc#1051510).
- Bluetooth: hci_core: fix init for HCI_USER_CHANNEL (bsc#1051510).
- Btrfs: fix log context list corruption after rename exchange operation (bsc#1156494).
- CIFS: Fix SMB2 oplock break processing (bsc#1144333, bsc#1154355).
- CIFS: Fix oplock handling for SMB 2.1+ protocols (bsc#1144333, bsc#1154355).
- CIFS: Fix retry mid list corruption on reconnects (bsc#1144333, bsc#1154355).
- CIFS: Fix use after free of file info structures (bsc#1144333, bsc#1154355).
- CIFS: Force reval dentry if LOOKUP_REVAL flag is set (bsc#1144333, bsc#1154355).
- CIFS: Force revalidate inode when dentry is stale (bsc#1144333, bsc#1154355).
- CIFS: Gracefully handle QueryInfo errors during open (bsc#1144333, bsc#1154355).
- CIFS: avoid using MID 0xFFFF (bsc#1144333, bsc#1154355).
- CIFS: fix max ea value size (bsc#1144333, bsc#1154355).
- Documentation: debugfs: Document debugfs helper for unsigned long values (git-fixes).
- Documentation: x86: convert protection-keys.txt to reST (bsc#1078248).
- EDAC/ghes: Fix Use after free in ghes_edac remove path (bsc#1114279).
- HID: Add ASUS T100CHI keyboard dock battery quirks (bsc#1051510).
- HID: Add quirk for Microsoft PIXART OEM mouse (bsc#1051510).
- HID: Fix assumption that devices have inputs (git-fixes).
- HID: asus: Add T100CHI bluetooth keyboard dock special keys mapping (bsc#1051510).
- HID: wacom: generic: Treat serial number and related fields as unsigned (git-fixes).
- IB/mlx5: Free mpi in mp_slave mode (bsc#1103991).
- IB/mlx5: Support MLX5_CMD_OP_QUERY_LAG as a DEVX general command (bsc#1103991).
- Input: ff-memless - kill timer in destroy() (bsc#1051510).
- Input: silead - try firmware reload after unsuccessful resume (bsc#1051510).
- Input: st1232 - set INPUT_PROP_DIRECT property (bsc#1051510).
- Input: synaptics-rmi4 - clear IRQ enables for F54 (bsc#1051510).
- Input: synaptics-rmi4 - destroy F54 poller workqueue when removing (bsc#1051510).
- Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver (bsc#1051510).
- Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) (bsc#1051510).
- Input: synaptics-rmi4 - fix video buffer size (git-fixes).
- KVM: SVM: Guard against DEACTIVATE when performing WBINVD/DF_FLUSH (bsc#1114279).
- KVM: SVM: Serialize access to the SEV ASID bitmap (bsc#1114279).
- KVM: VMX: Consider PID.PIR to determine if vCPU has pending interrupts (bsc#1158064).
- KVM: VMX: Fix conditions for guest IA32_XSS support (bsc#1158065).
- KVM: s390: fix __insn32_query() inline assembly (git-fixes).
- KVM: s390: vsie: Do not shadow CRYCB when no AP and no keys (git-fixes).
- KVM: s390: vsie: Return correct values for Invalid CRYCB format (git-fixes).
- KVM: x86/mmu: Take slots_lock when using kvm_mmu_zap_all_fast() (bsc#1158067).
- KVM: x86: Introduce vcpu-&gt;arch.xsaves_enabled (bsc#1158066).
- NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error (git-fixes).
- PCI/ACPI: Correct error message for ASPM disabling (bsc#1051510).
- PCI/MSI: Fix incorrect MSI-X masking on resume (bsc#1051510).
- PCI/PM: Clear PCIe PME Status even for legacy power management (bsc#1111666).
- PCI/PME: Fix possible use-after-free on remove (git-fixes).
- PCI/PTM: Remove spurious 'd' from granularity message (bsc#1051510).
- PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3 (bsc#1051510).
- PCI: Fix Intel ACS quirk UPDCR register address (bsc#1051510).
- PCI: dwc: Fix find_next_bit() usage (bsc#1051510).
- PCI: pciehp: Do not disable interrupt twice on suspend (bsc#1111666).
- PCI: rcar: Fix missing MACCTLR register setting in initialization sequence (bsc#1051510).
- PCI: sysfs: Ignore lockdep for remove attribute (git-fixes).
- PCI: tegra: Enable Relaxed Ordering only for Tegra20 and Tegra30 (git-fixes).
- PM / devfreq: Check NULL governor in available_governors_show (git-fixes).
- PM / devfreq: Lock devfreq in trans_stat_show (git-fixes).
- PM / devfreq: exynos-bus: Correct clock enable sequence (bsc#1051510).
- PM / devfreq: passive: Use non-devm notifiers (bsc#1051510).
- PM / devfreq: passive: fix compiler warning (bsc#1051510).
- PM / hibernate: Check the success of generating md5 digest before hibernation (bsc#1051510).
- RDMA/bnxt_re: Fix stat push into dma buffer on gen p5 devices (bsc#1157115)
- RDMA/efa: Add Amazon EFA driver (jsc#SLE-4805)
- RDMA/efa: Clear the admin command buffer prior to its submission (git-fixes) Patch was already picked through Amazon driver repo but was not marked with a Git-commit tag
- RDMA/hns: Fix comparison of unsigned long variable 'end' with less than zero (bsc#1104427 bsc#1137236).
- RDMA/hns: Fix wrong assignment of qp_access_flags (bsc#1104427 ).
- RDMA/restrack: Track driver QP types in resource tracker (jsc#SLE-4805)
- Remove patches that reportedly cause regression (bsc#1155689 ltc#182047).
- Revert 'drm/etnaviv: fix dumping of iommuv2 (bsc#1113722)' This reverts commit 71e3a1b8d8cf73f711f3e4100aa51f68e631f94f.
- Revert synaptics-rmi4 patch due to regression (bsc#1155982) Also blacklisting it
- UAS: Revert commit 3ae62a42090f ('UAS: fix alignment of scatter/gather segments').
- USB: chaoskey: fix error case of a timeout (git-fixes).
- USB: gadget: Reject endpoints with 0 maxpacket value (bsc#1051510).
- USB: ldusb: fix control-message timeout (bsc#1051510).
- USB: ldusb: fix ring-buffer locking (bsc#1051510).
- USB: misc: appledisplay: fix backlight update_status return code (bsc#1051510).
- USB: serial: mos7720: fix remote wakeup (git-fixes).
- USB: serial: mos7840: add USB ID to support Moxa UPort 2210 (bsc#1051510).
- USB: serial: mos7840: fix remote wakeup (git-fixes).
- USB: serial: option: add support for DW5821e with eSIM support (bsc#1051510).
- USB: serial: option: add support for Foxconn T77W968 LTE modules (bsc#1051510).
- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: serial: whiteheat: fix potential slab corruption (bsc#1051510).
- USBIP: add config dependency for SGL_ALLOC (git-fixes).
- acpi/nfit, device-dax: Identify differentiated memory with a unique numa-node (bsc#1158071).
- appledisplay: fix error handling in the scheduled work (git-fixes).
- arm64: Update config files. (bsc#1156466) Enable HW_RANDOM_OMAP driver and mark driver omap-rng as supported.
- ata: ep93xx: Use proper enums for directions (bsc#1051510).
- ath10k: Correct error handling of dma_map_single() (bsc#1111666).
- ath10k: allocate small size dma memory in ath10k_pci_diag_write_mem (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3 (bsc#1111666).
- ath10k: avoid possible memory access violation (bsc#1111666).
- ath10k: fix kernel panic by moving pci flush after napi_disable (bsc#1051510).
- ath10k: fix vdev-start timeout on error (bsc#1051510).
- ath10k: limit available channels via DT ieee80211-freq-limit (bsc#1051510).
- ath10k: skip resetting rx filter for WCN3990 (bsc#1111666).
- ath10k: wmi: disable softirq's while calling ieee80211_rx (bsc#1051510).
- ath9k: Fix a locking bug in ath9k_add_interface() (bsc#1051510).
- ath9k: add back support for using active monitor interfaces for tx99 (bsc#1051510).
- ath9k: fix reporting calculated new FFT upper max (bsc#1051510).
- ath9k: fix tx99 with monitor mode interface (bsc#1051510).
- ath9k_hw: fix uninitialized variable data (bsc#1051510).
- ax88172a: fix information leak on short answers (bsc#1051510).
- backlight: lm3639: Unconditionally call led_classdev_unregister (bsc#1051510).
- bnxt_en: Increase timeout for HWRM_DBG_COREDUMP_XX commands (bsc#1104745).
- bnxt_en: Update firmware interface spec. to 1.10.0.89 (bsc#1157115)
- bnxt_en: Update firmware interface to 1.10.0.69 (bsc#1157115)
- bpf: Fix use after free in subprog's jited symbol removal (bsc#1109837).
- bpf: fix BTF limits (bsc#1109837).
- bpf: fix BTF verification of enums (bsc#1109837).
- brcmfmac: fix full timeout waiting for action frame on-channel tx (bsc#1051510).
- brcmfmac: fix wrong strnchr usage (bsc#1111666).
- brcmfmac: increase buffer for obtaining firmware capabilities (bsc#1111666).
- brcmfmac: reduce timeout for action frame scan (bsc#1051510).
- brcmsmac: AP mode: update beacon when TIM changes (bsc#1051510).
- brcmsmac: Use kvmalloc() for ucode allocations (bsc#1111666).
- brcmsmac: never log 'tid x is not agg'able' by default (bsc#1051510).
- can: c_can: c_can_poll(): only read status register after status IRQ (git-fixes).
- can: dev: call netif_carrier_off() in register_candev() (bsc#1051510).
- can: mcba_usb: fix use-after-free on disconnect (git-fixes).
- can: peak_usb: fix a potential out-of-sync while decoding packets (git-fixes).
- can: peak_usb: fix slab info leak (git-fixes).
- can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue beyond skb_queue_len_max (git-fixes).
- can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak (git-fixes).
- can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb mem leak (git-fixes).
- can: usb_8dev: fix use-after-free on disconnect (git-fixes).
- ceph: add missing check in d_revalidate snapdir handling (bsc#1157183).
- ceph: do not try to handle hashed dentries in non-O_CREAT atomic_open (bsc#1157184).
- ceph: fix use-after-free in __ceph_remove_cap() (bsc#1154058).
- ceph: just skip unrecognized info in ceph_reply_info_extra (bsc#1157182).
- cfg80211: Avoid regulatory restore when COUNTRY_IE_IGNORE is set (bsc#1051510).
- cfg80211: Prevent regulatory restore during STA disconnect in concurrent interfaces (bsc#1051510).
- cfg80211: call disconnect_wk when AP stops (bsc#1051510).
- cfg80211: validate wmm rule when setting (bsc#1111666).
- cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (bsc#1144333, bsc#1154355).
- cifs: Fix missed free operations (bsc#1144333, bsc#1154355).
- cifs: Use kzfree() to zero out the password (bsc#1144333, bsc#1154355).
- cifs: add a helper to find an existing readable handle to a file (bsc#1144333, bsc#1154355).
- cifs: create a helper to find a writeable handle by path name (bsc#1144333, bsc#1154355).
- cifs: move cifsFileInfo_put logic into a work-queue (bsc#1144333, bsc#1154355).
- cifs: prepare SMB2_Flush to be usable in compounds (bsc#1144333, bsc#1154355).
- cifs: set domainName when a domain-key is used in multiuser (bsc#1144333, bsc#1154355).
- cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (bsc#1144333, bsc#1154355).
- cifs: use existing handle for compound_op(OP_SET_INFO) when possible (bsc#1144333, bsc#1154355).
- clk: at91: avoid sleeping early (git-fixes).
- clk: pxa: fix one of the pxa RTC clocks (bsc#1051510).
- clk: samsung: Use clk_hw API for calling clk framework from clk notifiers (bsc#1051510).
- clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume (bsc#1051510).
- clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume (git-fixes).
- clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18 (git-fixes).
- clocksource/drivers/sh_cmt: Fix clocksource width for 32-bit machines (bsc#1051510).
- clocksource/drivers/sh_cmt: Fixup for 64-bit machines (bsc#1051510).
- compat_ioctl: handle SIOCOUTQNSD (bsc#1051510).
- component: fix loop condition to call unbind() if bind() fails (bsc#1051510).
- cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init() (bsc#1051510).
- cpufreq: Skip cpufreq resume if it's not suspended (bsc#1051510).
- cpufreq: intel_pstate: Register when ACPI PCCH is present (bsc#1051510).
- cpufreq: powernv: fix stack bloat and hard limit on number of CPUs (bsc#1051510).
- cpufreq: ti-cpufreq: add missing of_node_put() (bsc#1051510).
- cpupower : Fix cpupower working when cpu0 is offline (bsc#1051510).
- cpupower : frequency-set -r option misses the last cpu in related cpu list (bsc#1051510).
- cpupower: Fix coredump on VMWare (bsc#1051510).
- crypto: af_alg - cast ki_complete ternary op to int (bsc#1051510).
- crypto: crypto4xx - fix double-free in crypto4xx_destroy_sdr (bsc#1051510).
- crypto: ecdh - fix big endian bug in ECC library (bsc#1051510).
- crypto: fix a memory leak in rsa-kcs1pad's encryption mode (bsc#1051510).
- crypto: geode-aes - switch to skcipher for cbc(aes) fallback (bsc#1051510).
- crypto: mxs-dcp - Fix AES issues (bsc#1051510).
- crypto: mxs-dcp - Fix SHA null hashes and output length (bsc#1051510).
- crypto: mxs-dcp - make symbols 'sha1_null_hash' and 'sha256_null_hash' static (bsc#1051510).
- crypto: s5p-sss: Fix Fix argument list alignment (bsc#1051510).
- crypto: tgr192 - remove unneeded semicolon (bsc#1051510).
- cw1200: Fix a signedness bug in cw1200_load_firmware() (bsc#1051510).
- cxgb4: fix panic when attaching to ULD fail (networking-stable-19_11_05).
- cxgb4: request the TX CIDX updates to status page (bsc#1127354 bsc#1127371).
- dccp: do not leak jiffies on the wire (networking-stable-19_11_05).
- dlm: do not leak kernel pointer to userspace (bsc#1051510).
- dlm: fix invalid free (bsc#1051510).
- dmaengine: bcm2835: Print error in case setting DMA mask fails (bsc#1051510).
- dmaengine: dma-jz4780: Do not depend on MACH_JZ4780 (bsc#1051510).
- dmaengine: dma-jz4780: Further residue status fix (bsc#1051510).
- dmaengine: ep93xx: Return proper enum in ep93xx_dma_chan_direction (bsc#1051510).
- dmaengine: imx-sdma: fix size check for sdma script_number (bsc#1051510).
- dmaengine: imx-sdma: fix use-after-free on probe error path (bsc#1051510).
- dmaengine: rcar-dmac: set scatter/gather max segment size (bsc#1051510).
- dmaengine: timb_dma: Use proper enum in td_prep_slave_sg (bsc#1051510).
- docs: move protection-keys.rst to the core-api book (bsc#1078248).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported (bsc#1113956)
- drm/amdgpu/powerplay/vega10: allow undervolting in p7 (bsc#1111666).
- drm/amdgpu: fix bad DMA from INTERRUPT_CNTL2 (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/etnaviv: fix dumping of iommuv2 (bsc#1113722)
- drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)
- drm/i915/cmdparser: Ignore Length operands during command matching (bsc#1135967)
- drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)
- drm/i915/gtt: Add read only pages to gen8_pte_encode (bsc#1135967)
- drm/i915/gtt: Disable read-only support under GVT (bsc#1135967)
- drm/i915/gtt: Read-only pages for insert_entries on bdw (bsc#1135967)
- drm/i915/gvt: fix dropping obj reference twice (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no output (bsc#1111666).
- drm/i915/pmu: 'Frequency' is reported as accumulated cycles (bsc#1112178)
- drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)
- drm/i915: Add support for mandatory cmdparsing (bsc#1135967)
- drm/i915: Allow parsing of unsized batches (bsc#1135967)
- drm/i915: Disable Secure Batches for gen6+
- drm/i915: Do not dereference request if it may have been retired when (bsc#1142635)
- drm/i915: Fix and improve MCR selection logic (bsc#1112178)
- drm/i915: Lock the engine while dumping the active request (bsc#1142635)
- drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)
- drm/i915: Prevent writing into a read-only object via a GGTT mmap (bsc#1135967)
- drm/i915: Reacquire priolist cache after dropping the engine lock (bsc#1129770)
- drm/i915: Remove Master tables from cmdparser
- drm/i915: Rename gen7 cmdparser tables (bsc#1135967)
- drm/i915: Skip modeset for cdclk changes if possible (bsc#1156928).
- drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (bsc#1135967)
- drm/msm/dpu: handle failures while initializing displays (bsc#1111666).
- drm/msm: fix memleak on release (bsc#1111666).
- drm/omap: fix max fclk divider for omap36xx (bsc#1113722)
- drm/radeon: fix bad DMA from INTERRUPT_CNTL2 (git-fixes).
- drm/radeon: fix si_enable_smc_cac() failed issue (bsc#1113722)
- drm: fix module name in edid_firmware log message (bsc#1113956)
- e1000e: Drop unnecessary __E1000_DOWN bit twiddling (bsc#1158049).
- e1000e: Use dev_get_drvdata where possible (bsc#1158049).
- e1000e: Use rtnl_lock to prevent race conditions between net and pci/pm (bsc#1158049).
- extcon: cht-wc: Return from default case to avoid warnings (bsc#1051510).
- fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper() (bsc#1051510).
- fbdev: sbuslib: use checked version of put_user() (bsc#1051510).
- fix SCTP regression (bsc#1158082).
- ftrace: Introduce PERMANENT ftrace_ops flag (bsc#1120853).
- gpio: mpc8xxx: Do not overwrite default irq_set_type callback (bsc#1051510).
- gpio: syscon: Fix possible NULL ptr usage (bsc#1051510).
- gpiolib: acpi: Add Terra Pad 1061 to the run_edge_events_on_boot_blacklist (bsc#1051510).
- gsmi: Fix bug in append_to_eventlog sysfs handler (bsc#1051510).
- hwmon: (ina3221) Fix INA3221_CONFIG_MODE macros (bsc#1051510).
- hwmon: (pwm-fan) Silence error on probe deferral (bsc#1051510).
- hwrng: omap - Fix RNG wait loop timeout (bsc#1051510).
- hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled (bsc#1051510).
- hypfs: Fix error number left in struct pointer member (bsc#1051510).
- i2c: of: Try to find an I2C adapter matching the parent (bsc#1129770)
- i40e: enable X710 support (bsc#1151067).
- ibmvnic: Bound waits for device queries (bsc#1155689 ltc#182047).
- ibmvnic: Fix completion structure initialization (bsc#1155689 ltc#182047).
- ibmvnic: Serialize device queries (bsc#1155689 ltc#182047).
- ibmvnic: Terminate waiting device threads after loss of service (bsc#1155689 ltc#182047).
- ice: fix potential infinite loop because loop counter being too small (bsc#1118661).
- iio: adc: max9611: explicitly cast gain_selectors (bsc#1051510).
- iio: adc: stm32-adc: fix stopping dma (git-fixes).
- iio: dac: mcp4922: fix error handling in mcp4922_write_raw (bsc#1051510).
- iio: imu: adis16480: assign bias value only if operation succeeded (git-fixes).
- iio: imu: adis16480: make sure provided frequency is positive (git-fixes).
- iio: imu: adis: assign read val in debugfs hook only if op successful (git-fixes).
- iio: imu: adis: assign value only if return code zero in read funcs (git-fixes).
- include/linux/bitrev.h: fix constant bitrev (bsc#1114279).
- inet: stop leaking jiffies on the wire (networking-stable-19_11_05).
- intel_th: Fix a double put_device() in error path (git-fixes).
- iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros (bsc#1158063).
- ipmi:dmi: Ignore IPMI SMBIOS entries with a zero base address (bsc#1051510).
- ipv4: Return -ENETUNREACH if we can't create route but saddr is valid (networking-stable-19_10_24).
- irqdomain: Add the missing assignment of domain-&gt;fwnode for named fwnode (bsc#1111666).
- iwlwifi: api: annotate compressed BA notif array sizes (bsc#1051510).
- iwlwifi: check kasprintf() return value (bsc#1051510).
- iwlwifi: do not panic in error path on non-msix systems (bsc#1155692).
- iwlwifi: drop packets with bad status in CD (bsc#1111666).
- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- iwlwifi: fw: do not send GEO_TX_POWER_LIMIT command to FW version 36 (bsc#1111666).
- iwlwifi: mvm: avoid sending too many BARs (bsc#1051510).
- iwlwifi: mvm: do not send keys when entering D3 (bsc#1051510).
- iwlwifi: mvm: use correct FIFO length (bsc#1111666).
- iwlwifi: pcie: fit reclaim msg to MAX_MSG_LEN (bsc#1111666).
- iwlwifi: pcie: read correct prph address for newer devices (bsc#1111666).
- ixgbe: fix double clean of Tx descriptors with xdp (bsc#1113994 ).
- ixgbevf: Fix secpath usage for IPsec Tx offload (bsc#1113994 ).
- kABI fixup alloc_dax_region (bsc#1158071).
- kABI workaround for ath10k hw_filter_reset_required field (bsc#1111666).
- kABI workaround for ath10k last_wmi_vdev_start_status field (bsc#1051510).
- kABI workaround for drm_vma_offset_node readonly field addition (bsc#1135967)
- kABI workaround for iwlwifi iwl_rx_cmd_buffer change (bsc#1111666).
- kABI workaround for struct mwifiex_power_cfg change (bsc#1051510).
- kABI: Fix for 'KVM: x86: Introduce vcpu-&gt;arch.xsaves_enabled' (bsc#1158066).
- kabi protect enum RDMA_DRIVER_EFA (jsc#SLE-4805)
- kabi: s390: struct subchannel (git-fixes).
- lib/scatterlist: Fix chaining support in sgl_alloc_order() (git-fixes).
- lib/scatterlist: Introduce sgl_alloc() and sgl_free() (git-fixes).
- libnvdimm: Export the target_node attribute for regions and namespaces (bsc#1158071).
- liquidio: fix race condition in instruction completion processing (bsc#1051510).
- livepatch: Allow to distinguish different version of system state changes (bsc#1071995).
- livepatch: Basic API to track system state changes (bsc#1071995 ).
- livepatch: Keep replaced patches until post_patch callback is called (bsc#1071995).
- livepatch: Selftests of the API for tracking system state changes (bsc#1071995).
- loop: add ioctl for changing logical block size (bsc#1108043).
- lpfc: size cpu map by last cpu id set (bsc#1157160).
- mISDN: Fix type of switch control variable in ctrl_teimanager (bsc#1051510).
- mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED (bsc#1051510).
- mac80211: minstrel: fix CCK rate group streams value (bsc#1051510).
- mac80211: minstrel: fix sampling/reporting of CCK rates in HT mode (bsc#1051510).
- macvlan: schedule bc_work even if error (bsc#1051510).
- mailbox: reset txdone_method TXDONE_BY_POLL if client knows_txdone (git-fixes).
- media: au0828: Fix incorrect error messages (bsc#1051510).
- media: bdisp: fix memleak on release (git-fixes).
- media: cxusb: detect cxusb_ctrl_msg error in query (bsc#1051510).
- media: davinci: Fix implicit enum conversion warning (bsc#1051510).
- media: exynos4-is: Fix recursive locking in isp_video_release() (git-fixes).
- media: fix: media: pci: meye: validate offset to avoid arbitrary access (bsc#1051510).
- media: flexcop-usb: ensure -EIO is returned on error condition (git-fixes).
- media: imon: invalid dereference in imon_touch_event (bsc#1051510).
- media: isif: fix a NULL pointer dereference bug (bsc#1051510).
- media: pci: ivtv: Fix a sleep-in-atomic-context bug in ivtv_yuv_init() (bsc#1051510).
- media: pxa_camera: Fix check for pdev-&gt;dev.of_node (bsc#1051510).
- media: radio: wl1273: fix interrupt masking on release (git-fixes).
- media: ti-vpe: vpe: Fix Motion Vector vpdma stride (git-fixes).
- media: usbvision: Fix races among open, close, and disconnect (bsc#1051510).
- media: vim2m: Fix abort issue (git-fixes).
- media: vivid: Set vid_cap_streaming and vid_out_streaming to true (bsc#1051510).
- mei: fix modalias documentation (git-fixes).
- mei: samples: fix a signedness bug in amt_host_if_call() (bsc#1051510).
- mfd: intel-lpss: Add default I2C device properties for Gemini Lake (bsc#1051510).
- mfd: max8997: Enale irq-wakeup unconditionally (bsc#1051510).
- mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values (bsc#1051510).
- mfd: palmas: Assign the right powerhold mask for tps65917 (git-fixes).
- mfd: ti_am335x_tscadc: Keep ADC interface on if child is wakeup capable (bsc#1051510).
- mlx5: add parameter to disable enhanced IPoIB (bsc#1142095)
- mlx5: add parameter to disable enhanced IPoIB (bsc#1142095) Fix badly backported patch
- mlxsw: spectrum_flower: Fail in case user specifies multiple mirror actions (bsc#1112374).
- mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d() (git fixes (mm/gup)).
- mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone (git fixes (mm/compaction)).
- mm/debug.c: PageAnon() is true for PageKsm() pages (git fixes (mm/debug)).
- mmc: core: fix wl1251 sdio quirks (git-fixes).
- mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of pandora_wl1251_init_card (git-fixes).
- mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail (bsc#1051510).
- mmc: sdhci-esdhc-imx: correct the fix of ERR004536 (git-fixes).
- mmc: sdhci-of-at91: fix quirk2 overwrite (git-fixes).
- mmc: sdio: fix wl1251 vendor id (git-fixes).
- mt7601u: fix bbp version check in mt7601u_wait_bbp_ready (bsc#1051510).
- mt76x0: init hw capabilities.
- mtd: nand: mtk: fix incorrect register setting order about ecc irq.
- mtd: spear_smi: Fix Write Burst mode (bsc#1051510).
- mtd: spi-nor: fix silent truncation in spi_nor_read() (bsc#1051510).
- mwifex: free rx_cmd skb in suspended state (bsc#1111666).
- mwifiex: Fix NL80211_TX_POWER_LIMITED (bsc#1051510).
- mwifiex: do no submit URB in suspended state (bsc#1111666).
- net/ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes).
- net/mlx4_core: Dynamically set guaranteed amount of counters per VF (networking-stable-19_11_05).
- net/mlx5: FWTrace, Reduce stack usage (bsc#1103990).
- net/mlx5e: Fix eswitch debug print of max fdb flow (bsc#1103990 ).
- net/mlx5e: Fix ethtool self test: link speed (bsc#1103990 ).
- net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget (networking-stable-19_11_05).
- net/mlx5e: Print a warning when LRO feature is dropped or not allowed (bsc#1103990).
- net/sched: cbs: Fix not adding cbs instance to list (bsc#1109837).
- net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate (bsc#1109837).
- net/smc: Fix error path in smc_init (git-fixes).
- net/smc: avoid fallback in case of non-blocking connect (git-fixes).
- net/smc: do not schedule tx_work in SMC_CLOSED state (git-fixes).
- net/smc: fix SMCD link group creation with VLAN id (git-fixes).
- net/smc: fix closing of fallback SMC sockets (git-fixes).
- net/smc: fix ethernet interface refcounting (git-fixes).
- net/smc: fix fastopen for non-blocking connect() (git-fixes).
- net/smc: fix refcount non-blocking connect() -part 2 (git-fixes).
- net/smc: fix refcounting for non-blocking connect() (git-fixes).
- net/smc: keep vlan_id for SMC-R in smc_listen_work() (git-fixes).
- net/smc: original socket family in inet_sock_diag (git-fixes).
- net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol() (networking-stable-19_11_05).
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (networking-stable-19_11_05).
- net: add skb_queue_empty_lockless() (networking-stable-19_11_05).
- net: annotate accesses to sk-&gt;sk_incoming_cpu (networking-stable-19_11_05).
- net: annotate lockless accesses to sk-&gt;sk_napi_id (networking-stable-19_11_05).
- net: avoid potential infinite loop in tc_ctl_action() (networking-stable-19_10_24).
- net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3 (networking-stable-19_10_24).
- net: bcmgenet: Set phydev-&gt;dev_flags only for internal PHYs (networking-stable-19_10_24).
- net: bcmgenet: reset 40nm EPHY on energy detect (networking-stable-19_11_05).
- net: dsa: b53: Do not clear existing mirrored port mask (networking-stable-19_11_05).
- net: dsa: bcm_sf2: Fix IMP setup for port different than 8 (networking-stable-19_11_05).
- net: dsa: fix switch tree list (networking-stable-19_11_05).
- net: ethernet: ftgmac100: Fix DMA coherency issue with SW checksum (networking-stable-19_11_05).
- net: fix sk_page_frag() recursion from memory reclaim (networking-stable-19_11_05).
- net: hisilicon: Fix ping latency when deal with high throughput (networking-stable-19_11_05).
- net: hns3: change GFP flag during lock period (bsc#1104353 ).
- net: hns3: do not query unsupported commands in debugfs (bsc#1104353).
- net: hns3: fix GFP flag error in hclge_mac_update_stats() (bsc#1126390).
- net: hns3: fix some reset handshake issue (bsc#1104353 ).
- net: hns3: prevent unnecessary MAC TNL interrupt (bsc#1104353 bsc#1134983).
- net: hns: Fix the stray netpoll locks causing deadlock in NAPI path (bsc#1104353).
- net: phy: bcm7xxx: define soft_reset for 40nm EPHY (bsc#1119113 ).
- net: phylink: Fix flow control resolution (bsc#1119113 ).
- net: sched: cbs: Avoid division by zero when calculating the port rate (bsc#1109837).
- net: sched: fix possible crash in tcf_action_destroy() (bsc#1109837).
- net: sched: fix reordering issues (bsc#1109837).
- net: sock_map, fix missing ulp check in sock hash case (bsc#1109837).
- net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow (networking-stable-19_10_24).
- net: use skb_queue_empty_lockless() in busy poll contexts (networking-stable-19_11_05).
- net: use skb_queue_empty_lockless() in poll() handlers (networking-stable-19_11_05).
- net: wireless: ti: remove local VENDOR_ID and DEVICE_ID definitions (git-fixes).
- net: wireless: ti: wl1251 use new SDIO_VENDOR_ID_TI_WL1251 definition (git-fixes).
- netns: fix GFP flags in rtnl_net_notifyid() (networking-stable-19_11_05).
- nfc: netlink: fix double device reference drop (git-fixes).
- nfc: port100: handle command failure cleanly (git-fixes).
- nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs (bsc#1109837).
- nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs (bsc#1109837).
- nl80211: Fix a GET_KEY reply attribute (bsc#1051510).
- nvme-tcp: support C2HData with SUCCESS flag (bsc#1157386).
- openvswitch: fix flow command message size (git-fixes).
- padata: use smp_mb in padata_reorder to avoid orphaned padata jobs (git-fixes).
- perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp (bsc#1142924).
- phy: phy-twl4030-usb: fix denied runtime access (git-fixes).
- phylink: fix kernel-doc warnings (bsc#1111666).
- pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call (git-fixes).
- pinctrl: at91: do not use the same irqchip with multiple gpiochips (git-fixes).
- pinctrl: cherryview: Allocate IRQ chip dynamic (git-fixes).
- pinctrl: lewisburg: Update pin list according to v1.1v6 (bsc#1051510).
- pinctrl: lpc18xx: Use define directive for PIN_CONFIG_GPIO_PIN_INT (bsc#1051510).
- pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in S3C24xx wakeup controller init (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in S3C64xx wakeup controller init (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in init code (bsc#1051510).
- pinctrl: sunxi: Fix a memory leak in 'sunxi_pinctrl_build_state()' (bsc#1051510).
- pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD (bsc#1051510).
- power: reset: at91-poweroff: do not procede if at91_shdwc is allocated (bsc#1051510).
- power: supply: ab8500_fg: silence uninitialized variable warnings (bsc#1051510).
- power: supply: max14656: fix potential use-after-free (bsc#1051510).
- power: supply: twl4030_charger: disable eoc interrupt on linear charge (bsc#1051510).
- power: supply: twl4030_charger: fix charging current out-of-bounds (bsc#1051510).
- powerpc/64: Make meltdown reporting Book3S 64 specific (bsc#1091041).
- powerpc/book3s64/hash: Use secondary hash for bolted mapping if the primary is full (bsc#1157778 ltc#182520).
- powerpc/bpf: Fix tail call implementation (bsc#1157698).
- powerpc/pseries: Do not fail hash page table insert for bolted mapping (bsc#1157778 ltc#182520).
- powerpc/pseries: Do not opencode HPTE_V_BOLTED (bsc#1157778 ltc#182520).
- powerpc/pseries: address checkpatch warnings in dlpar_offline_cpu (bsc#1156700 ltc#182459).
- powerpc/pseries: safely roll back failed DLPAR cpu add (bsc#1156700 ltc#182459).
- powerpc/security/book3s64: Report L1TF status in sysfs (bsc#1091041).
- powerpc/security: Fix wrong message when RFI Flush is disable (bsc#1131107).
- powerpc/xive: Prevent page fault issues in the machine crash handler (bsc#1156882 ltc#182435).
- ppdev: fix PPGETTIME/PPSETTIME ioctls (bsc#1051510).
- printk: Export console_printk (bsc#1071995).
- pwm: bcm-iproc: Prevent unloading the driver module while in use (git-fixes).
- pwm: lpss: Only set update bit if we are actually changing the settings (bsc#1051510).
- qxl: fix null-pointer crash during suspend (bsc#1111666).
- r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2 (networking-stable-19_11_05).
- regulator: ab8500: Remove AB8505 USB regulator (bsc#1051510).
- regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id (bsc#1051510).
- remoteproc: Check for NULL firmwares in sysfs interface (git-fixes).
- reset: Fix potential use-after-free in __of_reset_control_get() (bsc#1051510).
- reset: fix of_reset_simple_xlate kerneldoc comment (bsc#1051510).
- reset: fix reset_control_get_exclusive kerneldoc comment (bsc#1051510).
- rpm/kernel-binary.spec.in: add COMPRESS_VMLINUX (bnc#1155921) Let COMPRESS_VMLINUX determine the compression used for vmlinux. By default (historically), it is gz.
- rpm/kernel-source.spec.in: Fix dependency of kernel-devel (bsc#1154043)
- rtl8187: Fix warning generated when strncpy() destination length matches the sixe argument (bsc#1051510).
- rtlwifi: Remove unnecessary NULL check in rtl_regd_init (bsc#1051510).
- rtlwifi: btcoex: Use proper enumerated types for Wi-Fi only interface (bsc#1111666).
- rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing enable interrupt flag (bsc#1051510).
- s390/bpf: fix lcgr instruction encoding (bsc#1051510).
- s390/bpf: use 32-bit index for tail calls (bsc#1051510).
- s390/cio: avoid calling strlen on null pointer (bsc#1051510).
- s390/cio: exclude subchannels with no parent from pseudo check (bsc#1051510).
- s390/cio: fix virtio-ccw DMA without PV (git-fixes).
- s390/cmm: fix information leak in cmm_timeout_handler() (bsc#1051510).
- s390/idle: fix cpu idle time calculation (bsc#1051510).
- s390/mm: properly clear _PAGE_NOEXEC bit when it is not supported (bsc#1051510).
- s390/process: avoid potential reading of freed stack (bsc#1051510).
- s390/qdio: (re-)initialize tiqdio list entries (bsc#1051510).
- s390/qdio: do not touch the dsci in tiqdio_add_input_queues() (bsc#1051510).
- s390/qeth: return proper errno on IO error (bsc#1051510).
- s390/setup: fix boot crash for machine without EDAT-1 (bsc#1051510 bsc#1140948).
- s390/setup: fix early warning messages (bsc#1051510 bsc#1140948).
- s390/topology: avoid firing events before kobjs are created (bsc#1051510).
- s390/zcrypt: fix memleak at release (git-fixes).
- s390: fix stfle zero padding (bsc#1051510).
- s390: vsie: Use effective CRYCBD.31 to check CRYCBD validity (git-fixes).
- sc16is7xx: Fix for 'Unexpected interrupt: 8' (bsc#1051510).
- scsi: lpfc: Add enablement of multiple adapter dumps (bsc#1154601).
- scsi: lpfc: Add registration for CPU Offline/Online events (bsc#1154601).
- scsi: lpfc: Change default IRQ model on AMD architectures (bsc#1154601).
- scsi: lpfc: Clarify FAWNN error message (bsc#1154601).
- scsi: lpfc: Fix NULL check before mempool_destroy is not needed (bsc#1154601).
- scsi: lpfc: Fix Oops in nvme_register with target logout/login (bsc#1151900).
- scsi: lpfc: Fix a kernel warning triggered by lpfc_get_sgl_per_hdwq() (bsc#1154601).
- scsi: lpfc: Fix a kernel warning triggered by lpfc_sli4_enable_intr() (bsc#1154601).
- scsi: lpfc: Fix configuration of BB credit recovery in service parameters (bsc#1154601).
- scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow (bsc#1154601).
- scsi: lpfc: Fix dynamic fw log enablement check (bsc#1154601).
- scsi: lpfc: Fix kernel crash at lpfc_nvme_info_show during remote port bounce (bsc#1154601).
- scsi: lpfc: Fix lpfc_cpumask_of_node_init() (bsc#1154601).
- scsi: lpfc: Fix unexpected error messages during RSCN handling (bsc#1154601).
- scsi: lpfc: Honor module parameter lpfc_use_adisc (bsc#1153628).
- scsi: lpfc: Honor module parameter lpfc_use_adisc (bsc#1154601).
- scsi: lpfc: Initialize cpu_map for not present cpus (bsc#1154601).
- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- scsi: lpfc: Make lpfc_debugfs_ras_log_data static (bsc#1154601).
- scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (bsc#1154601).
- scsi: lpfc: Raise config max for lpfc_fcp_mq_threshold variable (bsc#1154601).
- scsi: lpfc: Sync with FC-NVMe-2 SLER change to require Conf with SLER (bsc#1154601).
- scsi: lpfc: Update lpfc version to 12.6.0.1 (bsc#1154601).
- scsi: lpfc: Update lpfc version to 12.6.0.2 (bsc#1154601).
- scsi: lpfc: fix build error of lpfc_debugfs.c for vfree/vmalloc (bsc#1154601).
- scsi: lpfc: fix inlining of lpfc_sli4_cleanup_poll_list() (bsc#1154601).
- scsi: lpfc: fix spelling error in MAGIC_NUMER_xxx (bsc#1154601).
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences (bsc#1154601).
- scsi: lpfc: fix: Coverity: lpfc_get_scsi_buf_s3(): Null pointer dereferences (bsc#1154601).
- scsi: lpfc: lpfc_attr: Fix Use plain integer as NULL pointer (bsc#1154601).
- scsi: lpfc: lpfc_nvmet: Fix Use plain integer as NULL pointer (bsc#1154601).
- scsi: lpfc: revise nvme max queues to be hdwq count (bsc#1154601).
- scsi: lpfc: use hdwq assigned cpu for allocation (bsc#1157160).
- scsi: qla2xxx: Add debug dump of LOGO payload and ELS IOCB (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Allow PLOGI in target mode (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Change discovery state before PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Configure local loop for N2N target (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Do command completion on abort timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do not call qlt_async_event twice (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Do not defer relogin unconditonally (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Drop superfluous INIT_WORK of del_work (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Fix SRB leak on switch command timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Ignore NULL pointer in tcm_qla2xxx_free_mcmd (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Initialize free_work before flushing it (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Remove an include directive (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Send Notify ACK after N2N PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Use correct number of vectors for online CPUs (bsc#1137223).
- scsi: qla2xxx: Use explicit LOGO in target mode (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: do not use zero for FC4_PRIORITY_NVME (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan (bsc#1138039).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: unregister ports after GPN_FT failure (bsc#1138039).
- scsi: sd: Ignore a failure to sync cache due to lack of authorization (git-fixes).
- scsi: storvsc: Add ability to change scsi queue depth (bsc#1155021).
- scsi: zfcp: fix request object use-after-free in send path causing wrong traces (bsc#1051510).
- sctp: change sctp_prot .no_autobind with true (networking-stable-19_10_24).
- selftests: net: reuseport_dualstack: fix uninitalized parameter (networking-stable-19_11_05).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: mxs-auart: Fix potential infinite loop (bsc#1051510).
- serial: samsung: Enable baud clock for UART reset procedure in resume (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- serial: uartps: Fix suspend functionality (bsc#1051510).
- signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal (bsc#1157463).
- slcan: Fix memory leak in error path (bsc#1051510).
- slip: Fix memory leak in slip_open error path (bsc#1051510).
- slip: Fix use-after-free Read in slip_open (bsc#1051510).
- smb3: Incorrect size for netname negotiate context (bsc#1144333, bsc#1154355).
- smb3: fix leak in 'open on server' perf counter (bsc#1144333, bsc#1154355).
- smb3: fix signing verification of large reads (bsc#1144333, bsc#1154355).
- smb3: fix unmount hang in open_shroot (bsc#1144333, bsc#1154355).
- smb3: improve handling of share deleted (and share recreated) (bsc#1144333, bsc#1154355).
- soc: imx: gpc: fix PDN delay (bsc#1051510).
- soc: qcom: wcnss_ctrl: Avoid string overflow (bsc#1051510).
- spi: atmel: Fix CS high support (bsc#1051510).
- spi: atmel: fix handling of cs_change set on non-last xfer (bsc#1051510).
- spi: fsl-lpspi: Prevent FIFO under/overrun by default (bsc#1051510).
- spi: mediatek: Do not modify spi_transfer when transfer (bsc#1051510).
- spi: mediatek: use correct mata-&gt;xfer_len when in fifo transfer (bsc#1051510).
- spi: pic32: Use proper enum in dmaengine_prep_slave_rg (bsc#1051510).
- spi: rockchip: initialize dma_slave_config properly (bsc#1051510).
- spi: spidev: Fix OF tree warning logic (bsc#1051510).
- staging: rtl8188eu: fix null dereference when kzalloc fails (bsc#1051510).
- supported.conf:
- synclink_gt(): fix compat_ioctl() (bsc#1051510).
- tcp_nv: fix potential integer overflow in tcpnv_acked (bsc#1051510).
- thunderbolt: Fix lockdep circular locking depedency warning (git-fixes).
- tipc: Avoid copying bytes beyond the supplied data (bsc#1051510).
- tipc: check bearer name with right length in tipc_nl_compat_bearer_enable (bsc#1051510).
- tipc: check link name with right length in tipc_nl_compat_link_set (bsc#1051510).
- tipc: check msg-&gt;req data len in tipc_nl_compat_bearer_disable (bsc#1051510).
- tipc: compat: allow tipc commands without arguments (bsc#1051510).
- tipc: fix tipc_mon_delete() oops in tipc_enable_bearer() error path (bsc#1051510).
- tipc: fix wrong timeout input for tipc_wait_for_cond() (bsc#1051510).
- tipc: handle the err returned from cmd header function (bsc#1051510).
- tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb (bsc#1051510).
- tipc: tipc clang warning (bsc#1051510).
- tools/power/x86/intel-speed-select: Fix a read overflow in isst_set_tdp_level_msr() (bsc#1111666).
- tools: bpftool: fix arguments for p_err() in do_event_pipe() (bsc#1109837).
- tpm: add check after commands attribs tab allocation (bsc#1051510).
- tracing: Get trace_array reference for available_tracers files (bsc#1156429).
- tty: serial: fsl_lpuart: use the sg count from dma_map_sg (bsc#1051510).
- tty: serial: imx: use the sg count from dma_map_sg (bsc#1051510).
- tty: serial: msm_serial: Fix flow control (bsc#1051510).
- tty: serial: pch_uart: correct usage of dma_unmap_sg (bsc#1051510).
- tun: fix data-race in gro_normal_list() (bsc#1111666).
- udp: use skb_queue_empty_lockless() (networking-stable-19_11_05).
- usb-serial: cp201x: support Mark-10 digital force gauge (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ('usb-storage: Set virt_boundary_mask to avoid SG overflows') (bsc#1051510).
- usb: chipidea: Fix otg event handler (bsc#1051510).
- usb: chipidea: imx: enable OTG overcurrent in case USB subsystem is already started (bsc#1051510).
- usb: dwc3: gadget: Check ENBLSLPM before sending ep command (bsc#1051510).
- usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode (bsc#1051510).
- usb: gadget: udc: fotg210-udc: Fix a sleep-in-atomic-context bug in fotg210_get_status() (bsc#1051510).
- usb: gadget: uvc: Factor out video USB request queueing (bsc#1051510).
- usb: gadget: uvc: Only halt video streaming endpoint in bulk mode (bsc#1051510).
- usb: gadget: uvc: configfs: Drop leaked references to config items (bsc#1051510).
- usb: gadget: uvc: configfs: Prevent format changes after linking header (bsc#1051510).
- usb: handle warm-reset port requests on hub resume (bsc#1051510).
- usb: xhci-mtk: fix ISOC error when interval is zero (bsc#1051510).
- usbip: Fix free of unallocated memory in vhci tx (git-fixes).
- usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path (git-fixes).
- usbip: Implement SG support to vhci-hcd and stub driver (git-fixes).
- usbip: tools: fix fd leakage in the function of read_attr_usbip_status (git-fixes).
- vfio-ccw: Fix misleading comment when setting orb.cmd.c64 (bsc#1051510).
- vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn (bsc#1051510).
- vfio: ccw: push down unsupported IDA check (bsc#1156471 LTC#182362).
- video/hdmi: Fix AVI bar unpack (git-fixes).
- virtio/s390: fix race on airq_areas (bsc#1051510).
- virtio_console: allocate inbufs in add_port() only if it is needed (git-fixes).
- virtio_ring: fix return code on DMA mapping fails (git-fixes).
- vmxnet3: turn off lro when rxcsum is disabled (bsc#1157499).
- vsock/virtio: fix sock refcnt holding during the shutdown (git-fixes).
- watchdog: meson: Fix the wrong value of left time (bsc#1051510).
- wil6210: drop Rx multicast packets that are looped-back to STA (bsc#1111666).
- wil6210: fix L2 RX status handling (bsc#1111666).
- wil6210: fix RGF_CAF_ICR address for Talyn-MB (bsc#1111666).
- wil6210: fix debugfs memory access alignment (bsc#1111666).
- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- wil6210: fix invalid memory access for rx_buff_mgmt debugfs (bsc#1111666).
- wil6210: fix locking in wmi_call (bsc#1111666).
- wil6210: prevent usage of tx ring 0 for eDMA (bsc#1111666).
- wil6210: set edma variables only for Talyn-MB devices (bsc#1111666).
- x86/alternatives: Add int3_emulate_call() selftest (bsc#1153811).
- x86/alternatives: Fix int3_emulate_call() selftest stack corruption (bsc#1153811).
- x86/mm/pkeys: Fix typo in Documentation/x86/protection-keys.txt (bsc#1078248).
- x86/pkeys: Update documentation about availability (bsc#1078248).
- x86/resctrl: Fix potential lockdep warning (bsc#1114279).
- x86/resctrl: Prevent NULL pointer dereference when reading mondata (bsc#1114279).
- x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs (bsc#1158068).
- xfrm: Fix xfrm sel prefix length validation (git-fixes).
- xfrm: fix sa selector validation (bsc#1156609).
- xsk: Fix registration of Rx-only sockets (bsc#1109837).
- xsk: relax UMEM headroom alignment (bsc#1109837).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-17"/>
	<updated date="2019-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1048942">SUSE bug 1048942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078248">SUSE bug 1078248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089644">SUSE bug 1089644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091041">SUSE bug 1091041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108043">SUSE bug 1108043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117169">SUSE bug 1117169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118661">SUSE bug 1118661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120853">SUSE bug 1120853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126390">SUSE bug 1126390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131107">SUSE bug 1131107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134983">SUSE bug 1134983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135966">SUSE bug 1135966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135967">SUSE bug 1135967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137223">SUSE bug 1137223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137236">SUSE bug 1137236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138039">SUSE bug 1138039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142095">SUSE bug 1142095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142924">SUSE bug 1142924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149448">SUSE bug 1149448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150466">SUSE bug 1150466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151067">SUSE bug 1151067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151548">SUSE bug 1151548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151900">SUSE bug 1151900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152782">SUSE bug 1152782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153628">SUSE bug 1153628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153811">SUSE bug 1153811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154043">SUSE bug 1154043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154058">SUSE bug 1154058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154124">SUSE bug 1154124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154355">SUSE bug 1154355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154526">SUSE bug 1154526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154601">SUSE bug 1154601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155021">SUSE bug 1155021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155689">SUSE bug 1155689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155692">SUSE bug 1155692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155836">SUSE bug 1155836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155897">SUSE bug 1155897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155921">SUSE bug 1155921</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155982">SUSE bug 1155982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156187">SUSE bug 1156187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156258">SUSE bug 1156258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156429">SUSE bug 1156429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156466">SUSE bug 1156466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156471">SUSE bug 1156471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156494">SUSE bug 1156494</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156609">SUSE bug 1156609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156700">SUSE bug 1156700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156729">SUSE bug 1156729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156882">SUSE bug 1156882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156928">SUSE bug 1156928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157032">SUSE bug 1157032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157038">SUSE bug 1157038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157042">SUSE bug 1157042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157044">SUSE bug 1157044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157045">SUSE bug 1157045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157046">SUSE bug 1157046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157049">SUSE bug 1157049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157070">SUSE bug 1157070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157115">SUSE bug 1157115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157143">SUSE bug 1157143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157145">SUSE bug 1157145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157158">SUSE bug 1157158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157160">SUSE bug 1157160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157162">SUSE bug 1157162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157171">SUSE bug 1157171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157173">SUSE bug 1157173</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157178">SUSE bug 1157178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157180">SUSE bug 1157180</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157182">SUSE bug 1157182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157183">SUSE bug 1157183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157184">SUSE bug 1157184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157191">SUSE bug 1157191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157193">SUSE bug 1157193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157197">SUSE bug 1157197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157298">SUSE bug 1157298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157304">SUSE bug 1157304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157307">SUSE bug 1157307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157324">SUSE bug 1157324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157333">SUSE bug 1157333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157386">SUSE bug 1157386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157463">SUSE bug 1157463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157499">SUSE bug 1157499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157678">SUSE bug 1157678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157698">SUSE bug 1157698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157778">SUSE bug 1157778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157908">SUSE bug 1157908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158049">SUSE bug 1158049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158063">SUSE bug 1158063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158064">SUSE bug 1158064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158065">SUSE bug 1158065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158066">SUSE bug 1158066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158067">SUSE bug 1158067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158068">SUSE bug 1158068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158071">SUSE bug 1158071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158082">SUSE bug 1158082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158394">SUSE bug 1158394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158398">SUSE bug 1158398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158407">SUSE bug 1158407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158410">SUSE bug 1158410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158413">SUSE bug 1158413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158417">SUSE bug 1158417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158427">SUSE bug 1158427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158445">SUSE bug 1158445</bugzilla>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-0154/">CVE-2019-0154</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14895/">CVE-2019-14895</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14901/">CVE-2019-14901</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15916/">CVE-2019-15916</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16231/">CVE-2019-16231</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17055/">CVE-2019-17055</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-18660/">CVE-2019-18660</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18683/">CVE-2019-18683</cve>
	<cve impact="low" cvss3="2.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-18805/">CVE-2019-18805</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18809/">CVE-2019-18809</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19046/">CVE-2019-19046</cve>
	<cve impact="moderate" cvss3="1.6/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19049/">CVE-2019-19049</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19052/">CVE-2019-19052</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19056/">CVE-2019-19056</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19057/">CVE-2019-19057</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19058/">CVE-2019-19058</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19060/">CVE-2019-19060</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19062/">CVE-2019-19062</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19063/">CVE-2019-19063</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19065/">CVE-2019-19065</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19067/">CVE-2019-19067</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19068/">CVE-2019-19068</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19073/">CVE-2019-19073</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19074/">CVE-2019-19074</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19075/">CVE-2019-19075</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19077/">CVE-2019-19077</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19078/">CVE-2019-19078</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19080/">CVE-2019-19080</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19081/">CVE-2019-19081</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19082/">CVE-2019-19082</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19083/">CVE-2019-19083</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19227/">CVE-2019-19227</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19524/">CVE-2019-19524</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19525/">CVE-2019-19525</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19528/">CVE-2019-19528</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19529/">CVE-2019-19529</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19530/">CVE-2019-19530</cve>
	<cve impact="low" cvss3="2.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19531/">CVE-2019-19531</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19534/">CVE-2019-19534</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19536/">CVE-2019-19536</cve>
	<cve impact="low" cvss3="2.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19543/">CVE-2019-19543</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497435" comment="kernel-default-livepatch-4.12.14-197.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497436" comment="kernel-default-livepatch-devel-4.12.14-197.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497437" comment="kernel-livepatch-4_12_14-197_29-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138363" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1165631" ref_url="https://bugzilla.suse.com/1165631" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1049-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006720.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_37 fixes one issue.

The following security issue was fixed:

- CVE-2020-1749: Fixed a vulnerability where in some cases IPv6 traffic would not be encrypted over an IPsec tunnel (bsc#1165629).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-21"/>
	<updated date="2020-04-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720968" comment="kernel-default 4.12.14-197.37 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719187" comment="kernel-livepatch-4_12_14-197_37-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497438" comment="kernel-livepatch-4_12_14-197_37-default-2-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138364" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1109911" ref_url="https://bugzilla.suse.com/1109911" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1118338" ref_url="https://bugzilla.suse.com/1118338" source="BUGZILLA"/>
		<reference ref_id="1120386" ref_url="https://bugzilla.suse.com/1120386" source="BUGZILLA"/>
		<reference ref_id="1137325" ref_url="https://bugzilla.suse.com/1137325" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1145051" ref_url="https://bugzilla.suse.com/1145051" source="BUGZILLA"/>
		<reference ref_id="1145929" ref_url="https://bugzilla.suse.com/1145929" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1158983" ref_url="https://bugzilla.suse.com/1158983" source="BUGZILLA"/>
		<reference ref_id="1159037" ref_url="https://bugzilla.suse.com/1159037" source="BUGZILLA"/>
		<reference ref_id="1159198" ref_url="https://bugzilla.suse.com/1159198" source="BUGZILLA"/>
		<reference ref_id="1159199" ref_url="https://bugzilla.suse.com/1159199" source="BUGZILLA"/>
		<reference ref_id="1161561" ref_url="https://bugzilla.suse.com/1161561" source="BUGZILLA"/>
		<reference ref_id="1161951" ref_url="https://bugzilla.suse.com/1161951" source="BUGZILLA"/>
		<reference ref_id="1162171" ref_url="https://bugzilla.suse.com/1162171" source="BUGZILLA"/>
		<reference ref_id="1163403" ref_url="https://bugzilla.suse.com/1163403" source="BUGZILLA"/>
		<reference ref_id="1163897" ref_url="https://bugzilla.suse.com/1163897" source="BUGZILLA"/>
		<reference ref_id="1164284" ref_url="https://bugzilla.suse.com/1164284" source="BUGZILLA"/>
		<reference ref_id="1164777" ref_url="https://bugzilla.suse.com/1164777" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1164893" ref_url="https://bugzilla.suse.com/1164893" source="BUGZILLA"/>
		<reference ref_id="1165019" ref_url="https://bugzilla.suse.com/1165019" source="BUGZILLA"/>
		<reference ref_id="1165182" ref_url="https://bugzilla.suse.com/1165182" source="BUGZILLA"/>
		<reference ref_id="1165185" ref_url="https://bugzilla.suse.com/1165185" source="BUGZILLA"/>
		<reference ref_id="1165211" ref_url="https://bugzilla.suse.com/1165211" source="BUGZILLA"/>
		<reference ref_id="1165823" ref_url="https://bugzilla.suse.com/1165823" source="BUGZILLA"/>
		<reference ref_id="1165949" ref_url="https://bugzilla.suse.com/1165949" source="BUGZILLA"/>
		<reference ref_id="1166780" ref_url="https://bugzilla.suse.com/1166780" source="BUGZILLA"/>
		<reference ref_id="1166860" ref_url="https://bugzilla.suse.com/1166860" source="BUGZILLA"/>
		<reference ref_id="1166861" ref_url="https://bugzilla.suse.com/1166861" source="BUGZILLA"/>
		<reference ref_id="1166862" ref_url="https://bugzilla.suse.com/1166862" source="BUGZILLA"/>
		<reference ref_id="1166864" ref_url="https://bugzilla.suse.com/1166864" source="BUGZILLA"/>
		<reference ref_id="1166866" ref_url="https://bugzilla.suse.com/1166866" source="BUGZILLA"/>
		<reference ref_id="1166867" ref_url="https://bugzilla.suse.com/1166867" source="BUGZILLA"/>
		<reference ref_id="1166868" ref_url="https://bugzilla.suse.com/1166868" source="BUGZILLA"/>
		<reference ref_id="1166870" ref_url="https://bugzilla.suse.com/1166870" source="BUGZILLA"/>
		<reference ref_id="1166940" ref_url="https://bugzilla.suse.com/1166940" source="BUGZILLA"/>
		<reference ref_id="1166982" ref_url="https://bugzilla.suse.com/1166982" source="BUGZILLA"/>
		<reference ref_id="1167005" ref_url="https://bugzilla.suse.com/1167005" source="BUGZILLA"/>
		<reference ref_id="1167216" ref_url="https://bugzilla.suse.com/1167216" source="BUGZILLA"/>
		<reference ref_id="1167288" ref_url="https://bugzilla.suse.com/1167288" source="BUGZILLA"/>
		<reference ref_id="1167290" ref_url="https://bugzilla.suse.com/1167290" source="BUGZILLA"/>
		<reference ref_id="1167316" ref_url="https://bugzilla.suse.com/1167316" source="BUGZILLA"/>
		<reference ref_id="1167421" ref_url="https://bugzilla.suse.com/1167421" source="BUGZILLA"/>
		<reference ref_id="1167423" ref_url="https://bugzilla.suse.com/1167423" source="BUGZILLA"/>
		<reference ref_id="1167627" ref_url="https://bugzilla.suse.com/1167627" source="BUGZILLA"/>
		<reference ref_id="1167629" ref_url="https://bugzilla.suse.com/1167629" source="BUGZILLA"/>
		<reference ref_id="1168075" ref_url="https://bugzilla.suse.com/1168075" source="BUGZILLA"/>
		<reference ref_id="1168202" ref_url="https://bugzilla.suse.com/1168202" source="BUGZILLA"/>
		<reference ref_id="1168273" ref_url="https://bugzilla.suse.com/1168273" source="BUGZILLA"/>
		<reference ref_id="1168276" ref_url="https://bugzilla.suse.com/1168276" source="BUGZILLA"/>
		<reference ref_id="1168295" ref_url="https://bugzilla.suse.com/1168295" source="BUGZILLA"/>
		<reference ref_id="1168367" ref_url="https://bugzilla.suse.com/1168367" source="BUGZILLA"/>
		<reference ref_id="1168424" ref_url="https://bugzilla.suse.com/1168424" source="BUGZILLA"/>
		<reference ref_id="1168443" ref_url="https://bugzilla.suse.com/1168443" source="BUGZILLA"/>
		<reference ref_id="1168486" ref_url="https://bugzilla.suse.com/1168486" source="BUGZILLA"/>
		<reference ref_id="1168552" ref_url="https://bugzilla.suse.com/1168552" source="BUGZILLA"/>
		<reference ref_id="1168760" ref_url="https://bugzilla.suse.com/1168760" source="BUGZILLA"/>
		<reference ref_id="1168762" ref_url="https://bugzilla.suse.com/1168762" source="BUGZILLA"/>
		<reference ref_id="1168763" ref_url="https://bugzilla.suse.com/1168763" source="BUGZILLA"/>
		<reference ref_id="1168764" ref_url="https://bugzilla.suse.com/1168764" source="BUGZILLA"/>
		<reference ref_id="1168765" ref_url="https://bugzilla.suse.com/1168765" source="BUGZILLA"/>
		<reference ref_id="1168829" ref_url="https://bugzilla.suse.com/1168829" source="BUGZILLA"/>
		<reference ref_id="1168854" ref_url="https://bugzilla.suse.com/1168854" source="BUGZILLA"/>
		<reference ref_id="1168881" ref_url="https://bugzilla.suse.com/1168881" source="BUGZILLA"/>
		<reference ref_id="1168884" ref_url="https://bugzilla.suse.com/1168884" source="BUGZILLA"/>
		<reference ref_id="1168952" ref_url="https://bugzilla.suse.com/1168952" source="BUGZILLA"/>
		<reference ref_id="1169013" ref_url="https://bugzilla.suse.com/1169013" source="BUGZILLA"/>
		<reference ref_id="1169057" ref_url="https://bugzilla.suse.com/1169057" source="BUGZILLA"/>
		<reference ref_id="1169307" ref_url="https://bugzilla.suse.com/1169307" source="BUGZILLA"/>
		<reference ref_id="1169308" ref_url="https://bugzilla.suse.com/1169308" source="BUGZILLA"/>
		<reference ref_id="1169390" ref_url="https://bugzilla.suse.com/1169390" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169625" ref_url="https://bugzilla.suse.com/1169625" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19770" ref_url="https://www.suse.com/security/cve/CVE-2019-19770/" source="CVE"/>
		<reference ref_id="CVE-2019-3701" ref_url="https://www.suse.com/security/cve/CVE-2019-3701/" source="CVE"/>
		<reference ref_id="CVE-2019-9458" ref_url="https://www.suse.com/security/cve/CVE-2019-9458/" source="CVE"/>
		<reference ref_id="CVE-2020-10942" ref_url="https://www.suse.com/security/cve/CVE-2020-10942/" source="CVE"/>
		<reference ref_id="CVE-2020-11494" ref_url="https://www.suse.com/security/cve/CVE-2020-11494/" source="CVE"/>
		<reference ref_id="CVE-2020-11669" ref_url="https://www.suse.com/security/cve/CVE-2020-11669/" source="CVE"/>
		<reference ref_id="CVE-2020-8834" ref_url="https://www.suse.com/security/cve/CVE-2020-8834/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006760.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
- CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
- CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
- CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
- CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
- CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).
- CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).

The following non-security bugs were fixed:

- ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
- ACPI: watchdog: Fix gas-&gt;access_width usage (bsc#1051510).
- ahci: Add support for Amazon's Annapurna Labs SATA controller (bsc#1169013).
- ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
- ALSA: core: Add snd_device_get_state() helper (bsc#1051510).
- ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
- ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard (bsc#1051510).
- ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: hda: default enable CA0132 DSP support (bsc#1051510).
- ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
- ALSA: hda/realtek - a fake key event is triggered by running shutup (bsc#1051510).
- ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (git-fixes).
- ALSA: hda/realtek: Enable mute LED on an HP system (bsc#1051510).
- ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (git-fixes).
- ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).
- ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups (bsc#1051510).
- ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).
- ALSA: hda: remove redundant assignment to variable timeout (bsc#1051510).
- ALSA: hda: Use scnprintf() for string truncation (bsc#1051510).
- ALSA: hdsp: remove redundant assignment to variable err (bsc#1051510).
- ALSA: ice1724: Fix invalid access for enumerated ctl items (bsc#1051510).
- ALSA: info: remove redundant assignment to variable c (bsc#1051510).
- ALSA: korg1212: fix if-statement empty body warnings (bsc#1051510).
- ALSA: line6: Fix endless MIDI read loop (git-fixes).
- ALSA: pcm: Fix superfluous snprintf() usage (bsc#1051510).
- ALSA: pcm.h: add for_each_pcm_streams() (bsc#1051510).
- ALSA: pcm: oss: Avoid plugin buffer overflow (git-fixes).
- ALSA: pcm: oss: Fix regression by buffer overflow fix (bsc#1051510).
- ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks (git-fixes).
- ALSA: pcm: oss: Unlock mutex temporarily for sleeping at read/write (bsc#1051510).
- ALSA: pcm: Use a macro for parameter masks to reduce the needed cast (bsc#1051510).
- ALSA: seq: oss: Fix running status after receiving sysex (git-fixes).
- ALSA: seq: virmidi: Fix running status after receiving sysex (git-fixes).
- ALSA: usb-audio: Add delayed_register option (bsc#1051510).
- ALSA: usb-audio: Add support for MOTU MicroBook IIc (bsc#1051510).
- ALSA: usb-audio: Create a registration quirk for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
- ALSA: usb-audio: Do not create a mixer element with bogus volume range (bsc#1051510).
- ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor (bsc#1051510).
- ALSA: usb-audio: Fix mixer controls' USB interface for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
- ALSA: usb-audio: Inform devices that need delayed registration (bsc#1051510).
- ALSA: usb-audio: Parse source ID of UAC2 effect unit (bsc#1051510).
- ALSA: usb-audio: Rewrite registration quirk handling (bsc#1051510).
- ALSA: usb-midi: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: usx2y: use for_each_pcm_streams() macro (bsc#1051510).
- ALSA: via82xx: Fix endianness annotations (bsc#1051510).
- apei/ghes: Do not delay GHES polling (bsc#1166982).
- ASoC: Intel: atom: Take the drv-&gt;lock mutex before calling sst_send_slot_map() (bsc#1051510).
- ASoC: Intel: mrfld: fix incorrect check on p-&gt;sink (bsc#1051510).
- ASoC: Intel: mrfld: return error codes when an error occurs (bsc#1051510).
- ASoC: jz4740-i2s: Fix divider written at incorrect offset in register (bsc#1051510).
- ASoC: sun8i-codec: Remove unused dev from codec struct (bsc#1051510).
- ath9k: Handle txpower changes even when TPC is disabled (bsc#1051510).
- batman-adv: Avoid spurious warnings from bat_v neigh_cmp implementation (bsc#1051510).
- batman-adv: Do not schedule OGM for disabled interface (bsc#1051510).
- batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs (bsc#1051510).
- binfmt_elf: Do not move brk for INTERP-less ET_EXEC (bsc#1169013).
- binfmt_elf: move brk out of mmap when doing direct loader exec (bsc#1169013).
- blk-mq: Allow blocking queue tag iter callbacks (bsc#1167316).
- block, bfq: fix use-after-free in bfq_idle_slice_timer_body (bsc#1168760).
- block: keep bdi-&gt;io_pages in sync with max_sectors_kb for stacked devices (bsc#1168762).
- Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl (bsc#1051510).
- bnxt_en: Support all variants of the 5750X chip family (bsc#1167216).
- bpf: Explicitly memset some bpf info structures declared on the stack (bsc#1083647).
- bpf: Explicitly memset the bpf_attr structure (bsc#1083647).
- brcmfmac: abort and release host after error (bsc#1111666).
- btrfs: Account for trans_block_rsv in may_commit_transaction (bsc#1165949).
- btrfs: add a flush step for delayed iputs (bsc#1165949).
- btrfs: add assertions for releasing trans handle reservations (bsc#1165949).
- btrfs: add btrfs_delete_ref_head helper (bsc#1165949).
- btrfs: add enospc debug messages for ticket failure (bsc#1165949).
- btrfs: Add enospc_debug printing in metadata_reserve_bytes (bsc#1165949).
- btrfs: add new flushing states for the delayed refs rsv (bsc#1165949).
- btrfs: add space reservation tracepoint for reserved bytes (bsc#1165949).
- btrfs: adjust dirty_metadata_bytes after writeback failure of extent buffer (bsc#1168273).
- btrfs: allow us to use up to 90% of the global rsv for unlink (bsc#1165949).
- btrfs: always reserve our entire size for the global reserve (bsc#1165949).
- btrfs: assert on non-empty delayed iputs (bsc##1165949).
- btrfs: be more explicit about allowed flush states (bsc#1165949).
- btrfs: call btrfs_create_pending_block_groups unconditionally (bsc#1165949).
- btrfs: catch cow on deleting snapshots (bsc#1165949).
- btrfs: change the minimum global reserve size (bsc#1165949).
- btrfs: check if there are free block groups for commit (bsc#1165949).
- btrfs: clean up error handling in btrfs_truncate() (bsc#1165949).
- btrfs: cleanup extent_op handling (bsc#1165949).
- btrfs: cleanup root usage by btrfs_get_alloc_profile (bsc#1165949).
- btrfs: cleanup the target logic in __btrfs_block_rsv_release (bsc#1165949).
- btrfs: clear space cache inode generation always (bsc#1165949).
- btrfs: delayed-ref: pass delayed_refs directly to btrfs_delayed_ref_lock (bsc#1165949).
- btrfs: Do mandatory tree block check before submitting bio (bsc#1168273).
- btrfs: do not account global reserve in can_overcommit (bsc#1165949).
- btrfs: do not allow reservations if we have pending tickets (bsc#1165949).
- btrfs: do not call btrfs_start_delalloc_roots in flushoncommit (bsc#1165949).
- btrfs: do not end the transaction for delayed refs in throttle (bsc#1165949).
- btrfs: do not enospc all tickets on flush failure (bsc#1165949).
- btrfs: do not reset bio-&gt;bi_ops while writing bio (bsc#1168273).
- btrfs: do not run delayed_iputs in commit (bsc##1165949).
- btrfs: do not run delayed refs in the end transaction logic (bsc#1165949).
- btrfs: do not use ctl-&gt;free_space for max_extent_size (bsc##1165949).
- btrfs: do not use global reserve for chunk allocation (bsc#1165949).
- btrfs: drop get_extent from extent_page_data (bsc#1168273).
- btrfs: drop min_size from evict_refill_and_join (bsc##1165949).
- btrfs: drop unused space_info parameter from create_space_info (bsc#1165949).
- btrfs: dump block_rsv details when dumping space info  (bsc#1165949).
- btrfs: export block group accounting helpers (bsc#1165949).
- btrfs: export block_rsv_use_bytes (bsc#1165949).
- btrfs: export btrfs_block_rsv_add_bytes (bsc#1165949).
- btrfs: export __btrfs_block_rsv_release (bsc#1165949).
- btrfs: export space_info_add_*_bytes (bsc#1165949).
- btrfs: export the block group caching helpers (bsc#1165949).
- btrfs: export the caching control helpers (bsc#1165949).
- btrfs: export the excluded extents helpers (bsc#1165949).
- btrfs: extent_io: add proper error handling to lock_extent_buffer_for_io() (bsc#1168273).
- btrfs: extent_io: Handle errors better in btree_write_cache_pages() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_write_full_page() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_write_locked_range() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_writepages() (bsc#1168273).
- btrfs: extent_io: Kill dead condition in extent_write_cache_pages() (bsc#1168273).
- btrfs: extent_io: Kill the forward declaration of flush_write_bio (bsc#1168273).
- btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up (bsc#1168273).
- btrfs: extent-tree: Add lockdep assert when updating space info (bsc#1165949).
- btrfs: extent-tree: Add trace events for space info numbers update (bsc#1165949).
- btrfs: extent-tree: Detect bytes_may_use underflow earlier (bsc#1165949).
- btrfs: extent-tree: Detect bytes_pinned underflow earlier (bsc#1165949).
- btrfs: factor our read/write stage off csum_tree_block into its callers (bsc#1168273).
- btrfs: factor out the ticket flush handling (bsc#1165949).
- btrfs: fix insert_reserved error handling (bsc##1165949).
- btrfs: fix may_commit_transaction to deal with no partial filling (bsc#1165949).
- btrfs: fix missing delayed iputs on unmount (bsc#1165949).
- btrfs: fix qgroup double free after failure to reserve metadata for delalloc (bsc#1165949).
- btrfs: fix race leading to metadata space leak after task received signal (bsc#1165949).
- btrfs: fix truncate throttling (bsc#1165949).
- btrfs: fix unwritten extent buffers and hangs on future writeback attempts (bsc#1168273).
- btrfs: force chunk allocation if our global rsv is larger than metadata (bsc#1165949).
- btrfs: Improve global reserve stealing logic (bsc#1165949).
- btrfs: introduce an evict flushing state (bsc#1165949).
- btrfs: introduce delayed_refs_rsv (bsc#1165949).
- btrfs: loop in inode_rsv_refill (bsc#1165949).
- btrfs: make btrfs_destroy_delayed_refs use btrfs_delayed_ref_lock (bsc#1165949).
- btrfs: make btrfs_destroy_delayed_refs use btrfs_delete_ref_head (bsc#1165949).
- btrfs: make caching_thread use btrfs_find_next_key (bsc#1165949).
- btrfs: make plug in writing meta blocks really work (bsc#1168273).
- btrfs: merge two flush_write_bio helpers (bsc#1168273).
- btrfs: migrate btrfs_trans_release_chunk_metadata (bsc#1165949).
- btrfs: migrate inc/dec_block_group_ro code (bsc#1165949).
- btrfs: migrate nocow and reservation helpers (bsc#1165949).
- btrfs: migrate the alloc_profile helpers (bsc#1165949).
- btrfs: migrate the block group caching code (bsc#1165949).
- btrfs: migrate the block group cleanup code (bsc#1165949).
- btrfs: migrate the block group lookup code (bsc#1165949).
- btrfs: migrate the block group read/creation code (bsc#1165949).
- btrfs: migrate the block group ref counting stuff (bsc#1165949).
- btrfs: migrate the block group removal code (bsc#1165949).
- btrfs: migrate the block group space accounting helpers (bsc#1165949).
- btrfs: migrate the block-rsv code to block-rsv.c (bsc#1165949).
- btrfs: migrate the chunk allocation code (bsc#1165949).
- btrfs: migrate the delalloc space stuff to it's own home (bsc#1165949).
- btrfs: migrate the delayed refs rsv code (bsc#1165949).
- btrfs: migrate the dirty bg writeout code (bsc#1165949).
- btrfs: migrate the global_block_rsv helpers to block-rsv.c (bsc#1165949).
- btrfs: move and export can_overcommit (bsc#1165949).
- btrfs: move basic block_group definitions to their own header (bsc#1165949).
- btrfs: move btrfs_add_free_space out of a header file (bsc#1165949).
- btrfs: move btrfs_block_rsv definitions into it's own header (bsc#1165949).
- btrfs: move btrfs_raid_group values to btrfs_raid_attr table (bsc#1165949).
- btrfs: move btrfs_space_info_add_*_bytes to space-info.c (bsc#1165949).
- btrfs: move dump_space_info to space-info.c (bsc#1165949).
- btrfs: move reserve_metadata_bytes and supporting code to space-info.c (bsc#1165949).
- btrfs: move space_info to space-info.h (bsc#1165949).
- btrfs: move the space_info handling code to space-info.c (bsc#1165949).
- btrfs: move the space info update macro to space-info.h (bsc#1165949).
- btrfs: move the subvolume reservation stuff out of extent-tree.c (bsc#1165949).
- btrfs: only check delayed ref usage in should_end_transaction (bsc#1165949).
- btrfs: only check priority tickets for priority flushing (bsc#1165949).
- btrfs: only free reserved extent if we didn't insert it (bsc##1165949).
- btrfs: only reserve metadata_size for inodes (bsc#1165949).
- btrfs: only track ref_heads in delayed_ref_updates (bsc#1165949).
- btrfs: Output ENOSPC debug info in inc_block_group_ro (bsc#1165949).
- btrfs: pass root to various extent ref mod functions (bsc#1165949).
- btrfs: qgroup: Do not hold qgroup_ioctl_lock in btrfs_qgroup_inherit() (bsc#1165823).
- btrfs: qgroup: Mark qgroup inconsistent if we're inherting snapshot to a new qgroup (bsc#1165823).
- btrfs: refactor block group replication factor calculation to a helper (bsc#1165949).
- btrfs: refactor priority_reclaim_metadata_space (bsc#1165949).
- btrfs: refactor the ticket wakeup code (bsc#1165949).
- btrfs: release metadata before running delayed refs (bsc##1165949).
- btrfs: remove bio_flags which indicates a meta block of log-tree (bsc#1168273).
- btrfs: Remove btrfs_inode::delayed_iput_count (bsc#1165949).
- btrfs: Remove fs_info from do_chunk_alloc (bsc#1165949).
- btrfs: remove orig_bytes from reserve_ticket (bsc#1165949).
- btrfs: Remove redundant argument of flush_space (bsc#1165949).
- btrfs: Remove redundant mirror_num arg (bsc#1168273).
- btrfs: Rename bin_search -&gt; btrfs_bin_search (bsc#1168273).
- btrfs: rename btrfs_space_info_add_old_bytes (bsc#1165949).
- btrfs: rename do_chunk_alloc to btrfs_chunk_alloc (bsc#1165949).
- btrfs: rename the btrfs_calc_*_metadata_size helpers (bsc#1165949).
- btrfs: replace cleaner_delayed_iput_mutex with a waitqueue (bsc#1165949).
- btrfs: reserve delalloc metadata differently (bsc#1165949).
- btrfs: reserve extra space during evict (bsc#1165949).
- btrfs: reset max_extent_size on clear in a bitmap (bsc##1165949).
- btrfs: reset max_extent_size properly (bsc##1165949).
- btrfs: rework btrfs_check_space_for_delayed_refs (bsc#1165949).
- btrfs: rework wake_all_tickets (bsc#1165949).
- btrfs: roll tracepoint into btrfs_space_info_update helper (bsc#1165949).
- btrfs: run btrfs_try_granting_tickets if a priority ticket fails (bsc#1165949).
- btrfs: run delayed iput at unlink time (bsc#1165949).
- btrfs: run delayed iputs before committing (bsc#1165949).
- btrfs: set max_extent_size properly (bsc##1165949).
- btrfs: sink extent_write_full_page tree argument (bsc#1168273).
- btrfs: sink extent_write_locked_range tree parameter (bsc#1168273).
- btrfs: sink flush_fn to extent_write_cache_pages (bsc#1168273).
- btrfs: sink get_extent parameter to extent_fiemap (bsc#1168273).
- btrfs: sink get_extent parameter to extent_readpages (bsc#1168273).
- btrfs: sink get_extent parameter to extent_write_full_page (bsc#1168273).
- btrfs: sink get_extent parameter to extent_write_locked_range (bsc#1168273).
- btrfs: sink get_extent parameter to extent_writepages (bsc#1168273).
- btrfs: sink get_extent parameter to get_extent_skip_holes (bsc#1168273).
- btrfs: sink writepage parameter to extent_write_cache_pages (bsc#1168273).
- btrfs: stop partially refilling tickets when releasing space (bsc#1165949).
- btrfs: stop using block_rsv_release_bytes everywhere (bsc#1165949).
- btrfs: switch to on-stack csum buffer in csum_tree_block (bsc#1168273).
- btrfs: temporarily export btrfs_get_restripe_target (bsc#1165949).
- btrfs: temporarily export fragment_free_space (bsc#1165949).
- btrfs: temporarily export inc_block_group_ro (bsc#1165949).
- btrfs: track DIO bytes in flight (bsc#1165949).
- btrfs: tree-checker: Remove comprehensive root owner check (bsc#1168273).
- btrfs: unexport can_overcommit (bsc#1165949).
- btrfs: unexport the temporary exported functions (bsc#1165949).
- btrfs: unify error handling for ticket flushing (bsc#1165949).
- btrfs: unify extent_page_data type passed as void (bsc#1168273).
- btrfs: update may_commit_transaction to use the delayed refs rsv (bsc#1165949).
- btrfs: use btrfs_try_granting_tickets in update_global_rsv (bsc#1165949).
- btrfs: wait on caching when putting the bg cache (bsc#1165949).
- btrfs: wait on ordered extents on abort cleanup (bsc#1165949).
- btrfs: wakeup cleaner thread when adding delayed iput (bsc#1165949).
- ceph: canonicalize server path in place (bsc#1168443).
- ceph: check POOL_FLAG_FULL/NEARFULL in addition to OSDMAP_FULL/NEARFULL (bsc#1169307).
- ceph: remove the extra slashes in the server path (bsc#1168443).
- cfg80211: check reg_rule for NULL in handle_channel_custom() (bsc#1051510).
- cfg80211: check wiphy driver existence for drvinfo report (bsc#1051510).
- cgroup: memcg: net: do not associate sock with unrelated cgroup (bsc#1167290).
- cifs: ignore cached share root handle closing errors (bsc#1166780).
- clk: imx: Align imx sc clock msg structs to 4 (bsc#1111666).
- clk: imx: Align imx sc clock msg structs to 4 (git-fixes).
- clk: qcom: rcg: Return failure for RCG update (bsc#1051510).
- configfs: Fix bool initialization/comparison (bsc#1051510).
- cpufreq: Register drivers only after CPU devices have been registered (bsc#1051510).
- cpuidle: Do not unset the driver if it is there already (bsc#1051510).
- crypto: arm64/sha-ce - implement export/import (bsc#1051510).
- Crypto: chelsio - Fixes a deadlock between rtnl_lock and uld_mutex (bsc#1111666).
- Crypto: chelsio - Fixes a hang issue during driver registration (bsc#1111666).
- crypto: mxs-dcp - fix scatterlist linearization for hash (bsc#1051510).
- crypto: tcrypt - fix printed skcipher [a]sync mode (bsc#1051510).
- debugfs: add support for more elaborate -&gt;d_fsdata (bsc#1159198  bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198). Prerequisite for bsc#1159198.
- debugfs: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: debugfs_real_fops(): drop __must_hold sparse annotation (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: debugfs_use_start/finish do not exist anymore (bsc#1159198). Prerequisite for bsc#1159198.
- debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198). Prerequisite for bsc#1159198.
- debugfs: fix debugfs_real_fops() build error (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: implement per-file removal protection (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: purge obsolete SRCU based removal protection (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: simplify __debugfs_remove_file() (bsc#1159198). Prerequisite for bsc#1159198.
- Deprecate NR_UNSTABLE_NFS, use NR_WRITEBACK (bsc#1163403).
- dmaengine: ste_dma40: fix unneeded variable warning (bsc#1051510).
- drm/amd/amdgpu: Fix GPR read from debugfs (v2) (bsc#1113956)
- drm/amd/display: Add link_rate quirk for Apple 15' MBP 2017 (bsc#1111666).
- drm/amd/display: Fix wrongly passed static prefix (bsc#1111666).
- drm/amd/display: remove duplicated assignment to grph_obj_type (bsc#1051510).
- drm/amdgpu: fix typo for vcn1 idle check (bsc#1111666).
- drm/bochs: downgrade pci_request_region failure from error to warning (bsc#1051510).
- drm/bridge: dw-hdmi: fix AVI frame colorimetry (bsc#1051510).
- drm_dp_mst_topology: fix broken drm_dp_sideband_parse_remote_dpcd_read() (bsc#1051510).
- drm/drm_dp_mst:remove set but not used variable 'origlen' (bsc#1051510).
- drm/exynos: dsi: fix workaround for the legacy clock name (bsc#1111666).
- drm/exynos: dsi: propagate error value and silence meaningless warning (bsc#1111666).
- drm/lease: fix WARNING in idr_destroy (bsc#1113956)
- drm/msm: Set dma maximum segment size for mdss (bsc#1051510).
- drm/msm: stop abusing dma_map/unmap for cache (bsc#1051510).
- drm/msm: Use the correct dma_sync calls harder (bsc#1051510).
- drm/msm: Use the correct dma_sync calls in msm_gem (bsc#1051510).
- drm/sun4i: dsi: Use NULL to signify 'no panel' (bsc#1111666).
- drm/v3d: Replace wait_for macros to remove use of msleep (bsc#1111666).
- drm/vc4: Fix HDMI mode validation (git-fixes).
- dt-bindings: allow up to four clocks for orion-mdio (bsc#1051510).
- efi: Do not attempt to map RCI2 config table if it does not exist (jsc#ECO-366, bsc#1168367).
- efi: Export Runtime Configuration Interface table to sysfs (jsc#ECO-366, bsc#1168367).
- efi: Fix a race and a buffer overflow while reading efivars via sysfs (bsc#1164893).
- efi: x86: move efi_is_table_address() into arch/x86 (jsc#ECO-366, bsc#1168367).
- ext4: add cond_resched() to __ext4_find_entry() (bsc#1166862).
- ext4: Avoid ENOSPC when avoiding to reuse recently deleted inodes (bsc#1165019).
- ext4: Check for non-zero journal inum in ext4_calculate_overhead (bsc#1167288).
- ext4: do not assume that mmp_nodename/bdevname have NUL (bsc#1166860).
- ext4: fix a data race in EXT4_I(inode)-&gt;i_disksize (bsc#1166861).
- ext4: fix incorrect group count in ext4_fill_super error message (bsc#1168765).
- ext4: fix incorrect inodes per group in error message (bsc#1168764).
- ext4: fix potential race between online resizing and write operations (bsc#1166864).
- ext4: fix potential race between s_flex_groups online resizing and access (bsc#1166867).
- ext4: fix potential race between s_group_info online resizing and access (bsc#1166866).
- ext4: fix race between writepages and enabling EXT4_EXTENTS_FL (bsc#1166870).
- ext4: fix support for inode sizes &gt; 1024 bytes (bsc#1164284).
- ext4: potential crash on allocation error in ext4_alloc_flex_bg_array() (bsc#1166940).
- ext4: rename s_journal_flag_rwsem to s_writepages_rwsem (bsc#1166868).
- ext4: validate the debug_want_extra_isize mount option at parse time (bsc#1163897).
- fat: fix uninit-memory access for partial initialized inode (bsc#1051510).
- fat: work around race with userspace's read via blockdev while mounting (bsc#1051510).
- fbdev/g364fb: Fix build failure (bsc#1051510).
- fbdev: potential information leak in do_fb_ioctl() (bsc#1114279)
- fbmem: Adjust indentation in fb_prepare_logo and fb_blank (bsc#1114279)
- firmware: arm_sdei: fix double-lock on hibernate with shared events (bsc#1111666).
- firmware: arm_sdei: fix possible double-lock on hibernate error path (bsc#1111666).
- ftrace/kprobe: Show the maxactive number on kprobe_events (git-fixes).
- HID: apple: Add support for recent firmware on Magic Keyboards (bsc#1051510).
- i2c: hix5hd2: add missed clk_disable_unprepare in remove (bsc#1051510).
- i2c: jz4780: silence log flood on txabrt (bsc#1051510).
- IB/hfi1: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911).
- ibmvfc: do not send implicit logouts prior to NPIV login (bsc#1169625 ltc#184611).
- iio: gyro: adis16136: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis16400: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis16480: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: magnetometer: ak8974: Fix negative raw values in sysfs (bsc#1051510).
- iio: potentiostat: lmp9100: fix iio_triggered_buffer_{predisable,postenable} positions (bsc#1051510).
- Input: add safety guards to input_set_keycode() (bsc#1168075).
- Input: avoid BIT() macro usage in the serio.h UAPI header (bsc#1051510).
- Input: raydium_i2c_ts - fix error codes in raydium_i2c_boot_trigger() (bsc#1051510).
- Input: synaptics - enable RMI on HP Envy 13-ad105ng (bsc#1051510).
- intel_th: Fix user-visible error codes (bsc#1051510).
- intel_th: pci: Add Elkhart Lake CPU support (bsc#1051510).
- iommu/amd: Fix the configuration of GCR3 table root pointer (bsc#1169057).
- ipmi: fix hung processes in __get_guid() (bsc#1111666).
- ipmi: fix hung processes in __get_guid() (git-fixes).
- ipmi:ssif: Handle a possible NULL pointer reference (bsc#1051510).
- ipv6: Fix nlmsg_flags when splitting a multipath route (networking-stable-20_03_01).
- ipv6: Fix route replacement with dev-only route (networking-stable-20_03_01).
- ipvlan: do not add hardware address of master to its unicast filter list (bsc#1137325).
- irqchip/bcm2835: Quiesce IRQs left enabled by bootloader (bsc#1051510).
- irqdomain: Fix a memory leak in irq_domain_push_irq() (bsc#1051510).
- kABI: fixes for debugfs per-file removal protection backports (bsc#1159198 bsc#1109911).
- kABI: restore debugfs_remove_recursive() (bsc#1159198).
- kABI workaround for pcie_port_bus_type change (bsc#1161561).
- KVM: s390: vsie: Fix possible race when shadowing region 3 tables (git-fixes).
- KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks (git-fixes).
- libceph: fix alloc_msg_with_page_vector() memory leaks (bsc#1169308).
- libfs: fix infoleak in simple_attr_read() (bsc#1168881).
- lpfc: add support for translating an RSCN rcv into a discovery rescan (bsc#1164777 bsc#1164780 bsc#1165211).
- lpfc: add support to generate RSCN events for nport (bsc#1164777 bsc#1164780 bsc#1165211).
- mac80211: consider more elements in parsing CRC (bsc#1051510).
- mac80211: Do not send mesh HWMP PREQ if HWMP is disabled (bsc#1051510).
- mac80211: free peer keys before vif down in mesh (bsc#1051510).
- mac80211: mesh: fix RCU warning (bsc#1051510).
- mac80211: only warn once on chanctx_conf being NULL (bsc#1051510).
- mac80211: rx: avoid RCU list traversal under mutex (bsc#1051510).
- macsec: add missing attribute validation for port (bsc#1051510).
- macsec: fix refcnt leak in module exit routine (bsc#1051510).
- media: dib0700: fix rc endpoint lookup (bsc#1051510).
- media: flexcop-usb: fix endpoint sanity check (git-fixes).
- media: go7007: Fix URB type for interrupt handling (bsc#1051510).
- media: ov519: add missing endpoint sanity checks (bsc#1168829).
- media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support (bsc#1051510).
- media: ov6650: Fix some format attributes not under control (bsc#1051510).
- media: ov6650: Fix stored crop rectangle not in sync with hardware (bsc#1051510).
- media: ov6650: Fix stored frame format not in sync with hardware (bsc#1051510).
- media: stv06xx: add missing descriptor sanity checks (bsc#1168854).
- media: tda10071: fix unsigned sign extension overflow (bsc#1051510).
- media: usbtv: fix control-message timeouts (bsc#1051510).
- media: v4l2-core: fix entity initialization in device_register_subdev (bsc#1051510).
- media: vsp1: tidyup VI6_HGT_LBn_H() macro (bsc#1051510).
- media: xirlink_cit: add missing descriptor sanity checks (bsc#1051510).
- mfd: dln2: Fix sanity checking for endpoints (bsc#1051510).
- misc: pci_endpoint_test: Fix to support &gt; 10 pci-endpoint-test devices (bsc#1051510).
- mmc: sdhci-of-at91: fix cd-gpios for SAMA5D2 (bsc#1051510).
- mm/filemap.c: do not initiate writeback if mapping has no dirty pages (bsc#1168884).
- mm/memory_hotplug.c: only respect mem= parameter during boot stage (bsc#1065600).
- mm: replace PF_LESS_THROTTLE with PF_LOCAL_THROTTLE (bsc#1163403).
- mwifiex: set needed_headroom, not hard_header_len (bsc#1051510).
- net: dsa: bcm_sf2: Fix overflow checks (git-fixes).
- net: dsa: tag_qca: Make sure there is headroom for tag (networking-stable-20_02_19).
- net: ena: Add PCI shutdown handler to allow safe kexec (bsc#1167421, bsc#1167423).
- net: fib_rules: Correctly set table field when table number exceeds 8 bits (networking-stable-20_03_01).
- netfilter: conntrack: sctp: use distinct states for new SCTP connections (bsc#1159199).
- net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL (bsc#1051510).
- net: nfc: fix bounds checking bugs on 'pipe' (bsc#1051510).
- net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before accessing PHY registers (bsc#1051510).
- net: phy: restore mdio regs in the iproc mdio driver (networking-stable-20_03_01).
- net/sched: flower: add missing validation of TCA_FLOWER_FLAGS (networking-stable-20_02_19).
- net_sched: keep alloc_hash updated after hash allocation (git-fixes).
- net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS (networking-stable-20_02_19).
- net/smc: fix leak of kernel memory to user space (networking-stable-20_02_19).
- NFC: fdp: Fix a signedness bug in fdp_nci_send_patch() (bsc#1051510).
- nfc: pn544: Fix occasional HW initialization failure (networking-stable-20_03_01).
- NFS: send state management on a single connection (bsc#1167005).
- nvme: fix a possible deadlock when passthru commands sent to a multipath device (bsc#1158983).
- nvme: fix controller removal race with scan work (bsc#1158983).
- nvme-multipath: also check for a disabled path if there is a single sibling (bsc#1158983).
- nvme-multipath: do not select namespaces which are about to be removed (bsc#1158983).
- nvme-multipath: factor out a nvme_path_is_disabled helper (bsc#1158983).
- nvme-multipath: fix crash in nvme_mpath_clear_ctrl_paths (bsc#1158983).
- nvme-multipath: fix possible io hang after ctrl reconnect (bsc#1158983).
- nvme-multipath: fix possible I/O hang when paths are updated (bsc#1158983).
- nvme-multipath: remove unused groups_only mode in ana log (bsc#1158983).
- nvme-multipath: round-robin I/O policy (bsc#1158983).
- objtool: Add is_static_jump() helper (bsc#1169514).
- objtool: Add relocation check for alternative sections (bsc#1169514).
- OMAP: DSS2: remove non-zero check on variable r (bsc#1114279)
- partitions/efi: Fix partition name parsing in GUID partition entry (bsc#1168763).
- PCI/AER: Factor message prefixes with dev_fmt() (bsc#1161561).
- PCI/AER: Log which device prevents error recovery (bsc#1161561).
- PCI/AER: Remove ERR_FATAL code from ERR_NONFATAL path (bsc#1161561).
- PCI/ASPM: Clear the correct bits when enabling L1 substates (bsc#1051510).
- PCI: endpoint: Fix clearing start entry in configfs (bsc#1051510).
- PCI/ERR: Always report current recovery status for udev (bsc#1161561).
- PCI/ERR: Handle fatal error recovery (bsc#1161561).
- PCI/ERR: Remove duplicated include from err.c (bsc#1161561).
- PCI/ERR: Simplify broadcast callouts (bsc#1161561).
- PCI: pciehp: Fix MSI interrupt race (bsc#1159037).
- PCI: portdrv: Initialize service drivers directly (bsc#1161561).
- PCI/portdrv: Remove pcie_port_bus_type link order dependency (bsc#1161561).
- PCI: Simplify disconnected marking (bsc#1161561).
- PCI/switchtec: Fix init_completion race condition with poll_wait() (bsc#1051510).
- PCI: Unify device inaccessible (bsc#1161561).
- perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag (bsc#1114279).
- perf: qcom_l2: fix column exclusion check (git-fixes).
- pinctrl: core: Remove extra kref_get which blocks hogs being freed (bsc#1051510).
- platform/x86: pmc_atom: Add Lex 2I385SW to critclk_systems DMI table (bsc#1051510).
- PM: core: Fix handling of devices deleted during system-wide resume (git-fixes).
- powerpc/64: mark start_here_multiplatform as __ref (bsc#1148868).
- powerpc/64s: Fix section mismatch warnings from boot code (bsc#1148868).
- powerpc/64/tm: Do not let userspace set regs-&gt;trap via sigreturn (bsc#1118338 ltc#173734).
- powerpc/hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE entries (bsc#1065729).
- powerpc/kprobes: Ignore traps that happened in real mode (bsc#1065729).
- powerpc/mm: Fix section mismatch warning in stop_machine_change_mapping() (bsc#1148868).
- powerpc/pseries/ddw: Extend upper limit for huge DMA window for persistent memory (bsc#1142685 ltc#179509).
- powerpc/pseries/iommu: Fix set but not used values (bsc#1142685 ltc#179509).
- powerpc/pseries/iommu: Use memory@ nodes in max RAM address calculation (bsc#1142685 ltc#179509).
- powerpc/vmlinux.lds: Explicitly retain .gnu.hash (bsc#1148868).
- powerpc/xive: Replace msleep(x) with msleep(OPAL_BUSY_DELAY_MS) (bsc#1085030).
- powerpc/xive: Use XIVE_BAD_IRQ instead of zero to catch non configured IPIs (bsc#1085030).
- pwm: bcm2835: Dynamically allocate base (bsc#1051510).
- pwm: meson: Fix confusing indentation (bsc#1051510).
- pwm: pca9685: Fix PWM/GPIO inter-operation (bsc#1051510).
- pwm: rcar: Fix late Runtime PM enablement (bsc#1051510).
- pwm: renesas-tpu: Fix late Runtime PM enablement (bsc#1051510).
- pxa168fb: fix release function mismatch in probe failure (bsc#1051510).
- qede: Fix race between rdma destroy workqueue and link change event (networking-stable-20_03_01).
- qmi_wwan: unconditionally reject 2 ep interfaces (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (git-fixes).
- s390/cio: avoid duplicated 'ADD' uevents (git-fixes).
- s390/cio: generate delayed uevent for vfio-ccw subchannels (git-fixes).
- s390/cpuinfo: fix wrong output when CPU0 is offline (git-fixes).
- s390/diag: fix display of diagnose call statistics (git-fixes).
- s390/gmap: return proper error code on ksm unsharing (git-fixes).
- s390/mm: fix dynamic pagetable upgrade for hugetlbfs (bsc#1165182 LTC#184102).
- s390/qeth: cancel RX reclaim work earlier (git-fixes).
- s390/qeth: do not return -ENOTSUPP to userspace (git-fixes).
- s390/qeth: do not warn for napi with 0 budget (git-fixes).
- s390/qeth: fix off-by-one in RX copybreak check (git-fixes).
- s390/qeth: fix potential deadlock on workqueue flush (bsc#1165185 LTC#184108).
- s390/qeth: fix promiscuous mode after reset (git-fixes).
- s390/qeth: fix qdio teardown after early init error (git-fixes).
- s390/qeth: handle error due to unsupported transport mode (git-fixes).
- s390/qeth: handle error when backing RX buffer (git-fixes).
- s390/qeth: lock the card while changing its hsuid (git-fixes).
- s390/qeth: support net namespaces for L3 devices (git-fixes).
- s390/time: Fix clk type in get_tod_clock (git-fixes).
- scsi: core: avoid repetitive logging of device offline messages (bsc#1145929).
- scsi: core: kABI fix offline_already (bsc#1145929).
- scsi: fc: Update Descriptor definition and add RDF and Link Integrity FPINs (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551). Refresh sorted patches.
- scsi: lpfc: add RDF registration and Link Integrity FPIN logging (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Change default SCSI LUN QD to 64 (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654).
- scsi: lpfc: Clean up hba max_lun_queue_depth checks (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Copyright updates for 12.6.0.4 patches (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix broken Credit Recovery after driver load (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix compiler warning on frame size (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix coverity errors in fmdi attribute handling (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix crash after handling a pci error (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix disablement of FC-AL on lpe35000 models (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix driver nvme rescan logging (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix erroneous cpu limit of 128 on I/O statistics (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix Fabric hostname registration if system hostname changes (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix improper flag check for IO type (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix incomplete NVME discovery when target (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lockdep error - register non-static key (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lpfc_io_buf resource leak in lpfc_get_scsi_buf_s4 error path (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lpfc overwrite of sg_cnt field in nvmefc_tgt_fcp_req (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix MDS Latency Diagnostics Err-drop rates (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix missing check for CSF in Write Object Mbox Rsp (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix ras_log via debugfs (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix registration of ELS type support in fdmi (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix release of hwq to clear the eq relationship (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix: Rework setting of fdmi symbolic node name registration (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix RQ buffer leakage when no IOCBs available (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix scsi host template for SLI3 vports (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: fix spelling mistake 'Notication' -&gt; 'Notification' (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: fix spelling mistakes of asynchronous (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix unmap of dpp bars affecting next driver load (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix update of wq consumer index in lpfc_sli4_wq_release (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Make debugfs ktime stats generic for NVME and SCSI (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Make lpfc_defer_acc_rsp static (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Remove handler for obsolete ELS - Read Port Status (RPS) (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Remove prototype FIPS/DSS options from SLI-3 (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Update lpfc version to 12.8.0.0 (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (bsc#1157424).
- scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point (git-fixes).
- sctp: move the format error check out of __sctp_sf_do_9_1_abort (networking-stable-20_03_01).
- serdev: ttyport: restore client ops on deregistration (bsc#1051510).
- staging: ccree: use signal safe completion wait (git-fixes).
- staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table (bsc#1051510).
- staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi (bsc#1051510).
- staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb (bsc#1051510).
- staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback (bsc#1051510).
- SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202).
- swiotlb: do not panic on mapping failures (bsc#1162171).
- swiotlb: remove the overflow buffer (bsc#1162171).
- thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n (bsc#1051510).
- tpm: ibmvtpm: Wait for buffer to be set before proceeding (bsc#1065729).
- tty: evh_bytechan: Fix out of bounds accesses (bsc#1051510).
- tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode (bsc#1051510).
- tty: serial: imx: setup the correct sg entry for tx dma (bsc#1051510).
- USB: audio-v2: Add uac2_effect_unit_descriptor definition (bsc#1051510).
- USB: cdc-acm: fix rounding error in TIOCSSERIAL (git-fixes).
- USB: core: hub: do error out if usb_autopm_get_interface() fails (git-fixes).
- USB: core: port: do error out if usb_autopm_get_interface() fails (git-fixes).
- USB: Disable LPM on WD19's Realtek Hub (git-fixes).
- USB: dwc2: Fix in ISOC request length checking (git-fixes).
- USB: Fix novation SourceControl XL after suspend (git-fixes).
- USB: gadget: composite: Fix bMaxPower for SuperSpeedPlus (git-fixes).
- USB: gadget: f_fs: Fix use after free issue as part of queue failure (bsc#1051510).
- USB: host: xhci-plat: add a shutdown (git-fixes).
- USB: hub: Do not record a connect-change event during reset-resume (git-fixes).
- USB: misc: iowarrior: add support for 2 OEMed devices (git-fixes).
- USB: misc: iowarrior: add support for the 100 device (git-fixes).
- USB: misc: iowarrior: add support for the 28 and 28L devices (git-fixes).
- USB: musb: Disable pullup at init (git-fixes).
- USB: musb: fix crash with highmen PIO and usbmon (bsc#1051510).
- USB: quirks: add NO_LPM quirk for Logitech Screen Share (git-fixes).
- USB: quirks: add NO_LPM quirk for RTL8153 based ethernet adapters (git-fixes).
- USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback (bsc#1051510).
- USB: serial: option: add ME910G1 ECM composition 0x110b (git-fixes).
- USB: serial: pl2303: add device-id for HP LD381 (git-fixes).
- USB: storage: Add quirk for Samsung Fit flash (git-fixes).
- USB: uas: fix a plug &amp; unplug racing (git-fixes).
- USB: xhci: apply XHCI_SUSPEND_DELAY to AMD XHCI controller 1022:145c (git-fixes).
- virtio-blk: improve virtqueue error to BLK_STS (bsc#1167627).
- virtio_ring: fix unmap of indirect descriptors (bsc#1162171).
- x86/mce: Fix logic and comments around MSR_PPIN_CTL (bsc#1114279).
- x86/pkeys: Manually set X86_FEATURE_OSPKE to preserve existing changes (bsc#1114279).
- x86/xen: fix booting 32-bit pv guest (bsc#1071995).
- x86/xen: Make the boot CPU idle task reliable (bsc#1071995).
- x86/xen: Make the secondary CPU idle tasks reliable (bsc#1071995).
- xen/blkfront: fix memory allocation flags in blkfront_setup_indirect() (bsc#1168486).
- xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms (git-fixes).
- xhci: Do not open code __print_symbolic() in xhci trace events (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-29"/>
	<updated date="2020-04-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109911">SUSE bug 1109911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118338">SUSE bug 1118338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120386">SUSE bug 1120386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137325">SUSE bug 1137325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145051">SUSE bug 1145051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145929">SUSE bug 1145929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158983">SUSE bug 1158983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159037">SUSE bug 1159037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159198">SUSE bug 1159198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159199">SUSE bug 1159199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161561">SUSE bug 1161561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161951">SUSE bug 1161951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162171">SUSE bug 1162171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163403">SUSE bug 1163403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163897">SUSE bug 1163897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164284">SUSE bug 1164284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164777">SUSE bug 1164777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164893">SUSE bug 1164893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165019">SUSE bug 1165019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165182">SUSE bug 1165182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165185">SUSE bug 1165185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165211">SUSE bug 1165211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165823">SUSE bug 1165823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165949">SUSE bug 1165949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166780">SUSE bug 1166780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166860">SUSE bug 1166860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166861">SUSE bug 1166861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166862">SUSE bug 1166862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166864">SUSE bug 1166864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166866">SUSE bug 1166866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166867">SUSE bug 1166867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166868">SUSE bug 1166868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166870">SUSE bug 1166870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166940">SUSE bug 1166940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166982">SUSE bug 1166982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167005">SUSE bug 1167005</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167216">SUSE bug 1167216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167288">SUSE bug 1167288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167290">SUSE bug 1167290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167316">SUSE bug 1167316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167421">SUSE bug 1167421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167423">SUSE bug 1167423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167627">SUSE bug 1167627</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167629">SUSE bug 1167629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168075">SUSE bug 1168075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168202">SUSE bug 1168202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168273">SUSE bug 1168273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168276">SUSE bug 1168276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168295">SUSE bug 1168295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168367">SUSE bug 1168367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168424">SUSE bug 1168424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168443">SUSE bug 1168443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168486">SUSE bug 1168486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168552">SUSE bug 1168552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168760">SUSE bug 1168760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168762">SUSE bug 1168762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168763">SUSE bug 1168763</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168764">SUSE bug 1168764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168765">SUSE bug 1168765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168829">SUSE bug 1168829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168854">SUSE bug 1168854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168881">SUSE bug 1168881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168884">SUSE bug 1168884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168952">SUSE bug 1168952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169013">SUSE bug 1169013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169057">SUSE bug 1169057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169307">SUSE bug 1169307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169308">SUSE bug 1169308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169390">SUSE bug 1169390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169625">SUSE bug 1169625</bugzilla>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19770/">CVE-2019-19770</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3701/">CVE-2019-3701</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9458/">CVE-2019-9458</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10942/">CVE-2020-10942</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11494/">CVE-2020-11494</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11669/">CVE-2020-11669</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8834/">CVE-2020-8834</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497439" comment="kernel-default-livepatch-4.12.14-197.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497440" comment="kernel-default-livepatch-devel-4.12.14-197.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497441" comment="kernel-livepatch-4_12_14-197_40-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138365" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1165631" ref_url="https://bugzilla.suse.com/1165631" source="BUGZILLA"/>
		<reference ref_id="1171252" ref_url="https://bugzilla.suse.com/1171252" source="BUGZILLA"/>
		<reference ref_id="1171254" ref_url="https://bugzilla.suse.com/1171254" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006862.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_40 fixes several issues.

The following security issues were fixed:

- CVE-2020-12653: Fixed a buffer overflow in mwifiex_cmd_append_vsie_tlv() which could have allowed local users to gain privileges or cause a denial of service (bsc#1171254).
- CVE-2020-12654: Fixed a heap-based buffer overflow in mwifiex_ret_wmm_get_status() which could have been triggered by a remote AP to trigger (bsc#1171252).
- CVE-2020-1749: Fixed an improper implementation in some IPsec protocols where the data were sent unencrypted allowing an attacker to read them (bsc#1165631).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171252">SUSE bug 1171252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171254">SUSE bug 1171254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720969" comment="kernel-default 4.12.14-197.40 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719188" comment="kernel-livepatch-4_12_14-197_40-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497442" comment="kernel-livepatch-4_12_14-197_40-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138366" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171252" ref_url="https://bugzilla.suse.com/1171252" source="BUGZILLA"/>
		<reference ref_id="1171254" ref_url="https://bugzilla.suse.com/1171254" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006863.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_37 fixes several issues.

The following security issues were fixed:

- CVE-2020-12653: Fixed a buffer overflow in mwifiex_cmd_append_vsie_tlv() which could have allowed local users to gain privileges or cause a denial of service (bsc#1171254).
- CVE-2020-12654: Fixed a heap-based buffer overflow in mwifiex_ret_wmm_get_status() which could have been triggered by a remote AP to trigger (bsc#1171252).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171252">SUSE bug 1171252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171254">SUSE bug 1171254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720968" comment="kernel-default 4.12.14-197.37 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719187" comment="kernel-livepatch-4_12_14-197_37-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497443" comment="kernel-livepatch-4_12_14-197_37-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138367" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171252" ref_url="https://bugzilla.suse.com/1171252" source="BUGZILLA"/>
		<reference ref_id="1171254" ref_url="https://bugzilla.suse.com/1171254" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006863.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_34 fixes several issues.

The following security issues were fixed:

- CVE-2020-12653: Fixed a buffer overflow in mwifiex_cmd_append_vsie_tlv() which could have allowed local users to gain privileges or cause a denial of service (bsc#1171254).
- CVE-2020-12654: Fixed a heap-based buffer overflow in mwifiex_ret_wmm_get_status() which could have been triggered by a remote AP to trigger (bsc#1171252).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171252">SUSE bug 1171252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171254">SUSE bug 1171254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720970" comment="kernel-default 4.12.14-197.34 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719189" comment="kernel-livepatch-4_12_14-197_34-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497444" comment="kernel-livepatch-4_12_14-197_34-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138368" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171252" ref_url="https://bugzilla.suse.com/1171252" source="BUGZILLA"/>
		<reference ref_id="1171254" ref_url="https://bugzilla.suse.com/1171254" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006863.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_29 fixes several issues.

The following security issues were fixed:

- CVE-2020-12653: Fixed a buffer overflow in mwifiex_cmd_append_vsie_tlv() which could have allowed local users to gain privileges or cause a denial of service (bsc#1171254).
- CVE-2020-12654: Fixed a heap-based buffer overflow in mwifiex_ret_wmm_get_status() which could have been triggered by a remote AP to trigger (bsc#1171252).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171252">SUSE bug 1171252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171254">SUSE bug 1171254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720971" comment="kernel-default 4.12.14-197.29 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719190" comment="kernel-livepatch-4_12_14-197_29-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497445" comment="kernel-livepatch-4_12_14-197_29-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138369" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171252" ref_url="https://bugzilla.suse.com/1171252" source="BUGZILLA"/>
		<reference ref_id="1171254" ref_url="https://bugzilla.suse.com/1171254" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006863.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_26 fixes several issues.

The following security issues were fixed:

- CVE-2020-12653: Fixed a buffer overflow in mwifiex_cmd_append_vsie_tlv() which could have allowed local users to gain privileges or cause a denial of service (bsc#1171254).
- CVE-2020-12654: Fixed a heap-based buffer overflow in mwifiex_ret_wmm_get_status() which could have been triggered by a remote AP to trigger (bsc#1171252).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171252">SUSE bug 1171252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171254">SUSE bug 1171254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720972" comment="kernel-default 4.12.14-197.26 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719191" comment="kernel-livepatch-4_12_14-197_26-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497446" comment="kernel-livepatch-4_12_14-197_26-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138370" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171252" ref_url="https://bugzilla.suse.com/1171252" source="BUGZILLA"/>
		<reference ref_id="1171254" ref_url="https://bugzilla.suse.com/1171254" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006863.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_21 fixes several issues.

The following security issues were fixed:

- CVE-2020-12653: Fixed a buffer overflow in mwifiex_cmd_append_vsie_tlv() which could have allowed local users to gain privileges or cause a denial of service (bsc#1171254).
- CVE-2020-12654: Fixed a heap-based buffer overflow in mwifiex_ret_wmm_get_status() which could have been triggered by a remote AP to trigger (bsc#1171252).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171252">SUSE bug 1171252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171254">SUSE bug 1171254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720966" comment="kernel-default 4.12.14-197.21 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719185" comment="kernel-livepatch-4_12_14-197_21-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497447" comment="kernel-livepatch-4_12_14-197_21-default-6-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138371" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171252" ref_url="https://bugzilla.suse.com/1171252" source="BUGZILLA"/>
		<reference ref_id="1171254" ref_url="https://bugzilla.suse.com/1171254" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006863.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_18 fixes several issues.

The following security issues were fixed:

- CVE-2020-12653: Fixed a buffer overflow in mwifiex_cmd_append_vsie_tlv() which could have allowed local users to gain privileges or cause a denial of service (bsc#1171254).
- CVE-2020-12654: Fixed a heap-based buffer overflow in mwifiex_ret_wmm_get_status() which could have been triggered by a remote AP to trigger (bsc#1171252).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171252">SUSE bug 1171252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171254">SUSE bug 1171254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720967" comment="kernel-default 4.12.14-197.18 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719186" comment="kernel-livepatch-4_12_14-197_18-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497448" comment="kernel-livepatch-4_12_14-197_18-default-6-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138372" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171252" ref_url="https://bugzilla.suse.com/1171252" source="BUGZILLA"/>
		<reference ref_id="1171254" ref_url="https://bugzilla.suse.com/1171254" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006863.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_15 fixes several issues.

The following security issues were fixed:

- CVE-2020-12653: Fixed a buffer overflow in mwifiex_cmd_append_vsie_tlv() which could have allowed local users to gain privileges or cause a denial of service (bsc#1171254).
- CVE-2020-12654: Fixed a heap-based buffer overflow in mwifiex_ret_wmm_get_status() which could have been triggered by a remote AP to trigger (bsc#1171252).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171252">SUSE bug 1171252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171254">SUSE bug 1171254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720965" comment="kernel-default 4.12.14-197.15 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719184" comment="kernel-livepatch-4_12_14-197_15-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497449" comment="kernel-livepatch-4_12_14-197_15-default-7-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138373" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171252" ref_url="https://bugzilla.suse.com/1171252" source="BUGZILLA"/>
		<reference ref_id="1171254" ref_url="https://bugzilla.suse.com/1171254" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006863.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_10 fixes several issues.

The following security issues were fixed:

- CVE-2020-12653: Fixed a buffer overflow in mwifiex_cmd_append_vsie_tlv() which could have allowed local users to gain privileges or cause a denial of service (bsc#1171254).
- CVE-2020-12654: Fixed a heap-based buffer overflow in mwifiex_ret_wmm_get_status() which could have been triggered by a remote AP to trigger (bsc#1171252).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171252">SUSE bug 1171252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171254">SUSE bug 1171254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720964" comment="kernel-default 4.12.14-197.10 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719183" comment="kernel-livepatch-4_12_14-197_10-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497450" comment="kernel-livepatch-4_12_14-197_10-default-7-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138374" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171252" ref_url="https://bugzilla.suse.com/1171252" source="BUGZILLA"/>
		<reference ref_id="1171254" ref_url="https://bugzilla.suse.com/1171254" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006863.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_7 fixes several issues.

The following security issues were fixed:

- CVE-2020-12653: Fixed a buffer overflow in mwifiex_cmd_append_vsie_tlv() which could have allowed local users to gain privileges or cause a denial of service (bsc#1171254).
- CVE-2020-12654: Fixed a heap-based buffer overflow in mwifiex_ret_wmm_get_status() which could have been triggered by a remote AP to trigger (bsc#1171252).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171252">SUSE bug 1171252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171254">SUSE bug 1171254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720963" comment="kernel-default 4.12.14-197.7 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719182" comment="kernel-livepatch-4_12_14-197_7-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497451" comment="kernel-livepatch-4_12_14-197_7-default-9-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138375" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171252" ref_url="https://bugzilla.suse.com/1171252" source="BUGZILLA"/>
		<reference ref_id="1171254" ref_url="https://bugzilla.suse.com/1171254" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006863.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_4 fixes several issues.

The following security issues were fixed:

- CVE-2020-12653: Fixed a buffer overflow in mwifiex_cmd_append_vsie_tlv() which could have allowed local users to gain privileges or cause a denial of service (bsc#1171254).
- CVE-2020-12654: Fixed a heap-based buffer overflow in mwifiex_ret_wmm_get_status() which could have been triggered by a remote AP to trigger (bsc#1171252).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171252">SUSE bug 1171252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171254">SUSE bug 1171254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720962" comment="kernel-default 4.12.14-197.4 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719181" comment="kernel-livepatch-4_12_14-197_4-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497452" comment="kernel-livepatch-4_12_14-197_4-default-10-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138376" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171252" ref_url="https://bugzilla.suse.com/1171252" source="BUGZILLA"/>
		<reference ref_id="1171254" ref_url="https://bugzilla.suse.com/1171254" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1475-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006863.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-195 fixes several issues.

The following security issues were fixed:

- CVE-2020-12653: Fixed a buffer overflow in mwifiex_cmd_append_vsie_tlv() which could have allowed local users to gain privileges or cause a denial of service (bsc#1171254).
- CVE-2020-12654: Fixed a heap-based buffer overflow in mwifiex_ret_wmm_get_status() which could have been triggered by a remote AP to trigger (bsc#1171252).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171252">SUSE bug 1171252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171254">SUSE bug 1171254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720961" comment="kernel-default 4.12.14-195 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719180" comment="kernel-livepatch-4_12_14-195-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497453" comment="kernel-livepatch-4_12_14-195-default-11-31.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138377" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1089895" ref_url="https://bugzilla.suse.com/1089895" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1124278" ref_url="https://bugzilla.suse.com/1124278" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127355" ref_url="https://bugzilla.suse.com/1127355" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1151794" ref_url="https://bugzilla.suse.com/1151794" source="BUGZILLA"/>
		<reference ref_id="1152489" ref_url="https://bugzilla.suse.com/1152489" source="BUGZILLA"/>
		<reference ref_id="1154824" ref_url="https://bugzilla.suse.com/1154824" source="BUGZILLA"/>
		<reference ref_id="1157169" ref_url="https://bugzilla.suse.com/1157169" source="BUGZILLA"/>
		<reference ref_id="1158265" ref_url="https://bugzilla.suse.com/1158265" source="BUGZILLA"/>
		<reference ref_id="1160388" ref_url="https://bugzilla.suse.com/1160388" source="BUGZILLA"/>
		<reference ref_id="1160947" ref_url="https://bugzilla.suse.com/1160947" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1164871" ref_url="https://bugzilla.suse.com/1164871" source="BUGZILLA"/>
		<reference ref_id="1165183" ref_url="https://bugzilla.suse.com/1165183" source="BUGZILLA"/>
		<reference ref_id="1165478" ref_url="https://bugzilla.suse.com/1165478" source="BUGZILLA"/>
		<reference ref_id="1165741" ref_url="https://bugzilla.suse.com/1165741" source="BUGZILLA"/>
		<reference ref_id="1166969" ref_url="https://bugzilla.suse.com/1166969" source="BUGZILLA"/>
		<reference ref_id="1166978" ref_url="https://bugzilla.suse.com/1166978" source="BUGZILLA"/>
		<reference ref_id="1167574" ref_url="https://bugzilla.suse.com/1167574" source="BUGZILLA"/>
		<reference ref_id="1167851" ref_url="https://bugzilla.suse.com/1167851" source="BUGZILLA"/>
		<reference ref_id="1167867" ref_url="https://bugzilla.suse.com/1167867" source="BUGZILLA"/>
		<reference ref_id="1168332" ref_url="https://bugzilla.suse.com/1168332" source="BUGZILLA"/>
		<reference ref_id="1168670" ref_url="https://bugzilla.suse.com/1168670" source="BUGZILLA"/>
		<reference ref_id="1168789" ref_url="https://bugzilla.suse.com/1168789" source="BUGZILLA"/>
		<reference ref_id="1169020" ref_url="https://bugzilla.suse.com/1169020" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169525" ref_url="https://bugzilla.suse.com/1169525" source="BUGZILLA"/>
		<reference ref_id="1169762" ref_url="https://bugzilla.suse.com/1169762" source="BUGZILLA"/>
		<reference ref_id="1170056" ref_url="https://bugzilla.suse.com/1170056" source="BUGZILLA"/>
		<reference ref_id="1170125" ref_url="https://bugzilla.suse.com/1170125" source="BUGZILLA"/>
		<reference ref_id="1170145" ref_url="https://bugzilla.suse.com/1170145" source="BUGZILLA"/>
		<reference ref_id="1170284" ref_url="https://bugzilla.suse.com/1170284" source="BUGZILLA"/>
		<reference ref_id="1170345" ref_url="https://bugzilla.suse.com/1170345" source="BUGZILLA"/>
		<reference ref_id="1170457" ref_url="https://bugzilla.suse.com/1170457" source="BUGZILLA"/>
		<reference ref_id="1170522" ref_url="https://bugzilla.suse.com/1170522" source="BUGZILLA"/>
		<reference ref_id="1170592" ref_url="https://bugzilla.suse.com/1170592" source="BUGZILLA"/>
		<reference ref_id="1170617" ref_url="https://bugzilla.suse.com/1170617" source="BUGZILLA"/>
		<reference ref_id="1170618" ref_url="https://bugzilla.suse.com/1170618" source="BUGZILLA"/>
		<reference ref_id="1170620" ref_url="https://bugzilla.suse.com/1170620" source="BUGZILLA"/>
		<reference ref_id="1170621" ref_url="https://bugzilla.suse.com/1170621" source="BUGZILLA"/>
		<reference ref_id="1170770" ref_url="https://bugzilla.suse.com/1170770" source="BUGZILLA"/>
		<reference ref_id="1170778" ref_url="https://bugzilla.suse.com/1170778" source="BUGZILLA"/>
		<reference ref_id="1170791" ref_url="https://bugzilla.suse.com/1170791" source="BUGZILLA"/>
		<reference ref_id="1170901" ref_url="https://bugzilla.suse.com/1170901" source="BUGZILLA"/>
		<reference ref_id="1171078" ref_url="https://bugzilla.suse.com/1171078" source="BUGZILLA"/>
		<reference ref_id="1171098" ref_url="https://bugzilla.suse.com/1171098" source="BUGZILLA"/>
		<reference ref_id="1171118" ref_url="https://bugzilla.suse.com/1171118" source="BUGZILLA"/>
		<reference ref_id="1171189" ref_url="https://bugzilla.suse.com/1171189" source="BUGZILLA"/>
		<reference ref_id="1171191" ref_url="https://bugzilla.suse.com/1171191" source="BUGZILLA"/>
		<reference ref_id="1171195" ref_url="https://bugzilla.suse.com/1171195" source="BUGZILLA"/>
		<reference ref_id="1171202" ref_url="https://bugzilla.suse.com/1171202" source="BUGZILLA"/>
		<reference ref_id="1171205" ref_url="https://bugzilla.suse.com/1171205" source="BUGZILLA"/>
		<reference ref_id="1171214" ref_url="https://bugzilla.suse.com/1171214" source="BUGZILLA"/>
		<reference ref_id="1171217" ref_url="https://bugzilla.suse.com/1171217" source="BUGZILLA"/>
		<reference ref_id="1171218" ref_url="https://bugzilla.suse.com/1171218" source="BUGZILLA"/>
		<reference ref_id="1171219" ref_url="https://bugzilla.suse.com/1171219" source="BUGZILLA"/>
		<reference ref_id="1171220" ref_url="https://bugzilla.suse.com/1171220" source="BUGZILLA"/>
		<reference ref_id="1171244" ref_url="https://bugzilla.suse.com/1171244" source="BUGZILLA"/>
		<reference ref_id="1171293" ref_url="https://bugzilla.suse.com/1171293" source="BUGZILLA"/>
		<reference ref_id="1171417" ref_url="https://bugzilla.suse.com/1171417" source="BUGZILLA"/>
		<reference ref_id="1171527" ref_url="https://bugzilla.suse.com/1171527" source="BUGZILLA"/>
		<reference ref_id="1171599" ref_url="https://bugzilla.suse.com/1171599" source="BUGZILLA"/>
		<reference ref_id="1171600" ref_url="https://bugzilla.suse.com/1171600" source="BUGZILLA"/>
		<reference ref_id="1171601" ref_url="https://bugzilla.suse.com/1171601" source="BUGZILLA"/>
		<reference ref_id="1171602" ref_url="https://bugzilla.suse.com/1171602" source="BUGZILLA"/>
		<reference ref_id="1171604" ref_url="https://bugzilla.suse.com/1171604" source="BUGZILLA"/>
		<reference ref_id="1171605" ref_url="https://bugzilla.suse.com/1171605" source="BUGZILLA"/>
		<reference ref_id="1171606" ref_url="https://bugzilla.suse.com/1171606" source="BUGZILLA"/>
		<reference ref_id="1171607" ref_url="https://bugzilla.suse.com/1171607" source="BUGZILLA"/>
		<reference ref_id="1171608" ref_url="https://bugzilla.suse.com/1171608" source="BUGZILLA"/>
		<reference ref_id="1171609" ref_url="https://bugzilla.suse.com/1171609" source="BUGZILLA"/>
		<reference ref_id="1171610" ref_url="https://bugzilla.suse.com/1171610" source="BUGZILLA"/>
		<reference ref_id="1171611" ref_url="https://bugzilla.suse.com/1171611" source="BUGZILLA"/>
		<reference ref_id="1171612" ref_url="https://bugzilla.suse.com/1171612" source="BUGZILLA"/>
		<reference ref_id="1171613" ref_url="https://bugzilla.suse.com/1171613" source="BUGZILLA"/>
		<reference ref_id="1171614" ref_url="https://bugzilla.suse.com/1171614" source="BUGZILLA"/>
		<reference ref_id="1171615" ref_url="https://bugzilla.suse.com/1171615" source="BUGZILLA"/>
		<reference ref_id="1171616" ref_url="https://bugzilla.suse.com/1171616" source="BUGZILLA"/>
		<reference ref_id="1171617" ref_url="https://bugzilla.suse.com/1171617" source="BUGZILLA"/>
		<reference ref_id="1171618" ref_url="https://bugzilla.suse.com/1171618" source="BUGZILLA"/>
		<reference ref_id="1171619" ref_url="https://bugzilla.suse.com/1171619" source="BUGZILLA"/>
		<reference ref_id="1171620" ref_url="https://bugzilla.suse.com/1171620" source="BUGZILLA"/>
		<reference ref_id="1171621" ref_url="https://bugzilla.suse.com/1171621" source="BUGZILLA"/>
		<reference ref_id="1171622" ref_url="https://bugzilla.suse.com/1171622" source="BUGZILLA"/>
		<reference ref_id="1171623" ref_url="https://bugzilla.suse.com/1171623" source="BUGZILLA"/>
		<reference ref_id="1171624" ref_url="https://bugzilla.suse.com/1171624" source="BUGZILLA"/>
		<reference ref_id="1171625" ref_url="https://bugzilla.suse.com/1171625" source="BUGZILLA"/>
		<reference ref_id="1171626" ref_url="https://bugzilla.suse.com/1171626" source="BUGZILLA"/>
		<reference ref_id="1171662" ref_url="https://bugzilla.suse.com/1171662" source="BUGZILLA"/>
		<reference ref_id="1171679" ref_url="https://bugzilla.suse.com/1171679" source="BUGZILLA"/>
		<reference ref_id="1171691" ref_url="https://bugzilla.suse.com/1171691" source="BUGZILLA"/>
		<reference ref_id="1171692" ref_url="https://bugzilla.suse.com/1171692" source="BUGZILLA"/>
		<reference ref_id="1171694" ref_url="https://bugzilla.suse.com/1171694" source="BUGZILLA"/>
		<reference ref_id="1171695" ref_url="https://bugzilla.suse.com/1171695" source="BUGZILLA"/>
		<reference ref_id="1171736" ref_url="https://bugzilla.suse.com/1171736" source="BUGZILLA"/>
		<reference ref_id="1171817" ref_url="https://bugzilla.suse.com/1171817" source="BUGZILLA"/>
		<reference ref_id="1171948" ref_url="https://bugzilla.suse.com/1171948" source="BUGZILLA"/>
		<reference ref_id="1171949" ref_url="https://bugzilla.suse.com/1171949" source="BUGZILLA"/>
		<reference ref_id="1171951" ref_url="https://bugzilla.suse.com/1171951" source="BUGZILLA"/>
		<reference ref_id="1171952" ref_url="https://bugzilla.suse.com/1171952" source="BUGZILLA"/>
		<reference ref_id="1171979" ref_url="https://bugzilla.suse.com/1171979" source="BUGZILLA"/>
		<reference ref_id="1171982" ref_url="https://bugzilla.suse.com/1171982" source="BUGZILLA"/>
		<reference ref_id="1171983" ref_url="https://bugzilla.suse.com/1171983" source="BUGZILLA"/>
		<reference ref_id="1172017" ref_url="https://bugzilla.suse.com/1172017" source="BUGZILLA"/>
		<reference ref_id="1172096" ref_url="https://bugzilla.suse.com/1172096" source="BUGZILLA"/>
		<reference ref_id="1172097" ref_url="https://bugzilla.suse.com/1172097" source="BUGZILLA"/>
		<reference ref_id="1172098" ref_url="https://bugzilla.suse.com/1172098" source="BUGZILLA"/>
		<reference ref_id="1172099" ref_url="https://bugzilla.suse.com/1172099" source="BUGZILLA"/>
		<reference ref_id="1172101" ref_url="https://bugzilla.suse.com/1172101" source="BUGZILLA"/>
		<reference ref_id="1172102" ref_url="https://bugzilla.suse.com/1172102" source="BUGZILLA"/>
		<reference ref_id="1172103" ref_url="https://bugzilla.suse.com/1172103" source="BUGZILLA"/>
		<reference ref_id="1172104" ref_url="https://bugzilla.suse.com/1172104" source="BUGZILLA"/>
		<reference ref_id="1172127" ref_url="https://bugzilla.suse.com/1172127" source="BUGZILLA"/>
		<reference ref_id="1172130" ref_url="https://bugzilla.suse.com/1172130" source="BUGZILLA"/>
		<reference ref_id="1172185" ref_url="https://bugzilla.suse.com/1172185" source="BUGZILLA"/>
		<reference ref_id="1172188" ref_url="https://bugzilla.suse.com/1172188" source="BUGZILLA"/>
		<reference ref_id="1172199" ref_url="https://bugzilla.suse.com/1172199" source="BUGZILLA"/>
		<reference ref_id="1172201" ref_url="https://bugzilla.suse.com/1172201" source="BUGZILLA"/>
		<reference ref_id="1172202" ref_url="https://bugzilla.suse.com/1172202" source="BUGZILLA"/>
		<reference ref_id="1172221" ref_url="https://bugzilla.suse.com/1172221" source="BUGZILLA"/>
		<reference ref_id="1172249" ref_url="https://bugzilla.suse.com/1172249" source="BUGZILLA"/>
		<reference ref_id="1172251" ref_url="https://bugzilla.suse.com/1172251" source="BUGZILLA"/>
		<reference ref_id="1172317" ref_url="https://bugzilla.suse.com/1172317" source="BUGZILLA"/>
		<reference ref_id="1172342" ref_url="https://bugzilla.suse.com/1172342" source="BUGZILLA"/>
		<reference ref_id="1172343" ref_url="https://bugzilla.suse.com/1172343" source="BUGZILLA"/>
		<reference ref_id="1172344" ref_url="https://bugzilla.suse.com/1172344" source="BUGZILLA"/>
		<reference ref_id="1172366" ref_url="https://bugzilla.suse.com/1172366" source="BUGZILLA"/>
		<reference ref_id="1172378" ref_url="https://bugzilla.suse.com/1172378" source="BUGZILLA"/>
		<reference ref_id="1172391" ref_url="https://bugzilla.suse.com/1172391" source="BUGZILLA"/>
		<reference ref_id="1172397" ref_url="https://bugzilla.suse.com/1172397" source="BUGZILLA"/>
		<reference ref_id="1172453" ref_url="https://bugzilla.suse.com/1172453" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2019-19462" ref_url="https://www.suse.com/security/cve/CVE-2019-19462/" source="CVE"/>
		<reference ref_id="CVE-2019-20806" ref_url="https://www.suse.com/security/cve/CVE-2019-20806/" source="CVE"/>
		<reference ref_id="CVE-2019-20812" ref_url="https://www.suse.com/security/cve/CVE-2019-20812/" source="CVE"/>
		<reference ref_id="CVE-2019-9455" ref_url="https://www.suse.com/security/cve/CVE-2019-9455/" source="CVE"/>
		<reference ref_id="CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543/" source="CVE"/>
		<reference ref_id="CVE-2020-10690" ref_url="https://www.suse.com/security/cve/CVE-2020-10690/" source="CVE"/>
		<reference ref_id="CVE-2020-10711" ref_url="https://www.suse.com/security/cve/CVE-2020-10711/" source="CVE"/>
		<reference ref_id="CVE-2020-10720" ref_url="https://www.suse.com/security/cve/CVE-2020-10720/" source="CVE"/>
		<reference ref_id="CVE-2020-10732" ref_url="https://www.suse.com/security/cve/CVE-2020-10732/" source="CVE"/>
		<reference ref_id="CVE-2020-10751" ref_url="https://www.suse.com/security/cve/CVE-2020-10751/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="CVE-2020-12114" ref_url="https://www.suse.com/security/cve/CVE-2020-12114/" source="CVE"/>
		<reference ref_id="CVE-2020-12464" ref_url="https://www.suse.com/security/cve/CVE-2020-12464/" source="CVE"/>
		<reference ref_id="CVE-2020-12652" ref_url="https://www.suse.com/security/cve/CVE-2020-12652/" source="CVE"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="CVE-2020-12655" ref_url="https://www.suse.com/security/cve/CVE-2020-12655/" source="CVE"/>
		<reference ref_id="CVE-2020-12656" ref_url="https://www.suse.com/security/cve/CVE-2020-12656/" source="CVE"/>
		<reference ref_id="CVE-2020-12657" ref_url="https://www.suse.com/security/cve/CVE-2020-12657/" source="CVE"/>
		<reference ref_id="CVE-2020-12659" ref_url="https://www.suse.com/security/cve/CVE-2020-12659/" source="CVE"/>
		<reference ref_id="CVE-2020-12768" ref_url="https://www.suse.com/security/cve/CVE-2020-12768/" source="CVE"/>
		<reference ref_id="CVE-2020-12769" ref_url="https://www.suse.com/security/cve/CVE-2020-12769/" source="CVE"/>
		<reference ref_id="CVE-2020-13143" ref_url="https://www.suse.com/security/cve/CVE-2020-13143/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it.
  This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1154824).
- CVE-2020-13143: Fixed an out-of-bounds read in gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c (bsc#1171982).
- CVE-2020-12769: Fixed an issue which could have allowed attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one (bsc#1171983).
- CVE-2020-12768: Fixed a memory leak in svm_cpu_uninit in arch/x86/kvm/svm.c (bsc#1171736).
- CVE-2020-12659: Fixed an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) due to improper headroom validation (bsc#1171214).
- CVE-2020-12657: An a use-after-free in block/bfq-iosched.c (bsc#1171205).
- CVE-2020-12656: Fixed an improper handling of certain domain_release calls leadingch could have led to a memory leak (bsc#1171219).
- CVE-2020-12655: Fixed an issue which could have allowed attackers to trigger a sync of excessive duration via an XFS v5 image with crafted metadata (bsc#1171217).
- CVE-2020-12654: Fixed an issue in he wifi driver which could have allowed a remote AP to trigger a heap-based buffer overflow (bsc#1171202).
- CVE-2020-12653: Fixed an issue in the wifi driver which could have allowed local users to gain privileges or cause a denial of service (bsc#1171195).
- CVE-2020-12652: Fixed an issue which could have allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition (bsc#1171218).
- CVE-2020-12464: Fixed a use-after-free due to a transfer without a reference (bsc#1170901).
- CVE-2020-12114: Fixed a pivot_root race condition which could have allowed local users to cause a denial of service (panic) by corrupting a mountpoint reference counter (bsc#1171098).
- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172317).
- CVE-2020-10751: Fixed an improper implementation in SELinux LSM hook  where it was assumed that an skb would only contain a single netlink message (bsc#1171189).
- CVE-2020-10732: Fixed kernel data leak in userspace coredumps due to uninitialized data (bsc#1171220).
- CVE-2020-10720: Fixed a use-after-free read in napi_gro_frags() (bsc#1170778).
- CVE-2020-10711: Fixed a null pointer dereference in SELinux subsystem which could have allowed a remote network user to crash the kernel resulting in a denial of service (bsc#1171191).
- CVE-2020-10690: Fixed the race between the release of ptp_clock and cdev (bsc#1170056).
- CVE-2019-9455: Fixed a pointer leak due to a WARN_ON statement in a video driver. This could lead to local information disclosure with System execution privileges needed (bsc#1170345).
- CVE-2019-20812: Fixed an issue in prb_calc_retire_blk_tmo() which could have resulted in a denial of service (bsc#1172453).
- CVE-2019-20806: Fixed a null pointer dereference which may had lead to denial of service (bsc#1172199).
- CVE-2019-19462: Fixed an issue which could have allowed local user to cause denial of service (bsc#1158265).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1089895)

The following non-security bugs were fixed:

- ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe() (bsc#1051510).
- ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile() (bsc#1051510).
- acpi/x86: ignore unspecified bit positions in the ACPI global lock field (bsc#1051510).
- Add br_netfilter to kernel-default-base (bsc#1169020)
- Add commit for git-fix that's not a fix This commit cleans up debug code but does not fix anything, and it relies on a new kernel function that isn't yet in this version of SLE.
- agp/intel: Reinforce the barrier after GTT updates (bsc#1051510).
- ALSA: ctxfi: Remove unnecessary cast in kfree (bsc#1051510).
- ALSA: doc: Document PC Beep Hidden Register on Realtek ALC256 (bsc#1051510).
- ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
- ALSA: hda: Add driver blacklist (bsc#1051510).
- ALSA: hda: Always use jackpoll helper for jack update after resume (bsc#1051510).
- ALSA: hda: call runtime_allow() for all hda controllers (bsc#1051510).
- ALSA: hda: Do not release card at firmware loading error (bsc#1051510).
- ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported (bsc#1051510).
- ALSA: hda/hdmi: fix race in monitor detection during probe (bsc#1051510).
- ALSA: hda/hdmi: fix without unlocked before return (bsc#1051510).
- ALSA: hda: Honor PM disablement in PM freeze and thaw_noirq ops (bsc#1051510).
- ALSA: hda: Keep the controller initialization even if no codecs found (bsc#1051510).
- ALSA: hda: Match both PCI ID and SSID for driver blacklist (bsc#1111666).
- ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround (bsc#1172017).
- ALSA: hda/realtek - Add COEF workaround for ASUS ZenBook UX431DA (git-fixes).
- ALSA: hda/realtek - Add HP new mute led supported for ALC236 (git-fixes).
- ALSA: hda/realtek - Add more fixup entries for Clevo machines (git-fixes).
- ALSA: hda/realtek - Add new codec supported for ALC245 (bsc#1051510).
- ALSA: hda/realtek - Add new codec supported for ALC287 (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Notebook (git-fixes).
- ALSA: hda/realtek - Add supported new mute Led for HP (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS GL503VM with ALC295 (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS UX550GE with ALC295 (git-fixes).
- ALSA: hda/realtek: Enable headset mic of ASUS UX581LV with ALC295 (git-fixes).
- ALSA: hda/realtek - Enable the headset mic on Asus FX505DT (bsc#1051510).
- ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse (git-fixes).
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme (bsc#1111666).
- ALSA: hda/realtek - Fix unexpected init_amp override (bsc#1051510).
- ALSA: hda/realtek - Limit int mic boost for Thinkpad T530 (git-fixes bsc#1171293).
- ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter (bsc#1051510).
- ALSA: hda: Release resources at error in delayed probe (bsc#1051510).
- ALSA: hda: Remove ASUS ROG Zenith from the blacklist (bsc#1051510).
- ALSA: hda: Skip controller resume if not needed (bsc#1051510).
- ALSA: hwdep: fix a left shifting 1 by 31 UB bug (git-fixes).
- ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio option (git-fixes).
- ALSA: opti9xx: shut up gcc-10 range warning (bsc#1051510).
- ALSA: pcm: fix incorrect hw_base increase (git-fixes).
- ALSA: pcm: oss: Place the plugin buffer overflow checks correctly (bsc#1170522).
- ALSA: rawmidi: Fix racy buffer resize under concurrent accesses (git-fixes).
- ALSA: usb-audio: Add connector notifier delegation (bsc#1051510).
- ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset (git-fixes).
- ALSA: usb-audio: add mapping for ASRock TRX40 Creator (git-fixes).
- ALSA: usb-audio: Add mixer workaround for TRX40 and co (bsc#1051510).
- ALSA: usb-audio: Add quirk for Focusrite Scarlett 2i2 (bsc#1051510).
- ALSA: usb-audio: Add static mapping table for ALC1220-VB-based mobos (bsc#1051510).
- ALSA: usb-audio: Apply async workaround for Scarlett 2i4 2nd gen (bsc#1051510).
- ALSA: usb-audio: Check mapping at creating connector controls, too (bsc#1051510).
- ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID (bsc#1051510).
- ALSA: usb-audio: Do not create jack controls for PCM terminals (bsc#1051510).
- ALSA: usb-audio: Do not override ignore_ctl_error value from the map (bsc#1051510).
- ALSA: usb-audio: Filter error from connector kctl ops, too (bsc#1051510).
- ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif (bsc#1051510).
- ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC (git-fixes).
- ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio (git-fixes).
- ALSA: usx2y: Fix potential NULL dereference (bsc#1051510).
- ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry (bsc#1051510).
- ASoC: dapm: connect virtual mux with default value (bsc#1051510).
- ASoC: dapm: fixup dapm kcontrol widget (bsc#1051510).
- ASoC: dpcm: allow start or stop during pause for backend (bsc#1051510).
- ASoC: fix regwmask (bsc#1051510).
- ASoC: msm8916-wcd-digital: Reset RX interpolation path after use (bsc#1051510).
- ASoC: samsung: Prevent clk_get_rate() calls in atomic context (bsc#1111666).
- ASoC: topology: Check return value of pcm_new_ver (bsc#1051510).
- ASoC: topology: use name_prefix for new kcontrol (bsc#1051510).
- b43legacy: Fix case where channel status is corrupted (bsc#1051510).
- batman-adv: fix batadv_nc_random_weight_tq (git-fixes).
- batman-adv: Fix refcnt leak in batadv_show_throughput_override (git-fixes).
- batman-adv: Fix refcnt leak in batadv_store_throughput_override (git-fixes).
- batman-adv: Fix refcnt leak in batadv_v_ogm_process (git-fixes).
- bcache: avoid unnecessary btree nodes flushing in btree_flush_write() (git fixes (block drivers)).
- bcache: fix incorrect data type usage in btree_flush_write() (git fixes (block drivers)).
- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (git fixes (block drivers)).
- blk-mq: honor IO scheduler for multiqueue devices (bsc#1165478).
- blk-mq: simplify blk_mq_make_request() (bsc#1165478).
- block/drbd: delete invalid function drbd_md_mark_dirty_ (bsc#1171527).
- block: drbd: remove a stray unlock in __drbd_send_protocol() (bsc#1171599).
- block: fix busy device checking in blk_drop_partitions again (bsc#1171948).
- block: fix busy device checking in blk_drop_partitions (bsc#1171948).
- block: fix memleak of bio integrity data (git fixes (block drivers)).
- block: remove the bd_openers checks in blk_drop_partitions (bsc#1171948).
- bnxt_en: fix memory leaks in bnxt_dcbnl_ieee_getets() (networking-stable-20_03_28).
- bnxt_en: Reduce BNXT_MSIX_VEC_MAX value to supported CQs per PF (bsc#1104745).
- bnxt_en: reinitialize IRQs when MTU is modified (networking-stable-20_03_14).
- bnxt_en: Return error if bnxt_alloc_ctx_mem() fails (bsc#1104745 ).
- bnxt_en: Return error when allocating zero size context memory (bsc#1104745).
- bonding/alb: make sure arp header is pulled before accessing it (networking-stable-20_03_14).
- bpf: Fix sk_psock refcnt leak when receiving message (bsc#1083647).
- bpf: Forbid XADD on spilled pointers for unprivileged users (bsc#1083647).
- brcmfmac: abort and release host after error (bsc#1051510).
- BTRFS: fix deadlock with memory reclaim during scrub (bsc#1172127).
- BTRFS: fix log context list corruption after rename whiteout error (bsc#1172342).
- BTRFS: fix partial loss of prealloc extent past i_size after fsync (bsc#1172343).
- BTRFS: relocation: add error injection points for cancelling balance (bsc#1171417).
- BTRFS: relocation: Check cancel request after each data page read (bsc#1171417).
- BTRFS: relocation: Check cancel request after each extent found (bsc#1171417).
- BTRFS: relocation: Clear the DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417).
- BTRFS: relocation: Fix reloc root leakage and the NULL pointer reference caused by the leakage (bsc#1171417).
- BTRFS: relocation: Work around dead relocation stage loop (bsc#1171417).
- BTRFS: reloc: clear DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417 bsc#1160947 bsc#1172366).
- BTRFS: reloc: fix reloc root leak and NULL pointer dereference (bsc#1171417 bsc#1160947 bsc#1172366).
- BTRFS: setup a nofs context for memory allocation at btrfs_create_tree() (bsc#1172127).
- BTRFS: setup a nofs context for memory allocation at __btrfs_set_acl (bsc#1172127).
- BTRFS: use nofs context when initializing security xattrs to avoid deadlock (bsc#1172127).
- can: add missing attribute validation for termination (networking-stable-20_03_14).
- cdc-acm: close race betrween suspend() and acm_softint (git-fixes).
- cdc-acm: introduce a cool down (git-fixes).
- ceph: check if file lock exists before sending unlock request (bsc#1168789).
- ceph: demote quotarealm lookup warning to a debug message (bsc#1171692).
- ceph: fix double unlock in handle_cap_export() (bsc#1171694).
- ceph: fix endianness bug when handling MDS session feature bits (bsc#1171695).
- cgroup, netclassid: periodically release file_lock on classid updating (networking-stable-20_03_14).
- cifs: Allocate crypto structures on the fly for calculating signatures of incoming packets (bsc#1144333).
- cifs: Allocate encryption header through kmalloc (bsc#1144333).
- cifs: allow unlock flock and OFD lock across fork (bsc#1144333).
- cifs: check new file size when extending file by fallocate (bsc#1144333).
- cifs: cifspdu.h: Replace zero-length array with flexible-array member (bsc#1144333).
- cifs: clear PF_MEMALLOC before exiting demultiplex thread (bsc#1144333).
- cifs: do not share tcons with DFS (bsc#1144333).
- cifs: dump the session id and keys also for SMB2 sessions (bsc#1144333).
- cifs: ensure correct super block for DFS reconnect (bsc#1144333).
- cifs: Fix bug which the return value by asynchronous read is error (bsc#1144333).
- cifs: fix uninitialised lease_key in open_shroot() (bsc#1144333).
- cifs: improve read performance for page size 64KB &amp; cache=strict &amp; vers=2.1+ (bsc#1144333).
- cifs: Increment num_remote_opens stats counter even in case of smb2_query_dir_first (bsc#1144333).
- cifs: minor update to comments around the cifs_tcp_ses_lock mutex (bsc#1144333).
- cifs: protect updating server-&gt;dstaddr with a spinlock (bsc#1144333).
- cifs: smb2pdu.h: Replace zero-length array with flexible-array member (bsc#1144333).
- cifs: smbd: Calculate the correct maximum packet size for segmented SMBDirect send/receive (bsc#1144333).
- cifs: smbd: Check and extend sender credits in interrupt context (bsc#1144333).
- cifs: smbd: Check send queue size before posting a send (bsc#1144333).
- cifs: smbd: Do not schedule work to send immediate packet on every receive (bsc#1144333).
- cifs: smbd: Merge code to track pending packets (bsc#1144333).
- cifs: smbd: Properly process errors on ib_post_send (bsc#1144333).
- cifs: smbd: Update receive credits before sending and deal with credits roll back on failure before sending (bsc#1144333).
- cifs: Warn less noisily on default mount (bsc#1144333).
- clk: Add clk_hw_unregister_composite helper function definition (bsc#1051510).
- clk: imx6ull: use OSC clock during AXI rate change (bsc#1051510).
- clk: imx: make mux parent strings const (bsc#1051510).
- clk: mediatek: correct the clocks for MT2701 HDMI PHY module (bsc#1051510).
- clk: sunxi-ng: a64: Fix gate bit of DSI DPHY (bsc#1051510).
- clocksource/drivers/hyper-v: Set TSC clocksource as default w/ InvariantTSC (bsc#1170620, bsc#1170621).
- clocksource: dw_apb_timer_of: Fix missing clockevent timers (bsc#1051510).
- component: Silence bind error on -EPROBE_DEFER (bsc#1051510).
- coresight: do not use the BIT() macro in the UAPI header (git fixes (block drivers)).
- cpufreq: s3c64xx: Remove pointless NULL check in s3c64xx_cpufreq_driver_init (bsc#1051510).
- crypto: ccp - AES CFB mode is a stream cipher (git-fixes).
- crypto: ccp - Clean up and exit correctly on allocation failure (git-fixes).
- crypto: ccp - Cleanup misc_dev on sev_exit() (bsc#1114279).
- crypto: ccp - Cleanup sp_dev_master in psp_dev_destroy() (bsc#1114279).
- cxgb4: fix MPS index overwrite when setting MAC address (bsc#1127355).
- cxgb4: fix Txq restart check during backpressure (bsc#1127354 bsc#1127371).
- debugfs: Add debugfs_create_xul() for hexadecimal unsigned long (git-fixes).
- debugfs_lookup(): switch to lookup_one_len_unlocked() (bsc#1171979).
- devlink: fix return value after hitting end in region read (bsc#1109837).
- devlink: validate length of param values (bsc#1109837).
- devlink: validate length of region addr/len (bsc#1109837).
- dmaengine: dmatest: Fix iteration non-stop logic (bsc#1051510).
- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574).
- dm-raid1: fix invalid return value from dm_mirror (bsc#1172378).
- dm writecache: fix data corruption when reloading the target (git fixes (block drivers)).
- dm writecache: fix incorrect flush sequence when doing SSD mode commit (git fixes (block drivers)).
- dm writecache: verify watermark during resume (git fixes (block drivers)).
- dm zoned: fix invalid memory access (git fixes (block drivers)).
- dm zoned: reduce overhead of backing device checks (git fixes (block drivers)).
- dm zoned: remove duplicate nr_rnd_zones increase in dmz_init_zone() (git fixes (block drivers)).
- dm zoned: support zone sizes smaller than 128MiB (git fixes (block drivers)).
- dp83640: reverse arguments to list_add_tail (git-fixes).
- drivers: hv: Add a module description line to the hv_vmbus driver (bsc#1172249, bsc#1172251).
- drivers/net/ibmvnic: Update VNIC protocol version reporting (bsc#1065729).
- drivers: w1: add hwmon support structures (jsc#SLE-11048).
- drivers: w1: add hwmon temp support for w1_therm (jsc#SLE-11048).
- drivers: w1: refactor w1_slave_show to make the temp reading functionality separate (jsc#SLE-11048).
- drm: amd/acp: fix broken menu structure (bsc#1114279) 	* context changes
- drm/amdgpu: Correctly initialize thermal controller for GPUs with Powerplay table v0 (e.g Hawaii) (bsc#1111666).
- drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event (bsc#1111666).
- drm/amd/powerplay: force the trim of the mclk dpm_levels if OD is (bsc#1113956)
- drm/atomic: Take the atomic toys away from X (bsc#1112178) 	* context changes
- drm/crc: Actually allow to change the crc source (bsc#1114279) 	* offset changes
- drm/dp_mst: Fix clearing payload state on topology disable (bsc#1051510).
- drm/dp_mst: Reformat drm_dp_check_act_status() a bit (bsc#1051510).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (bsc#1114279)
- drm/etnaviv: fix perfmon domain interation (bsc#1113956)
- drm/etnaviv: rework perfmon query infrastructure (bsc#1112178)
- drm/i915: Apply Wa_1406680159:icl,ehl as an engine workaround (bsc#1112178) 	* rename gt/intel_workarounds.c to intel_workarounds.c 	* context changes
- drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of (bsc#1114279)
- drm/i915: HDCP: fix Ri prime check done during link check (bsc#1112178) 	* rename display/intel_hdmi.c to intel_hdmi.c 	* context changes
- drm/i915: properly sanity check batch_start_offset (bsc#1114279) 	* renamed display/intel_fbc.c -&gt; intel_fb.c 	* renamed gt/intel_rc6.c -&gt; intel_pm.c 	* context changes
- drm/meson: Delete an error message in meson_dw_hdmi_bind() (bsc#1051510).
- drm: NULL pointer dereference [null-pointer-deref] (CWE 476) problem (bsc#1114279)
- drm/qxl: qxl_release leak in qxl_draw_dirty_fb() (bsc#1051510).
- drm/qxl: qxl_release leak in qxl_hw_surface_alloc() (bsc#1051510).
- drm/qxl: qxl_release use after free (bsc#1051510).
- drm: Remove PageReserved manipulation from drm_pci_alloc (bsc#1114279) 	* offset changes
- drm/sun4i: dsi: Allow binding the host without a panel (bsc#1113956)
- drm/sun4i: dsi: Avoid hotplug race with DRM driver bind (bsc#1113956)
- drm/sun4i: dsi: Remove incorrect use of runtime PM (bsc#1113956) 	* context changes
- drm/sun4i: dsi: Remove unused drv from driver context (bsc#1113956) 	* context changes 	* keep include of sun4i_drv.h
- dump_stack: avoid the livelock of the dump_lock (git fixes (block drivers)).
- EDAC, sb_edac: Add support for systems with segmented PCI buses (bsc#1169525).
- ext4: do not zeroout extents beyond i_disksize (bsc#1167851).
- ext4: fix extent_status fragmentation for plain files (bsc#1171949).
- ext4: use non-movable memory for superblock readahead (bsc#1171952).
- fanotify: fix merging marks masks with FAN_ONDIR (bsc#1171679).
- fbcon: fix null-ptr-deref in fbcon_switch (bsc#1114279) 	* rename drivers/video/fbdev/core to drivers/video/console 	* context changes
- fib: add missing attribute validation for tun_id (networking-stable-20_03_14).
- firmware: qcom: scm: fix compilation error when disabled (bsc#1051510).
- fs/cifs: fix gcc warning in sid_to_id (bsc#1144333).
- fs/seq_file.c: simplify seq_file iteration code and interface (bsc#1170125).
- gpio: tegra: mask GPIO IRQs during IRQ shutdown (bsc#1051510).
- gre: fix uninit-value in __iptunnel_pull_header (networking-stable-20_03_14).
- HID: hid-input: clear unmapped usages (git-fixes).
- HID: Hyper-V: Add a module description line (bsc#1172249, bsc#1172251).
- HID: i2c-hid: add Trekstor Primebook C11B to descriptor override (git-fixes).
- HID: i2c-hid: override HID descriptors for certain devices (git-fixes).
- HID: multitouch: add eGalaxTouch P80H84 support (bsc#1051510).
- HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices (git-fixes).
- hrtimer: Annotate lockless access to timer-&gt;state (git fixes (block drivers)).
- hsr: add restart routine into hsr_get_node_list() (networking-stable-20_03_28).
- hsr: check protocol version in hsr_newlink() (networking-stable-20_04_17).
- hsr: fix general protection fault in hsr_addr_is_self() (networking-stable-20_03_28).
- hsr: set .netnsok flag (networking-stable-20_03_28).
- hsr: use rcu_read_lock() in hsr_get_node_{list/status}() (networking-stable-20_03_28).
- i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present (git-fixes).
- i2c: acpi: put device when verifying client fails (git-fixes).
- i2c: brcmstb: remove unused struct member (git-fixes).
- i2c: core: Allow empty id_table in ACPI case as well (git-fixes).
- i2c: core: decrease reference count of device node in i2c_unregister_device (git-fixes).
- i2c: dev: Fix the race between the release of i2c_dev and cdev (bsc#1051510).
- i2c: fix missing pm_runtime_put_sync in i2c_device_probe (git-fixes).
- i2c-hid: properly terminate i2c_hid_dmi_desc_override_table array (git-fixes).
- i2c: i801: Do not add ICH_RES_IO_SMI for the iTCO_wdt device (git-fixes).
- i2c: iproc: Stop advertising support of SMBUS quick cmd (git-fixes).
- i2c: isch: Remove unnecessary acpi.h include (git-fixes).
- i2c: mux: demux-pinctrl: Fix an error handling path in 'i2c_demux_pinctrl_probe()' (bsc#1051510).
- i2c: st: fix missing struct parameter description (bsc#1051510).
- IB/mlx5: Fix missing congestion control debugfs on rep rdma device (bsc#1103991).
- ibmvnic: Skip fatal error reset after passive init (bsc#1171078 ltc#184239).
- iio:ad7797: Use correct attribute_group (bsc#1051510).
- iio: adc: stm32-adc: fix device used to request dma (bsc#1051510).
- iio: adc: stm32-adc: fix sleep in atomic context (git-fixes).
- iio: adc: stm32-adc: Use dma_request_chan() instead dma_request_slave_channel() (bsc#1051510).
- iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()' (bsc#1051510).
- iio: sca3000: Remove an erroneous 'get_device()' (bsc#1051510).
- iio: xilinx-xadc: Fix ADC-B powerdown (bsc#1051510).
- iio: xilinx-xadc: Fix clearing interrupt when enabling trigger (bsc#1051510).
- iio: xilinx-xadc: Fix sequencer configuration for aux channels in simultaneous mode (bsc#1051510).
- ima: Fix return value of ima_write_policy() (git-fixes).
- Input: evdev - call input_flush_device() on release(), not flush() (bsc#1051510).
- Input: hyperv-keyboard - add module description (bsc#1172249, bsc#1172251).
- Input: i8042 - add Acer Aspire 5738z to nomux list (bsc#1051510).
- Input: i8042 - add ThinkPad S230u to i8042 reset list (bsc#1051510).
- Input: raydium_i2c_ts - use true and false for boolean values (bsc#1051510).
- Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() (bsc#1051510).
- Input: synaptics-rmi4 - really fix attn_data use-after-free (git-fixes).
- Input: usbtouchscreen - add support for BonXeon TP (bsc#1051510).
- Input: xpad - add custom init packet for Xbox One S controllers (bsc#1051510).
- iommu/amd: Call domain_flush_complete() in update_domain() (bsc#1172096).
- iommu/amd: Do not flush Device Table in iommu_map_page() (bsc#1172097).
- iommu/amd: Do not loop forever when trying to increase address space (bsc#1172098).
- iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system (bsc#1172099).
- iommu/amd: Fix over-read of ACPI UID from IVRS table (bsc#1172101).
- iommu/amd: Fix race in increase_address_space()/fetch_pte() (bsc#1172102).
- iommu/amd: Update Device Table in increase_address_space() (bsc#1172103).
- iommu: Fix reference count leak in iommu_group_alloc (bsc#1172397).
- ip6_tunnel: Allow rcv/xmit even if remote address is a local address (bsc#1166978).
- ipv4: fix a RCU-list lock in fib_triestat_seq_show (networking-stable-20_04_02).
- ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface (networking-stable-20_03_14).
- ipv6: do not auto-add link-local address to lag ports (networking-stable-20_04_09).
- ipv6: fix IPV6_ADDRFORM operation logic (bsc#1171662).
- ipv6: fix restrict IPV6_ADDRFORM operation (bsc#1171662).
- ipvlan: add cond_resched_rcu() while processing muticast backlog (networking-stable-20_03_14).
- ipvlan: do not deref eth hdr before checking it's set (networking-stable-20_03_14).
- ipvlan: do not use cond_resched_rcu() in ipvlan_process_multicast() (networking-stable-20_03_14).
- iwlwifi: pcie: actually release queue memory in TVQM (bsc#1051510).
- ixgbe: do not check firmware errors (bsc#1170284).
- kabi fix for early XHCI debug (git-fixes).
- kabi for for md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (git-fixes).
- kabi/severities: Do not track KVM internal symbols.
- kabi/severities: Ingnore get_dev_data() The function is internal to the AMD IOMMU driver and must not be called by any third party.
- kabi workaround for snd_rawmidi buffer_ref field addition (git-fixes).
- KEYS: reaching the keys quotas correctly (bsc#1051510).
- KVM: arm64: Change hyp_panic()s dependency on tpidr_el2 (bsc#1133021).
- KVM: arm64: Stop save/restoring host tpidr_el1 on VHE (bsc#1133021).
- KVM: Check validity of resolved slot when searching memslots (bsc#1172104).
- KVM: s390: vsie: Fix delivery of addressing exceptions (git-fixes).
- KVM: SVM: Fix potential memory leak in svm_cpu_init() (bsc#1171736).
- KVM x86: Extend AMD specific guest behavior to Hygon virtual CPUs (bsc#1152489).
- l2tp: Allow management of tunnels and session in user namespace (networking-stable-20_04_17).
- libata: Remove extra scsi_host_put() in ata_scsi_add_hosts() (bsc#1051510).
- libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set (bsc#1051510).
- lib: raid6: fix awk build warnings (git fixes (block drivers)).
- lib/raid6/test: fix build on distros whose /bin/sh is not bash (git fixes (block drivers)).
- lib/stackdepot.c: fix global out-of-bounds in stack_slabs (git fixes (block drivers)).
- locks: print unsigned ino in /proc/locks (bsc#1171951). 
- mac80211: add ieee80211_is_any_nullfunc() (bsc#1051510).
- mac80211_hwsim: Use kstrndup() in place of kasprintf() (bsc#1051510).
- mac80211: mesh: fix discovery timer re-arming issue / crash (bsc#1051510).
- macsec: avoid to set wrong mtu (bsc#1051510).
- macsec: restrict to ethernet devices (networking-stable-20_03_28).
- macvlan: add cond_resched() during multicast processing (networking-stable-20_03_14).
- macvlan: fix null dereference in macvlan_device_event() (bsc#1051510).
- md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (git-fixes).
- md/raid0: Fix an error message in raid0_make_request() (git fixes (block drivers)).
- md/raid10: prevent access of uninitialized resync_pages offset (git-fixes).
- media: dvb: return -EREMOTEIO on i2c transfer failure (bsc#1051510).
- media: platform: fcp: Set appropriate DMA parameters (bsc#1051510).
- media: ti-vpe: cal: fix disable_irqs to only the intended target (git-fixes).
- mei: release me_cl object reference (bsc#1051510).
- mlxsw: Fix some IS_ERR() vs NULL bugs (networking-stable-20_04_27).
- mlxsw: spectrum_flower: Do not stop at FLOW_ACTION_VLAN_MANGLE (networking-stable-20_04_09).
- mlxsw: spectrum_mr: Fix list iteration in error path (bsc#1112374).
- mmc: atmel-mci: Fix debugfs on 64-bit platforms (git-fixes).
- mmc: core: Check request type before completing the request (git-fixes).
- mmc: core: Fix recursive locking issue in CQE recovery path (git-fixes).
- mmc: cqhci: Avoid false 'cqhci: CQE stuck on' by not open-coding timeout loop (git-fixes).
- mmc: dw_mmc: Fix debugfs on 64-bit platforms (git-fixes).
- mmc: meson-gx: make sure the descriptor is stopped on errors (git-fixes).
- mmc: meson-gx: simplify interrupt handler (git-fixes).
- mmc: renesas_sdhi: limit block count to 16 bit for old revisions (git-fixes).
- mmc: sdhci-esdhc-imx: fix the mask for tuning start point (bsc#1051510).
- mmc: sdhci-msm: Clear tuning done flag while hs400 tuning (bsc#1051510).
- mmc: sdhci-of-at91: fix memleak on clk_get failure (git-fixes).
- mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers (bsc#1051510).
- mmc: sdhci-xenon: fix annoying 1.8V regulator warning (bsc#1051510).
- mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card() (bsc#1051510).
- mmc: tmio: fix access width of Block Count Register (git-fixes).
- mm: limit boost_watermark on small zones (git fixes (mm/pgalloc)).
- mm: thp: handle page cache THP correctly in PageTransCompoundMap (git fixes (block drivers)).
- mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer (bsc#1051510).
- mtd: spi-nor: cadence-quadspi: add a delay in write sequence (git-fixes).
- mtd: spi-nor: enable 4B opcodes for mx66l51235l (git-fixes).
- mwifiex: avoid -Wstringop-overflow warning (bsc#1051510).
- mwifiex: Fix memory corruption in dump_station (bsc#1051510).
- net: bcmgenet: correct per TX/RX ring statistics (networking-stable-20_04_27).
- net: dsa: b53: Fix ARL register definitions (networking-stable-20_04_27).
- net: dsa: b53: Rework ARL bin logic (networking-stable-20_04_27).
- net: dsa: bcm_sf2: Do not register slave MDIO bus with OF (networking-stable-20_04_09).
- net: dsa: bcm_sf2: Ensure correct sub-node is parsed (networking-stable-20_04_09).
- net: dsa: Fix duplicate frames flooded by learning (networking-stable-20_03_28).
- net: dsa: mv88e6xxx: fix lockup on warm boot (networking-stable-20_03_14).
- net/ethernet: add Google GVE driver (jsc#SLE-10538)
- net: fec: add phy_reset_after_clk_enable() support (git-fixes).
- net: fec: validate the new settings in fec_enet_set_coalesce() (networking-stable-20_03_14).
- net: fix race condition in __inet_lookup_established() (bsc#1151794).
- net: fq: add missing attribute validation for orphan mask (networking-stable-20_03_14).
- net: hns3: fix 'tc qdisc del' failed issue (bsc#1109837).
- net, ip_tunnel: fix interface lookup with no key (networking-stable-20_04_02).
- net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin (networking-stable-20_04_17).
- net: ipv6: do not consider routes via gateways for anycast address check (networking-stable-20_04_17).
- netlink: Use netlink header as base to calculate bad attribute offset (networking-stable-20_03_14).
- net: macsec: update SCI upon MAC address change (networking-stable-20_03_14).
- net: memcg: fix lockdep splat in inet_csk_accept() (networking-stable-20_03_14).
- net: memcg: late association of sock to memcg (networking-stable-20_03_14).
- net/mlx4_en: avoid indirect call in TX completion (networking-stable-20_04_27).
- net/mlx5: Add new fields to Port Type and Speed register (bsc#1171118).
- net/mlx5: Expose link speed directly (bsc#1171118).
- net/mlx5: Expose port speed when possible (bsc#1171118).
- net/mlx5: Fix failing fw tracer allocation on s390 (bsc#1103990 ).
- net: mvneta: Fix the case where the last poll did not process all rx (networking-stable-20_03_28).
- net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node (networking-stable-20_04_27).
- net/packet: tpacket_rcv: do not increment ring index on drop (networking-stable-20_03_14).
- net: qmi_wwan: add support for ASKEY WWHC050 (networking-stable-20_03_28).
- net: revert default NAPI poll timeout to 2 jiffies (networking-stable-20_04_17).
- net_sched: cls_route: remove the right filter from hashtable (networking-stable-20_03_28).
- net_sched: sch_skbprio: add message validation to skbprio_change() (bsc#1109837).
- net/x25: Fix x25_neigh refcnt leak when receiving frame (networking-stable-20_04_27).
- nfc: add missing attribute validation for SE API (networking-stable-20_03_14).
- nfc: add missing attribute validation for vendor subcommand (networking-stable-20_03_14).
- nfc: st21nfca: add missed kfree_skb() in an error path (bsc#1051510).
- nfp: abm: fix a memory leak bug (bsc#1109837).
- nfsd4: fix up replay_matches_cache() (git-fixes).
- nfsd: Ensure CLONE persists data and metadata changes to the target file (git-fixes).
- nfsd: fix delay timer on 32-bit architectures (git-fixes).
- nfsd: fix jiffies/time_t mixup in LRU list (git-fixes).
- NFS: Directory page cache pages need to be locked when read (git-fixes).
- nfsd: memory corruption in nfsd4_lock() (git-fixes).
- NFS: Do not call generic_error_remove_page() while holding locks (bsc#1170457).
- NFS: Fix memory leaks and corruption in readdir (git-fixes).
- NFS: Fix O_DIRECT accounting of number of bytes read/written (git-fixes).
- NFS: Fix potential posix_acl refcnt leak in nfs3_set_acl (git-fixes).
- NFS: fix racey wait in nfs_set_open_stateid_locked (bsc#1170592).
- NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O (git-fixes).
- NFS/pnfs: Fix pnfs_generic_prepare_to_resend_writes() (git-fixes).
- NFS: Revalidate the file size on a fatal write error (git-fixes).
- NFSv4.0: nfs4_do_fsinfo() should not do implicit lease renewals (git-fixes).
- NFSv4: Do not allow a cached open with a revoked delegation (git-fixes).
- NFSv4: Fix leak of clp-&gt;cl_acceptor string (git-fixes).
- NFSv4/pnfs: Return valid stateids in nfs_layout_find_inode_by_stateid() (git-fixes).
- NFSv4: try lease recovery on NFS4ERR_EXPIRED (git-fixes).
- NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn (git-fixes).
- nl802154: add missing attribute validation for dev_type (networking-stable-20_03_14).
- nl802154: add missing attribute validation (networking-stable-20_03_14).
- nvme-fc: print proper nvme-fc devloss_tmo value (bsc#1172391).
- objtool: Fix stack offset tracking for indirect CFAs (bsc#1169514).
- objtool: Fix switch table detection in .text.unlikely (bsc#1169514).
- objtool: Make BP scratch register warning more robust (bsc#1169514).
- padata: Remove broken queue flushing (git-fixes).
- Partially revert 'kfifo: fix kfifo_alloc() and kfifo_init()' (git fixes (block drivers)).
- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (bsc#1172201, bsc#1172202).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (bsc#1172201, bsc#1172202).
- pinctrl: baytrail: Enable pin configuration setting for GPIO chip (git-fixes).
- pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler (git-fixes).
- pinctrl: sunrisepoint: Fix PAD lock register offset for SPT-H (git-fixes).
- platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA (bsc#1051510).
- pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors (git-fixes).
- powerpc: Add attributes for setjmp/longjmp (bsc#1065729).
- powerpc/pci/of: Parse unassigned resources (bsc#1065729).
- powerpc/setup_64: Set cache-line-size based on cache-block-size (bsc#1065729).
- powerpc/sstep: Fix DS operand in ld encoding to appropriate value (bsc#1065729).
- r8152: check disconnect status after long sleep (networking-stable-20_03_14).
- raid6/ppc: Fix build for clang (git fixes (block drivers)).
- random: always use batched entropy for get_random_u{32,64} (bsc#1164871).
- rcu: locking and unlocking need to always be at least barriers (git fixes (block drivers)).
- Revert 'ALSA: hda/realtek: Fix pop noise on ALC225' (git-fixes).
- Revert 'drm/panel: simple: Add support for Sharp LQ150X1LG11 panels' (bsc#1114279) 	* offset changes
- Revert 'ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()' (bsc#1172221).
- Revert 'RDMA/cma: Simplify rdma_resolve_addr() error flow' (bsc#1103992).
- rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup() (bsc#1051510).
- s390/cpum_cf: Add new extended counters for IBM z15 (bsc#1169762 LTC#185291).
- s390/ftrace: fix potential crashes when switching tracers (git-fixes).
- s390/ism: fix error return code in ism_probe() (git-fixes).
- s390/pci: do not set affinity for floating irqs (git-fixes).
- s390/pci: Fix possible deadlock in recover_store() (bsc#1165183 LTC#184103).
- s390/pci: Recover handle in clp_set_pci_fn() (bsc#1165183 LTC#184103).
- scripts/decodecode: fix trapping instruction formatting (bsc#1065729).
- scripts/dtc: Remove redundant YYLOC global declaration (bsc#1160388).
- scsi: bnx2i: fix potential use after free (bsc#1171600).
- scsi: core: Handle drivers which set sg_tablesize to zero (bsc#1171601) This commit also required: &gt; scsi: core: avoid preallocating big SGL for data
- scsi: core: save/restore command resid for error handling (bsc#1171602).
- scsi: core: scsi_trace: Use get_unaligned_be*() (bsc#1171604).
- scsi: core: try to get module before removing device (bsc#1171605).
- scsi: csiostor: Adjust indentation in csio_device_reset (bsc#1171606).
- scsi: csiostor: Do not enable IRQs too early (bsc#1171607).
- scsi: esas2r: unlock on error in esas2r_nvram_read_direct() (bsc#1171608).
- scsi: fnic: fix invalid stack access (bsc#1171609).
- scsi: fnic: fix msix interrupt allocation (bsc#1171610).
- scsi: ibmvscsi: Fix WARN_ON during event pool release (bsc#1170791 ltc#185128).
- scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func (bsc#1171611).
- scsi: iscsi: Fix a potential deadlock in the timeout handler (bsc#1171612).
- scsi: iscsi: qla4xxx: fix double free in probe (bsc#1171613).
- scsi: lpfc: Change default queue allocation for reduced memory consumption (bsc#1164780).
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences (bsc#1171614).
- scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG (bsc#1171615).
- scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event (bsc#1164780).
- scsi: lpfc: Fix MDS Diagnostic Enablement definition (bsc#1164780).
- scsi: lpfc: Fix negation of else clause in lpfc_prep_node_fc4type (bsc#1164780).
- scsi: lpfc: Fix noderef and address space warnings (bsc#1164780).
- scsi: lpfc: Maintain atomic consistency of queue_claimed flag (bsc#1164780).
- scsi: lpfc: remove duplicate unloading checks (bsc#1164780).
- scsi: lpfc: Remove re-binding of nvme rport during registration (bsc#1164780).
- scsi: lpfc: Remove redundant initialization to variable rc (bsc#1164780).
- scsi: lpfc: Remove unnecessary lockdep_assert_held calls (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.1 (bsc#1164780).
- scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state (bsc#1171616).
- scsi: qla2xxx: add ring buffer for tracing debug logs (bsc#1157169).
- scsi: qla2xxx: check UNLOADING before posting async work (bsc#1157169).
- scsi: qla2xxx: Delete all sessions before unregister local nvme port (bsc#1157169).
- scsi: qla2xxx: Do not log message when reading port speed via sysfs (bsc#1157169).
- scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV (bsc#1157169).
- scsi: qla2xxx: Fix regression warnings (bsc#1157169).
- scsi: qla2xxx: Remove non functional code (bsc#1157169).
- scsi: qla2xxx: set UNLOADING before waiting for session deletion (bsc#1157169).
- scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free (bsc#1171617).
- scsi: qla4xxx: fix double free bug (bsc#1171618).
- scsi: sd: Clear sdkp-&gt;protection_type if disk is reformatted without PI (bsc#1171619).
- scsi: sg: add sg_remove_request in sg_common_write (bsc#1171620).
- scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) (bsc#1171621).
- scsi: ufs: change msleep to usleep_range (bsc#1171622).
- scsi: ufs: Clean up ufshcd_scale_clks() and clock scaling error out path (bsc#1171623).
- scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic (bsc#1171624).
- scsi: ufs: Fix ufshcd_probe_hba() reture value in case ufshcd_scsi_add_wlus() fails (bsc#1171625).
- scsi: ufs: Recheck bkops level if bkops is disabled (bsc#1171626).
- sctp: fix possibly using a bad saddr with a given dst (networking-stable-20_04_02).
- sctp: fix refcount bug in sctp_wfree (networking-stable-20_04_02).
- selftests/powerpc: Fix build errors in powerpc ptrace selftests (boo#1124278).
- Separate one more kABI fixup from the functional change:
- seq_file: fix problem when seeking mid-record (bsc#1170125).
- serial: uartps: Move the spinlock after the read of the tx empty (git-fixes).
- sfc: detach from cb_page in efx_copy_channel() (networking-stable-20_03_14).
- signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig (bsc#1172185).
- slcan: not call free_netdev before rtnl_unlock in slcan_open (networking-stable-20_03_28).
- slip: make slhc_compress() more robust against malicious packets (networking-stable-20_03_14).
- SMB3: Additional compression structures (bsc#1144333).
- SMB3: Add new compression flags (bsc#1144333).
- SMB3: change noisy error message to FYI (bsc#1144333).
- SMB3: enable swap on SMB3 mounts (bsc#1144333).
- SMB3: Minor cleanup of protocol definitions (bsc#1144333).
- SMB3: remove overly noisy debug line in signing errors (bsc#1144333).
- SMB3: smbdirect support can be configured by default (bsc#1144333).
- SMB3: use SMB2_SIGNATURE_SIZE define (bsc#1144333).
- spi: bcm63xx-hsspi: Really keep pll clk enabled (bsc#1051510).
- spi: bcm-qspi: when tx/rx buffer is NULL set to 0 (bsc#1051510).
- spi: dw: Add SPI Rx-done wait method to DMA-based transfer (bsc#1051510).
- spi: dw: Zero DMA Tx and Rx configurations on stack (bsc#1051510).
- spi: pxa2xx: Add CS control clock quirk (bsc#1051510).
- spi: qup: call spi_qup_pm_resume_runtime before suspending (bsc#1051510).
- spi/zynqmp: remove entry that causes a cs glitch (bsc#1051510).
- staging: comedi: dt2815: fix writing hi byte of analog output (bsc#1051510).
- staging: comedi: Fix comedi_device refcnt leak in comedi_open (bsc#1051510).
- staging: iio: ad2s1210: Fix SPI reading (bsc#1051510).
- supported.conf: Add br_netfilter to base (bsc#1169020).
- supported.conf: support w1 core and thermometer support
- svcrdma: Fix double svc_rdma_send_ctxt_put() in an error path (bsc#1103992).
- svcrdma: Fix leak of transport addresses (git-fixes).
- svcrdma: Fix trace point use-after-free race (bsc#1103992 ).
- taskstats: fix data-race (bsc#1172188).
- tcp: cache line align MAX_TCP_HEADER (networking-stable-20_04_27).
- tcp: repair: fix TCP_QUEUE_SEQ implementation (networking-stable-20_03_28).
- team: add missing attribute validation for array index (networking-stable-20_03_14).
- team: add missing attribute validation for port ifindex (networking-stable-20_03_14).
- team: fix hang in team_mode_get() (networking-stable-20_04_27).
- tools lib traceevent: Remove unneeded qsort and uses memmove instead (git-fixes).
- tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send() (bsc#1065729).
- tpm/tpm_tis: Free IRQ if probing fails (bsc#1082555).
- tun: Do not put_page() for all negative return values from XDP program (bsc#1109837).
- Update config files: Build w1 bus on arm64 (jsc#SLE-11048)
- USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair K70 RGB RAPIDFIRE (git-fixes).
- USB: cdc-acm: restore capability check order (git-fixes).
- USB: core: Fix misleading driver bug report (bsc#1051510).
- USB: dwc3: do not set gadget-&gt;is_otg flag (git-fixes).
- USB: dwc3: gadget: Do link recovery for SS and SSP (git-fixes).
- USB: early: Handle AMD's spec-compliant identifiers, too (git-fixes).
- USB: f_fs: Clear OS Extended descriptor counts to zero in ffs_data_reset() (git-fixes).
- USB: gadget: audio: Fix a missing error return value in audio_bind() (git-fixes).
- USB: gadget: composite: Inform controller driver of self-powered (git-fixes).
- USB: gadget: legacy: fix error return code in cdc_bind() (git-fixes).
- USB: gadget: legacy: fix error return code in gncm_bind() (git-fixes).
- usb: gadget: legacy: fix redundant initialization warnings (bsc#1051510).
- USB: gadget: net2272: Fix a memory leak in an error handling path in 'net2272_plat_probe()' (git-fixes).
- USB: gadget: udc: atmel: Fix vbus disconnect handling (git-fixes).
- USB: gadget: udc: atmel: Make some symbols static (git-fixes).
- USB: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete (git-fixes).
- USB: host: xhci-plat: keep runtime active when removing host (git-fixes).
- USB: hub: Fix handling of connect changes during sleep (git-fixes).
- usbnet: silence an unnecessary warning (bsc#1170770).
- USB: serial: garmin_gps: add sanity checking for data length (git-fixes).
- USB: serial: option: add BroadMobi BM806U (git-fixes).
- USB: serial: option: add support for ASKEY WWHC050 (git-fixes).
- USB: serial: option: add Wistron Neweb D19Q1 (git-fixes).
- USB: serial: qcserial: Add DW5816e support (git-fixes).
- USB: sisusbvga: Change port variable from signed to unsigned (git-fixes).
- usb-storage: Add unusual_devs entry for JMicron JMS566 (git-fixes).
- USB: uas: add quirk for LaCie 2Big Quadra (git-fixes).
- USB: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list (git-fixes).
- video: fbdev: sis: Remove unnecessary parentheses and commented code (bsc#1114279)
- video: fbdev: w100fb: Fix a potential double free (bsc#1051510).
- vrf: Check skb for XFRM_TRANSFORMED flag (networking-stable-20_04_27).
- vxlan: check return value of gro_cells_init() (networking-stable-20_03_28).
- w1: Add subsystem kernel public interface (jsc#SLE-11048).
- w1: Fix slave count on 1-Wire bus (resend) (jsc#SLE-11048).
- w1: keep balance of mutex locks and refcnts (jsc#SLE-11048).
- w1: use put_device() if device_register() fail (jsc#SLE-11048).
- watchdog: reset last_hw_keepalive time at start (git-fixes).
- wcn36xx: Fix error handling path in 'wcn36xx_probe()' (bsc#1051510).
- wil6210: remove reset file from debugfs (git-fixes).
- wimax/i2400m: Fix potential urb refcnt leak (bsc#1051510).
- workqueue: do not use wq_select_unbound_cpu() for bound works (bsc#1172130).
- x86/entry/64: Fix unwind hints in kernel exit path (bsc#1058115).
- x86/entry/64: Fix unwind hints in register clearing code (bsc#1058115).
- x86/entry/64: Fix unwind hints in rewind_stack_do_exit() (bsc#1058115).
- x86/entry/64: Fix unwind hints in __switch_to_asm() (bsc#1058115).
- x86/Hyper-V: Allow guests to enable InvariantTSC (bsc#1170621, bsc#1170620).
- x86/Hyper-V: Free hv_panic_page when fail to register kmsg dump (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash data in die() when panic_on_oops is set (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash register data or kmsg before running crash kernel (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash register data when sysctl_record_panic_msg is not set (bsc#1170617, bsc#1170618).
- x86: Hyper-V: report value of misc_features (git fixes).
- x86/Hyper-V: Trigger crash enlightenment only once during system crash (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Unload vmbus channel in hv panic callback (bsc#1170617, bsc#1170618).
- x86/kprobes: Avoid kretprobe recursion bug (bsc#1114279).
- x86/resctrl: Fix invalid attempt at removing the default resource group (git-fixes).
- x86/resctrl: Preserve CDP enable over CPU hotplug (bsc#1114279).
- x86/unwind/orc: Do not skip the first frame for inactive tasks (bsc#1058115).
- x86/unwind/orc: Fix error handling in __unwind_start() (bsc#1058115).
- x86/unwind/orc: Fix error path for bad ORC entry type (bsc#1058115).
- x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks (bsc#1058115).
- x86/unwind/orc: Prevent unwinding before ORC initialization (bsc#1058115).
- x86/unwind: Prevent false warnings for non-current tasks (bsc#1058115).
- xen/pci: reserve MCFG areas earlier (bsc#1170145).
- xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish (networking-stable-20_04_27).
- xfs: clear PF_MEMALLOC before exiting xfsaild thread (git-fixes).
- xfs: Correctly invert xfs_buftarg LRU isolation logic (git-fixes).
- xfs: do not ever return a stale pointer from __xfs_dir3_free_read (git-fixes).
- xprtrdma: Fix completion wait during device removal (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-10"/>
	<updated date="2020-06-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089895">SUSE bug 1089895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124278">SUSE bug 1124278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127355">SUSE bug 1127355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151794">SUSE bug 1151794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152489">SUSE bug 1152489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154824">SUSE bug 1154824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157169">SUSE bug 1157169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158265">SUSE bug 1158265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160388">SUSE bug 1160388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160947">SUSE bug 1160947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164871">SUSE bug 1164871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165183">SUSE bug 1165183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165478">SUSE bug 1165478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165741">SUSE bug 1165741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166969">SUSE bug 1166969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166978">SUSE bug 1166978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167574">SUSE bug 1167574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167851">SUSE bug 1167851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167867">SUSE bug 1167867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168332">SUSE bug 1168332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168670">SUSE bug 1168670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168789">SUSE bug 1168789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169020">SUSE bug 1169020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169525">SUSE bug 1169525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169762">SUSE bug 1169762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170056">SUSE bug 1170056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170125">SUSE bug 1170125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170145">SUSE bug 1170145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170284">SUSE bug 1170284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170345">SUSE bug 1170345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170457">SUSE bug 1170457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170522">SUSE bug 1170522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170592">SUSE bug 1170592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170617">SUSE bug 1170617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170618">SUSE bug 1170618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170620">SUSE bug 1170620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170621">SUSE bug 1170621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170770">SUSE bug 1170770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170778">SUSE bug 1170778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170791">SUSE bug 1170791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170901">SUSE bug 1170901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171078">SUSE bug 1171078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171098">SUSE bug 1171098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171118">SUSE bug 1171118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171189">SUSE bug 1171189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171191">SUSE bug 1171191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171195">SUSE bug 1171195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171202">SUSE bug 1171202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171205">SUSE bug 1171205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171214">SUSE bug 1171214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171217">SUSE bug 1171217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171218">SUSE bug 1171218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171219">SUSE bug 1171219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171220">SUSE bug 1171220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171244">SUSE bug 1171244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171293">SUSE bug 1171293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171417">SUSE bug 1171417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171527">SUSE bug 1171527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171599">SUSE bug 1171599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171600">SUSE bug 1171600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171601">SUSE bug 1171601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171602">SUSE bug 1171602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171604">SUSE bug 1171604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171605">SUSE bug 1171605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171606">SUSE bug 1171606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171607">SUSE bug 1171607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171608">SUSE bug 1171608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171609">SUSE bug 1171609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171610">SUSE bug 1171610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171611">SUSE bug 1171611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171612">SUSE bug 1171612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171613">SUSE bug 1171613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171614">SUSE bug 1171614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171615">SUSE bug 1171615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171616">SUSE bug 1171616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171617">SUSE bug 1171617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171618">SUSE bug 1171618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171619">SUSE bug 1171619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171620">SUSE bug 1171620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171621">SUSE bug 1171621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171622">SUSE bug 1171622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171623">SUSE bug 1171623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171624">SUSE bug 1171624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171625">SUSE bug 1171625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171626">SUSE bug 1171626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171662">SUSE bug 1171662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171679">SUSE bug 1171679</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171691">SUSE bug 1171691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171692">SUSE bug 1171692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171694">SUSE bug 1171694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171695">SUSE bug 1171695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171736">SUSE bug 1171736</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171817">SUSE bug 1171817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171948">SUSE bug 1171948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171949">SUSE bug 1171949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171951">SUSE bug 1171951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171952">SUSE bug 1171952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171979">SUSE bug 1171979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171982">SUSE bug 1171982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171983">SUSE bug 1171983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172017">SUSE bug 1172017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172096">SUSE bug 1172096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172097">SUSE bug 1172097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172098">SUSE bug 1172098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172099">SUSE bug 1172099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172101">SUSE bug 1172101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172102">SUSE bug 1172102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172103">SUSE bug 1172103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172104">SUSE bug 1172104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172127">SUSE bug 1172127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172130">SUSE bug 1172130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172185">SUSE bug 1172185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172188">SUSE bug 1172188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172199">SUSE bug 1172199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172201">SUSE bug 1172201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172202">SUSE bug 1172202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172221">SUSE bug 1172221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172249">SUSE bug 1172249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172251">SUSE bug 1172251</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172317">SUSE bug 1172317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172342">SUSE bug 1172342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172343">SUSE bug 1172343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172344">SUSE bug 1172344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172366">SUSE bug 1172366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172378">SUSE bug 1172378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172391">SUSE bug 1172391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172397">SUSE bug 1172397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172453">SUSE bug 1172453</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19462/">CVE-2019-19462</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20806/">CVE-2019-20806</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20812/">CVE-2019-20812</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9455/">CVE-2019-9455</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10690/">CVE-2020-10690</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10711/">CVE-2020-10711</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10720/">CVE-2020-10720</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10732/">CVE-2020-10732</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-10751/">CVE-2020-10751</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12114/">CVE-2020-12114</cve>
	<cve impact="low" cvss3="1.8/CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12464/">CVE-2020-12464</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12652/">CVE-2020-12652</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12655/">CVE-2020-12655</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12656/">CVE-2020-12656</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12657/">CVE-2020-12657</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12659/">CVE-2020-12659</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12768/">CVE-2020-12768</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12769/">CVE-2020-12769</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13143/">CVE-2020-13143</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497454" comment="kernel-default-livepatch-4.12.14-197.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497455" comment="kernel-default-livepatch-devel-4.12.14-197.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497456" comment="kernel-livepatch-4_12_14-197_45-default-1-3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138378" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1160467" ref_url="https://bugzilla.suse.com/1160467" source="BUGZILLA"/>
		<reference ref_id="1160468" ref_url="https://bugzilla.suse.com/1160468" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896/" source="CVE"/>
		<reference ref_id="CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0204-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006397.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_29 fixes several issues.

The following security issues were fixed:

- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bsc#1157157).
- CVE-2019-14897: A stack-based buffer overflow was found in the  Marvell WiFi chip driver. An attacker was able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bsc#1157155).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-22"/>
	<updated date="2020-01-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160467">SUSE bug 1160467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160468">SUSE bug 1160468</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720971" comment="kernel-default 4.12.14-197.29 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719190" comment="kernel-livepatch-4_12_14-197_29-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497457" comment="kernel-livepatch-4_12_14-197_29-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138379" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1103203" ref_url="https://bugzilla.suse.com/1103203" source="BUGZILLA"/>
		<reference ref_id="1160467" ref_url="https://bugzilla.suse.com/1160467" source="BUGZILLA"/>
		<reference ref_id="1160468" ref_url="https://bugzilla.suse.com/1160468" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896/" source="CVE"/>
		<reference ref_id="CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-197_26 fixes several issues.

The following security issues were fixed:

- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bsc#1157157).
- CVE-2019-14897: A stack-based buffer overflow was found in the  Marvell WiFi chip driver. An attacker was able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bsc#1157155).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-22"/>
	<updated date="2020-01-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1103203">SUSE bug 1103203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160467">SUSE bug 1160467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160468">SUSE bug 1160468</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720972" comment="kernel-default 4.12.14-197.26 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719191" comment="kernel-livepatch-4_12_14-197_26-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497458" comment="kernel-livepatch-4_12_14-197_26-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138380" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1103203" ref_url="https://bugzilla.suse.com/1103203" source="BUGZILLA"/>
		<reference ref_id="1160467" ref_url="https://bugzilla.suse.com/1160467" source="BUGZILLA"/>
		<reference ref_id="1160468" ref_url="https://bugzilla.suse.com/1160468" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896/" source="CVE"/>
		<reference ref_id="CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-197_21 fixes several issues.

The following security issues were fixed:

- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bsc#1157157).
- CVE-2019-14897: A stack-based buffer overflow was found in the  Marvell WiFi chip driver. An attacker was able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bsc#1157155).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-22"/>
	<updated date="2020-01-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1103203">SUSE bug 1103203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160467">SUSE bug 1160467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160468">SUSE bug 1160468</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720966" comment="kernel-default 4.12.14-197.21 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719185" comment="kernel-livepatch-4_12_14-197_21-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497459" comment="kernel-livepatch-4_12_14-197_21-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138381" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1103203" ref_url="https://bugzilla.suse.com/1103203" source="BUGZILLA"/>
		<reference ref_id="1160467" ref_url="https://bugzilla.suse.com/1160467" source="BUGZILLA"/>
		<reference ref_id="1160468" ref_url="https://bugzilla.suse.com/1160468" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896/" source="CVE"/>
		<reference ref_id="CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-197_18 fixes several issues.

The following security issues were fixed:

- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bsc#1157157).
- CVE-2019-14897: A stack-based buffer overflow was found in the  Marvell WiFi chip driver. An attacker was able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bsc#1157155).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-22"/>
	<updated date="2020-01-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1103203">SUSE bug 1103203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160467">SUSE bug 1160467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160468">SUSE bug 1160468</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720967" comment="kernel-default 4.12.14-197.18 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719186" comment="kernel-livepatch-4_12_14-197_18-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497460" comment="kernel-livepatch-4_12_14-197_18-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138382" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171746" ref_url="https://bugzilla.suse.com/1171746" source="BUGZILLA"/>
		<reference ref_id="1172437" ref_url="https://bugzilla.suse.com/1172437" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1646-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006970.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_40 fixes several issues.

The following security issues were fixed:

- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171746">SUSE bug 1171746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172437">SUSE bug 1172437</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720969" comment="kernel-default 4.12.14-197.40 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719188" comment="kernel-livepatch-4_12_14-197_40-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497461" comment="kernel-livepatch-4_12_14-197_40-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138383" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171746" ref_url="https://bugzilla.suse.com/1171746" source="BUGZILLA"/>
		<reference ref_id="1172437" ref_url="https://bugzilla.suse.com/1172437" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1646-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006970.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_37 fixes several issues.

The following security issues were fixed:

- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171746">SUSE bug 1171746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172437">SUSE bug 1172437</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720968" comment="kernel-default 4.12.14-197.37 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719187" comment="kernel-livepatch-4_12_14-197_37-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497462" comment="kernel-livepatch-4_12_14-197_37-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138384" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171746" ref_url="https://bugzilla.suse.com/1171746" source="BUGZILLA"/>
		<reference ref_id="1172437" ref_url="https://bugzilla.suse.com/1172437" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1646-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006970.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_34 fixes several issues.

The following security issues were fixed:

- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171746">SUSE bug 1171746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172437">SUSE bug 1172437</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720970" comment="kernel-default 4.12.14-197.34 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719189" comment="kernel-livepatch-4_12_14-197_34-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497463" comment="kernel-livepatch-4_12_14-197_34-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138385" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171746" ref_url="https://bugzilla.suse.com/1171746" source="BUGZILLA"/>
		<reference ref_id="1172437" ref_url="https://bugzilla.suse.com/1172437" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1646-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006970.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_29 fixes several issues.

The following security issues were fixed:

- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171746">SUSE bug 1171746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172437">SUSE bug 1172437</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720971" comment="kernel-default 4.12.14-197.29 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719190" comment="kernel-livepatch-4_12_14-197_29-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497464" comment="kernel-livepatch-4_12_14-197_29-default-5-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138386" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171746" ref_url="https://bugzilla.suse.com/1171746" source="BUGZILLA"/>
		<reference ref_id="1172437" ref_url="https://bugzilla.suse.com/1172437" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1646-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006970.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_26 fixes several issues.

The following security issues were fixed:

- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171746">SUSE bug 1171746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172437">SUSE bug 1172437</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720972" comment="kernel-default 4.12.14-197.26 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719191" comment="kernel-livepatch-4_12_14-197_26-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497465" comment="kernel-livepatch-4_12_14-197_26-default-5-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138387" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1103203" ref_url="https://bugzilla.suse.com/1103203" source="BUGZILLA"/>
		<reference ref_id="1160467" ref_url="https://bugzilla.suse.com/1160467" source="BUGZILLA"/>
		<reference ref_id="1160468" ref_url="https://bugzilla.suse.com/1160468" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896/" source="CVE"/>
		<reference ref_id="CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-197_15 fixes several issues.

The following security issues were fixed:

- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bsc#1157157).
- CVE-2019-14897: A stack-based buffer overflow was found in the  Marvell WiFi chip driver. An attacker was able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bsc#1157155).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-22"/>
	<updated date="2020-01-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1103203">SUSE bug 1103203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160467">SUSE bug 1160467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160468">SUSE bug 1160468</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720965" comment="kernel-default 4.12.14-197.15 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719184" comment="kernel-livepatch-4_12_14-197_15-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497466" comment="kernel-livepatch-4_12_14-197_15-default-5-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138388" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171746" ref_url="https://bugzilla.suse.com/1171746" source="BUGZILLA"/>
		<reference ref_id="1172437" ref_url="https://bugzilla.suse.com/1172437" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1646-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006970.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_21 fixes several issues.

The following security issues were fixed:

- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171746">SUSE bug 1171746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172437">SUSE bug 1172437</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720966" comment="kernel-default 4.12.14-197.21 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719185" comment="kernel-livepatch-4_12_14-197_21-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497467" comment="kernel-livepatch-4_12_14-197_21-default-7-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138389" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171746" ref_url="https://bugzilla.suse.com/1171746" source="BUGZILLA"/>
		<reference ref_id="1172437" ref_url="https://bugzilla.suse.com/1172437" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1646-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006970.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_18 fixes several issues.

The following security issues were fixed:

- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171746">SUSE bug 1171746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172437">SUSE bug 1172437</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720967" comment="kernel-default 4.12.14-197.18 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719186" comment="kernel-livepatch-4_12_14-197_18-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497468" comment="kernel-livepatch-4_12_14-197_18-default-7-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138390" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171746" ref_url="https://bugzilla.suse.com/1171746" source="BUGZILLA"/>
		<reference ref_id="1172140" ref_url="https://bugzilla.suse.com/1172140" source="BUGZILLA"/>
		<reference ref_id="1172437" ref_url="https://bugzilla.suse.com/1172437" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2019-15666" ref_url="https://www.suse.com/security/cve/CVE-2019-15666/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006966.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_15 fixes several issues.

The following security issues were fixed:

- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).
- CVE-2019-15666: Fixed an out of bounds read __xfrm_policy_unlink, which could have led to denial of service (bsc#1172140).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171746">SUSE bug 1171746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172140">SUSE bug 1172140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172437">SUSE bug 1172437</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15666/">CVE-2019-15666</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720965" comment="kernel-default 4.12.14-197.15 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719184" comment="kernel-livepatch-4_12_14-197_15-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497469" comment="kernel-livepatch-4_12_14-197_15-default-8-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138391" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1171746" ref_url="https://bugzilla.suse.com/1171746" source="BUGZILLA"/>
		<reference ref_id="1172140" ref_url="https://bugzilla.suse.com/1172140" source="BUGZILLA"/>
		<reference ref_id="1172437" ref_url="https://bugzilla.suse.com/1172437" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2019-15666" ref_url="https://www.suse.com/security/cve/CVE-2019-15666/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006966.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_10 fixes several issues.

The following security issues were fixed:

- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).
- CVE-2019-15666: Fixed an out of bounds read __xfrm_policy_unlink, which could have led to denial of service (bsc#1172140).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171746">SUSE bug 1171746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172140">SUSE bug 1172140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172437">SUSE bug 1172437</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15666/">CVE-2019-15666</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720964" comment="kernel-default 4.12.14-197.10 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719183" comment="kernel-livepatch-4_12_14-197_10-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497470" comment="kernel-livepatch-4_12_14-197_10-default-8-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138392" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1144502" ref_url="https://bugzilla.suse.com/1144502" source="BUGZILLA"/>
		<reference ref_id="1171746" ref_url="https://bugzilla.suse.com/1171746" source="BUGZILLA"/>
		<reference ref_id="1172140" ref_url="https://bugzilla.suse.com/1172140" source="BUGZILLA"/>
		<reference ref_id="1172437" ref_url="https://bugzilla.suse.com/1172437" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2019-15666" ref_url="https://www.suse.com/security/cve/CVE-2019-15666/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="CVE-2020-13233" ref_url="https://www.suse.com/security/cve/CVE-2020-13233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006977.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_7 fixes several issues.

The following security issues were fixed:

- CVE-2019-13233: Fixed a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bsc#1144502).
- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).
- CVE-2019-15666: Fixed an out of bounds read __xfrm_policy_unlink, which could have led to denial of service (bsc#1172140).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144502">SUSE bug 1144502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171746">SUSE bug 1171746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172140">SUSE bug 1172140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172437">SUSE bug 1172437</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15666/">CVE-2019-15666</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2020-13233/">CVE-2020-13233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720963" comment="kernel-default 4.12.14-197.7 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719182" comment="kernel-livepatch-4_12_14-197_7-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497471" comment="kernel-livepatch-4_12_14-197_7-default-10-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138393" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1144502" ref_url="https://bugzilla.suse.com/1144502" source="BUGZILLA"/>
		<reference ref_id="1171746" ref_url="https://bugzilla.suse.com/1171746" source="BUGZILLA"/>
		<reference ref_id="1172140" ref_url="https://bugzilla.suse.com/1172140" source="BUGZILLA"/>
		<reference ref_id="1172437" ref_url="https://bugzilla.suse.com/1172437" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2019-15666" ref_url="https://www.suse.com/security/cve/CVE-2019-15666/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="CVE-2020-13233" ref_url="https://www.suse.com/security/cve/CVE-2020-13233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006977.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_4 fixes several issues.

The following security issues were fixed:

- CVE-2019-13233: Fixed a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bsc#1144502).
- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).
- CVE-2019-15666: Fixed an out of bounds read __xfrm_policy_unlink, which could have led to denial of service (bsc#1172140).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144502">SUSE bug 1144502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171746">SUSE bug 1171746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172140">SUSE bug 1172140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172437">SUSE bug 1172437</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15666/">CVE-2019-15666</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2020-13233/">CVE-2020-13233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720962" comment="kernel-default 4.12.14-197.4 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719181" comment="kernel-livepatch-4_12_14-197_4-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497472" comment="kernel-livepatch-4_12_14-197_4-default-11-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138394" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1144502" ref_url="https://bugzilla.suse.com/1144502" source="BUGZILLA"/>
		<reference ref_id="1171746" ref_url="https://bugzilla.suse.com/1171746" source="BUGZILLA"/>
		<reference ref_id="1172140" ref_url="https://bugzilla.suse.com/1172140" source="BUGZILLA"/>
		<reference ref_id="1172437" ref_url="https://bugzilla.suse.com/1172437" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2019-15666" ref_url="https://www.suse.com/security/cve/CVE-2019-15666/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="CVE-2020-13233" ref_url="https://www.suse.com/security/cve/CVE-2020-13233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1656-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006977.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-195 fixes several issues.

The following security issues were fixed:

- CVE-2019-13233: Fixed a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bsc#1144502).
- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).
- CVE-2019-15666: Fixed an out of bounds read __xfrm_policy_unlink, which could have led to denial of service (bsc#1172140).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1171746).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144502">SUSE bug 1144502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171746">SUSE bug 1171746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172140">SUSE bug 1172140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172437">SUSE bug 1172437</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15666/">CVE-2019-15666</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2020-13233/">CVE-2020-13233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720961" comment="kernel-default 4.12.14-195 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719180" comment="kernel-livepatch-4_12_14-195-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497473" comment="kernel-livepatch-4_12_14-195-default-12-34.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138395" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1103203" ref_url="https://bugzilla.suse.com/1103203" source="BUGZILLA"/>
		<reference ref_id="1160467" ref_url="https://bugzilla.suse.com/1160467" source="BUGZILLA"/>
		<reference ref_id="1160468" ref_url="https://bugzilla.suse.com/1160468" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896/" source="CVE"/>
		<reference ref_id="CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-197_10 fixes several issues.

The following security issues were fixed:

- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bsc#1157157).
- CVE-2019-14897: A stack-based buffer overflow was found in the  Marvell WiFi chip driver. An attacker was able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bsc#1157155).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-22"/>
	<updated date="2020-01-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1103203">SUSE bug 1103203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160467">SUSE bug 1160467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160468">SUSE bug 1160468</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720964" comment="kernel-default 4.12.14-197.10 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719183" comment="kernel-livepatch-4_12_14-197_10-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497474" comment="kernel-livepatch-4_12_14-197_10-default-5-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138396" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1103203" ref_url="https://bugzilla.suse.com/1103203" source="BUGZILLA"/>
		<reference ref_id="1160467" ref_url="https://bugzilla.suse.com/1160467" source="BUGZILLA"/>
		<reference ref_id="1160468" ref_url="https://bugzilla.suse.com/1160468" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896/" source="CVE"/>
		<reference ref_id="CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-197_7 fixes several issues.

The following security issues were fixed:

- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bsc#1157157).
- CVE-2019-14897: A stack-based buffer overflow was found in the  Marvell WiFi chip driver. An attacker was able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bsc#1157155).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-22"/>
	<updated date="2020-01-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1103203">SUSE bug 1103203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160467">SUSE bug 1160467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160468">SUSE bug 1160468</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720963" comment="kernel-default 4.12.14-197.7 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719182" comment="kernel-livepatch-4_12_14-197_7-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497475" comment="kernel-livepatch-4_12_14-197_7-default-7-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138397" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1103203" ref_url="https://bugzilla.suse.com/1103203" source="BUGZILLA"/>
		<reference ref_id="1160467" ref_url="https://bugzilla.suse.com/1160467" source="BUGZILLA"/>
		<reference ref_id="1160468" ref_url="https://bugzilla.suse.com/1160468" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896/" source="CVE"/>
		<reference ref_id="CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-197_4 fixes several issues.

The following security issues were fixed:

- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bsc#1157157).
- CVE-2019-14897: A stack-based buffer overflow was found in the  Marvell WiFi chip driver. An attacker was able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bsc#1157155).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-22"/>
	<updated date="2020-01-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1103203">SUSE bug 1103203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160467">SUSE bug 1160467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160468">SUSE bug 1160468</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720962" comment="kernel-default 4.12.14-197.4 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719181" comment="kernel-livepatch-4_12_14-197_4-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497476" comment="kernel-livepatch-4_12_14-197_4-default-8-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138398" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1103203" ref_url="https://bugzilla.suse.com/1103203" source="BUGZILLA"/>
		<reference ref_id="1160467" ref_url="https://bugzilla.suse.com/1160467" source="BUGZILLA"/>
		<reference ref_id="1160468" ref_url="https://bugzilla.suse.com/1160468" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896/" source="CVE"/>
		<reference ref_id="CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-195 fixes several issues.

The following security issues were fixed:

- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bsc#1157157).
- CVE-2019-14897: A stack-based buffer overflow was found in the  Marvell WiFi chip driver. An attacker was able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bsc#1157155).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-22"/>
	<updated date="2020-01-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1103203">SUSE bug 1103203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160467">SUSE bug 1160467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160468">SUSE bug 1160468</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720961" comment="kernel-default 4.12.14-195 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719180" comment="kernel-livepatch-4_12_14-195-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497477" comment="kernel-livepatch-4_12_14-195-default-9-25.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138399" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1150660" ref_url="https://bugzilla.suse.com/1150660" source="BUGZILLA"/>
		<reference ref_id="1151927" ref_url="https://bugzilla.suse.com/1151927" source="BUGZILLA"/>
		<reference ref_id="1152107" ref_url="https://bugzilla.suse.com/1152107" source="BUGZILLA"/>
		<reference ref_id="1152624" ref_url="https://bugzilla.suse.com/1152624" source="BUGZILLA"/>
		<reference ref_id="1158983" ref_url="https://bugzilla.suse.com/1158983" source="BUGZILLA"/>
		<reference ref_id="1159058" ref_url="https://bugzilla.suse.com/1159058" source="BUGZILLA"/>
		<reference ref_id="1161016" ref_url="https://bugzilla.suse.com/1161016" source="BUGZILLA"/>
		<reference ref_id="1162002" ref_url="https://bugzilla.suse.com/1162002" source="BUGZILLA"/>
		<reference ref_id="1162063" ref_url="https://bugzilla.suse.com/1162063" source="BUGZILLA"/>
		<reference ref_id="1163309" ref_url="https://bugzilla.suse.com/1163309" source="BUGZILLA"/>
		<reference ref_id="1166985" ref_url="https://bugzilla.suse.com/1166985" source="BUGZILLA"/>
		<reference ref_id="1167104" ref_url="https://bugzilla.suse.com/1167104" source="BUGZILLA"/>
		<reference ref_id="1168081" ref_url="https://bugzilla.suse.com/1168081" source="BUGZILLA"/>
		<reference ref_id="1168959" ref_url="https://bugzilla.suse.com/1168959" source="BUGZILLA"/>
		<reference ref_id="1169194" ref_url="https://bugzilla.suse.com/1169194" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169771" ref_url="https://bugzilla.suse.com/1169771" source="BUGZILLA"/>
		<reference ref_id="1169795" ref_url="https://bugzilla.suse.com/1169795" source="BUGZILLA"/>
		<reference ref_id="1170011" ref_url="https://bugzilla.suse.com/1170011" source="BUGZILLA"/>
		<reference ref_id="1170442" ref_url="https://bugzilla.suse.com/1170442" source="BUGZILLA"/>
		<reference ref_id="1170592" ref_url="https://bugzilla.suse.com/1170592" source="BUGZILLA"/>
		<reference ref_id="1170617" ref_url="https://bugzilla.suse.com/1170617" source="BUGZILLA"/>
		<reference ref_id="1170618" ref_url="https://bugzilla.suse.com/1170618" source="BUGZILLA"/>
		<reference ref_id="1171124" ref_url="https://bugzilla.suse.com/1171124" source="BUGZILLA"/>
		<reference ref_id="1171424" ref_url="https://bugzilla.suse.com/1171424" source="BUGZILLA"/>
		<reference ref_id="1171529" ref_url="https://bugzilla.suse.com/1171529" source="BUGZILLA"/>
		<reference ref_id="1171530" ref_url="https://bugzilla.suse.com/1171530" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1171732" ref_url="https://bugzilla.suse.com/1171732" source="BUGZILLA"/>
		<reference ref_id="1171739" ref_url="https://bugzilla.suse.com/1171739" source="BUGZILLA"/>
		<reference ref_id="1171743" ref_url="https://bugzilla.suse.com/1171743" source="BUGZILLA"/>
		<reference ref_id="1171753" ref_url="https://bugzilla.suse.com/1171753" source="BUGZILLA"/>
		<reference ref_id="1171759" ref_url="https://bugzilla.suse.com/1171759" source="BUGZILLA"/>
		<reference ref_id="1171835" ref_url="https://bugzilla.suse.com/1171835" source="BUGZILLA"/>
		<reference ref_id="1171841" ref_url="https://bugzilla.suse.com/1171841" source="BUGZILLA"/>
		<reference ref_id="1171868" ref_url="https://bugzilla.suse.com/1171868" source="BUGZILLA"/>
		<reference ref_id="1171904" ref_url="https://bugzilla.suse.com/1171904" source="BUGZILLA"/>
		<reference ref_id="1172247" ref_url="https://bugzilla.suse.com/1172247" source="BUGZILLA"/>
		<reference ref_id="1172257" ref_url="https://bugzilla.suse.com/1172257" source="BUGZILLA"/>
		<reference ref_id="1172344" ref_url="https://bugzilla.suse.com/1172344" source="BUGZILLA"/>
		<reference ref_id="1172458" ref_url="https://bugzilla.suse.com/1172458" source="BUGZILLA"/>
		<reference ref_id="1172484" ref_url="https://bugzilla.suse.com/1172484" source="BUGZILLA"/>
		<reference ref_id="1172537" ref_url="https://bugzilla.suse.com/1172537" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1172687" ref_url="https://bugzilla.suse.com/1172687" source="BUGZILLA"/>
		<reference ref_id="1172719" ref_url="https://bugzilla.suse.com/1172719" source="BUGZILLA"/>
		<reference ref_id="1172759" ref_url="https://bugzilla.suse.com/1172759" source="BUGZILLA"/>
		<reference ref_id="1172775" ref_url="https://bugzilla.suse.com/1172775" source="BUGZILLA"/>
		<reference ref_id="1172781" ref_url="https://bugzilla.suse.com/1172781" source="BUGZILLA"/>
		<reference ref_id="1172782" ref_url="https://bugzilla.suse.com/1172782" source="BUGZILLA"/>
		<reference ref_id="1172783" ref_url="https://bugzilla.suse.com/1172783" source="BUGZILLA"/>
		<reference ref_id="1172871" ref_url="https://bugzilla.suse.com/1172871" source="BUGZILLA"/>
		<reference ref_id="1172872" ref_url="https://bugzilla.suse.com/1172872" source="BUGZILLA"/>
		<reference ref_id="1172999" ref_url="https://bugzilla.suse.com/1172999" source="BUGZILLA"/>
		<reference ref_id="1173060" ref_url="https://bugzilla.suse.com/1173060" source="BUGZILLA"/>
		<reference ref_id="1173074" ref_url="https://bugzilla.suse.com/1173074" source="BUGZILLA"/>
		<reference ref_id="1173146" ref_url="https://bugzilla.suse.com/1173146" source="BUGZILLA"/>
		<reference ref_id="1173265" ref_url="https://bugzilla.suse.com/1173265" source="BUGZILLA"/>
		<reference ref_id="1173280" ref_url="https://bugzilla.suse.com/1173280" source="BUGZILLA"/>
		<reference ref_id="1173284" ref_url="https://bugzilla.suse.com/1173284" source="BUGZILLA"/>
		<reference ref_id="1173428" ref_url="https://bugzilla.suse.com/1173428" source="BUGZILLA"/>
		<reference ref_id="1173514" ref_url="https://bugzilla.suse.com/1173514" source="BUGZILLA"/>
		<reference ref_id="1173567" ref_url="https://bugzilla.suse.com/1173567" source="BUGZILLA"/>
		<reference ref_id="1173573" ref_url="https://bugzilla.suse.com/1173573" source="BUGZILLA"/>
		<reference ref_id="1173659" ref_url="https://bugzilla.suse.com/1173659" source="BUGZILLA"/>
		<reference ref_id="1173746" ref_url="https://bugzilla.suse.com/1173746" source="BUGZILLA"/>
		<reference ref_id="1173818" ref_url="https://bugzilla.suse.com/1173818" source="BUGZILLA"/>
		<reference ref_id="1173820" ref_url="https://bugzilla.suse.com/1173820" source="BUGZILLA"/>
		<reference ref_id="1173825" ref_url="https://bugzilla.suse.com/1173825" source="BUGZILLA"/>
		<reference ref_id="1173826" ref_url="https://bugzilla.suse.com/1173826" source="BUGZILLA"/>
		<reference ref_id="1173833" ref_url="https://bugzilla.suse.com/1173833" source="BUGZILLA"/>
		<reference ref_id="1173838" ref_url="https://bugzilla.suse.com/1173838" source="BUGZILLA"/>
		<reference ref_id="1173839" ref_url="https://bugzilla.suse.com/1173839" source="BUGZILLA"/>
		<reference ref_id="1173845" ref_url="https://bugzilla.suse.com/1173845" source="BUGZILLA"/>
		<reference ref_id="1173857" ref_url="https://bugzilla.suse.com/1173857" source="BUGZILLA"/>
		<reference ref_id="1174113" ref_url="https://bugzilla.suse.com/1174113" source="BUGZILLA"/>
		<reference ref_id="1174115" ref_url="https://bugzilla.suse.com/1174115" source="BUGZILLA"/>
		<reference ref_id="1174122" ref_url="https://bugzilla.suse.com/1174122" source="BUGZILLA"/>
		<reference ref_id="1174123" ref_url="https://bugzilla.suse.com/1174123" source="BUGZILLA"/>
		<reference ref_id="1174186" ref_url="https://bugzilla.suse.com/1174186" source="BUGZILLA"/>
		<reference ref_id="1174187" ref_url="https://bugzilla.suse.com/1174187" source="BUGZILLA"/>
		<reference ref_id="1174296" ref_url="https://bugzilla.suse.com/1174296" source="BUGZILLA"/>
		<reference ref_id="1174343" ref_url="https://bugzilla.suse.com/1174343" source="BUGZILLA"/>
		<reference ref_id="1174356" ref_url="https://bugzilla.suse.com/1174356" source="BUGZILLA"/>
		<reference ref_id="1174409" ref_url="https://bugzilla.suse.com/1174409" source="BUGZILLA"/>
		<reference ref_id="1174438" ref_url="https://bugzilla.suse.com/1174438" source="BUGZILLA"/>
		<reference ref_id="1174462" ref_url="https://bugzilla.suse.com/1174462" source="BUGZILLA"/>
		<reference ref_id="1174543" ref_url="https://bugzilla.suse.com/1174543" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16746" ref_url="https://www.suse.com/security/cve/CVE-2019-16746/" source="CVE"/>
		<reference ref_id="CVE-2019-20810" ref_url="https://www.suse.com/security/cve/CVE-2019-20810/" source="CVE"/>
		<reference ref_id="CVE-2019-20908" ref_url="https://www.suse.com/security/cve/CVE-2019-20908/" source="CVE"/>
		<reference ref_id="CVE-2020-0305" ref_url="https://www.suse.com/security/cve/CVE-2020-0305/" source="CVE"/>
		<reference ref_id="CVE-2020-10766" ref_url="https://www.suse.com/security/cve/CVE-2020-10766/" source="CVE"/>
		<reference ref_id="CVE-2020-10767" ref_url="https://www.suse.com/security/cve/CVE-2020-10767/" source="CVE"/>
		<reference ref_id="CVE-2020-10768" ref_url="https://www.suse.com/security/cve/CVE-2020-10768/" source="CVE"/>
		<reference ref_id="CVE-2020-10769" ref_url="https://www.suse.com/security/cve/CVE-2020-10769/" source="CVE"/>
		<reference ref_id="CVE-2020-10773" ref_url="https://www.suse.com/security/cve/CVE-2020-10773/" source="CVE"/>
		<reference ref_id="CVE-2020-10781" ref_url="https://www.suse.com/security/cve/CVE-2020-10781/" source="CVE"/>
		<reference ref_id="CVE-2020-12771" ref_url="https://www.suse.com/security/cve/CVE-2020-12771/" source="CVE"/>
		<reference ref_id="CVE-2020-12888" ref_url="https://www.suse.com/security/cve/CVE-2020-12888/" source="CVE"/>
		<reference ref_id="CVE-2020-13974" ref_url="https://www.suse.com/security/cve/CVE-2020-13974/" source="CVE"/>
		<reference ref_id="CVE-2020-14416" ref_url="https://www.suse.com/security/cve/CVE-2020-14416/" source="CVE"/>
		<reference ref_id="CVE-2020-15393" ref_url="https://www.suse.com/security/cve/CVE-2020-15393/" source="CVE"/>
		<reference ref_id="CVE-2020-15780" ref_url="https://www.suse.com/security/cve/CVE-2020-15780/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:


- CVE-2020-15780: A lockdown bypass for loading unsigned modules using ACPI table injection was fixed. (bsc#1173573)
- CVE-2020-15393: Fixed a memory leak in usbtest_disconnect (bnc#1173514).
- CVE-2020-12771: An issue was discovered in btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails (bnc#1171732).
- CVE-2020-12888: The VFIO PCI driver mishandled attempts to access disabled memory space (bnc#1171868).
- CVE-2020-10773: Fixed a memory leak on s390/s390x, in the cmm_timeout_hander in file arch/s390/mm/cmm.c (bnc#1172999).
- CVE-2020-14416: Fixed a race condition in tty-&gt;disc_data handling in the slip and slcan line discipline could lead to a use-after-free. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002).
- CVE-2020-10768: Fixed an issue with the prctl() function, where indirect branch speculation could be enabled even though it was diabled before (bnc#1172783).
- CVE-2020-10766: Fixed an issue which allowed an attacker with a local account to disable SSBD protection (bnc#1172781).
- CVE-2020-10767: Fixed an issue where Indirect Branch Prediction Barrier was disabled in certain circumstances, leaving the system open to a spectre v2 style attack (bnc#1172782).
- CVE-2020-13974: Fixed a integer overflow in drivers/tty/vt/keyboard.c, if k_ascii is called several times in a row (bnc#1172775).
- CVE-2020-0305: Fixed a possible use-after-free due to a race condition incdev_get of char_dev.c. This could lead to local escalation of privilege. User interaction is not needed for exploitation (bnc#1174462).
- CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265).
- CVE-2020-10781: Fixed a denial of service issue in the ZRAM implementation (bnc#1173074).
- CVE-2019-20908: Fixed incorrect access permissions for the efivar_ssdt ACPI variable, which could be used by attackers to bypass lockdown or secure boot restrictions (bnc#1173567).
- CVE-2019-20810: Fixed a memory leak in go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c because it did not call snd_card_free for a failure path (bnc#1172458).
- CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c, related to invalid length checks for variable elements in a beacon head (bnc#1152107).

The following non-security bugs were fixed:

- ACPI: GED: add support for _Exx / _Lxx handler methods (bsc#1111666).
- ACPI: GED: use correct trigger type field in _Exx / _Lxx handling (bsc#1111666).
- ACPI: NFIT: Fix unlock on error in scrub_show() (bsc#1171753).
- ACPI: PM: Avoid using power resources if there are none for D0 (bsc#1051510).
- ACPI: sysfs: Fix pm_profile_attr type (bsc#1111666).
- ACPI: video: Use native backlight on Acer Aspire 5783z (bsc#1111666).
- ACPI: video: Use native backlight on Acer TravelMate 5735Z (bsc#1111666).
- ALSA: es1688: Add the missed snd_card_free() (bsc#1051510).
- ALSA: hda: Add ElkhartLake HDMI codec vid (bsc#1111666).
- ALSA: hda: add sienna_cichlid audio asic id for sienna_cichlid up (bsc#1111666).
- ALSA: hda/hdmi - enable runtime pm for newer AMD display audio (bsc#1111666).
- ALSA: hda - let hs_mic be picked ahead of hp_mic (bsc#1111666).
- ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines (bsc#1111666).
- ALSA: hda/realtek - Add LED class support for micmute LED (bsc#1111666).
- ALSA: hda/realtek - Enable micmute LED on and HP system (bsc#1111666).
- ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 (bsc#1111666).
- ALSA: hda/realtek - Fix unused variable warning w/o CONFIG_LEDS_TRIGGER_AUDIO (bsc#1111666).
- ALSA: hda/realtek - Introduce polarity for micmute LED GPIO (bsc#1111666).
- ALSA: lx6464es - add support for LX6464ESe pci express variant (bsc#1111666).
- ALSA: opl3: fix infoleak in opl3 (bsc#1111666).
- ALSA: pcm: disallow linking stream to itself (bsc#1111666).
- ALSA: usb-audio: Add duplex sound support for USB devices using implicit feedback (bsc#1111666).
- ALSA: usb-audio: Add Pioneer DJ DJM-900NXS2 support (bsc#1111666).
- ALSA: usb-audio: add quirk for MacroSilicon MS2109 (bsc#1111666).
- ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock (bsc#1111666).
- ALSA: usb-audio: Clean up quirk entries with macros (bsc#1111666).
- ALSA: usb-audio: Fix inconsistent card PM state after resume (bsc#1111666).
- ALSA: usb-audio: Fix packet size calculation (bsc#1111666).
- ALSA: usb-audio: Fix racy list management in output queue (bsc#1111666).
- ALSA: usb-audio: Improve frames size computation (bsc#1111666).
- ALSA: usb-audio: Manage auto-pm of all bundled interfaces (bsc#1111666).
- ALSA: usb-audio: Use the new macro for HP Dock rename quirks (bsc#1111666).
- amdgpu: a NULL -&gt;mm does not mean a thread is a kthread (git-fixes).
- arm64: map FDT as RW for early_init_dt_scan() (jsc#SLE-12423).
- ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (bsc#1111666).
- ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx (bsc#1111666).
- ath9k: Fix use-after-free Write in ath9k_htc_rx_msg (bsc#1111666).
- ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb (bsc#1111666).
- ax25: fix setsockopt(SO_BINDTODEVICE) (networking-stable-20_05_27).
- b43: Fix connection problem with WPA3 (bsc#1111666).
- b43_legacy: Fix connection problem with WPA3 (bsc#1111666).
- bcache: Fix an error code in bch_dump_read() (git fixes (block drivers)).
- be2net: fix link failure after ethtool offline test (git-fixes).
- block: nr_sects_write(): Disable preemption on seqcount write (bsc#1173818).
- block: remove QUEUE_FLAG_STACKABLE (git fixes (block drivers)).
- block: sed-opal: fix sparse warning: convert __be64 data (git fixes (block drivers)).
- Bluetooth: Add SCO fallback for invalid LMP parameters error (bsc#1111666).
- bnxt_en: Fix AER reset logic on 57500 chips (git-fixes).
- bnxt_en: Fix ethtool selftest crash under error conditions (git-fixes).
- bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails (git-fixes).
- bnxt_en: Fix ipv6 RFS filter matching logic (git-fixes).
- bnxt_en: fix NULL dereference in case SR-IOV configuration fails (git-fixes).
- bnxt_en: Fix VF anti-spoof filter setup (networking-stable-20_05_12).
- bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features() (networking-stable-20_05_12).
- bnxt_en: Improve AER slot reset (networking-stable-20_05_12).
- brcmfmac: fix wrong location to get firmware feature (bsc#1111666).
- brcmfmac: Transform compatible string for FW loading (bsc#1169771).
- btrfs: add assertions for tree == inode-&gt;io_tree to extent IO helpers (bsc#1174438).
- btrfs: add new helper btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: Always use a cached extent_state in btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: do not zero f_bavail if we have available space (bsc#1168081).
- btrfs: do not zero f_bavail if we have available space (bsc#1168081).
- btrfs: drop argument tree from btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: fix extent_state leak in btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof (bsc#1174438).
- btrfs: fix hang on snapshot creation after RWF_NOWAIT write (bsc#1174438).
- btrfs: fix RWF_NOWAIT write not failling when we need to cow (bsc#1174438).
- btrfs: fix RWF_NOWAIT writes blocking on extent locks and waiting for IO (bsc#1174438).
- btrfs: qgroup: Fix a bug that prevents qgroup to be re-enabled after disable (bsc#1172247).
- btrfs: Return EAGAIN if we can't start no snpashot write in check_can_nocow (bsc#1174438).
- btrfs: use correct count in btrfs_file_write_iter() (bsc#1174438).
- btrfs: Use newly introduced btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: volumes: Remove ENOSPC-prone btrfs_can_relocate() (bsc#1171124).
- bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads (bsc#1111666).
- carl9170: remove P2P_GO support (bsc#1111666).
- CDC-ACM: heed quirk also in error handling (git-fixes).
- ceph: convert mdsc-&gt;cap_dirty to a per-session list (bsc#1167104).
- ceph: request expedited service on session's last cap flush (bsc#1167104).
- cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages (bsc#1173857).
- char/random: Add a newline at the end of the file (jsc#SLE-12423).
- cifs: get rid of unused parameter in reconn_setup_dfs_targets() (bsc#1144333).
- cifs: handle hostnames that resolve to same ip in failover (bsc#1144333 bsc#1161016).
- cifs: set up next DFS target before generic_ip_connect() (bsc#1144333 bsc#1161016).
- clk: bcm2835: Fix return type of bcm2835_register_gate (bsc#1051510).
- clk: clk-flexgen: fix clock-critical handling (bsc#1051510).
- clk: sunxi: Fix incorrect usage of round_down() (bsc#1051510).
- clocksource: dw_apb_timer: Make CPU-affiliation being optional (bsc#1111666).
- compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE (git fixes (block drivers)).
- compat_ioctl: block: handle Persistent Reservations (git fixes (block drivers)).
- copy_{to,from}_user(): consolidate object size checks (git fixes).
- crypto: algboss - do not wait during notifier callback (bsc#1111666).
- crypto: algif_skcipher - Cap recv SG list at ctx-&gt;used (bsc#1111666).
- crypto: caam - update xts sector size for large input length (bsc#1111666).
- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (bsc#1111666).
- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (git-fixes).
- Crypto/chcr: fix for ccm(aes) failed test (bsc#1111666).
- crypto: chelsio/chtls: properly set tp-&gt;lsndtime (bsc#1111666).
- crypto: talitos - fix IPsec cipher in length (git-fixes).
- crypto: talitos - reorder code in talitos_edesc_alloc() (git-fixes).
- debugfs: Check module state before warning in {full/open}_proxy_open() (bsc#1173746).
- devinet: fix memleak in inetdev_init() (networking-stable-20_06_07).
- dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()' (bsc#1111666).
- dm btree: increase rebalance threshold in __rebalance2() (git fixes (block drivers)).
- dm cache: fix a crash due to incorrect work item cancelling (git fixes (block drivers)).
- dm crypt: fix benbi IV constructor crash if used in authenticated mode (git fixes (block drivers)).
- dm: fix potential for q-&gt;make_request_fn NULL pointer (git fixes (block drivers)).
- dm space map common: fix to ensure new block isn't already in use (git fixes (block drivers)).
- dm: various cleanups to md-&gt;queue initialization code (git fixes).
- dm verity fec: fix hash block number in verity_fec_decode (git fixes (block drivers)).
- dm verity fec: fix memory leak in verity_fec_dtr (git fixes (block drivers)).
- dpaa_eth: fix usage as DSA master, try 3 (networking-stable-20_05_27).
- driver-core, libnvdimm: Let device subsystems add local lockdep coverage (bsc#1171753).
- Drivers: hv: Change flag to write log level in panic msg to false (bsc#1170617, bsc#1170618).
- drivers: soc: ti: knav_qmss_queue: Make knav_gp_range_ops static (bsc#1051510).
- drm: amd/display: fix Kconfig help text (bsc#1113956) 	* only fix DEBUG_KERNEL_DC
- drm: bridge: adv7511: Extend list of audio sample rates (bsc#1111666).
- drm/dp_mst: Increase ACT retry timeout to 3s (bsc#1113956)  * context changes
- drm: encoder_slave: fix refcouting error for modules (bsc#1111666).
- drm: encoder_slave: fix refcouting error for modules (bsc#1114279)
- drm/i915/icl+: Fix hotplug interrupt disabling after storm detection (bsc#1112178)
- drm/i915: Whitelist context-local timestamp in the gen9 cmdparser (bsc#1111666).
- drm/mediatek: Check plane visibility in atomic_update (bsc#1113956)  * context changes
- drm/msm/dpu: fix error return code in dpu_encoder_init (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for Asus T101HA panel (bsc#1111666).
- drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003 (bsc#1111666).
- drm/qxl: Use correct notify port address when creating cursor ring (bsc#1113956)
- drm/radeon: fix double free (bsc#1113956)
- drm/radeon: fix fb_div check in ni_init_smc_spll_table() (bsc#1113956)
- drm/sun4i: hdmi ddc clk: Fix size of m divider (bsc#1111666).
- drm/tegra: hub: Do not enable orphaned window group (bsc#1111666).
- drm/vkms: Hold gem object while still in-use (bsc#1113956)  * context changes
- e1000: Distribute switch variables for initialization (bsc#1111666).
- e1000e: Disable TSO for buffer overrun workaround (bsc#1051510).
- e1000e: Do not wake up the system via WOL if device wakeup is disabled (bsc#1051510).
- e1000e: Relax condition to trigger reset for ME workaround (bsc#1111666).
- EDAC/amd64: Read back the scrub rate PCI register on F15h (bsc#1114279).
- efi/random: Increase size of firmware supplied randomness (jsc#SLE-12423).
- efi/random: Treat EFI_RNG_PROTOCOL output as bootloader randomness (jsc#SLE-12423).
- efi: READ_ONCE rng seed size before munmap (jsc#SLE-12423).
- efi: Reorder pr_notice() with add_device_randomness() call (jsc#SLE-12423).
- evm: Check also if *tfm is an error pointer in init_desc() (bsc#1051510).
- evm: Fix a small race in init_desc() (bsc#1051510).
- ext4: fix a data race at inode-&gt;i_blocks (bsc#1171835).
- ext4: fix partial cluster initialization when splitting extent (bsc#1173839).
- ext4: fix race between ext4_sync_parent() and rename() (bsc#1173838).
- ext4, jbd2: ensure panic by fix a race between jbd2 abort and ext4 error handlers (bsc#1173833).
- extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()' (bsc#1051510).
- fanotify: fix ignore mask logic for events on child and on dir (bsc#1172719).
- fdt: add support for rng-seed (jsc#SLE-12423).
- fdt: Update CRC check for rng-seed (jsc#SLE-12423).
- firmware: imx: scu: Fix corruption of header (git-fixes).
- firmware: imx: scu: Fix possible memory leak in imx_scu_probe() (bsc#1111666).
- Fix boot crash with MD (bsc#1174343)
- fix multiplication overflow in copy_fdtable() (bsc#1173825).
- fpga: dfl: afu: Corrected error handling levels (git-fixes).
- fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (networking-stable-20_05_12).
- gpiolib: Document that GPIO line names are not globally unique (bsc#1051510).
- gpu: host1x: Detach driver on unregister (bsc#1111666).
- gpu: ipu-v3: pre: do not trigger update if buffer address does not change (bsc#1111666).
- HID: magicmouse: do not set up autorepeat (git-fixes).
- HID: sony: Fix for broken buttons on DS3 USB dongles (bsc#1051510).
- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() (bsc#1111666).
- hwmon: (emc2103) fix unable to change fan pwm1_enable attribute (bsc#1111666).
- hwmon: (max6697) Make sure the OVERT mask is set correctly (bsc#1111666).
- i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 (bsc#1111666).
- i2c: eg20t: Load module automatically if ID matches (bsc#1111666).
- i2c: mlxcpld: check correct size of maximum RECV_LEN packet (bsc#1111666).
- i40e: reduce stack usage in i40e_set_fc (git-fixes).
- IB/hfi1: Do not destroy hfi1_wq when the device is shut down (bsc#1174409).
- IB/hfi1: Do not destroy link_wq when the device is shut down (bsc#1174409).
- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- ibmvnic: continue to init in CRQ reset returns H_CLOSED (bsc#1173280 ltc#185369).
- ibmvnic: Flush existing work items before device removal (bsc#1065729).
- ibmvnic: Harden device login requests (bsc#1170011 ltc#183538).
- iio: buffer: Do not allow buffers without any channels enabled to be activated (bsc#1051510).
- iio:health:afe4404 Fix timestamp alignment and prevent data leak (bsc#1111666).
- iio:humidity:hdc100x Fix alignment and data leak issues (bsc#1111666).
- iio:magnetometer:ak8974: Fix alignment and data leak issues (bsc#1111666).
- iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() (bsc#1111666).
- iio: pressure: bmp280: Tolerate IRQ before registering (bsc#1051510).
- iio:pressure:ms5611 Fix buffer element alignment (bsc#1111666).
- iio: pressure: zpa2326: handle pm_runtime_get_sync failure (bsc#1111666).
- ima: Directly assign the ima_default_policy pointer to ima_rules (bsc#1051510).
- ima: Fix ima digest hash table key calculation (bsc#1051510).
- include/asm-generic/topology.h: guard cpumask_of_node() macro argument (bsc#1148868).
- Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list (bsc#1111666).
- input: i8042 - Remove special PowerPC handling (git-fixes).
- Input: synaptics - add a second working PNP_ID for Lenovo T470s (bsc#1111666).
- intel_idle: Graceful probe failure when MWAIT is disabled (bsc#1174115).
- intel_th: Fix a NULL dereference when hub driver is not loaded (bsc#1111666).
- ipvlan: call dev_change_flags when ipvlan mode is reset (git-fixes).
- ixgbevf: Remove limit of 10 entries for unicast filter list (git-fixes).
- jbd2: avoid leaking transaction credits when unreserving handle (bsc#1173845).
- jbd2: Preserve kABI when adding j_abort_mutex (bsc#1173833).
- kabi: hv: prevent struct device_node to become defined (bsc#1172871).
- kabi: ppc64le: prevent struct dma_map_ops to become defined (jsc#SLE-12423).
- kABI: protect struct mlx5_cmd_work_ent (kabi).
- kABI: reintroduce inet_hashtables.h include to l2tp_ip (kabi).
- kernfs: fix barrier usage in __kernfs_new_node() (bsc#1111666).
- KVM: nVMX: Do not reread VMCS-agnostic state when switching VMCS (bsc#1114279).
- KVM: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1114279).
- KVM: x86: Fix APIC page invalidation race (bsc#1174122).
- kvm: x86: Fix L1TF mitigation for shadow MMU (bsc#1171904).
- KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated (bsc#1171904).
- KVM: x86: only do L1TF workaround on affected processors (bsc#1171904).
- l2tp: add sk_family checks to l2tp_validate_socket (networking-stable-20_06_07).
- l2tp: do not use inet_hash()/inet_unhash() (networking-stable-20_06_07).
- libceph: do not omit recovery_deletes in target_copy() (bsc#1174113).
- libceph: ignore pool overlay and cache logic on redirects (bsc#1173146).
- libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock (bsc#1171753).
- libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant (bsc#1171753).
- libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl() (bsc#1171753).
- libnvdimm: cover up changes in struct nvdimm_bus (bsc#1171753).
- libnvdimm: cover up nd_pfn_sb changes (bsc#1171759).
- libnvdimm/dax: Pick the right alignment default when creating dax devices (bsc#1171759).
- libnvdimm/label: Remove the dpa align check (bsc#1171759).
- libnvdimm/of_pmem: Provide a unique name for bus provider (bsc#1171739).
- libnvdimm/pfn_dev: Add a build check to make sure we notice when struct page size change (bsc#1171743).
- libnvdimm/pfn_dev: Add page size and struct page size to pfn superblock (bsc#1171759).
- libnvdimm/pfn: Prevent raw mode fallback if pfn-infoblock valid (bsc#1171743).
- libnvdimm/pmem: Advance namespace seed for specific probe errors (bsc#1171743).
- libnvdimm/region: Initialize bad block for volatile namespaces (bnc#1151927 5.3.6).
- libnvdimm/region: Rewrite _probe_success() to _advance_seeds() (bsc#1171743).
- libnvdimm: Use PAGE_SIZE instead of SZ_4K for align check (bsc#1171759).
- livepatch: Apply vmlinux-specific KLP relocations early (bsc#1071995).
- livepatch: Disallow vmlinux.ko (bsc#1071995).
- livepatch: Make klp_apply_object_relocs static (bsc#1071995).
- livepatch: Prevent module-specific KLP rela sections from referencing vmlinux symbols (bsc#1071995).
- livepatch: Remove .klp.arch (bsc#1071995).
- loop: replace kill_bdev with invalidate_bdev (bsc#1173820).
- lpfc_debugfs: get rid of pointless access_ok() (bsc#1172687 bsc#1171530).
- lpfc: Synchronize NVME transport and lpfc driver devloss_tmo (bcs#1173060).
- mac80211: add option for setting control flags (bsc#1111666).
- mac80211: set IEEE80211_TX_CTRL_PORT_CTRL_PROTO for nl80211 TX (bsc#1111666).
- mailbox: imx: Disable the clock on devm_mbox_controller_register() failure (git-fixes).
- md: Avoid namespace collision with bitmap API (git fixes (block drivers)).
- mdraid: fix read/write bytes accounting (bsc#1172537).
- md: use memalloc scope APIs in mddev_suspend()/mddev_resume() (bsc#1166985)).
- media: cec: silence shift wrapping warning in __cec_s_log_addrs() (git-fixes).
- media: si2157: Better check for running tuner in init (bsc#1111666).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue (git-fixes).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue (git-fixes).
- mlxsw: pci: Return error on PCI reset timeout (git-fixes).
- mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list properly (networking-stable-20_05_12).
- mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed (git-fixes).
- mlxsw: spectrum_dpipe: Add missing error path (git-fixes).
- mlxsw: spectrum: Prevent force of 56G (git-fixes).
- mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead (git-fixes).
- mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON() (git-fixes).
- mlxsw: spectrum_switchdev: Add MDB entries in prepare phase (git-fixes).
- mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky (git-fixes).
- mmc: block: Fix request completion in the CQE timeout path (bsc#1111666).
- mmc: block: Fix use-after-free issue for rpmb (bsc#1111666).
- mmc: fix compilation of user API (bsc#1051510).
- mmc: sdhci: do not enable card detect interrupt for gpio cd type (bsc#1111666).
- mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk (bsc#1111666).
- Move upstreamed lpfc patches into sorted section
- mvpp2: remove misleading comment (git-fixes).
- net: be more gentle about silly gso requests coming from user (networking-stable-20_06_07).
- net: check untrusted gso_size at kernel entry (networking-stable-20_06_07).
- net/cxgb4: Check the return from t4_query_params properly (git-fixes).
- net: dsa: loop: Add module soft dependency (networking-stable-20_05_16).
- net: dsa: mt7530: fix roaming from DSA user ports (networking-stable-20_05_27).
- net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it (git-fixes).
- net: ena: add missing ethtool TX timestamping indication (git-fixes).
- net: ena: avoid memory access violation by validating req_id properly (git-fixes).
- net: ena: do not wake up tx queue when down (git-fixes).
- net: ena: ena-com.c: prevent NULL pointer dereference (git-fixes).
- net: ena: ethtool: use correct value for crc32 hash (git-fixes).
- net: ena: fix continuous keep-alive resets (git-fixes).
- net: ena: fix corruption of dev_idx_to_host_tbl (git-fixes).
- net: ena: fix default tx interrupt moderation interval (git-fixes).
- net: ena: fix incorrect default RSS key (git-fixes).
- net: ena: fix incorrectly saving queue numbers when setting RSS indirection table (git-fixes).
- net: ena: fix issues in setting interrupt moderation params in ethtool (git-fixes).
- net: ena: fix potential crash when rxfh key is NULL (git-fixes).
- net: ena: fix retrieval of nonadaptive interrupt moderation intervals (git-fixes).
- net: ena: fix uses of round_jiffies() (git-fixes).
- net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE (git-fixes).
- net: ena: reimplement set/get_coalesce() (git-fixes).
- net: ena: rss: do not allocate key when not supported (git-fixes).
- net: ena: rss: fix failure to get indirection table (git-fixes).
- net: ena: rss: store hash function as values and not bits (git-fixes).
- netfilter: connlabels: prefer static lock initialiser (git-fixes).
- netfilter: ctnetlink: netns exit must wait for callbacks (bsc#1169795).
- netfilter: not mark a spinlock as __read_mostly (git-fixes).
- net: fix a potential recursive NETDEV_FEAT_CHANGE (networking-stable-20_05_16).
- net: inet_csk: Fix so_reuseport bind-address cache in tb-&gt;fast* (networking-stable-20_05_27).
- net: ipip: fix wrong address family in init error path (networking-stable-20_05_27).
- net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set (git-fixes).
- net: macsec: preserve ingress frame ordering (networking-stable-20_05_12).
- net/mlx4_core: drop useless LIST_HEAD (git-fixes).
- net/mlx4_core: fix a memory leak bug (git-fixes).
- net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (networking-stable-20_05_12).
- net/mlx5: Add command entry handling completion (networking-stable-20_05_27).
- net/mlx5: Avoid panic when setting vport rate (git-fixes).
- net/mlx5: Continue driver initialization despite debugfs failure (git-fixes).
- net/mlx5e: ethtool, Fix a typo in WOL function names (git-fixes).
- net/mlx5e: Fix traffic duplication in ethtool steering (git-fixes).
- net/mlx5e: Remove unnecessary clear_bit()s (git-fixes).
- net/mlx5e: Update netdev txq on completions during closure (networking-stable-20_05_27).
- net/mlx5: Fix command entry leak in Internal Error State (networking-stable-20_05_12).
- net/mlx5: Fix crash upon suspend/resume (networking-stable-20_06_07).
- net/mlx5: Fix forced completion access non initialized command entry (networking-stable-20_05_12).
- net: mvmdio: allow up to four clocks to be specified for orion-mdio (git-fixes).
- net: mvpp2: prs: Do not override the sign bit in SRAM parser shift (git-fixes).
- net: phy: fix aneg restart in phy_ethtool_set_eee (networking-stable-20_05_16).
- netprio_cgroup: Fix unlimited memory leak of v2 cgroups (networking-stable-20_05_16).
- net: qede: stop adding events on an already destroyed workqueue (git-fixes).
- net: qed: fix excessive QM ILT lines consumption (git-fixes).
- net: qed: fix NVMe login fails over VFs (git-fixes).
- net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (networking-stable-20_05_27).
- net: revert 'net: get rid of an signed integer overflow in ip_idents_reserve()' (networking-stable-20_05_27).
- net sched: fix reporting the first-time use timestamp (networking-stable-20_05_27).
- net: stricter validation of untrusted gso packets (networking-stable-20_05_12).
- net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict() (networking-stable-20_05_12).
- net/tls: Fix sk_psock refcnt leak when in tls_data_ready() (networking-stable-20_05_12).
- net: usb: qmi_wwan: add support for DW5816e (networking-stable-20_05_12).
- net: usb: qmi_wwan: add Telit 0x1050 composition (networking-stable-20_06_07).
- net: usb: qmi_wwan: add Telit LE910C1-EUX composition (networking-stable-20_06_07).
- net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() (bsc#1172484).
- nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K (git-fixes).
- NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() (bsc#1170592).
- NFSv4: Retry CLOSE and DELEGRETURN on NFS4ERR_OLD_STATEID (bsc#1170592).
- nilfs2: fix null pointer dereference at nilfs_segctor_do_construct() (bsc#1173857).
- nl80211: fix NL80211_ATTR_CHANNEL_WIDTH attribute type (bsc#1111666).
- nvdimm: Avoid race between probe and reading device attributes (bsc#1170442).
- nvme: check for NVME_CTRL_LIVE in nvme_report_ns_ids() (bcs#1171558 bsc#1159058).
- nvme: do not update multipath disk information if the controller is down (bcs#1171558 bsc#1159058).
- nvme: fail cancelled commands with NVME_SC_HOST_PATH_ERROR (bsc#1158983 bsc#1172538).
- nvme-fc: Fail transport errors with NVME_SC_HOST_PATH (bsc#1158983 bsc#1172538).
- nvme-tcp: fail command with NVME_SC_HOST_PATH_ERROR send failed (bsc#1158983 bsc#1172538).
- objtool: Clean instruction state before each function validation (bsc#1169514).
- objtool: Ignore empty alternatives (bsc#1169514).
- ocfs2: no need try to truncate file beyond i_size (bsc#1171841).
- overflow: Fix -Wtype-limits compilation warnings (git fixes).
- overflow.h: Add arithmetic shift helper (git fixes).
- p54usb: add AirVasT USB stick device-id (bsc#1051510).
- padata: ensure the reorder timer callback runs on the correct CPU (git-fixes).
- padata: reorder work kABI fixup (git-fixes).
- PCI/AER: Remove HEST/FIRMWARE_FIRST parsing for AER ownership (bsc#1174356).
- PCI/AER: Use only _OSC to determine AER ownership (bsc#1174356).
- PCI: Allow pci_resize_resource() for devices on root bus (bsc#1051510).
- PCI: Fix pci_register_host_bridge() device_register() error handling (bsc#1051510).
- PCI: Generalize multi-function power dependency device links (bsc#1111666).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871, bsc#1172872).
- PCI: hv: Fix the PCI HyperV probe failure path to release resource properly (bsc#1172871, bsc#1172872).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871, bsc#1172872).
- PCI: hv: Move hypercall related definitions into tlfs header (bsc#1172871, bsc#1172872).
- PCI: hv: Move retarget related structures into tlfs header (bsc#1172871, bsc#1172872).
- PCI: hv: Reorganize the code in preparation of hibernation (bsc#1172871, bsc#1172872).
- PCI: hv: Retry PCI bus D0 entry on invalid device state (bsc#1172871, bsc#1172872).
- PCI: pciehp: Fix indefinite wait on sysfs requests (git-fixes).
- PCI: pciehp: Support interrupts sent from D3hot (git-fixes).
- PCI/PM: Call .bridge_d3() hook only if non-NULL (git-fixes).
- PCI: Program MPS for RCiEP devices (bsc#1051510).
- PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port (bsc#1051510).
- pci: Revive pci_dev __aer_firmware_first* fields for kABI (bsc#1174356).
- pcm_native: result of put_user() needs to be checked (bsc#1111666).
- perf: Allocate context task_ctx_data for child event (git-fixes).
- perf/cgroup: Fix perf cgroup hierarchy support (git-fixes).
- perf: Copy parent's address filter offsets on clone (git-fixes).
- perf/core: Add sanity check to deal with pinned event failure (git-fixes).
- perf/core: Avoid freeing static PMU contexts when PMU is unregistered (git-fixes).
- perf/core: Correct event creation with PERF_FORMAT_GROUP (git-fixes).
- perf/core: Do not WARN() for impossible ring-buffer sizes (git-fixes).
- perf/core: Fix ctx_event_type in ctx_resched() (git-fixes).
- perf/core: Fix error handling in perf_event_alloc() (git-fixes).
- perf/core: Fix exclusive events' grouping (git-fixes).
- perf/core: Fix group scheduling with mixed hw and sw events (git-fixes).
- perf/core: Fix impossible ring-buffer sizes warning (git-fixes).
- perf/core: Fix locking for children siblings group read (git-fixes).
- perf/core: Fix lock inversion between perf,trace,cpuhp (git-fixes (dependent patch for 18736eef1213)).
- perf/core: Fix perf_event_read_value() locking (git-fixes).
- perf/core: Fix perf_pmu_unregister() locking (git-fixes).
- perf/core: Fix __perf_read_group_add() locking (git-fixes (dependent patch)).
- perf/core: Fix perf_sample_regs_user() mm check (git-fixes).
- perf/core: Fix possible Spectre-v1 indexing for -&gt;aux_pages (git-fixes).
- perf/core: Fix race between close() and fork() (git-fixes).
- perf/core: Fix the address filtering fix (git-fixes).
- perf/core: Fix use-after-free in uprobe_perf_close() (git-fixes).
- perf/core: Force USER_DS when recording user stack data (git-fixes).
- perf/core: Restore mmap record type correctly (git-fixes).
- perf: Fix header.size for namespace events (git-fixes).
- perf/ioctl: Add check for the sample_period value (git-fixes).
- perf, pt, coresight: Fix address filters for vmas with non-zero offset (git-fixes).
- perf: Return proper values for user stack errors (git-fixes).
- perf/x86/amd: Constrain Large Increment per Cycle events (git-fixes).
- perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity (git-fixes).
- perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops (git-fixes).
- perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) (git-fixes).
- perf/x86/amd/iommu: Make the 'amd_iommu_attr_groups' symbol static (git-fixes).
- perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs (git-fixes stable).
- perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs (git-fixes).
- perf/x86/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf events (git-fixes stable).
- perf/x86: Enable free running PEBS for REGS_USER/INTR (git-fixes).
- perf/x86: Fix incorrect PEBS_REGS (git-fixes).
- perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts() (git-fixes).
- perf/x86/intel: Add proper condition to run sched_task callbacks (git-fixes).
- perf/x86/intel/bts: Fix the use of page_private() (git-fixes).
- perf/x86/intel: Fix PT PMI handling (git-fixes).
- perf/x86/intel: Move branch tracing setup to the Intel-specific source file (git-fixes).
- perf/x86/intel/uncore: Add Node ID mask (git-fixes).
- perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX (git-fixes).
- perf/x86/intel/uncore: Handle invalid event coding for free-running counter (git-fixes).
- perf/x86/uncore: Fix event group support (git-fixes).
- pid: Improve the comment about waiting in zap_pid_ns_processes (git fixes)).
- pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()' (bsc#1051510).
- pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()' (bsc#1051510).
- pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs (bsc#1051510).
- platform/x86: dell-laptop: do not register micmute LED if there is no token (bsc#1111666).
- platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() (bsc#1111666).
- PM / Domains: Allow genpd users to specify default active wakeup behavior (git-fixes).
- pnp: Use list_for_each_entry() instead of open coding (git fixes).
- powerpc/64s: Do not let DT CPU features set FSCR_DSCR (bsc#1065729).
- powerpc/64s: Save FSCR to init_task.thread.fscr after feature init (bsc#1065729).
- powerpc/book3s64: Export has_transparent_hugepage() related functions (bsc#1171759).
- powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey (bsc#1065729).
- powerpc/fadump: fix race between pstore write and fadump crash trigger (bsc#1168959 ltc#185010).
- powerpc/xive: Clear the page tables for the ESB IO mapping (bsc#1085030).
- powerpc/xmon: Reset RCU and soft lockup watchdogs (bsc#1065729).
- power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select (bsc#1051510).
- power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()' (bsc#1051510).
- power: supply: smb347-charger: IRQSTAT_D is volatile (bsc#1051510).
- power: vexpress: add suppress_bind_attrs to true (bsc#1111666).
- pppoe: only process PADT targeted at local interfaces (networking-stable-20_05_16).
- qed: reduce maximum stack frame size (git-fixes).
- qlcnic: fix missing release in qlcnic_83xx_interrupt_test (git-fixes).
- r8152: support additional Microsoft Surface Ethernet Adapter variant (networking-stable-20_05_27).
- raid5: remove gfp flags from scribble_alloc() (bsc#1166985).
- RDMA/efa: Fix setting of wrong bit in get/set_feature commands (bsc#1111666)
- RDMA/efa: Set maximum pkeys device attribute (bsc#1111666)
- RDMA/efa: Support remote read access in MR registration (bsc#1111666)
- RDMA/efa: Unified getters/setters for device structs bitmask access (bsc#1111666)
- README.BRANCH: Add Takashi Iwai as primary maintainer.
- regmap: debugfs: Do not sleep while atomic for fast_io regmaps (bsc#1111666).
- resolve KABI warning for perf-pt-coresight (git-fixes).
- Revert 'bcache: ignore pending signals when creating gc and allocator thread' (git fixes (block drivers)).
- Revert commit e918e570415c ('tpm_tis: Remove the HID IFX0102') (bsc#1111666).
- Revert 'dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues' (git fixes (block drivers)).
- Revert 'thermal: mediatek: fix register index error' (bsc#1111666).
- Revert 'tools lib traceevent: Remove unneeded qsort and uses memmove'
- s390/bpf: Maintain 8-byte stack alignment (bsc#1169194).
- s390: fix syscall_get_error for compat processes (git-fixes).
- s390/qdio: consistently restore the IRQ handler (git-fixes).
- s390/qdio: lock device while installing IRQ handler (git-fixes).
- s390/qdio: put thinint indicator after early error (git-fixes).
- s390/qdio: tear down thinint indicator after early error (git-fixes).
- s390/qeth: fix error handling for isolation mode cmds (git-fixes).
- sch_choke: avoid potential panic in choke_reset() (networking-stable-20_05_12).
- sch_sfq: validate silly quantum values (networking-stable-20_05_12).
- scsi: aacraid: fix a signedness bug (bsc#1174296).
- scsi: hisi_sas: fix calls to dma_set_mask_and_coherent() (bsc#1174296).
- scsi: ibmvscsi: Do not send host info in adapter info MAD after LPM (bsc#1172759 ltc#184814).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Avoid another null dereference in lpfc_sli4_hba_unset() (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1158983).
- scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (bsc#1158983).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix less-than-zero comparison of unsigned value (bsc#1158983).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1158983).
- scsi: megaraid_sas: Fix a compilation warning (bsc#1174296).
- scsi: mpt3sas: Fix double free in attach error handling (bsc#1174296).
- scsi: qedf: Add port_id getter (bsc#1150660).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (bsc#1174296).
- scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (bsc#1158983).
- sctp: Do not add the shutdown timer if its already been added (networking-stable-20_05_27).
- sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (networking-stable-20_05_27).
- spi: dw: use 'smp_mb()' to avoid sending spi data error (bsc#1051510).
- spi: fix initial SPI_SR value in spi-fsl-dspi (bsc#1111666).
- spi: pxa2xx: Apply CS clk quirk to BXT (bsc#1111666).
- spi: spidev: fix a race between spidev_release and spidev_remove (bsc#1111666).
- spi: spi-mem: Fix Dual/Quad modes on Octal-capable devices (bsc#1111666).
- spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate (bsc#1111666).
- staging: comedi: verify array index is correct before using it (bsc#1111666).
- staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK (bsc#1051510).
- staging: sm750fb: add missing case while setting FB_VISUAL (bsc#1051510).
- SUNRPC: The TCP back channel mustn't disappear while requests are outstanding (bsc#1152624).
- tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes (bsc#1173284).
- timers: Add a function to start/reduce a timer (networking-stable-20_05_27).
- tpm_tis: extra chip-&gt;ops check on error path in tpm_tis_core_init (bsc#1111666).
- tpm_tis: Remove the HID IFX0102 (bsc#1111666).
- tracing: Fix event trigger to accept redundant spaces (git-fixes).
- tty: n_gsm: Fix bogus i++ in gsm_data_kick (bsc#1051510).
- tty: n_gsm: Fix SOF skipping (bsc#1051510).
- tty: n_gsm: Fix waking up upper tty layer when room available (bsc#1051510).
- tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040 (networking-stable-20_05_12).
- ubifs: remove broken lazytime support (bsc#1173826).
- usb: add USB_QUIRK_DELAY_INIT for Logitech C922 (git-fixes).
- USB: c67x00: fix use after free in c67x00_giveback_urb (bsc#1111666).
- usb: chipidea: core: add wakeup support for extcon (bsc#1111666).
- usb: dwc2: Fix shutdown callback in platform (bsc#1111666).
- usb: dwc2: gadget: move gadget resume after the core is in L0 state (bsc#1051510).
- usb: dwc3: gadget: introduce cancelled_list (git-fixes).
- usb: dwc3: gadget: never call -&gt;complete() from -&gt;ep_queue() (git-fixes).
- usb: dwc3: gadget: Properly handle ClearFeature(halt) (git-fixes).
- usb: dwc3: gadget: Properly handle failed kick_transfer (git-fixes).
- USB: ehci: reopen solution for Synopsys HC bug (git-fixes).
- usb: gadget: fix potential double-free in m66592_probe (bsc#1111666).
- usb: gadget: lpc32xx_udc: do not dereference ep pointer before null check (bsc#1051510).
- usb: gadget: udc: atmel: fix uninitialized read in debug printk (bsc#1111666).
- usb: gadget: udc: atmel: remove outdated comment in usba_ep_disable() (bsc#1111666).
- usb: gadget: udc: Potential Oops in error handling code (bsc#1111666).
- USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke (bsc#1051510).
- usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() (bsc#1111666).
- USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe() (bsc#1051510).
- usb: musb: Fix runtime PM imbalance on error (bsc#1051510).
- usb: musb: start session in resume for host port (bsc#1051510).
- usbnet: smsc95xx: Fix use-after-free after removal (bsc#1111666).
- USB: ohci-sm501: Add missed iounmap() in remove (bsc#1111666).
- USB: serial: ch341: add new Product ID for CH340 (bsc#1111666).
- USB: serial: cypress_m8: enable Simply Automated UPB PIM (bsc#1111666).
- USB: serial: iuu_phoenix: fix memory corruption (bsc#1111666).
- USB: serial: option: add GosunCn GM500 series (bsc#1111666).
- USB: serial: option: add Quectel EG95 LTE modem (bsc#1111666).
- USB: serial: option: add Telit LE910C1-EUX compositions (bsc#1051510).
- USB: serial: qcserial: add DW5816e QDL support (bsc#1051510).
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (bsc#1051510).
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (git-fixes).
- vfio/pci: Fix SR-IOV VF handling with MMIO blocking (bsc#1174123).
- vfs: Fix EOVERFLOW testing in put_compat_statfs64 (bnc#1151927 5.3.6).
- virtio-blk: handle block_device_operations callbacks after hot unplug (git fixes (block drivers)).
- vmxnet3: add geneve and vxlan tunnel offload support (bsc#1172484).
- vmxnet3: add support to get/set rx flow hash (bsc#1172484).
- vmxnet3: allow rx flow hash ops only when rss is enabled (bsc#1172484).
- vmxnet3: avoid format strint overflow warning (bsc#1172484).
- vmxnet3: prepare for version 4 changes (bsc#1172484).
- vmxnet3: Remove always false conditional statement (bsc#1172484).
- vmxnet3: remove redundant initialization of pointer 'rq' (bsc#1172484).
- vmxnet3: remove unused flag 'rxcsum' from struct vmxnet3_adapter (bsc#1172484).
- vmxnet3: Replace msleep(1) with usleep_range() (bsc#1172484).
- vmxnet3: update to version 4 (bsc#1172484).
- vmxnet3: use correct hdr reference when packet is encapsulated (bsc#1172484).
- vsock: fix timeout in vsock_accept() (networking-stable-20_06_07).
- vxlan: Avoid infinite loop when suppressing NS messages with invalid options (git-fixes).
- w1: omap-hdq: cleanup to add missing newline for some dev_dbg (bsc#1051510).
- watchdog: sp805: fix restart handler (bsc#1111666).
- wil6210: add general initialization/size checks (bsc#1111666).
- wil6210: check rx_buff_mgmt before accessing it (bsc#1111666).
- wil6210: ignore HALP ICR if already handled (bsc#1111666).
- wil6210: make sure Rx ring sizes are correlated (git-fixes).
- work around mvfs bug (bsc#1162063).
- x86/apic: Install an empty physflat_init_apic_ldr (bsc#1163309).
- x86/cpu/amd: Make erratum #1054 a legacy erratum (bsc#1114279).
- x86/events/intel/ds: Add PERF_SAMPLE_PERIOD into PEBS_FREERUNNING_FLAGS (git-fixes).
- x86: Fix early boot crash on gcc-10, third try (bsc#1114279).
- x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (bsc#1172257).
- x86/reboot/quirks: Add MacBook6,1 reboot quirk (bsc#1114279).
- xfrm: fix error in comment (git fixes).
- xhci: Fix incorrect EP_STATE_MASK (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-03"/>
	<updated date="2020-08-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150660">SUSE bug 1150660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151927">SUSE bug 1151927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152107">SUSE bug 1152107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152624">SUSE bug 1152624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158983">SUSE bug 1158983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159058">SUSE bug 1159058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161016">SUSE bug 1161016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162002">SUSE bug 1162002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162063">SUSE bug 1162063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163309">SUSE bug 1163309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166985">SUSE bug 1166985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167104">SUSE bug 1167104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168081">SUSE bug 1168081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168959">SUSE bug 1168959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169194">SUSE bug 1169194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169771">SUSE bug 1169771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169795">SUSE bug 1169795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170011">SUSE bug 1170011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170442">SUSE bug 1170442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170592">SUSE bug 1170592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170617">SUSE bug 1170617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170618">SUSE bug 1170618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171124">SUSE bug 1171124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171424">SUSE bug 1171424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171529">SUSE bug 1171529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171530">SUSE bug 1171530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171732">SUSE bug 1171732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171739">SUSE bug 1171739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171743">SUSE bug 1171743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171753">SUSE bug 1171753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171759">SUSE bug 1171759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171835">SUSE bug 1171835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171841">SUSE bug 1171841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171868">SUSE bug 1171868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171904">SUSE bug 1171904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172247">SUSE bug 1172247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172257">SUSE bug 1172257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172344">SUSE bug 1172344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172458">SUSE bug 1172458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172484">SUSE bug 1172484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172537">SUSE bug 1172537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172687">SUSE bug 1172687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172719">SUSE bug 1172719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172759">SUSE bug 1172759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172775">SUSE bug 1172775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172781">SUSE bug 1172781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172782">SUSE bug 1172782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172783">SUSE bug 1172783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172871">SUSE bug 1172871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172872">SUSE bug 1172872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172999">SUSE bug 1172999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173060">SUSE bug 1173060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173074">SUSE bug 1173074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173146">SUSE bug 1173146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173265">SUSE bug 1173265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173280">SUSE bug 1173280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173284">SUSE bug 1173284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173428">SUSE bug 1173428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173514">SUSE bug 1173514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173567">SUSE bug 1173567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173573">SUSE bug 1173573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173659">SUSE bug 1173659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173746">SUSE bug 1173746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173818">SUSE bug 1173818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173820">SUSE bug 1173820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173825">SUSE bug 1173825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173826">SUSE bug 1173826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173833">SUSE bug 1173833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173838">SUSE bug 1173838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173839">SUSE bug 1173839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173845">SUSE bug 1173845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173857">SUSE bug 1173857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174113">SUSE bug 1174113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174115">SUSE bug 1174115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174122">SUSE bug 1174122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174123">SUSE bug 1174123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174186">SUSE bug 1174186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174187">SUSE bug 1174187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174296">SUSE bug 1174296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174343">SUSE bug 1174343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174356">SUSE bug 1174356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174409">SUSE bug 1174409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174438">SUSE bug 1174438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174462">SUSE bug 1174462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174543">SUSE bug 1174543</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16746/">CVE-2019-16746</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20810/">CVE-2019-20810</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20908/">CVE-2019-20908</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0305/">CVE-2020-0305</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10766/">CVE-2020-10766</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10767/">CVE-2020-10767</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10768/">CVE-2020-10768</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10769/">CVE-2020-10769</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10773/">CVE-2020-10773</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10781/">CVE-2020-10781</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12771/">CVE-2020-12771</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12888/">CVE-2020-12888</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13974/">CVE-2020-13974</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14416/">CVE-2020-14416</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15393/">CVE-2020-15393</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15780/">CVE-2020-15780</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497478" comment="kernel-default-livepatch-4.12.14-197.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497479" comment="kernel-default-livepatch-devel-4.12.14-197.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497480" comment="kernel-livepatch-4_12_14-197_48-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138400" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1173100" ref_url="https://bugzilla.suse.com/1173100" source="BUGZILLA"/>
		<reference ref_id="1173659" ref_url="https://bugzilla.suse.com/1173659" source="BUGZILLA"/>
		<reference ref_id="1173661" ref_url="https://bugzilla.suse.com/1173661" source="BUGZILLA"/>
		<reference ref_id="1173663" ref_url="https://bugzilla.suse.com/1173663" source="BUGZILLA"/>
		<reference ref_id="1173869" ref_url="https://bugzilla.suse.com/1173869" source="BUGZILLA"/>
		<reference ref_id="1173934" ref_url="https://bugzilla.suse.com/1173934" source="BUGZILLA"/>
		<reference ref_id="1173942" ref_url="https://bugzilla.suse.com/1173942" source="BUGZILLA"/>
		<reference ref_id="1173963" ref_url="https://bugzilla.suse.com/1173963" source="BUGZILLA"/>
		<reference ref_id="1174186" ref_url="https://bugzilla.suse.com/1174186" source="BUGZILLA"/>
		<reference ref_id="1174247" ref_url="https://bugzilla.suse.com/1174247" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-0155" ref_url="https://www.suse.com/security/cve/CVE-2019-0155/" source="CVE"/>
		<reference ref_id="CVE-2019-14895" ref_url="https://www.suse.com/security/cve/CVE-2019-14895/" source="CVE"/>
		<reference ref_id="CVE-2019-14901" ref_url="https://www.suse.com/security/cve/CVE-2019-14901/" source="CVE"/>
		<reference ref_id="CVE-2019-15117" ref_url="https://www.suse.com/security/cve/CVE-2019-15117/" source="CVE"/>
		<reference ref_id="CVE-2019-16746" ref_url="https://www.suse.com/security/cve/CVE-2019-16746/" source="CVE"/>
		<reference ref_id="CVE-2019-19447" ref_url="https://www.suse.com/security/cve/CVE-2019-19447/" source="CVE"/>
		<reference ref_id="CVE-2019-9458" ref_url="https://www.suse.com/security/cve/CVE-2019-9458/" source="CVE"/>
		<reference ref_id="CVE-2020-11668" ref_url="https://www.suse.com/security/cve/CVE-2020-11668/" source="CVE"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-15780" ref_url="https://www.suse.com/security/cve/CVE-2020-15780/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2526-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007365.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_18 fixes several issues.

The following security issues were fixed:

- CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
- CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
- CVE-2019-0155: Fixed a privilege escalation in the i915 graphics driver (bsc#1173663).
- CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
- CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
- CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
- CVE-2019-15117: Fixed an OOB memory access in the USB sound mixer (bsc#1173934).
- CVE-2019-19447: Fixed a use-after-free in ext4_put_super (bsc#1173869).
- CVE-2019-14901: Fixed a heap overflow in the Marvell WiFi driver (bsc#1173661).
- CVE-2019-14895: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173100).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-04"/>
	<updated date="2020-09-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173100">SUSE bug 1173100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173659">SUSE bug 1173659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173661">SUSE bug 1173661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173663">SUSE bug 1173663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173869">SUSE bug 1173869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173934">SUSE bug 1173934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173942">SUSE bug 1173942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173963">SUSE bug 1173963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174186">SUSE bug 1174186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174247">SUSE bug 1174247</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-0155/">CVE-2019-0155</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14895/">CVE-2019-14895</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14901/">CVE-2019-14901</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15117/">CVE-2019-15117</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16746/">CVE-2019-16746</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19447/">CVE-2019-19447</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9458/">CVE-2019-9458</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11668/">CVE-2020-11668</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15780/">CVE-2020-15780</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720967" comment="kernel-default 4.12.14-197.18 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719186" comment="kernel-livepatch-4_12_14-197_18-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497481" comment="kernel-livepatch-4_12_14-197_18-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138401" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1173100" ref_url="https://bugzilla.suse.com/1173100" source="BUGZILLA"/>
		<reference ref_id="1173659" ref_url="https://bugzilla.suse.com/1173659" source="BUGZILLA"/>
		<reference ref_id="1173661" ref_url="https://bugzilla.suse.com/1173661" source="BUGZILLA"/>
		<reference ref_id="1173663" ref_url="https://bugzilla.suse.com/1173663" source="BUGZILLA"/>
		<reference ref_id="1173869" ref_url="https://bugzilla.suse.com/1173869" source="BUGZILLA"/>
		<reference ref_id="1173942" ref_url="https://bugzilla.suse.com/1173942" source="BUGZILLA"/>
		<reference ref_id="1173963" ref_url="https://bugzilla.suse.com/1173963" source="BUGZILLA"/>
		<reference ref_id="1174186" ref_url="https://bugzilla.suse.com/1174186" source="BUGZILLA"/>
		<reference ref_id="1174247" ref_url="https://bugzilla.suse.com/1174247" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-0155" ref_url="https://www.suse.com/security/cve/CVE-2019-0155/" source="CVE"/>
		<reference ref_id="CVE-2019-14895" ref_url="https://www.suse.com/security/cve/CVE-2019-14895/" source="CVE"/>
		<reference ref_id="CVE-2019-14901" ref_url="https://www.suse.com/security/cve/CVE-2019-14901/" source="CVE"/>
		<reference ref_id="CVE-2019-16746" ref_url="https://www.suse.com/security/cve/CVE-2019-16746/" source="CVE"/>
		<reference ref_id="CVE-2019-19447" ref_url="https://www.suse.com/security/cve/CVE-2019-19447/" source="CVE"/>
		<reference ref_id="CVE-2019-9458" ref_url="https://www.suse.com/security/cve/CVE-2019-9458/" source="CVE"/>
		<reference ref_id="CVE-2020-11668" ref_url="https://www.suse.com/security/cve/CVE-2020-11668/" source="CVE"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-15780" ref_url="https://www.suse.com/security/cve/CVE-2020-15780/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007356.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_21 fixes several issues.

The following security issues were fixed:

- CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
- CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
- CVE-2019-0155: Fixed a privilege escalation in the i915 graphics driver (bsc#1173663).
- CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
- CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
- CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
- CVE-2019-19447: Fixed a use-after-free in ext4_put_super (bsc#1173869).
- CVE-2019-14901: Fixed a heap overflow in the Marvell WiFi driver (bsc#1173661).
- CVE-2019-14895: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173100).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-04"/>
	<updated date="2020-09-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173100">SUSE bug 1173100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173659">SUSE bug 1173659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173661">SUSE bug 1173661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173663">SUSE bug 1173663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173869">SUSE bug 1173869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173942">SUSE bug 1173942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173963">SUSE bug 1173963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174186">SUSE bug 1174186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174247">SUSE bug 1174247</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-0155/">CVE-2019-0155</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14895/">CVE-2019-14895</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14901/">CVE-2019-14901</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16746/">CVE-2019-16746</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19447/">CVE-2019-19447</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9458/">CVE-2019-9458</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11668/">CVE-2020-11668</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15780/">CVE-2020-15780</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720966" comment="kernel-default 4.12.14-197.21 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719185" comment="kernel-livepatch-4_12_14-197_21-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497482" comment="kernel-livepatch-4_12_14-197_21-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138402" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1173100" ref_url="https://bugzilla.suse.com/1173100" source="BUGZILLA"/>
		<reference ref_id="1173659" ref_url="https://bugzilla.suse.com/1173659" source="BUGZILLA"/>
		<reference ref_id="1173661" ref_url="https://bugzilla.suse.com/1173661" source="BUGZILLA"/>
		<reference ref_id="1173663" ref_url="https://bugzilla.suse.com/1173663" source="BUGZILLA"/>
		<reference ref_id="1173869" ref_url="https://bugzilla.suse.com/1173869" source="BUGZILLA"/>
		<reference ref_id="1173942" ref_url="https://bugzilla.suse.com/1173942" source="BUGZILLA"/>
		<reference ref_id="1173963" ref_url="https://bugzilla.suse.com/1173963" source="BUGZILLA"/>
		<reference ref_id="1174186" ref_url="https://bugzilla.suse.com/1174186" source="BUGZILLA"/>
		<reference ref_id="1174247" ref_url="https://bugzilla.suse.com/1174247" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-0155" ref_url="https://www.suse.com/security/cve/CVE-2019-0155/" source="CVE"/>
		<reference ref_id="CVE-2019-14895" ref_url="https://www.suse.com/security/cve/CVE-2019-14895/" source="CVE"/>
		<reference ref_id="CVE-2019-14901" ref_url="https://www.suse.com/security/cve/CVE-2019-14901/" source="CVE"/>
		<reference ref_id="CVE-2019-16746" ref_url="https://www.suse.com/security/cve/CVE-2019-16746/" source="CVE"/>
		<reference ref_id="CVE-2019-19447" ref_url="https://www.suse.com/security/cve/CVE-2019-19447/" source="CVE"/>
		<reference ref_id="CVE-2019-9458" ref_url="https://www.suse.com/security/cve/CVE-2019-9458/" source="CVE"/>
		<reference ref_id="CVE-2020-11668" ref_url="https://www.suse.com/security/cve/CVE-2020-11668/" source="CVE"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-15780" ref_url="https://www.suse.com/security/cve/CVE-2020-15780/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2505-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007356.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_26 fixes several issues.

The following security issues were fixed:

- CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
- CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
- CVE-2019-0155: Fixed a privilege escalation in the i915 graphics driver (bsc#1173663).
- CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
- CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
- CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
- CVE-2019-19447: Fixed a use-after-free in ext4_put_super (bsc#1173869).
- CVE-2019-14901: Fixed a heap overflow in the Marvell WiFi driver (bsc#1173661).
- CVE-2019-14895: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173100).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-04"/>
	<updated date="2020-09-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173100">SUSE bug 1173100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173659">SUSE bug 1173659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173661">SUSE bug 1173661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173663">SUSE bug 1173663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173869">SUSE bug 1173869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173942">SUSE bug 1173942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173963">SUSE bug 1173963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174186">SUSE bug 1174186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174247">SUSE bug 1174247</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-0155/">CVE-2019-0155</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14895/">CVE-2019-14895</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14901/">CVE-2019-14901</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16746/">CVE-2019-16746</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19447/">CVE-2019-19447</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9458/">CVE-2019-9458</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11668/">CVE-2020-11668</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15780/">CVE-2020-15780</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720972" comment="kernel-default 4.12.14-197.26 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719191" comment="kernel-livepatch-4_12_14-197_26-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497483" comment="kernel-livepatch-4_12_14-197_26-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138403" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1173100" ref_url="https://bugzilla.suse.com/1173100" source="BUGZILLA"/>
		<reference ref_id="1173659" ref_url="https://bugzilla.suse.com/1173659" source="BUGZILLA"/>
		<reference ref_id="1173869" ref_url="https://bugzilla.suse.com/1173869" source="BUGZILLA"/>
		<reference ref_id="1173942" ref_url="https://bugzilla.suse.com/1173942" source="BUGZILLA"/>
		<reference ref_id="1173963" ref_url="https://bugzilla.suse.com/1173963" source="BUGZILLA"/>
		<reference ref_id="1174186" ref_url="https://bugzilla.suse.com/1174186" source="BUGZILLA"/>
		<reference ref_id="1174247" ref_url="https://bugzilla.suse.com/1174247" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14895" ref_url="https://www.suse.com/security/cve/CVE-2019-14895/" source="CVE"/>
		<reference ref_id="CVE-2019-16746" ref_url="https://www.suse.com/security/cve/CVE-2019-16746/" source="CVE"/>
		<reference ref_id="CVE-2019-19447" ref_url="https://www.suse.com/security/cve/CVE-2019-19447/" source="CVE"/>
		<reference ref_id="CVE-2019-9458" ref_url="https://www.suse.com/security/cve/CVE-2019-9458/" source="CVE"/>
		<reference ref_id="CVE-2020-11668" ref_url="https://www.suse.com/security/cve/CVE-2020-11668/" source="CVE"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-15780" ref_url="https://www.suse.com/security/cve/CVE-2020-15780/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007359.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_29 fixes several issues.

The following security issues were fixed:

- CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
- CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
- CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bsc#1173659).
- CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
- CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
- CVE-2019-19447: Fixed a use-after-free in ext4_put_super (bsc#1173869).
- CVE-2019-14895: Fixed a heap-based buffer overflow in the Marvell WiFi driver (bsc#1173100).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-04"/>
	<updated date="2020-09-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173100">SUSE bug 1173100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173659">SUSE bug 1173659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173869">SUSE bug 1173869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173942">SUSE bug 1173942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173963">SUSE bug 1173963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174186">SUSE bug 1174186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174247">SUSE bug 1174247</bugzilla>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14895/">CVE-2019-14895</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16746/">CVE-2019-16746</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19447/">CVE-2019-19447</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9458/">CVE-2019-9458</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11668/">CVE-2020-11668</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15780/">CVE-2020-15780</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720971" comment="kernel-default 4.12.14-197.29 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719190" comment="kernel-livepatch-4_12_14-197_29-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497484" comment="kernel-livepatch-4_12_14-197_29-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138404" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1173942" ref_url="https://bugzilla.suse.com/1173942" source="BUGZILLA"/>
		<reference ref_id="1173963" ref_url="https://bugzilla.suse.com/1173963" source="BUGZILLA"/>
		<reference ref_id="1174186" ref_url="https://bugzilla.suse.com/1174186" source="BUGZILLA"/>
		<reference ref_id="1174247" ref_url="https://bugzilla.suse.com/1174247" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9458" ref_url="https://www.suse.com/security/cve/CVE-2019-9458/" source="CVE"/>
		<reference ref_id="CVE-2020-11668" ref_url="https://www.suse.com/security/cve/CVE-2020-11668/" source="CVE"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-15780" ref_url="https://www.suse.com/security/cve/CVE-2020-15780/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007353.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_34 fixes several issues.

The following security issues were fixed:

- CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
- CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
- CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
- CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-04"/>
	<updated date="2020-09-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173942">SUSE bug 1173942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173963">SUSE bug 1173963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174186">SUSE bug 1174186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174247">SUSE bug 1174247</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9458/">CVE-2019-9458</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11668/">CVE-2020-11668</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15780/">CVE-2020-15780</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720970" comment="kernel-default 4.12.14-197.34 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719189" comment="kernel-livepatch-4_12_14-197_34-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497485" comment="kernel-livepatch-4_12_14-197_34-default-5-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138405" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1173942" ref_url="https://bugzilla.suse.com/1173942" source="BUGZILLA"/>
		<reference ref_id="1173963" ref_url="https://bugzilla.suse.com/1173963" source="BUGZILLA"/>
		<reference ref_id="1174186" ref_url="https://bugzilla.suse.com/1174186" source="BUGZILLA"/>
		<reference ref_id="1174247" ref_url="https://bugzilla.suse.com/1174247" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9458" ref_url="https://www.suse.com/security/cve/CVE-2019-9458/" source="CVE"/>
		<reference ref_id="CVE-2020-11668" ref_url="https://www.suse.com/security/cve/CVE-2020-11668/" source="CVE"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-15780" ref_url="https://www.suse.com/security/cve/CVE-2020-15780/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007353.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_37 fixes several issues.

The following security issues were fixed:

- CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
- CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
- CVE-2019-9458: Fixed a use-after-free in media/v4l (bsc#1173963).
- CVE-2020-11668: Fixed a memory corruption issue in the Xirlink camera USB driver (bsc#1173942).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-04"/>
	<updated date="2020-09-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173942">SUSE bug 1173942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173963">SUSE bug 1173963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174186">SUSE bug 1174186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174247">SUSE bug 1174247</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9458/">CVE-2019-9458</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11668/">CVE-2020-11668</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15780/">CVE-2020-15780</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720968" comment="kernel-default 4.12.14-197.37 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719187" comment="kernel-livepatch-4_12_14-197_37-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497486" comment="kernel-livepatch-4_12_14-197_37-default-5-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138406" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1174186" ref_url="https://bugzilla.suse.com/1174186" source="BUGZILLA"/>
		<reference ref_id="1174247" ref_url="https://bugzilla.suse.com/1174247" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-15780" ref_url="https://www.suse.com/security/cve/CVE-2020-15780/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007372.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_40 fixes several issues.

The following security issues were fixed:

- CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
- CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-04"/>
	<updated date="2020-09-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174186">SUSE bug 1174186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174247">SUSE bug 1174247</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15780/">CVE-2020-15780</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720969" comment="kernel-default 4.12.14-197.40 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719188" comment="kernel-livepatch-4_12_14-197_40-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497487" comment="kernel-livepatch-4_12_14-197_40-default-4-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138407" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1165631" ref_url="https://bugzilla.suse.com/1165631" source="BUGZILLA"/>
		<reference ref_id="1174186" ref_url="https://bugzilla.suse.com/1174186" source="BUGZILLA"/>
		<reference ref_id="1174247" ref_url="https://bugzilla.suse.com/1174247" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-15780" ref_url="https://www.suse.com/security/cve/CVE-2020-15780/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2517-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007366.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_45 fixes several issues.

The following security issues were fixed:

- CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
- CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACPI tables via configfs (bsc#1174186).
- CVE-2020-1749: Fixed a flaw in IPsec where some IPv6 protocols were not encrypted (bsc#1165631).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-04"/>
	<updated date="2020-09-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174186">SUSE bug 1174186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174247">SUSE bug 1174247</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15780/">CVE-2020-15780</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720973" comment="kernel-default 4.12.14-197.45 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719192" comment="kernel-livepatch-4_12_14-197_45-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497488" comment="kernel-livepatch-4_12_14-197_45-default-2-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138408" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1165631" ref_url="https://bugzilla.suse.com/1165631" source="BUGZILLA"/>
		<reference ref_id="1174247" ref_url="https://bugzilla.suse.com/1174247" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007369.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_48 fixes several issues.

The following security issues were fixed:

- CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
- CVE-2020-1749: Fixed a flaw in IPsec where some IPv6 protocols were not encrypted (bsc#1165631).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-04"/>
	<updated date="2020-09-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174247">SUSE bug 1174247</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720974" comment="kernel-default 4.12.14-197.48 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719193" comment="kernel-livepatch-4_12_14-197_48-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497489" comment="kernel-livepatch-4_12_14-197_48-default-2-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138409" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1165631" ref_url="https://bugzilla.suse.com/1165631" source="BUGZILLA"/>
		<reference ref_id="1174247" ref_url="https://bugzilla.suse.com/1174247" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2534-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007369.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_51 fixes several issues.

The following security issues were fixed:

- CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247).
- CVE-2020-1749: Fixed a flaw in IPsec where some IPv6 protocols were not encrypted (bsc#1165631).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-04"/>
	<updated date="2020-09-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174247">SUSE bug 1174247</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720975" comment="kernel-default 4.12.14-197.51 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719194" comment="kernel-livepatch-4_12_14-197_51-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497490" comment="kernel-livepatch-4_12_14-197_51-default-2-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138410" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083548" ref_url="https://bugzilla.suse.com/1083548" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1120163" ref_url="https://bugzilla.suse.com/1120163" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1136666" ref_url="https://bugzilla.suse.com/1136666" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1152148" ref_url="https://bugzilla.suse.com/1152148" source="BUGZILLA"/>
		<reference ref_id="1163524" ref_url="https://bugzilla.suse.com/1163524" source="BUGZILLA"/>
		<reference ref_id="1165629" ref_url="https://bugzilla.suse.com/1165629" source="BUGZILLA"/>
		<reference ref_id="1166965" ref_url="https://bugzilla.suse.com/1166965" source="BUGZILLA"/>
		<reference ref_id="1169790" ref_url="https://bugzilla.suse.com/1169790" source="BUGZILLA"/>
		<reference ref_id="1170232" ref_url="https://bugzilla.suse.com/1170232" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1171688" ref_url="https://bugzilla.suse.com/1171688" source="BUGZILLA"/>
		<reference ref_id="1171988" ref_url="https://bugzilla.suse.com/1171988" source="BUGZILLA"/>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1172108" ref_url="https://bugzilla.suse.com/1172108" source="BUGZILLA"/>
		<reference ref_id="1172247" ref_url="https://bugzilla.suse.com/1172247" source="BUGZILLA"/>
		<reference ref_id="1172418" ref_url="https://bugzilla.suse.com/1172418" source="BUGZILLA"/>
		<reference ref_id="1172428" ref_url="https://bugzilla.suse.com/1172428" source="BUGZILLA"/>
		<reference ref_id="1172871" ref_url="https://bugzilla.suse.com/1172871" source="BUGZILLA"/>
		<reference ref_id="1172872" ref_url="https://bugzilla.suse.com/1172872" source="BUGZILLA"/>
		<reference ref_id="1172873" ref_url="https://bugzilla.suse.com/1172873" source="BUGZILLA"/>
		<reference ref_id="1172963" ref_url="https://bugzilla.suse.com/1172963" source="BUGZILLA"/>
		<reference ref_id="1173060" ref_url="https://bugzilla.suse.com/1173060" source="BUGZILLA"/>
		<reference ref_id="1173485" ref_url="https://bugzilla.suse.com/1173485" source="BUGZILLA"/>
		<reference ref_id="1173798" ref_url="https://bugzilla.suse.com/1173798" source="BUGZILLA"/>
		<reference ref_id="1173954" ref_url="https://bugzilla.suse.com/1173954" source="BUGZILLA"/>
		<reference ref_id="1174003" ref_url="https://bugzilla.suse.com/1174003" source="BUGZILLA"/>
		<reference ref_id="1174026" ref_url="https://bugzilla.suse.com/1174026" source="BUGZILLA"/>
		<reference ref_id="1174070" ref_url="https://bugzilla.suse.com/1174070" source="BUGZILLA"/>
		<reference ref_id="1174205" ref_url="https://bugzilla.suse.com/1174205" source="BUGZILLA"/>
		<reference ref_id="1174387" ref_url="https://bugzilla.suse.com/1174387" source="BUGZILLA"/>
		<reference ref_id="1174484" ref_url="https://bugzilla.suse.com/1174484" source="BUGZILLA"/>
		<reference ref_id="1174547" ref_url="https://bugzilla.suse.com/1174547" source="BUGZILLA"/>
		<reference ref_id="1174549" ref_url="https://bugzilla.suse.com/1174549" source="BUGZILLA"/>
		<reference ref_id="1174550" ref_url="https://bugzilla.suse.com/1174550" source="BUGZILLA"/>
		<reference ref_id="1174625" ref_url="https://bugzilla.suse.com/1174625" source="BUGZILLA"/>
		<reference ref_id="1174658" ref_url="https://bugzilla.suse.com/1174658" source="BUGZILLA"/>
		<reference ref_id="1174685" ref_url="https://bugzilla.suse.com/1174685" source="BUGZILLA"/>
		<reference ref_id="1174689" ref_url="https://bugzilla.suse.com/1174689" source="BUGZILLA"/>
		<reference ref_id="1174699" ref_url="https://bugzilla.suse.com/1174699" source="BUGZILLA"/>
		<reference ref_id="1174734" ref_url="https://bugzilla.suse.com/1174734" source="BUGZILLA"/>
		<reference ref_id="1174757" ref_url="https://bugzilla.suse.com/1174757" source="BUGZILLA"/>
		<reference ref_id="1174771" ref_url="https://bugzilla.suse.com/1174771" source="BUGZILLA"/>
		<reference ref_id="1174840" ref_url="https://bugzilla.suse.com/1174840" source="BUGZILLA"/>
		<reference ref_id="1174841" ref_url="https://bugzilla.suse.com/1174841" source="BUGZILLA"/>
		<reference ref_id="1174843" ref_url="https://bugzilla.suse.com/1174843" source="BUGZILLA"/>
		<reference ref_id="1174844" ref_url="https://bugzilla.suse.com/1174844" source="BUGZILLA"/>
		<reference ref_id="1174845" ref_url="https://bugzilla.suse.com/1174845" source="BUGZILLA"/>
		<reference ref_id="1174852" ref_url="https://bugzilla.suse.com/1174852" source="BUGZILLA"/>
		<reference ref_id="1174873" ref_url="https://bugzilla.suse.com/1174873" source="BUGZILLA"/>
		<reference ref_id="1174904" ref_url="https://bugzilla.suse.com/1174904" source="BUGZILLA"/>
		<reference ref_id="1174926" ref_url="https://bugzilla.suse.com/1174926" source="BUGZILLA"/>
		<reference ref_id="1174968" ref_url="https://bugzilla.suse.com/1174968" source="BUGZILLA"/>
		<reference ref_id="1175062" ref_url="https://bugzilla.suse.com/1175062" source="BUGZILLA"/>
		<reference ref_id="1175063" ref_url="https://bugzilla.suse.com/1175063" source="BUGZILLA"/>
		<reference ref_id="1175064" ref_url="https://bugzilla.suse.com/1175064" source="BUGZILLA"/>
		<reference ref_id="1175065" ref_url="https://bugzilla.suse.com/1175065" source="BUGZILLA"/>
		<reference ref_id="1175066" ref_url="https://bugzilla.suse.com/1175066" source="BUGZILLA"/>
		<reference ref_id="1175067" ref_url="https://bugzilla.suse.com/1175067" source="BUGZILLA"/>
		<reference ref_id="1175112" ref_url="https://bugzilla.suse.com/1175112" source="BUGZILLA"/>
		<reference ref_id="1175127" ref_url="https://bugzilla.suse.com/1175127" source="BUGZILLA"/>
		<reference ref_id="1175128" ref_url="https://bugzilla.suse.com/1175128" source="BUGZILLA"/>
		<reference ref_id="1175149" ref_url="https://bugzilla.suse.com/1175149" source="BUGZILLA"/>
		<reference ref_id="1175199" ref_url="https://bugzilla.suse.com/1175199" source="BUGZILLA"/>
		<reference ref_id="1175213" ref_url="https://bugzilla.suse.com/1175213" source="BUGZILLA"/>
		<reference ref_id="1175228" ref_url="https://bugzilla.suse.com/1175228" source="BUGZILLA"/>
		<reference ref_id="1175232" ref_url="https://bugzilla.suse.com/1175232" source="BUGZILLA"/>
		<reference ref_id="1175284" ref_url="https://bugzilla.suse.com/1175284" source="BUGZILLA"/>
		<reference ref_id="1175393" ref_url="https://bugzilla.suse.com/1175393" source="BUGZILLA"/>
		<reference ref_id="1175394" ref_url="https://bugzilla.suse.com/1175394" source="BUGZILLA"/>
		<reference ref_id="1175396" ref_url="https://bugzilla.suse.com/1175396" source="BUGZILLA"/>
		<reference ref_id="1175397" ref_url="https://bugzilla.suse.com/1175397" source="BUGZILLA"/>
		<reference ref_id="1175398" ref_url="https://bugzilla.suse.com/1175398" source="BUGZILLA"/>
		<reference ref_id="1175399" ref_url="https://bugzilla.suse.com/1175399" source="BUGZILLA"/>
		<reference ref_id="1175400" ref_url="https://bugzilla.suse.com/1175400" source="BUGZILLA"/>
		<reference ref_id="1175401" ref_url="https://bugzilla.suse.com/1175401" source="BUGZILLA"/>
		<reference ref_id="1175402" ref_url="https://bugzilla.suse.com/1175402" source="BUGZILLA"/>
		<reference ref_id="1175403" ref_url="https://bugzilla.suse.com/1175403" source="BUGZILLA"/>
		<reference ref_id="1175404" ref_url="https://bugzilla.suse.com/1175404" source="BUGZILLA"/>
		<reference ref_id="1175405" ref_url="https://bugzilla.suse.com/1175405" source="BUGZILLA"/>
		<reference ref_id="1175406" ref_url="https://bugzilla.suse.com/1175406" source="BUGZILLA"/>
		<reference ref_id="1175407" ref_url="https://bugzilla.suse.com/1175407" source="BUGZILLA"/>
		<reference ref_id="1175408" ref_url="https://bugzilla.suse.com/1175408" source="BUGZILLA"/>
		<reference ref_id="1175409" ref_url="https://bugzilla.suse.com/1175409" source="BUGZILLA"/>
		<reference ref_id="1175410" ref_url="https://bugzilla.suse.com/1175410" source="BUGZILLA"/>
		<reference ref_id="1175411" ref_url="https://bugzilla.suse.com/1175411" source="BUGZILLA"/>
		<reference ref_id="1175412" ref_url="https://bugzilla.suse.com/1175412" source="BUGZILLA"/>
		<reference ref_id="1175413" ref_url="https://bugzilla.suse.com/1175413" source="BUGZILLA"/>
		<reference ref_id="1175414" ref_url="https://bugzilla.suse.com/1175414" source="BUGZILLA"/>
		<reference ref_id="1175415" ref_url="https://bugzilla.suse.com/1175415" source="BUGZILLA"/>
		<reference ref_id="1175416" ref_url="https://bugzilla.suse.com/1175416" source="BUGZILLA"/>
		<reference ref_id="1175417" ref_url="https://bugzilla.suse.com/1175417" source="BUGZILLA"/>
		<reference ref_id="1175418" ref_url="https://bugzilla.suse.com/1175418" source="BUGZILLA"/>
		<reference ref_id="1175419" ref_url="https://bugzilla.suse.com/1175419" source="BUGZILLA"/>
		<reference ref_id="1175420" ref_url="https://bugzilla.suse.com/1175420" source="BUGZILLA"/>
		<reference ref_id="1175421" ref_url="https://bugzilla.suse.com/1175421" source="BUGZILLA"/>
		<reference ref_id="1175422" ref_url="https://bugzilla.suse.com/1175422" source="BUGZILLA"/>
		<reference ref_id="1175423" ref_url="https://bugzilla.suse.com/1175423" source="BUGZILLA"/>
		<reference ref_id="1175440" ref_url="https://bugzilla.suse.com/1175440" source="BUGZILLA"/>
		<reference ref_id="1175493" ref_url="https://bugzilla.suse.com/1175493" source="BUGZILLA"/>
		<reference ref_id="1175515" ref_url="https://bugzilla.suse.com/1175515" source="BUGZILLA"/>
		<reference ref_id="1175518" ref_url="https://bugzilla.suse.com/1175518" source="BUGZILLA"/>
		<reference ref_id="1175526" ref_url="https://bugzilla.suse.com/1175526" source="BUGZILLA"/>
		<reference ref_id="1175550" ref_url="https://bugzilla.suse.com/1175550" source="BUGZILLA"/>
		<reference ref_id="1175654" ref_url="https://bugzilla.suse.com/1175654" source="BUGZILLA"/>
		<reference ref_id="1175666" ref_url="https://bugzilla.suse.com/1175666" source="BUGZILLA"/>
		<reference ref_id="1175667" ref_url="https://bugzilla.suse.com/1175667" source="BUGZILLA"/>
		<reference ref_id="1175668" ref_url="https://bugzilla.suse.com/1175668" source="BUGZILLA"/>
		<reference ref_id="1175669" ref_url="https://bugzilla.suse.com/1175669" source="BUGZILLA"/>
		<reference ref_id="1175670" ref_url="https://bugzilla.suse.com/1175670" source="BUGZILLA"/>
		<reference ref_id="1175691" ref_url="https://bugzilla.suse.com/1175691" source="BUGZILLA"/>
		<reference ref_id="1175767" ref_url="https://bugzilla.suse.com/1175767" source="BUGZILLA"/>
		<reference ref_id="1175768" ref_url="https://bugzilla.suse.com/1175768" source="BUGZILLA"/>
		<reference ref_id="1175769" ref_url="https://bugzilla.suse.com/1175769" source="BUGZILLA"/>
		<reference ref_id="1175770" ref_url="https://bugzilla.suse.com/1175770" source="BUGZILLA"/>
		<reference ref_id="1175771" ref_url="https://bugzilla.suse.com/1175771" source="BUGZILLA"/>
		<reference ref_id="1175772" ref_url="https://bugzilla.suse.com/1175772" source="BUGZILLA"/>
		<reference ref_id="1175786" ref_url="https://bugzilla.suse.com/1175786" source="BUGZILLA"/>
		<reference ref_id="1175873" ref_url="https://bugzilla.suse.com/1175873" source="BUGZILLA"/>
		<reference ref_id="1176069" ref_url="https://bugzilla.suse.com/1176069" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10135" ref_url="https://www.suse.com/security/cve/CVE-2020-10135/" source="CVE"/>
		<reference ref_id="CVE-2020-14314" ref_url="https://www.suse.com/security/cve/CVE-2020-14314/" source="CVE"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-14356" ref_url="https://www.suse.com/security/cve/CVE-2020-14356/" source="CVE"/>
		<reference ref_id="CVE-2020-14386" ref_url="https://www.suse.com/security/cve/CVE-2020-14386/" source="CVE"/>
		<reference ref_id="CVE-2020-16166" ref_url="https://www.suse.com/security/cve/CVE-2020-16166/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="CVE-2020-24394" ref_url="https://www.suse.com/security/cve/CVE-2020-24394/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007383.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629).
- CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
- CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).
- CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
- CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
- CVE-2020-24394: Fixed an issue which could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support (bsc#1175518).
- CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988).
- CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).
    
The following non-security bugs were fixed:

- ACPI: kABI fixes for subsys exports (bsc#1174968).
- ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq (bsc#1174968).
- ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate (bsc#1174968).
- ACPI: PM: Introduce 'poweroff' callbacks for ACPI PM domain and LPSS (bsc#1174968).
- ACPI: PM: Simplify and fix PM domain hibernation callbacks (bsc#1174968).
- af_key: pfkey_dump needs parameter validation (git-fixes).
- agp/intel: Fix a memory leak on module initialisation failure (git-fixes).
- ALSA: core: pcm_iec958: fix kernel-doc (bsc#1111666).
- ALSA: echoaduio: Drop superfluous volatile modifier (bsc#1111666).
- ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (bsc#1111666).
- ALSA: hda: Add support for Loongson 7A1000 controller (bsc#1111666).
- ALSA: hda/ca0132 - Add new quirk ID for Recon3D (bsc#1111666).
- ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (bsc#1111666).
- ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (bsc#1111666).
- ALSA: hda: fix NULL pointer dereference during suspend (git-fixes).
- ALSA: hda: fix snd_hda_codec_cleanup() documentation (bsc#1111666).
- ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (bsc#1111666).
- ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (bsc#1111666).
- ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes).
- ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (bsc#1111666).
- ALSA: hda/realtek - Add quirk for Lenovo Carbon X1 8th gen (bsc#1111666).
- ALSA: hda/realtek - Add quirk for MSI GE63 laptop (bsc#1111666).
- ALSA: hda/realtek - Add quirk for MSI GL63 (bsc#1111666).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes).
- ALSA: hda/realtek - change to suitable link model for ASUS platform (bsc#1111666).
- ALSA: hda/realtek - Check headset type by unplug and resume (bsc#1111666).
- ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 (bsc#1111666).
- ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (bsc#1111666).
- ALSA: hda/realtek - Enable Speaker for ASUS UX563 (bsc#1111666).
- ALSA: hda/realtek: Fix add a 'ultra_low_power' function for intel reference board (alc256) (bsc#1111666).
- ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung Notebook Pen S (bsc#1111666).
- ALSA: hda/realtek - Fixed HP right speaker no sound (bsc#1111666).
- ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id (bsc#1111666).
- ALSA: hda/realtek: Fix pin default on Intel NUC 8 Rugged (bsc#1111666).
- ALSA: hda/realtek - Fix unused variable warning (bsc#1111666).
- ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus G14(GA401) series with ALC289 (bsc#1111666).
- ALSA: hda - reverse the setting value in the micmute_led_set (bsc#1111666).
- ALSA: hda: Workaround for spurious wakeups on some Intel platforms (git-fixes).
- ALSA: pci: delete repeated words in comments (bsc#1111666).
- ALSA: seq: oss: Serialize ioctls (bsc#1111666).
- ALSA: usb-audio: Add capture support for Saffire 6 (USB 1.1) (git-fixes).
- ALSA: usb-audio: add quirk for Pioneer DDJ-RB (bsc#1111666).
- ALSA: usb-audio: add startech usb audio dock name (bsc#1111666).
- ALSA: usb-audio: Add support for Lenovo ThinkStation P620 (bsc#1111666).
- ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support (bsc#1111666).
- ALSA: usb-audio: Disable Lenovo P620 Rear line-in volume control (bsc#1111666).
- ALSA: usb-audio: endpoint : remove needless check before usb_free_coherent() (bsc#1111666).
- ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 (bsc#1174625).
- ALSA: usb-audio: fix spelling mistake 'buss' -&gt; 'bus' (bsc#1111666).
- ALSA: usb-audio: ignore broken processing/extension unit (git-fixes).
- ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109 (bsc#1111666).
- ALSA: usb/line6: remove 'defined but not used' warning (bsc#1111666).
- arm64: Add MIDR encoding for HiSilicon Taishan CPUs (bsc#1174547).
- arm64: Add MIDR encoding for NVIDIA CPUs (bsc#1174547).
- arm64: add sysfs vulnerability show for meltdown (bsc#1174547).
- arm64: Add sysfs vulnerability show for spectre-v1 (bsc#1174547).
- arm64: add sysfs vulnerability show for spectre-v2 (bsc#1174547).
- arm64: add sysfs vulnerability show for speculative store bypass (bsc#1174547). 
- arm64: Advertise mitigation of Spectre-v2, or lack thereof (bsc#1174547). 
- arm64: Always enable spectre-v2 vulnerability detection (bsc#1174547). 
- arm64: Always enable ssb vulnerability detection (bsc#1174547). 
- arm64: backtrace: Do not bother trying to unwind the userspace stack (bsc#1175397).
- arm64: capabilities: Add NVIDIA Denver CPU to bp_harden list (bsc#1174547).
- arm64: capabilities: Merge duplicate Cavium erratum entries (bsc#1174547).
- arm64: capabilities: Merge entries for ARM64_WORKAROUND_CLEAN_CACHE (bsc#1174547). 
- arm64: cpufeature: Enable Qualcomm Falkor/Kryo errata 1003 (bsc#1175398).
- arm64: Do not mask out PTE_RDONLY in pte_same() (bsc#1175393).
- arm64: enable generic CPU vulnerabilites support (bsc#1174547). Update config/arm64/default
- arm64: Ensure VM_WRITE|VM_SHARED ptes are clean by default (bsc#1175394).
- arm64: errata: Do not define type field twice for arm64_errata entries (bsc#1174547).
- arm64: errata: Update stale comment (bsc#1174547).
- arm64: Get rid of __smccc_workaround_1_hvc_* (bsc#1174547).
- arm64: kpti: Avoid rewriting early page tables when KASLR is enabled (bsc#1174547).
- arm64: kpti: Update arm64_kernel_use_ng_mappings() when forced on (bsc#1174547).
- arm64: kpti: Whitelist Cortex-A CPUs that do not implement the CSV3 field (bsc#1174547).
- arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs (bsc#1174547).
- arm64: KVM: Avoid setting the upper 32 bits of VTCR_EL2 to 1 (bsc#1133021).
- arm64: KVM: Guests can skip __install_bp_hardening_cb()s HYP work (bsc#1174547).
- arm64: KVM: Use SMCCC_ARCH_WORKAROUND_1 for Falkor BP hardening (bsc#1174547). 
- arm64: mm: Fix pte_mkclean, pte_mkdirty semantics (bsc#1175526). 
- arm64: Provide a command line to disable spectre_v2 mitigation (bsc#1174547).
- arm64: Silence clang warning on mismatched value/register sizes (bsc#1175396).
- arm64/speculation: Support 'mitigations=' cmdline option (bsc#1174547). 
- arm64: ssbd: explicitly depend on &lt;linux/prctl.h&gt; (bsc#1175399).
- arm64: ssbs: Do not treat CPUs with SSBS as unaffected by SSB (bsc#1174547).
- arm64: ssbs: Fix context-switch when SSBS is present on all CPUs (bsc#1175669).
- arm64/sve: Fix wrong free for task-&gt;thread.sve_state (bsc#1175400).
- arm64/sve: &lt;uapi/asm/ptrace.h&gt; should not depend on &amp;lt;uapi/linux/prctl.h&gt; (bsc#1175401).
- arm64: tlbflush: avoid writing RES0 bits (bsc#1175402).
- arm64: Use firmware to detect CPUs that are not affected by Spectre-v2 (bsc#1174547).
- ARM: KVM: invalidate BTB on guest exit for Cortex-A12/A17 (bsc#1133021). 
- ARM: KVM: invalidate icache on guest exit for Cortex-A15 (bsc#1133021).
- ARM: spectre-v2: KVM: invalidate icache on guest exit for Brahma B15 (bsc#1133021).
- ASoC: hda/tegra: Set buffer alignment to 128 bytes (bsc#1111666).
- ASoC: intel: Fix memleak in sst_media_open (git-fixes).
- ASoC: rt5670: Correct RT5670_LDO_SEL_MASK (git-fixes).
- AX.25: Fix out-of-bounds read in ax25_connect() (git-fixes).
- AX.25: Prevent integer overflows in connect and sendmsg (git-fixes).
- AX.25: Prevent out-of-bounds read in ax25_sendmsg() (git-fixes).
- ax88172a: fix ax88172a_unbind() failures (git-fixes).
- b43: Remove uninitialized_var() usage (git-fixes).
- bcache: allocate meta data pages as compound pages (bsc#1172873).
- block: check queue's limits.discard_granularity in __blkdev_issue_discard() (bsc#1152148).
- block: Fix use-after-free in blkdev_get() (bsc#1174843).
- block: improve discard bio alignment in __blkdev_issue_discard() (bsc#1152148).
- Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() (bsc#1111666).
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt() (bsc#1111666).
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt() (bsc#1111666).
- bonding: fix active-backup failover for current ARP slave (bsc#1174771).
- bonding: fix a potential double-unregister (git-fixes).
- bonding: show saner speed for broadcast mode (git-fixes).
- bpf: Fix map leak in HASH_OF_MAPS map (git-fixes).
- brcmfmac: keep SDIO watchdog running when console_interval is non-zero (bsc#1111666).
- brcmfmac: set state of hanger slot to FREE when flushing PSQ (bsc#1111666).
- brcmfmac: To fix Bss Info flag definition Bug (bsc#1111666).
- btrfs: change timing for qgroup reserved space for ordered extents to fix reserved space leak (bsc#1172247).
- btrfs: file: reserve qgroup space after the hole punch range is locked (bsc#1172247).
- btrfs: fix a block group ref counter leak after failure to remove block group (bsc#1175149).
- btrfs: fix block group leak when removing fails (bsc#1175149).
- btrfs: fix bytes_may_use underflow when running balance and scrub in parallel (bsc#1175149).
- btrfs: fix corrupt log due to concurrent fsync of inodes with shared extents (bsc#1175149).
- btrfs: fix data block group relocation failure due to concurrent scrub (bsc#1175149).
- btrfs: fix double free on ulist after backref resolution failure (bsc#1175149).
- btrfs: fix fatal extent_buffer readahead vs releasepage race (bsc#1175149).
- btrfs: fix memory leaks after failure to lookup checksums during inode logging (bsc#1175550).
- btrfs: fix page leaks after failure to lock page for delalloc (bsc#1175149).
- btrfs: fix race between block group removal and block group creation (bsc#1175149).
- btrfs: fix space_info bytes_may_use underflow after nocow buffered write (bsc#1175149).
- btrfs: fix space_info bytes_may_use underflow during space cache writeout (bsc#1175149).
- btrfs: fix wrong file range cleanup after an error filling dealloc range (bsc#1175149).
- btrfs: inode: fix NULL pointer dereference if inode does not need compression (bsc#1174484).
- btrfs: inode: move qgroup reserved space release to the callers of insert_reserved_file_extent() (bsc#1172247).
- btrfs: inode: refactor the parameters of insert_reserved_file_extent() (bsc#1172247).
- btrfs: make btrfs_ordered_extent naming consistent with btrfs_file_extent_item (bsc#1172247).
- btrfs: Open code btrfs_write_and_wait_marked_extents (bsc#1175149).
- btrfs: qgroup: allow to unreserve range without releasing other ranges (bsc#1120163).
- btrfs: qgroup: fix data leak caused by race between writeback and truncate (bsc#1172247).
- btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT (bsc#1120163).
- btrfs: qgroup: try to flush qgroup space when we get -EDQUOT (bsc#1120163).
- btrfs: Rename and export clear_btree_io_tree (bsc#1175149).
- btrfs: treat RWF_{,D}SYNC writes as sync for CRCs (bsc#1175493).
- bus: hisi_lpc: Add .remove method to avoid driver unbind crash (bsc#1174658).
- bus: hisi_lpc: Do not fail probe for unrecognised child devices (bsc#1174658).
- bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-free (bsc#1174658).
- cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip (git-fixes).
- cfg80211: check vendor command doit pointer before use (git-fixes).
- char: virtio: Select VIRTIO from VIRTIO_CONSOLE (bsc#1175667).
- cifs: document and cleanup dfs mount (bsc#1144333 bsc#1172428).
- cifs: Fix an error pointer dereference in cifs_mount() (bsc#1144333 bsc#1172428).
- cifs: fix double free error on share and prefix (bsc#1144333 bsc#1172428).
- cifs: handle empty list of targets in cifs_reconnect() (bsc#1144333 bsc#1172428).
- cifs: handle RESP_GET_DFS_REFERRAL.PathConsumed in reconnect (bsc#1144333 bsc#1172428).
- cifs: merge __{cifs,smb2}_reconnect[_tcon]() into cifs_tree_connect() (bsc#1144333 bsc#1172428).
- cifs: only update prefix path of DFS links in cifs_tree_connect() (bsc#1144333 bsc#1172428).
- cifs: reduce number of referral requests in DFS link lookups (bsc#1144333 bsc#1172428).
- cifs: rename reconn_inval_dfs_target() (bsc#1144333 bsc#1172428).
- clk: at91: clk-generated: check best_rate against ranges (bsc#1111666).
- clk: clk-atlas6: fix return value check in atlas6_clk_init() (bsc#1111666).
- clk: iproc: round clock rate to the closest (bsc#1111666).
- clk: spear: Remove uninitialized_var() usage (git-fixes).
- clk: st: Remove uninitialized_var() usage (git-fixes).
- config: arm64: enable CONFIG_IOMMU_DEFAULT_PASSTHROUGH References: bsc#1174549
- console: newport_con: fix an issue about leak related system resources (git-fixes).
- constrants: fix malformed XML Closing tag of an element is '&lt;/foo&gt;', not '&lt;foo/&gt;'. Fixes: 8b37de2eb835 ('rpm/constraints.in: Increase memory for kernel-docs')
- Created new preempt kernel flavor (jsc#SLE-11309) Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT-&gt;y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.
- crypto: ccp - Fix use of merged scatterlists (git-fixes).
- crypto: cpt - do not sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified (git-fixes).
- crypto: qat - fix double free in qat_uclo_create_batch_init_list (git-fixes).
- crypto: rockchip - fix scatterlist nents error (git-fixes).
- crypto: stm32/crc32 - fix ext4 chksum BUG_ON() (git-fixes).
- crypto: talitos - check AES key size (git-fixes).
- crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK (git-fixes).
- crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req() (git-fixes).
- dev: Defer free of skbs in flush_backlog (git-fixes).
- device property: Fix the secondary firmware node handling in set_primary_fwnode() (git-fixes).
- devres: keep both device name and resource name in pretty name (git-fixes).
- dlm: Fix kobject memleak (bsc#1175768).
- dlm: remove BUG() before panic() (bsc#1174844).
- dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler (git-fixes).
- Documentation/networking: Add net DIM documentation (bsc#1174852).
- dpaa2-eth: Fix passing zero to 'PTR_ERR' warning (bsc#1175403).
- dpaa2-eth: free already allocated channels on probe defer (bsc#1175404).
- dpaa2-eth: prevent array underflow in update_cls_rule() (bsc#1175405).
- dpaa_eth: add dropped frames to percpu ethtool stats (bsc#1174550).
- dpaa_eth: add newline in dev_err() msg (bsc#1174550).
- dpaa_eth: avoid timestamp read on error paths (bsc#1175406).
- dpaa_eth: change DMA device (bsc#1174550).
- dpaa_eth: cleanup skb_to_contig_fd() (bsc#1174550).
- dpaa_eth: defer probing after qbman (bsc#1174550).
- dpaa_eth: extend delays in ndo_stop (bsc#1174550).
- dpaa_eth: fix DMA mapping leak (bsc#1174550).
- dpaa_eth: Fix one possible memleak in dpaa_eth_probe (bsc#1174550).
- dpaa_eth: FMan erratum A050385 workaround (bsc#1174550).
- dpaa_eth: perform DMA unmapping before read (bsc#1175407).
- dpaa_eth: register a device link for the qman portal used (bsc#1174550).
- dpaa_eth: remove netdev_err() for user errors (bsc#1174550).
- dpaa_eth: remove redundant code (bsc#1174550).
- dpaa_eth: simplify variables used in dpaa_cleanup_tx_fd() (bsc#1174550).
- dpaa_eth: use a page to store the SGT (bsc#1174550).
- dpaa_eth: use fd information in dpaa_cleanup_tx_fd() (bsc#1174550).
- dpaa_eth: use only one buffer pool per interface (bsc#1174550).
- dpaa_eth: use page backed rx buffers (bsc#1174550).
- driver core: Avoid binding drivers to dead devices (git-fixes).
- Drivers: hv: balloon: Remove dependencies on guest page size (git-fixes).
- Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE (git-fixes).
- Drivers: hv: vmbus: Only notify Hyper-V for die events that are oops (bsc#1175127, bsc#1175128).
- Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup() (git-fixes).
- drivers/perf: hisi: Fix typo in events attribute array (bsc#1175408).
- drivers/perf: hisi: Fixup one DDRC PMU register offset (bsc#1175410).
- drivers/perf: hisi: Fix wrong value for all counters enable (bsc#1175409).
- drm: Added orientation quirk for ASUS tablet model T103HAF (bsc#1111666).
- drm/amd/display: fix pow() crashing when given base 0 (git-fixes).
- drm/amdgpu: avoid dereferencing a NULL pointer (bsc#1111666).
- drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume (bsc#1111666).
- drm/amdgpu: Fix NULL dereference in dpm sysfs handlers (bsc#1113956) 	* refresh for context changes
- drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() (git-fixes).
- drm/amdgpu: Replace invalid device ID with a valid device ID (bsc#1113956)
- drm/arm: fix unintentional integer overflow on left shift (git-fixes).
- drm/bridge: dw-hdmi: Do not cleanup i2c adapter and ddc ptr in (bsc#1113956) 	* refreshed for context changes
- drm/bridge: sil_sii8620: initialize return of sii8620_readb (git-fixes).
- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1113956) 	* move drm_mipi_dbi.c -&gt; tinydrm/mipi-drm.c 	* refresh for context changes
- drm/debugfs: fix plain echo to connector 'force' attribute (bsc#1111666).
- drm/etnaviv: Fix error path on failure to enable bus clk (git-fixes).
- drm/etnaviv: fix ref count leak via pm_runtime_get_sync (bsc#1111666).
- drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi (bsc#1112178) 	* updated names of get/put functions
- drm: hold gem reference until object is no longer accessed (bsc#1113956)
- drm/imx: fix use after free (git-fixes).
- drm/imx: imx-ldb: Disable both channels for split mode in enc-&gt;disable() (git-fixes).
- drm/imx: tve: fix regulator_disable error path (git-fixes).
- drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline (git-fixes).
- drm/msm/adreno: fix updating ring fence (git-fixes).
- drm/msm: ratelimit crtc event overflow error (bsc#1111666).
- drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason (git-fixes).
- drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure (git-fixes).
- drm/nouveau: fix multiple instances of reference count leaks (bsc#1111666).
- drm/panel: otm8009a: Drop unnessary backlight_device_unregister() (git-fixes).
- drm: panel: simple: Fix bpc for LG LB070WV8 panel (git-fixes).
- drm/radeon: disable AGP by default (bsc#1111666).
- drm/radeon: fix array out-of-bounds read and write issues (git-fixes).
- drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync (bsc#1111666).
- drm/rockchip: fix VOP_WIN_GET macro (bsc#1175411).
- drm/tilcdc: fix leak &amp; null ref in panel_connector_get_modes (bsc#1111666).
- drm/ttm/nouveau: do not call tt destroy callback on alloc failure (bsc#1175232).
- drm/vmwgfx: Fix two list_for_each loop exit tests (bsc#1111666).
- drm/vmwgfx: Use correct vmw_legacy_display_unit pointer (bsc#1111666).
- drm/xen-front: Fix misused IS_ERR_OR_NULL checks (bsc#1065600).
- efi/memreserve: deal with memreserve entries in unmapped memory (bsc#1174685).
- ext4: check journal inode extents more carefully (bsc#1173485).
- ext4: do not allow overlapping system zones (bsc#1173485).
- ext4: fix checking of directory entry validity for inline directories (bsc#1175771).
- ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max (bsc#1174840).
- ext4: handle error of ext4_setup_system_zone() on remount (bsc#1173485).
- fat: do not allow to mount if the FAT length == 0 (bsc#1174845).
- fbdev: Detect integer underflow at 'struct fbcon_ops'-&gt;clear_margins. (bsc#1112178) 	* move files drivers/video/fbdev/core -&gt; drivers/video/console 	* refresh for context changes
- firmware: google: check if size is valid when decoding VPD data (git-fixes).
- firmware: google: increment VPD key_len properly (git-fixes).
- fpga: dfl: fix bug in port reset handshake (git-fixes).
- fsl/fman: add API to get the device behind a fman port (bsc#1174550).
- fsl/fman: check dereferencing null pointer (git-fixes).
- fsl/fman: detect FMan erratum A050385 (bsc#1174550).
- fsl/fman: do not touch liodn base regs reserved on non-PAMU SoCs (bsc#1174550).
- fsl/fman: fix dereference null return value (git-fixes).
- fsl/fman: fix eth hash table allocation (git-fixes).
- fsl/fman: fix unreachable code (git-fixes).
- fsl/fman: remove unused struct member (bsc#1174550).
- fsl/fman: use 32-bit unsigned integer (git-fixes).
- fuse: fix memleak in cuse_channel_open (bsc#1174926).
- fuse: fix missing unlock_page in fuse_writepage() (bsc#1174904).
- fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS (bsc#1175062).
- fuse: fix weird page warning (bsc#1175063).
- fuse: flush dirty data/metadata before non-truncate setattr (bsc#1175064).
- fuse: truncate pending writes on O_TRUNC (bsc#1175065).
- fuse: verify attributes (bsc#1175066).
- fuse: verify nlink (bsc#1175067).
- genetlink: remove genl_bind (networking-stable-20_07_17).
- go7007: add sanity checking for endpoints (git-fixes).
- gpu: host1x: debug: Fix multiple channels emitting messages simultaneously (bsc#1111666).
- HID: hiddev: fix mess in hiddev_open() (git-fixes).
- HISI LPC: Re-Add ACPI child enumeration support (bsc#1174658).
- HISI LPC: Stop using MFD APIs (bsc#1174658).
- hv_balloon: Balloon up according to request page number (git-fixes).
- hv_balloon: Use a static page for the balloon_up send buffer (git-fixes).
- hv_netvsc: Allow scatter-gather feature to be tunable (git-fixes).
- hv_netvsc: do not use VF device if link is down (git-fixes).
- hv_netvsc: Fix a warning of suspicious RCU usage (git-fixes).
- hv_netvsc: Fix error handling in netvsc_attach() (git-fixes).
- hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback() (git-fixes).
- hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit() (git-fixes).
- hv_netvsc: Fix unwanted wakeup in netvsc_attach() (git-fixes).
- hv_netvsc: flag software created hash value (git-fixes).
- hv_netvsc: Remove 'unlikely' from netvsc_select_queue (git-fixes).
- i2c: rcar: in slave mode, clear NACK earlier (git-fixes).
- i2c: rcar: slave: only send STOP event when we have been addressed (bsc#1111666).
- i40e: Fix crash during removing i40e driver (git-fixes).
- i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (git-fixes).
- ibmveth: Fix use of ibmveth in a bridge (bsc#1174387 ltc#187506).
- ibmvnic: Fix IRQ mapping disposal in error path (bsc#1175112 ltc#187459).
- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset (bsc#1175873 ltc#187922).
- include/linux/poison.h: remove obsolete comment (git fixes (poison)).
- Input: psmouse - add a newline when printing 'proto' by sysfs (git-fixes).
- Input: sentelic - fix error return when fsp_reg_write fails (bsc#1111666).
- integrity: remove redundant initialization of variable ret (git-fixes).
- io-mapping: indicate mapping failure (git-fixes).
- ip6_gre: fix null-ptr-deref in ip6gre_init_net() (git-fixes).
- ip6_gre: fix use-after-free in ip6gre_tunnel_lookup() (networking-stable-20_06_28).
- ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL (bsc#1175515).
- ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL (bsc#1175515).
- ip_tunnel: Emit events for post-register MTU changes (git-fixes).
- ip_tunnel: fix use-after-free in ip_tunnel_lookup() (networking-stable-20_06_28).
- ip_tunnel: restore binding to ifaces with a large mtu (git-fixes).
- ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg (networking-stable-20_07_17).
- ipv4: Silence suspicious RCU usage warning (git-fixes).
- ipv6: fix memory leaks on IPV6_ADDRFORM path (git-fixes).
- ipvlan: fix device features (git-fixes).
- ipvs: allow connection reuse for unconfirmed conntrack (git-fixes).
- ipvs: fix refcount usage for conns in ops mode (git-fixes).
- ipvs: fix the connection sync failed in some cases (bsc#1174699).
- irqchip/gic: Atomically update affinity (bsc#1111666).
- iwlegacy: Check the return value of pcie_capability_read_*() (bsc#1111666).
- jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock() (bsc#1175772).
- kabi: genetlink: remove genl_bind (kabi).
- kabi: hide new parameter of ip6_dst_lookup_flow() (bsc#1165629).
- kabi: mask changes to struct ipv6_stub (bsc#1165629).
- kernel/cpu_pm: Fix uninitted local in cpu_pm (git fixes (kernel/pm)).
- kernel-docs: Change Requires on python-Sphinx to earlier than version 3 References: bsc#1166965 From 3 on the internal API that the build system uses was rewritten in an incompatible way. See https://github.com/sphinx-doc/sphinx/issues/7421 and https://bugzilla.suse.com/show_bug.cgi?id=1166965#c16 for some details.
- kernel/relay.c: fix memleak on destroy relay channel (git-fixes).
- kernfs: do not call fsnotify() with name without a parent (bsc#1175770).
- KVM: arm64: Ensure 'params' is initialised when looking up sys register (bsc#1133021).
- KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART (bsc#1133021).
- KVM: arm/arm64: Fix young bit from mmu notifier (bsc#1133021).
- KVM: arm/arm64: vgic: Do not rely on the wrong pending table (bsc#1133021).
- KVM: arm/arm64: vgic-its: Fix restoration of unmapped collections (bsc#1133021).
- KVM: arm: Fix DFSR setting for non-LPAE aarch32 guests (bsc#1133021).
- KVM: arm: Make inject_abt32() inject an external abort instead (bsc#1133021).
- KVM: Change offset in kvm_write_guest_offset_cached to unsigned (bsc#1133021).
- KVM: Check for a bad hva before dropping into the ghc slow path (bsc#1133021).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage (bsc#1065729).
- l2tp: remove skb_dst_set() from l2tp_xmit_skb() (networking-stable-20_07_17).
- leds: 88pm860x: fix use-after-free on unbind (git-fixes).
- leds: core: Flush scheduled work for system suspend (git-fixes).
- leds: da903x: fix use-after-free on unbind (git-fixes).
- leds: lm3533: fix use-after-free on unbind (git-fixes).
- leds: lm355x: avoid enum conversion warning (git-fixes).
- leds: wm831x-status: fix use-after-free on unbind (git-fixes).
- lib/dim: Fix -Wunused-const-variable warnings (bsc#1174852).
- lib: dimlib: fix help text typos (bsc#1174852).
- lib: logic_pio: Add logic_pio_unregister_range() (bsc#1174658).
- lib: logic_pio: Avoid possible overlap for unregistering regions (bsc#1174658).
- lib: logic_pio: Fix RCU usage (bsc#1174658).
- linux/dim: Add completions count to dim_sample (bsc#1174852).
- linux/dim: Fix overflow in dim calculation (bsc#1174852).
- linux/dim: Move implementation to .c files (bsc#1174852).
- linux/dim: Move logic to dim.h (bsc#1174852).
- linux/dim: Remove 'net' prefix from internal DIM members (bsc#1174852).
- linux/dim: Rename externally exposed macros (bsc#1174852).
- linux/dim: Rename externally used net_dim members (bsc#1174852).
- linux/dim: Rename net_dim_sample() to net_dim_update_sample() (bsc#1174852).
- liquidio: Fix wrong return value in cn23xx_get_pf_num() (git-fixes).
- llc: make sure applications use ARPHRD_ETHER (networking-stable-20_07_17).
- mac80211: mesh: Free ie data when leaving mesh (git-fixes).
- mac80211: mesh: Free pending skb when destroying a mpath (git-fixes).
- MAINTAINERS: add entry for Dynamic Interrupt Moderation (bsc#1174852).
- md-cluster: Fix potential error pointer dereference in resize_bitmaps() (git-fixes).
- md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 (git-fixes).
- media: budget-core: Improve exception handling in budget_register() (git-fixes).
- media: exynos4-is: Add missed check for pinctrl_lookup_state() (git-fixes).
- media: firewire: Using uninitialized values in node_probe() (git-fixes).
- media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities() (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- mfd: arizona: Ensure 32k clock is put on driver unbind and error (git-fixes).
- mfd: dln2: Run event handler loop under spinlock (git-fixes).
- mfd: rk808: Fix RK818 ID template (bsc#1175412).
- mld: fix memory leak in ipv6_mc_destroy_dev() (networking-stable-20_06_28).
- mm: filemap: clear idle flag for writes (bsc#1175769).
- mm/migrate.c: add missing flush_dcache_page for non-mapped page migrate (git fixes (mm/migrate)).
- mm/mmu_notifier: use hlist_add_head_rcu() (git fixes (mm/mmu_notifiers)).
- mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() (git fixes (mm/compaction)).
- mm/rmap.c: do not reuse anon_vma if we just want a copy (git fixes (mm/rmap)).
- mm/shmem.c: cast the type of unmap_start to u64 (git fixes (mm/shmem)).
- mm, thp: fix defrag setting if newline is not used (git fixes (mm/thp)).
- mm/vunmap: add cond_resched() in vunmap_pmd_range (bsc#1175654 ltc#184617).
- mtd: spi-nor: Fix an error code in spi_nor_read_raw() (bsc#1175413).
- mtd: spi-nor: fix kernel-doc for spi_nor::info (bsc#1175414).
- mtd: spi-nor: fix kernel-doc for spi_nor::reg_proto (bsc#1175415).
- mtd: spi-nor: fix silent truncation in spi_nor_read_raw() (bsc#1175416).
- mwifiex: Prevent memory corruption handling keys (git-fixes).
- net: Added pointer check for dst-&gt;ops-&gt;neigh_lookup in dst_neigh_lookup_skb (git-fixes).
- net: bridge: enfore alignment for ethernet address (networking-stable-20_06_28).
- net: core: reduce recursion limit value (networking-stable-20_06_28).
- net: Do not clear the sock TX queue in sk_set_socket() (networking-stable-20_06_28).
- net: dsa: b53: check for timeout (git-fixes).
- net: dsa: bcm_sf2: Fix node reference count (git-fixes).
- net: ena: Add first_interrupt field to napi struct (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: add support for reporting of packet drops (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool (bsc#1174852).
- net: ena: allow setting the hash function without changing the key (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function set fails (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when busy-polling (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz (bsc#1174852).
- net: ena: change num_queues to num_io_queues for clarity and consistency (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: Change WARN_ON expression in ena_del_napi_in_range() (bsc#1174852).
- net: ena: clean up indentation issue (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64 (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set() (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in comments (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in ena_com.h macros (bsc#1174852).
- net: ena: cosmetic: rename ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: enable support of rss hash key and function changes (bsc#1174852).
- net: ena: enable the interrupt_moderation in driver_supported_features (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue (bsc#1174852).
- net: ena: ethtool: get_channels: use combined only (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc (bsc#1174852).
- net: ena: ethtool: support set_channels callback (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function() (bsc#1174852).
- net: ena: fix incorrect setting of the number of msix vectors (bsc#1174852).
- net: ena: fix incorrect update of intr_delay_resolution (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors (bsc#1174852).
- net: ena: fix update of interrupt moderation register (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in ena_init_napi_in_range (bsc#1174852).
- net: ena: implement XDP drop support (bsc#1174852).
- net: ena: Implement XDP_TX action (bsc#1174852).
- net: ena: make ethtool -l show correct max number of queues (bsc#1174852).
- net: ena: Make missed_tx stat incremental (bsc#1083548).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: move llq configuration from ena_probe to ena_device_init() (bsc#1174852).
- net: ena: multiple queue creation related cleanups (bsc#1174852).
- net: ena: Prevent reset after device destruction (bsc#1083548).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: remove all old adaptive rx interrupt moderation code from ena_com (bsc#1174852).
- net: ena: remove code duplication in ena_com_update_nonadaptive_moderation_interval _*() (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: remove ena_restore_ethtool_params() and relevant fields (bsc#1174852).
- net: ena: remove old adaptive interrupt moderation code from ena_netdev (bsc#1174852).
- net: ena: remove redundant print of number of queues (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key' (bsc#1174852).
- net: ena: remove set but not used variable 'rx_ring' (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform (bsc#1174852).
- net: ena: Select DIMLIB for ENA_ETHERNET (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution() (bsc#1174852).
- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: switch to dim algorithm for rx adaptive interrupt moderation (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface (bsc#1174852).
- net: ena: xdp: update napi budget for DROP and ABORTED (bsc#1174852).
- net: ena: xdp: XDP_TX: fix memory leak (bsc#1174852).
- net: ethernet: aquantia: Fix wrong return value (git-fixes).
- net: ethernet: broadcom: have drivers select DIMLIB as needed (bsc#1174852).
- net: ethernet: stmmac: Disable hardware multicast filter (git-fixes).
- net: fec: correct the error path for regulator disable in probe (git-fixes).
- netfilter: x_tables: add counters allocation wrapper (git-fixes).
- netfilter: x_tables: cap allocations at 512 mbyte (git-fixes).
- netfilter: x_tables: limit allocation requests for blob rule heads (git-fixes).
- net: Fix a documentation bug wrt. ip_unprivileged_port_start (git-fixes). (SLES tuning guide refers to ip-sysctl.txt.)
- net: fix memleak in register_netdevice() (networking-stable-20_06_28).
- net: Fix the arp error in some cases (networking-stable-20_06_28).
- net: gre: recompute gre csum for sctp over gre tunnels (git-fixes).
- net: hns3: add autoneg and change speed support for fibre port (bsc#1174070).
- net: hns3: add support for FEC encoding control (bsc#1174070).
- net: hns3: add support for multiple media type (bsc#1174070).
- net: hns3: fix a not link up issue when fibre port supports autoneg (bsc#1174070).
- net: hns3: fix for FEC configuration (bsc#1174070).
- net: hns3: fix port capbility updating issue (bsc#1174070).
- net: hns3: fix port setting handle for fibre port (bsc#1174070).
- net: hns3: fix selftest fail issue for fibre port with autoneg on (bsc#1174070).
- net: hns3: restore the MAC autoneg state after reset (bsc#1174070).
- net: increment xmit_recursion level in dev_direct_xmit() (networking-stable-20_06_28).
- net: ip6_gre: Request headroom in __gre6_xmit() (git-fixes).
- net: lan78xx: add missing endpoint sanity check (git-fixes).
- net: lan78xx: fix transfer-buffer memory leak (git-fixes).
- net: make symbol 'flush_works' static (git-fixes).
- net/mlx5e: vxlan: Use RCU for vxlan table lookup (git-fixes).
- net: mvpp2: fix memory leak in mvpp2_rx (git-fixes).
- net: netsec: Fix signedness bug in netsec_probe() (bsc#1175417).
- net: netsec: initialize tx ring on ndo_open (bsc#1175418).
- net: phy: Check harder for errors in get_phy_id() (bsc#1111666).
- net: qcom/emac: add missed clk_disable_unprepare in error path of emac_clks_phase1_init (git-fixes).
- net: Set fput_needed iff FDPUT_FPUT is set (git-fixes).
- net: socionext: Fix a signedness bug in ave_probe() (bsc#1175419).
- net: socionext: replace napi_alloc_frag with the netdev variant on init (bsc#1175420).
- net: spider_net: Fix the size used in a 'dma_free_coherent()' call (git-fixes).
- net: stmmac: dwmac1000: provide multicast filter fallback (git-fixes).
- net: stmmac: Fix RX packet size &gt; 8191 (git-fixes).
- net: udp: Fix wrong clean up for IS_UDPLITE macro (git-fixes).
- net: update net_dim documentation after rename (bsc#1174852).
- net: usb: ax88179_178a: fix packet alignment padding (networking-stable-20_06_28).
- net: usb: qmi_wwan: add support for Quectel EG95 LTE modem (networking-stable-20_07_17).
- netvsc: unshare skb in VF rx handler (git-fixes).
- nfc: nci: add missed destroy_workqueue in nci_register_device (git-fixes).
- ntb: Fix an error in get link status (git-fixes).
- ntb_netdev: fix sleep time mismatch (git-fixes).
- ntb: ntb_transport: Use scnprintf() for avoiding potential buffer overflow (git-fixes).
- nvme: fix possible deadlock when I/O is blocked (git-fixes).
- nvme-multipath: do not fall back to __nvme_find_path() for non-optimized paths (bsc#1172108).
- nvme-multipath: fix logic for non-optimized paths (bsc#1172108).
- nvme-multipath: round-robin: eliminate 'fallback' variable (bsc#1172108).
- nvme: multipath: round-robin: fix single non-optimized path case (bsc#1172108).
- obsolete_kmp: provide newer version than the obsoleted one (boo#1170232).
- ocfs2: add trimfs dlm lock resource (bsc#1175228).
- ocfs2: add trimfs lock to avoid duplicated trims in cluster (bsc#1175228).
- ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
- ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
- ocfs2: change slot number type s16 to u16 (bsc#1175786).
- ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
- ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
- ocfs2: fix remounting needed after setfacl command (bsc#1173954).
- ocfs2: fix the application IO timeout when fstrim is running (bsc#1175228).
- ocfs2: fix value of OCFS2_INVALID_SLOT (bsc#1175767).
- ocfs2: load global_inode_alloc (bsc#1172963).
- ocfs2: load global_inode_alloc (bsc#1172963).
- omapfb: dss: Fix max fclk divider for omap36xx (bsc#1113956)
- openvswitch: Prevent kernel-infoleak in ovs_ct_put_key() (git-fixes).
- PCI/ASPM: Add missing newline in sysfs 'policy' (git-fixes).
- PCI: dwc: Move interrupt acking into the proper callback (bsc#1175666).
- PCI: Fix pci_cfg_wait queue locking problem (git-fixes).
- PCI: Fix 'try' semantics of bus and slot reset (git-fixes).
- PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context() (git-fixes).
- PCI: hv: Fix a timing issue which causes kdump to fail occasionally (bsc#1172871, bsc#1172872, git-fixes).
- PCI: Release IVRS table in AMD ACS quirk (git-fixes).
- PCI: switchtec: Add missing __iomem and __user tags to fix sparse warnings (git-fixes).
- PCI: switchtec: Add missing __iomem tag to fix sparse warnings (git-fixes).
- phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked (git-fixes).
- pinctrl: single: fix function name in documentation (git-fixes).
- pinctrl-single: fix pcs_parse_pinconf() return value (git-fixes).
- platform/x86: intel-hid: Fix return value check in check_acpi_dev() (git-fixes).
- platform/x86: intel-vbtn: Fix return value check in check_acpi_dev() (git-fixes).
- PM / CPU: replace raw_notifier with atomic_notifier (git fixes (kernel/pm)).
- PM / devfreq: rk3399_dmc: Add missing of_node_put() (bsc#1175668).
- PM / devfreq: rk3399_dmc: Disable devfreq-event device when fails.
- PM / devfreq: rk3399_dmc: Fix kernel oops when rockchip,pmu is absent (bsc#1175668).
- PM: sleep: core: Fix the handling of pending runtime resume requests (git-fixes).
- powerpc/64s: Do not init FSCR_DSCR in __init_FSCR() (bsc#1065729).
- powerpc/64s: Fix early_init_mmu section mismatch (bsc#1065729).
- powerpc: Allow 4224 bytes of stack expansion for the signal frame (bsc#1065729).
- powerpc/book3s64/pkeys: Use PVR check instead of cpu feature (bsc#1065729).
- powerpc/boot: Fix CONFIG_PPC_MPC52XX references (bsc#1065729).
- powerpc/eeh: Fix pseries_eeh_configure_bridge() (bsc#1174689).
- powerpc/nvdimm: Use HCALL error as the return value (bsc#1175284).
- powerpc/nvdimm: use H_SCM_QUERY hcall on H_OVERLAP error (bsc#1175284).
- powerpc/perf: Fix missing is_sier_aviable() during build (bsc#1065729).
- powerpc/pseries: Do not initiate shutdown when system is running on UPS (bsc#1175440 ltc#187574).
- powerpc/pseries/hotplug-cpu: Remove double free in error path (bsc#1065729).
- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death (bsc#1085030 ltC#165630).
- powerpc/pseries: PCIE PHB reset (bsc#1174689).
- powerpc/pseries: remove cede offline state for CPUs (bsc#1065729).
- powerpc/rtas: do not online CPUs for partition suspend (bsc#1065729).
- powerpc/vdso: Fix vdso cpu truncation (bsc#1065729).
- power: supply: check if calc_soc succeeded in pm860x_init_battery (git-fixes).
- propagate_one(): mnt_set_mountpoint() needs mount_lock (bsc#1174841).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- pwm: bcm-iproc: handle clk_get_rate() return (git-fixes).
- rds: Prevent kernel-infoleak in rds_notify_queue_get() (git-fixes).
- regulator: gpio: Honor regulator-boot-on property (git-fixes).
- Revert 'ALSA: hda: call runtime_allow() for all hda controllers' (bsc#1111666).
- Revert 'drm/amdgpu: Fix NULL dereference in dpm sysfs handlers' (bsc#1113956) 	* refresh for context changes
- Revert 'ocfs2: avoid inode removal while nfsd is accessing it' This reverts commit 9e096c72476eda333a9998ff464580c00ff59c83.
- Revert 'ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).' This reverts commit 0bf6e248f93736b3f17f399b4a8f64ffa30d371e.
- Revert 'ocfs2: load global_inode_alloc (bsc#1172963).' This reverts commit fc476497b53f967dc615b9cbad9427ba3107b5c4.
- Revert 'scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe' (bsc#1171688 bsc#1174003).
- Revert 'scsi: qla2xxx: Fix crash on qla2x00_mailbox_command' (bsc#1171688 bsc#1174003).
- Revert 'xen/balloon: Fix crash when ballooning on x86 32 bit PAE' (bsc#1065600).
- rocker: fix incorrect error handling in dma_rings_init (networking-stable-20_06_28).
- rpm/check-for-config-changes: Ignore CONFIG_CC_VERSION_TEXT
- rpm/check-for-config-changes: Ignore CONFIG_LD_VERSION
- rpm/constraints.in: Increase memory for kernel-docs References: https://build.opensuse.org/request/show/792664
- rpm: drop execute permissions on source files Sometimes a source file with execute permission appears in upstream repository and makes it into our kernel-source packages. This is caught by OBS build checks and may even result in build failures. Sanitize the source tree by removing execute permissions from all C source and header files.
- rpm/kabi.pl: account for namespace field being moved last Upstream is moving the namespace field in Module.symvers last in order to preserve backwards compatibility with kmod tools (depmod, etc). Fix the kabi.pl script to expect the namespace field last. Since split() ignores trailing empty fields and delimeters, switch to using tr to count how many fields/tabs are in a line. Also, in load_symvers(), pass LIMIT of -1 to split() so it does not strip trailing empty fields, as namespace is an optional field.
- rpm/kernel-binary.spec.in: do not run klp-symbols for configs with no modules Starting with 5.8-rc1, s390x/zfcpdump builds fail because rpm/klp-symbols script does not find .tmp_versions directory. This is missing because s390x/zfcpdump is built without modules (CONFIG_MODULES disabled). As livepatching cannot work without modules, the cleanest solution is setting %klp_symbols to 0 if CONFIG_MODULES is disabled. (We cannot simply add another condition to the place where %klp_symbols is set as it can be already set to 1 from prjconf.)
- rpm/kernel-binary.spec.in: restrict livepatch metapackage to default flavor It has been reported that the kernel-*-livepatch metapackage got erroneously enabled for SLE15-SP3's new -preempt flavor, leading to a unresolvable dependency to a non-existing kernel-livepatch-x.y.z-preempt package. As SLE12 and SLE12-SP1 have run out of livepatching support, the need to build said metapackage for the -xen flavor is gone and the only remaining flavor for which they're still wanted is -default. Restrict the build of the kernel-*-livepatch metapackage to the -default flavor.
- rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup Co-Authored-By: Adam Spiers &lt;aspiers@suse.com&gt;
- rpm/kernel-obs-build.spec.in: Enable overlayfs Overlayfs is needed for podman or docker builds when no more specific driver can be used (like lvm or btrfs). As the default build fs is ext4 currently, we need overlayfs kernel modules to be available.
- rpm/kernel-source.spec.in: Add obsolete_rebuilds (boo#1172073).
- rpm/mkspec-dtb: add mt76 based dtb package
- rpm/package-descriptions: garbege collection remove old ARM and Xen flavors.
- rtlwifi: rtl8192cu: Remove uninitialized_var() usage (git-fixes).
- rtnetlink: Fix memory(net_device) leak when -&gt;newlink fails (git-fixes).
- s390, dcssblk: kaddr and pfn can be NULL to -&gt;direct_access() (bsc#1174873).
- sched: consistently handle layer3 header accesses in the presence of VLANs (networking-stable-20_07_17).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1112178).
- scripts/git_sort/git_sort.py: add bluetooth/bluetooth-next.git repository
- scsi: lpfc: Add and rename a whole bunch of function parameter descriptions (bsc#1171558 bsc#1136666).
- scsi: lpfc: Add description for lpfc_release_rpi()'s 'ndlpl param (bsc#1171558 bsc#1136666).
- scsi: lpfc: Add missing misc_deregister() for lpfc_init() (bsc#1171558 bsc#1136666).
- scsi: lpfc: Ensure variable has the same stipulations as code using it (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix a bunch of kerneldoc misdemeanors (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix FCoE speed reporting (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix kerneldoc parameter formatting/misnaming/missing issues (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix LUN loss after cable pull (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix no message shown for lpfc_hdw_queue out of range value (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix oops when unloading driver while running mds diags (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix retry of PRLI when status indicates its unsupported (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix RSCN timeout due to incorrect gidft counter (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix some function parameter descriptions (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix typo in comment for ULP (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix-up around 120 documentation issues (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix-up formatting/docrot where appropriate (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix validation of bsg reply lengths (bsc#1171558 bsc#1136666).
- scsi: lpfc: NVMe remote port devloss_tmo from lldd (bsc#1171558 bsc#1136666 bsc#1173060).
- scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying targetport (bsc#1171558 bsc#1136666).
- scsi: lpfc: Provide description for lpfc_mem_alloc()'s 'align' param (bsc#1171558 bsc#1136666).
- scsi: lpfc: Quieten some printks (bsc#1171558 bsc#1136666).
- scsi: lpfc: Remove unused variable 'pg_addr' (bsc#1171558 bsc#1136666).
- scsi: lpfc: Update lpfc version to 12.8.0.3 (bsc#1171558 bsc#1136666).
- scsi: lpfc: Use __printf() format notation (bsc#1171558 bsc#1136666).
- scsi: dh: Add Fujitsu device to devinfo and dh lists (bsc#1174026).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value 1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in header files (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files (bsc#1171688 bsc#1174003). 
- scsi: qla2xxx: Fix failure message in qlt_disable_vha() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688 bsc#1174003).
- scsi: smartpqi: add bay identifier (bsc#1172418).
- scsi: smartpqi: add gigabyte controller (bsc#1172418).
- scsi: smartpqi: add id support for SmartRAID 3152-8i (bsc#1172418).
- scsi: smartpqi: add inquiry timeouts (bsc#1172418).
- scsi: smartpqi: add module param for exposure order (bsc#1172418).
- scsi: smartpqi: add module param to hide vsep (bsc#1172418).
- scsi: smartpqi: add new pci ids (bsc#1172418).
- scsi: smartpqi: add pci ids for fiberhome controller (bsc#1172418).
- scsi: smartpqi: add RAID bypass counter (bsc#1172418).
- scsi: smartpqi: add sysfs entries (bsc#1172418).
- scsi: smartpqi: Align driver syntax with oob (bsc#1172418).
- scsi: smartpqi: avoid crashing kernel for controller issues (bsc#1172418).
- scsi: smartpqi: bump version (bsc#1172418).
- scsi: smartpqi: bump version (bsc#1172418).
- scsi: smartpqi: bump version to 1.2.16-010 (bsc#1172418).
- scsi: smartpqi: change TMF timeout from 60 to 30 seconds (bsc#1172418).
- scsi: smartpqi: correct hang when deleting 32 lds (bsc#1172418).
- scsi: smartpqi: correct REGNEWD return status (bsc#1172418).
- scsi: smartpqi: correct syntax issue (bsc#1172418).
- scsi: smartpqi: fix call trace in device discovery (bsc#1172418).
- scsi: smartpqi: fix controller lockup observed during force reboot (bsc#1172418).
- scsi: smartpqi: fix LUN reset when fw bkgnd thread is hung (bsc#1172418).
- scsi: smartpqi: fix problem with unique ID for physical device (bsc#1172418).
- scsi: smartpqi: identify physical devices without issuing INQUIRY (bsc#1172418).
- scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask (bsc#1172418).
- scsi: smartpqi: remove unused manifest constants (bsc#1172418).
- scsi: smartpqi: Reporting unhandled SCSI errors (bsc#1172418).
- scsi: smartpqi: support device deletion via sysfs (bsc#1172418).
- scsi: smartpqi: update copyright (bsc#1172418).
- scsi: smartpqi: update logical volume size after expansion (bsc#1172418).
- scsi: smartpqi: Use scnprintf() for avoiding potential buffer overflow (bsc#1172418).
- scsi: storvsc: Correctly set number of hardware queues for IDE disk (git-fixes).
- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- sctp: Do not advertise IPv4 addresses if ipv6only is set on the socket (networking-stable-20_06_28).
- selftests/livepatch: fix mem leaks in test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: more verification in test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: simplify test-klp-callbacks busy target tests (bsc#1071995).
- serial: 8250: change lock order in serial8250_do_startup() (git-fixes).
- serial: pl011: Do not leak amba_ports entry on driver register error (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- Set VIRTIO_CONSOLE=y (bsc#1175667).
- sign also s390x kernel images (bsc#1163524)
- soc: fsl: qbman: allow registering a device link for the portal user (bsc#1174550).
- soc: fsl: qbman_portals: add APIs to retrieve the probing status (bsc#1174550).
- spi: davinci: Remove uninitialized_var() usage (git-fixes).
- spi: lantiq: fix: Rx overflow error in full duplex mode (git-fixes).
- spi: nxp-fspi: Ensure width is respected in spi-mem operations (bsc#1175421).
- spi: spi-fsl-dspi: Fix 16-bit word order in 32-bit XSPI mode (bsc#1175422).
- spi: spi-mem: export spi_mem_default_supports_op() (bsc#1175421).
- staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes).
- staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes).
- staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes).
- staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support (git-fixes).
- staging: fsl-dpaa2: ethsw: Add missing netdevice check (bsc#1175423).
- staging: rtl8192u: fix a dubious looking mask before a shift (git-fixes).
- staging/speakup: fix get_word non-space look-ahead (git-fixes).
- tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT (networking-stable-20_06_28).
- tcp: grow window for OOO packets only for SACK flows (networking-stable-20_06_28).
- tcp: make sure listeners do not initialize congestion-control state (networking-stable-20_07_17).
- tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key() (networking-stable-20_07_17).
- tcp: md5: do not send silly options in SYNCOOKIES (networking-stable-20_07_17).
- tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers (networking-stable-20_07_17).
- tracepoint: Mark __tracepoint_string's __used (git-fixes).
- tracing: Use trace_sched_process_free() instead of exit() for pid tracing (git-fixes).
- tty: hvc_console, fix crashes on parallel open/close (git-fixes).
- tty: serial: fsl_lpuart: add imx8qxp support (bsc#1175670).
- tty: serial: fsl_lpuart: free IDs allocated by IDA (bsc#1175670).
- USB: cdc-acm: rework notification_buffer resizing (git-fixes).
- USB: gadget: f_tcm: Fix some resource leaks in some error paths (git-fixes).
- USB: host: ohci-exynos: Fix error handling in exynos_ohci_probe() (git-fixes).
- USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge (git-fixes).
- USB: iowarrior: fix up report size handling for some devices (git-fixes).
- usbip: tools: fix module name in man page (git-fixes).
- USB: rename USB quirk to USB_QUIRK_ENDPOINT_IGNORE (git-fixes).
- USB: serial: cp210x: enable usb generic throttle/unthrottle (git-fixes).
- USB: serial: cp210x: re-enable auto-RTS on open (git-fixes).
- USB: serial: ftdi_sio: clean up receive processing (git-fixes).
- USB: serial: ftdi_sio: fix break and sysrq handling (git-fixes).
- USB: serial: ftdi_sio: make process-packet buffer unsigned (git-fixes).
- USB: serial: iuu_phoenix: fix led-activity helpers (git-fixes).
- USB: serial: qcserial: add EM7305 QDL product ID (git-fixes).
- USB: xhci: define IDs for various ASMedia host controllers (git-fixes).
- USB: xhci: Fix ASM2142/ASM3142 DMA addressing (git-fixes).
- USB: xhci: Fix ASMedia ASM1142 DMA addressing (git-fixes).
- USB: xhci-mtk: fix the failure of bandwidth allocation (git-fixes).
- VFS: Check rename_lock in lookup_fast() (bsc#1174734).
- video: fbdev: sm712fb: fix an issue about iounmap for a wrong address (git-fixes).
- video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call (git-fixes).
- virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial (git-fixes).
- vlan: consolidate VLAN parsing code and limit max parsing depth (networking-stable-20_07_17).
- vmxnet3: use correct tcp hdr length when packet is encapsulated (bsc#1175199).
- vt_compat_ioctl(): clean up, use compat_ptr() properly (git-fixes).
- vt: vt_ioctl: remove unnecessary console allocation checks (git-fixes).
- vxlan: Ensure FDB dump is performed under RCU (git-fixes).
- watchdog: f71808e_wdt: clear watchdog timeout occurred flag (bsc#1111666).
- watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options (bsc#1111666).
- watchdog: f71808e_wdt: remove use of wrong watchdog_info option (bsc#1111666).
- wl1251: fix always return 0 error (git-fixes).
- x86/hyperv: Create and use Hyper-V page definitions (git-fixes).
- x86/hyper-v: Fix overflow bug in fill_gva_list() (git-fixes).
- x86/hyperv: Make hv_vcpu_is_preempted() visible (git-fixes).
- x86/mce/inject: Fix a wrong assignment of i_mce.status (bsc#1112178).
- x86/unwind/orc: Fix ORC for newly forked tasks (bsc#1058115).
- xen/balloon: fix accounting in alloc_xenballooned_pages error path (bsc#1065600).
- xen/balloon: make the balloon wait interruptible (bsc#1065600).
- xfrm: check id proto in validate_tmpl() (git-fixes).
- xfrm: clean up xfrm protocol checks (git-fixes).
- xfrm_user: uncoditionally validate esn replay attribute struct (git-fixes).
- xfs: fix inode allocation block res calculation precedence (git-fixes).
- xfs: fix reflink quota reservation accounting error (git-fixes).
- xhci: Fix enumeration issue when setting max packet size for FS devices (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-09"/>
	<updated date="2020-09-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083548">SUSE bug 1083548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120163">SUSE bug 1120163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136666">SUSE bug 1136666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152148">SUSE bug 1152148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163524">SUSE bug 1163524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165629">SUSE bug 1165629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166965">SUSE bug 1166965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169790">SUSE bug 1169790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170232">SUSE bug 1170232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171688">SUSE bug 1171688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171988">SUSE bug 1171988</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172108">SUSE bug 1172108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172247">SUSE bug 1172247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172418">SUSE bug 1172418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172428">SUSE bug 1172428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172871">SUSE bug 1172871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172872">SUSE bug 1172872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172873">SUSE bug 1172873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172963">SUSE bug 1172963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173060">SUSE bug 1173060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173485">SUSE bug 1173485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173798">SUSE bug 1173798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173954">SUSE bug 1173954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174003">SUSE bug 1174003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174026">SUSE bug 1174026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174070">SUSE bug 1174070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174205">SUSE bug 1174205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174387">SUSE bug 1174387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174484">SUSE bug 1174484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174547">SUSE bug 1174547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174549">SUSE bug 1174549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174550">SUSE bug 1174550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174625">SUSE bug 1174625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174658">SUSE bug 1174658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174685">SUSE bug 1174685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174689">SUSE bug 1174689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174699">SUSE bug 1174699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174734">SUSE bug 1174734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174757">SUSE bug 1174757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174771">SUSE bug 1174771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174840">SUSE bug 1174840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174841">SUSE bug 1174841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174843">SUSE bug 1174843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174844">SUSE bug 1174844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174845">SUSE bug 1174845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174852">SUSE bug 1174852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174873">SUSE bug 1174873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174904">SUSE bug 1174904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174926">SUSE bug 1174926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174968">SUSE bug 1174968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175062">SUSE bug 1175062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175063">SUSE bug 1175063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175064">SUSE bug 1175064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175065">SUSE bug 1175065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175066">SUSE bug 1175066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175067">SUSE bug 1175067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175112">SUSE bug 1175112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175127">SUSE bug 1175127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175128">SUSE bug 1175128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175149">SUSE bug 1175149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175199">SUSE bug 1175199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175213">SUSE bug 1175213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175228">SUSE bug 1175228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175232">SUSE bug 1175232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175284">SUSE bug 1175284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175393">SUSE bug 1175393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175394">SUSE bug 1175394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175396">SUSE bug 1175396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175397">SUSE bug 1175397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175398">SUSE bug 1175398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175399">SUSE bug 1175399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175400">SUSE bug 1175400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175401">SUSE bug 1175401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175402">SUSE bug 1175402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175403">SUSE bug 1175403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175404">SUSE bug 1175404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175405">SUSE bug 1175405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175406">SUSE bug 1175406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175407">SUSE bug 1175407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175408">SUSE bug 1175408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175409">SUSE bug 1175409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175410">SUSE bug 1175410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175411">SUSE bug 1175411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175412">SUSE bug 1175412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175413">SUSE bug 1175413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175414">SUSE bug 1175414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175415">SUSE bug 1175415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175416">SUSE bug 1175416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175417">SUSE bug 1175417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175418">SUSE bug 1175418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175419">SUSE bug 1175419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175420">SUSE bug 1175420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175421">SUSE bug 1175421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175422">SUSE bug 1175422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175423">SUSE bug 1175423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175440">SUSE bug 1175440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175493">SUSE bug 1175493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175515">SUSE bug 1175515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175518">SUSE bug 1175518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175526">SUSE bug 1175526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175550">SUSE bug 1175550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175654">SUSE bug 1175654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175666">SUSE bug 1175666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175667">SUSE bug 1175667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175668">SUSE bug 1175668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175669">SUSE bug 1175669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175670">SUSE bug 1175670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175691">SUSE bug 1175691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175767">SUSE bug 1175767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175768">SUSE bug 1175768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175769">SUSE bug 1175769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175770">SUSE bug 1175770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175771">SUSE bug 1175771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175772">SUSE bug 1175772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175786">SUSE bug 1175786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175873">SUSE bug 1175873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176069">SUSE bug 1176069</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-10135/">CVE-2020-10135</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14314/">CVE-2020-14314</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14356/">CVE-2020-14356</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14386/">CVE-2020-14386</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16166/">CVE-2020-16166</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24394/">CVE-2020-24394</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497491" comment="kernel-default-livepatch-4.12.14-197.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497492" comment="kernel-default-livepatch-devel-4.12.14-197.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497493" comment="kernel-livepatch-4_12_14-197_56-default-1-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138411" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1094244" ref_url="https://bugzilla.suse.com/1094244" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1154366" ref_url="https://bugzilla.suse.com/1154366" source="BUGZILLA"/>
		<reference ref_id="1167527" ref_url="https://bugzilla.suse.com/1167527" source="BUGZILLA"/>
		<reference ref_id="1168468" ref_url="https://bugzilla.suse.com/1168468" source="BUGZILLA"/>
		<reference ref_id="1169972" ref_url="https://bugzilla.suse.com/1169972" source="BUGZILLA"/>
		<reference ref_id="1171675" ref_url="https://bugzilla.suse.com/1171675" source="BUGZILLA"/>
		<reference ref_id="1171688" ref_url="https://bugzilla.suse.com/1171688" source="BUGZILLA"/>
		<reference ref_id="1171742" ref_url="https://bugzilla.suse.com/1171742" source="BUGZILLA"/>
		<reference ref_id="1173115" ref_url="https://bugzilla.suse.com/1173115" source="BUGZILLA"/>
		<reference ref_id="1174899" ref_url="https://bugzilla.suse.com/1174899" source="BUGZILLA"/>
		<reference ref_id="1175228" ref_url="https://bugzilla.suse.com/1175228" source="BUGZILLA"/>
		<reference ref_id="1175749" ref_url="https://bugzilla.suse.com/1175749" source="BUGZILLA"/>
		<reference ref_id="1175882" ref_url="https://bugzilla.suse.com/1175882" source="BUGZILLA"/>
		<reference ref_id="1176011" ref_url="https://bugzilla.suse.com/1176011" source="BUGZILLA"/>
		<reference ref_id="1176022" ref_url="https://bugzilla.suse.com/1176022" source="BUGZILLA"/>
		<reference ref_id="1176038" ref_url="https://bugzilla.suse.com/1176038" source="BUGZILLA"/>
		<reference ref_id="1176235" ref_url="https://bugzilla.suse.com/1176235" source="BUGZILLA"/>
		<reference ref_id="1176242" ref_url="https://bugzilla.suse.com/1176242" source="BUGZILLA"/>
		<reference ref_id="1176278" ref_url="https://bugzilla.suse.com/1176278" source="BUGZILLA"/>
		<reference ref_id="1176316" ref_url="https://bugzilla.suse.com/1176316" source="BUGZILLA"/>
		<reference ref_id="1176317" ref_url="https://bugzilla.suse.com/1176317" source="BUGZILLA"/>
		<reference ref_id="1176318" ref_url="https://bugzilla.suse.com/1176318" source="BUGZILLA"/>
		<reference ref_id="1176319" ref_url="https://bugzilla.suse.com/1176319" source="BUGZILLA"/>
		<reference ref_id="1176320" ref_url="https://bugzilla.suse.com/1176320" source="BUGZILLA"/>
		<reference ref_id="1176321" ref_url="https://bugzilla.suse.com/1176321" source="BUGZILLA"/>
		<reference ref_id="1176381" ref_url="https://bugzilla.suse.com/1176381" source="BUGZILLA"/>
		<reference ref_id="1176395" ref_url="https://bugzilla.suse.com/1176395" source="BUGZILLA"/>
		<reference ref_id="1176410" ref_url="https://bugzilla.suse.com/1176410" source="BUGZILLA"/>
		<reference ref_id="1176423" ref_url="https://bugzilla.suse.com/1176423" source="BUGZILLA"/>
		<reference ref_id="1176482" ref_url="https://bugzilla.suse.com/1176482" source="BUGZILLA"/>
		<reference ref_id="1176507" ref_url="https://bugzilla.suse.com/1176507" source="BUGZILLA"/>
		<reference ref_id="1176536" ref_url="https://bugzilla.suse.com/1176536" source="BUGZILLA"/>
		<reference ref_id="1176544" ref_url="https://bugzilla.suse.com/1176544" source="BUGZILLA"/>
		<reference ref_id="1176545" ref_url="https://bugzilla.suse.com/1176545" source="BUGZILLA"/>
		<reference ref_id="1176546" ref_url="https://bugzilla.suse.com/1176546" source="BUGZILLA"/>
		<reference ref_id="1176548" ref_url="https://bugzilla.suse.com/1176548" source="BUGZILLA"/>
		<reference ref_id="1176659" ref_url="https://bugzilla.suse.com/1176659" source="BUGZILLA"/>
		<reference ref_id="1176698" ref_url="https://bugzilla.suse.com/1176698" source="BUGZILLA"/>
		<reference ref_id="1176699" ref_url="https://bugzilla.suse.com/1176699" source="BUGZILLA"/>
		<reference ref_id="1176700" ref_url="https://bugzilla.suse.com/1176700" source="BUGZILLA"/>
		<reference ref_id="1176721" ref_url="https://bugzilla.suse.com/1176721" source="BUGZILLA"/>
		<reference ref_id="1176722" ref_url="https://bugzilla.suse.com/1176722" source="BUGZILLA"/>
		<reference ref_id="1176725" ref_url="https://bugzilla.suse.com/1176725" source="BUGZILLA"/>
		<reference ref_id="1176732" ref_url="https://bugzilla.suse.com/1176732" source="BUGZILLA"/>
		<reference ref_id="1176788" ref_url="https://bugzilla.suse.com/1176788" source="BUGZILLA"/>
		<reference ref_id="1176789" ref_url="https://bugzilla.suse.com/1176789" source="BUGZILLA"/>
		<reference ref_id="1176869" ref_url="https://bugzilla.suse.com/1176869" source="BUGZILLA"/>
		<reference ref_id="1176877" ref_url="https://bugzilla.suse.com/1176877" source="BUGZILLA"/>
		<reference ref_id="1176935" ref_url="https://bugzilla.suse.com/1176935" source="BUGZILLA"/>
		<reference ref_id="1176950" ref_url="https://bugzilla.suse.com/1176950" source="BUGZILLA"/>
		<reference ref_id="1176962" ref_url="https://bugzilla.suse.com/1176962" source="BUGZILLA"/>
		<reference ref_id="1176966" ref_url="https://bugzilla.suse.com/1176966" source="BUGZILLA"/>
		<reference ref_id="1176990" ref_url="https://bugzilla.suse.com/1176990" source="BUGZILLA"/>
		<reference ref_id="1177027" ref_url="https://bugzilla.suse.com/1177027" source="BUGZILLA"/>
		<reference ref_id="1177030" ref_url="https://bugzilla.suse.com/1177030" source="BUGZILLA"/>
		<reference ref_id="1177041" ref_url="https://bugzilla.suse.com/1177041" source="BUGZILLA"/>
		<reference ref_id="1177042" ref_url="https://bugzilla.suse.com/1177042" source="BUGZILLA"/>
		<reference ref_id="1177043" ref_url="https://bugzilla.suse.com/1177043" source="BUGZILLA"/>
		<reference ref_id="1177044" ref_url="https://bugzilla.suse.com/1177044" source="BUGZILLA"/>
		<reference ref_id="1177121" ref_url="https://bugzilla.suse.com/1177121" source="BUGZILLA"/>
		<reference ref_id="1177206" ref_url="https://bugzilla.suse.com/1177206" source="BUGZILLA"/>
		<reference ref_id="1177258" ref_url="https://bugzilla.suse.com/1177258" source="BUGZILLA"/>
		<reference ref_id="1177291" ref_url="https://bugzilla.suse.com/1177291" source="BUGZILLA"/>
		<reference ref_id="1177293" ref_url="https://bugzilla.suse.com/1177293" source="BUGZILLA"/>
		<reference ref_id="1177294" ref_url="https://bugzilla.suse.com/1177294" source="BUGZILLA"/>
		<reference ref_id="1177295" ref_url="https://bugzilla.suse.com/1177295" source="BUGZILLA"/>
		<reference ref_id="1177296" ref_url="https://bugzilla.suse.com/1177296" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0404" ref_url="https://www.suse.com/security/cve/CVE-2020-0404/" source="CVE"/>
		<reference ref_id="CVE-2020-0427" ref_url="https://www.suse.com/security/cve/CVE-2020-0427/" source="CVE"/>
		<reference ref_id="CVE-2020-0431" ref_url="https://www.suse.com/security/cve/CVE-2020-0431/" source="CVE"/>
		<reference ref_id="CVE-2020-0432" ref_url="https://www.suse.com/security/cve/CVE-2020-0432/" source="CVE"/>
		<reference ref_id="CVE-2020-14381" ref_url="https://www.suse.com/security/cve/CVE-2020-14381/" source="CVE"/>
		<reference ref_id="CVE-2020-14390" ref_url="https://www.suse.com/security/cve/CVE-2020-14390/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="CVE-2020-25284" ref_url="https://www.suse.com/security/cve/CVE-2020-25284/" source="CVE"/>
		<reference ref_id="CVE-2020-25641" ref_url="https://www.suse.com/security/cve/CVE-2020-25641/" source="CVE"/>
		<reference ref_id="CVE-2020-25643" ref_url="https://www.suse.com/security/cve/CVE-2020-25643/" source="CVE"/>
		<reference ref_id="CVE-2020-26088" ref_url="https://www.suse.com/security/cve/CVE-2020-26088/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007545.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-26088: Fixed an improper CAP_NET_RAW check in NFC socket creation could have been used by local attackers to create raw sockets, bypassing security mechanisms (bsc#1176990).
- CVE-2020-14390: Fixed an out-of-bounds memory write leading to memory corruption or a denial of service when changing screen size (bnc#1176235).
- CVE-2020-0432: Fixed an out of bounds write due to an integer overflow (bsc#1176721).
- CVE-2020-0427: Fixed an out of bounds read due to a use after free (bsc#1176725).
- CVE-2020-0431: Fixed an out of bounds write due to a missing bounds check (bsc#1176722).
- CVE-2020-0404: Fixed a linked list corruption due to an unusual root cause (bsc#1176423).
- CVE-2020-25212: Fixed getxattr kernel panic and memory overflow (bsc#1176381).
- CVE-2020-25284: Fixed an incomplete permission checking for access to rbd devices, which could have been leveraged by local attackers to map or unmap rbd block devices (bsc#1176482).
- CVE-2020-14381: Fixed requeue paths such that filp was valid when dropping the references (bsc#1176011).
- CVE-2019-25643: Fixed an improper input validation in ppp_cp_parse_cr function which could have led to memory corruption and read overflow (bsc#1177206).
- CVE-2020-25641: Fixed ann issue where length bvec was causing softlockups (bsc#1177121).

The following non-security bugs were fixed:

- 9p: Fix memory leak in v9fs_mount (git-fixes).
- ACPI: EC: Reference count query handlers under lock (git-fixes).
- airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE (git-fixes).
- airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE (git-fixes).
- airo: Fix read overflows sending packets (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- ALSA: firewire-digi00x: exclude Avid Adrenaline from detection (git-fixes).
- ALSA; firewire-tascam: exclude Tascam FE-8 from detection (git-fixes).
- ALSA: hda: Fix 2 channel swapping for Tegra (git-fixes).
- ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion NT950XCJ-X716A (git-fixes).
- ALSA: hda/realtek - Improved routing for Thinkpad X1 7th/8th Gen (git-fixes).
- altera-stapl: altera_get_note: prevent write beyond end of 'key' (git-fixes).
- ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter (git-fixes).
- arm64: KVM: Do not generate UNDEF when LORegion feature is present (jsc#SLE-4084).
- arm64: KVM: regmap: Fix unexpected switch fall-through (jsc#SLE-4084).
- asm-generic: fix -Wtype-limits compiler warnings (bsc#1112178).
- ASoC: kirkwood: fix IRQ error handling (git-fixes).
- ASoC: tegra: Fix reference count leaks (git-fixes).
- ath10k: fix array out-of-bounds access (git-fixes).
- ath10k: fix memory leak for tpc_stats_final (git-fixes).
- ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read (git-fixes).
- batman-adv: Add missing include for in_interrupt() (git-fixes).
- batman-adv: Avoid uninitialized chaddr when handling DHCP (git-fixes).
- batman-adv: bla: fix type misuse for backbone_gw hash indexing (git-fixes).
- batman-adv: bla: use netif_rx_ni when not in interrupt context (git-fixes).
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh (git-fixes).
- batman-adv: mcast/TT: fix wrongly dropped or rerouted packets (git-fixes).
- bcache: Convert pr_&lt;level&gt; uses to a more typical style (git fixes (block drivers)).
- bcache: fix overflow in offset_to_stripe() (git fixes (block drivers)).
- bcm63xx_enet: correct clock usage (git-fixes).
- bcm63xx_enet: do not write to random DMA channel on BCM6345 (git-fixes).
- bitfield.h: do not compile-time validate _val in FIELD_FIT (git fixes (bitfield)).
- blktrace: fix debugfs use after free (git fixes (block drivers)).
- block: add docs for gendisk / request_queue refcount helpers (git fixes (block drivers)).
- block: revert back to synchronous request_queue removal (git fixes (block drivers)).
- block: Use non _rcu version of list functions for tag_set_list (git-fixes).
- Bluetooth: Fix refcount use-after-free issue (git-fixes).
- Bluetooth: guard against controllers sending zero'd events (git-fixes).
- Bluetooth: Handle Inquiry Cancel error after Inquiry Complete (git-fixes).
- Bluetooth: L2CAP: handle l2cap config request during open state (git-fixes).
- Bluetooth: prefetch channel before killing sock (git-fixes).
- bnxt_en: Fix completion ring sizing with TPA enabled (networking-stable-20_07_29).
- bonding: use nla_get_u64 to extract the value for IFLA_BOND_AD_ACTOR_SYSTEM (git-fixes).
- btrfs: require only sector size alignment for parent eb bytenr (bsc#1176789).
- btrfs: tree-checker: fix the error message for transid error (bsc#1176788).
- ceph: do not allow setlease on cephfs (bsc#1177041).
- ceph: fix potential mdsc use-after-free crash (bsc#1177042).
- ceph: fix use-after-free for fsc-&gt;mdsc (bsc#1177043).
- ceph: handle zero-length feature mask in session messages (bsc#1177044).
- cfg80211: regulatory: reject invalid hints (bsc#1176699).
- cifs: Fix leak when handling lease break for cached root fid (bsc#1176242).
- cifs/smb3: Fix data inconsistent when punch hole (bsc#1176544).
- cifs/smb3: Fix data inconsistent when zero file range (bsc#1176536).
- clk: Add (devm_)clk_get_optional() functions (git-fixes).
- clk: rockchip: Fix initialization of mux_pll_src_4plls_p (git-fixes).
- clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED (git-fixes).
- clk/ti/adpll: allocate room for terminating null (git-fixes).
- clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() (git-fixes).
- cpufreq: intel_pstate: Fix EPP setting via sysfs in active mode (bsc#1176966).
- dmaengine: at_hdmac: check return value of of_find_device_by_node() in at_dma_xlate() (git-fixes).
- dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling (git-fixes).
- dmaengine: pl330: Fix burst length if burst size is smaller than bus width (git-fixes).
- dmaengine: tegra-apb: Prevent race conditions on channel's freeing (git-fixes).
- dmaengine: zynqmp_dma: fix burst length configuration (git-fixes).
- dm crypt: avoid truncating the logical block size (git fixes (block drivers)).
- dm: fix redundant IO accounting for bios that need splitting (git fixes (block drivers)).
- dm integrity: fix a deadlock due to offloading to an incorrect workqueue (git fixes (block drivers)).
- dm integrity: fix integrity recalculation that is improperly skipped (git fixes (block drivers)).
- dm: report suspended device during destroy (git fixes (block drivers)).
- dm rq: do not call blk_mq_queue_stopped() in dm_stop_queue() (git fixes (block drivers)).
- dm: use noio when sending kobject event (git fixes (block drivers)).
- dm writecache: add cond_resched to loop in persistent_memory_claim() (git fixes (block drivers)).
- dm writecache: correct uncommitted_block when discarding uncommitted entry (git fixes (block drivers)).
- dm zoned: assign max_io_len correctly (git fixes (block drivers)).
- drivers: char: tlclk.c: Avoid data race between init and interrupt handler (git-fixes).
- Drivers: hv: Specify receive buffer size using Hyper-V page size (bsc#1176877).
- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload (git-fixes).
- drivers/net/wan/x25_asy: Fix to make it work (networking-stable-20_07_29).
- drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic (git-fixes).
- drm/amd/display: fix ref count leak in amdgpu_drm_ioctl (git-fixes).
- drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails (git-fixes).
- drm/amdgpu: Fix buffer overflow in INFO ioctl (git-fixes).
- drm/amdgpu: Fix bug in reporting voltage for CIK (git-fixes).
- drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms (git-fixes).
- drm/amdgpu: increase atombios cmd timeout (git-fixes).
- drm/amdgpu/powerplay: fix AVFS handling with custom powerplay table (git-fixes).
- drm/amdgpu/powerplay/smu7: fix AVFS handling with custom powerplay table (git-fixes).
- drm/amdkfd: fix a memory leak issue (git-fixes).
- drm/amdkfd: Fix reference count leaks (git-fixes).
- drm/amd/pm: correct Vega10 swctf limit setting (git-fixes).
- drm/amd/pm: correct Vega12 swctf limit setting (git-fixes).
- drm/ast: Initialize DRAM type before posting GPU (bsc#1113956) 	* context changes
- drm/mediatek: Add exception handing in mtk_drm_probe() if component init fail (git-fixes).
- drm/mediatek: Add missing put_device() call in mtk_hdmi_dt_parse_pdata() (git-fixes).
- drm/msm/a5xx: Always set an OPP supported hardware value (git-fixes).
- drm/msm: add shutdown support for display platform_driver (git-fixes).
- drm/msm: Disable preemption on all 5xx targets (git-fixes).
- drm/msm: fix leaks if initialization fails (git-fixes).
- drm/msm/gpu: make ringbuffer readonly (bsc#1112178) 	* context changes
- drm/nouveau/debugfs: fix runtime pm imbalance on error (git-fixes).
- drm/nouveau/dispnv50: fix runtime pm imbalance on error (git-fixes).
- drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open (git-fixes).
- drm/nouveau: Fix reference count leak in nouveau_connector_detect (git-fixes).
- drm/nouveau: fix reference count leak in nv50_disp_atomic_commit (git-fixes).
- drm/nouveau: fix runtime pm imbalance on error (git-fixes).
- drm/omap: fix possible object reference leak (git-fixes).
- drm/radeon: fix multiple reference count leak (git-fixes).
- drm/radeon: Prefer lower feedback dividers (git-fixes).
- drm/radeon: revert 'Prefer lower feedback dividers' (git-fixes).
- drm/sun4i: Fix dsi dcs long write function (git-fixes).
- drm/sun4i: sun8i-csc: Secondary CSC register correction (git-fixes).
- drm/tve200: Stabilize enable/disable (git-fixes).
- drm/vc4/vc4_hdmi: fill ASoC card owner (git-fixes).
- e1000: Do not perform reset in reset_task if we are already down (git-fixes).
- EDAC: Fix reference count leaks (bsc#1112178).
- fbcon: prevent user font height or width change from causing (bsc#1112178) 	
- Fix error in kabi fix for: NFSv4: Fix OPEN / CLOSE race (bsc#1176950).
- ftrace: Move RCU is watching check after recursion check (git-fixes).
- ftrace: Setup correct FTRACE_FL_REGS flags for module (git-fixes).
- gma/gma500: fix a memory disclosure bug due to uninitialized bytes (git-fixes).
- gpio: tc35894: fix up tc35894 interrupt configuration (git-fixes).
- gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable() (git-fixes).
- gtp: fix Illegal context switch in RCU read-side critical section (git-fixes).
- gtp: fix use-after-free in gtp_newlink() (git-fixes).
- Hide e21a4f3a930c as of its duplication
- HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage() (git-fixes).
- hsr: use netdev_err() instead of WARN_ONCE() (bsc#1176659).
- hv_utils: drain the timesync packets on onchannelcallback (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale (bsc#1176877).
- hwmon: (applesmc) check status earlier (git-fixes).
- i2c: core: Do not fail PRP0001 enumeration when no ID table exist (git-fixes).
- i2c: cpm: Fix i2c_ram structure (git-fixes).
- ibmvnic: add missing parenthesis in do_reset() (bsc#1176700 ltc#188140).
- ieee802154/adf7242: check status of adf7242_read_reg (git-fixes).
- ieee802154: fix one possible memleak in ca8210_dev_com_init (git-fixes).
- iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak (git-fixes).
- iio: accel: kxsd9: Fix alignment of local buffer (git-fixes).
- iio:accel:mma7455: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:adc:ina2xx Fix timestamp alignment issue (git-fixes).
- iio: adc: mcp3422: fix locking on error path (git-fixes).
- iio: adc: mcp3422: fix locking scope (git-fixes).
- iio:adc:ti-adc081c Fix alignment and data leak issues (git-fixes).
- iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set (git-fixes).
- iio: improve IIO_CONCENTRATION channel type description (git-fixes).
- iio:light:ltr501 Fix timestamp alignment issue (git-fixes).
- iio:light:max44000 Fix timestamp alignment and prevent data leak (git-fixes).
- iio:magnetometer:ak8975 Fix alignment and data leak issues (git-fixes).
- include: add additional sizes (bsc#1094244 ltc#168122).
- iommu/amd: Fix IOMMU AVIC not properly update the is_run bit in IRTE (bsc#1177293).
- iommu/amd: Fix potential @entry null deref (bsc#1177294).
- iommu/amd: Print extended features in one line to fix divergent log levels (bsc#1176316).
- iommu/amd: Re-factor guest virtual APIC (de-)activation code (bsc#1177291).
- iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (bsc#1176317).
- iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (bsc#1177295).
- iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (bsc#1176318).
- iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate() (bsc#1177296).
- iommu/omap: Check for failure of a call to omap_iommu_dump_ctx (bsc#1176319).
- iommu/vt-d: Serialize IOMMU GCMD register modifications (bsc#1176320).
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
- KVM: arm64: Change 32-bit handling of VM system registers (jsc#SLE-4084).
- KVM: arm64: Cleanup __activate_traps and __deactive_traps for VHE and non-VHE (jsc#SLE-4084).
- KVM: arm64: Configure c15, PMU, and debug register traps on cpu load/put for VHE (jsc#SLE-4084).
- KVM: arm64: Defer saving/restoring 32-bit sysregs to vcpu load/put (jsc#SLE-4084).
- KVM: arm64: Defer saving/restoring 64-bit sysregs to vcpu load/put on VHE (jsc#SLE-4084).
- KVM: arm64: Directly call VHE and non-VHE FPSIMD enabled functions (jsc#SLE-4084).
- KVM: arm64: Do not deactivate VM on VHE systems (jsc#SLE-4084).
- KVM: arm64: Do not save the host ELR_EL2 and SPSR_EL2 on VHE systems (jsc#SLE-4084).
- KVM: arm64: Factor out fault info population and gic workarounds (jsc#SLE-4084).
- KVM: arm64: Fix order of vcpu_write_sys_reg() arguments (jsc#SLE-4084).
- KVM: arm64: Forbid kprobing of the VHE world-switch code (jsc#SLE-4084).
- KVM: arm64: Improve debug register save/restore flow (jsc#SLE-4084).
- KVM: arm64: Introduce framework for accessing deferred sysregs (jsc#SLE-4084).
- KVM: arm64: Introduce separate VHE/non-VHE sysreg save/restore functions (jsc#SLE-4084).
- KVM: arm64: Introduce VHE-specific kvm_vcpu_run (jsc#SLE-4084).
- KVM: arm64: Move common VHE/non-VHE trap config in separate functions (jsc#SLE-4084).
- KVM: arm64: Move debug dirty flag calculation out of world switch (jsc#SLE-4084).
- KVM: arm64: Move HCR_INT_OVERRIDE to default HCR_EL2 guest flag (jsc#SLE-4084).
- KVM: arm64: Move userspace system registers into separate function (jsc#SLE-4084).
- KVM: arm64: Prepare to handle deferred save/restore of 32-bit registers (jsc#SLE-4084).
- KVM: arm64: Prepare to handle deferred save/restore of ELR_EL1 (jsc#SLE-4084).
- KVM: arm64: Remove kern_hyp_va() use in VHE switch function (jsc#SLE-4084).
- KVM: arm64: Remove noop calls to timer save/restore from VHE switch (jsc#SLE-4084).
- KVM: arm64: Rework hyp_panic for VHE and non-VHE (jsc#SLE-4084).
- KVM: arm64: Rewrite sysreg alternatives to static keys (jsc#SLE-4084).
- KVM: arm64: Rewrite system register accessors to read/write functions (jsc#SLE-4084).
- KVM: arm64: Slightly improve debug save/restore functions (jsc#SLE-4084).
- KVM: arm64: Unify non-VHE host/guest sysreg save and restore functions (jsc#SLE-4084).
- KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE (jsc#SLE-4084).
- KVM: arm/arm64: Avoid vcpu_load for other vcpu ioctls than KVM_RUN (jsc#SLE-4084).
- KVM: arm/arm64: Avoid VGICv3 save/restore on VHE with no IRQs (jsc#SLE-4084).
- KVM: arm/arm64: Get rid of vcpu-&gt;arch.irq_lines (jsc#SLE-4084).
- KVM: arm/arm64: Handle VGICv3 save/restore from the main VGIC code on VHE (jsc#SLE-4084).
- KVM: arm/arm64: Move vcpu_load call after kvm_vcpu_first_run_init (jsc#SLE-4084).
- KVM: arm/arm64: Move VGIC APR save/restore to vgic put/load (jsc#SLE-4084).
- KVM: arm/arm64: Prepare to handle deferred save/restore of SPSR_EL1 (jsc#SLE-4084).
- KVM: arm/arm64: Remove leftover comment from kvm_vcpu_run_vhe (jsc#SLE-4084).
- KVM: introduce kvm_arch_vcpu_async_ioctl (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_fpu (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_mpstate (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_regs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_run (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_fpu (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_guest_debug (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_mpstate (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_regs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_sregs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_translate (jsc#SLE-4084).
- KVM: PPC: Fix compile error that occurs when CONFIG_ALTIVEC=n (jsc#SLE-4084).
- KVM: Prepare for moving vcpu_load/vcpu_put into arch specific code (jsc#SLE-4084).
- KVM: SVM: Add a dedicated INVD intercept routine (bsc#1112178).
- KVM: SVM: Fix disable pause loop exit/pause filtering capability on SVM (bsc#1176321).
- KVM: SVM: fix svn_pin_memory()'s use of get_user_pages_fast() (bsc#1112178).
- KVM: Take vcpu-&gt;mutex outside vcpu_load (jsc#SLE-4084).
- libceph: allow setting abort_on_full for rbd (bsc#1169972).
- libnvdimm: cover up nvdimm_security_ops changes (bsc#1171742).
- libnvdimm: cover up struct nvdimm changes (bsc#1171742).
- libnvdimm/security, acpi/nfit: unify zero-key for all security commands (bsc#1171742).
- libnvdimm/security: fix a typo (bsc#1171742 bsc#1167527).
- libnvdimm/security: Introduce a 'frozen' attribute (bsc#1171742).
- lib/raid6: use vdupq_n_u8 to avoid endianness warnings (git fixes (block drivers)).
- mac802154: tx: fix use-after-free (git-fixes).
- md: raid0/linear: fix dereference before null check on pointer mddev (git fixes (block drivers)).
- media: davinci: vpif_capture: fix potential double free (git-fixes).
- media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq() (git-fixes).
- media: smiapp: Fix error handling at NVM reading (git-fixes).
- media: ti-vpe: cal: Restrict DMA to avoid memory corruption (git-fixes).
- mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs (git-fixes).
- mfd: mfd-core: Protect against NULL call-back function pointer (git-fixes).
- mm: Avoid calling build_all_zonelists_init under hotplug context (bsc#1154366).
- mmc: cqhci: Add cqhci_deactivate() (git-fixes).
- mmc: sdhci-msm: Add retries when all tuning phases are found valid (git-fixes).
- mmc: sdhci-pci: Fix SDHCI_RESET_ALL for CQHCI for Intel GLK-based controllers (git-fixes).
- mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS models (git-fixes).
- mm/page_alloc.c: fix a crash in free_pages_prepare() (git fixes (mm/pgalloc)).
- mm/vmalloc.c: move 'area-&gt;pages' after if statement (git fixes (mm/vmalloc)).
- mtd: cfi_cmdset_0002: do not free cfi-&gt;cfiq in error path of cfi_amdstd_setup() (git-fixes).
- mtd: lpddr: Fix a double free in probe() (git-fixes).
- mtd: phram: fix a double free issue in error path (git-fixes).
- mtd: properly check all write ioctls for permissions (git-fixes).
- net: dsa: b53: Fix sparse warnings in b53_mmap.c (git-fixes).
- net: dsa: b53: Use strlcpy() for ethtool::get_strings (git-fixes).
- net: dsa: mv88e6xxx: fix 6085 frame mode masking (git-fixes).
- net: dsa: mv88e6xxx: Fix interrupt masking on removal (git-fixes).
- net: dsa: mv88e6xxx: Fix name of switch 88E6141 (git-fixes).
- net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge() (git-fixes).
- net: dsa: mv88e6xxx: Unregister MDIO bus on error path (git-fixes).
- net: dsa: qca8k: Allow overwriting CPU port setting (git-fixes).
- net: dsa: qca8k: Enable RXMAC when bringing up a port (git-fixes).
- net: dsa: qca8k: Force CPU port to its highest bandwidth (git-fixes).
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (git-fixes).
- net: fs_enet: do not call phy_stop() in interrupts (git-fixes).
- net: initialize fastreuse on inet_inherit_port (networking-stable-20_08_15).
- net: lan78xx: Bail out if lan78xx_get_endpoints fails (git-fixes).
- net: lan78xx: replace bogus endpoint lookup (networking-stable-20_08_08).
- net: lio_core: fix potential sign-extension overflow on large shift (git-fixes).
- net/mlx5: Add meaningful return codes to status_to_err function (git-fixes).
- net/mlx5: E-Switch, Use correct flags when configuring vlan (git-fixes).
- net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded (git-fixes).
- net: mvneta: fix mtu change on port without link (git-fixes).
- net-next: ax88796: Do not free IRQ in ax_remove() (already freed in ax_close()) (git-fixes).
- net/nfc/rawsock.c: add CAP_NET_RAW check (networking-stable-20_08_15).
- net: qca_spi: Avoid packet drop during initial sync (git-fixes).
- net: qca_spi: Make sure the QCA7000 reset is triggered (git-fixes).
- net: refactor bind_bucket fastreuse into helper (networking-stable-20_08_15).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: fix restoring of fallback changes (git-fixes).
- net/smc: fix sock refcounting in case of termination (git-fixes).
- net/smc: improve close of terminated socket (git-fixes).
- net/smc: Prevent kernel-infoleak in __smc_diag_dump() (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: tolerate future SMCD versions (git-fixes).
- net: stmmac: call correct function in stmmac_mac_config_rx_queues_routing() (git-fixes).
- net: stmmac: Disable ACS Feature for GMAC &gt;= 4 (git-fixes).
- net: stmmac: do not stop NAPI processing when dropping a packet (git-fixes).
- net: stmmac: dwmac4: fix flow control issue (git-fixes).
- net: stmmac: dwmac_lib: fix interchanged sleep/timeout values in DMA reset function (git-fixes).
- net: stmmac: dwmac-meson8b: Add missing boundary to RGMII TX clock array (git-fixes).
- net: stmmac: dwmac-meson8b: fix internal RGMII clock configuration (git-fixes).
- net: stmmac: dwmac-meson8b: fix setting the RGMII TX clock on Meson8b (git-fixes).
- net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on Meson8b/8m2 SoCs (git-fixes).
- net: stmmac: dwmac-meson8b: only configure the clocks in RGMII mode (git-fixes).
- net: stmmac: dwmac-meson8b: propagate rate changes to the parent clock (git-fixes).
- net: stmmac: Fix error handling path in 'alloc_dma_rx_desc_resources()' (git-fixes).
- net: stmmac: Fix error handling path in 'alloc_dma_tx_desc_resources()' (git-fixes).
- net: stmmac: rename dwmac4_tx_queue_routing() to match reality (git-fixes).
- net: stmmac: set MSS for each tx DMA channel (git-fixes).
- net: stmmac: Use correct values in TQS/RQS fields (git-fixes).
- net-sysfs: add a newline when printing 'tx_timeout' by sysfs (networking-stable-20_07_29).
- net: systemport: Fix software statistics for SYSTEMPORT Lite (git-fixes).
- net: systemport: Fix sparse warnings in bcm_sysport_insert_tsb() (git-fixes).
- net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() (git-fixes).
- net: ucc_geth - fix Oops when changing number of buffers in the ring (git-fixes).
- NFSv4: do not mark all open state for recovery when handling recallable state revoked flag (bsc#1176935).
- nvme-fc: set max_segments to lldd max value (bsc#1176038).
- nvme-pci: override the value of the controller's numa node (bsc#1176507).
- ocfs2: give applications more IO opportunities during fstrim (bsc#1175228).
- omapfb: fix multiple reference count leaks due to pm_runtime_get_sync (git-fixes).
- PCI/ASPM: Allow re-enabling Clock PM (git-fixes).
- PCI: Fix pci_create_slot() reference count leak (git-fixes).
- PCI: qcom: Add missing ipq806x clocks in PCIe driver (git-fixes).
- PCI: qcom: Add missing reset for ipq806x (git-fixes).
- PCI: qcom: Add support for tx term offset for rev 2.1.0 (git-fixes).
- PCI: qcom: Define some PARF params needed for ipq8064 SoC (git-fixes).
- PCI: rcar: Fix incorrect programming of OB windows (git-fixes).
- phy: samsung: s5pv210-usb2: Add delay after reset (git-fixes).
- pinctrl: mvebu: Fix i2c sda definition for 98DX3236 (git-fixes).
- powerpc/64s: Blacklist functions invoked on a trap (bsc#1094244 ltc#168122).
- powerpc/64s: Fix HV NMI vs HV interrupt recoverability test (bsc#1094244 ltc#168122).
- powerpc/64s: Fix unrelocated interrupt trampoline address test (bsc#1094244 ltc#168122).
- powerpc/64s: Include &lt;asm/nmi.h&gt; header file to fix a warning (bsc#1094244 ltc#168122).
- powerpc/64s: machine check do not trace real-mode handler (bsc#1094244 ltc#168122).
- powerpc/64s: sreset panic if there is no debugger or crash dump handlers (bsc#1094244 ltc#168122).
- powerpc/64s: system reset interrupt preserve HSRRs (bsc#1094244 ltc#168122).
- powerpc: Add cputime_to_nsecs() (bsc#1065729).
- powerpc/book3s64/radix: Add kernel command line option to disable radix GTSE (bsc#1055186 ltc#153436).
- powerpc/book3s64/radix: Fix boot failure with large amount of guest memory (bsc#1176022 ltc#187208).
- powerpc: Implement ftrace_enabled() helpers (bsc#1094244 ltc#168122).
- powerpc/init: Do not advertise radix during client-architecture-support (bsc#1055186 ltc#153436 ).
- powerpc/kernel: Cleanup machine check function declarations (bsc#1065729).
- powerpc/kernel: Enables memory hot-remove after reboot on pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Enable radix GTSE only if supported (bsc#1055186 ltc#153436).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests only (bsc#1177030 ltc#187588).
- powerpc/mm: Move book3s64 specifics in subdirectory mm/book3s64 (bsc#1176022 ltc#187208).
- powerpc/powernv: Remove real mode access limit for early allocations (bsc#1176022 ltc#187208).
- powerpc/prom: Enable Radix GTSE in cpu pa-features (bsc#1055186 ltc#153436).
- powerpc/pseries/le: Work around a firmware quirk (bsc#1094244 ltc#168122).
- powerpc/pseries: lift RTAS limit for radix (bsc#1176022 ltc#187208).
- powerpc/pseries: Limit machine check stack to 4GB (bsc#1094244 ltc#168122).
- powerpc/pseries: Machine check use rtas_call_unlocked() with args on stack (bsc#1094244 ltc#168122).
- powerpc/pseries: radix is not subject to RMA limit, remove it (bsc#1176022 ltc#187208).
- powerpc/pseries/ras: Avoid calling rtas_token() in NMI paths (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: Fix FWNMI_VALID off by one (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: fwnmi avoid modifying r3 in error case (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: fwnmi sreset should not interlock (bsc#1094244 ltc#168122).
- powerpc/traps: Do not trace system reset (bsc#1094244 ltc#168122).
- powerpc/traps: fix recoverability of machine check handling on book3s/32 (bsc#1094244 ltc#168122).
- powerpc/traps: Make unrecoverable NMIs die instead of panic (bsc#1094244 ltc#168122).
- powerpc/xmon: Use `dcbf` inplace of `dcbi` instruction for 64bit Book3S (bsc#1065729).
- power: supply: max17040: Correct voltage reading (git-fixes).
- rcu: Do RCU GP kthread self-wakeup from softirq and interrupt (git fixes (rcu)).
- regulator: push allocation in set_consumer_device_supply() out of lock (git-fixes).
- rpadlpar_io: Add MODULE_DESCRIPTION entries to kernel modules (bsc#1176869 ltc#188243).
- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- rpm/kernel-binary.spec.in: Also sign ppc64 kernels (jsc#SLE-15857 jsc#SLE-13618).
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115) To avoid the unnecessary key enrollment, when enrolling the signing key of the kernel package, '--ca-check' is added to mokutil so that mokutil will ignore the request if the CA of the signing key already exists in MokList or UEFI db. Since the macro, %_suse_kernel_module_subpackage, is only defined in a kernel module package (KMP), it's used to determine whether the %post script is running in a kernel package, or a kernel module package.
- rpm/kernel-source.spec.in: Also use bz compression (boo#1175882).
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698) The '-c' option wasn't passed down to %_kernel_module_package so the ueficert subpackage wasn't generated even if the certificate is specified in the spec file.
- rtc: ds1374: fix possible race condition (git-fixes).
- rtlwifi: rtl8192cu: Prevent leaking urb (git-fixes).
- rxrpc: Fix race between recvmsg and sendmsg on immediate call failure (networking-stable-20_08_08).
- rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA (networking-stable-20_07_29).
- s390/mm: fix huge pte soft dirty copying (git-fixes).
- s390/qeth: do not process empty bridge port events (git-fixes).
- s390/qeth: integrate RX refill worker with NAPI (git-fixes).
- s390/qeth: tolerate pre-filled RX buffer (git-fixes).
- scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del() (bsc#1174899).
- scsi: fnic: Do not call 'scsi_done()' for unhandled commands (bsc#1168468, bsc#1171675).
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (bsc#1176962 ltc#188304).
- scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling getpeername() (bsc#1177258).
- scsi: libfc: Fix for double free() (bsc#1174899).
- scsi: libfc: free response frame from GPN_ID (bsc#1174899).
- scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases (bsc#1174899).
- scsi: lpfc: Add dependency on CPU_FREQ (git-fixes).
- scsi: lpfc: Fix setting IRQ affinity with an empty CPU mask (git-fixes).
- scsi: qla2xxx: Fix regression on sparc64 (git-fixes).
- scsi: qla2xxx: Fix the return value (bsc#1171688).
- scsi: qla2xxx: Fix the size used in a 'dma_free_coherent()' call (bsc#1171688).
- scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba() (bsc#1171688).
- scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg() (bsc#1171688).
- scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1171688).
- scsi: qla2xxx: Log calling function name in qla2x00_get_sp_from_handle() (bsc#1171688).
- scsi: qla2xxx: Remove pci-dma-compat wrapper API (bsc#1171688).
- scsi: qla2xxx: Remove redundant variable initialization (bsc#1171688).
- scsi: qla2xxx: Remove superfluous memset() (bsc#1171688).
- scsi: qla2xxx: Simplify return value logic in qla2x00_get_sp_from_handle() (bsc#1171688).
- scsi: qla2xxx: Suppress two recently introduced compiler warnings (git-fixes).
- scsi: qla2xxx: Warn if done() or free() are called on an already freed srb (bsc#1171688).
- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for Tegra186 (git-fixes).
- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for Tegra210 (git-fixes).
- serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout (git-fixes).
- serial: 8250_omap: Fix sleeping function called from invalid context during probe (git-fixes).
- serial: 8250_port: Do not service RX FIFO if throttled (git-fixes).
- Set CONFIG_HAVE_KVM_VCPU_ASYNC_IOCTL=y (jsc#SLE-4084).
- SMB3: Honor persistent/resilient handle flags for multiuser mounts (bsc#1176546).
- SMB3: Honor 'seal' flag for multiuser mounts (bsc#1176545).
- SMB3: warn on confusing error scenario with sec=krb5 (bsc#1176548).
- stmmac: Do not access tx_q-&gt;dirty_tx before netif_tx_lock (git-fixes).
- tcp: apply a floor of 1 for RTT samples from TCP timestamps (networking-stable-20_08_08).
- thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430 (git-fixes).
- tools/power/cpupower: Fix initializer override in hsw_ext_cstates (bsc#1112178).
- USB: core: fix slab-out-of-bounds Read in read_descriptors (git-fixes).
- USB: dwc3: Increase timeout for CmdAct cleared by device controller (git-fixes).
- USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() (git-fixes).
- USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int (git-fixes).
- USB: Fix out of sync data toggle if a configured device is reconfigured (git-fixes).
- USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() (git-fixes).
- USB: gadget: f_ncm: Fix NDP16 datagram validation (git-fixes).
- USB: gadget: u_f: add overflow checks to VLA macros (git-fixes).
- USB: gadget: u_f: Unbreak offset calculation in VLAs (git-fixes).
- USB: hso: check for return value in hso_serial_common_create() (networking-stable-20_08_08).
- usblp: fix race between disconnect() and read() (git-fixes).
- USB: lvtest: return proper error code in probe (git-fixes).
- usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set (git-fixes).
- USB: qmi_wwan: add D-Link DWM-222 A2 device ID (git-fixes).
- USB: quirks: Add no-lpm quirk for another Raydium touchscreen (git-fixes).
- USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin notebook (git-fixes).
- USB: quirks: Ignore duplicate endpoint on Sound Devices MixPre-D (git-fixes).
- USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter (git-fixes).
- USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules (git-fixes).
- USB: serial: option: support dynamic Quectel USB compositions (git-fixes).
- USB: sisusbvga: Fix a potential UB casued by left shifting a negative value (git-fixes).
- USB: storage: Add unusual_uas entry for Sony PSZ drives (git-fixes).
- USB: typec: ucsi: acpi: Check the _DEP dependencies (git-fixes).
- USB: uas: Add quirk for PNY Pro Elite (git-fixes).
- USB: UAS: fix disconnect by unplugging a hub (git-fixes).
- USB: yurex: Fix bad gfp argument (git-fixes).
- vgacon: remove software scrollback support (bsc#1176278).
- video: fbdev: fix OOB read in vga_8planes_imageblit() (git-fixes).
- virtio-blk: free vblk-vqs in error path of virtblk_probe() (git fixes (block drivers)).
- vrf: prevent adding upper devices (git-fixes).
- vxge: fix return of a free'd memblock on a failed dma mapping (git-fixes).
- x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task (bsc#1112178).
- xen: do not reschedule in preemption off sections (bsc#1175749).
- xen/events: do not use chip_data for legacy IRQs (bsc#1065600).
- xen uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information (bsc#1065600).
- xhci: Do warm-reset when both CAS and XDEV_RESUME are set (git-fixes).
- yam: fix possible memory leak in yam_init_driver (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-13"/>
	<updated date="2020-10-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094244">SUSE bug 1094244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154366">SUSE bug 1154366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167527">SUSE bug 1167527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168468">SUSE bug 1168468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169972">SUSE bug 1169972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171675">SUSE bug 1171675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171688">SUSE bug 1171688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171742">SUSE bug 1171742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173115">SUSE bug 1173115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174899">SUSE bug 1174899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175228">SUSE bug 1175228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175749">SUSE bug 1175749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175882">SUSE bug 1175882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176011">SUSE bug 1176011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176022">SUSE bug 1176022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176038">SUSE bug 1176038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176235">SUSE bug 1176235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176242">SUSE bug 1176242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176278">SUSE bug 1176278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176316">SUSE bug 1176316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176317">SUSE bug 1176317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176318">SUSE bug 1176318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176319">SUSE bug 1176319</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176320">SUSE bug 1176320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176321">SUSE bug 1176321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176381">SUSE bug 1176381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176395">SUSE bug 1176395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176410">SUSE bug 1176410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176423">SUSE bug 1176423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176482">SUSE bug 1176482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176507">SUSE bug 1176507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176536">SUSE bug 1176536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176544">SUSE bug 1176544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176545">SUSE bug 1176545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176546">SUSE bug 1176546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176548">SUSE bug 1176548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176659">SUSE bug 1176659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176698">SUSE bug 1176698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176699">SUSE bug 1176699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176700">SUSE bug 1176700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176721">SUSE bug 1176721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176722">SUSE bug 1176722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176725">SUSE bug 1176725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176732">SUSE bug 1176732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176788">SUSE bug 1176788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176789">SUSE bug 1176789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176869">SUSE bug 1176869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176877">SUSE bug 1176877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176935">SUSE bug 1176935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176950">SUSE bug 1176950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176962">SUSE bug 1176962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176966">SUSE bug 1176966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176990">SUSE bug 1176990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177027">SUSE bug 1177027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177030">SUSE bug 1177030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177041">SUSE bug 1177041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177042">SUSE bug 1177042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177043">SUSE bug 1177043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177044">SUSE bug 1177044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177121">SUSE bug 1177121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177206">SUSE bug 1177206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177258">SUSE bug 1177258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177291">SUSE bug 1177291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177293">SUSE bug 1177293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177294">SUSE bug 1177294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177295">SUSE bug 1177295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177296">SUSE bug 1177296</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-0404/">CVE-2020-0404</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0427/">CVE-2020-0427</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0431/">CVE-2020-0431</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0432/">CVE-2020-0432</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14381/">CVE-2020-14381</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14390/">CVE-2020-14390</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25284/">CVE-2020-25284</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25641/">CVE-2020-25641</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25643/">CVE-2020-25643</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-26088/">CVE-2020-26088</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497494" comment="kernel-default-livepatch-4.12.14-197.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497495" comment="kernel-default-livepatch-devel-4.12.14-197.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497496" comment="kernel-livepatch-4_12_14-197_61-default-1-3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138412" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1140683" ref_url="https://bugzilla.suse.com/1140683" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1174748" ref_url="https://bugzilla.suse.com/1174748" source="BUGZILLA"/>
		<reference ref_id="1175520" ref_url="https://bugzilla.suse.com/1175520" source="BUGZILLA"/>
		<reference ref_id="1176400" ref_url="https://bugzilla.suse.com/1176400" source="BUGZILLA"/>
		<reference ref_id="1176946" ref_url="https://bugzilla.suse.com/1176946" source="BUGZILLA"/>
		<reference ref_id="1177027" ref_url="https://bugzilla.suse.com/1177027" source="BUGZILLA"/>
		<reference ref_id="1177340" ref_url="https://bugzilla.suse.com/1177340" source="BUGZILLA"/>
		<reference ref_id="1177511" ref_url="https://bugzilla.suse.com/1177511" source="BUGZILLA"/>
		<reference ref_id="1177685" ref_url="https://bugzilla.suse.com/1177685" source="BUGZILLA"/>
		<reference ref_id="1177724" ref_url="https://bugzilla.suse.com/1177724" source="BUGZILLA"/>
		<reference ref_id="1177725" ref_url="https://bugzilla.suse.com/1177725" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-12352" ref_url="https://www.suse.com/security/cve/CVE-2020-12352/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007592.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724).
- CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' aka 'BadChoice' (bsc#1177725).
- CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted (bsc#1177511).


The following non-security bugs were fixed:

- drm/sun4i: mixer: Extend regmap max_register (git-fixes).
- i2c: meson: fix clock setting overwrite (git-fixes).
- iommu/vt-d: Correctly calculate agaw in domain_init() (bsc#1176400).
- mac80211: do not allow bigger VHT MPDUs than the hardware supports (git-fixes).
- macsec: avoid use-after-free in macsec_handle_frame() (git-fixes).
- mmc: core: do not set limits.discard_granularity as 0 (git-fixes).
- mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() (bsc#1177685).
- NFS: On fatal writeback errors, we need to call nfs_inode_remove_request() (bsc#1177340).
- NFS: Revalidate the file mapping on all fatal writeback errors (bsc#1177340).
- nvme: add a Identify Namespace Identification Descriptor list quirk (bsc#1174748). add two previous futile attempts to fix the bug to blacklist.conf
- nvme: Fix ctrl use-after-free during sysfs deletion (bsc#1174748).
- nvme: fix deadlock caused by ANA update wrong locking (bsc#1174748).
- nvme: fix possible io failures when removing multipathed ns (bsc#1174748).
- nvme: make nvme_identify_ns propagate errors back (bsc#1174748). Refresh:  - patches.suse/nvme-flush-scan_work-when-resetting-controller.patch
- nvme: make nvme_report_ns_ids propagate error back (bsc#1174748).
- nvme-multipath: do not reset on unknown status (bsc#1174748).
- nvme: Namepace identification descriptor list is optional (bsc#1174748).
- nvme: pass status to nvme_error_status (bsc#1174748).
- nvme-rdma: Avoid double freeing of async event data (bsc#1174748).
- nvme: return error from nvme_alloc_ns() (bsc#1174748).
- powerpc/dma: Fix dma_map_ops::get_required_mask (bsc#1065729).
- scsi-hisi-kabi-fixes.patch
- scsi-hisi-kabi-fixes.patch
- scsi: hisi_sas: Add debugfs ITCT file and add file operations (bsc#1140683).
- scsi: hisi_sas: Add manual trigger for debugfs dump (bsc#1140683).
- scsi: hisi_sas: Add missing seq_printf() call in hisi_sas_show_row_32() (bsc#1140683).
- scsi: hisi_sas: Change return variable type in phy_up_v3_hw() (bsc#1140683).
- scsi: hisi_sas: Correct memory allocation size for DQ debugfs (bsc#1140683).
- scsi: hisi_sas: Do some more tidy-up (bsc#1140683).
- scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO (bsc#1140683).
- scsi: hisi_sas: Fix type casting and missing static qualifier in debugfs code (bsc#1140683). Refresh:
- scsi-hisi_sas-Issue-internal-abort-on-all-relevant-q.patch
- scsi: hisi_sas: No need to check return value of debugfs_create functions (bsc#1140683). Update:
- scsi: hisi_sas: Some misc tidy-up (bsc#1140683).
- scsi: qla2xxx: Add IOCB resource tracking (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Add rport fields in debugfs (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Add SLER and PI control support (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Correct the check for sscanf() return value (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix buffer-buffer credit extraction error (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix crash on session cleanup with unload (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix I/O errors during LIP reset tests (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix I/O failures during remote port toggle testing (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix memory size truncation (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix MPI reset needed message (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix reset of MPI firmware (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Make tgt_port_database available in initiator mode (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Performance tweak (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Reduce duplicate code in reporting speed (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Remove unneeded variable 'rval' (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Setup debugfs entries for remote ports (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Update version to 10.02.00.102-k (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Update version to 10.02.00.103-k (bsc#1176946 bsc#1175520 bsc#1172538).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-20"/>
	<updated date="2020-10-20"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140683">SUSE bug 1140683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174748">SUSE bug 1174748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175520">SUSE bug 1175520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176400">SUSE bug 1176400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176946">SUSE bug 1176946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177027">SUSE bug 1177027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177340">SUSE bug 1177340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177511">SUSE bug 1177511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177685">SUSE bug 1177685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177724">SUSE bug 1177724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177725">SUSE bug 1177725</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12352/">CVE-2020-12352</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497497" comment="kernel-default-livepatch-4.12.14-197.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497498" comment="kernel-default-livepatch-devel-4.12.14-197.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497499" comment="kernel-livepatch-4_12_14-197_64-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138413" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1175992" ref_url="https://bugzilla.suse.com/1175992" source="BUGZILLA"/>
		<reference ref_id="1176012" ref_url="https://bugzilla.suse.com/1176012" source="BUGZILLA"/>
		<reference ref_id="1176072" ref_url="https://bugzilla.suse.com/1176072" source="BUGZILLA"/>
		<reference ref_id="1176382" ref_url="https://bugzilla.suse.com/1176382" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14381" ref_url="https://www.suse.com/security/cve/CVE-2020-14381/" source="CVE"/>
		<reference ref_id="CVE-2020-14386" ref_url="https://www.suse.com/security/cve/CVE-2020-14386/" source="CVE"/>
		<reference ref_id="CVE-2020-24394" ref_url="https://www.suse.com/security/cve/CVE-2020-24394/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007708.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_45 fixes several issues.

The following security issues were fixed:

- CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly privilege escalation (bsc#1176011).
- CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c (bsc#1176381).
- CVE-2020-14386: Fixed a memory corruption which could have lead to an attacker gaining root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity (bsc#1176069).
- CVE-2020-24394: The NFS server code can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support. This occurs because the current umask is not considered (bsc#1175518).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175992">SUSE bug 1175992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176012">SUSE bug 1176012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176072">SUSE bug 1176072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176382">SUSE bug 1176382</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14381/">CVE-2020-14381</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14386/">CVE-2020-14386</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24394/">CVE-2020-24394</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720973" comment="kernel-default 4.12.14-197.45 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719192" comment="kernel-livepatch-4_12_14-197_45-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497500" comment="kernel-livepatch-4_12_14-197_45-default-3-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138414" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1175992" ref_url="https://bugzilla.suse.com/1175992" source="BUGZILLA"/>
		<reference ref_id="1176012" ref_url="https://bugzilla.suse.com/1176012" source="BUGZILLA"/>
		<reference ref_id="1176072" ref_url="https://bugzilla.suse.com/1176072" source="BUGZILLA"/>
		<reference ref_id="1176382" ref_url="https://bugzilla.suse.com/1176382" source="BUGZILLA"/>
		<reference ref_id="1176896" ref_url="https://bugzilla.suse.com/1176896" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0431" ref_url="https://www.suse.com/security/cve/CVE-2020-0431/" source="CVE"/>
		<reference ref_id="CVE-2020-14381" ref_url="https://www.suse.com/security/cve/CVE-2020-14381/" source="CVE"/>
		<reference ref_id="CVE-2020-14386" ref_url="https://www.suse.com/security/cve/CVE-2020-14386/" source="CVE"/>
		<reference ref_id="CVE-2020-24394" ref_url="https://www.suse.com/security/cve/CVE-2020-24394/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007712.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_40 fixes several issues.

The following security issues were fixed:

- CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly privilege escalation (bsc#1176011).
- CVE-2020-0431: In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. (bsc#1176722)
- CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c (bsc#1176381).
- CVE-2020-14386: Fixed a memory corruption which could have lead to an attacker gaining root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity (bsc#1176069).
- CVE-2020-24394: The NFS server code can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support. This occurs because the current umask is not considered (bsc#1175518).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175992">SUSE bug 1175992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176012">SUSE bug 1176012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176072">SUSE bug 1176072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176382">SUSE bug 1176382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176896">SUSE bug 1176896</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0431/">CVE-2020-0431</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14381/">CVE-2020-14381</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14386/">CVE-2020-14386</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24394/">CVE-2020-24394</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720969" comment="kernel-default 4.12.14-197.40 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719188" comment="kernel-livepatch-4_12_14-197_40-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497501" comment="kernel-livepatch-4_12_14-197_40-default-5-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138415" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1175992" ref_url="https://bugzilla.suse.com/1175992" source="BUGZILLA"/>
		<reference ref_id="1176012" ref_url="https://bugzilla.suse.com/1176012" source="BUGZILLA"/>
		<reference ref_id="1176072" ref_url="https://bugzilla.suse.com/1176072" source="BUGZILLA"/>
		<reference ref_id="1176382" ref_url="https://bugzilla.suse.com/1176382" source="BUGZILLA"/>
		<reference ref_id="1176896" ref_url="https://bugzilla.suse.com/1176896" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0431" ref_url="https://www.suse.com/security/cve/CVE-2020-0431/" source="CVE"/>
		<reference ref_id="CVE-2020-14381" ref_url="https://www.suse.com/security/cve/CVE-2020-14381/" source="CVE"/>
		<reference ref_id="CVE-2020-14386" ref_url="https://www.suse.com/security/cve/CVE-2020-14386/" source="CVE"/>
		<reference ref_id="CVE-2020-24394" ref_url="https://www.suse.com/security/cve/CVE-2020-24394/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007712.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_37 fixes several issues.

The following security issues were fixed:

- CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly privilege escalation (bsc#1176011).
- CVE-2020-0431: In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. (bsc#1176722)
- CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c (bsc#1176381).
- CVE-2020-14386: Fixed a memory corruption which could have lead to an attacker gaining root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity (bsc#1176069).
- CVE-2020-24394: The NFS server code can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support. This occurs because the current umask is not considered (bsc#1175518).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175992">SUSE bug 1175992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176012">SUSE bug 1176012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176072">SUSE bug 1176072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176382">SUSE bug 1176382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176896">SUSE bug 1176896</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0431/">CVE-2020-0431</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14381/">CVE-2020-14381</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14386/">CVE-2020-14386</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24394/">CVE-2020-24394</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720968" comment="kernel-default 4.12.14-197.37 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719187" comment="kernel-livepatch-4_12_14-197_37-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497502" comment="kernel-livepatch-4_12_14-197_37-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138416" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1175992" ref_url="https://bugzilla.suse.com/1175992" source="BUGZILLA"/>
		<reference ref_id="1176012" ref_url="https://bugzilla.suse.com/1176012" source="BUGZILLA"/>
		<reference ref_id="1176072" ref_url="https://bugzilla.suse.com/1176072" source="BUGZILLA"/>
		<reference ref_id="1176382" ref_url="https://bugzilla.suse.com/1176382" source="BUGZILLA"/>
		<reference ref_id="1176896" ref_url="https://bugzilla.suse.com/1176896" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0431" ref_url="https://www.suse.com/security/cve/CVE-2020-0431/" source="CVE"/>
		<reference ref_id="CVE-2020-14381" ref_url="https://www.suse.com/security/cve/CVE-2020-14381/" source="CVE"/>
		<reference ref_id="CVE-2020-14386" ref_url="https://www.suse.com/security/cve/CVE-2020-14386/" source="CVE"/>
		<reference ref_id="CVE-2020-24394" ref_url="https://www.suse.com/security/cve/CVE-2020-24394/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007712.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_34 fixes several issues.

The following security issues were fixed:

- CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly privilege escalation (bsc#1176011).
- CVE-2020-0431: In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. (bsc#1176722)
- CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c (bsc#1176381).
- CVE-2020-14386: Fixed a memory corruption which could have lead to an attacker gaining root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity (bsc#1176069).
- CVE-2020-24394: The NFS server code can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support. This occurs because the current umask is not considered (bsc#1175518).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175992">SUSE bug 1175992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176012">SUSE bug 1176012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176072">SUSE bug 1176072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176382">SUSE bug 1176382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176896">SUSE bug 1176896</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0431/">CVE-2020-0431</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14381/">CVE-2020-14381</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14386/">CVE-2020-14386</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24394/">CVE-2020-24394</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720970" comment="kernel-default 4.12.14-197.34 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719189" comment="kernel-livepatch-4_12_14-197_34-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497503" comment="kernel-livepatch-4_12_14-197_34-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138417" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1175992" ref_url="https://bugzilla.suse.com/1175992" source="BUGZILLA"/>
		<reference ref_id="1176012" ref_url="https://bugzilla.suse.com/1176012" source="BUGZILLA"/>
		<reference ref_id="1176072" ref_url="https://bugzilla.suse.com/1176072" source="BUGZILLA"/>
		<reference ref_id="1176382" ref_url="https://bugzilla.suse.com/1176382" source="BUGZILLA"/>
		<reference ref_id="1176896" ref_url="https://bugzilla.suse.com/1176896" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0431" ref_url="https://www.suse.com/security/cve/CVE-2020-0431/" source="CVE"/>
		<reference ref_id="CVE-2020-14381" ref_url="https://www.suse.com/security/cve/CVE-2020-14381/" source="CVE"/>
		<reference ref_id="CVE-2020-14386" ref_url="https://www.suse.com/security/cve/CVE-2020-14386/" source="CVE"/>
		<reference ref_id="CVE-2020-24394" ref_url="https://www.suse.com/security/cve/CVE-2020-24394/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007712.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_29 fixes several issues.

The following security issues were fixed:

- CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly privilege escalation (bsc#1176011).
- CVE-2020-0431: In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. (bsc#1176722)
- CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c (bsc#1176381).
- CVE-2020-14386: Fixed a memory corruption which could have lead to an attacker gaining root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity (bsc#1176069).
- CVE-2020-24394: The NFS server code can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support. This occurs because the current umask is not considered (bsc#1175518).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175992">SUSE bug 1175992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176012">SUSE bug 1176012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176072">SUSE bug 1176072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176382">SUSE bug 1176382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176896">SUSE bug 1176896</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0431/">CVE-2020-0431</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14381/">CVE-2020-14381</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14386/">CVE-2020-14386</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24394/">CVE-2020-24394</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720971" comment="kernel-default 4.12.14-197.29 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719190" comment="kernel-livepatch-4_12_14-197_29-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497504" comment="kernel-livepatch-4_12_14-197_29-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138418" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1175992" ref_url="https://bugzilla.suse.com/1175992" source="BUGZILLA"/>
		<reference ref_id="1176012" ref_url="https://bugzilla.suse.com/1176012" source="BUGZILLA"/>
		<reference ref_id="1176072" ref_url="https://bugzilla.suse.com/1176072" source="BUGZILLA"/>
		<reference ref_id="1176382" ref_url="https://bugzilla.suse.com/1176382" source="BUGZILLA"/>
		<reference ref_id="1176896" ref_url="https://bugzilla.suse.com/1176896" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0431" ref_url="https://www.suse.com/security/cve/CVE-2020-0431/" source="CVE"/>
		<reference ref_id="CVE-2020-14381" ref_url="https://www.suse.com/security/cve/CVE-2020-14381/" source="CVE"/>
		<reference ref_id="CVE-2020-14386" ref_url="https://www.suse.com/security/cve/CVE-2020-14386/" source="CVE"/>
		<reference ref_id="CVE-2020-24394" ref_url="https://www.suse.com/security/cve/CVE-2020-24394/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007712.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_26 fixes several issues.

The following security issues were fixed:

- CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly privilege escalation (bsc#1176011).
- CVE-2020-0431: In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. (bsc#1176722)
- CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c (bsc#1176381).
- CVE-2020-14386: Fixed a memory corruption which could have lead to an attacker gaining root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity (bsc#1176069).
- CVE-2020-24394: The NFS server code can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support. This occurs because the current umask is not considered (bsc#1175518).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175992">SUSE bug 1175992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176012">SUSE bug 1176012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176072">SUSE bug 1176072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176382">SUSE bug 1176382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176896">SUSE bug 1176896</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0431/">CVE-2020-0431</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14381/">CVE-2020-14381</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14386/">CVE-2020-14386</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24394/">CVE-2020-24394</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720972" comment="kernel-default 4.12.14-197.26 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719191" comment="kernel-livepatch-4_12_14-197_26-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497505" comment="kernel-livepatch-4_12_14-197_26-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138419" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1176012" ref_url="https://bugzilla.suse.com/1176012" source="BUGZILLA"/>
		<reference ref_id="1176382" ref_url="https://bugzilla.suse.com/1176382" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14381" ref_url="https://www.suse.com/security/cve/CVE-2020-14381/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007707.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_56 fixes several issues.

The following security issues were fixed:

- CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly privilege escalation (bsc#1176011).
- CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c (bsc#1176381).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176012">SUSE bug 1176012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176382">SUSE bug 1176382</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14381/">CVE-2020-14381</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720976" comment="kernel-default 4.12.14-197.56 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719195" comment="kernel-livepatch-4_12_14-197_56-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497506" comment="kernel-livepatch-4_12_14-197_56-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138420" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1175992" ref_url="https://bugzilla.suse.com/1175992" source="BUGZILLA"/>
		<reference ref_id="1176012" ref_url="https://bugzilla.suse.com/1176012" source="BUGZILLA"/>
		<reference ref_id="1176072" ref_url="https://bugzilla.suse.com/1176072" source="BUGZILLA"/>
		<reference ref_id="1176382" ref_url="https://bugzilla.suse.com/1176382" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14381" ref_url="https://www.suse.com/security/cve/CVE-2020-14381/" source="CVE"/>
		<reference ref_id="CVE-2020-14386" ref_url="https://www.suse.com/security/cve/CVE-2020-14386/" source="CVE"/>
		<reference ref_id="CVE-2020-24394" ref_url="https://www.suse.com/security/cve/CVE-2020-24394/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007708.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_51 fixes several issues.

The following security issues were fixed:

- CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly privilege escalation (bsc#1176011).
- CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c (bsc#1176381).
- CVE-2020-14386: Fixed a memory corruption which could have lead to an attacker gaining root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity (bsc#1176069).
- CVE-2020-24394: The NFS server code can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support. This occurs because the current umask is not considered (bsc#1175518).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175992">SUSE bug 1175992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176012">SUSE bug 1176012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176072">SUSE bug 1176072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176382">SUSE bug 1176382</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14381/">CVE-2020-14381</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14386/">CVE-2020-14386</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24394/">CVE-2020-24394</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720975" comment="kernel-default 4.12.14-197.51 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719194" comment="kernel-livepatch-4_12_14-197_51-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497507" comment="kernel-livepatch-4_12_14-197_51-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138421" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1175992" ref_url="https://bugzilla.suse.com/1175992" source="BUGZILLA"/>
		<reference ref_id="1176012" ref_url="https://bugzilla.suse.com/1176012" source="BUGZILLA"/>
		<reference ref_id="1176072" ref_url="https://bugzilla.suse.com/1176072" source="BUGZILLA"/>
		<reference ref_id="1176382" ref_url="https://bugzilla.suse.com/1176382" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14381" ref_url="https://www.suse.com/security/cve/CVE-2020-14381/" source="CVE"/>
		<reference ref_id="CVE-2020-14386" ref_url="https://www.suse.com/security/cve/CVE-2020-14386/" source="CVE"/>
		<reference ref_id="CVE-2020-24394" ref_url="https://www.suse.com/security/cve/CVE-2020-24394/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007708.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_48 fixes several issues.

The following security issues were fixed:

- CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly privilege escalation (bsc#1176011).
- CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c (bsc#1176381).
- CVE-2020-14386: Fixed a memory corruption which could have lead to an attacker gaining root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity (bsc#1176069).
- CVE-2020-24394: The NFS server code can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support. This occurs because the current umask is not considered (bsc#1175518).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175992">SUSE bug 1175992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176012">SUSE bug 1176012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176072">SUSE bug 1176072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176382">SUSE bug 1176382</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14381/">CVE-2020-14381</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14386/">CVE-2020-14386</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24394/">CVE-2020-24394</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720974" comment="kernel-default 4.12.14-197.48 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719193" comment="kernel-livepatch-4_12_14-197_48-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497508" comment="kernel-livepatch-4_12_14-197_48-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138422" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1055014" ref_url="https://bugzilla.suse.com/1055014" source="BUGZILLA"/>
		<reference ref_id="1061843" ref_url="https://bugzilla.suse.com/1061843" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066382" ref_url="https://bugzilla.suse.com/1066382" source="BUGZILLA"/>
		<reference ref_id="1077428" ref_url="https://bugzilla.suse.com/1077428" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1131277" ref_url="https://bugzilla.suse.com/1131277" source="BUGZILLA"/>
		<reference ref_id="1134760" ref_url="https://bugzilla.suse.com/1134760" source="BUGZILLA"/>
		<reference ref_id="1170415" ref_url="https://bugzilla.suse.com/1170415" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1173432" ref_url="https://bugzilla.suse.com/1173432" source="BUGZILLA"/>
		<reference ref_id="1174748" ref_url="https://bugzilla.suse.com/1174748" source="BUGZILLA"/>
		<reference ref_id="1176354" ref_url="https://bugzilla.suse.com/1176354" source="BUGZILLA"/>
		<reference ref_id="1176485" ref_url="https://bugzilla.suse.com/1176485" source="BUGZILLA"/>
		<reference ref_id="1176560" ref_url="https://bugzilla.suse.com/1176560" source="BUGZILLA"/>
		<reference ref_id="1176713" ref_url="https://bugzilla.suse.com/1176713" source="BUGZILLA"/>
		<reference ref_id="1176723" ref_url="https://bugzilla.suse.com/1176723" source="BUGZILLA"/>
		<reference ref_id="1177086" ref_url="https://bugzilla.suse.com/1177086" source="BUGZILLA"/>
		<reference ref_id="1177101" ref_url="https://bugzilla.suse.com/1177101" source="BUGZILLA"/>
		<reference ref_id="1177271" ref_url="https://bugzilla.suse.com/1177271" source="BUGZILLA"/>
		<reference ref_id="1177281" ref_url="https://bugzilla.suse.com/1177281" source="BUGZILLA"/>
		<reference ref_id="1177410" ref_url="https://bugzilla.suse.com/1177410" source="BUGZILLA"/>
		<reference ref_id="1177411" ref_url="https://bugzilla.suse.com/1177411" source="BUGZILLA"/>
		<reference ref_id="1177470" ref_url="https://bugzilla.suse.com/1177470" source="BUGZILLA"/>
		<reference ref_id="1177687" ref_url="https://bugzilla.suse.com/1177687" source="BUGZILLA"/>
		<reference ref_id="1177719" ref_url="https://bugzilla.suse.com/1177719" source="BUGZILLA"/>
		<reference ref_id="1177740" ref_url="https://bugzilla.suse.com/1177740" source="BUGZILLA"/>
		<reference ref_id="1177749" ref_url="https://bugzilla.suse.com/1177749" source="BUGZILLA"/>
		<reference ref_id="1177750" ref_url="https://bugzilla.suse.com/1177750" source="BUGZILLA"/>
		<reference ref_id="1177753" ref_url="https://bugzilla.suse.com/1177753" source="BUGZILLA"/>
		<reference ref_id="1177754" ref_url="https://bugzilla.suse.com/1177754" source="BUGZILLA"/>
		<reference ref_id="1177755" ref_url="https://bugzilla.suse.com/1177755" source="BUGZILLA"/>
		<reference ref_id="1177766" ref_url="https://bugzilla.suse.com/1177766" source="BUGZILLA"/>
		<reference ref_id="1177855" ref_url="https://bugzilla.suse.com/1177855" source="BUGZILLA"/>
		<reference ref_id="1177856" ref_url="https://bugzilla.suse.com/1177856" source="BUGZILLA"/>
		<reference ref_id="1177861" ref_url="https://bugzilla.suse.com/1177861" source="BUGZILLA"/>
		<reference ref_id="1178003" ref_url="https://bugzilla.suse.com/1178003" source="BUGZILLA"/>
		<reference ref_id="1178027" ref_url="https://bugzilla.suse.com/1178027" source="BUGZILLA"/>
		<reference ref_id="1178166" ref_url="https://bugzilla.suse.com/1178166" source="BUGZILLA"/>
		<reference ref_id="1178185" ref_url="https://bugzilla.suse.com/1178185" source="BUGZILLA"/>
		<reference ref_id="1178187" ref_url="https://bugzilla.suse.com/1178187" source="BUGZILLA"/>
		<reference ref_id="1178188" ref_url="https://bugzilla.suse.com/1178188" source="BUGZILLA"/>
		<reference ref_id="1178202" ref_url="https://bugzilla.suse.com/1178202" source="BUGZILLA"/>
		<reference ref_id="1178234" ref_url="https://bugzilla.suse.com/1178234" source="BUGZILLA"/>
		<reference ref_id="1178330" ref_url="https://bugzilla.suse.com/1178330" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0430" ref_url="https://www.suse.com/security/cve/CVE-2020-0430/" source="CVE"/>
		<reference ref_id="CVE-2020-14351" ref_url="https://www.suse.com/security/cve/CVE-2020-14351/" source="CVE"/>
		<reference ref_id="CVE-2020-16120" ref_url="https://www.suse.com/security/cve/CVE-2020-16120/" source="CVE"/>
		<reference ref_id="CVE-2020-25285" ref_url="https://www.suse.com/security/cve/CVE-2020-25285/" source="CVE"/>
		<reference ref_id="CVE-2020-25656" ref_url="https://www.suse.com/security/cve/CVE-2020-25656/" source="CVE"/>
		<reference ref_id="CVE-2020-27673" ref_url="https://www.suse.com/security/cve/CVE-2020-27673/" source="CVE"/>
		<reference ref_id="CVE-2020-27675" ref_url="https://www.suse.com/security/cve/CVE-2020-27675/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007748.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bug fixes.


The following security bugs were fixed:

- CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766).
- CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485).
- CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723).
- CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086).
- CVE-2020-16120: Fixed a permissions issue in ovl_path_open() (bsc#1177470).
- CVE-2020-8694: Restricted energy meter to root access (bsc#1170415).
- CVE-2020-27673: Fixed an issue where rogue guests could have caused denial of service of Dom0 via high frequency events (XSA-332 bsc#1177411)
- CVE-2020-27675: Fixed a race condition in event handler which may crash dom0 (XSA-331 bsc#1177410).

The following non-security bugs were fixed:

- ALSA: bebob: potential info leak in hwdep_read() (git-fixes).
- ALSA: compress_offload: remove redundant initialization (git-fixes).
- ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).
- ALSA: core: pcm: simplify locking for timers (git-fixes).
- ALSA: core: timer: clarify operator precedence (git-fixes).
- ALSA: core: timer: remove redundant assignment (git-fixes).
- ALSA: ctl: Workaround for lockdep warning wrt card-&gt;ctl_files_rwlock (git-fixes).
- ALSA: hda - Do not register a cb func if it is registered already (git-fixes).
- ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes).
- ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes).
- ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes).
- ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes).
- ALSA: hda: use semicolons rather than commas to separate statements (git-fixes).
- ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes).
- ALSA: rawmidi: (cosmetic) align function parameters (git-fixes).
- ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes).
- ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes).
- ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes).
- ALSA: usb-audio: fix spelling mistake 'Frequence' -&gt; 'Frequency' (git-fixes).
- ASoC: qcom: lpass-cpu: fix concurrency issue (git-fixes).
- ASoC: qcom: lpass-platform: fix memory leak (git-fixes).
- ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() (git-fixes).
- ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path (git-fixes).
- ath10k: provide survey info as accumulated data (git-fixes).
- ath6kl: prevent potential array overflow in ath6kl_add_new_sta() (git-fixes).
- ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() (git-fixes).
- ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() (git-fixes).
- backlight: sky81452-backlight: Fix refcount imbalance on error (git-fixes).
- blk-mq: order adding requests to hctx-&gt;dispatch and checking SCHED_RESTART (bsc#1177750).
- block: ensure bdi-&gt;io_pages is always initialized (bsc#1177749).
- Bluetooth: MGMT: Fix not checking if BT_HS is enabled (git-fixes).
- Bluetooth: Only mark socket zapped after unlocking (git-fixes).
- bnxt: do not enable NAPI until rings are ready (networking-stable-20_09_11).
- bnxt_en: Check for zero dir entries in NVRAM (networking-stable-20_09_11).
- brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach (git-fixes).
- brcmfmac: check ndev pointer (git-fixes).
- brcmsmac: fix memory leak in wlc_phy_attach_lcnphy (git-fixes).
- btrfs: check the right error variable in btrfs_del_dir_entries_in_log (bsc#1177687).
- btrfs: do not force read-only after error in drop snapshot (bsc#1176354).
- btrfs: do not set the full sync flag on the inode during page release (bsc#1177687).
- btrfs: fix incorrect updating of log root tree (bsc#1177687).
- btrfs: fix race between page release and a fast fsync (bsc#1177687).
- btrfs: only commit delayed items at fsync if we are logging a directory (bsc#1177687).
- btrfs: only commit the delayed inode when doing a full fsync (bsc#1177687).
- btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations (bsc#1177856).
- btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode (bsc#1177855).
- btrfs: reduce contention on log trees when logging checksums (bsc#1177687).
- btrfs: release old extent maps during page release (bsc#1177687).
- btrfs: remove no longer needed use of log_writers for the log root tree (bsc#1177687).
- btrfs: remove root usage from can_overcommit (bsc#1131277).
- btrfs: stop incremening log_batch for the log root tree when syncing log (bsc#1177687).
- btrfs: take overcommit into account in inc_block_group_ro (bsc#1176560).
- btrfs: tree-checker: fix false alert caused by legacy btrfs root item (bsc#1177861).
- can: c_can: reg_map_{c,d}_can: mark as __maybe_unused (git-fixes).
- can: flexcan: flexcan_chip_stop(): add error handling and propagate error value (git-fixes).
- can: softing: softing_card_shutdown(): add braces around empty body in an 'if' statement (git-fixes).
- ceph: fix memory leak in ceph_cleanup_snapid_map() (bsc#1178234).
- ceph: map snapid to anonymous bdev ID (bsc#1178234).
- ceph: promote to unsigned long long before shifting (bsc#1178187).
- clk: at91: clk-main: update key before writing AT91_CKGR_MOR (git-fixes).
- clk: at91: remove the checking of parent_name (git-fixes).
- clk: bcm2835: add missing release if devm_clk_hw_register fails (git-fixes).
- clk: imx8mq: Fix usdhc parents order (git-fixes).
- coredump: fix crash when umh is disabled (bsc#1177753).
- crypto: algif_skcipher - EBUSY on aio should be an error (git-fixes).
- crypto: ccp - fix error handling (git-fixes).
- crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call (git-fixes).
- crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() (git-fixes).
- crypto: omap-sham - fix digcnt register handling with export/import (git-fixes).
- cxl: Rework error message for incompatible slots (bsc#1055014 git-fixes).
- cypto: mediatek - fix leaks in mtk_desc_ring_alloc (git-fixes).
- Disable ipa-clones dump for KMP builds (bsc#1178330) The feature is not really useful for KMP, and rather confusing, so let's disable it at building out-of-tree codes
- dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status (git-fixes).
- drm/amdgpu: prevent double kfree ttm-&gt;sg (git-fixes).
- drm/gma500: fix error check (git-fixes).
- drm/msm: Drop debug print in _dpu_crtc_setup_lm_bounds() (git-fixes).
- drm/nouveau/mem: guard against NULL pointer access in mem_del (git-fixes).
- EDAC/i5100: Fix error handling order in i5100_init_one() (bsc#1112178).
- eeprom: at25: set minimum read/write access stride to 1 (git-fixes).
- Fix use after free in get_capset_info callback (git-fixes).
- gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY (networking-stable-20_08_24).
- gtp: add GTPA_LINK info to msg sent to userspace (networking-stable-20_09_11).
- HID: roccat: add bounds checking in kone_sysfs_write_settings() (git-fixes).
- HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery (git-fixes).
- i2c: imx: Fix external abort on interrupt in exit paths (git-fixes).
- ibmveth: Identify ingress large send packets (bsc#1178185 ltc#188897).
- ibmveth: Switch order of ibmveth_helper calls (bsc#1061843 git-fixes).
- ibmvnic: fix ibmvnic_set_mac (bsc#1066382 ltc#160943 git-fixes).
- ibmvnic: save changed mac address to adapter-&gt;mac_addr (bsc#1134760 ltc#177449 git-fixes).
- iio:accel:bma180: Fix use of true when should be iio_shared_by enum (git-fixes).
- iio:adc:max1118 Fix alignment of timestamp and data leak issues (git-fixes).
- iio:adc:ti-adc0832 Fix alignment issue with timestamp (git-fixes).
- iio:adc:ti-adc12138 Fix alignment issue with timestamp (git-fixes).
- iio:dac:ad5592r: Fix use of true for IIO_SHARED_BY_TYPE (git-fixes).
- iio:gyro:itg3200: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:light:si1145: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:magn:hmc5843: Fix passing true where iio_shared_by enum required (git-fixes).
- ima: Remove semicolon at the end of ima_get_binary_runtime_size() (git-fixes).
- include/linux/swapops.h: correct guards for non_swap_entry() (git-fixes (mm/swap)).
- Input: ep93xx_keypad - fix handling of platform_get_irq() error (git-fixes).
- Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 (git-fixes).
- Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() (git-fixes).
- Input: omap4-keypad - fix handling of platform_get_irq() error (git-fixes).
- Input: sun4i-ps2 - fix handling of platform_get_irq() error (git-fixes).
- Input: twl4030_keypad - fix handling of platform_get_irq() error (git-fixes).
- iomap: Make sure iomap_end is called after iomap_begin (bsc#1177754).
- ip: fix tos reflection in ack and reset packets (networking-stable-20_09_24).
- ipv4: Restore flowi4_oif update before call to xfrm_lookup_route (git-fixes).
- iwlwifi: mvm: split a print to avoid a WARNING in ROC (git-fixes).
- kbuild: enforce -Werror=return-type (bsc#1177281).
- leds: mt6323: move period calculation (git-fixes).
- lib/crc32.c: fix trivial typo in preprocessor condition (git-fixes).
- libceph: clear con-&gt;out_msg on Policy::stateful_server faults (bsc#1178188).
- livepatch: Test if -fdump-ipa-clones is really available As of now we add -fdump-ipa-clones unconditionally. It does not cause a trouble if the kernel is build with the supported toolchain. Otherwise it could fail easily. Do the correct thing and test for the availability.
- mac80211: handle lack of sband-&gt;bitrates in rates (git-fixes).
- mailbox: avoid timer start from callback (git-fixes).
- media: ati_remote: sanity check for both endpoints (git-fixes).
- media: bdisp: Fix runtime PM imbalance on error (git-fixes).
- media: exynos4-is: Fix a reference count leak (git-fixes).
- media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync (git-fixes).
- media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync (git-fixes).
- media: firewire: fix memory leak (git-fixes).
- media: m5mols: Check function pointer in m5mols_sensor_power (git-fixes).
- media: media/pci: prevent memory leak in bttv_probe (git-fixes).
- media: omap3isp: Fix memleak in isp_probe (git-fixes).
- media: platform: fcp: Fix a reference count leak (git-fixes).
- media: platform: s3c-camif: Fix runtime PM imbalance on error (git-fixes).
- media: platform: sti: hva: Fix runtime PM imbalance on error (git-fixes).
- media: Revert 'media: exynos4-is: Add missed check for pinctrl_lookup_state()' (git-fixes).
- media: s5p-mfc: Fix a reference count leak (git-fixes).
- media: saa7134: avoid a shift overflow (git-fixes).
- media: st-delta: Fix reference count leak in delta_run_work (git-fixes).
- media: sti: Fix reference count leaks (git-fixes).
- media: tc358743: initialize variable (git-fixes).
- media: ti-vpe: Fix a missing check and reference count leak (git-fixes).
- media: tuner-simple: fix regression in simple_set_radio_freq (git-fixes).
- media: usbtv: Fix refcounting mixup (git-fixes).
- media: uvcvideo: Ensure all probed info is returned to v4l2 (git-fixes).
- media: vsp1: Fix runtime PM imbalance on error (git-fixes).
- memory: fsl-corenet-cf: Fix handling of platform_get_irq() error (git-fixes).
- memory: omap-gpmc: Fix a couple off by ones (git-fixes).
- mfd: sm501: Fix leaks in probe() (git-fixes).
- mic: vop: copy data to kernel space then write to io memory (git-fixes).
- misc: mic: scif: Fix error handling path (git-fixes).
- misc: rtsx: Fix memory leak in rtsx_pci_probe (git-fixes).
- misc: vop: add round_up(x,4) for vring_size to avoid kernel panic (git-fixes).
- mlx5 PPC ringsize workaround (bsc#1173432).
- mlx5: remove support for ib_get_vector_affinity (bsc#1174748).
- mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa (git-fixes (mm/numa)).
- mm/huge_memory.c: use head to check huge zero page (git-fixes (mm/thp)).
- mm/ksm.c: do not WARN if page is still mapped in remove_stable_node() (git-fixes (mm/hugetlb)).
- mm/mempolicy.c: fix out of bounds write in mpol_parse_str() (git-fixes (mm/mempolicy)).
- mm/mempolicy.c: use match_string() helper to simplify the code (git-fixes (mm/mempolicy)).
- mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() (git-fixes (mm/writeback)).
- mm/page-writeback.c: improve arithmetic divisions (git-fixes (mm/writeback)).
- mm/page-writeback.c: use div64_ul() for u64-by-unsigned-long divide (git-fixes (mm/writeback)).
- mm/page_owner.c: remove drain_all_pages from init_early_allocated_pages (git-fixes (mm/debug)).
- mm/rmap: fixup copying of soft dirty and uffd ptes (git-fixes (mm/rmap)).
- mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: fix race condition in zs_destroy_pool (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: fix the migrated zspage statistics (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely (git-fixes (mm/zsmalloc)).
- mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() (git-fixes (mm/hugetlb)).
- mmc: sdio: Check for CISTPL_VERS_1 buffer size (git-fixes).
- Move upstreamed patches into sorted section
- mtd: lpddr: fix excessive stack usage with clang (git-fixes).
- mtd: mtdoops: Do not write panic data twice (git-fixes).
- mwifiex: do not call del_timer_sync() on uninitialized timer (git-fixes).
- mwifiex: Do not use GFP_KERNEL in atomic context (git-fixes).
- mwifiex: fix double free (git-fixes).
- mwifiex: remove function pointer check (git-fixes).
- mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO (git-fixes).
- net/mlx5e: Take common TIR context settings into a function (bsc#1177740).
- net/mlx5e: Turn on HW tunnel offload in all TIRs (bsc#1177740).
- net: disable netpoll on fresh napis (networking-stable-20_09_11).
- net: fec: Fix PHY init after phy_reset_after_clk_enable() (git-fixes).
- net: fec: Fix phy_device lookup for phy_reset_after_clk_enable() (git-fixes).
- net: Fix potential wrong skb-&gt;protocol in skb_vlan_untag() (networking-stable-20_08_24).
- net: hns: Fix memleak in hns_nic_dev_probe (networking-stable-20_09_11).
- net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC (networking-stable-20_09_24).
- net: phy: Avoid NPD upon phy_detach() when driver is unbound (networking-stable-20_09_24).
- net: qrtr: fix usage of idr in port assignment to socket (networking-stable-20_08_24).
- net: systemport: Fix memleak in bcm_sysport_probe (networking-stable-20_09_11).
- net: usb: dm9601: Add USB ID of Keenetic Plus DSL (networking-stable-20_09_11).
- net: usb: qmi_wwan: add Cellient MPL200 card (git-fixes).
- net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails (git-fixes).
- net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key() (git-fixes).
- netlabel: fix problems with mapping removal (networking-stable-20_09_11).
- nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() (git-fixes).
- nl80211: fix non-split wiphy information (git-fixes).
- NTB: hw: amd: fix an issue about leak system resources (git-fixes).
- nvme-rdma: fix crash due to incorrect cqe (bsc#1174748).
- nvme-rdma: fix crash when connect rejected (bsc#1174748).
- nvme: do not update disk info for multipathed device (bsc#1171558).
- platform/x86: mlx-platform: Remove PSU EEPROM configuration (git-fixes).
- powerpc/hwirq: Remove stale forward irq_chip declaration (bsc#1065729).
- powerpc/icp-hv: Fix missing of_node_put() in success path (bsc#1065729).
- powerpc/irq: Drop forward declaration of struct irqaction (bsc#1065729).
- powerpc/perf/hv-gpci: Fix starting index value (bsc#1065729).
- powerpc/powernv/dump: Fix race while processing OPAL dump (bsc#1065729).
- powerpc/powernv/elog: Fix race while processing OPAL error log event (bsc#1065729).
- powerpc/pseries: explicitly reschedule during drmem_lmb list traversal (bsc#1077428 ltc#163882 git-fixes).
- powerpc/pseries: Fix missing of_node_put() in rng_init() (bsc#1065729).
- powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation (bsc#1065729).
- pty: do tty_flip_buffer_push without port-&gt;lock in pty_write (git-fixes).
- pwm: lpss: Add range limit check for the base_unit register value (git-fixes).
- pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare() (git-fixes).
- ring-buffer: Return 0 on success from ring_buffer_resize() (git-fixes).
- rtl8xxxu: prevent potential memory leak (git-fixes).
- scsi: ibmvfc: Fix error return in ibmvfc_probe() (bsc#1065729).
- scsi: ibmvscsi: Fix potential race after loss of transport (bsc#1178166 ltc#188226).
- sctp: not disable bh in the whole sctp_get_port_local() (networking-stable-20_09_11).
- spi: fsl-espi: Only process interrupts for expected events (git-fixes).
- tg3: Fix soft lockup when tg3_reset_task() fails (networking-stable-20_09_11).
- tipc: fix memory leak caused by tipc_buf_append() (git-fixes).
- tipc: fix shutdown() of connection oriented socket (networking-stable-20_09_24).
- tipc: fix shutdown() of connectionless socket (networking-stable-20_09_11).
- tipc: fix the skb_unshare() in tipc_buf_append() (git-fixes).
- tipc: fix uninit skb-&gt;data in tipc_nl_compat_dumpit() (networking-stable-20_08_24).
- tipc: use skb_unshare() instead in tipc_buf_append() (networking-stable-20_09_24).
- tty: ipwireless: fix error handling (git-fixes).
- tty: serial: earlycon dependency (git-fixes).
- tty: serial: fsl_lpuart: fix lpuart32_poll_get_char (git-fixes).
- usb: cdc-acm: add quirk to blacklist ETAS ES58X devices (git-fixes).
- usb: cdc-acm: handle broken union descriptors (git-fixes).
- usb: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync() (git-fixes).
- usb: core: Solve race condition in anchor cleanup functions (git-fixes).
- usb: dwc2: Fix INTR OUT transfers in DDMA mode (git-fixes).
- usb: dwc2: Fix parameter type in function pointer prototype (git-fixes).
- usb: dwc3: core: add phy cleanup for probe error handling (git-fixes).
- usb: dwc3: core: do not trigger runtime pm when remove driver (git-fixes).
- usb: dwc3: ep0: Fix ZLP for OUT ep0 requests (git-fixes).
- usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets (git-fixes).
- usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above (git-fixes).
- usb: gadget: function: printer: fix use-after-free in __lock_acquire (git-fixes).
- usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well (git-fixes).
- usb: ohci: Default to per-port over-current protection (git-fixes).
- usb: serial: qcserial: fix altsetting probing (git-fixes).
- vfs: fix FIGETBSZ ioctl on an overlayfs file (bsc#1178202).
- video: fbdev: sis: fix null ptr dereference (git-fixes).
- video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error (git-fixes).
- VMCI: check return value of get_user_pages_fast() for errors (git-fixes).
- w1: mxc_w1: Fix timeout resolution problem leading to bus error (git-fixes).
- watchdog: iTCO_wdt: Export vendorsupport (bsc#1177101).
- watchdog: iTCO_wdt: Make ICH_RES_IO_SMI optional (bsc#1177101).
- wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 (git-fixes).
- writeback: Avoid skipping inode writeback (bsc#1177755).
- writeback: Fix sync livelock due to b_dirty_time processing (bsc#1177755).
- writeback: Protect inode-&gt;i_io_list with inode-&gt;i_lock (bsc#1177755).
- x86, fakenuma: Fix invalid starting node ID (git-fixes (mm/x86/fakenuma)).
- x86/apic: Unify duplicated local apic timer clockevent initialization (bsc#1112178).
- x86/fpu: Allow multiple bits in clearcpuid= parameter (bsc#1112178).
- x86/xen: disable Firmware First mode for correctable memory errors (bsc#1176713).
- xen/blkback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/events: add a new 'late EOI' evtchn framework (XSA-332 bsc#1177411).
- xen/events: add a proper barrier to 2-level uevent unmasking (XSA-332 bsc#1177411).
- xen/events: avoid removing an event channel while handling it (XSA-331 bsc#1177410).
- xen/events: block rogue events for some time (XSA-332 bsc#1177411).
- xen/events: defer eoi in case of excessive number of events (XSA-332 bsc#1177411).
- xen/events: do not use chip_data for legacy IRQs (XSA-332 bsc#1065600).
- xen/events: fix race in evtchn_fifo_unmask() (XSA-332 bsc#1177411).
- xen/events: switch user event channels to lateeoi model (XSA-332 bsc#1177411).
- xen/events: use a common cpu hotplug hook for event channels (XSA-332 bsc#1177411).
- xen/gntdev.c: Mark pages as dirty (bsc#1065600).
- xen/netback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/pciback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/scsiback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen: XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information (XSA-332 bsc#1065600).
- xfs: avoid infinite loop when cancelling CoW blocks after writeback failure (bsc#1178027).
- xfs: limit entries returned when counting fsmap records (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-10"/>
	<updated date="2020-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1055014">SUSE bug 1055014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061843">SUSE bug 1061843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066382">SUSE bug 1066382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077428">SUSE bug 1077428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131277">SUSE bug 1131277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134760">SUSE bug 1134760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170415">SUSE bug 1170415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173432">SUSE bug 1173432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174748">SUSE bug 1174748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176354">SUSE bug 1176354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176485">SUSE bug 1176485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176560">SUSE bug 1176560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176713">SUSE bug 1176713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176723">SUSE bug 1176723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177086">SUSE bug 1177086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177101">SUSE bug 1177101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177271">SUSE bug 1177271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177281">SUSE bug 1177281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177410">SUSE bug 1177410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177411">SUSE bug 1177411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177470">SUSE bug 1177470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177687">SUSE bug 1177687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177719">SUSE bug 1177719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177740">SUSE bug 1177740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177749">SUSE bug 1177749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177750">SUSE bug 1177750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177753">SUSE bug 1177753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177754">SUSE bug 1177754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177755">SUSE bug 1177755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177766">SUSE bug 1177766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177855">SUSE bug 1177855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177856">SUSE bug 1177856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177861">SUSE bug 1177861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178003">SUSE bug 1178003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178027">SUSE bug 1178027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178166">SUSE bug 1178166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178185">SUSE bug 1178185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178187">SUSE bug 1178187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178188">SUSE bug 1178188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178202">SUSE bug 1178202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178234">SUSE bug 1178234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178330">SUSE bug 1178330</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0430/">CVE-2020-0430</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14351/">CVE-2020-14351</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16120/">CVE-2020-16120</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25285/">CVE-2020-25285</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25656/">CVE-2020-25656</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27673/">CVE-2020-27673</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27675/">CVE-2020-27675</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497509" comment="kernel-default-livepatch-4.12.14-197.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497510" comment="kernel-default-livepatch-devel-4.12.14-197.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497511" comment="kernel-livepatch-4_12_14-197_67-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138423" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1177513" ref_url="https://bugzilla.suse.com/1177513" source="BUGZILLA"/>
		<reference ref_id="1177729" ref_url="https://bugzilla.suse.com/1177729" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007803.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_34 fixes several issues.

The following security issues were fixed:

- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724, bsc#1177729, bsc#1178397).
- CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177513).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177513">SUSE bug 1177513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177729">SUSE bug 1177729</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720970" comment="kernel-default 4.12.14-197.34 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719189" comment="kernel-livepatch-4_12_14-197_34-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497512" comment="kernel-livepatch-4_12_14-197_34-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138424" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1177513" ref_url="https://bugzilla.suse.com/1177513" source="BUGZILLA"/>
		<reference ref_id="1177729" ref_url="https://bugzilla.suse.com/1177729" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007803.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_61 fixes several issues.

The following security issues were fixed:

- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724, bsc#1177729, bsc#1178397).
- CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177513).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177513">SUSE bug 1177513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177729">SUSE bug 1177729</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720977" comment="kernel-default 4.12.14-197.61 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719196" comment="kernel-livepatch-4_12_14-197_61-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497513" comment="kernel-livepatch-4_12_14-197_61-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138425" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1177513" ref_url="https://bugzilla.suse.com/1177513" source="BUGZILLA"/>
		<reference ref_id="1177729" ref_url="https://bugzilla.suse.com/1177729" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007803.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_56 fixes several issues.

The following security issues were fixed:

- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724, bsc#1177729, bsc#1178397).
- CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177513).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177513">SUSE bug 1177513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177729">SUSE bug 1177729</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720976" comment="kernel-default 4.12.14-197.56 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719195" comment="kernel-livepatch-4_12_14-197_56-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497514" comment="kernel-livepatch-4_12_14-197_56-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138426" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1177513" ref_url="https://bugzilla.suse.com/1177513" source="BUGZILLA"/>
		<reference ref_id="1177729" ref_url="https://bugzilla.suse.com/1177729" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007803.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_51 fixes several issues.

The following security issues were fixed:

- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724, bsc#1177729, bsc#1178397).
- CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177513).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177513">SUSE bug 1177513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177729">SUSE bug 1177729</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720975" comment="kernel-default 4.12.14-197.51 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719194" comment="kernel-livepatch-4_12_14-197_51-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497515" comment="kernel-livepatch-4_12_14-197_51-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138427" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1177513" ref_url="https://bugzilla.suse.com/1177513" source="BUGZILLA"/>
		<reference ref_id="1177729" ref_url="https://bugzilla.suse.com/1177729" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007803.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_48 fixes several issues.

The following security issues were fixed:

- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724, bsc#1177729, bsc#1178397).
- CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177513).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177513">SUSE bug 1177513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177729">SUSE bug 1177729</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720974" comment="kernel-default 4.12.14-197.48 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719193" comment="kernel-livepatch-4_12_14-197_48-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497516" comment="kernel-livepatch-4_12_14-197_48-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138428" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1177513" ref_url="https://bugzilla.suse.com/1177513" source="BUGZILLA"/>
		<reference ref_id="1177729" ref_url="https://bugzilla.suse.com/1177729" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007803.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_45 fixes several issues.

The following security issues were fixed:

- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724, bsc#1177729, bsc#1178397).
- CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177513).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177513">SUSE bug 1177513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177729">SUSE bug 1177729</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720973" comment="kernel-default 4.12.14-197.45 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719192" comment="kernel-livepatch-4_12_14-197_45-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497517" comment="kernel-livepatch-4_12_14-197_45-default-4-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138429" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1177513" ref_url="https://bugzilla.suse.com/1177513" source="BUGZILLA"/>
		<reference ref_id="1177729" ref_url="https://bugzilla.suse.com/1177729" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007803.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_40 fixes several issues.

The following security issues were fixed:

- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724, bsc#1177729, bsc#1178397).
- CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177513).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177513">SUSE bug 1177513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177729">SUSE bug 1177729</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720969" comment="kernel-default 4.12.14-197.40 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719188" comment="kernel-livepatch-4_12_14-197_40-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497518" comment="kernel-livepatch-4_12_14-197_40-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138430" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1177513" ref_url="https://bugzilla.suse.com/1177513" source="BUGZILLA"/>
		<reference ref_id="1177729" ref_url="https://bugzilla.suse.com/1177729" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007803.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_37 fixes several issues.

The following security issues were fixed:

- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724, bsc#1177729, bsc#1178397).
- CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177513).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177513">SUSE bug 1177513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177729">SUSE bug 1177729</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720968" comment="kernel-default 4.12.14-197.37 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719187" comment="kernel-livepatch-4_12_14-197_37-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497519" comment="kernel-livepatch-4_12_14-197_37-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138431" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1177513" ref_url="https://bugzilla.suse.com/1177513" source="BUGZILLA"/>
		<reference ref_id="1177729" ref_url="https://bugzilla.suse.com/1177729" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3402-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007803.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_29 fixes several issues.

The following security issues were fixed:

- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724, bsc#1177729, bsc#1178397).
- CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177513).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177513">SUSE bug 1177513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177729">SUSE bug 1177729</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720971" comment="kernel-default 4.12.14-197.29 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719190" comment="kernel-livepatch-4_12_14-197_29-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497520" comment="kernel-livepatch-4_12_14-197_29-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138432" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1177513" ref_url="https://bugzilla.suse.com/1177513" source="BUGZILLA"/>
		<reference ref_id="1177729" ref_url="https://bugzilla.suse.com/1177729" source="BUGZILLA"/>
		<reference ref_id="1178264" ref_url="https://bugzilla.suse.com/1178264" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-1000405" ref_url="https://www.suse.com/security/cve/CVE-2017-1000405/" source="CVE"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3400-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007802.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_26 fixes several issues.

The following security issues were fixed:

- CVE-2017-1000405: Fixed a bug in the THP CoW support that could have been used by local attackers to corrupt memory of other processes and cause them to crash (bsc#1178264, bsc#1069496, bsc#1070307).
- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724, bsc#1177729, bsc#1178397).
- CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177513).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177513">SUSE bug 1177513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177729">SUSE bug 1177729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178264">SUSE bug 1178264</bugzilla>
	<cve impact="important" cvss3="5.7/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-1000405/">CVE-2017-1000405</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720972" comment="kernel-default 4.12.14-197.26 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719191" comment="kernel-livepatch-4_12_14-197_26-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497521" comment="kernel-livepatch-4_12_14-197_26-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138433" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1163592" ref_url="https://bugzilla.suse.com/1163592" source="BUGZILLA"/>
		<reference ref_id="1167030" ref_url="https://bugzilla.suse.com/1167030" source="BUGZILLA"/>
		<reference ref_id="1172873" ref_url="https://bugzilla.suse.com/1172873" source="BUGZILLA"/>
		<reference ref_id="1175306" ref_url="https://bugzilla.suse.com/1175306" source="BUGZILLA"/>
		<reference ref_id="1175721" ref_url="https://bugzilla.suse.com/1175721" source="BUGZILLA"/>
		<reference ref_id="1176855" ref_url="https://bugzilla.suse.com/1176855" source="BUGZILLA"/>
		<reference ref_id="1176907" ref_url="https://bugzilla.suse.com/1176907" source="BUGZILLA"/>
		<reference ref_id="1176983" ref_url="https://bugzilla.suse.com/1176983" source="BUGZILLA"/>
		<reference ref_id="1177703" ref_url="https://bugzilla.suse.com/1177703" source="BUGZILLA"/>
		<reference ref_id="1177819" ref_url="https://bugzilla.suse.com/1177819" source="BUGZILLA"/>
		<reference ref_id="1177820" ref_url="https://bugzilla.suse.com/1177820" source="BUGZILLA"/>
		<reference ref_id="1178123" ref_url="https://bugzilla.suse.com/1178123" source="BUGZILLA"/>
		<reference ref_id="1178393" ref_url="https://bugzilla.suse.com/1178393" source="BUGZILLA"/>
		<reference ref_id="1178589" ref_url="https://bugzilla.suse.com/1178589" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178686" ref_url="https://bugzilla.suse.com/1178686" source="BUGZILLA"/>
		<reference ref_id="1178765" ref_url="https://bugzilla.suse.com/1178765" source="BUGZILLA"/>
		<reference ref_id="1178782" ref_url="https://bugzilla.suse.com/1178782" source="BUGZILLA"/>
		<reference ref_id="927455" ref_url="https://bugzilla.suse.com/927455" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25704" ref_url="https://www.suse.com/security/cve/CVE-2020-25704/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007848.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software and services that rely on UDP source port randomization (like DNS) are indirectly affected as well. Kernel versions may be vulnerable to this issue (bsc#1175721, bsc#1178782).
- CVE-2020-25704: Fixed a memory leak in perf_event_parse_addr_filter() (bsc#1178393).
- CVE-2020-25668: Fixed a use-after-free in con_font_op() (bnc#1178123).

The following non-security bugs were fixed:

- 9P: Cast to loff_t before multiplying (git-fixes).
- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (git-fixes).
- ACPI: debug: do not allow debugging when ACPI is disabled (git-fixes).
- ACPI: dock: fix enum-conversion warning (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- ALSA: hda - Fix the return value if cb func is already registered (git-fixes).
- ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes).
- ata: sata_rcar: Fix DMA boundary mask (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled (git-fixes).
- ath10k: start recovery process when payload length exceeds max htc length for sdio (git-fixes).
- bus/fsl_mc: Do not rely on caller to provide non NULL mc_io (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on (git-fixes).
- can: peak_usb: add range checking in decode operations (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping (git-fixes).
- can: rx-offload: do not call kfree_skb() from IRQ context (git-fixes).
- clk: ti: clockdomain: fix static checker warning (git-fixes).
- crypto: bcm - Verify GCM/CCM key length in setkey (git-fixes).
- device property: Do not clear secondary pointer for shared primary firmware node (git-fixes).
- device property: Keep secondary firmware node secondary by type (git-fixes).
- drbd: code cleanup by using sendpage_ok() to check page for kernel_sendpage() (bsc#1172873).
- drm/amd/display: Do not invoke kgdb_breakpoint() unconditionally (git-fixes).
- drm/amd/display: HDMI remote sink need mode validation for Linux (git-fixes).
- drm/amdgpu: do not map BO in reserved region (git-fixes).
- drm/bridge/synopsys: dsi: add support for non-continuous HS clock (git-fixes).
- drm/brige/megachips: Add checking if ge_b850v3_lvds_init() is working correctly (git-fixes).
- drm/i915: Break up error capture compression loops with cond_resched() (git-fixes).
- drm/i915: Force VT'd workarounds when running as a guest OS (git-fixes).
- drm/imx: tve remove extraneous type qualifier (git-fixes).
- drm/ttm: fix eviction valuable range check (git-fixes).
- drm/vc4: drv: Add error handding for bind (git-fixes).
- efivarfs: Replace invalid slashes with exclamation marks in dentries (git-fixes).
- ftrace: Fix recursion check for NMI test (git-fixes).
- ftrace: Handle tracing when switching between context (git-fixes).
- hv_netvsc: Add XDP support (bsc#1177819, bsc#1177820).
- hv_netvsc: Fix XDP refcnt for synthetic and VF NICs (bsc#1177819, bsc#1177820).
- hyperv_fb: Update screen_info after removing old framebuffer (bsc#1175306).
- icmp: randomize the global rate limiter (git-fixes).
- kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function (git-fixes).
- libceph: use sendpage_ok() in ceph_tcp_sendpage() (bsc#1172873).
- media: platform: Improve queue set up flow for bug fixing (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get (git-fixes).
- memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event (bsc#1177703).
- mmc: sdhci-of-esdhc: Handle pulse width detection erratum for more SoCs (git-fixes).
- mmc: sdhci-of-esdhc: set timeout to max before tuning (git-fixes).
- mm/memcg: fix refcount error while moving and swapping (bsc#1178686).
- Move the upstreamed powercap fix into sorted sectio
- mtd: lpddr: Fix bad logic in print_drs_error (git-fixes).
- net: add WARN_ONCE in kernel_sendpage() for improper zero-copy send (bsc#1172873).
- net: introduce helper sendpage_ok() in include/linux/net.h (bsc#1172873).
- net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition (git-fixes).
- nvme-tcp: check page by sendpage_ok() before calling kernel_sendpage() (bsc#1172873).
- p54: avoid accessing the data mapped to streaming DMA (git-fixes).
- pinctrl: intel: Set default bias in case no particular value given (git-fixes).
- powerpc/pseries/cpuidle: add polling idle for shared processor guests (bsc#1178765 ltc#188968).
- powerpc/vnic: Extend 'failover pending' window (bsc#1176855 ltc#187293).
- power: supply: test_power: add missing newlines when printing parameters by sysfs (git-fixes).
- regulator: defer probe when trying to get voltage from unresolved supply (git-fixes).
- regulator: resolve supply after creating regulator (git-fixes).
- ring-buffer: Fix recursion protection transitions between interrupt context (git-fixes).
- rpm/kernel-module-subpackage: make Group tag optional (bsc#1163592)
- scsi: libiscsi: use sendpage_ok() in iscsi_tcp_segment_map() (bsc#1172873).
- staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error (git-fixes).
- staging: octeon: repair 'fixed-link' support (git-fixes).
- thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() (git-fixes).
- USB: Add NO_LPM quirk for Kingston flash drive (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- usb: host: fsl-mph-dr-of: check return of dma_set_mask() (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231 (git-fixes).
- USB: serial: option: add Quectel EC200T module support (git-fixes).
- USB: serial: option: add Telit FN980 composition 0x1055 (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart (git-fixes).
- usb: typec: tcpm: reset hard_reset_count for any disconnect (git-fixes).
- video: fbdev: pvr2fb: initialize variables (git-fixes).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV Gen 1 VMs (bsc#1175306).
- vt: Disable KD_FONT_OP_COPY (bsc#1178589).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params (bsc#1175306).
- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels (bsc#1058115 bsc#1176907).
- xfs: do not update mtime on COW faults (bsc#1167030).
- xfs: fix a missing unlock on error in xfs_fs_map_blocks (git-fixes).
- xfs: fix flags argument to rmap lookup when converting shared file rmaps (git-fixes).
- xfs: fix rmap key and record comparison functions (git-fixes).
- xfs: flush new eof page on truncate to avoid post-eof corruption (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-24"/>
	<updated date="2020-11-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163592">SUSE bug 1163592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167030">SUSE bug 1167030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172873">SUSE bug 1172873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175306">SUSE bug 1175306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175721">SUSE bug 1175721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176855">SUSE bug 1176855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176907">SUSE bug 1176907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176983">SUSE bug 1176983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177703">SUSE bug 1177703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177819">SUSE bug 1177819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177820">SUSE bug 1177820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178123">SUSE bug 1178123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178393">SUSE bug 1178393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178589">SUSE bug 1178589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178686">SUSE bug 1178686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178765">SUSE bug 1178765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178782">SUSE bug 1178782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927455">SUSE bug 927455</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25704/">CVE-2020-25704</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497522" comment="kernel-default-livepatch-4.12.14-197.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497523" comment="kernel-default-livepatch-devel-4.12.14-197.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497524" comment="kernel-livepatch-4_12_14-197_72-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138434" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178046" ref_url="https://bugzilla.suse.com/1178046" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178700" ref_url="https://bugzilla.suse.com/1178700" source="BUGZILLA"/>
		<reference ref_id="1178783" ref_url="https://bugzilla.suse.com/1178783" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007929.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_29 fixes several issues.

The following security issues were fixed:

- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622).
- CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700).
- CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783).
- Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfs_drop_and_free_fs_root() (bsc#1178046).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-07"/>
	<updated date="2020-12-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178046">SUSE bug 1178046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178700">SUSE bug 1178700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178783">SUSE bug 1178783</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720971" comment="kernel-default 4.12.14-197.29 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719190" comment="kernel-livepatch-4_12_14-197_29-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497525" comment="kernel-livepatch-4_12_14-197_29-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138435" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178046" ref_url="https://bugzilla.suse.com/1178046" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178700" ref_url="https://bugzilla.suse.com/1178700" source="BUGZILLA"/>
		<reference ref_id="1178783" ref_url="https://bugzilla.suse.com/1178783" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007929.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_34 fixes several issues.

The following security issues were fixed:

- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622).
- CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700).
- CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783).
- Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfs_drop_and_free_fs_root() (bsc#1178046).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-07"/>
	<updated date="2020-12-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178046">SUSE bug 1178046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178700">SUSE bug 1178700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178783">SUSE bug 1178783</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720970" comment="kernel-default 4.12.14-197.34 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719189" comment="kernel-livepatch-4_12_14-197_34-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497526" comment="kernel-livepatch-4_12_14-197_34-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138436" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178046" ref_url="https://bugzilla.suse.com/1178046" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178700" ref_url="https://bugzilla.suse.com/1178700" source="BUGZILLA"/>
		<reference ref_id="1178783" ref_url="https://bugzilla.suse.com/1178783" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007929.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_37 fixes several issues.

The following security issues were fixed:

- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622).
- CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700).
- CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783).
- Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfs_drop_and_free_fs_root() (bsc#1178046).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-07"/>
	<updated date="2020-12-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178046">SUSE bug 1178046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178700">SUSE bug 1178700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178783">SUSE bug 1178783</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720968" comment="kernel-default 4.12.14-197.37 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719187" comment="kernel-livepatch-4_12_14-197_37-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497527" comment="kernel-livepatch-4_12_14-197_37-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138437" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178046" ref_url="https://bugzilla.suse.com/1178046" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178700" ref_url="https://bugzilla.suse.com/1178700" source="BUGZILLA"/>
		<reference ref_id="1178783" ref_url="https://bugzilla.suse.com/1178783" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007929.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_40 fixes several issues.

The following security issues were fixed:

- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622).
- CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700).
- CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783).
- Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfs_drop_and_free_fs_root() (bsc#1178046).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-07"/>
	<updated date="2020-12-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178046">SUSE bug 1178046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178700">SUSE bug 1178700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178783">SUSE bug 1178783</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720969" comment="kernel-default 4.12.14-197.40 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719188" comment="kernel-livepatch-4_12_14-197_40-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497528" comment="kernel-livepatch-4_12_14-197_40-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138438" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178046" ref_url="https://bugzilla.suse.com/1178046" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178700" ref_url="https://bugzilla.suse.com/1178700" source="BUGZILLA"/>
		<reference ref_id="1178783" ref_url="https://bugzilla.suse.com/1178783" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007929.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_45 fixes several issues.

The following security issues were fixed:

- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622).
- CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700).
- CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783).
- Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfs_drop_and_free_fs_root() (bsc#1178046).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-07"/>
	<updated date="2020-12-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178046">SUSE bug 1178046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178700">SUSE bug 1178700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178783">SUSE bug 1178783</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720973" comment="kernel-default 4.12.14-197.45 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719192" comment="kernel-livepatch-4_12_14-197_45-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497529" comment="kernel-livepatch-4_12_14-197_45-default-5-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138439" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178046" ref_url="https://bugzilla.suse.com/1178046" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178700" ref_url="https://bugzilla.suse.com/1178700" source="BUGZILLA"/>
		<reference ref_id="1178783" ref_url="https://bugzilla.suse.com/1178783" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007929.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_48 fixes several issues.

The following security issues were fixed:

- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622).
- CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700).
- CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783).
- Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfs_drop_and_free_fs_root() (bsc#1178046).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-07"/>
	<updated date="2020-12-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178046">SUSE bug 1178046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178700">SUSE bug 1178700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178783">SUSE bug 1178783</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720974" comment="kernel-default 4.12.14-197.48 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719193" comment="kernel-livepatch-4_12_14-197_48-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497530" comment="kernel-livepatch-4_12_14-197_48-default-5-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138440" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178046" ref_url="https://bugzilla.suse.com/1178046" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178700" ref_url="https://bugzilla.suse.com/1178700" source="BUGZILLA"/>
		<reference ref_id="1178783" ref_url="https://bugzilla.suse.com/1178783" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007929.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_51 fixes several issues.

The following security issues were fixed:

- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622).
- CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700).
- CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783).
- Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfs_drop_and_free_fs_root() (bsc#1178046).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-07"/>
	<updated date="2020-12-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178046">SUSE bug 1178046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178700">SUSE bug 1178700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178783">SUSE bug 1178783</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720975" comment="kernel-default 4.12.14-197.51 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719194" comment="kernel-livepatch-4_12_14-197_51-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497531" comment="kernel-livepatch-4_12_14-197_51-default-5-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138441" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178046" ref_url="https://bugzilla.suse.com/1178046" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178700" ref_url="https://bugzilla.suse.com/1178700" source="BUGZILLA"/>
		<reference ref_id="1178783" ref_url="https://bugzilla.suse.com/1178783" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007929.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_56 fixes several issues.

The following security issues were fixed:

- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622).
- CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700).
- CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783).
- Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfs_drop_and_free_fs_root() (bsc#1178046).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-07"/>
	<updated date="2020-12-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178046">SUSE bug 1178046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178700">SUSE bug 1178700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178783">SUSE bug 1178783</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720976" comment="kernel-default 4.12.14-197.56 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719195" comment="kernel-livepatch-4_12_14-197_56-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497532" comment="kernel-livepatch-4_12_14-197_56-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138442" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178046" ref_url="https://bugzilla.suse.com/1178046" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178700" ref_url="https://bugzilla.suse.com/1178700" source="BUGZILLA"/>
		<reference ref_id="1178783" ref_url="https://bugzilla.suse.com/1178783" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007929.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_61 fixes several issues.

The following security issues were fixed:

- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622).
- CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700).
- CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783).
- Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfs_drop_and_free_fs_root() (bsc#1178046).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-07"/>
	<updated date="2020-12-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178046">SUSE bug 1178046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178700">SUSE bug 1178700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178783">SUSE bug 1178783</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720977" comment="kernel-default 4.12.14-197.61 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719196" comment="kernel-livepatch-4_12_14-197_61-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497533" comment="kernel-livepatch-4_12_14-197_61-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138443" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178046" ref_url="https://bugzilla.suse.com/1178046" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178700" ref_url="https://bugzilla.suse.com/1178700" source="BUGZILLA"/>
		<reference ref_id="1178783" ref_url="https://bugzilla.suse.com/1178783" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007929.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_64 fixes several issues.

The following security issues were fixed:

- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622).
- CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700).
- CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783).
- Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfs_drop_and_free_fs_root() (bsc#1178046).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-07"/>
	<updated date="2020-12-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178046">SUSE bug 1178046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178700">SUSE bug 1178700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178783">SUSE bug 1178783</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720978" comment="kernel-default 4.12.14-197.64 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719197" comment="kernel-livepatch-4_12_14-197_64-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497534" comment="kernel-livepatch-4_12_14-197_64-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138444" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178783" ref_url="https://bugzilla.suse.com/1178783" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007926.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_67 fixes several issues.

The following security issues were fixed:

- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622).
- CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-07"/>
	<updated date="2020-12-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178783">SUSE bug 1178783</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720979" comment="kernel-default 4.12.14-197.67 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719198" comment="kernel-livepatch-4_12_14-197_67-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497535" comment="kernel-livepatch-4_12_14-197_67-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138445" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1067665" ref_url="https://bugzilla.suse.com/1067665" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1158775" ref_url="https://bugzilla.suse.com/1158775" source="BUGZILLA"/>
		<reference ref_id="1170139" ref_url="https://bugzilla.suse.com/1170139" source="BUGZILLA"/>
		<reference ref_id="1170630" ref_url="https://bugzilla.suse.com/1170630" source="BUGZILLA"/>
		<reference ref_id="1172542" ref_url="https://bugzilla.suse.com/1172542" source="BUGZILLA"/>
		<reference ref_id="1174726" ref_url="https://bugzilla.suse.com/1174726" source="BUGZILLA"/>
		<reference ref_id="1175916" ref_url="https://bugzilla.suse.com/1175916" source="BUGZILLA"/>
		<reference ref_id="1176109" ref_url="https://bugzilla.suse.com/1176109" source="BUGZILLA"/>
		<reference ref_id="1177304" ref_url="https://bugzilla.suse.com/1177304" source="BUGZILLA"/>
		<reference ref_id="1177397" ref_url="https://bugzilla.suse.com/1177397" source="BUGZILLA"/>
		<reference ref_id="1177805" ref_url="https://bugzilla.suse.com/1177805" source="BUGZILLA"/>
		<reference ref_id="1177808" ref_url="https://bugzilla.suse.com/1177808" source="BUGZILLA"/>
		<reference ref_id="1177819" ref_url="https://bugzilla.suse.com/1177819" source="BUGZILLA"/>
		<reference ref_id="1177820" ref_url="https://bugzilla.suse.com/1177820" source="BUGZILLA"/>
		<reference ref_id="1178182" ref_url="https://bugzilla.suse.com/1178182" source="BUGZILLA"/>
		<reference ref_id="1178589" ref_url="https://bugzilla.suse.com/1178589" source="BUGZILLA"/>
		<reference ref_id="1178635" ref_url="https://bugzilla.suse.com/1178635" source="BUGZILLA"/>
		<reference ref_id="1178669" ref_url="https://bugzilla.suse.com/1178669" source="BUGZILLA"/>
		<reference ref_id="1178838" ref_url="https://bugzilla.suse.com/1178838" source="BUGZILLA"/>
		<reference ref_id="1178853" ref_url="https://bugzilla.suse.com/1178853" source="BUGZILLA"/>
		<reference ref_id="1178854" ref_url="https://bugzilla.suse.com/1178854" source="BUGZILLA"/>
		<reference ref_id="1178878" ref_url="https://bugzilla.suse.com/1178878" source="BUGZILLA"/>
		<reference ref_id="1178886" ref_url="https://bugzilla.suse.com/1178886" source="BUGZILLA"/>
		<reference ref_id="1178897" ref_url="https://bugzilla.suse.com/1178897" source="BUGZILLA"/>
		<reference ref_id="1178940" ref_url="https://bugzilla.suse.com/1178940" source="BUGZILLA"/>
		<reference ref_id="1178962" ref_url="https://bugzilla.suse.com/1178962" source="BUGZILLA"/>
		<reference ref_id="1179107" ref_url="https://bugzilla.suse.com/1179107" source="BUGZILLA"/>
		<reference ref_id="1179140" ref_url="https://bugzilla.suse.com/1179140" source="BUGZILLA"/>
		<reference ref_id="1179141" ref_url="https://bugzilla.suse.com/1179141" source="BUGZILLA"/>
		<reference ref_id="1179211" ref_url="https://bugzilla.suse.com/1179211" source="BUGZILLA"/>
		<reference ref_id="1179213" ref_url="https://bugzilla.suse.com/1179213" source="BUGZILLA"/>
		<reference ref_id="1179259" ref_url="https://bugzilla.suse.com/1179259" source="BUGZILLA"/>
		<reference ref_id="1179403" ref_url="https://bugzilla.suse.com/1179403" source="BUGZILLA"/>
		<reference ref_id="1179406" ref_url="https://bugzilla.suse.com/1179406" source="BUGZILLA"/>
		<reference ref_id="1179418" ref_url="https://bugzilla.suse.com/1179418" source="BUGZILLA"/>
		<reference ref_id="1179421" ref_url="https://bugzilla.suse.com/1179421" source="BUGZILLA"/>
		<reference ref_id="1179424" ref_url="https://bugzilla.suse.com/1179424" source="BUGZILLA"/>
		<reference ref_id="1179426" ref_url="https://bugzilla.suse.com/1179426" source="BUGZILLA"/>
		<reference ref_id="1179427" ref_url="https://bugzilla.suse.com/1179427" source="BUGZILLA"/>
		<reference ref_id="1179429" ref_url="https://bugzilla.suse.com/1179429" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15436" ref_url="https://www.suse.com/security/cve/CVE-2020-15436/" source="CVE"/>
		<reference ref_id="CVE-2020-15437" ref_url="https://www.suse.com/security/cve/CVE-2020-15437/" source="CVE"/>
		<reference ref_id="CVE-2020-25669" ref_url="https://www.suse.com/security/cve/CVE-2020-25669/" source="CVE"/>
		<reference ref_id="CVE-2020-27777" ref_url="https://www.suse.com/security/cve/CVE-2020-27777/" source="CVE"/>
		<reference ref_id="CVE-2020-28915" ref_url="https://www.suse.com/security/cve/CVE-2020-28915/" source="CVE"/>
		<reference ref_id="CVE-2020-28974" ref_url="https://www.suse.com/security/cve/CVE-2020-28974/" source="CVE"/>
		<reference ref_id="CVE-2020-29371" ref_url="https://www.suse.com/security/cve/CVE-2020-29371/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007941.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141).
- CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140).
- CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182).
- CVE-2020-27777: Restrict RTAS requests from userspace  (bsc#1179107).
- CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory (bsc#1178886).
- CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel (bsc#1178589).
- CVE-2020-29371: Fixed uninitialized memory leaks to userspace (bsc#1179429).

The following non-security bugs were fixed:

- ACPI: GED: fix -Wformat (git-fixes).
- ALSA: ctl: fix error path at adding user-defined element set (git-fixes).
- ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() (git-fixes).
- ALSA: mixart: Fix mutex deadlock (git-fixes).
- arm64: KVM: Fix system register enumeration (bsc#1174726).
- arm/arm64: KVM: Add PSCI version selection API (bsc#1174726).
- ASoC: qcom: lpass-platform: Fix memory leak (git-fixes).
- ath10k: Acquire tx_lock in tx error paths (git-fixes).
- batman-adv: set .owner to THIS_MODULE (git-fixes).
- Bluetooth: btusb: Fix and detect most of the Chinese Bluetooth controllers (git-fixes).
- Bluetooth: hci_bcm: fix freeing not-requested IRQ (git-fixes).
- bpf: Zero-fill re-used per-cpu map element (git-fixes).
- btrfs: account ticket size at add/delete time (bsc#1178897).
- btrfs: add helper to obtain number of devices with ongoing dev-replace (bsc#1178897).
- btrfs: check rw_devices, not num_devices for balance (bsc#1178897).
- btrfs: do not delete mismatched root refs (bsc#1178962).
- btrfs: fix btrfs_calc_reclaim_metadata_size calculation (bsc#1178897).
- btrfs: fix force usage in inc_block_group_ro (bsc#1178897).
- btrfs: fix invalid removal of root ref (bsc#1178962).
- btrfs: fix reclaim counter leak of space_info objects (bsc#1178897).
- btrfs: fix reclaim_size counter leak after stealing from global reserve (bsc#1178897).
- btrfs: kill min_allocable_bytes in inc_block_group_ro (bsc#1178897).
- btrfs: rework arguments of btrfs_unlink_subvol (bsc#1178962).
- btrfs: split dev-replace locking helpers for read and write (bsc#1178897). 
- can: af_can: prevent potential access of uninitialized member in canfd_rcv() (git-fixes).
- can: af_can: prevent potential access of uninitialized member in can_rcv() (git-fixes).
- can: dev: can_restart(): post buffer from the right context (git-fixes).
- can: gs_usb: fix endianess problem with candleLight firmware (git-fixes).
- can: m_can: fix nominal bitiming tseg2 min for version &gt;= 3.1 (git-fixes).
- can: m_can: m_can_handle_state_change(): fix state change (git-fixes).
- can: m_can: m_can_stop(): set device to software init mode before closing (git-fixes).
- can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb() (git-fixes).
- can: peak_usb: fix potential integer overflow on shift of a int (git-fixes).
- ceph: add check_session_state() helper and make it global (bsc#1179259).
- ceph: check session state after bumping session-&gt;s_seq (bsc#1179259).
- ceph: fix race in concurrent __ceph_remove_cap invocations (bsc#1178635).
- cifs: Fix incomplete memory allocation on setxattr path (bsc#1179211).
- cifs: remove bogus debug code (bsc#1179427).
- cifs: Return the error from crypt_message when enc/dec key not found (bsc#1179426).
- Convert trailing spaces and periods in path components (bsc#1179424).
- docs: ABI: stable: remove a duplicated documentation (git-fixes).
- docs: ABI: sysfs-c2port: remove a duplicated entry (git-fixes).
- Drivers: hv: vmbus: Remove the unused 'tsc_page' from struct hv_context (git-fixes).
- drm/i915/gvt: Set ENHANCED_FRAME_CAP bit (git-fixes).
- drm/sun4i: dw-hdmi: fix error return code in sun8i_dw_hdmi_bind() (git-fixes).
- Drop sysctl files for dropped archs, add ppc64le and arm64 (bsc#1178838). Also fix the ppc64 page size.
- efi: cper: Fix possible out-of-bounds access (git-fixes).
- efi/efivars: Add missing kobject_put() in sysfs entry creation error path (git-fixes).
- efi/esrt: Fix reference count leak in esre_create_sysfs_entry (git-fixes).
- efi: provide empty efi_enter_virtual_mode implementation (git-fixes).
- efivarfs: fix memory leak in efivarfs_create() (git-fixes).
- efivarfs: revert 'fix memory leak in efivarfs_create()' (git-fixes).
- efi/x86: Do not panic or BUG() on non-critical error conditions (git-fixes).
- efi/x86: Free efi_pgd with free_pages() (bsc#1112178).
- efi/x86: Ignore the memory attributes table on i386 (git-fixes).
- efi/x86: Map the entire EFI vendor string before copying it (git-fixes).
- fs/proc/array.c: allow reporting eip/esp for all coredumping threads (bsc#1050549).
- fuse: fix page dereference after free (bsc#1179213).
- futex: Do not enable IRQs unconditionally in put_pi_state() (bsc#1067665).
- futex: Handle transient 'ownerless' rtmutex state correctly (bsc#1067665).
- hv_balloon: disable warning when floor reached (git-fixes).
- hv_netvsc: deal with bpf API differences in 4.12 (bsc#1177819, bsc#1177820).
- hv_netvsc: make recording RSS hash depend on feature flag (bsc#1178853, bsc#1178854).
- hv_netvsc: record hardware hash in skb (bsc#1178853, bsc#1178854).
- i40iw: Fix error handling in i40iw_manage_arp_cache() (bsc#1111666)
- i40iw: fix null pointer dereference on a null wqe pointer (bsc#1111666)
- i40iw: Report correct firmware version (bsc#1111666)
- IB/cma: Fix ports memory leak in cma_configfs (bsc#1111666)
- IB/core: Set qp-&gt;real_qp before it may be accessed (bsc#1111666)
- IB/hfi1: Add missing INVALIDATE opcodes for trace (bsc#1111666)
- IB/hfi1: Add RcvShortLengthErrCnt to hfi1stats (bsc#1111666)
- IB/hfi1: Add software counter for ctxt0 seq drop (bsc#1111666)
- IB/hfi1: Avoid hardlockup with flushlist_lock (bsc#1111666)
- IB/hfi1: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666)
- IB/hfi1: Check for error on call to alloc_rsm_map_table (bsc#1111666)
- IB/hfi1: Close PSM sdma_progress sleep window (bsc#1111666)
- IB/hfi1: Define variables as unsigned long to fix KASAN warning (bsc#1111666)
- IB/hfi1: Ensure full Gen3 speed in a Gen4 system (bsc#1111666)
- IB/hfi1: Fix memory leaks in sysfs registration and unregistration (bsc#1111666)
- IB/hfi1: Fix Spectre v1 vulnerability (bsc#1111666)
- IB/hfi1: Handle port down properly in pio (bsc#1111666)
- IB/hfi1: Handle wakeup of orphaned QPs for pio (bsc#1111666)
- IB/hfi1: Insure freeze_work work_struct is canceled on shutdown (bsc#1111666)
- IB/hfi1, qib: Ensure RCU is locked when accessing list (bsc#1111666)
- IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM (bsc#1111666)
- IB/hfi1: Remove unused define (bsc#1111666)
- IB/hfi1: Silence txreq allocation warnings (bsc#1111666)
- IB/hfi1: Validate page aligned for a given virtual address (bsc#1111666)
- IB/hfi1: Wakeup QPs orphaned on wait list after flush (bsc#1111666)
- IB/ipoib: drop useless LIST_HEAD (bsc#1111666)
- IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode (bsc#1111666)
- IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start (bsc#1111666)
- IB/iser: Fix dma_nents type definition (bsc#1111666)
- IB/iser: Pass the correct number of entries for dma mapped SGL (bsc#1111666)
- IB/mad: Fix use-after-free in ib mad completion handling (bsc#1111666)
- IB/mlx4: Add and improve logging (bsc#1111666)
- IB/mlx4: Add support for MRA (bsc#1111666)
- IB/mlx4: Adjust delayed work when a dup is observed (bsc#1111666)
- IB/mlx4: Fix leak in id_map_find_del (bsc#1111666)
- IB/mlx4: Fix memory leak in add_gid error flow (bsc#1111666)
- IB/mlx4: Fix race condition between catas error reset and aliasguid flows (bsc#1111666)
- IB/mlx4: Fix starvation in paravirt mux/demux (bsc#1111666)
- IB/mlx4: Follow mirror sequence of device add during device removal (bsc#1111666)
- IB/mlx4: Remove unneeded NULL check (bsc#1111666)
- IB/mlx4: Test return value of calls to ib_get_cached_pkey (bsc#1111666)
- IB/mlx5: Add missing XRC options to QP optional params mask (bsc#1111666)
- IB/mlx5: Compare only index part of a memory window rkey (bsc#1111666)
- IB/mlx5: Do not override existing ip_protocol (bsc#1111666)
- IB/mlx5: Fix clean_mr() to work in the expected order (bsc#1111666)
- IB/mlx5: Fix implicit MR release flow (bsc#1111666)
- IB/mlx5: Fix outstanding_pi index for GSI qps (bsc#1111666)
- IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification (bsc#1111666)
- IB/mlx5: Fix unreg_umr to ignore the mkey state (bsc#1111666)
- IB/mlx5: Improve ODP debugging messages (bsc#1111666)
- IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache (bsc#1111666)
- IB/mlx5: Prevent concurrent MR updates during invalidation (bsc#1111666)
- IB/mlx5: Reset access mask when looping inside page fault handler (bsc#1111666)
- IB/mlx5: Set correct write permissions for implicit ODP MR (bsc#1111666)
- IB/mlx5: Use direct mkey destroy command upon UMR unreg failure (bsc#1111666)
- IB/mlx5: Use fragmented QP's buffer for in-kernel users (bsc#1111666)
- IB/mlx5: WQE dump jumps over first 16 bytes (bsc#1111666)
- IB/mthca: fix return value of error branch in mthca_init_cq() (bsc#1111666)
- IB/qib: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666)
- IB/qib: Fix an error code in qib_sdma_verbs_send() (bsc#1111666)
- IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value (bsc#1111666)
- IB/qib: Remove a set-but-not-used variable (bsc#1111666)
- IB/rdmavt: Convert timers to use timer_setup() (bsc#1111666)
- IB/rdmavt: Fix alloc_qpn() WARN_ON() (bsc#1111666)
- IB/rdmavt: Fix sizeof mismatch (bsc#1111666)
- IB/rdmavt: Reset all QPs when the device is shut down (bsc#1111666)
- IB/rxe: Fix incorrect cache cleanup in error flow (bsc#1111666)
- IB/rxe: Make counters thread safe (bsc#1111666)
- IB/srpt: Fix memory leak in srpt_add_one (bsc#1111666)
- IB/umad: Avoid additional device reference during open()/close() (bsc#1111666)
- IB/umad: Avoid destroying device while it is accessed (bsc#1111666)
- IB/umad: Do not check status of nonseekable_open() (bsc#1111666)
- IB/umad: Fix kernel crash while unloading ib_umad (bsc#1111666)
- IB/umad: Refactor code to use cdev_device_add() (bsc#1111666)
- IB/umad: Simplify and avoid dynamic allocation of class (bsc#1111666)
- IB/usnic: Fix out of bounds index check in query pkey (bsc#1111666)
- IB/uverbs: Fix OOPs upon device disassociation (bsc#1111666)
- iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode (git-fixes).
- iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum (git-fixes).
- inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() (git-fixes).
- Input: adxl34x - clean up a data type in adxl34x_probe() (git-fixes).
- iw_cxgb4: fix ECN check on the passive accept (bsc#1111666)
- iw_cxgb4: only reconnect with MPAv1 if the peer aborts (bsc#1111666)
- kABI: add back flush_dcache_range (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- kABI workaround for usermodehelper changes (bsc#1179406).
- KVM: arm64: Add missing #include of -&lt;linux/string.h&gt; in guest.c (bsc#1174726).
- KVM: arm64: Factor out core register ID enumeration (bsc#1174726).
- KVM: arm64: Filter out invalid core register IDs in KVM_GET_REG_LIST (bsc#1174726).
- KVM: arm64: Refactor kvm_arm_num_regs() for easier maintenance (bsc#1174726).
- KVM: arm64: Reject ioctl access to FPSIMD V-regs on SVE vcpus (bsc#1174726).
- KVM host: kabi fixes for psci_version (bsc#1174726).
- libnvdimm/nvdimm/flush: Allow architecture to override the flush barrier (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- locking/lockdep: Add debug_locks check in __lock_downgrade() (bsc#1050549).
- locking/percpu-rwsem: Use this_cpu_{inc,dec}() for read_count (bsc#1050549).
- locktorture: Print ratio of acquisitions, not failures (bsc#1050549).
- mac80211: always wind down STA state (git-fixes).
- mac80211: free sta in sta_info_insert_finish() on errors (git-fixes).
- mac80211: minstrel: fix tx status processing corner case (git-fixes).
- mac80211: minstrel: remove deferred sampling code (git-fixes).
- mm: always have io_remap_pfn_range() set pgprot_decrypted() (bsc#1112178).
- net: ena: Capitalize all log strings and improve code readability (bsc#1177397).
- net: ena: Change license into format to SPDX in all files (bsc#1177397).
- net: ena: Change log message to netif/dev function (bsc#1177397).
- net: ena: Change RSS related macros and variables names (bsc#1177397).
- net: ena: ethtool: Add new device statistics (bsc#1177397).
- net: ena: ethtool: add stats printing to XDP queues (bsc#1177397).
- net: ena: ethtool: convert stat_offset to 64 bit resolution (bsc#1177397).
- net: ena: Fix all static chekers' warnings (bsc#1177397).
- net: ena: Remove redundant print of placement policy (bsc#1177397).
- net: ena: xdp: add queue counters for xdp actions (bsc#1177397).
- netfilter: nat: can't use dst_hold on noref dst (bsc#1178878).
- net/mlx4_core: Fix init_hca fields offset (git-fixes).
- nfc: s3fwrn5: use signed integer for parsing GPIO numbers (git-fixes).
- NFS: mark nfsiod as CPU_INTENSIVE (bsc#1177304).
- NFS: only invalidate dentrys that are clearly invalid (bsc#1178669 bsc#1170139).
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (bsc#1170630).
- PCI: pci-hyperv: Fix build errors on non-SYSFS config (git-fixes).
- pinctrl: amd: fix incorrect way to disable debounce filter (git-fixes).
- pinctrl: amd: use higher precision for 512 RtcClk (git-fixes).
- pinctrl: aspeed: Fix GPI only function problem (git-fixes).
- platform/x86: toshiba_acpi: Fix the wrong variable assignment (git-fixes).
- powerpc/32: define helpers to get L1 cache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/64: flush_inval_dcache_range() becomes flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/64: reuse PPC32 static inline flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc: Chunk calls to flush_dcache_range in arch_*_memory (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964 git-fixes).
- powerpc: define helpers to get L1 icache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/mm: Flush cache on memory hot(un)plug (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Add flush routines using new pmem store and sync instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Add new instructions for persistent storage and sync (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Avoid the barrier in flush routines (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Fix kernel crash due to wrong range value usage in flush_dcache_range (jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Initialize pmem device on newer hardware (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Restrict papr_scm to P8 and above (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Update ppc64 to use the new barrier instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- RDMA/bnxt_re: Fix lifetimes in bnxt_re_task (bsc#1111666)
- RDMA/bnxt_re: Fix Send Work Entry state check while polling completions (bsc#1111666)
- RDMA/bnxt_re: Fix sizeof mismatch for allocation of pbl_tbl. (bsc#1111666)
- RDMA/bnxt_re: Fix stack-out-of-bounds in bnxt_qplib_rcfw_send_message (bsc#1111666)
- RDMA/cma: add missed unregister_pernet_subsys in init failure (bsc#1111666)
- RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (bsc#1111666)
- RDMA/cma: Fix false error message (bsc#1111666)
- RDMA/cma: fix null-ptr-deref Read in cma_cleanup (bsc#1111666)
- RDMA/cma: Protect bind_list and listen_list while finding matching cm id (bsc#1111666)
- RDMA/cm: Fix checking for allowed duplicate listens (bsc#1111666)
- RDMA/cm: Remove a race freeing timewait_info (bsc#1111666)
- RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow (bsc#1111666)
- RDMA/core: Do not depend device ODP capabilities on kconfig option (bsc#1111666)
- RDMA/core: Fix invalid memory access in spec_filter_size (bsc#1111666)
- RDMA/core: Fix locking in ib_uverbs_event_read (bsc#1111666)
- RDMA/core: Fix protection fault in ib_mr_pool_destroy (bsc#1111666)
- RDMA/core: Fix race between destroy and release FD object (bsc#1111666)
- RDMA/core: Fix race when resolving IP address (bsc#1111666)
- RDMA/core: Prevent mixed use of FDs between shared ufiles (bsc#1111666)
- RDMA/cxgb3: Delete and properly mark unimplemented resize CQ function (bsc#1111666)
- RDMA: Directly cast the sockaddr union to sockaddr (bsc#1111666)
- RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN (bsc#1111666)
- RDMA/hns: Correct typo of hns_roce_create_cq() (bsc#1111666)
- RDMA/hns: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/hns: Set the unsupported wr opcode (bsc#1111666)
- RDMA/i40iw: fix a potential NULL pointer dereference (bsc#1111666)
- RDMA/i40iw: Set queue pair state when being queried (bsc#1111666)
- RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (bsc#1111666)
- RDMA/ipoib: Remove check for ETH_SS_TEST (bsc#1111666)
- RDMA/ipoib: Return void from ipoib_ib_dev_stop() (bsc#1111666)
- RDMA/ipoib: Set rtnl_link_ops for ipoib interfaces (bsc#1111666)
- RDMA/iwcm: Fix a lock inversion issue (bsc#1111666)
- RDMA/iwcm: Fix iwcm work deallocation (bsc#1111666)
- RDMA/iwcm: move iw_rem_ref() calls out of spinlock (bsc#1111666)
- RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case (bsc#1111666)
- RDMA/iw_cxgb4: Fix the unchecked ep dereference (bsc#1111666)
- RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads() (bsc#1111666)
- RDMA/mlx4: Initialize ib_spec on the stack (bsc#1111666)
- RDMA/mlx4: Read pkey table length instead of hardcoded value (bsc#1111666)
- RDMA/mlx5: Clear old rate limit when closing QP (bsc#1111666)
- RDMA/mlx5: Delete unreachable handle_atomic code by simplifying SW completion (bsc#1111666)
- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (bsc#1111666)
- RDMA/mlx5: Fix a race with mlx5_ib_update_xlt on an implicit MR (bsc#1111666)
- RDMA/mlx5: Fix function name typo 'fileds' -&gt; 'fields' (bsc#1111666)
- RDMA/mlx5: Return proper error value (bsc#1111666)
- RDMA/mlx5: Set GRH fields in query QP on RoCE (bsc#1111666)
- RDMA/mlx5: Verify that QP is created with RQ or SQ (bsc#1111666)
- RDMA/nes: Remove second wait queue initialization call (bsc#1111666)
- RDMA/netlink: Do not always generate an ACK for some netlink operations (bsc#1111666)
- RDMA/ocrdma: Fix out of bounds index check in query pkey (bsc#1111666)
- RDMA/ocrdma: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() (bsc#1111666)
- RDMA/qedr: Endianness warnings cleanup (bsc#1111666)
- RDMA/qedr: Fix doorbell setting (bsc#1111666)
- RDMA/qedr: Fix memory leak in user qp and mr (bsc#1111666)
- RDMA/qedr: Fix reported firmware version (bsc#1111666)
- RDMA/qedr: Fix use of uninitialized field (bsc#1111666)
- RDMA/qedr: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/qedr: SRQ's bug fixes (bsc#1111666)
- RDMA/qib: Delete extra line (bsc#1111666)
- RDMA/qib: Remove all occurrences of BUG_ON() (bsc#1111666)
- RDMA/qib: Validate -&gt;show()/store() callbacks before calling them (bsc#1111666)
- RDMA/rxe: Drop pointless checks in rxe_init_ports (bsc#1111666)
- RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM (bsc#1111666)
- RDMA/rxe: Fix configuration of atomic queue pair attributes (bsc#1111666)
- RDMA/rxe: Fix memleak in rxe_mem_init_user (bsc#1111666)
- RDMA/rxe: Fix slab-out-bounds access which lead to kernel crash later (bsc#1111666)
- RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq (bsc#1111666)
- RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars (bsc#1111666)
- RDMA/rxe: Prevent access to wr-&gt;next ptr afrer wr is posted to send queue (bsc#1111666)
- RDMA/rxe: Remove unused rxe_mem_map_pages (bsc#1111666)
- RDMA/rxe: Remove useless rxe_init_device_param assignments (bsc#1111666)
- RDMA/rxe: Return void from rxe_init_port_param() (bsc#1111666)
- RDMA/rxe: Return void from rxe_mem_init_dma() (bsc#1111666)
- RDMA/rxe: Set default vendor ID (bsc#1111666)
- RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices (bsc#1111666)
- RDMA/rxe: Skip dgid check in loopback mode (bsc#1111666)
- RDMA/rxe: Use for_each_sg_page iterator on umem SGL (bsc#1111666)
- RDMA/srp: Rework SCSI device reset handling (bsc#1111666)
- RDMA/srpt: Fix typo in srpt_unregister_mad_agent docstring (bsc#1111666)
- RDMA/srpt: Report the SCSI residual to the initiator (bsc#1111666)
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (bsc#1111666)
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (bsc#1111666)
- RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated (bsc#1111666)
- RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove (bsc#1111666)
- RDMA/vmw_pvrdma: Use atomic memory allocation in create AH (bsc#1111666)
- reboot: fix overflow parsing reboot cpu number (bsc#1179421).
- regulator: avoid resolve_supply() infinite recursion (git-fixes).
- regulator: fix memory leak with repeated set_machine_constraints() (git-fixes).
- regulator: ti-abb: Fix array out of bound read access on the first transition (git-fixes).
- regulator: workaround self-referent regulators (git-fixes).
- Revert 'cdc-acm: hardening against malicious devices' (git-fixes).
- Revert 'kernel/reboot.c: convert simple_strtoul to kstrtoint' (bsc#1179418).
- RMDA/cm: Fix missing ib_cm_destroy_id() in ib_cm_insert_listen() (bsc#1111666)
- rxe: correctly calculate iCRC for unaligned payloads (bsc#1111666)
- rxe: fix error completion wr_id and qp_num (bsc#1111666)
- s390/cio: add cond_resched() in the slow_eval_known_fn() loop (bsc#1177805 LTC#188737).
- s390/cpum_cf,perf: change DFLT_CCERROR counter name (bsc#1175916 LTC#187937).
- s390/dasd: Fix zero write for FBA devices (bsc#1177808 LTC#188739).
- s390: kernel/uv: handle length extension properly (bsc#1178940 LTC#189323).
- sched/core: Fix PI boosting between RT and DEADLINE tasks (bsc#1112178).
- sched/x86: SaveFLAGS on context switch (bsc#1112178).
- scripts/git_sort/git_sort.py: add ceph maintainers git tree
- scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported (git-fixes).
- scsi: RDMA/srpt: Fix a credit leak for aborted commands (bsc#1111666)
- Staging: rtl8188eu: rtw_mlme: Fix uninitialized variable authmode (git-fixes).
- staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids (git-fixes).
- time: Prevent undefined behaviour in timespec64_to_ns() (git-fixes).
- tracing: Fix out of bounds write in get_trace_buf (bsc#1179403).
- tty: serial: imx: keep console clocks always on (git-fixes).
- Update references in patches.suse/net-smc-tolerate-future-smcd-versions (bsc#1172542 LTC#186070 git-fixes).
- USB: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode (git-fixes).
- USB: core: driver: fix stray tabs in error messages (git-fixes).
- USB: core: Fix regression in Hercules audio card (git-fixes).
- USB: gadget: Fix memleak in gadgetfs_fill_super (git-fixes).
- USB: gadget: f_midi: Fix memleak in f_midi_alloc (git-fixes).
- USB: host: ehci-tegra: Fix error handling in tegra_ehci_probe() (git-fixes).
- USB: host: xhci-mtk: avoid runtime suspend when removing hcd (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race (git-fixes).
- USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters (git-fixes).
- USB: serial: option: add Cellient MPL200 card (git-fixes).
- USB: serial: option: Add Telit FT980-KS composition (git-fixes).
- USB: serial: pl2303: add device-id for HP GC device (git-fixes).
- usermodehelper: reset umask to default before executing user process (bsc#1179406).
- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- x86/hyperv: Clarify comment on x2apic mode (git-fixes).
- x86/hyperv: Make vapic support x2apic mode (git-fixes).
- x86/microcode/intel: Check patch signature before saving microcode for early loading (bsc#1112178).
- x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect (git-fixes).
- x86/PCI: Fix intel_mid_pci.c build error when ACPI is not enabled (git-fixes).
- x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (git-fixes).
- x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP (bsc#1112178).
- x86/sysfb_efi: Add quirks for some devices with swapped width and height (git-fixes).
- xfrm: Fix memleak on xfrm state destroy (bsc#1158775).
- xfs: revert 'xfs: fix rmap key and record comparison functions' (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-09"/>
	<updated date="2020-12-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1067665">SUSE bug 1067665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158775">SUSE bug 1158775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170139">SUSE bug 1170139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170630">SUSE bug 1170630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172542">SUSE bug 1172542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174726">SUSE bug 1174726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175916">SUSE bug 1175916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176109">SUSE bug 1176109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177304">SUSE bug 1177304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177397">SUSE bug 1177397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177805">SUSE bug 1177805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177808">SUSE bug 1177808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177819">SUSE bug 1177819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177820">SUSE bug 1177820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178182">SUSE bug 1178182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178589">SUSE bug 1178589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178635">SUSE bug 1178635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178669">SUSE bug 1178669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178838">SUSE bug 1178838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178853">SUSE bug 1178853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178854">SUSE bug 1178854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178878">SUSE bug 1178878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178886">SUSE bug 1178886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178897">SUSE bug 1178897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178940">SUSE bug 1178940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178962">SUSE bug 1178962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179107">SUSE bug 1179107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179140">SUSE bug 1179140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179141">SUSE bug 1179141</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179211">SUSE bug 1179211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179213">SUSE bug 1179213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179259">SUSE bug 1179259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179403">SUSE bug 1179403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179406">SUSE bug 1179406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179418">SUSE bug 1179418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179421">SUSE bug 1179421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179424">SUSE bug 1179424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179426">SUSE bug 1179426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179427">SUSE bug 1179427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179429">SUSE bug 1179429</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15436/">CVE-2020-15436</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15437/">CVE-2020-15437</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25669/">CVE-2020-25669</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27777/">CVE-2020-27777</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28915/">CVE-2020-28915</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28974/">CVE-2020-28974</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29371/">CVE-2020-29371</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497536" comment="kernel-default-livepatch-4.12.14-197.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497537" comment="kernel-default-livepatch-devel-4.12.14-197.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497538" comment="kernel-livepatch-4_12_14-197_75-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138446" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1046303" ref_url="https://bugzilla.suse.com/1046303" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1051858" ref_url="https://bugzilla.suse.com/1051858" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1086301" ref_url="https://bugzilla.suse.com/1086301" source="BUGZILLA"/>
		<reference ref_id="1086313" ref_url="https://bugzilla.suse.com/1086313" source="BUGZILLA"/>
		<reference ref_id="1086314" ref_url="https://bugzilla.suse.com/1086314" source="BUGZILLA"/>
		<reference ref_id="1088810" ref_url="https://bugzilla.suse.com/1088810" source="BUGZILLA"/>
		<reference ref_id="1090888" ref_url="https://bugzilla.suse.com/1090888" source="BUGZILLA"/>
		<reference ref_id="1103989" ref_url="https://bugzilla.suse.com/1103989" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1105392" ref_url="https://bugzilla.suse.com/1105392" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1112504" ref_url="https://bugzilla.suse.com/1112504" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1115026" ref_url="https://bugzilla.suse.com/1115026" source="BUGZILLA"/>
		<reference ref_id="1118338" ref_url="https://bugzilla.suse.com/1118338" source="BUGZILLA"/>
		<reference ref_id="1118661" ref_url="https://bugzilla.suse.com/1118661" source="BUGZILLA"/>
		<reference ref_id="1123328" ref_url="https://bugzilla.suse.com/1123328" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1127682" ref_url="https://bugzilla.suse.com/1127682" source="BUGZILLA"/>
		<reference ref_id="1129551" ref_url="https://bugzilla.suse.com/1129551" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1133147" ref_url="https://bugzilla.suse.com/1133147" source="BUGZILLA"/>
		<reference ref_id="1134973" ref_url="https://bugzilla.suse.com/1134973" source="BUGZILLA"/>
		<reference ref_id="1140025" ref_url="https://bugzilla.suse.com/1140025" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1143959" ref_url="https://bugzilla.suse.com/1143959" source="BUGZILLA"/>
		<reference ref_id="1144162" ref_url="https://bugzilla.suse.com/1144162" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146544" ref_url="https://bugzilla.suse.com/1146544" source="BUGZILLA"/>
		<reference ref_id="1151548" ref_url="https://bugzilla.suse.com/1151548" source="BUGZILLA"/>
		<reference ref_id="1151910" ref_url="https://bugzilla.suse.com/1151910" source="BUGZILLA"/>
		<reference ref_id="1151927" ref_url="https://bugzilla.suse.com/1151927" source="BUGZILLA"/>
		<reference ref_id="1152107" ref_url="https://bugzilla.suse.com/1152107" source="BUGZILLA"/>
		<reference ref_id="1152631" ref_url="https://bugzilla.suse.com/1152631" source="BUGZILLA"/>
		<reference ref_id="1153535" ref_url="https://bugzilla.suse.com/1153535" source="BUGZILLA"/>
		<reference ref_id="1153917" ref_url="https://bugzilla.suse.com/1153917" source="BUGZILLA"/>
		<reference ref_id="1154243" ref_url="https://bugzilla.suse.com/1154243" source="BUGZILLA"/>
		<reference ref_id="1154601" ref_url="https://bugzilla.suse.com/1154601" source="BUGZILLA"/>
		<reference ref_id="1154768" ref_url="https://bugzilla.suse.com/1154768" source="BUGZILLA"/>
		<reference ref_id="1154916" ref_url="https://bugzilla.suse.com/1154916" source="BUGZILLA"/>
		<reference ref_id="1155331" ref_url="https://bugzilla.suse.com/1155331" source="BUGZILLA"/>
		<reference ref_id="1155334" ref_url="https://bugzilla.suse.com/1155334" source="BUGZILLA"/>
		<reference ref_id="1155689" ref_url="https://bugzilla.suse.com/1155689" source="BUGZILLA"/>
		<reference ref_id="1156259" ref_url="https://bugzilla.suse.com/1156259" source="BUGZILLA"/>
		<reference ref_id="1156286" ref_url="https://bugzilla.suse.com/1156286" source="BUGZILLA"/>
		<reference ref_id="1156462" ref_url="https://bugzilla.suse.com/1156462" source="BUGZILLA"/>
		<reference ref_id="1157155" ref_url="https://bugzilla.suse.com/1157155" source="BUGZILLA"/>
		<reference ref_id="1157157" ref_url="https://bugzilla.suse.com/1157157" source="BUGZILLA"/>
		<reference ref_id="1157169" ref_url="https://bugzilla.suse.com/1157169" source="BUGZILLA"/>
		<reference ref_id="1157303" ref_url="https://bugzilla.suse.com/1157303" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1157480" ref_url="https://bugzilla.suse.com/1157480" source="BUGZILLA"/>
		<reference ref_id="1157692" ref_url="https://bugzilla.suse.com/1157692" source="BUGZILLA"/>
		<reference ref_id="1157853" ref_url="https://bugzilla.suse.com/1157853" source="BUGZILLA"/>
		<reference ref_id="1157895" ref_url="https://bugzilla.suse.com/1157895" source="BUGZILLA"/>
		<reference ref_id="1157908" ref_url="https://bugzilla.suse.com/1157908" source="BUGZILLA"/>
		<reference ref_id="1157966" ref_url="https://bugzilla.suse.com/1157966" source="BUGZILLA"/>
		<reference ref_id="1158013" ref_url="https://bugzilla.suse.com/1158013" source="BUGZILLA"/>
		<reference ref_id="1158021" ref_url="https://bugzilla.suse.com/1158021" source="BUGZILLA"/>
		<reference ref_id="1158026" ref_url="https://bugzilla.suse.com/1158026" source="BUGZILLA"/>
		<reference ref_id="1158071" ref_url="https://bugzilla.suse.com/1158071" source="BUGZILLA"/>
		<reference ref_id="1158094" ref_url="https://bugzilla.suse.com/1158094" source="BUGZILLA"/>
		<reference ref_id="1158132" ref_url="https://bugzilla.suse.com/1158132" source="BUGZILLA"/>
		<reference ref_id="1158381" ref_url="https://bugzilla.suse.com/1158381" source="BUGZILLA"/>
		<reference ref_id="1158533" ref_url="https://bugzilla.suse.com/1158533" source="BUGZILLA"/>
		<reference ref_id="1158637" ref_url="https://bugzilla.suse.com/1158637" source="BUGZILLA"/>
		<reference ref_id="1158638" ref_url="https://bugzilla.suse.com/1158638" source="BUGZILLA"/>
		<reference ref_id="1158639" ref_url="https://bugzilla.suse.com/1158639" source="BUGZILLA"/>
		<reference ref_id="1158640" ref_url="https://bugzilla.suse.com/1158640" source="BUGZILLA"/>
		<reference ref_id="1158641" ref_url="https://bugzilla.suse.com/1158641" source="BUGZILLA"/>
		<reference ref_id="1158643" ref_url="https://bugzilla.suse.com/1158643" source="BUGZILLA"/>
		<reference ref_id="1158644" ref_url="https://bugzilla.suse.com/1158644" source="BUGZILLA"/>
		<reference ref_id="1158645" ref_url="https://bugzilla.suse.com/1158645" source="BUGZILLA"/>
		<reference ref_id="1158646" ref_url="https://bugzilla.suse.com/1158646" source="BUGZILLA"/>
		<reference ref_id="1158647" ref_url="https://bugzilla.suse.com/1158647" source="BUGZILLA"/>
		<reference ref_id="1158649" ref_url="https://bugzilla.suse.com/1158649" source="BUGZILLA"/>
		<reference ref_id="1158651" ref_url="https://bugzilla.suse.com/1158651" source="BUGZILLA"/>
		<reference ref_id="1158652" ref_url="https://bugzilla.suse.com/1158652" source="BUGZILLA"/>
		<reference ref_id="1158819" ref_url="https://bugzilla.suse.com/1158819" source="BUGZILLA"/>
		<reference ref_id="1158823" ref_url="https://bugzilla.suse.com/1158823" source="BUGZILLA"/>
		<reference ref_id="1158824" ref_url="https://bugzilla.suse.com/1158824" source="BUGZILLA"/>
		<reference ref_id="1158827" ref_url="https://bugzilla.suse.com/1158827" source="BUGZILLA"/>
		<reference ref_id="1158834" ref_url="https://bugzilla.suse.com/1158834" source="BUGZILLA"/>
		<reference ref_id="1158893" ref_url="https://bugzilla.suse.com/1158893" source="BUGZILLA"/>
		<reference ref_id="1158900" ref_url="https://bugzilla.suse.com/1158900" source="BUGZILLA"/>
		<reference ref_id="1158903" ref_url="https://bugzilla.suse.com/1158903" source="BUGZILLA"/>
		<reference ref_id="1158904" ref_url="https://bugzilla.suse.com/1158904" source="BUGZILLA"/>
		<reference ref_id="1158954" ref_url="https://bugzilla.suse.com/1158954" source="BUGZILLA"/>
		<reference ref_id="1159024" ref_url="https://bugzilla.suse.com/1159024" source="BUGZILLA"/>
		<reference ref_id="1159028" ref_url="https://bugzilla.suse.com/1159028" source="BUGZILLA"/>
		<reference ref_id="1159271" ref_url="https://bugzilla.suse.com/1159271" source="BUGZILLA"/>
		<reference ref_id="1159297" ref_url="https://bugzilla.suse.com/1159297" source="BUGZILLA"/>
		<reference ref_id="1159377" ref_url="https://bugzilla.suse.com/1159377" source="BUGZILLA"/>
		<reference ref_id="1159394" ref_url="https://bugzilla.suse.com/1159394" source="BUGZILLA"/>
		<reference ref_id="1159483" ref_url="https://bugzilla.suse.com/1159483" source="BUGZILLA"/>
		<reference ref_id="1159484" ref_url="https://bugzilla.suse.com/1159484" source="BUGZILLA"/>
		<reference ref_id="1159500" ref_url="https://bugzilla.suse.com/1159500" source="BUGZILLA"/>
		<reference ref_id="1159569" ref_url="https://bugzilla.suse.com/1159569" source="BUGZILLA"/>
		<reference ref_id="1159588" ref_url="https://bugzilla.suse.com/1159588" source="BUGZILLA"/>
		<reference ref_id="1159841" ref_url="https://bugzilla.suse.com/1159841" source="BUGZILLA"/>
		<reference ref_id="1159908" ref_url="https://bugzilla.suse.com/1159908" source="BUGZILLA"/>
		<reference ref_id="1159909" ref_url="https://bugzilla.suse.com/1159909" source="BUGZILLA"/>
		<reference ref_id="1159910" ref_url="https://bugzilla.suse.com/1159910" source="BUGZILLA"/>
		<reference ref_id="1159911" ref_url="https://bugzilla.suse.com/1159911" source="BUGZILLA"/>
		<reference ref_id="1159955" ref_url="https://bugzilla.suse.com/1159955" source="BUGZILLA"/>
		<reference ref_id="1160147" ref_url="https://bugzilla.suse.com/1160147" source="BUGZILLA"/>
		<reference ref_id="1160195" ref_url="https://bugzilla.suse.com/1160195" source="BUGZILLA"/>
		<reference ref_id="1160210" ref_url="https://bugzilla.suse.com/1160210" source="BUGZILLA"/>
		<reference ref_id="1160211" ref_url="https://bugzilla.suse.com/1160211" source="BUGZILLA"/>
		<reference ref_id="1160218" ref_url="https://bugzilla.suse.com/1160218" source="BUGZILLA"/>
		<reference ref_id="1160433" ref_url="https://bugzilla.suse.com/1160433" source="BUGZILLA"/>
		<reference ref_id="1160442" ref_url="https://bugzilla.suse.com/1160442" source="BUGZILLA"/>
		<reference ref_id="1160469" ref_url="https://bugzilla.suse.com/1160469" source="BUGZILLA"/>
		<reference ref_id="1160470" ref_url="https://bugzilla.suse.com/1160470" source="BUGZILLA"/>
		<reference ref_id="1160476" ref_url="https://bugzilla.suse.com/1160476" source="BUGZILLA"/>
		<reference ref_id="1160560" ref_url="https://bugzilla.suse.com/1160560" source="BUGZILLA"/>
		<reference ref_id="1160618" ref_url="https://bugzilla.suse.com/1160618" source="BUGZILLA"/>
		<reference ref_id="1160678" ref_url="https://bugzilla.suse.com/1160678" source="BUGZILLA"/>
		<reference ref_id="1160755" ref_url="https://bugzilla.suse.com/1160755" source="BUGZILLA"/>
		<reference ref_id="1160756" ref_url="https://bugzilla.suse.com/1160756" source="BUGZILLA"/>
		<reference ref_id="1160784" ref_url="https://bugzilla.suse.com/1160784" source="BUGZILLA"/>
		<reference ref_id="1160787" ref_url="https://bugzilla.suse.com/1160787" source="BUGZILLA"/>
		<reference ref_id="1160802" ref_url="https://bugzilla.suse.com/1160802" source="BUGZILLA"/>
		<reference ref_id="1160803" ref_url="https://bugzilla.suse.com/1160803" source="BUGZILLA"/>
		<reference ref_id="1160804" ref_url="https://bugzilla.suse.com/1160804" source="BUGZILLA"/>
		<reference ref_id="1160917" ref_url="https://bugzilla.suse.com/1160917" source="BUGZILLA"/>
		<reference ref_id="1160966" ref_url="https://bugzilla.suse.com/1160966" source="BUGZILLA"/>
		<reference ref_id="1160979" ref_url="https://bugzilla.suse.com/1160979" source="BUGZILLA"/>
		<reference ref_id="1161087" ref_url="https://bugzilla.suse.com/1161087" source="BUGZILLA"/>
		<reference ref_id="1161243" ref_url="https://bugzilla.suse.com/1161243" source="BUGZILLA"/>
		<reference ref_id="1161360" ref_url="https://bugzilla.suse.com/1161360" source="BUGZILLA"/>
		<reference ref_id="1161472" ref_url="https://bugzilla.suse.com/1161472" source="BUGZILLA"/>
		<reference ref_id="1161514" ref_url="https://bugzilla.suse.com/1161514" source="BUGZILLA"/>
		<reference ref_id="1161518" ref_url="https://bugzilla.suse.com/1161518" source="BUGZILLA"/>
		<reference ref_id="1161522" ref_url="https://bugzilla.suse.com/1161522" source="BUGZILLA"/>
		<reference ref_id="1161523" ref_url="https://bugzilla.suse.com/1161523" source="BUGZILLA"/>
		<reference ref_id="1161549" ref_url="https://bugzilla.suse.com/1161549" source="BUGZILLA"/>
		<reference ref_id="1161552" ref_url="https://bugzilla.suse.com/1161552" source="BUGZILLA"/>
		<reference ref_id="1161674" ref_url="https://bugzilla.suse.com/1161674" source="BUGZILLA"/>
		<reference ref_id="1161702" ref_url="https://bugzilla.suse.com/1161702" source="BUGZILLA"/>
		<reference ref_id="1161907" ref_url="https://bugzilla.suse.com/1161907" source="BUGZILLA"/>
		<reference ref_id="1161931" ref_url="https://bugzilla.suse.com/1161931" source="BUGZILLA"/>
		<reference ref_id="1161933" ref_url="https://bugzilla.suse.com/1161933" source="BUGZILLA"/>
		<reference ref_id="1161934" ref_url="https://bugzilla.suse.com/1161934" source="BUGZILLA"/>
		<reference ref_id="1161935" ref_url="https://bugzilla.suse.com/1161935" source="BUGZILLA"/>
		<reference ref_id="1161936" ref_url="https://bugzilla.suse.com/1161936" source="BUGZILLA"/>
		<reference ref_id="1161937" ref_url="https://bugzilla.suse.com/1161937" source="BUGZILLA"/>
		<reference ref_id="1162028" ref_url="https://bugzilla.suse.com/1162028" source="BUGZILLA"/>
		<reference ref_id="1162067" ref_url="https://bugzilla.suse.com/1162067" source="BUGZILLA"/>
		<reference ref_id="1162109" ref_url="https://bugzilla.suse.com/1162109" source="BUGZILLA"/>
		<reference ref_id="1162139" ref_url="https://bugzilla.suse.com/1162139" source="BUGZILLA"/>
		<reference ref_id="1162557" ref_url="https://bugzilla.suse.com/1162557" source="BUGZILLA"/>
		<reference ref_id="1162617" ref_url="https://bugzilla.suse.com/1162617" source="BUGZILLA"/>
		<reference ref_id="1162618" ref_url="https://bugzilla.suse.com/1162618" source="BUGZILLA"/>
		<reference ref_id="1162619" ref_url="https://bugzilla.suse.com/1162619" source="BUGZILLA"/>
		<reference ref_id="1162623" ref_url="https://bugzilla.suse.com/1162623" source="BUGZILLA"/>
		<reference ref_id="1162928" ref_url="https://bugzilla.suse.com/1162928" source="BUGZILLA"/>
		<reference ref_id="1162943" ref_url="https://bugzilla.suse.com/1162943" source="BUGZILLA"/>
		<reference ref_id="1163206" ref_url="https://bugzilla.suse.com/1163206" source="BUGZILLA"/>
		<reference ref_id="1163383" ref_url="https://bugzilla.suse.com/1163383" source="BUGZILLA"/>
		<reference ref_id="1163384" ref_url="https://bugzilla.suse.com/1163384" source="BUGZILLA"/>
		<reference ref_id="1163762" ref_url="https://bugzilla.suse.com/1163762" source="BUGZILLA"/>
		<reference ref_id="1163774" ref_url="https://bugzilla.suse.com/1163774" source="BUGZILLA"/>
		<reference ref_id="1163836" ref_url="https://bugzilla.suse.com/1163836" source="BUGZILLA"/>
		<reference ref_id="1163840" ref_url="https://bugzilla.suse.com/1163840" source="BUGZILLA"/>
		<reference ref_id="1163841" ref_url="https://bugzilla.suse.com/1163841" source="BUGZILLA"/>
		<reference ref_id="1163842" ref_url="https://bugzilla.suse.com/1163842" source="BUGZILLA"/>
		<reference ref_id="1163843" ref_url="https://bugzilla.suse.com/1163843" source="BUGZILLA"/>
		<reference ref_id="1163844" ref_url="https://bugzilla.suse.com/1163844" source="BUGZILLA"/>
		<reference ref_id="1163845" ref_url="https://bugzilla.suse.com/1163845" source="BUGZILLA"/>
		<reference ref_id="1163846" ref_url="https://bugzilla.suse.com/1163846" source="BUGZILLA"/>
		<reference ref_id="1163849" ref_url="https://bugzilla.suse.com/1163849" source="BUGZILLA"/>
		<reference ref_id="1163850" ref_url="https://bugzilla.suse.com/1163850" source="BUGZILLA"/>
		<reference ref_id="1163851" ref_url="https://bugzilla.suse.com/1163851" source="BUGZILLA"/>
		<reference ref_id="1163852" ref_url="https://bugzilla.suse.com/1163852" source="BUGZILLA"/>
		<reference ref_id="1163853" ref_url="https://bugzilla.suse.com/1163853" source="BUGZILLA"/>
		<reference ref_id="1163855" ref_url="https://bugzilla.suse.com/1163855" source="BUGZILLA"/>
		<reference ref_id="1163856" ref_url="https://bugzilla.suse.com/1163856" source="BUGZILLA"/>
		<reference ref_id="1163857" ref_url="https://bugzilla.suse.com/1163857" source="BUGZILLA"/>
		<reference ref_id="1163858" ref_url="https://bugzilla.suse.com/1163858" source="BUGZILLA"/>
		<reference ref_id="1163859" ref_url="https://bugzilla.suse.com/1163859" source="BUGZILLA"/>
		<reference ref_id="1163860" ref_url="https://bugzilla.suse.com/1163860" source="BUGZILLA"/>
		<reference ref_id="1163861" ref_url="https://bugzilla.suse.com/1163861" source="BUGZILLA"/>
		<reference ref_id="1163862" ref_url="https://bugzilla.suse.com/1163862" source="BUGZILLA"/>
		<reference ref_id="1163863" ref_url="https://bugzilla.suse.com/1163863" source="BUGZILLA"/>
		<reference ref_id="1163867" ref_url="https://bugzilla.suse.com/1163867" source="BUGZILLA"/>
		<reference ref_id="1163869" ref_url="https://bugzilla.suse.com/1163869" source="BUGZILLA"/>
		<reference ref_id="1163880" ref_url="https://bugzilla.suse.com/1163880" source="BUGZILLA"/>
		<reference ref_id="1163971" ref_url="https://bugzilla.suse.com/1163971" source="BUGZILLA"/>
		<reference ref_id="1164051" ref_url="https://bugzilla.suse.com/1164051" source="BUGZILLA"/>
		<reference ref_id="1164069" ref_url="https://bugzilla.suse.com/1164069" source="BUGZILLA"/>
		<reference ref_id="1164098" ref_url="https://bugzilla.suse.com/1164098" source="BUGZILLA"/>
		<reference ref_id="1164115" ref_url="https://bugzilla.suse.com/1164115" source="BUGZILLA"/>
		<reference ref_id="1164314" ref_url="https://bugzilla.suse.com/1164314" source="BUGZILLA"/>
		<reference ref_id="1164315" ref_url="https://bugzilla.suse.com/1164315" source="BUGZILLA"/>
		<reference ref_id="1164388" ref_url="https://bugzilla.suse.com/1164388" source="BUGZILLA"/>
		<reference ref_id="1164471" ref_url="https://bugzilla.suse.com/1164471" source="BUGZILLA"/>
		<reference ref_id="1164598" ref_url="https://bugzilla.suse.com/1164598" source="BUGZILLA"/>
		<reference ref_id="1164632" ref_url="https://bugzilla.suse.com/1164632" source="BUGZILLA"/>
		<reference ref_id="1164705" ref_url="https://bugzilla.suse.com/1164705" source="BUGZILLA"/>
		<reference ref_id="1164712" ref_url="https://bugzilla.suse.com/1164712" source="BUGZILLA"/>
		<reference ref_id="1164727" ref_url="https://bugzilla.suse.com/1164727" source="BUGZILLA"/>
		<reference ref_id="1164728" ref_url="https://bugzilla.suse.com/1164728" source="BUGZILLA"/>
		<reference ref_id="1164729" ref_url="https://bugzilla.suse.com/1164729" source="BUGZILLA"/>
		<reference ref_id="1164730" ref_url="https://bugzilla.suse.com/1164730" source="BUGZILLA"/>
		<reference ref_id="1164731" ref_url="https://bugzilla.suse.com/1164731" source="BUGZILLA"/>
		<reference ref_id="1164732" ref_url="https://bugzilla.suse.com/1164732" source="BUGZILLA"/>
		<reference ref_id="1164733" ref_url="https://bugzilla.suse.com/1164733" source="BUGZILLA"/>
		<reference ref_id="1164734" ref_url="https://bugzilla.suse.com/1164734" source="BUGZILLA"/>
		<reference ref_id="1164735" ref_url="https://bugzilla.suse.com/1164735" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14615" ref_url="https://www.suse.com/security/cve/CVE-2019-14615/" source="CVE"/>
		<reference ref_id="CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896/" source="CVE"/>
		<reference ref_id="CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897/" source="CVE"/>
		<reference ref_id="CVE-2019-15213" ref_url="https://www.suse.com/security/cve/CVE-2019-15213/" source="CVE"/>
		<reference ref_id="CVE-2019-16746" ref_url="https://www.suse.com/security/cve/CVE-2019-16746/" source="CVE"/>
		<reference ref_id="CVE-2019-16994" ref_url="https://www.suse.com/security/cve/CVE-2019-16994/" source="CVE"/>
		<reference ref_id="CVE-2019-18808" ref_url="https://www.suse.com/security/cve/CVE-2019-18808/" source="CVE"/>
		<reference ref_id="CVE-2019-19036" ref_url="https://www.suse.com/security/cve/CVE-2019-19036/" source="CVE"/>
		<reference ref_id="CVE-2019-19045" ref_url="https://www.suse.com/security/cve/CVE-2019-19045/" source="CVE"/>
		<reference ref_id="CVE-2019-19051" ref_url="https://www.suse.com/security/cve/CVE-2019-19051/" source="CVE"/>
		<reference ref_id="CVE-2019-19054" ref_url="https://www.suse.com/security/cve/CVE-2019-19054/" source="CVE"/>
		<reference ref_id="CVE-2019-19066" ref_url="https://www.suse.com/security/cve/CVE-2019-19066/" source="CVE"/>
		<reference ref_id="CVE-2019-19318" ref_url="https://www.suse.com/security/cve/CVE-2019-19318/" source="CVE"/>
		<reference ref_id="CVE-2019-19319" ref_url="https://www.suse.com/security/cve/CVE-2019-19319/" source="CVE"/>
		<reference ref_id="CVE-2019-19332" ref_url="https://www.suse.com/security/cve/CVE-2019-19332/" source="CVE"/>
		<reference ref_id="CVE-2019-19338" ref_url="https://www.suse.com/security/cve/CVE-2019-19338/" source="CVE"/>
		<reference ref_id="CVE-2019-19447" ref_url="https://www.suse.com/security/cve/CVE-2019-19447/" source="CVE"/>
		<reference ref_id="CVE-2019-19523" ref_url="https://www.suse.com/security/cve/CVE-2019-19523/" source="CVE"/>
		<reference ref_id="CVE-2019-19526" ref_url="https://www.suse.com/security/cve/CVE-2019-19526/" source="CVE"/>
		<reference ref_id="CVE-2019-19527" ref_url="https://www.suse.com/security/cve/CVE-2019-19527/" source="CVE"/>
		<reference ref_id="CVE-2019-19532" ref_url="https://www.suse.com/security/cve/CVE-2019-19532/" source="CVE"/>
		<reference ref_id="CVE-2019-19533" ref_url="https://www.suse.com/security/cve/CVE-2019-19533/" source="CVE"/>
		<reference ref_id="CVE-2019-19535" ref_url="https://www.suse.com/security/cve/CVE-2019-19535/" source="CVE"/>
		<reference ref_id="CVE-2019-19537" ref_url="https://www.suse.com/security/cve/CVE-2019-19537/" source="CVE"/>
		<reference ref_id="CVE-2019-19767" ref_url="https://www.suse.com/security/cve/CVE-2019-19767/" source="CVE"/>
		<reference ref_id="CVE-2019-19927" ref_url="https://www.suse.com/security/cve/CVE-2019-19927/" source="CVE"/>
		<reference ref_id="CVE-2019-19965" ref_url="https://www.suse.com/security/cve/CVE-2019-19965/" source="CVE"/>
		<reference ref_id="CVE-2019-19966" ref_url="https://www.suse.com/security/cve/CVE-2019-19966/" source="CVE"/>
		<reference ref_id="CVE-2019-20054" ref_url="https://www.suse.com/security/cve/CVE-2019-20054/" source="CVE"/>
		<reference ref_id="CVE-2019-20095" ref_url="https://www.suse.com/security/cve/CVE-2019-20095/" source="CVE"/>
		<reference ref_id="CVE-2019-20096" ref_url="https://www.suse.com/security/cve/CVE-2019-20096/" source="CVE"/>
		<reference ref_id="CVE-2020-2732" ref_url="https://www.suse.com/security/cve/CVE-2020-2732/" source="CVE"/>
		<reference ref_id="CVE-2020-7053" ref_url="https://www.suse.com/security/cve/CVE-2020-7053/" source="CVE"/>
		<reference ref_id="CVE-2020-8428" ref_url="https://www.suse.com/security/cve/CVE-2020-8428/" source="CVE"/>
		<reference ref_id="CVE-2020-8648" ref_url="https://www.suse.com/security/cve/CVE-2020-8648/" source="CVE"/>
		<reference ref_id="CVE-2020-8992" ref_url="https://www.suse.com/security/cve/CVE-2020-8992/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-8992: An issue was discovered in ext4_protect_reserved_inode in fs/ext4/block_validity.c that allowed attackers to cause a soft lockup via a crafted journal size (bnc#1164069).
- CVE-2020-8648: There was a use-after-free vulnerability in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bnc#1162928).
- CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c. It did not check the length of variable elements in a beacon head, leading to a buffer overflow (bnc#1152107).
- CVE-2020-8428: There was a use-after-free bug in fs/namei.c, which allowed local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9 (bnc#1162109).
- CVE-2019-19045: A memory leak in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c allowed attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7 (bnc#1161522).
- CVE-2019-16994: A memory leak existed in sit_init_net() in net/ipv6/sit.c which might have caused denial of service, aka CID-07f12b26e21a (bnc#1161523).
- CVE-2019-19054: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c allowed attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b (bnc#1161518).
- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bnc#1157157).
- CVE-2019-14897: A stack-based buffer overflow was found in the Marvell WiFi driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bnc#1157155).
- CVE-2020-7053: There was a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c (bnc#1160966).
- CVE-2019-19318: Mounting a crafted btrfs image twice could have caused a use-after-free (bnc#1158026).
- CVE-2019-19036: An issue discovered in btrfs_root_node in fs/btrfs/ctree.c allowed a NULL pointer dereference because rcu_dereference(root-&gt;node) can be zero (bnc#1157692).
- CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures for some Intel(R) Processors (bnc#1160195).
- CVE-2019-19965: There was a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5 (bnc#1159911).
- CVE-2019-19927: A slab-out-of-bounds read access could have been caused when mounting a crafted f2fs filesystem image and performing some operations on it, in drivers/gpu/drm/ttm/ttm_page_alloc.c (bnc#1160147).
- CVE-2019-20095: Several memory leaks were found in drivers/net/wireless/marvell/mwifiex/cfg80211.c, aka CID-003b686ace82 (bnc#1159909).
- CVE-2019-20054: There was a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e (bnc#1159910).
- CVE-2019-20096: There was a memory leak in __feat_register_sp() in net/dccp/feat.c, aka CID-1d3ff0950e2b (bnc#1159908).
- CVE-2019-19966: There was a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that could have caused a denial of service, aka CID-dea37a972655 (bnc#1159841).
- CVE-2019-19447: Mounting a crafted ext4 filesystem image, performing some operations, and unmounting could have led to a use-after-free in fs/ext4/super.c (bnc#1158819).
- CVE-2019-19319: A slab-out-of-bounds write access could have occured when setxattr was called after mounting of a specially crafted ext4 image (bnc#1158021).
- CVE-2019-19767: There were multiple use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163 (bnc#1159297).
- CVE-2019-18808: A memory leak in drivers/crypto/ccp/ccp-ops.c allowed attackers to cause a denial of service (memory consumption), aka CID-128c66429247 (bnc#1156259).
- CVE-2019-19066: A memory leak in drivers/scsi/bfa/bfad_attr.c allowed attackers to cause a denial of service (memory consumption), aka CID-0e62395da2bd (bnc#1157303).
- CVE-2019-19051: A memory leak in drivers/net/wimax/i2400m/op-rfkill.c allowed attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7 (bnc#1159024).
- CVE-2019-19338: There was an incomplete fix for an issue with Transactional Synchronisation Extensions in the KVM code (bsc#1158954).
- CVE-2019-19332: An out-of-bounds memory write issue was found in the way the KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could have used this flaw to crash the system (bnc#1158827).
- CVE-2019-19537: There was a race condition bug that could be caused by a malicious USB character device, aka CID-303911cfc5b9. (bsc#1158904).
- CVE-2019-19535: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042 (bsc#1158903).
- CVE-2019-19527: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e (bsc#1158900).
- CVE-2019-19526: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af3aa57a098 (bsc#1158893).
- CVE-2019-19533: There was an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464 (bsc#1158834).
- CVE-2019-19532: There were multiple out-of-bounds write bugs that can be caused by a malicious USB HID device, aka CID-d9d4b1e46d95 (bsc#1158824).
- CVE-2019-19523: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79 (bsc#1158823).
- CVE-2019-15213: A use-after-free bug caused by a malicious USB device was found in drivers/media/usb/dvb-usb/dvb-usb-init.c (bsc#1146544).
- CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L1 resources (bsc#1163971).


The following non-security bugs were fixed:

- 6pack,mkiss: fix possible deadlock (bsc#1051510).
- ACPI / APEI: Do not wait to serialise with oops messages when panic()ing (bsc#1051510).
- ACPI / APEI: Switch estatus pool to use vmalloc memory (bsc#1051510).
- ACPI / LPSS: Ignore acpi_device_fix_up_power() return value (bsc#1051510).
- ACPI / video: Add force_none quirk for Dell OptiPlex 9020M (bsc#1051510).
- ACPI / watchdog: Fix init failure with overlapping register regions (bsc#1162557).
- ACPI / watchdog: Set default timeout in probe (bsc#1162557).
- ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data() (bsc#1051510).
- ACPI: fix acpi_find_child_device() invocation in acpi_preset_companion() (bsc#1051510).
- ACPI: OSL: only free map once in osl.c (bsc#1051510).
- ACPI: PM: Avoid attaching ACPI PM domain to certain devices (bsc#1051510).
- ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 (bsc#1051510).
- ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards (bsc#1051510).
- ACPI: watchdog: Allow disabling WDAT at boot (bsc#1162557).
- af_packet: set defaule value for tmo (bsc#1051510).
- ALSA: control: remove useless assignment in .info callback of PCM chmap element (git-fixes).
- ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
- ALSA: echoaudio: simplify get_audio_levels (bsc#1051510).
- ALSA: fireface: fix return value in error path of isochronous resources reservation (bsc#1051510).
- ALSA: hda - Add docking station support for Lenovo Thinkpad T420s (git-fixes).
- ALSA: hda - Apply sync-write workaround to old Intel platforms, too (bsc#1111666).
- ALSA: hda - constify and cleanup static NodeID tables (bsc#1111666).
- ALSA: hda - Downgrade error message for single-cmd fallback (git-fixes).
- ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen (git-fixes).
- ALSA: hda/analog - Minor optimization for SPDIF mux connections (git-fixes).
- ALSA: hda/ca0132 - Avoid endless loop (git-fixes).
- ALSA: hda/ca0132 - Fix work handling in delayed HP detection (git-fixes).
- ALSA: hda/ca0132 - Keep power on during processing DSP response (git-fixes).
- ALSA: hda/hdmi - Add new pci ids for AMD GPU display audio (git-fixes).
- ALSA: hda/hdmi - add retry logic to parse_intel_hdmi() (git-fixes).
- ALSA: hda/hdmi - Clean up Intel platform-specific fixup checks (bsc#1111666).
- ALSA: hda/hdmi - fix atpx_present when CLASS is not VGA (bsc#1051510).
- ALSA: hda/hdmi - Fix duplicate unref of pci_dev (bsc#1051510).
- ALSA: hda/hdmi - fix vgaswitcheroo detection for AMD (git-fixes).
- ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker (bsc#1111666).
- ALSA: hda/realtek - Add headset Mic no shutup for ALC283 (bsc#1051510).
- ALSA: hda/realtek - Add Headset Mic supported for HP cPC (bsc#1111666).
- ALSA: hda/realtek - Add new codec supported for ALCS1200A (bsc#1111666).
- ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen (bsc#1111666).
- ALSA: hda/realtek - Apply mic mute LED quirk for Dell E7xx laptops, too (bsc#1111666).
- ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 (git-fixes).
- ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC (bsc#1111666).
- ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G (git-fixes).
- ALSA: hda/realtek - Fix silent output on MSI-GL73 (git-fixes).
- ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported (bsc#1111666).
- ALSA: hda/realtek - Line-out jack does not work on a Dell AIO (bsc#1051510).
- ALSA: hda/realtek - More constifications (bsc#1111666).
- ALSA: hda/realtek - Set EAPD control to default for ALC222 (bsc#1111666).
- ALSA: hda: Add Clevo W65_67SB the power_save blacklist (git-fixes).
- ALSA: hda: Add JasperLake PCI ID and codec vid (bsc#1111666).
- ALSA: hda: Clear RIRB status before reading WP (bsc#1111666).
- ALSA: hda: constify copied structure (bsc#1111666).
- ALSA: hda: Constify snd_kcontrol_new items (bsc#1111666).
- ALSA: hda: Constify snd_pci_quirk tables (bsc#1111666).
- ALSA: hda: correct kernel-doc parameter descriptions (bsc#1111666).
- ALSA: hda: hdmi - add Tigerlake support (bsc#1111666).
- ALSA: hda: hdmi - fix pin setup on Tigerlake (bsc#1111666).
- ALSA: hda: More constifications (bsc#1111666).
- ALSA: hda: patch_hdmi: remove warnings with empty body (bsc#1111666).
- ALSA: hda: patch_realtek: fix empty macro usage in if block (bsc#1111666).
- ALSA: hda: Reset stream if DMA RUN bit not cleared (bsc#1111666).
- ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs (git-fixes).
- ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code (bsc#1051510).
- ALSA: oxfw: fix return value in error path of isochronous resources reservation (bsc#1051510).
- ALSA: pcm: Avoid possible info leaks from PCM stream buffers (git-fixes).
- ALSA: pcm: oss: Avoid potential buffer overflows (git-fixes).
- ALSA: seq: Avoid concurrent access to queue flags (git-fixes).
- ALSA: seq: Fix concurrent access to queue current tick/time (git-fixes).
- ALSA: seq: Fix racy access for queue timer in proc read (bsc#1051510).
- ALSA: sh: Fix compile warning wrt const (git-fixes).
- ALSA: sh: Fix unused variable warnings (bsc#1111666).
- ALSA: usb-audio: Apply sample rate quirk for Audioengine D1 (git-fixes).
- ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 (bsc#1111666).
- ALSA: usb-audio: Fix endianess in descriptor validation (bsc#1111666).
- ALSA: usb-audio: fix set_format altsetting sanity check (bsc#1051510).
- ALSA: usb-audio: fix sync-ep altsetting sanity check (bsc#1051510).
- apparmor: fix unsigned len comparison with less than zero (git-fixes).
- ar5523: check NULL before memcpy() in ar5523_cmd() (bsc#1051510).
- arm64: Revert support for execute-only user mappings (bsc#1160218).
- ASoC: au8540: use 64-bit arithmetic instead of 32-bit (bsc#1051510).
- ASoC: compress: fix unsigned integer overflow check (bsc#1051510).
- ASoC: cs4349: Use PM ops 'cs4349_runtime_pm' (bsc#1051510).
- ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report (bsc#1051510).
- ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1 (bsc#1051510).
- ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI (bsc#1111666).
- ASoC: sun8i-codec: Fix setting DAI data format (git-fixes).
- ASoC: wm8962: fix lambda value (git-fixes).
- ata: ahci: Add shutdown to freeze hardware resources of ahci (bsc#1164388).
- ath10k: Correct the DMA direction for management tx buffers (bsc#1111666).
- ath10k: fix fw crash by moving chip reset after napi disabled (bsc#1051510).
- ath10k: pci: Fix comment on ath10k_pci_dump_memory_sram (bsc#1111666).
- ath10k: pci: Only dump ATH10K_MEM_REGION_TYPE_IOREG when safe (bsc#1111666).
- ath6kl: Fix off by one error in scan completion (bsc#1051510).
- ath9k: fix storage endpoint lookup (git-fixes).
- atl1e: checking the status of atl1e_write_phy_reg (bsc#1051510).
- audit: Allow auditd to set pid to 0 to end auditing (bsc#1158094).
- batman-adv: Fix DAT candidate selection on little endian systems (bsc#1051510).
- bcache: add code comment bch_keylist_pop() and bch_keylist_pop_front() (bsc#1163762).
- bcache: add code comments for state-&gt;pool in __btree_sort() (bsc#1163762).
- bcache: add code comments in bch_btree_leaf_dirty() (bsc#1163762).
- bcache: add cond_resched() in __bch_cache_cmp() (bsc#1163762).
- bcache: add idle_max_writeback_rate sysfs interface (bsc#1163762).
- bcache: add more accurate error messages in read_super() (bsc#1163762).
- bcache: add readahead cache policy options via sysfs interface (bsc#1163762).
- bcache: at least try to shrink 1 node in bch_mca_scan() (bsc#1163762).
- bcache: avoid unnecessary btree nodes flushing in btree_flush_write() (bsc#1163762).
- bcache: check return value of prio_read() (bsc#1163762).
- bcache: deleted code comments for dead code in bch_data_insert_keys() (bsc#1163762).
- bcache: do not export symbols (bsc#1163762).
- bcache: explicity type cast in bset_bkey_last() (bsc#1163762).
- bcache: fix a lost wake-up problem caused by mca_cannibalize_lock (bsc#1163762).
- bcache: Fix an error code in bch_dump_read() (bsc#1163762).
- bcache: fix deadlock in bcache_allocator (bsc#1163762).
- bcache: fix incorrect data type usage in btree_flush_write() (bsc#1163762).
- bcache: fix memory corruption in bch_cache_accounting_clear() (bsc#1163762).
- bcache: fix static checker warning in bcache_device_free() (bsc#1163762).
- bcache: ignore pending signals when creating gc and allocator thread (bsc#1163762, bsc#1112504).
- bcache: print written and keys in trace_bcache_btree_write (bsc#1163762).
- bcache: reap c-&gt;btree_cache_freeable from the tail in bch_mca_scan() (bsc#1163762).
- bcache: reap from tail of c-&gt;btree_cache in bch_mca_scan() (bsc#1163762).
- bcache: remove macro nr_to_fifo_front() (bsc#1163762).
- bcache: remove member accessed from struct btree (bsc#1163762).
- bcache: remove the extra cflags for request.o (bsc#1163762).
- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (bsc#1163762, bsc#1112504).
- bcma: remove set but not used variable 'sizel' (git-fixes).
- blk-mq: avoid sysfs buffer overflow with too many CPU cores (bsc#1159377).
- blk-mq: avoid sysfs buffer overflow with too many CPU cores (bsc#1163840).
- blk-mq: make sure that line break can be printed (bsc#1159377).
- blk-mq: make sure that line break can be printed (bsc#1164098).
- Bluetooth: Fix race condition in hci_release_sock() (bsc#1051510).
- Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading (bsc#1051510).
- bnxt: apply computed clamp value for coalece parameter (bsc#1104745).
- bnxt_en: Fix MSIX request logic for RDMA driver (bsc#1104745 ).
- bnxt_en: Return error if FW returns more data than dump length (bsc#1104745).
- bonding: fix active-backup transition after link failure (git-fixes).
- bonding: fix potential NULL deref in bond_update_slave_arr (bsc#1051510).
- bonding: fix slave stuck in BOND_LINK_FAIL state (networking-stable-19_11_10).
- bonding: fix state transition issue in link monitoring (networking-stable-19_11_10).
- bonding: fix unexpected IFF_BONDING bit unset (bsc#1051510).
- bpf, offload: Unlock on error in bpf_offload_dev_create() (bsc#1109837).
- bpf/sockmap: Read psock ingress_msg before sk_receive_queue (bsc#1083647).
- bpf/stackmap: Fix deadlock with rq_lock in bpf_get_stack() (bsc#1083647).
- bpf: add self-check logic to liveness analysis (bsc#1160618).
- bpf: add verifier stats and log_level bit 2 (bsc#1160618).
- bpf: Fix incorrect verifier simulation of ARSH under ALU32 (bsc#1083647).
- bpf: improve stacksafe state comparison (bco#1160618).
- bpf: improve verification speed by droping states (bsc#1160618).
- bpf: improve verification speed by not remarking live_read (bsc#1160618).
- bpf: improve verifier branch analysis (bsc#1160618).
- bpf: increase complexity limit and maximum program size (bsc#1160618).
- bpf: increase verifier log limit (bsc#1160618).
- bpf: Make use of probe_user_write in probe write helper (bsc#1083647).
- bpf: Reject indirect var_off stack access in raw mode (bsc#1160618).
- bpf: Reject indirect var_off stack access in unpriv mode (bco#1160618).
- bpf: Sanity check max value for var_off stack access (bco#1160618).
- bpf: skmsg, fix potential psock NULL pointer dereference (bsc#1109837).
- bpf: speed up stacksafe check (bco#1160618).
- bpf: Support variable offset stack access from helpers (bco#1160618).
- bpf: verifier: teach the verifier to reason about the BPF_JSET instruction (bco#1160618).
- brcmfmac: fix interface sanity check (git-fixes).
- brcmfmac: Fix memory leak in brcmf_p2p_create_p2pdev() (bsc#1111666).
- brcmfmac: Fix memory leak in brcmf_usbdev_qinit (git-fixes).
- brcmfmac: Fix use after free in brcmf_sdio_readframes() (git-fixes).
- brcmfmac: sdio: Fix OOB interrupt initialization on brcm43362 (bsc#1111666).
- brcmfmac: set F2 watermark to 256 for 4373 (bsc#1111666).
- brcmfmac: set SDIO F1 MesBusyCtrl for CYW4373 (bsc#1111666).
- btrfs: abort transaction after failed inode updates in create_subvol (bsc#1161936).
- btrfs: add missing extents release on file extent cluster relocation error (bsc#1159483).
- btrfs: avoid fallback to transaction commit during fsync of files with holes (bsc#1159569).
- btrfs: dev-replace: remove warning for unknown return codes when finished (dependency for bsc#1162067).
- btrfs: do not call synchronize_srcu() in inode_tree_del (bsc#1161934).
- btrfs: do not double lock the subvol_sem for rename exchange (bsc#1162943).
- btrfs: Ensure we trim ranges across block group boundary (bsc#1151910).
- btrfs: fix block group remaining RO forever after error during device replace (bsc#1160442).
- btrfs: fix btrfs_write_inode vs delayed iput deadlock (bsc#1154243).
- btrfs: fix infinite loop during fsync after rename operations (bsc#1163383).
- btrfs: fix infinite loop during nocow writeback due to race (bsc#1160804).
- btrfs: fix integer overflow in calc_reclaim_items_nr (bsc#1160433).
- btrfs: fix missing data checksums after replaying a log tree (bsc#1161931).
- btrfs: fix negative subv_writers counter and data space leak after buffered write (bsc#1160802).
- btrfs: fix race between adding and putting tree mod seq elements and nodes (bsc#1163384).
- btrfs: fix removal logic of the tree mod log that leads to use-after-free issues (bsc#1160803).
- btrfs: fix selftests failure due to uninitialized i_mode in test inodes (Fix for dependency of bsc#1157692).
- btrfs: handle ENOENT in btrfs_uuid_tree_iterate (bsc#1161937).
- btrfs: harden agaist duplicate fsid on scanned devices (bsc#1134973).
- btrfs: inode: Verify inode mode to avoid NULL pointer dereference (dependency for bsc#1157692).
- btrfs: make tree checker detect checksum items with overlapping ranges (bsc#1161931).
- btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it (dependency for bsc#1157692).
- btrfs: record all roots for rename exchange on a subvol (bsc#1161933).
- btrfs: relocation: fix reloc_root lifespan and access (bsc#1159588).
- btrfs: scrub: Require mandatory block group RO for dev-replace (bsc#1162067).
- btrfs: send, skip backreference walking for extents with many references (bsc#1162139).
- btrfs: simplify inode locking for RWF_NOWAIT (git-fixes).
- btrfs: skip log replay on orphaned roots (bsc#1161935).
- btrfs: tree-checker: Check chunk item at tree block read time (dependency for bsc#1157692).
- btrfs: tree-checker: Check level for leaves and nodes (dependency for bsc#1157692).
- btrfs: tree-checker: Enhance chunk checker to validate chunk profile (dependency for bsc#1157692).
- btrfs: tree-checker: Fix wrong check on max devid (fixes for dependency of bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in block_group_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_block_group_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_csum_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_dev_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_dir_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_extent_data_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_inode_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_leaf (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_leaf_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in chunk_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in dev_item_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in dir_item_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in file_extent_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in generic_err (dependency for bsc#1157692).
- btrfs: tree-checker: Make btrfs_check_chunk_valid() return EUCLEAN instead of EIO (dependency for bsc#1157692).
- btrfs: tree-checker: Make chunk item checker messages more readable (dependency for bsc#1157692).
- btrfs: tree-checker: Verify dev item (dependency for bsc#1157692).
- btrfs: tree-checker: Verify inode item (dependency for bsc#1157692).
- btrfs: volumes: Use more straightforward way to calculate map length (bsc#1151910).
- can, slip: Protect tty-&gt;disc_data in write_wakeup and close with RCU (bsc#1051510).
- can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs (bsc#1051510).
- can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open (bsc#1051510).
- can: gs_usb: gs_usb_probe(): use descriptors of current altsetting (bsc#1051510).
- can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling to irq mode (bsc#1051510).
- can: peak_usb: report bus recovery as well (bsc#1051510).
- can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error (bsc#1051510).
- can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error (bsc#1051510).
- can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on queue overflow or OOM (bsc#1051510).
- can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate error value in case of errors (bsc#1051510).
- can: slcan: Fix use-after-free Read in slcan_open (bsc#1051510).
- CDC-NCM: handle incomplete transfer of MTU (networking-stable-19_11_10).
- cdrom: respect device capabilities during opening action (boo#1164632).
- cfg80211/mac80211: make ieee80211_send_layer2_update a public function (bsc#1051510).
- cfg80211: check for set_wiphy_params (bsc#1051510).
- cfg80211: fix deadlocks in autodisconnect work (bsc#1111666).
- cfg80211: fix memory leak in cfg80211_cqm_rssi_update (bsc#1111666).
- cfg80211: fix page refcount issue in A-MSDU decap (bsc#1051510).
- cgroup,writeback: do not switch wbs immediately on dead wbs if the memcg is dead (bsc#1158645).
- cgroup: pids: use atomic64_t for pids-&gt;limit (bsc#1161514).
- chardev: Avoid potential use-after-free in 'chrdev_open()' (bsc#1163849).
- cifs: add support for flock (bsc#1144333).
- cifs: Close cached root handle only if it had a lease (bsc#1144333).
- cifs: Close open handle after interrupted close (bsc#1144333).
- cifs: close the shared root handle on tree disconnect (bsc#1144333).
- cifs: Do not miss cancelled OPEN responses (bsc#1144333).
- cifs: Fix lookup of root ses in DFS referral cache (bsc#1144333).
- cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333).
- cifs: fix mount option display for sec=krb5i (bsc#1161907).
- cifs: Fix mount options set in automount (bsc#1144333).
- cifs: Fix NULL pointer dereference in mid callback (bsc#1144333).
- cifs: Fix NULL-pointer dereference in smb2_push_mandatory_locks (bsc#1144333).
- cifs: Fix potential softlockups while refreshing DFS cache (bsc#1144333).
- cifs: Fix retrieval of DFS referrals in cifs_mount() (bsc#1144333).
- cifs: Fix use-after-free bug in cifs_reconnect() (bsc#1144333).
- cifs: Properly process SMB3 lease breaks (bsc#1144333).
- cifs: remove set but not used variables 'cinode' and 'netfid' (bsc#1144333).
- cifs: Respect O_SYNC and O_DIRECT flags during reconnect (bsc#1144333).
- clk: Do not try to enable critical clocks if prepare failed (bsc#1051510).
- clk: imx: clk-composite-8m: add lock to gate/mux (git-fixes).
- clk: mmp2: Fix the order of timer mux parents (bsc#1051510).
- clk: qcom: rcg2: Do not crash if our parent can't be found; return an error (bsc#1051510).
- clk: rockchip: fix I2S1 clock gate register for rk3328 (bsc#1051510).
- clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328 (bsc#1051510).
- clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering (bsc#1051510).
- clk: rockchip: fix rk3188 sclk_smc gate data (bsc#1051510).
- clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock (bsc#1051510).
- clk: sunxi: sun9i-mmc: Implement reset callback for reset controls (bsc#1051510).
- clk: tegra: Mark fuse clock as critical (bsc#1051510).
- clocksource/drivers/bcm2835_timer: Fix memory leak of timer (bsc#1051510).
- clocksource: Prevent double add_timer_on() for watchdog_timer (bsc#1051510).
- closures: fix a race on wakeup from closure_sync (bsc#1163762).
- configfs_register_group() shouldn't be (and isn't) called in rmdirable parts (bsc#1051510).
- copy/pasted 'Recommends:' instead of 'Provides:', 'Obsoletes:' and 'Conflicts:
- Cover up kABI breakage due to DH key verification (bsc#1155331).
- crypto: af_alg - Use bh_lock_sock in sk_destruct (bsc#1051510).
- crypto: api - Check spawn-&gt;alg under lock in crypto_drop_spawn (bsc#1051510).
- crypto: api - Fix race condition in crypto_spawn_alg (bsc#1051510).
- crypto: atmel-sha - fix error handling when setting hmac key (bsc#1051510).
- crypto: caam/qi2 - fix typo in algorithm's driver name (bsc#1111666).
- crypto: ccp - fix uninitialized list head (bsc#1051510).
- crypto: chelsio - fix writing tfm flags to wrong place (bsc#1051510).
- crypto: dh - add public key verification test (bsc#1155331).
- crypto: dh - fix calculating encoded key size (bsc#1155331).
- crypto: dh - fix memory leak (bsc#1155331).
- crypto: dh - update test for public key verification (bsc#1155331).
- crypto: DRBG - add FIPS 140-2 CTRNG for noise source (bsc#1155334).
- crypto: ecdh - add public key verification test (bsc#1155331).
- crypto: ecdh - fix typo of P-192 b value (bsc#1155331).
- crypto: mxc-scc - fix build warnings on ARM64 (bsc#1051510).
- crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (bsc#1051510).
- crypto: picoxcell - adjust the position of tasklet_init and fix missed tasklet_kill (bsc#1051510).
- crypto: reexport crypto_shoot_alg() (bsc#1051510, kABI fix).
- cxgb4: request the TX CIDX updates to status page (bsc#1127371).
- dma-buf: Fix memory leak in sync_file_merge() (git-fixes).
- dma-mapping: fix return type of dma_set_max_seg_size() (bsc#1051510).
- dmaengine: coh901318: Fix a double-lock bug (bsc#1051510).
- dmaengine: coh901318: Remove unused variable (bsc#1051510).
- dmaengine: Fix access to uninitialized dma_slave_caps (bsc#1051510).
- Documentation: Document arm64 kpti control (bsc#1162623).
- drivers/base/memory.c: cache blocks in radix tree to accelerate lookup (bsc#1159955 ltc#182993).
- drivers/base/memory.c: do not access uninitialized memmaps in soft_offline_page_store() (bsc#1051510).
- drivers/base/platform.c: kmemleak ignore a known leak (bsc#1051510).
- drivers/regulator: fix a missing check of return value (bsc#1051510).
- drm/amd/display: Retrain dongles when SINK_COUNT becomes non-zero (bsc#1111666).
- drm/amd/powerplay: remove set but not used variable 'us_mvdd' (bsc#1111666).
- drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc (bsc#1111666).
- drm/amdgpu: add function parameter description in 'amdgpu_device_set_cg_state' (bsc#1111666).
- drm/amdgpu: add function parameter description in 'amdgpu_gart_bind' (bsc#1051510).
- drm/amdgpu: fix bad DMA from INTERRUPT_CNTL2 (bsc#1114279)
- drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2) (bsc#1111666).
- drm/amdgpu: remove 4 set but not used variable in amdgpu_atombios_get_connector_info_from_object_table (bsc#1051510).
- drm/amdgpu: remove always false comparison in 'amdgpu_atombios_i2c_process_i2c_ch' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'amdgpu_connector' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'dig' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'dig_connector' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'invalid' (bsc#1111666).
- drm/amdgpu: remove set but not used variable 'mc_shared_chmap' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'mc_shared_chmap' from 'gfx_v6_0.c' and 'gfx_v7_0.c' (bsc#1051510).
- drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ (bsc#1051510).
- drm/fb-helper: Round up bits_per_pixel if possible (bsc#1051510).
- drm/i810: Prevent underflow in ioctl (bsc#1114279)
- drm/i915/gvt: Pin vgpu dma address before using (bsc#1112178)
- drm/i915/gvt: set guest display buffer as readonly (bsc#1112178)
- drm/i915/gvt: use vgpu lock for active state setting (bsc#1112178)
- drm/i915/perf: add missing delay for OA muxes configuration (bsc#1111666).
- drm/i915: Add missing include file &lt;linux/math64.h&gt; (bsc#1051510).
- drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (bsc#1111666).
- drm/i915: Fix pid leak with banned clients (bsc#1114279)
- drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set (bsc#1111666).
- drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV (bsc#1111666).
- drm/i915: Reacquire priolist cache after dropping the engine lock (bsc#1129770).
- drm/i915: Sanity check mmap length against object size (bsc#1111666).
- drm/msm: include linux/sched/task.h (bsc#1112178)
- drm/mst: Fix MST sideband up-reply failure handling (bsc#1051510).
- drm/nouveau/bar/gf100: ensure BAR is mapped (bsc#1111666).
- drm/nouveau/bar/nv50: check bar1 vmm return value (bsc#1111666).
- drm/nouveau/mmu: qualify vmm during dtor (bsc#1111666).
- drm/nouveau/secboot/gm20b: initialize pointer in gm20b_secboot_new() (bsc#1051510).
- drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler (bsc#1051510).
- drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028)
- drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028)
- drm/radeon: fix r1xx/r2xx register checker for POT textures (bsc#1114279)
- drm/rect: Avoid division by zero (bsc#1111666).
- drm/rect: update kerneldoc for drm_rect_clip_scaled() (bsc#1111666).
- drm/rockchip: lvds: Fix indentation of a #define (bsc#1051510).
- drm/rockchip: Round up _before_ giving to the clock framework (bsc#1114279)
- drm/sun4i: hdmi: Remove duplicate cleanup calls (bsc#1113956)
- drm/sun4i: tcon: Set min division of TCON0_DCLK to 1 (bsc#1111666).
- drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model (bsc#1111666).
- drm/ttm: ttm_tt_init_fields() can be static (bsc#1111666).
- drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add (bsc#1051510).
- drm: bridge: dw-hdmi: constify copied structure (bsc#1051510).
- drm: limit to INT_MAX in create_blob ioctl (bsc#1051510).
- drm: meson: venc: cvbs: fix CVBS mode matching (bsc#1051510).
- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable (bsc#1111666).
- drm: panel-lvds: Potential Oops in probe error handling (bsc#1114279)
- e1000e: Add support for Comet Lake (bsc#1158533).
- e1000e: Add support for Tiger Lake (bsc#1158533).
- e1000e: Increase pause and refresh time (bsc#1158533).
- e100: Fix passing zero to 'PTR_ERR' warning in e100_load_ucode_wait (bsc#1051510).
- ecryptfs_lookup_interpose(): lower_dentry-&gt;d_inode is not stable (bsc#1158646).
- ecryptfs_lookup_interpose(): lower_dentry-&gt;d_parent is not stable either (bsc#1158647).
- EDAC/ghes: Fix locking and memory barrier issues (bsc#1114279). EDAC/ghes: Do not warn when incrementing refcount on 0 (bsc#1114279).
- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632).
- enic: prevent waking up stopped tx queues over watchdog reset (bsc#1133147).
- exit: panic before exit_mm() on global init exit (bsc#1161549).
- ext2: check err when partial != NULL (bsc#1163859).
- ext4, jbd2: ensure panic when aborting with zero errno (bsc#1163853).
- ext4: check for directory entries too close to block end (bsc#1163861).
- ext4: fix a bug in ext4_wait_for_tail_page_commit (bsc#1163841).
- ext4: fix checksum errors with indexed dirs (bsc#1160979).
- ext4: fix deadlock allocating crypto bounce page from mempool (bsc#1163842).
- ext4: Fix mount failure with quota configured as module (bsc#1164471).
- ext4: fix mount failure with quota configured as module (bsc#1164471).
- ext4: fix punch hole for inline_data file systems (bsc#1158640).
- ext4: improve explanation of a mount failure caused by a misconfigured kernel (bsc#1163843).
- ext4: update direct I/O read lock pattern for IOCB_NOWAIT (bsc#1158639).
- extcon: max8997: Fix lack of path setting in USB device mode (bsc#1051510).
- firestream: fix memory leaks (bsc#1051510).
- fix autofs regression caused by follow_managed() changes (bsc#1159271).
- fix dget_parent() fastpath race (bsc#1159271).
- fix partial checked out tree build ... so that bisection does not break.
- fix the locking in dcache_readdir() and friends (bsc#1123328).
- fjes: fix missed check in fjes_acpi_add (bsc#1051510).
- fs/namei.c: fix missing barriers when checking positivity (bsc#1159271).
- fs/namei.c: pull positivity check into follow_managed() (bsc#1159271).
- fs/open.c: allow opening only regular files during execve() (bsc#1163845).
- fs: cifs: Fix atime update check vs mtime (bsc#1144333).
- fscrypt: do not set policy for a dead directory (bsc#1163846).
- ftrace: Add comment to why rcu_dereference_sched() is open coded (git-fixes).
- ftrace: Avoid potential division by zero in function profiler (bsc#1160784).
- ftrace: Protect ftrace_graph_hash with ftrace_sync (git-fixes).
- genirq/proc: Return proper error code when irq_set_affinity() fails (bnc#1105392).
- genirq: Prevent NULL pointer dereference in resend_irqs() (bsc#1051510).
- genirq: Properly pair kobject_del() with kobject_add() (bsc#1051510).
- gpio: Fix error message on out-of-range GPIO in lookup table (bsc#1051510).
- gtp: avoid zero size hashtable (networking-stable-20_01_01).
- gtp: do not allow adding duplicate tid and ms_addr pdp context (networking-stable-20_01_01).
- gtp: fix an use-after-free in ipv4_pdp_find() (networking-stable-20_01_01).
- gtp: fix wrong condition in gtp_genl_dump_pdp() (networking-stable-20_01_01).
- HID: doc: fix wrong data structure reference for UHID_OUTPUT (bsc#1051510).
- HID: hidraw, uhid: Always report EPOLLOUT (bsc#1051510).
- HID: hidraw: Fix returning EPOLLOUT from hidraw_poll (bsc#1051510).
- HID: intel-ish-hid: fixes incorrect error handling (bsc#1051510).
- HID: uhid: Fix returning EPOLLOUT from uhid_char_poll (bsc#1051510).
- hidraw: Return EPOLLOUT from hidraw_poll (bsc#1051510).
- hotplug/drc-info: Add code to search ibm,drc-info property (bsc#1157480 ltc#181028).
- hv_netvsc: Fix offset usage in netvsc_send_table() (bsc#1164598).
- hv_netvsc: Fix send_table offset in case of a host bug (bsc#1164598).
- hv_netvsc: Fix tx_table init in rndis_set_subchannel() (bsc#1164598).
- hv_netvsc: Fix unwanted rx_table reset (bsc#1164598).
- hwmon: (adt7475) Make volt2reg return same reg as reg2volt input (bsc#1051510).
- hwmon: (core) Do not use device managed functions for memory allocations (bsc#1051510).
- hwmon: (k10temp) Add support for AMD family 17h, model 70h CPUs (bsc#1163206).
- hwmon: (nct7802) Fix voltage limits to wrong registers (bsc#1051510).
- hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions (bsc#1051510).
- hwrng: stm32 - fix unbalanced pm_runtime_enable (bsc#1051510).
- i2c: imx: do not print error message on probe defer (bsc#1051510).
- IB/hfi1: Do not cancel unused work item (bsc#1114685 ).
- IB/mlx5: Fix steering rule of drop and count (bsc#1103991 ).
- IB/mlx5: Remove dead code (bsc#1103991).
- ibmveth: Detect unsupported packets before sending to the hypervisor (bsc#1159484 ltc#182983).
- ibmvnic: Bound waits for device queries (bsc#1155689 ltc#182047).
- ibmvnic: Fix completion structure initialization (bsc#1155689 ltc#182047).
- ibmvnic: Serialize device queries (bsc#1155689 ltc#182047).
- ibmvnic: Terminate waiting device threads after loss of service (bsc#1155689 ltc#182047).
- ice: fix stack leakage (bsc#1118661).
- idr: Fix idr_alloc_u32 on 32-bit systems (bsc#1051510).
- iio: adc: max9611: Fix too short conversion time delay (bsc#1051510).
- iio: buffer: align the size of scan bytes to size of the largest element (bsc#1051510).
- inet: protect against too small mtu values (networking-stable-19_12_16).
- Input: aiptek - fix endpoint sanity check (bsc#1051510).
- Input: cyttsp4_core - fix use after free bug (bsc#1051510).
- Input: goodix - add upside-down quirk for Teclast X89 tablet (bsc#1051510).
- Input: gtco - fix endpoint sanity check (bsc#1051510).
- Input: keyspan-remote - fix control-message timeouts (bsc#1051510).
- Input: pegasus_notetaker - fix endpoint sanity check (bsc#1051510).
- Input: pm8xxx-vib - fix handling of separate enable register (bsc#1051510).
- Input: rmi_f54 - read from FIFO in 32 byte blocks (bsc#1051510).
- Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register (bsc#1051510).
- Input: sur40 - fix interface sanity checks (bsc#1051510).
- Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus (bsc#1051510).
- Input: synaptics-rmi4 - do not increment rmiaddr for SMBus transfers (bsc#1051510).
- Input: synaptics-rmi4 - simplify data read in rmi_f54_work (bsc#1051510).
- iomap: Fix pipe page leakage during splicing (bsc#1158651).
- iommu/amd: Fix IOMMU perf counter clobbering during init (bsc#1162617).
- iommu/arm-smmu-v3: Populate VMID field for CMDQ_OP_TLBI_NH_VA (bsc#1164314).
- iommu/io-pgtable-arm: Fix race handling in split_blk_unmap() (bsc#1164115).
- iommu/iova: Init the struct iova to fix the possible memleak (bsc#1160469).
- iommu/mediatek: Correct the flush_iotlb_all callback (bsc#1160470).
- iommu/vt-d: Unlink device if failed to add to group (bsc#1160756).
- iommu: Remove device link to group on failure (bsc#1160755).
- ipmi: Do not allow device module unload when in use (bsc#1154768).
- ipv4: Fix table id reference in fib_sync_down_addr (networking-stable-19_11_10).
- iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop (git-fixes).
- iwlwifi: change monitor DMA to be coherent (bsc#1161243).
- iwlwifi: clear persistence bit according to device family (bsc#1111666).
- iwlwifi: do not throw error when trying to remove IGTK (bsc#1051510).
- iwlwifi: mvm: fix NVM check for 3168 devices (bsc#1051510).
- iwlwifi: mvm: force TCM re-evaluation on TCM resume (bsc#1111666).
- iwlwifi: mvm: Send non offchannel traffic via AP sta (bsc#1051510).
- iwlwifi: mvm: synchronize TID queue removal (bsc#1051510).
- iwlwifi: pcie: fix erroneous print (bsc#1111666).
- iwlwifi: trans: Clear persistence bit when starting the FW (bsc#1111666).
- jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal (bsc#1163862).
- jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer (bsc#1163836).
- jbd2: Fix possible overflow in jbd2_log_space_left() (bsc#1163860).
- jbd2: make sure ESHUTDOWN to be recorded in the journal superblock (bsc#1163863).
- jbd2: move the clearing of b_modified flag to the journal_unmap_buffer() (bsc#1163880).
- jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record (bsc#1163852).
- kABI fix for 'ipmi: Do not allow device module unload when in use' (bsc#1154768).
- kABI fixup for alloc_dax_region (bsc#1158071,bsc#1160678).
- kABI workaround for can/skb.h inclusion (bsc#1051510).
- kABI/severities: Whitelist rpaphp_get_drc_props (bsc#1157480 ltc#181028).
- kABI: add _q suffix to exports that take struct dh (bsc#1155331).
- kABI: protect struct sctp_ep_common (kabi).
- kABI: Protest new fields in BPF structs (bsc#1160618).
- kconfig: fix broken dependency in randconfig-generated .config (bsc#1051510).
- kernel-binary.spec.in: do not recommend firmware for kvmsmall and azure flavor (boo#1161360).
- kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail (bsc#1160787).
- kernfs: Fix range checks in kernfs_get_target_path (bsc#1051510).
- kexec: bail out upon SIGKILL when allocating memory (git-fixes).
- KVM: Clean up __kvm_gfn_to_hva_cache_init() and its callers (bsc#1133021).
- KVM: fix spectrev1 gadgets (bsc#1164705).
- KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails (bsc#1061840).
- KVM: PPC: Book3S PR: Fix -Werror=return-type build failure (bsc#1061840).
- KVM: PPC: Book3S PR: Free shared page if mmu initialization fails (bsc#1061840).
- KVM: s390: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl (git-fixes).
- KVM: s390: Test for bad access register and size at the start of S390_MEM_OP (git-fixes).
- KVM: SVM: Override default MMIO mask if memory encryption is enabled (bsc#1162618).
- KVM: x86: Host feature SSBD does not imply guest feature SPEC_CTRL_SSBD (bsc#1160476).
- KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks (bsc#1164734).
- KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks (bsc#1164728).
- KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks (bsc#1164729).
- KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF attacks (bsc#1164712).
- KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks (bsc#1164730).
- KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c (bsc#1164733).
- KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks (bsc#1164731).
- KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks (bsc#1164732).
- KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks (bsc#1164735).
- KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks (bsc#1164705).
- KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks (bsc#1164727).
- KVM: x86: Remove a spurious export of a static function (bsc#1158954).
- lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop (bsc#1050549).
- leds: Allow to call led_classdev_unregister() unconditionally (bsc#1161674).
- leds: class: ensure workqueue is initialized before setting brightness (bsc#1161674).
- lib/scatterlist.c: adjust indentation in __sg_alloc_table (bsc#1051510).
- lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more() (bsc#1051510).
- lib: crc64: include &lt;linux/crc64.h&gt; for 'crc64_be' (bsc#1163762).
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (bsc#1153535).
- libnvdimm/pfn: Account for PAGE_SIZE &gt; info-block-size in nd_pfn_init() (bsc#1127682 bsc#1153535 ltc#175033 ltc#181834).
- libnvdimm: Fix devm_nsio_enable() kabi (bsc#1153535).
- livepatch/samples/selftest: Use klp_shadow_alloc() API correctly (bsc#1071995).
- livepatch/selftest: Clean up shadow variable names and type (bsc#1071995).
- locking/rwsem: Prevent decrement of reader count before increment (bsc#1050549).
- loop: fix no-unmap write-zeroes request behavior (bsc#1158637).
- mac80211: Do not send Layer 2 Update frame before authorization (bsc#1051510).
- mac80211: fix ieee80211_txq_setup_flows() failure path (bsc#1111666).
- mac80211: fix station inactive_time shortly after boot (bsc#1051510).
- mac80211: Fix TKIP replay protection immediately after key setup (bsc#1051510).
- mac80211: mesh: restrict airtime metric to peered established plinks (bsc#1051510).
- macvlan: do not assume mac_header is set in macvlan_broadcast() (bsc#1051510).
- macvlan: use skb_reset_mac_header() in macvlan_queue_xmit() (bsc#1051510).
- mailbox: mailbox-test: fix null pointer if no mmio (bsc#1051510).
- md/raid0: Fix buffer overflow at debug print (bsc#1164051).
- media/v4l2-core: set pages dirty upon releasing DMA buffers (bsc#1051510).
- media: af9005: uninitialized variable printked (bsc#1051510).
- media: cec.h: CEC_OP_REC_FLAG_ values were swapped (bsc#1051510).
- media: cec: CEC 2.0-only bcast messages were ignored (git-fixes).
- media: cec: report Vendor ID after initialization (bsc#1051510).
- media: digitv: do not continue if remote control state can't be read (bsc#1051510).
- media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0 (bsc#1051510).
- media: exynos4-is: fix wrong mdev and v4l2 dev order in error path (git-fixes).
- media: gspca: zero usb_buf (bsc#1051510).
- media: iguanair: fix endpoint sanity check (bsc#1051510).
- media: ov6650: Fix control handler not freed on init error (git-fixes).
- media: ov6650: Fix crop rectangle alignment not passed back (git-fixes).
- media: ov6650: Fix incorrect use of JPEG colorspace (git-fixes).
- media: pulse8-cec: fix lost cec_transmit_attempt_done() call.
- media: pulse8-cec: return 0 when invalidating the logical address (bsc#1051510).
- media: stkwebcam: Bugfix for wrong return values (bsc#1051510).
- media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors (bsc#1051510).
- media: uvcvideo: Fix error path in control parsing failure (git-fixes).
- media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE (bsc#1051510).
- media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT (bsc#1051510).
- media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments (bsc#1051510).
- mei: bus: prefix device names on bus with the bus name (bsc#1051510).
- mfd: da9062: Fix watchdog compatible string (bsc#1051510).
- mfd: dln2: More sanity checking for endpoints (bsc#1051510).
- mfd: rn5t618: Mark ADC control register volatile (bsc#1051510).
- missing escaping of backslashes in macro expansions Fixes: f3b74b0ae86b ('rpm/kernel-subpackage-spec: Unify dependency handling.') Fixes: 3fd22e219f77 ('rpm/kernel-subpackage-spec: Fix empty Recommends tag (bsc#1143959)')
- mlxsw: spectrum_qdisc: Ignore grafting of invisible FIFO (bsc#1112374).
- mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel (bsc#1112374).
- mm, memory_hotplug: do not clear numa_node association after hot_remove (bnc#1115026).
- mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock (bsc#1159394).
- mm: memory_hotplug: use put_device() if device_register fail (bsc#1159955 ltc#182993).
- mmc: mediatek: fix CMD_TA to 2 for MT8173 HS200/HS400 mode (bsc#1051510).
- mmc: sdhci-of-esdhc: fix P2020 errata handling (bsc#1051510).
- mmc: sdhci-of-esdhc: Revert 'mmc: sdhci-of-esdhc: add erratum A-009204 support' (bsc#1051510).
- mmc: sdhci: Add a quirk for broken command queuing (git-fixes).
- mmc: sdhci: fix minimum clock rate for v3 controller (bsc#1051510).
- mmc: sdhci: Workaround broken command queuing on Intel GLK (git-fixes).
- mmc: spi: Toggle SPI polarity, do not hardcode it (bsc#1051510).
- mmc: tegra: fix SDR50 tuning override (bsc#1051510).
- moduleparam: fix parameter description mismatch (bsc#1051510).
- mod_devicetable: fix PHY module format (networking-stable-19_12_28).
- mqprio: Fix out-of-bounds access in mqprio_dump (bsc#1109837).
- mtd: fix mtd_oobavail() incoherent returned value (bsc#1051510).
- mwifiex: debugfs: correct histogram spacing, formatting (bsc#1051510).
- mwifiex: delete unused mwifiex_get_intf_num() (bsc#1111666).
- mwifiex: drop most magic numbers from mwifiex_process_tdls_action_frame() (git-fixes).
- mwifiex: fix potential NULL dereference and use after free (bsc#1051510).
- mwifiex: update set_mac_address logic (bsc#1111666).
- namei: only return -ECHILD from follow_dotdot_rcu() (bsc#1163851).
- nbd: prevent memory leak (bsc#1158638).
- net, sysctl: Fix compiler warning when only cBPF is present (bsc#1109837).
- net/ibmvnic: Fix typo in retry check (bsc#1155689 ltc#182047).
- net/mlx4_en: fix mlx4 ethtool -N insertion (networking-stable-19_11_25).
- net/mlx4_en: Fix wrong limitation for number of TX rings (bsc#1103989).
- net/mlx5: Accumulate levels for chains prio namespaces (bsc#1103990).
- net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq (bsc#1046303).
- net/mlx5: Update the list of the PCI supported devices (bsc#1127611).
- net/mlx5e: Fix set vf link state error flow (networking-stable-19_11_25).
- net/mlx5e: Fix SFF 8472 eeprom length (git-fixes).
- net/mlx5e: Query global pause state before setting prio2buffer (bsc#1103990).
- net/mlxfw: Fix out-of-memory error in mfa2 flash burning (bsc#1051858).
- net/sched: act_pedit: fix WARN() in the traffic path (networking-stable-19_11_25).
- net: add sendmsg_locked and sendpage_locked to af_inet6 (bsc#1144162).
- net: bridge: deny dev_set_mac_address() when unregistering (networking-stable-19_12_16).
- net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size() (git-fixes).
- net: dst: Force 4-byte alignment of dst_metrics (networking-stable-19_12_28).
- net: ena: fix napi handler misbehavior when the napi budget is zero (networking-stable-20_01_01).
- net: ethernet: octeon_mgmt: Account for second possible VLAN header (networking-stable-19_11_10).
- net: ethernet: ti: cpsw: fix extra rx interrupt (networking-stable-19_12_16).
- net: fix data-race in neigh_event_send() (networking-stable-19_11_10).
- net: hisilicon: Fix a BUG trigered by wrong bytes_compl (networking-stable-19_12_28).
- net: hns3: fix ETS bandwidth validation bug (bsc#1104353 ).
- net: nfc: nci: fix a possible sleep-in-atomic-context bug in nci_uart_tty_receive() (networking-stable-19_12_28).
- net: phy: at803x: Change error to EINVAL for invalid MAC (bsc#1051510).
- net: phy: broadcom: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: Check against net_device being NULL (bsc#1051510).
- net: phy: dp83867: Set up RGMII TX delay (bsc#1051510).
- net: phy: Fix not to call phy_resume() if PHY is not attached (bsc#1051510).
- net: phy: Fix the register offsets in Broadcom iProc mdio mux driver (bsc#1051510).
- net: phy: fixed_phy: Fix fixed_phy not checking GPIO (bsc#1051510).
- net: phy: marvell: clear wol event before setting it (bsc#1051510).
- net: phy: marvell: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: meson-gxl: check phy_write return value (bsc#1051510).
- net: phy: micrel: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: mscc: read 'vsc8531, edge-slowdown' as an u32 (bsc#1051510).
- net: phy: mscc: read 'vsc8531,vddmac' as an u32 (bsc#1051510).
- net: phy: xgene: disable clk on error paths (bsc#1051510).
- net: phy: xgmiitorgmii: Check phy_driver ready before accessing (bsc#1051510).
- net: phy: xgmiitorgmii: Check read_status results (bsc#1051510).
- net: phy: xgmiitorgmii: Support generic PHY status read (bsc#1051510).
- net: psample: fix skb_over_panic (networking-stable-19_12_03).
- net: qlogic: Fix error paths in ql_alloc_large_buffers() (networking-stable-19_12_28).
- net: rtnetlink: prevent underflows in do_setvfinfo() (networking-stable-19_11_25).
- net: sched: correct flower port blocking (git-fixes).
- net: sched: ensure opts_len &lt;= IP_TUNNEL_OPTS_MAX in act_tunnel_key (bsc#1109837).
- net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues (bsc#1109837).
- net: sched: fix `tc -s class show` no bstats on class with nolock subqueues (networking-stable-19_12_03).
- net: usb: lan78xx: Fix suspend/resume PHY register access error (networking-stable-19_12_28).
- net: usb: lan78xx: limit size of local TSO packets (bsc#1051510).
- net: usb: qmi_wwan: add support for DW5821e with eSIM support (networking-stable-19_11_10).
- net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules (networking-stable-19_11_18).
- netfilter: nf_queue: enqueue skbs with NULL dst (git-fixes).
- new helper: lookup_positive_unlocked() (bsc#1159271).
- NFC: fdp: fix incorrect free object (networking-stable-19_11_10).
- NFC: pn533: fix bulk-message timeout (bsc#1051510).
- NFC: pn544: Adjust indentation in pn544_hci_check_presence (git-fixes).
- NFC: st21nfca: fix double free (networking-stable-19_11_10).
- nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info (bsc#1163774).
- ocfs2: fix panic due to ocfs2_wq is null (bsc#1158644).
- ocfs2: fix passing zero to 'PTR_ERR' warning (bsc#1158649).
- openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() (networking-stable-19_12_03).
- openvswitch: remove another BUG_ON() (networking-stable-19_12_03).
- openvswitch: support asymmetric conntrack (networking-stable-19_12_16).
- orinoco_usb: fix interface sanity check (git-fixes).
- PCI/IOV: Fix memory leak in pci_iov_add_virtfn() (git-fixes).
- PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity() (bsc#1051510).
- PCI/switchtec: Fix vep_vector_number ioread width (bsc#1051510).
- PCI: Add DMA alias quirk for Intel VCA NTB (bsc#1051510).
- PCI: Do not disable bridge BARs when assigning bus resources (bsc#1051510).
- PCI: pciehp: Avoid returning prematurely from sysfs requests (git-fixes).
- PCI: rpaphp: Add drc-info support for hotplug slot registration (bsc#1157480 ltc#181028).
- PCI: rpaphp: Annotate and correctly byte swap DRC properties (bsc#1157480 ltc#181028).
- PCI: rpaphp: Avoid a sometimes-uninitialized warning (bsc#1157480 ltc#181028).
- PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-info (bsc#1157480 ltc#181028).
- PCI: rpaphp: Do not rely on firmware feature to imply drc-info support (bsc#1157480 ltc#181028).
- PCI: rpaphp: Fix up pointer to first drc-info entry (bsc#1157480 ltc#181028).
- percpu: Separate decrypted varaibles anytime encryption can be enabled (bsc#1114279).
- perf/x86/intel: Fix inaccurate period in context switch for auto-reload (bsc#1164315).
- phy: qualcomm: Adjust indentation in read_poll_timeout (bsc#1051510).
- pinctrl: cherryview: Fix irq_valid_mask calculation (bsc#1111666).
- pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues (bsc#1051510).
- pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELF_B and SD1_CLK_B (bsc#1051510).
- pinctrl: xway: fix gpio-hog related boot issues (bsc#1051510).
- pktcdvd: remove warning on attempting to register non-passthrough dev (bsc#1051510).
- platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 (bsc#1051510).
- platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size (bsc#1051510).
- platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer (bsc#1051510).
- platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes (bsc#1051510).
- platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table (bsc#1051510).
- PM / AVS: SmartReflex: NULL check before some freeing functions is not needed (bsc#1051510).
- PM / Domains: Deal with multiple states but no governor in genpd (bsc#1051510).
- power: supply: ltc2941-battery-gauge: fix use-after-free (bsc#1051510).
- powerpc/archrandom: fix arch_get_random_seed_int() (bsc#1065729).
- powerpc/irq: fix stack overflow verification (bsc#1065729).
- powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (bsc#1065729).
- powerpc/mm: Remove kvm radix prefetch workaround for Power9 DD2.2 (bsc#1061840).
- powerpc/papr_scm: Do not enable direct map for a region by default (bsc#1129551).
- powerpc/papr_scm: Fix leaking 'bus_desc.provider_name' in some paths (bsc#1142685 ltc#179509).
- powerpc/pkeys: remove unused pkey_allows_readwrite (bsc#1065729).
- powerpc/powernv: Disable native PCIe port management (bsc#1065729).
- powerpc/pseries/hotplug-memory: Change rc variable to bool (bsc#1065729).
- powerpc/pseries/lparcfg: Fix display of Maximum Memory (bsc#1162028 ltc#181740).
- powerpc/pseries/mobility: notify network peers after migration (bsc#1152631 ltc#181798).
- powerpc/pseries/vio: Fix iommu_table use-after-free refcount warning (bsc#1065729).
- powerpc/pseries: Add cpu DLPAR support for drc-info property (bsc#1157480 ltc#181028).
- powerpc/pseries: Advance pfn if section is not present in lmb_is_removable() (bsc#1065729).
- powerpc/pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce for DDW (bsc#1065729).
- powerpc/pseries: Drop pointless static qualifier in vpa_debugfs_init() (git-fixes).
- powerpc/pseries: Enable support for ibm,drc-info property (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix bad drc_index_start value parsing of drc-info entry (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix drc-info mappings of logical cpus to drc-index (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix vector5 in ibm architecture vector table (bsc#1157480 ltc#181028).
- powerpc/pseries: Revert support for ibm,drc-info devtree property (bsc#1157480 ltc#181028).
- powerpc/security: Fix debugfs data leak on 32-bit (bsc#1065729).
- powerpc/tm: Fix clearing MSR[TS] in current when reclaiming on signal delivery (bsc#1118338 ltc#173734).
- powerpc/tools: Do not quote $objdump in scripts (bsc#1065729).
- powerpc/xive: Discard ESB load value when interrupt is invalid (bsc#1085030).
- powerpc/xive: Skip ioremap() of ESB pages for LSI interrupts (bsc#1085030).
- powerpc/xmon: do not access ASDR in VMs (bsc#1065729).
- powerpc: Allow 64bit VDSO __kernel_sync_dicache to work across ranges &gt;4GB (bnc#1151927 5.3.17).
- powerpc: Allow flush_icache_range to work across ranges &gt;4GB (bnc#1151927 5.3.17).
- powerpc: avoid adjusting memory_limit for capture kernel memory reservation (bsc#1140025 ltc#176086).
- powerpc: Enable support for ibm,drc-info devtree property (bsc#1157480 ltc#181028).
- powerpc: Fix vDSO clock_getres() (bsc#1065729).
- powerpc: reserve memory for capture kernel after hugepages init (bsc#1140025 ltc#176086).
- ppp: Adjust indentation into ppp_async_input (git-fixes).
- prevent active file list thrashing due to refault detection (VM Performance, bsc#1156286).
- pseries/drc-info: Search DRC properties for CPU indexes (bsc#1157480 ltc#181028).
- pstore/ram: Write new dumps to start of recycled zones (bsc#1051510).
- pwm: Clear chip_data in pwm_put() (bsc#1051510).
- pwm: clps711x: Fix period calculation (bsc#1051510).
- pwm: omap-dmtimer: Remove PWM chip in .remove before making it unfunctional (git-fixes).
- pwm: Remove set but not set variable 'pwm' (git-fixes).
- pxa168fb: Fix the function used to release some memory in an error (bsc#1114279)
- qede: Disable hardware gro when xdp prog is installed (bsc#1086314 bsc#1086313 bsc#1086301 ).
- qede: Fix multicast mac configuration (networking-stable-19_12_28).
- qede: fix NULL pointer deref in __qede_remove() (networking-stable-19_11_10).
- qmi_wwan: Add support for Quectel RM500Q (bsc#1051510).
- quota: Check that quota is not dirty before release (bsc#1163858).
- quota: fix livelock in dquot_writeback_dquots (bsc#1163857).
- r8152: add missing endpoint sanity check (bsc#1051510).
- r8152: get default setting of WOL before initializing (bsc#1051510).
- random: move FIPS continuous test to output functions (bsc#1155334).
- RDMA/bnxt_re: Avoid freeing MR resources if dereg fails (bsc#1050244).
- RDMA/bnxt_re: Enable SRIOV VF support on Broadcom's 57500 adapter series (bsc#1154916).
- RDMA/bnxt_re: Fix chip number validation Broadcom's Gen P5 series (bsc#1157895).
- RDMA/bnxt_re: Fix missing le16_to_cpu (bsc#1157895).
- RDMA/hns: Bugfix for qpc/cqc timer configuration (bsc#1104427 bsc#1126206).
- RDMA/hns: Correct the value of srq_desc_size (bsc#1104427 ).
- RDMA/hns: Fix to support 64K page for srq (bsc#1104427 ).
- RDMA/hns: Prevent memory leaks of eq-&gt;buf_list (bsc#1104427 ).
- README.BRANCH: Removing myself from the maintainer list
- README.BRANCH: Update the branch name to cve/linux-4.12
- regulator: Fix return value of _set_load() stub (bsc#1051510).
- regulator: rk808: Lower log level on optional GPIOs being not available (bsc#1051510).
- regulator: rn5t618: fix module aliases (bsc#1051510).
- regulator: tps65910: fix a missing check of return value (bsc#1051510).
- reiserfs: Fix memory leak of journal device string (bsc#1163867).
- reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling (bsc#1163869).
- reset: fix reset_control_ops kerneldoc comment (bsc#1051510).
- resource: fix locking in find_next_iomem_res() (bsc#1114279).
- Revert 'ath10k: fix DMA related firmware crashes on multiple devices' (git-fixes).
- Revert 'Input: synaptics-rmi4 - do not increment rmiaddr for SMBus transfers' (bsc#1051510).
- Revert 'locking/pvqspinlock: Do not wait if vCPU is preempted' (bsc#1050549).
- Revert 'mmc: sdhci: Fix incorrect switch to HS mode' (bsc#1051510).
- rpm/kabi.pl: support new (&gt;=5.4) Module.symvers format (new symbol namespace field)
- rpm/kernel-binary.spec.in: Conflict with too old powerpc-utils (jsc#ECO-920, jsc#SLE-11054, jsc#SLE-11322).
- rpm/kernel-binary.spec.in: Replace Novell with SUSE
- rpm/kernel-subpackage-spec: Exclude kernel-firmware recommends (bsc#1143959) For reducing the dependency on kernel-firmware in sub packages
- rpm/kernel-subpackage-spec: Fix empty Recommends tag (bsc#1143959)
- rpm/kernel-subpackage-spec: fix kernel-default-base build There were some issues with recent changes to subpackage dependencies handling:
- rpm/kernel-subpackage-spec: Unify dependency handling.
- rpm/modules.fips: update module list (bsc#1157853)
- rsi_91x_usb: fix interface sanity check (git-fixes).
- rt2800: remove errornous duplicate condition (git-fixes).
- rtc: cmos: Stop using shared IRQ (bsc#1051510).
- rtc: dt-binding: abx80x: fix resistance scale (bsc#1051510).
- rtc: hym8563: Return -EINVAL if the time is known to be invalid (bsc#1051510).
- rtc: max8997: Fix the returned value in case of error in 'max8997_rtc_read_alarm()' (bsc#1051510).
- rtc: msm6242: Fix reading of 10-hour digit (bsc#1051510).
- rtc: pcf8523: set xtal load capacitance from DT (bsc#1051510).
- rtc: s35390a: Change buf's type to u8 in s35390a_init (bsc#1051510).
- rtl818x: fix potential use after free (bsc#1051510).
- rtl8xxxu: fix interface sanity check (git-fixes).
- rtlwifi: Fix MAX MPDU of VHT capability (git-fixes).
- rtlwifi: Remove redundant semicolon in wifi.h (git-fixes).
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (bsc#1111666).
- s390/qeth: clean up page frag creation (git-fixes).
- s390/qeth: consolidate skb allocation (git-fixes).
- s390/qeth: ensure linear access to packet headers (git-fixes).
- s390/qeth: guard against runt packets (git-fixes).
- sched/fair: Add tmp_alone_branch assertion (bnc#1156462).
- sched/fair: Fix insertion in rq-&gt;leaf_cfs_rq_list (bnc#1156462).
- sched/fair: Fix O(nr_cgroups) in the load balancing path (bnc#1156462).
- sched/fair: Optimize update_blocked_averages() (bnc#1156462).
- sched/fair: WARN() and refuse to set buddy when !se-&gt;on_rq (bsc#1158132).
- scsi: lpfc: fix build failure with DEBUGFS disabled (bsc#1154601).
- scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (bsc#1158013).
- scsi: qla2xxx: Add D-Port Diagnostic reason explanation logs (bsc#1158013).
- scsi: qla2xxx: Added support for MPI and PEP regions for ISP28XX (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Cleanup unused async_logout_done (bsc#1158013).
- scsi: qla2xxx: Consolidate fabric scan (bsc#1158013).
- scsi: qla2xxx: Correct fcport flags handling (bsc#1158013).
- scsi: qla2xxx: Correctly retrieve and interpret active flash region (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Fix a NULL pointer dereference in an error path (bsc#1157966 bsc#1158013 bsc#1157424).
- scsi: qla2xxx: Fix fabric scan hang (bsc#1158013).
- scsi: qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Fix mtcp dump collection failure (bsc#1158013).
- scsi: qla2xxx: Fix RIDA Format-2 (bsc#1158013).
- scsi: qla2xxx: Fix stuck login session using prli_pend_timer (bsc#1158013).
- scsi: qla2xxx: Fix stuck session in GNL (bsc#1158013).
- scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type (bsc#1158013).
- scsi: qla2xxx: Fix unbound NVME response length (bsc#1157966 bsc#1158013 bsc#1157424).
- scsi: qla2xxx: Fix update_fcport for current_topology (bsc#1158013).
- scsi: qla2xxx: Improve readability of the code that handles qla_flt_header (bsc#1158013).
- scsi: qla2xxx: Remove defer flag to indicate immeadiate port loss (bsc#1158013).
- scsi: qla2xxx: Update driver version to 10.01.00.22-k (bsc#1158013).
- scsi: qla2xxx: Use common routine to free fcport struct (bsc#1158013).
- scsi: qla2xxx: Use get_unaligned_*() instead of open-coding these functions (bsc#1158013).
- scsi: zfcp: trace channel log even for FCP command responses (git-fixes).
- sctp: cache netns in sctp_ep_common (networking-stable-19_12_03).
- sctp: fully initialize v4 addr in some functions (networking-stable-19_12_28).
- serial: 8250_bcm2835aux: Fix line mismatch on driver unbind (bsc#1051510).
- serial: ifx6x60: add missed pm_runtime_disable (bsc#1051510).
- serial: max310x: Fix tx_empty() callback (bsc#1051510).
- serial: pl011: Fix DMA -&gt;flush_buffer() (bsc#1051510).
- serial: serial_core: Perform NULL checks for break_ctl ops (bsc#1051510).
- serial: stm32: fix transmit_chars when tx is stopped (bsc#1051510).
- sfc: Only cancel the PPS workqueue if it exists (networking-stable-19_11_25).
- sfc: Remove 'PCIE error reporting unavailable' (bsc#1161472).
- sh_eth: check sh_eth_cpu_data::dual_port when dumping registers (bsc#1051510).
- sh_eth: fix dumping ARSTR (bsc#1051510).
- sh_eth: fix invalid context bug while calling auto-negotiation by ethtool (bsc#1051510).
- sh_eth: fix invalid context bug while changing link options by ethtool (bsc#1051510).
- sh_eth: fix TSU init on SH7734/R8A7740 (bsc#1051510).
- sh_eth: fix TXALCR1 offsets (bsc#1051510).
- sh_eth: TSU_QTAG0/1 registers the same as TSU_QTAGM0/1 (bsc#1051510).
- smb3: Fix crash in SMB2_open_init due to uninitialized field in compounding path (bsc#1144333).
- smb3: Fix persistent handles reconnect (bsc#1144333).
- smb3: fix refcount underflow warning on unmount when no directory leases (bsc#1144333).
- smb3: remove confusing dmesg when mounting with encryption ('seal') (bsc#1144333).
- soc/tegra: fuse: Correct straps' address for older Tegra124 device trees (bsc#1051510).
- soc: renesas: rcar-sysc: Add goto to of_node_put() before return (bsc#1051510).
- soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot (bsc#1051510).
- spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch (bsc#1051510).
- spi: omap2-mcspi: Set FIFO DMA trigger level to word length (bsc#1051510).
- spi: tegra114: clear packed bit for unpacked mode (bsc#1051510).
- spi: tegra114: configure dma burst size to fifo trig level (bsc#1051510).
- spi: tegra114: fix for unpacked mode transfers (bsc#1051510).
- spi: tegra114: flush fifos (bsc#1051510).
- spi: tegra114: terminate dma and reset on transfer timeout (bsc#1051510).
- sr_vendor: support Beurer GL50 evo CD-on-a-chip devices (boo#1164632).
- staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 (bsc#1051510).
- Staging: iio: adt7316: Fix i2c data reading, set the data field (bsc#1051510).
- staging: rtl8188eu: fix interface sanity check (bsc#1051510).
- staging: rtl8192e: fix potential use after free (bsc#1051510).
- staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids (bsc#1051510).
- staging: rtl8723bs: Drop ACPI device ids (bsc#1051510).
- staging: vt6656: correct packet types for CTS protect, mode (bsc#1051510).
- staging: vt6656: Fix false Tx excessive retries reporting (bsc#1051510).
- staging: vt6656: use NULLFUCTION stack on mac80211 (bsc#1051510).
- staging: wlan-ng: ensure error return is actually returned (bsc#1051510).
- stm class: Fix a double free of stm_source_device (bsc#1051510).
- stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (bsc#1088810, bsc#1161702).
- stop_machine: Atomically queue and wake stopper threads (bsc#1088810, bsc#1161702).
- stop_machine: Disable preemption after queueing stopper threads (bsc#1088810, bsc#1161702).
- stop_machine: Disable preemption when waking two stopper threads (bsc#1088810, bsc#1161702).
- tcp: clear tp-&gt;packets_out when purging write queue (bsc#1160560).
- tcp: do not send empty skb from tcp_write_xmit() (networking-stable-20_01_01).
- tcp: exit if nothing to retransmit on RTO timeout (bsc#1160560, stable 4.14.159).
- tcp: md5: fix potential overestimation of TCP option space (networking-stable-19_12_16).
- thermal: Fix deadlock in thermal thermal_zone_device_check (bsc#1051510).
- tipc: fix a missing check of genlmsg_put (bsc#1051510).
- tipc: fix link name length check (bsc#1051510).
- tipc: fix memory leak in tipc_nl_compat_publ_dump (bsc#1051510).
- tipc: fix skb may be leaky in tipc_link_input (bsc#1051510).
- tracing: Annotate ftrace_graph_hash pointer with __rcu (git-fixes).
- tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu (git-fixes).
- tracing: Fix tracing_stat return values in error handling paths (git-fixes).
- tracing: Fix very unlikely race of registering two stat tracers (git-fixes).
- tracing: Have the histogram compare functions convert to u64 first (bsc#1160210).
- tracing: xen: Ordered comparison of function pointers (git-fixes).
- tty/serial: atmel: Add is_half_duplex helper (bsc#1051510).
- tty: n_hdlc: fix build on SPARC (bsc#1051510).
- tty: serial: msm_serial: Fix lockup for sysrq and oops (bsc#1051510).
- tty: vt: keyboard: reject invalid keycodes (bsc#1051510).
- uaccess: Add non-pagefault user-space write function (bsc#1083647).
- ubifs: Correctly initialize c-&gt;min_log_bytes (bsc#1158641).
- ubifs: do not trigger assertion on invalid no-key filename (bsc#1163850).
- ubifs: Fix deadlock in concurrent bulk-read and writepage (bsc#1163856).
- ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag (bsc#1163855).
- ubifs: Limit the number of pages in shrink_liability (bsc#1158643).
- ubifs: Reject unsupported ioctl flags explicitly (bsc#1163844).
- udp: fix integer overflow while computing available space in sk_rcvbuf (networking-stable-20_01_01).
- usb-storage: Disable UAS on JMicron SATA enclosure (bsc#1051510).
- usb: adutux: fix interface sanity check (bsc#1051510).
- usb: Allow USB device to be warm reset in suspended state (bsc#1051510).
- usb: atm: ueagle-atm: add missing endpoint check (bsc#1051510).
- usb: chipidea: host: Disable port power only if previously enabled (bsc#1051510).
- usb: core: fix check for duplicate endpoints (git-fixes).
- usb: core: hub: Improved device recognition on remote wakeup (bsc#1051510).
- usb: core: urb: fix URB structure initialization function (bsc#1051510).
- usb: documentation: flags on usb-storage versus UAS (bsc#1051510).
- usb: dwc3: debugfs: Properly print/set link state for HS (bsc#1051510).
- usb: dwc3: do not log probe deferrals; but do log other error codes (bsc#1051510).
- usb: dwc3: ep0: Clear started flag on completion (bsc#1051510).
- usb: dwc3: turn off VBUS when leaving host mode (bsc#1051510).
- usb: EHCI: Do not return -EPIPE when hub is disconnected (git-fixes).
- usb: gadget: f_ecm: Use atomic_t to track in-flight request (bsc#1051510).
- usb: gadget: f_ncm: Use atomic_t to track in-flight request (bsc#1051510).
- usb: gadget: legacy: set max_speed to super-speed (bsc#1051510).
- usb: gadget: pch_udc: fix use after free (bsc#1051510).
- usb: gadget: u_serial: add missing port entry locking (bsc#1051510).
- usb: gadget: Zero ffs_io_data (bsc#1051510).
- usb: host: xhci-hub: fix extra endianness conversion (bsc#1051510).
- usb: idmouse: fix interface sanity checks (bsc#1051510).
- usb: mon: Fix a deadlock in usbmon between mmap and read (bsc#1051510).
- usb: mtu3: fix dbginfo in qmu_tx_zlp_error_handler (bsc#1051510).
- usb: musb: dma: Correct parameter passed to IRQ handler (bsc#1051510).
- usb: musb: fix idling for suspend after disconnect interrupt (bsc#1051510).
- usb: roles: fix a potential use after free (git-fixes).
- usb: serial: ch341: handle unbound port at reset_resume (bsc#1051510).
- usb: serial: ftdi_sio: add device IDs for U-Blox C099-F9P (bsc#1051510).
- usb: serial: io_edgeport: add missing active-port sanity check (bsc#1051510).
- usb: serial: io_edgeport: fix epic endpoint lookup (bsc#1051510).
- usb: serial: io_edgeport: handle unbound ports on URB completion (bsc#1051510).
- usb: serial: io_edgeport: use irqsave() in USB's complete callback (bsc#1051510).
- usb: serial: ir-usb: add missing endpoint sanity check (bsc#1051510).
- usb: serial: ir-usb: fix IrLAP framing (bsc#1051510).
- usb: serial: ir-usb: fix link-speed handling (bsc#1051510).
- usb: serial: keyspan: handle unbound ports (bsc#1051510).
- usb: serial: opticon: fix control-message timeouts (bsc#1051510).
- usb: serial: option: Add support for Quectel RM500Q (bsc#1051510).
- usb: serial: option: add support for Quectel RM500Q in QDL mode (git-fixes).
- usb: serial: option: add Telit ME910G1 0x110a composition (git-fixes).
- usb: serial: option: add ZLP support for 0x1bc7/0x9010 (git-fixes).
- usb: serial: quatech2: handle unbound ports (bsc#1051510).
- usb: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx (bsc#1051510).
- usb: serial: suppress driver bind attributes (bsc#1051510).
- usb: typec: tcpci: mask event interrupts when remove driver (bsc#1051510).
- usb: uas: heed CAPACITY_HEURISTICS (bsc#1051510).
- usb: uas: honor flag to avoid CAPACITY16 (bsc#1051510).
- usb: xhci: Fix build warning seen with CONFIG_PM=n (bsc#1051510).
- usb: xhci: only set D3hot for pci device (bsc#1051510).
- usbip: Fix error path of vhci_recv_ret_submit() (git-fixes).
- usbip: Fix receive error in vhci-hcd when using scatter-gather (bsc#1051510).
- vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset == -1 (bsc#1051510).
- vhost/vsock: accept only packets with the right dst_cid (networking-stable-20_01_01).
- video: backlight: Add devres versions of of_find_backlight (bsc#1090888) Taken for 6010831dde5.
- video: backlight: Add of_find_backlight helper in backlight.c (bsc#1090888) Taken for 6010831dde5.
- watchdog: max77620_wdt: fix potential build errors (bsc#1051510).
- watchdog: rn5t618_wdt: fix module aliases (bsc#1051510).
- watchdog: sama5d4: fix WDD value to be always set to max (bsc#1051510).
- watchdog: wdat_wdt: fix get_timeleft call for wdat_wdt (bsc#1162557).
- wireless: fix enabling channel 12 for custom regulatory domain (bsc#1051510).
- wireless: wext: avoid gcc -O3 warning (bsc#1051510).
- workqueue: Fix pwq ref leak in rescuer_thread() (bsc#1160211).
- x86/amd_nb: Add PCI device IDs for family 17h, model 70h (bsc#1163206).
- x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR (bsc#1162619).
- x86/intel_rdt: Split resource group removal in two (bsc#1112178).
- x86/intel_rdt: Split resource group removal in two (bsc#1112178).
- x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI (bsc#1114279).
- x86/mce/AMD: Allow any CPU to initialize the smca_banks array (bsc#1114279).
- x86/MCE/AMD: Allow Reserved types to be overwritten in smca_banks (bsc#1114279).
- x86/MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure() (bsc#1114279).
- x86/mce: Fix possibly incorrect severity calculation on AMD (bsc#1114279).
- x86/resctrl: Check monitoring static key in the MBM overflow handler (bsc#1114279).
- x86/resctrl: Fix a deadlock due to inaccurate reference (bsc#1112178).
- x86/resctrl: Fix a deadlock due to inaccurate reference (bsc#1112178).
- x86/resctrl: Fix an imbalance in domain_remove_cpu() (bsc#1114279).
- x86/resctrl: Fix potential memory leak (bsc#1114279).
- x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup (bsc#1112178).
- x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup (bsc#1112178).
- x86/resctrl: Fix use-after-free when deleting resource groups (bsc#1114279).
- x86/speculation: Fix incorrect MDS/TAA mitigation status (bsc#1114279).
- x86/speculation: Fix redundant MDS mitigation message (bsc#1114279).
- xen-blkfront: switch kcalloc to kvcalloc for large array allocation (bsc#1160917).
- xen/balloon: Support xend-based toolstack take two (bsc#1065600).
- xen/blkback: Avoid unmapping unmapped grant pages (bsc#1065600).
- xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk (bsc#1065600).
- xen: Enable interrupts when calling _cond_resched() (bsc#1065600).
- xfrm: Fix transport mode skb control buffer usage (bsc#1161552).
- xfs: Fix tail rounding in xfs_alloc_file_space() (bsc#1161087, bsc#1153917).
- xfs: Sanity check flags of Q_XQUOTARM call (bsc#1158652).
- xhci: Fix memory leak in xhci_add_in_port() (bsc#1051510).
- xhci: fix USB3 device initiated resume race with roothub autosuspend (bsc#1051510).
- xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour (bsc#1051510).
- xhci: Increase STS_HALT timeout in xhci_suspend() (bsc#1051510).
- xhci: make sure interrupts are restored to correct state (bsc#1051510).
- zd1211rw: fix storage endpoint lookup (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-02"/>
	<updated date="2020-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046303">SUSE bug 1046303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051858">SUSE bug 1051858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086301">SUSE bug 1086301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086313">SUSE bug 1086313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086314">SUSE bug 1086314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088810">SUSE bug 1088810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090888">SUSE bug 1090888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103989">SUSE bug 1103989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105392">SUSE bug 1105392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112504">SUSE bug 1112504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115026">SUSE bug 1115026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118338">SUSE bug 1118338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118661">SUSE bug 1118661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123328">SUSE bug 1123328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127682">SUSE bug 1127682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129551">SUSE bug 1129551</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133147">SUSE bug 1133147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134973">SUSE bug 1134973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140025">SUSE bug 1140025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143959">SUSE bug 1143959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144162">SUSE bug 1144162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146544">SUSE bug 1146544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151548">SUSE bug 1151548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151910">SUSE bug 1151910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151927">SUSE bug 1151927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152107">SUSE bug 1152107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152631">SUSE bug 1152631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153535">SUSE bug 1153535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153917">SUSE bug 1153917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154243">SUSE bug 1154243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154601">SUSE bug 1154601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154768">SUSE bug 1154768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154916">SUSE bug 1154916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155331">SUSE bug 1155331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155334">SUSE bug 1155334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155689">SUSE bug 1155689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156259">SUSE bug 1156259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156286">SUSE bug 1156286</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156462">SUSE bug 1156462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157155">SUSE bug 1157155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157157">SUSE bug 1157157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157169">SUSE bug 1157169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157303">SUSE bug 1157303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157480">SUSE bug 1157480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157692">SUSE bug 1157692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157853">SUSE bug 1157853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157895">SUSE bug 1157895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157908">SUSE bug 1157908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157966">SUSE bug 1157966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158013">SUSE bug 1158013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158021">SUSE bug 1158021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158026">SUSE bug 1158026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158071">SUSE bug 1158071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158094">SUSE bug 1158094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158132">SUSE bug 1158132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158533">SUSE bug 1158533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158637">SUSE bug 1158637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158638">SUSE bug 1158638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158639">SUSE bug 1158639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158640">SUSE bug 1158640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158641">SUSE bug 1158641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158643">SUSE bug 1158643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158644">SUSE bug 1158644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158645">SUSE bug 1158645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158646">SUSE bug 1158646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158647">SUSE bug 1158647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158649">SUSE bug 1158649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158651">SUSE bug 1158651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158652">SUSE bug 1158652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158819">SUSE bug 1158819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158823">SUSE bug 1158823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158824">SUSE bug 1158824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158827">SUSE bug 1158827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158893">SUSE bug 1158893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158900">SUSE bug 1158900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158903">SUSE bug 1158903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158904">SUSE bug 1158904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158954">SUSE bug 1158954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159024">SUSE bug 1159024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159028">SUSE bug 1159028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159271">SUSE bug 1159271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159297">SUSE bug 1159297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159377">SUSE bug 1159377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159394">SUSE bug 1159394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159483">SUSE bug 1159483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159484">SUSE bug 1159484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159500">SUSE bug 1159500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159569">SUSE bug 1159569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159588">SUSE bug 1159588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159841">SUSE bug 1159841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159908">SUSE bug 1159908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159909">SUSE bug 1159909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159910">SUSE bug 1159910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159911">SUSE bug 1159911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159955">SUSE bug 1159955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160147">SUSE bug 1160147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160195">SUSE bug 1160195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160210">SUSE bug 1160210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160211">SUSE bug 1160211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160218">SUSE bug 1160218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160433">SUSE bug 1160433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160442">SUSE bug 1160442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160469">SUSE bug 1160469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160470">SUSE bug 1160470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160476">SUSE bug 1160476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160560">SUSE bug 1160560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160618">SUSE bug 1160618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160678">SUSE bug 1160678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160755">SUSE bug 1160755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160756">SUSE bug 1160756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160784">SUSE bug 1160784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160787">SUSE bug 1160787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160802">SUSE bug 1160802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160803">SUSE bug 1160803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160804">SUSE bug 1160804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160917">SUSE bug 1160917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160966">SUSE bug 1160966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160979">SUSE bug 1160979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161087">SUSE bug 1161087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161243">SUSE bug 1161243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161360">SUSE bug 1161360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161472">SUSE bug 1161472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161514">SUSE bug 1161514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161518">SUSE bug 1161518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161522">SUSE bug 1161522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161523">SUSE bug 1161523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161549">SUSE bug 1161549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161552">SUSE bug 1161552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161674">SUSE bug 1161674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161702">SUSE bug 1161702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161907">SUSE bug 1161907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161931">SUSE bug 1161931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161933">SUSE bug 1161933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161934">SUSE bug 1161934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161935">SUSE bug 1161935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161936">SUSE bug 1161936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161937">SUSE bug 1161937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162028">SUSE bug 1162028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162067">SUSE bug 1162067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162109">SUSE bug 1162109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162139">SUSE bug 1162139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162557">SUSE bug 1162557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162617">SUSE bug 1162617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162618">SUSE bug 1162618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162619">SUSE bug 1162619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162623">SUSE bug 1162623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162928">SUSE bug 1162928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162943">SUSE bug 1162943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163206">SUSE bug 1163206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163383">SUSE bug 1163383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163384">SUSE bug 1163384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163762">SUSE bug 1163762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163774">SUSE bug 1163774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163836">SUSE bug 1163836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163840">SUSE bug 1163840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163841">SUSE bug 1163841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163842">SUSE bug 1163842</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163843">SUSE bug 1163843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163844">SUSE bug 1163844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163845">SUSE bug 1163845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163846">SUSE bug 1163846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163849">SUSE bug 1163849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163850">SUSE bug 1163850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163851">SUSE bug 1163851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163852">SUSE bug 1163852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163853">SUSE bug 1163853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163855">SUSE bug 1163855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163856">SUSE bug 1163856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163857">SUSE bug 1163857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163858">SUSE bug 1163858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163859">SUSE bug 1163859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163860">SUSE bug 1163860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163861">SUSE bug 1163861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163862">SUSE bug 1163862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163863">SUSE bug 1163863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163867">SUSE bug 1163867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163869">SUSE bug 1163869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163880">SUSE bug 1163880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163971">SUSE bug 1163971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164051">SUSE bug 1164051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164069">SUSE bug 1164069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164098">SUSE bug 1164098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164115">SUSE bug 1164115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164314">SUSE bug 1164314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164315">SUSE bug 1164315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164388">SUSE bug 1164388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164471">SUSE bug 1164471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164598">SUSE bug 1164598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164632">SUSE bug 1164632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164705">SUSE bug 1164705</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164712">SUSE bug 1164712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164727">SUSE bug 1164727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164728">SUSE bug 1164728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164729">SUSE bug 1164729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164730">SUSE bug 1164730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164731">SUSE bug 1164731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164732">SUSE bug 1164732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164733">SUSE bug 1164733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164734">SUSE bug 1164734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164735">SUSE bug 1164735</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-14615/">CVE-2019-14615</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-15213/">CVE-2019-15213</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16746/">CVE-2019-16746</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16994/">CVE-2019-16994</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18808/">CVE-2019-18808</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19036/">CVE-2019-19036</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19045/">CVE-2019-19045</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19051/">CVE-2019-19051</cve>
	<cve impact="moderate" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19054/">CVE-2019-19054</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19066/">CVE-2019-19066</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19318/">CVE-2019-19318</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19319/">CVE-2019-19319</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19332/">CVE-2019-19332</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19338/">CVE-2019-19338</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19447/">CVE-2019-19447</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19523/">CVE-2019-19523</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19526/">CVE-2019-19526</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19527/">CVE-2019-19527</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19532/">CVE-2019-19532</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19533/">CVE-2019-19533</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19535/">CVE-2019-19535</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19537/">CVE-2019-19537</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19767/">CVE-2019-19767</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19927/">CVE-2019-19927</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19965/">CVE-2019-19965</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19966/">CVE-2019-19966</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20054/">CVE-2019-20054</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20095/">CVE-2019-20095</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20096/">CVE-2019-20096</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2732/">CVE-2020-2732</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-7053/">CVE-2020-7053</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8428/">CVE-2020-8428</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8648/">CVE-2020-8648</cve>
	<cve impact="low" cvss3="2.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8992/">CVE-2020-8992</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497539" comment="kernel-default-livepatch-4.12.14-197.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497540" comment="kernel-default-livepatch-devel-4.12.14-197.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497541" comment="kernel-livepatch-4_12_14-197_34-default-1-3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138447" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1044231" ref_url="https://bugzilla.suse.com/1044231" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1051858" ref_url="https://bugzilla.suse.com/1051858" source="BUGZILLA"/>
		<reference ref_id="1056686" ref_url="https://bugzilla.suse.com/1056686" source="BUGZILLA"/>
		<reference ref_id="1060463" ref_url="https://bugzilla.suse.com/1060463" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1111974" ref_url="https://bugzilla.suse.com/1111974" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1119680" ref_url="https://bugzilla.suse.com/1119680" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1136157" ref_url="https://bugzilla.suse.com/1136157" source="BUGZILLA"/>
		<reference ref_id="1141895" ref_url="https://bugzilla.suse.com/1141895" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1146539" ref_url="https://bugzilla.suse.com/1146539" source="BUGZILLA"/>
		<reference ref_id="1156510" ref_url="https://bugzilla.suse.com/1156510" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1158187" ref_url="https://bugzilla.suse.com/1158187" source="BUGZILLA"/>
		<reference ref_id="1159285" ref_url="https://bugzilla.suse.com/1159285" source="BUGZILLA"/>
		<reference ref_id="1160659" ref_url="https://bugzilla.suse.com/1160659" source="BUGZILLA"/>
		<reference ref_id="1161561" ref_url="https://bugzilla.suse.com/1161561" source="BUGZILLA"/>
		<reference ref_id="1161951" ref_url="https://bugzilla.suse.com/1161951" source="BUGZILLA"/>
		<reference ref_id="1162928" ref_url="https://bugzilla.suse.com/1162928" source="BUGZILLA"/>
		<reference ref_id="1162929" ref_url="https://bugzilla.suse.com/1162929" source="BUGZILLA"/>
		<reference ref_id="1162931" ref_url="https://bugzilla.suse.com/1162931" source="BUGZILLA"/>
		<reference ref_id="1164078" ref_url="https://bugzilla.suse.com/1164078" source="BUGZILLA"/>
		<reference ref_id="1164507" ref_url="https://bugzilla.suse.com/1164507" source="BUGZILLA"/>
		<reference ref_id="1165111" ref_url="https://bugzilla.suse.com/1165111" source="BUGZILLA"/>
		<reference ref_id="1165404" ref_url="https://bugzilla.suse.com/1165404" source="BUGZILLA"/>
		<reference ref_id="1165488" ref_url="https://bugzilla.suse.com/1165488" source="BUGZILLA"/>
		<reference ref_id="1165527" ref_url="https://bugzilla.suse.com/1165527" source="BUGZILLA"/>
		<reference ref_id="1165741" ref_url="https://bugzilla.suse.com/1165741" source="BUGZILLA"/>
		<reference ref_id="1165813" ref_url="https://bugzilla.suse.com/1165813" source="BUGZILLA"/>
		<reference ref_id="1165873" ref_url="https://bugzilla.suse.com/1165873" source="BUGZILLA"/>
		<reference ref_id="1165929" ref_url="https://bugzilla.suse.com/1165929" source="BUGZILLA"/>
		<reference ref_id="1165950" ref_url="https://bugzilla.suse.com/1165950" source="BUGZILLA"/>
		<reference ref_id="1165980" ref_url="https://bugzilla.suse.com/1165980" source="BUGZILLA"/>
		<reference ref_id="1165984" ref_url="https://bugzilla.suse.com/1165984" source="BUGZILLA"/>
		<reference ref_id="1165985" ref_url="https://bugzilla.suse.com/1165985" source="BUGZILLA"/>
		<reference ref_id="1166003" ref_url="https://bugzilla.suse.com/1166003" source="BUGZILLA"/>
		<reference ref_id="1166101" ref_url="https://bugzilla.suse.com/1166101" source="BUGZILLA"/>
		<reference ref_id="1166102" ref_url="https://bugzilla.suse.com/1166102" source="BUGZILLA"/>
		<reference ref_id="1166103" ref_url="https://bugzilla.suse.com/1166103" source="BUGZILLA"/>
		<reference ref_id="1166104" ref_url="https://bugzilla.suse.com/1166104" source="BUGZILLA"/>
		<reference ref_id="1166632" ref_url="https://bugzilla.suse.com/1166632" source="BUGZILLA"/>
		<reference ref_id="1166658" ref_url="https://bugzilla.suse.com/1166658" source="BUGZILLA"/>
		<reference ref_id="1166730" ref_url="https://bugzilla.suse.com/1166730" source="BUGZILLA"/>
		<reference ref_id="1166731" ref_url="https://bugzilla.suse.com/1166731" source="BUGZILLA"/>
		<reference ref_id="1166732" ref_url="https://bugzilla.suse.com/1166732" source="BUGZILLA"/>
		<reference ref_id="1166733" ref_url="https://bugzilla.suse.com/1166733" source="BUGZILLA"/>
		<reference ref_id="1166734" ref_url="https://bugzilla.suse.com/1166734" source="BUGZILLA"/>
		<reference ref_id="1166735" ref_url="https://bugzilla.suse.com/1166735" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19768" ref_url="https://www.suse.com/security/cve/CVE-2019-19768/" source="CVE"/>
		<reference ref_id="CVE-2020-8647" ref_url="https://www.suse.com/security/cve/CVE-2020-8647/" source="CVE"/>
		<reference ref_id="CVE-2020-8648" ref_url="https://www.suse.com/security/cve/CVE-2020-8648/" source="CVE"/>
		<reference ref_id="CVE-2020-8649" ref_url="https://www.suse.com/security/cve/CVE-2020-8649/" source="CVE"/>
		<reference ref_id="CVE-2020-9383" ref_url="https://www.suse.com/security/cve/CVE-2020-9383/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006656.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-8647: Fixed a use-after-free in the vc_do_resize function in drivers/tty/vt/vt.c (bsc#1162929).
- CVE-2020-8649: Fixed a use-after-free in the vgacon_invert_region function in drivers/video/console/vgacon.c (bsc#1162931).
- CVE-2020-8648: Fixed a use-after-free in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bsc#1162928).
- CVE-2020-9383: Fixed an out-of-bounds read due to improper error condition check of FDC index (bsc#1165111).
- CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).

The following non-security bugs were fixed:

- ALSA: hda/realtek - Add Headset Button supported for ThinkPad X1 (bsc#1111666).
- ALSA: hda/realtek - Add Headset Mic supported (bsc#1111666).
- ALSA: hda/realtek - Add more codec supported Headset Button (bsc#1111666).
- ALSA: hda/realtek - Apply quirk for MSI GP63, too (bsc#1111666).
- ALSA: hda/realtek - Apply quirk for yet another MSI laptop (bsc#1111666).
- ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294 (bsc#1111666).
- ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1 (bsc#1111666).
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master (bsc#1111666).
- ALSA: usb-audio: Add boot quirk for MOTU M Series (bsc#1111666).
- ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000 (bsc#1111666).
- ALSA: usb-audio: add implicit fb quirk for MOTU M Series (bsc#1111666).
- ALSA: usb-audio: add quirks for Line6 Helix devices fw&gt;=2.82 (bsc#1111666).
- ALSA: usb-audio: Apply 48kHz fixed rate playback for Jabra Evolve 65 headset (bsc#1111666).
- ALSA: usb-audio: fix Corsair Virtuoso mixer label collision (bsc#1111666).
- ALSA: usb-audio: Fix UAC2/3 effect unit parsing (bsc#1111666).
- ALSA: usb-audio: unlock on error in probe (bsc#1111666).
- ALSA: usb-audio: Use lower hex numbers for IDs (bsc#1111666).
- ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status (bsc#1051510).
- amdgpu/gmc_v9: save/restore sdpif regs during S3 (bsc#1113956)
- ASoC: dapm: Correct DAPM handling of active widgets during shutdown (bsc#1051510).
- ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path (bsc#1051510).
- ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output (bsc#1051510).
- ASoC: pcm: update FE/BE trigger order based on the command (bsc#1051510).
- ASoC: topology: Fix memleak in soc_tplg_link_elems_load() (bsc#1051510).
- atm: zatm: Fix empty body Clang warnings (bsc#1051510).
- b43legacy: Fix -Wcast-function-type (bsc#1051510).
- blk: Fix kabi due to blk_trace_mutex addition (bsc#1159285).
- blktrace: fix dereference after null check (bsc#1159285).
- blktrace: fix trace mutex deadlock (bsc#1159285).
- bnxt_en: Fix NTUPLE firmware command failures (bsc#1104745 ).
- bnxt_en: Fix TC queue mapping (networking-stable-20_02_05).
- bnxt_en: Improve device shutdown method (bsc#1104745 ).
- bnxt_en: Issue PCIe FLR in kdump kernel to cleanup pending DMAs (bsc#1134090 jsc#SLE-5954).
- bonding/alb: properly access headers in bond_alb_xmit() (networking-stable-20_02_09).
- bpf, offload: Replace bitwise AND by logical AND in bpf_prog_offload_info_fill (bsc#1109837).
- CIFS: add a debug macro that prints \\server\share for errors (bsc#1144333).
- CIFS: add missing mount option to /proc/mounts (bsc#1144333).
- CIFS: add new debugging macro cifs_server_dbg (bsc#1144333).
- CIFS: add passthrough for smb2 setinfo (bsc#1144333).
- CIFS: add SMB2_open() arg to return POSIX data (bsc#1144333).
- CIFS: add smb2 POSIX info level (bsc#1144333).
- CIFS: add SMB3 change notification support (bsc#1144333).
- CIFS: add support for fallocate mode 0 for non-sparse files (bsc#1144333).
- CIFS: Add support for setting owner info, dos attributes, and create time (bsc#1144333).
- CIFS: Add tracepoints for errors on flush or fsync (bsc#1144333).
- CIFS: Adjust indentation in smb2_open_file (bsc#1144333).
- CIFS: allow chmod to set mode bits using special sid (bsc#1144333).
- CIFS: Avoid doing network I/O while holding cache lock (bsc#1144333).
- CIFS: call wake_up(server-&gt;response_q) inside of cifs_reconnect() (bsc#1144333).
- CIFS: Clean up DFS referral cache (bsc#1144333).
- CIFS: create a helper function to parse the query-directory response buffer (bsc#1144333).
- CIFS: do d_move in rename (bsc#1144333).
- CIFS: Do not display RDMA transport on reconnect (bsc#1144333).
- CIFS: do not ignore the SYNC flags in getattr (bsc#1144333).
- CIFS: do not leak -EAGAIN for stat() during reconnect (bsc#1144333).
- CIFS: do not use 'pre:' for MODULE_SOFTDEP (bsc#1144333).
- CIFS: enable change notification for SMB2.1 dialect (bsc#1144333).
- CIFS: fail i/o on soft mounts if sessionsetup errors out (bsc#1144333).
- CIFS: fix a comment for the timeouts when sending echos (bsc#1144333).
- CIFS: fix a white space issue in cifs_get_inode_info() (bsc#1144333).
- CIFS: fix dereference on ses before it is null checked (bsc#1144333).
- CIFS: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333).
- CIFS: fix mode bits from dir listing when mounted with modefromsid (bsc#1144333).
- CIFS: Fix mode output in debugging statements (bsc#1144333).
- CIFS: Fix mount options set in automount (bsc#1144333).
- CIFS: fix NULL dereference in match_prepath (bsc#1144333).
- CIFS: Fix potential deadlock when updating vol in cifs_reconnect() (bsc#1144333).
- CIFS: fix potential mismatch of UNC paths (bsc#1144333).
- CIFS: fix rename() by ensuring source handle opened with DELETE bit (bsc#1144333).
- CIFS: Fix return value in __update_cache_entry (bsc#1144333).
- CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333).
- CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333).
- CIFS: Fix task struct use-after-free on reconnect (bsc#1144333).
- CIFS: fix unitialized variable poential problem with network I/O cache lock patch (bsc#1144333).
- CIFS: get mode bits from special sid on stat (bsc#1144333).
- CIFS: Get rid of kstrdup_const()'d paths (bsc#1144333).
- CIFS: handle prefix paths in reconnect (bsc#1144333).
- CIFS: Introduce helpers for finding TCP connection (bsc#1144333).
- CIFS: log warning message (once) if out of disk space (bsc#1144333).
- CIFS: make sure we do not overflow the max EA buffer size (bsc#1144333).
- CIFS: make use of cap_unix(ses) in cifs_reconnect_tcon() (bsc#1144333).
- CIFS: Merge is_path_valid() into get_normalized_path() (bsc#1144333).
- CIFS: modefromsid: make room for 4 ACE (bsc#1144333).
- CIFS: modefromsid: write mode ACE first (bsc#1144333).
- CIFS: Optimize readdir on reparse points (bsc#1144333).
- CIFS: plumb smb2 POSIX dir enumeration (bsc#1144333).
- CIFS: potential unintitliazed error code in cifs_getattr() (bsc#1144333).
- CIFS: prepare SMB2_query_directory to be used with compounding (bsc#1144333).
- CIFS: print warning once if mounting with vers=1.0 (bsc#1144333).
- CIFS: refactor cifs_get_inode_info() (bsc#1144333).
- CIFS: remove redundant assignment to pointer pneg_ctxt (bsc#1144333).
- CIFS: remove redundant assignment to variable rc (bsc#1144333).
- CIFS: remove set but not used variables (bsc#1144333).
- CIFS: remove set but not used variable 'server' (bsc#1144333).
- CIFS: remove unused variable (bsc#1144333).
- CIFS: remove unused variable 'sid_user' (bsc#1144333).
- CIFS: rename a variable in SendReceive() (bsc#1144333).
- CIFS: rename posix create rsp (bsc#1144333).
- CIFS: replace various strncpy with strscpy and similar (bsc#1144333).
- CIFS: Return directly after a failed build_path_from_dentry() in cifs_do_create() (bsc#1144333).
- CIFS: set correct max-buffer-size for smb2_ioctl_init() (bsc#1144333).
- CIFS: smbd: Add messages on RDMA session destroy and reconnection (bsc#1144333).
- CIFS: smbd: Invalidate and deregister memory registration on re-send for direct I/O (bsc#1144333).
- CIFS: smbd: Only queue work for error recovery on memory registration (bsc#1144333).
- CIFS: smbd: Return -EAGAIN when transport is reconnecting (bsc#1144333).
- CIFS: smbd: Return -ECONNABORTED when trasnport is not in connected state (bsc#1144333).
- CIFS: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE (bsc#1144333).
- CIFS: Use common error handling code in smb2_ioctl_query_info() (bsc#1144333).
- CIFS: use compounding for open and first query-dir for readdir() (bsc#1144333).
- CIFS: Use #define in cifs_dbg (bsc#1144333).
- CIFS: Use memdup_user() rather than duplicating its implementation (bsc#1144333).
- CIFS: use mod_delayed_work() for server-&gt;reconnect if already queued (bsc#1144333).
- CIFS: use PTR_ERR_OR_ZERO() to simplify code (bsc#1144333).
- cls_rsvp: fix rsvp_policy (networking-stable-20_02_05).
- core: Do not skip generic XDP program execution for cloned SKBs (bsc#1109837).
- cpufreq: powernv: Fix unsafe notifiers (bsc#1065729).
- cpufreq: powernv: Fix use-after-free (bsc#1065729).
- crypto: pcrypt - Fix user-after-free on module unload (git-fixes).
- devlink: report 0 after hitting end in region read (bsc#1109837).
- dmaengine: coh901318: Fix a double lock bug in dma_tc_handle() (bsc#1051510).
- driver core: platform: fix u32 greater or equal to zero comparison (bsc#1051510).
- driver core: platform: Prevent resouce overflow from causing infinite loops (bsc#1051510).
- driver core: Print device when resources present in really_probe() (bsc#1051510).
- drivers/md/raid5.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).
- drivers/md/raid5-ppl.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).
- drm/amd/dm/mst: Ignore payload update failures (bsc#1112178)
- drm/amdkfd: fix a use after free race with mmu_notifer unregister (bsc#1114279)
- drm: atmel-hlcdc: enable clock before configuring timing engine (bsc#1114279)
- drm/etnaviv: fix dumping of iommuv2 (bsc#1114279)
- drm/gma500: Fixup fbdev stolen size usage evaluation (bsc#1051510).
- drm/i915/gvt: Fix orphan vgpu dmabuf_objs' lifetime (git-fixes).
- drm/i915/gvt: Fix unnecessary schedule timer when no vGPU exits (git-fixes).
- drm/i915/gvt: Separate display reset from ALL_ENGINES reset (bsc#1114279)
- drm/i915: Program MBUS with rmw during initialization (git-fixes).
- drm/i915/selftests: Fix return in assert_mmap_offset() (bsc#1114279) 
- drm/i915/userptr: fix size calculation (bsc#1114279)
- drm/i915/userptr: Try to acquire the page lock around (bsc#1114279)
- drm/i915: Wean off drm_pci_alloc/drm_pci_free (bsc#1114279)
- drm/mediatek: Add gamma property according to hardware capability (bsc#1114279)
- drm/mediatek: disable all the planes in atomic_disable (bsc#1114279)
- drm/mediatek: handle events when enabling/disabling crtc (bsc#1051510).
- drm/mipi_dbi: Fix off-by-one bugs in mipi_dbi_blank() (bsc#1114279)
- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable (bsc#1114279)
- drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (bsc#1051510).
- drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from fw (bsc#1051510).
- drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (git-fixes).
- drm: rcar-du: Recognize 'renesas,vsps' in addition to 'vsps' (bsc#1114279)
- drm: remove the newline for CRC source name (bsc#1051510).
- EDAC/mc: Fix use-after-free and memleaks during device removal (bsc#1114279).
- Enabled the following two patches in series.conf, and refresh the KABI patch due to previous md commit (bsc#1119680)
- ethtool: Factored out similar ethtool link settings for virtual devices to core (bsc#1136157 ltc#177197).
- fcntl: fix typo in RWH_WRITE_LIFE_NOT_SET r/w hint name (bsc#1166003).
- firmware: imx: misc: Align imx sc msg structs to 4 (git-fixes).
- firmware: imx: scu: Ensure sequential TX (git-fixes).
- firmware: imx: scu-pd: Align imx sc msg structs to 4 (git-fixes).
- Fixed memory leak in large read decrypt offload (bsc#1144333).
- Fixed some regressions (bsc#1165527 ltc#184149).
- fs/cifs/cifssmb.c: use true,false for bool variable (bsc#1144333).
- fs: cifs: cifsssmb: remove redundant assignment to variable ret (bsc#1144333).
- fs: cifs: Initialize filesystem timestamp ranges (bsc#1144333).
- fs: cifs: mute -Wunused-const-variable message (bsc#1144333).
- fs/cifs/sess.c: Remove set but not used variable 'capabilities' (bsc#1144333).
- fs/cifs/smb2ops.c: use true,false for bool variable (bsc#1144333).
- fs/cifs/smb2pdu.c: Make SMB2_notify_init static (bsc#1144333).
- fs/xfs: fix f_ffree value for statfs when project quota is set (bsc#1165985).
- gtp: make sure only SOCK_DGRAM UDP sockets are accepted (networking-stable-20_01_27).
- gtp: use __GFP_NOWARN to avoid memalloc warning (networking-stable-20_02_05).
- HID: core: fix off-by-one memset in hid_report_raw_event() (bsc#1051510).
- HID: hiddev: Fix race in in hiddev_disconnect() (git-fixes).
- hv_netvsc: Fix memory leak when removing rndis device (networking-stable-20_01_20).
- hwmon: (adt7462) Fix an error return in ADT7462_REG_VOLT() (bsc#1051510).
- IB/hfi1: Close window for pq and request coliding (bsc#1060463 ).
- ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551).
- ibmvnic: Do not process device remove during device reset (bsc#1065729).
- ibmvnic: Warn unknown speed message only when carrier is present (bsc#1065729).
- Input: edt-ft5x06 - work around first register access error (bsc#1051510).
- Input: synaptics - enable SMBus on ThinkPad L470 (bsc#1051510).
- Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list (bsc#1051510).
- Input: synaptics - switch T470s to RMI4 by default (bsc#1051510).
- iommu/amd: Check feature support bit before accessing MSI capability registers (bsc#1166101).
- iommu/amd: Only support x2APIC with IVHD type 11h/40h (bsc#1166102).
- iommu/amd: Remap the IOMMU device table with the memory encryption mask for kdump (bsc#1141895).
- iommu/dma: Fix MSI reservation allocation (bsc#1166730).
- iommu/vt-d: dmar: replace WARN_TAINT with pr_warn + add_taint (bsc#1166731).
- iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys() for huge page (bsc#1166732).
- iommu/vt-d: Fix compile warning from intel-svm.h (bsc#1166103).
- iommu/vt-d: Fix the wrong printing in RHSA parsing (bsc#1166733).
- iommu/vt-d: Ignore devices with out-of-spec domain number (bsc#1166734).
- iommu/vt-d: quirk_ioat_snb_local_iommu: replace WARN_TAINT with pr_warn + add_taint (bsc#1166735).
- ipv4: ensure rcu_read_lock() in cipso_v4_error() (git-fixes).
- ipv6: restrict IPV6_ADDRFORM operation (bsc#1109837).
- iwlegacy: Fix -Wcast-function-type (bsc#1051510).
- iwlwifi: mvm: Do not require PHY_SKU NVM section for 3168 devices (bsc#1166632).
- iwlwifi: mvm: Fix thermal zone registration (bsc#1051510).
- kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (bsc#1141895).
- kernel/module.c: Only return -EEXIST for modules that have finished loading (bsc#1165488).
- kernel/module.c: wakeup processes in module_wq on module unload (bsc#1165488).
- kexec: Allocate decrypted control pages for kdump if SME is enabled (bsc#1141895).
- KVM: arm64: Store vcpu on the stack during __guest_enter() (bsc#1133021).
- KVM: s390: do not clobber registers during guest reset/store status (bsc#1133021).
- KVM: s390: ENOTSUPP -&gt; EOPNOTSUPP fixups (bsc#1133021).
- KVM: VMX: check descriptor table exits on instruction emulation (bsc#1166104).
- l2tp: Allow duplicate session creation with UDP (networking-stable-20_02_05).
- libnvdimm/pfn_dev: Do not clear device memmap area during generic namespace probe (bsc#1165929 bsc#1165950).
- libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields (bsc#1165929).
- libnvdimm: remove redundant __func__ in dev_dbg (bsc#1165929).
- lib/raid6: add missing include for raid6test (bsc#1166003).
- lib/raid6: add option to skip algo benchmarking (bsc#1166003).
- lib/raid6: avoid __attribute_const__ redefinition (bsc#1166003).
- md: add __acquires/__releases annotations to handle_active_stripes (bsc#1166003).
- md: add __acquires/__releases annotations to (un)lock_two_stripes (bsc#1166003).
- md: add a missing endianness conversion in check_sb_changes (bsc#1166003).
- md: add bitmap_abort label in md_run (bsc#1166003).
- md: add feature flag MD_FEATURE_RAID0_LAYOUT (bsc#1166003).
- md: allow last device to be forcibly removed from RAID1/RAID10 (bsc#1166003).
- md: avoid invalid memory access for array sb-&gt;dev_roles (bsc#1166003).
- md/bitmap: avoid race window between md_bitmap_resize and bitmap_file_clear_bit (bsc#1166003).
- md-bitmap: create and destroy wb_info_pool with the change of backlog (bsc#1166003).
- md-bitmap: create and destroy wb_info_pool with the change of bitmap (bsc#1166003).
- md-bitmap: small cleanups (bsc#1166003).
- md/bitmap: use mddev_suspend/resume instead of -&gt;quiesce() (bsc#1166003).
- md-cluster/bitmap: do not call md_bitmap_sync_with_cluster during reshaping stage (bsc#1166003).
- md-cluster: introduce resync_info_get interface for sanity check (bsc#1166003).
- md-cluster/raid10: call update_size in md_reap_sync_thread (bsc#1166003).
- md-cluster/raid10: do not call remove_and_add_spares during reshaping stage (bsc#1166003).
- md-cluster/raid10: resize all the bitmaps before start reshape (bsc#1166003).
- md-cluster/raid10: support add disk under grow mode (bsc#1166003).
- md-cluster: remove suspend_info (bsc#1166003).
- md-cluster: send BITMAP_NEEDS_SYNC message if reshaping is interrupted (bsc#1166003).
- md: convert to kvmalloc (bsc#1166003).
- md: do not call spare_active in md_reap_sync_thread if all member devices can't work (bsc#1166003).
- md: do not set In_sync if array is frozen (bsc#1166003).
- md: fix a typo s/creat/create (bsc#1166003).
- md: fix for divide error in status_resync (bsc#1166003).
- md: fix spelling typo and add necessary space (bsc#1166003).
- md: introduce mddev_create/destroy_wb_pool for the change of member device (bsc#1166003).
- md-linear: use struct_size() in kzalloc() (bsc#1166003).
- md: Make bio_alloc_mddev use bio_alloc_bioset (bsc#1166003).
- md: make sure desc_nr less than MD_SB_DISKS (bsc#1166003).
- md: md.c: Return -ENODEV when mddev is NULL in rdev_attr_show (bsc#1166003).
- md: no longer compare spare disk superblock events in super_load (bsc#1166003).
- md/raid0: Fix an error message in raid0_make_request() (bsc#1166003).
- md raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone (bsc#1166003).
- md/raid10: end bio when the device faulty (bsc#1166003).
- md/raid10: Fix raid10 replace hang when new added disk faulty (bsc#1166003).
- md/raid10: prevent access of uninitialized resync_pages offset (bsc#1166003).
- md/raid10: read balance chooses idlest disk for SSD (bsc#1166003).
- md: raid10: Use struct_size() in kmalloc() (bsc#1166003).
- md/raid1: avoid soft lockup under high load (bsc#1166003).
- md: raid1: check rdev before reference in raid1_sync_request func (bsc#1166003).
- md/raid1: end bio when the device faulty (bsc#1166003).
- md/raid1: fail run raid1 array when active disk less than one (bsc#1166003).
- md/raid1: Fix a warning message in remove_wb() (bsc#1166003).
- md/raid1: fix potential data inconsistency issue with write behind device (bsc#1166003).
- md/raid1: get rid of extra blank line and space (bsc#1166003).
- md/raid5: use bio_end_sector to calculate last_sector (bsc#1166003).
- md/raid6: fix algorithm choice under larger PAGE_SIZE (bsc#1166003).
- md: remove set but not used variable 'bi_rdev' (bsc#1166003).
- md: rename wb stuffs (bsc#1166003).
- md: return -ENODEV if rdev has no mddev assigned (bsc#1166003).
- md: use correct type in super_1_load (bsc#1166003).
- md: use correct type in super_1_sync (bsc#1166003).
- md: use correct types in md_bitmap_print_sb (bsc#1166003).
- media: uvcvideo: Refactor teardown of uvc on USB disconnect (bsc#1164507).
- mlxsw: spectrum_qdisc: Include MC TCs in Qdisc counters (bsc#1112374).
- mlxsw: spectrum: Wipe xstats.backlog of down ports (bsc#1112374).
- net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM (networking-stable-20_01_27).
- net: dsa: mv88e6xxx: Preserve priority when setting CPU port (networking-stable-20_01_11).
- net: dsa: tag_qca: fix doubled Tx statistics (networking-stable-20_01_20).
- net/ethtool: Introduce link_ksettings API for virtual network devices (bsc#1136157 ltc#177197).
- net: Fix Tx hash bound checking (bsc#1109837).
- net: hns3: fix a copying IPv6 address error in hclge_fd_get_flow_tuples() (bsc#1104353).
- net: hns: fix soft lockup when there is not enough memory (networking-stable-20_01_20).
- net: hsr: fix possible NULL deref in hsr_handle_frame() (networking-stable-20_02_05).
- net: ip6_gre: fix moving ip6gre between namespaces (networking-stable-20_01_27).
- net, ip6_tunnel: fix namespaces move (networking-stable-20_01_27).
- net, ip_tunnel: fix namespaces move (networking-stable-20_01_27).
- net: macb: Limit maximum GEM TX length in TSO (networking-stable-20_02_09).
- net: macb: Remove unnecessary alignment check for TSO (networking-stable-20_02_09).
- net/mlx5: Fix lowest FDB pool size (bsc#1103990).
- net/mlx5: IPsec, Fix esp modify function attribute (bsc#1103990 ).
- net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx (bsc#1103990).
- net/mlx5: Update the list of the PCI supported devices (bsc#1127611).
- net/mlxfw: Verify FSM error code translation does not exceed array size (bsc#1051858).
- net: mvneta: move rx_dropped and rx_errors in per-cpu stats (networking-stable-20_02_09).
- net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link() (networking-stable-20_01_27).
- net_sched: ematch: reject invalid TCF_EM_SIMPLE (networking-stable-20_01_30).
- net_sched: fix an OOB access in cls_tcindex (networking-stable-20_02_05).
- net_sched: fix a resource leak in tcindex_set_parms() (networking-stable-20_02_09).
- net_sched: fix datalen for ematch (networking-stable-20_01_27).
- net: sch_prio: When ungrafting, replace with FIFO (networking-stable-20_01_11).
- net/smc: add fallback check to connect() (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- net: stmmac: dwmac-sunxi: Allow all RGMII modes (networking-stable-20_01_11).
- net-sysfs: Fix reference count leak (networking-stable-20_01_27).
- net: systemport: Avoid RBUF stuck in Wake-on-LAN mode (networking-stable-20_02_09).
- net/tls: fix async operation (bsc#1109837).
- net/tls: free the record on encryption error (bsc#1109837).
- net/tls: take into account that bpf_exec_tx_verdict() may free the record (bsc#1109837).
- net: usb: lan78xx: Add .ndo_features_check (networking-stable-20_01_27).
- net: usb: lan78xx: fix possible skb leak (networking-stable-20_01_11).
- net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info (networking-stable-20_01_20).
- NFC: pn544: Fix a typo in a debug message (bsc#1051510).
- NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu() (bsc#1051510).
- nvme: Fix parsing of ANA log page (bsc#1166658).
- nvme: resync include/linux/nvme.h with nvmecli (bsc#1156510).
- nvme: Translate more status codes to blk_status_t (bsc#1156510).
- orinoco: avoid assertion in case of NULL pointer (bsc#1051510).
- padata: always acquire cpu_hotplug_lock before pinst-&gt;lock (git-fixes).
- PCI/AER: Clear device status bits during ERR_COR handling (bsc#1161561).
- PCI/AER: Clear device status bits during ERR_FATAL and ERR_NONFATAL (bsc#1161561).
- PCI/AER: Clear only ERR_FATAL status bits during fatal recovery (bsc#1161561).
- PCI/AER: Clear only ERR_NONFATAL bits during non-fatal recovery (bsc#1161561).
- PCI/AER: Do not clear AER bits if error handling is Firmware-First (bsc#1161561).
- PCI/AER: Do not read upstream ports below fatal errors (bsc#1161561).
- PCI/AER: Factor out ERR_NONFATAL status bit clearing (bsc#1161561).
- PCI/AER: Take reference on error devices (bsc#1161561).
- PCI/ERR: Run error recovery callbacks for all affected devices (bsc#1161561).
- PCI/ERR: Use slot reset if available (bsc#1161561).
- pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled pins (bsc#1051510).
- pinctrl: imx: scu: Align imx sc msg structs to 4 (git-fixes).
- pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs (bsc#1051510).
- pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs (bsc#1051510).
- pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM (networking-stable-20_01_11).
- platform/mellanox: fix potential deadlock in the tmfifo driver (bsc#1136333 jsc#SLE-4994).
- powerpc: fix hardware PMU exception bug on PowerVM compatibility mode systems (bsc#1056686).
- powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (bsc#1160659).
- powerpc/pseries: fix of_read_drc_info_cell() to point at next record (bsc#1165980 ltc#183834).
- powerpc/pseries: group lmb operation and memblock's (bsc#1165404 ltc#183498).
- powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (bsc#1165404 ltc#183498).
- powerpc/pseries: update device tree before ejecting hotplug uevents (bsc#1165404 ltc#183498).
- powerpc/smp: Use nid as fallback for package_id (bsc#1165813 ltc#184091).
- ptr_ring: add include of linux/mm.h (bsc#1109837).
- qmi_wwan: re-add DW5821e pre-production variant (bsc#1051510).
- raid10: refactor common wait code from regular read/write request (bsc#1166003).
- raid1: factor out a common routine to handle the completion of sync write (bsc#1166003).
- raid1: simplify raid1_error function (bsc#1166003).
- raid1: use an int as the return value of raise_barrier() (bsc#1166003).
- raid5: block failing device if raid will be failed (bsc#1166003).
- raid5: do not increment read_errors on EILSEQ return (bsc#1166003).
- raid5: do not set STRIPE_HANDLE to stripe which is in batch list (bsc#1166003).
- raid5 improve too many read errors msg by adding limits (bsc#1166003).
- raid5: need to set STRIPE_HANDLE for batch head (bsc#1166003).
- raid5: remove STRIPE_OPS_REQ_PENDING (bsc#1166003).
- raid5: remove worker_cnt_per_group argument from alloc_thread_groups (bsc#1166003). 
- raid5: set write hint for PPL (bsc#1166003).
- raid5: use bio_end_sector in r5_next_bio (bsc#1166003).
- raid6/test: fix a compilation error (bsc#1166003).
- raid6/test: fix a compilation warning (bsc#1166003).
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (bsc#1103992).
- RDMA/hfi1: Fix memory leak in _dev_comp_vect_mappings_create (bsc#1114685).
- RDMA/uverbs: Verify MR access flags (bsc#1103992).
- remoteproc: Initialize rproc_class before use (bsc#1051510).
- Revert 'HID: add NOGET quirk for Eaton Ellipse MAX UPS' (git-fixes).
- rtlwifi: rtl_pci: Fix -Wcast-function-type (bsc#1051510).
- rxrpc: Fix insufficient receive notification generation (networking-stable-20_02_05).
- s390/pci: Fix unexpected write combine on resource (git-fixes).
- s390/uv: Fix handling of length extensions (git-fixes).
- scsi: fnic: do not queue commands during fwreset (bsc#1146539).
- scsi: ibmvfc: Add failed PRLI to cmd_status lookup array (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Byte swap status and error codes when logging (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Clean up transport events (bsc#1161951 ltc#183551).
- scsi: ibmvfc: constify dev_pm_ops structures (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Do not call fc_block_scsi_eh() on host reset (bsc#1161951 ltc#183551).
- scsi: ibmvfc: ibmvscsi: ibmvscsi_tgt: constify vio_device_id (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Mark expected switch fall-throughs (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Remove 'failed' from logged errors (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Remove unneeded semicolons (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: change strncpy+truncation to strlcpy (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: constify dev_pm_ops structures (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Do not use rc uninitialized in ibmvscsi_do_work (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: fix tripping of blk_mq_run_hw_queue WARN_ON (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Improve strings handling (bsc#1161951 ltc#183551). 
- scsi: ibmvscsi: redo driver work thread to use enum action states (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Wire up host_reset() in the driver's scsi_host_template (bsc#1161951 ltc#183551).
- scsi: qla2xxx: Add 16.0GT for PCI String (bsc#1157424).
- scsi: qla2xxx: Add beacon LED config sysfs interface (bsc#1157424).
- scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (bsc#1157424).
- scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (bsc#1157424).
- scsi: qla2xxx: Add endianizer macro calls to fc host stats (bsc#1157424).
- scsi: qla2xxx: Add fixes for mailbox command (bsc#1157424).
- scsi: qla2xxx: add more FW debug information (bsc#1157424).
- scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (bsc#1157424).
- scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (bsc#1157424).
- scsi: qla2xxx: Add vendor extended FDMI commands (bsc#1157424).
- scsi: qla2xxx: Add vendor extended RDP additions and amendments (bsc#1157424).
- scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options (bsc#1157424).
- scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb() (bsc#1157424).
- scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (bsc#1157424).
- scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function (bsc#1157424).
- scsi: qla2xxx: Correction to selection of loopback/echo test (bsc#1157424).
- scsi: qla2xxx: Display message for FCE enabled (bsc#1157424).
- scsi: qla2xxx: Fix control flags for login/logout IOCB (bsc#1157424).
- scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (bsc#1157424).
- scsi: qla2xxx: fix FW resource count values (bsc#1157424).
- scsi: qla2xxx: Fix NPIV instantiation after FW dump (bsc#1157424).
- scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (bsc#1157424).
- scsi: qla2xxx: Fix RDP respond data format (bsc#1157424).
- scsi: qla2xxx: Fix RDP response size (bsc#1157424).
- scsi: qla2xxx: Fix sparse warning reported by kbuild bot (bsc#1157424).
- scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code (bsc#1157424).
- scsi: qla2xxx: Force semaphore on flash validation failure (bsc#1157424).
- scsi: qla2xxx: Handle cases for limiting RDP response payload length (bsc#1157424).
- scsi: qla2xxx: Handle NVME status iocb correctly (bsc#1157424).
- scsi: qla2xxx: Improved secure flash support messages (bsc#1157424).
- scsi: qla2xxx: Move free of fcport out of interrupt context (bsc#1157424).
- scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (bsc#1157424).
- scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (bsc#1157424).
- scsi: qla2xxx: Return appropriate failure through BSG Interface (bsc#1157424).
- scsi: qla2xxx: Save rscn_gen for new fcport (bsc#1157424).
- scsi: qla2xxx: Serialize fc_port alloc in N2N (bsc#1157424).
- scsi: qla2xxx: Set Nport ID for N2N (bsc#1157424).
- scsi: qla2xxx: Show correct port speed capabilities for RDP command (bsc#1157424).
- scsi: qla2xxx: Simplify the code for aborting SCSI commands (bsc#1157424).
- scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop() (bsc#1157424).
- scsi: qla2xxx: Update BPM enablement semantics (bsc#1157424).
- scsi: qla2xxx: Update driver version to 10.01.00.24-k (bsc#1157424).
- scsi: qla2xxx: Update driver version to 10.01.00.25-k (bsc#1157424).
- scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required' ISPs (bsc#1157424).
- scsi: qla2xxx: Use correct ISP28xx active FW region (bsc#1157424).
- scsi: qla2xxx: Use endian macros to assign static fields in fwdump header (bsc#1157424).
- scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx (bsc#1157424).
- scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (bsc#1157424).
- scsi: tcm_qla2xxx: Make qlt_alloc_qfull_cmd() set cmd-&gt;se_cmd.map_tag (bsc#1157424).
- sctp: free cmd-&gt;obj.chunk for the unprocessed SCTP_CMD_REPLY (networking-stable-20_01_11).
- smb3: add debug messages for closing unmatched open (bsc#1144333).
- smb3: Add defines for new information level, FileIdInformation (bsc#1144333).
- smb3: add dynamic tracepoints for flush and close (bsc#1144333).
- smb3: add missing flag definitions (bsc#1144333).
- smb3: Add missing reparse tags (bsc#1144333).
- smb3: add missing worker function for SMB3 change notify (bsc#1144333).
- smb3: add mount option to allow forced caching of read only share (bsc#1144333).
- smb3: add mount option to allow RW caching of share accessed by only 1 client (bsc#1144333).
- smb3: add one more dynamic tracepoint missing from strict fsync path (bsc#1144333).
- smb3: add some more descriptive messages about share when mounting cache=ro (bsc#1144333).
- smb3: allow decryption keys to be dumped by admin for debugging (bsc#1144333).
- smb3: allow disabling requesting leases (bsc#1144333).
- smb3: allow parallelizing decryption of reads (bsc#1144333).
- smb3: allow skipping signature verification for perf sensitive configurations (bsc#1144333).
- smb3: Backup intent flag missing from some more ops (bsc#1144333).
- smb3: cleanup some recent endian errors spotted by updated sparse (bsc#1144333).
- smb3: display max smb3 requests in flight at any one time (bsc#1144333).
- smb3: dump in_send and num_waiters stats counters by default (bsc#1144333).
- smb3: enable offload of decryption of large reads via mount option (bsc#1144333).
- smb3: fix default permissions on new files when mounting with modefromsid (bsc#1144333).
- smb3: fix mode passed in on create for modetosid mount option (bsc#1144333).
- smb3: fix performance regression with setting mtime (bsc#1144333).
- smb3: fix potential null dereference in decrypt offload (bsc#1144333).
- smb3: fix problem with null cifs super block with previous patch (bsc#1144333).
- smb3: Fix regression in time handling (bsc#1144333).
- smb3: improve check for when we send the security descriptor context on create (bsc#1144333).
- smb3: log warning if CSC policy conflicts with cache mount option (bsc#1144333).
- smb3: missing ACL related flags (bsc#1144333).
- smb3: only offload decryption of read responses if multiple requests (bsc#1144333).
- smb3: pass mode bits into create calls (bsc#1144333).
- smb3: print warning once if posix context returned on open  (bsc#1144333).
- smb3: query attributes on file close (bsc#1144333).
- smb3: remove noisy debug message and minor cleanup (bsc#1144333).
- smb3: remove unused flag passed into close functions (bsc#1144333).
- staging: rtl8188eu: Fix potential overuse of kernel memory (bsc#1051510).
- staging: rtl8188eu: Fix potential security hole (bsc#1051510).
- staging: rtl8723bs: Fix potential overuse of kernel memory (bsc#1051510).
- staging: rtl8723bs: Fix potential security hole (bsc#1051510).
- SUNRPC: Fix svcauth_gss_proxy_init() (bsc#1103992).
- tcp_bbr: improve arithmetic division in bbr_update_bw() (networking-stable-20_01_27).
- tcp: clear tp-&gt;data_segs{in|out} in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;delivered in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;segs_{in|out} in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;total_retrans in tcp_disconnect() (networking-stable-20_02_05).
- tcp: fix marked lost packets not being retransmitted (networking-stable-20_01_20).
- tcp: fix 'old stuff' D-SACK causing SACK to be treated as D-SACK (networking-stable-20_01_11).
- thunderbolt: Prevent crash if non-active NVMem file is read (git-fixes).
- tick: broadcast-hrtimer: Fix a race in bc_set_next (bsc#1044231).
- tools lib traceevent: Do not free tep-&gt;cmdlines in add_new_comm() on failure (git-fixes).
- tools: Update include/uapi/linux/fcntl.h copy from the kernel (bsc#1166003).
- ttyprintk: fix a potential deadlock in interrupt context issue (git-fixes).
- tun: add mutex_unlock() call and napi.skb clearing in tun_get_user() (bsc#1109837).
- Updated block layer, timers and md code for SLE15-SP1 kernel (bsc#1111974).
- Updated 'drm/i915: Wean off drm_pci_alloc/drm_pci_free' (bsc#1114279) 
- USB: core: add endpoint-blacklist quirk (git-fixes).
- USBip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() (git-fixes).
- USB: quirks: blacklist duplicate ep on Sound Devices USBPre2 (git-fixes).
- uvcvideo: Refactor teardown of uvc on USB disconnect (https://patchwork.kernel.org/patch/9683663/) (bsc#1164507)
- vgacon: Fix a UAF in vgacon_invert_region (bsc#1114279)
- virtio-blk: fix hw_queue stopped on arbitrary error (git-fixes).
- vlan: fix memory leak in vlan_dev_set_egress_priority (networking-stable-20_01_11).
- vlan: vlan_changelink() should propagate errors (networking-stable-20_01_11).
- vxlan: fix tos value before xmit (networking-stable-20_01_11).
- x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF (bsc#1114279).
- x86/ioremap: Add an ioremap_encrypted() helper (bsc#1141895).
- x86/kdump: Export the SME mask to vmcoreinfo (bsc#1141895).
- x86/mce/amd: Fix kobject lifetime (bsc#1114279).
- x86/mce/amd: Publish the bank pointer only after setup has succeeded (bsc#1114279).
- x86/mm: Split vmalloc_sync_all() (bsc#1165741).
- xfs: also remove cached ACLs when removing the underlying attr (bsc#1165873).
- xfs: bulkstat should copy lastip whenever userspace supplies one (bsc#1165984).
- xhci: fix runtime pm enabling for quirky Intel hosts (bsc#1051510).
- xhci: Force Maximum Packet size for Full-speed bulk devices to valid range (bsc#1051510).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-31"/>
	<updated date="2020-03-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1044231">SUSE bug 1044231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051858">SUSE bug 1051858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056686">SUSE bug 1056686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060463">SUSE bug 1060463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111974">SUSE bug 1111974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119680">SUSE bug 1119680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136157">SUSE bug 1136157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141895">SUSE bug 1141895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146539">SUSE bug 1146539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156510">SUSE bug 1156510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158187">SUSE bug 1158187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159285">SUSE bug 1159285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160659">SUSE bug 1160659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161561">SUSE bug 1161561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161951">SUSE bug 1161951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162928">SUSE bug 1162928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162929">SUSE bug 1162929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162931">SUSE bug 1162931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164078">SUSE bug 1164078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164507">SUSE bug 1164507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165111">SUSE bug 1165111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165404">SUSE bug 1165404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165488">SUSE bug 1165488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165527">SUSE bug 1165527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165741">SUSE bug 1165741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165813">SUSE bug 1165813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165873">SUSE bug 1165873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165929">SUSE bug 1165929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165950">SUSE bug 1165950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165980">SUSE bug 1165980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165984">SUSE bug 1165984</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165985">SUSE bug 1165985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166003">SUSE bug 1166003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166101">SUSE bug 1166101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166102">SUSE bug 1166102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166103">SUSE bug 1166103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166104">SUSE bug 1166104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166632">SUSE bug 1166632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166658">SUSE bug 1166658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166730">SUSE bug 1166730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166731">SUSE bug 1166731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166732">SUSE bug 1166732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166733">SUSE bug 1166733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166734">SUSE bug 1166734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166735">SUSE bug 1166735</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19768/">CVE-2019-19768</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8647/">CVE-2020-8647</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8648/">CVE-2020-8648</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8649/">CVE-2020-8649</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-9383/">CVE-2020-9383</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497542" comment="kernel-default-livepatch-4.12.14-197.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497543" comment="kernel-default-livepatch-devel-4.12.14-197.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497544" comment="kernel-livepatch-4_12_14-197_37-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138448" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1165631" ref_url="https://bugzilla.suse.com/1165631" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006671.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_34 fixes one issue.

The following security issue was fixed:

- CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel (bsc#1165631)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-03"/>
	<updated date="2020-04-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720970" comment="kernel-default 4.12.14-197.34 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719189" comment="kernel-livepatch-4_12_14-197_34-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497545" comment="kernel-livepatch-4_12_14-197_34-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138449" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1159913" ref_url="https://bugzilla.suse.com/1159913" source="BUGZILLA"/>
		<reference ref_id="1165631" ref_url="https://bugzilla.suse.com/1165631" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5108" ref_url="https://www.suse.com/security/cve/CVE-2019-5108/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006672.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_29 fixes several issues.

The following security issues were fixed:

- CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel (bsc#1165631)
- CVE-2019-5108: Fixed an issue where by triggering AP to send IAPP location updates for stations before the required authentication process has completed could have led to denial-of-service (bsc#1159913).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-03"/>
	<updated date="2020-04-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159913">SUSE bug 1159913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5108/">CVE-2019-5108</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720971" comment="kernel-default 4.12.14-197.29 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719190" comment="kernel-livepatch-4_12_14-197_29-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497546" comment="kernel-livepatch-4_12_14-197_29-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138450" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1159913" ref_url="https://bugzilla.suse.com/1159913" source="BUGZILLA"/>
		<reference ref_id="1165631" ref_url="https://bugzilla.suse.com/1165631" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5108" ref_url="https://www.suse.com/security/cve/CVE-2019-5108/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006672.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_26 fixes several issues.

The following security issues were fixed:

- CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel (bsc#1165631)
- CVE-2019-5108: Fixed an issue where by triggering AP to send IAPP location updates for stations before the required authentication process has completed could have led to denial-of-service (bsc#1159913).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-03"/>
	<updated date="2020-04-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159913">SUSE bug 1159913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5108/">CVE-2019-5108</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720972" comment="kernel-default 4.12.14-197.26 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719191" comment="kernel-livepatch-4_12_14-197_26-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497547" comment="kernel-livepatch-4_12_14-197_26-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138451" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1159913" ref_url="https://bugzilla.suse.com/1159913" source="BUGZILLA"/>
		<reference ref_id="1165631" ref_url="https://bugzilla.suse.com/1165631" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5108" ref_url="https://www.suse.com/security/cve/CVE-2019-5108/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006672.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_21 fixes several issues.

The following security issues were fixed:

- CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel (bsc#1165631)
- CVE-2019-5108: Fixed an issue where by triggering AP to send IAPP location updates for stations before the required authentication process has completed could have led to denial-of-service (bsc#1159913).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-03"/>
	<updated date="2020-04-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159913">SUSE bug 1159913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5108/">CVE-2019-5108</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720966" comment="kernel-default 4.12.14-197.21 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719185" comment="kernel-livepatch-4_12_14-197_21-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497548" comment="kernel-livepatch-4_12_14-197_21-default-5-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138452" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1159913" ref_url="https://bugzilla.suse.com/1159913" source="BUGZILLA"/>
		<reference ref_id="1165631" ref_url="https://bugzilla.suse.com/1165631" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5108" ref_url="https://www.suse.com/security/cve/CVE-2019-5108/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006672.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_18 fixes several issues.

The following security issues were fixed:

- CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel (bsc#1165631)
- CVE-2019-5108: Fixed an issue where by triggering AP to send IAPP location updates for stations before the required authentication process has completed could have led to denial-of-service (bsc#1159913).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-03"/>
	<updated date="2020-04-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159913">SUSE bug 1159913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5108/">CVE-2019-5108</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720967" comment="kernel-default 4.12.14-197.18 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719186" comment="kernel-livepatch-4_12_14-197_18-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497549" comment="kernel-livepatch-4_12_14-197_18-default-5-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138453" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1159913" ref_url="https://bugzilla.suse.com/1159913" source="BUGZILLA"/>
		<reference ref_id="1165631" ref_url="https://bugzilla.suse.com/1165631" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5108" ref_url="https://www.suse.com/security/cve/CVE-2019-5108/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006672.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_15 fixes several issues.

The following security issues were fixed:

- CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel (bsc#1165631)
- CVE-2019-5108: Fixed an issue where by triggering AP to send IAPP location updates for stations before the required authentication process has completed could have led to denial-of-service (bsc#1159913).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-03"/>
	<updated date="2020-04-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159913">SUSE bug 1159913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5108/">CVE-2019-5108</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720965" comment="kernel-default 4.12.14-197.15 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719184" comment="kernel-livepatch-4_12_14-197_15-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497550" comment="kernel-livepatch-4_12_14-197_15-default-6-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138454" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1159913" ref_url="https://bugzilla.suse.com/1159913" source="BUGZILLA"/>
		<reference ref_id="1165631" ref_url="https://bugzilla.suse.com/1165631" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5108" ref_url="https://www.suse.com/security/cve/CVE-2019-5108/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006672.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_10 fixes several issues.

The following security issues were fixed:

- CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel (bsc#1165631)
- CVE-2019-5108: Fixed an issue where by triggering AP to send IAPP location updates for stations before the required authentication process has completed could have led to denial-of-service (bsc#1159913).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-03"/>
	<updated date="2020-04-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159913">SUSE bug 1159913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5108/">CVE-2019-5108</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720964" comment="kernel-default 4.12.14-197.10 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719183" comment="kernel-livepatch-4_12_14-197_10-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497551" comment="kernel-livepatch-4_12_14-197_10-default-6-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138455" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1159913" ref_url="https://bugzilla.suse.com/1159913" source="BUGZILLA"/>
		<reference ref_id="1165631" ref_url="https://bugzilla.suse.com/1165631" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5108" ref_url="https://www.suse.com/security/cve/CVE-2019-5108/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006672.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_7 fixes several issues.

The following security issues were fixed:

- CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel (bsc#1165631)
- CVE-2019-5108: Fixed an issue where by triggering AP to send IAPP location updates for stations before the required authentication process has completed could have led to denial-of-service (bsc#1159913).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-03"/>
	<updated date="2020-04-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159913">SUSE bug 1159913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5108/">CVE-2019-5108</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720963" comment="kernel-default 4.12.14-197.7 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719182" comment="kernel-livepatch-4_12_14-197_7-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497552" comment="kernel-livepatch-4_12_14-197_7-default-8-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138456" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1159913" ref_url="https://bugzilla.suse.com/1159913" source="BUGZILLA"/>
		<reference ref_id="1165631" ref_url="https://bugzilla.suse.com/1165631" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5108" ref_url="https://www.suse.com/security/cve/CVE-2019-5108/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006672.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_4 fixes several issues.

The following security issues were fixed:

- CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel (bsc#1165631)
- CVE-2019-5108: Fixed an issue where by triggering AP to send IAPP location updates for stations before the required authentication process has completed could have led to denial-of-service (bsc#1159913).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-03"/>
	<updated date="2020-04-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159913">SUSE bug 1159913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5108/">CVE-2019-5108</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720962" comment="kernel-default 4.12.14-197.4 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719181" comment="kernel-livepatch-4_12_14-197_4-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497553" comment="kernel-livepatch-4_12_14-197_4-default-9-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138457" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1159913" ref_url="https://bugzilla.suse.com/1159913" source="BUGZILLA"/>
		<reference ref_id="1165631" ref_url="https://bugzilla.suse.com/1165631" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5108" ref_url="https://www.suse.com/security/cve/CVE-2019-5108/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006672.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-195 fixes several issues.

The following security issues were fixed:

- CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel (bsc#1165631)
- CVE-2019-5108: Fixed an issue where by triggering AP to send IAPP location updates for stations before the required authentication process has completed could have led to denial-of-service (bsc#1159913).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-03"/>
	<updated date="2020-04-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159913">SUSE bug 1159913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165631">SUSE bug 1165631</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5108/">CVE-2019-5108</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720961" comment="kernel-default 4.12.14-195 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719180" comment="kernel-livepatch-4_12_14-195-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497554" comment="kernel-livepatch-4_12_14-195-default-10-28.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138458" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183120" ref_url="https://bugzilla.suse.com/1183120" source="BUGZILLA"/>
		<reference ref_id="1183491" ref_url="https://bugzilla.suse.com/1183491" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008591.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_40 fixes several issues.

The following security issues were fixed:

- CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGE_SIZE value (bsc#1183491).
- CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120).
- CVE-2021-27364: Fixed an issue where an unprivileged user could  craft Netlink messages (bsc#1182717).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-07"/>
	<updated date="2021-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183120">SUSE bug 1183120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183491">SUSE bug 1183491</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720969" comment="kernel-default 4.12.14-197.40 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719188" comment="kernel-livepatch-4_12_14-197_40-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497555" comment="kernel-livepatch-4_12_14-197_40-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138459" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183120" ref_url="https://bugzilla.suse.com/1183120" source="BUGZILLA"/>
		<reference ref_id="1183491" ref_url="https://bugzilla.suse.com/1183491" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008591.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_45 fixes several issues.

The following security issues were fixed:

- CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGE_SIZE value (bsc#1183491).
- CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120).
- CVE-2021-27364: Fixed an issue where an unprivileged user could  craft Netlink messages (bsc#1182717).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-07"/>
	<updated date="2021-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183120">SUSE bug 1183120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183491">SUSE bug 1183491</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720973" comment="kernel-default 4.12.14-197.45 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719192" comment="kernel-livepatch-4_12_14-197_45-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497556" comment="kernel-livepatch-4_12_14-197_45-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138460" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183120" ref_url="https://bugzilla.suse.com/1183120" source="BUGZILLA"/>
		<reference ref_id="1183491" ref_url="https://bugzilla.suse.com/1183491" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008591.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_48 fixes several issues.

The following security issues were fixed:

- CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGE_SIZE value (bsc#1183491).
- CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120).
- CVE-2021-27364: Fixed an issue where an unprivileged user could  craft Netlink messages (bsc#1182717).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-07"/>
	<updated date="2021-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183120">SUSE bug 1183120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183491">SUSE bug 1183491</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720974" comment="kernel-default 4.12.14-197.48 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719193" comment="kernel-livepatch-4_12_14-197_48-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497557" comment="kernel-livepatch-4_12_14-197_48-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138461" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183120" ref_url="https://bugzilla.suse.com/1183120" source="BUGZILLA"/>
		<reference ref_id="1183491" ref_url="https://bugzilla.suse.com/1183491" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008591.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_51 fixes several issues.

The following security issues were fixed:

- CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGE_SIZE value (bsc#1183491).
- CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120).
- CVE-2021-27364: Fixed an issue where an unprivileged user could  craft Netlink messages (bsc#1182717).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-07"/>
	<updated date="2021-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183120">SUSE bug 1183120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183491">SUSE bug 1183491</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720975" comment="kernel-default 4.12.14-197.51 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719194" comment="kernel-livepatch-4_12_14-197_51-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497558" comment="kernel-livepatch-4_12_14-197_51-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138462" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183120" ref_url="https://bugzilla.suse.com/1183120" source="BUGZILLA"/>
		<reference ref_id="1183491" ref_url="https://bugzilla.suse.com/1183491" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008591.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_56 fixes several issues.

The following security issues were fixed:

- CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGE_SIZE value (bsc#1183491).
- CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120).
- CVE-2021-27364: Fixed an issue where an unprivileged user could  craft Netlink messages (bsc#1182717).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-07"/>
	<updated date="2021-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183120">SUSE bug 1183120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183491">SUSE bug 1183491</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720976" comment="kernel-default 4.12.14-197.56 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719195" comment="kernel-livepatch-4_12_14-197_56-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497559" comment="kernel-livepatch-4_12_14-197_56-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138463" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183120" ref_url="https://bugzilla.suse.com/1183120" source="BUGZILLA"/>
		<reference ref_id="1183491" ref_url="https://bugzilla.suse.com/1183491" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008591.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_61 fixes several issues.

The following security issues were fixed:

- CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGE_SIZE value (bsc#1183491).
- CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120).
- CVE-2021-27364: Fixed an issue where an unprivileged user could  craft Netlink messages (bsc#1182717).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-07"/>
	<updated date="2021-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183120">SUSE bug 1183120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183491">SUSE bug 1183491</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720977" comment="kernel-default 4.12.14-197.61 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719196" comment="kernel-livepatch-4_12_14-197_61-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497560" comment="kernel-livepatch-4_12_14-197_61-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138464" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183120" ref_url="https://bugzilla.suse.com/1183120" source="BUGZILLA"/>
		<reference ref_id="1183491" ref_url="https://bugzilla.suse.com/1183491" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008591.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_64 fixes several issues.

The following security issues were fixed:

- CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGE_SIZE value (bsc#1183491).
- CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120).
- CVE-2021-27364: Fixed an issue where an unprivileged user could  craft Netlink messages (bsc#1182717).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-07"/>
	<updated date="2021-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183120">SUSE bug 1183120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183491">SUSE bug 1183491</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720978" comment="kernel-default 4.12.14-197.64 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719197" comment="kernel-livepatch-4_12_14-197_64-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497561" comment="kernel-livepatch-4_12_14-197_64-default-5-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138465" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183120" ref_url="https://bugzilla.suse.com/1183120" source="BUGZILLA"/>
		<reference ref_id="1183491" ref_url="https://bugzilla.suse.com/1183491" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008591.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_72 fixes several issues.

The following security issues were fixed:

- CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGE_SIZE value (bsc#1183491).
- CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120).
- CVE-2021-27364: Fixed an issue where an unprivileged user could  craft Netlink messages (bsc#1182717).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-07"/>
	<updated date="2021-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183120">SUSE bug 1183120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183491">SUSE bug 1183491</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720980" comment="kernel-default 4.12.14-197.72 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719199" comment="kernel-livepatch-4_12_14-197_72-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497562" comment="kernel-livepatch-4_12_14-197_72-default-4-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138466" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183120" ref_url="https://bugzilla.suse.com/1183120" source="BUGZILLA"/>
		<reference ref_id="1183491" ref_url="https://bugzilla.suse.com/1183491" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008591.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_75 fixes several issues.

The following security issues were fixed:

- CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGE_SIZE value (bsc#1183491).
- CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120).
- CVE-2021-27364: Fixed an issue where an unprivileged user could  craft Netlink messages (bsc#1182717).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-07"/>
	<updated date="2021-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183120">SUSE bug 1183120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183491">SUSE bug 1183491</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720981" comment="kernel-default 4.12.14-197.75 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719200" comment="kernel-livepatch-4_12_14-197_75-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497563" comment="kernel-livepatch-4_12_14-197_75-default-4-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138467" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183120" ref_url="https://bugzilla.suse.com/1183120" source="BUGZILLA"/>
		<reference ref_id="1183491" ref_url="https://bugzilla.suse.com/1183491" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008591.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_78 fixes several issues.

The following security issues were fixed:

- CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGE_SIZE value (bsc#1183491).
- CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120).
- CVE-2021-27364: Fixed an issue where an unprivileged user could  craft Netlink messages (bsc#1182717).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-07"/>
	<updated date="2021-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183120">SUSE bug 1183120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183491">SUSE bug 1183491</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720982" comment="kernel-default 4.12.14-197.78 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719201" comment="kernel-livepatch-4_12_14-197_78-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497564" comment="kernel-livepatch-4_12_14-197_78-default-4-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138468" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183120" ref_url="https://bugzilla.suse.com/1183120" source="BUGZILLA"/>
		<reference ref_id="1183491" ref_url="https://bugzilla.suse.com/1183491" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008591.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_83 fixes several issues.

The following security issues were fixed:

- CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGE_SIZE value (bsc#1183491).
- CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120).
- CVE-2021-27364: Fixed an issue where an unprivileged user could  craft Netlink messages (bsc#1182717).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-07"/>
	<updated date="2021-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183120">SUSE bug 1183120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183491">SUSE bug 1183491</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720983" comment="kernel-default 4.12.14-197.83 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719202" comment="kernel-livepatch-4_12_14-197_83-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497565" comment="kernel-livepatch-4_12_14-197_83-default-3-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138469" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183120" ref_url="https://bugzilla.suse.com/1183120" source="BUGZILLA"/>
		<reference ref_id="1183491" ref_url="https://bugzilla.suse.com/1183491" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008591.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_86 fixes several issues.

The following security issues were fixed:

- CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGE_SIZE value (bsc#1183491).
- CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120).
- CVE-2021-27364: Fixed an issue where an unprivileged user could  craft Netlink messages (bsc#1182717).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-07"/>
	<updated date="2021-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183120">SUSE bug 1183120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183491">SUSE bug 1183491</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720984" comment="kernel-default 4.12.14-197.86 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719203" comment="kernel-livepatch-4_12_14-197_86-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497566" comment="kernel-livepatch-4_12_14-197_86-default-2-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138470" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183120" ref_url="https://bugzilla.suse.com/1183120" source="BUGZILLA"/>
		<reference ref_id="1183491" ref_url="https://bugzilla.suse.com/1183491" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008591.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_37 fixes several issues.

The following security issues were fixed:

- CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGE_SIZE value (bsc#1183491).
- CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120).
- CVE-2021-27364: Fixed an issue where an unprivileged user could  craft Netlink messages (bsc#1182717).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-07"/>
	<updated date="2021-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183120">SUSE bug 1183120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183491">SUSE bug 1183491</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720968" comment="kernel-default 4.12.14-197.37 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719187" comment="kernel-livepatch-4_12_14-197_37-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497567" comment="kernel-livepatch-4_12_14-197_37-default-11-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138471" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183120" ref_url="https://bugzilla.suse.com/1183120" source="BUGZILLA"/>
		<reference ref_id="1183491" ref_url="https://bugzilla.suse.com/1183491" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1075-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008591.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_67 fixes several issues.

The following security issues were fixed:

- CVE-2021-27365: Fixed an issue where data structures did not have appropriate length constraints or checks, and could exceed the PAGE_SIZE value (bsc#1183491).
- CVE-2021-27363: Fixed a kernel pointer leak which could have been used to determine the address of the iscsi_transport structure (bsc#1183120).
- CVE-2021-27364: Fixed an issue where an unprivileged user could  craft Netlink messages (bsc#1182717).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-07"/>
	<updated date="2021-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183120">SUSE bug 1183120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183491">SUSE bug 1183491</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720979" comment="kernel-default 4.12.14-197.67 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719198" comment="kernel-livepatch-4_12_14-197_67-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497568" comment="kernel-livepatch-4_12_14-197_67-default-5-2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138472" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1040855" ref_url="https://bugzilla.suse.com/1040855" source="BUGZILLA"/>
		<reference ref_id="1044120" ref_url="https://bugzilla.suse.com/1044120" source="BUGZILLA"/>
		<reference ref_id="1044767" ref_url="https://bugzilla.suse.com/1044767" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1056653" ref_url="https://bugzilla.suse.com/1056653" source="BUGZILLA"/>
		<reference ref_id="1056657" ref_url="https://bugzilla.suse.com/1056657" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1094840" ref_url="https://bugzilla.suse.com/1094840" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104389" ref_url="https://bugzilla.suse.com/1104389" source="BUGZILLA"/>
		<reference ref_id="1104393" ref_url="https://bugzilla.suse.com/1104393" source="BUGZILLA"/>
		<reference ref_id="1109695" ref_url="https://bugzilla.suse.com/1109695" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1110096" ref_url="https://bugzilla.suse.com/1110096" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1115431" ref_url="https://bugzilla.suse.com/1115431" source="BUGZILLA"/>
		<reference ref_id="1118657" ref_url="https://bugzilla.suse.com/1118657" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1138374" ref_url="https://bugzilla.suse.com/1138374" source="BUGZILLA"/>
		<reference ref_id="1139944" ref_url="https://bugzilla.suse.com/1139944" source="BUGZILLA"/>
		<reference ref_id="1144912" ref_url="https://bugzilla.suse.com/1144912" source="BUGZILLA"/>
		<reference ref_id="1152457" ref_url="https://bugzilla.suse.com/1152457" source="BUGZILLA"/>
		<reference ref_id="1163727" ref_url="https://bugzilla.suse.com/1163727" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1171078" ref_url="https://bugzilla.suse.com/1171078" source="BUGZILLA"/>
		<reference ref_id="1172145" ref_url="https://bugzilla.suse.com/1172145" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1172694" ref_url="https://bugzilla.suse.com/1172694" source="BUGZILLA"/>
		<reference ref_id="1174784" ref_url="https://bugzilla.suse.com/1174784" source="BUGZILLA"/>
		<reference ref_id="1174852" ref_url="https://bugzilla.suse.com/1174852" source="BUGZILLA"/>
		<reference ref_id="1176558" ref_url="https://bugzilla.suse.com/1176558" source="BUGZILLA"/>
		<reference ref_id="1176559" ref_url="https://bugzilla.suse.com/1176559" source="BUGZILLA"/>
		<reference ref_id="1176956" ref_url="https://bugzilla.suse.com/1176956" source="BUGZILLA"/>
		<reference ref_id="1178270" ref_url="https://bugzilla.suse.com/1178270" source="BUGZILLA"/>
		<reference ref_id="1178372" ref_url="https://bugzilla.suse.com/1178372" source="BUGZILLA"/>
		<reference ref_id="1178401" ref_url="https://bugzilla.suse.com/1178401" source="BUGZILLA"/>
		<reference ref_id="1178590" ref_url="https://bugzilla.suse.com/1178590" source="BUGZILLA"/>
		<reference ref_id="1178634" ref_url="https://bugzilla.suse.com/1178634" source="BUGZILLA"/>
		<reference ref_id="1178762" ref_url="https://bugzilla.suse.com/1178762" source="BUGZILLA"/>
		<reference ref_id="1179014" ref_url="https://bugzilla.suse.com/1179014" source="BUGZILLA"/>
		<reference ref_id="1179015" ref_url="https://bugzilla.suse.com/1179015" source="BUGZILLA"/>
		<reference ref_id="1179045" ref_url="https://bugzilla.suse.com/1179045" source="BUGZILLA"/>
		<reference ref_id="1179082" ref_url="https://bugzilla.suse.com/1179082" source="BUGZILLA"/>
		<reference ref_id="1179107" ref_url="https://bugzilla.suse.com/1179107" source="BUGZILLA"/>
		<reference ref_id="1179142" ref_url="https://bugzilla.suse.com/1179142" source="BUGZILLA"/>
		<reference ref_id="1179204" ref_url="https://bugzilla.suse.com/1179204" source="BUGZILLA"/>
		<reference ref_id="1179419" ref_url="https://bugzilla.suse.com/1179419" source="BUGZILLA"/>
		<reference ref_id="1179444" ref_url="https://bugzilla.suse.com/1179444" source="BUGZILLA"/>
		<reference ref_id="1179520" ref_url="https://bugzilla.suse.com/1179520" source="BUGZILLA"/>
		<reference ref_id="1179578" ref_url="https://bugzilla.suse.com/1179578" source="BUGZILLA"/>
		<reference ref_id="1179601" ref_url="https://bugzilla.suse.com/1179601" source="BUGZILLA"/>
		<reference ref_id="1179663" ref_url="https://bugzilla.suse.com/1179663" source="BUGZILLA"/>
		<reference ref_id="1179666" ref_url="https://bugzilla.suse.com/1179666" source="BUGZILLA"/>
		<reference ref_id="1179670" ref_url="https://bugzilla.suse.com/1179670" source="BUGZILLA"/>
		<reference ref_id="1179671" ref_url="https://bugzilla.suse.com/1179671" source="BUGZILLA"/>
		<reference ref_id="1179672" ref_url="https://bugzilla.suse.com/1179672" source="BUGZILLA"/>
		<reference ref_id="1179673" ref_url="https://bugzilla.suse.com/1179673" source="BUGZILLA"/>
		<reference ref_id="1179711" ref_url="https://bugzilla.suse.com/1179711" source="BUGZILLA"/>
		<reference ref_id="1179713" ref_url="https://bugzilla.suse.com/1179713" source="BUGZILLA"/>
		<reference ref_id="1179714" ref_url="https://bugzilla.suse.com/1179714" source="BUGZILLA"/>
		<reference ref_id="1179715" ref_url="https://bugzilla.suse.com/1179715" source="BUGZILLA"/>
		<reference ref_id="1179716" ref_url="https://bugzilla.suse.com/1179716" source="BUGZILLA"/>
		<reference ref_id="1179722" ref_url="https://bugzilla.suse.com/1179722" source="BUGZILLA"/>
		<reference ref_id="1179723" ref_url="https://bugzilla.suse.com/1179723" source="BUGZILLA"/>
		<reference ref_id="1179724" ref_url="https://bugzilla.suse.com/1179724" source="BUGZILLA"/>
		<reference ref_id="1179745" ref_url="https://bugzilla.suse.com/1179745" source="BUGZILLA"/>
		<reference ref_id="1179810" ref_url="https://bugzilla.suse.com/1179810" source="BUGZILLA"/>
		<reference ref_id="1179888" ref_url="https://bugzilla.suse.com/1179888" source="BUGZILLA"/>
		<reference ref_id="1179895" ref_url="https://bugzilla.suse.com/1179895" source="BUGZILLA"/>
		<reference ref_id="1179896" ref_url="https://bugzilla.suse.com/1179896" source="BUGZILLA"/>
		<reference ref_id="1179960" ref_url="https://bugzilla.suse.com/1179960" source="BUGZILLA"/>
		<reference ref_id="1179963" ref_url="https://bugzilla.suse.com/1179963" source="BUGZILLA"/>
		<reference ref_id="1180027" ref_url="https://bugzilla.suse.com/1180027" source="BUGZILLA"/>
		<reference ref_id="1180029" ref_url="https://bugzilla.suse.com/1180029" source="BUGZILLA"/>
		<reference ref_id="1180031" ref_url="https://bugzilla.suse.com/1180031" source="BUGZILLA"/>
		<reference ref_id="1180052" ref_url="https://bugzilla.suse.com/1180052" source="BUGZILLA"/>
		<reference ref_id="1180086" ref_url="https://bugzilla.suse.com/1180086" source="BUGZILLA"/>
		<reference ref_id="1180117" ref_url="https://bugzilla.suse.com/1180117" source="BUGZILLA"/>
		<reference ref_id="1180258" ref_url="https://bugzilla.suse.com/1180258" source="BUGZILLA"/>
		<reference ref_id="1180506" ref_url="https://bugzilla.suse.com/1180506" source="BUGZILLA"/>
		<reference ref_id="1180559" ref_url="https://bugzilla.suse.com/1180559" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20669" ref_url="https://www.suse.com/security/cve/CVE-2018-20669/" source="CVE"/>
		<reference ref_id="CVE-2019-20934" ref_url="https://www.suse.com/security/cve/CVE-2019-20934/" source="CVE"/>
		<reference ref_id="CVE-2020-0444" ref_url="https://www.suse.com/security/cve/CVE-2020-0444/" source="CVE"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-27068" ref_url="https://www.suse.com/security/cve/CVE-2020-27068/" source="CVE"/>
		<reference ref_id="CVE-2020-27777" ref_url="https://www.suse.com/security/cve/CVE-2020-27777/" source="CVE"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-27825" ref_url="https://www.suse.com/security/cve/CVE-2020-27825/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="CVE-2020-4788" ref_url="https://www.suse.com/security/cve/CVE-2020-4788/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-28374: Fixed a Linux SCSI target issue (bsc#1178372).
- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180559).
- CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls (bsc#1179960).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180031).
- CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds check in the nl80211_policy policy of nl80211.c (bnc#1180086).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180029).
- CVE-2020-0444: Fixed a bad kfree due to a logic error in audit_data_to_entry (bnc#1180027).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bnc#1179745).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179745).
- CVE-2020-27777: Fixed a privilege escalation in the Run-Time Abstraction Services (RTAS) interface, affecting guests running on top of PowerVM or KVM hypervisors (bnc#1179107).
- CVE-2019-20934: Fixed a use-after-free in show_numa_stats() because NUMA fault statistics were inappropriately freed, aka CID-16d51a590a8c (bsc#1179663).
- CVE-2020-27786: Fixed a use after free in kernel midi subsystem snd_rawmidi_kernel_read1() (bsc#1179601).

The following non-security bugs were fixed:

- ACPI: PNP: compare the string length in the matching_id() (git-fixes).
- ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1 (git-fixes).
- ACPICA: Do not increment operation_region reference counts for field units (git-fixes).
- ALSA: ca0106: fix error code handling (git-fixes).
- ALSA: ctl: allow TLV read operation for callback type of element in locked case (git-fixes).
- ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO (git-fixes).
- ALSA: hda/ca0132 - Change Input Source enum strings (git-fixes).
- ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg (git-fixes).
- ALSA: hda/generic: Add option to enforce preferred_dacs pairs (git-fixes).
- ALSA: hda/hdmi: always check pin power status in i915 pin fixup (git-fixes).
- ALSA: hda/realtek - Add new codec supported for ALC897 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (git-fixes).
- ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (git-fixes).
- ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520 (git-fixes).
- ALSA: hda/realtek: Enable headset of ASUS UX482EG &amp; B9400CEA with ALC294 (git-fixes).
- ALSA: hda: Add NVIDIA codec IDs 9a &amp; 9d through a0 to patch table (git-fixes).
- ALSA: hda: Fix potential race in unsol event handler (git-fixes).
- ALSA: hda: Fix regressions on clear and reconfig sysfs (git-fixes).
- ALSA: info: Drop WARN_ON() from buffer NULL sanity check (git-fixes).
- ALSA: isa/wavefront: prevent out of bounds write in ioctl (git-fixes).
- ALSA: line6: Perform sanity check for each URB creation (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: pcm: oss: Fix potential out-of-bounds shift (git-fixes).
- ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check (git-fixes).
- ALSA: timer: Limit max amount of slave instances (git-fixes).
- ALSA: usb-audio: Add delay quirk for all Logitech USB devices (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16 (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2 (git-fixes).
- ALSA: usb-audio: add quirk for Denon DCD-1500RE (git-fixes).
- ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG) (git-fixes).
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Alpha S (git-fixes).
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight S (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware does not give back (git-fixes).
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (git-fixes).
- ALSA: usb-audio: Fix OOB access of mixer element list (git-fixes).
- ALSA: usb-audio: Fix potential out-of-bounds shift (git-fixes).
- ALSA: usb-audio: Fix race against the error recovery URB submission (git-fixes).
- ALSA: usb-audio: US16x08: fix value count for level meters (git-fixes).
- ASoC: arizona: Fix a wrong free in wm8997_probe (git-fixes).
- ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (git-fixes).
- ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed (git-fixes).
- ASoC: jz4740-i2s: add missed checks for clk_get() (git-fixes).
- ASoC: pcm3168a: The codec does not support S32_LE (git-fixes).
- ASoC: pcm: DRAIN support reactivation (git-fixes).
- ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile (git-fixes).
- ASoC: sti: fix possible sleep-in-atomic (git-fixes).
- ASoC: wm8904: fix regcache handling (git-fixes).
- ASoC: wm8998: Fix PM disable depth imbalance on error (git-fixes).
- ASoC: wm_adsp: Do not generate kcontrols without READ flags (git-fixes).
- ASoC: wm_adsp: remove 'ctl' from list on error in wm_adsp_create_control() (git-fixes).
- ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function (git-fixes).
- ath10k: Fix an error handling path (git-fixes).
- ath10k: fix backtrace on coredump (git-fixes).
- ath10k: fix get invalid tx rate for Mesh metric (git-fixes).
- ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq (git-fixes).
- ath10k: Release some resources in an error handling path (git-fixes).
- ath10k: Remove msdu from idr when management pkt send fails (git-fixes).
- ath6kl: fix enum-conversion warning (git-fixes).
- ath9k_htc: Discard undersized packets (git-fixes).
- ath9k_htc: Modify byte order for an error message (git-fixes).
- ath9k_htc: Silence undersized packet warnings (git-fixes).
- ath9k_htc: Use appropriate rs_datalen type (git-fixes).
- Avoid a GCC warning about '/*' within a comment.
- backlight: lp855x: Ensure regulators are disabled on probe failure (git-fixes).
- Bluetooth: add a mutex lock to avoid UAF in do_enale_set (git-fixes).
- Bluetooth: btusb: Fix detection of some fake CSR controllers with a bcdDevice val of 0x0134 (git-fixes).
- Bluetooth: Fix advertising duplicated flags (git-fixes).
- Bluetooth: Fix null pointer dereference in hci_event_packet() (git-fixes).
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (git-fixes).
- bnxt_en: Fix race when modifying pause settings (bsc#1050242 ).
- bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex (bsc#1050242).
- btmrvl: Fix firmware filename for sd8997 chipset (bsc#1172694).
- btrfs: fix use-after-free on readahead extent after failure to create it (bsc#1179963).
- btrfs: qgroup: do not commit transaction when we already hold the handle (bsc#1178634).
- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1174784).
- bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (git-fixes).
- can: mcp251x: add error check when wq alloc failed (git-fixes).
- can: softing: softing_netdev_open(): fix error handling (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- cfg80211: regulatory: Fix inconsistent format argument (git-fixes).
- cifs: add NULL check for ses-&gt;tcon_ipc (bsc#1178270).
- cifs: allow syscalls to be restarted in __smb_send_rqst() (bsc#1176956).
- cifs: fix check of tcon dfs in smb1 (bsc#1178270).
- cifs: fix potential use-after-free in cifs_echo_request() (bsc#1139944).
- cirrus: cs89x0: remove set but not used variable 'lp' (git-fixes).
- cirrus: cs89x0: use devm_platform_ioremap_resource() to simplify code (git-fixes).
- clk: at91: usb: continue if clk_hw_round_rate() return zero (git-fixes).
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (git-fixes).
- clk: qcom: Allow constant ratio freq tables for rcg (git-fixes).
- clk: qcom: msm8916: Fix the address location of pll-&gt;config_reg (git-fixes).
- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (git-fixes).
- clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1 (git-fixes).
- clk: sunxi-ng: Make sure divider tables have sentinel (git-fixes).
- clk: tegra: Fix duplicated SE clock entry (git-fixes).
- clk: tegra: Fix Tegra PMC clock out parents (git-fixes).
- clk: ti: composite: fix memory leak (git-fixes).
- clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call (git-fixes).
- clk: ti: Fix memleak in ti_fapll_synth_setup (git-fixes).
- clocksource/drivers/asm9260: Add a check for of_clk_get (git-fixes).
- coredump: fix core_pattern parse error (git-fixes).
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (git-fixes).
- cpufreq: loongson1: Add missing MODULE_ALIAS (git-fixes).
- cpufreq: scpi: Add missing MODULE_ALIAS (git-fixes).
- cpufreq: st: Add missing MODULE_DEVICE_TABLE (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (git-fixes).
- crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr() (git-fixes).
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (git-fixes).
- cxgb4: Fix offset when clearing filter byte counters (bsc#1064802 bsc#1066129).
- drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish (git-fixes).
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (git-fixes).
- drm/amd/display: remove useless if/else (git-fixes).
- drm/amdgpu: fix build_coefficients() argument (git-fixes).
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (git-fixes).
- drm/gma500: fix double free of gma_connector (git-fixes).
- drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] (bsc#1129770)
- drm/meson: dw-hdmi: Register a callback to disable the regulator (git-fixes).
- drm/msm/dpu: Add newline to printks (git-fixes).
- drm/msm/dsi_phy_10nm: implement PHY disabling (git-fixes).
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (git-fixes).
- drm/rockchip: Avoid uninitialized use of endpoint id in LVDS (git-fixes).
- epoll: Keep a reference on files added to the check list (bsc#1180031).
- ext4: correctly report 'not supported' for {usr,grp}jquota when !CONFIG_QUOTA (bsc#1179672).
- ext4: fix bogus warning in ext4_update_dx_flag() (bsc#1179716).
- ext4: fix error handling code in add_new_gdb (bsc#1179722).
- ext4: fix invalid inode checksum (bsc#1179723).
- ext4: fix leaking sysfs kobject after failed mount (bsc#1179670).
- ext4: limit entries returned when counting fsmap records (bsc#1179671).
- ext4: unlock xattr_sem properly in ext4_inline_data_truncate() (bsc#1179673).
- extcon: max77693: Fix modalias string (git-fixes).
- fbcon: Fix user font detection test at fbcon_resize(). (bsc#1112178) Backporting changes: 	* updated path drivers/video/fbcon/core to drivers/video/console
- fbcon: Remove the superfluous break (bsc#1129770) Backporting changes: 	* updated path drivers/video/fbcon/core to drivers/video/console 	* context changes
- firmware: qcom: scm: Ensure 'a0' status code is treated as signed (git-fixes).
- fix regression in 'epoll: Keep a reference on files added to the check list' (bsc#1180031, git-fixes).
- forcedeth: use per cpu to collect xmit/recv statistics (git-fixes).
- fs: Do not invalidate page buffers in block_write_full_page() (bsc#1179711).
- geneve: change from tx_error to tx_dropped on missing metadata (git-fixes).
- genirq/irqdomain: Add an irq_create_mapping_affinity() function (bsc#1065729).
- gpio: arizona: handle pm_runtime_get_sync failure case (git-fixes).
- gpio: gpio-grgpio: fix possible sleep-in-atomic-context bugs in grgpio_irq_map/unmap() (git-fixes).
- gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP (git-fixes).
- gpio: max77620: Fixup debounce delays (git-fixes).
- gpio: max77620: Use correct unit for debounce times (git-fixes).
- gpio: mpc8xxx: Add platform device to gpiochip-&gt;parent (git-fixes).
- gpio: mvebu: fix potential user-after-free on probe (git-fixes).
- gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism (git-fixes).
- gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 BYT + AXP288 model (git-fixes).
- gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 CHT + AXP288 model (git-fixes).
- gpiolib: acpi: Correct comment for HP x2 10 honor_wakeup quirk (git-fixes).
- gpiolib: acpi: Rework honor_wakeup option into an ignore_wake option (git-fixes).
- gpiolib: acpi: Turn dmi_system_id table into a generic quirk table (git-fixes).
- gpiolib: fix up emulated open drain outputs (git-fixes).
- HID: Add another Primax PIXART OEM mouse quirk (git-fixes).
- HID: apple: Disable Fn-key key-re-mapping on clone keyboards (git-fixes).
- HID: core: check whether Usage Page item is after Usage ID items (git-fixes).
- HID: core: Correctly handle ReportSize being zero (git-fixes).
- HID: cypress: Support Varmilo Keyboards' media hotkeys (git-fixes).
- HID: Fix slab-out-of-bounds read in hid_field_extract (bsc#1180052).
- HID: hid-sensor-hub: Fix issue with devices with no report ID (git-fixes).
- HID: Improve Windows Precision Touchpad detection (git-fixes).
- HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() (git-fixes).
- HID: logitech-hidpp: Silence intermittent get_battery_capacity errors (git-fixes).
- HSI: omap_ssi: Do not jump to free ID in ssi_add_controller() (git-fixes).
- hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow (git-fixes).
- hwmon: (jc42) Fix name to have no illegal characters (git-fixes).
- i2c: algo: pca: Reapply i2c bus settings after reset (git-fixes).
- i2c: i801: Fix resume bug (git-fixes).
- i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets (git-fixes).
- i2c: pxa: clear all master action bits in i2c_pxa_stop_message() (git-fixes).
- i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output (git-fixes).
- i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (git-fixes).
- ibmvnic: add some debugs (bsc#1179896 ltc#190255).
- ibmvnic: avoid memset null scrq msgs (bsc#1044767 ltc#155231 git-fixes).
- ibmvnic: continue fatal error reset after passive init (bsc#1171078 ltc#184239 git-fixes).
- ibmvnic: delay next reset if hard reset fails (bsc#1094840 ltc#167098 git-fixes).
- ibmvnic: enhance resetting status check during module exit (bsc#1065729).
- ibmvnic: fix call_netdevice_notifiers in do_reset (bsc#1115431 ltc#171853 git-fixes).
- ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues (bsc#1040855 ltc#155067 git-fixes).
- ibmvnic: fix: NULL pointer dereference (bsc#1044767 ltc#155231 git-fixes).
- ibmvnic: notify peers when failover and migration happen (bsc#1044120 ltc#155423 git-fixes).
- ibmvnic: restore adapter state on failed reset (bsc#1152457 ltc#174432 git-fixes).
- igc: Fix returning wrong statistics (bsc#1118657).
- iio: adc: max1027: Reset the device at probe time (git-fixes).
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (git-fixes).
- iio: bmp280: fix compensation of humidity (git-fixes).
- iio: buffer: Fix demux update (git-fixes).
- iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw() (git-fixes).
- iio: fix center temperature of bmc150-accel-core (git-fixes).
- iio: humidity: hdc100x: fix IIO_HUMIDITYRELATIVE channel reporting (git-fixes).
- iio: light: bh1750: Resolve compiler warning and make code more readable (git-fixes).
- iio: srf04: fix wrong limitation in distance measuring (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- iio:pressure:mpl3115: Force alignment of buffer (git-fixes).
- inet_ecn: Fix endianness of checksum update when setting ECT(1) (git-fixes).
- Input: ads7846 - fix integer overflow on Rt calculation (git-fixes).
- Input: ads7846 - fix race that causes missing releases (git-fixes).
- Input: ads7846 - fix unaligned access on 7845 (git-fixes).
- Input: atmel_mxt_ts - disable IRQ across suspend (git-fixes).
- Input: cm109 - do not stomp on control URB (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events (git-fixes).
- Input: cyapa_gen6 - fix out-of-bounds stack access (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (git-fixes).
- Input: i8042 - add Acer laptops to the i8042 reset list (git-fixes).
- Input: i8042 - add ByteSpeed touchpad to noloop table (git-fixes).
- Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists (git-fixes).
- Input: i8042 - allow insmod to succeed on devices without an i8042 controller (git-fixes).
- Input: i8042 - fix error return code in i8042_setup_aux() (git-fixes).
- Input: omap4-keypad - fix runtime PM error handling (git-fixes).
- Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen (git-fixes).
- Input: trackpoint - add new trackpoint variant IDs (git-fixes).
- Input: trackpoint - enable Synaptics trackpoints (git-fixes).
- Input: xpad - support Ardwiino Controllers (git-fixes).
- ipw2x00: Fix -Wcast-function-type (git-fixes).
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (git-fixes).
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (git-fixes).
- iwlwifi: mvm: fix unaligned read of rx_pkt_status (git-fixes).
- iwlwifi: pcie: limit memory read spin time (git-fixes).
- kABI fix for g2d (git-fixes).
- kABI workaround for dsa/b53 changes (git-fixes).
- kABI workaround for HD-audio generic parser (git-fixes).
- kABI workaround for net/ipvlan changes (git-fixes).
- kABI: ath10k: move a new structure member to the end (git-fixes).
- kABI: genirq: add back irq_create_mapping (bsc#1065729).
- kernel-source.spec: Fix build with rpm 4.16 (boo#1179015). RPM_BUILD_ROOT is cleared before %%install. Do the unpack into RPM_BUILD_ROOT in %%install
- kernel-{binary,source}.spec.in: do not create loop symlinks (bsc#1179082)
- kgdb: Fix spurious true from in_dbg_master() (git-fixes).
- KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (bsc#1112178).
- mac80211: allow rx of mesh eapol frames with default rx key (git-fixes).
- mac80211: Check port authorization in the ieee80211_tx_dequeue() case (git-fixes).
- mac80211: do not set set TDLS STA bandwidth wider than possible (git-fixes).
- mac80211: fix authentication with iwlwifi/mvm (git-fixes).
- mac80211: fix use of skb payload instead of header (git-fixes).
- mac80211: mesh: fix mesh_pathtbl_init() error path (git-fixes).
- matroxfb: avoid -Warray-bounds warning (git-fixes).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps() (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/cluster: fix deadlock when node is doing resync job (bsc#1163727).
- md/raid5: fix oops during stripe resizing (git-fixes).
- media: am437x-vpfe: Setting STD to current value is not an error (git-fixes).
- media: cec-funcs.h: add status_req checks (git-fixes).
- media: cx88: Fix some error handling path in 'cx8800_initdev()' (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: i2c: mt9v032: fix enum mbus codes and frame sizes (git-fixes).
- media: i2c: ov2659: Fix missing 720p register config (git-fixes).
- media: i2c: ov2659: fix s_stream return value (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: mtk-mdp: Fix a refcounting bug on error in init (git-fixes).
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (git-fixes).
- media: platform: add missing put_device() call in mtk_jpeg_probe() and mtk_jpeg_remove() (git-patches).
- media: pvrusb2: Fix oops on tear-down when radio support is not present (git-fixes).
- media: s5p-g2d: Fix a memory leak in an error handling path in 'g2d_probe()' (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio() (git-fixes).
- media: si470x-i2c: add missed operations in remove (git-fixes).
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling case (git-fixes).
- media: sti: bdisp: fix a possible sleep-in-atomic-context bug in bdisp_device_run() (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous (git-fixes).
- media: ti-vpe: vpe: ensure buffers are cleaned up properly in abort cases (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence number (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid sizeimage (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure causing a kernel panic (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format (git-fixes).
- media: ti-vpe: vpe: Make sure YUYV is set as default format (git-fixes).
- media: uvcvideo: Set media controller entity functions (git-fixes).
- media: uvcvideo: Silence shift-out-of-bounds warning (git-fixes).
- media: v4l2-async: Fix trivial documentation typo (git-fixes).
- media: v4l2-core: fix touch support in v4l_g_fmt (git-fixes).
- media: v4l2-device.h: Explicitly compare grp{id,mask} to zero in v4l2_device macros (git-fixes).
- mei: bus: do not clean driver pointer (git-fixes).
- mei: protect mei_cl_mtu from null dereference (git-fixes).
- memstick: fix a double-free bug in memstick_check (git-fixes).
- memstick: r592: Fix error return in r592_probe() (git-fixes).
- mfd: rt5033: Fix errorneous defines (git-fixes).
- mfd: wm8994: Fix driver operation if loaded as modules (git-fixes).
- mlxsw: core: Fix memory leak on module removal (bsc#1112374).
- mm,memory_failure: always pin the page in madvise_inject_error (bsc#1180258).
- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (bsc#1179204).
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/tls: Fix kmap usage (bsc#1109837).
- net/tls: missing received data after fast remote close (bsc#1109837).
- net/x25: prevent a couple of overflows (bsc#1178590).
- net: aquantia: Fix aq_vec_isr_legacy() return value (git-fixes).
- net: aquantia: fix LRO with FCS error (git-fixes).
- net: DCB: Validate DCB_ATTR_DCB_BUFFER argument (bsc#1103990 ).
- net: dsa: b53: Always use dev-&gt;vlan_enabled in b53_configure_vlan() (git-fixes).
- net: dsa: b53: Ensure the default VID is untagged (git-fixes).
- net: dsa: b53: Fix default VLAN ID (git-fixes).
- net: dsa: b53: Properly account for VLAN filtering (git-fixes).
- net: dsa: bcm_sf2: Do not assume DSA master supports WoL (git-fixes).
- net: dsa: bcm_sf2: potential array overflow in bcm_sf2_sw_suspend() (git-fixes).
- net: dsa: qca8k: remove leftover phy accessors (git-fixes).
- net: ena: fix packet's addresses for rx_offset feature (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (git-fixes).
- net: ethernet: ti: cpsw: fix runtime_pm while add/kill vlan (git-fixes).
- net: hisilicon: Fix signedness bug in hix5hd2_dev_probe() (git-fixes).
- net: macb: add missing barriers when reading descriptors (git-fixes).
- net: macb: fix dropped RX frames due to a race (git-fixes).
- net: macb: fix error format in dev_err() (git-fixes).
- net: macb: fix random memory corruption on RX with 64-bit DMA (git-fixes).
- net: pasemi: fix an use-after-free in pasemi_mac_phy_init() (git-fixes).
- net: phy: Avoid multiple suspends (git-fixes).
- net: qed: fix 'maybe uninitialized' warning (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: qed: fix async event callbacks unregistering (bsc#1104393 bsc#1104389).
- net: qede: fix PTP initialization on recovery (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: qede: fix use-after-free on recovery and AER handling (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: seeq: Fix the function used to release some memory in an error handling path (git-fixes).
- net: sh_eth: fix a missing check of of_get_phy_mode (git-fixes).
- net: sonic: replace dev_kfree_skb in sonic_send_packet (git-fixes).
- net: sonic: return NETDEV_TX_OK if failed to map buffer (git-fixes).
- net: stmmac: fix csr_clk can't be zero issue (git-fixes).
- net: stmmac: Fix reception of Broadcom switches tags (git-fixes).
- net: thunderx: use spin_lock_bh in nicvf_set_rx_mode_task() (bsc#1110096).
- net: usb: sr9800: fix uninitialized local variable (git-fixes).
- net:ethernet:aquantia: Extra spinlocks removed (git-fixes).
- net_sched: fix a memory leak in atm_tc_init() (bsc#1056657 bsc#1056653 bsc#1056787).
- nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame (git-fixes).
- nfc: s3fwrn5: Release the nfc firmware (git-fixes).
- nfc: st95hf: Fix memleak in st95hf_in_send_cmd (git-fixes).
- nfp: use correct define to return NONE fec (bsc#1109837).
- NFS: fix nfs_path in case of a rename retry (git-fixes).
- NFSD: Add missing NFSv2 .pc_func methods (git-fixes).
- NFSv4.2: fix client's attribute cache management for copy_file_range (git-fixes).
- NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag (git-fixes).
- ocfs2: fix unbalanced locking (bsc#1180506).
- ocfs2: initialize ip_next_orphan (bsc#1179724).
- orinoco: Move context allocation after processing the skb (git-fixes).
- parport: load lowlevel driver if ports not found (git-fixes).
- PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges (git-fixes).
- PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge (git-fixes).
- PCI: Do not disable decoding when mmio_always_on is set (git-fixes).
- PCI: Fix pci_slot_release() NULL pointer dereference (git-fixes).
- phy: Revert toggling reset changes (git-fixes).
- pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler() (git-fixes).
- pinctrl: amd: fix npins for uart0 in kerncz_groups (git-fixes).
- pinctrl: amd: remove debounce filter setting in IRQ type setting (git-fixes).
- pinctrl: baytrail: Avoid clearing debounce value when turning it off (git-fixes).
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (git-fixes).
- pinctrl: merrifield: Set default bias in case no particular value given (git-fixes).
- pinctrl: sh-pfc: sh7734: Fix duplicate TCLK1_B (git-fixes).
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (git-fixes).
- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (git-fixes).
- platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (git-fixes).
- platform/x86: mlx-platform: remove an unused variable (git-fixes).
- platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (git-fixes).
- platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (git-fixes).
- PM / hibernate: memory_bm_find_bit(): Tighten node optimisation (git-fixes).
- PM: ACPI: Output correct message on target power state (git-fixes).
- PM: hibernate: Freeze kernel threads in software_resume() (git-fixes).
- PM: hibernate: remove the bogus call to get_gendisk() in software_resume() (git-fixes).
- pNFS/flexfiles: Fix list corruption if the mirror count changes (git-fixes).
- power: supply: bq24190_charger: fix reference leak (git-fixes).
- power: supply: bq27xxx_battery: Silence deferred-probe error (git-fixes).
- powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (bsc#1065729).
- powerpc/64s/pseries: Fix hash tlbiel_all_isa300 for guest kernels (bsc#1179888 ltc#190253).
- powerpc/64s: Fix hash ISA v3.0 TLBIEL instruction generation (bsc#1055117 ltc#159753 git-fixes bsc#1179888 ltc#190253).
- powerpc/pci: Fix broken INTx configuration via OF (bsc#1172145 ltc#184630).
- powerpc/pci: Remove legacy debug code (bsc#1172145 ltc#184630 git-fixes).
- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145 ltc#184630).
- powerpc/pci: Use of_irq_parse_and_map_pci() helper (bsc#1172145 ltc#184630).
- powerpc/perf: Fix crash with is_sier_available when pmu is not set (bsc#1179578 ltc#189313).
- powerpc/pseries/hibernation: remove redundant cacheinfo update (bsc#1138374 ltc#178199 git-fixes).
- powerpc/pseries: Pass MSI affinity to irq_create_mapping() (bsc#1065729).
- powerpc/smp: Add __init to init_big_cores() (bsc#1109695 ltc#171067 git-fixes).
- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- powerpc: Convert to using %pOF instead of full_name (bsc#1172145 ltc#184630).
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (bsc#1065729).
- ppp: remove the PPPIOCDETACH ioctl (git-fixes).
- pwm: lp3943: Dynamically allocate PWM chip base (git-fixes).
- qed: fix error return code in qed_iwarp_ll2_start() (bsc#1050536 bsc#1050545).
- qed: suppress 'do not support RoCE &amp; iWARP' flooding on HW init (bsc#1050536 bsc#1050545).
- qed: suppress false-positives interrupt error messages on HW init (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- quota: clear padding in v2r1_mem2diskdqb() (bsc#1179714).
- radeon: insert 10ms sleep in dce5_crtc_load_lut (git-fixes).
- ravb: Fix use-after-free ravb_tstamp_skb (git-fixes).
- RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532 (bsc#1050545).
- RDMA/qedr: Fix memory leak in iWARP CM (bsc#1050545 ).
- regmap: debugfs: check count when read regmap file (git-fixes).
- regmap: dev_get_regmap_match(): fix string comparison (git-fixes).
- regmap: Remove duplicate `type` field from regmap `regcache_sync` trace event (git-fixes).
- regulator: max8907: Fix the usage of uninitialized variable in max8907_regulator_probe() (git-fixes).
- regulator: pfuze100-regulator: Variable 'val' in pfuze100_regulator_probe() could be uninitialized (git-fixes).
- regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone (git-fixes).
- reiserfs: Fix oops during mount (bsc#1179715).
- reiserfs: Initialize inode keys properly (bsc#1179713).
- remoteproc: Fix wrong rvring index computation (git-fixes).
- rfkill: Fix incorrect check to avoid NULL pointer dereference (git-fixes).
- rtc: 88pm860x: fix possible race condition (git-fixes).
- rtc: hym8563: enable wakeup when applicable (git-fixes).
- rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot (git-fixes).
- rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt() (git-fixes).
- s390/bpf: Fix multiple tail calls (git-fixes).
- s390/cpuinfo: show processor physical address (git-fixes).
- s390/cpum_sf.c: fix file permission for cpum_sfb_size (git-fixes).
- s390/dasd: fix hanging device offline processing (bsc#1144912).
- s390/dasd: fix null pointer dereference for ERP requests (git-fixes).
- s390/pci: fix CPU address in MSI for directed IRQ (git-fixes).
- s390/qeth: fix af_iucv notification race (git-fixes).
- s390/qeth: fix tear down of async TX buffers (git-fixes).
- s390/qeth: make af_iucv TX notification call more robust (git-fixes).
- s390/stp: add locking to sysfs functions (git-fixes).
- s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (git-fixes).
- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- scsi: lpfc: Add FDMI Vendor MIB support (bsc#1164780).
- scsi: lpfc: Convert abort handling to SLI-3 and SLI-4 handlers (bsc#1164780).
- scsi: lpfc: Convert SCSI I/O completions to SLI-3 and SLI-4 handlers (bsc#1164780).
- scsi: lpfc: Convert SCSI path to use common I/O submission path (bsc#1164780).
- scsi: lpfc: Correct null ndlp reference on routine exit (bsc#1164780).
- scsi: lpfc: Drop nodelist reference on error in lpfc_gen_req() (bsc#1164780).
- scsi: lpfc: Enable common send_io interface for SCSI and NVMe (bsc#1164780).
- scsi: lpfc: Enable common wqe_template support for both SCSI and NVMe (bsc#1164780).
- scsi: lpfc: Enlarge max_sectors in scsi host templates (bsc#1164780).
- scsi: lpfc: Extend the RDF FPIN Registration descriptor for additional events (bsc#1164780).
- scsi: lpfc: Fix duplicate wq_create_version check (bsc#1164780).
- scsi: lpfc: Fix fall-through warnings for Clang (bsc#1164780).
- scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery (bsc#1164780).
- scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc() (bsc#1164780).
- scsi: lpfc: Fix memory leak on lcb_context (bsc#1164780).
- scsi: lpfc: Fix missing prototype for lpfc_nvmet_prep_abort_wqe() (bsc#1164780).
- scsi: lpfc: Fix missing prototype warning for lpfc_fdmi_vendor_attr_mi() (bsc#1164780).
- scsi: lpfc: Fix NPIV discovery and Fabric Node detection (bsc#1164780).
- scsi: lpfc: Fix NPIV Fabric Node reference counting (bsc#1164780).
- scsi: lpfc: Fix pointer defereference before it is null checked issue (bsc#1164780).
- scsi: lpfc: Fix refcounting around SCSI and NVMe transport APIs (bsc#1164780).
- scsi: lpfc: Fix removal of SCSI transport device get and put on dev structure (bsc#1164780).
- scsi: lpfc: Fix scheduling call while in softirq context in lpfc_unreg_rpi (bsc#1164780).
- scsi: lpfc: Fix set but not used warnings from Rework remote port lock handling (bsc#1164780).
- scsi: lpfc: Fix set but unused variables in lpfc_dev_loss_tmo_handler() (bsc#1164780).
- scsi: lpfc: Fix spelling mistake 'Cant' -&gt; 'Can't' (bsc#1164780).
- scsi: lpfc: Fix variable 'vport' set but not used in lpfc_sli4_abts_err_handler() (bsc#1164780).
- scsi: lpfc: lpfc_attr: Demote kernel-doc format for redefined functions (bsc#1164780).
- scsi: lpfc: lpfc_attr: Fix-up a bunch of kernel-doc misdemeanours (bsc#1164780).
- scsi: lpfc: lpfc_debugfs: Fix a couple of function documentation issues (bsc#1164780).
- scsi: lpfc: lpfc_scsi: Fix a whole host of kernel-doc issues (bsc#1164780).
- scsi: lpfc: Refactor WQE structure definitions for common use (bsc#1164780).
- scsi: lpfc: Reject CT request for MIB commands (bsc#1164780).
- scsi: lpfc: Remove dead code on second !ndlp check (bsc#1164780).
- scsi: lpfc: Remove ndlp when a PLOGI/ADISC/PRLI/REG_RPI ultimately fails (bsc#1164780).
- scsi: lpfc: Remove set but not used 'qp' (bsc#1164780).
- scsi: lpfc: Remove unneeded variable 'status' in lpfc_fcp_cpu_map_store() (bsc#1164780).
- scsi: lpfc: Removed unused macros in lpfc_attr.c (bsc#1164780).
- scsi: lpfc: Rework locations of ndlp reference taking (bsc#1164780).
- scsi: lpfc: Rework remote port lock handling (bsc#1164780).
- scsi: lpfc: Rework remote port ref counting and node freeing (bsc#1164780).
- scsi: lpfc: Unsolicited ELS leaves node in incorrect state while dropping it (bsc#1164780).
- scsi: lpfc: Update changed file copyrights for 2020 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.4 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.5 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.6 (bsc#1164780).
- scsi: lpfc: Use generic power management (bsc#1164780).
- scsi: qla2xxx: Change post del message from debug level to log level (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Do not check for fw_started while posting NVMe command (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Do not consume srb greedily (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix compilation issue in PPC systems (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix crash during driver load on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix device loss on 4G and older HBAs (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix flash update in 28XX adapters on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix FW initialization error on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix N2N and NVMe connect retry failure (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix return of uninitialized value in rval (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix the call trace for flush workqueue (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Handle aborts correctly for port undergoing deletion (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Initialize variable in qla8044_poll_reg() (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Limit interrupt vectors to number of CPUs (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Move sess cmd list/lock to driver (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove in_interrupt() from qla82xx-specific code (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove in_interrupt() from qla83xx-specific code (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: remove incorrect sparse #ifdef (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove trailing semicolon in macro definition (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Return EBUSY on fcport deletion (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Tear down session if FW say it is down (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Update version to 10.02.00.104-k (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Use constant when it is known (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: Remove unneeded break statements (bsc#1164780).
- scsi: storvsc: Fix error return in storvsc_probe() (git-fixes).
- scsi: target: tcm_qla2xxx: Remove BUG_ON(in_interrupt()) (bsc#1172538 bsc#1179142 bsc#1179810).
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (git-fixes).
- serial: 8250_pci: Add Realtek 816a and 816b (git-fixes).
- serial: amba-pl011: Make sure we initialize the port.lock spinlock (git-fixes).
- serial: ar933x_uart: set UART_CS_{RX,TX}_READY_ORIDE (git-fixes).
- serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init (git-fixes).
- serial_core: Check for port state when tty is in error state (git-fixes).
- SMB3: Honor 'handletimeout' flag for multiuser mounts (bsc#1176558).
- SMB3: Honor 'posix' flag for multiuser mounts (bsc#1176559).
- SMB3: Honor lease disabling for multiuser mounts (git-fixes).
- soc/tegra: fuse: Fix index bug in get_process_id (git-fixes).
- soc: imx: gpc: fix power up sequencing (git-fixes).
- soc: mediatek: Check if power domains can be powered on at boot time (git-fixes).
- soc: qcom: smp2p: Safely acquire spinlock without IRQs (git-fixes).
- soc: ti: Fix reference imbalance in knav_dma_probe (git-fixes).
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (git-fixes).
- spi: Add call to spi_slave_abort() function when spidev driver is released (git-fixes).
- spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (git-fixes).
- spi: davinci: Fix use-after-free on unbind (git-fixes).
- spi: dw: Enable interrupts in accordance with DMA xfer mode (git-fixes).
- spi: dw: Fix Rx-only DMA transfers (git-fixes).
- spi: dw: Return any value retrieved from the dma_transfer callback (git-fixes).
- spi: Fix memory leak on splited transfers (git-fixes).
- spi: img-spfi: fix potential double release (git-fixes).
- spi: img-spfi: fix reference leak in img_spfi_resume (git-fixes).
- spi: pic32: Do not leak DMA channels in probe error path (git-fixes).
- spi: pxa2xx: Add missed security checks (git-fixes).
- spi: spi-cavium-thunderx: Add missing pci_release_regions() (git-fixes).
- spi: spi-loopback-test: Fix out-of-bounds read (git-fixes).
- spi: spi-mem: Fix passing zero to 'PTR_ERR' warning (git-fixes).
- spi: spi-mem: fix reference leak in spi_mem_access_start (git-fixes).
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (git-fixes).
- spi: spidev: fix a potential use-after-free in spidev_release() (git-fixes).
- spi: st-ssc4: add missed pm_runtime_disable (git-fixes).
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (git-fixes).
- spi: tegra114: fix reference leak in tegra spi ops (git-fixes).
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (git-fixes).
- spi: tegra20-slink: add missed clk_unprepare (git-fixes).
- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (git-fixes).
- splice: only read in as much information as there is pipe buffer space (bsc#1179520).
- staging: comedi: check validity of wMaxPacketSize of usb endpoints found (git-fixes).
- staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value (git-fixes).
- staging: comedi: mf6x4: Fix AI end-of-conversion detection (git-fixes).
- staging: olpc_dcon: add a missing dependency (git-fixes).
- staging: olpc_dcon: Do not call platform_device_unregister() in dcon_probe() (git-fixes).
- staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21 (git-fixes).
- staging: rtl8188eu: Add device id for MERCUSYS MW150US v2 (git-fixes).
- staging: rtl8188eu: fix possible null dereference (git-fixes).
- staging: rtl8192u: fix multiple memory leaks on error path (git-fixes).
- staging: vt6656: set usb_set_intfdata on driver fail (git-fixes).
- staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() (git-fixes).
- staging: wlan-ng: properly check endpoint types (git-fixes).
- sunrpc: fix copying of multiple pages in gss_read_proxy_verf() (bsc#1103992).
- sunrpc: fixed rollback in rpc_gssd_dummy_populate() (git-fixes).
- sunrpc: Properly set the @subbuf parameter of xdr_buf_subsegment() (git-fixes).
- sunrpc: The RDMA back channel mustn't disappear while requests are outstanding (git-fixes).
- svcrdma: fix bounce buffers for unaligned offsets and multiple pages (bsc#1103992).
- svcrdma: Fix page leak in svc_rdma_recv_read_chunk() (bsc#1103992).
- tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (bsc#1109837).
- thunderbolt: Use 32-bit writes when writing ring producer/consumer (git-fixes).
- timer: Fix wheel index calculation on last level (git fixes)
- timer: Prevent base-&gt;clk from moving backward (git-fixes)
- tty: always relink the port (git-fixes).
- tty: Fix -&gt;pgrp locking in tiocspgrp() (git-fixes).
- tty: link tty and port before configuring it as console (git-fixes).
- tty: synclink_gt: Adjust indentation in several functions (git-fixes).
- tty: synclinkmp: Adjust indentation in several functions (git-fixes).
- tty:serial:mvebu-uart:fix a wrong return (git-fixes).
- uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define (git-fixes).
- uapi/if_ether.h: prevent redefinition of struct ethhdr (git-fixes).
- usb: add RESET_RESUME quirk for Snapscan 1212 (git-fixes).
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (git-fixes).
- usb: dummy-hcd: Fix uninitialized array use in init() (git-fixes).
- usb: dwc2: Fix IN FIFO allocation (git-fixes).
- usb: dwc3: remove the call trace of USBx_GFLADJ (git-fixes).
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (git-fixes).
- usb: Fix: Do not skip endpoint descriptors with maxpacket=0 (git-fixes).
- usb: fsl: Check memory resource before releasing it (git-fixes).
- usb: gadget: composite: Fix possible double free memory bug (git-fixes).
- usb: gadget: configfs: fix concurrent issue between composite APIs (git-fixes).
- usb: gadget: configfs: Fix missing spin_lock_init() (git-fixes).
- usb: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- usb: gadget: f_fs: Use local copy of descriptors for userspace copy (git-fixes).
- usb: gadget: f_midi: setup SuperSpeed Plus descriptors (git-fixes).
- usb: gadget: f_rndis: fix bitrate for SuperSpeed and above (git-fixes).
- usb: gadget: ffs: ffs_aio_cancel(): Save/restore IRQ flags (git-fixes).
- usb: gadget: fix wrong endpoint desc (git-fixes).
- usb: gadget: goku_udc: fix potential crashes in probe (git-fixes).
- usb: gadget: net2280: fix memory leak on probe error handling paths (git-fixes).
- usb: gadget: serial: fix Tx stall after buffer overflow (git-fixes).
- usb: gadget: udc: fix possible sleep-in-atomic-context bugs in gr_probe() (git-fixes).
- usb: gadget: udc: gr_udc: fix memleak on error handling path in gr_ep_init() (git-fixes).
- usb: hso: Fix debug compile warning on sparc32 (git-fixes).
- usb: ldusb: use unsigned size format specifiers (git-fixes).
- usb: musb: omap2430: Get rid of musb .set_vbus for omap2430 glue (git-fixes).
- usb: oxu210hp-hcd: Fix memory leak in oxu_create (git-fixes).
- usb: serial: ch341: add new Product ID for CH341A (git-fixes).
- usb: serial: ch341: sort device-id entries (git-fixes).
- usb: serial: digi_acceleport: clean up modem-control handling (git-fixes).
- usb: serial: digi_acceleport: clean up set_termios (git-fixes).
- usb: serial: digi_acceleport: fix write-wakeup deadlocks (git-fixes).
- usb: serial: digi_acceleport: remove in_interrupt() usage.
- usb: serial: digi_acceleport: remove redundant assignment to pointer priv (git-fixes).
- usb: serial: digi_acceleport: rename tty flag variable (git-fixes).
- usb: serial: digi_acceleport: use irqsave() in USB's complete callback (git-fixes).
- usb: serial: keyspan_pda: fix dropped unthrottle interrupts (git-fixes).
- usb: serial: keyspan_pda: fix stalled writes (git-fixes).
- usb: serial: keyspan_pda: fix tx-unthrottle use-after-free (git-fixes).
- usb: serial: keyspan_pda: fix write deadlock (git-fixes).
- usb: serial: keyspan_pda: fix write unthrottling (git-fixes).
- usb: serial: keyspan_pda: fix write-wakeup use-after-free (git-fixes).
- usb: serial: kl5kusb105: fix memleak on open (git-fixes).
- usb: serial: mos7720: fix parallel-port state restore (git-fixes).
- usb: serial: option: add Fibocom NL668 variants (git-fixes).
- usb: serial: option: add interface-number sanity check to flag handling (git-fixes).
- usb: serial: option: add support for Thales Cinterion EXS82 (git-fixes).
- usb: serial: option: fix Quectel BG96 matching (git-fixes).
- usb: Skip endpoints with 0 maxpacket length (git-fixes).
- usb: UAS: introduce a quirk to set no_write_same (git-fixes).
- usb: usbfs: Suppress problematic bind and unbind uevents (git-fixes).
- usblp: poison URBs upon disconnect (git-fixes).
- usbnet: ipheth: fix connectivity with iOS 14 (git-fixes).
- video: fbdev: neofb: fix memory leak in neo_scan_monitor() (git-fixes).
- vt: do not hardcode the mem allocation upper bound (git-fixes).
- vt: Reject zero-sized screen buffer size (git-fixes).
- watchdog: coh901327: add COMMON_CLK dependency (git-fixes).
- watchdog: da9062: do not ping the hw during stop() (git-fixes).
- watchdog: da9062: No need to ping manually before setting timeout (git-fixes).
- watchdog: qcom: Avoid context switch in restart handler (git-fixes).
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (git-fixes).
- wimax: fix duplicate initializer warning (git-fixes).
- wireless: Use linux/stddef.h instead of stddef.h (git-fixes).
- wireless: Use offsetof instead of custom macro (git-fixes).
- x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz (bsc#1112178).
- x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes (bsc#1112178).
- x86/mm/ident_map: Check for errors from ident_pud_init() (bsc#1112178).
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (bsc#1112178).
- x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak (bsc#1112178).
- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (bsc#1112178).
- x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak (bsc#1112178).
- x86/resctrl: Remove unused struct mbm_state::chunks_bw (bsc#1112178).
- x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb (bsc#1112178).
- x86/tracing: Introduce a static key for exception tracing (bsc#1179895).
- x86/traps: Simplify pagefault tracing logic (bsc#1179895).
- x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (bsc#1112178).
- xhci: Give USB2 ports time to enter U3 in bus suspend (git-fixes).
- xprtrdma: fix incorrect header size calculations (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-14"/>
	<updated date="2021-01-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1040855">SUSE bug 1040855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044120">SUSE bug 1044120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044767">SUSE bug 1044767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056653">SUSE bug 1056653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056657">SUSE bug 1056657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094840">SUSE bug 1094840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104389">SUSE bug 1104389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104393">SUSE bug 1104393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109695">SUSE bug 1109695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110096">SUSE bug 1110096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115431">SUSE bug 1115431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118657">SUSE bug 1118657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138374">SUSE bug 1138374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139944">SUSE bug 1139944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144912">SUSE bug 1144912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152457">SUSE bug 1152457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163727">SUSE bug 1163727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171078">SUSE bug 1171078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172145">SUSE bug 1172145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172694">SUSE bug 1172694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174784">SUSE bug 1174784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174852">SUSE bug 1174852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176558">SUSE bug 1176558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176559">SUSE bug 1176559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176956">SUSE bug 1176956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178270">SUSE bug 1178270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178372">SUSE bug 1178372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178401">SUSE bug 1178401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178590">SUSE bug 1178590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178634">SUSE bug 1178634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178762">SUSE bug 1178762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179014">SUSE bug 1179014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179015">SUSE bug 1179015</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179045">SUSE bug 1179045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179082">SUSE bug 1179082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179107">SUSE bug 1179107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179142">SUSE bug 1179142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179204">SUSE bug 1179204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179419">SUSE bug 1179419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179444">SUSE bug 1179444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179520">SUSE bug 1179520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179578">SUSE bug 1179578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179601">SUSE bug 1179601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179663">SUSE bug 1179663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179666">SUSE bug 1179666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179670">SUSE bug 1179670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179671">SUSE bug 1179671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179672">SUSE bug 1179672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179673">SUSE bug 1179673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179711">SUSE bug 1179711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179713">SUSE bug 1179713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179714">SUSE bug 1179714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179715">SUSE bug 1179715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179716">SUSE bug 1179716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179722">SUSE bug 1179722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179723">SUSE bug 1179723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179724">SUSE bug 1179724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179745">SUSE bug 1179745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179810">SUSE bug 1179810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179888">SUSE bug 1179888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179895">SUSE bug 1179895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179896">SUSE bug 1179896</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179960">SUSE bug 1179960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179963">SUSE bug 1179963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180027">SUSE bug 1180027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180029">SUSE bug 1180029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180031">SUSE bug 1180031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180052">SUSE bug 1180052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180086">SUSE bug 1180086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180117">SUSE bug 1180117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180258">SUSE bug 1180258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180506">SUSE bug 1180506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180559">SUSE bug 1180559</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20669/">CVE-2018-20669</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-20934/">CVE-2019-20934</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0444/">CVE-2020-0444</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27068/">CVE-2020-27068</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27777/">CVE-2020-27777</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27825/">CVE-2020-27825</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-4788/">CVE-2020-4788</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497569" comment="kernel-default-livepatch-4.12.14-197.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497570" comment="kernel-default-livepatch-devel-4.12.14-197.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497571" comment="kernel-livepatch-4_12_14-197_78-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138473" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182294" ref_url="https://bugzilla.suse.com/1182294" source="BUGZILLA"/>
		<reference ref_id="1183658" ref_url="https://bugzilla.suse.com/1183658" source="BUGZILLA"/>
		<reference ref_id="1184171" ref_url="https://bugzilla.suse.com/1184171" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008688.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_64 fixes several issues.

The following security issues were fixed:

- CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to be 0 leading to out of bounds read  (bsc#1184171).
- CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183658).
- CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc##1182294, bsc#1183646).
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1182294).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1183022).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182294">SUSE bug 1182294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183658">SUSE bug 1183658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184171">SUSE bug 1184171</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720978" comment="kernel-default 4.12.14-197.64 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719197" comment="kernel-livepatch-4_12_14-197_64-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497572" comment="kernel-livepatch-4_12_14-197_64-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138474" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182294" ref_url="https://bugzilla.suse.com/1182294" source="BUGZILLA"/>
		<reference ref_id="1183658" ref_url="https://bugzilla.suse.com/1183658" source="BUGZILLA"/>
		<reference ref_id="1184171" ref_url="https://bugzilla.suse.com/1184171" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008688.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_72 fixes several issues.

The following security issues were fixed:

- CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to be 0 leading to out of bounds read  (bsc#1184171).
- CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183658).
- CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc##1182294, bsc#1183646).
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1182294).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1183022).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182294">SUSE bug 1182294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183658">SUSE bug 1183658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184171">SUSE bug 1184171</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720980" comment="kernel-default 4.12.14-197.72 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719199" comment="kernel-livepatch-4_12_14-197_72-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497573" comment="kernel-livepatch-4_12_14-197_72-default-5-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138475" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182294" ref_url="https://bugzilla.suse.com/1182294" source="BUGZILLA"/>
		<reference ref_id="1183658" ref_url="https://bugzilla.suse.com/1183658" source="BUGZILLA"/>
		<reference ref_id="1184171" ref_url="https://bugzilla.suse.com/1184171" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008688.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_78 fixes several issues.

The following security issues were fixed:

- CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to be 0 leading to out of bounds read  (bsc#1184171).
- CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183658).
- CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc##1182294, bsc#1183646).
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1182294).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1183022).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182294">SUSE bug 1182294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183658">SUSE bug 1183658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184171">SUSE bug 1184171</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720982" comment="kernel-default 4.12.14-197.78 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719201" comment="kernel-livepatch-4_12_14-197_78-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497574" comment="kernel-livepatch-4_12_14-197_78-default-5-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138476" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182294" ref_url="https://bugzilla.suse.com/1182294" source="BUGZILLA"/>
		<reference ref_id="1183658" ref_url="https://bugzilla.suse.com/1183658" source="BUGZILLA"/>
		<reference ref_id="1184171" ref_url="https://bugzilla.suse.com/1184171" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008688.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_83 fixes several issues.

The following security issues were fixed:

- CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to be 0 leading to out of bounds read  (bsc#1184171).
- CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183658).
- CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc##1182294, bsc#1183646).
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1182294).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1183022).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182294">SUSE bug 1182294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183658">SUSE bug 1183658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184171">SUSE bug 1184171</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720983" comment="kernel-default 4.12.14-197.83 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719202" comment="kernel-livepatch-4_12_14-197_83-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497575" comment="kernel-livepatch-4_12_14-197_83-default-4-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138477" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182294" ref_url="https://bugzilla.suse.com/1182294" source="BUGZILLA"/>
		<reference ref_id="1183658" ref_url="https://bugzilla.suse.com/1183658" source="BUGZILLA"/>
		<reference ref_id="1184171" ref_url="https://bugzilla.suse.com/1184171" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008688.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_40 fixes several issues.

The following security issues were fixed:

- CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to be 0 leading to out of bounds read  (bsc#1184171).
- CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183658).
- CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc##1182294, bsc#1183646).
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1182294).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1183022).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182294">SUSE bug 1182294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183658">SUSE bug 1183658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184171">SUSE bug 1184171</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720969" comment="kernel-default 4.12.14-197.40 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719188" comment="kernel-livepatch-4_12_14-197_40-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497576" comment="kernel-livepatch-4_12_14-197_40-default-11-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138478" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182294" ref_url="https://bugzilla.suse.com/1182294" source="BUGZILLA"/>
		<reference ref_id="1183658" ref_url="https://bugzilla.suse.com/1183658" source="BUGZILLA"/>
		<reference ref_id="1184171" ref_url="https://bugzilla.suse.com/1184171" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008688.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_45 fixes several issues.

The following security issues were fixed:

- CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to be 0 leading to out of bounds read  (bsc#1184171).
- CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183658).
- CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc##1182294, bsc#1183646).
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1182294).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1183022).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182294">SUSE bug 1182294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183658">SUSE bug 1183658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184171">SUSE bug 1184171</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720973" comment="kernel-default 4.12.14-197.45 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719192" comment="kernel-livepatch-4_12_14-197_45-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497577" comment="kernel-livepatch-4_12_14-197_45-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138479" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182294" ref_url="https://bugzilla.suse.com/1182294" source="BUGZILLA"/>
		<reference ref_id="1183658" ref_url="https://bugzilla.suse.com/1183658" source="BUGZILLA"/>
		<reference ref_id="1184171" ref_url="https://bugzilla.suse.com/1184171" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008688.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_48 fixes several issues.

The following security issues were fixed:

- CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to be 0 leading to out of bounds read  (bsc#1184171).
- CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183658).
- CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc##1182294, bsc#1183646).
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1182294).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1183022).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182294">SUSE bug 1182294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183658">SUSE bug 1183658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184171">SUSE bug 1184171</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720974" comment="kernel-default 4.12.14-197.48 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719193" comment="kernel-livepatch-4_12_14-197_48-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497578" comment="kernel-livepatch-4_12_14-197_48-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138480" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182294" ref_url="https://bugzilla.suse.com/1182294" source="BUGZILLA"/>
		<reference ref_id="1183658" ref_url="https://bugzilla.suse.com/1183658" source="BUGZILLA"/>
		<reference ref_id="1184171" ref_url="https://bugzilla.suse.com/1184171" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008688.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_51 fixes several issues.

The following security issues were fixed:

- CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to be 0 leading to out of bounds read  (bsc#1184171).
- CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183658).
- CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc##1182294, bsc#1183646).
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1182294).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1183022).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182294">SUSE bug 1182294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183658">SUSE bug 1183658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184171">SUSE bug 1184171</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720975" comment="kernel-default 4.12.14-197.51 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719194" comment="kernel-livepatch-4_12_14-197_51-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497579" comment="kernel-livepatch-4_12_14-197_51-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138481" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182294" ref_url="https://bugzilla.suse.com/1182294" source="BUGZILLA"/>
		<reference ref_id="1183658" ref_url="https://bugzilla.suse.com/1183658" source="BUGZILLA"/>
		<reference ref_id="1184171" ref_url="https://bugzilla.suse.com/1184171" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008688.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_56 fixes several issues.

The following security issues were fixed:

- CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to be 0 leading to out of bounds read  (bsc#1184171).
- CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183658).
- CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc##1182294, bsc#1183646).
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1182294).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1183022).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182294">SUSE bug 1182294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183658">SUSE bug 1183658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184171">SUSE bug 1184171</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720976" comment="kernel-default 4.12.14-197.56 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719195" comment="kernel-livepatch-4_12_14-197_56-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497580" comment="kernel-livepatch-4_12_14-197_56-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138482" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182294" ref_url="https://bugzilla.suse.com/1182294" source="BUGZILLA"/>
		<reference ref_id="1183658" ref_url="https://bugzilla.suse.com/1183658" source="BUGZILLA"/>
		<reference ref_id="1184171" ref_url="https://bugzilla.suse.com/1184171" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008688.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_61 fixes several issues.

The following security issues were fixed:

- CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to be 0 leading to out of bounds read  (bsc#1184171).
- CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183658).
- CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc##1182294, bsc#1183646).
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1182294).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1183022).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182294">SUSE bug 1182294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183658">SUSE bug 1183658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184171">SUSE bug 1184171</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720977" comment="kernel-default 4.12.14-197.61 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719196" comment="kernel-livepatch-4_12_14-197_61-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497581" comment="kernel-livepatch-4_12_14-197_61-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138483" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182294" ref_url="https://bugzilla.suse.com/1182294" source="BUGZILLA"/>
		<reference ref_id="1183658" ref_url="https://bugzilla.suse.com/1183658" source="BUGZILLA"/>
		<reference ref_id="1184171" ref_url="https://bugzilla.suse.com/1184171" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008688.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_67 fixes several issues.

The following security issues were fixed:

- CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to be 0 leading to out of bounds read  (bsc#1184171).
- CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183658).
- CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc##1182294, bsc#1183646).
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1182294).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1183022).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182294">SUSE bug 1182294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183658">SUSE bug 1183658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184171">SUSE bug 1184171</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720979" comment="kernel-default 4.12.14-197.67 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719198" comment="kernel-livepatch-4_12_14-197_67-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497582" comment="kernel-livepatch-4_12_14-197_67-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138484" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182294" ref_url="https://bugzilla.suse.com/1182294" source="BUGZILLA"/>
		<reference ref_id="1183658" ref_url="https://bugzilla.suse.com/1183658" source="BUGZILLA"/>
		<reference ref_id="1184171" ref_url="https://bugzilla.suse.com/1184171" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1365-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008688.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_75 fixes several issues.

The following security issues were fixed:

- CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to be 0 leading to out of bounds read  (bsc#1184171).
- CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183658).
- CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc##1182294, bsc#1183646).
- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1182294).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1183022).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182294">SUSE bug 1182294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183658">SUSE bug 1183658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184171">SUSE bug 1184171</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720981" comment="kernel-default 4.12.14-197.75 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719200" comment="kernel-livepatch-4_12_14-197_75-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497583" comment="kernel-livepatch-4_12_14-197_75-default-5-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138485" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1182294" ref_url="https://bugzilla.suse.com/1182294" source="BUGZILLA"/>
		<reference ref_id="1183658" ref_url="https://bugzilla.suse.com/1183658" source="BUGZILLA"/>
		<reference ref_id="1184171" ref_url="https://bugzilla.suse.com/1184171" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008686.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_86 fixes several issues.

The following security issues were fixed:

- CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation when the source register was known to be 0 leading to out of bounds read  (bsc#1184171).
- CVE-2021-28660: Fixed an out of bounds write in rtw_wx_set_scan (bsc#1183658).
- CVE-2021-28688: Fixed an issue introduced by XSA-365 (bsc##1182294, bsc#1183646).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182294">SUSE bug 1182294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183658">SUSE bug 1183658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184171">SUSE bug 1184171</bugzilla>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720984" comment="kernel-default 4.12.14-197.86 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719203" comment="kernel-livepatch-4_12_14-197_86-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497584" comment="kernel-livepatch-4_12_14-197_86-default-3-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138486" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1047233" ref_url="https://bugzilla.suse.com/1047233" source="BUGZILLA"/>
		<reference ref_id="1172455" ref_url="https://bugzilla.suse.com/1172455" source="BUGZILLA"/>
		<reference ref_id="1173485" ref_url="https://bugzilla.suse.com/1173485" source="BUGZILLA"/>
		<reference ref_id="1176720" ref_url="https://bugzilla.suse.com/1176720" source="BUGZILLA"/>
		<reference ref_id="1177411" ref_url="https://bugzilla.suse.com/1177411" source="BUGZILLA"/>
		<reference ref_id="1178181" ref_url="https://bugzilla.suse.com/1178181" source="BUGZILLA"/>
		<reference ref_id="1179454" ref_url="https://bugzilla.suse.com/1179454" source="BUGZILLA"/>
		<reference ref_id="1180197" ref_url="https://bugzilla.suse.com/1180197" source="BUGZILLA"/>
		<reference ref_id="1181960" ref_url="https://bugzilla.suse.com/1181960" source="BUGZILLA"/>
		<reference ref_id="1182011" ref_url="https://bugzilla.suse.com/1182011" source="BUGZILLA"/>
		<reference ref_id="1182672" ref_url="https://bugzilla.suse.com/1182672" source="BUGZILLA"/>
		<reference ref_id="1182715" ref_url="https://bugzilla.suse.com/1182715" source="BUGZILLA"/>
		<reference ref_id="1182716" ref_url="https://bugzilla.suse.com/1182716" source="BUGZILLA"/>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183022" ref_url="https://bugzilla.suse.com/1183022" source="BUGZILLA"/>
		<reference ref_id="1183063" ref_url="https://bugzilla.suse.com/1183063" source="BUGZILLA"/>
		<reference ref_id="1183069" ref_url="https://bugzilla.suse.com/1183069" source="BUGZILLA"/>
		<reference ref_id="1183509" ref_url="https://bugzilla.suse.com/1183509" source="BUGZILLA"/>
		<reference ref_id="1183593" ref_url="https://bugzilla.suse.com/1183593" source="BUGZILLA"/>
		<reference ref_id="1183646" ref_url="https://bugzilla.suse.com/1183646" source="BUGZILLA"/>
		<reference ref_id="1183686" ref_url="https://bugzilla.suse.com/1183686" source="BUGZILLA"/>
		<reference ref_id="1183696" ref_url="https://bugzilla.suse.com/1183696" source="BUGZILLA"/>
		<reference ref_id="1183775" ref_url="https://bugzilla.suse.com/1183775" source="BUGZILLA"/>
		<reference ref_id="1184120" ref_url="https://bugzilla.suse.com/1184120" source="BUGZILLA"/>
		<reference ref_id="1184167" ref_url="https://bugzilla.suse.com/1184167" source="BUGZILLA"/>
		<reference ref_id="1184168" ref_url="https://bugzilla.suse.com/1184168" source="BUGZILLA"/>
		<reference ref_id="1184170" ref_url="https://bugzilla.suse.com/1184170" source="BUGZILLA"/>
		<reference ref_id="1184192" ref_url="https://bugzilla.suse.com/1184192" source="BUGZILLA"/>
		<reference ref_id="1184193" ref_url="https://bugzilla.suse.com/1184193" source="BUGZILLA"/>
		<reference ref_id="1184194" ref_url="https://bugzilla.suse.com/1184194" source="BUGZILLA"/>
		<reference ref_id="1184196" ref_url="https://bugzilla.suse.com/1184196" source="BUGZILLA"/>
		<reference ref_id="1184198" ref_url="https://bugzilla.suse.com/1184198" source="BUGZILLA"/>
		<reference ref_id="1184208" ref_url="https://bugzilla.suse.com/1184208" source="BUGZILLA"/>
		<reference ref_id="1184211" ref_url="https://bugzilla.suse.com/1184211" source="BUGZILLA"/>
		<reference ref_id="1184388" ref_url="https://bugzilla.suse.com/1184388" source="BUGZILLA"/>
		<reference ref_id="1184391" ref_url="https://bugzilla.suse.com/1184391" source="BUGZILLA"/>
		<reference ref_id="1184393" ref_url="https://bugzilla.suse.com/1184393" source="BUGZILLA"/>
		<reference ref_id="1184397" ref_url="https://bugzilla.suse.com/1184397" source="BUGZILLA"/>
		<reference ref_id="1184509" ref_url="https://bugzilla.suse.com/1184509" source="BUGZILLA"/>
		<reference ref_id="1184511" ref_url="https://bugzilla.suse.com/1184511" source="BUGZILLA"/>
		<reference ref_id="1184512" ref_url="https://bugzilla.suse.com/1184512" source="BUGZILLA"/>
		<reference ref_id="1184514" ref_url="https://bugzilla.suse.com/1184514" source="BUGZILLA"/>
		<reference ref_id="1184583" ref_url="https://bugzilla.suse.com/1184583" source="BUGZILLA"/>
		<reference ref_id="1184650" ref_url="https://bugzilla.suse.com/1184650" source="BUGZILLA"/>
		<reference ref_id="1184942" ref_url="https://bugzilla.suse.com/1184942" source="BUGZILLA"/>
		<reference ref_id="1185113" ref_url="https://bugzilla.suse.com/1185113" source="BUGZILLA"/>
		<reference ref_id="1185244" ref_url="https://bugzilla.suse.com/1185244" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0433" ref_url="https://www.suse.com/security/cve/CVE-2020-0433/" source="CVE"/>
		<reference ref_id="CVE-2020-25670" ref_url="https://www.suse.com/security/cve/CVE-2020-25670/" source="CVE"/>
		<reference ref_id="CVE-2020-25671" ref_url="https://www.suse.com/security/cve/CVE-2020-25671/" source="CVE"/>
		<reference ref_id="CVE-2020-25672" ref_url="https://www.suse.com/security/cve/CVE-2020-25672/" source="CVE"/>
		<reference ref_id="CVE-2020-25673" ref_url="https://www.suse.com/security/cve/CVE-2020-25673/" source="CVE"/>
		<reference ref_id="CVE-2020-27170" ref_url="https://www.suse.com/security/cve/CVE-2020-27170/" source="CVE"/>
		<reference ref_id="CVE-2020-27171" ref_url="https://www.suse.com/security/cve/CVE-2020-27171/" source="CVE"/>
		<reference ref_id="CVE-2020-27673" ref_url="https://www.suse.com/security/cve/CVE-2020-27673/" source="CVE"/>
		<reference ref_id="CVE-2020-27815" ref_url="https://www.suse.com/security/cve/CVE-2020-27815/" source="CVE"/>
		<reference ref_id="CVE-2020-35519" ref_url="https://www.suse.com/security/cve/CVE-2020-35519/" source="CVE"/>
		<reference ref_id="CVE-2020-36310" ref_url="https://www.suse.com/security/cve/CVE-2020-36310/" source="CVE"/>
		<reference ref_id="CVE-2020-36311" ref_url="https://www.suse.com/security/cve/CVE-2020-36311/" source="CVE"/>
		<reference ref_id="CVE-2020-36312" ref_url="https://www.suse.com/security/cve/CVE-2020-36312/" source="CVE"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-20219" ref_url="https://www.suse.com/security/cve/CVE-2021-20219/" source="CVE"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="CVE-2021-28038" ref_url="https://www.suse.com/security/cve/CVE-2021-28038/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-28950" ref_url="https://www.suse.com/security/cve/CVE-2021-28950/" source="CVE"/>
		<reference ref_id="CVE-2021-28964" ref_url="https://www.suse.com/security/cve/CVE-2021-28964/" source="CVE"/>
		<reference ref_id="CVE-2021-28971" ref_url="https://www.suse.com/security/cve/CVE-2021-28971/" source="CVE"/>
		<reference ref_id="CVE-2021-28972" ref_url="https://www.suse.com/security/cve/CVE-2021-28972/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="CVE-2021-29155" ref_url="https://www.suse.com/security/cve/CVE-2021-29155/" source="CVE"/>
		<reference ref_id="CVE-2021-29264" ref_url="https://www.suse.com/security/cve/CVE-2021-29264/" source="CVE"/>
		<reference ref_id="CVE-2021-29265" ref_url="https://www.suse.com/security/cve/CVE-2021-29265/" source="CVE"/>
		<reference ref_id="CVE-2021-29647" ref_url="https://www.suse.com/security/cve/CVE-2021-29647/" source="CVE"/>
		<reference ref_id="CVE-2021-29650" ref_url="https://www.suse.com/security/cve/CVE-2021-29650/" source="CVE"/>
		<reference ref_id="CVE-2021-30002" ref_url="https://www.suse.com/security/cve/CVE-2021-30002/" source="CVE"/>
		<reference ref_id="CVE-2021-3428" ref_url="https://www.suse.com/security/cve/CVE-2021-3428/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="CVE-2021-3483" ref_url="https://www.suse.com/security/cve/CVE-2021-3483/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bnc#1184509).
- CVE-2021-29650: Fixed an issue inside the netfilter subsystem that allowed attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value (bnc#1184208).
- CVE-2021-29155: Fixed an issue within kernel/bpf/verifier.c that performed undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations (bnc#1184942).
- CVE-2020-36310: Fixed an issue in arch/x86/kvm/svm/svm.c that allowed a set_memory_region_test infinite loop for certain nested page faults (bnc#1184512).
- CVE-2020-27673: Fixed an issue in Xen where a guest OS users could have caused a denial of service (host OS hang) via a high rate of events to dom0 (bnc#1177411, bnc#1184583).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bnc#1184391).
- CVE-2020-25673: Fixed NFC endless loops caused by repeated llcp_sock_connect() (bsc#1178181).
- CVE-2020-25672: Fixed NFC memory leak in llcp_sock_connect() (bsc#1178181).
- CVE-2020-25671: Fixed NFC refcount leak in llcp_sock_connect() (bsc#1178181).
- CVE-2020-25670: Fixed NFC refcount leak in llcp_sock_bind() (bsc#1178181).
- CVE-2020-36311: Fixed an issue in arch/x86/kvm/svm/sev.c that allowed attackers to cause a denial of service (soft lockup) by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions) (bnc#1184511).
- CVE-2021-28950: Fixed an issue in fs/fuse/fuse_i.h where a 'stall on CPU' could have occured because a retry loop continually finds the same bad inode (bnc#1184194, bnc#1184211).
- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bnc#1184211).
- CVE-2021-30002: Fixed a memory leak issue when a webcam device exists (bnc#1184120).
- CVE-2021-3483: Fixed a use-after-free bug in nosy_ioctl() (bsc#1184393).
- CVE-2021-20219: Fixed a denial of service vulnerability in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could have delayed the loop and cause a threat to the system availability (bnc#1184397).
- CVE-2021-28964: Fixed a race condition in fs/btrfs/ctree.c that could have caused a denial of service because of a lack of locking on an extent buffer before a cloning operation (bnc#1184193).
- CVE-2021-3444: Fixed the bpf verifier as it did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution (bnc#1184170).
- CVE-2021-28971: Fixed a potential local denial of service in intel_pmu_drain_pebs_nhm where userspace applications can cause a system crash because the PEBS status in a PEBS record is mishandled (bnc#1184196).
- CVE-2021-28688: Fixed XSA-365 that includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in leaking persistent grants. The leak in turn would prevent fully cleaning up after a respective guest has died, leaving around zombie domains (bnc#1183646).
- CVE-2021-29265: Fixed an issue in usbip_sockfd_store in drivers/usb/usbip/stub_dev.c that allowed attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status (bnc#1184167).
- CVE-2021-29264: Fixed an issue in drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver that allowed attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is enabled (bnc#1184168).
- CVE-2021-28972: Fixed an issue in drivers/pci/hotplug/rpadlpar_sysfs.c where the RPA PCI Hotplug driver had a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination (bnc#1184198).
- CVE-2021-29647: Fixed an issue in kernel qrtr_recvmsg in net/qrtr/qrtr.c that allowed attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure (bnc#1184192).
- CVE-2020-27171: Fixed an issue in kernel/bpf/verifier.c that had an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory (bnc#1183686, bnc#1183775).
- CVE-2020-27170: Fixed an issue in kernel/bpf/verifier.c that performed undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. This affects pointer types that do not define a ptr_limit (bnc#1183686 bnc#1183775).
- CVE-2021-28660: Fixed rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c that allowed writing beyond the end of the ssid array (bnc#1183593).
- CVE-2020-35519: Update patch reference for x25 fix (bsc#1183696).
- CVE-2021-3428: Fixed ext4 integer overflow in ext4_es_cache_extent (bsc#1173485, bsc#1183509).
- CVE-2020-0433: Fixed blk_mq_queue_tag_busy_iter of blk-mq-tag.c, where a possible use after free due to improper locking could have happened. This could have led to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1176720).
- CVE-2021-28038: Fixed an issue with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931 (bnc#1183022, bnc#1183069).
- CVE-2020-27815: Fixed jfs array index bounds check in dbAdjTree (bsc#1179454).
- CVE-2021-27365: Fixed an issue inside the iSCSI data structures that does not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message (bnc#1182715).
- CVE-2021-27363: Fixed an issue with a kernel pointer leak that could have been used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables (bnc#1182716).
- CVE-2021-27364: Fixed an issue in drivers/scsi/scsi_transport_iscsi.c where an unprivileged user can craft Netlink messages (bnc#1182717).

The following non-security bugs were fixed:

- Revert 'rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)' This turned out to be a bad idea: the kernel-$flavor-devel package must be usable without kernel-$flavor, e.g. at the build of a KMP. And this change brought superfluous installation of kernel-preempt when a system had kernel-syms (bsc#1185113).
- Xen/gnttab: handle p2m update errors on a per-slot basis (bsc#1183022 XSA-367).
- bfq: Fix kABI for update internal depth state when queue depth changes (bsc#1172455).
- bfq: update internal depth state when queue depth changes (bsc#1172455).
- bpf: Add sanity check for upper ptr_limit (bsc#1183686 bsc#1183775).
- bpf: Simplify alu_limit masking for pointer arithmetic (bsc#1183686 bsc#1183775).
- handle also the opposite type of race condition
- ibmvnic: Clear failover_pending if unable to schedule (bsc#1181960 ltc#190997).
- ibmvnic: always store valid MAC address (bsc#1182011 ltc#191844).
- ibmvnic: store valid MAC address (bsc#1182011).
- macros.kernel-source: Use spec_install_pre for certificate installation (boo#1182672).
- nvme: return an error if nvme_set_queue_count() fails (bsc#1180197).
- post.sh: Return an error when module update fails (bsc#1047233 bsc#1184388).
- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- rpm/mkspec: Use tilde instead of dot for version string with rc (bsc#1184650)
- xen-netback: respect gnttab_map_refs()'s return value (bsc#1183022, XSA-367).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-18"/>
	<updated date="2021-05-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1047233">SUSE bug 1047233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172455">SUSE bug 1172455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173485">SUSE bug 1173485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176720">SUSE bug 1176720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177411">SUSE bug 1177411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178181">SUSE bug 1178181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179454">SUSE bug 1179454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180197">SUSE bug 1180197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181960">SUSE bug 1181960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182011">SUSE bug 1182011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182672">SUSE bug 1182672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182715">SUSE bug 1182715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182716">SUSE bug 1182716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183022">SUSE bug 1183022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183063">SUSE bug 1183063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183069">SUSE bug 1183069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183509">SUSE bug 1183509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183593">SUSE bug 1183593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183646">SUSE bug 1183646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183686">SUSE bug 1183686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183696">SUSE bug 1183696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183775">SUSE bug 1183775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184120">SUSE bug 1184120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184167">SUSE bug 1184167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184168">SUSE bug 1184168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184170">SUSE bug 1184170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184192">SUSE bug 1184192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184193">SUSE bug 1184193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184194">SUSE bug 1184194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184196">SUSE bug 1184196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184198">SUSE bug 1184198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184208">SUSE bug 1184208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184211">SUSE bug 1184211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184388">SUSE bug 1184388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184391">SUSE bug 1184391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184393">SUSE bug 1184393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184397">SUSE bug 1184397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184509">SUSE bug 1184509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184511">SUSE bug 1184511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184512">SUSE bug 1184512</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184514">SUSE bug 1184514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184583">SUSE bug 1184583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184650">SUSE bug 1184650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184942">SUSE bug 1184942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185113">SUSE bug 1185113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185244">SUSE bug 1185244</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0433/">CVE-2020-0433</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25670/">CVE-2020-25670</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25671/">CVE-2020-25671</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25672/">CVE-2020-25672</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25673/">CVE-2020-25673</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27170/">CVE-2020-27170</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27171/">CVE-2020-27171</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27673/">CVE-2020-27673</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27815/">CVE-2020-27815</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35519/">CVE-2020-35519</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36310/">CVE-2020-36310</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36311/">CVE-2020-36311</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36312/">CVE-2020-36312</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20219/">CVE-2021-20219</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28038/">CVE-2021-28038</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28950/">CVE-2021-28950</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28964/">CVE-2021-28964</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28971/">CVE-2021-28971</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28972/">CVE-2021-28972</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29155/">CVE-2021-29155</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29264/">CVE-2021-29264</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29265/">CVE-2021-29265</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29647/">CVE-2021-29647</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29650/">CVE-2021-29650</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-30002/">CVE-2021-30002</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3428/">CVE-2021-3428</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3483/">CVE-2021-3483</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497585" comment="kernel-default-livepatch-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497586" comment="kernel-default-livepatch-devel-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497587" comment="kernel-livepatch-4_12_14-197_89-default-1-3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138487" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1184710" ref_url="https://bugzilla.suse.com/1184710" source="BUGZILLA"/>
		<reference ref_id="1184952" ref_url="https://bugzilla.suse.com/1184952" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008815.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_86 fixes several issues.

The following security issues were fixed:

- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bsc#1184952).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bsc#1184710)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-25"/>
	<updated date="2021-05-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184710">SUSE bug 1184710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184952">SUSE bug 1184952</bugzilla>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720984" comment="kernel-default 4.12.14-197.86 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719203" comment="kernel-livepatch-4_12_14-197_86-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497588" comment="kernel-livepatch-4_12_14-197_86-default-4-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138488" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1184710" ref_url="https://bugzilla.suse.com/1184710" source="BUGZILLA"/>
		<reference ref_id="1184952" ref_url="https://bugzilla.suse.com/1184952" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1715-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008815.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_83 fixes several issues.

The following security issues were fixed:

- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bsc#1184952).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bsc#1184710)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-25"/>
	<updated date="2021-05-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184710">SUSE bug 1184710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184952">SUSE bug 1184952</bugzilla>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720983" comment="kernel-default 4.12.14-197.83 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719202" comment="kernel-livepatch-4_12_14-197_83-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497589" comment="kernel-livepatch-4_12_14-197_83-default-5-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138489" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1183452" ref_url="https://bugzilla.suse.com/1183452" source="BUGZILLA"/>
		<reference ref_id="1184710" ref_url="https://bugzilla.suse.com/1184710" source="BUGZILLA"/>
		<reference ref_id="1184952" ref_url="https://bugzilla.suse.com/1184952" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1724-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/019049.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_78 fixes several issues.

The following security issues were fixed:

- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bsc#1184952).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bsc#1184710)
- Fix system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info node list was NULL (bsc#1183452).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-25"/>
	<updated date="2021-05-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183452">SUSE bug 1183452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184710">SUSE bug 1184710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184952">SUSE bug 1184952</bugzilla>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720982" comment="kernel-default 4.12.14-197.78 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719201" comment="kernel-livepatch-4_12_14-197_78-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497590" comment="kernel-livepatch-4_12_14-197_78-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138490" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1183452" ref_url="https://bugzilla.suse.com/1183452" source="BUGZILLA"/>
		<reference ref_id="1184710" ref_url="https://bugzilla.suse.com/1184710" source="BUGZILLA"/>
		<reference ref_id="1184952" ref_url="https://bugzilla.suse.com/1184952" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1724-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/019049.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_75 fixes several issues.

The following security issues were fixed:

- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bsc#1184952).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bsc#1184710)
- Fix system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info node list was NULL (bsc#1183452).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-25"/>
	<updated date="2021-05-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183452">SUSE bug 1183452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184710">SUSE bug 1184710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184952">SUSE bug 1184952</bugzilla>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720981" comment="kernel-default 4.12.14-197.75 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719200" comment="kernel-livepatch-4_12_14-197_75-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497591" comment="kernel-livepatch-4_12_14-197_75-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138491" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1183452" ref_url="https://bugzilla.suse.com/1183452" source="BUGZILLA"/>
		<reference ref_id="1184710" ref_url="https://bugzilla.suse.com/1184710" source="BUGZILLA"/>
		<reference ref_id="1184952" ref_url="https://bugzilla.suse.com/1184952" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1724-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/019049.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_72 fixes several issues.

The following security issues were fixed:

- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bsc#1184952).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bsc#1184710)
- Fix system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info node list was NULL (bsc#1183452).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-25"/>
	<updated date="2021-05-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183452">SUSE bug 1183452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184710">SUSE bug 1184710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184952">SUSE bug 1184952</bugzilla>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720980" comment="kernel-default 4.12.14-197.72 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719199" comment="kernel-livepatch-4_12_14-197_72-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497592" comment="kernel-livepatch-4_12_14-197_72-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138492" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1183452" ref_url="https://bugzilla.suse.com/1183452" source="BUGZILLA"/>
		<reference ref_id="1184710" ref_url="https://bugzilla.suse.com/1184710" source="BUGZILLA"/>
		<reference ref_id="1184952" ref_url="https://bugzilla.suse.com/1184952" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1724-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/019049.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_67 fixes several issues.

The following security issues were fixed:

- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bsc#1184952).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bsc#1184710)
- Fix system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info node list was NULL (bsc#1183452).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-25"/>
	<updated date="2021-05-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183452">SUSE bug 1183452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184710">SUSE bug 1184710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184952">SUSE bug 1184952</bugzilla>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720979" comment="kernel-default 4.12.14-197.67 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719198" comment="kernel-livepatch-4_12_14-197_67-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497593" comment="kernel-livepatch-4_12_14-197_67-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138493" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1183452" ref_url="https://bugzilla.suse.com/1183452" source="BUGZILLA"/>
		<reference ref_id="1184710" ref_url="https://bugzilla.suse.com/1184710" source="BUGZILLA"/>
		<reference ref_id="1184952" ref_url="https://bugzilla.suse.com/1184952" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1724-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/019049.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_64 fixes several issues.

The following security issues were fixed:

- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bsc#1184952).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bsc#1184710)
- Fix system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info node list was NULL (bsc#1183452).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-25"/>
	<updated date="2021-05-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183452">SUSE bug 1183452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184710">SUSE bug 1184710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184952">SUSE bug 1184952</bugzilla>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720978" comment="kernel-default 4.12.14-197.64 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719197" comment="kernel-livepatch-4_12_14-197_64-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497594" comment="kernel-livepatch-4_12_14-197_64-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138494" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1183452" ref_url="https://bugzilla.suse.com/1183452" source="BUGZILLA"/>
		<reference ref_id="1184710" ref_url="https://bugzilla.suse.com/1184710" source="BUGZILLA"/>
		<reference ref_id="1184952" ref_url="https://bugzilla.suse.com/1184952" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1724-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/019049.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_61 fixes several issues.

The following security issues were fixed:

- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bsc#1184952).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bsc#1184710)
- Fix system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info node list was NULL (bsc#1183452).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-25"/>
	<updated date="2021-05-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183452">SUSE bug 1183452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184710">SUSE bug 1184710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184952">SUSE bug 1184952</bugzilla>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720977" comment="kernel-default 4.12.14-197.61 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719196" comment="kernel-livepatch-4_12_14-197_61-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497595" comment="kernel-livepatch-4_12_14-197_61-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138495" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1183452" ref_url="https://bugzilla.suse.com/1183452" source="BUGZILLA"/>
		<reference ref_id="1184710" ref_url="https://bugzilla.suse.com/1184710" source="BUGZILLA"/>
		<reference ref_id="1184952" ref_url="https://bugzilla.suse.com/1184952" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1724-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/019049.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_56 fixes several issues.

The following security issues were fixed:

- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bsc#1184952).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bsc#1184710)
- Fix system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info node list was NULL (bsc#1183452).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-25"/>
	<updated date="2021-05-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183452">SUSE bug 1183452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184710">SUSE bug 1184710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184952">SUSE bug 1184952</bugzilla>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720976" comment="kernel-default 4.12.14-197.56 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719195" comment="kernel-livepatch-4_12_14-197_56-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497596" comment="kernel-livepatch-4_12_14-197_56-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138496" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1183452" ref_url="https://bugzilla.suse.com/1183452" source="BUGZILLA"/>
		<reference ref_id="1184710" ref_url="https://bugzilla.suse.com/1184710" source="BUGZILLA"/>
		<reference ref_id="1184952" ref_url="https://bugzilla.suse.com/1184952" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1724-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/019049.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_51 fixes several issues.

The following security issues were fixed:

- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bsc#1184952).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bsc#1184710)
- Fix system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info node list was NULL (bsc#1183452).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-25"/>
	<updated date="2021-05-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183452">SUSE bug 1183452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184710">SUSE bug 1184710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184952">SUSE bug 1184952</bugzilla>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720975" comment="kernel-default 4.12.14-197.51 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719194" comment="kernel-livepatch-4_12_14-197_51-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497597" comment="kernel-livepatch-4_12_14-197_51-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138497" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1183452" ref_url="https://bugzilla.suse.com/1183452" source="BUGZILLA"/>
		<reference ref_id="1184710" ref_url="https://bugzilla.suse.com/1184710" source="BUGZILLA"/>
		<reference ref_id="1184952" ref_url="https://bugzilla.suse.com/1184952" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1724-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/019049.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_48 fixes several issues.

The following security issues were fixed:

- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bsc#1184952).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bsc#1184710)
- Fix system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info node list was NULL (bsc#1183452).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-25"/>
	<updated date="2021-05-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183452">SUSE bug 1183452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184710">SUSE bug 1184710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184952">SUSE bug 1184952</bugzilla>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720974" comment="kernel-default 4.12.14-197.48 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719193" comment="kernel-livepatch-4_12_14-197_48-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497598" comment="kernel-livepatch-4_12_14-197_48-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138498" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1183452" ref_url="https://bugzilla.suse.com/1183452" source="BUGZILLA"/>
		<reference ref_id="1184710" ref_url="https://bugzilla.suse.com/1184710" source="BUGZILLA"/>
		<reference ref_id="1184952" ref_url="https://bugzilla.suse.com/1184952" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1724-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/019049.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_45 fixes several issues.

The following security issues were fixed:

- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bsc#1184952).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bsc#1184710)
- Fix system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info node list was NULL (bsc#1183452).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-25"/>
	<updated date="2021-05-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183452">SUSE bug 1183452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184710">SUSE bug 1184710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184952">SUSE bug 1184952</bugzilla>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720973" comment="kernel-default 4.12.14-197.45 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719192" comment="kernel-livepatch-4_12_14-197_45-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497599" comment="kernel-livepatch-4_12_14-197_45-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138499" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1181161" ref_url="https://bugzilla.suse.com/1181161" source="BUGZILLA"/>
		<reference ref_id="1183405" ref_url="https://bugzilla.suse.com/1183405" source="BUGZILLA"/>
		<reference ref_id="1183738" ref_url="https://bugzilla.suse.com/1183738" source="BUGZILLA"/>
		<reference ref_id="1183947" ref_url="https://bugzilla.suse.com/1183947" source="BUGZILLA"/>
		<reference ref_id="1184611" ref_url="https://bugzilla.suse.com/1184611" source="BUGZILLA"/>
		<reference ref_id="1184675" ref_url="https://bugzilla.suse.com/1184675" source="BUGZILLA"/>
		<reference ref_id="1185642" ref_url="https://bugzilla.suse.com/1185642" source="BUGZILLA"/>
		<reference ref_id="1185680" ref_url="https://bugzilla.suse.com/1185680" source="BUGZILLA"/>
		<reference ref_id="1185725" ref_url="https://bugzilla.suse.com/1185725" source="BUGZILLA"/>
		<reference ref_id="1185859" ref_url="https://bugzilla.suse.com/1185859" source="BUGZILLA"/>
		<reference ref_id="1185860" ref_url="https://bugzilla.suse.com/1185860" source="BUGZILLA"/>
		<reference ref_id="1185862" ref_url="https://bugzilla.suse.com/1185862" source="BUGZILLA"/>
		<reference ref_id="1185863" ref_url="https://bugzilla.suse.com/1185863" source="BUGZILLA"/>
		<reference ref_id="1185898" ref_url="https://bugzilla.suse.com/1185898" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1185938" ref_url="https://bugzilla.suse.com/1185938" source="BUGZILLA"/>
		<reference ref_id="1185950" ref_url="https://bugzilla.suse.com/1185950" source="BUGZILLA"/>
		<reference ref_id="1185987" ref_url="https://bugzilla.suse.com/1185987" source="BUGZILLA"/>
		<reference ref_id="1186060" ref_url="https://bugzilla.suse.com/1186060" source="BUGZILLA"/>
		<reference ref_id="1186061" ref_url="https://bugzilla.suse.com/1186061" source="BUGZILLA"/>
		<reference ref_id="1186062" ref_url="https://bugzilla.suse.com/1186062" source="BUGZILLA"/>
		<reference ref_id="1186111" ref_url="https://bugzilla.suse.com/1186111" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="1186390" ref_url="https://bugzilla.suse.com/1186390" source="BUGZILLA"/>
		<reference ref_id="1186484" ref_url="https://bugzilla.suse.com/1186484" source="BUGZILLA"/>
		<reference ref_id="1186498" ref_url="https://bugzilla.suse.com/1186498" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24586" ref_url="https://www.suse.com/security/cve/CVE-2020-24586/" source="CVE"/>
		<reference ref_id="CVE-2020-24587" ref_url="https://www.suse.com/security/cve/CVE-2020-24587/" source="CVE"/>
		<reference ref_id="CVE-2020-26139" ref_url="https://www.suse.com/security/cve/CVE-2020-26139/" source="CVE"/>
		<reference ref_id="CVE-2020-26141" ref_url="https://www.suse.com/security/cve/CVE-2020-26141/" source="CVE"/>
		<reference ref_id="CVE-2020-26145" ref_url="https://www.suse.com/security/cve/CVE-2020-26145/" source="CVE"/>
		<reference ref_id="CVE-2020-26147" ref_url="https://www.suse.com/security/cve/CVE-2020-26147/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="CVE-2021-23134" ref_url="https://www.suse.com/security/cve/CVE-2021-23134/" source="CVE"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="CVE-2021-33200" ref_url="https://www.suse.com/security/cve/CVE-2021-33200/" source="CVE"/>
		<reference ref_id="CVE-2021-3491" ref_url="https://www.suse.com/security/cve/CVE-2021-3491/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008974.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in kernel memory (bsc#1186484).
- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values. (bsc#1186111)
- CVE-2020-26139: Fixed a denial-of-service when an Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. (bnc#1186062)
- CVE-2021-23134: A Use After Free vulnerability in nfc sockets allowed local attackers to elevate their privileges. (bnc#1186060)
- CVE-2021-23133: Fixed a race condition in SCTP sockets, which could lead to privilege escalation from the context of a network service or an unprivileged process. (bnc#1184675)
- CVE-2021-3491: Fixed a potential heap overflow in mem_rw(). This vulnerability is related to the PROVIDE_BUFFERS operation, which allowed the MAX_RW_COUNT limit to be bypassed (bsc#1185642).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- CVE-2020-24586: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances this can be abused to inject arbitrary network packets and/or exfiltrate user data (bnc#1185859).
- CVE-2020-24587: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed (bnc#1185859 bnc#1185862).
- CVE-2020-26147: The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments, even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used (bnc#1185859).
- CVE-2020-26145: An issue was discovered with Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration. (bnc#1185860)
- CVE-2020-26141: An issue was discovered in the ALFA driver for AWUS036H, where the Message Integrity Check (authenticity) of fragmented TKIP frames was not verified. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol. (bnc#1185987)


The following non-security bugs were fixed:

- Drivers: hv: vmbus: Increase wait time for VMbus unload (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically (bsc#1185725).
- dm: fix redundant IO accounting for bios that need splitting (bsc#1183738).
- ibmvfc: Avoid move login if fast fail is enabled (bsc#1185938 ltc#192043).
- ibmvfc: Handle move login failure (bsc#1185938 ltc#192043).
- ibmvfc: Reinit target retries (bsc#1185938 ltc#192043).
- kabi: Fix breakage in NVMe driver (bsc#1181161).
- kabi: Fix nvmet error log definitions (bsc#1181161).
- kabi: nvme: fix fast_io_fail_tmo (bsc#1181161).
- md/raid1: properly indicate failure when ending a failed write request (bsc#1185680).
- net: sched: disable TCQ_F_NOLOCK for pfifo_fast (bsc#1183405)
- netfilter: conntrack: add new sysctl to disable RST check (bsc#1183947 bsc#1185950).
- netfilter: conntrack: avoid misleading 'invalid' in log message (bsc#1183947 bsc#1185950).
- netfilter: conntrack: improve RST handling when tuple is re-used (bsc#1183947 bsc#1185950).
- netfilter: conntrack: tcp: only close if RST matches exact sequence (bsc#1183947 bsc#1185950).
- nvme-fabrics: allow to queue requests for live queues (bsc#1181161).
- nvme-fabrics: do not check state NVME_CTRL_NEW for request acceptance (bsc#1181161).
- nvme-fabrics: reject I/O to offline device (bsc#1181161).
- nvme-pci: Sync queues on reset (bsc#1181161).
- nvme-rdma: avoid race between time out and tear down (bsc#1181161).
- nvme-rdma: avoid repeated request completion (bsc#1181161).
- nvme-rdma: avoid request double completion for concurrent nvme_rdma_timeout (bsc#1181161).
- nvme-rdma: fix controller reset hang during traffic (bsc#1181161).
- nvme-rdma: fix possible hang when failing to set io queues (bsc#1181161).
- nvme-rdma: fix timeout handler (bsc#1181161).
- nvme-rdma: serialize controller teardown sequences (bsc#1181161).
- nvme-tcp: avoid race between time out and tear down (bsc#1181161).
- nvme-tcp: avoid repeated request completion (bsc#1181161).
- nvme-tcp: avoid request double completion for concurrent nvme_tcp_timeout (bsc#1181161).
- nvme-tcp: fix controller reset hang during traffic (bsc#1181161).
- nvme-tcp: fix possible hang when failing to set io queues (bsc#1181161).
- nvme-tcp: fix timeout handler (bsc#1181161).
- nvme-tcp: serialize controller teardown sequences (bsc#1181161).
- nvme: Restart request timers in resetting state (bsc#1181161).
- nvme: add error log page slot definition (bsc#1181161).
- nvme: include admin_q sync with nvme_sync_queues (bsc#1181161).
- nvme: introduce 'Command Aborted By host' status code (bsc#1181161).
- nvme: introduce nvme_is_fabrics to check fabrics cmd (bsc#1181161).
- nvme: introduce nvme_sync_io_queues (bsc#1181161).
- nvme: make fabrics command run on a separate request queue (bsc#1181161).
- nvme: prevent warning triggered by nvme_stop_keep_alive (bsc#1181161).
- nvme: unlink head after removing last namespace (bsc#1181161).
- nvmet: add error log support for fabrics-cmd (bsc#1181161).
- nvmet: add error-log definitions (bsc#1181161).
- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-09"/>
	<updated date="2021-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181161">SUSE bug 1181161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183405">SUSE bug 1183405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183738">SUSE bug 1183738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183947">SUSE bug 1183947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184611">SUSE bug 1184611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184675">SUSE bug 1184675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185642">SUSE bug 1185642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185680">SUSE bug 1185680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185725">SUSE bug 1185725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185859">SUSE bug 1185859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185860">SUSE bug 1185860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185862">SUSE bug 1185862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185863">SUSE bug 1185863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185898">SUSE bug 1185898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185938">SUSE bug 1185938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185950">SUSE bug 1185950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185987">SUSE bug 1185987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186060">SUSE bug 1186060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186061">SUSE bug 1186061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186062">SUSE bug 1186062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186111">SUSE bug 1186111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186390">SUSE bug 1186390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186484">SUSE bug 1186484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186498">SUSE bug 1186498</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24586/">CVE-2020-24586</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24587/">CVE-2020-24587</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-26139/">CVE-2020-26139</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26141/">CVE-2020-26141</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26145/">CVE-2020-26145</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26147/">CVE-2020-26147</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23134/">CVE-2021-23134</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33200/">CVE-2021-33200</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3491/">CVE-2021-3491</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497600" comment="kernel-default-livepatch-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497601" comment="kernel-default-livepatch-devel-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497602" comment="kernel-livepatch-4_12_14-197_92-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138500" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185847" ref_url="https://bugzilla.suse.com/1185847" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1186061" ref_url="https://bugzilla.suse.com/1186061" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="1186498" ref_url="https://bugzilla.suse.com/1186498" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23134" ref_url="https://www.suse.com/security/cve/CVE-2021-23134/" source="CVE"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="CVE-2021-33200" ref_url="https://www.suse.com/security/cve/CVE-2021-33200/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2020-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009044.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_89 fixes several issues.

The following issues were fixed:

- CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in kernel memory (bsc#1186484).
- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111).
- CVE-2021-23134: A Use After Free vulnerability in nfc sockets allowed local attackers to elevate their privileges (bnc#1186060).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- Fixed a data loss/data corruption that occurs if there is a write error on an md/raid array (bsc#1185680).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185847">SUSE bug 1185847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186061">SUSE bug 1186061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186498">SUSE bug 1186498</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23134/">CVE-2021-23134</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33200/">CVE-2021-33200</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720985" comment="kernel-default 4.12.14-197.89 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719204" comment="kernel-livepatch-4_12_14-197_89-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497603" comment="kernel-livepatch-4_12_14-197_89-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138501" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185847" ref_url="https://bugzilla.suse.com/1185847" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009042.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_86 fixes several issues.

The following issues were fixed:

- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- Fixed a data loss/data corruption that occurs if there is a write error on an md/raid array (bsc#1185680).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185847">SUSE bug 1185847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720984" comment="kernel-default 4.12.14-197.86 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719203" comment="kernel-livepatch-4_12_14-197_86-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497604" comment="kernel-livepatch-4_12_14-197_86-default-5-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138502" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185847" ref_url="https://bugzilla.suse.com/1185847" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009042.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_83 fixes several issues.

The following issues were fixed:

- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- Fixed a data loss/data corruption that occurs if there is a write error on an md/raid array (bsc#1185680).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185847">SUSE bug 1185847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720983" comment="kernel-default 4.12.14-197.83 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719202" comment="kernel-livepatch-4_12_14-197_83-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497605" comment="kernel-livepatch-4_12_14-197_83-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138503" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185847" ref_url="https://bugzilla.suse.com/1185847" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009042.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_78 fixes several issues.

The following issues were fixed:

- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- Fixed a data loss/data corruption that occurs if there is a write error on an md/raid array (bsc#1185680).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185847">SUSE bug 1185847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720982" comment="kernel-default 4.12.14-197.78 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719201" comment="kernel-livepatch-4_12_14-197_78-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497606" comment="kernel-livepatch-4_12_14-197_78-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138504" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185847" ref_url="https://bugzilla.suse.com/1185847" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009042.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_75 fixes several issues.

The following issues were fixed:

- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- Fixed a data loss/data corruption that occurs if there is a write error on an md/raid array (bsc#1185680).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185847">SUSE bug 1185847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720981" comment="kernel-default 4.12.14-197.75 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719200" comment="kernel-livepatch-4_12_14-197_75-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497607" comment="kernel-livepatch-4_12_14-197_75-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138505" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185847" ref_url="https://bugzilla.suse.com/1185847" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009042.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_72 fixes several issues.

The following issues were fixed:

- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- Fixed a data loss/data corruption that occurs if there is a write error on an md/raid array (bsc#1185680).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185847">SUSE bug 1185847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720980" comment="kernel-default 4.12.14-197.72 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719199" comment="kernel-livepatch-4_12_14-197_72-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497608" comment="kernel-livepatch-4_12_14-197_72-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138506" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185847" ref_url="https://bugzilla.suse.com/1185847" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009042.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_67 fixes several issues.

The following issues were fixed:

- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- Fixed a data loss/data corruption that occurs if there is a write error on an md/raid array (bsc#1185680).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185847">SUSE bug 1185847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720979" comment="kernel-default 4.12.14-197.67 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719198" comment="kernel-livepatch-4_12_14-197_67-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497609" comment="kernel-livepatch-4_12_14-197_67-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138507" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185847" ref_url="https://bugzilla.suse.com/1185847" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009042.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_64 fixes several issues.

The following issues were fixed:

- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- Fixed a data loss/data corruption that occurs if there is a write error on an md/raid array (bsc#1185680).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185847">SUSE bug 1185847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720978" comment="kernel-default 4.12.14-197.64 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719197" comment="kernel-livepatch-4_12_14-197_64-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497610" comment="kernel-livepatch-4_12_14-197_64-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138508" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185847" ref_url="https://bugzilla.suse.com/1185847" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009042.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_61 fixes several issues.

The following issues were fixed:

- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- Fixed a data loss/data corruption that occurs if there is a write error on an md/raid array (bsc#1185680).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185847">SUSE bug 1185847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720977" comment="kernel-default 4.12.14-197.61 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719196" comment="kernel-livepatch-4_12_14-197_61-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497611" comment="kernel-livepatch-4_12_14-197_61-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138509" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185847" ref_url="https://bugzilla.suse.com/1185847" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009042.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_56 fixes several issues.

The following issues were fixed:

- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- Fixed a data loss/data corruption that occurs if there is a write error on an md/raid array (bsc#1185680).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185847">SUSE bug 1185847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720976" comment="kernel-default 4.12.14-197.56 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719195" comment="kernel-livepatch-4_12_14-197_56-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497612" comment="kernel-livepatch-4_12_14-197_56-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138510" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185847" ref_url="https://bugzilla.suse.com/1185847" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009042.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_51 fixes several issues.

The following issues were fixed:

- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- Fixed a data loss/data corruption that occurs if there is a write error on an md/raid array (bsc#1185680).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185847">SUSE bug 1185847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720975" comment="kernel-default 4.12.14-197.51 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719194" comment="kernel-livepatch-4_12_14-197_51-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497613" comment="kernel-livepatch-4_12_14-197_51-default-11-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138511" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185847" ref_url="https://bugzilla.suse.com/1185847" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2025-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009042.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_48 fixes several issues.

The following issues were fixed:

- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- Fixed a data loss/data corruption that occurs if there is a write error on an md/raid array (bsc#1185680).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185847">SUSE bug 1185847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720974" comment="kernel-default 4.12.14-197.48 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719193" comment="kernel-livepatch-4_12_14-197_48-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497614" comment="kernel-livepatch-4_12_14-197_48-default-11-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138512" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1187597" ref_url="https://bugzilla.suse.com/1187597" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009134.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_83 fixes several issues.

The following security issues were fixed:

- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597)
- CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivileged process. (bsc#1185901)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-14"/>
	<updated date="2021-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187597">SUSE bug 1187597</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720983" comment="kernel-default 4.12.14-197.83 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719202" comment="kernel-livepatch-4_12_14-197_83-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009624729" comment="kernel-livepatch-4_12_14-197_83-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138513" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1187597" ref_url="https://bugzilla.suse.com/1187597" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009134.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_72 fixes several issues.

The following security issues were fixed:

- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597)
- CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivileged process. (bsc#1185901)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-14"/>
	<updated date="2021-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187597">SUSE bug 1187597</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720980" comment="kernel-default 4.12.14-197.72 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719199" comment="kernel-livepatch-4_12_14-197_72-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009624726" comment="kernel-livepatch-4_12_14-197_72-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138514" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1187597" ref_url="https://bugzilla.suse.com/1187597" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009134.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_67 fixes several issues.

The following security issues were fixed:

- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597)
- CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivileged process. (bsc#1185901)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-14"/>
	<updated date="2021-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187597">SUSE bug 1187597</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720979" comment="kernel-default 4.12.14-197.67 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719198" comment="kernel-livepatch-4_12_14-197_67-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009624725" comment="kernel-livepatch-4_12_14-197_67-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138515" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1187597" ref_url="https://bugzilla.suse.com/1187597" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009134.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_64 fixes several issues.

The following security issues were fixed:

- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597)
- CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivileged process. (bsc#1185901)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-14"/>
	<updated date="2021-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187597">SUSE bug 1187597</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720978" comment="kernel-default 4.12.14-197.64 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719197" comment="kernel-livepatch-4_12_14-197_64-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009624724" comment="kernel-livepatch-4_12_14-197_64-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138516" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1187597" ref_url="https://bugzilla.suse.com/1187597" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009134.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_61 fixes several issues.

The following security issues were fixed:

- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597)
- CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivileged process. (bsc#1185901)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-14"/>
	<updated date="2021-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187597">SUSE bug 1187597</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720977" comment="kernel-default 4.12.14-197.61 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719196" comment="kernel-livepatch-4_12_14-197_61-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009624723" comment="kernel-livepatch-4_12_14-197_61-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138517" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1187597" ref_url="https://bugzilla.suse.com/1187597" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009134.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_56 fixes several issues.

The following security issues were fixed:

- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597)
- CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivileged process. (bsc#1185901)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-14"/>
	<updated date="2021-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187597">SUSE bug 1187597</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720976" comment="kernel-default 4.12.14-197.56 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719195" comment="kernel-livepatch-4_12_14-197_56-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009624722" comment="kernel-livepatch-4_12_14-197_56-default-11-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138518" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1187597" ref_url="https://bugzilla.suse.com/1187597" source="BUGZILLA"/>
		<reference ref_id="1187687" ref_url="https://bugzilla.suse.com/1187687" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-0605" ref_url="https://www.suse.com/security/cve/CVE-2021-0605/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009142.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_51 fixes several issues.

The following security issues were fixed:

- CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. (bsc#1187687)
- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597)
- CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivileged process. (bsc#1185901)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-14"/>
	<updated date="2021-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187597">SUSE bug 1187597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187687">SUSE bug 1187687</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0605/">CVE-2021-0605</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720975" comment="kernel-default 4.12.14-197.51 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719194" comment="kernel-livepatch-4_12_14-197_51-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009624721" comment="kernel-livepatch-4_12_14-197_51-default-12-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138519" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1187597" ref_url="https://bugzilla.suse.com/1187597" source="BUGZILLA"/>
		<reference ref_id="1187687" ref_url="https://bugzilla.suse.com/1187687" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-0605" ref_url="https://www.suse.com/security/cve/CVE-2021-0605/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009142.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_48 fixes several issues.

The following security issues were fixed:

- CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. (bsc#1187687)
- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597)
- CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivileged process. (bsc#1185901)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-14"/>
	<updated date="2021-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187597">SUSE bug 1187597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187687">SUSE bug 1187687</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0605/">CVE-2021-0605</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720974" comment="kernel-default 4.12.14-197.48 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719193" comment="kernel-livepatch-4_12_14-197_48-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009624720" comment="kernel-livepatch-4_12_14-197_48-default-12-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138520" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1187597" ref_url="https://bugzilla.suse.com/1187597" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009148.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_75 fixes several issues.

The following security issues were fixed:

- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597)
- CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivileged process. (bsc#1185901)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-15"/>
	<updated date="2021-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187597">SUSE bug 1187597</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720981" comment="kernel-default 4.12.14-197.75 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719200" comment="kernel-livepatch-4_12_14-197_75-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009624727" comment="kernel-livepatch-4_12_14-197_75-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138521" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1187597" ref_url="https://bugzilla.suse.com/1187597" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009148.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_78 fixes several issues.

The following security issues were fixed:

- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597)
- CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivileged process. (bsc#1185901)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-15"/>
	<updated date="2021-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187597">SUSE bug 1187597</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720982" comment="kernel-default 4.12.14-197.78 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719201" comment="kernel-livepatch-4_12_14-197_78-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009624728" comment="kernel-livepatch-4_12_14-197_78-default-8-2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138522" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1187597" ref_url="https://bugzilla.suse.com/1187597" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009148.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_86 fixes several issues.

The following security issues were fixed:

- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597)
- CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivileged process. (bsc#1185901)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-15"/>
	<updated date="2021-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187597">SUSE bug 1187597</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720984" comment="kernel-default 4.12.14-197.86 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719203" comment="kernel-livepatch-4_12_14-197_86-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009624730" comment="kernel-livepatch-4_12_14-197_86-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138523" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1187597" ref_url="https://bugzilla.suse.com/1187597" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009148.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_89 fixes several issues.

The following security issues were fixed:

- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597)
- CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivileged process. (bsc#1185901)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-15"/>
	<updated date="2021-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187597">SUSE bug 1187597</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720985" comment="kernel-default 4.12.14-197.89 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719204" comment="kernel-livepatch-4_12_14-197_89-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009624731" comment="kernel-livepatch-4_12_14-197_89-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138524" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187597" ref_url="https://bugzilla.suse.com/1187597" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2372-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009146.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_92 fixes one issue.

The following security issue was fixed:

- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-15"/>
	<updated date="2021-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187597">SUSE bug 1187597</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720986" comment="kernel-default 4.12.14-197.92 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719205" comment="kernel-livepatch-4_12_14-197_92-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009624732" comment="kernel-livepatch-4_12_14-197_92-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138525" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1153720" ref_url="https://bugzilla.suse.com/1153720" source="BUGZILLA"/>
		<reference ref_id="1174978" ref_url="https://bugzilla.suse.com/1174978" source="BUGZILLA"/>
		<reference ref_id="1179610" ref_url="https://bugzilla.suse.com/1179610" source="BUGZILLA"/>
		<reference ref_id="1181193" ref_url="https://bugzilla.suse.com/1181193" source="BUGZILLA"/>
		<reference ref_id="1185428" ref_url="https://bugzilla.suse.com/1185428" source="BUGZILLA"/>
		<reference ref_id="1185701" ref_url="https://bugzilla.suse.com/1185701" source="BUGZILLA"/>
		<reference ref_id="1185861" ref_url="https://bugzilla.suse.com/1185861" source="BUGZILLA"/>
		<reference ref_id="1186463" ref_url="https://bugzilla.suse.com/1186463" source="BUGZILLA"/>
		<reference ref_id="1186484" ref_url="https://bugzilla.suse.com/1186484" source="BUGZILLA"/>
		<reference ref_id="1187038" ref_url="https://bugzilla.suse.com/1187038" source="BUGZILLA"/>
		<reference ref_id="1187050" ref_url="https://bugzilla.suse.com/1187050" source="BUGZILLA"/>
		<reference ref_id="1187215" ref_url="https://bugzilla.suse.com/1187215" source="BUGZILLA"/>
		<reference ref_id="1187452" ref_url="https://bugzilla.suse.com/1187452" source="BUGZILLA"/>
		<reference ref_id="1187554" ref_url="https://bugzilla.suse.com/1187554" source="BUGZILLA"/>
		<reference ref_id="1187595" ref_url="https://bugzilla.suse.com/1187595" source="BUGZILLA"/>
		<reference ref_id="1187601" ref_url="https://bugzilla.suse.com/1187601" source="BUGZILLA"/>
		<reference ref_id="1188062" ref_url="https://bugzilla.suse.com/1188062" source="BUGZILLA"/>
		<reference ref_id="1188116" ref_url="https://bugzilla.suse.com/1188116" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24588" ref_url="https://www.suse.com/security/cve/CVE-2020-24588/" source="CVE"/>
		<reference ref_id="CVE-2020-26558" ref_url="https://www.suse.com/security/cve/CVE-2020-26558/" source="CVE"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2020-36386" ref_url="https://www.suse.com/security/cve/CVE-2020-36386/" source="CVE"/>
		<reference ref_id="CVE-2021-0129" ref_url="https://www.suse.com/security/cve/CVE-2021-0129/" source="CVE"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-0605" ref_url="https://www.suse.com/security/cve/CVE-2021-0605/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33200" ref_url="https://www.suse.com/security/cve/CVE-2021-33200/" source="CVE"/>
		<reference ref_id="CVE-2021-33624" ref_url="https://www.suse.com/security/cve/CVE-2021-33624/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="CVE-2021-34693" ref_url="https://www.suse.com/security/cve/CVE-2021-34693/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009190.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2021-33624: Fixed a bug which allows unprivileged BPF program to leak the contents of arbitrary kernel memory (and therefore, of all physical memory) via a side-channel. (bsc#1187554)
- CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. (bsc#1187601)
- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187595)
- CVE-2020-26558: Fixed a flaw in the Bluetooth LE and BR/EDR secure pairing that could permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing. (bnc#1179610)
- CVE-2021-34693: Fixed a bug in net/can/bcm.c which could allow local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized. (bsc#1187452)
- CVE-2021-0129: Fixed an improper access control in BlueZ that may have allowed an authenticated user to potentially enable information disclosure via adjacent access. (bnc#1186463)
- CVE-2020-36386: Fixed an out-of-bounds read in hci_extended_inquiry_result_evt. (bsc#1187038)
- CVE-2020-24588: Fixed a bug that could allow an adversary to abuse devices that support receiving non-SSP A-MSDU frames to inject arbitrary network packets. (bsc#1185861 bsc#1185863)
- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-3609: Fixed a race condition in the CAN BCM networking protocol which allows for local privilege escalation. (bsc#1187215)
- CVE-2020-36385: Fixed a use-after-free flaw in ucma.c which allows for local privilege escalation. (bsc#1187050)
- CVE-2021-33200: Fix leakage of uninitialized bpf stack under speculation. (bsc#1186484)

The following non-security bugs were fixed:

- af_packet: fix the tx skb protocol in raw sockets with ETH_P_ALL (bsc#1176081).
- kabi: preserve struct header_ops after bsc#1176081 fix (bsc#1176081).
- net: Do not set transport offset to invalid value (bsc#1176081).
- net: Introduce parse_protocol header_ops callback (bsc#1176081).
- net/ethernet: Add parse_protocol header_ops support (bsc#1176081).
- net/mlx5e: Remove the wrong assumption about transport offset (bsc#1176081).
- net/mlx5e: Trust kernel regarding transport offset (bsc#1176081).
- net/packet: Ask driver for protocol if not provided by user (bsc#1176081).
- net/packet: Remove redundant skb-&gt;protocol set (bsc#1176081).
- resource: Fix find_next_iomem_res() iteration issue (bsc#1181193).
- scsi: scsi_dh_alua: Retry RTPG on a different path after failure (bsc#1174978 bsc#1185701).
- SUNRPC in case of backlog, hand free slots directly to waiting task (bsc#1185428).
- SUNRPC: More fixes for backlog congestion (bsc#1185428).
- x86/crash: Add e820 reserved ranges to kdump kernel's e820 table (bsc#1181193).
- x86/debug: Extend the lower bound of crash kernel low reservations (bsc#1153720).
- x86/e820, ioport: Add a new I/O resource descriptor IORES_DESC_RESERVED (bsc#1181193).
- x86/mm: Rework ioremap resource mapping determination (bsc#1181193).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-21"/>
	<updated date="2021-07-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153720">SUSE bug 1153720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174978">SUSE bug 1174978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179610">SUSE bug 1179610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181193">SUSE bug 1181193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185428">SUSE bug 1185428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185701">SUSE bug 1185701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185861">SUSE bug 1185861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186463">SUSE bug 1186463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186484">SUSE bug 1186484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187038">SUSE bug 1187038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187050">SUSE bug 1187050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187215">SUSE bug 1187215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187452">SUSE bug 1187452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187554">SUSE bug 1187554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187595">SUSE bug 1187595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187601">SUSE bug 1187601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188062">SUSE bug 1188062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188116">SUSE bug 1188116</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-24588/">CVE-2020-24588</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26558/">CVE-2020-26558</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36386/">CVE-2020-36386</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-0129/">CVE-2021-0129</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0605/">CVE-2021-0605</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33200/">CVE-2021-33200</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-33624/">CVE-2021-33624</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-34693/">CVE-2021-34693</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009625616" comment="kernel-default-livepatch-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625617" comment="kernel-default-livepatch-devel-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625618" comment="kernel-livepatch-4_12_14-197_99-default-1-3.3.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138526" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187052" ref_url="https://bugzilla.suse.com/1187052" source="BUGZILLA"/>
		<reference ref_id="1188117" ref_url="https://bugzilla.suse.com/1188117" source="BUGZILLA"/>
		<reference ref_id="1188257" ref_url="https://bugzilla.suse.com/1188257" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009221.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_92 fixes several issues.

The following security issues were fixed:

- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187052">SUSE bug 1187052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188117">SUSE bug 1188117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188257">SUSE bug 1188257</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720986" comment="kernel-default 4.12.14-197.92 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719205" comment="kernel-livepatch-4_12_14-197_92-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009626402" comment="kernel-livepatch-4_12_14-197_92-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138527" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187052" ref_url="https://bugzilla.suse.com/1187052" source="BUGZILLA"/>
		<reference ref_id="1188117" ref_url="https://bugzilla.suse.com/1188117" source="BUGZILLA"/>
		<reference ref_id="1188257" ref_url="https://bugzilla.suse.com/1188257" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009221.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_89 fixes several issues.

The following security issues were fixed:

- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187052">SUSE bug 1187052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188117">SUSE bug 1188117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188257">SUSE bug 1188257</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720985" comment="kernel-default 4.12.14-197.89 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719204" comment="kernel-livepatch-4_12_14-197_89-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009626401" comment="kernel-livepatch-4_12_14-197_89-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138528" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187052" ref_url="https://bugzilla.suse.com/1187052" source="BUGZILLA"/>
		<reference ref_id="1188117" ref_url="https://bugzilla.suse.com/1188117" source="BUGZILLA"/>
		<reference ref_id="1188257" ref_url="https://bugzilla.suse.com/1188257" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009221.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_86 fixes several issues.

The following security issues were fixed:

- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187052">SUSE bug 1187052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188117">SUSE bug 1188117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188257">SUSE bug 1188257</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720984" comment="kernel-default 4.12.14-197.86 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719203" comment="kernel-livepatch-4_12_14-197_86-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009626400" comment="kernel-livepatch-4_12_14-197_86-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138529" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187052" ref_url="https://bugzilla.suse.com/1187052" source="BUGZILLA"/>
		<reference ref_id="1188117" ref_url="https://bugzilla.suse.com/1188117" source="BUGZILLA"/>
		<reference ref_id="1188257" ref_url="https://bugzilla.suse.com/1188257" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009221.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_75 fixes several issues.

The following security issues were fixed:

- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187052">SUSE bug 1187052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188117">SUSE bug 1188117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188257">SUSE bug 1188257</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720981" comment="kernel-default 4.12.14-197.75 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719200" comment="kernel-livepatch-4_12_14-197_75-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009626397" comment="kernel-livepatch-4_12_14-197_75-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138530" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187052" ref_url="https://bugzilla.suse.com/1187052" source="BUGZILLA"/>
		<reference ref_id="1188117" ref_url="https://bugzilla.suse.com/1188117" source="BUGZILLA"/>
		<reference ref_id="1188257" ref_url="https://bugzilla.suse.com/1188257" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009221.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_67 fixes several issues.

The following security issues were fixed:

- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187052">SUSE bug 1187052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188117">SUSE bug 1188117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188257">SUSE bug 1188257</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720979" comment="kernel-default 4.12.14-197.67 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719198" comment="kernel-livepatch-4_12_14-197_67-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009626395" comment="kernel-livepatch-4_12_14-197_67-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138531" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187052" ref_url="https://bugzilla.suse.com/1187052" source="BUGZILLA"/>
		<reference ref_id="1188117" ref_url="https://bugzilla.suse.com/1188117" source="BUGZILLA"/>
		<reference ref_id="1188257" ref_url="https://bugzilla.suse.com/1188257" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009221.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_64 fixes several issues.

The following security issues were fixed:

- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187052">SUSE bug 1187052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188117">SUSE bug 1188117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188257">SUSE bug 1188257</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720978" comment="kernel-default 4.12.14-197.64 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719197" comment="kernel-livepatch-4_12_14-197_64-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009626394" comment="kernel-livepatch-4_12_14-197_64-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138532" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187052" ref_url="https://bugzilla.suse.com/1187052" source="BUGZILLA"/>
		<reference ref_id="1188117" ref_url="https://bugzilla.suse.com/1188117" source="BUGZILLA"/>
		<reference ref_id="1188257" ref_url="https://bugzilla.suse.com/1188257" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009221.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_61 fixes several issues.

The following security issues were fixed:

- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187052">SUSE bug 1187052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188117">SUSE bug 1188117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188257">SUSE bug 1188257</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720977" comment="kernel-default 4.12.14-197.61 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719196" comment="kernel-livepatch-4_12_14-197_61-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009626393" comment="kernel-livepatch-4_12_14-197_61-default-11-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138533" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187052" ref_url="https://bugzilla.suse.com/1187052" source="BUGZILLA"/>
		<reference ref_id="1188117" ref_url="https://bugzilla.suse.com/1188117" source="BUGZILLA"/>
		<reference ref_id="1188257" ref_url="https://bugzilla.suse.com/1188257" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009221.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_51 fixes several issues.

The following security issues were fixed:

- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187052">SUSE bug 1187052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188117">SUSE bug 1188117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188257">SUSE bug 1188257</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720975" comment="kernel-default 4.12.14-197.51 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719194" comment="kernel-livepatch-4_12_14-197_51-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009626391" comment="kernel-livepatch-4_12_14-197_51-default-13-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138534" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187052" ref_url="https://bugzilla.suse.com/1187052" source="BUGZILLA"/>
		<reference ref_id="1188117" ref_url="https://bugzilla.suse.com/1188117" source="BUGZILLA"/>
		<reference ref_id="1188257" ref_url="https://bugzilla.suse.com/1188257" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2538-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009221.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_48 fixes several issues.

The following security issues were fixed:

- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187052">SUSE bug 1187052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188117">SUSE bug 1188117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188257">SUSE bug 1188257</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720974" comment="kernel-default 4.12.14-197.48 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719193" comment="kernel-livepatch-4_12_14-197_48-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009626390" comment="kernel-livepatch-4_12_14-197_48-default-13-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138535" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187052" ref_url="https://bugzilla.suse.com/1187052" source="BUGZILLA"/>
		<reference ref_id="1188117" ref_url="https://bugzilla.suse.com/1188117" source="BUGZILLA"/>
		<reference ref_id="1188257" ref_url="https://bugzilla.suse.com/1188257" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2542-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009226.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_78 fixes several issues.

The following security issues were fixed:

- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-28"/>
	<updated date="2021-07-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187052">SUSE bug 1187052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188117">SUSE bug 1188117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188257">SUSE bug 1188257</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720982" comment="kernel-default 4.12.14-197.78 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719201" comment="kernel-livepatch-4_12_14-197_78-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009626398" comment="kernel-livepatch-4_12_14-197_78-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138536" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187052" ref_url="https://bugzilla.suse.com/1187052" source="BUGZILLA"/>
		<reference ref_id="1188117" ref_url="https://bugzilla.suse.com/1188117" source="BUGZILLA"/>
		<reference ref_id="1188257" ref_url="https://bugzilla.suse.com/1188257" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009230.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_83 fixes several issues.

The following security issues were fixed:

- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-29"/>
	<updated date="2021-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187052">SUSE bug 1187052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188117">SUSE bug 1188117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188257">SUSE bug 1188257</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720983" comment="kernel-default 4.12.14-197.83 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719202" comment="kernel-livepatch-4_12_14-197_83-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009626399" comment="kernel-livepatch-4_12_14-197_83-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138537" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187052" ref_url="https://bugzilla.suse.com/1187052" source="BUGZILLA"/>
		<reference ref_id="1188117" ref_url="https://bugzilla.suse.com/1188117" source="BUGZILLA"/>
		<reference ref_id="1188257" ref_url="https://bugzilla.suse.com/1188257" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009230.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_56 fixes several issues.

The following security issues were fixed:

- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-29"/>
	<updated date="2021-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187052">SUSE bug 1187052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188117">SUSE bug 1188117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188257">SUSE bug 1188257</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720976" comment="kernel-default 4.12.14-197.56 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719195" comment="kernel-livepatch-4_12_14-197_56-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009626392" comment="kernel-livepatch-4_12_14-197_56-default-12-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138538" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187052" ref_url="https://bugzilla.suse.com/1187052" source="BUGZILLA"/>
		<reference ref_id="1188117" ref_url="https://bugzilla.suse.com/1188117" source="BUGZILLA"/>
		<reference ref_id="1188257" ref_url="https://bugzilla.suse.com/1188257" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009239.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_72 fixes several issues.

The following security issues were fixed:

- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-02"/>
	<updated date="2021-08-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187052">SUSE bug 1187052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188117">SUSE bug 1188117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188257">SUSE bug 1188257</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720980" comment="kernel-default 4.12.14-197.72 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719199" comment="kernel-livepatch-4_12_14-197_72-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009626396" comment="kernel-livepatch-4_12_14-197_72-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138539" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186483" ref_url="https://bugzilla.suse.com/1186483" source="BUGZILLA"/>
		<reference ref_id="1188842" ref_url="https://bugzilla.suse.com/1188842" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009296.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_99 fixes several issues.

The following security issues were fixed:

- CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482).
- CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186483">SUSE bug 1186483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188842">SUSE bug 1188842</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720987" comment="kernel-default 4.12.14-197.99 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719206" comment="kernel-livepatch-4_12_14-197_99-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009630672" comment="kernel-livepatch-4_12_14-197_99-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138540" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186483" ref_url="https://bugzilla.suse.com/1186483" source="BUGZILLA"/>
		<reference ref_id="1188323" ref_url="https://bugzilla.suse.com/1188323" source="BUGZILLA"/>
		<reference ref_id="1188842" ref_url="https://bugzilla.suse.com/1188842" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009298.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_92 fixes several issues.

The following security issues were fixed:

- CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482).
- CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838).
- CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186483">SUSE bug 1186483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188323">SUSE bug 1188323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188842">SUSE bug 1188842</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720986" comment="kernel-default 4.12.14-197.92 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719205" comment="kernel-livepatch-4_12_14-197_92-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009630671" comment="kernel-livepatch-4_12_14-197_92-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138541" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186483" ref_url="https://bugzilla.suse.com/1186483" source="BUGZILLA"/>
		<reference ref_id="1188323" ref_url="https://bugzilla.suse.com/1188323" source="BUGZILLA"/>
		<reference ref_id="1188842" ref_url="https://bugzilla.suse.com/1188842" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009298.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_89 fixes several issues.

The following security issues were fixed:

- CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482).
- CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838).
- CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186483">SUSE bug 1186483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188323">SUSE bug 1188323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188842">SUSE bug 1188842</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720985" comment="kernel-default 4.12.14-197.89 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719204" comment="kernel-livepatch-4_12_14-197_89-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009630670" comment="kernel-livepatch-4_12_14-197_89-default-5-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138542" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186483" ref_url="https://bugzilla.suse.com/1186483" source="BUGZILLA"/>
		<reference ref_id="1188323" ref_url="https://bugzilla.suse.com/1188323" source="BUGZILLA"/>
		<reference ref_id="1188842" ref_url="https://bugzilla.suse.com/1188842" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009298.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_86 fixes several issues.

The following security issues were fixed:

- CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482).
- CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838).
- CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186483">SUSE bug 1186483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188323">SUSE bug 1188323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188842">SUSE bug 1188842</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720984" comment="kernel-default 4.12.14-197.86 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719203" comment="kernel-livepatch-4_12_14-197_86-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009630669" comment="kernel-livepatch-4_12_14-197_86-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138543" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186483" ref_url="https://bugzilla.suse.com/1186483" source="BUGZILLA"/>
		<reference ref_id="1188323" ref_url="https://bugzilla.suse.com/1188323" source="BUGZILLA"/>
		<reference ref_id="1188842" ref_url="https://bugzilla.suse.com/1188842" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009298.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_83 fixes several issues.

The following security issues were fixed:

- CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482).
- CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838).
- CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186483">SUSE bug 1186483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188323">SUSE bug 1188323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188842">SUSE bug 1188842</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720983" comment="kernel-default 4.12.14-197.83 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719202" comment="kernel-livepatch-4_12_14-197_83-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009630668" comment="kernel-livepatch-4_12_14-197_83-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138544" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186483" ref_url="https://bugzilla.suse.com/1186483" source="BUGZILLA"/>
		<reference ref_id="1188323" ref_url="https://bugzilla.suse.com/1188323" source="BUGZILLA"/>
		<reference ref_id="1188842" ref_url="https://bugzilla.suse.com/1188842" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009298.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_78 fixes several issues.

The following security issues were fixed:

- CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482).
- CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838).
- CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186483">SUSE bug 1186483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188323">SUSE bug 1188323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188842">SUSE bug 1188842</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720982" comment="kernel-default 4.12.14-197.78 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719201" comment="kernel-livepatch-4_12_14-197_78-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009630667" comment="kernel-livepatch-4_12_14-197_78-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138545" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186483" ref_url="https://bugzilla.suse.com/1186483" source="BUGZILLA"/>
		<reference ref_id="1188323" ref_url="https://bugzilla.suse.com/1188323" source="BUGZILLA"/>
		<reference ref_id="1188842" ref_url="https://bugzilla.suse.com/1188842" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009298.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_75 fixes several issues.

The following security issues were fixed:

- CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482).
- CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838).
- CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186483">SUSE bug 1186483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188323">SUSE bug 1188323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188842">SUSE bug 1188842</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720981" comment="kernel-default 4.12.14-197.75 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719200" comment="kernel-livepatch-4_12_14-197_75-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009630666" comment="kernel-livepatch-4_12_14-197_75-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138546" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186483" ref_url="https://bugzilla.suse.com/1186483" source="BUGZILLA"/>
		<reference ref_id="1188323" ref_url="https://bugzilla.suse.com/1188323" source="BUGZILLA"/>
		<reference ref_id="1188842" ref_url="https://bugzilla.suse.com/1188842" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009298.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_72 fixes several issues.

The following security issues were fixed:

- CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482).
- CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838).
- CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186483">SUSE bug 1186483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188323">SUSE bug 1188323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188842">SUSE bug 1188842</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720980" comment="kernel-default 4.12.14-197.72 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719199" comment="kernel-livepatch-4_12_14-197_72-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009630665" comment="kernel-livepatch-4_12_14-197_72-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138547" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186483" ref_url="https://bugzilla.suse.com/1186483" source="BUGZILLA"/>
		<reference ref_id="1188323" ref_url="https://bugzilla.suse.com/1188323" source="BUGZILLA"/>
		<reference ref_id="1188842" ref_url="https://bugzilla.suse.com/1188842" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009298.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_67 fixes several issues.

The following security issues were fixed:

- CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482).
- CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838).
- CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186483">SUSE bug 1186483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188323">SUSE bug 1188323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188842">SUSE bug 1188842</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720979" comment="kernel-default 4.12.14-197.67 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719198" comment="kernel-livepatch-4_12_14-197_67-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009630664" comment="kernel-livepatch-4_12_14-197_67-default-11-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138548" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186483" ref_url="https://bugzilla.suse.com/1186483" source="BUGZILLA"/>
		<reference ref_id="1188323" ref_url="https://bugzilla.suse.com/1188323" source="BUGZILLA"/>
		<reference ref_id="1188842" ref_url="https://bugzilla.suse.com/1188842" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009298.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_64 fixes several issues.

The following security issues were fixed:

- CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482).
- CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838).
- CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186483">SUSE bug 1186483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188323">SUSE bug 1188323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188842">SUSE bug 1188842</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720978" comment="kernel-default 4.12.14-197.64 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719197" comment="kernel-livepatch-4_12_14-197_64-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009630663" comment="kernel-livepatch-4_12_14-197_64-default-11-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138549" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186483" ref_url="https://bugzilla.suse.com/1186483" source="BUGZILLA"/>
		<reference ref_id="1188323" ref_url="https://bugzilla.suse.com/1188323" source="BUGZILLA"/>
		<reference ref_id="1188842" ref_url="https://bugzilla.suse.com/1188842" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009298.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_61 fixes several issues.

The following security issues were fixed:

- CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482).
- CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838).
- CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186483">SUSE bug 1186483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188323">SUSE bug 1188323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188842">SUSE bug 1188842</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720977" comment="kernel-default 4.12.14-197.61 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719196" comment="kernel-livepatch-4_12_14-197_61-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009630662" comment="kernel-livepatch-4_12_14-197_61-default-12-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138550" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186483" ref_url="https://bugzilla.suse.com/1186483" source="BUGZILLA"/>
		<reference ref_id="1188323" ref_url="https://bugzilla.suse.com/1188323" source="BUGZILLA"/>
		<reference ref_id="1188842" ref_url="https://bugzilla.suse.com/1188842" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009298.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_56 fixes several issues.

The following security issues were fixed:

- CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482).
- CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838).
- CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186483">SUSE bug 1186483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188323">SUSE bug 1188323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188842">SUSE bug 1188842</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720976" comment="kernel-default 4.12.14-197.56 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719195" comment="kernel-livepatch-4_12_14-197_56-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009630661" comment="kernel-livepatch-4_12_14-197_56-default-13-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138551" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186483" ref_url="https://bugzilla.suse.com/1186483" source="BUGZILLA"/>
		<reference ref_id="1188323" ref_url="https://bugzilla.suse.com/1188323" source="BUGZILLA"/>
		<reference ref_id="1188842" ref_url="https://bugzilla.suse.com/1188842" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2746-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009298.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_51 fixes several issues.

The following security issues were fixed:

- CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482).
- CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838).
- CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186483">SUSE bug 1186483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188323">SUSE bug 1188323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188842">SUSE bug 1188842</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720975" comment="kernel-default 4.12.14-197.51 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719194" comment="kernel-livepatch-4_12_14-197_51-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009630660" comment="kernel-livepatch-4_12_14-197_51-default-14-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138552" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1189278" ref_url="https://bugzilla.suse.com/1189278" source="BUGZILLA"/>
		<reference ref_id="1189418" ref_url="https://bugzilla.suse.com/1189418" source="BUGZILLA"/>
		<reference ref_id="1189420" ref_url="https://bugzilla.suse.com/1189420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009450.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_56 fixes several issues.

The following security issues were fixed:

- CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420).
- CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418).
- CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-16"/>
	<updated date="2021-09-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189278">SUSE bug 1189278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189418">SUSE bug 1189418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189420">SUSE bug 1189420</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720976" comment="kernel-default 4.12.14-197.56 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719195" comment="kernel-livepatch-4_12_14-197_56-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009632825" comment="kernel-livepatch-4_12_14-197_56-default-14-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138553" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1189278" ref_url="https://bugzilla.suse.com/1189278" source="BUGZILLA"/>
		<reference ref_id="1189418" ref_url="https://bugzilla.suse.com/1189418" source="BUGZILLA"/>
		<reference ref_id="1189420" ref_url="https://bugzilla.suse.com/1189420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009450.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_61 fixes several issues.

The following security issues were fixed:

- CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420).
- CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418).
- CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-16"/>
	<updated date="2021-09-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189278">SUSE bug 1189278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189418">SUSE bug 1189418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189420">SUSE bug 1189420</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720977" comment="kernel-default 4.12.14-197.61 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719196" comment="kernel-livepatch-4_12_14-197_61-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009632826" comment="kernel-livepatch-4_12_14-197_61-default-13-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138554" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1189278" ref_url="https://bugzilla.suse.com/1189278" source="BUGZILLA"/>
		<reference ref_id="1189418" ref_url="https://bugzilla.suse.com/1189418" source="BUGZILLA"/>
		<reference ref_id="1189420" ref_url="https://bugzilla.suse.com/1189420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009450.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_64 fixes several issues.

The following security issues were fixed:

- CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420).
- CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418).
- CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-16"/>
	<updated date="2021-09-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189278">SUSE bug 1189278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189418">SUSE bug 1189418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189420">SUSE bug 1189420</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720978" comment="kernel-default 4.12.14-197.64 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719197" comment="kernel-livepatch-4_12_14-197_64-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009632827" comment="kernel-livepatch-4_12_14-197_64-default-12-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138555" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1189278" ref_url="https://bugzilla.suse.com/1189278" source="BUGZILLA"/>
		<reference ref_id="1189418" ref_url="https://bugzilla.suse.com/1189418" source="BUGZILLA"/>
		<reference ref_id="1189420" ref_url="https://bugzilla.suse.com/1189420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009450.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_67 fixes several issues.

The following security issues were fixed:

- CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420).
- CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418).
- CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-16"/>
	<updated date="2021-09-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189278">SUSE bug 1189278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189418">SUSE bug 1189418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189420">SUSE bug 1189420</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720979" comment="kernel-default 4.12.14-197.67 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719198" comment="kernel-livepatch-4_12_14-197_67-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009632828" comment="kernel-livepatch-4_12_14-197_67-default-12-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138556" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1189278" ref_url="https://bugzilla.suse.com/1189278" source="BUGZILLA"/>
		<reference ref_id="1189418" ref_url="https://bugzilla.suse.com/1189418" source="BUGZILLA"/>
		<reference ref_id="1189420" ref_url="https://bugzilla.suse.com/1189420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009450.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_72 fixes several issues.

The following security issues were fixed:

- CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420).
- CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418).
- CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-16"/>
	<updated date="2021-09-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189278">SUSE bug 1189278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189418">SUSE bug 1189418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189420">SUSE bug 1189420</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720980" comment="kernel-default 4.12.14-197.72 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719199" comment="kernel-livepatch-4_12_14-197_72-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009632829" comment="kernel-livepatch-4_12_14-197_72-default-11-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138557" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1189278" ref_url="https://bugzilla.suse.com/1189278" source="BUGZILLA"/>
		<reference ref_id="1189418" ref_url="https://bugzilla.suse.com/1189418" source="BUGZILLA"/>
		<reference ref_id="1189420" ref_url="https://bugzilla.suse.com/1189420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009450.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_75 fixes several issues.

The following security issues were fixed:

- CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420).
- CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418).
- CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-16"/>
	<updated date="2021-09-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189278">SUSE bug 1189278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189418">SUSE bug 1189418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189420">SUSE bug 1189420</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720981" comment="kernel-default 4.12.14-197.75 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719200" comment="kernel-livepatch-4_12_14-197_75-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009632830" comment="kernel-livepatch-4_12_14-197_75-default-11-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138558" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1189278" ref_url="https://bugzilla.suse.com/1189278" source="BUGZILLA"/>
		<reference ref_id="1189418" ref_url="https://bugzilla.suse.com/1189418" source="BUGZILLA"/>
		<reference ref_id="1189420" ref_url="https://bugzilla.suse.com/1189420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009450.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_78 fixes several issues.

The following security issues were fixed:

- CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420).
- CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418).
- CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-16"/>
	<updated date="2021-09-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189278">SUSE bug 1189278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189418">SUSE bug 1189418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189420">SUSE bug 1189420</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720982" comment="kernel-default 4.12.14-197.78 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719201" comment="kernel-livepatch-4_12_14-197_78-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009632831" comment="kernel-livepatch-4_12_14-197_78-default-11-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138559" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1189278" ref_url="https://bugzilla.suse.com/1189278" source="BUGZILLA"/>
		<reference ref_id="1189418" ref_url="https://bugzilla.suse.com/1189418" source="BUGZILLA"/>
		<reference ref_id="1189420" ref_url="https://bugzilla.suse.com/1189420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009450.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_83 fixes several issues.

The following security issues were fixed:

- CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420).
- CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418).
- CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-16"/>
	<updated date="2021-09-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189278">SUSE bug 1189278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189418">SUSE bug 1189418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189420">SUSE bug 1189420</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720983" comment="kernel-default 4.12.14-197.83 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719202" comment="kernel-livepatch-4_12_14-197_83-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009632832" comment="kernel-livepatch-4_12_14-197_83-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138560" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1189278" ref_url="https://bugzilla.suse.com/1189278" source="BUGZILLA"/>
		<reference ref_id="1189418" ref_url="https://bugzilla.suse.com/1189418" source="BUGZILLA"/>
		<reference ref_id="1189420" ref_url="https://bugzilla.suse.com/1189420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009450.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_86 fixes several issues.

The following security issues were fixed:

- CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420).
- CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418).
- CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-16"/>
	<updated date="2021-09-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189278">SUSE bug 1189278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189418">SUSE bug 1189418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189420">SUSE bug 1189420</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720984" comment="kernel-default 4.12.14-197.86 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719203" comment="kernel-livepatch-4_12_14-197_86-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009632833" comment="kernel-livepatch-4_12_14-197_86-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138561" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1189278" ref_url="https://bugzilla.suse.com/1189278" source="BUGZILLA"/>
		<reference ref_id="1189418" ref_url="https://bugzilla.suse.com/1189418" source="BUGZILLA"/>
		<reference ref_id="1189420" ref_url="https://bugzilla.suse.com/1189420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009450.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_89 fixes several issues.

The following security issues were fixed:

- CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420).
- CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418).
- CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-16"/>
	<updated date="2021-09-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189278">SUSE bug 1189278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189418">SUSE bug 1189418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189420">SUSE bug 1189420</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720985" comment="kernel-default 4.12.14-197.89 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719204" comment="kernel-livepatch-4_12_14-197_89-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009632834" comment="kernel-livepatch-4_12_14-197_89-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138562" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1189278" ref_url="https://bugzilla.suse.com/1189278" source="BUGZILLA"/>
		<reference ref_id="1189418" ref_url="https://bugzilla.suse.com/1189418" source="BUGZILLA"/>
		<reference ref_id="1189420" ref_url="https://bugzilla.suse.com/1189420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009450.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_92 fixes several issues.

The following security issues were fixed:

- CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420).
- CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418).
- CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-16"/>
	<updated date="2021-09-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189278">SUSE bug 1189278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189418">SUSE bug 1189418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189420">SUSE bug 1189420</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720986" comment="kernel-default 4.12.14-197.92 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719205" comment="kernel-livepatch-4_12_14-197_92-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009632835" comment="kernel-livepatch-4_12_14-197_92-default-5-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138563" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1189278" ref_url="https://bugzilla.suse.com/1189278" source="BUGZILLA"/>
		<reference ref_id="1189418" ref_url="https://bugzilla.suse.com/1189418" source="BUGZILLA"/>
		<reference ref_id="1189420" ref_url="https://bugzilla.suse.com/1189420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009450.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_99 fixes several issues.

The following security issues were fixed:

- CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420).
- CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418).
- CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-16"/>
	<updated date="2021-09-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189278">SUSE bug 1189278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189418">SUSE bug 1189418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189420">SUSE bug 1189420</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720987" comment="kernel-default 4.12.14-197.99 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719206" comment="kernel-livepatch-4_12_14-197_99-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009632836" comment="kernel-livepatch-4_12_14-197_99-default-3-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138564" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187054" ref_url="https://bugzilla.suse.com/1187054" source="BUGZILLA"/>
		<reference ref_id="1188613" ref_url="https://bugzilla.suse.com/1188613" source="BUGZILLA"/>
		<reference ref_id="1190118" ref_url="https://bugzilla.suse.com/1190118" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3573" ref_url="https://www.suse.com/security/cve/CVE-2021-3573/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009571.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_99 fixes several issues.

The following security issues were fixed:

- CVE-2021-38160: Fixed a bug that could lead to a data corruption or loss. This can be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190118)
- CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613)
- CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-12"/>
	<updated date="2021-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187054">SUSE bug 1187054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188613">SUSE bug 1188613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190118">SUSE bug 1190118</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3573/">CVE-2021-3573</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720987" comment="kernel-default 4.12.14-197.99 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719206" comment="kernel-livepatch-4_12_14-197_99-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009651482" comment="kernel-livepatch-4_12_14-197_99-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138565" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187054" ref_url="https://bugzilla.suse.com/1187054" source="BUGZILLA"/>
		<reference ref_id="1188613" ref_url="https://bugzilla.suse.com/1188613" source="BUGZILLA"/>
		<reference ref_id="1190118" ref_url="https://bugzilla.suse.com/1190118" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3573" ref_url="https://www.suse.com/security/cve/CVE-2021-3573/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009571.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_92 fixes several issues.

The following security issues were fixed:

- CVE-2021-38160: Fixed a bug that could lead to a data corruption or loss. This can be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190118)
- CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613)
- CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-12"/>
	<updated date="2021-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187054">SUSE bug 1187054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188613">SUSE bug 1188613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190118">SUSE bug 1190118</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3573/">CVE-2021-3573</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720986" comment="kernel-default 4.12.14-197.92 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719205" comment="kernel-livepatch-4_12_14-197_92-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009651481" comment="kernel-livepatch-4_12_14-197_92-default-6-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138566" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187054" ref_url="https://bugzilla.suse.com/1187054" source="BUGZILLA"/>
		<reference ref_id="1188613" ref_url="https://bugzilla.suse.com/1188613" source="BUGZILLA"/>
		<reference ref_id="1190118" ref_url="https://bugzilla.suse.com/1190118" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3573" ref_url="https://www.suse.com/security/cve/CVE-2021-3573/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009571.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_89 fixes several issues.

The following security issues were fixed:

- CVE-2021-38160: Fixed a bug that could lead to a data corruption or loss. This can be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190118)
- CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613)
- CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-12"/>
	<updated date="2021-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187054">SUSE bug 1187054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188613">SUSE bug 1188613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190118">SUSE bug 1190118</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3573/">CVE-2021-3573</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720985" comment="kernel-default 4.12.14-197.89 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719204" comment="kernel-livepatch-4_12_14-197_89-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009651480" comment="kernel-livepatch-4_12_14-197_89-default-7-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138567" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187054" ref_url="https://bugzilla.suse.com/1187054" source="BUGZILLA"/>
		<reference ref_id="1188613" ref_url="https://bugzilla.suse.com/1188613" source="BUGZILLA"/>
		<reference ref_id="1190118" ref_url="https://bugzilla.suse.com/1190118" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3573" ref_url="https://www.suse.com/security/cve/CVE-2021-3573/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009594.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_86 fixes several issues.

The following security issues were fixed:

- CVE-2021-38160: Fixed a bug that could lead to a data corruption or loss. This can be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190118)
- CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613)
- CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-14"/>
	<updated date="2021-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187054">SUSE bug 1187054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188613">SUSE bug 1188613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190118">SUSE bug 1190118</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3573/">CVE-2021-3573</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720984" comment="kernel-default 4.12.14-197.86 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719203" comment="kernel-livepatch-4_12_14-197_86-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009651523" comment="kernel-livepatch-4_12_14-197_86-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138568" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187054" ref_url="https://bugzilla.suse.com/1187054" source="BUGZILLA"/>
		<reference ref_id="1188613" ref_url="https://bugzilla.suse.com/1188613" source="BUGZILLA"/>
		<reference ref_id="1190118" ref_url="https://bugzilla.suse.com/1190118" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3573" ref_url="https://www.suse.com/security/cve/CVE-2021-3573/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009594.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_78 fixes several issues.

The following security issues were fixed:

- CVE-2021-38160: Fixed a bug that could lead to a data corruption or loss. This can be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190118)
- CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613)
- CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-14"/>
	<updated date="2021-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187054">SUSE bug 1187054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188613">SUSE bug 1188613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190118">SUSE bug 1190118</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3573/">CVE-2021-3573</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720982" comment="kernel-default 4.12.14-197.78 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719201" comment="kernel-livepatch-4_12_14-197_78-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009651521" comment="kernel-livepatch-4_12_14-197_78-default-12-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138569" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187054" ref_url="https://bugzilla.suse.com/1187054" source="BUGZILLA"/>
		<reference ref_id="1188613" ref_url="https://bugzilla.suse.com/1188613" source="BUGZILLA"/>
		<reference ref_id="1190118" ref_url="https://bugzilla.suse.com/1190118" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3573" ref_url="https://www.suse.com/security/cve/CVE-2021-3573/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009594.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_75 fixes several issues.

The following security issues were fixed:

- CVE-2021-38160: Fixed a bug that could lead to a data corruption or loss. This can be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190118)
- CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613)
- CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-14"/>
	<updated date="2021-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187054">SUSE bug 1187054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188613">SUSE bug 1188613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190118">SUSE bug 1190118</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3573/">CVE-2021-3573</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720981" comment="kernel-default 4.12.14-197.75 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719200" comment="kernel-livepatch-4_12_14-197_75-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009651520" comment="kernel-livepatch-4_12_14-197_75-default-12-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138570" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187054" ref_url="https://bugzilla.suse.com/1187054" source="BUGZILLA"/>
		<reference ref_id="1188613" ref_url="https://bugzilla.suse.com/1188613" source="BUGZILLA"/>
		<reference ref_id="1190118" ref_url="https://bugzilla.suse.com/1190118" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3573" ref_url="https://www.suse.com/security/cve/CVE-2021-3573/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009594.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_72 fixes several issues.

The following security issues were fixed:

- CVE-2021-38160: Fixed a bug that could lead to a data corruption or loss. This can be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190118)
- CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613)
- CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-14"/>
	<updated date="2021-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187054">SUSE bug 1187054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188613">SUSE bug 1188613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190118">SUSE bug 1190118</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3573/">CVE-2021-3573</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720980" comment="kernel-default 4.12.14-197.72 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719199" comment="kernel-livepatch-4_12_14-197_72-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009651519" comment="kernel-livepatch-4_12_14-197_72-default-12-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138571" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187054" ref_url="https://bugzilla.suse.com/1187054" source="BUGZILLA"/>
		<reference ref_id="1188613" ref_url="https://bugzilla.suse.com/1188613" source="BUGZILLA"/>
		<reference ref_id="1190118" ref_url="https://bugzilla.suse.com/1190118" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3573" ref_url="https://www.suse.com/security/cve/CVE-2021-3573/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009594.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_64 fixes several issues.

The following security issues were fixed:

- CVE-2021-38160: Fixed a bug that could lead to a data corruption or loss. This can be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190118)
- CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613)
- CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-14"/>
	<updated date="2021-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187054">SUSE bug 1187054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188613">SUSE bug 1188613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190118">SUSE bug 1190118</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3573/">CVE-2021-3573</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720978" comment="kernel-default 4.12.14-197.64 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719197" comment="kernel-livepatch-4_12_14-197_64-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009651517" comment="kernel-livepatch-4_12_14-197_64-default-13-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138572" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187054" ref_url="https://bugzilla.suse.com/1187054" source="BUGZILLA"/>
		<reference ref_id="1188613" ref_url="https://bugzilla.suse.com/1188613" source="BUGZILLA"/>
		<reference ref_id="1190118" ref_url="https://bugzilla.suse.com/1190118" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3573" ref_url="https://www.suse.com/security/cve/CVE-2021-3573/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009594.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_61 fixes several issues.

The following security issues were fixed:

- CVE-2021-38160: Fixed a bug that could lead to a data corruption or loss. This can be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190118)
- CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613)
- CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-14"/>
	<updated date="2021-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187054">SUSE bug 1187054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188613">SUSE bug 1188613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190118">SUSE bug 1190118</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3573/">CVE-2021-3573</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720977" comment="kernel-default 4.12.14-197.61 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719196" comment="kernel-livepatch-4_12_14-197_61-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009651516" comment="kernel-livepatch-4_12_14-197_61-default-14-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138573" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187054" ref_url="https://bugzilla.suse.com/1187054" source="BUGZILLA"/>
		<reference ref_id="1188613" ref_url="https://bugzilla.suse.com/1188613" source="BUGZILLA"/>
		<reference ref_id="1190118" ref_url="https://bugzilla.suse.com/1190118" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3573" ref_url="https://www.suse.com/security/cve/CVE-2021-3573/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009594.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_83 fixes several issues.

The following security issues were fixed:

- CVE-2021-38160: Fixed a bug that could lead to a data corruption or loss. This can be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190118)
- CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613)
- CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-14"/>
	<updated date="2021-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187054">SUSE bug 1187054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188613">SUSE bug 1188613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190118">SUSE bug 1190118</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3573/">CVE-2021-3573</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720983" comment="kernel-default 4.12.14-197.83 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719202" comment="kernel-livepatch-4_12_14-197_83-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009651522" comment="kernel-livepatch-4_12_14-197_83-default-11-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138574" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1187054" ref_url="https://bugzilla.suse.com/1187054" source="BUGZILLA"/>
		<reference ref_id="1188613" ref_url="https://bugzilla.suse.com/1188613" source="BUGZILLA"/>
		<reference ref_id="1190118" ref_url="https://bugzilla.suse.com/1190118" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3573" ref_url="https://www.suse.com/security/cve/CVE-2021-3573/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009594.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_67 fixes several issues.

The following security issues were fixed:

- CVE-2021-38160: Fixed a bug that could lead to a data corruption or loss. This can be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190118)
- CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613)
- CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-14"/>
	<updated date="2021-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187054">SUSE bug 1187054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188613">SUSE bug 1188613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190118">SUSE bug 1190118</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3573/">CVE-2021-3573</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720979" comment="kernel-default 4.12.14-197.67 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719198" comment="kernel-livepatch-4_12_14-197_67-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009651518" comment="kernel-livepatch-4_12_14-197_67-default-13-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138575" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1180008" ref_url="https://bugzilla.suse.com/1180008" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008300.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_78 fixes several issues.

The following security issues were fixed:

- CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180008">SUSE bug 1180008</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720982" comment="kernel-default 4.12.14-197.78 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719201" comment="kernel-livepatch-4_12_14-197_78-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497615" comment="kernel-livepatch-4_12_14-197_78-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138576" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1190432" ref_url="https://bugzilla.suse.com/1190432" source="BUGZILLA"/>
		<reference ref_id="1191318" ref_url="https://bugzilla.suse.com/1191318" source="BUGZILLA"/>
		<reference ref_id="1192042" ref_url="https://bugzilla.suse.com/1192042" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="CVE-2021-3752" ref_url="https://www.suse.com/security/cve/CVE-2021-3752/" source="CVE"/>
		<reference ref_id="CVE-2021-41864" ref_url="https://www.suse.com/security/cve/CVE-2021-41864/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3684-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-November/020771.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_67 fixes several issues.

The following security issues were fixed:

- CVE-2021-0935: Fixed use after free that could lead to local escalation of privilege in ip6_xmit of ip6_output.c (bsc#1192042).
- CVE-2021-3752: Fixed vulnerability in the linux kernel Bluetooth uaf module (bsc#1190432).
- CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-17"/>
	<updated date="2021-11-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190432">SUSE bug 1190432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191318">SUSE bug 1191318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192042">SUSE bug 1192042</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3752/">CVE-2021-3752</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41864/">CVE-2021-41864</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720979" comment="kernel-default 4.12.14-197.67 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719198" comment="kernel-livepatch-4_12_14-197_67-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009656431" comment="kernel-livepatch-4_12_14-197_67-default-14-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138577" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1190432" ref_url="https://bugzilla.suse.com/1190432" source="BUGZILLA"/>
		<reference ref_id="1191318" ref_url="https://bugzilla.suse.com/1191318" source="BUGZILLA"/>
		<reference ref_id="1192042" ref_url="https://bugzilla.suse.com/1192042" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="CVE-2021-3752" ref_url="https://www.suse.com/security/cve/CVE-2021-3752/" source="CVE"/>
		<reference ref_id="CVE-2021-41864" ref_url="https://www.suse.com/security/cve/CVE-2021-41864/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3684-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-November/020771.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_72 fixes several issues.

The following security issues were fixed:

- CVE-2021-0935: Fixed use after free that could lead to local escalation of privilege in ip6_xmit of ip6_output.c (bsc#1192042).
- CVE-2021-3752: Fixed vulnerability in the linux kernel Bluetooth uaf module (bsc#1190432).
- CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-17"/>
	<updated date="2021-11-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190432">SUSE bug 1190432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191318">SUSE bug 1191318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192042">SUSE bug 1192042</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3752/">CVE-2021-3752</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41864/">CVE-2021-41864</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720980" comment="kernel-default 4.12.14-197.72 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719199" comment="kernel-livepatch-4_12_14-197_72-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009656432" comment="kernel-livepatch-4_12_14-197_72-default-13-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138578" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1190432" ref_url="https://bugzilla.suse.com/1190432" source="BUGZILLA"/>
		<reference ref_id="1191318" ref_url="https://bugzilla.suse.com/1191318" source="BUGZILLA"/>
		<reference ref_id="1192042" ref_url="https://bugzilla.suse.com/1192042" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="CVE-2021-3752" ref_url="https://www.suse.com/security/cve/CVE-2021-3752/" source="CVE"/>
		<reference ref_id="CVE-2021-41864" ref_url="https://www.suse.com/security/cve/CVE-2021-41864/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3684-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-November/020771.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_75 fixes several issues.

The following security issues were fixed:

- CVE-2021-0935: Fixed use after free that could lead to local escalation of privilege in ip6_xmit of ip6_output.c (bsc#1192042).
- CVE-2021-3752: Fixed vulnerability in the linux kernel Bluetooth uaf module (bsc#1190432).
- CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-17"/>
	<updated date="2021-11-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190432">SUSE bug 1190432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191318">SUSE bug 1191318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192042">SUSE bug 1192042</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3752/">CVE-2021-3752</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41864/">CVE-2021-41864</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720981" comment="kernel-default 4.12.14-197.75 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719200" comment="kernel-livepatch-4_12_14-197_75-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009656433" comment="kernel-livepatch-4_12_14-197_75-default-13-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138579" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1179877" ref_url="https://bugzilla.suse.com/1179877" source="BUGZILLA"/>
		<reference ref_id="1180008" ref_url="https://bugzilla.suse.com/1180008" source="BUGZILLA"/>
		<reference ref_id="1180030" ref_url="https://bugzilla.suse.com/1180030" source="BUGZILLA"/>
		<reference ref_id="1180032" ref_url="https://bugzilla.suse.com/1180032" source="BUGZILLA"/>
		<reference ref_id="1180562" ref_url="https://bugzilla.suse.com/1180562" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_75 fixes several issues.

The following security issues were fixed:

- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. 
- CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877).
- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179877">SUSE bug 1179877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180008">SUSE bug 1180008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180030">SUSE bug 1180030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180032">SUSE bug 1180032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180562">SUSE bug 1180562</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720981" comment="kernel-default 4.12.14-197.75 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719200" comment="kernel-livepatch-4_12_14-197_75-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497616" comment="kernel-livepatch-4_12_14-197_75-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138580" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1190432" ref_url="https://bugzilla.suse.com/1190432" source="BUGZILLA"/>
		<reference ref_id="1191318" ref_url="https://bugzilla.suse.com/1191318" source="BUGZILLA"/>
		<reference ref_id="1192042" ref_url="https://bugzilla.suse.com/1192042" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="CVE-2021-3752" ref_url="https://www.suse.com/security/cve/CVE-2021-3752/" source="CVE"/>
		<reference ref_id="CVE-2021-41864" ref_url="https://www.suse.com/security/cve/CVE-2021-41864/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3684-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-November/020771.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_78 fixes several issues.

The following security issues were fixed:

- CVE-2021-0935: Fixed use after free that could lead to local escalation of privilege in ip6_xmit of ip6_output.c (bsc#1192042).
- CVE-2021-3752: Fixed vulnerability in the linux kernel Bluetooth uaf module (bsc#1190432).
- CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-17"/>
	<updated date="2021-11-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190432">SUSE bug 1190432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191318">SUSE bug 1191318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192042">SUSE bug 1192042</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3752/">CVE-2021-3752</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41864/">CVE-2021-41864</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720982" comment="kernel-default 4.12.14-197.78 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719201" comment="kernel-livepatch-4_12_14-197_78-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009656434" comment="kernel-livepatch-4_12_14-197_78-default-13-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138581" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1190432" ref_url="https://bugzilla.suse.com/1190432" source="BUGZILLA"/>
		<reference ref_id="1191318" ref_url="https://bugzilla.suse.com/1191318" source="BUGZILLA"/>
		<reference ref_id="1192042" ref_url="https://bugzilla.suse.com/1192042" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="CVE-2021-3752" ref_url="https://www.suse.com/security/cve/CVE-2021-3752/" source="CVE"/>
		<reference ref_id="CVE-2021-41864" ref_url="https://www.suse.com/security/cve/CVE-2021-41864/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3684-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-November/020771.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_83 fixes several issues.

The following security issues were fixed:

- CVE-2021-0935: Fixed use after free that could lead to local escalation of privilege in ip6_xmit of ip6_output.c (bsc#1192042).
- CVE-2021-3752: Fixed vulnerability in the linux kernel Bluetooth uaf module (bsc#1190432).
- CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-17"/>
	<updated date="2021-11-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190432">SUSE bug 1190432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191318">SUSE bug 1191318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192042">SUSE bug 1192042</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3752/">CVE-2021-3752</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41864/">CVE-2021-41864</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720983" comment="kernel-default 4.12.14-197.83 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719202" comment="kernel-livepatch-4_12_14-197_83-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009656435" comment="kernel-livepatch-4_12_14-197_83-default-12-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138582" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1190432" ref_url="https://bugzilla.suse.com/1190432" source="BUGZILLA"/>
		<reference ref_id="1191318" ref_url="https://bugzilla.suse.com/1191318" source="BUGZILLA"/>
		<reference ref_id="1192042" ref_url="https://bugzilla.suse.com/1192042" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="CVE-2021-3752" ref_url="https://www.suse.com/security/cve/CVE-2021-3752/" source="CVE"/>
		<reference ref_id="CVE-2021-41864" ref_url="https://www.suse.com/security/cve/CVE-2021-41864/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3684-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-November/020771.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_86 fixes several issues.

The following security issues were fixed:

- CVE-2021-0935: Fixed use after free that could lead to local escalation of privilege in ip6_xmit of ip6_output.c (bsc#1192042).
- CVE-2021-3752: Fixed vulnerability in the linux kernel Bluetooth uaf module (bsc#1190432).
- CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-17"/>
	<updated date="2021-11-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190432">SUSE bug 1190432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191318">SUSE bug 1191318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192042">SUSE bug 1192042</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3752/">CVE-2021-3752</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41864/">CVE-2021-41864</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720984" comment="kernel-default 4.12.14-197.86 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719203" comment="kernel-livepatch-4_12_14-197_86-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009656436" comment="kernel-livepatch-4_12_14-197_86-default-11-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138583" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1190432" ref_url="https://bugzilla.suse.com/1190432" source="BUGZILLA"/>
		<reference ref_id="1191318" ref_url="https://bugzilla.suse.com/1191318" source="BUGZILLA"/>
		<reference ref_id="1192042" ref_url="https://bugzilla.suse.com/1192042" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="CVE-2021-3752" ref_url="https://www.suse.com/security/cve/CVE-2021-3752/" source="CVE"/>
		<reference ref_id="CVE-2021-41864" ref_url="https://www.suse.com/security/cve/CVE-2021-41864/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3684-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-November/020771.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_89 fixes several issues.

The following security issues were fixed:

- CVE-2021-0935: Fixed use after free that could lead to local escalation of privilege in ip6_xmit of ip6_output.c (bsc#1192042).
- CVE-2021-3752: Fixed vulnerability in the linux kernel Bluetooth uaf module (bsc#1190432).
- CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-17"/>
	<updated date="2021-11-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190432">SUSE bug 1190432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191318">SUSE bug 1191318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192042">SUSE bug 1192042</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3752/">CVE-2021-3752</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41864/">CVE-2021-41864</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720985" comment="kernel-default 4.12.14-197.89 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719204" comment="kernel-livepatch-4_12_14-197_89-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009656437" comment="kernel-livepatch-4_12_14-197_89-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138584" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1190432" ref_url="https://bugzilla.suse.com/1190432" source="BUGZILLA"/>
		<reference ref_id="1191318" ref_url="https://bugzilla.suse.com/1191318" source="BUGZILLA"/>
		<reference ref_id="1192042" ref_url="https://bugzilla.suse.com/1192042" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="CVE-2021-3752" ref_url="https://www.suse.com/security/cve/CVE-2021-3752/" source="CVE"/>
		<reference ref_id="CVE-2021-41864" ref_url="https://www.suse.com/security/cve/CVE-2021-41864/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3684-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-November/020771.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_92 fixes several issues.

The following security issues were fixed:

- CVE-2021-0935: Fixed use after free that could lead to local escalation of privilege in ip6_xmit of ip6_output.c (bsc#1192042).
- CVE-2021-3752: Fixed vulnerability in the linux kernel Bluetooth uaf module (bsc#1190432).
- CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-17"/>
	<updated date="2021-11-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190432">SUSE bug 1190432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191318">SUSE bug 1191318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192042">SUSE bug 1192042</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3752/">CVE-2021-3752</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41864/">CVE-2021-41864</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720986" comment="kernel-default 4.12.14-197.92 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719205" comment="kernel-livepatch-4_12_14-197_92-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009656438" comment="kernel-livepatch-4_12_14-197_92-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138585" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1190432" ref_url="https://bugzilla.suse.com/1190432" source="BUGZILLA"/>
		<reference ref_id="1191318" ref_url="https://bugzilla.suse.com/1191318" source="BUGZILLA"/>
		<reference ref_id="1192042" ref_url="https://bugzilla.suse.com/1192042" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="CVE-2021-3752" ref_url="https://www.suse.com/security/cve/CVE-2021-3752/" source="CVE"/>
		<reference ref_id="CVE-2021-41864" ref_url="https://www.suse.com/security/cve/CVE-2021-41864/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3684-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-November/020771.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_99 fixes several issues.

The following security issues were fixed:

- CVE-2021-0935: Fixed use after free that could lead to local escalation of privilege in ip6_xmit of ip6_output.c (bsc#1192042).
- CVE-2021-3752: Fixed vulnerability in the linux kernel Bluetooth uaf module (bsc#1190432).
- CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-17"/>
	<updated date="2021-11-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190432">SUSE bug 1190432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191318">SUSE bug 1191318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192042">SUSE bug 1192042</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3752/">CVE-2021-3752</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41864/">CVE-2021-41864</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720987" comment="kernel-default 4.12.14-197.99 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719206" comment="kernel-livepatch-4_12_14-197_99-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009656439" comment="kernel-livepatch-4_12_14-197_99-default-5-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138586" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1179877" ref_url="https://bugzilla.suse.com/1179877" source="BUGZILLA"/>
		<reference ref_id="1180008" ref_url="https://bugzilla.suse.com/1180008" source="BUGZILLA"/>
		<reference ref_id="1180030" ref_url="https://bugzilla.suse.com/1180030" source="BUGZILLA"/>
		<reference ref_id="1180032" ref_url="https://bugzilla.suse.com/1180032" source="BUGZILLA"/>
		<reference ref_id="1180562" ref_url="https://bugzilla.suse.com/1180562" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_72 fixes several issues.

The following security issues were fixed:

- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. 
- CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877).
- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179877">SUSE bug 1179877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180008">SUSE bug 1180008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180030">SUSE bug 1180030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180032">SUSE bug 1180032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180562">SUSE bug 1180562</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720980" comment="kernel-default 4.12.14-197.72 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719199" comment="kernel-livepatch-4_12_14-197_72-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497617" comment="kernel-livepatch-4_12_14-197_72-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138587" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1179877" ref_url="https://bugzilla.suse.com/1179877" source="BUGZILLA"/>
		<reference ref_id="1180008" ref_url="https://bugzilla.suse.com/1180008" source="BUGZILLA"/>
		<reference ref_id="1180030" ref_url="https://bugzilla.suse.com/1180030" source="BUGZILLA"/>
		<reference ref_id="1180032" ref_url="https://bugzilla.suse.com/1180032" source="BUGZILLA"/>
		<reference ref_id="1180562" ref_url="https://bugzilla.suse.com/1180562" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_67 fixes several issues.

The following security issues were fixed:

- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. 
- CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877).
- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179877">SUSE bug 1179877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180008">SUSE bug 1180008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180030">SUSE bug 1180030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180032">SUSE bug 1180032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180562">SUSE bug 1180562</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720979" comment="kernel-default 4.12.14-197.67 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719198" comment="kernel-livepatch-4_12_14-197_67-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497618" comment="kernel-livepatch-4_12_14-197_67-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138588" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1179877" ref_url="https://bugzilla.suse.com/1179877" source="BUGZILLA"/>
		<reference ref_id="1180008" ref_url="https://bugzilla.suse.com/1180008" source="BUGZILLA"/>
		<reference ref_id="1180030" ref_url="https://bugzilla.suse.com/1180030" source="BUGZILLA"/>
		<reference ref_id="1180032" ref_url="https://bugzilla.suse.com/1180032" source="BUGZILLA"/>
		<reference ref_id="1180562" ref_url="https://bugzilla.suse.com/1180562" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_64 fixes several issues.

The following security issues were fixed:

- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. 
- CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877).
- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179877">SUSE bug 1179877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180008">SUSE bug 1180008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180030">SUSE bug 1180030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180032">SUSE bug 1180032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180562">SUSE bug 1180562</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720978" comment="kernel-default 4.12.14-197.64 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719197" comment="kernel-livepatch-4_12_14-197_64-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497619" comment="kernel-livepatch-4_12_14-197_64-default-3-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138589" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1179877" ref_url="https://bugzilla.suse.com/1179877" source="BUGZILLA"/>
		<reference ref_id="1180008" ref_url="https://bugzilla.suse.com/1180008" source="BUGZILLA"/>
		<reference ref_id="1180030" ref_url="https://bugzilla.suse.com/1180030" source="BUGZILLA"/>
		<reference ref_id="1180032" ref_url="https://bugzilla.suse.com/1180032" source="BUGZILLA"/>
		<reference ref_id="1180562" ref_url="https://bugzilla.suse.com/1180562" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_61 fixes several issues.

The following security issues were fixed:

- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. 
- CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877).
- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179877">SUSE bug 1179877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180008">SUSE bug 1180008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180030">SUSE bug 1180030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180032">SUSE bug 1180032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180562">SUSE bug 1180562</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720977" comment="kernel-default 4.12.14-197.61 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719196" comment="kernel-livepatch-4_12_14-197_61-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497620" comment="kernel-livepatch-4_12_14-197_61-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138590" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1179877" ref_url="https://bugzilla.suse.com/1179877" source="BUGZILLA"/>
		<reference ref_id="1180008" ref_url="https://bugzilla.suse.com/1180008" source="BUGZILLA"/>
		<reference ref_id="1180030" ref_url="https://bugzilla.suse.com/1180030" source="BUGZILLA"/>
		<reference ref_id="1180032" ref_url="https://bugzilla.suse.com/1180032" source="BUGZILLA"/>
		<reference ref_id="1180562" ref_url="https://bugzilla.suse.com/1180562" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_56 fixes several issues.

The following security issues were fixed:

- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. 
- CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877).
- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179877">SUSE bug 1179877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180008">SUSE bug 1180008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180030">SUSE bug 1180030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180032">SUSE bug 1180032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180562">SUSE bug 1180562</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720976" comment="kernel-default 4.12.14-197.56 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719195" comment="kernel-livepatch-4_12_14-197_56-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497621" comment="kernel-livepatch-4_12_14-197_56-default-5-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138591" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1179877" ref_url="https://bugzilla.suse.com/1179877" source="BUGZILLA"/>
		<reference ref_id="1180008" ref_url="https://bugzilla.suse.com/1180008" source="BUGZILLA"/>
		<reference ref_id="1180030" ref_url="https://bugzilla.suse.com/1180030" source="BUGZILLA"/>
		<reference ref_id="1180032" ref_url="https://bugzilla.suse.com/1180032" source="BUGZILLA"/>
		<reference ref_id="1180562" ref_url="https://bugzilla.suse.com/1180562" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_51 fixes several issues.

The following security issues were fixed:

- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. 
- CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877).
- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179877">SUSE bug 1179877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180008">SUSE bug 1180008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180030">SUSE bug 1180030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180032">SUSE bug 1180032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180562">SUSE bug 1180562</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720975" comment="kernel-default 4.12.14-197.51 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719194" comment="kernel-livepatch-4_12_14-197_51-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497622" comment="kernel-livepatch-4_12_14-197_51-default-6-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138592" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1179877" ref_url="https://bugzilla.suse.com/1179877" source="BUGZILLA"/>
		<reference ref_id="1180008" ref_url="https://bugzilla.suse.com/1180008" source="BUGZILLA"/>
		<reference ref_id="1180030" ref_url="https://bugzilla.suse.com/1180030" source="BUGZILLA"/>
		<reference ref_id="1180032" ref_url="https://bugzilla.suse.com/1180032" source="BUGZILLA"/>
		<reference ref_id="1180562" ref_url="https://bugzilla.suse.com/1180562" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_48 fixes several issues.

The following security issues were fixed:

- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. 
- CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877).
- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179877">SUSE bug 1179877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180008">SUSE bug 1180008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180030">SUSE bug 1180030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180032">SUSE bug 1180032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180562">SUSE bug 1180562</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720974" comment="kernel-default 4.12.14-197.48 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719193" comment="kernel-livepatch-4_12_14-197_48-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497623" comment="kernel-livepatch-4_12_14-197_48-default-6-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138593" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1179877" ref_url="https://bugzilla.suse.com/1179877" source="BUGZILLA"/>
		<reference ref_id="1180008" ref_url="https://bugzilla.suse.com/1180008" source="BUGZILLA"/>
		<reference ref_id="1180030" ref_url="https://bugzilla.suse.com/1180030" source="BUGZILLA"/>
		<reference ref_id="1180032" ref_url="https://bugzilla.suse.com/1180032" source="BUGZILLA"/>
		<reference ref_id="1180562" ref_url="https://bugzilla.suse.com/1180562" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_45 fixes several issues.

The following security issues were fixed:

- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. 
- CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877).
- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179877">SUSE bug 1179877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180008">SUSE bug 1180008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180030">SUSE bug 1180030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180032">SUSE bug 1180032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180562">SUSE bug 1180562</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720973" comment="kernel-default 4.12.14-197.45 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719192" comment="kernel-livepatch-4_12_14-197_45-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497624" comment="kernel-livepatch-4_12_14-197_45-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138594" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1179877" ref_url="https://bugzilla.suse.com/1179877" source="BUGZILLA"/>
		<reference ref_id="1180008" ref_url="https://bugzilla.suse.com/1180008" source="BUGZILLA"/>
		<reference ref_id="1180030" ref_url="https://bugzilla.suse.com/1180030" source="BUGZILLA"/>
		<reference ref_id="1180032" ref_url="https://bugzilla.suse.com/1180032" source="BUGZILLA"/>
		<reference ref_id="1180562" ref_url="https://bugzilla.suse.com/1180562" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_40 fixes several issues.

The following security issues were fixed:

- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. 
- CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877).
- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179877">SUSE bug 1179877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180008">SUSE bug 1180008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180030">SUSE bug 1180030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180032">SUSE bug 1180032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180562">SUSE bug 1180562</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720969" comment="kernel-default 4.12.14-197.40 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719188" comment="kernel-livepatch-4_12_14-197_40-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497625" comment="kernel-livepatch-4_12_14-197_40-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138595" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1179877" ref_url="https://bugzilla.suse.com/1179877" source="BUGZILLA"/>
		<reference ref_id="1180008" ref_url="https://bugzilla.suse.com/1180008" source="BUGZILLA"/>
		<reference ref_id="1180030" ref_url="https://bugzilla.suse.com/1180030" source="BUGZILLA"/>
		<reference ref_id="1180032" ref_url="https://bugzilla.suse.com/1180032" source="BUGZILLA"/>
		<reference ref_id="1180562" ref_url="https://bugzilla.suse.com/1180562" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_37 fixes several issues.

The following security issues were fixed:

- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. 
- CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877).
- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179877">SUSE bug 1179877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180008">SUSE bug 1180008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180030">SUSE bug 1180030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180032">SUSE bug 1180032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180562">SUSE bug 1180562</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720968" comment="kernel-default 4.12.14-197.37 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719187" comment="kernel-livepatch-4_12_14-197_37-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497626" comment="kernel-livepatch-4_12_14-197_37-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138596" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1179877" ref_url="https://bugzilla.suse.com/1179877" source="BUGZILLA"/>
		<reference ref_id="1180008" ref_url="https://bugzilla.suse.com/1180008" source="BUGZILLA"/>
		<reference ref_id="1180030" ref_url="https://bugzilla.suse.com/1180030" source="BUGZILLA"/>
		<reference ref_id="1180032" ref_url="https://bugzilla.suse.com/1180032" source="BUGZILLA"/>
		<reference ref_id="1180562" ref_url="https://bugzilla.suse.com/1180562" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0377-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-February/017944.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_34 fixes several issues.

The following security issues were fixed:

- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. 
- CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877).
- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179877">SUSE bug 1179877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180008">SUSE bug 1180008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180030">SUSE bug 1180030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180032">SUSE bug 1180032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180562">SUSE bug 1180562</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720970" comment="kernel-default 4.12.14-197.34 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719189" comment="kernel-livepatch-4_12_14-197_34-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497627" comment="kernel-livepatch-4_12_14-197_34-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138597" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1100416" ref_url="https://bugzilla.suse.com/1100416" source="BUGZILLA"/>
		<reference ref_id="1108488" ref_url="https://bugzilla.suse.com/1108488" source="BUGZILLA"/>
		<reference ref_id="1129735" ref_url="https://bugzilla.suse.com/1129735" source="BUGZILLA"/>
		<reference ref_id="1129898" ref_url="https://bugzilla.suse.com/1129898" source="BUGZILLA"/>
		<reference ref_id="1133374" ref_url="https://bugzilla.suse.com/1133374" source="BUGZILLA"/>
		<reference ref_id="1136513" ref_url="https://bugzilla.suse.com/1136513" source="BUGZILLA"/>
		<reference ref_id="1171420" ref_url="https://bugzilla.suse.com/1171420" source="BUGZILLA"/>
		<reference ref_id="1176724" ref_url="https://bugzilla.suse.com/1176724" source="BUGZILLA"/>
		<reference ref_id="1177666" ref_url="https://bugzilla.suse.com/1177666" source="BUGZILLA"/>
		<reference ref_id="1181158" ref_url="https://bugzilla.suse.com/1181158" source="BUGZILLA"/>
		<reference ref_id="1184673" ref_url="https://bugzilla.suse.com/1184673" source="BUGZILLA"/>
		<reference ref_id="1184804" ref_url="https://bugzilla.suse.com/1184804" source="BUGZILLA"/>
		<reference ref_id="1185377" ref_url="https://bugzilla.suse.com/1185377" source="BUGZILLA"/>
		<reference ref_id="1185726" ref_url="https://bugzilla.suse.com/1185726" source="BUGZILLA"/>
		<reference ref_id="1185758" ref_url="https://bugzilla.suse.com/1185758" source="BUGZILLA"/>
		<reference ref_id="1185973" ref_url="https://bugzilla.suse.com/1185973" source="BUGZILLA"/>
		<reference ref_id="1186078" ref_url="https://bugzilla.suse.com/1186078" source="BUGZILLA"/>
		<reference ref_id="1186109" ref_url="https://bugzilla.suse.com/1186109" source="BUGZILLA"/>
		<reference ref_id="1186390" ref_url="https://bugzilla.suse.com/1186390" source="BUGZILLA"/>
		<reference ref_id="1186482" ref_url="https://bugzilla.suse.com/1186482" source="BUGZILLA"/>
		<reference ref_id="1186672" ref_url="https://bugzilla.suse.com/1186672" source="BUGZILLA"/>
		<reference ref_id="1188062" ref_url="https://bugzilla.suse.com/1188062" source="BUGZILLA"/>
		<reference ref_id="1188063" ref_url="https://bugzilla.suse.com/1188063" source="BUGZILLA"/>
		<reference ref_id="1188172" ref_url="https://bugzilla.suse.com/1188172" source="BUGZILLA"/>
		<reference ref_id="1188563" ref_url="https://bugzilla.suse.com/1188563" source="BUGZILLA"/>
		<reference ref_id="1188601" ref_url="https://bugzilla.suse.com/1188601" source="BUGZILLA"/>
		<reference ref_id="1188616" ref_url="https://bugzilla.suse.com/1188616" source="BUGZILLA"/>
		<reference ref_id="1188838" ref_url="https://bugzilla.suse.com/1188838" source="BUGZILLA"/>
		<reference ref_id="1188876" ref_url="https://bugzilla.suse.com/1188876" source="BUGZILLA"/>
		<reference ref_id="1188983" ref_url="https://bugzilla.suse.com/1188983" source="BUGZILLA"/>
		<reference ref_id="1188985" ref_url="https://bugzilla.suse.com/1188985" source="BUGZILLA"/>
		<reference ref_id="1189057" ref_url="https://bugzilla.suse.com/1189057" source="BUGZILLA"/>
		<reference ref_id="1189262" ref_url="https://bugzilla.suse.com/1189262" source="BUGZILLA"/>
		<reference ref_id="1189291" ref_url="https://bugzilla.suse.com/1189291" source="BUGZILLA"/>
		<reference ref_id="1189399" ref_url="https://bugzilla.suse.com/1189399" source="BUGZILLA"/>
		<reference ref_id="1189400" ref_url="https://bugzilla.suse.com/1189400" source="BUGZILLA"/>
		<reference ref_id="1189706" ref_url="https://bugzilla.suse.com/1189706" source="BUGZILLA"/>
		<reference ref_id="1189846" ref_url="https://bugzilla.suse.com/1189846" source="BUGZILLA"/>
		<reference ref_id="1189884" ref_url="https://bugzilla.suse.com/1189884" source="BUGZILLA"/>
		<reference ref_id="1190023" ref_url="https://bugzilla.suse.com/1190023" source="BUGZILLA"/>
		<reference ref_id="1190025" ref_url="https://bugzilla.suse.com/1190025" source="BUGZILLA"/>
		<reference ref_id="1190067" ref_url="https://bugzilla.suse.com/1190067" source="BUGZILLA"/>
		<reference ref_id="1190115" ref_url="https://bugzilla.suse.com/1190115" source="BUGZILLA"/>
		<reference ref_id="1190117" ref_url="https://bugzilla.suse.com/1190117" source="BUGZILLA"/>
		<reference ref_id="1190159" ref_url="https://bugzilla.suse.com/1190159" source="BUGZILLA"/>
		<reference ref_id="1190276" ref_url="https://bugzilla.suse.com/1190276" source="BUGZILLA"/>
		<reference ref_id="1190349" ref_url="https://bugzilla.suse.com/1190349" source="BUGZILLA"/>
		<reference ref_id="1190351" ref_url="https://bugzilla.suse.com/1190351" source="BUGZILLA"/>
		<reference ref_id="1190479" ref_url="https://bugzilla.suse.com/1190479" source="BUGZILLA"/>
		<reference ref_id="1190534" ref_url="https://bugzilla.suse.com/1190534" source="BUGZILLA"/>
		<reference ref_id="1190601" ref_url="https://bugzilla.suse.com/1190601" source="BUGZILLA"/>
		<reference ref_id="1190717" ref_url="https://bugzilla.suse.com/1190717" source="BUGZILLA"/>
		<reference ref_id="1191193" ref_url="https://bugzilla.suse.com/1191193" source="BUGZILLA"/>
		<reference ref_id="1191315" ref_url="https://bugzilla.suse.com/1191315" source="BUGZILLA"/>
		<reference ref_id="1191317" ref_url="https://bugzilla.suse.com/1191317" source="BUGZILLA"/>
		<reference ref_id="1191349" ref_url="https://bugzilla.suse.com/1191349" source="BUGZILLA"/>
		<reference ref_id="1191457" ref_url="https://bugzilla.suse.com/1191457" source="BUGZILLA"/>
		<reference ref_id="1191628" ref_url="https://bugzilla.suse.com/1191628" source="BUGZILLA"/>
		<reference ref_id="1191790" ref_url="https://bugzilla.suse.com/1191790" source="BUGZILLA"/>
		<reference ref_id="1191800" ref_url="https://bugzilla.suse.com/1191800" source="BUGZILLA"/>
		<reference ref_id="1191888" ref_url="https://bugzilla.suse.com/1191888" source="BUGZILLA"/>
		<reference ref_id="1191961" ref_url="https://bugzilla.suse.com/1191961" source="BUGZILLA"/>
		<reference ref_id="1192045" ref_url="https://bugzilla.suse.com/1192045" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="1192379" ref_url="https://bugzilla.suse.com/1192379" source="BUGZILLA"/>
		<reference ref_id="1192400" ref_url="https://bugzilla.suse.com/1192400" source="BUGZILLA"/>
		<reference ref_id="1192775" ref_url="https://bugzilla.suse.com/1192775" source="BUGZILLA"/>
		<reference ref_id="1192781" ref_url="https://bugzilla.suse.com/1192781" source="BUGZILLA"/>
		<reference ref_id="1192802" ref_url="https://bugzilla.suse.com/1192802" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13405" ref_url="https://www.suse.com/security/cve/CVE-2018-13405/" source="CVE"/>
		<reference ref_id="CVE-2018-9517" ref_url="https://www.suse.com/security/cve/CVE-2018-9517/" source="CVE"/>
		<reference ref_id="CVE-2019-3874" ref_url="https://www.suse.com/security/cve/CVE-2019-3874/" source="CVE"/>
		<reference ref_id="CVE-2019-3900" ref_url="https://www.suse.com/security/cve/CVE-2019-3900/" source="CVE"/>
		<reference ref_id="CVE-2020-0429" ref_url="https://www.suse.com/security/cve/CVE-2020-0429/" source="CVE"/>
		<reference ref_id="CVE-2020-12770" ref_url="https://www.suse.com/security/cve/CVE-2020-12770/" source="CVE"/>
		<reference ref_id="CVE-2020-3702" ref_url="https://www.suse.com/security/cve/CVE-2020-3702/" source="CVE"/>
		<reference ref_id="CVE-2020-4788" ref_url="https://www.suse.com/security/cve/CVE-2020-4788/" source="CVE"/>
		<reference ref_id="CVE-2021-0941" ref_url="https://www.suse.com/security/cve/CVE-2021-0941/" source="CVE"/>
		<reference ref_id="CVE-2021-20322" ref_url="https://www.suse.com/security/cve/CVE-2021-20322/" source="CVE"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-31916" ref_url="https://www.suse.com/security/cve/CVE-2021-31916/" source="CVE"/>
		<reference ref_id="CVE-2021-33033" ref_url="https://www.suse.com/security/cve/CVE-2021-33033/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="CVE-2021-34556" ref_url="https://www.suse.com/security/cve/CVE-2021-34556/" source="CVE"/>
		<reference ref_id="CVE-2021-34981" ref_url="https://www.suse.com/security/cve/CVE-2021-34981/" source="CVE"/>
		<reference ref_id="CVE-2021-3542" ref_url="https://www.suse.com/security/cve/CVE-2021-3542/" source="CVE"/>
		<reference ref_id="CVE-2021-35477" ref_url="https://www.suse.com/security/cve/CVE-2021-35477/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3655" ref_url="https://www.suse.com/security/cve/CVE-2021-3655/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-3659" ref_url="https://www.suse.com/security/cve/CVE-2021-3659/" source="CVE"/>
		<reference ref_id="CVE-2021-3679" ref_url="https://www.suse.com/security/cve/CVE-2021-3679/" source="CVE"/>
		<reference ref_id="CVE-2021-3715" ref_url="https://www.suse.com/security/cve/CVE-2021-3715/" source="CVE"/>
		<reference ref_id="CVE-2021-37159" ref_url="https://www.suse.com/security/cve/CVE-2021-37159/" source="CVE"/>
		<reference ref_id="CVE-2021-3732" ref_url="https://www.suse.com/security/cve/CVE-2021-3732/" source="CVE"/>
		<reference ref_id="CVE-2021-3744" ref_url="https://www.suse.com/security/cve/CVE-2021-3744/" source="CVE"/>
		<reference ref_id="CVE-2021-3752" ref_url="https://www.suse.com/security/cve/CVE-2021-3752/" source="CVE"/>
		<reference ref_id="CVE-2021-3753" ref_url="https://www.suse.com/security/cve/CVE-2021-3753/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="CVE-2021-3759" ref_url="https://www.suse.com/security/cve/CVE-2021-3759/" source="CVE"/>
		<reference ref_id="CVE-2021-3760" ref_url="https://www.suse.com/security/cve/CVE-2021-3760/" source="CVE"/>
		<reference ref_id="CVE-2021-3764" ref_url="https://www.suse.com/security/cve/CVE-2021-3764/" source="CVE"/>
		<reference ref_id="CVE-2021-3772" ref_url="https://www.suse.com/security/cve/CVE-2021-3772/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="CVE-2021-38204" ref_url="https://www.suse.com/security/cve/CVE-2021-38204/" source="CVE"/>
		<reference ref_id="CVE-2021-40490" ref_url="https://www.suse.com/security/cve/CVE-2021-40490/" source="CVE"/>
		<reference ref_id="CVE-2021-41864" ref_url="https://www.suse.com/security/cve/CVE-2021-41864/" source="CVE"/>
		<reference ref_id="CVE-2021-42008" ref_url="https://www.suse.com/security/cve/CVE-2021-42008/" source="CVE"/>
		<reference ref_id="CVE-2021-42252" ref_url="https://www.suse.com/security/cve/CVE-2021-42252/" source="CVE"/>
		<reference ref_id="CVE-2021-42739" ref_url="https://www.suse.com/security/cve/CVE-2021-42739/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

  You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

- CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).
- CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).
- CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
- CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails  (bsc#1191961).
- CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).
- CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).
- CVE-2021-3655: Missing size validations on inbound SCTP packets may have allowed the kernel to read uninitialized memory (bnc#1188563).
- CVE-2021-33033: The Linux kernel has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value (bnc#1186109 bnc#1186390 bnc#1188876).
- CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev-&gt;rf_conn_info object (bsc#1190067).
- CVE-2021-42739: The firewire subsystem in the Linux kernel has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bnc#1184673).
- CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).
- CVE-2018-13405: The inode_init_owner function in fs/inode.c in the Linux kernel allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID (bnc#1100416 bnc#1129735).
- CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349).
- CVE-2021-34556: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack (bnc#1188983).
- CVE-2021-35477: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation did not necessarily occur before a store operation that has an attacker-controlled value (bnc#1188985).
- CVE-2021-42252: An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a certain comparison uses values that are not memory sizes (bnc#1190479).
- CVE-2021-41864: prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317).
- CVE-2021-42008: The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access (bnc#1191315).
- CVE-2021-3759: Unaccounted ipc objects could have lead to breaking memcg limits and DoS attacks (bsc#1190115).
- CVE-2020-3702: Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic (bnc#1191193).
- CVE-2021-3752: Fixed a use after free vulnerability in the bluetooth module. (bsc#1190023)
- CVE-2021-40490: A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel (bnc#1190159 bnc#1192775)
- CVE-2021-3744: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1189884)
- CVE-2021-3764: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1190534)
- CVE-2020-12770: An issue was discovered in the Linux kernel sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040 (bnc#1171420).
- CVE-2021-3640: Fixed a Use-After-Free vulnerability in function sco_sock_sendmsg() in the bluetooth stack (bsc#1188172).
- CVE-2019-3900: An infinite loop issue was found in the vhost_net kernel module, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario (bnc#1133374).
- CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. (bnc#1129898).
- CVE-2018-9517: In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. (bnc#1108488).
- CVE-2021-38160: Data corruption or loss could be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190117)
- CVE-2021-3753: Fixed race out-of-bounds in virtual terminal handling (bsc#1190025).
- CVE-2021-3732: Mounting overlayfs inside an unprivileged user namespace can reveal files (bsc#1189706).
- CVE-2021-3653: A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the 'int_ctl' field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7 (bnc#1189399).
- CVE-2021-3656: Missing validation of the the `virt_ext` VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS for the L2 guest (bsc#1189400).
- CVE-2021-38204: drivers/usb/host/max3421-hcd.c allowed physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations (bnc#1189291).
- CVE-2021-3679: A lack of CPU resource in the tracing module functionality was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service (bnc#1189057).
- CVE-2020-4788: IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296 (bnc#0 bnc#1177666 bnc#1181158).
- CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (bsc#1188876).
- CVE-2020-0429: In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1176724).
- CVE-2021-37576: arch/powerpc/kvm/book3s_rtas.c on the powerpc platform allowed KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e (bnc#1188838 bnc#1190276).
- CVE-2021-22543: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allowed users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation (bnc#1186482 bnc#1190276).
- CVE-2021-33909: fs/seq_file.c did not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05 (bnc#1188062 bnc#1188063).

The following non-security bugs were fixed:

- Add arch-dependent support markers in supported.conf (bsc#1186672) 
- Add the support for kernel-FLAVOR-optional subpackage (jsc#SLE-11796)
- bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22913)
- bpf: Disallow unprivileged bpf by default (jsc#SLE-22913).
- ceph: take snap_empty_lock atomically with snaprealm refcount change (bsc#1191888).
- config: disable unprivileged BPF by default (jsc#SLE-22913)
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (bsc#1185758,bsc#1192400).
- drm: fix spectre issue in vmw_execbuf_ioctl (bsc#1192802).
- ftrace: Fix scripts/recordmcount.pl due to new binutils (bsc#1192267).
- gigaset: fix spectre issue in do_data_b3_req (bsc#1192802).
- hisax: fix spectre issues (bsc#1192802).
- hv: mana: adjust mana_select_queue to old API (jsc#SLE-18779, bsc#1185726).
- hv: mana: remove netdev_lockdep_set_classes usage (jsc#SLE-18779, bsc#1185726).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number (jsc#SLE-18779, bsc#1185726).
- hysdn: fix spectre issue in hycapi_send_message (bsc#1192802).
- infiniband: fix spectre issue in ib_uverbs_write (bsc#1192802).
- infiniband: fix spectre issue in ib_uverbs_write (bsc#1192802).
- ipc: remove memcg accounting for sops objects in do_semtimedop() (bsc#1190115).
- iwlwifi: fix spectre issue in iwl_dbgfs_update_pm (bsc#1192802).
- kernel-binary.spec: Exctract s390 decompression code (jsc#SLE-17042).
- kernel-binary.spec: Fix up usrmerge for non-modular kernels.
- kernel-binary.spec.in: build-id check requires elfutils.
- kernel-binary.spec.in: Regenerate makefile when not using mkmakefile.
- kernel-binary.spec: Only use mkmakefile when it exists Linux 5.13 no longer had a mkmakefile script
- kernel-binary.spec: Remove obsolete and wrong comment mkmakefile is repleced by echo on newer kernel
- kernel-docs.spec.in: Build using an utf-8 locale. Sphinx cannot handle UTF-8 input in non-UTF-8 locale.
- media: dvb_ca_en50221: prevent using slot_info for Spectre attacs (bsc#1192802).
- media: dvb_ca_en50221: sanity check slot number from userspace (bsc#1192802).
- media: wl128x: get rid of a potential spectre issue (bsc#1192802).
- memcg: enable accounting for file lock caches (bsc#1190115).
- mm/memory.c: do_fault: avoid usage of stale vm_area_struct (bsc#1136513).
- mpt3sas: fix spectre issues (bsc#1192802).
- net: mana: Add a driver for Microsoft Azure Network Adapter (MANA) (jsc#SLE-18779, bsc#1185726).
- net: mana: Add support for EQ sharing (jsc#SLE-18779, bsc#1185726).
- net: mana: Add WARN_ON_ONCE in case of CQE read overflow (jsc#SLE-18779, bsc#1185726).
- net: mana: Fix a memory leak in an error handling path in (jsc#SLE-18779, bsc#1185726).
- net: mana: Fix error handling in mana_create_rxq() (git-fixes, bsc#1191800).
- net: mana: fix PCI_HYPERV dependency (jsc#SLE-18779, bsc#1185726).
- net: mana: Move NAPI from EQ to CQ (jsc#SLE-18779, bsc#1185726).
- net: mana: Prefer struct_size over open coded arithmetic (jsc#SLE-18779, bsc#1185726).
- net: mana: remove redundant initialization of variable err (jsc#SLE-18779, bsc#1185726).
- net: mana: Use int to check the return value of mana_gd_poll_cq() (jsc#SLE-18779, bsc#1185726).
- net: mana: Use struct_size() in kzalloc() (jsc#SLE-18779, bsc#1185726).
- net_sched: cls_route: remove the right filter from hashtable (networking-stable-20_03_28).
- net: sched: sch_teql: fix null-pointer dereference (bsc#1190717).
- net: sock_diag: Fix spectre v1 gadget in __sock_diag_cmd() (bsc#1192802).
- NFS: Do uncached readdir when we're seeking a cookie in an empty page cache (bsc#1191628).
- objtool: Do not fail on missing symbol table (bsc#1192379).
- osst: fix spectre issue in osst_verify_frame (bsc#1192802).
- ovl: check whiteout in ovl_create_over_whiteout() (bsc#1189846).
- ovl: filter of trusted xattr results in audit (bsc#1189846).
- ovl: fix dentry leak in ovl_get_redirect (bsc#1189846).
- ovl: initialize error in ovl_copy_xattr (bsc#1189846).
- ovl: relax WARN_ON() on rename to self (bsc#1189846).
- PCI: hv: Use expected affinity when unmasking IRQ (bsc#1185973).
- Revert 'memcg: enable accounting for file lock caches (bsc#1190115).' This reverts commit 912b4421a3e9bb9f0ef1aadc64a436666259bd4d. It's effectively upstream commit 3754707bcc3e190e5dadc978d172b61e809cb3bd applied to kernel-source (to avoid proliferation of patches). Make a note in blacklist.conf too.
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (bsc#1190601).
- s390/bpf: Fix branch shortening during codegen pass (bsc#1190601).
- s390/bpf: Fix optimizing out zero-extensions (bsc#1190601).
- s390: bpf: implement jitting of BPF_ALU | BPF_ARSH | BPF_* (bsc#1190601).
- s390/bpf: Wrap JIT macro parameter usages in parentheses (bsc#1190601).
- scripts/git_sort/git_sort.py: add bpf git repo
- scripts/git_sort/git_sort.py: Update nvme repositories
- scsi: libfc: Fix array index out of bound exception (bsc#1188616).
- scsi: lpfc: Fix FLOGI failure due to accessing a freed node (bsc#1191349).
- scsi: lpfc: Fix memory overwrite during FC-GS I/O abort handling (bsc#1191349 bsc#1191457).
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (bsc#1191349 bsc#1191457).
- scsi: target: avoid using lun_tg_pt_gp after unlock (bsc#1186078).
- sctp: check asoc peer.asconf_capable before processing asconf (bsc#1190351).
- sctp: fully initialize v4 addr in some functions (bsc#1188563).
- sysvipc/sem: mitigate semnum index against spectre v1 (bsc#1192802).
- target: core: Fix sense key for invalid XCOPY request (bsc#1186078).
- Update config files: Add CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
- Use /usr/lib/modules as module dir when usermerge is active in the target distro.
- UsrMerge the kernel (boo#1184804)
- x86/CPU: Add more Icelake model numbers (bsc#1185758,bsc#1192400).
- xfrm: xfrm_state_mtu should return at least 1280 for ipv6 (bsc#1185377).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-02"/>
	<updated date="2021-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1100416">SUSE bug 1100416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108488">SUSE bug 1108488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129735">SUSE bug 1129735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129898">SUSE bug 1129898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133374">SUSE bug 1133374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136513">SUSE bug 1136513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171420">SUSE bug 1171420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176724">SUSE bug 1176724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177666">SUSE bug 1177666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181158">SUSE bug 1181158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184673">SUSE bug 1184673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184804">SUSE bug 1184804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185377">SUSE bug 1185377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185726">SUSE bug 1185726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185758">SUSE bug 1185758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185973">SUSE bug 1185973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186078">SUSE bug 1186078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186109">SUSE bug 1186109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186390">SUSE bug 1186390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186482">SUSE bug 1186482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186672">SUSE bug 1186672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188062">SUSE bug 1188062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188063">SUSE bug 1188063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188172">SUSE bug 1188172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188563">SUSE bug 1188563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188601">SUSE bug 1188601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188616">SUSE bug 1188616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188838">SUSE bug 1188838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188876">SUSE bug 1188876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188983">SUSE bug 1188983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188985">SUSE bug 1188985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189057">SUSE bug 1189057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189262">SUSE bug 1189262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189291">SUSE bug 1189291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189399">SUSE bug 1189399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189400">SUSE bug 1189400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189706">SUSE bug 1189706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189846">SUSE bug 1189846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189884">SUSE bug 1189884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190023">SUSE bug 1190023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190025">SUSE bug 1190025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190067">SUSE bug 1190067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190115">SUSE bug 1190115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190117">SUSE bug 1190117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190159">SUSE bug 1190159</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190276">SUSE bug 1190276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190349">SUSE bug 1190349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190351">SUSE bug 1190351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190479">SUSE bug 1190479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190534">SUSE bug 1190534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190601">SUSE bug 1190601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190717">SUSE bug 1190717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191193">SUSE bug 1191193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191315">SUSE bug 1191315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191317">SUSE bug 1191317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191349">SUSE bug 1191349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191457">SUSE bug 1191457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191628">SUSE bug 1191628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191790">SUSE bug 1191790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191800">SUSE bug 1191800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191888">SUSE bug 1191888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191961">SUSE bug 1191961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192045">SUSE bug 1192045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192379">SUSE bug 1192379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192400">SUSE bug 1192400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192775">SUSE bug 1192775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192781">SUSE bug 1192781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192802">SUSE bug 1192802</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-13405/">CVE-2018-13405</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-9517/">CVE-2018-9517</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3874/">CVE-2019-3874</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3900/">CVE-2019-3900</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0429/">CVE-2020-0429</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12770/">CVE-2020-12770</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3702/">CVE-2020-3702</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-4788/">CVE-2020-4788</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0941/">CVE-2021-0941</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20322/">CVE-2021-20322</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31916/">CVE-2021-31916</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33033/">CVE-2021-33033</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-34556/">CVE-2021-34556</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-34981/">CVE-2021-34981</cve>
	<cve impact="important" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3542/">CVE-2021-3542</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35477/">CVE-2021-35477</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3655/">CVE-2021-3655</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3659/">CVE-2021-3659</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3679/">CVE-2021-3679</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3715/">CVE-2021-3715</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-37159/">CVE-2021-37159</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3732/">CVE-2021-3732</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3744/">CVE-2021-3744</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3752/">CVE-2021-3752</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3753/">CVE-2021-3753</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3759/">CVE-2021-3759</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3760/">CVE-2021-3760</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3764/">CVE-2021-3764</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3772/">CVE-2021-3772</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38204/">CVE-2021-38204</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-40490/">CVE-2021-40490</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41864/">CVE-2021-41864</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42008/">CVE-2021-42008</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42252/">CVE-2021-42252</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42739/">CVE-2021-42739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658096" comment="kernel-default-livepatch-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658097" comment="kernel-default-livepatch-devel-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658098" comment="kernel-livepatch-4_12_14-197_102-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138598" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1192042" ref_url="https://bugzilla.suse.com/1192042" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4039-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009893.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_102 fixes one issue.

The following security issue was fixed:

- CVE-2021-0935: In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. (bsc#1192032)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192042">SUSE bug 1192042</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720988" comment="kernel-default 4.12.14-197.102 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719207" comment="kernel-livepatch-4_12_14-197_102-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009659392" comment="kernel-livepatch-4_12_14-197_102-default-2-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138599" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1191813" ref_url="https://bugzilla.suse.com/1191813" source="BUGZILLA"/>
		<reference ref_id="1192048" ref_url="https://bugzilla.suse.com/1192048" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0941" ref_url="https://www.suse.com/security/cve/CVE-2021-0941/" source="CVE"/>
		<reference ref_id="CVE-2021-20322" ref_url="https://www.suse.com/security/cve/CVE-2021-20322/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4038-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009894.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_99 fixes several issues.

The following security issues were fixed:

- CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).
- CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191813">SUSE bug 1191813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192048">SUSE bug 1192048</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0941/">CVE-2021-0941</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20322/">CVE-2021-20322</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720987" comment="kernel-default 4.12.14-197.99 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719206" comment="kernel-livepatch-4_12_14-197_99-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009659391" comment="kernel-livepatch-4_12_14-197_99-default-6-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138600" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1191813" ref_url="https://bugzilla.suse.com/1191813" source="BUGZILLA"/>
		<reference ref_id="1192048" ref_url="https://bugzilla.suse.com/1192048" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0941" ref_url="https://www.suse.com/security/cve/CVE-2021-0941/" source="CVE"/>
		<reference ref_id="CVE-2021-20322" ref_url="https://www.suse.com/security/cve/CVE-2021-20322/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4038-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009894.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_92 fixes several issues.

The following security issues were fixed:

- CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).
- CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191813">SUSE bug 1191813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192048">SUSE bug 1192048</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0941/">CVE-2021-0941</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20322/">CVE-2021-20322</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720986" comment="kernel-default 4.12.14-197.92 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719205" comment="kernel-livepatch-4_12_14-197_92-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009659390" comment="kernel-livepatch-4_12_14-197_92-default-8-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138601" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1191813" ref_url="https://bugzilla.suse.com/1191813" source="BUGZILLA"/>
		<reference ref_id="1192048" ref_url="https://bugzilla.suse.com/1192048" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0941" ref_url="https://www.suse.com/security/cve/CVE-2021-0941/" source="CVE"/>
		<reference ref_id="CVE-2021-20322" ref_url="https://www.suse.com/security/cve/CVE-2021-20322/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4038-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009894.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_89 fixes several issues.

The following security issues were fixed:

- CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).
- CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191813">SUSE bug 1191813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192048">SUSE bug 1192048</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0941/">CVE-2021-0941</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20322/">CVE-2021-20322</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720985" comment="kernel-default 4.12.14-197.89 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719204" comment="kernel-livepatch-4_12_14-197_89-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009659389" comment="kernel-livepatch-4_12_14-197_89-default-9-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138602" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1191813" ref_url="https://bugzilla.suse.com/1191813" source="BUGZILLA"/>
		<reference ref_id="1192048" ref_url="https://bugzilla.suse.com/1192048" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0941" ref_url="https://www.suse.com/security/cve/CVE-2021-0941/" source="CVE"/>
		<reference ref_id="CVE-2021-20322" ref_url="https://www.suse.com/security/cve/CVE-2021-20322/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4038-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009894.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_86 fixes several issues.

The following security issues were fixed:

- CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).
- CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191813">SUSE bug 1191813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192048">SUSE bug 1192048</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0941/">CVE-2021-0941</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20322/">CVE-2021-20322</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720984" comment="kernel-default 4.12.14-197.86 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719203" comment="kernel-livepatch-4_12_14-197_86-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009659388" comment="kernel-livepatch-4_12_14-197_86-default-12-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138603" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1191813" ref_url="https://bugzilla.suse.com/1191813" source="BUGZILLA"/>
		<reference ref_id="1192048" ref_url="https://bugzilla.suse.com/1192048" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0941" ref_url="https://www.suse.com/security/cve/CVE-2021-0941/" source="CVE"/>
		<reference ref_id="CVE-2021-20322" ref_url="https://www.suse.com/security/cve/CVE-2021-20322/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4038-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009894.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_83 fixes several issues.

The following security issues were fixed:

- CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).
- CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191813">SUSE bug 1191813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192048">SUSE bug 1192048</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0941/">CVE-2021-0941</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20322/">CVE-2021-20322</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720983" comment="kernel-default 4.12.14-197.83 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719202" comment="kernel-livepatch-4_12_14-197_83-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009659387" comment="kernel-livepatch-4_12_14-197_83-default-13-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138604" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1191813" ref_url="https://bugzilla.suse.com/1191813" source="BUGZILLA"/>
		<reference ref_id="1192048" ref_url="https://bugzilla.suse.com/1192048" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0941" ref_url="https://www.suse.com/security/cve/CVE-2021-0941/" source="CVE"/>
		<reference ref_id="CVE-2021-20322" ref_url="https://www.suse.com/security/cve/CVE-2021-20322/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4038-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009894.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_78 fixes several issues.

The following security issues were fixed:

- CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).
- CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191813">SUSE bug 1191813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192048">SUSE bug 1192048</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0941/">CVE-2021-0941</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20322/">CVE-2021-20322</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720982" comment="kernel-default 4.12.14-197.78 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719201" comment="kernel-livepatch-4_12_14-197_78-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009659386" comment="kernel-livepatch-4_12_14-197_78-default-14-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138605" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1191813" ref_url="https://bugzilla.suse.com/1191813" source="BUGZILLA"/>
		<reference ref_id="1192048" ref_url="https://bugzilla.suse.com/1192048" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0941" ref_url="https://www.suse.com/security/cve/CVE-2021-0941/" source="CVE"/>
		<reference ref_id="CVE-2021-20322" ref_url="https://www.suse.com/security/cve/CVE-2021-20322/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4038-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009894.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_75 fixes several issues.

The following security issues were fixed:

- CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).
- CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191813">SUSE bug 1191813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192048">SUSE bug 1192048</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0941/">CVE-2021-0941</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20322/">CVE-2021-20322</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720981" comment="kernel-default 4.12.14-197.75 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719200" comment="kernel-livepatch-4_12_14-197_75-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009659385" comment="kernel-livepatch-4_12_14-197_75-default-14-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138606" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1046305" ref_url="https://bugzilla.suse.com/1046305" source="BUGZILLA"/>
		<reference ref_id="1046306" ref_url="https://bugzilla.suse.com/1046306" source="BUGZILLA"/>
		<reference ref_id="1046540" ref_url="https://bugzilla.suse.com/1046540" source="BUGZILLA"/>
		<reference ref_id="1046542" ref_url="https://bugzilla.suse.com/1046542" source="BUGZILLA"/>
		<reference ref_id="1046648" ref_url="https://bugzilla.suse.com/1046648" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050538" ref_url="https://bugzilla.suse.com/1050538" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1056653" ref_url="https://bugzilla.suse.com/1056653" source="BUGZILLA"/>
		<reference ref_id="1056657" ref_url="https://bugzilla.suse.com/1056657" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1073513" ref_url="https://bugzilla.suse.com/1073513" source="BUGZILLA"/>
		<reference ref_id="1074220" ref_url="https://bugzilla.suse.com/1074220" source="BUGZILLA"/>
		<reference ref_id="1075020" ref_url="https://bugzilla.suse.com/1075020" source="BUGZILLA"/>
		<reference ref_id="1086282" ref_url="https://bugzilla.suse.com/1086282" source="BUGZILLA"/>
		<reference ref_id="1086301" ref_url="https://bugzilla.suse.com/1086301" source="BUGZILLA"/>
		<reference ref_id="1086313" ref_url="https://bugzilla.suse.com/1086313" source="BUGZILLA"/>
		<reference ref_id="1086314" ref_url="https://bugzilla.suse.com/1086314" source="BUGZILLA"/>
		<reference ref_id="1098633" ref_url="https://bugzilla.suse.com/1098633" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104270" ref_url="https://bugzilla.suse.com/1104270" source="BUGZILLA"/>
		<reference ref_id="1104277" ref_url="https://bugzilla.suse.com/1104277" source="BUGZILLA"/>
		<reference ref_id="1104279" ref_url="https://bugzilla.suse.com/1104279" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104742" ref_url="https://bugzilla.suse.com/1104742" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111981" ref_url="https://bugzilla.suse.com/1111981" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1126390" ref_url="https://bugzilla.suse.com/1126390" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1136348" ref_url="https://bugzilla.suse.com/1136348" source="BUGZILLA"/>
		<reference ref_id="1149032" ref_url="https://bugzilla.suse.com/1149032" source="BUGZILLA"/>
		<reference ref_id="1174206" ref_url="https://bugzilla.suse.com/1174206" source="BUGZILLA"/>
		<reference ref_id="1176831" ref_url="https://bugzilla.suse.com/1176831" source="BUGZILLA"/>
		<reference ref_id="1176846" ref_url="https://bugzilla.suse.com/1176846" source="BUGZILLA"/>
		<reference ref_id="1178036" ref_url="https://bugzilla.suse.com/1178036" source="BUGZILLA"/>
		<reference ref_id="1178049" ref_url="https://bugzilla.suse.com/1178049" source="BUGZILLA"/>
		<reference ref_id="1178900" ref_url="https://bugzilla.suse.com/1178900" source="BUGZILLA"/>
		<reference ref_id="1179093" ref_url="https://bugzilla.suse.com/1179093" source="BUGZILLA"/>
		<reference ref_id="1179142" ref_url="https://bugzilla.suse.com/1179142" source="BUGZILLA"/>
		<reference ref_id="1179508" ref_url="https://bugzilla.suse.com/1179508" source="BUGZILLA"/>
		<reference ref_id="1179509" ref_url="https://bugzilla.suse.com/1179509" source="BUGZILLA"/>
		<reference ref_id="1179563" ref_url="https://bugzilla.suse.com/1179563" source="BUGZILLA"/>
		<reference ref_id="1179573" ref_url="https://bugzilla.suse.com/1179573" source="BUGZILLA"/>
		<reference ref_id="1179575" ref_url="https://bugzilla.suse.com/1179575" source="BUGZILLA"/>
		<reference ref_id="1179878" ref_url="https://bugzilla.suse.com/1179878" source="BUGZILLA"/>
		<reference ref_id="1180130" ref_url="https://bugzilla.suse.com/1180130" source="BUGZILLA"/>
		<reference ref_id="1180765" ref_url="https://bugzilla.suse.com/1180765" source="BUGZILLA"/>
		<reference ref_id="1180812" ref_url="https://bugzilla.suse.com/1180812" source="BUGZILLA"/>
		<reference ref_id="1180891" ref_url="https://bugzilla.suse.com/1180891" source="BUGZILLA"/>
		<reference ref_id="1180912" ref_url="https://bugzilla.suse.com/1180912" source="BUGZILLA"/>
		<reference ref_id="1181018" ref_url="https://bugzilla.suse.com/1181018" source="BUGZILLA"/>
		<reference ref_id="1181170" ref_url="https://bugzilla.suse.com/1181170" source="BUGZILLA"/>
		<reference ref_id="1181230" ref_url="https://bugzilla.suse.com/1181230" source="BUGZILLA"/>
		<reference ref_id="1181231" ref_url="https://bugzilla.suse.com/1181231" source="BUGZILLA"/>
		<reference ref_id="1181260" ref_url="https://bugzilla.suse.com/1181260" source="BUGZILLA"/>
		<reference ref_id="1181349" ref_url="https://bugzilla.suse.com/1181349" source="BUGZILLA"/>
		<reference ref_id="1181425" ref_url="https://bugzilla.suse.com/1181425" source="BUGZILLA"/>
		<reference ref_id="1181504" ref_url="https://bugzilla.suse.com/1181504" source="BUGZILLA"/>
		<reference ref_id="1181809" ref_url="https://bugzilla.suse.com/1181809" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25639" ref_url="https://www.suse.com/security/cve/CVE-2020-25639/" source="CVE"/>
		<reference ref_id="CVE-2020-27835" ref_url="https://www.suse.com/security/cve/CVE-2020-27835/" source="CVE"/>
		<reference ref_id="CVE-2020-29568" ref_url="https://www.suse.com/security/cve/CVE-2020-29568/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-20177" ref_url="https://www.suse.com/security/cve/CVE-2021-20177/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="CVE-2021-3348" ref_url="https://www.suse.com/security/cve/CVE-2021-3348/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008354.html" source="SUSE-SU"/>
		<description>
 The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349).
- CVE-2021-3348: Fixed a use-after-free in nbd_add_socket that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup (bnc#1181504).
- CVE-2021-20177: Fixed a kernel panic related to iptables string matching rules. A privileged user could insert a rule which could lead to denial of service (bnc#1180765).
- CVE-2021-0342: In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. (bnc#1180812)
- CVE-2020-27835: A use-after-free in the infiniband hfi1 driver was found, specifically in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).
- CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).
- CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509).
- CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508).

The following non-security bugs were fixed:

- ACPI: scan: Harden acpi_device_add() against device ID overflows (git-fixes).
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (git-fixes).
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (git-fixes).
- ALSA: doc: Fix reference to mixart.rst (git-fixes).
- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (git-fixes).
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (git-fixes).
- ALSA: hda/via: Add minimum mute flag (git-fixes).
- ALSA: hda/via: Fix runtime PM for Clevo W35xSS (git-fixes).
- ALSA: pcm: Clear the full allocated memory at hw_params (git-fixes).
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (git-fixes).
- ASoC: Intel: haswell: Add missing pm_ops (git-fixes).
- ASoC: dapm: remove widget from dirty list on free (git-fixes).
- EDAC/amd64: Fix PCI component registration (bsc#1112178).
- IB/mlx5: Fix DEVX support for MLX5_CMD_OP_INIT2INIT_QP command (bsc#1103991).
- KVM: SVM: Initialize prev_ga_tag before use (bsc#1180912).
- KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages (bsc#1181230).
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (git-fixes).
- NFS: nfs_igrab_and_active must first reference the superblock (git-fixes).
- NFS: switch nfsiod to be an UNBOUND workqueue (git-fixes).
- NFSv4.2: condition READDIR's mask for security label based on LSM state (git-fixes).
- RDMA/addr: Fix race with netevent_callback()/rdma_addr_cancel() (bsc#1103992).
- RDMA/bnxt_re: Do not add user qps to flushlist (bsc#1050244 ).
- RDMA/bnxt_re: Do not report transparent vlan from QP1 (bsc#1104742).
- RDMA/cma: Do not overwrite sgid_attr after device is released (bsc#1103992).
- RDMA/core: Ensure security pkey modify is not lost (bsc#1046306 ).
- RDMA/core: Fix pkey and port assignment in get_new_pps (bsc#1046306).
- RDMA/core: Fix protection fault in get_pkey_idx_qp_list (bsc#1046306).
- RDMA/core: Fix reported speed and width (bsc#1046306 ).
- RDMA/core: Fix return error value in _ib_modify_qp() to negative (bsc#1103992).
- RDMA/core: Fix use of logical OR in get_new_pps (bsc#1046306 ).
- RDMA/hns: Bugfix for memory window mtpt configuration (bsc#1104427).
- RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver (bsc#1104427).
- RDMA/hns: Fix cmdq parameter of querying pf timer resource (bsc#1104427 bsc#1126206).
- RDMA/hns: Fix missing sq_sig_type when querying QP (bsc#1104427 ).
- RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver (bsc#1104427).
- RDMA/iw_cxgb4: Fix incorrect function parameters (bsc#1136348 jsc#SLE-4684).
- RDMA/iw_cxgb4: initiate CLOSE when entering TERM (bsc#1136348 jsc#SLE-4684).
- RDMA/mlx5: Add init2init as a modify command (bsc#1103991 ).
- RDMA/mlx5: Fix typo in enum name (bsc#1103991).
- RDMA/mlx5: Fix wrong free of blue flame register on error (bsc#1103991).
- RDMA/qedr: Fix inline size returned for iWARP (bsc#1050545 ).
- SUNRPC: cache: ignore timestamp written to 'flush' file (bsc#1178036).
- USB: ehci: fix an interrupt calltrace error (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind() (git-fixes).
- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- __netif_receive_skb_core: pass skb by reference (bsc#1109837).
- arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() (bsc#1180130).
- arm64: pgtable: Fix pte_accessible() (bsc#1180130).
- bnxt_en: Do not query FW when netif_running() is false (bsc#1086282).
- bnxt_en: Fix accumulation of bp-&gt;net_stats_prev (bsc#1104745 ).
- bnxt_en: Improve stats context resource accounting with RDMA driver loaded (bsc#1104745).
- bnxt_en: Release PCI regions when DMA mask setup fails during probe (git-fixes).
- bnxt_en: Reset rings if ring reservation fails during open() (bsc#1086282).
- bnxt_en: fix HWRM error when querying VF temperature (bsc#1104745).
- bnxt_en: fix error return code in bnxt_init_board() (git-fixes).
- bnxt_en: fix error return code in bnxt_init_one() (bsc#1050242 ).
- bnxt_en: read EEPROM A2h address using page 0 (git-fixes).
- bnxt_en: return proper error codes in bnxt_show_temp (bsc#1104745).
- bonding: set dev-&gt;needed_headroom in bond_setup_by_slave() (git-fixes).
- btrfs: add a flag to iterate_inodes_from_logical to find all extent refs for uncompressed extents (bsc#1174206).
- btrfs: add a flags argument to LOGICAL_INO and call it LOGICAL_INO_V2 (bsc#1174206).
- btrfs: increase output size for LOGICAL_INO_V2 ioctl (bsc#1174206).
- btrfs: qgroup: do not try to wait flushing if we're already holding a transaction (bsc#1179575).
- caif: no need to check return value of debugfs_create functions (git-fixes).
- can: c_can: c_can_power_up(): fix error handling (git-fixes).
- can: dev: prevent potential information leak in can_fill_info() (git-fixes).
- can: vxcan: vxcan_xmit: fix use after free bug (git-fixes).
- chelsio/chtls: correct function return and return type (bsc#1104270).
- chelsio/chtls: correct netdevice for vlan interface (bsc#1104270 ).
- chelsio/chtls: fix a double free in chtls_setkey() (bsc#1104270 ).
- chelsio/chtls: fix always leaking ctrl_skb (bsc#1104270 ).
- chelsio/chtls: fix deadlock issue (bsc#1104270).
- chelsio/chtls: fix memory leaks caused by a race (bsc#1104270 ).
- chelsio/chtls: fix memory leaks in CPL handlers (bsc#1104270 ).
- chelsio/chtls: fix panic during unload reload chtls (bsc#1104270 ).
- chelsio/chtls: fix socket lock (bsc#1104270).
- chelsio/chtls: fix tls record info to user (bsc#1104270 ).
- chtls: Added a check to avoid NULL pointer dereference (bsc#1104270).
- chtls: Fix chtls resources release sequence (bsc#1104270 ).
- chtls: Fix hardware tid leak (bsc#1104270).
- chtls: Remove invalid set_tcb call (bsc#1104270).
- chtls: Replace skb_dequeue with skb_peek (bsc#1104270 ).
- cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled (bsc#1109837).
- cxgb3: fix error return code in t3_sge_alloc_qset() (git-fixes).
- cxgb4/cxgb4vf: fix flow control display for auto negotiation (bsc#1046540 bsc#1046542).
- cxgb4: fix SGE queue dump destination buffer context (bsc#1073513).
- cxgb4: fix adapter crash due to wrong MC size (bsc#1073513).
- cxgb4: fix all-mask IP address comparison (bsc#1064802 bsc#1066129).
- cxgb4: fix large delays in PTP synchronization (bsc#1046540 bsc#1046648).
- cxgb4: fix the panic caused by non smac rewrite (bsc#1064802 bsc#1066129).
- cxgb4: fix thermal zone device registration (bsc#1104279 bsc#1104277).
- cxgb4: fix throughput drop during Tx backpressure (bsc#1127354 bsc#1127371).
- cxgb4: move DCB version extern to header file (bsc#1104279 ).
- cxgb4: remove cast when saving IPv4 partial checksum (bsc#1074220).
- cxgb4: set up filter action after rewrites (bsc#1064802 bsc#1066129).
- cxgb4: use correct type for all-mask IP address comparison (bsc#1064802 bsc#1066129).
- cxgb4: use unaligned conversion for fetching timestamp (bsc#1046540 bsc#1046648).
- dm: avoid filesystem lookup in dm_get_dev_t() (bsc#1178049).
- dmaengine: xilinx_dma: check dma_async_device_register return value (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (git-fixes).
- docs: Fix reST markup when linking to sections (git-fixes).
- drivers: net: xgene: Fix the order of the arguments of 'alloc_etherdev_mqs()' (git-fixes).
- drm/amd/powerplay: fix a crash when overclocking Vega M (bsc#1113956)
- drm/amdkfd: Put ACPI table after using it (bsc#1129770) Backporting changes: 	* context changes
- drm/atomic: put state on error path (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/i915: Clear the repeater bit on HDCP disable (bsc#1112178)
- drm/i915: Fix sha_text population code (bsc#1112178)
- drm/msm: Avoid div-by-zero in dpu_crtc_atomic_check() (bsc#1129770)
- drm/msm: Fix WARN_ON() splat in _free_object() (bsc#1129770)
- drm/msm: Fix use-after-free in msm_gem with carveout (bsc#1129770)
- drm/nouveau/bios: fix issue shadowing expansion ROMs (git-fixes).
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (git-fixes).
- drm/nouveau/privring: ack interrupts the same way as RM (git-fixes).
- drm/tve200: Fix handling of platform_get_irq() error (bsc#1129770)
- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1112178)
- drm: sun4i: hdmi: Fix inverted HPD result (bsc#1112178)
- drm: sun4i: hdmi: Remove extra HPD polling (bsc#1112178)
- ehci: fix EHCI host controller initialization sequence (git-fixes).
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (git-fixes).
- floppy: reintroduce O_NDELAY fix (boo#1181018).
- futex: Do not enable IRQs unconditionally in put_pi_state() (bsc#1149032).
- futex: Ensure the correct return value from futex_lock_pi() (bsc#1181349 bsc#1149032).
- futex: Fix incorrect should_fail_futex() handling (bsc#1181349).
- futex: Handle faults correctly for PI futexes (bsc#1181349 bsc#1149032).
- futex: Provide and use pi_state_update_owner() (bsc#1181349 bsc#1149032).
- futex: Replace pointless printk in fixup_owner() (bsc#1181349 bsc#1149032).
- futex: Simplify fixup_pi_state_owner() (bsc#1181349 bsc#1149032).
- futex: Use pi_state_update_owner() in put_pi_state() (bsc#1181349 bsc#1149032).
- i2c: octeon: check correct size of maximum RECV_LEN packet (git-fixes).
- i40e: Fix removing driver while bare-metal VFs pass traffic (git-fixes).
- i40e: avoid premature Rx buffer reuse (bsc#1111981).
- igb: Report speed and duplex as unknown when device is runtime suspended (git-fixes).
- igc: fix link speed advertising (jsc#SLE-4799).
- iio: ad5504: Fix setting power-down state (git-fixes).
- iommu/vt-d: Do not dereference iommu_device if IOMMU_API is not built (bsc#1181260, jsc#ECO-3191).
- iommu/vt-d: Gracefully handle DMAR units with no supported address widths (bsc#1181260, jsc#ECO-3191).
- ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K (bsc#1109837).
- ixgbe: avoid premature Rx buffer reuse (bsc#1109837 ).
- kABI: Fix kABI for extended APIC-ID support (bsc#1181260, jsc#ECO-3191).
- kernfs: deal with kernfs_fill_super() failures (bsc#1181809).
- lockd: do not use interval-based rebinding over TCP (git-fixes).
- locking/futex: Allow low-level atomic operations to return -EAGAIN (bsc#1149032).
- md/raid10: initialize r10_bio-&gt;read_slot before use (git-fixes).
- md: fix a warning caused by a race between concurrent md_ioctl()s (git-fixes).
- media: gp8psk: initialize stats at power control logic (git-fixes).
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (git-fixes).
- misdn: dsp: select CONFIG_BITREVERSE (git-fixes).
- mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() (git-fixes).
- mlxsw: destroy workqueue when trap_register in mlxsw_emad_init (bsc#1112374).
- mlxsw: spectrum: Do not modify cloned SKBs during xmit (git-fixes).
- mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails (bsc#1112374).
- mlxsw: switchx2: Do not modify cloned SKBs during xmit (git-fixes).
- mm, page_alloc: fix core hung in free_pcppages_bulk() (git fixes (mm/hotplug)).
- mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous() (git fixes (mm/pgalloc)).
- mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly (git fixes (mm/hmm)).
- mm/slab: use memzero_explicit() in kzfree() (git fixes (mm/slab)).
- mm: do not wake kswapd prematurely when watermark boosting is disabled (git fixes (mm/vmscan)).
- mm: hwpoison: disable memory error handling on 1GB hugepage (git fixes (mm/hwpoison)).
- mmc: sdhci-xenon: fix 1.8v regulator stabilization (git-fixes).
- nbd: Fix memory leak in nbd_add_socket (bsc#1181504).
- net/af_iucv: always register net_device notifier (git-fixes).
- net/af_iucv: fix null pointer dereference on shutdown (bsc#1179563 LTC#190108).
- net/af_iucv: set correct sk_protocol for child sockets (git-fixes).
- net/filter: Permit reading NET in load_bytes_relative when MAC not set (bsc#1109837).
- net/liquidio: Delete driver version assignment (git-fixes).
- net/liquidio: Delete non-working LIQUIDIO_PACKAGE check (git-fixes).
- net/mlx4_en: Avoid scheduling restart task if it is already running (git-fixes).
- net/mlx5: Add handling of port type in rule deletion (bsc#1103991).
- net/mlx5: Fix memory leak on flow table creation error flow (bsc#1046305).
- net/mlx5e: Fix VLAN cleanup flow (git-fixes).
- net/mlx5e: Fix VLAN create flow (git-fixes).
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (git-fixes).
- net/mlx5e: Fix two double free cases (bsc#1046305).
- net/mlx5e: IPoIB, Drop multicast packets that this interface sent (bsc#1075020).
- net/mlx5e: TX, Fix consumer index of error cqe dump (bsc#1103990 ).
- net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq (bsc#1103990).
- net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels (bsc#1109837).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource() (git-fixes).
- net/smc: receive pending data after RCV_SHUTDOWN (git-fixes).
- net/smc: receive returns without data (git-fixes).
- net/sonic: Add mutual exclusion for accessing shared state (git-fixes).
- net: atlantic: fix potential error handling (git-fixes).
- net: atlantic: fix use after free kasan warn (git-fixes).
- net: bcmgenet: keep MAC in reset until PHY is up (git-fixes).
- net: bcmgenet: reapply manual settings to the PHY (git-fixes).
- net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe() (git-fixes).
- net: cbs: Fix software cbs to consider packet sending time (bsc#1109837).
- net: dsa: LAN9303: select REGMAP when LAN9303 enable (git-fixes).
- net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL (git-fixes).
- net: ena: set initial DMA width to avoid intel iommu issue (git-fixes).
- net: ethernet: mlx4: Avoid assigning a value to ring_cons but not used it anymore in mlx4_en_xmit() (git-fixes).
- net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse() (git-fixes).
- net: freescale: fec: Fix ethtool -d runtime PM (git-fixes).
- net: hns3: add a missing uninit debugfs when unload driver (bsc#1104353).
- net: hns3: add compatible handling for command HCLGE_OPC_PF_RST_DONE (git-fixes).
- net: hns3: add management table after IMP reset (bsc#1104353 ).
- net: hns3: check reset interrupt status when reset fails (git-fixes).
- net: hns3: clear reset interrupt status in hclge_irq_handle() (git-fixes).
- net: hns3: fix a TX timeout issue (bsc#1104353).
- net: hns3: fix a wrong reset interrupt status mask (git-fixes).
- net: hns3: fix error VF index when setting VLAN offload (bsc#1104353).
- net: hns3: fix error handling for desc filling (bsc#1104353 ).
- net: hns3: fix for not calculating TX BD send size correctly (bsc#1126390).
- net: hns3: fix interrupt clearing error for VF (bsc#1104353 ).
- net: hns3: fix mis-counting IRQ vector numbers issue (bsc#1104353).
- net: hns3: fix shaper parameter algorithm (bsc#1104353 ).
- net: hns3: fix the number of queues actually used by ARQ (bsc#1104353).
- net: hns3: fix use-after-free when doing self test (bsc#1104353 ).
- net: hns3: reallocate SSU' buffer size when pfc_en changes (bsc#1104353).
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (bsc#1098633).
- net: mvpp2: Fix error return code in mvpp2_open() (bsc#1119113 ).
- net: mvpp2: fix pkt coalescing int-threshold configuration (bsc#1098633).
- net: phy: Allow BCM54616S PHY to setup internal TX/RX clock delay (git-fixes).
- net: phy: broadcom: Fix RGMII delays configuration for BCM54210E (git-fixes).
- net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs (git-fixes).
- net: phy: micrel: make sure the factory test bit is cleared (git-fixes).
- net: qca_spi: Move reset_count to struct qcaspi (git-fixes).
- net: smc911x: Adjust indentation in smc911x_phy_configure (git-fixes).
- net: stmmac: 16KB buffer must be 16 byte aligned (git-fixes).
- net: stmmac: Do not accept invalid MTU values (git-fixes).
- net: stmmac: Enable 16KB buffer size (git-fixes).
- net: stmmac: RX buffer size must be 16 byte aligned (git-fixes).
- net: stmmac: dwmac-meson8b: Fix signedness bug in probe (git-fixes).
- net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes (git-fixes).
- net: stmmac: fix length of PTP clock's name string (git-fixes).
- net: stmmac: gmac4+: Not all Unicast addresses may be available (git-fixes).
- net: sunrpc: interpret the return value of kstrtou32 correctly (git-fixes).
- net: team: fix memory leak in __team_options_register (git-fixes).
- net: tulip: Adjust indentation in {dmfe, uli526x}_init_module (git-fixes).
- net: usb: lan78xx: Fix error message format specifier (git-fixes).
- net: vlan: avoid leaks on register_vlan_dev() failures (git-fixes).
- net_failover: fixed rollback in net_failover_open() (bsc#1109837).
- net_sched: let qdisc_put() accept NULL pointer (bsc#1056657 bsc#1056653 bsc#1056787).
- nfp: validate the return code from dev_queue_xmit() (git-fixes).
- nfs_common: need lock during iterate through the list (git-fixes).
- nfsd4: readdirplus shouldn't return parent of export (git-fixes).
- nfsd: Fix message level for normal termination (git-fixes).
- pNFS: Mark layout for return if return-on-close was not sent (git-fixes).
- page_frag: Recover from memory pressure (git fixes (mm/pgalloc)).
- powerpc/perf: Add generic compat mode pmu driver (bsc#1178900 ltc#189284).
- powerpc/perf: Fix crashes with generic_compat_pmu &amp; BHRB (bsc#1178900 ltc#189284 git-fixes).
- powerpc/perf: init pmu from core-book3s (bsc#1178900 ltc#189284).
- qed: Fix race condition between scheduling and destroying the slowpath workqueue (bsc#1086314 bsc#1086313 bsc#1086301).
- qed: Fix use after free in qed_chain_free (bsc#1050536 bsc#1050538).
- r8152: Add Lenovo Powered USB-C Travel Hub (git-fixes).
- rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (bsc#1181349 bsc#1149032).
- s390/cio: fix use-after-free in ccw_device_destroy_console (git-fixes).
- s390/dasd: fix list corruption of lcu list (bsc#1181170 LTC#190915).
- s390/dasd: fix list corruption of pavgroup group list (bsc#1181170 LTC#190915).
- s390/dasd: prevent inconsistent LCU device data (bsc#1181170 LTC#190915).
- s390/qeth: delay draining the TX buffers (git-fixes).
- s390/qeth: fix L2 header access in qeth_l3_osa_features_check() (git-fixes).
- s390/qeth: fix deadlock during recovery (git-fixes).
- s390/qeth: fix locking for discipline setup / removal (git-fixes).
- s390/smp: perform initial CPU reset also for SMT siblings (git-fixes).
- sched/fair: Fix enqueue_task_fair warning (bsc#1179093).
- sched/fair: Fix enqueue_task_fair() warning some more (bsc#1179093).
- sched/fair: Fix reordering of enqueue/dequeue_task_fair() (bsc#1179093).
- sched/fair: Fix unthrottle_cfs_rq() for leaf_cfs_rq list (bsc#1179093).
- sched/fair: Reorder enqueue/dequeue_task_fair path (bsc#1179093).
- scsi: core: Fix VPD LUN ID designator priorities (bsc#1178049, git-fixes).
- scsi: ibmvfc: Set default timeout to avoid crash during migration (bsc#1181425 ltc#188252).
- scsi: lpfc: Enhancements to LOG_TRACE_EVENT for better readability (bsc#1180891).
- scsi: lpfc: Fix FW reset action if I/Os are outstanding (bsc#1180891).
- scsi: lpfc: Fix NVMe recovery after mailbox timeout (bsc#1180891).
- scsi: lpfc: Fix PLOGI S_ID of 0 on pt2pt config (bsc#1180891).
- scsi: lpfc: Fix auto sli_mode and its effect on CONFIG_PORT for SLI3 (bsc#1180891).
- scsi: lpfc: Fix crash when a fabric node is released prematurely (bsc#1180891).
- scsi: lpfc: Fix error log messages being logged following SCSI task mgnt (bsc#1180891).
- scsi: lpfc: Fix target reset failing (bsc#1180891).
- scsi: lpfc: Fix vport create logging (bsc#1180891).
- scsi: lpfc: Implement health checking when aborting I/O (bsc#1180891).
- scsi: lpfc: Prevent duplicate requests to unregister with cpuhp framework (bsc#1180891).
- scsi: lpfc: Refresh ndlp when a new PRLI is received in the PRLI issue state (bsc#1180891).
- scsi: lpfc: Simplify bool comparison (bsc#1180891).
- scsi: lpfc: Update lpfc version to 12.8.0.7 (bsc#1180891).
- scsi: lpfc: Use the nvme-fc transport supplied timeout for LS requests (bsc#1180891).
- scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit (bsc#1179142).
- serial: mvebu-uart: fix tx lost characters at power off (git-fixes).
- spi: cadence: cache reference clock rate during probe (git-fixes).
- team: set dev-&gt;needed_headroom in team_setup_by_port() (git-fixes).
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (bsc#1109837).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind failure (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: udc: core: Use lock when write to soft_connect (git-fixes).
- veth: Adjust hard_start offset on redirect XDP frames (bsc#1109837).
- vfio iommu: Add dma available capability (bsc#1179573 LTC#190106).
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (bsc#1181231).
- vhost/vsock: fix vhost vsock cid hashing inconsistent (git-fixes).
- virtio_net: Keep vnet header zeroed if XDP is loaded for small buffer (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- x86/apic: Fix x2apic enablement without interrupt remapping (bsc#1181260, jsc#ECO-3191).
- x86/apic: Support 15 bits of APIC ID in IOAPIC/MSI where available (bsc#1181260, jsc#ECO-3191).
- x86/hyperv: Fix kexec panic/hang issues (bsc#1176831).
- x86/i8259: Use printk_deferred() to prevent deadlock (bsc#1112178).
- x86/ioapic: Handle Extended Destination ID field in RTE (bsc#1181260, jsc#ECO-3191).
- x86/kvm: Add KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181260, jsc#ECO-3191).
- x86/kvm: Reserve KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181260, jsc#ECO-3191).
- x86/mm/numa: Remove uninitialized_var() usage (bsc#1112178).
- x86/mm: Fix leak of pmd ptlock (bsc#1112178).
- x86/msi: Only use high bits of MSI address for DMAR unit (bsc#1181260, jsc#ECO-3191).
- x86/mtrr: Correct the range check before performing MTRR type lookups (bsc#1112178).
- x86/resctrl: Do not move a task to the same resource group (bsc#1112178).
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (bsc#1112178).
- xdp: Fix xsk_generic_xmit errno (bsc#1109837).
- xhci: make sure TRB is fully written before giving it to the controller (git-fixes).
- xhci: tegra: Delay for disabling LFPS detector (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-19"/>
	<updated date="2021-02-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046305">SUSE bug 1046305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046306">SUSE bug 1046306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046540">SUSE bug 1046540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046542">SUSE bug 1046542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046648">SUSE bug 1046648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050538">SUSE bug 1050538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056653">SUSE bug 1056653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056657">SUSE bug 1056657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073513">SUSE bug 1073513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074220">SUSE bug 1074220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075020">SUSE bug 1075020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086282">SUSE bug 1086282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086301">SUSE bug 1086301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086313">SUSE bug 1086313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086314">SUSE bug 1086314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098633">SUSE bug 1098633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104270">SUSE bug 1104270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104277">SUSE bug 1104277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104279">SUSE bug 1104279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104742">SUSE bug 1104742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111981">SUSE bug 1111981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126390">SUSE bug 1126390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136348">SUSE bug 1136348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149032">SUSE bug 1149032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174206">SUSE bug 1174206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176831">SUSE bug 1176831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176846">SUSE bug 1176846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178036">SUSE bug 1178036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178049">SUSE bug 1178049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178900">SUSE bug 1178900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179093">SUSE bug 1179093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179142">SUSE bug 1179142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179508">SUSE bug 1179508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179509">SUSE bug 1179509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179563">SUSE bug 1179563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179573">SUSE bug 1179573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179575">SUSE bug 1179575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179878">SUSE bug 1179878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180130">SUSE bug 1180130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180765">SUSE bug 1180765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180812">SUSE bug 1180812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180891">SUSE bug 1180891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180912">SUSE bug 1180912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181018">SUSE bug 1181018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181170">SUSE bug 1181170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181230">SUSE bug 1181230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181231">SUSE bug 1181231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181260">SUSE bug 1181260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181349">SUSE bug 1181349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181425">SUSE bug 1181425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181504">SUSE bug 1181504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181809">SUSE bug 1181809</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25639/">CVE-2020-25639</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27835/">CVE-2020-27835</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29568/">CVE-2020-29568</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20177/">CVE-2021-20177</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3348/">CVE-2021-3348</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497628" comment="kernel-default-livepatch-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497629" comment="kernel-default-livepatch-devel-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497630" comment="kernel-livepatch-4_12_14-197_83-default-1-3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138607" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1163617" ref_url="https://bugzilla.suse.com/1163617" source="BUGZILLA"/>
		<reference ref_id="1170442" ref_url="https://bugzilla.suse.com/1170442" source="BUGZILLA"/>
		<reference ref_id="1176855" ref_url="https://bugzilla.suse.com/1176855" source="BUGZILLA"/>
		<reference ref_id="1179082" ref_url="https://bugzilla.suse.com/1179082" source="BUGZILLA"/>
		<reference ref_id="1179428" ref_url="https://bugzilla.suse.com/1179428" source="BUGZILLA"/>
		<reference ref_id="1179660" ref_url="https://bugzilla.suse.com/1179660" source="BUGZILLA"/>
		<reference ref_id="1180058" ref_url="https://bugzilla.suse.com/1180058" source="BUGZILLA"/>
		<reference ref_id="1180262" ref_url="https://bugzilla.suse.com/1180262" source="BUGZILLA"/>
		<reference ref_id="1180964" ref_url="https://bugzilla.suse.com/1180964" source="BUGZILLA"/>
		<reference ref_id="1181671" ref_url="https://bugzilla.suse.com/1181671" source="BUGZILLA"/>
		<reference ref_id="1181747" ref_url="https://bugzilla.suse.com/1181747" source="BUGZILLA"/>
		<reference ref_id="1181753" ref_url="https://bugzilla.suse.com/1181753" source="BUGZILLA"/>
		<reference ref_id="1181843" ref_url="https://bugzilla.suse.com/1181843" source="BUGZILLA"/>
		<reference ref_id="1181854" ref_url="https://bugzilla.suse.com/1181854" source="BUGZILLA"/>
		<reference ref_id="1182047" ref_url="https://bugzilla.suse.com/1182047" source="BUGZILLA"/>
		<reference ref_id="1182130" ref_url="https://bugzilla.suse.com/1182130" source="BUGZILLA"/>
		<reference ref_id="1182140" ref_url="https://bugzilla.suse.com/1182140" source="BUGZILLA"/>
		<reference ref_id="1182175" ref_url="https://bugzilla.suse.com/1182175" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29374" ref_url="https://www.suse.com/security/cve/CVE-2020-29374/" source="CVE"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-26932" ref_url="https://www.suse.com/security/cve/CVE-2021-26932/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008455.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1181843).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1181753).
- CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping (XSA-361 bsc#1181747).
  by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#178372).
- CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write implementation which could have granted unintended write access
  because of a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).

The following non-security bugs were fixed:

- btrfs: Cleanup try_flush_qgroup (bsc#1182047).
- btrfs: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: fix data bytes_may_use underflow with fallocate due to failed quota reserve (bsc#1182130)
- btrfs: Free correct amount of space in btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Simplify code flow in btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Unlock extents in btrfs_zero_range in case of errors (bsc#1182047).
- Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (git-fixes).
- ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293).
- kernel-binary.spec: Add back initrd and image symlink ghosts to filelist (bsc#1182140). Fixes: 76a9256314c3 ('rpm/kernel-{source,binary}.spec: do not include ghost symlinks (boo#1179082).')
- libnvdimm/dimm: Avoid race between probe and available_slots_show() (bsc#1170442).
- net: bcmgenet: add support for ethtool rxnfc flows (git-fixes).
- net: bcmgenet: code movement (git-fixes).
- net: bcmgenet: fix mask check in bcmgenet_validate_flow() (git-fixes).
- net: bcmgenet: Fix WoL with password after deep sleep (git-fixes).
- net: bcmgenet: re-remove bcmgenet_hfb_add_filter (git-fixes).
- net: bcmgenet: set Rx mode before starting netif (git-fixes).
- net: bcmgenet: use __be16 for htons(ETH_P_IP) (git-fixes).
- net: bcmgenet: Use correct I/O accessors (git-fixes).
- net: lpc-enet: fix error return code in lpc_mii_init() (git-fixes).
- net/mlx4_en: Handle TX error CQE (bsc#1181854).
- net: moxa: Fix a potential double 'free_irq()' (git-fixes).
- net: sun: fix missing release regions in cas_init_one() (git-fixes).
- nvme-multipath: Early exit if no path is available (bsc#1180964).
- rpm/post.sh: Avoid purge-kernel for the first installed kernel (bsc#1180058)
- scsi: target: fix unmap_zeroes_data boolean initialisation (bsc#1163617).
- usb: dwc2: Abort transaction after errors with unknown reason (bsc#1180262).
- usb: dwc2: Do not update data length if it is 0 on inbound transfers (bsc#1180262).
- usb: dwc2: Make 'trimming xfer length' a debug message (bsc#1180262).
- vmxnet3: Remove buf_info from device accessible structures (bsc#1181671).
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).
- xen/netback: fix spurious event detection for common event case (bsc#1182175).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-09"/>
	<updated date="2021-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163617">SUSE bug 1163617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170442">SUSE bug 1170442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176855">SUSE bug 1176855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179082">SUSE bug 1179082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179428">SUSE bug 1179428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179660">SUSE bug 1179660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180058">SUSE bug 1180058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180262">SUSE bug 1180262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180964">SUSE bug 1180964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181671">SUSE bug 1181671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181747">SUSE bug 1181747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181753">SUSE bug 1181753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181843">SUSE bug 1181843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181854">SUSE bug 1181854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182047">SUSE bug 1182047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182130">SUSE bug 1182130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182140">SUSE bug 1182140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182175">SUSE bug 1182175</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29374/">CVE-2020-29374</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26932/">CVE-2021-26932</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497631" comment="kernel-default-livepatch-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497632" comment="kernel-default-livepatch-devel-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497633" comment="kernel-livepatch-4_12_14-197_86-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138608" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008505.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_83 fixes one issue.

The following security issue was fixed:

- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-17"/>
	<updated date="2021-03-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720983" comment="kernel-default 4.12.14-197.83 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719202" comment="kernel-livepatch-4_12_14-197_83-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497634" comment="kernel-livepatch-4_12_14-197_83-default-2-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138609" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1179616" ref_url="https://bugzilla.suse.com/1179616" source="BUGZILLA"/>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1180859" ref_url="https://bugzilla.suse.com/1180859" source="BUGZILLA"/>
		<reference ref_id="1181553" ref_url="https://bugzilla.suse.com/1181553" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008512.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_78 fixes several issues.

The following security issues were fixed:

- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
- CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553).
- CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616).
- CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-17"/>
	<updated date="2021-03-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179616">SUSE bug 1179616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180859">SUSE bug 1180859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181553">SUSE bug 1181553</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720982" comment="kernel-default 4.12.14-197.78 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719201" comment="kernel-livepatch-4_12_14-197_78-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497635" comment="kernel-livepatch-4_12_14-197_78-default-3-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138610" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178684" ref_url="https://bugzilla.suse.com/1178684" source="BUGZILLA"/>
		<reference ref_id="1179616" ref_url="https://bugzilla.suse.com/1179616" source="BUGZILLA"/>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1180859" ref_url="https://bugzilla.suse.com/1180859" source="BUGZILLA"/>
		<reference ref_id="1181553" ref_url="https://bugzilla.suse.com/1181553" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0818-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018289.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_75 fixes several issues.

The following security issues were fixed:

- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
- CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553).
- CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616).
- CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684).
- CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-17"/>
	<updated date="2021-03-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178684">SUSE bug 1178684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179616">SUSE bug 1179616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180859">SUSE bug 1180859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181553">SUSE bug 1181553</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720981" comment="kernel-default 4.12.14-197.75 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719200" comment="kernel-livepatch-4_12_14-197_75-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497636" comment="kernel-livepatch-4_12_14-197_75-default-3-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138611" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178684" ref_url="https://bugzilla.suse.com/1178684" source="BUGZILLA"/>
		<reference ref_id="1179616" ref_url="https://bugzilla.suse.com/1179616" source="BUGZILLA"/>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1180859" ref_url="https://bugzilla.suse.com/1180859" source="BUGZILLA"/>
		<reference ref_id="1181553" ref_url="https://bugzilla.suse.com/1181553" source="BUGZILLA"/>
		<reference ref_id="1182468" ref_url="https://bugzilla.suse.com/1182468" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008499.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_72 fixes several issues.

The following security issues were fixed:

- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
- Fixed an issue where NFS client filesystems got unmounted on fail-over (bsc#1182468). 
- CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553).
- CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616).
- CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684).
- CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-17"/>
	<updated date="2021-03-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178684">SUSE bug 1178684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179616">SUSE bug 1179616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180859">SUSE bug 1180859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181553">SUSE bug 1181553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182468">SUSE bug 1182468</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720980" comment="kernel-default 4.12.14-197.72 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719199" comment="kernel-livepatch-4_12_14-197_72-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497637" comment="kernel-livepatch-4_12_14-197_72-default-3-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138612" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178684" ref_url="https://bugzilla.suse.com/1178684" source="BUGZILLA"/>
		<reference ref_id="1179616" ref_url="https://bugzilla.suse.com/1179616" source="BUGZILLA"/>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1180859" ref_url="https://bugzilla.suse.com/1180859" source="BUGZILLA"/>
		<reference ref_id="1181553" ref_url="https://bugzilla.suse.com/1181553" source="BUGZILLA"/>
		<reference ref_id="1182468" ref_url="https://bugzilla.suse.com/1182468" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008499.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_67 fixes several issues.

The following security issues were fixed:

- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
- Fixed an issue where NFS client filesystems got unmounted on fail-over (bsc#1182468). 
- CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553).
- CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616).
- CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684).
- CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-17"/>
	<updated date="2021-03-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178684">SUSE bug 1178684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179616">SUSE bug 1179616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180859">SUSE bug 1180859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181553">SUSE bug 1181553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182468">SUSE bug 1182468</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720979" comment="kernel-default 4.12.14-197.67 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719198" comment="kernel-livepatch-4_12_14-197_67-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497638" comment="kernel-livepatch-4_12_14-197_67-default-4-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138613" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178684" ref_url="https://bugzilla.suse.com/1178684" source="BUGZILLA"/>
		<reference ref_id="1179616" ref_url="https://bugzilla.suse.com/1179616" source="BUGZILLA"/>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1180859" ref_url="https://bugzilla.suse.com/1180859" source="BUGZILLA"/>
		<reference ref_id="1181553" ref_url="https://bugzilla.suse.com/1181553" source="BUGZILLA"/>
		<reference ref_id="1182468" ref_url="https://bugzilla.suse.com/1182468" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008499.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_64 fixes several issues.

The following security issues were fixed:

- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
- Fixed an issue where NFS client filesystems got unmounted on fail-over (bsc#1182468). 
- CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553).
- CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616).
- CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684).
- CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-17"/>
	<updated date="2021-03-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178684">SUSE bug 1178684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179616">SUSE bug 1179616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180859">SUSE bug 1180859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181553">SUSE bug 1181553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182468">SUSE bug 1182468</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720978" comment="kernel-default 4.12.14-197.64 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719197" comment="kernel-livepatch-4_12_14-197_64-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497639" comment="kernel-livepatch-4_12_14-197_64-default-4-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138614" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178684" ref_url="https://bugzilla.suse.com/1178684" source="BUGZILLA"/>
		<reference ref_id="1179616" ref_url="https://bugzilla.suse.com/1179616" source="BUGZILLA"/>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1180859" ref_url="https://bugzilla.suse.com/1180859" source="BUGZILLA"/>
		<reference ref_id="1181553" ref_url="https://bugzilla.suse.com/1181553" source="BUGZILLA"/>
		<reference ref_id="1182108" ref_url="https://bugzilla.suse.com/1182108" source="BUGZILLA"/>
		<reference ref_id="1182468" ref_url="https://bugzilla.suse.com/1182468" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008502.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_61 fixes several issues.

The following security issues were fixed:

- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
- Fixed an issue where NFS client filesystems got unmounted on fail-over (bsc#1182468). 
- Fixed an issue where NFS client hanged on write errors (bsc#1182108).
- CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553).
- CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616).
- CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684).
- CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-17"/>
	<updated date="2021-03-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178684">SUSE bug 1178684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179616">SUSE bug 1179616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180859">SUSE bug 1180859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181553">SUSE bug 1181553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182108">SUSE bug 1182108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182468">SUSE bug 1182468</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720977" comment="kernel-default 4.12.14-197.61 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719196" comment="kernel-livepatch-4_12_14-197_61-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497640" comment="kernel-livepatch-4_12_14-197_61-default-5-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138615" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178684" ref_url="https://bugzilla.suse.com/1178684" source="BUGZILLA"/>
		<reference ref_id="1179616" ref_url="https://bugzilla.suse.com/1179616" source="BUGZILLA"/>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1180859" ref_url="https://bugzilla.suse.com/1180859" source="BUGZILLA"/>
		<reference ref_id="1181553" ref_url="https://bugzilla.suse.com/1181553" source="BUGZILLA"/>
		<reference ref_id="1182108" ref_url="https://bugzilla.suse.com/1182108" source="BUGZILLA"/>
		<reference ref_id="1182468" ref_url="https://bugzilla.suse.com/1182468" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008502.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_56 fixes several issues.

The following security issues were fixed:

- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
- Fixed an issue where NFS client filesystems got unmounted on fail-over (bsc#1182468). 
- Fixed an issue where NFS client hanged on write errors (bsc#1182108).
- CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553).
- CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616).
- CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684).
- CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-17"/>
	<updated date="2021-03-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178684">SUSE bug 1178684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179616">SUSE bug 1179616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180859">SUSE bug 1180859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181553">SUSE bug 1181553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182108">SUSE bug 1182108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182468">SUSE bug 1182468</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720976" comment="kernel-default 4.12.14-197.56 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719195" comment="kernel-livepatch-4_12_14-197_56-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497641" comment="kernel-livepatch-4_12_14-197_56-default-6-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138616" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178684" ref_url="https://bugzilla.suse.com/1178684" source="BUGZILLA"/>
		<reference ref_id="1179616" ref_url="https://bugzilla.suse.com/1179616" source="BUGZILLA"/>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1180859" ref_url="https://bugzilla.suse.com/1180859" source="BUGZILLA"/>
		<reference ref_id="1181553" ref_url="https://bugzilla.suse.com/1181553" source="BUGZILLA"/>
		<reference ref_id="1182108" ref_url="https://bugzilla.suse.com/1182108" source="BUGZILLA"/>
		<reference ref_id="1182468" ref_url="https://bugzilla.suse.com/1182468" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008502.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_51 fixes several issues.

The following security issues were fixed:

- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
- Fixed an issue where NFS client filesystems got unmounted on fail-over (bsc#1182468). 
- Fixed an issue where NFS client hanged on write errors (bsc#1182108).
- CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553).
- CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616).
- CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684).
- CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-17"/>
	<updated date="2021-03-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178684">SUSE bug 1178684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179616">SUSE bug 1179616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180859">SUSE bug 1180859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181553">SUSE bug 1181553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182108">SUSE bug 1182108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182468">SUSE bug 1182468</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720975" comment="kernel-default 4.12.14-197.51 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719194" comment="kernel-livepatch-4_12_14-197_51-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497642" comment="kernel-livepatch-4_12_14-197_51-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138617" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178684" ref_url="https://bugzilla.suse.com/1178684" source="BUGZILLA"/>
		<reference ref_id="1179616" ref_url="https://bugzilla.suse.com/1179616" source="BUGZILLA"/>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1180859" ref_url="https://bugzilla.suse.com/1180859" source="BUGZILLA"/>
		<reference ref_id="1181553" ref_url="https://bugzilla.suse.com/1181553" source="BUGZILLA"/>
		<reference ref_id="1182108" ref_url="https://bugzilla.suse.com/1182108" source="BUGZILLA"/>
		<reference ref_id="1182468" ref_url="https://bugzilla.suse.com/1182468" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008502.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_48 fixes several issues.

The following security issues were fixed:

- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
- Fixed an issue where NFS client filesystems got unmounted on fail-over (bsc#1182468). 
- Fixed an issue where NFS client hanged on write errors (bsc#1182108).
- CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553).
- CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616).
- CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684).
- CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-17"/>
	<updated date="2021-03-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178684">SUSE bug 1178684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179616">SUSE bug 1179616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180859">SUSE bug 1180859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181553">SUSE bug 1181553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182108">SUSE bug 1182108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182468">SUSE bug 1182468</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720974" comment="kernel-default 4.12.14-197.48 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719193" comment="kernel-livepatch-4_12_14-197_48-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497643" comment="kernel-livepatch-4_12_14-197_48-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138618" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178684" ref_url="https://bugzilla.suse.com/1178684" source="BUGZILLA"/>
		<reference ref_id="1179616" ref_url="https://bugzilla.suse.com/1179616" source="BUGZILLA"/>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1180859" ref_url="https://bugzilla.suse.com/1180859" source="BUGZILLA"/>
		<reference ref_id="1181553" ref_url="https://bugzilla.suse.com/1181553" source="BUGZILLA"/>
		<reference ref_id="1182108" ref_url="https://bugzilla.suse.com/1182108" source="BUGZILLA"/>
		<reference ref_id="1182468" ref_url="https://bugzilla.suse.com/1182468" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0859-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008502.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_45 fixes several issues.

The following security issues were fixed:

- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
- Fixed an issue where NFS client filesystems got unmounted on fail-over (bsc#1182468). 
- Fixed an issue where NFS client hanged on write errors (bsc#1182108).
- CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553).
- CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616).
- CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684).
- CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-17"/>
	<updated date="2021-03-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178684">SUSE bug 1178684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179616">SUSE bug 1179616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180859">SUSE bug 1180859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181553">SUSE bug 1181553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182108">SUSE bug 1182108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182468">SUSE bug 1182468</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720973" comment="kernel-default 4.12.14-197.45 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719192" comment="kernel-livepatch-4_12_14-197_45-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497644" comment="kernel-livepatch-4_12_14-197_45-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138619" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178684" ref_url="https://bugzilla.suse.com/1178684" source="BUGZILLA"/>
		<reference ref_id="1179616" ref_url="https://bugzilla.suse.com/1179616" source="BUGZILLA"/>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1180859" ref_url="https://bugzilla.suse.com/1180859" source="BUGZILLA"/>
		<reference ref_id="1181553" ref_url="https://bugzilla.suse.com/1181553" source="BUGZILLA"/>
		<reference ref_id="1182468" ref_url="https://bugzilla.suse.com/1182468" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008499.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_40 fixes several issues.

The following security issues were fixed:

- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
- Fixed an issue where NFS client filesystems got unmounted on fail-over (bsc#1182468). 
- CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553).
- CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616).
- CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684).
- CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-17"/>
	<updated date="2021-03-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178684">SUSE bug 1178684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179616">SUSE bug 1179616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180859">SUSE bug 1180859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181553">SUSE bug 1181553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182468">SUSE bug 1182468</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720969" comment="kernel-default 4.12.14-197.40 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719188" comment="kernel-livepatch-4_12_14-197_40-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497645" comment="kernel-livepatch-4_12_14-197_40-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138620" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178684" ref_url="https://bugzilla.suse.com/1178684" source="BUGZILLA"/>
		<reference ref_id="1179616" ref_url="https://bugzilla.suse.com/1179616" source="BUGZILLA"/>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1180859" ref_url="https://bugzilla.suse.com/1180859" source="BUGZILLA"/>
		<reference ref_id="1181553" ref_url="https://bugzilla.suse.com/1181553" source="BUGZILLA"/>
		<reference ref_id="1182468" ref_url="https://bugzilla.suse.com/1182468" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008499.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_37 fixes several issues.

The following security issues were fixed:

- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
- Fixed an issue where NFS client filesystems got unmounted on fail-over (bsc#1182468). 
- CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553).
- CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616).
- CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684).
- CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-17"/>
	<updated date="2021-03-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178684">SUSE bug 1178684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179616">SUSE bug 1179616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180859">SUSE bug 1180859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181553">SUSE bug 1181553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182468">SUSE bug 1182468</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720968" comment="kernel-default 4.12.14-197.37 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719187" comment="kernel-livepatch-4_12_14-197_37-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497646" comment="kernel-livepatch-4_12_14-197_37-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138621" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1178684" ref_url="https://bugzilla.suse.com/1178684" source="BUGZILLA"/>
		<reference ref_id="1179616" ref_url="https://bugzilla.suse.com/1179616" source="BUGZILLA"/>
		<reference ref_id="1179664" ref_url="https://bugzilla.suse.com/1179664" source="BUGZILLA"/>
		<reference ref_id="1180859" ref_url="https://bugzilla.suse.com/1180859" source="BUGZILLA"/>
		<reference ref_id="1181553" ref_url="https://bugzilla.suse.com/1181553" source="BUGZILLA"/>
		<reference ref_id="1182468" ref_url="https://bugzilla.suse.com/1182468" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008499.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_34 fixes several issues.

The following security issues were fixed:

- CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664).
- Fixed an issue where NFS client filesystems got unmounted on fail-over (bsc#1182468). 
- CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553).
- CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616).
- CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684).
- CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-17"/>
	<updated date="2021-03-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178684">SUSE bug 1178684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179616">SUSE bug 1179616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179664">SUSE bug 1179664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180859">SUSE bug 1180859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181553">SUSE bug 1181553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182468">SUSE bug 1182468</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720970" comment="kernel-default 4.12.14-197.34 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719189" comment="kernel-livepatch-4_12_14-197_34-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009497647" comment="kernel-livepatch-4_12_14-197_34-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138622" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195908" ref_url="https://bugzilla.suse.com/1195908" source="BUGZILLA"/>
		<reference ref_id="1195949" ref_url="https://bugzilla.suse.com/1195949" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0487" ref_url="https://www.suse.com/security/cve/CVE-2022-0487/" source="CVE"/>
		<reference ref_id="CVE-2022-0492" ref_url="https://www.suse.com/security/cve/CVE-2022-0492/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010561.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_89 fixes several issues.

The following security issues were fixed:

- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-29"/>
	<updated date="2022-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195908">SUSE bug 1195908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195949">SUSE bug 1195949</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0487/">CVE-2022-0487</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0492/">CVE-2022-0492</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720985" comment="kernel-default 4.12.14-197.89 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719204" comment="kernel-livepatch-4_12_14-197_89-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009676907" comment="kernel-livepatch-4_12_14-197_89-default-13-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138623" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195908" ref_url="https://bugzilla.suse.com/1195908" source="BUGZILLA"/>
		<reference ref_id="1195949" ref_url="https://bugzilla.suse.com/1195949" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0487" ref_url="https://www.suse.com/security/cve/CVE-2022-0487/" source="CVE"/>
		<reference ref_id="CVE-2022-0492" ref_url="https://www.suse.com/security/cve/CVE-2022-0492/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010561.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_92 fixes several issues.

The following security issues were fixed:

- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-29"/>
	<updated date="2022-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195908">SUSE bug 1195908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195949">SUSE bug 1195949</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0487/">CVE-2022-0487</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0492/">CVE-2022-0492</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720986" comment="kernel-default 4.12.14-197.92 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719205" comment="kernel-livepatch-4_12_14-197_92-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009676908" comment="kernel-livepatch-4_12_14-197_92-default-12-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138624" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195908" ref_url="https://bugzilla.suse.com/1195908" source="BUGZILLA"/>
		<reference ref_id="1195949" ref_url="https://bugzilla.suse.com/1195949" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0487" ref_url="https://www.suse.com/security/cve/CVE-2022-0487/" source="CVE"/>
		<reference ref_id="CVE-2022-0492" ref_url="https://www.suse.com/security/cve/CVE-2022-0492/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010561.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_99 fixes several issues.

The following security issues were fixed:

- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-29"/>
	<updated date="2022-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195908">SUSE bug 1195908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195949">SUSE bug 1195949</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0487/">CVE-2022-0487</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0492/">CVE-2022-0492</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720987" comment="kernel-default 4.12.14-197.99 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719206" comment="kernel-livepatch-4_12_14-197_99-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009676909" comment="kernel-livepatch-4_12_14-197_99-default-10-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138625" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195908" ref_url="https://bugzilla.suse.com/1195908" source="BUGZILLA"/>
		<reference ref_id="1195949" ref_url="https://bugzilla.suse.com/1195949" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0487" ref_url="https://www.suse.com/security/cve/CVE-2022-0487/" source="CVE"/>
		<reference ref_id="CVE-2022-0492" ref_url="https://www.suse.com/security/cve/CVE-2022-0492/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010561.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_102 fixes several issues.

The following security issues were fixed:

- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-29"/>
	<updated date="2022-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195908">SUSE bug 1195908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195949">SUSE bug 1195949</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0487/">CVE-2022-0487</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0492/">CVE-2022-0492</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720988" comment="kernel-default 4.12.14-197.102 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719207" comment="kernel-livepatch-4_12_14-197_102-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009676910" comment="kernel-livepatch-4_12_14-197_102-default-5-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138626" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195908" ref_url="https://bugzilla.suse.com/1195908" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0492" ref_url="https://www.suse.com/security/cve/CVE-2022-0492/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0991-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010554.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_105 fixes one issue.

The following security issue was fixed:

- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-29"/>
	<updated date="2022-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195908">SUSE bug 1195908</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0492/">CVE-2022-0492</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720989" comment="kernel-default 4.12.14-197.105 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719208" comment="kernel-livepatch-4_12_14-197_105-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009676911" comment="kernel-livepatch-4_12_14-197_105-default-2-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138627" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195951" ref_url="https://bugzilla.suse.com/1195951" source="BUGZILLA"/>
		<reference ref_id="1197133" ref_url="https://bugzilla.suse.com/1197133" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22942" ref_url="https://www.suse.com/security/cve/CVE-2022-22942/" source="CVE"/>
		<reference ref_id="CVE-2022-27666" ref_url="https://www.suse.com/security/cve/CVE-2022-27666/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010693.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_102 fixes several issues.

The following security issues were fixed:

- CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation. (bnc#1197462)
- CVE-2022-22942: Fixed stale file descriptors on failed usercopy. (bsc#1195065)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-12"/>
	<updated date="2022-04-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195951">SUSE bug 1195951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197133">SUSE bug 1197133</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22942/">CVE-2022-22942</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-27666/">CVE-2022-27666</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720988" comment="kernel-default 4.12.14-197.102 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719207" comment="kernel-livepatch-4_12_14-197_102-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009679046" comment="kernel-livepatch-4_12_14-197_102-default-6-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138628" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195951" ref_url="https://bugzilla.suse.com/1195951" source="BUGZILLA"/>
		<reference ref_id="1197133" ref_url="https://bugzilla.suse.com/1197133" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22942" ref_url="https://www.suse.com/security/cve/CVE-2022-22942/" source="CVE"/>
		<reference ref_id="CVE-2022-27666" ref_url="https://www.suse.com/security/cve/CVE-2022-27666/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010693.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_105 fixes several issues.

The following security issues were fixed:

- CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation. (bnc#1197462)
- CVE-2022-22942: Fixed stale file descriptors on failed usercopy. (bsc#1195065)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-13"/>
	<updated date="2022-04-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195951">SUSE bug 1195951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197133">SUSE bug 1197133</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22942/">CVE-2022-22942</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-27666/">CVE-2022-27666</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720989" comment="kernel-default 4.12.14-197.105 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719208" comment="kernel-livepatch-4_12_14-197_105-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009679047" comment="kernel-livepatch-4_12_14-197_105-default-3-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138629" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195951" ref_url="https://bugzilla.suse.com/1195951" source="BUGZILLA"/>
		<reference ref_id="1197133" ref_url="https://bugzilla.suse.com/1197133" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22942" ref_url="https://www.suse.com/security/cve/CVE-2022-22942/" source="CVE"/>
		<reference ref_id="CVE-2022-27666" ref_url="https://www.suse.com/security/cve/CVE-2022-27666/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1172-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010693.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_108 fixes several issues.

The following security issues were fixed:

- CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation. (bnc#1197462)
- CVE-2022-22942: Fixed stale file descriptors on failed usercopy. (bsc#1195065)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-13"/>
	<updated date="2022-04-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195951">SUSE bug 1195951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197133">SUSE bug 1197133</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22942/">CVE-2022-22942</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-27666/">CVE-2022-27666</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720990" comment="kernel-default 4.12.14-197.108 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719209" comment="kernel-livepatch-4_12_14-197_108-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009679048" comment="kernel-livepatch-4_12_14-197_108-default-2-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138630" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195951" ref_url="https://bugzilla.suse.com/1195951" source="BUGZILLA"/>
		<reference ref_id="1197133" ref_url="https://bugzilla.suse.com/1197133" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22942" ref_url="https://www.suse.com/security/cve/CVE-2022-22942/" source="CVE"/>
		<reference ref_id="CVE-2022-27666" ref_url="https://www.suse.com/security/cve/CVE-2022-27666/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1193-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010709.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_89 fixes several issues.

The following security issues were fixed:

- CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation. (bnc#1197462)
- CVE-2022-22942: Fixed stale file descriptors on failed usercopy. (bsc#1195065)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-14"/>
	<updated date="2022-04-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195951">SUSE bug 1195951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197133">SUSE bug 1197133</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22942/">CVE-2022-22942</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-27666/">CVE-2022-27666</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720985" comment="kernel-default 4.12.14-197.89 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719204" comment="kernel-livepatch-4_12_14-197_89-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009679043" comment="kernel-livepatch-4_12_14-197_89-default-14-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138631" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195951" ref_url="https://bugzilla.suse.com/1195951" source="BUGZILLA"/>
		<reference ref_id="1197133" ref_url="https://bugzilla.suse.com/1197133" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22942" ref_url="https://www.suse.com/security/cve/CVE-2022-22942/" source="CVE"/>
		<reference ref_id="CVE-2022-27666" ref_url="https://www.suse.com/security/cve/CVE-2022-27666/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010733.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_92 fixes several issues.

The following security issues were fixed:

- CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation. (bnc#1197462)
- CVE-2022-22942: Fixed stale file descriptors on failed usercopy. (bsc#1195065)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-14"/>
	<updated date="2022-04-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195951">SUSE bug 1195951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197133">SUSE bug 1197133</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22942/">CVE-2022-22942</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-27666/">CVE-2022-27666</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720986" comment="kernel-default 4.12.14-197.92 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719205" comment="kernel-livepatch-4_12_14-197_92-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009679044" comment="kernel-livepatch-4_12_14-197_92-default-13-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138632" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195951" ref_url="https://bugzilla.suse.com/1195951" source="BUGZILLA"/>
		<reference ref_id="1197133" ref_url="https://bugzilla.suse.com/1197133" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22942" ref_url="https://www.suse.com/security/cve/CVE-2022-22942/" source="CVE"/>
		<reference ref_id="CVE-2022-27666" ref_url="https://www.suse.com/security/cve/CVE-2022-27666/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010733.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_99 fixes several issues.

The following security issues were fixed:

- CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation. (bnc#1197462)
- CVE-2022-22942: Fixed stale file descriptors on failed usercopy. (bsc#1195065)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-14"/>
	<updated date="2022-04-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195951">SUSE bug 1195951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197133">SUSE bug 1197133</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22942/">CVE-2022-22942</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-27666/">CVE-2022-27666</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720987" comment="kernel-default 4.12.14-197.99 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719206" comment="kernel-livepatch-4_12_14-197_99-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009679045" comment="kernel-livepatch-4_12_14-197_99-default-11-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138633" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1189562" ref_url="https://bugzilla.suse.com/1189562" source="BUGZILLA"/>
		<reference ref_id="1193738" ref_url="https://bugzilla.suse.com/1193738" source="BUGZILLA"/>
		<reference ref_id="1194943" ref_url="https://bugzilla.suse.com/1194943" source="BUGZILLA"/>
		<reference ref_id="1195051" ref_url="https://bugzilla.suse.com/1195051" source="BUGZILLA"/>
		<reference ref_id="1195254" ref_url="https://bugzilla.suse.com/1195254" source="BUGZILLA"/>
		<reference ref_id="1195353" ref_url="https://bugzilla.suse.com/1195353" source="BUGZILLA"/>
		<reference ref_id="1196018" ref_url="https://bugzilla.suse.com/1196018" source="BUGZILLA"/>
		<reference ref_id="1196114" ref_url="https://bugzilla.suse.com/1196114" source="BUGZILLA"/>
		<reference ref_id="1196433" ref_url="https://bugzilla.suse.com/1196433" source="BUGZILLA"/>
		<reference ref_id="1196468" ref_url="https://bugzilla.suse.com/1196468" source="BUGZILLA"/>
		<reference ref_id="1196488" ref_url="https://bugzilla.suse.com/1196488" source="BUGZILLA"/>
		<reference ref_id="1196514" ref_url="https://bugzilla.suse.com/1196514" source="BUGZILLA"/>
		<reference ref_id="1196639" ref_url="https://bugzilla.suse.com/1196639" source="BUGZILLA"/>
		<reference ref_id="1196761" ref_url="https://bugzilla.suse.com/1196761" source="BUGZILLA"/>
		<reference ref_id="1196830" ref_url="https://bugzilla.suse.com/1196830" source="BUGZILLA"/>
		<reference ref_id="1196836" ref_url="https://bugzilla.suse.com/1196836" source="BUGZILLA"/>
		<reference ref_id="1196942" ref_url="https://bugzilla.suse.com/1196942" source="BUGZILLA"/>
		<reference ref_id="1196973" ref_url="https://bugzilla.suse.com/1196973" source="BUGZILLA"/>
		<reference ref_id="1197227" ref_url="https://bugzilla.suse.com/1197227" source="BUGZILLA"/>
		<reference ref_id="1197331" ref_url="https://bugzilla.suse.com/1197331" source="BUGZILLA"/>
		<reference ref_id="1197366" ref_url="https://bugzilla.suse.com/1197366" source="BUGZILLA"/>
		<reference ref_id="1197391" ref_url="https://bugzilla.suse.com/1197391" source="BUGZILLA"/>
		<reference ref_id="1198031" ref_url="https://bugzilla.suse.com/1198031" source="BUGZILLA"/>
		<reference ref_id="1198032" ref_url="https://bugzilla.suse.com/1198032" source="BUGZILLA"/>
		<reference ref_id="1198033" ref_url="https://bugzilla.suse.com/1198033" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-39713" ref_url="https://www.suse.com/security/cve/CVE-2021-39713/" source="CVE"/>
		<reference ref_id="CVE-2021-45868" ref_url="https://www.suse.com/security/cve/CVE-2021-45868/" source="CVE"/>
		<reference ref_id="CVE-2022-0812" ref_url="https://www.suse.com/security/cve/CVE-2022-0812/" source="CVE"/>
		<reference ref_id="CVE-2022-0850" ref_url="https://www.suse.com/security/cve/CVE-2022-0850/" source="CVE"/>
		<reference ref_id="CVE-2022-1016" ref_url="https://www.suse.com/security/cve/CVE-2022-1016/" source="CVE"/>
		<reference ref_id="CVE-2022-1048" ref_url="https://www.suse.com/security/cve/CVE-2022-1048/" source="CVE"/>
		<reference ref_id="CVE-2022-23036" ref_url="https://www.suse.com/security/cve/CVE-2022-23036/" source="CVE"/>
		<reference ref_id="CVE-2022-23037" ref_url="https://www.suse.com/security/cve/CVE-2022-23037/" source="CVE"/>
		<reference ref_id="CVE-2022-23038" ref_url="https://www.suse.com/security/cve/CVE-2022-23038/" source="CVE"/>
		<reference ref_id="CVE-2022-23039" ref_url="https://www.suse.com/security/cve/CVE-2022-23039/" source="CVE"/>
		<reference ref_id="CVE-2022-23040" ref_url="https://www.suse.com/security/cve/CVE-2022-23040/" source="CVE"/>
		<reference ref_id="CVE-2022-23041" ref_url="https://www.suse.com/security/cve/CVE-2022-23041/" source="CVE"/>
		<reference ref_id="CVE-2022-23042" ref_url="https://www.suse.com/security/cve/CVE-2022-23042/" source="CVE"/>
		<reference ref_id="CVE-2022-26490" ref_url="https://www.suse.com/security/cve/CVE-2022-26490/" source="CVE"/>
		<reference ref_id="CVE-2022-26966" ref_url="https://www.suse.com/security/cve/CVE-2022-26966/" source="CVE"/>
		<reference ref_id="CVE-2022-28356" ref_url="https://www.suse.com/security/cve/CVE-2022-28356/" source="CVE"/>
		<reference ref_id="CVE-2022-28388" ref_url="https://www.suse.com/security/cve/CVE-2022-28388/" source="CVE"/>
		<reference ref_id="CVE-2022-28389" ref_url="https://www.suse.com/security/cve/CVE-2022-28389/" source="CVE"/>
		<reference ref_id="CVE-2022-28390" ref_url="https://www.suse.com/security/cve/CVE-2022-28390/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1256-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010751.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-28356: Fixed a refcount leak bug in net/llc/af_llc.c (bnc#1197391).
- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution (bsc#1197227).
- CVE-2022-28388: Fixed a double free in drivers/net/can/usb/usb_8dev.c vulnerability in the Linux kernel (bnc#1198032).
- CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel (bnc#1198033).
- CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel (bnc#1198031).
- CVE-2022-0812: Fixed an incorrect header size calculations in xprtrdma (bsc#1196639).
- CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock (bsc#1197331).
- CVE-2022-0850: Fixed a kernel information leak vulnerability in iov_iter.c (bsc#1196761).
- CVE-2022-26966: Fixed an issue in drivers/net/usb/sr9700.c, which allowed attackers to obtain sensitive information from the memory via crafted frame lengths from a USB device (bsc#1196836).
- CVE-2021-45868: Fixed a wrong validation check in fs/quota/quota_tree.c which could lead to an use-after-free if there is a corrupted quota file (bnc#1197366).
- CVE-2021-39713: Fixed a race condition in the network scheduling subsystem which could lead to a use-after-free (bsc#1196973).
- CVE-2022-23036,CVE-2022-23037,CVE-2022-23038,CVE-2022-23039,CVE-2022-23040,CVE-2022-23041,CVE-2022-23042: Fixed multiple issues which could have lead to read/write access to memory pages or denial of service. These issues are related to the Xen PV device frontend drivers (bsc#1196488).
- CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could trigger crash the system or corrupt system memory (bsc#1196830).

The following non-security bugs were fixed:

- ax88179_178a: Fixed memory issues that could be triggered by malicious USB devices (bsc#1196018).
- genirq: Use rcu in kstat_irqs_usr() (bsc#1193738).
- gve/net: Fixed multiple bugfixes (jsc#SLE-23652).
- net/mlx5e: Fix page DMA map/unmap attributes (bsc#1196468).
- net: tipc: validate domain record count on input (bsc#1195254).
- powerpc: Fixed issues related to slow I/O on PowerPC (bsc#1196433).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-19"/>
	<updated date="2022-04-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189562">SUSE bug 1189562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193738">SUSE bug 1193738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194943">SUSE bug 1194943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195051">SUSE bug 1195051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195254">SUSE bug 1195254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195353">SUSE bug 1195353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196018">SUSE bug 1196018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196114">SUSE bug 1196114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196433">SUSE bug 1196433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196468">SUSE bug 1196468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196488">SUSE bug 1196488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196514">SUSE bug 1196514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196639">SUSE bug 1196639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196761">SUSE bug 1196761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196830">SUSE bug 1196830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196836">SUSE bug 1196836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196942">SUSE bug 1196942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196973">SUSE bug 1196973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197227">SUSE bug 1197227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197331">SUSE bug 1197331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197366">SUSE bug 1197366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197391">SUSE bug 1197391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198031">SUSE bug 1198031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198032">SUSE bug 1198032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198033">SUSE bug 1198033</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-39713/">CVE-2021-39713</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45868/">CVE-2021-45868</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0812/">CVE-2022-0812</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0850/">CVE-2022-0850</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1016/">CVE-2022-1016</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1048/">CVE-2022-1048</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23036/">CVE-2022-23036</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23037/">CVE-2022-23037</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23038/">CVE-2022-23038</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23039/">CVE-2022-23039</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23040/">CVE-2022-23040</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23041/">CVE-2022-23041</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23042/">CVE-2022-23042</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26490/">CVE-2022-26490</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26966/">CVE-2022-26966</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-28356/">CVE-2022-28356</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-28388/">CVE-2022-28388</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28389/">CVE-2022-28389</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28390/">CVE-2022-28390</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679828" comment="kernel-default-livepatch-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679829" comment="kernel-default-livepatch-devel-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679830" comment="kernel-livepatch-4_12_14-150100_197_111-default-1-150100.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138634" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1197335" ref_url="https://bugzilla.suse.com/1197335" source="BUGZILLA"/>
		<reference ref_id="1197344" ref_url="https://bugzilla.suse.com/1197344" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1011" ref_url="https://www.suse.com/security/cve/CVE-2022-1011/" source="CVE"/>
		<reference ref_id="CVE-2022-1016" ref_url="https://www.suse.com/security/cve/CVE-2022-1016/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010825.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_108 fixes several issues.

The following security issues were fixed:

- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution. (bsc#1197335)
- CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bsc#1197344)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-25"/>
	<updated date="2022-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197335">SUSE bug 1197335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197344">SUSE bug 1197344</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1011/">CVE-2022-1011</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1016/">CVE-2022-1016</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720990" comment="kernel-default 4.12.14-197.108 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719209" comment="kernel-livepatch-4_12_14-197_108-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009680214" comment="kernel-livepatch-4_12_14-197_108-default-3-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138635" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1197335" ref_url="https://bugzilla.suse.com/1197335" source="BUGZILLA"/>
		<reference ref_id="1197344" ref_url="https://bugzilla.suse.com/1197344" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1011" ref_url="https://www.suse.com/security/cve/CVE-2022-1011/" source="CVE"/>
		<reference ref_id="CVE-2022-1016" ref_url="https://www.suse.com/security/cve/CVE-2022-1016/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010825.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_89 fixes several issues.

The following security issues were fixed:

- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution. (bsc#1197335)
- CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bsc#1197344)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-25"/>
	<updated date="2022-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197335">SUSE bug 1197335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197344">SUSE bug 1197344</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1011/">CVE-2022-1011</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1016/">CVE-2022-1016</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720985" comment="kernel-default 4.12.14-197.89 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719204" comment="kernel-livepatch-4_12_14-197_89-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009680209" comment="kernel-livepatch-4_12_14-197_89-default-15-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138636" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1197335" ref_url="https://bugzilla.suse.com/1197335" source="BUGZILLA"/>
		<reference ref_id="1197344" ref_url="https://bugzilla.suse.com/1197344" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1011" ref_url="https://www.suse.com/security/cve/CVE-2022-1011/" source="CVE"/>
		<reference ref_id="CVE-2022-1016" ref_url="https://www.suse.com/security/cve/CVE-2022-1016/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010825.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_99 fixes several issues.

The following security issues were fixed:

- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution. (bsc#1197335)
- CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bsc#1197344)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-25"/>
	<updated date="2022-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197335">SUSE bug 1197335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197344">SUSE bug 1197344</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1011/">CVE-2022-1011</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1016/">CVE-2022-1016</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720987" comment="kernel-default 4.12.14-197.99 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719206" comment="kernel-livepatch-4_12_14-197_99-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009680211" comment="kernel-livepatch-4_12_14-197_99-default-12-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138637" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1197335" ref_url="https://bugzilla.suse.com/1197335" source="BUGZILLA"/>
		<reference ref_id="1197344" ref_url="https://bugzilla.suse.com/1197344" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1011" ref_url="https://www.suse.com/security/cve/CVE-2022-1011/" source="CVE"/>
		<reference ref_id="CVE-2022-1016" ref_url="https://www.suse.com/security/cve/CVE-2022-1016/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010825.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_92 fixes several issues.

The following security issues were fixed:

- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution. (bsc#1197335)
- CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bsc#1197344)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-25"/>
	<updated date="2022-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197335">SUSE bug 1197335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197344">SUSE bug 1197344</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1011/">CVE-2022-1011</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1016/">CVE-2022-1016</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720986" comment="kernel-default 4.12.14-197.92 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719205" comment="kernel-livepatch-4_12_14-197_92-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009680210" comment="kernel-livepatch-4_12_14-197_92-default-14-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138638" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1197335" ref_url="https://bugzilla.suse.com/1197335" source="BUGZILLA"/>
		<reference ref_id="1197344" ref_url="https://bugzilla.suse.com/1197344" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1011" ref_url="https://www.suse.com/security/cve/CVE-2022-1011/" source="CVE"/>
		<reference ref_id="CVE-2022-1016" ref_url="https://www.suse.com/security/cve/CVE-2022-1016/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010825.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_105 fixes several issues.

The following security issues were fixed:

- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution. (bsc#1197335)
- CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bsc#1197344)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-25"/>
	<updated date="2022-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197335">SUSE bug 1197335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197344">SUSE bug 1197344</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1011/">CVE-2022-1011</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1016/">CVE-2022-1016</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720989" comment="kernel-default 4.12.14-197.105 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719208" comment="kernel-livepatch-4_12_14-197_105-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009680213" comment="kernel-livepatch-4_12_14-197_105-default-4-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138639" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1197335" ref_url="https://bugzilla.suse.com/1197335" source="BUGZILLA"/>
		<reference ref_id="1197344" ref_url="https://bugzilla.suse.com/1197344" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1011" ref_url="https://www.suse.com/security/cve/CVE-2022-1011/" source="CVE"/>
		<reference ref_id="CVE-2022-1016" ref_url="https://www.suse.com/security/cve/CVE-2022-1016/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010825.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_102 fixes several issues.

The following security issues were fixed:

- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution. (bsc#1197335)
- CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bsc#1197344)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-25"/>
	<updated date="2022-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197335">SUSE bug 1197335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197344">SUSE bug 1197344</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1011/">CVE-2022-1011</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1016/">CVE-2022-1016</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720988" comment="kernel-default 4.12.14-197.102 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719207" comment="kernel-livepatch-4_12_14-197_102-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009680212" comment="kernel-livepatch-4_12_14-197_102-default-7-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138640" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195950" ref_url="https://bugzilla.suse.com/1195950" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0330" ref_url="https://www.suse.com/security/cve/CVE-2022-0330/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1589-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010984.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_92 fixes one issue.

The following security issue was fixed:

- CVE-2022-0330: A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allowed a local user to crash the system or escalate their privileges on the system. (bsc#1195950)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-10"/>
	<updated date="2022-05-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195950">SUSE bug 1195950</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0330/">CVE-2022-0330</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720986" comment="kernel-default 4.12.14-197.92 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719205" comment="kernel-livepatch-4_12_14-197_92-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009682375" comment="kernel-livepatch-4_12_14-197_92-default-15-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138641" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195950" ref_url="https://bugzilla.suse.com/1195950" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0330" ref_url="https://www.suse.com/security/cve/CVE-2022-0330/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1589-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010984.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_102 fixes one issue.

The following security issue was fixed:

- CVE-2022-0330: A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allowed a local user to crash the system or escalate their privileges on the system. (bsc#1195950)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-10"/>
	<updated date="2022-05-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195950">SUSE bug 1195950</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0330/">CVE-2022-0330</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720988" comment="kernel-default 4.12.14-197.102 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719207" comment="kernel-livepatch-4_12_14-197_102-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009682376" comment="kernel-livepatch-4_12_14-197_102-default-8-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138642" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195950" ref_url="https://bugzilla.suse.com/1195950" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0330" ref_url="https://www.suse.com/security/cve/CVE-2022-0330/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1589-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010984.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_89 fixes one issue.

The following security issue was fixed:

- CVE-2022-0330: A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allowed a local user to crash the system or escalate their privileges on the system. (bsc#1195950)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-10"/>
	<updated date="2022-05-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195950">SUSE bug 1195950</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0330/">CVE-2022-0330</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720985" comment="kernel-default 4.12.14-197.89 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719204" comment="kernel-livepatch-4_12_14-197_89-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009682377" comment="kernel-livepatch-4_12_14-197_89-default-16-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138643" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195951" ref_url="https://bugzilla.suse.com/1195951" source="BUGZILLA"/>
		<reference ref_id="1197344" ref_url="https://bugzilla.suse.com/1197344" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1011" ref_url="https://www.suse.com/security/cve/CVE-2022-1011/" source="CVE"/>
		<reference ref_id="CVE-2022-22942" ref_url="https://www.suse.com/security/cve/CVE-2022-22942/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010977.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_111 fixes several issues.

The following security issues were fixed:

- CVE-2022-1011: A use-after-free flaw was found in the FUSE filesystem in the way a user triggers write(). This flaw allowed a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation. (bsc#1197344)
- - CVE-2022-22942: Fixed stale file descriptors on failed usercopy. (bsc#1195951)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-10"/>
	<updated date="2022-05-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195951">SUSE bug 1195951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197344">SUSE bug 1197344</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1011/">CVE-2022-1011</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22942/">CVE-2022-22942</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720991" comment="kernel-default 4.12.14-150100.197.111 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719210" comment="kernel-livepatch-4_12_14-150100_197_111-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009682378" comment="kernel-livepatch-4_12_14-150100_197_111-default-2-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138644" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195950" ref_url="https://bugzilla.suse.com/1195950" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0330" ref_url="https://www.suse.com/security/cve/CVE-2022-0330/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1589-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010984.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_99 fixes one issue.

The following security issue was fixed:

- CVE-2022-0330: A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allowed a local user to crash the system or escalate their privileges on the system. (bsc#1195950)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-10"/>
	<updated date="2022-05-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195950">SUSE bug 1195950</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0330/">CVE-2022-0330</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720987" comment="kernel-default 4.12.14-197.99 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719206" comment="kernel-livepatch-4_12_14-197_99-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009682379" comment="kernel-livepatch-4_12_14-197_99-default-13-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138645" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1197597" ref_url="https://bugzilla.suse.com/1197597" source="BUGZILLA"/>
		<reference ref_id="1199602" ref_url="https://bugzilla.suse.com/1199602" source="BUGZILLA"/>
		<reference ref_id="1199834" ref_url="https://bugzilla.suse.com/1199834" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1048" ref_url="https://www.suse.com/security/cve/CVE-2022-1048/" source="CVE"/>
		<reference ref_id="CVE-2022-30594" ref_url="https://www.suse.com/security/cve/CVE-2022-30594/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011237.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_105 fixes several issues.

The following security issues were fixed:

- CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock (bsc#1197597).
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199602).
- Add missing module_mutex lock to module notifier for previous live patches (bsc#1199834).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-05"/>
	<updated date="2022-06-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197597">SUSE bug 1197597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199602">SUSE bug 1199602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199834">SUSE bug 1199834</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1048/">CVE-2022-1048</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30594/">CVE-2022-30594</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720989" comment="kernel-default 4.12.14-197.105 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719208" comment="kernel-livepatch-4_12_14-197_105-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009692152" comment="kernel-livepatch-4_12_14-197_105-default-5-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138646" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1197597" ref_url="https://bugzilla.suse.com/1197597" source="BUGZILLA"/>
		<reference ref_id="1199602" ref_url="https://bugzilla.suse.com/1199602" source="BUGZILLA"/>
		<reference ref_id="1199834" ref_url="https://bugzilla.suse.com/1199834" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1048" ref_url="https://www.suse.com/security/cve/CVE-2022-1048/" source="CVE"/>
		<reference ref_id="CVE-2022-30594" ref_url="https://www.suse.com/security/cve/CVE-2022-30594/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011237.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_92 fixes several issues.

The following security issues were fixed:

- CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock (bsc#1197597).
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199602).
- Add missing module_mutex lock to module notifier for previous live patches (bsc#1199834).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-05"/>
	<updated date="2022-06-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197597">SUSE bug 1197597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199602">SUSE bug 1199602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199834">SUSE bug 1199834</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1048/">CVE-2022-1048</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30594/">CVE-2022-30594</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720986" comment="kernel-default 4.12.14-197.92 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719205" comment="kernel-livepatch-4_12_14-197_92-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009692153" comment="kernel-livepatch-4_12_14-197_92-default-16-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138647" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1197597" ref_url="https://bugzilla.suse.com/1197597" source="BUGZILLA"/>
		<reference ref_id="1199602" ref_url="https://bugzilla.suse.com/1199602" source="BUGZILLA"/>
		<reference ref_id="1199834" ref_url="https://bugzilla.suse.com/1199834" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1048" ref_url="https://www.suse.com/security/cve/CVE-2022-1048/" source="CVE"/>
		<reference ref_id="CVE-2022-30594" ref_url="https://www.suse.com/security/cve/CVE-2022-30594/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1945-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011237.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_102 fixes several issues.

The following security issues were fixed:

- CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock (bsc#1197597).
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199602).
- Add missing module_mutex lock to module notifier for previous live patches (bsc#1199834).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-05"/>
	<updated date="2022-06-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197597">SUSE bug 1197597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199602">SUSE bug 1199602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199834">SUSE bug 1199834</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1048/">CVE-2022-1048</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30594/">CVE-2022-30594</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720988" comment="kernel-default 4.12.14-197.102 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719207" comment="kernel-livepatch-4_12_14-197_102-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009692154" comment="kernel-livepatch-4_12_14-197_102-default-9-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138648" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199602" ref_url="https://bugzilla.suse.com/1199602" source="BUGZILLA"/>
		<reference ref_id="1199834" ref_url="https://bugzilla.suse.com/1199834" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-30594" ref_url="https://www.suse.com/security/cve/CVE-2022-30594/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011240.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_111 fixes several issues.

The following security issue was fixed:

- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199602).
- Add missing module_mutex lock to module notifier for previous live patches (bsc#1199834).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-06"/>
	<updated date="2022-06-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199602">SUSE bug 1199602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199834">SUSE bug 1199834</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30594/">CVE-2022-30594</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720991" comment="kernel-default 4.12.14-150100.197.111 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719210" comment="kernel-livepatch-4_12_14-150100_197_111-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009692155" comment="kernel-livepatch-4_12_14-150100_197_111-default-3-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138649" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1197597" ref_url="https://bugzilla.suse.com/1197597" source="BUGZILLA"/>
		<reference ref_id="1199602" ref_url="https://bugzilla.suse.com/1199602" source="BUGZILLA"/>
		<reference ref_id="1199834" ref_url="https://bugzilla.suse.com/1199834" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1048" ref_url="https://www.suse.com/security/cve/CVE-2022-1048/" source="CVE"/>
		<reference ref_id="CVE-2022-30594" ref_url="https://www.suse.com/security/cve/CVE-2022-30594/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1955-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011243.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_99 fixes several issues.

The following security issues were fixed:

- CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock (bsc#1197597).
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199602).
- Add missing module_mutex lock to module notifier for previous live patches (bsc#1199834).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-06"/>
	<updated date="2022-06-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197597">SUSE bug 1197597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199602">SUSE bug 1199602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199834">SUSE bug 1199834</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1048/">CVE-2022-1048</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30594/">CVE-2022-30594</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720987" comment="kernel-default 4.12.14-197.99 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719206" comment="kernel-livepatch-4_12_14-197_99-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009692156" comment="kernel-livepatch-4_12_14-197_99-default-14-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138650" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1197597" ref_url="https://bugzilla.suse.com/1197597" source="BUGZILLA"/>
		<reference ref_id="1199602" ref_url="https://bugzilla.suse.com/1199602" source="BUGZILLA"/>
		<reference ref_id="1199834" ref_url="https://bugzilla.suse.com/1199834" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1048" ref_url="https://www.suse.com/security/cve/CVE-2022-1048/" source="CVE"/>
		<reference ref_id="CVE-2022-30594" ref_url="https://www.suse.com/security/cve/CVE-2022-30594/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1955-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011243.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_108 fixes several issues.

The following security issues were fixed:

- CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock (bsc#1197597).
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199602).
- Add missing module_mutex lock to module notifier for previous live patches (bsc#1199834).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-06"/>
	<updated date="2022-06-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197597">SUSE bug 1197597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199602">SUSE bug 1199602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199834">SUSE bug 1199834</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1048/">CVE-2022-1048</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30594/">CVE-2022-30594</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720990" comment="kernel-default 4.12.14-197.108 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719209" comment="kernel-livepatch-4_12_14-197_108-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009692157" comment="kernel-livepatch-4_12_14-197_108-default-4-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138651" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1028340" ref_url="https://bugzilla.suse.com/1028340" source="BUGZILLA"/>
		<reference ref_id="1055710" ref_url="https://bugzilla.suse.com/1055710" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1084513" ref_url="https://bugzilla.suse.com/1084513" source="BUGZILLA"/>
		<reference ref_id="1087082" ref_url="https://bugzilla.suse.com/1087082" source="BUGZILLA"/>
		<reference ref_id="1114648" ref_url="https://bugzilla.suse.com/1114648" source="BUGZILLA"/>
		<reference ref_id="1158266" ref_url="https://bugzilla.suse.com/1158266" source="BUGZILLA"/>
		<reference ref_id="1172456" ref_url="https://bugzilla.suse.com/1172456" source="BUGZILLA"/>
		<reference ref_id="1177282" ref_url="https://bugzilla.suse.com/1177282" source="BUGZILLA"/>
		<reference ref_id="1182171" ref_url="https://bugzilla.suse.com/1182171" source="BUGZILLA"/>
		<reference ref_id="1183723" ref_url="https://bugzilla.suse.com/1183723" source="BUGZILLA"/>
		<reference ref_id="1187055" ref_url="https://bugzilla.suse.com/1187055" source="BUGZILLA"/>
		<reference ref_id="1191647" ref_url="https://bugzilla.suse.com/1191647" source="BUGZILLA"/>
		<reference ref_id="1191958" ref_url="https://bugzilla.suse.com/1191958" source="BUGZILLA"/>
		<reference ref_id="1195065" ref_url="https://bugzilla.suse.com/1195065" source="BUGZILLA"/>
		<reference ref_id="1195651" ref_url="https://bugzilla.suse.com/1195651" source="BUGZILLA"/>
		<reference ref_id="1196018" ref_url="https://bugzilla.suse.com/1196018" source="BUGZILLA"/>
		<reference ref_id="1196367" ref_url="https://bugzilla.suse.com/1196367" source="BUGZILLA"/>
		<reference ref_id="1196426" ref_url="https://bugzilla.suse.com/1196426" source="BUGZILLA"/>
		<reference ref_id="1196999" ref_url="https://bugzilla.suse.com/1196999" source="BUGZILLA"/>
		<reference ref_id="1197219" ref_url="https://bugzilla.suse.com/1197219" source="BUGZILLA"/>
		<reference ref_id="1197343" ref_url="https://bugzilla.suse.com/1197343" source="BUGZILLA"/>
		<reference ref_id="1197663" ref_url="https://bugzilla.suse.com/1197663" source="BUGZILLA"/>
		<reference ref_id="1198400" ref_url="https://bugzilla.suse.com/1198400" source="BUGZILLA"/>
		<reference ref_id="1198516" ref_url="https://bugzilla.suse.com/1198516" source="BUGZILLA"/>
		<reference ref_id="1198577" ref_url="https://bugzilla.suse.com/1198577" source="BUGZILLA"/>
		<reference ref_id="1198660" ref_url="https://bugzilla.suse.com/1198660" source="BUGZILLA"/>
		<reference ref_id="1198687" ref_url="https://bugzilla.suse.com/1198687" source="BUGZILLA"/>
		<reference ref_id="1198742" ref_url="https://bugzilla.suse.com/1198742" source="BUGZILLA"/>
		<reference ref_id="1198777" ref_url="https://bugzilla.suse.com/1198777" source="BUGZILLA"/>
		<reference ref_id="1198825" ref_url="https://bugzilla.suse.com/1198825" source="BUGZILLA"/>
		<reference ref_id="1199012" ref_url="https://bugzilla.suse.com/1199012" source="BUGZILLA"/>
		<reference ref_id="1199063" ref_url="https://bugzilla.suse.com/1199063" source="BUGZILLA"/>
		<reference ref_id="1199314" ref_url="https://bugzilla.suse.com/1199314" source="BUGZILLA"/>
		<reference ref_id="1199399" ref_url="https://bugzilla.suse.com/1199399" source="BUGZILLA"/>
		<reference ref_id="1199426" ref_url="https://bugzilla.suse.com/1199426" source="BUGZILLA"/>
		<reference ref_id="1199505" ref_url="https://bugzilla.suse.com/1199505" source="BUGZILLA"/>
		<reference ref_id="1199507" ref_url="https://bugzilla.suse.com/1199507" source="BUGZILLA"/>
		<reference ref_id="1199605" ref_url="https://bugzilla.suse.com/1199605" source="BUGZILLA"/>
		<reference ref_id="1199650" ref_url="https://bugzilla.suse.com/1199650" source="BUGZILLA"/>
		<reference ref_id="1200143" ref_url="https://bugzilla.suse.com/1200143" source="BUGZILLA"/>
		<reference ref_id="1200144" ref_url="https://bugzilla.suse.com/1200144" source="BUGZILLA"/>
		<reference ref_id="1200249" ref_url="https://bugzilla.suse.com/1200249" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-13695" ref_url="https://www.suse.com/security/cve/CVE-2017-13695/" source="CVE"/>
		<reference ref_id="CVE-2018-7755" ref_url="https://www.suse.com/security/cve/CVE-2018-7755/" source="CVE"/>
		<reference ref_id="CVE-2019-19377" ref_url="https://www.suse.com/security/cve/CVE-2019-19377/" source="CVE"/>
		<reference ref_id="CVE-2019-20811" ref_url="https://www.suse.com/security/cve/CVE-2019-20811/" source="CVE"/>
		<reference ref_id="CVE-2020-26541" ref_url="https://www.suse.com/security/cve/CVE-2020-26541/" source="CVE"/>
		<reference ref_id="CVE-2021-20292" ref_url="https://www.suse.com/security/cve/CVE-2021-20292/" source="CVE"/>
		<reference ref_id="CVE-2021-20321" ref_url="https://www.suse.com/security/cve/CVE-2021-20321/" source="CVE"/>
		<reference ref_id="CVE-2021-33061" ref_url="https://www.suse.com/security/cve/CVE-2021-33061/" source="CVE"/>
		<reference ref_id="CVE-2021-38208" ref_url="https://www.suse.com/security/cve/CVE-2021-38208/" source="CVE"/>
		<reference ref_id="CVE-2021-39711" ref_url="https://www.suse.com/security/cve/CVE-2021-39711/" source="CVE"/>
		<reference ref_id="CVE-2021-43389" ref_url="https://www.suse.com/security/cve/CVE-2021-43389/" source="CVE"/>
		<reference ref_id="CVE-2022-1011" ref_url="https://www.suse.com/security/cve/CVE-2022-1011/" source="CVE"/>
		<reference ref_id="CVE-2022-1184" ref_url="https://www.suse.com/security/cve/CVE-2022-1184/" source="CVE"/>
		<reference ref_id="CVE-2022-1353" ref_url="https://www.suse.com/security/cve/CVE-2022-1353/" source="CVE"/>
		<reference ref_id="CVE-2022-1419" ref_url="https://www.suse.com/security/cve/CVE-2022-1419/" source="CVE"/>
		<reference ref_id="CVE-2022-1516" ref_url="https://www.suse.com/security/cve/CVE-2022-1516/" source="CVE"/>
		<reference ref_id="CVE-2022-1652" ref_url="https://www.suse.com/security/cve/CVE-2022-1652/" source="CVE"/>
		<reference ref_id="CVE-2022-1729" ref_url="https://www.suse.com/security/cve/CVE-2022-1729/" source="CVE"/>
		<reference ref_id="CVE-2022-1734" ref_url="https://www.suse.com/security/cve/CVE-2022-1734/" source="CVE"/>
		<reference ref_id="CVE-2022-1974" ref_url="https://www.suse.com/security/cve/CVE-2022-1974/" source="CVE"/>
		<reference ref_id="CVE-2022-1975" ref_url="https://www.suse.com/security/cve/CVE-2022-1975/" source="CVE"/>
		<reference ref_id="CVE-2022-21123" ref_url="https://www.suse.com/security/cve/CVE-2022-21123/" source="CVE"/>
		<reference ref_id="CVE-2022-21125" ref_url="https://www.suse.com/security/cve/CVE-2022-21125/" source="CVE"/>
		<reference ref_id="CVE-2022-21127" ref_url="https://www.suse.com/security/cve/CVE-2022-21127/" source="CVE"/>
		<reference ref_id="CVE-2022-21166" ref_url="https://www.suse.com/security/cve/CVE-2022-21166/" source="CVE"/>
		<reference ref_id="CVE-2022-21180" ref_url="https://www.suse.com/security/cve/CVE-2022-21180/" source="CVE"/>
		<reference ref_id="CVE-2022-21499" ref_url="https://www.suse.com/security/cve/CVE-2022-21499/" source="CVE"/>
		<reference ref_id="CVE-2022-22942" ref_url="https://www.suse.com/security/cve/CVE-2022-22942/" source="CVE"/>
		<reference ref_id="CVE-2022-28748" ref_url="https://www.suse.com/security/cve/CVE-2022-28748/" source="CVE"/>
		<reference ref_id="CVE-2022-30594" ref_url="https://www.suse.com/security/cve/CVE-2022-30594/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011310.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated.

The following security bugs were fixed:

- CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image. (bnc#1158266)
- CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a corrupted image. (bsc#1198577)
- CVE-2017-13695: Fixed a bug that caused a stack dump allowing local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted ACPI table. (bnc#1055710)
- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
- CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063).
- CVE-2021-39711: In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1197219).
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505).
- CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters that may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1196426).
- CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012).
- CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system (bnc#1191647).
- CVE-2019-20811: Fixed issue in rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, where a reference count is mishandled (bnc#1172456).
- CVE-2022-28748: Fixed memory lead over the network by ax88179_178a devices (bsc#1196018).
- CVE-2018-7755: Fixed an issue in the fd_locked_ioctl function in drivers/block/floppy.c. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR (bnc#1084513).
- CVE-2022-22942: Fixed stale file descriptors on failed usercopy (bsc#1195065).
- CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
- CVE-2021-43389: Fixed an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).
- CVE-2021-38208: Fixed a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call (bnc#1187055).
- CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c (bnc#1198516).
- CVE-2021-20292: Fixed object validation prior to performing operations on the object in nouveau_sgdma_create_ttm in Nouveau DRM subsystem (bnc#1183723).
- CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bnc#1197343)
- CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space. (bsc#1200144).
- CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism. (bnc#1177282)
- CVE-2022-1975: Fixed a bug that allows an attacker to crash the linux kernel by simulating nfc device from user-space. (bsc#1200143)
- CVE-2022-21499: Reinforce the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb. (bsc#1199426)
- CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605).

The following non-security bugs were fixed:

- btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (bsc#1199399).
- btrfs: tree-checker: fix incorrect printk format (bsc#1200249).
- net: ena: A typo fix in the file ena_com.h (bsc#1198777).
- net: ena: Add capabilities field with support for ENI stats capability (bsc#1198777).
- net: ena: Add debug prints for invalid req_id resets (bsc#1198777).
- net: ena: add device distinct log prefix to files (bsc#1198777).
- net: ena: add jiffies of last napi call to stats (bsc#1198777).
- net: ena: aggregate doorbell common operations into a function (bsc#1198777).
- net: ena: aggregate stats increase into a function (bsc#1198777).
- net: ena: Change ENI stats support check to use capabilities field (bsc#1198777).
- net: ena: Change return value of ena_calc_io_queue_size() to void (bsc#1198777).
- net: ena: Change the name of bad_csum variable (bsc#1198777).
- net: ena: Extract recurring driver reset code into a function (bsc#1198777).
- net: ena: fix coding style nits (bsc#1198777).
- net: ena: fix DMA mapping function issues in XDP (bsc#1198777).
- net: ena: Fix error handling when calculating max IO queues number (bsc#1198777).
- net: ena: fix inaccurate print type (bsc#1198777).
- net: ena: Fix undefined state when tx request id is out of bounds (bsc#1198777).
- net: ena: Fix wrong rx request id by resetting device (bsc#1198777).
- net: ena: Improve error logging in driver (bsc#1198777).
- net: ena: introduce ndo_xdp_xmit() function for XDP_REDIRECT (bsc#1198777).
- net: ena: introduce XDP redirect implementation (bsc#1198777).
- net: ena: make symbol 'ena_alloc_map_page' static (bsc#1198777).
- net: ena: Move reset completion print to the reset function (bsc#1198777).
- net: ena: optimize data access in fast-path code (bsc#1198777).
- net: ena: re-organize code to improve readability (bsc#1198777).
- net: ena: Remove ena_calc_queue_size_ctx struct (bsc#1198777).
- net: ena: remove extra words from comments (bsc#1198777).
- net: ena: Remove module param and change message severity (bsc#1198777).
- net: ena: Remove rcu_read_lock() around XDP program invocation (bsc#1198777).
- net: ena: Remove redundant return code check (bsc#1198777).
- net: ena: Remove unused code (bsc#1198777).
- net: ena: store values in their appropriate variables types (bsc#1198777).
- net: ena: Update XDP verdict upon failure (bsc#1198777).
- net: ena: use build_skb() in RX path (bsc#1198777).
- net: ena: use constant value for net_device allocation (bsc#1198777).
- net: ena: Use dev_alloc() in RX buffer allocation (bsc#1198777).
- net: ena: Use pci_sriov_configure_simple() to enable VFs (bsc#1198777).
- net: ena: use xdp_frame in XDP TX flow (bsc#1198777).
- net: ena: use xdp_return_frame() to free xdp frames (bsc#1198777).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Remove unnecessary check of cqe_type in mana_process_rx_cqe() (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Use struct_size() helper in mana_gd_create_dma_region() (bsc#1195651).
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (bsc#1199314).
- powerpc/64: Fix kernel stack 16-byte alignment (bsc#1196999 ltc#196609S git-fixes).
- powerpc/64: Interrupts save PPR on stack rather than thread_struct (bsc#1196999 ltc#196609).
- powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc#1182171 ltc#190900 bsc#1198660 ltc#197803).
- powerpc/pseries: Fix use after free in remove_phb_dynamic() (bsc#1065729 bsc#1198660 ltc#197803).
- scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() (bsc#1028340 bsc#1198825).
- SUNRPC: change locking for xs_swap_enable/disable (bsc#1196367).
- x86/pm: Save the MSR validity status at context setup (bsc#1114648).
- x86/speculation: Restore speculation related MSRs during S3 resume (bsc#1114648).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-17"/>
	<updated date="2022-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1028340">SUSE bug 1028340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055710">SUSE bug 1055710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084513">SUSE bug 1084513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114648">SUSE bug 1114648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158266">SUSE bug 1158266</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172456">SUSE bug 1172456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177282">SUSE bug 1177282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182171">SUSE bug 1182171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183723">SUSE bug 1183723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187055">SUSE bug 1187055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191647">SUSE bug 1191647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191958">SUSE bug 1191958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195065">SUSE bug 1195065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195651">SUSE bug 1195651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196018">SUSE bug 1196018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196367">SUSE bug 1196367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196426">SUSE bug 1196426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196999">SUSE bug 1196999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197219">SUSE bug 1197219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197343">SUSE bug 1197343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197663">SUSE bug 1197663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198400">SUSE bug 1198400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198516">SUSE bug 1198516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198577">SUSE bug 1198577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198660">SUSE bug 1198660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198687">SUSE bug 1198687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198742">SUSE bug 1198742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198777">SUSE bug 1198777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198825">SUSE bug 1198825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199012">SUSE bug 1199012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199063">SUSE bug 1199063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199314">SUSE bug 1199314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199399">SUSE bug 1199399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199426">SUSE bug 1199426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199505">SUSE bug 1199505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199507">SUSE bug 1199507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199605">SUSE bug 1199605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199650">SUSE bug 1199650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200143">SUSE bug 1200143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200144">SUSE bug 1200144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200249">SUSE bug 1200249</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-13695/">CVE-2017-13695</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-7755/">CVE-2018-7755</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19377/">CVE-2019-19377</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20811/">CVE-2019-20811</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26541/">CVE-2020-26541</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20292/">CVE-2021-20292</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20321/">CVE-2021-20321</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33061/">CVE-2021-33061</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38208/">CVE-2021-38208</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39711/">CVE-2021-39711</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43389/">CVE-2021-43389</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1011/">CVE-2022-1011</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1184/">CVE-2022-1184</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1353/">CVE-2022-1353</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1419/">CVE-2022-1419</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1516/">CVE-2022-1516</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1652/">CVE-2022-1652</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1729/">CVE-2022-1729</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1734/">CVE-2022-1734</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1974/">CVE-2022-1974</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1975/">CVE-2022-1975</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21123/">CVE-2022-21123</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21125/">CVE-2022-21125</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21127/">CVE-2022-21127</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21166/">CVE-2022-21166</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21180/">CVE-2022-21180</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-21499/">CVE-2022-21499</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22942/">CVE-2022-22942</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28748/">CVE-2022-28748</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30594/">CVE-2022-30594</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692158" comment="kernel-default-livepatch-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692159" comment="kernel-default-livepatch-devel-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692160" comment="kernel-livepatch-4_12_14-150100_197_114-default-1-150100.3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138652" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199606" ref_url="https://bugzilla.suse.com/1199606" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1734" ref_url="https://www.suse.com/security/cve/CVE-2022-1734/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011371.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_105 fixes one issue.

The following security issue was fixed:

- CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-28"/>
	<updated date="2022-06-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199606">SUSE bug 1199606</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1734/">CVE-2022-1734</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720989" comment="kernel-default 4.12.14-197.105 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719208" comment="kernel-livepatch-4_12_14-197_105-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009692161" comment="kernel-livepatch-4_12_14-197_105-default-6-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138653" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199606" ref_url="https://bugzilla.suse.com/1199606" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1734" ref_url="https://www.suse.com/security/cve/CVE-2022-1734/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011371.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_108 fixes one issue.

The following security issue was fixed:

- CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-28"/>
	<updated date="2022-06-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199606">SUSE bug 1199606</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1734/">CVE-2022-1734</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720990" comment="kernel-default 4.12.14-197.108 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719209" comment="kernel-livepatch-4_12_14-197_108-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009692162" comment="kernel-livepatch-4_12_14-197_108-default-5-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138654" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199606" ref_url="https://bugzilla.suse.com/1199606" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1734" ref_url="https://www.suse.com/security/cve/CVE-2022-1734/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011371.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_111 fixes one issue.

The following security issue was fixed:

- CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-28"/>
	<updated date="2022-06-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199606">SUSE bug 1199606</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1734/">CVE-2022-1734</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720991" comment="kernel-default 4.12.14-150100.197.111 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719210" comment="kernel-livepatch-4_12_14-150100_197_111-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009692163" comment="kernel-livepatch-4_12_14-150100_197_111-default-4-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138655" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199606" ref_url="https://bugzilla.suse.com/1199606" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1734" ref_url="https://www.suse.com/security/cve/CVE-2022-1734/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2206-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011371.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_99 fixes one issue.

The following security issue was fixed:

- CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-28"/>
	<updated date="2022-06-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199606">SUSE bug 1199606</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1734/">CVE-2022-1734</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720987" comment="kernel-default 4.12.14-197.99 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719206" comment="kernel-livepatch-4_12_14-197_99-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009692164" comment="kernel-livepatch-4_12_14-197_99-default-15-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138656" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199606" ref_url="https://bugzilla.suse.com/1199606" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1734" ref_url="https://www.suse.com/security/cve/CVE-2022-1734/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011407.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_102 fixes one issue.

The following security issue was fixed:

- CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-05"/>
	<updated date="2022-07-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199606">SUSE bug 1199606</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1734/">CVE-2022-1734</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720988" comment="kernel-default 4.12.14-197.102 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719207" comment="kernel-livepatch-4_12_14-197_102-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009698959" comment="kernel-livepatch-4_12_14-197_102-default-10-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138657" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1191529" ref_url="https://bugzilla.suse.com/1191529" source="BUGZILLA"/>
		<reference ref_id="1192036" ref_url="https://bugzilla.suse.com/1192036" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-3702" ref_url="https://www.suse.com/security/cve/CVE-2020-3702/" source="CVE"/>
		<reference ref_id="CVE-2021-42739" ref_url="https://www.suse.com/security/cve/CVE-2021-42739/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010143.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_92 fixes several issues.

The following security issues were fixed:

- CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure. (bsc#1191193)
- CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-31"/>
	<updated date="2022-01-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191529">SUSE bug 1191529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192036">SUSE bug 1192036</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3702/">CVE-2020-3702</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42739/">CVE-2021-42739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720986" comment="kernel-default 4.12.14-197.92 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719205" comment="kernel-livepatch-4_12_14-197_92-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009665151" comment="kernel-livepatch-4_12_14-197_92-default-9-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138658" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1191529" ref_url="https://bugzilla.suse.com/1191529" source="BUGZILLA"/>
		<reference ref_id="1192036" ref_url="https://bugzilla.suse.com/1192036" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-3702" ref_url="https://www.suse.com/security/cve/CVE-2020-3702/" source="CVE"/>
		<reference ref_id="CVE-2021-42739" ref_url="https://www.suse.com/security/cve/CVE-2021-42739/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010143.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_99 fixes several issues.

The following security issues were fixed:

- CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure. (bsc#1191193)
- CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-31"/>
	<updated date="2022-01-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191529">SUSE bug 1191529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192036">SUSE bug 1192036</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3702/">CVE-2020-3702</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42739/">CVE-2021-42739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720987" comment="kernel-default 4.12.14-197.99 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719206" comment="kernel-livepatch-4_12_14-197_99-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009665152" comment="kernel-livepatch-4_12_14-197_99-default-7-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138659" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186061" ref_url="https://bugzilla.suse.com/1186061" source="BUGZILLA"/>
		<reference ref_id="1191529" ref_url="https://bugzilla.suse.com/1191529" source="BUGZILLA"/>
		<reference ref_id="1192036" ref_url="https://bugzilla.suse.com/1192036" source="BUGZILLA"/>
		<reference ref_id="1194680" ref_url="https://bugzilla.suse.com/1194680" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25670" ref_url="https://www.suse.com/security/cve/CVE-2020-25670/" source="CVE"/>
		<reference ref_id="CVE-2020-25671" ref_url="https://www.suse.com/security/cve/CVE-2020-25671/" source="CVE"/>
		<reference ref_id="CVE-2020-25672" ref_url="https://www.suse.com/security/cve/CVE-2020-25672/" source="CVE"/>
		<reference ref_id="CVE-2020-25673" ref_url="https://www.suse.com/security/cve/CVE-2020-25673/" source="CVE"/>
		<reference ref_id="CVE-2020-3702" ref_url="https://www.suse.com/security/cve/CVE-2020-3702/" source="CVE"/>
		<reference ref_id="CVE-2021-23134" ref_url="https://www.suse.com/security/cve/CVE-2021-23134/" source="CVE"/>
		<reference ref_id="CVE-2021-42739" ref_url="https://www.suse.com/security/cve/CVE-2021-42739/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010147.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_86 fixes several issues.

The following security issues were fixed:

- CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure. (bsc#1191193)
- CVE-2020-25670, CVE-2020-25671, CVE-2020-25672, CVE-2020-25673, CVE-2021-23134: Fixed multiple bugs in NFC subsytem (bsc#1178181, bsc#1186060).
- CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-31"/>
	<updated date="2022-01-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186061">SUSE bug 1186061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191529">SUSE bug 1191529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192036">SUSE bug 1192036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194680">SUSE bug 1194680</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25670/">CVE-2020-25670</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25671/">CVE-2020-25671</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25672/">CVE-2020-25672</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25673/">CVE-2020-25673</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3702/">CVE-2020-3702</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23134/">CVE-2021-23134</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42739/">CVE-2021-42739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720984" comment="kernel-default 4.12.14-197.86 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719203" comment="kernel-livepatch-4_12_14-197_86-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009665149" comment="kernel-livepatch-4_12_14-197_86-default-13-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138660" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1191529" ref_url="https://bugzilla.suse.com/1191529" source="BUGZILLA"/>
		<reference ref_id="1192036" ref_url="https://bugzilla.suse.com/1192036" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-3702" ref_url="https://www.suse.com/security/cve/CVE-2020-3702/" source="CVE"/>
		<reference ref_id="CVE-2021-42739" ref_url="https://www.suse.com/security/cve/CVE-2021-42739/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010143.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_89 fixes several issues.

The following security issues were fixed:

- CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure. (bsc#1191193)
- CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-31"/>
	<updated date="2022-01-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191529">SUSE bug 1191529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192036">SUSE bug 1192036</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3702/">CVE-2020-3702</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42739/">CVE-2021-42739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720985" comment="kernel-default 4.12.14-197.89 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719204" comment="kernel-livepatch-4_12_14-197_89-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009665150" comment="kernel-livepatch-4_12_14-197_89-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138661" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1194013" ref_url="https://bugzilla.suse.com/1194013" source="BUGZILLA"/>
		<reference ref_id="1196901" ref_url="https://bugzilla.suse.com/1196901" source="BUGZILLA"/>
		<reference ref_id="1199487" ref_url="https://bugzilla.suse.com/1199487" source="BUGZILLA"/>
		<reference ref_id="1199657" ref_url="https://bugzilla.suse.com/1199657" source="BUGZILLA"/>
		<reference ref_id="1200571" ref_url="https://bugzilla.suse.com/1200571" source="BUGZILLA"/>
		<reference ref_id="1200599" ref_url="https://bugzilla.suse.com/1200599" source="BUGZILLA"/>
		<reference ref_id="1200604" ref_url="https://bugzilla.suse.com/1200604" source="BUGZILLA"/>
		<reference ref_id="1200605" ref_url="https://bugzilla.suse.com/1200605" source="BUGZILLA"/>
		<reference ref_id="1200608" ref_url="https://bugzilla.suse.com/1200608" source="BUGZILLA"/>
		<reference ref_id="1200619" ref_url="https://bugzilla.suse.com/1200619" source="BUGZILLA"/>
		<reference ref_id="1200692" ref_url="https://bugzilla.suse.com/1200692" source="BUGZILLA"/>
		<reference ref_id="1200762" ref_url="https://bugzilla.suse.com/1200762" source="BUGZILLA"/>
		<reference ref_id="1201050" ref_url="https://bugzilla.suse.com/1201050" source="BUGZILLA"/>
		<reference ref_id="1201080" ref_url="https://bugzilla.suse.com/1201080" source="BUGZILLA"/>
		<reference ref_id="1201251" ref_url="https://bugzilla.suse.com/1201251" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26341" ref_url="https://www.suse.com/security/cve/CVE-2021-26341/" source="CVE"/>
		<reference ref_id="CVE-2021-4157" ref_url="https://www.suse.com/security/cve/CVE-2021-4157/" source="CVE"/>
		<reference ref_id="CVE-2022-1679" ref_url="https://www.suse.com/security/cve/CVE-2022-1679/" source="CVE"/>
		<reference ref_id="CVE-2022-20132" ref_url="https://www.suse.com/security/cve/CVE-2022-20132/" source="CVE"/>
		<reference ref_id="CVE-2022-20141" ref_url="https://www.suse.com/security/cve/CVE-2022-20141/" source="CVE"/>
		<reference ref_id="CVE-2022-20154" ref_url="https://www.suse.com/security/cve/CVE-2022-20154/" source="CVE"/>
		<reference ref_id="CVE-2022-2318" ref_url="https://www.suse.com/security/cve/CVE-2022-2318/" source="CVE"/>
		<reference ref_id="CVE-2022-26365" ref_url="https://www.suse.com/security/cve/CVE-2022-26365/" source="CVE"/>
		<reference ref_id="CVE-2022-29900" ref_url="https://www.suse.com/security/cve/CVE-2022-29900/" source="CVE"/>
		<reference ref_id="CVE-2022-29901" ref_url="https://www.suse.com/security/cve/CVE-2022-29901/" source="CVE"/>
		<reference ref_id="CVE-2022-33740" ref_url="https://www.suse.com/security/cve/CVE-2022-33740/" source="CVE"/>
		<reference ref_id="CVE-2022-33741" ref_url="https://www.suse.com/security/cve/CVE-2022-33741/" source="CVE"/>
		<reference ref_id="CVE-2022-33742" ref_url="https://www.suse.com/security/cve/CVE-2022-33742/" source="CVE"/>
		<reference ref_id="CVE-2022-33981" ref_url="https://www.suse.com/security/cve/CVE-2022-33981/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011558.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).
- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).
- CVE-2022-20132: Fixed out of bounds read due to improper input validation in lg_probe and related functions of hid-lg.c (bsc#1200619).
- CVE-2022-33981: Fixed use-after-free in floppy driver (bsc#1200692)
- CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604).
- CVE-2021-4157: Fixed an out of memory bounds write flaw in the NFS subsystem, related to the replication of files with NFS. A user could potentially crash the system or escalate privileges on the system (bsc#1194013).
- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).
- CVE-2022-2318: Fixed a use-after-free vulnerabilities in the timer handler in net/rose/rose_timer.c that allow attackers to crash the system without any privileges (bsc#1201251).
- CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762).
- CVE-2021-26341: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bsc#1201050).

The following non-security bugs were fixed:

- exec: Force single empty string when argv is empty (bsc#1200571).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-15"/>
	<updated date="2022-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194013">SUSE bug 1194013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196901">SUSE bug 1196901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199487">SUSE bug 1199487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199657">SUSE bug 1199657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200571">SUSE bug 1200571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200599">SUSE bug 1200599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200604">SUSE bug 1200604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200605">SUSE bug 1200605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200608">SUSE bug 1200608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200619">SUSE bug 1200619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200692">SUSE bug 1200692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200762">SUSE bug 1200762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201050">SUSE bug 1201050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201080">SUSE bug 1201080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201251">SUSE bug 1201251</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-26341/">CVE-2021-26341</cve>
	<cve impact="low" cvss3="3.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4157/">CVE-2021-4157</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1679/">CVE-2022-1679</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-20132/">CVE-2022-20132</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20141/">CVE-2022-20141</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20154/">CVE-2022-20154</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2318/">CVE-2022-2318</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-26365/">CVE-2022-26365</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29900/">CVE-2022-29900</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29901/">CVE-2022-29901</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33740/">CVE-2022-33740</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33741/">CVE-2022-33741</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33742/">CVE-2022-33742</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-33981/">CVE-2022-33981</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009698960" comment="kernel-default-livepatch-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698961" comment="kernel-default-livepatch-devel-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698962" comment="kernel-livepatch-4_12_14-150100_197_117-default-1-150100.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138662" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1200608" ref_url="https://bugzilla.suse.com/1200608" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-20154" ref_url="https://www.suse.com/security/cve/CVE-2022-20154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011594.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_114 fixes one issue.

The following security issue was fixed:

- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-19"/>
	<updated date="2022-07-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200608">SUSE bug 1200608</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20154/">CVE-2022-20154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720992" comment="kernel-default 4.12.14-150100.197.114 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719211" comment="kernel-livepatch-4_12_14-150100_197_114-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009698968" comment="kernel-livepatch-4_12_14-150100_197_114-default-2-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138663" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199697" ref_url="https://bugzilla.suse.com/1199697" source="BUGZILLA"/>
		<reference ref_id="1200059" ref_url="https://bugzilla.suse.com/1200059" source="BUGZILLA"/>
		<reference ref_id="1200608" ref_url="https://bugzilla.suse.com/1200608" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1729" ref_url="https://www.suse.com/security/cve/CVE-2022-1729/" source="CVE"/>
		<reference ref_id="CVE-2022-20154" ref_url="https://www.suse.com/security/cve/CVE-2022-20154/" source="CVE"/>
		<reference ref_id="CVE-2022-21499" ref_url="https://www.suse.com/security/cve/CVE-2022-21499/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011609.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_102 fixes several issues.

The following security issues were fixed:

- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).
- CVE-2022-21499: Reinforced the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb (bsc#1199426).
- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-20"/>
	<updated date="2022-07-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199697">SUSE bug 1199697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200059">SUSE bug 1200059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200608">SUSE bug 1200608</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1729/">CVE-2022-1729</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20154/">CVE-2022-20154</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-21499/">CVE-2022-21499</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720988" comment="kernel-default 4.12.14-197.102 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719207" comment="kernel-livepatch-4_12_14-197_102-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009701055" comment="kernel-livepatch-4_12_14-197_102-default-11-150100.2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138664" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199697" ref_url="https://bugzilla.suse.com/1199697" source="BUGZILLA"/>
		<reference ref_id="1200059" ref_url="https://bugzilla.suse.com/1200059" source="BUGZILLA"/>
		<reference ref_id="1200608" ref_url="https://bugzilla.suse.com/1200608" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1729" ref_url="https://www.suse.com/security/cve/CVE-2022-1729/" source="CVE"/>
		<reference ref_id="CVE-2022-20154" ref_url="https://www.suse.com/security/cve/CVE-2022-20154/" source="CVE"/>
		<reference ref_id="CVE-2022-21499" ref_url="https://www.suse.com/security/cve/CVE-2022-21499/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011609.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_108 fixes several issues.

The following security issues were fixed:

- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).
- CVE-2022-21499: Reinforced the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb (bsc#1199426).
- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-20"/>
	<updated date="2022-07-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199697">SUSE bug 1199697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200059">SUSE bug 1200059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200608">SUSE bug 1200608</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1729/">CVE-2022-1729</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20154/">CVE-2022-20154</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-21499/">CVE-2022-21499</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720990" comment="kernel-default 4.12.14-197.108 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719209" comment="kernel-livepatch-4_12_14-197_108-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009701057" comment="kernel-livepatch-4_12_14-197_108-default-6-150100.2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138665" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199697" ref_url="https://bugzilla.suse.com/1199697" source="BUGZILLA"/>
		<reference ref_id="1200059" ref_url="https://bugzilla.suse.com/1200059" source="BUGZILLA"/>
		<reference ref_id="1200608" ref_url="https://bugzilla.suse.com/1200608" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1729" ref_url="https://www.suse.com/security/cve/CVE-2022-1729/" source="CVE"/>
		<reference ref_id="CVE-2022-20154" ref_url="https://www.suse.com/security/cve/CVE-2022-20154/" source="CVE"/>
		<reference ref_id="CVE-2022-21499" ref_url="https://www.suse.com/security/cve/CVE-2022-21499/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011609.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_111 fixes several issues.

The following security issues were fixed:

- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).
- CVE-2022-21499: Reinforced the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb (bsc#1199426).
- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-20"/>
	<updated date="2022-07-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199697">SUSE bug 1199697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200059">SUSE bug 1200059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200608">SUSE bug 1200608</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1729/">CVE-2022-1729</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20154/">CVE-2022-20154</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-21499/">CVE-2022-21499</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720991" comment="kernel-default 4.12.14-150100.197.111 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719210" comment="kernel-livepatch-4_12_14-150100_197_111-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009701058" comment="kernel-livepatch-4_12_14-150100_197_111-default-5-150100.2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138666" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199697" ref_url="https://bugzilla.suse.com/1199697" source="BUGZILLA"/>
		<reference ref_id="1200059" ref_url="https://bugzilla.suse.com/1200059" source="BUGZILLA"/>
		<reference ref_id="1200608" ref_url="https://bugzilla.suse.com/1200608" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1729" ref_url="https://www.suse.com/security/cve/CVE-2022-1729/" source="CVE"/>
		<reference ref_id="CVE-2022-20154" ref_url="https://www.suse.com/security/cve/CVE-2022-20154/" source="CVE"/>
		<reference ref_id="CVE-2022-21499" ref_url="https://www.suse.com/security/cve/CVE-2022-21499/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011615.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_99 fixes several issues.

The following security issues were fixed:

- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).
- CVE-2022-21499: Reinforced the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb (bsc#1199426).
- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-21"/>
	<updated date="2022-07-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199697">SUSE bug 1199697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200059">SUSE bug 1200059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200608">SUSE bug 1200608</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1729/">CVE-2022-1729</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20154/">CVE-2022-20154</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-21499/">CVE-2022-21499</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720987" comment="kernel-default 4.12.14-197.99 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719206" comment="kernel-livepatch-4_12_14-197_99-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009701054" comment="kernel-livepatch-4_12_14-197_99-default-16-150100.2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138667" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199697" ref_url="https://bugzilla.suse.com/1199697" source="BUGZILLA"/>
		<reference ref_id="1200059" ref_url="https://bugzilla.suse.com/1200059" source="BUGZILLA"/>
		<reference ref_id="1200608" ref_url="https://bugzilla.suse.com/1200608" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1729" ref_url="https://www.suse.com/security/cve/CVE-2022-1729/" source="CVE"/>
		<reference ref_id="CVE-2022-20154" ref_url="https://www.suse.com/security/cve/CVE-2022-20154/" source="CVE"/>
		<reference ref_id="CVE-2022-21499" ref_url="https://www.suse.com/security/cve/CVE-2022-21499/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2482-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011615.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_105 fixes several issues.

The following security issues were fixed:

- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).
- CVE-2022-21499: Reinforced the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb (bsc#1199426).
- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-21"/>
	<updated date="2022-07-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199697">SUSE bug 1199697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200059">SUSE bug 1200059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200608">SUSE bug 1200608</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1729/">CVE-2022-1729</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20154/">CVE-2022-20154</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-21499/">CVE-2022-21499</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720989" comment="kernel-default 4.12.14-197.105 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719208" comment="kernel-livepatch-4_12_14-197_105-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009701056" comment="kernel-livepatch-4_12_14-197_105-default-7-150100.2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138668" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186061" ref_url="https://bugzilla.suse.com/1186061" source="BUGZILLA"/>
		<reference ref_id="1191529" ref_url="https://bugzilla.suse.com/1191529" source="BUGZILLA"/>
		<reference ref_id="1192036" ref_url="https://bugzilla.suse.com/1192036" source="BUGZILLA"/>
		<reference ref_id="1194680" ref_url="https://bugzilla.suse.com/1194680" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25670" ref_url="https://www.suse.com/security/cve/CVE-2020-25670/" source="CVE"/>
		<reference ref_id="CVE-2020-25671" ref_url="https://www.suse.com/security/cve/CVE-2020-25671/" source="CVE"/>
		<reference ref_id="CVE-2020-25672" ref_url="https://www.suse.com/security/cve/CVE-2020-25672/" source="CVE"/>
		<reference ref_id="CVE-2020-25673" ref_url="https://www.suse.com/security/cve/CVE-2020-25673/" source="CVE"/>
		<reference ref_id="CVE-2020-3702" ref_url="https://www.suse.com/security/cve/CVE-2020-3702/" source="CVE"/>
		<reference ref_id="CVE-2021-23134" ref_url="https://www.suse.com/security/cve/CVE-2021-23134/" source="CVE"/>
		<reference ref_id="CVE-2021-42739" ref_url="https://www.suse.com/security/cve/CVE-2021-42739/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0263-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010153.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_83 fixes several issues.

The following security issues were fixed:

- CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure. (bsc#1191193)
- CVE-2020-25670, CVE-2020-25671, CVE-2020-25672, CVE-2020-25673, CVE-2021-23134: Fixed multiple bugs in NFC subsytem (bsc#1178181, bsc#1186060).
- CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-01"/>
	<updated date="2022-02-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186061">SUSE bug 1186061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191529">SUSE bug 1191529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192036">SUSE bug 1192036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194680">SUSE bug 1194680</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25670/">CVE-2020-25670</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25671/">CVE-2020-25671</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25672/">CVE-2020-25672</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25673/">CVE-2020-25673</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3702/">CVE-2020-3702</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23134/">CVE-2021-23134</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42739/">CVE-2021-42739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720983" comment="kernel-default 4.12.14-197.83 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719202" comment="kernel-livepatch-4_12_14-197_83-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009665148" comment="kernel-livepatch-4_12_14-197_83-default-14-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138669" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1200605" ref_url="https://bugzilla.suse.com/1200605" source="BUGZILLA"/>
		<reference ref_id="1201080" ref_url="https://bugzilla.suse.com/1201080" source="BUGZILLA"/>
		<reference ref_id="1201517" ref_url="https://bugzilla.suse.com/1201517" source="BUGZILLA"/>
		<reference ref_id="1201655" ref_url="https://bugzilla.suse.com/1201655" source="BUGZILLA"/>
		<reference ref_id="1201656" ref_url="https://bugzilla.suse.com/1201656" source="BUGZILLA"/>
		<reference ref_id="1201657" ref_url="https://bugzilla.suse.com/1201657" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1419" ref_url="https://www.suse.com/security/cve/CVE-2022-1419/" source="CVE"/>
		<reference ref_id="CVE-2022-1679" ref_url="https://www.suse.com/security/cve/CVE-2022-1679/" source="CVE"/>
		<reference ref_id="CVE-2022-20141" ref_url="https://www.suse.com/security/cve/CVE-2022-20141/" source="CVE"/>
		<reference ref_id="CVE-2022-26490" ref_url="https://www.suse.com/security/cve/CVE-2022-26490/" source="CVE"/>
		<reference ref_id="CVE-2022-28389" ref_url="https://www.suse.com/security/cve/CVE-2022-28389/" source="CVE"/>
		<reference ref_id="CVE-2022-28390" ref_url="https://www.suse.com/security/cve/CVE-2022-28390/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2700-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011826.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_105 fixes several issues.

The following security issues were fixed:

- CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel. (bnc#1198033)
- CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could crash the system or corrupt the system memory. (bsc#1196830) 
- CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
- CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel (bnc#1198031).
- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).
- CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-09"/>
	<updated date="2022-08-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200605">SUSE bug 1200605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201080">SUSE bug 1201080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201517">SUSE bug 1201517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201655">SUSE bug 1201655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201656">SUSE bug 1201656</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201657">SUSE bug 1201657</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1419/">CVE-2022-1419</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1679/">CVE-2022-1679</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20141/">CVE-2022-20141</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26490/">CVE-2022-26490</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28389/">CVE-2022-28389</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28390/">CVE-2022-28390</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720989" comment="kernel-default 4.12.14-197.105 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719208" comment="kernel-livepatch-4_12_14-197_105-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009705571" comment="kernel-livepatch-4_12_14-197_105-default-8-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138670" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1200605" ref_url="https://bugzilla.suse.com/1200605" source="BUGZILLA"/>
		<reference ref_id="1201080" ref_url="https://bugzilla.suse.com/1201080" source="BUGZILLA"/>
		<reference ref_id="1201655" ref_url="https://bugzilla.suse.com/1201655" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1419" ref_url="https://www.suse.com/security/cve/CVE-2022-1419/" source="CVE"/>
		<reference ref_id="CVE-2022-1679" ref_url="https://www.suse.com/security/cve/CVE-2022-1679/" source="CVE"/>
		<reference ref_id="CVE-2022-20141" ref_url="https://www.suse.com/security/cve/CVE-2022-20141/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2710-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-August/024349.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_111 fixes several issues.

The following security issues were fixed:

- CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).
- CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-09"/>
	<updated date="2022-08-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200605">SUSE bug 1200605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201080">SUSE bug 1201080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201655">SUSE bug 1201655</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1419/">CVE-2022-1419</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1679/">CVE-2022-1679</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20141/">CVE-2022-20141</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720991" comment="kernel-default 4.12.14-150100.197.111 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719210" comment="kernel-livepatch-4_12_14-150100_197_111-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009705573" comment="kernel-livepatch-4_12_14-150100_197_111-default-6-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138671" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1200605" ref_url="https://bugzilla.suse.com/1200605" source="BUGZILLA"/>
		<reference ref_id="1201080" ref_url="https://bugzilla.suse.com/1201080" source="BUGZILLA"/>
		<reference ref_id="1201517" ref_url="https://bugzilla.suse.com/1201517" source="BUGZILLA"/>
		<reference ref_id="1201655" ref_url="https://bugzilla.suse.com/1201655" source="BUGZILLA"/>
		<reference ref_id="1201656" ref_url="https://bugzilla.suse.com/1201656" source="BUGZILLA"/>
		<reference ref_id="1201657" ref_url="https://bugzilla.suse.com/1201657" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1419" ref_url="https://www.suse.com/security/cve/CVE-2022-1419/" source="CVE"/>
		<reference ref_id="CVE-2022-1679" ref_url="https://www.suse.com/security/cve/CVE-2022-1679/" source="CVE"/>
		<reference ref_id="CVE-2022-20141" ref_url="https://www.suse.com/security/cve/CVE-2022-20141/" source="CVE"/>
		<reference ref_id="CVE-2022-26490" ref_url="https://www.suse.com/security/cve/CVE-2022-26490/" source="CVE"/>
		<reference ref_id="CVE-2022-28389" ref_url="https://www.suse.com/security/cve/CVE-2022-28389/" source="CVE"/>
		<reference ref_id="CVE-2022-28390" ref_url="https://www.suse.com/security/cve/CVE-2022-28390/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011840.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_108 fixes several issues.

The following security issues were fixed:

- CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel. (bnc#1198033)
- CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could crash the system or corrupt the system memory. (bsc#1196830) 
- CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
- CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel (bnc#1198031).
- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).
- CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-09"/>
	<updated date="2022-08-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200605">SUSE bug 1200605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201080">SUSE bug 1201080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201517">SUSE bug 1201517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201655">SUSE bug 1201655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201656">SUSE bug 1201656</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201657">SUSE bug 1201657</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1419/">CVE-2022-1419</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1679/">CVE-2022-1679</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20141/">CVE-2022-20141</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26490/">CVE-2022-26490</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28389/">CVE-2022-28389</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28390/">CVE-2022-28390</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720990" comment="kernel-default 4.12.14-197.108 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719209" comment="kernel-livepatch-4_12_14-197_108-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009705572" comment="kernel-livepatch-4_12_14-197_108-default-7-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138672" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1200605" ref_url="https://bugzilla.suse.com/1200605" source="BUGZILLA"/>
		<reference ref_id="1201080" ref_url="https://bugzilla.suse.com/1201080" source="BUGZILLA"/>
		<reference ref_id="1201517" ref_url="https://bugzilla.suse.com/1201517" source="BUGZILLA"/>
		<reference ref_id="1201655" ref_url="https://bugzilla.suse.com/1201655" source="BUGZILLA"/>
		<reference ref_id="1201656" ref_url="https://bugzilla.suse.com/1201656" source="BUGZILLA"/>
		<reference ref_id="1201657" ref_url="https://bugzilla.suse.com/1201657" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1419" ref_url="https://www.suse.com/security/cve/CVE-2022-1419/" source="CVE"/>
		<reference ref_id="CVE-2022-1679" ref_url="https://www.suse.com/security/cve/CVE-2022-1679/" source="CVE"/>
		<reference ref_id="CVE-2022-20141" ref_url="https://www.suse.com/security/cve/CVE-2022-20141/" source="CVE"/>
		<reference ref_id="CVE-2022-26490" ref_url="https://www.suse.com/security/cve/CVE-2022-26490/" source="CVE"/>
		<reference ref_id="CVE-2022-28389" ref_url="https://www.suse.com/security/cve/CVE-2022-28389/" source="CVE"/>
		<reference ref_id="CVE-2022-28390" ref_url="https://www.suse.com/security/cve/CVE-2022-28390/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011840.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_102 fixes several issues.

The following security issues were fixed:

- CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel. (bnc#1198033)
- CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could crash the system or corrupt the system memory. (bsc#1196830) 
- CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
- CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel (bnc#1198031).
- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).
- CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-09"/>
	<updated date="2022-08-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200605">SUSE bug 1200605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201080">SUSE bug 1201080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201517">SUSE bug 1201517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201655">SUSE bug 1201655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201656">SUSE bug 1201656</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201657">SUSE bug 1201657</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1419/">CVE-2022-1419</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1679/">CVE-2022-1679</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20141/">CVE-2022-20141</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26490/">CVE-2022-26490</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28389/">CVE-2022-28389</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28390/">CVE-2022-28390</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720988" comment="kernel-default 4.12.14-197.102 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719207" comment="kernel-livepatch-4_12_14-197_102-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009705570" comment="kernel-livepatch-4_12_14-197_102-default-12-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138673" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1200605" ref_url="https://bugzilla.suse.com/1200605" source="BUGZILLA"/>
		<reference ref_id="1201080" ref_url="https://bugzilla.suse.com/1201080" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1679" ref_url="https://www.suse.com/security/cve/CVE-2022-1679/" source="CVE"/>
		<reference ref_id="CVE-2022-20141" ref_url="https://www.suse.com/security/cve/CVE-2022-20141/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2762-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011884.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_114 fixes several issues.

The following security issues were fixed:

- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).
- CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-10"/>
	<updated date="2022-08-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200605">SUSE bug 1200605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201080">SUSE bug 1201080</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1679/">CVE-2022-1679</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20141/">CVE-2022-20141</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720992" comment="kernel-default 4.12.14-150100.197.114 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719211" comment="kernel-livepatch-4_12_14-150100_197_114-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009705574" comment="kernel-livepatch-4_12_14-150100_197_114-default-3-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138674" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1195775" ref_url="https://bugzilla.suse.com/1195775" source="BUGZILLA"/>
		<reference ref_id="1195926" ref_url="https://bugzilla.suse.com/1195926" source="BUGZILLA"/>
		<reference ref_id="1198484" ref_url="https://bugzilla.suse.com/1198484" source="BUGZILLA"/>
		<reference ref_id="1198829" ref_url="https://bugzilla.suse.com/1198829" source="BUGZILLA"/>
		<reference ref_id="1200442" ref_url="https://bugzilla.suse.com/1200442" source="BUGZILLA"/>
		<reference ref_id="1200598" ref_url="https://bugzilla.suse.com/1200598" source="BUGZILLA"/>
		<reference ref_id="1200910" ref_url="https://bugzilla.suse.com/1200910" source="BUGZILLA"/>
		<reference ref_id="1201429" ref_url="https://bugzilla.suse.com/1201429" source="BUGZILLA"/>
		<reference ref_id="1201635" ref_url="https://bugzilla.suse.com/1201635" source="BUGZILLA"/>
		<reference ref_id="1201636" ref_url="https://bugzilla.suse.com/1201636" source="BUGZILLA"/>
		<reference ref_id="1201644" ref_url="https://bugzilla.suse.com/1201644" source="BUGZILLA"/>
		<reference ref_id="1201926" ref_url="https://bugzilla.suse.com/1201926" source="BUGZILLA"/>
		<reference ref_id="1201930" ref_url="https://bugzilla.suse.com/1201930" source="BUGZILLA"/>
		<reference ref_id="1201940" ref_url="https://bugzilla.suse.com/1201940" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36557" ref_url="https://www.suse.com/security/cve/CVE-2020-36557/" source="CVE"/>
		<reference ref_id="CVE-2020-36558" ref_url="https://www.suse.com/security/cve/CVE-2020-36558/" source="CVE"/>
		<reference ref_id="CVE-2021-33655" ref_url="https://www.suse.com/security/cve/CVE-2021-33655/" source="CVE"/>
		<reference ref_id="CVE-2021-33656" ref_url="https://www.suse.com/security/cve/CVE-2021-33656/" source="CVE"/>
		<reference ref_id="CVE-2022-1462" ref_url="https://www.suse.com/security/cve/CVE-2022-1462/" source="CVE"/>
		<reference ref_id="CVE-2022-20166" ref_url="https://www.suse.com/security/cve/CVE-2022-20166/" source="CVE"/>
		<reference ref_id="CVE-2022-36946" ref_url="https://www.suse.com/security/cve/CVE-2022-36946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011923.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-36557: Fixed race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys that could lead to a use-after-free (bnc#1201429).
- CVE-2020-36558: Fixed race condition involving VT_RESIZEX that could lead to a NULL pointer dereference and general protection fault (bnc#1200910).
- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2021-33656: Fixed out of bounds write with ioctl PIO_FONT (bnc#1201636).
- CVE-2022-1462: Fixed an out-of-bounds read flaw in the TeleTYpe subsystem (bnc#1198829).
- CVE-2022-20166: Fixed possible out of bounds write due to sprintf unsafety that could cause local escalation of privilege (bnc#1200598).
- CVE-2022-36946: Fixed incorrect packet truncation in nfqnl_mangle() that could lead to remote DoS (bnc#1201940).

The following non-security bugs were fixed:

- cifs: On cifs_reconnect, resolve the hostname again (bsc#1201926).
- cifs: Simplify reconnect code when dfs upcall is enabled (bsc#1201926).
- cifs: To match file servers, make sure the server hostname matches (bsc#1201926).
- cifs: fix memory leak of smb3_fs_context_dup::server_hostname (bsc#1201926).
- cifs: set a minimum of 120s for next dns resolution (bsc#1201926).
- cifs: use the expiry output of dns_query to schedule next resolution (bsc#1201926).
- kvm: emulate: Fix SETcc emulation function offsets with SLS (bsc#1201930).
- kvm: emulate: do not adjust size of fastop and setcc subroutines (bsc#1201930).
- rpm/*.spec.in: remove backtick usage
- rpm/constraints.in: skip SLOW_DISK workers for kernel-source
- rpm/kernel-obs-build.spec.in: Also depend on dracut-systemd (bsc#1195775)
- rpm/kernel-obs-build.spec.in: add systemd-initrd and terminfo dracut module (bsc#1195775)
- rpm/kernel-obs-build.spec.in: use default dracut modules (bsc#1195926, bsc#1198484)
- x86/entry: Remove skip_r11rcx (bsc#1201644).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-16"/>
	<updated date="2022-08-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195775">SUSE bug 1195775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195926">SUSE bug 1195926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198484">SUSE bug 1198484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198829">SUSE bug 1198829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200442">SUSE bug 1200442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200598">SUSE bug 1200598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200910">SUSE bug 1200910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201429">SUSE bug 1201429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201635">SUSE bug 1201635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201636">SUSE bug 1201636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201644">SUSE bug 1201644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201926">SUSE bug 1201926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201930">SUSE bug 1201930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201940">SUSE bug 1201940</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36557/">CVE-2020-36557</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36558/">CVE-2020-36558</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33655/">CVE-2021-33655</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33656/">CVE-2021-33656</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1462/">CVE-2022-1462</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-20166/">CVE-2022-20166</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36946/">CVE-2022-36946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009704363" comment="kernel-default-livepatch-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704364" comment="kernel-default-livepatch-devel-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704365" comment="kernel-livepatch-4_12_14-150100_197_120-default-1-150100.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138675" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1196867" ref_url="https://bugzilla.suse.com/1196867" source="BUGZILLA"/>
		<reference ref_id="1201941" ref_url="https://bugzilla.suse.com/1201941" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36516" ref_url="https://www.suse.com/security/cve/CVE-2020-36516/" source="CVE"/>
		<reference ref_id="CVE-2022-36946" ref_url="https://www.suse.com/security/cve/CVE-2022-36946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012117.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_102 fixes several issues.

The following security issues were fixed:
- CVE-2020-36516: Fixed an off-path attack via mixed IPID assignment method with the hash-based IPID assignment policy to inject data into a victim's TCP session or terminate that session (bsc#1196867).
- CVE-2022-36946: Fixed a remote denial of service attack inside nfqnl_mangle in net/netfilter/nfnetlink_queue.c, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative length (bsc#1201941).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-05"/>
	<updated date="2022-09-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196867">SUSE bug 1196867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201941">SUSE bug 1201941</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36516/">CVE-2020-36516</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36946/">CVE-2022-36946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720988" comment="kernel-default 4.12.14-197.102 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719207" comment="kernel-livepatch-4_12_14-197_102-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009709561" comment="kernel-livepatch-4_12_14-197_102-default-13-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138676" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1196867" ref_url="https://bugzilla.suse.com/1196867" source="BUGZILLA"/>
		<reference ref_id="1201941" ref_url="https://bugzilla.suse.com/1201941" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36516" ref_url="https://www.suse.com/security/cve/CVE-2020-36516/" source="CVE"/>
		<reference ref_id="CVE-2022-36946" ref_url="https://www.suse.com/security/cve/CVE-2022-36946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012117.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_105 fixes several issues.

The following security issues were fixed:
- CVE-2020-36516: Fixed an off-path attack via mixed IPID assignment method with the hash-based IPID assignment policy to inject data into a victim's TCP session or terminate that session (bsc#1196867).
- CVE-2022-36946: Fixed a remote denial of service attack inside nfqnl_mangle in net/netfilter/nfnetlink_queue.c, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative length (bsc#1201941).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-05"/>
	<updated date="2022-09-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196867">SUSE bug 1196867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201941">SUSE bug 1201941</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36516/">CVE-2020-36516</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36946/">CVE-2022-36946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720989" comment="kernel-default 4.12.14-197.105 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719208" comment="kernel-livepatch-4_12_14-197_105-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009709562" comment="kernel-livepatch-4_12_14-197_105-default-9-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138677" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1196867" ref_url="https://bugzilla.suse.com/1196867" source="BUGZILLA"/>
		<reference ref_id="1201941" ref_url="https://bugzilla.suse.com/1201941" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36516" ref_url="https://www.suse.com/security/cve/CVE-2020-36516/" source="CVE"/>
		<reference ref_id="CVE-2022-36946" ref_url="https://www.suse.com/security/cve/CVE-2022-36946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012117.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_108 fixes several issues.

The following security issues were fixed:
- CVE-2020-36516: Fixed an off-path attack via mixed IPID assignment method with the hash-based IPID assignment policy to inject data into a victim's TCP session or terminate that session (bsc#1196867).
- CVE-2022-36946: Fixed a remote denial of service attack inside nfqnl_mangle in net/netfilter/nfnetlink_queue.c, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative length (bsc#1201941).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-05"/>
	<updated date="2022-09-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196867">SUSE bug 1196867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201941">SUSE bug 1201941</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36516/">CVE-2020-36516</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36946/">CVE-2022-36946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720990" comment="kernel-default 4.12.14-197.108 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719209" comment="kernel-livepatch-4_12_14-197_108-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009709563" comment="kernel-livepatch-4_12_14-197_108-default-8-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138678" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1196867" ref_url="https://bugzilla.suse.com/1196867" source="BUGZILLA"/>
		<reference ref_id="1201941" ref_url="https://bugzilla.suse.com/1201941" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36516" ref_url="https://www.suse.com/security/cve/CVE-2020-36516/" source="CVE"/>
		<reference ref_id="CVE-2022-36946" ref_url="https://www.suse.com/security/cve/CVE-2022-36946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012117.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_111 fixes several issues.

The following security issues were fixed:
- CVE-2020-36516: Fixed an off-path attack via mixed IPID assignment method with the hash-based IPID assignment policy to inject data into a victim's TCP session or terminate that session (bsc#1196867).
- CVE-2022-36946: Fixed a remote denial of service attack inside nfqnl_mangle in net/netfilter/nfnetlink_queue.c, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative length (bsc#1201941).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-05"/>
	<updated date="2022-09-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196867">SUSE bug 1196867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201941">SUSE bug 1201941</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36516/">CVE-2020-36516</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36946/">CVE-2022-36946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720991" comment="kernel-default 4.12.14-150100.197.111 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719210" comment="kernel-livepatch-4_12_14-150100_197_111-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009709564" comment="kernel-livepatch-4_12_14-150100_197_111-default-7-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138679" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1196867" ref_url="https://bugzilla.suse.com/1196867" source="BUGZILLA"/>
		<reference ref_id="1201941" ref_url="https://bugzilla.suse.com/1201941" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36516" ref_url="https://www.suse.com/security/cve/CVE-2020-36516/" source="CVE"/>
		<reference ref_id="CVE-2022-36946" ref_url="https://www.suse.com/security/cve/CVE-2022-36946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012117.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_114 fixes several issues.

The following security issues were fixed:
- CVE-2020-36516: Fixed an off-path attack via mixed IPID assignment method with the hash-based IPID assignment policy to inject data into a victim's TCP session or terminate that session (bsc#1196867).
- CVE-2022-36946: Fixed a remote denial of service attack inside nfqnl_mangle in net/netfilter/nfnetlink_queue.c, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative length (bsc#1201941).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-05"/>
	<updated date="2022-09-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196867">SUSE bug 1196867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201941">SUSE bug 1201941</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36516/">CVE-2020-36516</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36946/">CVE-2022-36946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720992" comment="kernel-default 4.12.14-150100.197.114 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719211" comment="kernel-livepatch-4_12_14-150100_197_114-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009709565" comment="kernel-livepatch-4_12_14-150100_197_114-default-4-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138680" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1196867" ref_url="https://bugzilla.suse.com/1196867" source="BUGZILLA"/>
		<reference ref_id="1201941" ref_url="https://bugzilla.suse.com/1201941" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36516" ref_url="https://www.suse.com/security/cve/CVE-2020-36516/" source="CVE"/>
		<reference ref_id="CVE-2022-36946" ref_url="https://www.suse.com/security/cve/CVE-2022-36946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012117.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_117 fixes several issues.

The following security issues were fixed:
- CVE-2020-36516: Fixed an off-path attack via mixed IPID assignment method with the hash-based IPID assignment policy to inject data into a victim's TCP session or terminate that session (bsc#1196867).
- CVE-2022-36946: Fixed a remote denial of service attack inside nfqnl_mangle in net/netfilter/nfnetlink_queue.c, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative length (bsc#1201941).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-05"/>
	<updated date="2022-09-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196867">SUSE bug 1196867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201941">SUSE bug 1201941</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36516/">CVE-2020-36516</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36946/">CVE-2022-36946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720993" comment="kernel-default 4.12.14-150100.197.117 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719212" comment="kernel-livepatch-4_12_14-150100_197_117-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009709566" comment="kernel-livepatch-4_12_14-150100_197_117-default-2-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138681" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1196867" ref_url="https://bugzilla.suse.com/1196867" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36516" ref_url="https://www.suse.com/security/cve/CVE-2020-36516/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012080.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_120 fixes one issue.

The following security issue was fixed:
- CVE-2020-36516: Fixed an off-path attack via mixed IPID assignment method with the hash-based IPID assignment policy to inject data into a victim's TCP session or terminate that session (bsc#1196867).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-05"/>
	<updated date="2022-09-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196867">SUSE bug 1196867</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36516/">CVE-2020-36516</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720994" comment="kernel-default 4.12.14-150100.197.120 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719213" comment="kernel-livepatch-4_12_14-150100_197_120-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009709567" comment="kernel-livepatch-4_12_14-150100_197_120-default-2-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138682" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199695" ref_url="https://bugzilla.suse.com/1199695" source="BUGZILLA"/>
		<reference ref_id="1200057" ref_url="https://bugzilla.suse.com/1200057" source="BUGZILLA"/>
		<reference ref_id="1203116" ref_url="https://bugzilla.suse.com/1203116" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1652" ref_url="https://www.suse.com/security/cve/CVE-2022-1652/" source="CVE"/>
		<reference ref_id="CVE-2022-29581" ref_url="https://www.suse.com/security/cve/CVE-2022-29581/" source="CVE"/>
		<reference ref_id="CVE-2022-39188" ref_url="https://www.suse.com/security/cve/CVE-2022-39188/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012358.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_105 fixes several issues.

The following security issues were fixed:

- CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#1203116).
- CVE-2022-29581: Fixed an improper Update of Reference Count vulnerability in net/sched that causes privilege escalation to root (bsc#1199695).
- CVE-2022-1652: Fixed a use-after-free in bad_flp_intr (bsc#1200057).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-24"/>
	<updated date="2022-09-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199695">SUSE bug 1199695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200057">SUSE bug 1200057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203116">SUSE bug 1203116</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1652/">CVE-2022-1652</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29581/">CVE-2022-29581</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-39188/">CVE-2022-39188</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720989" comment="kernel-default 4.12.14-197.105 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719208" comment="kernel-livepatch-4_12_14-197_105-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009714449" comment="kernel-livepatch-4_12_14-197_105-default-10-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138683" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199695" ref_url="https://bugzilla.suse.com/1199695" source="BUGZILLA"/>
		<reference ref_id="1200057" ref_url="https://bugzilla.suse.com/1200057" source="BUGZILLA"/>
		<reference ref_id="1203116" ref_url="https://bugzilla.suse.com/1203116" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1652" ref_url="https://www.suse.com/security/cve/CVE-2022-1652/" source="CVE"/>
		<reference ref_id="CVE-2022-29581" ref_url="https://www.suse.com/security/cve/CVE-2022-29581/" source="CVE"/>
		<reference ref_id="CVE-2022-39188" ref_url="https://www.suse.com/security/cve/CVE-2022-39188/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012358.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_111 fixes several issues.

The following security issues were fixed:

- CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#1203116).
- CVE-2022-29581: Fixed an improper Update of Reference Count vulnerability in net/sched that causes privilege escalation to root (bsc#1199695).
- CVE-2022-1652: Fixed a use-after-free in bad_flp_intr (bsc#1200057).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-24"/>
	<updated date="2022-09-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199695">SUSE bug 1199695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200057">SUSE bug 1200057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203116">SUSE bug 1203116</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1652/">CVE-2022-1652</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29581/">CVE-2022-29581</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-39188/">CVE-2022-39188</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720991" comment="kernel-default 4.12.14-150100.197.111 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719210" comment="kernel-livepatch-4_12_14-150100_197_111-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009714451" comment="kernel-livepatch-4_12_14-150100_197_111-default-8-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138684" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199695" ref_url="https://bugzilla.suse.com/1199695" source="BUGZILLA"/>
		<reference ref_id="1203116" ref_url="https://bugzilla.suse.com/1203116" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29581" ref_url="https://www.suse.com/security/cve/CVE-2022-29581/" source="CVE"/>
		<reference ref_id="CVE-2022-39188" ref_url="https://www.suse.com/security/cve/CVE-2022-39188/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012359.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_114 fixes several issues.

The following security issues were fixed:

- CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#1203116).
- CVE-2022-29581: Fixed an improper Update of Reference Count vulnerability in net/sched that causes privilege escalation to root (bsc#1199695).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-24"/>
	<updated date="2022-09-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199695">SUSE bug 1199695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203116">SUSE bug 1203116</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29581/">CVE-2022-29581</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-39188/">CVE-2022-39188</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720992" comment="kernel-default 4.12.14-150100.197.114 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719211" comment="kernel-livepatch-4_12_14-150100_197_114-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009714452" comment="kernel-livepatch-4_12_14-150100_197_114-default-5-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138685" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199695" ref_url="https://bugzilla.suse.com/1199695" source="BUGZILLA"/>
		<reference ref_id="1203116" ref_url="https://bugzilla.suse.com/1203116" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29581" ref_url="https://www.suse.com/security/cve/CVE-2022-29581/" source="CVE"/>
		<reference ref_id="CVE-2022-39188" ref_url="https://www.suse.com/security/cve/CVE-2022-39188/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012359.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_117 fixes several issues.

The following security issues were fixed:

- CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#1203116).
- CVE-2022-29581: Fixed an improper Update of Reference Count vulnerability in net/sched that causes privilege escalation to root (bsc#1199695).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-24"/>
	<updated date="2022-09-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199695">SUSE bug 1199695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203116">SUSE bug 1203116</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29581/">CVE-2022-29581</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-39188/">CVE-2022-39188</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720993" comment="kernel-default 4.12.14-150100.197.117 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719212" comment="kernel-livepatch-4_12_14-150100_197_117-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009714453" comment="kernel-livepatch-4_12_14-150100_197_117-default-3-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138686" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199695" ref_url="https://bugzilla.suse.com/1199695" source="BUGZILLA"/>
		<reference ref_id="1203116" ref_url="https://bugzilla.suse.com/1203116" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29581" ref_url="https://www.suse.com/security/cve/CVE-2022-29581/" source="CVE"/>
		<reference ref_id="CVE-2022-39188" ref_url="https://www.suse.com/security/cve/CVE-2022-39188/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012359.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_120 fixes several issues.

The following security issues were fixed:

- CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#1203116).
- CVE-2022-29581: Fixed an improper Update of Reference Count vulnerability in net/sched that causes privilege escalation to root (bsc#1199695).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-24"/>
	<updated date="2022-09-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199695">SUSE bug 1199695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203116">SUSE bug 1203116</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29581/">CVE-2022-29581</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-39188/">CVE-2022-39188</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720994" comment="kernel-default 4.12.14-150100.197.120 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719213" comment="kernel-livepatch-4_12_14-150100_197_120-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009714454" comment="kernel-livepatch-4_12_14-150100_197_120-default-3-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138687" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199695" ref_url="https://bugzilla.suse.com/1199695" source="BUGZILLA"/>
		<reference ref_id="1200057" ref_url="https://bugzilla.suse.com/1200057" source="BUGZILLA"/>
		<reference ref_id="1203116" ref_url="https://bugzilla.suse.com/1203116" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1652" ref_url="https://www.suse.com/security/cve/CVE-2022-1652/" source="CVE"/>
		<reference ref_id="CVE-2022-29581" ref_url="https://www.suse.com/security/cve/CVE-2022-29581/" source="CVE"/>
		<reference ref_id="CVE-2022-39188" ref_url="https://www.suse.com/security/cve/CVE-2022-39188/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012389.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_102 fixes several issues.

The following security issues were fixed:

- CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#1203116).
- CVE-2022-29581: Fixed an improper Update of Reference Count vulnerability in net/sched that causes privilege escalation to root (bsc#1199695).
- CVE-2022-1652: Fixed a use-after-free in bad_flp_intr (bsc#1200057).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-26"/>
	<updated date="2022-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199695">SUSE bug 1199695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200057">SUSE bug 1200057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203116">SUSE bug 1203116</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1652/">CVE-2022-1652</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29581/">CVE-2022-29581</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-39188/">CVE-2022-39188</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720988" comment="kernel-default 4.12.14-197.102 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719207" comment="kernel-livepatch-4_12_14-197_102-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009714448" comment="kernel-livepatch-4_12_14-197_102-default-14-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138688" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199695" ref_url="https://bugzilla.suse.com/1199695" source="BUGZILLA"/>
		<reference ref_id="1200057" ref_url="https://bugzilla.suse.com/1200057" source="BUGZILLA"/>
		<reference ref_id="1203116" ref_url="https://bugzilla.suse.com/1203116" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1652" ref_url="https://www.suse.com/security/cve/CVE-2022-1652/" source="CVE"/>
		<reference ref_id="CVE-2022-29581" ref_url="https://www.suse.com/security/cve/CVE-2022-29581/" source="CVE"/>
		<reference ref_id="CVE-2022-39188" ref_url="https://www.suse.com/security/cve/CVE-2022-39188/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012389.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_108 fixes several issues.

The following security issues were fixed:

- CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#1203116).
- CVE-2022-29581: Fixed an improper Update of Reference Count vulnerability in net/sched that causes privilege escalation to root (bsc#1199695).
- CVE-2022-1652: Fixed a use-after-free in bad_flp_intr (bsc#1200057).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-26"/>
	<updated date="2022-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199695">SUSE bug 1199695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200057">SUSE bug 1200057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203116">SUSE bug 1203116</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1652/">CVE-2022-1652</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29581/">CVE-2022-29581</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-39188/">CVE-2022-39188</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720990" comment="kernel-default 4.12.14-197.108 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719209" comment="kernel-livepatch-4_12_14-197_108-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009714450" comment="kernel-livepatch-4_12_14-197_108-default-9-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138689" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1177440" ref_url="https://bugzilla.suse.com/1177440" source="BUGZILLA"/>
		<reference ref_id="1180153" ref_url="https://bugzilla.suse.com/1180153" source="BUGZILLA"/>
		<reference ref_id="1188944" ref_url="https://bugzilla.suse.com/1188944" source="BUGZILLA"/>
		<reference ref_id="1191881" ref_url="https://bugzilla.suse.com/1191881" source="BUGZILLA"/>
		<reference ref_id="1194535" ref_url="https://bugzilla.suse.com/1194535" source="BUGZILLA"/>
		<reference ref_id="1196616" ref_url="https://bugzilla.suse.com/1196616" source="BUGZILLA"/>
		<reference ref_id="1197158" ref_url="https://bugzilla.suse.com/1197158" source="BUGZILLA"/>
		<reference ref_id="1199482" ref_url="https://bugzilla.suse.com/1199482" source="BUGZILLA"/>
		<reference ref_id="1199665" ref_url="https://bugzilla.suse.com/1199665" source="BUGZILLA"/>
		<reference ref_id="1201019" ref_url="https://bugzilla.suse.com/1201019" source="BUGZILLA"/>
		<reference ref_id="1201420" ref_url="https://bugzilla.suse.com/1201420" source="BUGZILLA"/>
		<reference ref_id="1201705" ref_url="https://bugzilla.suse.com/1201705" source="BUGZILLA"/>
		<reference ref_id="1201726" ref_url="https://bugzilla.suse.com/1201726" source="BUGZILLA"/>
		<reference ref_id="1201948" ref_url="https://bugzilla.suse.com/1201948" source="BUGZILLA"/>
		<reference ref_id="1202096" ref_url="https://bugzilla.suse.com/1202096" source="BUGZILLA"/>
		<reference ref_id="1202097" ref_url="https://bugzilla.suse.com/1202097" source="BUGZILLA"/>
		<reference ref_id="1202154" ref_url="https://bugzilla.suse.com/1202154" source="BUGZILLA"/>
		<reference ref_id="1202335" ref_url="https://bugzilla.suse.com/1202335" source="BUGZILLA"/>
		<reference ref_id="1202346" ref_url="https://bugzilla.suse.com/1202346" source="BUGZILLA"/>
		<reference ref_id="1202347" ref_url="https://bugzilla.suse.com/1202347" source="BUGZILLA"/>
		<reference ref_id="1202393" ref_url="https://bugzilla.suse.com/1202393" source="BUGZILLA"/>
		<reference ref_id="1202396" ref_url="https://bugzilla.suse.com/1202396" source="BUGZILLA"/>
		<reference ref_id="1202672" ref_url="https://bugzilla.suse.com/1202672" source="BUGZILLA"/>
		<reference ref_id="1202897" ref_url="https://bugzilla.suse.com/1202897" source="BUGZILLA"/>
		<reference ref_id="1202898" ref_url="https://bugzilla.suse.com/1202898" source="BUGZILLA"/>
		<reference ref_id="1203098" ref_url="https://bugzilla.suse.com/1203098" source="BUGZILLA"/>
		<reference ref_id="1203107" ref_url="https://bugzilla.suse.com/1203107" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36516" ref_url="https://www.suse.com/security/cve/CVE-2020-36516/" source="CVE"/>
		<reference ref_id="CVE-2021-4203" ref_url="https://www.suse.com/security/cve/CVE-2021-4203/" source="CVE"/>
		<reference ref_id="CVE-2022-1012" ref_url="https://www.suse.com/security/cve/CVE-2022-1012/" source="CVE"/>
		<reference ref_id="CVE-2022-20368" ref_url="https://www.suse.com/security/cve/CVE-2022-20368/" source="CVE"/>
		<reference ref_id="CVE-2022-20369" ref_url="https://www.suse.com/security/cve/CVE-2022-20369/" source="CVE"/>
		<reference ref_id="CVE-2022-21385" ref_url="https://www.suse.com/security/cve/CVE-2022-21385/" source="CVE"/>
		<reference ref_id="CVE-2022-2588" ref_url="https://www.suse.com/security/cve/CVE-2022-2588/" source="CVE"/>
		<reference ref_id="CVE-2022-26373" ref_url="https://www.suse.com/security/cve/CVE-2022-26373/" source="CVE"/>
		<reference ref_id="CVE-2022-2639" ref_url="https://www.suse.com/security/cve/CVE-2022-2639/" source="CVE"/>
		<reference ref_id="CVE-2022-2663" ref_url="https://www.suse.com/security/cve/CVE-2022-2663/" source="CVE"/>
		<reference ref_id="CVE-2022-29581" ref_url="https://www.suse.com/security/cve/CVE-2022-29581/" source="CVE"/>
		<reference ref_id="CVE-2022-2977" ref_url="https://www.suse.com/security/cve/CVE-2022-2977/" source="CVE"/>
		<reference ref_id="CVE-2022-3028" ref_url="https://www.suse.com/security/cve/CVE-2022-3028/" source="CVE"/>
		<reference ref_id="CVE-2022-36879" ref_url="https://www.suse.com/security/cve/CVE-2022-36879/" source="CVE"/>
		<reference ref_id="CVE-2022-39188" ref_url="https://www.suse.com/security/cve/CVE-2022-39188/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012386.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-36516: Fixed an issue in the mixed IPID assignment method where an attacker was able to inject data into or terminate a victim's TCP session (bnc#1196616).
- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bnc#1194535).
- CVE-2022-1012: Fixed a memory leak problem that was found in the TCP source port generation algorithm in net/ipv4/tcp.c (bnc#1199482).
- CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bsc#1202346).
- CVE-2022-20369: Fixed out of bounds write in v4l2_m2m_querybuf of v4l2-mem2mem.c (bnc#1202347).
- CVE-2022-21385: Fixed a flaw in net_rds_alloc_sgs() that allowed unprivileged local users to crash the machine (bnc#1202897).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-26373: Fixed non-transparent sharing of return predictor targets between contexts in some Intel Processors (bnc#1201726).
- CVE-2022-2639: Fixed an integer coercion error that was found in the openvswitch kernel module (bnc#1202154).
- CVE-2022-2663: Fixed an issue that was found in nf_conntrack_irc where the message handling could be confused and incorrectly matches the message (bnc#1202097).
- CVE-2022-29581: Fixed improper update of reference count vulnerability in net/sched that allowed a local attacker to cause privilege escalation to root (bnc#1199665).
- CVE-2022-2977: Fixed reference counting for struct tpm_chip (bsc#1202672).
- CVE-2022-3028: Fixed race condition that was found in the IP framework for transforming packets (XFRM subsystem) (bnc#1202898).
- CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bnc#1201948).
- CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has stale TLB entries (bnc#1203107).

The following non-security bugs were fixed:

- rpm: Fix parsing of rpm/macros.kernel-source on SLE12 (bsc#1201019).
- cifs: fix error paths in cifs_tree_connect() (bsc#1177440).
- cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (bsc#1188944).
- cifs: report error instead of invalid when revalidating a dentry fails (bsc#1177440).
- cifs: skip trailing separators of prefix paths (bsc#1188944).
- kernel-obs-build: include qemu_fw_cfg (boo#1201705)
- lightnvm: Remove lightnvm implemenation (bsc#1191881 bsc#1201420 ZDI-CAN-17325).
- md/bitmap: do not set sb values if can't pass sanity check (bsc#1197158).
- mm/rmap.c: do not reuse anon_vma if we just want a copy (git-fixes, bsc#1203098).
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (git-fixes, bsc#1203098). 
- net_sched: cls_route: disallow handle of 0 (bsc#1202393).
- net_sched: cls_route: disallow handle of 0 (bsc#1202393).
- objtool: Add --backtrace support (bsc#1202396).
- objtool: Add support for intra-function calls (bsc#1202396).
- objtool: Allow no-op CFI ops in alternatives (bsc#1202396).
- objtool: Convert insn type to enum (bsc#1202396).
- objtool: Do not use ignore flag for fake jumps (bsc#1202396).
- objtool: Fix !CFI insn_state propagation (bsc#1202396).
- objtool: Fix ORC vs alternatives (bsc#1202396).
- objtool: Fix sibling call detection (bsc#1202396).
- objtool: Make handle_insn_ops() unconditional (bsc#1202396).
- objtool: Remove INSN_STACK (bsc#1202396).
- objtool: Remove check preventing branches within alternative (bsc#1202396).
- objtool: Rename elf_open() to prevent conflict with libelf from elftoolchain (bsc#1202396).
- objtool: Rename struct cfi_state (bsc#1202396).
- objtool: Rework allocating stack_ops on decode (bsc#1202396).
- objtool: Rewrite alt-&gt;skip_orig (bsc#1202396).
- objtool: Set insn-&gt;func for alternatives (bsc#1202396).
- objtool: Support conditional retpolines (bsc#1202396).
- objtool: Support multiple stack_op per instruction (bsc#1202396).
- objtool: Track original function across branches (bsc#1202396).
- objtool: Uniquely identify alternative instruction groups (bsc#1202396).
- objtool: Use Elf_Scn typedef instead of assuming struct name (bsc#1202396).
- tcp: add some entropy in __inet_hash_connect() (bsc#1180153 bsc#1202335).
- tcp: change source port randomizarion at connect() time (bsc#1180153 bsc#1202335).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-26"/>
	<updated date="2022-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177440">SUSE bug 1177440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180153">SUSE bug 1180153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188944">SUSE bug 1188944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191881">SUSE bug 1191881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194535">SUSE bug 1194535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196616">SUSE bug 1196616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197158">SUSE bug 1197158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199482">SUSE bug 1199482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199665">SUSE bug 1199665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201019">SUSE bug 1201019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201420">SUSE bug 1201420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201705">SUSE bug 1201705</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201726">SUSE bug 1201726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201948">SUSE bug 1201948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202096">SUSE bug 1202096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202097">SUSE bug 1202097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202154">SUSE bug 1202154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202335">SUSE bug 1202335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202346">SUSE bug 1202346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202347">SUSE bug 1202347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202393">SUSE bug 1202393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202396">SUSE bug 1202396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202672">SUSE bug 1202672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202897">SUSE bug 1202897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202898">SUSE bug 1202898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203098">SUSE bug 1203098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203107">SUSE bug 1203107</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36516/">CVE-2020-36516</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4203/">CVE-2021-4203</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1012/">CVE-2022-1012</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20368/">CVE-2022-20368</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20369/">CVE-2022-20369</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21385/">CVE-2022-21385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2588/">CVE-2022-2588</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26373/">CVE-2022-26373</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-2639/">CVE-2022-2639</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-2663/">CVE-2022-2663</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29581/">CVE-2022-29581</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2977/">CVE-2022-2977</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3028/">CVE-2022-3028</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36879/">CVE-2022-36879</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-39188/">CVE-2022-39188</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710874" comment="kernel-default-livepatch-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710875" comment="kernel-default-livepatch-devel-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710876" comment="kernel-livepatch-4_12_14-150100_197_123-default-1-150100.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138690" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1124431" ref_url="https://bugzilla.suse.com/1124431" source="BUGZILLA"/>
		<reference ref_id="1167162" ref_url="https://bugzilla.suse.com/1167162" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1179599" ref_url="https://bugzilla.suse.com/1179599" source="BUGZILLA"/>
		<reference ref_id="1184804" ref_url="https://bugzilla.suse.com/1184804" source="BUGZILLA"/>
		<reference ref_id="1185377" ref_url="https://bugzilla.suse.com/1185377" source="BUGZILLA"/>
		<reference ref_id="1186207" ref_url="https://bugzilla.suse.com/1186207" source="BUGZILLA"/>
		<reference ref_id="1186222" ref_url="https://bugzilla.suse.com/1186222" source="BUGZILLA"/>
		<reference ref_id="1187167" ref_url="https://bugzilla.suse.com/1187167" source="BUGZILLA"/>
		<reference ref_id="1189305" ref_url="https://bugzilla.suse.com/1189305" source="BUGZILLA"/>
		<reference ref_id="1189841" ref_url="https://bugzilla.suse.com/1189841" source="BUGZILLA"/>
		<reference ref_id="1190358" ref_url="https://bugzilla.suse.com/1190358" source="BUGZILLA"/>
		<reference ref_id="1190428" ref_url="https://bugzilla.suse.com/1190428" source="BUGZILLA"/>
		<reference ref_id="1191229" ref_url="https://bugzilla.suse.com/1191229" source="BUGZILLA"/>
		<reference ref_id="1191241" ref_url="https://bugzilla.suse.com/1191241" source="BUGZILLA"/>
		<reference ref_id="1191384" ref_url="https://bugzilla.suse.com/1191384" source="BUGZILLA"/>
		<reference ref_id="1191731" ref_url="https://bugzilla.suse.com/1191731" source="BUGZILLA"/>
		<reference ref_id="1192032" ref_url="https://bugzilla.suse.com/1192032" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="1192740" ref_url="https://bugzilla.suse.com/1192740" source="BUGZILLA"/>
		<reference ref_id="1192845" ref_url="https://bugzilla.suse.com/1192845" source="BUGZILLA"/>
		<reference ref_id="1192847" ref_url="https://bugzilla.suse.com/1192847" source="BUGZILLA"/>
		<reference ref_id="1192877" ref_url="https://bugzilla.suse.com/1192877" source="BUGZILLA"/>
		<reference ref_id="1192946" ref_url="https://bugzilla.suse.com/1192946" source="BUGZILLA"/>
		<reference ref_id="1193306" ref_url="https://bugzilla.suse.com/1193306" source="BUGZILLA"/>
		<reference ref_id="1193440" ref_url="https://bugzilla.suse.com/1193440" source="BUGZILLA"/>
		<reference ref_id="1193442" ref_url="https://bugzilla.suse.com/1193442" source="BUGZILLA"/>
		<reference ref_id="1193575" ref_url="https://bugzilla.suse.com/1193575" source="BUGZILLA"/>
		<reference ref_id="1193669" ref_url="https://bugzilla.suse.com/1193669" source="BUGZILLA"/>
		<reference ref_id="1193727" ref_url="https://bugzilla.suse.com/1193727" source="BUGZILLA"/>
		<reference ref_id="1193731" ref_url="https://bugzilla.suse.com/1193731" source="BUGZILLA"/>
		<reference ref_id="1193767" ref_url="https://bugzilla.suse.com/1193767" source="BUGZILLA"/>
		<reference ref_id="1193861" ref_url="https://bugzilla.suse.com/1193861" source="BUGZILLA"/>
		<reference ref_id="1193864" ref_url="https://bugzilla.suse.com/1193864" source="BUGZILLA"/>
		<reference ref_id="1193867" ref_url="https://bugzilla.suse.com/1193867" source="BUGZILLA"/>
		<reference ref_id="1193927" ref_url="https://bugzilla.suse.com/1193927" source="BUGZILLA"/>
		<reference ref_id="1194001" ref_url="https://bugzilla.suse.com/1194001" source="BUGZILLA"/>
		<reference ref_id="1194048" ref_url="https://bugzilla.suse.com/1194048" source="BUGZILLA"/>
		<reference ref_id="1194087" ref_url="https://bugzilla.suse.com/1194087" source="BUGZILLA"/>
		<reference ref_id="1194227" ref_url="https://bugzilla.suse.com/1194227" source="BUGZILLA"/>
		<reference ref_id="1194302" ref_url="https://bugzilla.suse.com/1194302" source="BUGZILLA"/>
		<reference ref_id="1194516" ref_url="https://bugzilla.suse.com/1194516" source="BUGZILLA"/>
		<reference ref_id="1194529" ref_url="https://bugzilla.suse.com/1194529" source="BUGZILLA"/>
		<reference ref_id="1194880" ref_url="https://bugzilla.suse.com/1194880" source="BUGZILLA"/>
		<reference ref_id="1194888" ref_url="https://bugzilla.suse.com/1194888" source="BUGZILLA"/>
		<reference ref_id="1194985" ref_url="https://bugzilla.suse.com/1194985" source="BUGZILLA"/>
		<reference ref_id="1195166" ref_url="https://bugzilla.suse.com/1195166" source="BUGZILLA"/>
		<reference ref_id="1195254" ref_url="https://bugzilla.suse.com/1195254" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-25020" ref_url="https://www.suse.com/security/cve/CVE-2018-25020/" source="CVE"/>
		<reference ref_id="CVE-2019-15126" ref_url="https://www.suse.com/security/cve/CVE-2019-15126/" source="CVE"/>
		<reference ref_id="CVE-2020-27820" ref_url="https://www.suse.com/security/cve/CVE-2020-27820/" source="CVE"/>
		<reference ref_id="CVE-2021-0920" ref_url="https://www.suse.com/security/cve/CVE-2021-0920/" source="CVE"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="CVE-2021-28711" ref_url="https://www.suse.com/security/cve/CVE-2021-28711/" source="CVE"/>
		<reference ref_id="CVE-2021-28712" ref_url="https://www.suse.com/security/cve/CVE-2021-28712/" source="CVE"/>
		<reference ref_id="CVE-2021-28713" ref_url="https://www.suse.com/security/cve/CVE-2021-28713/" source="CVE"/>
		<reference ref_id="CVE-2021-28714" ref_url="https://www.suse.com/security/cve/CVE-2021-28714/" source="CVE"/>
		<reference ref_id="CVE-2021-28715" ref_url="https://www.suse.com/security/cve/CVE-2021-28715/" source="CVE"/>
		<reference ref_id="CVE-2021-33098" ref_url="https://www.suse.com/security/cve/CVE-2021-33098/" source="CVE"/>
		<reference ref_id="CVE-2021-3564" ref_url="https://www.suse.com/security/cve/CVE-2021-3564/" source="CVE"/>
		<reference ref_id="CVE-2021-39648" ref_url="https://www.suse.com/security/cve/CVE-2021-39648/" source="CVE"/>
		<reference ref_id="CVE-2021-39657" ref_url="https://www.suse.com/security/cve/CVE-2021-39657/" source="CVE"/>
		<reference ref_id="CVE-2021-4002" ref_url="https://www.suse.com/security/cve/CVE-2021-4002/" source="CVE"/>
		<reference ref_id="CVE-2021-4083" ref_url="https://www.suse.com/security/cve/CVE-2021-4083/" source="CVE"/>
		<reference ref_id="CVE-2021-4135" ref_url="https://www.suse.com/security/cve/CVE-2021-4135/" source="CVE"/>
		<reference ref_id="CVE-2021-4149" ref_url="https://www.suse.com/security/cve/CVE-2021-4149/" source="CVE"/>
		<reference ref_id="CVE-2021-4197" ref_url="https://www.suse.com/security/cve/CVE-2021-4197/" source="CVE"/>
		<reference ref_id="CVE-2021-4202" ref_url="https://www.suse.com/security/cve/CVE-2021-4202/" source="CVE"/>
		<reference ref_id="CVE-2021-43975" ref_url="https://www.suse.com/security/cve/CVE-2021-43975/" source="CVE"/>
		<reference ref_id="CVE-2021-43976" ref_url="https://www.suse.com/security/cve/CVE-2021-43976/" source="CVE"/>
		<reference ref_id="CVE-2021-44733" ref_url="https://www.suse.com/security/cve/CVE-2021-44733/" source="CVE"/>
		<reference ref_id="CVE-2021-45095" ref_url="https://www.suse.com/security/cve/CVE-2021-45095/" source="CVE"/>
		<reference ref_id="CVE-2021-45486" ref_url="https://www.suse.com/security/cve/CVE-2021-45486/" source="CVE"/>
		<reference ref_id="CVE-2022-0322" ref_url="https://www.suse.com/security/cve/CVE-2022-0322/" source="CVE"/>
		<reference ref_id="CVE-2022-0330" ref_url="https://www.suse.com/security/cve/CVE-2022-0330/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010214.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254).
- CVE-2022-0330: Fixed flush TLBs before releasing backing store (bsc#1194880).
- CVE-2021-45486: Fixed an information leak because the hash table is very small in net/ipv4/route.c (bnc#1194087).
- CVE-2021-45095: Fixed refcount leak in pep_sock_accept in net/phonet/pep.c (bnc#1193867).
- CVE-2021-44733: Fixed a use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem, that could have occured because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object (bnc#1193767).
- CVE-2021-43976: Fixed a flaw that could allow an attacker (who can connect a crafted USB device) to cause a denial of service. (bnc#1192847)
- CVE-2021-43975: Fixed a flaw in hw_atl_utils_fw_rpc_wait that could allow an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. (bsc#1192845)
- CVE-2021-4202: Fixed NFC race condition by adding NCI_UNREG flag (bsc#1194529).
- CVE-2021-4197: Use cgroup open-time credentials for process migraton perm checks (bsc#1194302).
- CVE-2021-4159: Fixed kernel ptr leak vulnerability via BPF in coerce_reg_to_size (bsc#1194227).
- CVE-2021-4149: Fixed btrfs unlock newly allocated extent buffer after error (bsc#1194001).
- CVE-2021-4135: Fixed zero-initialize memory inside netdevsim for new map's value in function nsim_bpf_map_alloc (bsc#1193927).
- CVE-2021-4083: Fixed a read-after-free memory flaw inside the garbage collection for Unix domain socket file handlers when users call close() and fget() simultaneouslyand can potentially trigger a race condition (bnc#1193727).
- CVE-2021-4002: Fixed incorrect TLBs flush in hugetlbfs after huge_pmd_unshare (bsc#1192946).
- CVE-2021-39657: Fixed out of bounds read due to a missing bounds check in ufshcd_eh_device_reset_handler of ufshcd.c. This could lead to local information disclosure with System execution privileges needed (bnc#1193864).
- CVE-2021-39648: Fixed possible disclosure of kernel heap memory due to a race condition in gadget_dev_desc_UDC_show of configfs.c. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1193861). 
- CVE-2021-3564: Fixed double-free memory corruption in the Linux kernel HCI device initialization subsystem that could have been used by attaching malicious HCI TTY Bluetooth devices. A local user could use this flaw to crash the system (bnc#1186207).
- CVE-2021-33098: Fixed a potential denial of service in Intel(R) Ethernet ixgbe driver due to improper input validation. (bsc#1192877)
- CVE-2021-28715: Fixed issue with xen/netback to do not queue unlimited number of packages (XSA-392) (bsc#1193442).
- CVE-2021-28714: Fixed issue with xen/netback to handle rx queue stall detection (XSA-392) (bsc#1193442).
- CVE-2021-28713: Fixed issue with xen/console to harden hvc_xen against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-28712: Fixed issue with xen/netfront to harden netfront against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-28711: Fixed issue with xen/blkfront to harden blkfront against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-0935: Fixed possible out of bounds write in ip6_xmit of ip6_output.c due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192032).
- CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1193731).
- CVE-2020-27820: Fixed a vulnerability where a use-after-frees in nouveau's postclose() handler could happen if removing device (bsc#1179599).
- CVE-2019-15126: Fixed a vulnerability in Broadcom and Cypress Wi-Fi chips, used in RPi family of devices aka 'Kr00k'. (bsc#1167162)
- CVE-2018-25020: Fixed an overflow in the BPF subsystem due to a mishandling of a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions. This affects kernel/bpf/core.c and net/core/filter.c (bnc#1193575).

The following non-security bugs were fixed:

- Bluetooth: fix the erroneous flush_work() order (git-fixes).
- Build: Add obsolete_rebuilds_subpackage (boo#1172073 bsc#1191731).
- ICMPv6: Add ICMPv6 Parameter Problem, code 3 definition (bsc#1191241 bsc#1195166).
- IPv6: reply ICMP error if the first fragment do not include all headers (bsc#1191241).
- elfcore: fix building with clang (bsc#1169514).
- hv_netvsc: Set needed_headroom according to VF (bsc#1193506).
- ipv6/netfilter: Discard first fragment not including all headers (bsc#1191241 bsc#1195166).
- kernel-*-subpackage: Add dependency on kernel scriptlets (bsc#1192740).
- kernel-binary.spec.in Stop templating the scriptlets for subpackages (bsc#1190358).
- kernel-binary.spec.in: add zstd to BuildRequires if used
- kernel-binary.spec.in: make sure zstd is supported by kmod if used
- kernel-binary.spec: Check for no kernel signing certificates. Also remove unused variable.
- kernel-binary.spec: Define $image as rpm macro (bsc#1189841).
- kernel-binary.spec: Do not fail silently when KMP is empty (bsc#1190358). Copy the code from kernel-module-subpackage that deals with empty KMPs.
- kernel-binary.spec: Do not sign kernel when no key provided (bsc#1187167).
- kernel-binary.spec: Fix kernel-default-base scriptlets after packaging merge.
- kernel-binary.spec: Require dwarves for kernel-binary-devel when BTF is enabled (jsc#SLE-17288).
- kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as well.
- kernel-cert-subpackage: Fix certificate location in scriptlets (bsc#1189841). 
- kernel-source.spec: install-kernel-tools also required on 15.4
- kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229). The semantic changed in an incompatible way so invoking the macro now causes a build failure.
- kprobes: Limit max data_size of the kretprobe instances (bsc#1193669).
- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- memstick: rtsx_usb_ms: fix UAF (bsc#1194516).
- moxart: fix potential use-after-free on remove path (bsc#1194516).
- net, xdp: Introduce xdp_init_buff utility routine (bsc#1193506).
- net, xdp: Introduce xdp_prepare_buff utility routine (bsc#1193506).
- net: Using proper atomic helper (bsc#1186222).
- net: ipv6: Discard next-hop MTU less than minimum link MTU (bsc#1191241).
- net: mana: Add RX fencing (bsc#1193506).
- net: mana: Add XDP support (bsc#1193506).
- net: mana: Allow setting the number of queues while the NIC is down (bsc#1193506).
- net: mana: Fix spelling mistake 'calledd' -&gt; 'called' (bsc#1193506).
- net: mana: Fix the netdev_err()'s vPort argument in mana_init_port() (bsc#1193506).
- net: mana: Improve the HWC error handling (bsc#1193506).
- net: mana: Support hibernation and kexec (bsc#1193506).
- net: mana: Use kcalloc() instead of kzalloc() (bsc#1193506).
- objtool: Support Clang non-section symbols in ORC generation (bsc#1169514).
- post.sh: detect /usr mountpoint too
- recordmcount.pl: fix typo in s390 mcount regex (bsc#1192267).
- recordmcount.pl: look for jgnop instruction as well as bcrl on s390 (bsc#1192267).
- rpm/kernel-binary.spec.in: Use kmod-zstd provide. This makes it possible to use kmod with ZSTD support on non-Tumbleweed.
- rpm/kernel-binary.spec.in: avoid conflicting suse-release suse-release had arbitrary values in staging, we can't use it for dependencies. The filesystem one has to be enough (boo#1184804).
- rpm/kernel-binary.spec.in: do not strip vmlinux again (bsc#1193306). 
- rpm/kernel-binary.spec: Use only non-empty certificates.
- rpm/kernel-obs-build.spec.in: make builds reproducible (bsc#1189305).
- rpm/kernel-source.rpmlintrc: ignore new include/config files. 
- rpm/kernel-source.spec.in: do some more for vanilla_only.
- rpm: Abolish image suffix (bsc#1189841).
- rpm: Abolish scritplet templating (bsc#1189841). Outsource kernel-binary and KMP scriptlets to suse-module-tools. 
- rpm: Define $certs as rpm macro (bsc#1189841). 
- rpm: Fold kernel-devel and kernel-source scriptlets into spec files (bsc#1189841). 
- rpm: fix kmp install path
- rpm: use _rpmmacrodir (boo#1191384)
- tty: hvc: replace BUG_ON() with negative return value.
- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- x86/xen: Mark cpu_bringup_and_idle() as dead_end_function (bsc#1169514).
- xen/blkfront: do not take local copy of a request from the ring page (git-fixes).
- xen/blkfront: do not trust the backend response data blindly (git-fixes).
- xen/blkfront: read response from backend only once (git-fixes).
- xen/netfront: disentangle tx_skb_freelist (git-fixes).
- xen/netfront: do not read data from request on the ring page (git-fixes).
- xen/netfront: do not trust the backend response data blindly (git-fixes).
- xen/netfront: read response from backend only once (git-fixes).
- xen: sync include/xen/interface/io/ring.h with Xen's newest version (git-fixes).
- xfrm: fix MTU regression (bsc#1185377, bsc#1194048).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-10"/>
	<updated date="2022-02-10"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124431">SUSE bug 1124431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167162">SUSE bug 1167162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179599">SUSE bug 1179599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184804">SUSE bug 1184804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185377">SUSE bug 1185377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186207">SUSE bug 1186207</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186222">SUSE bug 1186222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187167">SUSE bug 1187167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189305">SUSE bug 1189305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189841">SUSE bug 1189841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190358">SUSE bug 1190358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190428">SUSE bug 1190428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191229">SUSE bug 1191229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191241">SUSE bug 1191241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191384">SUSE bug 1191384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191731">SUSE bug 1191731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192032">SUSE bug 1192032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192740">SUSE bug 1192740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192845">SUSE bug 1192845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192847">SUSE bug 1192847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192877">SUSE bug 1192877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192946">SUSE bug 1192946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193306">SUSE bug 1193306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193440">SUSE bug 1193440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193442">SUSE bug 1193442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193575">SUSE bug 1193575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193669">SUSE bug 1193669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193727">SUSE bug 1193727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193731">SUSE bug 1193731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193767">SUSE bug 1193767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193861">SUSE bug 1193861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193864">SUSE bug 1193864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193867">SUSE bug 1193867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193927">SUSE bug 1193927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194001">SUSE bug 1194001</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194048">SUSE bug 1194048</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194087">SUSE bug 1194087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194227">SUSE bug 1194227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194302">SUSE bug 1194302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194516">SUSE bug 1194516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194529">SUSE bug 1194529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194880">SUSE bug 1194880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194888">SUSE bug 1194888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194985">SUSE bug 1194985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195166">SUSE bug 1195166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195254">SUSE bug 1195254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25020/">CVE-2018-25020</cve>
	<cve impact="important" cvss3="3.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15126/">CVE-2019-15126</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-27820/">CVE-2020-27820</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0920/">CVE-2021-0920</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28711/">CVE-2021-28711</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28712/">CVE-2021-28712</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28713/">CVE-2021-28713</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28714/">CVE-2021-28714</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28715/">CVE-2021-28715</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33098/">CVE-2021-33098</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3564/">CVE-2021-3564</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39648/">CVE-2021-39648</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-39657/">CVE-2021-39657</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4002/">CVE-2021-4002</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4083/">CVE-2021-4083</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-4135/">CVE-2021-4135</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4149/">CVE-2021-4149</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-4197/">CVE-2021-4197</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4202/">CVE-2021-4202</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43975/">CVE-2021-43975</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43976/">CVE-2021-43976</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-44733/">CVE-2021-44733</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-45095/">CVE-2021-45095</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-45486/">CVE-2021-45486</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0322/">CVE-2022-0322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0330/">CVE-2022-0330</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667045" comment="kernel-default-livepatch-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667046" comment="kernel-default-livepatch-devel-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667047" comment="kernel-livepatch-4_12_14-197_105-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138691" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1199564" ref_url="https://bugzilla.suse.com/1199564" source="BUGZILLA"/>
		<reference ref_id="1200288" ref_url="https://bugzilla.suse.com/1200288" source="BUGZILLA"/>
		<reference ref_id="1201309" ref_url="https://bugzilla.suse.com/1201309" source="BUGZILLA"/>
		<reference ref_id="1202677" ref_url="https://bugzilla.suse.com/1202677" source="BUGZILLA"/>
		<reference ref_id="1202960" ref_url="https://bugzilla.suse.com/1202960" source="BUGZILLA"/>
		<reference ref_id="1203552" ref_url="https://bugzilla.suse.com/1203552" source="BUGZILLA"/>
		<reference ref_id="1203769" ref_url="https://bugzilla.suse.com/1203769" source="BUGZILLA"/>
		<reference ref_id="1203987" ref_url="https://bugzilla.suse.com/1203987" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-20008" ref_url="https://www.suse.com/security/cve/CVE-2022-20008/" source="CVE"/>
		<reference ref_id="CVE-2022-2503" ref_url="https://www.suse.com/security/cve/CVE-2022-2503/" source="CVE"/>
		<reference ref_id="CVE-2022-32296" ref_url="https://www.suse.com/security/cve/CVE-2022-32296/" source="CVE"/>
		<reference ref_id="CVE-2022-3239" ref_url="https://www.suse.com/security/cve/CVE-2022-3239/" source="CVE"/>
		<reference ref_id="CVE-2022-3303" ref_url="https://www.suse.com/security/cve/CVE-2022-3303/" source="CVE"/>
		<reference ref_id="CVE-2022-41218" ref_url="https://www.suse.com/security/cve/CVE-2022-41218/" source="CVE"/>
		<reference ref_id="CVE-2022-41848" ref_url="https://www.suse.com/security/cve/CVE-2022-41848/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012617.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-20008: Fixed local information disclosure due to possibility to read kernel heap memory via mmc_blk_read_single of block.c (bnc#1199564).
- CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677).
- CVE-2022-32296: Fixed vulnerability where TCP servers were allowed to identify clients by observing what source ports are used (bnc#1200288).
- CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
- CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
- CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
- CVE-2022-41848: Fixed a race condition in drivers/char/pcmcia/synclink_cs.c mgslpc_ioctl and mgslpc_detach (bnc#1203987).

The following non-security bugs were fixed:

- dtb: Do not include sources in src.rpm - refer to kernel-source Same as other kernel binary packages there is no need to carry duplicate sources in dtb packages.
- mkspec: eliminate @NOSOURCE@ macro This should be alsways used with @SOURCES@, just include the content there.
- net: mana: Add rmb after checking owner bits (git-fixes).
- net: mana: Add the Linux MANA PF driver (bnc#1201309, jsc#PED-529).
- x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still be possible to do so that the mitigation can still be disabled on Intel who do not use the return thunks but IBRS.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-22"/>
	<updated date="2022-10-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199564">SUSE bug 1199564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200288">SUSE bug 1200288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201309">SUSE bug 1201309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202677">SUSE bug 1202677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202960">SUSE bug 1202960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203552">SUSE bug 1203552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203769">SUSE bug 1203769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203987">SUSE bug 1203987</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-20008/">CVE-2022-20008</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2503/">CVE-2022-2503</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32296/">CVE-2022-32296</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3239/">CVE-2022-3239</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3303/">CVE-2022-3303</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41218/">CVE-2022-41218</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41848/">CVE-2022-41848</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716958" comment="kernel-default-livepatch-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716959" comment="kernel-default-livepatch-devel-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716960" comment="kernel-livepatch-4_12_14-150100_197_126-default-1-150100.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138692" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1202087" ref_url="https://bugzilla.suse.com/1202087" source="BUGZILLA"/>
		<reference ref_id="1203613" ref_url="https://bugzilla.suse.com/1203613" source="BUGZILLA"/>
		<reference ref_id="1204170" ref_url="https://bugzilla.suse.com/1204170" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33655" ref_url="https://www.suse.com/security/cve/CVE-2021-33655/" source="CVE"/>
		<reference ref_id="CVE-2022-2588" ref_url="https://www.suse.com/security/cve/CVE-2022-2588/" source="CVE"/>
		<reference ref_id="CVE-2022-42703" ref_url="https://www.suse.com/security/cve/CVE-2022-42703/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4024-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012957.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_117 fixes several issues.

The following security issues were fixed:

- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bnc#1204168).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-16"/>
	<updated date="2022-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202087">SUSE bug 1202087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203613">SUSE bug 1203613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204170">SUSE bug 1204170</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33655/">CVE-2021-33655</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2588/">CVE-2022-2588</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42703/">CVE-2022-42703</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720993" comment="kernel-default 4.12.14-150100.197.117 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719212" comment="kernel-livepatch-4_12_14-150100_197_117-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009724943" comment="kernel-livepatch-4_12_14-150100_197_117-default-4-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138693" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1203613" ref_url="https://bugzilla.suse.com/1203613" source="BUGZILLA"/>
		<reference ref_id="1204170" ref_url="https://bugzilla.suse.com/1204170" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2588" ref_url="https://www.suse.com/security/cve/CVE-2022-2588/" source="CVE"/>
		<reference ref_id="CVE-2022-42703" ref_url="https://www.suse.com/security/cve/CVE-2022-42703/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012950.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_120 fixes several issues.

The following security issues were fixed:

- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bnc#1204168).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-16"/>
	<updated date="2022-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203613">SUSE bug 1203613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204170">SUSE bug 1204170</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2588/">CVE-2022-2588</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42703/">CVE-2022-42703</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720994" comment="kernel-default 4.12.14-150100.197.120 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719213" comment="kernel-livepatch-4_12_14-150100_197_120-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009724944" comment="kernel-livepatch-4_12_14-150100_197_120-default-4-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138694" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1202087" ref_url="https://bugzilla.suse.com/1202087" source="BUGZILLA"/>
		<reference ref_id="1203613" ref_url="https://bugzilla.suse.com/1203613" source="BUGZILLA"/>
		<reference ref_id="1204170" ref_url="https://bugzilla.suse.com/1204170" source="BUGZILLA"/>
		<reference ref_id="1204381" ref_url="https://bugzilla.suse.com/1204381" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33655" ref_url="https://www.suse.com/security/cve/CVE-2021-33655/" source="CVE"/>
		<reference ref_id="CVE-2022-2588" ref_url="https://www.suse.com/security/cve/CVE-2022-2588/" source="CVE"/>
		<reference ref_id="CVE-2022-42703" ref_url="https://www.suse.com/security/cve/CVE-2022-42703/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013002.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_102 fixes several issues.

The following security issues were fixed:

- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bnc#1204168).

- Fixed incorrect handling of empty arguments array in execve() (bsc#1200571).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202087">SUSE bug 1202087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203613">SUSE bug 1203613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204170">SUSE bug 1204170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204381">SUSE bug 1204381</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33655/">CVE-2021-33655</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2588/">CVE-2022-2588</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42703/">CVE-2022-42703</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720988" comment="kernel-default 4.12.14-197.102 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719207" comment="kernel-livepatch-4_12_14-197_102-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009724938" comment="kernel-livepatch-4_12_14-197_102-default-15-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138695" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1202087" ref_url="https://bugzilla.suse.com/1202087" source="BUGZILLA"/>
		<reference ref_id="1203613" ref_url="https://bugzilla.suse.com/1203613" source="BUGZILLA"/>
		<reference ref_id="1204170" ref_url="https://bugzilla.suse.com/1204170" source="BUGZILLA"/>
		<reference ref_id="1204381" ref_url="https://bugzilla.suse.com/1204381" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33655" ref_url="https://www.suse.com/security/cve/CVE-2021-33655/" source="CVE"/>
		<reference ref_id="CVE-2022-2588" ref_url="https://www.suse.com/security/cve/CVE-2022-2588/" source="CVE"/>
		<reference ref_id="CVE-2022-42703" ref_url="https://www.suse.com/security/cve/CVE-2022-42703/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013002.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_105 fixes several issues.

The following security issues were fixed:

- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bnc#1204168).

- Fixed incorrect handling of empty arguments array in execve() (bsc#1200571).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202087">SUSE bug 1202087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203613">SUSE bug 1203613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204170">SUSE bug 1204170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204381">SUSE bug 1204381</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33655/">CVE-2021-33655</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2588/">CVE-2022-2588</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42703/">CVE-2022-42703</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720989" comment="kernel-default 4.12.14-197.105 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719208" comment="kernel-livepatch-4_12_14-197_105-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009724939" comment="kernel-livepatch-4_12_14-197_105-default-11-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138696" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1202087" ref_url="https://bugzilla.suse.com/1202087" source="BUGZILLA"/>
		<reference ref_id="1203613" ref_url="https://bugzilla.suse.com/1203613" source="BUGZILLA"/>
		<reference ref_id="1204170" ref_url="https://bugzilla.suse.com/1204170" source="BUGZILLA"/>
		<reference ref_id="1204381" ref_url="https://bugzilla.suse.com/1204381" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33655" ref_url="https://www.suse.com/security/cve/CVE-2021-33655/" source="CVE"/>
		<reference ref_id="CVE-2022-2588" ref_url="https://www.suse.com/security/cve/CVE-2022-2588/" source="CVE"/>
		<reference ref_id="CVE-2022-42703" ref_url="https://www.suse.com/security/cve/CVE-2022-42703/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013002.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_108 fixes several issues.

The following security issues were fixed:

- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bnc#1204168).

- Fixed incorrect handling of empty arguments array in execve() (bsc#1200571).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202087">SUSE bug 1202087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203613">SUSE bug 1203613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204170">SUSE bug 1204170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204381">SUSE bug 1204381</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33655/">CVE-2021-33655</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2588/">CVE-2022-2588</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42703/">CVE-2022-42703</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720990" comment="kernel-default 4.12.14-197.108 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719209" comment="kernel-livepatch-4_12_14-197_108-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009724940" comment="kernel-livepatch-4_12_14-197_108-default-10-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138697" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1202087" ref_url="https://bugzilla.suse.com/1202087" source="BUGZILLA"/>
		<reference ref_id="1203613" ref_url="https://bugzilla.suse.com/1203613" source="BUGZILLA"/>
		<reference ref_id="1204170" ref_url="https://bugzilla.suse.com/1204170" source="BUGZILLA"/>
		<reference ref_id="1204381" ref_url="https://bugzilla.suse.com/1204381" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33655" ref_url="https://www.suse.com/security/cve/CVE-2021-33655/" source="CVE"/>
		<reference ref_id="CVE-2022-2588" ref_url="https://www.suse.com/security/cve/CVE-2022-2588/" source="CVE"/>
		<reference ref_id="CVE-2022-42703" ref_url="https://www.suse.com/security/cve/CVE-2022-42703/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013002.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_111 fixes several issues.

The following security issues were fixed:

- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bnc#1204168).

- Fixed incorrect handling of empty arguments array in execve() (bsc#1200571).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202087">SUSE bug 1202087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203613">SUSE bug 1203613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204170">SUSE bug 1204170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204381">SUSE bug 1204381</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33655/">CVE-2021-33655</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2588/">CVE-2022-2588</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42703/">CVE-2022-42703</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720991" comment="kernel-default 4.12.14-150100.197.111 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719210" comment="kernel-livepatch-4_12_14-150100_197_111-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009724941" comment="kernel-livepatch-4_12_14-150100_197_111-default-9-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138698" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1202087" ref_url="https://bugzilla.suse.com/1202087" source="BUGZILLA"/>
		<reference ref_id="1203613" ref_url="https://bugzilla.suse.com/1203613" source="BUGZILLA"/>
		<reference ref_id="1204170" ref_url="https://bugzilla.suse.com/1204170" source="BUGZILLA"/>
		<reference ref_id="1204381" ref_url="https://bugzilla.suse.com/1204381" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33655" ref_url="https://www.suse.com/security/cve/CVE-2021-33655/" source="CVE"/>
		<reference ref_id="CVE-2022-2588" ref_url="https://www.suse.com/security/cve/CVE-2022-2588/" source="CVE"/>
		<reference ref_id="CVE-2022-42703" ref_url="https://www.suse.com/security/cve/CVE-2022-42703/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013002.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_114 fixes several issues.

The following security issues were fixed:

- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bnc#1204168).

- Fixed incorrect handling of empty arguments array in execve() (bsc#1200571).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202087">SUSE bug 1202087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203613">SUSE bug 1203613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204170">SUSE bug 1204170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204381">SUSE bug 1204381</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33655/">CVE-2021-33655</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2588/">CVE-2022-2588</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42703/">CVE-2022-42703</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720992" comment="kernel-default 4.12.14-150100.197.114 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719211" comment="kernel-livepatch-4_12_14-150100_197_114-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009724942" comment="kernel-livepatch-4_12_14-150100_197_114-default-6-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138699" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1) (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1194460" ref_url="https://bugzilla.suse.com/1194460" source="BUGZILLA"/>
		<reference ref_id="1194533" ref_url="https://bugzilla.suse.com/1194533" source="BUGZILLA"/>
		<reference ref_id="1195308" ref_url="https://bugzilla.suse.com/1195308" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4083" ref_url="https://www.suse.com/security/cve/CVE-2021-4083/" source="CVE"/>
		<reference ref_id="CVE-2021-4202" ref_url="https://www.suse.com/security/cve/CVE-2021-4202/" source="CVE"/>
		<reference ref_id="CVE-2022-0435" ref_url="https://www.suse.com/security/cve/CVE-2022-0435/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0418-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010228.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_83 fixes several issues.

The following security issues were fixed:

- CVE-2021-4202: Fixed NFC race condition by adding NCI_UNREG flag (bsc#1194533).
- CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195308).
- CVE-2021-4083: Fixed a read-after-free memory flaw inside the garbage collection for Unix domain socket file handlers when users call close() and fget() simultaneouslyand can potentially trigger a race condition (bnc#1194460).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-16"/>
	<updated date="2022-02-16"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1194460">SUSE bug 1194460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194533">SUSE bug 1194533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195308">SUSE bug 1195308</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4083/">CVE-2021-4083</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4202/">CVE-2021-4202</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0435/">CVE-2022-0435</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720983" comment="kernel-default 4.12.14-197.83 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719202" comment="kernel-livepatch-4_12_14-197_83-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009667869" comment="kernel-livepatch-4_12_14-197_83-default-15-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138700" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1194460" ref_url="https://bugzilla.suse.com/1194460" source="BUGZILLA"/>
		<reference ref_id="1194533" ref_url="https://bugzilla.suse.com/1194533" source="BUGZILLA"/>
		<reference ref_id="1195308" ref_url="https://bugzilla.suse.com/1195308" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4083" ref_url="https://www.suse.com/security/cve/CVE-2021-4083/" source="CVE"/>
		<reference ref_id="CVE-2021-4202" ref_url="https://www.suse.com/security/cve/CVE-2021-4202/" source="CVE"/>
		<reference ref_id="CVE-2022-0435" ref_url="https://www.suse.com/security/cve/CVE-2022-0435/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0418-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010228.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_86 fixes several issues.

The following security issues were fixed:

- CVE-2021-4202: Fixed NFC race condition by adding NCI_UNREG flag (bsc#1194533).
- CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195308).
- CVE-2021-4083: Fixed a read-after-free memory flaw inside the garbage collection for Unix domain socket file handlers when users call close() and fget() simultaneouslyand can potentially trigger a race condition (bnc#1194460).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-16"/>
	<updated date="2022-02-16"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1194460">SUSE bug 1194460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194533">SUSE bug 1194533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195308">SUSE bug 1195308</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4083/">CVE-2021-4083</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4202/">CVE-2021-4202</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0435/">CVE-2022-0435</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720984" comment="kernel-default 4.12.14-197.86 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719203" comment="kernel-livepatch-4_12_14-197_86-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009667870" comment="kernel-livepatch-4_12_14-197_86-default-14-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138701" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1194460" ref_url="https://bugzilla.suse.com/1194460" source="BUGZILLA"/>
		<reference ref_id="1194533" ref_url="https://bugzilla.suse.com/1194533" source="BUGZILLA"/>
		<reference ref_id="1195308" ref_url="https://bugzilla.suse.com/1195308" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4083" ref_url="https://www.suse.com/security/cve/CVE-2021-4083/" source="CVE"/>
		<reference ref_id="CVE-2021-4202" ref_url="https://www.suse.com/security/cve/CVE-2021-4202/" source="CVE"/>
		<reference ref_id="CVE-2022-0435" ref_url="https://www.suse.com/security/cve/CVE-2022-0435/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0418-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010228.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_89 fixes several issues.

The following security issues were fixed:

- CVE-2021-4202: Fixed NFC race condition by adding NCI_UNREG flag (bsc#1194533).
- CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195308).
- CVE-2021-4083: Fixed a read-after-free memory flaw inside the garbage collection for Unix domain socket file handlers when users call close() and fget() simultaneouslyand can potentially trigger a race condition (bnc#1194460).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-16"/>
	<updated date="2022-02-16"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1194460">SUSE bug 1194460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194533">SUSE bug 1194533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195308">SUSE bug 1195308</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4083/">CVE-2021-4083</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4202/">CVE-2021-4202</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0435/">CVE-2022-0435</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720985" comment="kernel-default 4.12.14-197.89 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719204" comment="kernel-livepatch-4_12_14-197_89-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009667871" comment="kernel-livepatch-4_12_14-197_89-default-11-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138702" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1194460" ref_url="https://bugzilla.suse.com/1194460" source="BUGZILLA"/>
		<reference ref_id="1194533" ref_url="https://bugzilla.suse.com/1194533" source="BUGZILLA"/>
		<reference ref_id="1195308" ref_url="https://bugzilla.suse.com/1195308" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4083" ref_url="https://www.suse.com/security/cve/CVE-2021-4083/" source="CVE"/>
		<reference ref_id="CVE-2021-4202" ref_url="https://www.suse.com/security/cve/CVE-2021-4202/" source="CVE"/>
		<reference ref_id="CVE-2022-0435" ref_url="https://www.suse.com/security/cve/CVE-2022-0435/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0418-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010228.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_92 fixes several issues.

The following security issues were fixed:

- CVE-2021-4202: Fixed NFC race condition by adding NCI_UNREG flag (bsc#1194533).
- CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195308).
- CVE-2021-4083: Fixed a read-after-free memory flaw inside the garbage collection for Unix domain socket file handlers when users call close() and fget() simultaneouslyand can potentially trigger a race condition (bnc#1194460).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-16"/>
	<updated date="2022-02-16"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1194460">SUSE bug 1194460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194533">SUSE bug 1194533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195308">SUSE bug 1195308</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4083/">CVE-2021-4083</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4202/">CVE-2021-4202</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0435/">CVE-2022-0435</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720986" comment="kernel-default 4.12.14-197.92 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719205" comment="kernel-livepatch-4_12_14-197_92-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009667872" comment="kernel-livepatch-4_12_14-197_92-default-10-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138703" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1194460" ref_url="https://bugzilla.suse.com/1194460" source="BUGZILLA"/>
		<reference ref_id="1194533" ref_url="https://bugzilla.suse.com/1194533" source="BUGZILLA"/>
		<reference ref_id="1195308" ref_url="https://bugzilla.suse.com/1195308" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4083" ref_url="https://www.suse.com/security/cve/CVE-2021-4083/" source="CVE"/>
		<reference ref_id="CVE-2021-4202" ref_url="https://www.suse.com/security/cve/CVE-2021-4202/" source="CVE"/>
		<reference ref_id="CVE-2022-0435" ref_url="https://www.suse.com/security/cve/CVE-2022-0435/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0418-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010228.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_99 fixes several issues.

The following security issues were fixed:

- CVE-2021-4202: Fixed NFC race condition by adding NCI_UNREG flag (bsc#1194533).
- CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195308).
- CVE-2021-4083: Fixed a read-after-free memory flaw inside the garbage collection for Unix domain socket file handlers when users call close() and fget() simultaneouslyand can potentially trigger a race condition (bnc#1194460).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-16"/>
	<updated date="2022-02-16"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1194460">SUSE bug 1194460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194533">SUSE bug 1194533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195308">SUSE bug 1195308</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4083/">CVE-2021-4083</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4202/">CVE-2021-4202</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0435/">CVE-2022-0435</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720987" comment="kernel-default 4.12.14-197.99 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719206" comment="kernel-livepatch-4_12_14-197_99-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009667873" comment="kernel-livepatch-4_12_14-197_99-default-8-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138704" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1194460" ref_url="https://bugzilla.suse.com/1194460" source="BUGZILLA"/>
		<reference ref_id="1194533" ref_url="https://bugzilla.suse.com/1194533" source="BUGZILLA"/>
		<reference ref_id="1195308" ref_url="https://bugzilla.suse.com/1195308" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4083" ref_url="https://www.suse.com/security/cve/CVE-2021-4083/" source="CVE"/>
		<reference ref_id="CVE-2021-4202" ref_url="https://www.suse.com/security/cve/CVE-2021-4202/" source="CVE"/>
		<reference ref_id="CVE-2022-0435" ref_url="https://www.suse.com/security/cve/CVE-2022-0435/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0418-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010228.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_102 fixes several issues.

The following security issues were fixed:

- CVE-2021-4202: Fixed NFC race condition by adding NCI_UNREG flag (bsc#1194533).
- CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195308).
- CVE-2021-4083: Fixed a read-after-free memory flaw inside the garbage collection for Unix domain socket file handlers when users call close() and fget() simultaneouslyand can potentially trigger a race condition (bnc#1194460).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-16"/>
	<updated date="2022-02-16"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1194460">SUSE bug 1194460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194533">SUSE bug 1194533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195308">SUSE bug 1195308</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4083/">CVE-2021-4083</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4202/">CVE-2021-4202</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0435/">CVE-2022-0435</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720988" comment="kernel-default 4.12.14-197.102 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719207" comment="kernel-livepatch-4_12_14-197_102-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009667874" comment="kernel-livepatch-4_12_14-197_102-default-3-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138705" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1203606" ref_url="https://bugzilla.suse.com/1203606" source="BUGZILLA"/>
		<reference ref_id="1204424" ref_url="https://bugzilla.suse.com/1204424" source="BUGZILLA"/>
		<reference ref_id="1204576" ref_url="https://bugzilla.suse.com/1204576" source="BUGZILLA"/>
		<reference ref_id="1205130" ref_url="https://bugzilla.suse.com/1205130" source="BUGZILLA"/>
		<reference ref_id="1206228" ref_url="https://bugzilla.suse.com/1206228" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3545" ref_url="https://www.suse.com/security/cve/CVE-2022-3545/" source="CVE"/>
		<reference ref_id="CVE-2022-3586" ref_url="https://www.suse.com/security/cve/CVE-2022-3586/" source="CVE"/>
		<reference ref_id="CVE-2022-41218" ref_url="https://www.suse.com/security/cve/CVE-2022-41218/" source="CVE"/>
		<reference ref_id="CVE-2022-4378" ref_url="https://www.suse.com/security/cve/CVE-2022-4378/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013253.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_123 fixes several issues.

The following security issues were fixed:

- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3545: Fixed a use-after-free in area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-41218: Fixed a use-after-free caused by refcount races, affecting dvb_demux_open() and dvb_dmxdev_release() in drivers/media/dvb-core/dmxdev.c (bsc#1202960).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-16"/>
	<updated date="2022-12-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203606">SUSE bug 1203606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204424">SUSE bug 1204424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204576">SUSE bug 1204576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205130">SUSE bug 1205130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206228">SUSE bug 1206228</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3545/">CVE-2022-3545</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3586/">CVE-2022-3586</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41218/">CVE-2022-41218</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4378/">CVE-2022-4378</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725195" comment="kernel-default 4.12.14-150100.197.123 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725196" comment="kernel-livepatch-4_12_14-150100_197_123-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009729258" comment="kernel-livepatch-4_12_14-150100_197_123-default-2-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138706" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1203606" ref_url="https://bugzilla.suse.com/1203606" source="BUGZILLA"/>
		<reference ref_id="1204424" ref_url="https://bugzilla.suse.com/1204424" source="BUGZILLA"/>
		<reference ref_id="1204576" ref_url="https://bugzilla.suse.com/1204576" source="BUGZILLA"/>
		<reference ref_id="1205130" ref_url="https://bugzilla.suse.com/1205130" source="BUGZILLA"/>
		<reference ref_id="1206228" ref_url="https://bugzilla.suse.com/1206228" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3545" ref_url="https://www.suse.com/security/cve/CVE-2022-3545/" source="CVE"/>
		<reference ref_id="CVE-2022-3586" ref_url="https://www.suse.com/security/cve/CVE-2022-3586/" source="CVE"/>
		<reference ref_id="CVE-2022-41218" ref_url="https://www.suse.com/security/cve/CVE-2022-41218/" source="CVE"/>
		<reference ref_id="CVE-2022-4378" ref_url="https://www.suse.com/security/cve/CVE-2022-4378/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013253.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_117 fixes several issues.

The following security issues were fixed:

- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3545: Fixed a use-after-free in area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-41218: Fixed a use-after-free caused by refcount races, affecting dvb_demux_open() and dvb_dmxdev_release() in drivers/media/dvb-core/dmxdev.c (bsc#1202960).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-16"/>
	<updated date="2022-12-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203606">SUSE bug 1203606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204424">SUSE bug 1204424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204576">SUSE bug 1204576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205130">SUSE bug 1205130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206228">SUSE bug 1206228</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3545/">CVE-2022-3545</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3586/">CVE-2022-3586</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41218/">CVE-2022-41218</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4378/">CVE-2022-4378</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720993" comment="kernel-default 4.12.14-150100.197.117 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719212" comment="kernel-livepatch-4_12_14-150100_197_117-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009729259" comment="kernel-livepatch-4_12_14-150100_197_117-default-5-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138707" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1203606" ref_url="https://bugzilla.suse.com/1203606" source="BUGZILLA"/>
		<reference ref_id="1204424" ref_url="https://bugzilla.suse.com/1204424" source="BUGZILLA"/>
		<reference ref_id="1204576" ref_url="https://bugzilla.suse.com/1204576" source="BUGZILLA"/>
		<reference ref_id="1205130" ref_url="https://bugzilla.suse.com/1205130" source="BUGZILLA"/>
		<reference ref_id="1206228" ref_url="https://bugzilla.suse.com/1206228" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3545" ref_url="https://www.suse.com/security/cve/CVE-2022-3545/" source="CVE"/>
		<reference ref_id="CVE-2022-3586" ref_url="https://www.suse.com/security/cve/CVE-2022-3586/" source="CVE"/>
		<reference ref_id="CVE-2022-41218" ref_url="https://www.suse.com/security/cve/CVE-2022-41218/" source="CVE"/>
		<reference ref_id="CVE-2022-4378" ref_url="https://www.suse.com/security/cve/CVE-2022-4378/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013253.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_114 fixes several issues.

The following security issues were fixed:

- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3545: Fixed a use-after-free in area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-41218: Fixed a use-after-free caused by refcount races, affecting dvb_demux_open() and dvb_dmxdev_release() in drivers/media/dvb-core/dmxdev.c (bsc#1202960).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-16"/>
	<updated date="2022-12-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203606">SUSE bug 1203606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204424">SUSE bug 1204424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204576">SUSE bug 1204576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205130">SUSE bug 1205130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206228">SUSE bug 1206228</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3545/">CVE-2022-3545</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3586/">CVE-2022-3586</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41218/">CVE-2022-41218</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4378/">CVE-2022-4378</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720992" comment="kernel-default 4.12.14-150100.197.114 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719211" comment="kernel-livepatch-4_12_14-150100_197_114-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009729260" comment="kernel-livepatch-4_12_14-150100_197_114-default-7-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138708" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1203008" ref_url="https://bugzilla.suse.com/1203008" source="BUGZILLA"/>
		<reference ref_id="1203606" ref_url="https://bugzilla.suse.com/1203606" source="BUGZILLA"/>
		<reference ref_id="1204424" ref_url="https://bugzilla.suse.com/1204424" source="BUGZILLA"/>
		<reference ref_id="1204576" ref_url="https://bugzilla.suse.com/1204576" source="BUGZILLA"/>
		<reference ref_id="1205130" ref_url="https://bugzilla.suse.com/1205130" source="BUGZILLA"/>
		<reference ref_id="1206228" ref_url="https://bugzilla.suse.com/1206228" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2964" ref_url="https://www.suse.com/security/cve/CVE-2022-2964/" source="CVE"/>
		<reference ref_id="CVE-2022-3545" ref_url="https://www.suse.com/security/cve/CVE-2022-3545/" source="CVE"/>
		<reference ref_id="CVE-2022-3586" ref_url="https://www.suse.com/security/cve/CVE-2022-3586/" source="CVE"/>
		<reference ref_id="CVE-2022-41218" ref_url="https://www.suse.com/security/cve/CVE-2022-41218/" source="CVE"/>
		<reference ref_id="CVE-2022-4378" ref_url="https://www.suse.com/security/cve/CVE-2022-4378/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013261.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_105 fixes several issues.

The following security issues were fixed:

- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3545: Fixed a use-after-free in area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-41218: Fixed a use-after-free caused by refcount races, affecting dvb_demux_open() and dvb_dmxdev_release() in drivers/media/dvb-core/dmxdev.c (bsc#1202960).
- CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-17"/>
	<updated date="2022-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203008">SUSE bug 1203008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203606">SUSE bug 1203606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204424">SUSE bug 1204424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204576">SUSE bug 1204576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205130">SUSE bug 1205130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206228">SUSE bug 1206228</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2964/">CVE-2022-2964</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3545/">CVE-2022-3545</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3586/">CVE-2022-3586</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41218/">CVE-2022-41218</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4378/">CVE-2022-4378</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720989" comment="kernel-default 4.12.14-197.105 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719208" comment="kernel-livepatch-4_12_14-197_105-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009729253" comment="kernel-livepatch-4_12_14-197_105-default-12-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138709" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1203008" ref_url="https://bugzilla.suse.com/1203008" source="BUGZILLA"/>
		<reference ref_id="1203606" ref_url="https://bugzilla.suse.com/1203606" source="BUGZILLA"/>
		<reference ref_id="1204424" ref_url="https://bugzilla.suse.com/1204424" source="BUGZILLA"/>
		<reference ref_id="1204576" ref_url="https://bugzilla.suse.com/1204576" source="BUGZILLA"/>
		<reference ref_id="1205130" ref_url="https://bugzilla.suse.com/1205130" source="BUGZILLA"/>
		<reference ref_id="1206228" ref_url="https://bugzilla.suse.com/1206228" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2964" ref_url="https://www.suse.com/security/cve/CVE-2022-2964/" source="CVE"/>
		<reference ref_id="CVE-2022-3545" ref_url="https://www.suse.com/security/cve/CVE-2022-3545/" source="CVE"/>
		<reference ref_id="CVE-2022-3586" ref_url="https://www.suse.com/security/cve/CVE-2022-3586/" source="CVE"/>
		<reference ref_id="CVE-2022-41218" ref_url="https://www.suse.com/security/cve/CVE-2022-41218/" source="CVE"/>
		<reference ref_id="CVE-2022-4378" ref_url="https://www.suse.com/security/cve/CVE-2022-4378/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013261.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_102 fixes several issues.

The following security issues were fixed:

- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3545: Fixed a use-after-free in area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-41218: Fixed a use-after-free caused by refcount races, affecting dvb_demux_open() and dvb_dmxdev_release() in drivers/media/dvb-core/dmxdev.c (bsc#1202960).
- CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-17"/>
	<updated date="2022-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203008">SUSE bug 1203008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203606">SUSE bug 1203606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204424">SUSE bug 1204424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204576">SUSE bug 1204576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205130">SUSE bug 1205130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206228">SUSE bug 1206228</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2964/">CVE-2022-2964</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3545/">CVE-2022-3545</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3586/">CVE-2022-3586</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41218/">CVE-2022-41218</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4378/">CVE-2022-4378</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720988" comment="kernel-default 4.12.14-197.102 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719207" comment="kernel-livepatch-4_12_14-197_102-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009729252" comment="kernel-livepatch-4_12_14-197_102-default-16-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138710" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1203008" ref_url="https://bugzilla.suse.com/1203008" source="BUGZILLA"/>
		<reference ref_id="1203606" ref_url="https://bugzilla.suse.com/1203606" source="BUGZILLA"/>
		<reference ref_id="1204424" ref_url="https://bugzilla.suse.com/1204424" source="BUGZILLA"/>
		<reference ref_id="1204576" ref_url="https://bugzilla.suse.com/1204576" source="BUGZILLA"/>
		<reference ref_id="1205130" ref_url="https://bugzilla.suse.com/1205130" source="BUGZILLA"/>
		<reference ref_id="1206228" ref_url="https://bugzilla.suse.com/1206228" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2964" ref_url="https://www.suse.com/security/cve/CVE-2022-2964/" source="CVE"/>
		<reference ref_id="CVE-2022-3545" ref_url="https://www.suse.com/security/cve/CVE-2022-3545/" source="CVE"/>
		<reference ref_id="CVE-2022-3586" ref_url="https://www.suse.com/security/cve/CVE-2022-3586/" source="CVE"/>
		<reference ref_id="CVE-2022-41218" ref_url="https://www.suse.com/security/cve/CVE-2022-41218/" source="CVE"/>
		<reference ref_id="CVE-2022-4378" ref_url="https://www.suse.com/security/cve/CVE-2022-4378/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4520-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013261.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_108 fixes several issues.

The following security issues were fixed:

- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3545: Fixed a use-after-free in area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-41218: Fixed a use-after-free caused by refcount races, affecting dvb_demux_open() and dvb_dmxdev_release() in drivers/media/dvb-core/dmxdev.c (bsc#1202960).
- CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-17"/>
	<updated date="2022-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203008">SUSE bug 1203008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203606">SUSE bug 1203606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204424">SUSE bug 1204424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204576">SUSE bug 1204576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205130">SUSE bug 1205130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206228">SUSE bug 1206228</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2964/">CVE-2022-2964</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3545/">CVE-2022-3545</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3586/">CVE-2022-3586</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41218/">CVE-2022-41218</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4378/">CVE-2022-4378</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720990" comment="kernel-default 4.12.14-197.108 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719209" comment="kernel-livepatch-4_12_14-197_108-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009729254" comment="kernel-livepatch-4_12_14-197_108-default-11-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138711" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1203606" ref_url="https://bugzilla.suse.com/1203606" source="BUGZILLA"/>
		<reference ref_id="1204424" ref_url="https://bugzilla.suse.com/1204424" source="BUGZILLA"/>
		<reference ref_id="1204576" ref_url="https://bugzilla.suse.com/1204576" source="BUGZILLA"/>
		<reference ref_id="1205130" ref_url="https://bugzilla.suse.com/1205130" source="BUGZILLA"/>
		<reference ref_id="1206228" ref_url="https://bugzilla.suse.com/1206228" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3545" ref_url="https://www.suse.com/security/cve/CVE-2022-3545/" source="CVE"/>
		<reference ref_id="CVE-2022-3586" ref_url="https://www.suse.com/security/cve/CVE-2022-3586/" source="CVE"/>
		<reference ref_id="CVE-2022-41218" ref_url="https://www.suse.com/security/cve/CVE-2022-41218/" source="CVE"/>
		<reference ref_id="CVE-2022-4378" ref_url="https://www.suse.com/security/cve/CVE-2022-4378/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4527-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013260.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_111 fixes several issues.

The following security issues were fixed:

- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3545: Fixed a use-after-free in area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-41218: Fixed a use-after-free caused by refcount races, affecting dvb_demux_open() and dvb_dmxdev_release() in drivers/media/dvb-core/dmxdev.c (bsc#1202960).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-17"/>
	<updated date="2022-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203606">SUSE bug 1203606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204424">SUSE bug 1204424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204576">SUSE bug 1204576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205130">SUSE bug 1205130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206228">SUSE bug 1206228</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3545/">CVE-2022-3545</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3586/">CVE-2022-3586</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41218/">CVE-2022-41218</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4378/">CVE-2022-4378</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720991" comment="kernel-default 4.12.14-150100.197.111 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719210" comment="kernel-livepatch-4_12_14-150100_197_111-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009729255" comment="kernel-livepatch-4_12_14-150100_197_111-default-10-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138712" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1203606" ref_url="https://bugzilla.suse.com/1203606" source="BUGZILLA"/>
		<reference ref_id="1204424" ref_url="https://bugzilla.suse.com/1204424" source="BUGZILLA"/>
		<reference ref_id="1204576" ref_url="https://bugzilla.suse.com/1204576" source="BUGZILLA"/>
		<reference ref_id="1205130" ref_url="https://bugzilla.suse.com/1205130" source="BUGZILLA"/>
		<reference ref_id="1206228" ref_url="https://bugzilla.suse.com/1206228" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3545" ref_url="https://www.suse.com/security/cve/CVE-2022-3545/" source="CVE"/>
		<reference ref_id="CVE-2022-3586" ref_url="https://www.suse.com/security/cve/CVE-2022-3586/" source="CVE"/>
		<reference ref_id="CVE-2022-41218" ref_url="https://www.suse.com/security/cve/CVE-2022-41218/" source="CVE"/>
		<reference ref_id="CVE-2022-4378" ref_url="https://www.suse.com/security/cve/CVE-2022-4378/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4533-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013262.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_120 fixes several issues.

The following security issues were fixed:

- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3545: Fixed a use-after-free in area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-41218: Fixed a use-after-free caused by refcount races, affecting dvb_demux_open() and dvb_dmxdev_release() in drivers/media/dvb-core/dmxdev.c (bsc#1202960).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-17"/>
	<updated date="2022-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203606">SUSE bug 1203606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204424">SUSE bug 1204424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204576">SUSE bug 1204576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205130">SUSE bug 1205130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206228">SUSE bug 1206228</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3545/">CVE-2022-3545</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3586/">CVE-2022-3586</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41218/">CVE-2022-41218</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4378/">CVE-2022-4378</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720994" comment="kernel-default 4.12.14-150100.197.120 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719213" comment="kernel-livepatch-4_12_14-150100_197_120-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009729256" comment="kernel-livepatch-4_12_14-150100_197_120-default-5-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138713" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1204424" ref_url="https://bugzilla.suse.com/1204424" source="BUGZILLA"/>
		<reference ref_id="1204576" ref_url="https://bugzilla.suse.com/1204576" source="BUGZILLA"/>
		<reference ref_id="1205130" ref_url="https://bugzilla.suse.com/1205130" source="BUGZILLA"/>
		<reference ref_id="1206228" ref_url="https://bugzilla.suse.com/1206228" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3545" ref_url="https://www.suse.com/security/cve/CVE-2022-3545/" source="CVE"/>
		<reference ref_id="CVE-2022-3586" ref_url="https://www.suse.com/security/cve/CVE-2022-3586/" source="CVE"/>
		<reference ref_id="CVE-2022-4378" ref_url="https://www.suse.com/security/cve/CVE-2022-4378/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4539-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013263.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_126 fixes several issues.

The following security issues were fixed:

- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3545: Fixed a use-after-free in area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-17"/>
	<updated date="2022-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204424">SUSE bug 1204424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204576">SUSE bug 1204576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205130">SUSE bug 1205130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206228">SUSE bug 1206228</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3545/">CVE-2022-3545</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3586/">CVE-2022-3586</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4378/">CVE-2022-4378</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725197" comment="kernel-default 4.12.14-150100.197.126 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725198" comment="kernel-livepatch-4_12_14-150100_197_126-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009729257" comment="kernel-livepatch-4_12_14-150100_197_126-default-2-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138714" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1198702" ref_url="https://bugzilla.suse.com/1198702" source="BUGZILLA"/>
		<reference ref_id="1199365" ref_url="https://bugzilla.suse.com/1199365" source="BUGZILLA"/>
		<reference ref_id="1200788" ref_url="https://bugzilla.suse.com/1200788" source="BUGZILLA"/>
		<reference ref_id="1200845" ref_url="https://bugzilla.suse.com/1200845" source="BUGZILLA"/>
		<reference ref_id="1201455" ref_url="https://bugzilla.suse.com/1201455" source="BUGZILLA"/>
		<reference ref_id="1202686" ref_url="https://bugzilla.suse.com/1202686" source="BUGZILLA"/>
		<reference ref_id="1203008" ref_url="https://bugzilla.suse.com/1203008" source="BUGZILLA"/>
		<reference ref_id="1203183" ref_url="https://bugzilla.suse.com/1203183" source="BUGZILLA"/>
		<reference ref_id="1203290" ref_url="https://bugzilla.suse.com/1203290" source="BUGZILLA"/>
		<reference ref_id="1203322" ref_url="https://bugzilla.suse.com/1203322" source="BUGZILLA"/>
		<reference ref_id="1203514" ref_url="https://bugzilla.suse.com/1203514" source="BUGZILLA"/>
		<reference ref_id="1203860" ref_url="https://bugzilla.suse.com/1203860" source="BUGZILLA"/>
		<reference ref_id="1203960" ref_url="https://bugzilla.suse.com/1203960" source="BUGZILLA"/>
		<reference ref_id="1204017" ref_url="https://bugzilla.suse.com/1204017" source="BUGZILLA"/>
		<reference ref_id="1204166" ref_url="https://bugzilla.suse.com/1204166" source="BUGZILLA"/>
		<reference ref_id="1204170" ref_url="https://bugzilla.suse.com/1204170" source="BUGZILLA"/>
		<reference ref_id="1204354" ref_url="https://bugzilla.suse.com/1204354" source="BUGZILLA"/>
		<reference ref_id="1204355" ref_url="https://bugzilla.suse.com/1204355" source="BUGZILLA"/>
		<reference ref_id="1204402" ref_url="https://bugzilla.suse.com/1204402" source="BUGZILLA"/>
		<reference ref_id="1204414" ref_url="https://bugzilla.suse.com/1204414" source="BUGZILLA"/>
		<reference ref_id="1204415" ref_url="https://bugzilla.suse.com/1204415" source="BUGZILLA"/>
		<reference ref_id="1204424" ref_url="https://bugzilla.suse.com/1204424" source="BUGZILLA"/>
		<reference ref_id="1204431" ref_url="https://bugzilla.suse.com/1204431" source="BUGZILLA"/>
		<reference ref_id="1204432" ref_url="https://bugzilla.suse.com/1204432" source="BUGZILLA"/>
		<reference ref_id="1204439" ref_url="https://bugzilla.suse.com/1204439" source="BUGZILLA"/>
		<reference ref_id="1204446" ref_url="https://bugzilla.suse.com/1204446" source="BUGZILLA"/>
		<reference ref_id="1204479" ref_url="https://bugzilla.suse.com/1204479" source="BUGZILLA"/>
		<reference ref_id="1204574" ref_url="https://bugzilla.suse.com/1204574" source="BUGZILLA"/>
		<reference ref_id="1204576" ref_url="https://bugzilla.suse.com/1204576" source="BUGZILLA"/>
		<reference ref_id="1204631" ref_url="https://bugzilla.suse.com/1204631" source="BUGZILLA"/>
		<reference ref_id="1204635" ref_url="https://bugzilla.suse.com/1204635" source="BUGZILLA"/>
		<reference ref_id="1204636" ref_url="https://bugzilla.suse.com/1204636" source="BUGZILLA"/>
		<reference ref_id="1204646" ref_url="https://bugzilla.suse.com/1204646" source="BUGZILLA"/>
		<reference ref_id="1204647" ref_url="https://bugzilla.suse.com/1204647" source="BUGZILLA"/>
		<reference ref_id="1204653" ref_url="https://bugzilla.suse.com/1204653" source="BUGZILLA"/>
		<reference ref_id="1204850" ref_url="https://bugzilla.suse.com/1204850" source="BUGZILLA"/>
		<reference ref_id="1204868" ref_url="https://bugzilla.suse.com/1204868" source="BUGZILLA"/>
		<reference ref_id="1205006" ref_url="https://bugzilla.suse.com/1205006" source="BUGZILLA"/>
		<reference ref_id="1205128" ref_url="https://bugzilla.suse.com/1205128" source="BUGZILLA"/>
		<reference ref_id="1205220" ref_url="https://bugzilla.suse.com/1205220" source="BUGZILLA"/>
		<reference ref_id="1205473" ref_url="https://bugzilla.suse.com/1205473" source="BUGZILLA"/>
		<reference ref_id="1205514" ref_url="https://bugzilla.suse.com/1205514" source="BUGZILLA"/>
		<reference ref_id="1205617" ref_url="https://bugzilla.suse.com/1205617" source="BUGZILLA"/>
		<reference ref_id="1205671" ref_url="https://bugzilla.suse.com/1205671" source="BUGZILLA"/>
		<reference ref_id="1205796" ref_url="https://bugzilla.suse.com/1205796" source="BUGZILLA"/>
		<reference ref_id="1206113" ref_url="https://bugzilla.suse.com/1206113" source="BUGZILLA"/>
		<reference ref_id="1206114" ref_url="https://bugzilla.suse.com/1206114" source="BUGZILLA"/>
		<reference ref_id="1206207" ref_url="https://bugzilla.suse.com/1206207" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4037" ref_url="https://www.suse.com/security/cve/CVE-2021-4037/" source="CVE"/>
		<reference ref_id="CVE-2022-2153" ref_url="https://www.suse.com/security/cve/CVE-2022-2153/" source="CVE"/>
		<reference ref_id="CVE-2022-28693" ref_url="https://www.suse.com/security/cve/CVE-2022-28693/" source="CVE"/>
		<reference ref_id="CVE-2022-2964" ref_url="https://www.suse.com/security/cve/CVE-2022-2964/" source="CVE"/>
		<reference ref_id="CVE-2022-3169" ref_url="https://www.suse.com/security/cve/CVE-2022-3169/" source="CVE"/>
		<reference ref_id="CVE-2022-3424" ref_url="https://www.suse.com/security/cve/CVE-2022-3424/" source="CVE"/>
		<reference ref_id="CVE-2022-3521" ref_url="https://www.suse.com/security/cve/CVE-2022-3521/" source="CVE"/>
		<reference ref_id="CVE-2022-3524" ref_url="https://www.suse.com/security/cve/CVE-2022-3524/" source="CVE"/>
		<reference ref_id="CVE-2022-3542" ref_url="https://www.suse.com/security/cve/CVE-2022-3542/" source="CVE"/>
		<reference ref_id="CVE-2022-3545" ref_url="https://www.suse.com/security/cve/CVE-2022-3545/" source="CVE"/>
		<reference ref_id="CVE-2022-3565" ref_url="https://www.suse.com/security/cve/CVE-2022-3565/" source="CVE"/>
		<reference ref_id="CVE-2022-3567" ref_url="https://www.suse.com/security/cve/CVE-2022-3567/" source="CVE"/>
		<reference ref_id="CVE-2022-3586" ref_url="https://www.suse.com/security/cve/CVE-2022-3586/" source="CVE"/>
		<reference ref_id="CVE-2022-3594" ref_url="https://www.suse.com/security/cve/CVE-2022-3594/" source="CVE"/>
		<reference ref_id="CVE-2022-3621" ref_url="https://www.suse.com/security/cve/CVE-2022-3621/" source="CVE"/>
		<reference ref_id="CVE-2022-3628" ref_url="https://www.suse.com/security/cve/CVE-2022-3628/" source="CVE"/>
		<reference ref_id="CVE-2022-3629" ref_url="https://www.suse.com/security/cve/CVE-2022-3629/" source="CVE"/>
		<reference ref_id="CVE-2022-3635" ref_url="https://www.suse.com/security/cve/CVE-2022-3635/" source="CVE"/>
		<reference ref_id="CVE-2022-3643" ref_url="https://www.suse.com/security/cve/CVE-2022-3643/" source="CVE"/>
		<reference ref_id="CVE-2022-3646" ref_url="https://www.suse.com/security/cve/CVE-2022-3646/" source="CVE"/>
		<reference ref_id="CVE-2022-3649" ref_url="https://www.suse.com/security/cve/CVE-2022-3649/" source="CVE"/>
		<reference ref_id="CVE-2022-3903" ref_url="https://www.suse.com/security/cve/CVE-2022-3903/" source="CVE"/>
		<reference ref_id="CVE-2022-40307" ref_url="https://www.suse.com/security/cve/CVE-2022-40307/" source="CVE"/>
		<reference ref_id="CVE-2022-40768" ref_url="https://www.suse.com/security/cve/CVE-2022-40768/" source="CVE"/>
		<reference ref_id="CVE-2022-4095" ref_url="https://www.suse.com/security/cve/CVE-2022-4095/" source="CVE"/>
		<reference ref_id="CVE-2022-41850" ref_url="https://www.suse.com/security/cve/CVE-2022-41850/" source="CVE"/>
		<reference ref_id="CVE-2022-41858" ref_url="https://www.suse.com/security/cve/CVE-2022-41858/" source="CVE"/>
		<reference ref_id="CVE-2022-42328" ref_url="https://www.suse.com/security/cve/CVE-2022-42328/" source="CVE"/>
		<reference ref_id="CVE-2022-42329" ref_url="https://www.suse.com/security/cve/CVE-2022-42329/" source="CVE"/>
		<reference ref_id="CVE-2022-42703" ref_url="https://www.suse.com/security/cve/CVE-2022-42703/" source="CVE"/>
		<reference ref_id="CVE-2022-42895" ref_url="https://www.suse.com/security/cve/CVE-2022-42895/" source="CVE"/>
		<reference ref_id="CVE-2022-42896" ref_url="https://www.suse.com/security/cve/CVE-2022-42896/" source="CVE"/>
		<reference ref_id="CVE-2022-43750" ref_url="https://www.suse.com/security/cve/CVE-2022-43750/" source="CVE"/>
		<reference ref_id="CVE-2022-4378" ref_url="https://www.suse.com/security/cve/CVE-2022-4378/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="CVE-2022-45934" ref_url="https://www.suse.com/security/cve/CVE-2022-45934/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013279.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-42328: Guests could trigger denial of service via the netback driver (bsc#1206114).
- CVE-2022-42329: Guests could trigger denial of service via the netback driver (bsc#1206113).
- CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver (bsc#1206113).
- CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631).
- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1204166).
- CVE-2022-41850: Fixed a race condition in roccat_report_event() in drivers/hid/hid-roccat.c (bsc#1203960).
- CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in net/bluetooth/l2cap_core.c (bsc#1205796).
- CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wifi/brcmfmac (bsc#1204868).
- CVE-2022-3567: Fixed a to race condition in inet6_stream_ops()/inet6_dgram_ops() (bsc#1204414).
- CVE-2022-41858: Fixed a denial of service in sl_tx_timeout() in drivers/net/slip (bsc#1205671).
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).
- CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).
- CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).
- CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set (bsc#1198702).
- CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's internal memory (bsc#1204653).
- CVE-2022-3542: Fixed memory leak in bnx2x_tpa_stop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c (bsc#1204402).
- CVE-2022-3629: Fixed memory leak in vsock_connect() in net/vmw_vsock/af_vsock.c (bsc#1204635).
- CVE-2022-3646: Fixed memory leak in nilfs_attach_log_writer() in fs/nilfs2/segment.c (bsc#1204646).
- CVE-2022-3649: Fixed use-after-free in nilfs_new_inode() in fs/nilfs2/inode.c (bsc#1204647).
- CVE-2022-3621: Fixed null pointer dereference in nilfs_bmap_lookup_at_level() in fs/nilfs2/inode.c (bsc#1204574).
- CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bsc#1204479).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3565: Fixed use-after-free in del_timer() in drivers/isdn/mISDN/l1oip_core.c (bsc#1204431).
- CVE-2022-3524: Fixed memory leak in ipv6_renew_options() in the IPv6 handler (bsc#1204354).
- CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory (bsc#1203514).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bsc#1204168).
- CVE-2022-3169: Fixed an denial of service though request to NVME_IOCTL_RESET and NVME_IOCTL_SUBSYS_RESET (bsc#1203290).
- CVE-2022-40307: Fixed a race condition that could had been exploited to trigger a use-after-free in the efi firmware capsule-loader.c (bsc#1203322).
- CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2cap_core.c's l2cap_parse_conf_req() which can be used to leak kernel pointers remotely (bsc#1205705).
- CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2cap_core.c's l2cap_connect() and l2cap_le_connect_req() which may have allowed code execution and leaking kernel memory (respectively) remotely via Bluetooth (bsc#1205709).
- CVE-2022-3545: Fixed a use-after-free vulnerability is area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-3521: Fixed a race condition in kcm_tx_work() of the file net/kcm/kcmsock.c (bsc#1204355).
- CVE-2022-2153: Fixed a NULL pointer dereference in KVM when attempting to set a SynIC IRQ (bsc#1200788).

The following non-security bugs were fixed:

- Drivers: hv: vmbus: Add VMbus IMC device to unsupported list (git-fixes).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Drop error message when 'No request id available' (bsc#1204017).
- Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (git-fixes).
- Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero (bsc#1204017).
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (git-fixes).
- Drivers: hv: vmbus: Fix potential crash on module unload (git-fixes).
- Drivers: hv: vmbus: Introduce {lock,unlock}_requestor() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Introduce vmbus_request_addr_match() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Introduce vmbus_sendpacket_getid() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Move __vmbus_open() (bsc#1204017).
- Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (git-fixes).
- hv_netvsc: Add check for kvmalloc_array (git-fixes).
- hv_netvsc: Add error handling while switching data path (bsc#1204850).
- hv_netvsc: Add validation for untrusted Hyper-V values (bsc#1204017).
- hv_netvsc: Cache the current data path to avoid duplicate call and message (bsc#1204017).
- hv_netvsc: Check VF datapath when sending traffic to VF (bsc#1204017).
- hv_netvsc: Fix error handling in netvsc_set_features() (git-fixes).
- hv_netvsc: Fix race between VF offering and VF association message from host (bsc#1204850).
- hv_netvsc: Print value of invalid ID in netvsc_send_{completion,tx_complete}() (bsc#1204017).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove (bsc#1204850).
- hv_netvsc: Remove unnecessary round_up for recv_completion_cnt (bsc#1204017).
- hv_netvsc: Reset the RSC count if NVSP_STAT_FAIL in netvsc_receive() (bsc#1204017).
- hv_netvsc: Sync offloading features to VF NIC (git-fixes).
- hv_netvsc: use netif_is_bond_master() instead of open code (git-fixes).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening (bsc#1204017).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH (bsc#1204017).
- ipv6: ping: fix wrong checksum for large frames (bsc#1203183).
- net: hyperv: remove use of bpf_op_t (git-fixes).
- net: netvsc: remove break after return (git-fixes).
- PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv() (bsc#1204446).
- PCI: hv: Add validation for untrusted Hyper-V values (bsc#1204017).
- PCI: hv: Drop msi_controller structure (bsc#1204446).
- PCI: hv: Fix a race condition when removing the device (bsc#1204446).
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (bsc#1200845).
- PCI: hv: Fix interrupt mapping for multi-MSI (bsc#1200845).
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (bsc#1200845).
- PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology (bsc#1199365).
- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (bsc#1204446).
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (bsc#1204017, bsc#1203860, bsc#1205617).
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (bsc#1204017, bsc#1205617).
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (bsc#1200845).
- PCI: hv: Make the code arch neutral by adding arch specific interfaces (bsc#1200845).
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (bsc#1200845).
- PCI: hv: Remove bus device removal unused refcount/functions (bsc#1204446).
- PCI: hv: Remove unnecessary use of %hx (bsc#1204446).
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (bsc#1200845).
- PCI: hv: Support for create interrupt v3 (git-fixes).
- PCI: hv: Use struct_size() helper (bsc#1204446).
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (bsc#1204017).
- Revert 'scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback()' (bsc#1204017).
- scsi: storvsc: Drop DID_TARGET_FAILURE use (git-fixes).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8 and newer (bsc#1204017).
- scsi: storvsc: Fix validation for unsolicited incoming packets (bsc#1204017).
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (git-fixes).
- scsi: storvsc: Resolve data race in storvsc_probe() (bsc#1204017).
- scsi: storvsc: Use blk_mq_unique_tag() to generate requestIDs (bsc#1204017).
- scsi: storvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening (bsc#1204017).
- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1204017).
- sunrpc: Re-purpose trace_svc_process (bsc#1205006).
- x86/cpu: Restore AMD's DE_CFG MSR after resume (bsc#1205473).
- x86/hyperv: Output host build info as normal Windows version number (git-fixes).
- x86/hyperv: Set pv_info.name to 'Hyper-V' (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-19"/>
	<updated date="2022-12-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198702">SUSE bug 1198702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199365">SUSE bug 1199365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200788">SUSE bug 1200788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200845">SUSE bug 1200845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201455">SUSE bug 1201455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202686">SUSE bug 1202686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203008">SUSE bug 1203008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203183">SUSE bug 1203183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203290">SUSE bug 1203290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203322">SUSE bug 1203322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203514">SUSE bug 1203514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203860">SUSE bug 1203860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203960">SUSE bug 1203960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204017">SUSE bug 1204017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204166">SUSE bug 1204166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204170">SUSE bug 1204170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204354">SUSE bug 1204354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204355">SUSE bug 1204355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204402">SUSE bug 1204402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204414">SUSE bug 1204414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204415">SUSE bug 1204415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204424">SUSE bug 1204424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204431">SUSE bug 1204431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204432">SUSE bug 1204432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204439">SUSE bug 1204439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204446">SUSE bug 1204446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204479">SUSE bug 1204479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204574">SUSE bug 1204574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204576">SUSE bug 1204576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204631">SUSE bug 1204631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204635">SUSE bug 1204635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204636">SUSE bug 1204636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204646">SUSE bug 1204646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204647">SUSE bug 1204647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204653">SUSE bug 1204653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204850">SUSE bug 1204850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204868">SUSE bug 1204868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205006">SUSE bug 1205006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205128">SUSE bug 1205128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205220">SUSE bug 1205220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205473">SUSE bug 1205473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205514">SUSE bug 1205514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205617">SUSE bug 1205617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205671">SUSE bug 1205671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205796">SUSE bug 1205796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206113">SUSE bug 1206113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206114">SUSE bug 1206114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206207">SUSE bug 1206207</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4037/">CVE-2021-4037</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2153/">CVE-2022-2153</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28693/">CVE-2022-28693</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2964/">CVE-2022-2964</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3169/">CVE-2022-3169</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3424/">CVE-2022-3424</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3521/">CVE-2022-3521</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3524/">CVE-2022-3524</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3542/">CVE-2022-3542</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3545/">CVE-2022-3545</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3565/">CVE-2022-3565</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3567/">CVE-2022-3567</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3586/">CVE-2022-3586</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3594/">CVE-2022-3594</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3621/">CVE-2022-3621</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3628/">CVE-2022-3628</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3629/">CVE-2022-3629</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3635/">CVE-2022-3635</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-3643/">CVE-2022-3643</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3646/">CVE-2022-3646</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3649/">CVE-2022-3649</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3903/">CVE-2022-3903</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40307/">CVE-2022-40307</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40768/">CVE-2022-40768</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4095/">CVE-2022-4095</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-41850/">CVE-2022-41850</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41858/">CVE-2022-41858</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42328/">CVE-2022-42328</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42329/">CVE-2022-42329</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42703/">CVE-2022-42703</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42895/">CVE-2022-42895</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-42896/">CVE-2022-42896</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43750/">CVE-2022-43750</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4378/">CVE-2022-4378</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-45934/">CVE-2022-45934</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728719" comment="kernel-default-livepatch-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728720" comment="kernel-default-livepatch-devel-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728723" comment="kernel-livepatch-4_12_14-150100_197_131-default-1-150100.3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138715" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1194463" ref_url="https://bugzilla.suse.com/1194463" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0920" ref_url="https://www.suse.com/security/cve/CVE-2021-0920/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010321.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_102 fixes one issue.

The following security issue was fixed:

- CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1194463).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-01"/>
	<updated date="2022-03-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194463">SUSE bug 1194463</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0920/">CVE-2021-0920</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720988" comment="kernel-default 4.12.14-197.102 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719207" comment="kernel-livepatch-4_12_14-197_102-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009669945" comment="kernel-livepatch-4_12_14-197_102-default-4-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138716" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1194463" ref_url="https://bugzilla.suse.com/1194463" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0920" ref_url="https://www.suse.com/security/cve/CVE-2021-0920/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010321.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_99 fixes one issue.

The following security issue was fixed:

- CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1194463).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-01"/>
	<updated date="2022-03-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194463">SUSE bug 1194463</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0920/">CVE-2021-0920</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720987" comment="kernel-default 4.12.14-197.99 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719206" comment="kernel-livepatch-4_12_14-197_99-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009669946" comment="kernel-livepatch-4_12_14-197_99-default-9-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138717" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1194463" ref_url="https://bugzilla.suse.com/1194463" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0920" ref_url="https://www.suse.com/security/cve/CVE-2021-0920/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010321.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_92 fixes one issue.

The following security issue was fixed:

- CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1194463).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-01"/>
	<updated date="2022-03-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194463">SUSE bug 1194463</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0920/">CVE-2021-0920</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720986" comment="kernel-default 4.12.14-197.92 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719205" comment="kernel-livepatch-4_12_14-197_92-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009669947" comment="kernel-livepatch-4_12_14-197_92-default-11-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138718" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1194463" ref_url="https://bugzilla.suse.com/1194463" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0920" ref_url="https://www.suse.com/security/cve/CVE-2021-0920/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010321.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_89 fixes one issue.

The following security issue was fixed:

- CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1194463).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-01"/>
	<updated date="2022-03-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194463">SUSE bug 1194463</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0920/">CVE-2021-0920</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720985" comment="kernel-default 4.12.14-197.89 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719204" comment="kernel-livepatch-4_12_14-197_89-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009669948" comment="kernel-livepatch-4_12_14-197_89-default-12-2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138719" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1194463" ref_url="https://bugzilla.suse.com/1194463" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0920" ref_url="https://www.suse.com/security/cve/CVE-2021-0920/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0647-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010321.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_86 fixes one issue.

The following security issue was fixed:

- CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1194463).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-01"/>
	<updated date="2022-03-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194463">SUSE bug 1194463</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0920/">CVE-2021-0920</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720984" comment="kernel-default 4.12.14-197.86 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719203" comment="kernel-livepatch-4_12_14-197_86-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009669949" comment="kernel-livepatch-4_12_14-197_86-default-15-2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138720" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1185973" ref_url="https://bugzilla.suse.com/1185973" source="BUGZILLA"/>
		<reference ref_id="1191580" ref_url="https://bugzilla.suse.com/1191580" source="BUGZILLA"/>
		<reference ref_id="1194516" ref_url="https://bugzilla.suse.com/1194516" source="BUGZILLA"/>
		<reference ref_id="1195536" ref_url="https://bugzilla.suse.com/1195536" source="BUGZILLA"/>
		<reference ref_id="1195543" ref_url="https://bugzilla.suse.com/1195543" source="BUGZILLA"/>
		<reference ref_id="1195612" ref_url="https://bugzilla.suse.com/1195612" source="BUGZILLA"/>
		<reference ref_id="1195840" ref_url="https://bugzilla.suse.com/1195840" source="BUGZILLA"/>
		<reference ref_id="1195897" ref_url="https://bugzilla.suse.com/1195897" source="BUGZILLA"/>
		<reference ref_id="1195908" ref_url="https://bugzilla.suse.com/1195908" source="BUGZILLA"/>
		<reference ref_id="1195949" ref_url="https://bugzilla.suse.com/1195949" source="BUGZILLA"/>
		<reference ref_id="1195987" ref_url="https://bugzilla.suse.com/1195987" source="BUGZILLA"/>
		<reference ref_id="1196079" ref_url="https://bugzilla.suse.com/1196079" source="BUGZILLA"/>
		<reference ref_id="1196155" ref_url="https://bugzilla.suse.com/1196155" source="BUGZILLA"/>
		<reference ref_id="1196584" ref_url="https://bugzilla.suse.com/1196584" source="BUGZILLA"/>
		<reference ref_id="1196612" ref_url="https://bugzilla.suse.com/1196612" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44879" ref_url="https://www.suse.com/security/cve/CVE-2021-44879/" source="CVE"/>
		<reference ref_id="CVE-2022-0001" ref_url="https://www.suse.com/security/cve/CVE-2022-0001/" source="CVE"/>
		<reference ref_id="CVE-2022-0002" ref_url="https://www.suse.com/security/cve/CVE-2022-0002/" source="CVE"/>
		<reference ref_id="CVE-2022-0487" ref_url="https://www.suse.com/security/cve/CVE-2022-0487/" source="CVE"/>
		<reference ref_id="CVE-2022-0492" ref_url="https://www.suse.com/security/cve/CVE-2022-0492/" source="CVE"/>
		<reference ref_id="CVE-2022-0617" ref_url="https://www.suse.com/security/cve/CVE-2022-0617/" source="CVE"/>
		<reference ref_id="CVE-2022-0644" ref_url="https://www.suse.com/security/cve/CVE-2022-0644/" source="CVE"/>
		<reference ref_id="CVE-2022-0847" ref_url="https://www.suse.com/security/cve/CVE-2022-0847/" source="CVE"/>
		<reference ref_id="CVE-2022-24448" ref_url="https://www.suse.com/security/cve/CVE-2022-24448/" source="CVE"/>
		<reference ref_id="CVE-2022-24959" ref_url="https://www.suse.com/security/cve/CVE-2022-24959/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010395.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


Transient execution side-channel attacks attacking the Branch History Buffer (BHB),
named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.

The following security bugs were fixed:

- CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).
- CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).
- CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584).
- CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079)
- CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd() (bsc#1196155).
- CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987).
- CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897).
- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
- CVE-2022-24448: Fixed an issue in fs/nfs/dir.c. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612).


The following non-security bugs were fixed:

- crypto: af_alg - get_page upon reassignment to TX SGL (bsc#1195840).
- lib/iov_iter: initialize 'flags' in new pipe_buffer (bsc#1196584).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185973">SUSE bug 1185973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191580">SUSE bug 1191580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194516">SUSE bug 1194516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195536">SUSE bug 1195536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195543">SUSE bug 1195543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195612">SUSE bug 1195612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195840">SUSE bug 1195840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195897">SUSE bug 1195897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195908">SUSE bug 1195908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195949">SUSE bug 1195949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195987">SUSE bug 1195987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196079">SUSE bug 1196079</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196155">SUSE bug 1196155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196584">SUSE bug 1196584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196612">SUSE bug 1196612</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-44879/">CVE-2021-44879</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0001/">CVE-2022-0001</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0002/">CVE-2022-0002</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0487/">CVE-2022-0487</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0492/">CVE-2022-0492</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0617/">CVE-2022-0617</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0644/">CVE-2022-0644</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0847/">CVE-2022-0847</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-24448/">CVE-2022-24448</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-24959/">CVE-2022-24959</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671399" comment="kernel-default-livepatch-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671400" comment="kernel-default-livepatch-devel-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671401" comment="kernel-livepatch-4_12_14-197_108-default-1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138721" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208909" ref_url="https://bugzilla.suse.com/1208909" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-26545" ref_url="https://www.suse.com/security/cve/CVE-2023-26545/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_114 fixes one issue.

The following security issue was fixed:

- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-27"/>
	<updated date="2023-03-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208909">SUSE bug 1208909</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26545/">CVE-2023-26545</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720992" comment="kernel-default 4.12.14-150100.197.114 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719211" comment="kernel-livepatch-4_12_14-150100_197_114-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009750663" comment="kernel-livepatch-4_12_14-150100_197_114-default-10-150100.2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138722" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208909" ref_url="https://bugzilla.suse.com/1208909" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-26545" ref_url="https://www.suse.com/security/cve/CVE-2023-26545/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_120 fixes one issue.

The following security issue was fixed:

- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-27"/>
	<updated date="2023-03-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208909">SUSE bug 1208909</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26545/">CVE-2023-26545</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720994" comment="kernel-default 4.12.14-150100.197.120 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719213" comment="kernel-livepatch-4_12_14-150100_197_120-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009750665" comment="kernel-livepatch-4_12_14-150100_197_120-default-8-150100.2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138723" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208909" ref_url="https://bugzilla.suse.com/1208909" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-26545" ref_url="https://www.suse.com/security/cve/CVE-2023-26545/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1579-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014161.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_123 fixes one issue.

The following security issue was fixed:

- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-27"/>
	<updated date="2023-03-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208909">SUSE bug 1208909</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26545/">CVE-2023-26545</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725195" comment="kernel-default 4.12.14-150100.197.123 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725196" comment="kernel-livepatch-4_12_14-150100_197_123-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009750666" comment="kernel-livepatch-4_12_14-150100_197_123-default-5-150100.2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138724" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208909" ref_url="https://bugzilla.suse.com/1208909" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-26545" ref_url="https://www.suse.com/security/cve/CVE-2023-26545/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1588-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014174.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_111 fixes one issue.

The following security issue was fixed:

- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-27"/>
	<updated date="2023-03-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208909">SUSE bug 1208909</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26545/">CVE-2023-26545</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720991" comment="kernel-default 4.12.14-150100.197.111 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719210" comment="kernel-livepatch-4_12_14-150100_197_111-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009750662" comment="kernel-livepatch-4_12_14-150100_197_111-default-13-150100.2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138725" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208909" ref_url="https://bugzilla.suse.com/1208909" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-26545" ref_url="https://www.suse.com/security/cve/CVE-2023-26545/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014200.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_134 fixes one issue.

The following security issue was fixed:

- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-28"/>
	<updated date="2023-03-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208909">SUSE bug 1208909</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26545/">CVE-2023-26545</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009738361" comment="kernel-default 4.12.14-150100.197.134 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009738362" comment="kernel-livepatch-4_12_14-150100_197_134-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009750669" comment="kernel-livepatch-4_12_14-150100_197_134-default-2-150100.2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138726" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208909" ref_url="https://bugzilla.suse.com/1208909" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-26545" ref_url="https://www.suse.com/security/cve/CVE-2023-26545/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_131 fixes one issue.

The following security issue was fixed:

- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-28"/>
	<updated date="2023-03-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208909">SUSE bug 1208909</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26545/">CVE-2023-26545</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728721" comment="kernel-default 4.12.14-150100.197.131 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009728722" comment="kernel-livepatch-4_12_14-150100_197_131-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009750668" comment="kernel-livepatch-4_12_14-150100_197_131-default-3-150100.2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138727" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208909" ref_url="https://bugzilla.suse.com/1208909" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-26545" ref_url="https://www.suse.com/security/cve/CVE-2023-26545/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1635-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014203.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_126 fixes one issue.

The following security issue was fixed:

- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-28"/>
	<updated date="2023-03-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208909">SUSE bug 1208909</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26545/">CVE-2023-26545</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725197" comment="kernel-default 4.12.14-150100.197.126 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725198" comment="kernel-livepatch-4_12_14-150100_197_126-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009750667" comment="kernel-livepatch-4_12_14-150100_197_126-default-5-150100.2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138728" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208909" ref_url="https://bugzilla.suse.com/1208909" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-26545" ref_url="https://www.suse.com/security/cve/CVE-2023-26545/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_117 fixes one issue.

The following security issue was fixed:

- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-28"/>
	<updated date="2023-03-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208909">SUSE bug 1208909</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26545/">CVE-2023-26545</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720993" comment="kernel-default 4.12.14-150100.197.117 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719212" comment="kernel-livepatch-4_12_14-150100_197_117-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009750664" comment="kernel-livepatch-4_12_14-150100_197_117-default-8-150100.2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138729" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1076830" ref_url="https://bugzilla.suse.com/1076830" source="BUGZILLA"/>
		<reference ref_id="1192273" ref_url="https://bugzilla.suse.com/1192273" source="BUGZILLA"/>
		<reference ref_id="1194535" ref_url="https://bugzilla.suse.com/1194535" source="BUGZILLA"/>
		<reference ref_id="1207036" ref_url="https://bugzilla.suse.com/1207036" source="BUGZILLA"/>
		<reference ref_id="1207125" ref_url="https://bugzilla.suse.com/1207125" source="BUGZILLA"/>
		<reference ref_id="1207168" ref_url="https://bugzilla.suse.com/1207168" source="BUGZILLA"/>
		<reference ref_id="1207795" ref_url="https://bugzilla.suse.com/1207795" source="BUGZILLA"/>
		<reference ref_id="1208179" ref_url="https://bugzilla.suse.com/1208179" source="BUGZILLA"/>
		<reference ref_id="1208599" ref_url="https://bugzilla.suse.com/1208599" source="BUGZILLA"/>
		<reference ref_id="1208777" ref_url="https://bugzilla.suse.com/1208777" source="BUGZILLA"/>
		<reference ref_id="1208811" ref_url="https://bugzilla.suse.com/1208811" source="BUGZILLA"/>
		<reference ref_id="1208850" ref_url="https://bugzilla.suse.com/1208850" source="BUGZILLA"/>
		<reference ref_id="1209008" ref_url="https://bugzilla.suse.com/1209008" source="BUGZILLA"/>
		<reference ref_id="1209052" ref_url="https://bugzilla.suse.com/1209052" source="BUGZILLA"/>
		<reference ref_id="1209256" ref_url="https://bugzilla.suse.com/1209256" source="BUGZILLA"/>
		<reference ref_id="1209289" ref_url="https://bugzilla.suse.com/1209289" source="BUGZILLA"/>
		<reference ref_id="1209291" ref_url="https://bugzilla.suse.com/1209291" source="BUGZILLA"/>
		<reference ref_id="1209532" ref_url="https://bugzilla.suse.com/1209532" source="BUGZILLA"/>
		<reference ref_id="1209547" ref_url="https://bugzilla.suse.com/1209547" source="BUGZILLA"/>
		<reference ref_id="1209549" ref_url="https://bugzilla.suse.com/1209549" source="BUGZILLA"/>
		<reference ref_id="1209634" ref_url="https://bugzilla.suse.com/1209634" source="BUGZILLA"/>
		<reference ref_id="1209778" ref_url="https://bugzilla.suse.com/1209778" source="BUGZILLA"/>
		<reference ref_id="1209845" ref_url="https://bugzilla.suse.com/1209845" source="BUGZILLA"/>
		<reference ref_id="1209887" ref_url="https://bugzilla.suse.com/1209887" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2021-3923" ref_url="https://www.suse.com/security/cve/CVE-2021-3923/" source="CVE"/>
		<reference ref_id="CVE-2021-4203" ref_url="https://www.suse.com/security/cve/CVE-2021-4203/" source="CVE"/>
		<reference ref_id="CVE-2022-20567" ref_url="https://www.suse.com/security/cve/CVE-2022-20567/" source="CVE"/>
		<reference ref_id="CVE-2023-0394" ref_url="https://www.suse.com/security/cve/CVE-2023-0394/" source="CVE"/>
		<reference ref_id="CVE-2023-0590" ref_url="https://www.suse.com/security/cve/CVE-2023-0590/" source="CVE"/>
		<reference ref_id="CVE-2023-1076" ref_url="https://www.suse.com/security/cve/CVE-2023-1076/" source="CVE"/>
		<reference ref_id="CVE-2023-1095" ref_url="https://www.suse.com/security/cve/CVE-2023-1095/" source="CVE"/>
		<reference ref_id="CVE-2023-1281" ref_url="https://www.suse.com/security/cve/CVE-2023-1281/" source="CVE"/>
		<reference ref_id="CVE-2023-1390" ref_url="https://www.suse.com/security/cve/CVE-2023-1390/" source="CVE"/>
		<reference ref_id="CVE-2023-1513" ref_url="https://www.suse.com/security/cve/CVE-2023-1513/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="CVE-2023-23455" ref_url="https://www.suse.com/security/cve/CVE-2023-23455/" source="CVE"/>
		<reference ref_id="CVE-2023-28328" ref_url="https://www.suse.com/security/cve/CVE-2023-28328/" source="CVE"/>
		<reference ref_id="CVE-2023-28464" ref_url="https://www.suse.com/security/cve/CVE-2023-28464/" source="CVE"/>
		<reference ref_id="CVE-2023-28772" ref_url="https://www.suse.com/security/cve/CVE-2023-28772/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1848-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028819.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).
- CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).
- CVE-2021-3923: Fixed stack information leak vulnerability that could lead to kernel protection bypass in infiniband RDMA (bsc#1209778).
- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bsc#1194535).
- CVE-2022-20567: Fixed use after free that could lead to a local privilege escalation in pppol2tp_create of l2tp_ppp.c (bsc#1208850).
- CVE-2023-0394: Fixed a null pointer dereference flaw in the network subcomponent in the Linux kernel which could lead to system crash (bsc#1207168).
- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599).
- CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634).
- CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1209289).
- CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532).
- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207036).
- CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207125).
- CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291).
- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052).
- CVE-2023-28772: Fixed buffer overflow in seq_buf_putmem_hex in lib/seq_buf.c (bsc#1209549).

The following non-security bugs were fixed:

- Do not sign the vanilla kernel (bsc#1209008).
- PCI: hv: Add a per-bus mutex state_lock (bsc#1208811).
- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1208811).
- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1208811).
- PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1208811).
- Revert 'PCI: hv: Fix a timing issue which causes kdump to fail occasionally' (bsc#1208811).
- cifs: fix double free in dfs mounts (bsc#1209845).
- cifs: fix nodfs mount option (bsc#1209845).
- cifs: handle reconnect of tcon when there is no cached dfs referral (bsc#1209845).
- cifs: missing null pointer check in cifs_mount (bsc#1209845).
- cifs: serialize all mount attempts (bsc#1209845).
- cred: allow get_cred() and put_cred() to be given NULL (bsc#1209887).
- ibmvnic: Process crqs after enabling interrupts (bsc#1192273 ltc#194629).
- ibmvnic: do not stop queue in xmit (bsc#1192273 ltc#194629).
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (bsc#1207168).
- kernel-module-subpackage: Fix expansion with -b parameter (bsc#1208179).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-06"/>
	<updated date="2023-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076830">SUSE bug 1076830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192273">SUSE bug 1192273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194535">SUSE bug 1194535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207036">SUSE bug 1207036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207125">SUSE bug 1207125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207168">SUSE bug 1207168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207795">SUSE bug 1207795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208179">SUSE bug 1208179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208599">SUSE bug 1208599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208777">SUSE bug 1208777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208811">SUSE bug 1208811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208850">SUSE bug 1208850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209008">SUSE bug 1209008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209052">SUSE bug 1209052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209256">SUSE bug 1209256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209289">SUSE bug 1209289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209291">SUSE bug 1209291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209532">SUSE bug 1209532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209547">SUSE bug 1209547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209549">SUSE bug 1209549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209634">SUSE bug 1209634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209778">SUSE bug 1209778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209845">SUSE bug 1209845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209887">SUSE bug 1209887</bugzilla>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3923/">CVE-2021-3923</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4203/">CVE-2021-4203</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20567/">CVE-2022-20567</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0394/">CVE-2023-0394</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0590/">CVE-2023-0590</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-1076/">CVE-2023-1076</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1095/">CVE-2023-1095</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1281/">CVE-2023-1281</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1390/">CVE-2023-1390</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-1513/">CVE-2023-1513</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23455/">CVE-2023-23455</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-28328/">CVE-2023-28328</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28464/">CVE-2023-28464</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28772/">CVE-2023-28772</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009753696" comment="kernel-default-livepatch-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753697" comment="kernel-default-livepatch-devel-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753698" comment="kernel-livepatch-4_12_14-150100_197_142-default-1-150100.3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138730" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1203993" ref_url="https://bugzilla.suse.com/1203993" source="BUGZILLA"/>
		<reference ref_id="1207822" ref_url="https://bugzilla.suse.com/1207822" source="BUGZILLA"/>
		<reference ref_id="1208910" ref_url="https://bugzilla.suse.com/1208910" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2991" ref_url="https://www.suse.com/security/cve/CVE-2022-2991/" source="CVE"/>
		<reference ref_id="CVE-2023-0590" ref_url="https://www.suse.com/security/cve/CVE-2023-0590/" source="CVE"/>
		<reference ref_id="CVE-2023-1118" ref_url="https://www.suse.com/security/cve/CVE-2023-1118/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1983-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028975.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_114 fixes several issues.

The following security issues were fixed:

- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
- CVE-2022-2991: Fixed an heap-based overflow in the lightnvm implemenation (bsc#1201420).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-25"/>
	<updated date="2023-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203993">SUSE bug 1203993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207822">SUSE bug 1207822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208910">SUSE bug 1208910</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2991/">CVE-2022-2991</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0590/">CVE-2023-0590</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1118/">CVE-2023-1118</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720992" comment="kernel-default 4.12.14-150100.197.114 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719211" comment="kernel-livepatch-4_12_14-150100_197_114-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009755176" comment="kernel-livepatch-4_12_14-150100_197_114-default-11-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138731" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1203993" ref_url="https://bugzilla.suse.com/1203993" source="BUGZILLA"/>
		<reference ref_id="1207822" ref_url="https://bugzilla.suse.com/1207822" source="BUGZILLA"/>
		<reference ref_id="1208910" ref_url="https://bugzilla.suse.com/1208910" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2991" ref_url="https://www.suse.com/security/cve/CVE-2022-2991/" source="CVE"/>
		<reference ref_id="CVE-2023-0590" ref_url="https://www.suse.com/security/cve/CVE-2023-0590/" source="CVE"/>
		<reference ref_id="CVE-2023-1118" ref_url="https://www.suse.com/security/cve/CVE-2023-1118/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_117 fixes several issues.

The following security issues were fixed:

- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
- CVE-2022-2991: Fixed an heap-based overflow in the lightnvm implemenation (bsc#1201420).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-25"/>
	<updated date="2023-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203993">SUSE bug 1203993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207822">SUSE bug 1207822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208910">SUSE bug 1208910</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2991/">CVE-2022-2991</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0590/">CVE-2023-0590</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1118/">CVE-2023-1118</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720993" comment="kernel-default 4.12.14-150100.197.117 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719212" comment="kernel-livepatch-4_12_14-150100_197_117-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009755177" comment="kernel-livepatch-4_12_14-150100_197_117-default-9-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138732" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207822" ref_url="https://bugzilla.suse.com/1207822" source="BUGZILLA"/>
		<reference ref_id="1208910" ref_url="https://bugzilla.suse.com/1208910" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0590" ref_url="https://www.suse.com/security/cve/CVE-2023-0590/" source="CVE"/>
		<reference ref_id="CVE-2023-1118" ref_url="https://www.suse.com/security/cve/CVE-2023-1118/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1982-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028977.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_126 fixes several issues.

The following security issues were fixed:

- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-25"/>
	<updated date="2023-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207822">SUSE bug 1207822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208910">SUSE bug 1208910</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0590/">CVE-2023-0590</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1118/">CVE-2023-1118</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725197" comment="kernel-default 4.12.14-150100.197.126 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725198" comment="kernel-livepatch-4_12_14-150100_197_126-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009755180" comment="kernel-livepatch-4_12_14-150100_197_126-default-6-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138733" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207822" ref_url="https://bugzilla.suse.com/1207822" source="BUGZILLA"/>
		<reference ref_id="1208910" ref_url="https://bugzilla.suse.com/1208910" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0590" ref_url="https://www.suse.com/security/cve/CVE-2023-0590/" source="CVE"/>
		<reference ref_id="CVE-2023-1118" ref_url="https://www.suse.com/security/cve/CVE-2023-1118/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_134 fixes several issues.

The following security issues were fixed:

- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-25"/>
	<updated date="2023-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207822">SUSE bug 1207822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208910">SUSE bug 1208910</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0590/">CVE-2023-0590</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1118/">CVE-2023-1118</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009738361" comment="kernel-default 4.12.14-150100.197.134 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009738362" comment="kernel-livepatch-4_12_14-150100_197_134-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009755182" comment="kernel-livepatch-4_12_14-150100_197_134-default-3-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138734" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207822" ref_url="https://bugzilla.suse.com/1207822" source="BUGZILLA"/>
		<reference ref_id="1208910" ref_url="https://bugzilla.suse.com/1208910" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0590" ref_url="https://www.suse.com/security/cve/CVE-2023-0590/" source="CVE"/>
		<reference ref_id="CVE-2023-1118" ref_url="https://www.suse.com/security/cve/CVE-2023-1118/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2024-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028994.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_123 fixes several issues.

The following security issues were fixed:

- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-26"/>
	<updated date="2023-04-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207822">SUSE bug 1207822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208910">SUSE bug 1208910</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0590/">CVE-2023-0590</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1118/">CVE-2023-1118</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725195" comment="kernel-default 4.12.14-150100.197.123 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725196" comment="kernel-livepatch-4_12_14-150100_197_123-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009755179" comment="kernel-livepatch-4_12_14-150100_197_123-default-6-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138735" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207822" ref_url="https://bugzilla.suse.com/1207822" source="BUGZILLA"/>
		<reference ref_id="1208910" ref_url="https://bugzilla.suse.com/1208910" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0590" ref_url="https://www.suse.com/security/cve/CVE-2023-0590/" source="CVE"/>
		<reference ref_id="CVE-2023-1118" ref_url="https://www.suse.com/security/cve/CVE-2023-1118/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_131 fixes several issues.

The following security issues were fixed:

- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-26"/>
	<updated date="2023-04-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207822">SUSE bug 1207822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208910">SUSE bug 1208910</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0590/">CVE-2023-0590</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1118/">CVE-2023-1118</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728721" comment="kernel-default 4.12.14-150100.197.131 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009728722" comment="kernel-livepatch-4_12_14-150100_197_131-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009755181" comment="kernel-livepatch-4_12_14-150100_197_131-default-4-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138736" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1203993" ref_url="https://bugzilla.suse.com/1203993" source="BUGZILLA"/>
		<reference ref_id="1207822" ref_url="https://bugzilla.suse.com/1207822" source="BUGZILLA"/>
		<reference ref_id="1208910" ref_url="https://bugzilla.suse.com/1208910" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2991" ref_url="https://www.suse.com/security/cve/CVE-2022-2991/" source="CVE"/>
		<reference ref_id="CVE-2023-0590" ref_url="https://www.suse.com/security/cve/CVE-2023-0590/" source="CVE"/>
		<reference ref_id="CVE-2023-1118" ref_url="https://www.suse.com/security/cve/CVE-2023-1118/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2023-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028993.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_120 fixes several issues.

The following security issues were fixed:

- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
- CVE-2022-2991: Fixed an heap-based overflow in the lightnvm implemenation (bsc#1201420).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-26"/>
	<updated date="2023-04-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203993">SUSE bug 1203993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207822">SUSE bug 1207822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208910">SUSE bug 1208910</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2991/">CVE-2022-2991</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0590/">CVE-2023-0590</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1118/">CVE-2023-1118</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720994" comment="kernel-default 4.12.14-150100.197.120 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719213" comment="kernel-livepatch-4_12_14-150100_197_120-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009755178" comment="kernel-livepatch-4_12_14-150100_197_120-default-9-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138737" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1202353" ref_url="https://bugzilla.suse.com/1202353" source="BUGZILLA"/>
		<reference ref_id="1205128" ref_url="https://bugzilla.suse.com/1205128" source="BUGZILLA"/>
		<reference ref_id="1209613" ref_url="https://bugzilla.suse.com/1209613" source="BUGZILLA"/>
		<reference ref_id="1209687" ref_url="https://bugzilla.suse.com/1209687" source="BUGZILLA"/>
		<reference ref_id="1209777" ref_url="https://bugzilla.suse.com/1209777" source="BUGZILLA"/>
		<reference ref_id="1209871" ref_url="https://bugzilla.suse.com/1209871" source="BUGZILLA"/>
		<reference ref_id="1209887" ref_url="https://bugzilla.suse.com/1209887" source="BUGZILLA"/>
		<reference ref_id="1210202" ref_url="https://bugzilla.suse.com/1210202" source="BUGZILLA"/>
		<reference ref_id="1210301" ref_url="https://bugzilla.suse.com/1210301" source="BUGZILLA"/>
		<reference ref_id="1210329" ref_url="https://bugzilla.suse.com/1210329" source="BUGZILLA"/>
		<reference ref_id="1210336" ref_url="https://bugzilla.suse.com/1210336" source="BUGZILLA"/>
		<reference ref_id="1210337" ref_url="https://bugzilla.suse.com/1210337" source="BUGZILLA"/>
		<reference ref_id="1210469" ref_url="https://bugzilla.suse.com/1210469" source="BUGZILLA"/>
		<reference ref_id="1210498" ref_url="https://bugzilla.suse.com/1210498" source="BUGZILLA"/>
		<reference ref_id="1210506" ref_url="https://bugzilla.suse.com/1210506" source="BUGZILLA"/>
		<reference ref_id="1210647" ref_url="https://bugzilla.suse.com/1210647" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36691" ref_url="https://www.suse.com/security/cve/CVE-2020-36691/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="CVE-2023-1611" ref_url="https://www.suse.com/security/cve/CVE-2023-1611/" source="CVE"/>
		<reference ref_id="CVE-2023-1670" ref_url="https://www.suse.com/security/cve/CVE-2023-1670/" source="CVE"/>
		<reference ref_id="CVE-2023-1855" ref_url="https://www.suse.com/security/cve/CVE-2023-1855/" source="CVE"/>
		<reference ref_id="CVE-2023-1989" ref_url="https://www.suse.com/security/cve/CVE-2023-1989/" source="CVE"/>
		<reference ref_id="CVE-2023-1990" ref_url="https://www.suse.com/security/cve/CVE-2023-1990/" source="CVE"/>
		<reference ref_id="CVE-2023-1998" ref_url="https://www.suse.com/security/cve/CVE-2023-1998/" source="CVE"/>
		<reference ref_id="CVE-2023-2124" ref_url="https://www.suse.com/security/cve/CVE-2023-2124/" source="CVE"/>
		<reference ref_id="CVE-2023-2162" ref_url="https://www.suse.com/security/cve/CVE-2023-2162/" source="CVE"/>
		<reference ref_id="CVE-2023-30772" ref_url="https://www.suse.com/security/cve/CVE-2023-30772/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2151-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029294.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-2124: Fixed an out of bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498).
- CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647).
- CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).
- CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329).
- CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).
- CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687).
- CVE-2020-36691: Fixed a denial of service vulnerability via a nested Netlink policy with a back reference (bsc#1209777).

The following non-security bugs were fixed:

- cifs: fix negotiate context parsing (bsc#1210301).
- cred: allow get_cred() and put_cred() to be given NULL (bsc#1209887).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-09"/>
	<updated date="2023-05-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202353">SUSE bug 1202353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205128">SUSE bug 1205128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209613">SUSE bug 1209613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209687">SUSE bug 1209687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209777">SUSE bug 1209777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209871">SUSE bug 1209871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209887">SUSE bug 1209887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210202">SUSE bug 1210202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210301">SUSE bug 1210301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210329">SUSE bug 1210329</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210336">SUSE bug 1210336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210337">SUSE bug 1210337</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210469">SUSE bug 1210469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210498">SUSE bug 1210498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210506">SUSE bug 1210506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210647">SUSE bug 1210647</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36691/">CVE-2020-36691</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1611/">CVE-2023-1611</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1670/">CVE-2023-1670</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1855/">CVE-2023-1855</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1989/">CVE-2023-1989</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1990/">CVE-2023-1990</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-1998/">CVE-2023-1998</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2124/">CVE-2023-2124</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2162/">CVE-2023-2162</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-30772/">CVE-2023-30772</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009756950" comment="kernel-default-livepatch-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756951" comment="kernel-default-livepatch-devel-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756952" comment="kernel-livepatch-4_12_14-150100_197_145-default-1-150100.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138738" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1204167" ref_url="https://bugzilla.suse.com/1204167" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3424" ref_url="https://www.suse.com/security/cve/CVE-2022-3424/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0227-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013616.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_123 fixes one issue.

The following security issue was fixed:

- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic  (bsc#1204167).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-01"/>
	<updated date="2023-02-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204167">SUSE bug 1204167</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3424/">CVE-2022-3424</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725195" comment="kernel-default 4.12.14-150100.197.123 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725196" comment="kernel-livepatch-4_12_14-150100_197_123-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009737040" comment="kernel-livepatch-4_12_14-150100_197_123-default-3-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138739" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1204167" ref_url="https://bugzilla.suse.com/1204167" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3424" ref_url="https://www.suse.com/security/cve/CVE-2022-3424/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013619.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_108 fixes one issue.

The following security issue was fixed:

- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic  (bsc#1204167).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-02"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204167">SUSE bug 1204167</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3424/">CVE-2022-3424</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720990" comment="kernel-default 4.12.14-197.108 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719209" comment="kernel-livepatch-4_12_14-197_108-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009737042" comment="kernel-livepatch-4_12_14-197_108-default-12-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138740" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1204167" ref_url="https://bugzilla.suse.com/1204167" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3424" ref_url="https://www.suse.com/security/cve/CVE-2022-3424/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0231-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013619.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_105 fixes one issue.

The following security issue was fixed:

- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic  (bsc#1204167).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-02"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204167">SUSE bug 1204167</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3424/">CVE-2022-3424</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720989" comment="kernel-default 4.12.14-197.105 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719208" comment="kernel-livepatch-4_12_14-197_105-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009737041" comment="kernel-livepatch-4_12_14-197_105-default-13-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138741" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1204167" ref_url="https://bugzilla.suse.com/1204167" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3424" ref_url="https://www.suse.com/security/cve/CVE-2022-3424/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013620.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_114 fixes one issue.

The following security issue was fixed:

- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic  (bsc#1204167).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-02"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204167">SUSE bug 1204167</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3424/">CVE-2022-3424</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720992" comment="kernel-default 4.12.14-150100.197.114 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719211" comment="kernel-livepatch-4_12_14-150100_197_114-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009737044" comment="kernel-livepatch-4_12_14-150100_197_114-default-8-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138742" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1204167" ref_url="https://bugzilla.suse.com/1204167" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3424" ref_url="https://www.suse.com/security/cve/CVE-2022-3424/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013620.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_117 fixes one issue.

The following security issue was fixed:

- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic  (bsc#1204167).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-02"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204167">SUSE bug 1204167</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3424/">CVE-2022-3424</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720993" comment="kernel-default 4.12.14-150100.197.117 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719212" comment="kernel-livepatch-4_12_14-150100_197_117-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009737045" comment="kernel-livepatch-4_12_14-150100_197_117-default-6-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138743" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1204167" ref_url="https://bugzilla.suse.com/1204167" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3424" ref_url="https://www.suse.com/security/cve/CVE-2022-3424/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013620.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_120 fixes one issue.

The following security issue was fixed:

- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic  (bsc#1204167).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-02"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204167">SUSE bug 1204167</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3424/">CVE-2022-3424</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720994" comment="kernel-default 4.12.14-150100.197.120 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719213" comment="kernel-livepatch-4_12_14-150100_197_120-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009737046" comment="kernel-livepatch-4_12_14-150100_197_120-default-6-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138744" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1204167" ref_url="https://bugzilla.suse.com/1204167" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3424" ref_url="https://www.suse.com/security/cve/CVE-2022-3424/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0235-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013620.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_126 fixes one issue.

The following security issue was fixed:

- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic  (bsc#1204167).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-02"/>
	<updated date="2023-02-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204167">SUSE bug 1204167</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3424/">CVE-2022-3424</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725197" comment="kernel-default 4.12.14-150100.197.126 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725198" comment="kernel-livepatch-4_12_14-150100_197_126-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009737047" comment="kernel-livepatch-4_12_14-150100_197_126-default-3-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138745" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207188" ref_url="https://bugzilla.suse.com/1207188" source="BUGZILLA"/>
		<reference ref_id="1209683" ref_url="https://bugzilla.suse.com/1209683" source="BUGZILLA"/>
		<reference ref_id="1210500" ref_url="https://bugzilla.suse.com/1210500" source="BUGZILLA"/>
		<reference ref_id="1210662" ref_url="https://bugzilla.suse.com/1210662" source="BUGZILLA"/>
		<reference ref_id="1211111" ref_url="https://bugzilla.suse.com/1211111" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1281" ref_url="https://www.suse.com/security/cve/CVE-2023-1281/" source="CVE"/>
		<reference ref_id="CVE-2023-1989" ref_url="https://www.suse.com/security/cve/CVE-2023-1989/" source="CVE"/>
		<reference ref_id="CVE-2023-2162" ref_url="https://www.suse.com/security/cve/CVE-2023-2162/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="CVE-2023-28464" ref_url="https://www.suse.com/security/cve/CVE-2023-28464/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_137 fixes several issues.

The following security issues were fixed:

- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210500).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209683).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210662).
- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-05"/>
	<updated date="2023-06-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207188">SUSE bug 1207188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209683">SUSE bug 1209683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210500">SUSE bug 1210500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210662">SUSE bug 1210662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211111">SUSE bug 1211111</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1281/">CVE-2023-1281</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1989/">CVE-2023-1989</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2162/">CVE-2023-2162</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28464/">CVE-2023-28464</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764496" comment="kernel-default 4.12.14-150100.197.137 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009764497" comment="kernel-livepatch-4_12_14-150100_197_137-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009764498" comment="kernel-livepatch-4_12_14-150100_197_137-default-2-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138746" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207188" ref_url="https://bugzilla.suse.com/1207188" source="BUGZILLA"/>
		<reference ref_id="1209683" ref_url="https://bugzilla.suse.com/1209683" source="BUGZILLA"/>
		<reference ref_id="1210500" ref_url="https://bugzilla.suse.com/1210500" source="BUGZILLA"/>
		<reference ref_id="1210662" ref_url="https://bugzilla.suse.com/1210662" source="BUGZILLA"/>
		<reference ref_id="1211111" ref_url="https://bugzilla.suse.com/1211111" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1281" ref_url="https://www.suse.com/security/cve/CVE-2023-1281/" source="CVE"/>
		<reference ref_id="CVE-2023-1989" ref_url="https://www.suse.com/security/cve/CVE-2023-1989/" source="CVE"/>
		<reference ref_id="CVE-2023-2162" ref_url="https://www.suse.com/security/cve/CVE-2023-2162/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="CVE-2023-28464" ref_url="https://www.suse.com/security/cve/CVE-2023-28464/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_131 fixes several issues.

The following security issues were fixed:

- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210500).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209683).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210662).
- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-05"/>
	<updated date="2023-06-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207188">SUSE bug 1207188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209683">SUSE bug 1209683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210500">SUSE bug 1210500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210662">SUSE bug 1210662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211111">SUSE bug 1211111</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1281/">CVE-2023-1281</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1989/">CVE-2023-1989</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2162/">CVE-2023-2162</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28464/">CVE-2023-28464</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728721" comment="kernel-default 4.12.14-150100.197.131 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009728722" comment="kernel-livepatch-4_12_14-150100_197_131-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009764494" comment="kernel-livepatch-4_12_14-150100_197_131-default-5-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138747" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207188" ref_url="https://bugzilla.suse.com/1207188" source="BUGZILLA"/>
		<reference ref_id="1209683" ref_url="https://bugzilla.suse.com/1209683" source="BUGZILLA"/>
		<reference ref_id="1210500" ref_url="https://bugzilla.suse.com/1210500" source="BUGZILLA"/>
		<reference ref_id="1210662" ref_url="https://bugzilla.suse.com/1210662" source="BUGZILLA"/>
		<reference ref_id="1211111" ref_url="https://bugzilla.suse.com/1211111" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1281" ref_url="https://www.suse.com/security/cve/CVE-2023-1281/" source="CVE"/>
		<reference ref_id="CVE-2023-1989" ref_url="https://www.suse.com/security/cve/CVE-2023-1989/" source="CVE"/>
		<reference ref_id="CVE-2023-2162" ref_url="https://www.suse.com/security/cve/CVE-2023-2162/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="CVE-2023-28464" ref_url="https://www.suse.com/security/cve/CVE-2023-28464/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_120 fixes several issues.

The following security issues were fixed:

- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210500).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209683).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210662).
- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-05"/>
	<updated date="2023-06-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207188">SUSE bug 1207188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209683">SUSE bug 1209683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210500">SUSE bug 1210500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210662">SUSE bug 1210662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211111">SUSE bug 1211111</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1281/">CVE-2023-1281</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1989/">CVE-2023-1989</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2162/">CVE-2023-2162</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28464/">CVE-2023-28464</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720994" comment="kernel-default 4.12.14-150100.197.120 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719213" comment="kernel-livepatch-4_12_14-150100_197_120-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009764491" comment="kernel-livepatch-4_12_14-150100_197_120-default-10-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138748" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207188" ref_url="https://bugzilla.suse.com/1207188" source="BUGZILLA"/>
		<reference ref_id="1209683" ref_url="https://bugzilla.suse.com/1209683" source="BUGZILLA"/>
		<reference ref_id="1210500" ref_url="https://bugzilla.suse.com/1210500" source="BUGZILLA"/>
		<reference ref_id="1210662" ref_url="https://bugzilla.suse.com/1210662" source="BUGZILLA"/>
		<reference ref_id="1211111" ref_url="https://bugzilla.suse.com/1211111" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1281" ref_url="https://www.suse.com/security/cve/CVE-2023-1281/" source="CVE"/>
		<reference ref_id="CVE-2023-1989" ref_url="https://www.suse.com/security/cve/CVE-2023-1989/" source="CVE"/>
		<reference ref_id="CVE-2023-2162" ref_url="https://www.suse.com/security/cve/CVE-2023-2162/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="CVE-2023-28464" ref_url="https://www.suse.com/security/cve/CVE-2023-28464/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_117 fixes several issues.

The following security issues were fixed:

- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210500).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209683).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210662).
- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-05"/>
	<updated date="2023-06-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207188">SUSE bug 1207188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209683">SUSE bug 1209683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210500">SUSE bug 1210500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210662">SUSE bug 1210662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211111">SUSE bug 1211111</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1281/">CVE-2023-1281</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1989/">CVE-2023-1989</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2162/">CVE-2023-2162</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28464/">CVE-2023-28464</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720993" comment="kernel-default 4.12.14-150100.197.117 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719212" comment="kernel-livepatch-4_12_14-150100_197_117-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009764490" comment="kernel-livepatch-4_12_14-150100_197_117-default-10-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138749" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207188" ref_url="https://bugzilla.suse.com/1207188" source="BUGZILLA"/>
		<reference ref_id="1209683" ref_url="https://bugzilla.suse.com/1209683" source="BUGZILLA"/>
		<reference ref_id="1210500" ref_url="https://bugzilla.suse.com/1210500" source="BUGZILLA"/>
		<reference ref_id="1210662" ref_url="https://bugzilla.suse.com/1210662" source="BUGZILLA"/>
		<reference ref_id="1211111" ref_url="https://bugzilla.suse.com/1211111" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1281" ref_url="https://www.suse.com/security/cve/CVE-2023-1281/" source="CVE"/>
		<reference ref_id="CVE-2023-1989" ref_url="https://www.suse.com/security/cve/CVE-2023-1989/" source="CVE"/>
		<reference ref_id="CVE-2023-2162" ref_url="https://www.suse.com/security/cve/CVE-2023-2162/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="CVE-2023-28464" ref_url="https://www.suse.com/security/cve/CVE-2023-28464/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2376-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029709.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_114 fixes several issues.

The following security issues were fixed:

- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210500).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209683).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210662).
- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-05"/>
	<updated date="2023-06-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207188">SUSE bug 1207188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209683">SUSE bug 1209683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210500">SUSE bug 1210500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210662">SUSE bug 1210662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211111">SUSE bug 1211111</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1281/">CVE-2023-1281</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1989/">CVE-2023-1989</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2162/">CVE-2023-2162</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28464/">CVE-2023-28464</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720992" comment="kernel-default 4.12.14-150100.197.114 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719211" comment="kernel-livepatch-4_12_14-150100_197_114-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009764489" comment="kernel-livepatch-4_12_14-150100_197_114-default-12-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138750" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207188" ref_url="https://bugzilla.suse.com/1207188" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2385-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029735.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_145 fixes one issue.

The following security issue was fixed:

- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-06"/>
	<updated date="2023-06-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207188">SUSE bug 1207188</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764502" comment="kernel-default 4.12.14-150100.197.145 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009764503" comment="kernel-livepatch-4_12_14-150100_197_145-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009764504" comment="kernel-livepatch-4_12_14-150100_197_145-default-2-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138751" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207188" ref_url="https://bugzilla.suse.com/1207188" source="BUGZILLA"/>
		<reference ref_id="1210500" ref_url="https://bugzilla.suse.com/1210500" source="BUGZILLA"/>
		<reference ref_id="1210662" ref_url="https://bugzilla.suse.com/1210662" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1989" ref_url="https://www.suse.com/security/cve/CVE-2023-1989/" source="CVE"/>
		<reference ref_id="CVE-2023-2162" ref_url="https://www.suse.com/security/cve/CVE-2023-2162/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015088.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_142 fixes several issues.

The following security issues were fixed:

- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210500).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210662).
- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-06"/>
	<updated date="2023-06-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207188">SUSE bug 1207188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210500">SUSE bug 1210500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210662">SUSE bug 1210662</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1989/">CVE-2023-1989</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2162/">CVE-2023-2162</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764499" comment="kernel-default 4.12.14-150100.197.142 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009764500" comment="kernel-livepatch-4_12_14-150100_197_142-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009764501" comment="kernel-livepatch-4_12_14-150100_197_142-default-2-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138752" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207188" ref_url="https://bugzilla.suse.com/1207188" source="BUGZILLA"/>
		<reference ref_id="1209683" ref_url="https://bugzilla.suse.com/1209683" source="BUGZILLA"/>
		<reference ref_id="1210500" ref_url="https://bugzilla.suse.com/1210500" source="BUGZILLA"/>
		<reference ref_id="1210662" ref_url="https://bugzilla.suse.com/1210662" source="BUGZILLA"/>
		<reference ref_id="1211111" ref_url="https://bugzilla.suse.com/1211111" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1281" ref_url="https://www.suse.com/security/cve/CVE-2023-1281/" source="CVE"/>
		<reference ref_id="CVE-2023-1989" ref_url="https://www.suse.com/security/cve/CVE-2023-1989/" source="CVE"/>
		<reference ref_id="CVE-2023-2162" ref_url="https://www.suse.com/security/cve/CVE-2023-2162/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="CVE-2023-28464" ref_url="https://www.suse.com/security/cve/CVE-2023-28464/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_134 fixes several issues.

The following security issues were fixed:

- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210500).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209683).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210662).
- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-06"/>
	<updated date="2023-06-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207188">SUSE bug 1207188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209683">SUSE bug 1209683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210500">SUSE bug 1210500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210662">SUSE bug 1210662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211111">SUSE bug 1211111</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1281/">CVE-2023-1281</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1989/">CVE-2023-1989</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2162/">CVE-2023-2162</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28464/">CVE-2023-28464</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009738361" comment="kernel-default 4.12.14-150100.197.134 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009738362" comment="kernel-livepatch-4_12_14-150100_197_134-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009764495" comment="kernel-livepatch-4_12_14-150100_197_134-default-4-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138753" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207188" ref_url="https://bugzilla.suse.com/1207188" source="BUGZILLA"/>
		<reference ref_id="1209683" ref_url="https://bugzilla.suse.com/1209683" source="BUGZILLA"/>
		<reference ref_id="1210500" ref_url="https://bugzilla.suse.com/1210500" source="BUGZILLA"/>
		<reference ref_id="1210662" ref_url="https://bugzilla.suse.com/1210662" source="BUGZILLA"/>
		<reference ref_id="1211111" ref_url="https://bugzilla.suse.com/1211111" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1281" ref_url="https://www.suse.com/security/cve/CVE-2023-1281/" source="CVE"/>
		<reference ref_id="CVE-2023-1989" ref_url="https://www.suse.com/security/cve/CVE-2023-1989/" source="CVE"/>
		<reference ref_id="CVE-2023-2162" ref_url="https://www.suse.com/security/cve/CVE-2023-2162/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="CVE-2023-28464" ref_url="https://www.suse.com/security/cve/CVE-2023-28464/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2389-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015087.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_126 fixes several issues.

The following security issues were fixed:

- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210500).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209683).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210662).
- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-06"/>
	<updated date="2023-06-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207188">SUSE bug 1207188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209683">SUSE bug 1209683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210500">SUSE bug 1210500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210662">SUSE bug 1210662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211111">SUSE bug 1211111</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1281/">CVE-2023-1281</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1989/">CVE-2023-1989</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2162/">CVE-2023-2162</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28464/">CVE-2023-28464</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725197" comment="kernel-default 4.12.14-150100.197.126 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725198" comment="kernel-livepatch-4_12_14-150100_197_126-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009764493" comment="kernel-livepatch-4_12_14-150100_197_126-default-7-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138754" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207188" ref_url="https://bugzilla.suse.com/1207188" source="BUGZILLA"/>
		<reference ref_id="1209683" ref_url="https://bugzilla.suse.com/1209683" source="BUGZILLA"/>
		<reference ref_id="1210500" ref_url="https://bugzilla.suse.com/1210500" source="BUGZILLA"/>
		<reference ref_id="1210662" ref_url="https://bugzilla.suse.com/1210662" source="BUGZILLA"/>
		<reference ref_id="1211111" ref_url="https://bugzilla.suse.com/1211111" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1281" ref_url="https://www.suse.com/security/cve/CVE-2023-1281/" source="CVE"/>
		<reference ref_id="CVE-2023-1989" ref_url="https://www.suse.com/security/cve/CVE-2023-1989/" source="CVE"/>
		<reference ref_id="CVE-2023-2162" ref_url="https://www.suse.com/security/cve/CVE-2023-2162/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="CVE-2023-28464" ref_url="https://www.suse.com/security/cve/CVE-2023-28464/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_123 fixes several issues.

The following security issues were fixed:

- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210500).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209683).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210662).
- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-06"/>
	<updated date="2023-06-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207188">SUSE bug 1207188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209683">SUSE bug 1209683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210500">SUSE bug 1210500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210662">SUSE bug 1210662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211111">SUSE bug 1211111</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1281/">CVE-2023-1281</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1989/">CVE-2023-1989</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2162/">CVE-2023-2162</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28464/">CVE-2023-28464</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725195" comment="kernel-default 4.12.14-150100.197.123 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725196" comment="kernel-livepatch-4_12_14-150100_197_123-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009764492" comment="kernel-livepatch-4_12_14-150100_197_123-default-7-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138755" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1204167" ref_url="https://bugzilla.suse.com/1204167" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3424" ref_url="https://www.suse.com/security/cve/CVE-2022-3424/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0240-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013624.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_111 fixes one issue.

The following security issue was fixed:

- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic  (bsc#1204167).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-03"/>
	<updated date="2023-02-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204167">SUSE bug 1204167</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3424/">CVE-2022-3424</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720991" comment="kernel-default 4.12.14-150100.197.111 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719210" comment="kernel-livepatch-4_12_14-150100_197_111-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009737043" comment="kernel-livepatch-4_12_14-150100_197_111-default-11-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138756" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1191731" ref_url="https://bugzilla.suse.com/1191731" source="BUGZILLA"/>
		<reference ref_id="1199046" ref_url="https://bugzilla.suse.com/1199046" source="BUGZILLA"/>
		<reference ref_id="1204405" ref_url="https://bugzilla.suse.com/1204405" source="BUGZILLA"/>
		<reference ref_id="1205756" ref_url="https://bugzilla.suse.com/1205756" source="BUGZILLA"/>
		<reference ref_id="1205758" ref_url="https://bugzilla.suse.com/1205758" source="BUGZILLA"/>
		<reference ref_id="1205760" ref_url="https://bugzilla.suse.com/1205760" source="BUGZILLA"/>
		<reference ref_id="1205762" ref_url="https://bugzilla.suse.com/1205762" source="BUGZILLA"/>
		<reference ref_id="1205803" ref_url="https://bugzilla.suse.com/1205803" source="BUGZILLA"/>
		<reference ref_id="1206878" ref_url="https://bugzilla.suse.com/1206878" source="BUGZILLA"/>
		<reference ref_id="1208600" ref_url="https://bugzilla.suse.com/1208600" source="BUGZILLA"/>
		<reference ref_id="1209287" ref_url="https://bugzilla.suse.com/1209287" source="BUGZILLA"/>
		<reference ref_id="1209366" ref_url="https://bugzilla.suse.com/1209366" source="BUGZILLA"/>
		<reference ref_id="1210629" ref_url="https://bugzilla.suse.com/1210629" source="BUGZILLA"/>
		<reference ref_id="1210715" ref_url="https://bugzilla.suse.com/1210715" source="BUGZILLA"/>
		<reference ref_id="1210783" ref_url="https://bugzilla.suse.com/1210783" source="BUGZILLA"/>
		<reference ref_id="1210791" ref_url="https://bugzilla.suse.com/1210791" source="BUGZILLA"/>
		<reference ref_id="1210940" ref_url="https://bugzilla.suse.com/1210940" source="BUGZILLA"/>
		<reference ref_id="1211037" ref_url="https://bugzilla.suse.com/1211037" source="BUGZILLA"/>
		<reference ref_id="1211089" ref_url="https://bugzilla.suse.com/1211089" source="BUGZILLA"/>
		<reference ref_id="1211105" ref_url="https://bugzilla.suse.com/1211105" source="BUGZILLA"/>
		<reference ref_id="1211186" ref_url="https://bugzilla.suse.com/1211186" source="BUGZILLA"/>
		<reference ref_id="1211519" ref_url="https://bugzilla.suse.com/1211519" source="BUGZILLA"/>
		<reference ref_id="1211592" ref_url="https://bugzilla.suse.com/1211592" source="BUGZILLA"/>
		<reference ref_id="1211622" ref_url="https://bugzilla.suse.com/1211622" source="BUGZILLA"/>
		<reference ref_id="1211796" ref_url="https://bugzilla.suse.com/1211796" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3566" ref_url="https://www.suse.com/security/cve/CVE-2022-3566/" source="CVE"/>
		<reference ref_id="CVE-2022-45884" ref_url="https://www.suse.com/security/cve/CVE-2022-45884/" source="CVE"/>
		<reference ref_id="CVE-2022-45885" ref_url="https://www.suse.com/security/cve/CVE-2022-45885/" source="CVE"/>
		<reference ref_id="CVE-2022-45886" ref_url="https://www.suse.com/security/cve/CVE-2022-45886/" source="CVE"/>
		<reference ref_id="CVE-2022-45887" ref_url="https://www.suse.com/security/cve/CVE-2022-45887/" source="CVE"/>
		<reference ref_id="CVE-2022-45919" ref_url="https://www.suse.com/security/cve/CVE-2022-45919/" source="CVE"/>
		<reference ref_id="CVE-2023-1077" ref_url="https://www.suse.com/security/cve/CVE-2023-1077/" source="CVE"/>
		<reference ref_id="CVE-2023-1380" ref_url="https://www.suse.com/security/cve/CVE-2023-1380/" source="CVE"/>
		<reference ref_id="CVE-2023-2176" ref_url="https://www.suse.com/security/cve/CVE-2023-2176/" source="CVE"/>
		<reference ref_id="CVE-2023-2194" ref_url="https://www.suse.com/security/cve/CVE-2023-2194/" source="CVE"/>
		<reference ref_id="CVE-2023-2483" ref_url="https://www.suse.com/security/cve/CVE-2023-2483/" source="CVE"/>
		<reference ref_id="CVE-2023-2513" ref_url="https://www.suse.com/security/cve/CVE-2023-2513/" source="CVE"/>
		<reference ref_id="CVE-2023-28466" ref_url="https://www.suse.com/security/cve/CVE-2023-28466/" source="CVE"/>
		<reference ref_id="CVE-2023-31084" ref_url="https://www.suse.com/security/cve/CVE-2023-31084/" source="CVE"/>
		<reference ref_id="CVE-2023-31436" ref_url="https://www.suse.com/security/cve/CVE-2023-31436/" source="CVE"/>
		<reference ref_id="CVE-2023-32269" ref_url="https://www.suse.com/security/cve/CVE-2023-32269/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2534-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029918.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).
- CVE-2022-3566: Fixed race condition in the TCP Handler (bsc#1204405).
- CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760).
- CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758).
- CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762).
- CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803).
- CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756).
- CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783).
- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940).
- CVE-2023-2194: Fixed an out-of-bounds write vulnerability in the SLIMpro I2C device driver (bsc#1210715).
- CVE-2023-32269: Fixed a use-after-free in af_netrom.c, related to the fact that accept() was also allowed for a successfully connected AF_NETROM socket (bsc#1211186).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366).
- CVE-2023-1380: Fixed a slab-out-of-bound read problem in brcmf_get_assoc_ies() (bsc#1209287).
- CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105).
- CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037).
- CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629).

The following non-security bugs were fixed:

- ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519).
- gve: Fix spelling mistake 'droping' -&gt; 'dropping' (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519).
- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592).
- kernel-binary: install expoline.o (boo#1210791 bsc#1211089)
- scsi: storvsc: Parameterize number hardware queues (bsc#1211622).
- usrmerge: Compatibility with earlier rpm (boo#1211796)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-19"/>
	<updated date="2023-06-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191731">SUSE bug 1191731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199046">SUSE bug 1199046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204405">SUSE bug 1204405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205756">SUSE bug 1205756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205758">SUSE bug 1205758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205760">SUSE bug 1205760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205762">SUSE bug 1205762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205803">SUSE bug 1205803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206878">SUSE bug 1206878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208600">SUSE bug 1208600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209287">SUSE bug 1209287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209366">SUSE bug 1209366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210629">SUSE bug 1210629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210715">SUSE bug 1210715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210783">SUSE bug 1210783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210791">SUSE bug 1210791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210940">SUSE bug 1210940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211037">SUSE bug 1211037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211089">SUSE bug 1211089</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211105">SUSE bug 1211105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211186">SUSE bug 1211186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211519">SUSE bug 1211519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211592">SUSE bug 1211592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211622">SUSE bug 1211622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211796">SUSE bug 1211796</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3566/">CVE-2022-3566</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45884/">CVE-2022-45884</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45885/">CVE-2022-45885</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45886/">CVE-2022-45886</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45887/">CVE-2022-45887</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45919/">CVE-2022-45919</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1077/">CVE-2023-1077</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-1380/">CVE-2023-1380</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2176/">CVE-2023-2176</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2023-2194/">CVE-2023-2194</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2483/">CVE-2023-2483</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2513/">CVE-2023-2513</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28466/">CVE-2023-28466</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-31084/">CVE-2023-31084</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-31436/">CVE-2023-31436</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32269/">CVE-2023-32269</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009765126" comment="kernel-default-livepatch-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765127" comment="kernel-default-livepatch-devel-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765128" comment="kernel-livepatch-4_12_14-150100_197_148-default-1-150100.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138757" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207189" ref_url="https://bugzilla.suse.com/1207189" source="BUGZILLA"/>
		<reference ref_id="1210452" ref_url="https://bugzilla.suse.com/1210452" source="BUGZILLA"/>
		<reference ref_id="1210779" ref_url="https://bugzilla.suse.com/1210779" source="BUGZILLA"/>
		<reference ref_id="1210989" ref_url="https://bugzilla.suse.com/1210989" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1390" ref_url="https://www.suse.com/security/cve/CVE-2023-1390/" source="CVE"/>
		<reference ref_id="CVE-2023-23455" ref_url="https://www.suse.com/security/cve/CVE-2023-23455/" source="CVE"/>
		<reference ref_id="CVE-2023-28466" ref_url="https://www.suse.com/security/cve/CVE-2023-28466/" source="CVE"/>
		<reference ref_id="CVE-2023-31436" ref_url="https://www.suse.com/security/cve/CVE-2023-31436/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_120 fixes several issues.

The following security issues were fixed:

- CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207189).
- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989).
- CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1210779).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1210452).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-28"/>
	<updated date="2023-06-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207189">SUSE bug 1207189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210452">SUSE bug 1210452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210779">SUSE bug 1210779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210989">SUSE bug 1210989</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1390/">CVE-2023-1390</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23455/">CVE-2023-23455</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28466/">CVE-2023-28466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-31436/">CVE-2023-31436</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720994" comment="kernel-default 4.12.14-150100.197.120 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719213" comment="kernel-livepatch-4_12_14-150100_197_120-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009769857" comment="kernel-livepatch-4_12_14-150100_197_120-default-11-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138758" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207189" ref_url="https://bugzilla.suse.com/1207189" source="BUGZILLA"/>
		<reference ref_id="1210452" ref_url="https://bugzilla.suse.com/1210452" source="BUGZILLA"/>
		<reference ref_id="1210779" ref_url="https://bugzilla.suse.com/1210779" source="BUGZILLA"/>
		<reference ref_id="1210989" ref_url="https://bugzilla.suse.com/1210989" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1390" ref_url="https://www.suse.com/security/cve/CVE-2023-1390/" source="CVE"/>
		<reference ref_id="CVE-2023-23455" ref_url="https://www.suse.com/security/cve/CVE-2023-23455/" source="CVE"/>
		<reference ref_id="CVE-2023-28466" ref_url="https://www.suse.com/security/cve/CVE-2023-28466/" source="CVE"/>
		<reference ref_id="CVE-2023-31436" ref_url="https://www.suse.com/security/cve/CVE-2023-31436/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_126 fixes several issues.

The following security issues were fixed:

- CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207189).
- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989).
- CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1210779).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1210452).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-28"/>
	<updated date="2023-06-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207189">SUSE bug 1207189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210452">SUSE bug 1210452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210779">SUSE bug 1210779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210989">SUSE bug 1210989</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1390/">CVE-2023-1390</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23455/">CVE-2023-23455</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28466/">CVE-2023-28466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-31436/">CVE-2023-31436</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725197" comment="kernel-default 4.12.14-150100.197.126 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725198" comment="kernel-livepatch-4_12_14-150100_197_126-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009769859" comment="kernel-livepatch-4_12_14-150100_197_126-default-8-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138759" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207189" ref_url="https://bugzilla.suse.com/1207189" source="BUGZILLA"/>
		<reference ref_id="1210452" ref_url="https://bugzilla.suse.com/1210452" source="BUGZILLA"/>
		<reference ref_id="1210779" ref_url="https://bugzilla.suse.com/1210779" source="BUGZILLA"/>
		<reference ref_id="1210989" ref_url="https://bugzilla.suse.com/1210989" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1390" ref_url="https://www.suse.com/security/cve/CVE-2023-1390/" source="CVE"/>
		<reference ref_id="CVE-2023-23455" ref_url="https://www.suse.com/security/cve/CVE-2023-23455/" source="CVE"/>
		<reference ref_id="CVE-2023-28466" ref_url="https://www.suse.com/security/cve/CVE-2023-28466/" source="CVE"/>
		<reference ref_id="CVE-2023-31436" ref_url="https://www.suse.com/security/cve/CVE-2023-31436/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015351.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_131 fixes several issues.

The following security issues were fixed:

- CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207189).
- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989).
- CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1210779).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1210452).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-28"/>
	<updated date="2023-06-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207189">SUSE bug 1207189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210452">SUSE bug 1210452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210779">SUSE bug 1210779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210989">SUSE bug 1210989</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1390/">CVE-2023-1390</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23455/">CVE-2023-23455</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28466/">CVE-2023-28466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-31436/">CVE-2023-31436</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728721" comment="kernel-default 4.12.14-150100.197.131 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009728722" comment="kernel-livepatch-4_12_14-150100_197_131-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009769860" comment="kernel-livepatch-4_12_14-150100_197_131-default-6-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138760" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210452" ref_url="https://bugzilla.suse.com/1210452" source="BUGZILLA"/>
		<reference ref_id="1210779" ref_url="https://bugzilla.suse.com/1210779" source="BUGZILLA"/>
		<reference ref_id="1210989" ref_url="https://bugzilla.suse.com/1210989" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1390" ref_url="https://www.suse.com/security/cve/CVE-2023-1390/" source="CVE"/>
		<reference ref_id="CVE-2023-28466" ref_url="https://www.suse.com/security/cve/CVE-2023-28466/" source="CVE"/>
		<reference ref_id="CVE-2023-31436" ref_url="https://www.suse.com/security/cve/CVE-2023-31436/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2681-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015349.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_134 fixes several issues.

The following security issues were fixed:

- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989).
- CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1210779).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1210452).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-28"/>
	<updated date="2023-06-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210452">SUSE bug 1210452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210779">SUSE bug 1210779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210989">SUSE bug 1210989</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1390/">CVE-2023-1390</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28466/">CVE-2023-28466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-31436/">CVE-2023-31436</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009738361" comment="kernel-default 4.12.14-150100.197.134 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009738362" comment="kernel-livepatch-4_12_14-150100_197_134-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009769861" comment="kernel-livepatch-4_12_14-150100_197_134-default-5-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138761" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210452" ref_url="https://bugzilla.suse.com/1210452" source="BUGZILLA"/>
		<reference ref_id="1210779" ref_url="https://bugzilla.suse.com/1210779" source="BUGZILLA"/>
		<reference ref_id="1210989" ref_url="https://bugzilla.suse.com/1210989" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1390" ref_url="https://www.suse.com/security/cve/CVE-2023-1390/" source="CVE"/>
		<reference ref_id="CVE-2023-28466" ref_url="https://www.suse.com/security/cve/CVE-2023-28466/" source="CVE"/>
		<reference ref_id="CVE-2023-31436" ref_url="https://www.suse.com/security/cve/CVE-2023-31436/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_137 fixes several issues.

The following security issues were fixed:

- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989).
- CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1210779).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1210452).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-28"/>
	<updated date="2023-06-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210452">SUSE bug 1210452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210779">SUSE bug 1210779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210989">SUSE bug 1210989</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1390/">CVE-2023-1390</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28466/">CVE-2023-28466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-31436/">CVE-2023-31436</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764496" comment="kernel-default 4.12.14-150100.197.137 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009764497" comment="kernel-livepatch-4_12_14-150100_197_137-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009769862" comment="kernel-livepatch-4_12_14-150100_197_137-default-3-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138762" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210452" ref_url="https://bugzilla.suse.com/1210452" source="BUGZILLA"/>
		<reference ref_id="1210989" ref_url="https://bugzilla.suse.com/1210989" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28466" ref_url="https://www.suse.com/security/cve/CVE-2023-28466/" source="CVE"/>
		<reference ref_id="CVE-2023-31436" ref_url="https://www.suse.com/security/cve/CVE-2023-31436/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_142 fixes several issues.

The following security issues were fixed:

- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1210452).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-28"/>
	<updated date="2023-06-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210452">SUSE bug 1210452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210989">SUSE bug 1210989</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28466/">CVE-2023-28466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-31436/">CVE-2023-31436</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764499" comment="kernel-default 4.12.14-150100.197.142 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009764500" comment="kernel-livepatch-4_12_14-150100_197_142-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009769863" comment="kernel-livepatch-4_12_14-150100_197_142-default-3-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138763" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210452" ref_url="https://bugzilla.suse.com/1210452" source="BUGZILLA"/>
		<reference ref_id="1210989" ref_url="https://bugzilla.suse.com/1210989" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28466" ref_url="https://www.suse.com/security/cve/CVE-2023-28466/" source="CVE"/>
		<reference ref_id="CVE-2023-31436" ref_url="https://www.suse.com/security/cve/CVE-2023-31436/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2687-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030113.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_145 fixes several issues.

The following security issues were fixed:

- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1210452).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-28"/>
	<updated date="2023-06-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210452">SUSE bug 1210452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210989">SUSE bug 1210989</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28466/">CVE-2023-28466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-31436/">CVE-2023-31436</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764502" comment="kernel-default 4.12.14-150100.197.145 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009764503" comment="kernel-livepatch-4_12_14-150100_197_145-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009769864" comment="kernel-livepatch-4_12_14-150100_197_145-default-3-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138764" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207189" ref_url="https://bugzilla.suse.com/1207189" source="BUGZILLA"/>
		<reference ref_id="1210452" ref_url="https://bugzilla.suse.com/1210452" source="BUGZILLA"/>
		<reference ref_id="1210779" ref_url="https://bugzilla.suse.com/1210779" source="BUGZILLA"/>
		<reference ref_id="1210989" ref_url="https://bugzilla.suse.com/1210989" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1390" ref_url="https://www.suse.com/security/cve/CVE-2023-1390/" source="CVE"/>
		<reference ref_id="CVE-2023-23455" ref_url="https://www.suse.com/security/cve/CVE-2023-23455/" source="CVE"/>
		<reference ref_id="CVE-2023-28466" ref_url="https://www.suse.com/security/cve/CVE-2023-28466/" source="CVE"/>
		<reference ref_id="CVE-2023-31436" ref_url="https://www.suse.com/security/cve/CVE-2023-31436/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2702-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030142.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_117 fixes several issues.

The following security issues were fixed:

- CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207189).
- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989).
- CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1210779).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1210452).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-29"/>
	<updated date="2023-06-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207189">SUSE bug 1207189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210452">SUSE bug 1210452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210779">SUSE bug 1210779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210989">SUSE bug 1210989</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1390/">CVE-2023-1390</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23455/">CVE-2023-23455</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28466/">CVE-2023-28466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-31436/">CVE-2023-31436</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720993" comment="kernel-default 4.12.14-150100.197.117 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719212" comment="kernel-livepatch-4_12_14-150100_197_117-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009769856" comment="kernel-livepatch-4_12_14-150100_197_117-default-11-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138765" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1207189" ref_url="https://bugzilla.suse.com/1207189" source="BUGZILLA"/>
		<reference ref_id="1210452" ref_url="https://bugzilla.suse.com/1210452" source="BUGZILLA"/>
		<reference ref_id="1210779" ref_url="https://bugzilla.suse.com/1210779" source="BUGZILLA"/>
		<reference ref_id="1210989" ref_url="https://bugzilla.suse.com/1210989" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1390" ref_url="https://www.suse.com/security/cve/CVE-2023-1390/" source="CVE"/>
		<reference ref_id="CVE-2023-23455" ref_url="https://www.suse.com/security/cve/CVE-2023-23455/" source="CVE"/>
		<reference ref_id="CVE-2023-28466" ref_url="https://www.suse.com/security/cve/CVE-2023-28466/" source="CVE"/>
		<reference ref_id="CVE-2023-31436" ref_url="https://www.suse.com/security/cve/CVE-2023-31436/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_123 fixes several issues.

The following security issues were fixed:

- CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207189).
- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989).
- CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1210779).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1210452).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-29"/>
	<updated date="2023-06-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207189">SUSE bug 1207189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210452">SUSE bug 1210452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210779">SUSE bug 1210779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210989">SUSE bug 1210989</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1390/">CVE-2023-1390</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23455/">CVE-2023-23455</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28466/">CVE-2023-28466</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-31436/">CVE-2023-31436</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725195" comment="kernel-default 4.12.14-150100.197.123 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725196" comment="kernel-livepatch-4_12_14-150100_197_123-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009769858" comment="kernel-livepatch-4_12_14-150100_197_123-default-8-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138766" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1160435" ref_url="https://bugzilla.suse.com/1160435" source="BUGZILLA"/>
		<reference ref_id="1198400" ref_url="https://bugzilla.suse.com/1198400" source="BUGZILLA"/>
		<reference ref_id="1208604" ref_url="https://bugzilla.suse.com/1208604" source="BUGZILLA"/>
		<reference ref_id="1209039" ref_url="https://bugzilla.suse.com/1209039" source="BUGZILLA"/>
		<reference ref_id="1209779" ref_url="https://bugzilla.suse.com/1209779" source="BUGZILLA"/>
		<reference ref_id="1210533" ref_url="https://bugzilla.suse.com/1210533" source="BUGZILLA"/>
		<reference ref_id="1211449" ref_url="https://bugzilla.suse.com/1211449" source="BUGZILLA"/>
		<reference ref_id="1212051" ref_url="https://bugzilla.suse.com/1212051" source="BUGZILLA"/>
		<reference ref_id="1212128" ref_url="https://bugzilla.suse.com/1212128" source="BUGZILLA"/>
		<reference ref_id="1212129" ref_url="https://bugzilla.suse.com/1212129" source="BUGZILLA"/>
		<reference ref_id="1212154" ref_url="https://bugzilla.suse.com/1212154" source="BUGZILLA"/>
		<reference ref_id="1212158" ref_url="https://bugzilla.suse.com/1212158" source="BUGZILLA"/>
		<reference ref_id="1212501" ref_url="https://bugzilla.suse.com/1212501" source="BUGZILLA"/>
		<reference ref_id="1212502" ref_url="https://bugzilla.suse.com/1212502" source="BUGZILLA"/>
		<reference ref_id="1212606" ref_url="https://bugzilla.suse.com/1212606" source="BUGZILLA"/>
		<reference ref_id="1212842" ref_url="https://bugzilla.suse.com/1212842" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1079" ref_url="https://www.suse.com/security/cve/CVE-2023-1079/" source="CVE"/>
		<reference ref_id="CVE-2023-1249" ref_url="https://www.suse.com/security/cve/CVE-2023-1249/" source="CVE"/>
		<reference ref_id="CVE-2023-1637" ref_url="https://www.suse.com/security/cve/CVE-2023-1637/" source="CVE"/>
		<reference ref_id="CVE-2023-2002" ref_url="https://www.suse.com/security/cve/CVE-2023-2002/" source="CVE"/>
		<reference ref_id="CVE-2023-3090" ref_url="https://www.suse.com/security/cve/CVE-2023-3090/" source="CVE"/>
		<reference ref_id="CVE-2023-3111" ref_url="https://www.suse.com/security/cve/CVE-2023-3111/" source="CVE"/>
		<reference ref_id="CVE-2023-3141" ref_url="https://www.suse.com/security/cve/CVE-2023-3141/" source="CVE"/>
		<reference ref_id="CVE-2023-3159" ref_url="https://www.suse.com/security/cve/CVE-2023-3159/" source="CVE"/>
		<reference ref_id="CVE-2023-3161" ref_url="https://www.suse.com/security/cve/CVE-2023-3161/" source="CVE"/>
		<reference ref_id="CVE-2023-3268" ref_url="https://www.suse.com/security/cve/CVE-2023-3268/" source="CVE"/>
		<reference ref_id="CVE-2023-3358" ref_url="https://www.suse.com/security/cve/CVE-2023-3358/" source="CVE"/>
		<reference ref_id="CVE-2023-35824" ref_url="https://www.suse.com/security/cve/CVE-2023-35824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015491.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604).
- CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).
- CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
- CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).
- CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
- CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).
- CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
- CVE-2023-3268: Fixed an out of bounds flaw in relay_file_read_start_pos in kernel/relay.c that allowed a local attacker to crash the system or leak kernel internal information (bsc#1212502).
- CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
- CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).

The following non-security bugs were fixed:

- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- Move setting %%build_html to config.sh
- Move setting %%split_optional to config.sh
- Move setting %%supported_modules_check to config.sh
- rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm
- rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-14"/>
	<updated date="2023-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160435">SUSE bug 1160435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198400">SUSE bug 1198400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208604">SUSE bug 1208604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209039">SUSE bug 1209039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209779">SUSE bug 1209779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210533">SUSE bug 1210533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211449">SUSE bug 1211449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212051">SUSE bug 1212051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212128">SUSE bug 1212128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212129">SUSE bug 1212129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212154">SUSE bug 1212154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212158">SUSE bug 1212158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212501">SUSE bug 1212501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212502">SUSE bug 1212502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212606">SUSE bug 1212606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212842">SUSE bug 1212842</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1079/">CVE-2023-1079</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-1249/">CVE-2023-1249</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2023-1637/">CVE-2023-1637</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2002/">CVE-2023-2002</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3090/">CVE-2023-3090</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3111/">CVE-2023-3111</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-3141/">CVE-2023-3141</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3159/">CVE-2023-3159</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-3161/">CVE-2023-3161</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-3268/">CVE-2023-3268</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-3358/">CVE-2023-3358</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-35824/">CVE-2023-35824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009771162" comment="kernel-default-livepatch-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771163" comment="kernel-default-livepatch-devel-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771164" comment="kernel-livepatch-4_12_14-150100_197_151-default-1-150100.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138767" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210566" ref_url="https://bugzilla.suse.com/1210566" source="BUGZILLA"/>
		<reference ref_id="1212347" ref_url="https://bugzilla.suse.com/1212347" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2002" ref_url="https://www.suse.com/security/cve/CVE-2023-2002/" source="CVE"/>
		<reference ref_id="CVE-2023-3159" ref_url="https://www.suse.com/security/cve/CVE-2023-3159/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_137 fixes several issues.

The following security issues were fixed:

- CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210566).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-31"/>
	<updated date="2023-07-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210566">SUSE bug 1210566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212347">SUSE bug 1212347</bugzilla>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2002/">CVE-2023-2002</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3159/">CVE-2023-3159</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764496" comment="kernel-default 4.12.14-150100.197.137 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009764497" comment="kernel-livepatch-4_12_14-150100_197_137-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009775490" comment="kernel-livepatch-4_12_14-150100_197_137-default-4-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138768" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210566" ref_url="https://bugzilla.suse.com/1210566" source="BUGZILLA"/>
		<reference ref_id="1212347" ref_url="https://bugzilla.suse.com/1212347" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2002" ref_url="https://www.suse.com/security/cve/CVE-2023-2002/" source="CVE"/>
		<reference ref_id="CVE-2023-3159" ref_url="https://www.suse.com/security/cve/CVE-2023-3159/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_142 fixes several issues.

The following security issues were fixed:

- CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210566).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-31"/>
	<updated date="2023-07-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210566">SUSE bug 1210566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212347">SUSE bug 1212347</bugzilla>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2002/">CVE-2023-2002</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3159/">CVE-2023-3159</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764499" comment="kernel-default 4.12.14-150100.197.142 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009764500" comment="kernel-livepatch-4_12_14-150100_197_142-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009775491" comment="kernel-livepatch-4_12_14-150100_197_142-default-4-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138769" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210566" ref_url="https://bugzilla.suse.com/1210566" source="BUGZILLA"/>
		<reference ref_id="1212347" ref_url="https://bugzilla.suse.com/1212347" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2002" ref_url="https://www.suse.com/security/cve/CVE-2023-2002/" source="CVE"/>
		<reference ref_id="CVE-2023-3159" ref_url="https://www.suse.com/security/cve/CVE-2023-3159/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_145 fixes several issues.

The following security issues were fixed:

- CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210566).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-31"/>
	<updated date="2023-07-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210566">SUSE bug 1210566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212347">SUSE bug 1212347</bugzilla>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2002/">CVE-2023-2002</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3159/">CVE-2023-3159</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764502" comment="kernel-default 4.12.14-150100.197.145 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009764503" comment="kernel-livepatch-4_12_14-150100_197_145-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009775492" comment="kernel-livepatch-4_12_14-150100_197_145-default-4-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138770" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210566" ref_url="https://bugzilla.suse.com/1210566" source="BUGZILLA"/>
		<reference ref_id="1212347" ref_url="https://bugzilla.suse.com/1212347" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2002" ref_url="https://www.suse.com/security/cve/CVE-2023-2002/" source="CVE"/>
		<reference ref_id="CVE-2023-3159" ref_url="https://www.suse.com/security/cve/CVE-2023-3159/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_148 fixes several issues.

The following security issues were fixed:

- CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210566).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-31"/>
	<updated date="2023-07-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210566">SUSE bug 1210566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212347">SUSE bug 1212347</bugzilla>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2002/">CVE-2023-2002</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3159/">CVE-2023-3159</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009775493" comment="kernel-default 4.12.14-150100.197.148 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009775494" comment="kernel-livepatch-4_12_14-150100_197_148-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009775495" comment="kernel-livepatch-4_12_14-150100_197_148-default-2-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138771" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210566" ref_url="https://bugzilla.suse.com/1210566" source="BUGZILLA"/>
		<reference ref_id="1212347" ref_url="https://bugzilla.suse.com/1212347" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2002" ref_url="https://www.suse.com/security/cve/CVE-2023-2002/" source="CVE"/>
		<reference ref_id="CVE-2023-3159" ref_url="https://www.suse.com/security/cve/CVE-2023-3159/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015702.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_120 fixes several issues.

The following security issues were fixed:

- CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210566).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-31"/>
	<updated date="2023-07-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210566">SUSE bug 1210566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212347">SUSE bug 1212347</bugzilla>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2002/">CVE-2023-2002</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3159/">CVE-2023-3159</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720994" comment="kernel-default 4.12.14-150100.197.120 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719213" comment="kernel-livepatch-4_12_14-150100_197_120-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009775485" comment="kernel-livepatch-4_12_14-150100_197_120-default-12-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138772" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210566" ref_url="https://bugzilla.suse.com/1210566" source="BUGZILLA"/>
		<reference ref_id="1212347" ref_url="https://bugzilla.suse.com/1212347" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2002" ref_url="https://www.suse.com/security/cve/CVE-2023-2002/" source="CVE"/>
		<reference ref_id="CVE-2023-3159" ref_url="https://www.suse.com/security/cve/CVE-2023-3159/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_123 fixes several issues.

The following security issues were fixed:

- CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210566).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-31"/>
	<updated date="2023-07-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210566">SUSE bug 1210566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212347">SUSE bug 1212347</bugzilla>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2002/">CVE-2023-2002</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3159/">CVE-2023-3159</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725195" comment="kernel-default 4.12.14-150100.197.123 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725196" comment="kernel-livepatch-4_12_14-150100_197_123-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009775486" comment="kernel-livepatch-4_12_14-150100_197_123-default-9-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138773" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210566" ref_url="https://bugzilla.suse.com/1210566" source="BUGZILLA"/>
		<reference ref_id="1212347" ref_url="https://bugzilla.suse.com/1212347" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2002" ref_url="https://www.suse.com/security/cve/CVE-2023-2002/" source="CVE"/>
		<reference ref_id="CVE-2023-3159" ref_url="https://www.suse.com/security/cve/CVE-2023-3159/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_134 fixes several issues.

The following security issues were fixed:

- CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210566).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-31"/>
	<updated date="2023-07-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210566">SUSE bug 1210566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212347">SUSE bug 1212347</bugzilla>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2002/">CVE-2023-2002</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3159/">CVE-2023-3159</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009738361" comment="kernel-default 4.12.14-150100.197.134 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009738362" comment="kernel-livepatch-4_12_14-150100_197_134-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009775489" comment="kernel-livepatch-4_12_14-150100_197_134-default-6-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138774" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210566" ref_url="https://bugzilla.suse.com/1210566" source="BUGZILLA"/>
		<reference ref_id="1212347" ref_url="https://bugzilla.suse.com/1212347" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2002" ref_url="https://www.suse.com/security/cve/CVE-2023-2002/" source="CVE"/>
		<reference ref_id="CVE-2023-3159" ref_url="https://www.suse.com/security/cve/CVE-2023-3159/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_131 fixes several issues.

The following security issues were fixed:

- CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210566).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-31"/>
	<updated date="2023-07-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210566">SUSE bug 1210566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212347">SUSE bug 1212347</bugzilla>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2002/">CVE-2023-2002</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3159/">CVE-2023-3159</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728721" comment="kernel-default 4.12.14-150100.197.131 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009728722" comment="kernel-livepatch-4_12_14-150100_197_131-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009775488" comment="kernel-livepatch-4_12_14-150100_197_131-default-7-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138775" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210566" ref_url="https://bugzilla.suse.com/1210566" source="BUGZILLA"/>
		<reference ref_id="1212347" ref_url="https://bugzilla.suse.com/1212347" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2002" ref_url="https://www.suse.com/security/cve/CVE-2023-2002/" source="CVE"/>
		<reference ref_id="CVE-2023-3159" ref_url="https://www.suse.com/security/cve/CVE-2023-3159/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_126 fixes several issues.

The following security issues were fixed:

- CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210566).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-31"/>
	<updated date="2023-07-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210566">SUSE bug 1210566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212347">SUSE bug 1212347</bugzilla>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2002/">CVE-2023-2002</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3159/">CVE-2023-3159</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725197" comment="kernel-default 4.12.14-150100.197.126 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725198" comment="kernel-livepatch-4_12_14-150100_197_126-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009775487" comment="kernel-livepatch-4_12_14-150100_197_126-default-9-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138776" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1206418" ref_url="https://bugzilla.suse.com/1206418" source="BUGZILLA"/>
		<reference ref_id="1207088" ref_url="https://bugzilla.suse.com/1207088" source="BUGZILLA"/>
		<reference ref_id="1210584" ref_url="https://bugzilla.suse.com/1210584" source="BUGZILLA"/>
		<reference ref_id="1211738" ref_url="https://bugzilla.suse.com/1211738" source="BUGZILLA"/>
		<reference ref_id="1211867" ref_url="https://bugzilla.suse.com/1211867" source="BUGZILLA"/>
		<reference ref_id="1212301" ref_url="https://bugzilla.suse.com/1212301" source="BUGZILLA"/>
		<reference ref_id="1212741" ref_url="https://bugzilla.suse.com/1212741" source="BUGZILLA"/>
		<reference ref_id="1212835" ref_url="https://bugzilla.suse.com/1212835" source="BUGZILLA"/>
		<reference ref_id="1213059" ref_url="https://bugzilla.suse.com/1213059" source="BUGZILLA"/>
		<reference ref_id="1213167" ref_url="https://bugzilla.suse.com/1213167" source="BUGZILLA"/>
		<reference ref_id="1213286" ref_url="https://bugzilla.suse.com/1213286" source="BUGZILLA"/>
		<reference ref_id="1213287" ref_url="https://bugzilla.suse.com/1213287" source="BUGZILLA"/>
		<reference ref_id="1213546" ref_url="https://bugzilla.suse.com/1213546" source="BUGZILLA"/>
		<reference ref_id="1213585" ref_url="https://bugzilla.suse.com/1213585" source="BUGZILLA"/>
		<reference ref_id="1213586" ref_url="https://bugzilla.suse.com/1213586" source="BUGZILLA"/>
		<reference ref_id="1213588" ref_url="https://bugzilla.suse.com/1213588" source="BUGZILLA"/>
		<reference ref_id="1213970" ref_url="https://bugzilla.suse.com/1213970" source="BUGZILLA"/>
		<reference ref_id="1214019" ref_url="https://bugzilla.suse.com/1214019" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40982" ref_url="https://www.suse.com/security/cve/CVE-2022-40982/" source="CVE"/>
		<reference ref_id="CVE-2023-0459" ref_url="https://www.suse.com/security/cve/CVE-2023-0459/" source="CVE"/>
		<reference ref_id="CVE-2023-20569" ref_url="https://www.suse.com/security/cve/CVE-2023-20569/" source="CVE"/>
		<reference ref_id="CVE-2023-20593" ref_url="https://www.suse.com/security/cve/CVE-2023-20593/" source="CVE"/>
		<reference ref_id="CVE-2023-2985" ref_url="https://www.suse.com/security/cve/CVE-2023-2985/" source="CVE"/>
		<reference ref_id="CVE-2023-34319" ref_url="https://www.suse.com/security/cve/CVE-2023-34319/" source="CVE"/>
		<reference ref_id="CVE-2023-35001" ref_url="https://www.suse.com/security/cve/CVE-2023-35001/" source="CVE"/>
		<reference ref_id="CVE-2023-3567" ref_url="https://www.suse.com/security/cve/CVE-2023-3567/" source="CVE"/>
		<reference ref_id="CVE-2023-3609" ref_url="https://www.suse.com/security/cve/CVE-2023-3609/" source="CVE"/>
		<reference ref_id="CVE-2023-3611" ref_url="https://www.suse.com/security/cve/CVE-2023-3611/" source="CVE"/>
		<reference ref_id="CVE-2023-3776" ref_url="https://www.suse.com/security/cve/CVE-2023-3776/" source="CVE"/>
		<reference ref_id="CVE-2023-4133" ref_url="https://www.suse.com/security/cve/CVE-2023-4133/" source="CVE"/>
		<reference ref_id="CVE-2023-4194" ref_url="https://www.suse.com/security/cve/CVE-2023-4194/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015997.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).
- CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
- CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
- CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).
- CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).
- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213586).
- CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
- CVE-2023-3776: Fixed improper refcount update in  cls_fw leads to use-after-free (bsc#1213588).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open()  bsc#1214019).

The following non-security bugs were fixed:

- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- cpufeatures: allow adding more cpuid words
- get module prefix from kmod (bsc#1212835).
- kernel-binary.spec.in: remove superfluous %% in supplements fixes: 02b7735e0caf ('rpm/kernel-binary.spec.in: add enhances and supplements tags to in-tree kmps')
- kernel-docs: add buildrequires on python3-base when using python3 the python3 binary is provided by python3-base.
- kernel-docs: use python3 together with python3-sphinx (bsc#1212741).
- keys: change keyring_serialise_link_sem to a mutex (bsc#1207088).
- keys: fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).
- keys: hoist locking out of __key_link_begin() (bsc#1207088).
- net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).
- net: mana: add support for vlan tagging (bsc#1212301).
- readme.branch: add myself as co-maintainer
- remove more packaging cruft for sle &amp;lt; 12 sp3
- rpm/check-for-config-changes: ignore also pahole_has_* we now also have options like config_pahole_has_lang_exclude.
- rpm/check-for-config-changes: ignore also riscv_isa_* and dynamic_sigframe they depend on config_toolchain_has_*.
- timers: add shutdown mechanism to the internal functions (bsc#1213970).
- timers: provide timer_shutdown[_sync]() (bsc#1213970).
- timers: rename del_timer() to timer_delete() (bsc#1213970).
- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: replace bug_on()s (bsc#1213970).
- timers: silently ignore timers with a null function (bsc#1213970).
- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: update kernel-doc for various functions (bsc#1213970).
- timers: use del_timer_sync() even on up (bsc#1213970).
- ubi: ensure that vid header offset + vid header size &amp;lt;= alloc, size (bsc#1210584).
- ubi: fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).
- usrmerge: Adjust module path in the kernel sources (bsc#1212835).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-23"/>
	<updated date="2023-08-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206418">SUSE bug 1206418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207088">SUSE bug 1207088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210584">SUSE bug 1210584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211738">SUSE bug 1211738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211867">SUSE bug 1211867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212301">SUSE bug 1212301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212741">SUSE bug 1212741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212835">SUSE bug 1212835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213059">SUSE bug 1213059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213167">SUSE bug 1213167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213286">SUSE bug 1213286</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213287">SUSE bug 1213287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213546">SUSE bug 1213546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213585">SUSE bug 1213585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213586">SUSE bug 1213586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213588">SUSE bug 1213588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213970">SUSE bug 1213970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214019">SUSE bug 1214019</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40982/">CVE-2022-40982</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-0459/">CVE-2023-0459</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20569/">CVE-2023-20569</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20593/">CVE-2023-20593</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2985/">CVE-2023-2985</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-34319/">CVE-2023-34319</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-35001/">CVE-2023-35001</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3567/">CVE-2023-3567</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3609/">CVE-2023-3609</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3611/">CVE-2023-3611</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3776/">CVE-2023-3776</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4133/">CVE-2023-4133</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-4194/">CVE-2023-4194</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009779637" comment="kernel-default-livepatch-4.12.14-150100.197.154.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779638" comment="kernel-default-livepatch-devel-4.12.14-150100.197.154.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779639" comment="kernel-livepatch-4_12_14-150100_197_154-default-1-150100.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138777" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208839" ref_url="https://bugzilla.suse.com/1208839" source="BUGZILLA"/>
		<reference ref_id="1210630" ref_url="https://bugzilla.suse.com/1210630" source="BUGZILLA"/>
		<reference ref_id="1212849" ref_url="https://bugzilla.suse.com/1212849" source="BUGZILLA"/>
		<reference ref_id="1213063" ref_url="https://bugzilla.suse.com/1213063" source="BUGZILLA"/>
		<reference ref_id="1213244" ref_url="https://bugzilla.suse.com/1213244" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1077" ref_url="https://www.suse.com/security/cve/CVE-2023-1077/" source="CVE"/>
		<reference ref_id="CVE-2023-2176" ref_url="https://www.suse.com/security/cve/CVE-2023-2176/" source="CVE"/>
		<reference ref_id="CVE-2023-3090" ref_url="https://www.suse.com/security/cve/CVE-2023-3090/" source="CVE"/>
		<reference ref_id="CVE-2023-35001" ref_url="https://www.suse.com/security/cve/CVE-2023-35001/" source="CVE"/>
		<reference ref_id="CVE-2023-3567" ref_url="https://www.suse.com/security/cve/CVE-2023-3567/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3566-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016130.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_123 fixes several issues.

The following security issues were fixed:

- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063).
- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208839).
- CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210630).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212849).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-10"/>
	<updated date="2023-09-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208839">SUSE bug 1208839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210630">SUSE bug 1210630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212849">SUSE bug 1212849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213063">SUSE bug 1213063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213244">SUSE bug 1213244</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1077/">CVE-2023-1077</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2176/">CVE-2023-2176</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3090/">CVE-2023-3090</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-35001/">CVE-2023-35001</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3567/">CVE-2023-3567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725195" comment="kernel-default 4.12.14-150100.197.123 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725196" comment="kernel-livepatch-4_12_14-150100_197_123-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009781608" comment="kernel-livepatch-4_12_14-150100_197_123-default-10-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138778" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208839" ref_url="https://bugzilla.suse.com/1208839" source="BUGZILLA"/>
		<reference ref_id="1210630" ref_url="https://bugzilla.suse.com/1210630" source="BUGZILLA"/>
		<reference ref_id="1212849" ref_url="https://bugzilla.suse.com/1212849" source="BUGZILLA"/>
		<reference ref_id="1213063" ref_url="https://bugzilla.suse.com/1213063" source="BUGZILLA"/>
		<reference ref_id="1213244" ref_url="https://bugzilla.suse.com/1213244" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1077" ref_url="https://www.suse.com/security/cve/CVE-2023-1077/" source="CVE"/>
		<reference ref_id="CVE-2023-2176" ref_url="https://www.suse.com/security/cve/CVE-2023-2176/" source="CVE"/>
		<reference ref_id="CVE-2023-3090" ref_url="https://www.suse.com/security/cve/CVE-2023-3090/" source="CVE"/>
		<reference ref_id="CVE-2023-35001" ref_url="https://www.suse.com/security/cve/CVE-2023-35001/" source="CVE"/>
		<reference ref_id="CVE-2023-3567" ref_url="https://www.suse.com/security/cve/CVE-2023-3567/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_126 fixes several issues.

The following security issues were fixed:

- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063).
- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208839).
- CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210630).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212849).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-10"/>
	<updated date="2023-09-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208839">SUSE bug 1208839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210630">SUSE bug 1210630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212849">SUSE bug 1212849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213063">SUSE bug 1213063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213244">SUSE bug 1213244</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1077/">CVE-2023-1077</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2176/">CVE-2023-2176</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3090/">CVE-2023-3090</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-35001/">CVE-2023-35001</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3567/">CVE-2023-3567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725197" comment="kernel-default 4.12.14-150100.197.126 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725198" comment="kernel-livepatch-4_12_14-150100_197_126-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009781609" comment="kernel-livepatch-4_12_14-150100_197_126-default-10-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138779" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208839" ref_url="https://bugzilla.suse.com/1208839" source="BUGZILLA"/>
		<reference ref_id="1210630" ref_url="https://bugzilla.suse.com/1210630" source="BUGZILLA"/>
		<reference ref_id="1212849" ref_url="https://bugzilla.suse.com/1212849" source="BUGZILLA"/>
		<reference ref_id="1213063" ref_url="https://bugzilla.suse.com/1213063" source="BUGZILLA"/>
		<reference ref_id="1213244" ref_url="https://bugzilla.suse.com/1213244" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1077" ref_url="https://www.suse.com/security/cve/CVE-2023-1077/" source="CVE"/>
		<reference ref_id="CVE-2023-2176" ref_url="https://www.suse.com/security/cve/CVE-2023-2176/" source="CVE"/>
		<reference ref_id="CVE-2023-3090" ref_url="https://www.suse.com/security/cve/CVE-2023-3090/" source="CVE"/>
		<reference ref_id="CVE-2023-35001" ref_url="https://www.suse.com/security/cve/CVE-2023-35001/" source="CVE"/>
		<reference ref_id="CVE-2023-3567" ref_url="https://www.suse.com/security/cve/CVE-2023-3567/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_137 fixes several issues.

The following security issues were fixed:

- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063).
- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208839).
- CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210630).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212849).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-10"/>
	<updated date="2023-09-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208839">SUSE bug 1208839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210630">SUSE bug 1210630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212849">SUSE bug 1212849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213063">SUSE bug 1213063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213244">SUSE bug 1213244</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1077/">CVE-2023-1077</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2176/">CVE-2023-2176</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3090/">CVE-2023-3090</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-35001/">CVE-2023-35001</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3567/">CVE-2023-3567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764496" comment="kernel-default 4.12.14-150100.197.137 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009764497" comment="kernel-livepatch-4_12_14-150100_197_137-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009781611" comment="kernel-livepatch-4_12_14-150100_197_137-default-5-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138780" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208839" ref_url="https://bugzilla.suse.com/1208839" source="BUGZILLA"/>
		<reference ref_id="1210630" ref_url="https://bugzilla.suse.com/1210630" source="BUGZILLA"/>
		<reference ref_id="1212849" ref_url="https://bugzilla.suse.com/1212849" source="BUGZILLA"/>
		<reference ref_id="1213063" ref_url="https://bugzilla.suse.com/1213063" source="BUGZILLA"/>
		<reference ref_id="1213244" ref_url="https://bugzilla.suse.com/1213244" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1077" ref_url="https://www.suse.com/security/cve/CVE-2023-1077/" source="CVE"/>
		<reference ref_id="CVE-2023-2176" ref_url="https://www.suse.com/security/cve/CVE-2023-2176/" source="CVE"/>
		<reference ref_id="CVE-2023-3090" ref_url="https://www.suse.com/security/cve/CVE-2023-3090/" source="CVE"/>
		<reference ref_id="CVE-2023-35001" ref_url="https://www.suse.com/security/cve/CVE-2023-35001/" source="CVE"/>
		<reference ref_id="CVE-2023-3567" ref_url="https://www.suse.com/security/cve/CVE-2023-3567/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_142 fixes several issues.

The following security issues were fixed:

- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063).
- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208839).
- CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210630).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212849).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-10"/>
	<updated date="2023-09-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208839">SUSE bug 1208839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210630">SUSE bug 1210630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212849">SUSE bug 1212849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213063">SUSE bug 1213063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213244">SUSE bug 1213244</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1077/">CVE-2023-1077</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2176/">CVE-2023-2176</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3090/">CVE-2023-3090</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-35001/">CVE-2023-35001</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3567/">CVE-2023-3567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764499" comment="kernel-default 4.12.14-150100.197.142 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009764500" comment="kernel-livepatch-4_12_14-150100_197_142-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009781612" comment="kernel-livepatch-4_12_14-150100_197_142-default-5-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138781" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208839" ref_url="https://bugzilla.suse.com/1208839" source="BUGZILLA"/>
		<reference ref_id="1210630" ref_url="https://bugzilla.suse.com/1210630" source="BUGZILLA"/>
		<reference ref_id="1212849" ref_url="https://bugzilla.suse.com/1212849" source="BUGZILLA"/>
		<reference ref_id="1213063" ref_url="https://bugzilla.suse.com/1213063" source="BUGZILLA"/>
		<reference ref_id="1213244" ref_url="https://bugzilla.suse.com/1213244" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1077" ref_url="https://www.suse.com/security/cve/CVE-2023-1077/" source="CVE"/>
		<reference ref_id="CVE-2023-2176" ref_url="https://www.suse.com/security/cve/CVE-2023-2176/" source="CVE"/>
		<reference ref_id="CVE-2023-3090" ref_url="https://www.suse.com/security/cve/CVE-2023-3090/" source="CVE"/>
		<reference ref_id="CVE-2023-35001" ref_url="https://www.suse.com/security/cve/CVE-2023-35001/" source="CVE"/>
		<reference ref_id="CVE-2023-3567" ref_url="https://www.suse.com/security/cve/CVE-2023-3567/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_145 fixes several issues.

The following security issues were fixed:

- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063).
- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208839).
- CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210630).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212849).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-10"/>
	<updated date="2023-09-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208839">SUSE bug 1208839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210630">SUSE bug 1210630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212849">SUSE bug 1212849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213063">SUSE bug 1213063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213244">SUSE bug 1213244</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1077/">CVE-2023-1077</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2176/">CVE-2023-2176</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3090/">CVE-2023-3090</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-35001/">CVE-2023-35001</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3567/">CVE-2023-3567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764502" comment="kernel-default 4.12.14-150100.197.145 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009764503" comment="kernel-livepatch-4_12_14-150100_197_145-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009781613" comment="kernel-livepatch-4_12_14-150100_197_145-default-5-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138782" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1212849" ref_url="https://bugzilla.suse.com/1212849" source="BUGZILLA"/>
		<reference ref_id="1213063" ref_url="https://bugzilla.suse.com/1213063" source="BUGZILLA"/>
		<reference ref_id="1213244" ref_url="https://bugzilla.suse.com/1213244" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-3090" ref_url="https://www.suse.com/security/cve/CVE-2023-3090/" source="CVE"/>
		<reference ref_id="CVE-2023-35001" ref_url="https://www.suse.com/security/cve/CVE-2023-35001/" source="CVE"/>
		<reference ref_id="CVE-2023-3567" ref_url="https://www.suse.com/security/cve/CVE-2023-3567/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016129.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_148 fixes several issues.

The following security issues were fixed:

- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212849).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-10"/>
	<updated date="2023-09-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212849">SUSE bug 1212849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213063">SUSE bug 1213063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213244">SUSE bug 1213244</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3090/">CVE-2023-3090</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-35001/">CVE-2023-35001</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3567/">CVE-2023-3567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009775493" comment="kernel-default 4.12.14-150100.197.148 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009775494" comment="kernel-livepatch-4_12_14-150100_197_148-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009781614" comment="kernel-livepatch-4_12_14-150100_197_148-default-3-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138783" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1213063" ref_url="https://bugzilla.suse.com/1213063" source="BUGZILLA"/>
		<reference ref_id="1213244" ref_url="https://bugzilla.suse.com/1213244" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-35001" ref_url="https://www.suse.com/security/cve/CVE-2023-35001/" source="CVE"/>
		<reference ref_id="CVE-2023-3567" ref_url="https://www.suse.com/security/cve/CVE-2023-3567/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3572-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016128.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_151 fixes several issues.

The following security issues were fixed:

- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-10"/>
	<updated date="2023-09-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213063">SUSE bug 1213063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213244">SUSE bug 1213244</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-35001/">CVE-2023-35001</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3567/">CVE-2023-3567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009781615" comment="kernel-default 4.12.14-150100.197.151 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009781616" comment="kernel-livepatch-4_12_14-150100_197_151-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009781617" comment="kernel-livepatch-4_12_14-150100_197_151-default-2-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138784" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208839" ref_url="https://bugzilla.suse.com/1208839" source="BUGZILLA"/>
		<reference ref_id="1210630" ref_url="https://bugzilla.suse.com/1210630" source="BUGZILLA"/>
		<reference ref_id="1212849" ref_url="https://bugzilla.suse.com/1212849" source="BUGZILLA"/>
		<reference ref_id="1213063" ref_url="https://bugzilla.suse.com/1213063" source="BUGZILLA"/>
		<reference ref_id="1213244" ref_url="https://bugzilla.suse.com/1213244" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1077" ref_url="https://www.suse.com/security/cve/CVE-2023-1077/" source="CVE"/>
		<reference ref_id="CVE-2023-2176" ref_url="https://www.suse.com/security/cve/CVE-2023-2176/" source="CVE"/>
		<reference ref_id="CVE-2023-3090" ref_url="https://www.suse.com/security/cve/CVE-2023-3090/" source="CVE"/>
		<reference ref_id="CVE-2023-35001" ref_url="https://www.suse.com/security/cve/CVE-2023-35001/" source="CVE"/>
		<reference ref_id="CVE-2023-3567" ref_url="https://www.suse.com/security/cve/CVE-2023-3567/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016142.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_131 fixes several issues.

The following security issues were fixed:

- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063).
- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208839).
- CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210630).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212849).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-13"/>
	<updated date="2023-09-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208839">SUSE bug 1208839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210630">SUSE bug 1210630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212849">SUSE bug 1212849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213063">SUSE bug 1213063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213244">SUSE bug 1213244</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1077/">CVE-2023-1077</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2176/">CVE-2023-2176</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3090/">CVE-2023-3090</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-35001/">CVE-2023-35001</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3567/">CVE-2023-3567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728721" comment="kernel-default 4.12.14-150100.197.131 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009728722" comment="kernel-livepatch-4_12_14-150100_197_131-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009781681" comment="kernel-livepatch-4_12_14-150100_197_131-default-8-150100.2.3 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138785" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208839" ref_url="https://bugzilla.suse.com/1208839" source="BUGZILLA"/>
		<reference ref_id="1210630" ref_url="https://bugzilla.suse.com/1210630" source="BUGZILLA"/>
		<reference ref_id="1212849" ref_url="https://bugzilla.suse.com/1212849" source="BUGZILLA"/>
		<reference ref_id="1213063" ref_url="https://bugzilla.suse.com/1213063" source="BUGZILLA"/>
		<reference ref_id="1213244" ref_url="https://bugzilla.suse.com/1213244" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1077" ref_url="https://www.suse.com/security/cve/CVE-2023-1077/" source="CVE"/>
		<reference ref_id="CVE-2023-2176" ref_url="https://www.suse.com/security/cve/CVE-2023-2176/" source="CVE"/>
		<reference ref_id="CVE-2023-3090" ref_url="https://www.suse.com/security/cve/CVE-2023-3090/" source="CVE"/>
		<reference ref_id="CVE-2023-35001" ref_url="https://www.suse.com/security/cve/CVE-2023-35001/" source="CVE"/>
		<reference ref_id="CVE-2023-3567" ref_url="https://www.suse.com/security/cve/CVE-2023-3567/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3603-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016156.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_120 fixes several issues.

The following security issues were fixed:

- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063).
- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208839).
- CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210630).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212849).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-14"/>
	<updated date="2023-09-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208839">SUSE bug 1208839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210630">SUSE bug 1210630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212849">SUSE bug 1212849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213063">SUSE bug 1213063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213244">SUSE bug 1213244</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1077/">CVE-2023-1077</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2176/">CVE-2023-2176</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3090/">CVE-2023-3090</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-35001/">CVE-2023-35001</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3567/">CVE-2023-3567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720994" comment="kernel-default 4.12.14-150100.197.120 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719213" comment="kernel-livepatch-4_12_14-150100_197_120-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009781607" comment="kernel-livepatch-4_12_14-150100_197_120-default-13-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138786" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1208839" ref_url="https://bugzilla.suse.com/1208839" source="BUGZILLA"/>
		<reference ref_id="1210630" ref_url="https://bugzilla.suse.com/1210630" source="BUGZILLA"/>
		<reference ref_id="1212849" ref_url="https://bugzilla.suse.com/1212849" source="BUGZILLA"/>
		<reference ref_id="1213063" ref_url="https://bugzilla.suse.com/1213063" source="BUGZILLA"/>
		<reference ref_id="1213244" ref_url="https://bugzilla.suse.com/1213244" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1077" ref_url="https://www.suse.com/security/cve/CVE-2023-1077/" source="CVE"/>
		<reference ref_id="CVE-2023-2176" ref_url="https://www.suse.com/security/cve/CVE-2023-2176/" source="CVE"/>
		<reference ref_id="CVE-2023-3090" ref_url="https://www.suse.com/security/cve/CVE-2023-3090/" source="CVE"/>
		<reference ref_id="CVE-2023-35001" ref_url="https://www.suse.com/security/cve/CVE-2023-35001/" source="CVE"/>
		<reference ref_id="CVE-2023-3567" ref_url="https://www.suse.com/security/cve/CVE-2023-3567/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_134 fixes several issues.

The following security issues were fixed:

- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063).
- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208839).
- CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210630).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212849).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-14"/>
	<updated date="2023-09-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208839">SUSE bug 1208839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210630">SUSE bug 1210630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212849">SUSE bug 1212849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213063">SUSE bug 1213063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213244">SUSE bug 1213244</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1077/">CVE-2023-1077</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2176/">CVE-2023-2176</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3090/">CVE-2023-3090</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-35001/">CVE-2023-35001</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3567/">CVE-2023-3567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009738361" comment="kernel-default 4.12.14-150100.197.134 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009738362" comment="kernel-livepatch-4_12_14-150100_197_134-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009781610" comment="kernel-livepatch-4_12_14-150100_197_134-default-7-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138787" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1203517" ref_url="https://bugzilla.suse.com/1203517" source="BUGZILLA"/>
		<reference ref_id="1210448" ref_url="https://bugzilla.suse.com/1210448" source="BUGZILLA"/>
		<reference ref_id="1213543" ref_url="https://bugzilla.suse.com/1213543" source="BUGZILLA"/>
		<reference ref_id="1213601" ref_url="https://bugzilla.suse.com/1213601" source="BUGZILLA"/>
		<reference ref_id="1213666" ref_url="https://bugzilla.suse.com/1213666" source="BUGZILLA"/>
		<reference ref_id="1213927" ref_url="https://bugzilla.suse.com/1213927" source="BUGZILLA"/>
		<reference ref_id="1213969" ref_url="https://bugzilla.suse.com/1213969" source="BUGZILLA"/>
		<reference ref_id="1213971" ref_url="https://bugzilla.suse.com/1213971" source="BUGZILLA"/>
		<reference ref_id="1214149" ref_url="https://bugzilla.suse.com/1214149" source="BUGZILLA"/>
		<reference ref_id="1214348" ref_url="https://bugzilla.suse.com/1214348" source="BUGZILLA"/>
		<reference ref_id="1214350" ref_url="https://bugzilla.suse.com/1214350" source="BUGZILLA"/>
		<reference ref_id="1214451" ref_url="https://bugzilla.suse.com/1214451" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-36402" ref_url="https://www.suse.com/security/cve/CVE-2022-36402/" source="CVE"/>
		<reference ref_id="CVE-2023-2007" ref_url="https://www.suse.com/security/cve/CVE-2023-2007/" source="CVE"/>
		<reference ref_id="CVE-2023-20588" ref_url="https://www.suse.com/security/cve/CVE-2023-20588/" source="CVE"/>
		<reference ref_id="CVE-2023-3772" ref_url="https://www.suse.com/security/cve/CVE-2023-3772/" source="CVE"/>
		<reference ref_id="CVE-2023-3812" ref_url="https://www.suse.com/security/cve/CVE-2023-3812/" source="CVE"/>
		<reference ref_id="CVE-2023-3863" ref_url="https://www.suse.com/security/cve/CVE-2023-3863/" source="CVE"/>
		<reference ref_id="CVE-2023-4128" ref_url="https://www.suse.com/security/cve/CVE-2023-4128/" source="CVE"/>
		<reference ref_id="CVE-2023-4132" ref_url="https://www.suse.com/security/cve/CVE-2023-4132/" source="CVE"/>
		<reference ref_id="CVE-2023-4134" ref_url="https://www.suse.com/security/cve/CVE-2023-4134/" source="CVE"/>
		<reference ref_id="CVE-2023-4385" ref_url="https://www.suse.com/security/cve/CVE-2023-4385/" source="CVE"/>
		<reference ref_id="CVE-2023-4387" ref_url="https://www.suse.com/security/cve/CVE-2023-4387/" source="CVE"/>
		<reference ref_id="CVE-2023-4459" ref_url="https://www.suse.com/security/cve/CVE-2023-4459/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3680-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016208.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local attacker with a user account on the system to gain privilege, causing a denial of service (bsc#1203517).
- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4132: Fixed use-after-free vulnerability was found in the siano smsusb module that allowed a local user to crash the system, causing a denial of service condition (bsc#1213969).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to crash the system due to a missing sanity check (bsc#1214348).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).

The following non-security bugs were fixed:

- kabi/severities: Ignore newly added SRSO mitigation functions
- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
- x86/cpu: Cleanup the untrain mess (git-fixes).
- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: Rename original retbleed methods (git-fixes).
- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).
- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).
- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: Explain the untraining sequences a bit more (git-fixes).
- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
- x86: Move gds_ucode_mitigated() declaration to header (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-19"/>
	<updated date="2023-09-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203517">SUSE bug 1203517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210448">SUSE bug 1210448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213543">SUSE bug 1213543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213601">SUSE bug 1213601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213666">SUSE bug 1213666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213927">SUSE bug 1213927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213969">SUSE bug 1213969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213971">SUSE bug 1213971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214149">SUSE bug 1214149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214348">SUSE bug 1214348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214350">SUSE bug 1214350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214451">SUSE bug 1214451</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36402/">CVE-2022-36402</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-2007/">CVE-2023-2007</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20588/">CVE-2023-20588</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-3772/">CVE-2023-3772</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3812/">CVE-2023-3812</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3863/">CVE-2023-3863</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4128/">CVE-2023-4128</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4132/">CVE-2023-4132</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4134/">CVE-2023-4134</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4385/">CVE-2023-4385</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4387/">CVE-2023-4387</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4459/">CVE-2023-4459</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009795427" comment="kernel-default-livepatch-4.12.14-150100.197.157.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795428" comment="kernel-default-livepatch-devel-4.12.14-150100.197.157.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795429" comment="kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138788" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210619" ref_url="https://bugzilla.suse.com/1210619" source="BUGZILLA"/>
		<reference ref_id="1213587" ref_url="https://bugzilla.suse.com/1213587" source="BUGZILLA"/>
		<reference ref_id="1213706" ref_url="https://bugzilla.suse.com/1213706" source="BUGZILLA"/>
		<reference ref_id="1215119" ref_url="https://bugzilla.suse.com/1215119" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1829" ref_url="https://www.suse.com/security/cve/CVE-2023-1829/" source="CVE"/>
		<reference ref_id="CVE-2023-3609" ref_url="https://www.suse.com/security/cve/CVE-2023-3609/" source="CVE"/>
		<reference ref_id="CVE-2023-3776" ref_url="https://www.suse.com/security/cve/CVE-2023-3776/" source="CVE"/>
		<reference ref_id="CVE-2023-3812" ref_url="https://www.suse.com/security/cve/CVE-2023-3812/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016322.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_126 fixes several issues.

The following security issues were fixed:

- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
- CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119).
- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213587).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213706).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-26"/>
	<updated date="2023-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210619">SUSE bug 1210619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213587">SUSE bug 1213587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213706">SUSE bug 1213706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215119">SUSE bug 1215119</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1829/">CVE-2023-1829</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3609/">CVE-2023-3609</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3776/">CVE-2023-3776</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3812/">CVE-2023-3812</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725197" comment="kernel-default 4.12.14-150100.197.126 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725198" comment="kernel-livepatch-4_12_14-150100_197_126-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009798028" comment="kernel-livepatch-4_12_14-150100_197_126-default-11-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138789" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210619" ref_url="https://bugzilla.suse.com/1210619" source="BUGZILLA"/>
		<reference ref_id="1213587" ref_url="https://bugzilla.suse.com/1213587" source="BUGZILLA"/>
		<reference ref_id="1213706" ref_url="https://bugzilla.suse.com/1213706" source="BUGZILLA"/>
		<reference ref_id="1215119" ref_url="https://bugzilla.suse.com/1215119" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1829" ref_url="https://www.suse.com/security/cve/CVE-2023-1829/" source="CVE"/>
		<reference ref_id="CVE-2023-3609" ref_url="https://www.suse.com/security/cve/CVE-2023-3609/" source="CVE"/>
		<reference ref_id="CVE-2023-3776" ref_url="https://www.suse.com/security/cve/CVE-2023-3776/" source="CVE"/>
		<reference ref_id="CVE-2023-3812" ref_url="https://www.suse.com/security/cve/CVE-2023-3812/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_137 fixes several issues.

The following security issues were fixed:

- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
- CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119).
- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213587).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213706).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-26"/>
	<updated date="2023-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210619">SUSE bug 1210619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213587">SUSE bug 1213587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213706">SUSE bug 1213706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215119">SUSE bug 1215119</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1829/">CVE-2023-1829</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3609/">CVE-2023-3609</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3776/">CVE-2023-3776</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3812/">CVE-2023-3812</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764496" comment="kernel-default 4.12.14-150100.197.137 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009764497" comment="kernel-livepatch-4_12_14-150100_197_137-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009798031" comment="kernel-livepatch-4_12_14-150100_197_137-default-6-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138790" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210619" ref_url="https://bugzilla.suse.com/1210619" source="BUGZILLA"/>
		<reference ref_id="1213587" ref_url="https://bugzilla.suse.com/1213587" source="BUGZILLA"/>
		<reference ref_id="1213706" ref_url="https://bugzilla.suse.com/1213706" source="BUGZILLA"/>
		<reference ref_id="1215119" ref_url="https://bugzilla.suse.com/1215119" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1829" ref_url="https://www.suse.com/security/cve/CVE-2023-1829/" source="CVE"/>
		<reference ref_id="CVE-2023-3609" ref_url="https://www.suse.com/security/cve/CVE-2023-3609/" source="CVE"/>
		<reference ref_id="CVE-2023-3776" ref_url="https://www.suse.com/security/cve/CVE-2023-3776/" source="CVE"/>
		<reference ref_id="CVE-2023-3812" ref_url="https://www.suse.com/security/cve/CVE-2023-3812/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_142 fixes several issues.

The following security issues were fixed:

- CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119).
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213587).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213706).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-26"/>
	<updated date="2023-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210619">SUSE bug 1210619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213587">SUSE bug 1213587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213706">SUSE bug 1213706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215119">SUSE bug 1215119</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1829/">CVE-2023-1829</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3609/">CVE-2023-3609</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3776/">CVE-2023-3776</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3812/">CVE-2023-3812</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764499" comment="kernel-default 4.12.14-150100.197.142 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009764500" comment="kernel-livepatch-4_12_14-150100_197_142-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009798032" comment="kernel-livepatch-4_12_14-150100_197_142-default-6-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138791" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210619" ref_url="https://bugzilla.suse.com/1210619" source="BUGZILLA"/>
		<reference ref_id="1213587" ref_url="https://bugzilla.suse.com/1213587" source="BUGZILLA"/>
		<reference ref_id="1213706" ref_url="https://bugzilla.suse.com/1213706" source="BUGZILLA"/>
		<reference ref_id="1215119" ref_url="https://bugzilla.suse.com/1215119" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1829" ref_url="https://www.suse.com/security/cve/CVE-2023-1829/" source="CVE"/>
		<reference ref_id="CVE-2023-3609" ref_url="https://www.suse.com/security/cve/CVE-2023-3609/" source="CVE"/>
		<reference ref_id="CVE-2023-3776" ref_url="https://www.suse.com/security/cve/CVE-2023-3776/" source="CVE"/>
		<reference ref_id="CVE-2023-3812" ref_url="https://www.suse.com/security/cve/CVE-2023-3812/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_131 fixes several issues.

The following security issues were fixed:

- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
- CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119).
- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213587).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213706).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-26"/>
	<updated date="2023-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210619">SUSE bug 1210619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213587">SUSE bug 1213587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213706">SUSE bug 1213706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215119">SUSE bug 1215119</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1829/">CVE-2023-1829</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3609/">CVE-2023-3609</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3776/">CVE-2023-3776</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3812/">CVE-2023-3812</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728721" comment="kernel-default 4.12.14-150100.197.131 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009728722" comment="kernel-livepatch-4_12_14-150100_197_131-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009798029" comment="kernel-livepatch-4_12_14-150100_197_131-default-9-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138792" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210619" ref_url="https://bugzilla.suse.com/1210619" source="BUGZILLA"/>
		<reference ref_id="1213587" ref_url="https://bugzilla.suse.com/1213587" source="BUGZILLA"/>
		<reference ref_id="1213706" ref_url="https://bugzilla.suse.com/1213706" source="BUGZILLA"/>
		<reference ref_id="1215119" ref_url="https://bugzilla.suse.com/1215119" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1829" ref_url="https://www.suse.com/security/cve/CVE-2023-1829/" source="CVE"/>
		<reference ref_id="CVE-2023-3609" ref_url="https://www.suse.com/security/cve/CVE-2023-3609/" source="CVE"/>
		<reference ref_id="CVE-2023-3776" ref_url="https://www.suse.com/security/cve/CVE-2023-3776/" source="CVE"/>
		<reference ref_id="CVE-2023-3812" ref_url="https://www.suse.com/security/cve/CVE-2023-3812/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_134 fixes several issues.

The following security issues were fixed:

- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
- CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119).
- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213587).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213706).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-26"/>
	<updated date="2023-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210619">SUSE bug 1210619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213587">SUSE bug 1213587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213706">SUSE bug 1213706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215119">SUSE bug 1215119</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1829/">CVE-2023-1829</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3609/">CVE-2023-3609</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3776/">CVE-2023-3776</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3812/">CVE-2023-3812</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009738361" comment="kernel-default 4.12.14-150100.197.134 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009738362" comment="kernel-livepatch-4_12_14-150100_197_134-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009798030" comment="kernel-livepatch-4_12_14-150100_197_134-default-8-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138793" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210619" ref_url="https://bugzilla.suse.com/1210619" source="BUGZILLA"/>
		<reference ref_id="1213587" ref_url="https://bugzilla.suse.com/1213587" source="BUGZILLA"/>
		<reference ref_id="1213706" ref_url="https://bugzilla.suse.com/1213706" source="BUGZILLA"/>
		<reference ref_id="1215119" ref_url="https://bugzilla.suse.com/1215119" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1829" ref_url="https://www.suse.com/security/cve/CVE-2023-1829/" source="CVE"/>
		<reference ref_id="CVE-2023-3609" ref_url="https://www.suse.com/security/cve/CVE-2023-3609/" source="CVE"/>
		<reference ref_id="CVE-2023-3776" ref_url="https://www.suse.com/security/cve/CVE-2023-3776/" source="CVE"/>
		<reference ref_id="CVE-2023-3812" ref_url="https://www.suse.com/security/cve/CVE-2023-3812/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3786-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016325.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_123 fixes several issues.

The following security issues were fixed:

- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
- CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119).
- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213587).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213706).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-26"/>
	<updated date="2023-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210619">SUSE bug 1210619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213587">SUSE bug 1213587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213706">SUSE bug 1213706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215119">SUSE bug 1215119</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1829/">CVE-2023-1829</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3609/">CVE-2023-3609</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3776/">CVE-2023-3776</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3812/">CVE-2023-3812</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725195" comment="kernel-default 4.12.14-150100.197.123 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725196" comment="kernel-livepatch-4_12_14-150100_197_123-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009798027" comment="kernel-livepatch-4_12_14-150100_197_123-default-11-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138794" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210619" ref_url="https://bugzilla.suse.com/1210619" source="BUGZILLA"/>
		<reference ref_id="1213587" ref_url="https://bugzilla.suse.com/1213587" source="BUGZILLA"/>
		<reference ref_id="1213706" ref_url="https://bugzilla.suse.com/1213706" source="BUGZILLA"/>
		<reference ref_id="1215119" ref_url="https://bugzilla.suse.com/1215119" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1829" ref_url="https://www.suse.com/security/cve/CVE-2023-1829/" source="CVE"/>
		<reference ref_id="CVE-2023-3609" ref_url="https://www.suse.com/security/cve/CVE-2023-3609/" source="CVE"/>
		<reference ref_id="CVE-2023-3776" ref_url="https://www.suse.com/security/cve/CVE-2023-3776/" source="CVE"/>
		<reference ref_id="CVE-2023-3812" ref_url="https://www.suse.com/security/cve/CVE-2023-3812/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016343.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_148 fixes several issues.

The following security issues were fixed:

- CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119).
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213587).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213706).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210619">SUSE bug 1210619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213587">SUSE bug 1213587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213706">SUSE bug 1213706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215119">SUSE bug 1215119</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1829/">CVE-2023-1829</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3609/">CVE-2023-3609</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3776/">CVE-2023-3776</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3812/">CVE-2023-3812</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009775493" comment="kernel-default 4.12.14-150100.197.148 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009775494" comment="kernel-livepatch-4_12_14-150100_197_148-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009798034" comment="kernel-livepatch-4_12_14-150100_197_148-default-4-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138795" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210619" ref_url="https://bugzilla.suse.com/1210619" source="BUGZILLA"/>
		<reference ref_id="1213587" ref_url="https://bugzilla.suse.com/1213587" source="BUGZILLA"/>
		<reference ref_id="1213706" ref_url="https://bugzilla.suse.com/1213706" source="BUGZILLA"/>
		<reference ref_id="1215119" ref_url="https://bugzilla.suse.com/1215119" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1829" ref_url="https://www.suse.com/security/cve/CVE-2023-1829/" source="CVE"/>
		<reference ref_id="CVE-2023-3609" ref_url="https://www.suse.com/security/cve/CVE-2023-3609/" source="CVE"/>
		<reference ref_id="CVE-2023-3776" ref_url="https://www.suse.com/security/cve/CVE-2023-3776/" source="CVE"/>
		<reference ref_id="CVE-2023-3812" ref_url="https://www.suse.com/security/cve/CVE-2023-3812/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_151 fixes several issues.

The following security issues were fixed:

- CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119).
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213587).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213706).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210619">SUSE bug 1210619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213587">SUSE bug 1213587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213706">SUSE bug 1213706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215119">SUSE bug 1215119</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1829/">CVE-2023-1829</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3609/">CVE-2023-3609</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3776/">CVE-2023-3776</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3812/">CVE-2023-3812</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009781615" comment="kernel-default 4.12.14-150100.197.151 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009781616" comment="kernel-livepatch-4_12_14-150100_197_151-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009798035" comment="kernel-livepatch-4_12_14-150100_197_151-default-3-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138796" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210619" ref_url="https://bugzilla.suse.com/1210619" source="BUGZILLA"/>
		<reference ref_id="1213706" ref_url="https://bugzilla.suse.com/1213706" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1829" ref_url="https://www.suse.com/security/cve/CVE-2023-1829/" source="CVE"/>
		<reference ref_id="CVE-2023-3812" ref_url="https://www.suse.com/security/cve/CVE-2023-3812/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016342.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_154 fixes several issues.

The following security issues were fixed:

- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213706).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210619">SUSE bug 1210619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213706">SUSE bug 1213706</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1829/">CVE-2023-1829</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3812/">CVE-2023-3812</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009798036" comment="kernel-default 4.12.14-150100.197.154 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009798037" comment="kernel-livepatch-4_12_14-150100_197_154-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009798038" comment="kernel-livepatch-4_12_14-150100_197_154-default-2-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138797" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1210619" ref_url="https://bugzilla.suse.com/1210619" source="BUGZILLA"/>
		<reference ref_id="1213587" ref_url="https://bugzilla.suse.com/1213587" source="BUGZILLA"/>
		<reference ref_id="1213706" ref_url="https://bugzilla.suse.com/1213706" source="BUGZILLA"/>
		<reference ref_id="1215119" ref_url="https://bugzilla.suse.com/1215119" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1829" ref_url="https://www.suse.com/security/cve/CVE-2023-1829/" source="CVE"/>
		<reference ref_id="CVE-2023-3609" ref_url="https://www.suse.com/security/cve/CVE-2023-3609/" source="CVE"/>
		<reference ref_id="CVE-2023-3776" ref_url="https://www.suse.com/security/cve/CVE-2023-3776/" source="CVE"/>
		<reference ref_id="CVE-2023-3812" ref_url="https://www.suse.com/security/cve/CVE-2023-3812/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016350.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_145 fixes several issues.

The following security issues were fixed:

- CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119).
- CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213587).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213706).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210619">SUSE bug 1210619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213587">SUSE bug 1213587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213706">SUSE bug 1213706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215119">SUSE bug 1215119</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1829/">CVE-2023-1829</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3609/">CVE-2023-3609</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3776/">CVE-2023-3776</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3812/">CVE-2023-3812</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009764502" comment="kernel-default 4.12.14-150100.197.145 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009764503" comment="kernel-livepatch-4_12_14-150100_197_145-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009798033" comment="kernel-livepatch-4_12_14-150100_197_145-default-6-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138798" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1203693" ref_url="https://bugzilla.suse.com/1203693" source="BUGZILLA"/>
		<reference ref_id="1205149" ref_url="https://bugzilla.suse.com/1205149" source="BUGZILLA"/>
		<reference ref_id="1206073" ref_url="https://bugzilla.suse.com/1206073" source="BUGZILLA"/>
		<reference ref_id="1206389" ref_url="https://bugzilla.suse.com/1206389" source="BUGZILLA"/>
		<reference ref_id="1206395" ref_url="https://bugzilla.suse.com/1206395" source="BUGZILLA"/>
		<reference ref_id="1206664" ref_url="https://bugzilla.suse.com/1206664" source="BUGZILLA"/>
		<reference ref_id="1206677" ref_url="https://bugzilla.suse.com/1206677" source="BUGZILLA"/>
		<reference ref_id="1206784" ref_url="https://bugzilla.suse.com/1206784" source="BUGZILLA"/>
		<reference ref_id="1207036" ref_url="https://bugzilla.suse.com/1207036" source="BUGZILLA"/>
		<reference ref_id="1207186" ref_url="https://bugzilla.suse.com/1207186" source="BUGZILLA"/>
		<reference ref_id="1207237" ref_url="https://bugzilla.suse.com/1207237" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3107" ref_url="https://www.suse.com/security/cve/CVE-2022-3107/" source="CVE"/>
		<reference ref_id="CVE-2022-3108" ref_url="https://www.suse.com/security/cve/CVE-2022-3108/" source="CVE"/>
		<reference ref_id="CVE-2022-3564" ref_url="https://www.suse.com/security/cve/CVE-2022-3564/" source="CVE"/>
		<reference ref_id="CVE-2022-4662" ref_url="https://www.suse.com/security/cve/CVE-2022-4662/" source="CVE"/>
		<reference ref_id="CVE-2022-47929" ref_url="https://www.suse.com/security/cve/CVE-2022-47929/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013764.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-3107: Fixed missing check of return value of kvmalloc_array() (bnc#1206395).
- CVE-2022-3108: Fixed missing check of return value of kmemdup() (bnc#1206389).
- CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bnc#1206073).
- CVE-2022-4662: Fixed incorrect access control in the USB core subsystem that could lead a local user to crash the system (bnc#1206664).
- CVE-2022-47929: Fixed NULL pointer dereference bug in the traffic control subsystem (bnc#1207237).
- CVE-2023-23454: Fixed denial or service in cbq_classify in net/sched/sch_cbq.c (bnc#1207036).

The following non-security bugs were fixed:

- Added support for enabling livepatching related packages on -RT (jsc#PED-1706).
- Added suse-kernel-rpm-scriptlets to kmp buildreqs (boo#1205149).
- HID: betop: check shape of output reports (git-fixes, bsc#1207186).
- HID: betop: fix slab-out-of-bounds Write in betop_probe (git-fixes, bsc#1207186).
- HID: check empty report_list in hid_validate_values() (git-fixes, bsc#1206784).
- Reverted 'constraints: increase disk space for all architectures' (bsc#1203693)
- net: sched: atm: dont intepret cls results when asked to drop (bsc#1207036).
- net: sched: cbq: dont intepret cls results when asked to drop (bsc#1207036).
- sctp: fail if no bound addresses can be used for a given scope (bsc#1206677).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-14"/>
	<updated date="2023-02-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203693">SUSE bug 1203693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205149">SUSE bug 1205149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206073">SUSE bug 1206073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206389">SUSE bug 1206389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206395">SUSE bug 1206395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206664">SUSE bug 1206664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206677">SUSE bug 1206677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206784">SUSE bug 1206784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207036">SUSE bug 1207036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207186">SUSE bug 1207186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207237">SUSE bug 1207237</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3107/">CVE-2022-3107</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3108/">CVE-2022-3108</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3564/">CVE-2022-3564</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-4662/">CVE-2022-4662</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-47929/">CVE-2022-47929</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009738359" comment="kernel-default-livepatch-4.12.14-150100.197.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738360" comment="kernel-default-livepatch-devel-4.12.14-150100.197.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738363" comment="kernel-livepatch-4_12_14-150100_197_134-default-1-150100.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138799" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1206314" ref_url="https://bugzilla.suse.com/1206314" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3564" ref_url="https://www.suse.com/security/cve/CVE-2022-3564/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0519-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013889.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_131 fixes one issue.

The following security issue was fixed:

- CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-24"/>
	<updated date="2023-02-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206314">SUSE bug 1206314</bugzilla>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3564/">CVE-2022-3564</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009728721" comment="kernel-default 4.12.14-150100.197.131 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009728722" comment="kernel-livepatch-4_12_14-150100_197_131-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009742328" comment="kernel-livepatch-4_12_14-150100_197_131-default-2-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138800" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1206314" ref_url="https://bugzilla.suse.com/1206314" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3564" ref_url="https://www.suse.com/security/cve/CVE-2022-3564/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0528-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013896.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-197_108 fixes one issue.

The following security issue was fixed:

- CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-27"/>
	<updated date="2023-02-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206314">SUSE bug 1206314</bugzilla>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3564/">CVE-2022-3564</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720990" comment="kernel-default 4.12.14-197.108 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719209" comment="kernel-livepatch-4_12_14-197_108-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009742321" comment="kernel-livepatch-4_12_14-197_108-default-13-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138801" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1206314" ref_url="https://bugzilla.suse.com/1206314" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3564" ref_url="https://www.suse.com/security/cve/CVE-2022-3564/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_114 fixes one issue.

The following security issue was fixed:

- CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-27"/>
	<updated date="2023-02-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206314">SUSE bug 1206314</bugzilla>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3564/">CVE-2022-3564</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720992" comment="kernel-default 4.12.14-150100.197.114 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719211" comment="kernel-livepatch-4_12_14-150100_197_114-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009742323" comment="kernel-livepatch-4_12_14-150100_197_114-default-9-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138802" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1206314" ref_url="https://bugzilla.suse.com/1206314" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3564" ref_url="https://www.suse.com/security/cve/CVE-2022-3564/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_117 fixes one issue.

The following security issue was fixed:

- CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-27"/>
	<updated date="2023-02-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206314">SUSE bug 1206314</bugzilla>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3564/">CVE-2022-3564</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720993" comment="kernel-default 4.12.14-150100.197.117 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719212" comment="kernel-livepatch-4_12_14-150100_197_117-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009742324" comment="kernel-livepatch-4_12_14-150100_197_117-default-7-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138803" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1206314" ref_url="https://bugzilla.suse.com/1206314" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3564" ref_url="https://www.suse.com/security/cve/CVE-2022-3564/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_120 fixes one issue.

The following security issue was fixed:

- CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-27"/>
	<updated date="2023-02-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206314">SUSE bug 1206314</bugzilla>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3564/">CVE-2022-3564</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720994" comment="kernel-default 4.12.14-150100.197.120 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719213" comment="kernel-livepatch-4_12_14-150100_197_120-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009742325" comment="kernel-livepatch-4_12_14-150100_197_120-default-7-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138804" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1206314" ref_url="https://bugzilla.suse.com/1206314" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3564" ref_url="https://www.suse.com/security/cve/CVE-2022-3564/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_123 fixes one issue.

The following security issue was fixed:

- CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-27"/>
	<updated date="2023-02-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206314">SUSE bug 1206314</bugzilla>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3564/">CVE-2022-3564</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725195" comment="kernel-default 4.12.14-150100.197.123 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725196" comment="kernel-livepatch-4_12_14-150100_197_123-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009742326" comment="kernel-livepatch-4_12_14-150100_197_123-default-4-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138805" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1206314" ref_url="https://bugzilla.suse.com/1206314" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3564" ref_url="https://www.suse.com/security/cve/CVE-2022-3564/" source="CVE"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_126 fixes one issue.

The following security issue was fixed:

- CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-27"/>
	<updated date="2023-02-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206314">SUSE bug 1206314</bugzilla>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3564/">CVE-2022-3564</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009725197" comment="kernel-default 4.12.14-150100.197.126 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009725198" comment="kernel-livepatch-4_12_14-150100_197_126-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009742327" comment="kernel-livepatch-4_12_14-150100_197_126-default-4-150100.2.1 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138806" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1) (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1206314" ref_url="https://bugzilla.suse.com/1206314" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3564" ref_url="https://www.suse.com/security/cve/CVE-2022-3564/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0552-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013900.html" source="SUSE-SU"/>
		<description>
This update for the Linux Kernel 4.12.14-150100_197_111 fixes one issue.

The following security issue was fixed:

- CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-27"/>
	<updated date="2023-02-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206314">SUSE bug 1206314</bugzilla>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3564/">CVE-2022-3564</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
			<criteria operator="AND">
				<criterion test_ref="oval:org.opensuse.security:tst:2009720991" comment="kernel-default 4.12.14-150100.197.111 is running"/>
				<criteria operator="OR">
					<criterion test_ref="oval:org.opensuse.security:tst:2009719210" comment="kernel-livepatch-4_12_14-150100_197_111-default is not installed"/>
					<criterion test_ref="oval:org.opensuse.security:tst:2009742322" comment="kernel-livepatch-4_12_14-150100_197_111-default-12-150100.2.2 is installed"/>
				</criteria>
			</criteria>

	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138807" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Live Patching 15 SP1</platform>
		</affected>
		<reference ref_id="1186449" ref_url="https://bugzilla.suse.com/1186449" source="BUGZILLA"/>
		<reference ref_id="1194535" ref_url="https://bugzilla.suse.com/1194535" source="BUGZILLA"/>
		<reference ref_id="1201420" ref_url="https://bugzilla.suse.com/1201420" source="BUGZILLA"/>
		<reference ref_id="1203331" ref_url="https://bugzilla.suse.com/1203331" source="BUGZILLA"/>
		<reference ref_id="1203332" ref_url="https://bugzilla.suse.com/1203332" source="BUGZILLA"/>
		<reference ref_id="1204356" ref_url="https://bugzilla.suse.com/1204356" source="BUGZILLA"/>
		<reference ref_id="1204662" ref_url="https://bugzilla.suse.com/1204662" source="BUGZILLA"/>
		<reference ref_id="1205711" ref_url="https://bugzilla.suse.com/1205711" source="BUGZILLA"/>
		<reference ref_id="1207051" ref_url="https://bugzilla.suse.com/1207051" source="BUGZILLA"/>
		<reference ref_id="1207773" ref_url="https://bugzilla.suse.com/1207773" source="BUGZILLA"/>
		<reference ref_id="1207795" ref_url="https://bugzilla.suse.com/1207795" source="BUGZILLA"/>
		<reference ref_id="1207845" ref_url="https://bugzilla.suse.com/1207845" source="BUGZILLA"/>
		<reference ref_id="1207875" ref_url="https://bugzilla.suse.com/1207875" source="BUGZILLA"/>
		<reference ref_id="1208700" ref_url="https://bugzilla.suse.com/1208700" source="BUGZILLA"/>
		<reference ref_id="1208837" ref_url="https://bugzilla.suse.com/1208837" source="BUGZILLA"/>
		<reference ref_id="1209188" ref_url="https://bugzilla.suse.com/1209188" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4203" ref_url="https://www.suse.com/security/cve/CVE-2021-4203/" source="CVE"/>
		<reference ref_id="CVE-2022-2991" ref_url="https://www.suse.com/security/cve/CVE-2022-2991/" source="CVE"/>
		<reference ref_id="CVE-2022-36280" ref_url="https://www.suse.com/security/cve/CVE-2022-36280/" source="CVE"/>
		<reference ref_id="CVE-2022-38096" ref_url="https://www.suse.com/security/cve/CVE-2022-38096/" source="CVE"/>
		<reference ref_id="CVE-2022-4129" ref_url="https://www.suse.com/security/cve/CVE-2022-4129/" source="CVE"/>
		<reference ref_id="CVE-2023-0045" ref_url="https://www.suse.com/security/cve/CVE-2023-0045/" source="CVE"/>
		<reference ref_id="CVE-2023-0590" ref_url="https://www.suse.com/security/cve/CVE-2023-0590/" source="CVE"/>
		<reference ref_id="CVE-2023-0597" ref_url="https://www.suse.com/security/cve/CVE-2023-0597/" source="CVE"/>
		<reference ref_id="CVE-2023-1118" ref_url="https://www.suse.com/security/cve/CVE-2023-1118/" source="CVE"/>
		<reference ref_id="CVE-2023-23559" ref_url="https://www.suse.com/security/cve/CVE-2023-23559/" source="CVE"/>
		<reference ref_id="CVE-2023-26545" ref_url="https://www.suse.com/security/cve/CVE-2023-26545/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014072.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bsc#1194535).
- CVE-2022-2991: Fixed an heap-based overflow in the lightnvm implemenation (bsc#1201420).
- CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332).
- CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331).
- CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. (bsc#1205711)
- CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773).
- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-0597: Fixed a lack of randomization of per-cpu entry area in x86/mm (bsc#1207845).
- CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
- CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051).
- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700).

The following non-security bugs were fixed:

- kabi/severities: add l2tp local symbols
- module: Do not wait for GOING modules (bsc#1196058, bsc#1186449, bsc#1204356, bsc#1204662).
- net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-16"/>
	<updated date="2023-03-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186449">SUSE bug 1186449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194535">SUSE bug 1194535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201420">SUSE bug 1201420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203331">SUSE bug 1203331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203332">SUSE bug 1203332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204356">SUSE bug 1204356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204662">SUSE bug 1204662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205711">SUSE bug 1205711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207051">SUSE bug 1207051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207773">SUSE bug 1207773</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207795">SUSE bug 1207795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207845">SUSE bug 1207845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207875">SUSE bug 1207875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208700">SUSE bug 1208700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208837">SUSE bug 1208837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209188">SUSE bug 1209188</bugzilla>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4203/">CVE-2021-4203</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2991/">CVE-2022-2991</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36280/">CVE-2022-36280</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38096/">CVE-2022-38096</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-4129/">CVE-2022-4129</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-0045/">CVE-2023-0045</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0590/">CVE-2023-0590</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-0597/">CVE-2023-0597</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1118/">CVE-2023-1118</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2023-23559/">CVE-2023-23559</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26545/">CVE-2023-26545</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-live-patching:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009257133" comment="SUSE Linux Enterprise Live Patching 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009744370" comment="kernel-default-livepatch-4.12.14-150100.197.137.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744371" comment="kernel-default-livepatch-devel-4.12.14-150100.197.137.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744372" comment="kernel-livepatch-4_12_14-150100_197_137-default-1-150100.3.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138808" version="1" class="patch">
	<metadata>
		<title>Security update for python-SQLAlchemy (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1124593" ref_url="https://bugzilla.suse.com/1124593" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-7164" ref_url="https://www.suse.com/security/cve/CVE-2019-7164/" source="CVE"/>
		<reference ref_id="CVE-2019-7548" ref_url="https://www.suse.com/security/cve/CVE-2019-7548/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2253-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005938.html" source="SUSE-SU"/>
		<description>
This update for python-SQLAlchemy fixes the following issues:

Security issues fixed:

- CVE-2019-7164: Fixed SQL Injection via the order_by parameter (bsc#1124593).
- CVE-2019-7548: Fixed SQL Injection via the group_by parameter (bsc#1124593).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-19"/>
	<updated date="2019-09-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1124593">SUSE bug 1124593</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-7164/">CVE-2019-7164</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-7548/">CVE-2019-7548</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497853" comment="python2-SQLAlchemy-1.2.14-6.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138809" version="1" class="patch">
	<metadata>
		<title>Security update for python-Werkzeug (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1145383" ref_url="https://bugzilla.suse.com/1145383" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14806" ref_url="https://www.suse.com/security/cve/CVE-2019-14806/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2365-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005937.html" source="SUSE-SU"/>
		<description>
This update for python-Werkzeug fixes the following issues:

Security issue fixed:

- CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container (bsc#1145383).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-19"/>
	<updated date="2019-09-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1145383">SUSE bug 1145383</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-14806/">CVE-2019-14806</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497854" comment="python2-Werkzeug-0.14.1-6.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138810" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1109412" ref_url="https://bugzilla.suse.com/1109412" source="BUGZILLA"/>
		<reference ref_id="1109413" ref_url="https://bugzilla.suse.com/1109413" source="BUGZILLA"/>
		<reference ref_id="1109414" ref_url="https://bugzilla.suse.com/1109414" source="BUGZILLA"/>
		<reference ref_id="1111996" ref_url="https://bugzilla.suse.com/1111996" source="BUGZILLA"/>
		<reference ref_id="1112534" ref_url="https://bugzilla.suse.com/1112534" source="BUGZILLA"/>
		<reference ref_id="1112535" ref_url="https://bugzilla.suse.com/1112535" source="BUGZILLA"/>
		<reference ref_id="1113247" ref_url="https://bugzilla.suse.com/1113247" source="BUGZILLA"/>
		<reference ref_id="1113252" ref_url="https://bugzilla.suse.com/1113252" source="BUGZILLA"/>
		<reference ref_id="1113255" ref_url="https://bugzilla.suse.com/1113255" source="BUGZILLA"/>
		<reference ref_id="1116827" ref_url="https://bugzilla.suse.com/1116827" source="BUGZILLA"/>
		<reference ref_id="1118644" ref_url="https://bugzilla.suse.com/1118644" source="BUGZILLA"/>
		<reference ref_id="1118830" ref_url="https://bugzilla.suse.com/1118830" source="BUGZILLA"/>
		<reference ref_id="1118831" ref_url="https://bugzilla.suse.com/1118831" source="BUGZILLA"/>
		<reference ref_id="1120640" ref_url="https://bugzilla.suse.com/1120640" source="BUGZILLA"/>
		<reference ref_id="1121034" ref_url="https://bugzilla.suse.com/1121034" source="BUGZILLA"/>
		<reference ref_id="1121035" ref_url="https://bugzilla.suse.com/1121035" source="BUGZILLA"/>
		<reference ref_id="1121056" ref_url="https://bugzilla.suse.com/1121056" source="BUGZILLA"/>
		<reference ref_id="1133131" ref_url="https://bugzilla.suse.com/1133131" source="BUGZILLA"/>
		<reference ref_id="1133232" ref_url="https://bugzilla.suse.com/1133232" source="BUGZILLA"/>
		<reference ref_id="1141913" ref_url="https://bugzilla.suse.com/1141913" source="BUGZILLA"/>
		<reference ref_id="1142772" ref_url="https://bugzilla.suse.com/1142772" source="BUGZILLA"/>
		<reference ref_id="1152590" ref_url="https://bugzilla.suse.com/1152590" source="BUGZILLA"/>
		<reference ref_id="1154016" ref_url="https://bugzilla.suse.com/1154016" source="BUGZILLA"/>
		<reference ref_id="1154025" ref_url="https://bugzilla.suse.com/1154025" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000876" ref_url="https://www.suse.com/security/cve/CVE-2018-1000876/" source="CVE"/>
		<reference ref_id="CVE-2018-17358" ref_url="https://www.suse.com/security/cve/CVE-2018-17358/" source="CVE"/>
		<reference ref_id="CVE-2018-17359" ref_url="https://www.suse.com/security/cve/CVE-2018-17359/" source="CVE"/>
		<reference ref_id="CVE-2018-17360" ref_url="https://www.suse.com/security/cve/CVE-2018-17360/" source="CVE"/>
		<reference ref_id="CVE-2018-17985" ref_url="https://www.suse.com/security/cve/CVE-2018-17985/" source="CVE"/>
		<reference ref_id="CVE-2018-18309" ref_url="https://www.suse.com/security/cve/CVE-2018-18309/" source="CVE"/>
		<reference ref_id="CVE-2018-18483" ref_url="https://www.suse.com/security/cve/CVE-2018-18483/" source="CVE"/>
		<reference ref_id="CVE-2018-18484" ref_url="https://www.suse.com/security/cve/CVE-2018-18484/" source="CVE"/>
		<reference ref_id="CVE-2018-18605" ref_url="https://www.suse.com/security/cve/CVE-2018-18605/" source="CVE"/>
		<reference ref_id="CVE-2018-18606" ref_url="https://www.suse.com/security/cve/CVE-2018-18606/" source="CVE"/>
		<reference ref_id="CVE-2018-18607" ref_url="https://www.suse.com/security/cve/CVE-2018-18607/" source="CVE"/>
		<reference ref_id="CVE-2018-19931" ref_url="https://www.suse.com/security/cve/CVE-2018-19931/" source="CVE"/>
		<reference ref_id="CVE-2018-19932" ref_url="https://www.suse.com/security/cve/CVE-2018-19932/" source="CVE"/>
		<reference ref_id="CVE-2018-20623" ref_url="https://www.suse.com/security/cve/CVE-2018-20623/" source="CVE"/>
		<reference ref_id="CVE-2018-20651" ref_url="https://www.suse.com/security/cve/CVE-2018-20651/" source="CVE"/>
		<reference ref_id="CVE-2018-20671" ref_url="https://www.suse.com/security/cve/CVE-2018-20671/" source="CVE"/>
		<reference ref_id="CVE-2018-6323" ref_url="https://www.suse.com/security/cve/CVE-2018-6323/" source="CVE"/>
		<reference ref_id="CVE-2018-6543" ref_url="https://www.suse.com/security/cve/CVE-2018-6543/" source="CVE"/>
		<reference ref_id="CVE-2018-6759" ref_url="https://www.suse.com/security/cve/CVE-2018-6759/" source="CVE"/>
		<reference ref_id="CVE-2018-6872" ref_url="https://www.suse.com/security/cve/CVE-2018-6872/" source="CVE"/>
		<reference ref_id="CVE-2018-7208" ref_url="https://www.suse.com/security/cve/CVE-2018-7208/" source="CVE"/>
		<reference ref_id="CVE-2018-7568" ref_url="https://www.suse.com/security/cve/CVE-2018-7568/" source="CVE"/>
		<reference ref_id="CVE-2018-7569" ref_url="https://www.suse.com/security/cve/CVE-2018-7569/" source="CVE"/>
		<reference ref_id="CVE-2018-7570" ref_url="https://www.suse.com/security/cve/CVE-2018-7570/" source="CVE"/>
		<reference ref_id="CVE-2018-7642" ref_url="https://www.suse.com/security/cve/CVE-2018-7642/" source="CVE"/>
		<reference ref_id="CVE-2018-7643" ref_url="https://www.suse.com/security/cve/CVE-2018-7643/" source="CVE"/>
		<reference ref_id="CVE-2018-8945" ref_url="https://www.suse.com/security/cve/CVE-2018-8945/" source="CVE"/>
		<reference ref_id="CVE-2019-1010180" ref_url="https://www.suse.com/security/cve/CVE-2019-1010180/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006053.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

binutils was updated to current 2.32 branch [jsc#ECO-368].

Includes following security fixes:

- CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)
- CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)
- CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)
- CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)
- CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)
- CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)
- CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)
- CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)
- CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)
- CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)
- CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)
- CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)
- CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)
- CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)
- CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in  load_specific_debug_section in objdump.c (bsc#1121056)
- CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)
- CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)

- enable xtensa architecture (Tensilica lc6 and related)
- Use -ffat-lto-objects in order to provide assembly for static libs
  (bsc#1141913).
- Fixed some LTO build issues (bsc#1133131 bsc#1133232).
- riscv: Don't check ABI flags if no code section
- Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).
- Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).

Update to binutils 2.32:

* The binutils now support for the C-SKY processor series.
* The x86 assembler now supports a -mvexwig=[0|1] option to control
  encoding of VEX.W-ignored (WIG) VEX instructions.
  It also has a new -mx86-used-note=[yes|no] option to generate (or
  not) x86 GNU property notes.  
* The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),
  the Loongson EXTensions (EXT) instructions, the Loongson Content
  Address Memory (CAM) ASE and the Loongson MultiMedia extensions
  Instructions (MMI) ASE.
* The addr2line, c++filt, nm and objdump tools now have a default
  limit on the maximum amount of recursion that is allowed whilst
  demangling strings.  This limit can be disabled if necessary.
* Objdump's --disassemble option can now take a parameter,
  specifying the starting symbol for disassembly.  Disassembly will
  continue from this symbol up to the next symbol or the end of the
  function.
* The BFD linker will now report property change in linker map file
  when merging GNU properties.
* The BFD linker's -t option now doesn't report members within
  archives, unless -t is given twice.  This makes it more useful
  when generating a list of files that should be packaged for a
  linker bug report.
* The GOLD linker has improved warning messages for relocations that
  refer to discarded sections.

- Improve relro support on s390 [fate#326356]
- Fix broken debug symbols (bsc#1118644)
- Handle ELF compressed header alignment correctly.

		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-24"/>
	<updated date="2019-10-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1109412">SUSE bug 1109412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109413">SUSE bug 1109413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109414">SUSE bug 1109414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111996">SUSE bug 1111996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112534">SUSE bug 1112534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112535">SUSE bug 1112535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113247">SUSE bug 1113247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113252">SUSE bug 1113252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113255">SUSE bug 1113255</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116827">SUSE bug 1116827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118644">SUSE bug 1118644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118830">SUSE bug 1118830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118831">SUSE bug 1118831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120640">SUSE bug 1120640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121034">SUSE bug 1121034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121035">SUSE bug 1121035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121056">SUSE bug 1121056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133131">SUSE bug 1133131</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133232">SUSE bug 1133232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141913">SUSE bug 1141913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142772">SUSE bug 1142772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152590">SUSE bug 1152590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154016">SUSE bug 1154016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154025">SUSE bug 1154025</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000876/">CVE-2018-1000876</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17358/">CVE-2018-17358</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17359/">CVE-2018-17359</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17360/">CVE-2018-17360</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17985/">CVE-2018-17985</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18309/">CVE-2018-18309</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18483/">CVE-2018-18483</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18484/">CVE-2018-18484</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18605/">CVE-2018-18605</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18606/">CVE-2018-18606</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18607/">CVE-2018-18607</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19931/">CVE-2018-19931</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19932/">CVE-2018-19932</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-20623/">CVE-2018-20623</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20651/">CVE-2018-20651</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20671/">CVE-2018-20671</cve>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6323/">CVE-2018-6323</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6543/">CVE-2018-6543</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6759/">CVE-2018-6759</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-6872/">CVE-2018-6872</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7208/">CVE-2018-7208</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7568/">CVE-2018-7568</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7569/">CVE-2018-7569</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7570/">CVE-2018-7570</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7642/">CVE-2018-7642</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7643/">CVE-2018-7643</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8945/">CVE-2018-8945</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-1010180/">CVE-2019-1010180</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497855" comment="binutils-gold-2.32-7.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138811" version="1" class="patch">
	<metadata>
		<title>Security update for Mesa (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1156015" ref_url="https://bugzilla.suse.com/1156015" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5068" ref_url="https://www.suse.com/security/cve/CVE-2019-5068/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0111-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007095.html" source="SUSE-SU"/>
		<description>
This update for Mesa fixes the following issues:

Security issue fixed:

- CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability (bsc#1156015).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-07"/>
	<updated date="2020-07-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1156015">SUSE bug 1156015</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-5068/">CVE-2019-5068</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497856" comment="libOSMesa8-32bit-18.3.2-34.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138812" version="1" class="patch">
	<metadata>
		<title>Security update for LibVNCServer (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1155419" ref_url="https://bugzilla.suse.com/1155419" source="BUGZILLA"/>
		<reference ref_id="1160471" ref_url="https://bugzilla.suse.com/1160471" source="BUGZILLA"/>
		<reference ref_id="1170441" ref_url="https://bugzilla.suse.com/1170441" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15681" ref_url="https://www.suse.com/security/cve/CVE-2019-15681/" source="CVE"/>
		<reference ref_id="CVE-2019-15690" ref_url="https://www.suse.com/security/cve/CVE-2019-15690/" source="CVE"/>
		<reference ref_id="CVE-2019-20788" ref_url="https://www.suse.com/security/cve/CVE-2019-20788/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1164-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007090.html" source="SUSE-SU"/>
		<description>
This update for LibVNCServer fixes the following issues:

- CVE-2019-15690: Fixed a heap buffer overflow (bsc#1160471).
- CVE-2019-15681: Fixed a memory leak which could have allowed to a remote attacker to read stack memory (bsc#1155419).
- CVE-2019-20788: Fixed a integer overflow and heap-based buffer overflow via a large height or width value (bsc#1170441).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-07"/>
	<updated date="2020-07-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1155419">SUSE bug 1155419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160471">SUSE bug 1160471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170441">SUSE bug 1170441</bugzilla>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15681/">CVE-2019-15681</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15690/">CVE-2019-15690</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-20788/">CVE-2019-20788</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497857" comment="libvncserver0-0.9.10-4.14.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138813" version="1" class="patch">
	<metadata>
		<title>Security update for libvpx (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1166066" ref_url="https://bugzilla.suse.com/1166066" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0034" ref_url="https://www.suse.com/security/cve/CVE-2020-0034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1297-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007106.html" source="SUSE-SU"/>
		<description>
This update for libvpx fixes the following issues:

- CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames (bsc#1166066).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-08"/>
	<updated date="2020-07-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1166066">SUSE bug 1166066</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-0034/">CVE-2020-0034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497858" comment="vpx-tools-1.6.1-6.6.8 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138814" version="1" class="patch">
	<metadata>
		<title>Security update for gstreamer-plugins-base (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1133375" ref_url="https://bugzilla.suse.com/1133375" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9928" ref_url="https://www.suse.com/security/cve/CVE-2019-9928/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1300-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007089.html" source="SUSE-SU"/>
		<description>
This update for gstreamer-plugins-base fixes the following issue:

Security issue fixed:

- CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser (bsc#1133375).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-07"/>
	<updated date="2020-07-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1133375">SUSE bug 1133375</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9928/">CVE-2019-9928</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497859" comment="libgstaudio-1_0-0-32bit-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497860" comment="libgsttag-1_0-0-32bit-1.12.5-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497861" comment="libgstvideo-1_0-0-32bit-1.12.5-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138815" version="1" class="patch">
	<metadata>
		<title>Security update for freetds (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1141132" ref_url="https://bugzilla.suse.com/1141132" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13508" ref_url="https://www.suse.com/security/cve/CVE-2019-13508/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1417-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007103.html" source="SUSE-SU"/>
		<description>
This update for freetds to 1.1.36 fixes the following issues:

Security issue fixed:

- CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 (bsc#1141132).

Non-security issues fixed:

- Enabled Kerberos support
- Version update to 1.1.36:
  * Default TDS protocol version is now 'auto'
  * Improved UTF-8 performances
  * TDS Pool Server is enabled
  * MARS support is enabled
  * NTLMv2 is enabled
  * See NEWS and ChangeLog for a complete list of changes
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-08"/>
	<updated date="2020-07-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141132">SUSE bug 1141132</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13508/">CVE-2019-13508</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497862" comment="libsybdb5-1.1.36-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138816" version="1" class="patch">
	<metadata>
		<title>Security update for jasper (Low)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1092115" ref_url="https://bugzilla.suse.com/1092115" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-9154" ref_url="https://www.suse.com/security/cve/CVE-2018-9154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1420-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007133.html" source="SUSE-SU"/>
		<description>
This update for jasper fixes the following issues:

- CVE-2018-9154: Fixed a potential denial of service in jpc_dec_process_sot() (bsc#1092115).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-15"/>
	<updated date="2020-07-15"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1092115">SUSE bug 1092115</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9154/">CVE-2018-9154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497863" comment="jasper-2.0.14-3.11.8 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138817" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1167462" ref_url="https://bugzilla.suse.com/1167462" source="BUGZILLA"/>
		<reference ref_id="1169511" ref_url="https://bugzilla.suse.com/1169511" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-2754" ref_url="https://www.suse.com/security/cve/CVE-2020-2754/" source="CVE"/>
		<reference ref_id="CVE-2020-2755" ref_url="https://www.suse.com/security/cve/CVE-2020-2755/" source="CVE"/>
		<reference ref_id="CVE-2020-2756" ref_url="https://www.suse.com/security/cve/CVE-2020-2756/" source="CVE"/>
		<reference ref_id="CVE-2020-2757" ref_url="https://www.suse.com/security/cve/CVE-2020-2757/" source="CVE"/>
		<reference ref_id="CVE-2020-2767" ref_url="https://www.suse.com/security/cve/CVE-2020-2767/" source="CVE"/>
		<reference ref_id="CVE-2020-2773" ref_url="https://www.suse.com/security/cve/CVE-2020-2773/" source="CVE"/>
		<reference ref_id="CVE-2020-2778" ref_url="https://www.suse.com/security/cve/CVE-2020-2778/" source="CVE"/>
		<reference ref_id="CVE-2020-2781" ref_url="https://www.suse.com/security/cve/CVE-2020-2781/" source="CVE"/>
		<reference ref_id="CVE-2020-2800" ref_url="https://www.suse.com/security/cve/CVE-2020-2800/" source="CVE"/>
		<reference ref_id="CVE-2020-2803" ref_url="https://www.suse.com/security/cve/CVE-2020-2803/" source="CVE"/>
		<reference ref_id="CVE-2020-2805" ref_url="https://www.suse.com/security/cve/CVE-2020-2805/" source="CVE"/>
		<reference ref_id="CVE-2020-2816" ref_url="https://www.suse.com/security/cve/CVE-2020-2816/" source="CVE"/>
		<reference ref_id="CVE-2020-2830" ref_url="https://www.suse.com/security/cve/CVE-2020-2830/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1511-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007085.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

Java was updated to jdk-11.0.7+10 (April 2020 CPU, bsc#1169511).

Security issues fixed:

- CVE-2020-2754: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).
- CVE-2020-2755: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).
- CVE-2020-2756: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).
- CVE-2020-2757: Fixed an object deserialization issue that could have resulted in denial of service via crafted serialized input (bsc#1169511).
- CVE-2020-2767: Fixed an incorrect handling of certificate messages during TLS handshakes (bsc#1169511).
- CVE-2020-2773: Fixed the incorrect handling of exceptions thrown by unmarshalKeyInfo() and unmarshalXMLSignature() (bsc#1169511).
- CVE-2020-2778: Fixed the incorrect handling of SSLParameters in setAlgorithmConstraints(), which could have been abused to override the defined systems security policy and lead to the use of weak crypto algorithms (bsc#1169511).
- CVE-2020-2781: Fixed the incorrect re-use of single null TLS sessions (bsc#1169511).
- CVE-2020-2800: Fixed an HTTP header injection issue caused by mishandling of CR/LF in header values (bsc#1169511).
- CVE-2020-2803: Fixed a boundary check and type check issue that could have led to a sandbox bypass (bsc#1169511).
- CVE-2020-2805: Fixed a boundary check and type check issue that could have led to a sandbox bypass (bsc#1169511).
- CVE-2020-2816: Fixed an incorrect handling of application data packets during TLS handshakes  (bsc#1169511).
- CVE-2020-2830: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-07"/>
	<updated date="2020-07-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1167462">SUSE bug 1167462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169511">SUSE bug 1169511</bugzilla>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2754/">CVE-2020-2754</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2755/">CVE-2020-2755</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2756/">CVE-2020-2756</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2757/">CVE-2020-2757</cve>
	<cve impact="important" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2767/">CVE-2020-2767</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2773/">CVE-2020-2773</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2778/">CVE-2020-2778</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2781/">CVE-2020-2781</cve>
	<cve impact="important" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-2800/">CVE-2020-2800</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2803/">CVE-2020-2803</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-2805/">CVE-2020-2805</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-2816/">CVE-2020-2816</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-2830/">CVE-2020-2830</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497864" comment="java-11-openjdk-javadoc-11.0.7.0-3.42.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138818" version="1" class="patch">
	<metadata>
		<title>Security update for libexif (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1055857" ref_url="https://bugzilla.suse.com/1055857" source="BUGZILLA"/>
		<reference ref_id="1059893" ref_url="https://bugzilla.suse.com/1059893" source="BUGZILLA"/>
		<reference ref_id="1120943" ref_url="https://bugzilla.suse.com/1120943" source="BUGZILLA"/>
		<reference ref_id="1160770" ref_url="https://bugzilla.suse.com/1160770" source="BUGZILLA"/>
		<reference ref_id="1171475" ref_url="https://bugzilla.suse.com/1171475" source="BUGZILLA"/>
		<reference ref_id="1171847" ref_url="https://bugzilla.suse.com/1171847" source="BUGZILLA"/>
		<reference ref_id="1172105" ref_url="https://bugzilla.suse.com/1172105" source="BUGZILLA"/>
		<reference ref_id="1172116" ref_url="https://bugzilla.suse.com/1172116" source="BUGZILLA"/>
		<reference ref_id="1172121" ref_url="https://bugzilla.suse.com/1172121" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-6328" ref_url="https://www.suse.com/security/cve/CVE-2016-6328/" source="CVE"/>
		<reference ref_id="CVE-2017-7544" ref_url="https://www.suse.com/security/cve/CVE-2017-7544/" source="CVE"/>
		<reference ref_id="CVE-2018-20030" ref_url="https://www.suse.com/security/cve/CVE-2018-20030/" source="CVE"/>
		<reference ref_id="CVE-2019-9278" ref_url="https://www.suse.com/security/cve/CVE-2019-9278/" source="CVE"/>
		<reference ref_id="CVE-2020-0093" ref_url="https://www.suse.com/security/cve/CVE-2020-0093/" source="CVE"/>
		<reference ref_id="CVE-2020-12767" ref_url="https://www.suse.com/security/cve/CVE-2020-12767/" source="CVE"/>
		<reference ref_id="CVE-2020-13112" ref_url="https://www.suse.com/security/cve/CVE-2020-13112/" source="CVE"/>
		<reference ref_id="CVE-2020-13113" ref_url="https://www.suse.com/security/cve/CVE-2020-13113/" source="CVE"/>
		<reference ref_id="CVE-2020-13114" ref_url="https://www.suse.com/security/cve/CVE-2020-13114/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1553-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007105.html" source="SUSE-SU"/>
		<description>
This update for libexif to 0.6.22 fixes the following issues:

Security issues fixed:

- CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file (bsc#1055857).
- CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c (bsc#1059893).
- CVE-2018-20030: Fixed a denial of service by endless recursion (bsc#1120943).
- CVE-2019-9278: Fixed an integer overflow (bsc#1160770).
- CVE-2020-0093: Fixed an out-of-bounds read in exif_data_save_data_entry (bsc#1171847).
- CVE-2020-12767: Fixed a divide-by-zero error in exif_entry_get_value (bsc#1171475).
- CVE-2020-13112: Fixed a time consumption DoS when parsing canon array markers (bsc#1172121).
- CVE-2020-13113: Fixed a potential use of uninitialized memory (bsc#1172105).
- CVE-2020-13114: Fixed various buffer overread fixes due to integer overflows in maker notes (bsc#1172116).

Non-security issues fixed:

- libexif was updated to version 0.6.22:
  * New translations: ms
  * Updated translations for most languages
  * Some useful EXIF 2.3 tag added:
    * EXIF_TAG_GAMMA
    * EXIF_TAG_COMPOSITE_IMAGE
    * EXIF_TAG_SOURCE_IMAGE_NUMBER_OF_COMPOSITE_IMAGE
    * EXIF_TAG_SOURCE_EXPOSURE_TIMES_OF_COMPOSITE_IMAGE
    * EXIF_TAG_GPS_H_POSITIONING_ERROR
    * EXIF_TAG_CAMERA_OWNER_NAME
    * EXIF_TAG_BODY_SERIAL_NUMBER
    * EXIF_TAG_LENS_SPECIFICATION
    * EXIF_TAG_LENS_MAKE
    * EXIF_TAG_LENS_MODEL
    * EXIF_TAG_LENS_SERIAL_NUMBER
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-08"/>
	<updated date="2020-07-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1055857">SUSE bug 1055857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1059893">SUSE bug 1059893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120943">SUSE bug 1120943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160770">SUSE bug 1160770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171475">SUSE bug 1171475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171847">SUSE bug 1171847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172105">SUSE bug 1172105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172116">SUSE bug 1172116</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172121">SUSE bug 1172121</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2016-6328/">CVE-2016-6328</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-7544/">CVE-2017-7544</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20030/">CVE-2018-20030</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9278/">CVE-2019-9278</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0093/">CVE-2020-0093</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12767/">CVE-2020-12767</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13112/">CVE-2020-13112</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13113/">CVE-2020-13113</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13114/">CVE-2020-13114</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497865" comment="libexif12-32bit-0.6.22-5.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138819" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1171999" ref_url="https://bugzilla.suse.com/1171999" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11048" ref_url="https://www.suse.com/security/cve/CVE-2019-11048/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1661-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007093.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

Security issue fixed:

- CVE-2019-11048: Improved the handling of overly long filenames or field names in HTTP file uploads (bsc#1171999).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-07"/>
	<updated date="2020-07-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1171999">SUSE bug 1171999</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11048/">CVE-2019-11048</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497866" comment="php7-embed-7.2.5-4.58.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138820" version="1" class="patch">
	<metadata>
		<title>Security update for perl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1171863" ref_url="https://bugzilla.suse.com/1171863" source="BUGZILLA"/>
		<reference ref_id="1171864" ref_url="https://bugzilla.suse.com/1171864" source="BUGZILLA"/>
		<reference ref_id="1171866" ref_url="https://bugzilla.suse.com/1171866" source="BUGZILLA"/>
		<reference ref_id="1172348" ref_url="https://bugzilla.suse.com/1172348" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10543" ref_url="https://www.suse.com/security/cve/CVE-2020-10543/" source="CVE"/>
		<reference ref_id="CVE-2020-10878" ref_url="https://www.suse.com/security/cve/CVE-2020-10878/" source="CVE"/>
		<reference ref_id="CVE-2020-12723" ref_url="https://www.suse.com/security/cve/CVE-2020-12723/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1682-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007092.html" source="SUSE-SU"/>
		<description>
This update for perl fixes the following issues:

- CVE-2020-10543: Fixed a heap buffer overflow in regular expression compiler which could have 
  allowed overwriting of allocated memory with attacker's data (bsc#1171863).
- CVE-2020-10878: Fixed multiple integer overflows which could have allowed the insertion of 
  instructions into the compiled form of Perl regular expression (bsc#1171864).
- CVE-2020-12723: Fixed an attacker's corruption of the intermediate language state of a 
  compiled regular expression (bsc#1171866).
- Fixed a bad warning in features.ph (bsc#1172348).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-07"/>
	<updated date="2020-07-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171863">SUSE bug 1171863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171864">SUSE bug 1171864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171866">SUSE bug 1171866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172348">SUSE bug 1172348</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-10543/">CVE-2020-10543</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-10878/">CVE-2020-10878</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12723/">CVE-2020-12723</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497867" comment="perl-32bit-5.26.1-7.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138821" version="1" class="patch">
	<metadata>
		<title>Security update for libjpeg-turbo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1156402" ref_url="https://bugzilla.suse.com/1156402" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-2201" ref_url="https://www.suse.com/security/cve/CVE-2019-2201/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2971-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007075.html" source="SUSE-SU"/>
		<description>
This update for libjpeg-turbo fixes the following issues:

- CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo,
  when attempting to compress or decompress gigapixel images. [bsc#1156402]

		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-06"/>
	<updated date="2020-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1156402">SUSE bug 1156402</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-2201/">CVE-2019-2201</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497831" comment="libjpeg-turbo-1.5.3-5.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138822" version="1" class="patch">
	<metadata>
		<title>Security update for djvulibre (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1154401" ref_url="https://bugzilla.suse.com/1154401" source="BUGZILLA"/>
		<reference ref_id="1156188" ref_url="https://bugzilla.suse.com/1156188" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18804" ref_url="https://www.suse.com/security/cve/CVE-2019-18804/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3033-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007087.html" source="SUSE-SU"/>
		<description>
This update for djvulibre fixes the following issues:

Security issue fixed: 

- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).

Other issue addressed: 
- Fixed a crash when mmx was enabled (bsc#1154401)		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-07"/>
	<updated date="2020-07-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1154401">SUSE bug 1154401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156188">SUSE bug 1156188</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-18804/">CVE-2019-18804</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497832" comment="djvulibre-3.5.27-3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138823" version="1" class="patch">
	<metadata>
		<title>Security update for SDL2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1141844" ref_url="https://bugzilla.suse.com/1141844" source="BUGZILLA"/>
		<reference ref_id="1142031" ref_url="https://bugzilla.suse.com/1142031" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13616" ref_url="https://www.suse.com/security/cve/CVE-2019-13616/" source="CVE"/>
		<reference ref_id="CVE-2019-13626" ref_url="https://www.suse.com/security/cve/CVE-2019-13626/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2463-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007086.html" source="SUSE-SU"/>
		<description>
This update for SDL2 fixes the following issues:

Security issues fixed:

- CVE-2019-13616: Fixed heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c (bsc#1141844).
- CVE-2019-13626: Fixed integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c (bsc#1142031).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-07"/>
	<updated date="2020-07-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141844">SUSE bug 1141844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142031">SUSE bug 1142031</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13616/">CVE-2019-13616</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13626/">CVE-2019-13626</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497868" comment="libSDL2-2_0-0-32bit-2.0.8-3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138824" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1100352" ref_url="https://bugzilla.suse.com/1100352" source="BUGZILLA"/>
		<reference ref_id="1129715" ref_url="https://bugzilla.suse.com/1129715" source="BUGZILLA"/>
		<reference ref_id="1137526" ref_url="https://bugzilla.suse.com/1137526" source="BUGZILLA"/>
		<reference ref_id="1154064" ref_url="https://bugzilla.suse.com/1154064" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13301" ref_url="https://www.suse.com/security/cve/CVE-2018-13301/" source="CVE"/>
		<reference ref_id="CVE-2019-12730" ref_url="https://www.suse.com/security/cve/CVE-2019-12730/" source="CVE"/>
		<reference ref_id="CVE-2019-17542" ref_url="https://www.suse.com/security/cve/CVE-2019-17542/" source="CVE"/>
		<reference ref_id="CVE-2019-9718" ref_url="https://www.suse.com/security/cve/CVE-2019-9718/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3184-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007084.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

Security issues fixed:	  
- CVE-2019-17542: Fixed a heap-buffer overflow in vqa_decode_chunk due to an 
  out-of-array access (bsc#1154064).
- CVE-2019-12730: Fixed an uninitialized use of variables due to an improper 
  check (bsc#1137526).
- CVE-2019-9718: Fixed a denial of service in the subtitle decode (bsc#1129715).
- CVE-2018-13301: Fixed a denial of service while converting a crafted AVI file 
  to MPEG4 (bsc#1100352).
  		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-07"/>
	<updated date="2020-07-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1100352">SUSE bug 1100352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129715">SUSE bug 1129715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137526">SUSE bug 1137526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154064">SUSE bug 1154064</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13301/">CVE-2018-13301</cve>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-12730/">CVE-2019-12730</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17542/">CVE-2019-17542</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9718/">CVE-2019-9718</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497834" comment="ffmpeg-3.4.2-4.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497835" comment="libavdevice57-3.4.2-4.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497836" comment="libavfilter6-3.4.2-4.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138825" version="1" class="patch">
	<metadata>
		<title>Security update for LibVNCServer (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1173477" ref_url="https://bugzilla.suse.com/1173477" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18922" ref_url="https://www.suse.com/security/cve/CVE-2017-18922/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007096.html" source="SUSE-SU"/>
		<description>
This update for LibVNCServer fixes the following issues:

- CVE-2017-18922: Fixed an issue which could have allowed to an attacker to pre-auth overwrite a function pointer 
  which subsequently used leading to potential remote code execution (bsc#1173477).	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-07"/>
	<updated date="2020-07-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173477">SUSE bug 1173477</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18922/">CVE-2017-18922</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497869" comment="libvncserver0-0.9.10-4.19.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138826" version="1" class="patch">
	<metadata>
		<title>Security update for nmap (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1135350" ref_url="https://bugzilla.suse.com/1135350" source="BUGZILLA"/>
		<reference ref_id="1148742" ref_url="https://bugzilla.suse.com/1148742" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18594" ref_url="https://www.suse.com/security/cve/CVE-2017-18594/" source="CVE"/>
		<reference ref_id="CVE-2018-15173" ref_url="https://www.suse.com/security/cve/CVE-2018-15173/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2425-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007102.html" source="SUSE-SU"/>
		<description>
This update for nmap fixes the following issues:

Security issue fixed:

- CVE-2017-18594: Fixed a denial of service condition due to a double free when an SSH connection fails. (bsc#1148742)

Non-security issue fixed:

- Fixed a regression in the version scanner caused, by the fix for CVE-2018-15173. (bsc#1135350)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-08"/>
	<updated date="2020-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1135350">SUSE bug 1135350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148742">SUSE bug 1148742</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-18594/">CVE-2017-18594</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-15173/">CVE-2018-15173</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497822" comment="nping-7.70-3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138827" version="1" class="patch">
	<metadata>
		<title>Security update for opencv (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1144348" ref_url="https://bugzilla.suse.com/1144348" source="BUGZILLA"/>
		<reference ref_id="1144352" ref_url="https://bugzilla.suse.com/1144352" source="BUGZILLA"/>
		<reference ref_id="1149742" ref_url="https://bugzilla.suse.com/1149742" source="BUGZILLA"/>
		<reference ref_id="1154091" ref_url="https://bugzilla.suse.com/1154091" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14491" ref_url="https://www.suse.com/security/cve/CVE-2019-14491/" source="CVE"/>
		<reference ref_id="CVE-2019-14492" ref_url="https://www.suse.com/security/cve/CVE-2019-14492/" source="CVE"/>
		<reference ref_id="CVE-2019-15939" ref_url="https://www.suse.com/security/cve/CVE-2019-15939/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3192-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007098.html" source="SUSE-SU"/>
		<description>
This update for opencv fixes the following issues:

Security issues fixed:

- CVE-2019-14491: Fixed an out of bounds read in the function cv:predictOrdered&lt;cv:HaarEvaluator&gt;, leading to DOS (bsc#1144352).
- CVE-2019-14492: Fixed an out of bounds read/write in the function HaarEvaluator:OptFeature:calc, which leads to denial of service (bsc#1144348).
- CVE-2019-15939: Fixed a divide-by-zero error in cv:HOGDescriptor:getDescriptorSize (bsc#1149742).

Non-security issue fixed:

- Fixed an issue in opencv-devel that broke builds with 'No rule to make target opencv_calib3d-NOTFOUND' (bsc#1154091).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-08"/>
	<updated date="2020-07-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1144348">SUSE bug 1144348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144352">SUSE bug 1144352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149742">SUSE bug 1149742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154091">SUSE bug 1154091</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14491/">CVE-2019-14491</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14492/">CVE-2019-14492</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15939/">CVE-2019-15939</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497837" comment="python2-opencv-3.3.1-6.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497838" comment="python3-opencv-3.3.1-6.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138828" version="1" class="patch">
	<metadata>
		<title>Security update for python-ecdsa (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1153165" ref_url="https://bugzilla.suse.com/1153165" source="BUGZILLA"/>
		<reference ref_id="1154217" ref_url="https://bugzilla.suse.com/1154217" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14853" ref_url="https://www.suse.com/security/cve/CVE-2019-14853/" source="CVE"/>
		<reference ref_id="CVE-2019-14859" ref_url="https://www.suse.com/security/cve/CVE-2019-14859/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2891-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007100.html" source="SUSE-SU"/>
		<description>
This update for python-ecdsa to version 0.13.3 fixes the following issues:

Security issues fixed:

- CVE-2019-14853: Fixed unexpected exceptions during signature decoding (bsc#1153165).
- CVE-2019-14859: Fixed a signature malleability caused by insufficient checks of DER encoding (bsc#1154217).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-08"/>
	<updated date="2020-07-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1153165">SUSE bug 1153165</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154217">SUSE bug 1154217</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14853/">CVE-2019-14853</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14859/">CVE-2019-14859</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497830" comment="python2-ecdsa-0.13.3-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138829" version="1" class="patch">
	<metadata>
		<title>Security update for graphviz (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1132091" ref_url="https://bugzilla.suse.com/1132091" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11023" ref_url="https://www.suse.com/security/cve/CVE-2019-11023/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1267-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007119.html" source="SUSE-SU"/>
		<description>
This update for graphviz fixes the following issues:

Security issue fixed:

- CVE-2019-11023: Fixed a denial of service vulnerability, which was caused by a NULL pointer dereference in agroot() (bsc#1132091).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-13"/>
	<updated date="2020-07-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1132091">SUSE bug 1132091</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11023/">CVE-2019-11023</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497804" comment="graphviz-gnome-2.40.1-6.3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138830" version="1" class="patch">
	<metadata>
		<title>Security update for LibVNCServer (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1173477" ref_url="https://bugzilla.suse.com/1173477" source="BUGZILLA"/>
		<reference ref_id="1173691" ref_url="https://bugzilla.suse.com/1173691" source="BUGZILLA"/>
		<reference ref_id="1173694" ref_url="https://bugzilla.suse.com/1173694" source="BUGZILLA"/>
		<reference ref_id="1173700" ref_url="https://bugzilla.suse.com/1173700" source="BUGZILLA"/>
		<reference ref_id="1173701" ref_url="https://bugzilla.suse.com/1173701" source="BUGZILLA"/>
		<reference ref_id="1173743" ref_url="https://bugzilla.suse.com/1173743" source="BUGZILLA"/>
		<reference ref_id="1173874" ref_url="https://bugzilla.suse.com/1173874" source="BUGZILLA"/>
		<reference ref_id="1173875" ref_url="https://bugzilla.suse.com/1173875" source="BUGZILLA"/>
		<reference ref_id="1173876" ref_url="https://bugzilla.suse.com/1173876" source="BUGZILLA"/>
		<reference ref_id="1173880" ref_url="https://bugzilla.suse.com/1173880" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18922" ref_url="https://www.suse.com/security/cve/CVE-2017-18922/" source="CVE"/>
		<reference ref_id="CVE-2018-21247" ref_url="https://www.suse.com/security/cve/CVE-2018-21247/" source="CVE"/>
		<reference ref_id="CVE-2019-20839" ref_url="https://www.suse.com/security/cve/CVE-2019-20839/" source="CVE"/>
		<reference ref_id="CVE-2019-20840" ref_url="https://www.suse.com/security/cve/CVE-2019-20840/" source="CVE"/>
		<reference ref_id="CVE-2020-14397" ref_url="https://www.suse.com/security/cve/CVE-2020-14397/" source="CVE"/>
		<reference ref_id="CVE-2020-14398" ref_url="https://www.suse.com/security/cve/CVE-2020-14398/" source="CVE"/>
		<reference ref_id="CVE-2020-14399" ref_url="https://www.suse.com/security/cve/CVE-2020-14399/" source="CVE"/>
		<reference ref_id="CVE-2020-14400" ref_url="https://www.suse.com/security/cve/CVE-2020-14400/" source="CVE"/>
		<reference ref_id="CVE-2020-14401" ref_url="https://www.suse.com/security/cve/CVE-2020-14401/" source="CVE"/>
		<reference ref_id="CVE-2020-14402" ref_url="https://www.suse.com/security/cve/CVE-2020-14402/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1922-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007136.html" source="SUSE-SU"/>
		<description>
This update for LibVNCServer fixes the following issues:

- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-15"/>
	<updated date="2020-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173477">SUSE bug 1173477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173691">SUSE bug 1173691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173694">SUSE bug 1173694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173700">SUSE bug 1173700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173701">SUSE bug 1173701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173743">SUSE bug 1173743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173874">SUSE bug 1173874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173875">SUSE bug 1173875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173876">SUSE bug 1173876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173880">SUSE bug 1173880</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-18922/">CVE-2017-18922</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-21247/">CVE-2018-21247</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20839/">CVE-2019-20839</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20840/">CVE-2019-20840</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14397/">CVE-2020-14397</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14398/">CVE-2020-14398</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14399/">CVE-2020-14399</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14400/">CVE-2020-14400</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14401/">CVE-2020-14401</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14402/">CVE-2020-14402</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497870" comment="libvncserver0-0.9.10-4.22.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138831" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1174157" ref_url="https://bugzilla.suse.com/1174157" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14556" ref_url="https://www.suse.com/security/cve/CVE-2020-14556/" source="CVE"/>
		<reference ref_id="CVE-2020-14562" ref_url="https://www.suse.com/security/cve/CVE-2020-14562/" source="CVE"/>
		<reference ref_id="CVE-2020-14573" ref_url="https://www.suse.com/security/cve/CVE-2020-14573/" source="CVE"/>
		<reference ref_id="CVE-2020-14577" ref_url="https://www.suse.com/security/cve/CVE-2020-14577/" source="CVE"/>
		<reference ref_id="CVE-2020-14581" ref_url="https://www.suse.com/security/cve/CVE-2020-14581/" source="CVE"/>
		<reference ref_id="CVE-2020-14583" ref_url="https://www.suse.com/security/cve/CVE-2020-14583/" source="CVE"/>
		<reference ref_id="CVE-2020-14593" ref_url="https://www.suse.com/security/cve/CVE-2020-14593/" source="CVE"/>
		<reference ref_id="CVE-2020-14621" ref_url="https://www.suse.com/security/cve/CVE-2020-14621/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007229.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
      Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
      java/awt/dnd/BadSerializationTest/BadSerializationTest.java
      fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
       popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
      ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
      java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
       Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
      in nightly
    + JDK-8080353: JShell: Better error message on attempting to
       add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
      with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
       with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
       ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
      unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
      correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
      method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
       multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
       running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
      intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
      Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
      java/awt/List/EmptyListEventTest/EmptyListEventTest.java
      debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
      /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
      unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
      after JDK-8198801
    + JDK-8203264: JNI exception pending in
      PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
      DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing 'allocate' naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
      deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
      /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
      handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
      /GetCommittedVirtualMemorySize.java fails with Committed
      virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
      with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
      doesn't work with 1GB LargePages
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-06"/>
	<updated date="2020-08-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174157">SUSE bug 1174157</bugzilla>
	<cve impact="important" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14556/">CVE-2020-14556</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14562/">CVE-2020-14562</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14573/">CVE-2020-14573</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14577/">CVE-2020-14577</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14581/">CVE-2020-14581</cve>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14583/">CVE-2020-14583</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-14593/">CVE-2020-14593</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14621/">CVE-2020-14621</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497871" comment="java-11-openjdk-javadoc-11.0.8.0-3.45.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138832" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 and postgresql12  (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1148643" ref_url="https://bugzilla.suse.com/1148643" source="BUGZILLA"/>
		<reference ref_id="1163985" ref_url="https://bugzilla.suse.com/1163985" source="BUGZILLA"/>
		<reference ref_id="1171924" ref_url="https://bugzilla.suse.com/1171924" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1720" ref_url="https://www.suse.com/security/cve/CVE-2020-1720/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007234.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 and postgresql12 fixes the following issues:

postgresql10 was updated to 10.13 (bsc#1171924).

  https://www.postgresql.org/about/news/2038/
  https://www.postgresql.org/docs/10/release-10-13.html

postgresql10 was updated to 10.12 (CVE-2020-1720, bsc#1163985)

- https://www.postgresql.org/about/news/2011/
- https://www.postgresql.org/docs/10/release-10-12.html

postgresql10 was updated to 10.11:

- https://www.postgresql.org/about/news/1994/
- https://www.postgresql.org/docs/10/release-10-11.html


postgresql12 was updated to 12.3 (bsc#1171924).

Bug Fixes and Improvements:

- Several fixes for GENERATED columns, including an issue where it was possible to crash or corrupt data in a table when the output of the generated column was the exact copy of a physical column on the table, e.g. if the expression called a function which could return its own input.
- Several fixes for ALTER TABLE, including ensuring the SET STORAGE directive is propagated to a table's indexes.
- Fix a potential race condition when using DROP OWNED BY while another session is deleting the same objects.
- Allow for a partition to be detached when it has inherited ROW triggers.
- Several fixes for REINDEX CONCURRENTLY, particularly with issues when a REINDEX CONCURRENTLY operation fails.
- Fix crash when COLLATE is applied to an uncollatable type in a partition bound expression.
- Fix performance regression in floating point overflow/underflow detection.
- Several fixes for full text search, particularly with phrase searching.
- Fix query-lifespan memory leak for a set-returning function used in a query's FROM clause.
- Several reporting fixes for the output of VACUUM VERBOSE.
- Allow input of type circle to accept the format (x,y),r, which is specified in the documentation.
- Allow for the get_bit() and set_bit() functions to not fail on bytea strings longer than 256MB.
- Avoid premature recycling of WAL segments during crash recovery, which could lead to WAL segments being recycled before being archived.
- Avoid attempting to fetch nonexistent WAL files from archive storage during recovery by skipping irrelevant timelines.
- Several fixes for logical replication and replication slots.
- Fix several race conditions in synchronous standby management, including one that occurred when changing the synchronous_standby_names setting.
- Several fixes for GSSAPI support, include a fix for a memory leak that occurred when using GSSAPI encryption.
- Ensure that members of the pg_read_all_stats role can read all statistics views.
- Fix performance regression in information_schema.triggers view.
- Fix memory leak in libpq when using sslmode=verify-full.
- Fix crash in psql when attempting to re-establish a failed connection.
- Allow tab-completion of the filename argument to \gx command in psql.
- Add pg_dump support for ALTER ... DEPENDS ON EXTENSION.
- Several other fixes for pg_dump, which include dumping comments on RLS policies and postponing restore of event triggers until the end.
- Ensure pg_basebackup generates valid tar files.
- pg_checksums skips tablespace subdirectories that belong to a different PostgreSQL major version
- Several Windows compatibility fixes

This update also contains timezone tzdata release 2020a for DST law changes in Morocco and the Canadian Yukon, plus historical corrections for Shanghai. The America/Godthab zone has been renamed to America/Nuuk to reflect current English usage ; however, the old name remains available as a compatibility link. This also updates initdb's list of known Windows time zone names to include recent additions.

For more details, check out:

-  https://www.postgresql.org/docs/12/release-12-3.html

Other fixes:

- Let postgresqlXX conflict with postgresql-noarch &lt; 12.0.1 to get
  a clean and complete cutover to the new packaging schema.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-06"/>
	<updated date="2020-08-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1148643">SUSE bug 1148643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163985">SUSE bug 1163985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171924">SUSE bug 1171924</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-1720/">CVE-2020-1720</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497872" comment="postgresql-test-12.0.1-8.14.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138833" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1173786" ref_url="https://bugzilla.suse.com/1173786" source="BUGZILLA"/>
		<reference ref_id="1174010" ref_url="https://bugzilla.suse.com/1174010" source="BUGZILLA"/>
		<reference ref_id="1175223" ref_url="https://bugzilla.suse.com/1175223" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7068" ref_url="https://www.suse.com/security/cve/CVE-2020-7068/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007333.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223).
- Do not install outdated README.SUSE (bsc#1174010).
- Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-02"/>
	<updated date="2020-09-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173786">SUSE bug 1173786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174010">SUSE bug 1174010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175223">SUSE bug 1175223</bugzilla>
	<cve impact="moderate" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7068/">CVE-2020-7068</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497873" comment="php7-embed-7.2.5-4.61.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138834" version="1" class="patch">
	<metadata>
		<title>Security update for libjpeg-turbo (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1172491" ref_url="https://bugzilla.suse.com/1172491" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13790" ref_url="https://www.suse.com/security/cve/CVE-2020-13790/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2569-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007380.html" source="SUSE-SU"/>
		<description>
This update for libjpeg-turbo fixes the following issues:

- CVE-2020-13790: Fixed a heap-based buffer over-read via a malformed PPM input file (bsc#1172491).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-08"/>
	<updated date="2020-09-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172491">SUSE bug 1172491</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13790/">CVE-2020-13790</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497874" comment="libjpeg-turbo-1.5.3-5.15.7 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138835" version="1" class="patch">
	<metadata>
		<title>Security update for jasper (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1010979" ref_url="https://bugzilla.suse.com/1010979" source="BUGZILLA"/>
		<reference ref_id="1010980" ref_url="https://bugzilla.suse.com/1010980" source="BUGZILLA"/>
		<reference ref_id="1020451" ref_url="https://bugzilla.suse.com/1020451" source="BUGZILLA"/>
		<reference ref_id="1020456" ref_url="https://bugzilla.suse.com/1020456" source="BUGZILLA"/>
		<reference ref_id="1020458" ref_url="https://bugzilla.suse.com/1020458" source="BUGZILLA"/>
		<reference ref_id="1020460" ref_url="https://bugzilla.suse.com/1020460" source="BUGZILLA"/>
		<reference ref_id="1045450" ref_url="https://bugzilla.suse.com/1045450" source="BUGZILLA"/>
		<reference ref_id="1057152" ref_url="https://bugzilla.suse.com/1057152" source="BUGZILLA"/>
		<reference ref_id="1088278" ref_url="https://bugzilla.suse.com/1088278" source="BUGZILLA"/>
		<reference ref_id="1114498" ref_url="https://bugzilla.suse.com/1114498" source="BUGZILLA"/>
		<reference ref_id="1115637" ref_url="https://bugzilla.suse.com/1115637" source="BUGZILLA"/>
		<reference ref_id="1117328" ref_url="https://bugzilla.suse.com/1117328" source="BUGZILLA"/>
		<reference ref_id="1120805" ref_url="https://bugzilla.suse.com/1120805" source="BUGZILLA"/>
		<reference ref_id="1120807" ref_url="https://bugzilla.suse.com/1120807" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-9398" ref_url="https://www.suse.com/security/cve/CVE-2016-9398/" source="CVE"/>
		<reference ref_id="CVE-2016-9399" ref_url="https://www.suse.com/security/cve/CVE-2016-9399/" source="CVE"/>
		<reference ref_id="CVE-2017-14132" ref_url="https://www.suse.com/security/cve/CVE-2017-14132/" source="CVE"/>
		<reference ref_id="CVE-2017-5499" ref_url="https://www.suse.com/security/cve/CVE-2017-5499/" source="CVE"/>
		<reference ref_id="CVE-2017-5503" ref_url="https://www.suse.com/security/cve/CVE-2017-5503/" source="CVE"/>
		<reference ref_id="CVE-2017-5504" ref_url="https://www.suse.com/security/cve/CVE-2017-5504/" source="CVE"/>
		<reference ref_id="CVE-2017-5505" ref_url="https://www.suse.com/security/cve/CVE-2017-5505/" source="CVE"/>
		<reference ref_id="CVE-2017-9782" ref_url="https://www.suse.com/security/cve/CVE-2017-9782/" source="CVE"/>
		<reference ref_id="CVE-2018-18873" ref_url="https://www.suse.com/security/cve/CVE-2018-18873/" source="CVE"/>
		<reference ref_id="CVE-2018-19139" ref_url="https://www.suse.com/security/cve/CVE-2018-19139/" source="CVE"/>
		<reference ref_id="CVE-2018-19543" ref_url="https://www.suse.com/security/cve/CVE-2018-19543/" source="CVE"/>
		<reference ref_id="CVE-2018-20570" ref_url="https://www.suse.com/security/cve/CVE-2018-20570/" source="CVE"/>
		<reference ref_id="CVE-2018-20622" ref_url="https://www.suse.com/security/cve/CVE-2018-20622/" source="CVE"/>
		<reference ref_id="CVE-2018-9252" ref_url="https://www.suse.com/security/cve/CVE-2018-9252/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007447.html" source="SUSE-SU"/>
		<description>
This update for jasper fixes the following issues:

- CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979).
- CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980).
- CVE-2017-5499: Validate component depth bit (bsc#1020451).
- CVE-2017-5503: Check bounds in jas_seq2d_bindsub() (bsc#1020456).
- CVE-2017-5504: Check bounds in jas_seq2d_bindsub() (bsc#1020458).
- CVE-2017-5505: Check bounds in jas_seq2d_bindsub() (bsc#1020460).
- CVE-2017-14132: Fix heap base overflow in by checking components (bsc#1057152).
- CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize (bsc#1088278).
- CVE-2018-18873: Fix null pointer deref in ras_putdatastd (bsc#1114498).
- CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms (bsc#1115637).
- CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup (bsc#1117328).
- CVE-2018-20570: Fix heap based buffer over-read in jp2_encode (bsc#1120807).
- CVE-2018-20622: Fix memory leak in jas_malloc.c (bsc#1120805).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-21"/>
	<updated date="2020-09-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1010979">SUSE bug 1010979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1010980">SUSE bug 1010980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020451">SUSE bug 1020451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020456">SUSE bug 1020456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020458">SUSE bug 1020458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1020460">SUSE bug 1020460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1045450">SUSE bug 1045450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1057152">SUSE bug 1057152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088278">SUSE bug 1088278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114498">SUSE bug 1114498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115637">SUSE bug 1115637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117328">SUSE bug 1117328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120805">SUSE bug 1120805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120807">SUSE bug 1120807</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9398/">CVE-2016-9398</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-9399/">CVE-2016-9399</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-14132/">CVE-2017-14132</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5499/">CVE-2017-5499</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5503/">CVE-2017-5503</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5504/">CVE-2017-5504</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-5505/">CVE-2017-5505</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9782/">CVE-2017-9782</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18873/">CVE-2018-18873</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19139/">CVE-2018-19139</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19543/">CVE-2018-19543</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20570/">CVE-2018-20570</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20622/">CVE-2018-20622</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-9252/">CVE-2018-9252</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497875" comment="jasper-2.0.14-3.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138836" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1146608" ref_url="https://bugzilla.suse.com/1146608" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14973" ref_url="https://www.suse.com/security/cve/CVE-2019-14973/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007480.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2019-14973: Fixed an improper check which was depended on the compiler
  which could have led to integer overflow (bsc#1146608).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-24"/>
	<updated date="2020-09-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1146608">SUSE bug 1146608</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14973/">CVE-2019-14973</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497876" comment="tiff-4.0.9-5.30.28 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138837" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1173786" ref_url="https://bugzilla.suse.com/1173786" source="BUGZILLA"/>
		<reference ref_id="1177351" ref_url="https://bugzilla.suse.com/1177351" source="BUGZILLA"/>
		<reference ref_id="1177352" ref_url="https://bugzilla.suse.com/1177352" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7069" ref_url="https://www.suse.com/security/cve/CVE-2020-7069/" source="CVE"/>
		<reference ref_id="CVE-2020-7070" ref_url="https://www.suse.com/security/cve/CVE-2020-7070/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007610.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV,
  only first 7 bytes of the IV was used (bsc#1177351).
- CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352). 
- Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786) 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-22"/>
	<updated date="2020-10-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173786">SUSE bug 1173786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177351">SUSE bug 1177351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177352">SUSE bug 1177352</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-7069/">CVE-2020-7069</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-7070/">CVE-2020-7070</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497877" comment="php7-embed-7.2.5-4.67.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138838" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1126826" ref_url="https://bugzilla.suse.com/1126826" source="BUGZILLA"/>
		<reference ref_id="1126829" ref_url="https://bugzilla.suse.com/1126829" source="BUGZILLA"/>
		<reference ref_id="1126831" ref_url="https://bugzilla.suse.com/1126831" source="BUGZILLA"/>
		<reference ref_id="1140126" ref_url="https://bugzilla.suse.com/1140126" source="BUGZILLA"/>
		<reference ref_id="1142649" ref_url="https://bugzilla.suse.com/1142649" source="BUGZILLA"/>
		<reference ref_id="1143609" ref_url="https://bugzilla.suse.com/1143609" source="BUGZILLA"/>
		<reference ref_id="1153768" ref_url="https://bugzilla.suse.com/1153768" source="BUGZILLA"/>
		<reference ref_id="1153770" ref_url="https://bugzilla.suse.com/1153770" source="BUGZILLA"/>
		<reference ref_id="1157755" ref_url="https://bugzilla.suse.com/1157755" source="BUGZILLA"/>
		<reference ref_id="1160254" ref_url="https://bugzilla.suse.com/1160254" source="BUGZILLA"/>
		<reference ref_id="1160590" ref_url="https://bugzilla.suse.com/1160590" source="BUGZILLA"/>
		<reference ref_id="1163333" ref_url="https://bugzilla.suse.com/1163333" source="BUGZILLA"/>
		<reference ref_id="1163744" ref_url="https://bugzilla.suse.com/1163744" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12972" ref_url="https://www.suse.com/security/cve/CVE-2019-12972/" source="CVE"/>
		<reference ref_id="CVE-2019-14250" ref_url="https://www.suse.com/security/cve/CVE-2019-14250/" source="CVE"/>
		<reference ref_id="CVE-2019-14444" ref_url="https://www.suse.com/security/cve/CVE-2019-14444/" source="CVE"/>
		<reference ref_id="CVE-2019-17450" ref_url="https://www.suse.com/security/cve/CVE-2019-17450/" source="CVE"/>
		<reference ref_id="CVE-2019-17451" ref_url="https://www.suse.com/security/cve/CVE-2019-17451/" source="CVE"/>
		<reference ref_id="CVE-2019-9074" ref_url="https://www.suse.com/security/cve/CVE-2019-9074/" source="CVE"/>
		<reference ref_id="CVE-2019-9075" ref_url="https://www.suse.com/security/cve/CVE-2019-9075/" source="CVE"/>
		<reference ref_id="CVE-2019-9077" ref_url="https://www.suse.com/security/cve/CVE-2019-9077/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007650.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

binutils was updated to version 2.35. (jsc#ECO-2373)

Update to binutils 2.35:

* The assembler can now produce DWARF-5 format line number tables.
* Readelf now has a 'lint' mode to enable extra checks of the files it is processing.
* Readelf will now display '[...]' when it has to truncate a symbol name.  
  The old behaviour - of displaying as many characters as possible, up to
  the 80 column limit - can be restored by the use of the --silent-truncation
  option.
* The linker can now produce a dependency file listing the inputs that it
  has processed, much like the -M -MP option supported by the compiler.

- fix DT_NEEDED order with -flto [bsc#1163744]


Update to binutils 2.34:

* The disassembler (objdump --disassemble) now has an option to
  generate ascii art thats show the arcs between that start and end
  points of control flow instructions.
* The binutils tools now have support for debuginfod.  Debuginfod is a 
  HTTP service for distributing ELF/DWARF debugging information as
  well as source code.  The tools can now connect to debuginfod
  servers in order to download debug information about the files that
  they are processing.
* The assembler and linker now support the generation of ELF format
  files for the Z80 architecture.

- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to bsc#1163333.
- Includes fixes for these CVEs:
  bsc#1153768 aka CVE-2019-17451 aka PR25070
  bsc#1153770 aka CVE-2019-17450 aka PR25078

- fix various build fails on aarch64 (PR25210, bsc#1157755).

Update to binutils 2.33.1:

* Adds support for the Arm Scalable Vector Extension version 2
  (SVE2) instructions, the Arm Transactional Memory Extension (TME)
  instructions and the Armv8.1-M Mainline and M-profile Vector
  Extension (MVE) instructions.
* Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
  processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
  Cortex-A76AE, and Cortex-A77 processors.
* Adds a .float16 directive for both Arm and AArch64 to allow
  encoding of 16-bit floating point literals.
* For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
  Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
  configure time option to set the default behavior. Set the default
  if the configure option is not used to 'no'.
* The Cortex-A53 Erratum 843419 workaround now supports a choice of
  which workaround to use.  The option --fix-cortex-a53-843419 now
  takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
  which can be used to force a particular workaround to be used.
  See --help for AArch64 for more details.
* Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
  GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
  in the AArch64 ELF linker. 
* Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
  on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI 
  on inputs and use PLTs protected with BTI.
* Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
* Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
  provides a prefix to source code lines displayed in a disassembly.
* Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
  option to objcopy to allow the changing of section alignments.
* Add --verilog-data-width option to objcopy for verilog targets to
  control width of data elements in verilog hex format.
* The separate debug info file options of readelf (--debug-dump=links
  and --debug-dump=follow) and objdump (--dwarf=links and
  --dwarf=follow-links) will now display and/or follow multiple
  links if more than one are present in a file.  (This usually
  happens when gcc's -gsplit-dwarf option is used).
  In addition objdump's --dwarf=follow-links now also affects its
  other display options, so that for example, when combined with
  --syms it will cause the symbol tables in any linked debug info
  files to also be displayed.  In addition when combined with
  --disassemble the --dwarf= follow-links option will ensure that
  any symbol tables in the linked files are read and used when
  disassembling code in the main file.
* Add support for dumping types encoded in the Compact Type Format
  to objdump and readelf.
- Includes fixes for these CVEs:
  bsc#1126826 aka CVE-2019-9077 aka PR1126826
  bsc#1126829 aka CVE-2019-9075 aka PR1126829
  bsc#1126831 aka CVE-2019-9074 aka PR24235
  bsc#1140126 aka CVE-2019-12972 aka PR23405
  bsc#1143609 aka CVE-2019-14444 aka PR24829
  bsc#1142649 aka CVE-2019-14250 aka PR90924

* Add xBPF target
* Fix various problems with DWARF 5 support in gas
* fix nm -B for objects compiled with -flto and -fcommon.

  		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-28"/>
	<updated date="2020-10-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1126826">SUSE bug 1126826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126829">SUSE bug 1126829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126831">SUSE bug 1126831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140126">SUSE bug 1140126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142649">SUSE bug 1142649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143609">SUSE bug 1143609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153768">SUSE bug 1153768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153770">SUSE bug 1153770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157755">SUSE bug 1157755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160254">SUSE bug 1160254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160590">SUSE bug 1160590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163333">SUSE bug 1163333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163744">SUSE bug 1163744</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12972/">CVE-2019-12972</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14250/">CVE-2019-14250</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14444/">CVE-2019-14444</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17450/">CVE-2019-17450</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17451/">CVE-2019-17451</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9074/">CVE-2019-9074</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9075/">CVE-2019-9075</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9077/">CVE-2019-9077</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497878" comment="binutils-gold-2.35-7.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138839" version="1" class="patch">
	<metadata>
		<title>Security update for sane-backends (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1172524" ref_url="https://bugzilla.suse.com/1172524" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12861" ref_url="https://www.suse.com/security/cve/CVE-2020-12861/" source="CVE"/>
		<reference ref_id="CVE-2020-12862" ref_url="https://www.suse.com/security/cve/CVE-2020-12862/" source="CVE"/>
		<reference ref_id="CVE-2020-12863" ref_url="https://www.suse.com/security/cve/CVE-2020-12863/" source="CVE"/>
		<reference ref_id="CVE-2020-12864" ref_url="https://www.suse.com/security/cve/CVE-2020-12864/" source="CVE"/>
		<reference ref_id="CVE-2020-12865" ref_url="https://www.suse.com/security/cve/CVE-2020-12865/" source="CVE"/>
		<reference ref_id="CVE-2020-12866" ref_url="https://www.suse.com/security/cve/CVE-2020-12866/" source="CVE"/>
		<reference ref_id="CVE-2020-12867" ref_url="https://www.suse.com/security/cve/CVE-2020-12867/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3065-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007652.html" source="SUSE-SU"/>
		<description>
This update for sane-backends fixes the following issues:

sane-backends was updated to 1.0.31 to further improve hardware enablement for scanner devices (jsc#ECO-2418 jsc#SLE-15561 jsc#SLE-15560)
and also fix various security issues:

- CVE-2020-12861,CVE-2020-12865: Fixed an out of bounds write (bsc#1172524)
- CVE-2020-12862,CVE-2020-12863,CVE-2020-12864,: Fixed an out of bounds read (bsc#1172524)
- CVE-2020-12866,CVE-2020-12867: Fixed a null pointer dereference (bsc#1172524)

The upstream changelogs can be found here:

- https://gitlab.com/sane-project/backends/-/releases/1.0.28
- https://gitlab.com/sane-project/backends/-/releases/1.0.29
- https://gitlab.com/sane-project/backends/-/releases/1.0.30
- https://gitlab.com/sane-project/backends/-/releases/1.0.31
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-28"/>
	<updated date="2020-10-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172524">SUSE bug 1172524</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12861/">CVE-2020-12861</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12862/">CVE-2020-12862</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12863/">CVE-2020-12863</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12864/">CVE-2020-12864</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12865/">CVE-2020-12865</cve>
	<cve impact="important" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12866/">CVE-2020-12866</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12867/">CVE-2020-12867</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497879" comment="sane-backends-32bit-1.0.31-6.3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138840" version="1" class="patch">
	<metadata>
		<title>Security update for zeromq (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1176116" ref_url="https://bugzilla.suse.com/1176116" source="BUGZILLA"/>
		<reference ref_id="1176256" ref_url="https://bugzilla.suse.com/1176256" source="BUGZILLA"/>
		<reference ref_id="1176257" ref_url="https://bugzilla.suse.com/1176257" source="BUGZILLA"/>
		<reference ref_id="1176258" ref_url="https://bugzilla.suse.com/1176258" source="BUGZILLA"/>
		<reference ref_id="1176259" ref_url="https://bugzilla.suse.com/1176259" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15166" ref_url="https://www.suse.com/security/cve/CVE-2020-15166/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007741.html" source="SUSE-SU"/>
		<description>
This update for zeromq fixes the following issues:

- CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service (bsc#1176116).
- Fixed a heap overflow when receiving malformed ZMTP v1 packets (bsc#1176256)
- Fixed a memory leak in client induced by malicious server(s) without CURVE/ZAP (bsc#1176257)
- Fixed memory leak when processing PUB messages with metadata (bsc#1176259)
- Fixed a stack overflow in PUB/XPUB subscription store (bsc#1176258)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-10"/>
	<updated date="2020-11-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1176116">SUSE bug 1176116</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176256">SUSE bug 1176256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176257">SUSE bug 1176257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176258">SUSE bug 1176258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176259">SUSE bug 1176259</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15166/">CVE-2020-15166</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009492788" comment="libunwind-32bit-1.2.1-4.2.3 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138841" version="1" class="patch">
	<metadata>
		<title>Security update for python-waitress (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1160790" ref_url="https://bugzilla.suse.com/1160790" source="BUGZILLA"/>
		<reference ref_id="1161088" ref_url="https://bugzilla.suse.com/1161088" source="BUGZILLA"/>
		<reference ref_id="1161089" ref_url="https://bugzilla.suse.com/1161089" source="BUGZILLA"/>
		<reference ref_id="1161670" ref_url="https://bugzilla.suse.com/1161670" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16785" ref_url="https://www.suse.com/security/cve/CVE-2019-16785/" source="CVE"/>
		<reference ref_id="CVE-2019-16786" ref_url="https://www.suse.com/security/cve/CVE-2019-16786/" source="CVE"/>
		<reference ref_id="CVE-2019-16789" ref_url="https://www.suse.com/security/cve/CVE-2019-16789/" source="CVE"/>
		<reference ref_id="CVE-2019-16792" ref_url="https://www.suse.com/security/cve/CVE-2019-16792/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3269-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007743.html" source="SUSE-SU"/>
		<description>
This update for python-waitress to 1.4.3 fixes the following security issues:

- CVE-2019-16785: HTTP request smuggling through LF vs CRLF handling (bsc#1161088).
- CVE-2019-16786: HTTP request smuggling through invalid Transfer-Encoding (bsc#1161089).
- CVE-2019-16789: HTTP request smuggling through invalid whitespace characters (bsc#1160790).
- CVE-2019-16792: HTTP request smuggling by sending the Content-Length header twice (bsc#1161670).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-10"/>
	<updated date="2020-11-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1160790">SUSE bug 1160790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161088">SUSE bug 1161088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161089">SUSE bug 1161089</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161670">SUSE bug 1161670</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16785/">CVE-2019-16785</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16786/">CVE-2019-16786</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16789/">CVE-2019-16789</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16792/">CVE-2019-16792</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497880" comment="python2-waitress-1.4.3-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138842" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1177943" ref_url="https://bugzilla.suse.com/1177943" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14779" ref_url="https://www.suse.com/security/cve/CVE-2020-14779/" source="CVE"/>
		<reference ref_id="CVE-2020-14781" ref_url="https://www.suse.com/security/cve/CVE-2020-14781/" source="CVE"/>
		<reference ref_id="CVE-2020-14782" ref_url="https://www.suse.com/security/cve/CVE-2020-14782/" source="CVE"/>
		<reference ref_id="CVE-2020-14792" ref_url="https://www.suse.com/security/cve/CVE-2020-14792/" source="CVE"/>
		<reference ref_id="CVE-2020-14796" ref_url="https://www.suse.com/security/cve/CVE-2020-14796/" source="CVE"/>
		<reference ref_id="CVE-2020-14797" ref_url="https://www.suse.com/security/cve/CVE-2020-14797/" source="CVE"/>
		<reference ref_id="CVE-2020-14798" ref_url="https://www.suse.com/security/cve/CVE-2020-14798/" source="CVE"/>
		<reference ref_id="CVE-2020-14803" ref_url="https://www.suse.com/security/cve/CVE-2020-14803/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007787.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
      truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
      /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
      /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
      LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
      /CloseServerSocket.java fails intermittently with Address
      already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
      due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
      names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
      before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
      fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
      in table
    + JDK-8203281: [Windows] JComboBox change in ui when
      editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
      resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
      JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
      serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with 'Windbg
      Error: WaitForEvent failed'
    + JDK-8205534: Remove SymbolTable dependency from
      serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
      /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
      version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
      is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
      attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
      should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
      timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
      version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
      ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
      /ap10t001/TestDescription.java failed with ObjectFree:
      GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
      version - step3
    + JDK-8210527: JShell: NullPointerException in
      jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
      tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
      with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
      clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
      version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
      fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
      test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
      by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
      test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
      - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
      (assert when shared java.lang.Object is redefined by JVMTI
      agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
      jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
      lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
      not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
      'Problem cleaning up the following threads:'
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
      testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
      optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
      Windows
    + JDK-8216974: HttpConnection not returned to the pool after
      204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
      reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
      too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
      instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
      patterns
    + JDK-8221759: Crash when completing 'java.io.File.path'
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
      /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
      constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
      on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
      anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
      jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
      algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
      test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
      NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
      decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
      objects
    + JDK-8226575: OperatingSystemMXBean should be made container
      aware
    + JDK-8226697: Several tests which need the @key headful
      keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
      correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
      /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
      fails due to 'exitValue = 6'
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
      tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
      truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
      /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
      arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
      'Leaking compilation tasks?'
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
      test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
      can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
      oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
      implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
      with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
      iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
      CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
      RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
      AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
      non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
      finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
      ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
      /CompressedClassPointers.java fails with 'Narrow klass base:
      0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
      end
    + JDK-8234347: 'Turkey' meta time zone does not generate
      composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
      /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
      for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
      successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
      11
    + JDK-8236548: Localized time zone name inconsistency between
      English and other locales
    + JDK-8236617: jtreg test containers/docker/
      /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
      epsilon files
    + JDK-8237888: security/infra/java/security/cert/
      /CertPathValidator/certification/LuxTrustCA.java fails when
      checking validity interval
    + JDK-8237977: Further update
      javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
      count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
      typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
      'multiple definition' link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
      'multiple definition' link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o 'multiple definition' link
      errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
      using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
      with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
      (known_holder-&gt;is_instance_klass() &amp;&amp;
      (!known_holder-&gt;is_interface() ||
      ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
      'should be non-static concrete method');
    + JDK-8239385: KerberosTicket client name refers wrongly to
      sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
      enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
      Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
      on jdk8
    + JDK-8241007: Shenandoah: remove
      ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
      JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
      failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
      java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
      StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
      fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
      non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
      params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
      /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
      extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
      program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
      program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
      module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
      CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
      HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
      release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
      compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
      compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: 'platform encoding not initialized' exceptions
      with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
      'assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
      remove node from hash table before modifying it'
    + JDK-8244729: Shenandoah: remove resolve paths from
      SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
      337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
      application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
      verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: 'Bad graph detected in build_loop_late' when
      loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert 'redundunt
      OSR recompilation detected. memory leak in CodeCache!'
    + JDK-8245832: JDK build make-static-libs should build all JDK
      libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
      concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
      working
    + JDK-8246153: TestEliminateArrayCopy fails with
      -XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
      fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
      overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with 'all collected exceptions
      must come from the same place'
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
      presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
      mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
      effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
      in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
      working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
      for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
      false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
      fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
      jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
      location
    + JDK-8248851: CMS: Missing memory fences between free chunk
      check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
      Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
      8224650
    + JDK-8249215: JFrame::setVisible crashed with
      -Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
      not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
      timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
      AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
      account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
      requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
      enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
      jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
      FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
      from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
      dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
      the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
      P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
      test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
      I-U
    + JDK-8251469: Better cleanup for
      test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
      final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
      misspells 'occured'
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
      compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
      downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
      in JDK 11
    + JDK-8253283: [11u] Test build/translations/
      /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
      crashes
    + Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*,
      bool)' introduced in jdk 11.0.9
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-17"/>
	<updated date="2020-11-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177943">SUSE bug 1177943</bugzilla>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14779/">CVE-2020-14779</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14781/">CVE-2020-14781</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14782/">CVE-2020-14782</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14792/">CVE-2020-14792</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14796/">CVE-2020-14796</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14797/">CVE-2020-14797</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-14798/">CVE-2020-14798</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14803/">CVE-2020-14803</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497881" comment="java-11-openjdk-javadoc-11.0.9.0-3.48.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138843" version="1" class="patch">
	<metadata>
		<title>Security update for LibVNCServer (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1178682" ref_url="https://bugzilla.suse.com/1178682" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25708" ref_url="https://www.suse.com/security/cve/CVE-2020-25708/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007855.html" source="SUSE-SU"/>
		<description>
This update for LibVNCServer fixes the following issues:

- CVE-2020-25708 [bsc#1178682], libvncserver/rfbserver.c has a divide by zero which could result in DoS
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-25"/>
	<updated date="2020-11-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178682">SUSE bug 1178682</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25708/">CVE-2020-25708</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497882" comment="libvncserver0-0.9.10-4.25.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138844" version="1" class="patch">
	<metadata>
		<title>Security update for flac (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1180099" ref_url="https://bugzilla.suse.com/1180099" source="BUGZILLA"/>
		<reference ref_id="1180112" ref_url="https://bugzilla.suse.com/1180112" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0487" ref_url="https://www.suse.com/security/cve/CVE-2020-0487/" source="CVE"/>
		<reference ref_id="CVE-2020-0499" ref_url="https://www.suse.com/security/cve/CVE-2020-0499/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008120.html" source="SUSE-SU"/>
		<description>
This update for flac fixes the following issues:

- CVE-2020-0487: Fixed a memory leak (bsc#1180112).
- CVE-2020-0499: Fixed an out-of-bounds access (bsc#1180099).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-24"/>
	<updated date="2020-12-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1180099">SUSE bug 1180099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180112">SUSE bug 1180112</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-0487/">CVE-2020-0487</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0499/">CVE-2020-0499</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497883" comment="flac-1.3.2-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497884" comment="libFLAC8-32bit-1.3.2-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138845" version="1" class="patch">
	<metadata>
		<title>Security update for libsolv, libzypp, zypper (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1135114" ref_url="https://bugzilla.suse.com/1135114" source="BUGZILLA"/>
		<reference ref_id="1154804" ref_url="https://bugzilla.suse.com/1154804" source="BUGZILLA"/>
		<reference ref_id="1154805" ref_url="https://bugzilla.suse.com/1154805" source="BUGZILLA"/>
		<reference ref_id="1155198" ref_url="https://bugzilla.suse.com/1155198" source="BUGZILLA"/>
		<reference ref_id="1155205" ref_url="https://bugzilla.suse.com/1155205" source="BUGZILLA"/>
		<reference ref_id="1155298" ref_url="https://bugzilla.suse.com/1155298" source="BUGZILLA"/>
		<reference ref_id="1155678" ref_url="https://bugzilla.suse.com/1155678" source="BUGZILLA"/>
		<reference ref_id="1155819" ref_url="https://bugzilla.suse.com/1155819" source="BUGZILLA"/>
		<reference ref_id="1156158" ref_url="https://bugzilla.suse.com/1156158" source="BUGZILLA"/>
		<reference ref_id="1157377" ref_url="https://bugzilla.suse.com/1157377" source="BUGZILLA"/>
		<reference ref_id="1158763" ref_url="https://bugzilla.suse.com/1158763" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18900" ref_url="https://www.suse.com/security/cve/CVE-2019-18900/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0432-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006510.html" source="SUSE-SU"/>
		<description>
This update for libsolv, libzypp, zypper fixes the following issues:


Security issue fixed:

- CVE-2019-18900: Fixed assert cookie file that was world readable (bsc#1158763).

Bug fixes

- Fixed removing orphaned packages dropped by to-be-installed products (bsc#1155819).
- Adds libzypp API to mark all obsolete kernels according to the existing purge-kernel script rules (bsc#1155198).
- Do not enforce 'en' being in RequestedLocales If the user decides to have a system without explicit language support he may do so (bsc#1155678).                                            
- Load only target resolvables for zypper rm (bsc#1157377).
- Fix broken search by filelist (bsc#1135114).
- Replace python by a bash script in zypper-log (fixes#304, fixes#306, bsc#1156158).
- Do not sort out requested locales which are not available (bsc#1155678).
- Prevent listing duplicate matches in tables. XML result is provided within the new list-patches-byissue element (bsc#1154805).                                                              
- XML add patch issue-date and issue-list (bsc#1154805).
- Fix zypper lp --cve/bugzilla/issue options (bsc#1155298).
- Always execute commit when adding/removing locales (fixes bsc#1155205).
- Fix description of --table-style,-s in man page (bsc#1154804).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-21"/>
	<updated date="2020-02-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1135114">SUSE bug 1135114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154804">SUSE bug 1154804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154805">SUSE bug 1154805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155198">SUSE bug 1155198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155205">SUSE bug 1155205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155298">SUSE bug 1155298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155678">SUSE bug 1155678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155819">SUSE bug 1155819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156158">SUSE bug 1156158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157377">SUSE bug 1157377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158763">SUSE bug 1158763</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-18900/">CVE-2019-18900</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497885" comment="python-solv-0.7.10-3.13.4 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138846" version="1" class="patch">
	<metadata>
		<title>Security update for gd (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1140120" ref_url="https://bugzilla.suse.com/1140120" source="BUGZILLA"/>
		<reference ref_id="1165471" ref_url="https://bugzilla.suse.com/1165471" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14553" ref_url="https://www.suse.com/security/cve/CVE-2018-14553/" source="CVE"/>
		<reference ref_id="CVE-2019-11038" ref_url="https://www.suse.com/security/cve/CVE-2019-11038/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0594-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007094.html" source="SUSE-SU"/>
		<description>
This update for gd fixes the following issues:

Security issue fixed:

- CVE-2018-14553: Fixed a null pointer dereference in gdImageClone (bsc#1165471).
- CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm() (bsc#1140120).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-07"/>
	<updated date="2020-07-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1140120">SUSE bug 1140120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165471">SUSE bug 1165471</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14553/">CVE-2018-14553</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11038/">CVE-2019-11038</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497886" comment="libgd3-32bit-2.2.5-4.14.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138847" version="1" class="patch">
	<metadata>
		<title>Security update for librsvg (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1162501" ref_url="https://bugzilla.suse.com/1162501" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20446" ref_url="https://www.suse.com/security/cve/CVE-2019-20446/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0629-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007091.html" source="SUSE-SU"/>
		<description>
This update for librsvg to version 2.42.8 fixes the following issues:

librsvg was updated to version 2.42.8 fixing the following issues:	  

- CVE-2019-20446: Fixed an issue where a crafted SVG file with nested
  patterns can cause denial of service (bsc#1162501).
  NOTE: Librsvg now has limits on the number of loaded XML elements,
  and the number of referenced elements within an SVG document. 
- Fixed a stack exhaustion with circular references in &lt;use&gt;
  elements.
- Fixed a denial-of-service condition from exponential explosion
  of rendered elements, through nested use of SVG 'use' elements in
  malicious SVGs.  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-07"/>
	<updated date="2020-07-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162501">SUSE bug 1162501</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20446/">CVE-2019-20446</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497887" comment="rsvg-view-2.42.8-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138848" version="1" class="patch">
	<metadata>
		<title>Security update for icu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for Package Hub 15 SP1</platform>
		</affected>
		<reference ref_id="1166844" ref_url="https://bugzilla.suse.com/1166844" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10531" ref_url="https://www.suse.com/security/cve/CVE-2020-10531/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0819-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007104.html" source="SUSE-SU"/>
		<description>
This update for icu fixes the following issues:

- CVE-2020-10531: Fixed a potential integer overflow in UnicodeString:doAppend (bsc#1166844).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-08"/>
	<updated date="2020-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1166844">SUSE bug 1166844</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10531/">CVE-2020-10531</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:packagehub:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009264916" comment="SUSE Linux Enterprise Module for Package Hub 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497888" comment="icu-60.2-3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138849" version="1" class="patch">
	<metadata>
		<title>Security update for rmt-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1128858" ref_url="https://bugzilla.suse.com/1128858" source="BUGZILLA"/>
		<reference ref_id="1129271" ref_url="https://bugzilla.suse.com/1129271" source="BUGZILLA"/>
		<reference ref_id="1129392" ref_url="https://bugzilla.suse.com/1129392" source="BUGZILLA"/>
		<reference ref_id="1132160" ref_url="https://bugzilla.suse.com/1132160" source="BUGZILLA"/>
		<reference ref_id="1132690" ref_url="https://bugzilla.suse.com/1132690" source="BUGZILLA"/>
		<reference ref_id="1134190" ref_url="https://bugzilla.suse.com/1134190" source="BUGZILLA"/>
		<reference ref_id="1134428" ref_url="https://bugzilla.suse.com/1134428" source="BUGZILLA"/>
		<reference ref_id="1135222" ref_url="https://bugzilla.suse.com/1135222" source="BUGZILLA"/>
		<reference ref_id="1136020" ref_url="https://bugzilla.suse.com/1136020" source="BUGZILLA"/>
		<reference ref_id="1136081" ref_url="https://bugzilla.suse.com/1136081" source="BUGZILLA"/>
		<reference ref_id="1138316" ref_url="https://bugzilla.suse.com/1138316" source="BUGZILLA"/>
		<reference ref_id="1140492" ref_url="https://bugzilla.suse.com/1140492" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11068" ref_url="https://www.suse.com/security/cve/CVE-2019-11068/" source="CVE"/>
		<reference ref_id="CVE-2019-5419" ref_url="https://www.suse.com/security/cve/CVE-2019-5419/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1973-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005753.html" source="SUSE-SU"/>
		<description>
This update for rmt-server to version 2.3.1 fixes the following issues:

- Fix mirroring logic when errors are encountered (bsc#1140492)
- Refactor RMT::Mirror to download metadata/licenses in parallel
- Check repo metadata GPG signatures during mirroring (bsc#1132690)
- Add rmt-server-config subpackage with nginx configs (fate#327816, bsc#1136081)
- Fix dependency to removed boot_cli_i18n file (bsc#1136020) 
- Add `rmt-cli systems list` command to list registered systems
- Fix create UUID when system_uuid file empty (bsc#1138316)
- Fix duplicate nginx location in rmt-server-pubcloud (bsc#1135222)
- Mirror additional repos that were enabled during mirroring (bsc#1132690)
- Make service IDs consistent across different RMT instances (bsc#1134428)
- Make SMT data import scripts faster (bsc#1134190)
- Fix incorrect triggering of registration sharing (bsc#1129392)
- Fix license mirroring issue in some non-SUSE repositories (bsc#1128858)
- Update dependencies to fix vulnerabilities in rails (CVE-2019-5419, bsc#1129271) and nokogiri (CVE-2019-11068, bsc#1132160)
- Allow RMT registration to work under HTTP as well as HTTPS.
- Offline migration from SLE 15 to SLE 15 SP1 will add Python2 module 
- Online migrations will automatically add additional modules to the client systems depending on the base product
- Supply log severity to journald
- Breaking Change: Added headers to generated CSV files
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-25"/>
	<updated date="2019-07-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1128858">SUSE bug 1128858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129271">SUSE bug 1129271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129392">SUSE bug 1129392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132160">SUSE bug 1132160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132690">SUSE bug 1132690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134190">SUSE bug 1134190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134428">SUSE bug 1134428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135222">SUSE bug 1135222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136020">SUSE bug 1136020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136081">SUSE bug 1136081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138316">SUSE bug 1138316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140492">SUSE bug 1140492</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-11068/">CVE-2019-11068</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5419/">CVE-2019-5419</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498011" comment="rmt-server-pubcloud-2.3.1-3.3.3 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138850" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel for Azure (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1083710" ref_url="https://bugzilla.suse.com/1083710" source="BUGZILLA"/>
		<reference ref_id="1088047" ref_url="https://bugzilla.suse.com/1088047" source="BUGZILLA"/>
		<reference ref_id="1094555" ref_url="https://bugzilla.suse.com/1094555" source="BUGZILLA"/>
		<reference ref_id="1098633" ref_url="https://bugzilla.suse.com/1098633" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1106383" ref_url="https://bugzilla.suse.com/1106383" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1119222" ref_url="https://bugzilla.suse.com/1119222" source="BUGZILLA"/>
		<reference ref_id="1119532" ref_url="https://bugzilla.suse.com/1119532" source="BUGZILLA"/>
		<reference ref_id="1120423" ref_url="https://bugzilla.suse.com/1120423" source="BUGZILLA"/>
		<reference ref_id="1123080" ref_url="https://bugzilla.suse.com/1123080" source="BUGZILLA"/>
		<reference ref_id="1125703" ref_url="https://bugzilla.suse.com/1125703" source="BUGZILLA"/>
		<reference ref_id="1127034" ref_url="https://bugzilla.suse.com/1127034" source="BUGZILLA"/>
		<reference ref_id="1127315" ref_url="https://bugzilla.suse.com/1127315" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1128432" ref_url="https://bugzilla.suse.com/1128432" source="BUGZILLA"/>
		<reference ref_id="1128902" ref_url="https://bugzilla.suse.com/1128902" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1130836" ref_url="https://bugzilla.suse.com/1130836" source="BUGZILLA"/>
		<reference ref_id="1132390" ref_url="https://bugzilla.suse.com/1132390" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1133401" ref_url="https://bugzilla.suse.com/1133401" source="BUGZILLA"/>
		<reference ref_id="1133738" ref_url="https://bugzilla.suse.com/1133738" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1134097" ref_url="https://bugzilla.suse.com/1134097" source="BUGZILLA"/>
		<reference ref_id="1134390" ref_url="https://bugzilla.suse.com/1134390" source="BUGZILLA"/>
		<reference ref_id="1134395" ref_url="https://bugzilla.suse.com/1134395" source="BUGZILLA"/>
		<reference ref_id="1134399" ref_url="https://bugzilla.suse.com/1134399" source="BUGZILLA"/>
		<reference ref_id="1134730" ref_url="https://bugzilla.suse.com/1134730" source="BUGZILLA"/>
		<reference ref_id="1134738" ref_url="https://bugzilla.suse.com/1134738" source="BUGZILLA"/>
		<reference ref_id="1135153" ref_url="https://bugzilla.suse.com/1135153" source="BUGZILLA"/>
		<reference ref_id="1135296" ref_url="https://bugzilla.suse.com/1135296" source="BUGZILLA"/>
		<reference ref_id="1135335" ref_url="https://bugzilla.suse.com/1135335" source="BUGZILLA"/>
		<reference ref_id="1135556" ref_url="https://bugzilla.suse.com/1135556" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135897" ref_url="https://bugzilla.suse.com/1135897" source="BUGZILLA"/>
		<reference ref_id="1136156" ref_url="https://bugzilla.suse.com/1136156" source="BUGZILLA"/>
		<reference ref_id="1136157" ref_url="https://bugzilla.suse.com/1136157" source="BUGZILLA"/>
		<reference ref_id="1136161" ref_url="https://bugzilla.suse.com/1136161" source="BUGZILLA"/>
		<reference ref_id="1136217" ref_url="https://bugzilla.suse.com/1136217" source="BUGZILLA"/>
		<reference ref_id="1136264" ref_url="https://bugzilla.suse.com/1136264" source="BUGZILLA"/>
		<reference ref_id="1136271" ref_url="https://bugzilla.suse.com/1136271" source="BUGZILLA"/>
		<reference ref_id="1136333" ref_url="https://bugzilla.suse.com/1136333" source="BUGZILLA"/>
		<reference ref_id="1136342" ref_url="https://bugzilla.suse.com/1136342" source="BUGZILLA"/>
		<reference ref_id="1136343" ref_url="https://bugzilla.suse.com/1136343" source="BUGZILLA"/>
		<reference ref_id="1136345" ref_url="https://bugzilla.suse.com/1136345" source="BUGZILLA"/>
		<reference ref_id="1136348" ref_url="https://bugzilla.suse.com/1136348" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1136462" ref_url="https://bugzilla.suse.com/1136462" source="BUGZILLA"/>
		<reference ref_id="1136467" ref_url="https://bugzilla.suse.com/1136467" source="BUGZILLA"/>
		<reference ref_id="1137103" ref_url="https://bugzilla.suse.com/1137103" source="BUGZILLA"/>
		<reference ref_id="1137194" ref_url="https://bugzilla.suse.com/1137194" source="BUGZILLA"/>
		<reference ref_id="1137224" ref_url="https://bugzilla.suse.com/1137224" source="BUGZILLA"/>
		<reference ref_id="1137366" ref_url="https://bugzilla.suse.com/1137366" source="BUGZILLA"/>
		<reference ref_id="1137429" ref_url="https://bugzilla.suse.com/1137429" source="BUGZILLA"/>
		<reference ref_id="1137458" ref_url="https://bugzilla.suse.com/1137458" source="BUGZILLA"/>
		<reference ref_id="1137534" ref_url="https://bugzilla.suse.com/1137534" source="BUGZILLA"/>
		<reference ref_id="1137535" ref_url="https://bugzilla.suse.com/1137535" source="BUGZILLA"/>
		<reference ref_id="1137584" ref_url="https://bugzilla.suse.com/1137584" source="BUGZILLA"/>
		<reference ref_id="1137586" ref_url="https://bugzilla.suse.com/1137586" source="BUGZILLA"/>
		<reference ref_id="1137609" ref_url="https://bugzilla.suse.com/1137609" source="BUGZILLA"/>
		<reference ref_id="1137625" ref_url="https://bugzilla.suse.com/1137625" source="BUGZILLA"/>
		<reference ref_id="1137728" ref_url="https://bugzilla.suse.com/1137728" source="BUGZILLA"/>
		<reference ref_id="1137811" ref_url="https://bugzilla.suse.com/1137811" source="BUGZILLA"/>
		<reference ref_id="1137827" ref_url="https://bugzilla.suse.com/1137827" source="BUGZILLA"/>
		<reference ref_id="1137884" ref_url="https://bugzilla.suse.com/1137884" source="BUGZILLA"/>
		<reference ref_id="1137985" ref_url="https://bugzilla.suse.com/1137985" source="BUGZILLA"/>
		<reference ref_id="1138263" ref_url="https://bugzilla.suse.com/1138263" source="BUGZILLA"/>
		<reference ref_id="1138291" ref_url="https://bugzilla.suse.com/1138291" source="BUGZILLA"/>
		<reference ref_id="1138293" ref_url="https://bugzilla.suse.com/1138293" source="BUGZILLA"/>
		<reference ref_id="1138336" ref_url="https://bugzilla.suse.com/1138336" source="BUGZILLA"/>
		<reference ref_id="1138374" ref_url="https://bugzilla.suse.com/1138374" source="BUGZILLA"/>
		<reference ref_id="1138375" ref_url="https://bugzilla.suse.com/1138375" source="BUGZILLA"/>
		<reference ref_id="1138589" ref_url="https://bugzilla.suse.com/1138589" source="BUGZILLA"/>
		<reference ref_id="1138681" ref_url="https://bugzilla.suse.com/1138681" source="BUGZILLA"/>
		<reference ref_id="1138719" ref_url="https://bugzilla.suse.com/1138719" source="BUGZILLA"/>
		<reference ref_id="1138732" ref_url="https://bugzilla.suse.com/1138732" source="BUGZILLA"/>
		<reference ref_id="1138874" ref_url="https://bugzilla.suse.com/1138874" source="BUGZILLA"/>
		<reference ref_id="1138879" ref_url="https://bugzilla.suse.com/1138879" source="BUGZILLA"/>
		<reference ref_id="1139358" ref_url="https://bugzilla.suse.com/1139358" source="BUGZILLA"/>
		<reference ref_id="1139619" ref_url="https://bugzilla.suse.com/1139619" source="BUGZILLA"/>
		<reference ref_id="1139712" ref_url="https://bugzilla.suse.com/1139712" source="BUGZILLA"/>
		<reference ref_id="1139751" ref_url="https://bugzilla.suse.com/1139751" source="BUGZILLA"/>
		<reference ref_id="1139771" ref_url="https://bugzilla.suse.com/1139771" source="BUGZILLA"/>
		<reference ref_id="1139865" ref_url="https://bugzilla.suse.com/1139865" source="BUGZILLA"/>
		<reference ref_id="1140133" ref_url="https://bugzilla.suse.com/1140133" source="BUGZILLA"/>
		<reference ref_id="1140139" ref_url="https://bugzilla.suse.com/1140139" source="BUGZILLA"/>
		<reference ref_id="1140228" ref_url="https://bugzilla.suse.com/1140228" source="BUGZILLA"/>
		<reference ref_id="1140322" ref_url="https://bugzilla.suse.com/1140322" source="BUGZILLA"/>
		<reference ref_id="1140328" ref_url="https://bugzilla.suse.com/1140328" source="BUGZILLA"/>
		<reference ref_id="1140405" ref_url="https://bugzilla.suse.com/1140405" source="BUGZILLA"/>
		<reference ref_id="1140424" ref_url="https://bugzilla.suse.com/1140424" source="BUGZILLA"/>
		<reference ref_id="1140428" ref_url="https://bugzilla.suse.com/1140428" source="BUGZILLA"/>
		<reference ref_id="1140454" ref_url="https://bugzilla.suse.com/1140454" source="BUGZILLA"/>
		<reference ref_id="1140463" ref_url="https://bugzilla.suse.com/1140463" source="BUGZILLA"/>
		<reference ref_id="1140559" ref_url="https://bugzilla.suse.com/1140559" source="BUGZILLA"/>
		<reference ref_id="1140575" ref_url="https://bugzilla.suse.com/1140575" source="BUGZILLA"/>
		<reference ref_id="1140577" ref_url="https://bugzilla.suse.com/1140577" source="BUGZILLA"/>
		<reference ref_id="1140637" ref_url="https://bugzilla.suse.com/1140637" source="BUGZILLA"/>
		<reference ref_id="1140652" ref_url="https://bugzilla.suse.com/1140652" source="BUGZILLA"/>
		<reference ref_id="1140658" ref_url="https://bugzilla.suse.com/1140658" source="BUGZILLA"/>
		<reference ref_id="1140676" ref_url="https://bugzilla.suse.com/1140676" source="BUGZILLA"/>
		<reference ref_id="1140715" ref_url="https://bugzilla.suse.com/1140715" source="BUGZILLA"/>
		<reference ref_id="1140719" ref_url="https://bugzilla.suse.com/1140719" source="BUGZILLA"/>
		<reference ref_id="1140726" ref_url="https://bugzilla.suse.com/1140726" source="BUGZILLA"/>
		<reference ref_id="1140727" ref_url="https://bugzilla.suse.com/1140727" source="BUGZILLA"/>
		<reference ref_id="1140728" ref_url="https://bugzilla.suse.com/1140728" source="BUGZILLA"/>
		<reference ref_id="1140814" ref_url="https://bugzilla.suse.com/1140814" source="BUGZILLA"/>
		<reference ref_id="1140887" ref_url="https://bugzilla.suse.com/1140887" source="BUGZILLA"/>
		<reference ref_id="1140888" ref_url="https://bugzilla.suse.com/1140888" source="BUGZILLA"/>
		<reference ref_id="1140889" ref_url="https://bugzilla.suse.com/1140889" source="BUGZILLA"/>
		<reference ref_id="1140891" ref_url="https://bugzilla.suse.com/1140891" source="BUGZILLA"/>
		<reference ref_id="1140893" ref_url="https://bugzilla.suse.com/1140893" source="BUGZILLA"/>
		<reference ref_id="1140903" ref_url="https://bugzilla.suse.com/1140903" source="BUGZILLA"/>
		<reference ref_id="1140945" ref_url="https://bugzilla.suse.com/1140945" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1140954" ref_url="https://bugzilla.suse.com/1140954" source="BUGZILLA"/>
		<reference ref_id="1140955" ref_url="https://bugzilla.suse.com/1140955" source="BUGZILLA"/>
		<reference ref_id="1140956" ref_url="https://bugzilla.suse.com/1140956" source="BUGZILLA"/>
		<reference ref_id="1140957" ref_url="https://bugzilla.suse.com/1140957" source="BUGZILLA"/>
		<reference ref_id="1140958" ref_url="https://bugzilla.suse.com/1140958" source="BUGZILLA"/>
		<reference ref_id="1140959" ref_url="https://bugzilla.suse.com/1140959" source="BUGZILLA"/>
		<reference ref_id="1140960" ref_url="https://bugzilla.suse.com/1140960" source="BUGZILLA"/>
		<reference ref_id="1140961" ref_url="https://bugzilla.suse.com/1140961" source="BUGZILLA"/>
		<reference ref_id="1140962" ref_url="https://bugzilla.suse.com/1140962" source="BUGZILLA"/>
		<reference ref_id="1140964" ref_url="https://bugzilla.suse.com/1140964" source="BUGZILLA"/>
		<reference ref_id="1140971" ref_url="https://bugzilla.suse.com/1140971" source="BUGZILLA"/>
		<reference ref_id="1140972" ref_url="https://bugzilla.suse.com/1140972" source="BUGZILLA"/>
		<reference ref_id="1140992" ref_url="https://bugzilla.suse.com/1140992" source="BUGZILLA"/>
		<reference ref_id="1141312" ref_url="https://bugzilla.suse.com/1141312" source="BUGZILLA"/>
		<reference ref_id="1141401" ref_url="https://bugzilla.suse.com/1141401" source="BUGZILLA"/>
		<reference ref_id="1141402" ref_url="https://bugzilla.suse.com/1141402" source="BUGZILLA"/>
		<reference ref_id="1141452" ref_url="https://bugzilla.suse.com/1141452" source="BUGZILLA"/>
		<reference ref_id="1141453" ref_url="https://bugzilla.suse.com/1141453" source="BUGZILLA"/>
		<reference ref_id="1141454" ref_url="https://bugzilla.suse.com/1141454" source="BUGZILLA"/>
		<reference ref_id="1141478" ref_url="https://bugzilla.suse.com/1141478" source="BUGZILLA"/>
		<reference ref_id="1141558" ref_url="https://bugzilla.suse.com/1141558" source="BUGZILLA"/>
		<reference ref_id="1142023" ref_url="https://bugzilla.suse.com/1142023" source="BUGZILLA"/>
		<reference ref_id="1142052" ref_url="https://bugzilla.suse.com/1142052" source="BUGZILLA"/>
		<reference ref_id="1142083" ref_url="https://bugzilla.suse.com/1142083" source="BUGZILLA"/>
		<reference ref_id="1142112" ref_url="https://bugzilla.suse.com/1142112" source="BUGZILLA"/>
		<reference ref_id="1142115" ref_url="https://bugzilla.suse.com/1142115" source="BUGZILLA"/>
		<reference ref_id="1142119" ref_url="https://bugzilla.suse.com/1142119" source="BUGZILLA"/>
		<reference ref_id="1142220" ref_url="https://bugzilla.suse.com/1142220" source="BUGZILLA"/>
		<reference ref_id="1142221" ref_url="https://bugzilla.suse.com/1142221" source="BUGZILLA"/>
		<reference ref_id="1142265" ref_url="https://bugzilla.suse.com/1142265" source="BUGZILLA"/>
		<reference ref_id="1142350" ref_url="https://bugzilla.suse.com/1142350" source="BUGZILLA"/>
		<reference ref_id="1142351" ref_url="https://bugzilla.suse.com/1142351" source="BUGZILLA"/>
		<reference ref_id="1142354" ref_url="https://bugzilla.suse.com/1142354" source="BUGZILLA"/>
		<reference ref_id="1142359" ref_url="https://bugzilla.suse.com/1142359" source="BUGZILLA"/>
		<reference ref_id="1142450" ref_url="https://bugzilla.suse.com/1142450" source="BUGZILLA"/>
		<reference ref_id="1142623" ref_url="https://bugzilla.suse.com/1142623" source="BUGZILLA"/>
		<reference ref_id="1142673" ref_url="https://bugzilla.suse.com/1142673" source="BUGZILLA"/>
		<reference ref_id="1142701" ref_url="https://bugzilla.suse.com/1142701" source="BUGZILLA"/>
		<reference ref_id="1142868" ref_url="https://bugzilla.suse.com/1142868" source="BUGZILLA"/>
		<reference ref_id="1143003" ref_url="https://bugzilla.suse.com/1143003" source="BUGZILLA"/>
		<reference ref_id="1143105" ref_url="https://bugzilla.suse.com/1143105" source="BUGZILLA"/>
		<reference ref_id="1143185" ref_url="https://bugzilla.suse.com/1143185" source="BUGZILLA"/>
		<reference ref_id="1143189" ref_url="https://bugzilla.suse.com/1143189" source="BUGZILLA"/>
		<reference ref_id="1143191" ref_url="https://bugzilla.suse.com/1143191" source="BUGZILLA"/>
		<reference ref_id="1143209" ref_url="https://bugzilla.suse.com/1143209" source="BUGZILLA"/>
		<reference ref_id="1143507" ref_url="https://bugzilla.suse.com/1143507" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16871" ref_url="https://www.suse.com/security/cve/CVE-2018-16871/" source="CVE"/>
		<reference ref_id="CVE-2018-20836" ref_url="https://www.suse.com/security/cve/CVE-2018-20836/" source="CVE"/>
		<reference ref_id="CVE-2018-20855" ref_url="https://www.suse.com/security/cve/CVE-2018-20855/" source="CVE"/>
		<reference ref_id="CVE-2019-10638" ref_url="https://www.suse.com/security/cve/CVE-2019-10638/" source="CVE"/>
		<reference ref_id="CVE-2019-10639" ref_url="https://www.suse.com/security/cve/CVE-2019-10639/" source="CVE"/>
		<reference ref_id="CVE-2019-1125" ref_url="https://www.suse.com/security/cve/CVE-2019-1125/" source="CVE"/>
		<reference ref_id="CVE-2019-11478" ref_url="https://www.suse.com/security/cve/CVE-2019-11478/" source="CVE"/>
		<reference ref_id="CVE-2019-11599" ref_url="https://www.suse.com/security/cve/CVE-2019-11599/" source="CVE"/>
		<reference ref_id="CVE-2019-11810" ref_url="https://www.suse.com/security/cve/CVE-2019-11810/" source="CVE"/>
		<reference ref_id="CVE-2019-12614" ref_url="https://www.suse.com/security/cve/CVE-2019-12614/" source="CVE"/>
		<reference ref_id="CVE-2019-12817" ref_url="https://www.suse.com/security/cve/CVE-2019-12817/" source="CVE"/>
		<reference ref_id="CVE-2019-12818" ref_url="https://www.suse.com/security/cve/CVE-2019-12818/" source="CVE"/>
		<reference ref_id="CVE-2019-12819" ref_url="https://www.suse.com/security/cve/CVE-2019-12819/" source="CVE"/>
		<reference ref_id="CVE-2019-13233" ref_url="https://www.suse.com/security/cve/CVE-2019-13233/" source="CVE"/>
		<reference ref_id="CVE-2019-13631" ref_url="https://www.suse.com/security/cve/CVE-2019-13631/" source="CVE"/>
		<reference ref_id="CVE-2019-13648" ref_url="https://www.suse.com/security/cve/CVE-2019-13648/" source="CVE"/>
		<reference ref_id="CVE-2019-14283" ref_url="https://www.suse.com/security/cve/CVE-2019-14283/" source="CVE"/>
		<reference ref_id="CVE-2019-14284" ref_url="https://www.suse.com/security/cve/CVE-2019-14284/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005792.html" source="SUSE-SU"/>
		<description>



The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2018-20855: An issue was discovered in create_qp_common, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace. (bnc#bsc#1103991)
- CVE-2019-1125: Fix Spectre V1 variant via swapgs: Exclude ATOMs from speculation through SWAPGS (bsc#1139358).
- CVE-2019-14284: In the Linux kernel, drivers/block/floppy.c allowed a denial of service by setup_format_params division-by-zero. (bnc#bsc#1143189)
- CVE-2019-14283: In the Linux kernel, set_geometry in drivers/block/floppy.c did not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU creates the floppy device by default. (bsc#1143191)
- CVE-2019-11810: An issue was discovered in the Linux kernel A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free. (bsc#1134399)
- CVE-2019-13648: In the Linux kernel on the powerpc platform, when hardware transactional memory was disabled, a local user can cause a denial of service via a sigreturn() system call that sends a crafted signal frame. (bnc#1142265)
- CVE-2019-13631: In parse_hid_report_descriptor, a malicious usb device could send an hid: report that triggered an out-of-bounds write during generation of debugging messages. (bnc#1142023)
- CVE-2019-10638: In the Linux kernel, a device could be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic was sent to multiple destination IP addresses, it was possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may have been conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses. (bnc#1140575)
- CVE-2019-10639: The Linux kernel allowed Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. (bsc#1140577)
- CVE-2019-13233: In arch/x86/lib/insn-eval.c, there was a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation. (bnc#1140454)
- CVE-2018-20836: In the Linux kernel there was a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free. (bnc#1134395)
- CVE-2019-11599: The coredump implementation in the Linux kernel did not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allowed local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c. (bnc#1133738)
- CVE-2019-12817: Linux kernel for powerpc had a bug where unrelated processes could be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected. (bsc#1138263, bsc#1139619)
- CVE-2019-12614: In dlpar_parse_cc_property there was an unchecked kstrdup of prop-&gt;name, which might have allowed an attacker to cause a denial of service (NULL pointer dereference and system crash). (bsc#1137194)
- CVE-2018-16871: An attacker, who was able to mount an exported NFS filesystem, was able to trigger a null pointer dereference by using an invalid NFS sequence. This could panic the machine and deny access to the NFS server. (bsc#1137103)
- CVE-2019-12819: An issue was discovered in the Linux kernel The function __mdiobus_register() calls put_device(), which would trigger a fixed_mdio_bus_init use-after-free. This would cause a denial of service. (bsc#1138291)
- CVE-2019-12818: The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may have returned NULL. If the caller did not check for this, it would trigger a NULL pointer dereference. This would cause denial of service. (bsc#1138293)

The following non-security bugs were fixed:

- 6lowpan: Off by one handling -&gt;nexthdr (bsc#1051510).
- acpi/nfit: Always dump _DSM output payload (bsc#1142351).
- acpi: Add Hygon Dhyana support ().
- acpi: PM: Allow transitions to D0 to occur in special cases (bsc#1051510).
- acpi: PM: Avoid evaluating _PS3 on transitions from D3hot to D3cold (bsc#1051510).
- acpica: Clear status of GPEs on first direct enable (bsc#1111666).
- af_key: unconditionally clone on broadcast (bsc#1051510).
- af_unix: remove redundant lockdep class (git-fixes).
- alsa: compress: Be more restrictive about when a drain is allowed (bsc#1051510).
- alsa: compress: Do not allow paritial drain operations on capture streams (bsc#1051510).
- alsa: compress: Fix regression on compressed capture streams (bsc#1051510).
- alsa: compress: Prevent bypasses of set_params (bsc#1051510).
- alsa: firewire-lib/fireworks: fix miss detection of received MIDI messages (bsc#1051510).
- alsa: firewire-motu: fix destruction of data for isochronous resources (bsc#1051510).
- alsa: hda - Add a conexant codec entry to let mute led work (bsc#1051510).
- alsa: hda - Do not resume forcibly i915 HDMI/DP codec (bsc#1111666).
- alsa: hda - Fix intermittent CORB/RIRB stall on Intel chips (bsc#1111666).
- alsa: hda - Force polling mode on CNL for fixing codec communication (bsc#1051510).
- alsa: hda - Optimize resume for codecs without jack detection (bsc#1111666).
- alsa: hda/hdmi - Fix i915 reverse port/pin mapping (bsc#1111666).
- alsa: hda/hdmi - Remove duplicated define (bsc#1111666).
- alsa: hda/realtek - Change front mic location for Lenovo M710q (bsc#1051510).
- alsa: hda/realtek - Fixed Headphone Mic can't record on Dell platform (bsc#1051510).
- alsa: hda/realtek - Headphone Mic can't record after S3 (bsc#1051510).
- alsa: hda/realtek - Update headset mode for ALC256 (bsc#1051510).
- alsa: hda/realtek: Add quirks for several Clevo notebook barebones (bsc#1051510).
- alsa: hda/realtek: apply ALC891 headset fixup to one Dell machine (bsc#1051510).
- alsa: line6: Fix a typo (bsc#1051510).
- alsa: line6: Fix write on zero-sized buffer (bsc#1051510).
- alsa: line6: Fix wrong altsetting for LINE6_PODHD500_1 (bsc#1051510).
- alsa: oxfw: allow PCM capture for Stanton SCS.1m (bsc#1051510).
- alsa: seq: Break too long mutex context in the write loop (bsc#1051510).
- alsa: seq: fix incorrect order of dest_client/dest_ports arguments (bsc#1051510).
- alsa: usb-audio: Add quirk for Focusrite Scarlett Solo (bsc#1051510).
- alsa: usb-audio: Add quirk for MOTU MicroBook II (bsc#1051510).
- alsa: usb-audio: Cleanup DSD whitelist (bsc#1051510).
- alsa: usb-audio: Enable .product_name override for Emagic, Unitor 8 (bsc#1051510).
- alsa: usb-audio: Fix parse of UAC2 Extension Units (bsc#1111666).
- alsa: usb-audio: Sanity checks for each pipe and EP types (bsc#1051510).
- alsa: usb-audio: fix Line6 Helix audio format rates (bsc#1111666).
- alsa: usb-audio: fix sign unintended sign extension on left shifts (bsc#1051510).
- apparmor: enforce nullbyte at end of tag string (bsc#1051510).
- arm64: do not override dma_max_pfn (jsc#SLE-6197 bsc#1140559 LTC#173150).
- asoc: : cs4265 : readable register too low (bsc#1051510).
- asoc:: cs42xx8: Add regcache mask dirty (bsc#1051510).
- asoc:: cx2072x: fix integer overflow on unsigned int multiply (bsc#1111666).
- asoc:: fsl_asrc: Fix the issue about unsupported rate (bsc#1051510).
- asoc:: max98090: remove 24-bit format support if RJ is 0 (bsc#1051510).
- asoc:: soc-pcm: BE dai needs prepare when pause release after resume (bsc#1051510).
- ath10k: Do not send probe response template for mesh (bsc#1111666).
- ath10k: Fix encoding for protected management frames (bsc#1111666).
- ath10k: add missing error handling (bsc#1111666).
- ath10k: add peer id check in ath10k_peer_find_by_id (bsc#1111666).
- ath10k: destroy sdio workqueue while remove sdio module (bsc#1111666).
- ath10k: fix incorrect multicast/broadcast rate setting (bsc#1111666).
- ath10k: fix pciE device wake up failed (bsc#1111666).
- ath6kl: add some bounds checking (bsc#1051510).
- ath9k: Check for errors when reading SREV register (bsc#1111666).
- ath9k: correctly handle short radar pulses (bsc#1111666).
- ath: DFS JP domain W56 fixed pulse type 3 RADAR detection (bsc#1111666).
- audit: fix a memory leak bug (bsc#1051510).
- ax25: fix inconsistent lock state in ax25_destroy_timer (bsc#1051510).
- batman-adv: fix for leaked TVLV handler (bsc#1051510).
- bcache: Add comments for blkdev_put() in registration code path (bsc#1140652).
- bcache: Add comments for blkdev_put() in registration code path (bsc#1140652).
- bcache: Clean up bch_get_congested() (bsc#1140652).
- bcache: Clean up bch_get_congested() (bsc#1140652).
- bcache: Revert 'bcache: fix high CPU occupancy during journal' (bsc#1140652).
- bcache: Revert 'bcache: fix high CPU occupancy during journal' (bsc#1140652).
- bcache: Revert 'bcache: free heap cache_set-&gt;flush_btree in bch_journal_free' (bsc#1140652).
- bcache: Revert 'bcache: free heap cache_set-&gt;flush_btree in bch_journal_free' (bsc#1140652).
- bcache: acquire bch_register_lock later in cached_dev_detach_finish() (bsc#1140652).
- bcache: acquire bch_register_lock later in cached_dev_detach_finish() (bsc#1140652).
- bcache: acquire bch_register_lock later in cached_dev_free() (bsc#1140652).
- bcache: acquire bch_register_lock later in cached_dev_free() (bsc#1140652).
- bcache: add code comments for journal_read_bucket() (bsc#1140652).
- bcache: add code comments for journal_read_bucket() (bsc#1140652).
- bcache: add comments for closure_fn to be called in closure_queue() (bsc#1140652).
- bcache: add comments for closure_fn to be called in closure_queue() (bsc#1140652).
- bcache: add comments for kobj release callback routine (bsc#1140652).
- bcache: add comments for kobj release callback routine (bsc#1140652).
- bcache: add comments for mutex_lock(&amp;b-&gt;write_lock) (bsc#1140652).
- bcache: add comments for mutex_lock(&amp;b-&gt;write_lock) (bsc#1140652).
- bcache: add error check for calling register_bdev() (bsc#1140652).
- bcache: add error check for calling register_bdev() (bsc#1140652).
- bcache: add failure check to run_cache_set() for journal replay (bsc#1140652).
- bcache: add failure check to run_cache_set() for journal replay (bsc#1140652).
- bcache: add io error counting in write_bdev_super_endio() (bsc#1140652).
- bcache: add io error counting in write_bdev_super_endio() (bsc#1140652).
- bcache: add more error message in bch_cached_dev_attach() (bsc#1140652).
- bcache: add more error message in bch_cached_dev_attach() (bsc#1140652).
- bcache: add pendings_cleanup to stop pending bcache device (bsc#1140652).
- bcache: add pendings_cleanup to stop pending bcache device (bsc#1140652).
- bcache: add reclaimed_journal_buckets to struct cache_set (bsc#1140652).
- bcache: add reclaimed_journal_buckets to struct cache_set (bsc#1140652).
- bcache: add return value check to bch_cached_dev_run() (bsc#1140652).
- bcache: add return value check to bch_cached_dev_run() (bsc#1140652).
- bcache: avoid a deadlock in bcache_reboot() (bsc#1140652).
- bcache: avoid a deadlock in bcache_reboot() (bsc#1140652).
- bcache: avoid clang -Wunintialized warning (bsc#1140652).
- bcache: avoid clang -Wunintialized warning (bsc#1140652).
- bcache: avoid flushing btree node in cache_set_flush() if io disabled (bsc#1140652).
- bcache: avoid flushing btree node in cache_set_flush() if io disabled (bsc#1140652).
- bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set (bsc#1140652).
- bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set (bsc#1140652).
- bcache: check CACHE_SET_IO_DISABLE bit in bch_journal() (bsc#1140652).
- bcache: check CACHE_SET_IO_DISABLE bit in bch_journal() (bsc#1140652).
- bcache: check CACHE_SET_IO_DISABLE in allocator code (bsc#1140652).
- bcache: check CACHE_SET_IO_DISABLE in allocator code (bsc#1140652).
- bcache: check c-&gt;gc_thread by IS_ERR_OR_NULL in cache_set_flush() (bsc#1140652).
- bcache: check c-&gt;gc_thread by IS_ERR_OR_NULL in cache_set_flush() (bsc#1140652).
- bcache: destroy dc-&gt;writeback_write_wq if failed to create dc-&gt;writeback_thread (bsc#1140652).
- bcache: destroy dc-&gt;writeback_write_wq if failed to create dc-&gt;writeback_thread (bsc#1140652).
- bcache: do not assign in if condition in bcache_device_init() (bsc#1140652).
- bcache: do not set max writeback rate if gc is running (bsc#1140652).
- bcache: do not set max writeback rate if gc is running (bsc#1140652).
- bcache: fix a race between cache register and cacheset unregister (bsc#1140652).
- bcache: fix a race between cache register and cacheset unregister (bsc#1140652).
- bcache: fix crashes stopping bcache device before read miss done (bsc#1140652).
- bcache: fix crashes stopping bcache device before read miss done (bsc#1140652).
- bcache: fix failure in journal relplay (bsc#1140652).
- bcache: fix failure in journal relplay (bsc#1140652).
- bcache: fix inaccurate result of unused buckets (bsc#1140652).
- bcache: fix inaccurate result of unused buckets (bsc#1140652).
- bcache: fix mistaken sysfs entry for io_error counter (bsc#1140652).
- bcache: fix mistaken sysfs entry for io_error counter (bsc#1140652).
- bcache: fix potential deadlock in cached_def_free() (bsc#1140652).
- bcache: fix potential deadlock in cached_def_free() (bsc#1140652).
- bcache: fix race in btree_flush_write() (bsc#1140652).
- bcache: fix race in btree_flush_write() (bsc#1140652).
- bcache: fix return value error in bch_journal_read() (bsc#1140652).
- bcache: fix return value error in bch_journal_read() (bsc#1140652).
- bcache: fix stack corruption by PRECEDING_KEY() (bsc#1140652).
- bcache: fix stack corruption by PRECEDING_KEY() (bsc#1140652).
- bcache: fix wrong usage use-after-freed on keylist in out_nocoalesce branch of btree_gc_coalesce (bsc#1140652).
- bcache: fix wrong usage use-after-freed on keylist in out_nocoalesce branch of btree_gc_coalesce (bsc#1140652).
- bcache: ignore read-ahead request failure on backing device (bsc#1140652).
- bcache: ignore read-ahead request failure on backing device (bsc#1140652).
- bcache: improve bcache_reboot() (bsc#1140652).
- bcache: improve bcache_reboot() (bsc#1140652).
- bcache: improve error message in bch_cached_dev_run() (bsc#1140652).
- bcache: improve error message in bch_cached_dev_run() (bsc#1140652).
- bcache: make bset_search_tree() be more understandable (bsc#1140652).
- bcache: make bset_search_tree() be more understandable (bsc#1140652).
- bcache: make is_discard_enabled() static (bsc#1140652).
- bcache: make is_discard_enabled() static (bsc#1140652).
- bcache: more detailed error message to bcache_device_link() (bsc#1140652).
- bcache: more detailed error message to bcache_device_link() (bsc#1140652).
- bcache: move definition of 'int ret' out of macro read_bucket() (bsc#1140652).
- bcache: move definition of 'int ret' out of macro read_bucket() (bsc#1140652).
- bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() (bsc#1140652).
- bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() (bsc#1140652).
- bcache: only clear BTREE_NODE_dirty bit when it is set (bsc#1140652).
- bcache: only clear BTREE_NODE_dirty bit when it is set (bsc#1140652).
- bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached (bsc#1140652).
- bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached (bsc#1140652).
- bcache: performance improvement for btree_flush_write() (bsc#1140652).
- bcache: performance improvement for btree_flush_write() (bsc#1140652).
- bcache: remove 'XXX:' comment line from run_cache_set() (bsc#1140652).
- bcache: remove 'XXX:' comment line from run_cache_set() (bsc#1140652).
- bcache: remove redundant LIST_HEAD(journal) from run_cache_set() (bsc#1140652).
- bcache: remove redundant LIST_HEAD(journal) from run_cache_set() (bsc#1140652).
- bcache: remove retry_flush_write from struct cache_set (bsc#1140652).
- bcache: remove retry_flush_write from struct cache_set (bsc#1140652).
- bcache: remove unncessary code in bch_btree_keys_init() (bsc#1140652).
- bcache: remove unncessary code in bch_btree_keys_init() (bsc#1140652).
- bcache: remove unnecessary prefetch() in bset_search_tree() (bsc#1140652).
- bcache: remove unnecessary prefetch() in bset_search_tree() (bsc#1140652).
- bcache: return error immediately in bch_journal_replay() (bsc#1140652).
- bcache: return error immediately in bch_journal_replay() (bsc#1140652).
- bcache: set largest seq to ja-&gt;seq[bucket_index] in journal_read_bucket() (bsc#1140652).
- bcache: set largest seq to ja-&gt;seq[bucket_index] in journal_read_bucket() (bsc#1140652).
- bcache: shrink btree node cache after bch_btree_check() (bsc#1140652).
- bcache: shrink btree node cache after bch_btree_check() (bsc#1140652).
- bcache: stop writeback kthread and kworker when bch_cached_dev_run() failed (bsc#1140652).
- bcache: stop writeback kthread and kworker when bch_cached_dev_run() failed (bsc#1140652).
- bcache: use sysfs_match_string() instead of __sysfs_match_string() (bsc#1140652).
- bcache: use sysfs_match_string() instead of __sysfs_match_string() (bsc#1140652).
- be2net: Fix number of Rx queues used for flow hashing (networking-stable-19_06_18).
- be2net: Signal that the device cannot transmit during reconfiguration (bsc#1127315).
- be2net: Synchronize be_update_queues with dev_watchdog (bsc#1127315).
- blk-mq: fix hang caused by freeze/unfreeze sequence (bsc#1128432).
- blk-mq: free hw queue's resource in hctx's release handler (bsc#1140637).
- block, bfq: NULL out the bic when it's no longer valid (bsc#1142359).
- block: Fix a NULL pointer dereference in generic_make_request() (bsc#1139771).
- bluetooth: Fix faulty expression for minimum encryption key size check (bsc#1140328).
- bluetooth: Replace the bluetooth fix with the upstream commit (bsc#1135556)
- bnx2x: Prevent load reordering in tx completion processing (bsc#1142868).
- bnxt_en: Add device IDs 0x1806 and 0x1752 for 57500 devices (bsc#1137224).
- bnxt_en: Add support for BCM957504 (bsc#1137224).
- bnxt_en: Cap the returned MSIX vectors to the rdma driver (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Disable bus master during pci shutdown and driver unload (bsc#1104745).
- bnxt_en: Fix aggregation buffer leak under OOM condition (networking-stable-19_05_31).
- bnxt_en: Fix statistics context reservation logic for rdma driver (bsc#1104745).
- bnxt_en: Suppress error messages when querying DSCP DCB capabilities (bsc#1104745).
- bonding: Force slave speed check after link state recovery for 802.3ad (bsc#1137584).
- bonding: fix arp_validate toggling in active-backup mode (networking-stable-19_05_14).
- bpf, devmap: Add missing RCU read lock on flush (bsc#1109837).
- bpf, devmap: Add missing bulk queue free (bsc#1109837).
- bpf, devmap: Fix premature entry free on destroying map (bsc#1109837).
- bpf, tcp: correctly handle DONT_WAIT flags and timeo == 0 (bsc#1109837).
- bpf, x64: fix stack layout of JITed bpf code (bsc#1083647).
- bpf, x64: save 5 bytes in prologue when ebpf insns came from cbpf (bsc#1083647).
- bpf: btf: fix the brackets of BTF_INT_OFFSET() (bsc#1083647).
- bpf: devmap: fix use-after-free Read in __dev_map_entry_free (bsc#1109837).
- bpf: fix callees pruning callers (bsc#1109837).
- bpf: fix nested bpf tracepoints with per-cpu data (bsc#1083647).
- bpf: lpm_trie: check left child of last leftmost node for NULL (bsc#1109837).
- bpf: sockmap fix msg-&gt;sg.size account on ingress skb (bsc#1109837).
- bpf: sockmap remove duplicate queue free (bsc#1109837).
- bpf: sockmap, fix use after free from sleep in psock backlog workqueue (bsc#1109837).
- brcmfmac: fix NULL pointer derefence during usb disconnect (bsc#1111666).
- bridge: Fix error path for kobject_init_and_add() (networking-stable-19_05_14).
- can: af_can: Fix error path of can_init() (bsc#1051510).
- can: flexcan: fix timeout when set small bitrate (bsc#1051510).
- can: purge socket error queue on sock destruct (bsc#1051510).
- carl9170: fix misuse of device driver API (bsc#1111666).
- ceph: factor out ceph_lookup_inode() (bsc#1138681).
- ceph: fix NULL pointer deref when debugging is enabled (bsc#1138681).
- ceph: fix potential use-after-free in ceph_mdsc_build_path (bsc#1138681).
- ceph: flush dirty inodes before proceeding with remount (bsc#1138681).
- ceph: flush dirty inodes before proceeding with remount (bsc#1140405).
- ceph: print inode number in __caps_issued_mask debugging messages (bsc#1138681).
- ceph: quota: fix quota subdir mounts (bsc#1138681).
- ceph: remove duplicated filelock ref increase (bsc#1138681).
- cfg80211: fix memory leak of wiphy device name (bsc#1051510).
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() (bsc#1141478).
- clk: qcom: Fix -Wunused-const-variable (bsc#1051510).
- clk: rockchip: Do not yell about bad mmc phases when getting (bsc#1051510).
- clk: rockchip: Turn on 'aclk_dmac1' for suspend on rk3288 (bsc#1051510).
- clk: tegra210: fix PLLU and PLLU_OUT1 (bsc#1051510).
- clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider (bsc#1051510).
- coresight: etb10: Fix handling of perf mode (bsc#1051510).
- coresight: etm4x: Add support to enable ETMv4.2 (bsc#1051510).
- cpu/topology: Export die_id (jsc#SLE-5454).
- cpufreq/pasemi: fix possible object reference leak (bsc#1051510).
- cpufreq: AMD: Ignore the check for ProcFeedback in ST/CZ ().
- cpufreq: Add Hygon Dhyana support ().
- cpufreq: Use struct kobj_attribute instead of struct global_attr (bsc#1051510).
- cpufreq: acpi-cpufreq: Report if CPU does not support boost technologies (bsc#1051510).
- cpufreq: brcmstb-avs-cpufreq: Fix initial command check (bsc#1051510).
- cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency (bsc#1051510).
- cpufreq: check if policy is inactive early in __cpufreq_get() (bsc#1051510).
- cpufreq: kirkwood: fix possible object reference leak (bsc#1051510).
- cpufreq: pmac32: fix possible object reference leak (bsc#1051510).
- cpufreq: ppc_cbe: fix possible object reference leak (bsc#1051510).
- crypto: algapi - guard against uninitialized spawn list in crypto_remove_spawns (bsc#1133401).
- crypto: arm64/sha1-ce - correct digest for empty data in finup (bsc#1051510).
- crypto: arm64/sha2-ce - correct digest for empty data in finup (bsc#1051510).
- crypto: ccp - Fix 3DES complaint from ccp-crypto module (bsc#1051510).
- crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL (bsc#1051510).
- crypto: ccp - Validate the the error value used to index error messages (bsc#1051510).
- crypto: ccp - fix AES CFB error exposed by new test vectors (bsc#1051510).
- crypto: ccp - memset structure fields to zero before reuse (bsc#1051510).
- crypto: ccp/gcm - use const time tag comparison (bsc#1051510).
- crypto: chacha20poly1305 - fix atomic sleep when using async algorithm (bsc#1051510).
- crypto: cryptd - Fix skcipher instance memory leak (bsc#1051510).
- crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe (bsc#1051510).
- crypto: ghash - fix unaligned memory access in ghash_setkey() (bsc#1051510).
- crypto: talitos - Align SEC1 accesses to 32 bits boundaries (bsc#1051510).
- crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking (bsc#1051510).
- crypto: talitos - check data blocksize in ablkcipher (bsc#1051510).
- crypto: talitos - fix CTR alg blocksize (bsc#1051510).
- crypto: talitos - fix max key size for sha384 and sha512 (bsc#1051510).
- crypto: talitos - properly handle split ICV (bsc#1051510).
- crypto: talitos - reduce max key size for SEC1 (bsc#1051510).
- crypto: talitos - rename alternative AEAD algos (bsc#1051510).
- crypto: user - prevent operating on larval algorithms (bsc#1133401).
- cxgb4: Enable hash filter with offload (bsc#1136345 jsc#SLE-4681).
- cxgb4: use firmware API for validating filter spec (bsc#1136345 jsc#SLE-4681).
- dasd_fba: Display '00000000' for zero page when dumping sense (bsc#1123080).
- dax: Fix xarray entry association for mixed mappings (bsc#1140893).
- device core: Consolidate locking and unlocking of parent and device (bsc#1106383).
- dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc (bsc#1111666).
- dma-direct: add support for allocation from ZONE_DMA and ZONE_DMA32 (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-direct: do not retry allocation for no-op GFP_DMA (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-direct: retry allocations using GFP_DMA for small masks (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-mapping: move dma_mark_clean to dma-direct.h (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-mapping: move swiotlb arch helpers to a new header (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-mapping: take dma_pfn_offset into account in dma_max_pfn (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dmaengine: Replace WARN_TAINT_ONCE() with pr_warn_once() (jsc#SLE-5442).
- dmaengine: at_xdmac: remove BUG_ON macro in tasklet (bsc#1111666).
- dmaengine: hsu: Revert 'set HSU_CH_MTSR to memory width' (bsc#1051510).
- dmaengine: imx-sdma: remove BD_INTR for channel0 (bsc#1051510).
- dmaengine: ioat: constify pci_device_id (jsc#SLE-5442).
- dmaengine: ioat: do not use DMA_ERROR_CODE (jsc#SLE-5442).
- dmaengine: ioat: fix prototype of ioat_enumerate_channels (jsc#SLE-5442).
- dmaengine: ioatdma: Add Snow Ridge ioatdma device id (jsc#SLE-5442).
- dmaengine: ioatdma: Add intr_coalesce sysfs entry (jsc#SLE-5442).
- dmaengine: ioatdma: add descriptor pre-fetch support for v3.4 (jsc#SLE-5442).
- dmaengine: ioatdma: disable DCA enabling on IOATDMA v3.4 (jsc#SLE-5442).
- dmaengine: ioatdma: set the completion address register after channel reset (jsc#SLE-5442).
- dmaengine: ioatdma: support latency tolerance report (LTR) for v3.4 (jsc#SLE-5442).
- dmaengine: pl330: _stop: clear interrupt status (bsc#1111666).
- dmaengine: tegra210-adma: Fix crash during probe (bsc#1111666).
- dmaengine: tegra210-adma: restore channel status (bsc#1111666).
- doc: Cope with the deprecation of AutoReporter (bsc#1051510).
- documentation/ABI: Document umwait control sysfs interfaces (jsc#SLE-5187).
- documentation: DMA-API: fix a function name of max_mapping_size (bsc#1140954).
- dpaa_eth: fix SG frame cleanup (networking-stable-19_05_14).
- drbd: Avoid Clang warning about pointless switch statment (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote (bsc#1051510).
- driver core: Establish order of operations for device_add and device_del via bitflag (bsc#1106383).
- driver core: Probe devices asynchronously instead of the driver (bsc#1106383).
- drivers/base/devres: introduce devm_release_action() (bsc#1103992).
- drivers/base: Introduce kill_device() (bsc#1139865).
- drivers/base: kABI fixes for struct device_private (bsc#1106383).
- drivers/dma/ioat: Remove now-redundant smp_read_barrier_depends() (jsc#SLE-5442).
- drivers/rapidio/devices/rio_mport_cdev.c: fix resource leak in error handling path in 'rio_dma_transfer()' (bsc#1051510).
- drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen() (bsc#1051510).
- drivers: depend on HAS_IOMEM for devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers: fix a typo in the kernel doc for devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var (bsc#1051510).
- drivers: provide devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers: thermal: tsens: Do not print error message on -EPROBE_DEFER (bsc#1051510).
- drm/amd/display: Fix Divide by 0 in memory calculations (bsc#1111666).
- drm/amd/display: Make some functions static (bsc#1111666).
- drm/amd/display: Set stream-&gt;mode_changed when connectors change (bsc#1111666).
- drm/amd/display: Use plane-&gt;color_space for dpp if specified (bsc#1111666).
- drm/amd/display: fix releasing planes when exiting odm (bsc#1111666).
- drm/amd/powerplay: use hardware fan control if no powerplay fan table (bsc#1111666).
- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE (bsc#1051510).
- drm/amdgpu/psp: move psp version specific function pointers to early_init (bsc#1111666).
- drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in (bsc#1111666).
- drm/arm/hdlcd: Actually validate CRTC modes (bsc#1111666).
- drm/arm/hdlcd: Allow a bit of clock tolerance (bsc#1051510).
- drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times (bsc#1111666).
- drm/atmel-hlcdc: revert shift by 8 (bsc#1111666).
- drm/edid: abstract override/firmware EDID retrieval (bsc#1111666).
- drm/etnaviv: add missing failure path to destroy suballoc (bsc#1111666).
- drm/fb-helper: generic: Do not take module ref for fbcon (bsc#1111666).
- drm/i915/aml: Add new Amber Lake pci ID (jsc#SLE-4986).
- drm/i915/cfl: Adding another pci Device ID (jsc#SLE-4986).
- drm/i915/cml: Add CML pci IDS (jsc#SLE-4986).
- drm/i915/cml: Introduce Comet Lake PCH (jsc#SLE-6681).
- drm/i915/dmc: protect against reading random memory (bsc#1051510).
- drm/i915/gvt: Initialize intel_gvt_gtt_entry in stack (bsc#1111666).
- drm/i915/gvt: ignore unexpected pvinfo write (bsc#1051510).
- drm/i915/icl: Add WaDisableBankHangMode (bsc#1111666).
- drm/i915/icl: Adding few more device IDs for Ice Lake (jsc#SLE-4986).
- drm/i915/perf: fix whitelist on Gen10+ (bsc#1051510).
- drm/i915/sdvo: Implement proper HDMI audio support for SDVO (bsc#1051510).
- drm/i915: Add new AML_ULX support list (jsc#SLE-4986).
- drm/i915: Add new ICL pci ID (jsc#SLE-4986).
- drm/i915: Apply correct ddi translation table for AML device (jsc#SLE-4986).
- drm/i915: Attach the pci match data to the device upon creation (jsc#SLE-4986).
- drm/i915: Fix uninitialized mask in intel_device_info_subplatform_init (jsc#SLE-4986).
- drm/i915: Introduce concept of a sub-platform (jsc#SLE-4986).
- drm/i915: Maintain consistent documentation subsection ordering (bsc#1111666).
- drm/i915: Mark AML 0x87CA as ULX (jsc#SLE-4986).
- drm/i915: Move final cleanup of drm_i915_private to i915_driver_destroy (jsc#SLE-4986).
- drm/i915: Remove redundant device id from IS_IRONLAKE_M macro (jsc#SLE-4986).
- drm/i915: Split Pineview device info into desktop and mobile (jsc#SLE-4986).
- drm/i915: Split some pci ids into separate groups (jsc#SLE-4986).
- drm/i915: start moving runtime device info to a separate struct (jsc#SLE-4986).
- drm/imx: notify drm core before sending event during crtc disable (bsc#1111666).
- drm/imx: only send event on crtc disable if kept disabled (bsc#1111666).
- drm/lease: Make sure implicit planes are leased (bsc#1111666).
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver (bsc#1111666).
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable() (bsc#1111666).
- drm/mediatek: clear num_pipes when unbind driver (bsc#1111666).
- drm/mediatek: fix unbind functions (bsc#1111666).
- drm/mediatek: unbind components in mtk_drm_unbind() (bsc#1111666).
- drm/meson: Add support for XBGR8888 &amp; ABGR8888 formats (bsc#1051510).
- drm/msm/a3xx: remove TPL1 regs from snapshot (bsc#1051510).
- drm/msm/mdp5: Fix mdp5_cfg_init error return (bsc#1111666).
- drm/msm: a5xx: fix possible object reference leak (bsc#1111666).
- drm/msm: fix fb references in async update (bsc#1111666).
- drm/nouveau/bar/nv50: ensure BAR is mapped (bsc#1111666).
- drm/nouveau/disp/dp: respect sink limits when selecting failsafe link configuration (bsc#1051510).
- drm/nouveau/i2c: Enable i2c pads &amp; busses during preinit (bsc#1051510).
- drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when encoders change (bsc#1111666).
- drm/nouveau/kms/gv100-: fix spurious window immediate interlocks (bsc#1111666).
- drm/omap: dsi: Fix PM for display blank with paired dss_pll calls (bsc#1111666).
- drm/panel: otm8009a: Add delay at the end of initialization (bsc#1111666).
- drm/pl111: fix possible object reference leak (bsc#1111666).
- drm/rockchip: Properly adjust to a true clock in adjusted_mode (bsc#1051510).
- drm/sun4i: dsi: Change the start delay calculation (bsc#1111666).
- drm/sun4i: dsi: Enforce boundaries on the start delay (bsc#1111666).
- drm/udl: Replace drm_dev_unref with drm_dev_put (bsc#1111666).
- drm/udl: introduce a macro to convert dev to udl (bsc#1111666).
- drm/udl: move to embedding drm device inside udl device (bsc#1111666).
- drm/v3d: Handle errors from IRQ setup (bsc#1111666).
- drm/vc4: fix fb references in async update (bsc#1141312).
- drm/vmwgfx: Honor the sg list segment size limitation (bsc#1111666).
- drm/vmwgfx: Use the backdoor port if the HB port is not available (bsc#1111666).
- drm/vmwgfx: fix a warning due to missing dma_parms (bsc#1111666).
- drm: Fix drm_release() and device unplug (bsc#1111666).
- drm: add fallback override/firmware EDID modes workaround (bsc#1111666).
- drm: add non-desktop quirk for Valve HMDs (bsc#1111666).
- drm: add non-desktop quirks to Sensics and OSVR headsets (bsc#1111666).
- drm: do not block fb changes for async plane updates (bsc#1111666).
- drm: etnaviv: avoid DMA API warning when importing buffers (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2 (bsc#1111666).
- drm: return -EFAULT if copy_to_user() fails (bsc#1111666).
- e1000e: start network tx queue only when link is up (bsc#1051510).
- edac, amd64: Add Hygon Dhyana support ().
- edac/mc: Fix edac_mc_find() in case no device is found (bsc#1114279).
- ethtool: check the return value of get_regs_len (git-fixes).
- ethtool: fix potential userspace buffer overflow (networking-stable-19_06_09).
- ext4: do not delete unlinked inode from orphan list on failed truncate (bsc#1140891).
- failover: allow name change on IFF_UP slave interfaces (bsc#1109837).
- fork, memcg: fix cached_stacks case (bsc#1134097).
- fork, memcg: fix crash in free_thread_stack on memcg charge fail (bsc#1134097).
- fpga: add intel stratix10 soc fpga manager driver (jsc#SLE-7057).
- fpga: stratix10-soc: fix use-after-free on s10_init() (jsc#SLE-7057).
- fpga: stratix10-soc: fix wrong of_node_put() in init function (jsc#jsc#SLE-7057).
- fs/ocfs2: fix race in ocfs2_dentry_attach_lock() (bsc#1140889).
- fs/proc/proc_sysctl.c: Fix a NULL pointer dereference (bsc#1140887).
- fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links (bsc#1140887).
- fs: Abort file_remove_privs() for non-reg. files (bsc#1140888).
- fs: kill btrfs clear path blocking (bsc#1140139).
- fs: Btrfs: fix race between block group removal and block group allocation (bsc#1143003).
- ftrace/x86: Remove possible deadlock between register_kprobe() and ftrace_run_update_code() (bsc#1071995).
- genirq: Prevent use-after-free and work list corruption (bsc#1051510).
- genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent() (bsc#1051510).
- genwqe: Prevent an integer overflow in the ioctl (bsc#1051510).
- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM (bsc#1111666).
- hid:: Wacom: switch Dell canvas into highres mode (bsc#1051510).
- hid:: input: fix a4tech horizontal wheel custom usage (bsc#1137429).
- hid:: wacom: Add ability to provide explicit battery status info (bsc#1051510).
- hid:: wacom: Add support for 3rd generation Intuos BT (bsc#1051510).
- hid:: wacom: Add support for Pro Pen slim (bsc#1051510).
- hid:: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth (bsc#1051510).
- hid:: wacom: Do not report anything prior to the tool entering range (bsc#1051510).
- hid:: wacom: Do not set tool type until we're in range (bsc#1051510).
- hid:: wacom: Mark expected switch fall-through (bsc#1051510).
- hid:: wacom: Move handling of hid: quirks into a dedicated function (bsc#1051510).
- hid:: wacom: Move hid: fix for AES serial number into wacom_hid_usage_quirk (bsc#1051510).
- hid:: wacom: Properly handle AES serial number and tool type (bsc#1051510).
- hid:: wacom: Queue events with missing type/serial data for later processing (bsc#1051510).
- hid:: wacom: Remove comparison of u8 mode with zero and simplify (bsc#1051510).
- hid:: wacom: Replace touch_max fixup code with static touch_max definitions (bsc#1051510).
- hid:: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact (bsc#1051510).
- hid:: wacom: Support 'in range' for Intuos/Bamboo tablets where possible (bsc#1051510).
- hid:: wacom: Sync INTUOSP2_BT touch state after each frame if necessary (bsc#1051510).
- hid:: wacom: Work around hid: descriptor bug in DTK-2451 and DTH-2452 (bsc#1051510).
- hid:: wacom: convert Wacom custom usages to standard hid: usages (bsc#1051510).
- hid:: wacom: correct touch resolution x/y typo (bsc#1051510).
- hid:: wacom: fix mistake in printk (bsc#1051510).
- hid:: wacom: generic: Correct pad syncing (bsc#1051510).
- hid:: wacom: generic: Ignore hid:_DG_BATTERYSTRENTH == 0 (bsc#1051510).
- hid:: wacom: generic: Leave tool in prox until it completely leaves sense (bsc#1051510).
- hid:: wacom: generic: Refactor generic battery handling (bsc#1051510).
- hid:: wacom: generic: Report AES battery information (bsc#1051510).
- hid:: wacom: generic: Reset events back to zero when pen leaves (bsc#1051510).
- hid:: wacom: generic: Scale battery capacity measurements to percentages (bsc#1051510).
- hid:: wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (bsc#1051510).
- hid:: wacom: generic: Send BTN_TOOL_PEN in prox once the pen enters range (bsc#1051510).
- hid:: wacom: generic: Support multiple tools per report (bsc#1051510).
- hid:: wacom: generic: Use generic codepath terminology in wacom_wac_pen_report (bsc#1051510).
- hid:: wacom: generic: add the 'Report Valid' usage (bsc#1051510).
- hid:: wacom: generic: only switch the mode on devices with LEDs (bsc#1051510).
- hid:: wacom: generic: read hid:_DG_CONTACTMAX from any feature report (bsc#1051510).
- hid:: wacom: wacom_wac_collection() is local to wacom_wac.c (bsc#1051510).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes (mm/hugetlbfs)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git fixes (mm/hugetlbfs)).
- hv/netvsc: Set probe mode to sync (bsc#1142083).
- hwmon/coretemp: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).
- hwmon/coretemp: Support multi-die/package (jsc#SLE-5454).
- hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs ().
- hwmon: (k10temp) 27C Offset needed for Threadripper2 ().
- hwmon: (k10temp) Add Hygon Dhyana support ().
- hwmon: (k10temp) Add support for AMD Ryzen w/ Vega graphics ().
- hwmon: (k10temp) Add support for Stoney Ridge and Bristol Ridge CPUs ().
- hwmon: (k10temp) Add support for family 17h ().
- hwmon: (k10temp) Add support for temperature offsets ().
- hwmon: (k10temp) Add temperature offset for Ryzen 1900X ().
- hwmon: (k10temp) Add temperature offset for Ryzen 2700X ().
- hwmon: (k10temp) Correct model name for Ryzen 1600X ().
- hwmon: (k10temp) Display both Tctl and Tdie ().
- hwmon: (k10temp) Fix reading critical temperature register ().
- hwmon: (k10temp) Make function get_raw_temp static ().
- hwmon: (k10temp) Move chip specific code into probe function ().
- hwmon: (k10temp) Only apply temperature offset if result is positive ().
- hwmon: (k10temp) Support all Family 15h Model 6xh and Model 7xh processors ().
- hwmon: (k10temp) Use API function to access System Management Network ().
- hwmon: k10temp: Support Threadripper 2920X, 2970WX; simplify offset table ().
- i2c-piix4: Add Hygon Dhyana SMBus support ().
- i2c: acorn: fix i2c warning (bsc#1135642).
- i2c: mlxcpld: Add support for extended transaction length for i2c-mlxcpld (bsc#1112374).
- i2c: mlxcpld: Add support for smbus block read transaction (bsc#1112374).
- i2c: mlxcpld: Allow configurable adapter id for mlxcpld (bsc#1112374).
- i2c: mlxcpld: Fix adapter functionality support callback (bsc#1112374).
- i2c: mlxcpld: Fix wrong initialization order in probe (bsc#1112374).
- i2c: mux: mlxcpld: simplify code to reach the adapter (bsc#1112374).
- i2c: synquacer: fix synquacer_i2c_doxfer() return value (bsc#1111666).
- ib/hfi1: Clear the IOWAIT pending bits when QP is put into error state (bsc#1114685).
- ib/hfi1: Create inline to get extended headers (bsc#1114685 ).
- ib/hfi1: Validate fault injection opcode user input (bsc#1114685 ).
- ib/ipoib: Add child to parent list only if device initialized (bsc#1103992).
- ib/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE (bsc#1103991).
- ib/mlx5: Verify DEVX general object type correctly (bsc#1103991 ).
- ibmveth: Update ethtool settings to reflect virtual properties (bsc#1136157, LTC#177197).
- idr: fix overflow case for idr_for_each_entry_ul() (bsc#1109837).
- input: elantech - enable middle button support on 2 ThinkPads (bsc#1051510).
- input: imx_keypad - make sure keyboard can always wake up system (bsc#1051510).
- input: psmouse - fix build error of multiple definition (bsc#1051510).
- input: synaptics - enable SMBUS on T480 thinkpad trackpad (bsc#1051510).
- input: synaptics - enable SMBus on ThinkPad E480 and E580 (bsc#1051510).
- input: tm2-touchkey - acknowledge that setting brightness is a blocking call (bsc#1129770).
- input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD (bsc#1051510).
- intel_th: msu: Fix single mode with disabled IOMMU (bsc#1051510).
- iommu-helper: mark iommu_is_span_boundary as inline (jsc#SLE-6197 bsc#1140559 LTC#173150).
- iommu/amd: Make iommu_disable safer (bsc#1140955).
- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer (bsc#1051510).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register (bsc#1051510).
- iommu/arm-smmu: Add support for qcom,smmu-v2 variant (bsc#1051510).
- iommu/arm-smmu: Avoid constant zero in TLBI writes (bsc#1140956).
- iommu/vt-d: Duplicate iommu_resv_region objects per device list (bsc#1140959).
- iommu/vt-d: Handle RMRR with pci bridge device scopes (bsc#1140961).
- iommu/vt-d: Handle pci bridge RMRR device scopes in intel_iommu_get_resv_regions (bsc#1140960).
- iommu/vt-d: Introduce is_downstream_to_pci_bridge helper (bsc#1140962).
- iommu/vt-d: Remove unnecessary rcu_read_locks (bsc#1140964).
- iommu: Fix a leak in iommu_insert_resv_region (bsc#1140957).
- iommu: Use right function to get group for device (bsc#1140958).
- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- ipv4/igmp: fix another memory leak in igmpv3_del_delrec() (networking-stable-19_05_31).
- ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST (networking-stable-19_05_31).
- ipv4: Fix raw socket lookup for local traffic (networking-stable-19_05_14).
- ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop (git-fixes).
- ipv6: Consider sk_bound_dev_if when binding a raw socket to an address (networking-stable-19_05_31).
- ipv6: fib: Do not assume only nodes hold a reference on routes (bsc#1138732).
- ipv6: fix EFAULT on sendto with icmpv6 and hdrincl (networking-stable-19_06_09).
- ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero (networking-stable-19_06_18).
- ipv6: use READ_ONCE() for inet-&gt;hdrincl as in ipv4 (networking-stable-19_06_09).
- irqchip/gic-v3-its: fix some definitions of inner cacheability attributes (bsc#1051510).
- irqchip/mbigen: Do not clear eventid when freeing an MSI (bsc#1051510).
- iw_cxgb4: Fix qpid leak (bsc#1136348 jsc#SLE-4684).
- iwlwifi: Correct iwlwifi 22000 series ucode file name (bsc#1142673)
- iwlwifi: Fix double-free problems in iwl_req_fw_callback() (bsc#1111666).
- iwlwifi: correct one of the pci struct names (bsc#1111666).
- iwlwifi: do not WARN when calling iwl_get_shared_mem_conf with RF-Kill (bsc#1111666).
- iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices (bsc#1111666).
- iwlwifi: fix cfg structs for 22000 with different RF modules (bsc#1111666).
- iwlwifi: fix devices with pci Device ID 0x34F0 and 11ac RF modules (bsc#1111666).
- iwlwifi: mvm: Drop large non sta frames (bsc#1111666).
- iwlwifi: pcie: do not service an interrupt that was masked (bsc#1111666).
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X (bsc#1111666).
- ixgbe: Avoid NULL pointer dereference with VF on non-IPsec hw (bsc#1140228).
- kABI fix for hda_codec.relaxed_resume flag (bsc#1111666).
- kABI workaround for asus-wmi changes (bsc#1051510).
- kABI workaround for the new pci_dev.skip_bus_pm field addition (bsc#1051510).
- kABI: Fix lost iommu-helper symbols on arm64 (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kABI: mask changes made by basic protected virtualization support (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kABI: mask changes made by swiotlb for protected virtualization (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kABI: mask changes made by use of DMA memory for adapter interrupts (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi fixup blk_mq_register_dev() (bsc#1140637).
- kabi/severities: Whitelist airq_iv_* (s390-specific)
- kabi/severities: Whitelist more s390x internal symbols
- kabi/severities: Whitelist s390 internal-only symbols
- kabi: Fix kABI for asus-wmi quirk_entry field addition (bsc#1051510).
- kabi: Mask no_vf_scan in struct pci_dev (jsc#SLE-5803 ).
- kabi: remove unused hcall definition (bsc#1140322 LTC#176270).
- kabi: s390: enum interruption_class (jsc#SLE-5789 bsc#1134730 LTC#173388).
- kabi: x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).
- kabi: x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).
- kbuild: use -flive-patching when CONFIG_LIVEPATCH is enabled (bsc#1071995).
- kernel-binary: Use -c grep option in klp project detection.
- kernel-binary: fix missing \
- kernel-binary: rpm does not support multiline condition
- kernel: jump label transformation performance (bsc#1137534 bsc#1137535 LTC#178058 LTC#178059).
- kvm/mmu: kABI fix for *_mmu_pages changes in struct kvm_arch (bsc#1135335).
- kvm: SVM: Fix detection of AMD Errata 1096 (bsc#1142354).
- kvm: arm/arm64: vgic-its: Take the srcu lock when parsing the memslots (bsc#1133021).
- kvm: arm/arm64: vgic-its: Take the srcu lock when writing to guest memory (bsc#1133021).
- kvm: mmu: Fix overflow on kvm mmu page limit calculation (bsc#1135335).
- kvm: polling: add architecture backend to disable polling (bsc#1119222).
- kvm: s390: change default halt poll time to 50us (bsc#1119222).
- kvm: s390: enable CONFIG_HAVE_kvm_NO_POLL (bsc#1119222) We need to enable CONFIG_HAVE_kvm_NO_POLL for bsc#1119222
- kvm: s390: fix typo in parameter description (bsc#1119222).
- kvm: s390: kABI Workaround for 'kvm_vcpu_stat' Add halt_no_poll_steal to kvm_vcpu_stat. Hide it from the kABI checker.
- kvm: s390: kABI Workaround for 'lowcore' (bsc#1119222).
- kvm: s390: provide kvm_arch_no_poll function (bsc#1119222).
- kvm: svm/avic: Do not send AVIC doorbell to self (bsc#1140133).
- kvm: svm/avic: fix off-by-one in checking host APIC ID (bsc#1140971).
- kvm: x86: Include CPUID leaf 0x8000001e in kvm's supported CPUID (bsc#1114279).
- kvm: x86: Include multiple indices with CPUID leaf 0x8000001d (bsc#1114279).
- kvm: x86: Skip EFER vs. guest CPUID checks for host-initiated writes (bsc#1140972).
- kvm: x86: fix return value for reserved EFER (bsc#1140992).
- lapb: fixed leak of control-blocks (networking-stable-19_06_18).
- lib/scatterlist: Fix mapping iterator when sg-&gt;offset is greater than PAGE_SIZE (bsc#1051510).
- lib/bitmap.c: make bitmap_parselist() thread-safe and much faster (bsc#1143507).
- lib: fix stall in __bitmap_parselist() (bsc#1051510).
- libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk (bsc#1051510).
- libceph, rbd, ceph: move ceph_osdc_alloc_messages() calls (bsc#1135897).
- libceph, rbd: add error handling for osd_req_op_cls_init() (bsc#1135897).
- libceph: assign cookies in linger_submit() (bsc#1135897).
- libceph: check reply num_data_items in setup_request_data() (bsc#1135897).
- libceph: do not consume a ref on pagelist in ceph_msg_data_add_pagelist() (bsc#1135897).
- libceph: enable fallback to ceph_msg_new() in ceph_msgpool_get() (bsc#1135897).
- libceph: introduce alloc_watch_request() (bsc#1135897).
- libceph: introduce ceph_pagelist_alloc() (bsc#1135897).
- libceph: preallocate message data items (bsc#1135897).
- libnvdimm, pfn: Fix over-trim in trim_pfn_device() (bsc#1140719).
- libnvdimm/bus: Prevent duplicate device_unregister() calls (bsc#1139865).
- libnvdimm/namespace: Fix label tracking error (bsc#1142350).
- libnvdimm/region: Register badblocks before namespaces (bsc#1143209).
- livepatch: Remove duplicate warning about missing reliable stacktrace support (bsc#1071995).
- livepatch: Use static buffer for debugging messages under rq lock (bsc#1071995).
- llc: fix skb leak in llc_build_and_send_ui_pkt() (networking-stable-19_05_31).
- mISDN: make sure device name is NUL terminated (bsc#1051510).
- mac80211: Do not use stack memory with scatterlist for GMAC (bsc#1051510).
- mac80211: allow 4addr AP operation on crypto controlled devices (bsc#1051510).
- mac80211: do not start any work during reconfigure flow (bsc#1111666).
- mac80211: drop robust management frames from unknown TA (bsc#1051510).
- mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he() (bsc#1111666).
- mac80211: free peer keys before vif down in mesh (bsc#1111666).
- mac80211: handle deauthentication/disassociation from TDLS peer (bsc#1051510).
- mac80211: mesh: fix RCU warning (bsc#1111666).
- mac80211: only warn once on chanctx_conf being NULL (bsc#1111666).
- media: cpia2_usb: first wake up, then free in disconnect (bsc#1135642).
- media: marvell-ccic: fix DMA s/g desc number calculation (bsc#1051510).
- media: s5p-mfc: Make additional clocks optional (bsc#1051510).
- media: v4l2-ioctl: clear fields in s_parm (bsc#1051510).
- media: v4l2: Test type instead of cfg-&gt;type in v4l2_ctrl_new_custom() (bsc#1051510).
- media: vivid: fix incorrect assignment operation when setting video mode (bsc#1051510).
- mei: bus: need to unlink client before freeing (bsc#1051510).
- mei: me: add denverton innovation engine device IDs (bsc#1051510).
- mei: me: add gemini lake devices id (bsc#1051510).
- memory: tegra: Fix integer overflow on tick value calculation (bsc#1051510).
- memstick: Fix error cleanup path of memstick_init (bsc#1051510).
- mfd: hi655x: Fix regmap area declared size for hi655x (bsc#1051510).
- mfd: intel-lpss: Release IDA resources (bsc#1051510).
- mfd: intel-lpss: Set the device in reset state when init (bsc#1051510).
- mfd: tps65912-spi: Add missing of table registration (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register (bsc#1051510).
- mips: fix an off-by-one in dma_capable (jsc#SLE-6197 bsc#1140559 LTC#173150).
- mlxsw: core: Add API for QSFP module temperature thresholds reading (bsc#1112374).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue (bsc#1112374).
- mlxsw: core: Move ethtool module callbacks to a common location (bsc#1112374).
- mlxsw: core: Prevent reading unsupported slave address from SFP EEPROM (bsc#1112374).
- mlxsw: core: mlxsw: core: avoid -Wint-in-bool-context warning (bsc#1112374).
- mlxsw: pci: Reincrease pci reset timeout (bsc#1112374).
- mlxsw: reg: Add Management Temperature Bulk Register (bsc#1112374).
- mlxsw: spectrum: Move QSFP EEPROM definitions to common location (bsc#1112374).
- mlxsw: spectrum: Put MC TCs into DWRR mode (bsc#1112374).
- mlxsw: spectrum_dcb: Configure DSCP map as the last rule is removed (bsc#1112374).
- mlxsw: spectrum_flower: Fix TOS matching (bsc#1112374).
- mm, page_alloc: fix has_unmovable_pages for HugePages (bsc#1127034).
- mm/devm_memremap_pages: introduce devm_memunmap_pages (bsc#1103992).
- mm/nvdimm: add is_ioremap_addr and use that to check ioremap address (bsc#1140322 LTC#176270).
- mm/page_alloc.c: avoid potential NULL pointer dereference (git fixes (mm/pagealloc)).
- mm/page_alloc.c: fix never set ALLOC_NOFRAGMENT flag (git fixes (mm/pagealloc)).
- mm/vmscan.c: prevent useless kswapd loops (git fixes (mm/vmscan)).
- mm: migrate: Fix reference check race between __find_get_block() and migration (bnc#1137609).
- mm: replace all open encodings for NUMA_NO_NODE (bsc#1140322 LTC#176270).
- mmc: core: Prevent processing SDIO IRQs when the card is suspended (bsc#1051510).
- mmc: core: complete HS400 before checking status (bsc#1111666).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers (bsc#1051510).
- mmc: mmci: Prevent polling for busy detection in IRQ context (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support (bsc#1051510).
- mmc: sdhci-pci: Try 'cd' for card-detect lookup before using NULL (bsc#1051510).
- module: Fix livepatch/ftrace module text permissions race (bsc#1071995).
- mt7601u: do not schedule rx_tasklet when the device has been disconnected (bsc#1111666).
- mt7601u: fix possible memory leak when the device is disconnected (bsc#1111666).
- neigh: fix use-after-free read in pneigh_get_next (networking-stable-19_06_18).
- net-gro: fix use-after-free read in napi_gro_frags() (networking-stable-19_05_31).
- net/af_iucv: build proper skbs for HiperTransport (bsc#1142221 LTC#179332).
- net/af_iucv: remove GFP_DMA restriction for HiperTransport (bsc#1142112 bsc#1142221 LTC#179334 LTC#179332).
- net/af_iucv: remove GFP_DMA restriction for HiperTransport (bsc#1142221 LTC#179332).
- net/mlx4_core: Change the error print to info print (networking-stable-19_05_21).
- net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query (networking-stable-19_06_09).
- net/mlx5: Allocate root ns memory using kzalloc to match kfree (networking-stable-19_05_31).
- net/mlx5: Avoid double free in fs init error unwinding path (networking-stable-19_05_31).
- net/mlx5: Avoid reloading already removed devices (bsc#1103990 ).
- net/mlx5: FPGA, tls, hold rcu read lock a bit longer (bsc#1103990).
- net/mlx5: FPGA, tls, idr remove on flow delete (bsc#1103990 ).
- net/mlx5: Set completion EQs as shared resources (bsc#1103991 ).
- net/mlx5: Update pci error handler entries and command translation (bsc#1103991).
- net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled (bsc#1103990).
- net/mlx5e: Fix the max MTU check in case of XDP (bsc#1103990 ).
- net/mlx5e: Fix use-after-free after xdp_return_frame (bsc#1103990).
- net/mlx5e: Rx, Check ip headers sanity (bsc#1103990 ).
- net/mlx5e: Rx, Fix checksum calculation for new hardware (bsc#1127611).
- net/mlx5e: Rx, Fixup skb checksum for packets with tail padding (bsc#1109837).
- net/mlx5e: XDP, Fix shifted flag index in RQ bitmap (bsc#1103990 ).
- net/packet: fix memory leak in packet_set_ring() (git-fixes).
- net/sched: cbs: Fix error path of cbs_module_init (bsc#1109837).
- net/sched: cbs: fix port_rate miscalculation (bsc#1109837).
- net/tls: avoid NULL pointer deref on nskb-&gt;sk in fallback (bsc#1109837).
- net/tls: avoid potential deadlock in tls_set_device_offload_rx() (bsc#1109837).
- net/tls: do not copy negative amounts of data in reencrypt (bsc#1109837).
- net/tls: do not ignore netdev notifications if no TLS features (bsc#1109837).
- net/tls: do not leak IV and record seq when offload fails (bsc#1109837).
- net/tls: do not leak partially sent record in device mode (bsc#1109837).
- net/tls: fix build without CONFIG_TLS_DEVICE (bsc#1109837).
- net/tls: fix copy to fragments in reencrypt (bsc#1109837).
- net/tls: fix page double free on TX cleanup (bsc#1109837).
- net/tls: fix refcount adjustment in fallback (bsc#1109837).
- net/tls: fix socket wmem accounting on fallback with netem (bsc#1109837).
- net/tls: fix state removal with feature flags off (bsc#1109837).
- net/tls: fix the IV leaks (bsc#1109837).
- net/tls: make sure offload also gets the keys wiped (bsc#1109837).
- net/tls: prevent bad memory access in tls_is_sk_tx_device_offloaded() (bsc#1109837).
- net/tls: replace the sleeping lock around RX resync with a bit lock (bsc#1109837).
- net/udp_gso: Allow TX timestamp with UDP GSO (bsc#1109837).
- net: Fix missing meta data in skb with vlan packet (bsc#1109837).
- net: avoid weird emergency message (networking-stable-19_05_21).
- net: core: support XDP generic on stacked devices (bsc#1109837).
- net: do not clear sock-&gt;sk early to avoid trouble in strparser (bsc#1103990).
- net: ena: Fix bug where ring allocation backoff stopped too late (bsc#1138879).
- net: ena: add MAX_QUEUES_EXT get feature admin command (bsc#1138879).
- net: ena: add ethtool function for changing io queue sizes (bsc#1138879).
- net: ena: add good checksum counter (bsc#1138879).
- net: ena: add handling of llq max tx burst size (bsc#1138879).
- net: ena: add newline at the end of pr_err prints (bsc#1138879).
- net: ena: add support for changing max_header_size in LLQ mode (bsc#1138879).
- net: ena: allow automatic fallback to polling mode (bsc#1138879).
- net: ena: allow queue allocation backoff when low on memory (bsc#1138879).
- net: ena: arrange ena_probe() function variables in reverse christmas tree (bsc#1138879).
- net: ena: enable negotiating larger Rx ring size (bsc#1138879).
- net: ena: ethtool: add extra properties retrieval via get_priv_flags (bsc#1138879).
- net: ena: fix ena_com_fill_hash_function() implementation (bsc#1138879).
- net: ena: fix incorrect test of supported hash function (bsc#1138879).
- net: ena: fix swapped parameters when calling ena_com_indirect_table_fill_entry (bsc#1138879).
- net: ena: fix: Free napi resources when ena_up() fails (bsc#1138879).
- net: ena: fix: set freed objects to NULL to avoid failing future allocations (bsc#1138879).
- net: ena: gcc 8: fix compilation warning (bsc#1138879).
- net: ena: improve latency by disabling adaptive interrupt moderation by default (bsc#1138879).
- net: ena: make ethtool show correct current and max queue sizes (bsc#1138879).
- net: ena: optimise calculations for CQ doorbell (bsc#1138879).
- net: ena: remove inline keyword from functions in *.c (bsc#1138879).
- net: ena: replace free_tx/rx_ids union with single free_ids field in ena_ring (bsc#1138879).
- net: ena: update driver version from 2.0.3 to 2.1.0 (bsc#1138879).
- net: ena: use dev_info_once instead of static variable (bsc#1138879).
- net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set (bsc#1130836).
- net: fec: fix the clk mismatch in failed_reset path (networking-stable-19_05_31).
- net: hns3: Fix inconsistent indenting (bsc#1140676).
- net: hns: Fix WARNING when remove HNS driver with SMMU enabled (bsc#1140676).
- net: hns: Fix loopback test failed at copper ports (bsc#1140676).
- net: hns: Fix probabilistic memory overwrite when HNS driver initialized (bsc#1140676).
- net: hns: Use NAPI_POLL_WEIGHT for hns driver (bsc#1140676).
- net: hns: fix ICMP6 neighbor solicitation messages discard problem (bsc#1140676).
- net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw() (bsc#1140676).
- net: hns: fix unsigned comparison to less than zero (bsc#1140676).
- net: mvneta: Fix err code path of probe (networking-stable-19_05_31).
- net: mvpp2: Use strscpy to handle stat strings (bsc#1098633).
- net: mvpp2: Use strscpy to handle stat strings (bsc#1098633).
- net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value (networking-stable-19_05_31).
- net: mvpp2: prs: Fix parser range for VID filtering (bsc#1098633).
- net: mvpp2: prs: Fix parser range for VID filtering (bsc#1098633).
- net: mvpp2: prs: Use the correct helpers when removing all VID filters (bsc#1098633).
- net: mvpp2: prs: Use the correct helpers when removing all VID filters (bsc#1098633).
- net: openvswitch: do not free vport if register_netdevice() is failed (networking-stable-19_06_18).
- net: phy: marvell10g: report if the PHY fails to boot firmware (bsc#1119113).
- net: rds: fix memory leak in rds_ib_flush_mr_pool (networking-stable-19_06_09).
- net: seeq: fix crash caused by not set dev.parent (networking-stable-19_05_14).
- net: stmmac: fix reset gpio free missing (networking-stable-19_05_31).
- net: tls, correctly account for copied bytes with multiple sk_msgs (bsc#1109837).
- net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions (networking-stable-19_05_21).
- netfilter: conntrack: fix calculation of next bucket number in early_drop (git-fixes).
- new primitive: vmemdup_user() (jsc#SLE-4712 bsc#1136156).
- nfit/ars: Allow root to busy-poll the ARS state machine (bsc#1140814).
- nfit/ars: Avoid stale ARS results (jsc#SLE-5433).
- nfit/ars: Introduce scrub_flags (jsc#SLE-5433).
- nfp: bpf: fix static check error through tightening shift amount adjustment (bsc#1109837).
- nfp: flower: add rcu locks when accessing netdev for tunnels (bsc#1109837).
- nfs: Do not restrict NFSv4.2 on openSUSE (bsc#1138719).
- nl80211: fix station_info pertid memory leak (bsc#1051510).
- ntp: Allow TAI-UTC offset to be set to zero (bsc#1135642).
- nvme-rdma: fix double freeing of async event data (bsc#1120423).
- nvme-rdma: fix possible double free of controller async event buffer (bsc#1120423).
- nvme: copy MTFA field from identify controller (bsc#1140715).
- nvme: fix memory leak caused by incorrect subsystem free (bsc#1143185).
- nvme: skip nvme_update_disk_info() if the controller is not live (bsc#1128432).
- nvmem: Do not let a NULL cell_id for nvmem_cell_get() crash us (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D (bsc#1051510).
- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated function (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read (bsc#1051510).
- ocfs2: add first lock wait time in locking_state (bsc#1134390).
- ocfs2: add last unlock times in locking_state (bsc#1134390).
- ocfs2: add locking filter debugfs file (bsc#1134390).
- ocfs2: try to reuse extent block in dealloc without meta_alloc (bsc#1128902).
- p54usb: Fix race between disconnect and firmware loading (bsc#1111666).
- packet: Fix error path in packet_init (networking-stable-19_05_14).
- packet: in recvmsg msg_name return at least sizeof sockaddr_ll (git-fixes).
- pci / PM: Use SMART_SUSPEND and LEAVE_SUSPENDED flags for pcie ports (bsc#1142623).
- pci/AER: Use cached AER Capability offset (bsc#1142623).
- pci/IOV: Add flag so platforms can skip VF scanning (jsc#SLE-5803).
- pci/IOV: Factor out sriov_add_vfs() (jsc#SLE-5803).
- pci/P2PDMA: Fix missing check for dma_virt_ops (bsc#1111666).
- pci/P2PDMA: fix the gen_pool_add_virt() failure path (bsc#1103992).
- pci/portdrv: Add #defines for AER and DPC Interrupt Message Number masks (bsc#1142623).
- pci/portdrv: Consolidate comments (bsc#1142623).
- pci/portdrv: Disable port driver in compat mode (bsc#1142623).
- pci/portdrv: Remove pcie_portdrv_err_handler.slot_reset (bsc#1142623).
- pci/portdrv: Support pcie services on subtractive decode bridges (bsc#1142623).
- pci/portdrv: Use conventional Device ID table formatting (bsc#1142623).
- pci: Always allow probing with driver_override (bsc#1051510).
- pci: Correct the buggy backport about AER / DPC pcie stuff (bsc#1142623)
- pci: Disable VF decoding before pcibios_sriov_disable() updates resources (jsc#SLE-5803).
- pci: Do not poll for PME if the device is in D3cold (bsc#1051510).
- pci: PM: Avoid possible suspend-to-idle issue (bsc#1051510).
- pci: PM: Skip devices in D0 for suspend-to-idle (bsc#1051510).
- pci: Return error if cannot probe VF (bsc#1051510).
- pci: hv: Add hv_pci_remove_slots() when we unload the driver (bsc#1142701).
- pci: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (bsc#1142701).
- pci: hv: Fix a memory leak in hv_eject_device_work() (bsc#1142701).
- pci: hv: Fix a use-after-free bug in hv_eject_device_work() (bsc#1142701).
- pci: hv: Fix return value check in hv_pci_assign_slots() (bsc#1142701).
- pci: hv: Remove unused reason for refcount handler (bsc#1142701).
- pci: hv: support reporting serial number as slot information (bsc#1142701).
- pci: portdrv: Restore pci config state on slot reset (bsc#1142623).
- pci: fix IOU hotplug behavior (bsc#1141558)
- pci: rpadlpar: Fix leaked device_node references in add/remove paths (bsc#1051510).
- perf tools: Add Hygon Dhyana support ().
- perf/x86/intel/cstate: Support multi-die/package (jsc#SLE-5454).
- perf/x86/intel/rapl: Cosmetic rename internal variables in response to multi-die/pkg support (jsc#SLE-5454).
- perf/x86/intel/rapl: Support multi-die/package (jsc#SLE-5454).
- perf/x86/intel/uncore: Cosmetic renames in response to multi-die/pkg support (jsc#SLE-5454).
- perf/x86/intel/uncore: Support multi-die/package (jsc#SLE-5454).
- pinctrl/amd: add get_direction handler (bsc#1140463).
- pinctrl/amd: fix gpio irq level in debugfs (bsc#1140463).
- pinctrl/amd: fix masking of GPIO interrupts (bsc#1140463).
- pinctrl/amd: make functions amd_gpio_suspend and amd_gpio_resume static (bsc#1140463).
- pinctrl/amd: poll InterruptEnable bits in amd_gpio_irq_set_type (bsc#1140463).
- pinctrl/amd: poll InterruptEnable bits in enable_irq (bsc#1140463).
- pkey: Indicate old mkvp only if old and current mkvp are different (bsc#1137827 LTC#178090).
- pktgen: do not sleep with the thread lock held (git-fixes).
- platform/chrome: cros_ec_proto: check for NULL transfer function (bsc#1051510).
- platform/mellanox: Add TmFifo driver for Mellanox BlueField Soc (bsc#1136333 jsc#SLE-4994).
- platform/mellanox: Add new ODM system types to mlx-platform (bsc#1112374).
- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to remove flow (bsc#1111666).
- platform/x86: ISST: Add IOCTL to Translate Linux logical CPU to PUNIT CPU number (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select PUNIT MSR interface (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mailbox interface via MSRs (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mailbox interface via pci (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mmio interface (jsc#SLE-5364).
- platform/x86: ISST: Add common API to register and handle ioctls (jsc#SLE-5364).
- platform/x86: ISST: Restore state on resume (jsc#SLE-5364).
- platform/x86: ISST: Store per CPU information (jsc#SLE-5364).
- platform/x86: asus-nb-wmi: Support ALS on the Zenbook UX430UQ (bsc#1051510).
- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi (bsc#1051510).
- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi (bsc#1051510).
- platform/x86: intel_pmc_core: Add ICL platform support (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Add Package cstates residency info (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Avoid a u32 overflow (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Include Reserved IP for LTR (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Mark local function static (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Quirk to ignore XTAL shutdown (jsc#SLE-5226).
- platform/x86: intel_turbo_max_3: Remove restriction for HWP platforms (jsc#SLE-5439).
- platform/x86: mlx-platform: Add ASIC hotplug device configuration (bsc#1112374).
- platform/x86: mlx-platform: Add LED platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add UID LED for the next generation systems (bsc#1112374).
- platform/x86: mlx-platform: Add definitions for new registers (bsc#1112374).
- platform/x86: mlx-platform: Add extra CPLD for next generation systems (bsc#1112374).
- platform/x86: mlx-platform: Add mlx-wdt platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlxreg-fan platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlxreg-io platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add support for fan capability registers (bsc#1112374).
- platform/x86: mlx-platform: Add support for fan direction register (bsc#1112374).
- platform/x86: mlx-platform: Add support for new VMOD0007 board name (bsc#1112374).
- platform/x86: mlx-platform: Add support for tachometer speed register (bsc#1112374).
- platform/x86: mlx-platform: Allow mlxreg-io driver activation for more systems (bsc#1112374).
- platform/x86: mlx-platform: Allow mlxreg-io driver activation for new systems (bsc#1112374).
- platform/x86: mlx-platform: Change mlxreg-io configuration for MSN274x systems (bsc#1112374).
- platform/x86: mlx-platform: Convert to use SPDX identifier (bsc#1112374).
- platform/x86: mlx-platform: Fix LED configuration (bsc#1112374).
- platform/x86: mlx-platform: Fix access mode for fan_dir attribute (bsc#1112374).
- platform/x86: mlx-platform: Fix copy-paste error in mlxplat_init() (bsc#1112374).
- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device registration (bsc#1051510).
- platform/x86: mlx-platform: Fix tachometer registers (bsc#1112374).
- platform/x86: mlx-platform: Remove unused define (bsc#1112374).
- platform/x86: mlx-platform: Rename new systems product names (bsc#1112374).
- platform/x86: pmc_atom: Add CB4063 Beckhoff Automation board to critclk_systems DMI table (bsc#1051510).
- platform_data/mlxreg: Add capability field to core platform data (bsc#1112374).
- platform_data/mlxreg: Document fixes for core platform data (bsc#1112374).
- platform_data/mlxreg: additions for Mellanox watchdog driver (bsc#1112374).
- pm/core: Propagate dev-&gt;power.wakeup_path when no callbacks (bsc#1051510).
- pm: ACPI/pci: Resume all devices during hibernation (bsc#1111666).
- power: supply: max14656: fix potential use-before-alloc (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- powercap/intel_rapl: Simplify rapl_find_package() (jsc#SLE-5454).
- powercap/intel_rapl: Support multi-die/package (jsc#SLE-5454).
- powercap/intel_rapl: Update RAPL domain name and debug messages (jsc#SLE-5454).
- powerpc/64s: Remove POWER9 DD1 support (bsc#1055117, LTC#159753, git-fixes).
- powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (bsc#1138374, LTC#178199).
- powerpc/crypto: Use cheaper random numbers for crc-vpmsum self-test ().
- powerpc/mm/drconf: Use NUMA_NO_NODE on failures instead of node 0 (bsc#1140322 LTC#176270).
- powerpc/mm/hugetlb: Update huge_ptep_set_access_flags to call __ptep_set_access_flags directly (bsc#1055117).
- powerpc/mm/radix: Change pte relax sequence to handle nest MMU hang (bsc#1055117).
- powerpc/mm/radix: Move function from radix.h to pgtable-radix.c (bsc#1055117).
- powerpc/mm: Change function prototype (bsc#1055117).
- powerpc/mm: Consolidate numa_enable check and min_common_depth check (bsc#1140322 LTC#176270).
- powerpc/mm: Fix node look up with numa=off boot (bsc#1140322 LTC#176270).
- powerpc/papr_scm: Force a scm-unbind if initial scm-bind fails (bsc#1140322 LTC#176270).
- powerpc/papr_scm: Update drc_pmem_unbind() to use H_SCM_UNBIND_ALL (bsc#1140322 LTC#176270).
- powerpc/perf: Add PM_LD_MISS_L1 and PM_BR_2PATH to power9 event list (bsc#1137728, LTC#178106).
- powerpc/perf: Add POWER9 alternate PM_RUN_CYC and PM_RUN_INST_CMPL events (bsc#1137728, LTC#178106).
- powerpc/pseries/mobility: prevent cpu hotplug during DT update (bsc#1138374, LTC#178199).
- powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (bsc#1138374, LTC#178199).
- powerpc/pseries: Fix oops in hotplug memory notifier (bsc#1138375, LTC#178204).
- powerpc/pseries: Update SCM hcall op-codes in hvcall.h (bsc#1140322 LTC#176270).
- powerpc/rtas: retry when cpu offline races with suspend/migration (bsc#1140428, LTC#178808).
- powerpc/watchpoint: Restore NV GPRs while returning from exception (bsc#1140945 bsc#1141401 bsc#1141402 bsc#1141452 bsc#1141453 bsc#1141454 LTC#178983 LTC#179191 LTC#179192 LTC#179193 LTC#179194 LTC#179195).
- ppc64le: enable CONFIG_PPC_DT_CPU_FTRS (jsc#SLE-7159).
- ppc: Convert mmu context allocation to new IDA API (bsc#1139619 LTC#178538).
- ppp: deflate: Fix possible crash in deflate_init (networking-stable-19_05_21).
- ppp: mppe: Add softdep to arc4 (bsc#1088047).
- ptrace: Fix -&gt;ptracer_cred handling for PTRACE_TRACEME (git-fixes).
- ptrace: restore smp_rmb() in __ptrace_may_access() (git-fixes).
- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qed: Fix -Wmaybe-uninitialized false positive (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix build error without CONFIG_DEVLINK (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index (jsc#SLE-4693 bsc#1136462).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- qmi_wwan: add network device usage statistics for qmimux devices (bsc#1051510).
- qmi_wwan: add support for QMAP padding in the RX path (bsc#1051510).
- qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode (bsc#1051510).
- qmi_wwan: extend permitted QMAP mux_id value range (bsc#1051510).
- rapidio: fix a NULL pointer dereference when create_workqueue() fails (bsc#1051510).
- ras/cec: Convert the timer callback to a workqueue (bsc#1114279).
- ras/cec: Fix binary search function (bsc#1114279).
- rbd: do not assert on writes to snapshots (bsc#1137985 bsc#1138681).
- rdma/cxgb4: Do not expose DMA addresses (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Use sizeof() notation (bsc#1136348 jsc#SLE-4684).
- rdma/ipoib: Allow user space differentiate between valid dev_port (bsc#1103992).
- rdma/mlx5: Do not allow the user to write to the clock page (bsc#1103991).
- rdma/mlx5: Initialize roce port info before multiport master init (bsc#1103991).
- rdma/mlx5: Use rdma_user_map_io for mapping BAR pages (bsc#1103992).
- rdma/odp: Fix missed unlock in non-blocking invalidate_start (bsc#1103992).
- rdma/srp: Accept again source addresses that do not have a port number (bsc#1103992).
- rdma/srp: Document srp_parse_in() arguments (bsc#1103992 ).
- rdma/uverbs: check for allocation failure in uapi_add_elm() (bsc#1103992).
- rds: ib: fix 'passing zero to ERR_PTR()' warning (git-fixes).
- regulator: s2mps11: Fix buck7 and buck8 wrong voltages (bsc#1051510).
- rpm/package-descriptions: fix typo in kernel-azure
- rpm/post.sh: correct typo in err msg (bsc#1137625)
- rtlwifi: rtl8192cu: fix error handle when usb probe failed (bsc#1111666).
- rtnetlink: always put IFLA_LINK for links with a link-netnsid (networking-stable-19_05_21).
- s390/airq: provide cacheline aligned ivs (jsc#SLE-5789 bsc#1134730 LTC#173388).
- s390/airq: recognize directed interrupts (jsc#SLE-5789 bsc#1134730 LTC#173388).
- s390/airq: use DMA memory for adapter interrupts (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cio: add basic protected virtualization support (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cio: introduce DMA pools to cio (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cpu_mf: add store cpu counter multiple instruction support (jsc#SLE-6904).
- s390/cpu_mf: move struct cpu_cf_events and per-CPU variable to header file (jsc#SLE-6904).
- s390/cpu_mf: replace stcctm5() with the stcctm() function (jsc#SLE-6904).
- s390/cpum_cf: Add minimal in-kernel interface for counter measurements (jsc#SLE-6904).
- s390/cpum_cf: Add support for CPU-MF SVN 6 (jsc#SLE-6904 ).
- s390/cpum_cf: add ctr_stcctm() function (jsc#SLE-6904 ).
- s390/cpum_cf: introduce kernel_cpumcf_alert() to obtain measurement alerts (jsc#SLE-6904).
- s390/cpum_cf: introduce kernel_cpumcf_avail() function (jsc#SLE-6904).
- s390/cpum_cf: move counter set controls to a new header file (jsc#SLE-6904).
- s390/cpum_cf: prepare for in-kernel counter measurements (jsc#SLE-6904).
- s390/cpum_cf: rename per-CPU counter facility structure and variables (jsc#SLE-6904).
- s390/cpum_cf_diag: Add support for CPU-MF SVN 6 (jsc#SLE-6904 ).
- s390/cpum_cf_diag: Add support for s390 counter facility diagnostic trace (jsc#SLE-6904).
- s390/cpumf: Add extended counter set definitions for model 8561 and 8562 (bsc#1142052 LTC#179320).
- s390/cpumf: Fix warning from check_processor_id (jsc#SLE-6904 ).
- s390/dasd: fix using offset into zero size array error (bsc#1051510).
- s390/dma: provide proper ARCH_ZONE_DMA_BITS value (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/ism: move oddities of device IO to wrapper function (jsc#SLE-5802 bsc#1134738 LTC#173387).
- s390/jump_label: Use 'jdd' constraint on gcc9 (bsc#1138589).
- s390/mm: force swiotlb for protected virtualization (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/pci: add parameter to disable usage of MIO instructions (jsc#SLE-5802 bsc#1134738 LTC#173387).
- s390/pci: add parameter to force floating irqs (jsc#SLE-5789 bsc#1134730 LTC#173388).
- s390/pci: clarify interrupt vector usage (jsc#SLE-5789 bsc#1134730 LTC#173388).
- s390/pci: fix assignment of bus resources (jsc#SLE-5802 bsc#1134738 LTC#173387).
- s390/pci: fix struct definition for set pci function (jsc#SLE-5802 bsc#1134738 LTC#173387).
- s390/pci: gather statistics for floating vs directed irqs (jsc#SLE-5789 bsc#1134730 LTC#173388).
- s390/pci: improve bar check (jsc#SLE-5803).
- s390/pci: map IOV resources (jsc#SLE-5803).
- s390/pci: mark command line parser data __initdata (jsc#SLE-5789 bsc#1134730 LTC#173388).
- s390/pci: move everything irq related to pci_irq.c (jsc#SLE-5789 bsc#1134730 LTC#173388).
- s390/pci: move io address mapping code to pci_insn.c (jsc#SLE-5802 bsc#1134738 LTC#173387).
- s390/pci: provide support for CPU directed interrupts (jsc#SLE-5789 bsc#1134730 LTC#173388).
- s390/pci: provide support for MIO instructions (jsc#SLE-5802 bsc#1134738 LTC#173387).
- s390/pci: remove stale rc (jsc#SLE-5789 bsc#1134730 LTC#173388).
- s390/pci: remove unused define (jsc#SLE-5789 bsc#1134730 LTC#173388).
- s390/pci: skip VF scanning (jsc#SLE-5803).
- s390/protvirt: add memory sharing for diag 308 set/store (jsc#SLE-5759 bsc#1135153 LTC#173151).
- s390/protvirt: block kernel command line alteration (jsc#SLE-5759 bsc#1135153 LTC#173151).
- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142119 LTC#179331).
- s390/qeth: be drop monitor friendly (bsc#1142115 LTC#179337).
- s390/qeth: be drop monitor friendly (bsc#1142220 LTC#179335).
- s390/qeth: fix VLAN attribute in bridge_hostnotify udev event (bsc#1051510).
- s390/qeth: fix race when initializing the IP address table (bsc#1051510).
- s390/sclp: detect DIRQ facility (jsc#SLE-5789 bsc#1134730 LTC#173388).
- s390/setup: fix early warning messages (bsc#1051510).
- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759 bsc#1135153 LTC#173151).
- s390/virtio: handle find on invalid queue gracefully (bsc#1051510).
- s390/vtime: steal time exponential moving average (bsc#1119222).
- s390/zcrypt: Fix wrong dispatching for control domain CPRBs (bsc#1137811 LTC#178088).
- s390: add alignment hints to vector load and store (jsc#SLE-6907 LTC#175887).
- s390: enable processes for mio instructions (jsc#SLE-5802 bsc#1134738 LTC#173387).
- s390: remove the unused dma_capable helper (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390: report new CPU capabilities (jsc#SLE-6907 LTC#175887).
- s390: revert s390-setup-fix-early-warning-messages (bsc#1140948).
- s390: show statistics for MSI IRQs (jsc#SLE-5789 bsc#1134730 LTC#173388).
- sbitmap: fix improper use of smp_mb__before_atomic() (bsc#1140658).
- sched/topology: Improve load balancing on AMD EPYC (bsc#1137366).
- scripts/git_sort/git_sort.py: Add mmots tree.
- scripts/git_sort/git_sort.py: add djbw/nvdimm nvdimm-pending.
- scripts/git_sort/git_sort.py: add nvdimm/libnvdimm-fixes
- scripts/git_sort/git_sort.py: drop old scsi branches
- scsi/fc: kABI fixes for new ELS_FPIN definition (bsc#1136217,jsc#SLE-4722).
- scsi: aacraid: Mark expected switch fall-through (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: Mark expected switch fall-throughs (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: change event_wait to a completion (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: change wait_sem to a completion (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: clean up some indentation and formatting issues (jsc#SLE-4710 bsc#1136161).
- scsi: be2iscsi: be_iscsi: Mark expected switch fall-through (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: be_main: Mark expected switch fall-through (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: fix spelling mistake 'Retreiving' -&gt; 'Retrieving' (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: lpfc: fix typo (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: remove unused variable dmsg (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: switch to generic DMA API (jsc#SLE-4721 bsc#1136264).
- scsi: core: add new RDAC LENOVO/DE_Series device (bsc#1132390).
- scsi: csiostor: Remove set but not used variable 'pln' (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: csio_wr: mark expected switch fall-through (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: drop serial_number usage (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix calls to dma_set_mask_and_coherent() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix incorrect dma device in case of vport (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix missing data copy in csio_scsi_err_handler() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: no need to check return value of debugfs_create functions (jsc#SLE-4679 bsc#1136343).
- scsi: cxgb4i: add wait_for_completion() (jsc#SLE-4678 bsc#1136342).
- scsi: cxgbi: KABI: fix handle completion etc (jsc#SLE-4678 bsc#1136342).
- scsi: cxgbi: remove redundant __kfree_skb call on skb and free cst-&gt;atid (jsc#SLE-4678 bsc#1136342).
- scsi: fc: add FPIN ELS definition (bsc#1136217,jsc#SLE-4722).
- scsi: hpsa: Use vmemdup_user to replace the open code (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: bump driver version (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: check for lv removal (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: clean up two indentation issues (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct device id issues (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct device resets (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct ioaccel2 chaining (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct simple mode (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: fix an uninitialized read and dereference of pointer dev (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: mark expected switch fall-throughs (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: remove timeout from TURs (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: switch to generic DMA API (jsc#SLE-4712 bsc#1136156).
- scsi: ibmvfc: fix WARN_ON during event pool release (bsc#1137458 LTC#178093).
- scsi: lpfc: Add loopback testing to trunking mode (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Annotate switch/case fall-through (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Cancel queued work for an IO when processing a received ABTS (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Change smp_processor_id() into raw_smp_processor_id() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Convert bootstrap mbx polling from msleep to udelay (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Coordinate adapter error handling with offline handling (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct __lpfc_sli_issue_iocb_s4 lockdep check (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct boot bios information to FDMI registration (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct localport timeout duration error (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct nvmet buffer free race condition (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Declare local functions static (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Enhance 6072 log string (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix BFS crash with DIX enabled (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix FDMI fc4type for nvme support (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix FDMI manufacturer attribute value (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix HDMI2 registration string for symbolic name (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix PT2PT PLOGI collison stopping discovery (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix a recently introduced compiler warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix alloc context on oas lun creations (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix build error (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix deadlock due to nested hbalock call (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix driver crash in target reset handler (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix duplicate log message numbers (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix error code if kcalloc() fails (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix error codes in lpfc_sli4_pci_mem_setup() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix fc4type information for FDMI (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix fcp_rsp_len checking on lun reset (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix handling of trunk links state reporting (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix hardlockup in scsi_cmd_iocb_cmpl (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix incorrect logical link speed on trunks when links down (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix indentation and balance braces (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix io lost on host resets (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix kernel warnings related to smp_processor_id() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix link speed reporting for 4-link trunk (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix location of SCSI ktime counters (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix lpfc_nvmet_mrq attribute handling when 0 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix mailbox hang on adapter init (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix memory leak in abnormal exit path from lpfc_eq_create (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix missing wakeups on abort threads (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet async receive buffer replenishment (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet handling of first burst cmd (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet handling of received ABTS for unmapped frames (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet target abort cmd matching (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix oops when driver is loaded with 1 interrupt vector (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix poor use of hardware queues if fewer irq vectors (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix protocol support on G6 and G7 adapters (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix use-after-free mailbox cmd completion (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fixup eq_clr_intr references (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Make lpfc_sli4_oas_verify static (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Move trunk_errmsg[] from a header file into a .c file (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Prevent 'use after free' memory overwrite in nvmet LS handling (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Reduce memory footprint for lpfc_queue (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove set but not used variable 'phys_id' (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove set-but-not-used variables (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove unused functions (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Resolve inconsistent check of hdwq in lpfc_scsi_cmd_iocb_cmpl (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Resolve irq-unsafe lockdep heirarchy warning in lpfc_io_free (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Revert message logging on unsupported topology (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Revise message when stuck due to unresponsive adapter (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Rework misleading nvme not supported in firmware message (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Separate CQ processing for nvmet_fc upcalls (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Specify node affinity for queue memory allocation (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Stop adapter if pci errors detected (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update Copyright in driver version (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update lpfc version to 12.2.0.1 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update lpfc version to 12.2.0.3 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: add support for posting FC events on FPIN reception (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: avoid uninitialized variable warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix 32-bit format string warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix a handful of indentation issues (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix calls to dma_set_mask_and_coherent() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix unused variable warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: resolve static checker warning in lpfc_sli4_hba_unset (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: use dma_set_mask_and_coherent (bsc#1136217,jsc#SLE-4722).
- scsi: megaraid_sas: Add support for DEVICE_LIST DCMD in driver (bsc#1136271).
- scsi: megaraid_sas: Retry reads of outbound_intr_status reg (bsc#1136271).
- scsi: megaraid_sas: Rework code to get PD and LD list (bsc#1136271).
- scsi: megaraid_sas: Rework device add code in AEN path (bsc#1136271).
- scsi: megaraid_sas: Update structures for HOST_DEVICE_LIST DCMD (bsc#1136271).
- scsi: megaraid_sas: correct an info message (bsc#1136271).
- scsi: megaraid_sas: driver version update (bsc#1136271).
- scsi: mpt3sas: Add Atomic RequestDescriptor support on Aero (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add flag high_iops_queues (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add missing breaks in switch statements (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add support for ATLAS pcie switch (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add support for NVMe Switch Adapter (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Affinity high iops queues IRQs to local node (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Enable interrupt coalescing on high iops (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Fix kernel panic during expander reset (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Fix typo in request_desript_type (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Improve the threshold value and introduce module param (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Introduce perf_mode module parameter (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Irq poll to avoid CPU hard lockups (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Load balance to improve performance and avoid soft lockups (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Rename mpi endpoint device ID macro (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update driver version to 27.102.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update driver version to 29.100.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update mpt3sas driver version to 28.100.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Use high iops queues under some circumstances (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: change _base_get_msix_index prototype (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: fix indentation issue (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: function pointers of request descriptor (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: save and use MSI-X index for posting RD (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: simplify interrupt handler (bsc#1125703,jsc#SLE-4717).
- scsi: qedf: Add LBA to underrun debug messages (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add a flag to help debugging io_req which could not be cleaned (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add additional checks for io_req-&gt;sc_cmd validity (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add comment to display logging levels (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add driver state to 'driver_stats' debugfs node (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload check (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add missing return in qedf_scsi_done() (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add port_id for fcport into initiate_cleanup debug message (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add return value to log message if scsi_add_host fails (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Change MSI-X load error message (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check both the FCF and fabric ID before servicing clear virtual link (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check for fcoe_libfc_config failure (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check for tm_flags instead of cmd_type during cleanup (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check the return value of start_xmit (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Cleanup rrq_work after QEDF_CMD_OUTSTANDING is cleared (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Correctly handle refcounting of rdata (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Do not queue anything if upload is in progress (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Do not send ABTS for under run scenario (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Fix lport may be used uninitialized warning (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Log message if scsi_add_host fails (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Modify flush routine to handle all I/Os and TMF (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Print fcport information on wait for upload timeout (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Print scsi_cmd backpointer in good completion path if the command is still being used (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Remove set but not used variable 'fr_len' (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Update the driver version to 8.37.25.19 (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Update the driver version to 8.37.25.20 (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Wait for upload and link down processing during soft ctx reset (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: fc_rport_priv reference counting fixes (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: remove memset/memcpy to nfunc and use func instead (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: remove set but not used variables (bsc#1136467 jsc#SLE-4694).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Fix spelling mistake 'OUSTANDING' -&gt; 'OUTSTANDING' (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: add module param to set ping packet size (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev' (jsc#SLE-4693 bsc#1136462).
- scsi: qla2xxx: Fix FC-AL connection target discovery (bsc#1094555).
- scsi: qla2xxx: Fix N2N target discovery with Local loop (bsc#1094555).
- scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() (bsc#1140727).
- scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines (bsc#1140728).
- scsi: qla2xxx: do not crash on uninitialized pool list (boo#1138874).
- scsi: fix multipath hang (bsc#1119532).
- scsi: scsi_transport_fc: Add FPIN fc event codes (bsc#1136217,jsc#SLE-4722).
- scsi: scsi_transport_fc: refactor event posting routines (bsc#1136217,jsc#SLE-4722).
- scsi: target/iblock: Fix overrun in WRITE SAME emulation (bsc#1140424).
- scsi: target/iblock: Fix overrun in WRITE SAME emulation (bsc#1140424).
- scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (bsc#1135296).
- scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove (bsc#1051510).
- scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host (bsc#1051510).
- scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices (bsc#1051510).
- scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) (bsc#1051510).
- sctp: Free cookie before we memdup a new one (networking-stable-19_06_18).
- sctp: silence warns on sctp_stream_init allocations (bsc#1083710).
- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- serial: uartps: Do not add a trailing semicolon to macro (bsc#1051510).
- serial: uartps: Fix long line over 80 chars (bsc#1051510).
- serial: uartps: Fix multiple line dereference (bsc#1051510).
- serial: uartps: Remove useless return from cdns_uart_poll_put_char (bsc#1051510).
- signal/ptrace: Do not leak unitialized kernel memory with PTRACE_PEEK_SIGINFO (git-fixes).
- smb3: Fix endian warning (bsc#1137884).
- soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher (bsc#1051510).
- soc: rockchip: Set the proper PWM for rk3288 (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in spi_unregister_master (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: spi-fsl-spi: call spi_finalize_current_message() at the end (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- staging: comedi: amplc_pci230: fix null pointer deref on interrupt (bsc#1051510).
- staging: comedi: dt282x: fix a null pointer deref on interrupt (bsc#1051510).
- staging: comedi: ni_mio_common: Fix divide-by-zero for DIO cmdtest (bsc#1051510).
- staging: rtl8712: reduce stack usage, again (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg (networking-stable-19_06_18).
- supported.conf: added mlxbf_tmfifo (bsc#1136333 jsc#SLE-4994)
- svm: Add warning message for AVIC IPI invalid target (bsc#1140133).
- svm: Fix AVIC incomplete IPI emulation (bsc#1140133).
- sysctl: handle overflow in proc_get_long (bsc#1051510).
- tcp: be more careful in tcp_fragment() (bsc#1139751).
- tcp: fix tcp_set_congestion_control() use from bpf hook (bsc#1109837).
- tcp: reduce tcp_fastretrans_alert() verbosity (git-fixes).
- team: Always enable vlan tx offload (bsc#1051510).
- thermal/x86_pkg_temp_thermal: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).
- thermal/x86_pkg_temp_thermal: Support multi-die/package (jsc#SLE-5454).
- thermal: rcar_gen3_thermal: disable interrupt in .remove (bsc#1051510).
- tmpfs: fix link accounting when a tmpfile is linked in (bsc#1051510).
- tmpfs: fix uninitialized return value in shmem_link (bsc#1051510).
- tools/cpupower: Add Hygon Dhyana support ().
- tools/power/x86: A tool to validate Intel Speed Select commands (jsc#SLE-5364).
- tools: bpftool: Fix json dump crash on powerpc (bsc#1109837).
- tools: bpftool: fix infinite loop in map create (bsc#1109837).
- tools: bpftool: use correct argument in cgroup errors (bsc#1109837).
- topology: Create core_cpus and die_cpus sysfs attributes (jsc#SLE-5454).
- topology: Create package_cpus sysfs attribute (jsc#SLE-5454).
- tracing/snapshot: Resize spare buffer if size changed (bsc#1140726).
- tty: max310x: Fix external crystal register setup (bsc#1051510).
- tty: rocket: fix incorrect forward declaration of 'rp_init()' (bsc#1051510).
- tty: serial: cpm_uart - fix init when SMC is relocated (bsc#1051510).
- tty: serial_core: Set port active bit in uart_port_activate (bsc#1051510).
- tuntap: synchronize through tfiles array instead of tun-&gt;numqueues (networking-stable-19_05_14).
- typec: tcpm: fix compiler warning about stupid things (git-fixes).
- usb: Fix chipmunk-like voice when using Logitech C270 for recording audio (bsc#1051510).
- usb: chipidea: udc: workaround for endpoint conflict issue (bsc#1135642).
- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression) (bsc#1135642).
- usb: gadget: ether: Fix race between gether_disconnect and rx_submit (bsc#1051510).
- usb: gadget: fusb300_udc: Fix memory leak of fusb300-&gt;ep[i] (bsc#1051510).
- usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC (bsc#1051510).
- usb: pci-quirks: Correct AMD PLL quirk detection (bsc#1051510).
- usb: serial: fix initial-termios handling (bsc#1135642).
- usb: serial: ftdi_sio: add ID for isodebug v1 (bsc#1051510).
- usb: serial: option: add Telit 0x1260 and 0x1261 compositions (bsc#1051510).
- usb: serial: option: add support for GosunCn ME3630 RNDIS mode (bsc#1051510).
- usb: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode (bsc#1051510).
- usb: serial: pl2303: add Allied Telesis VT-Kit3 (bsc#1051510).
- usb: serial: pl2303: fix tranceiver suspend mode (bsc#1135642).
- usb: usb-storage: Add new ID to ums-realtek (bsc#1051510).
- usb: xhci: avoid null pointer deref when bos field is NULL (bsc#1135642).
- usbnet: ipheth: fix racing condition (bsc#1051510).
- vfio: ccw: only free cp on final interrupt (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference (bsc#1051510).
- video: imsttfb: fix potential NULL pointer dereferences (bsc#1051510).
- virtio/s390: DMA support for virtio-ccw (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: add indirection to indicators access (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: make airq summary indicators DMA (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use DMA memory for ccw I/O and classic notifiers (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use cacheline aligned airq bit vectors (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use vring_create_virtqueue (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio_console: initialize vtermno value for ports (bsc#1051510).
- vlan: disable SIOCSHWTSTAMP in container (bsc#1051510).
- vmci: Fix integer overflow in VMCI handle arrays (bsc#1051510).
- vrf: sit mtu should not be updated when vrf netdev is the link (networking-stable-19_05_14).
- vsock/virtio: free packets during the socket release (networking-stable-19_05_21).
- vsock/virtio: set SOCK_DONE on peer shutdown (networking-stable-19_06_18).
- watchdog: imx2_wdt: Fix set_timeout for big timeout values (bsc#1051510).
- wil6210: drop old event after wmi_call timeout (bsc#1111666).
- wil6210: fix potential out-of-bounds read (bsc#1051510).
- wil6210: fix spurious interrupts in 3-msi (bsc#1111666).
- x86, mm: fix fast GUP with hyper-based TLB flushing (VM Functionality, bsc#1140903).
- x86/CPU/AMD: Do not force the CPB cap when running under a hypervisor (bsc#1114279).
- x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die processors ().
- x86/CPU: Add Icelake model number (jsc#SLE-5226).
- x86/alternative: Init ideal_nops for Hygon Dhyana ().
- x86/amd_nb: Add support for Raven Ridge CPUs ().
- x86/amd_nb: Check vendor in AMD-only functions ().
- x86/apic: Add Hygon Dhyana support ().
- x86/bugs: Add Hygon Dhyana to the respective mitigation machinery ().
- x86/cpu/mtrr: Support TOP_MEM2 and get MTRR number ().
- x86/cpu: Create Hygon Dhyana architecture support file ().
- x86/cpu: Get cache info and setup cache cpumap for Hygon Dhyana ().
- x86/cpufeatures: Carve out CQM features retrieval (jsc#SLE-5382).
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (jsc#SLE-5382). This changes definitions of some bits, but they are intended to be used only by the core, so hopefully, no KMP uses the definitions.
- x86/cpufeatures: Enumerate the new AVX512 BFLOAT16 instructions (jsc#SLE-5382).
- x86/cpufeatures: Enumerate user wait instructions (jsc#SLE-5187).
- x86/events: Add Hygon Dhyana support to PMU infrastructure ().
- x86/kvm: Add Hygon Dhyana support to kvm ().
- x86/mce: Add Hygon Dhyana support to the MCA infrastructure ().
- x86/mce: Do not disable MCA banks when offlining a CPU on AMD (). This feature was requested for SLE15 but aws reverted in packaging and master.
- x86/mce: Fix machine_check_poll() tests for error types (bsc#1114279).
- x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback (bsc#1114279).
- x86/microcode: Fix microcode hotplug state (bsc#1114279).
- x86/microcode: Fix the ancient deprecated microcode loading method (bsc#1114279).
- x86/mm/mem_encrypt: Disable all instrumentation for early SME setup (bsc#1114279).
- x86/pci, x86/amd_nb: Add Hygon Dhyana support to pci and northbridge ().
- x86/smpboot: Do not use BSP INIT delay and MWAIT to idle on Dhyana ().
- x86/smpboot: Rename match_die() to match_pkg() (jsc#SLE-5454).
- x86/speculation/mds: Revert CPU buffer clear on double fault exit (bsc#1114279).
- x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).
- x86/topology: Create topology_max_die_per_package() (jsc#SLE-5454).
- x86/topology: Define topology_die_id() (jsc#SLE-5454).
- x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).
- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- x86/umwait: Add sysfs interface to control umwait C0.2 state (jsc#SLE-5187).
- x86/umwait: Add sysfs interface to control umwait maximum time (jsc#SLE-5187).
- x86/umwait: Initialize umwait control values (jsc#SLE-5187).
- x86/xen: Add Hygon Dhyana support to Xen ().
- xdp: check device pointer before clearing (bsc#1109837).
- xdp: fix possible cq entry leak (bsc#1109837).
- xdp: fix race on generic receive path (bsc#1109837).
- xdp: hold device for umem regardless of zero-copy mode (bsc#1109837).
- xen: let alloc_xenballooned_pages() fail if not enough memory free (bsc#1142450 XSA-300).
- xfs: do not overflow xattr listent buffer (bsc#1143105).
- xprtrdma: Fix use-after-free in rpcrdma_post_recvs (bsc#1103992 ).
- xsk: Properly terminate assignment in xskq_produce_flush_desc (bsc#1109837).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-07"/>
	<updated date="2019-08-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083710">SUSE bug 1083710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088047">SUSE bug 1088047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094555">SUSE bug 1094555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098633">SUSE bug 1098633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106383">SUSE bug 1106383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119222">SUSE bug 1119222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119532">SUSE bug 1119532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120423">SUSE bug 1120423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123080">SUSE bug 1123080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125703">SUSE bug 1125703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127034">SUSE bug 1127034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127315">SUSE bug 1127315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128432">SUSE bug 1128432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128902">SUSE bug 1128902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130836">SUSE bug 1130836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132390">SUSE bug 1132390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133401">SUSE bug 1133401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133738">SUSE bug 1133738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134097">SUSE bug 1134097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134390">SUSE bug 1134390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134395">SUSE bug 1134395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134399">SUSE bug 1134399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134730">SUSE bug 1134730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134738">SUSE bug 1134738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135153">SUSE bug 1135153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135296">SUSE bug 1135296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135335">SUSE bug 1135335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135556">SUSE bug 1135556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135897">SUSE bug 1135897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136156">SUSE bug 1136156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136157">SUSE bug 1136157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136161">SUSE bug 1136161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136217">SUSE bug 1136217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136264">SUSE bug 1136264</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136271">SUSE bug 1136271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136333">SUSE bug 1136333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136342">SUSE bug 1136342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136343">SUSE bug 1136343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136345">SUSE bug 1136345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136348">SUSE bug 1136348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136462">SUSE bug 1136462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136467">SUSE bug 1136467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137103">SUSE bug 1137103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137194">SUSE bug 1137194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137224">SUSE bug 1137224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137366">SUSE bug 1137366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137429">SUSE bug 1137429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137458">SUSE bug 1137458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137534">SUSE bug 1137534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137535">SUSE bug 1137535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137584">SUSE bug 1137584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137586">SUSE bug 1137586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137609">SUSE bug 1137609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137625">SUSE bug 1137625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137728">SUSE bug 1137728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137811">SUSE bug 1137811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137827">SUSE bug 1137827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137884">SUSE bug 1137884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137985">SUSE bug 1137985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138263">SUSE bug 1138263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138291">SUSE bug 1138291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138293">SUSE bug 1138293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138336">SUSE bug 1138336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138374">SUSE bug 1138374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138375">SUSE bug 1138375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138589">SUSE bug 1138589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138681">SUSE bug 1138681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138719">SUSE bug 1138719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138732">SUSE bug 1138732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138874">SUSE bug 1138874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138879">SUSE bug 1138879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139358">SUSE bug 1139358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139619">SUSE bug 1139619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139712">SUSE bug 1139712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139751">SUSE bug 1139751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139771">SUSE bug 1139771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139865">SUSE bug 1139865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140133">SUSE bug 1140133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140139">SUSE bug 1140139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140228">SUSE bug 1140228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140322">SUSE bug 1140322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140328">SUSE bug 1140328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140405">SUSE bug 1140405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140424">SUSE bug 1140424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140428">SUSE bug 1140428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140454">SUSE bug 1140454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140463">SUSE bug 1140463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140559">SUSE bug 1140559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140575">SUSE bug 1140575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140577">SUSE bug 1140577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140637">SUSE bug 1140637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140652">SUSE bug 1140652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140658">SUSE bug 1140658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140676">SUSE bug 1140676</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140715">SUSE bug 1140715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140719">SUSE bug 1140719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140726">SUSE bug 1140726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140727">SUSE bug 1140727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140728">SUSE bug 1140728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140814">SUSE bug 1140814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140887">SUSE bug 1140887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140888">SUSE bug 1140888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140889">SUSE bug 1140889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140891">SUSE bug 1140891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140893">SUSE bug 1140893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140903">SUSE bug 1140903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140945">SUSE bug 1140945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140954">SUSE bug 1140954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140955">SUSE bug 1140955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140956">SUSE bug 1140956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140957">SUSE bug 1140957</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140958">SUSE bug 1140958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140959">SUSE bug 1140959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140960">SUSE bug 1140960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140961">SUSE bug 1140961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140962">SUSE bug 1140962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140964">SUSE bug 1140964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140971">SUSE bug 1140971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140972">SUSE bug 1140972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140992">SUSE bug 1140992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141312">SUSE bug 1141312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141401">SUSE bug 1141401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141402">SUSE bug 1141402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141452">SUSE bug 1141452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141453">SUSE bug 1141453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141454">SUSE bug 1141454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141478">SUSE bug 1141478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141558">SUSE bug 1141558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142023">SUSE bug 1142023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142052">SUSE bug 1142052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142083">SUSE bug 1142083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142112">SUSE bug 1142112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142115">SUSE bug 1142115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142119">SUSE bug 1142119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142220">SUSE bug 1142220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142221">SUSE bug 1142221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142265">SUSE bug 1142265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142350">SUSE bug 1142350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142351">SUSE bug 1142351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142354">SUSE bug 1142354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142359">SUSE bug 1142359</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142450">SUSE bug 1142450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142623">SUSE bug 1142623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142673">SUSE bug 1142673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142701">SUSE bug 1142701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142868">SUSE bug 1142868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143003">SUSE bug 1143003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143105">SUSE bug 1143105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143185">SUSE bug 1143185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143189">SUSE bug 1143189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143191">SUSE bug 1143191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143209">SUSE bug 1143209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143507">SUSE bug 1143507</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16871/">CVE-2018-16871</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-20836/">CVE-2018-20836</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20855/">CVE-2018-20855</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10638/">CVE-2019-10638</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10639/">CVE-2019-10639</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1125/">CVE-2019-1125</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11478/">CVE-2019-11478</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11599/">CVE-2019-11599</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11810/">CVE-2019-11810</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12614/">CVE-2019-12614</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-12817/">CVE-2019-12817</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12818/">CVE-2019-12818</cve>
	<cve impact="low" cvss3="3.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12819/">CVE-2019-12819</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13233/">CVE-2019-13233</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13631/">CVE-2019-13631</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13648/">CVE-2019-13648</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14283/">CVE-2019-14283</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14284/">CVE-2019-14284</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498012" comment="kernel-azure-4.12.14-8.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498013" comment="kernel-azure-base-4.12.14-8.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498014" comment="kernel-azure-devel-4.12.14-8.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498015" comment="kernel-devel-azure-4.12.14-8.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498016" comment="kernel-source-azure-4.12.14-8.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498017" comment="kernel-syms-azure-4.12.14-8.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138851" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1047238" ref_url="https://bugzilla.suse.com/1047238" source="BUGZILLA"/>
		<reference ref_id="1050911" ref_url="https://bugzilla.suse.com/1050911" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1054914" ref_url="https://bugzilla.suse.com/1054914" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1056686" ref_url="https://bugzilla.suse.com/1056686" source="BUGZILLA"/>
		<reference ref_id="1060662" ref_url="https://bugzilla.suse.com/1060662" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1061843" ref_url="https://bugzilla.suse.com/1061843" source="BUGZILLA"/>
		<reference ref_id="1064597" ref_url="https://bugzilla.suse.com/1064597" source="BUGZILLA"/>
		<reference ref_id="1064701" ref_url="https://bugzilla.suse.com/1064701" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066369" ref_url="https://bugzilla.suse.com/1066369" source="BUGZILLA"/>
		<reference ref_id="1071009" ref_url="https://bugzilla.suse.com/1071009" source="BUGZILLA"/>
		<reference ref_id="1071306" ref_url="https://bugzilla.suse.com/1071306" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1078248" ref_url="https://bugzilla.suse.com/1078248" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1085536" ref_url="https://bugzilla.suse.com/1085536" source="BUGZILLA"/>
		<reference ref_id="1085539" ref_url="https://bugzilla.suse.com/1085539" source="BUGZILLA"/>
		<reference ref_id="1086103" ref_url="https://bugzilla.suse.com/1086103" source="BUGZILLA"/>
		<reference ref_id="1087092" ref_url="https://bugzilla.suse.com/1087092" source="BUGZILLA"/>
		<reference ref_id="1090734" ref_url="https://bugzilla.suse.com/1090734" source="BUGZILLA"/>
		<reference ref_id="1091171" ref_url="https://bugzilla.suse.com/1091171" source="BUGZILLA"/>
		<reference ref_id="1093205" ref_url="https://bugzilla.suse.com/1093205" source="BUGZILLA"/>
		<reference ref_id="1102097" ref_url="https://bugzilla.suse.com/1102097" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1104902" ref_url="https://bugzilla.suse.com/1104902" source="BUGZILLA"/>
		<reference ref_id="1104967" ref_url="https://bugzilla.suse.com/1104967" source="BUGZILLA"/>
		<reference ref_id="1106061" ref_url="https://bugzilla.suse.com/1106061" source="BUGZILLA"/>
		<reference ref_id="1106284" ref_url="https://bugzilla.suse.com/1106284" source="BUGZILLA"/>
		<reference ref_id="1106434" ref_url="https://bugzilla.suse.com/1106434" source="BUGZILLA"/>
		<reference ref_id="1108382" ref_url="https://bugzilla.suse.com/1108382" source="BUGZILLA"/>
		<reference ref_id="1109158" ref_url="https://bugzilla.suse.com/1109158" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1112894" ref_url="https://bugzilla.suse.com/1112894" source="BUGZILLA"/>
		<reference ref_id="1112899" ref_url="https://bugzilla.suse.com/1112899" source="BUGZILLA"/>
		<reference ref_id="1112902" ref_url="https://bugzilla.suse.com/1112902" source="BUGZILLA"/>
		<reference ref_id="1112903" ref_url="https://bugzilla.suse.com/1112903" source="BUGZILLA"/>
		<reference ref_id="1112905" ref_url="https://bugzilla.suse.com/1112905" source="BUGZILLA"/>
		<reference ref_id="1112906" ref_url="https://bugzilla.suse.com/1112906" source="BUGZILLA"/>
		<reference ref_id="1112907" ref_url="https://bugzilla.suse.com/1112907" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114542" ref_url="https://bugzilla.suse.com/1114542" source="BUGZILLA"/>
		<reference ref_id="1118689" ref_url="https://bugzilla.suse.com/1118689" source="BUGZILLA"/>
		<reference ref_id="1119086" ref_url="https://bugzilla.suse.com/1119086" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1120046" ref_url="https://bugzilla.suse.com/1120046" source="BUGZILLA"/>
		<reference ref_id="1120876" ref_url="https://bugzilla.suse.com/1120876" source="BUGZILLA"/>
		<reference ref_id="1120902" ref_url="https://bugzilla.suse.com/1120902" source="BUGZILLA"/>
		<reference ref_id="1123034" ref_url="https://bugzilla.suse.com/1123034" source="BUGZILLA"/>
		<reference ref_id="1123105" ref_url="https://bugzilla.suse.com/1123105" source="BUGZILLA"/>
		<reference ref_id="1123959" ref_url="https://bugzilla.suse.com/1123959" source="BUGZILLA"/>
		<reference ref_id="1124370" ref_url="https://bugzilla.suse.com/1124370" source="BUGZILLA"/>
		<reference ref_id="1127988" ref_url="https://bugzilla.suse.com/1127988" source="BUGZILLA"/>
		<reference ref_id="1129424" ref_url="https://bugzilla.suse.com/1129424" source="BUGZILLA"/>
		<reference ref_id="1129519" ref_url="https://bugzilla.suse.com/1129519" source="BUGZILLA"/>
		<reference ref_id="1129664" ref_url="https://bugzilla.suse.com/1129664" source="BUGZILLA"/>
		<reference ref_id="1131107" ref_url="https://bugzilla.suse.com/1131107" source="BUGZILLA"/>
		<reference ref_id="1131281" ref_url="https://bugzilla.suse.com/1131281" source="BUGZILLA"/>
		<reference ref_id="1131304" ref_url="https://bugzilla.suse.com/1131304" source="BUGZILLA"/>
		<reference ref_id="1131489" ref_url="https://bugzilla.suse.com/1131489" source="BUGZILLA"/>
		<reference ref_id="1131565" ref_url="https://bugzilla.suse.com/1131565" source="BUGZILLA"/>
		<reference ref_id="1132686" ref_url="https://bugzilla.suse.com/1132686" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134291" ref_url="https://bugzilla.suse.com/1134291" source="BUGZILLA"/>
		<reference ref_id="1134476" ref_url="https://bugzilla.suse.com/1134476" source="BUGZILLA"/>
		<reference ref_id="1134881" ref_url="https://bugzilla.suse.com/1134881" source="BUGZILLA"/>
		<reference ref_id="1134882" ref_url="https://bugzilla.suse.com/1134882" source="BUGZILLA"/>
		<reference ref_id="1135219" ref_url="https://bugzilla.suse.com/1135219" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135897" ref_url="https://bugzilla.suse.com/1135897" source="BUGZILLA"/>
		<reference ref_id="1135990" ref_url="https://bugzilla.suse.com/1135990" source="BUGZILLA"/>
		<reference ref_id="1136039" ref_url="https://bugzilla.suse.com/1136039" source="BUGZILLA"/>
		<reference ref_id="1136261" ref_url="https://bugzilla.suse.com/1136261" source="BUGZILLA"/>
		<reference ref_id="1136346" ref_url="https://bugzilla.suse.com/1136346" source="BUGZILLA"/>
		<reference ref_id="1136349" ref_url="https://bugzilla.suse.com/1136349" source="BUGZILLA"/>
		<reference ref_id="1136352" ref_url="https://bugzilla.suse.com/1136352" source="BUGZILLA"/>
		<reference ref_id="1136496" ref_url="https://bugzilla.suse.com/1136496" source="BUGZILLA"/>
		<reference ref_id="1136498" ref_url="https://bugzilla.suse.com/1136498" source="BUGZILLA"/>
		<reference ref_id="1136502" ref_url="https://bugzilla.suse.com/1136502" source="BUGZILLA"/>
		<reference ref_id="1136682" ref_url="https://bugzilla.suse.com/1136682" source="BUGZILLA"/>
		<reference ref_id="1137069" ref_url="https://bugzilla.suse.com/1137069" source="BUGZILLA"/>
		<reference ref_id="1137322" ref_url="https://bugzilla.suse.com/1137322" source="BUGZILLA"/>
		<reference ref_id="1137323" ref_url="https://bugzilla.suse.com/1137323" source="BUGZILLA"/>
		<reference ref_id="1137586" ref_url="https://bugzilla.suse.com/1137586" source="BUGZILLA"/>
		<reference ref_id="1137865" ref_url="https://bugzilla.suse.com/1137865" source="BUGZILLA"/>
		<reference ref_id="1137884" ref_url="https://bugzilla.suse.com/1137884" source="BUGZILLA"/>
		<reference ref_id="1137959" ref_url="https://bugzilla.suse.com/1137959" source="BUGZILLA"/>
		<reference ref_id="1137982" ref_url="https://bugzilla.suse.com/1137982" source="BUGZILLA"/>
		<reference ref_id="1138099" ref_url="https://bugzilla.suse.com/1138099" source="BUGZILLA"/>
		<reference ref_id="1138100" ref_url="https://bugzilla.suse.com/1138100" source="BUGZILLA"/>
		<reference ref_id="1138539" ref_url="https://bugzilla.suse.com/1138539" source="BUGZILLA"/>
		<reference ref_id="1139020" ref_url="https://bugzilla.suse.com/1139020" source="BUGZILLA"/>
		<reference ref_id="1139021" ref_url="https://bugzilla.suse.com/1139021" source="BUGZILLA"/>
		<reference ref_id="1139101" ref_url="https://bugzilla.suse.com/1139101" source="BUGZILLA"/>
		<reference ref_id="1139500" ref_url="https://bugzilla.suse.com/1139500" source="BUGZILLA"/>
		<reference ref_id="1140012" ref_url="https://bugzilla.suse.com/1140012" source="BUGZILLA"/>
		<reference ref_id="1140155" ref_url="https://bugzilla.suse.com/1140155" source="BUGZILLA"/>
		<reference ref_id="1140426" ref_url="https://bugzilla.suse.com/1140426" source="BUGZILLA"/>
		<reference ref_id="1140487" ref_url="https://bugzilla.suse.com/1140487" source="BUGZILLA"/>
		<reference ref_id="1141013" ref_url="https://bugzilla.suse.com/1141013" source="BUGZILLA"/>
		<reference ref_id="1141340" ref_url="https://bugzilla.suse.com/1141340" source="BUGZILLA"/>
		<reference ref_id="1141450" ref_url="https://bugzilla.suse.com/1141450" source="BUGZILLA"/>
		<reference ref_id="1141543" ref_url="https://bugzilla.suse.com/1141543" source="BUGZILLA"/>
		<reference ref_id="1141554" ref_url="https://bugzilla.suse.com/1141554" source="BUGZILLA"/>
		<reference ref_id="1142019" ref_url="https://bugzilla.suse.com/1142019" source="BUGZILLA"/>
		<reference ref_id="1142076" ref_url="https://bugzilla.suse.com/1142076" source="BUGZILLA"/>
		<reference ref_id="1142109" ref_url="https://bugzilla.suse.com/1142109" source="BUGZILLA"/>
		<reference ref_id="1142117" ref_url="https://bugzilla.suse.com/1142117" source="BUGZILLA"/>
		<reference ref_id="1142118" ref_url="https://bugzilla.suse.com/1142118" source="BUGZILLA"/>
		<reference ref_id="1142119" ref_url="https://bugzilla.suse.com/1142119" source="BUGZILLA"/>
		<reference ref_id="1142496" ref_url="https://bugzilla.suse.com/1142496" source="BUGZILLA"/>
		<reference ref_id="1142541" ref_url="https://bugzilla.suse.com/1142541" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1142701" ref_url="https://bugzilla.suse.com/1142701" source="BUGZILLA"/>
		<reference ref_id="1142857" ref_url="https://bugzilla.suse.com/1142857" source="BUGZILLA"/>
		<reference ref_id="1143300" ref_url="https://bugzilla.suse.com/1143300" source="BUGZILLA"/>
		<reference ref_id="1143331" ref_url="https://bugzilla.suse.com/1143331" source="BUGZILLA"/>
		<reference ref_id="1143466" ref_url="https://bugzilla.suse.com/1143466" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1143738" ref_url="https://bugzilla.suse.com/1143738" source="BUGZILLA"/>
		<reference ref_id="1143765" ref_url="https://bugzilla.suse.com/1143765" source="BUGZILLA"/>
		<reference ref_id="1143841" ref_url="https://bugzilla.suse.com/1143841" source="BUGZILLA"/>
		<reference ref_id="1143843" ref_url="https://bugzilla.suse.com/1143843" source="BUGZILLA"/>
		<reference ref_id="1143962" ref_url="https://bugzilla.suse.com/1143962" source="BUGZILLA"/>
		<reference ref_id="1144123" ref_url="https://bugzilla.suse.com/1144123" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1144375" ref_url="https://bugzilla.suse.com/1144375" source="BUGZILLA"/>
		<reference ref_id="1144474" ref_url="https://bugzilla.suse.com/1144474" source="BUGZILLA"/>
		<reference ref_id="1144518" ref_url="https://bugzilla.suse.com/1144518" source="BUGZILLA"/>
		<reference ref_id="1144582" ref_url="https://bugzilla.suse.com/1144582" source="BUGZILLA"/>
		<reference ref_id="1144718" ref_url="https://bugzilla.suse.com/1144718" source="BUGZILLA"/>
		<reference ref_id="1144813" ref_url="https://bugzilla.suse.com/1144813" source="BUGZILLA"/>
		<reference ref_id="1144880" ref_url="https://bugzilla.suse.com/1144880" source="BUGZILLA"/>
		<reference ref_id="1144886" ref_url="https://bugzilla.suse.com/1144886" source="BUGZILLA"/>
		<reference ref_id="1144912" ref_url="https://bugzilla.suse.com/1144912" source="BUGZILLA"/>
		<reference ref_id="1144920" ref_url="https://bugzilla.suse.com/1144920" source="BUGZILLA"/>
		<reference ref_id="1144979" ref_url="https://bugzilla.suse.com/1144979" source="BUGZILLA"/>
		<reference ref_id="1145010" ref_url="https://bugzilla.suse.com/1145010" source="BUGZILLA"/>
		<reference ref_id="1145018" ref_url="https://bugzilla.suse.com/1145018" source="BUGZILLA"/>
		<reference ref_id="1145051" ref_url="https://bugzilla.suse.com/1145051" source="BUGZILLA"/>
		<reference ref_id="1145059" ref_url="https://bugzilla.suse.com/1145059" source="BUGZILLA"/>
		<reference ref_id="1145134" ref_url="https://bugzilla.suse.com/1145134" source="BUGZILLA"/>
		<reference ref_id="1145189" ref_url="https://bugzilla.suse.com/1145189" source="BUGZILLA"/>
		<reference ref_id="1145235" ref_url="https://bugzilla.suse.com/1145235" source="BUGZILLA"/>
		<reference ref_id="1145256" ref_url="https://bugzilla.suse.com/1145256" source="BUGZILLA"/>
		<reference ref_id="1145300" ref_url="https://bugzilla.suse.com/1145300" source="BUGZILLA"/>
		<reference ref_id="1145302" ref_url="https://bugzilla.suse.com/1145302" source="BUGZILLA"/>
		<reference ref_id="1145357" ref_url="https://bugzilla.suse.com/1145357" source="BUGZILLA"/>
		<reference ref_id="1145388" ref_url="https://bugzilla.suse.com/1145388" source="BUGZILLA"/>
		<reference ref_id="1145389" ref_url="https://bugzilla.suse.com/1145389" source="BUGZILLA"/>
		<reference ref_id="1145390" ref_url="https://bugzilla.suse.com/1145390" source="BUGZILLA"/>
		<reference ref_id="1145391" ref_url="https://bugzilla.suse.com/1145391" source="BUGZILLA"/>
		<reference ref_id="1145392" ref_url="https://bugzilla.suse.com/1145392" source="BUGZILLA"/>
		<reference ref_id="1145393" ref_url="https://bugzilla.suse.com/1145393" source="BUGZILLA"/>
		<reference ref_id="1145394" ref_url="https://bugzilla.suse.com/1145394" source="BUGZILLA"/>
		<reference ref_id="1145395" ref_url="https://bugzilla.suse.com/1145395" source="BUGZILLA"/>
		<reference ref_id="1145396" ref_url="https://bugzilla.suse.com/1145396" source="BUGZILLA"/>
		<reference ref_id="1145397" ref_url="https://bugzilla.suse.com/1145397" source="BUGZILLA"/>
		<reference ref_id="1145408" ref_url="https://bugzilla.suse.com/1145408" source="BUGZILLA"/>
		<reference ref_id="1145409" ref_url="https://bugzilla.suse.com/1145409" source="BUGZILLA"/>
		<reference ref_id="1145446" ref_url="https://bugzilla.suse.com/1145446" source="BUGZILLA"/>
		<reference ref_id="1145661" ref_url="https://bugzilla.suse.com/1145661" source="BUGZILLA"/>
		<reference ref_id="1145678" ref_url="https://bugzilla.suse.com/1145678" source="BUGZILLA"/>
		<reference ref_id="1145687" ref_url="https://bugzilla.suse.com/1145687" source="BUGZILLA"/>
		<reference ref_id="1145920" ref_url="https://bugzilla.suse.com/1145920" source="BUGZILLA"/>
		<reference ref_id="1145922" ref_url="https://bugzilla.suse.com/1145922" source="BUGZILLA"/>
		<reference ref_id="1145934" ref_url="https://bugzilla.suse.com/1145934" source="BUGZILLA"/>
		<reference ref_id="1145937" ref_url="https://bugzilla.suse.com/1145937" source="BUGZILLA"/>
		<reference ref_id="1145940" ref_url="https://bugzilla.suse.com/1145940" source="BUGZILLA"/>
		<reference ref_id="1145941" ref_url="https://bugzilla.suse.com/1145941" source="BUGZILLA"/>
		<reference ref_id="1145942" ref_url="https://bugzilla.suse.com/1145942" source="BUGZILLA"/>
		<reference ref_id="1145946" ref_url="https://bugzilla.suse.com/1145946" source="BUGZILLA"/>
		<reference ref_id="1146042" ref_url="https://bugzilla.suse.com/1146042" source="BUGZILLA"/>
		<reference ref_id="1146074" ref_url="https://bugzilla.suse.com/1146074" source="BUGZILLA"/>
		<reference ref_id="1146084" ref_url="https://bugzilla.suse.com/1146084" source="BUGZILLA"/>
		<reference ref_id="1146141" ref_url="https://bugzilla.suse.com/1146141" source="BUGZILLA"/>
		<reference ref_id="1146163" ref_url="https://bugzilla.suse.com/1146163" source="BUGZILLA"/>
		<reference ref_id="1146215" ref_url="https://bugzilla.suse.com/1146215" source="BUGZILLA"/>
		<reference ref_id="1146285" ref_url="https://bugzilla.suse.com/1146285" source="BUGZILLA"/>
		<reference ref_id="1146346" ref_url="https://bugzilla.suse.com/1146346" source="BUGZILLA"/>
		<reference ref_id="1146351" ref_url="https://bugzilla.suse.com/1146351" source="BUGZILLA"/>
		<reference ref_id="1146352" ref_url="https://bugzilla.suse.com/1146352" source="BUGZILLA"/>
		<reference ref_id="1146361" ref_url="https://bugzilla.suse.com/1146361" source="BUGZILLA"/>
		<reference ref_id="1146368" ref_url="https://bugzilla.suse.com/1146368" source="BUGZILLA"/>
		<reference ref_id="1146376" ref_url="https://bugzilla.suse.com/1146376" source="BUGZILLA"/>
		<reference ref_id="1146378" ref_url="https://bugzilla.suse.com/1146378" source="BUGZILLA"/>
		<reference ref_id="1146381" ref_url="https://bugzilla.suse.com/1146381" source="BUGZILLA"/>
		<reference ref_id="1146391" ref_url="https://bugzilla.suse.com/1146391" source="BUGZILLA"/>
		<reference ref_id="1146399" ref_url="https://bugzilla.suse.com/1146399" source="BUGZILLA"/>
		<reference ref_id="1146413" ref_url="https://bugzilla.suse.com/1146413" source="BUGZILLA"/>
		<reference ref_id="1146425" ref_url="https://bugzilla.suse.com/1146425" source="BUGZILLA"/>
		<reference ref_id="1146512" ref_url="https://bugzilla.suse.com/1146512" source="BUGZILLA"/>
		<reference ref_id="1146514" ref_url="https://bugzilla.suse.com/1146514" source="BUGZILLA"/>
		<reference ref_id="1146516" ref_url="https://bugzilla.suse.com/1146516" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146524" ref_url="https://bugzilla.suse.com/1146524" source="BUGZILLA"/>
		<reference ref_id="1146526" ref_url="https://bugzilla.suse.com/1146526" source="BUGZILLA"/>
		<reference ref_id="1146529" ref_url="https://bugzilla.suse.com/1146529" source="BUGZILLA"/>
		<reference ref_id="1146531" ref_url="https://bugzilla.suse.com/1146531" source="BUGZILLA"/>
		<reference ref_id="1146540" ref_url="https://bugzilla.suse.com/1146540" source="BUGZILLA"/>
		<reference ref_id="1146543" ref_url="https://bugzilla.suse.com/1146543" source="BUGZILLA"/>
		<reference ref_id="1146547" ref_url="https://bugzilla.suse.com/1146547" source="BUGZILLA"/>
		<reference ref_id="1146550" ref_url="https://bugzilla.suse.com/1146550" source="BUGZILLA"/>
		<reference ref_id="1146575" ref_url="https://bugzilla.suse.com/1146575" source="BUGZILLA"/>
		<reference ref_id="1146589" ref_url="https://bugzilla.suse.com/1146589" source="BUGZILLA"/>
		<reference ref_id="1146664" ref_url="https://bugzilla.suse.com/1146664" source="BUGZILLA"/>
		<reference ref_id="1146678" ref_url="https://bugzilla.suse.com/1146678" source="BUGZILLA"/>
		<reference ref_id="1146938" ref_url="https://bugzilla.suse.com/1146938" source="BUGZILLA"/>
		<reference ref_id="1148031" ref_url="https://bugzilla.suse.com/1148031" source="BUGZILLA"/>
		<reference ref_id="1148032" ref_url="https://bugzilla.suse.com/1148032" source="BUGZILLA"/>
		<reference ref_id="1148033" ref_url="https://bugzilla.suse.com/1148033" source="BUGZILLA"/>
		<reference ref_id="1148034" ref_url="https://bugzilla.suse.com/1148034" source="BUGZILLA"/>
		<reference ref_id="1148035" ref_url="https://bugzilla.suse.com/1148035" source="BUGZILLA"/>
		<reference ref_id="1148093" ref_url="https://bugzilla.suse.com/1148093" source="BUGZILLA"/>
		<reference ref_id="1148133" ref_url="https://bugzilla.suse.com/1148133" source="BUGZILLA"/>
		<reference ref_id="1148192" ref_url="https://bugzilla.suse.com/1148192" source="BUGZILLA"/>
		<reference ref_id="1148196" ref_url="https://bugzilla.suse.com/1148196" source="BUGZILLA"/>
		<reference ref_id="1148198" ref_url="https://bugzilla.suse.com/1148198" source="BUGZILLA"/>
		<reference ref_id="1148202" ref_url="https://bugzilla.suse.com/1148202" source="BUGZILLA"/>
		<reference ref_id="1148219" ref_url="https://bugzilla.suse.com/1148219" source="BUGZILLA"/>
		<reference ref_id="1148297" ref_url="https://bugzilla.suse.com/1148297" source="BUGZILLA"/>
		<reference ref_id="1148303" ref_url="https://bugzilla.suse.com/1148303" source="BUGZILLA"/>
		<reference ref_id="1148308" ref_url="https://bugzilla.suse.com/1148308" source="BUGZILLA"/>
		<reference ref_id="1148363" ref_url="https://bugzilla.suse.com/1148363" source="BUGZILLA"/>
		<reference ref_id="1148379" ref_url="https://bugzilla.suse.com/1148379" source="BUGZILLA"/>
		<reference ref_id="1148394" ref_url="https://bugzilla.suse.com/1148394" source="BUGZILLA"/>
		<reference ref_id="1148527" ref_url="https://bugzilla.suse.com/1148527" source="BUGZILLA"/>
		<reference ref_id="1148570" ref_url="https://bugzilla.suse.com/1148570" source="BUGZILLA"/>
		<reference ref_id="1148574" ref_url="https://bugzilla.suse.com/1148574" source="BUGZILLA"/>
		<reference ref_id="1148616" ref_url="https://bugzilla.suse.com/1148616" source="BUGZILLA"/>
		<reference ref_id="1148617" ref_url="https://bugzilla.suse.com/1148617" source="BUGZILLA"/>
		<reference ref_id="1148619" ref_url="https://bugzilla.suse.com/1148619" source="BUGZILLA"/>
		<reference ref_id="1148698" ref_url="https://bugzilla.suse.com/1148698" source="BUGZILLA"/>
		<reference ref_id="1148712" ref_url="https://bugzilla.suse.com/1148712" source="BUGZILLA"/>
		<reference ref_id="1148859" ref_url="https://bugzilla.suse.com/1148859" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1149053" ref_url="https://bugzilla.suse.com/1149053" source="BUGZILLA"/>
		<reference ref_id="1149083" ref_url="https://bugzilla.suse.com/1149083" source="BUGZILLA"/>
		<reference ref_id="1149104" ref_url="https://bugzilla.suse.com/1149104" source="BUGZILLA"/>
		<reference ref_id="1149105" ref_url="https://bugzilla.suse.com/1149105" source="BUGZILLA"/>
		<reference ref_id="1149106" ref_url="https://bugzilla.suse.com/1149106" source="BUGZILLA"/>
		<reference ref_id="1149197" ref_url="https://bugzilla.suse.com/1149197" source="BUGZILLA"/>
		<reference ref_id="1149214" ref_url="https://bugzilla.suse.com/1149214" source="BUGZILLA"/>
		<reference ref_id="1149224" ref_url="https://bugzilla.suse.com/1149224" source="BUGZILLA"/>
		<reference ref_id="1149313" ref_url="https://bugzilla.suse.com/1149313" source="BUGZILLA"/>
		<reference ref_id="1149325" ref_url="https://bugzilla.suse.com/1149325" source="BUGZILLA"/>
		<reference ref_id="1149376" ref_url="https://bugzilla.suse.com/1149376" source="BUGZILLA"/>
		<reference ref_id="1149413" ref_url="https://bugzilla.suse.com/1149413" source="BUGZILLA"/>
		<reference ref_id="1149418" ref_url="https://bugzilla.suse.com/1149418" source="BUGZILLA"/>
		<reference ref_id="1149424" ref_url="https://bugzilla.suse.com/1149424" source="BUGZILLA"/>
		<reference ref_id="1149446" ref_url="https://bugzilla.suse.com/1149446" source="BUGZILLA"/>
		<reference ref_id="1149522" ref_url="https://bugzilla.suse.com/1149522" source="BUGZILLA"/>
		<reference ref_id="1149527" ref_url="https://bugzilla.suse.com/1149527" source="BUGZILLA"/>
		<reference ref_id="1149539" ref_url="https://bugzilla.suse.com/1149539" source="BUGZILLA"/>
		<reference ref_id="1149552" ref_url="https://bugzilla.suse.com/1149552" source="BUGZILLA"/>
		<reference ref_id="1149555" ref_url="https://bugzilla.suse.com/1149555" source="BUGZILLA"/>
		<reference ref_id="1149591" ref_url="https://bugzilla.suse.com/1149591" source="BUGZILLA"/>
		<reference ref_id="1149602" ref_url="https://bugzilla.suse.com/1149602" source="BUGZILLA"/>
		<reference ref_id="1149612" ref_url="https://bugzilla.suse.com/1149612" source="BUGZILLA"/>
		<reference ref_id="1149626" ref_url="https://bugzilla.suse.com/1149626" source="BUGZILLA"/>
		<reference ref_id="1149651" ref_url="https://bugzilla.suse.com/1149651" source="BUGZILLA"/>
		<reference ref_id="1149652" ref_url="https://bugzilla.suse.com/1149652" source="BUGZILLA"/>
		<reference ref_id="1149713" ref_url="https://bugzilla.suse.com/1149713" source="BUGZILLA"/>
		<reference ref_id="1149940" ref_url="https://bugzilla.suse.com/1149940" source="BUGZILLA"/>
		<reference ref_id="1149976" ref_url="https://bugzilla.suse.com/1149976" source="BUGZILLA"/>
		<reference ref_id="1150025" ref_url="https://bugzilla.suse.com/1150025" source="BUGZILLA"/>
		<reference ref_id="1150033" ref_url="https://bugzilla.suse.com/1150033" source="BUGZILLA"/>
		<reference ref_id="1150112" ref_url="https://bugzilla.suse.com/1150112" source="BUGZILLA"/>
		<reference ref_id="1150305" ref_url="https://bugzilla.suse.com/1150305" source="BUGZILLA"/>
		<reference ref_id="1150381" ref_url="https://bugzilla.suse.com/1150381" source="BUGZILLA"/>
		<reference ref_id="1150423" ref_url="https://bugzilla.suse.com/1150423" source="BUGZILLA"/>
		<reference ref_id="1150562" ref_url="https://bugzilla.suse.com/1150562" source="BUGZILLA"/>
		<reference ref_id="1150727" ref_url="https://bugzilla.suse.com/1150727" source="BUGZILLA"/>
		<reference ref_id="1150846" ref_url="https://bugzilla.suse.com/1150846" source="BUGZILLA"/>
		<reference ref_id="1150860" ref_url="https://bugzilla.suse.com/1150860" source="BUGZILLA"/>
		<reference ref_id="1150861" ref_url="https://bugzilla.suse.com/1150861" source="BUGZILLA"/>
		<reference ref_id="1150933" ref_url="https://bugzilla.suse.com/1150933" source="BUGZILLA"/>
		<reference ref_id="1151067" ref_url="https://bugzilla.suse.com/1151067" source="BUGZILLA"/>
		<reference ref_id="1151192" ref_url="https://bugzilla.suse.com/1151192" source="BUGZILLA"/>
		<reference ref_id="1151350" ref_url="https://bugzilla.suse.com/1151350" source="BUGZILLA"/>
		<reference ref_id="1151610" ref_url="https://bugzilla.suse.com/1151610" source="BUGZILLA"/>
		<reference ref_id="1151661" ref_url="https://bugzilla.suse.com/1151661" source="BUGZILLA"/>
		<reference ref_id="1151662" ref_url="https://bugzilla.suse.com/1151662" source="BUGZILLA"/>
		<reference ref_id="1151667" ref_url="https://bugzilla.suse.com/1151667" source="BUGZILLA"/>
		<reference ref_id="1151680" ref_url="https://bugzilla.suse.com/1151680" source="BUGZILLA"/>
		<reference ref_id="1151891" ref_url="https://bugzilla.suse.com/1151891" source="BUGZILLA"/>
		<reference ref_id="1151955" ref_url="https://bugzilla.suse.com/1151955" source="BUGZILLA"/>
		<reference ref_id="1152024" ref_url="https://bugzilla.suse.com/1152024" source="BUGZILLA"/>
		<reference ref_id="1152025" ref_url="https://bugzilla.suse.com/1152025" source="BUGZILLA"/>
		<reference ref_id="1152026" ref_url="https://bugzilla.suse.com/1152026" source="BUGZILLA"/>
		<reference ref_id="1152161" ref_url="https://bugzilla.suse.com/1152161" source="BUGZILLA"/>
		<reference ref_id="1152187" ref_url="https://bugzilla.suse.com/1152187" source="BUGZILLA"/>
		<reference ref_id="1152243" ref_url="https://bugzilla.suse.com/1152243" source="BUGZILLA"/>
		<reference ref_id="1152325" ref_url="https://bugzilla.suse.com/1152325" source="BUGZILLA"/>
		<reference ref_id="1152457" ref_url="https://bugzilla.suse.com/1152457" source="BUGZILLA"/>
		<reference ref_id="1152460" ref_url="https://bugzilla.suse.com/1152460" source="BUGZILLA"/>
		<reference ref_id="1152466" ref_url="https://bugzilla.suse.com/1152466" source="BUGZILLA"/>
		<reference ref_id="1152525" ref_url="https://bugzilla.suse.com/1152525" source="BUGZILLA"/>
		<reference ref_id="1152972" ref_url="https://bugzilla.suse.com/1152972" source="BUGZILLA"/>
		<reference ref_id="1152974" ref_url="https://bugzilla.suse.com/1152974" source="BUGZILLA"/>
		<reference ref_id="1152975" ref_url="https://bugzilla.suse.com/1152975" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18551" ref_url="https://www.suse.com/security/cve/CVE-2017-18551/" source="CVE"/>
		<reference ref_id="CVE-2017-18595" ref_url="https://www.suse.com/security/cve/CVE-2017-18595/" source="CVE"/>
		<reference ref_id="CVE-2018-20976" ref_url="https://www.suse.com/security/cve/CVE-2018-20976/" source="CVE"/>
		<reference ref_id="CVE-2018-21008" ref_url="https://www.suse.com/security/cve/CVE-2018-21008/" source="CVE"/>
		<reference ref_id="CVE-2019-10207" ref_url="https://www.suse.com/security/cve/CVE-2019-10207/" source="CVE"/>
		<reference ref_id="CVE-2019-11477" ref_url="https://www.suse.com/security/cve/CVE-2019-11477/" source="CVE"/>
		<reference ref_id="CVE-2019-14814" ref_url="https://www.suse.com/security/cve/CVE-2019-14814/" source="CVE"/>
		<reference ref_id="CVE-2019-14815" ref_url="https://www.suse.com/security/cve/CVE-2019-14815/" source="CVE"/>
		<reference ref_id="CVE-2019-14816" ref_url="https://www.suse.com/security/cve/CVE-2019-14816/" source="CVE"/>
		<reference ref_id="CVE-2019-14821" ref_url="https://www.suse.com/security/cve/CVE-2019-14821/" source="CVE"/>
		<reference ref_id="CVE-2019-14835" ref_url="https://www.suse.com/security/cve/CVE-2019-14835/" source="CVE"/>
		<reference ref_id="CVE-2019-15030" ref_url="https://www.suse.com/security/cve/CVE-2019-15030/" source="CVE"/>
		<reference ref_id="CVE-2019-15031" ref_url="https://www.suse.com/security/cve/CVE-2019-15031/" source="CVE"/>
		<reference ref_id="CVE-2019-15090" ref_url="https://www.suse.com/security/cve/CVE-2019-15090/" source="CVE"/>
		<reference ref_id="CVE-2019-15098" ref_url="https://www.suse.com/security/cve/CVE-2019-15098/" source="CVE"/>
		<reference ref_id="CVE-2019-15099" ref_url="https://www.suse.com/security/cve/CVE-2019-15099/" source="CVE"/>
		<reference ref_id="CVE-2019-15117" ref_url="https://www.suse.com/security/cve/CVE-2019-15117/" source="CVE"/>
		<reference ref_id="CVE-2019-15118" ref_url="https://www.suse.com/security/cve/CVE-2019-15118/" source="CVE"/>
		<reference ref_id="CVE-2019-15211" ref_url="https://www.suse.com/security/cve/CVE-2019-15211/" source="CVE"/>
		<reference ref_id="CVE-2019-15212" ref_url="https://www.suse.com/security/cve/CVE-2019-15212/" source="CVE"/>
		<reference ref_id="CVE-2019-15214" ref_url="https://www.suse.com/security/cve/CVE-2019-15214/" source="CVE"/>
		<reference ref_id="CVE-2019-15215" ref_url="https://www.suse.com/security/cve/CVE-2019-15215/" source="CVE"/>
		<reference ref_id="CVE-2019-15216" ref_url="https://www.suse.com/security/cve/CVE-2019-15216/" source="CVE"/>
		<reference ref_id="CVE-2019-15217" ref_url="https://www.suse.com/security/cve/CVE-2019-15217/" source="CVE"/>
		<reference ref_id="CVE-2019-15218" ref_url="https://www.suse.com/security/cve/CVE-2019-15218/" source="CVE"/>
		<reference ref_id="CVE-2019-15219" ref_url="https://www.suse.com/security/cve/CVE-2019-15219/" source="CVE"/>
		<reference ref_id="CVE-2019-15220" ref_url="https://www.suse.com/security/cve/CVE-2019-15220/" source="CVE"/>
		<reference ref_id="CVE-2019-15221" ref_url="https://www.suse.com/security/cve/CVE-2019-15221/" source="CVE"/>
		<reference ref_id="CVE-2019-15222" ref_url="https://www.suse.com/security/cve/CVE-2019-15222/" source="CVE"/>
		<reference ref_id="CVE-2019-15239" ref_url="https://www.suse.com/security/cve/CVE-2019-15239/" source="CVE"/>
		<reference ref_id="CVE-2019-15290" ref_url="https://www.suse.com/security/cve/CVE-2019-15290/" source="CVE"/>
		<reference ref_id="CVE-2019-15291" ref_url="https://www.suse.com/security/cve/CVE-2019-15291/" source="CVE"/>
		<reference ref_id="CVE-2019-15292" ref_url="https://www.suse.com/security/cve/CVE-2019-15292/" source="CVE"/>
		<reference ref_id="CVE-2019-15538" ref_url="https://www.suse.com/security/cve/CVE-2019-15538/" source="CVE"/>
		<reference ref_id="CVE-2019-15666" ref_url="https://www.suse.com/security/cve/CVE-2019-15666/" source="CVE"/>
		<reference ref_id="CVE-2019-15902" ref_url="https://www.suse.com/security/cve/CVE-2019-15902/" source="CVE"/>
		<reference ref_id="CVE-2019-15917" ref_url="https://www.suse.com/security/cve/CVE-2019-15917/" source="CVE"/>
		<reference ref_id="CVE-2019-15919" ref_url="https://www.suse.com/security/cve/CVE-2019-15919/" source="CVE"/>
		<reference ref_id="CVE-2019-15920" ref_url="https://www.suse.com/security/cve/CVE-2019-15920/" source="CVE"/>
		<reference ref_id="CVE-2019-15921" ref_url="https://www.suse.com/security/cve/CVE-2019-15921/" source="CVE"/>
		<reference ref_id="CVE-2019-15924" ref_url="https://www.suse.com/security/cve/CVE-2019-15924/" source="CVE"/>
		<reference ref_id="CVE-2019-15926" ref_url="https://www.suse.com/security/cve/CVE-2019-15926/" source="CVE"/>
		<reference ref_id="CVE-2019-15927" ref_url="https://www.suse.com/security/cve/CVE-2019-15927/" source="CVE"/>
		<reference ref_id="CVE-2019-9456" ref_url="https://www.suse.com/security/cve/CVE-2019-9456/" source="CVE"/>
		<reference ref_id="CVE-2019-9506" ref_url="https://www.suse.com/security/cve/CVE-2019-9506/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2658-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192658-1.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2017-18551: An issue was discovered in drivers/i2c/i2c-core-smbus.c. There was an out of bounds write in the function i2c_smbus_xfer_emulated (bnc#1146163).
- CVE-2017-18595: A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (bnc#1149555).
- CVE-2018-20976: An issue was discovered in fs/xfs/xfs_super.c. A use after free exists, related to xfs_fs_fill_super failure (bnc#1146285).
- CVE-2018-21008: A use-after-free could have been caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c (bnc#1149591).
- CVE-2019-10207: A local denial of service using HCIUARTSETPROTO/HCI_UART_MRVL was fixed (bnc#1123959 bnc#1142857).
- CVE-2019-11477: Jonathan Looney discovered that the TCP_SKB_CB(skb)-&gt;tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. (bnc#1132686 bnc#1137586).
- CVE-2019-14814: There was a heap-based buffer overflow in the Marvell wifi chip driver, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1146512).
- CVE-2019-14814: There was a heap-based buffer overflow in the Marvell wifi chip driver, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1146512).
- CVE-2019-14816: There was a heap-based buffer overflow in the Marvell wifi chip driver, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1146516).
- CVE-2019-14821: An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring-&gt;first' and 'ring-&gt;last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350).
- CVE-2019-14835: A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could have used this flaw to increase their privileges on the host (bnc#1150112).
- CVE-2019-15030: In the Linux kernel on the powerpc platform, a local user could have read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check (bnc#1149713).
- CVE-2019-15031: In the Linux kernel on the powerpc platform, a local user could have read vector registers of other users' processes via an interrupt. To exploit the vulnerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE was misused in arch/powerpc/kernel/process.c (bnc#1149713).
- CVE-2019-15090: An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the qedi_dbg_* family of functions, there is an out-of-bounds read (bnc#1146399).
- CVE-2019-15098: drivers/net/wireless/ath/ath6kl/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor (bnc#1146378).
- CVE-2019-15099: drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel had a NULL pointer dereference via an incomplete address in an endpoint descriptor (bnc#1146368).
- CVE-2019-15117: parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel mishandled a short descriptor, leading to out-of-bounds memory access (bnc#1145920).
- CVE-2019-15118: check_input_term in sound/usb/mixer.c mishandled recursion, leading to kernel stack exhaustion (bnc#1145922).
- CVE-2019-15211: There was a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c did not properly allocate memory (bnc#1146519).
- CVE-2019-15212: There was a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver (bnc#1146391).
- CVE-2019-15214: There was a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. This is related to sound/core/init.c and sound/core/info.c (bnc#1146550).
- CVE-2019-15215: There was a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver (bnc#1146425).
- CVE-2019-15216: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1146361).
- CVE-2019-15217: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver (bnc#1146547).
- CVE-2019-15218: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver (bnc#1146413).
- CVE-2019-15219: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver (bnc#1146524).
- CVE-2019-15220: There was a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver (bnc#1146526).
- CVE-2019-15221: There was a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver (bnc#1146529).
- CVE-2019-15222: There was a NULL pointer dereference caused by a malicious USB device in the sound/usb/helper.c (motu_microbookii) driver (bnc#1146531).
- CVE-2019-15239: An incorrect backport of a certain net/ipv4/tcp_output.c fix allowed a local attacker to trigger multiple use-after-free conditions. This could result in a kernel crash, or potentially in privilege escalation. (bsc#1146589)
- CVE-2019-15290: There was a NULL pointer dereference caused by a malicious USB device in the ath6kl_usb_alloc_urb_from_pipe function (bsc#1146543).
- CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver (bnc#1146540).
- CVE-2019-15292: There was a use-after-free in atalk_proc_exit, related to net/appletalk/atalk_proc.c, net/appletalk/ddp.c, and net/appletalk/sysctl_net_atalk.c (bnc#1146678).
- CVE-2019-15538: An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS (bnc#1148093).
- CVE-2019-15666: There was an out-of-bounds array access in __xfrm_policy_unlink, which will cause denial of service, because verify_newpolicy_info in net/xfrm/xfrm_user.c mishandled directory validation (bnc#1148394).
- CVE-2019-15902: Misuse of the upstream 'x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()' commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped (bnc#1149376).
- CVE-2019-15917: There was a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c (bnc#1149539).
- CVE-2019-15919: SMB2_write in fs/cifs/smb2pdu.c had a use-after-free (bnc#1149552).
- CVE-2019-15920: SMB2_read in fs/cifs/smb2pdu.c had a use-after-free. (bnc#1149626).
- CVE-2019-15921: There was a memory leak issue when idr_alloc() fails in genl_register_family() in net/netlink/genetlink.c (bnc#1149602).
- CVE-2019-15924: fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c had a NULL pointer dereference because there was no -ENOMEM upon an alloc_workqueue failure (bnc#1149612).
- CVE-2019-15926: An out-of-bounds access existed in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx in the file drivers/net/wireless/ath/ath6kl/wmi.c (bnc#1149527).
- CVE-2019-15927: An issue was discovered in the Linux kernel An out-of-bounds access exists in the function build_audio_procunit in the file sound/usb/mixer.c (bnc#1149522).
- CVE-2019-9456: In the Pixel C USB monitor driver there was a possible OOB write due to a missing bounds check. This could have led to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1150025).
- CVE-2019-9506: The Bluetooth BR/EDR specification up to and including version 5.1 permitted sufficiently low encryption key length and did not prevent an attacker from influencing the key length negotiation. This allowed practical brute-force attacks (aka 'KNOB') that could decrypt traffic and injected arbitrary ciphertext without the victim noticing (bnc#1137865 bnc#1146042).


The following non-security bugs were fixed:

- 9p: acl: fix uninitialized iattr access (bsc#1051510).
- 9p: p9dirent_read: check network-provided name length (bsc#1051510).
- 9p: pass the correct prototype to read_cache_page (bsc#1051510).
- 9p/rdma: do not disconnect on down_interruptible EAGAIN (bsc#1051510).
- 9p/rdma: remove useless check in cm_event_handler (bsc#1051510).
- 9p/virtio: Add cleanup path in p9_virtio_init (bsc#1051510).
- 9p/xen: Add cleanup path in p9_trans_xen_init (bsc#1051510).
- 9p/xen: fix check for xenbus_read error in front_probe (bsc#1051510).
- acpi/arm64: ignore 5.1 FADTs that are reported as 5.0 (bsc#1051510).
- ACPICA: Increase total number of possible Owner IDs (bsc#1148859).
- ACPI: custom_method: fix memory leaks (bsc#1051510).
- ACPI: fix false-positive -Wuninitialized warning (bsc#1051510).
- ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id() (bsc#1051510).
- ACPI / PCI: fix acpi_pci_irq_enable() memory leak (bsc#1051510).
- ACPI: PM: Fix regression in acpi_device_set_power() (bsc#1051510).
- ACPI / property: Fix acpi_graph_get_remote_endpoint() name in kerneldoc (bsc#1051510).
- Add missing structs and defines from recent SMB3.1.1 documentation (bsc#1144333).
- Add new flag on SMB3.1.1 read (bsc#1144333).
- address lock imbalance warnings in smbdirect.c (bsc#1144333).
- Add some missing debug fields in server and tcon structs (bsc#1144333).
- add some missing definitions (bsc#1144333).
- Add some qedf commits to blacklist file (bsc#1149976)
- Add vers=3.0.2 as a valid option for SMBv3.0.2 (bsc#1144333).
- af_key: fix leaks in key_pol_get_resp and dump_sp (bsc#1051510).
- af_packet: Block execution of tasks waiting for transmit to complete in AF_PACKET (networking-stable-19_07_02).
- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- ALSA: aoa: onyx: always initialize register read value (bsc#1051510).
- ALSA: firewire: fix a memory leak bug (bsc#1051510).
- ALSA: firewire-tascam: check intermediate state of clock status and retry (bsc#1051510).
- ALSA: firewire-tascam: handle error code when getting current source of clock (bsc#1051510).
- ALSA: hda - Add a generic reboot_notify (bsc#1051510).
- ALSA: hda - Apply workaround for another AMD chip 1022:1487 (bsc#1051510).
- ALSA: hda/ca0132 - Add new SBZ quirk (bsc#1051510).
- ALSA: hda - Do not override global PCM hw info flag (bsc#1051510).
- ALSA: hda: Fix 1-minute detection delay when i915 module is not available (bsc#1111666).
- ALSA: hda - Fix a memory leak bug (bsc#1051510).
- ALSA: hda - Fixes inverted Conexant GPIO mic mute led (bsc#1051510).
- ALSA: hda - Fix potential endless loop at applying quirks (bsc#1051510).
- ALSA: hda: kabi workaround for generic parser flag (bsc#1051510).
- ALSA: hda - Let all conexant codec enter D3 when rebooting (bsc#1051510).
- ALSA: hda/realtek - Add quirk for HP Envy x360 (bsc#1051510).
- ALSA: hda/realtek - Add quirk for HP Pavilion 15 (bsc#1051510).
- ALSA: hda/realtek - Enable internal speaker &amp; headset mic of ASUS UX431FL (bsc#1051510).
- ALSA: hda/realtek - Fix overridden device-specific initialization (bsc#1051510).
- ALSA: hda/realtek - Fix the problem of two front mics on a ThinkCentre (bsc#1051510).
- ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457) (bsc#1051510).
- ALSA: hiface: fix multiple memory leak bugs (bsc#1051510).
- ALSA: line6: Fix memory leak at line6_init_pcm() error path (bsc#1051510).
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain (bsc#1051510).
- ALSA: seq: Fix potential concurrent access to the deleted pool (bsc#1051510).
- ALSA: usb-audio: Add implicit fb quirk for Behringer UFX1604 (bsc#1051510).
- ALSA: usb-audio: Check mixer unit bitmap yet more strictly (bsc#1051510).
- ALSA: usb-audio: fix a memory leak bug (bsc#1111666).
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check (bsc#1051510).
- ALSA: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate() (bsc#1051510).
- arm64: fix undefined reference to 'printk' (bsc#1148219).
- arm64/kernel: enable A53 erratum #8434319 handling at runtime (bsc#1148219).
- arm64/kernel: rename module_emit_adrp_veneer-&gt;module_emit_veneer_for_adrp (bsc#1148219).
- arm64: KVM: Fix architecturally invalid reset value for FPEXC32_EL2 (bsc#1133021).
- arm64: module: do not BUG when exceeding preallocated PLT count (bsc#1148219).
- arm64: PCI: Preserve firmware configuration when desired (SLE-9332).
- ARM: KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (bsc#1133021).
- ARM: KVM: report support for SMCCC_ARCH_WORKAROUND_1 (bsc#1133021).
- ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks (bsc#1051510).
- ASoC: es8328: Fix copy-paste error in es8328_right_line_controls (bsc#1051510).
- ASoC: Fail card instantiation if DAI format setup fails (bsc#1051510).
- ASoC: Intel: Baytrail: Fix implicit fallthrough warning (bsc#1051510).
- ASoC: sun4i-i2s: RX and TX counter registers are swapped (bsc#1051510).
- ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls (bsc#1051510).
- ASoC: wm8988: fix typo in wm8988_right_line_controls (bsc#1051510).
- ata: libahci: do not complain in case of deferred probe (bsc#1051510).
- ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet (bsc#1111666).
- ath10k: Change the warning message string (bsc#1051510).
- ath10k: Drop WARN_ON()s that always trigger during system resume (bsc#1111666).
- ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init (bsc#1051510).
- atm: iphase: Fix Spectre v1 vulnerability (networking-stable-19_08_08).
- batman-adv: fix uninit-value in batadv_netlink_get_ifindex() (bsc#1051510).
- batman-adv: Only read OGM2 tvlv_len after buffer len check (bsc#1051510).
- batman-adv: Only read OGM tvlv_len after buffer len check (bsc#1051510).
- bcache: fix possible memory leak in bch_cached_dev_run() (git fixes).
- bcache: Revert 'bcache: use sysfs_match_string() instead of __sysfs_match_string()' (git fixes).
- bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA (bsc#1051510).
- bio: fix improper use of smp_mb__before_atomic() (git fixes).
- blk-flush: do not run queue for requests bypassing flush (bsc#1137959).
- blk-flush: use blk_mq_request_bypass_insert() (bsc#1137959).
- blk-mq: backport fixes for blk_mq_complete_e_request_sync() (bsc#1145661).
- blk-mq: do not allocate driver tag upfront for flush rq (bsc#1137959).
- blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (bsc#1151610).
- blk-mq: Fix spelling in a source code comment (git fixes).
- blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue (bsc#1137959).
- blk-mq: introduce blk_mq_complete_request_sync() (bsc#1145661).
- blk-mq: introduce blk_mq_request_completed() (bsc#1149446).
- blk-mq: introduce blk_mq_tagset_wait_completed_request() (bsc#1149446).
- blk-mq: kABI fixes for blk-mq.h (bsc#1137959).
- blk-mq: move blk_mq_put_driver_tag*() into blk-mq.h (bsc#1137959).
- blk-mq: punt failed direct issue to dispatch list (bsc#1137959).
- blk-mq: put the driver tag of nxt rq before first one is requeued (bsc#1137959).
- blk-mq-sched: decide how to handle flush rq via RQF_FLUSH_SEQ (bsc#1137959).
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait (bsc#1141543).
- block, documentation: Fix wbt_lat_usec documentation (git fixes).
- block: fix timeout changes for legacy request drivers (bsc#1149446).
- block: kABI fixes for BLK_EH_DONE renaming (bsc#1142076).
- block: rename BLK_EH_NOT_HANDLED to BLK_EH_DONE (bsc#1142076).
- Bluetooth: 6lowpan: search for destination address in all peers (bsc#1051510).
- Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug (bsc#1051510).
- Bluetooth: btqca: Add a short delay before downloading the NVM (bsc#1051510).
- Bluetooth: Check state in l2cap_disconnect_rsp (bsc#1051510).
- Bluetooth: hci_bcsp: Fix memory leak in rx_skb (bsc#1051510).
- Bluetooth: validate BLE connection interval updates (bsc#1051510).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502 jsc#SLE-4703).
- bnx2x: Disable multi-cos feature (bsc#1136498 jsc#SLE-4699).
- bnx2x: Disable multi-cos feature (networking-stable-19_08_08).
- bnx2x: Prevent ptp_task to be rescheduled indefinitely (networking-stable-19_07_25).
- bnxt_en: Fix to include flow direction in L2 key (bsc#1104745 ).
- bnxt_en: Fix VNIC clearing logic for 57500 chips (bsc#1104745 ).
- bnxt_en: Improve RX doorbell sequence (bsc#1104745).
- bnxt_en: Use correct src_fid to determine direction of the flow (bsc#1104745).
- bonding/802.3ad: fix link_failure_count tracking (bsc#1137069 bsc#1141013).
- bonding/802.3ad: fix slave link initialization transition states (bsc#1137069 bsc#1141013).
- bonding: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21).
- bonding: Always enable vlan tx offload (networking-stable-19_07_02).
- bonding: set default miimon value for non-arp modes if not set (bsc#1137069 bsc#1141013).
- bonding: speed/duplex update at NETDEV_UP event (bsc#1137069 bsc#1141013).
- bonding: validate ip header before check IPPROTO_IGMP (networking-stable-19_07_25).
- bpf: sockmap, only create entry if ulp is not already enabled (bsc#1109837).
- bpf: sockmap, sock_map_delete needs to use xchg (bsc#1109837).
- bpf: sockmap, synchronize_rcu before free'ing map (bsc#1109837).
- btrfs: add a helper to retrive extent inline ref type (bsc#1149325).
- btrfs: add cleanup_ref_head_accounting helper (bsc#1050911).
- btrfs: add missing inode version, ctime and mtime updates when punching hole (bsc#1140487).
- btrfs: add one more sanity check for shared ref type (bsc#1149325).
- btrfs: clean up pending block groups when transaction commit aborts (bsc#1050911).
- btrfs: convert to use btrfs_get_extent_inline_ref_type (bsc#1149325).
- btrfs: do not abort transaction at btrfs_update_root() after failure to COW path (bsc#1150933).
- btrfs: fix assertion failure during fsync and use of stale transaction (bsc#1150562).
- btrfs: fix data loss after inode eviction, renaming it, and fsync it (bsc#1145941).
- btrfs: Fix delalloc inodes invalidation during transaction abort (bsc#1050911).
- btrfs: fix fsync not persisting dentry deletions due to inode evictions (bsc#1145942).
- btrfs: fix incremental send failure after deduplication (bsc#1145940).
- btrfs: fix pinned underflow after transaction aborted (bsc#1050911).
- btrfs: fix race between send and deduplication that lead to failures and crashes (bsc#1145059).
- btrfs: fix race leading to fs corruption after transaction abort (bsc#1145937).
- btrfs: fix use-after-free when using the tree modification log (bsc#1151891).
- btrfs: handle delayed ref head accounting cleanup in abort (bsc#1050911).
- btrfs: prevent send failures and crashes due to concurrent relocation (bsc#1145059).
- btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls (bsc#1152975).
- btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space (bsc#1152974).
- btrfs: relocation: fix use-after-free on dead relocation roots (bsc#1152972).
- btrfs: remove BUG() in add_data_reference (bsc#1149325).
- btrfs: remove BUG() in btrfs_extent_inline_ref_size (bsc#1149325).
- btrfs: remove BUG() in print_extent_item (bsc#1149325).
- btrfs: remove BUG_ON in __add_tree_block (bsc#1149325).
- btrfs: scrub: add memalloc_nofs protection around init_ipath (bsc#1086103).
- btrfs: Split btrfs_del_delalloc_inode into 2 functions (bsc#1050911).
- btrfs: start readahead also in seed devices (bsc#1144886).
- btrfs: track running balance in a simpler way (bsc#1145059).
- btrfs: use GFP_KERNEL in init_ipath (bsc#1086103).
- caif-hsi: fix possible deadlock in cfhsi_exit_module() (networking-stable-19_07_25).
- can: m_can: implement errata 'Needless activation of MRAF irq' (bsc#1051510).
- can: mcp251x: add support for mcp25625 (bsc#1051510).
- can: peak_usb: fix potential double kfree_skb() (bsc#1051510).
- can: peak_usb: force the string buffer NULL-terminated (bsc#1051510).
- can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices (bsc#1051510).
- can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices (bsc#1051510).
- can: rcar_canfd: fix possible IRQ storm on high load (bsc#1051510).
- can: sja1000: force the string buffer NULL-terminated (bsc#1051510).
- carl9170: fix misuse of device driver API (bsc#1142635).
- ceph: add btime field to ceph_inode_info (bsc#1148133 bsc#1136682).
- ceph: add ceph.snap.btime vxattr (bsc#1148133 bsc#1148570).
- ceph: add change_attr field to ceph_inode_info (bsc#1148133 bsc#1136682).
- ceph: always get rstat from auth mds (bsc#1146346).
- ceph: carry snapshot creation time with inodes (bsc#1148133 bsc#1148570).
- ceph: clean up ceph.dir.pin vxattr name sizeof() (bsc#1146346).
- ceph: clear page dirty before invalidate page (bsc#1148133).
- ceph: decode feature bits in session message (bsc#1146346).
- ceph: do not blindly unregister session that is in opening state (bsc#1148133).
- ceph: do not try fill file_lock on unsuccessful GETFILELOCK reply (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in fill_inode() (bsc#1148133).
- ceph: fix 'ceph.dir.rctime' vxattr value (bsc#1148133 bsc#1135219).
- ceph: fix decode_locker to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- ceph: fix improper use of smp_mb__before_atomic() (bsc#1148133).
- ceph: fix infinite loop in get_quota_realm() (bsc#1148133).
- ceph: fix iov_iter issues in ceph_direct_read_write() (bsc#1141450).
- ceph: fix listxattr vxattr buffer length calculation (bsc#1148133 bsc#1148570).
- ceph: handle btime in cap messages (bsc#1148133 bsc#1136682).
- ceph: handle change_attr in cap messages (bsc#1148133 bsc#1136682).
- ceph: have MDS map decoding use entity_addr_t decoder (bsc#1148133 bsc#1136682).
- ceph: hold i_ceph_lock when removing caps for freeing inode (bsc#1148133).
- ceph: increment change_attribute on local changes (bsc#1148133 bsc#1136682).
- ceph: initialize superblock s_time_gran to 1 (bsc#1148133).
- ceph: remove request from waiting list before unregister (bsc#1148133).
- ceph: remove unused vxattr length helpers (bsc#1148133 bsc#1148570).
- ceph: silence a checker warning in mdsc_show() (bsc#1148133).
- ceph: support cephfs' own feature bits (bsc#1146346).
- ceph: support getting ceph.dir.pin vxattr (bsc#1146346).
- ceph: support versioned reply (bsc#1146346).
- ceph: use bit flags to define vxattr attributes (bsc#1146346).
- ceph: use ceph_evict_inode to cleanup inode's resource (bsc#1148133).
- cifs: Accept validate negotiate if server return NT_STATUS_NOT_SUPPORTED (bsc#1144333).
- cifs: add a new SMB2_close_flags function (bsc#1144333).
- cifs: add a smb2_compound_op and change QUERY_INFO to use it (bsc#1144333).
- cifs: add a timeout argument to wait_for_free_credits (bsc#1144333).
- cifs: add a warning if we try to to dequeue a deleted mid (bsc#1144333).
- cifs: add compound_send_recv() (bsc#1144333).
- cifs: add CONFIG_CIFS_DEBUG_KEYS to dump encryption keys (bsc#1144333).
- cifs: add credits from unmatched responses/messages (bsc#1144333).
- cifs: add debug output to show nocase mount option (bsc#1144333).
- cifs: Add DFS cache routines (bsc#1144333).
- cifs: Add direct I/O functions to file_operations (bsc#1144333).
- cifs: add fiemap support (bsc#1144333).
- cifs: add iface info to struct cifs_ses (bsc#1144333).
- cifs: add IOCTL for QUERY_INFO passthrough to userspace (bsc#1144333).
- cifs: add lease tracking to the cached root fid (bsc#1144333).
- cifs: Add minor debug message during negprot (bsc#1144333).
- cifs: add missing debug entries for kconfig options (bsc#1051510, bsc#1144333).
- cifs: add missing GCM module dependency (bsc#1144333).
- cifs: add missing support for ACLs in SMB 3.11 (bsc#1051510, bsc#1144333).
- cifs: add ONCE flag for cifs_dbg type (bsc#1144333).
- cifs: add pdu_size to the TCP_Server_Info structure (bsc#1144333).
- cifs: add resp_buf_size to the mid_q_entry structure (bsc#1144333).
- cifs: address trivial coverity warning (bsc#1144333).
- cifs: add server argument to the dump_detail method (bsc#1144333).
- cifs: add server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- cifs: add SFM mapping for 0x01-0x1F (bsc#1144333).
- cifs: add sha512 secmech (bsc#1051510, bsc#1144333).
- cifs: Adds information-level logging function (bsc#1144333).
- cifs: add SMB2_close_init()/SMB2_close_free() (bsc#1144333).
- cifs: add SMB2_ioctl_init/free helpers to be used with compounding (bsc#1144333).
- cifs: add SMB2_query_info_[init|free]() (bsc#1144333).
- cifs: Add smb2_send_recv (bsc#1144333).
- cifs: add spinlock for the openFileList to cifsInodeInfo (bsc#1144333).
- cifs: add .splice_write (bsc#1144333).
- cifs: Add support for direct I/O read (bsc#1144333).
- cifs: Add support for direct I/O write (bsc#1144333).
- cifs: Add support for direct pages in rdata (bsc#1144333).
- cifs: Add support for direct pages in wdata (bsc#1144333).
- cifs: Add support for failover in cifs_mount() (bsc#1144333).
- cifs: Add support for failover in cifs_reconnect() (bsc#1144333).
- cifs: Add support for failover in cifs_reconnect_tcon() (bsc#1144333).
- cifs: Add support for failover in smb2_reconnect() (bsc#1144333).
- cifs: Add support for FSCTL passthrough that write data to the server (bsc#1144333).
- cifs: add support for ioctl on directories (bsc#1144333).
- cifs: Add support for reading attributes on SMB2+ (bsc#1051510, bsc#1144333).
- cifs: add support for SEEK_DATA and SEEK_HOLE (bsc#1144333).
- cifs: Add support for writing attributes on SMB2+ (bsc#1051510, bsc#1144333).
- cifs: Adjust MTU credits before reopening a file (bsc#1144333).
- cifs: Allocate memory for all iovs in smb2_ioctl (bsc#1144333).
- cifs: Allocate validate negotiation request through kmalloc (bsc#1144333).
- cifs: allow calling SMB2_xxx_free(NULL) (bsc#1144333).
- cifs: allow disabling insecure dialects in the config (bsc#1144333).
- cifs: allow disabling less secure legacy dialects (bsc#1144333).
- cifs: allow guest mounts to work for smb3.11 (bsc#1051510, bsc#1144333).
- cifs: always add credits back for unsolicited PDUs (bsc#1144333).
- cifs: Always reset read error to -EIO if no response (bsc#1144333).
- cifs: Always resolve hostname before reconnecting (bsc#1051510, bsc#1144333).
- cifs: a smb2_validate_and_copy_iov failure does not mean the handle is invalid (bsc#1144333).
- cifs: auto disable 'serverino' in dfs mounts (bsc#1144333).
- cifs: avoid a kmalloc in smb2_send_recv/SendReceive2 for the common case (bsc#1144333).
- cifs: Avoid returning EBUSY to upper layer VFS (bsc#1144333).
- cifs: cache FILE_ALL_INFO for the shared root handle (bsc#1144333).
- cifs: Calculate the correct request length based on page offset and tail size (bsc#1144333).
- cifs: Call MID callback before destroying transport (bsc#1144333).
- cifs: change mkdir to use a compound (bsc#1144333).
- cifs: change smb2_get_data_area_len to take a smb2_sync_hdr as argument (bsc#1144333).
- cifs: Change SMB2_open to return an iov for the error parameter (bsc#1144333).
- cifs: change SMB2_OP_RENAME and SMB2_OP_HARDLINK to use compounding (bsc#1144333).
- cifs: change SMB2_OP_SET_EOF to use compounding (bsc#1144333).
- cifs: change SMB2_OP_SET_INFO to use compounding (bsc#1144333).
- cifs: change smb2_query_eas to use the compound query-info helper (bsc#1144333).
- cifs: change unlink to use a compound (bsc#1144333).
- cifs: change validate_buf to validate_iov (bsc#1144333).
- cifs: change wait_for_free_request() to take flags as argument (bsc#1144333).
- cifs: check CIFS_MOUNT_NO_DFS when trying to reuse existing sb (bsc#1144333).
- cifs: Check for reconnects before sending async requests (bsc#1144333).
- cifs: Check for reconnects before sending compound requests (bsc#1144333).
- cifs: check for STATUS_USER_SESSION_DELETED (bsc#1112902, bsc#1144333).
- cifs: Check for timeout on Negotiate stage (bsc#1091171, bsc#1144333).
- cifs: check if SMB2 PDU size has been padded and suppress the warning (bsc#1144333).
- cifs: check kmalloc before use (bsc#1051510, bsc#1144333).
- cifs: check kzalloc return (bsc#1144333).
- cifs: check MaxPathNameComponentLength != 0 before using it (bsc#1085536, bsc#1144333).
- cifs: check ntwrk_buf_start for NULL before dereferencing it (bsc#1144333).
- cifs: check rsp for NULL before dereferencing in SMB2_open (bsc#1085536, bsc#1144333).
- cifs: cifs_read_allocate_pages: do not iterate through whole page array on ENOMEM (bsc#1144333).
- cifs: clean up indentation, replace spaces with tab (bsc#1144333).
- cifs: cleanup smb2ops.c and normalize strings (bsc#1144333).
- cifs: complete PDU definitions for interface queries (bsc#1144333).
- cifs: connect to servername instead of IP for IPC$ share (bsc#1051510, bsc#1144333).
- cifs: Count SMB3 credits for malformed pending responses (bsc#1144333).
- cifs: create a define for how many iovs we need for an SMB2_open() (bsc#1144333).
- cifs: create a define for the max number of iov we need for a SMB2 set_info (bsc#1144333).
- cifs: create a helper function for compound query_info (bsc#1144333).
- cifs: create helpers for SMB2_set_info_init/free() (bsc#1144333).
- cifs: create SMB2_open_init()/SMB2_open_free() helpers (bsc#1144333).
- cifs: Display SMB2 error codes in the hex format (bsc#1144333).
- cifs: document tcon/ses/server refcount dance (bsc#1144333).
- cifs: do not allow creating sockets except with SMB1 posix exensions (bsc#1102097, bsc#1144333).
- cifs: Do not assume one credit for async responses (bsc#1144333).
- cifs: do not attempt cifs operation on smb2+ rename error (bsc#1144333).
- cifs: Do not consider -ENODATA as stat failure for reads (bsc#1144333).
- cifs: Do not count -ENODATA as failure for query directory (bsc#1051510, bsc#1144333).
- cifs: do not dereference smb_file_target before null check (bsc#1051510, bsc#1144333).
- cifs: Do not hide EINTR after sending network packets (bsc#1051510, bsc#1144333).
- cifs: Do not log credits when unmounting a share (bsc#1144333).
- cifs: do not log STATUS_NOT_FOUND errors for DFS (bsc#1051510, bsc#1144333).
- cifs: Do not match port on SMBDirect transport (bsc#1144333).
- cifs: Do not modify mid entry after submitting I/O in cifs_call_async (bsc#1051510, bsc#1144333).
- cifs: Do not reconnect TCP session in add_credits() (bsc#1051510, bsc#1144333).
- cifs: Do not reset lease state to NONE on lease break (bsc#1051510, bsc#1144333).
- cifs: do not return atime less than mtime (bsc#1144333).
- cifs: do not send invalid input buffer on QUERY_INFO requests (bsc#1144333).
- cifs: Do not set credits to 1 if the server didn't grant anything (bsc#1144333).
- cifs: do not show domain= in mount output when domain is empty (bsc#1144333).
- cifs: Do not skip SMB2 message IDs on send failures (bsc#1144333).
- cifs: do not use __constant_cpu_to_le32() (bsc#1144333).
- cifs: dump every session iface info (bsc#1144333).
- cifs: dump IPC tcon in debug proc file (bsc#1071306, bsc#1144333).
- cifs: fallback to older infolevels on findfirst queryinfo retry (bsc#1144333).
- cifs: Find and reopen a file before get MTU credits in writepages (bsc#1144333).
- cifs: fix a buffer leak in smb2_query_symlink (bsc#1144333).
- cifs: fix a credits leak for compund commands (bsc#1144333).
- cifs: Fix a debug message (bsc#1144333).
- cifs: Fix adjustment of credits for MTU requests (bsc#1051510, bsc#1144333).
- cifs: Fix an issue with re-sending rdata when transport returning -EAGAIN (bsc#1144333).
- cifs: Fix an issue with re-sending wdata when transport returning -EAGAIN (bsc#1144333).
- cifs: Fix a race condition with cifs_echo_request (bsc#1144333).
- cifs: Fix a tiny potential memory leak (bsc#1144333).
- cifs: Fix autonegotiate security settings mismatch (bsc#1087092, bsc#1144333).
- cifs: fix bi-directional fsctl passthrough calls (bsc#1144333).
- cifs: fix build break when CONFIG_CIFS_DEBUG2 enabled (bsc#1144333).
- cifs: fix build errors for SMB_DIRECT (bsc#1144333).
- cifs: Fix check for matching with existing mount (bsc#1144333).
- cifs: fix circular locking dependency (bsc#1064701, bsc#1144333).
- cifs: fix computation for MAX_SMB2_HDR_SIZE (bsc#1144333).
- cifs: fix confusing warning message on reconnect (bsc#1144333).
- cifs: fix crash in cifs_dfs_do_automount (bsc#1144333).
- cifs: fix crash in smb2_compound_op()/smb2_set_next_command() (bsc#1144333).
- cifs: fix crash querying symlinks stored as reparse-points (bsc#1144333).
- cifs: Fix credit calculation for encrypted reads with errors (bsc#1051510, bsc#1144333).
- cifs: Fix credit calculations in compound mid callback (bsc#1144333).
- cifs: Fix credit computation for compounded requests (bsc#1144333).
- cifs: Fix credits calculation for cancelled requests (bsc#1144333).
- cifs: Fix credits calculations for reads with errors (bsc#1051510, bsc#1144333).
- cifs: fix credits leak for SMB1 oplock breaks (bsc#1144333).
- cifs: fix deadlock in cached root handling (bsc#1144333).
- cifs: Fix DFS cache refresher for DFS links (bsc#1144333).
- cifs: fix encryption in SMB3.1.1 (bsc#1144333).
- cifs: Fix encryption/signing (bsc#1144333).
- cifs: Fix error mapping for SMB2_LOCK command which caused OFD lock problem (bsc#1051510, bsc#1144333).
- cifs: Fix error paths in writeback code (bsc#1144333).
- cifs: fix GlobalMid_Lock bug in cifs_reconnect (bsc#1144333).
- cifs: fix handle leak in smb2_query_symlink() (bsc#1144333).
- cifs: fix incorrect handling of smb2_set_sparse() return in smb3_simple_falloc (bsc#1144333).
- cifs: Fix infinite loop when using hard mount option (bsc#1091171, bsc#1144333).
- cifs: Fix invalid check in __cifs_calc_signature() (bsc#1144333).
- cifs: Fix kernel oops when traceSMB is enabled (bsc#1144333).
- cifs: fix kref underflow in close_shroot() (bsc#1144333).
- cifs: Fix leaking locked VFS cache pages in writeback retry (bsc#1144333).
- cifs: Fix lease buffer length error (bsc#1144333).
- cifs: fix memory leak and remove dead code (bsc#1144333).
- cifs: fix memory leak in SMB2_open() (bsc#1112894, bsc#1144333).
- cifs: fix memory leak in SMB2_read (bsc#1144333).
- cifs: Fix memory leak in smb2_set_ea() (bsc#1051510, bsc#1144333).
- cifs: fix memory leak of an allocated cifs_ntsd structure (bsc#1144333).
- cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case (bsc#1144333).
- cifs: Fix missing put_xid in cifs_file_strict_mmap (bsc#1087092, bsc#1144333).
- cifs: Fix module dependency (bsc#1144333).
- cifs: Fix mounts if the client is low on credits (bsc#1144333).
- cifs: fix NULL deref in SMB2_read (bsc#1085539, bsc#1144333).
- cifs: Fix NULL pointer dereference of devname (bnc#1129519).
- cifs: Fix NULL pointer deref on SMB2_tcon() failure (bsc#1071009, bsc#1144333).
- cifs: Fix NULL ptr deref (bsc#1144333).
- cifs: fix page reference leak with readv/writev (bsc#1144333).
- cifs: fix panic in smb2_reconnect (bsc#1144333).
- cifs: fix parsing of symbolic link error response (bsc#1144333).
- cifs: fix POSIX lock leak and invalid ptr deref (bsc#1114542, bsc#1144333).
- cifs: Fix possible hang during async MTU reads and writes (bsc#1051510, bsc#1144333).
- cifs: Fix possible oops and memory leaks in async IO (bsc#1144333).
- cifs: Fix potential OOB access of lock element array (bsc#1051510, bsc#1144333).
- cifs: Fix read after write for files with read caching (bsc#1051510, bsc#1144333).
- cifs: fix return value for cifs_listxattr (bsc#1051510, bsc#1144333).
- cifs: fix rmmod regression in cifs.ko caused by force_sig changes (bsc#1144333).
- cifs: Fix separator when building path from dentry (bsc#1051510, bsc#1144333).
- cifs: fix sha512 check in cifs_crypto_secmech_release (bsc#1051510, bsc#1144333).
- cifs: fix signed/unsigned mismatch on aio_read patch (bsc#1144333).
- cifs: Fix signing for SMB2/3 (bsc#1144333).
- cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (bsc#1144333).
- cifs: Fix slab-out-of-bounds when tracing SMB tcon (bsc#1144333).
- cifs: fix SMB1 breakage (bsc#1144333).
- cifs: fix smb3_zero_range for Azure (bsc#1144333).
- cifs: fix smb3_zero_range so it can expand the file-size when required (bsc#1144333).
- cifs: fix sparse warning on previous patch in a few printks (bsc#1144333).
- cifs: fix spelling mistake, EACCESS -&gt; EACCES (bsc#1144333).
- cifs: Fix stack out-of-bounds in smb{2,3}_create_lease_buf() (bsc#1051510, bsc#1144333).
- cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (bsc#1144333).
- cifs: Fix to use kmem_cache_free() instead of kfree() (bsc#1144333).
- cifs: Fix trace command logging for SMB2 reads and writes (bsc#1144333).
- cifs: fix typo in cifs_dbg (bsc#1144333).
- cifs: fix typo in debug message with struct field ia_valid (bsc#1144333).
- cifs: fix uninitialized ptr deref in smb2 signing (bsc#1144333).
- cifs: Fix use-after-free in SMB2_read (bsc#1144333).
- cifs: Fix use-after-free in SMB2_write (bsc#1144333).
- cifs: Fix use after free of a mid_q_entry (bsc#1112903, bsc#1144333).
- cifs: fix use-after-free of the lease keys (bsc#1144333).
- cifs: Fix validation of signed data in smb2 (bsc#1144333).
- cifs: Fix validation of signed data in smb3+ (bsc#1144333).
- cifs: fix wrapping bugs in num_entries() (bsc#1051510, bsc#1144333).
- cifs: flush before set-info if we have writeable handles (bsc#1144333).
- cifs: For SMB2 security informaion query, check for minimum sized security descriptor instead of sizeof FileAllInformation class (bsc#1051510, bsc#1144333).
- cifs: handle large EA requests more gracefully in smb2+ (bsc#1144333).
- cifs: handle netapp error codes (bsc#1136261).
- cifs: hide unused functions (bsc#1051510, bsc#1144333).
- cifs: implement v3.11 preauth integrity (bsc#1051510, bsc#1144333).
- cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure cifs) (bsc#1144333).
- cifs: integer overflow in in SMB2_ioctl() (bsc#1051510, bsc#1144333).
- cifs: Introduce helper function to get page offset and length in smb_rqst (bsc#1144333).
- cifs: Introduce offset for the 1st page in data transfer structures (bsc#1144333).
- cifs: invalidate cache when we truncate a file (bsc#1051510, bsc#1144333).
- cifs: keep FileInfo handle live during oplock break (bsc#1106284, bsc#1131565, bsc#1144333).
- cifs: limit amount of data we request for xattrs to CIFSMaxBufSize (bsc#1144333).
- cifs: Limit memory used by lock request calls to a page (bsc#1144333).
- cifs_lookup(): cifs_get_inode_...() never returns 0 with *inode left NULL (bsc#1144333).
- cifs_lookup(): switch to d_splice_alias() (bsc#1144333).
- cifs: make arrays static const, reduces object code size (bsc#1144333).
- cifs: Make devname param optional in cifs_compose_mount_options() (bsc#1144333).
- cifs: make IPC a regular tcon (bsc#1071306, bsc#1144333).
- cifs: make minor clarifications to module params for cifs.ko (bsc#1144333).
- cifs: make mknod() an smb_version_op (bsc#1144333).
- cifs: make 'nodfs' mount opt a superblock flag (bsc#1051510, bsc#1144333).
- cifs: make rmdir() use compounding (bsc#1144333).
- cifs: make smb_send_rqst take an array of requests (bsc#1144333).
- cifs: Make sure all data pages are signed correctly (bsc#1144333).
- cifs: Make use of DFS cache to get new DFS referrals (bsc#1144333).
- cifs: Mask off signals when sending SMB packets (bsc#1144333).
- cifs: minor clarification in comments (bsc#1144333).
- cifs: Minor Kconfig clarification (bsc#1144333).
- cifs: minor updates to module description for cifs.ko (bsc#1144333).
- cifs: Move credit processing to mid callbacks for SMB3 (bsc#1144333).
- cifs: move default port definitions to cifsglob.h (bsc#1144333).
- cifs: move large array from stack to heap (bsc#1144333).
- cifs: Move open file handling to writepages (bsc#1144333).
- cifs: Move unlocking pages from wdata_send_pages() (bsc#1144333).
- cifs: OFD locks do not conflict with eachothers (bsc#1051510, bsc#1144333).
- cifs: Only free DFS target list if we actually got one (bsc#1144333).
- cifs: Only send SMB2_NEGOTIATE command on new TCP connections (bsc#1144333).
- cifs: only wake the thread for the very last PDU in a compound (bsc#1144333).
- cifs: parse and store info on iface queries (bsc#1144333).
- cifs: pass flags down into wait_for_free_credits() (bsc#1144333).
- cifs: Pass page offset for calculating signature (bsc#1144333).
- cifs: Pass page offset for encrypting (bsc#1144333).
- cifs: pass page offsets on SMB1 read/write (bsc#1144333).
- cifs: prevent integer overflow in nxt_dir_entry() (bsc#1051510, bsc#1144333).
- cifs: prevent starvation in wait_for_free_credits for multi-credit requests (bsc#1144333).
- cifs: print CIFSMaxBufSize as part of /proc/fs/cifs/DebugData (bsc#1144333).
- cifs: Print message when attempting a mount (bsc#1144333).
- cifs: Properly handle auto disabling of serverino option (bsc#1144333).
- cifs: protect against server returning invalid file system block size (bsc#1144333).
- cifs: prototype declaration and definition for smb 2 - 3 and cifsacl mount options (bsc#1051510, bsc#1144333).
- cifs: prototype declaration and definition to set acl for smb 2 - 3 and cifsacl mount options (bsc#1051510, bsc#1144333).
- cifs: push rfc1002 generation down the stack (bsc#1144333).
- cifs: read overflow in is_valid_oplock_break() (bsc#1144333).
- cifs: Reconnect expired SMB sessions (bnc#1060662).
- cifs: refactor and clean up arguments in the reparse point parsing (bsc#1144333).
- cifs: refactor crypto shash/sdesc allocation&amp;free (bsc#1051510, bsc#1144333).
- cifs: Refactor out cifs_mount() (bsc#1144333).
- cifs: release auth_key.response for reconnect (bsc#1085536, bsc#1144333).
- cifs: release cifs root_cred after exit_cifs (bsc#1085536, bsc#1144333).
- cifs: remove coverity warning in calc_lanman_hash (bsc#1144333).
- cifs: Remove custom credit adjustments for SMB2 async IO (bsc#1144333).
- cifs: remove header_preamble_size where it is always 0 (bsc#1144333).
- cifs: remove redundant duplicated assignment of pointer 'node' (bsc#1144333).
- cifs: remove rfc1002 hardcoded constants from cifs_discard_remaining_data() (bsc#1144333).
- cifs: remove rfc1002 header from all SMB2 response structures (bsc#1144333).
- cifs: remove rfc1002 header from smb2_close_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_create_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_echo_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_flush_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_ioctl_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_lease_ack (bsc#1144333).
- cifs: remove rfc1002 header from smb2_lock_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_logoff_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_negotiate_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_oplock_break we get from server (bsc#1144333).
- cifs: remove rfc1002 header from smb2_query_directory_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_query_info_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2 read/write requests (bsc#1144333).
- cifs: remove rfc1002 header from smb2_sess_setup_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_set_info_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_tree_connect_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_tree_disconnect_req (bsc#1144333).
- cifs: remove set but not used variable 'cifs_sb' (bsc#1144333).
- cifs: remove set but not used variable 'sep' (bsc#1144333).
- cifs: remove set but not used variable 'server' (bsc#1144333).
- cifs: remove set but not used variable 'smb_buf' (bsc#1144333).
- cifs: remove small_smb2_init (bsc#1144333).
- cifs: remove smb2_send_recv() (bsc#1144333).
- cifs: remove struct smb2_hdr (bsc#1144333).
- cifs: remove struct smb2_oplock_break_rsp (bsc#1144333).
- cifs: remove the is_falloc argument to SMB2_set_eof (bsc#1144333).
- cifs: remove unused stats (bsc#1144333).
- cifs: remove unused value pointed out by Coverity (bsc#1144333).
- cifs: remove unused variable from SMB2_read (bsc#1144333).
- cifs: rename and clarify CIFS_ASYNC_OP and CIFS_NO_RESP (bsc#1144333).
- cifs: Reopen file before get SMB2 MTU credits for async IO (bsc#1144333).
- cifs: replace a 4 with server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- cifs: replace snprintf with scnprintf (bsc#1144333).
- cifs: Respect reconnect in MTU credits calculations (bsc#1144333).
- cifs: Respect reconnect in non-MTU credits calculations (bsc#1144333).
- cifs: Respect SMB2 hdr preamble size in read responses (bsc#1144333).
- cifs: return correct errors when pinning memory failed for direct I/O (bsc#1144333).
- cifs: Return -EAGAIN instead of -ENOTSOCK (bsc#1144333).
- cifs: return -ENODATA when deleting an xattr that does not exist (bsc#1144333).
- cifs: Return error code when getting file handle for writeback (bsc#1144333).
- cifs: return error on invalid value written to cifsFYI (bsc#1144333).
- cifs: Save TTL value when parsing DFS referrals (bsc#1144333).
- cifs: Select all required crypto modules (bsc#1085536, bsc#1144333).
- cifs: set mapping error when page writeback fails in writepage or launder_pages (bsc#1144333).
- cifs: set oparms.create_options rather than or'ing in CREATE_OPEN_BACKUP_INTENT (bsc#1144333).
- cifs: Set reconnect instance to one initially (bsc#1144333).
- cifs: set *resp_buf_type to NO_BUFFER on error (bsc#1144333).
- cifs: Show locallease in /proc/mounts for cifs shares mounted with locallease feature (bsc#1144333).
- cifs: show 'soft' in the mount options for hard mounts (bsc#1144333).
- cifs: show the w bit for writeable /proc/fs/cifs/* files (bsc#1144333).
- cifs: silence compiler warnings showing up with gcc-8.0.0 (bsc#1090734, bsc#1144333).
- cifs: Silence uninitialized variable warning (bsc#1144333).
- cifs: simple stats should always be enabled (bsc#1144333).
- cifs: simplify code by removing CONFIG_CIFS_ACL ifdef  (bsc#1144333). - Update config files.
- cifs: simplify how we handle credits in compound_send_recv() (bsc#1144333).
- cifs: Skip any trailing backslashes from UNC (bsc#1144333).
- cifs: smb2 commands can not be negative, remove confusing check (bsc#1144333).
- cifs: smb2ops: Fix listxattr() when there are no EAs (bsc#1051510, bsc#1144333).
- cifs: smb2ops: Fix NULL check in smb2_query_symlink (bsc#1144333).
- cifs: smb2pdu: Fix potential NULL pointer dereference (bsc#1144333).
- cifs: smbd: Add parameter rdata to smb2_new_read_req (bsc#1144333).
- cifs: smbd: Add rdma mount option (bsc#1144333).
- cifs: smbd: Add SMB Direct debug counters (bsc#1144333).
- cifs: smbd: Add SMB Direct protocol initial values and constants (bsc#1144333).
- cifs: smbd: Avoid allocating iov on the stack (bsc#1144333).
- cifs: smbd: avoid reconnect lockup (bsc#1144333).
- cifs: smbd: Check for iov length on sending the last iov (bsc#1144333).
- cifs: smbd: depend on INFINIBAND_ADDR_TRANS (bsc#1144333).
- cifs: smbd: Disable signing on SMB direct transport (bsc#1144333).
- cifs: smbd: disconnect transport on RDMA errors (bsc#1144333).
- cifs: smbd: Do not call ib_dereg_mr on invalidated memory registration (bsc#1144333).
- cifs: smbd: Do not destroy transport on RDMA disconnect (bsc#1144333).
- cifs: smbd: Do not use RDMA read/write when signing is used (bsc#1144333).
- cifs: smbd: Dump SMB packet when configured (bsc#1144333).
- cifs: smbd: Enable signing with smbdirect (bsc#1144333).
- cifs: smbd: Establish SMB Direct connection (bsc#1144333).
- cifs: smbd: export protocol initial values (bsc#1144333).
- cifs: smbd: fix spelling mistake: faield and legnth (bsc#1144333).
- cifs: smbd: Fix the definition for SMB2_CHANNEL_RDMA_V1_INVALIDATE (bsc#1144333).
- cifs: smbd: Implement function to create a SMB Direct connection (bsc#1144333).
- cifs: smbd: Implement function to destroy a SMB Direct connection (bsc#1144333).
- cifs: smbd: Implement function to receive data via RDMA receive (bsc#1144333).
- cifs: smbd: Implement function to reconnect to a SMB Direct transport (bsc#1144333).
- cifs: smbd: Implement function to send data via RDMA send (bsc#1144333).
- cifs: smbd: Implement RDMA memory registration (bsc#1144333).
- cifs: smbd: Indicate to retry on transport sending failure (bsc#1144333).
- cifs: smbd: Introduce kernel config option CONFIG_CIFS_SMB_DIRECT (bsc#1144333).
- cifs: smbd: Read correct returned data length for RDMA write (SMB read) I/O (bsc#1144333).
- cifs: smbd: Retry on memory registration failure (bsc#1144333).
- cifs: smbd: Return EINTR when interrupted (bsc#1144333).
- cifs: smbd: Set SMB Direct maximum read or write size for I/O (bsc#1144333).
- cifs: smbd: _smbd_get_connection() can be static (bsc#1144333).
- cifs: smbd: Support page offset in memory registration (bsc#1144333).
- cifs: smbd: Support page offset in RDMA recv (bsc#1144333).
- cifs: smbd: Support page offset in RDMA send (bsc#1144333).
- cifs: smbd: take an array of reqeusts when sending upper layer data (bsc#1144333).
- cifs: smbd: Upper layer connects to SMBDirect session (bsc#1144333).
- cifs: smbd: Upper layer destroys SMB Direct session on shutdown or umount (bsc#1144333).
- cifs: smbd: Upper layer performs SMB read via RDMA write through memory registration (bsc#1144333).
- cifs: smbd: Upper layer performs SMB write via RDMA read through memory registration (bsc#1144333).
- cifs: smbd: Upper layer receives data via RDMA receive (bsc#1144333).
- cifs: smbd: Upper layer reconnects to SMB Direct session (bsc#1144333).
- cifs: smbd: Upper layer sends data via RDMA send (bsc#1144333).
- cifs: smbd: Use the correct DMA direction when sending data (bsc#1144333).
- cifs: smbd: When reconnecting to server, call smbd_destroy() after all MIDs have been called (bsc#1144333).
- cifs: smbd: work around gcc -Wmaybe-uninitialized warning (bsc#1144333).
- cifs: start DFS cache refresher in cifs_mount() (bsc#1144333).
- cifs: store the leaseKey in the fid on SMB2_open (bsc#1051510, bsc#1144333).
- cifs: suppress some implicit-fallthrough warnings (bsc#1144333).
- cifs: track writepages in vfs operation counters (bsc#1144333).
- cifs: Try to acquire credits at once for compound requests (bsc#1144333).
- cifs: update calc_size to take a server argument (bsc#1144333).
- cifs: update init_sg, crypt_message to take an array of rqst (bsc#1144333).
- cifs: update internal module number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.12 (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.14 (bsc#1144333).
- cifs: update module internal version number (bsc#1144333).
- cifs: update multiplex loop to handle compounded responses (bsc#1144333).
- cifs: update receive_encrypted_standard to handle compounded responses (bsc#1144333).
- cifs: update smb2_calc_size to use smb2_sync_hdr instead of smb2_hdr (bsc#1144333).
- cifs: update smb2_check_message to handle PDUs without a 4 byte length header (bsc#1144333).
- cifs: update smb2_queryfs() to use compounding (bsc#1144333).
- cifs: update __smb_send_rqst() to take an array of requests (bsc#1144333).
- cifs: use a compound for setting an xattr (bsc#1144333).
- cifs: use a refcount to protect open/closing the cached file handle (bsc#1144333).
- cifs: use correct format characters (bsc#1144333).
- cifs: Use correct packet length in SMB2_TRANSFORM header (bsc#1144333).
- cifs: Use GFP_ATOMIC when a lock is held in cifs_mount() (bsc#1144333).
- cifs: Use kmemdup in SMB2_ioctl_init() (bsc#1144333).
- cifs: Use kmemdup rather than duplicating its implementation in smb311_posix_mkdir() (bsc#1144333).
- cifs: Use kzfree() to free password (bsc#1144333).
- cifs: Use offset when reading pages (bsc#1144333).
- cifs: Use smb 2 - 3 and cifsacl mount options getacl functions (bsc#1051510, bsc#1144333).
- cifs: Use smb 2 - 3 and cifsacl mount options setacl function (bsc#1051510, bsc#1144333).
- cifs: use tcon_ipc instead of use_ipc parameter of SMB2_ioctl (bsc#1071306, bsc#1144333).
- cifs: use the correct length when pinning memory for direct I/O for write (bsc#1144333).
- cifs: Use ULL suffix for 64-bit constant (bsc#1051510, bsc#1144333).
- cifs: wait_for_free_credits() make it possible to wait for &gt;=1 credits (bsc#1144333).
- cifs: we can not use small padding iovs together with encryption (bsc#1144333).
- cifs: When sending data on socket, pass the correct page offset (bsc#1144333).
- cifs: zero-range does not require the file is sparse (bsc#1144333).
- cifs: zero sensitive data when freeing (bsc#1087092, bsc#1144333).
- cifs: Cleanup some minor endian issues in smb3 rdma (bsc#1144333).
- clk: add clk_bulk_get accessories (bsc#1144813).
- clk: at91: fix update bit maps on CFG_MOR write (bsc#1051510).
- clk: bcm2835: remove pllb (jsc#SLE-7294).
- clk: bcm283x: add driver interfacing with Raspberry Pi's firmware (jsc#SLE-7294).
- clk: bulk: silently error out on EPROBE_DEFER (bsc#1144718,bsc#1144813).
- clk: Export clk_bulk_prepare() (bsc#1144813).
- clk: qoriq: add support for lx2160a ().
- clk: raspberrypi: register platform device for raspberrypi-cpufreq (jsc#SLE-7294).
- clk: renesas: cpg-mssr: Fix reset control race condition (bsc#1051510).
- clk: rockchip: Add 1.6GHz PLL rate for rk3399 (bsc#1144718,bsc#1144813).
- clk: rockchip: assign correct id for pclk_ddr and hclk_sd in rk3399 (bsc#1144718,bsc#1144813).
- clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks (bsc#1051510).
- clk: sunxi-ng: v3s: add the missing PLL_DDR1 (bsc#1051510).
- compat_ioctl: pppoe: fix PPPOEIOCSFWD handling (bsc#1051510).
- Compile nvme.ko as module (bsc#1150846)
- config: arm64: Remove CONFIG_ARM64_MODULE_CMODEL_LARGE Option removed by patches in bsc#1148219
- coredump: split pipe command whitespace before expanding template (bsc#1051510).
- cpufreq: add driver for Raspberry Pi (jsc#SLE-7294).
- cpufreq: dt: Try freeing static OPPs only if we have added them (jsc#SLE-7294).
- cpu/speculation: Warn on unsupported mitigations= parameter (bsc#1114279).
- crypto: caam - fix concurrency issue in givencrypt descriptor (bsc#1051510).
- crypto: caam - free resources in case caam_rng registration failed (bsc#1051510).
- crypto: caam/qi - fix error handling in ERN handler (bsc#1111666).
- crypto: cavium/zip - Add missing single_release() (bsc#1051510).
- crypto: ccp - Add support for valid authsize values less than 16 (bsc#1051510).
- crypto: ccp - Fix oops by properly managing allocated structures (bsc#1051510).
- crypto: ccp - Ignore tag length when decrypting GCM ciphertext (bsc#1051510).
- crypto: ccp - Ignore unconfigured CCP device on suspend/resume (bnc#1145934).
- crypto: ccp - Reduce maximum stack usage (bsc#1051510).
- crypto: ccp - Validate buffer lengths for copy operations (bsc#1051510).
- crypto: qat - Silence smp_processor_id() warning (bsc#1051510).
- crypto: skcipher - Unmap pages after an external error (bsc#1051510).
- crypto: talitos - fix skcipher failure due to wrong output IV (bsc#1051510).
- crypto: virtio - Read crypto services and algorithm masks (jsc#SLE-5844 jsc#SLE-6331 bsc#1145446 LTC#175307).
- crypto: virtio - Register an algo only if it's supported (jsc#SLE-5844 jsc#SLE-6331 bsc#1145446 LTC#175307).
- cx82310_eth: fix a memory leak bug (bsc#1051510).
- dax: dax_layout_busy_page() should not unmap cow pages (bsc#1148698).
- devres: always use dev_name() in devm_ioremap_resource() (git fixes).
- dfs_cache: fix a wrong use of kfree in flush_cache_ent() (bsc#1144333).
- dma-buf: balance refcount inbalance (bsc#1051510).
- dma-buf/sw_sync: Synchronize signal vs syncpt free (bsc#1111666).
- dmaengine: dw: platform: Switch to acpi_dma_controller_register() (bsc#1051510).
- dmaengine: iop-adma.c: fix printk format warning (bsc#1051510).
- dmaengine: rcar-dmac: Reject zero-length slave DMA requests (bsc#1051510).
- dm btree: fix order of block initialization in btree_split_beneath (git fixes).
- dm bufio: fix deadlock with loop device (git fixes).
- dm cache metadata: Fix loading discard bitset (git fixes).
- dm crypt: do not overallocate the integrity tag space (git fixes).
- dm crypt: fix parsing of extended IV arguments (git fixes).
- dm delay: fix a crash when invalid device is specified (git fixes).
- dm: fix to_sector() for 32bit (git fixes).
- dm integrity: change memcmp to strncmp in dm_integrity_ctr (git fixes).
- dm integrity: correctly calculate the size of metadata area (git fixes).
- dm integrity: fix a crash due to BUG_ON in __journal_read_write() (git fixes).
- dm integrity: fix deadlock with overlapping I/O (git fixes).
- dm integrity: limit the rate of error messages (git fixes).
- dm kcopyd: always complete failed jobs (git fixes).
- dm log writes: make sure super sector log updates are written in order (git fixes).
- dm raid: add missing cleanup in raid_ctr() (git fixes).
- dm: revert 8f50e358153d ('dm: limit the max bio size as BIO_MAX_PAGES * PAGE_SIZE') (git fixes).
- dm space map metadata: fix missing store of apply_bops() return value (git fixes).
- dm table: fix invalid memory accesses with too high sector number (git fixes).
- dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (git fixes).
- dm thin: fix bug where bio that overwrites thin block ignores FUA (git fixes).
- dm thin: fix passdown_double_checking_shared_status() (git fixes).
- dm zoned: fix potential NULL dereference in dmz_do_reclaim() (git fixes).
- dm zoned: Fix zone report handling (git fixes).
- dm zoned: fix zone state management race (git fixes).
- dm zoned: improve error handling in i/o map code (git fixes).
- dm zoned: improve error handling in reclaim (git fixes).
- dm zoned: properly handle backing device failure (git fixes).
- dm zoned: Silence a static checker warning (git fixes).
- Documentation: Add nospectre_v1 parameter (bsc#1051510).
- Documentation/networking: fix default_ttl typo in mpls-sysctl (bsc#1051510).
- Documentation: Update Documentation for iommu.passthrough (bsc#1136039).
- Do not log confusing message on reconnect by default (bsc#1129664, bsc#1144333).
- Do not log expected error on DFS referral request (bsc#1051510, bsc#1144333).
- driver core: Fix use-after-free and double free on glue directory (bsc#1131281).
- drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl (bsc#1051510).
- drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings (bsc#1051510).
- drivers: thermal: int340x_thermal: Fix sysfs race condition (bsc#1051510).
- drm/amd/display: Always allocate initial connector state state (bsc#1111666).
- drm/amd/display: Disable ABM before destroy ABM struct (bsc#1111666).
- drm/amd/display: Fill prescale_params-&gt;scale for RGB565 (bsc#1111666).
- drm/amd/display: fix compilation error (bsc#1111666).
- drm/amd/display: Fix dc_create failure handling and 666 color depths (bsc#1111666).
- drm/amd/display: Increase size of audios array (bsc#1111666).
- drm/amd/display: num of sw i2c/aux engines less than num of connectors (bsc#1145946).
- drm/amd/display: Only enable audio if speaker allocation exists (bsc#1111666).
- drm/amd/display: Remove redundant non-zero and overflow check (bsc#1145946).
- drm/amd/display: use encoder's engine id to find matched free audio device (bsc#1111666).
- drm/amd/display: Wait for backlight programming completion in set backlight level (bsc#1111666).
- drm/amdgpu: Add APTX quirk for Dell Latitude 5495 (bsc#1142635)
- drm/amdgpu: added support 2nd UVD instance (bsc#1143331).
- drm/amdgpu:change VEGA booting with firmware loaded by PSP (bsc#1143331).
- drm/amdgpu: fix a potential information leaking bug (bsc#1111666).
- drm/amdgpu/psp: move psp version specific function pointers to (bsc#1135642)
- drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE (bsc#1111666).
- drm/amdkfd: Fix a potential memory leak (bsc#1111666).
- drm/amdkfd: Fix sdma queue map issue (bsc#1111666).
- drm/bridge: lvds-encoder: Fix build error while CONFIG_DRM_KMS_HELPER=m (bsc#1111666).
- drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz (bsc#1051510).
- drm/bridge: tc358767: read display_props in get_modes() (bsc#1051510).
- drm/crc-debugfs: Also sprinkle irqrestore over early exits (bsc#1051510).
- drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry (bsc#1051510).
- drm/edid: parse CEA blocks embedded in DisplayID (bsc#1111666).
- drm/etnaviv: add missing failure path to destroy suballoc (bsc#1135642)
- drm/exynos: fix missing decrement of retry counter (bsc#1111666).
- drm/i915: Do not deballoon unused ggtt drm_mm_node in linux guest (bsc#1142635)
- drm/i915: Fix GEN8_MCR_SELECTOR programming (bsc#1111666).
- drm/i915: Fix HW readout for crtc_clock in HDMI mode (bsc#1111666).
- drm/i915: Fix the TBT AUX power well enabling (bsc#1111666).
- drm/i915: Fix various tracepoints for gen2 (bsc#1113722)
- drm/i915: Fix wrong escape clock divisor init for GLK (bsc#1051510).
- drm/i915: Fix wrong escape clock divisor init for GLK (bsc#1142635)
- drm/i915/gvt: fix incorrect cache entry for guest page mapping (bsc#1111666).
- drm/i915/perf: ensure we keep a reference on the driver (bsc#1051510).
- drm/i915/perf: ensure we keep a reference on the driver (bsc#1142635)
- drm/i915/perf: fix ICL perf register offsets (bsc#1111666).
- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- drm/i915/userptr: Acquire the page lock around set_page_dirty() (bsc#1051510).
- drm/imx: Drop unused imx-ipuv3-crtc.o build (bsc#1113722)
- drm/imx: notify drm core before sending event during crtc disable (bsc#1135642)
- drm/imx: only send event on crtc disable if kept disabled (bsc#1135642)
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver (bsc#1135642)
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable() (bsc#1135642)
- drm/mediatek: clear num_pipes when unbind driver (bsc#1135642)
- drm/mediatek: fix unbind functions (bsc#1135642)
- drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto (bsc#1111666).
- drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto (bsc#1142635)
- drm/mediatek: unbind components in mtk_drm_unbind() (bsc#1135642)
- drm/mediatek: use correct device to import PRIME buffers (bsc#1111666).
- drm/mediatek: use correct device to import PRIME buffers (bsc#1142635)
- drm/msm: Depopulate platform on probe failure (bsc#1051510).
- drm: msm: Fix add_gpu_components (bsc#1051510).
- drm/msm/mdp5: Fix mdp5_cfg_init error return (bsc#1142635)
- drm/nouveau: Do not retry infinitely when receiving no data on i2c (bsc#1142635)
- drm/nouveau: fix memory leak in nouveau_conn_reset() (bsc#1051510).
- drm/panel: simple: Fix panel_simple_dsi_probe (bsc#1051510).
- drm/rockchip: Suspend DP late (bsc#1051510).
- drm/rockchip: Suspend DP late (bsc#1142635)
- drm: silence variable 'conn' set but not used (bsc#1051510).
- drm/udl: introduce a macro to convert dev to udl. (bsc#1113722)
- drm/udl: move to embedding drm device inside udl device. (bsc#1113722)
- drm/virtio: Add memory barriers for capset cache (bsc#1051510).
- drm/vmwgfx: fix a warning due to missing dma_parms (bsc#1135642)
- drm/vmwgfx: fix memory leak when too many retries have occurred (bsc#1051510).
- drm/vmwgfx: Use the backdoor port if the HB port is not available (bsc#1135642)
- Drop an ASoC fix that was reverted in 4.14.y stable
- eCryptfs: fix a couple type promotion bugs (bsc#1051510).
- EDAC/amd64: Add Family 17h Model 30h PCI IDs (bsc#1112178).
- EDAC, amd64: Add Family 17h, models 10h-2fh support (bsc#1112178).
- EDAC/amd64: Adjust printed chip select sizes when interleaved (bsc#1131489).
- EDAC/amd64: Cache secondary Chip Select registers (bsc#1131489).
- EDAC/amd64: Decode syndrome before translating address (bsc#1114279).
- EDAC/amd64: Decode syndrome before translating address (bsc#1131489).
- EDAC/amd64: Find Chip Select memory size using Address Mask (bsc#1131489).
- EDAC/amd64: Initialize DIMM info for systems with more than two channels (bsc#1131489).
- EDAC/amd64: Recognize DRAM device type ECC capability (bsc#1131489).
- EDAC/amd64: Recognize x16 symbol size (bsc#1131489).
- EDAC/amd64: Set maximum channel layer size depending on family (bsc#1131489).
- EDAC/amd64: Support asymmetric dual-rank DIMMs (bsc#1131489).
- EDAC/amd64: Support more than two controllers for chip selects handling (bsc#1131489).
- EDAC/amd64: Support more than two Unified Memory Controllers (bsc#1131489).
- EDAC/amd64: Use a macro for iterating over Unified Memory Controllers (bsc#1131489).
- EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec (bsc#1114279).
- eeprom: at24: make spd world-readable again (git-fixes).
- efi/bgrt: Drop BGRT status field reserved bits check (bsc#1051510).
- ehea: Fix a copy-paste err in ehea_init_port_res (bsc#1051510).
- ext4: fix warning inside ext4_convert_unwritten_extents_endio (bsc#1152025).
- ext4: set error return correctly when ext4_htree_store_dirent fails (bsc#1152024).
- ext4: use jbd2_inode dirty range scoping (bsc#1148616).
- firmware: raspberrypi: register clk device (jsc#SLE-7294).
- firmware: ti_sci: Always request response from firmware (bsc#1051510).
- Fix encryption labels and lengths for SMB3.1.1 (bsc#1085536, bsc#1144333).
- fix incorrect error code mapping for OBJECTID_NOT_FOUND (bsc#1144333).
- Fix kabi for: NFSv4: Fix OPEN / CLOSE race (git-fixes).
- Fix match_server check to allow for auto dialect negotiate (bsc#1144333).
- Fix SMB3.1.1 guest authentication to Samba (bsc#1085536, bsc#1144333).
- fix smb3-encryption breakage when CONFIG_DEBUG_SG=y (bsc#1051510, bsc#1144333).
- fix struct ufs_req removal of unused field (git-fixes).
- Fix warning messages when mounting to older servers (bsc#1144333).
- floppy: fix invalid pointer dereference in drive_name (bsc#1111666).
- floppy: fix out-of-bounds read in next_valid_format (bsc#1111666).
- floppy: fix usercopy direction (bsc#1111666).
- fs/cifs/cifsacl.c Fixes typo in a comment (bsc#1144333).
- fs/cifs: cifsssmb: Change return type of convert_ace_to_cifs_ace (bsc#1144333).
- fs/cifs: do not translate SFM_SLASH (U+F026) to backslash (bsc#1144333).
- fs/cifs: Drop unlikely before IS_ERR(_OR_NULL) (bsc#1144333).
- fs/cifs: fix uninitialised variable warnings (bsc#1144333).
- fs/cifs: Kconfig: pedantic formatting (bsc#1144333).
- fs/cifs: Replace _free_xid call in cifs_root_iget function (bsc#1144333).
- fs/cifs: require sha512 (bsc#1051510, bsc#1144333).
- fs/cifs: Simplify ib_post_(send|recv|srq_recv)() calls (bsc#1144333).
- fs/cifs/smb2pdu.c: fix buffer free in SMB2_ioctl_free (bsc#1144333).
- fs/cifs: suppress a string overflow warning (bsc#1144333).
- fs/*/Kconfig: drop links to 404-compliant http://acl.bestbits.at (bsc#1144333).
- fsl/fman: Use GFP_ATOMIC in {memac,tgec}_add_hash_mac_address() (bsc#1051510).
- fs/xfs: Fix return code of xfs_break_leased_layouts() (bsc#1148031).
- fs/xfs: xfs_log: Do not use KM_MAYFAIL at xfs_log_reserve() (bsc#1148033).
- ftrace: Check for empty hash and comment the race with registering probes (bsc#1149418).
- ftrace: Check for successful allocation of hash (bsc#1149424).
- ftrace: Fix NULL pointer dereference in t_probe_next() (bsc#1149413).
- gpio: Fix build error of function redefinition (bsc#1051510).
- gpio: fix line flag validation in lineevent_create (bsc#1051510).
- gpio: fix line flag validation in linehandle_create (bsc#1051510).
- gpio: gpio-omap: add check for off wake capable gpios (bsc#1051510).
- gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist (bsc#1051510).
- gpiolib: fix incorrect IRQ requesting of an active-low lineevent (bsc#1051510).
- gpiolib: never report open-drain/source lines as 'input' to user-space (bsc#1051510).
- gpiolib: only check line handle flags once (bsc#1051510).
- gpio: Move gpiochip_lock/unlock_as_irq to gpio/driver.h (bsc#1051510).
- gpio: mxs: Get rid of external API call (bsc#1051510).
- gpio: omap: ensure irq is enabled before wakeup (bsc#1051510).
- gpio: pxa: handle corner case of unprobed device (bsc#1051510).
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM (bsc#1142635)
- HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT (bsc#1051510).
- HID: Add quirk for HP X1200 PIXART OEM mouse (bsc#1051510).
- HID: cp2112: prevent sleeping function called from invalid context (bsc#1051510).
- HID: hiddev: avoid opening a disconnected device (bsc#1051510).
- HID: hiddev: do cleanup in failure of opening a device (bsc#1051510).
- HID: holtek: test for sanity of intfdata (bsc#1051510).
- HID: sony: Fix race condition between rumble and device remove (bsc#1051510).
- HID: wacom: Correct distance scale for 2nd-gen Intuos devices (bsc#1142635).
- HID: wacom: correct misreported EKR ring values (bsc#1142635).
- HID: wacom: fix bit shift for Cintiq Companion 2 (bsc#1051510).
- hpet: Fix division by zero in hpet_time_div() (bsc#1051510).
- hwmon: (lm75) Fix write operations for negative temperatures (bsc#1051510).
- hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 (bsc#1051510).
- hwmon: (nct7802) Fix wrong detection of in4 presence (bsc#1051510).
- hwmon: (shtc1) fix shtc1 and shtw1 id mask (bsc#1051510).
- i2c: designware: Synchronize IRQs when unregistering slave client (bsc#1111666).
- i2c: emev2: avoid race when unregistering slave client (bsc#1051510).
- i2c: piix4: Fix port selection for AMD Family 16h Model 30h (bsc#1051510).
- i2c: qup: fixed releasing dma without flush operation completion (bsc#1051510).
- i40e: Add support for X710 device (bsc#1151067).
- ia64: Get rid of iommu_pass_through (bsc#1136039).
- IB/mlx5: Fix MR registration flow to use UMR properly (bsc#1093205 bsc#1145678).
- ibmveth: Convert multicast list size for little-endian system (bsc#1061843).
- ibmvnic: Do not process reset during or after device removal (bsc#1149652 ltc#179635).
- ibmvnic: Unmap DMA address of TX descriptor buffers after use (bsc#1146351 ltc#180726).
- ife: error out when nla attributes are empty (networking-stable-19_08_08).
- igmp: fix memory leak in igmpv3_del_delrec() (networking-stable-19_07_25).
- iio: adc: max9611: Fix misuse of GENMASK macro (bsc#1051510).
- iio: adc: max9611: Fix temperature reading in probe (bsc#1051510).
- iio: dac: ad5380: fix incorrect assignment to val (bsc#1051510).
- iio: iio-utils: Fix possible incorrect mask calculation (bsc#1051510).
- Improve security, move default dialect to SMB3 from old CIFS (bsc#1051510, bsc#1144333).
- include/linux/bitops.h: sanitize rotate primitives (git fixes).
- Input: alps - do not handle ALPS cs19 trackpoint-only device (bsc#1051510).
- Input: alps - fix a mismatch between a condition check and its comment (bsc#1051510).
- Input: elan_i2c - remove Lenovo Legion Y7000 PnpID (bsc#1051510).
- Input: iforce - add sanity checks (bsc#1051510).
- Input: kbtab - sanity check for endpoint type (bsc#1051510).
- Input: synaptics - enable RMI mode for HP Spectre X360 (bsc#1051510).
- Input: synaptics - whitelist Lenovo T580 SMBus intertouch (bsc#1051510).
- Input: trackpoint - only expose supported controls for Elan, ALPS and NXP (bsc#1051510).
- intel_th: pci: Add Ice Lake NNPI support (bsc#1051510).
- intel_th: pci: Add support for another Lewisburg PCH (bsc#1051510).
- intel_th: pci: Add Tiger Lake support (bsc#1051510).
- iommu: Add helpers to set/get default domain type (bsc#1136039).
- iommu/amd: Add support for X2APIC IOMMU interrupts (bsc#1145010).
- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- iommu/amd: Move iommu_init_pci() to .init section (bsc#1149105).
- iommu/amd: Request passthrough mode from IOMMU core (bsc#1136039).
- iommu: Disable passthrough mode when SME is active (bsc#1136039).
- iommu/dma: Fix for dereferencing before null checking (bsc#1151667).
- iommu/dma: Handle SG length overflow better (bsc#1146084).
- iommu: Do not use sme_active() in generic code (bsc#1151661).
- iommu/iova: Avoid false sharing on fq_timer_on (bsc#1151662).
- iommu/iova: Remove stale cached32_node (bsc#1145018).
- iommu: Print default domain type on boot (bsc#1136039).
- iommu: Remember when default domain type was set on kernel command line (bsc#1136039).
- iommu: Set default domain type at runtime (bsc#1136039).
- iommu: Use Functions to set default domain type in iommu_set_def_domain_type() (bsc#1136039).
- iommu/vt-d: Request passthrough mode from IOMMU core (bsc#1136039).
- ip6_tunnel: fix possible use-after-free on xmit (networking-stable-19_08_08).
- ipip: validate header length in ipip_tunnel_xmit (git-fixes).
- ipv4: do not set IPv6 only flags to IPv4 addresses (networking-stable-19_07_25).
- ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set (networking-stable-19_08_28).
- irqchip/gic-v2m: Add support for Amazon Graviton variant of GICv3+GICv2m (SLE-9332).
- irqchip/gic-v3-its: fix build warnings (bsc#1144880).
- isdn/capi: check message length in capi_write() (bsc#1051510).
- isdn: hfcsusb: checking idx of ep configuration (bsc#1051510).
- isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack (bsc#1051510).
- isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain() (bsc#1051510).
- iversion: add a routine to update a raw value with a larger one (bsc#1148133).
- iwlwifi: dbg: split iwl_fw_error_dump to two functions (bsc#1119086).
- iwlwifi: do not unmap as page memory that was mapped as single (bsc#1051510).
- iwlwifi: fix bad dma handling in page_mem dumping flow (bsc#1120902).
- iwlwifi: fw: use helper to determine whether to dump paging (bsc#1106434).
- iwlwifi: mvm: do not send GEO_TX_POWER_LIMIT on version &lt; 41 (bsc#1142635).
- iwlwifi: mvm: fix an out-of-bound access (bsc#1051510).
- iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support (bsc#1142635).
- iwlwifi: pcie: do not service an interrupt that was masked (bsc#1142635).
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X (bsc#1142635).
- ixgbe: fix possible deadlock in ixgbe_service_task() (bsc#1113994).
- jbd2: flush_descriptor(): Do not decrease buffer head's ref count (bsc#1143843).
- jbd2: introduce jbd2_inode dirty range scoping (bsc#1148616).
- kABI: Fix kABI for 'struct amd_iommu' (bsc#1145010).
- kABI: Fix kABI for x86 pci-dma code (bsc#1136039).
- kABI: media: em28xx: fix handler for vidioc_s_input() (bsc#1051510). fixes kABI
- kABI: media: em28xx: stop rewriting device's struct (bsc#1051510). fixes kABI
- KABI protect struct vmem_altmap (bsc#1150305).
- kasan: remove redundant initialization of variable 'real_size' (git fixes).
- kconfig/[mn]conf: handle backspace (^H) key (bsc#1051510).
- keys: Fix missing null pointer check in request_key_auth_describe() (bsc#1051510).
- kvm: arm64: Fix caching of host MDCR_EL2 value (bsc#1133021).
- kvm: arm/arm64: Close VMID generation race (bsc#1133021).
- kvm: arm/arm64: Convert kvm_host_cpu_state to a static per-cpu allocation (bsc#1133021).
- kvm: arm/arm64: Drop resource size check for GICV window (bsc#1133021).
- kvm: arm/arm64: Fix lost IRQs from emulated physcial timer when blocked (bsc#1133021).
- kvm: arm/arm64: Fix VMID alloc race by reverting to lock-less (bsc#1133021).
- kvm: arm/arm64: Handle CPU_PM_ENTER_FAILED (bsc#1133021).
- kvm: arm/arm64: Reduce verbosity of KVM init log (bsc#1133021).
- kvm: arm/arm64: Set dist-&gt;spis to NULL after kfree (bsc#1133021).
- kvm: arm/arm64: Skip updating PMD entry if no change (bsc#1133021).
- kvm: arm/arm64: Skip updating PTE entry if no change (bsc#1133021).
- kvm: arm/arm64: vgic: Add missing irq_lock to vgic_mmio_read_pending (bsc#1133021).
- kvm: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy (bsc#1133021).
- kvm: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list (bsc#1133021).
- kvm: arm/arm64: vgic-v3: Tighten synchronization for guests using v2 on v3 (bsc#1133021).
- kvm: Disallow wraparound in kvm_gfn_to_hva_cache_init (bsc#1133021).
- kvm/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel (bsc#1133021).
- kvm: Fix leak vCPU's VMCS value into other pCPU (bsc#1145388).
- kvm: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC (bsc#1145408).
- kvm: mmu: Fix overlap between public and private memslots (bsc#1133021).
- kvm: nVMX: allow setting the VMFUNC controls MSR (bsc#1145389).
- kvm: nVMX: do not use dangling shadow VMCS after guest reset (bsc#1145390).
- kvm: nVMX: Remove unnecessary sync_roots from handle_invept (bsc#1145391).
- kvm: nVMX: Use adjusted pin controls for vmcs02 (bsc#1145392).
- kvm: PPC: Book3S: Fix incorrect guest-to-user-translation error handling (bsc#1061840).
- kvm: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores (bsc#1061840).
- kvm: PPC: Book3S HV: Do not lose pending doorbell request on migration on P9 (bsc#1061840).
- kvm: PPC: Book3S HV: Do not push XIVE context when not using XIVE device (bsc#1061840).
- kvm: PPC: Book3S HV: Fix CR0 setting in TM emulation (bsc#1061840).
- kvm: PPC: Book3S HV: Fix lockdep warning when entering the guest (bsc#1061840).
- kvm: PPC: Book3S HV: Fix race in re-enabling XIVE escalation interrupts (bsc#1061840).
- kvm: PPC: Book3S HV: Handle virtual mode in XIVE VCPU push code (bsc#1061840).
- kvm: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the VP (bsc#1061840).
- kvm: Reject device ioctls from processes other than the VM's creator (bsc#1133021).
- kvm: s390: add debug logging for cpu model subfunctions (jsc#SLE-6240).
- kvm: s390: add deflate conversion facilty to cpu model (jsc#SLE-6240).
- kvm: s390: add enhanced sort facilty to cpu model (jsc#SLE-6240 ).
- kvm: s390: add MSA9 to cpumodel (jsc#SLE-6240).
- kvm: s390: add vector BCD enhancements facility to cpumodel (jsc#SLE-6240).
- kvm: s390: add vector enhancements facility 2 to cpumodel (jsc#SLE-6240).
- kvm: s390: enable MSA9 keywrapping functions depending on cpu model (jsc#SLE-6240).
- kvm: s390: implement subfunction processor calls (jsc#SLE-6240 ).
- kvm: s390: provide query function for instructions returning 32 byte (jsc#SLE-6240).
- kvm: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value (bsc#1145393).
- kvm: VMX: check CPUID before allowing read/write of IA32_XSS (bsc#1145394).
- kvm: VMX: Fix handling of #MC that occurs during VM-Entry (bsc#1145395).
- kvm: x86: degrade WARN to pr_warn_ratelimited (bsc#1145409).
- kvm: x86: Do not update RIP or do single-step on faulting emulation (bsc#1149104).
- kvm: x86: fix backward migration with async_PF (bsc#1146074).
- kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (bsc#1134881 bsc#1134882).
- kvm: X86: Reduce the overhead when lapic_timer_advance is disabled (bsc#1149083).
- kvm: x86: Unconditionally enable irqs in guest context (bsc#1145396).
- kvm: x86/vPMU: refine kvm_pmu err msg when event creation failed (bsc#1145397).
- lan78xx: Fix memory leaks (bsc#1051510).
- leds: leds-lp5562 allow firmware files up to the maximum length (bsc#1051510).
- leds: trigger: gpio: GPIO 0 is valid (bsc#1051510).
- libata: add SG safety checks in SFF pio transfers (bsc#1051510).
- libata: do not request sense data on !ZAC ATA devices (bsc#1051510).
- libata: have ata_scsi_rw_xlat() fail invalid passthrough requests (bsc#1051510).
- libata: zpodd: Fix small read overflow in zpodd_get_mech_type() (bsc#1051510).
- libceph: add ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: add osd_req_op_extent_osd_data_bvecs() (bsc#1141450).
- libceph: ADDR2 support for monmap (bsc#1148133 bsc#1136682).
- libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer (bsc#1148133).
- libceph: assign cookies in linger_submit() (bsc#1135897).
- libceph: check reply num_data_items in setup_request_data() (bsc#1135897).
- libceph: correctly decode ADDR2 addresses in incremental OSD maps (bsc#1148133 bsc#1136682).
- libceph: do not consume a ref on pagelist in ceph_msg_data_add_pagelist() (bsc#1135897).
- libceph: enable fallback to ceph_msg_new() in ceph_msgpool_get() (bsc#1135897).
- libceph: fix PG split vs OSD (re)connect race (bsc#1148133).
- libceph: fix sa_family just after reading address (bsc#1148133 bsc#1136682).
- libceph: fix unaligned accesses in ceph_entity_addr handling (bsc#1136682).
- libceph: fix watch_item_t decoding to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: handle zero-length data items (bsc#1141450).
- libceph: introduce alloc_watch_request() (bsc#1135897).
- libceph: introduce BVECS data type (bsc#1141450).
- libceph: introduce ceph_pagelist_alloc() (bsc#1135897).
- libceph: make ceph_pr_addr take an struct ceph_entity_addr pointer (bsc#1136682).
- libceph: preallocate message data items (bsc#1135897).
- libceph, rbd: add error handling for osd_req_op_cls_init() (bsc#1135897).
- libceph, rbd, ceph: move ceph_osdc_alloc_messages() calls (bsc#1135897).
- libceph, rbd: new bio handling code (aka do not clone bios) (bsc#1141450).
- libceph: rename ceph_encode_addr to ceph_encode_banner_addr (bsc#1148133 bsc#1136682).
- libceph: switch osdmap decoding to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: turn on CEPH_FEATURE_MSG_ADDR2 (bsc#1148133 bsc#1136682).
- libceph: use single request data item for cmp/setxattr (bsc#1139101).
- libceph: use TYPE_LEGACY for entity addrs instead of TYPE_NONE (bsc#1148133 bsc#1136682).
- libertas_tf: Use correct channel range in lbtf_geo_init (bsc#1051510).
- libiscsi: do not try to bypass SCSI EH (bsc#1142076).
- libnvdimm/altmap: Track namespace boundaries in altmap (bsc#1150305).
- libnvdimm/pfn: Store correct value of npfns in namespace superblock (bsc#1146381 ltc#180720).
- libnvdimm: prevent nvdimm from requesting key when security is disabled (bsc#1137982).
- lightnvm: remove dependencies on BLK_DEV_NVME and PCI (bsc#1150846).
- liquidio: add cleanup in octeon_setup_iq() (bsc#1051510).
- livepatch: Nullify obj-&gt;mod in klp_module_coming()'s error path (bsc#1071995).
- loop: set PF_MEMALLOC_NOIO for the worker thread (git fixes).
- lpfc: fix 12.4.0.0 GPF at boot (bsc#1148308).
- mac80211: Correctly set noencrypt for PAE frames (bsc#1111666).
- mac80211: Do not memset RXCB prior to PAE intercept (bsc#1111666).
- mac80211: do not warn about CW params when not using them (bsc#1051510).
- mac80211: do not WARN on short WMM parameters from AP (bsc#1051510).
- mac80211: fix possible memory leak in ieee80211_assign_beacon (bsc#1142635).
- mac80211: fix possible sta leak (bsc#1051510).
- mac80211_hwsim: Fix possible null-pointer dereferences in hwsim_dump_radio_nl() (bsc#1111666).
- mac80211: minstrel_ht: fix per-group max throughput rate initialization (bsc#1051510).
- macsec: fix checksumming after decryption (bsc#1051510).
- macsec: fix use-after-free of skb during RX (bsc#1051510).
- macsec: let the administrator set UP state even if lowerdev is down (bsc#1051510).
- macsec: update operstate when lower device changes (bsc#1051510).
- mailbox: handle failed named mailbox channel request (bsc#1051510).
- md: add mddev-&gt;pers to avoid potential NULL pointer dereference (git fixes).
- md: do not report active array_state until after revalidate_disk() completes (git-fixes).
- md: only call set_in_sync() when it is expected to succeed (git-fixes).
- md/raid6: Set R5_ReadError when there is read failure on parity disk (git-fixes).
- md/raid: raid5 preserve the writeback action after the parity check (git fixes).
- media: atmel: atmel-isi: fix timeout value for stop streaming (bsc#1051510).
- media: au0828: fix null dereference in error path (bsc#1051510).
- media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP (bsc#1051510).
- media: coda: fix mpeg2 sequence number handling (bsc#1051510).
- media: coda: increment sequence offset for the last returned frame (bsc#1051510).
- media: coda: Remove unbalanced and unneeded mutex unlock (bsc#1051510).
- media: dib0700: fix link error for dibx000_i2c_set_speed (bsc#1051510).
- media: dvb: usb: fix use after free in dvb_usb_device_exit (bsc#1051510).
- media: em28xx: fix handler for vidioc_s_input() (bsc#1051510).
- media: em28xx: stop rewriting device's struct (bsc#1051510).
- media: fdp1: Reduce FCP not found message level to debug (bsc#1051510).
- media: hdpvr: fix locking and a missing msleep (bsc#1051510).
- media: marvell-ccic: do not generate EOF on parallel bus (bsc#1051510).
- media: mc-device.c: do not memset __user pointer contents (bsc#1051510).
- media: media_device_enum_links32: clean a reserved field (bsc#1051510).
- media: ov6650: Fix sensor possibly not detected on probe (bsc#1051510).
- media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper (bsc#1051510).
- media: pvrusb2: use a different format for warnings (bsc#1051510).
- media: replace strcpy() by strscpy() (bsc#1051510).
- media: Revert '[media] marvell-ccic: reset ccic phy when stop streaming for stability' (bsc#1051510).
- media: spi: IR LED: add missing of table registration (bsc#1051510).
- media: staging: media: davinci_vpfe: - Fix for memory leak if decoder initialization fails (bsc#1051510).
- media: technisat-usb2: break out of loop at end of buffer (bsc#1051510).
- media: tm6000: double free if usb disconnect while streaming (bsc#1051510).
- media: vb2: Fix videobuf2 to map correct area (bsc#1051510).
- media: vpss: fix a potential NULL pointer dereference (bsc#1051510).
- media: wl128x: Fix some error handling in fm_v4l2_init_video_device() (bsc#1051510).
- mfd: arizona: Fix undefined behavior (bsc#1051510).
- mfd: core: Set fwnode for created devices (bsc#1051510).
- mfd: hi655x-pmic: Fix missing return value check for devm_regmap_init_mmio_clk (bsc#1051510).
- mfd: intel-lpss: Add Intel Comet Lake PCI IDs (jsc#SLE-4875).
- mic: avoid statically declaring a 'struct device' (bsc#1051510).
- mlxsw: spectrum: Fix error path in mlxsw_sp_module_init() (bsc#1112374).
- mm: add filemap_fdatawait_range_keep_errors() (bsc#1148616).
- mmc: cavium: Add the missing dma unmap when the dma has finished (bsc#1051510).
- mmc: cavium: Set the correct dma max segment size for mmc_host (bsc#1051510).
- mmc: core: Fix init of SD cards reporting an invalid VDD range (bsc#1051510).
- mmc: dw_mmc: Fix occasional hang after tuning on eMMC (bsc#1051510).
- mmc: sdhci-msm: fix mutex while in spinlock (bsc#1142635).
- mmc: sdhci-of-arasan: Do now show error message in case of deffered probe (bsc#1119086).
- mmc: sdhci-of-at91: add quirk for broken HS200 (bsc#1051510).
- mmc: sdhci-pci: Add support for Intel CML (jsc#SLE-4875).
- mmc: sdhci-pci: Add support for Intel ICP (jsc#SLE-4875).
- mmc: sdhci-pci: Fix BYT OCP setting (bsc#1051510).
- mm: do not stall register_shrinker() (bsc#1104902, VM Performance).
- mm/hmm: fix bad subpage pointer in try_to_unmap_one (bsc#1148202, HMM, VM Functionality).
- mm/hotplug: fix offline undo_isolate_page_range() (bsc#1148196, VM Functionality).
- mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node (bsc#1148379, VM Functionality).
- mm/memcontrol.c: fix use after free in mem_cgroup_iter() (bsc#1149224, VM Functionality).
- mm/memory.c: recheck page table entry with page table lock held (bsc#1148363, VM Functionality).
- mm/migrate.c: initialize pud_entry in migrate_vma() (bsc#1148198, HMM, VM Functionality).
- mm/mlock.c: change count_mm_mlocked_page_nr return type (bsc#1148527, VM Functionality).
- mm/mlock.c: mlockall error for flag MCL_ONFAULT (bsc#1148527, VM Functionality).
- mm: move MAP_SYNC to asm-generic/mman-common.h (bsc#1148297).
- mm/page_alloc.c: fix calculation of pgdat-&gt;nr_zones (bsc#1148192, VM Functionality).
- mm: page_mapped: do not assume compound page is huge or THP (bsc#1148574, VM Functionality).
- mm, page_owner: handle THP splits correctly (bsc#1149197, VM Debugging Functionality).
- mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() (bsc#1118689).
- mm/vmscan.c: fix trying to reclaim unevictable LRU page (bsc#1149214, VM Functionality).
- mm, vmscan: do not special-case slab reclaim when watermarks are boosted (git fixes (mm/vmscan)).
- move a few externs to smbdirect.h to eliminate warning (bsc#1144333).
- move core networking kabi patches to the end of the section
- move irq_data_get_effective_affinity_mask prior the sorted section
- mpls: fix warning with multi-label encap (bsc#1051510).
- mtd: spi-nor: Fix Cadence QSPI RCU Schedule Stall (bsc#1051510).
- mvpp2: refactor MTU change code (networking-stable-19_08_08).
- nbd: replace kill_bdev() with __invalidate_device() again (git fixes).
- Negotiate and save preferred compression algorithms (bsc#1144333).
- net/9p: include trans_common.h to fix missing prototype warning (bsc#1051510).
- net: bcmgenet: use promisc for unsupported filters (networking-stable-19_07_25).
- net: bridge: delete local fdb on device init failure (networking-stable-19_08_08).
- net: bridge: mcast: do not delete permanent entries when fast leave is enabled (networking-stable-19_08_08).
- net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query (networking-stable-19_07_25).
- net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling (networking-stable-19_07_25).
- net: bridge: stp: do not cache eth dest pointer before skb pull (networking-stable-19_07_25).
- net: dsa: mv88e6xxx: wait after reset deactivation (networking-stable-19_07_25).
- net: ena: add ethtool function for changing io queue sizes (bsc#1139020 bsc#1139021).
- net: ena: add good checksum counter (bsc#1139020 bsc#1139021).
- net: ena: add handling of llq max tx burst size (bsc#1139020 bsc#1139021).
- net: ena: add MAX_QUEUES_EXT get feature admin command (bsc#1139020 bsc#1139021).
- net: ena: add newline at the end of pr_err prints (bsc#1139020 bsc#1139021).
- net: ena: add support for changing max_header_size in LLQ mode (bsc#1139020 bsc#1139021).
- net: ena: allow automatic fallback to polling mode (bsc#1139020 bsc#1139021).
- net: ena: allow queue allocation backoff when low on memory (bsc#1139020 bsc#1139021).
- net: ena: arrange ena_probe() function variables in reverse christmas tree (bsc#1139020 bsc#1139021).
- net: ena: enable negotiating larger Rx ring size (bsc#1139020 bsc#1139021).
- net: ena: ethtool: add extra properties retrieval via get_priv_flags (bsc#1139020 bsc#1139021).
- net: ena: Fix bug where ring allocation backoff stopped too late (bsc#1139020 bsc#1139021).
- net: ena: fix ena_com_fill_hash_function() implementation (bsc#1139020 bsc#1139021).
- net: ena: fix: Free napi resources when ena_up() fails (bsc#1139020 bsc#1139021).
- net: ena: fix incorrect test of supported hash function (bsc#1139020 bsc#1139021).
- net: ena: fix: set freed objects to NULL to avoid failing future allocations (bsc#1139020 bsc#1139021).
- net: ena: fix swapped parameters when calling ena_com_indirect_table_fill_entry (bsc#1139020 bsc#1139021).
- net: ena: gcc 8: fix compilation warning (bsc#1139020 bsc#1139021).
- net: ena: improve latency by disabling adaptive interrupt moderation by default (bsc#1139020 bsc#1139021).
- net: ena: make ethtool show correct current and max queue sizes (bsc#1139020 bsc#1139021).
- net: ena: optimise calculations for CQ doorbell (bsc#1139020 bsc#1139021).
- net: ena: remove inline keyword from functions in *.c (bsc#1139020 bsc#1139021).
- net: ena: replace free_tx/rx_ids union with single free_ids field in ena_ring (bsc#1139020 bsc#1139021).
- net: ena: update driver version from 2.0.3 to 2.1.0 (bsc#1139020 bsc#1139021).
- net: ena: use dev_info_once instead of static variable (bsc#1139020 bsc#1139021).
- net: fix bpf_xdp_adjust_head regression for generic-XDP (bsc#1109837).
- net: fix ifindex collision during namespace removal (networking-stable-19_08_08).
- net: Fix netdev_WARN_ONCE macro (git-fixes).
- net: hns3: add a check to pointer in error_detected and slot_reset (bsc#1104353).
- net: hns3: add all IMP return code (bsc#1104353).
- net: hns3: add aRFS support for PF (bsc#1104353).
- net: hns3: add Asym Pause support to fix autoneg problem (bsc#1104353).
- net: hns3: add check to number of buffer descriptors (bsc#1104353).
- net: hns3: add default value for tc_size and tc_offset (bsc#1104353).
- net: hns3: add exception handling when enable NIC HW error interrupts (bsc#1104353).
- net: hns3: add handling of two bits in MAC tunnel interrupts (bsc#1104353).
- net: hns3: add handshake with hardware while doing reset (bsc#1104353).
- net: hns3: Add missing newline at end of file (bsc#1104353 ).
- net: hns3: add opcode about query and clear RAS &amp; MSI-X to special opcode (bsc#1104353).
- net: hns3: add recovery for the H/W errors occurred before the HNS dev initialization (bsc#1104353).
- net: hns3: add some error checking in hclge_tm module (bsc#1104353).
- net: hns3: add support for dump firmware statistics by debugfs (bsc#1104353).
- net: hns3: adjust hns3_uninit_phy()'s location in the hns3_client_uninit() (bsc#1104353).
- net: hns3: bitwise operator should use unsigned type (bsc#1104353).
- net: hns3: change SSU's buffer allocation according to UM (bsc#1104353).
- net: hns3: check msg_data before memcpy in hclgevf_send_mbx_msg (bsc#1104353).
- net: hns3: clear restting state when initializing HW device (bsc#1104353).
- net: hns3: code optimizaition of hclge_handle_hw_ras_error() (bsc#1104353).
- net: hns3: delay and separate enabling of NIC and ROCE HW errors (bsc#1104353).
- net: hns3: delay ring buffer clearing during reset (bsc#1104353 ).
- net: hns3: delay setting of reset level for hw errors until slot_reset is called (bsc#1104353).
- net: hns3: delete the redundant user NIC codes (bsc#1104353 ).
- net: hns3: do not configure new VLAN ID into VF VLAN table when it's full (bsc#1104353).
- net: hns3: enable broadcast promisc mode when initializing VF (bsc#1104353).
- net: hns3: enable DCB when TC num is one and pfc_en is non-zero (bsc#1104353).
- net: hns3: extract handling of mpf/pf msi-x errors into functions (bsc#1104353).
- net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector (bsc#1104353).
- net: hns3: fix a statistics issue about l3l4 checksum error (bsc#1104353).
- net: hns3: fix avoid unnecessary resetting for the H/W errors which do not require reset (bsc#1104353).
- net: hns3: fix a -Wformat-nonliteral compile warning (bsc#1104353).
- net: hns3: fix compile warning without CONFIG_RFS_ACCEL (bsc#1104353).
- net: hns3: fix dereference of ae_dev before it is null checked (bsc#1104353).
- net: hns3: fixes wrong place enabling ROCE HW error when loading (bsc#1104353).
- net: hns3: fix flow control configure issue for fibre port (bsc#1104353).
- net: hns3: fix for dereferencing before null checking (bsc#1104353).
- net: hns3: fix for skb leak when doing selftest (bsc#1104353 ).
- net: hns3: fix __QUEUE_STATE_STACK_XOFF not cleared issue (bsc#1104353).
- net: hns3: fix race conditions between reset and module loading &amp; unloading (bsc#1104353).
- net: hns3: fix some coding style issues (bsc#1104353 ).
- net: hns3: fix VLAN filter restore issue after reset (bsc#1104353).
- net: hns3: fix wrong size of mailbox responding data (bsc#1104353).
- net: hns3: free irq when exit from abnormal branch (bsc#1104353 ).
- net: hns3: handle empty unknown interrupt (bsc#1104353 ).
- net: hns3: initialize CPU reverse mapping (bsc#1104353 ).
- net: hns3: log detail error info of ROCEE ECC and AXI errors (bsc#1104353).
- net: hns3: make HW GRO handling compliant with SW GRO (bsc#1104353).
- net: hns3: modify handling of out of memory in hclge_err.c (bsc#1104353).
- net: hns3: modify hclge_init_client_instance() (bsc#1104353 ).
- net: hns3: modify hclgevf_init_client_instance() (bsc#1104353 ).
- net: hns3: optimize the CSQ cmd error handling (bsc#1104353 ).
- net: hns3: process H/W errors occurred before HNS dev initialization (bsc#1104353).
- net: hns3: refactor hns3_get_new_int_gl function (bsc#1104353 ).
- net: hns3: refactor PF/VF RSS hash key configuration (bsc#1104353).
- net: hns3: refine the flow director handle (bsc#1104353 ).
- net: hns3: remove override_pci_need_reset (bsc#1104353 ).
- net: hns3: remove redundant core reset (bsc#1104353 ).
- net: hns3: remove RXD_VLD check in hns3_handle_bdinfo (bsc#1104353).
- net: hns3: remove setting bit of reset_requests when handling mac tunnel interrupts (bsc#1104353).
- net: hns3: remove unused linkmode definition (bsc#1104353 ).
- net: hns3: remove VF VLAN filter entry inexistent warning print (bsc#1104353).
- net: hns3: replace numa_node_id with numa_mem_id for buffer reusing (bsc#1104353).
- net: hns3: re-schedule reset task while VF reset fail (bsc#1104353).
- net: hns3: set default value for param 'type' in hclgevf_bind_ring_to_vector (bsc#1104353).
- net: hns3: set maximum length to resp_data_len for exceptional case (bsc#1104353).
- net: hns3: set ops to null when unregister ad_dev (bsc#1104353 ).
- net: hns3: set the port shaper according to MAC speed (bsc#1104353).
- net: hns3: small changes for magic numbers (bsc#1104353 ).
- net: hns3: some changes of MSI-X bits in PPU(RCB) (bsc#1104353 ).
- net: hns3: some modifications to simplify and optimize code (bsc#1104353).
- net: hns3: some variable modification (bsc#1104353).
- net: hns3: stop schedule reset service while unloading driver (bsc#1104353).
- net: hns3: sync VLAN filter entries when kill VLAN ID failed (bsc#1104353).
- net: hns3: trigger VF reset if a VF had an over_8bd_nfe_err (bsc#1104353).
- net: hns3: typo in the name of a constant (bsc#1104353 ).
- net: hns3: use HCLGE_STATE_NIC_REGISTERED to indicate PF NIC client has registered (bsc#1104353).
- net: hns3: use HCLGE_STATE_ROCE_REGISTERED to indicate PF ROCE client has registered (bsc#1104353).
- net: hns3: use HCLGEVF_STATE_NIC_REGISTERED to indicate VF NIC client has registered (bsc#1104353).
- net: hns3: use macros instead of magic numbers (bsc#1104353 ).
- net: hns: add support for vlan TSO (bsc#1104353).
- net/ibmvnic: Fix missing { in __ibmvnic_reset (bsc#1149652 ltc#179635).
- net/ibmvnic: free reset work of removed device from queue (bsc#1149652 ltc#179635).
- net/ibmvnic: prevent more than one thread from running in reset (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (bsc#1152457 ltc#174432).
- net: Introduce netdev_*_once functions (networking-stable-19_07_25).
- net: make skb_dst_force return true when dst is refcounted (networking-stable-19_07_25).
- net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command (bsc#1145678).
- net/mlx5e: always initialize frag-&gt;last_in_page (bsc#1103990 ).
- net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn (networking-stable-19_07_25).
- net/mlx5e: Only support tx/rx pause setting for port owner (networking-stable-19_08_21).
- net/mlx5e: Prevent encap flow counter update async to user query (networking-stable-19_08_08).
- net/mlx5e: Use flow keys dissector to parse packets for ARFS (networking-stable-19_08_21).
- net/mlx5: Fix modify_cq_in alignment (bsc#1103990).
- net/mlx5: Use reversed order when unregister devices (networking-stable-19_08_08).
- net: mvpp2: Do not check for 3 consecutive Idle frames for 10G links (bsc#1119113).
- net: neigh: fix multiple neigh timer scheduling (networking-stable-19_07_25).
- net: openvswitch: fix csum updates for MPLS actions (networking-stable-19_07_25).
- net/packet: fix race in tpacket_snd() (networking-stable-19_08_21).
- net: phylink: Fix flow control for fixed-link (bsc#1119113 ).
- net: remove duplicate fetch in sock_getsockopt (networking-stable-19_07_02).
- netrom: fix a memory leak in nr_rx_frame() (networking-stable-19_07_25).
- netrom: hold sock when setting skb-&gt;destructor (networking-stable-19_07_25).
- net: sched: Fix a possible null-pointer dereference in dequeue_func() (networking-stable-19_08_08).
- net_sched: unset TCQ_F_CAN_BYPASS when adding filters (networking-stable-19_07_25).
- net: sched: verify that q!=NULL before setting q-&gt;flags (git-fixes).
- net/smc: make sure EPOLLOUT is raised (networking-stable-19_08_28).
- net: stmmac: fixed new system time seconds value calculation (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW timestamp (networking-stable-19_07_02).
- net: usb: pegasus: fix improper read if get_registers() fail (bsc#1051510).
- nfc: fix potential illegal memory access (bsc#1051510).
- NFS4: Fix v4.0 client state corruption when mount (git-fixes).
- NFS: Cleanup if nfs_match_client is interrupted (bsc#1134291).
- nfsd: degraded slot-count more gracefully as allocation nears exhaustion (bsc#1150381).
- nfsd: Do not release the callback slot unless it was actually held (git-fixes).
- nfsd: Fix overflow causing non-working mounts on 1 TB machines (bsc#1150381).
- nfsd: fix performance-limiting session calculation (bsc#1150381).
- nfsd: give out fewer session slots as limit approaches (bsc#1150381).
- nfsd: handle drc over-allocation gracefully (bsc#1150381).
- nfsd: increase DRC cache limit (bsc#1150381).
- NFS: Do not interrupt file writeout due to fatal errors (git-fixes).
- NFS: Do not open code clearing of delegation state (git-fixes).
- NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0 (git-fixes).
- NFS: Fix a double unlock from nfs_match,get_client (bsc#1134291).
- NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts (git-fixes).
- NFS: Fix the inode request accounting when pages have subrequests (bsc#1140012).
- NFS: Forbid setting AF_INET6 to 'struct sockaddr_in'-&gt;sin_family (git-fixes).
- NFS: make nfs_match_client killable (bsc#1134291).
- NFS: Refactor nfs_lookup_revalidate() (git-fixes).
- NFS: Remove redundant semicolon (git-fixes).
- NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter (git-fixes).
- NFSv4.1: Fix open stateid recovery (git-fixes).
- NFSv4.1: Only reap expired delegations (git-fixes).
- NFSv4: Check the return value of update_open_stateid() (git-fixes).
- NFSv4: Fix an Oops in nfs4_do_setattr (git-fixes).
- NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim() (git-fixes).
- NFSv4: Fix delegation state recovery (git-fixes).
- NFSv4: Fix lookup revalidate of regular files (git-fixes).
- NFSv4: Fix OPEN / CLOSE race (git-fixes).
- NFSv4: Handle the special Linux file open access mode (git-fixes).
- NFSv4: Only pass the delegation to setattr if we're sending a truncate (git-fixes).
- NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend() (git-fixes).
- nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header (git fixes).
- nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds (bsc#1051510).
- null_blk: complete requests from -&gt;timeout (bsc#1149446).
- null_blk: wire up timeouts (bsc#1149446).
- nvme: cancel request synchronously (bsc#1145661).
- nvme: change locking for the per-subsystem controller list (bsc#1142541).
- nvme-core: Fix extra device_put() call on error path (bsc#1142541).
- nvme: do not abort completed request in nvme_cancel_request (bsc#1149446).
- nvme-fc: fix module unloads while lports still pending (bsc#1150033).
- nvme: fix multipath crash when ANA is deactivated (bsc#1149446).
- nvme: fix possible use-after-free in connect error flow (bsc#1139500)
- nvme: fix possible use-after-free in connect error flow (bsc#1139500, bsc#1140426)
- nvme: introduce NVME_QUIRK_IGNORE_DEV_SUBNQN (bsc#1146938).
- nvme-multipath: fix ana log nsid lookup when nsid is not found (bsc#1141554).
- nvme-multipath: relax ANA state check (bsc#1123105).
- nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns (bsc#1120876).
- nvmem: Use the same permissions for eeprom as for nvmem (git-fixes).
- nvme-rdma: Allow DELETING state change failure in (bsc#1104967,).
- nvme-rdma: centralize admin/io queue teardown sequence (bsc#1142076).
- nvme-rdma: centralize controller setup sequence (bsc#1142076).
- nvme-rdma: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-rdma: fix timeout handler (bsc#1149446).
- nvme-rdma: remove redundant reference between ib_device and tagset (bsc#149446).
- nvme-rdma: stop admin queue before freeing it (bsc#1140155).
- nvme-rdma: support up to 4 segments of inline data (bsc#1142076).
- nvme-rdma: unquiesce queues when deleting the controller (bsc#1142076).
- nvme-rdma: use dynamic dma mapping per command (bsc#1149446).
- nvme: remove ns sibling before clearing path (bsc#1140155).
- nvme: return BLK_EH_DONE from -&gt;timeout (bsc#1142076).
- nvme: Return BLK_STS_TARGET if the DNR bit is set (bsc#1142076).
- nvme-tcp: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-tcp: fix timeout handler (bsc#1149446).
- nvme: wait until all completed request's complete fn is called (bsc#1149446).
- objtool: Add rewind_stack_do_exit() to the noreturn list (bsc#1145302).
- objtool: Support GCC 9 cold subfunction naming scheme (bsc#1145300).
- octeon_mgmt: Fix MIX registers configuration on MTU setup (bsc#1051510).
- PCI: Add ACS quirk for Amazon Annapurna Labs root ports (bsc#1152187,bsc#1152525).
- PCI: Add Amazon's Annapurna Labs vendor ID (bsc#1152187,bsc#1152525).
- PCI: Add quirk to disable MSI-X support for Amazon's Annapurna Labs Root Port (bsc#1152187,bsc#1152525).
- PCI: al: Add Amazon Annapurna Labs PCIe host controller driver (SLE-9332).
- PCI: hv: Detect and fix Hyper-V PCI domain number collision (bsc#1150423).
- PCI: hv: Fix panic by calling hv_pci_remove_slots() earlier (bsc#1142701).
- PCI: PM/ACPI: Refresh all stale power state data in pci_pm_complete() (bsc#1149106).
- PCI: qcom: Ensure that PERST is asserted for at least 100 ms (bsc#1142635).
- PCI: Restore Resizable BAR size bits correctly for 1MB BARs (bsc#1143841).
- PCI/VPD: Prevent VPD access for Amazon's Annapurna Labs Root Port (bsc#1152187,bsc#1152525).
- PCI: xilinx-nwl: Fix Multi MSI data programming (bsc#1142635).
- phy: qcom-qusb2: Fix crash if nvmem cell not specified (bsc#1051510).
- phy: renesas: rcar-gen2: Fix memory leak at error paths (bsc#1051510).
- phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current (bsc#1051510).
- pinctrl: pistachio: fix leaked of_node references (bsc#1051510).
- pinctrl: rockchip: fix leaked of_node references (bsc#1051510).
- platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table (bsc#1051510).
- PM / devfreq: rk3399_dmc: do not print error when get supply and clk defer (bsc#1144718,bsc#1144813).
- PM / devfreq: rk3399_dmc: fix spelling mistakes (bsc#1144718,bsc#1144813).
- PM / devfreq: rk3399_dmc: Pass ODT and auto power down parameters to TF-A (bsc#1144718,bsc#1144813).
- PM / devfreq: rk3399_dmc: remove unneeded semicolon (bsc#1144718,bsc#1144813).
- PM / devfreq: rk3399_dmc: remove wait for dcf irq event (bsc#1144718,bsc#1144813).
- PM / devfreq: rockchip-dfi: Move GRF definitions to a common place (bsc#1144718,bsc#1144813).
- PM / OPP: OF: Use pr_debug() instead of pr_err() while adding OPP table (jsc#SLE-7294).
- PM: sleep: Fix possible overflow in pm_system_cancel_wakeup() (bsc#1051510).
- PNFS fallback to MDS if no deviceid found (git-fixes).
- pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error (git-fixes).
- pNFS/flexfiles: Turn off soft RPC calls (git-fixes).
- powerpc/64: Make sys_switch_endian() traceable (bsc#1065729).
- powerpc/64s: Include cpu header (bsc#1065729).
- powerpc/64s/radix: Fix MADV_[FREE|DONTNEED] TLB flush miss problem with THP (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Fix memory hotplug section page table creation (bsc#1065729).
- powerpc/64s/radix: Fix memory hot-unplug page table split (bsc#1065729).
- powerpc/64s/radix: Implement _tlbie(l)_va_range flush functions (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Improve preempt handling in TLB code (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Improve TLB flushing for page table freeing (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Introduce local single page ceiling for TLB range flush (bsc#1055117 bsc#1152161 ltc#181664).
- powerpc/64s/radix: Optimize flush_tlb_range (bsc#1152161 ltc#181664).
- powerpc/64s: support nospectre_v2 cmdline option (bsc#1131107).
- powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (bsc#1146575 ltc#180764).
- powerpc/book3s/64: check for NULL pointer in pgd_alloc() (bsc#1078248, git-fixes).
- powerpc/book3s64/mm: Do not do tlbie fixup for some hardware revisions (bsc#1152161 ltc#181664).
- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (bsc#1152161 ltc#181664).
- powerpc: bpf: Fix generation of load/store DW instructions (bsc#1065729).
- powerpc/bpf: use unsigned division instruction for 64-bit operations (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range() (bsc#1065729).
- powerpc: dump kernel log before carrying out fadump or kdump (bsc#1149940 ltc#179958).
- powerpc/fadump: use kstrtoint to handle sysfs store (bsc#1146376).
- powerpc/fadump: when fadump is supported register the fadump sysfs files (bsc#1146352).
- powerpc/fsl: Add nospectre_v2 command line argument (bsc#1131107).
- powerpc/fsl: Update Spectre v2 reporting (bsc#1131107).
- powerpc/irq: Do not WARN continuously in arch_local_irq_restore() (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/kdump: Handle crashkernel memory reservation failure (bsc#1143466 LTC#179600).
- powerpc/lib: Fix feature fixup test of external branch (bsc#1065729).
- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (bsc#1152161 ltc#181664).
- powerpc/mm: Handle page table allocation failures (bsc#1065729).
- powerpc/mm/hash/4k: Do not use 64K page size for vmemmap with 4K pagesize (bsc#1142685 LTC#179509).
- powerpc/mm/nvdimm: Add an informative message if we fail to allocate altmap block (bsc#1142685 LTC#179509).
- powerpc/mm/radix: Drop unneeded NULL check (bsc#1152161 ltc#181664).
- powerpc/mm/radix: implement LPID based TLB flushes to be used by KVM (bsc#1152161 ltc#181664).
- powerpc/mm/radix: Use the right page size for vmemmap mapping (bsc#1055117 bsc#1142685 LTC#179509).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling (bsc#1065729).
- powerpc/nvdimm: Add support for multibyte read/write for metadata (bsc#1142685 LTC#179509).
- powerpc/nvdimm: Pick nearby online node if the device node is not online (bsc#1142685 ltc#179509).
- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get, set} (bsc#1152243 ltc#181472).
- powerpc/perf: Add constraints for power9 l2/l3 bus events (bsc#1056686).
- powerpc/perf: Add mem access events to sysfs (bsc#1124370).
- powerpc/perf: Cleanup cache_sel bits comment (bsc#1056686).
- powerpc/perf: Fix thresholding counter data for unknown type (bsc#1056686).
- powerpc/perf: Remove PM_BR_CMPL_ALT from power9 event list (bsc#1047238, bsc#1056686).
- powerpc/perf: Update perf_regs structure to include SIER (bsc#1056686).
- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS (bsc#1065729).
- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA window (bsc#1061840).
- powerpc/powernv/ioda: Fix race in TCE level allocation (bsc#1061840).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt handling to C (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/powernv/opal-dump : Use IRQ_HANDLED instead of numbers in interrupt handler (bsc#1065729).
- powerpc/powernv: Return for invalid IMC domain (bsc1054914, git-fixes).
- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- powerpc/pseries: add missing cpumask.h include file (bsc#1065729).
- powerpc/pseries: Call H_BLOCK_REMOVE when supported (bsc#1109158).
- powerpc/pseries: correctly track irq state in default idle (bsc#1150727 ltc#178925).
- powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() (bsc#1065729).
- powerpc/pseries: Fix xive=off command line (bsc#1085030, git-fixes).
- powerpc/pseries/memory-hotplug: Fix return value type of find_aa_index (bsc#1065729).
- powerpc/pseries, ps3: panic flush kernel messages before halting system (bsc#1149940 ltc#179958).
- powerpc/pseries: Read TLB Block Invalidate Characteristics (bsc#1109158).
- powerpc/pseries/scm: Mark the region volatile if cache flush not required (bsc#1142685 LTC#179509).
- powerpc/ptrace: Simplify vr_get/set() to avoid GCC warning (bsc#1148868).
- powerpc/rtas: use device model APIs and serialization during LPM (bsc#1144123 ltc#178840).
- powerpc/security: Show powerpc_security_features in debugfs (bsc#1131107).
- powerpc/xive: Fix bogus error code returned by OPAL (bsc#1065729).
- powerpc/xive: Fix dump of XIVE interrupt under pseries (bsc#1142019).
- powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask() (bsc#1085030, bsc#1145189, LTC#179762).
- powerpc/xive: Implement get_irqchip_state method for XIVE to fix shutdown race (bsc#1065729).
- powerpc/xmon: Add a dump of all XIVE interrupts (bsc#1142019).
- powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL (bsc#1142019).
- powerpc/xmon: Fix opcode being uninitialized in print_insn_powerpc (bsc#1065729).
- power: reset: gpio-restart: Fix typo when gpio reset is not found (bsc#1051510).
- power: supply: Init device wakeup after device_add() (bsc#1051510).
- ppp: Fix memory leak in ppp_write (git-fixes).
- printk: Do not lose last line in kmsg buffer dump (bsc#1152460).
- printk: fix printk_time race (bsc#1152466).
- printk/panic: Avoid deadlock in printk() after stopping CPUs by NMI (bsc#1148712).
- qede: fix write to free'd pointer error and double free of ptp (bsc#1051510).
- qla2xxx: kABI fixes for v10.01.00.18-k (bcs#1082635 bcs#1141340 bcs#1143706).
- qla2xxx: kABI fixes for v10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988).
- qla2xxx: remove SGI SN2 support (bsc#1123034 bsc#1131304 bsc#1127988).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- quota: fix wrong condition in is_quota_modification() (bsc#1152026).
- r8152: Set memory to all 0xFFs on failed reg reads (bsc#1051510).
- raid5-cache: Need to do start() part job after adding journal device (git fixes).
- rbd: do not (ab)use obj_req-&gt;pages for stat requests (bsc#1141450).
- rbd: do not NULL out -&gt;obj_request in rbd_img_obj_parent_read_full() (bsc#1141450).
- rbd: get rid of img_req-&gt;copyup_pages (bsc#1141450).
- rbd: move from raw pages to bvec data descriptors (bsc#1141450).
- rbd: remove bio cloning helpers (bsc#1141450).
- rbd: start enums at 1 instead of 0 (bsc#1141450).
- rbd: use kmem_cache_zalloc() in rbd_img_request_create() (bsc#1141450).
- RDMA/hns: Add mtr support for mixed multihop addressing (bsc#1104427).
- RDMA/hns: Bugfix for calculating qp buffer size (bsc#1104427 ).
- RDMA/hns: Bugfix for filling the sge of srq (bsc#1104427 ).
- RDMa/hns: Do not stuck in endless timeout loop (bsc#1104427 ).
- RDMA/hns: Fix an error code in hns_roce_set_user_sq_size() (bsc#1104427).
- RDMA/hns: fix inverted logic of readl read and shift (bsc#1104427).
- RDMA/hns: Fixs hw access invalid dma memory error (bsc#1104427 ).
- RDMA/hns: Fixup qp release bug (bsc#1104427).
- RDMA/hns: Modify ba page size for cqe (bsc#1104427).
- RDMA/hns: Remove set but not used variable 'fclr_write_fail_flag' (bsc#1104427).
- RDMA/hns: Remove unnecessary print message in aeq (bsc#1104427 ).
- RDMA/hns: Replace magic numbers with #defines (bsc#1104427 ).
- RDMA/hns: reset function when removing module (bsc#1104427 ).
- RDMA/hns: Set reset flag when hw resetting (bsc#1104427 ).
- RDMA/hns: Use %pK format pointer print (bsc#1104427 ).
- refresh: soc: fsl: guts: Add definition for LX2160A ().
- regmap: fix bulk writes on paged registers (bsc#1051510).
- regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg (bsc#1051510).
- regulator: qcom_spmi: Fix math of spmi_regulator_set_voltage_time_sel (bsc#1051510).
- Remove ifdef since SMB3 (and later) now STRONGLY preferred (bsc#1051510, bsc#1144333).
- Revert 'Bluetooth: validate BLE connection interval updates' (bsc#1051510).
- Revert 'cfg80211: fix processing world regdomain when non modular' (bsc#1051510).
- Revert 'dm bufio: fix deadlock with loop device' (git fixes).
- Revert i915 userptr page lock patch (bsc#1145051) This patch potentially causes a deadlock between kcompactd, as reported on 5.3-rc3. Revert it until a proper fix is found.
- Revert 'mwifiex: fix system hang problem after resume' (bsc#1051510).
- Revert 'net: ena: ethtool: add extra properties retrieval via get_priv_flags' (bsc#1139020 bsc#1139021).
- Revert patches.suse/0001-blk-wbt-Avoid-lock-contention-and-thundering-herd-is.patch (bsc#1141543) As we see stalls / crashes recently with the relevant code path, revert this patch tentatively.
- Revert 'scsi: ncr5380: Increase register polling limit' (git-fixes).
- Revert 'scsi: prefix header search paths with $(srctree)/ (bsc#1136346' This reverts commit 5f679430713da59f5367aa9499e544e6187ac17c. Reverting this commit fixes build for me.
- Revert 'scsi: ufs: disable vccq if it's not needed by UFS device' (git-fixes).
- rpmsg: added MODULE_ALIAS for rpmsg_char (bsc#1051510).
- rpmsg: smd: do not use mananged resources for endpoints and channels (bsc#1051510).
- rpmsg: smd: fix memory leak on channel create (bsc#1051510).
- rsi: improve kernel thread handling to fix kernel panic (bsc#1051510).
- rslib: Fix decoding of shortened codes (bsc#1051510).
- rslib: Fix handling of of caller provided syndrome (bsc#1051510).
- rtc: pcf8523: do not return invalid date when battery is low (bsc#1051510).
- rtc: pcf8563: Clear event flags and disable interrupts before requesting irq (bsc#1051510).
- rtc: pcf8563: Fix interrupt trigger method (bsc#1051510).
- rtlwifi: Fix file release memory leak (bsc#1111666).
- rxrpc: Fix send on a connected, but unbound socket (networking-stable-19_07_25).
- s390/cio: fix ccw_device_start_timeout API (bsc#1142109 LTC#179339).
- s390/dasd: fix endless loop after read unit address configuration (bsc#1144912 LTC#179907).
- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117 bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- s390/qeth: avoid control IO completion stalls (bsc#1142109 LTC#179339).
- s390/qeth: cancel cmd on early error (bsc#1142109 LTC#179339).
- s390/qeth: fix request-side race during cmd IO timeout (bsc#1142109 LTC#179339).
- s390/qeth: release cmd buffer in error paths (bsc#1142109 LTC#179339).
- s390/qeth: simplify reply object handling (bsc#1142109 LTC#179339).
- samples, bpf: fix to change the buffer size for read() (bsc#1051510).
- samples: mei: use /dev/mei0 instead of /dev/mei (bsc#1051510).
- sched/fair: Do not free p-&gt;numa_faults with concurrent readers (bsc#1144920).
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (bsc#1144920).
- scripts/checkstack.pl: Fix arm64 wrong or unknown architecture (bsc#1051510).
- scripts/decode_stacktrace: only strip base path when a prefix of the path (bsc#1051510).
- scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE (bsc#1051510).
- scripts/gdb: fix lx-version string output (bsc#1051510).
- scsi: aacraid: Fix missing break in switch statement (git-fixes).
- scsi: aacraid: Fix performance issue on logical drives (git-fixes).
- scsi: aic94xx: fix an error code in aic94xx_init() (git-fixes).
- scsi: aic94xx: fix module loading (git-fixes).
- scsi: bfa: Avoid implicit enum conversion in bfad_im_post_vendor_event (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_fcs_lport: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_fcs_rport: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_ioc: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: clean up a couple of indentation issues (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: convert to strlcpy/strlcat (git-fixes).
- scsi: bfa: fix calls to dma_set_mask_and_coherent() (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: no need to check return value of debugfs_create functions (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: remove ScsiResult macro (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: Remove unused functions (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: use dma_set_mask_and_coherent (bsc#1136496 jsc#SLE-4698).
- scsi: bnx2fc: Do not allow both a cleanup completion and abort completion for the same request (bsc#1144582).
- scsi: bnx2fc: fix bnx2fc_cmd refcount imbalance in send_rec (bsc#1144582).
- scsi: bnx2fc: fix bnx2fc_cmd refcount imbalance in send_srr (bsc#1144582).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation (git-fixes).
- scsi: bnx2fc: Fix NULL dereference in error handling (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling (git-fixes).
- scsi: bnx2fc: Limit the IO size according to the FW capability (bsc#1144582).
- scsi: bnx2fc: Only put reference to io_req in bnx2fc_abts_cleanup if cleanup times out (bsc#1144582).
- scsi: bnx2fc: Redo setting source FCoE MAC (bsc#1144582).
- scsi: bnx2fc: Remove set but not used variable 'oxid' (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Separate out completion flags and variables for abort and cleanup (bsc#1144582).
- scsi: bnx2fc: Update the driver version to 2.12.10 (bsc#1144582).
- scsi: core: Fix race on creating sense cache (git-fixes).
- scsi: core: set result when the command cannot be dispatched (git-fixes).
- scsi: core: Synchronize request queue PM status only on successful resume (git-fixes).
- scsi: cxgb4i: fix incorrect spelling 'reveive' -&gt; 'receive' (bsc#1136346 jsc#SLE-4682).
- scsi: cxgb4i: get pf number from lldi-&gt;pf (bsc#1136346 jsc#SLE-4682).
- scsi: cxgb4i: validate tcp sequence number only if chip version &amp;lt;= T5 (bsc#1136346 jsc#SLE-4682).
- scsi: cxlflash: Mark expected switch fall-throughs (bsc#1148868).
- scsi: cxlflash: Prevent deadlock when adapter probe fails (git-fixes).
- scsi: esp_scsi: Track residual for PIO transfers (git-fixes) Also, mitigate kABI changes.
- scsi: fas216: fix sense buffer initialization (git-fixes).
- scsi: hisi_sas: Add support for DIX feature for v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: change queue depth from 512 to 4096 (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Change SERDES_CFG init value to increase reliability of HiLink (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Disable stash for v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Fix losing directly attached disk when hot-plug (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Ignore the error code between phy down to phy up (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Issue internal abort on all relevant queues (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: kabi fixes (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: print PHY RX errors count for later revision of v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Reduce HISI_SAS_SGE_PAGE_CNT in size (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Reject setting programmed minimum linkrate &gt; 1.5G (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: send primitive NOTIFY to SSP situation only (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Use pci_irq_get_affinity() for v3 hw as experimental (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: isci: initialize shost fully before calling scsi_add_host() (git-fixes).
- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352 jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352 jsc#SLE-4687).
- scsi: libcxgbi: update route finding logic (bsc#1136352 jsc#SLE-4687)
- scsi: libfc: fix null pointer dereference on a null lport (git-fixes).
- scsi: libsas: delete sas port if expander discover failed (git-fixes).
- scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached (git-fixes).
- scsi: libsas: kABI protect struct sas_task_slow (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: libsas: only clear phy-&gt;in_shutdown after shutdown event done (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: lpfc: add check for loss of ndlp when sending RRQ (bsc#1148308).
- scsi: lpfc: Add first and second level hardware revisions to sysfs (bsc#1146215).
- scsi: lpfc: Add MDS driver loopback diagnostics support (bsc#1146215).
- scsi: lpfc: Add NVMe sequence level error recovery support (bsc#1146215).
- scsi: lpfc: Add simple unlikely optimizations to reduce NVME latency (bsc#1146215).
- scsi: lpfc: Avoid unused function warnings (bsc#1148308).
- scsi: lpfc: change snprintf to scnprintf for possible overflow (bsc#1146215).
- scsi: lpfc: Convert timers to use timer_setup() (bsc#1148308).
- scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show (bsc#1148308).
- scsi: lpfc: Default fdmi_on to on (bsc#1148308).
- scsi: lpfc: Fix ADISC reception terminating login state if a NVME (bsc#1146215).
- scsi: lpfc: Fix BlockGuard enablement on FCoE adapters (bsc#1146215).
- scsi: lpfc: Fix coverity warnings (bsc#1146215).
- scsi: lpfc: Fix crash due to port reset racing vs adapter error (bsc#1146215).
- scsi: lpfc: Fix crash on driver unload in wq free (bsc#1146215).
- scsi: lpfc: Fix crash when cpu count is 1 and null irq affinity mask (bsc#1146215).
- scsi: lpfc: Fix deadlock on host_lock during cable pulls (bsc#1146215).
- scsi: lpfc: Fix devices that do not return after devloss followed by (bsc#1146215).
- scsi: lpfc: Fix discovery when target has no GID_FT information (bsc#1146215).
- scsi: lpfc: Fix ELS field alignments (bsc#1146215).
- scsi: lpfc: Fix error in remote port address change (bsc#1146215).
- scsi: lpfc: Fix failure to clear non-zero eq_delay after io rate (bsc#1146215).
- scsi: lpfc: Fix FLOGI handling across multiple link up/down (bsc#1146215).
- scsi: lpfc: Fix hang when downloading fw on port enabled for nvme (bsc#1146215).
- scsi: lpfc: Fix irq raising in lpfc_sli_hba_down (bsc#1146215).
- scsi: lpfc: Fix issuing init_vpi mbox on SLI-3 card (bsc#1146215).
- scsi: lpfc: Fix leak of ELS completions on adapter reset (bsc#1146215).
- scsi: lpfc: Fix loss of remote port after devloss due to lack of RPIs (bsc#1146215).
- scsi: lpfc: Fix Max Frame Size value shown in fdmishow output (bsc#1146215).
- scsi: lpfc: Fix null ptr oops updating lpfc_devloss_tmo via sysfs (bsc#1146215).
- scsi: lpfc: Fix nvme first burst module parameter description (bsc#1146215).
- scsi: lpfc: Fix nvme sg_seg_cnt display if HBA does not support NVME (bsc#1146215).
- scsi: lpfc: Fix nvme target mode ABTSing a received ABTS (bsc#1146215).
- scsi: lpfc: Fix Oops in nvme_register with target logout/login (bsc#1146215).
- scsi: lpfc: Fix oops when fewer hdwqs than cpus (bsc#1146215).
- scsi: lpfc: Fix PLOGI failure with high remoteport count (bsc#1146215).
- scsi: lpfc: Fix port relogin failure due to GID_FT interaction (bsc#1146215).
- scsi: lpfc: Fix propagation of devloss_tmo setting to nvme transport (bsc#1146215).
- scsi: lpfc: Fix reported physical link speed on a disabled trunked (bsc#1146215).
- scsi: lpfc: Fix reset recovery paths that are not recovering (bsc#1144375).
- scsi: lpfc: Fix sg_seg_cnt for HBAs that do not support NVME (bsc#1146215).
- scsi: lpfc: Fix sli4 adapter initialization with MSI (bsc#1146215).
- scsi: lpfc: Fix too many sg segments spamming in kernel log (bsc#1146215).
- scsi: lpfc: Fix upcall to bsg done in non-success cases (bsc#1146215).
- scsi: lpfc: Limit xri count for kdump environment (bsc#1146215).
- scsi: lpfc: lpfc_sli: Mark expected switch fall-throughs (bsc#1148308).
- scsi: lpfc: Make some symbols static (bsc#1148308).
- scsi: lpfc: Merge per-protocol WQ/CQ pairs into single per-cpu pair (bsc#1146215).
- scsi: lpfc: Migrate to %px and %pf in kernel print calls (bsc#1146215).
- scsi: lpfc: no need to check return value of debugfs_create functions (bsc#1148308).
- scsi: lpfc: nvme: avoid hang / use-after-free when destroying localport (bsc#1148308).
- scsi: lpfc: nvmet: avoid hang / use-after-free when destroying targetport (bsc#1148308).
- scsi: lpfc: remove a bogus pci_dma_sync_single_for_device call (bsc#1148308).
- scsi: lpfc: Remove bg debugfs buffers (bsc#1144375).
- scsi: lpfc: remove NULL check before some freeing functions (bsc#1146215).
- scsi: lpfc: remove null check on nvmebuf (bsc#1148308).
- scsi: lpfc: remove ScsiResult macro (bsc#1148308).
- scsi: lpfc: Remove set but not used variable 'psli' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'fc_hdr' and 'hw_page_size' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'qp' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'tgtp' (bsc#1148308).
- scsi: lpfc: Resolve checker warning for lpfc_new_io_buf() (bsc#1144375).
- scsi: lpfc: resolve lockdep warnings (bsc#1148308).
- scsi: lpfc: Support dynamic unbounded SGL lists on G7 hardware (bsc#1146215).
- scsi: lpfc: Update lpfc version to 12.4.0.0 (bsc#1146215).
- scsi: lpfc: Use dma_zalloc_coherent (bsc#1148308).
- scsi: lpfc: use sg helper to iterate over scatterlist (bsc#1148308).
- scsi: mac_scsi: Fix pseudo DMA implementation, take 2 (git-fixes).
- scsi: mac_scsi: Increase PIO/PDMA transfer length threshold (git-fixes).
- scsi: megaraid: fix out-of-bound array accesses (git-fixes).
- scsi: megaraid_sas: Fix calculation of target ID (git-fixes).
- scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (bsc#1143962).
- scsi: megaraid_sas: Release Mutex lock before OCR in case of DCMD timeout (bsc#1143962).
- scsi: mpt3sas: Determine smp affinity on per HBA basis (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode (bsc#1143738).
- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: NCR5380: Always re-enable reselection interrupt (git-fixes).
- scsi: pmcraid: do not allocate a dma coherent buffer for sense data (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: simplify pmcraid_cancel_all a bit (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: use generic DMA API (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: use sg helper to iterate over scatterlist (bsc#1135990 jsc#SLE-4709).
- scsi: prefix header search paths with $(srctree)/ (bsc#1136346 jsc#SLE-4682).
- scsi: qedf: Add debug information for unsolicited processing (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets and send fipvlan retries (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing link update AEN (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link down (bsc#1149976).
- scsi: qedf: Print message during bailout conditions (bsc#1149976).
- scsi: qedf: remove memset/memcpy to nfunc and use func instead (git-fixes).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20 (bsc#1149976).
- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedi: remove declaration of nvm_image from stack (git-fixes).
- scsi: qla2xxx: Add 28xx flash primary/secondary status/image mechanism (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add cleanup for PCI EEH recovery (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Add cleanup for PCI EEH recovery (bsc#1129424).
- scsi: qla2xxx: Add Device ID for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add First Burst support for FC-NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add fw_attr and port_no SysFS node (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add new FW dump template entry types (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add pci function reset support (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add protection mask module parameters (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add Serdes support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add support for multiple fwdump templates/segments (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add support for setting port speed (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Allow NVMe IO to resume with short cable pull (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Allow NVMe IO to resume with short cable pull (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: allow session delete to finish before create (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value (bsc#1143706).
- scsi: qla2xxx: Avoid PCI IRQ affinity mapping when multiqueue is not supported (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: avoid printf format warning (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that Coverity complains about dereferencing a NULL rport pointer (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that Coverity complains about dereferencing a NULL rport pointer (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that qla2x00_mem_free() crashes if called twice (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qla2x00_mem_free() crashes if called twice (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory (git-fixes).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change a stack variable into a static const variable (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Change default ZIO threshold (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change the return type of qla24xx_read_flash_data() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change the return type of qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Change the return type of qla2x00_update_ms_fdmi_iocb() into void (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change the return type of qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Check for FW started flag before aborting (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: check for kstrtol() failure (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check secondary image if reading the primary image fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check secondary image if reading the primary image fails (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check the PCI info string output buffer size (bsc#1143706).
- scsi: qla2xxx: Check the size of firmware data structures at compile time (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Check the size of firmware data structures at compile time (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanup fcport memory to prevent leak (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Cleanup fcport memory to prevent leak (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanup redundant qla2x00_abort_all_cmds during unload (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Cleanup redundant qla2x00_abort_all_cmds during unload (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanups for NVRAM/Flash read/write path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: cleanup trace buffer initialization (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: cleanup trace buffer initialization (bsc#1134476).
- scsi: qla2xxx: Complain if a command is released that is owned by the firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Complain if a command is released that is owned by the firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a mailbox command times out (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a mailbox command times out (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if parsing the version string fails (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the completion path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the completion path (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times out (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if waiting for pending commands times out (bsc#1143706).
- scsi: qla2xxx: Complain loudly about reference count underflow (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Complain loudly about reference count underflow (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correct error handling during initialization failures (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Correct error handling during initialization failures (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correction and improvement to fwdt processing (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correctly report max/min supported speeds (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: deadlock by configfs_depend_item (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument const (bsc#1143706).
- scsi: qla2xxx: Declare local symbols static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare local symbols static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla24xx_build_scsi_crc_2_iocbs() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla24xx_build_scsi_crc_2_iocbs() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla2x00_find_new_loop_id() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla2x00_find_new_loop_id() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument const (bsc#1143706).
- scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Downgrade driver to 10.01.00.19-k There are upstream bug reports against 10.01.00.19-k which haven't been resolved. Also the newer version failed to get a proper review. For time being it's better to got with the older version and do not introduce new bugs.
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1143706).
- scsi: qla2xxx: Fix abort timeout race condition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix abort timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a format specifier (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a format specifier (git-fixes).
- scsi: qla2xxx: Fix an endian bug in fcpcmd_is_corrupted() (git-fixes).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Fix a recently introduced kernel warning (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a small typo in qla_bsg.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a small typo in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix code indentation for qla27xx_fwdt_entry (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix comment alignment in qla_bsg.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix comment alignment in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix comment in MODULE_PARM_DESC in qla2xxx (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix device staying in blocked state (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix device staying in blocked state (git-fixes).
- scsi: qla2xxx: Fix different size DMA Alloc/Unmap (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix different size DMA Alloc/Unmap (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix DMA error when the DIF sg buffer crosses 4GB boundary (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix DMA unmap leak (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix DMA unmap leak (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd() (git-fixes).
- scsi: qla2xxx: fix fcport null pointer access (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix formatting of pointer types (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix formatting of pointer types (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix fw dump corruption (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix fw dump corruption (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix fw options handle eh_bus_reset() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hang in fcport delete path (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hang in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hardirq-unsafe locking (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hardirq-unsafe locking (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hardlockup in abort command during driver remove (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hardlockup in abort command during driver remove (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix message indicating vectors used by driver (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix message indicating vectors used by driver (bsc#1143706).
- scsi: qla2xxx: Fix N2N link reset (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix Nport ID display value (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NVMe port discovery after a short device port loss (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NVMe port discovery after a short device port loss (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix possible fcport null-pointer dereferences (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix possible fcport null-pointer dereferences (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix premature timer expiration (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix premature timer expiration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix read offset in qla24xx_load_risc_flash() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix routine qla27xx_dump_{mpi|ram}() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix session cleanup hang (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work() (bsc#1143706).
- scsi: qla2xxx: fix spelling mistake 'alredy' -&gt; 'already' (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: fix spelling mistake 'alredy' -&gt; 'already' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix spelling mistake 'initializatin' -&gt; 'initialization' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix SRB allocation flag to avoid sleeping in IRQ context (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stale session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix unload when NVMe devices are configured (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: flush IO on chip reset or sess delete (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Further limit FLASH region write access from SysFS (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Further limit FLASH region write access from SysFS (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Improve Linux kernel coding style conformance (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Improve Linux kernel coding style conformance (bsc#1143706).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Include the &amp;lt;asm/unaligned.h&gt; header file from qla_dsd.h (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Include the &amp;lt;asm/unaligned.h&gt; header file from qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Increase the max_sgl_segments to 1024 (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Increase the max_sgl_segments to 1024 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Increase the size of the mailbox arrays from 4 to 8 (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Increase the size of the mailbox arrays from 4 to 8 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (bsc#1143706).
- scsi: qla2xxx: Insert spaces where required (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Insert spaces where required (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types for FC src/dst IDs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Introduce the dsd32 and dsd64 data structures (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Introduce the dsd32 and dsd64 data structures (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (bsc#1143706).
- scsi: qla2xxx: Leave a blank line after declarations (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Leave a blank line after declarations (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Let the compiler check the type of the SCSI command context pointer (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Let the compiler check the type of the SCSI command context pointer (bsc#1143706).
- scsi: qla2xxx: Log the status code if a firmware command fails (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Log the status code if a firmware command fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs use little endian (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs use little endian (bsc#1143706).
- scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_mem_free() easier to verify (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qla2x00_mem_free() easier to verify (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_process_response_queue() easier to read (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qla2x00_process_response_queue() easier to read (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make sure that aborted commands are freed (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Move debug messages before sending srb preventing panic (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move marker request behind QPair (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_clear_loop_id() from qla_inline.h into qla_init.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_clear_loop_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_is_reserved_id() from qla_inline.h into qla_init.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_is_reserved_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_set_fcport_state() from a .h into a .c file (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_set_fcport_state() from a .h into a .c file (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_set_reserved_loop_ids() definition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_set_reserved_loop_ids() definition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move the &amp;lt;linux/io-64-nonatomic-lo-hi.h&gt; include directive (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move the &amp;lt;linux/io-64-nonatomic-lo-hi.h&gt; include directive (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move the port_state_str definition from a .h to a .c file (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move the port_state_str definition from a .h to a .c file (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: no need to check return value of debugfs_create functions (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: on session delete, return nvme cmd (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: on session delete, return nvme cmd (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Pass little-endian values to the firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Pass little-endian values to the firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent multiple ADISC commands per session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent SysFS access when chip is down (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (bsc#1134476).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the number of casts in GID list code (bsc#1143706).
- scsi: qla2xxx: Reduce the number of forward declarations (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Reduce the number of forward declarations (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Reject EH_{abort|device_reset|target_request} (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Reject EH_{abort|device_reset|target_request} (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a comment that refers to the SCSI host lock (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a comment that refers to the SCSI host lock (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove an include directive from qla_mr.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove an include directive from qla_mr.c (bsc#1143706).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a superfluous forward declaration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a superfluous forward declaration (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: remove double assignment in qla2x00_update_fcport (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: remove double assignment in qla2x00_update_fcport (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove FW default template (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove qla_tgt_cmd.data_work and qla_tgt_cmd.data_work_free (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove qla_tgt_cmd.data_work and qla_tgt_cmd.data_work_free (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove qla_tgt_cmd.released (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove qla_tgt_cmd.released (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: remove redundant null check on pointer sess (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove set but not used variable 'ptr_dma' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts (bsc#1143706).
- scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous casts (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove two superfluous casts (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove unnecessary locking from the target code (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove unnecessary locking from the target code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unnecessary null check (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove unnecessary null check (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock() (bsc#1143706).
- scsi: qla2xxx: Remove useless set memory to zero use memset() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove useless set memory to zero use memset() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Replace vmalloc + memset with vzalloc (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Replace vmalloc + memset with vzalloc (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Report invalid mailbox status codes (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Report invalid mailbox status codes (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox command fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Report the firmware status code if a mailbox command fails (bsc#1143706).
- scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Restore FAWWPN of Physical Port only for loop down (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Retry fabric Scan on IOCB queue full (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Retry fabric Scan on IOCB queue full (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id() (bsc#1143706).
- scsi: qla2xxx: Secure flash update support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set remote port devloss timeout to 0 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the qpair in SRB to NULL when SRB is released (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Set the qpair in SRB to NULL when SRB is released (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS pass-through IOCBs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Set the SCSI command result before calling the command done (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Set the SCSI command result before calling the command done (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Silence fwdump template message (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Silence Successful ELS IOCB message (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Silence Successful ELS IOCB message (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplification of register address used in qla_tmpl.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify a debug statement (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Simplify conditional check again (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_send_term_imm_notif() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Simplify qlt_send_term_imm_notif() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Skip FW dump on LOOP initialization error (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Skip FW dump on LOOP initialization error (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer overflow (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer overflow (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about out-of-bounds accesses (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Suppress multiple Coverity complaint about out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: target: Fix offline port handling and host reset handling (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: target: Fix offline port handling and host reset handling (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Uninline qla2x00_init_timer() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Uninline qla2x00_init_timer() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Unregister chrdev if module initialization fails (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Unregister chrdev if module initialization fails (git-fixes).
- scsi: qla2xxx: Unregister resources in the opposite order of the registration order (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Unregister resources in the opposite order of the registration order (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.00.00.13-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.00.00.14-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.15-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.16-k (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.16-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.18-k (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.19-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.19-k (bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update flash read/write routine (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update two source code comments (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update two source code comments (git-fixes).
- scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use ARRAY_SIZE() in the definition of QLA_LAST_SPEED (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use ARRAY_SIZE() in the definition of QLA_LAST_SPEED (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use common update-firmware-options routine for ISP27xx+ (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use common update-firmware-options routine for ISP27xx+ (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use complete switch scan for RSCN events (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use Correct index for Q-Pair array (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use Correct index for Q-Pair array (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use dma_pool_zalloc() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use get/put_unaligned where appropriate (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use get/put_unaligned where appropriate (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use __le64 instead of uint32_t[2] for sending DMA addresses to firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use __le64 instead of uint32_t for sending DMA addresses to firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy() and strncpy() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy() and strncpy() (bsc#1143706).
- scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use tabs instead of spaces for indentation (bsc#1143706).
- scsi: qla2xxx: Use tabs to indent code (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use tabs to indent code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Verify locking assumptions at runtime (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Verify locking assumptions at runtime (bsc#1143706).
- scsi: qla4xxx: avoid freeing unallocated dma memory (git-fixes).
- scsi: raid_attrs: fix unused variable warning (git-fixes).
- scsi: sas: Convert timers to use timer_setup() (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: scsi_dh_alua: Fix possible null-ptr-deref (git-fixes).
- scsi: scsi_dh_rdac: zero cdb in send_mode_select() (bsc#1149313).
- scsi: scsi_transport_fc: nvme: display FC-NVMe port roles (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: scsi_transport_fc: nvme: display FC-NVMe port roles (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: sd: Defer spinning up drive while SANITIZE is in progress (git-fixes).
- scsi: sd: Fix a race between closing an sd device and sd I/O (git-fixes).
- scsi: sd: Fix cache_type_store() (git-fixes).
- scsi: sd: Optimal I/O size should be a multiple of physical block size (git-fixes).
- scsi: sd: Quiesce warning if device does not report optimal I/O size (git-fixes).
- scsi: sd: use mempool for discard special page (git-fixes).
- scsi: sd_zbc: Fix potential memory leak (git-fixes).
- scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous() (git-fixes).
- scsi: sr: Avoid that opening a CD-ROM hangs with runtime power management enabled (git-fixes).
- scsi: target: iscsi: cxgbit: add missing spin_lock_init() (bsc#1136349 jsc#SLE-4685).
- scsi: tcm_qla2xxx: Minimize #include directives (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: tcm_qla2xxx: Minimize #include directives (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi_transport_fc: complete requests from -&gt;timeout (bsc#1142076).
- scsi: ufs: Avoid runtime suspend possibly being blocked forever (git-fixes).
- scsi: ufs: Check that space was properly alloced in copy_query_response (git-fixes).
- scsi: ufs: Fix NULL pointer dereference in ufshcd_config_vreg_hpm() (git-fixes).
- scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value (git-fixes).
- scsi: ufs: fix wrong command type of UTRD for UFSHCI v2.1 (git-fixes).
- scsi: use dma_get_cache_alignment() as minimum DMA alignment (git-fixes).
- scsi: virtio_scsi: do not send sc payload with tmfs (git-fixes).
- sctp: change to hold sk after auth shkey is created successfully (networking-stable-19_07_02).
- sctp: fix the transport error_count check (networking-stable-19_08_21).
- sdhci-fujitsu: add support for setting the CMD_DAT_DELAY attribute (bsc#1145256).
- secure boot lockdown: Fix-up backport of /dev/mem access restriction The upstream-submitted patch set has evolved over time, align our patches (contents and description) to reflect the current status as far as /dev/mem access is concerned.
- serial: 8250: Fix TX interrupt handling condition (bsc#1051510).
- set CONFIG_FB_HYPERV=m to avoid conflict with efifb (bsc#1145134)
- signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig (bsc#1144333).
- sis900: fix TX completion (bsc#1051510).
- sky2: Disable MSI on ASUS P6T (bsc#1142496).
- sky2: Disable MSI on yet another ASUS boards (P6Xxxx) (bsc#1051510).
- slip: make slhc_free() silently accept an error pointer (bsc#1051510).
- slip: sl_alloc(): remove unused parameter 'dev_t line' (bsc#1051510).
- smb2: fix missing files in root share directory listing (bsc#1112907, bsc#1144333).
- smb2: fix typo in definition of a few error flags (bsc#1144333).
- smb2: fix uninitialized variable bug in smb2_ioctl_query_info (bsc#1144333).
- SMB3.1.1: Add GCM crypto to the encrypt and decrypt functions (bsc#1144333).
- SMB3.1.1 dialect is no longer experimental (bsc#1051510, bsc#1144333).
- SMB311: Fix reconnect (bsc#1051510, bsc#1144333).
- SMB311: Improve checking of negotiate security contexts (bsc#1051510, bsc#1144333).
- smb3.11: replace a 4 with server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- smb3: add additional ftrace entry points for entry/exit to cifs.ko (bsc#1144333).
- smb3: add credits we receive from oplock/break PDUs (bsc#1144333).
- smb3: add debug for unexpected mid cancellation (bsc#1144333).
- smb3: Add debug message later in smb2/smb3 reconnect path (bsc#1144333).
- smb3: add define for id for posix create context and corresponding struct (bsc#1144333).
- smb3: Add defines for new negotiate contexts (bsc#1144333).
- smb3: add dynamic trace point for query_info_enter/done (bsc#1144333).
- smb3: add dynamic trace point for smb3_cmd_enter (bsc#1144333).
- smb3: add dynamic tracepoint for timeout waiting for credits (bsc#1144333).
- smb3: add dynamic tracepoints for simple fallocate and zero range (bsc#1144333).
- smb3: Add dynamic trace points for various compounded smb3 ops (bsc#1144333).
- smb3: Add ftrace tracepoints for improved SMB3 debugging (bsc#1144333).
- smb3: Add handling for different FSCTL access flags (bsc#1144333).
- smb3: add missing read completion trace point (bsc#1144333).
- smb3: add module alias for smb3 to cifs.ko (bsc#1144333).
- smb3: add new mount option to retrieve mode from special ACE (bsc#1144333).
- smb3: Add posix create context for smb3.11 posix mounts (bsc#1144333).
- smb3: Add protocol structs for change notify support (bsc#1144333).
- smb3: add reconnect tracepoints (bsc#1144333).
- smb3: Add SMB3.1.1 GCM to negotiated crypto algorigthms (bsc#1144333).
- smb3: add smb3.1.1 to default dialect list (bsc#1144333).
- smb3: Add support for multidialect negotiate (SMB2.1 and later) (bsc#1051510, bsc#1144333).
- smb3: add support for posix negotiate context (bsc#1144333).
- smb3: add support for statfs for smb3.1.1 posix extensions (bsc#1144333).
- smb3: add tracepoint for sending lease break responses to server (bsc#1144333).
- smb3: add tracepoint for session expired or deleted (bsc#1144333).
- smb3: add tracepoint for slow responses (bsc#1144333).
- smb3: add trace point for tree connection (bsc#1144333).
- smb3: add tracepoints for query dir (bsc#1144333).
- smb3: Add tracepoints for read, write and query_dir enter (bsc#1144333).
- smb3: add tracepoints for smb2/smb3 open (bsc#1144333).
- smb3: add tracepoint to catch cases where credit refund of failed op overlaps reconnect (bsc#1144333).
- smb3: add way to control slow response threshold for logging and stats (bsc#1144333).
- smb3: allow more detailed protocol info on open files for debugging (bsc#1144333).
- smb3: Allow persistent handle timeout to be configurable on mount (bsc#1144333).
- smb3: allow posix mount option to enable new SMB311 protocol extensions (bsc#1144333).
- smb3: allow previous versions to be mounted with snapshot= mount parm (bsc#1144333).
- smb3: Allow query of symlinks stored as reparse points (bsc#1144333).
- smb3: Allow SMB3 FSCTL queries to be sent to server from tools (bsc#1144333).
- smb3: allow stats which track session and share reconnects to be reset (bsc#1051510, bsc#1144333).
- smb3: Backup intent flag missing for directory opens with backupuid mounts (bsc#1051510, bsc#1144333).
- smb3: Backup intent flag missing from compounded ops (bsc#1144333).
- smb3: check for and properly advertise directory lease support (bsc#1051510, bsc#1144333).
- smb3 - clean up debug output displaying network interfaces (bsc#1144333).
- smb3: Cleanup license mess (bsc#1144333).
- smb3: Clean up query symlink when reparse point (bsc#1144333).
- smb3: create smb3 equivalent alias for cifs pseudo-xattrs (bsc#1144333).
- smb3: directory sync should not return an error (bsc#1051510, bsc#1144333).
- smb3: display bytes_read and bytes_written in smb3 stats (bsc#1144333).
- smb3: display security information in /proc/fs/cifs/DebugData more accurately (bsc#1144333).
- smb3: display session id in debug data (bsc#1144333).
- smb3: display stats counters for number of slow commands (bsc#1144333).
- smb3: display volume serial number for shares in /proc/fs/cifs/DebugData (bsc#1144333).
- smb3: do not allow insecure cifs mounts when using smb3 (bsc#1144333).
- smb3: do not attempt cifs operation in smb3 query info error path (bsc#1051510, bsc#1144333).
- smb3: do not display confusing message on mount to Azure servers (bsc#1144333).
- smb3: do not display empty interface list (bsc#1144333).
- smb3: Do not ignore O_SYNC/O_DSYNC and O_DIRECT flags (bsc#1085536, bsc#1144333).
- smb3: do not request leases in symlink creation and query (bsc#1051510, bsc#1144333).
- smb3: do not send compression info by default (bsc#1144333).
- smb3: Do not send SMB3 SET_INFO if nothing changed (bsc#1051510, bsc#1144333).
- smb3: enumerating snapshots was leaving part of the data off end (bsc#1051510, bsc#1144333).
- smb3: fill in statfs fsid and correct namelen (bsc#1112905, bsc#1144333).
- smb3: Fix 3.11 encryption to Windows and handle encrypted smb3 tcon (bsc#1051510, bsc#1144333).
- smb3: fix bytes_read statistics (bsc#1144333).
- smb3: fix corrupt path in subdirs on smb311 with posix (bsc#1144333).
- smb3: Fix deadlock in validate negotiate hits reconnect (bsc#1144333).
- smb3: Fix endian warning (bsc#1144333, bsc#1137884).
- smb3: Fix enumerating snapshots to Azure (bsc#1144333).
- smb3: fix large reads on encrypted connections (bsc#1144333).
- smb3: fix lease break problem introduced by compounding (bsc#1144333).
- smb3: Fix length checking of SMB3.11 negotiate request (bsc#1051510, bsc#1144333).
- smb3: fix minor debug output for CONFIG_CIFS_STATS (bsc#1144333).
- smb3: Fix mode on mkdir on smb311 mounts (bsc#1144333).
- smb3: Fix potential memory leak when processing compound chain (bsc#1144333).
- smb3: fix redundant opens on root (bsc#1144333).
- smb3: fix reset of bytes read and written stats (bsc#1112906, bsc#1144333).
- smb3: Fix rmdir compounding regression to strict servers (bsc#1144333).
- smb3: Fix root directory when server returns inode number of zero (bsc#1051510, bsc#1144333).
- smb3: Fix SMB3.1.1 guest mounts to Samba (bsc#1051510, bsc#1144333).
- smb3: fix various xid leaks (bsc#1051510, bsc#1144333).
- smb3: for kerberos mounts display the credential uid used (bsc#1144333).
- smb3: handle new statx fields (bsc#1085536, bsc#1144333).
- smb3: if max_credits is specified then display it in /proc/mounts (bsc#1144333).
- smb3: if server does not support posix do not allow posix mount option (bsc#1144333).
- smb3: improve dynamic tracing of open and posix mkdir (bsc#1144333).
- smb3: increase initial number of credits requested to allow write (bsc#1144333).
- smb3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL (bsc#1144333).
- smb3: Log at least once if tree connect fails during reconnect (bsc#1144333).
- smb3: make default i/o size for smb3 mounts larger (bsc#1144333).
- smb3: minor cleanup of compound_send_recv (bsc#1144333).
- smb3: minor debugging clarifications in rfc1001 len processing (bsc#1144333).
- smb3: minor missing defines relating to reparse points (bsc#1144333).
- smb3: missing defines and structs for reparse point handling (bsc#1144333).
- smb3: note that smb3.11 posix extensions mount option is experimental (bsc#1144333).
- smb3: Number of requests sent should be displayed for SMB3 not just CIFS (bsc#1144333).
- smb3: on kerberos mount if server does not specify auth type use krb5 (bsc#1051510, bsc#1144333).
- smb3: on reconnect set PreviousSessionId field (bsc#1112899, bsc#1144333).
- smb3: optimize open to not send query file internal info (bsc#1144333).
- smb3: passthru query info does not check for SMB3 FSCTL passthru (bsc#1144333).
- smb3: print tree id in debugdata in proc to be able to help logging (bsc#1144333).
- smb3: query inode number on open via create context (bsc#1144333).
- smb3: remove noisy warning message on mount (bsc#1129664, bsc#1144333).
- smb3: remove per-session operations from per-tree connection stats (bsc#1144333).
- smb3: rename encryption_required to smb3_encryption_required (bsc#1144333).
- smb3: request more credits on normal (non-large read/write) ops (bsc#1144333).
- smb3: request more credits on tree connect (bsc#1144333).
- smb3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (bsc#1144333).
- smb3: send backup intent on compounded query info (bsc#1144333).
- smb3: send CAP_DFS capability during session setup (bsc#1144333).
- smb3: Send netname context during negotiate protocol (bsc#1144333).
- smb3: show number of current open files in /proc/fs/cifs/Stats (bsc#1144333).
- smb3: simplify code by removing CONFIG_CIFS_SMB311 (bsc#1051510, bsc#1144333).
- smb3: smbdirect no longer experimental (bsc#1144333).
- smb3: snapshot mounts are read-only and make sure info is displayable about the mount (bsc#1144333).
- smb3: track the instance of each session for debugging (bsc#1144333).
- smb3: Track total time spent on roundtrips for each SMB3 command (bsc#1144333).
- smb3: trivial cleanup to smb2ops.c (bsc#1144333).
- smb3: update comment to clarify enumerating snapshots (bsc#1144333).
- smb3: update default requested iosize to 4MB from 1MB for recent dialects (bsc#1144333).
- smb3: Update POSIX negotiate context with POSIX ctxt GUID (bsc#1144333).
- smb3: Validate negotiate request must always be signed (bsc#1064597, bsc#1144333).
- smb3: Warn user if trying to sign connection that authenticated as guest (bsc#1085536, bsc#1144333).
- smbd: Make upper layer decide when to destroy the transport (bsc#1144333).
- SMB: fix leak of validate negotiate info response buffer (bsc#1064597, bsc#1144333).
- SMB: fix validate negotiate info uninitialised memory use (bsc#1064597, bsc#1144333).
- SMB: Validate negotiate (to protect against downgrade) even if signing off (bsc#1085536, bsc#1144333).
- smpboot: Place the __percpu annotation correctly (git fixes).
- soc: rockchip: power-domain: Add a sanity check on pd-&gt;num_clks (bsc#1144718,bsc#1144813).
- soc: rockchip: power-domain: use clk_bulk APIs (bsc#1144718,bsc#1144813).
- soc: rockchip: power-domain: Use of_clk_get_parent_count() instead of open coding (bsc#1144718,bsc#1144813).
- sound: fix a memory leak bug (bsc#1051510).
- spi: bcm2835aux: fix corruptions for longer spi transfers (bsc#1051510).
- spi: bcm2835aux: remove dangerous uncontrolled read of fifo (bsc#1051510).
- spi: bcm2835aux: unifying code between polling and interrupt driven code (bsc#1051510).
- spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours (bsc#1111666).
- st21nfca_connectivity_event_received: null check the allocation (bsc#1051510).
- staging: comedi: dt3000: Fix rounding up of timer divisor (bsc#1051510).
- staging: comedi: dt3000: Fix signed integer overflow 'divider * base' (bsc#1051510).
- staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work (bsc#1111666).
- st_nci_hci_connectivity_event_received: null check the allocation (bsc#1051510).
- SUNRPC fix regression in umount of a secure mount (git-fixes).
- SUNRPC: Handle connection breakages correctly in call_status() (git-fixes).
- SUNRPC/nfs: Fix return value for nfs4_callback_compound() (git-fixes).
- supported.conf: Add missing modules (bsc#1066369).
- supported.conf: Add vfio_ccw (bsc#1151192 jsc#SLE-6138).
- supported.conf: Mark vfio_ccw supported by SUSE, because bugs can be routed to IBM via SUSE support (jsc#SLE-6138, bsc#1151192).
- tcp: make sure EPOLLOUT wont be missed (networking-stable-19_08_28).
- tcp: Reset bytes_acked and bytes_received when disconnecting (networking-stable-19_07_25).
- team: Add vlan tx offload to hw_enc_features (bsc#1051510).
- team: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21).
- test_firmware: fix a memory leak bug (bsc#1051510).
- tipc: change to use register_pernet_device (networking-stable-19_07_02).
- tools: bpftool: close prog FD before exit on showing a single program (bsc#1109837).
- tools: bpftool: fix error message (prog -&gt; object) (bsc#1109837).
- tpm: Fix off-by-one when reading binary_bios_measurements (bsc#1082555).
- tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations (bsc#1082555).
- tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts (bsc#1082555).
- tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete (bsc#1082555).
- tpm: Unify the send callback behaviour (bsc#1082555).
- tpm: vtpm_proxy: Suppress error logging when in closed state (bsc#1082555).
- tracing: Fix header include guards in trace event headers (bsc#1144474).
- Tree connect for SMB3.1.1 must be signed for non-encrypted shares (bsc#1051510, bsc#1144333).
- treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 231 (bsc#1144333).
- tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop (bsc#1051510).
- tty: max310x: Fix invalid baudrate divisors calculator (bsc#1051510).
- tty/serial: digicolor: Fix digicolor-usart already registered warning (bsc#1051510).
- tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs (bsc#1111666).
- tty: serial: msm_serial: avoid system lockup condition (bsc#1051510).
- tua6100: Avoid build warnings (bsc#1051510).
- tun: fix use-after-free when register netdev failed (bsc#1111666).
- tun: mark small packets as owned by the tap sock (bsc#1109837).
- tun: wake up waitqueues after IFF_UP is set (networking-stable-19_07_02).
- udf: Fix incorrect final NOT_ALLOCATED (hole) extent length (bsc#1148617).
- Update config files. (bsc#1145687) Add the following kernel config to ARM64: CONFIG_ACPI_PCI_SLOT=y CONFIG_HOTPLUG_PCI_ACPI=y
- update internal version number for cifs.ko (bsc#1144333).
- Update patches.arch/powerpc-pseries-Fix-xive-off-command-line.patch (bsc#1085030, bsc#1144518, LTC#178833).
- Update patches.fixes/0001-docs-Fix-conf.py-for-Sphinx-2.0.patch (bsc#1135642). Fix patch header.
- Update patches.fixes/MD-fix-invalid-stored-role-for-a-disk-try2.patch (bsc#1143765).
- Update patches.fixes/tracing-Fix-bad-use-of-igrab-in-trace_uprobe.c.patch (bsc#1120046, bsc#1146141).
- Update patches.suse/ceph-remove-request-from-waiting-list-before-unregister.patch (bsc#1148133 bsc#1138539).
- Update patches.suse/ext4-unsupported-features.patch (SLE-8615, bsc#1149651, SLE-9243).
- Update patches.suse/powerpc-powernv-Return-for-invalid-IMC-domain.patch (bsc#1054914, git-fixes).
- Update s390 config files (bsc#1151192).  - VFIO_CCW=m  - S390_CCW_IOMMU=y
- Update session and share information displayed for debugging SMB2/SMB3 (bsc#1144333).
- Update version of cifs module (bsc#1144333).
- usb: cdc-acm: make sure a refcount is taken early enough (bsc#1142635).
- usb: CDC: fix sanity checks in CDC union parser (bsc#1142635).
- usb: cdc-wdm: fix race between write and disconnect due to flag abuse (bsc#1051510).
- usb: chipidea: udc: do not do hardware access if gadget has stopped (bsc#1051510).
- usb: core: Fix races in character device registration and deregistraion (bsc#1051510).
- usb: core: hub: Disable hub-initiated U1/U2 (bsc#1051510).
- usb: gadget: composite: Clear 'suspended' on reset/disconnect (bsc#1051510).
- usb: gadget: udc: renesas_usb3: Fix sysfs interface of 'role' (bsc#1142635).
- usb: Handle USB3 remote wakeup for LPM enabled devices correctly (bsc#1051510).
- usb: host: fotg2: restart hcd after port reset (bsc#1051510).
- usb: host: ohci: fix a race condition between shutdown and irq (bsc#1051510).
- usb: host: xhci-rcar: Fix timeout in xhci_suspend() (bsc#1051510).
- usb: host: xhci: rcar: Fix typo in compatible string matching (bsc#1051510).
- usb: iowarrior: fix deadlock on disconnect (bsc#1051510).
- usb: serial: option: add D-Link DWM-222 device ID (bsc#1051510).
- usb: serial: option: Add Motorola modem UARTs (bsc#1051510).
- usb: serial: option: Add support for ZTE MF871A (bsc#1051510).
- usb: serial: option: add the BroadMobi BM818 card (bsc#1051510).
- usb-storage: Add new JMS567 revision to unusual_devs (bsc#1051510).
- usb: storage: ums-realtek: Update module parameter description for auto_delink_en (bsc#1051510).
- usb: storage: ums-realtek: Whitelist auto-delink support (bsc#1051510).
- usb: typec: tcpm: free log buf memory when remove debug file (bsc#1111666).
- usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests (bsc#1111666).
- usb: typec: tcpm: remove tcpm dir if no children (bsc#1111666).
- usb: usbcore: Fix slab-out-of-bounds bug during device reset (bsc#1051510).
- usb: usbfs: fix double-free of usb memory upon submiturb error (bsc#1051510).
- usb: wusbcore: fix unbalanced get/put cluster_id (bsc#1051510).
- usb: yurex: Fix use-after-free in yurex_delete (bsc#1051510).
- vfs: fix page locking deadlocks when deduping files (bsc#1148619).
- vhost/test: fix build for vhost test (bsc#1111666).
- video: ssd1307fb: Start page range at page_offset (bsc#1113722)
- virtio/s390: fix race on airq_areas (bsc#1145357).
- VMCI: Release resource if the work is already queued (bsc#1051510).
- vrf: make sure skb-&gt;data contains ip header to make routing (networking-stable-19_07_25).
- watchdog: bcm2835_wdt: Fix module autoload (bsc#1051510).
- watchdog: core: fix null pointer dereference when releasing cdev (bsc#1051510).
- watchdog: f71808e_wdt: fix F81866 bit operation (bsc#1051510).
- watchdog: fix compile time error of pretimeout governors (bsc#1051510).
- wcn36xx: use dynamic allocation for large variables (bsc#1111666).
- wimax/i2400m: fix a memory leak bug (bsc#1051510).
- x86/asm: Remove dead __GNUC__ conditionals (bsc#1112178).
- x86/boot: Fix memory leak in default_get_smp_config() (bsc#1114279).
- x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h (bsc#1114279).
- x86/dma: Get rid of iommu_pass_through (bsc#1136039).
- x86/entry/64/compat: Fix stack switching for XEN PV (bsc#1108382).
- x86/fpu: Add FPU state copying quirk to handle XRSTOR failure on Intel Skylake CPUs (bsc#1151955).
- x86/microcode: Fix the microcode load on CPU hotplug for real (bsc#1114279).
- x86/mm: Check for pfn instead of page in vmalloc_sync_one() (bsc#1118689).
- x86/mm: Sync also unmappings in vmalloc_sync_all() (bsc#1118689).
- x86/resctrl: Prevent NULL pointer dereference when local MBM is disabled (bsc#1112178).
- x86/speculation: Allow guests to use SSBD even if host does not (bsc#1114279).
- x86/speculation/mds: Apply more accurate check on hypervisor platform (bsc#1114279).
- x86/tls: Fix possible spectre-v1 in do_get_thread_area() (bsc#1114279).
- x86/unwind: Add hardcoded ORC entry for NULL (bsc#1114279).
- x86/unwind: Handle NULL pointer calls better in frame unwinder (bsc#1114279).
- xdp: unpin xdp umem pages in error path (bsc#1109837).
- xen/netback: Reset nr_frags before freeing skb (networking-stable-19_08_21).
- xen-netfront: do not assume sk_buff_head list is empty in error handling (bsc#1065600).
- xen-netfront: do not use ~0U as error return value for xennet_fill_frags() (bsc#1065600).
- xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() (bsc#1065600).
- xen/xenbus: fix self-deadlock after killing user process (bsc#1065600).
- xfrm: Fix bucket count reported to userspace (bsc#1143300).
- xfrm: Fix error return code in xfrm_output_one() (bsc#1143300).
- xfrm: Fix NULL pointer dereference in xfrm_input when skb_dst_force clears the dst_entry (bsc#1143300).
- xfrm: Fix NULL pointer dereference when skb_dst_force clears the dst_entry (bsc#1143300).
- xfs: do not crash on null attr fork xfs_bmapi_read (bsc#1148035).
- xfs: do not trip over uninitialized buffer on extent read of corrupted inode (bsc#1149053).
- xfs: dump transaction usage details on log reservation overrun (bsc#1145235).
- xfs: eliminate duplicate icreate tx reservation functions (bsc#1145235).
- xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (bsc#1148032).
- xfs: fix semicolon.cocci warnings (bsc#1145235).
- xfs: fix up agi unlinked list reservations (bsc#1145235).
- xfs: include an allocfree res for inobt modifications (bsc#1145235).
- xfs: include inobt buffers in ifree tx log reservation (bsc#1145235).
- xfs: print transaction log reservation on overrun (bsc#1145235).
- xfs: refactor inode chunk alloc/free tx reservation (bsc#1145235).
- xfs: refactor xlog_cil_insert_items() to facilitate transaction dump (bsc#1145235).
- xfs: remove more ondisk directory corruption asserts (bsc#1148034).
- xfs: separate shutdown from ticket reservation print helper (bsc#1145235).
- xfs: truncate transaction does not modify the inobt (bsc#1145235).
- xsk: avoid store-tearing when assigning queues (bsc#1111666).
- xsk: avoid store-tearing when assigning umem (bsc#1111666).
- {nl,mac}80211: fix interface combinations on crypto controlled devices (bsc#1111666).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-14"/>
	<updated date="2019-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1047238">SUSE bug 1047238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050911">SUSE bug 1050911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054914">SUSE bug 1054914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056686">SUSE bug 1056686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060662">SUSE bug 1060662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061843">SUSE bug 1061843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064597">SUSE bug 1064597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064701">SUSE bug 1064701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066369">SUSE bug 1066369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071009">SUSE bug 1071009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071306">SUSE bug 1071306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078248">SUSE bug 1078248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085536">SUSE bug 1085536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085539">SUSE bug 1085539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086103">SUSE bug 1086103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087092">SUSE bug 1087092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090734">SUSE bug 1090734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091171">SUSE bug 1091171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093205">SUSE bug 1093205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102097">SUSE bug 1102097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104902">SUSE bug 1104902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104967">SUSE bug 1104967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106061">SUSE bug 1106061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106284">SUSE bug 1106284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106434">SUSE bug 1106434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108382">SUSE bug 1108382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109158">SUSE bug 1109158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112894">SUSE bug 1112894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112899">SUSE bug 1112899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112902">SUSE bug 1112902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112903">SUSE bug 1112903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112905">SUSE bug 1112905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112906">SUSE bug 1112906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112907">SUSE bug 1112907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114542">SUSE bug 1114542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118689">SUSE bug 1118689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119086">SUSE bug 1119086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120046">SUSE bug 1120046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120876">SUSE bug 1120876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120902">SUSE bug 1120902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123034">SUSE bug 1123034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123105">SUSE bug 1123105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123959">SUSE bug 1123959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124370">SUSE bug 1124370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127988">SUSE bug 1127988</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129424">SUSE bug 1129424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129519">SUSE bug 1129519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129664">SUSE bug 1129664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131107">SUSE bug 1131107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131281">SUSE bug 1131281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131304">SUSE bug 1131304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131489">SUSE bug 1131489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131565">SUSE bug 1131565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132686">SUSE bug 1132686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134291">SUSE bug 1134291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134476">SUSE bug 1134476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134881">SUSE bug 1134881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134882">SUSE bug 1134882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135219">SUSE bug 1135219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135897">SUSE bug 1135897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135990">SUSE bug 1135990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136039">SUSE bug 1136039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136261">SUSE bug 1136261</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136346">SUSE bug 1136346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136349">SUSE bug 1136349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136352">SUSE bug 1136352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136496">SUSE bug 1136496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136498">SUSE bug 1136498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136502">SUSE bug 1136502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136682">SUSE bug 1136682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137069">SUSE bug 1137069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137322">SUSE bug 1137322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137323">SUSE bug 1137323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137586">SUSE bug 1137586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137865">SUSE bug 1137865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137884">SUSE bug 1137884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137959">SUSE bug 1137959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137982">SUSE bug 1137982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138099">SUSE bug 1138099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138100">SUSE bug 1138100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138539">SUSE bug 1138539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139020">SUSE bug 1139020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139021">SUSE bug 1139021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139101">SUSE bug 1139101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139500">SUSE bug 1139500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140012">SUSE bug 1140012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140155">SUSE bug 1140155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140426">SUSE bug 1140426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140487">SUSE bug 1140487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141013">SUSE bug 1141013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141340">SUSE bug 1141340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141450">SUSE bug 1141450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141543">SUSE bug 1141543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141554">SUSE bug 1141554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142019">SUSE bug 1142019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142076">SUSE bug 1142076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142109">SUSE bug 1142109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142117">SUSE bug 1142117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142118">SUSE bug 1142118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142119">SUSE bug 1142119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142496">SUSE bug 1142496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142541">SUSE bug 1142541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142701">SUSE bug 1142701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142857">SUSE bug 1142857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143300">SUSE bug 1143300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143331">SUSE bug 1143331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143466">SUSE bug 1143466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143738">SUSE bug 1143738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143765">SUSE bug 1143765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143841">SUSE bug 1143841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143843">SUSE bug 1143843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143962">SUSE bug 1143962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144123">SUSE bug 1144123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144375">SUSE bug 1144375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144474">SUSE bug 1144474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144518">SUSE bug 1144518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144582">SUSE bug 1144582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144718">SUSE bug 1144718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144813">SUSE bug 1144813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144880">SUSE bug 1144880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144886">SUSE bug 1144886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144912">SUSE bug 1144912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144920">SUSE bug 1144920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144979">SUSE bug 1144979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145010">SUSE bug 1145010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145018">SUSE bug 1145018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145051">SUSE bug 1145051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145059">SUSE bug 1145059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145134">SUSE bug 1145134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145189">SUSE bug 1145189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145235">SUSE bug 1145235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145256">SUSE bug 1145256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145300">SUSE bug 1145300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145302">SUSE bug 1145302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145357">SUSE bug 1145357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145388">SUSE bug 1145388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145389">SUSE bug 1145389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145390">SUSE bug 1145390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145391">SUSE bug 1145391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145392">SUSE bug 1145392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145393">SUSE bug 1145393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145394">SUSE bug 1145394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145395">SUSE bug 1145395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145396">SUSE bug 1145396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145397">SUSE bug 1145397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145408">SUSE bug 1145408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145409">SUSE bug 1145409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145446">SUSE bug 1145446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145661">SUSE bug 1145661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145678">SUSE bug 1145678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145687">SUSE bug 1145687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145920">SUSE bug 1145920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145922">SUSE bug 1145922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145934">SUSE bug 1145934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145937">SUSE bug 1145937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145940">SUSE bug 1145940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145941">SUSE bug 1145941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145942">SUSE bug 1145942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145946">SUSE bug 1145946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146042">SUSE bug 1146042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146074">SUSE bug 1146074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146084">SUSE bug 1146084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146141">SUSE bug 1146141</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146163">SUSE bug 1146163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146215">SUSE bug 1146215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146285">SUSE bug 1146285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146346">SUSE bug 1146346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146351">SUSE bug 1146351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146352">SUSE bug 1146352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146361">SUSE bug 1146361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146368">SUSE bug 1146368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146376">SUSE bug 1146376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146378">SUSE bug 1146378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146381">SUSE bug 1146381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146391">SUSE bug 1146391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146399">SUSE bug 1146399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146413">SUSE bug 1146413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146425">SUSE bug 1146425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146512">SUSE bug 1146512</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146514">SUSE bug 1146514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146516">SUSE bug 1146516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146524">SUSE bug 1146524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146526">SUSE bug 1146526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146529">SUSE bug 1146529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146531">SUSE bug 1146531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146540">SUSE bug 1146540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146543">SUSE bug 1146543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146547">SUSE bug 1146547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146550">SUSE bug 1146550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146575">SUSE bug 1146575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146589">SUSE bug 1146589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146664">SUSE bug 1146664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146678">SUSE bug 1146678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146938">SUSE bug 1146938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148031">SUSE bug 1148031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148032">SUSE bug 1148032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148033">SUSE bug 1148033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148034">SUSE bug 1148034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148035">SUSE bug 1148035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148093">SUSE bug 1148093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148133">SUSE bug 1148133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148192">SUSE bug 1148192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148196">SUSE bug 1148196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148198">SUSE bug 1148198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148202">SUSE bug 1148202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148219">SUSE bug 1148219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148297">SUSE bug 1148297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148303">SUSE bug 1148303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148308">SUSE bug 1148308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148363">SUSE bug 1148363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148379">SUSE bug 1148379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148394">SUSE bug 1148394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148527">SUSE bug 1148527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148570">SUSE bug 1148570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148574">SUSE bug 1148574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148616">SUSE bug 1148616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148617">SUSE bug 1148617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148619">SUSE bug 1148619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148698">SUSE bug 1148698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148712">SUSE bug 1148712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148859">SUSE bug 1148859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149053">SUSE bug 1149053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149083">SUSE bug 1149083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149104">SUSE bug 1149104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149105">SUSE bug 1149105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149106">SUSE bug 1149106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149197">SUSE bug 1149197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149214">SUSE bug 1149214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149224">SUSE bug 1149224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149313">SUSE bug 1149313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149325">SUSE bug 1149325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149376">SUSE bug 1149376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149413">SUSE bug 1149413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149418">SUSE bug 1149418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149424">SUSE bug 1149424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149446">SUSE bug 1149446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149522">SUSE bug 1149522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149527">SUSE bug 1149527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149539">SUSE bug 1149539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149552">SUSE bug 1149552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149555">SUSE bug 1149555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149591">SUSE bug 1149591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149602">SUSE bug 1149602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149612">SUSE bug 1149612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149626">SUSE bug 1149626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149651">SUSE bug 1149651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149652">SUSE bug 1149652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149713">SUSE bug 1149713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149940">SUSE bug 1149940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149976">SUSE bug 1149976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150025">SUSE bug 1150025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150033">SUSE bug 1150033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150112">SUSE bug 1150112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150305">SUSE bug 1150305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150381">SUSE bug 1150381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150423">SUSE bug 1150423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150562">SUSE bug 1150562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150727">SUSE bug 1150727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150846">SUSE bug 1150846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150860">SUSE bug 1150860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150861">SUSE bug 1150861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150933">SUSE bug 1150933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151067">SUSE bug 1151067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151192">SUSE bug 1151192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151350">SUSE bug 1151350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151610">SUSE bug 1151610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151661">SUSE bug 1151661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151662">SUSE bug 1151662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151667">SUSE bug 1151667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151680">SUSE bug 1151680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151891">SUSE bug 1151891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151955">SUSE bug 1151955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152024">SUSE bug 1152024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152025">SUSE bug 1152025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152026">SUSE bug 1152026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152161">SUSE bug 1152161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152187">SUSE bug 1152187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152243">SUSE bug 1152243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152325">SUSE bug 1152325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152457">SUSE bug 1152457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152460">SUSE bug 1152460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152466">SUSE bug 1152466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152525">SUSE bug 1152525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152972">SUSE bug 1152972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152974">SUSE bug 1152974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152975">SUSE bug 1152975</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-18551/">CVE-2017-18551</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18595/">CVE-2017-18595</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20976/">CVE-2018-20976</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-21008/">CVE-2018-21008</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10207/">CVE-2019-10207</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-11477/">CVE-2019-11477</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14814/">CVE-2019-14814</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14815/">CVE-2019-14815</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14816/">CVE-2019-14816</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-14821/">CVE-2019-14821</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14835/">CVE-2019-14835</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15030/">CVE-2019-15030</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15031/">CVE-2019-15031</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15090/">CVE-2019-15090</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15098/">CVE-2019-15098</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15099/">CVE-2019-15099</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15117/">CVE-2019-15117</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15118/">CVE-2019-15118</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15211/">CVE-2019-15211</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-15212/">CVE-2019-15212</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15214/">CVE-2019-15214</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15215/">CVE-2019-15215</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15216/">CVE-2019-15216</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15217/">CVE-2019-15217</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15218/">CVE-2019-15218</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15219/">CVE-2019-15219</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15220/">CVE-2019-15220</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15221/">CVE-2019-15221</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15222/">CVE-2019-15222</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15239/">CVE-2019-15239</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15290/">CVE-2019-15290</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15291/">CVE-2019-15291</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15292/">CVE-2019-15292</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15538/">CVE-2019-15538</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15666/">CVE-2019-15666</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15902/">CVE-2019-15902</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15917/">CVE-2019-15917</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15919/">CVE-2019-15919</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15920/">CVE-2019-15920</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15921/">CVE-2019-15921</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15924/">CVE-2019-15924</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15926/">CVE-2019-15926</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-15927/">CVE-2019-15927</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9456/">CVE-2019-9456</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9506/">CVE-2019-9506</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498018" comment="kernel-azure-4.12.14-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498019" comment="kernel-azure-base-4.12.14-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498020" comment="kernel-azure-devel-4.12.14-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498021" comment="kernel-devel-azure-4.12.14-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498022" comment="kernel-source-azure-4.12.14-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498023" comment="kernel-syms-azure-4.12.14-8.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138852" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1046299" ref_url="https://bugzilla.suse.com/1046299" source="BUGZILLA"/>
		<reference ref_id="1046303" ref_url="https://bugzilla.suse.com/1046303" source="BUGZILLA"/>
		<reference ref_id="1046305" ref_url="https://bugzilla.suse.com/1046305" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1073513" ref_url="https://bugzilla.suse.com/1073513" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1086323" ref_url="https://bugzilla.suse.com/1086323" source="BUGZILLA"/>
		<reference ref_id="1087092" ref_url="https://bugzilla.suse.com/1087092" source="BUGZILLA"/>
		<reference ref_id="1089644" ref_url="https://bugzilla.suse.com/1089644" source="BUGZILLA"/>
		<reference ref_id="1090631" ref_url="https://bugzilla.suse.com/1090631" source="BUGZILLA"/>
		<reference ref_id="1093205" ref_url="https://bugzilla.suse.com/1093205" source="BUGZILLA"/>
		<reference ref_id="1096254" ref_url="https://bugzilla.suse.com/1096254" source="BUGZILLA"/>
		<reference ref_id="1097583" ref_url="https://bugzilla.suse.com/1097583" source="BUGZILLA"/>
		<reference ref_id="1097584" ref_url="https://bugzilla.suse.com/1097584" source="BUGZILLA"/>
		<reference ref_id="1097585" ref_url="https://bugzilla.suse.com/1097585" source="BUGZILLA"/>
		<reference ref_id="1097586" ref_url="https://bugzilla.suse.com/1097586" source="BUGZILLA"/>
		<reference ref_id="1097587" ref_url="https://bugzilla.suse.com/1097587" source="BUGZILLA"/>
		<reference ref_id="1097588" ref_url="https://bugzilla.suse.com/1097588" source="BUGZILLA"/>
		<reference ref_id="1098291" ref_url="https://bugzilla.suse.com/1098291" source="BUGZILLA"/>
		<reference ref_id="1101674" ref_url="https://bugzilla.suse.com/1101674" source="BUGZILLA"/>
		<reference ref_id="1109158" ref_url="https://bugzilla.suse.com/1109158" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1117665" ref_url="https://bugzilla.suse.com/1117665" source="BUGZILLA"/>
		<reference ref_id="1119461" ref_url="https://bugzilla.suse.com/1119461" source="BUGZILLA"/>
		<reference ref_id="1119465" ref_url="https://bugzilla.suse.com/1119465" source="BUGZILLA"/>
		<reference ref_id="1123034" ref_url="https://bugzilla.suse.com/1123034" source="BUGZILLA"/>
		<reference ref_id="1123080" ref_url="https://bugzilla.suse.com/1123080" source="BUGZILLA"/>
		<reference ref_id="1133140" ref_url="https://bugzilla.suse.com/1133140" source="BUGZILLA"/>
		<reference ref_id="1134303" ref_url="https://bugzilla.suse.com/1134303" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135854" ref_url="https://bugzilla.suse.com/1135854" source="BUGZILLA"/>
		<reference ref_id="1135873" ref_url="https://bugzilla.suse.com/1135873" source="BUGZILLA"/>
		<reference ref_id="1135967" ref_url="https://bugzilla.suse.com/1135967" source="BUGZILLA"/>
		<reference ref_id="1137040" ref_url="https://bugzilla.suse.com/1137040" source="BUGZILLA"/>
		<reference ref_id="1137799" ref_url="https://bugzilla.suse.com/1137799" source="BUGZILLA"/>
		<reference ref_id="1137861" ref_url="https://bugzilla.suse.com/1137861" source="BUGZILLA"/>
		<reference ref_id="1138190" ref_url="https://bugzilla.suse.com/1138190" source="BUGZILLA"/>
		<reference ref_id="1140090" ref_url="https://bugzilla.suse.com/1140090" source="BUGZILLA"/>
		<reference ref_id="1140729" ref_url="https://bugzilla.suse.com/1140729" source="BUGZILLA"/>
		<reference ref_id="1140845" ref_url="https://bugzilla.suse.com/1140845" source="BUGZILLA"/>
		<reference ref_id="1140883" ref_url="https://bugzilla.suse.com/1140883" source="BUGZILLA"/>
		<reference ref_id="1141600" ref_url="https://bugzilla.suse.com/1141600" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142667" ref_url="https://bugzilla.suse.com/1142667" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1144338" ref_url="https://bugzilla.suse.com/1144338" source="BUGZILLA"/>
		<reference ref_id="1144375" ref_url="https://bugzilla.suse.com/1144375" source="BUGZILLA"/>
		<reference ref_id="1144449" ref_url="https://bugzilla.suse.com/1144449" source="BUGZILLA"/>
		<reference ref_id="1144903" ref_url="https://bugzilla.suse.com/1144903" source="BUGZILLA"/>
		<reference ref_id="1145099" ref_url="https://bugzilla.suse.com/1145099" source="BUGZILLA"/>
		<reference ref_id="1146612" ref_url="https://bugzilla.suse.com/1146612" source="BUGZILLA"/>
		<reference ref_id="1148410" ref_url="https://bugzilla.suse.com/1148410" source="BUGZILLA"/>
		<reference ref_id="1149119" ref_url="https://bugzilla.suse.com/1149119" source="BUGZILLA"/>
		<reference ref_id="1149853" ref_url="https://bugzilla.suse.com/1149853" source="BUGZILLA"/>
		<reference ref_id="1150452" ref_url="https://bugzilla.suse.com/1150452" source="BUGZILLA"/>
		<reference ref_id="1150457" ref_url="https://bugzilla.suse.com/1150457" source="BUGZILLA"/>
		<reference ref_id="1150465" ref_url="https://bugzilla.suse.com/1150465" source="BUGZILLA"/>
		<reference ref_id="1150875" ref_url="https://bugzilla.suse.com/1150875" source="BUGZILLA"/>
		<reference ref_id="1151508" ref_url="https://bugzilla.suse.com/1151508" source="BUGZILLA"/>
		<reference ref_id="1151807" ref_url="https://bugzilla.suse.com/1151807" source="BUGZILLA"/>
		<reference ref_id="1152033" ref_url="https://bugzilla.suse.com/1152033" source="BUGZILLA"/>
		<reference ref_id="1152624" ref_url="https://bugzilla.suse.com/1152624" source="BUGZILLA"/>
		<reference ref_id="1152665" ref_url="https://bugzilla.suse.com/1152665" source="BUGZILLA"/>
		<reference ref_id="1152685" ref_url="https://bugzilla.suse.com/1152685" source="BUGZILLA"/>
		<reference ref_id="1152696" ref_url="https://bugzilla.suse.com/1152696" source="BUGZILLA"/>
		<reference ref_id="1152697" ref_url="https://bugzilla.suse.com/1152697" source="BUGZILLA"/>
		<reference ref_id="1152788" ref_url="https://bugzilla.suse.com/1152788" source="BUGZILLA"/>
		<reference ref_id="1152790" ref_url="https://bugzilla.suse.com/1152790" source="BUGZILLA"/>
		<reference ref_id="1152791" ref_url="https://bugzilla.suse.com/1152791" source="BUGZILLA"/>
		<reference ref_id="1153112" ref_url="https://bugzilla.suse.com/1153112" source="BUGZILLA"/>
		<reference ref_id="1153158" ref_url="https://bugzilla.suse.com/1153158" source="BUGZILLA"/>
		<reference ref_id="1153236" ref_url="https://bugzilla.suse.com/1153236" source="BUGZILLA"/>
		<reference ref_id="1153263" ref_url="https://bugzilla.suse.com/1153263" source="BUGZILLA"/>
		<reference ref_id="1153476" ref_url="https://bugzilla.suse.com/1153476" source="BUGZILLA"/>
		<reference ref_id="1153509" ref_url="https://bugzilla.suse.com/1153509" source="BUGZILLA"/>
		<reference ref_id="1153607" ref_url="https://bugzilla.suse.com/1153607" source="BUGZILLA"/>
		<reference ref_id="1153646" ref_url="https://bugzilla.suse.com/1153646" source="BUGZILLA"/>
		<reference ref_id="1153681" ref_url="https://bugzilla.suse.com/1153681" source="BUGZILLA"/>
		<reference ref_id="1153713" ref_url="https://bugzilla.suse.com/1153713" source="BUGZILLA"/>
		<reference ref_id="1153717" ref_url="https://bugzilla.suse.com/1153717" source="BUGZILLA"/>
		<reference ref_id="1153718" ref_url="https://bugzilla.suse.com/1153718" source="BUGZILLA"/>
		<reference ref_id="1153719" ref_url="https://bugzilla.suse.com/1153719" source="BUGZILLA"/>
		<reference ref_id="1153811" ref_url="https://bugzilla.suse.com/1153811" source="BUGZILLA"/>
		<reference ref_id="1153969" ref_url="https://bugzilla.suse.com/1153969" source="BUGZILLA"/>
		<reference ref_id="1154108" ref_url="https://bugzilla.suse.com/1154108" source="BUGZILLA"/>
		<reference ref_id="1154189" ref_url="https://bugzilla.suse.com/1154189" source="BUGZILLA"/>
		<reference ref_id="1154242" ref_url="https://bugzilla.suse.com/1154242" source="BUGZILLA"/>
		<reference ref_id="1154268" ref_url="https://bugzilla.suse.com/1154268" source="BUGZILLA"/>
		<reference ref_id="1154354" ref_url="https://bugzilla.suse.com/1154354" source="BUGZILLA"/>
		<reference ref_id="1154372" ref_url="https://bugzilla.suse.com/1154372" source="BUGZILLA"/>
		<reference ref_id="1154521" ref_url="https://bugzilla.suse.com/1154521" source="BUGZILLA"/>
		<reference ref_id="1154578" ref_url="https://bugzilla.suse.com/1154578" source="BUGZILLA"/>
		<reference ref_id="1154607" ref_url="https://bugzilla.suse.com/1154607" source="BUGZILLA"/>
		<reference ref_id="1154608" ref_url="https://bugzilla.suse.com/1154608" source="BUGZILLA"/>
		<reference ref_id="1154610" ref_url="https://bugzilla.suse.com/1154610" source="BUGZILLA"/>
		<reference ref_id="1154611" ref_url="https://bugzilla.suse.com/1154611" source="BUGZILLA"/>
		<reference ref_id="1154651" ref_url="https://bugzilla.suse.com/1154651" source="BUGZILLA"/>
		<reference ref_id="1154737" ref_url="https://bugzilla.suse.com/1154737" source="BUGZILLA"/>
		<reference ref_id="1154747" ref_url="https://bugzilla.suse.com/1154747" source="BUGZILLA"/>
		<reference ref_id="1154848" ref_url="https://bugzilla.suse.com/1154848" source="BUGZILLA"/>
		<reference ref_id="1154858" ref_url="https://bugzilla.suse.com/1154858" source="BUGZILLA"/>
		<reference ref_id="1154905" ref_url="https://bugzilla.suse.com/1154905" source="BUGZILLA"/>
		<reference ref_id="1154956" ref_url="https://bugzilla.suse.com/1154956" source="BUGZILLA"/>
		<reference ref_id="1155061" ref_url="https://bugzilla.suse.com/1155061" source="BUGZILLA"/>
		<reference ref_id="1155178" ref_url="https://bugzilla.suse.com/1155178" source="BUGZILLA"/>
		<reference ref_id="1155179" ref_url="https://bugzilla.suse.com/1155179" source="BUGZILLA"/>
		<reference ref_id="1155184" ref_url="https://bugzilla.suse.com/1155184" source="BUGZILLA"/>
		<reference ref_id="1155186" ref_url="https://bugzilla.suse.com/1155186" source="BUGZILLA"/>
		<reference ref_id="1155671" ref_url="https://bugzilla.suse.com/1155671" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12207" ref_url="https://www.suse.com/security/cve/CVE-2018-12207/" source="CVE"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-11135" ref_url="https://www.suse.com/security/cve/CVE-2019-11135/" source="CVE"/>
		<reference ref_id="CVE-2019-16232" ref_url="https://www.suse.com/security/cve/CVE-2019-16232/" source="CVE"/>
		<reference ref_id="CVE-2019-16233" ref_url="https://www.suse.com/security/cve/CVE-2019-16233/" source="CVE"/>
		<reference ref_id="CVE-2019-16234" ref_url="https://www.suse.com/security/cve/CVE-2019-16234/" source="CVE"/>
		<reference ref_id="CVE-2019-16995" ref_url="https://www.suse.com/security/cve/CVE-2019-16995/" source="CVE"/>
		<reference ref_id="CVE-2019-17056" ref_url="https://www.suse.com/security/cve/CVE-2019-17056/" source="CVE"/>
		<reference ref_id="CVE-2019-17133" ref_url="https://www.suse.com/security/cve/CVE-2019-17133/" source="CVE"/>
		<reference ref_id="CVE-2019-17666" ref_url="https://www.suse.com/security/cve/CVE-2019-17666/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006111.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15-SP1 Azure kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race
  condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine
  Exception during Page Size Change, causing the CPU core to be non-functional.

  The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in
  executable pages by splitting / merging huge pages into small pages as
  More information can be found on  https://www.suse.com/support/kb/doc/?id=7023735

- CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with
  Transactional Memory support could be used to facilitate sidechannel
  information leaks out of microarchitectural buffers, similar to the
  previously described 'Microarchitectural Data Sampling' attack.

  The Linux kernel was supplemented with the option to disable TSX operation
  altogether (requiring CPU Microcode updates on older systems) and better
  flushing of microarchitectural buffers (VERW).

  The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251

- CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port
  failed to add a port, which may have caused denial of service (bsc#1152685).

- CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the
  alloc_workqueue return value, leading to a NULL pointer dereference.
  (bsc#1150457).

- CVE-2019-10220: Added sanity checks on the pathnames passed to the user
  space. (bsc#1144903).

- CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).

- CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell
  libertas driver (bsc#1150465).

- CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return
  value, leading to a NULL pointer dereference. (bsc#1150452).

- CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE,
  leading to a Buffer Overflow (bsc#1153158).

- CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which
  meant that unprivileged users could create a raw socket (bsc#1152788).

The following non-security bugs were fixed:

- 9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
- Add kernel module compression support (bsc#1135854)
- acpi / CPPC: do not require the _PSD method (bsc#1051510).
- acpi / processor: do not print errors for processorIDs == 0xff (bsc#1051510).
- acpi: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510).
- act_mirred: Fix mirred_init_module error handling (bsc#1051510).
- alsa: bebob: Fix prototype of helper function to return negative value (bsc#1051510).
- alsa: firewire-motu: add support for MOTU 4pre (bsc#1111666).
- alsa: hda - Add a quirk model for fixing Huawei Matebook X right speaker (bsc#1051510).
- alsa: hda - Add laptop imic fixup for ASUS M9V laptop (bsc#1051510).
- alsa: hda - Apply AMD controller workaround for Raven platform (bsc#1051510).
- alsa: hda - Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510).
- alsa: hda - Drop unsol event handler for Intel HDMI codecs (bsc#1051510).
- alsa: hda - Expand pin_match function to match upcoming new tbls (bsc#1051510).
- alsa: hda - Force runtime PM on Nvidia HDMI codecs (bsc#1051510).
- alsa: hda - Inform too slow responses (bsc#1051510).
- alsa: hda - Show the fatal CORB/RIRB error more clearly (bsc#1051510).
- alsa: hda/hdmi - Do not report spurious jack state changes (bsc#1051510).
- alsa: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510).
- alsa: hda/realtek - Add support for ALC623 (bsc#1051510).
- alsa: hda/realtek - Add support for ALC711 (bsc#1051510).
- alsa: hda/realtek - Blacklist PC beep for Lenovo ThinkCentre M73/93 (bsc#1051510).
- alsa: hda/realtek - Check beep whitelist before assigning in all codecs (bsc#1051510).
- alsa: hda/realtek - Enable headset mic on Asus MJ401TA (bsc#1051510).
- alsa: hda/realtek - Fix 2 front mics of codec 0x623 (bsc#1051510).
- alsa: hda/realtek - Fix alienware headset mic (bsc#1051510).
- alsa: hda/realtek - pci quirk for Medion E4254 (bsc#1051510).
- alsa: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 (bsc#1051510).
- alsa: hda/sigmatel - remove unused variable 'stac9200_core_init' (bsc#1051510).
- alsa: hda: Add Elkhart Lake pci ID (bsc#1051510).
- alsa: hda: Add Tigerlake/Jasperlake pci ID (bsc#1051510).
- alsa: hda: Add support of Zhaoxin controller (bsc#1051510).
- alsa: hda: Flush interrupts on disabling (bsc#1051510).
- alsa: hda: Set fifo_size for both playback and capture streams (bsc#1051510).
- alsa: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() (bsc#1051510).
- alsa: line6: sizeof (byte) is always 1, use that fact (bsc#1051510).
- alsa: timer: Fix mutex deadlock at releasing card (bsc#1051510).
- alsa: usb-audio: Add DSD support for EVGA NU Audio (bsc#1051510).
- alsa: usb-audio: Add DSD support for Gustard U16/X26 USB Interface (bsc#1051510).
- alsa: usb-audio: Add Hiby device family to quirks for native DSD support (bsc#1051510).
- alsa: usb-audio: Add Pioneer DDJ-SX3 PCM quirck (bsc#1051510).
- alsa: usb-audio: Clean up check_input_term() (bsc#1051510).
- alsa: usb-audio: DSD auto-detection for Playback Designs (bsc#1051510).
- alsa: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1051510).
- alsa: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1111666).
- alsa: usb-audio: Fix copy&amp;paste error in the validator (bsc#1111666).
- alsa: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() (bsc#1051510).
- alsa: usb-audio: More validations of descriptor units (bsc#1051510).
- alsa: usb-audio: Remove superfluous bLength checks (bsc#1051510).
- alsa: usb-audio: Simplify parse_audio_unit() (bsc#1051510).
- alsa: usb-audio: Skip bSynchAddress endpoint check if it is invalid (bsc#1051510).
- alsa: usb-audio: Unify audioformat release code (bsc#1051510).
- alsa: usb-audio: Unify the release of usb_mixer_elem_info objects (bsc#1051510).
- alsa: usb-audio: Update DSD support quirks for Oppo and Rotel (bsc#1051510).
- alsa: usb-audio: fix PCM device order (bsc#1051510).
- alsa: usb-audio: remove some dead code (bsc#1051510).
- appletalk: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- arcnet: provide a buffer big enough to actually receive packets (networking-stable-19_09_30).
- arm64/cpufeature: Convert hook_lock to raw_spin_lock_t in cpu_enable_ssbs() (jsc#ECO-561).
- arm64: Add decoding macros for CP15_32 and CP15_64 traps (jsc#ECO-561).
- arm64: Add part number for Neoverse N1 (jsc#ECO-561).
- arm64: Add silicon-errata.txt entry for ARM erratum 1188873 (jsc#ECO-561).
- arm64: Apply ARM64_ERRATUM_1188873 to Neoverse-N1 (jsc#ECO-561).
- arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419 (jsc#ECO-561,jsc#SLE-10671).
- arm64: Fix mismatched cache line size detection (jsc#ECO-561,jsc#SLE-10671).
- arm64: Fix silly typo in comment (jsc#ECO-561).
- arm64: Force SSBS on context switch (jsc#ECO-561).
- arm64: Introduce sysreg_clear_set() (jsc#ECO-561).
- arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (jsc#ECO-561).
- arm64: Restrict ARM64_ERRATUM_1188873 mitigation to AArch32 (jsc#ECO-561).
- arm64: arch_timer: avoid unused function warning (jsc#ECO-561).
- arm64: compat: Add CNTFRQ trap handler (jsc#ECO-561).
- arm64: compat: Add CNTVCT trap handler (jsc#ECO-561).
- arm64: compat: Add condition code checks and IT advance (jsc#ECO-561).
- arm64: compat: Add cp15_32 and cp15_64 handler arrays (jsc#ECO-561).
- arm64: compat: Add separate CP15 trapping hook (jsc#ECO-561).
- arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space (jsc#ECO-561,jsc#SLE-10671).
- arm64: cpu: Move errata and feature enable callbacks closer to callers (jsc#ECO-561).
- arm64: cpu_errata: Remove ARM64_MISMATCHED_CACHE_LINE_SIZE (jsc#ECO-561,jsc#SLE-10671).
- arm64: cpufeature: Fix handling of CTR_EL0.IDC field (jsc#ECO-561,jsc#SLE-10671).
- arm64: cpufeature: Trap CTR_EL0 access only where it is necessary (jsc#ECO-561,jsc#SLE-10671).
- arm64: cpufeature: ctr: Fix cpu capability check for late CPUs (jsc#ECO-561,jsc#SLE-10671).
- arm64: entry: Allow handling of undefined instructions from EL1 (jsc#ECO-561).
- arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419 (jsc#ECO-561,jsc#SLE-10671).
- arm64: fix SSBS sanitization (jsc#ECO-561).
- arm64: force_signal_inject: WARN if called from kernel context (jsc#ECO-561).
- arm64: kill change_cpacr() (jsc#ECO-561).
- arm64: kill config_sctlr_el1() (jsc#ECO-561).
- arm64: kvm: Add invalidate_icache_range helper (jsc#ECO-561,jsc#SLE-10671).
- arm64: kvm: PTE/PMD S2 XN bit definition (jsc#ECO-561,jsc#SLE-10671).
- arm64: move SCTLR_EL{1,2} assertions to &amp;lt;asm/sysreg.h&gt; (jsc#ECO-561).
- arm64: ssbd: Drop #ifdefs for PR_SPEC_STORE_BYPASS (jsc#ECO-561).
- arm: kvm: Add optimized PIPT icache flushing (jsc#ECO-561,jsc#SLE-10671).
- asoc: Define a set of DAPM pre/post-up events (bsc#1051510).
- asoc: Intel: Fix use of potentially uninitialized variable (bsc#1051510).
- asoc: Intel: NHLT: Fix debug print format (bsc#1051510).
- asoc: dmaengine: Make the pcm-&gt;name equal to pcm-&gt;id if the name is not set (bsc#1051510).
- asoc: rockchip: i2s: Fix RPM imbalance (bsc#1051510).
- asoc: rsnd: Reinitialize bit clock inversion flag for every format setting (bsc#1051510).
- asoc: sgtl5000: Fix charge pump source assignment (bsc#1051510).
- auxdisplay: panel: need to delete scan_timer when misc_register fails in panel_attach (bsc#1051510).
- ax25: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- blk-wbt: abstract out end IO completion handler (bsc#1135873).
- blk-wbt: fix has-sleeper queueing check (bsc#1135873).
- blk-wbt: improve waking of tasks (bsc#1135873).
- blk-wbt: move disable check into get_limit() (bsc#1135873).
- blk-wbt: use wq_has_sleeper() for wq active check (bsc#1135873).
- block: add io timeout to sysfs (bsc#1148410).
- block: add io timeout to sysfs (bsc#1148410).
- block: do not show io_timeout if driver has no timeout handler (bsc#1148410).
- block: do not show io_timeout if driver has no timeout handler (bsc#1148410).
- bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices (bsc#1051510).
- bnx2x: Fix VF's VLAN reconfiguration in reload (bsc#1086323 ).
- bnxt_en: Add pci IDs for 57500 series NPAR devices (bsc#1153607).
- boot: Sign non-x86 kernels when possible (boo#1134303)
- bpf: fix use after free in prog symbol exposure (bsc#1083647).
- brcmfmac: sdio: Disable auto-tuning around commands expected to fail (bsc#1111666).
- brcmfmac: sdio: Do not tune while the card is off (bsc#1111666).
- bridge/mdb: remove wrong use of NLM_F_MULTI (networking-stable-19_09_15).
- btrfs: Ensure btrfs_init_dev_replace_tgtdev sees up to date values (bsc#1154651).
- btrfs: Ensure replaced device does not have pending chunk allocation (bsc#1154607).
- btrfs: bail out gracefully rather than BUG_ON (bsc#1153646).
- btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() (bsc#1155178).
- btrfs: check for the full sync flag while holding the inode lock during fsync (bsc#1153713).
- btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() (bsc#1155179).
- btrfs: remove wrong use of volume_mutex from btrfs_dev_replace_start (bsc#1154651).
- btrfs: tracepoints: Fix bad entry members of qgroup events (bsc#1155186).
- btrfs: tracepoints: Fix wrong parameter order for qgroup events (bsc#1155184).
- can: mcp251x: mcp251x_hw_reset(): allow more time after a reset (bsc#1051510).
- can: xilinx_can: xcan_probe(): skip error message on deferred probe (bsc#1051510).
- cdc_ether: fix rndis support for Mediatek based smartphones (networking-stable-19_09_15).
- cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize (bsc#1051510).
- ceph: fix directories inode i_blkbits initialization (bsc#1153717).
- ceph: reconnect connection if session hang in opening state (bsc#1153718).
- ceph: update the mtime when truncating up (bsc#1153719).
- cfg80211: Purge frame registrations on iftype change (bsc#1051510).
- cfg80211: add and use strongly typed element iteration macros (bsc#1051510).
- clk: at91: select parent if main oscillator or bypass is enabled (bsc#1051510).
- clk: qoriq: Fix -Wunused-const-variable (bsc#1051510).
- clk: sirf: Do not reference clk_init_data after registration (bsc#1051510).
- clk: zx296718: Do not reference clk_init_data after registration (bsc#1051510).
- config: arm64: enable erratum 1418040 and 1542419
- crypto: af_alg - Fix race around ctx-&gt;rcvused by making it atomic_t (bsc#1154737).
- crypto: af_alg - Initialize sg_num_bytes in error code path (bsc#1051510).
- crypto: af_alg - consolidation of duplicate code (bsc#1154737).
- crypto: af_alg - fix race accessing cipher request (bsc#1154737).
- crypto: af_alg - remove locking in async callback (bsc#1154737).
- crypto: af_alg - update correct dst SGL entry (bsc#1051510).
- crypto: af_alg - wait for data at beginning of recvmsg (bsc#1154737).
- crypto: algif - return error code when no data was processed (bsc#1154737).
- crypto: algif_aead - copy AAD from src to dst (bsc#1154737).
- crypto: algif_aead - fix reference counting of null skcipher (bsc#1154737).
- crypto: algif_aead - overhaul memory management (bsc#1154737).
- crypto: algif_aead - skip SGL entries with NULL page (bsc#1154737).
- crypto: algif_skcipher - overhaul memory management (bsc#1154737).
- crypto: talitos - fix missing break in switch statement (bsc#1142635).
- cxgb4: Signedness bug in init_one() (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584).
- cxgb4: do not dma memory off of the stack (bsc#1152790).
- cxgb4: fix endianness for vlan value in cxgb4_tc_flower (bsc#1064802 bsc#1066129).
- cxgb4: offload VLAN flows regardless of VLAN ethtype (bsc#1064802 bsc#1066129).
- cxgb4: reduce kernel stack usage in cudbg_collect_mem_region() (bsc#1073513).
- cxgb4: smt: Add lock for atomic_dec_and_test (bsc#1064802 bsc#1066129).
- cxgb4:Fix out-of-bounds MSI-X info array access (networking-stable-19_10_05).
- dasd_fba: Display '00000000' for zero page when dumping sense (bsc#1123080).
- drm/amd/display: Restore backlight brightness after system resume (bsc#1112178)
- drm/amd/display: fix issue where 252-255 values are clipped (bsc#1111666).
- drm/amd/display: reprogram VM config when system resume (bsc#1111666).
- drm/amd/display: support spdif (bsc#1111666).
- drm/amd/dm: Understand why attaching path/tile properties are needed (bsc#1111666).
- drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) (bsc#1051510).
- drm/amd/pp: Fix truncated clock value when set watermark (bsc#1111666).
- drm/amdgpu/gfx9: Update gfx9 golden settings (bsc#1111666).
- drm/amdgpu/si: fix ASIC tests (git-fixes).
- drm/amdgpu: Check for valid number of registers to read (bsc#1051510).
- drm/amdgpu: Fix KFD-related kernel oops on Hawaii (bsc#1111666).
- drm/amdgpu: Update gc_9_0 golden settings (bsc#1111666).
- drm/amdkfd: Add missing Polaris10 ID (bsc#1111666).
- drm/ast: Fixed reboot test may cause system hanged (bsc#1051510).
- drm/atomic_helper: Allow DPMS On&amp;lt;-&gt;Off changes for unregistered connectors (bsc#1111666).
- drm/atomic_helper: Disallow new modesets on unregistered connectors (bsc#1111666).
- drm/atomic_helper: Stop modesets on unregistered connectors harder (bsc#1111666).
- drm/bridge: tc358767: Increase AUX transfer length limit (bsc#1051510).
- drm/bridge: tfp410: fix memleak in get_modes() (bsc#1111666).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 (bsc#1051510).
- drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)
- drm/i915/cmdparser: Ignore Length operands during (bsc#1135967)
- drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)
- drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)
- drm/i915/gvt: update vgpu workload head pointer correctly (bsc#1112178)
- drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)
- drm/i915: Add support for mandatory cmdparsing (bsc#1135967)
- drm/i915: Allow parsing of unsized batches (bsc#1135967)
- drm/i915: Cleanup gt powerstate from gem (bsc#1111666).
- drm/i915: Disable Secure Batches for gen6+ (bsc#1135967)
- drm/i915: Fix intel_dp_mst_best_encoder() (bsc#1111666).
- drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)
- drm/i915: Remove Master tables from cmdparser (bsc#1135967)
- drm/i915: Rename gen7 cmdparser tables (bsc#1135967)
- drm/i915: Restore sane defaults for KMS on GEM error load (bsc#1111666).
- drm/i915: Support ro ppgtt mapped cmdparser shadow (bsc#1135967)
- drm/mediatek: set DMA max segment size (bsc#1111666).
- drm/msm/dsi: Fix return value check for clk_get_parent (bsc#1111666).
- drm/msm/dsi: Implement reset correctly (bsc#1051510).
- drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling (bsc#1111666).
- drm/nouveau/kms/nv50-: Do not create MSTMs for eDP connectors (bsc#1112178)
- drm/nouveau/volt: Fix for some cards having 0 maximum voltage (bsc#1111666).
- drm/omap: fix max fclk divider for omap36xx (bsc#1111666).
- drm/panel: check failure cases in the probe func (bsc#1111666).
- drm/panel: make drm_panel.h self-contained (bsc#1111666).
- drm/panel: simple: fix AUO g185han01 horizontal blanking (bsc#1051510).
- drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed (bsc#1111666).
- drm/radeon: Fix EEH during kexec (bsc#1051510).
- drm/rockchip: Check for fast link training before enabling psr (bsc#1111666).
- drm/stm: attach gem fence to atomic state (bsc#1111666).
- drm/tilcdc: Register cpufreq notifier after we have initialized crtc (bsc#1051510).
- drm/vmwgfx: Fix double free in vmw_recv_msg() (bsc#1051510).
- drm: Flush output polling on shutdown (bsc#1051510).
- drm: add __user attribute to ptr_to_compat() (bsc#1111666).
- drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC (bsc#1111666).
- drm: rcar-du: lvds: Fix bridge_to_rcar_lvds (bsc#1111666).
- e1000e: add workaround for possible stalled packet (bsc#1051510).
- efi/arm: Show SMBIOS bank/device location in CPER and GHES error logs (bsc#1152033).
- efi/memattr: Do not bail on zero VA if it equals the region's PA (bsc#1051510).
- efi: cper: print AER info of pcie fatal error (bsc#1051510).
- efivar/ssdt: Do not iterate over EFI vars if no SSDT override was specified (bsc#1051510).
- firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices (git-fixes).
- gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() (bsc#1051510).
- hid: apple: Fix stuck function keys when using FN (bsc#1051510).
- hid: fix error message in hid_open_report() (bsc#1051510).
- hid: hidraw: Fix invalid read in hidraw_ioctl (bsc#1051510).
- hid: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy() (bsc#1051510).
- hid: logitech: Fix general protection fault caused by Logitech driver (bsc#1051510).
- hid: prodikeys: Fix general protection fault during probe (bsc#1051510).
- hid: sony: Fix memory corruption issue on cleanup (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' (bsc#1051510).
- hwrng: core - do not wait on add_early_randomness() (git-fixes).
- hyperv: set nvme msi interrupts to unmanaged (jsc#SLE-8953, jsc#SLE-9221, jsc#SLE-4941, bsc#1119461, bsc#1119465, bsc#1138190, bsc#1154905).
- i2c: riic: Clear NACK in tend isr (bsc#1051510).
- ib/core, ipoib: Do not overreact to SM LID change event (bsc#1154108)
- ib/core: Add mitigation for Spectre V1 (bsc#1155671)
- ib/hfi1: Remove overly conservative VM_EXEC flag check (bsc#1144449).
- ib/mlx5: Consolidate use_umr checks into single function (bsc#1093205).
- ib/mlx5: Fix MR re-registration flow to use UMR properly (bsc#1093205).
- ib/mlx5: Report correctly tag matching rendezvous capability (bsc#1046305).
- ieee802154: atusb: fix use-after-free at disconnect (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- ieee802154: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- iio: adc: ad799x: fix probe error handling (bsc#1051510).
- iio: light: opt3001: fix mutex unlock race (bsc#1051510).
- ima: always return negative code for error (bsc#1051510).
- input: da9063 - fix capability and drop KEY_SLEEP (bsc#1051510).
- input: synaptics-rmi4 - avoid processing unknown IRQs (bsc#1051510).
- integrity: prevent deadlock during digsig verification (bsc#1090631).
- iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 (bsc#1137799).
- iommu/amd: Check PM_LEVEL_SIZE() condition in locked section (bsc#1154608).
- iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems (bsc#1137799).
- iommu/amd: Remove domain-&gt;updated (bsc#1154610).
- iommu/amd: Wait for completion of IOTLB flush in attach_device (bsc#1154611).
- ipmi_si: Only schedule continuously in the thread in maintenance mode (bsc#1051510).
- ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' (networking-stable-19_09_15).
- ipv6: Handle missing host route in __ipv6_ifa_notify (networking-stable-19_10_05).
- ipv6: drop incoming packets having a v4mapped source address (networking-stable-19_10_05).
- irqchip/gic-v3-its: Fix LPI release for Multi-MSI devices (jsc#ECO-561).
- irqchip/gic-v3-its: Fix command queue pointer comparison bug (jsc#ECO-561).
- irqchip/gic-v3-its: Fix misuse of GENMASK macro (jsc#ECO-561).
- iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init (bsc#1111666).
- ixgbe: Fix secpath usage for IPsec TX offload (bsc#1113994 bsc#1151807).
- ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (bsc#1101674).
- ixgbe: sync the first fragment unconditionally (bsc#1133140).
- kABI workaround for crypto/af_alg changes (bsc#1154737).
- kABI workaround for drm_connector.registered type changes (bsc#1111666).
- kABI workaround for mmc_host retune_crc_disable flag addition (bsc#1111666).
- kABI workaround for snd_hda_pick_pin_fixup() changes (bsc#1051510).
- kabi/severities: Whitelist functions internal to radix mm. To call these functions you have to first detect if you are running in radix mm mode which can't be expected of OOT code.
- kabi: net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05).
- kernel-binary.spec.in: Fix build of non-modular kernels (boo#1154578).
- kernel/sysctl.c: do not override max_threads provided by userspace (bnc#1150875).
- ksm: cleanup stable_node chain collapse case (bnc#1144338).
- ksm: fix use after free with merge_across_nodes = 0 (bnc#1144338).
- ksm: introduce ksm_max_page_sharing per page deduplication limit (bnc#1144338).
- ksm: optimize refile of stable_node_dup at the head of the chain (bnc#1144338).
- ksm: swap the two output parameters of chain/chain_prune (bnc#1144338).
- kvm: Convert kvm_lock to a mutex (bsc#1117665).
- kvm: MMU: drop vcpu param in gpte_access (bsc#1117665).
- kvm: PPC: Book3S HV: use smp_mb() when setting/clearing host_ipi flag (bsc#1061840).
- kvm: arm/arm64: Clean dcache to PoC when changing PTE due to CoW (jsc#ECO-561,jsc#SLE-10671).
- kvm: arm/arm64: Detangle kvm_mmu.h from kvm_hyp.h (jsc#ECO-561,jsc#SLE-10671).
- kvm: arm/arm64: Drop vcpu parameter from guest cache maintenance operartions (jsc#ECO-561,jsc#SLE-10671).
- kvm: arm/arm64: Limit icache invalidation to prefetch aborts (jsc#ECO-561,jsc#SLE-10671).
- kvm: arm/arm64: Only clean the dcache on translation fault (jsc#ECO-561,jsc#SLE-10671).
- kvm: arm/arm64: Preserve Exec permission across R/W permission faults (jsc#ECO-561,jsc#SLE-10671).
- kvm: arm/arm64: Split dcache/icache flushing (jsc#ECO-561,jsc#SLE-10671).
- kvm: arm64: Set SCTLR_EL2.DSSBS if SSBD is forcefully disabled and !vhe (jsc#ECO-561).
- kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bsc#1117665).
- kvm: x86, powerpc: do not allow clearing largepages debugfs entry (bsc#1117665).
- kvm: x86: Do not release the page inside mmu_set_spte() (bsc#1117665).
- kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (bsc#1117665).
- kvm: x86: adjust kvm_mmu_page member to save 8 bytes (bsc#1117665).
- kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (bsc#1117665).
- kvm: x86: make FNAME(fetch) and __direct_map more similar (bsc#1117665).
- kvm: x86: remove now unneeded hugepage gfn adjustment (bsc#1117665).
- lib/mpi: Fix karactx leak in mpi_powm (bsc#1051510).
- libertas: Add missing sentinel at end of if_usb.c fw_table (bsc#1051510).
- libnvdimm/security: provide fix for secure-erase to use zero-key (bsc#1149853).
- lpfc: Add FA-WWN Async Event reporting (bsc#1154521).
- lpfc: Add FC-AL support to lpe32000 models (bsc#1154521).
- lpfc: Add additional discovery log messages (bsc#1154521).
- lpfc: Add log macros to allow print by serverity or verbocity setting (bsc#1154521).
- lpfc: Fix SLI3 hba in loop mode not discovering devices (bsc#1154521).
- lpfc: Fix bad ndlp ptr in xri aborted handling (bsc#1154521).
- lpfc: Fix hardlockup in lpfc_abort_handler (bsc#1154521).
- lpfc: Fix lockdep errors in sli_ringtx_put (bsc#1154521).
- lpfc: Fix reporting of read-only fw error errors (bsc#1154521).
- lpfc: Make FW logging dynamically configurable (bsc#1154521).
- lpfc: Remove lock contention target write path (bsc#1154521).
- lpfc: Revise interrupt coalescing for missing scenarios (bsc#1154521).
- lpfc: Slight fast-path Performance optimizations (bsc#1154521).
- lpfc: Update lpfc version to 12.6.0.0 (bsc#1154521).
- lpfc: fix coverity error of dereference after null check (bsc#1154521).
- lpfc: fix lpfc_nvmet_mrq to be bound by hdw queue count (bsc#1154521).
- mISDN: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- mac80211: accept deauth frames in IBSS mode (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- macsec: drop skb sk before calling gro_cells_receive (bsc#1051510).
- md/raid0: avoid RAID0 data corruption due to layout confusion (bsc#1140090).
- md/raid0: fix warning message for parameter default_layout (bsc#1140090).
- media: atmel: atmel-isc: fix asd memory allocation (bsc#1135642).
- media: cpia2_usb: fix memory leaks (bsc#1051510).
- media: dvb-core: fix a memory leak bug (bsc#1051510).
- media: exynos4-is: fix leaked of_node references (bsc#1051510).
- media: gspca: zero usb_buf on error (bsc#1051510).
- media: hdpvr: Add device num check and handling (bsc#1051510).
- media: hdpvr: add terminating 0 at end of string (bsc#1051510).
- media: i2c: ov5645: Fix power sequence (bsc#1051510).
- media: iguanair: add sanity checks (bsc#1051510).
- media: omap3isp: Do not set streaming state on random subdevs (bsc#1051510).
- media: omap3isp: Set device on omap3isp subdevs (bsc#1051510).
- media: ov9650: add a sanity check (bsc#1051510).
- media: radio/si470x: kill urb on error (bsc#1051510).
- media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() (bsc#1051510).
- media: saa7146: add cleanup in hexium_attach() (bsc#1051510).
- media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table (bsc#1051510).
- media: stkwebcam: fix runtime PM after driver unbind (bsc#1051510).
- media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (bsc#1051510).
- memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' (bsc#1051510).
- mfd: intel-lpss: Remove D3cold delay (bsc#1051510).
- mld: fix memory leak in mld_del_delrec() (networking-stable-19_09_05).
- mmc: core: API to temporarily disable retuning for SDIO CRC errors (bsc#1111666).
- mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() (bsc#1111666).
- mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence (bsc#1051510).
- mmc: sdhci: Fix incorrect switch to HS mode (bsc#1051510).
- mmc: sdhci: improve ADMA error reporting (bsc#1051510).
- net/ibmvnic: Fix EOI when running in XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes).
- net/mlx4_en: fix a memory leak bug (bsc#1046299).
- net/mlx5: Add device ID of upcoming BlueField-2 (bsc#1046303 ).
- net/mlx5: Fix error handling in mlx5_load() (bsc#1046305 ).
- net/phy: fix DP83865 10 Mbps HDX loopback disable function (networking-stable-19_09_30).
- net/rds: Fix error handling in rds_ib_add_one() (networking-stable-19_10_05).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- net/rds: remove user triggered WARN_ON in rds_sendmsg (bsc#1154848).
- net/sched: act_sample: do not push mac header on ip6gre ingress (networking-stable-19_09_30).
- net: Fix null de-reference of device refcount (networking-stable-19_09_15).
- net: Replace NF_CT_ASSERT() with WARN_ON() (bsc#1146612).
- net: Unpublish sk from sk_reuseport_cb before call_rcu (networking-stable-19_10_05).
- net: fix skb use after free in netpoll (networking-stable-19_09_05).
- net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list (networking-stable-19_09_15).
- net: openvswitch: free vport unless register_netdevice() succeeds (git-fixes).
- net: qlogic: Fix memory leak in ql_alloc_large_buffers (networking-stable-19_10_05).
- net: qrtr: Stop rx_worker before freeing node (networking-stable-19_09_30).
- net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05).
- net: stmmac: dwmac-rk: Do not fail if phy regulator is absent (networking-stable-19_09_05).
- net_sched: add policy validation for action attributes (networking-stable-19_09_30).
- net_sched: fix backward compatibility for TCA_ACT_KIND (git-fixes).
- netfilter: nf_nat: do not bug when mapping already exists (bsc#1146612).
- nfc: fix attrs checks in netlink interface (bsc#1051510).
- nfc: fix memory leak in llcp_sock_bind() (bsc#1051510).
- nfc: pn533: fix use-after-free and memleaks (bsc#1051510).
- nfs: fix incorrectly backported patch (boo#1154189 bsc#1154747).
- nfsv4.1 - backchannel request should hold ref on xprt (bsc#1152624).
- nl80211: fix null pointer dereference (bsc#1051510).
- objtool: Clobber user CFLAGS variable (bsc#1153236).
- openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC (networking-stable-19_09_30).
- packaging: add support for riscv64
- pci: Correct pci=resource_alignment parameter example (bsc#1051510).
- pci: PM: Fix pci_power_up() (bsc#1051510).
- pci: dra7xx: Fix legacy INTD IRQ handling (bsc#1087092).
- pci: hv: Use bytes 4 and 5 from instance ID as the pci domain numbers (bsc#1153263).
- pinctrl: cherryview: restore Strago DMI workaround for all versions (bsc#1111666).
- pinctrl: tegra: Fix write barrier placement in pmx_writel (bsc#1051510).
- platform/x86: classmate-laptop: remove unused variable (bsc#1051510).
- platform/x86: i2c-multi-instantiate: Derive the device name from parent (bsc#1111666).
- platform/x86: i2c-multi-instantiate: Fail the probe if no IRQ provided (bsc#1111666).
- platform/x86: pmc_atom: Add Siemens SIMATIC IPC277E to critclk_systems DMI table (bsc#1051510).
- power: supply: sysfs: ratelimit property read error message (bsc#1051510).
- powerpc/64s/pseries: radix flush translations before MMU is enabled at boot (bsc#1055186).
- powerpc/64s/radix: keep kernel ERAT over local process/guest invalidates (bsc#1055186).
- powerpc/64s/radix: tidy up TLB flushing code (bsc#1055186).
- powerpc/64s: Rename PPC_INVALIDATE_ERAT to PPC_ISA_3_0_INVALIDATE_ERAT (bsc#1055186).
- powerpc/mm/book3s64: Move book3s64 code to pgtable-book3s64 (bsc#1055186).
- powerpc/mm/radix: mark __radix__flush_tlb_range_psize() as __always_inline (bsc#1055186).
- powerpc/mm/radix: mark as __tlbie_pid() and friends as__always_inline (bsc#1055186).
- powerpc/mm: Properly invalidate when setting process table base (bsc#1055186).
- powerpc/mm: mark more tlb functions as __always_inline (bsc#1055186).
- powerpc/pseries/mobility: use cond_resched when updating device tree (bsc#1153112 ltc#181778).
- powerpc/pseries: Remove confusing warning message (bsc#1109158).
- powerpc/rtas: allow rescheduling while changing cpu states (bsc#1153112 ltc#181778).
- powerplay: Respect units on max dcfclk watermark (bsc#1111666).
- qed: iWARP - Fix default window size to be based on chip (bsc#1050536 bsc#1050545).
- qed: iWARP - Fix tc for MPA ll2 connection (bsc#1050536 bsc#1050545).
- qed: iWARP - Use READ_ONCE and smp_store_release to access ep-&gt;state (bsc#1050536 bsc#1050545).
- qed: iWARP - fix uninitialized callback (bsc#1050536 bsc#1050545).
- qmi_wwan: add support for Cinterion CLS8 devices (networking-stable-19_10_05).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- rdma/bnxt_re: Fix spelling mistake 'missin_resp' -&gt; 'missing_resp' (bsc#1050244).
- rdma/hns: Add reset process for function-clear (bsc#1155061).
- rdma/hns: Remove the some magic number (bsc#1155061).
- rdma: Fix goto target to release the allocated memory (bsc#1050244).
- rds: Fix warning (bsc#1154848).
- rpm/constraints.in: lower disk space required for ARM With a requirement of 35GB, only 2 slow workers are usable for ARM. Current aarch64 build requires 27G and armv6/7 requires 14G. Set requirements respectively to 30GB and 20GB.
- rpm/dtb.spec.in.in: do not make dtb directory inaccessible There is no reason to lock down the dtb directory for ordinary users.
- rpm/kernel-binary.spec.in: build kernel-*-kgraft only for default SLE kernel RT and Azure variants are excluded for the moment. (bsc#1141600)
- rpm/kernel-binary.spec.in: handle modules.builtin.modinfo It was added in 5.2.
- rpm/kernel-binary.spec.in: support partial rt debug config.
- rpm/kernel-subpackage-spec: Mention debuginfo in the subpackage description (bsc#1149119).
- rpm/macros.kernel-source: KMPs should depend on kmod-compat to build. kmod-compat links are used in find-provides.ksyms, find-requires.ksyms, and find-supplements.ksyms in rpm-config-SUSE.
- rpm/mkspec: Correct tarball URL for rc kernels.
- rpm/mkspec: Make building DTBs optional.
- rpm/modflist: Simplify compression support.
- rpm: raise required disk space for binary packages Current disk space constraints (10 GB on s390x, 25 GB on other architectures) no longer suffice for 5.3 kernel builds. The statistics show ~30 GB of disk consumption on x86_64 and ~11 GB on s390x so raise the constraints to 35 GB in general and 14 GB on s390x.
- rpm: support compressed modules Some of our scripts and scriptlets in rpm/ do not expect module files not ending with '.ko' which currently leads to failure in preuninstall scriptlet of cluster-md-kmp-default (and probably also other subpackages). Let those which could be run on compressed module files recognize '.ko.xz' in addition to '.ko'.
- rtlwifi: rtl8192cu: Fix value set in descriptor (bsc#1142635).
- s390/cmf: set_schib_wait add timeout (bsc#1153509, bsc#1153476).
- s390/cpumsf: Check for CPU Measurement sampling (bsc#1153681 LTC#181855).
- s390/crypto: fix gcm-aes-s390 selftest failures (bsc#1137861 LTC#178091).
- s390/pci: add mio_enabled attribute (bsc#1152665 LTC#181729).
- s390/pci: correctly handle MIO opt-out (bsc#1152665 LTC#181729).
- s390/pci: deal with devices that have no support for MIO instructions (bsc#1152665 LTC#181729).
- s390/pci: fix MSI message data (bsc#1152697 LTC#181730).
- s390: add support for IBM z15 machines (bsc#1152696 LTC#181731).
- s390: fix setting of mio addressing control (bsc#1152665 LTC#181729).
- sch_cbq: validate TCA_CBQ_WRROPT to avoid crash (networking-stable-19_10_05).
- sch_dsmark: fix potential NULL deref in dsmark_init() (networking-stable-19_10_05).
- sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero (networking-stable-19_09_15).
- sch_netem: fix a divide by zero in tabledist() (networking-stable-19_09_30).
- sched/fair: Avoid divide by zero when rebalancing domains (bsc#1096254).
- scripts/arch-symbols: add missing link.
- scsi: lpfc: Check queue pointer before use (bsc#1154242).
- scsi: lpfc: Complete removal of FCoE T10 PI support on SLI-4 adapters (bsc#1154521).
- scsi: lpfc: Convert existing %pf users to %ps (bsc#1154521).
- scsi: lpfc: Fix GPF on scsi command completion (bsc#1154521).
- scsi: lpfc: Fix NVME io abort failures causing hangs (bsc#1154521).
- scsi: lpfc: Fix NVMe ABTS in response to receiving an ABTS (bsc#1154521).
- scsi: lpfc: Fix coverity errors on NULL pointer checks (bsc#1154521).
- scsi: lpfc: Fix device recovery errors after PLOGI failures (bsc#1154521).
- scsi: lpfc: Fix devices that do not return after devloss followed by rediscovery (bsc#1137040).
- scsi: lpfc: Fix discovery failures when target device connectivity bounces (bsc#1154521).
- scsi: lpfc: Fix hdwq sgl locks and irq handling (bsc#1154521).
- scsi: lpfc: Fix host hang at boot or slow boot (bsc#1154521).
- scsi: lpfc: Fix list corruption detected in lpfc_put_sgl_per_hdwq (bsc#1154521).
- scsi: lpfc: Fix list corruption in lpfc_sli_get_iocbq (bsc#1154521).
- scsi: lpfc: Fix locking on mailbox command completion (bsc#1154521).
- scsi: lpfc: Fix miss of register read failure check (bsc#1154521).
- scsi: lpfc: Fix null ptr oops updating lpfc_devloss_tmo via sysfs attribute (bsc#1140845).
- scsi: lpfc: Fix premature re-enabling of interrupts in lpfc_sli_host_down (bsc#1154521).
- scsi: lpfc: Fix propagation of devloss_tmo setting to nvme transport (bsc#1140883).
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (bsc#1154521).
- scsi: lpfc: Fix rpi release when deleting vport (bsc#1154521).
- scsi: lpfc: Fix spinlock_irq issues in lpfc_els_flush_cmd() (bsc#1154521).
- scsi: lpfc: Make function lpfc_defer_pt2pt_acc static (bsc#1154521).
- scsi: lpfc: Remove bg debugfs buffers (bsc#1144375).
- scsi: lpfc: Update async event logging (bsc#1154521).
- scsi: lpfc: Update lpfc version to 12.4.0.1 (bsc#1154521).
- scsi: lpfc: cleanup: remove unused fcp_txcmlpq_cnt (bsc#1154521).
- scsi: lpfc: remove left-over BUILD_NVME defines (bsc#1154268).
- scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (bsc#1098291).
- scsi: qedf: fc_rport_priv reference counting fixes (bsc#1098291).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix partial flash write of MBI (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix wait condition in loop (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Initialized mailbox to prevent driver load failure (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: fixup incorrect usage of host_byte (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: stop timer in shutdown path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: storvsc: setup 1:1 mapping between hardware queue and CPU queue (bsc#1140729).
- scsi: zfcp: fix reaction on bit error threshold notification (bsc#1154956 LTC#182054).
- sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' (networking-stable-19_09_15).
- sctp: use transport pf_retrans in sctp_do_8_2_transport_strike (networking-stable-19_09_15).
- skge: fix checksum byte order (networking-stable-19_09_30).
- sock_diag: fix autoloading of the raw_diag module (bsc#1152791).
- sock_diag: request _diag module only when the family or proto has been registered (bsc#1152791).
- staging: bcm2835-audio: Fix draining behavior regression (bsc#1111666).
- staging: vt6655: Fix memory leak in vt6655_probe (bsc#1051510).
- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;= NUM_WEPKEYS (bsc#1051510).
- supporte.conf: add efivarfs to kernel-default-base (bsc#1154858).
- tcp: Do not dequeue SYN/FIN-segments from write-queue (git-gixes).
- tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR (networking-stable-19_09_15).
- tcp: inherit timestamp on mtu probe (networking-stable-19_09_05).
- tcp: remove empty skb from write queue in error cases (networking-stable-19_09_05).
- thermal: Fix use-after-free when unregistering thermal zone device (bsc#1051510).
- thermal_hwmon: Sanitize thermal_zone type (bsc#1051510).
- tipc: add NULL pointer check before calling kfree_rcu (networking-stable-19_09_15).
- tipc: fix unlimited bundling of small messages (networking-stable-19_10_05).
- tracing: Initialize iter-&gt;seq after zeroing in tracing_read_pipe() (bsc#1151508).
- tun: fix use-after-free when register netdev failed (networking-stable-19_09_15).
- tuntap: correctly set SOCKWQ_ASYNC_NOSPACE (bsc#1145099).
- usb: adutux: fix NULL-derefs on disconnect (bsc#1142635).
- usb: adutux: fix use-after-free on disconnect (bsc#1142635).
- usb: adutux: fix use-after-free on release (bsc#1051510).
- usb: chaoskey: fix use-after-free on release (bsc#1051510).
- usb: dummy-hcd: fix power budget for SuperSpeed mode (bsc#1051510).
- usb: iowarrior: fix use-after-free after driver unbind (bsc#1051510).
- usb: iowarrior: fix use-after-free on disconnect (bsc#1051510).
- usb: iowarrior: fix use-after-free on release (bsc#1051510).
- usb: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- usb: ldusb: fix memleak on disconnect (bsc#1051510).
- usb: ldusb: fix read info leaks (bsc#1051510).
- usb: legousbtower: fix a signedness bug in tower_probe() (bsc#1051510).
- usb: legousbtower: fix deadlock on disconnect (bsc#1142635).
- usb: legousbtower: fix memleak on disconnect (bsc#1051510).
- usb: legousbtower: fix open after failed reset request (bsc#1142635).
- usb: legousbtower: fix potential NULL-deref on disconnect (bsc#1142635).
- usb: legousbtower: fix slab info leak at probe (bsc#1142635).
- usb: legousbtower: fix use-after-free on release (bsc#1051510).
- usb: microtek: fix info-leak at probe (bsc#1142635).
- usb: serial: fix runtime PM after driver unbind (bsc#1051510).
- usb: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20 (bsc#1051510).
- usb: serial: keyspan: fix NULL-derefs on open() and write() (bsc#1051510).
- usb: serial: option: add Telit FN980 compositions (bsc#1051510).
- usb: serial: option: add support for Cinterion CLS8 devices (bsc#1051510).
- usb: serial: ti_usb_3410_5052: fix port-close races (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- usb: usb-skeleton: fix NULL-deref on disconnect (bsc#1051510).
- usb: usb-skeleton: fix runtime PM after driver unbind (bsc#1051510).
- usb: usb-skeleton: fix use-after-free after driver unbind (bsc#1051510).
- usb: usblcd: fix I/O after disconnect (bsc#1142635).
- usb: usblp: fix runtime PM after driver unbind (bsc#1051510).
- usb: usblp: fix use-after-free on disconnect (bsc#1051510).
- usb: xhci: wait for CNR controller not ready bit in xhci resume (bsc#1051510).
- usb: yurex: Do not retry on unexpected errors (bsc#1051510).
- usb: yurex: fix NULL-derefs on disconnect (bsc#1051510).
- usbnet: ignore endpoints with invalid wMaxPacketSize (bsc#1051510).
- usbnet: sanity checking of packet sizes and device mtu (bsc#1051510).
- vfio_pci: Restore original state on release (bsc#1051510).
- vhost_net: conditionally enable tx polling (bsc#1145099).
- video: of: display_timing: Add of_node_put() in of_get_display_timing() (bsc#1051510).
- vsock: Fix a lockdep warning in __vsock_release() (networking-stable-19_10_05).
- watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout (bsc#1051510).
- x86/asm: Fix MWAITX C-state hint value (bsc#1114279).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area (bnc#1153969).
- x86/boot/64: Round memory hole size up to next PMD page (bnc#1153969).
- x86/mm: Use WRITE_ONCE() when setting PTEs (bsc#1114279).
- xen/netback: fix error path of xenvif_connect_data() (bsc#1065600).
- xen/pv: Fix Xen PV guest int3 handling (bsc#1153811).
- xhci: Check all endpoints for LPM timeout (bsc#1051510).
- xhci: Fix false warning message about wrong bounce buffer write length (bsc#1051510).
- xhci: Increase STS_SAVE timeout in xhci_suspend() (bsc#1051510).
- xhci: Prevent device initiated U1/U2 link pm if exit latency is too long (bsc#1051510).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-12"/>
	<updated date="2019-11-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046299">SUSE bug 1046299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046303">SUSE bug 1046303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046305">SUSE bug 1046305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073513">SUSE bug 1073513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086323">SUSE bug 1086323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087092">SUSE bug 1087092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089644">SUSE bug 1089644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090631">SUSE bug 1090631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093205">SUSE bug 1093205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096254">SUSE bug 1096254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097583">SUSE bug 1097583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097584">SUSE bug 1097584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097585">SUSE bug 1097585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097586">SUSE bug 1097586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097587">SUSE bug 1097587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097588">SUSE bug 1097588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098291">SUSE bug 1098291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101674">SUSE bug 1101674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109158">SUSE bug 1109158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117665">SUSE bug 1117665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119461">SUSE bug 1119461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119465">SUSE bug 1119465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123034">SUSE bug 1123034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123080">SUSE bug 1123080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133140">SUSE bug 1133140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134303">SUSE bug 1134303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135854">SUSE bug 1135854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135873">SUSE bug 1135873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135967">SUSE bug 1135967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137040">SUSE bug 1137040</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137799">SUSE bug 1137799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137861">SUSE bug 1137861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138190">SUSE bug 1138190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140090">SUSE bug 1140090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140729">SUSE bug 1140729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140845">SUSE bug 1140845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140883">SUSE bug 1140883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141600">SUSE bug 1141600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142667">SUSE bug 1142667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144338">SUSE bug 1144338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144375">SUSE bug 1144375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144449">SUSE bug 1144449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145099">SUSE bug 1145099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146612">SUSE bug 1146612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148410">SUSE bug 1148410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149119">SUSE bug 1149119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149853">SUSE bug 1149853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150452">SUSE bug 1150452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150457">SUSE bug 1150457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150465">SUSE bug 1150465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150875">SUSE bug 1150875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151508">SUSE bug 1151508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151807">SUSE bug 1151807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152033">SUSE bug 1152033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152624">SUSE bug 1152624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152665">SUSE bug 1152665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152685">SUSE bug 1152685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152696">SUSE bug 1152696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152697">SUSE bug 1152697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152788">SUSE bug 1152788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152790">SUSE bug 1152790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152791">SUSE bug 1152791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153112">SUSE bug 1153112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153158">SUSE bug 1153158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153236">SUSE bug 1153236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153263">SUSE bug 1153263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153476">SUSE bug 1153476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153509">SUSE bug 1153509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153607">SUSE bug 1153607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153646">SUSE bug 1153646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153681">SUSE bug 1153681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153713">SUSE bug 1153713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153717">SUSE bug 1153717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153718">SUSE bug 1153718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153719">SUSE bug 1153719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153811">SUSE bug 1153811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153969">SUSE bug 1153969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154108">SUSE bug 1154108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154189">SUSE bug 1154189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154242">SUSE bug 1154242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154268">SUSE bug 1154268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154354">SUSE bug 1154354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154372">SUSE bug 1154372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154521">SUSE bug 1154521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154578">SUSE bug 1154578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154607">SUSE bug 1154607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154608">SUSE bug 1154608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154610">SUSE bug 1154610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154611">SUSE bug 1154611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154651">SUSE bug 1154651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154737">SUSE bug 1154737</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154747">SUSE bug 1154747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154848">SUSE bug 1154848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154858">SUSE bug 1154858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154905">SUSE bug 1154905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154956">SUSE bug 1154956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155061">SUSE bug 1155061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155178">SUSE bug 1155178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155179">SUSE bug 1155179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155184">SUSE bug 1155184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155186">SUSE bug 1155186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155671">SUSE bug 1155671</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12207/">CVE-2018-12207</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11135/">CVE-2019-11135</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16232/">CVE-2019-16232</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16233/">CVE-2019-16233</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16234/">CVE-2019-16234</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-16995/">CVE-2019-16995</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-17056/">CVE-2019-17056</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17133/">CVE-2019-17133</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-17666/">CVE-2019-17666</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498024" comment="kernel-azure-4.12.14-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498025" comment="kernel-azure-base-4.12.14-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498026" comment="kernel-azure-devel-4.12.14-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498027" comment="kernel-devel-azure-4.12.14-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498028" comment="kernel-source-azure-4.12.14-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498029" comment="kernel-syms-azure-4.12.14-8.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138853" version="1" class="patch">
	<metadata>
		<title>Security update for cloud-init (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1099358" ref_url="https://bugzilla.suse.com/1099358" source="BUGZILLA"/>
		<reference ref_id="1129124" ref_url="https://bugzilla.suse.com/1129124" source="BUGZILLA"/>
		<reference ref_id="1136440" ref_url="https://bugzilla.suse.com/1136440" source="BUGZILLA"/>
		<reference ref_id="1142988" ref_url="https://bugzilla.suse.com/1142988" source="BUGZILLA"/>
		<reference ref_id="1144363" ref_url="https://bugzilla.suse.com/1144363" source="BUGZILLA"/>
		<reference ref_id="1151488" ref_url="https://bugzilla.suse.com/1151488" source="BUGZILLA"/>
		<reference ref_id="1154092" ref_url="https://bugzilla.suse.com/1154092" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-0816" ref_url="https://www.suse.com/security/cve/CVE-2019-0816/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3096-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006198.html" source="SUSE-SU"/>
		<description>
This update for cloud-init to version 19.2 fixes the following issues:

Security issue fixed:

- CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorized_keys (bsc#1129124).

Non-security issues fixed:

- Short circuit the conditional for identifying the sysconfig renderer (bsc#1154092, bsc#1142988).
- If /etc/resolv.conf is a symlink, break it. This will avoid netconfig from clobbering the changes cloud-init applied (bsc#1151488).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-28"/>
	<updated date="2019-11-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1099358">SUSE bug 1099358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129124">SUSE bug 1129124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136440">SUSE bug 1136440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142988">SUSE bug 1142988</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144363">SUSE bug 1144363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151488">SUSE bug 1151488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154092">SUSE bug 1154092</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-0816/">CVE-2019-0816</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498030" comment="cloud-init-19.2-8.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498031" comment="cloud-init-config-suse-19.2-8.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138854" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1048942" ref_url="https://bugzilla.suse.com/1048942" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1078248" ref_url="https://bugzilla.suse.com/1078248" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1089644" ref_url="https://bugzilla.suse.com/1089644" source="BUGZILLA"/>
		<reference ref_id="1091041" ref_url="https://bugzilla.suse.com/1091041" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1108043" ref_url="https://bugzilla.suse.com/1108043" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1117169" ref_url="https://bugzilla.suse.com/1117169" source="BUGZILLA"/>
		<reference ref_id="1118661" ref_url="https://bugzilla.suse.com/1118661" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1120853" ref_url="https://bugzilla.suse.com/1120853" source="BUGZILLA"/>
		<reference ref_id="1126390" ref_url="https://bugzilla.suse.com/1126390" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1131107" ref_url="https://bugzilla.suse.com/1131107" source="BUGZILLA"/>
		<reference ref_id="1134983" ref_url="https://bugzilla.suse.com/1134983" source="BUGZILLA"/>
		<reference ref_id="1135966" ref_url="https://bugzilla.suse.com/1135966" source="BUGZILLA"/>
		<reference ref_id="1135967" ref_url="https://bugzilla.suse.com/1135967" source="BUGZILLA"/>
		<reference ref_id="1137223" ref_url="https://bugzilla.suse.com/1137223" source="BUGZILLA"/>
		<reference ref_id="1137236" ref_url="https://bugzilla.suse.com/1137236" source="BUGZILLA"/>
		<reference ref_id="1138039" ref_url="https://bugzilla.suse.com/1138039" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1142095" ref_url="https://bugzilla.suse.com/1142095" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142924" ref_url="https://bugzilla.suse.com/1142924" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1146544" ref_url="https://bugzilla.suse.com/1146544" source="BUGZILLA"/>
		<reference ref_id="1149448" ref_url="https://bugzilla.suse.com/1149448" source="BUGZILLA"/>
		<reference ref_id="1150466" ref_url="https://bugzilla.suse.com/1150466" source="BUGZILLA"/>
		<reference ref_id="1151067" ref_url="https://bugzilla.suse.com/1151067" source="BUGZILLA"/>
		<reference ref_id="1151548" ref_url="https://bugzilla.suse.com/1151548" source="BUGZILLA"/>
		<reference ref_id="1151900" ref_url="https://bugzilla.suse.com/1151900" source="BUGZILLA"/>
		<reference ref_id="1152782" ref_url="https://bugzilla.suse.com/1152782" source="BUGZILLA"/>
		<reference ref_id="1153628" ref_url="https://bugzilla.suse.com/1153628" source="BUGZILLA"/>
		<reference ref_id="1153811" ref_url="https://bugzilla.suse.com/1153811" source="BUGZILLA"/>
		<reference ref_id="1154043" ref_url="https://bugzilla.suse.com/1154043" source="BUGZILLA"/>
		<reference ref_id="1154058" ref_url="https://bugzilla.suse.com/1154058" source="BUGZILLA"/>
		<reference ref_id="1154124" ref_url="https://bugzilla.suse.com/1154124" source="BUGZILLA"/>
		<reference ref_id="1154355" ref_url="https://bugzilla.suse.com/1154355" source="BUGZILLA"/>
		<reference ref_id="1154526" ref_url="https://bugzilla.suse.com/1154526" source="BUGZILLA"/>
		<reference ref_id="1154601" ref_url="https://bugzilla.suse.com/1154601" source="BUGZILLA"/>
		<reference ref_id="1155021" ref_url="https://bugzilla.suse.com/1155021" source="BUGZILLA"/>
		<reference ref_id="1155689" ref_url="https://bugzilla.suse.com/1155689" source="BUGZILLA"/>
		<reference ref_id="1155692" ref_url="https://bugzilla.suse.com/1155692" source="BUGZILLA"/>
		<reference ref_id="1155836" ref_url="https://bugzilla.suse.com/1155836" source="BUGZILLA"/>
		<reference ref_id="1155897" ref_url="https://bugzilla.suse.com/1155897" source="BUGZILLA"/>
		<reference ref_id="1155921" ref_url="https://bugzilla.suse.com/1155921" source="BUGZILLA"/>
		<reference ref_id="1156187" ref_url="https://bugzilla.suse.com/1156187" source="BUGZILLA"/>
		<reference ref_id="1156258" ref_url="https://bugzilla.suse.com/1156258" source="BUGZILLA"/>
		<reference ref_id="1156429" ref_url="https://bugzilla.suse.com/1156429" source="BUGZILLA"/>
		<reference ref_id="1156466" ref_url="https://bugzilla.suse.com/1156466" source="BUGZILLA"/>
		<reference ref_id="1156471" ref_url="https://bugzilla.suse.com/1156471" source="BUGZILLA"/>
		<reference ref_id="1156494" ref_url="https://bugzilla.suse.com/1156494" source="BUGZILLA"/>
		<reference ref_id="1156609" ref_url="https://bugzilla.suse.com/1156609" source="BUGZILLA"/>
		<reference ref_id="1156700" ref_url="https://bugzilla.suse.com/1156700" source="BUGZILLA"/>
		<reference ref_id="1156729" ref_url="https://bugzilla.suse.com/1156729" source="BUGZILLA"/>
		<reference ref_id="1156882" ref_url="https://bugzilla.suse.com/1156882" source="BUGZILLA"/>
		<reference ref_id="1156928" ref_url="https://bugzilla.suse.com/1156928" source="BUGZILLA"/>
		<reference ref_id="1157032" ref_url="https://bugzilla.suse.com/1157032" source="BUGZILLA"/>
		<reference ref_id="1157038" ref_url="https://bugzilla.suse.com/1157038" source="BUGZILLA"/>
		<reference ref_id="1157042" ref_url="https://bugzilla.suse.com/1157042" source="BUGZILLA"/>
		<reference ref_id="1157044" ref_url="https://bugzilla.suse.com/1157044" source="BUGZILLA"/>
		<reference ref_id="1157045" ref_url="https://bugzilla.suse.com/1157045" source="BUGZILLA"/>
		<reference ref_id="1157046" ref_url="https://bugzilla.suse.com/1157046" source="BUGZILLA"/>
		<reference ref_id="1157049" ref_url="https://bugzilla.suse.com/1157049" source="BUGZILLA"/>
		<reference ref_id="1157070" ref_url="https://bugzilla.suse.com/1157070" source="BUGZILLA"/>
		<reference ref_id="1157115" ref_url="https://bugzilla.suse.com/1157115" source="BUGZILLA"/>
		<reference ref_id="1157143" ref_url="https://bugzilla.suse.com/1157143" source="BUGZILLA"/>
		<reference ref_id="1157145" ref_url="https://bugzilla.suse.com/1157145" source="BUGZILLA"/>
		<reference ref_id="1157158" ref_url="https://bugzilla.suse.com/1157158" source="BUGZILLA"/>
		<reference ref_id="1157160" ref_url="https://bugzilla.suse.com/1157160" source="BUGZILLA"/>
		<reference ref_id="1157162" ref_url="https://bugzilla.suse.com/1157162" source="BUGZILLA"/>
		<reference ref_id="1157171" ref_url="https://bugzilla.suse.com/1157171" source="BUGZILLA"/>
		<reference ref_id="1157173" ref_url="https://bugzilla.suse.com/1157173" source="BUGZILLA"/>
		<reference ref_id="1157178" ref_url="https://bugzilla.suse.com/1157178" source="BUGZILLA"/>
		<reference ref_id="1157180" ref_url="https://bugzilla.suse.com/1157180" source="BUGZILLA"/>
		<reference ref_id="1157182" ref_url="https://bugzilla.suse.com/1157182" source="BUGZILLA"/>
		<reference ref_id="1157183" ref_url="https://bugzilla.suse.com/1157183" source="BUGZILLA"/>
		<reference ref_id="1157184" ref_url="https://bugzilla.suse.com/1157184" source="BUGZILLA"/>
		<reference ref_id="1157191" ref_url="https://bugzilla.suse.com/1157191" source="BUGZILLA"/>
		<reference ref_id="1157193" ref_url="https://bugzilla.suse.com/1157193" source="BUGZILLA"/>
		<reference ref_id="1157197" ref_url="https://bugzilla.suse.com/1157197" source="BUGZILLA"/>
		<reference ref_id="1157298" ref_url="https://bugzilla.suse.com/1157298" source="BUGZILLA"/>
		<reference ref_id="1157304" ref_url="https://bugzilla.suse.com/1157304" source="BUGZILLA"/>
		<reference ref_id="1157307" ref_url="https://bugzilla.suse.com/1157307" source="BUGZILLA"/>
		<reference ref_id="1157324" ref_url="https://bugzilla.suse.com/1157324" source="BUGZILLA"/>
		<reference ref_id="1157333" ref_url="https://bugzilla.suse.com/1157333" source="BUGZILLA"/>
		<reference ref_id="1157386" ref_url="https://bugzilla.suse.com/1157386" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1157463" ref_url="https://bugzilla.suse.com/1157463" source="BUGZILLA"/>
		<reference ref_id="1157499" ref_url="https://bugzilla.suse.com/1157499" source="BUGZILLA"/>
		<reference ref_id="1157678" ref_url="https://bugzilla.suse.com/1157678" source="BUGZILLA"/>
		<reference ref_id="1157698" ref_url="https://bugzilla.suse.com/1157698" source="BUGZILLA"/>
		<reference ref_id="1157778" ref_url="https://bugzilla.suse.com/1157778" source="BUGZILLA"/>
		<reference ref_id="1157908" ref_url="https://bugzilla.suse.com/1157908" source="BUGZILLA"/>
		<reference ref_id="1158049" ref_url="https://bugzilla.suse.com/1158049" source="BUGZILLA"/>
		<reference ref_id="1158063" ref_url="https://bugzilla.suse.com/1158063" source="BUGZILLA"/>
		<reference ref_id="1158064" ref_url="https://bugzilla.suse.com/1158064" source="BUGZILLA"/>
		<reference ref_id="1158065" ref_url="https://bugzilla.suse.com/1158065" source="BUGZILLA"/>
		<reference ref_id="1158066" ref_url="https://bugzilla.suse.com/1158066" source="BUGZILLA"/>
		<reference ref_id="1158067" ref_url="https://bugzilla.suse.com/1158067" source="BUGZILLA"/>
		<reference ref_id="1158068" ref_url="https://bugzilla.suse.com/1158068" source="BUGZILLA"/>
		<reference ref_id="1158071" ref_url="https://bugzilla.suse.com/1158071" source="BUGZILLA"/>
		<reference ref_id="1158082" ref_url="https://bugzilla.suse.com/1158082" source="BUGZILLA"/>
		<reference ref_id="1158381" ref_url="https://bugzilla.suse.com/1158381" source="BUGZILLA"/>
		<reference ref_id="1158394" ref_url="https://bugzilla.suse.com/1158394" source="BUGZILLA"/>
		<reference ref_id="1158398" ref_url="https://bugzilla.suse.com/1158398" source="BUGZILLA"/>
		<reference ref_id="1158407" ref_url="https://bugzilla.suse.com/1158407" source="BUGZILLA"/>
		<reference ref_id="1158410" ref_url="https://bugzilla.suse.com/1158410" source="BUGZILLA"/>
		<reference ref_id="1158413" ref_url="https://bugzilla.suse.com/1158413" source="BUGZILLA"/>
		<reference ref_id="1158417" ref_url="https://bugzilla.suse.com/1158417" source="BUGZILLA"/>
		<reference ref_id="1158427" ref_url="https://bugzilla.suse.com/1158427" source="BUGZILLA"/>
		<reference ref_id="1158445" ref_url="https://bugzilla.suse.com/1158445" source="BUGZILLA"/>
		<reference ref_id="1158637" ref_url="https://bugzilla.suse.com/1158637" source="BUGZILLA"/>
		<reference ref_id="1158638" ref_url="https://bugzilla.suse.com/1158638" source="BUGZILLA"/>
		<reference ref_id="1158639" ref_url="https://bugzilla.suse.com/1158639" source="BUGZILLA"/>
		<reference ref_id="1158640" ref_url="https://bugzilla.suse.com/1158640" source="BUGZILLA"/>
		<reference ref_id="1158641" ref_url="https://bugzilla.suse.com/1158641" source="BUGZILLA"/>
		<reference ref_id="1158643" ref_url="https://bugzilla.suse.com/1158643" source="BUGZILLA"/>
		<reference ref_id="1158644" ref_url="https://bugzilla.suse.com/1158644" source="BUGZILLA"/>
		<reference ref_id="1158645" ref_url="https://bugzilla.suse.com/1158645" source="BUGZILLA"/>
		<reference ref_id="1158646" ref_url="https://bugzilla.suse.com/1158646" source="BUGZILLA"/>
		<reference ref_id="1158647" ref_url="https://bugzilla.suse.com/1158647" source="BUGZILLA"/>
		<reference ref_id="1158649" ref_url="https://bugzilla.suse.com/1158649" source="BUGZILLA"/>
		<reference ref_id="1158651" ref_url="https://bugzilla.suse.com/1158651" source="BUGZILLA"/>
		<reference ref_id="1158652" ref_url="https://bugzilla.suse.com/1158652" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-0154" ref_url="https://www.suse.com/security/cve/CVE-2019-0154/" source="CVE"/>
		<reference ref_id="CVE-2019-14895" ref_url="https://www.suse.com/security/cve/CVE-2019-14895/" source="CVE"/>
		<reference ref_id="CVE-2019-14901" ref_url="https://www.suse.com/security/cve/CVE-2019-14901/" source="CVE"/>
		<reference ref_id="CVE-2019-15213" ref_url="https://www.suse.com/security/cve/CVE-2019-15213/" source="CVE"/>
		<reference ref_id="CVE-2019-15916" ref_url="https://www.suse.com/security/cve/CVE-2019-15916/" source="CVE"/>
		<reference ref_id="CVE-2019-16231" ref_url="https://www.suse.com/security/cve/CVE-2019-16231/" source="CVE"/>
		<reference ref_id="CVE-2019-17055" ref_url="https://www.suse.com/security/cve/CVE-2019-17055/" source="CVE"/>
		<reference ref_id="CVE-2019-18660" ref_url="https://www.suse.com/security/cve/CVE-2019-18660/" source="CVE"/>
		<reference ref_id="CVE-2019-18683" ref_url="https://www.suse.com/security/cve/CVE-2019-18683/" source="CVE"/>
		<reference ref_id="CVE-2019-18805" ref_url="https://www.suse.com/security/cve/CVE-2019-18805/" source="CVE"/>
		<reference ref_id="CVE-2019-18809" ref_url="https://www.suse.com/security/cve/CVE-2019-18809/" source="CVE"/>
		<reference ref_id="CVE-2019-19046" ref_url="https://www.suse.com/security/cve/CVE-2019-19046/" source="CVE"/>
		<reference ref_id="CVE-2019-19049" ref_url="https://www.suse.com/security/cve/CVE-2019-19049/" source="CVE"/>
		<reference ref_id="CVE-2019-19052" ref_url="https://www.suse.com/security/cve/CVE-2019-19052/" source="CVE"/>
		<reference ref_id="CVE-2019-19056" ref_url="https://www.suse.com/security/cve/CVE-2019-19056/" source="CVE"/>
		<reference ref_id="CVE-2019-19057" ref_url="https://www.suse.com/security/cve/CVE-2019-19057/" source="CVE"/>
		<reference ref_id="CVE-2019-19058" ref_url="https://www.suse.com/security/cve/CVE-2019-19058/" source="CVE"/>
		<reference ref_id="CVE-2019-19060" ref_url="https://www.suse.com/security/cve/CVE-2019-19060/" source="CVE"/>
		<reference ref_id="CVE-2019-19062" ref_url="https://www.suse.com/security/cve/CVE-2019-19062/" source="CVE"/>
		<reference ref_id="CVE-2019-19063" ref_url="https://www.suse.com/security/cve/CVE-2019-19063/" source="CVE"/>
		<reference ref_id="CVE-2019-19065" ref_url="https://www.suse.com/security/cve/CVE-2019-19065/" source="CVE"/>
		<reference ref_id="CVE-2019-19067" ref_url="https://www.suse.com/security/cve/CVE-2019-19067/" source="CVE"/>
		<reference ref_id="CVE-2019-19068" ref_url="https://www.suse.com/security/cve/CVE-2019-19068/" source="CVE"/>
		<reference ref_id="CVE-2019-19073" ref_url="https://www.suse.com/security/cve/CVE-2019-19073/" source="CVE"/>
		<reference ref_id="CVE-2019-19074" ref_url="https://www.suse.com/security/cve/CVE-2019-19074/" source="CVE"/>
		<reference ref_id="CVE-2019-19075" ref_url="https://www.suse.com/security/cve/CVE-2019-19075/" source="CVE"/>
		<reference ref_id="CVE-2019-19077" ref_url="https://www.suse.com/security/cve/CVE-2019-19077/" source="CVE"/>
		<reference ref_id="CVE-2019-19078" ref_url="https://www.suse.com/security/cve/CVE-2019-19078/" source="CVE"/>
		<reference ref_id="CVE-2019-19080" ref_url="https://www.suse.com/security/cve/CVE-2019-19080/" source="CVE"/>
		<reference ref_id="CVE-2019-19081" ref_url="https://www.suse.com/security/cve/CVE-2019-19081/" source="CVE"/>
		<reference ref_id="CVE-2019-19082" ref_url="https://www.suse.com/security/cve/CVE-2019-19082/" source="CVE"/>
		<reference ref_id="CVE-2019-19083" ref_url="https://www.suse.com/security/cve/CVE-2019-19083/" source="CVE"/>
		<reference ref_id="CVE-2019-19227" ref_url="https://www.suse.com/security/cve/CVE-2019-19227/" source="CVE"/>
		<reference ref_id="CVE-2019-19524" ref_url="https://www.suse.com/security/cve/CVE-2019-19524/" source="CVE"/>
		<reference ref_id="CVE-2019-19525" ref_url="https://www.suse.com/security/cve/CVE-2019-19525/" source="CVE"/>
		<reference ref_id="CVE-2019-19528" ref_url="https://www.suse.com/security/cve/CVE-2019-19528/" source="CVE"/>
		<reference ref_id="CVE-2019-19529" ref_url="https://www.suse.com/security/cve/CVE-2019-19529/" source="CVE"/>
		<reference ref_id="CVE-2019-19530" ref_url="https://www.suse.com/security/cve/CVE-2019-19530/" source="CVE"/>
		<reference ref_id="CVE-2019-19531" ref_url="https://www.suse.com/security/cve/CVE-2019-19531/" source="CVE"/>
		<reference ref_id="CVE-2019-19534" ref_url="https://www.suse.com/security/cve/CVE-2019-19534/" source="CVE"/>
		<reference ref_id="CVE-2019-19536" ref_url="https://www.suse.com/security/cve/CVE-2019-19536/" source="CVE"/>
		<reference ref_id="CVE-2019-19543" ref_url="https://www.suse.com/security/cve/CVE-2019-19543/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3372-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2019-15213: An issue was discovered in the Linux kernel, there was a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver (bnc#1146544).
- CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).
- CVE-2019-19543: There was a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c (bnc#1158427).
- CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver (bnc#1158417).
- CVE-2019-19530: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver (bnc#1158410).
- CVE-2019-19536: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver (bnc#1158394).
- CVE-2019-19524: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver (bnc#1158413).
- CVE-2019-19528: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (bnc#1158407).
- CVE-2019-19534: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver (bnc#1158398).
- CVE-2019-19529: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver (bnc#1158381).
- CVE-2019-14901: A heap overflow flaw was found in the Linux kernel in Marvell WiFi chip driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system (bnc#1157042).
- CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could have allowed the remote device to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1157158).
- CVE-2019-18660: The Linux kernel on powerpc allowed Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c (bnc#1157038).
- CVE-2019-18683: An issue was discovered in drivers/media/platform/vivid in the Linux kernel. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free (bnc#1155897).
- CVE-2019-18809: A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1156258).
- CVE-2019-19046: A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure (bnc#1157304).
- CVE-2019-19078: A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157032).
- CVE-2019-19062: A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures (bnc#1157333).
- CVE-2019-19057: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures (bnc#1157197).
- CVE-2019-19056: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures (bnc#1157197).
- CVE-2019-19068: A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157307).
- CVE-2019-19063: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157298).
- CVE-2019-19227: In the AppleTalk subsystem in the Linux kernel there was a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client (bnc#1157678).
- CVE-2019-19081: A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157045).
- CVE-2019-19080: Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157044).
- CVE-2019-19065: A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures (bnc#1157191).
- CVE-2019-19077: A memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering copy to udata failures (bnc#1157171).
- CVE-2019-19052: A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157324).
- CVE-2019-19067: Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures (bsc#1157180).
- CVE-2019-19060: A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157178).
- CVE-2019-19049: A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering of_fdt_unflatten_tree() failures (bsc#1157173).
- CVE-2019-19075: A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering ca8210_get_platform_data() failures (bnc#1157162).
- CVE-2019-19058: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures (bnc#1157145).
- CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157143).
- CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function (bnc#1157070).
- CVE-2019-19083: Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel allowed attackers to cause a denial of service (memory consumption). This affects the dce112_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, the dce100_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, the dcn20_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c, the dce120_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, and the dce80_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce80/dce80_resource.c (bnc#1157049).
- CVE-2019-19082: Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel allowed attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, the dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, and the dce112_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c (bnc#1157046).
- CVE-2019-15916: An issue was discovered in the Linux kernel There was a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service (bnc#1149448).
- CVE-2019-0154: Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1135966).
- CVE-2019-16231: drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150466).
- CVE-2019-18805: An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel There was a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact (bnc#1156187).
- CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket (bnc#1152782).


The following non-security bugs were fixed:

- bnxt_en: Update firmware interface spec. to 1.10.0.47 (bsc#1157115)
- ACPI / LPSS: Exclude I2C busses shared with PUNIT from pmc_atom_d3_mask (bsc#1051510).
- ACPI / SBS: Fix rare oops when removing modules (bsc#1051510).
- ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug bridge (bsc#1111666).
- ACPICA: Never run _REG on system_memory and system_IO (bsc#1051510).
- ACPICA: Use %d for signed int print formatting instead of %u (bsc#1051510).
- ALSA: 6fire: Drop the dead code (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (git-fixes).
- ALSA: cs4236: fix error return comparison of an unsigned integer (git-fixes).
- ALSA: firewire-motu: Correct a typo in the clock proc string (git-fixes).
- ALSA: hda - Add mute led support for HP ProBook 645 G4 (git-fixes).
- ALSA: hda - Fix pending unsol events at shutdown (git-fixes).
- ALSA: hda/ca0132 - Fix possible workqueue stall (bsc#1155836).
- ALSA: hda/hdmi - Clear codec-&gt;relaxed_resume flag at unbinding (git-fixes).
- ALSA: hda/intel: add CometLake PCI IDs (bsc#1156729).
- ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC (git-fixes).
- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (git-fixes).
- ALSA: hda/realtek - Move some alc236 pintbls to fallback table (git-fixes).
- ALSA: hda/realtek - Move some alc256 pintbls to fallback table (git-fixes).
- ALSA: hda: Add Cometlake-S PCI ID (git-fixes).
- ALSA: hda: Fix racy display power access (bsc#1156928).
- ALSA: hda: hdmi - fix port numbering for ICL and TGL platforms (git-fixes).
- ALSA: hda: hdmi - remove redundant code comments (git-fixes).
- ALSA: i2c/cs8427: Fix int to char conversion (bsc#1051510).
- ALSA: intel8x0m: Register irq handler after register initializations (bsc#1051510).
- ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed() (git-fixes).
- ALSA: pcm: Yet another missing check of non-cached buffer type (bsc#1111666).
- ALSA: pcm: signedness bug in snd_pcm_plug_alloc() (bsc#1051510).
- ALSA: seq: Do error checks at creating system ports (bsc#1051510).
- ALSA: timer: Fix incorrectly assigned timer instance (git-fixes).
- ALSA: usb-audio: Add skip_validation option (git-fixes).
- ALSA: usb-audio: Fix Focusrite Scarlett 6i6 gen1 - input handling (git-fixes).
- ALSA: usb-audio: Fix NULL dereference at parsing BADD (git-fixes).
- ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() (git-fixes).
- ALSA: usb-audio: Fix incorrect size check for processing/extension units (git-fixes).
- ALSA: usb-audio: Fix missing error check at mixer resolution test (git-fixes).
- ALSA: usb-audio: not submit urb for stopped endpoint (git-fixes).
- ALSA: usb-audio: sound: usb: usb true/false for bool return type (git-fixes).
- ASoC: Intel: hdac_hdmi: Limit sampling rates at dai creation (bsc#1051510).
- ASoC: davinci-mcasp: Handle return value of devm_kasprintf (stable 4.14.y).
- ASoC: davinci: Kill BUG_ON() usage (stable 4.14.y).
- ASoC: dpcm: Properly initialise hw-&gt;rate_max (bsc#1051510).
- ASoC: kirkwood: fix external clock probe defer (git-fixes).
- ASoC: msm8916-wcd-analog: Fix RX1 selection in RDAC2 MUX (git-fixes).
- ASoC: sgtl5000: avoid division by zero if lo_vag is zero (bsc#1051510).
- ASoC: tegra_sgtl5000: fix device_node refcounting (bsc#1051510).
- ASoC: tlv320aic31xx: Handle inverted BCLK in non-DSP modes (stable 4.14.y).
- ASoC: tlv320dac31xx: mark expected switch fall-through (stable 4.14.y).
- Bluetooth: Fix invalid-free in bcsp_close() (git-fixes).
- Bluetooth: Fix memory leak in hci_connect_le_scan (bsc#1051510).
- Bluetooth: L2CAP: Detect if remote is not able to use the whole MPS (bsc#1051510).
- Bluetooth: btusb: fix PM leak in error case of setup (bsc#1051510).
- Bluetooth: delete a stray unlock (bsc#1051510).
- Bluetooth: hci_core: fix init for HCI_USER_CHANNEL (bsc#1051510).
- Btrfs: fix log context list corruption after rename exchange operation (bsc#1156494).
- CIFS: Fix SMB2 oplock break processing (bsc#1144333, bsc#1154355).
- CIFS: Fix oplock handling for SMB 2.1+ protocols (bsc#1144333, bsc#1154355).
- CIFS: Fix retry mid list corruption on reconnects (bsc#1144333, bsc#1154355).
- CIFS: Fix use after free of file info structures (bsc#1144333, bsc#1154355).
- CIFS: Force reval dentry if LOOKUP_REVAL flag is set (bsc#1144333, bsc#1154355).
- CIFS: Force revalidate inode when dentry is stale (bsc#1144333, bsc#1154355).
- CIFS: Gracefully handle QueryInfo errors during open (bsc#1144333, bsc#1154355).
- CIFS: avoid using MID 0xFFFF (bsc#1144333, bsc#1154355).
- CIFS: fix max ea value size (bsc#1144333, bsc#1154355).
- Documentation: debugfs: Document debugfs helper for unsigned long values (git-fixes).
- Documentation: x86: convert protection-keys.txt to reST (bsc#1078248).
- EDAC/ghes: Fix Use after free in ghes_edac remove path (bsc#1114279).
- EDAC/ghes: Fix locking and memory barrier issues (bsc#1114279). EDAC/ghes: Do not warn when incrementing refcount on 0 (bsc#1114279).
- HID: Add ASUS T100CHI keyboard dock battery quirks (bsc#1051510).
- HID: Add quirk for Microsoft PIXART OEM mouse (bsc#1051510).
- HID: Fix assumption that devices have inputs (git-fixes).
- HID: asus: Add T100CHI bluetooth keyboard dock special keys mapping (bsc#1051510).
- HID: wacom: generic: Treat serial number and related fields as unsigned (git-fixes).
- IB/mlx5: Free mpi in mp_slave mode (bsc#1103991).
- IB/mlx5: Support MLX5_CMD_OP_QUERY_LAG as a DEVX general command (bsc#1103991).
- Input: ff-memless - kill timer in destroy() (bsc#1051510).
- Input: silead - try firmware reload after unsuccessful resume (bsc#1051510).
- Input: st1232 - set INPUT_PROP_DIRECT property (bsc#1051510).
- Input: synaptics-rmi4 - clear IRQ enables for F54 (bsc#1051510).
- Input: synaptics-rmi4 - destroy F54 poller workqueue when removing (bsc#1051510).
- Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver (bsc#1051510).
- Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) (bsc#1051510).
- Input: synaptics-rmi4 - fix video buffer size (git-fixes).
- KVM: SVM: Guard against DEACTIVATE when performing WBINVD/DF_FLUSH (bsc#1114279).
- KVM: SVM: Serialize access to the SEV ASID bitmap (bsc#1114279).
- KVM: VMX: Consider PID.PIR to determine if vCPU has pending interrupts (bsc#1158064).
- KVM: VMX: Fix conditions for guest IA32_XSS support (bsc#1158065).
- KVM: s390: fix __insn32_query() inline assembly (git-fixes).
- KVM: s390: vsie: Do not shadow CRYCB when no AP and no keys (git-fixes).
- KVM: s390: vsie: Return correct values for Invalid CRYCB format (git-fixes).
- KVM: x86/mmu: Take slots_lock when using kvm_mmu_zap_all_fast() (bsc#1158067).
- KVM: x86: Introduce vcpu-&gt;arch.xsaves_enabled (bsc#1158066).
- NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error (git-fixes).
- PCI/ACPI: Correct error message for ASPM disabling (bsc#1051510).
- PCI/MSI: Fix incorrect MSI-X masking on resume (bsc#1051510).
- PCI/PM: Clear PCIe PME Status even for legacy power management (bsc#1111666).
- PCI/PME: Fix possible use-after-free on remove (git-fixes).
- PCI/PTM: Remove spurious 'd' from granularity message (bsc#1051510).
- PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3 (bsc#1051510).
- PCI: Fix Intel ACS quirk UPDCR register address (bsc#1051510).
- PCI: dwc: Fix find_next_bit() usage (bsc#1051510).
- PCI: pciehp: Do not disable interrupt twice on suspend (bsc#1111666).
- PCI: rcar: Fix missing MACCTLR register setting in initialization sequence (bsc#1051510).
- PCI: sysfs: Ignore lockdep for remove attribute (git-fixes).
- PCI: tegra: Enable Relaxed Ordering only for Tegra20 and Tegra30 (git-fixes).
- PM / devfreq: Check NULL governor in available_governors_show (git-fixes).
- PM / devfreq: Lock devfreq in trans_stat_show (git-fixes).
- PM / devfreq: exynos-bus: Correct clock enable sequence (bsc#1051510).
- PM / devfreq: passive: Use non-devm notifiers (bsc#1051510).
- PM / devfreq: passive: fix compiler warning (bsc#1051510).
- PM / hibernate: Check the success of generating md5 digest before hibernation (bsc#1051510).
- RDMA/bnxt_re: Fix stat push into dma buffer on gen p5 devices (bsc#1157115)
- RDMA/efa: Add Amazon EFA driver (jsc#SLE-4805)
- RDMA/efa: Clear the admin command buffer prior to its submission (git-fixes) Patch was already picked through Amazon driver repo but was not marked with a Git-commit tag
- RDMA/hns: Fix comparison of unsigned long variable 'end' with less than zero (bsc#1104427 bsc#1137236).
- RDMA/hns: Fix wrong assignment of qp_access_flags (bsc#1104427 ).
- RDMA/restrack: Track driver QP types in resource tracker (jsc#SLE-4805)
- README.BRANCH: Removing myself from the maintainer list
- UAS: Revert commit 3ae62a42090f ('UAS: fix alignment of scatter/gather segments').
- USB: chaoskey: fix error case of a timeout (git-fixes).
- USB: gadget: Reject endpoints with 0 maxpacket value (bsc#1051510).
- USB: ldusb: fix control-message timeout (bsc#1051510).
- USB: ldusb: fix ring-buffer locking (bsc#1051510).
- USB: misc: appledisplay: fix backlight update_status return code (bsc#1051510).
- USB: serial: mos7720: fix remote wakeup (git-fixes).
- USB: serial: mos7840: add USB ID to support Moxa UPort 2210 (bsc#1051510).
- USB: serial: mos7840: fix remote wakeup (git-fixes).
- USB: serial: option: add support for DW5821e with eSIM support (bsc#1051510).
- USB: serial: option: add support for Foxconn T77W968 LTE modules (bsc#1051510).
- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: serial: whiteheat: fix potential slab corruption (bsc#1051510).
- USBIP: add config dependency for SGL_ALLOC (git-fixes).
- acpi/nfit, device-dax: Identify differentiated memory with a unique numa-node (bsc#1158071).
- appledisplay: fix error handling in the scheduled work (git-fixes).
- arm64: Update config files. (bsc#1156466) Enable HW_RANDOM_OMAP driver and mark driver omap-rng as supported.
- ata: ep93xx: Use proper enums for directions (bsc#1051510).
- ath10k: Correct error handling of dma_map_single() (bsc#1111666).
- ath10k: allocate small size dma memory in ath10k_pci_diag_write_mem (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3 (bsc#1111666).
- ath10k: avoid possible memory access violation (bsc#1111666).
- ath10k: fix kernel panic by moving pci flush after napi_disable (bsc#1051510).
- ath10k: fix vdev-start timeout on error (bsc#1051510).
- ath10k: limit available channels via DT ieee80211-freq-limit (bsc#1051510).
- ath10k: skip resetting rx filter for WCN3990 (bsc#1111666).
- ath10k: wmi: disable softirq's while calling ieee80211_rx (bsc#1051510).
- ath9k: Fix a locking bug in ath9k_add_interface() (bsc#1051510).
- ath9k: add back support for using active monitor interfaces for tx99 (bsc#1051510).
- ath9k: fix reporting calculated new FFT upper max (bsc#1051510).
- ath9k: fix tx99 with monitor mode interface (bsc#1051510).
- ath9k_hw: fix uninitialized variable data (bsc#1051510).
- ax88172a: fix information leak on short answers (bsc#1051510).
- backlight: lm3639: Unconditionally call led_classdev_unregister (bsc#1051510).
- bnxt_en: Increase timeout for HWRM_DBG_COREDUMP_XX commands (bsc#1104745).
- bnxt_en: Update firmware interface spec. to 1.10.0.89 (bsc#1157115)
- bnxt_en: Update firmware interface to 1.10.0.69 (bsc#1157115)
- bpf: Fix use after free in subprog's jited symbol removal (bsc#1109837).
- bpf: fix BTF limits (bsc#1109837).
- bpf: fix BTF verification of enums (bsc#1109837).
- brcmfmac: fix full timeout waiting for action frame on-channel tx (bsc#1051510).
- brcmfmac: fix wrong strnchr usage (bsc#1111666).
- brcmfmac: increase buffer for obtaining firmware capabilities (bsc#1111666).
- brcmfmac: reduce timeout for action frame scan (bsc#1051510).
- brcmsmac: AP mode: update beacon when TIM changes (bsc#1051510).
- brcmsmac: Use kvmalloc() for ucode allocations (bsc#1111666).
- brcmsmac: never log 'tid x is not agg'able' by default (bsc#1051510).
- can: c_can: c_can_poll(): only read status register after status IRQ (git-fixes).
- can: dev: call netif_carrier_off() in register_candev() (bsc#1051510).
- can: mcba_usb: fix use-after-free on disconnect (git-fixes).
- can: peak_usb: fix a potential out-of-sync while decoding packets (git-fixes).
- can: peak_usb: fix slab info leak (git-fixes).
- can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue beyond skb_queue_len_max (git-fixes).
- can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak (git-fixes).
- can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb mem leak (git-fixes).
- can: usb_8dev: fix use-after-free on disconnect (git-fixes).
- ceph: add missing check in d_revalidate snapdir handling (bsc#1157183).
- ceph: do not try to handle hashed dentries in non-O_CREAT atomic_open (bsc#1157184).
- ceph: fix use-after-free in __ceph_remove_cap() (bsc#1154058).
- ceph: just skip unrecognized info in ceph_reply_info_extra (bsc#1157182).
- cfg80211: Avoid regulatory restore when COUNTRY_IE_IGNORE is set (bsc#1051510).
- cfg80211: Prevent regulatory restore during STA disconnect in concurrent interfaces (bsc#1051510).
- cfg80211: call disconnect_wk when AP stops (bsc#1051510).
- cfg80211: validate wmm rule when setting (bsc#1111666).
- cgroup,writeback: do not switch wbs immediately on dead wbs if the memcg is dead (bsc#1158645).
- cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (bsc#1144333, bsc#1154355).
- cifs: Fix missed free operations (bsc#1144333, bsc#1154355).
- cifs: Use kzfree() to zero out the password (bsc#1144333, bsc#1154355).
- cifs: add a helper to find an existing readable handle to a file (bsc#1144333, bsc#1154355).
- cifs: create a helper to find a writeable handle by path name (bsc#1144333, bsc#1154355).
- cifs: move cifsFileInfo_put logic into a work-queue (bsc#1144333, bsc#1154355).
- cifs: prepare SMB2_Flush to be usable in compounds (bsc#1144333, bsc#1154355).
- cifs: set domainName when a domain-key is used in multiuser (bsc#1144333, bsc#1154355).
- cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (bsc#1144333, bsc#1154355).
- cifs: use existing handle for compound_op(OP_SET_INFO) when possible (bsc#1144333, bsc#1154355).
- clk: at91: avoid sleeping early (git-fixes).
- clk: pxa: fix one of the pxa RTC clocks (bsc#1051510).
- clk: samsung: Use clk_hw API for calling clk framework from clk notifiers (bsc#1051510).
- clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume (bsc#1051510).
- clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume (git-fixes).
- clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18 (git-fixes).
- clocksource/drivers/sh_cmt: Fix clocksource width for 32-bit machines (bsc#1051510).
- clocksource/drivers/sh_cmt: Fixup for 64-bit machines (bsc#1051510).
- compat_ioctl: handle SIOCOUTQNSD (bsc#1051510).
- component: fix loop condition to call unbind() if bind() fails (bsc#1051510).
- cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init() (bsc#1051510).
- cpufreq: Skip cpufreq resume if it's not suspended (bsc#1051510).
- cpufreq: intel_pstate: Register when ACPI PCCH is present (bsc#1051510).
- cpufreq: powernv: fix stack bloat and hard limit on number of CPUs (bsc#1051510).
- cpufreq: ti-cpufreq: add missing of_node_put() (bsc#1051510).
- cpupower : Fix cpupower working when cpu0 is offline (bsc#1051510).
- cpupower : frequency-set -r option misses the last cpu in related cpu list (bsc#1051510).
- cpupower: Fix coredump on VMWare (bsc#1051510).
- crypto: af_alg - cast ki_complete ternary op to int (bsc#1051510).
- crypto: crypto4xx - fix double-free in crypto4xx_destroy_sdr (bsc#1051510).
- crypto: ecdh - fix big endian bug in ECC library (bsc#1051510).
- crypto: fix a memory leak in rsa-kcs1pad's encryption mode (bsc#1051510).
- crypto: geode-aes - switch to skcipher for cbc(aes) fallback (bsc#1051510).
- crypto: mxs-dcp - Fix AES issues (bsc#1051510).
- crypto: mxs-dcp - Fix SHA null hashes and output length (bsc#1051510).
- crypto: mxs-dcp - make symbols 'sha1_null_hash' and 'sha256_null_hash' static (bsc#1051510).
- crypto: s5p-sss: Fix Fix argument list alignment (bsc#1051510).
- crypto: tgr192 - remove unneeded semicolon (bsc#1051510).
- cw1200: Fix a signedness bug in cw1200_load_firmware() (bsc#1051510).
- cxgb4: fix panic when attaching to ULD fail (networking-stable-19_11_05).
- cxgb4: request the TX CIDX updates to status page (bsc#1127354 bsc#1127371).
- dccp: do not leak jiffies on the wire (networking-stable-19_11_05).
- dlm: do not leak kernel pointer to userspace (bsc#1051510).
- dlm: fix invalid free (bsc#1051510).
- dmaengine: bcm2835: Print error in case setting DMA mask fails (bsc#1051510).
- dmaengine: dma-jz4780: Do not depend on MACH_JZ4780 (bsc#1051510).
- dmaengine: dma-jz4780: Further residue status fix (bsc#1051510).
- dmaengine: ep93xx: Return proper enum in ep93xx_dma_chan_direction (bsc#1051510).
- dmaengine: imx-sdma: fix size check for sdma script_number (bsc#1051510).
- dmaengine: imx-sdma: fix use-after-free on probe error path (bsc#1051510).
- dmaengine: rcar-dmac: set scatter/gather max segment size (bsc#1051510).
- dmaengine: timb_dma: Use proper enum in td_prep_slave_sg (bsc#1051510).
- docs: move protection-keys.rst to the core-api book (bsc#1078248).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported (bsc#1113956)
- drm/amdgpu/powerplay/vega10: allow undervolting in p7 (bsc#1111666).
- drm/amdgpu: fix bad DMA from INTERRUPT_CNTL2 (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/etnaviv: fix dumping of iommuv2 (bsc#1113722)
- drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)
- drm/i915/cmdparser: Ignore Length operands during command matching (bsc#1135967)
- drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)
- drm/i915/gtt: Add read only pages to gen8_pte_encode (bsc#1135967)
- drm/i915/gtt: Disable read-only support under GVT (bsc#1135967)
- drm/i915/gtt: Read-only pages for insert_entries on bdw (bsc#1135967)
- drm/i915/gvt: fix dropping obj reference twice (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no output (bsc#1111666).
- drm/i915/pmu: 'Frequency' is reported as accumulated cycles (bsc#1112178)
- drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)
- drm/i915: Add support for mandatory cmdparsing (bsc#1135967)
- drm/i915: Allow parsing of unsized batches (bsc#1135967)
- drm/i915: Disable Secure Batches for gen6+
- drm/i915: Do not dereference request if it may have been retired when (bsc#1142635)
- drm/i915: Fix and improve MCR selection logic (bsc#1112178)
- drm/i915: Lock the engine while dumping the active request (bsc#1142635)
- drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)
- drm/i915: Prevent writing into a read-only object via a GGTT mmap (bsc#1135967)
- drm/i915: Reacquire priolist cache after dropping the engine lock (bsc#1129770)
- drm/i915: Remove Master tables from cmdparser
- drm/i915: Rename gen7 cmdparser tables (bsc#1135967)
- drm/i915: Skip modeset for cdclk changes if possible (bsc#1156928).
- drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (bsc#1135967)
- drm/msm/dpu: handle failures while initializing displays (bsc#1111666).
- drm/msm: fix memleak on release (bsc#1111666).
- drm/omap: fix max fclk divider for omap36xx (bsc#1113722)
- drm/radeon: fix bad DMA from INTERRUPT_CNTL2 (git-fixes).
- drm/radeon: fix si_enable_smc_cac() failed issue (bsc#1113722)
- drm: fix module name in edid_firmware log message (bsc#1113956)
- e1000e: Drop unnecessary __E1000_DOWN bit twiddling (bsc#1158049).
- e1000e: Use dev_get_drvdata where possible (bsc#1158049).
- e1000e: Use rtnl_lock to prevent race conditions between net and pci/pm (bsc#1158049).
- ecryptfs_lookup_interpose(): lower_dentry-&gt;d_inode is not stable (bsc#1158646).
- ecryptfs_lookup_interpose(): lower_dentry-&gt;d_parent is not stable either (bsc#1158647).
- ext4: fix punch hole for inline_data file systems (bsc#1158640).
- ext4: update direct I/O read lock pattern for IOCB_NOWAIT (bsc#1158639).
- extcon: cht-wc: Return from default case to avoid warnings (bsc#1051510).
- fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper() (bsc#1051510).
- fbdev: sbuslib: use checked version of put_user() (bsc#1051510).
- fix SCTP regression (bsc#1158082)
- ftrace: Introduce PERMANENT ftrace_ops flag (bsc#1120853).
- gpio: mpc8xxx: Do not overwrite default irq_set_type callback (bsc#1051510).
- gpio: syscon: Fix possible NULL ptr usage (bsc#1051510).
- gpiolib: acpi: Add Terra Pad 1061 to the run_edge_events_on_boot_blacklist (bsc#1051510).
- gsmi: Fix bug in append_to_eventlog sysfs handler (bsc#1051510).
- hwmon: (ina3221) Fix INA3221_CONFIG_MODE macros (bsc#1051510).
- hwmon: (pwm-fan) Silence error on probe deferral (bsc#1051510).
- hwrng: omap - Fix RNG wait loop timeout (bsc#1051510).
- hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled (bsc#1051510).
- hypfs: Fix error number left in struct pointer member (bsc#1051510).
- i2c: of: Try to find an I2C adapter matching the parent (bsc#1129770)
- i40e: enable X710 support (bsc#1151067).
- ibmvnic: Bound waits for device queries (bsc#1155689 ltc#182047).
- ibmvnic: Fix completion structure initialization (bsc#1155689 ltc#182047).
- ibmvnic: Serialize device queries (bsc#1155689 ltc#182047).
- ibmvnic: Terminate waiting device threads after loss of service (bsc#1155689 ltc#182047).
- ice: fix potential infinite loop because loop counter being too small (bsc#1118661).
- iio: adc: max9611: explicitly cast gain_selectors (bsc#1051510).
- iio: adc: stm32-adc: fix stopping dma (git-fixes).
- iio: dac: mcp4922: fix error handling in mcp4922_write_raw (bsc#1051510).
- iio: imu: adis16480: assign bias value only if operation succeeded (git-fixes).
- iio: imu: adis16480: make sure provided frequency is positive (git-fixes).
- iio: imu: adis: assign read val in debugfs hook only if op successful (git-fixes).
- iio: imu: adis: assign value only if return code zero in read funcs (git-fixes).
- include/linux/bitrev.h: fix constant bitrev (bsc#1114279).
- inet: stop leaking jiffies on the wire (networking-stable-19_11_05).
- intel_th: Fix a double put_device() in error path (git-fixes).
- iomap: Fix pipe page leakage during splicing (bsc#1158651).
- iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros (bsc#1158063).
- ipmi:dmi: Ignore IPMI SMBIOS entries with a zero base address (bsc#1051510).
- ipv4: Return -ENETUNREACH if we can't create route but saddr is valid (networking-stable-19_10_24).
- irqdomain: Add the missing assignment of domain-&gt;fwnode for named fwnode (bsc#1111666).
- iwlwifi: api: annotate compressed BA notif array sizes (bsc#1051510).
- iwlwifi: check kasprintf() return value (bsc#1051510).
- iwlwifi: do not panic in error path on non-msix systems (bsc#1155692).
- iwlwifi: drop packets with bad status in CD (bsc#1111666).
- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- iwlwifi: fw: do not send GEO_TX_POWER_LIMIT command to FW version 36 (bsc#1111666).
- iwlwifi: mvm: avoid sending too many BARs (bsc#1051510).
- iwlwifi: mvm: do not send keys when entering D3 (bsc#1051510).
- iwlwifi: mvm: use correct FIFO length (bsc#1111666).
- iwlwifi: pcie: fit reclaim msg to MAX_MSG_LEN (bsc#1111666).
- iwlwifi: pcie: read correct prph address for newer devices (bsc#1111666).
- ixgbe: fix double clean of Tx descriptors with xdp (bsc#1113994 ).
- ixgbevf: Fix secpath usage for IPsec Tx offload (bsc#1113994 ).
- kABI fixup alloc_dax_region (bsc#1158071).
- kABI workaround for ath10k hw_filter_reset_required field (bsc#1111666).
- kABI workaround for ath10k last_wmi_vdev_start_status field (bsc#1051510).
- kABI workaround for drm_vma_offset_node readonly field addition (bsc#1135967)
- kABI workaround for iwlwifi iwl_rx_cmd_buffer change (bsc#1111666).
- kABI workaround for struct mwifiex_power_cfg change (bsc#1051510).
- kABI: Fix for 'KVM: x86: Introduce vcpu-&gt;arch.xsaves_enabled' (bsc#1158066).
- kabi protect enum RDMA_DRIVER_EFA (jsc#SLE-4805)
- kabi: s390: struct subchannel (git-fixes).
- lib/scatterlist: Fix chaining support in sgl_alloc_order() (git-fixes).
- lib/scatterlist: Introduce sgl_alloc() and sgl_free() (git-fixes).
- libnvdimm: Export the target_node attribute for regions and namespaces (bsc#1158071).
- liquidio: fix race condition in instruction completion processing (bsc#1051510).
- livepatch: Allow to distinguish different version of system state changes (bsc#1071995).
- livepatch: Basic API to track system state changes (bsc#1071995 ).
- livepatch: Keep replaced patches until post_patch callback is called (bsc#1071995).
- livepatch: Selftests of the API for tracking system state changes (bsc#1071995).
- loop: add ioctl for changing logical block size (bsc#1108043).
- loop: fix no-unmap write-zeroes request behavior (bsc#1158637).
- lpfc: size cpu map by last cpu id set (bsc#1157160).
- mISDN: Fix type of switch control variable in ctrl_teimanager (bsc#1051510).
- mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED (bsc#1051510).
- mac80211: minstrel: fix CCK rate group streams value (bsc#1051510).
- mac80211: minstrel: fix sampling/reporting of CCK rates in HT mode (bsc#1051510).
- macvlan: schedule bc_work even if error (bsc#1051510).
- mailbox: reset txdone_method TXDONE_BY_POLL if client knows_txdone (git-fixes).
- media: au0828: Fix incorrect error messages (bsc#1051510).
- media: bdisp: fix memleak on release (git-fixes).
- media: cxusb: detect cxusb_ctrl_msg error in query (bsc#1051510).
- media: davinci: Fix implicit enum conversion warning (bsc#1051510).
- media: exynos4-is: Fix recursive locking in isp_video_release() (git-fixes).
- media: fix: media: pci: meye: validate offset to avoid arbitrary access (bsc#1051510).
- media: flexcop-usb: ensure -EIO is returned on error condition (git-fixes).
- media: imon: invalid dereference in imon_touch_event (bsc#1051510).
- media: isif: fix a NULL pointer dereference bug (bsc#1051510).
- media: pci: ivtv: Fix a sleep-in-atomic-context bug in ivtv_yuv_init() (bsc#1051510).
- media: pxa_camera: Fix check for pdev-&gt;dev.of_node (bsc#1051510).
- media: radio: wl1273: fix interrupt masking on release (git-fixes).
- media: ti-vpe: vpe: Fix Motion Vector vpdma stride (git-fixes).
- media: usbvision: Fix races among open, close, and disconnect (bsc#1051510).
- media: vim2m: Fix abort issue (git-fixes).
- media: vivid: Set vid_cap_streaming and vid_out_streaming to true (bsc#1051510).
- mei: fix modalias documentation (git-fixes).
- mei: samples: fix a signedness bug in amt_host_if_call() (bsc#1051510).
- mfd: intel-lpss: Add default I2C device properties for Gemini Lake (bsc#1051510).
- mfd: max8997: Enale irq-wakeup unconditionally (bsc#1051510).
- mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values (bsc#1051510).
- mfd: palmas: Assign the right powerhold mask for tps65917 (git-fixes).
- mfd: ti_am335x_tscadc: Keep ADC interface on if child is wakeup capable (bsc#1051510).
- mlx5: add parameter to disable enhanced IPoIB (bsc#1142095)
- mlxsw: spectrum_flower: Fail in case user specifies multiple mirror actions (bsc#1112374).
- mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d() (git fixes (mm/gup)).
- mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone (git fixes (mm/compaction)).
- mm/debug.c: PageAnon() is true for PageKsm() pages (git fixes (mm/debug)).
- mmc: core: fix wl1251 sdio quirks (git-fixes).
- mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of pandora_wl1251_init_card (git-fixes).
- mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail (bsc#1051510).
- mmc: sdhci-esdhc-imx: correct the fix of ERR004536 (git-fixes).
- mmc: sdhci-of-at91: fix quirk2 overwrite (git-fixes).
- mmc: sdio: fix wl1251 vendor id (git-fixes).
- mt7601u: fix bbp version check in mt7601u_wait_bbp_ready (bsc#1051510).
- mt76x0: init hw capabilities.
- mtd: nand: mtk: fix incorrect register setting order about ecc irq.
- mtd: spear_smi: Fix Write Burst mode (bsc#1051510).
- mtd: spi-nor: fix silent truncation in spi_nor_read() (bsc#1051510).
- mwifex: free rx_cmd skb in suspended state (bsc#1111666).
- mwifiex: Fix NL80211_TX_POWER_LIMITED (bsc#1051510).
- mwifiex: do no submit URB in suspended state (bsc#1111666).
- nbd: prevent memory leak (bsc#1158638).
- net/ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes).
- net/mlx4_core: Dynamically set guaranteed amount of counters per VF (networking-stable-19_11_05).
- net/mlx5: FWTrace, Reduce stack usage (bsc#1103990).
- net/mlx5e: Fix eswitch debug print of max fdb flow (bsc#1103990 ).
- net/mlx5e: Fix ethtool self test: link speed (bsc#1103990 ).
- net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget (networking-stable-19_11_05).
- net/mlx5e: Print a warning when LRO feature is dropped or not allowed (bsc#1103990).
- net/sched: cbs: Fix not adding cbs instance to list (bsc#1109837).
- net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate (bsc#1109837).
- net/smc: Fix error path in smc_init (git-fixes).
- net/smc: avoid fallback in case of non-blocking connect (git-fixes).
- net/smc: do not schedule tx_work in SMC_CLOSED state (git-fixes).
- net/smc: fix SMCD link group creation with VLAN id (git-fixes).
- net/smc: fix closing of fallback SMC sockets (git-fixes).
- net/smc: fix ethernet interface refcounting (git-fixes).
- net/smc: fix fastopen for non-blocking connect() (git-fixes).
- net/smc: fix refcount non-blocking connect() -part 2 (git-fixes).
- net/smc: fix refcounting for non-blocking connect() (git-fixes).
- net/smc: keep vlan_id for SMC-R in smc_listen_work() (git-fixes).
- net/smc: original socket family in inet_sock_diag (git-fixes).
- net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol() (networking-stable-19_11_05).
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (networking-stable-19_11_05).
- net: add skb_queue_empty_lockless() (networking-stable-19_11_05).
- net: annotate accesses to sk-&gt;sk_incoming_cpu (networking-stable-19_11_05).
- net: annotate lockless accesses to sk-&gt;sk_napi_id (networking-stable-19_11_05).
- net: avoid potential infinite loop in tc_ctl_action() (networking-stable-19_10_24).
- net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3 (networking-stable-19_10_24).
- net: bcmgenet: Set phydev-&gt;dev_flags only for internal PHYs (networking-stable-19_10_24).
- net: bcmgenet: reset 40nm EPHY on energy detect (networking-stable-19_11_05).
- net: dsa: b53: Do not clear existing mirrored port mask (networking-stable-19_11_05).
- net: dsa: bcm_sf2: Fix IMP setup for port different than 8 (networking-stable-19_11_05).
- net: dsa: fix switch tree list (networking-stable-19_11_05).
- net: ethernet: ftgmac100: Fix DMA coherency issue with SW checksum (networking-stable-19_11_05).
- net: fix sk_page_frag() recursion from memory reclaim (networking-stable-19_11_05).
- net: hisilicon: Fix ping latency when deal with high throughput (networking-stable-19_11_05).
- net: hns3: change GFP flag during lock period (bsc#1104353 ).
- net: hns3: do not query unsupported commands in debugfs (bsc#1104353).
- net: hns3: fix GFP flag error in hclge_mac_update_stats() (bsc#1126390).
- net: hns3: fix some reset handshake issue (bsc#1104353 ).
- net: hns3: prevent unnecessary MAC TNL interrupt (bsc#1104353 bsc#1134983).
- net: hns: Fix the stray netpoll locks causing deadlock in NAPI path (bsc#1104353).
- net: phy: bcm7xxx: define soft_reset for 40nm EPHY (bsc#1119113 ).
- net: phylink: Fix flow control resolution (bsc#1119113 ).
- net: sched: cbs: Avoid division by zero when calculating the port rate (bsc#1109837).
- net: sched: fix possible crash in tcf_action_destroy() (bsc#1109837).
- net: sched: fix reordering issues (bsc#1109837).
- net: sock_map, fix missing ulp check in sock hash case (bsc#1109837).
- net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow (networking-stable-19_10_24).
- net: use skb_queue_empty_lockless() in busy poll contexts (networking-stable-19_11_05).
- net: use skb_queue_empty_lockless() in poll() handlers (networking-stable-19_11_05).
- net: wireless: ti: remove local VENDOR_ID and DEVICE_ID definitions (git-fixes).
- net: wireless: ti: wl1251 use new SDIO_VENDOR_ID_TI_WL1251 definition (git-fixes).
- netns: fix GFP flags in rtnl_net_notifyid() (networking-stable-19_11_05).
- nfc: netlink: fix double device reference drop (git-fixes).
- nfc: port100: handle command failure cleanly (git-fixes).
- nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs (bsc#1109837).
- nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs (bsc#1109837).
- nl80211: Fix a GET_KEY reply attribute (bsc#1051510).
- nvme-tcp: support C2HData with SUCCESS flag (bsc#1157386).
- ocfs2: fix panic due to ocfs2_wq is null (bsc#1158644).
- ocfs2: fix passing zero to 'PTR_ERR' warning (bsc#1158649).
- openvswitch: fix flow command message size (git-fixes).
- padata: use smp_mb in padata_reorder to avoid orphaned padata jobs (git-fixes).
- perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp (bsc#1142924).
- phy: phy-twl4030-usb: fix denied runtime access (git-fixes).
- phylink: fix kernel-doc warnings (bsc#1111666).
- pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call (git-fixes).
- pinctrl: at91: do not use the same irqchip with multiple gpiochips (git-fixes).
- pinctrl: cherryview: Allocate IRQ chip dynamic (git-fixes).
- pinctrl: lewisburg: Update pin list according to v1.1v6 (bsc#1051510).
- pinctrl: lpc18xx: Use define directive for PIN_CONFIG_GPIO_PIN_INT (bsc#1051510).
- pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in S3C24xx wakeup controller init (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in S3C64xx wakeup controller init (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in init code (bsc#1051510).
- pinctrl: sunxi: Fix a memory leak in 'sunxi_pinctrl_build_state()' (bsc#1051510).
- pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD (bsc#1051510).
- power: reset: at91-poweroff: do not procede if at91_shdwc is allocated (bsc#1051510).
- power: supply: ab8500_fg: silence uninitialized variable warnings (bsc#1051510).
- power: supply: max14656: fix potential use-after-free (bsc#1051510).
- power: supply: twl4030_charger: disable eoc interrupt on linear charge (bsc#1051510).
- power: supply: twl4030_charger: fix charging current out-of-bounds (bsc#1051510).
- powerpc/64: Make meltdown reporting Book3S 64 specific (bsc#1091041).
- powerpc/book3s64/hash: Use secondary hash for bolted mapping if the primary is full (bsc#1157778 ltc#182520).
- powerpc/bpf: Fix tail call implementation (bsc#1157698).
- powerpc/pseries: Do not fail hash page table insert for bolted mapping (bsc#1157778 ltc#182520).
- powerpc/pseries: Do not opencode HPTE_V_BOLTED (bsc#1157778 ltc#182520).
- powerpc/pseries: address checkpatch warnings in dlpar_offline_cpu (bsc#1156700 ltc#182459).
- powerpc/pseries: safely roll back failed DLPAR cpu add (bsc#1156700 ltc#182459).
- powerpc/security/book3s64: Report L1TF status in sysfs (bsc#1091041).
- powerpc/security: Fix wrong message when RFI Flush is disable (bsc#1131107).
- powerpc/xive: Prevent page fault issues in the machine crash handler (bsc#1156882 ltc#182435).
- ppdev: fix PPGETTIME/PPSETTIME ioctls (bsc#1051510).
- printk: Export console_printk (bsc#1071995).
- pwm: bcm-iproc: Prevent unloading the driver module while in use (git-fixes).
- pwm: lpss: Only set update bit if we are actually changing the settings (bsc#1051510).
- qxl: fix null-pointer crash during suspend (bsc#1111666).
- r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2 (networking-stable-19_11_05).
- regulator: ab8500: Remove AB8505 USB regulator (bsc#1051510).
- regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id (bsc#1051510).
- remoteproc: Check for NULL firmwares in sysfs interface (git-fixes).
- reset: Fix potential use-after-free in __of_reset_control_get() (bsc#1051510).
- reset: fix of_reset_simple_xlate kerneldoc comment (bsc#1051510).
- reset: fix reset_control_get_exclusive kerneldoc comment (bsc#1051510).
- rpm/kernel-binary.spec.in: add COMPRESS_VMLINUX (bnc#1155921) Let COMPRESS_VMLINUX determine the compression used for vmlinux. By default (historically), it is gz.
- rpm/kernel-source.spec.in: Fix dependency of kernel-devel (bsc#1154043)
- rt2800: remove errornous duplicate condition (git-fixes).
- rtl8187: Fix warning generated when strncpy() destination length matches the sixe argument (bsc#1051510).
- rtlwifi: Remove unnecessary NULL check in rtl_regd_init (bsc#1051510).
- rtlwifi: btcoex: Use proper enumerated types for Wi-Fi only interface (bsc#1111666).
- rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing enable interrupt flag (bsc#1051510).
- s390/bpf: fix lcgr instruction encoding (bsc#1051510).
- s390/bpf: use 32-bit index for tail calls (bsc#1051510).
- s390/cio: avoid calling strlen on null pointer (bsc#1051510).
- s390/cio: exclude subchannels with no parent from pseudo check (bsc#1051510).
- s390/cio: fix virtio-ccw DMA without PV (git-fixes).
- s390/cmm: fix information leak in cmm_timeout_handler() (bsc#1051510).
- s390/idle: fix cpu idle time calculation (bsc#1051510).
- s390/mm: properly clear _PAGE_NOEXEC bit when it is not supported (bsc#1051510).
- s390/process: avoid potential reading of freed stack (bsc#1051510).
- s390/qdio: (re-)initialize tiqdio list entries (bsc#1051510).
- s390/qdio: do not touch the dsci in tiqdio_add_input_queues() (bsc#1051510).
- s390/qeth: return proper errno on IO error (bsc#1051510).
- s390/setup: fix boot crash for machine without EDAT-1 (bsc#1051510 bsc#1140948).
- s390/setup: fix early warning messages (bsc#1051510 bsc#1140948).
- s390/topology: avoid firing events before kobjs are created (bsc#1051510).
- s390/zcrypt: fix memleak at release (git-fixes).
- s390: fix stfle zero padding (bsc#1051510).
- s390: vsie: Use effective CRYCBD.31 to check CRYCBD validity (git-fixes).
- sc16is7xx: Fix for 'Unexpected interrupt: 8' (bsc#1051510).
- scsi: lpfc: Add enablement of multiple adapter dumps (bsc#1154601).
- scsi: lpfc: Add registration for CPU Offline/Online events (bsc#1154601).
- scsi: lpfc: Change default IRQ model on AMD architectures (bsc#1154601).
- scsi: lpfc: Clarify FAWNN error message (bsc#1154601).
- scsi: lpfc: Fix NULL check before mempool_destroy is not needed (bsc#1154601).
- scsi: lpfc: Fix Oops in nvme_register with target logout/login (bsc#1151900).
- scsi: lpfc: Fix a kernel warning triggered by lpfc_get_sgl_per_hdwq() (bsc#1154601).
- scsi: lpfc: Fix a kernel warning triggered by lpfc_sli4_enable_intr() (bsc#1154601).
- scsi: lpfc: Fix configuration of BB credit recovery in service parameters (bsc#1154601).
- scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow (bsc#1154601).
- scsi: lpfc: Fix dynamic fw log enablement check (bsc#1154601).
- scsi: lpfc: Fix kernel crash at lpfc_nvme_info_show during remote port bounce (bsc#1154601).
- scsi: lpfc: Fix lpfc_cpumask_of_node_init() (bsc#1154601).
- scsi: lpfc: Fix unexpected error messages during RSCN handling (bsc#1154601).
- scsi: lpfc: Honor module parameter lpfc_use_adisc (bsc#1153628).
- scsi: lpfc: Honor module parameter lpfc_use_adisc (bsc#1154601).
- scsi: lpfc: Initialize cpu_map for not present cpus (bsc#1154601).
- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- scsi: lpfc: Make lpfc_debugfs_ras_log_data static (bsc#1154601).
- scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (bsc#1154601).
- scsi: lpfc: Raise config max for lpfc_fcp_mq_threshold variable (bsc#1154601).
- scsi: lpfc: Sync with FC-NVMe-2 SLER change to require Conf with SLER (bsc#1154601).
- scsi: lpfc: Update lpfc version to 12.6.0.1 (bsc#1154601).
- scsi: lpfc: Update lpfc version to 12.6.0.2 (bsc#1154601).
- scsi: lpfc: fix build error of lpfc_debugfs.c for vfree/vmalloc (bsc#1154601).
- scsi: lpfc: fix inlining of lpfc_sli4_cleanup_poll_list() (bsc#1154601).
- scsi: lpfc: fix spelling error in MAGIC_NUMER_xxx (bsc#1154601).
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences (bsc#1154601).
- scsi: lpfc: fix: Coverity: lpfc_get_scsi_buf_s3(): Null pointer dereferences (bsc#1154601).
- scsi: lpfc: lpfc_attr: Fix Use plain integer as NULL pointer (bsc#1154601).
- scsi: lpfc: lpfc_nvmet: Fix Use plain integer as NULL pointer (bsc#1154601).
- scsi: lpfc: revise nvme max queues to be hdwq count (bsc#1154601).
- scsi: lpfc: use hdwq assigned cpu for allocation (bsc#1157160).
- scsi: qla2xxx: Add debug dump of LOGO payload and ELS IOCB (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Allow PLOGI in target mode (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Change discovery state before PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Configure local loop for N2N target (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Do command completion on abort timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do not call qlt_async_event twice (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Do not defer relogin unconditonally (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Drop superfluous INIT_WORK of del_work (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Fix SRB leak on switch command timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Ignore NULL pointer in tcm_qla2xxx_free_mcmd (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Initialize free_work before flushing it (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Remove an include directive (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Send Notify ACK after N2N PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Use correct number of vectors for online CPUs (bsc#1137223).
- scsi: qla2xxx: Use explicit LOGO in target mode (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: do not use zero for FC4_PRIORITY_NVME (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan (bsc#1138039).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: unregister ports after GPN_FT failure (bsc#1138039).
- scsi: sd: Ignore a failure to sync cache due to lack of authorization (git-fixes).
- scsi: storvsc: Add ability to change scsi queue depth (bsc#1155021).
- scsi: zfcp: fix request object use-after-free in send path causing wrong traces (bsc#1051510).
- sctp: change sctp_prot .no_autobind with true (networking-stable-19_10_24).
- selftests: net: reuseport_dualstack: fix uninitalized parameter (networking-stable-19_11_05).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: mxs-auart: Fix potential infinite loop (bsc#1051510).
- serial: samsung: Enable baud clock for UART reset procedure in resume (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- serial: uartps: Fix suspend functionality (bsc#1051510).
- signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal (bsc#1157463).
- slcan: Fix memory leak in error path (bsc#1051510).
- slip: Fix memory leak in slip_open error path (bsc#1051510).
- slip: Fix use-after-free Read in slip_open (bsc#1051510).
- smb3: Incorrect size for netname negotiate context (bsc#1144333, bsc#1154355).
- smb3: fix leak in 'open on server' perf counter (bsc#1144333, bsc#1154355).
- smb3: fix signing verification of large reads (bsc#1144333, bsc#1154355).
- smb3: fix unmount hang in open_shroot (bsc#1144333, bsc#1154355).
- smb3: improve handling of share deleted (and share recreated) (bsc#1144333, bsc#1154355).
- soc: imx: gpc: fix PDN delay (bsc#1051510).
- soc: qcom: wcnss_ctrl: Avoid string overflow (bsc#1051510).
- spi: atmel: Fix CS high support (bsc#1051510).
- spi: atmel: fix handling of cs_change set on non-last xfer (bsc#1051510).
- spi: fsl-lpspi: Prevent FIFO under/overrun by default (bsc#1051510).
- spi: mediatek: Do not modify spi_transfer when transfer (bsc#1051510).
- spi: mediatek: use correct mata-&gt;xfer_len when in fifo transfer (bsc#1051510).
- spi: pic32: Use proper enum in dmaengine_prep_slave_rg (bsc#1051510).
- spi: rockchip: initialize dma_slave_config properly (bsc#1051510).
- spi: spidev: Fix OF tree warning logic (bsc#1051510).
- staging: rtl8188eu: fix null dereference when kzalloc fails (bsc#1051510).
- supported.conf:
- synclink_gt(): fix compat_ioctl() (bsc#1051510).
- tcp_nv: fix potential integer overflow in tcpnv_acked (bsc#1051510).
- thunderbolt: Fix lockdep circular locking depedency warning (git-fixes).
- tipc: Avoid copying bytes beyond the supplied data (bsc#1051510).
- tipc: check bearer name with right length in tipc_nl_compat_bearer_enable (bsc#1051510).
- tipc: check link name with right length in tipc_nl_compat_link_set (bsc#1051510).
- tipc: check msg-&gt;req data len in tipc_nl_compat_bearer_disable (bsc#1051510).
- tipc: compat: allow tipc commands without arguments (bsc#1051510).
- tipc: fix tipc_mon_delete() oops in tipc_enable_bearer() error path (bsc#1051510).
- tipc: fix wrong timeout input for tipc_wait_for_cond() (bsc#1051510).
- tipc: handle the err returned from cmd header function (bsc#1051510).
- tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb (bsc#1051510).
- tipc: tipc clang warning (bsc#1051510).
- tools/power/x86/intel-speed-select: Fix a read overflow in isst_set_tdp_level_msr() (bsc#1111666).
- tools: bpftool: fix arguments for p_err() in do_event_pipe() (bsc#1109837).
- tpm: add check after commands attribs tab allocation (bsc#1051510).
- tracing: Get trace_array reference for available_tracers files (bsc#1156429).
- tty: serial: fsl_lpuart: use the sg count from dma_map_sg (bsc#1051510).
- tty: serial: imx: use the sg count from dma_map_sg (bsc#1051510).
- tty: serial: msm_serial: Fix flow control (bsc#1051510).
- tty: serial: pch_uart: correct usage of dma_unmap_sg (bsc#1051510).
- tun: fix data-race in gro_normal_list() (bsc#1111666).
- ubifs: Correctly initialize c-&gt;min_log_bytes (bsc#1158641).
- ubifs: Limit the number of pages in shrink_liability (bsc#1158643).
- udp: use skb_queue_empty_lockless() (networking-stable-19_11_05).
- usb-serial: cp201x: support Mark-10 digital force gauge (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ('usb-storage: Set virt_boundary_mask to avoid SG overflows') (bsc#1051510).
- usb: chipidea: Fix otg event handler (bsc#1051510).
- usb: chipidea: imx: enable OTG overcurrent in case USB subsystem is already started (bsc#1051510).
- usb: dwc3: gadget: Check ENBLSLPM before sending ep command (bsc#1051510).
- usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode (bsc#1051510).
- usb: gadget: udc: fotg210-udc: Fix a sleep-in-atomic-context bug in fotg210_get_status() (bsc#1051510).
- usb: gadget: uvc: Factor out video USB request queueing (bsc#1051510).
- usb: gadget: uvc: Only halt video streaming endpoint in bulk mode (bsc#1051510).
- usb: gadget: uvc: configfs: Drop leaked references to config items (bsc#1051510).
- usb: gadget: uvc: configfs: Prevent format changes after linking header (bsc#1051510).
- usb: handle warm-reset port requests on hub resume (bsc#1051510).
- usb: xhci-mtk: fix ISOC error when interval is zero (bsc#1051510).
- usbip: Fix free of unallocated memory in vhci tx (git-fixes).
- usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path (git-fixes).
- usbip: Implement SG support to vhci-hcd and stub driver (git-fixes).
- usbip: tools: fix fd leakage in the function of read_attr_usbip_status (git-fixes).
- vfio-ccw: Fix misleading comment when setting orb.cmd.c64 (bsc#1051510).
- vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn (bsc#1051510).
- vfio: ccw: push down unsupported IDA check (bsc#1156471 LTC#182362).
- video/hdmi: Fix AVI bar unpack (git-fixes).
- virtio/s390: fix race on airq_areas (bsc#1051510).
- virtio_console: allocate inbufs in add_port() only if it is needed (git-fixes).
- virtio_ring: fix return code on DMA mapping fails (git-fixes).
- vmxnet3: turn off lro when rxcsum is disabled (bsc#1157499).
- vsock/virtio: fix sock refcnt holding during the shutdown (git-fixes).
- watchdog: meson: Fix the wrong value of left time (bsc#1051510).
- wil6210: drop Rx multicast packets that are looped-back to STA (bsc#1111666).
- wil6210: fix L2 RX status handling (bsc#1111666).
- wil6210: fix RGF_CAF_ICR address for Talyn-MB (bsc#1111666).
- wil6210: fix debugfs memory access alignment (bsc#1111666).
- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- wil6210: fix invalid memory access for rx_buff_mgmt debugfs (bsc#1111666).
- wil6210: fix locking in wmi_call (bsc#1111666).
- wil6210: prevent usage of tx ring 0 for eDMA (bsc#1111666).
- wil6210: set edma variables only for Talyn-MB devices (bsc#1111666).
- x86/alternatives: Add int3_emulate_call() selftest (bsc#1153811).
- x86/alternatives: Fix int3_emulate_call() selftest stack corruption (bsc#1153811).
- x86/mm/pkeys: Fix typo in Documentation/x86/protection-keys.txt (bsc#1078248).
- x86/pkeys: Update documentation about availability (bsc#1078248).
- x86/resctrl: Fix potential lockdep warning (bsc#1114279).
- x86/resctrl: Prevent NULL pointer dereference when reading mondata (bsc#1114279).
- x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs (bsc#1158068).
- xfrm: Fix xfrm sel prefix length validation (git-fixes).
- xfrm: fix sa selector validation (bsc#1156609).
- xfs: Sanity check flags of Q_XQUOTARM call (bsc#1158652).
- xsk: Fix registration of Rx-only sockets (bsc#1109837).
- xsk: relax UMEM headroom alignment (bsc#1109837).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-20"/>
	<updated date="2019-12-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1048942">SUSE bug 1048942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078248">SUSE bug 1078248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089644">SUSE bug 1089644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091041">SUSE bug 1091041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108043">SUSE bug 1108043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117169">SUSE bug 1117169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118661">SUSE bug 1118661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120853">SUSE bug 1120853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126390">SUSE bug 1126390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131107">SUSE bug 1131107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134983">SUSE bug 1134983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135966">SUSE bug 1135966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135967">SUSE bug 1135967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137223">SUSE bug 1137223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137236">SUSE bug 1137236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138039">SUSE bug 1138039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142095">SUSE bug 1142095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142924">SUSE bug 1142924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146544">SUSE bug 1146544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149448">SUSE bug 1149448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150466">SUSE bug 1150466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151067">SUSE bug 1151067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151548">SUSE bug 1151548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151900">SUSE bug 1151900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152782">SUSE bug 1152782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153628">SUSE bug 1153628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153811">SUSE bug 1153811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154043">SUSE bug 1154043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154058">SUSE bug 1154058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154124">SUSE bug 1154124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154355">SUSE bug 1154355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154526">SUSE bug 1154526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154601">SUSE bug 1154601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155021">SUSE bug 1155021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155689">SUSE bug 1155689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155692">SUSE bug 1155692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155836">SUSE bug 1155836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155897">SUSE bug 1155897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155921">SUSE bug 1155921</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156187">SUSE bug 1156187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156258">SUSE bug 1156258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156429">SUSE bug 1156429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156466">SUSE bug 1156466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156471">SUSE bug 1156471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156494">SUSE bug 1156494</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156609">SUSE bug 1156609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156700">SUSE bug 1156700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156729">SUSE bug 1156729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156882">SUSE bug 1156882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156928">SUSE bug 1156928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157032">SUSE bug 1157032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157038">SUSE bug 1157038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157042">SUSE bug 1157042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157044">SUSE bug 1157044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157045">SUSE bug 1157045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157046">SUSE bug 1157046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157049">SUSE bug 1157049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157070">SUSE bug 1157070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157115">SUSE bug 1157115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157143">SUSE bug 1157143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157145">SUSE bug 1157145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157158">SUSE bug 1157158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157160">SUSE bug 1157160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157162">SUSE bug 1157162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157171">SUSE bug 1157171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157173">SUSE bug 1157173</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157178">SUSE bug 1157178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157180">SUSE bug 1157180</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157182">SUSE bug 1157182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157183">SUSE bug 1157183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157184">SUSE bug 1157184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157191">SUSE bug 1157191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157193">SUSE bug 1157193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157197">SUSE bug 1157197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157298">SUSE bug 1157298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157304">SUSE bug 1157304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157307">SUSE bug 1157307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157324">SUSE bug 1157324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157333">SUSE bug 1157333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157386">SUSE bug 1157386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157463">SUSE bug 1157463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157499">SUSE bug 1157499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157678">SUSE bug 1157678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157698">SUSE bug 1157698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157778">SUSE bug 1157778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157908">SUSE bug 1157908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158049">SUSE bug 1158049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158063">SUSE bug 1158063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158064">SUSE bug 1158064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158065">SUSE bug 1158065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158066">SUSE bug 1158066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158067">SUSE bug 1158067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158068">SUSE bug 1158068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158071">SUSE bug 1158071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158082">SUSE bug 1158082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158394">SUSE bug 1158394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158398">SUSE bug 1158398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158407">SUSE bug 1158407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158410">SUSE bug 1158410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158413">SUSE bug 1158413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158417">SUSE bug 1158417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158427">SUSE bug 1158427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158445">SUSE bug 1158445</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158637">SUSE bug 1158637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158638">SUSE bug 1158638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158639">SUSE bug 1158639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158640">SUSE bug 1158640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158641">SUSE bug 1158641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158643">SUSE bug 1158643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158644">SUSE bug 1158644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158645">SUSE bug 1158645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158646">SUSE bug 1158646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158647">SUSE bug 1158647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158649">SUSE bug 1158649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158651">SUSE bug 1158651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158652">SUSE bug 1158652</bugzilla>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-0154/">CVE-2019-0154</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14895/">CVE-2019-14895</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14901/">CVE-2019-14901</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-15213/">CVE-2019-15213</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15916/">CVE-2019-15916</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16231/">CVE-2019-16231</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17055/">CVE-2019-17055</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-18660/">CVE-2019-18660</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18683/">CVE-2019-18683</cve>
	<cve impact="low" cvss3="2.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-18805/">CVE-2019-18805</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18809/">CVE-2019-18809</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19046/">CVE-2019-19046</cve>
	<cve impact="moderate" cvss3="1.6/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19049/">CVE-2019-19049</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19052/">CVE-2019-19052</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19056/">CVE-2019-19056</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19057/">CVE-2019-19057</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19058/">CVE-2019-19058</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19060/">CVE-2019-19060</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19062/">CVE-2019-19062</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19063/">CVE-2019-19063</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19065/">CVE-2019-19065</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19067/">CVE-2019-19067</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19068/">CVE-2019-19068</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19073/">CVE-2019-19073</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19074/">CVE-2019-19074</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19075/">CVE-2019-19075</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19077/">CVE-2019-19077</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19078/">CVE-2019-19078</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19080/">CVE-2019-19080</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19081/">CVE-2019-19081</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19082/">CVE-2019-19082</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19083/">CVE-2019-19083</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19227/">CVE-2019-19227</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19524/">CVE-2019-19524</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19525/">CVE-2019-19525</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19528/">CVE-2019-19528</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19529/">CVE-2019-19529</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19530/">CVE-2019-19530</cve>
	<cve impact="low" cvss3="2.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19531/">CVE-2019-19531</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19534/">CVE-2019-19534</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19536/">CVE-2019-19536</cve>
	<cve impact="low" cvss3="2.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19543/">CVE-2019-19543</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498032" comment="kernel-azure-4.12.14-8.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498033" comment="kernel-azure-base-4.12.14-8.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498034" comment="kernel-azure-devel-4.12.14-8.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498035" comment="kernel-devel-azure-4.12.14-8.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498036" comment="kernel-source-azure-4.12.14-8.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498037" comment="kernel-syms-azure-4.12.14-8.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138855" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1044231" ref_url="https://bugzilla.suse.com/1044231" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1051858" ref_url="https://bugzilla.suse.com/1051858" source="BUGZILLA"/>
		<reference ref_id="1056686" ref_url="https://bugzilla.suse.com/1056686" source="BUGZILLA"/>
		<reference ref_id="1060463" ref_url="https://bugzilla.suse.com/1060463" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1109911" ref_url="https://bugzilla.suse.com/1109911" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1111974" ref_url="https://bugzilla.suse.com/1111974" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1118338" ref_url="https://bugzilla.suse.com/1118338" source="BUGZILLA"/>
		<reference ref_id="1119680" ref_url="https://bugzilla.suse.com/1119680" source="BUGZILLA"/>
		<reference ref_id="1120386" ref_url="https://bugzilla.suse.com/1120386" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1136157" ref_url="https://bugzilla.suse.com/1136157" source="BUGZILLA"/>
		<reference ref_id="1136333" ref_url="https://bugzilla.suse.com/1136333" source="BUGZILLA"/>
		<reference ref_id="1137325" ref_url="https://bugzilla.suse.com/1137325" source="BUGZILLA"/>
		<reference ref_id="1141895" ref_url="https://bugzilla.suse.com/1141895" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1145051" ref_url="https://bugzilla.suse.com/1145051" source="BUGZILLA"/>
		<reference ref_id="1145929" ref_url="https://bugzilla.suse.com/1145929" source="BUGZILLA"/>
		<reference ref_id="1146539" ref_url="https://bugzilla.suse.com/1146539" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1156510" ref_url="https://bugzilla.suse.com/1156510" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1158187" ref_url="https://bugzilla.suse.com/1158187" source="BUGZILLA"/>
		<reference ref_id="1158983" ref_url="https://bugzilla.suse.com/1158983" source="BUGZILLA"/>
		<reference ref_id="1159037" ref_url="https://bugzilla.suse.com/1159037" source="BUGZILLA"/>
		<reference ref_id="1159198" ref_url="https://bugzilla.suse.com/1159198" source="BUGZILLA"/>
		<reference ref_id="1159199" ref_url="https://bugzilla.suse.com/1159199" source="BUGZILLA"/>
		<reference ref_id="1159285" ref_url="https://bugzilla.suse.com/1159285" source="BUGZILLA"/>
		<reference ref_id="1160659" ref_url="https://bugzilla.suse.com/1160659" source="BUGZILLA"/>
		<reference ref_id="1161561" ref_url="https://bugzilla.suse.com/1161561" source="BUGZILLA"/>
		<reference ref_id="1161951" ref_url="https://bugzilla.suse.com/1161951" source="BUGZILLA"/>
		<reference ref_id="1162171" ref_url="https://bugzilla.suse.com/1162171" source="BUGZILLA"/>
		<reference ref_id="1162929" ref_url="https://bugzilla.suse.com/1162929" source="BUGZILLA"/>
		<reference ref_id="1162931" ref_url="https://bugzilla.suse.com/1162931" source="BUGZILLA"/>
		<reference ref_id="1163403" ref_url="https://bugzilla.suse.com/1163403" source="BUGZILLA"/>
		<reference ref_id="1163897" ref_url="https://bugzilla.suse.com/1163897" source="BUGZILLA"/>
		<reference ref_id="1163971" ref_url="https://bugzilla.suse.com/1163971" source="BUGZILLA"/>
		<reference ref_id="1164078" ref_url="https://bugzilla.suse.com/1164078" source="BUGZILLA"/>
		<reference ref_id="1164284" ref_url="https://bugzilla.suse.com/1164284" source="BUGZILLA"/>
		<reference ref_id="1164507" ref_url="https://bugzilla.suse.com/1164507" source="BUGZILLA"/>
		<reference ref_id="1164705" ref_url="https://bugzilla.suse.com/1164705" source="BUGZILLA"/>
		<reference ref_id="1164712" ref_url="https://bugzilla.suse.com/1164712" source="BUGZILLA"/>
		<reference ref_id="1164727" ref_url="https://bugzilla.suse.com/1164727" source="BUGZILLA"/>
		<reference ref_id="1164728" ref_url="https://bugzilla.suse.com/1164728" source="BUGZILLA"/>
		<reference ref_id="1164729" ref_url="https://bugzilla.suse.com/1164729" source="BUGZILLA"/>
		<reference ref_id="1164730" ref_url="https://bugzilla.suse.com/1164730" source="BUGZILLA"/>
		<reference ref_id="1164731" ref_url="https://bugzilla.suse.com/1164731" source="BUGZILLA"/>
		<reference ref_id="1164732" ref_url="https://bugzilla.suse.com/1164732" source="BUGZILLA"/>
		<reference ref_id="1164733" ref_url="https://bugzilla.suse.com/1164733" source="BUGZILLA"/>
		<reference ref_id="1164734" ref_url="https://bugzilla.suse.com/1164734" source="BUGZILLA"/>
		<reference ref_id="1164735" ref_url="https://bugzilla.suse.com/1164735" source="BUGZILLA"/>
		<reference ref_id="1164777" ref_url="https://bugzilla.suse.com/1164777" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1164893" ref_url="https://bugzilla.suse.com/1164893" source="BUGZILLA"/>
		<reference ref_id="1165019" ref_url="https://bugzilla.suse.com/1165019" source="BUGZILLA"/>
		<reference ref_id="1165111" ref_url="https://bugzilla.suse.com/1165111" source="BUGZILLA"/>
		<reference ref_id="1165182" ref_url="https://bugzilla.suse.com/1165182" source="BUGZILLA"/>
		<reference ref_id="1165185" ref_url="https://bugzilla.suse.com/1165185" source="BUGZILLA"/>
		<reference ref_id="1165211" ref_url="https://bugzilla.suse.com/1165211" source="BUGZILLA"/>
		<reference ref_id="1165404" ref_url="https://bugzilla.suse.com/1165404" source="BUGZILLA"/>
		<reference ref_id="1165488" ref_url="https://bugzilla.suse.com/1165488" source="BUGZILLA"/>
		<reference ref_id="1165527" ref_url="https://bugzilla.suse.com/1165527" source="BUGZILLA"/>
		<reference ref_id="1165741" ref_url="https://bugzilla.suse.com/1165741" source="BUGZILLA"/>
		<reference ref_id="1165813" ref_url="https://bugzilla.suse.com/1165813" source="BUGZILLA"/>
		<reference ref_id="1165823" ref_url="https://bugzilla.suse.com/1165823" source="BUGZILLA"/>
		<reference ref_id="1165873" ref_url="https://bugzilla.suse.com/1165873" source="BUGZILLA"/>
		<reference ref_id="1165929" ref_url="https://bugzilla.suse.com/1165929" source="BUGZILLA"/>
		<reference ref_id="1165949" ref_url="https://bugzilla.suse.com/1165949" source="BUGZILLA"/>
		<reference ref_id="1165950" ref_url="https://bugzilla.suse.com/1165950" source="BUGZILLA"/>
		<reference ref_id="1165980" ref_url="https://bugzilla.suse.com/1165980" source="BUGZILLA"/>
		<reference ref_id="1165984" ref_url="https://bugzilla.suse.com/1165984" source="BUGZILLA"/>
		<reference ref_id="1165985" ref_url="https://bugzilla.suse.com/1165985" source="BUGZILLA"/>
		<reference ref_id="1166003" ref_url="https://bugzilla.suse.com/1166003" source="BUGZILLA"/>
		<reference ref_id="1166101" ref_url="https://bugzilla.suse.com/1166101" source="BUGZILLA"/>
		<reference ref_id="1166102" ref_url="https://bugzilla.suse.com/1166102" source="BUGZILLA"/>
		<reference ref_id="1166103" ref_url="https://bugzilla.suse.com/1166103" source="BUGZILLA"/>
		<reference ref_id="1166104" ref_url="https://bugzilla.suse.com/1166104" source="BUGZILLA"/>
		<reference ref_id="1166632" ref_url="https://bugzilla.suse.com/1166632" source="BUGZILLA"/>
		<reference ref_id="1166658" ref_url="https://bugzilla.suse.com/1166658" source="BUGZILLA"/>
		<reference ref_id="1166730" ref_url="https://bugzilla.suse.com/1166730" source="BUGZILLA"/>
		<reference ref_id="1166731" ref_url="https://bugzilla.suse.com/1166731" source="BUGZILLA"/>
		<reference ref_id="1166732" ref_url="https://bugzilla.suse.com/1166732" source="BUGZILLA"/>
		<reference ref_id="1166733" ref_url="https://bugzilla.suse.com/1166733" source="BUGZILLA"/>
		<reference ref_id="1166734" ref_url="https://bugzilla.suse.com/1166734" source="BUGZILLA"/>
		<reference ref_id="1166735" ref_url="https://bugzilla.suse.com/1166735" source="BUGZILLA"/>
		<reference ref_id="1166780" ref_url="https://bugzilla.suse.com/1166780" source="BUGZILLA"/>
		<reference ref_id="1166860" ref_url="https://bugzilla.suse.com/1166860" source="BUGZILLA"/>
		<reference ref_id="1166861" ref_url="https://bugzilla.suse.com/1166861" source="BUGZILLA"/>
		<reference ref_id="1166862" ref_url="https://bugzilla.suse.com/1166862" source="BUGZILLA"/>
		<reference ref_id="1166864" ref_url="https://bugzilla.suse.com/1166864" source="BUGZILLA"/>
		<reference ref_id="1166866" ref_url="https://bugzilla.suse.com/1166866" source="BUGZILLA"/>
		<reference ref_id="1166867" ref_url="https://bugzilla.suse.com/1166867" source="BUGZILLA"/>
		<reference ref_id="1166868" ref_url="https://bugzilla.suse.com/1166868" source="BUGZILLA"/>
		<reference ref_id="1166870" ref_url="https://bugzilla.suse.com/1166870" source="BUGZILLA"/>
		<reference ref_id="1166940" ref_url="https://bugzilla.suse.com/1166940" source="BUGZILLA"/>
		<reference ref_id="1166982" ref_url="https://bugzilla.suse.com/1166982" source="BUGZILLA"/>
		<reference ref_id="1167005" ref_url="https://bugzilla.suse.com/1167005" source="BUGZILLA"/>
		<reference ref_id="1167216" ref_url="https://bugzilla.suse.com/1167216" source="BUGZILLA"/>
		<reference ref_id="1167288" ref_url="https://bugzilla.suse.com/1167288" source="BUGZILLA"/>
		<reference ref_id="1167290" ref_url="https://bugzilla.suse.com/1167290" source="BUGZILLA"/>
		<reference ref_id="1167316" ref_url="https://bugzilla.suse.com/1167316" source="BUGZILLA"/>
		<reference ref_id="1167421" ref_url="https://bugzilla.suse.com/1167421" source="BUGZILLA"/>
		<reference ref_id="1167423" ref_url="https://bugzilla.suse.com/1167423" source="BUGZILLA"/>
		<reference ref_id="1167627" ref_url="https://bugzilla.suse.com/1167627" source="BUGZILLA"/>
		<reference ref_id="1167629" ref_url="https://bugzilla.suse.com/1167629" source="BUGZILLA"/>
		<reference ref_id="1168075" ref_url="https://bugzilla.suse.com/1168075" source="BUGZILLA"/>
		<reference ref_id="1168202" ref_url="https://bugzilla.suse.com/1168202" source="BUGZILLA"/>
		<reference ref_id="1168273" ref_url="https://bugzilla.suse.com/1168273" source="BUGZILLA"/>
		<reference ref_id="1168276" ref_url="https://bugzilla.suse.com/1168276" source="BUGZILLA"/>
		<reference ref_id="1168295" ref_url="https://bugzilla.suse.com/1168295" source="BUGZILLA"/>
		<reference ref_id="1168367" ref_url="https://bugzilla.suse.com/1168367" source="BUGZILLA"/>
		<reference ref_id="1168424" ref_url="https://bugzilla.suse.com/1168424" source="BUGZILLA"/>
		<reference ref_id="1168443" ref_url="https://bugzilla.suse.com/1168443" source="BUGZILLA"/>
		<reference ref_id="1168486" ref_url="https://bugzilla.suse.com/1168486" source="BUGZILLA"/>
		<reference ref_id="1168552" ref_url="https://bugzilla.suse.com/1168552" source="BUGZILLA"/>
		<reference ref_id="1168760" ref_url="https://bugzilla.suse.com/1168760" source="BUGZILLA"/>
		<reference ref_id="1168762" ref_url="https://bugzilla.suse.com/1168762" source="BUGZILLA"/>
		<reference ref_id="1168763" ref_url="https://bugzilla.suse.com/1168763" source="BUGZILLA"/>
		<reference ref_id="1168764" ref_url="https://bugzilla.suse.com/1168764" source="BUGZILLA"/>
		<reference ref_id="1168765" ref_url="https://bugzilla.suse.com/1168765" source="BUGZILLA"/>
		<reference ref_id="1168829" ref_url="https://bugzilla.suse.com/1168829" source="BUGZILLA"/>
		<reference ref_id="1168854" ref_url="https://bugzilla.suse.com/1168854" source="BUGZILLA"/>
		<reference ref_id="1168881" ref_url="https://bugzilla.suse.com/1168881" source="BUGZILLA"/>
		<reference ref_id="1168884" ref_url="https://bugzilla.suse.com/1168884" source="BUGZILLA"/>
		<reference ref_id="1168952" ref_url="https://bugzilla.suse.com/1168952" source="BUGZILLA"/>
		<reference ref_id="1169013" ref_url="https://bugzilla.suse.com/1169013" source="BUGZILLA"/>
		<reference ref_id="1169057" ref_url="https://bugzilla.suse.com/1169057" source="BUGZILLA"/>
		<reference ref_id="1169307" ref_url="https://bugzilla.suse.com/1169307" source="BUGZILLA"/>
		<reference ref_id="1169308" ref_url="https://bugzilla.suse.com/1169308" source="BUGZILLA"/>
		<reference ref_id="1169390" ref_url="https://bugzilla.suse.com/1169390" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169625" ref_url="https://bugzilla.suse.com/1169625" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19768" ref_url="https://www.suse.com/security/cve/CVE-2019-19768/" source="CVE"/>
		<reference ref_id="CVE-2019-19770" ref_url="https://www.suse.com/security/cve/CVE-2019-19770/" source="CVE"/>
		<reference ref_id="CVE-2019-3701" ref_url="https://www.suse.com/security/cve/CVE-2019-3701/" source="CVE"/>
		<reference ref_id="CVE-2019-9458" ref_url="https://www.suse.com/security/cve/CVE-2019-9458/" source="CVE"/>
		<reference ref_id="CVE-2020-10942" ref_url="https://www.suse.com/security/cve/CVE-2020-10942/" source="CVE"/>
		<reference ref_id="CVE-2020-11494" ref_url="https://www.suse.com/security/cve/CVE-2020-11494/" source="CVE"/>
		<reference ref_id="CVE-2020-11669" ref_url="https://www.suse.com/security/cve/CVE-2020-11669/" source="CVE"/>
		<reference ref_id="CVE-2020-2732" ref_url="https://www.suse.com/security/cve/CVE-2020-2732/" source="CVE"/>
		<reference ref_id="CVE-2020-8647" ref_url="https://www.suse.com/security/cve/CVE-2020-8647/" source="CVE"/>
		<reference ref_id="CVE-2020-8649" ref_url="https://www.suse.com/security/cve/CVE-2020-8649/" source="CVE"/>
		<reference ref_id="CVE-2020-8834" ref_url="https://www.suse.com/security/cve/CVE-2020-8834/" source="CVE"/>
		<reference ref_id="CVE-2020-9383" ref_url="https://www.suse.com/security/cve/CVE-2020-9383/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006732.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 azure kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
- CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
- CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
- CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
- CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
- CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).
- CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).
- CVE-2020-8647: There was a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c (bnc#1162929).
- CVE-2020-8649: There was a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c (bnc#1162931).
- CVE-2020-9383: An issue was discovered set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it (bnc#1165111).
- CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).
- CVE-2020-2732: Fixed a flaw in the KVM hypervisor instruction emulation for L2 guests. Under some circumstances, an L2 guest may have tricked the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest (bnc#1163971).

The following non-security bugs were fixed:

- ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
- ACPI: watchdog: Fix gas-&gt;access_width usage (bsc#1051510).
- ahci: Add support for Amazon's Annapurna Labs SATA controller (bsc#1169013).
- ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
- ALSA: core: Add snd_device_get_state() helper (bsc#1051510).
- ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
- ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard (bsc#1051510).
- ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: hda: default enable CA0132 DSP support (bsc#1051510).
- ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
- ALSA: hda/realtek - Add Headset Button supported for ThinkPad X1 (bsc#1111666).
- ALSA: hda/realtek - Add Headset Mic supported (bsc#1111666).
- ALSA: hda/realtek - Add more codec supported Headset Button (bsc#1111666).
- ALSA: hda/realtek - a fake key event is triggered by running shutup (bsc#1051510).
- ALSA: hda/realtek - Apply quirk for MSI GP63, too (bsc#1111666).
- ALSA: hda/realtek - Apply quirk for yet another MSI laptop (bsc#1111666).
- ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (git-fixes).
- ALSA: hda/realtek: Enable mute LED on an HP system (bsc#1051510).
- ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (git-fixes).
- ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294 (bsc#1111666).
- ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1 (bsc#1111666).
- ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master (bsc#1111666).
- ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups (bsc#1051510).
- ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).
- ALSA: hda: remove redundant assignment to variable timeout (bsc#1051510).
- ALSA: hda: Use scnprintf() for string truncation (bsc#1051510).
- ALSA: hdsp: remove redundant assignment to variable err (bsc#1051510).
- ALSA: ice1724: Fix invalid access for enumerated ctl items (bsc#1051510).
- ALSA: info: remove redundant assignment to variable c (bsc#1051510).
- ALSA: korg1212: fix if-statement empty body warnings (bsc#1051510).
- ALSA: line6: Fix endless MIDI read loop (git-fixes).
- ALSA: pcm: Fix superfluous snprintf() usage (bsc#1051510).
- ALSA: pcm.h: add for_each_pcm_streams() (bsc#1051510).
- ALSA: pcm: oss: Avoid plugin buffer overflow (git-fixes).
- ALSA: pcm: oss: Fix regression by buffer overflow fix (bsc#1051510).
- ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks (git-fixes).
- ALSA: pcm: oss: Unlock mutex temporarily for sleeping at read/write (bsc#1051510).
- ALSA: pcm: Use a macro for parameter masks to reduce the needed cast (bsc#1051510).
- ALSA: seq: oss: Fix running status after receiving sysex (git-fixes).
- ALSA: seq: virmidi: Fix running status after receiving sysex (git-fixes).
- ALSA: usb-audio: Add boot quirk for MOTU M Series (bsc#1111666).
- ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000 (bsc#1111666).
- ALSA: usb-audio: Add delayed_register option (bsc#1051510).
- ALSA: usb-audio: add implicit fb quirk for MOTU M Series (bsc#1111666).
- ALSA: usb-audio: add quirks for Line6 Helix devices fw&gt;=2.82 (bsc#1111666).
- ALSA: usb-audio: Add support for MOTU MicroBook IIc (bsc#1051510).
- ALSA: usb-audio: Apply 48kHz fixed rate playback for Jabra Evolve 65 headset (bsc#1111666).
- ALSA: usb-audio: Create a registration quirk for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
- ALSA: usb-audio: Do not create a mixer element with bogus volume range (bsc#1051510).
- ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor (bsc#1051510).
- ALSA: usb-audio: fix Corsair Virtuoso mixer label collision (bsc#1111666).
- ALSA: usb-audio: Fix mixer controls' USB interface for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
- ALSA: usb-audio: Fix UAC2/3 effect unit parsing (bsc#1111666).
- ALSA: usb-audio: Inform devices that need delayed registration (bsc#1051510).
- ALSA: usb-audio: Parse source ID of UAC2 effect unit (bsc#1051510).
- ALSA: usb-audio: Rewrite registration quirk handling (bsc#1051510).
- ALSA: usb-audio: unlock on error in probe (bsc#1111666).
- ALSA: usb-audio: Use lower hex numbers for IDs (bsc#1111666).
- ALSA: usb-midi: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status (bsc#1051510).
- ALSA: usx2y: use for_each_pcm_streams() macro (bsc#1051510).
- ALSA: via82xx: Fix endianness annotations (bsc#1051510).
- amdgpu/gmc_v9: save/restore sdpif regs during S3 (bsc#1113956)
- apei/ghes: Do not delay GHES polling (bsc#1166982).
- ASoC: dapm: Correct DAPM handling of active widgets during shutdown (bsc#1051510).
- ASoC: Intel: atom: Take the drv-&gt;lock mutex before calling sst_send_slot_map() (bsc#1051510).
- ASoC: Intel: mrfld: fix incorrect check on p-&gt;sink (bsc#1051510).
- ASoC: Intel: mrfld: return error codes when an error occurs (bsc#1051510).
- ASoC: jz4740-i2s: Fix divider written at incorrect offset in register (bsc#1051510).
- ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path (bsc#1051510).
- ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output (bsc#1051510).
- ASoC: pcm: update FE/BE trigger order based on the command (bsc#1051510).
- ASoC: sun8i-codec: Remove unused dev from codec struct (bsc#1051510).
- ASoC: topology: Fix memleak in soc_tplg_link_elems_load() (bsc#1051510).
- ath9k: Handle txpower changes even when TPC is disabled (bsc#1051510).
- atm: zatm: Fix empty body Clang warnings (bsc#1051510).
- b43legacy: Fix -Wcast-function-type (bsc#1051510).
- batman-adv: Avoid spurious warnings from bat_v neigh_cmp implementation (bsc#1051510).
- batman-adv: Do not schedule OGM for disabled interface (bsc#1051510).
- batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs (bsc#1051510).
- binfmt_elf: Do not move brk for INTERP-less ET_EXEC (bsc#1169013).
- binfmt_elf: move brk out of mmap when doing direct loader exec (bsc#1169013).
- blk: Fix kabi due to blk_trace_mutex addition (bsc#1159285).
- blk-mq: Allow blocking queue tag iter callbacks (bsc#1167316).
- blktrace: fix dereference after null check (bsc#1159285).
- blktrace: fix trace mutex deadlock (bsc#1159285).
- block, bfq: fix use-after-free in bfq_idle_slice_timer_body (bsc#1168760).
- block: keep bdi-&gt;io_pages in sync with max_sectors_kb for stacked devices (bsc#1168762).
- Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl (bsc#1051510).
- bnxt_en: Fix NTUPLE firmware command failures (bsc#1104745 ).
- bnxt_en: Fix TC queue mapping (networking-stable-20_02_05).
- bnxt_en: Improve device shutdown method (bsc#1104745 ).
- bnxt_en: Issue PCIe FLR in kdump kernel to cleanup pending DMAs (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Support all variants of the 5750X chip family (bsc#1167216).
- bonding/alb: properly access headers in bond_alb_xmit() (networking-stable-20_02_09).
- bpf: Explicitly memset some bpf info structures declared on the stack (bsc#1083647).
- bpf: Explicitly memset the bpf_attr structure (bsc#1083647).
- bpf, offload: Replace bitwise AND by logical AND in bpf_prog_offload_info_fill (bsc#1109837).
- brcmfmac: abort and release host after error (bsc#1111666).
- btrfs: Account for trans_block_rsv in may_commit_transaction (bsc#1165949).
- btrfs: add a flush step for delayed iputs (bsc#1165949).
- btrfs: add assertions for releasing trans handle reservations (bsc#1165949).
- btrfs: add btrfs_delete_ref_head helper (bsc#1165949).
- btrfs: add enospc debug messages for ticket failure (bsc#1165949).
- btrfs: Add enospc_debug printing in metadata_reserve_bytes (bsc#1165949).
- btrfs: add new flushing states for the delayed refs rsv (bsc#1165949).
- btrfs: add space reservation tracepoint for reserved bytes (bsc#1165949).
- btrfs: adjust dirty_metadata_bytes after writeback failure of extent buffer (bsc#1168273).
- btrfs: allow us to use up to 90% of the global rsv for unlink (bsc#1165949).
- btrfs: always reserve our entire size for the global reserve (bsc#1165949).
- btrfs: assert on non-empty delayed iputs (bsc##1165949).
- btrfs: be more explicit about allowed flush states (bsc#1165949).
- btrfs: call btrfs_create_pending_block_groups unconditionally (bsc#1165949).
- btrfs: catch cow on deleting snapshots (bsc#1165949).
- btrfs: change the minimum global reserve size (bsc#1165949).
- btrfs: check if there are free block groups for commit (bsc#1165949).
- btrfs: clean up error handling in btrfs_truncate() (bsc#1165949).
- btrfs: cleanup extent_op handling (bsc#1165949).
- btrfs: cleanup root usage by btrfs_get_alloc_profile (bsc#1165949).
- btrfs: cleanup the target logic in __btrfs_block_rsv_release (bsc#1165949).
- btrfs: clear space cache inode generation always (bsc#1165949).
- btrfs: delayed-ref: pass delayed_refs directly to btrfs_delayed_ref_lock (bsc#1165949).
- btrfs: Do mandatory tree block check before submitting bio (bsc#1168273).
- btrfs: do not account global reserve in can_overcommit (bsc#1165949).
- btrfs: do not allow reservations if we have pending tickets (bsc#1165949).
- btrfs: do not call btrfs_start_delalloc_roots in flushoncommit (bsc#1165949).
- btrfs: do not end the transaction for delayed refs in throttle (bsc#1165949).
- btrfs: do not enospc all tickets on flush failure (bsc#1165949).
- btrfs: do not reset bio-&gt;bi_ops while writing bio (bsc#1168273).
- btrfs: do not run delayed_iputs in commit (bsc##1165949).
- btrfs: do not run delayed refs in the end transaction logic (bsc#1165949).
- btrfs: do not use ctl-&gt;free_space for max_extent_size (bsc##1165949).
- btrfs: do not use global reserve for chunk allocation (bsc#1165949).
- btrfs: drop get_extent from extent_page_data (bsc#1168273).
- btrfs: drop min_size from evict_refill_and_join (bsc##1165949).
- btrfs: drop unused space_info parameter from create_space_info (bsc#1165949).
- btrfs: dump block_rsv details when dumping space info  (bsc#1165949).
- btrfs: export block group accounting helpers (bsc#1165949).
- btrfs: export block_rsv_use_bytes (bsc#1165949).
- btrfs: export btrfs_block_rsv_add_bytes (bsc#1165949).
- btrfs: export __btrfs_block_rsv_release (bsc#1165949).
- btrfs: export space_info_add_*_bytes (bsc#1165949).
- btrfs: export the block group caching helpers (bsc#1165949).
- btrfs: export the caching control helpers (bsc#1165949).
- btrfs: export the excluded extents helpers (bsc#1165949).
- btrfs: extent_io: add proper error handling to lock_extent_buffer_for_io() (bsc#1168273).
- btrfs: extent_io: Handle errors better in btree_write_cache_pages() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_write_full_page() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_write_locked_range() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_writepages() (bsc#1168273).
- btrfs: extent_io: Kill dead condition in extent_write_cache_pages() (bsc#1168273).
- btrfs: extent_io: Kill the forward declaration of flush_write_bio (bsc#1168273).
- btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up (bsc#1168273).
- btrfs: extent-tree: Add lockdep assert when updating space info (bsc#1165949).
- btrfs: extent-tree: Add trace events for space info numbers update (bsc#1165949).
- btrfs: extent-tree: Detect bytes_may_use underflow earlier (bsc#1165949).
- btrfs: extent-tree: Detect bytes_pinned underflow earlier (bsc#1165949).
- btrfs: factor our read/write stage off csum_tree_block into its callers (bsc#1168273).
- btrfs: factor out the ticket flush handling (bsc#1165949).
- btrfs: fix insert_reserved error handling (bsc##1165949).
- btrfs: fix may_commit_transaction to deal with no partial filling (bsc#1165949).
- btrfs: fix missing delayed iputs on unmount (bsc#1165949).
- btrfs: fix qgroup double free after failure to reserve metadata for delalloc (bsc#1165949).
- btrfs: fix race leading to metadata space leak after task received signal (bsc#1165949).
- btrfs: fix truncate throttling (bsc#1165949).
- btrfs: fix unwritten extent buffers and hangs on future writeback attempts (bsc#1168273).
- btrfs: force chunk allocation if our global rsv is larger than metadata (bsc#1165949).
- btrfs: Improve global reserve stealing logic (bsc#1165949).
- btrfs: introduce an evict flushing state (bsc#1165949).
- btrfs: introduce delayed_refs_rsv (bsc#1165949).
- btrfs: loop in inode_rsv_refill (bsc#1165949).
- btrfs: make btrfs_destroy_delayed_refs use btrfs_delayed_ref_lock (bsc#1165949).
- btrfs: make btrfs_destroy_delayed_refs use btrfs_delete_ref_head (bsc#1165949).
- btrfs: make caching_thread use btrfs_find_next_key (bsc#1165949).
- btrfs: make plug in writing meta blocks really work (bsc#1168273).
- btrfs: merge two flush_write_bio helpers (bsc#1168273).
- btrfs: migrate btrfs_trans_release_chunk_metadata (bsc#1165949).
- btrfs: migrate inc/dec_block_group_ro code (bsc#1165949).
- btrfs: migrate nocow and reservation helpers (bsc#1165949).
- btrfs: migrate the alloc_profile helpers (bsc#1165949).
- btrfs: migrate the block group caching code (bsc#1165949).
- btrfs: migrate the block group cleanup code (bsc#1165949).
- btrfs: migrate the block group lookup code (bsc#1165949).
- btrfs: migrate the block group read/creation code (bsc#1165949).
- btrfs: migrate the block group ref counting stuff (bsc#1165949).
- btrfs: migrate the block group removal code (bsc#1165949).
- btrfs: migrate the block group space accounting helpers (bsc#1165949).
- btrfs: migrate the block-rsv code to block-rsv.c (bsc#1165949).
- btrfs: migrate the chunk allocation code (bsc#1165949).
- btrfs: migrate the delalloc space stuff to it's own home (bsc#1165949).
- btrfs: migrate the delayed refs rsv code (bsc#1165949).
- btrfs: migrate the dirty bg writeout code (bsc#1165949).
- btrfs: migrate the global_block_rsv helpers to block-rsv.c (bsc#1165949).
- btrfs: move and export can_overcommit (bsc#1165949).
- btrfs: move basic block_group definitions to their own header (bsc#1165949).
- btrfs: move btrfs_add_free_space out of a header file (bsc#1165949).
- btrfs: move btrfs_block_rsv definitions into it's own header (bsc#1165949).
- btrfs: move btrfs_raid_group values to btrfs_raid_attr table (bsc#1165949).
- btrfs: move btrfs_space_info_add_*_bytes to space-info.c (bsc#1165949).
- btrfs: move dump_space_info to space-info.c (bsc#1165949).
- btrfs: move reserve_metadata_bytes and supporting code to space-info.c (bsc#1165949).
- btrfs: move space_info to space-info.h (bsc#1165949).
- btrfs: move the space_info handling code to space-info.c (bsc#1165949).
- btrfs: move the space info update macro to space-info.h (bsc#1165949).
- btrfs: move the subvolume reservation stuff out of extent-tree.c (bsc#1165949).
- btrfs: only check delayed ref usage in should_end_transaction (bsc#1165949).
- btrfs: only check priority tickets for priority flushing (bsc#1165949).
- btrfs: only free reserved extent if we didn't insert it (bsc##1165949).
- btrfs: only reserve metadata_size for inodes (bsc#1165949).
- btrfs: only track ref_heads in delayed_ref_updates (bsc#1165949).
- btrfs: Output ENOSPC debug info in inc_block_group_ro (bsc#1165949).
- btrfs: pass root to various extent ref mod functions (bsc#1165949).
- btrfs: qgroup: Do not hold qgroup_ioctl_lock in btrfs_qgroup_inherit() (bsc#1165823).
- btrfs: qgroup: Mark qgroup inconsistent if we're inherting snapshot to a new qgroup (bsc#1165823).
- btrfs: refactor block group replication factor calculation to a helper (bsc#1165949).
- btrfs: refactor priority_reclaim_metadata_space (bsc#1165949).
- btrfs: refactor the ticket wakeup code (bsc#1165949).
- btrfs: release metadata before running delayed refs (bsc##1165949).
- btrfs: remove bio_flags which indicates a meta block of log-tree (bsc#1168273).
- btrfs: Remove btrfs_inode::delayed_iput_count (bsc#1165949).
- btrfs: Remove fs_info from do_chunk_alloc (bsc#1165949).
- btrfs: remove orig_bytes from reserve_ticket (bsc#1165949).
- btrfs: Remove redundant argument of flush_space (bsc#1165949).
- btrfs: Remove redundant mirror_num arg (bsc#1168273).
- btrfs: Rename bin_search -&gt; btrfs_bin_search (bsc#1168273).
- btrfs: rename btrfs_space_info_add_old_bytes (bsc#1165949).
- btrfs: rename do_chunk_alloc to btrfs_chunk_alloc (bsc#1165949).
- btrfs: rename the btrfs_calc_*_metadata_size helpers (bsc#1165949).
- btrfs: replace cleaner_delayed_iput_mutex with a waitqueue (bsc#1165949).
- btrfs: reserve delalloc metadata differently (bsc#1165949).
- btrfs: reserve extra space during evict (bsc#1165949).
- btrfs: reset max_extent_size on clear in a bitmap (bsc##1165949).
- btrfs: reset max_extent_size properly (bsc##1165949).
- btrfs: rework btrfs_check_space_for_delayed_refs (bsc#1165949).
- btrfs: rework wake_all_tickets (bsc#1165949).
- btrfs: roll tracepoint into btrfs_space_info_update helper (bsc#1165949).
- btrfs: run btrfs_try_granting_tickets if a priority ticket fails (bsc#1165949).
- btrfs: run delayed iput at unlink time (bsc#1165949).
- btrfs: run delayed iputs before committing (bsc#1165949).
- btrfs: set max_extent_size properly (bsc##1165949).
- btrfs: sink extent_write_full_page tree argument (bsc#1168273).
- btrfs: sink extent_write_locked_range tree parameter (bsc#1168273).
- btrfs: sink flush_fn to extent_write_cache_pages (bsc#1168273).
- btrfs: sink get_extent parameter to extent_fiemap (bsc#1168273).
- btrfs: sink get_extent parameter to extent_readpages (bsc#1168273).
- btrfs: sink get_extent parameter to extent_write_full_page (bsc#1168273).
- btrfs: sink get_extent parameter to extent_write_locked_range (bsc#1168273).
- btrfs: sink get_extent parameter to extent_writepages (bsc#1168273).
- btrfs: sink get_extent parameter to get_extent_skip_holes (bsc#1168273).
- btrfs: sink writepage parameter to extent_write_cache_pages (bsc#1168273).
- btrfs: stop partially refilling tickets when releasing space (bsc#1165949).
- btrfs: stop using block_rsv_release_bytes everywhere (bsc#1165949).
- btrfs: switch to on-stack csum buffer in csum_tree_block (bsc#1168273).
- btrfs: temporarily export btrfs_get_restripe_target (bsc#1165949).
- btrfs: temporarily export fragment_free_space (bsc#1165949).
- btrfs: temporarily export inc_block_group_ro (bsc#1165949).
- btrfs: track DIO bytes in flight (bsc#1165949).
- btrfs: tree-checker: Remove comprehensive root owner check (bsc#1168273).
- btrfs: unexport can_overcommit (bsc#1165949).
- btrfs: unexport the temporary exported functions (bsc#1165949).
- btrfs: unify error handling for ticket flushing (bsc#1165949).
- btrfs: unify extent_page_data type passed as void (bsc#1168273).
- btrfs: update may_commit_transaction to use the delayed refs rsv (bsc#1165949).
- btrfs: use btrfs_try_granting_tickets in update_global_rsv (bsc#1165949).
- btrfs: wait on caching when putting the bg cache (bsc#1165949).
- btrfs: wait on ordered extents on abort cleanup (bsc#1165949).
- btrfs: wakeup cleaner thread when adding delayed iput (bsc#1165949).
- ceph: canonicalize server path in place (bsc#1168443).
- ceph: check POOL_FLAG_FULL/NEARFULL in addition to OSDMAP_FULL/NEARFULL (bsc#1169307).
- ceph: remove the extra slashes in the server path (bsc#1168443).
- cfg80211: check reg_rule for NULL in handle_channel_custom() (bsc#1051510).
- cfg80211: check wiphy driver existence for drvinfo report (bsc#1051510).
- cgroup: memcg: net: do not associate sock with unrelated cgroup (bsc#1167290).
- cifs: add a debug macro that prints \\server\share for errors (bsc#1144333).
- cifs: add missing mount option to /proc/mounts (bsc#1144333).
- cifs: add new debugging macro cifs_server_dbg (bsc#1144333).
- cifs: add passthrough for smb2 setinfo (bsc#1144333).
- cifs: add SMB2_open() arg to return POSIX data (bsc#1144333).
- cifs: add smb2 POSIX info level (bsc#1144333).
- cifs: add SMB3 change notification support (bsc#1144333).
- cifs: add support for fallocate mode 0 for non-sparse files (bsc#1144333).
- cifs: Add support for setting owner info, dos attributes, and create time (bsc#1144333).
- cifs: Add tracepoints for errors on flush or fsync (bsc#1144333).
- cifs: Adjust indentation in smb2_open_file (bsc#1144333).
- cifs: allow chmod to set mode bits using special sid (bsc#1144333).
- cifs: Avoid doing network I/O while holding cache lock (bsc#1144333).
- cifs: call wake_up(&amp;server-&gt;response_q) inside of cifs_reconnect() (bsc#1144333).
- cifs: Clean up DFS referral cache (bsc#1144333).
- cifs: create a helper function to parse the query-directory response buffer (bsc#1144333).
- cifs: do d_move in rename (bsc#1144333).
- cifs: Do not display RDMA transport on reconnect (bsc#1144333).
- cifs: do not ignore the SYNC flags in getattr (bsc#1144333).
- cifs: do not leak -EAGAIN for stat() during reconnect (bsc#1144333).
- cifs: do not use 'pre:' for MODULE_SOFTDEP (bsc#1144333).
- cifs: enable change notification for SMB2.1 dialect (bsc#1144333).
- cifs: fail i/o on soft mounts if sessionsetup errors out (bsc#1144333).
- cifs: fix a comment for the timeouts when sending echos (bsc#1144333).
- cifs: fix a white space issue in cifs_get_inode_info() (bsc#1144333).
- cifs: fix dereference on ses before it is null checked (bsc#1144333).
- cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333).
- cifs: fix mode bits from dir listing when mounted with modefromsid (bsc#1144333).
- cifs: Fix mode output in debugging statements (bsc#1144333).
- cifs: Fix mount options set in automount (bsc#1144333).
- cifs: fix NULL dereference in match_prepath (bsc#1144333).
- cifs: Fix potential deadlock when updating vol in cifs_reconnect() (bsc#1144333).
- cifs: fix potential mismatch of UNC paths (bsc#1144333).
- cifs: fix rename() by ensuring source handle opened with DELETE bit (bsc#1144333).
- cifs: Fix return value in __update_cache_entry (bsc#1144333).
- cifs: fix soft mounts hanging in the reconnect code (bsc#1144333).
- cifs: fix soft mounts hanging in the reconnect code (bsc#1144333).
- cifs: Fix task struct use-after-free on reconnect (bsc#1144333).
- cifs: fix unitialized variable poential problem with network I/O cache lock patch (bsc#1144333).
- cifs: get mode bits from special sid on stat (bsc#1144333).
- cifs: Get rid of kstrdup_const()'d paths (bsc#1144333).
- cifs: handle prefix paths in reconnect (bsc#1144333).
- cifs: ignore cached share root handle closing errors (bsc#1166780).
- cifs: Introduce helpers for finding TCP connection (bsc#1144333).
- cifs: log warning message (once) if out of disk space (bsc#1144333).
- cifs: make sure we do not overflow the max EA buffer size (bsc#1144333).
- cifs: make use of cap_unix(ses) in cifs_reconnect_tcon() (bsc#1144333).
- cifs: Merge is_path_valid() into get_normalized_path() (bsc#1144333).
- cifs: modefromsid: make room for 4 ACE (bsc#1144333).
- cifs: modefromsid: write mode ACE first (bsc#1144333).
- cifs: Optimize readdir on reparse points (bsc#1144333).
- cifs: plumb smb2 POSIX dir enumeration (bsc#1144333).
- cifs: potential unintitliazed error code in cifs_getattr() (bsc#1144333).
- cifs: prepare SMB2_query_directory to be used with compounding (bsc#1144333).
- cifs: print warning once if mounting with vers=1.0 (bsc#1144333).
- cifs: refactor cifs_get_inode_info() (bsc#1144333).
- cifs: remove redundant assignment to pointer pneg_ctxt (bsc#1144333).
- cifs: remove redundant assignment to variable rc (bsc#1144333).
- cifs: remove set but not used variables (bsc#1144333).
- cifs: remove set but not used variable 'server' (bsc#1144333).
- cifs: remove unused variable (bsc#1144333).
- cifs: remove unused variable 'sid_user' (bsc#1144333).
- cifs: rename a variable in SendReceive() (bsc#1144333).
- cifs: rename posix create rsp (bsc#1144333).
- cifs: replace various strncpy with strscpy and similar (bsc#1144333).
- cifs: Return directly after a failed build_path_from_dentry() in cifs_do_create() (bsc#1144333).
- cifs: set correct max-buffer-size for smb2_ioctl_init() (bsc#1144333).
- cifs: smbd: Add messages on RDMA session destroy and reconnection (bsc#1144333).
- cifs: smbd: Invalidate and deregister memory registration on re-send for direct I/O (bsc#1144333).
- cifs: smbd: Only queue work for error recovery on memory registration (bsc#1144333).
- cifs: smbd: Return -EAGAIN when transport is reconnecting (bsc#1144333).
- cifs: smbd: Return -ECONNABORTED when trasnport is not in connected state (bsc#1144333).
- cifs: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE (bsc#1144333).
- cifs: Use common error handling code in smb2_ioctl_query_info() (bsc#1144333).
- cifs: use compounding for open and first query-dir for readdir() (bsc#1144333).
- cifs: Use #define in cifs_dbg (bsc#1144333).
- cifs: Use memdup_user() rather than duplicating its implementation (bsc#1144333).
- cifs: use mod_delayed_work() for &amp;server-&gt;reconnect if already queued (bsc#1144333).
- cifs: use PTR_ERR_OR_ZERO() to simplify code (bsc#1144333).
- clk: imx: Align imx sc clock msg structs to 4 (bsc#1111666).
- clk: imx: Align imx sc clock msg structs to 4 (git-fixes).
- clk: qcom: rcg: Return failure for RCG update (bsc#1051510).
- cls_rsvp: fix rsvp_policy (networking-stable-20_02_05).
- configfs: Fix bool initialization/comparison (bsc#1051510).
- core: Do not skip generic XDP program execution for cloned SKBs (bsc#1109837).
- cpufreq: powernv: Fix unsafe notifiers (bsc#1065729).
- cpufreq: powernv: Fix use-after-free (bsc#1065729).
- cpufreq: Register drivers only after CPU devices have been registered (bsc#1051510).
- cpuidle: Do not unset the driver if it is there already (bsc#1051510).
- crypto: arm64/sha-ce - implement export/import (bsc#1051510).
- Crypto: chelsio - Fixes a deadlock between rtnl_lock and uld_mutex (bsc#1111666).
- Crypto: chelsio - Fixes a hang issue during driver registration (bsc#1111666).
- crypto: mxs-dcp - fix scatterlist linearization for hash (bsc#1051510).
- crypto: pcrypt - Fix user-after-free on module unload (git-fixes).
- crypto: tcrypt - fix printed skcipher [a]sync mode (bsc#1051510).
- debugfs: add support for more elaborate -&gt;d_fsdata (bsc#1159198  bsc#1109911).
- debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198 bsc#1109911).
- debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198).
- debugfs: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911).
- debugfs: debugfs_real_fops(): drop __must_hold sparse annotation (bsc#1159198 bsc#1109911).
- debugfs: debugfs_use_start/finish do not exist anymore (bsc#1159198).
- debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198 bsc#1109911).
- debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198).
- debugfs: fix debugfs_real_fops() build error (bsc#1159198 bsc#1109911).
- debugfs: implement per-file removal protection (bsc#1159198 bsc#1109911).
- debugfs: purge obsolete SRCU based removal protection (bsc#1159198 bsc#1109911).
- debugfs: simplify __debugfs_remove_file() (bsc#1159198).
- Delete patches which cause regression (bsc#1165527 ltc#184149).
- Deprecate NR_UNSTABLE_NFS, use NR_WRITEBACK (bsc#1163403).
- devlink: report 0 after hitting end in region read (bsc#1109837).
- dmaengine: coh901318: Fix a double lock bug in dma_tc_handle() (bsc#1051510).
- dmaengine: ste_dma40: fix unneeded variable warning (bsc#1051510).
- driver core: platform: fix u32 greater or equal to zero comparison (bsc#1051510).
- driver core: platform: Prevent resouce overflow from causing infinite loops (bsc#1051510).
- driver core: Print device when resources present in really_probe() (bsc#1051510).
- drivers/md/raid5.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).
- drivers/md/raid5-ppl.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).
- drm/amd/amdgpu: Fix GPR read from debugfs (v2) (bsc#1113956)
- drm/amd/display: Add link_rate quirk for Apple 15' MBP 2017 (bsc#1111666).
- drm/amd/display: Fix wrongly passed static prefix (bsc#1111666).
- drm/amd/display: remove duplicated assignment to grph_obj_type (bsc#1051510).
- drm/amd/dm/mst: Ignore payload update failures (bsc#1112178)
- drm/amdgpu: fix typo for vcn1 idle check (bsc#1111666).
- drm/amdkfd: fix a use after free race with mmu_notifer unregister (bsc#1114279)
- drm: atmel-hlcdc: enable clock before configuring timing engine (bsc#1114279)
- drm/bochs: downgrade pci_request_region failure from error to warning (bsc#1051510).
- drm/bridge: dw-hdmi: fix AVI frame colorimetry (bsc#1051510).
- drm_dp_mst_topology: fix broken drm_dp_sideband_parse_remote_dpcd_read() (bsc#1051510).
- drm/drm_dp_mst:remove set but not used variable 'origlen' (bsc#1051510).
- drm/etnaviv: fix dumping of iommuv2 (bsc#1114279)
- drm/exynos: dsi: fix workaround for the legacy clock name (bsc#1111666).
- drm/exynos: dsi: propagate error value and silence meaningless warning (bsc#1111666).
- drm/gma500: Fixup fbdev stolen size usage evaluation (bsc#1051510).
- drm/i915/gvt: Fix orphan vgpu dmabuf_objs' lifetime (git-fixes).
- drm/i915/gvt: Fix unnecessary schedule timer when no vGPU exits (git-fixes).
- drm/i915/gvt: Separate display reset from ALL_ENGINES reset (bsc#1114279)
- drm/i915: Program MBUS with rmw during initialization (git-fixes).
- drm/i915/selftests: Fix return in assert_mmap_offset() (bsc#1114279)
- drm/i915/userptr: fix size calculation (bsc#1114279)
- drm/i915/userptr: Try to acquire the page lock around (bsc#1114279)
- drm/i915: Wean off drm_pci_alloc/drm_pci_free (bsc#1114279)
- drm/lease: fix WARNING in idr_destroy (bsc#1113956)
- drm/mediatek: Add gamma property according to hardware capability (bsc#1114279)
- drm/mediatek: disable all the planes in atomic_disable (bsc#1114279)
- drm/mediatek: handle events when enabling/disabling crtc (bsc#1051510).
- drm/mipi_dbi: Fix off-by-one bugs in mipi_dbi_blank() (bsc#1114279)
- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable (bsc#1114279)
- drm/msm: Set dma maximum segment size for mdss (bsc#1051510).
- drm/msm: stop abusing dma_map/unmap for cache (bsc#1051510).
- drm/msm: Use the correct dma_sync calls harder (bsc#1051510).
- drm/msm: Use the correct dma_sync calls in msm_gem (bsc#1051510).
- drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (bsc#1051510).
- drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from fw (bsc#1051510).
- drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (git-fixes).
- drm: rcar-du: Recognize 'renesas,vsps' in addition to 'vsps' (bsc#1114279)
- drm: remove the newline for CRC source name (bsc#1051510).
- drm/sun4i: de2/de3: Remove unsupported VI layer formats (git-fixes).
- drm/sun4i: dsi: Use NULL to signify 'no panel' (bsc#1111666).
- drm/sun4i: Fix DE2 VI layer format support (git-fixes).
- drm/v3d: Replace wait_for macros to remove use of msleep (bsc#1111666).
- drm/vc4: Fix HDMI mode validation (git-fixes).
- dt-bindings: allow up to four clocks for orion-mdio (bsc#1051510).
- EDAC, ghes: Make platform-based whitelisting x86-only (bsc#1158187).
- EDAC/mc: Fix use-after-free and memleaks during device removal (bsc#1114279).
- efi: Do not attempt to map RCI2 config table if it does not exist (jsc#ECO-366, bsc#1168367).
- efi: Export Runtime Configuration Interface table to sysfs (jsc#ECO-366, bsc#1168367).
- efi: Fix a race and a buffer overflow while reading efivars via sysfs (bsc#1164893).
- efi: x86: move efi_is_table_address() into arch/x86 (jsc#ECO-366, bsc#1168367).
- ethtool: Factored out similar ethtool link settings for virtual devices to core (bsc#1136157 ltc#177197).
- ext4: add cond_resched() to __ext4_find_entry() (bsc#1166862).
- ext4: Avoid ENOSPC when avoiding to reuse recently deleted inodes (bsc#1165019).
- ext4: Check for non-zero journal inum in ext4_calculate_overhead (bsc#1167288).
- ext4: do not assume that mmp_nodename/bdevname have NUL (bsc#1166860).
- ext4: fix a data race in EXT4_I(inode)-&gt;i_disksize (bsc#1166861).
- ext4: fix incorrect group count in ext4_fill_super error message (bsc#1168765).
- ext4: fix incorrect inodes per group in error message (bsc#1168764).
- ext4: fix potential race between online resizing and write operations (bsc#1166864).
- ext4: fix potential race between s_flex_groups online resizing and access (bsc#1166867).
- ext4: fix potential race between s_group_info online resizing and access (bsc#1166866).
- ext4: fix race between writepages and enabling EXT4_EXTENTS_FL (bsc#1166870).
- ext4: fix support for inode sizes &gt; 1024 bytes (bsc#1164284).
- ext4: potential crash on allocation error in ext4_alloc_flex_bg_array() (bsc#1166940).
- ext4: rename s_journal_flag_rwsem to s_writepages_rwsem (bsc#1166868).
- ext4: validate the debug_want_extra_isize mount option at parse time (bsc#1163897).
- fat: fix uninit-memory access for partial initialized inode (bsc#1051510).
- fat: work around race with userspace's read via blockdev while mounting (bsc#1051510).
- fbdev/g364fb: Fix build failure (bsc#1051510).
- fbdev: potential information leak in do_fb_ioctl() (bsc#1114279)
- fbmem: Adjust indentation in fb_prepare_logo and fb_blank (bsc#1114279)
- fcntl: fix typo in RWH_WRITE_LIFE_NOT_SET r/w hint name (bsc#1166003).
- firmware: arm_sdei: fix double-lock on hibernate with shared events (bsc#1111666).
- firmware: arm_sdei: fix possible double-lock on hibernate error path (bsc#1111666).
- firmware: imx: misc: Align imx sc msg structs to 4 (git-fixes).
- firmware: imx: scu: Ensure sequential TX (git-fixes).
- firmware: imx: scu-pd: Align imx sc msg structs to 4 (git-fixes).
- fix memory leak in large read decrypt offload (bsc#1144333).
- fs/cifs/cifssmb.c: use true,false for bool variable (bsc#1144333).
- fs: cifs: cifsssmb: remove redundant assignment to variable ret (bsc#1144333).
- fs: cifs: Initialize filesystem timestamp ranges (bsc#1144333).
- fs: cifs: mute -Wunused-const-variable message (bsc#1144333).
- fs/cifs/sess.c: Remove set but not used variable 'capabilities' (bsc#1144333).
- fs/cifs/smb2ops.c: use true,false for bool variable (bsc#1144333).
- fs/cifs/smb2pdu.c: Make SMB2_notify_init static (bsc#1144333).
- fs/xfs: fix f_ffree value for statfs when project quota is set (bsc#1165985).
- ftrace/kprobe: Show the maxactive number on kprobe_events (git-fixes).
- gtp: make sure only SOCK_DGRAM UDP sockets are accepted (networking-stable-20_01_27).
- gtp: use __GFP_NOWARN to avoid memalloc warning (networking-stable-20_02_05).
- HID: apple: Add support for recent firmware on Magic Keyboards (bsc#1051510).
- HID: core: fix off-by-one memset in hid_report_raw_event() (bsc#1051510).
- HID: hiddev: Fix race in in hiddev_disconnect() (git-fixes).
- hv_netvsc: Fix memory leak when removing rndis device (networking-stable-20_01_20).
- hwmon: (adt7462) Fix an error return in ADT7462_REG_VOLT() (bsc#1051510).
- i2c: hix5hd2: add missed clk_disable_unprepare in remove (bsc#1051510).
- i2c: jz4780: silence log flood on txabrt (bsc#1051510).
- IB/hfi1: Close window for pq and request coliding (bsc#1060463 ).
- IB/hfi1: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911).
- ibmvfc: do not send implicit logouts prior to NPIV login (bsc#1169625 ltc#184611).
- ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551).
- ibmvnic: Do not process device remove during device reset (bsc#1065729).
- ibmvnic: Warn unknown speed message only when carrier is present (bsc#1065729).
- iio: gyro: adis16136: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis16400: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis16480: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: magnetometer: ak8974: Fix negative raw values in sysfs (bsc#1051510).
- iio: potentiostat: lmp9100: fix iio_triggered_buffer_{predisable,postenable} positions (bsc#1051510).
- Input: add safety guards to input_set_keycode() (bsc#1168075).
- Input: avoid BIT() macro usage in the serio.h UAPI header (bsc#1051510).
- Input: edt-ft5x06 - work around first register access error (bsc#1051510).
- Input: raydium_i2c_ts - fix error codes in raydium_i2c_boot_trigger() (bsc#1051510).
- Input: synaptics - enable RMI on HP Envy 13-ad105ng (bsc#1051510).
- Input: synaptics - enable SMBus on ThinkPad L470 (bsc#1051510).
- Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list (bsc#1051510).
- Input: synaptics - switch T470s to RMI4 by default (bsc#1051510).
- intel_th: Fix user-visible error codes (bsc#1051510).
- intel_th: pci: Add Elkhart Lake CPU support (bsc#1051510).
- iommu/amd: Check feature support bit before accessing MSI capability registers (bsc#1166101).
- iommu/amd: Fix the configuration of GCR3 table root pointer (bsc#1169057).
- iommu/amd: Only support x2APIC with IVHD type 11h/40h (bsc#1166102).
- iommu/amd: Remap the IOMMU device table with the memory encryption mask for kdump (bsc#1141895).
- iommu/dma: Fix MSI reservation allocation (bsc#1166730).
- iommu/vt-d: dmar: replace WARN_TAINT with pr_warn + add_taint (bsc#1166731).
- iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys() for huge page (bsc#1166732).
- iommu/vt-d: Fix compile warning from intel-svm.h (bsc#1166103).
- iommu/vt-d: Fix the wrong printing in RHSA parsing (bsc#1166733).
- iommu/vt-d: Ignore devices with out-of-spec domain number (bsc#1166734).
- iommu/vt-d: quirk_ioat_snb_local_iommu: replace WARN_TAINT with pr_warn + add_taint (bsc#1166735).
- ipmi: fix hung processes in __get_guid() (bsc#1111666).
- ipmi: fix hung processes in __get_guid() (git-fixes).
- ipmi:ssif: Handle a possible NULL pointer reference (bsc#1051510).
- ipv4: ensure rcu_read_lock() in cipso_v4_error() (git-fixes).
- ipv6: Fix nlmsg_flags when splitting a multipath route (networking-stable-20_03_01).
- ipv6: Fix route replacement with dev-only route (networking-stable-20_03_01).
- ipv6: restrict IPV6_ADDRFORM operation (bsc#1109837).
- ipvlan: do not add hardware address of master to its unicast filter list (bsc#1137325).
- irqchip/bcm2835: Quiesce IRQs left enabled by bootloader (bsc#1051510).
- irqdomain: Fix a memory leak in irq_domain_push_irq() (bsc#1051510).
- iwlegacy: Fix -Wcast-function-type (bsc#1051510).
- iwlwifi: mvm: Do not require PHY_SKU NVM section for 3168 devices (bsc#1166632).
- iwlwifi: mvm: Fix thermal zone registration (bsc#1051510).
- kABI: fixes for debugfs per-file removal protection backports (bsc#1159198 bsc#1109911).
- kabi fix for (bsc#1168202).
- kABI: restore debugfs_remove_recursive() (bsc#1159198).
- kABI workaround for pcie_port_bus_type change (bsc#1161561).
- kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (bsc#1141895).
- kernel/module.c: Only return -EEXIST for modules that have finished loading (bsc#1165488).
- kernel/module.c: wakeup processes in module_wq on module unload (bsc#1165488).
- kexec: Allocate decrypted control pages for kdump if SME is enabled (bsc#1141895).
- KVM: arm64: Store vcpu on the stack during __guest_enter() (bsc#1133021).
- KVM: fix spectrev1 gadgets (bsc#1164705).
- KVM: s390: do not clobber registers during guest reset/store status (bsc#1133021).
- KVM: s390: ENOTSUPP -&gt; EOPNOTSUPP fixups (bsc#1133021).
- KVM: s390: vsie: Fix possible race when shadowing region 3 tables (git-fixes).
- KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks (git-fixes).
- KVM: VMX: check descriptor table exits on instruction emulation (bsc#1166104).
- KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks (bsc#1164734).
- KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks (bsc#1164728).
- KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks (bsc#1164729).
- KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF attacks (bsc#1164712).
- KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks (bsc#1164730).
- KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c (bsc#1164733).
- KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks (bsc#1164731).
- KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks (bsc#1164732).
- KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks (bsc#1164735).
- KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks (bsc#1164705).
- KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks (bsc#1164727).
- l2tp: Allow duplicate session creation with UDP (networking-stable-20_02_05).
- libceph: fix alloc_msg_with_page_vector() memory leaks (bsc#1169308).
- libfs: fix infoleak in simple_attr_read() (bsc#1168881).
- libnvdimm/pfn_dev: Do not clear device memmap area during generic namespace probe (bsc#1165929 bsc#1165950).
- libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields (bsc#1165929).
- libnvdimm: remove redundant __func__ in dev_dbg (bsc#1165929).
- lib/raid6: add missing include for raid6test (bsc#1166003).
- lib/raid6: add option to skip algo benchmarking (bsc#1166003).
- lib/raid6: avoid __attribute_const__ redefinition (bsc#1166003).
- lpfc: add support for translating an RSCN rcv into a discovery rescan (bsc#1164777 bsc#1164780 bsc#1165211).
- lpfc: add support to generate RSCN events for nport (bsc#1164777 bsc#1164780 bsc#1165211).
- mac80211: consider more elements in parsing CRC (bsc#1051510).
- mac80211: Do not send mesh HWMP PREQ if HWMP is disabled (bsc#1051510).
- mac80211: free peer keys before vif down in mesh (bsc#1051510).
- mac80211: mesh: fix RCU warning (bsc#1051510).
- mac80211: only warn once on chanctx_conf being NULL (bsc#1051510).
- mac80211: rx: avoid RCU list traversal under mutex (bsc#1051510).
- macsec: add missing attribute validation for port (bsc#1051510).
- macsec: fix refcnt leak in module exit routine (bsc#1051510).
- md: add __acquires/__releases annotations to handle_active_stripes (bsc#1166003).
- md: add __acquires/__releases annotations to (un)lock_two_stripes (bsc#1166003).
- md: add a missing endianness conversion in check_sb_changes (bsc#1166003).
- md: add bitmap_abort label in md_run (bsc#1166003).
- md: add feature flag MD_FEATURE_RAID0_LAYOUT (bsc#1166003).
- md: allow last device to be forcibly removed from RAID1/RAID10 (bsc#1166003).
- md: avoid invalid memory access for array sb-&gt;dev_roles (bsc#1166003).
- md/bitmap: avoid race window between md_bitmap_resize and bitmap_file_clear_bit (bsc#1166003).
- md-bitmap: create and destroy wb_info_pool with the change of backlog (bsc#1166003).
- md-bitmap: create and destroy wb_info_pool with the change of bitmap (bsc#1166003).
- md-bitmap: small cleanups (bsc#1166003).
- md/bitmap: use mddev_suspend/resume instead of -&gt;quiesce() (bsc#1166003).
- md-cluster/bitmap: do not call md_bitmap_sync_with_cluster during reshaping stage (bsc#1166003).
- md-cluster: introduce resync_info_get interface for sanity check (bsc#1166003).
- md-cluster/raid10: call update_size in md_reap_sync_thread (bsc#1166003).
- md-cluster/raid10: do not call remove_and_add_spares during reshaping stage (bsc#1166003).
- md-cluster/raid10: resize all the bitmaps before start reshape (bsc#1166003).
- md-cluster/raid10: support add disk under grow mode (bsc#1166003).
- md-cluster: remove suspend_info (bsc#1166003).
- md-cluster: send BITMAP_NEEDS_SYNC message if reshaping is interrupted (bsc#1166003).
- md: convert to kvmalloc (bsc#1166003).
- md: do not call spare_active in md_reap_sync_thread if all member devices can't work (bsc#1166003).
- md: do not set In_sync if array is frozen (bsc#1166003).
- md: fix a typo s/creat/create (bsc#1166003).
- md: fix for divide error in status_resync (bsc#1166003).
- md: fix spelling typo and add necessary space (bsc#1166003).
- md: introduce mddev_create/destroy_wb_pool for the change of member device (bsc#1166003).
- md-linear: use struct_size() in kzalloc() (bsc#1166003).
- md: Make bio_alloc_mddev use bio_alloc_bioset (bsc#1166003).
- md: make sure desc_nr less than MD_SB_DISKS (bsc#1166003).
- md: md.c: Return -ENODEV when mddev is NULL in rdev_attr_show (bsc#1166003).
- md: no longer compare spare disk superblock events in super_load (bsc#1166003).
- md/raid0: Fix an error message in raid0_make_request() (bsc#1166003).
- md raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone (bsc#1166003).
- md/raid10: end bio when the device faulty (bsc#1166003).
- md/raid10: Fix raid10 replace hang when new added disk faulty (bsc#1166003).
- md/raid10: prevent access of uninitialized resync_pages offset (bsc#1166003).
- md/raid10: read balance chooses idlest disk for SSD (bsc#1166003).
- md: raid10: Use struct_size() in kmalloc() (bsc#1166003).
- md/raid1: avoid soft lockup under high load (bsc#1166003).
- md: raid1: check rdev before reference in raid1_sync_request func (bsc#1166003).
- md/raid1: end bio when the device faulty (bsc#1166003).
- md/raid1: fail run raid1 array when active disk less than one (bsc#1166003).
- md/raid1: Fix a warning message in remove_wb() (bsc#1166003).
- md/raid1: fix potential data inconsistency issue with write behind device (bsc#1166003).
- md/raid1: get rid of extra blank line and space (bsc#1166003).
- md/raid5: use bio_end_sector to calculate last_sector (bsc#1166003).
- md/raid6: fix algorithm choice under larger PAGE_SIZE (bsc#1166003).
- md: remove set but not used variable 'bi_rdev' (bsc#1166003).
- md: return -ENODEV if rdev has no mddev assigned (bsc#1166003).
- md: use correct type in super_1_load (bsc#1166003).
- md: use correct type in super_1_sync (bsc#1166003).
- md: use correct types in md_bitmap_print_sb (bsc#1166003).
- media: dib0700: fix rc endpoint lookup (bsc#1051510).
- media: flexcop-usb: fix endpoint sanity check (git-fixes).
- media: go7007: Fix URB type for interrupt handling (bsc#1051510).
- media: ov519: add missing endpoint sanity checks (bsc#1168829).
- media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support (bsc#1051510).
- media: ov6650: Fix some format attributes not under control (bsc#1051510).
- media: ov6650: Fix stored crop rectangle not in sync with hardware (bsc#1051510).
- media: ov6650: Fix stored frame format not in sync with hardware (bsc#1051510).
- media: stv06xx: add missing descriptor sanity checks (bsc#1168854).
- media: tda10071: fix unsigned sign extension overflow (bsc#1051510).
- media: usbtv: fix control-message timeouts (bsc#1051510).
- media: uvcvideo: Refactor teardown of uvc on USB disconnect (bsc#1164507).
- media: v4l2-core: fix entity initialization in device_register_subdev (bsc#1051510).
- media: vsp1: tidyup VI6_HGT_LBn_H() macro (bsc#1051510).
- media: xirlink_cit: add missing descriptor sanity checks (bsc#1051510).
- mfd: dln2: Fix sanity checking for endpoints (bsc#1051510).
- misc: pci_endpoint_test: Fix to support &gt; 10 pci-endpoint-test devices (bsc#1051510).
- mlxsw: spectrum_qdisc: Include MC TCs in Qdisc counters (bsc#1112374).
- mlxsw: spectrum: Wipe xstats.backlog of down ports (bsc#1112374).
- mmc: sdhci-of-at91: fix cd-gpios for SAMA5D2 (bsc#1051510).
- mm/filemap.c: do not initiate writeback if mapping has no dirty pages (bsc#1168884).
- mm/memory_hotplug.c: only respect mem= parameter during boot stage (bsc#1065600).
- mm: replace PF_LESS_THROTTLE with PF_LOCAL_THROTTLE (bsc#1163403).
- mwifiex: set needed_headroom, not hard_header_len (bsc#1051510).
- net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM (networking-stable-20_01_27).
- net: dsa: bcm_sf2: Fix overflow checks (git-fixes).
- net: dsa: mv88e6xxx: Preserve priority when setting CPU port (networking-stable-20_01_11).
- net: dsa: tag_qca: fix doubled Tx statistics (networking-stable-20_01_20).
- net: dsa: tag_qca: Make sure there is headroom for tag (networking-stable-20_02_19).
- net: ena: Add PCI shutdown handler to allow safe kexec (bsc#1167421, bsc#1167423).
- net/ethtool: Introduce link_ksettings API for virtual network devices (bsc#1136157 ltc#177197).
- net: fib_rules: Correctly set table field when table number exceeds 8 bits (networking-stable-20_03_01).
- netfilter: conntrack: sctp: use distinct states for new SCTP connections (bsc#1159199).
- net: Fix Tx hash bound checking (bsc#1109837).
- net: hns3: fix a copying IPv6 address error in hclge_fd_get_flow_tuples() (bsc#1104353).
- net: hns: fix soft lockup when there is not enough memory (networking-stable-20_01_20).
- net: hsr: fix possible NULL deref in hsr_handle_frame() (networking-stable-20_02_05).
- net: ip6_gre: fix moving ip6gre between namespaces (networking-stable-20_01_27).
- net, ip6_tunnel: fix namespaces move (networking-stable-20_01_27).
- net, ip_tunnel: fix namespaces move (networking-stable-20_01_27).
- net: macb: Limit maximum GEM TX length in TSO (networking-stable-20_02_09).
- net: macb: Remove unnecessary alignment check for TSO (networking-stable-20_02_09).
- net/mlx5: Fix lowest FDB pool size (bsc#1103990).
- net/mlx5: IPsec, Fix esp modify function attribute (bsc#1103990 ).
- net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx (bsc#1103990).
- net/mlx5: Update the list of the PCI supported devices (bsc#1127611).
- net/mlxfw: Verify FSM error code translation does not exceed array size (bsc#1051858).
- net: mvneta: move rx_dropped and rx_errors in per-cpu stats (networking-stable-20_02_09).
- net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL (bsc#1051510).
- net: nfc: fix bounds checking bugs on 'pipe' (bsc#1051510).
- net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before accessing PHY registers (bsc#1051510).
- net: phy: restore mdio regs in the iproc mdio driver (networking-stable-20_03_01).
- net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link() (networking-stable-20_01_27).
- net: sched: correct flower port blocking (git-fixes).
- net_sched: ematch: reject invalid TCF_EM_SIMPLE (networking-stable-20_01_30).
- net_sched: fix an OOB access in cls_tcindex (networking-stable-20_02_05).
- net_sched: fix a resource leak in tcindex_set_parms() (networking-stable-20_02_09).
- net_sched: fix datalen for ematch (networking-stable-20_01_27).
- net/sched: flower: add missing validation of TCA_FLOWER_FLAGS (networking-stable-20_02_19).
- net_sched: keep alloc_hash updated after hash allocation (git-fixes).
- net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS (networking-stable-20_02_19).
- net: sch_prio: When ungrafting, replace with FIFO (networking-stable-20_01_11).
- net/smc: add fallback check to connect() (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: fix leak of kernel memory to user space (networking-stable-20_02_19).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- net: stmmac: Delete txtimer in suspend() (networking-stable-20_02_05).
- net: stmmac: dwmac-sunxi: Allow all RGMII modes (networking-stable-20_01_11).
- net-sysfs: Fix reference count leak (networking-stable-20_01_27).
- net: systemport: Avoid RBUF stuck in Wake-on-LAN mode (networking-stable-20_02_09).
- net/tls: fix async operation (bsc#1109837).
- net/tls: free the record on encryption error (bsc#1109837).
- net/tls: take into account that bpf_exec_tx_verdict() may free the record (bsc#1109837).
- net: usb: lan78xx: Add .ndo_features_check (networking-stable-20_01_27).
- net: usb: lan78xx: fix possible skb leak (networking-stable-20_01_11).
- net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info (networking-stable-20_01_20).
- NFC: fdp: Fix a signedness bug in fdp_nci_send_patch() (bsc#1051510).
- NFC: pn544: Fix a typo in a debug message (bsc#1051510).
- nfc: pn544: Fix occasional HW initialization failure (networking-stable-20_03_01).
- NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu() (bsc#1051510).
- NFS: send state management on a single connection (bsc#1167005).
- nvme: fix a possible deadlock when passthru commands sent to a multipath device (bsc#1158983).
- nvme: fix controller removal race with scan work (bsc#1158983).
- nvme: Fix parsing of ANA log page (bsc#1166658).
- nvme-multipath: also check for a disabled path if there is a single sibling (bsc#1158983).
- nvme-multipath: do not select namespaces which are about to be removed (bsc#1158983).
- nvme-multipath: factor out a nvme_path_is_disabled helper (bsc#1158983).
- nvme-multipath: fix crash in nvme_mpath_clear_ctrl_paths (bsc#1158983).
- nvme-multipath: fix possible io hang after ctrl reconnect (bsc#1158983).
- nvme-multipath: fix possible I/O hang when paths are updated (bsc#1158983).
- nvme-multipath: remove unused groups_only mode in ana log (bsc#1158983).
- nvme-multipath: round-robin I/O policy (bsc#1158983).
- nvme: resync include/linux/nvme.h with nvmecli (bsc#1156510).
- nvme: Translate more status codes to blk_status_t (bsc#1156510).
- objtool: Add is_static_jump() helper (bsc#1169514).
- objtool: Add relocation check for alternative sections (bsc#1169514).
- OMAP: DSS2: remove non-zero check on variable r (bsc#1114279)
- orinoco: avoid assertion in case of NULL pointer (bsc#1051510).
- padata: always acquire cpu_hotplug_lock before pinst-&gt;lock (git-fixes).
- partitions/efi: Fix partition name parsing in GUID partition entry (bsc#1168763).
- PCI/AER: Clear device status bits during ERR_COR handling (bsc#1161561).
- PCI/AER: Clear device status bits during ERR_FATAL and ERR_NONFATAL (bsc#1161561).
- PCI/AER: Clear only ERR_FATAL status bits during fatal recovery (bsc#1161561).
- PCI/AER: Clear only ERR_NONFATAL bits during non-fatal recovery (bsc#1161561).
- PCI/AER: Do not clear AER bits if error handling is Firmware-First (bsc#1161561).
- PCI/AER: Do not read upstream ports below fatal errors (bsc#1161561).
- PCI/AER: Factor message prefixes with dev_fmt() (bsc#1161561).
- PCI/AER: Factor out ERR_NONFATAL status bit clearing (bsc#1161561).
- PCI/AER: Log which device prevents error recovery (bsc#1161561).
- PCI/AER: Remove ERR_FATAL code from ERR_NONFATAL path (bsc#1161561).
- PCI/AER: Take reference on error devices (bsc#1161561).
- PCI/ASPM: Clear the correct bits when enabling L1 substates (bsc#1051510).
- PCI: endpoint: Fix clearing start entry in configfs (bsc#1051510).
- PCI/ERR: Always report current recovery status for udev (bsc#1161561).
- PCI/ERR: Handle fatal error recovery (bsc#1161561).
- PCI/ERR: Remove duplicated include from err.c (bsc#1161561).
- PCI/ERR: Run error recovery callbacks for all affected devices (bsc#1161561).
- PCI/ERR: Simplify broadcast callouts (bsc#1161561).
- PCI/ERR: Use slot reset if available (bsc#1161561).
- PCI/IOV: Fix memory leak in pci_iov_add_virtfn() (git-fixes).
- PCI: pciehp: Fix MSI interrupt race (bsc#1159037).
- PCI: portdrv: Initialize service drivers directly (bsc#1161561).
- PCI/portdrv: Remove pcie_port_bus_type link order dependency (bsc#1161561).
- PCI: Simplify disconnected marking (bsc#1161561).
- PCI/switchtec: Fix init_completion race condition with poll_wait() (bsc#1051510).
- PCI: Unify device inaccessible (bsc#1161561).
- perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag (bsc#1114279).
- perf: qcom_l2: fix column exclusion check (git-fixes).
- pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled pins (bsc#1051510).
- pinctrl: core: Remove extra kref_get which blocks hogs being freed (bsc#1051510).
- pinctrl: imx: scu: Align imx sc msg structs to 4 (git-fixes).
- pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs (bsc#1051510).
- pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs (bsc#1051510).
- pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM (networking-stable-20_01_11).
- platform/mellanox: fix potential deadlock in the tmfifo driver (bsc#1136333 jsc#SLE-4994).
- platform/x86: pmc_atom: Add Lex 2I385SW to critclk_systems DMI table (bsc#1051510).
- PM: core: Fix handling of devices deleted during system-wide resume (git-fixes).
- powerpc/64: mark start_here_multiplatform as __ref (bsc#1148868).
- powerpc/64s: Fix section mismatch warnings from boot code (bsc#1148868).
- powerpc/64/tm: Do not let userspace set regs-&gt;trap via sigreturn (bsc#1118338 ltc#173734).
- powerpc: fix hardware PMU exception bug on PowerVM compatibility mode systems (bsc#1056686).
- powerpc/hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE entries (bsc#1065729).
- powerpc/kprobes: Ignore traps that happened in real mode (bsc#1065729).
- powerpc/mm: Fix section mismatch warning in stop_machine_change_mapping() (bsc#1148868).
- powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (bsc#1160659).
- powerpc/pseries/ddw: Extend upper limit for huge DMA window for persistent memory (bsc#1142685 ltc#179509).
- powerpc/pseries: fix of_read_drc_info_cell() to point at next record (bsc#1165980 ltc#183834).
- powerpc/pseries: group lmb operation and memblock's (bsc#1165404 ltc#183498).
- powerpc/pseries/iommu: Fix set but not used values (bsc#1142685 ltc#179509).
- powerpc/pseries/iommu: Use memory@ nodes in max RAM address calculation (bsc#1142685 ltc#179509).
- powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (bsc#1165404 ltc#183498).
- powerpc/pseries: update device tree before ejecting hotplug uevents (bsc#1165404 ltc#183498).
- powerpc/smp: Use nid as fallback for package_id (bsc#1165813 ltc#184091).
- powerpc/vmlinux.lds: Explicitly retain .gnu.hash (bsc#1148868).
- powerpc/xive: Replace msleep(x) with msleep(OPAL_BUSY_DELAY_MS) (bsc#1085030).
- powerpc/xive: Use XIVE_BAD_IRQ instead of zero to catch non configured IPIs (bsc#1085030).
- ptr_ring: add include of linux/mm.h (bsc#1109837).
- pwm: bcm2835: Dynamically allocate base (bsc#1051510).
- pwm: meson: Fix confusing indentation (bsc#1051510).
- pwm: pca9685: Fix PWM/GPIO inter-operation (bsc#1051510).
- pwm: rcar: Fix late Runtime PM enablement (bsc#1051510).
- pwm: renesas-tpu: Fix late Runtime PM enablement (bsc#1051510).
- pxa168fb: fix release function mismatch in probe failure (bsc#1051510).
- qede: Fix race between rdma destroy workqueue and link change event (networking-stable-20_03_01).
- qmi_wwan: re-add DW5821e pre-production variant (bsc#1051510).
- qmi_wwan: unconditionally reject 2 ep interfaces (bsc#1051510).
- raid10: refactor common wait code from regular read/write request (bsc#1166003).
- raid1: factor out a common routine to handle the completion of sync write (bsc#1166003).
- raid1: simplify raid1_error function (bsc#1166003).
- raid1: use an int as the return value of raise_barrier() (bsc#1166003).
- raid5: block failing device if raid will be failed (bsc#1166003).
- raid5: do not increment read_errors on EILSEQ return (bsc#1166003).
- raid5: do not set STRIPE_HANDLE to stripe which is in batch list (bsc#1166003).
- raid5 improve too many read errors msg by adding limits (bsc#1166003).
- raid5: need to set STRIPE_HANDLE for batch head (bsc#1166003).
- raid5: remove STRIPE_OPS_REQ_PENDING (bsc#1166003).
- raid5: set write hint for PPL (bsc#1166003).
- raid5: use bio_end_sector in r5_next_bio (bsc#1166003).
- raid6/test: fix a compilation error (bsc#1166003).
- raid6/test: fix a compilation warning (bsc#1166003).
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (bsc#1103992).
- RDMA/hfi1: Fix memory leak in _dev_comp_vect_mappings_create (bsc#1114685).
- RDMA/uverbs: Verify MR access flags (bsc#1103992).
- remoteproc: Initialize rproc_class before use (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (git-fixes).
- rtlwifi: rtl_pci: Fix -Wcast-function-type (bsc#1051510).
- rxrpc: Fix insufficient receive notification generation (networking-stable-20_02_05).
- s390/cio: avoid duplicated 'ADD' uevents (git-fixes).
- s390/cio: generate delayed uevent for vfio-ccw subchannels (git-fixes).
- s390/cpuinfo: fix wrong output when CPU0 is offline (git-fixes).
- s390/diag: fix display of diagnose call statistics (git-fixes).
- s390/gmap: return proper error code on ksm unsharing (git-fixes).
- s390/mm: fix dynamic pagetable upgrade for hugetlbfs (bsc#1165182 LTC#184102).
- s390/pci: Fix unexpected write combine on resource (git-fixes).
- s390/qeth: cancel RX reclaim work earlier (git-fixes).
- s390/qeth: do not return -ENOTSUPP to userspace (git-fixes).
- s390/qeth: do not warn for napi with 0 budget (git-fixes).
- s390/qeth: fix off-by-one in RX copybreak check (git-fixes).
- s390/qeth: fix potential deadlock on workqueue flush (bsc#1165185 LTC#184108).
- s390/qeth: fix promiscuous mode after reset (git-fixes).
- s390/qeth: fix qdio teardown after early init error (git-fixes).
- s390/qeth: handle error due to unsupported transport mode (git-fixes).
- s390/qeth: handle error when backing RX buffer (git-fixes).
- s390/qeth: lock the card while changing its hsuid (git-fixes).
- s390/qeth: support net namespaces for L3 devices (git-fixes).
- s390/time: Fix clk type in get_tod_clock (git-fixes).
- s390/uv: Fix handling of length extensions (git-fixes).
- scsi: core: avoid repetitive logging of device offline messages (bsc#1145929).
- scsi: core: kABI fix offline_already (bsc#1145929).
- scsi: fc: Update Descriptor definition and add RDF and Link Integrity FPINs (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: fnic: do not queue commands during fwreset (bsc#1146539).
- scsi: ibmvfc: Add failed PRLI to cmd_status lookup array (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Byte swap status and error codes when logging (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Clean up transport events (bsc#1161951 ltc#183551).
- scsi: ibmvfc: constify dev_pm_ops structures (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Do not call fc_block_scsi_eh() on host reset (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551).
- scsi: ibmvfc: ibmvscsi: ibmvscsi_tgt: constify vio_device_id (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Mark expected switch fall-throughs (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Remove 'failed' from logged errors (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Remove unneeded semicolons (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: change strncpy+truncation to strlcpy (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: constify dev_pm_ops structures (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Do not use rc uninitialized in ibmvscsi_do_work (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: fix tripping of blk_mq_run_hw_queue WARN_ON (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Improve strings handling (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: redo driver work thread to use enum action states (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Wire up host_reset() in the driver's scsi_host_template (bsc#1161951 ltc#183551).
- scsi: lpfc: add RDF registration and Link Integrity FPIN logging (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Change default SCSI LUN QD to 64 (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654).
- scsi: lpfc: Clean up hba max_lun_queue_depth checks (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Copyright updates for 12.6.0.4 patches (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix broken Credit Recovery after driver load (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix compiler warning on frame size (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix coverity errors in fmdi attribute handling (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix crash after handling a pci error (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix disablement of FC-AL on lpe35000 models (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix driver nvme rescan logging (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix erroneous cpu limit of 128 on I/O statistics (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix Fabric hostname registration if system hostname changes (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix improper flag check for IO type (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix incomplete NVME discovery when target (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lockdep error - register non-static key (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lpfc_io_buf resource leak in lpfc_get_scsi_buf_s4 error path (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lpfc overwrite of sg_cnt field in nvmefc_tgt_fcp_req (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix MDS Latency Diagnostics Err-drop rates (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix missing check for CSF in Write Object Mbox Rsp (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix ras_log via debugfs (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix registration of ELS type support in fdmi (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix release of hwq to clear the eq relationship (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix: Rework setting of fdmi symbolic node name registration (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix RQ buffer leakage when no IOCBs available (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix scsi host template for SLI3 vports (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: fix spelling mistake 'Notication' -&gt; 'Notification' (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: fix spelling mistakes of asynchronous (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix unmap of dpp bars affecting next driver load (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix update of wq consumer index in lpfc_sli4_wq_release (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Make debugfs ktime stats generic for NVME and SCSI (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Make lpfc_defer_acc_rsp static (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Remove handler for obsolete ELS - Read Port Status (RPS) (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Remove prototype FIPS/DSS options from SLI-3 (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Update lpfc version to 12.6.0.3 (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Update lpfc version to 12.6.0.4 (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Update lpfc version to 12.8.0.0 (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: qla2xxx: Add 16.0GT for PCI String (bsc#1157424).
- scsi: qla2xxx: Add beacon LED config sysfs interface (bsc#1157424).
- scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (bsc#1157424).
- scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (bsc#1157424).
- scsi: qla2xxx: Add endianizer macro calls to fc host stats (bsc#1157424).
- scsi: qla2xxx: Add fixes for mailbox command (bsc#1157424).
- scsi: qla2xxx: add more FW debug information (bsc#1157424).
- scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (bsc#1157424).
- scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (bsc#1157424).
- scsi: qla2xxx: Add vendor extended FDMI commands (bsc#1157424).
- scsi: qla2xxx: Add vendor extended RDP additions and amendments (bsc#1157424).
- scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options (bsc#1157424).
- scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb() (bsc#1157424).
- scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (bsc#1157424).
- scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function (bsc#1157424).
- scsi: qla2xxx: Correction to selection of loopback/echo test (bsc#1157424).
- scsi: qla2xxx: Display message for FCE enabled (bsc#1157424).
- scsi: qla2xxx: Fix control flags for login/logout IOCB (bsc#1157424).
- scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (bsc#1157424).
- scsi: qla2xxx: fix FW resource count values (bsc#1157424).
- scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (bsc#1157424).
- scsi: qla2xxx: Fix NPIV instantiation after FW dump (bsc#1157424).
- scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (bsc#1157424).
- scsi: qla2xxx: Fix RDP respond data format (bsc#1157424).
- scsi: qla2xxx: Fix RDP response size (bsc#1157424).
- scsi: qla2xxx: Fix sparse warning reported by kbuild bot (bsc#1157424).
- scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code (bsc#1157424).
- scsi: qla2xxx: Force semaphore on flash validation failure (bsc#1157424).
- scsi: qla2xxx: Handle cases for limiting RDP response payload length (bsc#1157424).
- scsi: qla2xxx: Handle NVME status iocb correctly (bsc#1157424).
- scsi: qla2xxx: Improved secure flash support messages (bsc#1157424).
- scsi: qla2xxx: Move free of fcport out of interrupt context (bsc#1157424).
- scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (bsc#1157424).
- scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (bsc#1157424).
- scsi: qla2xxx: Return appropriate failure through BSG Interface (bsc#1157424).
- scsi: qla2xxx: Save rscn_gen for new fcport (bsc#1157424).
- scsi: qla2xxx: Serialize fc_port alloc in N2N (bsc#1157424).
- scsi: qla2xxx: Set Nport ID for N2N (bsc#1157424).
- scsi: qla2xxx: Show correct port speed capabilities for RDP command (bsc#1157424).
- scsi: qla2xxx: Simplify the code for aborting SCSI commands (bsc#1157424).
- scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop() (bsc#1157424).
- scsi: qla2xxx: Update BPM enablement semantics (bsc#1157424).
- scsi: qla2xxx: Update driver version to 10.01.00.24-k (bsc#1157424).
- scsi: qla2xxx: Update driver version to 10.01.00.25-k (bsc#1157424).
- scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required' ISPs (bsc#1157424).
- scsi: qla2xxx: Use correct ISP28xx active FW region (bsc#1157424).
- scsi: qla2xxx: Use endian macros to assign static fields in fwdump header (bsc#1157424).
- scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx (bsc#1157424).
- scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (bsc#1157424).
- scsi: tcm_qla2xxx: Make qlt_alloc_qfull_cmd() set cmd-&gt;se_cmd.map_tag (bsc#1157424).
- scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point (git-fixes).
- sctp: free cmd-&gt;obj.chunk for the unprocessed SCTP_CMD_REPLY (networking-stable-20_01_11).
- sctp: move the format error check out of __sctp_sf_do_9_1_abort (networking-stable-20_03_01).
- serdev: ttyport: restore client ops on deregistration (bsc#1051510).
- smb3: add debug messages for closing unmatched open (bsc#1144333).
- smb3: Add defines for new information level, FileIdInformation (bsc#1144333).
- smb3: add dynamic tracepoints for flush and close (bsc#1144333).
- smb3: add missing flag definitions (bsc#1144333).
- smb3: Add missing reparse tags (bsc#1144333).
- smb3: add missing worker function for SMB3 change notify (bsc#1144333).
- smb3: add mount option to allow forced caching of read only share (bsc#1144333).
- smb3: add mount option to allow RW caching of share accessed by only 1 client (bsc#1144333).
- smb3: add one more dynamic tracepoint missing from strict fsync path (bsc#1144333).
- smb3: add some more descriptive messages about share when mounting cache=ro (bsc#1144333).
- smb3: allow decryption keys to be dumped by admin for debugging (bsc#1144333).
- smb3: allow disabling requesting leases (bsc#1144333).
- smb3: allow parallelizing decryption of reads (bsc#1144333).
- smb3: allow skipping signature verification for perf sensitive configurations (bsc#1144333).
- SMB3: Backup intent flag missing from some more ops (bsc#1144333).
- smb3: cleanup some recent endian errors spotted by updated sparse (bsc#1144333).
- smb3: display max smb3 requests in flight at any one time (bsc#1144333).
- smb3: dump in_send and num_waiters stats counters by default (bsc#1144333).
- smb3: enable offload of decryption of large reads via mount option (bsc#1144333).
- smb3: fix default permissions on new files when mounting with modefromsid (bsc#1144333).
- smb3: fix mode passed in on create for modetosid mount option (bsc#1144333).
- smb3: fix performance regression with setting mtime (bsc#1144333).
- smb3: fix potential null dereference in decrypt offload (bsc#1144333).
- smb3: fix problem with null cifs super block with previous patch (bsc#1144333).
- smb3: Fix regression in time handling (bsc#1144333).
- smb3: improve check for when we send the security descriptor context on create (bsc#1144333).
- smb3: log warning if CSC policy conflicts with cache mount option (bsc#1144333).
- smb3: missing ACL related flags (bsc#1144333).
- smb3: only offload decryption of read responses if multiple requests (bsc#1144333).
- smb3: pass mode bits into create calls (bsc#1144333).
- smb3: print warning once if posix context returned on open  (bsc#1144333).
- smb3: query attributes on file close (bsc#1144333).
- smb3: remove noisy debug message and minor cleanup (bsc#1144333).
- smb3: remove unused flag passed into close functions (bsc#1144333).
- staging: ccree: use signal safe completion wait (git-fixes).
- staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table (bsc#1051510).
- staging: rtl8188eu: Fix potential overuse of kernel memory (bsc#1051510).
- staging: rtl8188eu: Fix potential security hole (bsc#1051510).
- staging: rtl8723bs: Fix potential overuse of kernel memory (bsc#1051510).
- staging: rtl8723bs: Fix potential security hole (bsc#1051510).
- staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi (bsc#1051510).
- staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb (bsc#1051510).
- staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback (bsc#1051510).
- SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202).
- SUNRPC: Fix svcauth_gss_proxy_init() (bsc#1103992).
- swiotlb: do not panic on mapping failures (bsc#1162171).
- swiotlb: remove the overflow buffer (bsc#1162171).
- tcp_bbr: improve arithmetic division in bbr_update_bw() (networking-stable-20_01_27).
- tcp: clear tp-&gt;data_segs{in|out} in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;delivered in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;segs_{in|out} in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;total_retrans in tcp_disconnect() (networking-stable-20_02_05).
- tcp: fix marked lost packets not being retransmitted (networking-stable-20_01_20).
- tcp: fix 'old stuff' D-SACK causing SACK to be treated as D-SACK (networking-stable-20_01_11).
- thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n (bsc#1051510).
- thunderbolt: Prevent crash if non-active NVMem file is read (git-fixes).
- tick: broadcast-hrtimer: Fix a race in bc_set_next (bsc#1044231).
- tools lib traceevent: Do not free tep-&gt;cmdlines in add_new_comm() on failure (git-fixes).
- tools: Update include/uapi/linux/fcntl.h copy from the kernel (bsc#1166003).
- tpm: ibmvtpm: Wait for buffer to be set before proceeding (bsc#1065729).
- tty: evh_bytechan: Fix out of bounds accesses (bsc#1051510).
- ttyprintk: fix a potential deadlock in interrupt context issue (git-fixes).
- tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode (bsc#1051510).
- tty: serial: imx: setup the correct sg entry for tx dma (bsc#1051510).
- tun: add mutex_unlock() call and napi.skb clearing in tun_get_user() (bsc#1109837).
- USB: audio-v2: Add uac2_effect_unit_descriptor definition (bsc#1051510).
- USB: cdc-acm: fix rounding error in TIOCSSERIAL (git-fixes).
- USB: core: add endpoint-blacklist quirk (git-fixes).
- USB: core: hub: do error out if usb_autopm_get_interface() fails (git-fixes).
- USB: core: port: do error out if usb_autopm_get_interface() fails (git-fixes).
- USB: Disable LPM on WD19's Realtek Hub (git-fixes).
- USB: dwc2: Fix in ISOC request length checking (git-fixes).
- USB: Fix novation SourceControl XL after suspend (git-fixes).
- USB: gadget: composite: Fix bMaxPower for SuperSpeedPlus (git-fixes).
- USB: gadget: f_fs: Fix use after free issue as part of queue failure (bsc#1051510).
- USB: host: xhci-plat: add a shutdown (git-fixes).
- USB: host: xhci: update event ring dequeue pointer on purpose (git-fixes).
- USB: hub: Do not record a connect-change event during reset-resume (git-fixes).
- usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() (git-fixes).
- USB: misc: iowarrior: add support for 2 OEMed devices (git-fixes).
- USB: misc: iowarrior: add support for the 100 device (git-fixes).
- USB: misc: iowarrior: add support for the 28 and 28L devices (git-fixes).
- USB: musb: Disable pullup at init (git-fixes).
- USB: musb: fix crash with highmen PIO and usbmon (bsc#1051510).
- USB: quirks: add NO_LPM quirk for Logitech Screen Share (git-fixes).
- USB: quirks: add NO_LPM quirk for RTL8153 based ethernet adapters (git-fixes).
- USB: quirks: blacklist duplicate ep on Sound Devices USBPre2 (git-fixes).
- USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback (bsc#1051510).
- USB: serial: option: add ME910G1 ECM composition 0x110b (git-fixes).
- USB: serial: pl2303: add device-id for HP LD381 (git-fixes).
- USB: storage: Add quirk for Samsung Fit flash (git-fixes).
- USB: uas: fix a plug &amp; unplug racing (git-fixes).
- USB: xhci: apply XHCI_SUSPEND_DELAY to AMD XHCI controller 1022:145c (git-fixes).
- uvcvideo: Refactor teardown of uvc on USB disconnect (bsc#1164507)
- vgacon: Fix a UAF in vgacon_invert_region (bsc#1114279)
- virtio-blk: fix hw_queue stopped on arbitrary error (git-fixes).
- virtio-blk: improve virtqueue error to BLK_STS (bsc#1167627).
- virtio_ring: fix unmap of indirect descriptors (bsc#1162171).
- vlan: fix memory leak in vlan_dev_set_egress_priority (networking-stable-20_01_11).
- vlan: vlan_changelink() should propagate errors (networking-stable-20_01_11).
- vxlan: fix tos value before xmit (networking-stable-20_01_11).
- x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF (bsc#1114279).
- x86/ioremap: Add an ioremap_encrypted() helper (bsc#1141895).
- x86/kdump: Export the SME mask to vmcoreinfo (bsc#1141895).
- x86/mce/amd: Fix kobject lifetime (bsc#1114279).
- x86/mce/amd: Publish the bank pointer only after setup has succeeded (bsc#1114279).
- x86/mce: Fix logic and comments around MSR_PPIN_CTL (bsc#1114279).
- x86/mm: Split vmalloc_sync_all() (bsc#1165741).
- x86/pkeys: Manually set X86_FEATURE_OSPKE to preserve existing changes (bsc#1114279).
- x86/xen: fix booting 32-bit pv guest (bsc#1071995).
- x86/xen: Make the boot CPU idle task reliable (bsc#1071995).
- x86/xen: Make the secondary CPU idle tasks reliable (bsc#1071995).
- xen/blkfront: fix memory allocation flags in blkfront_setup_indirect() (bsc#1168486).
- xfs: also remove cached ACLs when removing the underlying attr (bsc#1165873).
- xfs: bulkstat should copy lastip whenever userspace supplies one (bsc#1165984).
- xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms (git-fixes).
- xhci: Do not open code __print_symbolic() in xhci trace events (git-fixes).
- xhci: fix runtime pm enabling for quirky Intel hosts (bsc#1051510).
- xhci: Force Maximum Packet size for Full-speed bulk devices to valid range (bsc#1051510).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-23"/>
	<updated date="2020-04-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1044231">SUSE bug 1044231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051858">SUSE bug 1051858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056686">SUSE bug 1056686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060463">SUSE bug 1060463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109911">SUSE bug 1109911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111974">SUSE bug 1111974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118338">SUSE bug 1118338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119680">SUSE bug 1119680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120386">SUSE bug 1120386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136157">SUSE bug 1136157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136333">SUSE bug 1136333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137325">SUSE bug 1137325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141895">SUSE bug 1141895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145051">SUSE bug 1145051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145929">SUSE bug 1145929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146539">SUSE bug 1146539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156510">SUSE bug 1156510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158187">SUSE bug 1158187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158983">SUSE bug 1158983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159037">SUSE bug 1159037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159198">SUSE bug 1159198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159199">SUSE bug 1159199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159285">SUSE bug 1159285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160659">SUSE bug 1160659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161561">SUSE bug 1161561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161951">SUSE bug 1161951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162171">SUSE bug 1162171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162929">SUSE bug 1162929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162931">SUSE bug 1162931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163403">SUSE bug 1163403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163897">SUSE bug 1163897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163971">SUSE bug 1163971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164078">SUSE bug 1164078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164284">SUSE bug 1164284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164507">SUSE bug 1164507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164705">SUSE bug 1164705</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164712">SUSE bug 1164712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164727">SUSE bug 1164727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164728">SUSE bug 1164728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164729">SUSE bug 1164729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164730">SUSE bug 1164730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164731">SUSE bug 1164731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164732">SUSE bug 1164732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164733">SUSE bug 1164733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164734">SUSE bug 1164734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164735">SUSE bug 1164735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164777">SUSE bug 1164777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164893">SUSE bug 1164893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165019">SUSE bug 1165019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165111">SUSE bug 1165111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165182">SUSE bug 1165182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165185">SUSE bug 1165185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165211">SUSE bug 1165211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165404">SUSE bug 1165404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165488">SUSE bug 1165488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165527">SUSE bug 1165527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165741">SUSE bug 1165741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165813">SUSE bug 1165813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165823">SUSE bug 1165823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165873">SUSE bug 1165873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165929">SUSE bug 1165929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165949">SUSE bug 1165949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165950">SUSE bug 1165950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165980">SUSE bug 1165980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165984">SUSE bug 1165984</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165985">SUSE bug 1165985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166003">SUSE bug 1166003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166101">SUSE bug 1166101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166102">SUSE bug 1166102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166103">SUSE bug 1166103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166104">SUSE bug 1166104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166632">SUSE bug 1166632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166658">SUSE bug 1166658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166730">SUSE bug 1166730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166731">SUSE bug 1166731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166732">SUSE bug 1166732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166733">SUSE bug 1166733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166734">SUSE bug 1166734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166735">SUSE bug 1166735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166780">SUSE bug 1166780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166860">SUSE bug 1166860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166861">SUSE bug 1166861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166862">SUSE bug 1166862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166864">SUSE bug 1166864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166866">SUSE bug 1166866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166867">SUSE bug 1166867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166868">SUSE bug 1166868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166870">SUSE bug 1166870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166940">SUSE bug 1166940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166982">SUSE bug 1166982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167005">SUSE bug 1167005</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167216">SUSE bug 1167216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167288">SUSE bug 1167288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167290">SUSE bug 1167290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167316">SUSE bug 1167316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167421">SUSE bug 1167421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167423">SUSE bug 1167423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167627">SUSE bug 1167627</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167629">SUSE bug 1167629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168075">SUSE bug 1168075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168202">SUSE bug 1168202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168273">SUSE bug 1168273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168276">SUSE bug 1168276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168295">SUSE bug 1168295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168367">SUSE bug 1168367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168424">SUSE bug 1168424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168443">SUSE bug 1168443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168486">SUSE bug 1168486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168552">SUSE bug 1168552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168760">SUSE bug 1168760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168762">SUSE bug 1168762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168763">SUSE bug 1168763</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168764">SUSE bug 1168764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168765">SUSE bug 1168765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168829">SUSE bug 1168829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168854">SUSE bug 1168854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168881">SUSE bug 1168881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168884">SUSE bug 1168884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168952">SUSE bug 1168952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169013">SUSE bug 1169013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169057">SUSE bug 1169057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169307">SUSE bug 1169307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169308">SUSE bug 1169308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169390">SUSE bug 1169390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169625">SUSE bug 1169625</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19768/">CVE-2019-19768</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19770/">CVE-2019-19770</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3701/">CVE-2019-3701</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9458/">CVE-2019-9458</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10942/">CVE-2020-10942</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11494/">CVE-2020-11494</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11669/">CVE-2020-11669</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2732/">CVE-2020-2732</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8647/">CVE-2020-8647</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8649/">CVE-2020-8649</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8834/">CVE-2020-8834</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-9383/">CVE-2020-9383</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498038" comment="kernel-azure-4.12.14-8.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498039" comment="kernel-azure-base-4.12.14-8.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498040" comment="kernel-azure-devel-4.12.14-8.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498041" comment="kernel-devel-azure-4.12.14-8.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498042" comment="kernel-source-azure-4.12.14-8.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498043" comment="kernel-syms-azure-4.12.14-8.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138856" version="1" class="patch">
	<metadata>
		<title>Security update for rmt-server (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1165548" ref_url="https://bugzilla.suse.com/1165548" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:1213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006796.html" source="SUSE-SU"/>
		<description>
This update for rmt-server to version 2.5.7 fixes the following issues:

- Fixed a local denial of service (bsc#1165548).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-07"/>
	<updated date="2020-05-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1165548">SUSE bug 1165548</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498044" comment="rmt-server-pubcloud-2.5.7-3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138857" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1089895" ref_url="https://bugzilla.suse.com/1089895" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1124278" ref_url="https://bugzilla.suse.com/1124278" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127355" ref_url="https://bugzilla.suse.com/1127355" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1151794" ref_url="https://bugzilla.suse.com/1151794" source="BUGZILLA"/>
		<reference ref_id="1152489" ref_url="https://bugzilla.suse.com/1152489" source="BUGZILLA"/>
		<reference ref_id="1154824" ref_url="https://bugzilla.suse.com/1154824" source="BUGZILLA"/>
		<reference ref_id="1157169" ref_url="https://bugzilla.suse.com/1157169" source="BUGZILLA"/>
		<reference ref_id="1158265" ref_url="https://bugzilla.suse.com/1158265" source="BUGZILLA"/>
		<reference ref_id="1160388" ref_url="https://bugzilla.suse.com/1160388" source="BUGZILLA"/>
		<reference ref_id="1160947" ref_url="https://bugzilla.suse.com/1160947" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1164871" ref_url="https://bugzilla.suse.com/1164871" source="BUGZILLA"/>
		<reference ref_id="1165183" ref_url="https://bugzilla.suse.com/1165183" source="BUGZILLA"/>
		<reference ref_id="1165478" ref_url="https://bugzilla.suse.com/1165478" source="BUGZILLA"/>
		<reference ref_id="1165741" ref_url="https://bugzilla.suse.com/1165741" source="BUGZILLA"/>
		<reference ref_id="1166969" ref_url="https://bugzilla.suse.com/1166969" source="BUGZILLA"/>
		<reference ref_id="1166978" ref_url="https://bugzilla.suse.com/1166978" source="BUGZILLA"/>
		<reference ref_id="1167574" ref_url="https://bugzilla.suse.com/1167574" source="BUGZILLA"/>
		<reference ref_id="1167851" ref_url="https://bugzilla.suse.com/1167851" source="BUGZILLA"/>
		<reference ref_id="1167867" ref_url="https://bugzilla.suse.com/1167867" source="BUGZILLA"/>
		<reference ref_id="1168332" ref_url="https://bugzilla.suse.com/1168332" source="BUGZILLA"/>
		<reference ref_id="1168670" ref_url="https://bugzilla.suse.com/1168670" source="BUGZILLA"/>
		<reference ref_id="1168789" ref_url="https://bugzilla.suse.com/1168789" source="BUGZILLA"/>
		<reference ref_id="1169020" ref_url="https://bugzilla.suse.com/1169020" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169525" ref_url="https://bugzilla.suse.com/1169525" source="BUGZILLA"/>
		<reference ref_id="1169762" ref_url="https://bugzilla.suse.com/1169762" source="BUGZILLA"/>
		<reference ref_id="1170056" ref_url="https://bugzilla.suse.com/1170056" source="BUGZILLA"/>
		<reference ref_id="1170125" ref_url="https://bugzilla.suse.com/1170125" source="BUGZILLA"/>
		<reference ref_id="1170145" ref_url="https://bugzilla.suse.com/1170145" source="BUGZILLA"/>
		<reference ref_id="1170284" ref_url="https://bugzilla.suse.com/1170284" source="BUGZILLA"/>
		<reference ref_id="1170345" ref_url="https://bugzilla.suse.com/1170345" source="BUGZILLA"/>
		<reference ref_id="1170457" ref_url="https://bugzilla.suse.com/1170457" source="BUGZILLA"/>
		<reference ref_id="1170522" ref_url="https://bugzilla.suse.com/1170522" source="BUGZILLA"/>
		<reference ref_id="1170592" ref_url="https://bugzilla.suse.com/1170592" source="BUGZILLA"/>
		<reference ref_id="1170617" ref_url="https://bugzilla.suse.com/1170617" source="BUGZILLA"/>
		<reference ref_id="1170618" ref_url="https://bugzilla.suse.com/1170618" source="BUGZILLA"/>
		<reference ref_id="1170620" ref_url="https://bugzilla.suse.com/1170620" source="BUGZILLA"/>
		<reference ref_id="1170621" ref_url="https://bugzilla.suse.com/1170621" source="BUGZILLA"/>
		<reference ref_id="1170770" ref_url="https://bugzilla.suse.com/1170770" source="BUGZILLA"/>
		<reference ref_id="1170778" ref_url="https://bugzilla.suse.com/1170778" source="BUGZILLA"/>
		<reference ref_id="1170791" ref_url="https://bugzilla.suse.com/1170791" source="BUGZILLA"/>
		<reference ref_id="1170901" ref_url="https://bugzilla.suse.com/1170901" source="BUGZILLA"/>
		<reference ref_id="1171078" ref_url="https://bugzilla.suse.com/1171078" source="BUGZILLA"/>
		<reference ref_id="1171098" ref_url="https://bugzilla.suse.com/1171098" source="BUGZILLA"/>
		<reference ref_id="1171118" ref_url="https://bugzilla.suse.com/1171118" source="BUGZILLA"/>
		<reference ref_id="1171189" ref_url="https://bugzilla.suse.com/1171189" source="BUGZILLA"/>
		<reference ref_id="1171191" ref_url="https://bugzilla.suse.com/1171191" source="BUGZILLA"/>
		<reference ref_id="1171195" ref_url="https://bugzilla.suse.com/1171195" source="BUGZILLA"/>
		<reference ref_id="1171202" ref_url="https://bugzilla.suse.com/1171202" source="BUGZILLA"/>
		<reference ref_id="1171205" ref_url="https://bugzilla.suse.com/1171205" source="BUGZILLA"/>
		<reference ref_id="1171214" ref_url="https://bugzilla.suse.com/1171214" source="BUGZILLA"/>
		<reference ref_id="1171217" ref_url="https://bugzilla.suse.com/1171217" source="BUGZILLA"/>
		<reference ref_id="1171218" ref_url="https://bugzilla.suse.com/1171218" source="BUGZILLA"/>
		<reference ref_id="1171219" ref_url="https://bugzilla.suse.com/1171219" source="BUGZILLA"/>
		<reference ref_id="1171220" ref_url="https://bugzilla.suse.com/1171220" source="BUGZILLA"/>
		<reference ref_id="1171244" ref_url="https://bugzilla.suse.com/1171244" source="BUGZILLA"/>
		<reference ref_id="1171293" ref_url="https://bugzilla.suse.com/1171293" source="BUGZILLA"/>
		<reference ref_id="1171417" ref_url="https://bugzilla.suse.com/1171417" source="BUGZILLA"/>
		<reference ref_id="1171527" ref_url="https://bugzilla.suse.com/1171527" source="BUGZILLA"/>
		<reference ref_id="1171599" ref_url="https://bugzilla.suse.com/1171599" source="BUGZILLA"/>
		<reference ref_id="1171600" ref_url="https://bugzilla.suse.com/1171600" source="BUGZILLA"/>
		<reference ref_id="1171601" ref_url="https://bugzilla.suse.com/1171601" source="BUGZILLA"/>
		<reference ref_id="1171602" ref_url="https://bugzilla.suse.com/1171602" source="BUGZILLA"/>
		<reference ref_id="1171604" ref_url="https://bugzilla.suse.com/1171604" source="BUGZILLA"/>
		<reference ref_id="1171605" ref_url="https://bugzilla.suse.com/1171605" source="BUGZILLA"/>
		<reference ref_id="1171606" ref_url="https://bugzilla.suse.com/1171606" source="BUGZILLA"/>
		<reference ref_id="1171607" ref_url="https://bugzilla.suse.com/1171607" source="BUGZILLA"/>
		<reference ref_id="1171608" ref_url="https://bugzilla.suse.com/1171608" source="BUGZILLA"/>
		<reference ref_id="1171609" ref_url="https://bugzilla.suse.com/1171609" source="BUGZILLA"/>
		<reference ref_id="1171610" ref_url="https://bugzilla.suse.com/1171610" source="BUGZILLA"/>
		<reference ref_id="1171611" ref_url="https://bugzilla.suse.com/1171611" source="BUGZILLA"/>
		<reference ref_id="1171612" ref_url="https://bugzilla.suse.com/1171612" source="BUGZILLA"/>
		<reference ref_id="1171613" ref_url="https://bugzilla.suse.com/1171613" source="BUGZILLA"/>
		<reference ref_id="1171614" ref_url="https://bugzilla.suse.com/1171614" source="BUGZILLA"/>
		<reference ref_id="1171615" ref_url="https://bugzilla.suse.com/1171615" source="BUGZILLA"/>
		<reference ref_id="1171616" ref_url="https://bugzilla.suse.com/1171616" source="BUGZILLA"/>
		<reference ref_id="1171617" ref_url="https://bugzilla.suse.com/1171617" source="BUGZILLA"/>
		<reference ref_id="1171618" ref_url="https://bugzilla.suse.com/1171618" source="BUGZILLA"/>
		<reference ref_id="1171619" ref_url="https://bugzilla.suse.com/1171619" source="BUGZILLA"/>
		<reference ref_id="1171620" ref_url="https://bugzilla.suse.com/1171620" source="BUGZILLA"/>
		<reference ref_id="1171621" ref_url="https://bugzilla.suse.com/1171621" source="BUGZILLA"/>
		<reference ref_id="1171622" ref_url="https://bugzilla.suse.com/1171622" source="BUGZILLA"/>
		<reference ref_id="1171623" ref_url="https://bugzilla.suse.com/1171623" source="BUGZILLA"/>
		<reference ref_id="1171624" ref_url="https://bugzilla.suse.com/1171624" source="BUGZILLA"/>
		<reference ref_id="1171625" ref_url="https://bugzilla.suse.com/1171625" source="BUGZILLA"/>
		<reference ref_id="1171626" ref_url="https://bugzilla.suse.com/1171626" source="BUGZILLA"/>
		<reference ref_id="1171662" ref_url="https://bugzilla.suse.com/1171662" source="BUGZILLA"/>
		<reference ref_id="1171679" ref_url="https://bugzilla.suse.com/1171679" source="BUGZILLA"/>
		<reference ref_id="1171691" ref_url="https://bugzilla.suse.com/1171691" source="BUGZILLA"/>
		<reference ref_id="1171692" ref_url="https://bugzilla.suse.com/1171692" source="BUGZILLA"/>
		<reference ref_id="1171694" ref_url="https://bugzilla.suse.com/1171694" source="BUGZILLA"/>
		<reference ref_id="1171695" ref_url="https://bugzilla.suse.com/1171695" source="BUGZILLA"/>
		<reference ref_id="1171736" ref_url="https://bugzilla.suse.com/1171736" source="BUGZILLA"/>
		<reference ref_id="1171817" ref_url="https://bugzilla.suse.com/1171817" source="BUGZILLA"/>
		<reference ref_id="1171948" ref_url="https://bugzilla.suse.com/1171948" source="BUGZILLA"/>
		<reference ref_id="1171949" ref_url="https://bugzilla.suse.com/1171949" source="BUGZILLA"/>
		<reference ref_id="1171951" ref_url="https://bugzilla.suse.com/1171951" source="BUGZILLA"/>
		<reference ref_id="1171952" ref_url="https://bugzilla.suse.com/1171952" source="BUGZILLA"/>
		<reference ref_id="1171979" ref_url="https://bugzilla.suse.com/1171979" source="BUGZILLA"/>
		<reference ref_id="1171982" ref_url="https://bugzilla.suse.com/1171982" source="BUGZILLA"/>
		<reference ref_id="1171983" ref_url="https://bugzilla.suse.com/1171983" source="BUGZILLA"/>
		<reference ref_id="1172017" ref_url="https://bugzilla.suse.com/1172017" source="BUGZILLA"/>
		<reference ref_id="1172096" ref_url="https://bugzilla.suse.com/1172096" source="BUGZILLA"/>
		<reference ref_id="1172097" ref_url="https://bugzilla.suse.com/1172097" source="BUGZILLA"/>
		<reference ref_id="1172098" ref_url="https://bugzilla.suse.com/1172098" source="BUGZILLA"/>
		<reference ref_id="1172099" ref_url="https://bugzilla.suse.com/1172099" source="BUGZILLA"/>
		<reference ref_id="1172101" ref_url="https://bugzilla.suse.com/1172101" source="BUGZILLA"/>
		<reference ref_id="1172102" ref_url="https://bugzilla.suse.com/1172102" source="BUGZILLA"/>
		<reference ref_id="1172103" ref_url="https://bugzilla.suse.com/1172103" source="BUGZILLA"/>
		<reference ref_id="1172104" ref_url="https://bugzilla.suse.com/1172104" source="BUGZILLA"/>
		<reference ref_id="1172127" ref_url="https://bugzilla.suse.com/1172127" source="BUGZILLA"/>
		<reference ref_id="1172130" ref_url="https://bugzilla.suse.com/1172130" source="BUGZILLA"/>
		<reference ref_id="1172185" ref_url="https://bugzilla.suse.com/1172185" source="BUGZILLA"/>
		<reference ref_id="1172188" ref_url="https://bugzilla.suse.com/1172188" source="BUGZILLA"/>
		<reference ref_id="1172199" ref_url="https://bugzilla.suse.com/1172199" source="BUGZILLA"/>
		<reference ref_id="1172201" ref_url="https://bugzilla.suse.com/1172201" source="BUGZILLA"/>
		<reference ref_id="1172202" ref_url="https://bugzilla.suse.com/1172202" source="BUGZILLA"/>
		<reference ref_id="1172221" ref_url="https://bugzilla.suse.com/1172221" source="BUGZILLA"/>
		<reference ref_id="1172249" ref_url="https://bugzilla.suse.com/1172249" source="BUGZILLA"/>
		<reference ref_id="1172251" ref_url="https://bugzilla.suse.com/1172251" source="BUGZILLA"/>
		<reference ref_id="1172317" ref_url="https://bugzilla.suse.com/1172317" source="BUGZILLA"/>
		<reference ref_id="1172342" ref_url="https://bugzilla.suse.com/1172342" source="BUGZILLA"/>
		<reference ref_id="1172343" ref_url="https://bugzilla.suse.com/1172343" source="BUGZILLA"/>
		<reference ref_id="1172344" ref_url="https://bugzilla.suse.com/1172344" source="BUGZILLA"/>
		<reference ref_id="1172366" ref_url="https://bugzilla.suse.com/1172366" source="BUGZILLA"/>
		<reference ref_id="1172378" ref_url="https://bugzilla.suse.com/1172378" source="BUGZILLA"/>
		<reference ref_id="1172391" ref_url="https://bugzilla.suse.com/1172391" source="BUGZILLA"/>
		<reference ref_id="1172397" ref_url="https://bugzilla.suse.com/1172397" source="BUGZILLA"/>
		<reference ref_id="1172453" ref_url="https://bugzilla.suse.com/1172453" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2019-19462" ref_url="https://www.suse.com/security/cve/CVE-2019-19462/" source="CVE"/>
		<reference ref_id="CVE-2019-20806" ref_url="https://www.suse.com/security/cve/CVE-2019-20806/" source="CVE"/>
		<reference ref_id="CVE-2019-20812" ref_url="https://www.suse.com/security/cve/CVE-2019-20812/" source="CVE"/>
		<reference ref_id="CVE-2019-9455" ref_url="https://www.suse.com/security/cve/CVE-2019-9455/" source="CVE"/>
		<reference ref_id="CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543/" source="CVE"/>
		<reference ref_id="CVE-2020-10690" ref_url="https://www.suse.com/security/cve/CVE-2020-10690/" source="CVE"/>
		<reference ref_id="CVE-2020-10711" ref_url="https://www.suse.com/security/cve/CVE-2020-10711/" source="CVE"/>
		<reference ref_id="CVE-2020-10720" ref_url="https://www.suse.com/security/cve/CVE-2020-10720/" source="CVE"/>
		<reference ref_id="CVE-2020-10732" ref_url="https://www.suse.com/security/cve/CVE-2020-10732/" source="CVE"/>
		<reference ref_id="CVE-2020-10751" ref_url="https://www.suse.com/security/cve/CVE-2020-10751/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="CVE-2020-12114" ref_url="https://www.suse.com/security/cve/CVE-2020-12114/" source="CVE"/>
		<reference ref_id="CVE-2020-12464" ref_url="https://www.suse.com/security/cve/CVE-2020-12464/" source="CVE"/>
		<reference ref_id="CVE-2020-12652" ref_url="https://www.suse.com/security/cve/CVE-2020-12652/" source="CVE"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="CVE-2020-12655" ref_url="https://www.suse.com/security/cve/CVE-2020-12655/" source="CVE"/>
		<reference ref_id="CVE-2020-12656" ref_url="https://www.suse.com/security/cve/CVE-2020-12656/" source="CVE"/>
		<reference ref_id="CVE-2020-12657" ref_url="https://www.suse.com/security/cve/CVE-2020-12657/" source="CVE"/>
		<reference ref_id="CVE-2020-12659" ref_url="https://www.suse.com/security/cve/CVE-2020-12659/" source="CVE"/>
		<reference ref_id="CVE-2020-12768" ref_url="https://www.suse.com/security/cve/CVE-2020-12768/" source="CVE"/>
		<reference ref_id="CVE-2020-12769" ref_url="https://www.suse.com/security/cve/CVE-2020-12769/" source="CVE"/>
		<reference ref_id="CVE-2020-13143" ref_url="https://www.suse.com/security/cve/CVE-2020-13143/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1604-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006931.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it.
  This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1154824).
- CVE-2020-13143: Fixed an out-of-bounds read in gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c (bsc#1171982).
- CVE-2020-12769: Fixed an issue which could have allowed attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one (bsc#1171983).
- CVE-2020-12768: Fixed a memory leak in svm_cpu_uninit in arch/x86/kvm/svm.c (bsc#1171736).
- CVE-2020-12659: Fixed an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) due to improper headroom validation (bsc#1171214).
- CVE-2020-12657: An a use-after-free in block/bfq-iosched.c (bsc#1171205).
- CVE-2020-12656: Fixed an improper handling of certain domain_release calls leadingch could have led to a memory leak (bsc#1171219).
- CVE-2020-12655: Fixed an issue which could have allowed attackers to trigger a sync of excessive duration via an XFS v5 image with crafted metadata (bsc#1171217).
- CVE-2020-12654: Fixed an issue in he wifi driver which could have allowed a remote AP to trigger a heap-based buffer overflow (bsc#1171202).
- CVE-2020-12653: Fixed an issue in the wifi driver which could have allowed local users to gain privileges or cause a denial of service (bsc#1171195).
- CVE-2020-12652: Fixed an issue which could have allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition (bsc#1171218).
- CVE-2020-12464: Fixed a use-after-free due to a transfer without a reference (bsc#1170901).
- CVE-2020-12114: Fixed a pivot_root race condition which could have allowed local users to cause a denial of service (panic) by corrupting a mountpoint reference counter (bsc#1171098).
- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172317).
- CVE-2020-10751: Fixed an improper implementation in SELinux LSM hook  where it was assumed that an skb would only contain a single netlink message (bsc#1171189).
- CVE-2020-10732: Fixed kernel data leak in userspace coredumps due to uninitialized data (bsc#1171220).
- CVE-2020-10720: Fixed a use-after-free read in napi_gro_frags() (bsc#1170778).
- CVE-2020-10711: Fixed a null pointer dereference in SELinux subsystem which could have allowed a remote network user to crash the kernel resulting in a denial of service (bsc#1171191).
- CVE-2020-10690: Fixed the race between the release of ptp_clock and cdev (bsc#1170056).
- CVE-2019-9455: Fixed a pointer leak due to a WARN_ON statement in a video driver. This could lead to local information disclosure with System execution privileges needed (bsc#1170345).
- CVE-2019-20812: Fixed an issue in prb_calc_retire_blk_tmo() which could have resulted in a denial of service (bsc#1172453).
- CVE-2019-20806: Fixed a null pointer dereference which may had lead to denial of service (bsc#1172199).
- CVE-2019-19462: Fixed an issue which could have allowed local user to cause denial of service (bsc#1158265).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1089895).

The following non-security bugs were fixed:

- ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe() (bsc#1051510).
- ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile() (bsc#1051510).
- acpi/x86: ignore unspecified bit positions in the ACPI global lock field (bsc#1051510).
- Add br_netfilter to kernel-default-base (bsc#1169020)
- Add commit for git-fix that's not a fix This commit cleans up debug code but does not fix anything, and it relies on a new kernel function that isn't yet in this version of SLE.
- agp/intel: Reinforce the barrier after GTT updates (bsc#1051510).
- ALSA: ctxfi: Remove unnecessary cast in kfree (bsc#1051510).
- ALSA: doc: Document PC Beep Hidden Register on Realtek ALC256 (bsc#1051510).
- ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
- ALSA: hda: Add driver blacklist (bsc#1051510).
- ALSA: hda: Always use jackpoll helper for jack update after resume (bsc#1051510).
- ALSA: hda: call runtime_allow() for all hda controllers (bsc#1051510).
- ALSA: hda: Do not release card at firmware loading error (bsc#1051510).
- ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported (bsc#1051510).
- ALSA: hda/hdmi: fix race in monitor detection during probe (bsc#1051510).
- ALSA: hda/hdmi: fix without unlocked before return (bsc#1051510).
- ALSA: hda: Honor PM disablement in PM freeze and thaw_noirq ops (bsc#1051510).
- ALSA: hda: Keep the controller initialization even if no codecs found (bsc#1051510).
- ALSA: hda: Match both PCI ID and SSID for driver blacklist (bsc#1111666).
- ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround (bsc#1172017).
- ALSA: hda/realtek - Add COEF workaround for ASUS ZenBook UX431DA (git-fixes).
- ALSA: hda/realtek - Add HP new mute led supported for ALC236 (git-fixes).
- ALSA: hda/realtek - Add more fixup entries for Clevo machines (git-fixes).
- ALSA: hda/realtek - Add new codec supported for ALC245 (bsc#1051510).
- ALSA: hda/realtek - Add new codec supported for ALC287 (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Notebook (git-fixes).
- ALSA: hda/realtek - Add supported new mute Led for HP (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS GL503VM with ALC295 (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS UX550GE with ALC295 (git-fixes).
- ALSA: hda/realtek: Enable headset mic of ASUS UX581LV with ALC295 (git-fixes).
- ALSA: hda/realtek - Enable the headset mic on Asus FX505DT (bsc#1051510).
- ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse (git-fixes).
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme (bsc#1111666).
- ALSA: hda/realtek - Fix unexpected init_amp override (bsc#1051510).
- ALSA: hda/realtek - Limit int mic boost for Thinkpad T530 (git-fixes bsc#1171293).
- ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter (bsc#1051510).
- ALSA: hda: Release resources at error in delayed probe (bsc#1051510).
- ALSA: hda: Remove ASUS ROG Zenith from the blacklist (bsc#1051510).
- ALSA: hda: Skip controller resume if not needed (bsc#1051510).
- ALSA: hwdep: fix a left shifting 1 by 31 UB bug (git-fixes).
- ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio option (git-fixes).
- ALSA: opti9xx: shut up gcc-10 range warning (bsc#1051510).
- ALSA: pcm: fix incorrect hw_base increase (git-fixes).
- ALSA: pcm: oss: Place the plugin buffer overflow checks correctly (bsc#1170522).
- ALSA: rawmidi: Fix racy buffer resize under concurrent accesses (git-fixes).
- ALSA: usb-audio: Add connector notifier delegation (bsc#1051510).
- ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset (git-fixes).
- ALSA: usb-audio: add mapping for ASRock TRX40 Creator (git-fixes).
- ALSA: usb-audio: Add mixer workaround for TRX40 and co (bsc#1051510).
- ALSA: usb-audio: Add quirk for Focusrite Scarlett 2i2 (bsc#1051510).
- ALSA: usb-audio: Add static mapping table for ALC1220-VB-based mobos (bsc#1051510).
- ALSA: usb-audio: Apply async workaround for Scarlett 2i4 2nd gen (bsc#1051510).
- ALSA: usb-audio: Check mapping at creating connector controls, too (bsc#1051510).
- ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID (bsc#1051510).
- ALSA: usb-audio: Do not create jack controls for PCM terminals (bsc#1051510).
- ALSA: usb-audio: Do not override ignore_ctl_error value from the map (bsc#1051510).
- ALSA: usb-audio: Filter error from connector kctl ops, too (bsc#1051510).
- ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif (bsc#1051510).
- ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC (git-fixes).
- ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio (git-fixes).
- ALSA: usx2y: Fix potential NULL dereference (bsc#1051510).
- ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry (bsc#1051510).
- ASoC: dapm: connect virtual mux with default value (bsc#1051510).
- ASoC: dapm: fixup dapm kcontrol widget (bsc#1051510).
- ASoC: dpcm: allow start or stop during pause for backend (bsc#1051510).
- ASoC: fix regwmask (bsc#1051510).
- ASoC: msm8916-wcd-digital: Reset RX interpolation path after use (bsc#1051510).
- ASoC: samsung: Prevent clk_get_rate() calls in atomic context (bsc#1111666).
- ASoC: topology: Check return value of pcm_new_ver (bsc#1051510).
- ASoC: topology: use name_prefix for new kcontrol (bsc#1051510).
- b43legacy: Fix case where channel status is corrupted (bsc#1051510).
- batman-adv: fix batadv_nc_random_weight_tq (git-fixes).
- batman-adv: Fix refcnt leak in batadv_show_throughput_override (git-fixes).
- batman-adv: Fix refcnt leak in batadv_store_throughput_override (git-fixes).
- batman-adv: Fix refcnt leak in batadv_v_ogm_process (git-fixes).
- bcache: avoid unnecessary btree nodes flushing in btree_flush_write() (git fixes (block drivers)).
- bcache: fix incorrect data type usage in btree_flush_write() (git fixes (block drivers)).
- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (git fixes (block drivers)).
- blk-mq: honor IO scheduler for multiqueue devices (bsc#1165478).
- blk-mq: simplify blk_mq_make_request() (bsc#1165478).
- block/drbd: delete invalid function drbd_md_mark_dirty_ (bsc#1171527).
- block: drbd: remove a stray unlock in __drbd_send_protocol() (bsc#1171599).
- block: fix busy device checking in blk_drop_partitions again (bsc#1171948).
- block: fix busy device checking in blk_drop_partitions (bsc#1171948).
- block: fix memleak of bio integrity data (git fixes (block drivers)).
- block: remove the bd_openers checks in blk_drop_partitions (bsc#1171948).
- bnxt_en: fix memory leaks in bnxt_dcbnl_ieee_getets() (networking-stable-20_03_28).
- bnxt_en: Reduce BNXT_MSIX_VEC_MAX value to supported CQs per PF (bsc#1104745).
- bnxt_en: reinitialize IRQs when MTU is modified (networking-stable-20_03_14).
- bnxt_en: Return error if bnxt_alloc_ctx_mem() fails (bsc#1104745 ).
- bnxt_en: Return error when allocating zero size context memory (bsc#1104745).
- bonding/alb: make sure arp header is pulled before accessing it (networking-stable-20_03_14).
- bpf: Fix sk_psock refcnt leak when receiving message (bsc#1083647).
- bpf: Forbid XADD on spilled pointers for unprivileged users (bsc#1083647).
- brcmfmac: abort and release host after error (bsc#1051510).
- btrfs: fix deadlock with memory reclaim during scrub (bsc#1172127).
- btrfs: fix log context list corruption after rename whiteout error (bsc#1172342).
- btrfs: fix partial loss of prealloc extent past i_size after fsync (bsc#1172343).
- btrfs: relocation: add error injection points for cancelling balance (bsc#1171417).
- btrfs: relocation: Check cancel request after each data page read (bsc#1171417).
- btrfs: relocation: Check cancel request after each extent found (bsc#1171417).
- btrfs: relocation: Clear the DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417).
- btrfs: relocation: Fix reloc root leakage and the NULL pointer reference caused by the leakage (bsc#1171417).
- btrfs: relocation: Work around dead relocation stage loop (bsc#1171417).
- btrfs: reloc: clear DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417 bsc#1160947 bsc#1172366).
- btrfs: reloc: fix reloc root leak and NULL pointer dereference (bsc#1171417 bsc#1160947 bsc#1172366).
- btrfs: setup a nofs context for memory allocation at btrfs_create_tree() (bsc#1172127).
- btrfs: setup a nofs context for memory allocation at __btrfs_set_acl (bsc#1172127).
- btrfs: use nofs context when initializing security xattrs to avoid deadlock (bsc#1172127).
- can: add missing attribute validation for termination (networking-stable-20_03_14).
- cdc-acm: close race betrween suspend() and acm_softint (git-fixes).
- cdc-acm: introduce a cool down (git-fixes).
- ceph: check if file lock exists before sending unlock request (bsc#1168789).
- ceph: demote quotarealm lookup warning to a debug message (bsc#1171692).
- ceph: fix double unlock in handle_cap_export() (bsc#1171694).
- ceph: fix endianness bug when handling MDS session feature bits (bsc#1171695).
- cgroup, netclassid: periodically release file_lock on classid updating (networking-stable-20_03_14).
- CIFS: Allocate crypto structures on the fly for calculating signatures of incoming packets (bsc#1144333).
- CIFS: Allocate encryption header through kmalloc (bsc#1144333).
- CIFS: allow unlock flock and OFD lock across fork (bsc#1144333).
- CIFS: check new file size when extending file by fallocate (bsc#1144333).
- CIFS: cifspdu.h: Replace zero-length array with flexible-array member (bsc#1144333).
- CIFS: clear PF_MEMALLOC before exiting demultiplex thread (bsc#1144333).
- CIFS: do not share tcons with DFS (bsc#1144333).
- CIFS: dump the session id and keys also for SMB2 sessions (bsc#1144333).
- CIFS: ensure correct super block for DFS reconnect (bsc#1144333).
- CIFS: Fix bug which the return value by asynchronous read is error (bsc#1144333).
- CIFS: fix uninitialised lease_key in open_shroot() (bsc#1144333).
- CIFS: improve read performance for page size 64KB &amp; cache=strict &amp; vers=2.1+ (bsc#1144333).
- CIFS: Increment num_remote_opens stats counter even in case of smb2_query_dir_first (bsc#1144333).
- CIFS: minor update to comments around the cifs_tcp_ses_lock mutex (bsc#1144333).
- CIFS: protect updating server-&gt;dstaddr with a spinlock (bsc#1144333).
- CIFS: smb2pdu.h: Replace zero-length array with flexible-array member (bsc#1144333).
- CIFS: smbd: Calculate the correct maximum packet size for segmented SMBDirect send/receive (bsc#1144333).
- CIFS: smbd: Check and extend sender credits in interrupt context (bsc#1144333).
- CIFS: smbd: Check send queue size before posting a send (bsc#1144333).
- CIFS: smbd: Do not schedule work to send immediate packet on every receive (bsc#1144333).
- CIFS: smbd: Merge code to track pending packets (bsc#1144333).
- CIFS: smbd: Properly process errors on ib_post_send (bsc#1144333).
- CIFS: smbd: Update receive credits before sending and deal with credits roll back on failure before sending (bsc#1144333).
- CIFS: Warn less noisily on default mount (bsc#1144333).
- clk: Add clk_hw_unregister_composite helper function definition (bsc#1051510).
- clk: imx6ull: use OSC clock during AXI rate change (bsc#1051510).
- clk: imx: make mux parent strings const (bsc#1051510).
- clk: mediatek: correct the clocks for MT2701 HDMI PHY module (bsc#1051510).
- clk: sunxi-ng: a64: Fix gate bit of DSI DPHY (bsc#1051510).
- clocksource/drivers/hyper-v: Set TSC clocksource as default w/ InvariantTSC (bsc#1170620, bsc#1170621).
- clocksource: dw_apb_timer_of: Fix missing clockevent timers (bsc#1051510).
- component: Silence bind error on -EPROBE_DEFER (bsc#1051510).
- coresight: do not use the BIT() macro in the UAPI header (git fixes (block drivers)).
- cpufreq: s3c64xx: Remove pointless NULL check in s3c64xx_cpufreq_driver_init (bsc#1051510).
- crypto: ccp - AES CFB mode is a stream cipher (git-fixes).
- crypto: ccp - Clean up and exit correctly on allocation failure (git-fixes).
- crypto: ccp - Cleanup misc_dev on sev_exit() (bsc#1114279).
- crypto: ccp - Cleanup sp_dev_master in psp_dev_destroy() (bsc#1114279).
- cxgb4: fix MPS index overwrite when setting MAC address (bsc#1127355).
- cxgb4: fix Txq restart check during backpressure (bsc#1127354 bsc#1127371).
- debugfs: Add debugfs_create_xul() for hexadecimal unsigned long (git-fixes).
- debugfs_lookup(): switch to lookup_one_len_unlocked() (bsc#1171979).
- devlink: fix return value after hitting end in region read (bsc#1109837).
- devlink: validate length of param values (bsc#1109837).
- devlink: validate length of region addr/len (bsc#1109837).
- dmaengine: dmatest: Fix iteration non-stop logic (bsc#1051510).
- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574).
- dm-raid1: fix invalid return value from dm_mirror (bsc#1172378).
- dm writecache: fix data corruption when reloading the target (git fixes (block drivers)).
- dm writecache: fix incorrect flush sequence when doing SSD mode commit (git fixes (block drivers)).
- dm writecache: verify watermark during resume (git fixes (block drivers)).
- dm zoned: fix invalid memory access (git fixes (block drivers)).
- dm zoned: reduce overhead of backing device checks (git fixes (block drivers)).
- dm zoned: remove duplicate nr_rnd_zones increase in dmz_init_zone() (git fixes (block drivers)).
- dm zoned: support zone sizes smaller than 128MiB (git fixes (block drivers)).
- dp83640: reverse arguments to list_add_tail (git-fixes).
- drivers: hv: Add a module description line to the hv_vmbus driver (bsc#1172249, bsc#1172251).
- drivers/net/ibmvnic: Update VNIC protocol version reporting (bsc#1065729).
- drivers: w1: add hwmon support structures (jsc#SLE-11048).
- drivers: w1: add hwmon temp support for w1_therm (jsc#SLE-11048).
- drivers: w1: refactor w1_slave_show to make the temp reading functionality separate (jsc#SLE-11048).
- drm: amd/acp: fix broken menu structure (bsc#1114279) 	* context changes
- drm/amdgpu: Correctly initialize thermal controller for GPUs with Powerplay table v0 (e.g Hawaii) (bsc#1111666).
- drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event (bsc#1111666).
- drm/amd/powerplay: force the trim of the mclk dpm_levels if OD is (bsc#1113956)
- drm/atomic: Take the atomic toys away from X (bsc#1112178) 	* context changes
- drm/crc: Actually allow to change the crc source (bsc#1114279) 	* offset changes
- drm/dp_mst: Fix clearing payload state on topology disable (bsc#1051510).
- drm/dp_mst: Reformat drm_dp_check_act_status() a bit (bsc#1051510).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (bsc#1114279)
- drm/etnaviv: fix perfmon domain interation (bsc#1113956)
- drm/etnaviv: rework perfmon query infrastructure (bsc#1112178)
- drm/i915: Apply Wa_1406680159:icl,ehl as an engine workaround (bsc#1112178) 	* rename gt/intel_workarounds.c to intel_workarounds.c 	* context changes
- drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of (bsc#1114279)
- drm/i915: HDCP: fix Ri prime check done during link check (bsc#1112178) 	* rename display/intel_hdmi.c to intel_hdmi.c 	* context changes
- drm/i915: properly sanity check batch_start_offset (bsc#1114279) 	* renamed display/intel_fbc.c -&gt; intel_fb.c 	* renamed gt/intel_rc6.c -&gt; intel_pm.c 	* context changes
- drm/meson: Delete an error message in meson_dw_hdmi_bind() (bsc#1051510).
- drm: NULL pointer dereference [null-pointer-deref] (CWE 476) problem (bsc#1114279)
- drm/qxl: qxl_release leak in qxl_draw_dirty_fb() (bsc#1051510).
- drm/qxl: qxl_release leak in qxl_hw_surface_alloc() (bsc#1051510).
- drm/qxl: qxl_release use after free (bsc#1051510).
- drm: Remove PageReserved manipulation from drm_pci_alloc (bsc#1114279) 	* offset changes
- drm/sun4i: dsi: Allow binding the host without a panel (bsc#1113956)
- drm/sun4i: dsi: Avoid hotplug race with DRM driver bind (bsc#1113956)
- drm/sun4i: dsi: Remove incorrect use of runtime PM (bsc#1113956) 	* context changes
- drm/sun4i: dsi: Remove unused drv from driver context (bsc#1113956) 	* context changes 	* keep include of sun4i_drv.h
- dump_stack: avoid the livelock of the dump_lock (git fixes (block drivers)).
- EDAC, sb_edac: Add support for systems with segmented PCI buses (bsc#1169525).
- ext4: do not zeroout extents beyond i_disksize (bsc#1167851).
- ext4: fix extent_status fragmentation for plain files (bsc#1171949).
- ext4: use non-movable memory for superblock readahead (bsc#1171952).
- fanotify: fix merging marks masks with FAN_ONDIR (bsc#1171679).
- fbcon: fix null-ptr-deref in fbcon_switch (bsc#1114279) 	* rename drivers/video/fbdev/core to drivers/video/console 	* context changes
- fib: add missing attribute validation for tun_id (networking-stable-20_03_14).
- firmware: qcom: scm: fix compilation error when disabled (bsc#1051510).
- fs/cifs: fix gcc warning in sid_to_id (bsc#1144333).
- fs/seq_file.c: simplify seq_file iteration code and interface (bsc#1170125).
- gpio: tegra: mask GPIO IRQs during IRQ shutdown (bsc#1051510).
- gre: fix uninit-value in __iptunnel_pull_header (networking-stable-20_03_14).
- HID: hid-input: clear unmapped usages (git-fixes).
- HID: hyperv: Add a module description line (bsc#1172249, bsc#1172251).
- HID: i2c-hid: add Trekstor Primebook C11B to descriptor override (git-fixes).
- HID: i2c-hid: override HID descriptors for certain devices (git-fixes).
- HID: multitouch: add eGalaxTouch P80H84 support (bsc#1051510).
- HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices (git-fixes).
- hrtimer: Annotate lockless access to timer-&gt;state (git fixes (block drivers)).
- hsr: add restart routine into hsr_get_node_list() (networking-stable-20_03_28).
- hsr: check protocol version in hsr_newlink() (networking-stable-20_04_17).
- hsr: fix general protection fault in hsr_addr_is_self() (networking-stable-20_03_28).
- hsr: set .netnsok flag (networking-stable-20_03_28).
- hsr: use rcu_read_lock() in hsr_get_node_{list/status}() (networking-stable-20_03_28).
- i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present (git-fixes).
- i2c: acpi: put device when verifying client fails (git-fixes).
- i2c: brcmstb: remove unused struct member (git-fixes).
- i2c: core: Allow empty id_table in ACPI case as well (git-fixes).
- i2c: core: decrease reference count of device node in i2c_unregister_device (git-fixes).
- i2c: dev: Fix the race between the release of i2c_dev and cdev (bsc#1051510).
- i2c: fix missing pm_runtime_put_sync in i2c_device_probe (git-fixes).
- i2c-hid: properly terminate i2c_hid_dmi_desc_override_table array (git-fixes).
- i2c: i801: Do not add ICH_RES_IO_SMI for the iTCO_wdt device (git-fixes).
- i2c: iproc: Stop advertising support of SMBUS quick cmd (git-fixes).
- i2c: isch: Remove unnecessary acpi.h include (git-fixes).
- i2c: mux: demux-pinctrl: Fix an error handling path in 'i2c_demux_pinctrl_probe()' (bsc#1051510).
- i2c: st: fix missing struct parameter description (bsc#1051510).
- IB/mlx5: Fix missing congestion control debugfs on rep rdma device (bsc#1103991).
- ibmvnic: Skip fatal error reset after passive init (bsc#1171078 ltc#184239).
- iio:ad7797: Use correct attribute_group (bsc#1051510).
- iio: adc: stm32-adc: fix device used to request dma (bsc#1051510).
- iio: adc: stm32-adc: fix sleep in atomic context (git-fixes).
- iio: adc: stm32-adc: Use dma_request_chan() instead dma_request_slave_channel() (bsc#1051510).
- iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()' (bsc#1051510).
- iio: sca3000: Remove an erroneous 'get_device()' (bsc#1051510).
- iio: xilinx-xadc: Fix ADC-B powerdown (bsc#1051510).
- iio: xilinx-xadc: Fix clearing interrupt when enabling trigger (bsc#1051510).
- iio: xilinx-xadc: Fix sequencer configuration for aux channels in simultaneous mode (bsc#1051510).
- ima: Fix return value of ima_write_policy() (git-fixes).
- Input: evdev - call input_flush_device() on release(), not flush() (bsc#1051510).
- Input: hyperv-keyboard - add module description (bsc#1172249, bsc#1172251).
- Input: i8042 - add Acer Aspire 5738z to nomux list (bsc#1051510).
- Input: i8042 - add ThinkPad S230u to i8042 reset list (bsc#1051510).
- Input: raydium_i2c_ts - use true and false for boolean values (bsc#1051510).
- Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() (bsc#1051510).
- Input: synaptics-rmi4 - really fix attn_data use-after-free (git-fixes).
- Input: usbtouchscreen - add support for BonXeon TP (bsc#1051510).
- Input: xpad - add custom init packet for Xbox One S controllers (bsc#1051510).
- iommu/amd: Call domain_flush_complete() in update_domain() (bsc#1172096).
- iommu/amd: Do not flush Device Table in iommu_map_page() (bsc#1172097).
- iommu/amd: Do not loop forever when trying to increase address space (bsc#1172098).
- iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system (bsc#1172099).
- iommu/amd: Fix over-read of ACPI UID from IVRS table (bsc#1172101).
- iommu/amd: Fix race in increase_address_space()/fetch_pte() (bsc#1172102).
- iommu/amd: Update Device Table in increase_address_space() (bsc#1172103).
- iommu: Fix reference count leak in iommu_group_alloc (bsc#1172397).
- ip6_tunnel: Allow rcv/xmit even if remote address is a local address (bsc#1166978).
- ipv4: fix a RCU-list lock in fib_triestat_seq_show (networking-stable-20_04_02).
- ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface (networking-stable-20_03_14).
- ipv6: do not auto-add link-local address to lag ports (networking-stable-20_04_09).
- ipv6: fix IPV6_ADDRFORM operation logic (bsc#1171662).
- ipv6: fix restrict IPV6_ADDRFORM operation (bsc#1171662).
- ipvlan: add cond_resched_rcu() while processing muticast backlog (networking-stable-20_03_14).
- ipvlan: do not deref eth hdr before checking it's set (networking-stable-20_03_14).
- ipvlan: do not use cond_resched_rcu() in ipvlan_process_multicast() (networking-stable-20_03_14).
- iwlwifi: pcie: actually release queue memory in TVQM (bsc#1051510).
- ixgbe: do not check firmware errors (bsc#1170284).
- kabi fix for early XHCI debug (git-fixes).
- kabi for for md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (git-fixes).
- kabi/severities: Do not track KVM internal symbols.
- kabi/severities: Ingnore get_dev_data() The function is internal to the AMD IOMMU driver and must not be called by any third party.
- kabi workaround for snd_rawmidi buffer_ref field addition (git-fixes).
- KEYS: reaching the keys quotas correctly (bsc#1051510).
- KVM: arm64: Change hyp_panic()s dependency on tpidr_el2 (bsc#1133021).
- KVM: arm64: Stop save/restoring host tpidr_el1 on VHE (bsc#1133021).
- KVM: Check validity of resolved slot when searching memslots (bsc#1172104).
- KVM: s390: vsie: Fix delivery of addressing exceptions (git-fixes).
- KVM: SVM: Fix potential memory leak in svm_cpu_init() (bsc#1171736).
- KVM x86: Extend AMD specific guest behavior to Hygon virtual CPUs (bsc#1152489).
- l2tp: Allow management of tunnels and session in user namespace (networking-stable-20_04_17).
- libata: Remove extra scsi_host_put() in ata_scsi_add_hosts() (bsc#1051510).
- libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set (bsc#1051510).
- lib: raid6: fix awk build warnings (git fixes (block drivers)).
- lib/raid6/test: fix build on distros whose /bin/sh is not bash (git fixes (block drivers)).
- lib/stackdepot.c: fix global out-of-bounds in stack_slabs (git fixes (block drivers)).
- locks: print unsigned ino in /proc/locks (bsc#1171951). 
- mac80211: add ieee80211_is_any_nullfunc() (bsc#1051510).
- mac80211_hwsim: Use kstrndup() in place of kasprintf() (bsc#1051510).
- mac80211: mesh: fix discovery timer re-arming issue / crash (bsc#1051510).
- macsec: avoid to set wrong mtu (bsc#1051510).
- macsec: restrict to ethernet devices (networking-stable-20_03_28).
- macvlan: add cond_resched() during multicast processing (networking-stable-20_03_14).
- macvlan: fix null dereference in macvlan_device_event() (bsc#1051510).
- md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (git-fixes).
- md/raid0: Fix an error message in raid0_make_request() (git fixes (block drivers)).
- md/raid10: prevent access of uninitialized resync_pages offset (git-fixes).
- media: dvb: return -EREMOTEIO on i2c transfer failure (bsc#1051510).
- media: platform: fcp: Set appropriate DMA parameters (bsc#1051510).
- media: ti-vpe: cal: fix disable_irqs to only the intended target (git-fixes).
- mei: release me_cl object reference (bsc#1051510).
- mlxsw: Fix some IS_ERR() vs NULL bugs (networking-stable-20_04_27).
- mlxsw: spectrum_flower: Do not stop at FLOW_ACTION_VLAN_MANGLE (networking-stable-20_04_09).
- mlxsw: spectrum_mr: Fix list iteration in error path (bsc#1112374).
- mmc: atmel-mci: Fix debugfs on 64-bit platforms (git-fixes).
- mmc: core: Check request type before completing the request (git-fixes).
- mmc: core: Fix recursive locking issue in CQE recovery path (git-fixes).
- mmc: cqhci: Avoid false 'cqhci: CQE stuck on' by not open-coding timeout loop (git-fixes).
- mmc: dw_mmc: Fix debugfs on 64-bit platforms (git-fixes).
- mmc: meson-gx: make sure the descriptor is stopped on errors (git-fixes).
- mmc: meson-gx: simplify interrupt handler (git-fixes).
- mmc: renesas_sdhi: limit block count to 16 bit for old revisions (git-fixes).
- mmc: sdhci-esdhc-imx: fix the mask for tuning start point (bsc#1051510).
- mmc: sdhci-msm: Clear tuning done flag while hs400 tuning (bsc#1051510).
- mmc: sdhci-of-at91: fix memleak on clk_get failure (git-fixes).
- mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers (bsc#1051510).
- mmc: sdhci-xenon: fix annoying 1.8V regulator warning (bsc#1051510).
- mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card() (bsc#1051510).
- mmc: tmio: fix access width of Block Count Register (git-fixes).
- mm: limit boost_watermark on small zones (git fixes (mm/pgalloc)).
- mm: thp: handle page cache THP correctly in PageTransCompoundMap (git fixes (block drivers)).
- mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer (bsc#1051510).
- mtd: spi-nor: cadence-quadspi: add a delay in write sequence (git-fixes).
- mtd: spi-nor: enable 4B opcodes for mx66l51235l (git-fixes).
- mtd: spi-nor: fsl-quadspi: Do not let -EINVAL on the bus (git-fixes).
- mwifiex: avoid -Wstringop-overflow warning (bsc#1051510).
- mwifiex: Fix memory corruption in dump_station (bsc#1051510).
- net: bcmgenet: correct per TX/RX ring statistics (networking-stable-20_04_27).
- net: dsa: b53: Fix ARL register definitions (networking-stable-20_04_27).
- net: dsa: b53: Rework ARL bin logic (networking-stable-20_04_27).
- net: dsa: bcm_sf2: Do not register slave MDIO bus with OF (networking-stable-20_04_09).
- net: dsa: bcm_sf2: Ensure correct sub-node is parsed (networking-stable-20_04_09).
- net: dsa: Fix duplicate frames flooded by learning (networking-stable-20_03_28).
- net: dsa: mv88e6xxx: fix lockup on warm boot (networking-stable-20_03_14).
- net/ethernet: add Google GVE driver (jsc#SLE-10538)
- net: fec: add phy_reset_after_clk_enable() support (git-fixes).
- net: fec: validate the new settings in fec_enet_set_coalesce() (networking-stable-20_03_14).
- net: fix race condition in __inet_lookup_established() (bsc#1151794).
- net: fq: add missing attribute validation for orphan mask (networking-stable-20_03_14).
- net: hns3: fix 'tc qdisc del' failed issue (bsc#1109837).
- net, ip_tunnel: fix interface lookup with no key (networking-stable-20_04_02).
- net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin (networking-stable-20_04_17).
- net: ipv6: do not consider routes via gateways for anycast address check (networking-stable-20_04_17).
- netlink: Use netlink header as base to calculate bad attribute offset (networking-stable-20_03_14).
- net: macsec: update SCI upon MAC address change (networking-stable-20_03_14).
- net: memcg: fix lockdep splat in inet_csk_accept() (networking-stable-20_03_14).
- net: memcg: late association of sock to memcg (networking-stable-20_03_14).
- net/mlx4_en: avoid indirect call in TX completion (networking-stable-20_04_27).
- net/mlx5: Add new fields to Port Type and Speed register (bsc#1171118).
- net/mlx5: Expose link speed directly (bsc#1171118).
- net/mlx5: Expose port speed when possible (bsc#1171118).
- net/mlx5: Fix failing fw tracer allocation on s390 (bsc#1103990 ).
- net: mvneta: Fix the case where the last poll did not process all rx (networking-stable-20_03_28).
- net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node (networking-stable-20_04_27).
- net/packet: tpacket_rcv: do not increment ring index on drop (networking-stable-20_03_14).
- net: qmi_wwan: add support for ASKEY WWHC050 (networking-stable-20_03_28).
- net: revert default NAPI poll timeout to 2 jiffies (networking-stable-20_04_17).
- net_sched: cls_route: remove the right filter from hashtable (networking-stable-20_03_28).
- net_sched: sch_skbprio: add message validation to skbprio_change() (bsc#1109837).
- net/x25: Fix x25_neigh refcnt leak when receiving frame (networking-stable-20_04_27).
- nfc: add missing attribute validation for SE API (networking-stable-20_03_14).
- nfc: add missing attribute validation for vendor subcommand (networking-stable-20_03_14).
- nfc: st21nfca: add missed kfree_skb() in an error path (bsc#1051510).
- nfp: abm: fix a memory leak bug (bsc#1109837).
- nfsd4: fix up replay_matches_cache() (git-fixes).
- nfsd: Ensure CLONE persists data and metadata changes to the target file (git-fixes).
- nfsd: fix delay timer on 32-bit architectures (git-fixes).
- nfsd: fix jiffies/time_t mixup in LRU list (git-fixes).
- NFS: Directory page cache pages need to be locked when read (git-fixes).
- nfsd: memory corruption in nfsd4_lock() (git-fixes).
- NFS: Do not call generic_error_remove_page() while holding locks (bsc#1170457).
- NFS: Fix memory leaks and corruption in readdir (git-fixes).
- NFS: Fix O_DIRECT accounting of number of bytes read/written (git-fixes).
- NFS: Fix potential posix_acl refcnt leak in nfs3_set_acl (git-fixes).
- NFS: fix racey wait in nfs_set_open_stateid_locked (bsc#1170592).
- NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O (git-fixes).
- NFS/pnfs: Fix pnfs_generic_prepare_to_resend_writes() (git-fixes).
- NFS: Revalidate the file size on a fatal write error (git-fixes).
- NFSv4.0: nfs4_do_fsinfo() should not do implicit lease renewals (git-fixes).
- NFSv4: Do not allow a cached open with a revoked delegation (git-fixes).
- NFSv4: Fix leak of clp-&gt;cl_acceptor string (git-fixes).
- NFSv4/pnfs: Return valid stateids in nfs_layout_find_inode_by_stateid() (git-fixes).
- NFSv4: try lease recovery on NFS4ERR_EXPIRED (git-fixes).
- NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn (git-fixes).
- nl802154: add missing attribute validation for dev_type (networking-stable-20_03_14).
- nl802154: add missing attribute validation (networking-stable-20_03_14).
- nvme-fc: print proper nvme-fc devloss_tmo value (bsc#1172391).
- objtool: Fix stack offset tracking for indirect CFAs (bsc#1169514).
- objtool: Fix switch table detection in .text.unlikely (bsc#1169514).
- objtool: Make BP scratch register warning more robust (bsc#1169514).
- padata: Remove broken queue flushing (git-fixes).
- Partially revert 'kfifo: fix kfifo_alloc() and kfifo_init()' (git fixes (block drivers)).
- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (bsc#1172201, bsc#1172202).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (bsc#1172201, bsc#1172202).
- pinctrl: baytrail: Enable pin configuration setting for GPIO chip (git-fixes).
- pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler (git-fixes).
- pinctrl: sunrisepoint: Fix PAD lock register offset for SPT-H (git-fixes).
- platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA (bsc#1051510).
- pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors (git-fixes).
- powerpc: Add attributes for setjmp/longjmp (bsc#1065729).
- powerpc/pci/of: Parse unassigned resources (bsc#1065729).
- powerpc/setup_64: Set cache-line-size based on cache-block-size (bsc#1065729).
- powerpc/sstep: Fix DS operand in ld encoding to appropriate value (bsc#1065729).
- r8152: check disconnect status after long sleep (networking-stable-20_03_14).
- raid6/ppc: Fix build for clang (git fixes (block drivers)).
- random: always use batched entropy for get_random_u{32,64} (bsc#1164871).
- rcu: locking and unlocking need to always be at least barriers (git fixes (block drivers)).
- Revert 'ALSA: hda/realtek: Fix pop noise on ALC225' (git-fixes).
- Revert 'drm/panel: simple: Add support for Sharp LQ150X1LG11 panels' (bsc#1114279) 	* offset changes
- Revert 'HID: i2c-hid: add Trekstor Primebook C11B to descriptor override' Depends on 9b5c747685982d22efffeafc5ec601bd28f6d78b, which was also reverted.
- Revert 'HID: i2c-hid: override HID descriptors for certain devices' This broke i2c-hid.ko's build, there is no way around it without a big file rename or renaming the kernel module.
- Revert 'i2c-hid: properly terminate i2c_hid_dmi_desc_override_table' Fixed 9b5c747685982d22efffeafc5ec601bd28f6d78b, which was also reverted.
- Revert 'ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()' (bsc#1172221).
- Revert 'RDMA/cma: Simplify rdma_resolve_addr() error flow' (bsc#1103992).
- rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup() (bsc#1051510).
- s390/cpum_cf: Add new extended counters for IBM z15 (bsc#1169762 LTC#185291).
- s390/ftrace: fix potential crashes when switching tracers (git-fixes).
- s390/ism: fix error return code in ism_probe() (git-fixes).
- s390/pci: do not set affinity for floating irqs (git-fixes).
- s390/pci: Fix possible deadlock in recover_store() (bsc#1165183 LTC#184103).
- s390/pci: Recover handle in clp_set_pci_fn() (bsc#1165183 LTC#184103).
- scripts/decodecode: fix trapping instruction formatting (bsc#1065729).
- scripts/dtc: Remove redundant YYLOC global declaration (bsc#1160388).
- scsi: bnx2i: fix potential use after free (bsc#1171600).
- scsi: core: Handle drivers which set sg_tablesize to zero (bsc#1171601) This commit also required: &gt; scsi: core: avoid preallocating big SGL for data
- scsi: core: save/restore command resid for error handling (bsc#1171602).
- scsi: core: scsi_trace: Use get_unaligned_be*() (bsc#1171604).
- scsi: core: try to get module before removing device (bsc#1171605).
- scsi: csiostor: Adjust indentation in csio_device_reset (bsc#1171606).
- scsi: csiostor: Do not enable IRQs too early (bsc#1171607).
- scsi: esas2r: unlock on error in esas2r_nvram_read_direct() (bsc#1171608).
- scsi: fnic: fix invalid stack access (bsc#1171609).
- scsi: fnic: fix msix interrupt allocation (bsc#1171610).
- scsi: ibmvscsi: Fix WARN_ON during event pool release (bsc#1170791 ltc#185128).
- scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func (bsc#1171611).
- scsi: iscsi: Fix a potential deadlock in the timeout handler (bsc#1171612).
- scsi: iscsi: qla4xxx: fix double free in probe (bsc#1171613).
- scsi: lpfc: Change default queue allocation for reduced memory consumption (bsc#1164780).
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences (bsc#1171614).
- scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG (bsc#1171615).
- scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event (bsc#1164780).
- scsi: lpfc: Fix MDS Diagnostic Enablement definition (bsc#1164780).
- scsi: lpfc: Fix negation of else clause in lpfc_prep_node_fc4type (bsc#1164780).
- scsi: lpfc: Fix noderef and address space warnings (bsc#1164780).
- scsi: lpfc: Maintain atomic consistency of queue_claimed flag (bsc#1164780).
- scsi: lpfc: remove duplicate unloading checks (bsc#1164780).
- scsi: lpfc: Remove re-binding of nvme rport during registration (bsc#1164780).
- scsi: lpfc: Remove redundant initialization to variable rc (bsc#1164780).
- scsi: lpfc: Remove unnecessary lockdep_assert_held calls (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.1 (bsc#1164780).
- scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state (bsc#1171616).
- scsi: qla2xxx: add ring buffer for tracing debug logs (bsc#1157169).
- scsi: qla2xxx: check UNLOADING before posting async work (bsc#1157169).
- scsi: qla2xxx: Delete all sessions before unregister local nvme port (bsc#1157169).
- scsi: qla2xxx: Do not log message when reading port speed via sysfs (bsc#1157169).
- scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV (bsc#1157169).
- scsi: qla2xxx: Fix regression warnings (bsc#1157169).
- scsi: qla2xxx: Remove non functional code (bsc#1157169).
- scsi: qla2xxx: set UNLOADING before waiting for session deletion (bsc#1157169).
- scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free (bsc#1171617).
- scsi: qla4xxx: fix double free bug (bsc#1171618).
- scsi: sd: Clear sdkp-&gt;protection_type if disk is reformatted without PI (bsc#1171619).
- scsi: sg: add sg_remove_request in sg_common_write (bsc#1171620).
- scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) (bsc#1171621).
- scsi: ufs: change msleep to usleep_range (bsc#1171622).
- scsi: ufs: Clean up ufshcd_scale_clks() and clock scaling error out path (bsc#1171623).
- scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic (bsc#1171624).
- scsi: ufs: Fix ufshcd_probe_hba() reture value in case ufshcd_scsi_add_wlus() fails (bsc#1171625).
- scsi: ufs: Recheck bkops level if bkops is disabled (bsc#1171626).
- sctp: fix possibly using a bad saddr with a given dst (networking-stable-20_04_02).
- sctp: fix refcount bug in sctp_wfree (networking-stable-20_04_02).
- selftests/powerpc: Fix build errors in powerpc ptrace selftests (boo#1124278).
- Separate one more kABI fixup from the functional change:
- seq_file: fix problem when seeking mid-record (bsc#1170125).
- serial: uartps: Move the spinlock after the read of the tx empty (git-fixes).
- sfc: detach from cb_page in efx_copy_channel() (networking-stable-20_03_14).
- signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig (bsc#1172185).
- slcan: not call free_netdev before rtnl_unlock in slcan_open (networking-stable-20_03_28).
- slip: make slhc_compress() more robust against malicious packets (networking-stable-20_03_14).
- smb3: Additional compression structures (bsc#1144333).
- smb3: Add new compression flags (bsc#1144333).
- smb3: change noisy error message to FYI (bsc#1144333).
- smb3: enable swap on SMB3 mounts (bsc#1144333).
- smb3: Minor cleanup of protocol definitions (bsc#1144333).
- smb3: remove overly noisy debug line in signing errors (bsc#1144333).
- smb3: smbdirect support can be configured by default (bsc#1144333).
- smb3: use SMB2_SIGNATURE_SIZE define (bsc#1144333).
- spi: bcm2835: Fix 3-wire mode if DMA is enabled (git-fixes).
- spi: bcm63xx-hsspi: Really keep pll clk enabled (bsc#1051510).
- spi: bcm-qspi: when tx/rx buffer is NULL set to 0 (bsc#1051510).
- spi: dw: Add SPI Rx-done wait method to DMA-based transfer (bsc#1051510).
- spi: dw: Add SPI Tx-done wait method to DMA-based transfer (bsc#1051510).
- spi: dw: Zero DMA Tx and Rx configurations on stack (bsc#1051510).
- spi: fsl: do not map irq during probe (git-fixes).
- spi: fsl: use platform_get_irq() instead of of_irq_to_resource() (git-fixes).
- spi: pxa2xx: Add CS control clock quirk (bsc#1051510).
- spi: qup: call spi_qup_pm_resume_runtime before suspending (bsc#1051510).
- spi: spi-fsl-dspi: Replace interruptible wait queue with a simple completion (git-fixes).
- spi: spi-s3c64xx: Fix system resume support (git-fixes).
- spi/zynqmp: remove entry that causes a cs glitch (bsc#1051510).
- staging: comedi: dt2815: fix writing hi byte of analog output (bsc#1051510).
- staging: comedi: Fix comedi_device refcnt leak in comedi_open (bsc#1051510).
- staging: iio: ad2s1210: Fix SPI reading (bsc#1051510).
- staging: vt6656: Do not set RCR_MULTICAST or RCR_BROADCAST by default (git-fixes).
- staging: vt6656: Fix drivers TBTT timing counter (git-fixes).
- staging: vt6656: Fix pairwise key entry save (git-fixes).
- sunrpc: expiry_time should be seconds not timeval (git-fixes).
- SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()' (git-fixes).
- supported.conf: Add br_netfilter to base (bsc#1169020).
- supported.conf: support w1 core and thermometer support
- svcrdma: Fix double svc_rdma_send_ctxt_put() in an error path (bsc#1103992).
- svcrdma: Fix leak of transport addresses (git-fixes).
- svcrdma: Fix trace point use-after-free race (bsc#1103992 ).
- taskstats: fix data-race (bsc#1172188).
- tcp: cache line align MAX_TCP_HEADER (networking-stable-20_04_27).
- tcp: repair: fix TCP_QUEUE_SEQ implementation (networking-stable-20_03_28).
- team: add missing attribute validation for array index (networking-stable-20_03_14).
- team: add missing attribute validation for port ifindex (networking-stable-20_03_14).
- team: fix hang in team_mode_get() (networking-stable-20_04_27).
- tools lib traceevent: Remove unneeded qsort and uses memmove instead (git-fixes).
- tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send() (bsc#1065729).
- tpm/tpm_tis: Free IRQ if probing fails (bsc#1082555).
- tpm/tpm_tis: Free IRQ if probing fails (git-fixes).
- tracing: Add a vmalloc_sync_mappings() for safe measure (git-fixes).
- tracing: Disable trace_printk() on post poned tests (git-fixes).
- tracing: Fix the race between registering 'snapshot' event trigger and triggering 'snapshot' operation (git-fixes).
- tty: rocket, avoid OOB access (git-fixes).
- tun: Do not put_page() for all negative return values from XDP program (bsc#1109837).
- UAS: fix deadlock in error handling and PM flushing work (git-fixes).
- UAS: no use logging any details in case of ENODEV (git-fixes).
- Update config files: Build w1 bus on arm64 (jsc#SLE-11048)
- USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair K70 RGB RAPIDFIRE (git-fixes).
- USB: cdc-acm: restore capability check order (git-fixes).
- USB: core: Fix misleading driver bug report (bsc#1051510).
- USB: dwc3: do not set gadget-&gt;is_otg flag (git-fixes).
- USB: dwc3: gadget: Do link recovery for SS and SSP (git-fixes).
- USB: early: Handle AMD's spec-compliant identifiers, too (git-fixes).
- USB: f_fs: Clear OS Extended descriptor counts to zero in ffs_data_reset() (git-fixes).
- USB: gadget: audio: Fix a missing error return value in audio_bind() (git-fixes).
- USB: gadget: composite: Inform controller driver of self-powered (git-fixes).
- USB: gadget: legacy: fix error return code in cdc_bind() (git-fixes).
- USB: gadget: legacy: fix error return code in gncm_bind() (git-fixes).
- USB: gadget: legacy: fix redundant initialization warnings (bsc#1051510).
- USB: gadget: net2272: Fix a memory leak in an error handling path in 'net2272_plat_probe()' (git-fixes).
- USB: gadget: udc: atmel: Fix vbus disconnect handling (git-fixes).
- USB: gadget: udc: atmel: Make some symbols static (git-fixes).
- USB: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete (git-fixes).
- USB: host: xhci-plat: keep runtime active when removing host (git-fixes).
- USB: hub: Fix handling of connect changes during sleep (git-fixes).
- usbnet: silence an unnecessary warning (bsc#1170770).
- USB: serial: garmin_gps: add sanity checking for data length (git-fixes).
- USB: serial: option: add BroadMobi BM806U (git-fixes).
- USB: serial: option: add support for ASKEY WWHC050 (git-fixes).
- USB: serial: option: add Wistron Neweb D19Q1 (git-fixes).
- USB: serial: qcserial: Add DW5816e support (git-fixes).
- USB: sisusbvga: Change port variable from signed to unsigned (git-fixes).
- usb-storage: Add unusual_devs entry for JMicron JMS566 (git-fixes).
- USB: uas: add quirk for LaCie 2Big Quadra (git-fixes).
- USB: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list (git-fixes).
- video: fbdev: sis: Remove unnecessary parentheses and commented code (bsc#1114279)
- video: fbdev: w100fb: Fix a potential double free (bsc#1051510).
- vrf: Check skb for XFRM_TRANSFORMED flag (networking-stable-20_04_27).
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (git-fixes).
- vt: selection, introduce vc_is_sel (git-fixes).
- vt: vt_ioctl: fix race in VT_RESIZEX (git-fixes).
- vt: vt_ioctl: fix use-after-free in vt_in_use() (git-fixes).
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (git-fixes).
- vxlan: check return value of gro_cells_init() (networking-stable-20_03_28).
- w1: Add subsystem kernel public interface (jsc#SLE-11048).
- w1: Fix slave count on 1-Wire bus (resend) (jsc#SLE-11048).
- w1: keep balance of mutex locks and refcnts (jsc#SLE-11048).
- w1: use put_device() if device_register() fail (jsc#SLE-11048).
- watchdog: reset last_hw_keepalive time at start (git-fixes).
- wcn36xx: Fix error handling path in 'wcn36xx_probe()' (bsc#1051510).
- wil6210: remove reset file from debugfs (git-fixes).
- wimax/i2400m: Fix potential urb refcnt leak (bsc#1051510).
- workqueue: do not use wq_select_unbound_cpu() for bound works (bsc#1172130).
- x86/entry/64: Fix unwind hints in kernel exit path (bsc#1058115).
- x86/entry/64: Fix unwind hints in register clearing code (bsc#1058115).
- x86/entry/64: Fix unwind hints in rewind_stack_do_exit() (bsc#1058115).
- x86/entry/64: Fix unwind hints in __switch_to_asm() (bsc#1058115).
- x86/hyperv: Allow guests to enable InvariantTSC (bsc#1170621, bsc#1170620).
- x86/Hyper-V: Free hv_panic_page when fail to register kmsg dump (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash data in die() when panic_on_oops is set (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash register data or kmsg before running crash kernel (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash register data when sysctl_record_panic_msg is not set (bsc#1170617, bsc#1170618).
- x86/Hyper-V: report value of misc_features (git fixes).
- x86/Hyper-V: Trigger crash enlightenment only once during system crash (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Unload vmbus channel in hv panic callback (bsc#1170617, bsc#1170618).
- x86/kprobes: Avoid kretprobe recursion bug (bsc#1114279).
- x86/resctrl: Fix invalid attempt at removing the default resource group (git-fixes).
- x86/resctrl: Preserve CDP enable over CPU hotplug (bsc#1114279).
- x86/unwind/orc: Do not skip the first frame for inactive tasks (bsc#1058115).
- x86/unwind/orc: Fix error handling in __unwind_start() (bsc#1058115).
- x86/unwind/orc: Fix error path for bad ORC entry type (bsc#1058115).
- x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks (bsc#1058115).
- x86/unwind/orc: Prevent unwinding before ORC initialization (bsc#1058115).
- x86/unwind: Prevent false warnings for non-current tasks (bsc#1058115).
- xen/pci: reserve MCFG areas earlier (bsc#1170145).
- xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish (networking-stable-20_04_27).
- xfs: clear PF_MEMALLOC before exiting xfsaild thread (git-fixes).
- xfs: Correctly invert xfs_buftarg LRU isolation logic (git-fixes).
- xfs: do not ever return a stale pointer from __xfs_dir3_free_read (git-fixes).
- xprtrdma: Fix completion wait during device removal (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-10"/>
	<updated date="2020-06-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089895">SUSE bug 1089895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124278">SUSE bug 1124278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127355">SUSE bug 1127355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151794">SUSE bug 1151794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152489">SUSE bug 1152489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154824">SUSE bug 1154824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157169">SUSE bug 1157169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158265">SUSE bug 1158265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160388">SUSE bug 1160388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160947">SUSE bug 1160947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164871">SUSE bug 1164871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165183">SUSE bug 1165183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165478">SUSE bug 1165478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165741">SUSE bug 1165741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166969">SUSE bug 1166969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166978">SUSE bug 1166978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167574">SUSE bug 1167574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167851">SUSE bug 1167851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167867">SUSE bug 1167867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168332">SUSE bug 1168332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168670">SUSE bug 1168670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168789">SUSE bug 1168789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169020">SUSE bug 1169020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169525">SUSE bug 1169525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169762">SUSE bug 1169762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170056">SUSE bug 1170056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170125">SUSE bug 1170125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170145">SUSE bug 1170145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170284">SUSE bug 1170284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170345">SUSE bug 1170345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170457">SUSE bug 1170457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170522">SUSE bug 1170522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170592">SUSE bug 1170592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170617">SUSE bug 1170617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170618">SUSE bug 1170618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170620">SUSE bug 1170620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170621">SUSE bug 1170621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170770">SUSE bug 1170770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170778">SUSE bug 1170778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170791">SUSE bug 1170791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170901">SUSE bug 1170901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171078">SUSE bug 1171078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171098">SUSE bug 1171098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171118">SUSE bug 1171118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171189">SUSE bug 1171189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171191">SUSE bug 1171191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171195">SUSE bug 1171195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171202">SUSE bug 1171202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171205">SUSE bug 1171205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171214">SUSE bug 1171214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171217">SUSE bug 1171217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171218">SUSE bug 1171218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171219">SUSE bug 1171219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171220">SUSE bug 1171220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171244">SUSE bug 1171244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171293">SUSE bug 1171293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171417">SUSE bug 1171417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171527">SUSE bug 1171527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171599">SUSE bug 1171599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171600">SUSE bug 1171600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171601">SUSE bug 1171601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171602">SUSE bug 1171602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171604">SUSE bug 1171604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171605">SUSE bug 1171605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171606">SUSE bug 1171606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171607">SUSE bug 1171607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171608">SUSE bug 1171608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171609">SUSE bug 1171609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171610">SUSE bug 1171610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171611">SUSE bug 1171611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171612">SUSE bug 1171612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171613">SUSE bug 1171613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171614">SUSE bug 1171614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171615">SUSE bug 1171615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171616">SUSE bug 1171616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171617">SUSE bug 1171617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171618">SUSE bug 1171618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171619">SUSE bug 1171619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171620">SUSE bug 1171620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171621">SUSE bug 1171621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171622">SUSE bug 1171622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171623">SUSE bug 1171623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171624">SUSE bug 1171624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171625">SUSE bug 1171625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171626">SUSE bug 1171626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171662">SUSE bug 1171662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171679">SUSE bug 1171679</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171691">SUSE bug 1171691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171692">SUSE bug 1171692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171694">SUSE bug 1171694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171695">SUSE bug 1171695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171736">SUSE bug 1171736</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171817">SUSE bug 1171817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171948">SUSE bug 1171948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171949">SUSE bug 1171949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171951">SUSE bug 1171951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171952">SUSE bug 1171952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171979">SUSE bug 1171979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171982">SUSE bug 1171982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171983">SUSE bug 1171983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172017">SUSE bug 1172017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172096">SUSE bug 1172096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172097">SUSE bug 1172097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172098">SUSE bug 1172098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172099">SUSE bug 1172099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172101">SUSE bug 1172101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172102">SUSE bug 1172102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172103">SUSE bug 1172103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172104">SUSE bug 1172104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172127">SUSE bug 1172127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172130">SUSE bug 1172130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172185">SUSE bug 1172185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172188">SUSE bug 1172188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172199">SUSE bug 1172199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172201">SUSE bug 1172201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172202">SUSE bug 1172202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172221">SUSE bug 1172221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172249">SUSE bug 1172249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172251">SUSE bug 1172251</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172317">SUSE bug 1172317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172342">SUSE bug 1172342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172343">SUSE bug 1172343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172344">SUSE bug 1172344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172366">SUSE bug 1172366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172378">SUSE bug 1172378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172391">SUSE bug 1172391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172397">SUSE bug 1172397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172453">SUSE bug 1172453</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19462/">CVE-2019-19462</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20806/">CVE-2019-20806</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20812/">CVE-2019-20812</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9455/">CVE-2019-9455</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10690/">CVE-2020-10690</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10711/">CVE-2020-10711</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10720/">CVE-2020-10720</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10732/">CVE-2020-10732</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-10751/">CVE-2020-10751</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12114/">CVE-2020-12114</cve>
	<cve impact="low" cvss3="1.8/CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12464/">CVE-2020-12464</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12652/">CVE-2020-12652</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12655/">CVE-2020-12655</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12656/">CVE-2020-12656</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12657/">CVE-2020-12657</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12659/">CVE-2020-12659</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12768/">CVE-2020-12768</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12769/">CVE-2020-12769</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13143/">CVE-2020-13143</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498045" comment="kernel-azure-4.12.14-8.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498046" comment="kernel-azure-base-4.12.14-8.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498047" comment="kernel-azure-devel-4.12.14-8.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498048" comment="kernel-devel-azure-4.12.14-8.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498049" comment="kernel-source-azure-4.12.14-8.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498050" comment="kernel-syms-azure-4.12.14-8.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138858" version="1" class="patch">
	<metadata>
		<title>Security update for google-compute-engine (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1169978" ref_url="https://bugzilla.suse.com/1169978" source="BUGZILLA"/>
		<reference ref_id="1173258" ref_url="https://bugzilla.suse.com/1173258" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8903" ref_url="https://www.suse.com/security/cve/CVE-2020-8903/" source="CVE"/>
		<reference ref_id="CVE-2020-8907" ref_url="https://www.suse.com/security/cve/CVE-2020-8907/" source="CVE"/>
		<reference ref_id="CVE-2020-8933" ref_url="https://www.suse.com/security/cve/CVE-2020-8933/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007139.html" source="SUSE-SU"/>
		<description>
This update for google-compute-engine fixes the following issues:

- Don't enable and start google-network-daemon.service when it's
  already installed (bsc#1169978)

  + Do not add the created user to the adm (CVE-2020-8903),
    docker (CVE-2020-8907), or lxd (CVE-2020-8933) groups
    if they exist (bsc#1173258)		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-15"/>
	<updated date="2020-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1169978">SUSE bug 1169978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173258">SUSE bug 1173258</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8903/">CVE-2020-8903</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8907/">CVE-2020-8907</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8933/">CVE-2020-8933</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498051" comment="google-compute-engine-init-20190801-4.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498052" comment="google-compute-engine-oslogin-20190801-4.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138859" version="1" class="patch">
	<metadata>
		<title>Security update for cni-plugins (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172410" ref_url="https://bugzilla.suse.com/1172410" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10749" ref_url="https://www.suse.com/security/cve/CVE-2020-10749/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1957-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007152.html" source="SUSE-SU"/>
		<description>
This update for cni-plugins fixes the following issues:

cni-plugins updated to version 0.8.6	  

- CVE-2020-10749: Fixed a potential Man-in-the-Middle attacks in IPv4 clusters by spoofing IPv6 router advertisements (bsc#1172410).

Release notes: 
https://github.com/containernetworking/plugins/releases/tag/v0.8.6
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-20"/>
	<updated date="2020-07-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172410">SUSE bug 1172410</bugzilla>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-10749/">CVE-2020-10749</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498053" comment="cni-plugins-0.8.6-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138860" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1150660" ref_url="https://bugzilla.suse.com/1150660" source="BUGZILLA"/>
		<reference ref_id="1151927" ref_url="https://bugzilla.suse.com/1151927" source="BUGZILLA"/>
		<reference ref_id="1152624" ref_url="https://bugzilla.suse.com/1152624" source="BUGZILLA"/>
		<reference ref_id="1158983" ref_url="https://bugzilla.suse.com/1158983" source="BUGZILLA"/>
		<reference ref_id="1159058" ref_url="https://bugzilla.suse.com/1159058" source="BUGZILLA"/>
		<reference ref_id="1161016" ref_url="https://bugzilla.suse.com/1161016" source="BUGZILLA"/>
		<reference ref_id="1162002" ref_url="https://bugzilla.suse.com/1162002" source="BUGZILLA"/>
		<reference ref_id="1162063" ref_url="https://bugzilla.suse.com/1162063" source="BUGZILLA"/>
		<reference ref_id="1163309" ref_url="https://bugzilla.suse.com/1163309" source="BUGZILLA"/>
		<reference ref_id="1166985" ref_url="https://bugzilla.suse.com/1166985" source="BUGZILLA"/>
		<reference ref_id="1167104" ref_url="https://bugzilla.suse.com/1167104" source="BUGZILLA"/>
		<reference ref_id="1168081" ref_url="https://bugzilla.suse.com/1168081" source="BUGZILLA"/>
		<reference ref_id="1168959" ref_url="https://bugzilla.suse.com/1168959" source="BUGZILLA"/>
		<reference ref_id="1169194" ref_url="https://bugzilla.suse.com/1169194" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169771" ref_url="https://bugzilla.suse.com/1169771" source="BUGZILLA"/>
		<reference ref_id="1169795" ref_url="https://bugzilla.suse.com/1169795" source="BUGZILLA"/>
		<reference ref_id="1170011" ref_url="https://bugzilla.suse.com/1170011" source="BUGZILLA"/>
		<reference ref_id="1170442" ref_url="https://bugzilla.suse.com/1170442" source="BUGZILLA"/>
		<reference ref_id="1170592" ref_url="https://bugzilla.suse.com/1170592" source="BUGZILLA"/>
		<reference ref_id="1170617" ref_url="https://bugzilla.suse.com/1170617" source="BUGZILLA"/>
		<reference ref_id="1170618" ref_url="https://bugzilla.suse.com/1170618" source="BUGZILLA"/>
		<reference ref_id="1171124" ref_url="https://bugzilla.suse.com/1171124" source="BUGZILLA"/>
		<reference ref_id="1171424" ref_url="https://bugzilla.suse.com/1171424" source="BUGZILLA"/>
		<reference ref_id="1171529" ref_url="https://bugzilla.suse.com/1171529" source="BUGZILLA"/>
		<reference ref_id="1171530" ref_url="https://bugzilla.suse.com/1171530" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1171732" ref_url="https://bugzilla.suse.com/1171732" source="BUGZILLA"/>
		<reference ref_id="1171739" ref_url="https://bugzilla.suse.com/1171739" source="BUGZILLA"/>
		<reference ref_id="1171743" ref_url="https://bugzilla.suse.com/1171743" source="BUGZILLA"/>
		<reference ref_id="1171753" ref_url="https://bugzilla.suse.com/1171753" source="BUGZILLA"/>
		<reference ref_id="1171759" ref_url="https://bugzilla.suse.com/1171759" source="BUGZILLA"/>
		<reference ref_id="1171835" ref_url="https://bugzilla.suse.com/1171835" source="BUGZILLA"/>
		<reference ref_id="1171841" ref_url="https://bugzilla.suse.com/1171841" source="BUGZILLA"/>
		<reference ref_id="1171868" ref_url="https://bugzilla.suse.com/1171868" source="BUGZILLA"/>
		<reference ref_id="1171904" ref_url="https://bugzilla.suse.com/1171904" source="BUGZILLA"/>
		<reference ref_id="1172247" ref_url="https://bugzilla.suse.com/1172247" source="BUGZILLA"/>
		<reference ref_id="1172257" ref_url="https://bugzilla.suse.com/1172257" source="BUGZILLA"/>
		<reference ref_id="1172344" ref_url="https://bugzilla.suse.com/1172344" source="BUGZILLA"/>
		<reference ref_id="1172458" ref_url="https://bugzilla.suse.com/1172458" source="BUGZILLA"/>
		<reference ref_id="1172484" ref_url="https://bugzilla.suse.com/1172484" source="BUGZILLA"/>
		<reference ref_id="1172537" ref_url="https://bugzilla.suse.com/1172537" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1172687" ref_url="https://bugzilla.suse.com/1172687" source="BUGZILLA"/>
		<reference ref_id="1172719" ref_url="https://bugzilla.suse.com/1172719" source="BUGZILLA"/>
		<reference ref_id="1172759" ref_url="https://bugzilla.suse.com/1172759" source="BUGZILLA"/>
		<reference ref_id="1172775" ref_url="https://bugzilla.suse.com/1172775" source="BUGZILLA"/>
		<reference ref_id="1172781" ref_url="https://bugzilla.suse.com/1172781" source="BUGZILLA"/>
		<reference ref_id="1172782" ref_url="https://bugzilla.suse.com/1172782" source="BUGZILLA"/>
		<reference ref_id="1172783" ref_url="https://bugzilla.suse.com/1172783" source="BUGZILLA"/>
		<reference ref_id="1172871" ref_url="https://bugzilla.suse.com/1172871" source="BUGZILLA"/>
		<reference ref_id="1172872" ref_url="https://bugzilla.suse.com/1172872" source="BUGZILLA"/>
		<reference ref_id="1172999" ref_url="https://bugzilla.suse.com/1172999" source="BUGZILLA"/>
		<reference ref_id="1173060" ref_url="https://bugzilla.suse.com/1173060" source="BUGZILLA"/>
		<reference ref_id="1173074" ref_url="https://bugzilla.suse.com/1173074" source="BUGZILLA"/>
		<reference ref_id="1173146" ref_url="https://bugzilla.suse.com/1173146" source="BUGZILLA"/>
		<reference ref_id="1173265" ref_url="https://bugzilla.suse.com/1173265" source="BUGZILLA"/>
		<reference ref_id="1173280" ref_url="https://bugzilla.suse.com/1173280" source="BUGZILLA"/>
		<reference ref_id="1173284" ref_url="https://bugzilla.suse.com/1173284" source="BUGZILLA"/>
		<reference ref_id="1173428" ref_url="https://bugzilla.suse.com/1173428" source="BUGZILLA"/>
		<reference ref_id="1173514" ref_url="https://bugzilla.suse.com/1173514" source="BUGZILLA"/>
		<reference ref_id="1173567" ref_url="https://bugzilla.suse.com/1173567" source="BUGZILLA"/>
		<reference ref_id="1173573" ref_url="https://bugzilla.suse.com/1173573" source="BUGZILLA"/>
		<reference ref_id="1173746" ref_url="https://bugzilla.suse.com/1173746" source="BUGZILLA"/>
		<reference ref_id="1173818" ref_url="https://bugzilla.suse.com/1173818" source="BUGZILLA"/>
		<reference ref_id="1173820" ref_url="https://bugzilla.suse.com/1173820" source="BUGZILLA"/>
		<reference ref_id="1173825" ref_url="https://bugzilla.suse.com/1173825" source="BUGZILLA"/>
		<reference ref_id="1173826" ref_url="https://bugzilla.suse.com/1173826" source="BUGZILLA"/>
		<reference ref_id="1173833" ref_url="https://bugzilla.suse.com/1173833" source="BUGZILLA"/>
		<reference ref_id="1173838" ref_url="https://bugzilla.suse.com/1173838" source="BUGZILLA"/>
		<reference ref_id="1173839" ref_url="https://bugzilla.suse.com/1173839" source="BUGZILLA"/>
		<reference ref_id="1173845" ref_url="https://bugzilla.suse.com/1173845" source="BUGZILLA"/>
		<reference ref_id="1173857" ref_url="https://bugzilla.suse.com/1173857" source="BUGZILLA"/>
		<reference ref_id="1174113" ref_url="https://bugzilla.suse.com/1174113" source="BUGZILLA"/>
		<reference ref_id="1174115" ref_url="https://bugzilla.suse.com/1174115" source="BUGZILLA"/>
		<reference ref_id="1174122" ref_url="https://bugzilla.suse.com/1174122" source="BUGZILLA"/>
		<reference ref_id="1174123" ref_url="https://bugzilla.suse.com/1174123" source="BUGZILLA"/>
		<reference ref_id="1174186" ref_url="https://bugzilla.suse.com/1174186" source="BUGZILLA"/>
		<reference ref_id="1174187" ref_url="https://bugzilla.suse.com/1174187" source="BUGZILLA"/>
		<reference ref_id="1174296" ref_url="https://bugzilla.suse.com/1174296" source="BUGZILLA"/>
		<reference ref_id="1174343" ref_url="https://bugzilla.suse.com/1174343" source="BUGZILLA"/>
		<reference ref_id="1174356" ref_url="https://bugzilla.suse.com/1174356" source="BUGZILLA"/>
		<reference ref_id="1174409" ref_url="https://bugzilla.suse.com/1174409" source="BUGZILLA"/>
		<reference ref_id="1174438" ref_url="https://bugzilla.suse.com/1174438" source="BUGZILLA"/>
		<reference ref_id="1174462" ref_url="https://bugzilla.suse.com/1174462" source="BUGZILLA"/>
		<reference ref_id="1174543" ref_url="https://bugzilla.suse.com/1174543" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20810" ref_url="https://www.suse.com/security/cve/CVE-2019-20810/" source="CVE"/>
		<reference ref_id="CVE-2019-20908" ref_url="https://www.suse.com/security/cve/CVE-2019-20908/" source="CVE"/>
		<reference ref_id="CVE-2020-0305" ref_url="https://www.suse.com/security/cve/CVE-2020-0305/" source="CVE"/>
		<reference ref_id="CVE-2020-10766" ref_url="https://www.suse.com/security/cve/CVE-2020-10766/" source="CVE"/>
		<reference ref_id="CVE-2020-10767" ref_url="https://www.suse.com/security/cve/CVE-2020-10767/" source="CVE"/>
		<reference ref_id="CVE-2020-10768" ref_url="https://www.suse.com/security/cve/CVE-2020-10768/" source="CVE"/>
		<reference ref_id="CVE-2020-10769" ref_url="https://www.suse.com/security/cve/CVE-2020-10769/" source="CVE"/>
		<reference ref_id="CVE-2020-10773" ref_url="https://www.suse.com/security/cve/CVE-2020-10773/" source="CVE"/>
		<reference ref_id="CVE-2020-10781" ref_url="https://www.suse.com/security/cve/CVE-2020-10781/" source="CVE"/>
		<reference ref_id="CVE-2020-12771" ref_url="https://www.suse.com/security/cve/CVE-2020-12771/" source="CVE"/>
		<reference ref_id="CVE-2020-12888" ref_url="https://www.suse.com/security/cve/CVE-2020-12888/" source="CVE"/>
		<reference ref_id="CVE-2020-13974" ref_url="https://www.suse.com/security/cve/CVE-2020-13974/" source="CVE"/>
		<reference ref_id="CVE-2020-14416" ref_url="https://www.suse.com/security/cve/CVE-2020-14416/" source="CVE"/>
		<reference ref_id="CVE-2020-15393" ref_url="https://www.suse.com/security/cve/CVE-2020-15393/" source="CVE"/>
		<reference ref_id="CVE-2020-15780" ref_url="https://www.suse.com/security/cve/CVE-2020-15780/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007208.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-15393: Fixed a memory leak in usbtest_disconnect (bnc#1173514).
- CVE-2020-12771: An issue was discovered in btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails (bnc#1171732).
- CVE-2020-12888: The VFIO PCI driver mishandled attempts to access disabled memory space (bnc#1171868).
- CVE-2020-10773: Fixed a memory leak on s390/s390x, in the cmm_timeout_hander in file arch/s390/mm/cmm.c (bnc#1172999).
- CVE-2020-14416: Fixed a race condition in tty-&gt;disc_data handling in the slip and slcan line discipline could lead to a use-after-free. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002).
- CVE-2020-10768: Fixed an issue with the prctl() function, where indirect branch speculation could be enabled even though it was diabled before (bnc#1172783).
- CVE-2020-10766: Fixed an issue which allowed an attacker with a local account to disable SSBD protection (bnc#1172781).
- CVE-2020-10767: Fixed an issue where Indirect Branch Prediction Barrier was disabled in certain circumstances, leaving the system open to a spectre v2 style attack (bnc#1172782).
- CVE-2020-13974: Fixed a integer overflow in drivers/tty/vt/keyboard.c, if k_ascii is called several times in a row (bnc#1172775).
- CVE-2019-20810: Fixed a memory leak in go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c because it did not call snd_card_free for a failure path (bnc#1172458).
- CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265).
- CVE-2020-10781: Fixed a denial of service issue in the ZRAM implementation (bsc#1173074).
- CVE-2020-0305: In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bsc#1174462).
- CVE-2019-20908: An issue was discovered in drivers/firmware/efi/efi.c: incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032 (bsc#1173567).
- CVE-2020-15780: An issue was discovered in drivers/acpi/acpi_configfs.c: injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30 (bsc#1173573).

The following non-security bugs were fixed:

- ACPI: GED: add support for _Exx / _Lxx handler methods (bsc#1111666).
- ACPI: GED: use correct trigger type field in _Exx / _Lxx handling (bsc#1111666).
- ACPI: NFIT: Fix unlock on error in scrub_show() (bsc#1171753).
- ACPI: PM: Avoid using power resources if there are none for D0 (bsc#1051510).
- ACPI: sysfs: Fix pm_profile_attr type (bsc#1111666).
- ACPI: video: Use native backlight on Acer Aspire 5783z (bsc#1111666).
- ACPI: video: Use native backlight on Acer TravelMate 5735Z (bsc#1111666).
- ALSA: es1688: Add the missed snd_card_free() (bsc#1051510).
- ALSA: hda: Add ElkhartLake HDMI codec vid (bsc#1111666).
- ALSA: hda: add sienna_cichlid audio asic id for sienna_cichlid up (bsc#1111666).
- ALSA: hda/hdmi - enable runtime pm for newer AMD display audio (bsc#1111666).
- ALSA: hda - let hs_mic be picked ahead of hp_mic (bsc#1111666).
- ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines (bsc#1111666).
- ALSA: hda/realtek - Add LED class support for micmute LED (bsc#1111666).
- ALSA: hda/realtek - Enable micmute LED on and HP system (bsc#1111666).
- ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 (bsc#1111666).
- ALSA: hda/realtek - Fix unused variable warning w/o CONFIG_LEDS_TRIGGER_AUDIO (bsc#1111666).
- ALSA: hda/realtek - Introduce polarity for micmute LED GPIO (bsc#1111666).
- ALSA: lx6464es - add support for LX6464ESe pci express variant (bsc#1111666).
- ALSA: opl3: fix infoleak in opl3 (bsc#1111666).
- ALSA: pcm: disallow linking stream to itself (bsc#1111666).
- ALSA: usb-audio: Add duplex sound support for USB devices using implicit feedback (bsc#1111666).
- ALSA: usb-audio: Add Pioneer DJ DJM-900NXS2 support (bsc#1111666).
- ALSA: usb-audio: add quirk for MacroSilicon MS2109 (bsc#1111666).
- ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock (bsc#1111666).
- ALSA: usb-audio: Clean up quirk entries with macros (bsc#1111666).
- ALSA: usb-audio: Fix inconsistent card PM state after resume (bsc#1111666).
- ALSA: usb-audio: Fix packet size calculation (bsc#1111666).
- ALSA: usb-audio: Fix racy list management in output queue (bsc#1111666).
- ALSA: usb-audio: Improve frames size computation (bsc#1111666).
- ALSA: usb-audio: Manage auto-pm of all bundled interfaces (bsc#1111666).
- ALSA: usb-audio: Use the new macro for HP Dock rename quirks (bsc#1111666).
- amdgpu: a NULL -&gt;mm does not mean a thread is a kthread (git-fixes).
- arm64: map FDT as RW for early_init_dt_scan() (jsc#SLE-12423).
- ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (bsc#1111666).
- ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx (bsc#1111666).
- ath9k: Fix use-after-free Write in ath9k_htc_rx_msg (bsc#1111666).
- ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb (bsc#1111666).
- ax25: fix setsockopt(SO_BINDTODEVICE) (networking-stable-20_05_27).
- b43: Fix connection problem with WPA3 (bsc#1111666).
- b43_legacy: Fix connection problem with WPA3 (bsc#1111666).
- bcache: Fix an error code in bch_dump_read() (git fixes (block drivers)).
- be2net: fix link failure after ethtool offline test (git-fixes).
- block: nr_sects_write(): Disable preemption on seqcount write (bsc#1173818).
- block: remove QUEUE_FLAG_STACKABLE (git fixes (block drivers)).
- block: sed-opal: fix sparse warning: convert __be64 data (git fixes (block drivers)).
- Bluetooth: Add SCO fallback for invalid LMP parameters error (bsc#1111666).
- bnxt_en: Fix AER reset logic on 57500 chips (git-fixes).
- bnxt_en: Fix ethtool selftest crash under error conditions (git-fixes).
- bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails (git-fixes).
- bnxt_en: Fix ipv6 RFS filter matching logic (git-fixes).
- bnxt_en: fix NULL dereference in case SR-IOV configuration fails (git-fixes).
- bnxt_en: Fix VF anti-spoof filter setup (networking-stable-20_05_12).
- bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features() (networking-stable-20_05_12).
- bnxt_en: Improve AER slot reset (networking-stable-20_05_12).
- brcmfmac: fix wrong location to get firmware feature (bsc#1111666).
- brcmfmac: Transform compatible string for FW loading (bsc#1169771).
- btrfs: add assertions for tree == inode-&gt;io_tree to extent IO helpers (bsc#1174438).
- btrfs: add new helper btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: Always use a cached extent_state in btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: do not zero f_bavail if we have available space (bsc#1168081).
- btrfs: do not zero f_bavail if we have available space (bsc#1168081).
- btrfs: drop argument tree from btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: fix extent_state leak in btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof (bsc#1174438).
- btrfs: fix hang on snapshot creation after RWF_NOWAIT write (bsc#1174438).
- btrfs: fix RWF_NOWAIT write not failling when we need to cow (bsc#1174438).
- btrfs: fix RWF_NOWAIT writes blocking on extent locks and waiting for IO (bsc#1174438).
- btrfs: qgroup: Fix a bug that prevents qgroup to be re-enabled after disable (bsc#1172247).
- btrfs: Return EAGAIN if we can't start no snpashot write in check_can_nocow (bsc#1174438).
- btrfs: use correct count in btrfs_file_write_iter() (bsc#1174438).
- btrfs: Use newly introduced btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: volumes: Remove ENOSPC-prone btrfs_can_relocate() (bsc#1171124).
- bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads (bsc#1111666).
- carl9170: remove P2P_GO support (bsc#1111666).
- CDC-ACM: heed quirk also in error handling (git-fixes).
- ceph: convert mdsc-&gt;cap_dirty to a per-session list (bsc#1167104).
- ceph: request expedited service on session's last cap flush (bsc#1167104).
- cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages (bsc#1173857).
- char/random: Add a newline at the end of the file (jsc#SLE-12423).
- cifs: get rid of unused parameter in reconn_setup_dfs_targets() (bsc#1144333).
- cifs: handle hostnames that resolve to same ip in failover (bsc#1144333 bsc#1161016).
- cifs: set up next DFS target before generic_ip_connect() (bsc#1144333 bsc#1161016).
- clk: bcm2835: Fix return type of bcm2835_register_gate (bsc#1051510).
- clk: clk-flexgen: fix clock-critical handling (bsc#1051510).
- clk: sunxi: Fix incorrect usage of round_down() (bsc#1051510).
- clocksource: dw_apb_timer: Make CPU-affiliation being optional (bsc#1111666).
- compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE (git fixes (block drivers)).
- compat_ioctl: block: handle Persistent Reservations (git fixes (block drivers)).
- copy_{to,from}_user(): consolidate object size checks (git fixes).
- crypto: algboss - do not wait during notifier callback (bsc#1111666).
- crypto: algif_skcipher - Cap recv SG list at ctx-&gt;used (bsc#1111666).
- crypto: caam - update xts sector size for large input length (bsc#1111666).
- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (bsc#1111666).
- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (git-fixes).
- Crypto/chcr: fix for ccm(aes) failed test (bsc#1111666).
- crypto: chelsio/chtls: properly set tp-&gt;lsndtime (bsc#1111666).
- crypto: talitos - fix IPsec cipher in length (git-fixes).
- crypto: talitos - reorder code in talitos_edesc_alloc() (git-fixes).
- debugfs: Check module state before warning in {full/open}_proxy_open() (bsc#1173746).
- devinet: fix memleak in inetdev_init() (networking-stable-20_06_07).
- /dev/mem: Add missing memory barriers for devmem_inode (git-fixes).
- /dev/mem: Revoke mappings when a driver claims the region (git-fixes).
- dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()' (bsc#1111666).
- dm btree: increase rebalance threshold in __rebalance2() (git fixes (block drivers)).
- dm cache: fix a crash due to incorrect work item cancelling (git fixes (block drivers)).
- dm crypt: fix benbi IV constructor crash if used in authenticated mode (git fixes (block drivers)).
- dm: fix potential for q-&gt;make_request_fn NULL pointer (git fixes (block drivers)).
- dm space map common: fix to ensure new block isn't already in use (git fixes (block drivers)).
- dm: various cleanups to md-&gt;queue initialization code (git fixes).
- dm verity fec: fix hash block number in verity_fec_decode (git fixes (block drivers)).
- dm verity fec: fix memory leak in verity_fec_dtr (git fixes (block drivers)).
- dpaa_eth: fix usage as DSA master, try 3 (networking-stable-20_05_27).
- driver-core, libnvdimm: Let device subsystems add local lockdep coverage (bsc#1171753).
- Drivers: hv: Change flag to write log level in panic msg to false (bsc#1170617, bsc#1170618).
- drivers: soc: ti: knav_qmss_queue: Make knav_gp_range_ops static (bsc#1051510).
- drm: amd/display: fix Kconfig help text (bsc#1113956) 	* only fix DEBUG_KERNEL_DC
- drm: bridge: adv7511: Extend list of audio sample rates (bsc#1111666).
- drm/dp_mst: Increase ACT retry timeout to 3s (bsc#1113956)  * context changes
- drm: encoder_slave: fix refcouting error for modules (bsc#1111666).
- drm: encoder_slave: fix refcouting error for modules (bsc#1114279)
- drm/i915/icl+: Fix hotplug interrupt disabling after storm detection (bsc#1112178)
- drm/i915: Whitelist context-local timestamp in the gen9 cmdparser (bsc#1111666).
- drm/mediatek: Check plane visibility in atomic_update (bsc#1113956)  * context changes
- drm/msm/dpu: fix error return code in dpu_encoder_init (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for Asus T101HA panel (bsc#1111666).
- drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003 (bsc#1111666).
- drm/qxl: Use correct notify port address when creating cursor ring (bsc#1113956)
- drm/radeon: fix double free (bsc#1113956)
- drm/radeon: fix fb_div check in ni_init_smc_spll_table() (bsc#1113956)
- drm/sun4i: hdmi ddc clk: Fix size of m divider (bsc#1111666).
- drm/tegra: hub: Do not enable orphaned window group (bsc#1111666).
- drm/vkms: Hold gem object while still in-use (bsc#1113956)  * context changes
- Drop another USB dwc3 gadget patch that broke the build
- Drop USB dwc3 gadget patch that broke the build on openSUSE-15.1 branch
- e1000: Distribute switch variables for initialization (bsc#1111666).
- e1000e: Disable TSO for buffer overrun workaround (bsc#1051510).
- e1000e: Do not wake up the system via WOL if device wakeup is disabled (bsc#1051510).
- e1000e: Relax condition to trigger reset for ME workaround (bsc#1111666).
- EDAC/amd64: Read back the scrub rate PCI register on F15h (bsc#1114279).
- efi/random: Increase size of firmware supplied randomness (jsc#SLE-12423).
- efi/random: Treat EFI_RNG_PROTOCOL output as bootloader randomness (jsc#SLE-12423).
- efi: READ_ONCE rng seed size before munmap (jsc#SLE-12423).
- efi: Reorder pr_notice() with add_device_randomness() call (jsc#SLE-12423).
- evm: Check also if *tfm is an error pointer in init_desc() (bsc#1051510).
- evm: Fix a small race in init_desc() (bsc#1051510).
- ext4: fix a data race at inode-&gt;i_blocks (bsc#1171835).
- ext4: fix partial cluster initialization when splitting extent (bsc#1173839).
- ext4: fix race between ext4_sync_parent() and rename() (bsc#1173838).
- ext4, jbd2: ensure panic by fix a race between jbd2 abort and ext4 error handlers (bsc#1173833).
- extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()' (bsc#1051510).
- fanotify: fix ignore mask logic for events on child and on dir (bsc#1172719).
- fdt: add support for rng-seed (jsc#SLE-12423).
- fdt: Update CRC check for rng-seed (jsc#SLE-12423).
- firmware: imx: scu: Fix corruption of header (git-fixes).
- firmware: imx: scu: Fix possible memory leak in imx_scu_probe() (bsc#1111666).
- Fix boot crash with MD (bsc#1174343) Refresh patches.suse/mdraid-fix-read-write-bytes-accounting.patch
- fix multiplication overflow in copy_fdtable() (bsc#1173825).
- Fix Patch-mainline tag in the previous zram fix patch
- fpga: dfl: afu: Corrected error handling levels (git-fixes).
- fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (networking-stable-20_05_12).
- gpiolib: Document that GPIO line names are not globally unique (bsc#1051510).
- gpu: host1x: Detach driver on unregister (bsc#1111666).
- gpu: ipu-v3: pre: do not trigger update if buffer address does not change (bsc#1111666).
- HID: magicmouse: do not set up autorepeat (git-fixes).
- HID: sony: Fix for broken buttons on DS3 USB dongles (bsc#1051510).
- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() (bsc#1111666).
- hwmon: (emc2103) fix unable to change fan pwm1_enable attribute (bsc#1111666).
- hwmon: (max6697) Make sure the OVERT mask is set correctly (bsc#1111666).
- i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 (bsc#1111666).
- i2c: eg20t: Load module automatically if ID matches (bsc#1111666).
- i2c: mlxcpld: check correct size of maximum RECV_LEN packet (bsc#1111666).
- i40e: reduce stack usage in i40e_set_fc (git-fixes).
- IB/hfi1: Do not destroy hfi1_wq when the device is shut down (bsc#1174409).
- IB/hfi1: Do not destroy link_wq when the device is shut down (bsc#1174409).
- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- ibmvnic: continue to init in CRQ reset returns H_CLOSED (bsc#1173280 ltc#185369).
- ibmvnic: Flush existing work items before device removal (bsc#1065729).
- ibmvnic: Harden device login requests (bsc#1170011 ltc#183538).
- iio: buffer: Do not allow buffers without any channels enabled to be activated (bsc#1051510).
- iio:health:afe4404 Fix timestamp alignment and prevent data leak (bsc#1111666).
- iio:humidity:hdc100x Fix alignment and data leak issues (bsc#1111666).
- iio:magnetometer:ak8974: Fix alignment and data leak issues (bsc#1111666).
- iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() (bsc#1111666).
- iio: pressure: bmp280: Tolerate IRQ before registering (bsc#1051510).
- iio:pressure:ms5611 Fix buffer element alignment (bsc#1111666).
- iio: pressure: zpa2326: handle pm_runtime_get_sync failure (bsc#1111666).
- ima: Directly assign the ima_default_policy pointer to ima_rules (bsc#1051510).
- ima: Fix ima digest hash table key calculation (bsc#1051510).
- include/asm-generic/topology.h: guard cpumask_of_node() macro argument (bsc#1148868).
- Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list (bsc#1111666).
- input: i8042 - Remove special PowerPC handling (git-fixes).
- Input: synaptics - add a second working PNP_ID for Lenovo T470s (bsc#1111666).
- intel_idle: Graceful probe failure when MWAIT is disabled (bsc#1174115).
- intel_th: Fix a NULL dereference when hub driver is not loaded (bsc#1111666).
- ipvlan: call dev_change_flags when ipvlan mode is reset (git-fixes).
- ixgbevf: Remove limit of 10 entries for unicast filter list (git-fixes).
- jbd2: avoid leaking transaction credits when unreserving handle (bsc#1173845).
- jbd2: Preserve kABI when adding j_abort_mutex (bsc#1173833).
- kabi: hv: prevent struct device_node to become defined (bsc#1172871).
- kabi: ppc64le: prevent struct dma_map_ops to become defined (jsc#SLE-12423).
- kABI: protect struct mlx5_cmd_work_ent (kabi).
- kABI: reintroduce inet_hashtables.h include to l2tp_ip (kabi).
- kernfs: fix barrier usage in __kernfs_new_node() (bsc#1111666).
- KVM: nVMX: Do not reread VMCS-agnostic state when switching VMCS (bsc#1114279).
- KVM: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1114279).
- KVM: x86: Fix APIC page invalidation race (bsc#1174122).
- kvm: x86: Fix L1TF mitigation for shadow MMU (bsc#1171904).
- KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated (bsc#1171904).
- KVM: x86: only do L1TF workaround on affected processors (bsc#1171904).
- l2tp: add sk_family checks to l2tp_validate_socket (networking-stable-20_06_07).
- l2tp: do not use inet_hash()/inet_unhash() (networking-stable-20_06_07).
- libceph: do not omit recovery_deletes in target_copy() (bsc#1174113).
- libceph: ignore pool overlay and cache logic on redirects (bsc#1173146).
- libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock (bsc#1171753).
- libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant (bsc#1171753).
- libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl() (bsc#1171753).
- libnvdimm: cover up changes in struct nvdimm_bus (bsc#1171753).
- libnvdimm: cover up nd_pfn_sb changes (bsc#1171759).
- libnvdimm/dax: Pick the right alignment default when creating dax devices (bsc#1171759).
- libnvdimm/label: Remove the dpa align check (bsc#1171759).
- libnvdimm/of_pmem: Provide a unique name for bus provider (bsc#1171739).
- libnvdimm/pfn_dev: Add a build check to make sure we notice when struct page size change (bsc#1171743).
- libnvdimm/pfn_dev: Add page size and struct page size to pfn superblock (bsc#1171759).
- libnvdimm/pfn: Prevent raw mode fallback if pfn-infoblock valid (bsc#1171743).
- libnvdimm/pmem: Advance namespace seed for specific probe errors (bsc#1171743).
- libnvdimm/region: Initialize bad block for volatile namespaces (bnc#1151927 5.3.6).
- libnvdimm/region: Rewrite _probe_success() to _advance_seeds() (bsc#1171743).
- libnvdimm: Use PAGE_SIZE instead of SZ_4K for align check (bsc#1171759).
- livepatch: Apply vmlinux-specific KLP relocations early (bsc#1071995).
- livepatch: Disallow vmlinux.ko (bsc#1071995).
- livepatch: Make klp_apply_object_relocs static (bsc#1071995).
- livepatch: Prevent module-specific KLP rela sections from referencing vmlinux symbols (bsc#1071995).
- livepatch: Remove .klp.arch (bsc#1071995).
- loop: replace kill_bdev with invalidate_bdev (bsc#1173820).
- lpfc_debugfs: get rid of pointless access_ok() (bsc#1172687 bsc#1171530).
- lpfc: Synchronize NVME transport and lpfc driver devloss_tmo (bcs#1173060).
- mac80211: add option for setting control flags (bsc#1111666).
- mac80211: set IEEE80211_TX_CTRL_PORT_CTRL_PROTO for nl80211 TX (bsc#1111666).
- mailbox: imx: Disable the clock on devm_mbox_controller_register() failure (git-fixes).
- md: Avoid namespace collision with bitmap API (git fixes (block drivers)).
- mdraid: fix read/write bytes accounting (bsc#1172537).
- md: use memalloc scope APIs in mddev_suspend()/mddev_resume() (bsc#1166985)).
- media: cec: silence shift wrapping warning in __cec_s_log_addrs() (git-fixes).
- media: si2157: Better check for running tuner in init (bsc#1111666).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue (git-fixes).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue (git-fixes).
- mlxsw: pci: Return error on PCI reset timeout (git-fixes).
- mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list properly (networking-stable-20_05_12).
- mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed (git-fixes).
- mlxsw: spectrum_dpipe: Add missing error path (git-fixes).
- mlxsw: spectrum: Prevent force of 56G (git-fixes).
- mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead (git-fixes).
- mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON() (git-fixes).
- mlxsw: spectrum_switchdev: Add MDB entries in prepare phase (git-fixes).
- mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky (git-fixes).
- mmc: block: Fix request completion in the CQE timeout path (bsc#1111666).
- mmc: block: Fix use-after-free issue for rpmb (bsc#1111666).
- mmc: fix compilation of user API (bsc#1051510).
- mmc: sdhci: do not enable card detect interrupt for gpio cd type (bsc#1111666).
- mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk (bsc#1111666).
- Move upstreamed lpfc patches into sorted section
- mvpp2: remove misleading comment (git-fixes).
- net: be more gentle about silly gso requests coming from user (networking-stable-20_06_07).
- net: check untrusted gso_size at kernel entry (networking-stable-20_06_07).
- net/cxgb4: Check the return from t4_query_params properly (git-fixes).
- net: dsa: bcm_sf2: Fix node reference count (git-fixes).
- net: dsa: loop: Add module soft dependency (networking-stable-20_05_16).
- net: dsa: mt7530: fix roaming from DSA user ports (networking-stable-20_05_27).
- net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it (git-fixes).
- net: ena: add missing ethtool TX timestamping indication (git-fixes).
- net: ena: avoid memory access violation by validating req_id properly (git-fixes).
- net: ena: do not wake up tx queue when down (git-fixes).
- net: ena: ena-com.c: prevent NULL pointer dereference (git-fixes).
- net: ena: ethtool: use correct value for crc32 hash (git-fixes).
- net: ena: fix continuous keep-alive resets (git-fixes).
- net: ena: fix corruption of dev_idx_to_host_tbl (git-fixes).
- net: ena: fix default tx interrupt moderation interval (git-fixes).
- net: ena: fix incorrect default RSS key (git-fixes).
- net: ena: fix incorrectly saving queue numbers when setting RSS indirection table (git-fixes).
- net: ena: fix issues in setting interrupt moderation params in ethtool (git-fixes).
- net: ena: fix potential crash when rxfh key is NULL (git-fixes).
- net: ena: fix retrieval of nonadaptive interrupt moderation intervals (git-fixes).
- net: ena: fix uses of round_jiffies() (git-fixes).
- net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE (git-fixes).
- net: ena: reimplement set/get_coalesce() (git-fixes).
- net: ena: rss: do not allocate key when not supported (git-fixes).
- net: ena: rss: fix failure to get indirection table (git-fixes).
- net: ena: rss: store hash function as values and not bits (git-fixes).
- netfilter: connlabels: prefer static lock initialiser (git-fixes).
- netfilter: ctnetlink: netns exit must wait for callbacks (bsc#1169795).
- netfilter: not mark a spinlock as __read_mostly (git-fixes).
- net: fix a potential recursive NETDEV_FEAT_CHANGE (networking-stable-20_05_16).
- net: inet_csk: Fix so_reuseport bind-address cache in tb-&gt;fast* (networking-stable-20_05_27).
- net: ipip: fix wrong address family in init error path (networking-stable-20_05_27).
- net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set (git-fixes).
- net: macsec: preserve ingress frame ordering (networking-stable-20_05_12).
- net/mlx4_core: drop useless LIST_HEAD (git-fixes).
- net/mlx4_core: fix a memory leak bug (git-fixes).
- net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (networking-stable-20_05_12).
- net/mlx5: Add command entry handling completion (networking-stable-20_05_27).
- net/mlx5: Avoid panic when setting vport rate (git-fixes).
- net/mlx5: Continue driver initialization despite debugfs failure (git-fixes).
- net/mlx5e: ethtool, Fix a typo in WOL function names (git-fixes).
- net/mlx5e: Fix traffic duplication in ethtool steering (git-fixes).
- net/mlx5e: Remove unnecessary clear_bit()s (git-fixes).
- net/mlx5e: Update netdev txq on completions during closure (networking-stable-20_05_27).
- net/mlx5: Fix command entry leak in Internal Error State (networking-stable-20_05_12).
- net/mlx5: Fix crash upon suspend/resume (networking-stable-20_06_07).
- net/mlx5: Fix forced completion access non initialized command entry (networking-stable-20_05_12).
- net: mvmdio: allow up to four clocks to be specified for orion-mdio (git-fixes).
- net: mvpp2: prs: Do not override the sign bit in SRAM parser shift (git-fixes).
- net: phy: fix aneg restart in phy_ethtool_set_eee (networking-stable-20_05_16).
- netprio_cgroup: Fix unlimited memory leak of v2 cgroups (networking-stable-20_05_16).
- net: qede: stop adding events on an already destroyed workqueue (git-fixes).
- net: qed: fix excessive QM ILT lines consumption (git-fixes).
- net: qed: fix NVMe login fails over VFs (git-fixes).
- net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (networking-stable-20_05_27).
- net: revert 'net: get rid of an signed integer overflow in ip_idents_reserve()' (networking-stable-20_05_27).
- net sched: fix reporting the first-time use timestamp (networking-stable-20_05_27).
- net: stricter validation of untrusted gso packets (networking-stable-20_05_12).
- net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict() (networking-stable-20_05_12).
- net/tls: Fix sk_psock refcnt leak when in tls_data_ready() (networking-stable-20_05_12).
- net: usb: qmi_wwan: add support for DW5816e (networking-stable-20_05_12).
- net: usb: qmi_wwan: add Telit 0x1050 composition (networking-stable-20_06_07).
- net: usb: qmi_wwan: add Telit LE910C1-EUX composition (networking-stable-20_06_07).
- net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() (bsc#1172484).
- nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K (git-fixes).
- NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() (bsc#1170592).
- NFSv4: Retry CLOSE and DELEGRETURN on NFS4ERR_OLD_STATEID (bsc#1170592).
- nilfs2: fix null pointer dereference at nilfs_segctor_do_construct() (bsc#1173857).
- nl80211: fix NL80211_ATTR_CHANNEL_WIDTH attribute type (bsc#1111666).
- nvdimm: Avoid race between probe and reading device attributes (bsc#1170442).
- nvme: check for NVME_CTRL_LIVE in nvme_report_ns_ids() (bcs#1171558 bsc#1159058).
- nvme: do not update multipath disk information if the controller is down (bcs#1171558 bsc#1159058).
- nvme: fail cancelled commands with NVME_SC_HOST_PATH_ERROR (bsc#1158983 bsc#1172538).
- nvme-fc: Fail transport errors with NVME_SC_HOST_PATH (bsc#1158983 bsc#1172538).
- nvme-tcp: fail command with NVME_SC_HOST_PATH_ERROR send failed (bsc#1158983 bsc#1172538).
- objtool: Clean instruction state before each function validation (bsc#1169514).
- objtool: Ignore empty alternatives (bsc#1169514).
- ocfs2: no need try to truncate file beyond i_size (bsc#1171841).
- overflow: Fix -Wtype-limits compilation warnings (git fixes).
- overflow.h: Add arithmetic shift helper (git fixes).
- p54usb: add AirVasT USB stick device-id (bsc#1051510).
- padata: ensure the reorder timer callback runs on the correct CPU (git-fixes).
- padata: reorder work kABI fixup (git-fixes).
- PCI/AER: Remove HEST/FIRMWARE_FIRST parsing for AER ownership (bsc#1174356).
- PCI/AER: Use only _OSC to determine AER ownership (bsc#1174356).
- PCI: Allow pci_resize_resource() for devices on root bus (bsc#1051510).
- PCI: Fix pci_register_host_bridge() device_register() error handling (bsc#1051510).
- PCI: Generalize multi-function power dependency device links (bsc#1111666).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871, bsc#1172872).
- PCI: hv: Fix the PCI HyperV probe failure path to release resource properly (bsc#1172871, bsc#1172872).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871, bsc#1172872).
- PCI: hv: Move hypercall related definitions into tlfs header (bsc#1172871, bsc#1172872).
- PCI: hv: Move retarget related structures into tlfs header (bsc#1172871, bsc#1172872).
- PCI: hv: Reorganize the code in preparation of hibernation (bsc#1172871, bsc#1172872).
- PCI: hv: Retry PCI bus D0 entry on invalid device state (bsc#1172871, bsc#1172872).
- PCI: pciehp: Fix indefinite wait on sysfs requests (git-fixes).
- PCI: pciehp: Support interrupts sent from D3hot (git-fixes).
- PCI/PM: Call .bridge_d3() hook only if non-NULL (git-fixes).
- PCI: Program MPS for RCiEP devices (bsc#1051510).
- PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port (bsc#1051510).
- pci: Revive pci_dev __aer_firmware_first* fields for kABI (bsc#1174356).
- pcm_native: result of put_user() needs to be checked (bsc#1111666).
- perf: Allocate context task_ctx_data for child event (git-fixes).
- perf/cgroup: Fix perf cgroup hierarchy support (git-fixes).
- perf: Copy parent's address filter offsets on clone (git-fixes).
- perf/core: Add sanity check to deal with pinned event failure (git-fixes).
- perf/core: Avoid freeing static PMU contexts when PMU is unregistered (git-fixes).
- perf/core: Correct event creation with PERF_FORMAT_GROUP (git-fixes).
- perf/core: Do not WARN() for impossible ring-buffer sizes (git-fixes).
- perf/core: Fix ctx_event_type in ctx_resched() (git-fixes).
- perf/core: Fix error handling in perf_event_alloc() (git-fixes).
- perf/core: Fix exclusive events' grouping (git-fixes).
- perf/core: Fix group scheduling with mixed hw and sw events (git-fixes).
- perf/core: Fix impossible ring-buffer sizes warning (git-fixes).
- perf/core: Fix locking for children siblings group read (git-fixes).
- perf/core: Fix lock inversion between perf,trace,cpuhp (git-fixes (dependent patch for 18736eef1213)).
- perf/core: Fix perf_event_read_value() locking (git-fixes).
- perf/core: Fix perf_pmu_unregister() locking (git-fixes).
- perf/core: Fix __perf_read_group_add() locking (git-fixes (dependent patch)).
- perf/core: Fix perf_sample_regs_user() mm check (git-fixes).
- perf/core: Fix possible Spectre-v1 indexing for -&gt;aux_pages (git-fixes).
- perf/core: Fix race between close() and fork() (git-fixes).
- perf/core: Fix the address filtering fix (git-fixes).
- perf/core: Fix use-after-free in uprobe_perf_close() (git-fixes).
- perf/core: Force USER_DS when recording user stack data (git-fixes).
- perf/core: Restore mmap record type correctly (git-fixes).
- perf: Fix header.size for namespace events (git-fixes).
- perf/ioctl: Add check for the sample_period value (git-fixes).
- perf, pt, coresight: Fix address filters for vmas with non-zero offset (git-fixes).
- perf: Return proper values for user stack errors (git-fixes).
- perf/x86/amd: Constrain Large Increment per Cycle events (git-fixes).
- perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity (git-fixes).
- perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops (git-fixes).
- perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) (git-fixes).
- perf/x86/amd/iommu: Make the 'amd_iommu_attr_groups' symbol static (git-fixes).
- perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs (git-fixes stable).
- perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs (git-fixes).
- perf/x86/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf events (git-fixes stable).
- perf/x86: Enable free running PEBS for REGS_USER/INTR (git-fixes).
- perf/x86: Fix incorrect PEBS_REGS (git-fixes).
- perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts() (git-fixes).
- perf/x86/intel: Add proper condition to run sched_task callbacks (git-fixes).
- perf/x86/intel/bts: Fix the use of page_private() (git-fixes).
- perf/x86/intel: Fix PT PMI handling (git-fixes).
- perf/x86/intel: Move branch tracing setup to the Intel-specific source file (git-fixes).
- perf/x86/intel/uncore: Add Node ID mask (git-fixes).
- perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX (git-fixes).
- perf/x86/intel/uncore: Handle invalid event coding for free-running counter (git-fixes).
- perf/x86/uncore: Fix event group support (git-fixes).
- pid: Improve the comment about waiting in zap_pid_ns_processes (git fixes)).
- pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()' (bsc#1051510).
- pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()' (bsc#1051510).
- pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs (bsc#1051510).
- platform/x86: dell-laptop: do not register micmute LED if there is no token (bsc#1111666).
- platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() (bsc#1111666).
- PM / Domains: Allow genpd users to specify default active wakeup behavior (git-fixes).
- pnp: Use list_for_each_entry() instead of open coding (git fixes).
- powerpc/64s: Do not let DT CPU features set FSCR_DSCR (bsc#1065729).
- powerpc/64s: Save FSCR to init_task.thread.fscr after feature init (bsc#1065729).
- powerpc/book3s64: Export has_transparent_hugepage() related functions (bsc#1171759).
- powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey (bsc#1065729).
- powerpc/fadump: fix race between pstore write and fadump crash trigger (bsc#1168959 ltc#185010).
- powerpc/xive: Clear the page tables for the ESB IO mapping (bsc#1085030).
- powerpc/xmon: Reset RCU and soft lockup watchdogs (bsc#1065729).
- power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select (bsc#1051510).
- power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()' (bsc#1051510).
- power: supply: smb347-charger: IRQSTAT_D is volatile (bsc#1051510).
- power: vexpress: add suppress_bind_attrs to true (bsc#1111666).
- pppoe: only process PADT targeted at local interfaces (networking-stable-20_05_16).
- qed: reduce maximum stack frame size (git-fixes).
- qlcnic: fix missing release in qlcnic_83xx_interrupt_test (git-fixes).
- r8152: support additional Microsoft Surface Ethernet Adapter variant (networking-stable-20_05_27).
- raid5: remove gfp flags from scribble_alloc() (bsc#1166985).
- RDMA/efa: Fix setting of wrong bit in get/set_feature commands (bsc#1111666)
- RDMA/efa: Set maximum pkeys device attribute (bsc#1111666)
- RDMA/efa: Support remote read access in MR registration (bsc#1111666)
- RDMA/efa: Unified getters/setters for device structs bitmask access (bsc#1111666)
- README.BRANCH: Add Takashi Iwai as primary maintainer.
- regmap: debugfs: Do not sleep while atomic for fast_io regmaps (bsc#1111666).
- resolve KABI warning for perf-pt-coresight (git-fixes).
- Revert 'bcache: ignore pending signals when creating gc and allocator thread' (git fixes (block drivers)).
- Revert commit e918e570415c ('tpm_tis: Remove the HID IFX0102') (bsc#1111666).
- Revert 'dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues' (git fixes (block drivers)).
- Revert 'thermal: mediatek: fix register index error' (bsc#1111666).
- Revert 'tools lib traceevent: Remove unneeded qsort and uses memmove'
- rtnetlink: Fix memory(net_device) leak when -&gt;newlink fails (git-fixes).
- s390/bpf: Maintain 8-byte stack alignment (bsc#1169194).
- s390: fix syscall_get_error for compat processes (git-fixes).
- s390/qdio: consistently restore the IRQ handler (git-fixes).
- s390/qdio: lock device while installing IRQ handler (git-fixes).
- s390/qdio: put thinint indicator after early error (git-fixes).
- s390/qdio: tear down thinint indicator after early error (git-fixes).
- s390/qeth: fix error handling for isolation mode cmds (git-fixes).
- sch_choke: avoid potential panic in choke_reset() (networking-stable-20_05_12).
- sch_sfq: validate silly quantum values (networking-stable-20_05_12).
- scsi: aacraid: fix a signedness bug (bsc#1174296).
- scsi: hisi_sas: fix calls to dma_set_mask_and_coherent() (bsc#1174296).
- scsi: ibmvscsi: Do not send host info in adapter info MAD after LPM (bsc#1172759 ltc#184814).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Avoid another null dereference in lpfc_sli4_hba_unset() (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1158983).
- scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (bsc#1158983).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix less-than-zero comparison of unsigned value (bsc#1158983).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1158983).
- scsi: megaraid_sas: Fix a compilation warning (bsc#1174296).
- scsi: mpt3sas: Fix double free in attach error handling (bsc#1174296).
- scsi: qedf: Add port_id getter (bsc#1150660).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (bsc#1174296).
- scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (bsc#1158983).
- sctp: Do not add the shutdown timer if its already been added (networking-stable-20_05_27).
- sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (networking-stable-20_05_27).
- spi: dw: use 'smp_mb()' to avoid sending spi data error (bsc#1051510).
- spi: fix initial SPI_SR value in spi-fsl-dspi (bsc#1111666).
- spi: pxa2xx: Apply CS clk quirk to BXT (bsc#1111666).
- spi: spidev: fix a race between spidev_release and spidev_remove (bsc#1111666).
- spi: spi-mem: Fix Dual/Quad modes on Octal-capable devices (bsc#1111666).
- spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate (bsc#1111666).
- staging: comedi: verify array index is correct before using it (bsc#1111666).
- staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK (bsc#1051510).
- staging: sm750fb: add missing case while setting FB_VISUAL (bsc#1051510).
- SUNRPC: The TCP back channel mustn't disappear while requests are outstanding (bsc#1152624).
- tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes (bsc#1173284).
- timers: Add a function to start/reduce a timer (networking-stable-20_05_27).
- tpm_tis: extra chip-&gt;ops check on error path in tpm_tis_core_init (bsc#1111666).
- tpm_tis: Remove the HID IFX0102 (bsc#1111666).
- tracing: Fix event trigger to accept redundant spaces (git-fixes).
- tty: hvc_console, fix crashes on parallel open/close (git-fixes).
- tty: n_gsm: Fix bogus i++ in gsm_data_kick (bsc#1051510).
- tty: n_gsm: Fix SOF skipping (bsc#1051510).
- tty: n_gsm: Fix waking up upper tty layer when room available (bsc#1051510).
- tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040 (networking-stable-20_05_12).
- ubifs: remove broken lazytime support (bsc#1173826).
- usb: add USB_QUIRK_DELAY_INIT for Logitech C922 (git-fixes).
- USB: c67x00: fix use after free in c67x00_giveback_urb (bsc#1111666).
- usb: chipidea: core: add wakeup support for extcon (bsc#1111666).
- usb: dwc2: Fix shutdown callback in platform (bsc#1111666).
- usb: dwc2: gadget: move gadget resume after the core is in L0 state (bsc#1051510).
- usb: dwc3: gadget: introduce cancelled_list (git-fixes).
- usb: dwc3: gadget: never call -&gt;complete() from -&gt;ep_queue() (git-fixes).
- usb: dwc3: gadget: Properly handle ClearFeature(halt) (git-fixes).
- usb: dwc3: gadget: Properly handle failed kick_transfer (git-fixes).
- USB: ehci: reopen solution for Synopsys HC bug (git-fixes).
- usb: gadget: fix potential double-free in m66592_probe (bsc#1111666).
- usb: gadget: lpc32xx_udc: do not dereference ep pointer before null check (bsc#1051510).
- usb: gadget: udc: atmel: fix uninitialized read in debug printk (bsc#1111666).
- usb: gadget: udc: atmel: remove outdated comment in usba_ep_disable() (bsc#1111666).
- usb: gadget: udc: Potential Oops in error handling code (bsc#1111666).
- USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke (bsc#1051510).
- usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() (bsc#1111666).
- USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe() (bsc#1051510).
- usb: musb: Fix runtime PM imbalance on error (bsc#1051510).
- usb: musb: start session in resume for host port (bsc#1051510).
- usbnet: smsc95xx: Fix use-after-free after removal (bsc#1111666).
- USB: ohci-sm501: Add missed iounmap() in remove (bsc#1111666).
- USB: serial: ch341: add new Product ID for CH340 (bsc#1111666).
- USB: serial: cypress_m8: enable Simply Automated UPB PIM (bsc#1111666).
- USB: serial: iuu_phoenix: fix memory corruption (bsc#1111666).
- USB: serial: option: add GosunCn GM500 series (bsc#1111666).
- USB: serial: option: add Quectel EG95 LTE modem (bsc#1111666).
- USB: serial: option: add Telit LE910C1-EUX compositions (bsc#1051510).
- USB: serial: qcserial: add DW5816e QDL support (bsc#1051510).
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (bsc#1051510).
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (git-fixes).
- vfio/pci: Fix SR-IOV VF handling with MMIO blocking (bsc#1174123).
- vfs: Fix EOVERFLOW testing in put_compat_statfs64 (bnc#1151927 5.3.6).
- virtio-blk: handle block_device_operations callbacks after hot unplug (git fixes (block drivers)).
- virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial (git-fixes).
- vmxnet3: add geneve and vxlan tunnel offload support (bsc#1172484).
- vmxnet3: add support to get/set rx flow hash (bsc#1172484).
- vmxnet3: allow rx flow hash ops only when rss is enabled (bsc#1172484).
- vmxnet3: avoid format strint overflow warning (bsc#1172484).
- vmxnet3: prepare for version 4 changes (bsc#1172484).
- vmxnet3: Remove always false conditional statement (bsc#1172484).
- vmxnet3: remove redundant initialization of pointer 'rq' (bsc#1172484).
- vmxnet3: remove unused flag 'rxcsum' from struct vmxnet3_adapter (bsc#1172484).
- vmxnet3: Replace msleep(1) with usleep_range() (bsc#1172484).
- vmxnet3: update to version 4 (bsc#1172484).
- vmxnet3: use correct hdr reference when packet is encapsulated (bsc#1172484).
- vsock: fix timeout in vsock_accept() (networking-stable-20_06_07).
- vxlan: Avoid infinite loop when suppressing NS messages with invalid options (git-fixes).
- w1: omap-hdq: cleanup to add missing newline for some dev_dbg (bsc#1051510).
- watchdog: sp805: fix restart handler (bsc#1111666).
- wil6210: add general initialization/size checks (bsc#1111666).
- wil6210: check rx_buff_mgmt before accessing it (bsc#1111666).
- wil6210: ignore HALP ICR if already handled (bsc#1111666).
- wil6210: make sure Rx ring sizes are correlated (git-fixes).
- work around mvfs bug (bsc#1162063).
- x86/apic: Install an empty physflat_init_apic_ldr (bsc#1163309).
- x86/cpu/amd: Make erratum #1054 a legacy erratum (bsc#1114279).
- x86/events/intel/ds: Add PERF_SAMPLE_PERIOD into PEBS_FREERUNNING_FLAGS (git-fixes).
- x86: Fix early boot crash on gcc-10, third try (bsc#1114279).
- x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (bsc#1172257).
- x86/reboot/quirks: Add MacBook6,1 reboot quirk (bsc#1114279).
- xfrm: fix error in comment (git fixes).
- xhci: Fix incorrect EP_STATE_MASK (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-03"/>
	<updated date="2020-08-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150660">SUSE bug 1150660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151927">SUSE bug 1151927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152624">SUSE bug 1152624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158983">SUSE bug 1158983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159058">SUSE bug 1159058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161016">SUSE bug 1161016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162002">SUSE bug 1162002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162063">SUSE bug 1162063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163309">SUSE bug 1163309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166985">SUSE bug 1166985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167104">SUSE bug 1167104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168081">SUSE bug 1168081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168959">SUSE bug 1168959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169194">SUSE bug 1169194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169771">SUSE bug 1169771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169795">SUSE bug 1169795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170011">SUSE bug 1170011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170442">SUSE bug 1170442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170592">SUSE bug 1170592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170617">SUSE bug 1170617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170618">SUSE bug 1170618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171124">SUSE bug 1171124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171424">SUSE bug 1171424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171529">SUSE bug 1171529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171530">SUSE bug 1171530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171732">SUSE bug 1171732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171739">SUSE bug 1171739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171743">SUSE bug 1171743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171753">SUSE bug 1171753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171759">SUSE bug 1171759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171835">SUSE bug 1171835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171841">SUSE bug 1171841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171868">SUSE bug 1171868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171904">SUSE bug 1171904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172247">SUSE bug 1172247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172257">SUSE bug 1172257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172344">SUSE bug 1172344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172458">SUSE bug 1172458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172484">SUSE bug 1172484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172537">SUSE bug 1172537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172687">SUSE bug 1172687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172719">SUSE bug 1172719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172759">SUSE bug 1172759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172775">SUSE bug 1172775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172781">SUSE bug 1172781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172782">SUSE bug 1172782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172783">SUSE bug 1172783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172871">SUSE bug 1172871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172872">SUSE bug 1172872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172999">SUSE bug 1172999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173060">SUSE bug 1173060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173074">SUSE bug 1173074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173146">SUSE bug 1173146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173265">SUSE bug 1173265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173280">SUSE bug 1173280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173284">SUSE bug 1173284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173428">SUSE bug 1173428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173514">SUSE bug 1173514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173567">SUSE bug 1173567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173573">SUSE bug 1173573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173746">SUSE bug 1173746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173818">SUSE bug 1173818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173820">SUSE bug 1173820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173825">SUSE bug 1173825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173826">SUSE bug 1173826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173833">SUSE bug 1173833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173838">SUSE bug 1173838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173839">SUSE bug 1173839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173845">SUSE bug 1173845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173857">SUSE bug 1173857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174113">SUSE bug 1174113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174115">SUSE bug 1174115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174122">SUSE bug 1174122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174123">SUSE bug 1174123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174186">SUSE bug 1174186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174187">SUSE bug 1174187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174296">SUSE bug 1174296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174343">SUSE bug 1174343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174356">SUSE bug 1174356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174409">SUSE bug 1174409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174438">SUSE bug 1174438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174462">SUSE bug 1174462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174543">SUSE bug 1174543</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20810/">CVE-2019-20810</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20908/">CVE-2019-20908</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0305/">CVE-2020-0305</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10766/">CVE-2020-10766</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10767/">CVE-2020-10767</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10768/">CVE-2020-10768</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10769/">CVE-2020-10769</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10773/">CVE-2020-10773</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10781/">CVE-2020-10781</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12771/">CVE-2020-12771</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12888/">CVE-2020-12888</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13974/">CVE-2020-13974</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14416/">CVE-2020-14416</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15393/">CVE-2020-15393</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15780/">CVE-2020-15780</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498054" comment="kernel-azure-4.12.14-8.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498055" comment="kernel-azure-base-4.12.14-8.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498056" comment="kernel-azure-devel-4.12.14-8.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498057" comment="kernel-devel-azure-4.12.14-8.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498058" comment="kernel-source-azure-4.12.14-8.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498059" comment="kernel-syms-azure-4.12.14-8.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138861" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1074701" ref_url="https://bugzilla.suse.com/1074701" source="BUGZILLA"/>
		<reference ref_id="1083548" ref_url="https://bugzilla.suse.com/1083548" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1085235" ref_url="https://bugzilla.suse.com/1085235" source="BUGZILLA"/>
		<reference ref_id="1085308" ref_url="https://bugzilla.suse.com/1085308" source="BUGZILLA"/>
		<reference ref_id="1087078" ref_url="https://bugzilla.suse.com/1087078" source="BUGZILLA"/>
		<reference ref_id="1087082" ref_url="https://bugzilla.suse.com/1087082" source="BUGZILLA"/>
		<reference ref_id="1094912" ref_url="https://bugzilla.suse.com/1094912" source="BUGZILLA"/>
		<reference ref_id="1100394" ref_url="https://bugzilla.suse.com/1100394" source="BUGZILLA"/>
		<reference ref_id="1102640" ref_url="https://bugzilla.suse.com/1102640" source="BUGZILLA"/>
		<reference ref_id="1105412" ref_url="https://bugzilla.suse.com/1105412" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1120163" ref_url="https://bugzilla.suse.com/1120163" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1152148" ref_url="https://bugzilla.suse.com/1152148" source="BUGZILLA"/>
		<reference ref_id="1163524" ref_url="https://bugzilla.suse.com/1163524" source="BUGZILLA"/>
		<reference ref_id="1165629" ref_url="https://bugzilla.suse.com/1165629" source="BUGZILLA"/>
		<reference ref_id="1166965" ref_url="https://bugzilla.suse.com/1166965" source="BUGZILLA"/>
		<reference ref_id="1169790" ref_url="https://bugzilla.suse.com/1169790" source="BUGZILLA"/>
		<reference ref_id="1170232" ref_url="https://bugzilla.suse.com/1170232" source="BUGZILLA"/>
		<reference ref_id="1171688" ref_url="https://bugzilla.suse.com/1171688" source="BUGZILLA"/>
		<reference ref_id="1171988" ref_url="https://bugzilla.suse.com/1171988" source="BUGZILLA"/>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1172108" ref_url="https://bugzilla.suse.com/1172108" source="BUGZILLA"/>
		<reference ref_id="1172247" ref_url="https://bugzilla.suse.com/1172247" source="BUGZILLA"/>
		<reference ref_id="1172418" ref_url="https://bugzilla.suse.com/1172418" source="BUGZILLA"/>
		<reference ref_id="1172428" ref_url="https://bugzilla.suse.com/1172428" source="BUGZILLA"/>
		<reference ref_id="1172781" ref_url="https://bugzilla.suse.com/1172781" source="BUGZILLA"/>
		<reference ref_id="1172782" ref_url="https://bugzilla.suse.com/1172782" source="BUGZILLA"/>
		<reference ref_id="1172783" ref_url="https://bugzilla.suse.com/1172783" source="BUGZILLA"/>
		<reference ref_id="1172871" ref_url="https://bugzilla.suse.com/1172871" source="BUGZILLA"/>
		<reference ref_id="1172872" ref_url="https://bugzilla.suse.com/1172872" source="BUGZILLA"/>
		<reference ref_id="1172873" ref_url="https://bugzilla.suse.com/1172873" source="BUGZILLA"/>
		<reference ref_id="1172963" ref_url="https://bugzilla.suse.com/1172963" source="BUGZILLA"/>
		<reference ref_id="1173485" ref_url="https://bugzilla.suse.com/1173485" source="BUGZILLA"/>
		<reference ref_id="1173798" ref_url="https://bugzilla.suse.com/1173798" source="BUGZILLA"/>
		<reference ref_id="1173954" ref_url="https://bugzilla.suse.com/1173954" source="BUGZILLA"/>
		<reference ref_id="1174003" ref_url="https://bugzilla.suse.com/1174003" source="BUGZILLA"/>
		<reference ref_id="1174026" ref_url="https://bugzilla.suse.com/1174026" source="BUGZILLA"/>
		<reference ref_id="1174070" ref_url="https://bugzilla.suse.com/1174070" source="BUGZILLA"/>
		<reference ref_id="1174161" ref_url="https://bugzilla.suse.com/1174161" source="BUGZILLA"/>
		<reference ref_id="1174205" ref_url="https://bugzilla.suse.com/1174205" source="BUGZILLA"/>
		<reference ref_id="1174387" ref_url="https://bugzilla.suse.com/1174387" source="BUGZILLA"/>
		<reference ref_id="1174484" ref_url="https://bugzilla.suse.com/1174484" source="BUGZILLA"/>
		<reference ref_id="1174547" ref_url="https://bugzilla.suse.com/1174547" source="BUGZILLA"/>
		<reference ref_id="1174549" ref_url="https://bugzilla.suse.com/1174549" source="BUGZILLA"/>
		<reference ref_id="1174550" ref_url="https://bugzilla.suse.com/1174550" source="BUGZILLA"/>
		<reference ref_id="1174625" ref_url="https://bugzilla.suse.com/1174625" source="BUGZILLA"/>
		<reference ref_id="1174658" ref_url="https://bugzilla.suse.com/1174658" source="BUGZILLA"/>
		<reference ref_id="1174685" ref_url="https://bugzilla.suse.com/1174685" source="BUGZILLA"/>
		<reference ref_id="1174689" ref_url="https://bugzilla.suse.com/1174689" source="BUGZILLA"/>
		<reference ref_id="1174699" ref_url="https://bugzilla.suse.com/1174699" source="BUGZILLA"/>
		<reference ref_id="1174734" ref_url="https://bugzilla.suse.com/1174734" source="BUGZILLA"/>
		<reference ref_id="1174757" ref_url="https://bugzilla.suse.com/1174757" source="BUGZILLA"/>
		<reference ref_id="1174771" ref_url="https://bugzilla.suse.com/1174771" source="BUGZILLA"/>
		<reference ref_id="1174840" ref_url="https://bugzilla.suse.com/1174840" source="BUGZILLA"/>
		<reference ref_id="1174841" ref_url="https://bugzilla.suse.com/1174841" source="BUGZILLA"/>
		<reference ref_id="1174843" ref_url="https://bugzilla.suse.com/1174843" source="BUGZILLA"/>
		<reference ref_id="1174844" ref_url="https://bugzilla.suse.com/1174844" source="BUGZILLA"/>
		<reference ref_id="1174845" ref_url="https://bugzilla.suse.com/1174845" source="BUGZILLA"/>
		<reference ref_id="1174852" ref_url="https://bugzilla.suse.com/1174852" source="BUGZILLA"/>
		<reference ref_id="1174873" ref_url="https://bugzilla.suse.com/1174873" source="BUGZILLA"/>
		<reference ref_id="1174887" ref_url="https://bugzilla.suse.com/1174887" source="BUGZILLA"/>
		<reference ref_id="1174904" ref_url="https://bugzilla.suse.com/1174904" source="BUGZILLA"/>
		<reference ref_id="1174926" ref_url="https://bugzilla.suse.com/1174926" source="BUGZILLA"/>
		<reference ref_id="1174968" ref_url="https://bugzilla.suse.com/1174968" source="BUGZILLA"/>
		<reference ref_id="1175062" ref_url="https://bugzilla.suse.com/1175062" source="BUGZILLA"/>
		<reference ref_id="1175063" ref_url="https://bugzilla.suse.com/1175063" source="BUGZILLA"/>
		<reference ref_id="1175064" ref_url="https://bugzilla.suse.com/1175064" source="BUGZILLA"/>
		<reference ref_id="1175065" ref_url="https://bugzilla.suse.com/1175065" source="BUGZILLA"/>
		<reference ref_id="1175066" ref_url="https://bugzilla.suse.com/1175066" source="BUGZILLA"/>
		<reference ref_id="1175067" ref_url="https://bugzilla.suse.com/1175067" source="BUGZILLA"/>
		<reference ref_id="1175112" ref_url="https://bugzilla.suse.com/1175112" source="BUGZILLA"/>
		<reference ref_id="1175127" ref_url="https://bugzilla.suse.com/1175127" source="BUGZILLA"/>
		<reference ref_id="1175128" ref_url="https://bugzilla.suse.com/1175128" source="BUGZILLA"/>
		<reference ref_id="1175149" ref_url="https://bugzilla.suse.com/1175149" source="BUGZILLA"/>
		<reference ref_id="1175199" ref_url="https://bugzilla.suse.com/1175199" source="BUGZILLA"/>
		<reference ref_id="1175213" ref_url="https://bugzilla.suse.com/1175213" source="BUGZILLA"/>
		<reference ref_id="1175228" ref_url="https://bugzilla.suse.com/1175228" source="BUGZILLA"/>
		<reference ref_id="1175232" ref_url="https://bugzilla.suse.com/1175232" source="BUGZILLA"/>
		<reference ref_id="1175284" ref_url="https://bugzilla.suse.com/1175284" source="BUGZILLA"/>
		<reference ref_id="1175393" ref_url="https://bugzilla.suse.com/1175393" source="BUGZILLA"/>
		<reference ref_id="1175394" ref_url="https://bugzilla.suse.com/1175394" source="BUGZILLA"/>
		<reference ref_id="1175396" ref_url="https://bugzilla.suse.com/1175396" source="BUGZILLA"/>
		<reference ref_id="1175397" ref_url="https://bugzilla.suse.com/1175397" source="BUGZILLA"/>
		<reference ref_id="1175398" ref_url="https://bugzilla.suse.com/1175398" source="BUGZILLA"/>
		<reference ref_id="1175399" ref_url="https://bugzilla.suse.com/1175399" source="BUGZILLA"/>
		<reference ref_id="1175400" ref_url="https://bugzilla.suse.com/1175400" source="BUGZILLA"/>
		<reference ref_id="1175401" ref_url="https://bugzilla.suse.com/1175401" source="BUGZILLA"/>
		<reference ref_id="1175402" ref_url="https://bugzilla.suse.com/1175402" source="BUGZILLA"/>
		<reference ref_id="1175403" ref_url="https://bugzilla.suse.com/1175403" source="BUGZILLA"/>
		<reference ref_id="1175404" ref_url="https://bugzilla.suse.com/1175404" source="BUGZILLA"/>
		<reference ref_id="1175405" ref_url="https://bugzilla.suse.com/1175405" source="BUGZILLA"/>
		<reference ref_id="1175406" ref_url="https://bugzilla.suse.com/1175406" source="BUGZILLA"/>
		<reference ref_id="1175407" ref_url="https://bugzilla.suse.com/1175407" source="BUGZILLA"/>
		<reference ref_id="1175408" ref_url="https://bugzilla.suse.com/1175408" source="BUGZILLA"/>
		<reference ref_id="1175409" ref_url="https://bugzilla.suse.com/1175409" source="BUGZILLA"/>
		<reference ref_id="1175410" ref_url="https://bugzilla.suse.com/1175410" source="BUGZILLA"/>
		<reference ref_id="1175411" ref_url="https://bugzilla.suse.com/1175411" source="BUGZILLA"/>
		<reference ref_id="1175412" ref_url="https://bugzilla.suse.com/1175412" source="BUGZILLA"/>
		<reference ref_id="1175413" ref_url="https://bugzilla.suse.com/1175413" source="BUGZILLA"/>
		<reference ref_id="1175414" ref_url="https://bugzilla.suse.com/1175414" source="BUGZILLA"/>
		<reference ref_id="1175415" ref_url="https://bugzilla.suse.com/1175415" source="BUGZILLA"/>
		<reference ref_id="1175416" ref_url="https://bugzilla.suse.com/1175416" source="BUGZILLA"/>
		<reference ref_id="1175417" ref_url="https://bugzilla.suse.com/1175417" source="BUGZILLA"/>
		<reference ref_id="1175418" ref_url="https://bugzilla.suse.com/1175418" source="BUGZILLA"/>
		<reference ref_id="1175419" ref_url="https://bugzilla.suse.com/1175419" source="BUGZILLA"/>
		<reference ref_id="1175420" ref_url="https://bugzilla.suse.com/1175420" source="BUGZILLA"/>
		<reference ref_id="1175421" ref_url="https://bugzilla.suse.com/1175421" source="BUGZILLA"/>
		<reference ref_id="1175422" ref_url="https://bugzilla.suse.com/1175422" source="BUGZILLA"/>
		<reference ref_id="1175423" ref_url="https://bugzilla.suse.com/1175423" source="BUGZILLA"/>
		<reference ref_id="1175440" ref_url="https://bugzilla.suse.com/1175440" source="BUGZILLA"/>
		<reference ref_id="1175493" ref_url="https://bugzilla.suse.com/1175493" source="BUGZILLA"/>
		<reference ref_id="1175515" ref_url="https://bugzilla.suse.com/1175515" source="BUGZILLA"/>
		<reference ref_id="1175518" ref_url="https://bugzilla.suse.com/1175518" source="BUGZILLA"/>
		<reference ref_id="1175526" ref_url="https://bugzilla.suse.com/1175526" source="BUGZILLA"/>
		<reference ref_id="1175550" ref_url="https://bugzilla.suse.com/1175550" source="BUGZILLA"/>
		<reference ref_id="1175654" ref_url="https://bugzilla.suse.com/1175654" source="BUGZILLA"/>
		<reference ref_id="1175666" ref_url="https://bugzilla.suse.com/1175666" source="BUGZILLA"/>
		<reference ref_id="1175667" ref_url="https://bugzilla.suse.com/1175667" source="BUGZILLA"/>
		<reference ref_id="1175668" ref_url="https://bugzilla.suse.com/1175668" source="BUGZILLA"/>
		<reference ref_id="1175669" ref_url="https://bugzilla.suse.com/1175669" source="BUGZILLA"/>
		<reference ref_id="1175670" ref_url="https://bugzilla.suse.com/1175670" source="BUGZILLA"/>
		<reference ref_id="1175767" ref_url="https://bugzilla.suse.com/1175767" source="BUGZILLA"/>
		<reference ref_id="1175768" ref_url="https://bugzilla.suse.com/1175768" source="BUGZILLA"/>
		<reference ref_id="1175769" ref_url="https://bugzilla.suse.com/1175769" source="BUGZILLA"/>
		<reference ref_id="1175770" ref_url="https://bugzilla.suse.com/1175770" source="BUGZILLA"/>
		<reference ref_id="1175771" ref_url="https://bugzilla.suse.com/1175771" source="BUGZILLA"/>
		<reference ref_id="1175772" ref_url="https://bugzilla.suse.com/1175772" source="BUGZILLA"/>
		<reference ref_id="1175786" ref_url="https://bugzilla.suse.com/1175786" source="BUGZILLA"/>
		<reference ref_id="1175873" ref_url="https://bugzilla.suse.com/1175873" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10135" ref_url="https://www.suse.com/security/cve/CVE-2020-10135/" source="CVE"/>
		<reference ref_id="CVE-2020-14314" ref_url="https://www.suse.com/security/cve/CVE-2020-14314/" source="CVE"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-14356" ref_url="https://www.suse.com/security/cve/CVE-2020-14356/" source="CVE"/>
		<reference ref_id="CVE-2020-16166" ref_url="https://www.suse.com/security/cve/CVE-2020-16166/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="CVE-2020-24394" ref_url="https://www.suse.com/security/cve/CVE-2020-24394/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007374.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629).
- CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
- CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).
- CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
- CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
- CVE-2020-24394: Fixed an issue which could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support (bsc#1175518).
- CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988).

The following non-security bugs were fixed:

- ACPI: kABI fixes for subsys exports (bsc#1174968).
- ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq (bsc#1174968).
- ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate (bsc#1174968).
- ACPI: PM: Introduce 'poweroff' callbacks for ACPI PM domain and LPSS (bsc#1174968).
- ACPI: PM: Simplify and fix PM domain hibernation callbacks (bsc#1174968).
- af_key: pfkey_dump needs parameter validation (git-fixes).
- agp/intel: Fix a memory leak on module initialisation failure (git-fixes).
- ALSA: core: pcm_iec958: fix kernel-doc (bsc#1111666).
- ALSA: echoaduio: Drop superfluous volatile modifier (bsc#1111666).
- ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (bsc#1111666).
- ALSA: hda: Add support for Loongson 7A1000 controller (bsc#1111666).
- ALSA: hda/ca0132 - Add new quirk ID for Recon3D (bsc#1111666).
- ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (bsc#1111666).
- ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (bsc#1111666).
- ALSA: hda: fix NULL pointer dereference during suspend (git-fixes).
- ALSA: hda: fix snd_hda_codec_cleanup() documentation (bsc#1111666).
- ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (bsc#1111666).
- ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (bsc#1111666).
- ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes).
- ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (bsc#1111666).
- ALSA: hda/realtek - Add quirk for Lenovo Carbon X1 8th gen (bsc#1111666).
- ALSA: hda/realtek - Add quirk for MSI GE63 laptop (bsc#1111666).
- ALSA: hda/realtek - Add quirk for MSI GL63 (bsc#1111666).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes).
- ALSA: hda/realtek - change to suitable link model for ASUS platform (bsc#1111666).
- ALSA: hda/realtek - Check headset type by unplug and resume (bsc#1111666).
- ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 (bsc#1111666).
- ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (bsc#1111666).
- ALSA: hda/realtek - Enable Speaker for ASUS UX563 (bsc#1111666).
- ALSA: hda/realtek: Fix add a 'ultra_low_power' function for intel reference board (alc256) (bsc#1111666).
- ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung Notebook Pen S (bsc#1111666).
- ALSA: hda/realtek - Fixed HP right speaker no sound (bsc#1111666).
- ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id (bsc#1111666).
- ALSA: hda/realtek: Fix pin default on Intel NUC 8 Rugged (bsc#1111666).
- ALSA: hda/realtek - Fix unused variable warning (bsc#1111666).
- ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus G14(GA401) series with ALC289 (bsc#1111666).
- ALSA: hda - reverse the setting value in the micmute_led_set (bsc#1111666).
- ALSA: hda: Workaround for spurious wakeups on some Intel platforms (git-fixes).
- ALSA: pci: delete repeated words in comments (bsc#1111666).
- ALSA: seq: oss: Serialize ioctls (bsc#1111666).
- ALSA: usb-audio: Add capture support for Saffire 6 (USB 1.1) (git-fixes).
- ALSA: usb-audio: add quirk for Pioneer DDJ-RB (bsc#1111666).
- ALSA: usb-audio: add startech usb audio dock name (bsc#1111666).
- ALSA: usb-audio: Add support for Lenovo ThinkStation P620 (bsc#1111666).
- ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support (bsc#1111666).
- ALSA: usb-audio: Disable Lenovo P620 Rear line-in volume control (bsc#1111666).
- ALSA: usb-audio: endpoint : remove needless check before usb_free_coherent() (bsc#1111666).
- ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 (bsc#1174625).
- ALSA: usb-audio: fix spelling mistake 'buss' -&gt; 'bus' (bsc#1111666).
- ALSA: usb-audio: ignore broken processing/extension unit (git-fixes).
- ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109 (bsc#1111666).
- ALSA: usb/line6: remove 'defined but not used' warning (bsc#1111666).
- arm64: Add MIDR encoding for HiSilicon Taishan CPUs (bsc#1174547).
- arm64: Add MIDR encoding for NVIDIA CPUs (bsc#1174547).
- arm64: add sysfs vulnerability show for meltdown (bsc#1174547).
- arm64: Add sysfs vulnerability show for spectre-v1 (bsc#1174547).
- arm64: add sysfs vulnerability show for spectre-v2 (bsc#1174547).
- arm64: add sysfs vulnerability show for speculative store bypass (bsc#1174547). 
- arm64: Advertise mitigation of Spectre-v2, or lack thereof (bsc#1174547). 
- arm64: Always enable spectre-v2 vulnerability detection (bsc#1174547). 
- arm64: Always enable ssb vulnerability detection (bsc#1174547). 
- arm64: backtrace: Do not bother trying to unwind the userspace stack (bsc#1175397).
- arm64: capabilities: Add NVIDIA Denver CPU to bp_harden list (bsc#1174547).
- arm64: capabilities: Merge duplicate Cavium erratum entries (bsc#1174547).
- arm64: capabilities: Merge entries for ARM64_WORKAROUND_CLEAN_CACHE (bsc#1174547). 
- arm64: cpufeature: Enable Qualcomm Falkor/Kryo errata 1003 (bsc#1175398).
- arm64: Do not mask out PTE_RDONLY in pte_same() (bsc#1175393).
- arm64: enable generic CPU vulnerabilites support (bsc#1174547). Update config/arm64/default
- arm64: Ensure VM_WRITE|VM_SHARED ptes are clean by default (bsc#1175394).
- arm64: errata: Do not define type field twice for arm64_errata entries (bsc#1174547).
- arm64: errata: Update stale comment (bsc#1174547).
- arm64: Get rid of __smccc_workaround_1_hvc_* (bsc#1174547).
- arm64: kpti: Avoid rewriting early page tables when KASLR is enabled (bsc#1174547).
- arm64: kpti: Update arm64_kernel_use_ng_mappings() when forced on (bsc#1174547).
- arm64: kpti: Whitelist Cortex-A CPUs that do not implement the CSV3 field (bsc#1174547).
- arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs (bsc#1174547).
- arm64: KVM: Avoid setting the upper 32 bits of VTCR_EL2 to 1 (bsc#1133021).
- arm64: KVM: Guests can skip __install_bp_hardening_cb()s HYP work (bsc#1174547).
- arm64: KVM: Use SMCCC_ARCH_WORKAROUND_1 for Falkor BP hardening (bsc#1174547). 
- arm64: mm: Fix pte_mkclean, pte_mkdirty semantics (bsc#1175526). 
- arm64: Provide a command line to disable spectre_v2 mitigation (bsc#1174547).
- arm64: Silence clang warning on mismatched value/register sizes (bsc#1175396).
- arm64/speculation: Support 'mitigations=' cmdline option (bsc#1174547). 
- arm64: ssbd: explicitly depend on &lt;linux/prctl.h&gt; (bsc#1175399).
- arm64: ssbs: Do not treat CPUs with SSBS as unaffected by SSB (bsc#1174547).
- arm64: ssbs: Fix context-switch when SSBS is present on all CPUs (bsc#1175669).
- arm64/sve: Fix wrong free for task-&gt;thread.sve_state (bsc#1175400).
- arm64/sve: &lt;uapi/asm/ptrace.h&gt; should not depend on &lt;uapi/linux/prctl.h&gt; (bsc#1175401).
- arm64: tlbflush: avoid writing RES0 bits (bsc#1175402).
- arm64: Use firmware to detect CPUs that are not affected by Spectre-v2 (bsc#1174547).
- ARM: KVM: invalidate BTB on guest exit for Cortex-A12/A17 (bsc#1133021). 
- ARM: KVM: invalidate icache on guest exit for Cortex-A15 (bsc#1133021).
- ARM: spectre-v2: KVM: invalidate icache on guest exit for Brahma B15 (bsc#1133021).
- ASoC: hda/tegra: Set buffer alignment to 128 bytes (bsc#1111666).
- ASoC: intel: Fix memleak in sst_media_open (git-fixes).
- ASoC: rt5670: Correct RT5670_LDO_SEL_MASK (git-fixes).
- AX.25: Fix out-of-bounds read in ax25_connect() (git-fixes).
- AX.25: Prevent integer overflows in connect and sendmsg (git-fixes).
- AX.25: Prevent out-of-bounds read in ax25_sendmsg() (git-fixes).
- ax88172a: fix ax88172a_unbind() failures (git-fixes).
- b43: Remove uninitialized_var() usage (git-fixes).
- bcache: allocate meta data pages as compound pages (bsc#1172873).
- block: check queue's limits.discard_granularity in __blkdev_issue_discard() (bsc#1152148).
- block: Fix use-after-free in blkdev_get() (bsc#1174843).
- block: improve discard bio alignment in __blkdev_issue_discard() (bsc#1152148).
- Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() (bsc#1111666).
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt() (bsc#1111666).
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt() (bsc#1111666).
- bonding: fix active-backup failover for current ARP slave (bsc#1174771).
- bonding: fix a potential double-unregister (git-fixes).
- bonding: show saner speed for broadcast mode (git-fixes).
- bpf: Fix map leak in HASH_OF_MAPS map (git-fixes).
- brcmfmac: keep SDIO watchdog running when console_interval is non-zero (bsc#1111666).
- brcmfmac: set state of hanger slot to FREE when flushing PSQ (bsc#1111666).
- brcmfmac: To fix Bss Info flag definition Bug (bsc#1111666).
- btrfs: change timing for qgroup reserved space for ordered extents to fix reserved space leak (bsc#1172247).
- btrfs: file: reserve qgroup space after the hole punch range is locked (bsc#1172247).
- btrfs: fix a block group ref counter leak after failure to remove block group (bsc#1175149).
- btrfs: fix block group leak when removing fails (bsc#1175149).
- btrfs: fix bytes_may_use underflow when running balance and scrub in parallel (bsc#1175149).
- btrfs: fix corrupt log due to concurrent fsync of inodes with shared extents (bsc#1175149).
- btrfs: fix data block group relocation failure due to concurrent scrub (bsc#1175149).
- btrfs: fix double free on ulist after backref resolution failure (bsc#1175149).
- btrfs: fix fatal extent_buffer readahead vs releasepage race (bsc#1175149).
- btrfs: fix memory leaks after failure to lookup checksums during inode logging (bsc#1175550).
- btrfs: fix page leaks after failure to lock page for delalloc (bsc#1175149).
- btrfs: fix race between block group removal and block group creation (bsc#1175149).
- btrfs: fix space_info bytes_may_use underflow after nocow buffered write (bsc#1175149).
- btrfs: fix space_info bytes_may_use underflow during space cache writeout (bsc#1175149).
- btrfs: fix wrong file range cleanup after an error filling dealloc range (bsc#1175149).
- btrfs: inode: fix NULL pointer dereference if inode does not need compression (bsc#1174484).
- btrfs: inode: move qgroup reserved space release to the callers of insert_reserved_file_extent() (bsc#1172247).
- btrfs: inode: refactor the parameters of insert_reserved_file_extent() (bsc#1172247).
- btrfs: make btrfs_ordered_extent naming consistent with btrfs_file_extent_item (bsc#1172247).
- btrfs: Open code btrfs_write_and_wait_marked_extents (bsc#1175149).
- btrfs: qgroup: allow to unreserve range without releasing other ranges (bsc#1120163).
- btrfs: qgroup: fix data leak caused by race between writeback and truncate (bsc#1172247).
- btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT (bsc#1120163).
- btrfs: qgroup: try to flush qgroup space when we get -EDQUOT (bsc#1120163).
- btrfs: Rename and export clear_btree_io_tree (bsc#1175149).
- btrfs: treat RWF_{,D}SYNC writes as sync for CRCs (bsc#1175493).
- bus: hisi_lpc: Add .remove method to avoid driver unbind crash (bsc#1174658).
- bus: hisi_lpc: Do not fail probe for unrecognised child devices (bsc#1174658).
- bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-free (bsc#1174658).
- cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip (git-fixes).
- cfg80211: check vendor command doit pointer before use (git-fixes).
- char: virtio: Select VIRTIO from VIRTIO_CONSOLE (bsc#1175667).
- cifs: document and cleanup dfs mount (bsc#1144333 bsc#1172428).
- cifs: Fix an error pointer dereference in cifs_mount() (bsc#1144333 bsc#1172428).
- cifs: fix double free error on share and prefix (bsc#1144333 bsc#1172428).
- cifs: handle empty list of targets in cifs_reconnect() (bsc#1144333 bsc#1172428).
- cifs: handle RESP_GET_DFS_REFERRAL.PathConsumed in reconnect (bsc#1144333 bsc#1172428).
- cifs: merge __{cifs,smb2}_reconnect[_tcon]() into cifs_tree_connect() (bsc#1144333 bsc#1172428).
- cifs: only update prefix path of DFS links in cifs_tree_connect() (bsc#1144333 bsc#1172428).
- cifs: reduce number of referral requests in DFS link lookups (bsc#1144333 bsc#1172428).
- cifs: rename reconn_inval_dfs_target() (bsc#1144333 bsc#1172428).
- clk: at91: clk-generated: check best_rate against ranges (bsc#1111666).
- clk: clk-atlas6: fix return value check in atlas6_clk_init() (bsc#1111666).
- clk: iproc: round clock rate to the closest (bsc#1111666).
- clk: spear: Remove uninitialized_var() usage (git-fixes).
- clk: st: Remove uninitialized_var() usage (git-fixes).
- config: arm64: enable CONFIG_IOMMU_DEFAULT_PASSTHROUGH References: bsc#1174549
- console: newport_con: fix an issue about leak related system resources (git-fixes).
- constrants: fix malformed XML Closing tag of an element is '&lt;/foo&gt;', not '&lt;foo/&gt;'. Fixes: 8b37de2eb835 ('rpm/constraints.in: Increase memory for kernel-docs')
- Created new preempt kernel flavor (jsc#SLE-11309) Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT-&gt;y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.
- crypto: ccp - Fix use of merged scatterlists (git-fixes).
- crypto: cpt - do not sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified (git-fixes).
- crypto: qat - fix double free in qat_uclo_create_batch_init_list (git-fixes).
- crypto: rockchip - fix scatterlist nents error (git-fixes).
- crypto: stm32/crc32 - fix ext4 chksum BUG_ON() (git-fixes).
- crypto: talitos - check AES key size (git-fixes).
- crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK (git-fixes).
- crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req() (git-fixes).
- dev: Defer free of skbs in flush_backlog (git-fixes).
- device property: Fix the secondary firmware node handling in set_primary_fwnode() (git-fixes).
- devres: keep both device name and resource name in pretty name (git-fixes).
- dlm: Fix kobject memleak (bsc#1175768).
- dlm: remove BUG() before panic() (bsc#1174844).
- dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler (git-fixes).
- Documentation/networking: Add net DIM documentation (bsc#1174852).
- dpaa2-eth: Fix passing zero to 'PTR_ERR' warning (bsc#1175403).
- dpaa2-eth: free already allocated channels on probe defer (bsc#1175404).
- dpaa2-eth: prevent array underflow in update_cls_rule() (bsc#1175405).
- dpaa_eth: add dropped frames to percpu ethtool stats (bsc#1174550).
- dpaa_eth: add newline in dev_err() msg (bsc#1174550).
- dpaa_eth: avoid timestamp read on error paths (bsc#1175406).
- dpaa_eth: change DMA device (bsc#1174550).
- dpaa_eth: cleanup skb_to_contig_fd() (bsc#1174550).
- dpaa_eth: defer probing after qbman (bsc#1174550).
- dpaa_eth: extend delays in ndo_stop (bsc#1174550).
- dpaa_eth: fix DMA mapping leak (bsc#1174550).
- dpaa_eth: Fix one possible memleak in dpaa_eth_probe (bsc#1174550).
- dpaa_eth: FMan erratum A050385 workaround (bsc#1174550).
- dpaa_eth: perform DMA unmapping before read (bsc#1175407).
- dpaa_eth: register a device link for the qman portal used (bsc#1174550).
- dpaa_eth: remove netdev_err() for user errors (bsc#1174550).
- dpaa_eth: remove redundant code (bsc#1174550).
- dpaa_eth: simplify variables used in dpaa_cleanup_tx_fd() (bsc#1174550).
- dpaa_eth: use a page to store the SGT (bsc#1174550).
- dpaa_eth: use fd information in dpaa_cleanup_tx_fd() (bsc#1174550).
- dpaa_eth: use only one buffer pool per interface (bsc#1174550).
- dpaa_eth: use page backed rx buffers (bsc#1174550).
- driver core: Avoid binding drivers to dead devices (git-fixes).
- Drivers: hv: balloon: Remove dependencies on guest page size (git-fixes).
- Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE (git-fixes).
- Drivers: hv: vmbus: Only notify Hyper-V for die events that are oops (bsc#1175127, bsc#1175128).
- Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup() (git-fixes).
- drivers/perf: hisi: Fix typo in events attribute array (bsc#1175408).
- drivers/perf: hisi: Fixup one DDRC PMU register offset (bsc#1175410).
- drivers/perf: hisi: Fix wrong value for all counters enable (bsc#1175409).
- drm: Added orientation quirk for ASUS tablet model T103HAF (bsc#1111666).
- drm/amd/display: fix pow() crashing when given base 0 (git-fixes).
- drm/amdgpu: avoid dereferencing a NULL pointer (bsc#1111666).
- drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume (bsc#1111666).
- drm/amdgpu: Fix NULL dereference in dpm sysfs handlers (bsc#1113956) 	* refresh for context changes
- drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() (git-fixes).
- drm/amdgpu: Replace invalid device ID with a valid device ID (bsc#1113956)
- drm/arm: fix unintentional integer overflow on left shift (git-fixes).
- drm/bridge: dw-hdmi: Do not cleanup i2c adapter and ddc ptr in (bsc#1113956) 	* refreshed for context changes
- drm/bridge: sil_sii8620: initialize return of sii8620_readb (git-fixes).
- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1113956) 	* move drm_mipi_dbi.c -&gt; tinydrm/mipi-drm.c 	* refresh for context changes
- drm/debugfs: fix plain echo to connector 'force' attribute (bsc#1111666).
- drm/etnaviv: Fix error path on failure to enable bus clk (git-fixes).
- drm/etnaviv: fix ref count leak via pm_runtime_get_sync (bsc#1111666).
- drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi (bsc#1112178) 	* updated names of get/put functions
- drm: hold gem reference until object is no longer accessed (bsc#1113956)
- drm/imx: fix use after free (git-fixes).
- drm/imx: imx-ldb: Disable both channels for split mode in enc-&gt;disable() (git-fixes).
- drm/imx: tve: fix regulator_disable error path (git-fixes).
- drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline (git-fixes).
- drm/msm/adreno: fix updating ring fence (git-fixes).
- drm/msm: ratelimit crtc event overflow error (bsc#1111666).
- drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason (git-fixes).
- drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure (git-fixes).
- drm/nouveau: fix multiple instances of reference count leaks (bsc#1111666).
- drm/panel: otm8009a: Drop unnessary backlight_device_unregister() (git-fixes).
- drm: panel: simple: Fix bpc for LG LB070WV8 panel (git-fixes).
- drm/radeon: disable AGP by default (bsc#1111666).
- drm/radeon: fix array out-of-bounds read and write issues (git-fixes).
- drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync (bsc#1111666).
- drm/rockchip: fix VOP_WIN_GET macro (bsc#1175411).
- drm/tilcdc: fix leak &amp; null ref in panel_connector_get_modes (bsc#1111666).
- drm/ttm/nouveau: do not call tt destroy callback on alloc failure (bsc#1175232).
- drm/vmwgfx: Fix two list_for_each loop exit tests (bsc#1111666).
- drm/vmwgfx: Use correct vmw_legacy_display_unit pointer (bsc#1111666).
- drm/xen-front: Fix misused IS_ERR_OR_NULL checks (bsc#1065600).
- efi/memreserve: deal with memreserve entries in unmapped memory (bsc#1174685).
- ext4: check journal inode extents more carefully (bsc#1173485).
- ext4: do not allow overlapping system zones (bsc#1173485).
- ext4: fix checking of directory entry validity for inline directories (bsc#1175771).
- ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max (bsc#1174840).
- ext4: handle error of ext4_setup_system_zone() on remount (bsc#1173485).
- fat: do not allow to mount if the FAT length == 0 (bsc#1174845).
- fbdev: Detect integer underflow at 'struct fbcon_ops'-&gt;clear_margins. (bsc#1112178) 	* move files drivers/video/fbdev/core -&gt; drivers/video/console 	* refresh for context changes
- firmware: google: check if size is valid when decoding VPD data (git-fixes).
- firmware: google: increment VPD key_len properly (git-fixes).
- fpga: dfl: fix bug in port reset handshake (git-fixes).
- fsl/fman: add API to get the device behind a fman port (bsc#1174550).
- fsl/fman: check dereferencing null pointer (git-fixes).
- fsl/fman: detect FMan erratum A050385 (bsc#1174550).
- fsl/fman: do not touch liodn base regs reserved on non-PAMU SoCs (bsc#1174550).
- fsl/fman: fix dereference null return value (git-fixes).
- fsl/fman: fix eth hash table allocation (git-fixes).
- fsl/fman: fix unreachable code (git-fixes).
- fsl/fman: remove unused struct member (bsc#1174550).
- fsl/fman: use 32-bit unsigned integer (git-fixes).
- fuse: fix memleak in cuse_channel_open (bsc#1174926).
- fuse: fix missing unlock_page in fuse_writepage() (bsc#1174904).
- fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS (bsc#1175062).
- fuse: fix weird page warning (bsc#1175063).
- fuse: flush dirty data/metadata before non-truncate setattr (bsc#1175064).
- fuse: truncate pending writes on O_TRUNC (bsc#1175065).
- fuse: verify attributes (bsc#1175066).
- fuse: verify nlink (bsc#1175067).
- genetlink: remove genl_bind (networking-stable-20_07_17).
- go7007: add sanity checking for endpoints (git-fixes).
- gpu: host1x: debug: Fix multiple channels emitting messages simultaneously (bsc#1111666).
- HID: hiddev: fix mess in hiddev_open() (git-fixes).
- HISI LPC: Re-Add ACPI child enumeration support (bsc#1174658).
- HISI LPC: Stop using MFD APIs (bsc#1174658).
- hv_balloon: Balloon up according to request page number (git-fixes).
- hv_balloon: Use a static page for the balloon_up send buffer (git-fixes).
- hv_netvsc: Allow scatter-gather feature to be tunable (git-fixes).
- hv_netvsc: do not use VF device if link is down (git-fixes).
- hv_netvsc: Fix a warning of suspicious RCU usage (git-fixes).
- hv_netvsc: Fix error handling in netvsc_attach() (git-fixes).
- hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback() (git-fixes).
- hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit() (git-fixes).
- hv_netvsc: Fix unwanted wakeup in netvsc_attach() (git-fixes).
- hv_netvsc: flag software created hash value (git-fixes).
- hv_netvsc: Remove 'unlikely' from netvsc_select_queue (git-fixes).
- i2c: rcar: in slave mode, clear NACK earlier (git-fixes).
- i2c: rcar: slave: only send STOP event when we have been addressed (bsc#1111666).
- i40e: Fix crash during removing i40e driver (git-fixes).
- i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (git-fixes).
- ibmveth: Fix use of ibmveth in a bridge (bsc#1174387 ltc#187506).
- ibmvnic: Fix IRQ mapping disposal in error path (bsc#1175112 ltc#187459).
- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset (bsc#1175873 ltc#187922).
- include/linux/poison.h: remove obsolete comment (git fixes (poison)).
- Input: psmouse - add a newline when printing 'proto' by sysfs (git-fixes).
- Input: sentelic - fix error return when fsp_reg_write fails (bsc#1111666).
- integrity: remove redundant initialization of variable ret (git-fixes).
- io-mapping: indicate mapping failure (git-fixes).
- ip6_gre: fix null-ptr-deref in ip6gre_init_net() (git-fixes).
- ip6_gre: fix use-after-free in ip6gre_tunnel_lookup() (networking-stable-20_06_28).
- ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL (bsc#1175515).
- ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL (bsc#1175515).
- ip_tunnel: Emit events for post-register MTU changes (git-fixes).
- ip_tunnel: fix use-after-free in ip_tunnel_lookup() (networking-stable-20_06_28).
- ip_tunnel: restore binding to ifaces with a large mtu (git-fixes).
- ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg (networking-stable-20_07_17).
- ipv4: Silence suspicious RCU usage warning (git-fixes).
- ipv6: fix memory leaks on IPV6_ADDRFORM path (git-fixes).
- ipvlan: fix device features (git-fixes).
- ipvs: allow connection reuse for unconfirmed conntrack (git-fixes).
- ipvs: fix refcount usage for conns in ops mode (git-fixes).
- ipvs: fix the connection sync failed in some cases (bsc#1174699).
- irqchip/gic: Atomically update affinity (bsc#1111666).
- iwlegacy: Check the return value of pcie_capability_read_*() (bsc#1111666).
- jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock() (bsc#1175772).
- kabi: genetlink: remove genl_bind (kabi).
- kabi: hide new parameter of ip6_dst_lookup_flow() (bsc#1165629).
- kabi: mask changes to struct ipv6_stub (bsc#1165629).
- kernel/cpu_pm: Fix uninitted local in cpu_pm (git fixes (kernel/pm)).
- kernel-docs: Change Requires on python-Sphinx to earlier than version 3 References: bsc#1166965 From 3 on the internal API that the build system uses was rewritten in an incompatible way. See https://github.com/sphinx-doc/sphinx/issues/7421 and https://bugzilla.suse.com/show_bug.cgi?id=1166965#c16 for some details.
- kernel/relay.c: fix memleak on destroy relay channel (git-fixes).
- kernfs: do not call fsnotify() with name without a parent (bsc#1175770).
- KVM: arm64: Ensure 'params' is initialised when looking up sys register (bsc#1133021).
- KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART (bsc#1133021).
- KVM: arm/arm64: Fix young bit from mmu notifier (bsc#1133021).
- KVM: arm/arm64: vgic: Do not rely on the wrong pending table (bsc#1133021).
- KVM: arm/arm64: vgic-its: Fix restoration of unmapped collections (bsc#1133021).
- KVM: arm: Fix DFSR setting for non-LPAE aarch32 guests (bsc#1133021).
- KVM: arm: Make inject_abt32() inject an external abort instead (bsc#1133021).
- kvm: Change offset in kvm_write_guest_offset_cached to unsigned (bsc#1133021).
- KVM: Check for a bad hva before dropping into the ghc slow path (bsc#1133021).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage (bsc#1065729).
- l2tp: remove skb_dst_set() from l2tp_xmit_skb() (networking-stable-20_07_17).
- leds: 88pm860x: fix use-after-free on unbind (git-fixes).
- leds: core: Flush scheduled work for system suspend (git-fixes).
- leds: da903x: fix use-after-free on unbind (git-fixes).
- leds: lm3533: fix use-after-free on unbind (git-fixes).
- leds: lm355x: avoid enum conversion warning (git-fixes).
- leds: wm831x-status: fix use-after-free on unbind (git-fixes).
- lib/dim: Fix -Wunused-const-variable warnings (bsc#1174852).
- lib: dimlib: fix help text typos (bsc#1174852).
- lib: logic_pio: Add logic_pio_unregister_range() (bsc#1174658).
- lib: logic_pio: Avoid possible overlap for unregistering regions (bsc#1174658).
- lib: logic_pio: Fix RCU usage (bsc#1174658).
- linux/dim: Add completions count to dim_sample (bsc#1174852).
- linux/dim: Fix overflow in dim calculation (bsc#1174852).
- linux/dim: Move implementation to .c files (bsc#1174852).
- linux/dim: Move logic to dim.h (bsc#1174852).
- linux/dim: Remove 'net' prefix from internal DIM members (bsc#1174852).
- linux/dim: Rename externally exposed macros (bsc#1174852).
- linux/dim: Rename externally used net_dim members (bsc#1174852).
- linux/dim: Rename net_dim_sample() to net_dim_update_sample() (bsc#1174852).
- liquidio: Fix wrong return value in cn23xx_get_pf_num() (git-fixes).
- llc: make sure applications use ARPHRD_ETHER (networking-stable-20_07_17).
- mac80211: mesh: Free ie data when leaving mesh (git-fixes).
- mac80211: mesh: Free pending skb when destroying a mpath (git-fixes).
- MAINTAINERS: add entry for Dynamic Interrupt Moderation (bsc#1174852).
- md-cluster: Fix potential error pointer dereference in resize_bitmaps() (git-fixes).
- md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 (git-fixes).
- media: budget-core: Improve exception handling in budget_register() (git-fixes).
- media: exynos4-is: Add missed check for pinctrl_lookup_state() (git-fixes).
- media: firewire: Using uninitialized values in node_probe() (git-fixes).
- media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities() (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- mfd: arizona: Ensure 32k clock is put on driver unbind and error (git-fixes).
- mfd: dln2: Run event handler loop under spinlock (git-fixes).
- mfd: rk808: Fix RK818 ID template (bsc#1175412).
- mld: fix memory leak in ipv6_mc_destroy_dev() (networking-stable-20_06_28).
- mm: filemap: clear idle flag for writes (bsc#1175769).
- mm/migrate.c: add missing flush_dcache_page for non-mapped page migrate (git fixes (mm/migrate)).
- mm/mmu_notifier: use hlist_add_head_rcu() (git fixes (mm/mmu_notifiers)).
- mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() (git fixes (mm/compaction)).
- mm/rmap.c: do not reuse anon_vma if we just want a copy (git fixes (mm/rmap)).
- mm/shmem.c: cast the type of unmap_start to u64 (git fixes (mm/shmem)).
- mm, thp: fix defrag setting if newline is not used (git fixes (mm/thp)).
- mm/vunmap: add cond_resched() in vunmap_pmd_range (bsc#1175654 ltc#184617).
- mtd: spi-nor: Fix an error code in spi_nor_read_raw() (bsc#1175413).
- mtd: spi-nor: fix kernel-doc for spi_nor::info (bsc#1175414).
- mtd: spi-nor: fix kernel-doc for spi_nor::reg_proto (bsc#1175415).
- mtd: spi-nor: fix silent truncation in spi_nor_read_raw() (bsc#1175416).
- mwifiex: Prevent memory corruption handling keys (git-fixes).
- net: Added pointer check for dst-&gt;ops-&gt;neigh_lookup in dst_neigh_lookup_skb (git-fixes).
- net: bridge: enfore alignment for ethernet address (networking-stable-20_06_28).
- net: core: reduce recursion limit value (networking-stable-20_06_28).
- net: Do not clear the sock TX queue in sk_set_socket() (networking-stable-20_06_28).
- net: dsa: b53: check for timeout (git-fixes).
- net: ena: Add first_interrupt field to napi struct (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: add support for reporting of packet drops (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool (bsc#1174852).
- net: ena: allow setting the hash function without changing the key (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function set fails (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when busy-polling (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz (bsc#1174852).
- net: ena: change num_queues to num_io_queues for clarity and consistency (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: Change WARN_ON expression in ena_del_napi_in_range() (bsc#1174852).
- net: ena: clean up indentation issue (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64 (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set() (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in comments (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in ena_com.h macros (bsc#1174852).
- net: ena: cosmetic: rename ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: enable support of rss hash key and function changes (bsc#1174852).
- net: ena: enable the interrupt_moderation in driver_supported_features (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue (bsc#1174852).
- net: ena: ethtool: get_channels: use combined only (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc (bsc#1174852).
- net: ena: ethtool: support set_channels callback (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function() (bsc#1174852).
- net: ena: fix incorrect setting of the number of msix vectors (bsc#1174852).
- net: ena: fix incorrect update of intr_delay_resolution (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors (bsc#1174852).
- net: ena: fix update of interrupt moderation register (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in ena_init_napi_in_range (bsc#1174852).
- net: ena: implement XDP drop support (bsc#1174852).
- net: ena: Implement XDP_TX action (bsc#1174852).
- net: ena: make ethtool -l show correct max number of queues (bsc#1174852).
- net: ena: Make missed_tx stat incremental (bsc#1083548).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: move llq configuration from ena_probe to ena_device_init() (bsc#1174852).
- net: ena: multiple queue creation related cleanups (bsc#1174852).
- net: ena: Prevent reset after device destruction (bsc#1083548).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: remove all old adaptive rx interrupt moderation code from ena_com (bsc#1174852).
- net: ena: remove code duplication in ena_com_update_nonadaptive_moderation_interval _*() (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: remove ena_restore_ethtool_params() and relevant fields (bsc#1174852).
- net: ena: remove old adaptive interrupt moderation code from ena_netdev (bsc#1174852).
- net: ena: remove redundant print of number of queues (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key' (bsc#1174852).
- net: ena: remove set but not used variable 'rx_ring' (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform (bsc#1174852).
- net: ena: Select DIMLIB for ENA_ETHERNET (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution() (bsc#1174852).
- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: switch to dim algorithm for rx adaptive interrupt moderation (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface (bsc#1174852).
- net: ena: xdp: update napi budget for DROP and ABORTED (bsc#1174852).
- net: ena: xdp: XDP_TX: fix memory leak (bsc#1174852).
- net: ethernet: aquantia: Fix wrong return value (git-fixes).
- net: ethernet: broadcom: have drivers select DIMLIB as needed (bsc#1174852).
- net: ethernet: stmmac: Disable hardware multicast filter (git-fixes).
- net: fec: correct the error path for regulator disable in probe (git-fixes).
- netfilter: x_tables: add counters allocation wrapper (git-fixes).
- netfilter: x_tables: cap allocations at 512 mbyte (git-fixes).
- netfilter: x_tables: limit allocation requests for blob rule heads (git-fixes).
- net: Fix a documentation bug wrt. ip_unprivileged_port_start (git-fixes). (SLES tuning guide refers to ip-sysctl.txt.)
- net: fix memleak in register_netdevice() (networking-stable-20_06_28).
- net: Fix the arp error in some cases (networking-stable-20_06_28).
- net: gre: recompute gre csum for sctp over gre tunnels (git-fixes).
- net: hns3: add autoneg and change speed support for fibre port (bsc#1174070).
- net: hns3: add support for FEC encoding control (bsc#1174070).
- net: hns3: add support for multiple media type (bsc#1174070).
- net: hns3: fix a not link up issue when fibre port supports autoneg (bsc#1174070).
- net: hns3: fix for FEC configuration (bsc#1174070).
- net: hns3: fix port capbility updating issue (bsc#1174070).
- net: hns3: fix port setting handle for fibre port (bsc#1174070).
- net: hns3: fix selftest fail issue for fibre port with autoneg on (bsc#1174070).
- net: hns3: restore the MAC autoneg state after reset (bsc#1174070).
- net: increment xmit_recursion level in dev_direct_xmit() (networking-stable-20_06_28).
- net: ip6_gre: Request headroom in __gre6_xmit() (git-fixes).
- net: lan78xx: add missing endpoint sanity check (git-fixes).
- net: lan78xx: fix transfer-buffer memory leak (git-fixes).
- net: make symbol 'flush_works' static (git-fixes).
- net/mlx5e: vxlan: Use RCU for vxlan table lookup (git-fixes).
- net: mvpp2: fix memory leak in mvpp2_rx (git-fixes).
- net: netsec: Fix signedness bug in netsec_probe() (bsc#1175417).
- net: netsec: initialize tx ring on ndo_open (bsc#1175418).
- net: phy: Check harder for errors in get_phy_id() (bsc#1111666).
- net: qcom/emac: add missed clk_disable_unprepare in error path of emac_clks_phase1_init (git-fixes).
- net: Set fput_needed iff FDPUT_FPUT is set (git-fixes).
- net: socionext: Fix a signedness bug in ave_probe() (bsc#1175419).
- net: socionext: replace napi_alloc_frag with the netdev variant on init (bsc#1175420).
- net: spider_net: Fix the size used in a 'dma_free_coherent()' call (git-fixes).
- net: stmmac: dwmac1000: provide multicast filter fallback (git-fixes).
- net: stmmac: Fix RX packet size &gt; 8191 (git-fixes).
- net: udp: Fix wrong clean up for IS_UDPLITE macro (git-fixes).
- net: update net_dim documentation after rename (bsc#1174852).
- net: usb: ax88179_178a: fix packet alignment padding (networking-stable-20_06_28).
- net: usb: qmi_wwan: add support for Quectel EG95 LTE modem (networking-stable-20_07_17).
- netvsc: unshare skb in VF rx handler (git-fixes).
- nfc: nci: add missed destroy_workqueue in nci_register_device (git-fixes).
- NTB: Fix an error in get link status (git-fixes).
- ntb_netdev: fix sleep time mismatch (git-fixes).
- NTB: ntb_transport: Use scnprintf() for avoiding potential buffer overflow (git-fixes).
- nvme: fix possible deadlock when I/O is blocked (git-fixes).
- nvme-multipath: do not fall back to __nvme_find_path() for non-optimized paths (bsc#1172108).
- nvme-multipath: fix logic for non-optimized paths (bsc#1172108).
- nvme-multipath: round-robin: eliminate 'fallback' variable (bsc#1172108).
- nvme: multipath: round-robin: fix single non-optimized path case (bsc#1172108).
- obsolete_kmp: provide newer version than the obsoleted one (boo#1170232).
- ocfs2: add trimfs dlm lock resource (bsc#1175228).
- ocfs2: add trimfs lock to avoid duplicated trims in cluster (bsc#1175228).
- ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
- ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
- ocfs2: change slot number type s16 to u16 (bsc#1175786).
- ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
- ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
- ocfs2: fix remounting needed after setfacl command (bsc#1173954).
- ocfs2: fix the application IO timeout when fstrim is running (bsc#1175228).
- ocfs2: fix value of OCFS2_INVALID_SLOT (bsc#1175767).
- ocfs2: load global_inode_alloc (bsc#1172963).
- ocfs2: load global_inode_alloc (bsc#1172963).
- omapfb: dss: Fix max fclk divider for omap36xx (bsc#1113956)
- openvswitch: Prevent kernel-infoleak in ovs_ct_put_key() (git-fixes).
- PCI/ASPM: Add missing newline in sysfs 'policy' (git-fixes).
- PCI: dwc: Move interrupt acking into the proper callback (bsc#1175666).
- PCI: Fix pci_cfg_wait queue locking problem (git-fixes).
- PCI: Fix 'try' semantics of bus and slot reset (git-fixes).
- PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context() (git-fixes).
- PCI: hv: Fix a timing issue which causes kdump to fail occasionally (bsc#1172871, bsc#1172872, git-fixes).
- PCI: Release IVRS table in AMD ACS quirk (git-fixes).
- PCI: switchtec: Add missing __iomem and __user tags to fix sparse warnings (git-fixes).
- PCI: switchtec: Add missing __iomem tag to fix sparse warnings (git-fixes).
- phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked (git-fixes).
- pinctrl: single: fix function name in documentation (git-fixes).
- pinctrl-single: fix pcs_parse_pinconf() return value (git-fixes).
- platform/x86: intel-hid: Fix return value check in check_acpi_dev() (git-fixes).
- platform/x86: intel-vbtn: Fix return value check in check_acpi_dev() (git-fixes).
- PM / CPU: replace raw_notifier with atomic_notifier (git fixes (kernel/pm)).
- PM / devfreq: rk3399_dmc: Add missing of_node_put() (bsc#1175668).
- PM / devfreq: rk3399_dmc: Disable devfreq-event device when fails.
- PM / devfreq: rk3399_dmc: Fix kernel oops when rockchip,pmu is absent (bsc#1175668).
- PM: sleep: core: Fix the handling of pending runtime resume requests (git-fixes).
- powerpc/64s: Do not init FSCR_DSCR in __init_FSCR() (bsc#1065729).
- powerpc/64s: Fix early_init_mmu section mismatch (bsc#1065729).
- powerpc: Allow 4224 bytes of stack expansion for the signal frame (bsc#1065729).
- powerpc/book3s64/pkeys: Use PVR check instead of cpu feature (bsc#1065729).
- powerpc/boot: Fix CONFIG_PPC_MPC52XX references (bsc#1065729).
- powerpc/eeh: Fix pseries_eeh_configure_bridge() (bsc#1174689).
- powerpc/nvdimm: Use HCALL error as the return value (bsc#1175284).
- powerpc/nvdimm: use H_SCM_QUERY hcall on H_OVERLAP error (bsc#1175284).
- powerpc/perf: Fix missing is_sier_aviable() during build (bsc#1065729).
- powerpc/pseries: Do not initiate shutdown when system is running on UPS (bsc#1175440 ltc#187574).
- powerpc/pseries/hotplug-cpu: Remove double free in error path (bsc#1065729).
- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death (bsc#1085030 ltC#165630).
- powerpc/pseries: PCIE PHB reset (bsc#1174689).
- powerpc/pseries: remove cede offline state for CPUs (bsc#1065729).
- powerpc/rtas: do not online CPUs for partition suspend (bsc#1065729).
- powerpc/vdso: Fix vdso cpu truncation (bsc#1065729).
- power: supply: check if calc_soc succeeded in pm860x_init_battery (git-fixes).
- propagate_one(): mnt_set_mountpoint() needs mount_lock (bsc#1174841).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- pwm: bcm-iproc: handle clk_get_rate() return (git-fixes).
- rds: Prevent kernel-infoleak in rds_notify_queue_get() (git-fixes).
- Revert 'ALSA: hda: call runtime_allow() for all hda controllers' (bsc#1111666).
- Revert 'drm/amdgpu: Fix NULL dereference in dpm sysfs handlers' (bsc#1113956) 	* refresh for context changes
- Revert 'ocfs2: avoid inode removal while nfsd is accessing it' This reverts commit 9e096c72476eda333a9998ff464580c00ff59c83.
- Revert 'ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).' This reverts commit 0bf6e248f93736b3f17f399b4a8f64ffa30d371e.
- Revert 'ocfs2: load global_inode_alloc (bsc#1172963).' This reverts commit fc476497b53f967dc615b9cbad9427ba3107b5c4.
- Revert pciehp patches that broke booting (bsc#1174887) 
- Revert 'scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe' (bsc#1171688 bsc#1174003).
- Revert 'scsi: qla2xxx: Fix crash on qla2x00_mailbox_command' (bsc#1171688 bsc#1174003).
- Revert 'xen/balloon: Fix crash when ballooning on x86 32 bit PAE' (bsc#1065600).
- rocker: fix incorrect error handling in dma_rings_init (networking-stable-20_06_28).
- rpm/check-for-config-changes: Ignore CONFIG_CC_VERSION_TEXT
- rpm/check-for-config-changes: Ignore CONFIG_LD_VERSION
- rpm/constraints.in: Increase memory for kernel-docs References: https://build.opensuse.org/request/show/792664
- rpm: drop execute permissions on source files Sometimes a source file with execute permission appears in upstream repository and makes it into our kernel-source packages. This is caught by OBS build checks and may even result in build failures. Sanitize the source tree by removing execute permissions from all C source and header files.
- rpm/kabi.pl: account for namespace field being moved last Upstream is moving the namespace field in Module.symvers last in order to preserve backwards compatibility with kmod tools (depmod, etc). Fix the kabi.pl script to expect the namespace field last. Since split() ignores trailing empty fields and delimeters, switch to using tr to count how many fields/tabs are in a line. Also, in load_symvers(), pass LIMIT of -1 to split() so it does not strip trailing empty fields, as namespace is an optional field.
- rpm/kernel-binary.spec.in: do not run klp-symbols for configs with no modules Starting with 5.8-rc1, s390x/zfcpdump builds fail because rpm/klp-symbols script does not find .tmp_versions directory. This is missing because s390x/zfcpdump is built without modules (CONFIG_MODULES disabled). As livepatching cannot work without modules, the cleanest solution is setting %klp_symbols to 0 if CONFIG_MODULES is disabled. (We cannot simply add another condition to the place where %klp_symbols is set as it can be already set to 1 from prjconf.)
- rpm/kernel-binary.spec.in: restrict livepatch metapackage to default flavor It has been reported that the kernel-*-livepatch metapackage got erroneously enabled for SLE15-SP3's new -preempt flavor, leading to a unresolvable dependency to a non-existing kernel-livepatch-x.y.z-preempt package. As SLE12 and SLE12-SP1 have run out of livepatching support, the need to build said metapackage for the -xen flavor is gone and the only remaining flavor for which they're still wanted is -default. Restrict the build of the kernel-*-livepatch metapackage to the -default flavor.
- rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup Co-Authored-By: Adam Spiers &lt;aspiers@suse.com&gt;
- rpm/kernel-obs-build.spec.in: Enable overlayfs Overlayfs is needed for podman or docker builds when no more specific driver can be used (like lvm or btrfs). As the default build fs is ext4 currently, we need overlayfs kernel modules to be available.
- rpm/kernel-source.spec.in: Add obsolete_rebuilds (boo#1172073).
- rpm/mkspec-dtb: add mt76 based dtb package
- rpm/package-descriptions: garbege collection remove old ARM and Xen flavors.
- rtlwifi: rtl8192cu: Remove uninitialized_var() usage (git-fixes).
- s390, dcssblk: kaddr and pfn can be NULL to -&gt;direct_access() (bsc#1174873).
- sched: consistently handle layer3 header accesses in the presence of VLANs (networking-stable-20_07_17).
- scripts/git_sort/git_sort.py: add bluetooth/bluetooth-next.git repository
- scsi: dh: Add Fujitsu device to devinfo and dh lists (bsc#1174026).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value 1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in header files (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files (bsc#1171688 bsc#1174003). 
- scsi: qla2xxx: Fix failure message in qlt_disable_vha() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688 bsc#1174003).
- scsi: smartpqi: add bay identifier (bsc#1172418).
- scsi: smartpqi: add gigabyte controller (bsc#1172418).
- scsi: smartpqi: add id support for SmartRAID 3152-8i (bsc#1172418).
- scsi: smartpqi: add inquiry timeouts (bsc#1172418).
- scsi: smartpqi: add module param for exposure order (bsc#1172418).
- scsi: smartpqi: add module param to hide vsep (bsc#1172418).
- scsi: smartpqi: add new pci ids (bsc#1172418).
- scsi: smartpqi: add pci ids for fiberhome controller (bsc#1172418).
- scsi: smartpqi: add RAID bypass counter (bsc#1172418).
- scsi: smartpqi: add sysfs entries (bsc#1172418).
- scsi: smartpqi: Align driver syntax with oob (bsc#1172418).
- scsi: smartpqi: avoid crashing kernel for controller issues (bsc#1172418).
- scsi: smartpqi: bump version (bsc#1172418).
- scsi: smartpqi: bump version (bsc#1172418).
- scsi: smartpqi: bump version to 1.2.16-010 (bsc#1172418).
- scsi: smartpqi: change TMF timeout from 60 to 30 seconds (bsc#1172418).
- scsi: smartpqi: correct hang when deleting 32 lds (bsc#1172418).
- scsi: smartpqi: correct REGNEWD return status (bsc#1172418).
- scsi: smartpqi: correct syntax issue (bsc#1172418).
- scsi: smartpqi: fix call trace in device discovery (bsc#1172418).
- scsi: smartpqi: fix controller lockup observed during force reboot (bsc#1172418).
- scsi: smartpqi: fix LUN reset when fw bkgnd thread is hung (bsc#1172418).
- scsi: smartpqi: fix problem with unique ID for physical device (bsc#1172418).
- scsi: smartpqi: identify physical devices without issuing INQUIRY (bsc#1172418).
- scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask (bsc#1172418).
- scsi: smartpqi: remove unused manifest constants (bsc#1172418).
- scsi: smartpqi: Reporting unhandled SCSI errors (bsc#1172418).
- scsi: smartpqi: support device deletion via sysfs (bsc#1172418).
- scsi: smartpqi: update copyright (bsc#1172418).
- scsi: smartpqi: update logical volume size after expansion (bsc#1172418).
- scsi: smartpqi: Use scnprintf() for avoiding potential buffer overflow (bsc#1172418).
- scsi: storvsc: Correctly set number of hardware queues for IDE disk (git-fixes).
- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- sctp: Do not advertise IPv4 addresses if ipv6only is set on the socket (networking-stable-20_06_28).
- selftests/livepatch: fix mem leaks in test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: more verification in test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: simplify test-klp-callbacks busy target tests (bsc#1071995).
- serial: 8250: change lock order in serial8250_do_startup() (git-fixes).
- serial: pl011: Do not leak amba_ports entry on driver register error (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- Set VIRTIO_CONSOLE=y (bsc#1175667).
- sign also s390x kernel images (bsc#1163524)
- soc: fsl: qbman: allow registering a device link for the portal user (bsc#1174550).
- soc: fsl: qbman_portals: add APIs to retrieve the probing status (bsc#1174550).
- spi: davinci: Remove uninitialized_var() usage (git-fixes).
- spi: lantiq: fix: Rx overflow error in full duplex mode (git-fixes).
- spi: nxp-fspi: Ensure width is respected in spi-mem operations (bsc#1175421).
- spi: spi-fsl-dspi: Fix 16-bit word order in 32-bit XSPI mode (bsc#1175422).
- spi: spi-mem: export spi_mem_default_supports_op() (bsc#1175421).
- staging: fsl-dpaa2: ethsw: Add missing netdevice check (bsc#1175423).
- tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT (networking-stable-20_06_28).
- tcp: grow window for OOO packets only for SACK flows (networking-stable-20_06_28).
- tcp: make sure listeners do not initialize congestion-control state (networking-stable-20_07_17).
- tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key() (networking-stable-20_07_17).
- tcp: md5: do not send silly options in SYNCOOKIES (networking-stable-20_07_17).
- tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers (networking-stable-20_07_17).
- tracepoint: Mark __tracepoint_string's __used (git-fixes).
- tracing: Use trace_sched_process_free() instead of exit() for pid tracing (git-fixes).
- tty: serial: fsl_lpuart: add imx8qxp support (bsc#1175670).
- tty: serial: fsl_lpuart: free IDs allocated by IDA (bsc#1175670).
- Update patch reference for a tipc fix patch (bsc#1175515)
- USB: cdc-acm: rework notification_buffer resizing (git-fixes).
- USB: gadget: f_tcm: Fix some resource leaks in some error paths (git-fixes).
- USB: host: ohci-exynos: Fix error handling in exynos_ohci_probe() (git-fixes).
- USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge (git-fixes).
- USB: iowarrior: fix up report size handling for some devices (git-fixes).
- usbip: tools: fix module name in man page (git-fixes).
- USB: rename USB quirk to USB_QUIRK_ENDPOINT_IGNORE (git-fixes).
- USB: serial: cp210x: enable USB generic throttle/unthrottle (git-fixes).
- USB: serial: cp210x: re-enable auto-RTS on open (git-fixes).
- USB: serial: ftdi_sio: clean up receive processing (git-fixes).
- USB: serial: ftdi_sio: fix break and sysrq handling (git-fixes).
- USB: serial: ftdi_sio: make process-packet buffer unsigned (git-fixes).
- USB: serial: iuu_phoenix: fix led-activity helpers (git-fixes).
- USB: serial: qcserial: add EM7305 QDL product ID (git-fixes).
- USB: xhci: define IDs for various ASMedia host controllers (git-fixes).
- USB: xhci: Fix ASM2142/ASM3142 DMA addressing (git-fixes).
- USB: xhci: Fix ASMedia ASM1142 DMA addressing (git-fixes).
- USB: xhci-mtk: fix the failure of bandwidth allocation (git-fixes).
- VFS: Check rename_lock in lookup_fast() (bsc#1174734).
- video: fbdev: sm712fb: fix an issue about iounmap for a wrong address (git-fixes).
- video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call (git-fixes).
- vlan: consolidate VLAN parsing code and limit max parsing depth (networking-stable-20_07_17).
- vmxnet3: use correct tcp hdr length when packet is encapsulated (bsc#1175199).
- vt_compat_ioctl(): clean up, use compat_ptr() properly (git-fixes).
- vt: vt_ioctl: remove unnecessary console allocation checks (git-fixes).
- watchdog: f71808e_wdt: clear watchdog timeout occurred flag (bsc#1111666).
- watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options (bsc#1111666).
- watchdog: f71808e_wdt: remove use of wrong watchdog_info option (bsc#1111666).
- wl1251: fix always return 0 error (git-fixes).
- x86/hyperv: Create and use Hyper-V page definitions (git-fixes).
- x86/hyper-v: Fix overflow bug in fill_gva_list() (git-fixes).
- x86/hyperv: Make hv_vcpu_is_preempted() visible (git-fixes).
- xen/balloon: fix accounting in alloc_xenballooned_pages error path (bsc#1065600).
- xen/balloon: make the balloon wait interruptible (bsc#1065600).
- xfrm: check id proto in validate_tmpl() (git-fixes).
- xfrm: clean up xfrm protocol checks (git-fixes).
- xfrm_user: uncoditionally validate esn replay attribute struct (git-fixes).
- xfs: fix inode allocation block res calculation precedence (git-fixes).
- xfs: fix reflink quota reservation accounting error (git-fixes).
- xhci: Fix enumeration issue when setting max packet size for FS devices (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-04"/>
	<updated date="2020-09-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074701">SUSE bug 1074701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083548">SUSE bug 1083548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085235">SUSE bug 1085235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085308">SUSE bug 1085308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087078">SUSE bug 1087078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094912">SUSE bug 1094912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1100394">SUSE bug 1100394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102640">SUSE bug 1102640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105412">SUSE bug 1105412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120163">SUSE bug 1120163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152148">SUSE bug 1152148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163524">SUSE bug 1163524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165629">SUSE bug 1165629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166965">SUSE bug 1166965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169790">SUSE bug 1169790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170232">SUSE bug 1170232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171688">SUSE bug 1171688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171988">SUSE bug 1171988</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172108">SUSE bug 1172108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172247">SUSE bug 1172247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172418">SUSE bug 1172418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172428">SUSE bug 1172428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172781">SUSE bug 1172781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172782">SUSE bug 1172782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172783">SUSE bug 1172783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172871">SUSE bug 1172871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172872">SUSE bug 1172872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172873">SUSE bug 1172873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172963">SUSE bug 1172963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173485">SUSE bug 1173485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173798">SUSE bug 1173798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173954">SUSE bug 1173954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174003">SUSE bug 1174003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174026">SUSE bug 1174026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174070">SUSE bug 1174070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174161">SUSE bug 1174161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174205">SUSE bug 1174205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174387">SUSE bug 1174387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174484">SUSE bug 1174484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174547">SUSE bug 1174547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174549">SUSE bug 1174549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174550">SUSE bug 1174550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174625">SUSE bug 1174625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174658">SUSE bug 1174658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174685">SUSE bug 1174685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174689">SUSE bug 1174689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174699">SUSE bug 1174699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174734">SUSE bug 1174734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174757">SUSE bug 1174757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174771">SUSE bug 1174771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174840">SUSE bug 1174840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174841">SUSE bug 1174841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174843">SUSE bug 1174843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174844">SUSE bug 1174844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174845">SUSE bug 1174845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174852">SUSE bug 1174852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174873">SUSE bug 1174873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174887">SUSE bug 1174887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174904">SUSE bug 1174904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174926">SUSE bug 1174926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174968">SUSE bug 1174968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175062">SUSE bug 1175062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175063">SUSE bug 1175063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175064">SUSE bug 1175064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175065">SUSE bug 1175065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175066">SUSE bug 1175066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175067">SUSE bug 1175067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175112">SUSE bug 1175112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175127">SUSE bug 1175127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175128">SUSE bug 1175128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175149">SUSE bug 1175149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175199">SUSE bug 1175199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175213">SUSE bug 1175213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175228">SUSE bug 1175228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175232">SUSE bug 1175232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175284">SUSE bug 1175284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175393">SUSE bug 1175393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175394">SUSE bug 1175394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175396">SUSE bug 1175396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175397">SUSE bug 1175397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175398">SUSE bug 1175398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175399">SUSE bug 1175399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175400">SUSE bug 1175400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175401">SUSE bug 1175401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175402">SUSE bug 1175402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175403">SUSE bug 1175403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175404">SUSE bug 1175404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175405">SUSE bug 1175405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175406">SUSE bug 1175406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175407">SUSE bug 1175407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175408">SUSE bug 1175408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175409">SUSE bug 1175409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175410">SUSE bug 1175410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175411">SUSE bug 1175411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175412">SUSE bug 1175412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175413">SUSE bug 1175413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175414">SUSE bug 1175414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175415">SUSE bug 1175415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175416">SUSE bug 1175416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175417">SUSE bug 1175417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175418">SUSE bug 1175418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175419">SUSE bug 1175419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175420">SUSE bug 1175420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175421">SUSE bug 1175421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175422">SUSE bug 1175422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175423">SUSE bug 1175423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175440">SUSE bug 1175440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175493">SUSE bug 1175493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175515">SUSE bug 1175515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175518">SUSE bug 1175518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175526">SUSE bug 1175526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175550">SUSE bug 1175550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175654">SUSE bug 1175654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175666">SUSE bug 1175666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175667">SUSE bug 1175667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175668">SUSE bug 1175668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175669">SUSE bug 1175669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175670">SUSE bug 1175670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175767">SUSE bug 1175767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175768">SUSE bug 1175768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175769">SUSE bug 1175769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175770">SUSE bug 1175770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175771">SUSE bug 1175771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175772">SUSE bug 1175772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175786">SUSE bug 1175786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175873">SUSE bug 1175873</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-10135/">CVE-2020-10135</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14314/">CVE-2020-14314</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14356/">CVE-2020-14356</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16166/">CVE-2020-16166</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24394/">CVE-2020-24394</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498060" comment="kernel-azure-4.12.14-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498061" comment="kernel-azure-base-4.12.14-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498062" comment="kernel-azure-devel-4.12.14-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498063" comment="kernel-devel-azure-4.12.14-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498064" comment="kernel-source-azure-4.12.14-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498065" comment="kernel-syms-azure-4.12.14-8.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138862" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1136666" ref_url="https://bugzilla.suse.com/1136666" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1173060" ref_url="https://bugzilla.suse.com/1173060" source="BUGZILLA"/>
		<reference ref_id="1175691" ref_url="https://bugzilla.suse.com/1175691" source="BUGZILLA"/>
		<reference ref_id="1176069" ref_url="https://bugzilla.suse.com/1176069" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14386" ref_url="https://www.suse.com/security/cve/CVE-2020-14386/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2579-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007385.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes.

The following security bug was fixed:

- CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).

The following non-security bugs were fixed:

- EDAC: Fix reference count leaks (bsc#1112178).
- KVM: SVM: fix svn_pin_memory()'s use of get_user_pages_fast() (bsc#1112178).
- mm, vmstat: reduce zone-&gt;lock holding time by /proc/pagetypeinfo (bsc#1175691).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1112178).
- scsi: lpfc: Add and rename a whole bunch of function parameter descriptions (bsc#1171558 bsc#1136666).
- scsi: lpfc: Add description for lpfc_release_rpi()'s 'ndlpl param (bsc#1171558 bsc#1136666).
- scsi: lpfc: Add missing misc_deregister() for lpfc_init() (bsc#1171558 bsc#1136666).
- scsi: lpfc: Ensure variable has the same stipulations as code using it (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix a bunch of kerneldoc misdemeanors (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix FCoE speed reporting (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix kerneldoc parameter formatting/misnaming/missing issues (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix LUN loss after cable pull (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix no message shown for lpfc_hdw_queue out of range value (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix oops when unloading driver while running mds diags (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix retry of PRLI when status indicates its unsupported (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix RSCN timeout due to incorrect gidft counter (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix some function parameter descriptions (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix typo in comment for ULP (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix-up around 120 documentation issues (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix-up formatting/docrot where appropriate (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix validation of bsg reply lengths (bsc#1171558 bsc#1136666).
- scsi: lpfc: NVMe remote port devloss_tmo from lldd (bsc#1171558 bsc#1136666 bsc#1173060).
- scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying targetport (bsc#1171558 bsc#1136666).
- scsi: lpfc: Provide description for lpfc_mem_alloc()'s 'align' param (bsc#1171558 bsc#1136666).
- scsi: lpfc: Quieten some printks (bsc#1171558 bsc#1136666).
- scsi: lpfc: Remove unused variable 'pg_addr' (bsc#1171558 bsc#1136666).
- scsi: lpfc: Update lpfc version to 12.8.0.3 (bsc#1171558 bsc#1136666).
- scsi: lpfc: Use __printf() format notation (bsc#1171558 bsc#1136666).
- x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task (bsc#1112178).
- x86/mce/inject: Fix a wrong assignment of i_mce.status (bsc#1112178).
- x86/unwind/orc: Fix ORC for newly forked tasks (bsc#1058115).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-09"/>
	<updated date="2020-09-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136666">SUSE bug 1136666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173060">SUSE bug 1173060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175691">SUSE bug 1175691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176069">SUSE bug 1176069</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14386/">CVE-2020-14386</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498066" comment="kernel-azure-4.12.14-8.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498067" comment="kernel-azure-base-4.12.14-8.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498068" comment="kernel-azure-devel-4.12.14-8.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498069" comment="kernel-devel-azure-4.12.14-8.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498070" comment="kernel-source-azure-4.12.14-8.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498071" comment="kernel-syms-azure-4.12.14-8.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138863" version="1" class="patch">
	<metadata>
		<title>Security update for rmt-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141122" ref_url="https://bugzilla.suse.com/1141122" source="BUGZILLA"/>
		<reference ref_id="1157119" ref_url="https://bugzilla.suse.com/1157119" source="BUGZILLA"/>
		<reference ref_id="1160673" ref_url="https://bugzilla.suse.com/1160673" source="BUGZILLA"/>
		<reference ref_id="1160922" ref_url="https://bugzilla.suse.com/1160922" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18904" ref_url="https://www.suse.com/security/cve/CVE-2019-18904/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006422.html" source="SUSE-SU"/>
		<description>
This update for rmt-server to version 2.5.2 fixes the following issues:

Security issue fixed:

- CVE-2019-18904: Fixed a denial of service in the offline migration (bsc#1160922).

Non-security issue fixed:

- Relaxed systemd units dependencies (bsc#1160673)
- Added more verbose error reporting for SCC API errors (bsc#1157119)
- Fixed system listing when architecture is not well referenced (bsc#1141122)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-31"/>
	<updated date="2020-01-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1141122">SUSE bug 1141122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157119">SUSE bug 1157119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160673">SUSE bug 1160673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160922">SUSE bug 1160922</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18904/">CVE-2019-18904</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498072" comment="rmt-server-pubcloud-2.5.2-3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138864" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1094244" ref_url="https://bugzilla.suse.com/1094244" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1154366" ref_url="https://bugzilla.suse.com/1154366" source="BUGZILLA"/>
		<reference ref_id="1167527" ref_url="https://bugzilla.suse.com/1167527" source="BUGZILLA"/>
		<reference ref_id="1169972" ref_url="https://bugzilla.suse.com/1169972" source="BUGZILLA"/>
		<reference ref_id="1171688" ref_url="https://bugzilla.suse.com/1171688" source="BUGZILLA"/>
		<reference ref_id="1171742" ref_url="https://bugzilla.suse.com/1171742" source="BUGZILLA"/>
		<reference ref_id="1173115" ref_url="https://bugzilla.suse.com/1173115" source="BUGZILLA"/>
		<reference ref_id="1174899" ref_url="https://bugzilla.suse.com/1174899" source="BUGZILLA"/>
		<reference ref_id="1175228" ref_url="https://bugzilla.suse.com/1175228" source="BUGZILLA"/>
		<reference ref_id="1175749" ref_url="https://bugzilla.suse.com/1175749" source="BUGZILLA"/>
		<reference ref_id="1175882" ref_url="https://bugzilla.suse.com/1175882" source="BUGZILLA"/>
		<reference ref_id="1176011" ref_url="https://bugzilla.suse.com/1176011" source="BUGZILLA"/>
		<reference ref_id="1176022" ref_url="https://bugzilla.suse.com/1176022" source="BUGZILLA"/>
		<reference ref_id="1176038" ref_url="https://bugzilla.suse.com/1176038" source="BUGZILLA"/>
		<reference ref_id="1176235" ref_url="https://bugzilla.suse.com/1176235" source="BUGZILLA"/>
		<reference ref_id="1176242" ref_url="https://bugzilla.suse.com/1176242" source="BUGZILLA"/>
		<reference ref_id="1176278" ref_url="https://bugzilla.suse.com/1176278" source="BUGZILLA"/>
		<reference ref_id="1176316" ref_url="https://bugzilla.suse.com/1176316" source="BUGZILLA"/>
		<reference ref_id="1176317" ref_url="https://bugzilla.suse.com/1176317" source="BUGZILLA"/>
		<reference ref_id="1176318" ref_url="https://bugzilla.suse.com/1176318" source="BUGZILLA"/>
		<reference ref_id="1176319" ref_url="https://bugzilla.suse.com/1176319" source="BUGZILLA"/>
		<reference ref_id="1176320" ref_url="https://bugzilla.suse.com/1176320" source="BUGZILLA"/>
		<reference ref_id="1176321" ref_url="https://bugzilla.suse.com/1176321" source="BUGZILLA"/>
		<reference ref_id="1176381" ref_url="https://bugzilla.suse.com/1176381" source="BUGZILLA"/>
		<reference ref_id="1176423" ref_url="https://bugzilla.suse.com/1176423" source="BUGZILLA"/>
		<reference ref_id="1176482" ref_url="https://bugzilla.suse.com/1176482" source="BUGZILLA"/>
		<reference ref_id="1176507" ref_url="https://bugzilla.suse.com/1176507" source="BUGZILLA"/>
		<reference ref_id="1176536" ref_url="https://bugzilla.suse.com/1176536" source="BUGZILLA"/>
		<reference ref_id="1176544" ref_url="https://bugzilla.suse.com/1176544" source="BUGZILLA"/>
		<reference ref_id="1176545" ref_url="https://bugzilla.suse.com/1176545" source="BUGZILLA"/>
		<reference ref_id="1176546" ref_url="https://bugzilla.suse.com/1176546" source="BUGZILLA"/>
		<reference ref_id="1176548" ref_url="https://bugzilla.suse.com/1176548" source="BUGZILLA"/>
		<reference ref_id="1176659" ref_url="https://bugzilla.suse.com/1176659" source="BUGZILLA"/>
		<reference ref_id="1176698" ref_url="https://bugzilla.suse.com/1176698" source="BUGZILLA"/>
		<reference ref_id="1176699" ref_url="https://bugzilla.suse.com/1176699" source="BUGZILLA"/>
		<reference ref_id="1176700" ref_url="https://bugzilla.suse.com/1176700" source="BUGZILLA"/>
		<reference ref_id="1176721" ref_url="https://bugzilla.suse.com/1176721" source="BUGZILLA"/>
		<reference ref_id="1176722" ref_url="https://bugzilla.suse.com/1176722" source="BUGZILLA"/>
		<reference ref_id="1176725" ref_url="https://bugzilla.suse.com/1176725" source="BUGZILLA"/>
		<reference ref_id="1176732" ref_url="https://bugzilla.suse.com/1176732" source="BUGZILLA"/>
		<reference ref_id="1176788" ref_url="https://bugzilla.suse.com/1176788" source="BUGZILLA"/>
		<reference ref_id="1176789" ref_url="https://bugzilla.suse.com/1176789" source="BUGZILLA"/>
		<reference ref_id="1176869" ref_url="https://bugzilla.suse.com/1176869" source="BUGZILLA"/>
		<reference ref_id="1176877" ref_url="https://bugzilla.suse.com/1176877" source="BUGZILLA"/>
		<reference ref_id="1176935" ref_url="https://bugzilla.suse.com/1176935" source="BUGZILLA"/>
		<reference ref_id="1176950" ref_url="https://bugzilla.suse.com/1176950" source="BUGZILLA"/>
		<reference ref_id="1176962" ref_url="https://bugzilla.suse.com/1176962" source="BUGZILLA"/>
		<reference ref_id="1176966" ref_url="https://bugzilla.suse.com/1176966" source="BUGZILLA"/>
		<reference ref_id="1176990" ref_url="https://bugzilla.suse.com/1176990" source="BUGZILLA"/>
		<reference ref_id="1177030" ref_url="https://bugzilla.suse.com/1177030" source="BUGZILLA"/>
		<reference ref_id="1177041" ref_url="https://bugzilla.suse.com/1177041" source="BUGZILLA"/>
		<reference ref_id="1177042" ref_url="https://bugzilla.suse.com/1177042" source="BUGZILLA"/>
		<reference ref_id="1177043" ref_url="https://bugzilla.suse.com/1177043" source="BUGZILLA"/>
		<reference ref_id="1177044" ref_url="https://bugzilla.suse.com/1177044" source="BUGZILLA"/>
		<reference ref_id="1177121" ref_url="https://bugzilla.suse.com/1177121" source="BUGZILLA"/>
		<reference ref_id="1177206" ref_url="https://bugzilla.suse.com/1177206" source="BUGZILLA"/>
		<reference ref_id="1177291" ref_url="https://bugzilla.suse.com/1177291" source="BUGZILLA"/>
		<reference ref_id="1177293" ref_url="https://bugzilla.suse.com/1177293" source="BUGZILLA"/>
		<reference ref_id="1177294" ref_url="https://bugzilla.suse.com/1177294" source="BUGZILLA"/>
		<reference ref_id="1177295" ref_url="https://bugzilla.suse.com/1177295" source="BUGZILLA"/>
		<reference ref_id="1177296" ref_url="https://bugzilla.suse.com/1177296" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0404" ref_url="https://www.suse.com/security/cve/CVE-2020-0404/" source="CVE"/>
		<reference ref_id="CVE-2020-0427" ref_url="https://www.suse.com/security/cve/CVE-2020-0427/" source="CVE"/>
		<reference ref_id="CVE-2020-0431" ref_url="https://www.suse.com/security/cve/CVE-2020-0431/" source="CVE"/>
		<reference ref_id="CVE-2020-0432" ref_url="https://www.suse.com/security/cve/CVE-2020-0432/" source="CVE"/>
		<reference ref_id="CVE-2020-14381" ref_url="https://www.suse.com/security/cve/CVE-2020-14381/" source="CVE"/>
		<reference ref_id="CVE-2020-14390" ref_url="https://www.suse.com/security/cve/CVE-2020-14390/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="CVE-2020-25284" ref_url="https://www.suse.com/security/cve/CVE-2020-25284/" source="CVE"/>
		<reference ref_id="CVE-2020-25641" ref_url="https://www.suse.com/security/cve/CVE-2020-25641/" source="CVE"/>
		<reference ref_id="CVE-2020-25643" ref_url="https://www.suse.com/security/cve/CVE-2020-25643/" source="CVE"/>
		<reference ref_id="CVE-2020-26088" ref_url="https://www.suse.com/security/cve/CVE-2020-26088/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2906-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007553.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-26088: Fixed an improper CAP_NET_RAW check in NFC socket creation could have been used by local attackers to create raw sockets, bypassing security mechanisms (bsc#1176990).
- CVE-2020-14390: Fixed an out-of-bounds memory write leading to memory corruption or a denial of service when changing screen size (bnc#1176235).
- CVE-2020-0432: Fixed an out of bounds write due to an integer overflow (bsc#1176721).
- CVE-2020-0427: Fixed an out of bounds read due to a use after free (bsc#1176725).
- CVE-2020-0431: Fixed an out of bounds write due to a missing bounds check (bsc#1176722).
- CVE-2020-0404: Fixed a linked list corruption due to an unusual root cause (bsc#1176423).
- CVE-2020-25212: Fixed getxattr kernel panic and memory overflow (bsc#1176381).
- CVE-2020-25284: Fixed an incomplete permission checking for access to rbd devices, which could have been leveraged by local attackers to map or unmap rbd block devices (bsc#1176482).
- CVE-2020-14381: Fixed requeue paths such that filp was valid when dropping the references (bsc#1176011).
- CVE-2019-25643: Fixed an improper input validation in ppp_cp_parse_cr function which could have led to memory corruption and read overflow (bsc#1177206).
- CVE-2020-25641: Fixed ann issue where length bvec was causing softlockups (bsc#1177121).

The following non-security bugs were fixed:

- 9p: Fix memory leak in v9fs_mount (git-fixes).
- ACPI: EC: Reference count query handlers under lock (git-fixes).
- airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE (git-fixes).
- airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE (git-fixes).
- airo: Fix read overflows sending packets (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- ALSA: firewire-digi00x: exclude Avid Adrenaline from detection (git-fixes).
- ALSA; firewire-tascam: exclude Tascam FE-8 from detection (git-fixes).
- ALSA: hda: Fix 2 channel swapping for Tegra (git-fixes).
- ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion NT950XCJ-X716A (git-fixes).
- ALSA: hda/realtek - Improved routing for Thinkpad X1 7th/8th Gen (git-fixes).
- altera-stapl: altera_get_note: prevent write beyond end of 'key' (git-fixes).
- ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter (git-fixes).
- arm64: KVM: Do not generate UNDEF when LORegion feature is present (jsc#SLE-4084).
- arm64: KVM: regmap: Fix unexpected switch fall-through (jsc#SLE-4084).
- asm-generic: fix -Wtype-limits compiler warnings (bsc#1112178).
- ASoC: kirkwood: fix IRQ error handling (git-fixes).
- ASoC: tegra: Fix reference count leaks (git-fixes).
- ath10k: fix array out-of-bounds access (git-fixes).
- ath10k: fix memory leak for tpc_stats_final (git-fixes).
- ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read (git-fixes).
- batman-adv: Add missing include for in_interrupt() (git-fixes).
- batman-adv: Avoid uninitialized chaddr when handling DHCP (git-fixes).
- batman-adv: bla: fix type misuse for backbone_gw hash indexing (git-fixes).
- batman-adv: bla: use netif_rx_ni when not in interrupt context (git-fixes).
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh (git-fixes).
- batman-adv: mcast/TT: fix wrongly dropped or rerouted packets (git-fixes).
- bcache: Convert pr_&lt;level&gt; uses to a more typical style (git fixes (block drivers)).
- bcache: fix overflow in offset_to_stripe() (git fixes (block drivers)).
- bcm63xx_enet: correct clock usage (git-fixes).
- bcm63xx_enet: do not write to random DMA channel on BCM6345 (git-fixes).
- bitfield.h: do not compile-time validate _val in FIELD_FIT (git fixes (bitfield)).
- blktrace: fix debugfs use after free (git fixes (block drivers)).
- block: add docs for gendisk / request_queue refcount helpers (git fixes (block drivers)).
- block: revert back to synchronous request_queue removal (git fixes (block drivers)).
- block: Use non _rcu version of list functions for tag_set_list (git-fixes).
- Bluetooth: Fix refcount use-after-free issue (git-fixes).
- Bluetooth: guard against controllers sending zero'd events (git-fixes).
- Bluetooth: Handle Inquiry Cancel error after Inquiry Complete (git-fixes).
- Bluetooth: L2CAP: handle l2cap config request during open state (git-fixes).
- Bluetooth: prefetch channel before killing sock (git-fixes).
- bnxt_en: Fix completion ring sizing with TPA enabled (networking-stable-20_07_29).
- bonding: use nla_get_u64 to extract the value for IFLA_BOND_AD_ACTOR_SYSTEM (git-fixes).
- btrfs: require only sector size alignment for parent eb bytenr (bsc#1176789).
- btrfs: tree-checker: fix the error message for transid error (bsc#1176788).
- ceph: do not allow setlease on cephfs (bsc#1177041).
- ceph: fix potential mdsc use-after-free crash (bsc#1177042).
- ceph: fix use-after-free for fsc-&gt;mdsc (bsc#1177043).
- ceph: handle zero-length feature mask in session messages (bsc#1177044).
- cfg80211: regulatory: reject invalid hints (bsc#1176699).
- cifs: Fix leak when handling lease break for cached root fid (bsc#1176242).
- cifs/smb3: Fix data inconsistent when punch hole (bsc#1176544).
- cifs/smb3: Fix data inconsistent when zero file range (bsc#1176536).
- clk: Add (devm_)clk_get_optional() functions (git-fixes).
- clk: rockchip: Fix initialization of mux_pll_src_4plls_p (git-fixes).
- clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED (git-fixes).
- clk/ti/adpll: allocate room for terminating null (git-fixes).
- clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() (git-fixes).
- cpufreq: intel_pstate: Fix EPP setting via sysfs in active mode (bsc#1176966).
- dmaengine: at_hdmac: check return value of of_find_device_by_node() in at_dma_xlate() (git-fixes).
- dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling (git-fixes).
- dmaengine: pl330: Fix burst length if burst size is smaller than bus width (git-fixes).
- dmaengine: tegra-apb: Prevent race conditions on channel's freeing (git-fixes).
- dmaengine: zynqmp_dma: fix burst length configuration (git-fixes).
- dm crypt: avoid truncating the logical block size (git fixes (block drivers)).
- dm: fix redundant IO accounting for bios that need splitting (git fixes (block drivers)).
- dm integrity: fix a deadlock due to offloading to an incorrect workqueue (git fixes (block drivers)).
- dm integrity: fix integrity recalculation that is improperly skipped (git fixes (block drivers)).
- dm: report suspended device during destroy (git fixes (block drivers)).
- dm rq: do not call blk_mq_queue_stopped() in dm_stop_queue() (git fixes (block drivers)).
- dm: use noio when sending kobject event (git fixes (block drivers)).
- dm writecache: add cond_resched to loop in persistent_memory_claim() (git fixes (block drivers)).
- dm writecache: correct uncommitted_block when discarding uncommitted entry (git fixes (block drivers)).
- dm zoned: assign max_io_len correctly (git fixes (block drivers)).
- Drivers: char: tlclk.c: Avoid data race between init and interrupt handler (git-fixes).
- Drivers: hv: Specify receive buffer size using Hyper-V page size (bsc#1176877).
- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload (git-fixes).
- drivers/net/wan/x25_asy: Fix to make it work (networking-stable-20_07_29).
- drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic (git-fixes).
- drm/amd/display: fix ref count leak in amdgpu_drm_ioctl (git-fixes).
- drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails (git-fixes).
- drm/amdgpu: Fix buffer overflow in INFO ioctl (git-fixes).
- drm/amdgpu: Fix bug in reporting voltage for CIK (git-fixes).
- drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms (git-fixes).
- drm/amdgpu: increase atombios cmd timeout (git-fixes).
- drm/amdgpu/powerplay: fix AVFS handling with custom powerplay table (git-fixes).
- drm/amdgpu/powerplay/smu7: fix AVFS handling with custom powerplay table (git-fixes).
- drm/amdkfd: fix a memory leak issue (git-fixes).
- drm/amdkfd: Fix reference count leaks (git-fixes).
- drm/amd/pm: correct Vega10 swctf limit setting (git-fixes).
- drm/amd/pm: correct Vega12 swctf limit setting (git-fixes).
- drm/ast: Initialize DRAM type before posting GPU (bsc#1113956) 	* context changes
- drm/mediatek: Add exception handing in mtk_drm_probe() if component init fail (git-fixes).
- drm/mediatek: Add missing put_device() call in mtk_hdmi_dt_parse_pdata() (git-fixes).
- drm/msm/a5xx: Always set an OPP supported hardware value (git-fixes).
- drm/msm: add shutdown support for display platform_driver (git-fixes).
- drm/msm: Disable preemption on all 5xx targets (git-fixes).
- drm/msm: fix leaks if initialization fails (git-fixes).
- drm/msm/gpu: make ringbuffer readonly (bsc#1112178) 	* context changes
- drm/nouveau/debugfs: fix runtime pm imbalance on error (git-fixes).
- drm/nouveau/dispnv50: fix runtime pm imbalance on error (git-fixes).
- drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open (git-fixes).
- drm/nouveau: Fix reference count leak in nouveau_connector_detect (git-fixes).
- drm/nouveau: fix reference count leak in nv50_disp_atomic_commit (git-fixes).
- drm/nouveau: fix runtime pm imbalance on error (git-fixes).
- drm/omap: fix possible object reference leak (git-fixes).
- drm/radeon: fix multiple reference count leak (git-fixes).
- drm/radeon: Prefer lower feedback dividers (git-fixes).
- drm/radeon: revert 'Prefer lower feedback dividers' (git-fixes).
- drm/sun4i: Fix dsi dcs long write function (git-fixes).
- drm/sun4i: sun8i-csc: Secondary CSC register correction (git-fixes).
- drm/tve200: Stabilize enable/disable (git-fixes).
- drm/vc4/vc4_hdmi: fill ASoC card owner (git-fixes).
- e1000: Do not perform reset in reset_task if we are already down (git-fixes).
- fbcon: prevent user font height or width change from causing (bsc#1112178) 	* move from drivers/video/fbdev/fbcon to drivers/video/console 	* context changes
- Fix error in kabi fix for: NFSv4: Fix OPEN / CLOSE race (bsc#1176950).
- ftrace: Move RCU is watching check after recursion check (git-fixes).
- ftrace: Setup correct FTRACE_FL_REGS flags for module (git-fixes).
- gma/gma500: fix a memory disclosure bug due to uninitialized bytes (git-fixes).
- gpio: tc35894: fix up tc35894 interrupt configuration (git-fixes).
- gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable() (git-fixes).
- gtp: fix Illegal context switch in RCU read-side critical section (git-fixes).
- gtp: fix use-after-free in gtp_newlink() (git-fixes).
- Hide e21a4f3a930c as of its duplication
- HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage() (git-fixes).
- hsr: use netdev_err() instead of WARN_ONCE() (bsc#1176659).
- hv_utils: drain the timesync packets on onchannelcallback (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale (bsc#1176877).
- hwmon: (applesmc) check status earlier (git-fixes).
- i2c: core: Do not fail PRP0001 enumeration when no ID table exist (git-fixes).
- i2c: cpm: Fix i2c_ram structure (git-fixes).
- ibmvnic: add missing parenthesis in do_reset() (bsc#1176700 ltc#188140).
- ieee802154/adf7242: check status of adf7242_read_reg (git-fixes).
- ieee802154: fix one possible memleak in ca8210_dev_com_init (git-fixes).
- iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak (git-fixes).
- iio: accel: kxsd9: Fix alignment of local buffer (git-fixes).
- iio:accel:mma7455: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:adc:ina2xx Fix timestamp alignment issue (git-fixes).
- iio: adc: mcp3422: fix locking on error path (git-fixes).
- iio: adc: mcp3422: fix locking scope (git-fixes).
- iio:adc:ti-adc081c Fix alignment and data leak issues (git-fixes).
- iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set (git-fixes).
- iio: improve IIO_CONCENTRATION channel type description (git-fixes).
- iio:light:ltr501 Fix timestamp alignment issue (git-fixes).
- iio:light:max44000 Fix timestamp alignment and prevent data leak (git-fixes).
- iio:magnetometer:ak8975 Fix alignment and data leak issues (git-fixes).
- include: add additional sizes (bsc#1094244 ltc#168122).
- iommu/amd: Fix IOMMU AVIC not properly update the is_run bit in IRTE (bsc#1177293).
- iommu/amd: Fix potential @entry null deref (bsc#1177294).
- iommu/amd: Print extended features in one line to fix divergent log levels (bsc#1176316).
- iommu/amd: Re-factor guest virtual APIC (de-)activation code (bsc#1177291).
- iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (bsc#1176317).
- iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (bsc#1177295).
- iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (bsc#1176318).
- iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate() (bsc#1177296).
- iommu/omap: Check for failure of a call to omap_iommu_dump_ctx (bsc#1176319).
- iommu/vt-d: Serialize IOMMU GCMD register modifications (bsc#1176320).
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
- KVM: arm64: Change 32-bit handling of VM system registers (jsc#SLE-4084).
- KVM: arm64: Cleanup __activate_traps and __deactive_traps for VHE and non-VHE (jsc#SLE-4084).
- KVM: arm64: Configure c15, PMU, and debug register traps on cpu load/put for VHE (jsc#SLE-4084).
- KVM: arm64: Defer saving/restoring 32-bit sysregs to vcpu load/put (jsc#SLE-4084).
- KVM: arm64: Defer saving/restoring 64-bit sysregs to vcpu load/put on VHE (jsc#SLE-4084).
- KVM: arm64: Directly call VHE and non-VHE FPSIMD enabled functions (jsc#SLE-4084).
- KVM: arm64: Do not deactivate VM on VHE systems (jsc#SLE-4084).
- KVM: arm64: Do not save the host ELR_EL2 and SPSR_EL2 on VHE systems (jsc#SLE-4084).
- KVM: arm64: Factor out fault info population and gic workarounds (jsc#SLE-4084).
- KVM: arm64: Fix order of vcpu_write_sys_reg() arguments (jsc#SLE-4084).
- KVM: arm64: Forbid kprobing of the VHE world-switch code (jsc#SLE-4084).
- KVM: arm64: Improve debug register save/restore flow (jsc#SLE-4084).
- KVM: arm64: Introduce framework for accessing deferred sysregs (jsc#SLE-4084).
- KVM: arm64: Introduce separate VHE/non-VHE sysreg save/restore functions (jsc#SLE-4084).
- KVM: arm64: Introduce VHE-specific kvm_vcpu_run (jsc#SLE-4084).
- KVM: arm64: Move common VHE/non-VHE trap config in separate functions (jsc#SLE-4084).
- KVM: arm64: Move debug dirty flag calculation out of world switch (jsc#SLE-4084).
- KVM: arm64: Move HCR_INT_OVERRIDE to default HCR_EL2 guest flag (jsc#SLE-4084).
- KVM: arm64: Move userspace system registers into separate function (jsc#SLE-4084).
- KVM: arm64: Prepare to handle deferred save/restore of 32-bit registers (jsc#SLE-4084).
- KVM: arm64: Prepare to handle deferred save/restore of ELR_EL1 (jsc#SLE-4084).
- KVM: arm64: Remove kern_hyp_va() use in VHE switch function (jsc#SLE-4084).
- KVM: arm64: Remove noop calls to timer save/restore from VHE switch (jsc#SLE-4084).
- KVM: arm64: Rework hyp_panic for VHE and non-VHE (jsc#SLE-4084).
- KVM: arm64: Rewrite sysreg alternatives to static keys (jsc#SLE-4084).
- KVM: arm64: Rewrite system register accessors to read/write functions (jsc#SLE-4084).
- KVM: arm64: Slightly improve debug save/restore functions (jsc#SLE-4084).
- KVM: arm64: Unify non-VHE host/guest sysreg save and restore functions (jsc#SLE-4084).
- KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE (jsc#SLE-4084).
- KVM: arm/arm64: Avoid vcpu_load for other vcpu ioctls than KVM_RUN (jsc#SLE-4084).
- KVM: arm/arm64: Avoid VGICv3 save/restore on VHE with no IRQs (jsc#SLE-4084).
- KVM: arm/arm64: Get rid of vcpu-&gt;arch.irq_lines (jsc#SLE-4084).
- KVM: arm/arm64: Handle VGICv3 save/restore from the main VGIC code on VHE (jsc#SLE-4084).
- KVM: arm/arm64: Move vcpu_load call after kvm_vcpu_first_run_init (jsc#SLE-4084).
- KVM: arm/arm64: Move VGIC APR save/restore to vgic put/load (jsc#SLE-4084).
- KVM: arm/arm64: Prepare to handle deferred save/restore of SPSR_EL1 (jsc#SLE-4084).
- KVM: arm/arm64: Remove leftover comment from kvm_vcpu_run_vhe (jsc#SLE-4084).
- KVM: introduce kvm_arch_vcpu_async_ioctl (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_fpu (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_mpstate (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_regs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_run (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_fpu (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_guest_debug (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_mpstate (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_regs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_sregs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_translate (jsc#SLE-4084).
- KVM: PPC: Fix compile error that occurs when CONFIG_ALTIVEC=n (jsc#SLE-4084).
- KVM: Prepare for moving vcpu_load/vcpu_put into arch specific code (jsc#SLE-4084).
- KVM: SVM: Add a dedicated INVD intercept routine (bsc#1112178).
- KVM: SVM: Fix disable pause loop exit/pause filtering capability on SVM (bsc#1176321).
- KVM: Take vcpu-&gt;mutex outside vcpu_load (jsc#SLE-4084).
- libceph: allow setting abort_on_full for rbd (bsc#1169972).
- libnvdimm: cover up nvdimm_security_ops changes (bsc#1171742).
- libnvdimm: cover up struct nvdimm changes (bsc#1171742).
- libnvdimm/security, acpi/nfit: unify zero-key for all security commands (bsc#1171742).
- libnvdimm/security: fix a typo (bsc#1171742 bsc#1167527).
- libnvdimm/security: Introduce a 'frozen' attribute (bsc#1171742).
- lib/raid6: use vdupq_n_u8 to avoid endianness warnings (git fixes (block drivers)).
- mac802154: tx: fix use-after-free (git-fixes).
- md: raid0/linear: fix dereference before null check on pointer mddev (git fixes (block drivers)).
- media: davinci: vpif_capture: fix potential double free (git-fixes).
- media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq() (git-fixes).
- media: smiapp: Fix error handling at NVM reading (git-fixes).
- media: ti-vpe: cal: Restrict DMA to avoid memory corruption (git-fixes).
- mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs (git-fixes).
- mfd: mfd-core: Protect against NULL call-back function pointer (git-fixes).
- mm: Avoid calling build_all_zonelists_init under hotplug context (bsc#1154366).
- mmc: cqhci: Add cqhci_deactivate() (git-fixes).
- mmc: sdhci-msm: Add retries when all tuning phases are found valid (git-fixes).
- mmc: sdhci-pci: Fix SDHCI_RESET_ALL for CQHCI for Intel GLK-based controllers (git-fixes).
- mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS models (git-fixes).
- mm/page_alloc.c: fix a crash in free_pages_prepare() (git fixes (mm/pgalloc)).
- mm/vmalloc.c: move 'area-&gt;pages' after if statement (git fixes (mm/vmalloc)).
- mtd: cfi_cmdset_0002: do not free cfi-&gt;cfiq in error path of cfi_amdstd_setup() (git-fixes).
- mtd: lpddr: Fix a double free in probe() (git-fixes).
- mtd: phram: fix a double free issue in error path (git-fixes).
- mtd: properly check all write ioctls for permissions (git-fixes).
- net: dsa: b53: Fix sparse warnings in b53_mmap.c (git-fixes).
- net: dsa: b53: Use strlcpy() for ethtool::get_strings (git-fixes).
- net: dsa: mv88e6xxx: fix 6085 frame mode masking (git-fixes).
- net: dsa: mv88e6xxx: Fix interrupt masking on removal (git-fixes).
- net: dsa: mv88e6xxx: Fix name of switch 88E6141 (git-fixes).
- net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge() (git-fixes).
- net: dsa: mv88e6xxx: Unregister MDIO bus on error path (git-fixes).
- net: dsa: qca8k: Allow overwriting CPU port setting (git-fixes).
- net: dsa: qca8k: Enable RXMAC when bringing up a port (git-fixes).
- net: dsa: qca8k: Force CPU port to its highest bandwidth (git-fixes).
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (git-fixes).
- net: fs_enet: do not call phy_stop() in interrupts (git-fixes).
- net: initialize fastreuse on inet_inherit_port (networking-stable-20_08_15).
- net: lan78xx: Bail out if lan78xx_get_endpoints fails (git-fixes).
- net: lan78xx: replace bogus endpoint lookup (networking-stable-20_08_08).
- net: lio_core: fix potential sign-extension overflow on large shift (git-fixes).
- net/mlx5: Add meaningful return codes to status_to_err function (git-fixes).
- net/mlx5: E-Switch, Use correct flags when configuring vlan (git-fixes).
- net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded (git-fixes).
- net: mvneta: fix mtu change on port without link (git-fixes).
- net-next: ax88796: Do not free IRQ in ax_remove() (already freed in ax_close()) (git-fixes).
- net/nfc/rawsock.c: add CAP_NET_RAW check (networking-stable-20_08_15).
- net: qca_spi: Avoid packet drop during initial sync (git-fixes).
- net: qca_spi: Make sure the QCA7000 reset is triggered (git-fixes).
- net: refactor bind_bucket fastreuse into helper (networking-stable-20_08_15).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: fix restoring of fallback changes (git-fixes).
- net/smc: fix sock refcounting in case of termination (git-fixes).
- net/smc: improve close of terminated socket (git-fixes).
- net/smc: Prevent kernel-infoleak in __smc_diag_dump() (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: tolerate future SMCD versions (git-fixes).
- net: stmmac: call correct function in stmmac_mac_config_rx_queues_routing() (git-fixes).
- net: stmmac: Disable ACS Feature for GMAC &gt;= 4 (git-fixes).
- net: stmmac: do not stop NAPI processing when dropping a packet (git-fixes).
- net: stmmac: dwmac4: fix flow control issue (git-fixes).
- net: stmmac: dwmac_lib: fix interchanged sleep/timeout values in DMA reset function (git-fixes).
- net: stmmac: dwmac-meson8b: Add missing boundary to RGMII TX clock array (git-fixes).
- net: stmmac: dwmac-meson8b: fix internal RGMII clock configuration (git-fixes).
- net: stmmac: dwmac-meson8b: fix setting the RGMII TX clock on Meson8b (git-fixes).
- net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on Meson8b/8m2 SoCs (git-fixes).
- net: stmmac: dwmac-meson8b: only configure the clocks in RGMII mode (git-fixes).
- net: stmmac: dwmac-meson8b: propagate rate changes to the parent clock (git-fixes).
- net: stmmac: Fix error handling path in 'alloc_dma_rx_desc_resources()' (git-fixes).
- net: stmmac: Fix error handling path in 'alloc_dma_tx_desc_resources()' (git-fixes).
- net: stmmac: rename dwmac4_tx_queue_routing() to match reality (git-fixes).
- net: stmmac: set MSS for each tx DMA channel (git-fixes).
- net: stmmac: Use correct values in TQS/RQS fields (git-fixes).
- net-sysfs: add a newline when printing 'tx_timeout' by sysfs (networking-stable-20_07_29).
- net: systemport: Fix software statistics for SYSTEMPORT Lite (git-fixes).
- net: systemport: Fix sparse warnings in bcm_sysport_insert_tsb() (git-fixes).
- net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() (git-fixes).
- net: ucc_geth - fix Oops when changing number of buffers in the ring (git-fixes).
- NFSv4: do not mark all open state for recovery when handling recallable state revoked flag (bsc#1176935).
- nvme-fc: set max_segments to lldd max value (bsc#1176038).
- nvme-pci: override the value of the controller's numa node (bsc#1176507).
- ocfs2: give applications more IO opportunities during fstrim (bsc#1175228).
- omapfb: fix multiple reference count leaks due to pm_runtime_get_sync (git-fixes).
- PCI/ASPM: Allow re-enabling Clock PM (git-fixes).
- PCI: Fix pci_create_slot() reference count leak (git-fixes).
- PCI: qcom: Add missing ipq806x clocks in PCIe driver (git-fixes).
- PCI: qcom: Add missing reset for ipq806x (git-fixes).
- PCI: qcom: Add support for tx term offset for rev 2.1.0 (git-fixes).
- PCI: qcom: Define some PARF params needed for ipq8064 SoC (git-fixes).
- PCI: rcar: Fix incorrect programming of OB windows (git-fixes).
- phy: samsung: s5pv210-usb2: Add delay after reset (git-fixes).
- pinctrl: mvebu: Fix i2c sda definition for 98DX3236 (git-fixes).
- powerpc/64s: Blacklist functions invoked on a trap (bsc#1094244 ltc#168122).
- powerpc/64s: Fix HV NMI vs HV interrupt recoverability test (bsc#1094244 ltc#168122).
- powerpc/64s: Fix unrelocated interrupt trampoline address test (bsc#1094244 ltc#168122).
- powerpc/64s: Include &lt;asm/nmi.h&gt; header file to fix a warning (bsc#1094244 ltc#168122).
- powerpc/64s: machine check do not trace real-mode handler (bsc#1094244 ltc#168122).
- powerpc/64s: sreset panic if there is no debugger or crash dump handlers (bsc#1094244 ltc#168122).
- powerpc/64s: system reset interrupt preserve HSRRs (bsc#1094244 ltc#168122).
- powerpc: Add cputime_to_nsecs() (bsc#1065729).
- powerpc/book3s64/radix: Add kernel command line option to disable radix GTSE (bsc#1055186 ltc#153436).
- powerpc/book3s64/radix: Fix boot failure with large amount of guest memory (bsc#1176022 ltc#187208).
- powerpc: Implement ftrace_enabled() helpers (bsc#1094244 ltc#168122).
- powerpc/init: Do not advertise radix during client-architecture-support (bsc#1055186 ltc#153436 ).
- powerpc/kernel: Cleanup machine check function declarations (bsc#1065729).
- powerpc/kernel: Enables memory hot-remove after reboot on pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Enable radix GTSE only if supported (bsc#1055186 ltc#153436).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests only (bsc#1177030 ltc#187588).
- powerpc/mm: Move book3s64 specifics in subdirectory mm/book3s64 (bsc#1176022 ltc#187208).
- powerpc/powernv: Remove real mode access limit for early allocations (bsc#1176022 ltc#187208).
- powerpc/prom: Enable Radix GTSE in cpu pa-features (bsc#1055186 ltc#153436).
- powerpc/pseries/le: Work around a firmware quirk (bsc#1094244 ltc#168122).
- powerpc/pseries: lift RTAS limit for radix (bsc#1176022 ltc#187208).
- powerpc/pseries: Limit machine check stack to 4GB (bsc#1094244 ltc#168122).
- powerpc/pseries: Machine check use rtas_call_unlocked() with args on stack (bsc#1094244 ltc#168122).
- powerpc/pseries: radix is not subject to RMA limit, remove it (bsc#1176022 ltc#187208).
- powerpc/pseries/ras: Avoid calling rtas_token() in NMI paths (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: Fix FWNMI_VALID off by one (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: fwnmi avoid modifying r3 in error case (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: fwnmi sreset should not interlock (bsc#1094244 ltc#168122).
- powerpc/traps: Do not trace system reset (bsc#1094244 ltc#168122).
- powerpc/traps: fix recoverability of machine check handling on book3s/32 (bsc#1094244 ltc#168122).
- powerpc/traps: Make unrecoverable NMIs die instead of panic (bsc#1094244 ltc#168122).
- powerpc/xmon: Use `dcbf` inplace of `dcbi` instruction for 64bit Book3S (bsc#1065729).
- power: supply: max17040: Correct voltage reading (git-fixes).
- rcu: Do RCU GP kthread self-wakeup from softirq and interrupt (git fixes (rcu)).
- regulator: push allocation in set_consumer_device_supply() out of lock (git-fixes).
- rpadlpar_io: Add MODULE_DESCRIPTION entries to kernel modules (bsc#1176869 ltc#188243).
- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- rpm/kernel-binary.spec.in: Also sign ppc64 kernels (jsc#SLE-15857 jsc#SLE-13618).
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115) To avoid the unnecessary key enrollment, when enrolling the signing key of the kernel package, '--ca-check' is added to mokutil so that mokutil will ignore the request if the CA of the signing key already exists in MokList or UEFI db. Since the macro, %_suse_kernel_module_subpackage, is only defined in a kernel module package (KMP), it's used to determine whether the %post script is running in a kernel package, or a kernel module package.
- rpm/kernel-source.spec.in: Also use bz compression (boo#1175882).
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698) The '-c' option wasn't passed down to %_kernel_module_package so the ueficert subpackage wasn't generated even if the certificate is specified in the spec file.
- rtc: ds1374: fix possible race condition (git-fixes).
- rtlwifi: rtl8192cu: Prevent leaking urb (git-fixes).
- rxrpc: Fix race between recvmsg and sendmsg on immediate call failure (networking-stable-20_08_08).
- rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA (networking-stable-20_07_29).
- s390/mm: fix huge pte soft dirty copying (git-fixes).
- s390/qeth: do not process empty bridge port events (git-fixes).
- s390/qeth: integrate RX refill worker with NAPI (git-fixes).
- s390/qeth: tolerate pre-filled RX buffer (git-fixes).
- scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del() (bsc#1174899).
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (bsc#1176962 ltc#188304).
- scsi: libfc: Fix for double free() (bsc#1174899).
- scsi: libfc: free response frame from GPN_ID (bsc#1174899).
- scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases (bsc#1174899).
- scsi: lpfc: Add dependency on CPU_FREQ (git-fixes).
- scsi: lpfc: Fix setting IRQ affinity with an empty CPU mask (git-fixes).
- scsi: qla2xxx: Fix regression on sparc64 (git-fixes).
- scsi: qla2xxx: Fix the return value (bsc#1171688).
- scsi: qla2xxx: Fix the size used in a 'dma_free_coherent()' call (bsc#1171688).
- scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba() (bsc#1171688).
- scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg() (bsc#1171688).
- scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1171688).
- scsi: qla2xxx: Log calling function name in qla2x00_get_sp_from_handle() (bsc#1171688).
- scsi: qla2xxx: Remove pci-dma-compat wrapper API (bsc#1171688).
- scsi: qla2xxx: Remove redundant variable initialization (bsc#1171688).
- scsi: qla2xxx: Remove superfluous memset() (bsc#1171688).
- scsi: qla2xxx: Simplify return value logic in qla2x00_get_sp_from_handle() (bsc#1171688).
- scsi: qla2xxx: Suppress two recently introduced compiler warnings (git-fixes).
- scsi: qla2xxx: Warn if done() or free() are called on an already freed srb (bsc#1171688).
- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for Tegra186 (git-fixes).
- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for Tegra210 (git-fixes).
- serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout (git-fixes).
- serial: 8250_omap: Fix sleeping function called from invalid context during probe (git-fixes).
- serial: 8250_port: Do not service RX FIFO if throttled (git-fixes).
- Set CONFIG_HAVE_KVM_VCPU_ASYNC_IOCTL=y (jsc#SLE-4084).
- SMB3: Honor persistent/resilient handle flags for multiuser mounts (bsc#1176546).
- SMB3: Honor 'seal' flag for multiuser mounts (bsc#1176545).
- SMB3: warn on confusing error scenario with sec=krb5 (bsc#1176548).
- tcp: apply a floor of 1 for RTT samples from TCP timestamps (networking-stable-20_08_08).
- thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430 (git-fixes).
- tools/power/cpupower: Fix initializer override in hsw_ext_cstates (bsc#1112178).
- USB: core: fix slab-out-of-bounds Read in read_descriptors (git-fixes).
- USB: dwc3: Increase timeout for CmdAct cleared by device controller (git-fixes).
- USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() (git-fixes).
- USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int (git-fixes).
- USB: Fix out of sync data toggle if a configured device is reconfigured (git-fixes).
- USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() (git-fixes).
- USB: gadget: f_ncm: Fix NDP16 datagram validation (git-fixes).
- USB: gadget: u_f: add overflow checks to VLA macros (git-fixes).
- USB: gadget: u_f: Unbreak offset calculation in VLAs (git-fixes).
- USB: hso: check for return value in hso_serial_common_create() (networking-stable-20_08_08).
- usblp: fix race between disconnect() and read() (git-fixes).
- USB: lvtest: return proper error code in probe (git-fixes).
- usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set (git-fixes).
- USB: qmi_wwan: add D-Link DWM-222 A2 device ID (git-fixes).
- USB: quirks: Add no-lpm quirk for another Raydium touchscreen (git-fixes).
- USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin notebook (git-fixes).
- USB: quirks: Ignore duplicate endpoint on Sound Devices MixPre-D (git-fixes).
- USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter (git-fixes).
- USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules (git-fixes).
- USB: serial: option: support dynamic Quectel USB compositions (git-fixes).
- USB: sisusbvga: Fix a potential UB casued by left shifting a negative value (git-fixes).
- USB: storage: Add unusual_uas entry for Sony PSZ drives (git-fixes).
- USB: typec: ucsi: acpi: Check the _DEP dependencies (git-fixes).
- USB: uas: Add quirk for PNY Pro Elite (git-fixes).
- USB: UAS: fix disconnect by unplugging a hub (git-fixes).
- USB: yurex: Fix bad gfp argument (git-fixes).
- vgacon: remove software scrollback support (bsc#1176278).
- video: fbdev: fix OOB read in vga_8planes_imageblit() (git-fixes).
- virtio-blk: free vblk-vqs in error path of virtblk_probe() (git fixes (block drivers)).
- vrf: prevent adding upper devices (git-fixes).
- vxge: fix return of a free'd memblock on a failed dma mapping (git-fixes).
- xen: do not reschedule in preemption off sections (bsc#1175749).
- xen/events: do not use chip_data for legacy IRQs (bsc#1065600).
- xen uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information (bsc#1065600).
- xhci: Do warm-reset when both CAS and XDEV_RESUME are set (git-fixes).
- yam: fix possible memory leak in yam_init_driver (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-13"/>
	<updated date="2020-10-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094244">SUSE bug 1094244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154366">SUSE bug 1154366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167527">SUSE bug 1167527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169972">SUSE bug 1169972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171688">SUSE bug 1171688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171742">SUSE bug 1171742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173115">SUSE bug 1173115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174899">SUSE bug 1174899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175228">SUSE bug 1175228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175749">SUSE bug 1175749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175882">SUSE bug 1175882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176011">SUSE bug 1176011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176022">SUSE bug 1176022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176038">SUSE bug 1176038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176235">SUSE bug 1176235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176242">SUSE bug 1176242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176278">SUSE bug 1176278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176316">SUSE bug 1176316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176317">SUSE bug 1176317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176318">SUSE bug 1176318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176319">SUSE bug 1176319</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176320">SUSE bug 1176320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176321">SUSE bug 1176321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176381">SUSE bug 1176381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176423">SUSE bug 1176423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176482">SUSE bug 1176482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176507">SUSE bug 1176507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176536">SUSE bug 1176536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176544">SUSE bug 1176544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176545">SUSE bug 1176545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176546">SUSE bug 1176546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176548">SUSE bug 1176548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176659">SUSE bug 1176659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176698">SUSE bug 1176698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176699">SUSE bug 1176699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176700">SUSE bug 1176700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176721">SUSE bug 1176721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176722">SUSE bug 1176722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176725">SUSE bug 1176725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176732">SUSE bug 1176732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176788">SUSE bug 1176788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176789">SUSE bug 1176789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176869">SUSE bug 1176869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176877">SUSE bug 1176877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176935">SUSE bug 1176935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176950">SUSE bug 1176950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176962">SUSE bug 1176962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176966">SUSE bug 1176966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176990">SUSE bug 1176990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177030">SUSE bug 1177030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177041">SUSE bug 1177041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177042">SUSE bug 1177042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177043">SUSE bug 1177043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177044">SUSE bug 1177044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177121">SUSE bug 1177121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177206">SUSE bug 1177206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177291">SUSE bug 1177291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177293">SUSE bug 1177293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177294">SUSE bug 1177294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177295">SUSE bug 1177295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177296">SUSE bug 1177296</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-0404/">CVE-2020-0404</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0427/">CVE-2020-0427</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0431/">CVE-2020-0431</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0432/">CVE-2020-0432</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14381/">CVE-2020-14381</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14390/">CVE-2020-14390</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25284/">CVE-2020-25284</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25641/">CVE-2020-25641</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25643/">CVE-2020-25643</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-26088/">CVE-2020-26088</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498073" comment="kernel-azure-4.12.14-8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498074" comment="kernel-azure-base-4.12.14-8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498075" comment="kernel-azure-devel-4.12.14-8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498076" comment="kernel-devel-azure-4.12.14-8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498077" comment="kernel-source-azure-4.12.14-8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498078" comment="kernel-syms-azure-4.12.14-8.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138865" version="1" class="patch">
	<metadata>
		<title>Security update for rmt-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172177" ref_url="https://bugzilla.suse.com/1172177" source="BUGZILLA"/>
		<reference ref_id="1172182" ref_url="https://bugzilla.suse.com/1172182" source="BUGZILLA"/>
		<reference ref_id="1172184" ref_url="https://bugzilla.suse.com/1172184" source="BUGZILLA"/>
		<reference ref_id="1172186" ref_url="https://bugzilla.suse.com/1172186" source="BUGZILLA"/>
		<reference ref_id="1173351" ref_url="https://bugzilla.suse.com/1173351" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16770" ref_url="https://www.suse.com/security/cve/CVE-2019-16770/" source="CVE"/>
		<reference ref_id="CVE-2019-5418" ref_url="https://www.suse.com/security/cve/CVE-2019-5418/" source="CVE"/>
		<reference ref_id="CVE-2019-5419" ref_url="https://www.suse.com/security/cve/CVE-2019-5419/" source="CVE"/>
		<reference ref_id="CVE-2019-5420" ref_url="https://www.suse.com/security/cve/CVE-2019-5420/" source="CVE"/>
		<reference ref_id="CVE-2020-11076" ref_url="https://www.suse.com/security/cve/CVE-2020-11076/" source="CVE"/>
		<reference ref_id="CVE-2020-11077" ref_url="https://www.suse.com/security/cve/CVE-2020-11077/" source="CVE"/>
		<reference ref_id="CVE-2020-15169" ref_url="https://www.suse.com/security/cve/CVE-2020-15169/" source="CVE"/>
		<reference ref_id="CVE-2020-5247" ref_url="https://www.suse.com/security/cve/CVE-2020-5247/" source="CVE"/>
		<reference ref_id="CVE-2020-5249" ref_url="https://www.suse.com/security/cve/CVE-2020-5249/" source="CVE"/>
		<reference ref_id="CVE-2020-5267" ref_url="https://www.suse.com/security/cve/CVE-2020-5267/" source="CVE"/>
		<reference ref_id="CVE-2020-8164" ref_url="https://www.suse.com/security/cve/CVE-2020-8164/" source="CVE"/>
		<reference ref_id="CVE-2020-8165" ref_url="https://www.suse.com/security/cve/CVE-2020-8165/" source="CVE"/>
		<reference ref_id="CVE-2020-8166" ref_url="https://www.suse.com/security/cve/CVE-2020-8166/" source="CVE"/>
		<reference ref_id="CVE-2020-8167" ref_url="https://www.suse.com/security/cve/CVE-2020-8167/" source="CVE"/>
		<reference ref_id="CVE-2020-8184" ref_url="https://www.suse.com/security/cve/CVE-2020-8184/" source="CVE"/>
		<reference ref_id="CVE-2020-8185" ref_url="https://www.suse.com/security/cve/CVE-2020-8185/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3160-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007702.html" source="SUSE-SU"/>
		<description>
This update for rmt-server fixes the following issues:

- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.

- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.

- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.

- Version 2.6.2
- Fix RMT file caching based on timestamps:
  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a
  repository server and if the response had a 304 (Not Modified), it would copy
  a file from the local cache instead of downloading. However, if the local file
  timestamp accidentally changed to a date newer than the one on the repository
  server, RMT would have an outdated file, which caused some errors.
  Now, RMT makes HEAD requests to the repositories servers and inspect the
  'Last-Modified' header to decide whether to download a file or copy it from
  cache, by comparing the equalness of timestamps.
  

- Version 2.6.1
- Fixed an issue where relative paths supplied to `rmt-cli import repos`
  caused the command to fail.

- Version 2.6.0
- Friendlier IDs for custom repositories:
  In an effort to simplify the handling of SCC and custom repositories,
  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID
  as before. For custom repositories, it can either be user provided
  or RMT generated (MD5 of the provided URL).
  Benefits:
  * `rmt-cli mirror repositories` now works for custom repositories.
  * Custom repository IDs can be the same across RMT instances.
  * No more confusing 'SCC ID' vs 'ID' in `rmt-cli` output.
  Deprecation Warnings:
  * RMT now uses a different ID for custom repositories than before.
    RMT still supports that old ID, but it's recommended to start
    using the new ID to ensure future compatibility.

- Version 2.5.20
- Updated rails from 6.0.3.2 to 6.0.3.3:
  - actionview (CVE-2020-15169)

- Version 2.5.19
- RMT now has the ability to remove local systems with the command
  `rmt-cli systems remove`.

- Version 2.5.18
- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1
  whenever an error occurs during mirroring
- Improved message logging for `rtm-cli mirror`. Instead of logging an error
  when it occurs, the command summarize all errors at the end of execution. Now
  log messages have colors to better identify failure/success.

- Version 2.5.17
- RMT no longer provides the installer updates repository to systems via its
  zypper service. This repository is used during the installation process, as
  it provides an up-to-date installation experience, but it has no use on an
  already installed system.

- Version 2.5.16
- Updated RMT's rails and puma dependencies.
  - puma (CVE-2020-11076, CVE-2020-11077, CVE-2020-5249, CVE-2020-5247
    CVE-2019-16770)
  - actionpack (CVE-2020-8185, CVE-2020-8164, CVE-2020-8166)
  - actionview (CVE-2020-8167, CVE-2020-5267, CVE-2019-5418, CVE-2019-5419)
  - activesupport (CVE-2020-8165)
  - railties (CVE-2019-5420)

- Version 2.5.15
- RMT now checks if repositories are fully mirrored during the
  activation process. Previously, RMT only checked if the repositories
  were enabled to be mirrored, but not that they were actually mirrored.
  In this case, RMTs were not able to provide the repository data which
  systems assumed it had.

- Version 2.5.14
- Enable 'Installer-Updates' repositories by default

- Fixed deprecation warning when thor encountered an error. Also,
  instead of returning 0 for thor errors, rmt-cli will return 1
  instead.

- Version 2.5.13
- Added `rmt-cli repos clean` command to remove locally mirrored files
  of repositories which are not marked to be mirrored.
- Previously, RMT didn't track deduplicated files in its database. Now,
  to accommodate `rmt-cli repos clean`, RMT will track all mirrored
  files.

- Move the nginx reload to the configuration package which contain
  nginx config files, don't reload nginx unconditionally from main
  package.

- Version 2.5.12
- Update rack to version 2.2.3 (CVE-2020-8184: bsc#1173351)
- Update Rails to version 5.2.4.3:
  - actionpack (CVE-2020-8164: bsc#1172177)
  - actionpack (CVE-2020-8166: bsc#1172182)
  - activesupport (CVE-2020-8165: bsc#1172186)
  - actionview (CVE-2020-8167: bsc#1172184)

- Version 2.5.11
- rmt-server-pubcloud:
  - SLES11 EOL
  - Extension activation verification based on the available subscriptions
  - Added a manual instance verification script

- Version 2.5.10
- Support rmt-server to run with Ruby 2.7 (Factory/Tumbleweed):
  - Bump gem 'config' version from 1.7.2 to 2.2.1 to fix incompatibility Ruby
    2.7 OpenStruct class;
  - Bump gem 'typhoeus' version from 1.3.1 to 1.4.0 in order to also bump gem
    'ethon' version, which caused a 'rb_safe_level' warning on Ruby 2.7;
  - Fix 'last arg as keyword arg' Ruby 2.7 warning on source code;
  - Disable 'deprecated' warnings from Ruby 2.7; Rails 5.1 generates a lot of
    warnings with Ruby 2.7, mainly due to 'capturing the given block with
    Proc.new', which is deprecated;
  - Improve RPM spec to consider only the distribution default Ruby version
    configured in OBS;
  - Improve RPM spec to remove Ruby 2.7 warnings regarding 'bundler.

- Move nginx/vhosts.d directory to correct sub-package. They
  are needed together with nginx, not rmt-server.
- Fix dependencies especially for containerized usage:
  - mariadb and nginx are not hard requires, could run on another host
- Fix generic dependencies:
  - systemd ordering was missing
  - shadow is required for pre-install

- Version 2.5.9
- rmt-server-pubcloud: enforce strict authentication

- Version 2.5.8
- Use repomd_parser gem to remove repository metadata parsing code.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172177">SUSE bug 1172177</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172182">SUSE bug 1172182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172184">SUSE bug 1172184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172186">SUSE bug 1172186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173351">SUSE bug 1173351</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-16770/">CVE-2019-16770</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5418/">CVE-2019-5418</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5419/">CVE-2019-5419</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5420/">CVE-2019-5420</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-11076/">CVE-2020-11076</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-11077/">CVE-2020-11077</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15169/">CVE-2020-15169</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-5247/">CVE-2020-5247</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-5249/">CVE-2020-5249</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-5267/">CVE-2020-5267</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8164/">CVE-2020-8164</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8165/">CVE-2020-8165</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8166/">CVE-2020-8166</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8167/">CVE-2020-8167</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-8184/">CVE-2020-8184</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8185/">CVE-2020-8185</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498079" comment="rmt-server-pubcloud-2.6.5-3.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138866" version="1" class="patch">
	<metadata>
		<title>Security update for terraform (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1158440" ref_url="https://bugzilla.suse.com/1158440" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19316" ref_url="https://www.suse.com/security/cve/CVE-2019-19316/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006450.html" source="SUSE-SU"/>
		<description>
This update for terraform to version 0.12.19 fixes the following issues:

- CVE-2019-19316: Fixed an information leak where SAS token could be transfered in cleartext (bsc#1158440).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-04"/>
	<updated date="2020-02-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1158440">SUSE bug 1158440</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-19316/">CVE-2019-19316</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498080" comment="terraform-0.12.19-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138867" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1055014" ref_url="https://bugzilla.suse.com/1055014" source="BUGZILLA"/>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1061843" ref_url="https://bugzilla.suse.com/1061843" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066382" ref_url="https://bugzilla.suse.com/1066382" source="BUGZILLA"/>
		<reference ref_id="1077428" ref_url="https://bugzilla.suse.com/1077428" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1131277" ref_url="https://bugzilla.suse.com/1131277" source="BUGZILLA"/>
		<reference ref_id="1134760" ref_url="https://bugzilla.suse.com/1134760" source="BUGZILLA"/>
		<reference ref_id="1140683" ref_url="https://bugzilla.suse.com/1140683" source="BUGZILLA"/>
		<reference ref_id="1163592" ref_url="https://bugzilla.suse.com/1163592" source="BUGZILLA"/>
		<reference ref_id="1167030" ref_url="https://bugzilla.suse.com/1167030" source="BUGZILLA"/>
		<reference ref_id="1168468" ref_url="https://bugzilla.suse.com/1168468" source="BUGZILLA"/>
		<reference ref_id="1170415" ref_url="https://bugzilla.suse.com/1170415" source="BUGZILLA"/>
		<reference ref_id="1170446" ref_url="https://bugzilla.suse.com/1170446" source="BUGZILLA"/>
		<reference ref_id="1170630" ref_url="https://bugzilla.suse.com/1170630" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1171675" ref_url="https://bugzilla.suse.com/1171675" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1172873" ref_url="https://bugzilla.suse.com/1172873" source="BUGZILLA"/>
		<reference ref_id="1173432" ref_url="https://bugzilla.suse.com/1173432" source="BUGZILLA"/>
		<reference ref_id="1174748" ref_url="https://bugzilla.suse.com/1174748" source="BUGZILLA"/>
		<reference ref_id="1175306" ref_url="https://bugzilla.suse.com/1175306" source="BUGZILLA"/>
		<reference ref_id="1175520" ref_url="https://bugzilla.suse.com/1175520" source="BUGZILLA"/>
		<reference ref_id="1175721" ref_url="https://bugzilla.suse.com/1175721" source="BUGZILLA"/>
		<reference ref_id="1176354" ref_url="https://bugzilla.suse.com/1176354" source="BUGZILLA"/>
		<reference ref_id="1176381" ref_url="https://bugzilla.suse.com/1176381" source="BUGZILLA"/>
		<reference ref_id="1176382" ref_url="https://bugzilla.suse.com/1176382" source="BUGZILLA"/>
		<reference ref_id="1176400" ref_url="https://bugzilla.suse.com/1176400" source="BUGZILLA"/>
		<reference ref_id="1176485" ref_url="https://bugzilla.suse.com/1176485" source="BUGZILLA"/>
		<reference ref_id="1176560" ref_url="https://bugzilla.suse.com/1176560" source="BUGZILLA"/>
		<reference ref_id="1176713" ref_url="https://bugzilla.suse.com/1176713" source="BUGZILLA"/>
		<reference ref_id="1176723" ref_url="https://bugzilla.suse.com/1176723" source="BUGZILLA"/>
		<reference ref_id="1176855" ref_url="https://bugzilla.suse.com/1176855" source="BUGZILLA"/>
		<reference ref_id="1176907" ref_url="https://bugzilla.suse.com/1176907" source="BUGZILLA"/>
		<reference ref_id="1176946" ref_url="https://bugzilla.suse.com/1176946" source="BUGZILLA"/>
		<reference ref_id="1176983" ref_url="https://bugzilla.suse.com/1176983" source="BUGZILLA"/>
		<reference ref_id="1177027" ref_url="https://bugzilla.suse.com/1177027" source="BUGZILLA"/>
		<reference ref_id="1177086" ref_url="https://bugzilla.suse.com/1177086" source="BUGZILLA"/>
		<reference ref_id="1177101" ref_url="https://bugzilla.suse.com/1177101" source="BUGZILLA"/>
		<reference ref_id="1177258" ref_url="https://bugzilla.suse.com/1177258" source="BUGZILLA"/>
		<reference ref_id="1177271" ref_url="https://bugzilla.suse.com/1177271" source="BUGZILLA"/>
		<reference ref_id="1177281" ref_url="https://bugzilla.suse.com/1177281" source="BUGZILLA"/>
		<reference ref_id="1177340" ref_url="https://bugzilla.suse.com/1177340" source="BUGZILLA"/>
		<reference ref_id="1177410" ref_url="https://bugzilla.suse.com/1177410" source="BUGZILLA"/>
		<reference ref_id="1177411" ref_url="https://bugzilla.suse.com/1177411" source="BUGZILLA"/>
		<reference ref_id="1177470" ref_url="https://bugzilla.suse.com/1177470" source="BUGZILLA"/>
		<reference ref_id="1177511" ref_url="https://bugzilla.suse.com/1177511" source="BUGZILLA"/>
		<reference ref_id="1177513" ref_url="https://bugzilla.suse.com/1177513" source="BUGZILLA"/>
		<reference ref_id="1177685" ref_url="https://bugzilla.suse.com/1177685" source="BUGZILLA"/>
		<reference ref_id="1177687" ref_url="https://bugzilla.suse.com/1177687" source="BUGZILLA"/>
		<reference ref_id="1177703" ref_url="https://bugzilla.suse.com/1177703" source="BUGZILLA"/>
		<reference ref_id="1177719" ref_url="https://bugzilla.suse.com/1177719" source="BUGZILLA"/>
		<reference ref_id="1177724" ref_url="https://bugzilla.suse.com/1177724" source="BUGZILLA"/>
		<reference ref_id="1177725" ref_url="https://bugzilla.suse.com/1177725" source="BUGZILLA"/>
		<reference ref_id="1177740" ref_url="https://bugzilla.suse.com/1177740" source="BUGZILLA"/>
		<reference ref_id="1177749" ref_url="https://bugzilla.suse.com/1177749" source="BUGZILLA"/>
		<reference ref_id="1177750" ref_url="https://bugzilla.suse.com/1177750" source="BUGZILLA"/>
		<reference ref_id="1177753" ref_url="https://bugzilla.suse.com/1177753" source="BUGZILLA"/>
		<reference ref_id="1177754" ref_url="https://bugzilla.suse.com/1177754" source="BUGZILLA"/>
		<reference ref_id="1177755" ref_url="https://bugzilla.suse.com/1177755" source="BUGZILLA"/>
		<reference ref_id="1177766" ref_url="https://bugzilla.suse.com/1177766" source="BUGZILLA"/>
		<reference ref_id="1177819" ref_url="https://bugzilla.suse.com/1177819" source="BUGZILLA"/>
		<reference ref_id="1177820" ref_url="https://bugzilla.suse.com/1177820" source="BUGZILLA"/>
		<reference ref_id="1177855" ref_url="https://bugzilla.suse.com/1177855" source="BUGZILLA"/>
		<reference ref_id="1177856" ref_url="https://bugzilla.suse.com/1177856" source="BUGZILLA"/>
		<reference ref_id="1177861" ref_url="https://bugzilla.suse.com/1177861" source="BUGZILLA"/>
		<reference ref_id="1178003" ref_url="https://bugzilla.suse.com/1178003" source="BUGZILLA"/>
		<reference ref_id="1178027" ref_url="https://bugzilla.suse.com/1178027" source="BUGZILLA"/>
		<reference ref_id="1178123" ref_url="https://bugzilla.suse.com/1178123" source="BUGZILLA"/>
		<reference ref_id="1178166" ref_url="https://bugzilla.suse.com/1178166" source="BUGZILLA"/>
		<reference ref_id="1178182" ref_url="https://bugzilla.suse.com/1178182" source="BUGZILLA"/>
		<reference ref_id="1178185" ref_url="https://bugzilla.suse.com/1178185" source="BUGZILLA"/>
		<reference ref_id="1178187" ref_url="https://bugzilla.suse.com/1178187" source="BUGZILLA"/>
		<reference ref_id="1178188" ref_url="https://bugzilla.suse.com/1178188" source="BUGZILLA"/>
		<reference ref_id="1178202" ref_url="https://bugzilla.suse.com/1178202" source="BUGZILLA"/>
		<reference ref_id="1178234" ref_url="https://bugzilla.suse.com/1178234" source="BUGZILLA"/>
		<reference ref_id="1178330" ref_url="https://bugzilla.suse.com/1178330" source="BUGZILLA"/>
		<reference ref_id="1178393" ref_url="https://bugzilla.suse.com/1178393" source="BUGZILLA"/>
		<reference ref_id="1178589" ref_url="https://bugzilla.suse.com/1178589" source="BUGZILLA"/>
		<reference ref_id="1178591" ref_url="https://bugzilla.suse.com/1178591" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178686" ref_url="https://bugzilla.suse.com/1178686" source="BUGZILLA"/>
		<reference ref_id="1178700" ref_url="https://bugzilla.suse.com/1178700" source="BUGZILLA"/>
		<reference ref_id="1178765" ref_url="https://bugzilla.suse.com/1178765" source="BUGZILLA"/>
		<reference ref_id="1178782" ref_url="https://bugzilla.suse.com/1178782" source="BUGZILLA"/>
		<reference ref_id="1178838" ref_url="https://bugzilla.suse.com/1178838" source="BUGZILLA"/>
		<reference ref_id="1178878" ref_url="https://bugzilla.suse.com/1178878" source="BUGZILLA"/>
		<reference ref_id="927455" ref_url="https://bugzilla.suse.com/927455" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0430" ref_url="https://www.suse.com/security/cve/CVE-2020-0430/" source="CVE"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-12352" ref_url="https://www.suse.com/security/cve/CVE-2020-12352/" source="CVE"/>
		<reference ref_id="CVE-2020-14351" ref_url="https://www.suse.com/security/cve/CVE-2020-14351/" source="CVE"/>
		<reference ref_id="CVE-2020-16120" ref_url="https://www.suse.com/security/cve/CVE-2020-16120/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="CVE-2020-25285" ref_url="https://www.suse.com/security/cve/CVE-2020-25285/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="CVE-2020-25656" ref_url="https://www.suse.com/security/cve/CVE-2020-25656/" source="CVE"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25669" ref_url="https://www.suse.com/security/cve/CVE-2020-25669/" source="CVE"/>
		<reference ref_id="CVE-2020-25704" ref_url="https://www.suse.com/security/cve/CVE-2020-25704/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007841.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bug fixes.


The following security bugs were fixed:

- CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software and services that rely on UDP source port randomization (like DNS) are indirectly affected as well. Kernel versions may be vulnerable to this issue (bsc#1175721, bsc#1178782).
- CVE-2020-8694: Insufficient access control for some Intel(R) Processors may have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1170415).
- CVE-2020-25668: Fixed a use-after-free in con_font_op() (bsc#1178123).
- CVE-2020-25704: Fixed a memory leak in perf_event_parse_addr_filter() (bsc#1178393).
- CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182).
- CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766).
- CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485).
- CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723).
- CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086).
- CVE-2020-16120: Fixed a permissions issue in ovl_path_open() (bsc#1177470).
- CVE-2020-12351: Implemented a kABI workaround for bluetooth l2cap_ops filter addition (bsc#1177724).
- CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' (bsc#1177725).
- CVE-2020-25212: Fixed a TOCTOU mismatch in the NFS client code (bnc#1176381).
- CVE-2020-25645: Fixed an an issue in IPsec that caused traffic between two Geneve endpoints to be unencrypted (bnc#1177511).

The following non-security bugs were fixed:

- 9P: Cast to loff_t before multiplying (git-fixes).
- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (git-fixes).
- ACPI: debug: do not allow debugging when ACPI is disabled (git-fixes).
- ACPI: dock: fix enum-conversion warning (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- ALSA: bebob: potential info leak in hwdep_read() (git-fixes).
- ALSA: compress_offload: remove redundant initialization (git-fixes).
- ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).
- ALSA: core: pcm: simplify locking for timers (git-fixes).
- ALSA: core: timer: clarify operator precedence (git-fixes).
- ALSA: core: timer: remove redundant assignment (git-fixes).
- ALSA: ctl: Workaround for lockdep warning wrt card-&gt;ctl_files_rwlock (git-fixes).
- ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes).
- ALSA: hda - Do not register a cb func if it is registered already (git-fixes).
- ALSA: hda - Fix the return value if cb func is already registered (git-fixes).
- ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes).
- ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes).
- ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes).
- ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes).
- ALSA: hda: use semicolons rather than commas to separate statements (git-fixes).
- ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes).
- ALSA: rawmidi: (cosmetic) align function parameters (git-fixes).
- ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes).
- ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes).
- ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes).
- ALSA: usb-audio: fix spelling mistake 'Frequence' -&gt; 'Frequency' (git-fixes).
- amd-xgbe: Add a check for an skb in the timestamp path (git-fixes).
- amd-xgbe: Add additional dynamic debug messages (git-fixes).
- amd-xgbe: Add additional ethtool statistics (git-fixes).
- amd-xgbe: Add ethtool show/set channels support (git-fixes).
- amd-xgbe: Add ethtool show/set ring parameter support (git-fixes).
- amd-xgbe: Add ethtool support to retrieve SFP module info (git-fixes).
- amd-xgbe: Add hardware features debug output (git-fixes).
- amd-xgbe: Add NUMA affinity support for IRQ hints (git-fixes).
- amd-xgbe: Add NUMA affinity support for memory allocations (git-fixes).
- amd-xgbe: Add per queue Tx and Rx statistics (git-fixes).
- amd-xgbe: Advertise FEC support with the KR re-driver (git-fixes).
- amd-xgbe: Always attempt link training in KR mode (git-fixes).
- amd-xgbe: Be sure driver shuts down cleanly on module removal (git-fixes).
- amd-xgbe: Convert to generic power management (git-fixes).
- amd-xgbe: Fix debug output of max channel counts (git-fixes).
- amd-xgbe: Fix error path in xgbe_mod_init() (git-fixes).
- amd-xgbe: Fixes for working with PHYs that support 2.5GbE (git-fixes).
- amd-xgbe: Fix SFP PHY supported/advertised settings (git-fixes).
- amd-xgbe: fix spelling mistake: 'avialable' -&gt; 'available' (git-fixes).
- amd-xgbe: Handle return code from software reset function (git-fixes).
- amd-xgbe: Improve SFP 100Mbps auto-negotiation (git-fixes).
- amd-xgbe: Interrupt summary bits are h/w version dependent (git-fixes).
- amd-xgbe: Limit the I2C error messages that are output (git-fixes).
- amd-xgbe: Mark expected switch fall-throughs (git-fixes).
- amd-xgbe: Optimize DMA channel interrupt enablement (git-fixes).
- amd-xgbe: Prepare for ethtool set-channel support (git-fixes).
- amd-xgbe: Read and save the port property registers during probe (git-fixes).
- amd-xgbe: Remove field that indicates SFP diagnostic support (git-fixes).
- amd-xgbe: remove unnecessary conversion to bool (git-fixes).
- amd-xgbe: Remove use of comm_owned field (git-fixes).
- amd-xgbe: Set the MDIO mode for 10000Base-T configuration (git-fixes).
- amd-xgbe: Simplify the burst length settings (git-fixes).
- amd-xgbe: use devm_platform_ioremap_resource() to simplify code (git-fixes).
- amd-xgbe: use dma_mapping_error to check map errors (git-fixes).
- amd-xgbe: Use __napi_schedule() in BH context (git-fixes).
- amd-xgbe: Use the proper register during PTP initialization (git-fixes).
- ASoC: qcom: lpass-cpu: fix concurrency issue (git-fixes).
- ASoC: qcom: lpass-platform: fix memory leak (git-fixes).
- ata: sata_rcar: Fix DMA boundary mask (git-fixes).
- ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() (git-fixes).
- ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled (git-fixes).
- ath10k: provide survey info as accumulated data (git-fixes).
- ath10k: start recovery process when payload length exceeds max htc length for sdio (git-fixes).
- ath6kl: prevent potential array overflow in ath6kl_add_new_sta() (git-fixes).
- ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() (git-fixes).
- ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() (git-fixes).
- backlight: sky81452-backlight: Fix refcount imbalance on error (git-fixes).
- blk-mq: order adding requests to hctx-&gt;dispatch and checking SCHED_RESTART (bsc#1177750).
- block: ensure bdi-&gt;io_pages is always initialized (bsc#1177749).
- Bluetooth: MGMT: Fix not checking if BT_HS is enabled (git-fixes).
- Bluetooth: Only mark socket zapped after unlocking (git-fixes).
- bnxt: do not enable NAPI until rings are ready (networking-stable-20_09_11).
- bnxt_en: Check for zero dir entries in NVRAM (networking-stable-20_09_11).
- bpf: Zero-fill re-used per-cpu map element (git-fixes).
- brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach (git-fixes).
- brcmfmac: check ndev pointer (git-fixes).
- brcmsmac: fix memory leak in wlc_phy_attach_lcnphy (git-fixes).
- btrfs: check the right error variable in btrfs_del_dir_entries_in_log (bsc#1177687).
- btrfs: do not force read-only after error in drop snapshot (bsc#1176354).
- btrfs: do not set the full sync flag on the inode during page release (bsc#1177687).
- btrfs: fix incorrect updating of log root tree (bsc#1177687).
- btrfs: fix race between page release and a fast fsync (bsc#1177687).
- btrfs: only commit delayed items at fsync if we are logging a directory (bsc#1177687).
- btrfs: only commit the delayed inode when doing a full fsync (bsc#1177687).
- btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations (bsc#1177856).
- btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode (bsc#1177855).
- btrfs: reduce contention on log trees when logging checksums (bsc#1177687).
- btrfs: release old extent maps during page release (bsc#1177687).
- btrfs: remove no longer needed use of log_writers for the log root tree (bsc#1177687).
- btrfs: remove root usage from can_overcommit (bsc#1131277).
- btrfs: stop incremening log_batch for the log root tree when syncing log (bsc#1177687).
- btrfs: take overcommit into account in inc_block_group_ro (bsc#1176560).
- btrfs: tree-checker: fix false alert caused by legacy btrfs root item (bsc#1177861).
- bus/fsl_mc: Do not rely on caller to provide non NULL mc_io (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() (git-fixes).
- can: c_can: reg_map_{c,d}_can: mark as __maybe_unused (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (git-fixes).
- can: flexcan: flexcan_chip_stop(): add error handling and propagate error value (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on (git-fixes).
- can: peak_usb: add range checking in decode operations (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping (git-fixes).
- can: rx-offload: do not call kfree_skb() from IRQ context (git-fixes).
- can: softing: softing_card_shutdown(): add braces around empty body in an 'if' statement (git-fixes).
- ceph: fix memory leak in ceph_cleanup_snapid_map() (bsc#1178234).
- ceph: map snapid to anonymous bdev ID (bsc#1178234).
- ceph: promote to unsigned long long before shifting (bsc#1178187).
- clk: at91: clk-main: update key before writing AT91_CKGR_MOR (git-fixes).
- clk: at91: remove the checking of parent_name (git-fixes).
- clk: bcm2835: add missing release if devm_clk_hw_register fails (git-fixes).
- clk: imx8mq: Fix usdhc parents order (git-fixes).
- clk: ti: clockdomain: fix static checker warning (git-fixes).
- coredump: fix crash when umh is disabled (bsc#1177753).
- crypto: algif_skcipher - EBUSY on aio should be an error (git-fixes).
- crypto: bcm - Verify GCM/CCM key length in setkey (git-fixes).
- crypto: ccp - fix error handling (git-fixes).
- crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call (git-fixes).
- crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() (git-fixes).
- crypto: omap-sham - fix digcnt register handling with export/import (git-fixes).
- cxl: Rework error message for incompatible slots (bsc#1055014 git-fixes).
- cypto: mediatek - fix leaks in mtk_desc_ring_alloc (git-fixes).
- device property: Do not clear secondary pointer for shared primary firmware node (git-fixes).
- device property: Keep secondary firmware node secondary by type (git-fixes).
- Disable ipa-clones dump for KMP builds (bsc#1178330) The feature is not really useful for KMP, and rather confusing, so let's disable it at building out-of-tree codes
- dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status (git-fixes).
- docs: ABI: sysfs-c2port: remove a duplicated entry (git-fixes).
- drbd: code cleanup by using sendpage_ok() to check page for kernel_sendpage() (bsc#1172873).
- drivers: net: add missing interrupt.h include (git-fixes).
- drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case (git-fixes).
- drm/amd/display: Do not invoke kgdb_breakpoint() unconditionally (git-fixes).
- drm/amd/display: HDMI remote sink need mode validation for Linux (git-fixes).
- drm/amdgpu: do not map BO in reserved region (git-fixes).
- drm/amdgpu: prevent double kfree ttm-&gt;sg (git-fixes).
- drm/bridge/synopsys: dsi: add support for non-continuous HS clock (git-fixes).
- drm/brige/megachips: Add checking if ge_b850v3_lvds_init() is working correctly (git-fixes).
- drm/gma500: fix error check (git-fixes).
- drm/i915: Break up error capture compression loops with cond_resched() (git-fixes).
- drm/i915: Force VT'd workarounds when running as a guest OS (git-fixes).
- drm/imx: tve remove extraneous type qualifier (git-fixes).
- drm/msm: Drop debug print in _dpu_crtc_setup_lm_bounds() (git-fixes).
- drm/nouveau/mem: guard against NULL pointer access in mem_del (git-fixes).
- drm/sun4i: mixer: Extend regmap max_register (git-fixes).
- drm/ttm: fix eviction valuable range check (git-fixes).
- drm/vc4: drv: Add error handding for bind (git-fixes).
- Drop sysctl files for dropped archs, add ppc64le and arm64 (bsc#1178838).
- ea43d9709f72 ('nvme: fix identify error status silent ignore')
- EDAC/i5100: Fix error handling order in i5100_init_one() (bsc#1112178).
- eeprom: at25: set minimum read/write access stride to 1 (git-fixes).
- efivarfs: Replace invalid slashes with exclamation marks in dentries (git-fixes).
- Fix use after free in get_capset_info callback (git-fixes).
- ftrace: Fix recursion check for NMI test (git-fixes).
- ftrace: Handle tracing when switching between context (git-fixes).
- gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY (networking-stable-20_08_24).
- gtp: add GTPA_LINK info to msg sent to userspace (networking-stable-20_09_11).
- HID: roccat: add bounds checking in kone_sysfs_write_settings() (git-fixes).
- HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery (git-fixes).
- hv_netvsc: Add XDP support (bsc#1177819, bsc#1177820).
- hv_netvsc: deal with bpf API differences in 4.12 (bsc#1177819, bsc#1177820).
- hv_netvsc: Fix XDP refcnt for synthetic and VF NICs (bsc#1177819, bsc#1177820).
- hyperv_fb: Update screen_info after removing old framebuffer (bsc#1175306).
- i2c: imx: Fix external abort on interrupt in exit paths (git-fixes).
- i2c: meson: fix clock setting overwrite (git-fixes).
- ibmveth: Identify ingress large send packets (bsc#1178185 ltc#188897).
- ibmveth: Switch order of ibmveth_helper calls (bsc#1061843 git-fixes).
- ibmvnic: fix ibmvnic_set_mac (bsc#1066382 ltc#160943 git-fixes).
- ibmvnic: save changed mac address to adapter-&gt;mac_addr (bsc#1134760 ltc#177449 git-fixes).
- icmp: randomize the global rate limiter (git-fixes).
- iio:accel:bma180: Fix use of true when should be iio_shared_by enum (git-fixes).
- iio:adc:max1118 Fix alignment of timestamp and data leak issues (git-fixes).
- iio:adc:ti-adc0832 Fix alignment issue with timestamp (git-fixes).
- iio:adc:ti-adc12138 Fix alignment issue with timestamp (git-fixes).
- iio:dac:ad5592r: Fix use of true for IIO_SHARED_BY_TYPE (git-fixes).
- iio:gyro:itg3200: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:light:si1145: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:magn:hmc5843: Fix passing true where iio_shared_by enum required (git-fixes).
- ima: Remove semicolon at the end of ima_get_binary_runtime_size() (git-fixes).
- include/linux/swapops.h: correct guards for non_swap_entry() (git-fixes (mm/swap)).
- Input: adxl34x - clean up a data type in adxl34x_probe() (git-fixes).
- Input: ep93xx_keypad - fix handling of platform_get_irq() error (git-fixes).
- Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 (git-fixes).
- Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() (git-fixes).
- Input: omap4-keypad - fix handling of platform_get_irq() error (git-fixes).
- Input: sun4i-ps2 - fix handling of platform_get_irq() error (git-fixes).
- Input: twl4030_keypad - fix handling of platform_get_irq() error (git-fixes).
- iomap: Make sure iomap_end is called after iomap_begin (bsc#1177754).
- iommu/vt-d: Correctly calculate agaw in domain_init() (bsc#1176400).
- ip: fix tos reflection in ack and reset packets (networking-stable-20_09_24).
- ipv4: Restore flowi4_oif update before call to xfrm_lookup_route (git-fixes).
- iwlwifi: mvm: split a print to avoid a WARNING in ROC (git-fixes).
- kbuild: enforce -Werror=return-type (bsc#1177281).
- kernel-binary.spec.in: Package the obj_install_dir as explicit filelist.
- kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function (git-fixes).
- leds: mt6323: move period calculation (git-fixes).
- libceph: clear con-&gt;out_msg on Policy::stateful_server faults (bsc#1178188).
- libceph: use sendpage_ok() in ceph_tcp_sendpage() (bsc#1172873).
- lib/crc32.c: fix trivial typo in preprocessor condition (git-fixes).
- livepatch: Test if -fdump-ipa-clones is really available 
- mac80211: do not allow bigger VHT MPDUs than the hardware supports (git-fixes).
- mac80211: handle lack of sband-&gt;bitrates in rates (git-fixes).
- macsec: avoid use-after-free in macsec_handle_frame() (git-fixes).
- mailbox: avoid timer start from callback (git-fixes).
- media: ati_remote: sanity check for both endpoints (git-fixes).
- media: bdisp: Fix runtime PM imbalance on error (git-fixes).
- media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync (git-fixes).
- media: exynos4-is: Fix a reference count leak (git-fixes).
- media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync (git-fixes).
- media: firewire: fix memory leak (git-fixes).
- media: m5mols: Check function pointer in m5mols_sensor_power (git-fixes).
- media: media/pci: prevent memory leak in bttv_probe (git-fixes).
- media: omap3isp: Fix memleak in isp_probe (git-fixes).
- media: platform: fcp: Fix a reference count leak (git-fixes).
- media: platform: Improve queue set up flow for bug fixing (git-fixes).
- media: platform: s3c-camif: Fix runtime PM imbalance on error (git-fixes).
- media: platform: sti: hva: Fix runtime PM imbalance on error (git-fixes).
- media: Revert 'media: exynos4-is: Add missed check for pinctrl_lookup_state()' (git-fixes).
- media: s5p-mfc: Fix a reference count leak (git-fixes).
- media: saa7134: avoid a shift overflow (git-fixes).
- media: st-delta: Fix reference count leak in delta_run_work (git-fixes).
- media: sti: Fix reference count leaks (git-fixes).
- media: tc358743: initialize variable (git-fixes).
- media: ti-vpe: Fix a missing check and reference count leak (git-fixes).
- media: tuner-simple: fix regression in simple_set_radio_freq (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get (git-fixes).
- media: usbtv: Fix refcounting mixup (git-fixes).
- media: uvcvideo: Ensure all probed info is returned to v4l2 (git-fixes).
- media: vsp1: Fix runtime PM imbalance on error (git-fixes).
- memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event (bsc#1177703).
- memory: fsl-corenet-cf: Fix handling of platform_get_irq() error (git-fixes).
- memory: omap-gpmc: Fix a couple off by ones (git-fixes).
- mfd: sm501: Fix leaks in probe() (git-fixes).
- mic: vop: copy data to kernel space then write to io memory (git-fixes).
- misc: mic: scif: Fix error handling path (git-fixes).
- misc: rtsx: Fix memory leak in rtsx_pci_probe (git-fixes).
- misc: vop: add round_up(x,4) for vring_size to avoid kernel panic (git-fixes).
- mlx5 PPC ringsize workaround (bsc#1173432).
- mlx5: remove support for ib_get_vector_affinity (bsc#1174748).
- mmc: core: do not set limits.discard_granularity as 0 (git-fixes).
- mmc: sdhci-of-esdhc: Handle pulse width detection erratum for more SoCs (git-fixes).
- mmc: sdhci-of-esdhc: set timeout to max before tuning (git-fixes).
- mmc: sdio: Check for CISTPL_VERS_1 buffer size (git-fixes).
- mm/huge_memory.c: use head to check huge zero page (git-fixes (mm/thp)).
- mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() (git-fixes (mm/hugetlb)).
- mm/ksm.c: do not WARN if page is still mapped in remove_stable_node() (git-fixes (mm/hugetlb)).
- mm/memcg: fix refcount error while moving and swapping (bsc#1178686).
- mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() (bsc#1177685).
- mm/mempolicy.c: fix out of bounds write in mpol_parse_str() (git-fixes (mm/mempolicy)).
- mm/mempolicy.c: use match_string() helper to simplify the code (git-fixes (mm/mempolicy)).
- mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa (git-fixes (mm/numa)).
- mm/page_owner.c: remove drain_all_pages from init_early_allocated_pages (git-fixes (mm/debug)).
- mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() (git-fixes (mm/writeback)).
- mm/page-writeback.c: improve arithmetic divisions (git-fixes (mm/writeback)).
- mm/page-writeback.c: use div64_ul() for u64-by-unsigned-long divide (git-fixes (mm/writeback)).
- mm/rmap: fixup copying of soft dirty and uffd ptes (git-fixes (mm/rmap)).
- mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: fix race condition in zs_destroy_pool (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: fix the migrated zspage statistics (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely (git-fixes (mm/zsmalloc)).
- Move the upstreamed bluetooth fix into sorted section
- Move the upstreamed powercap fix into sorted sectio
- mtd: lpddr: Fix bad logic in print_drs_error (git-fixes).
- mtd: lpddr: fix excessive stack usage with clang (git-fixes).
- mtd: mtdoops: Do not write panic data twice (git-fixes).
- mwifiex: do not call del_timer_sync() on uninitialized timer (git-fixes).
- mwifiex: Do not use GFP_KERNEL in atomic context (git-fixes).
- mwifiex: fix double free (git-fixes).
- mwifiex: remove function pointer check (git-fixes).
- mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO (git-fixes).
- net: 8390: Fix manufacturer name in Kconfig help text (git-fixes).
- net: add WARN_ONCE in kernel_sendpage() for improper zero-copy send (bsc#1172873).
- net: amd: fix return type of ndo_start_xmit function (git-fixes).
- net/amd: Remove useless driver version (git-fixes).
- net: amd-xgbe: fix comparison to bitshift when dealing with a mask (git-fixes).
- net: amd-xgbe: Get rid of custom hex_dump_to_buffer() (git-fixes).
- net: apple: Fix manufacturer name in Kconfig help text (git-fixes).
- net: broadcom: Fix manufacturer name in Kconfig help text (git-fixes).
- net: disable netpoll on fresh napis (networking-stable-20_09_11).
- net: fec: Fix phy_device lookup for phy_reset_after_clk_enable() (git-fixes).
- net: fec: Fix PHY init after phy_reset_after_clk_enable() (git-fixes).
- netfilter: nat: can't use dst_hold on noref dst (bsc#1178878).
- net: Fix potential wrong skb-&gt;protocol in skb_vlan_untag() (networking-stable-20_08_24).
- net: hns: Fix memleak in hns_nic_dev_probe (networking-stable-20_09_11).
- net: introduce helper sendpage_ok() in include/linux/net.h (bsc#1172873).
- net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC (networking-stable-20_09_24).
- netlabel: fix problems with mapping removal (networking-stable-20_09_11).
- net/mlx5e: Take common TIR context settings into a function (bsc#1177740).
- net/mlx5e: Turn on HW tunnel offload in all TIRs (bsc#1177740).
- net: mvmdio: defer probe of orion-mdio if a clock is not ready (git-fixes).
- net: phy: Avoid NPD upon phy_detach() when driver is unbound (networking-stable-20_09_24).
- net: qrtr: fix usage of idr in port assignment to socket (networking-stable-20_08_24).
- net: systemport: Fix memleak in bcm_sysport_probe (networking-stable-20_09_11).
- net: tc35815: Explicitly check NET_IP_ALIGN is not zero in tc35815_rx (git-fixes).
- net: usb: dm9601: Add USB ID of Keenetic Plus DSL (networking-stable-20_09_11).
- net: usb: qmi_wwan: add Cellient MPL200 card (git-fixes).
- net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition (git-fixes).
- net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails (git-fixes).
- net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key() (git-fixes).
- nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() (git-fixes).
- NFS: On fatal writeback errors, we need to call nfs_inode_remove_request() (bsc#1177340).
- NFS: Revalidate the file mapping on all fatal writeback errors (bsc#1177340).
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (bsc#1170630).
- nl80211: fix non-split wiphy information (git-fixes).
- NTB: hw: amd: fix an issue about leak system resources (git-fixes).
- nvme: 59c7c3caaaf8 ('fix possible hang when ns scanning fails during error recovery')
- nvme: add a Identify Namespace Identification Descriptor list quirk (bsc#1174748).
- nvme: do not update disk info for multipathed device (bsc#1171558). 
- nvme: Fix ctrl use-after-free during sysfs deletion (bsc#1174748).
- nvme: fix deadlock caused by ANA update wrong locking (bsc#1174748).
- nvme: fix possible io failures when removing multipathed ns (bsc#1174748).
- nvme: make nvme_identify_ns propagate errors back (bsc#1174748).
- nvme: make nvme_report_ns_ids propagate error back (bsc#1174748).
- nvme-multipath: do not reset on unknown status (bsc#1174748).
- nvme: Namepace identification descriptor list is optional (bsc#1174748).
- nvme: pass status to nvme_error_status (bsc#1174748).
- nvme-rdma: Avoid double freeing of async event data (bsc#1174748).
- nvme-rdma: fix crash due to incorrect cqe (bsc#1174748).
- nvme-rdma: fix crash when connect rejected (bsc#1174748).
- nvme: return error from nvme_alloc_ns() (bsc#1174748).
- nvme-tcp: check page by sendpage_ok() before calling kernel_sendpage() (bsc#1172873).
- p54: avoid accessing the data mapped to streaming DMA (git-fixes).
- pinctrl: intel: Set default bias in case no particular value given (git-fixes).
- platform/x86: fix kconfig dependency warning for FUJITSU_LAPTOP (git-fixes).
- platform/x86: mlx-platform: Remove PSU EEPROM configuration (git-fixes).
- platform/x86: thinkpad_acpi: initialize tp_nvram_state variable (git-fixes).
- platform/x86: thinkpad_acpi: re-initialize ACPI buffer size when reuse (git-fixes).
- powerpc/dma: Fix dma_map_ops::get_required_mask (bsc#1065729).
- powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation (bsc#1065729).
- powerpc/hwirq: Remove stale forward irq_chip declaration (bsc#1065729).
- powerpc/icp-hv: Fix missing of_node_put() in success path (bsc#1065729).
- powerpc/irq: Drop forward declaration of struct irqaction (bsc#1065729).
- powerpc/perf/hv-gpci: Fix starting index value (bsc#1065729).
- powerpc/powernv/dump: Fix race while processing OPAL dump (bsc#1065729).
- powerpc/powernv/elog: Fix race while processing OPAL error log event (bsc#1065729).
- powerpc/pseries/cpuidle: add polling idle for shared processor guests (bsc#1178765 ltc#188968).
- powerpc/pseries: explicitly reschedule during drmem_lmb list traversal (bsc#1077428 ltc#163882 git-fixes).
- powerpc/pseries: Fix missing of_node_put() in rng_init() (bsc#1065729).
- powerpc/vnic: Extend 'failover pending' window (bsc#1176855 ltc#187293).
- powerpc/vnic: Extend 'failover pending' window (bsc#1176855 ltc#187293).
- power: supply: test_power: add missing newlines when printing parameters by sysfs (git-fixes).
- pty: do tty_flip_buffer_push without port-&gt;lock in pty_write (git-fixes).
- pwm: lpss: Add range limit check for the base_unit register value (git-fixes).
- pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare() (git-fixes).
- regulator: defer probe when trying to get voltage from unresolved supply (git-fixes).
- regulator: resolve supply after creating regulator (git-fixes).
- Revert 'cdc-acm: hardening against malicious devices' (git-fixes).
- ring-buffer: Fix recursion protection transitions between interrupt context (git-fixes).
- ring-buffer: Return 0 on success from ring_buffer_resize() (git-fixes).
- rpm/kernel-binary.spec.in: Fix compressed module handling for in-tree KMP (jsc#SLE-10886)
- rpm/kernel-module-subpackage: make Group tag optional (bsc#1163592)
- rtl8xxxu: prevent potential memory leak (git-fixes).
- scsi: fnic: Do not call 'scsi_done()' for unhandled commands (bsc#1168468, bsc#1171675).
- scsi: hisi_sas: Add debugfs ITCT file and add file operations (bsc#1140683).
- scsi: hisi_sas: Add manual trigger for debugfs dump (bsc#1140683).
- scsi: hisi_sas: Add missing seq_printf() call in hisi_sas_show_row_32() (bsc#1140683).
- scsi: hisi_sas: Change return variable type in phy_up_v3_hw() (bsc#1140683).
- scsi: hisi_sas: Correct memory allocation size for DQ debugfs (bsc#1140683).
- scsi: hisi_sas: Do some more tidy-up (bsc#1140683).
- scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO (bsc#1140683).
- scsi: hisi_sas: Fix type casting and missing static qualifier in debugfs code (bsc#1140683). Refresh:
- scsi: hisi_sas: No need to check return value of debugfs_create functions (bsc#1140683). Update:
- scsi: hisi_sas: Some misc tidy-up (bsc#1140683).
- scsi: ibmvfc: Fix error return in ibmvfc_probe() (bsc#1065729).
- scsi: ibmvscsi: Fix potential race after loss of transport (bsc#1178166 ltc#188226).
- scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling getpeername() (bsc#1177258).
- scsi: libiscsi: use sendpage_ok() in iscsi_tcp_segment_map() (bsc#1172873).
- scsi: qla2xxx: Add IOCB resource tracking (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Add rport fields in debugfs (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Add SLER and PI control support (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Correct the check for sscanf() return value (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix buffer-buffer credit extraction error (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix crash on session cleanup with unload (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix I/O errors during LIP reset tests (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix I/O failures during remote port toggle testing (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix memory size truncation (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix MPI reset needed message (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix reset of MPI firmware (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Make tgt_port_database available in initiator mode (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Performance tweak (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Reduce duplicate code in reporting speed (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Remove unneeded variable 'rval' (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Setup debugfs entries for remote ports (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Update version to 10.02.00.102-k (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Update version to 10.02.00.103-k (bsc#1176946 bsc#1175520 bsc#1172538).
- sctp: not disable bh in the whole sctp_get_port_local() (networking-stable-20_09_11).
- spi: fsl-espi: Only process interrupts for expected events (git-fixes).
- staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error (git-fixes).
- staging: octeon: repair 'fixed-link' support (git-fixes).
- tg3: Fix soft lockup when tg3_reset_task() fails (networking-stable-20_09_11).
- thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() (git-fixes).
- time: Prevent undefined behaviour in timespec64_to_ns() (git-fixes).
- tipc: fix memory leak caused by tipc_buf_append() (git-fixes).
- tipc: fix shutdown() of connectionless socket (networking-stable-20_09_11).
- tipc: fix shutdown() of connection oriented socket (networking-stable-20_09_24).
- tipc: fix the skb_unshare() in tipc_buf_append() (git-fixes).
- tipc: fix uninit skb-&gt;data in tipc_nl_compat_dumpit() (networking-stable-20_08_24).
- tipc: use skb_unshare() instead in tipc_buf_append() (networking-stable-20_09_24).
- tty: ipwireless: fix error handling (git-fixes).
- tty: serial: earlycon dependency (git-fixes).
- tty: serial: fsl_lpuart: fix lpuart32_poll_get_char (git-fixes).
- Update patches.suse/vfs-add-super_operations-get_inode_dev (bsc#927455 bsc#1176983).
- USB: Add NO_LPM quirk for Kingston flash drive (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: cdc-acm: add quirk to blacklist ETAS ES58X devices (git-fixes).
- USB: cdc-acm: fix cooldown mechanism (git-fixes).
- usb: cdc-acm: handle broken union descriptors (git-fixes).
- usb: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync() (git-fixes).
- USB: core: driver: fix stray tabs in error messages (git-fixes).
- usb: core: Solve race condition in anchor cleanup functions (git-fixes).
- usb: dwc2: Fix INTR OUT transfers in DDMA mode (git-fixes).
- usb: dwc2: Fix parameter type in function pointer prototype (git-fixes).
- usb: dwc3: core: add phy cleanup for probe error handling (git-fixes).
- usb: dwc3: core: do not trigger runtime pm when remove driver (git-fixes).
- usb: dwc3: ep0: Fix ZLP for OUT ep0 requests (git-fixes).
- usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets (git-fixes).
- usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above (git-fixes).
- usb: gadget: function: printer: fix use-after-free in __lock_acquire (git-fixes).
- usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well (git-fixes).
- USB: host: fsl-mph-dr-of: check return of dma_set_mask() (git-fixes).
- USB: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- usb: ohci: Default to per-port over-current protection (git-fixes).
- USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters (git-fixes).
- USB: serial: option: add Cellient MPL200 card (git-fixes).
- USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231 (git-fixes).
- USB: serial: option: add Quectel EC200T module support (git-fixes).
- USB: serial: option: add Telit FN980 composition 0x1055 (git-fixes).
- USB: serial: option: Add Telit FT980-KS composition (git-fixes).
- USB: serial: pl2303: add device-id for HP GC device (git-fixes).
- usb: serial: qcserial: fix altsetting probing (git-fixes).
- USB: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart (git-fixes).
- USB: typec: tcpm: reset hard_reset_count for any disconnect (git-fixes).
- vfs: fix FIGETBSZ ioctl on an overlayfs file (bsc#1178202).
- video: fbdev: pvr2fb: initialize variables (git-fixes).
- video: fbdev: sis: fix null ptr dereference (git-fixes).
- video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error (git-fixes).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV Gen 1 VMs (bsc#1175306).
- VMCI: check return value of get_user_pages_fast() for errors (git-fixes).
- vmxnet3: fix cksum offload issues for non-udp tunnels (git-fixes).
- vt: Disable KD_FONT_OP_COPY (bsc#1178589).
- w1: mxc_w1: Fix timeout resolution problem leading to bus error (git-fixes).
- watchdog: iTCO_wdt: Export vendorsupport (bsc#1177101).
- watchdog: iTCO_wdt: Make ICH_RES_IO_SMI optional (bsc#1177101).
- wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 (git-fixes).
- writeback: Avoid skipping inode writeback (bsc#1177755).
- writeback: Fix sync livelock due to b_dirty_time processing (bsc#1177755).
- writeback: Protect inode-&gt;i_io_list with inode-&gt;i_lock (bsc#1177755).
- x86/apic: Unify duplicated local apic timer clockevent initialization (bsc#1112178).
- x86, fakenuma: Fix invalid starting node ID (git-fixes (mm/x86/fakenuma)).
- x86/fpu: Allow multiple bits in clearcpuid= parameter (bsc#1112178).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params (bsc#1175306).
- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels (bsc#1058115 bsc#1176907).
- x86/xen: disable Firmware First mode for correctable memory errors (bsc#1176713).
- xen/blkback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/events: add a new 'late EOI' evtchn framework (XSA-332 bsc#1177411).
- xen/events: add a proper barrier to 2-level uevent unmasking (XSA-332 bsc#1177411).
- xen/events: avoid removing an event channel while handling it (XSA-331 bsc#1177410).
- xen/events: block rogue events for some time (XSA-332 bsc#1177411).
- xen/events: defer eoi in case of excessive number of events (XSA-332 bsc#1177411).
- xen/events: do not use chip_data for legacy IRQs (XSA-332 bsc#1065600).
- xen/events: fix race in evtchn_fifo_unmask() (XSA-332 bsc#1177411).
- xen/events: switch user event channels to lateeoi model (XSA-332 bsc#1177411).
- xen/events: use a common cpu hotplug hook for event channels (XSA-332 bsc#1177411).
- xen/gntdev.c: Mark pages as dirty (bsc#1065600).
- xen/netback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/pciback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/scsiback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen: XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information (XSA-332 bsc#1065600).
- xfs: avoid infinite loop when cancelling CoW blocks after writeback failure (bsc#1178027).
- xfs: do not update mtime on COW faults (bsc#1167030).
- xfs: fix a missing unlock on error in xfs_fs_map_blocks (git-fixes).
- xfs: fix flags argument to rmap lookup when converting shared file rmaps (git-fixes).
- xfs: fix rmap key and record comparison functions (git-fixes).
- xfs: flush new eof page on truncate to avoid post-eof corruption (git-fixes).
- xfs: limit entries returned when counting fsmap records (git-fixes).
- xgbe: no need to check return value of debugfs_create functions (git-fixes).
- xgbe: switch to more generic VxLAN detection (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-23"/>
	<updated date="2020-11-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1055014">SUSE bug 1055014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061843">SUSE bug 1061843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066382">SUSE bug 1066382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077428">SUSE bug 1077428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131277">SUSE bug 1131277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134760">SUSE bug 1134760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140683">SUSE bug 1140683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163592">SUSE bug 1163592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167030">SUSE bug 1167030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168468">SUSE bug 1168468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170415">SUSE bug 1170415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170446">SUSE bug 1170446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170630">SUSE bug 1170630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171675">SUSE bug 1171675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172873">SUSE bug 1172873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173432">SUSE bug 1173432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174748">SUSE bug 1174748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175306">SUSE bug 1175306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175520">SUSE bug 1175520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175721">SUSE bug 1175721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176354">SUSE bug 1176354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176381">SUSE bug 1176381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176382">SUSE bug 1176382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176400">SUSE bug 1176400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176485">SUSE bug 1176485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176560">SUSE bug 1176560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176713">SUSE bug 1176713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176723">SUSE bug 1176723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176855">SUSE bug 1176855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176907">SUSE bug 1176907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176946">SUSE bug 1176946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176983">SUSE bug 1176983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177027">SUSE bug 1177027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177086">SUSE bug 1177086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177101">SUSE bug 1177101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177258">SUSE bug 1177258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177271">SUSE bug 1177271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177281">SUSE bug 1177281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177340">SUSE bug 1177340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177410">SUSE bug 1177410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177411">SUSE bug 1177411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177470">SUSE bug 1177470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177511">SUSE bug 1177511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177513">SUSE bug 1177513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177685">SUSE bug 1177685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177687">SUSE bug 1177687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177703">SUSE bug 1177703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177719">SUSE bug 1177719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177724">SUSE bug 1177724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177725">SUSE bug 1177725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177740">SUSE bug 1177740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177749">SUSE bug 1177749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177750">SUSE bug 1177750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177753">SUSE bug 1177753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177754">SUSE bug 1177754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177755">SUSE bug 1177755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177766">SUSE bug 1177766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177819">SUSE bug 1177819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177820">SUSE bug 1177820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177855">SUSE bug 1177855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177856">SUSE bug 1177856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177861">SUSE bug 1177861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178003">SUSE bug 1178003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178027">SUSE bug 1178027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178123">SUSE bug 1178123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178166">SUSE bug 1178166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178182">SUSE bug 1178182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178185">SUSE bug 1178185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178187">SUSE bug 1178187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178188">SUSE bug 1178188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178202">SUSE bug 1178202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178234">SUSE bug 1178234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178330">SUSE bug 1178330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178393">SUSE bug 1178393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178589">SUSE bug 1178589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178591">SUSE bug 1178591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178686">SUSE bug 1178686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178700">SUSE bug 1178700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178765">SUSE bug 1178765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178782">SUSE bug 1178782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178838">SUSE bug 1178838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178878">SUSE bug 1178878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927455">SUSE bug 927455</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0430/">CVE-2020-0430</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12352/">CVE-2020-12352</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14351/">CVE-2020-14351</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16120/">CVE-2020-16120</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25285/">CVE-2020-25285</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25656/">CVE-2020-25656</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25669/">CVE-2020-25669</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25704/">CVE-2020-25704</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498081" comment="kernel-azure-4.12.14-8.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498082" comment="kernel-azure-base-4.12.14-8.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498083" comment="kernel-azure-devel-4.12.14-8.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498084" comment="kernel-devel-azure-4.12.14-8.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498085" comment="kernel-source-azure-4.12.14-8.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498086" comment="kernel-syms-azure-4.12.14-8.52.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138868" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1067665" ref_url="https://bugzilla.suse.com/1067665" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1170139" ref_url="https://bugzilla.suse.com/1170139" source="BUGZILLA"/>
		<reference ref_id="1172542" ref_url="https://bugzilla.suse.com/1172542" source="BUGZILLA"/>
		<reference ref_id="1174726" ref_url="https://bugzilla.suse.com/1174726" source="BUGZILLA"/>
		<reference ref_id="1175916" ref_url="https://bugzilla.suse.com/1175916" source="BUGZILLA"/>
		<reference ref_id="1176109" ref_url="https://bugzilla.suse.com/1176109" source="BUGZILLA"/>
		<reference ref_id="1177304" ref_url="https://bugzilla.suse.com/1177304" source="BUGZILLA"/>
		<reference ref_id="1177397" ref_url="https://bugzilla.suse.com/1177397" source="BUGZILLA"/>
		<reference ref_id="1177805" ref_url="https://bugzilla.suse.com/1177805" source="BUGZILLA"/>
		<reference ref_id="1177808" ref_url="https://bugzilla.suse.com/1177808" source="BUGZILLA"/>
		<reference ref_id="1178589" ref_url="https://bugzilla.suse.com/1178589" source="BUGZILLA"/>
		<reference ref_id="1178635" ref_url="https://bugzilla.suse.com/1178635" source="BUGZILLA"/>
		<reference ref_id="1178669" ref_url="https://bugzilla.suse.com/1178669" source="BUGZILLA"/>
		<reference ref_id="1178853" ref_url="https://bugzilla.suse.com/1178853" source="BUGZILLA"/>
		<reference ref_id="1178854" ref_url="https://bugzilla.suse.com/1178854" source="BUGZILLA"/>
		<reference ref_id="1178886" ref_url="https://bugzilla.suse.com/1178886" source="BUGZILLA"/>
		<reference ref_id="1178897" ref_url="https://bugzilla.suse.com/1178897" source="BUGZILLA"/>
		<reference ref_id="1178940" ref_url="https://bugzilla.suse.com/1178940" source="BUGZILLA"/>
		<reference ref_id="1178962" ref_url="https://bugzilla.suse.com/1178962" source="BUGZILLA"/>
		<reference ref_id="1179107" ref_url="https://bugzilla.suse.com/1179107" source="BUGZILLA"/>
		<reference ref_id="1179140" ref_url="https://bugzilla.suse.com/1179140" source="BUGZILLA"/>
		<reference ref_id="1179211" ref_url="https://bugzilla.suse.com/1179211" source="BUGZILLA"/>
		<reference ref_id="1179213" ref_url="https://bugzilla.suse.com/1179213" source="BUGZILLA"/>
		<reference ref_id="1179259" ref_url="https://bugzilla.suse.com/1179259" source="BUGZILLA"/>
		<reference ref_id="1179424" ref_url="https://bugzilla.suse.com/1179424" source="BUGZILLA"/>
		<reference ref_id="1179426" ref_url="https://bugzilla.suse.com/1179426" source="BUGZILLA"/>
		<reference ref_id="1179427" ref_url="https://bugzilla.suse.com/1179427" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15437" ref_url="https://www.suse.com/security/cve/CVE-2020-15437/" source="CVE"/>
		<reference ref_id="CVE-2020-27777" ref_url="https://www.suse.com/security/cve/CVE-2020-27777/" source="CVE"/>
		<reference ref_id="CVE-2020-28915" ref_url="https://www.suse.com/security/cve/CVE-2020-28915/" source="CVE"/>
		<reference ref_id="CVE-2020-28974" ref_url="https://www.suse.com/security/cve/CVE-2020-28974/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3714-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2020-December/017242.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 Azure kernel was updated receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140).
- CVE-2020-27777: Restrict RTAS requests from userspace  (bsc#1179107).
- CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel (bsc#1178589).
- CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory (bsc#1178886).

The following non-security bugs were fixed:

- ACPI: GED: fix -Wformat (git-fixes).
- ALSA: ctl: fix error path at adding user-defined element set (git-fixes).
- ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() (git-fixes).
- ALSA: mixart: Fix mutex deadlock (git-fixes).
- arm64: KVM: Fix system register enumeration (bsc#1174726).
- arm/arm64: KVM: Add PSCI version selection API (bsc#1174726).
- ASoC: qcom: lpass-platform: Fix memory leak (git-fixes).
- ath10k: Acquire tx_lock in tx error paths (git-fixes).
- batman-adv: set .owner to THIS_MODULE (git-fixes).
- Bluetooth: btusb: Fix and detect most of the Chinese Bluetooth controllers (git-fixes).
- Bluetooth: hci_bcm: fix freeing not-requested IRQ (git-fixes).
- btrfs: account ticket size at add/delete time (bsc#1178897).
- btrfs: add helper to obtain number of devices with ongoing dev-replace (bsc#1178897).
- btrfs: check rw_devices, not num_devices for balance (bsc#1178897).
- btrfs: do not delete mismatched root refs (bsc#1178962).
- btrfs: fix btrfs_calc_reclaim_metadata_size calculation (bsc#1178897).
- btrfs: fix force usage in inc_block_group_ro (bsc#1178897).
- btrfs: fix invalid removal of root ref (bsc#1178962).
- btrfs: fix reclaim counter leak of space_info objects (bsc#1178897).
- btrfs: fix reclaim_size counter leak after stealing from global reserve (bsc#1178897).
- btrfs: kill min_allocable_bytes in inc_block_group_ro (bsc#1178897).
- btrfs: rework arguments of btrfs_unlink_subvol (bsc#1178962).
- btrfs: split dev-replace locking helpers for read and write (bsc#1178897).
- can: af_can: prevent potential access of uninitialized member in canfd_rcv() (git-fixes).
- can: af_can: prevent potential access of uninitialized member in can_rcv() (git-fixes).
- can: dev: can_restart(): post buffer from the right context (git-fixes).
- can: gs_usb: fix endianess problem with candleLight firmware (git-fixes).
- can: m_can: fix nominal bitiming tseg2 min for version &gt;= 3.1 (git-fixes).
- can: m_can: m_can_handle_state_change(): fix state change (git-fixes).
- can: m_can: m_can_stop(): set device to software init mode before closing (git-fixes).
- can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb() (git-fixes).
- can: peak_usb: fix potential integer overflow on shift of a int (git-fixes).
- ceph: add check_session_state() helper and make it global (bsc#1179259).
- ceph: check session state after bumping session-&gt;s_seq (bsc#1179259).
- ceph: fix race in concurrent __ceph_remove_cap invocations (bsc#1178635).
- cifs: Fix incomplete memory allocation on setxattr path (bsc#1179211).
- cifs: remove bogus debug code (bsc#1179427).
- cifs: Return the error from crypt_message when enc/dec key not found (bsc#1179426).
- Convert trailing spaces and periods in path components (bsc#1179424).
- Drivers: hv: vmbus: Remove the unused 'tsc_page' from struct hv_context (git-fixes).
- drm/sun4i: dw-hdmi: fix error return code in sun8i_dw_hdmi_bind() (git-fixes).
- efi: cper: Fix possible out-of-bounds access (git-fixes).
- efi/efivars: Add missing kobject_put() in sysfs entry creation error path (git-fixes).
- efi/esrt: Fix reference count leak in esre_create_sysfs_entry (git-fixes).
- efi: provide empty efi_enter_virtual_mode implementation (git-fixes).
- efivarfs: fix memory leak in efivarfs_create() (git-fixes).
- efivarfs: revert 'fix memory leak in efivarfs_create()' (git-fixes).
- efi/x86: Do not panic or BUG() on non-critical error conditions (git-fixes).
- efi/x86: Free efi_pgd with free_pages() (bsc#1112178).
- efi/x86: Ignore the memory attributes table on i386 (git-fixes).
- efi/x86: Map the entire EFI vendor string before copying it (git-fixes).
- fs/proc/array.c: allow reporting eip/esp for all coredumping threads (bsc#1050549).
- fuse: fix page dereference after free (bsc#1179213).
- futex: Do not enable IRQs unconditionally in put_pi_state() (bsc#1067665).
- futex: Handle transient 'ownerless' rtmutex state correctly (bsc#1067665).
- hv_balloon: disable warning when floor reached (git-fixes).
- hv_netvsc: make recording RSS hash depend on feature flag (bsc#1178853, bsc#1178854).
- hv_netvsc: record hardware hash in skb (bsc#1178853, bsc#1178854).
- IB/core: Set qp-&gt;real_qp before it may be accessed (bsc#1111666)
- IB/hfi1: Add missing INVALIDATE opcodes for trace (bsc#1111666)
- IB/hfi1: Add RcvShortLengthErrCnt to hfi1stats (bsc#1111666)
- IB/hfi1: Add software counter for ctxt0 seq drop (bsc#1111666)
- IB/hfi1: Avoid hardlockup with flushlist_lock (bsc#1111666)
- IB/hfi1: Check for error on call to alloc_rsm_map_table (bsc#1111666)
- IB/hfi1: Close PSM sdma_progress sleep window (bsc#1111666)
- IB/hfi1: Define variables as unsigned long to fix KASAN warning (bsc#1111666)
- IB/hfi1: Ensure full Gen3 speed in a Gen4 system (bsc#1111666)
- IB/hfi1: Fix Spectre v1 vulnerability (bsc#1111666)
- IB/hfi1: Handle port down properly in pio (bsc#1111666)
- IB/hfi1: Handle wakeup of orphaned QPs for pio (bsc#1111666)
- IB/hfi1: Insure freeze_work work_struct is canceled on shutdown (bsc#1111666)
- IB/hfi1, qib: Ensure RCU is locked when accessing list (bsc#1111666)
- IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM (bsc#1111666)
- IB/hfi1: Remove unused define (bsc#1111666)
- IB/hfi1: Silence txreq allocation warnings (bsc#1111666)
- IB/hfi1: Validate page aligned for a given virtual address (bsc#1111666)
- IB/hfi1: Wakeup QPs orphaned on wait list after flush (bsc#1111666)
- IB/ipoib: drop useless LIST_HEAD (bsc#1111666)
- IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start (bsc#1111666)
- IB/iser: Fix dma_nents type definition (bsc#1111666)
- IB/iser: Pass the correct number of entries for dma mapped SGL (bsc#1111666)
- IB/mad: Fix use-after-free in ib mad completion handling (bsc#1111666)
- IB/mlx4: Fix leak in id_map_find_del (bsc#1111666)
- IB/mlx4: Fix memory leak in add_gid error flow (bsc#1111666)
- IB/mlx4: Fix race condition between catas error reset and aliasguid flows (bsc#1111666)
- IB/mlx4: Follow mirror sequence of device add during device removal (bsc#1111666)
- IB/mlx4: Remove unneeded NULL check (bsc#1111666)
- IB/mlx5: Add missing XRC options to QP optional params mask (bsc#1111666)
- IB/mlx5: Compare only index part of a memory window rkey (bsc#1111666)
- IB/mlx5: Do not override existing ip_protocol (bsc#1111666)
- IB/mlx5: Fix clean_mr() to work in the expected order (bsc#1111666)
- IB/mlx5: Fix implicit MR release flow (bsc#1111666)
- IB/mlx5: Fix outstanding_pi index for GSI qps (bsc#1111666)
- IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification (bsc#1111666)
- IB/mlx5: Fix unreg_umr to ignore the mkey state (bsc#1111666)
- IB/mlx5: Improve ODP debugging messages (bsc#1111666)
- IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache (bsc#1111666)
- IB/mlx5: Prevent concurrent MR updates during invalidation (bsc#1111666)
- IB/mlx5: Reset access mask when looping inside page fault handler (bsc#1111666)
- IB/mlx5: Set correct write permissions for implicit ODP MR (bsc#1111666)
- IB/mlx5: Use direct mkey destroy command upon UMR unreg failure (bsc#1111666)
- IB/mlx5: Use fragmented QP's buffer for in-kernel users (bsc#1111666)
- IB/mlx5: WQE dump jumps over first 16 bytes (bsc#1111666)
- IB/qib: Fix an error code in qib_sdma_verbs_send() (bsc#1111666)
- IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value (bsc#1111666)
- IB/qib: Remove a set-but-not-used variable (bsc#1111666)
- IB/rdmavt: Convert timers to use timer_setup() (bsc#1111666)
- IB/rdmavt: Fix alloc_qpn() WARN_ON() (bsc#1111666)
- IB/rdmavt: Reset all QPs when the device is shut down (bsc#1111666)
- IB/rxe: Fix incorrect cache cleanup in error flow (bsc#1111666)
- IB/rxe: Make counters thread safe (bsc#1111666)
- IB/umad: Avoid additional device reference during open()/close() (bsc#1111666)
- IB/umad: Avoid destroying device while it is accessed (bsc#1111666)
- IB/umad: Do not check status of nonseekable_open() (bsc#1111666)
- IB/umad: Fix kernel crash while unloading ib_umad (bsc#1111666)
- IB/umad: Refactor code to use cdev_device_add() (bsc#1111666)
- IB/umad: Simplify and avoid dynamic allocation of class (bsc#1111666)
- IB/usnic: Fix out of bounds index check in query pkey (bsc#1111666)
- IB/uverbs: Fix OOPs upon device disassociation (bsc#1111666)
- iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode (git-fixes).
- iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum (git-fixes).
- inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() (git-fixes).
- iw_cxgb4: fix ECN check on the passive accept (bsc#1111666)
- iw_cxgb4: only reconnect with MPAv1 if the peer aborts (bsc#1111666)
- kABI: add back flush_dcache_range (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- KVM: arm64: Add missing #include of &lt;linux/string.h&gt; in guest.c (bsc#1174726).
- KVM: arm64: Factor out core register ID enumeration (bsc#1174726).
- KVM: arm64: Filter out invalid core register IDs in KVM_GET_REG_LIST (bsc#1174726).
- KVM: arm64: Refactor kvm_arm_num_regs() for easier maintenance (bsc#1174726).
- KVM: arm64: Reject ioctl access to FPSIMD V-regs on SVE vcpus (bsc#1174726).
- KVM host: kabi fixes for psci_version (bsc#1174726).
- libnvdimm/nvdimm/flush: Allow architecture to override the flush barrier (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- locking/lockdep: Add debug_locks check in __lock_downgrade() (bsc#1050549).
- locking/percpu-rwsem: Use this_cpu_{inc,dec}() for read_count (bsc#1050549).
- locktorture: Print ratio of acquisitions, not failures (bsc#1050549).
- mac80211: always wind down STA state (git-fixes).
- mac80211: free sta in sta_info_insert_finish() on errors (git-fixes).
- mac80211: minstrel: fix tx status processing corner case (git-fixes).
- mac80211: minstrel: remove deferred sampling code (git-fixes).
- mm: always have io_remap_pfn_range() set pgprot_decrypted() (bsc#1112178).
- net: ena: Capitalize all log strings and improve code readability (bsc#1177397).
- net: ena: Change license into format to SPDX in all files (bsc#1177397).
- net: ena: Change log message to netif/dev function (bsc#1177397).
- net: ena: Change RSS related macros and variables names (bsc#1177397).
- net: ena: ethtool: Add new device statistics (bsc#1177397).
- net: ena: ethtool: add stats printing to XDP queues (bsc#1177397).
- net: ena: ethtool: convert stat_offset to 64 bit resolution (bsc#1177397).
- net: ena: Fix all static chekers' warnings (bsc#1177397).
- net: ena: Remove redundant print of placement policy (bsc#1177397).
- net: ena: xdp: add queue counters for xdp actions (bsc#1177397).
- net/mlx4_core: Fix init_hca fields offset (git-fixes).
- nfc: s3fwrn5: use signed integer for parsing GPIO numbers (git-fixes).
- NFS: mark nfsiod as CPU_INTENSIVE (bsc#1177304).
- NFS: only invalidate dentrys that are clearly invalid (bsc#1178669 bsc#1170139).
- PCI: pci-hyperv: Fix build errors on non-SYSFS config (git-fixes).
- pinctrl: amd: fix incorrect way to disable debounce filter (git-fixes).
- pinctrl: amd: use higher precision for 512 RtcClk (git-fixes).
- pinctrl: aspeed: Fix GPI only function problem (git-fixes).
- platform/x86: toshiba_acpi: Fix the wrong variable assignment (git-fixes).
- powerpc/32: define helpers to get L1 cache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/64: flush_inval_dcache_range() becomes flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/64: reuse PPC32 static inline flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc: Chunk calls to flush_dcache_range in arch_*_memory (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964 git-fixes).
- powerpc: define helpers to get L1 icache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/mm: Flush cache on memory hot(un)plug (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Add flush routines using new pmem store and sync instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Add new instructions for persistent storage and sync (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Avoid the barrier in flush routines (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Fix kernel crash due to wrong range value usage in flush_dcache_range (jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Initialize pmem device on newer hardware (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Restrict papr_scm to P8 and above (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Update ppc64 to use the new barrier instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- RDMA/bnxt_re: Fix Send Work Entry state check while polling completions (bsc#1111666)
- RDMA/bnxt_re: Fix stack-out-of-bounds in bnxt_qplib_rcfw_send_message (bsc#1111666)
- RDMA/cma: add missed unregister_pernet_subsys in init failure (bsc#1111666)
- RDMA/cma: Fix false error message (bsc#1111666)
- RDMA/cma: fix null-ptr-deref Read in cma_cleanup (bsc#1111666)
- RDMA/core: Do not depend device ODP capabilities on kconfig option (bsc#1111666)
- RDMA/core: Fix invalid memory access in spec_filter_size (bsc#1111666)
- RDMA/core: Fix locking in ib_uverbs_event_read (bsc#1111666)
- RDMA/core: Fix protection fault in ib_mr_pool_destroy (bsc#1111666)
- RDMA/core: Fix race when resolving IP address (bsc#1111666)
- RDMA/cxgb3: Delete and properly mark unimplemented resize CQ function (bsc#1111666)
- RDMA: Directly cast the sockaddr union to sockaddr (bsc#1111666)
- RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN (bsc#1111666)
- RDMA/hns: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/i40iw: fix a potential NULL pointer dereference (bsc#1111666)
- RDMA/i40iw: Set queue pair state when being queried (bsc#1111666)
- RDMA/ipoib: Remove check for ETH_SS_TEST (bsc#1111666)
- RDMA/iwcm: Fix a lock inversion issue (bsc#1111666)
- RDMA/iwcm: Fix iwcm work deallocation (bsc#1111666)
- RDMA/iwcm: move iw_rem_ref() calls out of spinlock (bsc#1111666)
- RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case (bsc#1111666)
- RDMA/iw_cxgb4: Fix the unchecked ep dereference (bsc#1111666)
- RDMA/mlx5: Clear old rate limit when closing QP (bsc#1111666)
- RDMA/mlx5: Delete unreachable handle_atomic code by simplifying SW completion (bsc#1111666)
- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (bsc#1111666)
- RDMA/mlx5: Fix a race with mlx5_ib_update_xlt on an implicit MR (bsc#1111666)
- RDMA/mlx5: Fix function name typo 'fileds' -&gt; 'fields' (bsc#1111666)
- RDMA/mlx5: Return proper error value (bsc#1111666)
- RDMA/nes: Remove second wait queue initialization call (bsc#1111666)
- RDMA/netlink: Do not always generate an ACK for some netlink operations (bsc#1111666)
- RDMA/ocrdma: Fix out of bounds index check in query pkey (bsc#1111666)
- RDMA/ocrdma: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/qedr: Fix memory leak in user qp and mr (bsc#1111666)
- RDMA/qedr: Fix reported firmware version (bsc#1111666)
- RDMA/qedr: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/qib: Delete extra line (bsc#1111666)
- RDMA/qib: Remove all occurrences of BUG_ON() (bsc#1111666)
- RDMA/qib: Validate -&gt;show()/store() callbacks before calling them (bsc#1111666)
- RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM (bsc#1111666)
- RDMA/rxe: Fix configuration of atomic queue pair attributes (bsc#1111666)
- RDMA/rxe: Fix slab-out-bounds access which lead to kernel crash later (bsc#1111666)
- RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq (bsc#1111666)
- RDMA/rxe: Use for_each_sg_page iterator on umem SGL (bsc#1111666)
- RDMA/srp: Rework SCSI device reset handling (bsc#1111666)
- RDMA/srpt: Report the SCSI residual to the initiator (bsc#1111666)
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (bsc#1111666)
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (bsc#1111666)
- RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated (bsc#1111666)
- RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove (bsc#1111666)
- RDMA/vmw_pvrdma: Use atomic memory allocation in create AH (bsc#1111666)
- regulator: avoid resolve_supply() infinite recursion (git-fixes).
- regulator: fix memory leak with repeated set_machine_constraints() (git-fixes).
- regulator: ti-abb: Fix array out of bound read access on the first transition (git-fixes).
- regulator: workaround self-referent regulators (git-fixes).
- RMDA/cm: Fix missing ib_cm_destroy_id() in ib_cm_insert_listen() (bsc#1111666)
- rxe: correctly calculate iCRC for unaligned payloads (bsc#1111666)
- rxe: fix error completion wr_id and qp_num (bsc#1111666)
- s390/cio: add cond_resched() in the slow_eval_known_fn() loop (bsc#1177805 LTC#188737).
- s390/cpum_cf,perf: change DFLT_CCERROR counter name (bsc#1175916 LTC#187937).
- s390/dasd: Fix zero write for FBA devices (bsc#1177808 LTC#188739).
- s390: kernel/uv: handle length extension properly (bsc#1178940 LTC#189323).
- sched/core: Fix PI boosting between RT and DEADLINE tasks (bsc#1112178).
- sched/x86: SaveFLAGS on context switch (bsc#1112178).
- scripts/git_sort/git_sort.py: add ceph maintainers git tree
- scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported (git-fixes).
- scsi: RDMA/srpt: Fix a credit leak for aborted commands (bsc#1111666)
- Staging: rtl8188eu: rtw_mlme: Fix uninitialized variable authmode (git-fixes).
- staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids (git-fixes).
- tty: serial: imx: keep console clocks always on (git-fixes).
- Update references in patches.suse/net-smc-tolerate-future-smcd-versions (bsc#1172542 LTC#186070 git-fixes).
- USB: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode (git-fixes).
- USB: core: Fix regression in Hercules audio card (git-fixes).
- USB: gadget: Fix memleak in gadgetfs_fill_super (git-fixes).
- USB: gadget: f_midi: Fix memleak in f_midi_alloc (git-fixes).
- USB: host: ehci-tegra: Fix error handling in tegra_ehci_probe() (git-fixes).
- USB: host: xhci-mtk: avoid runtime suspend when removing hcd (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race (git-fixes).
- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- x86/hyperv: Clarify comment on x2apic mode (git-fixes).
- x86/hyperv: Make vapic support x2apic mode (git-fixes).
- x86/microcode/intel: Check patch signature before saving microcode for early loading (bsc#1112178).
- x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect (git-fixes).
- x86/PCI: Fix intel_mid_pci.c build error when ACPI is not enabled (git-fixes).
- x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (git-fixes).
- x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP (bsc#1112178).
- x86/sysfb_efi: Add quirks for some devices with swapped width and height (git-fixes).
- xfs: revert 'xfs: fix rmap key and record comparison functions' (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-08"/>
	<updated date="2020-12-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1067665">SUSE bug 1067665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170139">SUSE bug 1170139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172542">SUSE bug 1172542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174726">SUSE bug 1174726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175916">SUSE bug 1175916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176109">SUSE bug 1176109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177304">SUSE bug 1177304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177397">SUSE bug 1177397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177805">SUSE bug 1177805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177808">SUSE bug 1177808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178589">SUSE bug 1178589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178635">SUSE bug 1178635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178669">SUSE bug 1178669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178853">SUSE bug 1178853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178854">SUSE bug 1178854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178886">SUSE bug 1178886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178897">SUSE bug 1178897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178940">SUSE bug 1178940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178962">SUSE bug 1178962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179107">SUSE bug 1179107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179140">SUSE bug 1179140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179211">SUSE bug 1179211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179213">SUSE bug 1179213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179259">SUSE bug 1179259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179424">SUSE bug 1179424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179426">SUSE bug 1179426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179427">SUSE bug 1179427</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15437/">CVE-2020-15437</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27777/">CVE-2020-27777</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28915/">CVE-2020-28915</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28974/">CVE-2020-28974</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498087" comment="kernel-azure-4.12.14-8.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498088" comment="kernel-azure-base-4.12.14-8.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498089" comment="kernel-azure-devel-4.12.14-8.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498090" comment="kernel-devel-azure-4.12.14-8.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498091" comment="kernel-source-azure-4.12.14-8.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498092" comment="kernel-syms-azure-4.12.14-8.55.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138869" version="1" class="patch">
	<metadata>
		<title>Security update for python-azure-agent (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1127838" ref_url="https://bugzilla.suse.com/1127838" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-0804" ref_url="https://www.suse.com/security/cve/CVE-2019-0804/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006516.html" source="SUSE-SU"/>
		<description>
This update for python-azure-agent fixes the following issues:

python-azure-agent was updated to version 2.2.45 (jsc#ECO-80)

+ Add support for Gen2 VM resource disks
+ Use alternate systemd detection
+ Fix /proc/net/route requirement that causes errors on FreeBSD
+ Add cloud-init auto-detect to prevent multiple provisioning mechanisms
  from relying on configuration for coordination
+ Disable cgroups when daemon is setup incorrectly
+ Remove upgrade extension loop for the same goal state
+ Add container id for extension telemetry events
+ Be more exact when detecting IMDS service health
+ Changing add_event to start sending missing fields

From 2.2.44 update:

+ Remove outdated extension ZIP packages
+ Improved error handling when starting extensions using systemd
+ Reduce provisioning time of some custom images
+ Improve the handling of extension download errors
+ New API for extension authors to handle errors during extension update
+ Fix handling of errors in calls to openssl
+ Improve logic to determine current distro
+ Reduce verbosity of several logging statements

From 2.2.42 update:

+ Poll for artifact blob, addresses goal state procesing issue

From 2.2.41 update:

+ Rewriting the mechanism to start the extension using systemd-run for
  systems using systemd for managing
+ Refactoring of resource monitoring framework using cgroup for both
  systemd and non-systemd approaches [#1530, #1534]
+ Telemetry pipeline for resource monitoring data

From 2.2.40 update:

+ Fixed tracking of memory/cpu usage
+ Do not prevent extensions from running if setting up cgroups fails
+ Enable systemd-aware deprovisioning on all versions &gt;= 18.04
+ Add systemd support for Debian Jessie, Stretch, and Buster
+ Support for Linux Openwrt

From 2.2.38 update:

Security issue fixed:
+ CVE-2019-0804: An issue with swapfile handling in the agent creates
  a data leak situation that exposes system memory data.  (bsc#1127838)
+ Add fixes for handling swap file and other nit fixes

From 2.2.37 update:
+ Improves re-try logic to handle errors while downloading extensions

		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-24"/>
	<updated date="2020-02-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1127838">SUSE bug 1127838</bugzilla>
	<cve impact="low" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-0804/">CVE-2019-0804</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498093" comment="python-azure-agent-2.2.45-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138870" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1046303" ref_url="https://bugzilla.suse.com/1046303" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1051858" ref_url="https://bugzilla.suse.com/1051858" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1086301" ref_url="https://bugzilla.suse.com/1086301" source="BUGZILLA"/>
		<reference ref_id="1086313" ref_url="https://bugzilla.suse.com/1086313" source="BUGZILLA"/>
		<reference ref_id="1086314" ref_url="https://bugzilla.suse.com/1086314" source="BUGZILLA"/>
		<reference ref_id="1088810" ref_url="https://bugzilla.suse.com/1088810" source="BUGZILLA"/>
		<reference ref_id="1090888" ref_url="https://bugzilla.suse.com/1090888" source="BUGZILLA"/>
		<reference ref_id="1103989" ref_url="https://bugzilla.suse.com/1103989" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1105392" ref_url="https://bugzilla.suse.com/1105392" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1112504" ref_url="https://bugzilla.suse.com/1112504" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1115026" ref_url="https://bugzilla.suse.com/1115026" source="BUGZILLA"/>
		<reference ref_id="1118338" ref_url="https://bugzilla.suse.com/1118338" source="BUGZILLA"/>
		<reference ref_id="1118661" ref_url="https://bugzilla.suse.com/1118661" source="BUGZILLA"/>
		<reference ref_id="1123328" ref_url="https://bugzilla.suse.com/1123328" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1127682" ref_url="https://bugzilla.suse.com/1127682" source="BUGZILLA"/>
		<reference ref_id="1129551" ref_url="https://bugzilla.suse.com/1129551" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1133147" ref_url="https://bugzilla.suse.com/1133147" source="BUGZILLA"/>
		<reference ref_id="1134973" ref_url="https://bugzilla.suse.com/1134973" source="BUGZILLA"/>
		<reference ref_id="1140025" ref_url="https://bugzilla.suse.com/1140025" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1143959" ref_url="https://bugzilla.suse.com/1143959" source="BUGZILLA"/>
		<reference ref_id="1144162" ref_url="https://bugzilla.suse.com/1144162" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1151548" ref_url="https://bugzilla.suse.com/1151548" source="BUGZILLA"/>
		<reference ref_id="1151910" ref_url="https://bugzilla.suse.com/1151910" source="BUGZILLA"/>
		<reference ref_id="1151927" ref_url="https://bugzilla.suse.com/1151927" source="BUGZILLA"/>
		<reference ref_id="1152107" ref_url="https://bugzilla.suse.com/1152107" source="BUGZILLA"/>
		<reference ref_id="1152631" ref_url="https://bugzilla.suse.com/1152631" source="BUGZILLA"/>
		<reference ref_id="1153535" ref_url="https://bugzilla.suse.com/1153535" source="BUGZILLA"/>
		<reference ref_id="1153917" ref_url="https://bugzilla.suse.com/1153917" source="BUGZILLA"/>
		<reference ref_id="1154243" ref_url="https://bugzilla.suse.com/1154243" source="BUGZILLA"/>
		<reference ref_id="1154601" ref_url="https://bugzilla.suse.com/1154601" source="BUGZILLA"/>
		<reference ref_id="1154768" ref_url="https://bugzilla.suse.com/1154768" source="BUGZILLA"/>
		<reference ref_id="1154916" ref_url="https://bugzilla.suse.com/1154916" source="BUGZILLA"/>
		<reference ref_id="1155331" ref_url="https://bugzilla.suse.com/1155331" source="BUGZILLA"/>
		<reference ref_id="1155334" ref_url="https://bugzilla.suse.com/1155334" source="BUGZILLA"/>
		<reference ref_id="1155689" ref_url="https://bugzilla.suse.com/1155689" source="BUGZILLA"/>
		<reference ref_id="1156259" ref_url="https://bugzilla.suse.com/1156259" source="BUGZILLA"/>
		<reference ref_id="1156286" ref_url="https://bugzilla.suse.com/1156286" source="BUGZILLA"/>
		<reference ref_id="1156462" ref_url="https://bugzilla.suse.com/1156462" source="BUGZILLA"/>
		<reference ref_id="1157155" ref_url="https://bugzilla.suse.com/1157155" source="BUGZILLA"/>
		<reference ref_id="1157157" ref_url="https://bugzilla.suse.com/1157157" source="BUGZILLA"/>
		<reference ref_id="1157169" ref_url="https://bugzilla.suse.com/1157169" source="BUGZILLA"/>
		<reference ref_id="1157303" ref_url="https://bugzilla.suse.com/1157303" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1157480" ref_url="https://bugzilla.suse.com/1157480" source="BUGZILLA"/>
		<reference ref_id="1157692" ref_url="https://bugzilla.suse.com/1157692" source="BUGZILLA"/>
		<reference ref_id="1157853" ref_url="https://bugzilla.suse.com/1157853" source="BUGZILLA"/>
		<reference ref_id="1157895" ref_url="https://bugzilla.suse.com/1157895" source="BUGZILLA"/>
		<reference ref_id="1157908" ref_url="https://bugzilla.suse.com/1157908" source="BUGZILLA"/>
		<reference ref_id="1157966" ref_url="https://bugzilla.suse.com/1157966" source="BUGZILLA"/>
		<reference ref_id="1158013" ref_url="https://bugzilla.suse.com/1158013" source="BUGZILLA"/>
		<reference ref_id="1158021" ref_url="https://bugzilla.suse.com/1158021" source="BUGZILLA"/>
		<reference ref_id="1158026" ref_url="https://bugzilla.suse.com/1158026" source="BUGZILLA"/>
		<reference ref_id="1158071" ref_url="https://bugzilla.suse.com/1158071" source="BUGZILLA"/>
		<reference ref_id="1158094" ref_url="https://bugzilla.suse.com/1158094" source="BUGZILLA"/>
		<reference ref_id="1158132" ref_url="https://bugzilla.suse.com/1158132" source="BUGZILLA"/>
		<reference ref_id="1158381" ref_url="https://bugzilla.suse.com/1158381" source="BUGZILLA"/>
		<reference ref_id="1158533" ref_url="https://bugzilla.suse.com/1158533" source="BUGZILLA"/>
		<reference ref_id="1158819" ref_url="https://bugzilla.suse.com/1158819" source="BUGZILLA"/>
		<reference ref_id="1158823" ref_url="https://bugzilla.suse.com/1158823" source="BUGZILLA"/>
		<reference ref_id="1158824" ref_url="https://bugzilla.suse.com/1158824" source="BUGZILLA"/>
		<reference ref_id="1158827" ref_url="https://bugzilla.suse.com/1158827" source="BUGZILLA"/>
		<reference ref_id="1158834" ref_url="https://bugzilla.suse.com/1158834" source="BUGZILLA"/>
		<reference ref_id="1158893" ref_url="https://bugzilla.suse.com/1158893" source="BUGZILLA"/>
		<reference ref_id="1158900" ref_url="https://bugzilla.suse.com/1158900" source="BUGZILLA"/>
		<reference ref_id="1158903" ref_url="https://bugzilla.suse.com/1158903" source="BUGZILLA"/>
		<reference ref_id="1158904" ref_url="https://bugzilla.suse.com/1158904" source="BUGZILLA"/>
		<reference ref_id="1158954" ref_url="https://bugzilla.suse.com/1158954" source="BUGZILLA"/>
		<reference ref_id="1159024" ref_url="https://bugzilla.suse.com/1159024" source="BUGZILLA"/>
		<reference ref_id="1159028" ref_url="https://bugzilla.suse.com/1159028" source="BUGZILLA"/>
		<reference ref_id="1159271" ref_url="https://bugzilla.suse.com/1159271" source="BUGZILLA"/>
		<reference ref_id="1159297" ref_url="https://bugzilla.suse.com/1159297" source="BUGZILLA"/>
		<reference ref_id="1159377" ref_url="https://bugzilla.suse.com/1159377" source="BUGZILLA"/>
		<reference ref_id="1159394" ref_url="https://bugzilla.suse.com/1159394" source="BUGZILLA"/>
		<reference ref_id="1159483" ref_url="https://bugzilla.suse.com/1159483" source="BUGZILLA"/>
		<reference ref_id="1159484" ref_url="https://bugzilla.suse.com/1159484" source="BUGZILLA"/>
		<reference ref_id="1159500" ref_url="https://bugzilla.suse.com/1159500" source="BUGZILLA"/>
		<reference ref_id="1159569" ref_url="https://bugzilla.suse.com/1159569" source="BUGZILLA"/>
		<reference ref_id="1159588" ref_url="https://bugzilla.suse.com/1159588" source="BUGZILLA"/>
		<reference ref_id="1159841" ref_url="https://bugzilla.suse.com/1159841" source="BUGZILLA"/>
		<reference ref_id="1159908" ref_url="https://bugzilla.suse.com/1159908" source="BUGZILLA"/>
		<reference ref_id="1159909" ref_url="https://bugzilla.suse.com/1159909" source="BUGZILLA"/>
		<reference ref_id="1159910" ref_url="https://bugzilla.suse.com/1159910" source="BUGZILLA"/>
		<reference ref_id="1159911" ref_url="https://bugzilla.suse.com/1159911" source="BUGZILLA"/>
		<reference ref_id="1159955" ref_url="https://bugzilla.suse.com/1159955" source="BUGZILLA"/>
		<reference ref_id="1160147" ref_url="https://bugzilla.suse.com/1160147" source="BUGZILLA"/>
		<reference ref_id="1160195" ref_url="https://bugzilla.suse.com/1160195" source="BUGZILLA"/>
		<reference ref_id="1160210" ref_url="https://bugzilla.suse.com/1160210" source="BUGZILLA"/>
		<reference ref_id="1160211" ref_url="https://bugzilla.suse.com/1160211" source="BUGZILLA"/>
		<reference ref_id="1160218" ref_url="https://bugzilla.suse.com/1160218" source="BUGZILLA"/>
		<reference ref_id="1160433" ref_url="https://bugzilla.suse.com/1160433" source="BUGZILLA"/>
		<reference ref_id="1160442" ref_url="https://bugzilla.suse.com/1160442" source="BUGZILLA"/>
		<reference ref_id="1160469" ref_url="https://bugzilla.suse.com/1160469" source="BUGZILLA"/>
		<reference ref_id="1160470" ref_url="https://bugzilla.suse.com/1160470" source="BUGZILLA"/>
		<reference ref_id="1160476" ref_url="https://bugzilla.suse.com/1160476" source="BUGZILLA"/>
		<reference ref_id="1160560" ref_url="https://bugzilla.suse.com/1160560" source="BUGZILLA"/>
		<reference ref_id="1160618" ref_url="https://bugzilla.suse.com/1160618" source="BUGZILLA"/>
		<reference ref_id="1160678" ref_url="https://bugzilla.suse.com/1160678" source="BUGZILLA"/>
		<reference ref_id="1160755" ref_url="https://bugzilla.suse.com/1160755" source="BUGZILLA"/>
		<reference ref_id="1160756" ref_url="https://bugzilla.suse.com/1160756" source="BUGZILLA"/>
		<reference ref_id="1160784" ref_url="https://bugzilla.suse.com/1160784" source="BUGZILLA"/>
		<reference ref_id="1160787" ref_url="https://bugzilla.suse.com/1160787" source="BUGZILLA"/>
		<reference ref_id="1160802" ref_url="https://bugzilla.suse.com/1160802" source="BUGZILLA"/>
		<reference ref_id="1160803" ref_url="https://bugzilla.suse.com/1160803" source="BUGZILLA"/>
		<reference ref_id="1160804" ref_url="https://bugzilla.suse.com/1160804" source="BUGZILLA"/>
		<reference ref_id="1160917" ref_url="https://bugzilla.suse.com/1160917" source="BUGZILLA"/>
		<reference ref_id="1160966" ref_url="https://bugzilla.suse.com/1160966" source="BUGZILLA"/>
		<reference ref_id="1160979" ref_url="https://bugzilla.suse.com/1160979" source="BUGZILLA"/>
		<reference ref_id="1161087" ref_url="https://bugzilla.suse.com/1161087" source="BUGZILLA"/>
		<reference ref_id="1161243" ref_url="https://bugzilla.suse.com/1161243" source="BUGZILLA"/>
		<reference ref_id="1161360" ref_url="https://bugzilla.suse.com/1161360" source="BUGZILLA"/>
		<reference ref_id="1161472" ref_url="https://bugzilla.suse.com/1161472" source="BUGZILLA"/>
		<reference ref_id="1161514" ref_url="https://bugzilla.suse.com/1161514" source="BUGZILLA"/>
		<reference ref_id="1161518" ref_url="https://bugzilla.suse.com/1161518" source="BUGZILLA"/>
		<reference ref_id="1161522" ref_url="https://bugzilla.suse.com/1161522" source="BUGZILLA"/>
		<reference ref_id="1161523" ref_url="https://bugzilla.suse.com/1161523" source="BUGZILLA"/>
		<reference ref_id="1161549" ref_url="https://bugzilla.suse.com/1161549" source="BUGZILLA"/>
		<reference ref_id="1161552" ref_url="https://bugzilla.suse.com/1161552" source="BUGZILLA"/>
		<reference ref_id="1161674" ref_url="https://bugzilla.suse.com/1161674" source="BUGZILLA"/>
		<reference ref_id="1161702" ref_url="https://bugzilla.suse.com/1161702" source="BUGZILLA"/>
		<reference ref_id="1161907" ref_url="https://bugzilla.suse.com/1161907" source="BUGZILLA"/>
		<reference ref_id="1161931" ref_url="https://bugzilla.suse.com/1161931" source="BUGZILLA"/>
		<reference ref_id="1161933" ref_url="https://bugzilla.suse.com/1161933" source="BUGZILLA"/>
		<reference ref_id="1161934" ref_url="https://bugzilla.suse.com/1161934" source="BUGZILLA"/>
		<reference ref_id="1161935" ref_url="https://bugzilla.suse.com/1161935" source="BUGZILLA"/>
		<reference ref_id="1161936" ref_url="https://bugzilla.suse.com/1161936" source="BUGZILLA"/>
		<reference ref_id="1161937" ref_url="https://bugzilla.suse.com/1161937" source="BUGZILLA"/>
		<reference ref_id="1162028" ref_url="https://bugzilla.suse.com/1162028" source="BUGZILLA"/>
		<reference ref_id="1162067" ref_url="https://bugzilla.suse.com/1162067" source="BUGZILLA"/>
		<reference ref_id="1162109" ref_url="https://bugzilla.suse.com/1162109" source="BUGZILLA"/>
		<reference ref_id="1162139" ref_url="https://bugzilla.suse.com/1162139" source="BUGZILLA"/>
		<reference ref_id="1162557" ref_url="https://bugzilla.suse.com/1162557" source="BUGZILLA"/>
		<reference ref_id="1162617" ref_url="https://bugzilla.suse.com/1162617" source="BUGZILLA"/>
		<reference ref_id="1162618" ref_url="https://bugzilla.suse.com/1162618" source="BUGZILLA"/>
		<reference ref_id="1162619" ref_url="https://bugzilla.suse.com/1162619" source="BUGZILLA"/>
		<reference ref_id="1162623" ref_url="https://bugzilla.suse.com/1162623" source="BUGZILLA"/>
		<reference ref_id="1162928" ref_url="https://bugzilla.suse.com/1162928" source="BUGZILLA"/>
		<reference ref_id="1162943" ref_url="https://bugzilla.suse.com/1162943" source="BUGZILLA"/>
		<reference ref_id="1163206" ref_url="https://bugzilla.suse.com/1163206" source="BUGZILLA"/>
		<reference ref_id="1163383" ref_url="https://bugzilla.suse.com/1163383" source="BUGZILLA"/>
		<reference ref_id="1163384" ref_url="https://bugzilla.suse.com/1163384" source="BUGZILLA"/>
		<reference ref_id="1163762" ref_url="https://bugzilla.suse.com/1163762" source="BUGZILLA"/>
		<reference ref_id="1163774" ref_url="https://bugzilla.suse.com/1163774" source="BUGZILLA"/>
		<reference ref_id="1163836" ref_url="https://bugzilla.suse.com/1163836" source="BUGZILLA"/>
		<reference ref_id="1163840" ref_url="https://bugzilla.suse.com/1163840" source="BUGZILLA"/>
		<reference ref_id="1163841" ref_url="https://bugzilla.suse.com/1163841" source="BUGZILLA"/>
		<reference ref_id="1163842" ref_url="https://bugzilla.suse.com/1163842" source="BUGZILLA"/>
		<reference ref_id="1163843" ref_url="https://bugzilla.suse.com/1163843" source="BUGZILLA"/>
		<reference ref_id="1163844" ref_url="https://bugzilla.suse.com/1163844" source="BUGZILLA"/>
		<reference ref_id="1163845" ref_url="https://bugzilla.suse.com/1163845" source="BUGZILLA"/>
		<reference ref_id="1163846" ref_url="https://bugzilla.suse.com/1163846" source="BUGZILLA"/>
		<reference ref_id="1163849" ref_url="https://bugzilla.suse.com/1163849" source="BUGZILLA"/>
		<reference ref_id="1163850" ref_url="https://bugzilla.suse.com/1163850" source="BUGZILLA"/>
		<reference ref_id="1163851" ref_url="https://bugzilla.suse.com/1163851" source="BUGZILLA"/>
		<reference ref_id="1163852" ref_url="https://bugzilla.suse.com/1163852" source="BUGZILLA"/>
		<reference ref_id="1163853" ref_url="https://bugzilla.suse.com/1163853" source="BUGZILLA"/>
		<reference ref_id="1163855" ref_url="https://bugzilla.suse.com/1163855" source="BUGZILLA"/>
		<reference ref_id="1163856" ref_url="https://bugzilla.suse.com/1163856" source="BUGZILLA"/>
		<reference ref_id="1163857" ref_url="https://bugzilla.suse.com/1163857" source="BUGZILLA"/>
		<reference ref_id="1163858" ref_url="https://bugzilla.suse.com/1163858" source="BUGZILLA"/>
		<reference ref_id="1163859" ref_url="https://bugzilla.suse.com/1163859" source="BUGZILLA"/>
		<reference ref_id="1163860" ref_url="https://bugzilla.suse.com/1163860" source="BUGZILLA"/>
		<reference ref_id="1163861" ref_url="https://bugzilla.suse.com/1163861" source="BUGZILLA"/>
		<reference ref_id="1163862" ref_url="https://bugzilla.suse.com/1163862" source="BUGZILLA"/>
		<reference ref_id="1163863" ref_url="https://bugzilla.suse.com/1163863" source="BUGZILLA"/>
		<reference ref_id="1163867" ref_url="https://bugzilla.suse.com/1163867" source="BUGZILLA"/>
		<reference ref_id="1163869" ref_url="https://bugzilla.suse.com/1163869" source="BUGZILLA"/>
		<reference ref_id="1163880" ref_url="https://bugzilla.suse.com/1163880" source="BUGZILLA"/>
		<reference ref_id="1164051" ref_url="https://bugzilla.suse.com/1164051" source="BUGZILLA"/>
		<reference ref_id="1164069" ref_url="https://bugzilla.suse.com/1164069" source="BUGZILLA"/>
		<reference ref_id="1164098" ref_url="https://bugzilla.suse.com/1164098" source="BUGZILLA"/>
		<reference ref_id="1164115" ref_url="https://bugzilla.suse.com/1164115" source="BUGZILLA"/>
		<reference ref_id="1164314" ref_url="https://bugzilla.suse.com/1164314" source="BUGZILLA"/>
		<reference ref_id="1164315" ref_url="https://bugzilla.suse.com/1164315" source="BUGZILLA"/>
		<reference ref_id="1164388" ref_url="https://bugzilla.suse.com/1164388" source="BUGZILLA"/>
		<reference ref_id="1164471" ref_url="https://bugzilla.suse.com/1164471" source="BUGZILLA"/>
		<reference ref_id="1164598" ref_url="https://bugzilla.suse.com/1164598" source="BUGZILLA"/>
		<reference ref_id="1164632" ref_url="https://bugzilla.suse.com/1164632" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14615" ref_url="https://www.suse.com/security/cve/CVE-2019-14615/" source="CVE"/>
		<reference ref_id="CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896/" source="CVE"/>
		<reference ref_id="CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897/" source="CVE"/>
		<reference ref_id="CVE-2019-16746" ref_url="https://www.suse.com/security/cve/CVE-2019-16746/" source="CVE"/>
		<reference ref_id="CVE-2019-16994" ref_url="https://www.suse.com/security/cve/CVE-2019-16994/" source="CVE"/>
		<reference ref_id="CVE-2019-18808" ref_url="https://www.suse.com/security/cve/CVE-2019-18808/" source="CVE"/>
		<reference ref_id="CVE-2019-19036" ref_url="https://www.suse.com/security/cve/CVE-2019-19036/" source="CVE"/>
		<reference ref_id="CVE-2019-19045" ref_url="https://www.suse.com/security/cve/CVE-2019-19045/" source="CVE"/>
		<reference ref_id="CVE-2019-19051" ref_url="https://www.suse.com/security/cve/CVE-2019-19051/" source="CVE"/>
		<reference ref_id="CVE-2019-19054" ref_url="https://www.suse.com/security/cve/CVE-2019-19054/" source="CVE"/>
		<reference ref_id="CVE-2019-19066" ref_url="https://www.suse.com/security/cve/CVE-2019-19066/" source="CVE"/>
		<reference ref_id="CVE-2019-19318" ref_url="https://www.suse.com/security/cve/CVE-2019-19318/" source="CVE"/>
		<reference ref_id="CVE-2019-19319" ref_url="https://www.suse.com/security/cve/CVE-2019-19319/" source="CVE"/>
		<reference ref_id="CVE-2019-19332" ref_url="https://www.suse.com/security/cve/CVE-2019-19332/" source="CVE"/>
		<reference ref_id="CVE-2019-19338" ref_url="https://www.suse.com/security/cve/CVE-2019-19338/" source="CVE"/>
		<reference ref_id="CVE-2019-19447" ref_url="https://www.suse.com/security/cve/CVE-2019-19447/" source="CVE"/>
		<reference ref_id="CVE-2019-19523" ref_url="https://www.suse.com/security/cve/CVE-2019-19523/" source="CVE"/>
		<reference ref_id="CVE-2019-19526" ref_url="https://www.suse.com/security/cve/CVE-2019-19526/" source="CVE"/>
		<reference ref_id="CVE-2019-19527" ref_url="https://www.suse.com/security/cve/CVE-2019-19527/" source="CVE"/>
		<reference ref_id="CVE-2019-19532" ref_url="https://www.suse.com/security/cve/CVE-2019-19532/" source="CVE"/>
		<reference ref_id="CVE-2019-19533" ref_url="https://www.suse.com/security/cve/CVE-2019-19533/" source="CVE"/>
		<reference ref_id="CVE-2019-19535" ref_url="https://www.suse.com/security/cve/CVE-2019-19535/" source="CVE"/>
		<reference ref_id="CVE-2019-19537" ref_url="https://www.suse.com/security/cve/CVE-2019-19537/" source="CVE"/>
		<reference ref_id="CVE-2019-19767" ref_url="https://www.suse.com/security/cve/CVE-2019-19767/" source="CVE"/>
		<reference ref_id="CVE-2019-19927" ref_url="https://www.suse.com/security/cve/CVE-2019-19927/" source="CVE"/>
		<reference ref_id="CVE-2019-19965" ref_url="https://www.suse.com/security/cve/CVE-2019-19965/" source="CVE"/>
		<reference ref_id="CVE-2019-19966" ref_url="https://www.suse.com/security/cve/CVE-2019-19966/" source="CVE"/>
		<reference ref_id="CVE-2019-20054" ref_url="https://www.suse.com/security/cve/CVE-2019-20054/" source="CVE"/>
		<reference ref_id="CVE-2019-20095" ref_url="https://www.suse.com/security/cve/CVE-2019-20095/" source="CVE"/>
		<reference ref_id="CVE-2019-20096" ref_url="https://www.suse.com/security/cve/CVE-2019-20096/" source="CVE"/>
		<reference ref_id="CVE-2020-7053" ref_url="https://www.suse.com/security/cve/CVE-2020-7053/" source="CVE"/>
		<reference ref_id="CVE-2020-8428" ref_url="https://www.suse.com/security/cve/CVE-2020-8428/" source="CVE"/>
		<reference ref_id="CVE-2020-8648" ref_url="https://www.suse.com/security/cve/CVE-2020-8648/" source="CVE"/>
		<reference ref_id="CVE-2020-8992" ref_url="https://www.suse.com/security/cve/CVE-2020-8992/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006546.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures for some Intel(R) Processors (bnc#1160195).
- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bnc#1157157).
- CVE-2019-14897: A stack-based buffer overflow was found in the Marvell WiFi driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bnc#1157155).
- CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c. It did not check the length of variable elements in a beacon head, leading to a buffer overflow (bnc#1152107).
- CVE-2019-16994: A memory leak existed in sit_init_net() in net/ipv6/sit.c which might have caused denial of service, aka CID-07f12b26e21a (bnc#1161523).
- CVE-2019-18808: A memory leak in drivers/crypto/ccp/ccp-ops.c allowed attackers to cause a denial of service (memory consumption), aka CID-128c66429247 (bnc#1156259).
- CVE-2019-19036: An issue discovered in btrfs_root_node in fs/btrfs/ctree.c allowed a NULL pointer dereference because rcu_dereference(root-&gt;node) can be zero (bnc#1157692).
- CVE-2019-19045: A memory leak in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c allowed attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7 (bnc#1161522).
- CVE-2019-19051: A memory leak in drivers/net/wimax/i2400m/op-rfkill.c allowed attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7 (bnc#1159024).
- CVE-2019-19054: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c allowed attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b (bnc#1161518).
- CVE-2019-19066: A memory leak in drivers/scsi/bfa/bfad_attr.c allowed attackers to cause a denial of service (memory consumption), aka CID-0e62395da2bd (bnc#1157303).
- CVE-2019-19318: Mounting a crafted btrfs image twice could have caused a use-after-free (bnc#1158026).
- CVE-2019-19319: A slab-out-of-bounds write access could have occured when setxattr was called after mounting of a specially crafted ext4 image (bnc#1158021).
- CVE-2019-19332: An out-of-bounds memory write issue was found in the way the KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could have used this flaw to crash the system (bnc#1158827).
- CVE-2019-19338: There was an incomplete fix for an issue with Transactional Synchronisation Extensions in the KVM code (bsc#1158954).
- CVE-2019-19447: Mounting a crafted ext4 filesystem image, performing some operations, and unmounting could have led to a use-after-free in fs/ext4/super.c (bnc#1158819).
- CVE-2019-19523: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79 (bsc#1158823).
- CVE-2019-19526: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af3aa57a098 (bsc#1158893).
- CVE-2019-19527: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e (bsc#1158900).
- CVE-2019-19532: There were multiple out-of-bounds write bugs that can be caused by a malicious USB HID device, aka CID-d9d4b1e46d95 (bsc#1158824).
- CVE-2019-19533: There was an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464 (bsc#1158834).
- CVE-2019-19535: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042 (bsc#1158903).
- CVE-2019-19537: There was a race condition bug that could be caused by a malicious USB character device, aka CID-303911cfc5b9. (bsc#1158904).
- CVE-2019-19767: There were multiple use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163 (bnc#1159297).
- CVE-2019-19927: A slab-out-of-bounds read access could have been caused when mounting a crafted f2fs filesystem image and performing some operations on it, in drivers/gpu/drm/ttm/ttm_page_alloc.c (bnc#1160147).
- CVE-2019-19965: There was a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5 (bnc#1159911).
- CVE-2019-19966: There was a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that could have caused a denial of service, aka CID-dea37a972655 (bnc#1159841).
- CVE-2019-20054: There was a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e (bnc#1159910).
- CVE-2019-20095: Several memory leaks were found in drivers/net/wireless/marvell/mwifiex/cfg80211.c, aka CID-003b686ace82 (bnc#1159909).
- CVE-2019-20096: There was a memory leak in __feat_register_sp() in net/dccp/feat.c, aka CID-1d3ff0950e2b (bnc#1159908).
- CVE-2020-7053: There was a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c (bnc#1160966).
- CVE-2020-8428: There was a use-after-free bug in fs/namei.c, which allowed local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9 (bnc#1162109).
- CVE-2020-8648: There was a use-after-free vulnerability in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bnc#1162928).
- CVE-2020-8992: An issue was discovered in ext4_protect_reserved_inode in fs/ext4/block_validity.c that allowed attackers to cause a soft lockup via a crafted journal size (bnc#1164069).


The following non-security bugs were fixed:

- 6pack,mkiss: fix possible deadlock (bsc#1051510).
- a typo in %kernel_base_conflicts macro name
- ACPI / APEI: Do not wait to serialise with oops messages when panic()ing (bsc#1051510).
- ACPI / APEI: Switch estatus pool to use vmalloc memory (bsc#1051510).
- ACPI / LPSS: Ignore acpi_device_fix_up_power() return value (bsc#1051510).
- ACPI / video: Add force_none quirk for Dell OptiPlex 9020M (bsc#1051510).
- ACPI / watchdog: Fix init failure with overlapping register regions (bsc#1162557).
- ACPI / watchdog: Set default timeout in probe (bsc#1162557).
- ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data() (bsc#1051510).
- ACPI: fix acpi_find_child_device() invocation in acpi_preset_companion() (bsc#1051510).
- ACPI: OSL: only free map once in osl.c (bsc#1051510).
- ACPI: PM: Avoid attaching ACPI PM domain to certain devices (bsc#1051510).
- ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 (bsc#1051510).
- ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards (bsc#1051510).
- ACPI: watchdog: Allow disabling WDAT at boot (bsc#1162557).
- af_packet: set defaule value for tmo (bsc#1051510).
- ALSA: control: remove useless assignment in .info callback of PCM chmap element (git-fixes).
- ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
- ALSA: echoaudio: simplify get_audio_levels (bsc#1051510).
- ALSA: fireface: fix return value in error path of isochronous resources reservation (bsc#1051510).
- ALSA: hda - Add docking station support for Lenovo Thinkpad T420s (git-fixes).
- ALSA: hda - Apply sync-write workaround to old Intel platforms, too (bsc#1111666).
- ALSA: hda - constify and cleanup static NodeID tables (bsc#1111666).
- ALSA: hda - Downgrade error message for single-cmd fallback (git-fixes).
- ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen (git-fixes).
- ALSA: hda/analog - Minor optimization for SPDIF mux connections (git-fixes).
- ALSA: hda/ca0132 - Avoid endless loop (git-fixes).
- ALSA: hda/ca0132 - Fix work handling in delayed HP detection (git-fixes).
- ALSA: hda/ca0132 - Keep power on during processing DSP response (git-fixes).
- ALSA: hda/hdmi - Add new pci ids for AMD GPU display audio (git-fixes).
- ALSA: hda/hdmi - add retry logic to parse_intel_hdmi() (git-fixes).
- ALSA: hda/hdmi - Clean up Intel platform-specific fixup checks (bsc#1111666).
- ALSA: hda/hdmi - fix atpx_present when CLASS is not VGA (bsc#1051510).
- ALSA: hda/hdmi - Fix duplicate unref of pci_dev (bsc#1051510).
- ALSA: hda/hdmi - fix vgaswitcheroo detection for AMD (git-fixes).
- ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker (bsc#1111666).
- ALSA: hda/realtek - Add headset Mic no shutup for ALC283 (bsc#1051510).
- ALSA: hda/realtek - Add Headset Mic supported for HP cPC (bsc#1111666).
- ALSA: hda/realtek - Add new codec supported for ALCS1200A (bsc#1111666).
- ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen (bsc#1111666).
- ALSA: hda/realtek - Apply mic mute LED quirk for Dell E7xx laptops, too (bsc#1111666).
- ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 (git-fixes).
- ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC (bsc#1111666).
- ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G (git-fixes).
- ALSA: hda/realtek - Fix silent output on MSI-GL73 (git-fixes).
- ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported (bsc#1111666).
- ALSA: hda/realtek - Line-out jack does not work on a Dell AIO (bsc#1051510).
- ALSA: hda/realtek - More constifications (bsc#1111666).
- ALSA: hda/realtek - Set EAPD control to default for ALC222 (bsc#1111666).
- ALSA: hda: Add Clevo W65_67SB the power_save blacklist (git-fixes).
- ALSA: hda: Add JasperLake PCI ID and codec vid (bsc#1111666).
- ALSA: hda: Clear RIRB status before reading WP (bsc#1111666).
- ALSA: hda: constify copied structure (bsc#1111666).
- ALSA: hda: Constify snd_kcontrol_new items (bsc#1111666).
- ALSA: hda: Constify snd_pci_quirk tables (bsc#1111666).
- ALSA: hda: correct kernel-doc parameter descriptions (bsc#1111666).
- ALSA: hda: hdmi - add Tigerlake support (bsc#1111666).
- ALSA: hda: hdmi - fix pin setup on Tigerlake (bsc#1111666).
- ALSA: hda: More constifications (bsc#1111666).
- ALSA: hda: patch_hdmi: remove warnings with empty body (bsc#1111666).
- ALSA: hda: patch_realtek: fix empty macro usage in if block (bsc#1111666).
- ALSA: hda: Reset stream if DMA RUN bit not cleared (bsc#1111666).
- ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs (git-fixes).
- ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code (bsc#1051510).
- ALSA: oxfw: fix return value in error path of isochronous resources reservation (bsc#1051510).
- ALSA: pcm: Avoid possible info leaks from PCM stream buffers (git-fixes).
- ALSA: pcm: oss: Avoid potential buffer overflows (git-fixes).
- ALSA: seq: Avoid concurrent access to queue flags (git-fixes).
- ALSA: seq: Fix concurrent access to queue current tick/time (git-fixes).
- ALSA: seq: Fix racy access for queue timer in proc read (bsc#1051510).
- ALSA: sh: Fix compile warning wrt const (git-fixes).
- ALSA: sh: Fix unused variable warnings (bsc#1111666).
- ALSA: usb-audio: Apply sample rate quirk for Audioengine D1 (git-fixes).
- ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 (bsc#1111666).
- ALSA: usb-audio: Fix endianess in descriptor validation (bsc#1111666).
- ALSA: usb-audio: fix set_format altsetting sanity check (bsc#1051510).
- ALSA: usb-audio: fix sync-ep altsetting sanity check (bsc#1051510).
- apparmor: fix unsigned len comparison with less than zero (git-fixes).
- ar5523: check NULL before memcpy() in ar5523_cmd() (bsc#1051510).
- arm64: Revert support for execute-only user mappings (bsc#1160218).
- ASoC: au8540: use 64-bit arithmetic instead of 32-bit (bsc#1051510).
- ASoC: compress: fix unsigned integer overflow check (bsc#1051510).
- ASoC: cs4349: Use PM ops 'cs4349_runtime_pm' (bsc#1051510).
- ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report (bsc#1051510).
- ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1 (bsc#1051510).
- ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI (bsc#1111666).
- ASoC: sun8i-codec: Fix setting DAI data format (git-fixes).
- ASoC: wm8962: fix lambda value (git-fixes).
- ata: ahci: Add shutdown to freeze hardware resources of ahci (bsc#1164388).
- ath10k: Correct the DMA direction for management tx buffers (bsc#1111666).
- ath10k: fix fw crash by moving chip reset after napi disabled (bsc#1051510).
- ath10k: pci: Fix comment on ath10k_pci_dump_memory_sram (bsc#1111666).
- ath10k: pci: Only dump ATH10K_MEM_REGION_TYPE_IOREG when safe (bsc#1111666).
- ath6kl: Fix off by one error in scan completion (bsc#1051510).
- ath9k: fix storage endpoint lookup (git-fixes).
- atl1e: checking the status of atl1e_write_phy_reg (bsc#1051510).
- audit: Allow auditd to set pid to 0 to end auditing (bsc#1158094).
- batman-adv: Fix DAT candidate selection on little endian systems (bsc#1051510).
- bcache: add code comment bch_keylist_pop() and bch_keylist_pop_front() (bsc#1163762).
- bcache: add code comments for state-&gt;pool in __btree_sort() (bsc#1163762).
- bcache: add code comments in bch_btree_leaf_dirty() (bsc#1163762).
- bcache: add cond_resched() in __bch_cache_cmp() (bsc#1163762).
- bcache: add idle_max_writeback_rate sysfs interface (bsc#1163762).
- bcache: add more accurate error messages in read_super() (bsc#1163762).
- bcache: add readahead cache policy options via sysfs interface (bsc#1163762).
- bcache: at least try to shrink 1 node in bch_mca_scan() (bsc#1163762).
- bcache: avoid unnecessary btree nodes flushing in btree_flush_write() (bsc#1163762).
- bcache: check return value of prio_read() (bsc#1163762).
- bcache: deleted code comments for dead code in bch_data_insert_keys() (bsc#1163762).
- bcache: do not export symbols (bsc#1163762).
- bcache: explicity type cast in bset_bkey_last() (bsc#1163762).
- bcache: fix a lost wake-up problem caused by mca_cannibalize_lock (bsc#1163762).
- bcache: Fix an error code in bch_dump_read() (bsc#1163762).
- bcache: fix deadlock in bcache_allocator (bsc#1163762).
- bcache: fix incorrect data type usage in btree_flush_write() (bsc#1163762).
- bcache: fix memory corruption in bch_cache_accounting_clear() (bsc#1163762).
- bcache: fix static checker warning in bcache_device_free() (bsc#1163762).
- bcache: ignore pending signals when creating gc and allocator thread (bsc#1163762, bsc#1112504).
- bcache: print written and keys in trace_bcache_btree_write (bsc#1163762).
- bcache: reap c-&gt;btree_cache_freeable from the tail in bch_mca_scan() (bsc#1163762).
- bcache: reap from tail of c-&gt;btree_cache in bch_mca_scan() (bsc#1163762).
- bcache: remove macro nr_to_fifo_front() (bsc#1163762).
- bcache: remove member accessed from struct btree (bsc#1163762).
- bcache: remove the extra cflags for request.o (bsc#1163762).
- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (bsc#1163762, bsc#1112504).
- bcma: remove set but not used variable 'sizel' (git-fixes).
- blk-mq: avoid sysfs buffer overflow with too many CPU cores (bsc#1159377).
- blk-mq: avoid sysfs buffer overflow with too many CPU cores (bsc#1163840).
- blk-mq: make sure that line break can be printed (bsc#1159377).
- blk-mq: make sure that line break can be printed (bsc#1164098).
- Bluetooth: Fix race condition in hci_release_sock() (bsc#1051510).
- Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading (bsc#1051510).
- bnxt: apply computed clamp value for coalece parameter (bsc#1104745).
- bnxt_en: Fix MSIX request logic for RDMA driver (bsc#1104745 ).
- bnxt_en: Return error if FW returns more data than dump length (bsc#1104745).
- bonding: fix active-backup transition after link failure (git-fixes).
- bonding: fix potential NULL deref in bond_update_slave_arr (bsc#1051510).
- bonding: fix slave stuck in BOND_LINK_FAIL state (networking-stable-19_11_10).
- bonding: fix state transition issue in link monitoring (networking-stable-19_11_10).
- bonding: fix unexpected IFF_BONDING bit unset (bsc#1051510).
- bpf, offload: Unlock on error in bpf_offload_dev_create() (bsc#1109837).
- bpf/sockmap: Read psock ingress_msg before sk_receive_queue (bsc#1083647).
- bpf/stackmap: Fix deadlock with rq_lock in bpf_get_stack() (bsc#1083647).
- bpf: add self-check logic to liveness analysis (bsc#1160618).
- bpf: add verifier stats and log_level bit 2 (bsc#1160618).
- bpf: Fix incorrect verifier simulation of ARSH under ALU32 (bsc#1083647).
- bpf: improve stacksafe state comparison (bco#1160618).
- bpf: improve verification speed by droping states (bsc#1160618).
- bpf: improve verification speed by not remarking live_read (bsc#1160618).
- bpf: improve verifier branch analysis (bsc#1160618).
- bpf: increase complexity limit and maximum program size (bsc#1160618).
- bpf: increase verifier log limit (bsc#1160618).
- bpf: Make use of probe_user_write in probe write helper (bsc#1083647).
- bpf: Reject indirect var_off stack access in raw mode (bsc#1160618).
- bpf: Reject indirect var_off stack access in unpriv mode (bco#1160618).
- bpf: Sanity check max value for var_off stack access (bco#1160618).
- bpf: skmsg, fix potential psock NULL pointer dereference (bsc#1109837).
- bpf: speed up stacksafe check (bco#1160618).
- bpf: Support variable offset stack access from helpers (bco#1160618).
- bpf: verifier: teach the verifier to reason about the BPF_JSET instruction (bco#1160618).
- brcmfmac: fix interface sanity check (git-fixes).
- brcmfmac: Fix memory leak in brcmf_p2p_create_p2pdev() (bsc#1111666).
- brcmfmac: Fix memory leak in brcmf_usbdev_qinit (git-fixes).
- brcmfmac: Fix use after free in brcmf_sdio_readframes() (git-fixes).
- brcmfmac: sdio: Fix OOB interrupt initialization on brcm43362 (bsc#1111666).
- brcmfmac: set F2 watermark to 256 for 4373 (bsc#1111666).
- brcmfmac: set SDIO F1 MesBusyCtrl for CYW4373 (bsc#1111666).
- btrfs: abort transaction after failed inode updates in create_subvol (bsc#1161936).
- btrfs: add missing extents release on file extent cluster relocation error (bsc#1159483).
- btrfs: avoid fallback to transaction commit during fsync of files with holes (bsc#1159569).
- btrfs: dev-replace: remove warning for unknown return codes when finished (dependency for bsc#1162067).
- btrfs: do not call synchronize_srcu() in inode_tree_del (bsc#1161934).
- btrfs: do not double lock the subvol_sem for rename exchange (bsc#1162943).
- btrfs: Ensure we trim ranges across block group boundary (bsc#1151910).
- btrfs: fix block group remaining RO forever after error during device replace (bsc#1160442).
- btrfs: fix btrfs_write_inode vs delayed iput deadlock (bsc#1154243).
- btrfs: fix infinite loop during fsync after rename operations (bsc#1163383).
- btrfs: fix infinite loop during nocow writeback due to race (bsc#1160804).
- btrfs: fix integer overflow in calc_reclaim_items_nr (bsc#1160433).
- btrfs: fix missing data checksums after replaying a log tree (bsc#1161931).
- btrfs: fix negative subv_writers counter and data space leak after buffered write (bsc#1160802).
- btrfs: fix race between adding and putting tree mod seq elements and nodes (bsc#1163384).
- btrfs: fix removal logic of the tree mod log that leads to use-after-free issues (bsc#1160803).
- btrfs: fix selftests failure due to uninitialized i_mode in test inodes (Fix for dependency of bsc#1157692).
- btrfs: handle ENOENT in btrfs_uuid_tree_iterate (bsc#1161937).
- btrfs: harden agaist duplicate fsid on scanned devices (bsc#1134973).
- btrfs: inode: Verify inode mode to avoid NULL pointer dereference (dependency for bsc#1157692).
- btrfs: make tree checker detect checksum items with overlapping ranges (bsc#1161931).
- btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it (dependency for bsc#1157692).
- btrfs: record all roots for rename exchange on a subvol (bsc#1161933).
- btrfs: relocation: fix reloc_root lifespan and access (bsc#1159588).
- btrfs: scrub: Require mandatory block group RO for dev-replace (bsc#1162067).
- btrfs: send, skip backreference walking for extents with many references (bsc#1162139).
- btrfs: simplify inode locking for RWF_NOWAIT (git-fixes).
- btrfs: skip log replay on orphaned roots (bsc#1161935).
- btrfs: tree-checker: Check chunk item at tree block read time (dependency for bsc#1157692).
- btrfs: tree-checker: Check level for leaves and nodes (dependency for bsc#1157692).
- btrfs: tree-checker: Enhance chunk checker to validate chunk profile (dependency for bsc#1157692).
- btrfs: tree-checker: Fix wrong check on max devid (fixes for dependency of bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in block_group_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_block_group_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_csum_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_dev_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_dir_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_extent_data_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_inode_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_leaf (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_leaf_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in chunk_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in dev_item_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in dir_item_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in file_extent_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in generic_err (dependency for bsc#1157692).
- btrfs: tree-checker: Make btrfs_check_chunk_valid() return EUCLEAN instead of EIO (dependency for bsc#1157692).
- btrfs: tree-checker: Make chunk item checker messages more readable (dependency for bsc#1157692).
- btrfs: tree-checker: Verify dev item (dependency for bsc#1157692).
- btrfs: tree-checker: Verify inode item (dependency for bsc#1157692).
- btrfs: volumes: Use more straightforward way to calculate map length (bsc#1151910).
- can, slip: Protect tty-&gt;disc_data in write_wakeup and close with RCU (bsc#1051510).
- can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs (bsc#1051510).
- can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open (bsc#1051510).
- can: gs_usb: gs_usb_probe(): use descriptors of current altsetting (bsc#1051510).
- can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling to irq mode (bsc#1051510).
- can: peak_usb: report bus recovery as well (bsc#1051510).
- can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error (bsc#1051510).
- can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error (bsc#1051510).
- can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on queue overflow or OOM (bsc#1051510).
- can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate error value in case of errors (bsc#1051510).
- can: slcan: Fix use-after-free Read in slcan_open (bsc#1051510).
- CDC-NCM: handle incomplete transfer of MTU (networking-stable-19_11_10).
- cdrom: respect device capabilities during opening action (boo#1164632).
- cfg80211/mac80211: make ieee80211_send_layer2_update a public function (bsc#1051510).
- cfg80211: check for set_wiphy_params (bsc#1051510).
- cfg80211: fix deadlocks in autodisconnect work (bsc#1111666).
- cfg80211: fix memory leak in cfg80211_cqm_rssi_update (bsc#1111666).
- cfg80211: fix page refcount issue in A-MSDU decap (bsc#1051510).
- cgroup: pids: use atomic64_t for pids-&gt;limit (bsc#1161514).
- chardev: Avoid potential use-after-free in 'chrdev_open()' (bsc#1163849).
- cifs: add support for flock (bsc#1144333).
- cifs: Close cached root handle only if it had a lease (bsc#1144333).
- cifs: Close open handle after interrupted close (bsc#1144333).
- cifs: close the shared root handle on tree disconnect (bsc#1144333).
- cifs: Do not miss cancelled OPEN responses (bsc#1144333).
- cifs: Fix lookup of root ses in DFS referral cache (bsc#1144333).
- cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333).
- cifs: fix mount option display for sec=krb5i (bsc#1161907).
- cifs: Fix mount options set in automount (bsc#1144333).
- cifs: Fix NULL pointer dereference in mid callback (bsc#1144333).
- cifs: Fix NULL-pointer dereference in smb2_push_mandatory_locks (bsc#1144333).
- cifs: Fix potential softlockups while refreshing DFS cache (bsc#1144333).
- cifs: Fix retrieval of DFS referrals in cifs_mount() (bsc#1144333).
- cifs: Fix use-after-free bug in cifs_reconnect() (bsc#1144333).
- cifs: Properly process SMB3 lease breaks (bsc#1144333).
- cifs: remove set but not used variables 'cinode' and 'netfid' (bsc#1144333).
- cifs: Respect O_SYNC and O_DIRECT flags during reconnect (bsc#1144333).
- clk: Do not try to enable critical clocks if prepare failed (bsc#1051510).
- clk: imx: clk-composite-8m: add lock to gate/mux (git-fixes).
- clk: mmp2: Fix the order of timer mux parents (bsc#1051510).
- clk: qcom: rcg2: Do not crash if our parent can't be found; return an error (bsc#1051510).
- clk: rockchip: fix I2S1 clock gate register for rk3328 (bsc#1051510).
- clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328 (bsc#1051510).
- clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering (bsc#1051510).
- clk: rockchip: fix rk3188 sclk_smc gate data (bsc#1051510).
- clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock (bsc#1051510).
- clk: sunxi: sun9i-mmc: Implement reset callback for reset controls (bsc#1051510).
- clk: tegra: Mark fuse clock as critical (bsc#1051510).
- clocksource/drivers/bcm2835_timer: Fix memory leak of timer (bsc#1051510).
- clocksource: Prevent double add_timer_on() for watchdog_timer (bsc#1051510).
- closures: fix a race on wakeup from closure_sync (bsc#1163762).
- configfs_register_group() shouldn't be (and isn't) called in rmdirable parts (bsc#1051510).
- copy/pasted 'Recommends:' instead of 'Provides:', 'Obsoletes:' and 'Conflicts:
- Cover up kABI breakage due to DH key verification (bsc#1155331).
- crypto: af_alg - Use bh_lock_sock in sk_destruct (bsc#1051510).
- crypto: api - Check spawn-&gt;alg under lock in crypto_drop_spawn (bsc#1051510).
- crypto: api - Fix race condition in crypto_spawn_alg (bsc#1051510).
- crypto: atmel-sha - fix error handling when setting hmac key (bsc#1051510).
- crypto: caam/qi2 - fix typo in algorithm's driver name (bsc#1111666).
- crypto: ccp - fix uninitialized list head (bsc#1051510).
- crypto: chelsio - fix writing tfm flags to wrong place (bsc#1051510).
- crypto: dh - add public key verification test (bsc#1155331).
- crypto: dh - fix calculating encoded key size (bsc#1155331).
- crypto: dh - fix memory leak (bsc#1155331).
- crypto: dh - update test for public key verification (bsc#1155331).
- crypto: DRBG - add FIPS 140-2 CTRNG for noise source (bsc#1155334).
- crypto: ecdh - add public key verification test (bsc#1155331).
- crypto: ecdh - fix typo of P-192 b value (bsc#1155331).
- crypto: mxc-scc - fix build warnings on ARM64 (bsc#1051510).
- crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (bsc#1051510).
- crypto: picoxcell - adjust the position of tasklet_init and fix missed tasklet_kill (bsc#1051510).
- crypto: reexport crypto_shoot_alg() (bsc#1051510, kABI fix).
- cxgb4: request the TX CIDX updates to status page (bsc#1127371).
- dma-buf: Fix memory leak in sync_file_merge() (git-fixes).
- dma-mapping: fix return type of dma_set_max_seg_size() (bsc#1051510).
- dmaengine: coh901318: Fix a double-lock bug (bsc#1051510).
- dmaengine: coh901318: Remove unused variable (bsc#1051510).
- dmaengine: Fix access to uninitialized dma_slave_caps (bsc#1051510).
- Documentation: Document arm64 kpti control (bsc#1162623).
- drivers/base/memory.c: cache blocks in radix tree to accelerate lookup (bsc#1159955 ltc#182993).
- drivers/base/memory.c: do not access uninitialized memmaps in soft_offline_page_store() (bsc#1051510).
- drivers/base/platform.c: kmemleak ignore a known leak (bsc#1051510).
- drivers/regulator: fix a missing check of return value (bsc#1051510).
- drm/amd/display: Retrain dongles when SINK_COUNT becomes non-zero (bsc#1111666).
- drm/amd/powerplay: remove set but not used variable 'us_mvdd' (bsc#1111666).
- drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc (bsc#1111666).
- drm/amdgpu: add function parameter description in 'amdgpu_device_set_cg_state' (bsc#1111666).
- drm/amdgpu: add function parameter description in 'amdgpu_gart_bind' (bsc#1051510).
- drm/amdgpu: fix bad DMA from INTERRUPT_CNTL2 (bsc#1114279)
- drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2) (bsc#1111666).
- drm/amdgpu: remove 4 set but not used variable in amdgpu_atombios_get_connector_info_from_object_table (bsc#1051510).
- drm/amdgpu: remove always false comparison in 'amdgpu_atombios_i2c_process_i2c_ch' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'amdgpu_connector' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'dig' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'dig_connector' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'invalid' (bsc#1111666).
- drm/amdgpu: remove set but not used variable 'mc_shared_chmap' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'mc_shared_chmap' from 'gfx_v6_0.c' and 'gfx_v7_0.c' (bsc#1051510).
- drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ (bsc#1051510).
- drm/fb-helper: Round up bits_per_pixel if possible (bsc#1051510).
- drm/i810: Prevent underflow in ioctl (bsc#1114279)
- drm/i915/gvt: Pin vgpu dma address before using (bsc#1112178)
- drm/i915/gvt: set guest display buffer as readonly (bsc#1112178)
- drm/i915/gvt: use vgpu lock for active state setting (bsc#1112178)
- drm/i915/perf: add missing delay for OA muxes configuration (bsc#1111666).
- drm/i915: Add missing include file &lt;linux/math64.h&gt; (bsc#1051510).
- drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (bsc#1111666).
- drm/i915: Fix pid leak with banned clients (bsc#1114279)
- drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set (bsc#1111666).
- drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV (bsc#1111666).
- drm/i915: Sanity check mmap length against object size (bsc#1111666).
- drm/msm: include linux/sched/task.h (bsc#1112178)
- drm/mst: Fix MST sideband up-reply failure handling (bsc#1051510).
- drm/nouveau/bar/gf100: ensure BAR is mapped (bsc#1111666).
- drm/nouveau/bar/nv50: check bar1 vmm return value (bsc#1111666).
- drm/nouveau/mmu: qualify vmm during dtor (bsc#1111666).
- drm/nouveau/secboot/gm20b: initialize pointer in gm20b_secboot_new() (bsc#1051510).
- drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler (bsc#1051510).
- drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028)
- drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028)
- drm/radeon: fix r1xx/r2xx register checker for POT textures (bsc#1114279)
- drm/rect: Avoid division by zero (bsc#1111666).
- drm/rect: update kerneldoc for drm_rect_clip_scaled() (bsc#1111666).
- drm/rockchip: lvds: Fix indentation of a #define (bsc#1051510).
- drm/rockchip: Round up _before_ giving to the clock framework (bsc#1114279)
- drm/sun4i: hdmi: Remove duplicate cleanup calls (bsc#1113956)
- drm/sun4i: tcon: Set min division of TCON0_DCLK to 1 (bsc#1111666).
- drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model (bsc#1111666).
- drm/ttm: ttm_tt_init_fields() can be static (bsc#1111666).
- drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add (bsc#1051510).
- drm: bridge: dw-hdmi: constify copied structure (bsc#1051510).
- drm: limit to INT_MAX in create_blob ioctl (bsc#1051510).
- drm: meson: venc: cvbs: fix CVBS mode matching (bsc#1051510).
- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable (bsc#1111666).
- drm: panel-lvds: Potential Oops in probe error handling (bsc#1114279)
- e1000e: Add support for Comet Lake (bsc#1158533).
- e1000e: Add support for Tiger Lake (bsc#1158533).
- e1000e: Increase pause and refresh time (bsc#1158533).
- e100: Fix passing zero to 'PTR_ERR' warning in e100_load_ucode_wait (bsc#1051510).
- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632).
- enic: prevent waking up stopped tx queues over watchdog reset (bsc#1133147).
- exit: panic before exit_mm() on global init exit (bsc#1161549).
- ext2: check err when partial != NULL (bsc#1163859).
- ext4, jbd2: ensure panic when aborting with zero errno (bsc#1163853).
- ext4: check for directory entries too close to block end (bsc#1163861).
- ext4: fix a bug in ext4_wait_for_tail_page_commit (bsc#1163841).
- ext4: fix checksum errors with indexed dirs (bsc#1160979).
- ext4: fix deadlock allocating crypto bounce page from mempool (bsc#1163842).
- ext4: Fix mount failure with quota configured as module (bsc#1164471).
- ext4: fix mount failure with quota configured as module (bsc#1164471).
- ext4: improve explanation of a mount failure caused by a misconfigured kernel (bsc#1163843).
- extcon: max8997: Fix lack of path setting in USB device mode (bsc#1051510).
- firestream: fix memory leaks (bsc#1051510).
- fix autofs regression caused by follow_managed() changes (bsc#1159271).
- fix dget_parent() fastpath race (bsc#1159271).
- Fix partial checked out tree build ... so that bisection does not break.
- Fix the locking in dcache_readdir() and friends (bsc#1123328).
- fjes: fix missed check in fjes_acpi_add (bsc#1051510).
- fs/namei.c: fix missing barriers when checking positivity (bsc#1159271).
- fs/namei.c: pull positivity check into follow_managed() (bsc#1159271).
- fs/open.c: allow opening only regular files during execve() (bsc#1163845).
- fs: cifs: Fix atime update check vs mtime (bsc#1144333).
- fscrypt: do not set policy for a dead directory (bsc#1163846).
- ftrace: Add comment to why rcu_dereference_sched() is open coded (git-fixes).
- ftrace: Avoid potential division by zero in function profiler (bsc#1160784).
- ftrace: Protect ftrace_graph_hash with ftrace_sync (git-fixes).
- genirq/proc: Return proper error code when irq_set_affinity() fails (bnc#1105392).
- genirq: Prevent NULL pointer dereference in resend_irqs() (bsc#1051510).
- genirq: Properly pair kobject_del() with kobject_add() (bsc#1051510).
- gpio: Fix error message on out-of-range GPIO in lookup table (bsc#1051510).
- gtp: avoid zero size hashtable (networking-stable-20_01_01).
- gtp: do not allow adding duplicate tid and ms_addr pdp context (networking-stable-20_01_01).
- gtp: fix an use-after-free in ipv4_pdp_find() (networking-stable-20_01_01).
- gtp: fix wrong condition in gtp_genl_dump_pdp() (networking-stable-20_01_01).
- HID: doc: fix wrong data structure reference for UHID_OUTPUT (bsc#1051510).
- HID: hidraw, uhid: Always report EPOLLOUT (bsc#1051510).
- HID: hidraw: Fix returning EPOLLOUT from hidraw_poll (bsc#1051510).
- HID: intel-ish-hid: fixes incorrect error handling (bsc#1051510).
- HID: uhid: Fix returning EPOLLOUT from uhid_char_poll (bsc#1051510).
- hidraw: Return EPOLLOUT from hidraw_poll (bsc#1051510).
- hotplug/drc-info: Add code to search ibm,drc-info property (bsc#1157480 ltc#181028).
- hv_netvsc: Fix offset usage in netvsc_send_table() (bsc#1164598).
- hv_netvsc: Fix send_table offset in case of a host bug (bsc#1164598).
- hv_netvsc: Fix tx_table init in rndis_set_subchannel() (bsc#1164598).
- hv_netvsc: Fix unwanted rx_table reset (bsc#1164598).
- hwmon: (adt7475) Make volt2reg return same reg as reg2volt input (bsc#1051510).
- hwmon: (core) Do not use device managed functions for memory allocations (bsc#1051510).
- hwmon: (k10temp) Add support for AMD family 17h, model 70h CPUs (bsc#1163206).
- hwmon: (nct7802) Fix voltage limits to wrong registers (bsc#1051510).
- hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions (bsc#1051510).
- hwrng: stm32 - fix unbalanced pm_runtime_enable (bsc#1051510).
- i2c: imx: do not print error message on probe defer (bsc#1051510).
- IB/hfi1: Do not cancel unused work item (bsc#1114685 ).
- IB/mlx5: Fix steering rule of drop and count (bsc#1103991 ).
- IB/mlx5: Remove dead code (bsc#1103991).
- ibmveth: Detect unsupported packets before sending to the hypervisor (bsc#1159484 ltc#182983).
- ibmvnic: Bound waits for device queries (bsc#1155689 ltc#182047).
- ibmvnic: Fix completion structure initialization (bsc#1155689 ltc#182047).
- ibmvnic: Serialize device queries (bsc#1155689 ltc#182047).
- ibmvnic: Terminate waiting device threads after loss of service (bsc#1155689 ltc#182047).
- ice: fix stack leakage (bsc#1118661).
- idr: Fix idr_alloc_u32 on 32-bit systems (bsc#1051510).
- iio: adc: max9611: Fix too short conversion time delay (bsc#1051510).
- iio: buffer: align the size of scan bytes to size of the largest element (bsc#1051510).
- inet: protect against too small mtu values (networking-stable-19_12_16).
- Input: aiptek - fix endpoint sanity check (bsc#1051510).
- Input: cyttsp4_core - fix use after free bug (bsc#1051510).
- Input: goodix - add upside-down quirk for Teclast X89 tablet (bsc#1051510).
- Input: gtco - fix endpoint sanity check (bsc#1051510).
- Input: keyspan-remote - fix control-message timeouts (bsc#1051510).
- Input: pegasus_notetaker - fix endpoint sanity check (bsc#1051510).
- Input: pm8xxx-vib - fix handling of separate enable register (bsc#1051510).
- Input: rmi_f54 - read from FIFO in 32 byte blocks (bsc#1051510).
- Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register (bsc#1051510).
- Input: sur40 - fix interface sanity checks (bsc#1051510).
- Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus (bsc#1051510).
- Input: synaptics-rmi4 - do not increment rmiaddr for SMBus transfers (bsc#1051510).
- Input: synaptics-rmi4 - simplify data read in rmi_f54_work (bsc#1051510).
- iommu/amd: Fix IOMMU perf counter clobbering during init (bsc#1162617).
- iommu/arm-smmu-v3: Populate VMID field for CMDQ_OP_TLBI_NH_VA (bsc#1164314).
- iommu/io-pgtable-arm: Fix race handling in split_blk_unmap() (bsc#1164115).
- iommu/iova: Init the struct iova to fix the possible memleak (bsc#1160469).
- iommu/mediatek: Correct the flush_iotlb_all callback (bsc#1160470).
- iommu/vt-d: Unlink device if failed to add to group (bsc#1160756).
- iommu: Remove device link to group on failure (bsc#1160755).
- ipmi: Do not allow device module unload when in use (bsc#1154768).
- ipv4: Fix table id reference in fib_sync_down_addr (networking-stable-19_11_10).
- iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop (git-fixes).
- iwlwifi: change monitor DMA to be coherent (bsc#1161243).
- iwlwifi: clear persistence bit according to device family (bsc#1111666).
- iwlwifi: do not throw error when trying to remove IGTK (bsc#1051510).
- iwlwifi: mvm: fix NVM check for 3168 devices (bsc#1051510).
- iwlwifi: mvm: force TCM re-evaluation on TCM resume (bsc#1111666).
- iwlwifi: mvm: Send non offchannel traffic via AP sta (bsc#1051510).
- iwlwifi: mvm: synchronize TID queue removal (bsc#1051510).
- iwlwifi: pcie: fix erroneous print (bsc#1111666).
- iwlwifi: trans: Clear persistence bit when starting the FW (bsc#1111666).
- jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal (bsc#1163862).
- jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer (bsc#1163836).
- jbd2: Fix possible overflow in jbd2_log_space_left() (bsc#1163860).
- jbd2: make sure ESHUTDOWN to be recorded in the journal superblock (bsc#1163863).
- jbd2: move the clearing of b_modified flag to the journal_unmap_buffer() (bsc#1163880).
- jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record (bsc#1163852).
- kABI fix for 'ipmi: Do not allow device module unload when in use' (bsc#1154768).
- kABI fixup for alloc_dax_region (bsc#1158071,bsc#1160678).
- kABI workaround for can/skb.h inclusion (bsc#1051510).
- kABI/severities: Whitelist rpaphp_get_drc_props (bsc#1157480 ltc#181028).
- kABI: add _q suffix to exports that take struct dh (bsc#1155331).
- kABI: protect struct sctp_ep_common (kabi).
- kABI: Protest new fields in BPF structs (bsc#1160618).
- kconfig: fix broken dependency in randconfig-generated .config (bsc#1051510).
- kernel-binary.spec.in: do not recommend firmware for kvmsmall and azure flavor (boo#1161360).
- kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail (bsc#1160787).
- kernfs: Fix range checks in kernfs_get_target_path (bsc#1051510).
- kexec: bail out upon SIGKILL when allocating memory (git-fixes).
- KVM: Clean up __kvm_gfn_to_hva_cache_init() and its callers (bsc#1133021).
- KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails (bsc#1061840).
- KVM: PPC: Book3S PR: Fix -Werror=return-type build failure (bsc#1061840).
- KVM: PPC: Book3S PR: Free shared page if mmu initialization fails (bsc#1061840).
- KVM: s390: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl (git-fixes).
- KVM: s390: Test for bad access register and size at the start of S390_MEM_OP (git-fixes).
- KVM: SVM: Override default MMIO mask if memory encryption is enabled (bsc#1162618).
- KVM: x86: Host feature SSBD does not imply guest feature SPEC_CTRL_SSBD (bsc#1160476).
- KVM: x86: Remove a spurious export of a static function (bsc#1158954).
- lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop (bsc#1050549).
- leds: Allow to call led_classdev_unregister() unconditionally (bsc#1161674).
- leds: class: ensure workqueue is initialized before setting brightness (bsc#1161674).
- lib/scatterlist.c: adjust indentation in __sg_alloc_table (bsc#1051510).
- lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more() (bsc#1051510).
- lib: crc64: include &lt;linux/crc64.h&gt; for 'crc64_be' (bsc#1163762).
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (bsc#1153535).
- libnvdimm/pfn: Account for PAGE_SIZE &gt; info-block-size in nd_pfn_init() (bsc#1127682 bsc#1153535 ltc#175033 ltc#181834).
- libnvdimm: Fix devm_nsio_enable() kabi (bsc#1153535).
- livepatch/samples/selftest: Use klp_shadow_alloc() API correctly (bsc#1071995).
- livepatch/selftest: Clean up shadow variable names and type (bsc#1071995).
- locking/rwsem: Prevent decrement of reader count before increment (bsc#1050549).
- mac80211: Do not send Layer 2 Update frame before authorization (bsc#1051510).
- mac80211: fix ieee80211_txq_setup_flows() failure path (bsc#1111666).
- mac80211: fix station inactive_time shortly after boot (bsc#1051510).
- mac80211: Fix TKIP replay protection immediately after key setup (bsc#1051510).
- mac80211: mesh: restrict airtime metric to peered established plinks (bsc#1051510).
- macvlan: do not assume mac_header is set in macvlan_broadcast() (bsc#1051510).
- macvlan: use skb_reset_mac_header() in macvlan_queue_xmit() (bsc#1051510).
- mailbox: mailbox-test: fix null pointer if no mmio (bsc#1051510).
- md/raid0: Fix buffer overflow at debug print (bsc#1164051).
- media/v4l2-core: set pages dirty upon releasing DMA buffers (bsc#1051510).
- media: af9005: uninitialized variable printked (bsc#1051510).
- media: cec.h: CEC_OP_REC_FLAG_ values were swapped (bsc#1051510).
- media: cec: CEC 2.0-only bcast messages were ignored (git-fixes).
- media: cec: report Vendor ID after initialization (bsc#1051510).
- media: digitv: do not continue if remote control state can't be read (bsc#1051510).
- media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0 (bsc#1051510).
- media: exynos4-is: fix wrong mdev and v4l2 dev order in error path (git-fixes).
- media: gspca: zero usb_buf (bsc#1051510).
- media: iguanair: fix endpoint sanity check (bsc#1051510).
- media: ov6650: Fix control handler not freed on init error (git-fixes).
- media: ov6650: Fix crop rectangle alignment not passed back (git-fixes).
- media: ov6650: Fix incorrect use of JPEG colorspace (git-fixes).
- media: pulse8-cec: fix lost cec_transmit_attempt_done() call.
- media: pulse8-cec: return 0 when invalidating the logical address (bsc#1051510).
- media: stkwebcam: Bugfix for wrong return values (bsc#1051510).
- media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors (bsc#1051510).
- media: uvcvideo: Fix error path in control parsing failure (git-fixes).
- media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE (bsc#1051510).
- media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT (bsc#1051510).
- media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments (bsc#1051510).
- mei: bus: prefix device names on bus with the bus name (bsc#1051510).
- mfd: da9062: Fix watchdog compatible string (bsc#1051510).
- mfd: dln2: More sanity checking for endpoints (bsc#1051510).
- mfd: rn5t618: Mark ADC control register volatile (bsc#1051510).
- missing escaping of backslashes in macro expansions Fixes: f3b74b0ae86b ('rpm/kernel-subpackage-spec: Unify dependency handling.') Fixes: 3fd22e219f77 ('rpm/kernel-subpackage-spec: Fix empty Recommends tag (bsc#1143959)')
- mlxsw: spectrum_qdisc: Ignore grafting of invisible FIFO (bsc#1112374).
- mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel (bsc#1112374).
- mm, memory_hotplug: do not clear numa_node association after hot_remove (bnc#1115026).
- mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock (bsc#1159394).
- mm: memory_hotplug: use put_device() if device_register fail (bsc#1159955 ltc#182993).
- mmc: mediatek: fix CMD_TA to 2 for MT8173 HS200/HS400 mode (bsc#1051510).
- mmc: sdhci-of-esdhc: fix P2020 errata handling (bsc#1051510).
- mmc: sdhci-of-esdhc: Revert 'mmc: sdhci-of-esdhc: add erratum A-009204 support' (bsc#1051510).
- mmc: sdhci: Add a quirk for broken command queuing (git-fixes).
- mmc: sdhci: fix minimum clock rate for v3 controller (bsc#1051510).
- mmc: sdhci: Workaround broken command queuing on Intel GLK (git-fixes).
- mmc: spi: Toggle SPI polarity, do not hardcode it (bsc#1051510).
- mmc: tegra: fix SDR50 tuning override (bsc#1051510).
- moduleparam: fix parameter description mismatch (bsc#1051510).
- mod_devicetable: fix PHY module format (networking-stable-19_12_28).
- mqprio: Fix out-of-bounds access in mqprio_dump (bsc#1109837).
- mtd: fix mtd_oobavail() incoherent returned value (bsc#1051510).
- mwifiex: debugfs: correct histogram spacing, formatting (bsc#1051510).
- mwifiex: delete unused mwifiex_get_intf_num() (bsc#1111666).
- mwifiex: drop most magic numbers from mwifiex_process_tdls_action_frame() (git-fixes).
- mwifiex: fix potential NULL dereference and use after free (bsc#1051510).
- mwifiex: update set_mac_address logic (bsc#1111666).
- namei: only return -ECHILD from follow_dotdot_rcu() (bsc#1163851).
- net, sysctl: Fix compiler warning when only cBPF is present (bsc#1109837).
- net/ibmvnic: Fix typo in retry check (bsc#1155689 ltc#182047).
- net/mlx4_en: fix mlx4 ethtool -N insertion (networking-stable-19_11_25).
- net/mlx4_en: Fix wrong limitation for number of TX rings (bsc#1103989).
- net/mlx5: Accumulate levels for chains prio namespaces (bsc#1103990).
- net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq (bsc#1046303).
- net/mlx5: Update the list of the PCI supported devices (bsc#1127611).
- net/mlx5e: Fix set vf link state error flow (networking-stable-19_11_25).
- net/mlx5e: Fix SFF 8472 eeprom length (git-fixes).
- net/mlx5e: Query global pause state before setting prio2buffer (bsc#1103990).
- net/mlxfw: Fix out-of-memory error in mfa2 flash burning (bsc#1051858).
- net/sched: act_pedit: fix WARN() in the traffic path (networking-stable-19_11_25).
- net: add sendmsg_locked and sendpage_locked to af_inet6 (bsc#1144162).
- net: bridge: deny dev_set_mac_address() when unregistering (networking-stable-19_12_16).
- net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size() (git-fixes).
- net: dst: Force 4-byte alignment of dst_metrics (networking-stable-19_12_28).
- net: ena: fix napi handler misbehavior when the napi budget is zero (networking-stable-20_01_01).
- net: ethernet: octeon_mgmt: Account for second possible VLAN header (networking-stable-19_11_10).
- net: ethernet: ti: cpsw: fix extra rx interrupt (networking-stable-19_12_16).
- net: fix data-race in neigh_event_send() (networking-stable-19_11_10).
- net: hisilicon: Fix a BUG trigered by wrong bytes_compl (networking-stable-19_12_28).
- net: hns3: fix ETS bandwidth validation bug (bsc#1104353 ).
- net: nfc: nci: fix a possible sleep-in-atomic-context bug in nci_uart_tty_receive() (networking-stable-19_12_28).
- net: phy: at803x: Change error to EINVAL for invalid MAC (bsc#1051510).
- net: phy: broadcom: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: Check against net_device being NULL (bsc#1051510).
- net: phy: dp83867: Set up RGMII TX delay (bsc#1051510).
- net: phy: Fix not to call phy_resume() if PHY is not attached (bsc#1051510).
- net: phy: Fix the register offsets in Broadcom iProc mdio mux driver (bsc#1051510).
- net: phy: fixed_phy: Fix fixed_phy not checking GPIO (bsc#1051510).
- net: phy: marvell: clear wol event before setting it (bsc#1051510).
- net: phy: marvell: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: meson-gxl: check phy_write return value (bsc#1051510).
- net: phy: micrel: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: mscc: read 'vsc8531, edge-slowdown' as an u32 (bsc#1051510).
- net: phy: mscc: read 'vsc8531,vddmac' as an u32 (bsc#1051510).
- net: phy: xgene: disable clk on error paths (bsc#1051510).
- net: phy: xgmiitorgmii: Check phy_driver ready before accessing (bsc#1051510).
- net: phy: xgmiitorgmii: Check read_status results (bsc#1051510).
- net: phy: xgmiitorgmii: Support generic PHY status read (bsc#1051510).
- net: psample: fix skb_over_panic (networking-stable-19_12_03).
- net: qlogic: Fix error paths in ql_alloc_large_buffers() (networking-stable-19_12_28).
- net: rtnetlink: prevent underflows in do_setvfinfo() (networking-stable-19_11_25).
- net: sched: ensure opts_len &lt;= IP_TUNNEL_OPTS_MAX in act_tunnel_key (bsc#1109837).
- net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues (bsc#1109837).
- net: sched: fix `tc -s class show` no bstats on class with nolock subqueues (networking-stable-19_12_03).
- net: usb: lan78xx: Fix suspend/resume PHY register access error (networking-stable-19_12_28).
- net: usb: lan78xx: limit size of local TSO packets (bsc#1051510).
- net: usb: qmi_wwan: add support for DW5821e with eSIM support (networking-stable-19_11_10).
- net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules (networking-stable-19_11_18).
- netfilter: nf_queue: enqueue skbs with NULL dst (git-fixes).
- new helper: lookup_positive_unlocked() (bsc#1159271).
- NFC: fdp: fix incorrect free object (networking-stable-19_11_10).
- NFC: pn533: fix bulk-message timeout (bsc#1051510).
- NFC: pn544: Adjust indentation in pn544_hci_check_presence (git-fixes).
- NFC: st21nfca: fix double free (networking-stable-19_11_10).
- nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info (bsc#1163774).
- openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() (networking-stable-19_12_03).
- openvswitch: remove another BUG_ON() (networking-stable-19_12_03).
- openvswitch: support asymmetric conntrack (networking-stable-19_12_16).
- orinoco_usb: fix interface sanity check (git-fixes).
- PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity() (bsc#1051510).
- PCI/switchtec: Fix vep_vector_number ioread width (bsc#1051510).
- PCI: Add DMA alias quirk for Intel VCA NTB (bsc#1051510).
- PCI: Do not disable bridge BARs when assigning bus resources (bsc#1051510).
- PCI: pciehp: Avoid returning prematurely from sysfs requests (git-fixes).
- PCI: rpaphp: Add drc-info support for hotplug slot registration (bsc#1157480 ltc#181028).
- PCI: rpaphp: Annotate and correctly byte swap DRC properties (bsc#1157480 ltc#181028).
- PCI: rpaphp: Avoid a sometimes-uninitialized warning (bsc#1157480 ltc#181028).
- PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-info (bsc#1157480 ltc#181028).
- PCI: rpaphp: Do not rely on firmware feature to imply drc-info support (bsc#1157480 ltc#181028).
- PCI: rpaphp: Fix up pointer to first drc-info entry (bsc#1157480 ltc#181028).
- percpu: Separate decrypted varaibles anytime encryption can be enabled (bsc#1114279).
- perf/x86/intel: Fix inaccurate period in context switch for auto-reload (bsc#1164315).
- phy: qualcomm: Adjust indentation in read_poll_timeout (bsc#1051510).
- pinctrl: cherryview: Fix irq_valid_mask calculation (bsc#1111666).
- pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues (bsc#1051510).
- pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELF_B and SD1_CLK_B (bsc#1051510).
- pinctrl: xway: fix gpio-hog related boot issues (bsc#1051510).
- pktcdvd: remove warning on attempting to register non-passthrough dev (bsc#1051510).
- platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 (bsc#1051510).
- platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size (bsc#1051510).
- platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer (bsc#1051510).
- platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes (bsc#1051510).
- platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table (bsc#1051510).
- PM / AVS: SmartReflex: NULL check before some freeing functions is not needed (bsc#1051510).
- PM / Domains: Deal with multiple states but no governor in genpd (bsc#1051510).
- power: supply: ltc2941-battery-gauge: fix use-after-free (bsc#1051510).
- powerpc/archrandom: fix arch_get_random_seed_int() (bsc#1065729).
- powerpc/irq: fix stack overflow verification (bsc#1065729).
- powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (bsc#1065729).
- powerpc/mm: Remove kvm radix prefetch workaround for Power9 DD2.2 (bsc#1061840).
- powerpc/papr_scm: Do not enable direct map for a region by default (bsc#1129551).
- powerpc/papr_scm: Fix leaking 'bus_desc.provider_name' in some paths (bsc#1142685 ltc#179509).
- powerpc/pkeys: remove unused pkey_allows_readwrite (bsc#1065729).
- powerpc/powernv: Disable native PCIe port management (bsc#1065729).
- powerpc/pseries/hotplug-memory: Change rc variable to bool (bsc#1065729).
- powerpc/pseries/lparcfg: Fix display of Maximum Memory (bsc#1162028 ltc#181740).
- powerpc/pseries/mobility: notify network peers after migration (bsc#1152631 ltc#181798).
- powerpc/pseries/vio: Fix iommu_table use-after-free refcount warning (bsc#1065729).
- powerpc/pseries: Add cpu DLPAR support for drc-info property (bsc#1157480 ltc#181028).
- powerpc/pseries: Advance pfn if section is not present in lmb_is_removable() (bsc#1065729).
- powerpc/pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce for DDW (bsc#1065729).
- powerpc/pseries: Drop pointless static qualifier in vpa_debugfs_init() (git-fixes).
- powerpc/pseries: Enable support for ibm,drc-info property (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix bad drc_index_start value parsing of drc-info entry (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix drc-info mappings of logical cpus to drc-index (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix vector5 in ibm architecture vector table (bsc#1157480 ltc#181028).
- powerpc/pseries: Revert support for ibm,drc-info devtree property (bsc#1157480 ltc#181028).
- powerpc/security: Fix debugfs data leak on 32-bit (bsc#1065729).
- powerpc/tm: Fix clearing MSR[TS] in current when reclaiming on signal delivery (bsc#1118338 ltc#173734).
- powerpc/tools: Do not quote $objdump in scripts (bsc#1065729).
- powerpc/xive: Discard ESB load value when interrupt is invalid (bsc#1085030).
- powerpc/xive: Skip ioremap() of ESB pages for LSI interrupts (bsc#1085030).
- powerpc/xmon: do not access ASDR in VMs (bsc#1065729).
- powerpc: Allow 64bit VDSO __kernel_sync_dicache to work across ranges &gt;4GB (bnc#1151927 5.3.17).
- powerpc: Allow flush_icache_range to work across ranges &gt;4GB (bnc#1151927 5.3.17).
- powerpc: avoid adjusting memory_limit for capture kernel memory reservation (bsc#1140025 ltc#176086).
- powerpc: Enable support for ibm,drc-info devtree property (bsc#1157480 ltc#181028).
- powerpc: Fix vDSO clock_getres() (bsc#1065729).
- powerpc: reserve memory for capture kernel after hugepages init (bsc#1140025 ltc#176086).
- ppp: Adjust indentation into ppp_async_input (git-fixes).
- prevent active file list thrashing due to refault detection (VM Performance, bsc#1156286).
- pseries/drc-info: Search DRC properties for CPU indexes (bsc#1157480 ltc#181028).
- pstore/ram: Write new dumps to start of recycled zones (bsc#1051510).
- pwm: Clear chip_data in pwm_put() (bsc#1051510).
- pwm: clps711x: Fix period calculation (bsc#1051510).
- pwm: omap-dmtimer: Remove PWM chip in .remove before making it unfunctional (git-fixes).
- pwm: Remove set but not set variable 'pwm' (git-fixes).
- pxa168fb: Fix the function used to release some memory in an error (bsc#1114279)
- qede: Disable hardware gro when xdp prog is installed (bsc#1086314 bsc#1086313 bsc#1086301 ).
- qede: Fix multicast mac configuration (networking-stable-19_12_28).
- qede: fix NULL pointer deref in __qede_remove() (networking-stable-19_11_10).
- qmi_wwan: Add support for Quectel RM500Q (bsc#1051510).
- quota: Check that quota is not dirty before release (bsc#1163858).
- quota: fix livelock in dquot_writeback_dquots (bsc#1163857).
- r8152: add missing endpoint sanity check (bsc#1051510).
- r8152: get default setting of WOL before initializing (bsc#1051510).
- random: move FIPS continuous test to output functions (bsc#1155334).
- RDMA/bnxt_re: Avoid freeing MR resources if dereg fails (bsc#1050244).
- RDMA/bnxt_re: Enable SRIOV VF support on Broadcom's 57500 adapter series (bsc#1154916).
- RDMA/bnxt_re: Fix chip number validation Broadcom's Gen P5 series (bsc#1157895).
- RDMA/bnxt_re: Fix missing le16_to_cpu (bsc#1157895).
- RDMA/hns: Bugfix for qpc/cqc timer configuration (bsc#1104427 bsc#1126206).
- RDMA/hns: Correct the value of srq_desc_size (bsc#1104427 ).
- RDMA/hns: Fix to support 64K page for srq (bsc#1104427 ).
- RDMA/hns: Prevent memory leaks of eq-&gt;buf_list (bsc#1104427 ).
- README.BRANCH: Update the branch name to cve/linux-4.12
- regulator: Fix return value of _set_load() stub (bsc#1051510).
- regulator: rk808: Lower log level on optional GPIOs being not available (bsc#1051510).
- regulator: rn5t618: fix module aliases (bsc#1051510).
- regulator: tps65910: fix a missing check of return value (bsc#1051510).
- reiserfs: Fix memory leak of journal device string (bsc#1163867).
- reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling (bsc#1163869).
- reset: fix reset_control_ops kerneldoc comment (bsc#1051510).
- resource: fix locking in find_next_iomem_res() (bsc#1114279).
- Revert 'locking/pvqspinlock: Do not wait if vCPU is preempted' (bsc#1050549).
- rpm/kabi.pl: support new (&gt;=5.4) Module.symvers format (new symbol namespace field)
- rpm/kernel-binary.spec.in: Conflict with too old powerpc-utils (jsc#ECO-920, jsc#SLE-11054, jsc#SLE-11322).
- rpm/kernel-binary.spec.in: Replace Novell with SUSE
- rpm/kernel-subpackage-spec: Exclude kernel-firmware recommends (bsc#1143959) For reducing the dependency on kernel-firmware in sub packages
- rpm/kernel-subpackage-spec: Fix empty Recommends tag (bsc#1143959)
- rpm/kernel-subpackage-spec: fix kernel-default-base build There were some issues with recent changes to subpackage dependencies handling:
- rpm/kernel-subpackage-spec: Unify dependency handling.
- rpm/modules.fips: update module list (bsc#1157853)
- rsi_91x_usb: fix interface sanity check (git-fixes).
- rtc: cmos: Stop using shared IRQ (bsc#1051510).
- rtc: dt-binding: abx80x: fix resistance scale (bsc#1051510).
- rtc: hym8563: Return -EINVAL if the time is known to be invalid (bsc#1051510).
- rtc: max8997: Fix the returned value in case of error in 'max8997_rtc_read_alarm()' (bsc#1051510).
- rtc: msm6242: Fix reading of 10-hour digit (bsc#1051510).
- rtc: pcf8523: set xtal load capacitance from DT (bsc#1051510).
- rtc: s35390a: Change buf's type to u8 in s35390a_init (bsc#1051510).
- rtl818x: fix potential use after free (bsc#1051510).
- rtl8xxxu: fix interface sanity check (git-fixes).
- rtlwifi: Fix MAX MPDU of VHT capability (git-fixes).
- rtlwifi: Remove redundant semicolon in wifi.h (git-fixes).
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (bsc#1111666).
- s390/qeth: clean up page frag creation (git-fixes).
- s390/qeth: consolidate skb allocation (git-fixes).
- s390/qeth: ensure linear access to packet headers (git-fixes).
- s390/qeth: guard against runt packets (git-fixes).
- sched/fair: Add tmp_alone_branch assertion (bnc#1156462).
- sched/fair: Fix insertion in rq-&gt;leaf_cfs_rq_list (bnc#1156462).
- sched/fair: Fix O(nr_cgroups) in the load balancing path (bnc#1156462).
- sched/fair: Optimize update_blocked_averages() (bnc#1156462).
- sched/fair: WARN() and refuse to set buddy when !se-&gt;on_rq (bsc#1158132).
- scsi: lpfc: fix build failure with DEBUGFS disabled (bsc#1154601).
- scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (bsc#1158013).
- scsi: qla2xxx: Add D-Port Diagnostic reason explanation logs (bsc#1158013).
- scsi: qla2xxx: Added support for MPI and PEP regions for ISP28XX (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Cleanup unused async_logout_done (bsc#1158013).
- scsi: qla2xxx: Consolidate fabric scan (bsc#1158013).
- scsi: qla2xxx: Correct fcport flags handling (bsc#1158013).
- scsi: qla2xxx: Correctly retrieve and interpret active flash region (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Fix a NULL pointer dereference in an error path (bsc#1157966 bsc#1158013 bsc#1157424).
- scsi: qla2xxx: Fix fabric scan hang (bsc#1158013).
- scsi: qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Fix mtcp dump collection failure (bsc#1158013).
- scsi: qla2xxx: Fix RIDA Format-2 (bsc#1158013).
- scsi: qla2xxx: Fix stuck login session using prli_pend_timer (bsc#1158013).
- scsi: qla2xxx: Fix stuck session in GNL (bsc#1158013).
- scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type (bsc#1158013).
- scsi: qla2xxx: Fix unbound NVME response length (bsc#1157966 bsc#1158013 bsc#1157424).
- scsi: qla2xxx: Fix update_fcport for current_topology (bsc#1158013).
- scsi: qla2xxx: Improve readability of the code that handles qla_flt_header (bsc#1158013).
- scsi: qla2xxx: Remove defer flag to indicate immeadiate port loss (bsc#1158013).
- scsi: qla2xxx: Update driver version to 10.01.00.22-k (bsc#1158013).
- scsi: qla2xxx: Use common routine to free fcport struct (bsc#1158013).
- scsi: qla2xxx: Use get_unaligned_*() instead of open-coding these functions (bsc#1158013).
- scsi: zfcp: trace channel log even for FCP command responses (git-fixes).
- sctp: cache netns in sctp_ep_common (networking-stable-19_12_03).
- sctp: fully initialize v4 addr in some functions (networking-stable-19_12_28).
- serial: 8250_bcm2835aux: Fix line mismatch on driver unbind (bsc#1051510).
- serial: ifx6x60: add missed pm_runtime_disable (bsc#1051510).
- serial: max310x: Fix tx_empty() callback (bsc#1051510).
- serial: pl011: Fix DMA -&gt;flush_buffer() (bsc#1051510).
- serial: serial_core: Perform NULL checks for break_ctl ops (bsc#1051510).
- serial: stm32: fix transmit_chars when tx is stopped (bsc#1051510).
- sfc: Only cancel the PPS workqueue if it exists (networking-stable-19_11_25).
- sfc: Remove 'PCIE error reporting unavailable' (bsc#1161472).
- sh_eth: check sh_eth_cpu_data::dual_port when dumping registers (bsc#1051510).
- sh_eth: fix dumping ARSTR (bsc#1051510).
- sh_eth: fix invalid context bug while calling auto-negotiation by ethtool (bsc#1051510).
- sh_eth: fix invalid context bug while changing link options by ethtool (bsc#1051510).
- sh_eth: fix TSU init on SH7734/R8A7740 (bsc#1051510).
- sh_eth: fix TXALCR1 offsets (bsc#1051510).
- sh_eth: TSU_QTAG0/1 registers the same as TSU_QTAGM0/1 (bsc#1051510).
- smb3: Fix crash in SMB2_open_init due to uninitialized field in compounding path (bsc#1144333).
- smb3: Fix persistent handles reconnect (bsc#1144333).
- smb3: fix refcount underflow warning on unmount when no directory leases (bsc#1144333).
- smb3: remove confusing dmesg when mounting with encryption ('seal') (bsc#1144333).
- soc/tegra: fuse: Correct straps' address for older Tegra124 device trees (bsc#1051510).
- soc: renesas: rcar-sysc: Add goto to of_node_put() before return (bsc#1051510).
- soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot (bsc#1051510).
- spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch (bsc#1051510).
- spi: omap2-mcspi: Set FIFO DMA trigger level to word length (bsc#1051510).
- spi: tegra114: clear packed bit for unpacked mode (bsc#1051510).
- spi: tegra114: configure dma burst size to fifo trig level (bsc#1051510).
- spi: tegra114: fix for unpacked mode transfers (bsc#1051510).
- spi: tegra114: flush fifos (bsc#1051510).
- spi: tegra114: terminate dma and reset on transfer timeout (bsc#1051510).
- sr_vendor: support Beurer GL50 evo CD-on-a-chip devices (boo#1164632).
- staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 (bsc#1051510).
- Staging: iio: adt7316: Fix i2c data reading, set the data field (bsc#1051510).
- staging: rtl8188eu: fix interface sanity check (bsc#1051510).
- staging: rtl8192e: fix potential use after free (bsc#1051510).
- staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids (bsc#1051510).
- staging: rtl8723bs: Drop ACPI device ids (bsc#1051510).
- staging: vt6656: correct packet types for CTS protect, mode (bsc#1051510).
- staging: vt6656: Fix false Tx excessive retries reporting (bsc#1051510).
- staging: vt6656: use NULLFUCTION stack on mac80211 (bsc#1051510).
- staging: wlan-ng: ensure error return is actually returned (bsc#1051510).
- stm class: Fix a double free of stm_source_device (bsc#1051510).
- stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (bsc#1088810, bsc#1161702).
- stop_machine: Atomically queue and wake stopper threads (bsc#1088810, bsc#1161702).
- stop_machine: Disable preemption after queueing stopper threads (bsc#1088810, bsc#1161702).
- stop_machine: Disable preemption when waking two stopper threads (bsc#1088810, bsc#1161702).
- tcp: clear tp-&gt;packets_out when purging write queue (bsc#1160560).
- tcp: do not send empty skb from tcp_write_xmit() (networking-stable-20_01_01).
- tcp: exit if nothing to retransmit on RTO timeout (bsc#1160560, stable 4.14.159).
- tcp: md5: fix potential overestimation of TCP option space (networking-stable-19_12_16).
- thermal: Fix deadlock in thermal thermal_zone_device_check (bsc#1051510).
- tipc: fix a missing check of genlmsg_put (bsc#1051510).
- tipc: fix link name length check (bsc#1051510).
- tipc: fix memory leak in tipc_nl_compat_publ_dump (bsc#1051510).
- tipc: fix skb may be leaky in tipc_link_input (bsc#1051510).
- tracing: Annotate ftrace_graph_hash pointer with __rcu (git-fixes).
- tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu (git-fixes).
- tracing: Fix tracing_stat return values in error handling paths (git-fixes).
- tracing: Fix very unlikely race of registering two stat tracers (git-fixes).
- tracing: Have the histogram compare functions convert to u64 first (bsc#1160210).
- tracing: xen: Ordered comparison of function pointers (git-fixes).
- tty/serial: atmel: Add is_half_duplex helper (bsc#1051510).
- tty: n_hdlc: fix build on SPARC (bsc#1051510).
- tty: serial: msm_serial: Fix lockup for sysrq and oops (bsc#1051510).
- tty: vt: keyboard: reject invalid keycodes (bsc#1051510).
- uaccess: Add non-pagefault user-space write function (bsc#1083647).
- ubifs: do not trigger assertion on invalid no-key filename (bsc#1163850).
- ubifs: Fix deadlock in concurrent bulk-read and writepage (bsc#1163856).
- ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag (bsc#1163855).
- ubifs: Reject unsupported ioctl flags explicitly (bsc#1163844).
- udp: fix integer overflow while computing available space in sk_rcvbuf (networking-stable-20_01_01).
- usb-storage: Disable UAS on JMicron SATA enclosure (bsc#1051510).
- usb: adutux: fix interface sanity check (bsc#1051510).
- usb: Allow USB device to be warm reset in suspended state (bsc#1051510).
- usb: atm: ueagle-atm: add missing endpoint check (bsc#1051510).
- usb: chipidea: host: Disable port power only if previously enabled (bsc#1051510).
- usb: core: fix check for duplicate endpoints (git-fixes).
- usb: core: hub: Improved device recognition on remote wakeup (bsc#1051510).
- usb: core: urb: fix URB structure initialization function (bsc#1051510).
- usb: documentation: flags on usb-storage versus UAS (bsc#1051510).
- usb: dwc3: debugfs: Properly print/set link state for HS (bsc#1051510).
- usb: dwc3: do not log probe deferrals; but do log other error codes (bsc#1051510).
- usb: dwc3: ep0: Clear started flag on completion (bsc#1051510).
- usb: dwc3: turn off VBUS when leaving host mode (bsc#1051510).
- usb: EHCI: Do not return -EPIPE when hub is disconnected (git-fixes).
- usb: gadget: f_ecm: Use atomic_t to track in-flight request (bsc#1051510).
- usb: gadget: f_ncm: Use atomic_t to track in-flight request (bsc#1051510).
- usb: gadget: legacy: set max_speed to super-speed (bsc#1051510).
- usb: gadget: pch_udc: fix use after free (bsc#1051510).
- usb: gadget: u_serial: add missing port entry locking (bsc#1051510).
- usb: gadget: Zero ffs_io_data (bsc#1051510).
- usb: host: xhci-hub: fix extra endianness conversion (bsc#1051510).
- usb: idmouse: fix interface sanity checks (bsc#1051510).
- usb: mon: Fix a deadlock in usbmon between mmap and read (bsc#1051510).
- usb: mtu3: fix dbginfo in qmu_tx_zlp_error_handler (bsc#1051510).
- usb: musb: dma: Correct parameter passed to IRQ handler (bsc#1051510).
- usb: musb: fix idling for suspend after disconnect interrupt (bsc#1051510).
- usb: roles: fix a potential use after free (git-fixes).
- usb: serial: ch341: handle unbound port at reset_resume (bsc#1051510).
- usb: serial: ftdi_sio: add device IDs for U-Blox C099-F9P (bsc#1051510).
- usb: serial: io_edgeport: add missing active-port sanity check (bsc#1051510).
- usb: serial: io_edgeport: fix epic endpoint lookup (bsc#1051510).
- usb: serial: io_edgeport: handle unbound ports on URB completion (bsc#1051510).
- usb: serial: io_edgeport: use irqsave() in USB's complete callback (bsc#1051510).
- usb: serial: ir-usb: add missing endpoint sanity check (bsc#1051510).
- usb: serial: ir-usb: fix IrLAP framing (bsc#1051510).
- usb: serial: ir-usb: fix link-speed handling (bsc#1051510).
- usb: serial: keyspan: handle unbound ports (bsc#1051510).
- usb: serial: opticon: fix control-message timeouts (bsc#1051510).
- usb: serial: option: Add support for Quectel RM500Q (bsc#1051510).
- usb: serial: option: add support for Quectel RM500Q in QDL mode (git-fixes).
- usb: serial: option: add Telit ME910G1 0x110a composition (git-fixes).
- usb: serial: option: add ZLP support for 0x1bc7/0x9010 (git-fixes).
- usb: serial: quatech2: handle unbound ports (bsc#1051510).
- usb: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx (bsc#1051510).
- usb: serial: suppress driver bind attributes (bsc#1051510).
- usb: typec: tcpci: mask event interrupts when remove driver (bsc#1051510).
- usb: uas: heed CAPACITY_HEURISTICS (bsc#1051510).
- usb: uas: honor flag to avoid CAPACITY16 (bsc#1051510).
- usb: xhci: Fix build warning seen with CONFIG_PM=n (bsc#1051510).
- usb: xhci: only set D3hot for pci device (bsc#1051510).
- usbip: Fix error path of vhci_recv_ret_submit() (git-fixes).
- usbip: Fix receive error in vhci-hcd when using scatter-gather (bsc#1051510).
- vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset == -1 (bsc#1051510).
- vhost/vsock: accept only packets with the right dst_cid (networking-stable-20_01_01).
- video: backlight: Add devres versions of of_find_backlight (bsc#1090888) Taken for 6010831dde5.
- video: backlight: Add of_find_backlight helper in backlight.c (bsc#1090888) Taken for 6010831dde5.
- watchdog: max77620_wdt: fix potential build errors (bsc#1051510).
- watchdog: rn5t618_wdt: fix module aliases (bsc#1051510).
- watchdog: sama5d4: fix WDD value to be always set to max (bsc#1051510).
- watchdog: wdat_wdt: fix get_timeleft call for wdat_wdt (bsc#1162557).
- wireless: fix enabling channel 12 for custom regulatory domain (bsc#1051510).
- wireless: wext: avoid gcc -O3 warning (bsc#1051510).
- workqueue: Fix pwq ref leak in rescuer_thread() (bsc#1160211).
- x86/amd_nb: Add PCI device IDs for family 17h, model 70h (bsc#1163206).
- x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR (bsc#1162619).
- x86/intel_rdt: Split resource group removal in two (bsc#1112178).
- x86/intel_rdt: Split resource group removal in two (bsc#1112178).
- x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI (bsc#1114279).
- x86/mce/AMD: Allow any CPU to initialize the smca_banks array (bsc#1114279).
- x86/MCE/AMD: Allow Reserved types to be overwritten in smca_banks (bsc#1114279).
- x86/MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure() (bsc#1114279).
- x86/mce: Fix possibly incorrect severity calculation on AMD (bsc#1114279).
- x86/resctrl: Check monitoring static key in the MBM overflow handler (bsc#1114279).
- x86/resctrl: Fix a deadlock due to inaccurate reference (bsc#1112178).
- x86/resctrl: Fix a deadlock due to inaccurate reference (bsc#1112178).
- x86/resctrl: Fix an imbalance in domain_remove_cpu() (bsc#1114279).
- x86/resctrl: Fix potential memory leak (bsc#1114279).
- x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup (bsc#1112178).
- x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup (bsc#1112178).
- x86/resctrl: Fix use-after-free when deleting resource groups (bsc#1114279).
- x86/speculation: Fix incorrect MDS/TAA mitigation status (bsc#1114279).
- x86/speculation: Fix redundant MDS mitigation message (bsc#1114279).
- xen-blkfront: switch kcalloc to kvcalloc for large array allocation (bsc#1160917).
- xen/balloon: Support xend-based toolstack take two (bsc#1065600).
- xen/blkback: Avoid unmapping unmapped grant pages (bsc#1065600).
- xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk (bsc#1065600).
- xen: Enable interrupts when calling _cond_resched() (bsc#1065600).
- xfrm: Fix transport mode skb control buffer usage (bsc#1161552).
- xfs: Fix tail rounding in xfs_alloc_file_space() (bsc#1161087, bsc#1153917).
- xhci: Fix memory leak in xhci_add_in_port() (bsc#1051510).
- xhci: fix USB3 device initiated resume race with roothub autosuspend (bsc#1051510).
- xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour (bsc#1051510).
- xhci: Increase STS_HALT timeout in xhci_suspend() (bsc#1051510).
- xhci: make sure interrupts are restored to correct state (bsc#1051510).
- zd1211rw: fix storage endpoint lookup (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-27"/>
	<updated date="2020-02-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046303">SUSE bug 1046303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051858">SUSE bug 1051858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086301">SUSE bug 1086301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086313">SUSE bug 1086313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086314">SUSE bug 1086314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088810">SUSE bug 1088810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090888">SUSE bug 1090888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103989">SUSE bug 1103989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105392">SUSE bug 1105392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112504">SUSE bug 1112504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115026">SUSE bug 1115026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118338">SUSE bug 1118338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118661">SUSE bug 1118661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123328">SUSE bug 1123328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127682">SUSE bug 1127682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129551">SUSE bug 1129551</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133147">SUSE bug 1133147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134973">SUSE bug 1134973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140025">SUSE bug 1140025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143959">SUSE bug 1143959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144162">SUSE bug 1144162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151548">SUSE bug 1151548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151910">SUSE bug 1151910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151927">SUSE bug 1151927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152107">SUSE bug 1152107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152631">SUSE bug 1152631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153535">SUSE bug 1153535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153917">SUSE bug 1153917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154243">SUSE bug 1154243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154601">SUSE bug 1154601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154768">SUSE bug 1154768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154916">SUSE bug 1154916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155331">SUSE bug 1155331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155334">SUSE bug 1155334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155689">SUSE bug 1155689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156259">SUSE bug 1156259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156286">SUSE bug 1156286</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156462">SUSE bug 1156462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157155">SUSE bug 1157155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157157">SUSE bug 1157157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157169">SUSE bug 1157169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157303">SUSE bug 1157303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157480">SUSE bug 1157480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157692">SUSE bug 1157692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157853">SUSE bug 1157853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157895">SUSE bug 1157895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157908">SUSE bug 1157908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157966">SUSE bug 1157966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158013">SUSE bug 1158013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158021">SUSE bug 1158021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158026">SUSE bug 1158026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158071">SUSE bug 1158071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158094">SUSE bug 1158094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158132">SUSE bug 1158132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158533">SUSE bug 1158533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158819">SUSE bug 1158819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158823">SUSE bug 1158823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158824">SUSE bug 1158824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158827">SUSE bug 1158827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158893">SUSE bug 1158893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158900">SUSE bug 1158900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158903">SUSE bug 1158903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158904">SUSE bug 1158904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158954">SUSE bug 1158954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159024">SUSE bug 1159024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159028">SUSE bug 1159028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159271">SUSE bug 1159271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159297">SUSE bug 1159297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159377">SUSE bug 1159377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159394">SUSE bug 1159394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159483">SUSE bug 1159483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159484">SUSE bug 1159484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159500">SUSE bug 1159500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159569">SUSE bug 1159569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159588">SUSE bug 1159588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159841">SUSE bug 1159841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159908">SUSE bug 1159908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159909">SUSE bug 1159909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159910">SUSE bug 1159910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159911">SUSE bug 1159911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159955">SUSE bug 1159955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160147">SUSE bug 1160147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160195">SUSE bug 1160195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160210">SUSE bug 1160210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160211">SUSE bug 1160211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160218">SUSE bug 1160218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160433">SUSE bug 1160433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160442">SUSE bug 1160442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160469">SUSE bug 1160469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160470">SUSE bug 1160470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160476">SUSE bug 1160476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160560">SUSE bug 1160560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160618">SUSE bug 1160618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160678">SUSE bug 1160678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160755">SUSE bug 1160755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160756">SUSE bug 1160756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160784">SUSE bug 1160784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160787">SUSE bug 1160787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160802">SUSE bug 1160802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160803">SUSE bug 1160803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160804">SUSE bug 1160804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160917">SUSE bug 1160917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160966">SUSE bug 1160966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160979">SUSE bug 1160979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161087">SUSE bug 1161087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161243">SUSE bug 1161243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161360">SUSE bug 1161360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161472">SUSE bug 1161472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161514">SUSE bug 1161514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161518">SUSE bug 1161518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161522">SUSE bug 1161522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161523">SUSE bug 1161523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161549">SUSE bug 1161549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161552">SUSE bug 1161552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161674">SUSE bug 1161674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161702">SUSE bug 1161702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161907">SUSE bug 1161907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161931">SUSE bug 1161931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161933">SUSE bug 1161933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161934">SUSE bug 1161934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161935">SUSE bug 1161935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161936">SUSE bug 1161936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161937">SUSE bug 1161937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162028">SUSE bug 1162028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162067">SUSE bug 1162067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162109">SUSE bug 1162109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162139">SUSE bug 1162139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162557">SUSE bug 1162557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162617">SUSE bug 1162617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162618">SUSE bug 1162618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162619">SUSE bug 1162619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162623">SUSE bug 1162623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162928">SUSE bug 1162928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162943">SUSE bug 1162943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163206">SUSE bug 1163206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163383">SUSE bug 1163383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163384">SUSE bug 1163384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163762">SUSE bug 1163762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163774">SUSE bug 1163774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163836">SUSE bug 1163836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163840">SUSE bug 1163840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163841">SUSE bug 1163841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163842">SUSE bug 1163842</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163843">SUSE bug 1163843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163844">SUSE bug 1163844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163845">SUSE bug 1163845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163846">SUSE bug 1163846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163849">SUSE bug 1163849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163850">SUSE bug 1163850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163851">SUSE bug 1163851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163852">SUSE bug 1163852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163853">SUSE bug 1163853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163855">SUSE bug 1163855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163856">SUSE bug 1163856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163857">SUSE bug 1163857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163858">SUSE bug 1163858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163859">SUSE bug 1163859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163860">SUSE bug 1163860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163861">SUSE bug 1163861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163862">SUSE bug 1163862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163863">SUSE bug 1163863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163867">SUSE bug 1163867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163869">SUSE bug 1163869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163880">SUSE bug 1163880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164051">SUSE bug 1164051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164069">SUSE bug 1164069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164098">SUSE bug 1164098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164115">SUSE bug 1164115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164314">SUSE bug 1164314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164315">SUSE bug 1164315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164388">SUSE bug 1164388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164471">SUSE bug 1164471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164598">SUSE bug 1164598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164632">SUSE bug 1164632</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-14615/">CVE-2019-14615</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16746/">CVE-2019-16746</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16994/">CVE-2019-16994</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18808/">CVE-2019-18808</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19036/">CVE-2019-19036</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19045/">CVE-2019-19045</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19051/">CVE-2019-19051</cve>
	<cve impact="moderate" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19054/">CVE-2019-19054</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19066/">CVE-2019-19066</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19318/">CVE-2019-19318</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19319/">CVE-2019-19319</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19332/">CVE-2019-19332</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19338/">CVE-2019-19338</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19447/">CVE-2019-19447</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19523/">CVE-2019-19523</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19526/">CVE-2019-19526</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19527/">CVE-2019-19527</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19532/">CVE-2019-19532</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19533/">CVE-2019-19533</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19535/">CVE-2019-19535</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19537/">CVE-2019-19537</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19767/">CVE-2019-19767</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19927/">CVE-2019-19927</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19965/">CVE-2019-19965</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19966/">CVE-2019-19966</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20054/">CVE-2019-20054</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20095/">CVE-2019-20095</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20096/">CVE-2019-20096</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-7053/">CVE-2020-7053</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8428/">CVE-2020-8428</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8648/">CVE-2020-8648</cve>
	<cve impact="low" cvss3="2.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8992/">CVE-2020-8992</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498094" comment="kernel-azure-4.12.14-8.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498095" comment="kernel-azure-base-4.12.14-8.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498096" comment="kernel-azure-devel-4.12.14-8.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498097" comment="kernel-devel-azure-4.12.14-8.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498098" comment="kernel-source-azure-4.12.14-8.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498099" comment="kernel-syms-azure-4.12.14-8.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138871" version="1" class="patch">
	<metadata>
		<title>Security update for cni, cni-plugins, conmon, fuse-overlayfs, podman (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1155217" ref_url="https://bugzilla.suse.com/1155217" source="BUGZILLA"/>
		<reference ref_id="1160460" ref_url="https://bugzilla.suse.com/1160460" source="BUGZILLA"/>
		<reference ref_id="1164390" ref_url="https://bugzilla.suse.com/1164390" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18466" ref_url="https://www.suse.com/security/cve/CVE-2019-18466/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006616.html" source="SUSE-SU"/>
		<description>
This update for cni, cni-plugins, conmon, fuse-overlayfs, podman fixes the following issues:

podman was updated to 1.8.0:

- CVE-2019-18466: Fixed a bug where podman cp would improperly copy files on the
  host when copying a symlink in the container that included a
  glob operator (#3829 bsc#1155217)

- The name of the cni-bridge in the default config changed from
  'cni0' to 'podman-cni0' with podman-1.6.0. Add a %trigger to
  rename the bridge in the system to the new default if it exists.
  The trigger is only excuted when updating podman-cni-config 
  from something older than 1.6.0. This is mainly needed for SLE
  where we're updating from 1.4.4 to 1.8.0 (bsc#1160460).

Update podman to v1.8.0 (bsc#1160460):

* Features

  - The podman system service command has been added, providing a
    preview of Podman's new Docker-compatible API. This API is
    still very new, and not yet ready for production use, but is
    available for early testing
  - Rootless Podman now uses Rootlesskit for port forwarding,
    which should greatly improve performance and capabilities
  - The podman untag command has been added to remove tags from
    images without deleting them
  - The podman inspect command on images now displays previous
    names they used
  - The podman generate systemd command now supports a --new
    option to generate service files that create and run new
    containers instead of managing existing containers
  - Support for --log-opt tag= to set logging tags has been added
    to the journald log driver
  - Added support for using Seccomp profiles embedded in images
    for podman run and podman create via the new --seccomp-policy
      CLI flag
  - The podman play kube command now honors pull policy

* Bugfixes

  - Fixed a bug where the podman cp command would not copy the
    contents of directories when paths ending in /. were given
  - Fixed a bug where the podman play kube command did not
    properly locate Seccomp profiles specified relative to
    localhost
  - Fixed a bug where the podman info command for remote Podman
    did not show registry information
  - Fixed a bug where the podman exec command did not support
    having input piped into it
  - Fixed a bug where the podman cp command with rootless Podman
    on CGroups v2 systems did not properly determine if the
    container could be paused while copying
  - Fixed a bug where the podman container prune --force command
    could possible remove running containers if they were started
    while the command was running 
  - Fixed a bug where Podman, when run as root, would not
    properly configure slirp4netns networking when requested
  - Fixed a bug where podman run --userns=keep-id did not work
    when the user had a UID over 65535
  - Fixed a bug where rootless podman run and podman create with
    the --userns=keep-id option could change permissions on
    /run/user/$UID and break KDE
  - Fixed a bug where rootless Podman could not be run in a
    systemd service on systems using CGroups v2
  - Fixed a bug where podman inspect would show CPUShares as 0,
    instead of the default (1024), when it was not explicitly set
  - Fixed a bug where podman-remote push would segfault
  - Fixed a bug where image healthchecks were not shown in the
    output of podman inspect
  - Fixed a bug where named volumes created with containers from
    pre-1.6.3 releases of Podman would be autoremoved with their
    containers if the --rm flag was given, even if they were
    given names
  - Fixed a bug where podman history was not computing image
    sizes correctly
  - Fixed a bug where Podman would not error on invalid values to
    the --sort flag to podman images
  - Fixed a bug where providing a name for the image made by
    podman commit was mandatory, not optional as it should be
  - Fixed a bug where the remote Podman client would append an
    extra ' to %PATH
  - Fixed a bug where the podman build command would sometimes
    ignore the -f option and build the wrong Containerfile
  - Fixed a bug where the podman ps --filter command would only
    filter running containers, instead of all containers, if
    --all was not passed
  - Fixed a bug where the podman load command on compressed
    images would leave an extra copy on disk
  - Fixed a bug where the podman restart command would not
    properly clean up the network, causing it to function
    differently from podman stop; podman start
  - Fixed a bug where setting the --memory-swap flag to podman
    create and podman run to -1 (to indicate unlimited) was not
    supported

* Misc

  - Initial work on version 2 of the Podman remote API has been
    merged, but is still in an alpha state and not ready for use.
    Read more here
  - Many formatting corrections have been made to the manpages
  - The changes to address (#5009) may cause anonymous volumes
    created by Podman versions 1.6.3 to 1.7.0 to not be removed
    when their container is removed
  - Updated vendored Buildah to v1.13.1
  - Updated vendored containers/storage to v1.15.8
  - Updated vendored containers/image to v5.2.0

- Add apparmor-abstractions as required runtime dependency to
  have `tunables/global` available.

- fixed the --force flag for the 'container prune' command.
  (https://github.com/containers/libpod/issues/4844)

Update podman to v1.7.0

* Features

  - Added support for setting a static MAC address for containers
  - Added support for creating macvlan networks with podman
    network create, allowing Podman containers to be attached
    directly to networks the host is connected to
  - The podman image prune and podman container prune commands
    now support the --filter flag to filter what will be pruned,
    and now prompts for confirmation when run without --force
    (#4410 and #4411)
  - Podman now creates CGroup namespaces by default on systems
    using CGroups v2 (#4363)
  - Added the podman system reset command to remove all Podman
    files and perform a factory reset of the Podman installation
  - Added the --history flag to podman images to display previous
    names used by images (#4566)
  - Added the --ignore flag to podman rm and podman stop to not
    error when requested containers no longer exist
  - Added the --cidfile flag to podman rm and podman stop to read
    the IDs of containers to be removed or stopped from a file
  - The podman play kube command now honors Seccomp annotations
    (#3111)
  - The podman play kube command now honors RunAsUser,
    RunAsGroup, and selinuxOptions
  - The output format of the podman version command has been
    changed to better match docker version when using the
    --format flag
  - Rootless Podman will no longer initialize containers/storage
    twice, removing a potential deadlock preventing Podman
    commands from running while an image was being pulled (#4591)
  - Added tmpcopyup and notmpcopyup options to the --tmpfs and
    --mount type=tmpfs flags to podman create and podman run to
    control whether the content of directories are copied into
    tmpfs filesystems mounted over them
  - Added support for disabling detaching from containers by
    setting empty detach keys via --detach-keys=''
  - The podman build command now supports the --pull and
    --pull-never flags to control when images are pulled during a
    build
  - The podman ps -p command now shows the name of the pod as
    well as its ID (#4703)
  - The podman inspect command on containers will now display the
    command used to create the container
  - The podman info command now displays information on registry
    mirrors (#4553)

* Bugfixes

  - Fixed a bug where Podman would use an incorrect runtime
    directory as root, causing state to be deleted after root
    logged out and making Podman in systemd services not function
    properly
  - Fixed a bug where the --change flag to podman import and
    podman commit was not being parsed properly in many cases
  - Fixed a bug where detach keys specified in libpod.conf were
    not used by the podman attach and podman exec commands, which
    always used the global default ctrl-p,ctrl-q key combination
    (#4556)
  - Fixed a bug where rootless Podman was not able to run podman
    pod stats even on CGroups v2 enabled systems (#4634)
  - Fixed a bug where rootless Podman would fail on kernels
    without the renameat2 syscall (#4570)
  - Fixed a bug where containers with chained network namespace
    dependencies (IE, container A using --net container=B and
    container B using --net container=C) would not properly mount
    /etc/hosts and /etc/resolv.conf into the container (#4626)
  - Fixed a bug where podman run with the --rm flag and without
    -d could, when run in the background, throw a 'container does
    not exist' error when attempting to remove the container
    after it exited
  - Fixed a bug where named volume locks were not properly
    reacquired after a reboot, potentially leading to deadlocks
    when trying to start containers using the volume (#4605 and
    #4621)
  - Fixed a bug where Podman could not completely remove
    containers if sent SIGKILL during removal, leaving the
    container name unusable without the podman rm --storage
    command to complete removal (#3906)
  - Fixed a bug where checkpointing containers started with --rm
    was allowed when --export was not specified (the container,
    and checkpoint, would be removed after checkpointing was
    complete by --rm) (#3774)
  - Fixed a bug where the podman pod prune command would fail if
    containers were present in the pods and the --force flag was
    not passed (#4346)
  - Fixed a bug where containers could not set a static IP or
    static MAC address if they joined a non-default CNI network
    (#4500)
  - Fixed a bug where podman system renumber would always throw
    an error if a container was mounted when it was run
  - Fixed a bug where podman container restore would fail with
    containers using a user namespace
  - Fixed a bug where rootless Podman would attempt to use the
    journald events backend even on systems without systemd
    installed
  - Fixed a bug where podman history would sometimes not properly
    identify the IDs of layers in an image (#3359)
  - Fixed a bug where containers could not be restarted when
    Conmon v2.0.3 or later was used
  - Fixed a bug where Podman did not check image OS and
    Architecture against the host when starting a container
  - Fixed a bug where containers in pods did not function
    properly with the Kata OCI runtime (#4353)
  - Fixed a bug where `podman info --format '{{ json . }}' would
    not produce JSON output (#4391)
  - Fixed a bug where Podman would not verify if files passed to
    --authfile existed (#4328)
  - Fixed a bug where podman images --digest would not always
    print digests when they were available
  - Fixed a bug where rootless podman run could hang due to a
    race with reading and writing events
  - Fixed a bug where rootless Podman would print warning-level
    logs despite not be instructed to do so (#4456)
  - Fixed a bug where podman pull would attempt to fetch from
    remote registries when pulling an unqualified image using the
    docker-daemon transport (#4434)
  - Fixed a bug where podman cp would not work if STDIN was a
    pipe
  - Fixed a bug where podman exec could stop accepting input if
    anything was typed between the command being run and the exec
    session starting (#4397)
  - Fixed a bug where podman logs --tail 0 would print all lines
    of a container's logs, instead of no lines (#4396)
  - Fixed a bug where the timeout for slirp4netns was incorrectly
    set, resulting in an extremely long timeout (#4344)
  - Fixed a bug where the podman stats command would print CPU
    utilizations figures incorrectly (#4409)
  - Fixed a bug where the podman inspect --size command would not
    print the size of the container's read/write layer if the
    size was 0 (#4744)
  - Fixed a bug where the podman kill command was not properly
    validating signals before use (#4746)
  - Fixed a bug where the --quiet and --format flags to podman ps
    could not be used at the same time
  - Fixed a bug where the podman stop command was not stopping
    exec sessions when a container was created without a PID
    namespace (--pid=host)
  - Fixed a bug where the podman pod rm --force command was not
    removing anonymous volumes for containers that were removed
  - Fixed a bug where the podman checkpoint command would not
    export all changes to the root filesystem of the container if
    performed more than once on the same container (#4606)
  - Fixed a bug where containers started with --rm would not be
    automatically removed on being stopped if an exec session was
    running inside the container (#4666)

* Misc

  - The fixes to runtime directory path as root can cause strange
    behavior if an upgrade is performed while containers are
    running
  - Updated vendored Buildah to v1.12.0
  - Updated vendored containers/storage library to v1.15.4
  - Updated vendored containers/image library to v5.1.0
  - Kata Containers runtimes (kata-runtime, kata-qemu, and
    kata-fc) are now present in the default libpod.conf, but will
    not be available unless Kata containers is installed on the
    system
  - Podman previously did not allow the creation of containers
    with a memory limit lower than 4MB. This restriction has been
    removed, as the crun runtime can create containers with
    significantly less memory

Update podman to v1.6.4
- Remove winsz FIFO on container restart to allow use with Conmon 2.03 and higher
- Ensure volumes reacquire locks on system restart, preventing deadlocks when starting containers
- Suppress spurious log messages when running rootless Podman
- Update vendored containers/storage to v1.13.6
- Fix a deadlock related to writing events
- Do not use the journald event logger when it is not available

Update podman to v1.6.2

* Features

  - Added a --runtime flag to podman system migrate to allow the
    OCI runtime for all containers to be reset, to ease transition
    to the crun runtime on CGroups V2 systems until runc gains full
    support
  - The podman rm command can now remove containers in broken
    states which previously could not be removed
  - The podman info command, when run without root, now shows
    information on UID and GID mappings in the rootless user
    namespace
  - Added podman build --squash-all flag, which squashes all layers
    (including those of the base image) into one layer
  - The --systemd flag to podman run and podman create now accepts
    a string argument and allows a new value, always, which forces
    systemd support without checking if the the container
    entrypoint is systemd

* Bugfixes

  - Fixed a bug where the podman top command did not work on
    systems using CGroups V2 (#4192)
  - Fixed a bug where rootless Podman could double-close a file,
    leading to a panic
  - Fixed a bug where rootless Podman could fail to retrieve some
    containers while refreshing the state
  - Fixed a bug where podman start --attach --sig-proxy=false would
    still proxy signals into the container
  - Fixed a bug where Podman would unconditionally use a
    non-default path for authentication credentials (auth.json),
    breaking podman login integration with skopeo and other tools
    using the containers/image library
  - Fixed a bug where podman ps --format=json and podman images
    --format=json would display null when no results were returned,
    instead of valid JSON
  - Fixed a bug where podman build --squash was incorrectly
    squashing all layers into one, instead of only new layers
  - Fixed a bug where rootless Podman would allow volumes with
    options to be mounted (mounting volumes requires root),
    creating an inconsistent state where volumes reported as
    mounted but were not (#4248)
  - Fixed a bug where volumes which failed to unmount could not be
    removed (#4247)
  - Fixed a bug where Podman incorrectly handled some errors
    relating to unmounted or missing containers in
    containers/storage
  - Fixed a bug where podman stats was broken on systems running
    CGroups V2 when run rootless (#4268)
  - Fixed a bug where the podman start command would print the
    short container ID, instead of the full ID
  - Fixed a bug where containers created with an OCI runtime that
    is no longer available (uninstalled or removed from the config
    file) would not appear in podman ps and could not be removed
    via podman rm
  - Fixed a bug where containers restored via podman container
    restore --import would retain the CGroup path of the original
    container, even if their container ID changed; thus, multiple
    containers created from the same checkpoint would all share the
    same CGroup

* Misc

  - The default PID limit for containers is now set to 4096. It can
    be adjusted back to the old default (unlimited) by passing
    --pids-limit 0 to podman create and podman run
  - The podman start --attach command now automatically attaches
    STDIN if the container was created with -i
  - The podman network create command now validates network names
    using the same regular expression as container and pod names
  - The --systemd flag to podman run and podman create will now
    only enable systemd mode when the binary being run inside the
    container is /sbin/init, /usr/sbin/init, or ends in systemd
    (previously detected any path ending in init or systemd)
  - Updated vendored Buildah to 1.11.3
  - Updated vendored containers/storage to 1.13.5
  - Updated vendored containers/image to 4.0.1

Update podman to v1.6.1

* Features

  - The podman network create, podman network rm, podman network
    inspect, and podman network ls commands have been added to
    manage CNI networks used by Podman
  - The podman volume create command can now create and mount
    volumes with options, allowing volumes backed by NFS, tmpfs,
    and many other filesystems
  - Podman can now run containers without CGroups for better
    integration with systemd by using the --cgroups=disabled flag
    with podman create and podman run. This is presently only
    supported with the crun OCI runtime
  - The podman volume rm and podman volume inspect commands can now
    refer to volumes by an unambiguous partial name, in addition to
    full name (e.g. podman volume rm myvol to remove a volume named
    myvolume) (#3891)
  - The podman run and podman create commands now support the
    --pull flag to allow forced re-pulling of images (#3734)
  - Mounting volumes into a container using --volume, --mount, and
    --tmpfs now allows the suid, dev, and exec mount options (the
    inverse of nosuid, nodev, noexec) (#3819)
  - Mounting volumes into a container using --mount now allows the
    relabel=Z and relabel=z options to relabel mounts.
  - The podman push command now supports the --digestfile option to
    save a file containing the pushed digest
  - Pods can now have their hostname set via podman pod create
    --hostname or providing Pod YAML with a hostname set to podman
    play kube (#3732)
  - The podman image sign command now supports the --cert-dir flag
  - The podman run and podman create commands now support the
    --security-opt label=filetype:$LABEL flag to set the SELinux
    label for container files
  - The remote Podman client now supports healthchecks

* Bugfixes

  - Fixed a bug where remote podman pull would panic if a Varlink
    connection was not available (#4013)
  - Fixed a bug where podman exec would not properly set terminal
    size when creating a new exec session (#3903)
  - Fixed a bug where podman exec would not clean up socket
    symlinks on the host (#3962)
  - Fixed a bug where Podman could not run systemd in containers
    that created a CGroup namespace
  - Fixed a bug where podman prune -a would attempt to prune images
    used by Buildah and CRI-O, causing errors (#3983)
  - Fixed a bug where improper permissions on the ~/.config
    directory could cause rootless Podman to use an incorrect
    directory for storing some files
  - Fixed a bug where the bash completions for podman import threw
    errors
  - Fixed a bug where Podman volumes created with podman volume
    create would not copy the contents of their mountpoint the
    first time they were mounted into a container (#3945)
  - Fixed a bug where rootless Podman could not run podman exec
    when the container was not run inside a CGroup owned by the
    user (#3937)
  - Fixed a bug where podman play kube would panic when given Pod
    YAML without a securityContext (#3956)
  - Fixed a bug where Podman would place files incorrectly when
    storage.conf configuration items were set to the empty string
    (#3952)
  - Fixed a bug where podman build did not correctly inherit
    Podman's CGroup configuration, causing crashed on CGroups V2
    systems (#3938)
  - Fixed a bug where remote podman run --rm would exit before the
    container was completely removed, allowing race conditions when
    removing container resources (#3870)
  - Fixed a bug where rootless Podman would not properly handle
    changes to /etc/subuid and /etc/subgid after a container was
    launched
  - Fixed a bug where rootless Podman could not include some
    devices in a container using the --device flag (#3905)
  - Fixed a bug where the commit Varlink API would segfault if
    provided incorrect arguments (#3897)
  - Fixed a bug where temporary files were not properly cleaned up
    after a build using remote Podman (#3869)
  - Fixed a bug where podman remote cp crashed instead of reporting
    it was not yet supported (#3861)
  - Fixed a bug where podman exec would run as the wrong user when
    execing into a container was started from an image with
    Dockerfile USER (or a user specified via podman run --user)
    (#3838)
  - Fixed a bug where images pulled using the oci: transport would
    be improperly named
  - Fixed a bug where podman varlink would hang when managed by
    systemd due to SD_NOTIFY support conflicting with Varlink
    (#3572)
  - Fixed a bug where mounts to the same destination would
    sometimes not trigger a conflict, causing a race as to which
    was actually mounted
  - Fixed a bug where podman exec --preserve-fds caused Podman to
    hang (#4020)
  - Fixed a bug where removing an unmounted container that was
    unmounted might sometimes not properly clean up the container
    (#4033)
  - Fixed a bug where the Varlink server would freeze when run in a
    systemd unit file (#4005)
  - Fixed a bug where Podman would not properly set the $HOME
    environment variable when the OCI runtime did not set it
  - Fixed a bug where rootless Podman would incorrectly print
    warning messages when an OCI runtime was not found (#4012)
  - Fixed a bug where named volumes would conflict with, instead of
    overriding, tmpfs filesystems added by the --read-only-tmpfs
    flag to podman create and podman run
  - Fixed a bug where podman cp would incorrectly make the target
    directory when copying to a symlink which pointed to a
    nonexistent directory (#3894)
  - Fixed a bug where remote Podman would incorrectly read STDIN
    when the -i flag was not set (#4095)
  - Fixed a bug where podman play kube would create an empty pod
    when given an unsupported YAML type (#4093)
  - Fixed a bug where podman import --change improperly parsed CMD
    (#4000)
  - Fixed a bug where rootless Podman on systems using CGroups V2
    would not function with the cgroupfs CGroups manager
  - Fixed a bug where rootless Podman could not correctly identify
    the DBus session address, causing containers to fail to start
    (#4162)
  - Fixed a bug where rootless Podman with slirp4netns networking
    would fail to start containers due to mount leaks

* Misc

  - Significant changes were made to Podman volumes in this
    release. If you have pre-existing volumes, it is strongly
    recommended to run podman system renumber after upgrading.
  - Version 0.8.1 or greater of the CNI Plugins is now required for
    Podman
  - Version 2.0.1 or greater of Conmon is strongly recommended
  - Updated vendored Buildah to v1.11.2
  - Updated vendored containers/storage library to v1.13.4
  - Improved error messages when trying to create a pod with no
    name via podman play kube
  - Improved error messages when trying to run podman pause or
    podman stats on a rootless container on a system without
    CGroups V2 enabled
  - TMPDIR has been set to /var/tmp by default to better handle
    large temporary files
  - podman wait has been optimized to detect stopped containers
    more rapidly
  - Podman containers now include a ContainerManager annotation
    indicating they were created by libpod
  - The podman info command now includes information about
    slirp4netns and fuse-overlayfs if they are available
  - Podman no longer sets a default size of 65kb for tmpfs
    filesystems
  - The default Podman CNI network has been renamed in an attempt
    to prevent conflicts with CRI-O when both are run on the same
    system. This should only take effect on system restart
  - The output of podman volume inspect has been more closely
    matched to docker volume inspect

- Add katacontainers as a recommended package, and include it as an
  additional OCI runtime in the configuration.

Update podman to v1.5.1

* Features

 - The hostname of pods is now set to the pod's name

* Bugfixes

 - Fixed a bug where podman run and podman create did not honor the --authfile
   option (#3730)
 - Fixed a bug where containers restored with podman container restore
   --import would incorrectly duplicate the Conmon PID file of the original container
 - Fixed a bug where podman build ignored the default OCI runtime configured
   in libpod.conf
 - Fixed a bug where podman run --rm (or force-removing any running container
   with podman rm --force) were not retrieving the correct exit code (#3795)
 - Fixed a bug where Podman would exit with an error if any configured hooks
   directory was not present
 - Fixed a bug where podman inspect and podman commit would not use the
   correct CMD for containers run with podman play kube
 - Fixed a bug created pods when using rootless Podman and CGroups V2 (#3801)
 - Fixed a bug where the podman events command with the --since or --until
   options could take a very long time to complete
* Misc

 - Rootless Podman will now inherit OCI runtime configuration from the root
   configuration (#3781)
 - Podman now properly sets a user agent while contacting registries (#3788)

- Add zsh completion for podman commands

Update podman to v1.5.0

* Features

  - Podman containers can now join the user namespaces of other
    containers with --userns=container:$ID, or a user namespace at
    an arbitary path with --userns=ns:$PATH
  - Rootless Podman can experimentally squash all UIDs and GIDs in
    an image to a single UID and GID (which does not require use of
    the newuidmap and newgidmap executables) by passing
    --storage-opt ignore_chown_errors
  - The podman generate kube command now produces YAML for any bind
    mounts the container has created (#2303)
  - The podman container restore command now features a new flag,
    --ignore-static-ip, that can be used with --import to import a
    single container with a static IP multiple times on the same
    host
  - Added the ability for podman events to output JSON by
    specifying --format=json
  - If the OCI runtime or conmon binary cannot be found at the
    paths specified in libpod.conf, Podman will now also search for
    them in the calling user's path
  - Added the ability to use podman import with URLs (#3609)
  - The podman ps command now supports filtering names using
    regular expressions (#3394)
  - Rootless Podman containers with --privileged set will now mount
    in all host devices that the user can access
  - The podman create and podman run commands now support the
    --env-host flag to forward all environment variables from the
    host into the container
  - Rootless Podman now supports healthchecks (#3523)
  - The format of the HostConfig portion of the output of podman
    inspect on containers has been improved and synced with Docker
  - Podman containers now support CGroup namespaces, and can create
    them by passing --cgroupns=private to podman run or podman
    create
  - The podman create and podman run commands now support the
    --ulimit=host flag, which uses any ulimits currently set on the
    host for the container
  - The podman rm and podman rmi commands now use different exit
    codes to indicate 'no such container' and 'container is
    running' errors
  - Support for CGroups V2 through the crun OCI runtime has been
    greatly improved, allowing resource limits to be set for
    rootless containers when the CGroups V2 hierarchy is in use

* Bugfixes

  - Fixed a bug where a race condition could cause podman restart
    to fail to start containers with ports
  - Fixed a bug where containers restored from a checkpoint would
    not properly report the time they were started at
  - Fixed a bug where podman search would return at most 25
    results, even when the maximum number of results was set higher
  - Fixed a bug where podman play kube would not honor capabilities
    set in imported YAML (#3689)
  - Fixed a bug where podman run --env, when passed a single key
    (to use the value from the host), would set the environment
    variable in the container even if it was not set on the host
    (#3648)
  - Fixed a bug where podman commit --changes would not properly
    set environment variables
  - Fixed a bug where Podman could segfault while working with
    images with no history
  - Fixed a bug where podman volume rm could remove arbitrary
    volumes if given an ambiguous name (#3635)
  - Fixed a bug where podman exec invocations leaked memory by not
    cleaning up files in tmpfs
  - Fixed a bug where the --dns and --net=container flags to podman
    run and podman create were not mutually exclusive (#3553)
  - Fixed a bug where rootless Podman would be unable to run
    containers when less than 5 UIDs were available
  - Fixed a bug where containers in pods could not be removed
    without removing the entire pod (#3556)
  - Fixed a bug where Podman would not properly clean up all CGroup
    controllers for created cgroups when using the cgroupfs CGroup
    driver
  - Fixed a bug where Podman containers did not properly clean up
    files in tmpfs, resulting in a memory leak as containers
    stopped
  - Fixed a bug where healthchecks from images would not use
    default settings for interval, retries, timeout, and start
    period when they were not provided by the image (#3525)
  - Fixed a bug where healthchecks using the HEALTHCHECK CMD format
    where not properly supported (#3507)
  - Fixed a bug where volume mounts using relative source paths
    would not be properly resolved (#3504)
  - Fixed a bug where podman run did not use authorization
    credentials when a custom path was specified (#3524)
  - Fixed a bug where containers checkpointed with podman container
    checkpoint did not properly set their finished time
  - Fixed a bug where running podman inspect on any container not
    created with podman run or podman create (for example, pod
    infra containers) would result in a segfault (#3500)
  - Fixed a bug where healthcheck flags for podman create and
    podman run were incorrectly named (#3455)
  - Fixed a bug where Podman commands would fail to find targets if
    a partial ID was specified that was ambiguous between a
    container and pod (#3487)
  - Fixed a bug where restored containers would not have the
    correct SELinux label
  - Fixed a bug where Varlink endpoints were not working properly
    if more was not correctly specified
  - Fixed a bug where the Varlink PullImage endpoint would crash if
    an error occurred (#3715)
  - Fixed a bug where the --mount flag to podman create and podman
    run did not allow boolean arguments for its ro and rw options
    (#2980)
  - Fixed a bug where pods did not properly share the UTS
    namespace, resulting in incorrect behavior from some utilities
    which rely on hostname (#3547)
  - Fixed a bug where Podman would unconditionally append
    ENTRYPOINT to CMD during podman commit (and when reporting CMD
    in podman inspect) (#3708)
  - Fixed a bug where podman events with the journald events
    backend would incorrectly print 6 previous events when only new
    events were requested (#3616)
  - Fixed a bug where podman port would exit prematurely when a
    port number was specified (#3747)
  - Fixed a bug where passing . as an argument to the --dns-search
    flag to podman create and podman run was not properly clearing
    DNS search domains in the container

* Misc

  - Updated vendored Buildah to v1.10.1
  - Updated vendored containers/image to v3.0.2
  - Updated vendored containers/storage to v1.13.1
  - Podman now requires conmon v2.0.0 or higher
  - The podman info command now displays the events logger being in
    use
  - The podman inspect command on containers now includes the ID of
    the pod a container has joined and the PID of the container's
    conmon process
  - The -v short flag for podman --version has been re-added
  - Error messages from podman pull should be significantly clearer
  - The podman exec command is now available in the remote client
  - The podman-v1.5.0.tar.gz file attached is podman packaged for
    MacOS. It can be installed using Homebrew.
- Update libpod.conf to support latest path discovery feature for
  `runc` and `conmon` binaries.

conmon was included in version 2.0.10. (bsc#1160460, bsc#1164390, jsc#ECO-1048, jsc#SLE-11485, jsc#SLE-11331):

fuse-overlayfs was updated to v0.7.6 (bsc#1160460)

- do not look in lower layers for the ino if there is no origin
  xattr set
- attempt to use the file path if the operation on the fd fails
  with ENXIO
- do not expose internal xattrs through listxattr and getxattr
- fix fallocate for deleted files.
- ignore O_DIRECT.  It causes issues with libfuse not using an
  aligned buffer, causing write(2) to fail with EINVAL.
- on copyup, do not copy the opaque xattr.
- fix a wrong lookup for whiteout files, that could happen on a
  double unlink.
- fix possible segmentation fault in direct_fsync()
- use the data store to create missing whiteouts
- after a rename, force a directory reload
- introduce inodes cache
- correctly read inode for unix sockets
- avoid hash map lookup when possible
- use st_dev for the ino key
- check whether writeback is supported
- set_attrs: don't require write to S_IFREG
- ioctl: do not reuse fi-&gt;fh for directories
- fix skip whiteout deletion optimization
- store the new mode after chmod
- support fuse writeback cache and enable it by default
- add option to disable fsync
- add option to disable xattrs
- add option to skip ino number check in lower layers
- fix fd validity check
- fix memory leak
- fix read after free
- fix type for flistxattr return
- fix warnings reported by lgtm.com
- enable parallel dirops

cni was updated to 0.7.1:

- Set correct CNI version for 99-loopback.conf

Update to version 0.7.1 (bsc#1160460):

* Library changes:

  + invoke : ensure custom envs of CNIArgs are prepended to process envs
  + add GetNetworkListCachedResult to CNI interface
  + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance

* Documentation &amp; Convention changes:

  + Update cnitool documentation for spec v0.4.0
  + Add cni-route-override to CNI plugin list

Update to version 0.7.0:

* Spec changes:

  + Use more RFC2119 style language in specification (must, should...)
  + add notes about ADD/DEL ordering
  + Make the container ID required and unique.
  + remove the version parameter from ADD and DEL commands.
  + Network interface name matters
  + be explicit about optional and required structure members
  + add CHECK method
  + Add a well-known error for 'try again'
  + SPEC.md: clarify meaning of 'routes'

* Library changes:

  + pkg/types: Makes IPAM concrete type
  + libcni: return error if Type is empty
  + skel: VERSION shouldn't block on stdin
  + non-pointer instances of types.Route now correctly marshal to JSON
  + libcni: add ValidateNetwork and ValidateNetworkList functions
  + pkg/skel: return error if JSON config has no network name
  + skel: add support for plugin version string
  + libcni: make exec handling an interface for better downstream testing
  + libcni: api now takes a Context to allow operations to be timed out or cancelled
  + types/version: add helper to parse PrevResult
  + skel: only print about message, not errors
  + skel,invoke,libcni: implementation of CHECK method
  + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
  + cnitool: validate correct number of args
  + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
  + add PrintTo method to Result interface
  + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory

cni-plugins was updated to 0.8.4:

Update to version 0.8.4 (bsc#1160460):

* add support for mips64le
* Add missing cniVersion in README example
* bump go-iptables module to v0.4.5
* iptables: add idempotent functions
* portmap doesn't fail if chain doesn't exist
* fix portmap port forward flakiness
* Add Bruce Ma and Piotr Skarmuk as owners

Update to version 0.8.3:

* Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).

* Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).

* Bugfixes:

  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).

* Docs:

  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).

Update plugins to v0.8.2

+ New features:

  * Support 'args' in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable

+ Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to 'cni0': file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is 'invalid argument' not 'file exists'
  * bump containernetworking/cni to v0.7.1

Updated plugins to v0.8.1:

+ Bugs:

  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface

+ Improvements:
  * host-device: add pciBusID property

Updated plugins to v0.8.0:

+ New plugins:

  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins

+ Plugin features / changelog:

  * CHECK Support
  * macvlan:
    - Allow to configure empty ipam for macvlan
    - Make master config optional
  * bridge:
    - Add vlan tag to the bridge cni plugin
    - Allow the user to assign VLAN tag
    - L2 bridge Implementation.
  * dhcp:
    - Include Subnet Mask option parameter in DHCPREQUEST
    - Add systemd unit file to activate socket with systemd
    - Add container ifName to the dhcp clientID, making the
      clientID value
  * flannel:
    - Pass through runtimeConfig to delegate
  * host-local:
    - host-local: add ifname to file tracking IP address used
  * host-device:
    - Support the IPAM in the host-device
    - Handle empty netns in DEL for loopback and host-device
  * tuning:
    - adds 'ip link' command related feature into tuning
+ Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip

from version v0.7.5:

+ This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules

+ This fixes a potential issue where firewall rules may
  be bypassed by port mapping

		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-16"/>
	<updated date="2020-03-16"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1155217">SUSE bug 1155217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160460">SUSE bug 1160460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164390">SUSE bug 1164390</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-18466/">CVE-2019-18466</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498100" comment="cni-0.7.1-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498101" comment="cni-plugins-0.8.4-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138872" version="1" class="patch">
	<metadata>
		<title>Security update for cloud-init (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162936" ref_url="https://bugzilla.suse.com/1162936" source="BUGZILLA"/>
		<reference ref_id="1162937" ref_url="https://bugzilla.suse.com/1162937" source="BUGZILLA"/>
		<reference ref_id="1163178" ref_url="https://bugzilla.suse.com/1163178" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8631" ref_url="https://www.suse.com/security/cve/CVE-2020-8631/" source="CVE"/>
		<reference ref_id="CVE-2020-8632" ref_url="https://www.suse.com/security/cve/CVE-2020-8632/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006634.html" source="SUSE-SU"/>
		<description>
This update for cloud-init fixes the following security issues:

- CVE-2020-8631: Replaced the theoretically predictable deterministic RNG with the system RNG (bsc#1162937).
- CVE-2020-8632: Increased the default random password length from 9 to 20 (bsc#1162936).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-23"/>
	<updated date="2020-03-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162936">SUSE bug 1162936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162937">SUSE bug 1162937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163178">SUSE bug 1163178</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8631/">CVE-2020-8631</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8632/">CVE-2020-8632</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498102" comment="cloud-init-19.4-8.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498103" comment="cloud-init-config-suse-19.4-8.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138873" version="1" class="patch">
	<metadata>
		<title>Security update for python-aiohttp (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1184745" ref_url="https://bugzilla.suse.com/1184745" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21330" ref_url="https://www.suse.com/security/cve/CVE-2021-21330/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008677.html" source="SUSE-SU"/>
		<description>
This update for python-aiohttp fixes the following issues:

- CVE-2021-21330: Fixed the way pure-Python HTTP parser interprets `//` (bsc#1184745)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-26"/>
	<updated date="2021-04-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184745">SUSE bug 1184745</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21330/">CVE-2021-21330</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498104" comment="python-aiohttp-doc-3.4.4-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498105" comment="python3-aiohttp-3.4.4-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138874" version="1" class="patch">
	<metadata>
		<title>Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1102408" ref_url="https://bugzilla.suse.com/1102408" source="BUGZILLA"/>
		<reference ref_id="1138715" ref_url="https://bugzilla.suse.com/1138715" source="BUGZILLA"/>
		<reference ref_id="1138746" ref_url="https://bugzilla.suse.com/1138746" source="BUGZILLA"/>
		<reference ref_id="1176389" ref_url="https://bugzilla.suse.com/1176389" source="BUGZILLA"/>
		<reference ref_id="1177120" ref_url="https://bugzilla.suse.com/1177120" source="BUGZILLA"/>
		<reference ref_id="1182421" ref_url="https://bugzilla.suse.com/1182421" source="BUGZILLA"/>
		<reference ref_id="1182422" ref_url="https://bugzilla.suse.com/1182422" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26137" ref_url="https://www.suse.com/security/cve/CVE-2020-26137/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009334.html" source="SUSE-SU"/>
		<description>
This patch updates the Python AWS SDK stack in SLE 15:

General:

# aws-cli

- Version updated to upstream release v1.19.9
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-boto3

- Version updated to upstream release 1.17.9
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-botocore

- Version updated to upstream release 1.20.9
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-urllib3

- Version updated to upstream release 1.25.10
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-service_identity

- Added this new package to resolve runtime dependencies for other packages.
  Version: 18.1.0

# python-trustme

- Added this new package to resolve runtime dependencies for other packages.
  Version: 0.6.0

Security fixes:

# python-urllib3:
  
- CVE-2020-26137: urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated
  by inserting CR and LF control characters in the first argument of putrequest() (bsc#1177120)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-23"/>
	<updated date="2021-08-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1102408">SUSE bug 1102408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138715">SUSE bug 1138715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138746">SUSE bug 1138746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176389">SUSE bug 1176389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177120">SUSE bug 1177120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182421">SUSE bug 1182421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182422">SUSE bug 1182422</bugzilla>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26137/">CVE-2020-26137</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626957" comment="aws-cli-1.19.9-26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626947" comment="python3-botocore-1.20.9-33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626958" comment="python3-service_identity-18.1.0-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626959" comment="python3-trustme-0.6.0-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138875" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1040855" ref_url="https://bugzilla.suse.com/1040855" source="BUGZILLA"/>
		<reference ref_id="1044120" ref_url="https://bugzilla.suse.com/1044120" source="BUGZILLA"/>
		<reference ref_id="1044767" ref_url="https://bugzilla.suse.com/1044767" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1056653" ref_url="https://bugzilla.suse.com/1056653" source="BUGZILLA"/>
		<reference ref_id="1056657" ref_url="https://bugzilla.suse.com/1056657" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1094840" ref_url="https://bugzilla.suse.com/1094840" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104389" ref_url="https://bugzilla.suse.com/1104389" source="BUGZILLA"/>
		<reference ref_id="1104393" ref_url="https://bugzilla.suse.com/1104393" source="BUGZILLA"/>
		<reference ref_id="1109695" ref_url="https://bugzilla.suse.com/1109695" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1110096" ref_url="https://bugzilla.suse.com/1110096" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1115431" ref_url="https://bugzilla.suse.com/1115431" source="BUGZILLA"/>
		<reference ref_id="1118657" ref_url="https://bugzilla.suse.com/1118657" source="BUGZILLA"/>
		<reference ref_id="1122971" ref_url="https://bugzilla.suse.com/1122971" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1138374" ref_url="https://bugzilla.suse.com/1138374" source="BUGZILLA"/>
		<reference ref_id="1139944" ref_url="https://bugzilla.suse.com/1139944" source="BUGZILLA"/>
		<reference ref_id="1144912" ref_url="https://bugzilla.suse.com/1144912" source="BUGZILLA"/>
		<reference ref_id="1152457" ref_url="https://bugzilla.suse.com/1152457" source="BUGZILLA"/>
		<reference ref_id="1158775" ref_url="https://bugzilla.suse.com/1158775" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1168952" ref_url="https://bugzilla.suse.com/1168952" source="BUGZILLA"/>
		<reference ref_id="1171078" ref_url="https://bugzilla.suse.com/1171078" source="BUGZILLA"/>
		<reference ref_id="1172145" ref_url="https://bugzilla.suse.com/1172145" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1172694" ref_url="https://bugzilla.suse.com/1172694" source="BUGZILLA"/>
		<reference ref_id="1173834" ref_url="https://bugzilla.suse.com/1173834" source="BUGZILLA"/>
		<reference ref_id="1174784" ref_url="https://bugzilla.suse.com/1174784" source="BUGZILLA"/>
		<reference ref_id="1174852" ref_url="https://bugzilla.suse.com/1174852" source="BUGZILLA"/>
		<reference ref_id="1176558" ref_url="https://bugzilla.suse.com/1176558" source="BUGZILLA"/>
		<reference ref_id="1176559" ref_url="https://bugzilla.suse.com/1176559" source="BUGZILLA"/>
		<reference ref_id="1176956" ref_url="https://bugzilla.suse.com/1176956" source="BUGZILLA"/>
		<reference ref_id="1177666" ref_url="https://bugzilla.suse.com/1177666" source="BUGZILLA"/>
		<reference ref_id="1178270" ref_url="https://bugzilla.suse.com/1178270" source="BUGZILLA"/>
		<reference ref_id="1178401" ref_url="https://bugzilla.suse.com/1178401" source="BUGZILLA"/>
		<reference ref_id="1178590" ref_url="https://bugzilla.suse.com/1178590" source="BUGZILLA"/>
		<reference ref_id="1178634" ref_url="https://bugzilla.suse.com/1178634" source="BUGZILLA"/>
		<reference ref_id="1178762" ref_url="https://bugzilla.suse.com/1178762" source="BUGZILLA"/>
		<reference ref_id="1179014" ref_url="https://bugzilla.suse.com/1179014" source="BUGZILLA"/>
		<reference ref_id="1179015" ref_url="https://bugzilla.suse.com/1179015" source="BUGZILLA"/>
		<reference ref_id="1179045" ref_url="https://bugzilla.suse.com/1179045" source="BUGZILLA"/>
		<reference ref_id="1179082" ref_url="https://bugzilla.suse.com/1179082" source="BUGZILLA"/>
		<reference ref_id="1179107" ref_url="https://bugzilla.suse.com/1179107" source="BUGZILLA"/>
		<reference ref_id="1179141" ref_url="https://bugzilla.suse.com/1179141" source="BUGZILLA"/>
		<reference ref_id="1179142" ref_url="https://bugzilla.suse.com/1179142" source="BUGZILLA"/>
		<reference ref_id="1179204" ref_url="https://bugzilla.suse.com/1179204" source="BUGZILLA"/>
		<reference ref_id="1179403" ref_url="https://bugzilla.suse.com/1179403" source="BUGZILLA"/>
		<reference ref_id="1179406" ref_url="https://bugzilla.suse.com/1179406" source="BUGZILLA"/>
		<reference ref_id="1179418" ref_url="https://bugzilla.suse.com/1179418" source="BUGZILLA"/>
		<reference ref_id="1179419" ref_url="https://bugzilla.suse.com/1179419" source="BUGZILLA"/>
		<reference ref_id="1179421" ref_url="https://bugzilla.suse.com/1179421" source="BUGZILLA"/>
		<reference ref_id="1179429" ref_url="https://bugzilla.suse.com/1179429" source="BUGZILLA"/>
		<reference ref_id="1179444" ref_url="https://bugzilla.suse.com/1179444" source="BUGZILLA"/>
		<reference ref_id="1179520" ref_url="https://bugzilla.suse.com/1179520" source="BUGZILLA"/>
		<reference ref_id="1179578" ref_url="https://bugzilla.suse.com/1179578" source="BUGZILLA"/>
		<reference ref_id="1179601" ref_url="https://bugzilla.suse.com/1179601" source="BUGZILLA"/>
		<reference ref_id="1179663" ref_url="https://bugzilla.suse.com/1179663" source="BUGZILLA"/>
		<reference ref_id="1179670" ref_url="https://bugzilla.suse.com/1179670" source="BUGZILLA"/>
		<reference ref_id="1179671" ref_url="https://bugzilla.suse.com/1179671" source="BUGZILLA"/>
		<reference ref_id="1179672" ref_url="https://bugzilla.suse.com/1179672" source="BUGZILLA"/>
		<reference ref_id="1179673" ref_url="https://bugzilla.suse.com/1179673" source="BUGZILLA"/>
		<reference ref_id="1179711" ref_url="https://bugzilla.suse.com/1179711" source="BUGZILLA"/>
		<reference ref_id="1179713" ref_url="https://bugzilla.suse.com/1179713" source="BUGZILLA"/>
		<reference ref_id="1179714" ref_url="https://bugzilla.suse.com/1179714" source="BUGZILLA"/>
		<reference ref_id="1179715" ref_url="https://bugzilla.suse.com/1179715" source="BUGZILLA"/>
		<reference ref_id="1179716" ref_url="https://bugzilla.suse.com/1179716" source="BUGZILLA"/>
		<reference ref_id="1179722" ref_url="https://bugzilla.suse.com/1179722" source="BUGZILLA"/>
		<reference ref_id="1179723" ref_url="https://bugzilla.suse.com/1179723" source="BUGZILLA"/>
		<reference ref_id="1179724" ref_url="https://bugzilla.suse.com/1179724" source="BUGZILLA"/>
		<reference ref_id="1179745" ref_url="https://bugzilla.suse.com/1179745" source="BUGZILLA"/>
		<reference ref_id="1179810" ref_url="https://bugzilla.suse.com/1179810" source="BUGZILLA"/>
		<reference ref_id="1179888" ref_url="https://bugzilla.suse.com/1179888" source="BUGZILLA"/>
		<reference ref_id="1179895" ref_url="https://bugzilla.suse.com/1179895" source="BUGZILLA"/>
		<reference ref_id="1179896" ref_url="https://bugzilla.suse.com/1179896" source="BUGZILLA"/>
		<reference ref_id="1179960" ref_url="https://bugzilla.suse.com/1179960" source="BUGZILLA"/>
		<reference ref_id="1179963" ref_url="https://bugzilla.suse.com/1179963" source="BUGZILLA"/>
		<reference ref_id="1180027" ref_url="https://bugzilla.suse.com/1180027" source="BUGZILLA"/>
		<reference ref_id="1180029" ref_url="https://bugzilla.suse.com/1180029" source="BUGZILLA"/>
		<reference ref_id="1180031" ref_url="https://bugzilla.suse.com/1180031" source="BUGZILLA"/>
		<reference ref_id="1180052" ref_url="https://bugzilla.suse.com/1180052" source="BUGZILLA"/>
		<reference ref_id="1180086" ref_url="https://bugzilla.suse.com/1180086" source="BUGZILLA"/>
		<reference ref_id="1180117" ref_url="https://bugzilla.suse.com/1180117" source="BUGZILLA"/>
		<reference ref_id="1180258" ref_url="https://bugzilla.suse.com/1180258" source="BUGZILLA"/>
		<reference ref_id="1180506" ref_url="https://bugzilla.suse.com/1180506" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20669" ref_url="https://www.suse.com/security/cve/CVE-2018-20669/" source="CVE"/>
		<reference ref_id="CVE-2019-20934" ref_url="https://www.suse.com/security/cve/CVE-2019-20934/" source="CVE"/>
		<reference ref_id="CVE-2020-0444" ref_url="https://www.suse.com/security/cve/CVE-2020-0444/" source="CVE"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-11668" ref_url="https://www.suse.com/security/cve/CVE-2020-11668/" source="CVE"/>
		<reference ref_id="CVE-2020-15436" ref_url="https://www.suse.com/security/cve/CVE-2020-15436/" source="CVE"/>
		<reference ref_id="CVE-2020-27068" ref_url="https://www.suse.com/security/cve/CVE-2020-27068/" source="CVE"/>
		<reference ref_id="CVE-2020-27777" ref_url="https://www.suse.com/security/cve/CVE-2020-27777/" source="CVE"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-27825" ref_url="https://www.suse.com/security/cve/CVE-2020-27825/" source="CVE"/>
		<reference ref_id="CVE-2020-29371" ref_url="https://www.suse.com/security/cve/CVE-2020-29371/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-4788" ref_url="https://www.suse.com/security/cve/CVE-2020-4788/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0097-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008186.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2019-20934: Fixed a use-after-free in show_numa_stats() because NUMA fault statistics were inappropriately freed, aka CID-16d51a590a8c (bsc#1179663).
- CVE-2020-0444: Fixed a bad kfree due to a logic error in audit_data_to_entry (bnc#1180027).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180029).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180031).
- CVE-2020-4788: Fixed an issue with IBM Power9 processors could have allowed a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances (bsc#1177666).
- CVE-2020-11668: Fixed an out of bounds write to the heap in drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) caused by mishandling invalid descriptors (bsc#1168952).
- CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141).
- CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds check in the nl80211_policy policy of nl80211.c (bnc#1180086).
- CVE-2020-27777: Fixed a privilege escalation in the Run-Time Abstraction Services (RTAS) interface, affecting guests running on top of PowerVM or KVM hypervisors (bnc#1179107).
- CVE-2020-27786: Fixed an out-of-bounds write in the MIDI implementation (bnc#1179601).
- CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls (bsc#1179960).
- CVE-2020-29371: Fixed uninitialized memory leaks to userspace (bsc#1179429).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bnc#1179745).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179745).

The following non-security bugs were fixed:

- ACPI: PNP: compare the string length in the matching_id() (git-fixes).
- ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1 (git-fixes).
- ACPICA: Do not increment operation_region reference counts for field units (git-fixes).
- ALSA: ca0106: fix error code handling (git-fixes).
- ALSA: ctl: allow TLV read operation for callback type of element in locked case (git-fixes).
- ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO (git-fixes).
- ALSA: hda/ca0132 - Change Input Source enum strings (git-fixes).
- ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg (git-fixes).
- ALSA: hda/generic: Add option to enforce preferred_dacs pairs (git-fixes).
- ALSA: hda/hdmi: always check pin power status in i915 pin fixup (git-fixes).
- ALSA: hda/realtek - Add new codec supported for ALC897 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (git-fixes).
- ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (git-fixes).
- ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520 (git-fixes).
- ALSA: hda/realtek: Enable headset of ASUS UX482EG &amp; B9400CEA with ALC294 (git-fixes).
- ALSA: hda: Add NVIDIA codec IDs 9a &amp; 9d through a0 to patch table (git-fixes).
- ALSA: hda: Fix potential race in unsol event handler (git-fixes).
- ALSA: hda: Fix regressions on clear and reconfig sysfs (git-fixes).
- ALSA: info: Drop WARN_ON() from buffer NULL sanity check (git-fixes).
- ALSA: isa/wavefront: prevent out of bounds write in ioctl (git-fixes).
- ALSA: line6: Perform sanity check for each URB creation (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: pcm: oss: Fix potential out-of-bounds shift (git-fixes).
- ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check (git-fixes).
- ALSA: timer: Limit max amount of slave instances (git-fixes).
- ALSA: usb-audio: Add delay quirk for all Logitech USB devices (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16 (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2 (git-fixes).
- ALSA: usb-audio: add quirk for Denon DCD-1500RE (git-fixes).
- ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG) (git-fixes).
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Alpha S (git-fixes).
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight S (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware does not give back (git-fixes).
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (git-fixes).
- ALSA: usb-audio: Fix OOB access of mixer element list (git-fixes).
- ALSA: usb-audio: Fix potential out-of-bounds shift (git-fixes).
- ALSA: usb-audio: Fix race against the error recovery URB submission (git-fixes).
- ALSA: usb-audio: US16x08: fix value count for level meters (git-fixes).
- ASoC: arizona: Fix a wrong free in wm8997_probe (git-fixes).
- ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (git-fixes).
- ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed (git-fixes).
- ASoC: jz4740-i2s: add missed checks for clk_get() (git-fixes).
- ASoC: pcm3168a: The codec does not support S32_LE (git-fixes).
- ASoC: pcm: DRAIN support reactivation (git-fixes).
- ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile (git-fixes).
- ASoC: sti: fix possible sleep-in-atomic (git-fixes).
- ASoC: wm8904: fix regcache handling (git-fixes).
- ASoC: wm8998: Fix PM disable depth imbalance on error (git-fixes).
- ASoC: wm_adsp: Do not generate kcontrols without READ flags (git-fixes).
- ASoC: wm_adsp: remove 'ctl' from list on error in wm_adsp_create_control() (git-fixes).
- ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function (git-fixes).
- ath10k: Fix an error handling path (git-fixes).
- ath10k: fix backtrace on coredump (git-fixes).
- ath10k: fix get invalid tx rate for Mesh metric (git-fixes).
- ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq (git-fixes).
- ath10k: Release some resources in an error handling path (git-fixes).
- ath10k: Remove msdu from idr when management pkt send fails (git-fixes).
- ath6kl: fix enum-conversion warning (git-fixes).
- ath9k_htc: Discard undersized packets (git-fixes).
- ath9k_htc: Modify byte order for an error message (git-fixes).
- ath9k_htc: Silence undersized packet warnings (git-fixes).
- ath9k_htc: Use appropriate rs_datalen type (git-fixes).
- backlight: lp855x: Ensure regulators are disabled on probe failure (git-fixes).
- Bluetooth: add a mutex lock to avoid UAF in do_enale_set (git-fixes).
- Bluetooth: btusb: Fix detection of some fake CSR controllers with a bcdDevice val of 0x0134 (git-fixes).
- Bluetooth: Fix advertising duplicated flags (git-fixes).
- Bluetooth: Fix null pointer dereference in hci_event_packet() (git-fixes).
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (git-fixes).
- bnxt_en: Fix race when modifying pause settings (bsc#1050242 ).
- bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex (bsc#1050242).
- btmrvl: Fix firmware filename for sd8997 chipset (bsc#1172694).
- btrfs: fix use-after-free on readahead extent after failure to create it (bsc#1179963).
- btrfs: qgroup: do not commit transaction when we already hold the handle (bsc#1178634).
- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1174784).
- bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (git-fixes).
- can: mcp251x: add error check when wq alloc failed (git-fixes).
- can: softing: softing_netdev_open(): fix error handling (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- cfg80211: regulatory: Fix inconsistent format argument (git-fixes).
- cifs: add NULL check for ses-&gt;tcon_ipc (bsc#1178270).
- cifs: allow syscalls to be restarted in __smb_send_rqst() (bsc#1176956).
- cifs: fix check of tcon dfs in smb1 (bsc#1178270).
- cifs: fix potential use-after-free in cifs_echo_request() (bsc#1139944).
- cirrus: cs89x0: remove set but not used variable 'lp' (git-fixes).
- cirrus: cs89x0: use devm_platform_ioremap_resource() to simplify code (git-fixes).
- clk: at91: usb: continue if clk_hw_round_rate() return zero (git-fixes).
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (git-fixes).
- clk: qcom: Allow constant ratio freq tables for rcg (git-fixes).
- clk: qcom: msm8916: Fix the address location of pll-&gt;config_reg (git-fixes).
- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (git-fixes).
- clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1 (git-fixes).
- clk: sunxi-ng: Make sure divider tables have sentinel (git-fixes).
- clk: tegra: Fix duplicated SE clock entry (git-fixes).
- clk: tegra: Fix Tegra PMC clock out parents (git-fixes).
- clk: ti: composite: fix memory leak (git-fixes).
- clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call (git-fixes).
- clk: ti: Fix memleak in ti_fapll_synth_setup (git-fixes).
- clocksource/drivers/asm9260: Add a check for of_clk_get (git-fixes).
- coredump: fix core_pattern parse error (git-fixes).
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (git-fixes).
- cpufreq: loongson1: Add missing MODULE_ALIAS (git-fixes).
- cpufreq: scpi: Add missing MODULE_ALIAS (git-fixes).
- cpufreq: st: Add missing MODULE_DEVICE_TABLE (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (git-fixes).
- crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr() (git-fixes).
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (git-fixes).
- cxgb4: Fix offset when clearing filter byte counters (bsc#1064802 bsc#1066129).
- drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish (git-fixes).
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (git-fixes).
- drm/amd/display: remove useless if/else (git-fixes).
- drm/amdgpu: fix build_coefficients() argument (git-fixes).
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (git-fixes).
- drm/gma500: fix double free of gma_connector (git-fixes).
- drm/meson: dw-hdmi: Register a callback to disable the regulator (git-fixes).
- drm/msm/dpu: Add newline to printks (git-fixes).
- drm/msm/dsi_phy_10nm: implement PHY disabling (git-fixes).
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (git-fixes).
- drm/rockchip: Avoid uninitialized use of endpoint id in LVDS (git-fixes).
- epoll: Keep a reference on files added to the check list (bsc#1180031).
- ext4: correctly report 'not supported' for {usr,grp}jquota when !CONFIG_QUOTA (bsc#1179672).
- ext4: fix bogus warning in ext4_update_dx_flag() (bsc#1179716).
- ext4: fix error handling code in add_new_gdb (bsc#1179722).
- ext4: fix invalid inode checksum (bsc#1179723).
- ext4: fix leaking sysfs kobject after failed mount (bsc#1179670).
- ext4: limit entries returned when counting fsmap records (bsc#1179671).
- ext4: unlock xattr_sem properly in ext4_inline_data_truncate() (bsc#1179673).
- extcon: max77693: Fix modalias string (git-fixes).
- firmware: qcom: scm: Ensure 'a0' status code is treated as signed (git-fixes).
- fix regression in 'epoll: Keep a reference on files added to the check list' (bsc#1180031, git-fixes).
- forcedeth: use per cpu to collect xmit/recv statistics (git-fixes).
- fs: Do not invalidate page buffers in block_write_full_page() (bsc#1179711).
- geneve: change from tx_error to tx_dropped on missing metadata (git-fixes).
- genirq/irqdomain: Add an irq_create_mapping_affinity() function (bsc#1065729).
- gpio: arizona: handle pm_runtime_get_sync failure case (git-fixes).
- gpio: gpio-grgpio: fix possible sleep-in-atomic-context bugs in grgpio_irq_map/unmap() (git-fixes).
- gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP (git-fixes).
- gpio: max77620: Fixup debounce delays (git-fixes).
- gpio: max77620: Use correct unit for debounce times (git-fixes).
- gpio: mpc8xxx: Add platform device to gpiochip-&gt;parent (git-fixes).
- gpio: mvebu: fix potential user-after-free on probe (git-fixes).
- gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism (git-fixes).
- gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 BYT + AXP288 model (git-fixes).
- gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 CHT + AXP288 model (git-fixes).
- gpiolib: acpi: Correct comment for HP x2 10 honor_wakeup quirk (git-fixes).
- gpiolib: acpi: Rework honor_wakeup option into an ignore_wake option (git-fixes).
- gpiolib: acpi: Turn dmi_system_id table into a generic quirk table (git-fixes).
- gpiolib: fix up emulated open drain outputs (git-fixes).
- HID: Add another Primax PIXART OEM mouse quirk (git-fixes).
- HID: apple: Disable Fn-key key-re-mapping on clone keyboards (git-fixes).
- HID: core: check whether Usage Page item is after Usage ID items (git-fixes).
- HID: core: Correctly handle ReportSize being zero (git-fixes).
- HID: cypress: Support Varmilo Keyboards' media hotkeys (git-fixes).
- HID: Fix slab-out-of-bounds read in hid_field_extract (bsc#1180052).
- HID: hid-sensor-hub: Fix issue with devices with no report ID (git-fixes).
- HID: Improve Windows Precision Touchpad detection (git-fixes).
- HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() (git-fixes).
- HID: logitech-hidpp: Silence intermittent get_battery_capacity errors (git-fixes).
- HSI: omap_ssi: Do not jump to free ID in ssi_add_controller() (git-fixes).
- hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow (git-fixes).
- hwmon: (jc42) Fix name to have no illegal characters (git-fixes).
- i2c: algo: pca: Reapply i2c bus settings after reset (git-fixes).
- i2c: i801: Fix resume bug (git-fixes).
- i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets (git-fixes).
- i2c: pxa: clear all master action bits in i2c_pxa_stop_message() (git-fixes).
- i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output (git-fixes).
- i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (git-fixes).
- i40iw: Fix error handling in i40iw_manage_arp_cache() (bsc#1111666)
- i40iw: fix null pointer dereference on a null wqe pointer (bsc#1111666)
- i40iw: Report correct firmware version (bsc#1111666)
- IB/cma: Fix ports memory leak in cma_configfs (bsc#1111666)
- IB/hfi1: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666)
- IB/hfi1: Fix memory leaks in sysfs registration and unregistration (bsc#1111666)
- IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode (bsc#1111666)
- IB/mlx4: Add and improve logging (bsc#1111666)
- IB/mlx4: Add support for MRA (bsc#1111666)
- IB/mlx4: Adjust delayed work when a dup is observed (bsc#1111666)
- IB/mlx4: Fix starvation in paravirt mux/demux (bsc#1111666)
- IB/mlx4: Test return value of calls to ib_get_cached_pkey (bsc#1111666)
- IB/mthca: fix return value of error branch in mthca_init_cq() (bsc#1111666)
- IB/qib: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666)
- IB/rdmavt: Fix sizeof mismatch (bsc#1111666)
- IB/srpt: Fix memory leak in srpt_add_one (bsc#1111666)
- ibmvnic: add some debugs (bsc#1179896 ltc#190255).
- ibmvnic: avoid memset null scrq msgs (bsc#1044767 ltc#155231 git-fixes).
- ibmvnic: continue fatal error reset after passive init (bsc#1171078 ltc#184239 git-fixes).
- ibmvnic: delay next reset if hard reset fails (bsc#1094840 ltc#167098 git-fixes).
- ibmvnic: enhance resetting status check during module exit (bsc#1065729).
- ibmvnic: fix call_netdevice_notifiers in do_reset (bsc#1115431 ltc#171853 git-fixes).
- ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues (bsc#1040855 ltc#155067 git-fixes).
- ibmvnic: fix: NULL pointer dereference (bsc#1044767 ltc#155231 git-fixes).
- ibmvnic: notify peers when failover and migration happen (bsc#1044120 ltc#155423 git-fixes).
- ibmvnic: restore adapter state on failed reset (bsc#1152457 ltc#174432 git-fixes).
- igc: Fix returning wrong statistics (bsc#1118657).
- iio: adc: max1027: Reset the device at probe time (git-fixes).
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (git-fixes).
- iio: bmp280: fix compensation of humidity (git-fixes).
- iio: buffer: Fix demux update (git-fixes).
- iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw() (git-fixes).
- iio: fix center temperature of bmc150-accel-core (git-fixes).
- iio: humidity: hdc100x: fix IIO_HUMIDITYRELATIVE channel reporting (git-fixes).
- iio: light: bh1750: Resolve compiler warning and make code more readable (git-fixes).
- iio: srf04: fix wrong limitation in distance measuring (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- iio:pressure:mpl3115: Force alignment of buffer (git-fixes).
- inet_ecn: Fix endianness of checksum update when setting ECT(1) (git-fixes).
- Input: ads7846 - fix integer overflow on Rt calculation (git-fixes).
- Input: ads7846 - fix race that causes missing releases (git-fixes).
- Input: ads7846 - fix unaligned access on 7845 (git-fixes).
- Input: atmel_mxt_ts - disable IRQ across suspend (git-fixes).
- Input: cm109 - do not stomp on control URB (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events (git-fixes).
- Input: cyapa_gen6 - fix out-of-bounds stack access (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (git-fixes).
- Input: i8042 - add Acer laptops to the i8042 reset list (git-fixes).
- Input: i8042 - add ByteSpeed touchpad to noloop table (git-fixes).
- Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists (git-fixes).
- Input: i8042 - allow insmod to succeed on devices without an i8042 controller (git-fixes).
- Input: i8042 - fix error return code in i8042_setup_aux() (git-fixes).
- Input: omap4-keypad - fix runtime PM error handling (git-fixes).
- Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen (git-fixes).
- Input: trackpoint - add new trackpoint variant IDs (git-fixes).
- Input: trackpoint - enable Synaptics trackpoints (git-fixes).
- Input: xpad - support Ardwiino Controllers (git-fixes).
- ipw2x00: Fix -Wcast-function-type (git-fixes).
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (git-fixes).
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (git-fixes).
- iwlwifi: mvm: fix unaligned read of rx_pkt_status (git-fixes).
- iwlwifi: pcie: limit memory read spin time (git-fixes).
- kABI fix for g2d (git-fixes).
- kABI workaround for dsa/b53 changes (git-fixes).
- kABI workaround for HD-audio generic parser (git-fixes).
- kABI workaround for net/ipvlan changes (git-fixes).
- kABI workaround for usermodehelper changes (bsc#1179406).
- kABI: ath10k: move a new structure member to the end (git-fixes).
- kABI: genirq: add back irq_create_mapping (bsc#1065729).
- kernel-source.spec: Fix build with rpm 4.16 (boo#1179015). RPM_BUILD_ROOT is cleared before %%install. Do the unpack into RPM_BUILD_ROOT in %%install
- kernel-{binary,source}.spec.in: do not create loop symlinks (bsc#1179082)
- kgdb: Fix spurious true from in_dbg_master() (git-fixes).
- KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (bsc#1112178).
- mac80211: allow rx of mesh eapol frames with default rx key (git-fixes).
- mac80211: Check port authorization in the ieee80211_tx_dequeue() case (git-fixes).
- mac80211: do not set set TDLS STA bandwidth wider than possible (git-fixes).
- mac80211: fix authentication with iwlwifi/mvm (git-fixes).
- mac80211: fix use of skb payload instead of header (git-fixes).
- mac80211: mesh: fix mesh_pathtbl_init() error path (git-fixes).
- matroxfb: avoid -Warray-bounds warning (git-fixes).
- md/raid5: fix oops during stripe resizing (git-fixes).
- media: am437x-vpfe: Setting STD to current value is not an error (git-fixes).
- media: cec-funcs.h: add status_req checks (git-fixes).
- media: cx88: Fix some error handling path in 'cx8800_initdev()' (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: i2c: mt9v032: fix enum mbus codes and frame sizes (git-fixes).
- media: i2c: ov2659: Fix missing 720p register config (git-fixes).
- media: i2c: ov2659: fix s_stream return value (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: mtk-mdp: Fix a refcounting bug on error in init (git-fixes).
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (git-fixes).
- media: platform: add missing put_device() call in mtk_jpeg_probe() and mtk_jpeg_remove() (git-patches).
- media: pvrusb2: Fix oops on tear-down when radio support is not present (git-fixes).
- media: s5p-g2d: Fix a memory leak in an error handling path in 'g2d_probe()' (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio() (git-fixes).
- media: si470x-i2c: add missed operations in remove (git-fixes).
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling case (git-fixes).
- media: sti: bdisp: fix a possible sleep-in-atomic-context bug in bdisp_device_run() (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous (git-fixes).
- media: ti-vpe: vpe: ensure buffers are cleaned up properly in abort cases (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence number (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid sizeimage (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure causing a kernel panic (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format (git-fixes).
- media: ti-vpe: vpe: Make sure YUYV is set as default format (git-fixes).
- media: uvcvideo: Set media controller entity functions (git-fixes).
- media: uvcvideo: Silence shift-out-of-bounds warning (git-fixes).
- media: v4l2-async: Fix trivial documentation typo (git-fixes).
- media: v4l2-core: fix touch support in v4l_g_fmt (git-fixes).
- media: v4l2-device.h: Explicitly compare grp{id,mask} to zero in v4l2_device macros (git-fixes).
- mei: bus: do not clean driver pointer (git-fixes).
- mei: protect mei_cl_mtu from null dereference (git-fixes).
- memstick: fix a double-free bug in memstick_check (git-fixes).
- memstick: r592: Fix error return in r592_probe() (git-fixes).
- mfd: rt5033: Fix errorneous defines (git-fixes).
- mfd: wm8994: Fix driver operation if loaded as modules (git-fixes).
- mlxsw: core: Fix memory leak on module removal (bsc#1112374).
- mm,memory_failure: always pin the page in madvise_inject_error (bsc#1180258).
- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (bsc#1179204).
- Move upstreamed bt fixes into sorted section
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/tls: Fix kmap usage (bsc#1109837).
- net/tls: missing received data after fast remote close (bsc#1109837).
- net/x25: prevent a couple of overflows (bsc#1178590).
- net: aquantia: Fix aq_vec_isr_legacy() return value (git-fixes).
- net: aquantia: fix LRO with FCS error (git-fixes).
- net: DCB: Validate DCB_ATTR_DCB_BUFFER argument (bsc#1103990 ).
- net: dsa: b53: Always use dev-&gt;vlan_enabled in b53_configure_vlan() (git-fixes).
- net: dsa: b53: Ensure the default VID is untagged (git-fixes).
- net: dsa: b53: Fix default VLAN ID (git-fixes).
- net: dsa: b53: Properly account for VLAN filtering (git-fixes).
- net: dsa: bcm_sf2: Do not assume DSA master supports WoL (git-fixes).
- net: dsa: bcm_sf2: potential array overflow in bcm_sf2_sw_suspend() (git-fixes).
- net: dsa: qca8k: remove leftover phy accessors (git-fixes).
- net: ena: fix packet's addresses for rx_offset feature (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (git-fixes).
- net: ethernet: ti: cpsw: clear all entries when delete vid (git-fixes).
- net: ethernet: ti: cpsw: fix runtime_pm while add/kill vlan (git-fixes).
- net: hisilicon: Fix signedness bug in hix5hd2_dev_probe() (git-fixes).
- net: macb: add missing barriers when reading descriptors (git-fixes).
- net: macb: fix dropped RX frames due to a race (git-fixes).
- net: macb: fix error format in dev_err() (git-fixes).
- net: macb: fix random memory corruption on RX with 64-bit DMA (git-fixes).
- net: pasemi: fix an use-after-free in pasemi_mac_phy_init() (git-fixes).
- net: phy: Avoid multiple suspends (git-fixes).
- net: qed: fix 'maybe uninitialized' warning (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: qed: fix async event callbacks unregistering (bsc#1104393 bsc#1104389).
- net: qede: fix PTP initialization on recovery (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: qede: fix use-after-free on recovery and AER handling (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: seeq: Fix the function used to release some memory in an error handling path (git-fixes).
- net: sh_eth: fix a missing check of of_get_phy_mode (git-fixes).
- net: sonic: replace dev_kfree_skb in sonic_send_packet (git-fixes).
- net: sonic: return NETDEV_TX_OK if failed to map buffer (git-fixes).
- net: stmmac: fix csr_clk can't be zero issue (git-fixes).
- net: stmmac: Fix reception of Broadcom switches tags (git-fixes).
- net: thunderx: use spin_lock_bh in nicvf_set_rx_mode_task() (bsc#1110096).
- net: usb: sr9800: fix uninitialized local variable (git-fixes).
- net:ethernet:aquantia: Extra spinlocks removed (git-fixes).
- net_sched: fix a memory leak in atm_tc_init() (bsc#1056657 bsc#1056653 bsc#1056787).
- nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame (git-fixes).
- nfc: s3fwrn5: Release the nfc firmware (git-fixes).
- nfc: st95hf: Fix memleak in st95hf_in_send_cmd (git-fixes).
- nfp: use correct define to return NONE fec (bsc#1109837).
- NFS: fix nfs_path in case of a rename retry (git-fixes).
- NFSD: Add missing NFSv2 .pc_func methods (git-fixes).
- NFSv4.2: fix client's attribute cache management for copy_file_range (git-fixes).
- NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag (git-fixes).
- ocfs2: fix unbalanced locking (bsc#1180506).
- ocfs2: initialize ip_next_orphan (bsc#1179724).
- orinoco: Move context allocation after processing the skb (git-fixes).
- parport: load lowlevel driver if ports not found (git-fixes).
- PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges (git-fixes).
- PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge (git-fixes).
- PCI: Do not disable decoding when mmio_always_on is set (git-fixes).
- PCI: Fix pci_slot_release() NULL pointer dereference (git-fixes).
- phy: Revert toggling reset changes (git-fixes).
- pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler() (git-fixes).
- pinctrl: amd: fix npins for uart0 in kerncz_groups (git-fixes).
- pinctrl: amd: remove debounce filter setting in IRQ type setting (git-fixes).
- pinctrl: baytrail: Avoid clearing debounce value when turning it off (git-fixes).
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (git-fixes).
- pinctrl: merrifield: Set default bias in case no particular value given (git-fixes).
- pinctrl: sh-pfc: sh7734: Fix duplicate TCLK1_B (git-fixes).
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (git-fixes).
- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (git-fixes).
- platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (git-fixes).
- platform/x86: mlx-platform: remove an unused variable (git-fixes).
- platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (git-fixes).
- platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (git-fixes).
- PM / hibernate: memory_bm_find_bit(): Tighten node optimisation (git-fixes).
- PM: ACPI: Output correct message on target power state (git-fixes).
- PM: hibernate: Freeze kernel threads in software_resume() (git-fixes).
- PM: hibernate: remove the bogus call to get_gendisk() in software_resume() (git-fixes).
- pNFS/flexfiles: Fix list corruption if the mirror count changes (git-fixes).
- power: supply: bq24190_charger: fix reference leak (git-fixes).
- power: supply: bq27xxx_battery: Silence deferred-probe error (git-fixes).
- powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (bsc#1065729).
- powerpc/64s/pseries: Fix hash tlbiel_all_isa300 for guest kernels (bsc#1179888 ltc#190253).
- powerpc/64s: Fix hash ISA v3.0 TLBIEL instruction generation (bsc#1055117 ltc#159753 git-fixes bsc#1179888 ltc#190253).
- powerpc/pci: Fix broken INTx configuration via OF (bsc#1172145 ltc#184630).
- powerpc/pci: Remove legacy debug code (bsc#1172145 ltc#184630 git-fixes).
- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145 ltc#184630).
- powerpc/pci: Use of_irq_parse_and_map_pci() helper (bsc#1172145 ltc#184630).
- powerpc/perf: Fix crash with is_sier_available when pmu is not set (bsc#1179578 ltc#189313).
- powerpc/pseries/hibernation: remove redundant cacheinfo update (bsc#1138374 ltc#178199 git-fixes).
- powerpc/pseries: Pass MSI affinity to irq_create_mapping() (bsc#1065729).
- powerpc/smp: Add __init to init_big_cores() (bsc#1109695 ltc#171067 git-fixes).
- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- powerpc: Convert to using %pOF instead of full_name (bsc#1172145 ltc#184630).
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (bsc#1065729).
- ppp: remove the PPPIOCDETACH ioctl (git-fixes).
- pwm: lp3943: Dynamically allocate PWM chip base (git-fixes).
- qed: fix error return code in qed_iwarp_ll2_start() (bsc#1050536 bsc#1050545).
- qed: suppress 'do not support RoCE &amp; iWARP' flooding on HW init (bsc#1050536 bsc#1050545).
- qed: suppress false-positives interrupt error messages on HW init (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- quota: clear padding in v2r1_mem2diskdqb() (bsc#1179714).
- radeon: insert 10ms sleep in dce5_crtc_load_lut (git-fixes).
- ravb: Fix use-after-free ravb_tstamp_skb (git-fixes).
- RDMA/bnxt_re: Fix lifetimes in bnxt_re_task (bsc#1111666)
- RDMA/bnxt_re: Fix sizeof mismatch for allocation of pbl_tbl. (bsc#1111666)
- RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (bsc#1111666)
- RDMA/cm: Fix checking for allowed duplicate listens (bsc#1111666)
- RDMA/cm: Remove a race freeing timewait_info (bsc#1111666)
- RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow (bsc#1111666)
- RDMA/cma: Protect bind_list and listen_list while finding matching cm id (bsc#1111666)
- RDMA/core: Fix race between destroy and release FD object (bsc#1111666)
- RDMA/core: Prevent mixed use of FDs between shared ufiles (bsc#1111666)
- RDMA/hns: Correct typo of hns_roce_create_cq() (bsc#1111666)
- RDMA/hns: Set the unsupported wr opcode (bsc#1111666)
- RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (bsc#1111666)
- RDMA/ipoib: Return void from ipoib_ib_dev_stop() (bsc#1111666)
- RDMA/ipoib: Set rtnl_link_ops for ipoib interfaces (bsc#1111666)
- RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads() (bsc#1111666)
- RDMA/mlx4: Initialize ib_spec on the stack (bsc#1111666)
- RDMA/mlx4: Read pkey table length instead of hardcoded value (bsc#1111666)
- RDMA/mlx5: Set GRH fields in query QP on RoCE (bsc#1111666)
- RDMA/mlx5: Verify that QP is created with RQ or SQ (bsc#1111666)
- RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() (bsc#1111666)
- RDMA/qedr: Endianness warnings cleanup (bsc#1111666)
- RDMA/qedr: Fix doorbell setting (bsc#1111666)
- RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532 (bsc#1050545).
- RDMA/qedr: Fix memory leak in iWARP CM (bsc#1050545 ).
- RDMA/qedr: Fix use of uninitialized field (bsc#1111666)
- RDMA/qedr: SRQ's bug fixes (bsc#1111666)
- RDMA/rxe: Drop pointless checks in rxe_init_ports (bsc#1111666)
- RDMA/rxe: Fix memleak in rxe_mem_init_user (bsc#1111666)
- RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars (bsc#1111666)
- RDMA/rxe: Prevent access to wr-&gt;next ptr afrer wr is posted to send queue (bsc#1111666)
- RDMA/rxe: Remove unused rxe_mem_map_pages (bsc#1111666)
- RDMA/rxe: Remove useless rxe_init_device_param assignments (bsc#1111666)
- RDMA/rxe: Return void from rxe_init_port_param() (bsc#1111666)
- RDMA/rxe: Return void from rxe_mem_init_dma() (bsc#1111666)
- RDMA/rxe: Set default vendor ID (bsc#1111666)
- RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices (bsc#1111666)
- RDMA/rxe: Skip dgid check in loopback mode (bsc#1111666)
- RDMA/srpt: Fix typo in srpt_unregister_mad_agent docstring (bsc#1111666)
- reboot: fix overflow parsing reboot cpu number (bsc#1179421).
- regmap: debugfs: check count when read regmap file (git-fixes).
- regmap: dev_get_regmap_match(): fix string comparison (git-fixes).
- regmap: Remove duplicate `type` field from regmap `regcache_sync` trace event (git-fixes).
- regulator: max8907: Fix the usage of uninitialized variable in max8907_regulator_probe() (git-fixes).
- regulator: pfuze100-regulator: Variable 'val' in pfuze100_regulator_probe() could be uninitialized (git-fixes).
- regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone (git-fixes).
- reiserfs: Fix oops during mount (bsc#1179715).
- reiserfs: Initialize inode keys properly (bsc#1179713).
- remoteproc: Fix wrong rvring index computation (git-fixes).
- rfkill: Fix incorrect check to avoid NULL pointer dereference (git-fixes).
- rtc: 88pm860x: fix possible race condition (git-fixes).
- rtc: hym8563: enable wakeup when applicable (git-fixes).
- rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot (git-fixes).
- rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt() (git-fixes).
- s390/bpf: Fix multiple tail calls (git-fixes).
- s390/cpuinfo: show processor physical address (git-fixes).
- s390/cpum_sf.c: fix file permission for cpum_sfb_size (git-fixes).
- s390/dasd: fix hanging device offline processing (bsc#1144912).
- s390/dasd: fix null pointer dereference for ERP requests (git-fixes).
- s390/pci: fix CPU address in MSI for directed IRQ (git-fixes).
- s390/qeth: fix af_iucv notification race (git-fixes).
- s390/qeth: fix tear down of async TX buffers (git-fixes).
- s390/qeth: make af_iucv TX notification call more robust (git-fixes).
- s390/stp: add locking to sysfs functions (git-fixes).
- s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (git-fixes).
- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- scsi: lpfc: Add FDMI Vendor MIB support (bsc#1164780).
- scsi: lpfc: Convert abort handling to SLI-3 and SLI-4 handlers (bsc#1164780).
- scsi: lpfc: Convert SCSI I/O completions to SLI-3 and SLI-4 handlers (bsc#1164780).
- scsi: lpfc: Convert SCSI path to use common I/O submission path (bsc#1164780).
- scsi: lpfc: Correct null ndlp reference on routine exit (bsc#1164780).
- scsi: lpfc: Drop nodelist reference on error in lpfc_gen_req() (bsc#1164780).
- scsi: lpfc: Enable common send_io interface for SCSI and NVMe (bsc#1164780).
- scsi: lpfc: Enable common wqe_template support for both SCSI and NVMe (bsc#1164780).
- scsi: lpfc: Enlarge max_sectors in scsi host templates (bsc#1164780).
- scsi: lpfc: Extend the RDF FPIN Registration descriptor for additional events (bsc#1164780).
- scsi: lpfc: Fix duplicate wq_create_version check (bsc#1164780).
- scsi: lpfc: Fix fall-through warnings for Clang (bsc#1164780).
- scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery (bsc#1164780).
- scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc() (bsc#1164780).
- scsi: lpfc: Fix memory leak on lcb_context (bsc#1164780).
- scsi: lpfc: Fix missing prototype for lpfc_nvmet_prep_abort_wqe() (bsc#1164780).
- scsi: lpfc: Fix missing prototype warning for lpfc_fdmi_vendor_attr_mi() (bsc#1164780).
- scsi: lpfc: Fix NPIV discovery and Fabric Node detection (bsc#1164780).
- scsi: lpfc: Fix NPIV Fabric Node reference counting (bsc#1164780).
- scsi: lpfc: Fix pointer defereference before it is null checked issue (bsc#1164780).
- scsi: lpfc: Fix refcounting around SCSI and NVMe transport APIs (bsc#1164780).
- scsi: lpfc: Fix removal of SCSI transport device get and put on dev structure (bsc#1164780).
- scsi: lpfc: Fix scheduling call while in softirq context in lpfc_unreg_rpi (bsc#1164780).
- scsi: lpfc: Fix set but not used warnings from Rework remote port lock handling (bsc#1164780).
- scsi: lpfc: Fix set but unused variables in lpfc_dev_loss_tmo_handler() (bsc#1164780).
- scsi: lpfc: Fix spelling mistake 'Cant' -&gt; 'Can't' (bsc#1164780).
- scsi: lpfc: Fix variable 'vport' set but not used in lpfc_sli4_abts_err_handler() (bsc#1164780).
- scsi: lpfc: lpfc_attr: Demote kernel-doc format for redefined functions (bsc#1164780).
- scsi: lpfc: lpfc_attr: Fix-up a bunch of kernel-doc misdemeanours (bsc#1164780).
- scsi: lpfc: lpfc_debugfs: Fix a couple of function documentation issues (bsc#1164780).
- scsi: lpfc: lpfc_scsi: Fix a whole host of kernel-doc issues (bsc#1164780).
- scsi: lpfc: Refactor WQE structure definitions for common use (bsc#1164780).
- scsi: lpfc: Reject CT request for MIB commands (bsc#1164780).
- scsi: lpfc: Remove dead code on second !ndlp check (bsc#1164780).
- scsi: lpfc: Remove ndlp when a PLOGI/ADISC/PRLI/REG_RPI ultimately fails (bsc#1164780).
- scsi: lpfc: Remove set but not used 'qp' (bsc#1164780).
- scsi: lpfc: Remove unneeded variable 'status' in lpfc_fcp_cpu_map_store() (bsc#1164780).
- scsi: lpfc: Removed unused macros in lpfc_attr.c (bsc#1164780).
- scsi: lpfc: Rework locations of ndlp reference taking (bsc#1164780).
- scsi: lpfc: Rework remote port lock handling (bsc#1164780).
- scsi: lpfc: Rework remote port ref counting and node freeing (bsc#1164780).
- scsi: lpfc: Unsolicited ELS leaves node in incorrect state while dropping it (bsc#1164780).
- scsi: lpfc: Update changed file copyrights for 2020 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.4 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.5 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.6 (bsc#1164780).
- scsi: lpfc: Use generic power management (bsc#1164780).
- scsi: qla2xxx: Change post del message from debug level to log level (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Do not check for fw_started while posting NVMe command (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Do not consume srb greedily (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix compilation issue in PPC systems (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix crash during driver load on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix device loss on 4G and older HBAs (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix flash update in 28XX adapters on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix FW initialization error on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix N2N and NVMe connect retry failure (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix return of uninitialized value in rval (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix the call trace for flush workqueue (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Handle aborts correctly for port undergoing deletion (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Initialize variable in qla8044_poll_reg() (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Limit interrupt vectors to number of CPUs (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Move sess cmd list/lock to driver (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove in_interrupt() from qla82xx-specific code (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove in_interrupt() from qla83xx-specific code (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: remove incorrect sparse #ifdef (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove trailing semicolon in macro definition (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Return EBUSY on fcport deletion (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Tear down session if FW say it is down (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Update version to 10.02.00.104-k (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Use constant when it is known (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: Remove unneeded break statements (bsc#1164780).
- scsi: storvsc: Fix error return in storvsc_probe() (git-fixes).
- scsi: target: tcm_qla2xxx: Remove BUG_ON(in_interrupt()) (bsc#1172538 bsc#1179142 bsc#1179810).
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (git-fixes).
- serial: 8250_pci: Add Realtek 816a and 816b (git-fixes).
- serial: amba-pl011: Make sure we initialize the port.lock spinlock (git-fixes).
- serial: ar933x_uart: set UART_CS_{RX,TX}_READY_ORIDE (git-fixes).
- serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init (git-fixes).
- serial_core: Check for port state when tty is in error state (git-fixes).
- SMB3: Honor 'handletimeout' flag for multiuser mounts (bsc#1176558).
- SMB3: Honor 'posix' flag for multiuser mounts (bsc#1176559).
- SMB3: Honor lease disabling for multiuser mounts (git-fixes).
- soc/tegra: fuse: Fix index bug in get_process_id (git-fixes).
- soc: imx: gpc: fix power up sequencing (git-fixes).
- soc: mediatek: Check if power domains can be powered on at boot time (git-fixes).
- soc: qcom: smp2p: Safely acquire spinlock without IRQs (git-fixes).
- soc: ti: Fix reference imbalance in knav_dma_probe (git-fixes).
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (git-fixes).
- spi: Add call to spi_slave_abort() function when spidev driver is released (git-fixes).
- spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (git-fixes).
- spi: davinci: Fix use-after-free on unbind (git-fixes).
- spi: dw: Enable interrupts in accordance with DMA xfer mode (git-fixes).
- spi: dw: Fix Rx-only DMA transfers (git-fixes).
- spi: dw: Return any value retrieved from the dma_transfer callback (git-fixes).
- spi: Fix memory leak on splited transfers (git-fixes).
- spi: img-spfi: fix potential double release (git-fixes).
- spi: img-spfi: fix reference leak in img_spfi_resume (git-fixes).
- spi: pic32: Do not leak DMA channels in probe error path (git-fixes).
- spi: pxa2xx: Add missed security checks (git-fixes).
- spi: spi-cavium-thunderx: Add missing pci_release_regions() (git-fixes).
- spi: spi-loopback-test: Fix out-of-bounds read (git-fixes).
- spi: spi-mem: Fix passing zero to 'PTR_ERR' warning (git-fixes).
- spi: spi-mem: fix reference leak in spi_mem_access_start (git-fixes).
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (git-fixes).
- spi: spidev: fix a potential use-after-free in spidev_release() (git-fixes).
- spi: st-ssc4: add missed pm_runtime_disable (git-fixes).
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (git-fixes).
- spi: tegra114: fix reference leak in tegra spi ops (git-fixes).
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (git-fixes).
- spi: tegra20-slink: add missed clk_unprepare (git-fixes).
- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (git-fixes).
- splice: only read in as much information as there is pipe buffer space (bsc#1179520).
- staging: comedi: check validity of wMaxPacketSize of usb endpoints found (git-fixes).
- staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value (git-fixes).
- staging: comedi: mf6x4: Fix AI end-of-conversion detection (git-fixes).
- staging: olpc_dcon: add a missing dependency (git-fixes).
- staging: olpc_dcon: Do not call platform_device_unregister() in dcon_probe() (git-fixes).
- staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21 (git-fixes).
- staging: rtl8188eu: Add device id for MERCUSYS MW150US v2 (git-fixes).
- staging: rtl8188eu: fix possible null dereference (git-fixes).
- staging: rtl8192u: fix multiple memory leaks on error path (git-fixes).
- staging: vt6656: set usb_set_intfdata on driver fail (git-fixes).
- staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() (git-fixes).
- staging: wlan-ng: properly check endpoint types (git-fixes).
- sunrpc: fix copying of multiple pages in gss_read_proxy_verf() (bsc#1103992).
- sunrpc: fixed rollback in rpc_gssd_dummy_populate() (git-fixes).
- sunrpc: Properly set the @subbuf parameter of xdr_buf_subsegment() (git-fixes).
- sunrpc: The RDMA back channel mustn't disappear while requests are outstanding (git-fixes).
- svcrdma: fix bounce buffers for unaligned offsets and multiple pages (bsc#1103992).
- svcrdma: Fix page leak in svc_rdma_recv_read_chunk() (bsc#1103992).
- tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (bsc#1109837).
- thunderbolt: Use 32-bit writes when writing ring producer/consumer (git-fixes).
- timer: Fix wheel index calculation on last level (git fixes)
- timer: Prevent base-&gt;clk from moving backward (git-fixes)
- tracing: Fix out of bounds write in get_trace_buf (bsc#1179403).
- tty: always relink the port (git-fixes).
- tty: Fix -&gt;pgrp locking in tiocspgrp() (git-fixes).
- tty: link tty and port before configuring it as console (git-fixes).
- tty: synclink_gt: Adjust indentation in several functions (git-fixes).
- tty: synclinkmp: Adjust indentation in several functions (git-fixes).
- tty:serial:mvebu-uart:fix a wrong return (git-fixes).
- uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define (git-fixes).
- uapi/if_ether.h: prevent redefinition of struct ethhdr (git-fixes).
- usb: add RESET_RESUME quirk for Snapscan 1212 (git-fixes).
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (git-fixes).
- usb: dummy-hcd: Fix uninitialized array use in init() (git-fixes).
- usb: dwc2: Fix IN FIFO allocation (git-fixes).
- usb: dwc3: remove the call trace of USBx_GFLADJ (git-fixes).
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (git-fixes).
- usb: Fix: Do not skip endpoint descriptors with maxpacket=0 (git-fixes).
- usb: fsl: Check memory resource before releasing it (git-fixes).
- usb: gadget: composite: Fix possible double free memory bug (git-fixes).
- usb: gadget: configfs: fix concurrent issue between composite APIs (git-fixes).
- usb: gadget: configfs: Fix missing spin_lock_init() (git-fixes).
- usb: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- usb: gadget: f_fs: Use local copy of descriptors for userspace copy (git-fixes).
- usb: gadget: f_midi: setup SuperSpeed Plus descriptors (git-fixes).
- usb: gadget: f_rndis: fix bitrate for SuperSpeed and above (git-fixes).
- usb: gadget: ffs: ffs_aio_cancel(): Save/restore IRQ flags (git-fixes).
- usb: gadget: fix wrong endpoint desc (git-fixes).
- usb: gadget: goku_udc: fix potential crashes in probe (git-fixes).
- usb: gadget: net2280: fix memory leak on probe error handling paths (git-fixes).
- usb: gadget: serial: fix Tx stall after buffer overflow (git-fixes).
- usb: gadget: udc: fix possible sleep-in-atomic-context bugs in gr_probe() (git-fixes).
- usb: gadget: udc: gr_udc: fix memleak on error handling path in gr_ep_init() (git-fixes).
- usb: hso: Fix debug compile warning on sparc32 (git-fixes).
- usb: ldusb: use unsigned size format specifiers (git-fixes).
- usb: musb: omap2430: Get rid of musb .set_vbus for omap2430 glue (git-fixes).
- usb: oxu210hp-hcd: Fix memory leak in oxu_create (git-fixes).
- usb: serial: ch341: add new Product ID for CH341A (git-fixes).
- usb: serial: ch341: sort device-id entries (git-fixes).
- usb: serial: digi_acceleport: clean up modem-control handling (git-fixes).
- usb: serial: digi_acceleport: clean up set_termios (git-fixes).
- usb: serial: digi_acceleport: fix write-wakeup deadlocks (git-fixes).
- usb: serial: digi_acceleport: remove in_interrupt() usage.
- usb: serial: digi_acceleport: remove redundant assignment to pointer priv (git-fixes).
- usb: serial: digi_acceleport: rename tty flag variable (git-fixes).
- usb: serial: digi_acceleport: use irqsave() in USB's complete callback (git-fixes).
- usb: serial: keyspan_pda: fix dropped unthrottle interrupts (git-fixes).
- usb: serial: keyspan_pda: fix stalled writes (git-fixes).
- usb: serial: keyspan_pda: fix tx-unthrottle use-after-free (git-fixes).
- usb: serial: keyspan_pda: fix write deadlock (git-fixes).
- usb: serial: keyspan_pda: fix write unthrottling (git-fixes).
- usb: serial: keyspan_pda: fix write-wakeup use-after-free (git-fixes).
- usb: serial: kl5kusb105: fix memleak on open (git-fixes).
- usb: serial: mos7720: fix parallel-port state restore (git-fixes).
- usb: serial: option: add Fibocom NL668 variants (git-fixes).
- usb: serial: option: add interface-number sanity check to flag handling (git-fixes).
- usb: serial: option: add support for Thales Cinterion EXS82 (git-fixes).
- usb: serial: option: fix Quectel BG96 matching (git-fixes).
- usb: Skip endpoints with 0 maxpacket length (git-fixes).
- usb: UAS: introduce a quirk to set no_write_same (git-fixes).
- usb: usbfs: Suppress problematic bind and unbind uevents (git-fixes).
- usblp: poison URBs upon disconnect (git-fixes).
- usbnet: ipheth: fix connectivity with iOS 14 (git-fixes).
- usermodehelper: reset umask to default before executing user process (bsc#1179406).
- video: fbdev: neofb: fix memory leak in neo_scan_monitor() (git-fixes).
- vt: do not hardcode the mem allocation upper bound (git-fixes).
- vt: Reject zero-sized screen buffer size (git-fixes).
- watchdog: coh901327: add COMMON_CLK dependency (git-fixes).
- watchdog: da9062: do not ping the hw during stop() (git-fixes).
- watchdog: da9062: No need to ping manually before setting timeout (git-fixes).
- watchdog: qcom: Avoid context switch in restart handler (git-fixes).
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (git-fixes).
- wimax: fix duplicate initializer warning (git-fixes).
- wireless: Use linux/stddef.h instead of stddef.h (git-fixes).
- wireless: Use offsetof instead of custom macro (git-fixes).
- x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz (bsc#1112178).
- x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes (bsc#1112178).
- x86/mm/ident_map: Check for errors from ident_pud_init() (bsc#1112178).
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (bsc#1112178).
- x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak (bsc#1112178).
- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (bsc#1112178).
- x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak (bsc#1112178).
- x86/resctrl: Remove unused struct mbm_state::chunks_bw (bsc#1112178).
- x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb (bsc#1112178).
- x86/tracing: Introduce a static key for exception tracing (bsc#1179895).
- x86/traps: Simplify pagefault tracing logic (bsc#1179895).
- x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (bsc#1112178).
- xfrm: Fix memleak on xfrm state destroy (bsc#1158775).
- xhci: Give USB2 ports time to enter U3 in bus suspend (git-fixes).
- xprtrdma: fix incorrect header size calculations (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-12"/>
	<updated date="2021-01-12"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1040855">SUSE bug 1040855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044120">SUSE bug 1044120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044767">SUSE bug 1044767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056653">SUSE bug 1056653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056657">SUSE bug 1056657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094840">SUSE bug 1094840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104389">SUSE bug 1104389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104393">SUSE bug 1104393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109695">SUSE bug 1109695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110096">SUSE bug 1110096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115431">SUSE bug 1115431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118657">SUSE bug 1118657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122971">SUSE bug 1122971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138374">SUSE bug 1138374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139944">SUSE bug 1139944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144912">SUSE bug 1144912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152457">SUSE bug 1152457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158775">SUSE bug 1158775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168952">SUSE bug 1168952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171078">SUSE bug 1171078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172145">SUSE bug 1172145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172694">SUSE bug 1172694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173834">SUSE bug 1173834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174784">SUSE bug 1174784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174852">SUSE bug 1174852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176558">SUSE bug 1176558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176559">SUSE bug 1176559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176956">SUSE bug 1176956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177666">SUSE bug 1177666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178270">SUSE bug 1178270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178401">SUSE bug 1178401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178590">SUSE bug 1178590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178634">SUSE bug 1178634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178762">SUSE bug 1178762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179014">SUSE bug 1179014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179015">SUSE bug 1179015</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179045">SUSE bug 1179045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179082">SUSE bug 1179082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179107">SUSE bug 1179107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179141">SUSE bug 1179141</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179142">SUSE bug 1179142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179204">SUSE bug 1179204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179403">SUSE bug 1179403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179406">SUSE bug 1179406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179418">SUSE bug 1179418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179419">SUSE bug 1179419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179421">SUSE bug 1179421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179429">SUSE bug 1179429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179444">SUSE bug 1179444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179520">SUSE bug 1179520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179578">SUSE bug 1179578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179601">SUSE bug 1179601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179663">SUSE bug 1179663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179670">SUSE bug 1179670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179671">SUSE bug 1179671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179672">SUSE bug 1179672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179673">SUSE bug 1179673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179711">SUSE bug 1179711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179713">SUSE bug 1179713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179714">SUSE bug 1179714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179715">SUSE bug 1179715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179716">SUSE bug 1179716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179722">SUSE bug 1179722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179723">SUSE bug 1179723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179724">SUSE bug 1179724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179745">SUSE bug 1179745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179810">SUSE bug 1179810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179888">SUSE bug 1179888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179895">SUSE bug 1179895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179896">SUSE bug 1179896</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179960">SUSE bug 1179960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179963">SUSE bug 1179963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180027">SUSE bug 1180027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180029">SUSE bug 1180029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180031">SUSE bug 1180031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180052">SUSE bug 1180052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180086">SUSE bug 1180086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180117">SUSE bug 1180117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180258">SUSE bug 1180258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180506">SUSE bug 1180506</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20669/">CVE-2018-20669</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-20934/">CVE-2019-20934</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0444/">CVE-2020-0444</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11668/">CVE-2020-11668</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15436/">CVE-2020-15436</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27068/">CVE-2020-27068</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27777/">CVE-2020-27777</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27825/">CVE-2020-27825</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29371/">CVE-2020-29371</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-4788/">CVE-2020-4788</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498106" comment="kernel-azure-4.12.14-8.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498107" comment="kernel-azure-base-4.12.14-8.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498108" comment="kernel-azure-devel-4.12.14-8.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498109" comment="kernel-devel-azure-4.12.14-8.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498110" comment="kernel-source-azure-4.12.14-8.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498111" comment="kernel-syms-azure-4.12.14-8.58.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138876" version="1" class="patch">
	<metadata>
		<title>Security update for amazon-ssm-agent (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1196556" ref_url="https://bugzilla.suse.com/1196556" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29527" ref_url="https://www.suse.com/security/cve/CVE-2022-29527/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010914.html" source="SUSE-SU"/>
		<description>
This update for amazon-ssm-agent fixes the following issues:

- CVE-2022-29527: Fixed unsafe file creation mode of ssm-agent-users sudoer file (bsc#1196556).

Update to version 3.1.1260.0
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-03"/>
	<updated date="2022-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196556">SUSE bug 1196556</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29527/">CVE-2022-29527</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009681167" comment="amazon-ssm-agent-3.1.1260.0-150000.5.9.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138877" version="1" class="patch">
	<metadata>
		<title>Security update for python-PyJWT (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1199756" ref_url="https://bugzilla.suse.com/1199756" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29217" ref_url="https://www.suse.com/security/cve/CVE-2022-29217/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2403-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011549.html" source="SUSE-SU"/>
		<description>
This update for python-PyJWT fixes the following issues:

- CVE-2022-29217: Fixed key confusion through non-blocklisted public key format (bsc#1199756).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-14"/>
	<updated date="2022-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199756">SUSE bug 1199756</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29217/">CVE-2022-29217</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692215" comment="python2-PyJWT-1.7.1-150100.6.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138878" version="1" class="patch">
	<metadata>
		<title>Security update for aws-iam-authenticator (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1201395" ref_url="https://bugzilla.suse.com/1201395" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2385" ref_url="https://www.suse.com/security/cve/CVE-2022-2385/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2583-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011707.html" source="SUSE-SU"/>
		<description>
This update for aws-iam-authenticator fixes the following issues:

- CVE-2022-2385: Fixed AccessKeyID validation bypass (bsc#1201395).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-29"/>
	<updated date="2022-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201395">SUSE bug 1201395</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-2385/">CVE-2022-2385</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701170" comment="aws-iam-authenticator-0.5.3-150000.1.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138879" version="1" class="patch">
	<metadata>
		<title>Recommended update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures, python-coverage, python-oniconfig, python-unittest-mixins (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1195916" ref_url="https://bugzilla.suse.com/1195916" source="BUGZILLA"/>
		<reference ref_id="1196696" ref_url="https://bugzilla.suse.com/1196696" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-29651" ref_url="https://www.suse.com/security/cve/CVE-2020-29651/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011928.html" source="SUSE-SU"/>
		<description>
This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues:

- Update in SLE-15 (bsc#1196696, bsc#1195916, jsc#SLE-23972)

- Remove redundant python3 dependency from Requires
- Update regular expression to fix python shebang
- Style is enforced upstream and triggers unnecessary build version requirements
- Allow specifying fs_id in cloudwatch log group name
- Includes fix for stunnel path
- Added hardening to systemd service(s). 
- Raise minimal pytest version
- Fix typo in the ansi2html Requires
- Cleanup with spec-cleaner
- Make sure the tests are really executed
- Remove useless devel dependency
- Multiprocessing support in Python 3.8 was broken, but is now fixed
- Bumpy the URL to point to github rather than to docs

		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-17"/>
	<updated date="2022-08-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1195916">SUSE bug 1195916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196696">SUSE bug 1196696</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29651/">CVE-2020-29651</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698633" comment="python3-atomicwrites-1.1.5-150000.3.2.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138880" version="1" class="patch">
	<metadata>
		<title>Security update for apache2-mod_wsgi (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1201634" ref_url="https://bugzilla.suse.com/1201634" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2255" ref_url="https://www.suse.com/security/cve/CVE-2022-2255/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4488-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-December/026894.html" source="SUSE-SU"/>
		<description>
This update for apache2-mod_wsgi fixes the following issues:

- CVE-2022-2255: Hardened the trusted proxy header filter to avoid bypass. (bsc#1201634)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-14"/>
	<updated date="2022-12-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1201634">SUSE bug 1201634</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2255/">CVE-2022-2255</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716752" comment="apache2-mod_wsgi-4.5.18-150000.4.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138881" version="1" class="patch">
	<metadata>
		<title>Security update for cni (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1181961" ref_url="https://bugzilla.suse.com/1181961" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20206" ref_url="https://www.suse.com/security/cve/CVE-2021-20206/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4592-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013299.html" source="SUSE-SU"/>
		<description>
This update for cni fixes the following issues:

- CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-20"/>
	<updated date="2022-12-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181961">SUSE bug 1181961</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20206/">CVE-2021-20206</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725840" comment="cni-0.7.1-150100.3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138882" version="1" class="patch">
	<metadata>
		<title>Security update for cni-plugins (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1181961" ref_url="https://bugzilla.suse.com/1181961" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20206" ref_url="https://www.suse.com/security/cve/CVE-2021-20206/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013297.html" source="SUSE-SU"/>
		<description>
This update for cni-plugins fixes the following issues:

- CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-20"/>
	<updated date="2022-12-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181961">SUSE bug 1181961</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20206/">CVE-2021-20206</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725841" comment="cni-plugins-0.8.6-150100.3.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138883" version="1" class="patch">
	<metadata>
		<title>Security update for amazon-ssm-agent (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="SUSE-SU-2023:1815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014734.html" source="SUSE-SU"/>
		<description>

This update for amazon-ssm-agent fixes the following issue:

- rebuilt using go1.19.7 to fix bugs and security issues.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-11"/>
	<updated date="2023-04-11"/>
	<severity>Moderate</severity>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009745061" comment="amazon-ssm-agent-3.1.1260.0-150000.5.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138884" version="1" class="patch">
	<metadata>
		<title>Security update for python-crcmod, python-cryptography, python-cryptography-vectors (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177083" ref_url="https://bugzilla.suse.com/1177083" source="BUGZILLA"/>
		<reference ref_id="1181995" ref_url="https://bugzilla.suse.com/1181995" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36242" ref_url="https://www.suse.com/security/cve/CVE-2020-36242/" source="CVE"/>
		<description>
This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes:

Changes in python-crcmod:

- Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312)
- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)

- Cleanup spec file
- Use fdupes
- Do not bundle html doc

- singlespec auto-conversion

- Include in SLE 12 (FATE #316168)

- Initial release

Changes in python-cryptography:
- Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312)

- Refresh patches for new version

* Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242)
    could result in an integer overflow and buffer overflow.

- update to 2.9.2
  * 2.9.2 - 2020-04-22
    - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
    - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
    - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
      low usage and maintenance burden.
    - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
      Users on older version of OpenSSL will need to upgrade.
    - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
    - Removed support for calling public_bytes() with no arguments, as per 
      our deprecation policy. You must now pass encoding and format.
    - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
      returns the RDNs as required by RFC 4514.
    - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
    - Added support for parsing single_extensions in an OCSP response.
    - NameAttribute values can now be empty strings.

Changes in python-cryptography-vectors:
- Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312)

- update to 2.9.2:
  * updated vectors for the cryptography 2.9.2 testing

  		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-13"/>
	<updated date="2023-04-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177083">SUSE bug 1177083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181995">SUSE bug 1181995</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36242/">CVE-2020-36242</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009752794" comment="python2-crcmod-1.7-150100.3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752441" comment="python3-aliyun-python-sdk-1.0.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752442" comment="python3-aliyun-python-sdk-aas-2.1.1-150100.3.5.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752443" comment="python3-aliyun-python-sdk-acm-1.0.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752444" comment="python3-aliyun-python-sdk-acms-open-1.0.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752445" comment="python3-aliyun-python-sdk-actiontrail-2.0.3-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752446" comment="python3-aliyun-python-sdk-adb-1.0.5-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752447" comment="python3-aliyun-python-sdk-address-purification-1.0.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752448" comment="python3-aliyun-python-sdk-aegis-1.0.6-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752449" comment="python3-aliyun-python-sdk-afs-1.0.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752450" comment="python3-aliyun-python-sdk-airec-2.0.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752451" comment="python3-aliyun-python-sdk-alidns-2.6.20-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752452" comment="python3-aliyun-python-sdk-aligreen-console-1.0.3-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752453" comment="python3-aliyun-python-sdk-alimt-3.0.30-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752454" comment="python3-aliyun-python-sdk-alinlp-1.0.16-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752455" comment="python3-aliyun-python-sdk-aliyuncvc-1.0.10.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752456" comment="python3-aliyun-python-sdk-amqp-open-1.1.1-150100.3.5.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752457" comment="python3-aliyun-python-sdk-appmallsservice-1.1.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752458" comment="python3-aliyun-python-sdk-arms-2.5.22-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752459" comment="python3-aliyun-python-sdk-arms4finance-2.0.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752460" comment="python3-aliyun-python-sdk-baas-1.0.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752461" comment="python3-aliyun-python-sdk-brinekingdom-1.0.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752462" comment="python3-aliyun-python-sdk-bss-0.0.4-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752463" comment="python3-aliyun-python-sdk-bssopenapi-1.6.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752464" comment="python3-aliyun-python-sdk-cams-1.0.3-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752465" comment="python3-aliyun-python-sdk-cas-20180713_0114-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752466" comment="python3-aliyun-python-sdk-cassandra-1.0.6-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752467" comment="python3-aliyun-python-sdk-cbn-1.0.7-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752468" comment="python3-aliyun-python-sdk-ccc-2.0.4-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752469" comment="python3-aliyun-python-sdk-ccs-1.0.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752470" comment="python3-aliyun-python-sdk-cdn-3.6.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752688" comment="python3-aliyun-python-sdk-cdrs-1.0.9-150100.3.3.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752471" comment="python3-aliyun-python-sdk-chatbot-1.2.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752472" comment="python3-aliyun-python-sdk-clickhouse-2.0.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752473" comment="python3-aliyun-python-sdk-cloudapi-4.9.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752474" comment="python3-aliyun-python-sdk-cloudauth-2.0.26-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752475" comment="python3-aliyun-python-sdk-cloudesl-2.0.4-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752476" comment="python3-aliyun-python-sdk-cloudgame-1.0.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752477" comment="python3-aliyun-python-sdk-cloudmarketing-2.7.16-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752478" comment="python3-aliyun-python-sdk-cloudphoto-1.1.19-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752479" comment="python3-aliyun-python-sdk-cloudwf-1.0.3-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752480" comment="python3-aliyun-python-sdk-cms-7.0.18-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752481" comment="python3-aliyun-python-sdk-codeup-0.0.8-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752482" comment="python3-aliyun-python-sdk-companyreg-1.0.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752689" comment="python3-aliyun-python-sdk-config-1.0.3-150100.3.3.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752483" comment="python3-aliyun-python-sdk-core-2.13.30-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752484" comment="python3-aliyun-python-sdk-cr-4.1.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752485" comment="python3-aliyun-python-sdk-crm-2.2.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752486" comment="python3-aliyun-python-sdk-cs-4.8.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752487" comment="python3-aliyun-python-sdk-csb-1.2.9-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752488" comment="python3-aliyun-python-sdk-cspro-1.3.9-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752489" comment="python3-aliyun-python-sdk-cusanalytic_sc_online-1.0.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752490" comment="python3-aliyun-python-sdk-das-1.0.5-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752491" comment="python3-aliyun-python-sdk-dataworks-public-3.2.6-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752492" comment="python3-aliyun-python-sdk-dbfs-1.0.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752493" comment="python3-aliyun-python-sdk-dbs-1.0.29-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752494" comment="python3-aliyun-python-sdk-dcdn-2.1.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752690" comment="python3-aliyun-python-sdk-ddoscoo-1.0.1-150100.3.3.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752495" comment="python3-aliyun-python-sdk-dds-3.5.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752496" comment="python3-aliyun-python-sdk-democenter-1.1.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752497" comment="python3-aliyun-python-sdk-devops-rdc-1.9.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752691" comment="python3-aliyun-python-sdk-dg-1.0.9-150100.3.3.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752498" comment="python3-aliyun-python-sdk-dms-enterprise-1.12.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752499" comment="python3-aliyun-python-sdk-domain-3.14.4-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752500" comment="python3-aliyun-python-sdk-domain-intl-1.6.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752501" comment="python3-aliyun-python-sdk-drds-20201028-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752502" comment="python3-aliyun-python-sdk-dts-5.1.9-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752503" comment="python3-aliyun-python-sdk-dybaseapi-1.0.6-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752504" comment="python3-aliyun-python-sdk-dyplsapi-1.3.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752505" comment="python3-aliyun-python-sdk-dypnsapi-1.1.3-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752506" comment="python3-aliyun-python-sdk-dysmsapi-2.1.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752507" comment="python3-aliyun-python-sdk-dyvmsapi-3.0.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752692" comment="python3-aliyun-python-sdk-eais-2.0.0-150100.3.3.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752508" comment="python3-aliyun-python-sdk-eas-0.0.3-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752509" comment="python3-aliyun-python-sdk-eci-1.1.3-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752510" comment="python3-aliyun-python-sdk-ecs-4.23.9-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752511" comment="python3-aliyun-python-sdk-edas-3.15.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752512" comment="python3-aliyun-python-sdk-ehpc-1.14.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752513" comment="python3-aliyun-python-sdk-elasticsearch-3.0.20-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752693" comment="python3-aliyun-python-sdk-emap-1.0-150100.3.3.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752694" comment="python3-aliyun-python-sdk-emas-appmonitor-1.2.0-150100.3.3.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752514" comment="python3-aliyun-python-sdk-emr-3.3.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752515" comment="python3-aliyun-python-sdk-ens-1.3.3-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752516" comment="python3-aliyun-python-sdk-ess-2.3.3-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752695" comment="python3-aliyun-python-sdk-et-industry-openapi-3.6-150100.3.3.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752517" comment="python3-aliyun-python-sdk-faas-2.7.11-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752518" comment="python3-aliyun-python-sdk-facebody-1.2.15-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752519" comment="python3-aliyun-python-sdk-fnf-1.8.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752520" comment="python3-aliyun-python-sdk-foas-2.3.3-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752521" comment="python3-aliyun-python-sdk-ft-5.6.7-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752696" comment="python3-aliyun-python-sdk-gdb-1.0.0-150100.3.3.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752522" comment="python3-aliyun-python-sdk-geoip-1.0.3-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752523" comment="python3-aliyun-python-sdk-goodstech-1.0.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752524" comment="python3-aliyun-python-sdk-gpdb-1.0.5-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752525" comment="python3-aliyun-python-sdk-green-3.6.3-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752526" comment="python3-aliyun-python-sdk-gts-phd-1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752527" comment="python3-aliyun-python-sdk-hbase-2.9.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752528" comment="python3-aliyun-python-sdk-hbr-0.0.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752529" comment="python3-aliyun-python-sdk-highddos-2.1.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752530" comment="python3-aliyun-python-sdk-hiknoengine-0.0.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752697" comment="python3-aliyun-python-sdk-hitsdb-1.0.1-150100.3.3.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752531" comment="python3-aliyun-python-sdk-hivisengine-0.0.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752532" comment="python3-aliyun-python-sdk-hpc-2.0.3-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752533" comment="python3-aliyun-python-sdk-hsm-1.0.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752534" comment="python3-aliyun-python-sdk-httpdns-2.1.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752698" comment="python3-aliyun-python-sdk-idrsservice-3.7.3-150100.3.3.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752699" comment="python3-aliyun-python-sdk-idsp-1.4-150100.3.3.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752535" comment="python3-aliyun-python-sdk-imageaudit-1.0.7-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752536" comment="python3-aliyun-python-sdk-imageenhan-1.1.2-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752537" comment="python3-aliyun-python-sdk-imageprocess-1.0.10-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752538" comment="python3-aliyun-python-sdk-imagerecog-1.0.13-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752539" comment="python3-aliyun-python-sdk-imagesearch-2.0.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752540" comment="python3-aliyun-python-sdk-imageseg-1.1.8-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752541" comment="python3-aliyun-python-sdk-imgsearch-1.1.6-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752542" comment="python3-aliyun-python-sdk-imm-1.23.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752543" comment="python3-aliyun-python-sdk-industry-brain-5.0.52-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752544" comment="python3-aliyun-python-sdk-iot-8.21.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752545" comment="python3-aliyun-python-sdk-iqa-1.0.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752546" comment="python3-aliyun-python-sdk-ivision-1.2.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752547" comment="python3-aliyun-python-sdk-ivpd-1.0.6.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752548" comment="python3-aliyun-python-sdk-jaq-2.0.7-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752549" comment="python3-aliyun-python-sdk-jarvis-1.2.4-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752550" comment="python3-aliyun-python-sdk-jarvis-public-1.0.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752551" comment="python3-aliyun-python-sdk-kms-2.14.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752552" comment="python3-aliyun-python-sdk-ledgerdb-0.7.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752553" comment="python3-aliyun-python-sdk-linkedmall-1.0.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752554" comment="python3-aliyun-python-sdk-linkface-1.2.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752555" comment="python3-aliyun-python-sdk-linkwan-1.0.3-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752556" comment="python3-aliyun-python-sdk-live-3.9.5-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752557" comment="python3-aliyun-python-sdk-lubancloud-1.0.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752558" comment="python3-aliyun-python-sdk-market-2.0.24-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752700" comment="python3-aliyun-python-sdk-metering-1.0.0-150100.3.3.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752559" comment="python3-aliyun-python-sdk-mopen-1.1.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752701" comment="python3-aliyun-python-sdk-mpaas-1.0.0-150100.3.3.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752560" comment="python3-aliyun-python-sdk-mts-2.7.6-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752561" comment="python3-aliyun-python-sdk-multimediaai-1.1.3-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752562" comment="python3-aliyun-python-sdk-nas-3.10.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752563" comment="python3-aliyun-python-sdk-netana-1.0.0-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752564" comment="python3-aliyun-python-sdk-nlp-automl-0.0.9-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752565" comment="python3-aliyun-python-sdk-nls-cloud-meta-1.0.1-150100.3.7.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752566" comment="python3-aliyun-python-sdk-objectdet-1.0.10-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752567" comment="python3-aliyun-python-sdk-ocr-1.0.9-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752568" comment="python3-aliyun-python-sdk-ocs-0.0.4-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752569" comment="python3-aliyun-python-sdk-oms-0.0.3-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752570" comment="python3-aliyun-python-sdk-ons-3.1.6-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752571" comment="python3-aliyun-python-sdk-onsmqtt-1.0.5-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752572" comment="python3-aliyun-python-sdk-oos-1.4.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752573" comment="python3-aliyun-python-sdk-openanalytics-1.0.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752574" comment="python3-aliyun-python-sdk-openanalytics-open-2.0.2-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752575" comment="python3-aliyun-python-sdk-opensearch-0.9.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752576" comment="python3-aliyun-python-sdk-ossadmin-0.0.3-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752577" comment="python3-aliyun-python-sdk-ots-4.0.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752578" comment="python3-aliyun-python-sdk-outboundbot-1.0.5-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752579" comment="python3-aliyun-python-sdk-paistudio-1.0.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752580" comment="python3-aliyun-python-sdk-petadata-1.2.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752581" comment="python3-aliyun-python-sdk-polardb-1.8.3-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752702" comment="python3-aliyun-python-sdk-polardbx-20201028-150100.3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752703" comment="python3-aliyun-python-sdk-privatelink-1.0.2-150100.3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752582" comment="python3-aliyun-python-sdk-productcatalog-1.0.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752583" comment="python3-aliyun-python-sdk-pts-2.1.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752584" comment="python3-aliyun-python-sdk-push-3.13.6-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752585" comment="python3-aliyun-python-sdk-pvtz-1.0.5-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752586" comment="python3-aliyun-python-sdk-qualitycheck-3.0.9-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752587" comment="python3-aliyun-python-sdk-quickbi-public-1.4.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752588" comment="python3-aliyun-python-sdk-r-kvstore-2.13.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752589" comment="python3-aliyun-python-sdk-ram-3.2.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752590" comment="python3-aliyun-python-sdk-rdc-1.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752591" comment="python3-aliyun-python-sdk-rds-2.5.8-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752592" comment="python3-aliyun-python-sdk-reid-1.1.8.5-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752593" comment="python3-aliyun-python-sdk-resourcemanager-1.0.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752594" comment="python3-aliyun-python-sdk-retailcloud-2.0.12-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752595" comment="python3-aliyun-python-sdk-risk-0.0.3-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752596" comment="python3-aliyun-python-sdk-ros-3.6.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752597" comment="python3-aliyun-python-sdk-rtc-1.2.5-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752598" comment="python3-aliyun-python-sdk-sae-1.5.0.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752599" comment="python3-aliyun-python-sdk-saf-3.0.2-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752704" comment="python3-aliyun-python-sdk-safconsole-1.0.1-150100.3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752600" comment="python3-aliyun-python-sdk-sas-1.1.3-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752601" comment="python3-aliyun-python-sdk-sas-api-2.1.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752602" comment="python3-aliyun-python-sdk-scdn-2.2.3-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752603" comment="python3-aliyun-python-sdk-schedulerx2-1.0.3-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752604" comment="python3-aliyun-python-sdk-sddp-1.0.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752705" comment="python3-aliyun-python-sdk-servicemesh-1.0.5-150100.3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752706" comment="python3-aliyun-python-sdk-sgw-1.0.0-150100.3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752605" comment="python3-aliyun-python-sdk-slb-3.3.3-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752707" comment="python3-aliyun-python-sdk-sls-1.0.8-150100.3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752606" comment="python3-aliyun-python-sdk-smartag-1.5.4-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752708" comment="python3-aliyun-python-sdk-smarthosting-1.0.1-150100.3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752607" comment="python3-aliyun-python-sdk-smc-1.0.2-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752608" comment="python3-aliyun-python-sdk-snsuapi-1.7.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752609" comment="python3-aliyun-python-sdk-status-3.7-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752610" comment="python3-aliyun-python-sdk-sts-3.0.2-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752611" comment="python3-aliyun-python-sdk-tag-1.0.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752709" comment="python3-aliyun-python-sdk-tdsr-0.9.2-150100.3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752710" comment="python3-aliyun-python-sdk-teambition-aliyun-1.0.8-150100.3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752612" comment="python3-aliyun-python-sdk-tesladam-1.0.2-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752613" comment="python3-aliyun-python-sdk-teslamaxcompute-1.5.5-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752614" comment="python3-aliyun-python-sdk-teslastream-1.0.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752615" comment="python3-aliyun-python-sdk-trademark-1.2.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752616" comment="python3-aliyun-python-sdk-ubsms-2.0.5-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752617" comment="python3-aliyun-python-sdk-uis-1.0.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752618" comment="python3-aliyun-python-sdk-unimkt-1.0.24-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752619" comment="python3-aliyun-python-sdk-vcs-2.0.4-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752620" comment="python3-aliyun-python-sdk-viapiutils-1.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752621" comment="python3-aliyun-python-sdk-videoenhan-1.0.7-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752622" comment="python3-aliyun-python-sdk-videorecog-1.0.2-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752623" comment="python3-aliyun-python-sdk-videosearch-1.1.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752624" comment="python3-aliyun-python-sdk-videoseg-1.0.3-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752625" comment="python3-aliyun-python-sdk-visionai-1.0.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752626" comment="python3-aliyun-python-sdk-visionai-poc-1.0.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752627" comment="python3-aliyun-python-sdk-vod-2.15.12-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752628" comment="python3-aliyun-python-sdk-voicenavigator-1.1.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752629" comment="python3-aliyun-python-sdk-vpc-3.0.12-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752630" comment="python3-aliyun-python-sdk-vs-1.10.2-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752631" comment="python3-aliyun-python-sdk-waf-openapi-1.1.4-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752632" comment="python3-aliyun-python-sdk-webplus-1.0.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752633" comment="python3-aliyun-python-sdk-welfare-inner-1.1.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752634" comment="python3-aliyun-python-sdk-workorder-3.0.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752635" comment="python3-aliyun-python-sdk-xspace-1.2.1-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752636" comment="python3-aliyun-python-sdk-xtrace-0.2.2-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752637" comment="python3-aliyun-python-sdk-yundun-2.1.4-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752638" comment="python3-aliyun-python-sdk-yundun-ds-1.0.0-150100.3.7.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752743" comment="python3-crcmod-1.7-150100.3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752744" comment="python3-oss2-2.14.0-150100.3.3.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138885" version="1" class="patch">
	<metadata>
		<title>Security update for terraform-provider-helm (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1208086" ref_url="https://bugzilla.suse.com/1208086" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-25165" ref_url="https://www.suse.com/security/cve/CVE-2023-25165/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2100-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014768.html" source="SUSE-SU"/>
		<description>
This update for terraform-provider-helm fixes the following issues:

  Updated terraform-provider-helm to version 2.9.0:

  - CVE-2023-25165: Fixed getHostByName Function Information Disclosure by updating embedded helm package (bsc#1208086).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-04"/>
	<updated date="2023-05-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1208086">SUSE bug 1208086</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-25165/">CVE-2023-25165</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754757" comment="terraform-provider-helm-2.9.0-150100.3.6.3 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138886" version="1" class="patch">
	<metadata>
		<title>Security update for rmt-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1204285" ref_url="https://bugzilla.suse.com/1204285" source="BUGZILLA"/>
		<reference ref_id="1204769" ref_url="https://bugzilla.suse.com/1204769" source="BUGZILLA"/>
		<reference ref_id="1205089" ref_url="https://bugzilla.suse.com/1205089" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31254" ref_url="https://www.suse.com/security/cve/CVE-2022-31254/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0022-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013422.html" source="SUSE-SU"/>
		<description>
This update for rmt-server fixes the following issues:

Update to version 2.10:

- Add option to turn off system token support (bsc#1205089)
- Update the `last_seen_at` column on zypper service refresh
- Do not retry to import non-existing files in air-gapped mode (bsc#1204769)
- CVE-2022-31254: Fixed a local privilege escalation related to the packaging of rmt-server (bsc#1204285).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-03"/>
	<updated date="2023-01-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204285">SUSE bug 1204285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204769">SUSE bug 1204769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205089">SUSE bug 1205089</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31254/">CVE-2022-31254</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730922" comment="rmt-server-pubcloud-2.10-150100.3.42.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138887" version="1" class="patch">
	<metadata>
		<title>Security update for rmt-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1202053" ref_url="https://bugzilla.suse.com/1202053" source="BUGZILLA"/>
		<reference ref_id="1203171" ref_url="https://bugzilla.suse.com/1203171" source="BUGZILLA"/>
		<reference ref_id="1206593" ref_url="https://bugzilla.suse.com/1206593" source="BUGZILLA"/>
		<reference ref_id="1207670" ref_url="https://bugzilla.suse.com/1207670" source="BUGZILLA"/>
		<reference ref_id="1209096" ref_url="https://bugzilla.suse.com/1209096" source="BUGZILLA"/>
		<reference ref_id="1209507" ref_url="https://bugzilla.suse.com/1209507" source="BUGZILLA"/>
		<reference ref_id="1209825" ref_url="https://bugzilla.suse.com/1209825" source="BUGZILLA"/>
		<reference ref_id="1211398" ref_url="https://bugzilla.suse.com/1211398" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-27530" ref_url="https://www.suse.com/security/cve/CVE-2023-27530/" source="CVE"/>
		<reference ref_id="CVE-2023-28120" ref_url="https://www.suse.com/security/cve/CVE-2023-28120/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2304-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/015002.html" source="SUSE-SU"/>
		<description>
This update for rmt-server fixes the following issues:

Updated to version 2.13:

- CVE-2023-28120: Fixed a potential XSS issue in an embedded
  dependency (bsc#1209507).
- CVE-2023-27530: Fixed a denial of service issue in multipart request
  parsing (bsc#1209096).

Non-security fixes:

- Fixed transactional update on GCE (bsc#1211398).
- Use HTTPS in rmt-client-setup-res (bsc#1209825).
- Various build fixes (bsc#1207670, bsc#1203171, bsc#1206593,
  bsc#1202053).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-25"/>
	<updated date="2023-05-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202053">SUSE bug 1202053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203171">SUSE bug 1203171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206593">SUSE bug 1206593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207670">SUSE bug 1207670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209096">SUSE bug 1209096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209507">SUSE bug 1209507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209825">SUSE bug 1209825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211398">SUSE bug 1211398</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-27530/">CVE-2023-27530</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-28120/">CVE-2023-28120</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761937" comment="rmt-server-pubcloud-2.13-150100.3.45.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138888" version="1" class="patch">
	<metadata>
		<title>Security update for terraform (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2323-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029576.html" source="SUSE-SU"/>
		<description>

This update of terraform fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-30"/>
	<updated date="2023-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756953" comment="terraform-0.13.4-150100.3.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138889" version="1" class="patch">
	<metadata>
		<title>Security update for cni-plugins (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2324-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029575.html" source="SUSE-SU"/>
		<description>

This update of cni-plugins fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-30"/>
	<updated date="2023-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756837" comment="cni-plugins-0.8.6-150100.3.13.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138890" version="1" class="patch">
	<metadata>
		<title>Security update for cni (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2325-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029574.html" source="SUSE-SU"/>
		<description>

This update of cni fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-30"/>
	<updated date="2023-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756836" comment="cni-0.7.1-150100.3.10.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138891" version="1" class="patch">
	<metadata>
		<title>Security update for amazon-ssm-agent (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2326-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029573.html" source="SUSE-SU"/>
		<description>

This update of amazon-ssm-agent fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-30"/>
	<updated date="2023-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756839" comment="amazon-ssm-agent-3.1.1260.0-150000.5.13.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138892" version="1" class="patch">
	<metadata>
		<title>Security update for google-cloud-sap-agent (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="1210464" ref_url="https://bugzilla.suse.com/1210464" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2445-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029765.html" source="SUSE-SU"/>
		<description>

This update of google-cloud-sap-agent fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441).
- Update to version 1.5.1 (bsc#1210464)
- Raise golang API version to 1.20
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-07"/>
	<updated date="2023-06-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210464">SUSE bug 1210464</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763295" comment="google-cloud-sap-agent-1.5.1-150100.3.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138893" version="1" class="patch">
	<metadata>
		<title>Security update for google-cloud-sap-agent (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2617-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030019.html" source="SUSE-SU"/>
		<description>

This update of google-cloud-sap-agent fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-23"/>
	<updated date="2023-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768698" comment="google-cloud-sap-agent-1.5.1-150100.3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138894" version="1" class="patch">
	<metadata>
		<title>Security update for cloud-init (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171511" ref_url="https://bugzilla.suse.com/1171511" source="BUGZILLA"/>
		<reference ref_id="1203393" ref_url="https://bugzilla.suse.com/1203393" source="BUGZILLA"/>
		<reference ref_id="1210277" ref_url="https://bugzilla.suse.com/1210277" source="BUGZILLA"/>
		<reference ref_id="1210652" ref_url="https://bugzilla.suse.com/1210652" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2084" ref_url="https://www.suse.com/security/cve/CVE-2022-2084/" source="CVE"/>
		<reference ref_id="CVE-2023-1786" ref_url="https://www.suse.com/security/cve/CVE-2023-1786/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2628-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015295.html" source="SUSE-SU"/>
		<description>
This update for cloud-init fixes the following issues:

- CVE-2023-1786: Do not expose sensitive data gathered from the CSP. (bsc#1210277)
- CVE-2022-2084: Fixed a bug which caused logging schema failures can include password hashes. (bsc#1210652)
    
- Update to version 23.1

  + Support transactional-updates for SUSE based distros
  + Set ownership for new folders in Write Files Module
  + add OpenCloudOS and TencentOS support
  + lxd: Retry if the server isn't ready 
  + test: switch pycloudlib source to pypi 
  + test: Fix integration test deprecation message 
  + Recognize opensuse-microos, dev tooling fixes 
  + sources/azure: refactor imds handler into own module 
  + docs: deprecation generation support 
  + add function is_virtual to distro/FreeBSD
  + cc_ssh: support multiple hostcertificates 
  + Fix minor schema validation regression and fixup typing 
  + doc: Reword user data debug section 
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file 
  + Add 'ederst' as contributor
  + readme: add reference to packages dir 
  + docs: update downstream package list 
  + docs: add google search verification 
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf
  + Fix OpenStack datasource detection on bare metal
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted 
  + schema: fix gpt labels, use type string for GUID 
  + cc_disk_setup: code cleanup 
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
  + Warn on empty network key 
  + Fix Vultr cloud_interfaces usage 
  + cc_puppet: Update puppet service name 
  + docs: Clarify networking docs 
  + lint: remove httpretty 
  + cc_set_passwords: Prevent traceback when restarting ssh 
  + tests: fix lp1912844 
  + tests: Skip ansible test on bionic 
  + Wait for NetworkManager 
  + docs: minor polishing 
  + CI: migrate integration-test to GH actions 
  + Fix permission of SSH host keys 
  + Fix default route rendering on v2 ipv6
  + doc: fix path in net_convert command 
  + docs: update net_convert docs
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
  + distros/rhel.py: _read_hostname() missing strip on 'hostname'
  + integration tests: add  IBM VPC support 
  + machine-id: set to uninitialized to trigger regeneration on clones
  + sources/azure: retry on connection error when fetching metdata 
  + Ensure ssh state accurately obtained 
  + bddeb: drop dh-systemd dependency on newer deb-based releases 
  + doc: fix `config formats` link in cloudsigma.rst 
  + Fix wrong subp syntax in cc_set_passwords.py 
  + docs: update the PR template link to readthedocs 
  + ci: switch unittests to gh actions
  + Add mount_default_fields for PhotonOS. 
  + sources/azure: minor refactor for metadata source detection logic
  + add 'CalvoM' as contributor 
  + ci: doc to gh actions 
  + lxd: handle 404 from missing devices route for LXD 4.0 
  + docs: Diataxis overhaul 
  + vultr: Fix issue regarding cache and region codes 
  + cc_set_passwords: Move ssh status checking later 
  + Improve Wireguard module idempotency 
  + network/netplan: add gateways as on-link when necessary 
  + tests: test_lxd assert features.networks.zones when present 
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: fix device driver matching for net config (#1914)
  + BSD: fix duplicate macs in Ifconfig parser 
  + pycloudlib: add lunar support for integration tests 
  + nocloud: add support for dmi variable expansion for seedfrom URL
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema 
  + Ensure network ready before cloud-init service runs on RHEL
  + docs: add copy button to code blocks 
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed 
  + Fix the distro.osfamily output problem in the openEuler system. 
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 
  + Add back gateway4/6 deprecation to docs 
  + networkd: Add support for multiple [Route] sections 
  + doc: add qemu tutorial 
  + lint: fix tip-flake8 and tip-mypy 
  + Add support for setting uid when creating users on FreeBSD 
  + Fix exception in BSD networking code-path 
  + Append derivatives to is_rhel list in cloud.cfg.tmpl 
  + FreeBSD init: use cloudinit_enable as only rcvar 
  + feat: add support aliyun metadata security harden mode 
  + docs: uprate analyze to performance page
  + test: fix lxd preseed managed network config 
  + Add support for static IPv6 addresses for FreeBSD 
  + Make 3.12 failures not fail the build 
  + Docs: adding relative links 
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + Add 'nkukard' as contributor 
  + doc: add how to render new module doc 
  + doc: improve module creation explanation 
  + Add Support for IPv6 metadata to OpenStack 
  + add xiaoge1001 to .github-cla-signers
  + network: Deprecate gateway{4,6} keys in network config v2
  + VMware: Move Guest Customization transport from OVF to VMware
  + doc: home page links added
  + net: skip duplicate mac check for netvsc nic and its VF

This update for python-responses fixes the following issues:
  
- update to 0.21.0:
  * Add `threading.Lock()` to allow `responses` working with `threading` module.
  * Add `urllib3` `Retry` mechanism. See #135
  * Removed internal `_cookies_from_headers` function
  * Now `add`, `upsert`, `replace` methods return registered response.
    `remove` method returns list of removed responses.
  * Added null value support in `urlencoded_params_matcher` via `allow_blank` keyword argument
  * Added strict version of decorator. Now you can apply `@responses.activate(assert_all_requests_are_fired=True)`
    to your function to validate that all requests were executed in the wrapped function. See #183

  
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-23"/>
	<updated date="2023-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171511">SUSE bug 1171511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203393">SUSE bug 1203393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210277">SUSE bug 1210277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210652">SUSE bug 1210652</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-2084/">CVE-2022-2084</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-1786/">CVE-2023-1786</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009765282" comment="cloud-init-23.1-150100.8.63.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765283" comment="cloud-init-config-suse-23.1-150100.8.63.5 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138895" version="1" class="patch">
	<metadata>
		<title>Security update for amazon-ssm-agent (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2650-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030084.html" source="SUSE-SU"/>
		<description>

This update of amazon-ssm-agent fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-27"/>
	<updated date="2023-06-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769136" comment="amazon-ssm-agent-3.1.1260.0-150000.5.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138896" version="1" class="patch">
	<metadata>
		<title>Security update for terraform-provider-helm (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2750-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030165.html" source="SUSE-SU"/>
		<description>

This update of terraform-provider-helm fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-30"/>
	<updated date="2023-06-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768799" comment="terraform-provider-helm-2.9.0-150100.3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138897" version="1" class="patch">
	<metadata>
		<title>Security update for amazon-ecs-init (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2762-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015405.html" source="SUSE-SU"/>
		<description>

This update of amazon-ecs-init fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-03"/>
	<updated date="2023-07-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768138" comment="amazon-ecs-init-1.53.0-150100.4.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138898" version="1" class="patch">
	<metadata>
		<title>Security update for terraform (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2763-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015404.html" source="SUSE-SU"/>
		<description>

This update of terraform fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-03"/>
	<updated date="2023-07-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768798" comment="terraform-0.13.4-150100.3.13.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138899" version="1" class="patch">
	<metadata>
		<title>Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1099269" ref_url="https://bugzilla.suse.com/1099269" source="BUGZILLA"/>
		<reference ref_id="1133277" ref_url="https://bugzilla.suse.com/1133277" source="BUGZILLA"/>
		<reference ref_id="1144068" ref_url="https://bugzilla.suse.com/1144068" source="BUGZILLA"/>
		<reference ref_id="1162343" ref_url="https://bugzilla.suse.com/1162343" source="BUGZILLA"/>
		<reference ref_id="1177127" ref_url="https://bugzilla.suse.com/1177127" source="BUGZILLA"/>
		<reference ref_id="1178168" ref_url="https://bugzilla.suse.com/1178168" source="BUGZILLA"/>
		<reference ref_id="1182066" ref_url="https://bugzilla.suse.com/1182066" source="BUGZILLA"/>
		<reference ref_id="1184753" ref_url="https://bugzilla.suse.com/1184753" source="BUGZILLA"/>
		<reference ref_id="1194530" ref_url="https://bugzilla.suse.com/1194530" source="BUGZILLA"/>
		<reference ref_id="1197726" ref_url="https://bugzilla.suse.com/1197726" source="BUGZILLA"/>
		<reference ref_id="1198331" ref_url="https://bugzilla.suse.com/1198331" source="BUGZILLA"/>
		<reference ref_id="1199282" ref_url="https://bugzilla.suse.com/1199282" source="BUGZILLA"/>
		<reference ref_id="1203681" ref_url="https://bugzilla.suse.com/1203681" source="BUGZILLA"/>
		<reference ref_id="1204256" ref_url="https://bugzilla.suse.com/1204256" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000518" ref_url="https://www.suse.com/security/cve/CVE-2018-1000518/" source="CVE"/>
		<reference ref_id="CVE-2020-25659" ref_url="https://www.suse.com/security/cve/CVE-2020-25659/" source="CVE"/>
		<reference ref_id="CVE-2020-36242" ref_url="https://www.suse.com/security/cve/CVE-2020-36242/" source="CVE"/>
		<reference ref_id="CVE-2021-22569" ref_url="https://www.suse.com/security/cve/CVE-2021-22569/" source="CVE"/>
		<reference ref_id="CVE-2021-22570" ref_url="https://www.suse.com/security/cve/CVE-2021-22570/" source="CVE"/>
		<reference ref_id="CVE-2022-1941" ref_url="https://www.suse.com/security/cve/CVE-2022-1941/" source="CVE"/>
		<reference ref_id="CVE-2022-3171" ref_url="https://www.suse.com/security/cve/CVE-2022-3171/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015451.html" source="SUSE-SU"/>
		<description>
This update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets fixes the following issues:

grpc:
- Update in SLE-15 (bsc#1197726, bsc#1144068)
  
protobuf:
- Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941, bsc#1203681
- Fix a potential DoS issue when parsing with binary data in  protobuf-java, CVE-2022-3171, bsc#1204256
- Fix potential Denial of Service in protobuf-java in the parsing procedure for binary data, CVE-2021-22569, bsc#1194530
- Add missing dependency of python subpackages on python-six (bsc#1177127)
- Updated to version 3.9.2 (bsc#1162343)
  * Remove OSReadLittle* due to alignment requirements.
  * Don't use unions and instead use memcpy for the type swaps.
- Disable LTO (bsc#1133277)

python-aiocontextvars:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-avro:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-cryptography:  
- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331)
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
  CVE-2020-36242

python-cryptography-vectors:
- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- update to 3.3.2 (bsc#1198331)

python-Deprecated:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- update to 1.2.13:

python-google-api-core:
- Update to 1.14.2

python-googleapis-common-protos:
- Update to 1.6.0
  
python-grpcio-gcp:
- Initial spec for v0.2.2

python-humanfriendly:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to 10.0

python-jsondiff:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to version 1.3.0

python-knack:  
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to version 0.9.0

python-opencensus:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Disable Python2 build
- Update to 0.8.0

python-opencensus-context:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-opencensus-ext-threading:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Initial build version 0.1.2

python-opentelemetry-api:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Version update to 1.5.0

python-psutil:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- update to 5.9.1
- remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on MicroOS. (bsc#1184753)
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-PyGithub:
- Update to 1.43.5:

python-pytest-asyncio:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Initial release of python-pytest-asyncio 0.8.0 
  
python-requests:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
  
python-websocket-client:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to version 1.3.2

python-websockets:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- update to 9.1:
 		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1099269">SUSE bug 1099269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133277">SUSE bug 1133277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144068">SUSE bug 1144068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162343">SUSE bug 1162343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177127">SUSE bug 1177127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178168">SUSE bug 1178168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182066">SUSE bug 1182066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184753">SUSE bug 1184753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194530">SUSE bug 1194530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197726">SUSE bug 1197726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198331">SUSE bug 1198331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199282">SUSE bug 1199282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203681">SUSE bug 1203681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204256">SUSE bug 1204256</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000518/">CVE-2018-1000518</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25659/">CVE-2020-25659</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36242/">CVE-2020-36242</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-22569/">CVE-2021-22569</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-22570/">CVE-2021-22570</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1941/">CVE-2022-1941</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3171/">CVE-2022-3171</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009755585" comment="azure-cli-core-2.17.1-150100.6.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757121" comment="grpc-devel-1.25.0-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757122" comment="grpc-source-1.25.0-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757123" comment="libgrpc++1-1.25.0-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757124" comment="libgrpc8-1.25.0-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755743" comment="libprotobuf-lite20-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757125" comment="libprotobuf-lite20-32bit-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757127" comment="libprotobuf20-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757128" comment="libprotobuf20-32bit-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757130" comment="libprotoc20-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757131" comment="libprotoc20-32bit-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757133" comment="protobuf-devel-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757134" comment="protobuf-java-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757135" comment="protobuf-source-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757138" comment="python2-cryptography-3.3.2-150100.7.15.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755744" comment="python2-cryptography-vectors-3.3.2-150100.3.11.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757140" comment="python2-googleapis-common-protos-1.6.0-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757141" comment="python2-grpcio-1.25.0-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757142" comment="python2-grpcio-gcp-0.2.2-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757144" comment="python2-jsondiff-1.3.0-150100.3.6.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757145" comment="python2-protobuf-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755811" comment="python2-psutil-5.9.1-150100.6.6.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755747" comment="python2-requests-2.25.1-150100.6.13.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757147" comment="python3-Deprecated-1.2.13-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757148" comment="python3-PyGithub-1.43.5-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009760568" comment="python3-Twisted-17.9.0-150000.3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757149" comment="python3-aiocontextvars-0.2.2-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757150" comment="python3-avro-1.11.0-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757151" comment="python3-cryptography-3.3.2-150100.7.15.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755705" comment="python3-cryptography-vectors-3.3.2-150100.3.11.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757152" comment="python3-google-api-core-1.14.2-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757153" comment="python3-googleapis-common-protos-1.6.0-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757154" comment="python3-grpcio-1.25.0-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757155" comment="python3-grpcio-gcp-0.2.2-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755586" comment="python3-humanfriendly-10.0-150100.6.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755587" comment="python3-jsondiff-1.3.0-150100.3.6.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755588" comment="python3-knack-0.9.0-150100.3.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757156" comment="python3-opencensus-0.8.0-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757157" comment="python3-opencensus-context-0.1.2-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757158" comment="python3-opencensus-ext-threading-0.1.2-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757159" comment="python3-opentelemetry-api-1.5.0-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757160" comment="python3-protobuf-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757161" comment="python3-psutil-5.9.1-150100.6.6.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757162" comment="python3-pytest-3.10.1-150000.7.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757163" comment="python3-pytest-asyncio-0.8.0-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755750" comment="python3-requests-2.25.1-150100.6.13.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755589" comment="python3-websocket-client-1.3.2-150100.6.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757164" comment="python3-websockets-9.1-150100.3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757054" comment="python3-zope.interface-4.4.2-150000.3.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138900" version="1" class="patch">
	<metadata>
		<title>Security update for cni (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015521.html" source="SUSE-SU"/>
		<description>

This update of cni fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-18"/>
	<updated date="2023-07-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768139" comment="cni-0.7.1-150100.3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138901" version="1" class="patch">
	<metadata>
		<title>Security update for cni-plugins (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015520.html" source="SUSE-SU"/>
		<description>

This update of cni-plugins fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-18"/>
	<updated date="2023-07-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768633" comment="cni-plugins-0.8.6-150100.3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138902" version="1" class="patch">
	<metadata>
		<title>Security update for python-azure-core, python-azure-storage-blob (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1199282" ref_url="https://bugzilla.suse.com/1199282" source="BUGZILLA"/>
		<reference ref_id="1202088" ref_url="https://bugzilla.suse.com/1202088" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-30187" ref_url="https://www.suse.com/security/cve/CVE-2022-30187/" source="CVE"/>
		<description>
This update for python-azure-core, python-azure-storage-blob fixes the following issues:


Security fixes:

- CVE-2022-30187: Fixed information disclosure vulnerability (bsc#1202088).    

Recommended fixes:    

- New upstream release version 1.23.1 to SLE 15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629).
 		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-20"/>
	<updated date="2023-07-20"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1199282">SUSE bug 1199282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202088">SUSE bug 1202088</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-30187/">CVE-2022-30187</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009771409" comment="python2-azure-core-1.23.1-150100.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771410" comment="python2-azure-storage-blob-12.13.1-150100.3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771411" comment="python2-typing_extensions-3.10.0.0-150100.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771307" comment="python3-azure-core-1.23.1-150100.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771308" comment="python3-azure-storage-blob-12.13.1-150100.3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771336" comment="python3-typing_extensions-3.10.0.0-150100.3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138903" version="1" class="patch">
	<metadata>
		<title>Security update for python-requests (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1211674" ref_url="https://bugzilla.suse.com/1211674" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-32681" ref_url="https://www.suse.com/security/cve/CVE-2023-32681/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3094-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-August/030673.html" source="SUSE-SU"/>
		<description>
This update for python-requests fixes the following issues:

- CVE-2023-32681: fixed unintended leak of Proxy-Authorization header (bsc#1211674).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-01"/>
	<updated date="2023-08-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1211674">SUSE bug 1211674</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-32681/">CVE-2023-32681</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009771165" comment="python2-requests-2.25.1-150100.6.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771166" comment="python3-requests-2.25.1-150100.6.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138904" version="1" class="patch">
	<metadata>
		<title>Security update for terraform-provider-helm (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1212475" ref_url="https://bugzilla.suse.com/1212475" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:3508-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016077.html" source="SUSE-SU"/>
		<description>

This update of terraform-provider-helm fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-01"/>
	<updated date="2023-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212475">SUSE bug 1212475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781135" comment="terraform-provider-helm-2.9.0-150100.3.10.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138905" version="1" class="patch">
	<metadata>
		<title>Security update for terraform (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1212475" ref_url="https://bugzilla.suse.com/1212475" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:3516-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016081.html" source="SUSE-SU"/>
		<description>

This update of terraform fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-02"/>
	<updated date="2023-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212475">SUSE bug 1212475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009780953" comment="terraform-0.13.4-150100.3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138906" version="1" class="patch">
	<metadata>
		<title>Security update for amazon-ecs-init (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1212475" ref_url="https://bugzilla.suse.com/1212475" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:3522-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016093.html" source="SUSE-SU"/>
		<description>

This update of amazon-ecs-init fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-05"/>
	<updated date="2023-09-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212475">SUSE bug 1212475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009780900" comment="amazon-ecs-init-1.53.0-150100.4.17.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138907" version="1" class="patch">
	<metadata>
		<title>Security update for amazon-ssm-agent (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1212475" ref_url="https://bugzilla.suse.com/1212475" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:3537-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016099.html" source="SUSE-SU"/>
		<description>

This update of amazon-ssm-agent fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-05"/>
	<updated date="2023-09-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212475">SUSE bug 1212475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781008" comment="amazon-ssm-agent-3.1.1260.0-150000.5.17.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138908" version="1" class="patch">
	<metadata>
		<title>Security update for python-brotlipy (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175825" ref_url="https://bugzilla.suse.com/1175825" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8927" ref_url="https://www.suse.com/security/cve/CVE-2020-8927/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3669-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031550.html" source="SUSE-SU"/>
		<description>
This update for python-brotlipy fixes the following issues:

- CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-19"/>
	<updated date="2023-09-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175825">SUSE bug 1175825</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8927/">CVE-2020-8927</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795433" comment="python3-brotlipy-0.7.0-150100.3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138909" version="1" class="patch">
	<metadata>
		<title>Security update for cni (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1212475" ref_url="https://bugzilla.suse.com/1212475" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:3815-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031750.html" source="SUSE-SU"/>
		<description>

This update of cni fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212475">SUSE bug 1212475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009780901" comment="cni-0.7.1-150100.3.14.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138910" version="1" class="patch">
	<metadata>
		<title>Security update for cni-plugins (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1212475" ref_url="https://bugzilla.suse.com/1212475" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:3816-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031749.html" source="SUSE-SU"/>
		<description>

This update of cni-plugins fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212475">SUSE bug 1212475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009780902" comment="cni-plugins-0.8.6-150100.3.17.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138911" version="1" class="patch">
	<metadata>
		<title>Security update for aws-efs-utils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1191055" ref_url="https://bugzilla.suse.com/1191055" source="BUGZILLA"/>
		<reference ref_id="1206737" ref_url="https://bugzilla.suse.com/1206737" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-46174" ref_url="https://www.suse.com/security/cve/CVE-2022-46174/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0423-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013775.html" source="SUSE-SU"/>
		<description>
This update for aws-efs-utils fixes the following issues:

- Updated to version 1.34.5:
  - CVE-2022-46174: Fixed a race condition when mounting filesystems
    using TLS, which could result in various failures (bsc#1206737).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1191055">SUSE bug 1191055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206737">SUSE bug 1206737</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-46174/">CVE-2022-46174</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734982" comment="aws-efs-utils-1.34.5-150100.4.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138912" version="1" class="patch">
	<metadata>
		<title>Security update for google-guest-agent (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1191468" ref_url="https://bugzilla.suse.com/1191468" source="BUGZILLA"/>
		<reference ref_id="1195391" ref_url="https://bugzilla.suse.com/1195391" source="BUGZILLA"/>
		<reference ref_id="1195838" ref_url="https://bugzilla.suse.com/1195838" source="BUGZILLA"/>
		<reference ref_id="1208723" ref_url="https://bugzilla.suse.com/1208723" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-38297" ref_url="https://www.suse.com/security/cve/CVE-2021-38297/" source="CVE"/>
		<reference ref_id="CVE-2022-23806" ref_url="https://www.suse.com/security/cve/CVE-2022-23806/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013964.html" source="SUSE-SU"/>
		<description>
This update for google-guest-agent fixes the following issues:

  Updated to version 20230222.00 and bumped go API version to 1.18 to address the following (bsc#1208723):

  - CVE-2021-38297: Fixed data overwrite when passing large arguments to GOARCH=wasm GOOS=js (bsc#1191468).
  - CVE-2022-23806: Fixed Curve.IsOnCurve to incorrectly return true (bsc#1195838).

  Bugfixes: 

  - Avoid bashism in post-install scripts (bsc#1195391).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-02"/>
	<updated date="2023-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191468">SUSE bug 1191468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195391">SUSE bug 1195391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195838">SUSE bug 1195838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208723">SUSE bug 1208723</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-38297/">CVE-2021-38297</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23806/">CVE-2022-23806</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742685" comment="google-guest-agent-20230221.00-150000.1.34.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138913" version="1" class="patch">
	<metadata>
		<title>Security update for google-osconfig-agent (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1191468" ref_url="https://bugzilla.suse.com/1191468" source="BUGZILLA"/>
		<reference ref_id="1195838" ref_url="https://bugzilla.suse.com/1195838" source="BUGZILLA"/>
		<reference ref_id="1208723" ref_url="https://bugzilla.suse.com/1208723" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-38297" ref_url="https://www.suse.com/security/cve/CVE-2021-38297/" source="CVE"/>
		<reference ref_id="CVE-2022-23806" ref_url="https://www.suse.com/security/cve/CVE-2022-23806/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0602-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013962.html" source="SUSE-SU"/>
		<description>
This update for google-osconfig-agent fixes the following issues:

  Updated to version 20230222.00 and bumped go API version to 1.18 to address the following (bsc#1208723): 

  - CVE-2021-38297: Fixed data overwrite when passing large arguments to GOARCH=wasm GOOS=js (bsc#1191468).
  - CVE-2022-23806: Fixed Curve.IsOnCurve to incorrectly return true (bsc#1195838).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-02"/>
	<updated date="2023-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191468">SUSE bug 1191468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195838">SUSE bug 1195838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208723">SUSE bug 1208723</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-38297/">CVE-2021-38297</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23806/">CVE-2022-23806</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742684" comment="google-osconfig-agent-20230222.00-150000.1.27.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138914" version="1" class="patch">
	<metadata>
		<title>Security update for python-wheel (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Public Cloud 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1206670" ref_url="https://bugzilla.suse.com/1206670" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40898" ref_url="https://www.suse.com/security/cve/CVE-2022-40898/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013467.html" source="SUSE-SU"/>
		<description>
This update for python-wheel fixes the following issues:

- CVE-2022-40898: Fixed an excessive use of CPU that could be triggered
  via a crafted regular expression (bsc#1206670).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-16"/>
	<updated date="2023-01-16"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1206670">SUSE bug 1206670</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-40898/">CVE-2022-40898</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-public-cloud:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255504" comment="SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731290" comment="python3-wheel-0.32.3-150100.6.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138915" version="1" class="patch">
	<metadata>
		<title>Security update for python-requests (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1111622" ref_url="https://bugzilla.suse.com/1111622" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-18074" ref_url="https://www.suse.com/security/cve/CVE-2018-18074/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1487-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005553.html" source="SUSE-SU"/>
		<description>
This update for python-requests to version 2.20.1 fixes the following issues:

Security issue fixed:

- CVE-2018-18074: Fixed an information disclosure vulnerability of the HTTP Authorization header (bsc#1111622).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-13"/>
	<updated date="2019-06-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1111622">SUSE bug 1111622</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-18074/">CVE-2018-18074</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498200" comment="python2-requests-2.20.1-6.3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138916" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1125601" ref_url="https://bugzilla.suse.com/1125601" source="BUGZILLA"/>
		<reference ref_id="1130245" ref_url="https://bugzilla.suse.com/1130245" source="BUGZILLA"/>
		<reference ref_id="1134452" ref_url="https://bugzilla.suse.com/1134452" source="BUGZILLA"/>
		<reference ref_id="1134697" ref_url="https://bugzilla.suse.com/1134697" source="BUGZILLA"/>
		<reference ref_id="1137815" ref_url="https://bugzilla.suse.com/1137815" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12435" ref_url="https://www.suse.com/security/cve/CVE-2019-12435/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005589.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

Security issues fixed:

- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).

Other issues fixed:

- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).
- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).
- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)
- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-20"/>
	<updated date="2019-06-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1125601">SUSE bug 1125601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130245">SUSE bug 1130245</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134452">SUSE bug 1134452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134697">SUSE bug 1134697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137815">SUSE bug 1137815</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12435/">CVE-2019-12435</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498201" comment="libsamba-policy0-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498202" comment="samba-ad-dc-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498203" comment="samba-dsdb-modules-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498204" comment="samba-libs-python-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498205" comment="samba-python-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138917" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1138459" ref_url="https://bugzilla.suse.com/1138459" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10160" ref_url="https://www.suse.com/security/cve/CVE-2019-10160/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2064-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005783.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

Security issue fixed:

- CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-06"/>
	<updated date="2019-08-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1138459">SUSE bug 1138459</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10160/">CVE-2019-10160</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490398" comment="python-curses-2.7.14-7.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490399" comment="python-devel-2.7.14-7.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490400" comment="python-gdbm-2.7.14-7.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490401" comment="python-xml-2.7.14-7.14.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138918" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141853" ref_url="https://bugzilla.suse.com/1141853" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20852" ref_url="https://www.suse.com/security/cve/CVE-2018-20852/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2114-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005811.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-12"/>
	<updated date="2019-08-12"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141853">SUSE bug 1141853</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20852/">CVE-2018-20852</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490418" comment="python-curses-2.7.14-7.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490419" comment="python-devel-2.7.14-7.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490420" comment="python-gdbm-2.7.14-7.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490421" comment="python-xml-2.7.14-7.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138919" version="1" class="patch">
	<metadata>
		<title>Security update for python-urllib3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1129071" ref_url="https://bugzilla.suse.com/1129071" source="BUGZILLA"/>
		<reference ref_id="1132663" ref_url="https://bugzilla.suse.com/1132663" source="BUGZILLA"/>
		<reference ref_id="1132900" ref_url="https://bugzilla.suse.com/1132900" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11236" ref_url="https://www.suse.com/security/cve/CVE-2019-11236/" source="CVE"/>
		<reference ref_id="CVE-2019-11324" ref_url="https://www.suse.com/security/cve/CVE-2019-11324/" source="CVE"/>
		<reference ref_id="CVE-2019-9740" ref_url="https://www.suse.com/security/cve/CVE-2019-9740/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2332-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005893.html" source="SUSE-SU"/>
		<description>
This update for python-urllib3 fixes the following issues:

Security issues fixed:

- CVE-2019-9740: Fixed CRLF injection issue (bsc#1129071).
- CVE-2019-11324: Fixed invalid CA certificat verification (bsc#1132900).
- CVE-2019-11236: Fixed CRLF injection via request parameter (bsc#1132663).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-09"/>
	<updated date="2019-09-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1129071">SUSE bug 1129071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132663">SUSE bug 1132663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132900">SUSE bug 1132900</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11236/">CVE-2019-11236</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11324/">CVE-2019-11324</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9740/">CVE-2019-9740</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498206" comment="python2-urllib3-1.24-9.4.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138920" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141267" ref_url="https://bugzilla.suse.com/1141267" source="BUGZILLA"/>
		<reference ref_id="1144059" ref_url="https://bugzilla.suse.com/1144059" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10197" ref_url="https://www.suse.com/security/cve/CVE-2019-10197/" source="CVE"/>
		<description>
This update for samba fixes the following issues:

Security issue fixed:

- CVE-2019-10197: Fixed user escape from share path definition (bsc#1141267).

Bug fix:

- Prepare for future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-11"/>
	<updated date="2019-09-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141267">SUSE bug 1141267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144059">SUSE bug 1144059</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10197/">CVE-2019-10197</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498207" comment="libsamba-policy0-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498208" comment="samba-ad-dc-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498209" comment="samba-dsdb-modules-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498210" comment="samba-libs-python-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498211" comment="samba-python-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138921" version="1" class="patch">
	<metadata>
		<title>Security update for python-numpy (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1149203" ref_url="https://bugzilla.suse.com/1149203" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6446" ref_url="https://www.suse.com/security/cve/CVE-2019-6446/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2462-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006031.html" source="SUSE-SU"/>
		<description>
This update for python-numpy fixes the following issues:

Non-security issues fixed:

- Updated to upstream version 1.16.1. (bsc#1149203) (jsc#SLE-8532)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-18"/>
	<updated date="2019-10-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1149203">SUSE bug 1149203</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6446/">CVE-2019-6446</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490507" comment="python2-numpy-1.16.1-4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490508" comment="python2-numpy-devel-1.16.1-4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138922" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1130840" ref_url="https://bugzilla.suse.com/1130840" source="BUGZILLA"/>
		<reference ref_id="1149955" ref_url="https://bugzilla.suse.com/1149955" source="BUGZILLA"/>
		<reference ref_id="1153238" ref_url="https://bugzilla.suse.com/1153238" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16056" ref_url="https://www.suse.com/security/cve/CVE-2019-16056/" source="CVE"/>
		<reference ref_id="CVE-2019-16935" ref_url="https://www.suse.com/security/cve/CVE-2019-16935/" source="CVE"/>
		<reference ref_id="CVE-2019-9947" ref_url="https://www.suse.com/security/cve/CVE-2019-9947/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2743-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006041.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

Security issues fixed:

- CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840)
- CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955)
- CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-22"/>
	<updated date="2019-10-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1130840">SUSE bug 1130840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149955">SUSE bug 1149955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153238">SUSE bug 1153238</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16056/">CVE-2019-16056</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16935/">CVE-2019-16935</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9947/">CVE-2019-9947</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490599" comment="python-curses-2.7.14-7.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490600" comment="python-devel-2.7.14-7.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490601" comment="python-gdbm-2.7.14-7.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490602" comment="python-xml-2.7.14-7.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138923" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1144902" ref_url="https://bugzilla.suse.com/1144902" source="BUGZILLA"/>
		<reference ref_id="1148539" ref_url="https://bugzilla.suse.com/1148539" source="BUGZILLA"/>
		<reference ref_id="1152143" ref_url="https://bugzilla.suse.com/1152143" source="BUGZILLA"/>
		<reference ref_id="1154289" ref_url="https://bugzilla.suse.com/1154289" source="BUGZILLA"/>
		<reference ref_id="1154598" ref_url="https://bugzilla.suse.com/1154598" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10218" ref_url="https://www.suse.com/security/cve/CVE-2019-10218/" source="CVE"/>
		<reference ref_id="CVE-2019-14833" ref_url="https://www.suse.com/security/cve/CVE-2019-14833/" source="CVE"/>
		<reference ref_id="CVE-2019-14847" ref_url="https://www.suse.com/security/cve/CVE-2019-14847/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2866-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192866-1.html" source="SUSE-SU"/>
		<description>
This update for provides the following fixes:

Following security issues were fixed:

- CVE-2019-14847: User with 'get changes' permission could have crashed AD DC LDAP server via dirsync (bsc#1154598).
- CVE-2019-10218: Client code could have returned filenames containing path separators (bsc#1144902).
- CVE-2019-14833: Accent with 'check script password' where Samba AD DC check password script did not receive the full password (bsc#1154289).

Also following non-security issues were fixed:

- Fix auth problems when printing via smbspool backend with kerberos. (bsc#1148539)
- Fix broken username/password authentication with CUPS and smbspool. (bsc#1152143)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-30"/>
	<updated date="2019-10-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144902">SUSE bug 1144902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148539">SUSE bug 1148539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152143">SUSE bug 1152143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154289">SUSE bug 1154289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154598">SUSE bug 1154598</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-10218/">CVE-2019-10218</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-14833/">CVE-2019-14833</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14847/">CVE-2019-14847</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498212" comment="libsamba-policy0-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498213" comment="samba-ad-dc-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498214" comment="samba-dsdb-modules-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498215" comment="samba-libs-python-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498216" comment="samba-python-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138924" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1123919" ref_url="https://bugzilla.suse.com/1123919" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2019:3087-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006191.html" source="SUSE-SU"/>
		<description>
This update for libxml2 doesn't fix any additional security issues, but correct its rpm changelog to reflect
all CVEs that have been fixed over the past.		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-28"/>
	<updated date="2019-11-28"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1123919">SUSE bug 1123919</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490802" comment="python2-libxml2-python-2.9.7-3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138925" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1158108" ref_url="https://bugzilla.suse.com/1158108" source="BUGZILLA"/>
		<reference ref_id="1158109" ref_url="https://bugzilla.suse.com/1158109" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14861" ref_url="https://www.suse.com/security/cve/CVE-2019-14861/" source="CVE"/>
		<reference ref_id="CVE-2019-14870" ref_url="https://www.suse.com/security/cve/CVE-2019-14870/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006265.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

-  CVE-2019-14861: Fixed a DNSServer RPC server crash, that allowed an authenticated user to crash the DCE/RPC DNS management server by creating records with matching the zone name (bsc#1158108).
-  CVE-2019-14870: Fixed a DelegationNotAllowed not being enforced (bsc#1158109).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-17"/>
	<updated date="2019-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1158108">SUSE bug 1158108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158109">SUSE bug 1158109</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14861/">CVE-2019-14861</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-14870/">CVE-2019-14870</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498217" comment="libsamba-policy0-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498218" comment="samba-ad-dc-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498219" comment="samba-dsdb-modules-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498220" comment="samba-libs-python-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498221" comment="samba-python-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138926" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1167070" ref_url="https://bugzilla.suse.com/1167070" source="BUGZILLA"/>
		<reference ref_id="1169473" ref_url="https://bugzilla.suse.com/1169473" source="BUGZILLA"/>
		<reference ref_id="1169851" ref_url="https://bugzilla.suse.com/1169851" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10704" ref_url="https://www.suse.com/security/cve/CVE-2020-10704/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006749.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

Security issue fixed:

- CVE-2020-10704: Fixed a stack overflow in the AD DC (C)LDAP server (bsc#1169851).

Non-security issues fixed:

- Fixed spnego fallback from kerberos to ntlmssp in smbd server (bsc#1169473).
- Fixed warning messages for non root users using smbclient (bsc#1167070).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-28"/>
	<updated date="2020-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1167070">SUSE bug 1167070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169473">SUSE bug 1169473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169851">SUSE bug 1169851</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10704/">CVE-2020-10704</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498222" comment="libsamba-policy0-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498223" comment="samba-ad-dc-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498224" comment="samba-dsdb-modules-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498225" comment="samba-libs-python-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498226" comment="samba-python-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138927" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1170595" ref_url="https://bugzilla.suse.com/1170595" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11651" ref_url="https://www.suse.com/security/cve/CVE-2020-11651/" source="CVE"/>
		<reference ref_id="CVE-2020-11652" ref_url="https://www.suse.com/security/cve/CVE-2020-11652/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006766.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Fix CVE-2020-11651 and CVE-2020-11652 (bsc#1170595)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-29"/>
	<updated date="2020-04-29"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1170595">SUSE bug 1170595</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11651/">CVE-2020-11651</cve>
	<cve impact="critical" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11652/">CVE-2020-11652</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498227" comment="python2-salt-2019.2.0-6.27.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138928" version="1" class="patch">
	<metadata>
		<title>Security update for file (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1154661" ref_url="https://bugzilla.suse.com/1154661" source="BUGZILLA"/>
		<reference ref_id="1169512" ref_url="https://bugzilla.suse.com/1169512" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18218" ref_url="https://www.suse.com/security/cve/CVE-2019-18218/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006824.html" source="SUSE-SU"/>
		<description>
This update for file fixes the following issues:

Security issues fixed:

- CVE-2019-18218: Fixed a heap-based buffer overflow in cdf_read_property_info() (bsc#1154661).

Non-security issue fixed:

- Fixed broken '--help' output (bsc#1169512).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-18"/>
	<updated date="2020-05-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1154661">SUSE bug 1154661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169512">SUSE bug 1169512</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18218/">CVE-2019-18218</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498228" comment="python2-magic-5.32-7.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138929" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159928" ref_url="https://bugzilla.suse.com/1159928" source="BUGZILLA"/>
		<reference ref_id="1161517" ref_url="https://bugzilla.suse.com/1161517" source="BUGZILLA"/>
		<reference ref_id="1161521" ref_url="https://bugzilla.suse.com/1161521" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19956" ref_url="https://www.suse.com/security/cve/CVE-2019-19956/" source="CVE"/>
		<reference ref_id="CVE-2019-20388" ref_url="https://www.suse.com/security/cve/CVE-2019-20388/" source="CVE"/>
		<reference ref_id="CVE-2020-7595" ref_url="https://www.suse.com/security/cve/CVE-2020-7595/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1299-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006823.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

- CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521).
- CVE-2019-19956: Fixed a memory leak (bsc#1159928).
- CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-18"/>
	<updated date="2020-05-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1159928">SUSE bug 1159928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161517">SUSE bug 1161517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161521">SUSE bug 1161521</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19956/">CVE-2019-19956</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20388/">CVE-2019-20388</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7595/">CVE-2020-7595</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498229" comment="python2-libxml2-python-2.9.7-3.19.10 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138930" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1155094" ref_url="https://bugzilla.suse.com/1155094" source="BUGZILLA"/>
		<reference ref_id="1162825" ref_url="https://bugzilla.suse.com/1162825" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18348" ref_url="https://www.suse.com/security/cve/CVE-2019-18348/" source="CVE"/>
		<reference ref_id="CVE-2019-9674" ref_url="https://www.suse.com/security/cve/CVE-2019-9674/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1339-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006835.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

Security issues fixed:

- CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen().
  Now an InvalidURL exception is raised (bsc#1155094).
- CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-19"/>
	<updated date="2020-05-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1155094">SUSE bug 1155094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162825">SUSE bug 1162825</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-18348/">CVE-2019-18348</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9674/">CVE-2019-9674</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498230" comment="python-curses-2.7.17-7.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498231" comment="python-devel-2.7.17-7.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498232" comment="python-gdbm-2.7.17-7.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498233" comment="python-xml-2.7.17-7.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138931" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172021" ref_url="https://bugzilla.suse.com/1172021" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19956" ref_url="https://www.suse.com/security/cve/CVE-2019-19956/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006885.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

- CVE-2019-19956: Reverted the upstream fix for this memory leak because it introduced other, more severe vulnerabilities (bsc#1172021).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-04"/>
	<updated date="2020-06-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172021">SUSE bug 1172021</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19956/">CVE-2019-19956</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498234" comment="python2-libxml2-python-2.9.7-3.22.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138932" version="1" class="patch">
	<metadata>
		<title>Security update for mercurial (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1133035" ref_url="https://bugzilla.suse.com/1133035" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-3902" ref_url="https://www.suse.com/security/cve/CVE-2019-3902/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1709-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007009.html" source="SUSE-SU"/>
		<description>
This update for mercurial fixes the following issues:

Security issue fixed:

- CVE-2019-3902: Fixed incorrect patch-checking with symlinks and subrepos (bsc#1133035).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-23"/>
	<updated date="2020-06-23"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1133035">SUSE bug 1133035</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-3902/">CVE-2019-3902</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498235" comment="mercurial-4.5.2-3.9.44 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138933" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171437" ref_url="https://bugzilla.suse.com/1171437" source="BUGZILLA"/>
		<reference ref_id="1172307" ref_url="https://bugzilla.suse.com/1172307" source="BUGZILLA"/>
		<reference ref_id="1173159" ref_url="https://bugzilla.suse.com/1173159" source="BUGZILLA"/>
		<reference ref_id="1173160" ref_url="https://bugzilla.suse.com/1173160" source="BUGZILLA"/>
		<reference ref_id="1173161" ref_url="https://bugzilla.suse.com/1173161" source="BUGZILLA"/>
		<reference ref_id="1173359" ref_url="https://bugzilla.suse.com/1173359" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10730" ref_url="https://www.suse.com/security/cve/CVE-2020-10730/" source="CVE"/>
		<reference ref_id="CVE-2020-10745" ref_url="https://www.suse.com/security/cve/CVE-2020-10745/" source="CVE"/>
		<reference ref_id="CVE-2020-10760" ref_url="https://www.suse.com/security/cve/CVE-2020-10760/" source="CVE"/>
		<reference ref_id="CVE-2020-14303" ref_url="https://www.suse.com/security/cve/CVE-2020-14303/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007127.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets 
  containing dots could potentially have consumed excessive CPU (bsc#1173160).
- CVE-2020-14303: Fixed an endless loop when receiving at AD DC empty UDP packets (bsc#1173359).
- CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined (bsc#1173159).
- CVE-2020-10760: Fixed a use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV (bsc#1173161).
- Added libnetapi-devel to baselibs conf, for wine usage (bsc#1172307).
- Fixed an installing issue where samba - samba-ad-dc.service did not exist and unit was not found (bsc#1171437).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-14"/>
	<updated date="2020-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171437">SUSE bug 1171437</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172307">SUSE bug 1172307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173159">SUSE bug 1173159</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173160">SUSE bug 1173160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173161">SUSE bug 1173161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173359">SUSE bug 1173359</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10730/">CVE-2020-10730</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10745/">CVE-2020-10745</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10760/">CVE-2020-10760</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14303/">CVE-2020-14303</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498236" comment="libsamba-policy0-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498237" comment="samba-ad-dc-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498238" comment="samba-dsdb-modules-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498239" comment="samba-libs-python-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498240" comment="samba-python-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138934" version="1" class="patch">
	<metadata>
		<title>Security update for python-ipaddress (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173274" ref_url="https://bugzilla.suse.com/1173274" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14422" ref_url="https://www.suse.com/security/cve/CVE-2020-14422/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007129.html" source="SUSE-SU"/>
		<description>
This update for python-ipaddress fixes the following issues:

- Add CVE-2020-14422-ipaddress-hash-collision.patch fixing
  CVE-2020-14422 (bsc#1173274, bpo#41004), where hash collisions
  in IPv4Interface and IPv6Interface could lead to DOS. 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-15"/>
	<updated date="2020-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173274">SUSE bug 1173274</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14422/">CVE-2020-14422</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498241" comment="python-ipaddress-1.0.18-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138935" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159284" ref_url="https://bugzilla.suse.com/1159284" source="BUGZILLA"/>
		<reference ref_id="1165572" ref_url="https://bugzilla.suse.com/1165572" source="BUGZILLA"/>
		<reference ref_id="1167437" ref_url="https://bugzilla.suse.com/1167437" source="BUGZILLA"/>
		<reference ref_id="1168340" ref_url="https://bugzilla.suse.com/1168340" source="BUGZILLA"/>
		<reference ref_id="1169604" ref_url="https://bugzilla.suse.com/1169604" source="BUGZILLA"/>
		<reference ref_id="1170104" ref_url="https://bugzilla.suse.com/1170104" source="BUGZILLA"/>
		<reference ref_id="1170288" ref_url="https://bugzilla.suse.com/1170288" source="BUGZILLA"/>
		<reference ref_id="1171906" ref_url="https://bugzilla.suse.com/1171906" source="BUGZILLA"/>
		<reference ref_id="1172075" ref_url="https://bugzilla.suse.com/1172075" source="BUGZILLA"/>
		<reference ref_id="1173072" ref_url="https://bugzilla.suse.com/1173072" source="BUGZILLA"/>
		<reference ref_id="1174165" ref_url="https://bugzilla.suse.com/1174165" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-15750" ref_url="https://www.suse.com/security/cve/CVE-2018-15750/" source="CVE"/>
		<reference ref_id="CVE-2018-15751" ref_url="https://www.suse.com/security/cve/CVE-2018-15751/" source="CVE"/>
		<reference ref_id="CVE-2020-11651" ref_url="https://www.suse.com/security/cve/CVE-2020-11651/" source="CVE"/>
		<reference ref_id="CVE-2020-11652" ref_url="https://www.suse.com/security/cve/CVE-2020-11652/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007156.html" source="SUSE-SU"/>
		<description>
This update for salt contains the following fixes:

- Fix for TypeError in Tornado importer (bsc#1174165)
- Require python3-distro only for TW (bsc#1173072)
- Update to Salt version 3000:
  See release notes: https://docs.saltstack.com/en/latest/topics/releases/3000.html

- Add docker.logout to docker execution module. (bsc#1165572)
- Add option to enable/disable force refresh for zypper.
- Add publish_batch to ClearFuncs exposed methods.
- Adds test for zypper abbreviation fix.
- Avoid segfault from 'salt-api' under certain conditions of heavy load managing SSH
  minions. (bsc#1169604)
- Avoid traceback on debug logging for swarm module. (bsc#1172075)
- Batch mode now also correctly provides return value. (bsc#1168340)
- Better import cache handline.
- Do not make file.recurse state to fail when msgpack 0.5.4. (bsc#1167437)
- Do not require vendored backports-abc. (bsc#1170288)
- Fix errors from unit tests due NO_MOCK and NO_MOCK_REASON deprecation.
- Fix for low rpm_lowpkg unit test.
- Fix for temp folder definition in loader unit test.
- Fix for unless requisite when pip is not installed.
- Fix integration test failure for test_mod_del_repo_multiline_values.
- Fix regression in service states with reload argument.
- Fix tornado imports and missing _utils after rebasing patches.
- Fix status attribute issue in aptpkg test.
- Improved storage pool or network handling.
- loop: fix variable names for until_no_eval.
- Make 'salt.ext.tornado.gen' to use 'salt.ext.backports_abc' on Python 2.
- Make setup.py script not to require setuptools greater than 9.1.
- More robust remote port detection.
- Prevent sporious 'salt-api' stuck processes when managing SSH minions.
  because of logging deadlock. (bsc#1159284)
- Python3.8 compatibility changes.
- Removes unresolved merge conflict in yumpkg module.
- Returns a the list of IPs filtered by the optional network list.
- Revert broken changes to slspath made on Salt 3000 (saltstack/salt#56341). (bsc#1170104)
- Sanitize grains loaded from roster_grains.json cache during 'state.pkg'.
- Various virt backports from 3000.2.
- zypperpkg: filter patterns that start with dot. (bsc#1171906)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-21"/>
	<updated date="2020-07-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1159284">SUSE bug 1159284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165572">SUSE bug 1165572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167437">SUSE bug 1167437</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168340">SUSE bug 1168340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169604">SUSE bug 1169604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170104">SUSE bug 1170104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170288">SUSE bug 1170288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171906">SUSE bug 1171906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172075">SUSE bug 1172075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173072">SUSE bug 1173072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174165">SUSE bug 1174165</bugzilla>
	<cve impact="important" cvss3="8.7/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-15750/">CVE-2018-15750</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15751/">CVE-2018-15751</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11651/">CVE-2020-11651</cve>
	<cve impact="critical" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11652/">CVE-2020-11652</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498242" comment="python2-salt-3000-6.37.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138936" version="1" class="patch">
	<metadata>
		<title>Security update for ldb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173159" ref_url="https://bugzilla.suse.com/1173159" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10730" ref_url="https://www.suse.com/security/cve/CVE-2020-10730/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007193.html" source="SUSE-SU"/>
		<description>
This update for ldb fixes the following issues:

- CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined (bsc#1173159).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-29"/>
	<updated date="2020-07-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173159">SUSE bug 1173159</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10730/">CVE-2020-10730</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498243" comment="python-ldb-1.4.6-3.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498244" comment="python-ldb-devel-1.4.6-3.5.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138937" version="1" class="patch">
	<metadata>
		<title>Security update for targetcli-fb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172743" ref_url="https://bugzilla.suse.com/1172743" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13867" ref_url="https://www.suse.com/security/cve/CVE-2020-13867/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007202.html" source="SUSE-SU"/>
		<description>
This update for targetcli-fb fixes the following issues:

- CVE-2020-13867: Fixed the permissions in /etc/target (bsc#1172743)	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-30"/>
	<updated date="2020-07-30"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172743">SUSE bug 1172743</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-13867/">CVE-2020-13867</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498245" comment="python2-targetcli-fb-2.1.49-10.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138938" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141320" ref_url="https://bugzilla.suse.com/1141320" source="BUGZILLA"/>
		<reference ref_id="1160850" ref_url="https://bugzilla.suse.com/1160850" source="BUGZILLA"/>
		<reference ref_id="1160852" ref_url="https://bugzilla.suse.com/1160852" source="BUGZILLA"/>
		<reference ref_id="1160888" ref_url="https://bugzilla.suse.com/1160888" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14902" ref_url="https://www.suse.com/security/cve/CVE-2019-14902/" source="CVE"/>
		<reference ref_id="CVE-2019-14907" ref_url="https://www.suse.com/security/cve/CVE-2019-14907/" source="CVE"/>
		<reference ref_id="CVE-2019-19344" ref_url="https://www.suse.com/security/cve/CVE-2019-19344/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006401.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

Security issues fixed:

- CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888).
- CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not working (bsc#1160850).
- CVE-2019-19344: Fixed a server crash when using dns zone scavenging = yes (bsc#1160852).

Non-security issue fixed:

- Fixed Ceph snapshot path handling relative to root (bsc#1141320).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-23"/>
	<updated date="2020-01-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141320">SUSE bug 1141320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160850">SUSE bug 1160850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160852">SUSE bug 1160852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160888">SUSE bug 1160888</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-14902/">CVE-2019-14902</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14907/">CVE-2019-14907</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19344/">CVE-2019-19344</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498246" comment="libsamba-policy0-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498247" comment="samba-ad-dc-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498248" comment="samba-dsdb-modules-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498249" comment="samba-libs-python-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498250" comment="samba-python-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138939" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174091" ref_url="https://bugzilla.suse.com/1174091" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20907" ref_url="https://www.suse.com/security/cve/CVE-2019-20907/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007284.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs (bsc#1174091).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-19"/>
	<updated date="2020-08-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1174091">SUSE bug 1174091</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20907/">CVE-2019-20907</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498251" comment="python-curses-2.7.17-7.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498252" comment="python-devel-2.7.17-7.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498253" comment="python-gdbm-2.7.17-7.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498254" comment="python-xml-2.7.17-7.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138940" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027282" ref_url="https://bugzilla.suse.com/1027282" source="BUGZILLA"/>
		<reference ref_id="1041090" ref_url="https://bugzilla.suse.com/1041090" source="BUGZILLA"/>
		<reference ref_id="1042670" ref_url="https://bugzilla.suse.com/1042670" source="BUGZILLA"/>
		<reference ref_id="1068664" ref_url="https://bugzilla.suse.com/1068664" source="BUGZILLA"/>
		<reference ref_id="1073269" ref_url="https://bugzilla.suse.com/1073269" source="BUGZILLA"/>
		<reference ref_id="1073748" ref_url="https://bugzilla.suse.com/1073748" source="BUGZILLA"/>
		<reference ref_id="1078326" ref_url="https://bugzilla.suse.com/1078326" source="BUGZILLA"/>
		<reference ref_id="1078485" ref_url="https://bugzilla.suse.com/1078485" source="BUGZILLA"/>
		<reference ref_id="1079300" ref_url="https://bugzilla.suse.com/1079300" source="BUGZILLA"/>
		<reference ref_id="1081750" ref_url="https://bugzilla.suse.com/1081750" source="BUGZILLA"/>
		<reference ref_id="1083507" ref_url="https://bugzilla.suse.com/1083507" source="BUGZILLA"/>
		<reference ref_id="1084650" ref_url="https://bugzilla.suse.com/1084650" source="BUGZILLA"/>
		<reference ref_id="1086001" ref_url="https://bugzilla.suse.com/1086001" source="BUGZILLA"/>
		<reference ref_id="1088004" ref_url="https://bugzilla.suse.com/1088004" source="BUGZILLA"/>
		<reference ref_id="1088009" ref_url="https://bugzilla.suse.com/1088009" source="BUGZILLA"/>
		<reference ref_id="1109847" ref_url="https://bugzilla.suse.com/1109847" source="BUGZILLA"/>
		<reference ref_id="1111793" ref_url="https://bugzilla.suse.com/1111793" source="BUGZILLA"/>
		<reference ref_id="1113755" ref_url="https://bugzilla.suse.com/1113755" source="BUGZILLA"/>
		<reference ref_id="1122191" ref_url="https://bugzilla.suse.com/1122191" source="BUGZILLA"/>
		<reference ref_id="1129346" ref_url="https://bugzilla.suse.com/1129346" source="BUGZILLA"/>
		<reference ref_id="1130840" ref_url="https://bugzilla.suse.com/1130840" source="BUGZILLA"/>
		<reference ref_id="1130847" ref_url="https://bugzilla.suse.com/1130847" source="BUGZILLA"/>
		<reference ref_id="1138459" ref_url="https://bugzilla.suse.com/1138459" source="BUGZILLA"/>
		<reference ref_id="1141853" ref_url="https://bugzilla.suse.com/1141853" source="BUGZILLA"/>
		<reference ref_id="1149792" ref_url="https://bugzilla.suse.com/1149792" source="BUGZILLA"/>
		<reference ref_id="1149955" ref_url="https://bugzilla.suse.com/1149955" source="BUGZILLA"/>
		<reference ref_id="1153238" ref_url="https://bugzilla.suse.com/1153238" source="BUGZILLA"/>
		<reference ref_id="1153830" ref_url="https://bugzilla.suse.com/1153830" source="BUGZILLA"/>
		<reference ref_id="1159035" ref_url="https://bugzilla.suse.com/1159035" source="BUGZILLA"/>
		<reference ref_id="214983" ref_url="https://bugzilla.suse.com/214983" source="BUGZILLA"/>
		<reference ref_id="298378" ref_url="https://bugzilla.suse.com/298378" source="BUGZILLA"/>
		<reference ref_id="346490" ref_url="https://bugzilla.suse.com/346490" source="BUGZILLA"/>
		<reference ref_id="367853" ref_url="https://bugzilla.suse.com/367853" source="BUGZILLA"/>
		<reference ref_id="379534" ref_url="https://bugzilla.suse.com/379534" source="BUGZILLA"/>
		<reference ref_id="380942" ref_url="https://bugzilla.suse.com/380942" source="BUGZILLA"/>
		<reference ref_id="399190" ref_url="https://bugzilla.suse.com/399190" source="BUGZILLA"/>
		<reference ref_id="406051" ref_url="https://bugzilla.suse.com/406051" source="BUGZILLA"/>
		<reference ref_id="425138" ref_url="https://bugzilla.suse.com/425138" source="BUGZILLA"/>
		<reference ref_id="426563" ref_url="https://bugzilla.suse.com/426563" source="BUGZILLA"/>
		<reference ref_id="430761" ref_url="https://bugzilla.suse.com/430761" source="BUGZILLA"/>
		<reference ref_id="432677" ref_url="https://bugzilla.suse.com/432677" source="BUGZILLA"/>
		<reference ref_id="436966" ref_url="https://bugzilla.suse.com/436966" source="BUGZILLA"/>
		<reference ref_id="437293" ref_url="https://bugzilla.suse.com/437293" source="BUGZILLA"/>
		<reference ref_id="441088" ref_url="https://bugzilla.suse.com/441088" source="BUGZILLA"/>
		<reference ref_id="462375" ref_url="https://bugzilla.suse.com/462375" source="BUGZILLA"/>
		<reference ref_id="525295" ref_url="https://bugzilla.suse.com/525295" source="BUGZILLA"/>
		<reference ref_id="534721" ref_url="https://bugzilla.suse.com/534721" source="BUGZILLA"/>
		<reference ref_id="551715" ref_url="https://bugzilla.suse.com/551715" source="BUGZILLA"/>
		<reference ref_id="572673" ref_url="https://bugzilla.suse.com/572673" source="BUGZILLA"/>
		<reference ref_id="577032" ref_url="https://bugzilla.suse.com/577032" source="BUGZILLA"/>
		<reference ref_id="581765" ref_url="https://bugzilla.suse.com/581765" source="BUGZILLA"/>
		<reference ref_id="603255" ref_url="https://bugzilla.suse.com/603255" source="BUGZILLA"/>
		<reference ref_id="617751" ref_url="https://bugzilla.suse.com/617751" source="BUGZILLA"/>
		<reference ref_id="637176" ref_url="https://bugzilla.suse.com/637176" source="BUGZILLA"/>
		<reference ref_id="638233" ref_url="https://bugzilla.suse.com/638233" source="BUGZILLA"/>
		<reference ref_id="658604" ref_url="https://bugzilla.suse.com/658604" source="BUGZILLA"/>
		<reference ref_id="673071" ref_url="https://bugzilla.suse.com/673071" source="BUGZILLA"/>
		<reference ref_id="682554" ref_url="https://bugzilla.suse.com/682554" source="BUGZILLA"/>
		<reference ref_id="697251" ref_url="https://bugzilla.suse.com/697251" source="BUGZILLA"/>
		<reference ref_id="707667" ref_url="https://bugzilla.suse.com/707667" source="BUGZILLA"/>
		<reference ref_id="718009" ref_url="https://bugzilla.suse.com/718009" source="BUGZILLA"/>
		<reference ref_id="747125" ref_url="https://bugzilla.suse.com/747125" source="BUGZILLA"/>
		<reference ref_id="747794" ref_url="https://bugzilla.suse.com/747794" source="BUGZILLA"/>
		<reference ref_id="751718" ref_url="https://bugzilla.suse.com/751718" source="BUGZILLA"/>
		<reference ref_id="754447" ref_url="https://bugzilla.suse.com/754447" source="BUGZILLA"/>
		<reference ref_id="766778" ref_url="https://bugzilla.suse.com/766778" source="BUGZILLA"/>
		<reference ref_id="794139" ref_url="https://bugzilla.suse.com/794139" source="BUGZILLA"/>
		<reference ref_id="804978" ref_url="https://bugzilla.suse.com/804978" source="BUGZILLA"/>
		<reference ref_id="827982" ref_url="https://bugzilla.suse.com/827982" source="BUGZILLA"/>
		<reference ref_id="831442" ref_url="https://bugzilla.suse.com/831442" source="BUGZILLA"/>
		<reference ref_id="834601" ref_url="https://bugzilla.suse.com/834601" source="BUGZILLA"/>
		<reference ref_id="836739" ref_url="https://bugzilla.suse.com/836739" source="BUGZILLA"/>
		<reference ref_id="856835" ref_url="https://bugzilla.suse.com/856835" source="BUGZILLA"/>
		<reference ref_id="856836" ref_url="https://bugzilla.suse.com/856836" source="BUGZILLA"/>
		<reference ref_id="857470" ref_url="https://bugzilla.suse.com/857470" source="BUGZILLA"/>
		<reference ref_id="863741" ref_url="https://bugzilla.suse.com/863741" source="BUGZILLA"/>
		<reference ref_id="885882" ref_url="https://bugzilla.suse.com/885882" source="BUGZILLA"/>
		<reference ref_id="898572" ref_url="https://bugzilla.suse.com/898572" source="BUGZILLA"/>
		<reference ref_id="901715" ref_url="https://bugzilla.suse.com/901715" source="BUGZILLA"/>
		<reference ref_id="935856" ref_url="https://bugzilla.suse.com/935856" source="BUGZILLA"/>
		<reference ref_id="945401" ref_url="https://bugzilla.suse.com/945401" source="BUGZILLA"/>
		<reference ref_id="964182" ref_url="https://bugzilla.suse.com/964182" source="BUGZILLA"/>
		<reference ref_id="984751" ref_url="https://bugzilla.suse.com/984751" source="BUGZILLA"/>
		<reference ref_id="985177" ref_url="https://bugzilla.suse.com/985177" source="BUGZILLA"/>
		<reference ref_id="985348" ref_url="https://bugzilla.suse.com/985348" source="BUGZILLA"/>
		<reference ref_id="989523" ref_url="https://bugzilla.suse.com/989523" source="BUGZILLA"/>
		<reference ref_id="997436" ref_url="https://bugzilla.suse.com/997436" source="BUGZILLA"/>
		<reference ref_id="CVE-2007-2052" ref_url="https://www.suse.com/security/cve/CVE-2007-2052/" source="CVE"/>
		<reference ref_id="CVE-2008-1721" ref_url="https://www.suse.com/security/cve/CVE-2008-1721/" source="CVE"/>
		<reference ref_id="CVE-2008-2315" ref_url="https://www.suse.com/security/cve/CVE-2008-2315/" source="CVE"/>
		<reference ref_id="CVE-2008-2316" ref_url="https://www.suse.com/security/cve/CVE-2008-2316/" source="CVE"/>
		<reference ref_id="CVE-2008-3142" ref_url="https://www.suse.com/security/cve/CVE-2008-3142/" source="CVE"/>
		<reference ref_id="CVE-2008-3143" ref_url="https://www.suse.com/security/cve/CVE-2008-3143/" source="CVE"/>
		<reference ref_id="CVE-2008-3144" ref_url="https://www.suse.com/security/cve/CVE-2008-3144/" source="CVE"/>
		<reference ref_id="CVE-2011-1521" ref_url="https://www.suse.com/security/cve/CVE-2011-1521/" source="CVE"/>
		<reference ref_id="CVE-2011-3389" ref_url="https://www.suse.com/security/cve/CVE-2011-3389/" source="CVE"/>
		<reference ref_id="CVE-2011-4944" ref_url="https://www.suse.com/security/cve/CVE-2011-4944/" source="CVE"/>
		<reference ref_id="CVE-2012-0845" ref_url="https://www.suse.com/security/cve/CVE-2012-0845/" source="CVE"/>
		<reference ref_id="CVE-2012-1150" ref_url="https://www.suse.com/security/cve/CVE-2012-1150/" source="CVE"/>
		<reference ref_id="CVE-2013-1752" ref_url="https://www.suse.com/security/cve/CVE-2013-1752/" source="CVE"/>
		<reference ref_id="CVE-2013-1753" ref_url="https://www.suse.com/security/cve/CVE-2013-1753/" source="CVE"/>
		<reference ref_id="CVE-2013-4238" ref_url="https://www.suse.com/security/cve/CVE-2013-4238/" source="CVE"/>
		<reference ref_id="CVE-2014-1912" ref_url="https://www.suse.com/security/cve/CVE-2014-1912/" source="CVE"/>
		<reference ref_id="CVE-2014-4650" ref_url="https://www.suse.com/security/cve/CVE-2014-4650/" source="CVE"/>
		<reference ref_id="CVE-2014-7185" ref_url="https://www.suse.com/security/cve/CVE-2014-7185/" source="CVE"/>
		<reference ref_id="CVE-2016-0772" ref_url="https://www.suse.com/security/cve/CVE-2016-0772/" source="CVE"/>
		<reference ref_id="CVE-2016-1000110" ref_url="https://www.suse.com/security/cve/CVE-2016-1000110/" source="CVE"/>
		<reference ref_id="CVE-2016-5636" ref_url="https://www.suse.com/security/cve/CVE-2016-5636/" source="CVE"/>
		<reference ref_id="CVE-2016-5699" ref_url="https://www.suse.com/security/cve/CVE-2016-5699/" source="CVE"/>
		<reference ref_id="CVE-2017-1000158" ref_url="https://www.suse.com/security/cve/CVE-2017-1000158/" source="CVE"/>
		<reference ref_id="CVE-2017-18207" ref_url="https://www.suse.com/security/cve/CVE-2017-18207/" source="CVE"/>
		<reference ref_id="CVE-2018-1000030" ref_url="https://www.suse.com/security/cve/CVE-2018-1000030/" source="CVE"/>
		<reference ref_id="CVE-2018-1000802" ref_url="https://www.suse.com/security/cve/CVE-2018-1000802/" source="CVE"/>
		<reference ref_id="CVE-2018-1060" ref_url="https://www.suse.com/security/cve/CVE-2018-1060/" source="CVE"/>
		<reference ref_id="CVE-2018-1061" ref_url="https://www.suse.com/security/cve/CVE-2018-1061/" source="CVE"/>
		<reference ref_id="CVE-2018-14647" ref_url="https://www.suse.com/security/cve/CVE-2018-14647/" source="CVE"/>
		<reference ref_id="CVE-2018-20852" ref_url="https://www.suse.com/security/cve/CVE-2018-20852/" source="CVE"/>
		<reference ref_id="CVE-2019-10160" ref_url="https://www.suse.com/security/cve/CVE-2019-10160/" source="CVE"/>
		<reference ref_id="CVE-2019-16056" ref_url="https://www.suse.com/security/cve/CVE-2019-16056/" source="CVE"/>
		<reference ref_id="CVE-2019-16935" ref_url="https://www.suse.com/security/cve/CVE-2019-16935/" source="CVE"/>
		<reference ref_id="CVE-2019-5010" ref_url="https://www.suse.com/security/cve/CVE-2019-5010/" source="CVE"/>
		<reference ref_id="CVE-2019-9636" ref_url="https://www.suse.com/security/cve/CVE-2019-9636/" source="CVE"/>
		<reference ref_id="CVE-2019-9947" ref_url="https://www.suse.com/security/cve/CVE-2019-9947/" source="CVE"/>
		<reference ref_id="CVE-2019-9948" ref_url="https://www.suse.com/security/cve/CVE-2019-9948/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0234-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006406.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-24"/>
	<updated date="2020-01-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027282">SUSE bug 1027282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1041090">SUSE bug 1041090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1042670">SUSE bug 1042670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068664">SUSE bug 1068664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073269">SUSE bug 1073269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073748">SUSE bug 1073748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078326">SUSE bug 1078326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078485">SUSE bug 1078485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1079300">SUSE bug 1079300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081750">SUSE bug 1081750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083507">SUSE bug 1083507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084650">SUSE bug 1084650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086001">SUSE bug 1086001</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088004">SUSE bug 1088004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088009">SUSE bug 1088009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109847">SUSE bug 1109847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111793">SUSE bug 1111793</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113755">SUSE bug 1113755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122191">SUSE bug 1122191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129346">SUSE bug 1129346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130840">SUSE bug 1130840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130847">SUSE bug 1130847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138459">SUSE bug 1138459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141853">SUSE bug 1141853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149792">SUSE bug 1149792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149955">SUSE bug 1149955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153238">SUSE bug 1153238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153830">SUSE bug 1153830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159035">SUSE bug 1159035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/214983">SUSE bug 214983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/298378">SUSE bug 298378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/346490">SUSE bug 346490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/367853">SUSE bug 367853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/379534">SUSE bug 379534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/380942">SUSE bug 380942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/399190">SUSE bug 399190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/406051">SUSE bug 406051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/425138">SUSE bug 425138</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/426563">SUSE bug 426563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/430761">SUSE bug 430761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/432677">SUSE bug 432677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/436966">SUSE bug 436966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/437293">SUSE bug 437293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/441088">SUSE bug 441088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/462375">SUSE bug 462375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/525295">SUSE bug 525295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/534721">SUSE bug 534721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/551715">SUSE bug 551715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/572673">SUSE bug 572673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/577032">SUSE bug 577032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/581765">SUSE bug 581765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/603255">SUSE bug 603255</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/617751">SUSE bug 617751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/637176">SUSE bug 637176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/638233">SUSE bug 638233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/658604">SUSE bug 658604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/673071">SUSE bug 673071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/682554">SUSE bug 682554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/697251">SUSE bug 697251</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/707667">SUSE bug 707667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/718009">SUSE bug 718009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747125">SUSE bug 747125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/747794">SUSE bug 747794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/751718">SUSE bug 751718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/754447">SUSE bug 754447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/766778">SUSE bug 766778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/794139">SUSE bug 794139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/804978">SUSE bug 804978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/827982">SUSE bug 827982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/831442">SUSE bug 831442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/834601">SUSE bug 834601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/836739">SUSE bug 836739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/856835">SUSE bug 856835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/856836">SUSE bug 856836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/857470">SUSE bug 857470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/863741">SUSE bug 863741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/885882">SUSE bug 885882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/898572">SUSE bug 898572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/901715">SUSE bug 901715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/935856">SUSE bug 935856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/945401">SUSE bug 945401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/964182">SUSE bug 964182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/984751">SUSE bug 984751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985177">SUSE bug 985177</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/985348">SUSE bug 985348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/989523">SUSE bug 989523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/997436">SUSE bug 997436</bugzilla>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2007-2052/">CVE-2007-2052</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-1721/">CVE-2008-1721</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-2315/">CVE-2008-2315</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-2316/">CVE-2008-2316</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3142/">CVE-2008-3142</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2008-3143/">CVE-2008-3143</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2008-3144/">CVE-2008-3144</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2011-1521/">CVE-2011-1521</cve>
	<cve impact="moderate" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-3389/">CVE-2011-3389</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2011-4944/">CVE-2011-4944</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-0845/">CVE-2012-0845</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2012-1150/">CVE-2012-1150</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2013-1752/">CVE-2013-1752</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2013-1753/">CVE-2013-1753</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2013-4238/">CVE-2013-4238</cve>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2014-1912/">CVE-2014-1912</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2014-4650/">CVE-2014-4650</cve>
	<cve impact="moderate" href="https://www.suse.com/security/cve/CVE-2014-7185/">CVE-2014-7185</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-0772/">CVE-2016-0772</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-1000110/">CVE-2016-1000110</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-5636/">CVE-2016-5636</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2016-5699/">CVE-2016-5699</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-1000158/">CVE-2017-1000158</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18207/">CVE-2017-18207</cve>
	<cve impact="important" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000030/">CVE-2018-1000030</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000802/">CVE-2018-1000802</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-1060/">CVE-2018-1060</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1061/">CVE-2018-1061</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14647/">CVE-2018-14647</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20852/">CVE-2018-20852</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10160/">CVE-2019-10160</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16056/">CVE-2019-16056</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-16935/">CVE-2019-16935</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5010/">CVE-2019-5010</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9636/">CVE-2019-9636</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9947/">CVE-2019-9947</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9948/">CVE-2019-9948</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009491309" comment="python-curses-2.7.17-7.32.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491310" comment="python-devel-2.7.17-7.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491311" comment="python-gdbm-2.7.17-7.32.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009491312" comment="python-xml-2.7.17-7.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138941" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176179" ref_url="https://bugzilla.suse.com/1176179" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24977" ref_url="https://www.suse.com/security/cve/CVE-2020-24977/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2612-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007411.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

- CVE-2020-24977: Fixed a global-buffer-overflow in xmlEncodeEntitiesInternal (bsc#1176179).  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-11"/>
	<updated date="2020-09-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1176179">SUSE bug 1176179</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24977/">CVE-2020-24977</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498255" comment="python2-libxml2-python-2.9.7-3.25.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138942" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176579" ref_url="https://bugzilla.suse.com/1176579" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1472" ref_url="https://www.suse.com/security/cve/CVE-2020-1472/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007465.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

 - ZeroLogon: An elevation of privilege was possible with some non default configurations when an attacker established
 a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC) 
 (CVE-2020-1472, bsc#1176579).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-23"/>
	<updated date="2020-09-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176579">SUSE bug 1176579</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1472/">CVE-2020-1472</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498256" comment="libsamba-policy0-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498257" comment="samba-ad-dc-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498258" comment="samba-dsdb-modules-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498259" comment="samba-libs-python-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498260" comment="samba-python-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138943" version="1" class="patch">
	<metadata>
		<title>Security update for python-pip (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007496.html" source="SUSE-SU"/>
		<description>
This update for python-pip fixes the following issues:

- CVE-2019-20916: Fixed a directory traversal in _download_http_url (bsc#1176262)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-29"/>
	<updated date="2020-09-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498261" comment="python2-pip-10.0.1-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138944" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173902" ref_url="https://bugzilla.suse.com/1173902" source="BUGZILLA"/>
		<reference ref_id="1173994" ref_url="https://bugzilla.suse.com/1173994" source="BUGZILLA"/>
		<reference ref_id="1177613" ref_url="https://bugzilla.suse.com/1177613" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14318" ref_url="https://www.suse.com/security/cve/CVE-2020-14318/" source="CVE"/>
		<reference ref_id="CVE-2020-14323" ref_url="https://www.suse.com/security/cve/CVE-2020-14323/" source="CVE"/>
		<reference ref_id="CVE-2020-14383" ref_url="https://www.suse.com/security/cve/CVE-2020-14383/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007675.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613).
- CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994).
- CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-29"/>
	<updated date="2020-10-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173902">SUSE bug 1173902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173994">SUSE bug 1173994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177613">SUSE bug 1177613</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14318/">CVE-2020-14318</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14323/">CVE-2020-14323</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14383/">CVE-2020-14383</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498262" comment="libsamba-policy0-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498263" comment="samba-ad-dc-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498264" comment="samba-dsdb-modules-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498265" comment="samba-libs-python-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498266" comment="samba-python-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138945" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177211" ref_url="https://bugzilla.suse.com/1177211" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26116" ref_url="https://www.suse.com/security/cve/CVE-2020-26116/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007679.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- bsc#1177211 (CVE-2020-26116) no longer allowing special characters in the method parameter 
  of HTTPConnection.putrequest in httplib, stopping injection of headers.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-02"/>
	<updated date="2020-11-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177211">SUSE bug 1177211</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26116/">CVE-2020-26116</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498267" comment="python-curses-2.7.17-7.44.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498268" comment="python-devel-2.7.17-7.44.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498269" comment="python-gdbm-2.7.17-7.44.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498270" comment="python-xml-2.7.17-7.44.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138946" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159670" ref_url="https://bugzilla.suse.com/1159670" source="BUGZILLA"/>
		<reference ref_id="1175987" ref_url="https://bugzilla.suse.com/1175987" source="BUGZILLA"/>
		<reference ref_id="1176024" ref_url="https://bugzilla.suse.com/1176024" source="BUGZILLA"/>
		<reference ref_id="1176294" ref_url="https://bugzilla.suse.com/1176294" source="BUGZILLA"/>
		<reference ref_id="1176397" ref_url="https://bugzilla.suse.com/1176397" source="BUGZILLA"/>
		<reference ref_id="1177867" ref_url="https://bugzilla.suse.com/1177867" source="BUGZILLA"/>
		<reference ref_id="1178319" ref_url="https://bugzilla.suse.com/1178319" source="BUGZILLA"/>
		<reference ref_id="1178361" ref_url="https://bugzilla.suse.com/1178361" source="BUGZILLA"/>
		<reference ref_id="1178362" ref_url="https://bugzilla.suse.com/1178362" source="BUGZILLA"/>
		<reference ref_id="1178485" ref_url="https://bugzilla.suse.com/1178485" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-16846" ref_url="https://www.suse.com/security/cve/CVE-2020-16846/" source="CVE"/>
		<reference ref_id="CVE-2020-17490" ref_url="https://www.suse.com/security/cve/CVE-2020-17490/" source="CVE"/>
		<reference ref_id="CVE-2020-25592" ref_url="https://www.suse.com/security/cve/CVE-2020-25592/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007724.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string (bsc#1178485)
- Properly validate eauth credentials and tokens on SSH calls made by Salt API 
  (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846)
- Fix disk.blkid to avoid unexpected keyword argument '__pub_user'. (bsc#1177867)
- Ensure virt.update stop_on_reboot is updated with its default value.
- Do not break package building for systemd OSes.
- Drop wrong mock from chroot unit test.
- Support systemd versions with dot. (bsc#1176294)
- Fix for grains.test_core unit test.
- Fix file/directory user and group ownership containing UTF-8 characters. (bsc#1176024)
- Several changes to virtualization:
  * Fix virt update when cpu and memory are changed.
  * Memory Tuning GSoC.
  * Properly fix memory setting regression in virt.update.
  * Expose libvirt on_reboot in virt states.
- Support transactional systems (MicroOS).
- zypperpkg module ignores retcode 104 for search(). (bsc#1159670)
- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding file or block disk. (bsc#1175987)
- Invalidate file list cache when cache file modified time is in the future. (bsc#1176397)
- Prevent import errors when running test_btrfs unit tests
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-06"/>
	<updated date="2020-11-06"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1159670">SUSE bug 1159670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175987">SUSE bug 1175987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176024">SUSE bug 1176024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176294">SUSE bug 1176294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176397">SUSE bug 1176397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177867">SUSE bug 1177867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178319">SUSE bug 1178319</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178361">SUSE bug 1178361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178362">SUSE bug 1178362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178485">SUSE bug 1178485</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16846/">CVE-2020-16846</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-17490/">CVE-2020-17490</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25592/">CVE-2020-25592</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498271" comment="python2-salt-3000-6.51.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138947" version="1" class="patch">
	<metadata>
		<title>Security update for python-pip (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3565-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007889.html" source="SUSE-SU"/>
		<description>
This update for python-pip fixes the following issues:
  
- Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-30"/>
	<updated date="2020-11-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498272" comment="python2-pip-10.0.1-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138948" version="1" class="patch">
	<metadata>
		<title>Security update for python-setuptools (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3566-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007890.html" source="SUSE-SU"/>
		<description>
This update for python-setuptools fixes the following issues:

- Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-30"/>
	<updated date="2020-11-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498273" comment="python2-setuptools-40.5.0-6.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138949" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007904.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-02"/>
	<updated date="2020-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498274" comment="python-curses-2.7.17-7.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498275" comment="python-devel-2.7.17-7.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498276" comment="python-gdbm-2.7.17-7.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498277" comment="python-xml-2.7.17-7.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138950" version="1" class="patch">
	<metadata>
		<title>Security update for python-urllib3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177120" ref_url="https://bugzilla.suse.com/1177120" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26137" ref_url="https://www.suse.com/security/cve/CVE-2020-26137/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007944.html" source="SUSE-SU"/>
		<description>
This update for python-urllib3 fixes the following issues:

- CVE-2020-26137: Fixed a CRLF injection via HTTP request method (bsc#1177120).	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-09"/>
	<updated date="2020-12-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177120">SUSE bug 1177120</bugzilla>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26137/">CVE-2020-26137</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498278" comment="python2-urllib3-1.24-9.10.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138951" version="1" class="patch">
	<metadata>
		<title>Security update for python-pip, python-scripttest (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175297" ref_url="https://bugzilla.suse.com/1175297" source="BUGZILLA"/>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007949.html" source="SUSE-SU"/>
		<description>
This update for python-pip, python-scripttest fixes the following issues:

- Update in SLE-15 (bsc#1175297, jsc#ECO-3035, jsc#PM-2318)

python-pip was updated to 20.0.2:

* Fix a regression in generation of compatibility tags
* Rename an internal module, to avoid ImportErrors due to improper uninstallation
* Switch to a dedicated CLI tool for vendoring dependencies.
* Remove wheel tag calculation from pip and use packaging.tags. This should provide more tags ordered better than in prior releases.
*  Deprecate setup.py-based builds that do not generate an .egg-info directory.
*  The pip&gt;=20 wheel cache is not retro-compatible with previous versions. Until pip 21.0, pip will continue to take advantage of existing legacy cache entries.
*  Deprecate undocumented --skip-requirements-regex option.
*  Deprecate passing install-location-related options via --install-option.
*  Use literal 'abi3' for wheel tag on CPython 3.x, to align with PEP 384 which only defines it for this platform.
*  Remove interpreter-specific major version tag e.g. cp3-none-any from consideration. This behavior was not documented strictly, and this tag in particular is not useful. Anyone with a use case can create an issue with pypa/packaging.
*  Wheel processing no longer permits wheels containing more than one top-level .dist-info directory.
*  Support for the git+git@ form of VCS requirement is being deprecated and will be removed in pip 21.0. Switch to git+https:// or git+ssh://. git+git:// also works but its use is discouraged as it is insecure.
*  Default to doing a user install (as if --user was passed) when the main site-packages directory is not writeable and user site-packages are enabled.
*  Warn if a path in PATH starts with tilde during pip install.
*  Cache wheels built from Git requirements that are considered immutable, because they point to a commit hash.
*  Add option --no-python-version-warning to silence warnings related to deprecation of Python versions.
*  Cache wheels that pip wheel built locally, matching what pip install does. This particularly helps performance in workflows where pip wheel is used for building before installing. Users desiring the original behavior can use pip wheel --no-cache-dir
*  Display CA information in pip debug.
*  Show only the filename (instead of full URL), when downloading from PyPI.
*  Suggest a more robust command to upgrade pip itself to avoid confusion when the current pip command is not available as pip.
*  Define all old pip console script entrypoints to prevent import issues in stale wrapper scripts.
*  The build step of pip wheel now builds all wheels to a cache first, then copies them to the wheel directory all at once. Before, it built them to a temporary directory and moved them to the wheel directory one by one.
*  Expand ~ prefix to user directory in path options, configs, and environment variables. Values that may be either URL or path are not currently supported, to avoid ambiguity:

   --find-links
   --constraint, -c
   --requirement, -r
   --editable, -e

*  Correctly handle system site-packages, in virtual environments created with venv (PEP 405).
*  Fix case sensitive comparison of pip freeze when used with -r option.
*  Enforce PEP 508 requirement format in pyproject.toml build-system.requires.
*  Make ensure_dir() also ignore ENOTEMPTY as seen on Windows.
*  Fix building packages which specify backend-path in pyproject.toml.
*  Do not attempt to run setup.py clean after a pep517 build error, since a setup.py may not exist in that case.
*  Fix passwords being visible in the index-url in 'Downloading &lt;url&gt;' message.
*  Change method from shutil.remove to shutil.rmtree in noxfile.py.
*  Skip running tests which require subversion, when svn isn't installed
*  Fix not sending client certificates when using --trusted-host.
*  Make sure pip wheel never outputs pure python wheels with a python implementation tag. Better fix/workaround for #3025 by using a per-implementation wheel cache instead of caching pure python wheels with an implementation tag in their name.
*  Include subdirectory URL fragments in cache keys.
*  Fix typo in warning message when any of --build-option, --global-option and --install-option is used in requirements.txt
*  Fix the logging of cached HTTP response shown as downloading.
*  Effectively disable the wheel cache when it is not writable, as is the case with the http cache.
*  Correctly handle relative cache directory provided via --cache-dir.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-09"/>
	<updated date="2020-12-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175297">SUSE bug 1175297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498279" comment="python2-pip-20.0.2-6.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138952" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162224" ref_url="https://bugzilla.suse.com/1162224" source="BUGZILLA"/>
		<reference ref_id="1162367" ref_url="https://bugzilla.suse.com/1162367" source="BUGZILLA"/>
		<reference ref_id="1162825" ref_url="https://bugzilla.suse.com/1162825" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9674" ref_url="https://www.suse.com/security/cve/CVE-2019-9674/" source="CVE"/>
		<reference ref_id="CVE-2020-8492" ref_url="https://www.suse.com/security/cve/CVE-2020-8492/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0510-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006545.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

Security issues fixed:

- CVE-2019-9674: Improved the documentation, warning about dangers of zip-bombs (bsc#1162825).
- CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service via HTTP (bsc#1162367).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-27"/>
	<updated date="2020-02-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162224">SUSE bug 1162224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162367">SUSE bug 1162367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162825">SUSE bug 1162825</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9674/">CVE-2019-9674</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8492/">CVE-2020-8492</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498280" comment="python-curses-2.7.17-7.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498281" comment="python-devel-2.7.17-7.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498282" comment="python-gdbm-2.7.17-7.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498283" comment="python-xml-2.7.17-7.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138953" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1135656" ref_url="https://bugzilla.suse.com/1135656" source="BUGZILLA"/>
		<reference ref_id="1153611" ref_url="https://bugzilla.suse.com/1153611" source="BUGZILLA"/>
		<reference ref_id="1157465" ref_url="https://bugzilla.suse.com/1157465" source="BUGZILLA"/>
		<reference ref_id="1158940" ref_url="https://bugzilla.suse.com/1158940" source="BUGZILLA"/>
		<reference ref_id="1159118" ref_url="https://bugzilla.suse.com/1159118" source="BUGZILLA"/>
		<reference ref_id="1160931" ref_url="https://bugzilla.suse.com/1160931" source="BUGZILLA"/>
		<reference ref_id="1162327" ref_url="https://bugzilla.suse.com/1162327" source="BUGZILLA"/>
		<reference ref_id="1162504" ref_url="https://bugzilla.suse.com/1162504" source="BUGZILLA"/>
		<reference ref_id="1165425" ref_url="https://bugzilla.suse.com/1165425" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17361" ref_url="https://www.suse.com/security/cve/CVE-2019-17361/" source="CVE"/>
		<reference ref_id="CVE-2019-18897" ref_url="https://www.suse.com/security/cve/CVE-2019-18897/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006608.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Avoid possible user escalation upgrading salt-master (bsc#1157465) (CVE-2019-18897)
- Fix unit tests failures in test_batch_async tests
- Batch Async: Handle exceptions, properly unregister and close instances after
  running async batching to avoid CPU starvation of the MWorkers (bsc#1162327)
- RHEL/CentOS 8 uses platform-python instead of python3
- New configuration option for selection of grains in the minion start event.
- Fix 'os_family' grain for Astra Linux Common Edition
- Fix for salt-api NET API where unauthenticated attacker could run
  arbitrary code (CVE-2019-17361) (bsc#1162504)
- Adds disabled parameter to mod_repo in aptpkg module
  Move token with atomic operation
  Bad API token files get deleted (bsc#1160931)
- Support for Btrfs and XFS in parted and mkfs added
- Adds list_downloaded for apt Module to enable pre-downloading support
  Adds virt.(pool|network)_get_xml functions
- Various libvirt updates:
  * Add virt.pool_capabilities function
  * virt.pool_running improvements
  * Add virt.pool_deleted state
  * virt.network_define allow adding IP configuration
- virt: adding kernel boot parameters to libvirt xml
- Fix to scheduler when data['run'] does not exist (bsc#1159118)
- Fix virt states to not fail on VMs already stopped
- Fix applying of attributes for returner rawfile_json (bsc#1158940)
- xfs: do not fail if type is not present (bsc#1153611)
- Fix errors when running virt.get_hypervisor function
- Align virt.full_info fixes with upstream Salt
- Fix for log checking in x509 test
- Read repo info without using interpolation (bsc#1135656)
- Limiting M2Crypto to &gt;= SLE15
- Replacing pycrypto with M2Crypto (bsc#1165425)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-13"/>
	<updated date="2020-03-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1135656">SUSE bug 1135656</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153611">SUSE bug 1153611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157465">SUSE bug 1157465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158940">SUSE bug 1158940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159118">SUSE bug 1159118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160931">SUSE bug 1160931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162327">SUSE bug 1162327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162504">SUSE bug 1162504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165425">SUSE bug 1165425</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17361/">CVE-2019-17361</cve>
	<cve impact="moderate" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18897/">CVE-2019-18897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498284" comment="python2-salt-2019.2.0-6.24.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138954" version="1" class="patch">
	<metadata>
		<title>Security update for python-PyYAML (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise Desktop 15 SP1</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Python 2 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1165439" ref_url="https://bugzilla.suse.com/1165439" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1747" ref_url="https://www.suse.com/security/cve/CVE-2020-1747/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006690.html" source="SUSE-SU"/>
		<description>
This update for python-PyYAML fixes the following issues:

- CVE-2020-1747: Fixed an arbitrary code execution when YAML files are parsed by FullLoader (bsc#1165439).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-08"/>
	<updated date="2020-04-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1165439">SUSE bug 1165439</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1747/">CVE-2020-1747</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-python2:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sled:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669874" comment="SUSE Linux Enterprise Desktop 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009256767" comment="SUSE Linux Enterprise Module for Python 2 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498285" comment="python2-PyYAML-5.1.2-6.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138955" version="1" class="patch">
	<metadata>
		<title>Security update for cryptctl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
		</affected>
		<reference ref_id="1186226" ref_url="https://bugzilla.suse.com/1186226" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18906" ref_url="https://www.suse.com/security/cve/CVE-2019-18906/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2136-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009076.html" source="SUSE-SU"/>
		<description>
This update for cryptctl fixes the following issues:

Update to version 2.4:

- CVE-2019-18906: Client side password hashing was equivalent to clear text password storage (bsc#1186226)
- First step to use plain text password instead of hashed password.
- Move repository into the SUSE github organization
- in RPC server, if client comes from localhost, remember its ipv4 localhost address instead of ipv6 address
- tell a record to clear expired pending commands upon saving a command result; introduce pending commands RPC test case
- avoid hard coding 127.0.0.1 in host ID of alive message test; let system administrator mount and unmount disks by issuing these two commands on key server.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-23"/>
	<updated date="2021-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186226">SUSE bug 1186226</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18906/">CVE-2019-18906</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-sap-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009255507" comment="SUSE Linux Enterprise Module for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494072" comment="cryptctl-2.4-4.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138956" version="1" class="patch">
	<metadata>
		<title>Security update for saphanabootstrap-formula (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
		</affected>
		<reference ref_id="1185643" ref_url="https://bugzilla.suse.com/1185643" source="BUGZILLA"/>
		<reference ref_id="1205990" ref_url="https://bugzilla.suse.com/1205990" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45153" ref_url="https://www.suse.com/security/cve/CVE-2022-45153/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013407.html" source="SUSE-SU"/>
		<description>
This update for saphanabootstrap-formula fixes the following issues:

- Version bump 0.13.1
  * revert changes to spec file to re-enable SLES RPM builds
  * CVE-2022-45153: Fixed privilege escalation for arbitrary users in hana/ha_cluster.sls (bsc#1205990)

- Version bump 0.13.0
  * pass sid to sudoers in a SLES12 compatible way
  * add location constraint to gcp_stonith

- Version bump 0.12.1
  * moved templates dir into hana dir in repository to be gitfs compatible

- Version bump 0.12.0
  * add SAPHanaSR takeover blocker

- Version bump 0.11.0
  * use check_cmd instead of tmp sudoers file
  * make sudoers rules more secure
  * migrate sudoers to template file

- Version bump 0.10.1
  * fix hook removal conditions
  * fix majority_maker code on case grain is empty

- Version bump 0.10.0
  * allow to disable shared HANA basepath and rework add_hosts code
    (enables HANA scale-out on AWS)
  * do not edit global.ini directly (if not needed)

- Version bump 0.9.1
  * fix majority_maker code on case grain is empty

- Version bump 0.9.0
  * define vip_mechanism for every provider and reorder resources
    (same schema for all SAP related formulas)

- Version bump 0.8.1
  * use multi-target Hook on HANA scale-out

- Version bump 0.8.0
  * add HANA scale-out support
  * add idempotence to not affect a running HANA and cluster

- Version bump 0.7.2
  * add native fencing for microsoft-azure

- fixes a not working import of dbapi in SUSE/ha-sap-terraform-deployments#703
- removes the installation and extraction of all hdbcli files in the /hana/shared/srHook directory
- fixes execution order of srTakeover/srCostOptMemConfig hook
- renames and updates hook srTakeover to srCostOptMemConfig

- Changing exporter stickiness to =&gt; 0 and adjusting the colocation 
  score from +inf to -inf and changing the colocation from Master to Slave. 
  This change fix the impact of a failed exporter in regards to the HANA DB.
  

- Document extra_parameters in pillar.example (bsc#1185643)

- Change hanadb_exporter default timeout value to 30 seconds

- Set correct stickiness for the azure-lb resource
  The azure-lb resource receives an stickiness=0 to not influence on
  transitions calculations as the HANA resources have more priority
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-02"/>
	<updated date="2023-01-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185643">SUSE bug 1185643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205990">SUSE bug 1205990</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45153/">CVE-2022-45153</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-sap-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009255507" comment="SUSE Linux Enterprise Module for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730856" comment="saphanabootstrap-formula-0.13.1+git.1667812208.4db963e-150000.1.19.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138957" version="1" class="patch">
	<metadata>
		<title>Security update for prometheus-ha_cluster_exporter (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2138-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029308.html" source="SUSE-SU"/>
		<description>

This update of prometheus-ha_cluster_exporter fixes the following issues:

- rebuild the package with the go 19.9 secure release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-09"/>
	<updated date="2023-05-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-sap-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009255507" comment="SUSE Linux Enterprise Module for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756773" comment="prometheus-ha_cluster_exporter-1.3.1+git.1676027782.ad3c0e9-150000.1.26.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138958" version="1" class="patch">
	<metadata>
		<title>Security update for prometheus-sap_host_exporter (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="1209658" ref_url="https://bugzilla.suse.com/1209658" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2213-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029419.html" source="SUSE-SU"/>
		<description>

This update of prometheus-sap_host_exporter fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441 bsc#1209658).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209658">SUSE bug 1209658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-sap-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009255507" comment="SUSE Linux Enterprise Module for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757165" comment="prometheus-sap_host_exporter-0.5.1+git.1593777035.a5d05f8-150000.1.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138959" version="1" class="patch">
	<metadata>
		<title>Security update for prometheus-ha_cluster_exporter (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
		</affected>
		<reference ref_id="1208296" ref_url="https://bugzilla.suse.com/1208296" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2746-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030154.html" source="SUSE-SU"/>
		<description>
This update for prometheus-ha_cluster_exporter fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1208296).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-30"/>
	<updated date="2023-06-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208296">SUSE bug 1208296</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-sap-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009255507" comment="SUSE Linux Enterprise Module for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770076" comment="prometheus-ha_cluster_exporter-1.3.3+git.1683650163.1000ba6-150000.1.29.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138960" version="1" class="patch">
	<metadata>
		<title>Security update for prometheus-sap_host_exporter (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
		</affected>
		<reference ref_id="1208270" ref_url="https://bugzilla.suse.com/1208270" source="BUGZILLA"/>
		<reference ref_id="1211311" ref_url="https://bugzilla.suse.com/1211311" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2756-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015402.html" source="SUSE-SU"/>
		<description>
This update for prometheus-sap_host_exporter fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1208270).
- fixed exporter package description (bsc#1211311).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-03"/>
	<updated date="2023-07-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208270">SUSE bug 1208270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211311">SUSE bug 1211311</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-sap-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009255507" comment="SUSE Linux Enterprise Module for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770075" comment="prometheus-sap_host_exporter-0.6.0+git.1685628435.48c4099-150000.1.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138961" version="1" class="patch">
	<metadata>
		<title>Security update for prometheus-ha_cluster_exporter (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Module for SAP Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
		</affected>
		<reference ref_id="1208046" ref_url="https://bugzilla.suse.com/1208046" source="BUGZILLA"/>
		<reference ref_id="1208047" ref_url="https://bugzilla.suse.com/1208047" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-46146" ref_url="https://www.suse.com/security/cve/CVE-2022-46146/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013841.html" source="SUSE-SU"/>
		<description>
This update for prometheus-ha_cluster_exporter fixes the following issues:

  Updated to version 1.3.1:

  - CVE-2022-46146: Fixed authentication bypass via cache poisoning in prometheus/exporter-toolkit (bsc#1208046, bsc#1208047).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-20"/>
	<updated date="2023-02-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208046">SUSE bug 1208046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208047">SUSE bug 1208047</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46146/">CVE-2022-46146</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-module-sap-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009255507" comment="SUSE Linux Enterprise Module for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740052" comment="prometheus-ha_cluster_exporter-1.3.1+git.1676027782.ad3c0e9-150000.1.24.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138962" version="1" class="patch">
	<metadata>
		<title>Security update for 389-ds (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1076530" ref_url="https://bugzilla.suse.com/1076530" source="BUGZILLA"/>
		<reference ref_id="1096368" ref_url="https://bugzilla.suse.com/1096368" source="BUGZILLA"/>
		<reference ref_id="1105606" ref_url="https://bugzilla.suse.com/1105606" source="BUGZILLA"/>
		<reference ref_id="1106699" ref_url="https://bugzilla.suse.com/1106699" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-15134" ref_url="https://www.suse.com/security/cve/CVE-2017-15134/" source="CVE"/>
		<reference ref_id="CVE-2017-15135" ref_url="https://www.suse.com/security/cve/CVE-2017-15135/" source="CVE"/>
		<reference ref_id="CVE-2018-10850" ref_url="https://www.suse.com/security/cve/CVE-2018-10850/" source="CVE"/>
		<reference ref_id="CVE-2018-10935" ref_url="https://www.suse.com/security/cve/CVE-2018-10935/" source="CVE"/>
		<reference ref_id="CVE-2018-14624" ref_url="https://www.suse.com/security/cve/CVE-2018-14624/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1207-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005641.html" source="SUSE-SU"/>
		<description>
This update for 389-ds fixes the following issues:

The following security vulnerabilities were addressed:

- CVE-2018-10850: Fixed a race condition on reference counter that would lead
  to a denial of service using persistent search (bsc#1096368)
- CVE-2017-15134: Fixed a remote denial of service via search filters in
  slapi_filter_sprintf in slapd/util.c (bsc#1076530)
- CVE-2017-15135: Fixed authentication bypass due to lack of size check in
  slapi_ct_memcmp function in ch_malloc.c (bsc#1076530)
- CVE-2018-10935: Fixed an issue that allowed users to cause a crash via
  ldapsearch with server side sorts (bsc#1105606)
- CVE-2018-14624: The lock controlling the error log was not correctly used
  when re-opening the log file in log__error_emergency(), allowing an attacker to
  send a flood of modifications to a very large DN, which could have caused slapd
  to crash (bsc#1106699).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-01"/>
	<updated date="2019-07-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076530">SUSE bug 1076530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096368">SUSE bug 1096368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105606">SUSE bug 1105606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106699">SUSE bug 1106699</bugzilla>
	<cve impact="low" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-15134/">CVE-2017-15134</cve>
	<cve impact="low" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15135/">CVE-2017-15135</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10850/">CVE-2018-10850</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10935/">CVE-2018-10935</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14624/">CVE-2018-14624</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498716" comment="389-ds-1.4.0.3-4.7.52 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498717" comment="389-ds-devel-1.4.0.3-4.7.52 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138963" version="1" class="patch">
	<metadata>
		<title>Security update for graphviz (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1132091" ref_url="https://bugzilla.suse.com/1132091" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11023" ref_url="https://www.suse.com/security/cve/CVE-2019-11023/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1267-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005647.html" source="SUSE-SU"/>
		<description>
This update for graphviz fixes the following issues:

Security issue fixed:

- CVE-2019-11023: Fixed a denial of service vulnerability, which was caused by a NULL pointer dereference in agroot() (bsc#1132091).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-02"/>
	<updated date="2019-07-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1132091">SUSE bug 1132091</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11023/">CVE-2019-11023</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498738" comment="graphviz-tcl-2.40.1-6.3.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138964" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1104129" ref_url="https://bugzilla.suse.com/1104129" source="BUGZILLA"/>
		<reference ref_id="1126068" ref_url="https://bugzilla.suse.com/1126068" source="BUGZILLA"/>
		<reference ref_id="1126069" ref_url="https://bugzilla.suse.com/1126069" source="BUGZILLA"/>
		<reference ref_id="1133185" ref_url="https://bugzilla.suse.com/1133185" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-5740" ref_url="https://www.suse.com/security/cve/CVE-2018-5740/" source="CVE"/>
		<reference ref_id="CVE-2018-5743" ref_url="https://www.suse.com/security/cve/CVE-2018-5743/" source="CVE"/>
		<reference ref_id="CVE-2018-5745" ref_url="https://www.suse.com/security/cve/CVE-2018-5745/" source="CVE"/>
		<reference ref_id="CVE-2019-6465" ref_url="https://www.suse.com/security/cve/CVE-2019-6465/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1407-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005528.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

Security issues fixed:

- CVE-2019-6465: Fixed an issue where controls for zone transfers may not be properly applied to Dynamically Loadable Zones (bsc#1126069).
- CVE-2018-5745: Fixed a denial of service vulnerability if a trust anchor rolls over to an unsupported key algorithm when using managed-keys (bsc#1126068).
- CVE-2018-5743: Fixed a denial of service vulnerability which could be caused by to many simultaneous TCP connections (bsc#1133185).
- CVE-2018-5740: Fixed a denial of service vulnerability in the 'deny-answer-aliases' feature (bsc#1104129).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-03"/>
	<updated date="2019-06-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1104129">SUSE bug 1104129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126068">SUSE bug 1126068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126069">SUSE bug 1126069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133185">SUSE bug 1133185</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5740/">CVE-2018-5740</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5743/">CVE-2018-5743</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-5745/">CVE-2018-5745</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-6465/">CVE-2019-6465</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498800" comment="bind-9.11.2-12.11.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498801" comment="bind-chrootenv-9.11.2-12.11.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498802" comment="bind-doc-9.11.2-12.11.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138965" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1111331" ref_url="https://bugzilla.suse.com/1111331" source="BUGZILLA"/>
		<reference ref_id="1133229" ref_url="https://bugzilla.suse.com/1133229" source="BUGZILLA"/>
		<reference ref_id="1134348" ref_url="https://bugzilla.suse.com/1134348" source="BUGZILLA"/>
		<reference ref_id="1135273" ref_url="https://bugzilla.suse.com/1135273" source="BUGZILLA"/>
		<reference ref_id="1136109" ref_url="https://bugzilla.suse.com/1136109" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126/" source="CVE"/>
		<reference ref_id="CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127/" source="CVE"/>
		<reference ref_id="CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130/" source="CVE"/>
		<reference ref_id="CVE-2019-10132" ref_url="https://www.suse.com/security/cve/CVE-2019-10132/" source="CVE"/>
		<reference ref_id="CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1490-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005555.html" source="SUSE-SU"/>
		<description>

  
This update for libvirt fixes the following issues:

Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331)

- CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)
- CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)
- CVE-2018-12130: Microarchitectural Load Port Data Sampling (MLPDS)
- CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

These updates contain the libvirt adjustments, that pass through the new 'md-clear' CPU flag (bsc#1135273).

For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736

Security issues fixed:

- CVE-2019-10132: Reject clients unless their UID matches the server UID (bsc#1134348)

Non security issues fixed:

- delay global firewall setup if no networks are running (bsc#1133229)
- add systemd-container dependency to qemu and lxc drivers (bsc#1136109)

		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-13"/>
	<updated date="2019-06-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1111331">SUSE bug 1111331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133229">SUSE bug 1133229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134348">SUSE bug 1134348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135273">SUSE bug 1135273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136109">SUSE bug 1136109</bugzilla>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-10132/">CVE-2019-10132</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499094" comment="libvirt-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499095" comment="libvirt-admin-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499096" comment="libvirt-bash-completion-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499097" comment="libvirt-client-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499098" comment="libvirt-daemon-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499099" comment="libvirt-daemon-config-network-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499100" comment="libvirt-daemon-config-nwfilter-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499101" comment="libvirt-daemon-driver-interface-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499102" comment="libvirt-daemon-driver-libxl-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499103" comment="libvirt-daemon-driver-lxc-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499104" comment="libvirt-daemon-driver-network-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499105" comment="libvirt-daemon-driver-nodedev-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499106" comment="libvirt-daemon-driver-nwfilter-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499107" comment="libvirt-daemon-driver-qemu-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499108" comment="libvirt-daemon-driver-secret-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499109" comment="libvirt-daemon-driver-storage-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499110" comment="libvirt-daemon-driver-storage-core-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499111" comment="libvirt-daemon-driver-storage-disk-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499112" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499113" comment="libvirt-daemon-driver-storage-logical-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499114" comment="libvirt-daemon-driver-storage-mpath-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499115" comment="libvirt-daemon-driver-storage-rbd-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499116" comment="libvirt-daemon-driver-storage-scsi-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499117" comment="libvirt-daemon-hooks-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499118" comment="libvirt-daemon-lxc-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499119" comment="libvirt-daemon-qemu-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499120" comment="libvirt-daemon-xen-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499121" comment="libvirt-devel-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499122" comment="libvirt-doc-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499123" comment="libvirt-lock-sanlock-5.1.0-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499124" comment="libvirt-nss-5.1.0-8.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138966" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1138301" ref_url="https://bugzilla.suse.com/1138301" source="BUGZILLA"/>
		<reference ref_id="1138302" ref_url="https://bugzilla.suse.com/1138302" source="BUGZILLA"/>
		<reference ref_id="1138303" ref_url="https://bugzilla.suse.com/1138303" source="BUGZILLA"/>
		<reference ref_id="1138305" ref_url="https://bugzilla.suse.com/1138305" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10161" ref_url="https://www.suse.com/security/cve/CVE-2019-10161/" source="CVE"/>
		<reference ref_id="CVE-2019-10166" ref_url="https://www.suse.com/security/cve/CVE-2019-10166/" source="CVE"/>
		<reference ref_id="CVE-2019-10167" ref_url="https://www.suse.com/security/cve/CVE-2019-10167/" source="CVE"/>
		<reference ref_id="CVE-2019-10168" ref_url="https://www.suse.com/security/cve/CVE-2019-10168/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005615.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:

Security issues fixed: 	  

- CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path
  parameter pointing anywhere on the system and potentially leading to execution 
  of a malicious file with root privileges by libvirtd (bsc#1138301). 
- CVE-2019-10166: Fixed an issue with virDomainManagedSaveDefineXML which could have 
  been used to alter the domain's config used for managedsave or execute arbitrary 
  emulator binaries (bsc#1138302).
- CVE-2019-10167: Fixed an issue with virConnectGetDomainCapabilities API which 
  could have been used to execute arbitrary emulators (bsc#1138303).
- CVE-2019-10168: Fixed an issue with virConnect*HypervisorCPU API which   
  could have been used to execute arbitrary emulators (bsc#1138305).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-21"/>
	<updated date="2019-06-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1138301">SUSE bug 1138301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138302">SUSE bug 1138302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138303">SUSE bug 1138303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138305">SUSE bug 1138305</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10161/">CVE-2019-10161</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10166/">CVE-2019-10166</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10167/">CVE-2019-10167</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10168/">CVE-2019-10168</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499125" comment="libvirt-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499126" comment="libvirt-admin-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499127" comment="libvirt-bash-completion-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499128" comment="libvirt-client-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499129" comment="libvirt-daemon-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499130" comment="libvirt-daemon-config-network-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499131" comment="libvirt-daemon-config-nwfilter-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499132" comment="libvirt-daemon-driver-interface-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499133" comment="libvirt-daemon-driver-libxl-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499134" comment="libvirt-daemon-driver-lxc-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499135" comment="libvirt-daemon-driver-network-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499136" comment="libvirt-daemon-driver-nodedev-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499137" comment="libvirt-daemon-driver-nwfilter-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499138" comment="libvirt-daemon-driver-qemu-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499139" comment="libvirt-daemon-driver-secret-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499140" comment="libvirt-daemon-driver-storage-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499141" comment="libvirt-daemon-driver-storage-core-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499142" comment="libvirt-daemon-driver-storage-disk-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499143" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499144" comment="libvirt-daemon-driver-storage-logical-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499145" comment="libvirt-daemon-driver-storage-mpath-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499146" comment="libvirt-daemon-driver-storage-rbd-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499147" comment="libvirt-daemon-driver-storage-scsi-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499148" comment="libvirt-daemon-hooks-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499149" comment="libvirt-daemon-lxc-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499150" comment="libvirt-daemon-qemu-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499151" comment="libvirt-daemon-xen-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499152" comment="libvirt-devel-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499153" comment="libvirt-doc-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499154" comment="libvirt-lock-sanlock-5.1.0-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499155" comment="libvirt-nss-5.1.0-8.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138967" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1140868" ref_url="https://bugzilla.suse.com/1140868" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11709" ref_url="https://www.suse.com/security/cve/CVE-2019-11709/" source="CVE"/>
		<reference ref_id="CVE-2019-11711" ref_url="https://www.suse.com/security/cve/CVE-2019-11711/" source="CVE"/>
		<reference ref_id="CVE-2019-11712" ref_url="https://www.suse.com/security/cve/CVE-2019-11712/" source="CVE"/>
		<reference ref_id="CVE-2019-11713" ref_url="https://www.suse.com/security/cve/CVE-2019-11713/" source="CVE"/>
		<reference ref_id="CVE-2019-11715" ref_url="https://www.suse.com/security/cve/CVE-2019-11715/" source="CVE"/>
		<reference ref_id="CVE-2019-11717" ref_url="https://www.suse.com/security/cve/CVE-2019-11717/" source="CVE"/>
		<reference ref_id="CVE-2019-11719" ref_url="https://www.suse.com/security/cve/CVE-2019-11719/" source="CVE"/>
		<reference ref_id="CVE-2019-11729" ref_url="https://www.suse.com/security/cve/CVE-2019-11729/" source="CVE"/>
		<reference ref_id="CVE-2019-11730" ref_url="https://www.suse.com/security/cve/CVE-2019-11730/" source="CVE"/>
		<reference ref_id="CVE-2019-9811" ref_url="https://www.suse.com/security/cve/CVE-2019-9811/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005725.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox, mozilla-nss fixes the following issues:

MozillaFirefox to version ESR 60.8:

- CVE-2019-9811: Sandbox escape via installation of malicious language pack (bsc#1140868).
- CVE-2019-11711: Script injection within domain through inner window reuse (bsc#1140868).
- CVE-2019-11712: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects (bsc#1140868).
- CVE-2019-11713: Use-after-free with HTTP/2 cached stream (bsc#1140868).
- CVE-2019-11729: Empty or malformed p256-ECDH public keys may trigger a segmentation fault (bsc#1140868).
- CVE-2019-11715: HTML parsing error can contribute to content XSS (bsc#1140868).
- CVE-2019-11717: Caret character improperly escaped in origins (bsc#1140868).
- CVE-2019-11719: Out-of-bounds read when importing curve25519 private key (bsc#1140868).
- CVE-2019-11730: Same-origin policy treats all files in a directory as having the same-origin (bsc#1140868).
- CVE-2019-11709: Multiple Memory safety bugs fixed (bsc#1140868).

mozilla-nss to version 3.44.1:

* Added IPSEC IKE support to softoken 
* Many new FIPS test cases
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-17"/>
	<updated date="2019-07-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140868">SUSE bug 1140868</bugzilla>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11709/">CVE-2019-11709</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11711/">CVE-2019-11711</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11712/">CVE-2019-11712</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11713/">CVE-2019-11713</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11715/">CVE-2019-11715</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11717/">CVE-2019-11717</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11719/">CVE-2019-11719</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-11729/">CVE-2019-11729</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11730/">CVE-2019-11730</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9811/">CVE-2019-9811</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490304" comment="libfreebl3-hmac-3.44.1-3.16.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490308" comment="libsoftokn3-hmac-3.44.1-3.16.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138968" version="1" class="patch">
	<metadata>
		<title>Security update for rmt-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1128858" ref_url="https://bugzilla.suse.com/1128858" source="BUGZILLA"/>
		<reference ref_id="1129271" ref_url="https://bugzilla.suse.com/1129271" source="BUGZILLA"/>
		<reference ref_id="1129392" ref_url="https://bugzilla.suse.com/1129392" source="BUGZILLA"/>
		<reference ref_id="1132160" ref_url="https://bugzilla.suse.com/1132160" source="BUGZILLA"/>
		<reference ref_id="1132690" ref_url="https://bugzilla.suse.com/1132690" source="BUGZILLA"/>
		<reference ref_id="1134190" ref_url="https://bugzilla.suse.com/1134190" source="BUGZILLA"/>
		<reference ref_id="1134428" ref_url="https://bugzilla.suse.com/1134428" source="BUGZILLA"/>
		<reference ref_id="1135222" ref_url="https://bugzilla.suse.com/1135222" source="BUGZILLA"/>
		<reference ref_id="1136020" ref_url="https://bugzilla.suse.com/1136020" source="BUGZILLA"/>
		<reference ref_id="1136081" ref_url="https://bugzilla.suse.com/1136081" source="BUGZILLA"/>
		<reference ref_id="1138316" ref_url="https://bugzilla.suse.com/1138316" source="BUGZILLA"/>
		<reference ref_id="1140492" ref_url="https://bugzilla.suse.com/1140492" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11068" ref_url="https://www.suse.com/security/cve/CVE-2019-11068/" source="CVE"/>
		<reference ref_id="CVE-2019-5419" ref_url="https://www.suse.com/security/cve/CVE-2019-5419/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1973-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005753.html" source="SUSE-SU"/>
		<description>
This update for rmt-server to version 2.3.1 fixes the following issues:

- Fix mirroring logic when errors are encountered (bsc#1140492)
- Refactor RMT::Mirror to download metadata/licenses in parallel
- Check repo metadata GPG signatures during mirroring (bsc#1132690)
- Add rmt-server-config subpackage with nginx configs (fate#327816, bsc#1136081)
- Fix dependency to removed boot_cli_i18n file (bsc#1136020) 
- Add `rmt-cli systems list` command to list registered systems
- Fix create UUID when system_uuid file empty (bsc#1138316)
- Fix duplicate nginx location in rmt-server-pubcloud (bsc#1135222)
- Mirror additional repos that were enabled during mirroring (bsc#1132690)
- Make service IDs consistent across different RMT instances (bsc#1134428)
- Make SMT data import scripts faster (bsc#1134190)
- Fix incorrect triggering of registration sharing (bsc#1129392)
- Fix license mirroring issue in some non-SUSE repositories (bsc#1128858)
- Update dependencies to fix vulnerabilities in rails (CVE-2019-5419, bsc#1129271) and nokogiri (CVE-2019-11068, bsc#1132160)
- Allow RMT registration to work under HTTP as well as HTTPS.
- Offline migration from SLE 15 to SLE 15 SP1 will add Python2 module 
- Online migrations will automatically add additional modules to the client systems depending on the base product
- Supply log severity to journald
- Breaking Change: Added headers to generated CSV files
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-25"/>
	<updated date="2019-07-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1128858">SUSE bug 1128858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129271">SUSE bug 1129271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129392">SUSE bug 1129392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132160">SUSE bug 1132160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132690">SUSE bug 1132690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134190">SUSE bug 1134190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134428">SUSE bug 1134428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135222">SUSE bug 1135222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136020">SUSE bug 1136020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136081">SUSE bug 1136081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138316">SUSE bug 1138316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140492">SUSE bug 1140492</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-11068/">CVE-2019-11068</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5419/">CVE-2019-5419</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499156" comment="rmt-server-2.3.1-3.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499157" comment="rmt-server-config-2.3.1-3.3.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138969" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1134689" ref_url="https://bugzilla.suse.com/1134689" source="BUGZILLA"/>
		<reference ref_id="1138034" ref_url="https://bugzilla.suse.com/1138034" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10130" ref_url="https://www.suse.com/security/cve/CVE-2019-10130/" source="CVE"/>
		<reference ref_id="CVE-2019-10164" ref_url="https://www.suse.com/security/cve/CVE-2019-10164/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2012-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192012-1.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

Security issue fixed:

- CVE-2019-10164: Fixed buffer-overflow vulnerabilities in SCRAM verifier parsing (bsc#1138034).
- CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators (bsc#1134689).

Bug fixes:

- For a complete list of fixes check the release notes.
 
   * https://www.postgresql.org/docs/10/release-10-9.html
   * https://www.postgresql.org/docs/10/release-10-8.html
   * https://www.postgresql.org/docs/10/release-10-7.html
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-29"/>
	<updated date="2019-07-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1134689">SUSE bug 1134689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138034">SUSE bug 1138034</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10130/">CVE-2019-10130</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10164/">CVE-2019-10164</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499158" comment="libecpg6-10.9-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499159" comment="postgresql10-contrib-10.9-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499160" comment="postgresql10-devel-10.9-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499161" comment="postgresql10-docs-10.9-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499162" comment="postgresql10-plperl-10.9-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499163" comment="postgresql10-plpython-10.9-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499164" comment="postgresql10-pltcl-10.9-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499165" comment="postgresql10-server-10.9-8.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138970" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb, mariadb-connector-c (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1126088" ref_url="https://bugzilla.suse.com/1126088" source="BUGZILLA"/>
		<reference ref_id="1132666" ref_url="https://bugzilla.suse.com/1132666" source="BUGZILLA"/>
		<reference ref_id="1136035" ref_url="https://bugzilla.suse.com/1136035" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-2614" ref_url="https://www.suse.com/security/cve/CVE-2019-2614/" source="CVE"/>
		<reference ref_id="CVE-2019-2627" ref_url="https://www.suse.com/security/cve/CVE-2019-2627/" source="CVE"/>
		<reference ref_id="CVE-2019-2628" ref_url="https://www.suse.com/security/cve/CVE-2019-2628/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2020-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005758.html" source="SUSE-SU"/>
		<description>
This update for mariadb and mariadb-connector-c fixes the following issues:

mariadb:

- Update to version 10.2.25 (bsc#1136035)
- CVE-2019-2628: Fixed a remote denial of service by an privileged attacker (bsc#1136035).
- CVE-2019-2627: Fixed another remote denial of service by an privileged attacker (bsc#1136035).
- CVE-2019-2614: Fixed a potential remote denial of service by an privileged attacker (bsc#1136035).
- Fixed reading options for multiple instances if my${INSTANCE}.cnf is used (bsc#1132666)

mariadb-connector-c:

- Update to version 3.1.2 (bsc#1136035)
- Moved libmariadb.pc from /usr/lib/pkgconfig to /usr/lib64/pkgconfig for x86_64 (bsc#1126088) 
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-30"/>
	<updated date="2019-07-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1126088">SUSE bug 1126088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132666">SUSE bug 1132666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136035">SUSE bug 1136035</bugzilla>
	<cve impact="important" cvss3="4.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2614/">CVE-2019-2614</cve>
	<cve impact="important" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2627/">CVE-2019-2627</cve>
	<cve impact="important" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2628/">CVE-2019-2628</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498844" comment="libmariadb-devel-3.1.2-3.9.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498845" comment="libmariadb_plugins-3.1.2-3.9.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498846" comment="libmysqld-devel-10.2.25-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498847" comment="libmysqld19-10.2.25-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498848" comment="mariadb-10.2.25-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498849" comment="mariadb-client-10.2.25-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498850" comment="mariadb-errormessages-10.2.25-3.17.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498851" comment="mariadb-tools-10.2.25-3.17.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138971" version="1" class="patch">
	<metadata>
		<title>Security update for subversion (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1142721" ref_url="https://bugzilla.suse.com/1142721" source="BUGZILLA"/>
		<reference ref_id="1142743" ref_url="https://bugzilla.suse.com/1142743" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11782" ref_url="https://www.suse.com/security/cve/CVE-2018-11782/" source="CVE"/>
		<reference ref_id="CVE-2019-0203" ref_url="https://www.suse.com/security/cve/CVE-2019-0203/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2031-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005766.html" source="SUSE-SU"/>
		<description>
This update for subversion to version 1.10.6 fixes the following issues:

Security issues fixed:

- CVE-2018-11782: Fixed a remote denial of service in svnserve 'get-deleted-rev' (bsc#1142743).
- CVE-2019-0203: Fixed a remote, unauthenticated denial of service in svnserve (bsc#1142721).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-31"/>
	<updated date="2019-07-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1142721">SUSE bug 1142721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142743">SUSE bug 1142743</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-11782/">CVE-2018-11782</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-0203/">CVE-2019-0203</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498852" comment="subversion-server-1.10.6-3.6.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138972" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1140738" ref_url="https://bugzilla.suse.com/1140738" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13345" ref_url="https://www.suse.com/security/cve/CVE-2019-13345/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005802.html" source="SUSE-SU"/>
		<description>
This update for squid fixes the following issues:

Security issue fixed:

- CVE-2019-13345: Fixed a cross site scripting vulnerability via user_name or auth parameter in cachemgr.cgi (bsc#1140738).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-08"/>
	<updated date="2019-08-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1140738">SUSE bug 1140738</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13345/">CVE-2019-13345</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498853" comment="squid-4.8-5.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138973" version="1" class="patch">
	<metadata>
		<title>Security update for 389-ds (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1083689" ref_url="https://bugzilla.suse.com/1083689" source="BUGZILLA"/>
		<reference ref_id="1092187" ref_url="https://bugzilla.suse.com/1092187" source="BUGZILLA"/>
		<reference ref_id="1099465" ref_url="https://bugzilla.suse.com/1099465" source="BUGZILLA"/>
		<reference ref_id="1105606" ref_url="https://bugzilla.suse.com/1105606" source="BUGZILLA"/>
		<reference ref_id="1108674" ref_url="https://bugzilla.suse.com/1108674" source="BUGZILLA"/>
		<reference ref_id="1109609" ref_url="https://bugzilla.suse.com/1109609" source="BUGZILLA"/>
		<reference ref_id="1120189" ref_url="https://bugzilla.suse.com/1120189" source="BUGZILLA"/>
		<reference ref_id="1132385" ref_url="https://bugzilla.suse.com/1132385" source="BUGZILLA"/>
		<reference ref_id="1144797" ref_url="https://bugzilla.suse.com/1144797" source="BUGZILLA"/>
		<reference ref_id="991201" ref_url="https://bugzilla.suse.com/991201" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-5416" ref_url="https://www.suse.com/security/cve/CVE-2016-5416/" source="CVE"/>
		<reference ref_id="CVE-2018-1054" ref_url="https://www.suse.com/security/cve/CVE-2018-1054/" source="CVE"/>
		<reference ref_id="CVE-2018-10871" ref_url="https://www.suse.com/security/cve/CVE-2018-10871/" source="CVE"/>
		<reference ref_id="CVE-2018-1089" ref_url="https://www.suse.com/security/cve/CVE-2018-1089/" source="CVE"/>
		<reference ref_id="CVE-2018-10935" ref_url="https://www.suse.com/security/cve/CVE-2018-10935/" source="CVE"/>
		<reference ref_id="CVE-2018-14638" ref_url="https://www.suse.com/security/cve/CVE-2018-14638/" source="CVE"/>
		<reference ref_id="CVE-2018-14648" ref_url="https://www.suse.com/security/cve/CVE-2018-14648/" source="CVE"/>
		<reference ref_id="CVE-2019-3883" ref_url="https://www.suse.com/security/cve/CVE-2019-3883/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005817.html" source="SUSE-SU"/>
		<description>
This update for 389-ds to version 1.4.0.26 fixes the following issues:

Security issues fixed:

- CVE-2016-5416: Fixed an information disclosure where a anonymous user could read the default ACI (bsc#991201).
- CVE-2018-1054: Fixed a denial of service via search filters in SetUnicodeStringFromUTF_8() (bsc#1083689).
- CVE-2018-1089: Fixed a buffer overflow via large filter value (bsc#1092187).
- CVE-2018-10871: Fixed an information disclosure in certain plugins leading to the disclosure of plaintext password to an privileged attackers (bsc#1099465).
- CVE-2018-14638: Fixed a denial of service through a crash in delete_passwdPolicy () (bsc#1108674).
- CVE-2018-14648: Fixed a denial of service caused by malformed values in search queries (bsc#1109609).
- CVE-2018-10935: Fixed a denial of service related to ldapsearch with server side sort (bsc#1105606).
- CVE-2019-3883: Fixed a denial of service caused by hanging LDAP requests over TLS (bsc#1132385).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-15"/>
	<updated date="2019-08-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1083689">SUSE bug 1083689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092187">SUSE bug 1092187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099465">SUSE bug 1099465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105606">SUSE bug 1105606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108674">SUSE bug 1108674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109609">SUSE bug 1109609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120189">SUSE bug 1120189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132385">SUSE bug 1132385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144797">SUSE bug 1144797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991201">SUSE bug 991201</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2016-5416/">CVE-2016-5416</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1054/">CVE-2018-1054</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-10871/">CVE-2018-10871</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1089/">CVE-2018-1089</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10935/">CVE-2018-10935</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14638/">CVE-2018-14638</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-14648/">CVE-2018-14648</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-3883/">CVE-2019-3883</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498854" comment="389-ds-1.4.0.26~git0.8a2d3de6f-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498855" comment="389-ds-devel-1.4.0.26~git0.8a2d3de6f-4.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138974" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1128106" ref_url="https://bugzilla.suse.com/1128106" source="BUGZILLA"/>
		<reference ref_id="1133031" ref_url="https://bugzilla.suse.com/1133031" source="BUGZILLA"/>
		<reference ref_id="1134883" ref_url="https://bugzilla.suse.com/1134883" source="BUGZILLA"/>
		<reference ref_id="1135210" ref_url="https://bugzilla.suse.com/1135210" source="BUGZILLA"/>
		<reference ref_id="1135902" ref_url="https://bugzilla.suse.com/1135902" source="BUGZILLA"/>
		<reference ref_id="1136540" ref_url="https://bugzilla.suse.com/1136540" source="BUGZILLA"/>
		<reference ref_id="1136778" ref_url="https://bugzilla.suse.com/1136778" source="BUGZILLA"/>
		<reference ref_id="1138534" ref_url="https://bugzilla.suse.com/1138534" source="BUGZILLA"/>
		<reference ref_id="1140402" ref_url="https://bugzilla.suse.com/1140402" source="BUGZILLA"/>
		<reference ref_id="1143794" ref_url="https://bugzilla.suse.com/1143794" source="BUGZILLA"/>
		<reference ref_id="1144087" ref_url="https://bugzilla.suse.com/1144087" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12155" ref_url="https://www.suse.com/security/cve/CVE-2019-12155/" source="CVE"/>
		<reference ref_id="CVE-2019-13164" ref_url="https://www.suse.com/security/cve/CVE-2019-13164/" source="CVE"/>
		<reference ref_id="CVE-2019-14378" ref_url="https://www.suse.com/security/cve/CVE-2019-14378/" source="CVE"/>
		<reference ref_id="CVE-2019-5008" ref_url="https://www.suse.com/security/cve/CVE-2019-5008/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005833.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

Security issues fixed:

- CVE-2019-14378: Security fix for heap overflow in ip_reass on big packet input (bsc#1143794).
- CVE-2019-12155: Security fix for null pointer dereference while releasing spice resources (bsc#1135902).
- CVE-2019-13164: Security fix for qemu-bridge-helper ACL can be bypassed when names are too long (bsc#1140402).
- CVE-2019-5008: Fix DoS (NULL pointer dereference) in sparc64 virtual machine possible through guest device driver (bsc#1133031).

Bug fixes and enhancements:

- Upstream tweaked SnowRidge-Server vcpu model to now be simply Snowridge (jsc#SLE-4883)
- Add SnowRidge-Server vcpu model (jsc#SLE-4883)
- Add in documentation about md-clear feature (bsc#1138534)
- Fix SEV issue where older machine type is not processed correctly (bsc#1144087)
- Fix case of a bad pointer in Xen PV usb support code (bsc#1128106)
- Further refine arch-capabilities handling to help with security and performance in Intel hosts (bsc#1134883, bsc#1135210) (fate#327764)
- Add support for one more security/performance related vcpu feature (bsc#1136778) (fate#327796)
- Ignore csske for expanding the cpu model (bsc#1136540)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-21"/>
	<updated date="2019-08-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1128106">SUSE bug 1128106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133031">SUSE bug 1133031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134883">SUSE bug 1134883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135210">SUSE bug 1135210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135902">SUSE bug 1135902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136540">SUSE bug 1136540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136778">SUSE bug 1136778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138534">SUSE bug 1138534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140402">SUSE bug 1140402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143794">SUSE bug 1143794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144087">SUSE bug 1144087</bugzilla>
	<cve impact="low" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-12155/">CVE-2019-12155</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13164/">CVE-2019-13164</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14378/">CVE-2019-14378</cve>
	<cve impact="moderate" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-5008/">CVE-2019-5008</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499166" comment="qemu-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499167" comment="qemu-arm-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499168" comment="qemu-audio-alsa-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499169" comment="qemu-audio-oss-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499170" comment="qemu-audio-pa-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499171" comment="qemu-block-curl-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499172" comment="qemu-block-iscsi-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499173" comment="qemu-block-rbd-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499174" comment="qemu-block-ssh-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499175" comment="qemu-guest-agent-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499176" comment="qemu-ipxe-1.0.0+-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499177" comment="qemu-kvm-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499178" comment="qemu-lang-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499179" comment="qemu-ppc-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499180" comment="qemu-s390-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499181" comment="qemu-seabios-1.12.0-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499182" comment="qemu-sgabios-8-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499183" comment="qemu-ui-curses-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499184" comment="qemu-ui-gtk-3.1.1-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499185" comment="qemu-vgabios-1.12.0-9.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499186" comment="qemu-x86-3.1.1-9.3.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138975" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1145575" ref_url="https://bugzilla.suse.com/1145575" source="BUGZILLA"/>
		<reference ref_id="1145738" ref_url="https://bugzilla.suse.com/1145738" source="BUGZILLA"/>
		<reference ref_id="1145739" ref_url="https://bugzilla.suse.com/1145739" source="BUGZILLA"/>
		<reference ref_id="1145740" ref_url="https://bugzilla.suse.com/1145740" source="BUGZILLA"/>
		<reference ref_id="1145741" ref_url="https://bugzilla.suse.com/1145741" source="BUGZILLA"/>
		<reference ref_id="1145742" ref_url="https://bugzilla.suse.com/1145742" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10081" ref_url="https://www.suse.com/security/cve/CVE-2019-10081/" source="CVE"/>
		<reference ref_id="CVE-2019-10082" ref_url="https://www.suse.com/security/cve/CVE-2019-10082/" source="CVE"/>
		<reference ref_id="CVE-2019-10092" ref_url="https://www.suse.com/security/cve/CVE-2019-10092/" source="CVE"/>
		<reference ref_id="CVE-2019-10097" ref_url="https://www.suse.com/security/cve/CVE-2019-10097/" source="CVE"/>
		<reference ref_id="CVE-2019-10098" ref_url="https://www.suse.com/security/cve/CVE-2019-10098/" source="CVE"/>
		<reference ref_id="CVE-2019-9517" ref_url="https://www.suse.com/security/cve/CVE-2019-9517/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005849.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

Security issues fixed:

- CVE-2019-9517: Fixed HTTP/2 implementations that are vulnerable to unconstrained interal data buffering (bsc#1145575).
- CVE-2019-10081: Fixed mod_http2 that is vulnerable to memory corruption on early pushes (bsc#1145742).
- CVE-2019-10082: Fixed mod_http2 that is vulnerable to read-after-free in h2 connection shutdown (bsc#1145741).
- CVE-2019-10092: Fixed limited cross-site scripting in mod_proxy (bsc#1145740).
- CVE-2019-10097: Fixed mod_remoteip stack buffer overflow and NULL pointer dereference (bsc#1145739).
- CVE-2019-10098: Fixed mod_rewrite configuration vulnerablility to open redirect (bsc#1145738).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-28"/>
	<updated date="2019-08-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1145575">SUSE bug 1145575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145738">SUSE bug 1145738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145739">SUSE bug 1145739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145740">SUSE bug 1145740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145741">SUSE bug 1145741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145742">SUSE bug 1145742</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10081/">CVE-2019-10081</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10082/">CVE-2019-10082</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-10092/">CVE-2019-10092</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-10097/">CVE-2019-10097</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-10098/">CVE-2019-10098</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9517/">CVE-2019-9517</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498864" comment="apache2-2.4.33-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498865" comment="apache2-devel-2.4.33-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498866" comment="apache2-doc-2.4.33-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498867" comment="apache2-prefork-2.4.33-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498868" comment="apache2-utils-2.4.33-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498869" comment="apache2-worker-2.4.33-3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138976" version="1" class="patch">
	<metadata>
		<title>Security update for util-linux and shadow (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1081947" ref_url="https://bugzilla.suse.com/1081947" source="BUGZILLA"/>
		<reference ref_id="1082293" ref_url="https://bugzilla.suse.com/1082293" source="BUGZILLA"/>
		<reference ref_id="1085196" ref_url="https://bugzilla.suse.com/1085196" source="BUGZILLA"/>
		<reference ref_id="1106214" ref_url="https://bugzilla.suse.com/1106214" source="BUGZILLA"/>
		<reference ref_id="1121197" ref_url="https://bugzilla.suse.com/1121197" source="BUGZILLA"/>
		<reference ref_id="1122417" ref_url="https://bugzilla.suse.com/1122417" source="BUGZILLA"/>
		<reference ref_id="1125886" ref_url="https://bugzilla.suse.com/1125886" source="BUGZILLA"/>
		<reference ref_id="1127701" ref_url="https://bugzilla.suse.com/1127701" source="BUGZILLA"/>
		<reference ref_id="1135534" ref_url="https://bugzilla.suse.com/1135534" source="BUGZILLA"/>
		<reference ref_id="1135708" ref_url="https://bugzilla.suse.com/1135708" source="BUGZILLA"/>
		<reference ref_id="1141113" ref_url="https://bugzilla.suse.com/1141113" source="BUGZILLA"/>
		<reference ref_id="353876" ref_url="https://bugzilla.suse.com/353876" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2019:2307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005883.html" source="SUSE-SU"/>
		<description>
This update for util-linux and shadow fixes the following issues:

util-linux:

- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)
- Prevent outdated pam files (bsc#1082293).
- De-duplicate fstrim -A properly (bsc#1127701).
- Do not trim read-only volumes (bsc#1106214).
- Integrate pam_keyinit pam module to login (bsc#1081947).
- Perform one-time reset of /etc/default/su (bsc#1121197).
- Fix problems in reading of login.defs values (bsc#1121197)
- libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417).
- raw.service: Add RemainAfterExit=yes (bsc#1135534).
- agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886)
- libmount: print a blacklist hint for 'unknown filesystem type' (jsc#SUSE-4085, fate#326832)
- Fix /etc/default/su comments and create /etc/default/runuser (bsc#1121197).

shadow:

- Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197)
- Fix segfault in useradd during setting password inactivity period. (bsc#1141113)
- Hardening for su wrappers (bsc#353876)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-05"/>
	<updated date="2019-09-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1081947">SUSE bug 1081947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082293">SUSE bug 1082293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085196">SUSE bug 1085196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106214">SUSE bug 1106214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121197">SUSE bug 1121197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122417">SUSE bug 1122417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125886">SUSE bug 1125886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127701">SUSE bug 1127701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135534">SUSE bug 1135534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135708">SUSE bug 1135708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141113">SUSE bug 1141113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/353876">SUSE bug 353876</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499187" comment="uuidd-2.33.1-4.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138977" version="1" class="patch">
	<metadata>
		<title>Security update for nginx (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1115015" ref_url="https://bugzilla.suse.com/1115015" source="BUGZILLA"/>
		<reference ref_id="1115022" ref_url="https://bugzilla.suse.com/1115022" source="BUGZILLA"/>
		<reference ref_id="1115025" ref_url="https://bugzilla.suse.com/1115025" source="BUGZILLA"/>
		<reference ref_id="1145579" ref_url="https://bugzilla.suse.com/1145579" source="BUGZILLA"/>
		<reference ref_id="1145580" ref_url="https://bugzilla.suse.com/1145580" source="BUGZILLA"/>
		<reference ref_id="1145582" ref_url="https://bugzilla.suse.com/1145582" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16843" ref_url="https://www.suse.com/security/cve/CVE-2018-16843/" source="CVE"/>
		<reference ref_id="CVE-2018-16844" ref_url="https://www.suse.com/security/cve/CVE-2018-16844/" source="CVE"/>
		<reference ref_id="CVE-2018-16845" ref_url="https://www.suse.com/security/cve/CVE-2018-16845/" source="CVE"/>
		<reference ref_id="CVE-2019-9511" ref_url="https://www.suse.com/security/cve/CVE-2019-9511/" source="CVE"/>
		<reference ref_id="CVE-2019-9513" ref_url="https://www.suse.com/security/cve/CVE-2019-9513/" source="CVE"/>
		<reference ref_id="CVE-2019-9516" ref_url="https://www.suse.com/security/cve/CVE-2019-9516/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2309-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005885.html" source="SUSE-SU"/>
		<description>
This update for nginx fixes the following issues:

Security issues fixed:

- CVE-2019-9511: Fixed a denial of service by manipulating the window size and stream prioritization (bsc#1145579).
- CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580).
- CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582).
- CVE-2018-16845: Fixed denial of service and memory disclosure via mp4 module (bsc#1115015).
- CVE-2018-16843: Fixed excessive memory consumption in HTTP/2 implementation (bsc#1115022).
- CVE-2018-16844: Fixed excessive CPU usage via flaw in HTTP/2 implementation (bsc#1115025).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-05"/>
	<updated date="2019-09-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1115015">SUSE bug 1115015</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115022">SUSE bug 1115022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115025">SUSE bug 1115025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145579">SUSE bug 1145579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145580">SUSE bug 1145580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145582">SUSE bug 1145582</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16843/">CVE-2018-16843</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16844/">CVE-2018-16844</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16845/">CVE-2018-16845</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9511/">CVE-2019-9511</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9513/">CVE-2019-9513</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9516/">CVE-2019-9516</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499188" comment="nginx-1.14.2-6.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499189" comment="nginx-source-1.14.2-6.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138978" version="1" class="patch">
	<metadata>
		<title>Security update for skopeo (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1144065" ref_url="https://bugzilla.suse.com/1144065" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10214" ref_url="https://www.suse.com/security/cve/CVE-2019-10214/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005899.html" source="SUSE-SU"/>
		<description>
This update for skopeo fixes the following issues:

Security issues fixed:

- CVE-2019-10214: Fixed missing enforcement of TLS connections (bsc#1144065).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-10"/>
	<updated date="2019-09-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144065">SUSE bug 1144065</bugzilla>
	<cve impact="important" cvss3="9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10214/">CVE-2019-10214</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498886" comment="skopeo-0.1.32-4.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138979" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1133624" ref_url="https://bugzilla.suse.com/1133624" source="BUGZILLA"/>
		<reference ref_id="1133625" ref_url="https://bugzilla.suse.com/1133625" source="BUGZILLA"/>
		<reference ref_id="1145559" ref_url="https://bugzilla.suse.com/1145559" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11494" ref_url="https://www.suse.com/security/cve/CVE-2019-11494/" source="CVE"/>
		<reference ref_id="CVE-2019-11499" ref_url="https://www.suse.com/security/cve/CVE-2019-11499/" source="CVE"/>
		<reference ref_id="CVE-2019-11500" ref_url="https://www.suse.com/security/cve/CVE-2019-11500/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005980.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 fixes the following issues:

- CVE-2019-11500: Fixed the NUL byte handling in IMAP and ManageSieve protocol parsers. (bsc#1145559)
- CVE-2019-11499: Fixed a vulnerability where the submission-login would crash over a TLS secured channel (bsc#1133625).
- CVE-2019-11494: Fixed a denial of service if the authentication is aborted by disconnecting (bsc#1133624).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-02"/>
	<updated date="2019-10-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1133624">SUSE bug 1133624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133625">SUSE bug 1133625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145559">SUSE bug 1145559</bugzilla>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-11494/">CVE-2019-11494</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2019-11499/">CVE-2019-11499</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11500/">CVE-2019-11500</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499190" comment="dovecot23-2.3.3-8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499191" comment="dovecot23-backend-mysql-2.3.3-8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499192" comment="dovecot23-backend-pgsql-2.3.3-8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499193" comment="dovecot23-backend-sqlite-2.3.3-8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499194" comment="dovecot23-devel-2.3.3-8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499195" comment="dovecot23-fts-2.3.3-8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499196" comment="dovecot23-fts-lucene-2.3.3-8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499197" comment="dovecot23-fts-solr-2.3.3-8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499198" comment="dovecot23-fts-squat-2.3.3-8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138980" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1118367" ref_url="https://bugzilla.suse.com/1118367" source="BUGZILLA"/>
		<reference ref_id="1118368" ref_url="https://bugzilla.suse.com/1118368" source="BUGZILLA"/>
		<reference ref_id="1138687" ref_url="https://bugzilla.suse.com/1138687" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6471" ref_url="https://www.suse.com/security/cve/CVE-2019-6471/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005988.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

Security issue fixed:

- CVE-2019-6471: Fixed a reachable assert in dispatch.c. (bsc#1138687)

Non-security issue fixed:

- bind will no longer rely on /etc/insserv.conf (bsc#1118367, bsc#1118368)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-04"/>
	<updated date="2019-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1118367">SUSE bug 1118367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118368">SUSE bug 1118368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138687">SUSE bug 1138687</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6471/">CVE-2019-6471</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498899" comment="bind-9.11.2-12.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498900" comment="bind-chrootenv-9.11.2-12.13.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498901" comment="bind-doc-9.11.2-12.13.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138981" version="1" class="patch">
	<metadata>
		<title>Security update for dhcp (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1089524" ref_url="https://bugzilla.suse.com/1089524" source="BUGZILLA"/>
		<reference ref_id="1134078" ref_url="https://bugzilla.suse.com/1134078" source="BUGZILLA"/>
		<reference ref_id="1136572" ref_url="https://bugzilla.suse.com/1136572" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-6470" ref_url="https://www.suse.com/security/cve/CVE-2019-6470/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2657-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192657-1.html" source="SUSE-SU"/>
		<description>
This update for dhcp fixes the following issues:

Secuirty issue fixed:

- CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078).

Bug fixes:

- Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524).
- Use IPv6 when called as dhclient6, dhcpd6, and dhcrelay6 (bsc#1136572).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-14"/>
	<updated date="2019-10-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1089524">SUSE bug 1089524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134078">SUSE bug 1134078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136572">SUSE bug 1136572</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6470/">CVE-2019-6470</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498903" comment="dhcp-relay-4.3.5-6.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498904" comment="dhcp-server-4.3.5-6.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138982" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1145092" ref_url="https://bugzilla.suse.com/1145092" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10208" ref_url="https://www.suse.com/security/cve/CVE-2019-10208/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006027.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

Security issue fixed:

- CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner (bsc#1145092).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-17"/>
	<updated date="2019-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1145092">SUSE bug 1145092</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10208/">CVE-2019-10208</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499199" comment="libecpg6-10.10-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499200" comment="postgresql10-contrib-10.10-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499201" comment="postgresql10-devel-10.10-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499202" comment="postgresql10-docs-10.10-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499203" comment="postgresql10-plperl-10.10-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499204" comment="postgresql10-plpython-10.10-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499205" comment="postgresql10-pltcl-10.10-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499206" comment="postgresql10-server-10.10-8.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138983" version="1" class="patch">
	<metadata>
		<title>Security update for sysstat (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1150114" ref_url="https://bugzilla.suse.com/1150114" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16167" ref_url="https://www.suse.com/security/cve/CVE-2019-16167/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2749-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006043.html" source="SUSE-SU"/>
		<description>
This update for sysstat fixes the following issue:

- CVE-2019-16167: Fixed a memory corruption due to an integer overflow. (bsc#1150114)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-23"/>
	<updated date="2019-10-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1150114">SUSE bug 1150114</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16167/">CVE-2019-16167</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498906" comment="sysstat-isag-12.0.2-3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138984" version="1" class="patch">
	<metadata>
		<title>Security update for apache2-mod_auth_openidc (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1153666" ref_url="https://bugzilla.suse.com/1153666" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14857" ref_url="https://www.suse.com/security/cve/CVE-2019-14857/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006104.html" source="SUSE-SU"/>
		<description>
This update for apache2-mod_auth_openidc fixes the following issues:

- CVE-2019-14857: Fixed an open redirect issue that exists in URLs with trailing slashes (bsc#1153666).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-08"/>
	<updated date="2019-11-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153666">SUSE bug 1153666</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14857/">CVE-2019-14857</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499207" comment="apache2-mod_auth_openidc-2.3.8-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138985" version="1" class="patch">
	<metadata>
		<title>Security update for rsyslog (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141063" ref_url="https://bugzilla.suse.com/1141063" source="BUGZILLA"/>
		<reference ref_id="1153451" ref_url="https://bugzilla.suse.com/1153451" source="BUGZILLA"/>
		<reference ref_id="1153459" ref_url="https://bugzilla.suse.com/1153459" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17041" ref_url="https://www.suse.com/security/cve/CVE-2019-17041/" source="CVE"/>
		<reference ref_id="CVE-2019-17042" ref_url="https://www.suse.com/security/cve/CVE-2019-17042/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2937-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006105.html" source="SUSE-SU"/>
		<description>
This update for rsyslog fixes the following issues:

Security issues fixed:     

- CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451).
- CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459).

Other issue addressed: 

- Fixed an issue where rsyslog was SEGFAULT due to a mutex double-unlock (bsc#1141063). 
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-08"/>
	<updated date="2019-11-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141063">SUSE bug 1141063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153451">SUSE bug 1153451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153459">SUSE bug 1153459</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-17041/">CVE-2019-17041</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-17042/">CVE-2019-17042</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498907" comment="rsyslog-module-gssapi-8.33.1-3.22.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498908" comment="rsyslog-module-gtls-8.33.1-3.22.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498909" comment="rsyslog-module-mmnormalize-8.33.1-3.22.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498910" comment="rsyslog-module-mysql-8.33.1-3.22.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498911" comment="rsyslog-module-pgsql-8.33.1-3.22.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498912" comment="rsyslog-module-relp-8.33.1-3.22.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498913" comment="rsyslog-module-snmp-8.33.1-3.22.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498914" comment="rsyslog-module-udpspoof-8.33.1-3.22.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138986" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1079730" ref_url="https://bugzilla.suse.com/1079730" source="BUGZILLA"/>
		<reference ref_id="1098403" ref_url="https://bugzilla.suse.com/1098403" source="BUGZILLA"/>
		<reference ref_id="1111025" ref_url="https://bugzilla.suse.com/1111025" source="BUGZILLA"/>
		<reference ref_id="1117665" ref_url="https://bugzilla.suse.com/1117665" source="BUGZILLA"/>
		<reference ref_id="1119991" ref_url="https://bugzilla.suse.com/1119991" source="BUGZILLA"/>
		<reference ref_id="1143794" ref_url="https://bugzilla.suse.com/1143794" source="BUGZILLA"/>
		<reference ref_id="1144087" ref_url="https://bugzilla.suse.com/1144087" source="BUGZILLA"/>
		<reference ref_id="1145379" ref_url="https://bugzilla.suse.com/1145379" source="BUGZILLA"/>
		<reference ref_id="1145427" ref_url="https://bugzilla.suse.com/1145427" source="BUGZILLA"/>
		<reference ref_id="1145436" ref_url="https://bugzilla.suse.com/1145436" source="BUGZILLA"/>
		<reference ref_id="1145774" ref_url="https://bugzilla.suse.com/1145774" source="BUGZILLA"/>
		<reference ref_id="1146873" ref_url="https://bugzilla.suse.com/1146873" source="BUGZILLA"/>
		<reference ref_id="1149811" ref_url="https://bugzilla.suse.com/1149811" source="BUGZILLA"/>
		<reference ref_id="1152506" ref_url="https://bugzilla.suse.com/1152506" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12207" ref_url="https://www.suse.com/security/cve/CVE-2018-12207/" source="CVE"/>
		<reference ref_id="CVE-2018-20126" ref_url="https://www.suse.com/security/cve/CVE-2018-20126/" source="CVE"/>
		<reference ref_id="CVE-2019-11135" ref_url="https://www.suse.com/security/cve/CVE-2019-11135/" source="CVE"/>
		<reference ref_id="CVE-2019-12068" ref_url="https://www.suse.com/security/cve/CVE-2019-12068/" source="CVE"/>
		<reference ref_id="CVE-2019-14378" ref_url="https://www.suse.com/security/cve/CVE-2019-14378/" source="CVE"/>
		<reference ref_id="CVE-2019-15890" ref_url="https://www.suse.com/security/cve/CVE-2019-15890/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2955-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192955-1.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

qemu was updated to v3.1.1.1, a stable, bug-fix-only release, which
includes 2 fixes we already carry, as well as one additional use-
after-free fix in slirp. (CVE-2018-20126 bsc#1119991,
CVE-2019-14378 bsc#1143794, and CVE-2019-15890 bsc#1149811
respectively)

Security issues fixed:

- CVE-2019-12068: Fixed potential DOS in lsi scsi controller emulation (bsc#1146873)
- CVE-2019-11135: Expose taa-no 'feature', indicating CPU does not have the TSX Async Abort vulnerability. (bsc#1152506)
- CVE-2018-12207: Expose pschange-mc-no 'feature', indicating CPU does not have the page size change machine check vulnerability (bsc#1117665)

Other issues fixed:

- Change how this bug gets fixed (bsc#1144087)
- Disable file locking in the Xen PV disk backend to avoid locking
  issues with PV domUs during migration. The issues triggered by
  the locking can not be properly handled in libxl. The locking
  introduced in qemu-2.10 was removed again in qemu-4.0.
  (bsc#1079730, bsc#1098403, bsc#1111025, bsc#1145427, bsc#1145774)
- Feature support for vfio-ccw dasd ipl (bsc#1145379 jira-SLE-6132)
- Additional hardware instruction support for s390, also update
  qemu linux headers to 5.2-rc1 (bsc#1145436 jira-SLE-6237)

		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-12"/>
	<updated date="2019-11-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1079730">SUSE bug 1079730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098403">SUSE bug 1098403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111025">SUSE bug 1111025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117665">SUSE bug 1117665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119991">SUSE bug 1119991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143794">SUSE bug 1143794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144087">SUSE bug 1144087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145379">SUSE bug 1145379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145427">SUSE bug 1145427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145436">SUSE bug 1145436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145774">SUSE bug 1145774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146873">SUSE bug 1146873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149811">SUSE bug 1149811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152506">SUSE bug 1152506</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12207/">CVE-2018-12207</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20126/">CVE-2018-20126</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11135/">CVE-2019-11135</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12068/">CVE-2019-12068</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14378/">CVE-2019-14378</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15890/">CVE-2019-15890</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499208" comment="qemu-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499209" comment="qemu-arm-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499210" comment="qemu-audio-alsa-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499211" comment="qemu-audio-oss-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499212" comment="qemu-audio-pa-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499213" comment="qemu-block-curl-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499214" comment="qemu-block-iscsi-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499215" comment="qemu-block-rbd-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499216" comment="qemu-block-ssh-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499217" comment="qemu-guest-agent-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499218" comment="qemu-ipxe-1.0.0+-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499219" comment="qemu-kvm-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499220" comment="qemu-lang-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499221" comment="qemu-ppc-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499222" comment="qemu-s390-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499223" comment="qemu-seabios-1.12.0-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499224" comment="qemu-sgabios-8-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499225" comment="qemu-ui-curses-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499226" comment="qemu-ui-gtk-3.1.1.1-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499227" comment="qemu-vgabios-1.12.0-9.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499228" comment="qemu-x86-3.1.1.1-9.6.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138987" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1152497" ref_url="https://bugzilla.suse.com/1152497" source="BUGZILLA"/>
		<reference ref_id="1154448" ref_url="https://bugzilla.suse.com/1154448" source="BUGZILLA"/>
		<reference ref_id="1154456" ref_url="https://bugzilla.suse.com/1154456" source="BUGZILLA"/>
		<reference ref_id="1154458" ref_url="https://bugzilla.suse.com/1154458" source="BUGZILLA"/>
		<reference ref_id="1154460" ref_url="https://bugzilla.suse.com/1154460" source="BUGZILLA"/>
		<reference ref_id="1154461" ref_url="https://bugzilla.suse.com/1154461" source="BUGZILLA"/>
		<reference ref_id="1154464" ref_url="https://bugzilla.suse.com/1154464" source="BUGZILLA"/>
		<reference ref_id="1155945" ref_url="https://bugzilla.suse.com/1155945" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12207" ref_url="https://www.suse.com/security/cve/CVE-2018-12207/" source="CVE"/>
		<reference ref_id="CVE-2019-11135" ref_url="https://www.suse.com/security/cve/CVE-2019-11135/" source="CVE"/>
		<reference ref_id="CVE-2019-18420" ref_url="https://www.suse.com/security/cve/CVE-2019-18420/" source="CVE"/>
		<reference ref_id="CVE-2019-18421" ref_url="https://www.suse.com/security/cve/CVE-2019-18421/" source="CVE"/>
		<reference ref_id="CVE-2019-18422" ref_url="https://www.suse.com/security/cve/CVE-2019-18422/" source="CVE"/>
		<reference ref_id="CVE-2019-18423" ref_url="https://www.suse.com/security/cve/CVE-2019-18423/" source="CVE"/>
		<reference ref_id="CVE-2019-18424" ref_url="https://www.suse.com/security/cve/CVE-2019-18424/" source="CVE"/>
		<reference ref_id="CVE-2019-18425" ref_url="https://www.suse.com/security/cve/CVE-2019-18425/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2961-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192961-1.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race
  condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine
  Exception during Page Size Change, causing the CPU core to be non-functional.
  (bsc#1155945)
- CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with
  Transactional Memory support could be used to facilitate sidechannel
  information leaks out of microarchitectural buffers, similar to the
  previously described 'Microarchitectural Data Sampling' attack. (bsc#1152497).
- CVE-2019-18423: A malicious guest administrator may cause a hypervisor crash,
  resulting in a Denial of Service (DoS). (bsc#1154460).
- CVE-2019-18422: A malicious ARM guest might contrive to arrange for critical 
  Xen code to run with interrupts erroneously enabled. This could lead to data
  corruption, denial of service, or possibly even privilege escalation. However
  a precise attack technique has not been identified. (bsc#1154464)
- CVE-2019-18424: An untrusted domain with access to a physical device can DMA 
  into host memory, leading to privilege escalation. (bsc#1154461).
- CVE-2019-18421: A malicious PV guest administrator may have been able to
  escalate their privilege to that of the host. (bsc#1154458).
- CVE-2019-18425: 32-bit PV guest user mode could elevate its privileges to that 
  of the guest kernel. (bsc#1154456).
- CVE-2019-18420: Malicious x86 PV guests may have caused a hypervisor crash, 
  resulting in a Denial of Service (Dos). (bsc#1154448)
- Upstream bug fixes (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-12"/>
	<updated date="2019-11-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152497">SUSE bug 1152497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154448">SUSE bug 1154448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154456">SUSE bug 1154456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154458">SUSE bug 1154458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154460">SUSE bug 1154460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154461">SUSE bug 1154461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154464">SUSE bug 1154464</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155945">SUSE bug 1155945</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12207/">CVE-2018-12207</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11135/">CVE-2019-11135</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18420/">CVE-2019-18420</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18421/">CVE-2019-18421</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18422/">CVE-2019-18422</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18423/">CVE-2019-18423</cve>
	<cve impact="important" cvss3="7.6/CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18424/">CVE-2019-18424</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18425/">CVE-2019-18425</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499229" comment="xen-4.12.1_04-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499230" comment="xen-devel-4.12.1_04-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499231" comment="xen-tools-4.12.1_04-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138988" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1133089" ref_url="https://bugzilla.suse.com/1133089" source="BUGZILLA"/>
		<reference ref_id="1140738" ref_url="https://bugzilla.suse.com/1140738" source="BUGZILLA"/>
		<reference ref_id="1141329" ref_url="https://bugzilla.suse.com/1141329" source="BUGZILLA"/>
		<reference ref_id="1141330" ref_url="https://bugzilla.suse.com/1141330" source="BUGZILLA"/>
		<reference ref_id="1141332" ref_url="https://bugzilla.suse.com/1141332" source="BUGZILLA"/>
		<reference ref_id="1141442" ref_url="https://bugzilla.suse.com/1141442" source="BUGZILLA"/>
		<reference ref_id="1156323" ref_url="https://bugzilla.suse.com/1156323" source="BUGZILLA"/>
		<reference ref_id="1156324" ref_url="https://bugzilla.suse.com/1156324" source="BUGZILLA"/>
		<reference ref_id="1156326" ref_url="https://bugzilla.suse.com/1156326" source="BUGZILLA"/>
		<reference ref_id="1156328" ref_url="https://bugzilla.suse.com/1156328" source="BUGZILLA"/>
		<reference ref_id="1156329" ref_url="https://bugzilla.suse.com/1156329" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12523" ref_url="https://www.suse.com/security/cve/CVE-2019-12523/" source="CVE"/>
		<reference ref_id="CVE-2019-12525" ref_url="https://www.suse.com/security/cve/CVE-2019-12525/" source="CVE"/>
		<reference ref_id="CVE-2019-12526" ref_url="https://www.suse.com/security/cve/CVE-2019-12526/" source="CVE"/>
		<reference ref_id="CVE-2019-12527" ref_url="https://www.suse.com/security/cve/CVE-2019-12527/" source="CVE"/>
		<reference ref_id="CVE-2019-12529" ref_url="https://www.suse.com/security/cve/CVE-2019-12529/" source="CVE"/>
		<reference ref_id="CVE-2019-12854" ref_url="https://www.suse.com/security/cve/CVE-2019-12854/" source="CVE"/>
		<reference ref_id="CVE-2019-13345" ref_url="https://www.suse.com/security/cve/CVE-2019-13345/" source="CVE"/>
		<reference ref_id="CVE-2019-18676" ref_url="https://www.suse.com/security/cve/CVE-2019-18676/" source="CVE"/>
		<reference ref_id="CVE-2019-18677" ref_url="https://www.suse.com/security/cve/CVE-2019-18677/" source="CVE"/>
		<reference ref_id="CVE-2019-18678" ref_url="https://www.suse.com/security/cve/CVE-2019-18678/" source="CVE"/>
		<reference ref_id="CVE-2019-18679" ref_url="https://www.suse.com/security/cve/CVE-2019-18679/" source="CVE"/>
		<reference ref_id="CVE-2019-3688" ref_url="https://www.suse.com/security/cve/CVE-2019-3688/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2975-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006141.html" source="SUSE-SU"/>
		<description>
This update for squid to version 4.9 fixes the following issues:

Security issues fixed: 

- CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi (bsc#1140738).
- CVE-2019-12526: Fixed potential remote code execution during URN processing (bsc#1156326).
- CVE-2019-12523,CVE-2019-18676: Fixed multiple improper validations in URI processing (bsc#1156329).
- CVE-2019-18677: Fixed Cross-Site Request Forgery in HTTP Request processing (bsc#1156328).
- CVE-2019-18678: Fixed incorrect message parsing which could have led to HTTP request splitting issue (bsc#1156323).
- CVE-2019-18679: Fixed information disclosure when processing HTTP Digest Authentication (bsc#1156324).

Other issues addressed:

 * Fixed DNS failures when peer name was configured with any upper case characters
 * Fixed several rock cache_dir corruption issues
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-14"/>
	<updated date="2019-11-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1133089">SUSE bug 1133089</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140738">SUSE bug 1140738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141329">SUSE bug 1141329</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141330">SUSE bug 1141330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141332">SUSE bug 1141332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141442">SUSE bug 1141442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156323">SUSE bug 1156323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156324">SUSE bug 1156324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156326">SUSE bug 1156326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156328">SUSE bug 1156328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156329">SUSE bug 1156329</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-12523/">CVE-2019-12523</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12525/">CVE-2019-12525</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12526/">CVE-2019-12526</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12527/">CVE-2019-12527</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-12529/">CVE-2019-12529</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-12854/">CVE-2019-12854</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13345/">CVE-2019-13345</cve>
	<cve impact="important" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18676/">CVE-2019-18676</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-18677/">CVE-2019-18677</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-18678/">CVE-2019-18678</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-18679/">CVE-2019-18679</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-3688/">CVE-2019-3688</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498934" comment="squid-4.9-5.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138989" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1100397" ref_url="https://bugzilla.suse.com/1100397" source="BUGZILLA"/>
		<reference ref_id="1123886" ref_url="https://bugzilla.suse.com/1123886" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2019:3212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006234.html" source="SUSE-SU"/>
		<description>
This update for postgresql fixes the following issues:

- Changed permissions, so that the directory can only be used by users 
  in the postgres group (bsc#1123886).
- Moved bash profile out of /var/lib to allow transactional updates (bsc#1100397).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-10"/>
	<updated date="2019-12-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1100397">SUSE bug 1100397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123886">SUSE bug 1123886</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498943" comment="postgresql-contrib-10-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498944" comment="postgresql-devel-10-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498945" comment="postgresql-docs-10-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498946" comment="postgresql-plperl-10-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498947" comment="postgresql-plpython-10-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498948" comment="postgresql-pltcl-10-8.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498949" comment="postgresql-server-10-8.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138990" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1156669" ref_url="https://bugzilla.suse.com/1156669" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-2737" ref_url="https://www.suse.com/security/cve/CVE-2019-2737/" source="CVE"/>
		<reference ref_id="CVE-2019-2739" ref_url="https://www.suse.com/security/cve/CVE-2019-2739/" source="CVE"/>
		<reference ref_id="CVE-2019-2740" ref_url="https://www.suse.com/security/cve/CVE-2019-2740/" source="CVE"/>
		<reference ref_id="CVE-2019-2758" ref_url="https://www.suse.com/security/cve/CVE-2019-2758/" source="CVE"/>
		<reference ref_id="CVE-2019-2805" ref_url="https://www.suse.com/security/cve/CVE-2019-2805/" source="CVE"/>
		<reference ref_id="CVE-2019-2938" ref_url="https://www.suse.com/security/cve/CVE-2019-2938/" source="CVE"/>
		<reference ref_id="CVE-2019-2974" ref_url="https://www.suse.com/security/cve/CVE-2019-2974/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3306-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006262.html" source="SUSE-SU"/>
		<description>
This update for mariadb to version 10.2.29 fixes the following issues:

MariaDB was updated to 10.2.29 (bsc#1156669) 

Security issues fixed: 

- CVE-2019-2737: Fixed an issue where could lead a remote attacker to cause denial of service 
- CVE-2019-2938: Fixed an issue where could lead a remote attacker to cause denial of service 
- CVE-2019-2740: Fixed an issue where could lead a local attacker to cause denial of service
- CVE-2019-2805: Fixed an issue where could lead a local attacker to cause denial of service
- CVE-2019-2974: Fixed an issue where could lead a remote attacker to cause denial of service
- CVE-2019-2758: Fixed an issue where could lead a local attacker to cause denial of service
  or data corruption
- CVE-2019-2739: Fixed an issue where could lead a local attacker to cause denial of service 
  or data corruption
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-16"/>
	<updated date="2019-12-16"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1156669">SUSE bug 1156669</bugzilla>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2737/">CVE-2019-2737</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-2739/">CVE-2019-2739</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2740/">CVE-2019-2740</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-2758/">CVE-2019-2758</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2805/">CVE-2019-2805</cve>
	<cve impact="important" cvss3="4.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2938/">CVE-2019-2938</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-2974/">CVE-2019-2974</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498950" comment="libmysqld-devel-10.2.29-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498951" comment="libmysqld19-10.2.29-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498952" comment="mariadb-10.2.29-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498953" comment="mariadb-client-10.2.29-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498954" comment="mariadb-errormessages-10.2.29-3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498955" comment="mariadb-tools-10.2.29-3.23.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138991" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1152497" ref_url="https://bugzilla.suse.com/1152497" source="BUGZILLA"/>
		<reference ref_id="1157047" ref_url="https://bugzilla.suse.com/1157047" source="BUGZILLA"/>
		<reference ref_id="1157888" ref_url="https://bugzilla.suse.com/1157888" source="BUGZILLA"/>
		<reference ref_id="1158003" ref_url="https://bugzilla.suse.com/1158003" source="BUGZILLA"/>
		<reference ref_id="1158004" ref_url="https://bugzilla.suse.com/1158004" source="BUGZILLA"/>
		<reference ref_id="1158005" ref_url="https://bugzilla.suse.com/1158005" source="BUGZILLA"/>
		<reference ref_id="1158006" ref_url="https://bugzilla.suse.com/1158006" source="BUGZILLA"/>
		<reference ref_id="1158007" ref_url="https://bugzilla.suse.com/1158007" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19577" ref_url="https://www.suse.com/security/cve/CVE-2019-19577/" source="CVE"/>
		<reference ref_id="CVE-2019-19578" ref_url="https://www.suse.com/security/cve/CVE-2019-19578/" source="CVE"/>
		<reference ref_id="CVE-2019-19579" ref_url="https://www.suse.com/security/cve/CVE-2019-19579/" source="CVE"/>
		<reference ref_id="CVE-2019-19580" ref_url="https://www.suse.com/security/cve/CVE-2019-19580/" source="CVE"/>
		<reference ref_id="CVE-2019-19581" ref_url="https://www.suse.com/security/cve/CVE-2019-19581/" source="CVE"/>
		<reference ref_id="CVE-2019-19582" ref_url="https://www.suse.com/security/cve/CVE-2019-19582/" source="CVE"/>
		<reference ref_id="CVE-2019-19583" ref_url="https://www.suse.com/security/cve/CVE-2019-19583/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006271.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2019-19581: Fixed a potential out of bounds on 32-bit Arm (bsc#1158003 XSA-307).
- CVE-2019-19582: Fixed a potential infinite loop when x86 accesses to bitmaps with 
  a compile time known size of 64 (bsc#1158003 XSA-307).
- CVE-2019-19583: Fixed improper checks which could have allowed HVM/PVH guest userspace 
  code to crash the guest,leading to a guest denial of service (bsc#1158004 XSA-308).
- CVE-2019-19578: Fixed an issue where a malicious or buggy PV guest could have caused
  hypervisor crash resulting in denial of service affecting the entire host (bsc#1158005 XSA-309).
- CVE-2019-19580: Fixed a privilege escalation where a malicious PV guest administrator 
  could have been able to escalate their privilege to that of the host (bsc#1158006 XSA-310).
- CVE-2019-19577: Fixed an issue where a malicious guest administrator could have caused Xen 
  to access data structures while they are being modified leading to a crash (bsc#1158007 XSA-311). 
- CVE-2019-19579: Fixed a privilege escaltion where an untrusted domain with access 
  to a physical device can DMA into host memory (bsc#1157888 XSA-306).
- Fixed an issue where PCI passthrough failed on AMD machine xen host (bsc#1157047). 
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-18"/>
	<updated date="2019-12-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152497">SUSE bug 1152497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157047">SUSE bug 1157047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157888">SUSE bug 1157888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158003">SUSE bug 1158003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158004">SUSE bug 1158004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158005">SUSE bug 1158005</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158006">SUSE bug 1158006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158007">SUSE bug 1158007</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19577/">CVE-2019-19577</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19578/">CVE-2019-19578</cve>
	<cve impact="moderate" cvss3="6.9/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19579/">CVE-2019-19579</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19580/">CVE-2019-19580</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19581/">CVE-2019-19581</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19582/">CVE-2019-19582</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19583/">CVE-2019-19583</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499232" comment="xen-4.12.1_06-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499233" comment="xen-devel-4.12.1_06-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499234" comment="xen-tools-4.12.1_06-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138992" version="1" class="patch">
	<metadata>
		<title>Security update for shibboleth-sp (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1157471" ref_url="https://bugzilla.suse.com/1157471" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19191" ref_url="https://www.suse.com/security/cve/CVE-2019-19191/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3386-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006287.html" source="SUSE-SU"/>
		<description>
This update for shibboleth-sp fixes the following issues:

Security issue fixed:

- CVE-2019-19191: Fixed escalation to root by fixing ownership of log files (bsc#1157471).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-23"/>
	<updated date="2019-12-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1157471">SUSE bug 1157471</bugzilla>
	<cve impact="moderate" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19191/">CVE-2019-19191</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498960" comment="libshibsp-lite7-2.6.1-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498961" comment="libshibsp7-2.6.1-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498962" comment="shibboleth-sp-2.6.1-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498963" comment="shibboleth-sp-devel-2.6.1-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138993" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nspr, mozilla-nss (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141322" ref_url="https://bugzilla.suse.com/1141322" source="BUGZILLA"/>
		<reference ref_id="1158527" ref_url="https://bugzilla.suse.com/1158527" source="BUGZILLA"/>
		<reference ref_id="1159819" ref_url="https://bugzilla.suse.com/1159819" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-18508" ref_url="https://www.suse.com/security/cve/CVE-2018-18508/" source="CVE"/>
		<reference ref_id="CVE-2019-11745" ref_url="https://www.suse.com/security/cve/CVE-2019-11745/" source="CVE"/>
		<reference ref_id="CVE-2019-17006" ref_url="https://www.suse.com/security/cve/CVE-2019-17006/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3395-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006294.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nspr, mozilla-nss fixes the following issues:

mozilla-nss was updated to NSS 3.47.1:

Security issues fixed:

- CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819).
- CVE-2019-11745: EncryptUpdate should use maxout, not block size (bsc#1158527).
- CVE-2019-11727: Fixed vulnerability sign CertificateVerify with PKCS#1 v1.5 signatures issue (bsc#1141322).

mozilla-nspr was updated to version 4.23:

- Whitespace in C files was cleaned up and no longer uses tab characters for indenting.
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-30"/>
	<updated date="2019-12-30"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141322">SUSE bug 1141322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158527">SUSE bug 1158527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159819">SUSE bug 1159819</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18508/">CVE-2018-18508</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11745/">CVE-2019-11745</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-17006/">CVE-2019-17006</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009490893" comment="libfreebl3-hmac-3.47.1-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009490897" comment="libsoftokn3-hmac-3.47.1-3.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138994" version="1" class="patch">
	<metadata>
		<title>Security update for freeradius-server (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1144524" ref_url="https://bugzilla.suse.com/1144524" source="BUGZILLA"/>
		<reference ref_id="1146848" ref_url="https://bugzilla.suse.com/1146848" source="BUGZILLA"/>
		<reference ref_id="1166847" ref_url="https://bugzilla.suse.com/1166847" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13456" ref_url="https://www.suse.com/security/cve/CVE-2019-13456/" source="CVE"/>
		<reference ref_id="CVE-2019-17185" ref_url="https://www.suse.com/security/cve/CVE-2019-17185/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1023-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006716.html" source="SUSE-SU"/>
		<description>
This update for freeradius-server fixes the following issues:

- CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd
  (bsc#1144524).
- CVE-2019-17185: Fixed a debial of service due to multithreaded
  BN_CTX access (bsc#1166847).
- Fixed an issue in TLS-EAP where the OCSP verification, when an 
  intermediate client certificate was not explicitly trusted 
  (bsc#1146848).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-17"/>
	<updated date="2020-04-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1144524">SUSE bug 1144524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146848">SUSE bug 1146848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166847">SUSE bug 1166847</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13456/">CVE-2019-13456</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-17185/">CVE-2019-17185</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499235" comment="freeradius-server-3.0.16-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499236" comment="freeradius-server-devel-3.0.16-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499237" comment="freeradius-server-krb5-3.0.16-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499238" comment="freeradius-server-ldap-3.0.16-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499239" comment="freeradius-server-libs-3.0.16-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499240" comment="freeradius-server-mysql-3.0.16-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499241" comment="freeradius-server-perl-3.0.16-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499242" comment="freeradius-server-postgresql-3.0.16-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499243" comment="freeradius-server-python-3.0.16-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499244" comment="freeradius-server-sqlite-3.0.16-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499245" comment="freeradius-server-utils-3.0.16-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138995" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1134506" ref_url="https://bugzilla.suse.com/1134506" source="BUGZILLA"/>
		<reference ref_id="1155200" ref_url="https://bugzilla.suse.com/1155200" source="BUGZILLA"/>
		<reference ref_id="1157490" ref_url="https://bugzilla.suse.com/1157490" source="BUGZILLA"/>
		<reference ref_id="1160932" ref_url="https://bugzilla.suse.com/1160932" source="BUGZILLA"/>
		<reference ref_id="1165206" ref_url="https://bugzilla.suse.com/1165206" source="BUGZILLA"/>
		<reference ref_id="1167007" ref_url="https://bugzilla.suse.com/1167007" source="BUGZILLA"/>
		<reference ref_id="1167152" ref_url="https://bugzilla.suse.com/1167152" source="BUGZILLA"/>
		<reference ref_id="1168140" ref_url="https://bugzilla.suse.com/1168140" source="BUGZILLA"/>
		<reference ref_id="1168142" ref_url="https://bugzilla.suse.com/1168142" source="BUGZILLA"/>
		<reference ref_id="1168143" ref_url="https://bugzilla.suse.com/1168143" source="BUGZILLA"/>
		<reference ref_id="1169392" ref_url="https://bugzilla.suse.com/1169392" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11739" ref_url="https://www.suse.com/security/cve/CVE-2020-11739/" source="CVE"/>
		<reference ref_id="CVE-2020-11740" ref_url="https://www.suse.com/security/cve/CVE-2020-11740/" source="CVE"/>
		<reference ref_id="CVE-2020-11741" ref_url="https://www.suse.com/security/cve/CVE-2020-11741/" source="CVE"/>
		<reference ref_id="CVE-2020-11742" ref_url="https://www.suse.com/security/cve/CVE-2020-11742/" source="CVE"/>
		<reference ref_id="CVE-2020-11743" ref_url="https://www.suse.com/security/cve/CVE-2020-11743/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1124-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006746.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

Security issues fixed:

- CVE-2020-11742: Bad continuation handling in GNTTABOP_copy (bsc#1169392).
- CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues (bsc#1168140).
- CVE-2020-11739: Missing memory barriers in read-write unlock paths (bsc#1168142).
- CVE-2020-11743: Bad error path in GNTTABOP_map_grant (bsc#1168143).
- arm: a CPU may speculate past the ERET instruction (bsc#1160932).

Non-security issues fixed:

- Xenstored Crashed during VM install (bsc#1167152)
- DomU hang: soft lockup CPU #0 stuck under high load (bsc#1165206, bsc#1134506)
- Update API compatibility versions, fixes issues for libvirt. (bsc#1167007, bsc#1157490)
- aacraid blocks xen commands (bsc#1155200)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-28"/>
	<updated date="2020-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134506">SUSE bug 1134506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155200">SUSE bug 1155200</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157490">SUSE bug 1157490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160932">SUSE bug 1160932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165206">SUSE bug 1165206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167007">SUSE bug 1167007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167152">SUSE bug 1167152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168140">SUSE bug 1168140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168142">SUSE bug 1168142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168143">SUSE bug 1168143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169392">SUSE bug 1169392</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11739/">CVE-2020-11739</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11740/">CVE-2020-11740</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11741/">CVE-2020-11741</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11742/">CVE-2020-11742</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11743/">CVE-2020-11743</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499246" comment="xen-4.12.2_04-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499247" comment="xen-devel-4.12.2_04-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499248" comment="xen-tools-4.12.2_04-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138996" version="1" class="patch">
	<metadata>
		<title>Security update for ovmf (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1163927" ref_url="https://bugzilla.suse.com/1163927" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14559" ref_url="https://www.suse.com/security/cve/CVE-2019-14559/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006745.html" source="SUSE-SU"/>
		<description>
This update for ovmf fixes the following issues:

- CVE-2019-14559: Fixed a memory leak in ArpOnFrameRcvdDpc() (bsc#1163927).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-28"/>
	<updated date="2020-04-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1163927">SUSE bug 1163927</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14559/">CVE-2019-14559</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499249" comment="ovmf-2017+git1510945757.b2662641d5-5.32.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499250" comment="ovmf-tools-2017+git1510945757.b2662641d5-5.32.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499251" comment="qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.32.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499252" comment="qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.32.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138997" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168404" ref_url="https://bugzilla.suse.com/1168404" source="BUGZILLA"/>
		<reference ref_id="1168407" ref_url="https://bugzilla.suse.com/1168407" source="BUGZILLA"/>
		<reference ref_id="1169066" ref_url="https://bugzilla.suse.com/1169066" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1927" ref_url="https://www.suse.com/security/cve/CVE-2020-1927/" source="CVE"/>
		<reference ref_id="CVE-2020-1934" ref_url="https://www.suse.com/security/cve/CVE-2020-1934/" source="CVE"/>
		<reference ref_id="CVE-2020-1938" ref_url="https://www.suse.com/security/cve/CVE-2020-1938/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1126-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006744.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404).
- CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect (bsc#1168407).
- CVE-2020-1938: mod_proxy_ajp: Add 'secret' parameter to proxy workers to implement legacy AJP13 authentication (bsc#1169066).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-28"/>
	<updated date="2020-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168404">SUSE bug 1168404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168407">SUSE bug 1168407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169066">SUSE bug 1169066</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-1927/">CVE-2020-1927</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1934/">CVE-2020-1934</cve>
	<cve impact="important" cvss3="7.6/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2020-1938/">CVE-2020-1938</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499253" comment="apache2-2.4.33-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499254" comment="apache2-devel-2.4.33-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499255" comment="apache2-doc-2.4.33-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499256" comment="apache2-prefork-2.4.33-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499257" comment="apache2-utils-2.4.33-3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499258" comment="apache2-worker-2.4.33-3.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138998" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1170595" ref_url="https://bugzilla.suse.com/1170595" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11651" ref_url="https://www.suse.com/security/cve/CVE-2020-11651/" source="CVE"/>
		<reference ref_id="CVE-2020-11652" ref_url="https://www.suse.com/security/cve/CVE-2020-11652/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006766.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Fix CVE-2020-11651 and CVE-2020-11652 (bsc#1170595)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-29"/>
	<updated date="2020-04-29"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1170595">SUSE bug 1170595</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11651/">CVE-2020-11651</cve>
	<cve impact="critical" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11652/">CVE-2020-11652</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499259" comment="salt-api-2019.2.0-6.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499260" comment="salt-cloud-2019.2.0-6.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499261" comment="salt-fish-completion-2019.2.0-6.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499262" comment="salt-master-2019.2.0-6.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499263" comment="salt-proxy-2019.2.0-6.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499264" comment="salt-ssh-2019.2.0-6.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499265" comment="salt-standalone-formulas-configuration-2019.2.0-6.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499266" comment="salt-syndic-2019.2.0-6.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:138999" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162689" ref_url="https://bugzilla.suse.com/1162689" source="BUGZILLA"/>
		<reference ref_id="1162691" ref_url="https://bugzilla.suse.com/1162691" source="BUGZILLA"/>
		<reference ref_id="1167373" ref_url="https://bugzilla.suse.com/1167373" source="BUGZILLA"/>
		<reference ref_id="1169659" ref_url="https://bugzilla.suse.com/1169659" source="BUGZILLA"/>
		<reference ref_id="1170313" ref_url="https://bugzilla.suse.com/1170313" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12519" ref_url="https://www.suse.com/security/cve/CVE-2019-12519/" source="CVE"/>
		<reference ref_id="CVE-2019-12521" ref_url="https://www.suse.com/security/cve/CVE-2019-12521/" source="CVE"/>
		<reference ref_id="CVE-2019-12528" ref_url="https://www.suse.com/security/cve/CVE-2019-12528/" source="CVE"/>
		<reference ref_id="CVE-2019-18860" ref_url="https://www.suse.com/security/cve/CVE-2019-18860/" source="CVE"/>
		<reference ref_id="CVE-2020-11945" ref_url="https://www.suse.com/security/cve/CVE-2020-11945/" source="CVE"/>
		<reference ref_id="CVE-2020-8517" ref_url="https://www.suse.com/security/cve/CVE-2020-8517/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006769.html" source="SUSE-SU"/>
		<description>
This update for squid to version 4.11 fixes the following issues:

- CVE-2020-11945: Fixed a potential remote code execution vulnerability when using
  HTTP Digest Authentication (bsc#1170313).
- CVE-2019-12519, CVE-2019-12521: Fixed incorrect buffer handling that can result 
  in cache poisoning, remote execution, and denial of service attacks when
  processing ESI responses (bsc#1169659).
- CVE-2020-8517: Fixed a possible denial of service caused by incorrect buffer
  management ext_lm_group_acl when processing NTLM Authentication credentials (bsc#1162691).
- CVE-2019-12528: Fixed possible information disclosure when translating
  FTP server listings into HTTP responses (bsc#1162689).
- CVE-2019-18860: Fixed handling of invalid domain names in cachemgr.cgi (bsc#1167373).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-30"/>
	<updated date="2020-04-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1162689">SUSE bug 1162689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162691">SUSE bug 1162691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167373">SUSE bug 1167373</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169659">SUSE bug 1169659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170313">SUSE bug 1170313</bugzilla>
	<cve impact="important" cvss3="7.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-12519/">CVE-2019-12519</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12521/">CVE-2019-12521</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-12528/">CVE-2019-12528</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-18860/">CVE-2019-18860</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11945/">CVE-2020-11945</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8517/">CVE-2020-8517</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499267" comment="squid-4.11-5.17.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139000" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1145774" ref_url="https://bugzilla.suse.com/1145774" source="BUGZILLA"/>
		<reference ref_id="1151850" ref_url="https://bugzilla.suse.com/1151850" source="BUGZILLA"/>
		<reference ref_id="1152649" ref_url="https://bugzilla.suse.com/1152649" source="BUGZILLA"/>
		<reference ref_id="1154093" ref_url="https://bugzilla.suse.com/1154093" source="BUGZILLA"/>
		<reference ref_id="1157490" ref_url="https://bugzilla.suse.com/1157490" source="BUGZILLA"/>
		<reference ref_id="1161883" ref_url="https://bugzilla.suse.com/1161883" source="BUGZILLA"/>
		<reference ref_id="1162160" ref_url="https://bugzilla.suse.com/1162160" source="BUGZILLA"/>
		<reference ref_id="1167007" ref_url="https://bugzilla.suse.com/1167007" source="BUGZILLA"/>
		<reference ref_id="1168683" ref_url="https://bugzilla.suse.com/1168683" source="BUGZILLA"/>
		<reference ref_id="1170765" ref_url="https://bugzilla.suse.com/1170765" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10703" ref_url="https://www.suse.com/security/cve/CVE-2020-10703/" source="CVE"/>
		<reference ref_id="CVE-2020-12430" ref_url="https://www.suse.com/security/cve/CVE-2020-12430/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1208-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006795.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:

Security issues fixed:

- CVE-2020-10703: Fixed a daemon crash caused by pools without target paths (bsc#1168683).
- CVE-2020-12430: Fixed a memory leak in qemuDomainGetStatsIOThread (bsc#1170765).

Non-security issues fixed:

- Support setting credit2 scheduler parameters for xen (bsc#1162160).
- Add SLE 15 and SLE 12 service packs support to 'libvirtd' (bsc#1154093).
- Add support boot from 'vfio-ccw'and 'mdev' devices (jsc#SLE-5826, FATE#327355, bsc#1152649).
- Fix lock manager lock ordering (bsc#1145774).
- Do not define known no-op features. (bsc#1151850).
- Enable use of newer libxl APIs for retrieving memory statistics (bsc#1157490, bsc#1167007).
- Create multipath targets for qemu PR (bsc#1161883).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-06"/>
	<updated date="2020-05-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1145774">SUSE bug 1145774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151850">SUSE bug 1151850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152649">SUSE bug 1152649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154093">SUSE bug 1154093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157490">SUSE bug 1157490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161883">SUSE bug 1161883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162160">SUSE bug 1162160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167007">SUSE bug 1167007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168683">SUSE bug 1168683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170765">SUSE bug 1170765</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10703/">CVE-2020-10703</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12430/">CVE-2020-12430</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499268" comment="libvirt-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499269" comment="libvirt-admin-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499270" comment="libvirt-bash-completion-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499271" comment="libvirt-client-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499272" comment="libvirt-daemon-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499273" comment="libvirt-daemon-config-network-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499274" comment="libvirt-daemon-config-nwfilter-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499275" comment="libvirt-daemon-driver-interface-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499276" comment="libvirt-daemon-driver-libxl-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499277" comment="libvirt-daemon-driver-lxc-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499278" comment="libvirt-daemon-driver-network-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499279" comment="libvirt-daemon-driver-nodedev-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499280" comment="libvirt-daemon-driver-nwfilter-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499281" comment="libvirt-daemon-driver-qemu-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499282" comment="libvirt-daemon-driver-secret-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499283" comment="libvirt-daemon-driver-storage-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499284" comment="libvirt-daemon-driver-storage-core-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499285" comment="libvirt-daemon-driver-storage-disk-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499286" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499287" comment="libvirt-daemon-driver-storage-logical-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499288" comment="libvirt-daemon-driver-storage-mpath-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499289" comment="libvirt-daemon-driver-storage-rbd-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499290" comment="libvirt-daemon-driver-storage-scsi-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499291" comment="libvirt-daemon-hooks-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499292" comment="libvirt-daemon-lxc-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499293" comment="libvirt-daemon-qemu-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499294" comment="libvirt-daemon-xen-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499295" comment="libvirt-devel-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499296" comment="libvirt-doc-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499297" comment="libvirt-lock-sanlock-5.1.0-8.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499298" comment="libvirt-nss-5.1.0-8.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139001" version="1" class="patch">
	<metadata>
		<title>Security update for rmt-server (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1165548" ref_url="https://bugzilla.suse.com/1165548" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:1213-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006796.html" source="SUSE-SU"/>
		<description>
This update for rmt-server to version 2.5.7 fixes the following issues:

- Fixed a local denial of service (bsc#1165548).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-07"/>
	<updated date="2020-05-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1165548">SUSE bug 1165548</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499299" comment="rmt-server-2.5.7-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499300" comment="rmt-server-config-2.5.7-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139002" version="1" class="patch">
	<metadata>
		<title>Security update for dpdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171477" ref_url="https://bugzilla.suse.com/1171477" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10722" ref_url="https://www.suse.com/security/cve/CVE-2020-10722/" source="CVE"/>
		<reference ref_id="CVE-2020-10723" ref_url="https://www.suse.com/security/cve/CVE-2020-10723/" source="CVE"/>
		<reference ref_id="CVE-2020-10724" ref_url="https://www.suse.com/security/cve/CVE-2020-10724/" source="CVE"/>
		<reference ref_id="CVE-2020-10725" ref_url="https://www.suse.com/security/cve/CVE-2020-10725/" source="CVE"/>
		<reference ref_id="CVE-2020-10726" ref_url="https://www.suse.com/security/cve/CVE-2020-10726/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006833.html" source="SUSE-SU"/>
		<description>
This update for dpdk fixes the following issues:

Security issues fixed:

- CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477).
- CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171477).
- CVE-2020-10724: Fixed a missing inputs validation in Vhost-crypto (bsc#1171477).
- CVE-2020-10725: Fixed a segfault caused by invalid virtio descriptors sent from a malicious guest (bsc#1171477).
- CVE-2020-10726: Fixed a denial-of-service caused by VHOST_USER_GET_INFLIGHT_FD message flooding (bsc#1171477).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-19"/>
	<updated date="2020-05-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1171477">SUSE bug 1171477</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-10722/">CVE-2020-10722</cve>
	<cve impact="low" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-10723/">CVE-2020-10723</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-10724/">CVE-2020-10724</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10725/">CVE-2020-10725</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10726/">CVE-2020-10726</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499301" comment="dpdk-18.11.3-4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499302" comment="dpdk-devel-18.11.3-4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499303" comment="dpdk-kmp-default-18.11.3_k4.12.14_197.40-4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499304" comment="dpdk-tools-18.11.3-4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499305" comment="libdpdk-18_11-18.11.3-4.6.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139003" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171456" ref_url="https://bugzilla.suse.com/1171456" source="BUGZILLA"/>
		<reference ref_id="1171457" ref_url="https://bugzilla.suse.com/1171457" source="BUGZILLA"/>
		<reference ref_id="1171458" ref_url="https://bugzilla.suse.com/1171458" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10957" ref_url="https://www.suse.com/security/cve/CVE-2020-10957/" source="CVE"/>
		<reference ref_id="CVE-2020-10958" ref_url="https://www.suse.com/security/cve/CVE-2020-10958/" source="CVE"/>
		<reference ref_id="CVE-2020-10967" ref_url="https://www.suse.com/security/cve/CVE-2020-10967/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1380-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006845.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 to 2.3.10 fixes the following issues:

Security issues fixed:

- CVE-2020-10957: Fixed a crash caused by malformed NOOP commands (bsc#1171457).
- CVE-2020-10958: Fixed a use-after-free when receiving too many newlines (bsc#1171458).
- CVE-2020-10967: Fixed a crash in the lmtp and submission components caused by mails with empty quoted localparts (bsc#1171456).

Non-security issues fixed:

- The update to 2.3.10 fixes several bugs. Please refer to 
  https://dovecot.org/doc/NEWS for a complete list of changes.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-22"/>
	<updated date="2020-05-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171456">SUSE bug 1171456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171457">SUSE bug 1171457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171458">SUSE bug 1171458</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10957/">CVE-2020-10957</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10958/">CVE-2020-10958</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10967/">CVE-2020-10967</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499306" comment="dovecot23-2.3.10-11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499307" comment="dovecot23-backend-mysql-2.3.10-11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499308" comment="dovecot23-backend-pgsql-2.3.10-11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499309" comment="dovecot23-backend-sqlite-2.3.10-11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499310" comment="dovecot23-devel-2.3.10-11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499311" comment="dovecot23-fts-2.3.10-11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499312" comment="dovecot23-fts-lucene-2.3.10-11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499313" comment="dovecot23-fts-solr-2.3.10-11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499314" comment="dovecot23-fts-squat-2.3.10-11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139004" version="1" class="patch">
	<metadata>
		<title>Security update for memcached (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1133817" ref_url="https://bugzilla.suse.com/1133817" source="BUGZILLA"/>
		<reference ref_id="1149110" ref_url="https://bugzilla.suse.com/1149110" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11596" ref_url="https://www.suse.com/security/cve/CVE-2019-11596/" source="CVE"/>
		<reference ref_id="CVE-2019-15026" ref_url="https://www.suse.com/security/cve/CVE-2019-15026/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1381-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006847.html" source="SUSE-SU"/>
		<description>
This update for memcached fixes the following issues:

Security issue fixed:

- CVE-2019-11596: Fixed a NULL pointer dereference in process_lru_command (bsc#1133817).
- CVE-2019-15026: Fixed a stack-based buffer over-read (bsc#1149110).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-22"/>
	<updated date="2020-05-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1133817">SUSE bug 1133817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149110">SUSE bug 1149110</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11596/">CVE-2019-11596</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-15026/">CVE-2019-15026</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499315" comment="memcached-1.5.6-4.5.30 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499316" comment="memcached-devel-1.5.6-4.5.30 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139005" version="1" class="patch">
	<metadata>
		<title>Security update for freetds (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141132" ref_url="https://bugzilla.suse.com/1141132" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13508" ref_url="https://www.suse.com/security/cve/CVE-2019-13508/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1417-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006857.html" source="SUSE-SU"/>
		<description>
This update for freetds to 1.1.36 fixes the following issues:

Security issue fixed:

- CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 (bsc#1141132).

Non-security issues fixed:

- Enabled Kerberos support
- Version update to 1.1.36:
  * Default TDS protocol version is now 'auto'
  * Improved UTF-8 performances
  * TDS Pool Server is enabled
  * MARS support is enabled
  * NTLMv2 is enabled
  * See NEWS and ChangeLog for a complete list of changes
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141132">SUSE bug 1141132</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13508/">CVE-2019-13508</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499317" comment="libct4-1.1.36-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139006" version="1" class="patch">
	<metadata>
		<title>Security update for sysstat (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159104" ref_url="https://bugzilla.suse.com/1159104" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19725" ref_url="https://www.suse.com/security/cve/CVE-2019-19725/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1419-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006856.html" source="SUSE-SU"/>
		<description>
This update for sysstat fixes the following issues:

- CVE-2019-19725: Fixed double free in check_file_actlst in sa_common.c (bsc#1159104).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1159104">SUSE bug 1159104</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19725/">CVE-2019-19725</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499318" comment="sysstat-isag-12.0.2-3.21.18 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139007" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb-connector-c (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171550" ref_url="https://bugzilla.suse.com/1171550" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13249" ref_url="https://www.suse.com/security/cve/CVE-2020-13249/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1423-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006859.html" source="SUSE-SU"/>
		<description>
This update for mariadb-connector-c fixes the following issues:

Security issue fixed:

- CVE-2020-13249: Fixed an improper validation of OK packets received from clients (bsc#1171550).

Non-security issues fixed:

- Update to release 3.1.8 (bsc#1171550)
  * CONC-304: Rename the static library to libmariadb.a and other libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improper
  * CONC-464: Fix static build for auth_gssapi_client plugin
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-26"/>
	<updated date="2020-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171550">SUSE bug 1171550</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-13249/">CVE-2020-13249</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499319" comment="libmariadb-devel-3.1.8-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499320" comment="libmariadb_plugins-3.1.8-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139008" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1158880" ref_url="https://bugzilla.suse.com/1158880" source="BUGZILLA"/>
		<reference ref_id="1167816" ref_url="https://bugzilla.suse.com/1167816" source="BUGZILLA"/>
		<reference ref_id="1170940" ref_url="https://bugzilla.suse.com/1170940" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1983" ref_url="https://www.suse.com/security/cve/CVE-2020-1983/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006869.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

Security issue fixed:

- CVE-2020-1983: Fixed a use-after-free in the ip_reass function of slirp (bsc#1170940).

Non-security issues fixed:

- Fixed an issue where limiting the memory bandwidth was not possible (bsc#1167816).
- Fixed the issue that s390x could not read IPL channel program when using dasd as boot device (bsc#1158880).
- Miscellaneous fixes to the in-package support documentation.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-29"/>
	<updated date="2020-05-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1158880">SUSE bug 1158880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167816">SUSE bug 1167816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170940">SUSE bug 1170940</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-1983/">CVE-2020-1983</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499321" comment="qemu-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499322" comment="qemu-arm-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499323" comment="qemu-audio-alsa-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499324" comment="qemu-audio-oss-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499325" comment="qemu-audio-pa-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499326" comment="qemu-block-curl-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499327" comment="qemu-block-iscsi-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499328" comment="qemu-block-rbd-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499329" comment="qemu-block-ssh-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499330" comment="qemu-guest-agent-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499331" comment="qemu-ipxe-1.0.0+-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499332" comment="qemu-kvm-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499333" comment="qemu-lang-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499334" comment="qemu-ppc-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499335" comment="qemu-s390-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499336" comment="qemu-seabios-1.12.0-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499337" comment="qemu-sgabios-8-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499338" comment="qemu-ui-curses-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499339" comment="qemu-ui-gtk-3.1.1.1-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499340" comment="qemu-vgabios-1.12.0-9.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499341" comment="qemu-x86-3.1.1.1-9.21.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139009" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1157490" ref_url="https://bugzilla.suse.com/1157490" source="BUGZILLA"/>
		<reference ref_id="1167007" ref_url="https://bugzilla.suse.com/1167007" source="BUGZILLA"/>
		<reference ref_id="1172205" ref_url="https://bugzilla.suse.com/1172205" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006935.html" source="SUSE-SU"/>
		<description>
This update for xen to version 4.12.3 fixes the following issues:
	  
- CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it.
  This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1172205).
- Added support for new 64bit libxl memory API (bsc#1167007 and bsc#1157490).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-11"/>
	<updated date="2020-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157490">SUSE bug 1157490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167007">SUSE bug 1167007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172205">SUSE bug 1172205</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499342" comment="xen-4.12.3_02-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499343" comment="xen-devel-4.12.3_02-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499344" comment="xen-tools-4.12.3_02-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139010" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nspr, mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159819" ref_url="https://bugzilla.suse.com/1159819" source="BUGZILLA"/>
		<reference ref_id="1169746" ref_url="https://bugzilla.suse.com/1169746" source="BUGZILLA"/>
		<reference ref_id="1171978" ref_url="https://bugzilla.suse.com/1171978" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17006" ref_url="https://www.suse.com/security/cve/CVE-2019-17006/" source="CVE"/>
		<reference ref_id="CVE-2020-12399" ref_url="https://www.suse.com/security/cve/CVE-2020-12399/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1677-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006980.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nspr, mozilla-nss fixes the following issues:

mozilla-nss was updated to version 3.53

- CVE-2020-12399: Fixed a timing attack on DSA signature generation (bsc#1171978).
- CVE-2019-17006: Added length checks for cryptographic primitives (bsc#1159819).
Release notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53_release_notes

mozilla-nspr to version 4.25
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159819">SUSE bug 1159819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169746">SUSE bug 1169746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171978">SUSE bug 1171978</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-17006/">CVE-2019-17006</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12399/">CVE-2020-12399</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499345" comment="libfreebl3-hmac-3.53-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499346" comment="libsoftokn3-hmac-3.53-3.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139011" version="1" class="patch">
	<metadata>
		<title>Security update for virglrenderer (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159478" ref_url="https://bugzilla.suse.com/1159478" source="BUGZILLA"/>
		<reference ref_id="1159479" ref_url="https://bugzilla.suse.com/1159479" source="BUGZILLA"/>
		<reference ref_id="1159482" ref_url="https://bugzilla.suse.com/1159482" source="BUGZILLA"/>
		<reference ref_id="1159486" ref_url="https://bugzilla.suse.com/1159486" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18388" ref_url="https://www.suse.com/security/cve/CVE-2019-18388/" source="CVE"/>
		<reference ref_id="CVE-2019-18389" ref_url="https://www.suse.com/security/cve/CVE-2019-18389/" source="CVE"/>
		<reference ref_id="CVE-2019-18390" ref_url="https://www.suse.com/security/cve/CVE-2019-18390/" source="CVE"/>
		<reference ref_id="CVE-2019-18391" ref_url="https://www.suse.com/security/cve/CVE-2019-18391/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0017-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006300.html" source="SUSE-SU"/>
		<description>
This update for virglrenderer fixes the following issues:

- CVE-2019-18388: Fixed a null pointer dereference which could have led 
   to denial of service (bsc#1159479).
- CVE-2019-18390: Fixed an out of bound read which could have led to 
  denial of service (bsc#1159478).
- CVE-2019-18389: Fixed a heap buffer overflow which could have led to 
  guest escape or denial of service (bsc#1159482).
- CVE-2019-18391: Fixed a heap based buffer overflow which could have led to 
  guest escape or denial of service (bsc#1159486).  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-07"/>
	<updated date="2020-01-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159478">SUSE bug 1159478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159479">SUSE bug 1159479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159482">SUSE bug 1159482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159486">SUSE bug 1159486</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-18388/">CVE-2019-18388</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18389/">CVE-2019-18389</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18390/">CVE-2019-18390</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18391/">CVE-2019-18391</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499082" comment="libvirglrenderer0-0.6.0-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499083" comment="virglrenderer-devel-0.6.0-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139012" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171550" ref_url="https://bugzilla.suse.com/1171550" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13249" ref_url="https://www.suse.com/security/cve/CVE-2020-13249/" source="CVE"/>
		<reference ref_id="CVE-2020-2752" ref_url="https://www.suse.com/security/cve/CVE-2020-2752/" source="CVE"/>
		<reference ref_id="CVE-2020-2760" ref_url="https://www.suse.com/security/cve/CVE-2020-2760/" source="CVE"/>
		<reference ref_id="CVE-2020-2812" ref_url="https://www.suse.com/security/cve/CVE-2020-2812/" source="CVE"/>
		<reference ref_id="CVE-2020-2814" ref_url="https://www.suse.com/security/cve/CVE-2020-2814/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1711-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007010.html" source="SUSE-SU"/>
		<description>
This update for mariadb to version 10.2.32 fixes the following issues:

mariadb was updated to version 10.2.32 (bsc#1171550)

- CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.
- CVE-2020-2812: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. 
- CVE-2020-2814: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.
- CVE-2020-2760: Fixed an issue which could have resulted in unauthorized ability to cause denial of service.
- CVE-2020-13249: Fixed an improper validation of the content of an OK packet received from a server. 

Release notes and changelog:

- https://mariadb.com/kb/en/library/mariadb-10232-release-notes
- https://mariadb.com/kb/en/library/mariadb-10232-changelog
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-23"/>
	<updated date="2020-06-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1171550">SUSE bug 1171550</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-13249/">CVE-2020-13249</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-2752/">CVE-2020-2752</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-2760/">CVE-2020-2760</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-2812/">CVE-2020-2812</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-2814/">CVE-2020-2814</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499347" comment="libmysqld-devel-10.2.32-3.29.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499348" comment="libmysqld19-10.2.32-3.29.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499349" comment="mariadb-10.2.32-3.29.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499350" comment="mariadb-client-10.2.32-3.29.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499351" comment="mariadb-errormessages-10.2.32-3.29.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499352" comment="mariadb-tools-10.2.32-3.29.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139013" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173304" ref_url="https://bugzilla.suse.com/1173304" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14059" ref_url="https://www.suse.com/security/cve/CVE-2020-14059/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007038.html" source="SUSE-SU"/>
		<description>
This update for squid fixes the following issues:

squid was updated to version 4.12 

Security issue fixed: 

- CVE-2020-14059: Fixed an issue where a client could potentially deny the service of a server 
  during TLS Handshake (bsc#1173304).
  
Other issues addressed: 

- Reverted to slow search for new SMP shm pages due to a regression 
- Fixed an issue where negative responses were never cached
- Fixed stall if transaction was overwriting a recently active cache entry
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-26"/>
	<updated date="2020-06-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173304">SUSE bug 1173304</bugzilla>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14059/">CVE-2020-14059</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499353" comment="squid-4.12-5.20.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139014" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168669" ref_url="https://bugzilla.suse.com/1168669" source="BUGZILLA"/>
		<reference ref_id="1173032" ref_url="https://bugzilla.suse.com/1173032" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12402" ref_url="https://www.suse.com/security/cve/CVE-2020-12402/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1850-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007074.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

mozilla-nss was updated to version 3.53.1
 
- CVE-2020-12402: Fixed a potential side channel attack during RSA key generation (bsc#1173032)
- Fixed various FIPS issues in libfreebl3 which were causing segfaults in the test suite of chrony (bsc#1168669).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-06"/>
	<updated date="2020-07-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1168669">SUSE bug 1168669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173032">SUSE bug 1173032</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-12402/">CVE-2020-12402</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499354" comment="libfreebl3-hmac-3.53.1-3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499355" comment="libsoftokn3-hmac-3.53.1-3.45.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139015" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1172205" ref_url="https://bugzilla.suse.com/1172205" source="BUGZILLA"/>
		<reference ref_id="1173376" ref_url="https://bugzilla.suse.com/1173376" source="BUGZILLA"/>
		<reference ref_id="1173377" ref_url="https://bugzilla.suse.com/1173377" source="BUGZILLA"/>
		<reference ref_id="1173378" ref_url="https://bugzilla.suse.com/1173378" source="BUGZILLA"/>
		<reference ref_id="1173380" ref_url="https://bugzilla.suse.com/1173380" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543/" source="CVE"/>
		<reference ref_id="CVE-2020-15563" ref_url="https://www.suse.com/security/cve/CVE-2020-15563/" source="CVE"/>
		<reference ref_id="CVE-2020-15565" ref_url="https://www.suse.com/security/cve/CVE-2020-15565/" source="CVE"/>
		<reference ref_id="CVE-2020-15566" ref_url="https://www.suse.com/security/cve/CVE-2020-15566/" source="CVE"/>
		<reference ref_id="CVE-2020-15567" ref_url="https://www.suse.com/security/cve/CVE-2020-15567/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1889-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007118.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking (bsc#1173377).
- CVE-2020-15565: Fixed insufficient cache write-back under VT-d (bsc#1173378).
- CVE-2020-15566: Fixed incorrect error handling in event channel port allocation (bsc#1173376).
- CVE-2020-15567: Fixed non-atomic modification of live EPT PTE (bsc#1173380).
- CVE-2020-0543: Special Register Buffer Data Sampling (SRBDS) aka 'CrossTalk' (bsc#1172205).

Additional upstream bug fixes (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-10"/>
	<updated date="2020-07-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172205">SUSE bug 1172205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173376">SUSE bug 1173376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173377">SUSE bug 1173377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173378">SUSE bug 1173378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173380">SUSE bug 1173380</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15563/">CVE-2020-15563</cve>
	<cve impact="important" cvss3="7.9/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-15565/">CVE-2020-15565</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15566/">CVE-2020-15566</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-15567/">CVE-2020-15567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499356" comment="xen-4.12.3_04-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499357" comment="xen-devel-4.12.3_04-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499358" comment="xen-tools-4.12.3_04-3.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139016" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159284" ref_url="https://bugzilla.suse.com/1159284" source="BUGZILLA"/>
		<reference ref_id="1165572" ref_url="https://bugzilla.suse.com/1165572" source="BUGZILLA"/>
		<reference ref_id="1167437" ref_url="https://bugzilla.suse.com/1167437" source="BUGZILLA"/>
		<reference ref_id="1168340" ref_url="https://bugzilla.suse.com/1168340" source="BUGZILLA"/>
		<reference ref_id="1169604" ref_url="https://bugzilla.suse.com/1169604" source="BUGZILLA"/>
		<reference ref_id="1170104" ref_url="https://bugzilla.suse.com/1170104" source="BUGZILLA"/>
		<reference ref_id="1170288" ref_url="https://bugzilla.suse.com/1170288" source="BUGZILLA"/>
		<reference ref_id="1171906" ref_url="https://bugzilla.suse.com/1171906" source="BUGZILLA"/>
		<reference ref_id="1172075" ref_url="https://bugzilla.suse.com/1172075" source="BUGZILLA"/>
		<reference ref_id="1173072" ref_url="https://bugzilla.suse.com/1173072" source="BUGZILLA"/>
		<reference ref_id="1174165" ref_url="https://bugzilla.suse.com/1174165" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-15750" ref_url="https://www.suse.com/security/cve/CVE-2018-15750/" source="CVE"/>
		<reference ref_id="CVE-2018-15751" ref_url="https://www.suse.com/security/cve/CVE-2018-15751/" source="CVE"/>
		<reference ref_id="CVE-2020-11651" ref_url="https://www.suse.com/security/cve/CVE-2020-11651/" source="CVE"/>
		<reference ref_id="CVE-2020-11652" ref_url="https://www.suse.com/security/cve/CVE-2020-11652/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1974-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007156.html" source="SUSE-SU"/>
		<description>
This update for salt contains the following fixes:

- Fix for TypeError in Tornado importer (bsc#1174165)
- Require python3-distro only for TW (bsc#1173072)
- Update to Salt version 3000:
  See release notes: https://docs.saltstack.com/en/latest/topics/releases/3000.html

- Add docker.logout to docker execution module. (bsc#1165572)
- Add option to enable/disable force refresh for zypper.
- Add publish_batch to ClearFuncs exposed methods.
- Adds test for zypper abbreviation fix.
- Avoid segfault from 'salt-api' under certain conditions of heavy load managing SSH
  minions. (bsc#1169604)
- Avoid traceback on debug logging for swarm module. (bsc#1172075)
- Batch mode now also correctly provides return value. (bsc#1168340)
- Better import cache handline.
- Do not make file.recurse state to fail when msgpack 0.5.4. (bsc#1167437)
- Do not require vendored backports-abc. (bsc#1170288)
- Fix errors from unit tests due NO_MOCK and NO_MOCK_REASON deprecation.
- Fix for low rpm_lowpkg unit test.
- Fix for temp folder definition in loader unit test.
- Fix for unless requisite when pip is not installed.
- Fix integration test failure for test_mod_del_repo_multiline_values.
- Fix regression in service states with reload argument.
- Fix tornado imports and missing _utils after rebasing patches.
- Fix status attribute issue in aptpkg test.
- Improved storage pool or network handling.
- loop: fix variable names for until_no_eval.
- Make 'salt.ext.tornado.gen' to use 'salt.ext.backports_abc' on Python 2.
- Make setup.py script not to require setuptools greater than 9.1.
- More robust remote port detection.
- Prevent sporious 'salt-api' stuck processes when managing SSH minions.
  because of logging deadlock. (bsc#1159284)
- Python3.8 compatibility changes.
- Removes unresolved merge conflict in yumpkg module.
- Returns a the list of IPs filtered by the optional network list.
- Revert broken changes to slspath made on Salt 3000 (saltstack/salt#56341). (bsc#1170104)
- Sanitize grains loaded from roster_grains.json cache during 'state.pkg'.
- Various virt backports from 3000.2.
- zypperpkg: filter patterns that start with dot. (bsc#1171906)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-21"/>
	<updated date="2020-07-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1159284">SUSE bug 1159284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165572">SUSE bug 1165572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167437">SUSE bug 1167437</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168340">SUSE bug 1168340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169604">SUSE bug 1169604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170104">SUSE bug 1170104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170288">SUSE bug 1170288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171906">SUSE bug 1171906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172075">SUSE bug 1172075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173072">SUSE bug 1173072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174165">SUSE bug 1174165</bugzilla>
	<cve impact="important" cvss3="8.7/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-15750/">CVE-2018-15750</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15751/">CVE-2018-15751</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11651/">CVE-2020-11651</cve>
	<cve impact="critical" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11652/">CVE-2020-11652</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499359" comment="salt-api-3000-6.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499360" comment="salt-cloud-3000-6.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499361" comment="salt-fish-completion-3000-6.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499362" comment="salt-master-3000-6.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499363" comment="salt-proxy-3000-6.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499364" comment="salt-ssh-3000-6.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499365" comment="salt-standalone-formulas-configuration-3000-6.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499366" comment="salt-syndic-3000-6.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139017" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168994" ref_url="https://bugzilla.suse.com/1168994" source="BUGZILLA"/>
		<reference ref_id="1173812" ref_url="https://bugzilla.suse.com/1173812" source="BUGZILLA"/>
		<reference ref_id="1174463" ref_url="https://bugzilla.suse.com/1174463" source="BUGZILLA"/>
		<reference ref_id="1174570" ref_url="https://bugzilla.suse.com/1174570" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10713" ref_url="https://www.suse.com/security/cve/CVE-2020-10713/" source="CVE"/>
		<reference ref_id="CVE-2020-14308" ref_url="https://www.suse.com/security/cve/CVE-2020-14308/" source="CVE"/>
		<reference ref_id="CVE-2020-14309" ref_url="https://www.suse.com/security/cve/CVE-2020-14309/" source="CVE"/>
		<reference ref_id="CVE-2020-14310" ref_url="https://www.suse.com/security/cve/CVE-2020-14310/" source="CVE"/>
		<reference ref_id="CVE-2020-14311" ref_url="https://www.suse.com/security/cve/CVE-2020-14311/" source="CVE"/>
		<reference ref_id="CVE-2020-15706" ref_url="https://www.suse.com/security/cve/CVE-2020-15706/" source="CVE"/>
		<reference ref_id="CVE-2020-15707" ref_url="https://www.suse.com/security/cve/CVE-2020-15707/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2077-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007200.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

- CVE-2020-10713 (bsc#1168994)
- CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
- CVE-2020-15706 (bsc#1174463)
- CVE-2020-15707 (bsc#1174570)

- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-29"/>
	<updated date="2020-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168994">SUSE bug 1168994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173812">SUSE bug 1173812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174463">SUSE bug 1174463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174570">SUSE bug 1174570</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10713/">CVE-2020-10713</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14308/">CVE-2020-14308</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14309/">CVE-2020-14309</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14310/">CVE-2020-14310</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14311/">CVE-2020-14311</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15706/">CVE-2020-15706</cve>
	<cve impact="important" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15707/">CVE-2020-15707</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499367" comment="grub2-x86_64-xen-2.02-26.25.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139018" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 and postgresql12  (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1148643" ref_url="https://bugzilla.suse.com/1148643" source="BUGZILLA"/>
		<reference ref_id="1163985" ref_url="https://bugzilla.suse.com/1163985" source="BUGZILLA"/>
		<reference ref_id="1171924" ref_url="https://bugzilla.suse.com/1171924" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1720" ref_url="https://www.suse.com/security/cve/CVE-2020-1720/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007234.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 and postgresql12 fixes the following issues:

postgresql10 was updated to 10.13 (bsc#1171924).

  https://www.postgresql.org/about/news/2038/
  https://www.postgresql.org/docs/10/release-10-13.html

postgresql10 was updated to 10.12 (CVE-2020-1720, bsc#1163985)

- https://www.postgresql.org/about/news/2011/
- https://www.postgresql.org/docs/10/release-10-12.html

postgresql10 was updated to 10.11:

- https://www.postgresql.org/about/news/1994/
- https://www.postgresql.org/docs/10/release-10-11.html


postgresql12 was updated to 12.3 (bsc#1171924).

Bug Fixes and Improvements:

- Several fixes for GENERATED columns, including an issue where it was possible to crash or corrupt data in a table when the output of the generated column was the exact copy of a physical column on the table, e.g. if the expression called a function which could return its own input.
- Several fixes for ALTER TABLE, including ensuring the SET STORAGE directive is propagated to a table's indexes.
- Fix a potential race condition when using DROP OWNED BY while another session is deleting the same objects.
- Allow for a partition to be detached when it has inherited ROW triggers.
- Several fixes for REINDEX CONCURRENTLY, particularly with issues when a REINDEX CONCURRENTLY operation fails.
- Fix crash when COLLATE is applied to an uncollatable type in a partition bound expression.
- Fix performance regression in floating point overflow/underflow detection.
- Several fixes for full text search, particularly with phrase searching.
- Fix query-lifespan memory leak for a set-returning function used in a query's FROM clause.
- Several reporting fixes for the output of VACUUM VERBOSE.
- Allow input of type circle to accept the format (x,y),r, which is specified in the documentation.
- Allow for the get_bit() and set_bit() functions to not fail on bytea strings longer than 256MB.
- Avoid premature recycling of WAL segments during crash recovery, which could lead to WAL segments being recycled before being archived.
- Avoid attempting to fetch nonexistent WAL files from archive storage during recovery by skipping irrelevant timelines.
- Several fixes for logical replication and replication slots.
- Fix several race conditions in synchronous standby management, including one that occurred when changing the synchronous_standby_names setting.
- Several fixes for GSSAPI support, include a fix for a memory leak that occurred when using GSSAPI encryption.
- Ensure that members of the pg_read_all_stats role can read all statistics views.
- Fix performance regression in information_schema.triggers view.
- Fix memory leak in libpq when using sslmode=verify-full.
- Fix crash in psql when attempting to re-establish a failed connection.
- Allow tab-completion of the filename argument to \gx command in psql.
- Add pg_dump support for ALTER ... DEPENDS ON EXTENSION.
- Several other fixes for pg_dump, which include dumping comments on RLS policies and postponing restore of event triggers until the end.
- Ensure pg_basebackup generates valid tar files.
- pg_checksums skips tablespace subdirectories that belong to a different PostgreSQL major version
- Several Windows compatibility fixes

This update also contains timezone tzdata release 2020a for DST law changes in Morocco and the Canadian Yukon, plus historical corrections for Shanghai. The America/Godthab zone has been renamed to America/Nuuk to reflect current English usage ; however, the old name remains available as a compatibility link. This also updates initdb's list of known Windows time zone names to include recent additions.

For more details, check out:

-  https://www.postgresql.org/docs/12/release-12-3.html

Other fixes:

- Let postgresqlXX conflict with postgresql-noarch &lt; 12.0.1 to get
  a clean and complete cutover to the new packaging schema.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-06"/>
	<updated date="2020-08-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1148643">SUSE bug 1148643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163985">SUSE bug 1163985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171924">SUSE bug 1171924</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-1720/">CVE-2020-1720</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499368" comment="libecpg6-12.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499369" comment="postgresql-contrib-12.0.1-8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499370" comment="postgresql-devel-12.0.1-8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499371" comment="postgresql-docs-12.0.1-8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499372" comment="postgresql-plperl-12.0.1-8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499373" comment="postgresql-plpython-12.0.1-8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499374" comment="postgresql-pltcl-12.0.1-8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499375" comment="postgresql-server-12.0.1-8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499376" comment="postgresql-server-devel-12.0.1-8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499377" comment="postgresql12-contrib-12.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499378" comment="postgresql12-devel-12.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499379" comment="postgresql12-docs-12.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499380" comment="postgresql12-plperl-12.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499381" comment="postgresql12-plpython-12.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499382" comment="postgresql12-pltcl-12.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499383" comment="postgresql12-server-12.3-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499384" comment="postgresql12-server-devel-12.3-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139019" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172356" ref_url="https://bugzilla.suse.com/1172356" source="BUGZILLA"/>
		<reference ref_id="1174543" ref_url="https://bugzilla.suse.com/1174543" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:2158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007236.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- bsc#1174543 - secure boot related fixes
- bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next 
    reboot while it should be live attached
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-06"/>
	<updated date="2020-08-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172356">SUSE bug 1172356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174543">SUSE bug 1174543</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499385" comment="xen-4.12.3_06-3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499386" comment="xen-devel-4.12.3_06-3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499387" comment="xen-tools-4.12.3_06-3.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139020" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1161883" ref_url="https://bugzilla.suse.com/1161883" source="BUGZILLA"/>
		<reference ref_id="1167007" ref_url="https://bugzilla.suse.com/1167007" source="BUGZILLA"/>
		<reference ref_id="1171946" ref_url="https://bugzilla.suse.com/1171946" source="BUGZILLA"/>
		<reference ref_id="1172052" ref_url="https://bugzilla.suse.com/1172052" source="BUGZILLA"/>
		<reference ref_id="1174458" ref_url="https://bugzilla.suse.com/1174458" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14339" ref_url="https://www.suse.com/security/cve/CVE-2020-14339/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2237-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007268.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:

- CVE-2020-14339: Don't leak /dev/mapper/control into QEMU. Use
  ioctl's to obtain the dependency tree of disks and drop use of
  libdevmapper. - bsc#1161883, bsc#1174458
- qemu: Setup emulator thread and cpuset.mems before exec - bsc#1171946
- libxl: Normalize MAC address in device conf on netdev hotplug - bsc#1172052
- spec: Use a functional requires instead of explicit version
  requires for the new memory-related libxl APIs - bsc#1167007
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-14"/>
	<updated date="2020-08-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1161883">SUSE bug 1161883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167007">SUSE bug 1167007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171946">SUSE bug 1171946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172052">SUSE bug 1172052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174458">SUSE bug 1174458</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14339/">CVE-2020-14339</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499388" comment="libvirt-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499389" comment="libvirt-admin-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499390" comment="libvirt-bash-completion-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499391" comment="libvirt-client-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499392" comment="libvirt-daemon-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499393" comment="libvirt-daemon-config-network-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499394" comment="libvirt-daemon-config-nwfilter-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499395" comment="libvirt-daemon-driver-interface-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499396" comment="libvirt-daemon-driver-libxl-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499397" comment="libvirt-daemon-driver-lxc-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499398" comment="libvirt-daemon-driver-network-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499399" comment="libvirt-daemon-driver-nodedev-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499400" comment="libvirt-daemon-driver-nwfilter-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499401" comment="libvirt-daemon-driver-qemu-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499402" comment="libvirt-daemon-driver-secret-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499403" comment="libvirt-daemon-driver-storage-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499404" comment="libvirt-daemon-driver-storage-core-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499405" comment="libvirt-daemon-driver-storage-disk-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499406" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499407" comment="libvirt-daemon-driver-storage-logical-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499408" comment="libvirt-daemon-driver-storage-mpath-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499409" comment="libvirt-daemon-driver-storage-rbd-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499410" comment="libvirt-daemon-driver-storage-scsi-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499411" comment="libvirt-daemon-hooks-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499412" comment="libvirt-daemon-lxc-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499413" comment="libvirt-daemon-qemu-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499414" comment="libvirt-daemon-xen-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499415" comment="libvirt-devel-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499416" comment="libvirt-doc-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499417" comment="libvirt-lock-sanlock-5.1.0-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499418" comment="libvirt-nss-5.1.0-8.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139021" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174922" ref_url="https://bugzilla.suse.com/1174922" source="BUGZILLA"/>
		<reference ref_id="1174923" ref_url="https://bugzilla.suse.com/1174923" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12673" ref_url="https://www.suse.com/security/cve/CVE-2020-12673/" source="CVE"/>
		<reference ref_id="CVE-2020-12674" ref_url="https://www.suse.com/security/cve/CVE-2020-12674/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2267-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007273.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 fixes the following issues:

- CVE-2020-12673: improper implementation of NTLM does not check message buffer size (bsc#1174922).
- CVE-2020-12674: improper implementation of RPA mechanism (bsc#1174923).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-18"/>
	<updated date="2020-08-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174922">SUSE bug 1174922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174923">SUSE bug 1174923</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12673/">CVE-2020-12673</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12674/">CVE-2020-12674</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499419" comment="dovecot23-2.3.10-16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499420" comment="dovecot23-backend-mysql-2.3.10-16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499421" comment="dovecot23-backend-pgsql-2.3.10-16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499422" comment="dovecot23-backend-sqlite-2.3.10-16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499423" comment="dovecot23-devel-2.3.10-16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499424" comment="dovecot23-fts-2.3.10-16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499425" comment="dovecot23-fts-lucene-2.3.10-16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499426" comment="dovecot23-fts-solr-2.3.10-16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499427" comment="dovecot23-fts-squat-2.3.10-16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139022" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175193" ref_url="https://bugzilla.suse.com/1175193" source="BUGZILLA"/>
		<reference ref_id="1175194" ref_url="https://bugzilla.suse.com/1175194" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14349" ref_url="https://www.suse.com/security/cve/CVE-2020-14349/" source="CVE"/>
		<reference ref_id="CVE-2020-14350" ref_url="https://www.suse.com/security/cve/CVE-2020-14350/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2271-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007280.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

- update to 12.4:
  * CVE-2020-14349, bsc#1175193: Set a secure search_path in
    logical replication walsenders and apply workers
  * CVE-2020-14350, bsc#1175194: Make contrib modules' installation
    scripts more secure.
  * https://www.postgresql.org/docs/12/release-12-4.html
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-18"/>
	<updated date="2020-08-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175193">SUSE bug 1175193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175194">SUSE bug 1175194</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14349/">CVE-2020-14349</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14350/">CVE-2020-14350</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499428" comment="libecpg6-12.4-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499429" comment="postgresql12-contrib-12.4-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499430" comment="postgresql12-devel-12.4-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499431" comment="postgresql12-docs-12.4-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499432" comment="postgresql12-plperl-12.4-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499433" comment="postgresql12-plpython-12.4-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499434" comment="postgresql12-pltcl-12.4-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499435" comment="postgresql12-server-12.4-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499436" comment="postgresql12-server-devel-12.4-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139023" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172745" ref_url="https://bugzilla.suse.com/1172745" source="BUGZILLA"/>
		<reference ref_id="1174421" ref_url="https://bugzilla.suse.com/1174421" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15705" ref_url="https://www.suse.com/security/cve/CVE-2020-15705/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007293.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

- CVE-2020-15705: Fail kernel validation without shim protocol (bsc#1174421).
- Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery (bsc#1172745).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-25"/>
	<updated date="2020-08-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172745">SUSE bug 1172745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174421">SUSE bug 1174421</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15705/">CVE-2020-15705</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499437" comment="grub2-x86_64-xen-2.02-26.33.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139024" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175070" ref_url="https://bugzilla.suse.com/1175070" source="BUGZILLA"/>
		<reference ref_id="1175071" ref_url="https://bugzilla.suse.com/1175071" source="BUGZILLA"/>
		<reference ref_id="1175074" ref_url="https://bugzilla.suse.com/1175074" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11984" ref_url="https://www.suse.com/security/cve/CVE-2020-11984/" source="CVE"/>
		<reference ref_id="CVE-2020-11993" ref_url="https://www.suse.com/security/cve/CVE-2020-11993/" source="CVE"/>
		<reference ref_id="CVE-2020-9490" ref_url="https://www.suse.com/security/cve/CVE-2020-9490/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007308.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2020-9490: Fixed a crash caused by a specially crafted value for the 'Cache-Digest' header in a HTTP/2 request (bsc#1175071).
- CVE-2020-11984: Fixed an information disclosure bug in mod_proxy_uwsgi (bsc#1175074).
- CVE-2020-11993: When trace/debug was enabled for the HTTP/2 module logging statements were made on the wrong connection (bsc#1175070).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-26"/>
	<updated date="2020-08-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175070">SUSE bug 1175070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175071">SUSE bug 1175071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175074">SUSE bug 1175074</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11984/">CVE-2020-11984</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11993/">CVE-2020-11993</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-9490/">CVE-2020-9490</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499438" comment="apache2-2.4.33-3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499439" comment="apache2-devel-2.4.33-3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499440" comment="apache2-doc-2.4.33-3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499441" comment="apache2-prefork-2.4.33-3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499442" comment="apache2-utils-2.4.33-3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499443" comment="apache2-worker-2.4.33-3.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139025" version="1" class="patch">
	<metadata>
		<title>Security update for graphviz (Low)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1093447" ref_url="https://bugzilla.suse.com/1093447" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10196" ref_url="https://www.suse.com/security/cve/CVE-2018-10196/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007306.html" source="SUSE-SU"/>
		<description>
This update for graphviz fixes the following issues:

- CVE-2018-10196: Fixed a null dereference in rebuild_vlis (bsc#1093447).	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-26"/>
	<updated date="2020-08-26"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1093447">SUSE bug 1093447</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10196/">CVE-2018-10196</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499444" comment="graphviz-tcl-2.40.1-6.6.8 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139026" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175193" ref_url="https://bugzilla.suse.com/1175193" source="BUGZILLA"/>
		<reference ref_id="1175194" ref_url="https://bugzilla.suse.com/1175194" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14349" ref_url="https://www.suse.com/security/cve/CVE-2020-14349/" source="CVE"/>
		<reference ref_id="CVE-2020-14350" ref_url="https://www.suse.com/security/cve/CVE-2020-14350/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007312.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

- update to 10.14:
  * CVE-2020-14349, bsc#1175193: Set a secure search_path in
    logical replication walsenders and apply workers
  * CVE-2020-14350, bsc#1175194: Make contrib modules' installation
    scripts more secure.
  * https://www.postgresql.org/docs/10/release-10-14.html
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-27"/>
	<updated date="2020-08-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175193">SUSE bug 1175193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175194">SUSE bug 1175194</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14349/">CVE-2020-14349</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14350/">CVE-2020-14350</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499445" comment="postgresql10-contrib-10.14-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499446" comment="postgresql10-devel-10.14-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499447" comment="postgresql10-docs-10.14-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499448" comment="postgresql10-plperl-10.14-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499449" comment="postgresql10-plpython-10.14-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499450" comment="postgresql10-pltcl-10.14-8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499451" comment="postgresql10-server-10.14-8.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139027" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173455" ref_url="https://bugzilla.suse.com/1173455" source="BUGZILLA"/>
		<reference ref_id="1175664" ref_url="https://bugzilla.suse.com/1175664" source="BUGZILLA"/>
		<reference ref_id="1175665" ref_url="https://bugzilla.suse.com/1175665" source="BUGZILLA"/>
		<reference ref_id="1175671" ref_url="https://bugzilla.suse.com/1175671" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15049" ref_url="https://www.suse.com/security/cve/CVE-2020-15049/" source="CVE"/>
		<reference ref_id="CVE-2020-15810" ref_url="https://www.suse.com/security/cve/CVE-2020-15810/" source="CVE"/>
		<reference ref_id="CVE-2020-15811" ref_url="https://www.suse.com/security/cve/CVE-2020-15811/" source="CVE"/>
		<reference ref_id="CVE-2020-24606" ref_url="https://www.suse.com/security/cve/CVE-2020-24606/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2442-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007330.html" source="SUSE-SU"/>
		<description>
This update for squid fixes the following issues:

squid was updated to version 4.13:

- CVE-2020-24606: Fix livelocking in peerDigestHandleReply (bsc#1175671).
- CVE-2020-15811: Improve Transfer-Encoding handling (bsc#1175665).
- CVE-2020-15810: Enforce token characters for field-name (bsc#1175664).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-02"/>
	<updated date="2020-09-02"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1173455">SUSE bug 1173455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175664">SUSE bug 1175664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175665">SUSE bug 1175665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175671">SUSE bug 1175671</bugzilla>
	<cve impact="important" cvss3="8.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15049/">CVE-2020-15049</cve>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15810/">CVE-2020-15810</cve>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15811/">CVE-2020-15811</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-24606/">CVE-2020-24606</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499452" comment="squid-4.13-5.23.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139028" version="1" class="patch">
	<metadata>
		<title>Security update for ovmf (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175476" ref_url="https://bugzilla.suse.com/1175476" source="BUGZILLA"/>
		<reference ref_id="1175674" ref_url="https://bugzilla.suse.com/1175674" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14562" ref_url="https://www.suse.com/security/cve/CVE-2019-14562/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007455.html" source="SUSE-SU"/>
		<description>
This update for ovmf fixes the following issues:

- CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler (bsc#1175476).
- Use openSUSE CA for the opensuse flavor (bsc#1175674) 	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-22"/>
	<updated date="2020-09-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175476">SUSE bug 1175476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175674">SUSE bug 1175674</bugzilla>
	<cve impact="low" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14562/">CVE-2019-14562</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499453" comment="ovmf-2017+git1510945757.b2662641d5-5.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499454" comment="ovmf-tools-2017+git1510945757.b2662641d5-5.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499455" comment="qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499456" comment="qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139029" version="1" class="patch">
	<metadata>
		<title>Security update for dpdk (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1176590" ref_url="https://bugzilla.suse.com/1176590" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14374" ref_url="https://www.suse.com/security/cve/CVE-2020-14374/" source="CVE"/>
		<reference ref_id="CVE-2020-14375" ref_url="https://www.suse.com/security/cve/CVE-2020-14375/" source="CVE"/>
		<reference ref_id="CVE-2020-14376" ref_url="https://www.suse.com/security/cve/CVE-2020-14376/" source="CVE"/>
		<reference ref_id="CVE-2020-14377" ref_url="https://www.suse.com/security/cve/CVE-2020-14377/" source="CVE"/>
		<reference ref_id="CVE-2020-14378" ref_url="https://www.suse.com/security/cve/CVE-2020-14378/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007491.html" source="SUSE-SU"/>
		<description>
This update for dpdk fixes the following issues:

- dpdk was updated to 18.11.9. For a list of fixes check:
  - CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378: Fixed multiple issues where a malicious guest could 
    harm the host using vhost crypto, including executing code in host (VM Escape), reading host application memory space to guest 
    and causing partially denial of service in the host(bsc#1176590).
For a list of fixes check:    
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-28"/>
	<updated date="2020-09-28"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1176590">SUSE bug 1176590</bugzilla>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14374/">CVE-2020-14374</cve>
	<cve impact="critical" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14375/">CVE-2020-14375</cve>
	<cve impact="critical" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14376/">CVE-2020-14376</cve>
	<cve impact="critical" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14377/">CVE-2020-14377</cve>
	<cve impact="critical" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14378/">CVE-2020-14378</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499457" comment="dpdk-18.11.9-4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499458" comment="dpdk-devel-18.11.9-4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499459" comment="dpdk-kmp-default-18.11.9_k4.12.14_197.56-4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499460" comment="dpdk-tools-18.11.9-4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499461" comment="libdpdk-18_11-18.11.9-4.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139030" version="1" class="patch">
	<metadata>
		<title>Security update for rmt-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1141122" ref_url="https://bugzilla.suse.com/1141122" source="BUGZILLA"/>
		<reference ref_id="1157119" ref_url="https://bugzilla.suse.com/1157119" source="BUGZILLA"/>
		<reference ref_id="1160673" ref_url="https://bugzilla.suse.com/1160673" source="BUGZILLA"/>
		<reference ref_id="1160922" ref_url="https://bugzilla.suse.com/1160922" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18904" ref_url="https://www.suse.com/security/cve/CVE-2019-18904/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0278-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006422.html" source="SUSE-SU"/>
		<description>
This update for rmt-server to version 2.5.2 fixes the following issues:

Security issue fixed:

- CVE-2019-18904: Fixed a denial of service in the offline migration (bsc#1160922).

Non-security issue fixed:

- Relaxed systemd units dependencies (bsc#1160673)
- Added more verbose error reporting for SCC API errors (bsc#1157119)
- Fixed system listing when architecture is not well referenced (bsc#1141122)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-31"/>
	<updated date="2020-01-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1141122">SUSE bug 1141122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157119">SUSE bug 1157119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160673">SUSE bug 1160673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160922">SUSE bug 1160922</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18904/">CVE-2019-18904</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499462" comment="rmt-server-2.5.2-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499463" comment="rmt-server-config-2.5.2-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139031" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1176339" ref_url="https://bugzilla.suse.com/1176339" source="BUGZILLA"/>
		<reference ref_id="1176341" ref_url="https://bugzilla.suse.com/1176341" source="BUGZILLA"/>
		<reference ref_id="1176343" ref_url="https://bugzilla.suse.com/1176343" source="BUGZILLA"/>
		<reference ref_id="1176344" ref_url="https://bugzilla.suse.com/1176344" source="BUGZILLA"/>
		<reference ref_id="1176345" ref_url="https://bugzilla.suse.com/1176345" source="BUGZILLA"/>
		<reference ref_id="1176346" ref_url="https://bugzilla.suse.com/1176346" source="BUGZILLA"/>
		<reference ref_id="1176347" ref_url="https://bugzilla.suse.com/1176347" source="BUGZILLA"/>
		<reference ref_id="1176348" ref_url="https://bugzilla.suse.com/1176348" source="BUGZILLA"/>
		<reference ref_id="1176349" ref_url="https://bugzilla.suse.com/1176349" source="BUGZILLA"/>
		<reference ref_id="1176350" ref_url="https://bugzilla.suse.com/1176350" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25595" ref_url="https://www.suse.com/security/cve/CVE-2020-25595/" source="CVE"/>
		<reference ref_id="CVE-2020-25596" ref_url="https://www.suse.com/security/cve/CVE-2020-25596/" source="CVE"/>
		<reference ref_id="CVE-2020-25597" ref_url="https://www.suse.com/security/cve/CVE-2020-25597/" source="CVE"/>
		<reference ref_id="CVE-2020-25598" ref_url="https://www.suse.com/security/cve/CVE-2020-25598/" source="CVE"/>
		<reference ref_id="CVE-2020-25599" ref_url="https://www.suse.com/security/cve/CVE-2020-25599/" source="CVE"/>
		<reference ref_id="CVE-2020-25600" ref_url="https://www.suse.com/security/cve/CVE-2020-25600/" source="CVE"/>
		<reference ref_id="CVE-2020-25601" ref_url="https://www.suse.com/security/cve/CVE-2020-25601/" source="CVE"/>
		<reference ref_id="CVE-2020-25602" ref_url="https://www.suse.com/security/cve/CVE-2020-25602/" source="CVE"/>
		<reference ref_id="CVE-2020-25603" ref_url="https://www.suse.com/security/cve/CVE-2020-25603/" source="CVE"/>
		<reference ref_id="CVE-2020-25604" ref_url="https://www.suse.com/security/cve/CVE-2020-25604/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007503.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2020-25602: Fixed an issue where there was a crash when
  handling guest access to MSR_MISC_ENABLE was thrown (bsc#1176339,XSA-333)
- CVE-2020-25598: Added a missing unlock in XENMEM_acquire_resource error path
  (bsc#1176341,XSA-334)
- CVE-2020-25604: Fixed a race condition when migrating timers between x86 
  HVM vCPU-s (bsc#1176343,XSA-336)
- CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337)
- CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338)
- CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339)
- CVE-2020-25603: Fixed an issue due to  missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340)
- CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342)
- CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343)
- CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)	  

- Various bug fixes (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-29"/>
	<updated date="2020-09-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176339">SUSE bug 1176339</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176341">SUSE bug 1176341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176343">SUSE bug 1176343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176344">SUSE bug 1176344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176345">SUSE bug 1176345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176346">SUSE bug 1176346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176347">SUSE bug 1176347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176348">SUSE bug 1176348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176349">SUSE bug 1176349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176350">SUSE bug 1176350</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25595/">CVE-2020-25595</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25596/">CVE-2020-25596</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25597/">CVE-2020-25597</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25598/">CVE-2020-25598</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25599/">CVE-2020-25599</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25600/">CVE-2020-25600</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25601/">CVE-2020-25601</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25602/">CVE-2020-25602</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25603/">CVE-2020-25603</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25604/">CVE-2020-25604</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499464" comment="xen-4.12.3_08-3.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499465" comment="xen-devel-4.12.3_08-3.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499466" comment="xen-tools-4.12.3_08-3.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139032" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1100369" ref_url="https://bugzilla.suse.com/1100369" source="BUGZILLA"/>
		<reference ref_id="1109160" ref_url="https://bugzilla.suse.com/1109160" source="BUGZILLA"/>
		<reference ref_id="1118367" ref_url="https://bugzilla.suse.com/1118367" source="BUGZILLA"/>
		<reference ref_id="1118368" ref_url="https://bugzilla.suse.com/1118368" source="BUGZILLA"/>
		<reference ref_id="1128220" ref_url="https://bugzilla.suse.com/1128220" source="BUGZILLA"/>
		<reference ref_id="1156205" ref_url="https://bugzilla.suse.com/1156205" source="BUGZILLA"/>
		<reference ref_id="1157051" ref_url="https://bugzilla.suse.com/1157051" source="BUGZILLA"/>
		<reference ref_id="1161168" ref_url="https://bugzilla.suse.com/1161168" source="BUGZILLA"/>
		<reference ref_id="1170667" ref_url="https://bugzilla.suse.com/1170667" source="BUGZILLA"/>
		<reference ref_id="1170713" ref_url="https://bugzilla.suse.com/1170713" source="BUGZILLA"/>
		<reference ref_id="1171313" ref_url="https://bugzilla.suse.com/1171313" source="BUGZILLA"/>
		<reference ref_id="1171740" ref_url="https://bugzilla.suse.com/1171740" source="BUGZILLA"/>
		<reference ref_id="1172958" ref_url="https://bugzilla.suse.com/1172958" source="BUGZILLA"/>
		<reference ref_id="1173307" ref_url="https://bugzilla.suse.com/1173307" source="BUGZILLA"/>
		<reference ref_id="1173311" ref_url="https://bugzilla.suse.com/1173311" source="BUGZILLA"/>
		<reference ref_id="1173983" ref_url="https://bugzilla.suse.com/1173983" source="BUGZILLA"/>
		<reference ref_id="1175443" ref_url="https://bugzilla.suse.com/1175443" source="BUGZILLA"/>
		<reference ref_id="1176092" ref_url="https://bugzilla.suse.com/1176092" source="BUGZILLA"/>
		<reference ref_id="1176674" ref_url="https://bugzilla.suse.com/1176674" source="BUGZILLA"/>
		<reference ref_id="906079" ref_url="https://bugzilla.suse.com/906079" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-3136" ref_url="https://www.suse.com/security/cve/CVE-2017-3136/" source="CVE"/>
		<reference ref_id="CVE-2018-5741" ref_url="https://www.suse.com/security/cve/CVE-2018-5741/" source="CVE"/>
		<reference ref_id="CVE-2019-6477" ref_url="https://www.suse.com/security/cve/CVE-2019-6477/" source="CVE"/>
		<reference ref_id="CVE-2020-8616" ref_url="https://www.suse.com/security/cve/CVE-2020-8616/" source="CVE"/>
		<reference ref_id="CVE-2020-8617" ref_url="https://www.suse.com/security/cve/CVE-2020-8617/" source="CVE"/>
		<reference ref_id="CVE-2020-8618" ref_url="https://www.suse.com/security/cve/CVE-2020-8618/" source="CVE"/>
		<reference ref_id="CVE-2020-8619" ref_url="https://www.suse.com/security/cve/CVE-2020-8619/" source="CVE"/>
		<reference ref_id="CVE-2020-8620" ref_url="https://www.suse.com/security/cve/CVE-2020-8620/" source="CVE"/>
		<reference ref_id="CVE-2020-8621" ref_url="https://www.suse.com/security/cve/CVE-2020-8621/" source="CVE"/>
		<reference ref_id="CVE-2020-8622" ref_url="https://www.suse.com/security/cve/CVE-2020-8622/" source="CVE"/>
		<reference ref_id="CVE-2020-8623" ref_url="https://www.suse.com/security/cve/CVE-2020-8623/" source="CVE"/>
		<reference ref_id="CVE-2020-8624" ref_url="https://www.suse.com/security/cve/CVE-2020-8624/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2914-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007552.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

BIND was upgraded to version 9.16.6:

Note:

- bind is now more strict in regards to DNSSEC. If queries are not working,
  check for DNSSEC issues. For instance, if bind is used in a namserver
  forwarder chain, the forwarding DNS servers must support DNSSEC.

Fixing security issues:

- CVE-2020-8616: Further limit the number of queries that can be triggered from
  a request.  Root and TLD servers are no longer exempt
  from max-recursion-queries.  Fetches for missing name server. (bsc#1171740)
  Address records are limited to 4 for any domain.
- CVE-2020-8617: Replaying a TSIG BADTIME response as a request could trigger an
  assertion failure. (bsc#1171740)
- CVE-2019-6477: Fixed an issue where TCP-pipelined queries could bypass 
  the tcp-clients limit (bsc#1157051).
- CVE-2018-5741: Fixed the documentation (bsc#1109160).
- CVE-2020-8618: It was possible to trigger an INSIST when determining
  whether a record would fit into a TCP message buffer (bsc#1172958).
- CVE-2020-8619: It was possible to trigger an INSIST in
  lib/dns/rbtdb.c:new_reference() with a particular zone content
  and query patterns (bsc#1172958).
- CVE-2020-8624: 'update-policy' rules of type 'subdomain' were
  incorrectly treated as 'zonesub' rules, which allowed
  keys used in 'subdomain' rules to update names outside
  of the specified subdomains. The problem was fixed by
  making sure 'subdomain' rules are again processed as
  described in the ARM (bsc#1175443).
- CVE-2020-8623: When BIND 9 was compiled with native PKCS#11 support, it
  was possible to trigger an assertion failure in code
  determining the number of bits in the PKCS#11 RSA public
  key with a specially crafted packet (bsc#1175443).
- CVE-2020-8621: named could crash in certain query resolution scenarios
  where QNAME minimization and forwarding were both
  enabled (bsc#1175443).
- CVE-2020-8620: It was possible to trigger an assertion failure by
  sending a specially crafted large TCP DNS message (bsc#1175443).
- CVE-2020-8622: It was possible to trigger an assertion failure when
  verifying the response to a TSIG-signed request (bsc#1175443).

Other issues fixed:

- Add engine support to OpenSSL EdDSA implementation.
- Add engine support to OpenSSL ECDSA implementation.
- Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
- Warn about AXFR streams with inconsistent message IDs.
- Make ISC rwlock implementation the default again.
- Fixed issues when using cookie-secrets for AES and SHA2 (bsc#1161168)
- Installed the default files in /var/lib/named and created 
  chroot environment on systems using transactional-updates (bsc#1100369, fate#325524)
- Fixed an issue where bind was not working in FIPS mode (bsc#906079).
- Fixed dependency issues (bsc#1118367 and bsc#1118368).
- GeoIP support is now discontinued, now GeoIP2 is used(bsc#1156205).
- Fixed an issue with FIPS (bsc#1128220).
- The liblwres library is discontinued upstream and is no longer included.
- Added service dependency on NTP to make sure the clock is accurate when bind is starts (bsc#1170667, bsc#1170713).
- Reject DS records at the zone apex when loading master files. Log but otherwise ignore attempts to add DS records at the zone apex via UPDATE.
- The default value of 'max-stale-ttl' has been changed from 1 week to 12 hours.
- Zone timers are now exported via statistics channel.
- The 'primary' and 'secondary' keywords, when used as parameters for 'check-names', were not processed correctly and were being ignored.
- 'rndc dnstap -roll &lt;value&gt;' did not limit the number of saved files to &lt;value&gt;.
- Add 'rndc dnssec -status' command.
- Addressed a couple of situations where named could crash.
- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the 'named' group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]
- Added '/etc/bind.keys' to NAMED_CONF_INCLUDE_FILES in /etc/sysconfig/named to suppress warning message re missing file (bsc#1173983).
- Removed '-r /dev/urandom' from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  (bsc#1173311, bsc#1176674, bsc#1170713)
- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313]
- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).
- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-13"/>
	<updated date="2020-10-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1100369">SUSE bug 1100369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109160">SUSE bug 1109160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118367">SUSE bug 1118367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118368">SUSE bug 1118368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128220">SUSE bug 1128220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156205">SUSE bug 1156205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157051">SUSE bug 1157051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161168">SUSE bug 1161168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170667">SUSE bug 1170667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170713">SUSE bug 1170713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171313">SUSE bug 1171313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171740">SUSE bug 1171740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172958">SUSE bug 1172958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173307">SUSE bug 1173307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173311">SUSE bug 1173311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173983">SUSE bug 1173983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175443">SUSE bug 1175443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176092">SUSE bug 1176092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176674">SUSE bug 1176674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/906079">SUSE bug 906079</bugzilla>
	<cve impact="important" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2017-3136/">CVE-2017-3136</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-5741/">CVE-2018-5741</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-6477/">CVE-2019-6477</cve>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8616/">CVE-2020-8616</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8617/">CVE-2020-8617</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8618/">CVE-2020-8618</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8619/">CVE-2020-8619</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8620/">CVE-2020-8620</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8621/">CVE-2020-8621</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8622/">CVE-2020-8622</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8623/">CVE-2020-8623</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8624/">CVE-2020-8624</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499467" comment="bind-9.16.6-12.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499468" comment="bind-chrootenv-9.16.6-12.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499469" comment="bind-doc-9.16.6-12.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139033" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174955" ref_url="https://bugzilla.suse.com/1174955" source="BUGZILLA"/>
		<reference ref_id="1175465" ref_url="https://bugzilla.suse.com/1175465" source="BUGZILLA"/>
		<reference ref_id="1175574" ref_url="https://bugzilla.suse.com/1175574" source="BUGZILLA"/>
		<reference ref_id="1176430" ref_url="https://bugzilla.suse.com/1176430" source="BUGZILLA"/>
		<reference ref_id="1177155" ref_url="https://bugzilla.suse.com/1177155" source="BUGZILLA"/>
		<reference ref_id="1177480" ref_url="https://bugzilla.suse.com/1177480" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15708" ref_url="https://www.suse.com/security/cve/CVE-2020-15708/" source="CVE"/>
		<reference ref_id="CVE-2020-25637" ref_url="https://www.suse.com/security/cve/CVE-2020-25637/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3037-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007626.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:
	  
- CVE-2020-15708: Added a  note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955).
- CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155).
- qemu: Adjust max memlock on mdev hotplug (bsc#1177480).
- Xen: Don't add dom0 twice on driver reload (bsc#1176430).
- virdevmapper: Handle kernel without device-mapper support (bsc#1175465).
- Fixed an issue where building was failing (bsc#1175574).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-26"/>
	<updated date="2020-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174955">SUSE bug 1174955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175465">SUSE bug 1175465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175574">SUSE bug 1175574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176430">SUSE bug 1176430</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177155">SUSE bug 1177155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177480">SUSE bug 1177480</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15708/">CVE-2020-15708</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25637/">CVE-2020-25637</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499470" comment="libvirt-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499471" comment="libvirt-admin-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499472" comment="libvirt-bash-completion-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499473" comment="libvirt-client-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499474" comment="libvirt-daemon-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499475" comment="libvirt-daemon-config-network-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499476" comment="libvirt-daemon-config-nwfilter-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499477" comment="libvirt-daemon-driver-interface-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499478" comment="libvirt-daemon-driver-libxl-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499479" comment="libvirt-daemon-driver-lxc-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499480" comment="libvirt-daemon-driver-network-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499481" comment="libvirt-daemon-driver-nodedev-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499482" comment="libvirt-daemon-driver-nwfilter-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499483" comment="libvirt-daemon-driver-qemu-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499484" comment="libvirt-daemon-driver-secret-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499485" comment="libvirt-daemon-driver-storage-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499486" comment="libvirt-daemon-driver-storage-core-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499487" comment="libvirt-daemon-driver-storage-disk-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499488" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499489" comment="libvirt-daemon-driver-storage-logical-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499490" comment="libvirt-daemon-driver-storage-mpath-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499491" comment="libvirt-daemon-driver-storage-rbd-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499492" comment="libvirt-daemon-driver-storage-scsi-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499493" comment="libvirt-daemon-hooks-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499494" comment="libvirt-daemon-lxc-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499495" comment="libvirt-daemon-qemu-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499496" comment="libvirt-daemon-xen-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499497" comment="libvirt-devel-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499498" comment="libvirt-doc-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499499" comment="libvirt-lock-sanlock-5.1.0-8.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499500" comment="libvirt-nss-5.1.0-8.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139034" version="1" class="patch">
	<metadata>
		<title>Security update for virt-bootstrap (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1140750" ref_url="https://bugzilla.suse.com/1140750" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13314" ref_url="https://www.suse.com/security/cve/CVE-2019-13314/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3045-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007629.html" source="SUSE-SU"/>
		<description>
This update for virt-bootstrap fixes the following issues:

Security issue fixed:

- CVE-2019-13314: Allow providing the container's root password using a file (bsc#1140750).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-27"/>
	<updated date="2020-10-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1140750">SUSE bug 1140750</bugzilla>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-13314/">CVE-2019-13314</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499501" comment="python3-virt-bootstrap-1.0.0-5.3.124 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139035" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177409" ref_url="https://bugzilla.suse.com/1177409" source="BUGZILLA"/>
		<reference ref_id="1177412" ref_url="https://bugzilla.suse.com/1177412" source="BUGZILLA"/>
		<reference ref_id="1177413" ref_url="https://bugzilla.suse.com/1177413" source="BUGZILLA"/>
		<reference ref_id="1177414" ref_url="https://bugzilla.suse.com/1177414" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27670" ref_url="https://www.suse.com/security/cve/CVE-2020-27670/" source="CVE"/>
		<reference ref_id="CVE-2020-27671" ref_url="https://www.suse.com/security/cve/CVE-2020-27671/" source="CVE"/>
		<reference ref_id="CVE-2020-27672" ref_url="https://www.suse.com/security/cve/CVE-2020-27672/" source="CVE"/>
		<reference ref_id="CVE-2020-27673" ref_url="https://www.suse.com/security/cve/CVE-2020-27673/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3051-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007635.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- bsc#1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286)
- bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345)
- bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346)
- bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-27"/>
	<updated date="2020-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177409">SUSE bug 1177409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177412">SUSE bug 1177412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177413">SUSE bug 1177413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177414">SUSE bug 1177414</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27670/">CVE-2020-27670</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27671/">CVE-2020-27671</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27672/">CVE-2020-27672</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27673/">CVE-2020-27673</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499502" comment="xen-4.12.3_10-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499503" comment="xen-devel-4.12.3_10-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499504" comment="xen-tools-4.12.3_10-3.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139036" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175070" ref_url="https://bugzilla.suse.com/1175070" source="BUGZILLA"/>
		<reference ref_id="1175071" ref_url="https://bugzilla.suse.com/1175071" source="BUGZILLA"/>
		<reference ref_id="1178074" ref_url="https://bugzilla.suse.com/1178074" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11993" ref_url="https://www.suse.com/security/cve/CVE-2020-11993/" source="CVE"/>
		<reference ref_id="CVE-2020-9490" ref_url="https://www.suse.com/security/cve/CVE-2020-9490/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007655.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- Enables the patch for CVE-2020-11993 and CVE-2020-9490. The patch was included but 
  not applied in the previous update. (bsc#1178074)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-28"/>
	<updated date="2020-10-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175070">SUSE bug 1175070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175071">SUSE bug 1175071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178074">SUSE bug 1178074</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11993/">CVE-2020-11993</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-9490/">CVE-2020-9490</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499505" comment="apache2-2.4.33-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499506" comment="apache2-devel-2.4.33-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499507" comment="apache2-doc-2.4.33-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499508" comment="apache2-prefork-2.4.33-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499509" comment="apache2-utils-2.4.33-3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499510" comment="apache2-worker-2.4.33-3.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139037" version="1" class="patch">
	<metadata>
		<title>Security update for rmt-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172177" ref_url="https://bugzilla.suse.com/1172177" source="BUGZILLA"/>
		<reference ref_id="1172182" ref_url="https://bugzilla.suse.com/1172182" source="BUGZILLA"/>
		<reference ref_id="1172184" ref_url="https://bugzilla.suse.com/1172184" source="BUGZILLA"/>
		<reference ref_id="1172186" ref_url="https://bugzilla.suse.com/1172186" source="BUGZILLA"/>
		<reference ref_id="1173351" ref_url="https://bugzilla.suse.com/1173351" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16770" ref_url="https://www.suse.com/security/cve/CVE-2019-16770/" source="CVE"/>
		<reference ref_id="CVE-2019-5418" ref_url="https://www.suse.com/security/cve/CVE-2019-5418/" source="CVE"/>
		<reference ref_id="CVE-2019-5419" ref_url="https://www.suse.com/security/cve/CVE-2019-5419/" source="CVE"/>
		<reference ref_id="CVE-2019-5420" ref_url="https://www.suse.com/security/cve/CVE-2019-5420/" source="CVE"/>
		<reference ref_id="CVE-2020-11076" ref_url="https://www.suse.com/security/cve/CVE-2020-11076/" source="CVE"/>
		<reference ref_id="CVE-2020-11077" ref_url="https://www.suse.com/security/cve/CVE-2020-11077/" source="CVE"/>
		<reference ref_id="CVE-2020-15169" ref_url="https://www.suse.com/security/cve/CVE-2020-15169/" source="CVE"/>
		<reference ref_id="CVE-2020-5247" ref_url="https://www.suse.com/security/cve/CVE-2020-5247/" source="CVE"/>
		<reference ref_id="CVE-2020-5249" ref_url="https://www.suse.com/security/cve/CVE-2020-5249/" source="CVE"/>
		<reference ref_id="CVE-2020-5267" ref_url="https://www.suse.com/security/cve/CVE-2020-5267/" source="CVE"/>
		<reference ref_id="CVE-2020-8164" ref_url="https://www.suse.com/security/cve/CVE-2020-8164/" source="CVE"/>
		<reference ref_id="CVE-2020-8165" ref_url="https://www.suse.com/security/cve/CVE-2020-8165/" source="CVE"/>
		<reference ref_id="CVE-2020-8166" ref_url="https://www.suse.com/security/cve/CVE-2020-8166/" source="CVE"/>
		<reference ref_id="CVE-2020-8167" ref_url="https://www.suse.com/security/cve/CVE-2020-8167/" source="CVE"/>
		<reference ref_id="CVE-2020-8184" ref_url="https://www.suse.com/security/cve/CVE-2020-8184/" source="CVE"/>
		<reference ref_id="CVE-2020-8185" ref_url="https://www.suse.com/security/cve/CVE-2020-8185/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3160-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007702.html" source="SUSE-SU"/>
		<description>
This update for rmt-server fixes the following issues:

- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.

- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.

- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.

- Version 2.6.2
- Fix RMT file caching based on timestamps:
  Previously, RMT sent GET requests with the header 'If-Modified-Since' to a
  repository server and if the response had a 304 (Not Modified), it would copy
  a file from the local cache instead of downloading. However, if the local file
  timestamp accidentally changed to a date newer than the one on the repository
  server, RMT would have an outdated file, which caused some errors.
  Now, RMT makes HEAD requests to the repositories servers and inspect the
  'Last-Modified' header to decide whether to download a file or copy it from
  cache, by comparing the equalness of timestamps.
  

- Version 2.6.1
- Fixed an issue where relative paths supplied to `rmt-cli import repos`
  caused the command to fail.

- Version 2.6.0
- Friendlier IDs for custom repositories:
  In an effort to simplify the handling of SCC and custom repositories,
  RMT now has friendly IDs. For SCC repositories, it's the same SCC ID
  as before. For custom repositories, it can either be user provided
  or RMT generated (MD5 of the provided URL).
  Benefits:
  * `rmt-cli mirror repositories` now works for custom repositories.
  * Custom repository IDs can be the same across RMT instances.
  * No more confusing 'SCC ID' vs 'ID' in `rmt-cli` output.
  Deprecation Warnings:
  * RMT now uses a different ID for custom repositories than before.
    RMT still supports that old ID, but it's recommended to start
    using the new ID to ensure future compatibility.

- Version 2.5.20
- Updated rails from 6.0.3.2 to 6.0.3.3:
  - actionview (CVE-2020-15169)

- Version 2.5.19
- RMT now has the ability to remove local systems with the command
  `rmt-cli systems remove`.

- Version 2.5.18
- Fixed exit code for `rmt-cli mirror` and its subcommands. Now it exits with 1
  whenever an error occurs during mirroring
- Improved message logging for `rtm-cli mirror`. Instead of logging an error
  when it occurs, the command summarize all errors at the end of execution. Now
  log messages have colors to better identify failure/success.

- Version 2.5.17
- RMT no longer provides the installer updates repository to systems via its
  zypper service. This repository is used during the installation process, as
  it provides an up-to-date installation experience, but it has no use on an
  already installed system.

- Version 2.5.16
- Updated RMT's rails and puma dependencies.
  - puma (CVE-2020-11076, CVE-2020-11077, CVE-2020-5249, CVE-2020-5247
    CVE-2019-16770)
  - actionpack (CVE-2020-8185, CVE-2020-8164, CVE-2020-8166)
  - actionview (CVE-2020-8167, CVE-2020-5267, CVE-2019-5418, CVE-2019-5419)
  - activesupport (CVE-2020-8165)
  - railties (CVE-2019-5420)

- Version 2.5.15
- RMT now checks if repositories are fully mirrored during the
  activation process. Previously, RMT only checked if the repositories
  were enabled to be mirrored, but not that they were actually mirrored.
  In this case, RMTs were not able to provide the repository data which
  systems assumed it had.

- Version 2.5.14
- Enable 'Installer-Updates' repositories by default

- Fixed deprecation warning when thor encountered an error. Also,
  instead of returning 0 for thor errors, rmt-cli will return 1
  instead.

- Version 2.5.13
- Added `rmt-cli repos clean` command to remove locally mirrored files
  of repositories which are not marked to be mirrored.
- Previously, RMT didn't track deduplicated files in its database. Now,
  to accommodate `rmt-cli repos clean`, RMT will track all mirrored
  files.

- Move the nginx reload to the configuration package which contain
  nginx config files, don't reload nginx unconditionally from main
  package.

- Version 2.5.12
- Update rack to version 2.2.3 (CVE-2020-8184: bsc#1173351)
- Update Rails to version 5.2.4.3:
  - actionpack (CVE-2020-8164: bsc#1172177)
  - actionpack (CVE-2020-8166: bsc#1172182)
  - activesupport (CVE-2020-8165: bsc#1172186)
  - actionview (CVE-2020-8167: bsc#1172184)

- Version 2.5.11
- rmt-server-pubcloud:
  - SLES11 EOL
  - Extension activation verification based on the available subscriptions
  - Added a manual instance verification script

- Version 2.5.10
- Support rmt-server to run with Ruby 2.7 (Factory/Tumbleweed):
  - Bump gem 'config' version from 1.7.2 to 2.2.1 to fix incompatibility Ruby
    2.7 OpenStruct class;
  - Bump gem 'typhoeus' version from 1.3.1 to 1.4.0 in order to also bump gem
    'ethon' version, which caused a 'rb_safe_level' warning on Ruby 2.7;
  - Fix 'last arg as keyword arg' Ruby 2.7 warning on source code;
  - Disable 'deprecated' warnings from Ruby 2.7; Rails 5.1 generates a lot of
    warnings with Ruby 2.7, mainly due to 'capturing the given block with
    Proc.new', which is deprecated;
  - Improve RPM spec to consider only the distribution default Ruby version
    configured in OBS;
  - Improve RPM spec to remove Ruby 2.7 warnings regarding 'bundler.

- Move nginx/vhosts.d directory to correct sub-package. They
  are needed together with nginx, not rmt-server.
- Fix dependencies especially for containerized usage:
  - mariadb and nginx are not hard requires, could run on another host
- Fix generic dependencies:
  - systemd ordering was missing
  - shadow is required for pre-install

- Version 2.5.9
- rmt-server-pubcloud: enforce strict authentication

- Version 2.5.8
- Use repomd_parser gem to remove repository metadata parsing code.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-05"/>
	<updated date="2020-11-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172177">SUSE bug 1172177</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172182">SUSE bug 1172182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172184">SUSE bug 1172184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172186">SUSE bug 1172186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173351">SUSE bug 1173351</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-16770/">CVE-2019-16770</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5418/">CVE-2019-5418</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-5419/">CVE-2019-5419</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5420/">CVE-2019-5420</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-11076/">CVE-2020-11076</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-11077/">CVE-2020-11077</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15169/">CVE-2020-15169</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-5247/">CVE-2020-5247</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-5249/">CVE-2020-5249</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-5267/">CVE-2020-5267</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8164/">CVE-2020-8164</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8165/">CVE-2020-8165</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8166/">CVE-2020-8166</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8167/">CVE-2020-8167</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-8184/">CVE-2020-8184</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8185/">CVE-2020-8185</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499511" comment="rmt-server-2.6.5-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499512" comment="rmt-server-config-2.6.5-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139038" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159670" ref_url="https://bugzilla.suse.com/1159670" source="BUGZILLA"/>
		<reference ref_id="1175987" ref_url="https://bugzilla.suse.com/1175987" source="BUGZILLA"/>
		<reference ref_id="1176024" ref_url="https://bugzilla.suse.com/1176024" source="BUGZILLA"/>
		<reference ref_id="1176294" ref_url="https://bugzilla.suse.com/1176294" source="BUGZILLA"/>
		<reference ref_id="1176397" ref_url="https://bugzilla.suse.com/1176397" source="BUGZILLA"/>
		<reference ref_id="1177867" ref_url="https://bugzilla.suse.com/1177867" source="BUGZILLA"/>
		<reference ref_id="1178319" ref_url="https://bugzilla.suse.com/1178319" source="BUGZILLA"/>
		<reference ref_id="1178361" ref_url="https://bugzilla.suse.com/1178361" source="BUGZILLA"/>
		<reference ref_id="1178362" ref_url="https://bugzilla.suse.com/1178362" source="BUGZILLA"/>
		<reference ref_id="1178485" ref_url="https://bugzilla.suse.com/1178485" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-16846" ref_url="https://www.suse.com/security/cve/CVE-2020-16846/" source="CVE"/>
		<reference ref_id="CVE-2020-17490" ref_url="https://www.suse.com/security/cve/CVE-2020-17490/" source="CVE"/>
		<reference ref_id="CVE-2020-25592" ref_url="https://www.suse.com/security/cve/CVE-2020-25592/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3243-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007724.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string (bsc#1178485)
- Properly validate eauth credentials and tokens on SSH calls made by Salt API 
  (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846)
- Fix disk.blkid to avoid unexpected keyword argument '__pub_user'. (bsc#1177867)
- Ensure virt.update stop_on_reboot is updated with its default value.
- Do not break package building for systemd OSes.
- Drop wrong mock from chroot unit test.
- Support systemd versions with dot. (bsc#1176294)
- Fix for grains.test_core unit test.
- Fix file/directory user and group ownership containing UTF-8 characters. (bsc#1176024)
- Several changes to virtualization:
  * Fix virt update when cpu and memory are changed.
  * Memory Tuning GSoC.
  * Properly fix memory setting regression in virt.update.
  * Expose libvirt on_reboot in virt states.
- Support transactional systems (MicroOS).
- zypperpkg module ignores retcode 104 for search(). (bsc#1159670)
- Xen disk fixes. No longer generates volumes for Xen disks, but the corresponding file or block disk. (bsc#1175987)
- Invalidate file list cache when cache file modified time is in the future. (bsc#1176397)
- Prevent import errors when running test_btrfs unit tests
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-06"/>
	<updated date="2020-11-06"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1159670">SUSE bug 1159670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175987">SUSE bug 1175987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176024">SUSE bug 1176024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176294">SUSE bug 1176294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176397">SUSE bug 1176397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177867">SUSE bug 1177867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178319">SUSE bug 1178319</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178361">SUSE bug 1178361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178362">SUSE bug 1178362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178485">SUSE bug 1178485</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-16846/">CVE-2020-16846</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-17490/">CVE-2020-17490</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25592/">CVE-2020-25592</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499513" comment="salt-api-3000-6.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499514" comment="salt-cloud-3000-6.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499515" comment="salt-fish-completion-3000-6.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499516" comment="salt-master-3000-6.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499517" comment="salt-proxy-3000-6.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499518" comment="salt-ssh-3000-6.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499519" comment="salt-standalone-formulas-configuration-3000-6.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499520" comment="salt-syndic-3000-6.51.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139039" version="1" class="patch">
	<metadata>
		<title>Security update for krb5 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178512" ref_url="https://bugzilla.suse.com/1178512" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28196" ref_url="https://www.suse.com/security/cve/CVE-2020-28196/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3377-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007793.html" source="SUSE-SU"/>
		<description>
This update for krb5 fixes the following security issue:

- CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message (bsc#1178512).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1178512">SUSE bug 1178512</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28196/">CVE-2020-28196</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499521" comment="krb5-plugin-kdb-ldap-1.16.3-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499522" comment="krb5-server-1.16.3-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139040" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1177950" ref_url="https://bugzilla.suse.com/1177950" source="BUGZILLA"/>
		<reference ref_id="1178591" ref_url="https://bugzilla.suse.com/1178591" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28368" ref_url="https://www.suse.com/security/cve/CVE-2020-28368/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3413-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007815.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

Security issue fixed:

- CVE-2020-28368: Fixed the Intel RAPL sidechannel attack, aka PLATYPUS attack, aka XSA-351 (bsc#1178591).

Non-security issues fixed:

- Updated to Xen 4.12.4 bug fix release (bsc#1027519).
- Fixed a panic during MSI cleanup on AMD hardware (bsc#1027519).
- Adjusted help for --max_iters, default is 5 (bsc#1177950).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177950">SUSE bug 1177950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178591">SUSE bug 1178591</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-28368/">CVE-2020-28368</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499523" comment="xen-4.12.4_02-3.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499524" comment="xen-devel-4.12.4_02-3.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499525" comment="xen-tools-4.12.4_02-3.34.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139041" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178666" ref_url="https://bugzilla.suse.com/1178666" source="BUGZILLA"/>
		<reference ref_id="1178667" ref_url="https://bugzilla.suse.com/1178667" source="BUGZILLA"/>
		<reference ref_id="1178668" ref_url="https://bugzilla.suse.com/1178668" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25694" ref_url="https://www.suse.com/security/cve/CVE-2020-25694/" source="CVE"/>
		<reference ref_id="CVE-2020-25695" ref_url="https://www.suse.com/security/cve/CVE-2020-25695/" source="CVE"/>
		<reference ref_id="CVE-2020-25696" ref_url="https://www.suse.com/security/cve/CVE-2020-25696/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3425-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007818.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

- Upgrade to version 12.5:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/12/release-12-5.html
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-19"/>
	<updated date="2020-11-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178666">SUSE bug 1178666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178667">SUSE bug 1178667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178668">SUSE bug 1178668</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25694/">CVE-2020-25694</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25695/">CVE-2020-25695</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25696/">CVE-2020-25696</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499526" comment="libecpg6-12.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499527" comment="postgresql12-contrib-12.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499528" comment="postgresql12-devel-12.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499529" comment="postgresql12-docs-12.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499530" comment="postgresql12-plperl-12.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499531" comment="postgresql12-plpython-12.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499532" comment="postgresql12-pltcl-12.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499533" comment="postgresql12-server-12.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499534" comment="postgresql12-server-devel-12.5-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139042" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1178666" ref_url="https://bugzilla.suse.com/1178666" source="BUGZILLA"/>
		<reference ref_id="1178667" ref_url="https://bugzilla.suse.com/1178667" source="BUGZILLA"/>
		<reference ref_id="1178668" ref_url="https://bugzilla.suse.com/1178668" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25694" ref_url="https://www.suse.com/security/cve/CVE-2020-25694/" source="CVE"/>
		<reference ref_id="CVE-2020-25695" ref_url="https://www.suse.com/security/cve/CVE-2020-25695/" source="CVE"/>
		<reference ref_id="CVE-2020-25696" ref_url="https://www.suse.com/security/cve/CVE-2020-25696/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3476-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007832.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

- Upgrade to version 10.15:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/10/release-10-15.html
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-20"/>
	<updated date="2020-11-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178666">SUSE bug 1178666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178667">SUSE bug 1178667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178668">SUSE bug 1178668</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25694/">CVE-2020-25694</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25695/">CVE-2020-25695</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25696/">CVE-2020-25696</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499535" comment="postgresql10-contrib-10.15-8.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499536" comment="postgresql10-devel-10.15-8.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499537" comment="postgresql10-docs-10.15-8.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499538" comment="postgresql10-plperl-10.15-8.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499539" comment="postgresql10-plpython-10.15-8.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499540" comment="postgresql10-pltcl-10.15-8.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499541" comment="postgresql10-server-10.15-8.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139043" version="1" class="patch">
	<metadata>
		<title>Security update for nginx (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160682" ref_url="https://bugzilla.suse.com/1160682" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20372" ref_url="https://www.suse.com/security/cve/CVE-2019-20372/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0348-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006462.html" source="SUSE-SU"/>
		<description>
This update for nginx fixes the following issues:

- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page 
  configurations which could have allowed unauthorized web page reads (bsc#1160682). 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-06"/>
	<updated date="2020-02-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1160682">SUSE bug 1160682</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-20372/">CVE-2019-20372</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499542" comment="nginx-1.14.2-6.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499543" comment="nginx-source-1.14.2-6.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139044" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1175596" ref_url="https://bugzilla.suse.com/1175596" source="BUGZILLA"/>
		<reference ref_id="1177472" ref_url="https://bugzilla.suse.com/1177472" source="BUGZILLA"/>
		<reference ref_id="1178428" ref_url="https://bugzilla.suse.com/1178428" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14765" ref_url="https://www.suse.com/security/cve/CVE-2020-14765/" source="CVE"/>
		<reference ref_id="CVE-2020-14776" ref_url="https://www.suse.com/security/cve/CVE-2020-14776/" source="CVE"/>
		<reference ref_id="CVE-2020-14789" ref_url="https://www.suse.com/security/cve/CVE-2020-14789/" source="CVE"/>
		<reference ref_id="CVE-2020-14812" ref_url="https://www.suse.com/security/cve/CVE-2020-14812/" source="CVE"/>
		<reference ref_id="CVE-2020-15180" ref_url="https://www.suse.com/security/cve/CVE-2020-15180/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007844.html" source="SUSE-SU"/>
		<description>
This update for mariadb and mariadb-connector-c fixes the following issues:

- Update mariadb to 10.2.36 GA [bsc#1177472, bsc#1178428] fixing for the 
  following security vulnerabilities:
    CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 CVE-2020-15180

- Update mariadb-connector-c to 3.1.11 [bsc#1177472 and bsc#1178428]
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-24"/>
	<updated date="2020-11-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175596">SUSE bug 1175596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177472">SUSE bug 1177472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178428">SUSE bug 1178428</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14765/">CVE-2020-14765</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14776/">CVE-2020-14776</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14789/">CVE-2020-14789</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14812/">CVE-2020-14812</cve>
	<cve impact="important" cvss3="9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15180/">CVE-2020-15180</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499544" comment="libmariadb-devel-3.1.11-3.22.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499545" comment="libmariadb_plugins-3.1.11-3.22.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499546" comment="libmysqld-devel-10.2.36-3.34.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499547" comment="libmysqld19-10.2.36-3.34.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499548" comment="mariadb-10.2.36-3.34.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499549" comment="mariadb-client-10.2.36-3.34.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499550" comment="mariadb-errormessages-10.2.36-3.34.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499551" comment="mariadb-tools-10.2.36-3.34.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139045" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177409" ref_url="https://bugzilla.suse.com/1177409" source="BUGZILLA"/>
		<reference ref_id="1177412" ref_url="https://bugzilla.suse.com/1177412" source="BUGZILLA"/>
		<reference ref_id="1177413" ref_url="https://bugzilla.suse.com/1177413" source="BUGZILLA"/>
		<reference ref_id="1177414" ref_url="https://bugzilla.suse.com/1177414" source="BUGZILLA"/>
		<reference ref_id="1178591" ref_url="https://bugzilla.suse.com/1178591" source="BUGZILLA"/>
		<reference ref_id="1178963" ref_url="https://bugzilla.suse.com/1178963" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27670" ref_url="https://www.suse.com/security/cve/CVE-2020-27670/" source="CVE"/>
		<reference ref_id="CVE-2020-27671" ref_url="https://www.suse.com/security/cve/CVE-2020-27671/" source="CVE"/>
		<reference ref_id="CVE-2020-27672" ref_url="https://www.suse.com/security/cve/CVE-2020-27672/" source="CVE"/>
		<reference ref_id="CVE-2020-27674" ref_url="https://www.suse.com/security/cve/CVE-2020-27674/" source="CVE"/>
		<reference ref_id="CVE-2020-28368" ref_url="https://www.suse.com/security/cve/CVE-2020-28368/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3611-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007911.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355) 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-03"/>
	<updated date="2020-12-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177409">SUSE bug 1177409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177412">SUSE bug 1177412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177413">SUSE bug 1177413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177414">SUSE bug 1177414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178591">SUSE bug 1178591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178963">SUSE bug 1178963</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27670/">CVE-2020-27670</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27671/">CVE-2020-27671</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27672/">CVE-2020-27672</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27674/">CVE-2020-27674</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-28368/">CVE-2020-28368</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499552" comment="xen-4.12.4_04-3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499553" comment="xen-devel-4.12.4_04-3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499554" comment="xen-tools-4.12.4_04-3.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139046" version="1" class="patch">
	<metadata>
		<title>Security update for openssh (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1115550" ref_url="https://bugzilla.suse.com/1115550" source="BUGZILLA"/>
		<reference ref_id="1139398" ref_url="https://bugzilla.suse.com/1139398" source="BUGZILLA"/>
		<reference ref_id="1142000" ref_url="https://bugzilla.suse.com/1142000" source="BUGZILLA"/>
		<reference ref_id="1148566" ref_url="https://bugzilla.suse.com/1148566" source="BUGZILLA"/>
		<reference ref_id="1173513" ref_url="https://bugzilla.suse.com/1173513" source="BUGZILLA"/>
		<reference ref_id="1174162" ref_url="https://bugzilla.suse.com/1174162" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14145" ref_url="https://www.suse.com/security/cve/CVE-2020-14145/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3866-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008083.html" source="SUSE-SU"/>
		<description>
This update for openssh fixes the following issues:

- CVE-2020-14145: Fixed a potential information leak during host key exchange (bsc#1173513).
- Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install (bsc#1142000)
- Fixed an issue where oracle cluster with  cluvfy using 'scp' failing/missinterpreted (bsc#1148566).
- Fixed sshd termination of multichannel sessions with non-root users (bsc#1115550,bsc#1174162).
- Added speculative hardening for key storage (bsc#1139398).  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-17"/>
	<updated date="2020-12-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1115550">SUSE bug 1115550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139398">SUSE bug 1139398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142000">SUSE bug 1142000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148566">SUSE bug 1148566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173513">SUSE bug 1173513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174162">SUSE bug 1174162</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14145/">CVE-2020-14145</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499555" comment="openssh-fips-7.9p1-6.22.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139047" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1176782" ref_url="https://bugzilla.suse.com/1176782" source="BUGZILLA"/>
		<reference ref_id="1179496" ref_url="https://bugzilla.suse.com/1179496" source="BUGZILLA"/>
		<reference ref_id="1179498" ref_url="https://bugzilla.suse.com/1179498" source="BUGZILLA"/>
		<reference ref_id="1179501" ref_url="https://bugzilla.suse.com/1179501" source="BUGZILLA"/>
		<reference ref_id="1179502" ref_url="https://bugzilla.suse.com/1179502" source="BUGZILLA"/>
		<reference ref_id="1179506" ref_url="https://bugzilla.suse.com/1179506" source="BUGZILLA"/>
		<reference ref_id="1179514" ref_url="https://bugzilla.suse.com/1179514" source="BUGZILLA"/>
		<reference ref_id="1179516" ref_url="https://bugzilla.suse.com/1179516" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-29480" ref_url="https://www.suse.com/security/cve/CVE-2020-29480/" source="CVE"/>
		<reference ref_id="CVE-2020-29481" ref_url="https://www.suse.com/security/cve/CVE-2020-29481/" source="CVE"/>
		<reference ref_id="CVE-2020-29483" ref_url="https://www.suse.com/security/cve/CVE-2020-29483/" source="CVE"/>
		<reference ref_id="CVE-2020-29484" ref_url="https://www.suse.com/security/cve/CVE-2020-29484/" source="CVE"/>
		<reference ref_id="CVE-2020-29566" ref_url="https://www.suse.com/security/cve/CVE-2020-29566/" source="CVE"/>
		<reference ref_id="CVE-2020-29570" ref_url="https://www.suse.com/security/cve/CVE-2020-29570/" source="CVE"/>
		<reference ref_id="CVE-2020-29571" ref_url="https://www.suse.com/security/cve/CVE-2020-29571/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008093.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests (bsc#117949 XSA-115).
- CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions (bsc#1179498 XSA-322). 
- CVE-2020-29483: Fixed an issue where guests could disturb domain cleanup (bsc#1179502 XSA-325).
- CVE-2020-29484: Fixed an issue where guests could crash xenstored via watchs (bsc#1179501 XSA-324). 
- CVE-2020-29566: Fixed an undue recursion in x86 HVM context switch code (bsc#1179506 XSA-348).
- CVE-2020-29570: Fixed an issue where FIFO event channels control block related ordering (bsc#1179514 XSA-358).
- CVE-2020-29571: Fixed an issue where FIFO event channels control structure ordering (bsc#1179516 XSA-359).
- Fixed an issue where dump-core shows missing nr_pages during core (bsc#1176782).
- Multiple other bugs (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-18"/>
	<updated date="2020-12-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176782">SUSE bug 1176782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179496">SUSE bug 1179496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179498">SUSE bug 1179498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179501">SUSE bug 1179501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179502">SUSE bug 1179502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179506">SUSE bug 1179506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179514">SUSE bug 1179514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179516">SUSE bug 1179516</bugzilla>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29480/">CVE-2020-29480</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29481/">CVE-2020-29481</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29483/">CVE-2020-29483</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29484/">CVE-2020-29484</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29566/">CVE-2020-29566</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29570/">CVE-2020-29570</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29571/">CVE-2020-29571</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499556" comment="xen-4.12.4_06-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499557" comment="xen-devel-4.12.4_06-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499558" comment="xen-tools-4.12.4_06-3.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139048" version="1" class="patch">
	<metadata>
		<title>Security update for ovmf (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177789" ref_url="https://bugzilla.suse.com/1177789" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14584" ref_url="https://www.suse.com/security/cve/CVE-2019-14584/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3885-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/008087.html" source="SUSE-SU"/>
		<description>
This update for ovmf fixes the following issues:

- CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify() (bsc#1177789).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-18"/>
	<updated date="2020-12-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177789">SUSE bug 1177789</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14584/">CVE-2019-14584</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499559" comment="ovmf-2017+git1510945757.b2662641d5-5.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499560" comment="ovmf-tools-2017+git1510945757.b2662641d5-5.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499561" comment="qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499562" comment="qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139049" version="1" class="patch">
	<metadata>
		<title>Security update for ipmitool (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1163026" ref_url="https://bugzilla.suse.com/1163026" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-5208" ref_url="https://www.suse.com/security/cve/CVE-2020-5208/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0405-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006493.html" source="SUSE-SU"/>
		<description>
This update for ipmitool fixes the following security issue:

- CVE-2020-5208: Fixed several buffer overflows (bsc#1163026).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-19"/>
	<updated date="2020-02-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1163026">SUSE bug 1163026</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-5208/">CVE-2020-5208</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499563" comment="ipmitool-bmc-snmp-proxy-1.8.18-7.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139050" version="1" class="patch">
	<metadata>
		<title>Security update for dpdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1151455" ref_url="https://bugzilla.suse.com/1151455" source="BUGZILLA"/>
		<reference ref_id="1156146" ref_url="https://bugzilla.suse.com/1156146" source="BUGZILLA"/>
		<reference ref_id="1157179" ref_url="https://bugzilla.suse.com/1157179" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14818" ref_url="https://www.suse.com/security/cve/CVE-2019-14818/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006515.html" source="SUSE-SU"/>
		<description>
This update for dpdk to version 18.11.3 fixes the following issues:

Security issue fixed:

- CVE-2019-14818: Fixed a denial of service by a malicious container via the vhost-user socket (bsc#1156146).

Non-security issue fixed:

- Added current version to the PMD driver directory to avoid loading previous version drivers (bsc#1157179). 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-24"/>
	<updated date="2020-02-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1151455">SUSE bug 1151455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156146">SUSE bug 1156146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157179">SUSE bug 1157179</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14818/">CVE-2019-14818</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499564" comment="dpdk-18.11.3-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499565" comment="dpdk-devel-18.11.3-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499566" comment="dpdk-kmp-default-18.11.3_k4.12.14_197.29-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499567" comment="dpdk-tools-18.11.3-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499568" comment="libdpdk-18_11-18.11.3-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139051" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162687" ref_url="https://bugzilla.suse.com/1162687" source="BUGZILLA"/>
		<reference ref_id="1162689" ref_url="https://bugzilla.suse.com/1162689" source="BUGZILLA"/>
		<reference ref_id="1162691" ref_url="https://bugzilla.suse.com/1162691" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12528" ref_url="https://www.suse.com/security/cve/CVE-2019-12528/" source="CVE"/>
		<reference ref_id="CVE-2020-8449" ref_url="https://www.suse.com/security/cve/CVE-2020-8449/" source="CVE"/>
		<reference ref_id="CVE-2020-8450" ref_url="https://www.suse.com/security/cve/CVE-2020-8450/" source="CVE"/>
		<reference ref_id="CVE-2020-8517" ref_url="https://www.suse.com/security/cve/CVE-2020-8517/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006534.html" source="SUSE-SU"/>
		<description>
This update for squid to version 4.10 fixes the following issues:

Security issues fixed:

- CVE-2019-12528: Fixed an information disclosure flaw in the FTP gateway (bsc#1162689).
- CVE-2020-8449: Fixed a buffer overflow when squid is acting as reverse-proxy (bsc#1162687).
- CVE-2020-8450: Fixed a buffer overflow when squid is acting as reverse-proxy (bsc#1162687).
- CVE-2020-8517: Fixed a buffer overflow in ext_lm_group_acl when processing NTLM Authentication credentials (bsc#1162691).

Non-security issue fixed:

- Improved cache handling with chunked responses.
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-26"/>
	<updated date="2020-02-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162687">SUSE bug 1162687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162689">SUSE bug 1162689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162691">SUSE bug 1162691</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-12528/">CVE-2019-12528</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8449/">CVE-2020-8449</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-8450/">CVE-2020-8450</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8517/">CVE-2020-8517</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499569" comment="squid-4.10-5.14.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139052" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1160878" ref_url="https://bugzilla.suse.com/1160878" source="BUGZILLA"/>
		<reference ref_id="1160883" ref_url="https://bugzilla.suse.com/1160883" source="BUGZILLA"/>
		<reference ref_id="1160895" ref_url="https://bugzilla.suse.com/1160895" source="BUGZILLA"/>
		<reference ref_id="1160912" ref_url="https://bugzilla.suse.com/1160912" source="BUGZILLA"/>
		<reference ref_id="1162388" ref_url="https://bugzilla.suse.com/1162388" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18901" ref_url="https://www.suse.com/security/cve/CVE-2019-18901/" source="CVE"/>
		<reference ref_id="CVE-2020-2574" ref_url="https://www.suse.com/security/cve/CVE-2020-2574/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0496-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006537.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

MariaDB was updated to version 10.2.31 GA (bsc#1162388).

Security issues fixed:

- CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388).
- CVE-2019-18901: Fixed an unsafe path handling behavior in mysql-systemd-helper (bsc#1160895).
- Enabled security hardenings in MariaDB's systemd service, namely ProtectSystem, ProtectHome and UMask (bsc#1160878).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-26"/>
	<updated date="2020-02-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1160878">SUSE bug 1160878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160883">SUSE bug 1160883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160895">SUSE bug 1160895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160912">SUSE bug 1160912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162388">SUSE bug 1162388</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18901/">CVE-2019-18901</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-2574/">CVE-2020-2574</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499570" comment="libmysqld-devel-10.2.31-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499571" comment="libmysqld19-10.2.31-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499572" comment="mariadb-10.2.31-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499573" comment="mariadb-client-10.2.31-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499574" comment="mariadb-errormessages-10.2.31-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499575" comment="mariadb-tools-10.2.31-3.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139053" version="1" class="patch">
	<metadata>
		<title>Security update for ovmf (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1153072" ref_url="https://bugzilla.suse.com/1153072" source="BUGZILLA"/>
		<reference ref_id="1163927" ref_url="https://bugzilla.suse.com/1163927" source="BUGZILLA"/>
		<reference ref_id="1163959" ref_url="https://bugzilla.suse.com/1163959" source="BUGZILLA"/>
		<reference ref_id="1163969" ref_url="https://bugzilla.suse.com/1163969" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14553" ref_url="https://www.suse.com/security/cve/CVE-2019-14553/" source="CVE"/>
		<reference ref_id="CVE-2019-14559" ref_url="https://www.suse.com/security/cve/CVE-2019-14559/" source="CVE"/>
		<reference ref_id="CVE-2019-14563" ref_url="https://www.suse.com/security/cve/CVE-2019-14563/" source="CVE"/>
		<reference ref_id="CVE-2019-14575" ref_url="https://www.suse.com/security/cve/CVE-2019-14575/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0568-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006568.html" source="SUSE-SU"/>
		<description>
This update for ovmf fixes the following issues:

Security issues fixed:

- CVE-2019-14563: Fixed a memory corruption caused by insufficient numeric truncation (bsc#1163959).
- CVE-2019-14553: Fixed the TLS certification verification in HTTPS-over-IPv6 boot sequences (bsc#1153072).
- CVE-2019-14559: Fixed a remotely exploitable memory leak in the ARP handling code (bsc#1163927).
- CVE-2019-14575: Fixed an insufficient signature check in the DxeImageVerificationHandler (bsc#1163969).
- Enabled HTTPS-over-IPv6 (bsc#1153072).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-03"/>
	<updated date="2020-03-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1153072">SUSE bug 1153072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163927">SUSE bug 1163927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163959">SUSE bug 1163959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163969">SUSE bug 1163969</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14553/">CVE-2019-14553</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-14559/">CVE-2019-14559</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-14563/">CVE-2019-14563</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14575/">CVE-2019-14575</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499576" comment="ovmf-2017+git1510945757.b2662641d5-5.29.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499577" comment="ovmf-tools-2017+git1510945757.b2662641d5-5.29.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499578" comment="qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.29.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499579" comment="qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.29.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139054" version="1" class="patch">
	<metadata>
		<title>Security update for yast2-rmt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1119835" ref_url="https://bugzilla.suse.com/1119835" source="BUGZILLA"/>
		<reference ref_id="1146403" ref_url="https://bugzilla.suse.com/1146403" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20105" ref_url="https://www.suse.com/security/cve/CVE-2018-20105/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0578-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006571.html" source="SUSE-SU"/>
		<description>
This update for yast2-rmt to version 1.3.0 fixes the following issues:

Security issue fixed:

- CVE-2018-20105: Fixed an exposure of the CA private key passphrase in the log file (bsc#1119835).

Non-security issue fixed:

- Add support for forwarding registration data from RMT to SCC
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-03"/>
	<updated date="2020-03-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1119835">SUSE bug 1119835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146403">SUSE bug 1146403</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20105/">CVE-2018-20105</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499580" comment="yast2-rmt-1.3.0-3.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139055" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1135656" ref_url="https://bugzilla.suse.com/1135656" source="BUGZILLA"/>
		<reference ref_id="1153611" ref_url="https://bugzilla.suse.com/1153611" source="BUGZILLA"/>
		<reference ref_id="1157465" ref_url="https://bugzilla.suse.com/1157465" source="BUGZILLA"/>
		<reference ref_id="1158940" ref_url="https://bugzilla.suse.com/1158940" source="BUGZILLA"/>
		<reference ref_id="1159118" ref_url="https://bugzilla.suse.com/1159118" source="BUGZILLA"/>
		<reference ref_id="1160931" ref_url="https://bugzilla.suse.com/1160931" source="BUGZILLA"/>
		<reference ref_id="1162327" ref_url="https://bugzilla.suse.com/1162327" source="BUGZILLA"/>
		<reference ref_id="1162504" ref_url="https://bugzilla.suse.com/1162504" source="BUGZILLA"/>
		<reference ref_id="1165425" ref_url="https://bugzilla.suse.com/1165425" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17361" ref_url="https://www.suse.com/security/cve/CVE-2019-17361/" source="CVE"/>
		<reference ref_id="CVE-2019-18897" ref_url="https://www.suse.com/security/cve/CVE-2019-18897/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006608.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Avoid possible user escalation upgrading salt-master (bsc#1157465) (CVE-2019-18897)
- Fix unit tests failures in test_batch_async tests
- Batch Async: Handle exceptions, properly unregister and close instances after
  running async batching to avoid CPU starvation of the MWorkers (bsc#1162327)
- RHEL/CentOS 8 uses platform-python instead of python3
- New configuration option for selection of grains in the minion start event.
- Fix 'os_family' grain for Astra Linux Common Edition
- Fix for salt-api NET API where unauthenticated attacker could run
  arbitrary code (CVE-2019-17361) (bsc#1162504)
- Adds disabled parameter to mod_repo in aptpkg module
  Move token with atomic operation
  Bad API token files get deleted (bsc#1160931)
- Support for Btrfs and XFS in parted and mkfs added
- Adds list_downloaded for apt Module to enable pre-downloading support
  Adds virt.(pool|network)_get_xml functions
- Various libvirt updates:
  * Add virt.pool_capabilities function
  * virt.pool_running improvements
  * Add virt.pool_deleted state
  * virt.network_define allow adding IP configuration
- virt: adding kernel boot parameters to libvirt xml
- Fix to scheduler when data['run'] does not exist (bsc#1159118)
- Fix virt states to not fail on VMs already stopped
- Fix applying of attributes for returner rawfile_json (bsc#1158940)
- xfs: do not fail if type is not present (bsc#1153611)
- Fix errors when running virt.get_hypervisor function
- Align virt.full_info fixes with upstream Salt
- Fix for log checking in x509 test
- Read repo info without using interpolation (bsc#1135656)
- Limiting M2Crypto to &gt;= SLE15
- Replacing pycrypto with M2Crypto (bsc#1165425)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-13"/>
	<updated date="2020-03-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1135656">SUSE bug 1135656</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153611">SUSE bug 1153611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157465">SUSE bug 1157465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158940">SUSE bug 1158940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159118">SUSE bug 1159118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160931">SUSE bug 1160931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162327">SUSE bug 1162327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162504">SUSE bug 1162504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165425">SUSE bug 1165425</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17361/">CVE-2019-17361</cve>
	<cve impact="moderate" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18897/">CVE-2019-18897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499581" comment="salt-api-2019.2.0-6.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499582" comment="salt-cloud-2019.2.0-6.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499583" comment="salt-fish-completion-2019.2.0-6.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499584" comment="salt-master-2019.2.0-6.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499585" comment="salt-proxy-2019.2.0-6.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499586" comment="salt-ssh-2019.2.0-6.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499587" comment="salt-standalone-formulas-configuration-2019.2.0-6.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499588" comment="salt-syndic-2019.2.0-6.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139056" version="1" class="patch">
	<metadata>
		<title>Security update for apache2-mod_auth_openidc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1164459" ref_url="https://bugzilla.suse.com/1164459" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20479" ref_url="https://www.suse.com/security/cve/CVE-2019-20479/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0705-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006620.html" source="SUSE-SU"/>
		<description>
This update for apache2-mod_auth_openidc fixes the following issues:

- CVE-2019-20479: Fixed an open redirect issue in URLs with slash and backslash (bsc#1164459).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-17"/>
	<updated date="2020-03-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1164459">SUSE bug 1164459</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-20479/">CVE-2019-20479</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499589" comment="apache2-mod_auth_openidc-2.3.8-3.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139057" version="1" class="patch">
	<metadata>
		<title>Security update for skopeo (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159530" ref_url="https://bugzilla.suse.com/1159530" source="BUGZILLA"/>
		<reference ref_id="1165715" ref_url="https://bugzilla.suse.com/1165715" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10214" ref_url="https://www.suse.com/security/cve/CVE-2019-10214/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0712-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006624.html" source="SUSE-SU"/>
		<description>
This update for skopeo fixes the following issues:

Update to skopeo v0.1.41 (bsc#1165715):

- Bump github.com/containers/image/v5 from 5.2.0 to 5.2.1
- Bump gopkg.in/yaml.v2 from 2.2.7 to 2.2.8
- Bump github.com/containers/common from 0.0.7 to 0.1.4
- Remove the reference to openshift/api
- vendor github.com/containers/image/v5@v5.2.0
- Manually update buildah to v1.13.1
- add specific authfile options to copy (and sync) command.
- Bump github.com/containers/buildah from 1.11.6 to 1.12.0
- Add context to --encryption-key / --decryption-key processing
  failures
- Bump github.com/containers/storage from 1.15.2 to 1.15.3
- Bump github.com/containers/buildah from 1.11.5 to 1.11.6
- remove direct reference on c/image/storage
- Makefile: set GOBIN
- Bump gopkg.in/yaml.v2 from 2.2.2 to 2.2.7
- Bump github.com/containers/storage from 1.15.1 to 1.15.2
- Introduce the sync command
- openshift cluster: remove .docker directory on teardown
- Bump github.com/containers/storage from 1.14.0 to 1.15.1
- document installation via apk on alpine
- Fix typos in doc for image encryption
- Image encryption/decryption support in skopeo
- make vendor-in-container
- Bump github.com/containers/buildah from 1.11.4 to 1.11.5
- Travis: use go v1.13
- Use a Windows Nano Server image instead of Server Core for
  multi-arch testing
- Increase test timeout to 15 minutes
- Run the test-system container without --net=host
- Mount /run/systemd/journal/socket into test-system containers
- Don't unnecessarily filter out vendor from (go list ./...)
  output
- Use -mod=vendor in (go {list,test,vet})
- Bump github.com/containers/buildah from 1.8.4 to 1.11.4
- Bump github.com/urfave/cli from 1.20.0 to 1.22.1
- skopeo: drop support for ostree
- Don't critically fail on a 403 when listing tags
- Revert 'Temporarily work around auth.json location confusion'
- Remove references to atomic
- Remove references to storage.conf
- Dockerfile: use golang-github-cpuguy83-go-md2man
- bump version to v0.1.41-dev
- systemtest: inspect container image different from current
  platform arch

Changes in v0.1.40:

- vendor containers/image v5.0.0
- copy: add a --all/-a flag
- System tests: various fixes
- Temporarily work around auth.json location confusion
- systemtest: copy: docker-&gt;storage-&gt;oci-archive
- systemtest/010-inspect.bats: require only PATH
- systemtest: add simple env test in inspect.bats
- bash completion: add comments to keep scattered options in sync
- bash completion: use read -r instead of disabling SC2207
- bash completion: support --opt arg completion
- bash-completion: use replacement instead of sed
- bash completion: disable shellcheck SC2207
- bash completion: double-quote to avoid re-splitting
- bash completions: use bash replacement instead of sed
- bash completion: remove unused variable
- bash-completions: split decl and assignment to avoid masking
  retvals
- bash completion: double-quote fixes
- bash completion: hard-set PROG=skopeo
- bash completion: remove unused variable
- bash completion: use `||` instead of `-o`
- bash completion: rm eval on assigned variable
- copy: add --dest-compress-format and --dest-compress-level
- flag: add optionalIntValue
- Makefile: use go proxy
- inspect --raw: skip the NewImage() step
- update OCI image-spec to
  775207bd45b6cb8153ce218cc59351799217451f
- inspect.go: inspect env variables
- ostree: use both image and &amp; storage buildtags


Update to skopeo v0.1.39 (bsc#1159530):

- inspect: add a --config flag
- Add --no-creds flag to skopeo inspect
- Add --quiet option to skopeo copy
- New progress bars
- Parallel Pulls and Pushes for major speed improvements
- containers/image moved to a new progress-bar library to fix various
  issues related to overlapping bars and redundant entries.
- enforce blocking of registries
- Allow storage-multiple-manifests
- When copying images and the output is not a tty (e.g., when piping to a
  file) print single lines instead of using progress bars. This avoids
  long and hard to parse output
- man pages: add --dest-oci-accept-uncompressed-layers
- completions: 
  - Introduce transports completions
  - Fix bash completions when a option requires a argument
  - Use only spaces in indent
   - Fix completions with a global option
  - add --dest-oci-accept-uncompressed-layers
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-18"/>
	<updated date="2020-03-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1159530">SUSE bug 1159530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165715">SUSE bug 1165715</bugzilla>
	<cve impact="important" cvss3="9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10214/">CVE-2019-10214</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499590" comment="skopeo-0.1.41-4.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139058" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1163985" ref_url="https://bugzilla.suse.com/1163985" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1720" ref_url="https://www.suse.com/security/cve/CVE-2020-1720/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006633.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

PostgreSQL was updated to version 10.12.

Security issue fixed:

- CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension (bsc#1163985).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-23"/>
	<updated date="2020-03-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1163985">SUSE bug 1163985</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-1720/">CVE-2020-1720</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499591" comment="libecpg6-10.12-8.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499592" comment="postgresql10-contrib-10.12-8.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499593" comment="postgresql10-devel-10.12-8.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499594" comment="postgresql10-docs-10.12-8.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499595" comment="postgresql10-plperl-10.12-8.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499596" comment="postgresql10-plpython-10.12-8.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499597" comment="postgresql10-pltcl-10.12-8.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499598" comment="postgresql10-server-10.12-8.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139059" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1123156" ref_url="https://bugzilla.suse.com/1123156" source="BUGZILLA"/>
		<reference ref_id="1154790" ref_url="https://bugzilla.suse.com/1154790" source="BUGZILLA"/>
		<reference ref_id="1161066" ref_url="https://bugzilla.suse.com/1161066" source="BUGZILLA"/>
		<reference ref_id="1162729" ref_url="https://bugzilla.suse.com/1162729" source="BUGZILLA"/>
		<reference ref_id="1163018" ref_url="https://bugzilla.suse.com/1163018" source="BUGZILLA"/>
		<reference ref_id="1165776" ref_url="https://bugzilla.suse.com/1165776" source="BUGZILLA"/>
		<reference ref_id="1166240" ref_url="https://bugzilla.suse.com/1166240" source="BUGZILLA"/>
		<reference ref_id="1166379" ref_url="https://bugzilla.suse.com/1166379" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15034" ref_url="https://www.suse.com/security/cve/CVE-2019-15034/" source="CVE"/>
		<reference ref_id="CVE-2019-20382" ref_url="https://www.suse.com/security/cve/CVE-2019-20382/" source="CVE"/>
		<reference ref_id="CVE-2019-6778" ref_url="https://www.suse.com/security/cve/CVE-2019-6778/" source="CVE"/>
		<reference ref_id="CVE-2020-1711" ref_url="https://www.suse.com/security/cve/CVE-2020-1711/" source="CVE"/>
		<reference ref_id="CVE-2020-7039" ref_url="https://www.suse.com/security/cve/CVE-2020-7039/" source="CVE"/>
		<reference ref_id="CVE-2020-8608" ref_url="https://www.suse.com/security/cve/CVE-2020-8608/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006662.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

- CVE-2020-7039: Fixed a heap buffer overflow in tcp_emu() routine while emulating IRC and
  other protocols (bsc#1161066).
- CVE-2019-15034: Fixed a buffer overflow in hw/display/bochs-display.c due to improper PCI 
  config space allocation (bsc#1166379).
- CVE-2020-1711: Fixed an out of bounds heap buffer access iscsi_co_block_status() routine
  which could have allowed a remote denial of service or arbitrary code with privileges 
  of the QEMU process on the host (bsc#1166240).
- CVE-2019-6778: Fixed a heap buffer overflow in tcp_emu() routine while emulating 
  the identification protocol and copying message data to a socket buffer (bsc#1123156).
- CVE-2020-8608: Fixed a heap buffer overflow in tcp_emu() routine while emulating IRC and
  other protocols (bsc#1163018).
- CVE-2019-20382: Fixed a memory leak in the VNC display driver which could have led to 
  exhaustion of the host memory leading to a potential Denial of service (bsc#1165776).
- Fixed a live migration error (bsc#1154790).
- Fixed an issue where migrating VMs on KVM gets missing features:ospke error (bsc#1162729).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-01"/>
	<updated date="2020-04-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1123156">SUSE bug 1123156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154790">SUSE bug 1154790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161066">SUSE bug 1161066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162729">SUSE bug 1162729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163018">SUSE bug 1163018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165776">SUSE bug 1165776</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166240">SUSE bug 1166240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166379">SUSE bug 1166379</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15034/">CVE-2019-15034</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20382/">CVE-2019-20382</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-6778/">CVE-2019-6778</cve>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-1711/">CVE-2020-1711</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-7039/">CVE-2020-7039</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-8608/">CVE-2020-8608</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499599" comment="qemu-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499600" comment="qemu-arm-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499601" comment="qemu-audio-alsa-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499602" comment="qemu-audio-oss-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499603" comment="qemu-audio-pa-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499604" comment="qemu-block-curl-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499605" comment="qemu-block-iscsi-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499606" comment="qemu-block-rbd-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499607" comment="qemu-block-ssh-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499608" comment="qemu-guest-agent-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499609" comment="qemu-ipxe-1.0.0+-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499610" comment="qemu-kvm-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499611" comment="qemu-lang-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499612" comment="qemu-ppc-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499613" comment="qemu-s390-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499614" comment="qemu-seabios-1.12.0-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499615" comment="qemu-sgabios-8-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499616" comment="qemu-ui-curses-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499617" comment="qemu-ui-gtk-3.1.1.1-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499618" comment="qemu-vgabios-1.12.0-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499619" comment="qemu-x86-3.1.1.1-9.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139060" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Server Applications 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174920" ref_url="https://bugzilla.suse.com/1174920" source="BUGZILLA"/>
		<reference ref_id="1180405" ref_url="https://bugzilla.suse.com/1180405" source="BUGZILLA"/>
		<reference ref_id="1180406" ref_url="https://bugzilla.suse.com/1180406" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12100" ref_url="https://www.suse.com/security/cve/CVE-2020-12100/" source="CVE"/>
		<reference ref_id="CVE-2020-24386" ref_url="https://www.suse.com/security/cve/CVE-2020-24386/" source="CVE"/>
		<reference ref_id="CVE-2020-25275" ref_url="https://www.suse.com/security/cve/CVE-2020-25275/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008154.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 fixes the following issues:

Security issues fixed:

- CVE-2020-12100: Fixed a resource exhaustion caused by deeply nested MIME parts (bsc#1174920).
- CVE-2020-24386: Fixed an issue with IMAP hibernation that allowed users to access other users' emails (bsc#1180405).
- CVE-2020-25275: Fixed a crash when the 10000th MIME part was message/rfc822 (bsc#1180406).

Non-security issues fixed:

- Pigeonhole was updated to version 0.5.11.
- Dovecot was updated to version 2.3.11.3.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-05"/>
	<updated date="2021-01-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174920">SUSE bug 1174920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180405">SUSE bug 1180405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180406">SUSE bug 1180406</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12100/">CVE-2020-12100</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-24386/">CVE-2020-24386</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25275/">CVE-2020-25275</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-server-applications:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255508" comment="SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499620" comment="dovecot23-2.3.11.3-21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499621" comment="dovecot23-backend-mysql-2.3.11.3-21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499622" comment="dovecot23-backend-pgsql-2.3.11.3-21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499623" comment="dovecot23-backend-sqlite-2.3.11.3-21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499624" comment="dovecot23-devel-2.3.11.3-21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499625" comment="dovecot23-fts-2.3.11.3-21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499626" comment="dovecot23-fts-lucene-2.3.11.3-21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499627" comment="dovecot23-fts-solr-2.3.11.3-21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499628" comment="dovecot23-fts-squat-2.3.11.3-21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139061" version="1" class="patch">
	<metadata>
		<title>Security update for jakarta-commons-fileupload (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1128829" ref_url="https://bugzilla.suse.com/1128829" source="BUGZILLA"/>
		<reference ref_id="1128963" ref_url="https://bugzilla.suse.com/1128963" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-1000031" ref_url="https://www.suse.com/security/cve/CVE-2016-1000031/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1212-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006004.html" source="SUSE-SU"/>
		<description>
This update for jakarta-commons-fileupload fixes the following issue:

Security issue fixed:

- CVE-2016-1000031: Fixed remote execution (bsc#1128963, bsc#1128829).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-11"/>
	<updated date="2019-10-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1128829">SUSE bug 1128829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128963">SUSE bug 1128963</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-1000031/">CVE-2016-1000031</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500413" comment="jakarta-commons-fileupload-1.1.1-4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139062" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1138172" ref_url="https://bugzilla.suse.com/1138172" source="BUGZILLA"/>
		<reference ref_id="1138173" ref_url="https://bugzilla.suse.com/1138173" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11039" ref_url="https://www.suse.com/security/cve/CVE-2019-11039/" source="CVE"/>
		<reference ref_id="CVE-2019-11040" ref_url="https://www.suse.com/security/cve/CVE-2019-11040/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005701.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

Security issues fixed: 	  

- CVE-2019-11039: Fixed a heap-buffer-overflow on php_jpg_get16 (bsc#1138173).
- CVE-2019-11040: Fixed an out-of-bounds read due to an integer overflow in 
  iconv.c:_php_iconv_mime_decode() (bsc#1138172). 	  
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-12"/>
	<updated date="2019-07-12"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1138172">SUSE bug 1138172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138173">SUSE bug 1138173</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11039/">CVE-2019-11039</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11040/">CVE-2019-11040</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500480" comment="apache2-mod_php7-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500481" comment="php7-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500482" comment="php7-bcmath-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500483" comment="php7-bz2-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500484" comment="php7-calendar-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500485" comment="php7-ctype-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500486" comment="php7-curl-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500487" comment="php7-dba-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500488" comment="php7-devel-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500489" comment="php7-dom-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500490" comment="php7-enchant-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500491" comment="php7-exif-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500492" comment="php7-fastcgi-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500493" comment="php7-fileinfo-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500494" comment="php7-fpm-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500495" comment="php7-ftp-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500496" comment="php7-gd-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500497" comment="php7-gettext-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500498" comment="php7-gmp-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500499" comment="php7-iconv-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500500" comment="php7-intl-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500501" comment="php7-json-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500502" comment="php7-ldap-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500503" comment="php7-mbstring-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500504" comment="php7-mysql-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500505" comment="php7-odbc-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500506" comment="php7-opcache-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500507" comment="php7-openssl-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500508" comment="php7-pcntl-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500509" comment="php7-pdo-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500510" comment="php7-pear-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500511" comment="php7-pear-Archive_Tar-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500512" comment="php7-pgsql-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500513" comment="php7-phar-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500514" comment="php7-posix-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500515" comment="php7-shmop-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500516" comment="php7-snmp-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500517" comment="php7-soap-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500518" comment="php7-sockets-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500520" comment="php7-sqlite-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500521" comment="php7-sysvmsg-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500522" comment="php7-sysvsem-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500523" comment="php7-sysvshm-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500524" comment="php7-tokenizer-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500525" comment="php7-wddx-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500526" comment="php7-xmlreader-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500527" comment="php7-xmlrpc-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500528" comment="php7-xmlwriter-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500529" comment="php7-xsl-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500530" comment="php7-zip-7.2.5-4.35.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500531" comment="php7-zlib-7.2.5-4.35.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139063" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1111966" ref_url="https://bugzilla.suse.com/1111966" source="BUGZILLA"/>
		<reference ref_id="1131055" ref_url="https://bugzilla.suse.com/1131055" source="BUGZILLA"/>
		<reference ref_id="1136085" ref_url="https://bugzilla.suse.com/1136085" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-0199" ref_url="https://www.suse.com/security/cve/CVE-2019-0199/" source="CVE"/>
		<reference ref_id="CVE-2019-0221" ref_url="https://www.suse.com/security/cve/CVE-2019-0221/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1895-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005736.html" source="SUSE-SU"/>
		<description>
This update for tomcat to version 9.0.21 fixes the following issues:

Security issues fixed:

- CVE-2019-0199: Fixed a denial of service in the HTTP/2 implementation related to 
  streams with excessive numbers of SETTINGS frames (bsc#1131055).
- CVE-2019-0221: Fixed a cross site scripting vulnerability with the SSI printenv command (bsc#1136085).

Non-security issues fixed: 

- Increase maximum number of threads and open files for tomcat (bsc#1111966).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-18"/>
	<updated date="2019-07-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1111966">SUSE bug 1111966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131055">SUSE bug 1131055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136085">SUSE bug 1136085</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-0199/">CVE-2019-0199</cve>
	<cve impact="low" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-0221/">CVE-2019-0221</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500736" comment="tomcat-9.0.21-4.5.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500737" comment="tomcat-admin-webapps-9.0.21-4.5.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500738" comment="tomcat-el-3_0-api-9.0.21-4.5.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500739" comment="tomcat-jsp-2_3-api-9.0.21-4.5.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500740" comment="tomcat-lib-9.0.21-4.5.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500741" comment="tomcat-servlet-4_0-api-9.0.21-4.5.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500742" comment="tomcat-webapps-9.0.21-4.5.5 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139064" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1134209" ref_url="https://bugzilla.suse.com/1134209" source="BUGZILLA"/>
		<reference ref_id="1140290" ref_url="https://bugzilla.suse.com/1140290" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13173" ref_url="https://www.suse.com/security/cve/CVE-2019-13173/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2055-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005778.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

Security issue fixed:

- CVE-2019-13173: Fixed a potential file overwrite via hardlink in fstream.DirWriter() (bsc#1140290).

Non-security issue fixed:

- Backported fixes for OpenSSL 1.1.1 from nodejs8 (bsc#1134209).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-06"/>
	<updated date="2019-08-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1134209">SUSE bug 1134209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140290">SUSE bug 1140290</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13173/">CVE-2019-13173</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500532" comment="nodejs8-8.15.1-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500533" comment="nodejs8-devel-8.15.1-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500534" comment="nodejs8-docs-8.15.1-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500535" comment="npm8-8.15.1-3.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139065" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1134208" ref_url="https://bugzilla.suse.com/1134208" source="BUGZILLA"/>
		<reference ref_id="1140290" ref_url="https://bugzilla.suse.com/1140290" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13173" ref_url="https://www.suse.com/security/cve/CVE-2019-13173/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005798.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 to version 10.16.0 fixes the following issues:

Security issue fixed:

- CVE-2019-13173: Fixed a potential file overwrite via hardlink in fstream.DirWriter() (bsc#1140290).

Non-security issue fixed:

- Update to new upstream LTS version 10.16.0, including npm version 6.9.0 and openssl version 1.1.1b (bsc#1134208).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-07"/>
	<updated date="2019-08-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1134208">SUSE bug 1134208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140290">SUSE bug 1140290</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13173/">CVE-2019-13173</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500536" comment="nodejs10-10.16.0-1.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500537" comment="nodejs10-devel-10.16.0-1.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500538" comment="nodejs10-docs-10.16.0-1.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500539" comment="npm10-10.16.0-1.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139066" version="1" class="patch">
	<metadata>
		<title>Security update for apache-commons-beanutils (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1146657" ref_url="https://bugzilla.suse.com/1146657" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10086" ref_url="https://www.suse.com/security/cve/CVE-2019-10086/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005858.html" source="SUSE-SU"/>
		<description>
This update for apache-commons-beanutils fixes the following issues:

Security issue fixed:

- CVE-2019-10086: Added special BeanIntrospector class which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects (bsc#1146657).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-28"/>
	<updated date="2019-08-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1146657">SUSE bug 1146657</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10086/">CVE-2019-10086</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500540" comment="apache-commons-beanutils-1.9.2-4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139067" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1146090" ref_url="https://bugzilla.suse.com/1146090" source="BUGZILLA"/>
		<reference ref_id="1146091" ref_url="https://bugzilla.suse.com/1146091" source="BUGZILLA"/>
		<reference ref_id="1146093" ref_url="https://bugzilla.suse.com/1146093" source="BUGZILLA"/>
		<reference ref_id="1146094" ref_url="https://bugzilla.suse.com/1146094" source="BUGZILLA"/>
		<reference ref_id="1146095" ref_url="https://bugzilla.suse.com/1146095" source="BUGZILLA"/>
		<reference ref_id="1146097" ref_url="https://bugzilla.suse.com/1146097" source="BUGZILLA"/>
		<reference ref_id="1146099" ref_url="https://bugzilla.suse.com/1146099" source="BUGZILLA"/>
		<reference ref_id="1146100" ref_url="https://bugzilla.suse.com/1146100" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9511" ref_url="https://www.suse.com/security/cve/CVE-2019-9511/" source="CVE"/>
		<reference ref_id="CVE-2019-9512" ref_url="https://www.suse.com/security/cve/CVE-2019-9512/" source="CVE"/>
		<reference ref_id="CVE-2019-9513" ref_url="https://www.suse.com/security/cve/CVE-2019-9513/" source="CVE"/>
		<reference ref_id="CVE-2019-9514" ref_url="https://www.suse.com/security/cve/CVE-2019-9514/" source="CVE"/>
		<reference ref_id="CVE-2019-9515" ref_url="https://www.suse.com/security/cve/CVE-2019-9515/" source="CVE"/>
		<reference ref_id="CVE-2019-9516" ref_url="https://www.suse.com/security/cve/CVE-2019-9516/" source="CVE"/>
		<reference ref_id="CVE-2019-9517" ref_url="https://www.suse.com/security/cve/CVE-2019-9517/" source="CVE"/>
		<reference ref_id="CVE-2019-9518" ref_url="https://www.suse.com/security/cve/CVE-2019-9518/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005863.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 to version 10.16.3 fixes the following issues:

Security issues fixed:

- CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service (bsc#1146091).
- CVE-2019-9512: Fixed HTTP/2 flood using PING frames results in unbounded memory growth (bsc#1146099).
- CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service. (bsc#1146094).
- CVE-2019-9514: Fixed HTTP/2 implementation that is vulnerable to a reset flood, potentially leading to a denial of service (bsc#1146095).
- CVE-2019-9515: Fixed HTTP/2 flood using SETTINGS frames results in unbounded memory growth (bsc#1146100).
- CVE-2019-9516: Fixed HTTP/2 implementation that is vulnerable to a header leak, potentially leading to a denial of service (bsc#1146090).
- CVE-2019-9517: Fixed HTTP/2 implementations that are vulnerable to unconstrained interal data buffering (bsc#1146097).
- CVE-2019-9518: Fixed HTTP/2 implementation that is vulnerable to a flood of empty frames, potentially leading to a denial of service (bsc#1146093).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-02"/>
	<updated date="2019-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1146090">SUSE bug 1146090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146091">SUSE bug 1146091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146093">SUSE bug 1146093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146094">SUSE bug 1146094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146095">SUSE bug 1146095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146097">SUSE bug 1146097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146099">SUSE bug 1146099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146100">SUSE bug 1146100</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9511/">CVE-2019-9511</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9512/">CVE-2019-9512</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9513/">CVE-2019-9513</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9514/">CVE-2019-9514</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9515/">CVE-2019-9515</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9516/">CVE-2019-9516</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9517/">CVE-2019-9517</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9518/">CVE-2019-9518</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500541" comment="nodejs10-10.16.3-1.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500542" comment="nodejs10-devel-10.16.3-1.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500543" comment="nodejs10-docs-10.16.3-1.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500544" comment="npm10-10.16.3-1.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139068" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1144919" ref_url="https://bugzilla.suse.com/1144919" source="BUGZILLA"/>
		<reference ref_id="1146090" ref_url="https://bugzilla.suse.com/1146090" source="BUGZILLA"/>
		<reference ref_id="1146091" ref_url="https://bugzilla.suse.com/1146091" source="BUGZILLA"/>
		<reference ref_id="1146093" ref_url="https://bugzilla.suse.com/1146093" source="BUGZILLA"/>
		<reference ref_id="1146094" ref_url="https://bugzilla.suse.com/1146094" source="BUGZILLA"/>
		<reference ref_id="1146095" ref_url="https://bugzilla.suse.com/1146095" source="BUGZILLA"/>
		<reference ref_id="1146097" ref_url="https://bugzilla.suse.com/1146097" source="BUGZILLA"/>
		<reference ref_id="1146099" ref_url="https://bugzilla.suse.com/1146099" source="BUGZILLA"/>
		<reference ref_id="1146100" ref_url="https://bugzilla.suse.com/1146100" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-9511" ref_url="https://www.suse.com/security/cve/CVE-2019-9511/" source="CVE"/>
		<reference ref_id="CVE-2019-9512" ref_url="https://www.suse.com/security/cve/CVE-2019-9512/" source="CVE"/>
		<reference ref_id="CVE-2019-9513" ref_url="https://www.suse.com/security/cve/CVE-2019-9513/" source="CVE"/>
		<reference ref_id="CVE-2019-9514" ref_url="https://www.suse.com/security/cve/CVE-2019-9514/" source="CVE"/>
		<reference ref_id="CVE-2019-9515" ref_url="https://www.suse.com/security/cve/CVE-2019-9515/" source="CVE"/>
		<reference ref_id="CVE-2019-9516" ref_url="https://www.suse.com/security/cve/CVE-2019-9516/" source="CVE"/>
		<reference ref_id="CVE-2019-9517" ref_url="https://www.suse.com/security/cve/CVE-2019-9517/" source="CVE"/>
		<reference ref_id="CVE-2019-9518" ref_url="https://www.suse.com/security/cve/CVE-2019-9518/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005862.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 to version 8.16.1 fixes the following issues:

Security issues fixed:

- CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service (bsc#1146091).
- CVE-2019-9512: Fixed HTTP/2 flood using PING frames results in unbounded memory growth (bsc#1146099).
- CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service. (bsc#1146094).
- CVE-2019-9514: Fixed HTTP/2 implementation that is vulnerable to a reset flood, potentially leading to a denial of service (bsc#1146095).
- CVE-2019-9515: Fixed HTTP/2 flood using SETTINGS frames results in unbounded memory growth (bsc#1146100).
- CVE-2019-9516: Fixed HTTP/2 implementation that is vulnerable to a header leak, potentially leading to a denial of service (bsc#1146090).
- CVE-2019-9517: Fixed HTTP/2 implementations that are vulnerable to unconstrained interal data buffering (bsc#1146097).
- CVE-2019-9518: Fixed HTTP/2 implementation that is vulnerable to a flood of empty frames, potentially leading to a denial of service (bsc#1146093).

Bug fixes:

- Fixed that npm resolves its default config file like in all other versions, as /etc/nodejs/npmrc (bsc#1144919).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-02"/>
	<updated date="2019-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144919">SUSE bug 1144919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146090">SUSE bug 1146090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146091">SUSE bug 1146091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146093">SUSE bug 1146093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146094">SUSE bug 1146094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146095">SUSE bug 1146095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146097">SUSE bug 1146097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146099">SUSE bug 1146099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146100">SUSE bug 1146100</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9511/">CVE-2019-9511</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9512/">CVE-2019-9512</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9513/">CVE-2019-9513</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9514/">CVE-2019-9514</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9515/">CVE-2019-9515</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9516/">CVE-2019-9516</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9517/">CVE-2019-9517</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9518/">CVE-2019-9518</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500545" comment="nodejs8-8.16.1-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500546" comment="nodejs8-devel-8.16.1-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500547" comment="nodejs8-docs-8.16.1-3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500548" comment="npm8-8.16.1-3.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139069" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1145095" ref_url="https://bugzilla.suse.com/1145095" source="BUGZILLA"/>
		<reference ref_id="1146360" ref_url="https://bugzilla.suse.com/1146360" source="BUGZILLA"/>
		<reference ref_id="1151793" ref_url="https://bugzilla.suse.com/1151793" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11041" ref_url="https://www.suse.com/security/cve/CVE-2019-11041/" source="CVE"/>
		<reference ref_id="CVE-2019-11042" ref_url="https://www.suse.com/security/cve/CVE-2019-11042/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2503-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/005973.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

Security issues fixed:

- CVE-2019-11041: Fixed heap buffer over-read in exif_scan_thumbnail() (bsc#1146360).
- CVE-2019-11042: Fixed heap buffer over-read in exif_process_user_comment() (bsc#1145095).

Non-security issue fixed:

- Drop -n from php invocation from pecl (bsc#1151793).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-01"/>
	<updated date="2019-10-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1145095">SUSE bug 1145095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146360">SUSE bug 1146360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151793">SUSE bug 1151793</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11041/">CVE-2019-11041</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11042/">CVE-2019-11042</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500549" comment="apache2-mod_php7-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500550" comment="php7-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500551" comment="php7-bcmath-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500552" comment="php7-bz2-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500553" comment="php7-calendar-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500554" comment="php7-ctype-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500555" comment="php7-curl-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500556" comment="php7-dba-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500557" comment="php7-devel-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500558" comment="php7-dom-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500559" comment="php7-enchant-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500560" comment="php7-exif-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500561" comment="php7-fastcgi-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500562" comment="php7-fileinfo-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500563" comment="php7-fpm-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500564" comment="php7-ftp-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500565" comment="php7-gd-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500566" comment="php7-gettext-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500567" comment="php7-gmp-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500568" comment="php7-iconv-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500569" comment="php7-intl-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500570" comment="php7-json-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500571" comment="php7-ldap-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500572" comment="php7-mbstring-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500573" comment="php7-mysql-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500574" comment="php7-odbc-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500575" comment="php7-opcache-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500576" comment="php7-openssl-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500577" comment="php7-pcntl-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500578" comment="php7-pdo-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500579" comment="php7-pear-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500580" comment="php7-pear-Archive_Tar-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500581" comment="php7-pgsql-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500582" comment="php7-phar-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500583" comment="php7-posix-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500584" comment="php7-shmop-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500585" comment="php7-snmp-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500586" comment="php7-soap-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500587" comment="php7-sockets-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500589" comment="php7-sqlite-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500590" comment="php7-sysvmsg-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500591" comment="php7-sysvsem-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500592" comment="php7-sysvshm-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500593" comment="php7-tokenizer-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500594" comment="php7-wddx-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500595" comment="php7-xmlreader-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500596" comment="php7-xmlrpc-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500597" comment="php7-xmlwriter-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500598" comment="php7-xsl-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500599" comment="php7-zip-7.2.5-4.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500600" comment="php7-zlib-7.2.5-4.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139070" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1154999" ref_url="https://bugzilla.suse.com/1154999" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11043" ref_url="https://www.suse.com/security/cve/CVE-2019-11043/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006071.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

Security issue fixed:

- CVE-2019-11043: Fixed possible remote code execution via env_path_info underflow in fpm_main.c (bsc#1154999).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-30"/>
	<updated date="2019-10-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1154999">SUSE bug 1154999</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11043/">CVE-2019-11043</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500601" comment="apache2-mod_php7-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500602" comment="php7-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500603" comment="php7-bcmath-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500604" comment="php7-bz2-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500605" comment="php7-calendar-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500606" comment="php7-ctype-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500607" comment="php7-curl-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500608" comment="php7-dba-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500609" comment="php7-devel-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500610" comment="php7-dom-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500611" comment="php7-enchant-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500612" comment="php7-exif-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500613" comment="php7-fastcgi-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500614" comment="php7-fileinfo-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500615" comment="php7-fpm-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500616" comment="php7-ftp-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500617" comment="php7-gd-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500618" comment="php7-gettext-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500619" comment="php7-gmp-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500620" comment="php7-iconv-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500621" comment="php7-intl-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500622" comment="php7-json-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500623" comment="php7-ldap-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500624" comment="php7-mbstring-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500625" comment="php7-mysql-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500626" comment="php7-odbc-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500627" comment="php7-opcache-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500628" comment="php7-openssl-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500629" comment="php7-pcntl-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500630" comment="php7-pdo-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500631" comment="php7-pear-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500632" comment="php7-pear-Archive_Tar-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500633" comment="php7-pgsql-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500634" comment="php7-phar-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500635" comment="php7-posix-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500636" comment="php7-shmop-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500637" comment="php7-snmp-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500638" comment="php7-soap-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500639" comment="php7-sockets-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500641" comment="php7-sqlite-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500642" comment="php7-sysvmsg-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500643" comment="php7-sysvsem-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500644" comment="php7-sysvshm-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500645" comment="php7-tokenizer-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500646" comment="php7-wddx-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500647" comment="php7-xmlreader-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500648" comment="php7-xmlrpc-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500649" comment="php7-xmlwriter-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500650" comment="php7-xsl-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500651" comment="php7-zip-7.2.5-4.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500652" comment="php7-zlib-7.2.5-4.46.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139071" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1159922" ref_url="https://bugzilla.suse.com/1159922" source="BUGZILLA"/>
		<reference ref_id="1159923" ref_url="https://bugzilla.suse.com/1159923" source="BUGZILLA"/>
		<reference ref_id="1159924" ref_url="https://bugzilla.suse.com/1159924" source="BUGZILLA"/>
		<reference ref_id="1159927" ref_url="https://bugzilla.suse.com/1159927" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11045" ref_url="https://www.suse.com/security/cve/CVE-2019-11045/" source="CVE"/>
		<reference ref_id="CVE-2019-11046" ref_url="https://www.suse.com/security/cve/CVE-2019-11046/" source="CVE"/>
		<reference ref_id="CVE-2019-11047" ref_url="https://www.suse.com/security/cve/CVE-2019-11047/" source="CVE"/>
		<reference ref_id="CVE-2019-11050" ref_url="https://www.suse.com/security/cve/CVE-2019-11050/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0101-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006350.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2019-11045: Fixed an issue with improper input validation in the filename handling of the DirectoryIterator class (bsc#1159923).
- CVE-2019-11046: Fixed an information leak in bc_shift_addsub() (bsc#1159924).
- CVE-2019-11047, CVE-2019-11050: Fixed multiple information leaks in exif_read_data() (bsc#1159922, bsc#1159927).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-14"/>
	<updated date="2020-01-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1159922">SUSE bug 1159922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159923">SUSE bug 1159923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159924">SUSE bug 1159924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159927">SUSE bug 1159927</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11045/">CVE-2019-11045</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11046/">CVE-2019-11046</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11047/">CVE-2019-11047</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11050/">CVE-2019-11050</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500661" comment="apache2-mod_php7-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500662" comment="php7-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500663" comment="php7-bcmath-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500664" comment="php7-bz2-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500665" comment="php7-calendar-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500666" comment="php7-ctype-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500667" comment="php7-curl-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500668" comment="php7-dba-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500669" comment="php7-devel-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500670" comment="php7-dom-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500671" comment="php7-enchant-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500672" comment="php7-exif-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500673" comment="php7-fastcgi-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500674" comment="php7-fileinfo-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500675" comment="php7-fpm-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500676" comment="php7-ftp-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500677" comment="php7-gd-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500678" comment="php7-gettext-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500679" comment="php7-gmp-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500680" comment="php7-iconv-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500681" comment="php7-intl-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500682" comment="php7-json-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500683" comment="php7-ldap-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500684" comment="php7-mbstring-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500685" comment="php7-mysql-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500686" comment="php7-odbc-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500687" comment="php7-opcache-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500688" comment="php7-openssl-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500689" comment="php7-pcntl-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500690" comment="php7-pdo-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500691" comment="php7-pear-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500692" comment="php7-pear-Archive_Tar-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500693" comment="php7-pgsql-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500694" comment="php7-phar-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500695" comment="php7-posix-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500696" comment="php7-shmop-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500697" comment="php7-snmp-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500698" comment="php7-soap-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500699" comment="php7-sockets-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500700" comment="php7-sodium-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500701" comment="php7-sqlite-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500702" comment="php7-sysvmsg-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500703" comment="php7-sysvsem-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500704" comment="php7-sysvshm-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500705" comment="php7-tokenizer-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500706" comment="php7-wddx-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500707" comment="php7-xmlreader-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500708" comment="php7-xmlrpc-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500709" comment="php7-xmlwriter-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500710" comment="php7-xsl-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500711" comment="php7-zip-7.2.5-4.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500712" comment="php7-zlib-7.2.5-4.49.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139072" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1149792" ref_url="https://bugzilla.suse.com/1149792" source="BUGZILLA"/>
		<reference ref_id="1159352" ref_url="https://bugzilla.suse.com/1159352" source="BUGZILLA"/>
		<reference ref_id="1159812" ref_url="https://bugzilla.suse.com/1159812" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16775" ref_url="https://www.suse.com/security/cve/CVE-2019-16775/" source="CVE"/>
		<reference ref_id="CVE-2019-16776" ref_url="https://www.suse.com/security/cve/CVE-2019-16776/" source="CVE"/>
		<reference ref_id="CVE-2019-16777" ref_url="https://www.suse.com/security/cve/CVE-2019-16777/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0104-1" ref_url="https://www.suse.com/support/update/announcement/2020/suse-su-20200104-1.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 to version 10.18.0 fixes the following issues:

Security issues fixed:

- CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing
    an arbitrary path overwrite and access via 'bin' field (bsc#1159352).
- Added support for chacha20-poly1305 for Authenticated encryption (AEAD).

Non-security issues fixed:

- Fixed wrong path in gypi files (bsc#1159812).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-15"/>
	<updated date="2020-01-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1149792">SUSE bug 1149792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159352">SUSE bug 1159352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159812">SUSE bug 1159812</bugzilla>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16775/">CVE-2019-16775</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16776/">CVE-2019-16776</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16777/">CVE-2019-16777</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500713" comment="nodejs10-10.18.0-1.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500714" comment="nodejs10-devel-10.18.0-1.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500715" comment="nodejs10-docs-10.18.0-1.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500716" comment="npm10-10.18.0-1.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139073" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1168326" ref_url="https://bugzilla.suse.com/1168326" source="BUGZILLA"/>
		<reference ref_id="1168352" ref_url="https://bugzilla.suse.com/1168352" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7064" ref_url="https://www.suse.com/security/cve/CVE-2020-7064/" source="CVE"/>
		<reference ref_id="CVE-2020-7066" ref_url="https://www.suse.com/security/cve/CVE-2020-7066/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1199-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006787.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2020-7064: Fixed a one byte read of uninitialized memory in exif_read_data() (bsc#1168326).
- CVE-2020-7066: Fixed URL truncation get_headers() if the URL contains zero (\0) character (bsc#1168352).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-06"/>
	<updated date="2020-05-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1168326">SUSE bug 1168326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168352">SUSE bug 1168352</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7064/">CVE-2020-7064</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7066/">CVE-2020-7066</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500743" comment="apache2-mod_php7-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496266" comment="libtidy5-5.4.0-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500744" comment="php7-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500745" comment="php7-bcmath-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500746" comment="php7-bz2-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500747" comment="php7-calendar-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500748" comment="php7-ctype-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500749" comment="php7-curl-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500750" comment="php7-dba-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500751" comment="php7-devel-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500752" comment="php7-dom-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500753" comment="php7-enchant-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500754" comment="php7-exif-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500755" comment="php7-fastcgi-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500756" comment="php7-fileinfo-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500757" comment="php7-fpm-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500758" comment="php7-ftp-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500759" comment="php7-gd-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500760" comment="php7-gettext-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500761" comment="php7-gmp-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500762" comment="php7-iconv-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500763" comment="php7-intl-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500764" comment="php7-json-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500765" comment="php7-ldap-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500766" comment="php7-mbstring-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500767" comment="php7-mysql-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500768" comment="php7-odbc-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500769" comment="php7-opcache-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500770" comment="php7-openssl-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500771" comment="php7-pcntl-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500772" comment="php7-pdo-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500773" comment="php7-pear-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500774" comment="php7-pear-Archive_Tar-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500775" comment="php7-pgsql-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500776" comment="php7-phar-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500777" comment="php7-posix-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500778" comment="php7-readline-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500779" comment="php7-shmop-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500780" comment="php7-snmp-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500781" comment="php7-soap-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500782" comment="php7-sockets-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500783" comment="php7-sodium-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500784" comment="php7-sqlite-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500785" comment="php7-sysvmsg-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500786" comment="php7-sysvsem-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500787" comment="php7-sysvshm-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500788" comment="php7-tidy-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500789" comment="php7-tokenizer-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500790" comment="php7-wddx-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500791" comment="php7-xmlreader-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500792" comment="php7-xmlrpc-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500793" comment="php7-xmlwriter-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500794" comment="php7-xsl-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500795" comment="php7-zip-7.2.5-4.55.7 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500796" comment="php7-zlib-7.2.5-4.55.7 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139074" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171928" ref_url="https://bugzilla.suse.com/1171928" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-9484" ref_url="https://www.suse.com/security/cve/CVE-2020-9484/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1363-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006843.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- Update to Tomcat 9.0.35. See changelog at
  http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.35_(markt)

* CVE-2020-9484 (bsc#1171928)
  Apache Tomcat Remote Code Execution via session persistence

  If an attacker was able to control the contents and name of a file on a
  server configured to use the PersistenceManager, then the attacker could
  have triggered a remote code execution via deserialization of the file under
  their control.

		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-21"/>
	<updated date="2020-05-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171928">SUSE bug 1171928</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9484/">CVE-2020-9484</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500797" comment="tomcat-9.0.35-4.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500798" comment="tomcat-admin-webapps-9.0.35-4.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500799" comment="tomcat-el-3_0-api-9.0.35-4.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500800" comment="tomcat-jsp-2_3-api-9.0.35-4.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500801" comment="tomcat-lib-9.0.35-4.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500802" comment="tomcat-servlet-4_0-api-9.0.35-4.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500803" comment="tomcat-webapps-9.0.35-4.30.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139075" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162117" ref_url="https://bugzilla.suse.com/1162117" source="BUGZILLA"/>
		<reference ref_id="1166844" ref_url="https://bugzilla.suse.com/1166844" source="BUGZILLA"/>
		<reference ref_id="1166916" ref_url="https://bugzilla.suse.com/1166916" source="BUGZILLA"/>
		<reference ref_id="1172442" ref_url="https://bugzilla.suse.com/1172442" source="BUGZILLA"/>
		<reference ref_id="1172443" ref_url="https://bugzilla.suse.com/1172443" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10531" ref_url="https://www.suse.com/security/cve/CVE-2020-10531/" source="CVE"/>
		<reference ref_id="CVE-2020-11080" ref_url="https://www.suse.com/security/cve/CVE-2020-11080/" source="CVE"/>
		<reference ref_id="CVE-2020-7598" ref_url="https://www.suse.com/security/cve/CVE-2020-7598/" source="CVE"/>
		<reference ref_id="CVE-2020-8174" ref_url="https://www.suse.com/security/cve/CVE-2020-8174/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1568-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006903.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

nodejs10 was updated to version 10.21.0 	  

- CVE-2020-8174: Fixed multiple memory corruption in napi_get_value_string_*() (bsc#1172443).
- CVE-2020-11080: Fixed a potential denial of service when receiving unreasonably large HTTP/2 SETTINGS frames (bsc#1172442). 
- CVE-2020-10531: Fixed an integer overflow in UnicodeString:doAppend() (bsc#1166844).
- Fixed an issue with openssl by adding getrandom syscall definition for all Linux platforms (bsc#1162117).

npm was updated to 6.14.3 

- CVE-2020-7598: Fixed an issue which could have tricked minimist into adding or modifying 
  properties of Object.prototype (bsc#1166916).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-09"/>
	<updated date="2020-06-09"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1162117">SUSE bug 1162117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166844">SUSE bug 1166844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166916">SUSE bug 1166916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172442">SUSE bug 1172442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172443">SUSE bug 1172443</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10531/">CVE-2020-10531</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11080/">CVE-2020-11080</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-7598/">CVE-2020-7598</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8174/">CVE-2020-8174</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500804" comment="nodejs10-10.21.0-1.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500805" comment="nodejs10-devel-10.21.0-1.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500806" comment="nodejs10-docs-10.21.0-1.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500807" comment="npm10-10.21.0-1.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139076" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Critical)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1166916" ref_url="https://bugzilla.suse.com/1166916" source="BUGZILLA"/>
		<reference ref_id="1172442" ref_url="https://bugzilla.suse.com/1172442" source="BUGZILLA"/>
		<reference ref_id="1172443" ref_url="https://bugzilla.suse.com/1172443" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11080" ref_url="https://www.suse.com/security/cve/CVE-2020-11080/" source="CVE"/>
		<reference ref_id="CVE-2020-7598" ref_url="https://www.suse.com/security/cve/CVE-2020-7598/" source="CVE"/>
		<reference ref_id="CVE-2020-8174" ref_url="https://www.suse.com/security/cve/CVE-2020-8174/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1576-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006908.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

- CVE-2020-8174: Fixed multiple memory corruption in napi_get_value_string_*() (bsc#1172443).
- CVE-2020-11080: Fixed a potential denial of service when receiving unreasonably large HTTP/2 SETTINGS frames (bsc#1172442). 
- CVE-2020-7598: Fixed an issue which could have tricked minimist into adding or modifying 
  properties of Object.prototype (bsc#1166916).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-09"/>
	<updated date="2020-06-09"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1166916">SUSE bug 1166916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172442">SUSE bug 1172442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172443">SUSE bug 1172443</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11080/">CVE-2020-11080</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-7598/">CVE-2020-7598</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8174/">CVE-2020-8174</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500808" comment="nodejs8-8.17.0-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500809" comment="nodejs8-devel-8.17.0-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500810" comment="nodejs8-docs-8.17.0-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500811" comment="npm8-8.17.0-3.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139077" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1171999" ref_url="https://bugzilla.suse.com/1171999" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11048" ref_url="https://www.suse.com/security/cve/CVE-2019-11048/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1661-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006976.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

Security issue fixed:

- CVE-2019-11048: Improved the handling of overly long filenames or field names in HTTP file uploads (bsc#1171999).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-18"/>
	<updated date="2020-06-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1171999">SUSE bug 1171999</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11048/">CVE-2019-11048</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500812" comment="apache2-mod_php7-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500813" comment="php7-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500814" comment="php7-bcmath-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500815" comment="php7-bz2-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500816" comment="php7-calendar-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500817" comment="php7-ctype-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500818" comment="php7-curl-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500819" comment="php7-dba-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500820" comment="php7-devel-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500821" comment="php7-dom-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500822" comment="php7-enchant-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500823" comment="php7-exif-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500824" comment="php7-fastcgi-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500825" comment="php7-fileinfo-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500826" comment="php7-fpm-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500827" comment="php7-ftp-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500828" comment="php7-gd-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500829" comment="php7-gettext-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500830" comment="php7-gmp-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500831" comment="php7-iconv-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500832" comment="php7-intl-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500833" comment="php7-json-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500834" comment="php7-ldap-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500835" comment="php7-mbstring-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500836" comment="php7-mysql-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500837" comment="php7-odbc-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500838" comment="php7-opcache-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500839" comment="php7-openssl-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500840" comment="php7-pcntl-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500841" comment="php7-pdo-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500842" comment="php7-pear-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500843" comment="php7-pear-Archive_Tar-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500844" comment="php7-pgsql-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500845" comment="php7-phar-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500846" comment="php7-posix-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500847" comment="php7-readline-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500848" comment="php7-shmop-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500849" comment="php7-snmp-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500850" comment="php7-soap-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500851" comment="php7-sockets-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500852" comment="php7-sodium-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500853" comment="php7-sqlite-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500854" comment="php7-sysvmsg-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500855" comment="php7-sysvsem-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500856" comment="php7-sysvshm-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500857" comment="php7-tidy-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500858" comment="php7-tokenizer-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500859" comment="php7-wddx-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500860" comment="php7-xmlreader-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500861" comment="php7-xmlrpc-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500862" comment="php7-xmlwriter-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500863" comment="php7-xsl-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500864" comment="php7-zip-7.2.5-4.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500865" comment="php7-zlib-7.2.5-4.58.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139078" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172405" ref_url="https://bugzilla.suse.com/1172405" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8022" ref_url="https://www.suse.com/security/cve/CVE-2020-8022/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/007048.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2020-8022: Fixed a local root exploit due to improper permissions (bsc#1172405)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-26"/>
	<updated date="2020-06-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172405">SUSE bug 1172405</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8022/">CVE-2020-8022</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500866" comment="tomcat-9.0.35-4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500867" comment="tomcat-admin-webapps-9.0.35-4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500868" comment="tomcat-el-3_0-api-9.0.35-4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500869" comment="tomcat-jsp-2_3-api-9.0.35-4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500870" comment="tomcat-lib-9.0.35-4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500871" comment="tomcat-servlet-4_0-api-9.0.35-4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500872" comment="tomcat-webapps-9.0.35-4.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139079" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173389" ref_url="https://bugzilla.suse.com/1173389" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11996" ref_url="https://www.suse.com/security/cve/CVE-2020-11996/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007154.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

Tomcat was updated to 9.0.36 See changelog at

- CVE-2020-11996: Fixed an issue which by sending a specially crafted sequence of HTTP/2 requests could have triggered high CPU
  usage for several seconds making potentially the server unresponsive (bsc#1173389).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-20"/>
	<updated date="2020-07-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173389">SUSE bug 1173389</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-11996/">CVE-2020-11996</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500873" comment="tomcat-9.0.36-4.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500874" comment="tomcat-admin-webapps-9.0.36-4.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500875" comment="tomcat-el-3_0-api-9.0.36-4.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500876" comment="tomcat-jsp-2_3-api-9.0.36-4.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500877" comment="tomcat-lib-9.0.36-4.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500878" comment="tomcat-servlet-4_0-api-9.0.36-4.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500879" comment="tomcat-webapps-9.0.36-4.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139080" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1174117" ref_url="https://bugzilla.suse.com/1174117" source="BUGZILLA"/>
		<reference ref_id="1174121" ref_url="https://bugzilla.suse.com/1174121" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13934" ref_url="https://www.suse.com/security/cve/CVE-2020-13934/" source="CVE"/>
		<reference ref_id="CVE-2020-13935" ref_url="https://www.suse.com/security/cve/CVE-2020-13935/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2046-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007184.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- Fixed CVEs:
  * CVE-2020-13934 (bsc#1174121)
  * CVE-2020-13935 (bsc#1174117)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-24"/>
	<updated date="2020-07-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174117">SUSE bug 1174117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174121">SUSE bug 1174121</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13934/">CVE-2020-13934</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13935/">CVE-2020-13935</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500880" comment="tomcat-9.0.36-4.41.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500881" comment="tomcat-admin-webapps-9.0.36-4.41.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500882" comment="tomcat-el-3_0-api-9.0.36-4.41.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500883" comment="tomcat-jsp-2_3-api-9.0.36-4.41.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500884" comment="tomcat-lib-9.0.36-4.41.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500885" comment="tomcat-servlet-4_0-api-9.0.36-4.41.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500886" comment="tomcat-webapps-9.0.36-4.41.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139081" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173786" ref_url="https://bugzilla.suse.com/1173786" source="BUGZILLA"/>
		<reference ref_id="1174010" ref_url="https://bugzilla.suse.com/1174010" source="BUGZILLA"/>
		<reference ref_id="1175223" ref_url="https://bugzilla.suse.com/1175223" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7068" ref_url="https://www.suse.com/security/cve/CVE-2020-7068/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007333.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223).
- Do not install outdated README.SUSE (bsc#1174010).
- Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-02"/>
	<updated date="2020-09-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173786">SUSE bug 1173786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174010">SUSE bug 1174010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175223">SUSE bug 1175223</bugzilla>
	<cve impact="moderate" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7068/">CVE-2020-7068</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500887" comment="apache2-mod_php7-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500888" comment="php7-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500889" comment="php7-bcmath-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500890" comment="php7-bz2-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500891" comment="php7-calendar-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500892" comment="php7-ctype-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500893" comment="php7-curl-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500894" comment="php7-dba-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500895" comment="php7-devel-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500896" comment="php7-dom-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500897" comment="php7-enchant-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500898" comment="php7-exif-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500899" comment="php7-fastcgi-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500900" comment="php7-fileinfo-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500901" comment="php7-fpm-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500902" comment="php7-ftp-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500903" comment="php7-gd-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500904" comment="php7-gettext-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500905" comment="php7-gmp-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500906" comment="php7-iconv-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500907" comment="php7-intl-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500908" comment="php7-json-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500909" comment="php7-ldap-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500910" comment="php7-mbstring-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500911" comment="php7-mysql-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500912" comment="php7-odbc-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500913" comment="php7-opcache-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500914" comment="php7-openssl-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500915" comment="php7-pcntl-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500916" comment="php7-pdo-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500917" comment="php7-pear-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500918" comment="php7-pear-Archive_Tar-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500919" comment="php7-pgsql-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500920" comment="php7-phar-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500921" comment="php7-posix-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500922" comment="php7-readline-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500923" comment="php7-shmop-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500924" comment="php7-snmp-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500925" comment="php7-soap-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500926" comment="php7-sockets-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500927" comment="php7-sodium-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500928" comment="php7-sqlite-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500929" comment="php7-sysvmsg-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500930" comment="php7-sysvsem-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500931" comment="php7-sysvshm-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500932" comment="php7-tidy-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500933" comment="php7-tokenizer-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500934" comment="php7-wddx-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500935" comment="php7-xmlreader-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500936" comment="php7-xmlrpc-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500937" comment="php7-xmlwriter-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500938" comment="php7-xsl-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500939" comment="php7-zip-7.2.5-4.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500940" comment="php7-zlib-7.2.5-4.61.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139082" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172686" ref_url="https://bugzilla.suse.com/1172686" source="BUGZILLA"/>
		<reference ref_id="1173937" ref_url="https://bugzilla.suse.com/1173937" source="BUGZILLA"/>
		<reference ref_id="1176589" ref_url="https://bugzilla.suse.com/1176589" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15095" ref_url="https://www.suse.com/security/cve/CVE-2020-15095/" source="CVE"/>
		<reference ref_id="CVE-2020-8252" ref_url="https://www.suse.com/security/cve/CVE-2020-8252/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007514.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- nodejs10 was updated to 10.22.1 LTS:
   - CVE-2020-8252: Fixed a buffer overflow in realpath (bsc#1176589).
   - CVE-2020-15095: Fixed an information leak through log files (bsc#1173937).
- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686)	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-02"/>
	<updated date="2020-10-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172686">SUSE bug 1172686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173937">SUSE bug 1173937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176589">SUSE bug 1176589</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-15095/">CVE-2020-15095</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8252/">CVE-2020-8252</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500941" comment="nodejs10-10.22.1-1.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500942" comment="nodejs10-devel-10.22.1-1.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500943" comment="nodejs10-docs-10.22.1-1.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500944" comment="npm10-10.22.1-1.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139083" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1172686" ref_url="https://bugzilla.suse.com/1172686" source="BUGZILLA"/>
		<reference ref_id="1173937" ref_url="https://bugzilla.suse.com/1173937" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15095" ref_url="https://www.suse.com/security/cve/CVE-2020-15095/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2870-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007529.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

- CVE-2020-15095: Fixed information leak through log files (bsc#1173937).
- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-06"/>
	<updated date="2020-10-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172686">SUSE bug 1172686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173937">SUSE bug 1173937</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-15095/">CVE-2020-15095</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500945" comment="nodejs8-8.17.0-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500946" comment="nodejs8-devel-8.17.0-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500947" comment="nodejs8-docs-8.17.0-3.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500948" comment="npm8-8.17.0-3.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139084" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1139924" ref_url="https://bugzilla.suse.com/1139924" source="BUGZILLA"/>
		<reference ref_id="1159723" ref_url="https://bugzilla.suse.com/1159723" source="BUGZILLA"/>
		<reference ref_id="1159729" ref_url="https://bugzilla.suse.com/1159729" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10072" ref_url="https://www.suse.com/security/cve/CVE-2019-10072/" source="CVE"/>
		<reference ref_id="CVE-2019-12418" ref_url="https://www.suse.com/security/cve/CVE-2019-12418/" source="CVE"/>
		<reference ref_id="CVE-2019-17563" ref_url="https://www.suse.com/security/cve/CVE-2019-17563/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0029-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006307.html" source="SUSE-SU"/>
		<description>
This update for tomcat to version 9.0.30 fixes the following issues:

Security issue fixed:

- CVE-2019-12418: Fixed a local privilege escalation through by manipulating the RMI registry and performing a man-in-the-middle attack (bsc#1159723).
- CVE-2019-17563: Fixed a session fixation attack when using FORM authentication (bsc#1159729).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-07"/>
	<updated date="2020-01-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1139924">SUSE bug 1139924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159723">SUSE bug 1159723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159729">SUSE bug 1159729</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10072/">CVE-2019-10072</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-12418/">CVE-2019-12418</cve>
	<cve impact="low" cvss3="3.4/CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-17563/">CVE-2019-17563</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500949" comment="tomcat-9.0.30-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500950" comment="tomcat-admin-webapps-9.0.30-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500951" comment="tomcat-el-3_0-api-9.0.30-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500952" comment="tomcat-jsp-2_3-api-9.0.30-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500953" comment="tomcat-lib-9.0.30-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500954" comment="tomcat-servlet-4_0-api-9.0.30-4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500955" comment="tomcat-webapps-9.0.30-4.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139085" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1173786" ref_url="https://bugzilla.suse.com/1173786" source="BUGZILLA"/>
		<reference ref_id="1177351" ref_url="https://bugzilla.suse.com/1177351" source="BUGZILLA"/>
		<reference ref_id="1177352" ref_url="https://bugzilla.suse.com/1177352" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7069" ref_url="https://www.suse.com/security/cve/CVE-2020-7069/" source="CVE"/>
		<reference ref_id="CVE-2020-7070" ref_url="https://www.suse.com/security/cve/CVE-2020-7070/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007610.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV,
  only first 7 bytes of the IV was used (bsc#1177351).
- CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352). 
- Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786) 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-22"/>
	<updated date="2020-10-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173786">SUSE bug 1173786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177351">SUSE bug 1177351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177352">SUSE bug 1177352</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-7069/">CVE-2020-7069</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-7070/">CVE-2020-7070</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500956" comment="apache2-mod_php7-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500957" comment="php7-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500958" comment="php7-bcmath-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500959" comment="php7-bz2-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500960" comment="php7-calendar-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500961" comment="php7-ctype-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500962" comment="php7-curl-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500963" comment="php7-dba-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500964" comment="php7-devel-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500965" comment="php7-dom-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500966" comment="php7-enchant-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500967" comment="php7-exif-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500968" comment="php7-fastcgi-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500969" comment="php7-fileinfo-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500970" comment="php7-fpm-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500971" comment="php7-ftp-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500972" comment="php7-gd-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500973" comment="php7-gettext-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500974" comment="php7-gmp-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500975" comment="php7-iconv-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500976" comment="php7-intl-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500977" comment="php7-json-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500978" comment="php7-ldap-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500979" comment="php7-mbstring-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500980" comment="php7-mysql-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500981" comment="php7-odbc-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500982" comment="php7-opcache-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500983" comment="php7-openssl-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500984" comment="php7-pcntl-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500985" comment="php7-pdo-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500986" comment="php7-pear-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500987" comment="php7-pear-Archive_Tar-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500988" comment="php7-pgsql-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500989" comment="php7-phar-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500990" comment="php7-posix-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500991" comment="php7-readline-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500992" comment="php7-shmop-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500993" comment="php7-snmp-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500994" comment="php7-soap-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500995" comment="php7-sockets-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500996" comment="php7-sodium-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500997" comment="php7-sqlite-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500998" comment="php7-sysvmsg-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500999" comment="php7-sysvsem-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501000" comment="php7-sysvshm-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501001" comment="php7-tidy-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501002" comment="php7-tokenizer-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501003" comment="php7-wddx-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501004" comment="php7-xmlreader-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501005" comment="php7-xmlrpc-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501006" comment="php7-xmlwriter-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501007" comment="php7-xsl-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501008" comment="php7-zip-7.2.5-4.67.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501009" comment="php7-zlib-7.2.5-4.67.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139086" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1177582" ref_url="https://bugzilla.suse.com/1177582" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13943" ref_url="https://www.suse.com/security/cve/CVE-2020-13943/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3069-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007654.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2020-13943: Fixed HTTP/2 Request mix-up (bsc#1177582)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-28"/>
	<updated date="2020-10-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177582">SUSE bug 1177582</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-13943/">CVE-2020-13943</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501010" comment="tomcat-9.0.36-4.47.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501011" comment="tomcat-admin-webapps-9.0.36-4.47.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501012" comment="tomcat-el-3_0-api-9.0.36-4.47.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501013" comment="tomcat-jsp-2_3-api-9.0.36-4.47.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501014" comment="tomcat-lib-9.0.36-4.47.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501015" comment="tomcat-servlet-4_0-api-9.0.36-4.47.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501016" comment="tomcat-webapps-9.0.36-4.47.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139087" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1149792" ref_url="https://bugzilla.suse.com/1149792" source="BUGZILLA"/>
		<reference ref_id="1159352" ref_url="https://bugzilla.suse.com/1159352" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16775" ref_url="https://www.suse.com/security/cve/CVE-2019-16775/" source="CVE"/>
		<reference ref_id="CVE-2019-16776" ref_url="https://www.suse.com/security/cve/CVE-2019-16776/" source="CVE"/>
		<reference ref_id="CVE-2019-16777" ref_url="https://www.suse.com/security/cve/CVE-2019-16777/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0043-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006312.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 to version 8.17.0 fixes the following issues:

Security issues fixed:

- CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing
    an arbitrary path overwrite and access via 'bin' field (bsc#1159352).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-08"/>
	<updated date="2020-01-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1149792">SUSE bug 1149792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159352">SUSE bug 1159352</bugzilla>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16775/">CVE-2019-16775</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16776/">CVE-2019-16776</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-16777/">CVE-2019-16777</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500724" comment="nodejs8-8.17.0-3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500725" comment="nodejs8-devel-8.17.0-3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500726" comment="nodejs8-docs-8.17.0-3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500727" comment="npm8-8.17.0-3.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139088" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1163102" ref_url="https://bugzilla.suse.com/1163102" source="BUGZILLA"/>
		<reference ref_id="1163103" ref_url="https://bugzilla.suse.com/1163103" source="BUGZILLA"/>
		<reference ref_id="1163104" ref_url="https://bugzilla.suse.com/1163104" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15604" ref_url="https://www.suse.com/security/cve/CVE-2019-15604/" source="CVE"/>
		<reference ref_id="CVE-2019-15605" ref_url="https://www.suse.com/security/cve/CVE-2019-15605/" source="CVE"/>
		<reference ref_id="CVE-2019-15606" ref_url="https://www.suse.com/security/cve/CVE-2019-15606/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006527.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

Security issues fixed:

- CVE-2019-15604: Fixed a remotely triggerable assertion in the TLS server via a crafted certificate string (CVE-2019-15604, bsc#1163104).
- CVE-2019-15605: Fixed an HTTP request smuggling vulnerability via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102).
- CVE-2019-15606: Fixed the white space sanitation of HTTP headers (CVE-2019-15606, bsc#1163103).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-25"/>
	<updated date="2020-02-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1163102">SUSE bug 1163102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163103">SUSE bug 1163103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163104">SUSE bug 1163104</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15604/">CVE-2019-15604</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-15605/">CVE-2019-15605</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15606/">CVE-2019-15606</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500728" comment="nodejs8-8.17.0-3.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500729" comment="nodejs8-devel-8.17.0-3.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500730" comment="nodejs8-docs-8.17.0-3.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500731" comment="npm8-8.17.0-3.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139089" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1163102" ref_url="https://bugzilla.suse.com/1163102" source="BUGZILLA"/>
		<reference ref_id="1163103" ref_url="https://bugzilla.suse.com/1163103" source="BUGZILLA"/>
		<reference ref_id="1163104" ref_url="https://bugzilla.suse.com/1163104" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15604" ref_url="https://www.suse.com/security/cve/CVE-2019-15604/" source="CVE"/>
		<reference ref_id="CVE-2019-15605" ref_url="https://www.suse.com/security/cve/CVE-2019-15605/" source="CVE"/>
		<reference ref_id="CVE-2019-15606" ref_url="https://www.suse.com/security/cve/CVE-2019-15606/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006526.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

nodejs10 was updated to version 10.19.0.

Security issues fixed:

- CVE-2019-15604: Fixed a remotely triggerable assertion in the TLS server via a crafted certificate string (CVE-2019-15604, bsc#1163104).
- CVE-2019-15605: Fixed an HTTP request smuggling vulnerability via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102).
- CVE-2019-15606: Fixed the white space sanitation of HTTP headers (CVE-2019-15606, bsc#1163103).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-25"/>
	<updated date="2020-02-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1163102">SUSE bug 1163102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163103">SUSE bug 1163103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163104">SUSE bug 1163104</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15604/">CVE-2019-15604</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-15605/">CVE-2019-15605</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15606/">CVE-2019-15606</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500732" comment="nodejs10-10.19.0-1.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500733" comment="nodejs10-devel-10.19.0-1.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500734" comment="nodejs10-docs-10.19.0-1.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500735" comment="npm10-10.19.0-1.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139090" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1162629" ref_url="https://bugzilla.suse.com/1162629" source="BUGZILLA"/>
		<reference ref_id="1162632" ref_url="https://bugzilla.suse.com/1162632" source="BUGZILLA"/>
		<reference ref_id="1165280" ref_url="https://bugzilla.suse.com/1165280" source="BUGZILLA"/>
		<reference ref_id="1165289" ref_url="https://bugzilla.suse.com/1165289" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7059" ref_url="https://www.suse.com/security/cve/CVE-2020-7059/" source="CVE"/>
		<reference ref_id="CVE-2020-7060" ref_url="https://www.suse.com/security/cve/CVE-2020-7060/" source="CVE"/>
		<reference ref_id="CVE-2020-7062" ref_url="https://www.suse.com/security/cve/CVE-2020-7062/" source="CVE"/>
		<reference ref_id="CVE-2020-7063" ref_url="https://www.suse.com/security/cve/CVE-2020-7063/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0622-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006589.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2020-7062: Fixed a null pointer dereference when using file upload functionality 
  under specific circumstances (bsc#1165280).
- CVE-2020-7063: Fixed an issue where adding files change the permissions to default (bsc#1165289).
- CVE-2020-7059: Fixed an out of bounds read in php_strip_tags_ex which may have led to 
  denial of service (bsc#1162629).
- CVE-2020-7060: Fixed a global buffer overflow in mbfl_filt_conv_big5_wchar which  may have  led to 
  memory corruption (bsc#1162632). 
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-09"/>
	<updated date="2020-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1162629">SUSE bug 1162629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162632">SUSE bug 1162632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165280">SUSE bug 1165280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165289">SUSE bug 1165289</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7059/">CVE-2020-7059</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-7060/">CVE-2020-7060</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7062/">CVE-2020-7062</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7063/">CVE-2020-7063</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501017" comment="apache2-mod_php7-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501018" comment="php7-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501019" comment="php7-bcmath-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501020" comment="php7-bz2-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501021" comment="php7-calendar-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501022" comment="php7-ctype-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501023" comment="php7-curl-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501024" comment="php7-dba-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501025" comment="php7-devel-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501026" comment="php7-dom-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501027" comment="php7-enchant-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501028" comment="php7-exif-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501029" comment="php7-fastcgi-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501030" comment="php7-fileinfo-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501031" comment="php7-fpm-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501032" comment="php7-ftp-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501033" comment="php7-gd-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501034" comment="php7-gettext-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501035" comment="php7-gmp-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501036" comment="php7-iconv-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501037" comment="php7-intl-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501038" comment="php7-json-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501039" comment="php7-ldap-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501040" comment="php7-mbstring-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501041" comment="php7-mysql-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501042" comment="php7-odbc-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501043" comment="php7-opcache-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501044" comment="php7-openssl-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501045" comment="php7-pcntl-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501046" comment="php7-pdo-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501047" comment="php7-pear-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501048" comment="php7-pear-Archive_Tar-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501049" comment="php7-pgsql-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501050" comment="php7-phar-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501051" comment="php7-posix-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501052" comment="php7-shmop-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501053" comment="php7-snmp-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501054" comment="php7-soap-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501055" comment="php7-sockets-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501056" comment="php7-sodium-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501057" comment="php7-sqlite-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501058" comment="php7-sysvmsg-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501059" comment="php7-sysvsem-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501060" comment="php7-sysvshm-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501061" comment="php7-tokenizer-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501062" comment="php7-wddx-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501063" comment="php7-xmlreader-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501064" comment="php7-xmlrpc-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501065" comment="php7-xmlwriter-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501066" comment="php7-xsl-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501067" comment="php7-zip-7.2.5-4.52.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501068" comment="php7-zlib-7.2.5-4.52.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139091" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1164692" ref_url="https://bugzilla.suse.com/1164692" source="BUGZILLA"/>
		<reference ref_id="1164825" ref_url="https://bugzilla.suse.com/1164825" source="BUGZILLA"/>
		<reference ref_id="1164860" ref_url="https://bugzilla.suse.com/1164860" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17569" ref_url="https://www.suse.com/security/cve/CVE-2019-17569/" source="CVE"/>
		<reference ref_id="CVE-2020-1935" ref_url="https://www.suse.com/security/cve/CVE-2020-1935/" source="CVE"/>
		<reference ref_id="CVE-2020-1938" ref_url="https://www.suse.com/security/cve/CVE-2020-1938/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006593.html" source="SUSE-SU"/>
		<description>
This update for tomcat to version 9.0.31 fixes the following issues:

Security issues fixed:

- CVE-2019-17569: Fixed a regression in the handling of Transfer-Encoding headers that would have allowed HTTP Request Smuggling (bsc#1164825).
- CVE-2020-1935: Fixed an HTTP Request Smuggling issue (bsc#1164860).
- CVE-2020-1938: Fixed a file contents disclosure vulnerability (bsc#1164692).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-10"/>
	<updated date="2020-03-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1164692">SUSE bug 1164692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164825">SUSE bug 1164825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164860">SUSE bug 1164860</bugzilla>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-17569/">CVE-2019-17569</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-1935/">CVE-2020-1935</cve>
	<cve impact="important" cvss3="7.6/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2020-1938/">CVE-2020-1938</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501069" comment="tomcat-9.0.31-4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501070" comment="tomcat-admin-webapps-9.0.31-4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501071" comment="tomcat-el-3_0-api-9.0.31-4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501072" comment="tomcat-jsp-2_3-api-9.0.31-4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501073" comment="tomcat-lib-9.0.31-4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501074" comment="tomcat-servlet-4_0-api-9.0.31-4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501075" comment="tomcat-webapps-9.0.31-4.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139092" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1179602" ref_url="https://bugzilla.suse.com/1179602" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-17527" ref_url="https://www.suse.com/security/cve/CVE-2020-17527/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0042-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008160.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issue:

- CVE-2020-17527: Fixed a HTTP/2 request header mix-up (bsc#1179602).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-07"/>
	<updated date="2021-01-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179602">SUSE bug 1179602</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-17527/">CVE-2020-17527</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501076" comment="tomcat-9.0.36-4.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501077" comment="tomcat-admin-webapps-9.0.36-4.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501078" comment="tomcat-el-3_0-api-9.0.36-4.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501079" comment="tomcat-jsp-2_3-api-9.0.36-4.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501080" comment="tomcat-lib-9.0.36-4.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501081" comment="tomcat-servlet-4_0-api-9.0.36-4.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501082" comment="tomcat-webapps-9.0.36-4.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139093" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Enterprise Storage 6</platform>
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1</platform>
			<platform>SUSE Linux Enterprise Module for Web and Scripting 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server 15 SP1</platform>
			<platform>SUSE Linux Enterprise Server for SAP Applications 15 SP1</platform>
			<platform>SUSE Manager Proxy 4.0</platform>
			<platform>SUSE Manager Retail Branch Server 4.0</platform>
			<platform>SUSE Manager Server 4.0</platform>
		</affected>
		<reference ref_id="1179491" ref_url="https://bugzilla.suse.com/1179491" source="BUGZILLA"/>
		<reference ref_id="1180553" ref_url="https://bugzilla.suse.com/1180553" source="BUGZILLA"/>
		<reference ref_id="1180554" ref_url="https://bugzilla.suse.com/1180554" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1971" ref_url="https://www.suse.com/security/cve/CVE-2020-1971/" source="CVE"/>
		<reference ref_id="CVE-2020-8265" ref_url="https://www.suse.com/security/cve/CVE-2020-8265/" source="CVE"/>
		<reference ref_id="CVE-2020-8287" ref_url="https://www.suse.com/security/cve/CVE-2020-8287/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0060-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008169.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- New upstream LTS version 10.23.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)

- New upstream LTS version 10.23.0:
  * deps: upgrade npm to 6.14.8
  * n-api:
    + create N-API version 7
    + expose napi_build_version variable
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-11"/>
	<updated date="2021-01-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179491">SUSE bug 1179491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180553">SUSE bug 1180553</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180554">SUSE bug 1180554</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-1971/">CVE-2020-1971</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8265/">CVE-2020-8265</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8287/">CVE-2020-8287</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:ses:6</cpe>
		<cpe>cpe:/o:suse:sle-module-web-scripting:15:sp1</cpe>
		<cpe>cpe:/o:suse:sle_hpc:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles:15:sp1</cpe>
		<cpe>cpe:/o:suse:sles_sap:15:sp1</cpe>
		<cpe>cpe:/o:suse:suse-manager-proxy:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-retail-branch-server:4.0</cpe>
		<cpe>cpe:/o:suse:suse-manager-server:4.0</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009302773" comment="SUSE Enterprise Storage 6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669872" comment="SUSE Linux Enterprise High Performance Computing 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009255622" comment="SUSE Linux Enterprise Module for Web and Scripting 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009303869" comment="SUSE Linux Enterprise Server 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341764" comment="SUSE Linux Enterprise Server for SAP Applications 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302203" comment="SUSE Manager Proxy 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009341064" comment="SUSE Manager Retail Branch Server 4.0 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009302238" comment="SUSE Manager Server 4.0 is installed"/>
		</criteria>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501083" comment="nodejs10-10.23.1-1.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501084" comment="nodejs10-devel-10.23.1-1.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501085" comment="nodejs10-docs-10.23.1-1.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501086" comment="npm10-10.23.1-1.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139094" version="1" class="patch">
	<metadata>
		<title>Security update for graphviz (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1132091" ref_url="https://bugzilla.suse.com/1132091" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-11023" ref_url="https://www.suse.com/security/cve/CVE-2019-11023/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1267-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005647.html" source="SUSE-SU"/>
		<description>
This update for graphviz fixes the following issues:

Security issue fixed:

- CVE-2019-11023: Fixed a denial of service vulnerability, which was caused by a NULL pointer dereference in agroot() (bsc#1132091).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-02"/>
	<updated date="2019-07-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1132091">SUSE bug 1132091</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11023/">CVE-2019-11023</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501417" comment="graphviz-gd-2.40.1-6.3.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501418" comment="graphviz-python-2.40.1-6.3.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139095" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1012382" ref_url="https://bugzilla.suse.com/1012382" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1052904" ref_url="https://bugzilla.suse.com/1052904" source="BUGZILLA"/>
		<reference ref_id="1053043" ref_url="https://bugzilla.suse.com/1053043" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1055121" ref_url="https://bugzilla.suse.com/1055121" source="BUGZILLA"/>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1063638" ref_url="https://bugzilla.suse.com/1063638" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1068546" ref_url="https://bugzilla.suse.com/1068546" source="BUGZILLA"/>
		<reference ref_id="1070872" ref_url="https://bugzilla.suse.com/1070872" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1075020" ref_url="https://bugzilla.suse.com/1075020" source="BUGZILLA"/>
		<reference ref_id="1082387" ref_url="https://bugzilla.suse.com/1082387" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085535" ref_url="https://bugzilla.suse.com/1085535" source="BUGZILLA"/>
		<reference ref_id="1085536" ref_url="https://bugzilla.suse.com/1085536" source="BUGZILLA"/>
		<reference ref_id="1086657" ref_url="https://bugzilla.suse.com/1086657" source="BUGZILLA"/>
		<reference ref_id="1088804" ref_url="https://bugzilla.suse.com/1088804" source="BUGZILLA"/>
		<reference ref_id="1093389" ref_url="https://bugzilla.suse.com/1093389" source="BUGZILLA"/>
		<reference ref_id="1097583" ref_url="https://bugzilla.suse.com/1097583" source="BUGZILLA"/>
		<reference ref_id="1097584" ref_url="https://bugzilla.suse.com/1097584" source="BUGZILLA"/>
		<reference ref_id="1097585" ref_url="https://bugzilla.suse.com/1097585" source="BUGZILLA"/>
		<reference ref_id="1097586" ref_url="https://bugzilla.suse.com/1097586" source="BUGZILLA"/>
		<reference ref_id="1097587" ref_url="https://bugzilla.suse.com/1097587" source="BUGZILLA"/>
		<reference ref_id="1097588" ref_url="https://bugzilla.suse.com/1097588" source="BUGZILLA"/>
		<reference ref_id="1099658" ref_url="https://bugzilla.suse.com/1099658" source="BUGZILLA"/>
		<reference ref_id="1103186" ref_url="https://bugzilla.suse.com/1103186" source="BUGZILLA"/>
		<reference ref_id="1103259" ref_url="https://bugzilla.suse.com/1103259" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1106011" ref_url="https://bugzilla.suse.com/1106011" source="BUGZILLA"/>
		<reference ref_id="1106284" ref_url="https://bugzilla.suse.com/1106284" source="BUGZILLA"/>
		<reference ref_id="1108193" ref_url="https://bugzilla.suse.com/1108193" source="BUGZILLA"/>
		<reference ref_id="1108838" ref_url="https://bugzilla.suse.com/1108838" source="BUGZILLA"/>
		<reference ref_id="1108937" ref_url="https://bugzilla.suse.com/1108937" source="BUGZILLA"/>
		<reference ref_id="1110946" ref_url="https://bugzilla.suse.com/1110946" source="BUGZILLA"/>
		<reference ref_id="1111331" ref_url="https://bugzilla.suse.com/1111331" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1111696" ref_url="https://bugzilla.suse.com/1111696" source="BUGZILLA"/>
		<reference ref_id="1112063" ref_url="https://bugzilla.suse.com/1112063" source="BUGZILLA"/>
		<reference ref_id="1112128" ref_url="https://bugzilla.suse.com/1112128" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114427" ref_url="https://bugzilla.suse.com/1114427" source="BUGZILLA"/>
		<reference ref_id="1114542" ref_url="https://bugzilla.suse.com/1114542" source="BUGZILLA"/>
		<reference ref_id="1114638" ref_url="https://bugzilla.suse.com/1114638" source="BUGZILLA"/>
		<reference ref_id="1115688" ref_url="https://bugzilla.suse.com/1115688" source="BUGZILLA"/>
		<reference ref_id="1117114" ref_url="https://bugzilla.suse.com/1117114" source="BUGZILLA"/>
		<reference ref_id="1117158" ref_url="https://bugzilla.suse.com/1117158" source="BUGZILLA"/>
		<reference ref_id="1117561" ref_url="https://bugzilla.suse.com/1117561" source="BUGZILLA"/>
		<reference ref_id="1118139" ref_url="https://bugzilla.suse.com/1118139" source="BUGZILLA"/>
		<reference ref_id="1119680" ref_url="https://bugzilla.suse.com/1119680" source="BUGZILLA"/>
		<reference ref_id="1119843" ref_url="https://bugzilla.suse.com/1119843" source="BUGZILLA"/>
		<reference ref_id="1120091" ref_url="https://bugzilla.suse.com/1120091" source="BUGZILLA"/>
		<reference ref_id="1120318" ref_url="https://bugzilla.suse.com/1120318" source="BUGZILLA"/>
		<reference ref_id="1120423" ref_url="https://bugzilla.suse.com/1120423" source="BUGZILLA"/>
		<reference ref_id="1120566" ref_url="https://bugzilla.suse.com/1120566" source="BUGZILLA"/>
		<reference ref_id="1120843" ref_url="https://bugzilla.suse.com/1120843" source="BUGZILLA"/>
		<reference ref_id="1120902" ref_url="https://bugzilla.suse.com/1120902" source="BUGZILLA"/>
		<reference ref_id="1122767" ref_url="https://bugzilla.suse.com/1122767" source="BUGZILLA"/>
		<reference ref_id="1122776" ref_url="https://bugzilla.suse.com/1122776" source="BUGZILLA"/>
		<reference ref_id="1123454" ref_url="https://bugzilla.suse.com/1123454" source="BUGZILLA"/>
		<reference ref_id="1123663" ref_url="https://bugzilla.suse.com/1123663" source="BUGZILLA"/>
		<reference ref_id="1124503" ref_url="https://bugzilla.suse.com/1124503" source="BUGZILLA"/>
		<reference ref_id="1124839" ref_url="https://bugzilla.suse.com/1124839" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1126356" ref_url="https://bugzilla.suse.com/1126356" source="BUGZILLA"/>
		<reference ref_id="1126704" ref_url="https://bugzilla.suse.com/1126704" source="BUGZILLA"/>
		<reference ref_id="1127175" ref_url="https://bugzilla.suse.com/1127175" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1127374" ref_url="https://bugzilla.suse.com/1127374" source="BUGZILLA"/>
		<reference ref_id="1127616" ref_url="https://bugzilla.suse.com/1127616" source="BUGZILLA"/>
		<reference ref_id="1128052" ref_url="https://bugzilla.suse.com/1128052" source="BUGZILLA"/>
		<reference ref_id="1128415" ref_url="https://bugzilla.suse.com/1128415" source="BUGZILLA"/>
		<reference ref_id="1128544" ref_url="https://bugzilla.suse.com/1128544" source="BUGZILLA"/>
		<reference ref_id="1128904" ref_url="https://bugzilla.suse.com/1128904" source="BUGZILLA"/>
		<reference ref_id="1128971" ref_url="https://bugzilla.suse.com/1128971" source="BUGZILLA"/>
		<reference ref_id="1128979" ref_url="https://bugzilla.suse.com/1128979" source="BUGZILLA"/>
		<reference ref_id="1129138" ref_url="https://bugzilla.suse.com/1129138" source="BUGZILLA"/>
		<reference ref_id="1129273" ref_url="https://bugzilla.suse.com/1129273" source="BUGZILLA"/>
		<reference ref_id="1129497" ref_url="https://bugzilla.suse.com/1129497" source="BUGZILLA"/>
		<reference ref_id="1129693" ref_url="https://bugzilla.suse.com/1129693" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1129845" ref_url="https://bugzilla.suse.com/1129845" source="BUGZILLA"/>
		<reference ref_id="1130195" ref_url="https://bugzilla.suse.com/1130195" source="BUGZILLA"/>
		<reference ref_id="1130425" ref_url="https://bugzilla.suse.com/1130425" source="BUGZILLA"/>
		<reference ref_id="1130527" ref_url="https://bugzilla.suse.com/1130527" source="BUGZILLA"/>
		<reference ref_id="1130567" ref_url="https://bugzilla.suse.com/1130567" source="BUGZILLA"/>
		<reference ref_id="1130579" ref_url="https://bugzilla.suse.com/1130579" source="BUGZILLA"/>
		<reference ref_id="1130699" ref_url="https://bugzilla.suse.com/1130699" source="BUGZILLA"/>
		<reference ref_id="1130937" ref_url="https://bugzilla.suse.com/1130937" source="BUGZILLA"/>
		<reference ref_id="1130972" ref_url="https://bugzilla.suse.com/1130972" source="BUGZILLA"/>
		<reference ref_id="1131326" ref_url="https://bugzilla.suse.com/1131326" source="BUGZILLA"/>
		<reference ref_id="1131427" ref_url="https://bugzilla.suse.com/1131427" source="BUGZILLA"/>
		<reference ref_id="1131438" ref_url="https://bugzilla.suse.com/1131438" source="BUGZILLA"/>
		<reference ref_id="1131451" ref_url="https://bugzilla.suse.com/1131451" source="BUGZILLA"/>
		<reference ref_id="1131467" ref_url="https://bugzilla.suse.com/1131467" source="BUGZILLA"/>
		<reference ref_id="1131488" ref_url="https://bugzilla.suse.com/1131488" source="BUGZILLA"/>
		<reference ref_id="1131530" ref_url="https://bugzilla.suse.com/1131530" source="BUGZILLA"/>
		<reference ref_id="1131565" ref_url="https://bugzilla.suse.com/1131565" source="BUGZILLA"/>
		<reference ref_id="1131574" ref_url="https://bugzilla.suse.com/1131574" source="BUGZILLA"/>
		<reference ref_id="1131587" ref_url="https://bugzilla.suse.com/1131587" source="BUGZILLA"/>
		<reference ref_id="1131659" ref_url="https://bugzilla.suse.com/1131659" source="BUGZILLA"/>
		<reference ref_id="1131673" ref_url="https://bugzilla.suse.com/1131673" source="BUGZILLA"/>
		<reference ref_id="1131847" ref_url="https://bugzilla.suse.com/1131847" source="BUGZILLA"/>
		<reference ref_id="1131848" ref_url="https://bugzilla.suse.com/1131848" source="BUGZILLA"/>
		<reference ref_id="1131851" ref_url="https://bugzilla.suse.com/1131851" source="BUGZILLA"/>
		<reference ref_id="1131900" ref_url="https://bugzilla.suse.com/1131900" source="BUGZILLA"/>
		<reference ref_id="1131934" ref_url="https://bugzilla.suse.com/1131934" source="BUGZILLA"/>
		<reference ref_id="1131935" ref_url="https://bugzilla.suse.com/1131935" source="BUGZILLA"/>
		<reference ref_id="1132044" ref_url="https://bugzilla.suse.com/1132044" source="BUGZILLA"/>
		<reference ref_id="1132219" ref_url="https://bugzilla.suse.com/1132219" source="BUGZILLA"/>
		<reference ref_id="1132226" ref_url="https://bugzilla.suse.com/1132226" source="BUGZILLA"/>
		<reference ref_id="1132227" ref_url="https://bugzilla.suse.com/1132227" source="BUGZILLA"/>
		<reference ref_id="1132365" ref_url="https://bugzilla.suse.com/1132365" source="BUGZILLA"/>
		<reference ref_id="1132368" ref_url="https://bugzilla.suse.com/1132368" source="BUGZILLA"/>
		<reference ref_id="1132369" ref_url="https://bugzilla.suse.com/1132369" source="BUGZILLA"/>
		<reference ref_id="1132370" ref_url="https://bugzilla.suse.com/1132370" source="BUGZILLA"/>
		<reference ref_id="1132372" ref_url="https://bugzilla.suse.com/1132372" source="BUGZILLA"/>
		<reference ref_id="1132373" ref_url="https://bugzilla.suse.com/1132373" source="BUGZILLA"/>
		<reference ref_id="1132384" ref_url="https://bugzilla.suse.com/1132384" source="BUGZILLA"/>
		<reference ref_id="1132397" ref_url="https://bugzilla.suse.com/1132397" source="BUGZILLA"/>
		<reference ref_id="1132402" ref_url="https://bugzilla.suse.com/1132402" source="BUGZILLA"/>
		<reference ref_id="1132403" ref_url="https://bugzilla.suse.com/1132403" source="BUGZILLA"/>
		<reference ref_id="1132404" ref_url="https://bugzilla.suse.com/1132404" source="BUGZILLA"/>
		<reference ref_id="1132405" ref_url="https://bugzilla.suse.com/1132405" source="BUGZILLA"/>
		<reference ref_id="1132407" ref_url="https://bugzilla.suse.com/1132407" source="BUGZILLA"/>
		<reference ref_id="1132411" ref_url="https://bugzilla.suse.com/1132411" source="BUGZILLA"/>
		<reference ref_id="1132412" ref_url="https://bugzilla.suse.com/1132412" source="BUGZILLA"/>
		<reference ref_id="1132413" ref_url="https://bugzilla.suse.com/1132413" source="BUGZILLA"/>
		<reference ref_id="1132414" ref_url="https://bugzilla.suse.com/1132414" source="BUGZILLA"/>
		<reference ref_id="1132426" ref_url="https://bugzilla.suse.com/1132426" source="BUGZILLA"/>
		<reference ref_id="1132527" ref_url="https://bugzilla.suse.com/1132527" source="BUGZILLA"/>
		<reference ref_id="1132531" ref_url="https://bugzilla.suse.com/1132531" source="BUGZILLA"/>
		<reference ref_id="1132555" ref_url="https://bugzilla.suse.com/1132555" source="BUGZILLA"/>
		<reference ref_id="1132558" ref_url="https://bugzilla.suse.com/1132558" source="BUGZILLA"/>
		<reference ref_id="1132561" ref_url="https://bugzilla.suse.com/1132561" source="BUGZILLA"/>
		<reference ref_id="1132562" ref_url="https://bugzilla.suse.com/1132562" source="BUGZILLA"/>
		<reference ref_id="1132563" ref_url="https://bugzilla.suse.com/1132563" source="BUGZILLA"/>
		<reference ref_id="1132564" ref_url="https://bugzilla.suse.com/1132564" source="BUGZILLA"/>
		<reference ref_id="1132570" ref_url="https://bugzilla.suse.com/1132570" source="BUGZILLA"/>
		<reference ref_id="1132571" ref_url="https://bugzilla.suse.com/1132571" source="BUGZILLA"/>
		<reference ref_id="1132572" ref_url="https://bugzilla.suse.com/1132572" source="BUGZILLA"/>
		<reference ref_id="1132589" ref_url="https://bugzilla.suse.com/1132589" source="BUGZILLA"/>
		<reference ref_id="1132618" ref_url="https://bugzilla.suse.com/1132618" source="BUGZILLA"/>
		<reference ref_id="1132673" ref_url="https://bugzilla.suse.com/1132673" source="BUGZILLA"/>
		<reference ref_id="1132681" ref_url="https://bugzilla.suse.com/1132681" source="BUGZILLA"/>
		<reference ref_id="1132726" ref_url="https://bugzilla.suse.com/1132726" source="BUGZILLA"/>
		<reference ref_id="1132828" ref_url="https://bugzilla.suse.com/1132828" source="BUGZILLA"/>
		<reference ref_id="1132894" ref_url="https://bugzilla.suse.com/1132894" source="BUGZILLA"/>
		<reference ref_id="1132943" ref_url="https://bugzilla.suse.com/1132943" source="BUGZILLA"/>
		<reference ref_id="1132982" ref_url="https://bugzilla.suse.com/1132982" source="BUGZILLA"/>
		<reference ref_id="1133005" ref_url="https://bugzilla.suse.com/1133005" source="BUGZILLA"/>
		<reference ref_id="1133016" ref_url="https://bugzilla.suse.com/1133016" source="BUGZILLA"/>
		<reference ref_id="1133094" ref_url="https://bugzilla.suse.com/1133094" source="BUGZILLA"/>
		<reference ref_id="1133095" ref_url="https://bugzilla.suse.com/1133095" source="BUGZILLA"/>
		<reference ref_id="1133115" ref_url="https://bugzilla.suse.com/1133115" source="BUGZILLA"/>
		<reference ref_id="1133149" ref_url="https://bugzilla.suse.com/1133149" source="BUGZILLA"/>
		<reference ref_id="1133176" ref_url="https://bugzilla.suse.com/1133176" source="BUGZILLA"/>
		<reference ref_id="1133188" ref_url="https://bugzilla.suse.com/1133188" source="BUGZILLA"/>
		<reference ref_id="1133190" ref_url="https://bugzilla.suse.com/1133190" source="BUGZILLA"/>
		<reference ref_id="1133320" ref_url="https://bugzilla.suse.com/1133320" source="BUGZILLA"/>
		<reference ref_id="1133486" ref_url="https://bugzilla.suse.com/1133486" source="BUGZILLA"/>
		<reference ref_id="1133529" ref_url="https://bugzilla.suse.com/1133529" source="BUGZILLA"/>
		<reference ref_id="1133547" ref_url="https://bugzilla.suse.com/1133547" source="BUGZILLA"/>
		<reference ref_id="1133584" ref_url="https://bugzilla.suse.com/1133584" source="BUGZILLA"/>
		<reference ref_id="1133593" ref_url="https://bugzilla.suse.com/1133593" source="BUGZILLA"/>
		<reference ref_id="1133612" ref_url="https://bugzilla.suse.com/1133612" source="BUGZILLA"/>
		<reference ref_id="1133616" ref_url="https://bugzilla.suse.com/1133616" source="BUGZILLA"/>
		<reference ref_id="1133667" ref_url="https://bugzilla.suse.com/1133667" source="BUGZILLA"/>
		<reference ref_id="1133668" ref_url="https://bugzilla.suse.com/1133668" source="BUGZILLA"/>
		<reference ref_id="1133672" ref_url="https://bugzilla.suse.com/1133672" source="BUGZILLA"/>
		<reference ref_id="1133674" ref_url="https://bugzilla.suse.com/1133674" source="BUGZILLA"/>
		<reference ref_id="1133675" ref_url="https://bugzilla.suse.com/1133675" source="BUGZILLA"/>
		<reference ref_id="1133698" ref_url="https://bugzilla.suse.com/1133698" source="BUGZILLA"/>
		<reference ref_id="1133702" ref_url="https://bugzilla.suse.com/1133702" source="BUGZILLA"/>
		<reference ref_id="1133731" ref_url="https://bugzilla.suse.com/1133731" source="BUGZILLA"/>
		<reference ref_id="1133769" ref_url="https://bugzilla.suse.com/1133769" source="BUGZILLA"/>
		<reference ref_id="1133772" ref_url="https://bugzilla.suse.com/1133772" source="BUGZILLA"/>
		<reference ref_id="1133774" ref_url="https://bugzilla.suse.com/1133774" source="BUGZILLA"/>
		<reference ref_id="1133778" ref_url="https://bugzilla.suse.com/1133778" source="BUGZILLA"/>
		<reference ref_id="1133779" ref_url="https://bugzilla.suse.com/1133779" source="BUGZILLA"/>
		<reference ref_id="1133780" ref_url="https://bugzilla.suse.com/1133780" source="BUGZILLA"/>
		<reference ref_id="1133825" ref_url="https://bugzilla.suse.com/1133825" source="BUGZILLA"/>
		<reference ref_id="1133850" ref_url="https://bugzilla.suse.com/1133850" source="BUGZILLA"/>
		<reference ref_id="1133851" ref_url="https://bugzilla.suse.com/1133851" source="BUGZILLA"/>
		<reference ref_id="1133852" ref_url="https://bugzilla.suse.com/1133852" source="BUGZILLA"/>
		<reference ref_id="1133897" ref_url="https://bugzilla.suse.com/1133897" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1134160" ref_url="https://bugzilla.suse.com/1134160" source="BUGZILLA"/>
		<reference ref_id="1134162" ref_url="https://bugzilla.suse.com/1134162" source="BUGZILLA"/>
		<reference ref_id="1134199" ref_url="https://bugzilla.suse.com/1134199" source="BUGZILLA"/>
		<reference ref_id="1134200" ref_url="https://bugzilla.suse.com/1134200" source="BUGZILLA"/>
		<reference ref_id="1134201" ref_url="https://bugzilla.suse.com/1134201" source="BUGZILLA"/>
		<reference ref_id="1134202" ref_url="https://bugzilla.suse.com/1134202" source="BUGZILLA"/>
		<reference ref_id="1134203" ref_url="https://bugzilla.suse.com/1134203" source="BUGZILLA"/>
		<reference ref_id="1134204" ref_url="https://bugzilla.suse.com/1134204" source="BUGZILLA"/>
		<reference ref_id="1134205" ref_url="https://bugzilla.suse.com/1134205" source="BUGZILLA"/>
		<reference ref_id="1134223" ref_url="https://bugzilla.suse.com/1134223" source="BUGZILLA"/>
		<reference ref_id="1134354" ref_url="https://bugzilla.suse.com/1134354" source="BUGZILLA"/>
		<reference ref_id="1134393" ref_url="https://bugzilla.suse.com/1134393" source="BUGZILLA"/>
		<reference ref_id="1134397" ref_url="https://bugzilla.suse.com/1134397" source="BUGZILLA"/>
		<reference ref_id="1134459" ref_url="https://bugzilla.suse.com/1134459" source="BUGZILLA"/>
		<reference ref_id="1134460" ref_url="https://bugzilla.suse.com/1134460" source="BUGZILLA"/>
		<reference ref_id="1134461" ref_url="https://bugzilla.suse.com/1134461" source="BUGZILLA"/>
		<reference ref_id="1134597" ref_url="https://bugzilla.suse.com/1134597" source="BUGZILLA"/>
		<reference ref_id="1134600" ref_url="https://bugzilla.suse.com/1134600" source="BUGZILLA"/>
		<reference ref_id="1134607" ref_url="https://bugzilla.suse.com/1134607" source="BUGZILLA"/>
		<reference ref_id="1134618" ref_url="https://bugzilla.suse.com/1134618" source="BUGZILLA"/>
		<reference ref_id="1134651" ref_url="https://bugzilla.suse.com/1134651" source="BUGZILLA"/>
		<reference ref_id="1134671" ref_url="https://bugzilla.suse.com/1134671" source="BUGZILLA"/>
		<reference ref_id="1134760" ref_url="https://bugzilla.suse.com/1134760" source="BUGZILLA"/>
		<reference ref_id="1134806" ref_url="https://bugzilla.suse.com/1134806" source="BUGZILLA"/>
		<reference ref_id="1134810" ref_url="https://bugzilla.suse.com/1134810" source="BUGZILLA"/>
		<reference ref_id="1134813" ref_url="https://bugzilla.suse.com/1134813" source="BUGZILLA"/>
		<reference ref_id="1134848" ref_url="https://bugzilla.suse.com/1134848" source="BUGZILLA"/>
		<reference ref_id="1134936" ref_url="https://bugzilla.suse.com/1134936" source="BUGZILLA"/>
		<reference ref_id="1134945" ref_url="https://bugzilla.suse.com/1134945" source="BUGZILLA"/>
		<reference ref_id="1134946" ref_url="https://bugzilla.suse.com/1134946" source="BUGZILLA"/>
		<reference ref_id="1134947" ref_url="https://bugzilla.suse.com/1134947" source="BUGZILLA"/>
		<reference ref_id="1134948" ref_url="https://bugzilla.suse.com/1134948" source="BUGZILLA"/>
		<reference ref_id="1134949" ref_url="https://bugzilla.suse.com/1134949" source="BUGZILLA"/>
		<reference ref_id="1134950" ref_url="https://bugzilla.suse.com/1134950" source="BUGZILLA"/>
		<reference ref_id="1134951" ref_url="https://bugzilla.suse.com/1134951" source="BUGZILLA"/>
		<reference ref_id="1134952" ref_url="https://bugzilla.suse.com/1134952" source="BUGZILLA"/>
		<reference ref_id="1134953" ref_url="https://bugzilla.suse.com/1134953" source="BUGZILLA"/>
		<reference ref_id="1134972" ref_url="https://bugzilla.suse.com/1134972" source="BUGZILLA"/>
		<reference ref_id="1134974" ref_url="https://bugzilla.suse.com/1134974" source="BUGZILLA"/>
		<reference ref_id="1134975" ref_url="https://bugzilla.suse.com/1134975" source="BUGZILLA"/>
		<reference ref_id="1134980" ref_url="https://bugzilla.suse.com/1134980" source="BUGZILLA"/>
		<reference ref_id="1134981" ref_url="https://bugzilla.suse.com/1134981" source="BUGZILLA"/>
		<reference ref_id="1134983" ref_url="https://bugzilla.suse.com/1134983" source="BUGZILLA"/>
		<reference ref_id="1134987" ref_url="https://bugzilla.suse.com/1134987" source="BUGZILLA"/>
		<reference ref_id="1134989" ref_url="https://bugzilla.suse.com/1134989" source="BUGZILLA"/>
		<reference ref_id="1134990" ref_url="https://bugzilla.suse.com/1134990" source="BUGZILLA"/>
		<reference ref_id="1134994" ref_url="https://bugzilla.suse.com/1134994" source="BUGZILLA"/>
		<reference ref_id="1134995" ref_url="https://bugzilla.suse.com/1134995" source="BUGZILLA"/>
		<reference ref_id="1134998" ref_url="https://bugzilla.suse.com/1134998" source="BUGZILLA"/>
		<reference ref_id="1134999" ref_url="https://bugzilla.suse.com/1134999" source="BUGZILLA"/>
		<reference ref_id="1135006" ref_url="https://bugzilla.suse.com/1135006" source="BUGZILLA"/>
		<reference ref_id="1135007" ref_url="https://bugzilla.suse.com/1135007" source="BUGZILLA"/>
		<reference ref_id="1135008" ref_url="https://bugzilla.suse.com/1135008" source="BUGZILLA"/>
		<reference ref_id="1135018" ref_url="https://bugzilla.suse.com/1135018" source="BUGZILLA"/>
		<reference ref_id="1135021" ref_url="https://bugzilla.suse.com/1135021" source="BUGZILLA"/>
		<reference ref_id="1135024" ref_url="https://bugzilla.suse.com/1135024" source="BUGZILLA"/>
		<reference ref_id="1135026" ref_url="https://bugzilla.suse.com/1135026" source="BUGZILLA"/>
		<reference ref_id="1135027" ref_url="https://bugzilla.suse.com/1135027" source="BUGZILLA"/>
		<reference ref_id="1135028" ref_url="https://bugzilla.suse.com/1135028" source="BUGZILLA"/>
		<reference ref_id="1135029" ref_url="https://bugzilla.suse.com/1135029" source="BUGZILLA"/>
		<reference ref_id="1135031" ref_url="https://bugzilla.suse.com/1135031" source="BUGZILLA"/>
		<reference ref_id="1135033" ref_url="https://bugzilla.suse.com/1135033" source="BUGZILLA"/>
		<reference ref_id="1135034" ref_url="https://bugzilla.suse.com/1135034" source="BUGZILLA"/>
		<reference ref_id="1135035" ref_url="https://bugzilla.suse.com/1135035" source="BUGZILLA"/>
		<reference ref_id="1135036" ref_url="https://bugzilla.suse.com/1135036" source="BUGZILLA"/>
		<reference ref_id="1135037" ref_url="https://bugzilla.suse.com/1135037" source="BUGZILLA"/>
		<reference ref_id="1135038" ref_url="https://bugzilla.suse.com/1135038" source="BUGZILLA"/>
		<reference ref_id="1135039" ref_url="https://bugzilla.suse.com/1135039" source="BUGZILLA"/>
		<reference ref_id="1135041" ref_url="https://bugzilla.suse.com/1135041" source="BUGZILLA"/>
		<reference ref_id="1135042" ref_url="https://bugzilla.suse.com/1135042" source="BUGZILLA"/>
		<reference ref_id="1135044" ref_url="https://bugzilla.suse.com/1135044" source="BUGZILLA"/>
		<reference ref_id="1135045" ref_url="https://bugzilla.suse.com/1135045" source="BUGZILLA"/>
		<reference ref_id="1135046" ref_url="https://bugzilla.suse.com/1135046" source="BUGZILLA"/>
		<reference ref_id="1135047" ref_url="https://bugzilla.suse.com/1135047" source="BUGZILLA"/>
		<reference ref_id="1135049" ref_url="https://bugzilla.suse.com/1135049" source="BUGZILLA"/>
		<reference ref_id="1135051" ref_url="https://bugzilla.suse.com/1135051" source="BUGZILLA"/>
		<reference ref_id="1135052" ref_url="https://bugzilla.suse.com/1135052" source="BUGZILLA"/>
		<reference ref_id="1135053" ref_url="https://bugzilla.suse.com/1135053" source="BUGZILLA"/>
		<reference ref_id="1135055" ref_url="https://bugzilla.suse.com/1135055" source="BUGZILLA"/>
		<reference ref_id="1135056" ref_url="https://bugzilla.suse.com/1135056" source="BUGZILLA"/>
		<reference ref_id="1135058" ref_url="https://bugzilla.suse.com/1135058" source="BUGZILLA"/>
		<reference ref_id="1135100" ref_url="https://bugzilla.suse.com/1135100" source="BUGZILLA"/>
		<reference ref_id="1135120" ref_url="https://bugzilla.suse.com/1135120" source="BUGZILLA"/>
		<reference ref_id="1135278" ref_url="https://bugzilla.suse.com/1135278" source="BUGZILLA"/>
		<reference ref_id="1135281" ref_url="https://bugzilla.suse.com/1135281" source="BUGZILLA"/>
		<reference ref_id="1135309" ref_url="https://bugzilla.suse.com/1135309" source="BUGZILLA"/>
		<reference ref_id="1135312" ref_url="https://bugzilla.suse.com/1135312" source="BUGZILLA"/>
		<reference ref_id="1135314" ref_url="https://bugzilla.suse.com/1135314" source="BUGZILLA"/>
		<reference ref_id="1135315" ref_url="https://bugzilla.suse.com/1135315" source="BUGZILLA"/>
		<reference ref_id="1135316" ref_url="https://bugzilla.suse.com/1135316" source="BUGZILLA"/>
		<reference ref_id="1135320" ref_url="https://bugzilla.suse.com/1135320" source="BUGZILLA"/>
		<reference ref_id="1135323" ref_url="https://bugzilla.suse.com/1135323" source="BUGZILLA"/>
		<reference ref_id="1135330" ref_url="https://bugzilla.suse.com/1135330" source="BUGZILLA"/>
		<reference ref_id="1135492" ref_url="https://bugzilla.suse.com/1135492" source="BUGZILLA"/>
		<reference ref_id="1135542" ref_url="https://bugzilla.suse.com/1135542" source="BUGZILLA"/>
		<reference ref_id="1135556" ref_url="https://bugzilla.suse.com/1135556" source="BUGZILLA"/>
		<reference ref_id="1135603" ref_url="https://bugzilla.suse.com/1135603" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135661" ref_url="https://bugzilla.suse.com/1135661" source="BUGZILLA"/>
		<reference ref_id="1135758" ref_url="https://bugzilla.suse.com/1135758" source="BUGZILLA"/>
		<reference ref_id="1136188" ref_url="https://bugzilla.suse.com/1136188" source="BUGZILLA"/>
		<reference ref_id="1136206" ref_url="https://bugzilla.suse.com/1136206" source="BUGZILLA"/>
		<reference ref_id="1136215" ref_url="https://bugzilla.suse.com/1136215" source="BUGZILLA"/>
		<reference ref_id="1136345" ref_url="https://bugzilla.suse.com/1136345" source="BUGZILLA"/>
		<reference ref_id="1136347" ref_url="https://bugzilla.suse.com/1136347" source="BUGZILLA"/>
		<reference ref_id="1136348" ref_url="https://bugzilla.suse.com/1136348" source="BUGZILLA"/>
		<reference ref_id="1136353" ref_url="https://bugzilla.suse.com/1136353" source="BUGZILLA"/>
		<reference ref_id="1136424" ref_url="https://bugzilla.suse.com/1136424" source="BUGZILLA"/>
		<reference ref_id="1136428" ref_url="https://bugzilla.suse.com/1136428" source="BUGZILLA"/>
		<reference ref_id="1136430" ref_url="https://bugzilla.suse.com/1136430" source="BUGZILLA"/>
		<reference ref_id="1136432" ref_url="https://bugzilla.suse.com/1136432" source="BUGZILLA"/>
		<reference ref_id="1136434" ref_url="https://bugzilla.suse.com/1136434" source="BUGZILLA"/>
		<reference ref_id="1136435" ref_url="https://bugzilla.suse.com/1136435" source="BUGZILLA"/>
		<reference ref_id="1136438" ref_url="https://bugzilla.suse.com/1136438" source="BUGZILLA"/>
		<reference ref_id="1136439" ref_url="https://bugzilla.suse.com/1136439" source="BUGZILLA"/>
		<reference ref_id="1136456" ref_url="https://bugzilla.suse.com/1136456" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1136469" ref_url="https://bugzilla.suse.com/1136469" source="BUGZILLA"/>
		<reference ref_id="1136477" ref_url="https://bugzilla.suse.com/1136477" source="BUGZILLA"/>
		<reference ref_id="1136478" ref_url="https://bugzilla.suse.com/1136478" source="BUGZILLA"/>
		<reference ref_id="1136498" ref_url="https://bugzilla.suse.com/1136498" source="BUGZILLA"/>
		<reference ref_id="1136573" ref_url="https://bugzilla.suse.com/1136573" source="BUGZILLA"/>
		<reference ref_id="1136586" ref_url="https://bugzilla.suse.com/1136586" source="BUGZILLA"/>
		<reference ref_id="1136881" ref_url="https://bugzilla.suse.com/1136881" source="BUGZILLA"/>
		<reference ref_id="1136935" ref_url="https://bugzilla.suse.com/1136935" source="BUGZILLA"/>
		<reference ref_id="1136990" ref_url="https://bugzilla.suse.com/1136990" source="BUGZILLA"/>
		<reference ref_id="1137151" ref_url="https://bugzilla.suse.com/1137151" source="BUGZILLA"/>
		<reference ref_id="1137152" ref_url="https://bugzilla.suse.com/1137152" source="BUGZILLA"/>
		<reference ref_id="1137153" ref_url="https://bugzilla.suse.com/1137153" source="BUGZILLA"/>
		<reference ref_id="1137162" ref_url="https://bugzilla.suse.com/1137162" source="BUGZILLA"/>
		<reference ref_id="1137201" ref_url="https://bugzilla.suse.com/1137201" source="BUGZILLA"/>
		<reference ref_id="1137224" ref_url="https://bugzilla.suse.com/1137224" source="BUGZILLA"/>
		<reference ref_id="1137232" ref_url="https://bugzilla.suse.com/1137232" source="BUGZILLA"/>
		<reference ref_id="1137233" ref_url="https://bugzilla.suse.com/1137233" source="BUGZILLA"/>
		<reference ref_id="1137236" ref_url="https://bugzilla.suse.com/1137236" source="BUGZILLA"/>
		<reference ref_id="1137372" ref_url="https://bugzilla.suse.com/1137372" source="BUGZILLA"/>
		<reference ref_id="1137429" ref_url="https://bugzilla.suse.com/1137429" source="BUGZILLA"/>
		<reference ref_id="1137444" ref_url="https://bugzilla.suse.com/1137444" source="BUGZILLA"/>
		<reference ref_id="1137586" ref_url="https://bugzilla.suse.com/1137586" source="BUGZILLA"/>
		<reference ref_id="1137739" ref_url="https://bugzilla.suse.com/1137739" source="BUGZILLA"/>
		<reference ref_id="1137752" ref_url="https://bugzilla.suse.com/1137752" source="BUGZILLA"/>
		<reference ref_id="1138291" ref_url="https://bugzilla.suse.com/1138291" source="BUGZILLA"/>
		<reference ref_id="1138293" ref_url="https://bugzilla.suse.com/1138293" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2018-12126" ref_url="https://www.suse.com/security/cve/CVE-2018-12126/" source="CVE"/>
		<reference ref_id="CVE-2018-12127" ref_url="https://www.suse.com/security/cve/CVE-2018-12127/" source="CVE"/>
		<reference ref_id="CVE-2018-12130" ref_url="https://www.suse.com/security/cve/CVE-2018-12130/" source="CVE"/>
		<reference ref_id="CVE-2018-16880" ref_url="https://www.suse.com/security/cve/CVE-2018-16880/" source="CVE"/>
		<reference ref_id="CVE-2018-7191" ref_url="https://www.suse.com/security/cve/CVE-2018-7191/" source="CVE"/>
		<reference ref_id="CVE-2019-10124" ref_url="https://www.suse.com/security/cve/CVE-2019-10124/" source="CVE"/>
		<reference ref_id="CVE-2019-11085" ref_url="https://www.suse.com/security/cve/CVE-2019-11085/" source="CVE"/>
		<reference ref_id="CVE-2019-11091" ref_url="https://www.suse.com/security/cve/CVE-2019-11091/" source="CVE"/>
		<reference ref_id="CVE-2019-11477" ref_url="https://www.suse.com/security/cve/CVE-2019-11477/" source="CVE"/>
		<reference ref_id="CVE-2019-11478" ref_url="https://www.suse.com/security/cve/CVE-2019-11478/" source="CVE"/>
		<reference ref_id="CVE-2019-11479" ref_url="https://www.suse.com/security/cve/CVE-2019-11479/" source="CVE"/>
		<reference ref_id="CVE-2019-11486" ref_url="https://www.suse.com/security/cve/CVE-2019-11486/" source="CVE"/>
		<reference ref_id="CVE-2019-11487" ref_url="https://www.suse.com/security/cve/CVE-2019-11487/" source="CVE"/>
		<reference ref_id="CVE-2019-11811" ref_url="https://www.suse.com/security/cve/CVE-2019-11811/" source="CVE"/>
		<reference ref_id="CVE-2019-11815" ref_url="https://www.suse.com/security/cve/CVE-2019-11815/" source="CVE"/>
		<reference ref_id="CVE-2019-11833" ref_url="https://www.suse.com/security/cve/CVE-2019-11833/" source="CVE"/>
		<reference ref_id="CVE-2019-11884" ref_url="https://www.suse.com/security/cve/CVE-2019-11884/" source="CVE"/>
		<reference ref_id="CVE-2019-12382" ref_url="https://www.suse.com/security/cve/CVE-2019-12382/" source="CVE"/>
		<reference ref_id="CVE-2019-12818" ref_url="https://www.suse.com/security/cve/CVE-2019-12818/" source="CVE"/>
		<reference ref_id="CVE-2019-12819" ref_url="https://www.suse.com/security/cve/CVE-2019-12819/" source="CVE"/>
		<reference ref_id="CVE-2019-3846" ref_url="https://www.suse.com/security/cve/CVE-2019-3846/" source="CVE"/>
		<reference ref_id="CVE-2019-3882" ref_url="https://www.suse.com/security/cve/CVE-2019-3882/" source="CVE"/>
		<reference ref_id="CVE-2019-5489" ref_url="https://www.suse.com/security/cve/CVE-2019-5489/" source="CVE"/>
		<reference ref_id="CVE-2019-8564" ref_url="https://www.suse.com/security/cve/CVE-2019-8564/" source="CVE"/>
		<reference ref_id="CVE-2019-9003" ref_url="https://www.suse.com/security/cve/CVE-2019-9003/" source="CVE"/>
		<reference ref_id="CVE-2019-9500" ref_url="https://www.suse.com/security/cve/CVE-2019-9500/" source="CVE"/>
		<reference ref_id="CVE-2019-9503" ref_url="https://www.suse.com/security/cve/CVE-2019-9503/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1550-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005581.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2019-12819: The function __mdiobus_register() called put_device(), which
  triggered a fixed_mdio_bus_init use-after-free. This would cause a denial of
  service. (bsc#1138291)

- CVE-2019-12818: The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c
  may return NULL. If the caller does not check for this, it will trigger a
  NULL pointer dereference. This will cause denial of service. This used to
  affect nfc_llcp_build_gb in net/nfc/llcp_core.c. (bsc#1138293)

- CVE-2019-11477: A sequence of SACKs may have been crafted such that one can
  trigger an integer overflow, leading to a kernel panic.

- CVE-2019-11478: It was possible to send a crafted sequence of SACKs which
  will fragment the TCP retransmission queue. An attacker may have been able to
  further exploit the fragmented queue to cause an expensive linked-list walk
  for subsequent SACKs received for that same TCP connection.

- CVE-2019-11479: An attacker could force the Linux kernel to segment its
  responses into multiple TCP segments. This would drastically increased the
  bandwidth required to deliver the same amount of data. Further, it would
  consume additional resources such as CPU and NIC processing power.

- CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly
  escalate privileges was found in the mwifiex kernel module while connecting
  to a malicious wireless network. (bsc#1136424)

- CVE-2019-10124: An issue was discovered in the hwpoison implementation in
  mm/memory-failure.c in the Linux kernel. When soft_offline_in_use_page() runs
  on a thp tail page after pmd is split, an attacker could cause a denial of
  service (bsc#1130699, CVE-2019-10124).

- CVE-2019-12382: An issue was discovered in drm_load_edid_firmware in
  drivers/gpu/drm/drm_edid_load.c in the Linux kernel There was an unchecked
  kstrdup of fwstr, which might allow an attacker to cause a denial of service
  (NULL pointer dereference and system crash). (bsc#1136586)

- CVE-2019-11487: The Linux kernel allowed page reference count overflow, with
  resultant use-after-free issues, if about 140 GiB of RAM exists. This is
  related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h,
  include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c.
  It could occur with FUSE requests. (bbsc#1133190)

- CVE-2019-5489: The mincore() implementation in mm/mincore.c in the Linux
  kernel allowed local attackers to observe page cache access patterns of other
  processes on the same system, potentially allowing sniffing of secret
  information. (Fixing this affects the output of the fincore program.) Limited
  remote exploitation may be possible, as demonstrated by latency differences
  in accessing public files from an Apache HTTP Server. (bsc#1120843)

- CVE-2019-11833: fs/ext4/extents.c in the Linux kernel did not zero out the
  unused memory region in the extent tree block, which might allow local users
  to obtain sensitive information by reading uninitialized data in the
  filesystem. (bsc#1135281)

- CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM):
  Uncacheable memory on some microprocessors utilizing speculative execution
  may have allowed an authenticated user to potentially enable information
  disclosure via a side channel with local access. A list of impacted products
  can be found here:
  https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.
  (bsc##1111331)

- CVE-2018-7191: In the tun subsystem in the Linux kernel, dev_get_valid_name
  was not called before register_netdevice. This allowed local users to cause a
  denial of service (NULL pointer dereference and panic) via an
  ioctl(TUNSETIFF) call with a dev name containing a / character. (bsc#1135603)

- CVE-2018-12126 CVE-2018-12127 CVE-2018-12130: Microarchitectural Store Buffer
  Data Sampling (MSBDS): Stored buffers on some microprocessors utilizing
  speculative execution which may have allowed an authenticated user to
  potentially enable information disclosure via a side channel with local
  access. A list of impacted products can be found here:
  https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.
  (bsc#1103186)

- CVE-2019-11085: Insufficient input validation in Kernel Mode Driver in
  Intel(R) i915 Graphics for Linux may have allowed an authenticated user to
  potentially enable escalation of privilege via local access. (bsc#1135278)

- CVE-2019-11815: An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c
  in the Linux kernel There was a race condition leading to a use-after-free,
  related to net namespace cleanup. (bsc#1135278)

- CVE-2019-11884: The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c
  in the Linux kernel allowed a local user to obtain potentially sensitive
  information from kernel stack memory via a hidPCONNADD command, because a
  name field may not end with a '\0' character. (bsc#1134848)

- CVE-2019-11811: An issue was discovered in the Linux kernel There was a
  use-after-free upon attempted read access to /proc/ioports after the ipmi_si
  module was removed, related to drivers/char/ipmi/ipmi_si_intf.c,
  drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c.
  (bsc#1134397)

- CVE-2019-11486: The Siemens R3964 line discipline driver in
  drivers/tty/n_r3964.c in the Linux kernel has multiple race conditions.
  (bsc#1133188)

- CVE-2019-9003: In the Linux kernel, attackers could trigger a
  drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for
  certain simultaneous execution of the code, as demonstrated by a 'service
  ipmievd restart' loop. (bsc#1126704)

- CVE-2018-16880: A flaw was found in the Linux kernel's handle_rx() function
  in the [vhost_net] driver. A malicious virtual guest, under specific
  conditions, could trigger an out-of-bounds write in a kmalloc-8 slab on a
  virtual host which may have lead to a kernel memory corruption and a system
  panic. Due to the nature of the flaw, privilege escalation cannot be fully
  ruled out.(bsc#1122767)

- CVE-2019-9503: An issue was discoved which meant that brcmfmac frame
  validation could be bypassed. (bsc#1132828)

- CVE-2019-9500: An issue was discovered that lead to brcmfmac heap buffer
  overflow. (bsc#1132681)

- CVE-2019-8564: An issue was discoved which meant that brcmfmac frame
  validation could be bypassed. (bsc#1132673)

- CVE-2017-5753: Systems with microprocessors utilizing speculative execution
  and branch prediction may have allowed unauthorized disclosure of information
  to an attacker with local user access via a side-channel analysis.

- CVE-2019-3882: A flaw was found in the Linux kernel's vfio interface
  implementation that permitted violation of the user's locked memory limit. If
  a device was bound to a vfio driver, such as vfio-pci, and the local attacker
  is administratively granted ownership of the device, it may have caused a
  system memory exhaustion and thus a denial of service (DoS). (bsc#1131427)

The following non-security bugs were fixed:

- 9p locks: add mount option for lock retry interval (bsc#1051510).
- 9p: do not trust pdu content for stat item size (bsc#1051510).
- acpi / SBS: Fix GPE storm on recent MacBookPro's (bsc#1051510).
- acpi / utils: Drop reference in test for device presence (bsc#1051510).
- acpi, nfit: Prefer _DSM over _LSR for namespace label reads (bsc#1112128) (bsc#1132426).
- acpi: Add Hygon Dhyana support ().
- acpi: button: reinitialize button state upon resume (bsc#1051510).
- acpi: fix menuconfig presentation of acpi submenu (bsc#1117158).
- acpi: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle (bsc#1111666).
- acpi: property: restore _DSD data subnodes GUID comment (bsc#1111666).
- acpica: AML interpreter: add region addresses in global list during initialization (bsc#1051510).
- acpica: Namespace: remove address node from global list after method termination (bsc#1051510).
- alsa: core: Do not refer to snd_cards array directly (bsc#1051510).
- alsa: core: Fix card races between register and disconnect (bsc#1051510).
- alsa: emu10k1: Drop superfluous id-uniquification behavior (bsc#1051510).
- alsa: hda - Add two more machines to the power_save_blacklist (bsc#1051510).
- alsa: hda - Register irq handler after the chip initialization (bsc#1051510).
- alsa: hda - Use a macro for snd_array iteration loops (bsc#1051510).
- alsa: hda/hdmi - Consider eld_valid when reporting jack event (bsc#1051510).
- alsa: hda/hdmi - Read the pin sense from register when repolling (bsc#1051510).
- alsa: hda/realtek - Add new Dell platform for headset mode (bsc#1051510).
- alsa: hda/realtek - add two more pin configuration sets to quirk table (bsc#1051510).
- alsa: hda/realtek - Apply the fixup for ASUS Q325UAR (bsc#1051510).
- alsa: hda/realtek - Avoid superfluous COEF EAPD setups (bsc#1051510).
- alsa: hda/realtek - Corrected fixup for System76 Gazelle (gaze14) (bsc#1051510).
- alsa: hda/realtek - EAPD turn on later (bsc#1051510).
- alsa: hda/realtek - Enable micmute LED for Huawei laptops (bsc#1051510).
- alsa: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug (bsc#1051510).
- alsa: hda/realtek - Fixed Dell AIO speaker noise (bsc#1051510).
- alsa: hda/realtek - Fixup headphone noise via runtime suspend (bsc#1051510).
- alsa: hda/realtek - Improve the headset mic for Acer Aspire laptops (bsc#1051510).
- alsa: hda/realtek - Move to ACT_INIT state (bsc#1111666).
- alsa: hda/realtek - Support low power consumption for ALC256 (bsc#1051510).
- alsa: hda/realtek - Support low power consumption for ALC295 (bsc#1051510).
- alsa: hda/realtek: Enable headset MIC of Acer TravelMate B114-21 with ALC233 (bsc#1111666).
- alsa: hda: Initialize power_state field properly (bsc#1051510).
- alsa: hdea/realtek - Headset fixup for System76 Gazelle (gaze14) (bsc#1051510).
- alsa: info: Fix racy addition/deletion of nodes (bsc#1051510).
- alsa: line6: Avoid polluting led_* namespace (bsc#1051510).
- alsa: line6: use dynamic buffers (bsc#1051510).
- alsa: PCM: check if ops are defined before suspending PCM (bsc#1051510).
- alsa: seq: Align temporary re-locking with irqsave version (bsc#1051510).
- alsa: seq: Correct unlock sequence at snd_seq_client_ioctl_unlock() (bsc#1051510).
- alsa: seq: Cover unsubscribe_port() in list_mutex (bsc#1051510).
- alsa: seq: Fix OOB-reads from strlcpy (bsc#1051510).
- alsa: seq: Fix race of get-subscription call vs port-delete ioctls (bsc#1051510).
- alsa: seq: Protect in-kernel ioctl calls with mutex (bsc#1051510).
- alsa: seq: Protect racy pool manipulation from OSS sequencer (bsc#1051510).
- alsa: seq: Remove superfluous irqsave flags (bsc#1051510).
- alsa: seq: Simplify snd_seq_kernel_client_enqueue() helper (bsc#1051510).
- alsa: timer: Check ack_list emptiness instead of bit flag (bsc#1051510).
- alsa: timer: Coding style fixes (bsc#1051510).
- alsa: timer: Make snd_timer_close() really kill pending actions (bsc#1051510).
- alsa: timer: Make sure to clear pending ack list (bsc#1051510).
- alsa: timer: Revert active callback sync check at close (bsc#1051510).
- alsa: timer: Simplify error path in snd_timer_open() (bsc#1051510).
- alsa: timer: Unify timer callback process code (bsc#1051510).
- alsa: usb-audio: Fix a memory leak bug (bsc#1051510).
- alsa: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk() (bsc#1051510).
- alsa: usx2y: fix a double free bug (bsc#1051510).
- appletalk: Fix compile regression (bsc#1051510).
- appletalk: Fix use-after-free in atalk_proc_exit (bsc#1051510).
- arch: arm64: acpi: KABI ginore includes (bsc#1117158 bsc#1134671).
- arm64, mm, efi: Account for GICv3 LPI tables in static memblock reserve table (bsc#1117158).
- arm64: acpi: fix alignment fault in accessing acpi (bsc#1117158).
- arm64: Export save_stack_trace_tsk() (jsc#SLE-4214).
- arm64: fix acpi dependencies (bsc#1117158).
- arm: 8824/1: fix a migrating irq bug when hotplug cpu (bsc#1051510).
- arm: 8833/1: Ensure that NEON code always compiles with Clang (bsc#1051510).
- arm: 8839/1: kprobe: make patch_lock a raw_spinlock_t (bsc#1051510).
- arm: 8840/1: use a raw_spinlock_t in unwind (bsc#1051510).
- arm: avoid Cortex-A9 livelock on tight dmb loops (bsc#1051510).
- arm: imx6q: cpuidle: fix bug that CPU might not wake up at expected time (bsc#1051510).
- arm: iop: do not use using 64-bit DMA masks (bsc#1051510).
- arm: OMAP2+: fix lack of timer interrupts on CPU1 after hotplug (bsc#1051510).
- arm: OMAP2+: Variable 'reg' in function omap4_dsi_mux_pads() could be uninitialized (bsc#1051510).
- arm: orion: do not use using 64-bit DMA masks (bsc#1051510).
- arm: pxa: ssp: unneeded to free devm_ allocated data (bsc#1051510).
- arm: s3c24xx: Fix boolean expressions in osiris_dvs_notify (bsc#1051510).
- arm: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms (bsc#1051510).
- asoc: cs4270: Set auto-increment bit for register writes (bsc#1051510).
- asoc: fix valid stream condition (bsc#1051510).
- asoc: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe (bsc#1051510).
- asoc: fsl_esai: fix channel swap issue when stream starts (bsc#1051510).
- asoc: fsl_esai: Fix missing break in switch statement (bsc#1051510).
- asoc: hdmi-codec: fix S/PDIF DAI (bsc#1051510).
- asoc: Intel: avoid Oops if DMA setup fails (bsc#1051510).
- asoc: max98090: Fix restore of DAPM Muxes (bsc#1051510).
- asoc: nau8810: fix the issue of widget with prefixed name (bsc#1051510).
- asoc: nau8824: fix the issue of the widget with prefix name (bsc#1051510).
- asoc: RT5677-SPI: Disable 16Bit SPI Transfers (bsc#1051510).
- asoc: samsung: odroid: Fix clock configuration for 44100 sample rate (bsc#1051510).
- asoc: stm32: fix sai driver name initialisation (bsc#1051510).
- asoc: tlv320aic32x4: Fix Common Pins (bsc#1051510).
- asoc: topology: free created components in tplg load error (bsc#1051510).
- asoc: wm_adsp: Add locking to wm_adsp2_bus_error (bsc#1051510).
- asoc:soc-pcm:fix a codec fixup issue in TDM case (bsc#1051510).
- assume flash part size to be 4MB, if it can't be determined (bsc#1127371).
- at76c50x-usb: Do not register led_trigger if usb_register_driver failed (bsc#1051510).
- ath10k: avoid possible string overflow (bsc#1051510).
- ath10k: snoc: fix unbalanced clock error handling (bsc#1111666).
- audit: fix a memleak caused by auditing load module (bsc#1051510).
- b43: shut up clang -Wuninitialized variable warning (bsc#1051510).
- backlight: lm3630a: Return 0 on success in update_status functions (bsc#1051510).
- batman-adv: Reduce claim hash refcnt only for removed entry (bsc#1051510).
- batman-adv: Reduce tt_global hash refcnt only for removed entry (bsc#1051510).
- batman-adv: Reduce tt_local hash refcnt only for removed entry (bsc#1051510).
- bcache: account size of buckets used in uuid write to ca-&gt;meta_sectors_written (bsc#1130972).
- bcache: add a comment in super.c (bsc#1130972).
- bcache: add code comments for bset.c (bsc#1130972).
- bcache: add comment for cache_set-&gt;fill_iter (bsc#1130972).
- bcache: add identifier names to arguments of function definitions (bsc#1130972).
- bcache: add missing SPDX header (bsc#1130972).
- bcache: add MODULE_DESCRIPTION information (bsc#1130972).
- bcache: add separate workqueue for journal_write to avoid deadlock (bsc#1130972).
- bcache: add static const prefix to char * array declarations (bsc#1130972).
- bcache: add sysfs_strtoul_bool() for setting bit-field variables (bsc#1130972).
- bcache: add the missing comments for smp_mb()/smp_wmb() (bsc#1130972).
- bcache: cannot set writeback_running via sysfs if no writeback kthread created (bsc#1130972).
- bcache: correct dirty data statistics (bsc#1130972).
- bcache: do not assign in if condition in bcache_init() (bsc#1130972).
- bcache: do not assign in if condition register_bcache() (bsc#1130972).
- bcache: do not check if debug dentry is ERR or NULL explicitly on remove (bsc#1130972).
- bcache: do not check NULL pointer before calling kmem_cache_destroy (bsc#1130972).
- bcache: do not clone bio in bch_data_verify (bsc#1130972).
- bcache: do not mark writeback_running too early (bsc#1130972).
- bcache: export backing_dev_name via sysfs (bsc#1130972).
- bcache: export backing_dev_uuid via sysfs (bsc#1130972).
- bcache: fix code comments style (bsc#1130972).
- bcache: fix indent by replacing blank by tabs (bsc#1130972).
- bcache: fix indentation issue, remove tabs on a hunk of code (bsc#1130972).
- bcache: fix input integer overflow of congested threshold (bsc#1130972).
- bcache: fix input overflow to cache set io_error_limit (bsc#1130972).
- bcache: fix input overflow to cache set sysfs file io_error_halflife (bsc#1130972).
- bcache: fix input overflow to journal_delay_ms (bsc#1130972).
- bcache: fix input overflow to sequential_cutoff (bsc#1130972).
- bcache: fix input overflow to writeback_delay (bsc#1130972).
- bcache: fix input overflow to writeback_rate_minimum (bsc#1130972).
- bcache: fix ioctl in flash device (bsc#1130972).
- bcache: fix mistaken code comments in bcache.h (bsc#1130972).
- bcache: fix mistaken comments in request.c (bsc#1130972).
- bcache: fix potential div-zero error of writeback_rate_i_term_inverse (bsc#1130972).
- bcache: fix potential div-zero error of writeback_rate_p_term_inverse (bsc#1130972).
- bcache: fix typo 'succesfully' to 'successfully' (bsc#1130972).
- bcache: fix typo in code comments of closure_return_with_destructor() (bsc#1130972).
- bcache: improve sysfs_strtoul_clamp() (bsc#1130972).
- bcache: introduce force_wake_up_gc() (bsc#1130972).
- bcache: make cutoff_writeback and cutoff_writeback_sync tunable (bsc#1130972).
- bcache: Move couple of functions to sysfs.c (bsc#1130972).
- bcache: Move couple of string arrays to sysfs.c (bsc#1130972).
- bcache: move open brace at end of function definitions to next line (bsc#1130972).
- bcache: never writeback a discard operation (bsc#1130972).
- bcache: not use hard coded memset size in bch_cache_accounting_clear() (bsc#1130972).
- bcache: option to automatically run gc thread after writeback (bsc#1130972).
- bcache: panic fix for making cache device (bsc#1130972).
- bcache: Populate writeback_rate_minimum attribute (bsc#1130972).
- bcache: prefer 'help' in Kconfig (bsc#1130972).
- bcache: print number of keys in trace_bcache_journal_write (bsc#1130972).
- bcache: recal cached_dev_sectors on detach (bsc#1130972).
- bcache: remove unnecessary space before ioctl function pointer arguments (bsc#1130972).
- bcache: remove unused bch_passthrough_cache (bsc#1130972).
- bcache: remove useless parameter of bch_debug_init() (bsc#1130972).
- bcache: replace '%pF' by '%pS' in seq_printf() (bsc#1130972).
- bcache: Replace bch_read_string_list() by __sysfs_match_string() (bsc#1130972).
- bcache: replace hard coded number with BUCKET_GC_GEN_MAX (bsc#1130972).
- bcache: replace printk() by pr_*() routines (bsc#1130972).
- bcache: replace Symbolic permissions by octal permission numbers (bsc#1130972).
- bcache: set writeback_percent in a flexible range (bsc#1130972).
- bcache: split combined if-condition code into separate ones (bsc#1130972).
- bcache: stop bcache device when backing device is offline (bsc#1130972).
- bcache: stop using the deprecated get_seconds() (bsc#1130972).
- bcache: style fix to add a blank line after declarations (bsc#1130972).
- bcache: style fix to replace 'unsigned' by 'unsigned int' (bsc#1130972).
- bcache: style fixes for lines over 80 characters (bsc#1130972).
- bcache: treat stale and dirty keys as bad keys (bsc#1130972).
- bcache: trivial - remove tailing backslash in macro BTREE_FLAG (bsc#1130972).
- bcache: update comment for bch_data_insert (bsc#1130972).
- bcache: update comment in sysfs.c (bsc#1130972).
- bcache: use (REQ_META|REQ_PRIO) to indicate bio for metadata (bsc#1130972).
- bcache: use MAX_CACHES_PER_SET instead of magic number 8 in __bch_bucket_alloc_set (bsc#1130972).
- bcache: use REQ_PRIO to indicate bio for metadata (bsc#1130972).
- bcache: use routines from lib/crc64.c for CRC64 calculation (bsc#1130972).
- bcache: use sysfs_strtoul_bool() to set bit-field variables (bsc#1130972).
- bitmap: Add bitmap_alloc(), bitmap_zalloc() and bitmap_free() (jsc#SLE-4797).
- blk-mq: adjust debugfs and sysfs register when updating nr_hw_queues (bsc#1131673).
- blk-mq: Avoid that submitting a bio concurrently with device removal triggers a crash (bsc#1131673).
- blk-mq: change gfp flags to GFP_NOIO in blk_mq_realloc_hw_ctxs (bsc#1131673).
- blk-mq: fallback to previous nr_hw_queues when updating fails (bsc#1131673).
- blk-mq: init hctx sched after update ctx and hctx mapping (bsc#1131673).
- blk-mq: realloc hctx when hw queue is mapped to another node (bsc#1131673).
- blk-mq: sync the update nr_hw_queues with blk_mq_queue_tag_busy_iter (bsc#1131673).
- blkcg: Introduce blkg_root_lookup() (bsc#1131673).
- blkcg: Make blkg_root_lookup() work for queues in bypass mode (bsc#1131673).
- block: check_events: do not bother with events if unsupported (bsc#1110946, bsc#1119843).
- block: check_events: do not bother with events if unsupported (bsc#1110946, bsc#1119843).
- block: disk_events: introduce event flags (bsc#1110946, bsc#1119843).
- block: disk_events: introduce event flags (bsc#1110946, bsc#1119843).
- block: do not leak memory in bio_copy_user_iov() (bsc#1135309).
- block: Do not revalidate bdev of hidden gendisk (bsc#1120091).
- block: Ensure that a request queue is dissociated from the cgroup controller (bsc#1131673).
- block: Fix a race between request queue removal and the block cgroup controller (bsc#1131673).
- block: fix the return errno for direct IO (bsc#1135320).
- block: fix use-after-free on gendisk (bsc#1135312).
- block: Introduce blk_exit_queue() (bsc#1131673).
- block: kABI fixes for bio_rewind_iter() removal (bsc#1131673).
- block: remove bio_rewind_iter() (bsc#1131673).
- bluetooth: Align minimum encryption key size for LE and BR/EDR connections (bsc#1051510).
- bluetooth: btusb: request wake pin with NOAUTOEN (bsc#1051510).
- bluetooth: Check key sizes only when Secure Simple Pairing is enabled (bsc#1135556).
- bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf() (bsc#1133731).
- bluetooth: hidp: fix buffer overflow (bsc#1051510).
- bnx2x: Add support for detection of P2P event packets (bsc#1136498 jsc#SLE-4699).
- bnx2x: Bump up driver version to 1.713.36 (bsc#1136498 jsc#SLE-4699).
- bnx2x: fix spelling mistake 'dicline' -&gt; 'decline' (bsc#1136498 jsc#SLE-4699).
- bnx2x: fix various indentation issues (bsc#1136498 jsc#SLE-4699).
- bnx2x: Remove set but not used variable 'mfw_vn' (bsc#1136498 jsc#SLE-4699).
- bnx2x: Replace magic numbers with macro definitions (bsc#1136498 jsc#SLE-4699).
- bnx2x: Use struct_size() in kzalloc() (bsc#1136498 jsc#SLE-4699).
- bnx2x: Utilize FW 7.13.11.0 (bsc#1136498 jsc#SLE-4699).
- bnxt_en: Add device IDs 0x1806 and 0x1752 for 57500 devices (bsc#1137224).
- bnxt_en: Add support for BCM957504 (bsc#1137224).
- bnxt_en: Drop oversize TX packets to prevent errors (networking-stable-19_03_07).
- bnxt_en: Fix aggregation buffer leak under OOM condition (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix possible BUG() condition when calling pci_disable_msix() (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix possible crash in bnxt_hwrm_ring_free() under error conditions (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix statistics context reservation logic (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Fix uninitialized variable usage in bnxt_rx_pkt() (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one() (bsc#1050242).
- bnxt_en: Improve multicast address setup logic (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Improve multicast address setup logic (networking-stable-19_05_04).
- bnxt_en: Improve NQ reservations (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Improve RX consumer index validity check (networking-stable-19_04_10).
- bnxt_en: Pass correct extended TX port statistics size to firmware (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Reduce memory usage when running in kdump kernel (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Reset device on RX buffer errors (networking-stable-19_04_10).
- bonding: fix event handling for stacked bonds (networking-stable-19_04_19).
- bonding: fix PACKET_ORIGDEV regression (git-fixes).
- bpf, lru: avoid messing with eviction heuristics upon syscall lookup (bsc#1083647).
- bpf: add map_lookup_elem_sys_only for lookups from syscall side (bsc#1083647).
- bpf: Add missed newline in verifier verbose log (bsc#1056787).
- bpf: fix use after free in bpf_evict_inode (bsc#1083647).
- brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() (bsc#1051510).
- brcmfmac: fix leak of mypkt on error return path (bsc#1111666).
- broadcom: Mark expected switch fall-throughs (bsc#1136498 jsc#SLE-4699).
- btrfs: add a helper to return a head ref (bsc#1134813).
- btrfs: Avoid possible qgroup_rsv_size overflow in btrfs_calculate_inode_block_rsv_size (git-fixes).
- btrfs: breakout empty head cleanup to a helper (bsc#1134813).
- btrfs: delayed-ref: Introduce better documented delayed ref structures (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: delayed-ref: Use btrfs_ref to refactor btrfs_add_delayed_data_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: delayed-ref: Use btrfs_ref to refactor btrfs_add_delayed_tree_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: do not allow trimming when a fs is mounted with the nologreplay option (bsc#1135758).
- btrfs: do not double unlock on error in btrfs_punch_hole (bsc#1136881).
- btrfs: Do not panic when we can't find a root key (bsc#1112063).
- btrfs: extent-tree: Fix a bug that btrfs is unable to add pinned bytes (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Open-code process_func in __btrfs_mod_ref (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Use btrfs_ref to refactor add_pinned_bytes() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Use btrfs_ref to refactor btrfs_free_extent() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: extent-tree: Use btrfs_ref to refactor btrfs_inc_extent_ref() (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: Factor out common delayed refs init code (bsc#1134813).
- btrfs: fix assertion failure on fsync with NO_HOLES enabled (bsc#1131848).
- btrfs: Fix bound checking in qgroup_trace_new_subtree_blocks (git-fixes).
- btrfs: fix fsync not persisting changed attributes of a directory (bsc#1137151).
- btrfs: fix incorrect file size after shrinking truncate and fsync (bsc#1130195).
- btrfs: fix race between ranged fsync and writeback of adjacent ranges (bsc#1136477).
- btrfs: fix race updating log root item during fsync (bsc#1137153).
- btrfs: fix wrong ctime and mtime of a directory after log replay (bsc#1137152).
- btrfs: improve performance on fsync of files with multiple hardlinks (bsc#1123454).
- btrfs: Introduce init_delayed_ref_head (bsc#1134813).
- btrfs: move all ref head cleanup to the helper function (bsc#1134813).
- btrfs: move extent_op cleanup to a helper (bsc#1134813).
- btrfs: move ref_mod modification into the if (ref) logic (bsc#1134813).
- btrfs: Open-code add_delayed_data_ref (bsc#1134813).
- btrfs: Open-code add_delayed_tree_ref (bsc#1134813).
- btrfs: qgroup: Check bg while resuming relocation to avoid NULL pointer dereference (bsc#1134806).
- btrfs: qgroup: Do not scan leaf if we're modifying reloc tree (bsc#1063638 bsc#1128052 bsc#1108838).
- btrfs: qgroup: Move reserved data accounting from btrfs_delayed_ref_head to btrfs_qgroup_extent_record (bsc#1134162).
- btrfs: qgroup: Remove duplicated trace points for qgroup_rsv_add/release (bsc#1134160).
- btrfs: reloc: Also queue orphan reloc tree for cleanup to avoid BUG_ON() (bsc#1133612).
- btrfs: remove delayed_ref_node from ref_head (bsc#1134813).
- btrfs: remove WARN_ON in log_dir_items (bsc#1131847).
- btrfs: send, flush dellaloc in order to avoid data loss (bsc#1133320).
- btrfs: split delayed ref head initialization and addition (bsc#1134813).
- btrfs: track refs in a rb_tree instead of a list (bsc#1134813).
- btrfs: tree-checker: detect file extent items with overlapping ranges (bsc#1136478).
- btrfs: Use init_delayed_ref_common in add_delayed_data_ref (bsc#1134813).
- btrfs: Use init_delayed_ref_common in add_delayed_tree_ref (bsc#1134813).
- btrfs: Use init_delayed_ref_head in add_delayed_ref_head (bsc#1134813).
- cdrom: Fix race condition in cdrom_sysctl_register (bsc#1051510).
- ceph: ensure d_name stability in ceph_dentry_hash() (bsc#1134461).
- ceph: ensure d_name stability in ceph_dentry_hash() (bsc#1134461).
- ceph: fix ci-&gt;i_head_snapc leak (bsc#1122776).
- ceph: fix ci-&gt;i_head_snapc leak (bsc#1122776).
- ceph: fix use-after-free on symlink traversal (bsc#1134459).
- ceph: fix use-after-free on symlink traversal (bsc#1134459).
- ceph: only use d_name directly when parent is locked (bsc#1134460).
- ceph: only use d_name directly when parent is locked (bsc#1134460).
- cfg80211: Handle WMM rules in regulatory domain intersection (bsc#1111666).
- cgroup: fix parsing empty mount option string (bsc#1133094).
- chelsio: use BUG() instead of BUG_ON(1) (bsc#1136345 jsc#SLE-4681).
- cifs: Do not count -ENODATA as failure for query directory (bsc#1051510).
- cifs: do not dereference smb_file_target before null check (bsc#1051510).
- cifs: Do not hide EINTR after sending network packets (bsc#1051510).
- cifs: Do not reconnect TCP session in add_credits() (bsc#1051510).
- cifs: Do not reset lease state to NONE on lease break (bsc#1051510).
- cifs: Fix adjustment of credits for MTU requests (bsc#1051510).
- cifs: Fix credit calculation for encrypted reads with errors (bsc#1051510).
- cifs: Fix credits calculations for reads with errors (bsc#1051510).
- cifs: fix POSIX lock leak and invalid ptr deref (bsc#1114542).
- cifs: Fix possible hang during async MTU reads and writes (bsc#1051510).
- cifs: Fix potential OOB access of lock element array (bsc#1051510).
- cifs: Fix read after write for files with read caching (bsc#1051510).
- cifs: keep FileInfo handle live during oplock break (bsc#1106284, bsc#1131565).
- clk: fractional-divider: check parent rate only if flag is set (bsc#1051510).
- clk: rockchip: fix frac settings of GPLL clock for rk3328 (bsc#1051510).
- clk: rockchip: Fix video codec clocks on rk3288 (bsc#1051510).
- clk: rockchip: fix wrong clock definitions for rk3328 (bsc#1051510).
- clk: x86: Add system specific quirk to mark clocks as critical (bsc#1051510).
- config: arm64: enable CN99xx uncore pmu References: bsc#1117114
- configfs: fix possible use-after-free in configfs_register_group (bsc#1051510).
- configfs: Fix use-after-free when accessing sd-&gt;s_dentry (bsc#1051510).
- cpu/speculation: Add 'mitigations=' cmdline option (bsc#1112178).
- cpufreq: Add Hygon Dhyana support ().
- cpufreq: AMD: Ignore the check for ProcFeedback in ST/CZ ().
- cpupowerutils: bench - Fix cpu online check (bsc#1051510).
- crypto: arm/aes-neonbs - do not access already-freed walk.iv (bsc#1051510).
- crypto: caam - add missing put_device() call (bsc#1129770).
- crypto: caam - fix caam_dump_sg that iterates through scatterlist (bsc#1051510).
- crypto: caam/qi2 - fix DMA mapping of stack memory (bsc#1111666).
- crypto: caam/qi2 - fix zero-length buffer DMA mapping (bsc#1111666).
- crypto: caam/qi2 - generate hash keys in-place (bsc#1111666).
- crypto: ccm - fix incompatibility between 'ccm' and 'ccm_base' (bsc#1051510).
- crypto: ccp - Do not free psp_master when PLATFORM_INIT fails (bsc#1051510).
- crypto: chacha20poly1305 - set cra_name correctly (bsc#1051510).
- crypto: chcr - ESN for Inline IPSec Tx (bsc#1136353 jsc#SLE-4688).
- crypto: chcr - small packet Tx stalls the queue (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - avoid using sa_entry imm (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - check set_msg_len overflow in generate_b0 (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - clean up various indentation issues (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - cleanup:send addr as value in function argument (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - count incomplete block in IV (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix NULL pointer dereference (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix passing zero to 'PTR_ERR' warning in chcr_aead_op (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix softlockup with heavy I/O (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fix wrong error counter increments (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Fixed Traffic Stall (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Handle pci shutdown event (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Inline single pdu only (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - remove set but not used variable 'kctx_len' (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - remove set but not used variables 'adap' (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Reset counters on cxgb4 Detach (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Swap location of AAD and IV sent in WR (bsc#1136353 jsc#SLE-4688).
- crypto: chelsio - Use same value for both channel in single WR (bsc#1136353 jsc#SLE-4688).
- crypto: chtls - remove cdev_list_lock (bsc#1136353 jsc#SLE-4688).
- crypto: chtls - remove set but not used variables 'err, adap, request, hws' (bsc#1136353 jsc#SLE-4688).
- crypto: crct10dif-generic - fix use via crypto_shash_digest() (bsc#1051510).
- crypto: crypto4xx - properly set IV after de- and encrypt (bsc#1051510).
- crypto: fips - Grammar s/options/option/, s/to/the/ (bsc#1051510).
- crypto: gcm - fix incompatibility between 'gcm' and 'gcm_base' (bsc#1051510).
- crypto: pcbc - remove bogus memcpy()s with src == dest (bsc#1051510).
- crypto: prefix header search paths with $(srctree)/ (bsc#1136353 jsc#SLE-4688).
- crypto: qat - move temp buffers off the stack (jsc#SLE-4818).
- crypto: qat - no need to check return value of debugfs_create functions (jsc#SLE-4818).
- crypto: qat - Remove unused goto label (jsc#SLE-4818).
- crypto: qat - Remove VLA usage (jsc#SLE-4818).
- crypto: sha256/arm - fix crash bug in Thumb2 build (bsc#1051510).
- crypto: sha512/arm - fix crash bug in Thumb2 build (bsc#1051510).
- crypto: skcipher - do not WARN on unprocessed data after slow walk step (bsc#1051510).
- crypto: sun4i-ss - Fix invalid calculation of hash end (bsc#1051510).
- crypto: vmx - CTR: always increment IV as quadword (bsc#1051510).
- crypto: vmx - fix copy-paste error in CTR mode (bsc#1051510).
- crypto: vmx - ghash: do nosimd fallback manually (bsc#1135661, bsc#1137162).
- crypto: vmx - return correct error code on failed setkey (bsc#1135661, bsc#1137162).
- crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() (bsc#1051510).
- crypto: x86/poly1305 - fix overflow during partial reduction (bsc#1051510).
- cxgb4/chtls: Prefix adapter flags with CXGB4 (bsc#1136345 jsc#SLE-4681).
- cxgb4/cxgb4vf: Add support for SGE doorbell queue timer (bsc#1127371).
- cxgb4/cxgb4vf: Display advertised FEC in ethtool (bsc#1136345 jsc#SLE-4681).
- cxgb4/cxgb4vf: Fix mac_hlist initialization and free (bsc#1127374).
- cxgb4/cxgb4vf: Fix up netdev-&gt;hw_features (bsc#1136345 jsc#SLE-4681).
- cxgb4/cxgb4vf: Link management changes (bsc#1127371).
- cxgb4/cxgb4vf: Program hash region for {t4/t4vf}_change_mac() (bsc#1127371).
- cxgb4/cxgb4vf_main: Mark expected switch fall-through (bsc#1136345 jsc#SLE-4681).
- cxgb4: Add capability to get/set SGE Doorbell Queue Timer Tick (bsc#1127371).
- cxgb4: Add flag tc_flower_initialized (bsc#1127371).
- cxgb4: Add new T5 pci device id 0x50ae (bsc#1127371).
- cxgb4: Add new T5 pci device ids 0x50af and 0x50b0 (bsc#1127371).
- cxgb4: Add new T6 pci device ids 0x608a (bsc#1127371).
- cxgb4: Add new T6 pci device ids 0x608b (bsc#1136345 jsc#SLE-4681).
- cxgb4: add per rx-queue counter for packet errors (bsc#1127371).
- cxgb4: Add support for FW_ETH_TX_PKT_VM_WR (bsc#1127371).
- cxgb4: add support to display DCB info (bsc#1127371).
- cxgb4: Add support to read actual provisioned resources (bsc#1127371).
- cxgb4: add tcb flags and tcb rpl struct (bsc#1136345 jsc#SLE-4681).
- cxgb4: Add VF Link state support (bsc#1136345 jsc#SLE-4681).
- cxgb4: Added missing break in ndo_udp_tunnel_{add/del} (bsc#1127371).
- cxgb4: collect ASIC LA dumps from ULP TX (bsc#1127371).
- cxgb4: collect hardware queue descriptors (bsc#1127371).
- cxgb4: collect number of free PSTRUCT page pointers (bsc#1127371).
- cxgb4: convert flower table to use rhashtable (bsc#1127371).
- cxgb4: cxgb4: use FW_PORT_ACTION_L1_CFG32 for 32 bit capability (bsc#1127371).
- cxgb4: Delete all hash and TCAM filters before resource cleanup (bsc#1136345 jsc#SLE-4681).
- cxgb4: display number of rx and tx pages free (bsc#1127371).
- cxgb4: do not return DUPLEX_UNKNOWN when link is down (bsc#1127371).
- cxgb4: Do not return EAGAIN when TCAM is full (bsc#1136345 jsc#SLE-4681).
- cxgb4: Enable hash filter with offload (bsc#1136345 jsc#SLE-4681).
- cxgb4: Enable outer UDP checksum offload for T6 (bsc#1136345 jsc#SLE-4681).
- cxgb4: Export sge_host_page_size to ulds (bsc#1127371).
- cxgb4: Fix error path in cxgb4_init_module (bsc#1136345 jsc#SLE-4681).
- cxgb4: fix the error path of cxgb4_uld_register() (bsc#1127371).
- cxgb4: free mac_hlist properly (bsc#1136345 jsc#SLE-4681).
- cxgb4: impose mandatory VLAN usage when non-zero TAG ID (bsc#1127371).
- cxgb4: kfree mhp after the debug print (bsc#1136345 jsc#SLE-4681).
- cxgb4: Mask out interrupts that are not enabled (bsc#1127175).
- cxgb4: move Tx/Rx free pages collection to common code (bsc#1127371).
- cxgb4: offload VLAN flows regardless of VLAN ethtype (bsc#1136345 jsc#SLE-4681).
- cxgb4: remove DEFINE_SIMPLE_DEBUGFS_FILE() (bsc#1136345 jsc#SLE-4681).
- cxgb4: remove redundant assignment to vlan_cmd.dropnovlan_fm (bsc#1127371).
- cxgb4: remove set but not used variables 'multitrc, speed' (bsc#1136345 jsc#SLE-4681).
- cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size (bsc#1127371).
- cxgb4: remove the unneeded locks (bsc#1127371).
- cxgb4: Revert 'cxgb4: Remove SGE_HOST_PAGE_SIZE dependency on page size' (bsc#1136345 jsc#SLE-4681).
- cxgb4: specify IQTYPE in fw_iq_cmd (bsc#1127371).
- cxgb4: Support ethtool private flags (bsc#1127371).
- cxgb4: TLS record offload enable (bsc#1136345 jsc#SLE-4681).
- cxgb4: Update 1.23.3.0 as the latest firmware supported (bsc#1136345 jsc#SLE-4681).
- cxgb4: update supported DCB version (bsc#1127371).
- cxgb4: use firmware API for validating filter spec (bsc#1136345 jsc#SLE-4681).
- cxgb4: use new fw interface to get the VIN and smt index (bsc#1127371).
- cxgb4vf: Call netif_carrier_off properly in pci_probe (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Enter debugging mode if FW is inaccessible (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Few more link management changes (bsc#1127374).
- cxgb4vf: fix memleak in mac_hlist initialization (bsc#1127374).
- cxgb4vf: free mac_hlist properly (bsc#1136345 jsc#SLE-4681).
- cxgb4vf: Prefix adapter flags with CXGB4VF (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Revert force link up behaviour (bsc#1136347 jsc#SLE-4683).
- cxgb4vf: Update port information in cxgb4vf_open() (bsc#1127374).
- dccp: do not use ipv6 header for ipv4 flow (networking-stable-19_03_28).
- dccp: Fix memleak in __feat_register_sp (bsc#1051510).
- debugfs: fix use-after-free on symlink traversal (bsc#1051510).
- device_cgroup: fix RCU imbalance in error case (bsc#1051510).
- devres: Align data[] to ARCH_KMALLOC_MINALIGN (bsc#1051510).
- dm: disable DISCARD if the underlying storage no longer supports it (bsc#1114638).
- dmaengine: axi-dmac: Do not check the number of frames for alignment (bsc#1051510).
- dmaengine: imx-dma: fix warning comparison of distinct pointer types (bsc#1051510).
- dmaengine: qcom_hidma: assign channel cookie correctly (bsc#1051510).
- dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid (bsc#1051510).
- dmaengine: tegra210-adma: Fix crash during probe (bsc#1111666).
- dmaengine: tegra210-dma: free dma controller in remove() (bsc#1051510).
- dmaengine: tegra: avoid overflow of byte tracking (bsc#1051510).
- documentation: Add MDS vulnerability documentation (bsc#1135642).
- documentation: perf: Add documentation for ThunderX2 PMU uncore driver ().
- drivers/perf: Add Cavium ThunderX2 SoC UNCORE PMU driver ().
- drivers: acpi: add dependency of EFI for arm64 (bsc#1117158).
- drivers: hv: vmbus: Offload the handling of channels to two workqueues (bsc#1130567).
- drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind() (bsc#1130567).
- drm/amd/display: extending AUX SW Timeout (bsc#1111666).
- drm/amd/display: fix cursor black issue (bsc#1111666).
- drm/amd/display: If one stream full updates, full update all planes (bsc#1111666).
- drm/amdgpu/gmc9: fix VM_L2_CNTL3 programming (bsc#1111666).
- drm/amdkfd: use init_mqd function to allocate object for hid_mqd (CI) (bsc#1111666).
- drm/bridge: adv7511: Fix low refresh rate selection (bsc#1051510).
- drm/doc: Drop 'content type' from the legacy kms property table (bsc#1111666).
- drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers (bsc#1051510).
- drm/etnaviv: lock MMU while dumping core (bsc#1113722)
- drm/exynos/mixer: fix MIXER shadow registry synchronisation code (bsc#1111666).
- drm/fb-helper: dpms_legacy(): Only set on connectors in use (bsc#1051510).
- drm/fb-helper: generic: Call drm_client_add() after setup is done (bsc#1111666).
- drm/i915/fbc: disable framebuffer compression on GeminiLake (bsc#1051510).
- drm/i915/gvt: add 0x4dfc to gen9 save-restore list (bsc#1113722)
- drm/i915/gvt: Add in context mmio 0x20D8 to gen9 mmio list (bsc#1113722)
- drm/i915/gvt: Add in context mmio 0x20D8 to gen9 mmio list (bsc#1113956)
- drm/i915/gvt: Annotate iomem usage (bsc#1051510).
- drm/i915/gvt: do not deliver a workload if its creation fails (bsc#1051510).
- drm/i915/gvt: do not let pin count of shadow mm go negative (bsc#1113722)
- drm/i915/gvt: do not let pin count of shadow mm go negative (bsc#1113956)
- drm/i915/gvt: do not let TRTTE and 0x4dfc write passthrough to hardware (bsc#1051510).
- drm/i915/gvt: Fix cmd length of VEB_DI_IECP (bsc#1113722)
- drm/i915/gvt: Fix incorrect mask of mmio 0x22028 in gen8/9 mmio list (bnc#1113722)
- drm/i915/gvt: Prevent use-after-free in ppgtt_free_all_spt() (bsc#1111666).
- drm/i915/gvt: refine ggtt range validation (bsc#1113722)
- drm/i915/gvt: Roundup fb-&gt;height into tile's height at calucation fb-&gt;size (bsc#1111666).
- drm/i915/gvt: Tiled Resources mmios are in-context mmios for gen9+ (bsc#1113722)
- drm/i915/icl: Whitelist GEN9_SLICE_COMMON_ECO_CHICKEN1 (bsc#1111666).
- drm/i915: Disable LP3 watermarks on all SNB machines (bsc#1051510).
- drm/i915: Disable tv output on i9x5gm (bsc#1086657, bsc#1133897).
- drm/i915: Downgrade Gen9 Plane WM latency error (bsc#1051510).
- drm/i915: Fix I915_EXEC_RING_MASK (bsc#1051510).
- drm/i915: Force 2*96 MHz cdclk on glk/cnl when audio power is enabled (bsc#1111666).
- drm/imx: do not skip DP channel disable for background plane (bsc#1051510).
- drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata() (bsc#1113722)
- drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata() (bsc#1113956)
- drm/mediatek: fix possible object reference leak (bsc#1051510).
- drm/meson: add size and alignment requirements for dumb buffers (bnc#1113722)
- drm/nouveau/bar/tu104: initial support (bsc#1133593).
- drm/nouveau/bar/tu106: initial support (bsc#1133593).
- drm/nouveau/bios/tu104: initial support (bsc#1133593).
- drm/nouveau/bios/tu106: initial support (bsc#1133593).
- drm/nouveau/bios: translate additional memory types (bsc#1133593).
- drm/nouveau/bios: translate usb-C connector type (bsc#1133593).
- drm/nouveau/bus/tu104: initial support (bsc#1133593).
- drm/nouveau/bus/tu106: initial support (bsc#1133593).
- drm/nouveau/ce/tu104: initial support (bsc#1133593).
- drm/nouveau/ce/tu106: initial support (bsc#1133593).
- drm/nouveau/core: increase maximum number of nvdec instances to 3 (bsc#1133593).
- drm/nouveau/core: recognise TU102 (bsc#1133593).
- drm/nouveau/core: recognise TU104 (bsc#1133593).
- drm/nouveau/core: recognise TU106 (bsc#1133593).
- drm/nouveau/core: support multiple nvdec instances (bsc#1133593).
- drm/nouveau/devinit/gm200-: export function to upload+execute PMU/PRE_OS (bsc#1133593).
- drm/nouveau/devinit/tu104: initial support (bsc#1133593).
- drm/nouveau/devinit/tu106: initial support (bsc#1133593).
- drm/nouveau/disp/gm200-: add scdc parameter setter (bsc#1133593).
- drm/nouveau/disp/gv100: fix name of window channels in debug output (bsc#1133593).
- drm/nouveau/disp/tu104: initial support (bsc#1133593).
- drm/nouveau/disp/tu106: initial support (bsc#1133593).
- drm/nouveau/disp: add a way to configure scrambling/tmds for hdmi 2.0 (bsc#1133593).
- drm/nouveau/disp: add support for setting scdc parameters for high modes (bsc#1133593).
- drm/nouveau/disp: keep track of high-speed state, program into clock (bsc#1133593).
- drm/nouveau/disp: take sink support into account for exposing 594mhz (bsc#1133593).
- drm/nouveau/dma/tu104: initial support (bsc#1133593).
- drm/nouveau/dma/tu106: initial support (bsc#1133593).
- drm/nouveau/drm/nouveau: Do not forget to label dp_aux devices (bsc#1133593).
- drm/nouveau/drm/nouveau: s/nouveau_backlight_exit/nouveau_backlight_fini/ (bsc#1133593).
- drm/nouveau/drm/nouveau: tegra: Call nouveau_drm_device_init() (bsc#1133593).
- drm/nouveau/fault/tu104: initial support (bsc#1133593).
- drm/nouveau/fault/tu106: initial support (bsc#1133593).
- drm/nouveau/fault: add explicit control over fault buffer interrupts (bsc#1133593).
- drm/nouveau/fault: remove manual mapping of fault buffers into BAR2 (bsc#1133593).
- drm/nouveau/fault: store get/put pri address in nvkm_fault_buffer (bsc#1133593).
- drm/nouveau/fb/tu104: initial support (bsc#1133593).
- drm/nouveau/fb/tu106: initial support (bsc#1133593).
- drm/nouveau/fifo/gf100-: call into BAR to reset BARs after MMU fault (bsc#1133593).
- drm/nouveau/fifo/gk104-: group pbdma functions together (bsc#1133593).
- drm/nouveau/fifo/gk104-: return channel instance in ctor args (bsc#1133593).
- drm/nouveau/fifo/gk104-: separate runlist building from committing to hw (bsc#1133593).
- drm/nouveau/fifo/gk104-: support enabling privileged ce functions (bsc#1133593).
- drm/nouveau/fifo/gk104-: virtualise pbdma enable function (bsc#1133593).
- drm/nouveau/fifo/gm200-: read pbdma count more directly (bsc#1133593).
- drm/nouveau/fifo/gv100: allocate method buffer (bsc#1133593).
- drm/nouveau/fifo/gv100: return work submission token in channel ctor args (bsc#1133593).
- drm/nouveau/fifo/tu104: initial support (bsc#1133593).
- drm/nouveau/fifo/tu106: initial support (bsc#1133593).
- drm/nouveau/fuse/tu104: initial support (bsc#1133593).
- drm/nouveau/fuse/tu106: initial support (bsc#1133593).
- drm/nouveau/gpio/tu104: initial support (bsc#1133593).
- drm/nouveau/gpio/tu106: initial support (bsc#1133593).
- drm/nouveau/i2c/tu104: initial support (bsc#1133593).
- drm/nouveau/i2c/tu106: initial support (bsc#1133593).
- drm/nouveau/i2c: Disable i2c bus access after -&gt;fini() (bsc#1113722)
- drm/nouveau/ibus/tu104: initial support (bsc#1133593).
- drm/nouveau/ibus/tu106: initial support (bsc#1133593).
- drm/nouveau/imem/nv50: support pinning objects in BAR2 and returning address (bsc#1133593).
- drm/nouveau/imem/tu104: initial support (bsc#1133593).
- drm/nouveau/imem/tu106: initial support (bsc#1133593).
- drm/nouveau/kms/nv50-: allow more flexibility with lut formats (bsc#1133593).
- drm/nouveau/kms/tu104: initial support (bsc#1133593).
- drm/nouveau/ltc/tu104: initial support (bsc#1133593).
- drm/nouveau/ltc/tu106: initial support (bsc#1133593).
- drm/nouveau/mc/tu104: initial support (bsc#1133593).
- drm/nouveau/mc/tu106: initial support (bsc#1133593).
- drm/nouveau/mmu/tu104: initial support (bsc#1133593).
- drm/nouveau/mmu/tu106: initial support (bsc#1133593).
- drm/nouveau/mmu: add more general vmm free/node handling functions (bsc#1133593).
- drm/nouveau/pci/tu104: initial support (bsc#1133593).
- drm/nouveau/pci/tu106: initial support (bsc#1133593).
- drm/nouveau/pmu/tu104: initial support (bsc#1133593).
- drm/nouveau/pmu/tu106: initial support (bsc#1133593).
- drm/nouveau/therm/tu104: initial support (bsc#1133593).
- drm/nouveau/therm/tu106: initial support (bsc#1133593).
- drm/nouveau/tmr/tu104: initial support (bsc#1133593).
- drm/nouveau/tmr/tu106: initial support (bsc#1133593).
- drm/nouveau/top/tu104: initial support (bsc#1133593).
- drm/nouveau/top/tu106: initial support (bsc#1133593).
- drm/nouveau/volt/gf117: fix speedo readout register (bsc#1051510).
- drm/nouveau: add DisplayPort CEC-Tunneling-over-AUX support (bsc#1133593).
- drm/nouveau: Add NV_PRINTK_ONCE and variants (bsc#1133593).
- drm/nouveau: Add size to vbios.rom file in debugfs (bsc#1133593).
- drm/nouveau: Add strap_peek to debugfs (bsc#1133593).
- drm/nouveau: Cleanup indenting in nouveau_backlight.c (bsc#1133593).
- drm/nouveau: Fix potential memory leak in nouveau_drm_load() (bsc#1133593).
- drm/nouveau: Move backlight device into nouveau_connector (bsc#1133593).
- drm/nouveau: Refactor nvXX_backlight_init() (bsc#1133593).
- drm/nouveau: register backlight on pascal and newer (bsc#1133593).
- drm/nouveau: remove left-over struct member (bsc#1133593).
- drm/nouveau: Remove unecessary dma_fence_ops (bsc#1133593).
- drm/nouveau: Start using new drm_dev initialization helpers (bsc#1133593).
- drm/nouveau: Stop using drm_crtc_force_disable (bsc#1051510).
- drm/omap: hdmi4_cec: Fix CEC clock handling for PM (bsc#1111666).
- drm/panel: panel-innolux: set display off in innolux_panel_unprepare (bsc#1111666).
- drm/pl111: Initialize clock spinlock early (bsc#1111666).
- drm/rockchip: fix for mailbox read validation (bsc#1051510).
- drm/rockchip: fix for mailbox read validation (bsc#1111666).
- drm/rockchip: shutdown drm subsystem on shutdown (bsc#1051510).
- drm/rockchip: vop: reset scale mode when win is disabled (bsc#1113722)
- drm/sun4i: Add missing drm_atomic_helper_shutdown at driver unbind (bsc#1113722)
- drm/sun4i: Fix component unbinding and component master deletion (bsc#1113722)
- drm/sun4i: Fix sun8i HDMI PHY clock initialization (bsc#1111666).
- drm/sun4i: Fix sun8i HDMI PHY configuration for &gt; 148.5 MHz (bsc#1111666).
- drm/sun4i: rgb: Change the pixel clock validation check (bnc#1113722)
- drm/sun4i: Set device driver data at bind time for use in unbind (bsc#1113722)
- drm/sun4i: tcon top: Fix NULL/invalid pointer dereference in sun8i_tcon_top_un/bind (bsc#1111666).
- drm/sun4i: Unbind components before releasing DRM and memory (bsc#1113722)
- drm/tegra: gem: Fix CPU-cache maintenance for BO's allocated using get_pages() (bsc#1111666).
- drm/tegra: hub: Fix dereference before check (bsc#1111666).
- drm/ttm: Fix bo_global and mem_global kfree error (bsc#1111666).
- drm/ttm: fix out-of-bounds read in ttm_put_pages() v2 (bsc#1111666).
- drm/ttm: Remove warning about inconsistent mapping information (bnc#1131488)
- drm/udl: add a release method and delay modeset teardown (bsc#1085536)
- drm/vc4: Fix memory leak during gpu reset. (bsc#1113722)
- drm/vmwgfx: Do not send drm sysfs hotplug events on initial master set (bsc#1051510).
- drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read (bsc#1051510).
- drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() (bsc#1113722)
- drm/vmwgfx: Remove set but not used variable 'restart' (bsc#1111666).
- drm: Auto-set allow_fb_modifiers when given modifiers at plane init (bsc#1051510).
- drm: bridge: dw-hdmi: Fix overflow workaround for Rockchip SoCs (bsc#1113722)
- drm: rcar-du: Fix rcar_du_crtc structure documentation (bsc#1111666).
- dsa: mv88e6xxx: Ensure all pending interrupts are handled prior to exit (networking-stable-19_02_20).
- dt-bindings: clock: r8a7795: Remove CSIREF clock (bsc#1120902).
- dt-bindings: clock: r8a7796: Remove CSIREF clock (bsc#1120902).
- dt-bindings: net: Add binding for the external clock for TI WiLink (bsc#1085535).
- dt-bindings: net: Fix a typo in the phy-mode list for ethernet bindings (bsc#1129770).
- dt-bindings: rtc: sun6i-rtc: Fix register range in example (bsc#1120902).
- dwc2: gadget: Fix completed transfer size calculation in DDMA (bsc#1051510).
- e1000e: Disable runtime PM on CNP+ (jsc#SLE-4804).
- e1000e: Exclude device from suspend direct complete optimization (jsc#SLE-4804).
- e1000e: Fix -Wformat-truncation warnings (bsc#1051510).
- e1000e: fix a missing check for return value (jsc#SLE-4804).
- e1000e: fix cyclic resets at link up with active tx (bsc#1051510).
- edac, amd64: Add Hygon Dhyana support ().
- efi/arm: Defer persistent reservations until after paging_init() (bsc#1117158).
- efi/arm: Do not mark acpi reclaim memory as MEMBLOCK_NOMAP (bsc#1117158 bsc#1115688 bsc#1120566).
- efi/arm: libstub: add a root memreserve config table (bsc#1117158).
- efi/arm: map UEFI memory map even w/o runtime services enabled (bsc#1117158).
- efi/arm: preserve early mapping of UEFI memory map longer for BGRT (bsc#1117158).
- efi/arm: Revert 'Defer persistent reservations until after paging_init()' (bsc#1117158).
- efi/arm: Revert deferred unmap of early memmap mapping (bsc#1117158).
- efi: add API to reserve memory persistently across kexec reboot (bsc#1117158).
- efi: honour memory reservations passed via a linux specific config table (bsc#1117158).
- efi: Permit calling efi_mem_reserve_persistent() from atomic context (bsc#1117158).
- efi: Permit multiple entries in persistent memreserve data structure (bsc#1117158).
- efi: Prevent GICv3 WARN() by mapping the memreserve table before first use (bsc#1117158).
- efi: Reduce the amount of memblock reservations for persistent allocations (bsc#1117158).
- ext4: actually request zeroing of inode table after grow (bsc#1135315).
- ext4: avoid panic during forced reboot due to aborted journal (bsc#1126356).
- ext4: cleanup bh release code in ext4_ind_remove_space() (bsc#1131851).
- ext4: Do not warn when enabling DAX (bsc#1132894).
- ext4: fix data corruption caused by overlapping unaligned and aligned IO (bsc#1136428).
- ext4: fix ext4_show_options for file systems w/o journal (bsc#1135316).
- ext4: fix use-after-free race with debug_want_extra_isize (bsc#1135314).
- ext4: make sanity check in mballoc more strict (bsc#1136439).
- ext4: wait for outstanding dio during truncate in nojournal mode (bsc#1136438).
- fbdev: fbmem: fix memory access if logo is bigger than the screen (bsc#1051510).
- fbdev: fix divide error in fb_var_to_videomode (bsc#1113722)
- fbdev: fix WARNING in __alloc_pages_nodemask bug (bsc#1113722)
- firmware: efi: factor out mem_reserve (bsc#1117158 bsc#1134671).
- fix cgroup_do_mount() handling of failure exits (bsc#1133095).
- fix rtnh_ok() (git-fixes).
- fm10k: Fix a potential NULL pointer dereference (bsc#1051510).
- fm10k: TRIVIAL cleanup of extra spacing in function comment (jsc#SLE-4796).
- fm10k: use struct_size() in kzalloc() (jsc#SLE-4796).
- fs/nfs: Fix nfs_parse_devname to not modify it's argument (git-fixes).
- fs/sync.c: sync_file_range(2) may use WB_SYNC_ALL writeback (bsc#1136432).
- fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount (bsc#1136435).
- fs: avoid fdput() after failed fdget() in vfs_dedupe_file_range() (bsc#1132384, bsc#1132219).
- ftrace/x86_64: Emulate call function while updating in breakpoint handler (bsc#1099658).
- futex: Cure exit race (bsc#1050549).
- futex: Ensure that futex address is aligned in handle_futex_death() (bsc#1050549).
- futex: Handle early deadlock return correctly (bsc#1050549).
- genetlink: Fix a memory leak on error path (networking-stable-19_03_28).
- ghes, EDAC: Fix ghes_edac registration (bsc#1133176).
- gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input (bsc#1051510).
- gpio: aspeed: fix a potential NULL pointer dereference (bsc#1051510).
- gpio: gpio-omap: fix level interrupt idling (bsc#1051510).
- gpio: of: Fix of_gpiochip_add() error path (bsc#1051510).
- gpu: ipu-v3: dp: fix CSC handling (bsc#1051510).
- gre6: use log_ecn_error module parameter in ip6_tnl_rcv() (git-fixes).
- hid: core: move Usage Page concatenation to Main item (bsc#1093389).
- hid: debug: fix race condition with between rdesc_show() and device removal (bsc#1051510).
- hid: i2c-hid: Ignore input report if there's no data present on Elan touchpanels (bsc#1133486).
- hid: input: add mapping for 'Toggle Display' key (bsc#1051510).
- hid: input: add mapping for Assistant key (bsc#1051510).
- hid: input: add mapping for Expose/Overview key (bsc#1051510).
- hid: input: add mapping for keyboard Brightness Up/Down/Toggle keys (bsc#1051510).
- hid: input: fix a4tech horizontal wheel custom usage (bsc#1137429).
- hid: intel-ish-hid: avoid binding wrong ishtp_cl_device (bsc#1051510).
- hid: intel-ish: ipc: handle PIMR before ish_wakeup also clear PISR busy_clear bit (bsc#1051510).
- hid: logitech: check the return value of create_singlethread_workqueue (bsc#1051510).
- hv_netvsc: Fix IP header checksum for coalesced packets (networking-stable-19_03_07).
- hwmon: (f71805f) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (pc87427) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (vt1211) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses (bsc#1051510).
- hwrng: virtio - Avoid repeated init of completion (bsc#1051510).
- i2c: imx: correct the method of getting private data in notifier_call (bsc#1111666).
- i2c: Make i2c_unregister_device() NULL-aware (bsc#1108193).
- i2c: synquacer: fix enumeration of slave devices (bsc#1111666).
- i40e: Able to add up to 16 MAC filters on an untrusted VF (jsc#SLE-4797).
- i40e: add new pci id for X710/XXV710 N3000 cards (jsc#SLE-4797).
- i40e: add num_vectors checker in iwarp handler (jsc#SLE-4797).
- i40e: Add support FEC configuration for Fortville 25G (jsc#SLE-4797).
- i40e: Add support for X710 B/P and SFP+ cards (jsc#SLE-4797).
- i40e: add tracking of AF_XDP ZC state for each queue pair (jsc#SLE-4797).
- i40e: change behavior on PF in response to MDD event (jsc#SLE-4797).
- i40e: Change unmatched function types (jsc#SLE-4797).
- i40e: Changed maximum supported FW API version to 1.8 (jsc#SLE-4797).
- i40e: check queue pairs num in config queues handler (jsc#SLE-4797).
- i40e: clean up several indentation issues (jsc#SLE-4797).
- i40e: do not allow changes to HW VLAN stripping on active port VLANs (jsc#SLE-4797).
- i40e: Fix for 10G ports LED not blinking (jsc#SLE-4797).
- i40e: Fix for allowing too many MDD events on VF (jsc#SLE-4797).
- i40e: fix i40e_ptp_adjtime when given a negative delta (jsc#SLE-4797).
- i40e: Fix misleading error message (jsc#SLE-4797).
- i40e: fix misleading message about promisc setting on un-trusted VF (jsc#SLE-4797).
- i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c (jsc#SLE-4797).
- i40e: Fix the typo in adding 40GE KR4 mode (jsc#SLE-4797).
- i40e: Further implementation of LLDP (jsc#SLE-4797).
- i40e: Implement DDP support in i40e driver (jsc#SLE-4797).
- i40e: increase indentation (jsc#SLE-4797).
- i40e: Introduce recovery mode support (jsc#SLE-4797).
- i40e: Limiting RSS queues to CPUs (jsc#SLE-4797).
- i40e: Memory leak in i40e_config_iwarp_qvlist (jsc#SLE-4797).
- i40e: missing input validation on VF message handling by the PF (jsc#SLE-4797).
- i40e: move i40e_xsk_umem function (jsc#SLE-4797).
- i40e: print pci vendor and device ID during probe (jsc#SLE-4797).
- i40e: Queues are reserved despite 'Invalid argument' error (jsc#SLE-4797).
- i40e: remove debugfs tx_timeout support (jsc#SLE-4797).
- i40e: remove error msg when vf with port vlan tries to remove vlan 0 (jsc#SLE-4797).
- i40e: Remove misleading messages for untrusted VF (jsc#SLE-4797).
- i40e: remove out-of-range comparisons in i40e_validate_cloud_filter (jsc#SLE-4797).
- i40e: Remove umem from VSI (jsc#SLE-4797).
- i40e: Report advertised link modes on 40GBase_LR4, CR4 and fibre (jsc#SLE-4797).
- i40e: Report advertised link modes on 40GBASE_SR4 (jsc#SLE-4797).
- i40e: Revert ShadowRAM checksum calculation change (jsc#SLE-4797).
- i40e: save PTP time before a device reset (jsc#SLE-4797).
- i40e: Setting VF to VLAN 0 requires restart (jsc#SLE-4797).
- i40e: ShadowRAM checksum calculation change (jsc#SLE-4797).
- i40e: The driver now prints the API version in error message (jsc#SLE-4797).
- i40e: Use struct_size() in kzalloc() (jsc#SLE-4797).
- i40e: VF's promiscuous attribute is not kept (jsc#SLE-4797).
- i40e: Wrong truncation from u16 to u8 (jsc#SLE-4797).
- i40iw: Avoid panic when handling the inetdev event (jsc#SLE-4793).
- i40iw: remove support for ib_get_vector_affinity (jsc#SLE-4793).
- i40iw: remove use of VLAN_TAG_PRESENT (jsc#SLE-4793).
- ib/hfi1: Add debugfs to control expansion ROM write protect (jsc#SLE-4925).
- ib/hfi1: Add selected Rcv counters (jsc#SLE-4925).
- ib/hfi1: Close VNIC sdma_progress sleep window (jsc#SLE-4925).
- ib/hfi1: Consider LMC in 16B/bypass ingress packet check (jsc#SLE-4925).
- ib/hfi1: Correctly process FECN and BECN in packets (jsc#SLE-4925).
- ib/hfi1: Dump pio info for non-user send contexts (jsc#SLE-4925).
- ib/hfi1: Eliminate opcode tests on mr deref (jsc#SLE-4925).
- ib/hfi1: Failed to drain send queue when QP is put into error state (jsc#SLE-4925).
- ib/hfi1: Fix the allocation of RSM table (jsc#SLE-4925).
- ib/hfi1: Fix two format strings (jsc#SLE-4925).
- ib/hfi1: Fix WQ_MEM_RECLAIM warning (jsc#SLE-4925).
- ib/hfi1: Ignore LNI errors before DC8051 transitions to Polling state (jsc#SLE-4925).
- ib/hfi1: Incorrect sizing of sge for PIO will OOPs (jsc#SLE-4925).
- ib/hfi1: Limit VNIC use of SDMA engines to the available count (jsc#SLE-4925).
- ib/hfi1: Reduce lock contention on iowait_lock for sdma and pio (jsc#SLE-4925).
- ib/hfi1: Remove overly conservative VM_EXEC flag check (jsc#SLE-4925).
- ib/hfi1: Remove WARN_ON when freeing expected receive groups (jsc#SLE-4925).
- ib/hfi1: Unreserve a reserved request when it is completed (jsc#SLE-4925).
- ib/hw: Remove unneeded semicolons (bsc#1136456 jsc#SLE-4689).
- ib/rdmavt: Add wc_flags and wc_immdata to cq entry trace (jsc#SLE-4925).
- ib/rdmavt: Fix frwr memory registration (jsc#SLE-4925).
- ib/rdmavt: Fix loopback send with invalidate ordering (jsc#SLE-4925).
- ib/{rdmavt, hfi1): Miscellaneous comment fixes (jsc#SLE-4925).
- ibmvnic: Add device identification to requested IRQs (bsc#1137739).
- ibmvnic: Do not close unopened driver during reset (bsc#1137752).
- ibmvnic: Enable GRO (bsc#1132227).
- ibmvnic: Fix completion structure initialization (bsc#1131659).
- ibmvnic: Fix netdev feature clobbering during a reset (bsc#1132227).
- ibmvnic: Fix unchecked return codes of memory allocations (bsc#1137752).
- ibmvnic: Refresh device multicast list after reset (bsc#1137752).
- ibmvnic: remove set but not used variable 'netdev' (bsc#1137739).
- ice : Ensure only valid bits are set in ice_aq_set_phy_cfg (jsc#SLE-4803).
- ice: Add 52 byte RSS hash key support (jsc#SLE-4803).
- ice: add and use new ice_for_each_traffic_class() macro (jsc#SLE-4803).
- ice: Add code for DCB initialization part 1/4 (jsc#SLE-4803).
- ice: Add code for DCB initialization part 2/4 (jsc#SLE-4803).
- ice: Add code for DCB initialization part 3/4 (jsc#SLE-4803).
- ice: Add code for DCB initialization part 4/4 (jsc#SLE-4803).
- ice: Add code for DCB rebuild (jsc#SLE-4803).
- ice: Add code to control FW LLDP and DCBX (jsc#SLE-4803).
- ice: Add code to get DCB related statistics (jsc#SLE-4803).
- ice: Add code to process LLDP Mib change events (jsc#SLE-4803).
- ice: add const qualifier to mac_addr parameter (jsc#SLE-4803).
- ice: Add ethtool private flag to make forcing link down optional (jsc#SLE-4803).
- ice: Add ethtool set_phys_id handler (jsc#SLE-4803).
- ice: Add function to program ethertype based filter rule on VSIs (jsc#SLE-4803).
- ice: Add missing case in print_link_msg for printing flow control (jsc#SLE-4803).
- ice: Add missing PHY type to link settings (jsc#SLE-4803).
- ice: Add more validation in ice_vc_cfg_irq_map_msg (jsc#SLE-4803).
- ice: Add priority information into VLAN header (jsc#SLE-4803).
- ice: Add reg_idx variable in ice_q_vector structure (jsc#SLE-4803).
- ice: Add support for adaptive interrupt moderation (jsc#SLE-4803).
- ice: Add support for new PHY types (jsc#SLE-4803).
- ice: Add support for PF/VF promiscuous mode (jsc#SLE-4803).
- ice: Allow for software timestamping (jsc#SLE-4803).
- ice: Always free/allocate q_vectors (jsc#SLE-4803).
- ice: Audit hotpath structures with pahole (jsc#SLE-4803).
- ice: avoid multiple unnecessary de-references in probe (jsc#SLE-4803).
- ice: Bump driver version (jsc#SLE-4803).
- ice: Bump version (jsc#SLE-4803).
- ice: Calculate ITR increment based on direct calculation (jsc#SLE-4803).
- ice: change VF VSI tc info along with num_queues (jsc#SLE-4803).
- ice: check for a leaf node presence (jsc#SLE-4803).
- ice: clear VF ARQLEN register on reset (jsc#SLE-4803).
- ice: code cleanup in ice_sched.c (jsc#SLE-4803).
- ice: configure GLINT_ITR to always have an ITR gran of 2 (jsc#SLE-4803).
- ice: Configure RSS LUT and HASH KEY in rebuild path (jsc#SLE-4803).
- ice: Create a generic name for the ice_rx_flg64_bits structure (jsc#SLE-4803).
- ice: Create framework for VSI queue context (jsc#SLE-4803).
- ice: Determine descriptor count and ring size based on PAGE_SIZE (jsc#SLE-4803).
- ice: Disable sniffing VF traffic on PF (jsc#SLE-4803).
- ice: Do not bail out when filter already exists (jsc#SLE-4803).
- ice: Do not let VF know that it is untrusted (jsc#SLE-4803).
- ice: Do not remove VLAN filters that were never programmed (jsc#SLE-4803).
- ice: Do not set LB_EN for prune switch rules (jsc#SLE-4803).
- ice: do not spam VFs with link messages (jsc#SLE-4803).
- ice: Do not unnecessarily initialize local variable (jsc#SLE-4803).
- ice: Enable LAN_EN for the right recipes (jsc#SLE-4803).
- ice: Enable link events over the ARQ (jsc#SLE-4803).
- ice: Enable MAC anti-spoof by default (jsc#SLE-4803).
- ice: enable VF admin queue interrupts (jsc#SLE-4803).
- ice: Fix added in VSI supported nodes calc (jsc#SLE-4803).
- ice: Fix broadcast traffic in port VLAN mode (jsc#SLE-4803).
- ice: Fix for adaptive interrupt moderation (jsc#SLE-4803).
- ice: Fix for allowing too many MDD events on VF (jsc#SLE-4803).
- ice: Fix for FC get rx/tx pause params (jsc#SLE-4803).
- ice: fix ice_remove_rule_internal vsi_list handling (jsc#SLE-4803).
- ice: Fix incorrect use of abbreviations (jsc#SLE-4803).
- ice: Fix issue reclaiming resources back to the pool after reset (jsc#SLE-4803).
- ice: Fix issue reconfiguring VF queues (jsc#SLE-4803).
- ice: Fix issue when adding more than allowed VLANs (jsc#SLE-4803).
- ice: fix issue where host reboots on unload when iommu=on (jsc#SLE-4803).
- ice: Fix issue with VF reset and multiple VFs support on PFs (jsc#SLE-4803).
- ice: fix numeric overflow warning (jsc#SLE-4803).
- ice: fix some function prototype and signature style issues (jsc#SLE-4803).
- ice: fix stack hogs from struct ice_vsi_ctx structures (jsc#SLE-4803).
- ice: fix static analysis warnings (jsc#SLE-4803).
- ice: Fix the calculation of ICE_MAX_MTU (jsc#SLE-4803).
- ice: fix the divide by zero issue (jsc#SLE-4803).
- ice: Fix typos in code comments (jsc#SLE-4803).
- ice: flush Tx pipe on disable queue timeout (jsc#SLE-4803).
- ice: Gather the rx buf clean-up logic for better reuse (jsc#SLE-4803).
- ice: Get resources per function (jsc#SLE-4803).
- ice: Get rid of ice_pull_tail (jsc#SLE-4803).
- ice: Get VF VSI instances directly via PF (jsc#SLE-4803).
- ice: Implement flow to reset VFs with PFR and other resets (jsc#SLE-4803).
- ice: Implement getting and setting ethtool coalesce (jsc#SLE-4803).
- ice: Implement pci_error_handler ops (jsc#SLE-4803).
- ice: Implement support for normal get_eeprom[_len] ethtool ops (jsc#SLE-4803).
- ice: Limit the ice_add_rx_frag to frag addition (jsc#SLE-4803).
- ice: map Rx buffer pages with DMA attributes (jsc#SLE-4803).
- ice: Move aggregator list into ice_hw instance (jsc#SLE-4803).
- ice: Offload SCTP checksum (jsc#SLE-4803).
- ice: only use the VF for ICE_VSI_VF in ice_vsi_release (jsc#SLE-4803).
- ice: Preserve VLAN Rx stripping settings (jsc#SLE-4803).
- ice: Prevent unintended multiple chain resets (jsc#SLE-4803).
- ice: Pull out page reuse checks onto separate function (jsc#SLE-4803).
- ice: Put __ICE_PREPARED_FOR_RESET check in ice_prepare_for_reset (jsc#SLE-4803).
- ice: Reduce scope of variable in ice_vsi_cfg_rxqs (jsc#SLE-4803).
- ice: Refactor a few Tx scheduler functions (jsc#SLE-4803).
- ice: Refactor getting/setting coalesce (jsc#SLE-4803).
- ice: Refactor link event flow (jsc#SLE-4803).
- ice: Remove '2 BITS' comment (jsc#SLE-4803).
- ice: Remove __always_unused attribute (jsc#SLE-4803).
- ice: remove redundant variable and if condition (jsc#SLE-4803).
- ice: Remove runtime change of PFINT_OICR_ENA register (jsc#SLE-4803).
- ice: Remove unnecessary braces (jsc#SLE-4803).
- ice: Remove unnecessary newlines from log messages (jsc#SLE-4803).
- ice: Remove unnecessary wait when disabling/enabling Rx queues (jsc#SLE-4803).
- ice: Remove unused function prototype (jsc#SLE-4803).
- ice: Remove unused function prototype (jsc#SLE-4803).
- ice: Remove unused vsi_id field (jsc#SLE-4803).
- ice: Reset all VFs with VFLR during SR-IOV init flow (jsc#SLE-4803).
- ice: Resolve static analysis reported issue (jsc#SLE-4803).
- ice: Restore VLAN switch rule if port VLAN existed before (jsc#SLE-4803).
- ice: Retrieve rx_buf in separate function (jsc#SLE-4803).
- ice: Return configuration error without queue to disable (jsc#SLE-4803).
- ice: Rework queue management code for reuse (jsc#SLE-4803).
- ice: Separate if conditions for ice_set_features() (jsc#SLE-4803).
- ice: Set LAN_EN for all directional rules (jsc#SLE-4803).
- ice: Set physical link up/down when an interface is set up/down (jsc#SLE-4803).
- ice: sizeof(type&gt;) should be avoided (jsc#SLE-4803).
- ice: Suppress false-positive style issues reported by static analyzer (jsc#SLE-4803).
- ice: use absolute vector ID for VFs (jsc#SLE-4803).
- ice: Use bitfields where possible (jsc#SLE-4803).
- ice: Use dev_err when ice_cfg_vsi_lan fails (jsc#SLE-4803).
- ice: Use ice_for_each_q_vector macro where possible (jsc#SLE-4803).
- ice: use ice_for_each_vsi macro when possible (jsc#SLE-4803).
- ice: use irq_num var in ice_vsi_req_irq_msix (jsc#SLE-4803).
- ice: Use more efficient structures (jsc#SLE-4803).
- ice: Use pf instead of vsi-back (jsc#SLE-4803).
- ice: use virt channel status codes (jsc#SLE-4803).
- ice: Validate ring existence and its q_vector per VSI (jsc#SLE-4803).
- igb: Bump version number (jsc#SLE-4798).
- igb: Exclude device from suspend direct complete optimization (jsc#SLE-4798).
- igb: fix various indentation issues (jsc#SLE-4798).
- igb: Fix WARN_ONCE on runtime suspend (jsc#SLE-4798).
- igb: use struct_size() helper (jsc#SLE-4798).
- igc: Add ethtool support (jsc#SLE-4799).
- igc: Add multiple receive queues control supporting (jsc#SLE-4799).
- igc: Add support for statistics (jsc#SLE-4799).
- igc: Add support for the ntuple feature (jsc#SLE-4799).
- igc: Extend the ethtool supporting (jsc#SLE-4799).
- igc: Fix code redundancy (jsc#SLE-4799).
- igc: Fix the typo in igc_base.h header definition (jsc#SLE-4799).
- igc: Remove the 'igc_get_phy_id_base' method (jsc#SLE-4799).
- igc: Remove the 'igc_read_mac_addr_base' method (jsc#SLE-4799).
- igc: Remove unneeded code (jsc#SLE-4799).
- igc: Remove unneeded hw_dbg prints (jsc#SLE-4799).
- igc: Remove unreachable code from igc_phy.c file (jsc#SLE-4799).
- igc: Remove unused code (jsc#SLE-4799).
- igc: Use struct_size() helper (jsc#SLE-4799).
- igmp: fix incorrect unsolicit report count when join group (git-fixes).
- iio/gyro/bmg160: Use millidegrees for temperature scale (bsc#1051510).
- iio: ad_sigma_delta: select channel when reading register (bsc#1051510).
- iio: adc: at91: disable adc channel interrupt in timeout case (bsc#1051510).
- iio: adc: fix warning in Qualcomm PM8xxx HK/XOADC driver (bsc#1051510).
- iio: adc: xilinx: fix potential use-after-free on remove (bsc#1051510).
- iio: core: fix a possible circular locking dependency (bsc#1051510).
- iio: cros_ec: Fix the maths for gyro scale calculation (bsc#1051510).
- iio: dac: mcp4725: add missing powerdown bits in store eeprom (bsc#1051510).
- iio: Fix scan mask selection (bsc#1051510).
- iio: gyro: mpu3050: fix chip ID reading (bsc#1051510).
- include/linux/bitops.h: introduce BITS_PER_TYPE (bsc#1136345 jsc#SLE-4681).
- indirect call wrappers: helpers to speed-up indirect calls of builtin (bsc#1124503).
- inetpeer: fix uninit-value in inet_getpeer (git-fixes).
- infiniband/qedr: Potential null ptr dereference of qp (bsc#1136456 jsc#SLE-4689).
- infiniband: hfi1: drop crazy DEBUGFS_SEQ_FILE_CREATE() macro (jsc#SLE-4925).
- infiniband: hfi1: no need to check return value of debugfs_create functions (jsc#SLE-4925).
- input: elan_i2c - add hardware ID for multiple Lenovo laptops (bsc#1051510).
- input: introduce KEY_ASSISTANT (bsc#1051510).
- input: snvs_pwrkey - initialize necessary driver data before enabling IRQ (bsc#1051510).
- input: synaptics-rmi4 - fix possible double free (bsc#1051510).
- input: synaptics-rmi4 - write config register values to the right offset (bsc#1051510).
- intel: correct return from set features callback (jsc#SLE-4795).
- intel_idle: add support for Jacobsville (jsc#SLE-5394).
- intel_th: msu: Fix single mode with IOMMU (bsc#1051510).
- intel_th: pci: Add Comet Lake support (bsc#1051510).
- io: accel: kxcjk1013: restore the range after resume (bsc#1051510).
- iommu/amd: Set exclusion range correctly (bsc#1130425).
- iommu/arm-smmu-v3: Abort all transactions if SMMU is enabled in kdump kernel (bsc#1117158).
- iommu/arm-smmu-v3: Do not disable SMMU in kdump kernel (bsc#1117158 bsc#1134671).
- iommu/vt-d: Do not request page request irq under dmar_global_lock (bsc#1135006).
- iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU (bsc#1135007).
- iommu/vt-d: Set intel_iommu_gfx_mapped correctly (bsc#1135008).
- ip6_tunnel: collect_md xmit: Use ip_tunnel_key's provided src address (git-fixes).
- ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type (networking-stable-19_04_10).
- ip_gre: fix parsing gre header in ipgre_err (git-fixes).
- ip_tunnel: Fix name string concatenate in __ip_tunnel_create() (git-fixes).
- ipconfig: Correctly initialise ic_nameservers (bsc#1051510).
- ipmi: Fix I2C client removal in the SSIF driver (bsc#1108193).
- ipmi: fix sleep-in-atomic in free_user at cleanup SRCU user-&gt;release_barrier (bsc#1111666).
- ipmi: Prevent use-after-free in deliver_response (bsc#1111666).
- ipmi:ssif: compare block number correctly for multi-part return messages (bsc#1051510).
- ipmi_ssif: Remove duplicate NULL check (bsc#1108193).
- ipv4: add sanity checks in ipv4_link_failure() (git-fixes).
- ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled (git-fixes).
- ipv4: ensure rcu_read_lock() in ipv4_link_failure() (networking-stable-19_04_19).
- ipv4: ip_do_fragment: Preserve skb_iif during fragmentation (networking-stable-19_05_04).
- ipv4: recompile ip options in ipv4_link_failure (networking-stable-19_04_19).
- ipv4: Return error for RTA_VIA attribute (networking-stable-19_03_07).
- ipv4: set the tcp_min_rtt_wlen range from 0 to one day (networking-stable-19_04_30).
- ipv6/flowlabel: wait rcu grace period before put_pid() (git-fixes).
- ipv6: fix cleanup ordering for ip6_mr failure (git-fixes).
- ipv6: fix cleanup ordering for pingv6 registration (git-fixes).
- ipv6: Fix dangling pointer when ipv6 fragment (git-fixes).
- ipv6: invert flowlabel sharing check in process and user mode (git-fixes).
- ipv6: mcast: fix unsolicited report interval after receiving querys (git-fixes).
- ipv6: propagate genlmsg_reply return code (networking-stable-19_02_24).
- ipv6: Return error for RTA_VIA attribute (networking-stable-19_03_07).
- ipv6: sit: reset ip header pointer in ipip6_rcv (git-fixes).
- ipvlan: Add the skb-&gt;mark as flow4's member to lookup route (bsc#1051510).
- ipvlan: disallow userns cap_net_admin to change global mode/flags (networking-stable-19_03_15).
- ipvlan: fix ipv6 outbound device (bsc#1051510).
- ipvlan: use ETH_MAX_MTU as max mtu (bsc#1051510).
- ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf (git-fixes).
- ipvs: fix buffer overflow with sync daemon and service (git-fixes).
- ipvs: fix check on xmit to non-local addresses (git-fixes).
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest() (bsc#1051510).
- ipvs: fix rtnl_lock lockups caused by start_sync_thread (git-fixes).
- ipvs: Fix signed integer overflow when setsockopt timeout (bsc#1051510).
- ipvs: fix stats update from local clients (git-fixes).
- ipvs: remove IPS_NAT_MASK check to fix passive FTP (git-fixes).
- iw_cxgb*: kzalloc the iwcm verbs struct (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: Check for send WR also while posting write with completion WR (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: complete the cached SRQ buffers (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: cq/qp mask depends on bar2 pages in a host page (bsc#1127371).
- iw_cxgb4: Fix qpid leak (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: fix srqidx leak during connection abort (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: Make function read_tcb() static (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: only allow 1 flush on user qps (bsc#1051510).
- iw_cxgb4: use listening ep tos when accepting new connections (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: use tos when finding ipv6 routes (bsc#1136348 jsc#SLE-4684).
- iw_cxgb4: use tos when importing the endpoint (bsc#1136348 jsc#SLE-4684).
- iwiwifi: fix bad monitor buffer register addresses (bsc#1129770).
- iwlwifi: fix driver operation for 5350 (bsc#1111666).
- iwlwifi: fix send hcmd timeout recovery flow (bsc#1129770).
- ixgbe: fix mdio bus registration (jsc#SLE-4795).
- ixgbe: fix older devices that do not support IXGBE_MRQC_L3L4TXSWEN (jsc#SLE-4795).
- ixgbe: register a mdiobus (jsc#SLE-4795).
- ixgbe: remove magic constant in ixgbe_reset_hw_82599() (jsc#SLE-4795).
- ixgbe: use mii_bus to handle MII related ioctls (jsc#SLE-4795).
- ixgbe: Use struct_size() helper (jsc#SLE-4795).
- jbd2: check superblock mapped prior to committing (bsc#1136430).
- kabi i40e ignore include (jsc#SLE-4797).
- kabi protect struct iw_cm_id (bsc#1136348 jsc#SLE-4684).
- kabi protect struct vf_info (bsc#1136347 jsc#SLE-4683).
- kABI workaround for removed usb_interface.pm_usage_cnt field (bsc#1051510).
- kABI workaround for snd_seq_kernel_client_enqueue() API changes (bsc#1051510).
- kabi/severities: exclude hns3 symbols (bsc#1134948)
- kabi/severities: exclude qed* symbols (bsc#1136461)
- kabi/severities: missed hns roce module
- kabi: arm64: cpuhotplug: Reuse other arch's cpuhp_state ().
- kabi: drop LINUX_Mib_TCPWQUEUETOOBIG snmp counter (bsc#1137586).
- kabi: implement map_lookup_elem_sys_only in another way (bsc#1083647).
- kabi: move sysctl_tcp_min_snd_mss to preserve struct net layout (bsc#1137586).
- kABI: protect dma-mapping.h include (kabi).
- kABI: protect functions using struct net_generic (bsc#1129845 LTC#176252).
- kABI: protect ip_options_rcv_srr (kabi).
- kABI: protect struct mlx5_td (kabi).
- kABI: protect struct pci_dev (kabi).
- kABI: protect struct smc_ib_device (bsc#1129845 LTC#176252).
- kABI: protect struct smcd_dev (bsc#1129845 LTC#176252).
- kABI: restore icmp_send (kabi).
- kbuild: strip whitespace in cmd_record_mcount findstring (bsc#1065729).
- kcm: switch order of device registration to fix a crash (bnc#1130527).
- kernel/signal.c: trace_signal_deliver when signal_group_exit (git-fixes).
- kernel/sys.c: prctl: fix false positive in validate_prctl_map() (git-fixes).
- kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv (bsc#1051510).
- kernel/sysctl.c: fix out-of-bounds access when setting file-max (bsc#1051510).
- kernfs: do not set dentry-&gt;d_fsdata (boo#1133115).
- keys: always initialize keyring_index_key::desc_len (bsc#1051510).
- keys: safe concurrent user-&gt;{session,uid}_keyring access (bsc#1135642).
- keys: user: Align the payload buffer (bsc#1051510).
- kmsg: Update message catalog to latest ibM level (2019/03/08) (bsc#1128904 LTC#176078).
- kvm: Call kvm_arch_memslots_updated() before updating memslots (bsc#1132563).
- kvm: Fix kABI for AMD SMAP Errata workaround (bsc#1133149).
- kvm: Fix UAF in nested posted interrupt processing (bsc#1134199).
- kvm: nVMX: Apply addr size mask to effective address for VMX instructions (bsc#1132561).
- kvm: nVMX: Clear reserved bits of #DB exit qualification (bsc#1134200).
- kvm: nVMX: Ignore limit checks on VMX instructions using flat segments (bsc#1132564).
- kvm: nVMX: restore host state in nested_vmx_vmexit for VMFail (bsc#1134201).
- kvm: nVMX: Sign extend displacements of VMX instr's mem operands (bsc#1132562).
- kvm: PPC: Book3S HV: Fix race between kvm_unmap_hva_range and MMU mode switch (bsc#1061840).
- kvm: s390: fix memory overwrites when not using SCA entries (bsc#1136206).
- kvm: s390: provide io interrupt kvm_stat (bsc#1136206).
- kvm: s390: use created_vcpus in more places (bsc#1136206).
- kvm: s390: vsie: fix 8k check for the itdba (bsc#1136206).
- kvm: SVM: Workaround errata#1096 (insn_len maybe zero on SMAP violation) (bsc#1133149).
- kvm: VMX: Compare only a single byte for VMCS' 'launched' in vCPU-run (bsc#1132555).
- kvm: VMX: Zero out *all* general purpose registers after VM-Exit (bsc#1134202).
- kvm: x86/mmu: Detect MMIO generation wrap in any address space (bsc#1132570).
- kvm: x86/mmu: Do not cache MMIO accesses while memslots are in flux (bsc#1132571).
- kvm: x86: Always use 32-bit SMRAM save state for 32-bit kernels (bsc#1134203).
- kvm: x86: Do not clear EFER during SMM transitions for 32-bit vCPU (bsc#1134204).
- kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (bsc#1114279).
- kvm: x86: Report STibP on GET_SUPPORTED_CPUID (bsc#1111331).
- kvm: x86: svm: make sure NMI is injected after nmi_singlestep (bsc#1134205).
- l2tp: cleanup l2tp_tunnel_delete calls (bsc#1051510).
- l2tp: filter out non-PPP sessions in pppol2tp_tunnel_ioctl() (git-fixes).
- l2tp: fix missing refcount drop in pppol2tp_tunnel_ioctl() (git-fixes).
- l2tp: only accept PPP sessions in pppol2tp_connect() (git-fixes).
- l2tp: prevent pppol2tp_connect() from creating kernel sockets (git-fixes).
- l2tp: revert 'l2tp: fix missing print session offset info' (bsc#1051510).
- leds: avoid races with workqueue (bsc#1051510).
- leds: pwm: silently error out on EPROBE_DEFER (bsc#1051510).
- lib: add crc64 calculation routines (bsc#1130972).
- lib: do not depend on linux headers being installed (bsc#1130972).
- libata: fix using DMA buffers on stack (bsc#1051510).
- libcxgb: fix incorrect ppmax calculation (bsc#1136345 jsc#SLE-4681).
- lightnvm: if LUNs are already allocated fix return (bsc#1085535).
- linux/kernel.h: Use parentheses around argument in u64_to_user_ptr() (bsc#1051510).
- livepatch: Convert error about unsupported reliable stacktrace into a warning (bsc#1071995).
- livepatch: Remove custom kobject state handling (bsc#1071995).
- livepatch: Remove duplicated code for early initialization (bsc#1071995).
- lpfc: validate command in lpfc_sli4_scmd_to_wqidx_distr() (bsc#1129138).
- mac80211: do not attempt to rename ERR_PTR() debugfs dirs (bsc#1111666).
- mac80211: do not call driver wake_tx_queue op during reconfig (bsc#1051510).
- mac80211: fix memory accounting with A-MSDU aggregation (bsc#1051510).
- mac80211: fix unaligned access in mesh table hash function (bsc#1051510).
- mac80211: Honor SW_CRYPTO_CONTROL for unicast keys in AP VLAN mode (bsc#1111666).
- mac8390: Fix mmio access size probe (bsc#1051510).
- md/raid1: do not clear bitmap bits on interrupted recovery (git-fixes).
- md/raid5: fix 'out of memory' during raid cache recovery (git-fixes).
- md: batch flush requests (bsc#1119680).
- md: Fix failed allocation of md_register_thread (git-fixes).
- md: fix invalid stored role for a disk (bsc#1051510).
- media: atmel: atmel-isc: fix INIT_WORK misplacement (bsc#1051510).
- media: cx18: update *pos correctly in cx18_read_pos() (bsc#1051510).
- media: cx23885: check allocation return (bsc#1051510).
- media: davinci-isif: avoid uninitialized variable use (bsc#1051510).
- media: davinci/vpbe: array underflow in vpbe_enum_outputs() (bsc#1051510).
- media: ivtv: update *pos correctly in ivtv_read_pos() (bsc#1051510).
- media: mt9m111: set initial frame size other than 0x0 (bsc#1051510).
- media: mtk-jpeg: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: mx2_emmaprp: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: omap_vout: potential buffer overflow in vidioc_dqbuf() (bsc#1051510).
- media: ov2659: fix unbalanced mutex_lock/unlock (bsc#1051510).
- media: pvrusb2: Prevent a buffer overflow (bsc#1129770).
- media: s5p-g2d: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: s5p-jpeg: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: serial_ir: Fix use-after-free in serial_ir_init_module (bsc#1051510).
- media: sh_veu: Correct return type for mem2mem buffer helpers (bsc#1051510).
- media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame (bsc#1051510).
- media: vivid: use vfree() instead of kfree() for dev-&gt;bitmap_cap (bsc#1051510).
- media: wl128x: Fix an error code in fm_download_firmware() (bsc#1051510).
- media: wl128x: prevent two potential buffer overflows (bsc#1051510).
- memcg: make it work on sparse non-0-node systems (bnc#1133616).
- memcg: make it work on sparse non-0-node systems kabi (bnc#1133616).
- mISDN: Check address length before reading address family (bsc#1051510).
- missing barriers in some of unix_sock -&gt;addr and -&gt;path accesses (networking-stable-19_03_15).
- mlxsw: spectrum: Fix autoneg status in ethtool (networking-stable-19_04_30).
- mm/debug.c: fix __dump_page when mapping-&gt;host is not set (bsc#1131934).
- mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned addresses (bsc#1135330).
- mm/page_isolation.c: fix a wrong flag in set_migratetype_isolate() (bsc#1131935).
- mm/vmalloc: fix size check for remap_vmalloc_range_partial() (bsc#1133825).
- mm: create non-atomic version of SetPageReserved for init use (jsc#SLE-6647).
- mm: Fix buggy backport leading to MAP_SYNC failures (bsc#1137372)
- mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (bnc#1012382).
- mmc: bcm2835 MMC issues (bsc#1070872).
- mmc: block: Delete gendisk before cleaning up the request queue (bsc#1127616).
- mmc: core: fix possible use after free of host (bsc#1051510).
- mmc: core: Fix tag set memory leak (bsc#1111666).
- mmc: davinci: remove extraneous __init annotation (bsc#1051510).
- mmc: sdhci: Fix data command CRC error handling (bsc#1051510).
- mmc: sdhci: Handle auto-command errors (bsc#1051510).
- mmc: sdhci: Rename SDHCI_ACMD12_ERR and SDHCI_INT_ACMD12ERR (bsc#1051510).
- mmc: tmio_mmc_core: do not claim spurious interrupts (bsc#1051510).
- mount: copy the port field into the cloned nfs_server structure (bsc#1136990).
- mpls: Return error for RTA_GATEWAY attribute (networking-stable-19_03_07).
- mt7601u: bump supported EEPROM version (bsc#1051510).
- mtd: docg3: fix a possible memory leak of mtd-&gt;name (bsc#1051510).
- mtd: docg3: Fix passing zero to 'PTR_ERR' warning in doc_probe_device (bsc#1051510).
- mtd: nand: omap: Fix comment in platform data using wrong Kconfig symbol (bsc#1051510).
- mtd: part: fix incorrect format specifier for an unsigned long long (bsc#1051510).
- mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write (bsc#1129770).
- mwifiex: do not advertise ibSS features without FW support (bsc#1129770).
- mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (bsc#1136935).
- mwifiex: Fix mem leak in mwifiex_tm_cmd (bsc#1051510).
- mwifiex: Fix possible buffer overflows at parsing bss descriptor
- mwifiex: Make resume actually do something useful again on SDIO cards (bsc#1111666).
- mwifiex: prevent an array overflow (bsc#1051510).
- mwl8k: Fix rate_idx underflow (bsc#1051510).
- neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit (git-fixes).
- net-gro: Fix GRO flush when receiving a GSO packet (networking-stable-19_04_10).
- net/hsr: fix possible crash in add_timer() (networking-stable-19_03_15).
- net/ibmvnic: Remove tests of member address (bsc#1137739).
- net/ibmvnic: Update carrier state after link state change (bsc#1135100).
- net/ibmvnic: Update MAC address settings after adapter reset (bsc#1134760).
- net/ipv4: defensive cipso option parsing (git-fixes).
- net/ipv6: do not reinitialize ndev-&gt;cnf.addr_gen_mode on new inet6_dev (git-fixes).
- net/ipv6: fix addrconf_sysctl_addr_gen_mode (git-fixes).
- net/ipv6: propagate net.ipv6.conf.all.addr_gen_mode to devices (git-fixes).
- net/ipv6: reserve room for IFLA_INET6_ADDR_GEN_MODE (git-fixes).
- net/mlx5: Decrease default mr cache size (networking-stable-19_04_10).
- net/mlx5e: Add a lock on tir list (networking-stable-19_04_10).
- net/mlx5e: Do not overwrite pedit action when multiple pedit used (networking-stable-19_02_24).
- net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query (networking-stable-19_04_30).
- net/mlx5e: Fix error handling when refreshing TIRs (networking-stable-19_04_10).
- net/mlx5e: Fix trailing semicolon (bsc#1075020).
- net/mlx5e: IPoib, Reset QP after channels are closed (bsc#1075020).
- net/packet: fix 4gb buffer limit due to overflow check (networking-stable-19_02_24).
- net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec (git-fixes).
- net/rose: fix unbound loop in rose_loopback_timer() (networking-stable-19_04_30).
- net/sched: act_sample: fix divide by zero in the traffic path (networking-stable-19_04_10).
- net/sched: do not dereference a-&gt;goto_chain to read the chain index (bsc#1064802 bsc#1066129).
- net/sched: fix -&gt;get helper of the matchall cls (networking-stable-19_04_10).
- net/smc: add pnet table namespace support (bsc#1129845 LTC#176252).
- net/smc: add smcd support to the pnet table (bsc#1129845 LTC#176252).
- net/smc: allow pci IDs as ib device names in the pnet table (bsc#1129845 LTC#176252).
- net/smc: allow pnetid-less configuration (bsc#1129845 LTC#176252).
- net/smc: check for ip prefix and subnet (bsc#1134607 LTC#177518).
- net/smc: cleanup for smcr_tx_sndbuf_nonempty (bsc#1129845 LTC#176252).
- net/smc: cleanup of get vlan id (bsc#1134607 LTC#177518).
- net/smc: code cleanup smc_listen_work (bsc#1134607 LTC#177518).
- net/smc: consolidate function parameters (bsc#1134607 LTC#177518).
- net/smc: fallback to TCP after connect problems (bsc#1134607 LTC#177518).
- net/smc: fix a NULL pointer dereference (bsc#1134607 LTC#177518).
- net/smc: fix return code from FLUSH command (bsc#1134607 LTC#177518).
- net/smc: improve smc_conn_create reason codes (bsc#1134607 LTC#177518).
- net/smc: improve smc_listen_work reason codes (bsc#1134607 LTC#177518).
- net/smc: move unhash before release of clcsock (bsc#1134607 LTC#177518).
- net/smc: nonblocking connect rework (bsc#1134607 LTC#177518).
- net/smc: propagate file from SMC to TCP socket (bsc#1134607 LTC#177518).
- net/smc: rework pnet table (bsc#1129845 LTC#176252).
- net/smc: wait for pending work before clcsock release_sock (bsc#1134607 LTC#177518).
- net/tls: free ctx in sock destruct (bsc#1136353 jsc#SLE-4688).
- net/x25: fix a race in x25_bind() (networking-stable-19_03_15).
- net/x25: fix use-after-free in x25_device_event() (networking-stable-19_03_15).
- net/x25: reset state in x25_connect() (networking-stable-19_03_15).
- net: Add __icmp_send helper (networking-stable-19_03_07).
- net: Add header for usage of fls64() (networking-stable-19_02_20).
- net: aquantia: fix rx checksum offload for UDP/TCP over IPv6 (networking-stable-19_03_28).
- net: atm: Fix potential Spectre v1 vulnerabilities (networking-stable-19_04_19).
- net: avoid false positives in untrusted gso validation (git-fixes).
- net: avoid skb_warn_bad_offload on IS_ERR (git-fixes).
- net: avoid use IPCB in cipso_v4_error (networking-stable-19_03_07).
- net: bridge: add vlan_tunnel to bridge port policies (git-fixes).
- net: bridge: fix per-port af_packet sockets (git-fixes).
- net: bridge: multicast: use rcu to access port list from br_multicast_start_querier (git-fixes).
- net: chelsio: Add a missing check on cudg_get_buffer (bsc#1136345 jsc#SLE-4681).
- net: cxgb4: fix various indentation issues (bsc#1136345 jsc#SLE-4681).
- net: datagram: fix unbounded loop in __skb_try_recv_datagram() (git-fixes).
- net: Do not allocate page fragments that are not skb aligned (networking-stable-19_02_20).
- net: do not keep lonely packets forever in the gro hash (git-fixes).
- net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc (networking-stable-19_05_04).
- net: dsa: legacy: do not unmask port bitmaps (git-fixes).
- net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT (git-fixes).
- net: dsa: mv88e6xxx: Fix u64 statistics (networking-stable-19_03_07).
- net: ena: fix return value of ena_com_config_llq_info() (bsc#1111696 bsc#1117561).
- net: ethtool: not call vzalloc for zero sized memory request (networking-stable-19_04_10).
- net: Fix a bug in removing queues from XPS map (git-fixes).
- net: Fix for_each_netdev_feature on Big endian (networking-stable-19_02_20).
- net: fix IPv6 prefix route residue (networking-stable-19_02_20).
- net: fix uninit-value in __hw_addr_add_ex() (git-fixes).
- net: Fix untag for vlan packets without ethernet header (git-fixes).
- net: Fix vlan untag for bridge and vlan_dev with reorder_hdr off (git-fixes).
- net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv (networking-stable-19_04_19).
- net: hns3: add counter for times RX pages gets allocated (bsc#1104353 bsc#1134947).
- net: hns3: add error handler for initializing command queue (bsc#1104353 bsc#1135058).
- net: hns3: add function type check for debugfs help information (bsc#1104353 bsc#1134980).
- net: hns3: Add handling of MAC tunnel interruption (bsc#1104353 bsc#1134983).
- net: hns3: add hns3_gro_complete for HW GRO process (bsc#1104353 bsc#1135051).
- net: hns3: add linearizing checking for TSO case (bsc#1104353 bsc#1134947).
- net: hns3: add protect when handling mac addr list (bsc#1104353 ).
- net: hns3: add queue's statistics update to service task (bsc#1104353 bsc#1134981).
- net: hns3: add reset statistics for VF (bsc#1104353 bsc#1134995).
- net: hns3: add reset statistics info for PF (bsc#1104353 bsc#1134995).
- net: hns3: add some debug info for hclgevf_get_mbx_resp() (bsc#1104353 bsc#1134994).
- net: hns3: add some debug information for hclge_check_event_cause (bsc#1104353 bsc#1134994).
- net: hns3: add support for dump ncl config by debugfs (bsc#1104353 bsc#1134987).
- net: hns3: Add support for netif message level settings (bsc#1104353 bsc#1134989).
- net: hns3: adjust the timing of hns3_client_stop when unloading (bsc#1104353 bsc#1137201).
- net: hns3: always assume no drop TC for performance reason (bsc#1104353 bsc#1135049).
- net: hns3: check 1000M half for hns3_ethtool_ops.set_link_ksettings (bsc#1104353 bsc#1137201).
- net: hns3: check resetting status in hns3_get_stats() (bsc#1104353 bsc#1137201).
- net: hns3: code optimization for command queue' spin lock (bsc#1104353 bsc#1135042).
- net: hns3: combine len and checksum handling for inner and outer header (bsc#1104353 bsc#1134947).
- net: hns3: deactive the reset timer when reset successfully (bsc#1104353 bsc#1137201).
- net: hns3: divide shared buffer between TC (bsc#1104353 bsc#1135047).
- net: hns3: do not initialize MDIO bus when PHY is inexistent (bsc#1104353 bsc#1135045).
- net: hns3: do not request reset when hardware resetting (bsc#1104353 bsc#1137201).
- net: hns3: dump more information when tx timeout happens (bsc#1104353 bsc#1134990).
- net: hns3: extend the loopback state acquisition time (bsc#1104353).
- net: hns3: fix data race between ring-&gt;next_to_clean (bsc#1104353 bsc#1134975 bsc#1134945).
- net: hns3: fix error handling for desc filling (bsc#1104353 ).
- net: hns3: fix for HNS3_RXD_GRO_SIZE_M macro (bsc#1104353 bsc#1137201).
- net: hns3: fix for tunnel type handling in hns3_rx_checksum (bsc#1104353 bsc#1134946).
- net: hns3: fix for TX clean num when cleaning TX BD (bsc#1104353 ).
- net: hns3: fix for vport-&gt;bw_limit overflow problem (bsc#1104353 bsc#1134998).
- net: hns3: fix keep_alive_timer not stop problem (bsc#1104353 bsc#1135055).
- net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info() (bsc#1104353 bsc#1134990).
- net: hns3: fix pause configure fail problem (bsc#1104353 bsc#1134951 bsc#1134951).
- net: hns3: fix set port based VLAN for PF (bsc#1104353 bsc#1135053).
- net: hns3: fix set port based VLAN issue for VF (bsc#1104353 bsc#1135053).
- net: hns3: fix sparse: warning when calling hclge_set_vlan_filter_hw() (bsc#1104353 bsc#1134999).
- net: hns3: fix VLAN offload handle for VLAN inserted by port (bsc#1104353 bsc#1135053).
- net: hns3: free the pending skb when clean RX ring (bsc#1104353 bsc#1135044).
- net: hns3: handle pending reset while reset fail (bsc#1104353 bsc#1135058).
- net: hns3: handle the BD info on the last BD of the packet (bsc#1104353 bsc#1134974).
- net: hns3: ignore lower-level new coming reset (bsc#1104353 bsc#1137201).
- net: hns3: Make hclge_destroy_cmd_queue static (bsc#1104353 bsc#1137201).
- net: hns3: Make hclgevf_update_link_mode static (bsc#1104353 bsc#1137201).
- net: hns3: minor optimization for datapath (bsc#1104353 ).
- net: hns3: minor optimization for ring_space (bsc#1104353 ).
- net: hns3: minor refactor for hns3_rx_checksum (bsc#1104353 bsc#1135052).
- net: hns3: modify HNS3_NIC_STATE_INITED flag in hns3_reset_notify_uninit_enet (bsc#1104353).
- net: hns3: modify the VF network port media type acquisition method (bsc#1104353 bsc#1137201).
- net: hns3: modify VLAN initialization to be compatible with port based VLAN (bsc#1104353 bsc#1135053).
- net: hns3: not reset TQP in the DOWN while VF resetting (bsc#1104353 bsc#1134952).
- net: hns3: not reset vport who not alive when PF reset (bsc#1104353 bsc#1137201).
- net: hns3: optimize the barrier using when cleaning TX BD (bsc#1104353 bsc#1134945).
- net: hns3: prevent change MTU when resetting (bsc#1104353 bsc#1137201).
- net: hns3: prevent double free in hns3_put_ring_config() (bsc#1104353 bsc#1134950).
- net: hns3: reduce resources use in kdump kernel (bsc#1104353 bsc#1137201).
- net: hns3: refactor BD filling for l2l3l4 info (bsc#1104353 bsc#1134947).
- net: hns3: refine tx timeout count handle (bsc#1104353 bsc#1134990).
- net: hns3: remove redundant assignment of l2_hdr to itself (bsc#1104353).
- net: hns3: remove reset after command send failed (bsc#1104353 bsc#1134949).
- net: hns3: remove resetting check in hclgevf_reset_task_schedule (bsc#1104353 bsc#1135056).
- net: hns3: return 0 and print warning when hit duplicate MAC (bsc#1104353 bsc#1137201).
- net: hns3: set dividual reset level for all RAS and MSI-X errors (bsc#1104353 bsc#1135046).
- net: hns3: set up the vport alive state while reinitializing (bsc#1104353 bsc#1137201).
- net: hns3: set vport alive state to default while resetting (bsc#1104353 bsc#1137201).
- net: hns3: simplify hclgevf_cmd_csq_clean (bsc#1104353 ).
- net: hns3: some cleanup for struct hns3_enet_ring (bsc#1104353 bsc#1134947).
- net: hns3: split function hnae3_match_n_instantiate() (bsc#1104353).
- net: hns3: stop mailbox handling when command queue need re-init (bsc#1104353 bsc#1135058).
- net: hns3: stop sending keep alive msg when VF command queue needs reinit (bsc#1104353 bsc#1134972).
- net: hns3: unify maybe_stop_tx for TSO and non-TSO case (bsc#1104353 bsc#1134947).
- net: hns3: unify the page reusing for page size 4K and 64K (bsc#1104353 bsc#1134947).
- net: hns3: use a reserved byte to identify need_resp flag (bsc#1104353).
- net: hns3: use atomic_t replace u32 for arq's count (bsc#1104353 bsc#1134953).
- net: hns3: use devm_kcalloc when allocating desc_cb (bsc#1104353 bsc#1134947).
- net: hns3: use napi_schedule_irqoff in hard interrupts handlers (bsc#1104353 bsc#1134947).
- net: hsr: fix memory leak in hsr_dev_finalize() (networking-stable-19_03_15).
- net: initialize skb-&gt;peeked when cloning (git-fixes).
- net: make skb_partial_csum_set() more robust against overflows (git-fixes).
- net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails (networking-stable-19_03_07).
- net: phy: marvell: add new default led configure for m88e151x (bsc#1135018).
- net: phy: marvell: change default m88e1510 LED configuration (bsc#1135018).
- net: phy: marvell: Enable interrupt function on LED2 pin (bsc#1135018).
- net: phy: marvell: Fix buffer overrun with stats counters (networking-stable-19_05_04).
- net: rds: exchange of 8K and 1M pool (networking-stable-19_04_30).
- net: rose: fix a possible stack overflow (networking-stable-19_03_28).
- net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables &gt; 255 (networking-stable-19_03_15).
- net: sit: fix memory leak in sit_init_net() (networking-stable-19_03_07).
- net: sit: fix UBSAN Undefined behaviour in check_6rd (networking-stable-19_03_15).
- net: socket: fix potential spectre v1 gadget in socketcall (git-fixes).
- net: socket: set sock-&gt;sk to NULL after calling proto_ops::release() (networking-stable-19_03_07).
- net: stmmac: fix memory corruption with large MTUs (networking-stable-19_03_28).
- net: stmmac: move stmmac_check_ether_addr() to driver probe (networking-stable-19_04_30).
- net: test tailroom before appending to linear skb (git-fixes).
- net: thunderx: do not allow jumbo frames with XDP (networking-stable-19_04_19).
- net: thunderx: raise XDP MTU to 1508 (networking-stable-19_04_19).
- net: unbreak CONFIG_RETPOLINE=n builds (bsc#1124503).
- net: use indirect call wrappers at GRO network layer (bsc#1124503).
- net: use indirect call wrappers at GRO transport layer (bsc#1124503).
- net: validate untrusted gso packets without csum offload (networking-stable-19_02_20).
- net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms() (git-fixes).
- net_sched: fix two more memory leaks in cls_tcindex (networking-stable-19_02_24).
- netfilter: bridge: Do not sabotage nf_hook calls from an l3mdev (git-fixes).
- netfilter: bridge: ebt_among: add missing match size checks (git-fixes).
- netfilter: bridge: ebt_among: add more missing match size checks (git-fixes).
- netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING (git-fixes).
- netfilter: drop template ct when conntrack is skipped (git-fixes).
- netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule (git-fixes).
- netfilter: ebtables: handle string from userspace with care (git-fixes).
- netfilter: ebtables: reject non-bridge targets (git-fixes).
- netfilter: ip6t_MASQUERADE: add dependency on conntrack module (git-fixes).
- netfilter: ipset: do not call ipset_nest_end after nla_nest_cancel (git-fixes).
- netfilter: ipset: Missing nfnl_lock()/nfnl_unlock() is added to ip_set_net_exit() (git-fixes).
- netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt (git-fixes).
- netfilter: nf_log: do not hold nf_log_mutex during user access (git-fixes).
- netfilter: nf_log: fix uninit read in nf_log_proc_dostring (git-fixes).
- netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6} (git-fixes).
- netfilter: nf_tables: can't fail after linking rule into active rule list (git-fixes).
- netfilter: nf_tables: check msg_type before nft_trans_set(trans) (git-fixes).
- netfilter: nf_tables: fix leaking object reference count (git-fixes).
- netfilter: nf_tables: fix NULL pointer dereference on nft_ct_helper_obj_dump() (git-fixes).
- netfilter: nf_tables: release chain in flushing set (git-fixes).
- netfilter: nft_compat: do not dump private area (git-fixes).
- netfilter: x_tables: avoid out-of-bounds reads in xt_request_find_{match|target} (git-fixes).
- netfilter: x_tables: fix int overflow in xt_alloc_table_info() (git-fixes).
- netfilter: x_tables: initialise match/target check parameter struct (git-fixes).
- netlabel: fix out-of-bounds memory accesses (networking-stable-19_03_07).
- netlink: fix uninit-value in netlink_sendmsg (git-fixes).
- nfc: nci: Add some bounds checking in nci_hci_cmd_received() (bsc#1051510).
- nfs/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount (git-fixes).
- nfs: Add missing encode / decode sequence_maxsz to v4.2 operations (git-fixes).
- nfs: add module option to limit NFSv4 minor version (jsc#PM-231).
- nfs: Do not recoalesce on error in nfs_pageio_complete_mirror() (git-fixes).
- nfs: Do not use page_file_mapping after removing the page (git-fixes).
- nfs: Fix a soft lockup in the delegation recovery code (git-fixes).
- nfs: Fix a typo in nfs_init_timeout_values() (git-fixes).
- nfs: Fix an I/O request leakage in nfs_do_recoalesce (git-fixes).
- nfs: Fix dentry revalidation on nfsv4 lookup (bsc#1132618).
- nfs: Fix I/O request leakages (git-fixes).
- nfs: fix mount/umount race in nlmclnt (git-fixes).
- nfsd4: catch some false session retries (git-fixes).
- nfsd4: fix cached replies to solo SEQUENCE compounds (git-fixes).
- nfsv4.1 do not free interrupted slot on open (git-fixes).
- nfsv4.1: Reinitialise sequence results before retransmitting a request (git-fixes).
- nfsv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE() (git-fixes).
- nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands (bsc#1051510).
- nvme-fc: use separate work queue to avoid warning (bsc#1131673).
- nvme-multipath: avoid crash on invalid subsystem cntlid enumeration (bsc#1129273).
- nvme-multipath: avoid crash on invalid subsystem cntlid enumeration (bsc#1130937).
- nvme-multipath: split bios with the ns_head bio_set before submitting (bsc#1103259, bsc#1131673).
- nvme-rdma: fix possible free of a non-allocated async event buffer (bsc#1120423).
- nvme: add proper discard setup for the multipath device (bsc#1114638).
- nvme: Do not remove namespaces during reset (bsc#1131673).
- nvme: fix the dangerous reference of namespaces list (bsc#1131673).
- nvme: flush scan_work when resetting controller (bsc#1131673).
- nvme: make sure ns head inherits underlying device limits (bsc#1131673).
- nvme: only reconfigure discard if necessary (bsc#1114638).
- objtool: Fix function fallthrough detection (bsc#1058115).
- ocfs2: fix ocfs2 read inode data panic in ocfs2_iget (bsc#1136434).
- ocfs2: turn on OCFS2_FS_STATS setting(bsc#1134393) We need to turn on OCFS2_FS_STATS kernel configuration setting, to fix bsc#1134393.
- of: fix clang -Wunsequenced for be32_to_cpu() (bsc#1135642).
- omapfb: add missing of_node_put after of_device_is_available (bsc#1051510).
- openvswitch: add seqadj extension when NAT is used (bsc#1051510).
- openvswitch: fix flow actions reallocation (bsc#1051510).
- overflow: Fix -Wtype-limits compilation warnings (bsc#1111666).
- p54: drop device reference count if fails to enable device (bsc#1135642).
- packet: fix reserve calculation (git-fixes).
- packet: in packet_snd start writing at link layer allocation (git-fixes).
- packet: refine ring v3 block size test to hold one frame (git-fixes).
- packet: reset network header if packet shorter than ll reserved space (git-fixes).
- packet: validate msg_namelen in send directly (git-fixes).
- packets: Always register packet sk in the same order (networking-stable-19_03_28).
- pci: Add function 1 DMA alias quirk for Marvell 9170 SATA controller (bsc#1051510).
- pci: designware-ep: Read-only registers need DBI_RO_WR_EN to be writable (bsc#1051510).
- pci: endpoint: Use EPC's device in dma_alloc_coherent()/dma_free_coherent() (git-fixes).
- pci: Factor out pcie_retrain_link() function (git-fixes).
- pci: Init pcie feature bits for managed host bridge alloc (bsc#1111666).
- pci: Mark AMD Stoney Radeon R7 GPU ATS as broken (bsc#1051510).
- pci: Mark Atheros AR9462 to avoid bus reset (bsc#1051510).
- pci: pciehp: Convert to threaded IRQ (bsc#1133005).
- pci: pciehp: Ignore Link State Changes after powering off a slot (bsc#1133005).
- pci: pciehp: Tolerate Presence Detect hardwired to zero (bsc#1133016).
- pci: Work around Pericom pcie-to-pci bridge Retrain Link erratum (git-fixes).
- perf tools: Add Hygon Dhyana support ().
- perf/x86/amd: Add event map for AMD Family 17h (bsc#1134223).
- perf/x86/amd: Update generic hardware cache events for Family 17h (bsc#1134223).
- phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode (bsc#1051510).
- phy: sun4i-usb: Support set_mode to usb_HOST for non-OTG PHYs (bsc#1051510).
- platform/x86: alienware-wmi: printing the wrong error code (bsc#1051510).
- platform/x86: dell-rbtn: Add missing #include (bsc#1051510).
- platform/x86: intel_pmc_ipc: adding error handling (bsc#1051510).
- platform/x86: intel_punit_ipc: Revert 'Fix resource ioremap warning' (bsc#1051510).
- platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI table (bsc#1051510).
- platform/x86: pmc_atom: Add several Beckhoff Automation boards to critclk_systems DMI table (bsc#1051510).
- platform/x86: pmc_atom: Drop __initconst on dmi table (bsc#1051510).
- platform/x86: sony-laptop: Fix unintentional fall-through (bsc#1051510).
- power: supply: axp20x_usb_power: Fix typo in VBUS current limit macros (bsc#1051510).
- power: supply: axp288_charger: Fix unchecked return value (bsc#1051510).
- powerpc/64: Make meltdown reporting Book3S 64 specific
- powerpc/64s: Fix logic when handling unknown CPU features (bsc#1055117).
- powerpc/64s: Fix page table fragment refcount race vs speculative references (bsc#1131326, bsc#1108937).
- powerpc/eeh: Fix race with driver un/bind (bsc#1065729).
- powerpc/fsl: Add barrier_nospec implementation for NXP PowerPC Book3E
- powerpc/hugetlb: Handle mmap_min_addr correctly in get_unmapped_area callback (bsc#1131900).
- powerpc/kvm: Save and restore host AMR/IAMR/UAMOR (bsc#1061840).
- powerpc/mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown search (bsc#1131900).
- powerpc/mm/radix: Display if mappings are exec or not (bsc#1055186, git-fixes).
- powerpc/mm/radix: Prettify mapped memory range print out (bsc#1055186, git-fixes).
- powerpc/mm: Add missing tracepoint for tlbie (bsc#1055117, git-fixes).
- powerpc/mm: Check secondary hash page table (bsc#1065729).
- powerpc/mm: Fix page table dump to work on Radix (bsc#1055186, git-fixes).
- powerpc/msi: Fix NULL pointer access in teardown code (bsc#1065729).
- powerpc/numa: document topology_updates_enabled, disable by default (bsc#1133584).
- powerpc/numa: improve control of topology updates (bsc#1133584).
- powerpc/perf: Fix MMCRA corruption by bhrb_filter (bsc#1053043).
- powerpc/perf: Fix unit_sel/cache_sel checks (bsc#1053043).
- powerpc/perf: Remove l2 bus events from HW cache event array (bsc#1053043).
- powerpc/powernv/cpuidle: Init all present cpus for deep states (bsc#1055121).
- powerpc/powernv/idle: Restore IAMR after idle (bsc#1065729).
- powerpc/powernv/ioda2: Remove redundant free of TCE pages (bsc#1061840).
- powerpc/powernv/ioda: Allocate indirect TCE levels of cached userspace addresses on demand (bsc#1061840).
- powerpc/powernv/ioda: Fix locked_vm counting for memory used by IOMMU tables (bsc#1061840).
- powerpc/powernv: Do not reprogram SLW image on every kvm guest entry/exit (bsc#1061840).
- powerpc/powernv: Make opal log only readable by root (bsc#1065729).
- powerpc/powernv: Remove never used pnv_power9_force_smt4 (bsc#1061840).
- powerpc/process: Fix sparse address space warnings (bsc#1065729).
- powerpc/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
- powerpc/vdso32: fix CLOCK_MONOTONIC on PPC64 (bsc#1131587).
- powerpc/vdso64: Fix CLOCK_MONOTONIC inconsistencies across Y2038 (bsc#1131587).
- powerpc64/ftrace: Include ftrace.h needed for enable/disable calls (bsc#1088804, git-fixes).
- powerpc: Always initialize input array when calling epapr_hypercall() (bsc#1065729).
- powerpc: avoid -mno-sched-epilog on GCC 4.9 and newer (bsc#1065729).
- powerpc: consolidate -mno-sched-epilog into FTRACE flags (bsc#1065729).
- powerpc: Fix 32-bit kvm-PR lockup and host crash with MacOS guest (bsc#1061840).
- powerpc: Fix HMIs on big-endian with CONFIG_RELOCATABLE=y (bsc#1065729).
- proc/kcore: do not bounds check against address 0 (bsc#1051510).
- proc/sysctl: fix return error for proc_doulongvec_minmax() (bsc#1051510).
- proc: revalidate kernel thread inodes to root:root (bsc#1051510).
- ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK (git-fixes).
- pwm: Fix deadlock warning when removing PWM device (bsc#1051510).
- pwm: meson: Consider 128 a valid pre-divider (bsc#1051510).
- pwm: meson: Do not disable PWM when setting duty repeatedly (bsc#1051510).
- pwm: meson: Use the spin-lock only to protect register modifications (bsc#1051510).
- pwm: tiehrpwm: Update shadow register for disabling PWMs (bsc#1051510).
- qed*: Add iWARP 100g support (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed*: Change hwfn used for sb initialization (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add API for SmartAN query (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add infrastructure for error detection and recovery (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add llh ppfid interface and 100g support for offload protocols (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Add qed devlink parameters table (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Define new MF bit for no_vlan config (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Delete redundant doorbell recovery types (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: fix indentation issue with statements in an if-block (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix iWARP buffer size provided for syn packet processing (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix iWARP syn packet mac address validation (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix missing DORQ attentions (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: fix spelling mistake 'faspath' -&gt; 'fastpath' (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: fix spelling mistake 'inculde' -&gt; 'include' (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix static checker warning (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix the doorbell address sanity check (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix the DORQ's attentions handling (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Mark expected switch fall-through (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Modify api for performing a dmae to another PF (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Modify offload protocols to use the affined engine (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Read device port count from the shmem (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Reduce the severity of ptp debug message (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: remove duplicated include from qed_if.h (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: remove redundant assignment to rc (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Revise load sequence to avoid pci errors (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Set the doorbell address correctly (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Add ethtool interface for SmartAN query (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Error recovery process (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Fix internal loopback failure with jumbo mtu configuration (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: fix write to free'd pointer error and double free of ptp (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Handle infinite driver spinning for Tx timestamp (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: place ethtool_rx_flow_spec after code after TC flower codebase (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qede: Populate mbi version in ethtool driver query data (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qedr: Change the MSI-X vectors selection to be based on affined engine (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qla2xxx: allow irqbalance control in non-MQ mode (bsc#1128971).
- qla2xxx: allow irqbalance control in non-MQ mode (bsc#1128979).
- qla2xxx: always allocate qla_tgt_wq (bsc#1131451).
- qla2xxx: kABI fixes for v10.00.00.14-k (bsc#1136215).
- qla2xxx: kABI fixes for v10.01.00.15-k (bsc#1136215).
- qlcnic: remove assumption that vlan_tci != 0 (bsc#1136469 jsc#SLE-4695).
- qlcnic: remove set but not used variables 'cur_rings, max_hw_rings, tx_desc_info' (bsc#1136469 jsc#SLE-4695).
- qlcnic: remove set but not used variables 'op, cmd_op' (bsc#1136469 jsc#SLE-4695).
- qmi_wwan: add Olicard 600 (bsc#1051510).
- qmi_wwan: Add support for Quectel EG12/EM12 (networking-stable-19_03_07).
- ras/cec: Check the correct variable in the debugfs error handling (bsc#1085535).
- ravb: Decrease TxFIFO depth of Q3 and Q2 to one (networking-stable-19_03_15).
- rdma/cxbg: Use correct sizing on buffers holding page DMA addresses (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Add support for 64Byte cqes (bsc#1127371).
- rdma/cxgb4: Add support for kernel mode SRQ's (bsc#1127371).
- rdma/cxgb4: Add support for srq functions and structs (bsc#1127371).
- rdma/cxgb4: Don't expose DMA addresses (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Fix null pointer dereference on alloc_skb failure (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: fix some info leaks (bsc#1127371).
- rdma/cxgb4: Fix spelling mistake 'immedate' -&gt; 'immediate' (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Make c4iw_poll_cq_one() easier to analyze (bsc#1127371).
- rdma/cxgb4: Remove a set-but-not-used variable (bsc#1127371).
- rdma/cxgb4: Remove kref accounting for sync operation (bsc#1136348 jsc#SLE-4684).
- rdma/cxgb4: Use sizeof() notation (bsc#1136348 jsc#SLE-4684).
- rdma/hns: Add constraint on the setting of local ACK timeout (bsc#1104427 bsc#1137233).
- rdma/hns: Add SCC context allocation support for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Add SCC context clr support for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Add the process of AEQ overflow for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Add timer allocation support for hip08 (bsc#1104427 bsc#1126206).
- rdma/hns: Bugfix for mapping user db (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for posting multiple srq work request (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for SCC hem free (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for sending with invalidate (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for set hem of SCC (bsc#1104427 bsc#1137236).
- rdma/hns: Bugfix for the scene without receiver queue (bsc#1104427 bsc#1137233).
- rdma/hns: Configure capacity of hns device (bsc#1104427 bsc#1137236).
- rdma/hns: Delete unused variable in hns_roce_v2_modify_qp function (bsc#1104427).
- rdma/hns: Delete useful prints for aeq subtype event (bsc#1104427 bsc#1126206).
- rdma/hns: Fix bad endianess of port_pd variable (bsc#1104427 ).
- rdma/hns: Fix bug that caused srq creation to fail (bsc#1104427 ).
- rdma/hns: Fix the bug with updating rq head pointer when flush cqe (bsc#1104427 bsc#1137233).
- rdma/hns: Fix the chip hanging caused by sending doorbell during reset (bsc#1104427 bsc#1137232).
- rdma/hns: Fix the chip hanging caused by sending mailbox CMQ during reset (bsc#1104427 bsc#1137232).
- rdma/hns: Fix the Oops during rmmod or insmod ko when reset occurs (bsc#1104427 bsc#1137232).
- rdma/hns: Fix the state of rereg mr (bsc#1104427 bsc#1137236).
- rdma/hns: Hide error print information with roce vf device (bsc#1104427 bsc#1137236).
- rdma/hns: Limit minimum ROCE CQ depth to 64 (bsc#1104427 bsc#1137236).
- rdma/hns: Limit scope of hns_roce_cmq_send() (bsc#1104427 ).
- rdma/hns: Make some function static (bsc#1104427 bsc#1126206).
- rdma/hns: Modify qp specification according to UM (bsc#1104427 bsc#1137233).
- rdma/hns: Modify the pbl ba page size for hip08 (bsc#1104427 bsc#1137233).
- rdma/hns: Move spin_lock_irqsave to the correct place (bsc#1104427 bsc#1137236).
- rdma/hns: Only assgin some fields if the relatived attr_mask is set (bsc#1104427).
- rdma/hns: Only assign the fields of the rq psn if ib_QP_RQ_PSN is set (bsc#1104427).
- rdma/hns: Only assign the relatived fields of psn if ib_QP_SQ_PSN is set (bsc#1104427).
- rdma/hns: rdma/hns: Assign rq head pointer when enable rq record db (bsc#1104427 bsc#1137236).
- rdma/hns: Remove jiffies operation in disable interrupt context (bsc#1104427 bsc#1137236).
- rdma/hns: Remove set but not used variable 'rst' (bsc#1104427 bsc#1126206).
- rdma/hns: Set allocated memory to zero for wrid (bsc#1104427 bsc#1137236).
- rdma/hns: Support to create 1M srq queue (bsc#1104427 ).
- rdma/hns: Update CQE specifications (bsc#1104427 bsc#1137236).
- rdma/hns: Update the range of raq_psn field of qp context (bsc#1104427).
- rdma/i40iw: Handle workqueue allocation failure (jsc#SLE-4793).
- rdma/iw_cxgb4: Always disconnect when QP is transitioning to TERMINATE state (bsc#1136348 jsc#SLE-4684).
- rdma/iw_cxgb4: Drop __GFP_NOFAIL (bsc#1127371).
- rdma/iwcm: add tos_set bool to iw_cm struct (bsc#1136348 jsc#SLE-4684).
- rdma/qedr: Fix incorrect device rate (bsc#1136188).
- rdma/qedr: Fix out of bounds index check in query pkey (bsc#1136456 jsc#SLE-4689).
- rdma/rdmavt: Use correct sizing on buffers holding page DMA addresses (jsc#SLE-4925).
- rdma/rxe: Consider skb reserve space based on netdev of GID (bsc#1082387, bsc#1103992).
- rdma/smc: Replace ib_query_gid with rdma_get_gid_attr (bsc#1131530 LTC#176717).
- rds: fix refcount bug in rds_sock_addref (git-fixes).
- rds: tcp: atomically purge entries from rds_tcp_conn_list during netns delete (git-fixes).
- regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB (bsc#1051510).
- ring-buffer: Check if memory is available before allocation (bsc#1132531).
- route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race (networking-stable-19_03_15).
- rt2x00: do not increment sequence number while re-transmitting (bsc#1051510).
- rtc: da9063: set uie_unsupported when relevant (bsc#1051510).
- rtc: sh: Fix invalid alarm warning for non-enabled alarm (bsc#1051510).
- rtlwifi: rtl8723ae: Fix missing break in switch statement (bsc#1051510).
- rxrpc: Do not release call mutex on error pointer (git-fixes).
- rxrpc: Do not treat call aborts as conn aborts (git-fixes).
- rxrpc: Fix client call queueing, waiting for channel (networking-stable-19_03_15).
- rxrpc: Fix error reception on AF_INET6 sockets (git-fixes).
- rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket (git-fixes).
- rxrpc: Fix Tx ring annotation after initial Tx failure (git-fixes).
- s390/dasd: fix panic for failed online processing (bsc#1132589).
- s390/pkey: move pckmo subfunction available checks away from module init (bsc#1128544).
- s390/qdio: clear intparm during shutdown (bsc#1134597 LTC#177516).
- s390/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
- sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init() (bsc#1051510).
- sc16is7xx: move label 'err_spi' to correct section (bsc#1051510).
- sc16is7xx: put err_spi and err_i2c into correct #ifdef (bsc#1051510).
- scripts/git_sort/git_sort.py: remove old SCSI git branches
- scripts: override locale from environment when running recordmcount.pl (bsc#1134354).
- scsi: hisi: KABI ignore new symbols (bsc#1135038).
- scsi: hisi_sas: add host reset interface for test (bsc#1135041).
- scsi: hisi_sas: Add softreset in hisi_sas_I_T_nexus_reset() (bsc#1135033).
- scsi: hisi_sas: Adjust the printk format of functions hisi_sas_init_device() (bsc#1135037).
- scsi: hisi_sas: allocate different SAS address for directly attached situation (bsc#1135036).
- scsi: hisi_sas: Do not fail IT nexus reset for Open Reject timeout (bsc#1135033).
- scsi: hisi_sas: Do not hard reset disk during controller reset (bsc#1135034).
- scsi: hisi_sas: Fix for setting the PHY linkrate when disconnected (bsc#1135038).
- scsi: hisi_sas: Remedy inconsistent PHY down state in software (bsc#1135039).
- scsi: hisi_sas: remove the check of sas_dev status in hisi_sas_I_T_nexus_reset() (bsc#1135037).
- scsi: hisi_sas: Send HARD RESET to clear the previous affiliation of STP target port (bsc#1135037).
- scsi: hisi_sas: Set PHY linkrate when disconnected (bsc#1135038).
- scsi: hisi_sas: Some misc tidy-up (bsc#1135031).
- scsi: hisi_sas: Support all RAS events with MSI interrupts (bsc#1135035).
- scsi: libsas: allocate sense buffer for bsg queue (bsc#1131467).
- scsi: libsas: Do discovery on empty PHY to update PHY info (bsc#1135024).
- scsi: libsas: Improve vague log in SAS rediscovery (bsc#1135027).
- scsi: libsas: Inject revalidate event for root port event (bsc#1135026).
- scsi: libsas: Print expander PHY indexes in decimal (bsc#1135021).
- scsi: libsas: Stop hardcoding SAS address length (bsc#1135029).
- scsi: libsas: Support SATA PHY connection rate unmatch fixing during discovery (bsc#1135028).
- scsi: libsas: Try to retain programmed min linkrate for SATA min pathway unmatch fixing (bsc#1135028).
- scsi: qedf: fixup bit operations (bsc#1135542).
- scsi: qedf: fixup locking in qedf_restart_rport() (bsc#1135542).
- scsi: qedf: missing kref_put in qedf_xmit() (bsc#1135542).
- scsi: qla2xxx: Add 28xx flash primary/secondary status/image mechanism (bsc#1136215).
- scsi: qla2xxx: Add Device ID for ISP28XX (bsc#1136215).
- scsi: qla2xxx: Add First Burst support for FC-NVMe devices (bsc#1136215).
- scsi: qla2xxx: Add fw_attr and port_no SysFS node (bsc#1136215).
- scsi: qla2xxx: Add new FC-NVMe enable BIT to enable FC-NVMe feature (bsc#1130579).
- scsi: qla2xxx: Add new FW dump template entry types (bsc#1136215).
- scsi: qla2xxx: Add protection mask module parameters (bsc#1136215).
- scsi: qla2xxx: Add Serdes support for ISP28XX (bsc#1136215).
- scsi: qla2xxx: Add support for multiple fwdump templates/segments (bsc#1136215).
- scsi: qla2xxx: Add support for setting port speed (bsc#1136215).
- scsi: qla2xxx: Avoid pci IRQ affinity mapping when multiqueue is not supported (bsc#1136215).
- scsi: qla2xxx: avoid printf format warning (bsc#1136215).
- scsi: qla2xxx: Check for FW started flag before aborting (bsc#1136215).
- scsi: qla2xxx: check for kstrtol() failure (bsc#1136215).
- scsi: qla2xxx: Cleanups for NVRAM/Flash read/write path (bsc#1136215).
- scsi: qla2xxx: Correction and improvement to fwdt processing (bsc#1136215).
- scsi: qla2xxx: Correctly report max/min supported speeds (bsc#1136215).
- scsi: qla2xxx: Declare local functions 'static' (bsc#1137444).
- scsi: qla2xxx: Fix code indentation for qla27xx_fwdt_entry (bsc#1136215).
- scsi: qla2xxx: Fix DMA error when the DIF sg buffer crosses 4GB boundary (bsc#1136215).
- scsi: qla2xxx: fix error message on qla2400 (bsc#1118139).
- scsi: qla2xxx: Fix function argument descriptions (bsc#1118139).
- scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware (bsc#1136215).
- scsi: qla2xxx: Fix memory corruption during hba reset test (bsc#1118139).
- scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (bsc#1136215).
- scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (bsc#1132044).
- scsi: qla2xxx: Fix read offset in qla24xx_load_risc_flash() (bsc#1136215).
- scsi: qla2xxx: Fix routine qla27xx_dump_{mpi|ram}() (bsc#1136215).
- scsi: qla2xxx: fix spelling mistake: 'existant' -&gt; 'existent' (bsc#1118139).
- scsi: qla2xxx: Fix unload when NVMe devices are configured (bsc#1136215).
- scsi: qla2xxx: fully convert to the generic DMA API (bsc#1137444).
- scsi: qla2xxx: fx00 copypaste typo (bsc#1118139).
- scsi: qla2xxx: Improve several kernel-doc headers (bsc#1137444).
- scsi: qla2xxx: Introduce a switch/case statement in qlt_xmit_tm_rsp() (bsc#1137444).
- scsi: qla2xxx: Make qla2x00_sysfs_write_nvram() easier to analyze (bsc#1137444).
- scsi: qla2xxx: Make sure that qlafx00_ioctl_iosb_entry() initializes 'res' (bsc#1137444).
- scsi: qla2xxx: Move debug messages before sending srb preventing panic (bsc#1136215).
- scsi: qla2xxx: Move marker request behind QPair (bsc#1136215).
- scsi: qla2xxx: no need to check return value of debugfs_create functions (bsc#1136215).
- scsi: qla2xxx: NULL check before some freeing functions is not needed (bsc#1137444).
- scsi: qla2xxx: Prevent multiple ADISC commands per session (bsc#1136215).
- scsi: qla2xxx: Prevent SysFS access when chip is down (bsc#1136215).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1137444).
- scsi: qla2xxx: Remove FW default template (bsc#1136215).
- scsi: qla2xxx: remove redundant null check on pointer sess (bsc#1136215).
- scsi: qla2xxx: remove the unused tcm_qla2xxx_cmd_wq (bsc#1118139).
- scsi: qla2xxx: Remove two arguments from qlafx00_error_entry() (bsc#1137444).
- scsi: qla2xxx: Remove unused symbols (bsc#1118139).
- scsi: qla2xxx: Secure flash update support for ISP28XX (bsc#1136215).
- scsi: qla2xxx: Set remote port devloss timeout to 0 (bsc#1136215).
- scsi: qla2xxx: Simplification of register address used in qla_tmpl.c (bsc#1136215).
- scsi: qla2xxx: Simplify conditional check again (bsc#1136215).
- scsi: qla2xxx: Split the __qla2x00_abort_all_cmds() function (bsc#1137444).
- scsi: qla2xxx: Update driver version to 10.00.00.14-k (bsc#1136215).
- scsi: qla2xxx: Update driver version to 10.01.00.15-k (bsc#1136215).
- scsi: qla2xxx: Update flash read/write routine (bsc#1136215).
- scsi: qla2xxx: Use %p for printing pointers (bsc#1118139).
- scsi: qla2xxx: use lower_32_bits and upper_32_bits instead of reinventing them (bsc#1137444).
- scsi: smartpqi: add H3C controller IDs (bsc#1133547).
- scsi: smartpqi: add h3c ssid (bsc#1133547).
- scsi: smartpqi: add no_write_same for logical volumes (bsc#1133547).
- scsi: smartpqi: add ofa support (bsc#1133547).
- scsi: smartpqi: Add retries for device reset (bsc#1133547).
- scsi: smartpqi: add smp_utils support (bsc#1133547).
- scsi: smartpqi: add spdx (bsc#1133547).
- scsi: smartpqi: add support for huawei controllers (bsc#1133547).
- scsi: smartpqi: add support for PQI Config Table handshake (bsc#1133547).
- scsi: smartpqi: add sysfs attributes (bsc#1133547).
- scsi: smartpqi: allow for larger raid maps (bsc#1133547).
- scsi: smartpqi: bump driver version (bsc#1133547).
- scsi: smartpqi: bump driver version (bsc#1133547).
- scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown() (bsc#1133547).
- scsi: smartpqi: check for null device pointers (bsc#1133547).
- scsi: smartpqi: correct host serial num for ssa (bsc#1133547).
- scsi: smartpqi: correct lun reset issues (bsc#1133547).
- scsi: smartpqi: correct volume status (bsc#1133547).
- scsi: smartpqi: do not offline disks for transient did no connect conditions (bsc#1133547).
- scsi: smartpqi: enhance numa node detection (bsc#1133547).
- scsi: smartpqi: fix build warnings (bsc#1133547).
- scsi: smartpqi: fix disk name mount point (bsc#1133547).
- scsi: smartpqi: fully convert to the generic DMA API (bsc#1133547).
- scsi: smartpqi: increase fw status register read timeout (bsc#1133547).
- scsi: smartpqi: increase LUN reset timeout (bsc#1133547).
- scsi: smartpqi: refactor sending controller raid requests (bsc#1133547).
- scsi: smartpqi: Reporting 'logical unit failure' (bsc#1133547).
- scsi: smartpqi: turn off lun data caching for ptraid (bsc#1133547).
- scsi: smartpqi: update copyright (bsc#1133547).
- scsi: smartpqi: update driver version (bsc#1133547).
- scsi: smartpqi: wake up drives after os resumes from suspend (bsc#1133547).
- scsi: smartpqi_init: fix boolean expression in pqi_device_remove_start (bsc#1133547).
- scsi: zfcp: make DIX experimental, disabled, and independent of DIF (jsc#SLE-6772).
- sctp: avoid running the sctp state machine recursively (networking-stable-19_05_04).
- sctp: call gso_reset_checksum when computing checksum in sctp_gso_segment (networking-stable-19_02_24).
- sctp: fix identification of new acks for SFR-CACC (git-fixes).
- sctp: get sctphdr by offset in sctp_compute_cksum (networking-stable-19_03_28).
- sctp: initialize _pad of sockaddr_in before copying to user memory (networking-stable-19_04_10).
- sctp: set frag_point in sctp_setsockopt_maxseg correctly` (git-fixes).
- selinux: use kernel linux/socket.h for genheaders and mdp (bsc#1134810).
- serial: 8250_pxa: honor the port number from devicetree (bsc#1051510).
- serial: ar933x_uart: Fix build failure with disabled console (bsc#1051510).
- serial: uartps: console_setup() can't be placed to init section (bsc#1051510).
- signal: Always notice exiting tasks (git-fixes).
- signal: Better detection of synchronous signals (git-fixes).
- signal: Restore the stop PTRACE_EVENT_EXIT (git-fixes).
- sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach() (networking-stable-19_02_24).
- soc/fsl/qe: Fix an error code in qe_pin_request() (bsc#1051510).
- soc/tegra: fuse: Fix illegal free of IO base address (bsc#1051510).
- soc/tegra: pmc: Drop locking from tegra_powergate_is_powered() (bsc#1051510).
- soc: imx-sgtl5000: add missing put_device() (bsc#1051510).
- soc: qcom: gsbi: Fix error handling in gsbi_probe() (bsc#1051510).
- spi-mem: fix kernel-doc for spi_mem_dirmap_{read|write}() (bsc#1111666).
- spi: a3700: Clear DATA_OUT when performing a read (bsc#1051510).
- spi: Add missing pm_runtime_put_noidle() after failed get (bsc#1111666).
- spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios (bsc#1051510).
- spi: bcm2835aux: setup gpio-cs to output and correct level during setup (bsc#1051510).
- spi: bcm2835aux: warn in dmesg that native cs is not really supported (bsc#1051510).
- spi: Micrel eth switch: declare missing of table (bsc#1051510).
- spi: rspi: Fix sequencer reset during initialization (bsc#1051510).
- spi: ST ST95HF NFC: declare missing of table (bsc#1051510).
- ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit (bsc#1051510).
- staging: comedi: ni_usb6501: Fix possible double-free of -&gt;usb_rx_buf (bsc#1051510).
- staging: comedi: ni_usb6501: Fix use of uninitialized mutex (bsc#1051510).
- staging: comedi: vmk80xx: Fix possible double-free of -&gt;usb_rx_buf (bsc#1051510).
- staging: comedi: vmk80xx: Fix use of uninitialized semaphore (bsc#1051510).
- staging: iio: ad7192: Fix ad7193 channel address (bsc#1051510).
- staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc (bsc#1051510).
- staging: rtl8712: uninitialized memory in read_bbreg_hdl() (bsc#1051510).
- staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc (bsc#1111666).
- staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer dereference (bsc#1111666).
- staging: vt6655: Fix interrupt race condition on device start up (bsc#1051510).
- staging: vt6655: Remove vif check from vnt_interrupt (bsc#1051510).
- stm class: Fix an endless loop in channel allocation (bsc#1051510).
- stm class: Fix channel free in stm output free path (bsc#1051510).
- stm class: Prevent division by zero (bsc#1051510).
- stmmac: pci: Adjust IOT2000 matching (networking-stable-19_04_30).
- sunrpc: fix 4 more call sites that were using stack memory with a scatterlist (git-fixes).
- supported.conf: Add openvswitch to kernel-default-base (bsc#1124839).
- supported.conf: Add openvswitch to kernel-default-base (bsc#1124839).
- supported.conf: dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).
- svm/avic: Fix invalidate logical APIC id entry (bsc#1132726).
- svm: Fix AVIC DFR and LDR handling (bsc#1132558).
- switchtec: Fix unintended mask of MRPC event (git-fixes).
- sysctl: handle overflow for file-max (bsc#1051510).
- tcp: add tcp_min_snd_mss sysctl (bsc#1137586).
- tcp: do not use ipv6 header for ipv4 flow (networking-stable-19_03_28).
- tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (bsc#1137586).
- tcp: Ensure DCTCP reacts to losses (networking-stable-19_04_10).
- tcp: fix fack_count accounting on tcp_shift_skb_data() (CVE-2019-11477 bsc#1137586).
- tcp: fix TCP_REPAIR_QUEUE bound checking (git-fixes).
- tcp: limit payload size of sacked skbs (bsc#1137586).
- tcp: purge write queue in tcp_connect_init() (git-fixes).
- tcp: tcp_fragment() should apply sane memory limits (bsc#1137586).
- tcp: tcp_grow_window() needs to respect tcp_space() (networking-stable-19_04_19).
- tcp: tcp_v4_err() should be more careful (networking-stable-19_02_20).
- team: fix possible recursive locking when add slaves (networking-stable-19_04_30).
- team: set slave to promisc if team is already in promisc mode (bsc#1051510).
- testing: nvdimm: provide SZ_4G constant (bsc#1132982).
- thermal/int340x_thermal: Add additional UUIDs (bsc#1051510).
- thermal/int340x_thermal: fix mode setting (bsc#1051510).
- thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power (bsc#1051510).
- thunderx: eliminate extra calls to put_page() for pages held for recycling (networking-stable-19_03_28).
- thunderx: enable page recycling for non-XDP case (networking-stable-19_03_28).
- tipc: fix hanging clients using poll with EPOLLOUT flag (git-fixes).
- tipc: fix race condition causing hung sendto (networking-stable-19_03_07).
- tipc: missing entries in name table of publications (networking-stable-19_04_19).
- tools lib traceevent: Fix missing equality check for strcmp (bsc#1129770).
- tools/cpupower: Add Hygon Dhyana support ().
- tpm: Fix the type of the return value in calc_tpm2_event_size() (bsc#1082555).
- tracing/hrtimer: Fix tracing bugs by taking all clock bases and modes into account (bsc#1132527).
- tracing: Fix a memory leak by early error exit in trace_pid_write() (bsc#1133702).
- tracing: Fix buffer_ref pipe ops (bsc#1133698).
- tracing: Fix partial reading of trace event's id file (bsc#1136573).
- treewide: Use DEVICE_ATTR_WO (bsc#1137739).
- tty: increase the default flip buffer limit to 2*640K (bsc#1051510).
- tty: pty: Fix race condition between release_one_tty and pty_write (bsc#1051510).
- tty: serial_core, add -&gt;install (bnc#1129693).
- tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0 (bsc#1051510).
- tun: add a missing rcu_read_unlock() in error path (networking-stable-19_03_28).
- tun: fix blocking read (networking-stable-19_03_07).
- tun: properly test for IFF_UP (networking-stable-19_03_28).
- tun: remove unnecessary memory barrier (networking-stable-19_03_07).
- uas: fix alignment of scatter/gather segments (bsc#1129770).
- udp: use indirect call wrappers for GRO socket lookup (bsc#1124503).
- ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour (bsc#1135323).
- usb-storage: Set virt_boundary_mask to avoid SG overflows (bsc#1051510).
- usb: cdc-acm: fix unthrottle races (bsc#1051510).
- usb: chipidea: Grab the (legacy) usb PHY by phandle first (bsc#1051510).
- usb: core: Fix bug caused by duplicate interface PM usage counter (bsc#1051510).
- usb: core: Fix unterminated string returned by usb_string() (bsc#1051510).
- usb: dwc3: Fix default lpm_nyet_threshold value (bsc#1051510).
- usb: f_fs: Avoid crash due to out-of-scope stack ptr access (bsc#1051510).
- usb: gadget: net2272: Fix net2272_dequeue() (bsc#1051510).
- usb: gadget: net2280: Fix net2280_dequeue() (bsc#1051510).
- usb: gadget: net2280: Fix overrun of OUT messages (bsc#1051510).
- usb: serial: cp210x: fix GPIO in autosuspend (bsc#1120902).
- usb: serial: f81232: fix interrupt worker not stop (bsc#1051510).
- usb: serial: fix unthrottle races (bsc#1051510).
- usb: u132-hcd: fix resource leak (bsc#1051510).
- usb: usb251xb: fix to avoid potential NULL pointer dereference (bsc#1051510).
- usb: usbip: fix isoc packet num validation in get_pipe (bsc#1051510).
- usb: w1 ds2490: Fix bug caused by improper use of altsetting array (bsc#1051510).
- usb: yurex: Fix protection fault after device removal (bsc#1051510).
- userfaultfd: use RCU to free the task struct when fork fails (git-fixes).
- vfio/mdev: Avoid release parent reference during error path (bsc#1051510).
- vfio/mdev: Fix aborting mdev child device removal if one fails (bsc#1051510).
- vfio/pci: use correct format characters (bsc#1051510).
- vfio_pci: Enable memory accesses before calling pci_map_rom (bsc#1051510).
- vfs: allow dedupe of user owned read-only files (bsc#1133778, bsc#1132219).
- vfs: avoid problematic remapping requests into partial EOF block (bsc#1133850, bsc#1132219).
- vfs: dedupe should return EPERM if permission is not granted (bsc#1133779, bsc#1132219).
- vfs: dedupe: extract helper for a single dedup (bsc#1133769, bsc#1132219).
- vfs: exit early from zero length remap operations (bsc#1132411, bsc#1132219).
- vfs: export vfs_dedupe_file_range_one() to modules (bsc#1133772, bsc#1132219).
- vfs: limit size of dedupe (bsc#1132397, bsc#1132219).
- vfs: rename clone_verify_area to remap_verify_area (bsc#1133852, bsc#1132219).
- vfs: skip zero-length dedupe requests (bsc#1133851, bsc#1132219).
- vfs: swap names of {do,vfs}_clone_file_range() (bsc#1133774, bsc#1132219).
- vfs: vfs_clone_file_prep_inodes should return EINVAL for a clone from beyond EOF (bsc#1133780, bsc#1132219).
- vhost/vsock: fix reset orphans race with close timeout (bsc#1051510).
- vhost: reject zero size iova range (networking-stable-19_04_19).
- virtio-blk: limit number of hw queues by nr_cpu_ids (bsc#1051510).
- virtio: Honour 'may_reduce_num' in vring_create_virtqueue (bsc#1051510).
- virtio_pci: fix a NULL pointer reference in vp_del_vqs (bsc#1051510).
- vrf: check accept_source_route on the original netdevice (networking-stable-19_04_10).
- vsock/virtio: fix kernel panic after device hot-unplug (bsc#1051510).
- vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock (bsc#1051510).
- vsock/virtio: Initialize core virtio vsock before registering the driver (bsc#1051510).
- vsock/virtio: reset connected sockets on device removal (bsc#1051510).
- vt: always call notifier with the console lock held (bsc#1051510).
- vxlan: Do not call gro_cells_destroy() before device is unregistered (networking-stable-19_03_28).
- vxlan: test dev-&gt;flags and IFF_UP before calling netif_rx() (networking-stable-19_02_20).
- wil6210: check null pointer in _wil_cfg80211_merge_extra_ies (bsc#1051510).
- wlcore: Fix memory leak in case wl12xx_fetch_firmware failure (bsc#1051510).
- x86/alternative: Init ideal_nops for Hygon Dhyana ().
- x86/amd_nb: Check vendor in AMD-only functions ().
- x86/apic: Add Hygon Dhyana support ().
- x86/bugs: Add Hygon Dhyana to the respective mitigation machinery ().
- x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die processors ().
- x86/cpu/mtrr: Support TOP_MEM2 and get MTRR number ().
- x86/cpu: Create Hygon Dhyana architecture support file ().
- x86/cpu: Get cache info and setup cache cpumap for Hygon Dhyana ().
- x86/cpu: Sanitize FAM6_ATOM naming (bsc#1111331).
- x86/events: Add Hygon Dhyana support to PMU infrastructure ().
- x86/kvm/hyper-v: avoid spurious pending stimer on vCPU init (bsc#1132572).
- x86/kvm: Add Hygon Dhyana support to kvm ().
- x86/MCE/AMD, EDAC/mce_amd: Add new error descriptions for some SMCA bank types (bsc#1128415).
- x86/MCE/AMD, EDAC/mce_amd: Add new McaTypes for CS, PSP, and SMU units (bsc#1128415).
- x86/MCE/AMD, EDAC/mce_amd: Add new MP5, NBIO, and pciE SMCA bank types (bsc#1128415).
- x86/mce/AMD, EDAC/mce_amd: Enumerate Reserved SMCA bank type (bsc#1128415).
- x86/mce/AMD: Pass the bank number to smca_get_bank_type() (bsc#1128415).
- x86/mce: Add Hygon Dhyana support to the MCA infrastructure ().
- x86/mce: Do not disable MCA banks when offlining a CPU on AMD ().
- x86/MCE: Fix kABI for new AMD bank names (bsc#1128415).
- x86/mce: Handle varying MCA bank counts (bsc#1128415).
- x86/msr-index: Cleanup bit defines (bsc#1111331).
- x86/pci, x86/amd_nb: Add Hygon Dhyana support to pci and northbridge ().
- x86/pci: Fixup RTIT_BAR of Intel Denverton Trace Hub (bsc#1120318).
- x86/perf/amd: Remove need to check 'running' bit in NMI handler (bsc#1131438).
- x86/perf/amd: Resolve NMI latency issues for active PMCs (bsc#1131438).
- x86/perf/amd: Resolve race condition when disabling PMC (bsc#1131438).
- x86/smpboot: Do not use BSP INIT delay and MWAIT to idle on Dhyana ().
- x86/speculation/mds: Fix documentation typo (bsc#1135642).
- x86/speculation: Prevent deadlock on ssb_state::lock (bsc#1114279).
- x86/speculation: Support 'mitigations=' cmdline option (bsc#1112178).
- x86/tsc: Force inlining of cyc2ns bits (bsc#1052904).
- x86/xen: Add Hygon Dhyana support to Xen ().
- x86_64: Add gap to int3 to allow for call emulation (bsc#1099658).
- x86_64: Allow breakpoints to emulate call instructions (bsc#1099658).
- xen-netback: do not populate the hash cache on XenBus disconnect (networking-stable-19_03_07).
- xen-netback: fix occasional leak of grant ref mappings under memory pressure (networking-stable-19_03_07).
- xen: Prevent buffer overflow in privcmd ioctl (bsc#1065600).
- xenbus: drop useless LIST_HEAD in xenbus_write_watch() and xenbus_file_write() (bsc#1065600).
- xfrm6: avoid potential infinite loop in _decode_session6() (git-fixes).
- xfrm6: call kfree_skb when skb is toobig (git-fixes).
- xfrm: do not call rcu_read_unlock when afinfo is NULL in xfrm_get_tos (git-fixes).
- xfrm: fix 'passing zero to ERR_PTR()' warning (git-fixes).
- xfrm: Fix ESN sequence number handling for IPsec GSO packets (git-fixes).
- xfrm: fix missing dst_release() after policy blocking lbcast and multicast (git-fixes).
- xfrm: fix rcu_read_unlock usage in xfrm_local_error (git-fixes).
- xfrm: Fix stack-out-of-bounds read on socket policy lookup (git-fixes).
- xfrm: fix xfrm_do_migrate() with AEAD e.g(AES-GCM) (git-fixes).
- xfrm: reset crypto_done when iterating over multiple input xfrms (git-fixes).
- xfrm: reset transport header back to network header after all input transforms ahave been applied (git-fixes).
- xfrm: Return error on unknown encap_type in init_state (git-fixes).
- xfrm: Validate address prefix lengths in the xfrm selector (git-fixes).
- xfrm_user: prevent leaking 2 bytes of kernel memory (git-fixes).
- xfs: add log item pinning error injection tag (bsc#1114427).
- xfs: add the ability to join a held buffer to a defer_ops (bsc#1133674).
- xfs: allow xfs_lock_two_inodes to take different EXCL/SHARED modes (bsc#1132370, bsc#1132219).
- xfs: buffer lru reference count error injection tag (bsc#1114427).
- xfs: call xfs_qm_dqattach before performing reflink operations (bsc#1132368, bsc#1132219).
- xfs: cap the length of deduplication requests (bsc#1132373, bsc#1132219).
- xfs: check _btree_check_block value (bsc#1123663).
- xfs: clean up xfs_reflink_remap_blocks call site (bsc#1132413, bsc#1132219).
- xfs: convert drop_writes to use the errortag mechanism (bsc#1114427).
- xfs: create block pointer check functions (bsc#1123663).
- xfs: create inode pointer verifiers (bsc#1114427).
- xfs: detect and fix bad summary counts at mount (bsc#1114427).
- xfs: export _inobt_btrec_to_irec and _ialloc_cluster_alignment for scrub (bsc#1114427).
- xfs: export various function for the online scrubber (bsc#1123663).
- xfs: expose errortag knobs via sysfs (bsc#1114427).
- xfs: fix data corruption w/ unaligned dedupe ranges (bsc#1132405, bsc#1132219).
- xfs: fix data corruption w/ unaligned reflink ranges (bsc#1132407, bsc#1132219).
- xfs: fix pagecache truncation prior to reflink (bsc#1132412, bsc#1132219).
- xfs: fix reporting supported extra file attributes for statx() (bsc#1133529).
- xfs: fix unused variable warning in xfs_buf_set_ref() (bsc#1114427).
- xfs: flush removing page cache in xfs_reflink_remap_prep (bsc#1132414, bsc#1132219).
- xfs: force summary counter recalc at next mount (bsc#1114427).
- xfs: hold xfs_buf locked between shortform-&gt;leaf conversion and the addition of an attribute (bsc#1133675).
- xfs: kill meaningless variable 'zero' (bsc#1106011).
- xfs: make errortag a per-mountpoint structure (bsc#1123663).
- xfs: move error injection tags into their own file (bsc#1114427).
- xfs: only grab shared inode locks for source file during reflink (bsc#1132372, bsc#1132219).
- xfs: prepare xfs_break_layouts() for another layout type (bsc#1106011).
- xfs: prepare xfs_break_layouts() to be called with XFS_MMAPLOCK_EXCL (bsc#1106011).
- xfs: refactor btree block header checking functions (bsc#1123663).
- xfs: refactor btree pointer checks (bsc#1123663).
- xfs: refactor clonerange preparation into a separate helper (bsc#1132402, bsc#1132219).
- xfs: refactor unmount record write (bsc#1114427).
- xfs: refactor xfs_trans_roll (bsc#1133667).
- xfs: reflink find shared should take a transaction (bsc#1132226, bsc#1132219).
- xfs: reflink should break pnfs leases before sharing blocks (bsc#1132369, bsc#1132219).
- xfs: remove dest file's post-eof preallocations before reflinking (bsc#1132365, bsc#1132219).
- xfs: remove the ip argument to xfs_defer_finish (bsc#1133672).
- xfs: remove unneeded parameter from XFS_TEST_ERROR (bsc#1123663).
- xfs: remove xfs_zero_range (bsc#1106011).
- xfs: rename MAXPATHLEN to XFS_SYMLINK_MAXLEN (bsc#1123663).
- xfs: rename xfs_defer_join to xfs_defer_ijoin (bsc#1133668).
- xfs: replace log_badcrc_factor knob with error injection tag (bsc#1114427).
- xfs: sanity-check the unused space before trying to use it (bsc#1123663).
- xfs: serialize unaligned dio writes against all other dio writes (bsc#1134936).
- xfs: update ctime and remove suid before cloning files (bsc#1132404, bsc#1132219).
- xfs: zero posteof blocks when cloning above eof (bsc#1132403, bsc#1132219).
- xsk: export xdp_get_umem_from_qid (jsc#SLE-4797).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-18"/>
	<updated date="2019-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1012382">SUSE bug 1012382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052904">SUSE bug 1052904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1053043">SUSE bug 1053043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055121">SUSE bug 1055121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1063638">SUSE bug 1063638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1068546">SUSE bug 1068546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1070872">SUSE bug 1070872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075020">SUSE bug 1075020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082387">SUSE bug 1082387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085535">SUSE bug 1085535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085536">SUSE bug 1085536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086657">SUSE bug 1086657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088804">SUSE bug 1088804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093389">SUSE bug 1093389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097583">SUSE bug 1097583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097584">SUSE bug 1097584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097585">SUSE bug 1097585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097586">SUSE bug 1097586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097587">SUSE bug 1097587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097588">SUSE bug 1097588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099658">SUSE bug 1099658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103186">SUSE bug 1103186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103259">SUSE bug 1103259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106011">SUSE bug 1106011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106284">SUSE bug 1106284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108193">SUSE bug 1108193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108838">SUSE bug 1108838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108937">SUSE bug 1108937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110946">SUSE bug 1110946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111331">SUSE bug 1111331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111696">SUSE bug 1111696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112063">SUSE bug 1112063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112128">SUSE bug 1112128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114427">SUSE bug 1114427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114542">SUSE bug 1114542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114638">SUSE bug 1114638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115688">SUSE bug 1115688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117114">SUSE bug 1117114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117158">SUSE bug 1117158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117561">SUSE bug 1117561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118139">SUSE bug 1118139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119680">SUSE bug 1119680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119843">SUSE bug 1119843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120091">SUSE bug 1120091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120318">SUSE bug 1120318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120423">SUSE bug 1120423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120566">SUSE bug 1120566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120843">SUSE bug 1120843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120902">SUSE bug 1120902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122767">SUSE bug 1122767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1122776">SUSE bug 1122776</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123454">SUSE bug 1123454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123663">SUSE bug 1123663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124503">SUSE bug 1124503</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124839">SUSE bug 1124839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126356">SUSE bug 1126356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126704">SUSE bug 1126704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127175">SUSE bug 1127175</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127374">SUSE bug 1127374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127616">SUSE bug 1127616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128052">SUSE bug 1128052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128415">SUSE bug 1128415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128544">SUSE bug 1128544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128904">SUSE bug 1128904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128971">SUSE bug 1128971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128979">SUSE bug 1128979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129138">SUSE bug 1129138</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129273">SUSE bug 1129273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129497">SUSE bug 1129497</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129693">SUSE bug 1129693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129845">SUSE bug 1129845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130195">SUSE bug 1130195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130425">SUSE bug 1130425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130527">SUSE bug 1130527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130567">SUSE bug 1130567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130579">SUSE bug 1130579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130699">SUSE bug 1130699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130937">SUSE bug 1130937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130972">SUSE bug 1130972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131326">SUSE bug 1131326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131427">SUSE bug 1131427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131438">SUSE bug 1131438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131451">SUSE bug 1131451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131467">SUSE bug 1131467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131488">SUSE bug 1131488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131530">SUSE bug 1131530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131565">SUSE bug 1131565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131574">SUSE bug 1131574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131587">SUSE bug 1131587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131659">SUSE bug 1131659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131673">SUSE bug 1131673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131847">SUSE bug 1131847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131848">SUSE bug 1131848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131851">SUSE bug 1131851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131900">SUSE bug 1131900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131934">SUSE bug 1131934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131935">SUSE bug 1131935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132044">SUSE bug 1132044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132219">SUSE bug 1132219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132226">SUSE bug 1132226</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132227">SUSE bug 1132227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132365">SUSE bug 1132365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132368">SUSE bug 1132368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132369">SUSE bug 1132369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132370">SUSE bug 1132370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132372">SUSE bug 1132372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132373">SUSE bug 1132373</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132384">SUSE bug 1132384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132397">SUSE bug 1132397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132402">SUSE bug 1132402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132403">SUSE bug 1132403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132404">SUSE bug 1132404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132405">SUSE bug 1132405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132407">SUSE bug 1132407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132411">SUSE bug 1132411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132412">SUSE bug 1132412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132413">SUSE bug 1132413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132414">SUSE bug 1132414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132426">SUSE bug 1132426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132527">SUSE bug 1132527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132531">SUSE bug 1132531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132555">SUSE bug 1132555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132558">SUSE bug 1132558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132561">SUSE bug 1132561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132562">SUSE bug 1132562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132563">SUSE bug 1132563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132564">SUSE bug 1132564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132570">SUSE bug 1132570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132571">SUSE bug 1132571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132572">SUSE bug 1132572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132589">SUSE bug 1132589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132618">SUSE bug 1132618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132673">SUSE bug 1132673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132681">SUSE bug 1132681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132726">SUSE bug 1132726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132828">SUSE bug 1132828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132894">SUSE bug 1132894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132943">SUSE bug 1132943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132982">SUSE bug 1132982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133005">SUSE bug 1133005</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133016">SUSE bug 1133016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133094">SUSE bug 1133094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133095">SUSE bug 1133095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133115">SUSE bug 1133115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133149">SUSE bug 1133149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133176">SUSE bug 1133176</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133188">SUSE bug 1133188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133190">SUSE bug 1133190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133320">SUSE bug 1133320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133486">SUSE bug 1133486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133529">SUSE bug 1133529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133547">SUSE bug 1133547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133584">SUSE bug 1133584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133593">SUSE bug 1133593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133612">SUSE bug 1133612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133616">SUSE bug 1133616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133667">SUSE bug 1133667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133668">SUSE bug 1133668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133672">SUSE bug 1133672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133674">SUSE bug 1133674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133675">SUSE bug 1133675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133698">SUSE bug 1133698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133702">SUSE bug 1133702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133731">SUSE bug 1133731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133769">SUSE bug 1133769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133772">SUSE bug 1133772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133774">SUSE bug 1133774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133778">SUSE bug 1133778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133779">SUSE bug 1133779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133780">SUSE bug 1133780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133825">SUSE bug 1133825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133850">SUSE bug 1133850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133851">SUSE bug 1133851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133852">SUSE bug 1133852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133897">SUSE bug 1133897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134160">SUSE bug 1134160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134162">SUSE bug 1134162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134199">SUSE bug 1134199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134200">SUSE bug 1134200</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134201">SUSE bug 1134201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134202">SUSE bug 1134202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134203">SUSE bug 1134203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134204">SUSE bug 1134204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134205">SUSE bug 1134205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134223">SUSE bug 1134223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134354">SUSE bug 1134354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134393">SUSE bug 1134393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134397">SUSE bug 1134397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134459">SUSE bug 1134459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134460">SUSE bug 1134460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134461">SUSE bug 1134461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134597">SUSE bug 1134597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134600">SUSE bug 1134600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134607">SUSE bug 1134607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134618">SUSE bug 1134618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134651">SUSE bug 1134651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134671">SUSE bug 1134671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134760">SUSE bug 1134760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134806">SUSE bug 1134806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134810">SUSE bug 1134810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134813">SUSE bug 1134813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134848">SUSE bug 1134848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134936">SUSE bug 1134936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134945">SUSE bug 1134945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134946">SUSE bug 1134946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134947">SUSE bug 1134947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134948">SUSE bug 1134948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134949">SUSE bug 1134949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134950">SUSE bug 1134950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134951">SUSE bug 1134951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134952">SUSE bug 1134952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134953">SUSE bug 1134953</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134972">SUSE bug 1134972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134974">SUSE bug 1134974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134975">SUSE bug 1134975</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134980">SUSE bug 1134980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134981">SUSE bug 1134981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134983">SUSE bug 1134983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134987">SUSE bug 1134987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134989">SUSE bug 1134989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134990">SUSE bug 1134990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134994">SUSE bug 1134994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134995">SUSE bug 1134995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134998">SUSE bug 1134998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134999">SUSE bug 1134999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135006">SUSE bug 1135006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135007">SUSE bug 1135007</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135008">SUSE bug 1135008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135018">SUSE bug 1135018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135021">SUSE bug 1135021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135024">SUSE bug 1135024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135026">SUSE bug 1135026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135027">SUSE bug 1135027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135028">SUSE bug 1135028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135029">SUSE bug 1135029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135031">SUSE bug 1135031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135033">SUSE bug 1135033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135034">SUSE bug 1135034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135035">SUSE bug 1135035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135036">SUSE bug 1135036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135037">SUSE bug 1135037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135038">SUSE bug 1135038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135039">SUSE bug 1135039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135041">SUSE bug 1135041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135042">SUSE bug 1135042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135044">SUSE bug 1135044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135045">SUSE bug 1135045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135046">SUSE bug 1135046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135047">SUSE bug 1135047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135049">SUSE bug 1135049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135051">SUSE bug 1135051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135052">SUSE bug 1135052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135053">SUSE bug 1135053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135055">SUSE bug 1135055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135056">SUSE bug 1135056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135058">SUSE bug 1135058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135100">SUSE bug 1135100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135120">SUSE bug 1135120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135278">SUSE bug 1135278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135281">SUSE bug 1135281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135309">SUSE bug 1135309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135312">SUSE bug 1135312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135314">SUSE bug 1135314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135315">SUSE bug 1135315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135316">SUSE bug 1135316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135320">SUSE bug 1135320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135323">SUSE bug 1135323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135330">SUSE bug 1135330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135492">SUSE bug 1135492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135542">SUSE bug 1135542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135556">SUSE bug 1135556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135603">SUSE bug 1135603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135661">SUSE bug 1135661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135758">SUSE bug 1135758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136188">SUSE bug 1136188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136206">SUSE bug 1136206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136215">SUSE bug 1136215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136345">SUSE bug 1136345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136347">SUSE bug 1136347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136348">SUSE bug 1136348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136353">SUSE bug 1136353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136424">SUSE bug 1136424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136428">SUSE bug 1136428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136430">SUSE bug 1136430</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136432">SUSE bug 1136432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136434">SUSE bug 1136434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136435">SUSE bug 1136435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136438">SUSE bug 1136438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136439">SUSE bug 1136439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136456">SUSE bug 1136456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136469">SUSE bug 1136469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136477">SUSE bug 1136477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136478">SUSE bug 1136478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136498">SUSE bug 1136498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136573">SUSE bug 1136573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136586">SUSE bug 1136586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136881">SUSE bug 1136881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136935">SUSE bug 1136935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136990">SUSE bug 1136990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137151">SUSE bug 1137151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137152">SUSE bug 1137152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137153">SUSE bug 1137153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137162">SUSE bug 1137162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137201">SUSE bug 1137201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137224">SUSE bug 1137224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137232">SUSE bug 1137232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137233">SUSE bug 1137233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137236">SUSE bug 1137236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137372">SUSE bug 1137372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137429">SUSE bug 1137429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137444">SUSE bug 1137444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137586">SUSE bug 1137586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137739">SUSE bug 1137739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137752">SUSE bug 1137752</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138291">SUSE bug 1138291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138293">SUSE bug 1138293</bugzilla>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12126/">CVE-2018-12126</cve>
	<cve impact="moderate" cvss3="3.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12127/">CVE-2018-12127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-12130/">CVE-2018-12130</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16880/">CVE-2018-16880</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-7191/">CVE-2018-7191</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10124/">CVE-2019-10124</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11085/">CVE-2019-11085</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11091/">CVE-2019-11091</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-11477/">CVE-2019-11477</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11478/">CVE-2019-11478</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11479/">CVE-2019-11479</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11486/">CVE-2019-11486</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11487/">CVE-2019-11487</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11811/">CVE-2019-11811</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11815/">CVE-2019-11815</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11833/">CVE-2019-11833</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11884/">CVE-2019-11884</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-12382/">CVE-2019-12382</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12818/">CVE-2019-12818</cve>
	<cve impact="low" cvss3="3.4/CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12819/">CVE-2019-12819</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3846/">CVE-2019-3846</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3882/">CVE-2019-3882</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5489/">CVE-2019-5489</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8564/">CVE-2019-8564</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9003/">CVE-2019-9003</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9500/">CVE-2019-9500</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-9503/">CVE-2019-9503</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501533" comment="cluster-md-kmp-default-4.12.14-197.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501534" comment="dlm-kmp-default-4.12.14-197.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501535" comment="gfs2-kmp-default-4.12.14-197.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501536" comment="ocfs2-kmp-default-4.12.14-197.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139096" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1125601" ref_url="https://bugzilla.suse.com/1125601" source="BUGZILLA"/>
		<reference ref_id="1130245" ref_url="https://bugzilla.suse.com/1130245" source="BUGZILLA"/>
		<reference ref_id="1134452" ref_url="https://bugzilla.suse.com/1134452" source="BUGZILLA"/>
		<reference ref_id="1134697" ref_url="https://bugzilla.suse.com/1134697" source="BUGZILLA"/>
		<reference ref_id="1137815" ref_url="https://bugzilla.suse.com/1137815" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12435" ref_url="https://www.suse.com/security/cve/CVE-2019-12435/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-June/005589.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

Security issues fixed:

- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).

Other issues fixed:

- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).
- Add ceph_snapshots VFS module; (jsc#SES-183).
- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).
- MacOS credit accounting breaks with async SESSION SETUP;
  (bsc#1125601); (bso#13796).
- Mac OS X SMB2 implmenetation sees Input/output error or Resource
  temporarily unavailable and drops connection; (bso#13698)
- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-06-20"/>
	<updated date="2019-06-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1125601">SUSE bug 1125601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130245">SUSE bug 1130245</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134452">SUSE bug 1134452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134697">SUSE bug 1134697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137815">SUSE bug 1137815</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12435/">CVE-2019-12435</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501537" comment="ctdb-4.9.5+git.176.375e1f05788-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139097" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1094555" ref_url="https://bugzilla.suse.com/1094555" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1128432" ref_url="https://bugzilla.suse.com/1128432" source="BUGZILLA"/>
		<reference ref_id="1134730" ref_url="https://bugzilla.suse.com/1134730" source="BUGZILLA"/>
		<reference ref_id="1134738" ref_url="https://bugzilla.suse.com/1134738" source="BUGZILLA"/>
		<reference ref_id="1135153" ref_url="https://bugzilla.suse.com/1135153" source="BUGZILLA"/>
		<reference ref_id="1135296" ref_url="https://bugzilla.suse.com/1135296" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1136156" ref_url="https://bugzilla.suse.com/1136156" source="BUGZILLA"/>
		<reference ref_id="1136157" ref_url="https://bugzilla.suse.com/1136157" source="BUGZILLA"/>
		<reference ref_id="1136271" ref_url="https://bugzilla.suse.com/1136271" source="BUGZILLA"/>
		<reference ref_id="1136333" ref_url="https://bugzilla.suse.com/1136333" source="BUGZILLA"/>
		<reference ref_id="1137103" ref_url="https://bugzilla.suse.com/1137103" source="BUGZILLA"/>
		<reference ref_id="1137194" ref_url="https://bugzilla.suse.com/1137194" source="BUGZILLA"/>
		<reference ref_id="1137366" ref_url="https://bugzilla.suse.com/1137366" source="BUGZILLA"/>
		<reference ref_id="1137884" ref_url="https://bugzilla.suse.com/1137884" source="BUGZILLA"/>
		<reference ref_id="1137985" ref_url="https://bugzilla.suse.com/1137985" source="BUGZILLA"/>
		<reference ref_id="1138263" ref_url="https://bugzilla.suse.com/1138263" source="BUGZILLA"/>
		<reference ref_id="1138336" ref_url="https://bugzilla.suse.com/1138336" source="BUGZILLA"/>
		<reference ref_id="1138374" ref_url="https://bugzilla.suse.com/1138374" source="BUGZILLA"/>
		<reference ref_id="1138375" ref_url="https://bugzilla.suse.com/1138375" source="BUGZILLA"/>
		<reference ref_id="1138589" ref_url="https://bugzilla.suse.com/1138589" source="BUGZILLA"/>
		<reference ref_id="1138681" ref_url="https://bugzilla.suse.com/1138681" source="BUGZILLA"/>
		<reference ref_id="1138719" ref_url="https://bugzilla.suse.com/1138719" source="BUGZILLA"/>
		<reference ref_id="1138732" ref_url="https://bugzilla.suse.com/1138732" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16871" ref_url="https://www.suse.com/security/cve/CVE-2018-16871/" source="CVE"/>
		<reference ref_id="CVE-2019-12614" ref_url="https://www.suse.com/security/cve/CVE-2019-12614/" source="CVE"/>
		<reference ref_id="CVE-2019-12817" ref_url="https://www.suse.com/security/cve/CVE-2019-12817/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1744-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005658.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

This update adds support for the Hygon Dhyana CPU (fate#327735).

The following security bugs were fixed:

- CVE-2019-12614: An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c. There was an unchecked kstrdup of prop-&gt;name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash) (bnc#1137194).
- CVE-2018-16871: A NULL pointer dereference due to an anomalized NFS message sequence was fixed. (bnc#1137103).
- CVE-2019-12817: On the PowerPC architecture, local attackers could access other users processes memory (bnc#1138263).

The following non-security bugs were fixed:

- 6lowpan: Off by one handling -&gt;nexthdr (bsc#1051510).
- acpi: Add Hygon Dhyana support (fate#327735).
- af_key: unconditionally clone on broadcast (bsc#1051510).
- alsa: firewire-motu: fix destruction of data for isochronous resources (bsc#1051510).
- alsa: hda/realtek - Update headset mode for ALC256 (bsc#1051510).
- alsa: oxfw: allow PCM capture for Stanton SCS.1m (bsc#1051510).
- ASoC: cs42xx8: Add regcache mask dirty (bsc#1051510).
- ASoC: fsl_asrc: Fix the issue about unsupported rate (bsc#1051510).
- audit: fix a memory leak bug (bsc#1051510).
- blk-mq: fix hang caused by freeze/unfreeze sequence (bsc#1128432).
- ceph: factor out ceph_lookup_inode() (bsc#1138681).
- ceph: fix NULL pointer deref when debugging is enabled (bsc#1138681).
- ceph: fix potential use-after-free in ceph_mdsc_build_path (bsc#1138681).
- ceph: flush dirty inodes before proceeding with remount (bsc#1138681).
- ceph: print inode number in __caps_issued_mask debugging messages (bsc#1138681).
- ceph: quota: fix quota subdir mounts (bsc#1138681).
- ceph: remove duplicated filelock ref increase (bsc#1138681).
- cfg80211: fix memory leak of wiphy device name (bsc#1051510).
- cpufreq: Add Hygon Dhyana support (fate#327735).
- cpufreq: AMD: Ignore the check for ProcFeedback in ST/CZ  (fate#327735).
- cpu/topology: Export die_id (jsc#SLE-5454).
- Do not restrict NFSv4.2 on openSUSE (bsc#1138719).
- drbd: Avoid Clang warning about pointless switch statment (bsc#1051510).
- drbd: disconnect, if the wrong UUIDs are attached on a connected peer (bsc#1051510).
- drbd: narrow rcu_read_lock in drbd_sync_handshake (bsc#1051510).
- drbd: skip spurious timeout (ping-timeo) when failing promote (bsc#1051510).
- drivers: depend on HAS_IOMEM for devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers: fix a typo in the kernel doc for devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers: provide devm_platform_ioremap_resource() (bsc#1136333 jsc#SLE-4994).
- drivers/rapidio/devices/rio_mport_cdev.c: fix resource leak in error handling path in 'rio_dma_transfer()' (bsc#1051510).
- drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen() (bsc#1051510).
- drivers: thermal: tsens: Do not print error message on -EPROBE_DEFER (bsc#1051510).
- drm: add fallback override/firmware EDID modes workaround (bsc#1111666).
- drm/amd/display: Use plane-&gt;color_space for dpp if specified (bsc#1111666).
- drm/edid: abstract override/firmware EDID retrieval (bsc#1111666).
- drm/i915: Add new AML_ULX support list (jsc#SLE-4986).
- drm/i915: Add new ICL PCI ID (jsc#SLE-4986).
- drm/i915/aml: Add new Amber Lake PCI ID (jsc#SLE-4986).
- drm/i915: Apply correct ddi translation table for AML device (jsc#SLE-4986).
- drm/i915: Attach the pci match data to the device upon creation (jsc#SLE-4986).
- drm/i915/cfl: Adding another PCI Device ID (jsc#SLE-4986).
- drm/i915/cml: Add CML PCI IDS (jsc#SLE-4986).
- drm/i915: Fix uninitialized mask in intel_device_info_subplatform_init (jsc#SLE-4986).
- drm/i915/icl: Adding few more device IDs for Ice Lake (jsc#SLE-4986).
- drm/i915: Introduce concept of a sub-platform (jsc#SLE-4986).
- drm/i915: Mark AML 0x87CA as ULX (jsc#SLE-4986).
- drm/i915: Move final cleanup of drm_i915_private to i915_driver_destroy (jsc#SLE-4986).
- drm/i915/perf: fix whitelist on Gen10+ (bsc#1051510).
- drm/i915: Remove redundant device id from IS_IRONLAKE_M macro (jsc#SLE-4986).
- drm/i915/sdvo: Implement proper HDMI audio support for SDVO (bsc#1051510).
- drm/i915: Split Pineview device info into desktop and mobile (jsc#SLE-4986).
- drm/i915: Split some PCI ids into separate groups (jsc#SLE-4986).
- drm/i915: start moving runtime device info to a separate struct (jsc#SLE-4986).
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver (bsc#1111666).
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable() (bsc#1111666).
- drm/mediatek: clear num_pipes when unbind driver (bsc#1111666).
- drm/mediatek: fix unbind functions (bsc#1111666).
- drm/mediatek: unbind components in mtk_drm_unbind() (bsc#1111666).
- drm/nouveau/disp/dp: respect sink limits when selecting failsafe link configuration (bsc#1051510).
- drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when encoders change (bsc#1111666).
- drm/nouveau/kms/gv100-: fix spurious window immediate interlocks (bsc#1111666).
- EDAC, amd64: Add Hygon Dhyana support (fate#327735).
- EDAC/mc: Fix edac_mc_find() in case no device is found (bsc#1114279).
- HID: wacom: Add ability to provide explicit battery status info (bsc#1051510).
- HID: wacom: Add support for 3rd generation Intuos BT (bsc#1051510).
- HID: wacom: Add support for Pro Pen slim (bsc#1051510).
- HID: wacom: convert Wacom custom usages to standard HID usages (bsc#1051510).
- HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth (bsc#1051510).
- HID: wacom: Do not report anything prior to the tool entering range (bsc#1051510).
- HID: wacom: Do not set tool type until we're in range (bsc#1051510).
- HID: wacom: fix mistake in printk (bsc#1051510).
- HID: wacom: generic: add the 'Report Valid' usage (bsc#1051510).
- HID: wacom: generic: Ignore HID_DG_BATTERYSTRENTH == 0 (bsc#1051510).
- HID: wacom: generic: Leave tool in prox until it completely leaves sense (bsc#1051510).
- HID: wacom: generic: Refactor generic battery handling (bsc#1051510).
- HID: wacom: generic: Report AES battery information (bsc#1051510).
- HID: wacom: generic: Reset events back to zero when pen leaves (bsc#1051510).
- HID: wacom: generic: Scale battery capacity measurements to percentages (bsc#1051510).
- HID: wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (bsc#1051510).
- HID: wacom: generic: Send BTN_TOOL_PEN in prox once the pen enters range (bsc#1051510).
- HID: wacom: generic: Support multiple tools per report (bsc#1051510).
- HID: wacom: generic: Use generic codepath terminology in wacom_wac_pen_report (bsc#1051510).
- HID: wacom: Mark expected switch fall-through (bsc#1051510).
- HID: wacom: Move handling of HID quirks into a dedicated function (bsc#1051510).
- HID: wacom: Move HID fix for AES serial number into wacom_hid_usage_quirk (bsc#1051510).
- HID: wacom: Properly handle AES serial number and tool type (bsc#1051510).
- HID: wacom: Queue events with missing type/serial data for later processing (bsc#1051510).
- HID: wacom: Remove comparison of u8 mode with zero and simplify (bsc#1051510).
- HID: wacom: Replace touch_max fixup code with static touch_max definitions (bsc#1051510).
- HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact (bsc#1051510).
- HID: wacom: Support 'in range' for Intuos/Bamboo tablets where possible (bsc#1051510).
- HID: Wacom: switch Dell canvas into highres mode (bsc#1051510).
- HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary (bsc#1051510).
- HID: wacom: wacom_wac_collection() is local to wacom_wac.c (bsc#1051510).
- HID: wacom: Work around HID descriptor bug in DTK-2451 and DTH-2452 (bsc#1051510).
- hwmon/coretemp: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).
- hwmon/coretemp: Support multi-die/package (jsc#SLE-5454).
- hwmon: (k10temp) 27C Offset needed for Threadripper2  (FATE#327735).
- hwmon: (k10temp) Add Hygon Dhyana support (FATE#327735).
- hwmon: (k10temp) Add support for AMD Ryzen w/ Vega graphics  (FATE#327735).
- hwmon: (k10temp) Add support for family 17h (FATE#327735).
- hwmon: (k10temp) Add support for Stoney Ridge and Bristol  Ridge CPUs (FATE#327735).
- hwmon: (k10temp) Add support for temperature offsets  (FATE#327735).
- hwmon: (k10temp) Add temperature offset for Ryzen 1900X  (FATE#327735).
- hwmon: (k10temp) Add temperature offset for Ryzen 2700X  (FATE#327735).
- hwmon: (k10temp) Correct model name for Ryzen 1600X  (FATE#327735).
- hwmon: (k10temp) Display both Tctl and Tdie (FATE#327735).
- hwmon: (k10temp) Fix reading critical temperature register  (FATE#327735).
- hwmon: (k10temp) Make function get_raw_temp static  (FATE#327735).
- hwmon: (k10temp) Move chip specific code into probe function  (FATE#327735).
- hwmon: (k10temp) Only apply temperature offset if result is  positive (FATE#327735).
- hwmon: (k10temp) Support all Family 15h Model 6xh and Model  7xh processors (FATE#327735).
- hwmon: k10temp: Support Threadripper 2920X, 2970WX; simplify  offset table (FATE#327735).
- hwmon: (k10temp) Use API function to access System Management  Network (FATE#327735).
- hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs  (FATE#327735).
- i2c-piix4: Add Hygon Dhyana SMBus support (FATE#327735).
- ibmveth: Update ethtool settings to reflect virtual properties (bsc#1136157, LTC#177197).
- ipv6: fib: Do not assume only nodes hold a reference on routes (bsc#1138732).
- kabi: Mask no_vf_scan in struct pci_dev (jsc#SLE-5803  FATE#327056).
- kabi: s390: enum interruption_class (jsc#SLE-5789 bsc#1134730 LTC#173388).
- kabi: s390: enum interruption_class (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- kabi/severities: Whitelist airq_iv_* (s390-specific)
- kABI workaround for asus-wmi changes (bsc#1051510).
- kABI workaround for the new pci_dev.skip_bus_pm field addition (bsc#1051510).
- kabi: x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).
- kabi: x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).
- kvm: x86: Include CPUID leaf 0x8000001e in kvm's supported CPUID (bsc#1114279).
- kvm: x86: Include multiple indices with CPUID leaf 0x8000001d (bsc#1114279).
- mfd: intel-lpss: Set the device in reset state when init (bsc#1051510).
- mfd: tps65912-spi: Add missing of table registration (bsc#1051510).
- mfd: twl6040: Fix device init errors for ACCCTL register (bsc#1051510).
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers (bsc#1051510).
- mmc: mmci: Prevent polling for busy detection in IRQ context (bsc#1051510).
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support (bsc#1051510).
- module: Fix livepatch/ftrace module text permissions race  (bsc#1071995 fate#323487).
- new primitive: vmemdup_user() (jsc#SLE-4712 bsc#1136156).
- nl80211: fix station_info pertid memory leak (bsc#1051510).
- {nl,mac}80211: allow 4addr AP operation on crypto controlled devices (bsc#1051510).
- nvmem: allow to select i.MX nvmem driver for i.MX 7D (bsc#1051510).
- nvmem: core: fix read buffer in place (bsc#1051510).
- nvmem: correct Broadcom OTP controller driver writes (bsc#1051510).
- nvmem: Do not let a NULL cell_id for nvmem_cell_get() crash us (bsc#1051510).
- nvmem: imx-ocotp: Add i.MX7D timing write clock setup support (bsc#1051510).
- nvmem: imx-ocotp: Add support for banked OTP addressing (bsc#1051510).
- nvmem: imx-ocotp: Enable i.MX7D OTP write support (bsc#1051510).
- nvmem: imx-ocotp: Move i.MX6 write clock setup to dedicated function (bsc#1051510).
- nvmem: imx-ocotp: Pass parameters via a struct (bsc#1051510).
- nvmem: imx-ocotp: Restrict OTP write to IMX6 processors (bsc#1051510).
- nvmem: imx-ocotp: Update module description (bsc#1051510).
- nvmem: properly handle returned value nvmem_reg_read (bsc#1051510).
- nvme: skip nvme_update_disk_info() if the controller is not live (bsc#1128432).
- PCI: Disable VF decoding before pcibios_sriov_disable() updates resources (jsc#SLE-5803).
- PCI/IOV: Add flag so platforms can skip VF scanning  (jsc#SLE-5803 FATE#327056).
- PCI/IOV: Factor out sriov_add_vfs() (jsc#SLE-5803 FATE#327056).
- PCI: PM: Avoid possible suspend-to-idle issue (bsc#1051510).
- perf tools: Add Hygon Dhyana support (fate#327735).
- perf/x86/intel/cstate: Support multi-die/package (jsc#SLE-5454).
- perf/x86/intel/rapl: Cosmetic rename internal variables in response to multi-die/pkg support (jsc#SLE-5454).
- perf/x86/intel/rapl: Support multi-die/package (jsc#SLE-5454).
- perf/x86/intel/uncore: Cosmetic renames in response to multi-die/pkg support (jsc#SLE-5454).
- perf/x86/intel/uncore: Support multi-die/package (jsc#SLE-5454).
- platform/chrome: cros_ec_proto: check for NULL transfer function (bsc#1051510).
- platform_data/mlxreg: Add capability field to core platform data (bsc#1112374).
- platform_data/mlxreg: additions for Mellanox watchdog driver (bsc#1112374).
- platform_data/mlxreg: Document fixes for core platform data (bsc#1112374).
- platform/mellanox: Add new ODM system types to mlx-platform (bsc#1112374).
- platform/mellanox: Add TmFifo driver for Mellanox BlueField Soc (bsc#1136333 jsc#SLE-4994).
- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to remove flow (bsc#1111666).
- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi (bsc#1051510).
- platform/x86: intel_pmc_core: Add ICL platform support (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Add Package cstates residency info (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Avoid a u32 overflow (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Include Reserved IP for LTR (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Mark local function static (jsc#SLE-5226).
- platform/x86: intel_pmc_core: Quirk to ignore XTAL shutdown (jsc#SLE-5226).
- platform/x86: mlx-platform: Add ASIC hotplug device configuration (bsc#1112374).
- platform/x86: mlx-platform: Add definitions for new registers (bsc#1112374).
- platform/x86: mlx-platform: Add extra CPLD for next generation systems (bsc#1112374).
- platform/x86: mlx-platform: Add LED platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlxreg-fan platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlxreg-io platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add mlx-wdt platform driver activation (bsc#1112374).
- platform/x86: mlx-platform: Add support for fan capability registers (bsc#1112374).
- platform/x86: mlx-platform: Add support for fan direction register (bsc#1112374).
- platform/x86: mlx-platform: Add support for new VMOD0007 board name (bsc#1112374).
- platform/x86: mlx-platform: Add support for tachometer speed register (bsc#1112374).
- platform/x86: mlx-platform: Add UID LED for the next generation systems (bsc#1112374).
- platform/x86: mlx-platform: Allow mlxreg-io driver activation for more systems (bsc#1112374).
- platform/x86: mlx-platform: Allow mlxreg-io driver activation for new systems (bsc#1112374).
- platform/x86: mlx-platform: Change mlxreg-io configuration for MSN274x systems (bsc#1112374).
- platform/x86: mlx-platform: Convert to use SPDX identifier (bsc#1112374).
- platform/x86: mlx-platform: Fix access mode for fan_dir attribute (bsc#1112374).
- platform/x86: mlx-platform: Fix copy-paste error in mlxplat_init() (bsc#1112374).
- platform/x86: mlx-platform: Fix LED configuration (bsc#1112374).
- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device registration (bsc#1051510).
- platform/x86: mlx-platform: Fix tachometer registers (bsc#1112374).
- platform/x86: mlx-platform: Remove unused define (bsc#1112374).
- platform/x86: mlx-platform: Rename new systems product names (bsc#1112374).
- PM / core: Propagate dev-&gt;power.wakeup_path when no callbacks (bsc#1051510).
- powercap/intel_rapl: Simplify rapl_find_package() (jsc#SLE-5454).
- powercap/intel_rapl: Support multi-die/package (jsc#SLE-5454).
- powercap/intel_rapl: Update RAPL domain name and debug messages (jsc#SLE-5454).
- powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (bsc#1138374, LTC#178199).
- powerpc/pseries: Fix oops in hotplug memory notifier (bsc#1138375, LTC#178204).
- powerpc/pseries/mobility: prevent cpu hotplug during DT update (bsc#1138374, LTC#178199).
- powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (bsc#1138374, LTC#178199).
- power: supply: max14656: fix potential use-before-alloc (bsc#1051510).
- power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG (bsc#1051510).
- qlcnic: Avoid potential NULL pointer dereference (bsc#1051510).
- qmi_wwan: add network device usage statistics for qmimux devices (bsc#1051510).
- qmi_wwan: Add quirk for Quectel dynamic config (bsc#1051510).
- qmi_wwan: add support for QMAP padding in the RX path (bsc#1051510).
- qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode (bsc#1051510).
- qmi_wwan: extend permitted QMAP mux_id value range (bsc#1051510).
- rapidio: fix a NULL pointer dereference when create_workqueue() fails (bsc#1051510).
- RAS/CEC: Convert the timer callback to a workqueue (bsc#1114279).
- RAS/CEC: Fix binary search function (bsc#1114279).
- rbd: do not assert on writes to snapshots (bsc#1137985 bsc#1138681).
- Revert 'ALSA: hda/realtek - Improve the headset mic for Acer Aspire laptops' (bsc#1051510).
- Revert 'HID: wacom: generic: Send BTN_TOOL_PEN in prox once the pen enters range' (bsc#1051510).
- Revert 's390/jump_label: Use 'jdd' constraint on gcc9 (bsc#1138589).' This broke the build with older gcc instead.
- s390/airq: provide cacheline aligned ivs (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/airq: recognize directed interrupts (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/dasd: fix using offset into zero size array error (bsc#1051510).
- s390: enable processes for mio instructions (jsc#SLE-5802  FATE#327055 bsc#1134738 LTC#173387).
- s390/ism: move oddities of device IO to wrapper function  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/jump_label: Use 'jdd' constraint on gcc9 (bsc#1138589).
- s390/pci: add parameter to disable usage of MIO instructions  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: add parameter to force floating irqs (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: clarify interrupt vector usage (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: fix assignment of bus resources (jsc#SLE-5802  FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: fix struct definition for set PCI function  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: gather statistics for floating vs directed irqs  (jsc#SLE-5789 FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: improve bar check (jsc#SLE-5803 FATE#327056).
- s390/pci: map IOV resources (jsc#SLE-5803 FATE#327056).
- s390/pci: mark command line parser data __initdata (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: move everything irq related to pci_irq.c (jsc#SLE-5789  FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: move io address mapping code to pci_insn.c  (jsc#SLE-5802 FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: provide support for CPU directed interrupts  (jsc#SLE-5789 FATE#327042 bsc#1134730 LTC#173388).
- s390/pci: provide support for MIO instructions (jsc#SLE-5802  FATE#327055 bsc#1134738 LTC#173387).
- s390/pci: remove stale rc (jsc#SLE-5789 FATE#327042 bsc#1134730  LTC#173388).
- s390/pci: remove unused define (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- s390/pci: skip VF scanning (jsc#SLE-5803 FATE#327056).
- s390/protvirt: add memory sharing for diag 308 set/store  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/protvirt: block kernel command line alteration  (jsc#SLE-5759 FATE#327003 bsc#1135153 LTC#173151).
- s390/qeth: fix race when initializing the IP address table (bsc#1051510).
- s390/qeth: fix VLAN attribute in bridge_hostnotify udev event (bsc#1051510).
- s390/sclp: detect DIRQ facility (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- s390/setup: fix early warning messages (bsc#1051510).
- s390: show statistics for MSI IRQs (jsc#SLE-5789 FATE#327042  bsc#1134730 LTC#173388).
- s390/uv: introduce guest side ultravisor code (jsc#SLE-5759  FATE#327003 bsc#1135153 LTC#173151).
- s390/virtio: handle find on invalid queue gracefully (bsc#1051510).
- sched/topology: Improve load balancing on AMD EPYC (bsc#1137366).
- scsi: hpsa: bump driver version (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: check for lv removal (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: clean up two indentation issues (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct device id issues (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct device resets (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct ioaccel2 chaining (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: correct simple mode (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: fix an uninitialized read and dereference of pointer dev (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: mark expected switch fall-throughs (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: remove timeout from TURs (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: switch to generic DMA API (jsc#SLE-4712 bsc#1136156).
- scsi: hpsa: Use vmemdup_user to replace the open code (jsc#SLE-4712 bsc#1136156).
- scsi: megaraid_sas: Add support for DEVICE_LIST DCMD in driver (bsc#1136271).
- scsi: megaraid_sas: correct an info message (bsc#1136271).
- scsi: megaraid_sas: driver version update (bsc#1136271).
- scsi: megaraid_sas: Retry reads of outbound_intr_status reg (bsc#1136271).
- scsi: megaraid_sas: Rework code to get PD and LD list (bsc#1136271).
- scsi: megaraid_sas: Rework device add code in AEN path (bsc#1136271).
- scsi: megaraid_sas: Update structures for HOST_DEVICE_LIST DCMD (bsc#1136271).
- scsi: qla2xxx: Fix FC-AL connection target discovery (bsc#1094555).
- scsi: qla2xxx: Fix N2N target discovery with Local loop (bsc#1094555).
- scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (bsc#1135296).
- scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove (bsc#1051510).
- scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host (bsc#1051510).
- scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices (bsc#1051510).
- scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) (bsc#1051510).
- serial: sh-sci: disable DMA for uart_console (bsc#1051510).
- SMB3: Fix endian warning (bsc#1137884).
- soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher (bsc#1051510).
- soc: rockchip: Set the proper PWM for rk3288 (bsc#1051510).
- spi: bitbang: Fix NULL pointer dereference in spi_unregister_master (bsc#1051510).
- spi: Fix zero length xfer bug (bsc#1051510).
- spi: pxa2xx: fix SCR (divisor) calculation (bsc#1051510).
- spi: spi-fsl-spi: call spi_finalize_current_message() at the end (bsc#1051510).
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers (bsc#1051510).
- spi: tegra114: reset controller on probe (bsc#1051510).
- supported.conf: added mlxbf_tmfifo (bsc#1136333 jsc#SLE-4994)
- thermal: rcar_gen3_thermal: disable interrupt in .remove (bsc#1051510).
- thermal/x86_pkg_temp_thermal: Cosmetic: Rename internal variables to zones from packages (jsc#SLE-5454).
- thermal/x86_pkg_temp_thermal: Support multi-die/package (jsc#SLE-5454).
- tmpfs: fix link accounting when a tmpfile is linked in (bsc#1051510).
- tmpfs: fix uninitialized return value in shmem_link (bsc#1051510).
- tools/cpupower: Add Hygon Dhyana support (fate#327735).
- topology: Create core_cpus and die_cpus sysfs attributes (jsc#SLE-5454).
- topology: Create package_cpus sysfs attribute (jsc#SLE-5454).
- tty: max310x: Fix external crystal register setup (bsc#1051510).
- usb: dwc2: Fix DMA cache alignment issues (bsc#1051510).
- usb: serial: pl2303: fix tranceiver suspend mode (bsc#1135642).
- usb: xhci: avoid null pointer deref when bos field is NULL (bsc#1135642).
- vfio: ccw: only free cp on final interrupt (bsc#1051510).
- video: hgafb: fix potential NULL pointer dereference (bsc#1051510).
- video: imsttfb: fix potential NULL pointer dereferences (bsc#1051510).
- virtio_console: initialize vtermno value for ports (bsc#1051510).
- vlan: disable SIOCSHWTSTAMP in container (bsc#1051510).
- watchdog: imx2_wdt: Fix set_timeout for big timeout values (bsc#1051510).
- x86/alternative: Init ideal_nops for Hygon Dhyana (fate#327735).
- x86/amd_nb: Add support for Raven Ridge CPUs (FATE#327735).
- x86/amd_nb: Check vendor in AMD-only functions (fate#327735).
- x86/apic: Add Hygon Dhyana support (fate#327735).
- x86/bugs: Add Hygon Dhyana to the respective mitigation  machinery (fate#327735).
- x86/cpu: Add Icelake model number (jsc#SLE-5226).
- x86/cpu/amd: Do not force the CPB cap when running under a hypervisor (bsc#1114279).
- x86/cpu: Create Hygon Dhyana architecture support file  (fate#327735).
- x86/cpufeatures: Carve out CQM features retrieval (jsc#SLE-5382).
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (jsc#SLE-5382).
- x86/cpufeatures: Enumerate the new AVX512 BFLOAT16 instructions (jsc#SLE-5382).
- x86/cpu: Get cache info and setup cache cpumap for Hygon Dhyana  (fate#327735).
- x86/cpu/hygon: Fix phys_proc_id calculation logic for multi-die processors ().
- x86/cpu/mtrr: Support TOP_MEM2 and get MTRR number  (fate#327735).
- x86/events: Add Hygon Dhyana support to PMU infrastructure  (fate#327735).
- x86/kvm: Add Hygon Dhyana support to KVM (fate#327735).
- x86/mce: Add Hygon Dhyana support to the MCA infrastructure  (fate#327735).
- x86/mce: Do not disable MCA banks when offlining a CPU on AMD  (fate#327735).
- x86/mce: Fix machine_check_poll() tests for error types (bsc#1114279).
- x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback (bsc#1114279).
- x86/microcode: Fix microcode hotplug state (bsc#1114279).
- x86/microcode: Fix the ancient deprecated microcode loading method (bsc#1114279).
- x86/mm/mem_encrypt: Disable all instrumentation for early SME setup (bsc#1114279).
- x86/pci, x86/amd_nb: Add Hygon Dhyana support to PCI and  northbridge (fate#327735).
- x86/smpboot: Do not use BSP INIT delay and MWAIT to idle on  Dhyana (fate#327735).
- x86/smpboot: Rename match_die() to match_pkg() (jsc#SLE-5454).
- x86/speculation/mds: Revert CPU buffer clear on double fault exit (bsc#1114279).
- x86/topology: Add CPUID.1F multi-die/package support (jsc#SLE-5454).
- x86/topology: Create topology_max_die_per_package() (jsc#SLE-5454).
- x86/topology: Define topology_die_id() (jsc#SLE-5454).
- x86/topology: Define topology_logical_die_id() (jsc#SLE-5454).
- x86/umip: Make the UMIP activated message generic (bsc#1138336).
- x86/umip: Print UMIP line only once (bsc#1138336).
- x86/xen: Add Hygon Dhyana support to Xen (fate#327735).
- x86/CPU/hygon: Fix phys_proc_id calculation logic for multi-die  processors (fate#327735).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-04"/>
	<updated date="2019-07-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094555">SUSE bug 1094555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128432">SUSE bug 1128432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134730">SUSE bug 1134730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134738">SUSE bug 1134738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135153">SUSE bug 1135153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135296">SUSE bug 1135296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136156">SUSE bug 1136156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136157">SUSE bug 1136157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136271">SUSE bug 1136271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136333">SUSE bug 1136333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137103">SUSE bug 1137103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137194">SUSE bug 1137194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137366">SUSE bug 1137366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137884">SUSE bug 1137884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137985">SUSE bug 1137985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138263">SUSE bug 1138263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138336">SUSE bug 1138336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138374">SUSE bug 1138374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138375">SUSE bug 1138375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138589">SUSE bug 1138589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138681">SUSE bug 1138681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138719">SUSE bug 1138719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138732">SUSE bug 1138732</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-16871/">CVE-2018-16871</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12614/">CVE-2019-12614</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-12817/">CVE-2019-12817</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501538" comment="cluster-md-kmp-default-4.12.14-197.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501539" comment="dlm-kmp-default-4.12.14-197.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501540" comment="gfs2-kmp-default-4.12.14-197.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501541" comment="ocfs2-kmp-default-4.12.14-197.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139098" version="1" class="patch">
	<metadata>
		<title>Security update for libqb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1137835" ref_url="https://bugzilla.suse.com/1137835" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12779" ref_url="https://www.suse.com/security/cve/CVE-2019-12779/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005682.html" source="SUSE-SU"/>
		<description>
This update for libqb fixes the following issue:

Security issue fixed:	  

- CVE-2019-12779: Fixed an insecure treatment of IPC temporary files which could
  have allowed a local attacker to overwrite privileged system files (bsc#1137835).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-09"/>
	<updated date="2019-07-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1137835">SUSE bug 1137835</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-12779/">CVE-2019-12779</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501542" comment="libqb-devel-1.0.3+20190326.a521604-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501543" comment="libqb-tests-1.0.3+20190326.a521604-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501544" comment="libqb-tools-1.0.3+20190326.a521604-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501545" comment="libqb20-1.0.3+20190326.a521604-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139099" version="1" class="patch">
	<metadata>
		<title>Security update for fence-agents (Low)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1137314" ref_url="https://bugzilla.suse.com/1137314" source="BUGZILLA"/>
		<reference ref_id="1139913" ref_url="https://bugzilla.suse.com/1139913" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10153" ref_url="https://www.suse.com/security/cve/CVE-2019-10153/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005692.html" source="SUSE-SU"/>
		<description>
This update for fence-agents version 4.4.0 fixes the following issues:

Security issue fixed:

- CVE-2019-10153: Fixed a denial of service via guest VM comments (bsc#1137314).

Non-security issue fixed:

- Added aliyun fence agent (bsc#1139913).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-11"/>
	<updated date="2019-07-11"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1137314">SUSE bug 1137314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139913">SUSE bug 1139913</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10153/">CVE-2019-10153</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501546" comment="fence-agents-4.4.0+git.1558595666.5f79f9e9-7.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501547" comment="fence-agents-devel-4.4.0+git.1558595666.5f79f9e9-7.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139100" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1088047" ref_url="https://bugzilla.suse.com/1088047" source="BUGZILLA"/>
		<reference ref_id="1098633" ref_url="https://bugzilla.suse.com/1098633" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1106383" ref_url="https://bugzilla.suse.com/1106383" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1119532" ref_url="https://bugzilla.suse.com/1119532" source="BUGZILLA"/>
		<reference ref_id="1120423" ref_url="https://bugzilla.suse.com/1120423" source="BUGZILLA"/>
		<reference ref_id="1125703" ref_url="https://bugzilla.suse.com/1125703" source="BUGZILLA"/>
		<reference ref_id="1128902" ref_url="https://bugzilla.suse.com/1128902" source="BUGZILLA"/>
		<reference ref_id="1130836" ref_url="https://bugzilla.suse.com/1130836" source="BUGZILLA"/>
		<reference ref_id="1131645" ref_url="https://bugzilla.suse.com/1131645" source="BUGZILLA"/>
		<reference ref_id="1132390" ref_url="https://bugzilla.suse.com/1132390" source="BUGZILLA"/>
		<reference ref_id="1133401" ref_url="https://bugzilla.suse.com/1133401" source="BUGZILLA"/>
		<reference ref_id="1133738" ref_url="https://bugzilla.suse.com/1133738" source="BUGZILLA"/>
		<reference ref_id="1134303" ref_url="https://bugzilla.suse.com/1134303" source="BUGZILLA"/>
		<reference ref_id="1134395" ref_url="https://bugzilla.suse.com/1134395" source="BUGZILLA"/>
		<reference ref_id="1135556" ref_url="https://bugzilla.suse.com/1135556" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135897" ref_url="https://bugzilla.suse.com/1135897" source="BUGZILLA"/>
		<reference ref_id="1136161" ref_url="https://bugzilla.suse.com/1136161" source="BUGZILLA"/>
		<reference ref_id="1136264" ref_url="https://bugzilla.suse.com/1136264" source="BUGZILLA"/>
		<reference ref_id="1136343" ref_url="https://bugzilla.suse.com/1136343" source="BUGZILLA"/>
		<reference ref_id="1136935" ref_url="https://bugzilla.suse.com/1136935" source="BUGZILLA"/>
		<reference ref_id="1137625" ref_url="https://bugzilla.suse.com/1137625" source="BUGZILLA"/>
		<reference ref_id="1137728" ref_url="https://bugzilla.suse.com/1137728" source="BUGZILLA"/>
		<reference ref_id="1138879" ref_url="https://bugzilla.suse.com/1138879" source="BUGZILLA"/>
		<reference ref_id="1139712" ref_url="https://bugzilla.suse.com/1139712" source="BUGZILLA"/>
		<reference ref_id="1139751" ref_url="https://bugzilla.suse.com/1139751" source="BUGZILLA"/>
		<reference ref_id="1139771" ref_url="https://bugzilla.suse.com/1139771" source="BUGZILLA"/>
		<reference ref_id="1139865" ref_url="https://bugzilla.suse.com/1139865" source="BUGZILLA"/>
		<reference ref_id="1140133" ref_url="https://bugzilla.suse.com/1140133" source="BUGZILLA"/>
		<reference ref_id="1140228" ref_url="https://bugzilla.suse.com/1140228" source="BUGZILLA"/>
		<reference ref_id="1140328" ref_url="https://bugzilla.suse.com/1140328" source="BUGZILLA"/>
		<reference ref_id="1140405" ref_url="https://bugzilla.suse.com/1140405" source="BUGZILLA"/>
		<reference ref_id="1140424" ref_url="https://bugzilla.suse.com/1140424" source="BUGZILLA"/>
		<reference ref_id="1140428" ref_url="https://bugzilla.suse.com/1140428" source="BUGZILLA"/>
		<reference ref_id="1140454" ref_url="https://bugzilla.suse.com/1140454" source="BUGZILLA"/>
		<reference ref_id="1140463" ref_url="https://bugzilla.suse.com/1140463" source="BUGZILLA"/>
		<reference ref_id="1140575" ref_url="https://bugzilla.suse.com/1140575" source="BUGZILLA"/>
		<reference ref_id="1140577" ref_url="https://bugzilla.suse.com/1140577" source="BUGZILLA"/>
		<reference ref_id="1140637" ref_url="https://bugzilla.suse.com/1140637" source="BUGZILLA"/>
		<reference ref_id="1140658" ref_url="https://bugzilla.suse.com/1140658" source="BUGZILLA"/>
		<reference ref_id="1140715" ref_url="https://bugzilla.suse.com/1140715" source="BUGZILLA"/>
		<reference ref_id="1140719" ref_url="https://bugzilla.suse.com/1140719" source="BUGZILLA"/>
		<reference ref_id="1140726" ref_url="https://bugzilla.suse.com/1140726" source="BUGZILLA"/>
		<reference ref_id="1140727" ref_url="https://bugzilla.suse.com/1140727" source="BUGZILLA"/>
		<reference ref_id="1140728" ref_url="https://bugzilla.suse.com/1140728" source="BUGZILLA"/>
		<reference ref_id="1140814" ref_url="https://bugzilla.suse.com/1140814" source="BUGZILLA"/>
		<reference ref_id="1140887" ref_url="https://bugzilla.suse.com/1140887" source="BUGZILLA"/>
		<reference ref_id="1140888" ref_url="https://bugzilla.suse.com/1140888" source="BUGZILLA"/>
		<reference ref_id="1140889" ref_url="https://bugzilla.suse.com/1140889" source="BUGZILLA"/>
		<reference ref_id="1140891" ref_url="https://bugzilla.suse.com/1140891" source="BUGZILLA"/>
		<reference ref_id="1140893" ref_url="https://bugzilla.suse.com/1140893" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1140954" ref_url="https://bugzilla.suse.com/1140954" source="BUGZILLA"/>
		<reference ref_id="1140955" ref_url="https://bugzilla.suse.com/1140955" source="BUGZILLA"/>
		<reference ref_id="1140956" ref_url="https://bugzilla.suse.com/1140956" source="BUGZILLA"/>
		<reference ref_id="1140957" ref_url="https://bugzilla.suse.com/1140957" source="BUGZILLA"/>
		<reference ref_id="1140958" ref_url="https://bugzilla.suse.com/1140958" source="BUGZILLA"/>
		<reference ref_id="1140959" ref_url="https://bugzilla.suse.com/1140959" source="BUGZILLA"/>
		<reference ref_id="1140960" ref_url="https://bugzilla.suse.com/1140960" source="BUGZILLA"/>
		<reference ref_id="1140961" ref_url="https://bugzilla.suse.com/1140961" source="BUGZILLA"/>
		<reference ref_id="1140962" ref_url="https://bugzilla.suse.com/1140962" source="BUGZILLA"/>
		<reference ref_id="1140964" ref_url="https://bugzilla.suse.com/1140964" source="BUGZILLA"/>
		<reference ref_id="1140971" ref_url="https://bugzilla.suse.com/1140971" source="BUGZILLA"/>
		<reference ref_id="1140972" ref_url="https://bugzilla.suse.com/1140972" source="BUGZILLA"/>
		<reference ref_id="1140992" ref_url="https://bugzilla.suse.com/1140992" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20836" ref_url="https://www.suse.com/security/cve/CVE-2018-20836/" source="CVE"/>
		<reference ref_id="CVE-2019-10126" ref_url="https://www.suse.com/security/cve/CVE-2019-10126/" source="CVE"/>
		<reference ref_id="CVE-2019-10638" ref_url="https://www.suse.com/security/cve/CVE-2019-10638/" source="CVE"/>
		<reference ref_id="CVE-2019-10639" ref_url="https://www.suse.com/security/cve/CVE-2019-10639/" source="CVE"/>
		<reference ref_id="CVE-2019-11599" ref_url="https://www.suse.com/security/cve/CVE-2019-11599/" source="CVE"/>
		<reference ref_id="CVE-2019-13233" ref_url="https://www.suse.com/security/cve/CVE-2019-13233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:1854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-July/005712.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2019-10638: In the Linux kernel, a device could be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic was sent to multiple destination IP addresses, it was possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may have been conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses (bnc#1140575 1140577).
- CVE-2019-10639: The Linux kernel allowed Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it was possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic was sent to multiple destination IP addresses, it was possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key was extracted (via enumeration), the offset of the kernel image was exposed. This attack could be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker's web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable because IP ID generation was changed to have a dependency on an address associated with a network namespace (bnc#1140577).
- CVE-2019-13233: In arch/x86/lib/insn-eval.c in the Linux kernel, there was a use-after-free for access to an LDT entry because of a race condition between modify_ldt() and a #BR exception for an MPX bounds violation (bnc#1140454).
- CVE-2018-20836: An issue was discovered in the Linux kernel There was a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free (bnc#1134395).
- CVE-2019-10126: A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might have lead to memory corruption and possibly other consequences (bnc#1136935).
- CVE-2019-11599: The coredump implementation in the Linux kernel did not use locking or other mechanisms to prevent vma layout or vma flags changes while it ran, which allowed local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls. This is related to fs/userfaultfd.c, mm/mmap.c, fs/proc/task_mmu.c, and drivers/infiniband/core/uverbs_main.c (bnc#1131645 1133738).

The following non-security bugs were fixed:

- Abort file_remove_privs() for non-reg. files (bsc#1140888).
- acpica: Clear status of GPEs on first direct enable (bsc#1111666).
- acpi: PM: Allow transitions to D0 to occur in special cases (bsc#1051510).
- acpi: PM: Avoid evaluating _PS3 on transitions from D3hot to D3cold (bsc#1051510).
- alsa: firewire-lib/fireworks: fix miss detection of received MIDI messages (bsc#1051510).
- alsa: hda - Force polling mode on CNL for fixing codec communication (bsc#1051510).
- alsa: hda/realtek: Add quirks for several Clevo notebook barebones (bsc#1051510).
- alsa: hda/realtek - Change front mic location for Lenovo M710q (bsc#1051510).
- alsa: line6: Fix write on zero-sized buffer (bsc#1051510).
- alsa: seq: fix incorrect order of dest_client/dest_ports arguments (bsc#1051510).
- alsa: usb-audio: Fix parse of UAC2 Extension Units (bsc#1111666).
- alsa: usb-audio: fix sign unintended sign extension on left shifts (bsc#1051510).
- apparmor: enforce nullbyte at end of tag string (bsc#1051510).
- asoc: cx2072x: fix integer overflow on unsigned int multiply (bsc#1111666).
- ax25: fix inconsistent lock state in ax25_destroy_timer (bsc#1051510).
- Backporting hwpoison fixes  - mm: hugetlb: prevent reuse of hwpoisoned free hugepages   (bsc#1139712).  - mm: hwpoison: change PageHWPoison behavior on hugetlb pages   (bsc#1139712).  - mm: hugetlb: soft-offline: dissolve source hugepage after   successful migration (bsc#1139712).  - mm: soft-offline: dissolve free hugepage if soft-offlined   (bsc#1139712).  - mm: hwpoison: introduce memory_failure_hugetlb() (bsc#1139712).  - mm: hwpoison: dissolve in-use hugepage in unrecoverable memory   error (bsc#1139712).  - mm: hugetlb: delete dequeue_hwpoisoned_huge_page()   (bsc#1139712).  - mm: hwpoison: introduce idenfity_page_state (bsc#1139712).  - mm: hugetlb: soft_offline: save compound page order before   page migration (bsc#1139712)  - fs: hugetlbfs: fix hwpoison reserve accounting (bsc#1139712)  - mm: fix race on soft-offlining free huge pages (bsc#1139712).  - mm: soft-offline: close the race against page allocation   (bsc#1139712).  - mm: soft-offline: return -EBUSY if   set_hwpoison_free_buddy_page() fails (bsc#1139712).  - mm: hugetlb: soft-offline: dissolve_free_huge_page() return   zero on !PageHuge (bsc#bsc#1139712).
- blk-mq: free hw queue's resource in hctx's release handler (bsc#1140637).
- block: Fix a NULL pointer dereference in generic_make_request() (bsc#1139771).
- bluetooth: Fix faulty expression for minimum encryption key size check (bsc#1140328).
- bpf, devmap: Add missing bulk queue free (bsc#1109837).
- bpf, devmap: Add missing RCU read lock on flush (bsc#1109837).
- bpf, devmap: Fix premature entry free on destroying map (bsc#1109837).
- bpf: devmap: fix use-after-free Read in __dev_map_entry_free (bsc#1109837).
- bpf: lpm_trie: check left child of last leftmost node for NULL (bsc#1109837).
- bpf: sockmap fix msg-&gt;sg.size account on ingress skb (bsc#1109837).
- bpf: sockmap, fix use after free from sleep in psock backlog workqueue (bsc#1109837).
- bpf: sockmap remove duplicate queue free (bsc#1109837).
- bpf, tcp: correctly handle DONT_WAIT flags and timeo == 0 (bsc#1109837).
- can: af_can: Fix error path of can_init() (bsc#1051510).
- can: flexcan: fix timeout when set small bitrate (bsc#1051510).
- can: purge socket error queue on sock destruct (bsc#1051510).
- ceph: flush dirty inodes before proceeding with remount (bsc#1140405).
- clk: rockchip: Turn on 'aclk_dmac1' for suspend on rk3288 (bsc#1051510).
- clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider (bsc#1051510).
- coresight: etb10: Fix handling of perf mode (bsc#1051510).
- coresight: etm4x: Add support to enable ETMv4.2 (bsc#1051510).
- crypto: algapi - guard against uninitialized spawn list in crypto_remove_spawns (bsc#1133401).
- crypto: cryptd - Fix skcipher instance memory leak (bsc#1051510).
- crypto: user - prevent operating on larval algorithms (bsc#1133401).
- dax: Fix xarray entry association for mixed mappings (bsc#1140893).
- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- device core: Consolidate locking and unlocking of parent and device (bsc#1106383).
- dmaengine: imx-sdma: remove BD_INTR for channel0 (bsc#1051510).
- doc: Cope with the deprecation of AutoReporter (bsc#1051510).
- documentation/ABI: Document umwait control sysfs interfaces (jsc#SLE-5187).
- documentation: DMA-API: fix a function name of max_mapping_size (bsc#1140954).
- driver core: Establish order of operations for device_add and device_del via bitflag (bsc#1106383).
- driver core: Probe devices asynchronously instead of the driver (bsc#1106383).
- drivers/base/devres: introduce devm_release_action() (bsc#1103992).
- drivers/base: Introduce kill_device() (bsc#1139865).
- drivers/base: kABI fixes for struct device_private (bsc#1106383).
- drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var (bsc#1051510).
- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE (bsc#1051510).
- drm/amd/powerplay: use hardware fan control if no powerplay fan table (bsc#1111666).
- drm/arm/hdlcd: Actually validate CRTC modes (bsc#1111666).
- drm/arm/hdlcd: Allow a bit of clock tolerance (bsc#1051510).
- drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times (bsc#1111666).
- drm/etnaviv: add missing failure path to destroy suballoc (bsc#1111666).
- drm/fb-helper: generic: Do not take module ref for fbcon (bsc#1111666).
- drm: Fix drm_release() and device unplug (bsc#1111666).
- drm/i915/dmc: protect against reading random memory (bsc#1051510).
- drm/i915/gvt: ignore unexpected pvinfo write (bsc#1051510).
- drm/imx: notify drm core before sending event during crtc disable (bsc#1111666).
- drm/imx: only send event on crtc disable if kept disabled (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for GPD pocket2 (bsc#1111666).
- drm/vmwgfx: fix a warning due to missing dma_parms (bsc#1111666).
- drm/vmwgfx: Use the backdoor port if the HB port is not available (bsc#1111666).
- ext4: do not delete unlinked inode from orphan list on failed truncate (bsc#1140891).
- failover: allow name change on IFF_UP slave interfaces (bsc#1109837).
- fs/ocfs2: fix race in ocfs2_dentry_attach_lock() (bsc#1140889).
- fs/proc/proc_sysctl.c: Fix a NULL pointer dereference (bsc#1140887).
- fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links (bsc#1140887).
- ftrace/x86: Remove possible deadlock between register_kprobe() and ftrace_run_update_code() (bsc#1071995).
- genirq: Prevent use-after-free and work list corruption (bsc#1051510).
- genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent() (bsc#1051510).
- genwqe: Prevent an integer overflow in the ioctl (bsc#1051510).
- gpio: omap: fix lack of irqstatus_raw0 for OMAP4 (bsc#1051510).
- hugetlbfs: dirty pages as they are added to pagecache (git fixes (mm/hugetlbfs)).
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (git fixes (mm/hugetlbfs)).
- i2c: acorn: fix i2c warning (bsc#1135642).
- i2c: mlxcpld: Add support for extended transaction length for i2c-mlxcpld (bsc#1112374).
- i2c: mlxcpld: Add support for smbus block read transaction (bsc#1112374).
- i2c: mlxcpld: Allow configurable adapter id for mlxcpld (bsc#1112374).
- i2c: mlxcpld: Fix adapter functionality support callback (bsc#1112374).
- i2c: mlxcpld: Fix wrong initialization order in probe (bsc#1112374).
- i2c: mux: mlxcpld: simplify code to reach the adapter (bsc#1112374).
- ib/hfi1: Clear the IOWAIT pending bits when QP is put into error state (bsc#1114685).
- ib/hfi1: Create inline to get extended headers (bsc#1114685 ).
- ib/hfi1: Validate fault injection opcode user input (bsc#1114685 ).
- ib/mlx5: Verify DEVX general object type correctly (bsc#1103991 ).
- input: synaptics - enable SMBus on ThinkPad E480 and E580 (bsc#1051510).
- input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD (bsc#1051510).
- iommu/amd: Make iommu_disable safer (bsc#1140955).
- iommu/arm-smmu: Add support for qcom,smmu-v2 variant (bsc#1051510).
- iommu/arm-smmu: Avoid constant zero in TLBI writes (bsc#1140956).
- iommu/arm-smmu-v3: Fix big-endian CMD_SYNC writes (bsc#1111666).
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register (bsc#1051510).
- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer (bsc#1051510).
- iommu: Fix a leak in iommu_insert_resv_region (bsc#1140957).
- iommu: Use right function to get group for device (bsc#1140958).
- iommu/vt-d: Duplicate iommu_resv_region objects per device list (bsc#1140959).
- iommu/vt-d: Handle PCI bridge RMRR device scopes in intel_iommu_get_resv_regions (bsc#1140960).
- iommu/vt-d: Handle RMRR with PCI bridge device scopes (bsc#1140961).
- iommu/vt-d: Introduce is_downstream_to_pci_bridge helper (bsc#1140962).
- iommu/vt-d: Remove unnecessary rcu_read_locks (bsc#1140964).
- iov_iter: Fix build error without CONFIG_CRYPTO (bsc#1111666).
- irqchip/gic-v3-its: fix some definitions of inner cacheability attributes (bsc#1051510).
- irqchip/mbigen: Do not clear eventid when freeing an MSI (bsc#1051510).
- ixgbe: Avoid NULL pointer dereference with VF on non-IPsec hw (bsc#1140228).
- kabi fixup blk_mq_register_dev() (bsc#1140637).
- kernel-binary: fix missing \
- kernel-binary: rpm does not support multiline condition
- kernel-binary: Use -c grep option in klp project detection.
- kvm: svm/avic: fix off-by-one in checking host APIC ID (bsc#1140971).
- kvm: x86: fix return value for reserved EFER (bsc#1140992).
- kvm: x86: Skip EFER vs. guest CPUID checks for host-initiated writes (bsc#1140972).
- libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk (bsc#1051510).
- libceph: assign cookies in linger_submit() (bsc#1135897).
- libceph: check reply num_data_items in setup_request_data() (bsc#1135897).
- libceph: do not consume a ref on pagelist in ceph_msg_data_add_pagelist() (bsc#1135897).
- libceph: enable fallback to ceph_msg_new() in ceph_msgpool_get() (bsc#1135897).
- libceph: introduce alloc_watch_request() (bsc#1135897).
- libceph: introduce ceph_pagelist_alloc() (bsc#1135897).
- libceph: preallocate message data items (bsc#1135897).
- libceph, rbd: add error handling for osd_req_op_cls_init() (bsc#1135897). This feature was requested for SLE15 but aws reverted in packaging and master.
- libceph, rbd, ceph: move ceph_osdc_alloc_messages() calls (bsc#1135897).
- libnvdimm/bus: Prevent duplicate device_unregister() calls (bsc#1139865).
- libnvdimm, pfn: Fix over-trim in trim_pfn_device() (bsc#1140719).
- mac80211: Do not use stack memory with scatterlist for GMAC (bsc#1051510).
- mac80211: drop robust management frames from unknown TA (bsc#1051510).
- mac80211: handle deauthentication/disassociation from TDLS peer (bsc#1051510).
- media: v4l2-ioctl: clear fields in s_parm (bsc#1051510).
- mfd: hi655x: Fix regmap area declared size for hi655x (bsc#1051510).
- mISDN: make sure device name is NUL terminated (bsc#1051510).
- mlxsw: core: Add API for QSFP module temperature thresholds reading (bsc#1112374).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue (bsc#1112374).
- mlxsw: core: mlxsw: core: avoid -Wint-in-bool-context warning (bsc#1112374).
- mlxsw: core: Move ethtool module callbacks to a common location (bsc#1112374).
- mlxsw: core: Prevent reading unsupported slave address from SFP EEPROM (bsc#1112374).
- mlxsw: pci: Reincrease PCI reset timeout (bsc#1112374).
- mlxsw: reg: Add Management Temperature Bulk Register (bsc#1112374).
- mlxsw: spectrum_flower: Fix TOS matching (bsc#1112374).
- mlxsw: spectrum: Move QSFP EEPROM definitions to common location (bsc#1112374).
- mlxsw: spectrum: Put MC TCs into DWRR mode (bsc#1112374).
- mmc: core: complete HS400 before checking status (bsc#1111666).
- mmc: core: Prevent processing SDIO IRQs when the card is suspended (bsc#1051510).
- mm/devm_memremap_pages: introduce devm_memunmap_pages (bsc#1103992).
- mm/page_alloc.c: avoid potential NULL pointer dereference (git fixes (mm/pagealloc)).
- mm/page_alloc.c: fix never set ALLOC_NOFRAGMENT flag (git fixes (mm/pagealloc)).
- mm/vmscan.c: prevent useless kswapd loops (git fixes (mm/vmscan)).
- net: core: support XDP generic on stacked devices (bsc#1109837).
- net: do not clear sock-&gt;sk early to avoid trouble in strparser (bsc#1103990).
- net: ena: add ethtool function for changing io queue sizes (bsc#1138879).
- net: ena: add good checksum counter (bsc#1138879).
- net: ena: add handling of llq max tx burst size (bsc#1138879).
- net: ena: add MAX_QUEUES_EXT get feature admin command (bsc#1138879).
- net: ena: add newline at the end of pr_err prints (bsc#1138879).
- net: ena: add support for changing max_header_size in LLQ mode (bsc#1138879).
- net: ena: allow automatic fallback to polling mode (bsc#1138879).
- net: ena: allow queue allocation backoff when low on memory (bsc#1138879).
- net: ena: arrange ena_probe() function variables in reverse christmas tree (bsc#1138879).
- net: ena: enable negotiating larger Rx ring size (bsc#1138879).
- net: ena: ethtool: add extra properties retrieval via get_priv_flags (bsc#1138879).
- net: ena: Fix bug where ring allocation backoff stopped too late (bsc#1138879).
- net: ena: fix ena_com_fill_hash_function() implementation (bsc#1138879).
- net: ena: fix: Free napi resources when ena_up() fails (bsc#1138879).
- net: ena: fix incorrect test of supported hash function (bsc#1138879).
- net: ena: fix: set freed objects to NULL to avoid failing future allocations (bsc#1138879).
- net: ena: fix swapped parameters when calling ena_com_indirect_table_fill_entry (bsc#1138879).
- net: ena: gcc 8: fix compilation warning (bsc#1138879).
- net: ena: improve latency by disabling adaptive interrupt moderation by default (bsc#1138879).
- net: ena: make ethtool show correct current and max queue sizes (bsc#1138879).
- net: ena: optimise calculations for CQ doorbell (bsc#1138879).
- net: ena: remove inline keyword from functions in *.c (bsc#1138879).
- net: ena: replace free_tx/rx_ids union with single free_ids field in ena_ring (bsc#1138879).
- net: ena: update driver version from 2.0.3 to 2.1.0 (bsc#1138879).
- net: ena: use dev_info_once instead of static variable (bsc#1138879).
- net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set (bsc#1130836).
- net: Fix missing meta data in skb with vlan packet (bsc#1109837).
- net/mlx5: Avoid reloading already removed devices (bsc#1103990 ).
- net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled (bsc#1103990).
- net/mlx5e: Fix the max MTU check in case of XDP (bsc#1103990 ).
- net/mlx5e: Fix use-after-free after xdp_return_frame (bsc#1103990).
- net/mlx5e: Rx, Check ip headers sanity (bsc#1103990 ).
- net/mlx5e: Rx, Fixup skb checksum for packets with tail padding (bsc#1109837).
- net/mlx5e: XDP, Fix shifted flag index in RQ bitmap (bsc#1103990 ).
- net/mlx5: FPGA, tls, hold rcu read lock a bit longer (bsc#1103990).
- net/mlx5: FPGA, tls, idr remove on flow delete (bsc#1103990 ).
- net/mlx5: Set completion EQs as shared resources (bsc#1103991 ).
- net/mlx5: Update pci error handler entries and command translation (bsc#1103991).
- net: mvpp2: prs: Fix parser range for VID filtering (bsc#1098633).
- net: mvpp2: prs: Fix parser range for VID filtering (bsc#1098633).
- net: mvpp2: prs: Use the correct helpers when removing all VID filters (bsc#1098633).
- net: mvpp2: prs: Use the correct helpers when removing all VID filters (bsc#1098633).
- net: mvpp2: Use strscpy to handle stat strings (bsc#1098633).
- net: mvpp2: Use strscpy to handle stat strings (bsc#1098633).
- net: phy: marvell10g: report if the PHY fails to boot firmware (bsc#1119113).
- net/sched: cbs: Fix error path of cbs_module_init (bsc#1109837).
- net/sched: cbs: fix port_rate miscalculation (bsc#1109837).
- net/tls: avoid NULL pointer deref on nskb-&gt;sk in fallback (bsc#1109837).
- net/tls: avoid potential deadlock in tls_set_device_offload_rx() (bsc#1109837).
- net: tls, correctly account for copied bytes with multiple sk_msgs (bsc#1109837).
- net/tls: do not copy negative amounts of data in reencrypt (bsc#1109837).
- net/tls: do not ignore netdev notifications if no TLS features (bsc#1109837).
- net/tls: do not leak IV and record seq when offload fails (bsc#1109837).
- net/tls: do not leak partially sent record in device mode (bsc#1109837).
- net/tls: fix build without CONFIG_TLS_DEVICE (bsc#1109837).
- net/tls: fix copy to fragments in reencrypt (bsc#1109837).
- net/tls: fix page double free on TX cleanup (bsc#1109837).
- net/tls: fix refcount adjustment in fallback (bsc#1109837).
- net/tls: fix state removal with feature flags off (bsc#1109837).
- net/tls: fix the IV leaks (bsc#1109837).
- net/tls: prevent bad memory access in tls_is_sk_tx_device_offloaded() (bsc#1109837).
- net/tls: replace the sleeping lock around RX resync with a bit lock (bsc#1109837).
- net/udp_gso: Allow TX timestamp with UDP GSO (bsc#1109837).
- nfit/ars: Allow root to busy-poll the ARS state machine (bsc#1140814).
- nfit/ars: Avoid stale ARS results (jsc#SLE-5433).
- nfit/ars: Introduce scrub_flags (jsc#SLE-5433).
- nfp: bpf: fix static check error through tightening shift amount adjustment (bsc#1109837).
- nfp: flower: add rcu locks when accessing netdev for tunnels (bsc#1109837).
- ntp: Allow TAI-UTC offset to be set to zero (bsc#1135642).
- nvme: copy MTFA field from identify controller (bsc#1140715).
- nvme-rdma: fix double freeing of async event data (bsc#1120423).
- nvme-rdma: fix possible double free of controller async event buffer (bsc#1120423).
- ocfs2: try to reuse extent block in dealloc without meta_alloc (bsc#1128902).
- pci: Do not poll for PME if the device is in D3cold (bsc#1051510).
- pci/p2pdma: fix the gen_pool_add_virt() failure path (bsc#1103992).
- pci: PM: Skip devices in D0 for suspend-to-idle (bsc#1051510).
- pci: rpadlpar: Fix leaked device_node references in add/remove paths (bsc#1051510).
- pinctrl/amd: add get_direction handler (bsc#1140463).
- pinctrl/amd: fix gpio irq level in debugfs (bsc#1140463).
- pinctrl/amd: fix masking of GPIO interrupts (bsc#1140463).
- pinctrl/amd: make functions amd_gpio_suspend and amd_gpio_resume static (bsc#1140463).
- pinctrl/amd: poll InterruptEnable bits in amd_gpio_irq_set_type (bsc#1140463).
- pinctrl/amd: poll InterruptEnable bits in enable_irq (bsc#1140463).
- pm: ACPI/PCI: Resume all devices during hibernation (bsc#1111666).
- powerpc/perf: Add PM_LD_MISS_L1 and PM_BR_2PATH to power9 event list (bsc#1137728, LTC#178106).
- powerpc/perf: Add POWER9 alternate PM_RUN_CYC and PM_RUN_INST_CMPL events (bsc#1137728, LTC#178106).
- powerpc/rtas: retry when cpu offline races with suspend/migration (bsc#1140428, LTC#178808).
- ppc64le: enable CONFIG_PPC_DT_CPU_FTRS (jsc#SLE-7159).
- ppp: mppe: Add softdep to arc4 (bsc#1088047).
- ptrace: Fix -&gt;ptracer_cred handling for PTRACE_TRACEME (git-fixes).
- ptrace: restore smp_rmb() in __ptrace_may_access() (git-fixes).
- pwm: stm32: Use 3 cells -&gt;of_xlate() (bsc#1111666).
- qmi_wwan: Fix out-of-bounds read (bsc#1111666).
- rdma/ipoib: Allow user space differentiate between valid dev_port (bsc#1103992).
- rdma/mlx5: Do not allow the user to write to the clock page (bsc#1103991).
- rdma/mlx5: Initialize roce port info before multiport master init (bsc#1103991).
- rdma/mlx5: Use rdma_user_map_io for mapping BAR pages (bsc#1103992).
- regulator: s2mps11: Fix buck7 and buck8 wrong voltages (bsc#1051510).
- Replace the bluetooth fix with the upstream commit (bsc#1135556)
- Revert 'net: ena: ethtool: add extra properties retrieval via get_priv_flags' (bsc#1138879).
- Revert 'net/mlx5e: Enable reporting checksum unnecessary also for L3 packets' (bsc#1103990).
- Revert 'Revert 'Drop multiversion(kernel) from the KMP template ()''
- Revert 'Sign non-x86 kernels when possible (boo#1134303)' This reverts commit bac621c6704610562ebd9e74ae5ad85ca8025681. We do not have reports of this working with all ARM architectures in all cases (boot, kexec, ..) so revert for now.
- Revert 'svm: Fix AVIC incomplete IPI emulation' (bsc#1140133).
- rpm/package-descriptions: fix typo in kernel-azure
- rpm/post.sh: correct typo in err msg (bsc#1137625)
- sbitmap: fix improper use of smp_mb__before_atomic() (bsc#1140658).
- scripts/git_sort/git_sort.py: add djbw/nvdimm nvdimm-pending.
- scripts/git_sort/git_sort.py: add nvdimm/libnvdimm-fixes
- scripts/git_sort/git_sort.py: drop old scsi branches
- scsi: aacraid: change event_wait to a completion (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: change wait_sem to a completion (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: clean up some indentation and formatting issues (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: Mark expected switch fall-through (jsc#SLE-4710 bsc#1136161).
- scsi: aacraid: Mark expected switch fall-throughs (jsc#SLE-4710 bsc#1136161).
- scsi: be2iscsi: be_iscsi: Mark expected switch fall-through (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: be_main: Mark expected switch fall-through (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: fix spelling mistake 'Retreiving' -&gt; 'Retrieving' (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: lpfc: fix typo (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: remove unused variable dmsg (jsc#SLE-4721 bsc#1136264).
- scsi: be2iscsi: switch to generic DMA API (jsc#SLE-4721 bsc#1136264).
- scsi: core: add new RDAC LENOVO/DE_Series device (bsc#1132390).
- scsi: csiostor: csio_wr: mark expected switch fall-through (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: drop serial_number usage (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix calls to dma_set_mask_and_coherent() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix incorrect dma device in case of vport (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix missing data copy in csio_scsi_err_handler() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state() (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: no need to check return value of debugfs_create functions (jsc#SLE-4679 bsc#1136343).
- scsi: csiostor: Remove set but not used variable 'pln' (jsc#SLE-4679 bsc#1136343).
- scsi: mpt3sas: Add Atomic RequestDescriptor support on Aero (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add flag high_iops_queues (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add missing breaks in switch statements (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add support for ATLAS PCIe switch (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Add support for NVMe Switch Adapter (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Affinity high iops queues IRQs to local node (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: change _base_get_msix_index prototype (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Enable interrupt coalescing on high iops (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: fix indentation issue (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Fix kernel panic during expander reset (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Fix typo in request_desript_type (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: function pointers of request descriptor (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Improve the threshold value and introduce module param (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Introduce perf_mode module parameter (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Irq poll to avoid CPU hard lockups (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Load balance to improve performance and avoid soft lockups (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Rename mpi endpoint device ID macro (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: save and use MSI-X index for posting RD (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: simplify interrupt handler (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update driver version to 27.102.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update driver version to 29.100.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Update mpt3sas driver version to 28.100.00.00 (bsc#1125703,jsc#SLE-4717).
- scsi: mpt3sas: Use high iops queues under some circumstances (bsc#1125703,jsc#SLE-4717).
- scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() (bsc#1140727).
- scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines (bsc#1140728).
- scsi: target/iblock: Fix overrun in WRITE SAME emulation (bsc#1140424).
- scsi: target/iblock: Fix overrun in WRITE SAME emulation (bsc#1140424).
- signal/ptrace: Do not leak unitialized kernel memory with PTRACE_PEEK_SIGINFO (git-fixes).
- staging: comedi: ni_mio_common: Fix divide-by-zero for DIO cmdtest (bsc#1051510).
- staging:iio:ad7150: fix threshold mode config bit (bsc#1051510).
- svm: Add warning message for AVIC IPI invalid target (bsc#1140133).
- svm: Fix AVIC incomplete IPI emulation (bsc#1140133).
- sysctl: handle overflow in proc_get_long (bsc#1051510).
- tools: bpftool: fix infinite loop in map create (bsc#1109837).
- tracing/snapshot: Resize spare buffer if size changed (bsc#1140726).
- typec: tcpm: fix compiler warning about stupid things (git-fixes).
- usb: chipidea: udc: workaround for endpoint conflict issue (bsc#1135642).
- usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression) (bsc#1135642).
- usb: Fix chipmunk-like voice when using Logitech C270 for recording audio (bsc#1051510).
- usbnet: ipheth: fix racing condition (bsc#1051510).
- usb: serial: fix initial-termios handling (bsc#1135642).
- usb: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode (bsc#1051510).
- usb: serial: option: add Telit 0x1260 and 0x1261 compositions (bsc#1051510).
- usb: serial: pl2303: add Allied Telesis VT-Kit3 (bsc#1051510).
- usb: usb-storage: Add new ID to ums-realtek (bsc#1051510).
- x86/cpufeatures: Enumerate user wait instructions (jsc#SLE-5187).
- x86/umwait: Add sysfs interface to control umwait C0.2 state (jsc#SLE-5187).
- x86/umwait: Add sysfs interface to control umwait maximum time (jsc#SLE-5187).
- x86/umwait: Initialize umwait control values (jsc#SLE-5187).
- xdp: check device pointer before clearing (bsc#1109837).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-07-15"/>
	<updated date="2019-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088047">SUSE bug 1088047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098633">SUSE bug 1098633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106383">SUSE bug 1106383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119532">SUSE bug 1119532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120423">SUSE bug 1120423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125703">SUSE bug 1125703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1128902">SUSE bug 1128902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130836">SUSE bug 1130836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131645">SUSE bug 1131645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1132390">SUSE bug 1132390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133401">SUSE bug 1133401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133738">SUSE bug 1133738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134303">SUSE bug 1134303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134395">SUSE bug 1134395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135556">SUSE bug 1135556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135897">SUSE bug 1135897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136161">SUSE bug 1136161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136264">SUSE bug 1136264</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136343">SUSE bug 1136343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136935">SUSE bug 1136935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137625">SUSE bug 1137625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137728">SUSE bug 1137728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138879">SUSE bug 1138879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139712">SUSE bug 1139712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139751">SUSE bug 1139751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139771">SUSE bug 1139771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139865">SUSE bug 1139865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140133">SUSE bug 1140133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140228">SUSE bug 1140228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140328">SUSE bug 1140328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140405">SUSE bug 1140405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140424">SUSE bug 1140424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140428">SUSE bug 1140428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140454">SUSE bug 1140454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140463">SUSE bug 1140463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140575">SUSE bug 1140575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140577">SUSE bug 1140577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140637">SUSE bug 1140637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140658">SUSE bug 1140658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140715">SUSE bug 1140715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140719">SUSE bug 1140719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140726">SUSE bug 1140726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140727">SUSE bug 1140727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140728">SUSE bug 1140728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140814">SUSE bug 1140814</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140887">SUSE bug 1140887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140888">SUSE bug 1140888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140889">SUSE bug 1140889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140891">SUSE bug 1140891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140893">SUSE bug 1140893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140954">SUSE bug 1140954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140955">SUSE bug 1140955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140956">SUSE bug 1140956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140957">SUSE bug 1140957</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140958">SUSE bug 1140958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140959">SUSE bug 1140959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140960">SUSE bug 1140960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140961">SUSE bug 1140961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140962">SUSE bug 1140962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140964">SUSE bug 1140964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140971">SUSE bug 1140971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140972">SUSE bug 1140972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140992">SUSE bug 1140992</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2018-20836/">CVE-2018-20836</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-10126/">CVE-2019-10126</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10638/">CVE-2019-10638</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10639/">CVE-2019-10639</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-11599/">CVE-2019-11599</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-13233/">CVE-2019-13233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501548" comment="cluster-md-kmp-default-4.12.14-197.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501549" comment="dlm-kmp-default-4.12.14-197.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501550" comment="gfs2-kmp-default-4.12.14-197.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501551" comment="ocfs2-kmp-default-4.12.14-197.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139101" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1083710" ref_url="https://bugzilla.suse.com/1083710" source="BUGZILLA"/>
		<reference ref_id="1102247" ref_url="https://bugzilla.suse.com/1102247" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1119222" ref_url="https://bugzilla.suse.com/1119222" source="BUGZILLA"/>
		<reference ref_id="1123080" ref_url="https://bugzilla.suse.com/1123080" source="BUGZILLA"/>
		<reference ref_id="1127034" ref_url="https://bugzilla.suse.com/1127034" source="BUGZILLA"/>
		<reference ref_id="1127315" ref_url="https://bugzilla.suse.com/1127315" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1130972" ref_url="https://bugzilla.suse.com/1130972" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1134097" ref_url="https://bugzilla.suse.com/1134097" source="BUGZILLA"/>
		<reference ref_id="1134390" ref_url="https://bugzilla.suse.com/1134390" source="BUGZILLA"/>
		<reference ref_id="1134399" ref_url="https://bugzilla.suse.com/1134399" source="BUGZILLA"/>
		<reference ref_id="1135335" ref_url="https://bugzilla.suse.com/1135335" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1136217" ref_url="https://bugzilla.suse.com/1136217" source="BUGZILLA"/>
		<reference ref_id="1136342" ref_url="https://bugzilla.suse.com/1136342" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1136462" ref_url="https://bugzilla.suse.com/1136462" source="BUGZILLA"/>
		<reference ref_id="1136467" ref_url="https://bugzilla.suse.com/1136467" source="BUGZILLA"/>
		<reference ref_id="1137458" ref_url="https://bugzilla.suse.com/1137458" source="BUGZILLA"/>
		<reference ref_id="1137534" ref_url="https://bugzilla.suse.com/1137534" source="BUGZILLA"/>
		<reference ref_id="1137535" ref_url="https://bugzilla.suse.com/1137535" source="BUGZILLA"/>
		<reference ref_id="1137584" ref_url="https://bugzilla.suse.com/1137584" source="BUGZILLA"/>
		<reference ref_id="1137609" ref_url="https://bugzilla.suse.com/1137609" source="BUGZILLA"/>
		<reference ref_id="1137811" ref_url="https://bugzilla.suse.com/1137811" source="BUGZILLA"/>
		<reference ref_id="1137827" ref_url="https://bugzilla.suse.com/1137827" source="BUGZILLA"/>
		<reference ref_id="1138874" ref_url="https://bugzilla.suse.com/1138874" source="BUGZILLA"/>
		<reference ref_id="1139358" ref_url="https://bugzilla.suse.com/1139358" source="BUGZILLA"/>
		<reference ref_id="1139619" ref_url="https://bugzilla.suse.com/1139619" source="BUGZILLA"/>
		<reference ref_id="1140133" ref_url="https://bugzilla.suse.com/1140133" source="BUGZILLA"/>
		<reference ref_id="1140139" ref_url="https://bugzilla.suse.com/1140139" source="BUGZILLA"/>
		<reference ref_id="1140322" ref_url="https://bugzilla.suse.com/1140322" source="BUGZILLA"/>
		<reference ref_id="1140559" ref_url="https://bugzilla.suse.com/1140559" source="BUGZILLA"/>
		<reference ref_id="1140652" ref_url="https://bugzilla.suse.com/1140652" source="BUGZILLA"/>
		<reference ref_id="1140676" ref_url="https://bugzilla.suse.com/1140676" source="BUGZILLA"/>
		<reference ref_id="1140903" ref_url="https://bugzilla.suse.com/1140903" source="BUGZILLA"/>
		<reference ref_id="1140945" ref_url="https://bugzilla.suse.com/1140945" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1141312" ref_url="https://bugzilla.suse.com/1141312" source="BUGZILLA"/>
		<reference ref_id="1141401" ref_url="https://bugzilla.suse.com/1141401" source="BUGZILLA"/>
		<reference ref_id="1141402" ref_url="https://bugzilla.suse.com/1141402" source="BUGZILLA"/>
		<reference ref_id="1141452" ref_url="https://bugzilla.suse.com/1141452" source="BUGZILLA"/>
		<reference ref_id="1141453" ref_url="https://bugzilla.suse.com/1141453" source="BUGZILLA"/>
		<reference ref_id="1141454" ref_url="https://bugzilla.suse.com/1141454" source="BUGZILLA"/>
		<reference ref_id="1141478" ref_url="https://bugzilla.suse.com/1141478" source="BUGZILLA"/>
		<reference ref_id="1141558" ref_url="https://bugzilla.suse.com/1141558" source="BUGZILLA"/>
		<reference ref_id="1142023" ref_url="https://bugzilla.suse.com/1142023" source="BUGZILLA"/>
		<reference ref_id="1142052" ref_url="https://bugzilla.suse.com/1142052" source="BUGZILLA"/>
		<reference ref_id="1142083" ref_url="https://bugzilla.suse.com/1142083" source="BUGZILLA"/>
		<reference ref_id="1142112" ref_url="https://bugzilla.suse.com/1142112" source="BUGZILLA"/>
		<reference ref_id="1142115" ref_url="https://bugzilla.suse.com/1142115" source="BUGZILLA"/>
		<reference ref_id="1142119" ref_url="https://bugzilla.suse.com/1142119" source="BUGZILLA"/>
		<reference ref_id="1142220" ref_url="https://bugzilla.suse.com/1142220" source="BUGZILLA"/>
		<reference ref_id="1142221" ref_url="https://bugzilla.suse.com/1142221" source="BUGZILLA"/>
		<reference ref_id="1142254" ref_url="https://bugzilla.suse.com/1142254" source="BUGZILLA"/>
		<reference ref_id="1142350" ref_url="https://bugzilla.suse.com/1142350" source="BUGZILLA"/>
		<reference ref_id="1142351" ref_url="https://bugzilla.suse.com/1142351" source="BUGZILLA"/>
		<reference ref_id="1142354" ref_url="https://bugzilla.suse.com/1142354" source="BUGZILLA"/>
		<reference ref_id="1142359" ref_url="https://bugzilla.suse.com/1142359" source="BUGZILLA"/>
		<reference ref_id="1142450" ref_url="https://bugzilla.suse.com/1142450" source="BUGZILLA"/>
		<reference ref_id="1142623" ref_url="https://bugzilla.suse.com/1142623" source="BUGZILLA"/>
		<reference ref_id="1142673" ref_url="https://bugzilla.suse.com/1142673" source="BUGZILLA"/>
		<reference ref_id="1142701" ref_url="https://bugzilla.suse.com/1142701" source="BUGZILLA"/>
		<reference ref_id="1142868" ref_url="https://bugzilla.suse.com/1142868" source="BUGZILLA"/>
		<reference ref_id="1143003" ref_url="https://bugzilla.suse.com/1143003" source="BUGZILLA"/>
		<reference ref_id="1143045" ref_url="https://bugzilla.suse.com/1143045" source="BUGZILLA"/>
		<reference ref_id="1143105" ref_url="https://bugzilla.suse.com/1143105" source="BUGZILLA"/>
		<reference ref_id="1143185" ref_url="https://bugzilla.suse.com/1143185" source="BUGZILLA"/>
		<reference ref_id="1143189" ref_url="https://bugzilla.suse.com/1143189" source="BUGZILLA"/>
		<reference ref_id="1143191" ref_url="https://bugzilla.suse.com/1143191" source="BUGZILLA"/>
		<reference ref_id="1143209" ref_url="https://bugzilla.suse.com/1143209" source="BUGZILLA"/>
		<reference ref_id="1143507" ref_url="https://bugzilla.suse.com/1143507" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20855" ref_url="https://www.suse.com/security/cve/CVE-2018-20855/" source="CVE"/>
		<reference ref_id="CVE-2019-1125" ref_url="https://www.suse.com/security/cve/CVE-2019-1125/" source="CVE"/>
		<reference ref_id="CVE-2019-11810" ref_url="https://www.suse.com/security/cve/CVE-2019-11810/" source="CVE"/>
		<reference ref_id="CVE-2019-13631" ref_url="https://www.suse.com/security/cve/CVE-2019-13631/" source="CVE"/>
		<reference ref_id="CVE-2019-13648" ref_url="https://www.suse.com/security/cve/CVE-2019-13648/" source="CVE"/>
		<reference ref_id="CVE-2019-14283" ref_url="https://www.suse.com/security/cve/CVE-2019-14283/" source="CVE"/>
		<reference ref_id="CVE-2019-14284" ref_url="https://www.suse.com/security/cve/CVE-2019-14284/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-August/005789.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2018-20855: An issue was discovered in the Linux kernel In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace(bsc#1143045).
- CVE-2019-1125: Exclude ATOMs from speculation through SWAPGS (bsc#1139358).
- CVE-2019-14283: In the Linux kernel, set_geometry in drivers/block/floppy.c did not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It could be triggered by an unprivileged local user when a floppy disk was inserted. NOTE: QEMU creates the floppy device by default. (bnc#1143191)
- CVE-2019-11810: An issue was discovered in the Linux kernel A NULL pointer dereference could occur when megasas_create_frame_pool() failed in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This caused a Denial of Service, related to a use-after-free (bnc#1134399).
- CVE-2019-13648: In the Linux kernel on the powerpc platform, when hardware transactional memory was disabled, a local user could cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sent a crafted signal frame. (bnc#1142254)
- CVE-2019-13631: In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel, a malicious USB device could send an HID report that triggered an out-of-bounds write during generation of debugging messages. (bnc#1142023)

The following non-security bugs were fixed:

- acpi/nfit: Always dump _DSM output payload (bsc#1142351).
- Add back sibling paca poiter to paca (bsc#1055117).
- Add support for crct10dif-vpmsum ().
- af_unix: remove redundant lockdep class (git-fixes).
- alsa: compress: Be more restrictive about when a drain is allowed (bsc#1051510).
- alsa: compress: Do not allow paritial drain operations on capture streams (bsc#1051510).
- alsa: compress: Fix regression on compressed capture streams (bsc#1051510).
- alsa: compress: Prevent bypasses of set_params (bsc#1051510).
- alsa: hda - Add a conexant codec entry to let mute led work (bsc#1051510).
- alsa: hda - Do not resume forcibly i915 HDMI/DP codec (bsc#1111666).
- alsa: hda - Fix intermittent CORB/RIRB stall on Intel chips (bsc#1111666).
- alsa: hda/hdmi - Fix i915 reverse port/pin mapping (bsc#1111666).
- alsa: hda/hdmi - Remove duplicated define (bsc#1111666).
- alsa: hda - Optimize resume for codecs without jack detection (bsc#1111666).
- alsa: hda/realtek: apply ALC891 headset fixup to one Dell machine (bsc#1051510).
- alsa: hda/realtek - Fixed Headphone Mic can't record on Dell platform (bsc#1051510).
- alsa: hda/realtek - Headphone Mic can't record after S3 (bsc#1051510).
- alsa: line6: Fix a typo (bsc#1051510).
- alsa: line6: Fix wrong altsetting for LINE6_PODHD500_1 (bsc#1051510).
- alsa: seq: Break too long mutex context in the write loop (bsc#1051510).
- alsa: usb-audio: Add quirk for Focusrite Scarlett Solo (bsc#1051510).
- alsa: usb-audio: Add quirk for MOTU MicroBook II (bsc#1051510).
- alsa: usb-audio: Cleanup DSD whitelist (bsc#1051510).
- alsa: usb-audio: Enable .product_name override for Emagic, Unitor 8 (bsc#1051510).
- alsa: usb-audio: fix Line6 Helix audio format rates (bsc#1111666).
- alsa: usb-audio: Sanity checks for each pipe and EP types (bsc#1051510).
- arm64: do not override dma_max_pfn (jsc#SLE-6197 bsc#1140559 LTC#173150).
- asoc : cs4265 : readable register too low (bsc#1051510).
- asoc: max98090: remove 24-bit format support if RJ is 0 (bsc#1051510).
- asoc: soc-pcm: BE dai needs prepare when pause release after resume (bsc#1051510).
- ath10k: add missing error handling (bsc#1111666).
- ath10k: add peer id check in ath10k_peer_find_by_id (bsc#1111666).
- ath10k: destroy sdio workqueue while remove sdio module (bsc#1111666).
- ath10k: Do not send probe response template for mesh (bsc#1111666).
- ath10k: Fix encoding for protected management frames (bsc#1111666).
- ath10k: fix incorrect multicast/broadcast rate setting (bsc#1111666).
- ath10k: fix PCIE device wake up failed (bsc#1111666).
- ath6kl: add some bounds checking (bsc#1051510).
- ath9k: Check for errors when reading SREV register (bsc#1111666).
- ath9k: correctly handle short radar pulses (bsc#1111666).
- ath: DFS JP domain W56 fixed pulse type 3 RADAR detection (bsc#1111666).
- batman-adv: fix for leaked TVLV handler (bsc#1051510).
- bcache: acquire bch_register_lock later in cached_dev_detach_finish() (bsc#1140652).
- bcache: acquire bch_register_lock later in cached_dev_free() (bsc#1140652).
- bcache: add code comments for journal_read_bucket() (bsc#1140652).
- bcache: Add comments for blkdev_put() in registration code path (bsc#1140652).
- bcache: add comments for closure_fn to be called in closure_queue() (bsc#1140652).
- bcache: add comments for kobj release callback routine (bsc#1140652).
- bcache: add comments for mutex_lock(b-&gt;write_lock) (bsc#1140652).
- bcache: add error check for calling register_bdev() (bsc#1140652).
- bcache: add failure check to run_cache_set() for journal replay (bsc#1140652).
- bcache: add io error counting in write_bdev_super_endio() (bsc#1140652).
- bcache: add more error message in bch_cached_dev_attach() (bsc#1140652).
- bcache: add pendings_cleanup to stop pending bcache device (bsc#1140652).
- bcache: add reclaimed_journal_buckets to struct cache_set (bsc#1140652).
- bcache: add return value check to bch_cached_dev_run() (bsc#1140652).
- bcache: avoid a deadlock in bcache_reboot() (bsc#1140652).
- bcache: avoid clang -Wunintialized warning (bsc#1140652).
- bcache: avoid flushing btree node in cache_set_flush() if io disabled (bsc#1140652).
- bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set (bsc#1140652).
- bcache: check CACHE_SET_IO_DISABLE bit in bch_journal() (bsc#1140652).
- bcache: check CACHE_SET_IO_DISABLE in allocator code (bsc#1140652).
- bcache: check c-&gt;gc_thread by IS_ERR_OR_NULL in cache_set_flush() (bsc#1140652).
- bcache: Clean up bch_get_congested() (bsc#1140652).
- bcache: destroy dc-&gt;writeback_write_wq if failed to create dc-&gt;writeback_thread (bsc#1140652).
- bcache: do not assign in if condition in bcache_device_init() (bsc#1140652).
- bcache: do not set max writeback rate if gc is running (bsc#1140652).
- bcache: fix a race between cache register and cacheset unregister (bsc#1140652).
- bcache: fix crashes stopping bcache device before read miss done (bsc#1140652).
- bcache: fix failure in journal relplay (bsc#1140652).
- bcache: fix inaccurate result of unused buckets (bsc#1140652).
- bcache: fix mistaken sysfs entry for io_error counter (bsc#1140652).
- bcache: fix potential deadlock in cached_def_free() (bsc#1140652).
- bcache: fix race in btree_flush_write() (bsc#1140652).
- bcache: fix return value error in bch_journal_read() (bsc#1140652).
- bcache: fix stack corruption by PRECEDING_KEY() (bsc#1140652).
- bcache: fix wrong usage use-after-freed on keylist in out_nocoalesce branch of btree_gc_coalesce (bsc#1140652).
- bcache: ignore read-ahead request failure on backing device (bsc#1140652).
- bcache: improve bcache_reboot() (bsc#1140652).
- bcache: improve error message in bch_cached_dev_run() (bsc#1140652).
- bcache: make bset_search_tree() be more understandable (bsc#1140652).
- bcache: make is_discard_enabled() static (bsc#1140652).
- bcache: more detailed error message to bcache_device_link() (bsc#1140652).
- bcache: move definition of 'int ret' out of macro read_bucket() (bsc#1140652).
- bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() (bsc#1140652).
- bcache: only clear BTREE_NODE_dirty bit when it is set (bsc#1140652).
- bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached (bsc#1140652).
- bcache: performance improvement for btree_flush_write() (bsc#1140652).
- bcache: remove redundant LIST_HEAD(journal) from run_cache_set() (bsc#1140652).
- bcache: remove redundant LIST_HEAD(journal) from run_cache_set() (bsc#1140652).
- bcache: remove retry_flush_write from struct cache_set (bsc#1140652).
- bcache: remove unncessary code in bch_btree_keys_init() (bsc#1140652).
- bcache: remove unnecessary prefetch() in bset_search_tree() (bsc#1140652).
- bcache: return error immediately in bch_journal_replay() (bsc#1140652).
- bcache: Revert 'bcache: fix high CPU occupancy during journal' (bsc#1140652).
- bcache: Revert 'bcache: free heap cache_set-&gt;flush_btree in bch_journal_free' (bsc#1140652).
- bcache: set largest seq to ja-&gt;seq[bucket_index] in journal_read_bucket() (bsc#1140652).
- bcache: shrink btree node cache after bch_btree_check() (bsc#1140652).
- bcache: stop writeback kthread and kworker when bch_cached_dev_run() failed (bsc#1140652).
- bcache: use sysfs_match_string() instead of __sysfs_match_string() (bsc#1140652).
- be2net: Fix number of Rx queues used for flow hashing (networking-stable-19_06_18).
- be2net: Signal that the device cannot transmit during reconfiguration (bsc#1127315).
- be2net: Synchronize be_update_queues with dev_watchdog (bsc#1127315).
- block, bfq: NULL out the bic when it's no longer valid (bsc#1142359).
- bnx2x: Prevent load reordering in tx completion processing (bsc#1142868).
- bnxt_en: Cap the returned MSIX vectors to the RDMA driver (bsc#1134090 jsc#SLE-5954).
- bnxt_en: Disable bus master during PCI shutdown and driver unload (bsc#1104745).
- bnxt_en: Fix aggregation buffer leak under OOM condition (networking-stable-19_05_31).
- bnxt_en: Fix statistics context reservation logic for RDMA driver (bsc#1104745).
- bnxt_en: Suppress error messages when querying DSCP DCB capabilities (bsc#1104745).
- bonding: fix arp_validate toggling in active-backup mode (networking-stable-19_05_14).
- bonding: Force slave speed check after link state recovery for 802.3ad (bsc#1137584).
- bpf: btf: fix the brackets of BTF_INT_OFFSET() (bsc#1083647).
- bpf: fix callees pruning callers (bsc#1109837).
- bpf: fix nested bpf tracepoints with per-cpu data (bsc#1083647).
- bpf, x64: fix stack layout of JITed bpf code (bsc#1083647).
- bpf, x64: save 5 bytes in prologue when ebpf insns came from cbpf (bsc#1083647).
- bridge: Fix error path for kobject_init_and_add() (networking-stable-19_05_14).
- btrfs: fix race between block group removal and block group allocation (bsc#1143003).
- carl9170: fix misuse of device driver API (bsc#1111666).
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() (bsc#1141478).
- clk: qcom: Fix -Wunused-const-variable (bsc#1051510).
- clk: rockchip: Do not yell about bad mmc phases when getting (bsc#1051510).
- clk: tegra210: fix PLLU and PLLU_OUT1 (bsc#1051510).
- Correct iwlwifi 22000 series ucode file name (bsc#1142673)
- Correct the buggy backport about AER / DPC pcie stuff (bsc#1142623)
- cpufreq: acpi-cpufreq: Report if CPU does not support boost technologies (bsc#1051510).
- cpufreq: brcmstb-avs-cpufreq: Fix initial command check (bsc#1051510).
- cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency (bsc#1051510).
- cpufreq: check if policy is inactive early in __cpufreq_get() (bsc#1051510).
- cpufreq: kirkwood: fix possible object reference leak (bsc#1051510).
- cpufreq/pasemi: fix possible object reference leak (bsc#1051510).
- cpufreq: pmac32: fix possible object reference leak (bsc#1051510).
- cpufreq: ppc_cbe: fix possible object reference leak (bsc#1051510).
- cpufreq: Use struct kobj_attribute instead of struct global_attr (bsc#1051510).
- crypto: arm64/sha1-ce - correct digest for empty data in finup (bsc#1051510).
- crypto: arm64/sha2-ce - correct digest for empty data in finup (bsc#1051510).
- crypto: ccp - Fix 3DES complaint from ccp-crypto module (bsc#1051510).
- crypto: ccp - fix AES CFB error exposed by new test vectors (bsc#1051510).
- crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL (bsc#1051510).
- crypto: ccp/gcm - use const time tag comparison (bsc#1051510).
- crypto: ccp - memset structure fields to zero before reuse (bsc#1051510).
- crypto: ccp - Validate the the error value used to index error messages (bsc#1051510).
- crypto: chacha20poly1305 - fix atomic sleep when using async algorithm (bsc#1051510).
- crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe (bsc#1051510).
- crypto: ghash - fix unaligned memory access in ghash_setkey() (bsc#1051510).
- crypto: talitos - Align SEC1 accesses to 32 bits boundaries (bsc#1051510).
- crypto: talitos - check data blocksize in ablkcipher (bsc#1051510).
- crypto: talitos - fix CTR alg blocksize (bsc#1051510).
- crypto: talitos - fix max key size for sha384 and sha512 (bsc#1051510).
- crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking (bsc#1051510).
- crypto: talitos - properly handle split ICV (bsc#1051510).
- crypto: talitos - reduce max key size for SEC1 (bsc#1051510).
- crypto: talitos - rename alternative AEAD algos (bsc#1051510).
- dasd_fba: Display '00000000' for zero page when dumping sense (bsc#1123080).
- Delete patches.fixes/s390-setup-fix-early-warning-messages (bsc#1140948).
- dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc (bsc#1111666).
- dma-direct: add support for allocation from ZONE_DMA and ZONE_DMA32 (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-direct: do not retry allocation for no-op GFP_DMA (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-direct: retry allocations using GFP_DMA for small masks (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dmaengine: hsu: Revert 'set HSU_CH_MTSR to memory width' (bsc#1051510).
- dma-mapping: move dma_mark_clean to dma-direct.h (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-mapping: move swiotlb arch helpers to a new header (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dma-mapping: take dma_pfn_offset into account in dma_max_pfn (jsc#SLE-6197 bsc#1140559 LTC#173150).
- dpaa_eth: fix SG frame cleanup (networking-stable-19_05_14).
- drm/amd/display: Make some functions static (bsc#1111666).
- drm/atmel-hlcdc: revert shift by 8 (bsc#1111666).
- drm/i915/cml: Introduce Comet Lake PCH (jsc#SLE-6681).
- drm/i915/icl: Add WaDisableBankHangMode (bsc#1111666).
- drm/meson: Add support for XBGR8888 &amp; ABGR8888 formats (bsc#1051510).
- drm/msm/a3xx: remove TPL1 regs from snapshot (bsc#1051510).
- drm/msm/mdp5: Fix mdp5_cfg_init error return (bsc#1111666).
- drm/nouveau/i2c: Enable i2c pads &amp; busses during preinit (bsc#1051510).
- drm: return -EFAULT if copy_to_user() fails (bsc#1111666).
- drm/rockchip: Properly adjust to a true clock in adjusted_mode (bsc#1051510).
- drm/udl: introduce a macro to convert dev to udl (bsc#1111666).
- drm/udl: move to embedding drm device inside udl device (bsc#1111666).
- drm/udl: Replace drm_dev_unref with drm_dev_put (bsc#1111666).
- drm/vc4: fix fb references in async update (bsc#1141312).
- drm/vmwgfx: Honor the sg list segment size limitation (bsc#1111666).
- e1000e: start network tx queue only when link is up (bsc#1051510).
- Enable intel-speed-select driver and update supported.conf (jsc#SLE-5364)
- ethtool: check the return value of get_regs_len (git-fixes).
- ethtool: fix potential userspace buffer overflow (networking-stable-19_06_09).
- Fix kABI for asus-wmi quirk_entry field addition (bsc#1051510).
- Fix memory leak in sctp_process_init (networking-stable-19_06_09).
- fork, memcg: fix cached_stacks case (bsc#1134097).
- fork, memcg: fix crash in free_thread_stack on memcg charge fail (bsc#1134097).
- fpga: add intel stratix10 soc fpga manager driver (jsc#SLE-7057).
- fpga: stratix10-soc: fix use-after-free on s10_init() (jsc#SLE-7057).
- fpga: stratix10-soc: fix wrong of_node_put() in init function (jsc#jsc#SLE-7057).
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM (bsc#1111666).
- hid: wacom: correct touch resolution x/y typo (bsc#1051510).
- hid: wacom: generic: Correct pad syncing (bsc#1051510).
- hid: wacom: generic: only switch the mode on devices with LEDs (bsc#1051510).
- hid: wacom: generic: read HID_DG_CONTACTMAX from any feature report (bsc#1051510).
- ib/ipoib: Add child to parent list only if device initialized (bsc#1103992).
- ib/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE (bsc#1103991).
- idr: fix overflow case for idr_for_each_entry_ul() (bsc#1109837).
- input: elantech - enable middle button support on 2 ThinkPads (bsc#1051510).
- input: imx_keypad - make sure keyboard can always wake up system (bsc#1051510).
- input: psmouse - fix build error of multiple definition (bsc#1051510).
- input: synaptics - enable SMBUS on T480 thinkpad trackpad (bsc#1051510).
- input: tm2-touchkey - acknowledge that setting brightness is a blocking call (bsc#1129770).
- intel_th: msu: Fix single mode with disabled IOMMU (bsc#1051510).
- iommu-helper: mark iommu_is_span_boundary as inline (jsc#SLE-6197 bsc#1140559 LTC#173150).
- ipv4: Fix raw socket lookup for local traffic (networking-stable-19_05_14).
- ipv4/igmp: fix another memory leak in igmpv3_del_delrec() (networking-stable-19_05_31).
- ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST (networking-stable-19_05_31).
- ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop (git-fixes).
- ipv6: Consider sk_bound_dev_if when binding a raw socket to an address (networking-stable-19_05_31).
- ipv6: fix EFAULT on sendto with icmpv6 and hdrincl (networking-stable-19_06_09).
- ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero (networking-stable-19_06_18).
- ipv6: use READ_ONCE() for inet-&gt;hdrincl as in ipv4 (networking-stable-19_06_09).
- iwlwifi: correct one of the PCI struct names (bsc#1111666).
- iwlwifi: do not WARN when calling iwl_get_shared_mem_conf with RF-Kill (bsc#1111666).
- iwlwifi: fix cfg structs for 22000 with different RF modules (bsc#1111666).
- iwlwifi: fix devices with PCI Device ID 0x34F0 and 11ac RF modules (bsc#1111666).
- iwlwifi: Fix double-free problems in iwl_req_fw_callback() (bsc#1111666).
- iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices (bsc#1111666).
- iwlwifi: mvm: Drop large non sta frames (bsc#1111666).
- iwlwifi: pcie: do not service an interrupt that was masked (bsc#1111666).
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X (bsc#1111666).
- kabi fix for hda_codec.relaxed_resume flag (bsc#1111666).
- kabi: Fix lost iommu-helper symbols on arm64 (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: mask changes made by basic protected virtualization support (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: mask changes made by swiotlb for protected virtualization (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: mask changes made by use of DMA memory for adapter interrupts (jsc#SLE-6197 bsc#1140559 LTC#173150).
- kabi: remove unused hcall definition (bsc#1140322 LTC#176270).
- kbuild: use -flive-patching when CONFIG_LIVEPATCH is enabled (bsc#1071995).
- kernel: jump label transformation performance (bsc#1137534 bsc#1137535 			LTC#178058 LTC#178059).
- kvm: arm/arm64: vgic-its: Take the srcu lock when parsing the memslots (bsc#1133021).
- kvm: arm/arm64: vgic-its: Take the srcu lock when writing to guest memory (bsc#1133021).
- kvm: mmu: Fix overflow on kvm mmu page limit calculation (bsc#1135335).
- kvm/mmu: kABI fix for *_mmu_pages changes in struct kvm_arch (bsc#1135335).
- kvm: polling: add architecture backend to disable polling (bsc#1119222).
- kvm: s390: change default halt poll time to 50us (bsc#1119222).
- kvm: s390: enable CONFIG_HAVE_kvm_NO_POLL (bsc#1119222) We need to enable CONFIG_HAVE_kvm_NO_POLL for bsc#1119222
- kvm: s390: fix typo in parameter description (bsc#1119222).
- kvm: s390: kABI Workaround for 'kvm_vcpu_stat' Add halt_no_poll_steal to kvm_vcpu_stat. Hide it from the kABI checker.
- kvm: s390: kABI Workaround for 'lowcore' (bsc#1119222).
- kvm: s390: provide kvm_arch_no_poll function (bsc#1119222).
- kvm: svm/avic: Do not send AVIC doorbell to self (bsc#1140133).
- kvm: SVM: Fix detection of AMD Errata 1096 (bsc#1142354).
- lapb: fixed leak of control-blocks (networking-stable-19_06_18).
- lib: fix stall in __bitmap_parselist() (bsc#1051510).
- libnvdimm/namespace: Fix label tracking error (bsc#1142350).
- libnvdimm/region: Register badblocks before namespaces (bsc#1143209).
- lib/bitmap.c: make bitmap_parselist() thread-safe and much faster (bsc#1143507).
- lib/scatterlist: Fix mapping iterator when sg-&gt;offset is greater than PAGE_SIZE (bsc#1051510).
- livepatch: Remove duplicate warning about missing reliable stacktrace support (bsc#1071995).
- livepatch: Use static buffer for debugging messages under rq lock (bsc#1071995).
- llc: fix skb leak in llc_build_and_send_ui_pkt() (networking-stable-19_05_31).
- mac80211: do not start any work during reconfigure flow (bsc#1111666).
- mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he() (bsc#1111666).
- mac80211: free peer keys before vif down in mesh (bsc#1111666).
- mac80211: mesh: fix RCU warning (bsc#1111666).
- mac80211: only warn once on chanctx_conf being NULL (bsc#1111666).
- media: cpia2_usb: first wake up, then free in disconnect (bsc#1135642).
- media: marvell-ccic: fix DMA s/g desc number calculation (bsc#1051510).
- media: s5p-mfc: Make additional clocks optional (bsc#1051510).
- media: v4l2: Test type instead of cfg-&gt;type in v4l2_ctrl_new_custom() (bsc#1051510).
- media: vivid: fix incorrect assignment operation when setting video mode (bsc#1051510).
- mei: bus: need to unlink client before freeing (bsc#1051510).
- mei: me: add denverton innovation engine device IDs (bsc#1051510).
- mei: me: add gemini lake devices id (bsc#1051510).
- memory: tegra: Fix integer overflow on tick value calculation (bsc#1051510).
- memstick: Fix error cleanup path of memstick_init (bsc#1051510).
- mfd: intel-lpss: Release IDA resources (bsc#1051510).
- mips: fix an off-by-one in dma_capable (jsc#SLE-6197 bsc#1140559 LTC#173150).
- mlxsw: spectrum_dcb: Configure DSCP map as the last rule is removed (bsc#1112374).
- mmc: sdhci-pci: Try 'cd' for card-detect lookup before using NULL (bsc#1051510).
- mm: migrate: Fix reference check race between __find_get_block() and migration (bnc#1137609).
- mm/nvdimm: add is_ioremap_addr and use that to check ioremap address (bsc#1140322 LTC#176270).
- mm, page_alloc: fix has_unmovable_pages for HugePages (bsc#1127034).
- mm: replace all open encodings for NUMA_NO_NODE (bsc#1140322 LTC#176270).
- mt7601u: do not schedule rx_tasklet when the device has been disconnected (bsc#1111666).
- mt7601u: fix possible memory leak when the device is disconnected (bsc#1111666).
- neigh: fix use-after-free read in pneigh_get_next (networking-stable-19_06_18).
- net/af_iucv: build proper skbs for HiperTransport (bsc#1142221 LTC#179332).
- net/af_iucv: remove GFP_DMA restriction for HiperTransport (bsc#1142112 bsc#1142221 LTC#179334 LTC#179332).
- net/af_iucv: remove GFP_DMA restriction for HiperTransport (bsc#1142221 LTC#179332).
- net: avoid weird emergency message (networking-stable-19_05_21).
- net: fec: fix the clk mismatch in failed_reset path (networking-stable-19_05_31).
- netfilter: conntrack: fix calculation of next bucket number in early_drop (git-fixes).
- net-gro: fix use-after-free read in napi_gro_frags() (networking-stable-19_05_31).
- net: hns3: Fix inconsistent indenting (bsc#1140676).
- net: hns: fix ICMP6 neighbor solicitation messages discard problem (bsc#1140676).
- net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw() (bsc#1140676).
- net: hns: Fix loopback test failed at copper ports (bsc#1140676).
- net: hns: Fix probabilistic memory overwrite when HNS driver initialized (bsc#1140676).
- net: hns: fix unsigned comparison to less than zero (bsc#1140676).
- net: hns: Fix WARNING when remove HNS driver with SMMU enabled (bsc#1140676).
- net: hns: Use NAPI_POLL_WEIGHT for hns driver (bsc#1140676).
- net/mlx4_core: Change the error print to info print (networking-stable-19_05_21).
- net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query (networking-stable-19_06_09).
- net/mlx5: Allocate root ns memory using kzalloc to match kfree (networking-stable-19_05_31).
- net/mlx5: Avoid double free in fs init error unwinding path (networking-stable-19_05_31).
- net/mlx5e: Rx, Fix checksum calculation for new hardware (bsc#1127611).
- net: mvneta: Fix err code path of probe (networking-stable-19_05_31).
- net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value (networking-stable-19_05_31).
- net: openvswitch: do not free vport if register_netdevice() is failed (networking-stable-19_06_18).
- net/packet: fix memory leak in packet_set_ring() (git-fixes).
- net: rds: fix memory leak in rds_ib_flush_mr_pool (networking-stable-19_06_09).
- net: seeq: fix crash caused by not set dev.parent (networking-stable-19_05_14).
- net: stmmac: fix reset gpio free missing (networking-stable-19_05_31).
- net/tls: fix socket wmem accounting on fallback with netem (bsc#1109837).
- net/tls: make sure offload also gets the keys wiped (bsc#1109837).
- net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions (networking-stable-19_05_21).
- nvme: fix memory leak caused by incorrect subsystem free (bsc#1143185).
- ocfs2: add first lock wait time in locking_state (bsc#1134390).
- ocfs2: add last unlock times in locking_state (bsc#1134390).
- ocfs2: add locking filter debugfs file (bsc#1134390).
- p54usb: Fix race between disconnect and firmware loading (bsc#1111666).
- packet: Fix error path in packet_init (networking-stable-19_05_14).
- packet: in recvmsg msg_name return at least sizeof sockaddr_ll (git-fixes).
- pci/aer: Use cached AER Capability offset (bsc#1142623).
- pci: Always allow probing with driver_override (bsc#1051510).
- pci: hv: Add hv_pci_remove_slots() when we unload the driver (bsc#1142701).
- pci: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (bsc#1142701).
- pci: hv: Fix a memory leak in hv_eject_device_work() (bsc#1142701).
- pci: hv: Fix a use-after-free bug in hv_eject_device_work() (bsc#1142701).
- pci: hv: Fix return value check in hv_pci_assign_slots() (bsc#1142701).
- pci: hv: Remove unused reason for refcount handler (bsc#1142701).
- pci: hv: support reporting serial number as slot information (bsc#1142701).
- pci/P2PDMA: Fix missing check for dma_virt_ops (bsc#1111666).
- pci / PM: Use SMART_SUSPEND and LEAVE_SUSPENDED flags for PCIe ports (bsc#1142623).
- pci/portdrv: Add #defines for AER and DPC Interrupt Message Number masks (bsc#1142623).
- pci/portdrv: Consolidate comments (bsc#1142623).
- pci/portdrv: Disable port driver in compat mode (bsc#1142623).
- pci/portdrv: Remove pcie_portdrv_err_handler.slot_reset (bsc#1142623).
- pci: portdrv: Restore PCI config state on slot reset (bsc#1142623).
- pci/portdrv: Support PCIe services on subtractive decode bridges (bsc#1142623).
- pci/portdrv: Use conventional Device ID table formatting (bsc#1142623).
- pci: Return error if cannot probe VF (bsc#1051510).
- pkey: Indicate old mkvp only if old and current mkvp are different (bsc#1137827 LTC#178090).
- pktgen: do not sleep with the thread lock held (git-fixes).
- platform/x86: asus-nb-wmi: Support ALS on the Zenbook UX430UQ (bsc#1051510).
- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi (bsc#1051510).
- platform/x86: intel_turbo_max_3: Remove restriction for HWP platforms (jsc#SLE-5439).
- platform/x86: ISST: Add common API to register and handle ioctls (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mailbox interface via MSRs (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mailbox interface via PCI (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select mmio interface (jsc#SLE-5364).
- platform/x86: ISST: Add Intel Speed Select PUNIT MSR interface (jsc#SLE-5364).
- platform/x86: ISST: Add IOCTL to Translate Linux logical CPU to PUNIT CPU number (jsc#SLE-5364).
- platform/x86: ISST: Restore state on resume (jsc#SLE-5364).
- platform/x86: ISST: Store per CPU information (jsc#SLE-5364).
- platform/x86: pmc_atom: Add CB4063 Beckhoff Automation board to critclk_systems DMI table (bsc#1051510).
- powerpc/64s: Remove POWER9 DD1 support (bsc#1055117, LTC#159753, git-fixes).
- powerpc/crypto: Use cheaper random numbers for crc-vpmsum self-test ().
- powerpc/mm: Change function prototype (bsc#1055117).
- powerpc/mm: Consolidate numa_enable check and min_common_depth check (bsc#1140322 LTC#176270).
- powerpc/mm/drconf: Use NUMA_NO_NODE on failures instead of node 0 (bsc#1140322 LTC#176270).
- powerpc/mm: Fix node look up with numa=off boot (bsc#1140322 LTC#176270).
- powerpc/mm/hugetlb: Update huge_ptep_set_access_flags to call __ptep_set_access_flags directly (bsc#1055117).
- powerpc/mm/radix: Change pte relax sequence to handle nest MMU hang (bsc#1055117).
- powerpc/mm/radix: Move function from radix.h to pgtable-radix.c (bsc#1055117).
- powerpc/papr_scm: Force a scm-unbind if initial scm-bind fails (bsc#1140322 LTC#176270).
- powerpc/papr_scm: Update drc_pmem_unbind() to use H_SCM_UNBIND_ALL (bsc#1140322 LTC#176270).
- powerpc/pseries: Update SCM hcall op-codes in hvcall.h (bsc#1140322 LTC#176270).
- powerpc/watchpoint: Restore NV GPRs while returning from exception (bsc#1140945 bsc#1141401 bsc#1141402 bsc#1141452 bsc#1141453 bsc#1141454 LTC#178983 LTC#179191 LTC#179192 LTC#179193 LTC#179194 LTC#179195).
- ppc: Convert mmu context allocation to new IDA API (bsc#1139619 LTC#178538).
- ppp: deflate: Fix possible crash in deflate_init (networking-stable-19_05_21).
- qed: Fix build error without CONFIG_DEVLINK (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qed: Fix -Wmaybe-uninitialized false positive (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- qedi: Use hwfns and affin_hwfn_idx to get MSI-X vector index (jsc#SLE-4693 bsc#1136462).
- rdma/odp: Fix missed unlock in non-blocking invalidate_start (bsc#1103992).
- rdma/srp: Accept again source addresses that do not have a port number (bsc#1103992).
- rdma/srp: Document srp_parse_in() arguments (bsc#1103992 ).
- rdma/uverbs: check for allocation failure in uapi_add_elm() (bsc#1103992).
- rds: ib: fix 'passing zero to ERR_PTR()' warning (git-fixes).
- Revert 'bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()' (bsc#1140652).
- Revert 'e1000e: fix cyclic resets at link up with active tx' (bsc#1051510).
- Revert 'livepatch: Remove reliable stacktrace check in klp_try_switch_task()' (bsc#1071995).
- Revert 'serial: 8250: Do not service RX FIFO if interrupts are disabled' (bsc#1051510).
- rtlwifi: rtl8192cu: fix error handle when usb probe failed (bsc#1111666).
- rtnetlink: always put IFLA_LINK for links with a link-netnsid (networking-stable-19_05_21).
- s390: add alignment hints to vector load and store (jsc#SLE-6907 LTC#175887).
- s390/airq: use DMA memory for adapter interrupts (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cio: add basic protected virtualization support (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cio: introduce DMA pools to cio (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/cpum_cf: add ctr_stcctm() function (jsc#SLE-6904 ).
- s390/cpum_cf: Add minimal in-kernel interface for counter measurements (jsc#SLE-6904).
- s390/cpum_cf: Add support for CPU-MF SVN 6 (jsc#SLE-6904 ).
- s390/cpum_cf_diag: Add support for CPU-MF SVN 6 (jsc#SLE-6904 ).
- s390/cpum_cf_diag: Add support for s390 counter facility diagnostic trace (jsc#SLE-6904).
- s390/cpum_cf: introduce kernel_cpumcf_alert() to obtain measurement alerts (jsc#SLE-6904).
- s390/cpum_cf: introduce kernel_cpumcf_avail() function (jsc#SLE-6904).
- s390/cpum_cf: move counter set controls to a new header file (jsc#SLE-6904).
- s390/cpum_cf: prepare for in-kernel counter measurements (jsc#SLE-6904).
- s390/cpum_cf: rename per-CPU counter facility structure and variables (jsc#SLE-6904).
- s390/cpumf: Add extended counter set definitions for model 8561 and 8562 (bsc#1142052 LTC#179320).
- s390/cpu_mf: add store cpu counter multiple instruction support (jsc#SLE-6904).
- s390/cpumf: Fix warning from check_processor_id (jsc#SLE-6904 ).
- s390/cpu_mf: move struct cpu_cf_events and per-CPU variable to header file (jsc#SLE-6904).
- s390/cpu_mf: replace stcctm5() with the stcctm() function (jsc#SLE-6904).
- s390/dma: provide proper ARCH_ZONE_DMA_BITS value (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/mm: force swiotlb for protected virtualization (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142119 LTC#179331).
- s390/qeth: be drop monitor friendly (bsc#1142115 LTC#179337).
- s390/qeth: be drop monitor friendly (bsc#1142220 LTC#179335).
- s390: remove the unused dma_capable helper (jsc#SLE-6197 bsc#1140559 LTC#173150).
- s390: report new CPU capabilities (jsc#SLE-6907 LTC#175887).
- s390/vtime: steal time exponential moving average (bsc#1119222).
- s390/zcrypt: Fix wrong dispatching for control domain CPRBs (bsc#1137811 LTC#178088).
- scripts/git_sort/git_sort.py: Add mmots tree.
- scsi: cxgb4i: add wait_for_completion() (jsc#SLE-4678 bsc#1136342).
- scsi: cxgbi: KABI: fix handle completion etc (jsc#SLE-4678 bsc#1136342).
- scsi: cxgbi: remove redundant __kfree_skb call on skb and free cst-&gt;atid (jsc#SLE-4678 bsc#1136342).
- scsi: fc: add FPIN ELS definition (bsc#1136217,jsc#SLE-4722).
- scsi/fc: kABI fixes for new ELS_FPIN definition (bsc#1136217,jsc#SLE-4722).
- scsi: ibmvfc: fix WARN_ON during event pool release (bsc#1137458 LTC#178093).
- scsi: lpfc: Add loopback testing to trunking mode (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: add support for posting FC events on FPIN reception (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Annotate switch/case fall-through (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: avoid uninitialized variable warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Cancel queued work for an IO when processing a received ABTS (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Change smp_processor_id() into raw_smp_processor_id() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Convert bootstrap mbx polling from msleep to udelay (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Coordinate adapter error handling with offline handling (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct boot bios information to FDMI registration (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct localport timeout duration error (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct __lpfc_sli_issue_iocb_s4 lockdep check (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Correct nvmet buffer free race condition (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Declare local functions static (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Enhance 6072 log string (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix 32-bit format string warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix a handful of indentation issues (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix alloc context on oas lun creations (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix a recently introduced compiler warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix BFS crash with DIX enabled (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix build error (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix calls to dma_set_mask_and_coherent() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix deadlock due to nested hbalock call (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix driver crash in target reset handler (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix duplicate log message numbers (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix error code if kcalloc() fails (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix error codes in lpfc_sli4_pci_mem_setup() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix fc4type information for FDMI (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix fcp_rsp_len checking on lun reset (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix FDMI fc4type for nvme support (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix FDMI manufacturer attribute value (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix handling of trunk links state reporting (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix hardlockup in scsi_cmd_iocb_cmpl (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix HDMI2 registration string for symbolic name (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix incorrect logical link speed on trunks when links down (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix indentation and balance braces (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix io lost on host resets (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix kernel warnings related to smp_processor_id() (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix link speed reporting for 4-link trunk (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix location of SCSI ktime counters (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix lpfc_nvmet_mrq attribute handling when 0 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix mailbox hang on adapter init (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix memory leak in abnormal exit path from lpfc_eq_create (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix missing wakeups on abort threads (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet async receive buffer replenishment (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet handling of first burst cmd (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet handling of received ABTS for unmapped frames (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix nvmet target abort cmd matching (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix oops when driver is loaded with 1 interrupt vector (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix poor use of hardware queues if fewer irq vectors (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix protocol support on G6 and G7 adapters (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix PT2PT PLOGI collison stopping discovery (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: fix unused variable warning (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fixup eq_clr_intr references (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Fix use-after-free mailbox cmd completion (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Make lpfc_sli4_oas_verify static (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Move trunk_errmsg[] from a header file into a .c file (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Prevent 'use after free' memory overwrite in nvmet LS handling (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Reduce memory footprint for lpfc_queue (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove set but not used variable 'phys_id' (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove set-but-not-used variables (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Remove unused functions (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Resolve inconsistent check of hdwq in lpfc_scsi_cmd_iocb_cmpl (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Resolve irq-unsafe lockdep heirarchy warning in lpfc_io_free (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: resolve static checker warning in lpfc_sli4_hba_unset (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Revert message logging on unsupported topology (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Revise message when stuck due to unresponsive adapter (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Rework misleading nvme not supported in firmware message (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Separate CQ processing for nvmet_fc upcalls (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Specify node affinity for queue memory allocation (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Stop adapter if pci errors detected (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update Copyright in driver version (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update lpfc version to 12.2.0.1 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: Update lpfc version to 12.2.0.3 (bsc#1136217,jsc#SLE-4722).
- scsi: lpfc: use dma_set_mask_and_coherent (bsc#1136217,jsc#SLE-4722).
- scsi: qedf: Add additional checks for io_req-&gt;sc_cmd validity (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add a flag to help debugging io_req which could not be cleaned (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add comment to display logging levels (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add driver state to 'driver_stats' debugfs node (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add LBA to underrun debug messages (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload check (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add missing return in qedf_scsi_done() (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add port_id for fcport into initiate_cleanup debug message (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Add return value to log message if scsi_add_host fails (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Change MSI-X load error message (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check both the FCF and fabric ID before servicing clear virtual link (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check for fcoe_libfc_config failure (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check for tm_flags instead of cmd_type during cleanup (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Check the return value of start_xmit (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Cleanup rrq_work after QEDF_CMD_OUTSTANDING is cleared (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Correctly handle refcounting of rdata (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Do not queue anything if upload is in progress (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Do not send ABTS for under run scenario (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: fc_rport_priv reference counting fixes (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Fix lport may be used uninitialized warning (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Log message if scsi_add_host fails (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Modify flush routine to handle all I/Os and TMF (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Print fcport information on wait for upload timeout (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Print scsi_cmd backpointer in good completion path if the command is still being used (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: remove memset/memcpy to nfunc and use func instead (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Remove set but not used variable 'fr_len' (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: remove set but not used variables (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Update the driver version to 8.37.25.19 (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Update the driver version to 8.37.25.20 (bsc#1136467 jsc#SLE-4694).
- scsi: qedf: Wait for upload and link down processing during soft ctx reset (bsc#1136467 jsc#SLE-4694).
- scsi: qedi: add module param to set ping packet size (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Add packet filter in light L2 Rx path (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Check for session online before getting iSCSI TLV data (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Cleanup redundant QEDI_PAGE_SIZE macro definition (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Fix spelling mistake 'OUSTANDING' -&gt; 'OUTSTANDING' (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Move LL2 producer index processing in BH (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: remove set but not used variables 'cdev' and 'udev' (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Replace PAGE_SIZE with QEDI_PAGE_SIZE (jsc#SLE-4693 bsc#1136462).
- scsi: qedi: Update driver version to 8.33.0.21 (jsc#SLE-4693 bsc#1136462).
- scsi: qla2xxx: do not crash on uninitialized pool list (boo#1138874).
- scsi: scsi_transport_fc: Add FPIN fc event codes (bsc#1136217,jsc#SLE-4722).
- scsi: scsi_transport_fc: refactor event posting routines (bsc#1136217,jsc#SLE-4722).
- sctp: Free cookie before we memdup a new one (networking-stable-19_06_18).
- sctp: silence warns on sctp_stream_init allocations (bsc#1083710).
- serial: uartps: Do not add a trailing semicolon to macro (bsc#1051510).
- serial: uartps: Fix long line over 80 chars (bsc#1051510).
- serial: uartps: Fix multiple line dereference (bsc#1051510).
- serial: uartps: Remove useless return from cdns_uart_poll_put_char (bsc#1051510).
- staging: comedi: amplc_pci230: fix null pointer deref on interrupt (bsc#1051510).
- staging: comedi: dt282x: fix a null pointer deref on interrupt (bsc#1051510).
- staging: rtl8712: reduce stack usage, again (bsc#1051510).
- sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg (networking-stable-19_06_18).
- tcp: fix tcp_set_congestion_control() use from bpf hook (bsc#1109837).
- tcp: reduce tcp_fastretrans_alert() verbosity (git-fixes).
- team: Always enable vlan tx offload (bsc#1051510).
- tools: bpftool: Fix json dump crash on powerpc (bsc#1109837).
- tools: bpftool: use correct argument in cgroup errors (bsc#1109837).
- tools/power/x86: A tool to validate Intel Speed Select commands (jsc#SLE-5364).
- tty: rocket: fix incorrect forward declaration of 'rp_init()' (bsc#1051510).
- tty: serial_core: Set port active bit in uart_port_activate (bsc#1051510).
- tty: serial: cpm_uart - fix init when SMC is relocated (bsc#1051510).
- tuntap: synchronize through tfiles array instead of tun-&gt;numqueues (networking-stable-19_05_14).
- usb: gadget: ether: Fix race between gether_disconnect and rx_submit (bsc#1051510).
- usb: gadget: fusb300_udc: Fix memory leak of fusb300-&gt;ep[i] (bsc#1051510).
- usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC (bsc#1051510).
- usb: pci-quirks: Correct AMD PLL quirk detection (bsc#1051510).
- usb: serial: ftdi_sio: add ID for isodebug v1 (bsc#1051510).
- usb: serial: option: add support for GosunCn ME3630 RNDIS mode (bsc#1051510).
- virtio/s390: add indirection to indicators access (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: DMA support for virtio-ccw (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: make airq summary indicators DMA (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use cacheline aligned airq bit vectors (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use DMA memory for ccw I/O and classic notifiers (jsc#SLE-6197 bsc#1140559 LTC#173150).
- virtio/s390: use vring_create_virtqueue (jsc#SLE-6197 bsc#1140559 LTC#173150).
- vmci: Fix integer overflow in VMCI handle arrays (bsc#1051510).
- vrf: sit mtu should not be updated when vrf netdev is the link (networking-stable-19_05_14).
- vsock/virtio: free packets during the socket release (networking-stable-19_05_21).
- vsock/virtio: set SOCK_DONE on peer shutdown (networking-stable-19_06_18).
- wil6210: drop old event after wmi_call timeout (bsc#1111666).
- wil6210: fix potential out-of-bounds read (bsc#1051510).
- wil6210: fix spurious interrupts in 3-msi (bsc#1111666).
- x86, mm: fix fast GUP with hyper-based TLB flushing (VM Functionality, bsc#1140903).
- xdp: fix possible cq entry leak (bsc#1109837).
- xdp: fix race on generic receive path (bsc#1109837).
- xdp: hold device for umem regardless of zero-copy mode (bsc#1109837).
- xen: let alloc_xenballooned_pages() fail if not enough memory free (bsc#1142450 XSA-300).
- xfs: do not overflow xattr listent buffer (bsc#1143105).
- xprtrdma: Fix use-after-free in rpcrdma_post_recvs (bsc#1103992 ).
- xsk: Properly terminate assignment in xskq_produce_flush_desc (bsc#1109837).

		</description>
<advisory from="security@suse.de">
	<issued date="2019-08-07"/>
	<updated date="2019-08-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083710">SUSE bug 1083710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102247">SUSE bug 1102247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119222">SUSE bug 1119222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123080">SUSE bug 1123080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127034">SUSE bug 1127034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127315">SUSE bug 1127315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130972">SUSE bug 1130972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134097">SUSE bug 1134097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134390">SUSE bug 1134390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134399">SUSE bug 1134399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135335">SUSE bug 1135335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136217">SUSE bug 1136217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136342">SUSE bug 1136342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136462">SUSE bug 1136462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136467">SUSE bug 1136467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137458">SUSE bug 1137458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137534">SUSE bug 1137534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137535">SUSE bug 1137535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137584">SUSE bug 1137584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137609">SUSE bug 1137609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137811">SUSE bug 1137811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137827">SUSE bug 1137827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138874">SUSE bug 1138874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139358">SUSE bug 1139358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139619">SUSE bug 1139619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140133">SUSE bug 1140133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140139">SUSE bug 1140139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140322">SUSE bug 1140322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140559">SUSE bug 1140559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140652">SUSE bug 1140652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140676">SUSE bug 1140676</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140903">SUSE bug 1140903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140945">SUSE bug 1140945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141312">SUSE bug 1141312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141401">SUSE bug 1141401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141402">SUSE bug 1141402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141452">SUSE bug 1141452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141453">SUSE bug 1141453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141454">SUSE bug 1141454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141478">SUSE bug 1141478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141558">SUSE bug 1141558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142023">SUSE bug 1142023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142052">SUSE bug 1142052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142083">SUSE bug 1142083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142112">SUSE bug 1142112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142115">SUSE bug 1142115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142119">SUSE bug 1142119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142220">SUSE bug 1142220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142221">SUSE bug 1142221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142254">SUSE bug 1142254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142350">SUSE bug 1142350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142351">SUSE bug 1142351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142354">SUSE bug 1142354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142359">SUSE bug 1142359</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142450">SUSE bug 1142450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142623">SUSE bug 1142623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142673">SUSE bug 1142673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142701">SUSE bug 1142701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142868">SUSE bug 1142868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143003">SUSE bug 1143003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143045">SUSE bug 1143045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143105">SUSE bug 1143105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143185">SUSE bug 1143185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143189">SUSE bug 1143189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143191">SUSE bug 1143191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143209">SUSE bug 1143209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143507">SUSE bug 1143507</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20855/">CVE-2018-20855</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-1125/">CVE-2019-1125</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-11810/">CVE-2019-11810</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-13631/">CVE-2019-13631</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-13648/">CVE-2019-13648</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14283/">CVE-2019-14283</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14284/">CVE-2019-14284</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501552" comment="cluster-md-kmp-default-4.12.14-197.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501553" comment="dlm-kmp-default-4.12.14-197.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501554" comment="gfs2-kmp-default-4.12.14-197.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501555" comment="ocfs2-kmp-default-4.12.14-197.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139102" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1141267" ref_url="https://bugzilla.suse.com/1141267" source="BUGZILLA"/>
		<reference ref_id="1144059" ref_url="https://bugzilla.suse.com/1144059" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10197" ref_url="https://www.suse.com/security/cve/CVE-2019-10197/" source="CVE"/>
		<description>
This update for samba fixes the following issues:

Security issue fixed:

- CVE-2019-10197: Fixed user escape from share path definition (bsc#1141267).

Bug fix:

- Prepare for future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc#1144059).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-11"/>
	<updated date="2019-09-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141267">SUSE bug 1141267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144059">SUSE bug 1144059</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10197/">CVE-2019-10197</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501556" comment="ctdb-4.9.5+git.187.71edee57d5a-3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139103" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1047238" ref_url="https://bugzilla.suse.com/1047238" source="BUGZILLA"/>
		<reference ref_id="1050911" ref_url="https://bugzilla.suse.com/1050911" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1054914" ref_url="https://bugzilla.suse.com/1054914" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1056686" ref_url="https://bugzilla.suse.com/1056686" source="BUGZILLA"/>
		<reference ref_id="1060662" ref_url="https://bugzilla.suse.com/1060662" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1061843" ref_url="https://bugzilla.suse.com/1061843" source="BUGZILLA"/>
		<reference ref_id="1064597" ref_url="https://bugzilla.suse.com/1064597" source="BUGZILLA"/>
		<reference ref_id="1064701" ref_url="https://bugzilla.suse.com/1064701" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066369" ref_url="https://bugzilla.suse.com/1066369" source="BUGZILLA"/>
		<reference ref_id="1071009" ref_url="https://bugzilla.suse.com/1071009" source="BUGZILLA"/>
		<reference ref_id="1071306" ref_url="https://bugzilla.suse.com/1071306" source="BUGZILLA"/>
		<reference ref_id="1078248" ref_url="https://bugzilla.suse.com/1078248" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1085536" ref_url="https://bugzilla.suse.com/1085536" source="BUGZILLA"/>
		<reference ref_id="1085539" ref_url="https://bugzilla.suse.com/1085539" source="BUGZILLA"/>
		<reference ref_id="1086103" ref_url="https://bugzilla.suse.com/1086103" source="BUGZILLA"/>
		<reference ref_id="1087092" ref_url="https://bugzilla.suse.com/1087092" source="BUGZILLA"/>
		<reference ref_id="1090734" ref_url="https://bugzilla.suse.com/1090734" source="BUGZILLA"/>
		<reference ref_id="1091171" ref_url="https://bugzilla.suse.com/1091171" source="BUGZILLA"/>
		<reference ref_id="1093205" ref_url="https://bugzilla.suse.com/1093205" source="BUGZILLA"/>
		<reference ref_id="1102097" ref_url="https://bugzilla.suse.com/1102097" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1104902" ref_url="https://bugzilla.suse.com/1104902" source="BUGZILLA"/>
		<reference ref_id="1106061" ref_url="https://bugzilla.suse.com/1106061" source="BUGZILLA"/>
		<reference ref_id="1106284" ref_url="https://bugzilla.suse.com/1106284" source="BUGZILLA"/>
		<reference ref_id="1106434" ref_url="https://bugzilla.suse.com/1106434" source="BUGZILLA"/>
		<reference ref_id="1108382" ref_url="https://bugzilla.suse.com/1108382" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1112894" ref_url="https://bugzilla.suse.com/1112894" source="BUGZILLA"/>
		<reference ref_id="1112899" ref_url="https://bugzilla.suse.com/1112899" source="BUGZILLA"/>
		<reference ref_id="1112902" ref_url="https://bugzilla.suse.com/1112902" source="BUGZILLA"/>
		<reference ref_id="1112903" ref_url="https://bugzilla.suse.com/1112903" source="BUGZILLA"/>
		<reference ref_id="1112905" ref_url="https://bugzilla.suse.com/1112905" source="BUGZILLA"/>
		<reference ref_id="1112906" ref_url="https://bugzilla.suse.com/1112906" source="BUGZILLA"/>
		<reference ref_id="1112907" ref_url="https://bugzilla.suse.com/1112907" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114542" ref_url="https://bugzilla.suse.com/1114542" source="BUGZILLA"/>
		<reference ref_id="1118689" ref_url="https://bugzilla.suse.com/1118689" source="BUGZILLA"/>
		<reference ref_id="1119086" ref_url="https://bugzilla.suse.com/1119086" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1120046" ref_url="https://bugzilla.suse.com/1120046" source="BUGZILLA"/>
		<reference ref_id="1120876" ref_url="https://bugzilla.suse.com/1120876" source="BUGZILLA"/>
		<reference ref_id="1120902" ref_url="https://bugzilla.suse.com/1120902" source="BUGZILLA"/>
		<reference ref_id="1123105" ref_url="https://bugzilla.suse.com/1123105" source="BUGZILLA"/>
		<reference ref_id="1123959" ref_url="https://bugzilla.suse.com/1123959" source="BUGZILLA"/>
		<reference ref_id="1124370" ref_url="https://bugzilla.suse.com/1124370" source="BUGZILLA"/>
		<reference ref_id="1129424" ref_url="https://bugzilla.suse.com/1129424" source="BUGZILLA"/>
		<reference ref_id="1129519" ref_url="https://bugzilla.suse.com/1129519" source="BUGZILLA"/>
		<reference ref_id="1129664" ref_url="https://bugzilla.suse.com/1129664" source="BUGZILLA"/>
		<reference ref_id="1131107" ref_url="https://bugzilla.suse.com/1131107" source="BUGZILLA"/>
		<reference ref_id="1131281" ref_url="https://bugzilla.suse.com/1131281" source="BUGZILLA"/>
		<reference ref_id="1131489" ref_url="https://bugzilla.suse.com/1131489" source="BUGZILLA"/>
		<reference ref_id="1131565" ref_url="https://bugzilla.suse.com/1131565" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134291" ref_url="https://bugzilla.suse.com/1134291" source="BUGZILLA"/>
		<reference ref_id="1134476" ref_url="https://bugzilla.suse.com/1134476" source="BUGZILLA"/>
		<reference ref_id="1134881" ref_url="https://bugzilla.suse.com/1134881" source="BUGZILLA"/>
		<reference ref_id="1134882" ref_url="https://bugzilla.suse.com/1134882" source="BUGZILLA"/>
		<reference ref_id="1135219" ref_url="https://bugzilla.suse.com/1135219" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135897" ref_url="https://bugzilla.suse.com/1135897" source="BUGZILLA"/>
		<reference ref_id="1135990" ref_url="https://bugzilla.suse.com/1135990" source="BUGZILLA"/>
		<reference ref_id="1136039" ref_url="https://bugzilla.suse.com/1136039" source="BUGZILLA"/>
		<reference ref_id="1136261" ref_url="https://bugzilla.suse.com/1136261" source="BUGZILLA"/>
		<reference ref_id="1136346" ref_url="https://bugzilla.suse.com/1136346" source="BUGZILLA"/>
		<reference ref_id="1136349" ref_url="https://bugzilla.suse.com/1136349" source="BUGZILLA"/>
		<reference ref_id="1136352" ref_url="https://bugzilla.suse.com/1136352" source="BUGZILLA"/>
		<reference ref_id="1136496" ref_url="https://bugzilla.suse.com/1136496" source="BUGZILLA"/>
		<reference ref_id="1136498" ref_url="https://bugzilla.suse.com/1136498" source="BUGZILLA"/>
		<reference ref_id="1136502" ref_url="https://bugzilla.suse.com/1136502" source="BUGZILLA"/>
		<reference ref_id="1136682" ref_url="https://bugzilla.suse.com/1136682" source="BUGZILLA"/>
		<reference ref_id="1137322" ref_url="https://bugzilla.suse.com/1137322" source="BUGZILLA"/>
		<reference ref_id="1137323" ref_url="https://bugzilla.suse.com/1137323" source="BUGZILLA"/>
		<reference ref_id="1137884" ref_url="https://bugzilla.suse.com/1137884" source="BUGZILLA"/>
		<reference ref_id="1138099" ref_url="https://bugzilla.suse.com/1138099" source="BUGZILLA"/>
		<reference ref_id="1138100" ref_url="https://bugzilla.suse.com/1138100" source="BUGZILLA"/>
		<reference ref_id="1138539" ref_url="https://bugzilla.suse.com/1138539" source="BUGZILLA"/>
		<reference ref_id="1139020" ref_url="https://bugzilla.suse.com/1139020" source="BUGZILLA"/>
		<reference ref_id="1139021" ref_url="https://bugzilla.suse.com/1139021" source="BUGZILLA"/>
		<reference ref_id="1139101" ref_url="https://bugzilla.suse.com/1139101" source="BUGZILLA"/>
		<reference ref_id="1139500" ref_url="https://bugzilla.suse.com/1139500" source="BUGZILLA"/>
		<reference ref_id="1140012" ref_url="https://bugzilla.suse.com/1140012" source="BUGZILLA"/>
		<reference ref_id="1140426" ref_url="https://bugzilla.suse.com/1140426" source="BUGZILLA"/>
		<reference ref_id="1140487" ref_url="https://bugzilla.suse.com/1140487" source="BUGZILLA"/>
		<reference ref_id="1141340" ref_url="https://bugzilla.suse.com/1141340" source="BUGZILLA"/>
		<reference ref_id="1141450" ref_url="https://bugzilla.suse.com/1141450" source="BUGZILLA"/>
		<reference ref_id="1141543" ref_url="https://bugzilla.suse.com/1141543" source="BUGZILLA"/>
		<reference ref_id="1141554" ref_url="https://bugzilla.suse.com/1141554" source="BUGZILLA"/>
		<reference ref_id="1142019" ref_url="https://bugzilla.suse.com/1142019" source="BUGZILLA"/>
		<reference ref_id="1142076" ref_url="https://bugzilla.suse.com/1142076" source="BUGZILLA"/>
		<reference ref_id="1142109" ref_url="https://bugzilla.suse.com/1142109" source="BUGZILLA"/>
		<reference ref_id="1142117" ref_url="https://bugzilla.suse.com/1142117" source="BUGZILLA"/>
		<reference ref_id="1142118" ref_url="https://bugzilla.suse.com/1142118" source="BUGZILLA"/>
		<reference ref_id="1142119" ref_url="https://bugzilla.suse.com/1142119" source="BUGZILLA"/>
		<reference ref_id="1142496" ref_url="https://bugzilla.suse.com/1142496" source="BUGZILLA"/>
		<reference ref_id="1142541" ref_url="https://bugzilla.suse.com/1142541" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1142701" ref_url="https://bugzilla.suse.com/1142701" source="BUGZILLA"/>
		<reference ref_id="1142857" ref_url="https://bugzilla.suse.com/1142857" source="BUGZILLA"/>
		<reference ref_id="1143300" ref_url="https://bugzilla.suse.com/1143300" source="BUGZILLA"/>
		<reference ref_id="1143331" ref_url="https://bugzilla.suse.com/1143331" source="BUGZILLA"/>
		<reference ref_id="1143466" ref_url="https://bugzilla.suse.com/1143466" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1143738" ref_url="https://bugzilla.suse.com/1143738" source="BUGZILLA"/>
		<reference ref_id="1143765" ref_url="https://bugzilla.suse.com/1143765" source="BUGZILLA"/>
		<reference ref_id="1143841" ref_url="https://bugzilla.suse.com/1143841" source="BUGZILLA"/>
		<reference ref_id="1143843" ref_url="https://bugzilla.suse.com/1143843" source="BUGZILLA"/>
		<reference ref_id="1143962" ref_url="https://bugzilla.suse.com/1143962" source="BUGZILLA"/>
		<reference ref_id="1144123" ref_url="https://bugzilla.suse.com/1144123" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1144375" ref_url="https://bugzilla.suse.com/1144375" source="BUGZILLA"/>
		<reference ref_id="1144474" ref_url="https://bugzilla.suse.com/1144474" source="BUGZILLA"/>
		<reference ref_id="1144518" ref_url="https://bugzilla.suse.com/1144518" source="BUGZILLA"/>
		<reference ref_id="1144582" ref_url="https://bugzilla.suse.com/1144582" source="BUGZILLA"/>
		<reference ref_id="1144718" ref_url="https://bugzilla.suse.com/1144718" source="BUGZILLA"/>
		<reference ref_id="1144813" ref_url="https://bugzilla.suse.com/1144813" source="BUGZILLA"/>
		<reference ref_id="1144880" ref_url="https://bugzilla.suse.com/1144880" source="BUGZILLA"/>
		<reference ref_id="1144886" ref_url="https://bugzilla.suse.com/1144886" source="BUGZILLA"/>
		<reference ref_id="1144912" ref_url="https://bugzilla.suse.com/1144912" source="BUGZILLA"/>
		<reference ref_id="1144920" ref_url="https://bugzilla.suse.com/1144920" source="BUGZILLA"/>
		<reference ref_id="1144979" ref_url="https://bugzilla.suse.com/1144979" source="BUGZILLA"/>
		<reference ref_id="1145010" ref_url="https://bugzilla.suse.com/1145010" source="BUGZILLA"/>
		<reference ref_id="1145018" ref_url="https://bugzilla.suse.com/1145018" source="BUGZILLA"/>
		<reference ref_id="1145051" ref_url="https://bugzilla.suse.com/1145051" source="BUGZILLA"/>
		<reference ref_id="1145059" ref_url="https://bugzilla.suse.com/1145059" source="BUGZILLA"/>
		<reference ref_id="1145189" ref_url="https://bugzilla.suse.com/1145189" source="BUGZILLA"/>
		<reference ref_id="1145235" ref_url="https://bugzilla.suse.com/1145235" source="BUGZILLA"/>
		<reference ref_id="1145256" ref_url="https://bugzilla.suse.com/1145256" source="BUGZILLA"/>
		<reference ref_id="1145300" ref_url="https://bugzilla.suse.com/1145300" source="BUGZILLA"/>
		<reference ref_id="1145302" ref_url="https://bugzilla.suse.com/1145302" source="BUGZILLA"/>
		<reference ref_id="1145357" ref_url="https://bugzilla.suse.com/1145357" source="BUGZILLA"/>
		<reference ref_id="1145388" ref_url="https://bugzilla.suse.com/1145388" source="BUGZILLA"/>
		<reference ref_id="1145389" ref_url="https://bugzilla.suse.com/1145389" source="BUGZILLA"/>
		<reference ref_id="1145390" ref_url="https://bugzilla.suse.com/1145390" source="BUGZILLA"/>
		<reference ref_id="1145391" ref_url="https://bugzilla.suse.com/1145391" source="BUGZILLA"/>
		<reference ref_id="1145392" ref_url="https://bugzilla.suse.com/1145392" source="BUGZILLA"/>
		<reference ref_id="1145393" ref_url="https://bugzilla.suse.com/1145393" source="BUGZILLA"/>
		<reference ref_id="1145394" ref_url="https://bugzilla.suse.com/1145394" source="BUGZILLA"/>
		<reference ref_id="1145395" ref_url="https://bugzilla.suse.com/1145395" source="BUGZILLA"/>
		<reference ref_id="1145396" ref_url="https://bugzilla.suse.com/1145396" source="BUGZILLA"/>
		<reference ref_id="1145397" ref_url="https://bugzilla.suse.com/1145397" source="BUGZILLA"/>
		<reference ref_id="1145408" ref_url="https://bugzilla.suse.com/1145408" source="BUGZILLA"/>
		<reference ref_id="1145409" ref_url="https://bugzilla.suse.com/1145409" source="BUGZILLA"/>
		<reference ref_id="1145446" ref_url="https://bugzilla.suse.com/1145446" source="BUGZILLA"/>
		<reference ref_id="1145661" ref_url="https://bugzilla.suse.com/1145661" source="BUGZILLA"/>
		<reference ref_id="1145678" ref_url="https://bugzilla.suse.com/1145678" source="BUGZILLA"/>
		<reference ref_id="1145687" ref_url="https://bugzilla.suse.com/1145687" source="BUGZILLA"/>
		<reference ref_id="1145920" ref_url="https://bugzilla.suse.com/1145920" source="BUGZILLA"/>
		<reference ref_id="1145922" ref_url="https://bugzilla.suse.com/1145922" source="BUGZILLA"/>
		<reference ref_id="1145934" ref_url="https://bugzilla.suse.com/1145934" source="BUGZILLA"/>
		<reference ref_id="1145937" ref_url="https://bugzilla.suse.com/1145937" source="BUGZILLA"/>
		<reference ref_id="1145940" ref_url="https://bugzilla.suse.com/1145940" source="BUGZILLA"/>
		<reference ref_id="1145941" ref_url="https://bugzilla.suse.com/1145941" source="BUGZILLA"/>
		<reference ref_id="1145942" ref_url="https://bugzilla.suse.com/1145942" source="BUGZILLA"/>
		<reference ref_id="1145946" ref_url="https://bugzilla.suse.com/1145946" source="BUGZILLA"/>
		<reference ref_id="1146074" ref_url="https://bugzilla.suse.com/1146074" source="BUGZILLA"/>
		<reference ref_id="1146084" ref_url="https://bugzilla.suse.com/1146084" source="BUGZILLA"/>
		<reference ref_id="1146141" ref_url="https://bugzilla.suse.com/1146141" source="BUGZILLA"/>
		<reference ref_id="1146163" ref_url="https://bugzilla.suse.com/1146163" source="BUGZILLA"/>
		<reference ref_id="1146215" ref_url="https://bugzilla.suse.com/1146215" source="BUGZILLA"/>
		<reference ref_id="1146285" ref_url="https://bugzilla.suse.com/1146285" source="BUGZILLA"/>
		<reference ref_id="1146346" ref_url="https://bugzilla.suse.com/1146346" source="BUGZILLA"/>
		<reference ref_id="1146351" ref_url="https://bugzilla.suse.com/1146351" source="BUGZILLA"/>
		<reference ref_id="1146352" ref_url="https://bugzilla.suse.com/1146352" source="BUGZILLA"/>
		<reference ref_id="1146361" ref_url="https://bugzilla.suse.com/1146361" source="BUGZILLA"/>
		<reference ref_id="1146368" ref_url="https://bugzilla.suse.com/1146368" source="BUGZILLA"/>
		<reference ref_id="1146376" ref_url="https://bugzilla.suse.com/1146376" source="BUGZILLA"/>
		<reference ref_id="1146378" ref_url="https://bugzilla.suse.com/1146378" source="BUGZILLA"/>
		<reference ref_id="1146381" ref_url="https://bugzilla.suse.com/1146381" source="BUGZILLA"/>
		<reference ref_id="1146391" ref_url="https://bugzilla.suse.com/1146391" source="BUGZILLA"/>
		<reference ref_id="1146399" ref_url="https://bugzilla.suse.com/1146399" source="BUGZILLA"/>
		<reference ref_id="1146413" ref_url="https://bugzilla.suse.com/1146413" source="BUGZILLA"/>
		<reference ref_id="1146425" ref_url="https://bugzilla.suse.com/1146425" source="BUGZILLA"/>
		<reference ref_id="1146516" ref_url="https://bugzilla.suse.com/1146516" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146524" ref_url="https://bugzilla.suse.com/1146524" source="BUGZILLA"/>
		<reference ref_id="1146526" ref_url="https://bugzilla.suse.com/1146526" source="BUGZILLA"/>
		<reference ref_id="1146529" ref_url="https://bugzilla.suse.com/1146529" source="BUGZILLA"/>
		<reference ref_id="1146531" ref_url="https://bugzilla.suse.com/1146531" source="BUGZILLA"/>
		<reference ref_id="1146543" ref_url="https://bugzilla.suse.com/1146543" source="BUGZILLA"/>
		<reference ref_id="1146547" ref_url="https://bugzilla.suse.com/1146547" source="BUGZILLA"/>
		<reference ref_id="1146550" ref_url="https://bugzilla.suse.com/1146550" source="BUGZILLA"/>
		<reference ref_id="1146575" ref_url="https://bugzilla.suse.com/1146575" source="BUGZILLA"/>
		<reference ref_id="1146589" ref_url="https://bugzilla.suse.com/1146589" source="BUGZILLA"/>
		<reference ref_id="1146678" ref_url="https://bugzilla.suse.com/1146678" source="BUGZILLA"/>
		<reference ref_id="1146938" ref_url="https://bugzilla.suse.com/1146938" source="BUGZILLA"/>
		<reference ref_id="1148031" ref_url="https://bugzilla.suse.com/1148031" source="BUGZILLA"/>
		<reference ref_id="1148032" ref_url="https://bugzilla.suse.com/1148032" source="BUGZILLA"/>
		<reference ref_id="1148033" ref_url="https://bugzilla.suse.com/1148033" source="BUGZILLA"/>
		<reference ref_id="1148034" ref_url="https://bugzilla.suse.com/1148034" source="BUGZILLA"/>
		<reference ref_id="1148035" ref_url="https://bugzilla.suse.com/1148035" source="BUGZILLA"/>
		<reference ref_id="1148093" ref_url="https://bugzilla.suse.com/1148093" source="BUGZILLA"/>
		<reference ref_id="1148133" ref_url="https://bugzilla.suse.com/1148133" source="BUGZILLA"/>
		<reference ref_id="1148192" ref_url="https://bugzilla.suse.com/1148192" source="BUGZILLA"/>
		<reference ref_id="1148196" ref_url="https://bugzilla.suse.com/1148196" source="BUGZILLA"/>
		<reference ref_id="1148198" ref_url="https://bugzilla.suse.com/1148198" source="BUGZILLA"/>
		<reference ref_id="1148202" ref_url="https://bugzilla.suse.com/1148202" source="BUGZILLA"/>
		<reference ref_id="1148219" ref_url="https://bugzilla.suse.com/1148219" source="BUGZILLA"/>
		<reference ref_id="1148297" ref_url="https://bugzilla.suse.com/1148297" source="BUGZILLA"/>
		<reference ref_id="1148303" ref_url="https://bugzilla.suse.com/1148303" source="BUGZILLA"/>
		<reference ref_id="1148308" ref_url="https://bugzilla.suse.com/1148308" source="BUGZILLA"/>
		<reference ref_id="1148363" ref_url="https://bugzilla.suse.com/1148363" source="BUGZILLA"/>
		<reference ref_id="1148379" ref_url="https://bugzilla.suse.com/1148379" source="BUGZILLA"/>
		<reference ref_id="1148394" ref_url="https://bugzilla.suse.com/1148394" source="BUGZILLA"/>
		<reference ref_id="1148527" ref_url="https://bugzilla.suse.com/1148527" source="BUGZILLA"/>
		<reference ref_id="1148570" ref_url="https://bugzilla.suse.com/1148570" source="BUGZILLA"/>
		<reference ref_id="1148574" ref_url="https://bugzilla.suse.com/1148574" source="BUGZILLA"/>
		<reference ref_id="1148616" ref_url="https://bugzilla.suse.com/1148616" source="BUGZILLA"/>
		<reference ref_id="1148617" ref_url="https://bugzilla.suse.com/1148617" source="BUGZILLA"/>
		<reference ref_id="1148619" ref_url="https://bugzilla.suse.com/1148619" source="BUGZILLA"/>
		<reference ref_id="1148698" ref_url="https://bugzilla.suse.com/1148698" source="BUGZILLA"/>
		<reference ref_id="1148859" ref_url="https://bugzilla.suse.com/1148859" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1149053" ref_url="https://bugzilla.suse.com/1149053" source="BUGZILLA"/>
		<reference ref_id="1149083" ref_url="https://bugzilla.suse.com/1149083" source="BUGZILLA"/>
		<reference ref_id="1149104" ref_url="https://bugzilla.suse.com/1149104" source="BUGZILLA"/>
		<reference ref_id="1149105" ref_url="https://bugzilla.suse.com/1149105" source="BUGZILLA"/>
		<reference ref_id="1149106" ref_url="https://bugzilla.suse.com/1149106" source="BUGZILLA"/>
		<reference ref_id="1149197" ref_url="https://bugzilla.suse.com/1149197" source="BUGZILLA"/>
		<reference ref_id="1149214" ref_url="https://bugzilla.suse.com/1149214" source="BUGZILLA"/>
		<reference ref_id="1149224" ref_url="https://bugzilla.suse.com/1149224" source="BUGZILLA"/>
		<reference ref_id="1149325" ref_url="https://bugzilla.suse.com/1149325" source="BUGZILLA"/>
		<reference ref_id="1149376" ref_url="https://bugzilla.suse.com/1149376" source="BUGZILLA"/>
		<reference ref_id="1149413" ref_url="https://bugzilla.suse.com/1149413" source="BUGZILLA"/>
		<reference ref_id="1149418" ref_url="https://bugzilla.suse.com/1149418" source="BUGZILLA"/>
		<reference ref_id="1149424" ref_url="https://bugzilla.suse.com/1149424" source="BUGZILLA"/>
		<reference ref_id="1149522" ref_url="https://bugzilla.suse.com/1149522" source="BUGZILLA"/>
		<reference ref_id="1149527" ref_url="https://bugzilla.suse.com/1149527" source="BUGZILLA"/>
		<reference ref_id="1149539" ref_url="https://bugzilla.suse.com/1149539" source="BUGZILLA"/>
		<reference ref_id="1149552" ref_url="https://bugzilla.suse.com/1149552" source="BUGZILLA"/>
		<reference ref_id="1149591" ref_url="https://bugzilla.suse.com/1149591" source="BUGZILLA"/>
		<reference ref_id="1149602" ref_url="https://bugzilla.suse.com/1149602" source="BUGZILLA"/>
		<reference ref_id="1149612" ref_url="https://bugzilla.suse.com/1149612" source="BUGZILLA"/>
		<reference ref_id="1149626" ref_url="https://bugzilla.suse.com/1149626" source="BUGZILLA"/>
		<reference ref_id="1149652" ref_url="https://bugzilla.suse.com/1149652" source="BUGZILLA"/>
		<reference ref_id="1149713" ref_url="https://bugzilla.suse.com/1149713" source="BUGZILLA"/>
		<reference ref_id="1149940" ref_url="https://bugzilla.suse.com/1149940" source="BUGZILLA"/>
		<reference ref_id="1149976" ref_url="https://bugzilla.suse.com/1149976" source="BUGZILLA"/>
		<reference ref_id="1150025" ref_url="https://bugzilla.suse.com/1150025" source="BUGZILLA"/>
		<reference ref_id="1150033" ref_url="https://bugzilla.suse.com/1150033" source="BUGZILLA"/>
		<reference ref_id="1150112" ref_url="https://bugzilla.suse.com/1150112" source="BUGZILLA"/>
		<reference ref_id="1150562" ref_url="https://bugzilla.suse.com/1150562" source="BUGZILLA"/>
		<reference ref_id="1150727" ref_url="https://bugzilla.suse.com/1150727" source="BUGZILLA"/>
		<reference ref_id="1150860" ref_url="https://bugzilla.suse.com/1150860" source="BUGZILLA"/>
		<reference ref_id="1150861" ref_url="https://bugzilla.suse.com/1150861" source="BUGZILLA"/>
		<reference ref_id="1150933" ref_url="https://bugzilla.suse.com/1150933" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18551" ref_url="https://www.suse.com/security/cve/CVE-2017-18551/" source="CVE"/>
		<reference ref_id="CVE-2018-20976" ref_url="https://www.suse.com/security/cve/CVE-2018-20976/" source="CVE"/>
		<reference ref_id="CVE-2018-21008" ref_url="https://www.suse.com/security/cve/CVE-2018-21008/" source="CVE"/>
		<reference ref_id="CVE-2019-10207" ref_url="https://www.suse.com/security/cve/CVE-2019-10207/" source="CVE"/>
		<reference ref_id="CVE-2019-14814" ref_url="https://www.suse.com/security/cve/CVE-2019-14814/" source="CVE"/>
		<reference ref_id="CVE-2019-14815" ref_url="https://www.suse.com/security/cve/CVE-2019-14815/" source="CVE"/>
		<reference ref_id="CVE-2019-14816" ref_url="https://www.suse.com/security/cve/CVE-2019-14816/" source="CVE"/>
		<reference ref_id="CVE-2019-14835" ref_url="https://www.suse.com/security/cve/CVE-2019-14835/" source="CVE"/>
		<reference ref_id="CVE-2019-15030" ref_url="https://www.suse.com/security/cve/CVE-2019-15030/" source="CVE"/>
		<reference ref_id="CVE-2019-15031" ref_url="https://www.suse.com/security/cve/CVE-2019-15031/" source="CVE"/>
		<reference ref_id="CVE-2019-15090" ref_url="https://www.suse.com/security/cve/CVE-2019-15090/" source="CVE"/>
		<reference ref_id="CVE-2019-15098" ref_url="https://www.suse.com/security/cve/CVE-2019-15098/" source="CVE"/>
		<reference ref_id="CVE-2019-15099" ref_url="https://www.suse.com/security/cve/CVE-2019-15099/" source="CVE"/>
		<reference ref_id="CVE-2019-15117" ref_url="https://www.suse.com/security/cve/CVE-2019-15117/" source="CVE"/>
		<reference ref_id="CVE-2019-15118" ref_url="https://www.suse.com/security/cve/CVE-2019-15118/" source="CVE"/>
		<reference ref_id="CVE-2019-15211" ref_url="https://www.suse.com/security/cve/CVE-2019-15211/" source="CVE"/>
		<reference ref_id="CVE-2019-15212" ref_url="https://www.suse.com/security/cve/CVE-2019-15212/" source="CVE"/>
		<reference ref_id="CVE-2019-15214" ref_url="https://www.suse.com/security/cve/CVE-2019-15214/" source="CVE"/>
		<reference ref_id="CVE-2019-15215" ref_url="https://www.suse.com/security/cve/CVE-2019-15215/" source="CVE"/>
		<reference ref_id="CVE-2019-15216" ref_url="https://www.suse.com/security/cve/CVE-2019-15216/" source="CVE"/>
		<reference ref_id="CVE-2019-15217" ref_url="https://www.suse.com/security/cve/CVE-2019-15217/" source="CVE"/>
		<reference ref_id="CVE-2019-15218" ref_url="https://www.suse.com/security/cve/CVE-2019-15218/" source="CVE"/>
		<reference ref_id="CVE-2019-15219" ref_url="https://www.suse.com/security/cve/CVE-2019-15219/" source="CVE"/>
		<reference ref_id="CVE-2019-15220" ref_url="https://www.suse.com/security/cve/CVE-2019-15220/" source="CVE"/>
		<reference ref_id="CVE-2019-15221" ref_url="https://www.suse.com/security/cve/CVE-2019-15221/" source="CVE"/>
		<reference ref_id="CVE-2019-15222" ref_url="https://www.suse.com/security/cve/CVE-2019-15222/" source="CVE"/>
		<reference ref_id="CVE-2019-15239" ref_url="https://www.suse.com/security/cve/CVE-2019-15239/" source="CVE"/>
		<reference ref_id="CVE-2019-15290" ref_url="https://www.suse.com/security/cve/CVE-2019-15290/" source="CVE"/>
		<reference ref_id="CVE-2019-15292" ref_url="https://www.suse.com/security/cve/CVE-2019-15292/" source="CVE"/>
		<reference ref_id="CVE-2019-15538" ref_url="https://www.suse.com/security/cve/CVE-2019-15538/" source="CVE"/>
		<reference ref_id="CVE-2019-15666" ref_url="https://www.suse.com/security/cve/CVE-2019-15666/" source="CVE"/>
		<reference ref_id="CVE-2019-15902" ref_url="https://www.suse.com/security/cve/CVE-2019-15902/" source="CVE"/>
		<reference ref_id="CVE-2019-15917" ref_url="https://www.suse.com/security/cve/CVE-2019-15917/" source="CVE"/>
		<reference ref_id="CVE-2019-15919" ref_url="https://www.suse.com/security/cve/CVE-2019-15919/" source="CVE"/>
		<reference ref_id="CVE-2019-15920" ref_url="https://www.suse.com/security/cve/CVE-2019-15920/" source="CVE"/>
		<reference ref_id="CVE-2019-15921" ref_url="https://www.suse.com/security/cve/CVE-2019-15921/" source="CVE"/>
		<reference ref_id="CVE-2019-15924" ref_url="https://www.suse.com/security/cve/CVE-2019-15924/" source="CVE"/>
		<reference ref_id="CVE-2019-15926" ref_url="https://www.suse.com/security/cve/CVE-2019-15926/" source="CVE"/>
		<reference ref_id="CVE-2019-15927" ref_url="https://www.suse.com/security/cve/CVE-2019-15927/" source="CVE"/>
		<reference ref_id="CVE-2019-9456" ref_url="https://www.suse.com/security/cve/CVE-2019-9456/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2424-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-September/005945.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following new features were implemented:

- jsc#SLE-4875: [CML] New device IDs for CML
- jsc#SLE-7294: Add cpufreq driver for Raspberry Pi
- fate#326869: perf: pmu mem_load/store event support
- fate#327380: KVM: Add hardware CPU Model - kernel part
- fate#327377: KVM: Support for configurable virtio-crypto
- fate#327775: vpmem: DRAM backed persistent volumes for improved SAP HANA on POWER restart times
- fate#326472: Marvell Armada 7K/8K Ethernet (incl. 10G) kernel enablement
- fate#326416: Hi1620 (Vendor: Huawei): RDMA kernel enablement
- fate#326415: Hi1620 (Vendor: Huawei): HNS3 (100G) network kernel enablement

The following security bugs were fixed:

- CVE-2019-14835: Fix QEMU-KVM Guest to Host Kernel Escape. (bsc#1150112).
- CVE-2019-15216: Fix a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver. (bsc#1146361).
- CVE-2019-15924: Fix a NULL pointer dereference because there was no -ENOMEM upon an alloc_workqueue failure. (bsc#1149612).
- CVE-2019-9456: In Pixel C USB monitor driver there was a possible OOB write due to a missing bounds check. This could have lead to local escalation of privilege with System execution privileges needed. (bsc#1150025 CVE-2019-9456).
- CVE-2019-15030, CVE-2019-15031: On the powerpc platform, a local user could read vector registers of other users' processes via an interrupt. (bsc#1149713)
- CVE-2019-15920: SMB2_read in fs/cifs/smb2pdu.c had a use-after-free. (bsc#1149626)
- CVE-2019-15921: There was a memory leak issue when idr_alloc() failed (bsc#1149602)
- CVE-2018-21008: A use-after-free can be caused by the function rsi_mac80211_detach (bsc#1149591).
- CVE-2019-15919: SMB2_write in fs/cifs/smb2pdu.c had a use-after-free. (bsc#1149552)
- CVE-2019-15917: There was a use-after-free issue when hci_uart_register_dev() failed in hci_uart_set_proto() (bsc#1149539)
- CVE-2019-15926: Out of bounds access existed in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx (bsc#1149527)
- CVE-2019-15927: An out-of-bounds access existed in the function build_audio_procunit (bsc#1149522)
- CVE-2019-15902: A backporting error reintroduced the Spectre vulnerability that it aimed to eliminate. (bnc#1149376)
- CVE-2019-15666: There was an out-of-bounds array access in __xfrm_policy_unlink, which would cause denial of service, because verify_newpolicy_info mishandled directory validation. (bsc#1148394).
- CVE-2019-15219: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver. (bsc#1146524)
- CVE-2019-14814, CVE-2019-14815, CVE-2019-14816: Fix three heap-based buffer overflows in marvell wifi chip driver kernel, that allowed local users to cause a denial of service (system crash) or possibly execute arbitrary code. (bnc#1146516)
- CVE-2019-15220: There was a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver. (bsc#1146526)
- CVE-2019-15538: XFS partially wedged when a chgrp failed on account of being out of disk quota. This was primarily a local DoS attack vector, but it could result as well in remote DoS if the XFS filesystem was exported for instance via NFS. (bsc#1148032, bsc#1148093)
- CVE-2019-15290: There was a NULL pointer dereference caused by a malicious USB device in the ath6kl_usb_alloc_urb_from_pipe function (bsc#1146543).
- CVE-2019-15098: USB driver net/wireless/ath/ath6kl/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor. (bsc#1146378).
- CVE-2019-15221, CVE-2019-15222: There was a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver. (bsc#1146529, bsc#1146531)
- CVE-2019-10207: Fix a NULL pointer dereference in hci_uart bluetooth driver (bsc#1142857 bsc#1123959).
- CVE-2019-15117: parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel mishandled a short descriptor, leading to out-of-bounds memory access. (bsc#1145920).
- CVE-2019-15118: check_input_term in sound/usb/mixer.c in the Linux kernel mishandled recursion, leading to kernel stack exhaustion. (bsc#1145922).
- CVE-2017-18551: There was an out of bounds write in the function i2c_smbus_xfer_emulated. (bsc#1146163).
- CVE-2019-15090: In the qedi_dbg_* family of functions, there was an out-of-bounds read. (bsc#1146399)
- CVE-2018-20976: A use after free existed, related to xfs_fs_fill_super failure. (bsc#1146285)
- CVE-2019-15215: There was a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver. (bsc#1135642 bsc#1146425)
- CVE-2019-15212: There was a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver. (bsc#1051510 bsc#1146391).
- CVE-2019-15292: There was a use-after-free in atalk_proc_exit (bsc#1146678)
- CVE-2019-15217: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver. (bsc#1146547).
- CVE-2019-15214: There was a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. (bsc#1146550)
- CVE-2019-15218: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver. (bsc#1051510 bsc#1146413)
- CVE-2019-15211: There was a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c did not properly allocate memory. (bsc#1146519).
- CVE-2019-15239: An incorrect backport of a certain net/ipv4/tcp_output.c fix allowed a local attacker to trigger multiple use-after-free conditions. This could result in a kernel crash, or potentially in privilege escalation. (bsc#1146589)
- CVE-2019-15099: drivers/net/wireless/ath/ath10k/usb.c had a NULL pointer dereference via an incomplete address in an endpoint descriptor. (bsc#1146368)

The following non-security bugs were fixed:

- 9p/rdma: do not disconnect on down_interruptible EAGAIN (bsc#1051510).
- 9p/rdma: remove useless check in cm_event_handler (bsc#1051510).
- 9p/virtio: Add cleanup path in p9_virtio_init (bsc#1051510).
- 9p/xen: Add cleanup path in p9_trans_xen_init (bsc#1051510).
- 9p/xen: fix check for xenbus_read error in front_probe (bsc#1051510).
- 9p: acl: fix uninitialized iattr access (bsc#1051510).
- 9p: p9dirent_read: check network-provided name length (bsc#1051510).
- 9p: pass the correct prototype to read_cache_page (bsc#1051510).
- acpi/IORT: Fix off-by-one check in iort_dev_find_its_id() (bsc#1051510).
- acpi/arm64: ignore 5.1 FADTs that are reported as 5.0 (bsc#1051510).
- acpi: PM: Fix regression in acpi_device_set_power() (bsc#1051510).
- acpi: fix false-positive -Wuninitialized warning (bsc#1051510).
- acpica: Increase total number of possible Owner IDs (bsc#1148859).
- af_key: fix leaks in key_pol_get_resp and dump_sp (bsc#1051510).
- af_packet: Block execution of tasks waiting for transmit to complete in AF_PACKET (networking-stable-19_07_02).
- alsa: firewire: fix a memory leak bug (bsc#1051510).
- alsa: hda - Add a generic reboot_notify (bsc#1051510).
- alsa: hda - Apply workaround for another AMD chip 1022:1487 (bsc#1051510).
- alsa: hda - Do not override global PCM hw info flag (bsc#1051510).
- alsa: hda - Fix a memory leak bug (bsc#1051510).
- alsa: hda - Fix potential endless loop at applying quirks (bsc#1051510).
- alsa: hda - Fixes inverted Conexant GPIO mic mute led (bsc#1051510).
- alsa: hda - Let all conexant codec enter D3 when rebooting (bsc#1051510).
- alsa: hda - Workaround for crackled sound on AMD controller (1022:1457) (bsc#1051510).
- alsa: hda/ca0132 - Add new SBZ quirk (bsc#1051510).
- alsa: hda/realtek - Add quirk for HP Envy x360 (bsc#1051510).
- alsa: hda/realtek - Add quirk for HP Pavilion 15 (bsc#1051510).
- alsa: hda/realtek - Enable internal speaker &amp; headset mic of ASUS UX431FL (bsc#1051510).
- alsa: hda/realtek - Fix overridden device-specific initialization (bsc#1051510).
- alsa: hda/realtek - Fix the problem of two front mics on a ThinkCentre (bsc#1051510).
- alsa: hda: Fix 1-minute detection delay when i915 module is not available (bsc#1111666).
- alsa: hda: kabi workaround for generic parser flag (bsc#1051510).
- alsa: hiface: fix multiple memory leak bugs (bsc#1051510).
- alsa: line6: Fix memory leak at line6_init_pcm() error path (bsc#1051510).
- alsa: pcm: fix lost wakeup event scenarios in snd_pcm_drain (bsc#1051510).
- alsa: seq: Fix potential concurrent access to the deleted pool (bsc#1051510).
- alsa: usb-audio: Add implicit fb quirk for Behringer UFX1604 (bsc#1051510).
- alsa: usb-audio: Check mixer unit bitmap yet more strictly (bsc#1051510).
- alsa: usb-audio: Fix gpf in snd_usb_pipe_sanity_check (bsc#1051510).
- alsa: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate() (bsc#1051510).
- alsa: usb-audio: fix a memory leak bug (bsc#1111666).
- arch: integrate XIVE support (bsc#1085030, bsc#1144518, LTC#178833).
- arm64/kernel: enable A53 erratum #8434319 handling at runtime (bsc#1148219).
- arm64/kernel: rename module_emit_adrp_veneer-&gt;module_emit_veneer_for_adrp (bsc#1148219).
- arm64: fix undefined reference to 'printk' (bsc#1148219).
- arm64: kvm: Fix architecturally invalid reset value for FPEXC32_EL2 (bsc#1133021).
- arm64: module: do not BUG when exceeding preallocated PLT count (bsc#1148219).
- arm64: pci: Preserve firmware configuration when desired (SLE-9332).
- arm: (bsc#1145687) Add the following kernel config to ARM64: CONFIG_ACPI_PCI_SLOT=y CONFIG_HOTPLUG_PCI_ACPI=y
- arm: kvm: Add SMCCC_ARCH_WORKAROUND_1 fast handling (bsc#1133021).
- arm: kvm: report support for SMCCC_ARCH_WORKAROUND_1 (bsc#1133021).
- asoc: Fail card instantiation if DAI format setup fails (bsc#1051510).
- asoc: dapm: Fix handling of custom_stop_condition on DApm graph walks (bsc#1051510).
- ata: libahci: do not complain in case of deferred probe (bsc#1051510).
- ath10k: Change the warning message string (bsc#1051510).
- ath10k: Drop WARN_ON()s that always trigger during system resume (bsc#1111666).
- batman-adv: Only read OGM tvlv_len after buffer len check (bsc#1051510).
- batman-adv: Only read OGM2 tvlv_len after buffer len check (bsc#1051510).
- batman-adv: fix uninit-value in batadv_netlink_get_ifindex() (bsc#1051510).
- bcache: Revert 'bcache: use sysfs_match_string() instead of __sysfs_match_string()' (git fixes).
- bcache: bsc#1144979: kernel oops on reading sysfs cache_mode file
- bcache: fix possible memory leak in bch_cached_dev_run() (git fixes).
- bio: fix improper use of smp_mb__before_atomic() (git fixes).
- blk-mq: Fix spelling in a source code comment (git fixes).
- blk-mq: backport fixes for blk_mq_complete_e_request_sync() (bsc#1145661).
- blk-mq: introduce blk_mq_complete_request_sync() (bsc#1145661).
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait (bsc#1141543).
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait (bsc#1141543).
- block, documentation: Fix wbt_lat_usec documentation (git fixes).
- bluetooth: 6lowpan: search for destination address in all peers (bsc#1051510).
- bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug (bsc#1051510).
- bluetooth: Check state in l2cap_disconnect_rsp (bsc#1051510).
- bluetooth: btqca: Add a short delay before downloading the NVM (bsc#1051510).
- bluetooth: hci_bcsp: Fix memory leak in rx_skb (bsc#1051510).
- bluetooth: validate BLE connection interval updates (bsc#1051510).
- bnx2fc_fcoe: Use skb_queue_walk_safe() (bsc#1136502 jsc#SLE-4703).
- bnx2x: Disable multi-cos feature (bsc#1136498 jsc#SLE-4699).
- bnx2x: Prevent ptp_task to be rescheduled indefinitely (networking-stable-19_07_25).
- bnxt_en: Fix VNIC clearing logic for 57500 chips (bsc#1104745 ).
- bnxt_en: Fix to include flow direction in L2 key (bsc#1104745 ).
- bnxt_en: Improve RX doorbell sequence (bsc#1104745).
- bnxt_en: Use correct src_fid to determine direction of the flow (bsc#1104745).
- bonding: Always enable vlan tx offload (networking-stable-19_07_02).
- bonding: validate ip header before check IPPROTO_IGMP (networking-stable-19_07_25).
- bpf: sockmap, only create entry if ulp is not already enabled (bsc#1109837).
- bpf: sockmap, sock_map_delete needs to use xchg (bsc#1109837).
- bpf: sockmap, synchronize_rcu before free'ing map (bsc#1109837).
- btrfs: Fix delalloc inodes invalidation during transaction abort (bsc#1050911).
- btrfs: Split btrfs_del_delalloc_inode into 2 functions (bsc#1050911).
- btrfs: add a helper to retrive extent inline ref type (bsc#1149325).
- btrfs: add cleanup_ref_head_accounting helper (bsc#1050911).
- btrfs: add missing inode version, ctime and mtime updates when punching hole (bsc#1140487).
- btrfs: add one more sanity check for shared ref type (bsc#1149325).
- btrfs: clean up pending block groups when transaction commit aborts (bsc#1050911).
- btrfs: convert to use btrfs_get_extent_inline_ref_type (bsc#1149325).
- btrfs: do not abort transaction at btrfs_update_root() after failure to COW path (bsc#1150933).
- btrfs: fix assertion failure during fsync and use of stale transaction (bsc#1150562).
- btrfs: fix data loss after inode eviction, renaming it, and fsync it (bsc#1145941).
- btrfs: fix fsync not persisting dentry deletions due to inode evictions (bsc#1145942).
- btrfs: fix incremental send failure after deduplication (bsc#1145940).
- btrfs: fix pinned underflow after transaction aborted (bsc#1050911).
- btrfs: fix race between send and deduplication that lead to failures and crashes (bsc#1145059).
- btrfs: fix race leading to fs corruption after transaction abort (bsc#1145937).
- btrfs: handle delayed ref head accounting cleanup in abort (bsc#1050911).
- btrfs: prevent send failures and crashes due to concurrent relocation (bsc#1145059).
- btrfs: remove BUG() in add_data_reference (bsc#1149325).
- btrfs: remove BUG() in btrfs_extent_inline_ref_size (bsc#1149325).
- btrfs: remove BUG() in print_extent_item (bsc#1149325).
- btrfs: remove BUG_ON in __add_tree_block (bsc#1149325).
- btrfs: scrub: add memalloc_nofs protection around init_ipath (bsc#1086103).
- btrfs: start readahead also in seed devices (bsc#1144886).
- btrfs: track running balance in a simpler way (bsc#1145059).
- btrfs: use GFP_KERNEL in init_ipath (bsc#1086103).
- caif-hsi: fix possible deadlock in cfhsi_exit_module() (networking-stable-19_07_25).
- can: m_can: implement errata 'Needless activation of MRAF irq' (bsc#1051510).
- can: mcp251x: add support for mcp25625 (bsc#1051510).
- can: peak_usb: fix potential double kfree_skb() (bsc#1051510).
- can: peak_usb: force the string buffer NULL-terminated (bsc#1051510).
- can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices (bsc#1051510).
- can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices (bsc#1051510).
- can: rcar_canfd: fix possible IRQ storm on high load (bsc#1051510).
- can: sja1000: force the string buffer NULL-terminated (bsc#1051510).
- carl9170: fix misuse of device driver API (bsc#1142635).
- ceph: add btime field to ceph_inode_info (bsc#1148133 bsc#1136682).
- ceph: add ceph.snap.btime vxattr (bsc#1148133 bsc#1148570).
- ceph: add change_attr field to ceph_inode_info (bsc#1148133 bsc#1136682).
- ceph: always get rstat from auth mds (bsc#1146346).
- ceph: carry snapshot creation time with inodes (bsc#1148133 bsc#1148570).
- ceph: clean up ceph.dir.pin vxattr name sizeof() (bsc#1146346).
- ceph: clean up ceph.dir.pin vxattr name sizeof() (bsc#1146346).
- ceph: clear page dirty before invalidate page (bsc#1148133).
- ceph: decode feature bits in session message (bsc#1146346).
- ceph: decode feature bits in session message (bsc#1146346).
- ceph: do not blindly unregister session that is in opening state (bsc#1148133).
- ceph: do not blindly unregister session that is in opening state (bsc#1148133).
- ceph: do not try fill file_lock on unsuccessful GETFILELOCK reply (bsc#1148133).
- ceph: do not try fill file_lock on unsuccessful GETFILELOCK reply (bsc#1148133).
- ceph: fix 'ceph.dir.rctime' vxattr value (bsc#1148133 bsc#1135219).
- ceph: fix 'ceph.dir.rctime' vxattr value (bsc#1148133 bsc#1135219).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in fill_inode() (bsc#1148133).
- ceph: fix buffer free while holding i_ceph_lock in fill_inode() (bsc#1148133).
- ceph: fix decode_locker to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- ceph: fix improper use of smp_mb__before_atomic() (bsc#1148133).
- ceph: fix improper use of smp_mb__before_atomic() (bsc#1148133).
- ceph: fix infinite loop in get_quota_realm() (bsc#1148133).
- ceph: fix invalid opcode (bsc#1148133 bsc#1138539).
- ceph: fix iov_iter issues in ceph_direct_read_write() (bsc#1141450).
- ceph: fix listxattr vxattr buffer length calculation (bsc#1148133 bsc#1148570).
- ceph: handle btime in cap messages (bsc#1148133 bsc#1136682).
- ceph: handle change_attr in cap messages (bsc#1148133 bsc#1136682).
- ceph: have MDS map decoding use entity_addr_t decoder (bsc#1148133 bsc#1136682).
- ceph: hold i_ceph_lock when removing caps for freeing inode (bsc#1148133).
- ceph: hold i_ceph_lock when removing caps for freeing inode (bsc#1148133).
- ceph: increment change_attribute on local changes (bsc#1148133 bsc#1136682).
- ceph: initialize superblock s_time_gran to 1 (bsc#1148133).
- ceph: remove request from waiting list before unregister (bsc#1148133).
- ceph: remove request from waiting list before unregister (bsc#1148133).
- ceph: remove unused vxattr length helpers (bsc#1148133 bsc#1148570).
- ceph: silence a checker warning in mdsc_show() (bsc#1148133).
- ceph: silence a checker warning in mdsc_show() (bsc#1148133).
- ceph: support cephfs' own feature bits (bsc#1146346).
- ceph: support getting ceph.dir.pin vxattr (bsc#1146346).
- ceph: support getting ceph.dir.pin vxattr (bsc#1146346).
- ceph: support versioned reply (bsc#1146346).
- ceph: support versioned reply (bsc#1146346).
- ceph: use bit flags to define vxattr attributes (bsc#1146346).
- cifs: Accept validate negotiate if server return NT_STATUS_NOT_SUPPORTED (bsc#1144333).
- cifs: Add DFS cache routines (bsc#1144333).
- cifs: Add direct I/O functions to file_operations (bsc#1144333).
- cifs: Add minor debug message during negprot (bsc#1144333).
- cifs: Add smb2_send_recv (bsc#1144333).
- cifs: Add support for FSCTL passthrough that write data to the server (bsc#1144333).
- cifs: Add support for direct I/O read (bsc#1144333).
- cifs: Add support for direct I/O write (bsc#1144333).
- cifs: Add support for direct pages in rdata (bsc#1144333).
- cifs: Add support for direct pages in wdata (bsc#1144333).
- cifs: Add support for failover in cifs_mount() (bsc#1144333).
- cifs: Add support for failover in cifs_reconnect() (bsc#1144333).
- cifs: Add support for failover in cifs_reconnect_tcon() (bsc#1144333).
- cifs: Add support for failover in smb2_reconnect() (bsc#1144333).
- cifs: Add support for reading attributes on SMB2+ (bsc#1051510, bsc#1144333).
- cifs: Add support for writing attributes on SMB2+ (bsc#1051510, bsc#1144333).
- cifs: Adds information-level logging function (bsc#1144333).
- cifs: Adjust MTU credits before reopening a file (bsc#1144333).
- cifs: Allocate memory for all iovs in smb2_ioctl (bsc#1144333).
- cifs: Allocate validate negotiation request through kmalloc (bsc#1144333).
- cifs: Always reset read error to -EIO if no response (bsc#1144333).
- cifs: Always resolve hostname before reconnecting (bsc#1051510, bsc#1144333).
- cifs: Avoid returning EBUSY to upper layer VFS (bsc#1144333).
- cifs: Calculate the correct request length based on page offset and tail size (bsc#1144333).
- cifs: Call MID callback before destroying transport (bsc#1144333).
- cifs: Change SMB2_open to return an iov for the error parameter (bsc#1144333).
- cifs: Check for reconnects before sending async requests (bsc#1144333).
- cifs: Check for reconnects before sending compound requests (bsc#1144333).
- cifs: Check for timeout on Negotiate stage (bsc#1091171, bsc#1144333).
- cifs: Count SMB3 credits for malformed pending responses (bsc#1144333).
- cifs: Display SMB2 error codes in the hex format (bsc#1144333).
- cifs: Do not assume one credit for async responses (bsc#1144333).
- cifs: Do not consider -ENODATA as stat failure for reads (bsc#1144333).
- cifs: Do not count -ENODATA as failure for query directory (bsc#1051510, bsc#1144333).
- cifs: Do not hide EINTR after sending network packets (bsc#1051510, bsc#1144333).
- cifs: Do not log credits when unmounting a share (bsc#1144333).
- cifs: Do not match port on SMBDirect transport (bsc#1144333).
- cifs: Do not modify mid entry after submitting I/O in cifs_call_async (bsc#1051510, bsc#1144333).
- cifs: Do not reconnect TCP session in add_credits() (bsc#1051510, bsc#1144333).
- cifs: Do not reset lease state to NONE on lease break (bsc#1051510, bsc#1144333).
- cifs: Do not set credits to 1 if the server didn't grant anything (bsc#1144333).
- cifs: Do not skip SMB2 message IDs on send failures (bsc#1144333).
- cifs: Find and reopen a file before get MTU credits in writepages (bsc#1144333).
- cifs: Fix DFS cache refresher for DFS links (bsc#1144333).
- cifs: Fix NULL pointer deref on SMB2_tcon() failure (bsc#1071009, bsc#1144333).
- cifs: Fix NULL pointer dereference of devname (bnc#1129519).
- cifs: Fix NULL ptr deref (bsc#1144333).
- cifs: Fix a debug message (bsc#1144333).
- cifs: Fix a race condition with cifs_echo_request (bsc#1144333).
- cifs: Fix a tiny potential memory leak (bsc#1144333).
- cifs: Fix adjustment of credits for MTU requests (bsc#1051510, bsc#1144333).
- cifs: Fix an issue with re-sending rdata when transport returning -EAGAIN (bsc#1144333).
- cifs: Fix an issue with re-sending wdata when transport returning -EAGAIN (bsc#1144333).
- cifs: Fix autonegotiate security settings mismatch (bsc#1087092, bsc#1144333).
- cifs: Fix check for matching with existing mount (bsc#1144333).
- cifs: Fix credit calculation for encrypted reads with errors (bsc#1051510, bsc#1144333).
- cifs: Fix credit calculations in compound mid callback (bsc#1144333).
- cifs: Fix credit computation for compounded requests (bsc#1144333).
- cifs: Fix credits calculation for cancelled requests (bsc#1144333).
- cifs: Fix credits calculations for reads with errors (bsc#1051510, bsc#1144333).
- cifs: Fix encryption/signing (bsc#1144333).
- cifs: Fix error mapping for SMB2_LOCK command which caused OFD lock problem (bsc#1051510, bsc#1144333).
- cifs: Fix error paths in writeback code (bsc#1144333).
- cifs: Fix infinite loop when using hard mount option (bsc#1091171, bsc#1144333).
- cifs: Fix invalid check in __cifs_calc_signature() (bsc#1144333).
- cifs: Fix kernel oops when traceSMB is enabled (bsc#1144333).
- cifs: Fix leaking locked VFS cache pages in writeback retry (bsc#1144333).
- cifs: Fix lease buffer length error (bsc#1144333).
- cifs: Fix memory leak in smb2_set_ea() (bsc#1051510, bsc#1144333).
- cifs: Fix missing put_xid in cifs_file_strict_mmap (bsc#1087092, bsc#1144333).
- cifs: Fix module dependency (bsc#1144333).
- cifs: Fix mounts if the client is low on credits (bsc#1144333).
- cifs: Fix possible hang during async MTU reads and writes (bsc#1051510, bsc#1144333).
- cifs: Fix possible oops and memory leaks in async IO (bsc#1144333).
- cifs: Fix potential OOB access of lock element array (bsc#1051510, bsc#1144333).
- cifs: Fix read after write for files with read caching (bsc#1051510, bsc#1144333).
- cifs: Fix separator when building path from dentry (bsc#1051510, bsc#1144333).
- cifs: Fix signing for SMB2/3 (bsc#1144333).
- cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (bsc#1144333).
- cifs: Fix slab-out-of-bounds when tracing SMB tcon (bsc#1144333).
- cifs: Fix stack out-of-bounds in smb{2,3}_create_lease_buf() (bsc#1051510, bsc#1144333).
- cifs: Fix to use kmem_cache_free() instead of kfree() (bsc#1144333).
- cifs: Fix trace command logging for SMB2 reads and writes (bsc#1144333).
- cifs: Fix use after free of a mid_q_entry (bsc#1112903, bsc#1144333).
- cifs: Fix use-after-free in SMB2_read (bsc#1144333).
- cifs: Fix use-after-free in SMB2_write (bsc#1144333).
- cifs: Fix validation of signed data in smb2 (bsc#1144333).
- cifs: Fix validation of signed data in smb3+ (bsc#1144333).
- cifs: For SMB2 security informaion query, check for minimum sized security descriptor instead of sizeof FileAllInformation class (bsc#1051510, bsc#1144333).
- cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure cifs) (bsc#1144333).
- cifs: Introduce helper function to get page offset and length in smb_rqst (bsc#1144333).
- cifs: Introduce offset for the 1st page in data transfer structures (bsc#1144333).
- cifs: Limit memory used by lock request calls to a page (bsc#1144333).
- cifs: Make devname param optional in cifs_compose_mount_options() (bsc#1144333).
- cifs: Make sure all data pages are signed correctly (bsc#1144333).
- cifs: Make use of DFS cache to get new DFS referrals (bsc#1144333).
- cifs: Mask off signals when sending SMB packets (bsc#1144333).
- cifs: Minor Kconfig clarification (bsc#1144333).
- cifs: Move credit processing to mid callbacks for SMB3 (bsc#1144333).
- cifs: Move open file handling to writepages (bsc#1144333).
- cifs: Move unlocking pages from wdata_send_pages() (bsc#1144333).
- cifs: OFD locks do not conflict with eachothers (bsc#1051510, bsc#1144333).
- cifs: Only free DFS target list if we actually got one (bsc#1144333).
- cifs: Only send SMB2_NEGOTIATE command on new TCP connections (bsc#1144333).
- cifs: Pass page offset for calculating signature (bsc#1144333).
- cifs: Pass page offset for encrypting (bsc#1144333).
- cifs: Print message when attempting a mount (bsc#1144333).
- cifs: Properly handle auto disabling of serverino option (bsc#1144333).
- cifs: Reconnect expired SMB sessions (bnc#1060662).
- cifs: Refactor out cifs_mount() (bsc#1144333).
- cifs: Remove custom credit adjustments for SMB2 async IO (bsc#1144333).
- cifs: Reopen file before get SMB2 MTU credits for async IO (bsc#1144333).
- cifs: Respect SMB2 hdr preamble size in read responses (bsc#1144333).
- cifs: Respect reconnect in MTU credits calculations (bsc#1144333).
- cifs: Respect reconnect in non-MTU credits calculations (bsc#1144333).
- cifs: Return -EAGAIN instead of -ENOTSOCK (bsc#1144333).
- cifs: Return error code when getting file handle for writeback (bsc#1144333).
- cifs: SMBD: Add SMB Direct debug counters (bsc#1144333).
- cifs: SMBD: Add SMB Direct protocol initial values and constants (bsc#1144333).
- cifs: SMBD: Add parameter rdata to smb2_new_read_req (bsc#1144333).
- cifs: SMBD: Add rdma mount option (bsc#1144333).
- cifs: SMBD: Disable signing on SMB direct transport (bsc#1144333).
- cifs: SMBD: Do not call ib_dereg_mr on invalidated memory registration (bsc#1144333).
- cifs: SMBD: Establish SMB Direct connection (bsc#1144333).
- cifs: SMBD: Fix the definition for SMB2_CHANNEL_RDMA_V1_INVALIDATE (bsc#1144333).
- cifs: SMBD: Implement RDMA memory registration (bsc#1144333).
- cifs: SMBD: Implement function to create a SMB Direct connection (bsc#1144333).
- cifs: SMBD: Implement function to destroy a SMB Direct connection (bsc#1144333).
- cifs: SMBD: Implement function to receive data via RDMA receive (bsc#1144333).
- cifs: SMBD: Implement function to reconnect to a SMB Direct transport (bsc#1144333).
- cifs: SMBD: Implement function to send data via RDMA send (bsc#1144333).
- cifs: SMBD: Read correct returned data length for RDMA write (SMB read) I/O (bsc#1144333).
- cifs: SMBD: Set SMB Direct maximum read or write size for I/O (bsc#1144333).
- cifs: SMBD: Support page offset in RDMA recv (bsc#1144333).
- cifs: SMBD: Support page offset in RDMA send (bsc#1144333).
- cifs: SMBD: Support page offset in memory registration (bsc#1144333).
- cifs: SMBD: Upper layer connects to SMBDirect session (bsc#1144333).
- cifs: SMBD: Upper layer destroys SMB Direct session on shutdown or umount (bsc#1144333).
- cifs: SMBD: Upper layer performs SMB read via RDMA write through memory registration (bsc#1144333).
- cifs: SMBD: Upper layer performs SMB write via RDMA read through memory registration (bsc#1144333).
- cifs: SMBD: Upper layer receives data via RDMA receive (bsc#1144333).
- cifs: SMBD: Upper layer reconnects to SMB Direct session (bsc#1144333).
- cifs: SMBD: Upper layer sends data via RDMA send (bsc#1144333).
- cifs: SMBD: _smbd_get_connection() can be static (bsc#1144333).
- cifs: SMBD: export protocol initial values (bsc#1144333).
- cifs: SMBD: fix spelling mistake: faield and legnth (bsc#1144333).
- cifs: SMBD: work around gcc -Wmaybe-uninitialized warning (bsc#1144333).
- cifs: Save TTL value when parsing DFS referrals (bsc#1144333).
- cifs: Select all required crypto modules (bsc#1085536, bsc#1144333).
- cifs: Set reconnect instance to one initially (bsc#1144333).
- cifs: Show locallease in /proc/mounts for cifs shares mounted with locallease feature (bsc#1144333).
- cifs: Silence uninitialized variable warning (bsc#1144333).
- cifs: Skip any trailing backslashes from UNC (bsc#1144333).
- cifs: Try to acquire credits at once for compound requests (bsc#1144333).
- cifs: Use GFP_ATOMIC when a lock is held in cifs_mount() (bsc#1144333).
- cifs: Use ULL suffix for 64-bit constant (bsc#1051510, bsc#1144333).
- cifs: Use correct packet length in SMB2_TRANSFORM header (bsc#1144333).
- cifs: Use kmemdup in SMB2_ioctl_init() (bsc#1144333).
- cifs: Use kmemdup rather than duplicating its implementation in smb311_posix_mkdir() (bsc#1144333).
- cifs: Use kzfree() to free password (bsc#1144333).
- cifs: Use offset when reading pages (bsc#1144333).
- cifs: Use smb 2 - 3 and cifsacl mount options getacl functions (bsc#1051510, bsc#1144333).
- cifs: Use smb 2 - 3 and cifsacl mount options setacl function (bsc#1051510, bsc#1144333).
- cifs: When sending data on socket, pass the correct page offset (bsc#1144333).
- cifs: a smb2_validate_and_copy_iov failure does not mean the handle is invalid (bsc#1144333).
- cifs: add .splice_write (bsc#1144333).
- cifs: add IOCTL for QUERY_INFO passthrough to userspace (bsc#1144333).
- cifs: add ONCE flag for cifs_dbg type (bsc#1144333).
- cifs: add SFM mapping for 0x01-0x1F (bsc#1144333).
- cifs: add SMB2_close_init()/SMB2_close_free() (bsc#1144333).
- cifs: add SMB2_ioctl_init/free helpers to be used with compounding (bsc#1144333).
- cifs: add SMB2_query_info_[init|free]() (bsc#1144333).
- cifs: add a new SMB2_close_flags function (bsc#1144333).
- cifs: add a smb2_compound_op and change QUERY_INFO to use it (bsc#1144333).
- cifs: add a timeout argument to wait_for_free_credits (bsc#1144333).
- cifs: add a warning if we try to to dequeue a deleted mid (bsc#1144333).
- cifs: add compound_send_recv() (bsc#1144333).
- cifs: add credits from unmatched responses/messages (bsc#1144333).
- cifs: add debug output to show nocase mount option (bsc#1144333).
- cifs: add fiemap support (bsc#1144333).
- cifs: add iface info to struct cifs_ses (bsc#1144333).
- cifs: add lease tracking to the cached root fid (bsc#1144333).
- cifs: add missing GCM module dependency (bsc#1144333).
- cifs: add missing debug entries for kconfig options (bsc#1051510, bsc#1144333).
- cifs: add missing support for ACLs in SMB 3.11 (bsc#1051510, bsc#1144333).
- cifs: add pdu_size to the TCP_Server_Info structure (bsc#1144333).
- cifs: add resp_buf_size to the mid_q_entry structure (bsc#1144333).
- cifs: add server argument to the dump_detail method (bsc#1144333).
- cifs: add server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- cifs: add sha512 secmech (bsc#1051510, bsc#1144333).
- cifs: add spinlock for the openFileList to cifsInodeInfo (bsc#1144333).
- cifs: add support for SEEK_DATA and SEEK_HOLE (bsc#1144333).
- cifs: add support for ioctl on directories (bsc#1144333).
- cifs: address trivial coverity warning (bsc#1144333).
- cifs: allow calling SMB2_xxx_free(NULL) (bsc#1144333).
- cifs: allow disabling less secure legacy dialects (bsc#1144333).
- cifs: allow guest mounts to work for smb3.11 (bsc#1051510, bsc#1144333).
- cifs: always add credits back for unsolicited PDUs (bsc#1144333).
- cifs: auto disable 'serverino' in dfs mounts (bsc#1144333).
- cifs: avoid a kmalloc in smb2_send_recv/SendReceive2 for the common case (bsc#1144333).
- cifs: cache FILE_ALL_INFO for the shared root handle (bsc#1144333).
- cifs: change SMB2_OP_RENAME and SMB2_OP_HARDLINK to use compounding (bsc#1144333).
- cifs: change SMB2_OP_SET_EOF to use compounding (bsc#1144333).
- cifs: change SMB2_OP_SET_INFO to use compounding (bsc#1144333).
- cifs: change mkdir to use a compound (bsc#1144333).
- cifs: change smb2_get_data_area_len to take a smb2_sync_hdr as argument (bsc#1144333).
- cifs: change smb2_query_eas to use the compound query-info helper (bsc#1144333).
- cifs: change unlink to use a compound (bsc#1144333).
- cifs: change validate_buf to validate_iov (bsc#1144333).
- cifs: change wait_for_free_request() to take flags as argument (bsc#1144333).
- cifs: check CIFS_MOUNT_NO_DFS when trying to reuse existing sb (bsc#1144333).
- cifs: check MaxPathNameComponentLength != 0 before using it (bsc#1085536, bsc#1144333).
- cifs: check for STATUS_USER_SESSION_DELETED (bsc#1112902, bsc#1144333).
- cifs: check if SMB2 PDU size has been padded and suppress the warning (bsc#1144333).
- cifs: check kmalloc before use (bsc#1051510, bsc#1144333).
- cifs: check kzalloc return (bsc#1144333).
- cifs: check ntwrk_buf_start for NULL before dereferencing it (bsc#1144333).
- cifs: check rsp for NULL before dereferencing in SMB2_open (bsc#1085536, bsc#1144333).
- cifs: cifs_read_allocate_pages: do not iterate through whole page array on ENOMEM (bsc#1144333).
- cifs: clean up indentation, replace spaces with tab (bsc#1144333).
- cifs: cleanup smb2ops.c and normalize strings (bsc#1144333).
- cifs: complete PDU definitions for interface queries (bsc#1144333).
- cifs: connect to servername instead of IP for IPC$ share (bsc#1051510, bsc#1144333).
- cifs: create SMB2_open_init()/SMB2_open_free() helpers (bsc#1144333).
- cifs: create a define for how many iovs we need for an SMB2_open() (bsc#1144333).
- cifs: create a define for the max number of iov we need for a SMB2 set_info (bsc#1144333).
- cifs: create a helper function for compound query_info (bsc#1144333).
- cifs: create helpers for SMB2_set_info_init/free() (bsc#1144333).
- cifs: do not allow creating sockets except with SMB1 posix exensions (bsc#1102097, bsc#1144333).
- cifs: do not attempt cifs operation on smb2+ rename error (bsc#1144333).
- cifs: do not dereference smb_file_target before null check (bsc#1051510, bsc#1144333).
- cifs: do not log STATUS_NOT_FOUND errors for DFS (bsc#1051510, bsc#1144333).
- cifs: do not return atime less than mtime (bsc#1144333).
- cifs: do not send invalid input buffer on QUERY_INFO requests (bsc#1144333).
- cifs: do not show domain= in mount output when domain is empty (bsc#1144333).
- cifs: do not use __constant_cpu_to_le32() (bsc#1144333).
- cifs: document tcon/ses/server refcount dance (bsc#1144333).
- cifs: dump IPC tcon in debug proc file (bsc#1071306, bsc#1144333).
- cifs: dump every session iface info (bsc#1144333).
- cifs: fallback to older infolevels on findfirst queryinfo retry (bsc#1144333).
- cifs: fix GlobalMid_Lock bug in cifs_reconnect (bsc#1144333).
- cifs: fix NULL deref in SMB2_read (bsc#1085539, bsc#1144333).
- cifs: fix POSIX lock leak and invalid ptr deref (bsc#1114542, bsc#1144333).
- cifs: fix SMB1 breakage (bsc#1144333).
- cifs: fix a buffer leak in smb2_query_symlink (bsc#1144333).
- cifs: fix a credits leak for compund commands (bsc#1144333).
- cifs: fix bi-directional fsctl passthrough calls (bsc#1144333).
- cifs: fix build break when CONFIG_CIFS_DEBUG2 enabled (bsc#1144333).
- cifs: fix build errors for SMB_DIRECT (bsc#1144333).
- cifs: fix circular locking dependency (bsc#1064701, bsc#1144333).
- cifs: fix computation for MAX_SMB2_HDR_SIZE (bsc#1144333).
- cifs: fix confusing warning message on reconnect (bsc#1144333).
- cifs: fix crash in cifs_dfs_do_automount (bsc#1144333).
- cifs: fix crash in smb2_compound_op()/smb2_set_next_command() (bsc#1144333).
- cifs: fix crash querying symlinks stored as reparse-points (bsc#1144333).
- cifs: fix credits leak for SMB1 oplock breaks (bsc#1144333).
- cifs: fix deadlock in cached root handling (bsc#1144333).
- cifs: fix encryption in SMB3.1.1 (bsc#1144333).
- cifs: fix handle leak in smb2_query_symlink() (bsc#1144333).
- cifs: fix incorrect handling of smb2_set_sparse() return in smb3_simple_falloc (bsc#1144333).
- cifs: fix kref underflow in close_shroot() (bsc#1144333).
- cifs: fix memory leak and remove dead code (bsc#1144333).
- cifs: fix memory leak in SMB2_open() (bsc#1112894, bsc#1144333).
- cifs: fix memory leak in SMB2_read (bsc#1144333).
- cifs: fix memory leak of an allocated cifs_ntsd structure (bsc#1144333).
- cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case (bsc#1144333).
- cifs: fix page reference leak with readv/writev (bsc#1144333).
- cifs: fix panic in smb2_reconnect (bsc#1144333).
- cifs: fix parsing of symbolic link error response (bsc#1144333).
- cifs: fix return value for cifs_listxattr (bsc#1051510, bsc#1144333).
- cifs: fix rmmod regression in cifs.ko caused by force_sig changes (bsc#1144333).
- cifs: fix sha512 check in cifs_crypto_secmech_release (bsc#1051510, bsc#1144333).
- cifs: fix signed/unsigned mismatch on aio_read patch (bsc#1144333).
- cifs: fix smb3_zero_range for Azure (bsc#1144333).
- cifs: fix smb3_zero_range so it can expand the file-size when required (bsc#1144333).
- cifs: fix sparse warning on previous patch in a few printks (bsc#1144333).
- cifs: fix spelling mistake, EACCESS -&gt; EACCES (bsc#1144333).
- cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() (bsc#1144333).
- cifs: fix typo in cifs_dbg (bsc#1144333).
- cifs: fix typo in debug message with struct field ia_valid (bsc#1144333).
- cifs: fix uninitialized ptr deref in smb2 signing (bsc#1144333).
- cifs: fix use-after-free of the lease keys (bsc#1144333).
- cifs: fix wrapping bugs in num_entries() (bsc#1051510, bsc#1144333).
- cifs: flush before set-info if we have writeable handles (bsc#1144333).
- cifs: handle large EA requests more gracefully in smb2+ (bsc#1144333).
- cifs: handle netapp error codes (bsc#1136261).
- cifs: hide unused functions (bsc#1051510, bsc#1144333).
- cifs: hide unused functions (bsc#1051510, bsc#1144333).
- cifs: implement v3.11 preauth integrity (bsc#1051510, bsc#1144333).
- cifs: integer overflow in in SMB2_ioctl() (bsc#1051510, bsc#1144333).
- cifs: invalidate cache when we truncate a file (bsc#1051510, bsc#1144333).
- cifs: keep FileInfo handle live during oplock break (bsc#1106284, bsc#1131565, bsc#1144333).
- cifs: limit amount of data we request for xattrs to CIFSMaxBufSize (bsc#1144333).
- cifs: make 'nodfs' mount opt a superblock flag (bsc#1051510, bsc#1144333).
- cifs: make IPC a regular tcon (bsc#1071306, bsc#1144333).
- cifs: make arrays static const, reduces object code size (bsc#1144333).
- cifs: make minor clarifications to module params for cifs.ko (bsc#1144333).
- cifs: make mknod() an smb_version_op (bsc#1144333).
- cifs: make rmdir() use compounding (bsc#1144333).
- cifs: make smb_send_rqst take an array of requests (bsc#1144333).
- cifs: minor clarification in comments (bsc#1144333).
- cifs: minor updates to module description for cifs.ko (bsc#1144333).
- cifs: move default port definitions to cifsglob.h (bsc#1144333).
- cifs: move large array from stack to heap (bsc#1144333).
- cifs: only wake the thread for the very last PDU in a compound (bsc#1144333).
- cifs: parse and store info on iface queries (bsc#1144333).
- cifs: pass flags down into wait_for_free_credits() (bsc#1144333).
- cifs: pass page offsets on SMB1 read/write (bsc#1144333).
- cifs: prevent integer overflow in nxt_dir_entry() (bsc#1051510, bsc#1144333).
- cifs: prevent starvation in wait_for_free_credits for multi-credit requests (bsc#1144333).
- cifs: print CIFSMaxBufSize as part of /proc/fs/cifs/DebugData (bsc#1144333).
- cifs: protect against server returning invalid file system block size (bsc#1144333).
- cifs: prototype declaration and definition for smb 2 - 3 and cifsacl mount options (bsc#1051510, bsc#1144333).
- cifs: prototype declaration and definition to set acl for smb 2 - 3 and cifsacl mount options (bsc#1051510, bsc#1144333).
- cifs: push rfc1002 generation down the stack (bsc#1144333).
- cifs: read overflow in is_valid_oplock_break() (bsc#1144333).
- cifs: refactor and clean up arguments in the reparse point parsing (bsc#1144333).
- cifs: refactor crypto shash/sdesc allocation&amp;free (bsc#1051510, bsc#1144333).
- cifs: release auth_key.response for reconnect (bsc#1085536, bsc#1144333).
- cifs: release cifs root_cred after exit_cifs (bsc#1085536, bsc#1144333).
- cifs: remove coverity warning in calc_lanman_hash (bsc#1144333).
- cifs: remove header_preamble_size where it is always 0 (bsc#1144333).
- cifs: remove redundant duplicated assignment of pointer 'node' (bsc#1144333).
- cifs: remove rfc1002 hardcoded constants from cifs_discard_remaining_data() (bsc#1144333).
- cifs: remove rfc1002 header from all SMB2 response structures (bsc#1144333).
- cifs: remove rfc1002 header from smb2 read/write requests (bsc#1144333).
- cifs: remove rfc1002 header from smb2_close_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_create_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_echo_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_flush_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_ioctl_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_lease_ack (bsc#1144333).
- cifs: remove rfc1002 header from smb2_lock_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_logoff_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_negotiate_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_oplock_break we get from server (bsc#1144333).
- cifs: remove rfc1002 header from smb2_query_directory_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_query_info_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_sess_setup_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_set_info_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_tree_connect_req (bsc#1144333).
- cifs: remove rfc1002 header from smb2_tree_disconnect_req (bsc#1144333).
- cifs: remove set but not used variable 'cifs_sb' (bsc#1144333).
- cifs: remove set but not used variable 'sep' (bsc#1144333).
- cifs: remove set but not used variable 'server' (bsc#1144333).
- cifs: remove set but not used variable 'smb_buf' (bsc#1144333).
- cifs: remove small_smb2_init (bsc#1144333).
- cifs: remove smb2_send_recv() (bsc#1144333).
- cifs: remove struct smb2_hdr (bsc#1144333).
- cifs: remove struct smb2_oplock_break_rsp (bsc#1144333).
- cifs: remove the is_falloc argument to SMB2_set_eof (bsc#1144333).
- cifs: remove unused stats (bsc#1144333).
- cifs: remove unused value pointed out by Coverity (bsc#1144333).
- cifs: remove unused variable from SMB2_read (bsc#1144333).
- cifs: rename and clarify CIFS_ASYNC_OP and CIFS_NO_RESP (bsc#1144333).
- cifs: replace a 4 with server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- cifs: replace snprintf with scnprintf (bsc#1144333).
- cifs: return -ENODATA when deleting an xattr that does not exist (bsc#1144333).
- cifs: return correct errors when pinning memory failed for direct I/O (bsc#1144333).
- cifs: return error on invalid value written to cifsFYI (bsc#1144333).
- cifs: set *resp_buf_type to NO_BUFFER on error (bsc#1144333).
- cifs: set mapping error when page writeback fails in writepage or launder_pages (bsc#1144333).
- cifs: set oparms.create_options rather than or'ing in CREATE_OPEN_BACKUP_INTENT (bsc#1144333).
- cifs: show 'soft' in the mount options for hard mounts (bsc#1144333).
- cifs: show the w bit for writeable /proc/fs/cifs/* files (bsc#1144333).
- cifs: silence compiler warnings showing up with gcc-8.0.0 (bsc#1090734, bsc#1144333).
- cifs: simple stats should always be enabled (bsc#1144333).
- cifs: simplify code by removing CONFIG_CIFS_ACL ifdef  (bsc#1144333). - Update config files.
- cifs: simplify how we handle credits in compound_send_recv() (bsc#1144333).
- cifs: smb2 commands can not be negative, remove confusing check (bsc#1144333).
- cifs: smb2ops: Fix NULL check in smb2_query_symlink (bsc#1144333).
- cifs: smb2ops: Fix listxattr() when there are no EAs (bsc#1051510, bsc#1144333).
- cifs: smb2pdu: Fix potential NULL pointer dereference (bsc#1144333).
- cifs: smbd: Avoid allocating iov on the stack (bsc#1144333).
- cifs: smbd: Check for iov length on sending the last iov (bsc#1144333).
- cifs: smbd: Do not destroy transport on RDMA disconnect (bsc#1144333).
- cifs: smbd: Do not use RDMA read/write when signing is used (bsc#1144333).
- cifs: smbd: Dump SMB packet when configured (bsc#1144333).
- cifs: smbd: Enable signing with smbdirect (bsc#1144333).
- cifs: smbd: Indicate to retry on transport sending failure (bsc#1144333).
- cifs: smbd: Retry on memory registration failure (bsc#1144333).
- cifs: smbd: Return EINTR when interrupted (bsc#1144333).
- cifs: smbd: avoid reconnect lockup (bsc#1144333).
- cifs: smbd: depend on INFINIBAND_ADDR_TRANS (bsc#1144333).
- cifs: smbd: disconnect transport on RDMA errors (bsc#1144333).
- cifs: smbd: take an array of reqeusts when sending upper layer data (bsc#1144333).
- cifs: start DFS cache refresher in cifs_mount() (bsc#1144333).
- cifs: store the leaseKey in the fid on SMB2_open (bsc#1051510, bsc#1144333).
- cifs: suppress some implicit-fallthrough warnings (bsc#1144333).
- cifs: track writepages in vfs operation counters (bsc#1144333).
- cifs: update __smb_send_rqst() to take an array of requests (bsc#1144333).
- cifs: update calc_size to take a server argument (bsc#1144333).
- cifs: update init_sg, crypt_message to take an array of rqst (bsc#1144333).
- cifs: update internal module number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.12 (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.12 (bsc#1144333).
- cifs: update internal module version number for cifs.ko to 2.14 (bsc#1144333).
- cifs: update module internal version number (bsc#1144333).
- cifs: update multiplex loop to handle compounded responses (bsc#1144333).
- cifs: update receive_encrypted_standard to handle compounded responses (bsc#1144333).
- cifs: update smb2_calc_size to use smb2_sync_hdr instead of smb2_hdr (bsc#1144333).
- cifs: update smb2_check_message to handle PDUs without a 4 byte length header (bsc#1144333).
- cifs: update smb2_queryfs() to use compounding (bsc#1144333).
- cifs: use a compound for setting an xattr (bsc#1144333).
- cifs: use a refcount to protect open/closing the cached file handle (bsc#1144333).
- cifs: use correct format characters (bsc#1144333).
- cifs: use tcon_ipc instead of use_ipc parameter of SMB2_ioctl (bsc#1071306, bsc#1144333).
- cifs: use the correct length when pinning memory for direct I/O for write (bsc#1144333).
- cifs: wait_for_free_credits() make it possible to wait for &gt;=1 credits (bsc#1144333).
- cifs: we can not use small padding iovs together with encryption (bsc#1144333).
- cifs: zero sensitive data when freeing (bsc#1087092, bsc#1144333).
- cifs: zero-range does not require the file is sparse (bsc#1144333).
- cifs:smbd Use the correct DMA direction when sending data (bsc#1144333).
- cifs:smbd When reconnecting to server, call smbd_destroy() after all MIDs have been called (bsc#1144333).
- cifs_lookup(): cifs_get_inode_...() never returns 0 with *inode left NULL (bsc#1144333).
- cifs_lookup(): switch to d_splice_alias() (bsc#1144333).
- clk: Export clk_bulk_prepare() (bsc#1144813).
- clk: add clk_bulk_get accessories (bsc#1144813).
- clk: bcm2835: remove pllb (jsc#SLE-7294).
- clk: bcm283x: add driver interfacing with Raspberry Pi's firmware (jsc#SLE-7294).
- clk: bulk: silently error out on EPROBE_DEFER (bsc#1144718,bsc#1144813).
- clk: raspberrypi: register platform device for raspberrypi-cpufreq (jsc#SLE-7294).
- clk: renesas: cpg-mssr: Fix reset control race condition (bsc#1051510).
- clk: rockchip: Add 1.6GHz PLL rate for rk3399 (bsc#1144718,bsc#1144813).
- clk: rockchip: assign correct id for pclk_ddr and hclk_sd in rk3399 (bsc#1144718,bsc#1144813).
- compat_ioctl: pppoe: fix PPPOEIOCSFWD handling (bsc#1051510).
- config: arm64: Remove CONFIG_ARM64_MODULE_CMODEL_LARGE Option removed by patches in bsc#1148219
- coredump: split pipe command whitespace before expanding template (bsc#1051510).
- cpu/speculation: Warn on unsupported mitigations= parameter (bsc#1114279).
- cpufreq: add driver for Raspberry Pi (jsc#SLE-7294).
- cpufreq: dt: Try freeing static OPPs only if we have added them (jsc#SLE-7294).
- crypto: ccp - Add support for valid authsize values less than 16 (bsc#1051510).
- crypto: ccp - Fix oops by properly managing allocated structures (bsc#1051510).
- crypto: ccp - Ignore tag length when decrypting GCM ciphertext (bsc#1051510).
- crypto: ccp - Ignore unconfigured CCP device on suspend/resume (bnc#1145934).
- crypto: ccp - Validate buffer lengths for copy operations (bsc#1051510).
- crypto: talitos - fix skcipher failure due to wrong output IV (bsc#1051510).
- crypto: virtio - Read crypto services and algorithm masks (jsc#SLE-5844 jsc#SLE-6331 bsc#1145446 LTC#175307).
- crypto: virtio - Register an algo only if it's supported (jsc#SLE-5844 jsc#SLE-6331 bsc#1145446 LTC#175307).
- cx82310_eth: fix a memory leak bug (bsc#1051510).
- dax: dax_layout_busy_page() should not unmap cow pages (bsc#1148698).
- devres: always use dev_name() in devm_ioremap_resource() (git fixes).
- dfs_cache: fix a wrong use of kfree in flush_cache_ent() (bsc#1144333).
- dm btree: fix order of block initialization in btree_split_beneath (git fixes).
- dm bufio: fix deadlock with loop device (git fixes).
- dm cache metadata: Fix loading discard bitset (git fixes).
- dm crypt: do not overallocate the integrity tag space (git fixes).
- dm crypt: fix parsing of extended IV arguments (git fixes).
- dm delay: fix a crash when invalid device is specified (git fixes).
- dm integrity: change memcmp to strncmp in dm_integrity_ctr (git fixes).
- dm integrity: correctly calculate the size of metadata area (git fixes).
- dm integrity: fix a crash due to BUG_ON in __journal_read_write() (git fixes).
- dm integrity: fix deadlock with overlapping I/O (git fixes).
- dm integrity: limit the rate of error messages (git fixes).
- dm kcopyd: always complete failed jobs (git fixes).
- dm raid: add missing cleanup in raid_ctr() (git fixes).
- dm space map metadata: fix missing store of apply_bops() return value (git fixes).
- dm table: fix invalid memory accesses with too high sector number (git fixes).
- dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (git fixes).
- dm thin: fix bug where bio that overwrites thin block ignores FUA (git fixes).
- dm thin: fix passdown_double_checking_shared_status() (git fixes).
- dm zoned: Fix zone report handling (git fixes).
- dm zoned: Silence a static checker warning (git fixes).
- dm zoned: fix potential NULL dereference in dmz_do_reclaim() (git fixes).
- dm zoned: fix zone state management race (git fixes).
- dm zoned: improve error handling in i/o map code (git fixes).
- dm zoned: improve error handling in reclaim (git fixes).
- dm zoned: properly handle backing device failure (git fixes).
- dm: fix to_sector() for 32bit (git fixes).
- dm: revert 8f50e358153d ('dm: limit the max bio size as BIO_MAX_PAGES * PAGE_SIZE') (git fixes).
- dma-buf: balance refcount inbalance (bsc#1051510).
- dmaengine: rcar-dmac: Reject zero-length slave DMA requests (bsc#1051510).
- documentation/networking: fix default_ttl typo in mpls-sysctl (bsc#1051510).
- documentation: Add nospectre_v1 parameter (bsc#1051510).
- documentation: Update Documentation for iommu.passthrough (bsc#1136039).
- driver core: Fix use-after-free and double free on glue directory (bsc#1131281).
- drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl (bsc#1051510).
- drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings (bsc#1051510).
- drm/amd/display: Always allocate initial connector state state (bsc#1111666).
- drm/amd/display: Disable ABM before destroy ABM struct (bsc#1111666).
- drm/amd/display: Fill prescale_params-&gt;scale for RGB565 (bsc#1111666).
- drm/amd/display: Fix dc_create failure handling and 666 color depths (bsc#1111666).
- drm/amd/display: Increase size of audios array (bsc#1111666).
- drm/amd/display: Only enable audio if speaker allocation exists (bsc#1111666).
- drm/amd/display: Remove redundant non-zero and overflow check (bsc#1145946).
- drm/amd/display: Wait for backlight programming completion in set backlight level (bsc#1111666).
- drm/amd/display: fix compilation error (bsc#1111666).
- drm/amd/display: num of sw i2c/aux engines less than num of connectors (bsc#1145946).
- drm/amd/display: use encoder's engine id to find matched free audio device (bsc#1111666).
- drm/amdgpu/psp: move psp version specific function pointers to (bsc#1135642)
- drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE (bsc#1111666).
- drm/amdgpu: Add APTX quirk for Dell Latitude 5495 (bsc#1142635)
- drm/amdgpu: added support 2nd UVD instance (bsc#1143331).
- drm/amdgpu: fix a potential information leaking bug (bsc#1111666).
- drm/amdgpu:change VEGA booting with firmware loaded by PSP (bsc#1143331).
- drm/amdkfd: Fix a potential memory leak (bsc#1111666).
- drm/amdkfd: Fix sdma queue map issue (bsc#1111666).
- drm/bridge: lvds-encoder: Fix build error while CONFIG_DRM_KMS_HELPER=m (bsc#1111666).
- drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz (bsc#1051510).
- drm/bridge: tc358767: read display_props in get_modes() (bsc#1051510).
- drm/crc-debugfs: Also sprinkle irqrestore over early exits (bsc#1051510).
- drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry (bsc#1051510).
- drm/edid: parse CEA blocks embedded in DisplayID (bsc#1111666).
- drm/etnaviv: add missing failure path to destroy suballoc (bsc#1135642)
- drm/exynos: fix missing decrement of retry counter (bsc#1111666).
- drm/i915/gvt: fix incorrect cache entry for guest page mapping (bsc#1111666).
- drm/i915/perf: ensure we keep a reference on the driver (bsc#1051510).
- drm/i915/perf: ensure we keep a reference on the driver (bsc#1142635)
- drm/i915/perf: fix ICL perf register offsets (bsc#1111666).
- drm/i915/userptr: Acquire the page lock around set_page_dirty() (bsc#1051510).
- drm/i915: Do not deballoon unused ggtt drm_mm_node in linux guest (bsc#1142635)
- drm/i915: Fix GEN8_MCR_SELECTOR programming (bsc#1111666).
- drm/i915: Fix HW readout for crtc_clock in HDMI mode (bsc#1111666).
- drm/i915: Fix the TBT AUX power well enabling (bsc#1111666).
- drm/i915: Fix wrong escape clock divisor init for GLK (bsc#1051510).
- drm/i915: Fix wrong escape clock divisor init for GLK (bsc#1142635)
- drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ (bsc#1142635)
- drm/i915: Revert i915 userptr page lock patch (bsc#1145051)
- drm/imx: notify drm core before sending event during crtc disable (bsc#1135642)
- drm/imx: only send event on crtc disable if kept disabled (bsc#1135642)
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver (bsc#1135642)
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable() (bsc#1135642)
- drm/mediatek: clear num_pipes when unbind driver (bsc#1135642)
- drm/mediatek: fix unbind functions (bsc#1135642)
- drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto (bsc#1111666).
- drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto (bsc#1142635)
- drm/mediatek: unbind components in mtk_drm_unbind() (bsc#1135642)
- drm/mediatek: use correct device to import PRIME buffers (bsc#1111666).
- drm/mediatek: use correct device to import PRIME buffers (bsc#1142635)
- drm/msm/mdp5: Fix mdp5_cfg_init error return (bsc#1142635)
- drm/msm: Depopulate platform on probe failure (bsc#1051510).
- drm/nouveau: Do not retry infinitely when receiving no data on i2c (bsc#1142635)
- drm/nouveau: fix memory leak in nouveau_conn_reset() (bsc#1051510).
- drm/panel: simple: Fix panel_simple_dsi_probe (bsc#1051510).
- drm/rockchip: Suspend DP late (bsc#1051510).
- drm/rockchip: Suspend DP late (bsc#1142635)
- drm/udl: introduce a macro to convert dev to udl. (bsc#1113722)
- drm/udl: move to embedding drm device inside udl device. (bsc#1113722)
- drm/virtio: Add memory barriers for capset cache (bsc#1051510).
- drm/vmwgfx: Use the backdoor port if the HB port is not available (bsc#1135642)
- drm/vmwgfx: fix a warning due to missing dma_parms (bsc#1135642)
- drm/vmwgfx: fix memory leak when too many retries have occurred (bsc#1051510).
- drm: msm: Fix add_gpu_components (bsc#1051510).
- drm: silence variable 'conn' set but not used (bsc#1051510).
- eCryptfs: fix a couple type promotion bugs (bsc#1051510).
- edac, amd64: Add Family 17h, models 10h-2fh support (bsc#1112178).
- edac/amd64: Add Family 17h Model 30h PCI IDs (bsc#1112178).
- edac/amd64: Adjust printed chip select sizes when interleaved (bsc#1131489).
- edac/amd64: Cache secondary Chip Select registers (bsc#1131489).
- edac/amd64: Decode syndrome before translating address (bsc#1131489).
- edac/amd64: Find Chip Select memory size using Address Mask (bsc#1131489).
- edac/amd64: Initialize DIMM info for systems with more than two channels (bsc#1131489).
- edac/amd64: Recognize DRAM device type ECC capability (bsc#1131489).
- edac/amd64: Recognize x16 symbol size (bsc#1131489).
- edac/amd64: Set maximum channel layer size depending on family (bsc#1131489).
- edac/amd64: Support asymmetric dual-rank DIMMs (bsc#1131489).
- edac/amd64: Support more than two Unified Memory Controllers (bsc#1131489).
- edac/amd64: Support more than two controllers for chip selects handling (bsc#1131489).
- edac/amd64: Use a macro for iterating over Unified Memory Controllers (bsc#1131489).
- edac: Fix global-out-of-bounds write when setting edac_mc_poll_msec (bsc#1114279).
- efi/bgrt: Drop BGRT status field reserved bits check (bsc#1051510).
- ehea: Fix a copy-paste err in ehea_init_port_res (bsc#1051510).
- ext4: use jbd2_inode dirty range scoping (bsc#1148616).
- firmware: raspberrypi: register clk device (jsc#SLE-7294).
- firmware: ti_sci: Always request response from firmware (bsc#1051510).
- fix incorrect error code mapping for OBJECTID_NOT_FOUND (bsc#1144333).
- fix smb3-encryption breakage when CONFIG_DEBUG_SG=y (bsc#1051510, bsc#1144333).
- fix struct ufs_req removal of unused field (git-fixes).
- floppy: fix invalid pointer dereference in drive_name (bsc#1111666).
- floppy: fix out-of-bounds read in next_valid_format (bsc#1111666).
- fs/*/Kconfig: drop links to 404-compliant http://acl.bestbits.at (bsc#1144333).
- fs/cifs/cifsacl.c Fixes typo in a comment (bsc#1144333).
- fs/cifs/smb2pdu.c: fix buffer free in SMB2_ioctl_free (bsc#1144333).
- fs/cifs: Simplify ib_post_(send|recv|srq_recv)() calls (bsc#1144333).
- fs/cifs: do not translate SFM_SLASH (U+F026) to backslash (bsc#1144333).
- fs/cifs: fix uninitialised variable warnings (bsc#1144333).
- fs/cifs: require sha512 (bsc#1051510, bsc#1144333).
- fs/cifs: suppress a string overflow warning (bsc#1144333).
- fs/xfs: Fix return code of xfs_break_leased_layouts() (bsc#1148031).
- fs: cifs: Drop unlikely before IS_ERR(_OR_NULL) (bsc#1144333).
- fs: cifs: Kconfig: pedantic formatting (bsc#1144333).
- fs: cifs: Replace _free_xid call in cifs_root_iget function (bsc#1144333).
- fs: cifs: cifsssmb: Change return type of convert_ace_to_cifs_ace (bsc#1144333).
- fs: xfs: xfs_log: Do not use KM_MAYFAIL at xfs_log_reserve() (bsc#1148033).
- fsl/fman: Use GFP_ATOMIC in {memac,tgec}_add_hash_mac_address() (bsc#1051510).
- ftrace: Check for empty hash and comment the race with registering probes (bsc#1149418).
- ftrace: Check for successful allocation of hash (bsc#1149424).
- ftrace: Fix NULL pointer dereference in t_probe_next() (bsc#1149413).
- gpio: Fix build error of function redefinition (bsc#1051510).
- gpio: gpio-omap: add check for off wake capable gpios (bsc#1051510).
- gpio: mxs: Get rid of external API call (bsc#1051510).
- gpio: omap: ensure irq is enabled before wakeup (bsc#1051510).
- gpio: pxa: handle corner case of unprobed device (bsc#1051510).
- gpiolib: fix incorrect IRQ requesting of an active-low lineevent (bsc#1051510).
- gpiolib: never report open-drain/source lines as 'input' to user-space (bsc#1051510).
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM (bsc#1142635)
- hid: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT (bsc#1051510).
- hid: Add quirk for HP X1200 PIXART OEM mouse (bsc#1051510).
- hid: cp2112: prevent sleeping function called from invalid context (bsc#1051510).
- hid: hiddev: avoid opening a disconnected device (bsc#1051510).
- hid: hiddev: do cleanup in failure of opening a device (bsc#1051510).
- hid: holtek: test for sanity of intfdata (bsc#1051510).
- hid: sony: Fix race condition between rumble and device remove (bsc#1051510).
- hid: wacom: Correct distance scale for 2nd-gen Intuos devices (bsc#1142635).
- hid: wacom: correct misreported EKR ring values (bsc#1142635).
- hid: wacom: fix bit shift for Cintiq Companion 2 (bsc#1051510).
- hpet: Fix division by zero in hpet_time_div() (bsc#1051510).
- hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 (bsc#1051510).
- hwmon: (nct7802) Fix wrong detection of in4 presence (bsc#1051510).
- i2c: emev2: avoid race when unregistering slave client (bsc#1051510).
- i2c: piix4: Fix port selection for AMD Family 16h Model 30h (bsc#1051510).
- i2c: qup: fixed releasing dma without flush operation completion (bsc#1051510).
- ia64: Get rid of iommu_pass_through (bsc#1136039).
- ib/mlx5: Fix MR registration flow to use UMR properly (bsc#1093205 bsc#1145678).
- ibmveth: Convert multicast list size for little-endian system (bsc#1061843).
- ibmvnic: Do not process reset during or after device removal (bsc#1149652 ltc#179635).
- ibmvnic: Unmap DMA address of TX descriptor buffers after use (bsc#1146351 ltc#180726).
- igmp: fix memory leak in igmpv3_del_delrec() (networking-stable-19_07_25).
- iio: adc: max9611: Fix misuse of GENMASK macro (bsc#1051510).
- iio: adc: max9611: Fix temperature reading in probe (bsc#1051510).
- iio: iio-utils: Fix possible incorrect mask calculation (bsc#1051510).
- improve security, move default dialect to SMB3 from old CIFS (bsc#1051510, bsc#1144333).
- include/linux/bitops.h: sanitize rotate primitives (git fixes).
- input: alps - do not handle ALPS cs19 trackpoint-only device (bsc#1051510).
- input: alps - fix a mismatch between a condition check and its comment (bsc#1051510).
- input: iforce - add sanity checks (bsc#1051510).
- input: kbtab - sanity check for endpoint type (bsc#1051510).
- input: synaptics - enable RMI mode for HP Spectre X360 (bsc#1051510).
- input: synaptics - whitelist Lenovo T580 SMBus intertouch (bsc#1051510).
- input: trackpoint - only expose supported controls for Elan, ALPS and NXP (bsc#1051510).
- intel_th: pci: Add Ice Lake NNPI support (bsc#1051510).
- intel_th: pci: Add Tiger Lake support (bsc#1051510).
- intel_th: pci: Add support for another Lewisburg PCH (bsc#1051510).
- iommu/amd: Add support for X2APIC IOMMU interrupts (bsc#1145010).
- iommu/amd: Fix race in increase_address_space() (bsc#1150860).
- iommu/amd: Flush old domains in kdump kernel (bsc#1150861).
- iommu/amd: Move iommu_init_pci() to .init section (bsc#1149105).
- iommu/amd: Request passthrough mode from IOMMU core (bsc#1136039).
- iommu/dma: Handle SG length overflow better (bsc#1146084).
- iommu/iova: Remove stale cached32_node (bsc#1145018).
- iommu/vt-d: Request passthrough mode from IOMMU core (bsc#1136039).
- iommu: Add helpers to set/get default domain type (bsc#1136039).
- iommu: Disable passthrough mode when SME is active (bsc#1136039).
- iommu: Print default domain type on boot (bsc#1136039).
- iommu: Remember when default domain type was set on kernel command line (bsc#1136039).
- iommu: Set default domain type at runtime (bsc#1136039).
- iommu: Use Functions to set default domain type in iommu_set_def_domain_type() (bsc#1136039).
- ipip: validate header length in ipip_tunnel_xmit (git-fixes).
- ipv4: do not set IPv6 only flags to IPv4 addresses (networking-stable-19_07_25).
- irqchip/gic-v2m: Add support for Amazon Graviton variant of GICv3+GICv2m (SLE-9332).
- irqchip/gic-v3-its: fix build warnings (bsc#1144880).
- isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack (bsc#1051510).
- isdn: hfcsusb: checking idx of ep configuration (bsc#1051510).
- isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain() (bsc#1051510).
- iversion: add a routine to update a raw value with a larger one (bsc#1148133).
- iwlwifi: dbg: split iwl_fw_error_dump to two functions (bsc#1119086).
- iwlwifi: do not unmap as page memory that was mapped as single (bsc#1051510).
- iwlwifi: fix bad dma handling in page_mem dumping flow (bsc#1120902).
- iwlwifi: fw: use helper to determine whether to dump paging (bsc#1106434). Patch needed to be adjusted, because our tree does not have the global variable IWL_FW_ERROR_DUMP_PAGING
- iwlwifi: mvm: do not send GEO_TX_POWER_LIMIT on version &amp;lt; 41 (bsc#1142635).
- iwlwifi: mvm: fix an out-of-bound access (bsc#1051510).
- iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support (bsc#1142635).
- iwlwifi: pcie: do not service an interrupt that was masked (bsc#1142635).
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X (bsc#1142635).
- ixgbe: fix possible deadlock in ixgbe_service_task() (bsc#1113994).
- jbd2: flush_descriptor(): Do not decrease buffer head's ref count (bsc#1143843).
- jbd2: introduce jbd2_inode dirty range scoping (bsc#1148616).
- kABI: Fix kABI for 'struct amd_iommu' (bsc#1145010).
- kABI: Fix kABI for x86 pci-dma code (bsc#1136039).
- kabi/severities: Exclude drivers/crypto/ccp/*
- kabi/severities: match SLE15 entry ordering.
- kasan: remove redundant initialization of variable 'real_size' (git fixes).
- kconfig/[mn]conf: handle backspace (^H) key (bsc#1051510).
- keys: Fix missing null pointer check in request_key_auth_describe() (bsc#1051510).
- kvm/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel (bsc#1133021).
- kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (bsc#1134881 bsc#1134882).
- kvm: Disallow wraparound in kvm_gfn_to_hva_cache_init (bsc#1133021).
- kvm: Fix leak vCPU's VMCS value into other pCPU (bsc#1145388).
- kvm: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC (bsc#1145408).
- kvm: PPC: Book3S HV: Fix CR0 setting in TM emulation (bsc#1061840).
- kvm: Reject device ioctls from processes other than the VM's creator (bsc#1133021).
- kvm: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value (bsc#1145393).
- kvm: VMX: Fix handling of #MC that occurs during VM-Entry (bsc#1145395).
- kvm: VMX: check CPUID before allowing read/write of IA32_XSS (bsc#1145394).
- kvm: X86: Reduce the overhead when lapic_timer_advance is disabled (bsc#1149083).
- kvm: arm/arm64: Close VMID generation race (bsc#1133021).
- kvm: arm/arm64: Convert kvm_host_cpu_state to a static per-cpu allocation (bsc#1133021).
- kvm: arm/arm64: Drop resource size check for GICV window (bsc#1133021).
- kvm: arm/arm64: Fix VMID alloc race by reverting to lock-less (bsc#1133021).
- kvm: arm/arm64: Fix lost IRQs from emulated physcial timer when blocked (bsc#1133021).
- kvm: arm/arm64: Handle CPU_PM_ENTER_FAILED (bsc#1133021).
- kvm: arm/arm64: Reduce verbosity of KVM init log (bsc#1133021).
- kvm: arm/arm64: Set dist-&gt;spis to NULL after kfree (bsc#1133021).
- kvm: arm/arm64: Skip updating PMD entry if no change (bsc#1133021).
- kvm: arm/arm64: Skip updating PTE entry if no change (bsc#1133021).
- kvm: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list (bsc#1133021).
- kvm: arm/arm64: vgic-v3: Tighten synchronization for guests using v2 on v3 (bsc#1133021).
- kvm: arm/arm64: vgic: Add missing irq_lock to vgic_mmio_read_pending (bsc#1133021).
- kvm: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy (bsc#1133021).
- kvm: arm64: Fix caching of host MDCR_EL2 value (bsc#1133021).
- kvm: mmu: Fix overlap between public and private memslots (bsc#1133021).
- kvm: nVMX: Remove unnecessary sync_roots from handle_invept (bsc#1145391).
- kvm: nVMX: Use adjusted pin controls for vmcs02 (bsc#1145392).
- kvm: nVMX: allow setting the VMFUNC controls MSR (bsc#1145389).
- kvm: nVMX: do not use dangling shadow VMCS after guest reset (bsc#1145390).
- kvm: s390: add MSA9 to cpumodel (jsc#SLE-6240).
- kvm: s390: add debug logging for cpu model subfunctions (jsc#SLE-6240).
- kvm: s390: add deflate conversion facilty to cpu model (jsc#SLE-6240).
- kvm: s390: add enhanced sort facilty to cpu model (jsc#SLE-6240 ).
- kvm: s390: add vector BCD enhancements facility to cpumodel (jsc#SLE-6240).
- kvm: s390: add vector enhancements facility 2 to cpumodel (jsc#SLE-6240).
- kvm: s390: enable MSA9 keywrapping functions depending on cpu model (jsc#SLE-6240).
- kvm: s390: implement subfunction processor calls (jsc#SLE-6240 ).
- kvm: s390: provide query function for instructions returning 32 byte (jsc#SLE-6240).
- kvm: x86/vPMU: refine kvm_pmu err msg when event creation failed (bsc#1145397).
- kvm: x86: Do not update RIP or do single-step on faulting emulation (bsc#1149104).
- kvm: x86: Unconditionally enable irqs in guest context (bsc#1145396).
- kvm: x86: degrade WARN to pr_warn_ratelimited (bsc#1145409).
- kvm: x86: fix backward migration with async_PF (bsc#1146074).
- lan78xx: Fix memory leaks (bsc#1051510).
- libata: add SG safety checks in SFF pio transfers (bsc#1051510).
- libata: do not request sense data on !ZAC ATA devices (bsc#1051510).
- libata: have ata_scsi_rw_xlat() fail invalid passthrough requests (bsc#1051510).
- libata: zpodd: Fix small read overflow in zpodd_get_mech_type() (bsc#1051510).
- libceph, rbd, ceph: move ceph_osdc_alloc_messages() calls (bsc#1135897).
- libceph, rbd: add error handling for osd_req_op_cls_init() (bsc#1135897).
- libceph, rbd: new bio handling code (aka do not clone bios) (bsc#1141450).
- libceph: ADDR2 support for monmap (bsc#1148133 bsc#1136682).
- libceph: add ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: add osd_req_op_extent_osd_data_bvecs() (bsc#1141450).
- libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer (bsc#1148133).
- libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer (bsc#1148133).
- libceph: assign cookies in linger_submit() (bsc#1135897).
- libceph: check reply num_data_items in setup_request_data() (bsc#1135897).
- libceph: correctly decode ADDR2 addresses in incremental OSD maps (bsc#1148133 bsc#1136682).
- libceph: do not consume a ref on pagelist in ceph_msg_data_add_pagelist() (bsc#1135897).
- libceph: enable fallback to ceph_msg_new() in ceph_msgpool_get() (bsc#1135897).
- libceph: fix PG split vs OSD (re)connect race (bsc#1148133).
- libceph: fix PG split vs OSD (re)connect race (bsc#1148133).
- libceph: fix sa_family just after reading address (bsc#1148133 bsc#1136682).
- libceph: fix unaligned accesses in ceph_entity_addr handling (bsc#1136682).
- libceph: fix watch_item_t decoding to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: handle zero-length data items (bsc#1141450).
- libceph: introduce BVECS data type (bsc#1141450).
- libceph: introduce alloc_watch_request() (bsc#1135897).
- libceph: introduce ceph_pagelist_alloc() (bsc#1135897).
- libceph: make ceph_pr_addr take an struct ceph_entity_addr pointer (bsc#1136682).
- libceph: preallocate message data items (bsc#1135897).
- libceph: rename ceph_encode_addr to ceph_encode_banner_addr (bsc#1148133 bsc#1136682).
- libceph: switch osdmap decoding to use ceph_decode_entity_addr (bsc#1148133 bsc#1136682).
- libceph: turn on CEPH_FEATURE_MSG_ADDR2 (bsc#1148133 bsc#1136682).
- libceph: use TYPE_LEGACY for entity addrs instead of TYPE_NONE (bsc#1148133 bsc#1136682).
- libceph: use single request data item for cmp/setxattr (bsc#1139101).
- libnvdimm/pfn: Store correct value of npfns in namespace superblock (bsc#1146381 ltc#180720).
- liquidio: add cleanup in octeon_setup_iq() (bsc#1051510).
- loop: set PF_MEMALLOC_NOIO for the worker thread (git fixes).
- lpfc: fix 12.4.0.0 GPF at boot (bsc#1148308).
- mac80211: Correctly set noencrypt for PAE frames (bsc#1111666).
- mac80211: Do not memset RXCB prior to PAE intercept (bsc#1111666).
- mac80211: do not WARN on short WMM parameters from AP (bsc#1051510).
- mac80211: do not warn about CW params when not using them (bsc#1051510).
- mac80211: fix possible memory leak in ieee80211_assign_beacon (bsc#1142635).
- mac80211: fix possible sta leak (bsc#1051510).
- mac80211_hwsim: Fix possible null-pointer dereferences in hwsim_dump_radio_nl() (bsc#1111666).
- macsec: fix checksumming after decryption (bsc#1051510).
- macsec: fix use-after-free of skb during RX (bsc#1051510).
- macsec: let the administrator set UP state even if lowerdev is down (bsc#1051510).
- macsec: update operstate when lower device changes (bsc#1051510).
- mailbox: handle failed named mailbox channel request (bsc#1051510).
- md/raid: raid5 preserve the writeback action after the parity check (git fixes).
- md: add mddev-&gt;pers to avoid potential NULL pointer dereference (git fixes).
- md: fix invalid stored role for a disk try2 (bsc#1143765).
- media: au0828: fix null dereference in error path (bsc#1051510).
- media: coda: Remove unbalanced and unneeded mutex unlock (bsc#1051510).
- media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP (bsc#1051510).
- media: coda: fix mpeg2 sequence number handling (bsc#1051510).
- media: coda: increment sequence offset for the last returned frame (bsc#1051510).
- media: dvb: usb: fix use after free in dvb_usb_device_exit (bsc#1051510).
- media: hdpvr: fix locking and a missing msleep (bsc#1051510).
- media: media_device_enum_links32: clean a reserved field (bsc#1051510).
- media: pvrusb2: use a different format for warnings (bsc#1051510).
- media: spi: IR LED: add missing of table registration (bsc#1051510).
- media: staging: media: davinci_vpfe: - Fix for memory leak if decoder initialization fails (bsc#1051510).
- media: vpss: fix a potential NULL pointer dereference (bsc#1051510).
- media: wl128x: Fix some error handling in fm_v4l2_init_video_device() (bsc#1051510).
- mfd: arizona: Fix undefined behavior (bsc#1051510).
- mfd: core: Set fwnode for created devices (bsc#1051510).
- mfd: hi655x-pmic: Fix missing return value check for devm_regmap_init_mmio_clk (bsc#1051510).
- mfd: intel-lpss: Add Intel Comet Lake PCI IDs (jsc#SLE-4875).
- mlxsw: spectrum: Fix error path in mlxsw_sp_module_init() (bsc#1112374).
- mm, page_owner: handle THP splits correctly (bsc#1149197, VM Debugging Functionality).
- mm, vmscan: do not special-case slab reclaim when watermarks are boosted (git fixes (mm/vmscan)).
- mm/hmm: fix bad subpage pointer in try_to_unmap_one (bsc#1148202, HMM, VM Functionality).
- mm/hotplug: fix offline undo_isolate_page_range() (bsc#1148196, VM Functionality).
- mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node (bsc#1148379, VM Functionality).
- mm/memcontrol.c: fix use after free in mem_cgroup_iter() (bsc#1149224, VM Functionality).
- mm/memory.c: recheck page table entry with page table lock held (bsc#1148363, VM Functionality).
- mm/migrate.c: initialize pud_entry in migrate_vma() (bsc#1148198, HMM, VM Functionality).
- mm/mlock.c: change count_mm_mlocked_page_nr return type (bsc#1148527, VM Functionality).
- mm/mlock.c: mlockall error for flag MCL_ONFAULT (bsc#1148527, VM Functionality).
- mm/page_alloc.c: fix calculation of pgdat-&gt;nr_zones (bsc#1148192, VM Functionality).
- mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() (bsc#1118689).
- mm/vmscan.c: fix trying to reclaim unevictable LRU page (bsc#1149214, VM Functionality).
- mm: add filemap_fdatawait_range_keep_errors() (bsc#1148616).
- mm: do not stall register_shrinker() (bsc#1104902, VM Performance).
- mm: move MAP_SYNC to asm-generic/mman-common.h (bsc#1148297).
- mm: page_mapped: do not assume compound page is huge or THP (bsc#1148574, VM Functionality).
- mmc: cavium: Add the missing dma unmap when the dma has finished (bsc#1051510).
- mmc: cavium: Set the correct dma max segment size for mmc_host (bsc#1051510).
- mmc: core: Fix init of SD cards reporting an invalid VDD range (bsc#1051510).
- mmc: dw_mmc: Fix occasional hang after tuning on eMMC (bsc#1051510).
- mmc: sdhci-of-at91: add quirk for broken HS200 (bsc#1051510).
- mmc: sdhci-pci: Add support for Intel CML (jsc#SLE-4875).
- mmc: sdhci-pci: Add support for Intel ICP (jsc#SLE-4875).
- mmc: sdhci-pci: Fix BYT OCP setting (bsc#1051510).
- mpls: fix warning with multi-label encap (bsc#1051510).
- nbd: replace kill_bdev() with __invalidate_device() again (git fixes).
- net/9p: include trans_common.h to fix missing prototype warning (bsc#1051510).
- net/ibmvnic: Fix missing { in __ibmvnic_reset (bsc#1149652 ltc#179635).
- net/ibmvnic: free reset work of removed device from queue (bsc#1149652 ltc#179635).
- net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command (bsc#1145678).
- net/mlx5: Fix modify_cq_in alignment (bsc#1103990).
- net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn (networking-stable-19_07_25).
- net/mlx5e: always initialize frag-&gt;last_in_page (bsc#1103990 ).
- net: Fix netdev_WARN_ONCE macro (git-fixes).
- net: Introduce netdev_*_once functions (networking-stable-19_07_25).
- net: Revert 'net: ena: ethtool: add extra properties retrieval via get_priv_flags' (bsc#1139020 bsc#1139021).
- net: bcmgenet: use promisc for unsupported filters (networking-stable-19_07_25).
- net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query (networking-stable-19_07_25).
- net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling (networking-stable-19_07_25).
- net: bridge: stp: do not cache eth dest pointer before skb pull (networking-stable-19_07_25).
- net: dsa: mv88e6xxx: wait after reset deactivation (networking-stable-19_07_25).
- net: ena: Fix bug where ring allocation backoff stopped too late (bsc#1139020 bsc#1139021).
- net: ena: add MAX_QUEUES_EXT get feature admin command (bsc#1139020 bsc#1139021).
- net: ena: add ethtool function for changing io queue sizes (bsc#1139020 bsc#1139021).
- net: ena: add good checksum counter (bsc#1139020 bsc#1139021).
- net: ena: add handling of llq max tx burst size (bsc#1139020 bsc#1139021).
- net: ena: add newline at the end of pr_err prints (bsc#1139020 bsc#1139021).
- net: ena: add support for changing max_header_size in LLQ mode (bsc#1139020 bsc#1139021).
- net: ena: allow automatic fallback to polling mode (bsc#1139020 bsc#1139021).
- net: ena: allow queue allocation backoff when low on memory (bsc#1139020 bsc#1139021).
- net: ena: arrange ena_probe() function variables in reverse christmas tree (bsc#1139020 bsc#1139021).
- net: ena: enable negotiating larger Rx ring size (bsc#1139020 bsc#1139021).
- net: ena: ethtool: add extra properties retrieval via get_priv_flags (bsc#1139020 bsc#1139021).
- net: ena: fix ena_com_fill_hash_function() implementation (bsc#1139020 bsc#1139021).
- net: ena: fix incorrect test of supported hash function (bsc#1139020 bsc#1139021).
- net: ena: fix swapped parameters when calling ena_com_indirect_table_fill_entry (bsc#1139020 bsc#1139021).
- net: ena: fix: Free napi resources when ena_up() fails (bsc#1139020 bsc#1139021).
- net: ena: fix: set freed objects to NULL to avoid failing future allocations (bsc#1139020 bsc#1139021).
- net: ena: gcc 8: fix compilation warning (bsc#1139020 bsc#1139021).
- net: ena: improve latency by disabling adaptive interrupt moderation by default (bsc#1139020 bsc#1139021).
- net: ena: make ethtool show correct current and max queue sizes (bsc#1139020 bsc#1139021).
- net: ena: optimise calculations for CQ doorbell (bsc#1139020 bsc#1139021).
- net: ena: remove inline keyword from functions in *.c (bsc#1139020 bsc#1139021).
- net: ena: replace free_tx/rx_ids union with single free_ids field in ena_ring (bsc#1139020 bsc#1139021).
- net: ena: update driver version from 2.0.3 to 2.1.0 (bsc#1139020 bsc#1139021).
- net: ena: use dev_info_once instead of static variable (bsc#1139020 bsc#1139021).
- net: fix bpf_xdp_adjust_head regression for generic-XDP (bsc#1109837).
- net: hns3: Add missing newline at end of file (bsc#1104353 ).
- net: hns3: add Asym Pause support to fix autoneg problem (bsc#1104353).
- net: hns3: add a check to pointer in error_detected and slot_reset (bsc#1104353).
- net: hns3: add aRFS support for PF (bsc#1104353).
- net: hns3: add all IMP return code (bsc#1104353).
- net: hns3: add check to number of buffer descriptors (bsc#1104353).
- net: hns3: add default value for tc_size and tc_offset (bsc#1104353).
- net: hns3: add exception handling when enable NIC HW error interrupts (bsc#1104353).
- net: hns3: add handling of two bits in MAC tunnel interrupts (bsc#1104353).
- net: hns3: add handshake with hardware while doing reset (bsc#1104353).
- net: hns3: add opcode about query and clear RAS &amp; MSI-X to special opcode (bsc#1104353).
- net: hns3: add recovery for the H/W errors occurred before the HNS dev initialization (bsc#1104353).
- net: hns3: add some error checking in hclge_tm module (bsc#1104353).
- net: hns3: add support for dump firmware statistics by debugfs (bsc#1104353).
- net: hns3: adjust hns3_uninit_phy()'s location in the hns3_client_uninit() (bsc#1104353).
- net: hns3: bitwise operator should use unsigned type (bsc#1104353).
- net: hns3: change SSU's buffer allocation according to UM (bsc#1104353).
- net: hns3: check msg_data before memcpy in hclgevf_send_mbx_msg (bsc#1104353).
- net: hns3: clear restting state when initializing HW device (bsc#1104353).
- net: hns3: code optimizaition of hclge_handle_hw_ras_error() (bsc#1104353).
- net: hns3: delay and separate enabling of NIC and ROCE HW errors (bsc#1104353).
- net: hns3: delay ring buffer clearing during reset (bsc#1104353 ).
- net: hns3: delay setting of reset level for hw errors until slot_reset is called (bsc#1104353).
- net: hns3: delete the redundant user NIC codes (bsc#1104353 ).
- net: hns3: do not configure new VLAN ID into VF VLAN table when it's full (bsc#1104353).
- net: hns3: enable DCB when TC num is one and pfc_en is non-zero (bsc#1104353).
- net: hns3: enable broadcast promisc mode when initializing VF (bsc#1104353).
- net: hns3: extract handling of mpf/pf msi-x errors into functions (bsc#1104353).
- net: hns3: fix VLAN filter restore issue after reset (bsc#1104353).
- net: hns3: fix __QUEUE_STATE_STACK_XOFF not cleared issue (bsc#1104353).
- net: hns3: fix a -Wformat-nonliteral compile warning (bsc#1104353).
- net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector (bsc#1104353).
- net: hns3: fix a statistics issue about l3l4 checksum error (bsc#1104353).
- net: hns3: fix avoid unnecessary resetting for the H/W errors which do not require reset (bsc#1104353).
- net: hns3: fix compile warning without CONFIG_RFS_ACCEL (bsc#1104353).
- net: hns3: fix dereference of ae_dev before it is null checked (bsc#1104353).
- net: hns3: fix flow control configure issue for fibre port (bsc#1104353).
- net: hns3: fix for dereferencing before null checking (bsc#1104353).
- net: hns3: fix for skb leak when doing selftest (bsc#1104353 ).
- net: hns3: fix race conditions between reset and module loading &amp; unloading (bsc#1104353).
- net: hns3: fix some coding style issues (bsc#1104353 ).
- net: hns3: fix wrong size of mailbox responding data (bsc#1104353).
- net: hns3: fixes wrong place enabling ROCE HW error when loading (bsc#1104353).
- net: hns3: free irq when exit from abnormal branch (bsc#1104353 ).
- net: hns3: handle empty unknown interrupt (bsc#1104353 ).
- net: hns3: initialize CPU reverse mapping (bsc#1104353 ).
- net: hns3: log detail error info of ROCEE ECC and AXI errors (bsc#1104353).
- net: hns3: make HW GRO handling compliant with SW GRO (bsc#1104353).
- net: hns3: modify handling of out of memory in hclge_err.c (bsc#1104353).
- net: hns3: modify hclge_init_client_instance() (bsc#1104353 ).
- net: hns3: modify hclgevf_init_client_instance() (bsc#1104353 ).
- net: hns3: optimize the CSQ cmd error handling (bsc#1104353 ).
- net: hns3: process H/W errors occurred before HNS dev initialization (bsc#1104353).
- net: hns3: re-schedule reset task while VF reset fail (bsc#1104353).
- net: hns3: refactor PF/VF RSS hash key configuration (bsc#1104353).
- net: hns3: refactor hns3_get_new_int_gl function (bsc#1104353 ).
- net: hns3: refine the flow director handle (bsc#1104353 ).
- net: hns3: remove RXD_VLD check in hns3_handle_bdinfo (bsc#1104353).
- net: hns3: remove VF VLAN filter entry inexistent warning print (bsc#1104353).
- net: hns3: remove override_pci_need_reset (bsc#1104353 ).
- net: hns3: remove redundant core reset (bsc#1104353 ).
- net: hns3: remove setting bit of reset_requests when handling mac tunnel interrupts (bsc#1104353).
- net: hns3: remove unused linkmode definition (bsc#1104353 ).
- net: hns3: replace numa_node_id with numa_mem_id for buffer reusing (bsc#1104353).
- net: hns3: set default value for param 'type' in hclgevf_bind_ring_to_vector (bsc#1104353).
- net: hns3: set maximum length to resp_data_len for exceptional case (bsc#1104353).
- net: hns3: set ops to null when unregister ad_dev (bsc#1104353 ).
- net: hns3: set the port shaper according to MAC speed (bsc#1104353).
- net: hns3: small changes for magic numbers (bsc#1104353 ).
- net: hns3: some changes of MSI-X bits in PPU(RCB) (bsc#1104353 ).
- net: hns3: some modifications to simplify and optimize code (bsc#1104353).
- net: hns3: some variable modification (bsc#1104353).
- net: hns3: stop schedule reset service while unloading driver (bsc#1104353).
- net: hns3: sync VLAN filter entries when kill VLAN ID failed (bsc#1104353).
- net: hns3: trigger VF reset if a VF has an over_8bd_nfe_err (bsc#1104353).
- net: hns3: typo in the name of a constant (bsc#1104353 ).
- net: hns3: use HCLGEVF_STATE_NIC_REGISTERED to indicate VF NIC client has registered (bsc#1104353).
- net: hns3: use HCLGE_STATE_NIC_REGISTERED to indicate PF NIC client has registered (bsc#1104353).
- net: hns3: use HCLGE_STATE_ROCE_REGISTERED to indicate PF ROCE client has registered (bsc#1104353).
- net: hns3: use macros instead of magic numbers (bsc#1104353 ).
- net: hns: add support for vlan TSO (bsc#1104353).
- net: make skb_dst_force return true when dst is refcounted (networking-stable-19_07_25).
- net: mvpp2: Do not check for 3 consecutive Idle frames for 10G links (bsc#1119113).
- net: neigh: fix multiple neigh timer scheduling (networking-stable-19_07_25).
- net: phylink: Fix flow control for fixed-link (bsc#1119113 ).
- net: remove duplicate fetch in sock_getsockopt (networking-stable-19_07_02).
- net: sched: verify that q!=NULL before setting q-&gt;flags (git-fixes).
- net: stmmac: fixed new system time seconds value calculation (networking-stable-19_07_02).
- net: stmmac: set IC bit when transmitting frames with HW timestamp (networking-stable-19_07_02).
- net: usb: pegasus: fix improper read if get_registers() fail (bsc#1051510).
- net_sched: unset TCQ_F_CAN_BYPASS when adding filters (networking-stable-19_07_25).
- netrom: fix a memory leak in nr_rx_frame() (networking-stable-19_07_25).
- netrom: hold sock when setting skb-&gt;destructor (networking-stable-19_07_25).
- nfc: fix potential illegal memory access (bsc#1051510).
- nfs: Cleanup if nfs_match_client is interrupted (bsc#1134291).
- nfs: Fix a double unlock from nfs_match,get_client (bsc#1134291).
- nfs: Fix the inode request accounting when pages have subrequests (bsc#1140012).
- nfs: make nfs_match_client killable (bsc#1134291).
- nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header (git fixes).
- nvme-core: Fix extra device_put() call on error path (bsc#1142541).
- nvme-fc: fix module unloads while lports still pending (bsc#1150033).
- nvme-multipath: fix ana log nsid lookup when nsid is not found (bsc#1141554).
- nvme-multipath: relax ANA state check (bsc#1123105).
- nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns (bsc#1120876).
- nvme: Return BLK_STS_TARGET if the DNR bit is set (bsc#1142076).
- nvme: cancel request synchronously (bsc#1145661).
- nvme: change locking for the per-subsystem controller list (bsc#1142541).
- nvme: fix possible use-after-free in connect error flow (bsc#1139500)
- nvme: fix possible use-after-free in connect error flow (bsc#1139500, bsc#1140426)
- nvme: introduce NVME_QUIRK_IGNORE_DEV_SUBNQN (bsc#1146938).
- objtool: Add rewind_stack_do_exit() to the noreturn list (bsc#1145302).
- objtool: Support GCC 9 cold subfunction naming scheme (bsc#1145300).
- octeon_mgmt: Fix MIX registers configuration on MTU setup (bsc#1051510).
- pci: PM/acpi: Refresh all stale power state data in pci_pm_complete() (bsc#1149106).
- pci: Restore Resizable BAR size bits correctly for 1MB BARs (bsc#1143841).
- pci: al: Add Amazon Annapurna Labs PCIe host controller driver (SLE-9332).
- pci: hv: Fix panic by calling hv_pci_remove_slots() earlier (bsc#1142701).
- pci: qcom: Ensure that PERST is asserted for at least 100 ms (bsc#1142635).
- pci: xilinx-nwl: Fix Multi MSI data programming (bsc#1142635).
- phy: qcom-qusb2: Fix crash if nvmem cell not specified (bsc#1051510).
- phy: renesas: rcar-gen2: Fix memory leak at error paths (bsc#1051510).
- pinctrl: pistachio: fix leaked of_node references (bsc#1051510).
- pinctrl: rockchip: fix leaked of_node references (bsc#1051510).
- pm / OPP: OF: Use pr_debug() instead of pr_err() while adding OPP table (jsc#SLE-7294).
- pm / devfreq: rk3399_dmc: Pass ODT and auto power down parameters to TF-A (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: do not print error when get supply and clk defer (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: fix spelling mistakes (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: remove unneeded semicolon (bsc#1144718,bsc#1144813).
- pm / devfreq: rk3399_dmc: remove wait for dcf irq event (bsc#1144718,bsc#1144813).
- pm / devfreq: rockchip-dfi: Move GRF definitions to a common place (bsc#1144718,bsc#1144813).
- powerpc/64s: Include cpu header (bsc#1065729).
- powerpc/64s: support nospectre_v2 cmdline option (bsc#1131107).
- powerpc/book3s/64: check for NULL pointer in pgd_alloc() (bsc#1078248, git-fixes).
- powerpc/fadump: use kstrtoint to handle sysfs store (bsc#1146376).
- powerpc/fadump: when fadump is supported register the fadump sysfs files (bsc#1146352).
- powerpc/fsl: Add nospectre_v2 command line argument (bsc#1131107).
- powerpc/fsl: Update Spectre v2 reporting (bsc#1131107).
- powerpc/kdump: Handle crashkernel memory reservation failure (bsc#1143466 LTC#179600).
- powerpc/lib: Fix feature fixup test of external branch (bsc#1065729).
- powerpc/mm/hash/4k: Do not use 64K page size for vmemmap with 4K pagesize (bsc#1142685 LTC#179509).
- powerpc/mm/nvdimm: Add an informative message if we fail to allocate altmap block (bsc#1142685 LTC#179509).
- powerpc/mm/radix: Use the right page size for vmemmap mapping (bsc#1055117 bsc#1142685 LTC#179509).
- powerpc/mm: Handle page table allocation failures (bsc#1065729).
- powerpc/nvdimm: Add support for multibyte read/write for metadata (bsc#1142685 LTC#179509).
- powerpc/nvdimm: Pick nearby online node if the device node is not online (bsc#1142685 ltc#179509).
- powerpc/perf: Add constraints for power9 l2/l3 bus events (bsc#1056686).
- powerpc/perf: Add mem access events to sysfs (bsc#1124370).
- powerpc/perf: Cleanup cache_sel bits comment (bsc#1056686).
- powerpc/perf: Fix thresholding counter data for unknown type (bsc#1056686).
- powerpc/perf: Remove PM_BR_CMPL_ALT from power9 event list (bsc#1047238, bsc#1056686).
- powerpc/perf: Update perf_regs structure to include SIER (bsc#1056686).
- powerpc/powernv/opal-dump : Use IRQ_HANDLED instead of numbers in interrupt handler (bsc#1065729).
- powerpc/powernv: Flush console before platform error reboot (bsc#1149940 ltc#179958).
- powerpc/powernv: Return for invalid IMC domain (bsc1054914, git-fixes).
- powerpc/powernv: Use kernel crash path for machine checks (bsc#1149940 ltc#179958).
- powerpc/pseries, ps3: panic flush kernel messages before halting system (bsc#1149940 ltc#179958).
- powerpc/pseries/scm: Mark the region volatile if cache flush not required (bsc#1142685 LTC#179509).
- powerpc/pseries: Fix xive=off command line (bsc#1085030, git-fixes).
- powerpc/pseries: add missing cpumask.h include file (bsc#1065729).
- powerpc/pseries: correctly track irq state in default idle (bsc#1150727 ltc#178925).
- powerpc/rtas: use device model APIs and serialization during Lpm (bsc#1144123 ltc#178840).
- powerpc/security: Show powerpc_security_features in debugfs (bsc#1131107).
- powerpc/xive: Fix dump of XIVE interrupt under pseries (bsc#1142019).
- powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask() (bsc#1085030, bsc#1145189, LTC#179762).
- powerpc/xmon: Add a dump of all XIVE interrupts (bsc#1142019).
- powerpc/xmon: Check for HV mode when dumping XIVE info from OPAL (bsc#1142019).
- powerpc: Allow flush_(inval_)dcache_range to work across ranges &gt;4GB (bsc#1146575 ltc#180764).
- powerpc: dump kernel log before carrying out fadump or kdump (bsc#1149940 ltc#179958).
- qede: fix write to free'd pointer error and double free of ptp (bsc#1051510).
- qla2xxx: kABI fixes for v10.01.00.18-k (bcs#1082635 bcs#1141340 bcs#1143706).
- qlge: Deduplicate lbq_buf_size (bsc#1106061).
- qlge: Deduplicate rx buffer queue management (bsc#1106061).
- qlge: Factor out duplicated expression (bsc#1106061).
- qlge: Fix dma_sync_single calls (bsc#1106061).
- qlge: Fix irq masking in INTx mode (bsc#1106061).
- qlge: Refill empty buffer queues from wq (bsc#1106061).
- qlge: Refill rx buffers up to multiple of 16 (bsc#1106061).
- qlge: Remove bq_desc.maplen (bsc#1106061).
- qlge: Remove irq_cnt (bsc#1106061).
- qlge: Remove page_chunk.last_flag (bsc#1106061).
- qlge: Remove qlge_bq.len &amp; size (bsc#1106061).
- qlge: Remove rx_ring.sbq_buf_size (bsc#1106061).
- qlge: Remove rx_ring.type (bsc#1106061).
- qlge: Remove useless dma synchronization calls (bsc#1106061).
- qlge: Remove useless memset (bsc#1106061).
- qlge: Replace memset with assignment (bsc#1106061).
- qlge: Update buffer queue prod index despite oom (bsc#1106061).
- raid5-cache: Need to do start() part job after adding journal device (git fixes).
- rbd: do not (ab)use obj_req-&gt;pages for stat requests (bsc#1141450).
- rbd: do not NULL out -&gt;obj_request in rbd_img_obj_parent_read_full() (bsc#1141450).
- rbd: get rid of img_req-&gt;copyup_pages (bsc#1141450).
- rbd: move from raw pages to bvec data descriptors (bsc#1141450).
- rbd: remove bio cloning helpers (bsc#1141450).
- rbd: start enums at 1 instead of 0 (bsc#1141450).
- rbd: use kmem_cache_zalloc() in rbd_img_request_create() (bsc#1141450).
- rdma/hns: Add mtr support for mixed multihop addressing (bsc#1104427).
- rdma/hns: Bugfix for calculating qp buffer size (bsc#1104427 ).
- rdma/hns: Bugfix for filling the sge of srq (bsc#1104427 ).
- rdma/hns: Do not stuck in endless timeout loop (bsc#1104427 ).
- rdma/hns: Fix an error code in hns_roce_set_user_sq_size() (bsc#1104427).
- rdma/hns: Fixs hw access invalid dma memory error (bsc#1104427 ).
- rdma/hns: Fixup qp release bug (bsc#1104427).
- rdma/hns: Modify ba page size for cqe (bsc#1104427).
- rdma/hns: Remove set but not used variable 'fclr_write_fail_flag' (bsc#1104427).
- rdma/hns: Remove unnecessary print message in aeq (bsc#1104427 ).
- rdma/hns: Replace magic numbers with #defines (bsc#1104427 ).
- rdma/hns: Set reset flag when hw resetting (bsc#1104427 ).
- rdma/hns: Use %pK format pointer print (bsc#1104427 ).
- rdma/hns: fix inverted logic of readl read and shift (bsc#1104427).
- rdma/hns: reset function when removing module (bsc#1104427 ).
- regmap: fix bulk writes on paged registers (bsc#1051510).
- regulator: qcom_spmi: Fix math of spmi_regulator_set_voltage_time_sel (bsc#1051510).
- rpm/kernel-binary.spec.in: Enable missing modules check.
- rpmsg: added MODULE_ALIAS for rpmsg_char (bsc#1051510).
- rpmsg: smd: do not use mananged resources for endpoints and channels (bsc#1051510).
- rpmsg: smd: fix memory leak on channel create (bsc#1051510).
- rsi: improve kernel thread handling to fix kernel panic (bsc#1051510).
- rslib: Fix decoding of shortened codes (bsc#1051510).
- rslib: Fix handling of of caller provided syndrome (bsc#1051510).
- rtc: pcf8523: do not return invalid date when battery is low (bsc#1051510).
- rtc: pcf8563: Clear event flags and disable interrupts before requesting irq (bsc#1051510).
- rtc: pcf8563: Fix interrupt trigger method (bsc#1051510).
- rxrpc: Fix send on a connected, but unbound socket (networking-stable-19_07_25).
- s390/cio: fix ccw_device_start_timeout API (bsc#1142109 LTC#179339).
- s390/dasd: fix endless loop after read unit address configuration (bsc#1144912 LTC#179907).
- s390/qdio: handle PENDING state for QEBSM devices (bsc#1142117 bsc#1142118 bsc#1142119 LTC#179329 LTC#179330 LTC#179331).
- s390/qeth: avoid control IO completion stalls (bsc#1142109 LTC#179339).
- s390/qeth: cancel cmd on early error (bsc#1142109 LTC#179339).
- s390/qeth: fix request-side race during cmd IO timeout (bsc#1142109 LTC#179339).
- s390/qeth: release cmd buffer in error paths (bsc#1142109 LTC#179339).
- s390/qeth: simplify reply object handling (bsc#1142109 LTC#179339).
- samples, bpf: fix to change the buffer size for read() (bsc#1051510).
- samples: mei: use /dev/mei0 instead of /dev/mei (bsc#1051510).
- sched/fair: Do not free p-&gt;numa_faults with concurrent readers (bsc#1144920).
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (bsc#1144920).
- scripts/checkstack.pl: Fix arm64 wrong or unknown architecture (bsc#1051510).
- scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE (bsc#1051510).
- scripts/decode_stacktrace: only strip base path when a prefix of the path (bsc#1051510).
- scripts/gdb: fix lx-version string output (bsc#1051510).
- scripts/git_sort/git_sort.py:
- scsi: NCR5380: Always re-enable reselection interrupt (git-fixes).
- scsi: aacraid: Fix missing break in switch statement (git-fixes).
- scsi: aacraid: Fix performance issue on logical drives (git-fixes).
- scsi: aic94xx: fix an error code in aic94xx_init() (git-fixes).
- scsi: aic94xx: fix module loading (git-fixes).
- scsi: bfa: Avoid implicit enum conversion in bfad_im_post_vendor_event (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: Remove unused functions (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_fcs_lport: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_fcs_rport: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: bfa_ioc: Mark expected switch fall-throughs (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: clean up a couple of indentation issues (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: convert to strlcpy/strlcat (git-fixes).
- scsi: bfa: fix calls to dma_set_mask_and_coherent() (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: no need to check return value of debugfs_create functions (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: remove ScsiResult macro (bsc#1136496 jsc#SLE-4698).
- scsi: bfa: use dma_set_mask_and_coherent (bsc#1136496 jsc#SLE-4698).
- scsi: bnx2fc: Do not allow both a cleanup completion and abort completion for the same request (bsc#1144582).
- scsi: bnx2fc: Fix NULL dereference in error handling (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Fix NULL dereference in error handling (git-fixes).
- scsi: bnx2fc: Fix error handling in probe() (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Limit the IO size according to the FW capability (bsc#1144582).
- scsi: bnx2fc: Only put reference to io_req in bnx2fc_abts_cleanup if cleanup times out (bsc#1144582).
- scsi: bnx2fc: Redo setting source FCoE MAC (bsc#1144582).
- scsi: bnx2fc: Remove set but not used variable 'oxid' (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: Separate out completion flags and variables for abort and cleanup (bsc#1144582).
- scsi: bnx2fc: Update the driver version to 2.12.10 (bsc#1144582).
- scsi: bnx2fc: fix bnx2fc_cmd refcount imbalance in send_rec (bsc#1144582).
- scsi: bnx2fc: fix bnx2fc_cmd refcount imbalance in send_srr (bsc#1144582).
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation (bsc#1136502 jsc#SLE-4703).
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation (git-fixes).
- scsi: bnx2fc: remove unneeded variable (bsc#1136502 jsc#SLE-4703).
- scsi: core: Fix race on creating sense cache (git-fixes).
- scsi: core: Synchronize request queue pm status only on successful resume (git-fixes).
- scsi: core: set result when the command cannot be dispatched (git-fixes).
- scsi: cxgb4i: fix incorrect spelling 'reveive' -&gt; 'receive' (bsc#1136346 jsc#SLE-4682).
- scsi: cxgb4i: get pf number from lldi-&gt;pf (bsc#1136346 jsc#SLE-4682).
- scsi: cxgb4i: validate tcp sequence number only if chip version &amp;lt;= T5 (bsc#1136346 jsc#SLE-4682).
- scsi: cxlflash: Mark expected switch fall-throughs (bsc#1148868).
- scsi: cxlflash: Prevent deadlock when adapter probe fails (git-fixes).
- scsi: esp_scsi: Track residual for PIO transfers (git-fixes) Also, mitigate kABI changes.
- scsi: fas216: fix sense buffer initialization (git-fixes).
- scsi: hisi_sas: Add support for DIX feature for v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Change SERDES_CFG init value to increase reliability of HiLink (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Disable stash for v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Fix losing directly attached disk when hot-plug (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Ignore the error code between phy down to phy up (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Issue internal abort on all relevant queues (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Reduce HISI_SAS_SGE_PAGE_CNT in size (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Reject setting programmed minimum linkrate &gt; 1.5G (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: Use pci_irq_get_affinity() for v3 hw as experimental (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: change queue depth from 512 to 4096 (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: kabi fixes (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: print PHY RX errors count for later revision of v3 hw (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: send primitive NOTIFY to SSP situation only (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: hisi_sas: shutdown axi bus to avoid exception CQ returned (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: isci: initialize shost fully before calling scsi_add_host() (git-fixes).
- scsi: libcxgbi: find cxgbi device by MAC address (bsc#1136352 jsc#SLE-4687).
- scsi: libcxgbi: remove uninitialized variable len (bsc#1136352 jsc#SLE-4687).
- scsi: libcxgbi: update route finding logic (bsc#1136352 jsc#SLE-4687)
- scsi: libfc: fix null pointer dereference on a null lport (git-fixes).
- scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached (git-fixes).
- scsi: libsas: kABI protect struct sas_task_slow (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: libsas: only clear phy-&gt;in_shutdown after shutdown event done (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: lpfc: Add MDS driver loopback diagnostics support (bsc#1146215).
- scsi: lpfc: Add NVMe sequence level error recovery support (bsc#1146215).
- scsi: lpfc: Add first and second level hardware revisions to sysfs (bsc#1146215).
- scsi: lpfc: Add simple unlikely optimizations to reduce NVME latency (bsc#1146215).
- scsi: lpfc: Avoid unused function warnings (bsc#1148308).
- scsi: lpfc: Convert timers to use timer_setup() (bsc#1148308).
- scsi: lpfc: Default fdmi_on to on (bsc#1148308).
- scsi: lpfc: Fix ADISC reception terminating login state if a NVME (bsc#1146215).
- scsi: lpfc: Fix BlockGuard enablement on FCoE adapters (bsc#1146215).
- scsi: lpfc: Fix ELS field alignments (bsc#1146215).
- scsi: lpfc: Fix FLOGI handling across multiple link up/down (bsc#1146215).
- scsi: lpfc: Fix Max Frame Size value shown in fdmishow output (bsc#1146215).
- scsi: lpfc: Fix Oops in nvme_register with target logout/login (bsc#1146215).
- scsi: lpfc: Fix PLOGI failure with high remoteport count (bsc#1146215).
- scsi: lpfc: Fix coverity warnings (bsc#1146215).
- scsi: lpfc: Fix crash due to port reset racing vs adapter error (bsc#1146215).
- scsi: lpfc: Fix crash on driver unload in wq free (bsc#1146215).
- scsi: lpfc: Fix crash when cpu count is 1 and null irq affinity mask (bsc#1146215).
- scsi: lpfc: Fix deadlock on host_lock during cable pulls (bsc#1146215).
- scsi: lpfc: Fix devices that do not return after devloss followed by (bsc#1146215).
- scsi: lpfc: Fix discovery when target has no GID_FT information (bsc#1146215).
- scsi: lpfc: Fix error in remote port address change (bsc#1146215).
- scsi: lpfc: Fix failure to clear non-zero eq_delay after io rate (bsc#1146215).
- scsi: lpfc: Fix hang when downloading fw on port enabled for nvme (bsc#1146215).
- scsi: lpfc: Fix irq raising in lpfc_sli_hba_down (bsc#1146215).
- scsi: lpfc: Fix issuing init_vpi mbox on SLI-3 card (bsc#1146215).
- scsi: lpfc: Fix leak of ELS completions on adapter reset (bsc#1146215).
- scsi: lpfc: Fix loss of remote port after devloss due to lack of RPIs (bsc#1146215).
- scsi: lpfc: Fix null ptr oops updating lpfc_devloss_tmo via sysfs (bsc#1146215).
- scsi: lpfc: Fix nvme first burst module parameter description (bsc#1146215).
- scsi: lpfc: Fix nvme sg_seg_cnt display if HBA does not support NVME (bsc#1146215).
- scsi: lpfc: Fix nvme target mode ABTSing a received ABTS (bsc#1146215).
- scsi: lpfc: Fix oops when fewer hdwqs than cpus (bsc#1146215).
- scsi: lpfc: Fix port relogin failure due to GID_FT interaction (bsc#1146215).
- scsi: lpfc: Fix propagation of devloss_tmo setting to nvme transport (bsc#1146215).
- scsi: lpfc: Fix reported physical link speed on a disabled trunked (bsc#1146215).
- scsi: lpfc: Fix reset recovery paths that are not recovering (bsc#1144375).
- scsi: lpfc: Fix sg_seg_cnt for HBAs that do not support NVME (bsc#1146215).
- scsi: lpfc: Fix sli4 adapter initialization with MSI (bsc#1146215).
- scsi: lpfc: Fix too many sg segments spamming in kernel log (bsc#1146215).
- scsi: lpfc: Fix upcall to bsg done in non-success cases (bsc#1146215).
- scsi: lpfc: Limit xri count for kdump environment (bsc#1146215).
- scsi: lpfc: Make some symbols static (bsc#1148308).
- scsi: lpfc: Merge per-protocol WQ/CQ pairs into single per-cpu pair (bsc#1146215).
- scsi: lpfc: Merge per-protocol WQ/CQ pairs into single per-cpu pair (bsc#1146215).
- scsi: lpfc: Migrate to %px and %pf in kernel print calls (bsc#1146215).
- scsi: lpfc: Remove bg debugfs buffers (bsc#1144375).
- scsi: lpfc: Remove set but not used variable 'psli' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'fc_hdr' and 'hw_page_size' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'qp' (bsc#1148308).
- scsi: lpfc: Remove set but not used variables 'tgtp' (bsc#1148308).
- scsi: lpfc: Resolve checker warning for lpfc_new_io_buf() (bsc#1144375).
- scsi: lpfc: Support dynamic unbounded SGL lists on G7 hardware (bsc#1146215).
- scsi: lpfc: Update lpfc version to 12.4.0.0 (bsc#1146215).
- scsi: lpfc: Use dma_zalloc_coherent (bsc#1148308).
- scsi: lpfc: add check for loss of ndlp when sending RRQ (bsc#1148308).
- scsi: lpfc: change snprintf to scnprintf for possible overflow (bsc#1146215).
- scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show (bsc#1148308).
- scsi: lpfc: lpfc_sli: Mark expected switch fall-throughs (bsc#1148308).
- scsi: lpfc: no need to check return value of debugfs_create functions (bsc#1148308).
- scsi: lpfc: nvme: avoid hang / use-after-free when destroying localport (bsc#1148308).
- scsi: lpfc: nvmet: avoid hang / use-after-free when destroying targetport (bsc#1148308).
- scsi: lpfc: remove NULL check before some freeing functions (bsc#1146215).
- scsi: lpfc: remove ScsiResult macro (bsc#1148308).
- scsi: lpfc: remove a bogus pci_dma_sync_single_for_device call (bsc#1148308).
- scsi: lpfc: remove null check on nvmebuf (bsc#1148308).
- scsi: lpfc: resolve lockdep warnings (bsc#1148308).
- scsi: lpfc: use sg helper to iterate over scatterlist (bsc#1148308).
- scsi: mac_scsi: Fix pseudo DMA implementation, take 2 (git-fixes).
- scsi: mac_scsi: Increase PIO/PDMA transfer length threshold (git-fixes).
- scsi: megaraid: fix out-of-bound array accesses (git-fixes).
- scsi: megaraid_sas: Fix calculation of target ID (git-fixes).
- scsi: megaraid_sas: IRQ poll to avoid CPU hard lockups (bsc#1143962).
- scsi: megaraid_sas: Release Mutex lock before OCR in case of DCMD timeout (bsc#1143962).
- scsi: mpt3sas: Determine smp affinity on per HBA basis (bsc#1143738).
- scsi: mpt3sas: Fix msix load balance on and off settings (bsc#1143738).
- scsi: mpt3sas: Mark expected switch fall-through (bsc#1143738).
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode (bsc#1143738).
- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA (bsc#1143738).
- scsi: mpt3sas: Use configured PCIe link speed, not max (bsc#1143738).
- scsi: mpt3sas: make driver options visible in sys (bsc#1143738).
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (bsc#1143738).
- scsi: pmcraid: do not allocate a dma coherent buffer for sense data (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: simplify pmcraid_cancel_all a bit (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: use generic DMA API (bsc#1135990 jsc#SLE-4709).
- scsi: pmcraid: use sg helper to iterate over scatterlist (bsc#1135990 jsc#SLE-4709).
- scsi: prefix header search paths with $(srctree)/ (bsc#1136346 jsc#SLE-4682).
- scsi: qedf: Add debug information for unsolicited processing (bsc#1149976).
- scsi: qedf: Add shutdown callback handler (bsc#1149976).
- scsi: qedf: Add support for 20 Gbps speed (bsc#1149976).
- scsi: qedf: Check both the FCF and fabric ID before servicing clear virtual link (bsc#1149976).
- scsi: qedf: Check for link state before processing LL2 packets and send fipvlan retries (bsc#1149976).
- scsi: qedf: Check for module unloading bit before processing link update AEN (bsc#1149976).
- scsi: qedf: Decrease the LL2 MTU size to 2500 (bsc#1149976).
- scsi: qedf: Fix race betwen fipvlan request and response path (bsc#1149976).
- scsi: qedf: Initiator fails to re-login to switch after link down (bsc#1149976).
- scsi: qedf: Print message during bailout conditions (bsc#1149976).
- scsi: qedf: Stop sending fipvlan request on unload (bsc#1149976).
- scsi: qedf: Update module description string (bsc#1149976).
- scsi: qedf: Update the driver version to 8.37.25.20 (bsc#1149976).
- scsi: qedf: Update the version to 8.42.3.0 (bsc#1149976).
- scsi: qedf: Use discovery list to traverse rports (bsc#1149976).
- scsi: qedf: remove memset/memcpy to nfunc and use func instead (git-fixes).
- scsi: qedf: remove set but not used variables (bsc#1149976).
- scsi: qedi: remove declaration of nvm_image from stack (git-fixes).
- scsi: qla2xxx: Add cleanup for PCI EEH recovery (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Add cleanup for PCI EEH recovery (bsc#1129424).
- scsi: qla2xxx: Allow NVMe IO to resume with short cable pull (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value (bsc#1143706).
- scsi: qla2xxx: Avoid that Coverity complains about dereferencing a NULL rport pointer (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qla2x00_mem_free() crashes if called twice (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory (git-fixes).
- scsi: qla2xxx: Change a stack variable into a static const variable (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1143706).
- scsi: qla2xxx: Change the return type of qla24xx_read_flash_data() (bsc#1143706).
- scsi: qla2xxx: Change the return type of qla2x00_update_ms_fdmi_iocb() into void (bsc#1143706).
- scsi: qla2xxx: Check secondary image if reading the primary image fails (bsc#1143706).
- scsi: qla2xxx: Check the PCI info string output buffer size (bsc#1143706).
- scsi: qla2xxx: Check the size of firmware data structures at compile time (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Cleanup fcport memory to prevent leak (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Cleanup redundant qla2x00_abort_all_cmds during unload (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Complain if a command is released that is owned by the firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Complain if a mailbox command times out (bsc#1143706).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1143706).
- scsi: qla2xxx: Complain if parsing the version string fails (bsc#1143706).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the completion path (bsc#1143706).
- scsi: qla2xxx: Complain if waiting for pending commands times out (bsc#1143706).
- scsi: qla2xxx: Complain loudly about reference count underflow (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Correct error handling during initialization failures (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument const (bsc#1143706).
- scsi: qla2xxx: Declare local symbols static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla24xx_build_scsi_crc_2_iocbs() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla2x00_find_new_loop_id() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1143706).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument const (bsc#1143706).
- scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1143706).
- scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1143706).
- scsi: qla2xxx: Fix DMA unmap leak (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix NVMe port discovery after a short device port loss (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1143706).
- scsi: qla2xxx: Fix a format specifier (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a format specifier (git-fixes).
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (bsc#1143706).
- scsi: qla2xxx: Fix a small typo in qla_bsg.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix abort timeout race condition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix an endian bug in fcpcmd_is_corrupted() (git-fixes).
- scsi: qla2xxx: Fix comment alignment in qla_bsg.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix device staying in blocked state (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix device staying in blocked state (git-fixes).
- scsi: qla2xxx: Fix different size DMA Alloc/Unmap (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1143706).
- scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd() (git-fixes).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1143706).
- scsi: qla2xxx: Fix formatting of pointer types (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix fw dump corruption (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hang in fcport delete path (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hardirq-unsafe locking (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix hardlockup in abort command during driver remove (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix message indicating vectors used by driver (bsc#1143706).
- scsi: qla2xxx: Fix possible fcport null-pointer dereferences (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix premature timer expiration (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1143706).
- scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work() (bsc#1143706).
- scsi: qla2xxx: Fix stale session (bsc#1143706).
- scsi: qla2xxx: Fix stuck login session (bsc#1143706).
- scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Further limit FLASH region write access from SysFS (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Improve Linux kernel coding style conformance (bsc#1143706).
- scsi: qla2xxx: Include the &amp;lt;asm/unaligned.h&gt; header file from qla_dsd.h (bsc#1143706).
- scsi: qla2xxx: Increase the max_sgl_segments to 1024 (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Increase the size of the mailbox arrays from 4 to 8 (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (bsc#1143706).
- scsi: qla2xxx: Insert spaces where required (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1143706).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle() (bsc#1143706).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types for FC src/dst IDs (bsc#1143706).
- scsi: qla2xxx: Introduce the dsd32 and dsd64 data structures (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (bsc#1143706).
- scsi: qla2xxx: Leave a blank line after declarations (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Let the compiler check the type of the SCSI command context pointer (bsc#1143706).
- scsi: qla2xxx: Log the status code if a firmware command fails (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs use little endian (bsc#1143706).
- scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (bsc#1143706).
- scsi: qla2xxx: Make qla2x00_mem_free() easier to verify (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qla2x00_process_response_queue() easier to read (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust (bsc#1143706).
- scsi: qla2xxx: Make sure that aborted commands are freed (bsc#1143706).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1143706).
- scsi: qla2xxx: Move qla2x00_clear_loop_id() from qla_inline.h into qla_init.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_is_reserved_id() from qla_inline.h into qla_init.c (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_set_fcport_state() from a .h into a .c file (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move qla2x00_set_reserved_loop_ids() definition (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move the &amp;lt;linux/io-64-nonatomic-lo-hi.h&gt; include directive (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Move the port_state_str definition from a .h to a .c file (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Pass little-endian values to the firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1143706).
- scsi: qla2xxx: Reduce the number of casts in GID list code (bsc#1143706).
- scsi: qla2xxx: Reduce the number of forward declarations (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (bsc#1143706).
- scsi: qla2xxx: Reject EH_{abort|device_reset|target_request} (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a comment that refers to the SCSI host lock (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove a superfluous forward declaration (bsc#1143706).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1143706).
- scsi: qla2xxx: Remove an include directive from qla_mr.c (bsc#1143706).
- scsi: qla2xxx: Remove dead code (bsc#1143706).
- scsi: qla2xxx: Remove qla_tgt_cmd.data_work and qla_tgt_cmd.data_work_free (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove qla_tgt_cmd.released (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts (bsc#1143706).
- scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove two superfluous casts (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1143706).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1143706).
- scsi: qla2xxx: Remove unnecessary locking from the target code (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove unnecessary null check (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock() (bsc#1143706).
- scsi: qla2xxx: Remove useless set memory to zero use memset() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Replace vmalloc + memset with vzalloc (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Report invalid mailbox status codes (bsc#1143706).
- scsi: qla2xxx: Report the firmware status code if a mailbox command fails (bsc#1143706).
- scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Retry fabric Scan on IOCB queue full (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id() (bsc#1143706).
- scsi: qla2xxx: Set the SCSI command result before calling the command done (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Set the qpair in SRB to NULL when SRB is released (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS pass-through IOCBs (bsc#1143706).
- scsi: qla2xxx: Silence Successful ELS IOCB message (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Simplify a debug statement (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1143706).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1143706).
- scsi: qla2xxx: Simplify qlt_send_term_imm_notif() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Skip FW dump on LOOP initialization error (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer overflow (bsc#1143706).
- scsi: qla2xxx: Suppress multiple Coverity complaint about out-of-bounds accesses (bsc#1143706).
- scsi: qla2xxx: Uninline qla2x00_init_timer() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Unregister chrdev if module initialization fails (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Unregister chrdev if module initialization fails (git-fixes).
- scsi: qla2xxx: Unregister resources in the opposite order of the registration order (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.16-k (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.18-k (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Update driver version to 10.01.00.19-k (bsc#1143706).
- scsi: qla2xxx: Update two source code comments (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use ARRAY_SIZE() in the definition of QLA_LAST_SPEED (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use Correct index for Q-Pair array (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use __le64 instead of uint32_t[2] for sending DMA addresses to firmware (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use common update-firmware-options routine for ISP27xx+ (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use get/put_unaligned where appropriate (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy() and strncpy() (bsc#1143706).
- scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1143706).
- scsi: qla2xxx: Use tabs instead of spaces for indentation (bsc#1143706).
- scsi: qla2xxx: Use tabs to indent code (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: Verify locking assumptions at runtime (bsc#1143706).
- scsi: qla2xxx: cleanup trace buffer initialization (bsc#1134476).
- scsi: qla2xxx: fix spelling mistake 'alredy' -&gt; 'already' (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: on session delete, return nvme cmd (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (bsc#1134476).
- scsi: qla2xxx: remove double assignment in qla2x00_update_fcport (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla2xxx: target: Fix offline port handling and host reset handling (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: qla4xxx: avoid freeing unallocated dma memory (git-fixes).
- scsi: raid_attrs: fix unused variable warning (git-fixes).
- scsi: sas: Convert timers to use timer_setup() (bsc#1137322 bsc#1137323 bsc#1138099 bsc#1138100).
- scsi: scsi_dh_alua: Fix possible null-ptr-deref (git-fixes).
- scsi: scsi_transport_fc: nvme: display FC-NVMe port roles (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: sd: Defer spinning up drive while SANITIZE is in progress (git-fixes).
- scsi: sd: Fix a race between closing an sd device and sd I/O (git-fixes).
- scsi: sd: Fix cache_type_store() (git-fixes).
- scsi: sd: Optimal I/O size should be a multiple of physical block size (git-fixes).
- scsi: sd: Quiesce warning if device does not report optimal I/O size (git-fixes).
- scsi: sd: use mempool for discard special page (git-fixes).
- scsi: sd_zbc: Fix potential memory leak (git-fixes).
- scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous() (git-fixes).
- scsi: sr: Avoid that opening a CD-ROM hangs with runtime power management enabled (git-fixes).
- scsi: target: iscsi: cxgbit: add missing spin_lock_init() (bsc#1136349 jsc#SLE-4685).
- scsi: tcm_qla2xxx: Minimize #include directives (bsc#1082635 bsc#1141340 bsc#1143706).
- scsi: ufs: Avoid runtime suspend possibly being blocked forever (git-fixes).
- scsi: ufs: Check that space was properly alloced in copy_query_response (git-fixes).
- scsi: ufs: Fix NULL pointer dereference in ufshcd_config_vreg_hpm() (git-fixes).
- scsi: ufs: Fix RX_TERMINATION_FORCE_ENABLE define value (git-fixes).
- scsi: ufs: fix wrong command type of UTRD for UFSHCI v2.1 (git-fixes).
- scsi: use dma_get_cache_alignment() as minimum DMA alignment (git-fixes).
- scsi: virtio_scsi: do not send sc payload with tmfs (git-fixes).
- sctp: change to hold sk after auth shkey is created successfully (networking-stable-19_07_02).
- sdhci-fujitsu: add support for setting the CMD_DAT_DELAY attribute (bsc#1145256).
- serial: 8250: Fix TX interrupt handling condition (bsc#1051510).
- signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig (bsc#1144333).
- sis900: fix TX completion (bsc#1051510).
- sky2: Disable MSI on ASUS P6T (bsc#1142496).
- smb2: fix missing files in root share directory listing (bsc#1112907, bsc#1144333).
- smb2: fix typo in definition of a few error flags (bsc#1144333).
- smb2: fix uninitialized variable bug in smb2_ioctl_query_info (bsc#1144333).
- smb3 - clean up debug output displaying network interfaces (bsc#1144333).
- smb3.11: replace a 4 with server-&gt;vals-&gt;header_preamble_size (bsc#1144333).
- smb3: Add SMB3.1.1 GCM to negotiated crypto algorigthms (bsc#1144333).
- smb3: Add debug message later in smb2/smb3 reconnect path (bsc#1144333).
- smb3: Add defines for new negotiate contexts (bsc#1144333).
- smb3: Add dynamic trace points for various compounded smb3 ops (bsc#1144333).
- smb3: Add ftrace tracepoints for improved SMB3 debugging (bsc#1144333).
- smb3: Add handling for different FSCTL access flags (bsc#1144333).
- smb3: Add posix create context for smb3.11 posix mounts (bsc#1144333).
- smb3: Add protocol structs for change notify support (bsc#1144333).
- smb3: Add support for multidialect negotiate (SMB2.1 and later) (bsc#1051510, bsc#1144333).
- smb3: Add tracepoints for read, write and query_dir enter (bsc#1144333).
- smb3: Allow SMB3 FSCTL queries to be sent to server from tools (bsc#1144333).
- smb3: Allow persistent handle timeout to be configurable on mount (bsc#1144333).
- smb3: Allow query of symlinks stored as reparse points (bsc#1144333).
- smb3: Backup intent flag missing for directory opens with backupuid mounts (bsc#1051510, bsc#1144333).
- smb3: Backup intent flag missing from compounded ops (bsc#1144333).
- smb3: Clean up query symlink when reparse point (bsc#1144333).
- smb3: Cleanup license mess (bsc#1144333).
- smb3: Do not ignore O_SYNC/O_DSYNC and O_DIRECT flags (bsc#1085536, bsc#1144333).
- smb3: Do not send SMB3 SET_INFO if nothing changed (bsc#1051510, bsc#1144333).
- smb3: Fix 3.11 encryption to Windows and handle encrypted smb3 tcon (bsc#1051510, bsc#1144333).
- smb3: Fix SMB3.1.1 guest mounts to Samba (bsc#1051510, bsc#1144333).
- smb3: Fix deadlock in validate negotiate hits reconnect (bsc#1144333).
- smb3: Fix endian warning (bsc#1144333, bsc#1137884).
- smb3: Fix enumerating snapshots to Azure (bsc#1144333).
- smb3: Fix length checking of SMB3.11 negotiate request (bsc#1051510, bsc#1144333).
- smb3: Fix mode on mkdir on smb311 mounts (bsc#1144333).
- smb3: Fix potential memory leak when processing compound chain (bsc#1144333).
- smb3: Fix rmdir compounding regression to strict servers (bsc#1144333).
- smb3: Fix root directory when server returns inode number of zero (bsc#1051510, bsc#1144333).
- smb3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL (bsc#1144333).
- smb3: Log at least once if tree connect fails during reconnect (bsc#1144333).
- smb3: Number of requests sent should be displayed for SMB3 not just CIFS (bsc#1144333).
- smb3: Send netname context during negotiate protocol (bsc#1144333).
- smb3: Track total time spent on roundtrips for each SMB3 command (bsc#1144333).
- smb3: Update POSIX negotiate context with POSIX ctxt GUID (bsc#1144333).
- smb3: Validate negotiate request must always be signed (bsc#1064597, bsc#1144333).
- smb3: Warn user if trying to sign connection that authenticated as guest (bsc#1085536, bsc#1144333).
- smb3: add additional ftrace entry points for entry/exit to cifs.ko (bsc#1144333).
- smb3: add credits we receive from oplock/break PDUs (bsc#1144333).
- smb3: add debug for unexpected mid cancellation (bsc#1144333).
- smb3: add define for id for posix create context and corresponding struct (bsc#1144333).
- smb3: add dynamic trace point for query_info_enter/done (bsc#1144333).
- smb3: add dynamic trace point for smb3_cmd_enter (bsc#1144333).
- smb3: add dynamic tracepoint for timeout waiting for credits (bsc#1144333).
- smb3: add dynamic tracepoints for simple fallocate and zero range (bsc#1144333).
- smb3: add missing read completion trace point (bsc#1144333).
- smb3: add module alias for smb3 to cifs.ko (bsc#1144333).
- smb3: add new mount option to retrieve mode from special ACE (bsc#1144333).
- smb3: add reconnect tracepoints (bsc#1144333).
- smb3: add smb3.1.1 to default dialect list (bsc#1144333).
- smb3: add support for posix negotiate context (bsc#1144333).
- smb3: add support for statfs for smb3.1.1 posix extensions (bsc#1144333).
- smb3: add trace point for tree connection (bsc#1144333).
- smb3: add tracepoint for sending lease break responses to server (bsc#1144333).
- smb3: add tracepoint for session expired or deleted (bsc#1144333).
- smb3: add tracepoint for slow responses (bsc#1144333).
- smb3: add tracepoint to catch cases where credit refund of failed op overlaps reconnect (bsc#1144333).
- smb3: add tracepoints for query dir (bsc#1144333).
- smb3: add tracepoints for smb2/smb3 open (bsc#1144333).
- smb3: add way to control slow response threshold for logging and stats (bsc#1144333).
- smb3: allow more detailed protocol info on open files for debugging (bsc#1144333).
- smb3: allow posix mount option to enable new SMB311 protocol extensions (bsc#1144333).
- smb3: allow previous versions to be mounted with snapshot= mount parm (bsc#1144333).
- smb3: allow stats which track session and share reconnects to be reset (bsc#1051510, bsc#1144333).
- smb3: check for and properly advertise directory lease support (bsc#1051510, bsc#1144333).
- smb3: create smb3 equivalent alias for cifs pseudo-xattrs (bsc#1144333).
- smb3: directory sync should not return an error (bsc#1051510, bsc#1144333).
- smb3: display bytes_read and bytes_written in smb3 stats (bsc#1144333).
- smb3: display security information in /proc/fs/cifs/DebugData more accurately (bsc#1144333).
- smb3: display session id in debug data (bsc#1144333).
- smb3: display stats counters for number of slow commands (bsc#1144333).
- smb3: display volume serial number for shares in /proc/fs/cifs/DebugData (bsc#1144333).
- smb3: do not allow insecure cifs mounts when using smb3 (bsc#1144333).
- smb3: do not attempt cifs operation in smb3 query info error path (bsc#1051510, bsc#1144333).
- smb3: do not display confusing message on mount to Azure servers (bsc#1144333).
- smb3: do not display empty interface list (bsc#1144333).
- smb3: do not request leases in symlink creation and query (bsc#1051510, bsc#1144333).
- smb3: do not send compression info by default (bsc#1144333).
- smb3: enumerating snapshots was leaving part of the data off end (bsc#1051510, bsc#1144333).
- smb3: fill in statfs fsid and correct namelen (bsc#1112905, bsc#1144333).
- smb3: fix bytes_read statistics (bsc#1144333).
- smb3: fix corrupt path in subdirs on smb311 with posix (bsc#1144333).
- smb3: fix large reads on encrypted connections (bsc#1144333).
- smb3: fix lease break problem introduced by compounding (bsc#1144333).
- smb3: fix minor debug output for CONFIG_CIFS_STATS (bsc#1144333).
- smb3: fix redundant opens on root (bsc#1144333).
- smb3: fix reset of bytes read and written stats (bsc#1112906, bsc#1144333).
- smb3: fix various xid leaks (bsc#1051510, bsc#1144333).
- smb3: for kerberos mounts display the credential uid used (bsc#1144333).
- smb3: handle new statx fields (bsc#1085536, bsc#1144333).
- smb3: if max_credits is specified then display it in /proc/mounts (bsc#1144333).
- smb3: if server does not support posix do not allow posix mount option (bsc#1144333).
- smb3: improve dynamic tracing of open and posix mkdir (bsc#1144333).
- smb3: increase initial number of credits requested to allow write (bsc#1144333).
- smb3: make default i/o size for smb3 mounts larger (bsc#1144333).
- smb3: minor cleanup of compound_send_recv (bsc#1144333).
- smb3: minor debugging clarifications in rfc1001 len processing (bsc#1144333).
- smb3: minor missing defines relating to reparse points (bsc#1144333).
- smb3: missing defines and structs for reparse point handling (bsc#1144333).
- smb3: note that smb3.11 posix extensions mount option is experimental (bsc#1144333).
- smb3: on kerberos mount if server does not specify auth type use krb5 (bsc#1051510, bsc#1144333).
- smb3: on reconnect set PreviousSessionId field (bsc#1112899, bsc#1144333).
- smb3: optimize open to not send query file internal info (bsc#1144333).
- smb3: passthru query info does not check for SMB3 FSCTL passthru (bsc#1144333).
- smb3: print tree id in debugdata in proc to be able to help logging (bsc#1144333).
- smb3: query inode number on open via create context (bsc#1144333).
- smb3: remove noisy warning message on mount (bsc#1129664, bsc#1144333).
- smb3: remove per-session operations from per-tree connection stats (bsc#1144333).
- smb3: rename encryption_required to smb3_encryption_required (bsc#1144333).
- smb3: request more credits on normal (non-large read/write) ops (bsc#1144333).
- smb3: request more credits on tree connect (bsc#1144333).
- smb3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (bsc#1144333).
- smb3: send CAP_DFS capability during session setup (bsc#1144333).
- smb3: send backup intent on compounded query info (bsc#1144333).
- smb3: show number of current open files in /proc/fs/cifs/Stats (bsc#1144333).
- smb3: simplify code by removing CONFIG_CIFS_SMB311 (bsc#1051510, bsc#1144333).
- smb3: smbdirect no longer experimental (bsc#1144333).
- smb3: snapshot mounts are read-only and make sure info is displayable about the mount (bsc#1144333).
- smb3: track the instance of each session for debugging (bsc#1144333).
- smb3: trivial cleanup to smb2ops.c (bsc#1144333).
- smb3: update comment to clarify enumerating snapshots (bsc#1144333).
- smb3: update default requested iosize to 4MB from 1MB for recent dialects (bsc#1144333).
- smb: Add vers=3.0.2 as a valid option for SMBv3.0.2 (bsc#1144333).
- smb: Cleanup some minor endian issues in smb3 rdma (bsc#1144333).
- smb: Do not log confusing message on reconnect by default (bsc#1129664, bsc#1144333).
- smb: Do not log expected error on DFS referral request (bsc#1051510, bsc#1144333).
- smb: Fix SMB3.1.1 guest authentication to Samba (bsc#1085536, bsc#1144333).
- smb: Fix encryption labels and lengths for SMB3.1.1 (bsc#1085536, bsc#1144333).
- smb: Fix match_server check to allow for auto dialect negotiate (bsc#1144333).
- smb: Fix warning messages when mounting to older servers (bsc#1144333).
- smb: SMB3.1.1 dialect is no longer experimental (bsc#1051510, bsc#1144333).
- smb: SMB3.1.1: Add GCM crypto to the encrypt and decrypt functions (bsc#1144333).
- smb: SMB311: Fix reconnect (bsc#1051510, bsc#1144333).
- smb: SMB311: Improve checking of negotiate security contexts (bsc#1051510, bsc#1144333).
- smb: Tree connect for SMB3.1.1 must be signed for non-encrypted shares (bsc#1051510, bsc#1144333).
- smb: Validate negotiate (to protect against downgrade) even if signing off (bsc#1085536, bsc#1144333).
- smb: fix leak of validate negotiate info response buffer (bsc#1064597, bsc#1144333).
- smb: fix validate negotiate info uninitialised memory use (bsc#1064597, bsc#1144333).
- smbd: Make upper layer decide when to destroy the transport (bsc#1144333).
- smpboot: Place the __percpu annotation correctly (git fixes).
- soc: rockchip: power-domain: Add a sanity check on pd-&gt;num_clks (bsc#1144718,bsc#1144813).
- soc: rockchip: power-domain: Use of_clk_get_parent_count() instead of open coding (bsc#1144718,bsc#1144813).
- soc: rockchip: power-domain: use clk_bulk APIs (bsc#1144718,bsc#1144813).
- sound: fix a memory leak bug (bsc#1051510).
- spi: bcm2835aux: fix corruptions for longer spi transfers (bsc#1051510).
- spi: bcm2835aux: remove dangerous uncontrolled read of fifo (bsc#1051510).
- spi: bcm2835aux: unifying code between polling and interrupt driven code (bsc#1051510).
- st21nfca_connectivity_event_received: null check the allocation (bsc#1051510).
- st_nci_hci_connectivity_event_received: null check the allocation (bsc#1051510).
- staging: comedi: dt3000: Fix rounding up of timer divisor (bsc#1051510).
- staging: comedi: dt3000: Fix signed integer overflow 'divider * base' (bsc#1051510).
- staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work (bsc#1111666).
- supported.conf: Add missing modules (bsc#1066369).
- supported.conf: Remove duplicate drivers/ata/libahci_platform
- supported.conf: Remove duplicate entries
- supported.conf: Sort alphabetically, align comments.
- supported.conf: Sort alphabetically, align comments.
- tcp: Reset bytes_acked and bytes_received when disconnecting (networking-stable-19_07_25).
- test_firmware: fix a memory leak bug (bsc#1051510).
- tipc: change to use register_pernet_device (networking-stable-19_07_02).
- tools: bpftool: close prog FD before exit on showing a single program (bsc#1109837).
- tools: bpftool: fix error message (prog -&gt; object) (bsc#1109837).
- tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete (bsc#1082555).
- tpm: Fix Tpm 1.2 Shutdown sequence to prevent future TPM operations (bsc#1082555).
- tpm: Fix off-by-one when reading binary_bios_measurements (bsc#1082555).
- tpm: Unify the send callback behaviour (bsc#1082555).
- tpm: vtpm_proxy: Suppress error logging when in closed state (bsc#1082555).
- tracing: Fix header include guards in trace event headers (bsc#1144474).
- tracing: store path instead of inode (bsc#1120046, bsc#1146141).
- treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 231 (bsc#1144333).
- tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop (bsc#1051510).
- tty/serial: digicolor: Fix digicolor-usart already registered warning (bsc#1051510).
- tty: max310x: Fix invalid baudrate divisors calculator (bsc#1051510).
- tty: serial: msm_serial: avoid system lockup condition (bsc#1051510).
- tua6100: Avoid build warnings (bsc#1051510).
- tun: mark small packets as owned by the tap sock (bsc#1109837).
- tun: wake up waitqueues after IFF_UP is set (networking-stable-19_07_02).
- udf: Fix incorrect final NOT_ALLOCATED (hole) extent length (bsc#1148617).
- update internal version number for cifs.ko (bsc#1144333).
- usb-storage: Add new JMS567 revision to unusual_devs (bsc#1051510).
- usb: CDC: fix sanity checks in CDC union parser (bsc#1142635).
- usb: Handle USB3 remote wakeup for Lpm enabled devices correctly (bsc#1051510).
- usb: cdc-acm: make sure a refcount is taken early enough (bsc#1142635).
- usb: cdc-wdm: fix race between write and disconnect due to flag abuse (bsc#1051510).
- usb: chipidea: udc: do not do hardware access if gadget has stopped (bsc#1051510).
- usb: core: Fix races in character device registration and deregistraion (bsc#1051510).
- usb: core: hub: Disable hub-initiated U1/U2 (bsc#1051510).
- usb: gadget: composite: Clear 'suspended' on reset/disconnect (bsc#1051510).
- usb: gadget: udc: renesas_usb3: Fix sysfs interface of 'role' (bsc#1142635).
- usb: host: fotg2: restart hcd after port reset (bsc#1051510).
- usb: host: ohci: fix a race condition between shutdown and irq (bsc#1051510).
- usb: host: xhci-rcar: Fix timeout in xhci_suspend() (bsc#1051510).
- usb: host: xhci: rcar: Fix typo in compatible string matching (bsc#1051510).
- usb: iowarrior: fix deadlock on disconnect (bsc#1051510).
- usb: serial: option: Add Motorola modem UARTs (bsc#1051510).
- usb: serial: option: Add support for ZTE MF871A (bsc#1051510).
- usb: serial: option: add D-Link DWM-222 device ID (bsc#1051510).
- usb: serial: option: add the BroadMobi BM818 card (bsc#1051510).
- usb: storage: ums-realtek: Update module parameter description for auto_delink_en (bsc#1051510).
- usb: storage: ums-realtek: Whitelist auto-delink support (bsc#1051510).
- usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests (bsc#1111666).
- usb: typec: tcpm: free log buf memory when remove debug file (bsc#1111666).
- usb: typec: tcpm: remove tcpm dir if no children (bsc#1111666).
- usb: usbfs: fix double-free of usb memory upon submiturb error (bsc#1051510).
- usb: wusbcore: fix unbalanced get/put cluster_id (bsc#1051510).
- usb: yurex: Fix use-after-free in yurex_delete (bsc#1051510).
- vfs: fix page locking deadlocks when deduping files (bsc#1148619).
- virtio/s390: fix race on airq_areas (bsc#1145357).
- vmci: Release resource if the work is already queued (bsc#1051510).
- vrf: make sure skb-&gt;data contains ip header to make routing (networking-stable-19_07_25).
- watchdog: bcm2835_wdt: Fix module autoload (bsc#1051510).
- watchdog: core: fix null pointer dereference when releasing cdev (bsc#1051510).
- watchdog: f71808e_wdt: fix F81866 bit operation (bsc#1051510).
- watchdog: fix compile time error of pretimeout governors (bsc#1051510).
- wimax/i2400m: fix a memory leak bug (bsc#1051510).
- x86/asm: Remove dead __GNUC__ conditionals (bsc#1112178).
- x86/boot: Fix memory leak in default_get_smp_config() (bsc#1114279).
- x86/dma: Get rid of iommu_pass_through (bsc#1136039).
- x86/entry/64/compat: Fix stack switching for XEN PV (bsc#1108382).
- x86/microcode: Fix the microcode load on CPU hotplug for real (bsc#1114279).
- x86/mm: Check for pfn instead of page in vmalloc_sync_one() (bsc#1118689).
- x86/mm: Sync also unmappings in vmalloc_sync_all() (bsc#1118689).
- x86/resctrl: Prevent NULL pointer dereference when local MBM is disabled (bsc#1112178).
- x86/speculation/mds: Apply more accurate check on hypervisor platform (bsc#1114279).
- x86/speculation: Allow guests to use SSBD even if host does not (bsc#1114279).
- x86/unwind: Add hardcoded ORC entry for NULL (bsc#1114279).
- x86/unwind: Handle NULL pointer calls better in frame unwinder (bsc#1114279).
- xdp: unpin xdp umem pages in error path (bsc#1109837).
- xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() (bsc#1065600).
- xfrm: Fix NULL pointer dereference in xfrm_input when skb_dst_force clears the dst_entry (bsc#1143300).
- xfrm: Fix NULL pointer dereference when skb_dst_force clears the dst_entry (bsc#1143300).
- xfrm: Fix bucket count reported to userspace (bsc#1143300).
- xfrm: Fix error return code in xfrm_output_one() (bsc#1143300).
- xfs: do not crash on null attr fork xfs_bmapi_read (bsc#1148035).
- xfs: do not trip over uninitialized buffer on extent read of corrupted inode (bsc#1149053).
- xfs: dump transaction usage details on log reservation overrun (bsc#1145235).
- xfs: eliminate duplicate icreate tx reservation functions (bsc#1145235).
- xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (bsc#1148032).
- xfs: fix semicolon.cocci warnings (bsc#1145235).
- xfs: fix up agi unlinked list reservations (bsc#1145235).
- xfs: include an allocfree res for inobt modifications (bsc#1145235).
- xfs: include inobt buffers in ifree tx log reservation (bsc#1145235).
- xfs: print transaction log reservation on overrun (bsc#1145235).
- xfs: refactor inode chunk alloc/free tx reservation (bsc#1145235).
- xfs: refactor xlog_cil_insert_items() to facilitate transaction dump (bsc#1145235).
- xfs: remove more ondisk directory corruption asserts (bsc#1148034).
- xfs: separate shutdown from ticket reservation print helper (bsc#1145235).
- xfs: truncate transaction does not modify the inobt (bsc#1145235).
- {nl,mac}80211: fix interface combinations on crypto controlled devices (bsc#1111666).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-09-20"/>
	<updated date="2019-09-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1047238">SUSE bug 1047238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050911">SUSE bug 1050911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054914">SUSE bug 1054914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056686">SUSE bug 1056686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060662">SUSE bug 1060662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061843">SUSE bug 1061843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064597">SUSE bug 1064597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064701">SUSE bug 1064701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066369">SUSE bug 1066369</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071009">SUSE bug 1071009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071306">SUSE bug 1071306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078248">SUSE bug 1078248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085536">SUSE bug 1085536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085539">SUSE bug 1085539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086103">SUSE bug 1086103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087092">SUSE bug 1087092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090734">SUSE bug 1090734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091171">SUSE bug 1091171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093205">SUSE bug 1093205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102097">SUSE bug 1102097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104902">SUSE bug 1104902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106061">SUSE bug 1106061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106284">SUSE bug 1106284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106434">SUSE bug 1106434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108382">SUSE bug 1108382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112894">SUSE bug 1112894</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112899">SUSE bug 1112899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112902">SUSE bug 1112902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112903">SUSE bug 1112903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112905">SUSE bug 1112905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112906">SUSE bug 1112906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112907">SUSE bug 1112907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114542">SUSE bug 1114542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118689">SUSE bug 1118689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119086">SUSE bug 1119086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120046">SUSE bug 1120046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120876">SUSE bug 1120876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120902">SUSE bug 1120902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123105">SUSE bug 1123105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123959">SUSE bug 1123959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124370">SUSE bug 1124370</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129424">SUSE bug 1129424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129519">SUSE bug 1129519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129664">SUSE bug 1129664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131107">SUSE bug 1131107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131281">SUSE bug 1131281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131489">SUSE bug 1131489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131565">SUSE bug 1131565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134291">SUSE bug 1134291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134476">SUSE bug 1134476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134881">SUSE bug 1134881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134882">SUSE bug 1134882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135219">SUSE bug 1135219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135897">SUSE bug 1135897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135990">SUSE bug 1135990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136039">SUSE bug 1136039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136261">SUSE bug 1136261</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136346">SUSE bug 1136346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136349">SUSE bug 1136349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136352">SUSE bug 1136352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136496">SUSE bug 1136496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136498">SUSE bug 1136498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136502">SUSE bug 1136502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136682">SUSE bug 1136682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137322">SUSE bug 1137322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137323">SUSE bug 1137323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137884">SUSE bug 1137884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138099">SUSE bug 1138099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138100">SUSE bug 1138100</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138539">SUSE bug 1138539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139020">SUSE bug 1139020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139021">SUSE bug 1139021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139101">SUSE bug 1139101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139500">SUSE bug 1139500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140012">SUSE bug 1140012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140426">SUSE bug 1140426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140487">SUSE bug 1140487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141340">SUSE bug 1141340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141450">SUSE bug 1141450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141543">SUSE bug 1141543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141554">SUSE bug 1141554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142019">SUSE bug 1142019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142076">SUSE bug 1142076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142109">SUSE bug 1142109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142117">SUSE bug 1142117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142118">SUSE bug 1142118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142119">SUSE bug 1142119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142496">SUSE bug 1142496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142541">SUSE bug 1142541</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142701">SUSE bug 1142701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142857">SUSE bug 1142857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143300">SUSE bug 1143300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143331">SUSE bug 1143331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143466">SUSE bug 1143466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143738">SUSE bug 1143738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143765">SUSE bug 1143765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143841">SUSE bug 1143841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143843">SUSE bug 1143843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143962">SUSE bug 1143962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144123">SUSE bug 1144123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144375">SUSE bug 1144375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144474">SUSE bug 1144474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144518">SUSE bug 1144518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144582">SUSE bug 1144582</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144718">SUSE bug 1144718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144813">SUSE bug 1144813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144880">SUSE bug 1144880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144886">SUSE bug 1144886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144912">SUSE bug 1144912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144920">SUSE bug 1144920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144979">SUSE bug 1144979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145010">SUSE bug 1145010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145018">SUSE bug 1145018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145051">SUSE bug 1145051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145059">SUSE bug 1145059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145189">SUSE bug 1145189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145235">SUSE bug 1145235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145256">SUSE bug 1145256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145300">SUSE bug 1145300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145302">SUSE bug 1145302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145357">SUSE bug 1145357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145388">SUSE bug 1145388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145389">SUSE bug 1145389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145390">SUSE bug 1145390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145391">SUSE bug 1145391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145392">SUSE bug 1145392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145393">SUSE bug 1145393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145394">SUSE bug 1145394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145395">SUSE bug 1145395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145396">SUSE bug 1145396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145397">SUSE bug 1145397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145408">SUSE bug 1145408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145409">SUSE bug 1145409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145446">SUSE bug 1145446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145661">SUSE bug 1145661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145678">SUSE bug 1145678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145687">SUSE bug 1145687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145920">SUSE bug 1145920</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145922">SUSE bug 1145922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145934">SUSE bug 1145934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145937">SUSE bug 1145937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145940">SUSE bug 1145940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145941">SUSE bug 1145941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145942">SUSE bug 1145942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145946">SUSE bug 1145946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146074">SUSE bug 1146074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146084">SUSE bug 1146084</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146141">SUSE bug 1146141</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146163">SUSE bug 1146163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146215">SUSE bug 1146215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146285">SUSE bug 1146285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146346">SUSE bug 1146346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146351">SUSE bug 1146351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146352">SUSE bug 1146352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146361">SUSE bug 1146361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146368">SUSE bug 1146368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146376">SUSE bug 1146376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146378">SUSE bug 1146378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146381">SUSE bug 1146381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146391">SUSE bug 1146391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146399">SUSE bug 1146399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146413">SUSE bug 1146413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146425">SUSE bug 1146425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146516">SUSE bug 1146516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146524">SUSE bug 1146524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146526">SUSE bug 1146526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146529">SUSE bug 1146529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146531">SUSE bug 1146531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146543">SUSE bug 1146543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146547">SUSE bug 1146547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146550">SUSE bug 1146550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146575">SUSE bug 1146575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146589">SUSE bug 1146589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146678">SUSE bug 1146678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146938">SUSE bug 1146938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148031">SUSE bug 1148031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148032">SUSE bug 1148032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148033">SUSE bug 1148033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148034">SUSE bug 1148034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148035">SUSE bug 1148035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148093">SUSE bug 1148093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148133">SUSE bug 1148133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148192">SUSE bug 1148192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148196">SUSE bug 1148196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148198">SUSE bug 1148198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148202">SUSE bug 1148202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148219">SUSE bug 1148219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148297">SUSE bug 1148297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148303">SUSE bug 1148303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148308">SUSE bug 1148308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148363">SUSE bug 1148363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148379">SUSE bug 1148379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148394">SUSE bug 1148394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148527">SUSE bug 1148527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148570">SUSE bug 1148570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148574">SUSE bug 1148574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148616">SUSE bug 1148616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148617">SUSE bug 1148617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148619">SUSE bug 1148619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148698">SUSE bug 1148698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148859">SUSE bug 1148859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149053">SUSE bug 1149053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149083">SUSE bug 1149083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149104">SUSE bug 1149104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149105">SUSE bug 1149105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149106">SUSE bug 1149106</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149197">SUSE bug 1149197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149214">SUSE bug 1149214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149224">SUSE bug 1149224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149325">SUSE bug 1149325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149376">SUSE bug 1149376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149413">SUSE bug 1149413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149418">SUSE bug 1149418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149424">SUSE bug 1149424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149522">SUSE bug 1149522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149527">SUSE bug 1149527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149539">SUSE bug 1149539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149552">SUSE bug 1149552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149591">SUSE bug 1149591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149602">SUSE bug 1149602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149612">SUSE bug 1149612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149626">SUSE bug 1149626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149652">SUSE bug 1149652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149713">SUSE bug 1149713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149940">SUSE bug 1149940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149976">SUSE bug 1149976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150025">SUSE bug 1150025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150033">SUSE bug 1150033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150112">SUSE bug 1150112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150562">SUSE bug 1150562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150727">SUSE bug 1150727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150860">SUSE bug 1150860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150861">SUSE bug 1150861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150933">SUSE bug 1150933</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2017-18551/">CVE-2017-18551</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20976/">CVE-2018-20976</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-21008/">CVE-2018-21008</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10207/">CVE-2019-10207</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14814/">CVE-2019-14814</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14815/">CVE-2019-14815</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14816/">CVE-2019-14816</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14835/">CVE-2019-14835</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15030/">CVE-2019-15030</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15031/">CVE-2019-15031</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15090/">CVE-2019-15090</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15098/">CVE-2019-15098</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15099/">CVE-2019-15099</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15117/">CVE-2019-15117</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15118/">CVE-2019-15118</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15211/">CVE-2019-15211</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-15212/">CVE-2019-15212</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15214/">CVE-2019-15214</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15215/">CVE-2019-15215</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15216/">CVE-2019-15216</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15217/">CVE-2019-15217</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15218/">CVE-2019-15218</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15219/">CVE-2019-15219</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15220/">CVE-2019-15220</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15221/">CVE-2019-15221</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15222/">CVE-2019-15222</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15239/">CVE-2019-15239</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15290/">CVE-2019-15290</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15292/">CVE-2019-15292</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15538/">CVE-2019-15538</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15666/">CVE-2019-15666</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15902/">CVE-2019-15902</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15917/">CVE-2019-15917</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15919/">CVE-2019-15919</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-15920/">CVE-2019-15920</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15921/">CVE-2019-15921</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15924/">CVE-2019-15924</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15926/">CVE-2019-15926</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-15927/">CVE-2019-15927</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9456/">CVE-2019-9456</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501557" comment="cluster-md-kmp-default-4.12.14-197.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501558" comment="dlm-kmp-default-4.12.14-197.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501559" comment="gfs2-kmp-default-4.12.14-197.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501560" comment="ocfs2-kmp-default-4.12.14-197.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139104" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1054914" ref_url="https://bugzilla.suse.com/1054914" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1104967" ref_url="https://bugzilla.suse.com/1104967" source="BUGZILLA"/>
		<reference ref_id="1109158" ref_url="https://bugzilla.suse.com/1109158" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1119086" ref_url="https://bugzilla.suse.com/1119086" source="BUGZILLA"/>
		<reference ref_id="1123034" ref_url="https://bugzilla.suse.com/1123034" source="BUGZILLA"/>
		<reference ref_id="1127988" ref_url="https://bugzilla.suse.com/1127988" source="BUGZILLA"/>
		<reference ref_id="1131304" ref_url="https://bugzilla.suse.com/1131304" source="BUGZILLA"/>
		<reference ref_id="1137069" ref_url="https://bugzilla.suse.com/1137069" source="BUGZILLA"/>
		<reference ref_id="1137865" ref_url="https://bugzilla.suse.com/1137865" source="BUGZILLA"/>
		<reference ref_id="1137959" ref_url="https://bugzilla.suse.com/1137959" source="BUGZILLA"/>
		<reference ref_id="1137982" ref_url="https://bugzilla.suse.com/1137982" source="BUGZILLA"/>
		<reference ref_id="1140155" ref_url="https://bugzilla.suse.com/1140155" source="BUGZILLA"/>
		<reference ref_id="1141013" ref_url="https://bugzilla.suse.com/1141013" source="BUGZILLA"/>
		<reference ref_id="1142076" ref_url="https://bugzilla.suse.com/1142076" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1146042" ref_url="https://bugzilla.suse.com/1146042" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146540" ref_url="https://bugzilla.suse.com/1146540" source="BUGZILLA"/>
		<reference ref_id="1146664" ref_url="https://bugzilla.suse.com/1146664" source="BUGZILLA"/>
		<reference ref_id="1148133" ref_url="https://bugzilla.suse.com/1148133" source="BUGZILLA"/>
		<reference ref_id="1148712" ref_url="https://bugzilla.suse.com/1148712" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1149313" ref_url="https://bugzilla.suse.com/1149313" source="BUGZILLA"/>
		<reference ref_id="1149446" ref_url="https://bugzilla.suse.com/1149446" source="BUGZILLA"/>
		<reference ref_id="1149555" ref_url="https://bugzilla.suse.com/1149555" source="BUGZILLA"/>
		<reference ref_id="1149651" ref_url="https://bugzilla.suse.com/1149651" source="BUGZILLA"/>
		<reference ref_id="1150305" ref_url="https://bugzilla.suse.com/1150305" source="BUGZILLA"/>
		<reference ref_id="1150381" ref_url="https://bugzilla.suse.com/1150381" source="BUGZILLA"/>
		<reference ref_id="1150423" ref_url="https://bugzilla.suse.com/1150423" source="BUGZILLA"/>
		<reference ref_id="1150846" ref_url="https://bugzilla.suse.com/1150846" source="BUGZILLA"/>
		<reference ref_id="1151067" ref_url="https://bugzilla.suse.com/1151067" source="BUGZILLA"/>
		<reference ref_id="1151192" ref_url="https://bugzilla.suse.com/1151192" source="BUGZILLA"/>
		<reference ref_id="1151350" ref_url="https://bugzilla.suse.com/1151350" source="BUGZILLA"/>
		<reference ref_id="1151610" ref_url="https://bugzilla.suse.com/1151610" source="BUGZILLA"/>
		<reference ref_id="1151661" ref_url="https://bugzilla.suse.com/1151661" source="BUGZILLA"/>
		<reference ref_id="1151662" ref_url="https://bugzilla.suse.com/1151662" source="BUGZILLA"/>
		<reference ref_id="1151667" ref_url="https://bugzilla.suse.com/1151667" source="BUGZILLA"/>
		<reference ref_id="1151680" ref_url="https://bugzilla.suse.com/1151680" source="BUGZILLA"/>
		<reference ref_id="1151891" ref_url="https://bugzilla.suse.com/1151891" source="BUGZILLA"/>
		<reference ref_id="1151955" ref_url="https://bugzilla.suse.com/1151955" source="BUGZILLA"/>
		<reference ref_id="1152024" ref_url="https://bugzilla.suse.com/1152024" source="BUGZILLA"/>
		<reference ref_id="1152025" ref_url="https://bugzilla.suse.com/1152025" source="BUGZILLA"/>
		<reference ref_id="1152026" ref_url="https://bugzilla.suse.com/1152026" source="BUGZILLA"/>
		<reference ref_id="1152161" ref_url="https://bugzilla.suse.com/1152161" source="BUGZILLA"/>
		<reference ref_id="1152187" ref_url="https://bugzilla.suse.com/1152187" source="BUGZILLA"/>
		<reference ref_id="1152243" ref_url="https://bugzilla.suse.com/1152243" source="BUGZILLA"/>
		<reference ref_id="1152325" ref_url="https://bugzilla.suse.com/1152325" source="BUGZILLA"/>
		<reference ref_id="1152457" ref_url="https://bugzilla.suse.com/1152457" source="BUGZILLA"/>
		<reference ref_id="1152460" ref_url="https://bugzilla.suse.com/1152460" source="BUGZILLA"/>
		<reference ref_id="1152466" ref_url="https://bugzilla.suse.com/1152466" source="BUGZILLA"/>
		<reference ref_id="1152525" ref_url="https://bugzilla.suse.com/1152525" source="BUGZILLA"/>
		<reference ref_id="1152972" ref_url="https://bugzilla.suse.com/1152972" source="BUGZILLA"/>
		<reference ref_id="1152974" ref_url="https://bugzilla.suse.com/1152974" source="BUGZILLA"/>
		<reference ref_id="1152975" ref_url="https://bugzilla.suse.com/1152975" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18595" ref_url="https://www.suse.com/security/cve/CVE-2017-18595/" source="CVE"/>
		<reference ref_id="CVE-2019-14821" ref_url="https://www.suse.com/security/cve/CVE-2019-14821/" source="CVE"/>
		<reference ref_id="CVE-2019-15291" ref_url="https://www.suse.com/security/cve/CVE-2019-15291/" source="CVE"/>
		<reference ref_id="CVE-2019-9506" ref_url="https://www.suse.com/security/cve/CVE-2019-9506/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-October/006028.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2017-18595: A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (bnc#1149555).
- CVE-2019-14821: An out-of-bounds access issue was found in the way Linux kernel's KVM hypervisor implements the coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring-&gt;first' and 'ring-&gt;last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system (bnc#1151350).
- CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver (bnc#1146540).
- CVE-2019-9506: The Bluetooth BR/EDR specification up to and including version 5.1 permitted sufficiently low encryption key length and did not prevent an attacker from influencing the key length negotiation. This allowed practical brute-force attacks (aka 'KNOB') that could decrypt traffic and injected arbitrary ciphertext without the victim noticing (bnc#1137865 bnc#1146042).

The following non-security bugs were fixed:

- ACPI: custom_method: fix memory leaks (bsc#1051510).
- ACPI / PCI: fix acpi_pci_irq_enable() memory leak (bsc#1051510).
- ACPI / property: Fix acpi_graph_get_remote_endpoint() name in kerneldoc (bsc#1051510).
- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (bsc#1151680).
- ALSA: aoa: onyx: always initialize register read value (bsc#1051510).
- ALSA: firewire-tascam: check intermediate state of clock status and retry (bsc#1051510).
- ALSA: firewire-tascam: handle error code when getting current source of clock (bsc#1051510).
- ASoC: es8328: Fix copy-paste error in es8328_right_line_controls (bsc#1051510).
- ASoC: Intel: Baytrail: Fix implicit fallthrough warning (bsc#1051510).
- ASoC: sun4i-i2s: RX and TX counter registers are swapped (bsc#1051510).
- ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls (bsc#1051510).
- ASoC: wm8988: fix typo in wm8988_right_line_controls (bsc#1051510).
- ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet (bsc#1111666).
- ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init (bsc#1051510).
- atm: iphase: Fix Spectre v1 vulnerability (networking-stable-19_08_08).
- bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA (bsc#1051510).
- blk-flush: do not run queue for requests bypassing flush (bsc#1137959).
- blk-flush: use blk_mq_request_bypass_insert() (bsc#1137959).
- blk-mq: do not allocate driver tag upfront for flush rq (bsc#1137959).
- blk-mq: Fix memory leak in blk_mq_init_allocated_queue error handling (bsc#1151610).
- blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue (bsc#1137959).
- blk-mq: introduce blk_mq_request_completed() (bsc#1149446).
- blk-mq: introduce blk_mq_tagset_wait_completed_request() (bsc#1149446).
- blk-mq: kABI fixes for blk-mq.h (bsc#1137959).
- blk-mq: move blk_mq_put_driver_tag*() into blk-mq.h (bsc#1137959).
- blk-mq: punt failed direct issue to dispatch list (bsc#1137959).
- blk-mq: put the driver tag of nxt rq before first one is requeued (bsc#1137959).
- blk-mq-sched: decide how to handle flush rq via RQF_FLUSH_SEQ (bsc#1137959).
- block: fix timeout changes for legacy request drivers (bsc#1149446).
- block: kABI fixes for BLK_EH_DONE renaming (bsc#1142076).
- block: rename BLK_EH_NOT_HANDLED to BLK_EH_DONE (bsc#1142076).
- bnx2x: Disable multi-cos feature (networking-stable-19_08_08).
- bonding/802.3ad: fix link_failure_count tracking (bsc#1137069 bsc#1141013).
- bonding/802.3ad: fix slave link initialization transition states (bsc#1137069 bsc#1141013).
- bonding: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21).
- bonding: set default miimon value for non-arp modes if not set (bsc#1137069 bsc#1141013).
- bonding: speed/duplex update at NETDEV_UP event (bsc#1137069 bsc#1141013).
- btrfs: fix use-after-free when using the tree modification log (bsc#1151891).
- btrfs: qgroup: Fix reserved data space leak if we have multiple reserve calls (bsc#1152975).
- btrfs: qgroup: Fix the wrong target io_tree when freeing reserved data space (bsc#1152974).
- btrfs: relocation: fix use-after-free on dead relocation roots (bsc#1152972).
- ceph: use ceph_evict_inode to cleanup inode's resource (bsc#1148133).
- clk: at91: fix update bit maps on CFG_MOR write (bsc#1051510).
- clk: sunxi-ng: v3s: add missing clock slices for MMC2 module clocks (bsc#1051510).
- clk: sunxi-ng: v3s: add the missing PLL_DDR1 (bsc#1051510).
- Compile nvme.ko as module (bsc#1150846)
- crypto: caam - fix concurrency issue in givencrypt descriptor (bsc#1051510).
- crypto: caam - free resources in case caam_rng registration failed (bsc#1051510).
- crypto: caam/qi - fix error handling in ERN handler (bsc#1111666).
- crypto: cavium/zip - Add missing single_release() (bsc#1051510).
- crypto: ccp - Reduce maximum stack usage (bsc#1051510).
- crypto: qat - Silence smp_processor_id() warning (bsc#1051510).
- crypto: skcipher - Unmap pages after an external error (bsc#1051510).
- dma-buf/sw_sync: Synchronize signal vs syncpt free (bsc#1111666).
- dmaengine: dw: platform: Switch to acpi_dma_controller_register() (bsc#1051510).
- dmaengine: iop-adma.c: fix printk format warning (bsc#1051510).
- drivers: thermal: int340x_thermal: Fix sysfs race condition (bsc#1051510).
- drm/i915: Fix various tracepoints for gen2 (bsc#1113722)
- drm/imx: Drop unused imx-ipuv3-crtc.o build (bsc#1113722)
- EDAC/amd64: Decode syndrome before translating address (bsc#1114279).
- eeprom: at24: make spd world-readable again (git-fixes).
- ext4: fix warning inside ext4_convert_unwritten_extents_endio (bsc#1152025).
- ext4: set error return correctly when ext4_htree_store_dirent fails (bsc#1152024).
- Fix kabi for: NFSv4: Fix OPEN / CLOSE race (git-fixes).
- floppy: fix usercopy direction (bsc#1111666).
- gpio: fix line flag validation in lineevent_create (bsc#1051510).
- gpio: fix line flag validation in linehandle_create (bsc#1051510).
- gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist (bsc#1051510).
- gpiolib: only check line handle flags once (bsc#1051510).
- gpio: Move gpiochip_lock/unlock_as_irq to gpio/driver.h (bsc#1051510).
- hwmon: (lm75) Fix write operations for negative temperatures (bsc#1051510).
- hwmon: (shtc1) fix shtc1 and shtw1 id mask (bsc#1051510).
- i2c: designware: Synchronize IRQs when unregistering slave client (bsc#1111666).
- i40e: Add support for X710 device (bsc#1151067).
- ife: error out when nla attributes are empty (networking-stable-19_08_08).
- iio: dac: ad5380: fix incorrect assignment to val (bsc#1051510).
- Input: elan_i2c - remove Lenovo Legion Y7000 PnpID (bsc#1051510).
- iommu/dma: Fix for dereferencing before null checking (bsc#1151667).
- iommu: Do not use sme_active() in generic code (bsc#1151661).
- iommu/iova: Avoid false sharing on fq_timer_on (bsc#1151662).
- ip6_tunnel: fix possible use-after-free on xmit (networking-stable-19_08_08).
- ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set (networking-stable-19_08_28).
- isdn/capi: check message length in capi_write() (bsc#1051510).
- kABI: media: em28xx: fix handler for vidioc_s_input() (bsc#1051510). fixes kABI
- kABI: media: em28xx: stop rewriting device's struct (bsc#1051510). fixes kABI
- KABI protect struct vmem_altmap (bsc#1150305).
- KVM: PPC: Book3S: Fix incorrect guest-to-user-translation error handling (bsc#1061840).
- KVM: PPC: Book3S HV: Check for MMU ready on piggybacked virtual cores (bsc#1061840).
- KVM: PPC: Book3S HV: Do not lose pending doorbell request on migration on P9 (bsc#1061840).
- KVM: PPC: Book3S HV: Do not push XIVE context when not using XIVE device (bsc#1061840).
- KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest (bsc#1061840).
- KVM: PPC: Book3S HV: Fix race in re-enabling XIVE escalation interrupts (bsc#1061840).
- KVM: PPC: Book3S HV: Handle virtual mode in XIVE VCPU push code (bsc#1061840).
- KVM: PPC: Book3S HV: XIVE: Free escalation interrupts before disabling the VP (bsc#1061840).
- leds: leds-lp5562 allow firmware files up to the maximum length (bsc#1051510).
- leds: trigger: gpio: GPIO 0 is valid (bsc#1051510).
- libertas_tf: Use correct channel range in lbtf_geo_init (bsc#1051510).
- libiscsi: do not try to bypass SCSI EH (bsc#1142076).
- libnvdimm/altmap: Track namespace boundaries in altmap (bsc#1150305).
- libnvdimm: prevent nvdimm from requesting key when security is disabled (bsc#1137982).
- lightnvm: remove dependencies on BLK_DEV_NVME and PCI (bsc#1150846).
- livepatch: Nullify obj-&gt;mod in klp_module_coming()'s error path (bsc#1071995).
- mac80211: minstrel_ht: fix per-group max throughput rate initialization (bsc#1051510).
- md: do not report active array_state until after revalidate_disk() completes (git-fixes).
- md: only call set_in_sync() when it is expected to succeed (git-fixes).
- md/raid6: Set R5_ReadError when there is read failure on parity disk (git-fixes).
- media: atmel: atmel-isi: fix timeout value for stop streaming (bsc#1051510).
- media: dib0700: fix link error for dibx000_i2c_set_speed (bsc#1051510).
- media: em28xx: fix handler for vidioc_s_input() (bsc#1051510).
- media: em28xx: stop rewriting device's struct (bsc#1051510).
- media: fdp1: Reduce FCP not found message level to debug (bsc#1051510).
- media: marvell-ccic: do not generate EOF on parallel bus (bsc#1051510).
- media: mc-device.c: do not memset __user pointer contents (bsc#1051510).
- media: ov6650: Fix sensor possibly not detected on probe (bsc#1051510).
- media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper (bsc#1051510).
- media: replace strcpy() by strscpy() (bsc#1051510).
- media: Revert '[media] marvell-ccic: reset ccic phy when stop streaming for stability' (bsc#1051510).
- media: technisat-usb2: break out of loop at end of buffer (bsc#1051510).
- media: tm6000: double free if usb disconnect while streaming (bsc#1051510).
- media: vb2: Fix videobuf2 to map correct area (bsc#1051510).
- mic: avoid statically declaring a 'struct device' (bsc#1051510).
- mmc: sdhci-msm: fix mutex while in spinlock (bsc#1142635).
- mmc: sdhci-of-arasan: Do now show error message in case of deffered probe (bsc#1119086).
- mtd: spi-nor: Fix Cadence QSPI RCU Schedule Stall (bsc#1051510).
- mvpp2: refactor MTU change code (networking-stable-19_08_08).
- net: bridge: delete local fdb on device init failure (networking-stable-19_08_08).
- net: bridge: mcast: do not delete permanent entries when fast leave is enabled (networking-stable-19_08_08).
- net: fix ifindex collision during namespace removal (networking-stable-19_08_08).
- net/ibmvnic: prevent more than one thread from running in reset (bsc#1152457 ltc#174432).
- net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run (bsc#1152457 ltc#174432).
- net/mlx5e: Only support tx/rx pause setting for port owner (networking-stable-19_08_21).
- net/mlx5e: Prevent encap flow counter update async to user query (networking-stable-19_08_08).
- net/mlx5e: Use flow keys dissector to parse packets for ARFS (networking-stable-19_08_21).
- net/mlx5: Use reversed order when unregister devices (networking-stable-19_08_08).
- net/packet: fix race in tpacket_snd() (networking-stable-19_08_21).
- net: sched: Fix a possible null-pointer dereference in dequeue_func() (networking-stable-19_08_08).
- net/smc: make sure EPOLLOUT is raised (networking-stable-19_08_28).
- NFS4: Fix v4.0 client state corruption when mount (git-fixes).
- nfsd: degraded slot-count more gracefully as allocation nears exhaustion (bsc#1150381).
- nfsd: Do not release the callback slot unless it was actually held (git-fixes).
- nfsd: Fix overflow causing non-working mounts on 1 TB machines (bsc#1150381).
- nfsd: fix performance-limiting session calculation (bsc#1150381).
- nfsd: give out fewer session slots as limit approaches (bsc#1150381).
- nfsd: handle drc over-allocation gracefully (bsc#1150381).
- nfsd: increase DRC cache limit (bsc#1150381).
- NFS: Do not interrupt file writeout due to fatal errors (git-fixes).
- NFS: Do not open code clearing of delegation state (git-fixes).
- NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0 (git-fixes).
- NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts (git-fixes).
- NFS: Forbid setting AF_INET6 to 'struct sockaddr_in'-&gt;sin_family (git-fixes).
- NFS: Refactor nfs_lookup_revalidate() (git-fixes).
- NFS: Remove redundant semicolon (git-fixes).
- NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter (git-fixes).
- NFSv4.1: Fix open stateid recovery (git-fixes).
- NFSv4.1: Only reap expired delegations (git-fixes).
- NFSv4: Check the return value of update_open_stateid() (git-fixes).
- NFSv4: Fix an Oops in nfs4_do_setattr (git-fixes).
- NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim() (git-fixes).
- NFSv4: Fix delegation state recovery (git-fixes).
- NFSv4: Fix lookup revalidate of regular files (git-fixes).
- NFSv4: Fix OPEN / CLOSE race (git-fixes).
- NFSv4: Handle the special Linux file open access mode (git-fixes).
- NFSv4: Only pass the delegation to setattr if we're sending a truncate (git-fixes).
- NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend() (git-fixes).
- nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds (bsc#1051510).
- null_blk: complete requests from -&gt;timeout (bsc#1149446).
- null_blk: wire up timeouts (bsc#1149446).
- nvme: do not abort completed request in nvme_cancel_request (bsc#1149446).
- nvme: fix multipath crash when ANA is deactivated (bsc#1149446).
- nvme: fix multipath crash when ANA is deactivated (bsc#1149446).
- nvmem: Use the same permissions for eeprom as for nvmem (git-fixes).
- nvme-rdma: Allow DELETING state change failure in (bsc#1104967,).
- nvme-rdma: centralize admin/io queue teardown sequence (bsc#1142076).
- nvme-rdma: centralize controller setup sequence (bsc#1142076).
- nvme-rdma: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-rdma: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-rdma: fix timeout handler (bsc#1149446).
- nvme-rdma: fix timeout handler (bsc#1149446).
- nvme-rdma: remove redundant reference between ib_device and tagset (bsc#1149446).
- nvme-rdma: stop admin queue before freeing it (bsc#1140155).
- nvme-rdma: support up to 4 segments of inline data (bsc#1142076).
- nvme-rdma: unquiesce queues when deleting the controller (bsc#1142076).
- nvme-rdma: use dynamic dma mapping per command (bsc#1149446).
- nvme: remove ns sibling before clearing path (bsc#1140155).
- nvme: return BLK_EH_DONE from -&gt;timeout (bsc#1142076).
- nvme-tcp: fix a NULL deref when an admin connect times out (bsc#1149446).
- nvme-tcp: fix timeout handler (bsc#1149446).
- nvme: wait until all completed request's complete fn is called (bsc#1149446).
- PCI: Add ACS quirk for Amazon Annapurna Labs root ports (bsc#1152187,bsc#1152525).
- PCI: Add Amazon's Annapurna Labs vendor ID (bsc#1152187,bsc#1152525).
- PCI: Add quirk to disable MSI-X support for Amazon's Annapurna Labs Root Port (bsc#1152187,bsc#1152525).
- PCI: hv: Detect and fix Hyper-V PCI domain number collision (bsc#1150423).
- PCI/VPD: Prevent VPD access for Amazon's Annapurna Labs Root Port (bsc#1152187,bsc#1152525).
- phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current (bsc#1051510).
- platform/x86: pmc_atom: Add Siemens SIMATIC IPC227E to critclk_systems DMI table (bsc#1051510).
- PM: sleep: Fix possible overflow in pm_system_cancel_wakeup() (bsc#1051510).
- pNFS fallback to MDS if no deviceid found (git-fixes).
- pNFS/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error (git-fixes).
- pNFS/flexfiles: Turn off soft RPC calls (git-fixes).
- powerpc/64: Make sys_switch_endian() traceable (bsc#1065729).
- powerpc/64s/radix: Fix MADV_[FREE|DONTNEED] TLB flush miss problem with THP (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Fix memory hotplug section page table creation (bsc#1065729).
- powerpc/64s/radix: Fix memory hot-unplug page table split (bsc#1065729).
- powerpc/64s/radix: Implement _tlbie(l)_va_range flush functions (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Improve preempt handling in TLB code (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Improve TLB flushing for page table freeing (bsc#1152161 ltc#181664).
- powerpc/64s/radix: Introduce local single page ceiling for TLB range flush (bsc#1055117 bsc#1152161 ltc#181664).
- powerpc/64s/radix: Optimize flush_tlb_range (bsc#1152161 ltc#181664).
- powerpc/book3s64/mm: Do not do tlbie fixup for some hardware revisions (bsc#1152161 ltc#181664).
- powerpc/book3s64/radix: Rename CPU_FTR_P9_TLBIE_BUG feature flag (bsc#1152161 ltc#181664).
- powerpc: bpf: Fix generation of load/store DW instructions (bsc#1065729).
- powerpc/bpf: use unsigned division instruction for 64-bit operations (bsc#1065729).
- powerpc: Drop page_is_ram() and walk_system_ram_range() (bsc#1065729).
- powerpc/irq: Do not WARN continuously in arch_local_irq_restore() (bsc#1065729).
- powerpc/irq: drop arch_early_irq_init() (bsc#1065729).
- powerpc/mm: Fixup tlbie vs mtpidr/mtlpidr ordering issue on POWER9 (bsc#1152161 ltc#181664).
- powerpc/mm/radix: Drop unneeded NULL check (bsc#1152161 ltc#181664).
- powerpc/mm/radix: implement LPID based TLB flushes to be used by KVM (bsc#1152161 ltc#181664).
- powerpc/mm: Simplify page_is_ram by using memblock_is_memory (bsc#1065729).
- powerpc/mm: Use memblock API for PPC32 page_is_ram (bsc#1065729).
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling (bsc#1065729).
- powerpc/papr_scm: Fix an off-by-one check in papr_scm_meta_{get, set} (bsc#1152243 ltc#181472).
- powerpc/powernv: Fix compile without CONFIG_TRACEPOINTS (bsc#1065729).
- powerpc/powernv/ioda2: Allocate TCE table levels on demand for default DMA window (bsc#1061840).
- powerpc/powernv/ioda: Fix race in TCE level allocation (bsc#1061840).
- powerpc/powernv: move OPAL call wrapper tracing and interrupt handling to C (bsc#1065729).
- powerpc/powernv/npu: Remove obsolete comment about TCE_KILL_INVAL_ALL (bsc#1065729).
- powerpc/pseries: Call H_BLOCK_REMOVE when supported (bsc#1109158).
- powerpc/pseries: Fix cpu_hotplug_lock acquisition in resize_hpt() (bsc#1065729).
- powerpc/pseries/memory-hotplug: Fix return value type of find_aa_index (bsc#1065729).
- powerpc/pseries: Read TLB Block Invalidate Characteristics (bsc#1109158).
- powerpc/ptrace: Simplify vr_get/set() to avoid GCC warning (bsc#1148868).
- powerpc/xive: Fix bogus error code returned by OPAL (bsc#1065729).
- powerpc/xive: Implement get_irqchip_state method for XIVE to fix shutdown race (bsc#1065729).
- powerpc/xmon: Fix opcode being uninitialized in print_insn_powerpc (bsc#1065729).
- power: reset: gpio-restart: Fix typo when gpio reset is not found (bsc#1051510).
- power: supply: Init device wakeup after device_add() (bsc#1051510).
- ppp: Fix memory leak in ppp_write (git-fixes).
- printk: Do not lose last line in kmsg buffer dump (bsc#1152460).
- printk: fix printk_time race (bsc#1152466).
- printk/panic: Avoid deadlock in printk() after stopping CPUs by NMI (bsc#1148712).
- qla2xxx: kABI fixes for v10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988).
- qla2xxx: remove SGI SN2 support (bsc#1123034 bsc#1131304 bsc#1127988).
- quota: fix wrong condition in is_quota_modification() (bsc#1152026).
- r8152: Set memory to all 0xFFs on failed reg reads (bsc#1051510).
- regulator: lm363x: Fix off-by-one n_voltages for lm3632 ldo_vpos/ldo_vneg (bsc#1051510).
- Revert 'mwifiex: fix system hang problem after resume' (bsc#1051510).
- rtlwifi: Fix file release memory leak (bsc#1111666).
- scsi: qla2xxx: Add 28xx flash primary/secondary status/image mechanism (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add Device ID for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add First Burst support for FC-NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add fw_attr and port_no SysFS node (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add new FW dump template entry types (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add pci function reset support (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add protection mask module parameters (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add Serdes support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add support for multiple fwdump templates/segments (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Add support for setting port speed (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Allow NVMe IO to resume with short cable pull (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: allow session delete to finish before create (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Always check the qla2x00_wait_for_hba_online() return value (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid PCI IRQ affinity mapping when multiqueue is not supported (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: avoid printf format warning (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that Coverity complains about dereferencing a NULL rport pointer (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Avoid that qla2x00_mem_free() crashes if called twice (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change data_dsd into an array (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change default ZIO threshold (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change the return type of qla24xx_read_flash_data() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Change the return type of qla2x00_update_ms_fdmi_iocb() into void (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check for FW started flag before aborting (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: check for kstrtol() failure (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check secondary image if reading the primary image fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check the PCI info string output buffer size (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Check the size of firmware data structures at compile time (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanup fcport memory to prevent leak (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanup redundant qla2x00_abort_all_cmds during unload (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Cleanups for NVRAM/Flash read/write path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: cleanup trace buffer initialization (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a command is released that is owned by the firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a mailbox command times out (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if a soft reset fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if parsing the version string fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if sp-&gt;done() is not called from the completion path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain if waiting for pending commands times out (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Complain loudly about reference count underflow (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correct error handling during initialization failures (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correction and improvement to fwdt processing (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Correctly report max/min supported speeds (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: deadlock by configfs_depend_item (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare local symbols static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla24xx_build_scsi_crc_2_iocbs() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla2x00_find_new_loop_id() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument const (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Do not corrupt vha-&gt;plogi_ack_list (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Downgrade driver to 10.01.00.19-k There are upstream bug reports against 10.01.00.19-k which haven't been resolved. Also the newer version failed to get a proper review. For time being it's better to got with the older version and do not introduce new bugs.
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix abort timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a NULL pointer dereference (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a recently introduced kernel warning (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix a small typo in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix code indentation for qla27xx_fwdt_entry (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix comment alignment in qla_bsg.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix comment in MODULE_PARM_DESC in qla2xxx (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix different size DMA Alloc/Unmap (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix DMA error when the DIF sg buffer crosses 4GB boundary (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix DMA unmap leak (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix driver reload for ISP82xx (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix fcport null pointer access (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix formatting of pointer types (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix fw dump corruption (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix fw options handle eh_bus_reset() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hang in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hardirq-unsafe locking (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix hardlockup in abort command during driver remove (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix message indicating vectors used by driver (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix N2N link reset (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix Nport ID display value (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix NVMe port discovery after a short device port loss (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix possible fcport null-pointer dereferences (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix premature timer expiration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix qla24xx_process_bidir_cmd() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix read offset in qla24xx_load_risc_flash() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix routine qla27xx_dump_{mpi|ram}() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix session cleanup hang (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix session lookup in qlt_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix spelling mistake 'alredy' -&gt; 'already' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: fix spelling mistake 'initializatin' -&gt; 'initialization' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix SRB allocation flag to avoid sleeping in IRQ context (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stale session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix stuck login session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix unload when NVMe devices are configured (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: flush IO on chip reset or sess delete (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Further limit FLASH region write access from SysFS (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Improve Linux kernel coding style conformance (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Include the &lt;asm/unaligned.h&gt; header file from qla_dsd.h (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Increase the max_sgl_segments to 1024 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Increase the size of the mailbox arrays from 4 to 8 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Insert spaces where required (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types for FC src/dst IDs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the dsd32 and dsd64 data structures (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Leave a blank line after declarations (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Let the compiler check the type of the SCSI command context pointer (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Log the status code if a firmware command fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs use little endian (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_mem_free() easier to verify (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qla2x00_process_response_queue() easier to read (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Make sure that aborted commands are freed (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Modify NVMe include directives (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move debug messages before sending srb preventing panic (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move marker request behind QPair (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_clear_loop_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_is_reserved_id() from qla_inline.h into qla_init.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_set_fcport_state() from a .h into a .c file (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move qla2x00_set_reserved_loop_ids() definition (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move the &lt;linux/io-64-nonatomic-lo-hi.h&gt; include directive (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Move the port_state_str definition from a .h to a .c file (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: no need to check return value of debugfs_create functions (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: on session delete, return nvme cmd (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Pass little-endian values to the firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent multiple ADISC commands per session (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Prevent SysFS access when chip is down (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha-&gt;eft (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the number of casts in GID list code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the number of forward declarations (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reject EH_{abort|device_reset|target_request} (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a comment that refers to the SCSI host lock (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove an include directive from qla_mr.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a set-but-not-used variable (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a superfluous forward declaration (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove a superfluous pointer check (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove dead code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: remove double assignment in qla2x00_update_fcport (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove FW default template (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove qla_tgt_cmd.data_work and qla_tgt_cmd.data_work_free (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove qla_tgt_cmd.released (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: remove redundant null check on pointer sess (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove set but not used variable 'ptr_dma' (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove superfluous sts_entry_* casts (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous casts (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous if-tests (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove two superfluous tests (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unnecessary locking from the target code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unnecessary null check (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove useless set memory to zero use memset() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Replace vmalloc + memset with vzalloc (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Report invalid mailbox status codes (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Report the firmware status code if a mailbox command fails (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Restore FAWWPN of Physical Port only for loop down (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Retry fabric Scan on IOCB queue full (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Secure flash update support for ISP28XX (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set remote port devloss timeout to 0 (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the qpair in SRB to NULL when SRB is released (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the responder mode if appropriate for ELS pass-through IOCBs (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Set the SCSI command result before calling the command done (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Silence fwdump template message (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Silence Successful ELS IOCB message (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplification of register address used in qla_tmpl.c (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify a debug statement (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify conditional check again (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qlt_lport_dump() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Simplify qlt_send_term_imm_notif() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Skip FW dump on LOOP initialization error (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer overflow (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Suppress multiple Coverity complaint about out-of-bounds accesses (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: target: Fix offline port handling and host reset handling (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Uninline qla2x00_init_timer() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Unregister resources in the opposite order of the registration order (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.00.00.13-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.00.00.14-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.15-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.16-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.18-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.19-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Update flash read/write routine (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use ARRAY_SIZE() in the definition of QLA_LAST_SPEED (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use common update-firmware-options routine for ISP27xx+ (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use complete switch scan for RSCN events (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use Correct index for Q-Pair array (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use get/put_unaligned where appropriate (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use __le64 instead of uint32_t for sending DMA addresses to firmware (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy() and strncpy() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use tabs instead of spaces for indentation (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Use tabs to indent code (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: qla2xxx: Verify locking assumptions at runtime (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: scsi_dh_rdac: zero cdb in send_mode_select() (bsc#1149313).
- scsi: scsi_transport_fc: nvme: display FC-NVMe port roles (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi: tcm_qla2xxx: Minimize #include directives (bsc#1123034 bsc#1131304 bsc#1127988).
- scsi_transport_fc: complete requests from -&gt;timeout (bsc#1142076).
- sctp: fix the transport error_count check (networking-stable-19_08_21).
- secure boot lockdown: Fix-up backport of /dev/mem access restriction The upstream-submitted patch set has evolved over time, align our patches (contents and description) to reflect the current status as far as /dev/mem access is concerned.
- sky2: Disable MSI on yet another ASUS boards (P6Xxxx) (bsc#1051510).
- slip: make slhc_free() silently accept an error pointer (bsc#1051510).
- slip: sl_alloc(): remove unused parameter 'dev_t line' (bsc#1051510).
- spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours (bsc#1111666).
- SUNRPC fix regression in umount of a secure mount (git-fixes).
- SUNRPC: Handle connection breakages correctly in call_status() (git-fixes).
- SUNRPC/nfs: Fix return value for nfs4_callback_compound() (git-fixes).
- supported.conf: Add vfio_ccw (bsc#1151192 jsc#SLE-6138).
- supported.conf: Mark vfio_ccw supported by SUSE, because bugs can be routed to IBM via SUSE support (jsc#SLE-6138, bsc#1151192).
- tcp: make sure EPOLLOUT wont be missed (networking-stable-19_08_28).
- team: Add vlan tx offload to hw_enc_features (bsc#1051510).
- team: Add vlan tx offload to hw_enc_features (networking-stable-19_08_21).
- tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts (bsc#1082555).
- tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs (bsc#1111666).
- tun: fix use-after-free when register netdev failed (bsc#1111666).
- Update s390 config files (bsc#1151192).  - VFIO_CCW=m  - S390_CCW_IOMMU=y
- USB: usbcore: Fix slab-out-of-bounds bug during device reset (bsc#1051510).
- vhost/test: fix build for vhost test (bsc#1111666).
- video: ssd1307fb: Start page range at page_offset (bsc#1113722)
- wcn36xx: use dynamic allocation for large variables (bsc#1111666).
- x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h (bsc#1114279).
- x86/fpu: Add FPU state copying quirk to handle XRSTOR failure on Intel Skylake CPUs (bsc#1151955).
- x86/tls: Fix possible spectre-v1 in do_get_thread_area() (bsc#1114279).
- xen/netback: Reset nr_frags before freeing skb (networking-stable-19_08_21).
- xen-netfront: do not assume sk_buff_head list is empty in error handling (bsc#1065600).
- xen-netfront: do not use ~0U as error return value for xennet_fill_frags() (bsc#1065600).
- xen/xenbus: fix self-deadlock after killing user process (bsc#1065600).
- xsk: avoid store-tearing when assigning queues (bsc#1111666).
- xsk: avoid store-tearing when assigning umem (bsc#1111666).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-18"/>
	<updated date="2019-10-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054914">SUSE bug 1054914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104967">SUSE bug 1104967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109158">SUSE bug 1109158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119086">SUSE bug 1119086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123034">SUSE bug 1123034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127988">SUSE bug 1127988</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131304">SUSE bug 1131304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137069">SUSE bug 1137069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137865">SUSE bug 1137865</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137959">SUSE bug 1137959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137982">SUSE bug 1137982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140155">SUSE bug 1140155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141013">SUSE bug 1141013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142076">SUSE bug 1142076</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146042">SUSE bug 1146042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146540">SUSE bug 1146540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146664">SUSE bug 1146664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148133">SUSE bug 1148133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148712">SUSE bug 1148712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149313">SUSE bug 1149313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149446">SUSE bug 1149446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149555">SUSE bug 1149555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149651">SUSE bug 1149651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150305">SUSE bug 1150305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150381">SUSE bug 1150381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150423">SUSE bug 1150423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150846">SUSE bug 1150846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151067">SUSE bug 1151067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151192">SUSE bug 1151192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151350">SUSE bug 1151350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151610">SUSE bug 1151610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151661">SUSE bug 1151661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151662">SUSE bug 1151662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151667">SUSE bug 1151667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151680">SUSE bug 1151680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151891">SUSE bug 1151891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151955">SUSE bug 1151955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152024">SUSE bug 1152024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152025">SUSE bug 1152025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152026">SUSE bug 1152026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152161">SUSE bug 1152161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152187">SUSE bug 1152187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152243">SUSE bug 1152243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152325">SUSE bug 1152325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152457">SUSE bug 1152457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152460">SUSE bug 1152460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152466">SUSE bug 1152466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152525">SUSE bug 1152525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152972">SUSE bug 1152972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152974">SUSE bug 1152974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152975">SUSE bug 1152975</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-18595/">CVE-2017-18595</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-14821/">CVE-2019-14821</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15291/">CVE-2019-15291</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-9506/">CVE-2019-9506</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501561" comment="cluster-md-kmp-default-4.12.14-197.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501562" comment="dlm-kmp-default-4.12.14-197.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501563" comment="gfs2-kmp-default-4.12.14-197.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501564" comment="ocfs2-kmp-default-4.12.14-197.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139105" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1144902" ref_url="https://bugzilla.suse.com/1144902" source="BUGZILLA"/>
		<reference ref_id="1148539" ref_url="https://bugzilla.suse.com/1148539" source="BUGZILLA"/>
		<reference ref_id="1152143" ref_url="https://bugzilla.suse.com/1152143" source="BUGZILLA"/>
		<reference ref_id="1154289" ref_url="https://bugzilla.suse.com/1154289" source="BUGZILLA"/>
		<reference ref_id="1154598" ref_url="https://bugzilla.suse.com/1154598" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10218" ref_url="https://www.suse.com/security/cve/CVE-2019-10218/" source="CVE"/>
		<reference ref_id="CVE-2019-14833" ref_url="https://www.suse.com/security/cve/CVE-2019-14833/" source="CVE"/>
		<reference ref_id="CVE-2019-14847" ref_url="https://www.suse.com/security/cve/CVE-2019-14847/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2866-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192866-1.html" source="SUSE-SU"/>
		<description>
This update for provides the following fixes:

Following security issues were fixed:

- CVE-2019-14847: User with 'get changes' permission could have crashed AD DC LDAP server via dirsync (bsc#1154598).
- CVE-2019-10218: Client code could have returned filenames containing path separators (bsc#1144902).
- CVE-2019-14833: Accent with 'check script password' where Samba AD DC check password script did not receive the full password (bsc#1154289).

Also following non-security issues were fixed:

- Fix auth problems when printing via smbspool backend with kerberos. (bsc#1148539)
- Fix broken username/password authentication with CUPS and smbspool. (bsc#1152143)
		</description>
<advisory from="security@suse.de">
	<issued date="2019-10-30"/>
	<updated date="2019-10-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1144902">SUSE bug 1144902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148539">SUSE bug 1148539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152143">SUSE bug 1152143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154289">SUSE bug 1154289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154598">SUSE bug 1154598</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-10218/">CVE-2019-10218</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-14833/">CVE-2019-14833</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14847/">CVE-2019-14847</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501565" comment="ctdb-4.9.5+git.210.ab0549acb05-3.14.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139106" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1046299" ref_url="https://bugzilla.suse.com/1046299" source="BUGZILLA"/>
		<reference ref_id="1046303" ref_url="https://bugzilla.suse.com/1046303" source="BUGZILLA"/>
		<reference ref_id="1046305" ref_url="https://bugzilla.suse.com/1046305" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1073513" ref_url="https://bugzilla.suse.com/1073513" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1086323" ref_url="https://bugzilla.suse.com/1086323" source="BUGZILLA"/>
		<reference ref_id="1087092" ref_url="https://bugzilla.suse.com/1087092" source="BUGZILLA"/>
		<reference ref_id="1089644" ref_url="https://bugzilla.suse.com/1089644" source="BUGZILLA"/>
		<reference ref_id="1090631" ref_url="https://bugzilla.suse.com/1090631" source="BUGZILLA"/>
		<reference ref_id="1093205" ref_url="https://bugzilla.suse.com/1093205" source="BUGZILLA"/>
		<reference ref_id="1096254" ref_url="https://bugzilla.suse.com/1096254" source="BUGZILLA"/>
		<reference ref_id="1097583" ref_url="https://bugzilla.suse.com/1097583" source="BUGZILLA"/>
		<reference ref_id="1097584" ref_url="https://bugzilla.suse.com/1097584" source="BUGZILLA"/>
		<reference ref_id="1097585" ref_url="https://bugzilla.suse.com/1097585" source="BUGZILLA"/>
		<reference ref_id="1097586" ref_url="https://bugzilla.suse.com/1097586" source="BUGZILLA"/>
		<reference ref_id="1097587" ref_url="https://bugzilla.suse.com/1097587" source="BUGZILLA"/>
		<reference ref_id="1097588" ref_url="https://bugzilla.suse.com/1097588" source="BUGZILLA"/>
		<reference ref_id="1098291" ref_url="https://bugzilla.suse.com/1098291" source="BUGZILLA"/>
		<reference ref_id="1101674" ref_url="https://bugzilla.suse.com/1101674" source="BUGZILLA"/>
		<reference ref_id="1109158" ref_url="https://bugzilla.suse.com/1109158" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1117665" ref_url="https://bugzilla.suse.com/1117665" source="BUGZILLA"/>
		<reference ref_id="1119461" ref_url="https://bugzilla.suse.com/1119461" source="BUGZILLA"/>
		<reference ref_id="1119465" ref_url="https://bugzilla.suse.com/1119465" source="BUGZILLA"/>
		<reference ref_id="1123034" ref_url="https://bugzilla.suse.com/1123034" source="BUGZILLA"/>
		<reference ref_id="1123080" ref_url="https://bugzilla.suse.com/1123080" source="BUGZILLA"/>
		<reference ref_id="1133140" ref_url="https://bugzilla.suse.com/1133140" source="BUGZILLA"/>
		<reference ref_id="1134303" ref_url="https://bugzilla.suse.com/1134303" source="BUGZILLA"/>
		<reference ref_id="1135642" ref_url="https://bugzilla.suse.com/1135642" source="BUGZILLA"/>
		<reference ref_id="1135854" ref_url="https://bugzilla.suse.com/1135854" source="BUGZILLA"/>
		<reference ref_id="1135873" ref_url="https://bugzilla.suse.com/1135873" source="BUGZILLA"/>
		<reference ref_id="1135967" ref_url="https://bugzilla.suse.com/1135967" source="BUGZILLA"/>
		<reference ref_id="1137040" ref_url="https://bugzilla.suse.com/1137040" source="BUGZILLA"/>
		<reference ref_id="1137799" ref_url="https://bugzilla.suse.com/1137799" source="BUGZILLA"/>
		<reference ref_id="1137861" ref_url="https://bugzilla.suse.com/1137861" source="BUGZILLA"/>
		<reference ref_id="1138190" ref_url="https://bugzilla.suse.com/1138190" source="BUGZILLA"/>
		<reference ref_id="1139073" ref_url="https://bugzilla.suse.com/1139073" source="BUGZILLA"/>
		<reference ref_id="1140090" ref_url="https://bugzilla.suse.com/1140090" source="BUGZILLA"/>
		<reference ref_id="1140729" ref_url="https://bugzilla.suse.com/1140729" source="BUGZILLA"/>
		<reference ref_id="1140845" ref_url="https://bugzilla.suse.com/1140845" source="BUGZILLA"/>
		<reference ref_id="1140883" ref_url="https://bugzilla.suse.com/1140883" source="BUGZILLA"/>
		<reference ref_id="1141600" ref_url="https://bugzilla.suse.com/1141600" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142667" ref_url="https://bugzilla.suse.com/1142667" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1144338" ref_url="https://bugzilla.suse.com/1144338" source="BUGZILLA"/>
		<reference ref_id="1144375" ref_url="https://bugzilla.suse.com/1144375" source="BUGZILLA"/>
		<reference ref_id="1144449" ref_url="https://bugzilla.suse.com/1144449" source="BUGZILLA"/>
		<reference ref_id="1144903" ref_url="https://bugzilla.suse.com/1144903" source="BUGZILLA"/>
		<reference ref_id="1145099" ref_url="https://bugzilla.suse.com/1145099" source="BUGZILLA"/>
		<reference ref_id="1146612" ref_url="https://bugzilla.suse.com/1146612" source="BUGZILLA"/>
		<reference ref_id="1148410" ref_url="https://bugzilla.suse.com/1148410" source="BUGZILLA"/>
		<reference ref_id="1149119" ref_url="https://bugzilla.suse.com/1149119" source="BUGZILLA"/>
		<reference ref_id="1149853" ref_url="https://bugzilla.suse.com/1149853" source="BUGZILLA"/>
		<reference ref_id="1150452" ref_url="https://bugzilla.suse.com/1150452" source="BUGZILLA"/>
		<reference ref_id="1150457" ref_url="https://bugzilla.suse.com/1150457" source="BUGZILLA"/>
		<reference ref_id="1150465" ref_url="https://bugzilla.suse.com/1150465" source="BUGZILLA"/>
		<reference ref_id="1150875" ref_url="https://bugzilla.suse.com/1150875" source="BUGZILLA"/>
		<reference ref_id="1151508" ref_url="https://bugzilla.suse.com/1151508" source="BUGZILLA"/>
		<reference ref_id="1151807" ref_url="https://bugzilla.suse.com/1151807" source="BUGZILLA"/>
		<reference ref_id="1152033" ref_url="https://bugzilla.suse.com/1152033" source="BUGZILLA"/>
		<reference ref_id="1152624" ref_url="https://bugzilla.suse.com/1152624" source="BUGZILLA"/>
		<reference ref_id="1152665" ref_url="https://bugzilla.suse.com/1152665" source="BUGZILLA"/>
		<reference ref_id="1152685" ref_url="https://bugzilla.suse.com/1152685" source="BUGZILLA"/>
		<reference ref_id="1152696" ref_url="https://bugzilla.suse.com/1152696" source="BUGZILLA"/>
		<reference ref_id="1152697" ref_url="https://bugzilla.suse.com/1152697" source="BUGZILLA"/>
		<reference ref_id="1152788" ref_url="https://bugzilla.suse.com/1152788" source="BUGZILLA"/>
		<reference ref_id="1152790" ref_url="https://bugzilla.suse.com/1152790" source="BUGZILLA"/>
		<reference ref_id="1152791" ref_url="https://bugzilla.suse.com/1152791" source="BUGZILLA"/>
		<reference ref_id="1153112" ref_url="https://bugzilla.suse.com/1153112" source="BUGZILLA"/>
		<reference ref_id="1153158" ref_url="https://bugzilla.suse.com/1153158" source="BUGZILLA"/>
		<reference ref_id="1153236" ref_url="https://bugzilla.suse.com/1153236" source="BUGZILLA"/>
		<reference ref_id="1153263" ref_url="https://bugzilla.suse.com/1153263" source="BUGZILLA"/>
		<reference ref_id="1153476" ref_url="https://bugzilla.suse.com/1153476" source="BUGZILLA"/>
		<reference ref_id="1153509" ref_url="https://bugzilla.suse.com/1153509" source="BUGZILLA"/>
		<reference ref_id="1153607" ref_url="https://bugzilla.suse.com/1153607" source="BUGZILLA"/>
		<reference ref_id="1153646" ref_url="https://bugzilla.suse.com/1153646" source="BUGZILLA"/>
		<reference ref_id="1153681" ref_url="https://bugzilla.suse.com/1153681" source="BUGZILLA"/>
		<reference ref_id="1153713" ref_url="https://bugzilla.suse.com/1153713" source="BUGZILLA"/>
		<reference ref_id="1153717" ref_url="https://bugzilla.suse.com/1153717" source="BUGZILLA"/>
		<reference ref_id="1153718" ref_url="https://bugzilla.suse.com/1153718" source="BUGZILLA"/>
		<reference ref_id="1153719" ref_url="https://bugzilla.suse.com/1153719" source="BUGZILLA"/>
		<reference ref_id="1153811" ref_url="https://bugzilla.suse.com/1153811" source="BUGZILLA"/>
		<reference ref_id="1153969" ref_url="https://bugzilla.suse.com/1153969" source="BUGZILLA"/>
		<reference ref_id="1154108" ref_url="https://bugzilla.suse.com/1154108" source="BUGZILLA"/>
		<reference ref_id="1154189" ref_url="https://bugzilla.suse.com/1154189" source="BUGZILLA"/>
		<reference ref_id="1154242" ref_url="https://bugzilla.suse.com/1154242" source="BUGZILLA"/>
		<reference ref_id="1154268" ref_url="https://bugzilla.suse.com/1154268" source="BUGZILLA"/>
		<reference ref_id="1154354" ref_url="https://bugzilla.suse.com/1154354" source="BUGZILLA"/>
		<reference ref_id="1154372" ref_url="https://bugzilla.suse.com/1154372" source="BUGZILLA"/>
		<reference ref_id="1154521" ref_url="https://bugzilla.suse.com/1154521" source="BUGZILLA"/>
		<reference ref_id="1154578" ref_url="https://bugzilla.suse.com/1154578" source="BUGZILLA"/>
		<reference ref_id="1154607" ref_url="https://bugzilla.suse.com/1154607" source="BUGZILLA"/>
		<reference ref_id="1154608" ref_url="https://bugzilla.suse.com/1154608" source="BUGZILLA"/>
		<reference ref_id="1154610" ref_url="https://bugzilla.suse.com/1154610" source="BUGZILLA"/>
		<reference ref_id="1154611" ref_url="https://bugzilla.suse.com/1154611" source="BUGZILLA"/>
		<reference ref_id="1154651" ref_url="https://bugzilla.suse.com/1154651" source="BUGZILLA"/>
		<reference ref_id="1154737" ref_url="https://bugzilla.suse.com/1154737" source="BUGZILLA"/>
		<reference ref_id="1154747" ref_url="https://bugzilla.suse.com/1154747" source="BUGZILLA"/>
		<reference ref_id="1154848" ref_url="https://bugzilla.suse.com/1154848" source="BUGZILLA"/>
		<reference ref_id="1154858" ref_url="https://bugzilla.suse.com/1154858" source="BUGZILLA"/>
		<reference ref_id="1154905" ref_url="https://bugzilla.suse.com/1154905" source="BUGZILLA"/>
		<reference ref_id="1154956" ref_url="https://bugzilla.suse.com/1154956" source="BUGZILLA"/>
		<reference ref_id="1155061" ref_url="https://bugzilla.suse.com/1155061" source="BUGZILLA"/>
		<reference ref_id="1155178" ref_url="https://bugzilla.suse.com/1155178" source="BUGZILLA"/>
		<reference ref_id="1155179" ref_url="https://bugzilla.suse.com/1155179" source="BUGZILLA"/>
		<reference ref_id="1155184" ref_url="https://bugzilla.suse.com/1155184" source="BUGZILLA"/>
		<reference ref_id="1155186" ref_url="https://bugzilla.suse.com/1155186" source="BUGZILLA"/>
		<reference ref_id="1155671" ref_url="https://bugzilla.suse.com/1155671" source="BUGZILLA"/>
		<reference ref_id="802154" ref_url="https://bugzilla.suse.com/802154" source="BUGZILLA"/>
		<reference ref_id="814594" ref_url="https://bugzilla.suse.com/814594" source="BUGZILLA"/>
		<reference ref_id="919448" ref_url="https://bugzilla.suse.com/919448" source="BUGZILLA"/>
		<reference ref_id="987367" ref_url="https://bugzilla.suse.com/987367" source="BUGZILLA"/>
		<reference ref_id="998153" ref_url="https://bugzilla.suse.com/998153" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-12207" ref_url="https://www.suse.com/security/cve/CVE-2018-12207/" source="CVE"/>
		<reference ref_id="CVE-2019-10220" ref_url="https://www.suse.com/security/cve/CVE-2019-10220/" source="CVE"/>
		<reference ref_id="CVE-2019-11135" ref_url="https://www.suse.com/security/cve/CVE-2019-11135/" source="CVE"/>
		<reference ref_id="CVE-2019-16232" ref_url="https://www.suse.com/security/cve/CVE-2019-16232/" source="CVE"/>
		<reference ref_id="CVE-2019-16233" ref_url="https://www.suse.com/security/cve/CVE-2019-16233/" source="CVE"/>
		<reference ref_id="CVE-2019-16234" ref_url="https://www.suse.com/security/cve/CVE-2019-16234/" source="CVE"/>
		<reference ref_id="CVE-2019-16995" ref_url="https://www.suse.com/security/cve/CVE-2019-16995/" source="CVE"/>
		<reference ref_id="CVE-2019-17056" ref_url="https://www.suse.com/security/cve/CVE-2019-17056/" source="CVE"/>
		<reference ref_id="CVE-2019-17133" ref_url="https://www.suse.com/security/cve/CVE-2019-17133/" source="CVE"/>
		<reference ref_id="CVE-2019-17666" ref_url="https://www.suse.com/security/cve/CVE-2019-17666/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:2947-1" ref_url="https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race
  condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine
  Exception during Page Size Change, causing the CPU core to be non-functional.

  The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in
  executable pages by splitting / merging huge pages into small pages as
  needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7023735

- CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with
  Transactional Memory support could be used to facilitate sidechannel
  information leaks out of microarchitectural buffers, similar to the
  previously described 'Microarchitectural Data Sampling' attack.

  The Linux kernel was supplemented with the option to disable TSX operation
  altogether (requiring CPU Microcode updates on older systems) and better
  flushing of microarchitectural buffers (VERW).

  The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251

- CVE-2019-16995: Fix a memory leak in hsr_dev_finalize() if hsr_add_port
  failed to add a port, which may have caused denial of service (bsc#1152685).

- CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the
  alloc_workqueue return value, leading to a NULL pointer dereference.
  (bsc#1150457).

- CVE-2019-10220: Added sanity checks on the pathnames passed to the user
  space. (bsc#1144903).

- CVE-2019-17666: rtlwifi: Fix potential overflow in P2P code (bsc#1154372).

- CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell
  libertas driver (bsc#1150465).

- CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return
  value, leading to a NULL pointer dereference. (bsc#1150452).

- CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE,
  leading to a Buffer Overflow (bsc#1153158).

- CVE-2019-17056: The AF_NFC network module did not enforce CAP_NET_RAW, which
  meant that unprivileged users could create a raw socket (bsc#1152788).

The following non-security bugs were fixed:

- 9p: avoid attaching writeback_fid on mmap with type PRIVATE (bsc#1051510).
- acpi: cppc: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() (bsc#1051510).
- acpi: cppc: do not require the _PSD method (bsc#1051510).
- acpi: processor: do not print errors for processorIDs == 0xff (bsc#1051510).
- act_mirred: Fix mirred_init_module error handling (bsc#1051510).
- alsa: bebob: Fix prototype of helper function to return negative value (bsc#1051510).
- alsa: firewire-motu: add support for MOTU 4pre (bsc#1111666).
- alsa: hda/hdmi: Do not report spurious jack state changes (bsc#1051510).
- alsa: hda/hdmi: remove redundant assignment to variable pcm_idx (bsc#1051510).
- alsa: hda/realtek: Add support for ALC623 (bsc#1051510).
- alsa: hda/realtek: Add support for ALC711 (bsc#1051510).
- alsa: hda/realtek: Check beep whitelist before assigning in all codecs (bsc#1051510).
- alsa: hda/realtek: Enable headset mic on Asus MJ401TA (bsc#1051510).
- alsa: hda/realtek: Fix 2 front mics of codec 0x623 (bsc#1051510).
- alsa: hda/realtek: Fix alienware headset mic (bsc#1051510).
- alsa: hda/realtek: PCI quirk for Medion E4254 (bsc#1051510).
- alsa: hda/realtek: Reduce the Headphone static noise on XPS 9350/9360 (bsc#1051510).
- alsa: hda/sigmatel: remove unused variable 'stac9200_core_init' (bsc#1051510).
- alsa: hda: Add Elkhart Lake PCI ID (bsc#1051510).
- alsa: hda: Add Tigerlake/Jasperlake PCI ID (bsc#1051510).
- alsa: hda: Add a quirk model for fixing Huawei Matebook X right speaker (bsc#1051510).
- alsa: hda: Add laptop imic fixup for ASUS M9V laptop (bsc#1051510).
- alsa: hda: Add support of Zhaoxin controller (bsc#1051510).
- alsa: hda: Apply AMD controller workaround for Raven platform (bsc#1051510).
- alsa: hda: Define a fallback_pin_fixup_tbl for alc269 family (bsc#1051510).
- alsa: hda: Drop unsol event handler for Intel HDMI codecs (bsc#1051510).
- alsa: hda: Expand pin_match function to match upcoming new tbls (bsc#1051510).
- alsa: hda: Flush interrupts on disabling (bsc#1051510).
- alsa: hda: Force runtime PM on Nvidia HDMI codecs (bsc#1051510).
- alsa: hda: Inform too slow responses (bsc#1051510).
- alsa: hda: Set fifo_size for both playback and capture streams (bsc#1051510).
- alsa: hda: Show the fatal CORB/RIRB error more clearly (bsc#1051510).
- alsa: i2c: ak4xxx-adda: Fix a possible null pointer dereference in build_adc_controls() (bsc#1051510).
- alsa: line6: sizeof (byte) is always 1, use that fact (bsc#1051510).
- alsa: timer: Fix mutex deadlock at releasing card (bsc#1051510).
- alsa: usb-audio: Add DSD support for EVGA NU Audio (bsc#1051510).
- alsa: usb-audio: Add DSD support for Gustard U16/X26 USB Interface (bsc#1051510).
- alsa: usb-audio: Add Hiby device family to quirks for native DSD support (bsc#1051510).
- alsa: usb-audio: Add Pioneer DDJ-SX3 PCM quirck (bsc#1051510).
- alsa: usb-audio: Clean up check_input_term() (bsc#1051510).
- alsa: usb-audio: DSD auto-detection for Playback Designs (bsc#1051510).
- alsa: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1051510).
- alsa: usb-audio: Disable quirks for BOSS Katana amplifiers (bsc#1111666).
- alsa: usb-audio: Fix copy&amp;paste error in the validator (bsc#1111666).
- alsa: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() (bsc#1051510).
- alsa: usb-audio: More validations of descriptor units (bsc#1051510).
- alsa: usb-audio: Remove superfluous bLength checks (bsc#1051510).
- alsa: usb-audio: Simplify parse_audio_unit() (bsc#1051510).
- alsa: usb-audio: Skip bSynchAddress endpoint check if it is invalid (bsc#1051510).
- alsa: usb-audio: Unify audioformat release code (bsc#1051510).
- alsa: usb-audio: Unify the release of usb_mixer_elem_info objects (bsc#1051510).
- alsa: usb-audio: Update DSD support quirks for Oppo and Rotel (bsc#1051510).
- alsa: usb-audio: fix PCM device order (bsc#1051510).
- alsa: usb-audio: remove some dead code (bsc#1051510).
- appletalk: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- arcnet: provide a buffer big enough to actually receive packets (networking-stable-19_09_30).
- asoc: Define a set of DAPM pre/post-up events (bsc#1051510).
- asoc: dmaengine: Make the pcm-&gt;name equal to pcm-&gt;id if the name is not set (bsc#1051510).
- asoc: intel: Fix use of potentially uninitialized variable (bsc#1051510).
- asoc: intel: nhlt: Fix debug print format (bsc#1051510).
- asoc: rockchip: i2s: Fix RPM imbalance (bsc#1051510).
- asoc: rsnd: Reinitialize bit clock inversion flag for every format setting (bsc#1051510).
- asoc: sgtl5000: Fix charge pump source assignment (bsc#1051510).
- auxdisplay: panel: need to delete scan_timer when misc_register fails in panel_attach (bsc#1051510).
- ax25: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- blk-wbt: abstract out end IO completion handler (bsc#1135873).
- blk-wbt: fix has-sleeper queueing check (bsc#1135873).
- blk-wbt: improve waking of tasks (bsc#1135873).
- blk-wbt: move disable check into get_limit() (bsc#1135873).
- blk-wbt: use wq_has_sleeper() for wq active check (bsc#1135873).
- block: add io timeout to sysfs (bsc#1148410).
- block: add io timeout to sysfs (bsc#1148410).
- block: do not show io_timeout if driver has no timeout handler (bsc#1148410).
- block: do not show io_timeout if driver has no timeout handler (bsc#1148410).
- bluetooth: btrtl: Additional Realtek 8822CE Bluetooth devices (bsc#1051510).
- bnx2x: Fix VF's VLAN reconfiguration in reload (bsc#1086323 ).
- bnxt_en: Add PCI IDs for 57500 series NPAR devices (bsc#1153607).
- bpf: fix use after free in prog symbol exposure (bsc#1083647).
- brcmfmac: sdio: Disable auto-tuning around commands expected to fail (bsc#1111666).
- brcmfmac: sdio: Do not tune while the card is off (bsc#1111666).
- bridge/mdb: remove wrong use of NLM_F_MULTI (networking-stable-19_09_15).
- btrfs: Ensure btrfs_init_dev_replace_tgtdev sees up to date values (bsc#1154651).
- btrfs: Ensure replaced device does not have pending chunk allocation (bsc#1154607).
- btrfs: bail out gracefully rather than BUG_ON (bsc#1153646).
- btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() (bsc#1155178).
- btrfs: check for the full sync flag while holding the inode lock during fsync (bsc#1153713).
- btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() (bsc#1155179).
- btrfs: remove wrong use of volume_mutex from btrfs_dev_replace_start (bsc#1154651).
- btrfs: tracepoints: Fix bad entry members of qgroup events (bsc#1155186).
- btrfs: tracepoints: Fix wrong parameter order for qgroup events (bsc#1155184).
- can: mcp251x: mcp251x_hw_reset(): allow more time after a reset (bsc#1051510).
- can: xilinx_can: xcan_probe(): skip error message on deferred probe (bsc#1051510).
- cdc_ether: fix rndis support for Mediatek based smartphones (networking-stable-19_09_15).
- cdc_ncm: fix divide-by-zero caused by invalid wMaxPacketSize (bsc#1051510).
- ceph: fix directories inode i_blkbits initialization (bsc#1153717).
- ceph: reconnect connection if session hang in opening state (bsc#1153718).
- ceph: update the mtime when truncating up (bsc#1153719).
- cfg80211: Purge frame registrations on iftype change (bsc#1051510).
- cfg80211: add and use strongly typed element iteration macros (bsc#1051510).
- clk: at91: select parent if main oscillator or bypass is enabled (bsc#1051510).
- clk: qoriq: Fix -Wunused-const-variable (bsc#1051510).
- clk: sirf: Do not reference clk_init_data after registration (bsc#1051510).
- clk: zx296718: Do not reference clk_init_data after registration (bsc#1051510).
- crypto: af_alg: Fix race around ctx-&gt;rcvused by making it atomic_t (bsc#1154737).
- crypto: af_alg: Initialize sg_num_bytes in error code path (bsc#1051510).
- crypto: af_alg: consolidation of duplicate code (bsc#1154737).
- crypto: af_alg: fix race accessing cipher request (bsc#1154737).
- crypto: af_alg: remove locking in async callback (bsc#1154737).
- crypto: af_alg: update correct dst SGL entry (bsc#1051510).
- crypto: af_alg: wait for data at beginning of recvmsg (bsc#1154737).
- crypto: algif: return error code when no data was processed (bsc#1154737).
- crypto: algif_aead: copy AAD from src to dst (bsc#1154737).
- crypto: algif_aead: fix reference counting of null skcipher (bsc#1154737).
- crypto: algif_aead: overhaul memory management (bsc#1154737).
- crypto: algif_aead: skip SGL entries with NULL page (bsc#1154737).
- crypto: algif_skcipher: overhaul memory management (bsc#1154737).
- crypto: talitos: fix missing break in switch statement (bsc#1142635).
- cxgb4: Signedness bug in init_one() (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584).
- cxgb4: do not dma memory off of the stack (bsc#1152790).
- cxgb4: fix endianness for vlan value in cxgb4_tc_flower (bsc#1064802 bsc#1066129).
- cxgb4: offload VLAN flows regardless of VLAN ethtype (bsc#1064802 bsc#1066129).
- cxgb4: reduce kernel stack usage in cudbg_collect_mem_region() (bsc#1073513).
- cxgb4: smt: Add lock for atomic_dec_and_test (bsc#1064802 bsc#1066129).
- cxgb4:Fix out-of-bounds MSI-X info array access (networking-stable-19_10_05).
- drm/amd/display: Restore backlight brightness after system resume (bsc#1112178)
- drm/amd/display: fix issue where 252-255 values are clipped (bsc#1111666).
- drm/amd/display: reprogram VM config when system resume (bsc#1111666).
- drm/amd/display: support spdif (bsc#1111666).
- drm/amd/dm: Understand why attaching path/tile properties are needed (bsc#1111666).
- drm/amd/powerplay/smu7: enforce minimal VBITimeout (v2) (bsc#1051510).
- drm/amd/pp: Fix truncated clock value when set watermark (bsc#1111666).
- drm/amdgpu/gfx9: Update gfx9 golden settings (bsc#1111666).
- drm/amdgpu/si: fix ASIC tests (git-fixes).
- drm/amdgpu: Check for valid number of registers to read (bsc#1051510).
- drm/amdgpu: Fix KFD-related kernel oops on Hawaii (bsc#1111666).
- drm/amdgpu: Update gc_9_0 golden settings (bsc#1111666).
- drm/amdkfd: Add missing Polaris10 ID (bsc#1111666).
- drm/ast: Fixed reboot test may cause system hanged (bsc#1051510).
- drm/atomic_helper: Allow DPMS On&lt;-&gt;Off changes for unregistered connectors (bsc#1111666).
- drm/atomic_helper: Disallow new modesets on unregistered connectors (bsc#1111666).
- drm/atomic_helper: Stop modesets on unregistered connectors harder (bsc#1111666).
- drm/bridge: tc358767: Increase AUX transfer length limit (bsc#1051510).
- drm/bridge: tfp410: fix memleak in get_modes() (bsc#1111666).
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 (bsc#1051510).
- drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)
- drm/i915/cmdparser: Ignore Length operands during (bsc#1135967)
- drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)
- drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)
- drm/i915/gvt: update vgpu workload head pointer correctly (bsc#1112178)
- drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)
- drm/i915: Add support for mandatory cmdparsing (bsc#1135967)
- drm/i915: Allow parsing of unsized batches (bsc#1135967)
- drm/i915: Cleanup gt powerstate from gem (bsc#1111666).
- drm/i915: Disable Secure Batches for gen6+ (bsc#1135967)
- drm/i915: Fix intel_dp_mst_best_encoder() (bsc#1111666).
- drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)
- drm/i915: Remove Master tables from cmdparser (bsc#1135967)
- drm/i915: Rename gen7 cmdparser tables (bsc#1135967)
- drm/i915: Restore sane defaults for KMS on GEM error load (bsc#1111666).
- drm/i915: Support ro ppgtt mapped cmdparser shadow (bsc#1135967)
- drm/mediatek: set DMA max segment size (bsc#1111666).
- drm/msm/dsi: Fix return value check for clk_get_parent (bsc#1111666).
- drm/msm/dsi: Implement reset correctly (bsc#1051510).
- drm/nouveau/disp/nv50-: fix center/aspect-corrected scaling (bsc#1111666).
- drm/nouveau/kms/nv50-: Do not create MSTMs for eDP connectors (bsc#1112178)
- drm/nouveau/volt: Fix for some cards having 0 maximum voltage (bsc#1111666).
- drm/omap: fix max fclk divider for omap36xx (bsc#1111666).
- drm/panel: check failure cases in the probe func (bsc#1111666).
- drm/panel: make drm_panel.h self-contained (bsc#1111666).
- drm/panel: simple: fix AUO g185han01 horizontal blanking (bsc#1051510).
- drm/radeon: Bail earlier when radeon.cik_/si_support=0 is passed (bsc#1111666).
- drm/radeon: Fix EEH during kexec (bsc#1051510).
- drm/rockchip: Check for fast link training before enabling psr (bsc#1111666).
- drm/stm: attach gem fence to atomic state (bsc#1111666).
- drm/tilcdc: Register cpufreq notifier after we have initialized crtc (bsc#1051510).
- drm/vmwgfx: Fix double free in vmw_recv_msg() (bsc#1051510).
- drm: Flush output polling on shutdown (bsc#1051510).
- drm: add __user attribute to ptr_to_compat() (bsc#1111666).
- drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC (bsc#1111666).
- drm: rcar-du: lvds: Fix bridge_to_rcar_lvds (bsc#1111666).
- e1000e: add workaround for possible stalled packet (bsc#1051510).
- efi/arm: Show SMBIOS bank/device location in CPER and GHES error logs (bsc#1152033).
- efi/memattr: Do not bail on zero VA if it equals the region's PA (bsc#1051510).
- efi: cper: print AER info of PCIe fatal error (bsc#1051510).
- efivar/ssdt: Do not iterate over EFI vars if no SSDT override was specified (bsc#1051510).
- firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices (git-fixes).
- gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property() (bsc#1051510).
- hid: apple: Fix stuck function keys when using FN (bsc#1051510).
- hid: fix error message in hid_open_report() (bsc#1051510).
- hid: hidraw: Fix invalid read in hidraw_ioctl (bsc#1051510).
- hid: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy() (bsc#1051510).
- hid: logitech: Fix general protection fault caused by Logitech driver (bsc#1051510).
- hid: prodikeys: Fix general protection fault during probe (bsc#1051510).
- hid: sony: Fix memory corruption issue on cleanup (bsc#1051510).
- hso: fix NULL-deref on tty open (bsc#1051510).
- hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap' (bsc#1051510).
- hwrng: core: do not wait on add_early_randomness() (git-fixes).
- hyperv: set nvme msi interrupts to unmanaged (jsc#SLE-8953, jsc#SLE-9221, jsc#SLE-4941, bsc#1119461, bsc#1119465, bsc#1138190, bsc#1154905).
- i2c: riic: Clear NACK in tend isr (bsc#1051510).
- ib/core, ipoib: Do not overreact to SM LID change event (bsc#1154108)
- ib/core: Add mitigation for Spectre V1 (bsc#1155671)
- ib/hfi1: Remove overly conservative VM_EXEC flag check (bsc#1144449).
- ib/mlx5: Consolidate use_umr checks into single function (bsc#1093205).
- ib/mlx5: Fix MR re-registration flow to use UMR properly (bsc#1093205).
- ib/mlx5: Report correctly tag matching rendezvous capability (bsc#1046305).
- ieee802154: atusb: fix use-after-free at disconnect (bsc#1051510).
- ieee802154: ca8210: prevent memory leak (bsc#1051510).
- ieee802154: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- iio: adc: ad799x: fix probe error handling (bsc#1051510).
- iio: light: opt3001: fix mutex unlock race (bsc#1051510).
- ima: always return negative code for error (bsc#1051510).
- input: da9063: fix capability and drop KEY_SLEEP (bsc#1051510).
- input: synaptics-rmi4: avoid processing unknown IRQs (bsc#1051510).
- integrity: prevent deadlock during digsig verification (bsc#1090631).
- iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 (bsc#1137799).
- iommu/amd: Check PM_LEVEL_SIZE() condition in locked section (bsc#1154608).
- iommu/amd: Override wrong IVRS IOAPIC on Raven Ridge systems (bsc#1137799).
- iommu/amd: Remove domain-&gt;updated (bsc#1154610).
- iommu/amd: Wait for completion of IOTLB flush in attach_device (bsc#1154611).
- ipmi_si: Only schedule continuously in the thread in maintenance mode (bsc#1051510).
- ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' (networking-stable-19_09_15).
- ipv6: Handle missing host route in __ipv6_ifa_notify (networking-stable-19_10_05).
- ipv6: drop incoming packets having a v4mapped source address (networking-stable-19_10_05).
- iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init (bsc#1111666).
- ixgbe: Fix secpath usage for IPsec TX offload (bsc#1113994 bsc#1151807).
- ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (bsc#1101674).
- ixgbe: sync the first fragment unconditionally (bsc#1133140).
- kABI workaround for crypto/af_alg changes (bsc#1154737).
- kABI workaround for drm_connector.registered type changes (bsc#1111666).
- kABI workaround for mmc_host retune_crc_disable flag addition (bsc#1111666).
- kABI workaround for snd_hda_pick_pin_fixup() changes (bsc#1051510).
- kabi/severities: Whitelist functions internal to radix mm. To call these functions you have to first detect if you are running in radix mm mode which can't be expected of OOT code.
- kabi: net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05).
- kernel-binary.spec.in: Fix build of non-modular kernels (boo#1154578).
- kernel-binary.spec.in: Obsolete kgraft packages only when not building them.
- kernel-binary: Drop .kernel-binary.spec.buildenv (boo#1154578). Without this patch, /usr/src/linux-@VERSION@-@RELEASE_SHORT@-obj/x86_64/vanilla/.kernel-binary.spec.buildenv contained rpm %_smp_mflags in a line like export MAKE_ARGS=' --output-sync -j4' This made it hard to produce bit-identical builds.
- kernel-binary: check also bzImage on s390/s390x Starting with 4.19-rc1, uncompressed image is no longer built on s390x. If file 'image' is not found in arch/s390/boot after the build, try bzImage instead. For now, install bzImage under the name image-* until we know grub2 and our grub2 scripts can handle correct name.
- kernel-subpackage-build: create zero size ghost for uncompressed vmlinux (bsc#1154354). It is not strictly necessary to uncompress it so maybe the ghost file can be 0 size in this case.
- kernel/sysctl.c: do not override max_threads provided by userspace (bnc#1150875).
- ksm: cleanup stable_node chain collapse case (bnc#1144338).
- ksm: fix use after free with merge_across_nodes = 0 (bnc#1144338).
- ksm: introduce ksm_max_page_sharing per page deduplication limit (bnc#1144338).
- ksm: optimize refile of stable_node_dup at the head of the chain (bnc#1144338).
- ksm: swap the two output parameters of chain/chain_prune (bnc#1144338).
- kvm: Convert kvm_lock to a mutex (bsc#1117665).
- kvm: mmu: drop vcpu param in gpte_access (bsc#1117665).
- kvm: ppc: book3s hv: use smp_mb() when setting/clearing host_ipi flag (bsc#1061840).
- kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bsc#1117665).
- kvm: x86, powerpc: do not allow clearing largepages debugfs entry (bsc#1117665).
- kvm: x86: Do not release the page inside mmu_set_spte() (bsc#1117665).
- kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (bsc#1117665).
- kvm: x86: adjust kvm_mmu_page member to save 8 bytes (bsc#1117665).
- kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (bsc#1117665).
- kvm: x86: make FNAME(fetch) and __direct_map more similar (bsc#1117665).
- kvm: x86: remove now unneeded hugepage gfn adjustment (bsc#1117665).
- lib/mpi: Fix karactx leak in mpi_powm (bsc#1051510).
- libertas: Add missing sentinel at end of if_usb.c fw_table (bsc#1051510).
- libnvdimm/security: provide fix for secure-erase to use zero-key (bsc#1149853).
- lpfc: Add FA-WWN Async Event reporting (bsc#1154521).
- lpfc: Add FC-AL support to lpe32000 models (bsc#1154521).
- lpfc: Add additional discovery log messages (bsc#1154521).
- lpfc: Add log macros to allow print by serverity or verbocity setting (bsc#1154521).
- lpfc: Fix SLI3 hba in loop mode not discovering devices (bsc#1154521).
- lpfc: Fix bad ndlp ptr in xri aborted handling (bsc#1154521).
- lpfc: Fix hardlockup in lpfc_abort_handler (bsc#1154521).
- lpfc: Fix lockdep errors in sli_ringtx_put (bsc#1154521).
- lpfc: Fix reporting of read-only fw error errors (bsc#1154521).
- lpfc: Make FW logging dynamically configurable (bsc#1154521).
- lpfc: Remove lock contention target write path (bsc#1154521).
- lpfc: Revise interrupt coalescing for missing scenarios (bsc#1154521).
- lpfc: Slight fast-path Performance optimizations (bsc#1154521).
- lpfc: Update lpfc version to 12.6.0.0 (bsc#1154521).
- lpfc: fix coverity error of dereference after null check (bsc#1154521).
- lpfc: fix lpfc_nvmet_mrq to be bound by hdw queue count (bsc#1154521).
- mac80211: Reject malformed SSID elements (bsc#1051510).
- mac80211: accept deauth frames in IBSS mode (bsc#1051510).
- mac80211: fix txq null pointer dereference (bsc#1051510).
- macsec: drop skb sk before calling gro_cells_receive (bsc#1051510).
- md/raid0: avoid RAID0 data corruption due to layout confusion (bsc#1140090).
- md/raid0: fix warning message for parameter default_layout (bsc#1140090).
- media: atmel: atmel-isc: fix asd memory allocation (bsc#1135642).
- media: cpia2_usb: fix memory leaks (bsc#1051510).
- media: dvb-core: fix a memory leak bug (bsc#1051510).
- media: exynos4-is: fix leaked of_node references (bsc#1051510).
- media: gspca: zero usb_buf on error (bsc#1051510).
- media: hdpvr: Add device num check and handling (bsc#1051510).
- media: hdpvr: add terminating 0 at end of string (bsc#1051510).
- media: i2c: ov5645: Fix power sequence (bsc#1051510).
- media: iguanair: add sanity checks (bsc#1051510).
- media: omap3isp: Do not set streaming state on random subdevs (bsc#1051510).
- media: omap3isp: Set device on omap3isp subdevs (bsc#1051510).
- media: ov9650: add a sanity check (bsc#1051510).
- media: radio/si470x: kill urb on error (bsc#1051510).
- media: saa7134: fix terminology around saa7134_i2c_eeprom_md7134_gate() (bsc#1051510).
- media: saa7146: add cleanup in hexium_attach() (bsc#1051510).
- media: sn9c20x: Add MSI MS-1039 laptop to flip_dmi_table (bsc#1051510).
- media: stkwebcam: fix runtime PM after driver unbind (bsc#1051510).
- media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (bsc#1051510).
- memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' (bsc#1051510).
- mfd: intel-lpss: Remove D3cold delay (bsc#1051510).
- misdn: enforce CAP_NET_RAW for raw sockets (bsc#1051510).
- mld: fix memory leak in mld_del_delrec() (networking-stable-19_09_05).
- mmc: core: API to temporarily disable retuning for SDIO CRC errors (bsc#1111666).
- mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() (bsc#1111666).
- mmc: sdhci-of-esdhc: set DMA snooping based on DMA coherence (bsc#1051510).
- mmc: sdhci: Fix incorrect switch to HS mode (bsc#1051510).
- mmc: sdhci: improve ADMA error reporting (bsc#1051510).
- net/ibmvnic: Fix EOI when running in XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes).
- net/mlx4_en: fix a memory leak bug (bsc#1046299).
- net/mlx5: Add device ID of upcoming BlueField-2 (bsc#1046303 ).
- net/mlx5: Fix error handling in mlx5_load() (bsc#1046305 ).
- net/phy: fix DP83865 10 Mbps HDX loopback disable function (networking-stable-19_09_30).
- net/rds: Fix error handling in rds_ib_add_one() (networking-stable-19_10_05).
- net/rds: fix warn in rds_message_alloc_sgs (bsc#1154848).
- net/rds: remove user triggered WARN_ON in rds_sendmsg (bsc#1154848).
- net/sched: act_sample: do not push mac header on ip6gre ingress (networking-stable-19_09_30).
- net: Fix null de-reference of device refcount (networking-stable-19_09_15).
- net: Replace NF_CT_ASSERT() with WARN_ON() (bsc#1146612).
- net: Unpublish sk from sk_reuseport_cb before call_rcu (networking-stable-19_10_05).
- net: fix skb use after free in netpoll (networking-stable-19_09_05).
- net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list (networking-stable-19_09_15).
- net: openvswitch: free vport unless register_netdevice() succeeds (git-fixes).
- net: qlogic: Fix memory leak in ql_alloc_large_buffers (networking-stable-19_10_05).
- net: qrtr: Stop rx_worker before freeing node (networking-stable-19_09_30).
- net: sched: act_sample: fix psample group handling on overwrite (networking-stable-19_09_05).
- net: stmmac: dwmac-rk: Do not fail if phy regulator is absent (networking-stable-19_09_05).
- net_sched: add policy validation for action attributes (networking-stable-19_09_30).
- net_sched: fix backward compatibility for TCA_ACT_KIND (git-fixes).
- netfilter: nf_nat: do not bug when mapping already exists (bsc#1146612).
- nfc: fix attrs checks in netlink interface (bsc#1051510).
- nfc: fix memory leak in llcp_sock_bind() (bsc#1051510).
- nfc: pn533: fix use-after-free and memleaks (bsc#1051510).
- nfsv4.1: backchannel request should hold ref on xprt (bsc#1152624).
- nl80211: fix null pointer dereference (bsc#1051510).
- objtool: Clobber user CFLAGS variable (bsc#1153236).
- openvswitch: change type of UPCALL_PID attribute to NLA_UNSPEC (networking-stable-19_09_30).
- packaging: add support for riscv64
- pci: Correct pci=resource_alignment parameter example (bsc#1051510).
- pci: dra7xx: Fix legacy INTD IRQ handling (bsc#1087092).
- pci: hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (bsc#1153263).
- pci: pm: Fix pci_power_up() (bsc#1051510).
- pinctrl: cherryview: restore Strago DMI workaround for all versions (bsc#1111666).
- pinctrl: tegra: Fix write barrier placement in pmx_writel (bsc#1051510).
- platform/x86: classmate-laptop: remove unused variable (bsc#1051510).
- platform/x86: i2c-multi-instantiate: Derive the device name from parent (bsc#1111666).
- platform/x86: i2c-multi-instantiate: Fail the probe if no IRQ provided (bsc#1111666).
- platform/x86: pmc_atom: Add Siemens SIMATIC IPC277E to critclk_systems DMI table (bsc#1051510).
- power: supply: sysfs: ratelimit property read error message (bsc#1051510).
- powerpc/64s/pseries: radix flush translations before MMU is enabled at boot (bsc#1055186).
- powerpc/64s/radix: keep kernel ERAT over local process/guest invalidates (bsc#1055186).
- powerpc/64s/radix: tidy up TLB flushing code (bsc#1055186).
- powerpc/64s: Rename PPC_INVALIDATE_ERAT to PPC_ISA_3_0_INVALIDATE_ERAT (bsc#1055186).
- powerpc/mm/book3s64: Move book3s64 code to pgtable-book3s64 (bsc#1055186).
- powerpc/mm/radix: mark __radix__flush_tlb_range_psize() as __always_inline (bsc#1055186).
- powerpc/mm/radix: mark as __tlbie_pid() and friends as__always_inline (bsc#1055186).
- powerpc/mm: Properly invalidate when setting process table base (bsc#1055186).
- powerpc/mm: mark more tlb functions as __always_inline (bsc#1055186).
- powerpc/pseries/mobility: use cond_resched when updating device tree (bsc#1153112 ltc#181778).
- powerpc/pseries: Remove confusing warning message (bsc#1109158).
- powerpc/rtas: allow rescheduling while changing cpu states (bsc#1153112 ltc#181778).
- powerplay: Respect units on max dcfclk watermark (bsc#1111666).
- qed: iwarp: Fix default window size to be based on chip (bsc#1050536 bsc#1050545).
- qed: iwarp: Fix tc for MPA ll2 connection (bsc#1050536 bsc#1050545).
- qed: iwarp: Use READ_ONCE and smp_store_release to access ep-&gt;state (bsc#1050536 bsc#1050545).
- qed: iwarp: fix uninitialized callback (bsc#1050536 bsc#1050545).
- qmi_wwan: add support for Cinterion CLS8 devices (networking-stable-19_10_05).
- r8152: Set macpassthru in reset_resume callback (bsc#1051510).
- rdma/bnxt_re: Fix spelling mistake 'missin_resp' -&gt; 'missing_resp' (bsc#1050244).
- rdma/hns: Add reset process for function-clear (bsc#1155061).
- rdma/hns: Remove the some magic number (bsc#1155061).
- rdma: Fix goto target to release the allocated memory (bsc#1050244).
- rds: Fix warning (bsc#1154848).
- rpm/config.sh: Enable livepatch.
- rpm/constraints.in: lower disk space required for ARM With a requirement of 35GB, only 2 slow workers are usable for ARM. Current aarch64 build requires 27G and armv6/7 requires 14G. Set requirements respectively to 30GB and 20GB.
- rpm/dtb.spec.in.in: do not make dtb directory inaccessible There is no reason to lock down the dtb directory for ordinary users.
- rpm/kernel-binary.spec.in: Fix kernel-livepatch description typo.
- rpm/kernel-binary.spec.in: build kernel-*-kgraft only for default SLE kernel RT and Azure variants are excluded for the moment. (bsc#1141600)
- rpm/kernel-binary.spec.in: handle modules.builtin.modinfo It was added in 5.2.
- rpm/kernel-binary.spec.in: support partial rt debug config.
- rpm/kernel-subpackage-spec: Mention debuginfo in the subpackage description (bsc#1149119).
- rpm/macros.kernel-source: KMPs should depend on kmod-compat to build. kmod-compat links are used in find-provides.ksyms, find-requires.ksyms, and find-supplements.ksyms in rpm-config-SUSE.
- rpm/mkspec: Correct tarball URL for rc kernels.
- rpm/mkspec: Make building DTBs optional.
- rpm/modflist: Simplify compression support.
- rpm: raise required disk space for binary packages Current disk space constraints (10 GB on s390x, 25 GB on other architectures) no longer suffice for 5.3 kernel builds. The statistics show ~30 GB of disk consumption on x86_64 and ~11 GB on s390x so raise the constraints to 35 GB in general and 14 GB on s390x.
- rpm: support compressed modules Some of our scripts and scriptlets in rpm/ do not expect module files not ending with '.ko' which currently leads to failure in preuninstall scriptlet of cluster-md-kmp-default (and probably also other subpackages). Let those which could be run on compressed module files recognize '.ko.xz' in addition to '.ko'.
- rtlwifi: rtl8192cu: Fix value set in descriptor (bsc#1142635).
- s390/cmf: set_schib_wait add timeout (bsc#1153509, bsc#1153476).
- s390/cpumsf: Check for CPU Measurement sampling (bsc#1153681 LTC#181855).
- s390/crypto: fix gcm-aes-s390 selftest failures (bsc#1137861 LTC#178091).
- s390/pci: add mio_enabled attribute (bsc#1152665 LTC#181729).
- s390/pci: correctly handle MIO opt-out (bsc#1152665 LTC#181729).
- s390/pci: deal with devices that have no support for MIO instructions (bsc#1152665 LTC#181729).
- s390/pci: fix MSI message data (bsc#1152697 LTC#181730).
- s390: add support for IBM z15 machines (bsc#1152696 LTC#181731).
- s390: fix setting of mio addressing control (bsc#1152665 LTC#181729).
- sch_cbq: validate TCA_CBQ_WRROPT to avoid crash (networking-stable-19_10_05).
- sch_dsmark: fix potential NULL deref in dsmark_init() (networking-stable-19_10_05).
- sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero (networking-stable-19_09_15).
- sch_netem: fix a divide by zero in tabledist() (networking-stable-19_09_30).
- sched/fair: Avoid divide by zero when rebalancing domains (bsc#1096254).
- scripts/arch-symbols: add missing link.
- scsi: lpfc: Check queue pointer before use (bsc#1154242).
- scsi: lpfc: Complete removal of FCoE T10 PI support on SLI-4 adapters (bsc#1154521).
- scsi: lpfc: Convert existing %pf users to %ps (bsc#1154521).
- scsi: lpfc: Fix GPF on scsi command completion (bsc#1154521).
- scsi: lpfc: Fix NVME io abort failures causing hangs (bsc#1154521).
- scsi: lpfc: Fix NVMe ABTS in response to receiving an ABTS (bsc#1154521).
- scsi: lpfc: Fix coverity errors on NULL pointer checks (bsc#1154521).
- scsi: lpfc: Fix device recovery errors after PLOGI failures (bsc#1154521).
- scsi: lpfc: Fix devices that do not return after devloss followed by rediscovery (bsc#1137040).
- scsi: lpfc: Fix discovery failures when target device connectivity bounces (bsc#1154521).
- scsi: lpfc: Fix hdwq sgl locks and irq handling (bsc#1154521).
- scsi: lpfc: Fix host hang at boot or slow boot (bsc#1154521).
- scsi: lpfc: Fix list corruption detected in lpfc_put_sgl_per_hdwq (bsc#1154521).
- scsi: lpfc: Fix list corruption in lpfc_sli_get_iocbq (bsc#1154521).
- scsi: lpfc: Fix locking on mailbox command completion (bsc#1154521).
- scsi: lpfc: Fix miss of register read failure check (bsc#1154521).
- scsi: lpfc: Fix null ptr oops updating lpfc_devloss_tmo via sysfs attribute (bsc#1140845).
- scsi: lpfc: Fix premature re-enabling of interrupts in lpfc_sli_host_down (bsc#1154521).
- scsi: lpfc: Fix propagation of devloss_tmo setting to nvme transport (bsc#1140883).
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (bsc#1154521).
- scsi: lpfc: Fix rpi release when deleting vport (bsc#1154521).
- scsi: lpfc: Fix spinlock_irq issues in lpfc_els_flush_cmd() (bsc#1154521).
- scsi: lpfc: Make function lpfc_defer_pt2pt_acc static (bsc#1154521).
- scsi: lpfc: Remove bg debugfs buffers (bsc#1144375).
- scsi: lpfc: Update async event logging (bsc#1154521).
- scsi: lpfc: Update lpfc version to 12.4.0.1 (bsc#1154521).
- scsi: lpfc: cleanup: remove unused fcp_txcmlpq_cnt (bsc#1154521).
- scsi: lpfc: remove left-over BUILD_NVME defines (bsc#1154268).
- scsi: qedf: Modify abort and tmf handler to handle edge condition and flush (bsc#1098291).
- scsi: qedf: fc_rport_priv reference counting fixes (bsc#1098291).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Dual FCP-NVMe target port support (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link reset (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix N2N link up fail (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix partial flash write of MBI (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix stale mem access on driver unload (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix unbound sleep in fcport delete path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Fix wait condition in loop (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Improve logging for scan thread (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Initialized mailbox to prevent driver load failure (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Optimize NPIV tear down process (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Set remove flag for all VP (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Silence fwdump template message (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: Update driver version to 10.01.00.20-k (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: fixup incorrect usage of host_byte (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: remove redundant assignment to pointer host (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: qla2xxx: stop timer in shutdown path (bsc#1143706 bsc#1082635 bsc#1123034).
- scsi: storvsc: setup 1:1 mapping between hardware queue and CPU queue (bsc#1140729).
- scsi: zfcp: fix reaction on bit error threshold notification (bsc#1154956 LTC#182054).
- sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' (networking-stable-19_09_15).
- sctp: use transport pf_retrans in sctp_do_8_2_transport_strike (networking-stable-19_09_15).
- skge: fix checksum byte order (networking-stable-19_09_30).
- sock_diag: fix autoloading of the raw_diag module (bsc#1152791).
- sock_diag: request _diag module only when the family or proto has been registered (bsc#1152791).
- staging: bcm2835-audio: Fix draining behavior regression (bsc#1111666).
- staging: vt6655: Fix memory leak in vt6655_probe (bsc#1051510).
- staging: wlan-ng: fix exit return when sme-&gt;key_idx &gt;= NUM_WEPKEYS (bsc#1051510).
- supporte.conf: add efivarfs to kernel-default-base (bsc#1154858).
- tcp: Do not dequeue SYN/FIN-segments from write-queue (git-gixes).
- tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR (networking-stable-19_09_15).
- tcp: inherit timestamp on mtu probe (networking-stable-19_09_05).
- tcp: remove empty skb from write queue in error cases (networking-stable-19_09_05).
- thermal: Fix use-after-free when unregistering thermal zone device (bsc#1051510).
- thermal_hwmon: Sanitize thermal_zone type (bsc#1051510).
- tipc: add NULL pointer check before calling kfree_rcu (networking-stable-19_09_15).
- tipc: fix unlimited bundling of small messages (networking-stable-19_10_05).
- tracing: Initialize iter-&gt;seq after zeroing in tracing_read_pipe() (bsc#1151508).
- tun: fix use-after-free when register netdev failed (networking-stable-19_09_15).
- tuntap: correctly set SOCKWQ_ASYNC_NOSPACE (bsc#1145099).
- usb: adutux: fix NULL-derefs on disconnect (bsc#1142635).
- usb: adutux: fix use-after-free on disconnect (bsc#1142635).
- usb: adutux: fix use-after-free on release (bsc#1051510).
- usb: chaoskey: fix use-after-free on release (bsc#1051510).
- usb: dummy-hcd: fix power budget for SuperSpeed mode (bsc#1051510).
- usb: iowarrior: fix use-after-free after driver unbind (bsc#1051510).
- usb: iowarrior: fix use-after-free on disconnect (bsc#1051510).
- usb: iowarrior: fix use-after-free on release (bsc#1051510).
- usb: ldusb: fix NULL-derefs on driver unbind (bsc#1051510).
- usb: ldusb: fix memleak on disconnect (bsc#1051510).
- usb: ldusb: fix read info leaks (bsc#1051510).
- usb: legousbtower: fix a signedness bug in tower_probe() (bsc#1051510).
- usb: legousbtower: fix deadlock on disconnect (bsc#1142635).
- usb: legousbtower: fix memleak on disconnect (bsc#1051510).
- usb: legousbtower: fix open after failed reset request (bsc#1142635).
- usb: legousbtower: fix potential NULL-deref on disconnect (bsc#1142635).
- usb: legousbtower: fix slab info leak at probe (bsc#1142635).
- usb: legousbtower: fix use-after-free on release (bsc#1051510).
- usb: microtek: fix info-leak at probe (bsc#1142635).
- usb: serial: fix runtime PM after driver unbind (bsc#1051510).
- usb: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20 (bsc#1051510).
- usb: serial: keyspan: fix NULL-derefs on open() and write() (bsc#1051510).
- usb: serial: option: add Telit FN980 compositions (bsc#1051510).
- usb: serial: option: add support for Cinterion CLS8 devices (bsc#1051510).
- usb: serial: ti_usb_3410_5052: fix port-close races (bsc#1051510).
- usb: udc: lpc32xx: fix bad bit shift operation (bsc#1051510).
- usb: usb-skeleton: fix NULL-deref on disconnect (bsc#1051510).
- usb: usb-skeleton: fix runtime PM after driver unbind (bsc#1051510).
- usb: usb-skeleton: fix use-after-free after driver unbind (bsc#1051510).
- usb: usblcd: fix I/O after disconnect (bsc#1142635).
- usb: usblp: fix runtime PM after driver unbind (bsc#1051510).
- usb: usblp: fix use-after-free on disconnect (bsc#1051510).
- usb: xhci: wait for CNR controller not ready bit in xhci resume (bsc#1051510).
- usb: yurex: Do not retry on unexpected errors (bsc#1051510).
- usb: yurex: fix NULL-derefs on disconnect (bsc#1051510).
- usbnet: ignore endpoints with invalid wMaxPacketSize (bsc#1051510).
- usbnet: sanity checking of packet sizes and device mtu (bsc#1051510).
- vfio_pci: Restore original state on release (bsc#1051510).
- vhost_net: conditionally enable tx polling (bsc#1145099).
- video: of: display_timing: Add of_node_put() in of_get_display_timing() (bsc#1051510).
- vsock: Fix a lockdep warning in __vsock_release() (networking-stable-19_10_05).
- watchdog: imx2_wdt: fix min() calculation in imx2_wdt_set_timeout (bsc#1051510).
- x86/asm: Fix MWAITX C-state hint value (bsc#1114279).
- x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area (bnc#1153969).
- x86/boot/64: Round memory hole size up to next PMD page (bnc#1153969).
- x86/mm: Use WRITE_ONCE() when setting PTEs (bsc#1114279).
- xen/netback: fix error path of xenvif_connect_data() (bsc#1065600).
- xen/pv: Fix Xen PV guest int3 handling (bsc#1153811).
- xhci: Check all endpoints for LPM timeout (bsc#1051510).
- xhci: Fix false warning message about wrong bounce buffer write length (bsc#1051510).
- xhci: Increase STS_SAVE timeout in xhci_suspend() (bsc#1051510).
- xhci: Prevent device initiated U1/U2 link pm if exit latency is too long (bsc#1051510).

		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-12"/>
	<updated date="2019-11-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046299">SUSE bug 1046299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046303">SUSE bug 1046303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046305">SUSE bug 1046305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073513">SUSE bug 1073513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086323">SUSE bug 1086323</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087092">SUSE bug 1087092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089644">SUSE bug 1089644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090631">SUSE bug 1090631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093205">SUSE bug 1093205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1096254">SUSE bug 1096254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097583">SUSE bug 1097583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097584">SUSE bug 1097584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097585">SUSE bug 1097585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097586">SUSE bug 1097586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097587">SUSE bug 1097587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1097588">SUSE bug 1097588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098291">SUSE bug 1098291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101674">SUSE bug 1101674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109158">SUSE bug 1109158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117665">SUSE bug 1117665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119461">SUSE bug 1119461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119465">SUSE bug 1119465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123034">SUSE bug 1123034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123080">SUSE bug 1123080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133140">SUSE bug 1133140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134303">SUSE bug 1134303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135642">SUSE bug 1135642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135854">SUSE bug 1135854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135873">SUSE bug 1135873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135967">SUSE bug 1135967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137040">SUSE bug 1137040</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137799">SUSE bug 1137799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137861">SUSE bug 1137861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138190">SUSE bug 1138190</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139073">SUSE bug 1139073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140090">SUSE bug 1140090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140729">SUSE bug 1140729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140845">SUSE bug 1140845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140883">SUSE bug 1140883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141600">SUSE bug 1141600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142667">SUSE bug 1142667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144338">SUSE bug 1144338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144375">SUSE bug 1144375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144449">SUSE bug 1144449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144903">SUSE bug 1144903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145099">SUSE bug 1145099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146612">SUSE bug 1146612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148410">SUSE bug 1148410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149119">SUSE bug 1149119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149853">SUSE bug 1149853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150452">SUSE bug 1150452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150457">SUSE bug 1150457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150465">SUSE bug 1150465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150875">SUSE bug 1150875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151508">SUSE bug 1151508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151807">SUSE bug 1151807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152033">SUSE bug 1152033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152624">SUSE bug 1152624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152665">SUSE bug 1152665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152685">SUSE bug 1152685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152696">SUSE bug 1152696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152697">SUSE bug 1152697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152788">SUSE bug 1152788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152790">SUSE bug 1152790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152791">SUSE bug 1152791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153112">SUSE bug 1153112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153158">SUSE bug 1153158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153236">SUSE bug 1153236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153263">SUSE bug 1153263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153476">SUSE bug 1153476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153509">SUSE bug 1153509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153607">SUSE bug 1153607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153646">SUSE bug 1153646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153681">SUSE bug 1153681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153713">SUSE bug 1153713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153717">SUSE bug 1153717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153718">SUSE bug 1153718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153719">SUSE bug 1153719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153811">SUSE bug 1153811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153969">SUSE bug 1153969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154108">SUSE bug 1154108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154189">SUSE bug 1154189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154242">SUSE bug 1154242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154268">SUSE bug 1154268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154354">SUSE bug 1154354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154372">SUSE bug 1154372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154521">SUSE bug 1154521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154578">SUSE bug 1154578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154607">SUSE bug 1154607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154608">SUSE bug 1154608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154610">SUSE bug 1154610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154611">SUSE bug 1154611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154651">SUSE bug 1154651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154737">SUSE bug 1154737</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154747">SUSE bug 1154747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154848">SUSE bug 1154848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154858">SUSE bug 1154858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154905">SUSE bug 1154905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154956">SUSE bug 1154956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155061">SUSE bug 1155061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155178">SUSE bug 1155178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155179">SUSE bug 1155179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155184">SUSE bug 1155184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155186">SUSE bug 1155186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155671">SUSE bug 1155671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/802154">SUSE bug 802154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/814594">SUSE bug 814594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/919448">SUSE bug 919448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/987367">SUSE bug 987367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/998153">SUSE bug 998153</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-12207/">CVE-2018-12207</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-10220/">CVE-2019-10220</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11135/">CVE-2019-11135</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16232/">CVE-2019-16232</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16233/">CVE-2019-16233</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16234/">CVE-2019-16234</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-16995/">CVE-2019-16995</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-17056/">CVE-2019-17056</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17133/">CVE-2019-17133</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-17666/">CVE-2019-17666</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501566" comment="cluster-md-kmp-default-4.12.14-197.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501567" comment="dlm-kmp-default-4.12.14-197.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501568" comment="gfs2-kmp-default-4.12.14-197.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501569" comment="ocfs2-kmp-default-4.12.14-197.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139107" version="1" class="patch">
	<metadata>
		<title>Security update for haproxy (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1142529" ref_url="https://bugzilla.suse.com/1142529" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14241" ref_url="https://www.suse.com/security/cve/CVE-2019-14241/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3001-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006153.html" source="SUSE-SU"/>
		<description>

  
This update for haproxy to version 2.0.5+git0.d905f49a fixes the following issues:

Security issue fixed:

- CVE-2019-14241: Fixed a cookie memory corruption problem. (bsc#1142529)

The update to 2.0.5 brings lots of features and bugfixes:

- new internal native HTTP representation called HTX, was already in 1.9 and is now enabled by default in 2.0
- end-to-end HTTP/2 support including trailers and continuation frames, as needed for gRPC ; HTTP/2 may also be upgraded from HTTP/1.1 using the H2 preface;
- server connection pooling and more advanced reuse, with ALPN protocol negotiation (already in 1.9)
- layer 7 retries, allowing to use 0-RTT and TCP Fast Open to the servers as well as on the frontend
- much more scalable multi-threading, which is even enabled by default on platforms where it was successfully tested ; by default, as many threads are started as the number of CPUs haproxy is allowed to run on. This removes a lot of configuration burden in VMs and containers
- automatic maxconn setting for the process and the frontends, directly based on the number of available FDs (easier configuration in containers and with systemd)
- logging to stdout for use in containers and systemd (already in 1.9).  Logs can now provide micro-second resolution for some events
- peers now support SSL, declaration of multiple stick-tables directly in the peers section, and synchronization of server names, not just IDs
- In master-worker mode, the master process now exposes its own CLI and can communicate with all other processes (including the stopping ones), even allowing to connect to their CLI and check their state. It is also possible to start some sidecar programs and monitor them from the master, and the master can automatically kill old processes that survived too many reloads
- the incoming connections are load-balanced between all threads depending on their load to minimize the processing time and maximize the capacity (already in 1.9)
- the SPOE connection load-balancing was significantly improved in order to reduce high percentiles of SPOA response time (already in 1.9)
- the 'random' load balancing algorithm and a power-of-two-choices variant were introduced
- statistics improvements with per-thread counters for certain things, and a prometheus exporter for all our statistics;
- lots of debugging help, it's easier to produce a core dump, there are new commands on the CLI to control various things, there is a watchdog to fail cleanly when a thread deadlock or a spinning task are detected, so overall it should provide a better experience in field and less round trips between users and developers (hence less stress during an incident).
- all 3 device detection engines are now compatible with multi-threading and can be build-tested without any external dependencies
- 'do-resolve' http-request action to perform a DNS resolution on any, sample, and resolvers now support relying on /etc/resolv.conf to match the local resolver
- log sampling and balancing : it's now possible to send 1 log every 10 to a server, or to spread the logging load over multiple log servers;
- a new SPOA agent (spoa_server) allows to interface haproxy with Python and Lua programs
- support for Solaris' event ports (equivalent of kqueue or epoll) which will significantly improve the performance there when dealing with numerous connections
- some warnings are now reported for some deprecated options that will be removed in 2.1. Since 2.0 is long term supported, there's no emergency to convert them, however if you see these warnings, you need to understand that you're among their extremely rare users and just because of this you may be taking risks by keeping them
- A new SOCKS4 server-side layer was provided ; it allows outgoing connections to be forwarded through a SOCKS4 proxy (such as ssh -D).
- priority- and latency- aware server queues : it is possible now to assign priorities to certain requests and/or to give them a time bonus or penalty to refine control of the traffic and be able to engage on SLAs.
- internally the architecture was significantly redesigned to allow to further improve performance and make it easier to implement protocols that span over multiple layers (such as QUIC). This work started in 1.9 and will continue with 2.1.
- the I/O, applets and tasks now share the same multi-threaded scheduler, giving a much better responsiveness and fairness between all tasks as is visible with the CLI which always responds instantly even under extreme loads (started in 1.9)
- the internal buffers were redesigned to ease zero-copy operations, so that it is possible to sustain a high bandwidth even when forwarding HTTP/1 to/from HTTP/2 (already in 1.9)

		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-18"/>
	<updated date="2019-11-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1142529">SUSE bug 1142529</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14241/">CVE-2019-14241</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501570" comment="haproxy-2.0.5+git0.d905f49a-8.3.5 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139108" version="1" class="patch">
	<metadata>
		<title>Security update for haproxy (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1082318" ref_url="https://bugzilla.suse.com/1082318" source="BUGZILLA"/>
		<reference ref_id="1154980" ref_url="https://bugzilla.suse.com/1154980" source="BUGZILLA"/>
		<reference ref_id="1157712" ref_url="https://bugzilla.suse.com/1157712" source="BUGZILLA"/>
		<reference ref_id="1157714" ref_url="https://bugzilla.suse.com/1157714" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18277" ref_url="https://www.suse.com/security/cve/CVE-2019-18277/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3126-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-November/006205.html" source="SUSE-SU"/>
		<description>
This update for haproxy to version 2.0.10 fixes the following issues:

HAProxy was updated to 2.0.10 	  

Security issues fixed:

- CVE-2019-18277: Fixed a potential HTTP smuggling in messages 
  with transfer-encoding header missing the 'chunked' (bsc#1154980).
- Fixed an improper handling of headers which could have led to 
  injecting LFs in H2-to-H1 transfers creating new attack space (bsc#1157712)
- Fixed an issue where HEADER frames in idle streams are not rejected and    
  thus trying to decode them HAPrpxy crashes (bsc#1157714).

Other issue addressed:   

- Macro change in the spec file (bsc#1082318)

More information regarding the release at: 
http://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95daae20954b3053ce87e	  
		</description>
<advisory from="security@suse.de">
	<issued date="2019-11-29"/>
	<updated date="2019-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1082318">SUSE bug 1082318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154980">SUSE bug 1154980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157712">SUSE bug 1157712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157714">SUSE bug 1157714</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-18277/">CVE-2019-18277</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501571" comment="haproxy-2.0.10+git0.ac198b92-8.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139109" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1048942" ref_url="https://bugzilla.suse.com/1048942" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1078248" ref_url="https://bugzilla.suse.com/1078248" source="BUGZILLA"/>
		<reference ref_id="1082635" ref_url="https://bugzilla.suse.com/1082635" source="BUGZILLA"/>
		<reference ref_id="1089644" ref_url="https://bugzilla.suse.com/1089644" source="BUGZILLA"/>
		<reference ref_id="1091041" ref_url="https://bugzilla.suse.com/1091041" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1108043" ref_url="https://bugzilla.suse.com/1108043" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113722" ref_url="https://bugzilla.suse.com/1113722" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1113994" ref_url="https://bugzilla.suse.com/1113994" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1117169" ref_url="https://bugzilla.suse.com/1117169" source="BUGZILLA"/>
		<reference ref_id="1118661" ref_url="https://bugzilla.suse.com/1118661" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1120853" ref_url="https://bugzilla.suse.com/1120853" source="BUGZILLA"/>
		<reference ref_id="1126390" ref_url="https://bugzilla.suse.com/1126390" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1131107" ref_url="https://bugzilla.suse.com/1131107" source="BUGZILLA"/>
		<reference ref_id="1134983" ref_url="https://bugzilla.suse.com/1134983" source="BUGZILLA"/>
		<reference ref_id="1135966" ref_url="https://bugzilla.suse.com/1135966" source="BUGZILLA"/>
		<reference ref_id="1135967" ref_url="https://bugzilla.suse.com/1135967" source="BUGZILLA"/>
		<reference ref_id="1137223" ref_url="https://bugzilla.suse.com/1137223" source="BUGZILLA"/>
		<reference ref_id="1137236" ref_url="https://bugzilla.suse.com/1137236" source="BUGZILLA"/>
		<reference ref_id="1138039" ref_url="https://bugzilla.suse.com/1138039" source="BUGZILLA"/>
		<reference ref_id="1140948" ref_url="https://bugzilla.suse.com/1140948" source="BUGZILLA"/>
		<reference ref_id="1142095" ref_url="https://bugzilla.suse.com/1142095" source="BUGZILLA"/>
		<reference ref_id="1142635" ref_url="https://bugzilla.suse.com/1142635" source="BUGZILLA"/>
		<reference ref_id="1142924" ref_url="https://bugzilla.suse.com/1142924" source="BUGZILLA"/>
		<reference ref_id="1143706" ref_url="https://bugzilla.suse.com/1143706" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1149448" ref_url="https://bugzilla.suse.com/1149448" source="BUGZILLA"/>
		<reference ref_id="1150466" ref_url="https://bugzilla.suse.com/1150466" source="BUGZILLA"/>
		<reference ref_id="1151067" ref_url="https://bugzilla.suse.com/1151067" source="BUGZILLA"/>
		<reference ref_id="1151548" ref_url="https://bugzilla.suse.com/1151548" source="BUGZILLA"/>
		<reference ref_id="1151900" ref_url="https://bugzilla.suse.com/1151900" source="BUGZILLA"/>
		<reference ref_id="1152782" ref_url="https://bugzilla.suse.com/1152782" source="BUGZILLA"/>
		<reference ref_id="1153628" ref_url="https://bugzilla.suse.com/1153628" source="BUGZILLA"/>
		<reference ref_id="1153811" ref_url="https://bugzilla.suse.com/1153811" source="BUGZILLA"/>
		<reference ref_id="1154043" ref_url="https://bugzilla.suse.com/1154043" source="BUGZILLA"/>
		<reference ref_id="1154058" ref_url="https://bugzilla.suse.com/1154058" source="BUGZILLA"/>
		<reference ref_id="1154124" ref_url="https://bugzilla.suse.com/1154124" source="BUGZILLA"/>
		<reference ref_id="1154355" ref_url="https://bugzilla.suse.com/1154355" source="BUGZILLA"/>
		<reference ref_id="1154526" ref_url="https://bugzilla.suse.com/1154526" source="BUGZILLA"/>
		<reference ref_id="1154601" ref_url="https://bugzilla.suse.com/1154601" source="BUGZILLA"/>
		<reference ref_id="1155021" ref_url="https://bugzilla.suse.com/1155021" source="BUGZILLA"/>
		<reference ref_id="1155689" ref_url="https://bugzilla.suse.com/1155689" source="BUGZILLA"/>
		<reference ref_id="1155692" ref_url="https://bugzilla.suse.com/1155692" source="BUGZILLA"/>
		<reference ref_id="1155836" ref_url="https://bugzilla.suse.com/1155836" source="BUGZILLA"/>
		<reference ref_id="1155897" ref_url="https://bugzilla.suse.com/1155897" source="BUGZILLA"/>
		<reference ref_id="1155921" ref_url="https://bugzilla.suse.com/1155921" source="BUGZILLA"/>
		<reference ref_id="1155982" ref_url="https://bugzilla.suse.com/1155982" source="BUGZILLA"/>
		<reference ref_id="1156187" ref_url="https://bugzilla.suse.com/1156187" source="BUGZILLA"/>
		<reference ref_id="1156258" ref_url="https://bugzilla.suse.com/1156258" source="BUGZILLA"/>
		<reference ref_id="1156429" ref_url="https://bugzilla.suse.com/1156429" source="BUGZILLA"/>
		<reference ref_id="1156466" ref_url="https://bugzilla.suse.com/1156466" source="BUGZILLA"/>
		<reference ref_id="1156471" ref_url="https://bugzilla.suse.com/1156471" source="BUGZILLA"/>
		<reference ref_id="1156494" ref_url="https://bugzilla.suse.com/1156494" source="BUGZILLA"/>
		<reference ref_id="1156609" ref_url="https://bugzilla.suse.com/1156609" source="BUGZILLA"/>
		<reference ref_id="1156700" ref_url="https://bugzilla.suse.com/1156700" source="BUGZILLA"/>
		<reference ref_id="1156729" ref_url="https://bugzilla.suse.com/1156729" source="BUGZILLA"/>
		<reference ref_id="1156882" ref_url="https://bugzilla.suse.com/1156882" source="BUGZILLA"/>
		<reference ref_id="1156928" ref_url="https://bugzilla.suse.com/1156928" source="BUGZILLA"/>
		<reference ref_id="1157032" ref_url="https://bugzilla.suse.com/1157032" source="BUGZILLA"/>
		<reference ref_id="1157038" ref_url="https://bugzilla.suse.com/1157038" source="BUGZILLA"/>
		<reference ref_id="1157042" ref_url="https://bugzilla.suse.com/1157042" source="BUGZILLA"/>
		<reference ref_id="1157044" ref_url="https://bugzilla.suse.com/1157044" source="BUGZILLA"/>
		<reference ref_id="1157045" ref_url="https://bugzilla.suse.com/1157045" source="BUGZILLA"/>
		<reference ref_id="1157046" ref_url="https://bugzilla.suse.com/1157046" source="BUGZILLA"/>
		<reference ref_id="1157049" ref_url="https://bugzilla.suse.com/1157049" source="BUGZILLA"/>
		<reference ref_id="1157070" ref_url="https://bugzilla.suse.com/1157070" source="BUGZILLA"/>
		<reference ref_id="1157115" ref_url="https://bugzilla.suse.com/1157115" source="BUGZILLA"/>
		<reference ref_id="1157143" ref_url="https://bugzilla.suse.com/1157143" source="BUGZILLA"/>
		<reference ref_id="1157145" ref_url="https://bugzilla.suse.com/1157145" source="BUGZILLA"/>
		<reference ref_id="1157158" ref_url="https://bugzilla.suse.com/1157158" source="BUGZILLA"/>
		<reference ref_id="1157160" ref_url="https://bugzilla.suse.com/1157160" source="BUGZILLA"/>
		<reference ref_id="1157162" ref_url="https://bugzilla.suse.com/1157162" source="BUGZILLA"/>
		<reference ref_id="1157171" ref_url="https://bugzilla.suse.com/1157171" source="BUGZILLA"/>
		<reference ref_id="1157173" ref_url="https://bugzilla.suse.com/1157173" source="BUGZILLA"/>
		<reference ref_id="1157178" ref_url="https://bugzilla.suse.com/1157178" source="BUGZILLA"/>
		<reference ref_id="1157180" ref_url="https://bugzilla.suse.com/1157180" source="BUGZILLA"/>
		<reference ref_id="1157182" ref_url="https://bugzilla.suse.com/1157182" source="BUGZILLA"/>
		<reference ref_id="1157183" ref_url="https://bugzilla.suse.com/1157183" source="BUGZILLA"/>
		<reference ref_id="1157184" ref_url="https://bugzilla.suse.com/1157184" source="BUGZILLA"/>
		<reference ref_id="1157191" ref_url="https://bugzilla.suse.com/1157191" source="BUGZILLA"/>
		<reference ref_id="1157193" ref_url="https://bugzilla.suse.com/1157193" source="BUGZILLA"/>
		<reference ref_id="1157197" ref_url="https://bugzilla.suse.com/1157197" source="BUGZILLA"/>
		<reference ref_id="1157298" ref_url="https://bugzilla.suse.com/1157298" source="BUGZILLA"/>
		<reference ref_id="1157304" ref_url="https://bugzilla.suse.com/1157304" source="BUGZILLA"/>
		<reference ref_id="1157307" ref_url="https://bugzilla.suse.com/1157307" source="BUGZILLA"/>
		<reference ref_id="1157324" ref_url="https://bugzilla.suse.com/1157324" source="BUGZILLA"/>
		<reference ref_id="1157333" ref_url="https://bugzilla.suse.com/1157333" source="BUGZILLA"/>
		<reference ref_id="1157386" ref_url="https://bugzilla.suse.com/1157386" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1157463" ref_url="https://bugzilla.suse.com/1157463" source="BUGZILLA"/>
		<reference ref_id="1157499" ref_url="https://bugzilla.suse.com/1157499" source="BUGZILLA"/>
		<reference ref_id="1157678" ref_url="https://bugzilla.suse.com/1157678" source="BUGZILLA"/>
		<reference ref_id="1157698" ref_url="https://bugzilla.suse.com/1157698" source="BUGZILLA"/>
		<reference ref_id="1157778" ref_url="https://bugzilla.suse.com/1157778" source="BUGZILLA"/>
		<reference ref_id="1157908" ref_url="https://bugzilla.suse.com/1157908" source="BUGZILLA"/>
		<reference ref_id="1158049" ref_url="https://bugzilla.suse.com/1158049" source="BUGZILLA"/>
		<reference ref_id="1158063" ref_url="https://bugzilla.suse.com/1158063" source="BUGZILLA"/>
		<reference ref_id="1158064" ref_url="https://bugzilla.suse.com/1158064" source="BUGZILLA"/>
		<reference ref_id="1158065" ref_url="https://bugzilla.suse.com/1158065" source="BUGZILLA"/>
		<reference ref_id="1158066" ref_url="https://bugzilla.suse.com/1158066" source="BUGZILLA"/>
		<reference ref_id="1158067" ref_url="https://bugzilla.suse.com/1158067" source="BUGZILLA"/>
		<reference ref_id="1158068" ref_url="https://bugzilla.suse.com/1158068" source="BUGZILLA"/>
		<reference ref_id="1158071" ref_url="https://bugzilla.suse.com/1158071" source="BUGZILLA"/>
		<reference ref_id="1158082" ref_url="https://bugzilla.suse.com/1158082" source="BUGZILLA"/>
		<reference ref_id="1158381" ref_url="https://bugzilla.suse.com/1158381" source="BUGZILLA"/>
		<reference ref_id="1158394" ref_url="https://bugzilla.suse.com/1158394" source="BUGZILLA"/>
		<reference ref_id="1158398" ref_url="https://bugzilla.suse.com/1158398" source="BUGZILLA"/>
		<reference ref_id="1158407" ref_url="https://bugzilla.suse.com/1158407" source="BUGZILLA"/>
		<reference ref_id="1158410" ref_url="https://bugzilla.suse.com/1158410" source="BUGZILLA"/>
		<reference ref_id="1158413" ref_url="https://bugzilla.suse.com/1158413" source="BUGZILLA"/>
		<reference ref_id="1158417" ref_url="https://bugzilla.suse.com/1158417" source="BUGZILLA"/>
		<reference ref_id="1158427" ref_url="https://bugzilla.suse.com/1158427" source="BUGZILLA"/>
		<reference ref_id="1158445" ref_url="https://bugzilla.suse.com/1158445" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-0154" ref_url="https://www.suse.com/security/cve/CVE-2019-0154/" source="CVE"/>
		<reference ref_id="CVE-2019-14895" ref_url="https://www.suse.com/security/cve/CVE-2019-14895/" source="CVE"/>
		<reference ref_id="CVE-2019-14901" ref_url="https://www.suse.com/security/cve/CVE-2019-14901/" source="CVE"/>
		<reference ref_id="CVE-2019-15916" ref_url="https://www.suse.com/security/cve/CVE-2019-15916/" source="CVE"/>
		<reference ref_id="CVE-2019-16231" ref_url="https://www.suse.com/security/cve/CVE-2019-16231/" source="CVE"/>
		<reference ref_id="CVE-2019-17055" ref_url="https://www.suse.com/security/cve/CVE-2019-17055/" source="CVE"/>
		<reference ref_id="CVE-2019-18660" ref_url="https://www.suse.com/security/cve/CVE-2019-18660/" source="CVE"/>
		<reference ref_id="CVE-2019-18683" ref_url="https://www.suse.com/security/cve/CVE-2019-18683/" source="CVE"/>
		<reference ref_id="CVE-2019-18805" ref_url="https://www.suse.com/security/cve/CVE-2019-18805/" source="CVE"/>
		<reference ref_id="CVE-2019-18809" ref_url="https://www.suse.com/security/cve/CVE-2019-18809/" source="CVE"/>
		<reference ref_id="CVE-2019-19046" ref_url="https://www.suse.com/security/cve/CVE-2019-19046/" source="CVE"/>
		<reference ref_id="CVE-2019-19049" ref_url="https://www.suse.com/security/cve/CVE-2019-19049/" source="CVE"/>
		<reference ref_id="CVE-2019-19052" ref_url="https://www.suse.com/security/cve/CVE-2019-19052/" source="CVE"/>
		<reference ref_id="CVE-2019-19056" ref_url="https://www.suse.com/security/cve/CVE-2019-19056/" source="CVE"/>
		<reference ref_id="CVE-2019-19057" ref_url="https://www.suse.com/security/cve/CVE-2019-19057/" source="CVE"/>
		<reference ref_id="CVE-2019-19058" ref_url="https://www.suse.com/security/cve/CVE-2019-19058/" source="CVE"/>
		<reference ref_id="CVE-2019-19060" ref_url="https://www.suse.com/security/cve/CVE-2019-19060/" source="CVE"/>
		<reference ref_id="CVE-2019-19062" ref_url="https://www.suse.com/security/cve/CVE-2019-19062/" source="CVE"/>
		<reference ref_id="CVE-2019-19063" ref_url="https://www.suse.com/security/cve/CVE-2019-19063/" source="CVE"/>
		<reference ref_id="CVE-2019-19065" ref_url="https://www.suse.com/security/cve/CVE-2019-19065/" source="CVE"/>
		<reference ref_id="CVE-2019-19067" ref_url="https://www.suse.com/security/cve/CVE-2019-19067/" source="CVE"/>
		<reference ref_id="CVE-2019-19068" ref_url="https://www.suse.com/security/cve/CVE-2019-19068/" source="CVE"/>
		<reference ref_id="CVE-2019-19073" ref_url="https://www.suse.com/security/cve/CVE-2019-19073/" source="CVE"/>
		<reference ref_id="CVE-2019-19074" ref_url="https://www.suse.com/security/cve/CVE-2019-19074/" source="CVE"/>
		<reference ref_id="CVE-2019-19075" ref_url="https://www.suse.com/security/cve/CVE-2019-19075/" source="CVE"/>
		<reference ref_id="CVE-2019-19077" ref_url="https://www.suse.com/security/cve/CVE-2019-19077/" source="CVE"/>
		<reference ref_id="CVE-2019-19078" ref_url="https://www.suse.com/security/cve/CVE-2019-19078/" source="CVE"/>
		<reference ref_id="CVE-2019-19080" ref_url="https://www.suse.com/security/cve/CVE-2019-19080/" source="CVE"/>
		<reference ref_id="CVE-2019-19081" ref_url="https://www.suse.com/security/cve/CVE-2019-19081/" source="CVE"/>
		<reference ref_id="CVE-2019-19082" ref_url="https://www.suse.com/security/cve/CVE-2019-19082/" source="CVE"/>
		<reference ref_id="CVE-2019-19083" ref_url="https://www.suse.com/security/cve/CVE-2019-19083/" source="CVE"/>
		<reference ref_id="CVE-2019-19227" ref_url="https://www.suse.com/security/cve/CVE-2019-19227/" source="CVE"/>
		<reference ref_id="CVE-2019-19524" ref_url="https://www.suse.com/security/cve/CVE-2019-19524/" source="CVE"/>
		<reference ref_id="CVE-2019-19525" ref_url="https://www.suse.com/security/cve/CVE-2019-19525/" source="CVE"/>
		<reference ref_id="CVE-2019-19528" ref_url="https://www.suse.com/security/cve/CVE-2019-19528/" source="CVE"/>
		<reference ref_id="CVE-2019-19529" ref_url="https://www.suse.com/security/cve/CVE-2019-19529/" source="CVE"/>
		<reference ref_id="CVE-2019-19530" ref_url="https://www.suse.com/security/cve/CVE-2019-19530/" source="CVE"/>
		<reference ref_id="CVE-2019-19531" ref_url="https://www.suse.com/security/cve/CVE-2019-19531/" source="CVE"/>
		<reference ref_id="CVE-2019-19534" ref_url="https://www.suse.com/security/cve/CVE-2019-19534/" source="CVE"/>
		<reference ref_id="CVE-2019-19536" ref_url="https://www.suse.com/security/cve/CVE-2019-19536/" source="CVE"/>
		<reference ref_id="CVE-2019-19543" ref_url="https://www.suse.com/security/cve/CVE-2019-19543/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006266.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445).
- CVE-2019-19543: There was a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c (bnc#1158427).
- CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver (bnc#1158417).
- CVE-2019-19530: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver (bnc#1158410).
- CVE-2019-19536: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver (bnc#1158394).
- CVE-2019-19524: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver (bnc#1158413).
- CVE-2019-19528: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver (bnc#1158407).
- CVE-2019-19534: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver (bnc#1158398).
- CVE-2019-19529: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c driver (bnc#1158381).
- CVE-2019-14901: A heap overflow flaw was found in the Linux kernel in Marvell WiFi chip driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system (bnc#1157042).
- CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could have allowed the remote device to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1157158).
- CVE-2019-18660: The Linux kernel on powerpc allowed Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c (bnc#1157038).
- CVE-2019-18683: An issue was discovered in drivers/media/platform/vivid in the Linux kernel. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free (bnc#1155897).
- CVE-2019-18809: A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1156258).
- CVE-2019-19046: A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure (bnc#1157304).
- CVE-2019-19078: A memory leak in the ath10k_usb_hif_tx_sg() function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157032).
- CVE-2019-19062: A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures (bnc#1157333).
- CVE-2019-19057: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures (bnc#1157197).
- CVE-2019-19056: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures (bnc#1157197).
- CVE-2019-19068: A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157307).
- CVE-2019-19063: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157298).
- CVE-2019-19227: In the AppleTalk subsystem in the Linux kernel there was a potential NULL pointer dereference because register_snap_client may return NULL. This will lead to denial of service in net/appletalk/aarp.c and net/appletalk/ddp.c, as demonstrated by unregister_snap_client (bnc#1157678).
- CVE-2019-19081: A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157045).
- CVE-2019-19080: Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157044).
- CVE-2019-19065: A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures (bnc#1157191).
- CVE-2019-19077: A memory leak in the bnxt_re_create_srq() function in drivers/infiniband/hw/bnxt_re/ib_verbs.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering copy to udata failures (bnc#1157171).
- CVE-2019-19052: A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157324).
- CVE-2019-19067: Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures (bsc#1157180).
- CVE-2019-19060: A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157178).
- CVE-2019-19049: A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering of_fdt_unflatten_tree() failures (bsc#1157173).
- CVE-2019-19075: A memory leak in the ca8210_probe() function in drivers/net/ieee802154/ca8210.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering ca8210_get_platform_data() failures (bnc#1157162).
- CVE-2019-19058: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures (bnc#1157145).
- CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) (bnc#1157143).
- CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel allowed attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function (bnc#1157070).
- CVE-2019-19083: Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel allowed attackers to cause a denial of service (memory consumption). This affects the dce112_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c, the dce100_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, the dcn20_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dcn20/dcn20_resource.c, the dce120_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, and the dce80_clock_source_create() function in drivers/gpu/drm/amd/display/dc/dce80/dce80_resource.c (bnc#1157049).
- CVE-2019-19082: Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel allowed attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce120/dce120_resource.c, the dce110_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce110/dce110_resource.c, the dce100_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce100/dce100_resource.c, the dcn10_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dcn10/dcn10_resource.c, and the dce112_create_resource_pool() function in drivers/gpu/drm/amd/display/dc/dce112/dce112_resource.c (bnc#1157046).
- CVE-2019-15916: An issue was discovered in the Linux kernel There was a memory leak in register_queue_kobjects() in net/core/net-sysfs.c, which will cause denial of service (bnc#1149448).
- CVE-2019-0154: Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1135966).
- CVE-2019-16231: drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 did not check the alloc_workqueue return value, leading to a NULL pointer dereference (bnc#1150466).
- CVE-2019-18805: An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel There was a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact (bnc#1156187).
- CVE-2019-17055: base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket (bnc#1152782).

The following non-security bugs were fixed:

- bnxt_en: Update firmware interface spec. to 1.10.0.47 (bsc#1157115)
- ACPI / LPSS: Exclude I2C busses shared with PUNIT from pmc_atom_d3_mask (bsc#1051510).
- ACPI / SBS: Fix rare oops when removing modules (bsc#1051510).
- ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug bridge (bsc#1111666).
- ACPICA: Never run _REG on system_memory and system_IO (bsc#1051510).
- ACPICA: Use %d for signed int print formatting instead of %u (bsc#1051510).
- ALSA: 6fire: Drop the dead code (git-fixes).
- ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series (git-fixes).
- ALSA: cs4236: fix error return comparison of an unsigned integer (git-fixes).
- ALSA: firewire-motu: Correct a typo in the clock proc string (git-fixes).
- ALSA: hda - Add mute led support for HP ProBook 645 G4 (git-fixes).
- ALSA: hda - Fix pending unsol events at shutdown (git-fixes).
- ALSA: hda/ca0132 - Fix possible workqueue stall (bsc#1155836).
- ALSA: hda/hdmi - Clear codec-&gt;relaxed_resume flag at unbinding (git-fixes).
- ALSA: hda/intel: add CometLake PCI IDs (bsc#1156729).
- ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC (git-fixes).
- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop (git-fixes).
- ALSA: hda/realtek - Move some alc236 pintbls to fallback table (git-fixes).
- ALSA: hda/realtek - Move some alc256 pintbls to fallback table (git-fixes).
- ALSA: hda: Add Cometlake-S PCI ID (git-fixes).
- ALSA: hda: Fix racy display power access (bsc#1156928).
- ALSA: hda: hdmi - fix port numbering for ICL and TGL platforms (git-fixes).
- ALSA: hda: hdmi - remove redundant code comments (git-fixes).
- ALSA: i2c/cs8427: Fix int to char conversion (bsc#1051510).
- ALSA: intel8x0m: Register irq handler after register initializations (bsc#1051510).
- ALSA: pcm: Fix stream lock usage in snd_pcm_period_elapsed() (git-fixes).
- ALSA: pcm: Yet another missing check of non-cached buffer type (bsc#1111666).
- ALSA: pcm: signedness bug in snd_pcm_plug_alloc() (bsc#1051510).
- ALSA: seq: Do error checks at creating system ports (bsc#1051510).
- ALSA: timer: Fix incorrectly assigned timer instance (git-fixes).
- ALSA: usb-audio: Add skip_validation option (git-fixes).
- ALSA: usb-audio: Fix Focusrite Scarlett 6i6 gen1 - input handling (git-fixes).
- ALSA: usb-audio: Fix NULL dereference at parsing BADD (git-fixes).
- ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() (git-fixes).
- ALSA: usb-audio: Fix incorrect size check for processing/extension units (git-fixes).
- ALSA: usb-audio: Fix missing error check at mixer resolution test (git-fixes).
- ALSA: usb-audio: not submit urb for stopped endpoint (git-fixes).
- ALSA: usb-audio: sound: usb: usb true/false for bool return type (git-fixes).
- ASoC: Intel: hdac_hdmi: Limit sampling rates at dai creation (bsc#1051510).
- ASoC: davinci-mcasp: Handle return value of devm_kasprintf (stable 4.14.y).
- ASoC: davinci: Kill BUG_ON() usage (stable 4.14.y).
- ASoC: dpcm: Properly initialise hw-&gt;rate_max (bsc#1051510).
- ASoC: kirkwood: fix external clock probe defer (git-fixes).
- ASoC: msm8916-wcd-analog: Fix RX1 selection in RDAC2 MUX (git-fixes).
- ASoC: sgtl5000: avoid division by zero if lo_vag is zero (bsc#1051510).
- ASoC: tegra_sgtl5000: fix device_node refcounting (bsc#1051510).
- ASoC: tlv320aic31xx: Handle inverted BCLK in non-DSP modes (stable 4.14.y).
- ASoC: tlv320dac31xx: mark expected switch fall-through (stable 4.14.y).
- Bluetooth: Fix invalid-free in bcsp_close() (git-fixes).
- Bluetooth: Fix memory leak in hci_connect_le_scan (bsc#1051510).
- Bluetooth: L2CAP: Detect if remote is not able to use the whole MPS (bsc#1051510).
- Bluetooth: btusb: fix PM leak in error case of setup (bsc#1051510).
- Bluetooth: delete a stray unlock (bsc#1051510).
- Bluetooth: hci_core: fix init for HCI_USER_CHANNEL (bsc#1051510).
- Btrfs: fix log context list corruption after rename exchange operation (bsc#1156494).
- CIFS: Fix SMB2 oplock break processing (bsc#1144333, bsc#1154355).
- CIFS: Fix oplock handling for SMB 2.1+ protocols (bsc#1144333, bsc#1154355).
- CIFS: Fix retry mid list corruption on reconnects (bsc#1144333, bsc#1154355).
- CIFS: Fix use after free of file info structures (bsc#1144333, bsc#1154355).
- CIFS: Force reval dentry if LOOKUP_REVAL flag is set (bsc#1144333, bsc#1154355).
- CIFS: Force revalidate inode when dentry is stale (bsc#1144333, bsc#1154355).
- CIFS: Gracefully handle QueryInfo errors during open (bsc#1144333, bsc#1154355).
- CIFS: avoid using MID 0xFFFF (bsc#1144333, bsc#1154355).
- CIFS: fix max ea value size (bsc#1144333, bsc#1154355).
- Documentation: debugfs: Document debugfs helper for unsigned long values (git-fixes).
- Documentation: x86: convert protection-keys.txt to reST (bsc#1078248).
- EDAC/ghes: Fix Use after free in ghes_edac remove path (bsc#1114279).
- HID: Add ASUS T100CHI keyboard dock battery quirks (bsc#1051510).
- HID: Add quirk for Microsoft PIXART OEM mouse (bsc#1051510).
- HID: Fix assumption that devices have inputs (git-fixes).
- HID: asus: Add T100CHI bluetooth keyboard dock special keys mapping (bsc#1051510).
- HID: wacom: generic: Treat serial number and related fields as unsigned (git-fixes).
- IB/mlx5: Free mpi in mp_slave mode (bsc#1103991).
- IB/mlx5: Support MLX5_CMD_OP_QUERY_LAG as a DEVX general command (bsc#1103991).
- Input: ff-memless - kill timer in destroy() (bsc#1051510).
- Input: silead - try firmware reload after unsuccessful resume (bsc#1051510).
- Input: st1232 - set INPUT_PROP_DIRECT property (bsc#1051510).
- Input: synaptics-rmi4 - clear IRQ enables for F54 (bsc#1051510).
- Input: synaptics-rmi4 - destroy F54 poller workqueue when removing (bsc#1051510).
- Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver (bsc#1051510).
- Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) (bsc#1051510).
- Input: synaptics-rmi4 - fix video buffer size (git-fixes).
- KVM: SVM: Guard against DEACTIVATE when performing WBINVD/DF_FLUSH (bsc#1114279).
- KVM: SVM: Serialize access to the SEV ASID bitmap (bsc#1114279).
- KVM: VMX: Consider PID.PIR to determine if vCPU has pending interrupts (bsc#1158064).
- KVM: VMX: Fix conditions for guest IA32_XSS support (bsc#1158065).
- KVM: s390: fix __insn32_query() inline assembly (git-fixes).
- KVM: s390: vsie: Do not shadow CRYCB when no AP and no keys (git-fixes).
- KVM: s390: vsie: Return correct values for Invalid CRYCB format (git-fixes).
- KVM: x86/mmu: Take slots_lock when using kvm_mmu_zap_all_fast() (bsc#1158067).
- KVM: x86: Introduce vcpu-&gt;arch.xsaves_enabled (bsc#1158066).
- NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error (git-fixes).
- PCI/ACPI: Correct error message for ASPM disabling (bsc#1051510).
- PCI/MSI: Fix incorrect MSI-X masking on resume (bsc#1051510).
- PCI/PM: Clear PCIe PME Status even for legacy power management (bsc#1111666).
- PCI/PME: Fix possible use-after-free on remove (git-fixes).
- PCI/PTM: Remove spurious 'd' from granularity message (bsc#1051510).
- PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3 (bsc#1051510).
- PCI: Fix Intel ACS quirk UPDCR register address (bsc#1051510).
- PCI: dwc: Fix find_next_bit() usage (bsc#1051510).
- PCI: pciehp: Do not disable interrupt twice on suspend (bsc#1111666).
- PCI: rcar: Fix missing MACCTLR register setting in initialization sequence (bsc#1051510).
- PCI: sysfs: Ignore lockdep for remove attribute (git-fixes).
- PCI: tegra: Enable Relaxed Ordering only for Tegra20 and Tegra30 (git-fixes).
- PM / devfreq: Check NULL governor in available_governors_show (git-fixes).
- PM / devfreq: Lock devfreq in trans_stat_show (git-fixes).
- PM / devfreq: exynos-bus: Correct clock enable sequence (bsc#1051510).
- PM / devfreq: passive: Use non-devm notifiers (bsc#1051510).
- PM / devfreq: passive: fix compiler warning (bsc#1051510).
- PM / hibernate: Check the success of generating md5 digest before hibernation (bsc#1051510).
- RDMA/bnxt_re: Fix stat push into dma buffer on gen p5 devices (bsc#1157115)
- RDMA/efa: Add Amazon EFA driver (jsc#SLE-4805)
- RDMA/efa: Clear the admin command buffer prior to its submission (git-fixes) Patch was already picked through Amazon driver repo but was not marked with a Git-commit tag
- RDMA/hns: Fix comparison of unsigned long variable 'end' with less than zero (bsc#1104427 bsc#1137236).
- RDMA/hns: Fix wrong assignment of qp_access_flags (bsc#1104427 ).
- RDMA/restrack: Track driver QP types in resource tracker (jsc#SLE-4805)
- Remove patches that reportedly cause regression (bsc#1155689 ltc#182047).
- Revert 'drm/etnaviv: fix dumping of iommuv2 (bsc#1113722)' This reverts commit 71e3a1b8d8cf73f711f3e4100aa51f68e631f94f.
- Revert synaptics-rmi4 patch due to regression (bsc#1155982) Also blacklisting it
- UAS: Revert commit 3ae62a42090f ('UAS: fix alignment of scatter/gather segments').
- USB: chaoskey: fix error case of a timeout (git-fixes).
- USB: gadget: Reject endpoints with 0 maxpacket value (bsc#1051510).
- USB: ldusb: fix control-message timeout (bsc#1051510).
- USB: ldusb: fix ring-buffer locking (bsc#1051510).
- USB: misc: appledisplay: fix backlight update_status return code (bsc#1051510).
- USB: serial: mos7720: fix remote wakeup (git-fixes).
- USB: serial: mos7840: add USB ID to support Moxa UPort 2210 (bsc#1051510).
- USB: serial: mos7840: fix remote wakeup (git-fixes).
- USB: serial: option: add support for DW5821e with eSIM support (bsc#1051510).
- USB: serial: option: add support for Foxconn T77W968 LTE modules (bsc#1051510).
- USB: serial: whiteheat: fix line-speed endianness (bsc#1051510).
- USB: serial: whiteheat: fix potential slab corruption (bsc#1051510).
- USBIP: add config dependency for SGL_ALLOC (git-fixes).
- acpi/nfit, device-dax: Identify differentiated memory with a unique numa-node (bsc#1158071).
- appledisplay: fix error handling in the scheduled work (git-fixes).
- arm64: Update config files. (bsc#1156466) Enable HW_RANDOM_OMAP driver and mark driver omap-rng as supported.
- ata: ep93xx: Use proper enums for directions (bsc#1051510).
- ath10k: Correct error handling of dma_map_single() (bsc#1111666).
- ath10k: allocate small size dma memory in ath10k_pci_diag_write_mem (bsc#1111666).
- ath10k: assign 'n_cipher_suites = 11' for WCN3990 to enable WPA3 (bsc#1111666).
- ath10k: avoid possible memory access violation (bsc#1111666).
- ath10k: fix kernel panic by moving pci flush after napi_disable (bsc#1051510).
- ath10k: fix vdev-start timeout on error (bsc#1051510).
- ath10k: limit available channels via DT ieee80211-freq-limit (bsc#1051510).
- ath10k: skip resetting rx filter for WCN3990 (bsc#1111666).
- ath10k: wmi: disable softirq's while calling ieee80211_rx (bsc#1051510).
- ath9k: Fix a locking bug in ath9k_add_interface() (bsc#1051510).
- ath9k: add back support for using active monitor interfaces for tx99 (bsc#1051510).
- ath9k: fix reporting calculated new FFT upper max (bsc#1051510).
- ath9k: fix tx99 with monitor mode interface (bsc#1051510).
- ath9k_hw: fix uninitialized variable data (bsc#1051510).
- ax88172a: fix information leak on short answers (bsc#1051510).
- backlight: lm3639: Unconditionally call led_classdev_unregister (bsc#1051510).
- bnxt_en: Increase timeout for HWRM_DBG_COREDUMP_XX commands (bsc#1104745).
- bnxt_en: Update firmware interface spec. to 1.10.0.89 (bsc#1157115)
- bnxt_en: Update firmware interface to 1.10.0.69 (bsc#1157115)
- bpf: Fix use after free in subprog's jited symbol removal (bsc#1109837).
- bpf: fix BTF limits (bsc#1109837).
- bpf: fix BTF verification of enums (bsc#1109837).
- brcmfmac: fix full timeout waiting for action frame on-channel tx (bsc#1051510).
- brcmfmac: fix wrong strnchr usage (bsc#1111666).
- brcmfmac: increase buffer for obtaining firmware capabilities (bsc#1111666).
- brcmfmac: reduce timeout for action frame scan (bsc#1051510).
- brcmsmac: AP mode: update beacon when TIM changes (bsc#1051510).
- brcmsmac: Use kvmalloc() for ucode allocations (bsc#1111666).
- brcmsmac: never log 'tid x is not agg'able' by default (bsc#1051510).
- can: c_can: c_can_poll(): only read status register after status IRQ (git-fixes).
- can: dev: call netif_carrier_off() in register_candev() (bsc#1051510).
- can: mcba_usb: fix use-after-free on disconnect (git-fixes).
- can: peak_usb: fix a potential out-of-sync while decoding packets (git-fixes).
- can: peak_usb: fix slab info leak (git-fixes).
- can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue beyond skb_queue_len_max (git-fixes).
- can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak (git-fixes).
- can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb mem leak (git-fixes).
- can: usb_8dev: fix use-after-free on disconnect (git-fixes).
- ceph: add missing check in d_revalidate snapdir handling (bsc#1157183).
- ceph: do not try to handle hashed dentries in non-O_CREAT atomic_open (bsc#1157184).
- ceph: fix use-after-free in __ceph_remove_cap() (bsc#1154058).
- ceph: just skip unrecognized info in ceph_reply_info_extra (bsc#1157182).
- cfg80211: Avoid regulatory restore when COUNTRY_IE_IGNORE is set (bsc#1051510).
- cfg80211: Prevent regulatory restore during STA disconnect in concurrent interfaces (bsc#1051510).
- cfg80211: call disconnect_wk when AP stops (bsc#1051510).
- cfg80211: validate wmm rule when setting (bsc#1111666).
- cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs (bsc#1144333, bsc#1154355).
- cifs: Fix missed free operations (bsc#1144333, bsc#1154355).
- cifs: Use kzfree() to zero out the password (bsc#1144333, bsc#1154355).
- cifs: add a helper to find an existing readable handle to a file (bsc#1144333, bsc#1154355).
- cifs: create a helper to find a writeable handle by path name (bsc#1144333, bsc#1154355).
- cifs: move cifsFileInfo_put logic into a work-queue (bsc#1144333, bsc#1154355).
- cifs: prepare SMB2_Flush to be usable in compounds (bsc#1144333, bsc#1154355).
- cifs: set domainName when a domain-key is used in multiuser (bsc#1144333, bsc#1154355).
- cifs: use cifsInodeInfo-&gt;open_file_lock while iterating to avoid a panic (bsc#1144333, bsc#1154355).
- cifs: use existing handle for compound_op(OP_SET_INFO) when possible (bsc#1144333, bsc#1154355).
- clk: at91: avoid sleeping early (git-fixes).
- clk: pxa: fix one of the pxa RTC clocks (bsc#1051510).
- clk: samsung: Use clk_hw API for calling clk framework from clk notifiers (bsc#1051510).
- clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume (bsc#1051510).
- clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume (git-fixes).
- clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18 (git-fixes).
- clocksource/drivers/sh_cmt: Fix clocksource width for 32-bit machines (bsc#1051510).
- clocksource/drivers/sh_cmt: Fixup for 64-bit machines (bsc#1051510).
- compat_ioctl: handle SIOCOUTQNSD (bsc#1051510).
- component: fix loop condition to call unbind() if bind() fails (bsc#1051510).
- cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init() (bsc#1051510).
- cpufreq: Skip cpufreq resume if it's not suspended (bsc#1051510).
- cpufreq: intel_pstate: Register when ACPI PCCH is present (bsc#1051510).
- cpufreq: powernv: fix stack bloat and hard limit on number of CPUs (bsc#1051510).
- cpufreq: ti-cpufreq: add missing of_node_put() (bsc#1051510).
- cpupower : Fix cpupower working when cpu0 is offline (bsc#1051510).
- cpupower : frequency-set -r option misses the last cpu in related cpu list (bsc#1051510).
- cpupower: Fix coredump on VMWare (bsc#1051510).
- crypto: af_alg - cast ki_complete ternary op to int (bsc#1051510).
- crypto: crypto4xx - fix double-free in crypto4xx_destroy_sdr (bsc#1051510).
- crypto: ecdh - fix big endian bug in ECC library (bsc#1051510).
- crypto: fix a memory leak in rsa-kcs1pad's encryption mode (bsc#1051510).
- crypto: geode-aes - switch to skcipher for cbc(aes) fallback (bsc#1051510).
- crypto: mxs-dcp - Fix AES issues (bsc#1051510).
- crypto: mxs-dcp - Fix SHA null hashes and output length (bsc#1051510).
- crypto: mxs-dcp - make symbols 'sha1_null_hash' and 'sha256_null_hash' static (bsc#1051510).
- crypto: s5p-sss: Fix Fix argument list alignment (bsc#1051510).
- crypto: tgr192 - remove unneeded semicolon (bsc#1051510).
- cw1200: Fix a signedness bug in cw1200_load_firmware() (bsc#1051510).
- cxgb4: fix panic when attaching to ULD fail (networking-stable-19_11_05).
- cxgb4: request the TX CIDX updates to status page (bsc#1127354 bsc#1127371).
- dccp: do not leak jiffies on the wire (networking-stable-19_11_05).
- dlm: do not leak kernel pointer to userspace (bsc#1051510).
- dlm: fix invalid free (bsc#1051510).
- dmaengine: bcm2835: Print error in case setting DMA mask fails (bsc#1051510).
- dmaengine: dma-jz4780: Do not depend on MACH_JZ4780 (bsc#1051510).
- dmaengine: dma-jz4780: Further residue status fix (bsc#1051510).
- dmaengine: ep93xx: Return proper enum in ep93xx_dma_chan_direction (bsc#1051510).
- dmaengine: imx-sdma: fix size check for sdma script_number (bsc#1051510).
- dmaengine: imx-sdma: fix use-after-free on probe error path (bsc#1051510).
- dmaengine: rcar-dmac: set scatter/gather max segment size (bsc#1051510).
- dmaengine: timb_dma: Use proper enum in td_prep_slave_sg (bsc#1051510).
- docs: move protection-keys.rst to the core-api book (bsc#1078248).
- drm/amd/display: fix odm combine pipe reset (bsc#1111666).
- drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported (bsc#1113956)
- drm/amdgpu/powerplay/vega10: allow undervolting in p7 (bsc#1111666).
- drm/amdgpu: fix bad DMA from INTERRUPT_CNTL2 (bsc#1111666).
- drm/amdgpu: fix memory leak (bsc#1111666).
- drm/etnaviv: fix dumping of iommuv2 (bsc#1113722)
- drm/i915/cmdparser: Add support for backward jumps (bsc#1135967)
- drm/i915/cmdparser: Ignore Length operands during command matching (bsc#1135967)
- drm/i915/cmdparser: Use explicit goto for error paths (bsc#1135967)
- drm/i915/cml: Add second PCH ID for CMP (bsc#1111666).
- drm/i915/gen8+: Add RC6 CTX corruption WA (bsc#1135967)
- drm/i915/gtt: Add read only pages to gen8_pte_encode (bsc#1135967)
- drm/i915/gtt: Disable read-only support under GVT (bsc#1135967)
- drm/i915/gtt: Read-only pages for insert_entries on bdw (bsc#1135967)
- drm/i915/gvt: fix dropping obj reference twice (bsc#1111666).
- drm/i915/ilk: Fix warning when reading emon_status with no output (bsc#1111666).
- drm/i915/pmu: 'Frequency' is reported as accumulated cycles (bsc#1112178)
- drm/i915: Add gen9 BCS cmdparsing (bsc#1135967)
- drm/i915: Add support for mandatory cmdparsing (bsc#1135967)
- drm/i915: Allow parsing of unsized batches (bsc#1135967)
- drm/i915: Disable Secure Batches for gen6+
- drm/i915: Do not dereference request if it may have been retired when (bsc#1142635)
- drm/i915: Fix and improve MCR selection logic (bsc#1112178)
- drm/i915: Lock the engine while dumping the active request (bsc#1142635)
- drm/i915: Lower RM timeout to avoid DSI hard hangs (bsc#1135967)
- drm/i915: Prevent writing into a read-only object via a GGTT mmap (bsc#1135967)
- drm/i915: Reacquire priolist cache after dropping the engine lock (bsc#1129770)
- drm/i915: Remove Master tables from cmdparser
- drm/i915: Rename gen7 cmdparser tables (bsc#1135967)
- drm/i915: Skip modeset for cdclk changes if possible (bsc#1156928).
- drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (bsc#1135967)
- drm/msm/dpu: handle failures while initializing displays (bsc#1111666).
- drm/msm: fix memleak on release (bsc#1111666).
- drm/omap: fix max fclk divider for omap36xx (bsc#1113722)
- drm/radeon: fix bad DMA from INTERRUPT_CNTL2 (git-fixes).
- drm/radeon: fix si_enable_smc_cac() failed issue (bsc#1113722)
- drm: fix module name in edid_firmware log message (bsc#1113956)
- e1000e: Drop unnecessary __E1000_DOWN bit twiddling (bsc#1158049).
- e1000e: Use dev_get_drvdata where possible (bsc#1158049).
- e1000e: Use rtnl_lock to prevent race conditions between net and pci/pm (bsc#1158049).
- extcon: cht-wc: Return from default case to avoid warnings (bsc#1051510).
- fbdev: sbuslib: integer overflow in sbusfb_ioctl_helper() (bsc#1051510).
- fbdev: sbuslib: use checked version of put_user() (bsc#1051510).
- fix SCTP regression (bsc#1158082).
- ftrace: Introduce PERMANENT ftrace_ops flag (bsc#1120853).
- gpio: mpc8xxx: Do not overwrite default irq_set_type callback (bsc#1051510).
- gpio: syscon: Fix possible NULL ptr usage (bsc#1051510).
- gpiolib: acpi: Add Terra Pad 1061 to the run_edge_events_on_boot_blacklist (bsc#1051510).
- gsmi: Fix bug in append_to_eventlog sysfs handler (bsc#1051510).
- hwmon: (ina3221) Fix INA3221_CONFIG_MODE macros (bsc#1051510).
- hwmon: (pwm-fan) Silence error on probe deferral (bsc#1051510).
- hwrng: omap - Fix RNG wait loop timeout (bsc#1051510).
- hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled (bsc#1051510).
- hypfs: Fix error number left in struct pointer member (bsc#1051510).
- i2c: of: Try to find an I2C adapter matching the parent (bsc#1129770)
- i40e: enable X710 support (bsc#1151067).
- ibmvnic: Bound waits for device queries (bsc#1155689 ltc#182047).
- ibmvnic: Fix completion structure initialization (bsc#1155689 ltc#182047).
- ibmvnic: Serialize device queries (bsc#1155689 ltc#182047).
- ibmvnic: Terminate waiting device threads after loss of service (bsc#1155689 ltc#182047).
- ice: fix potential infinite loop because loop counter being too small (bsc#1118661).
- iio: adc: max9611: explicitly cast gain_selectors (bsc#1051510).
- iio: adc: stm32-adc: fix stopping dma (git-fixes).
- iio: dac: mcp4922: fix error handling in mcp4922_write_raw (bsc#1051510).
- iio: imu: adis16480: assign bias value only if operation succeeded (git-fixes).
- iio: imu: adis16480: make sure provided frequency is positive (git-fixes).
- iio: imu: adis: assign read val in debugfs hook only if op successful (git-fixes).
- iio: imu: adis: assign value only if return code zero in read funcs (git-fixes).
- include/linux/bitrev.h: fix constant bitrev (bsc#1114279).
- inet: stop leaking jiffies on the wire (networking-stable-19_11_05).
- intel_th: Fix a double put_device() in error path (git-fixes).
- iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros (bsc#1158063).
- ipmi:dmi: Ignore IPMI SMBIOS entries with a zero base address (bsc#1051510).
- ipv4: Return -ENETUNREACH if we can't create route but saddr is valid (networking-stable-19_10_24).
- irqdomain: Add the missing assignment of domain-&gt;fwnode for named fwnode (bsc#1111666).
- iwlwifi: api: annotate compressed BA notif array sizes (bsc#1051510).
- iwlwifi: check kasprintf() return value (bsc#1051510).
- iwlwifi: do not panic in error path on non-msix systems (bsc#1155692).
- iwlwifi: drop packets with bad status in CD (bsc#1111666).
- iwlwifi: exclude GEO SAR support for 3168 (bsc#1111666).
- iwlwifi: exclude GEO SAR support for 3168 (git-fixes).
- iwlwifi: fw: do not send GEO_TX_POWER_LIMIT command to FW version 36 (bsc#1111666).
- iwlwifi: mvm: avoid sending too many BARs (bsc#1051510).
- iwlwifi: mvm: do not send keys when entering D3 (bsc#1051510).
- iwlwifi: mvm: use correct FIFO length (bsc#1111666).
- iwlwifi: pcie: fit reclaim msg to MAX_MSG_LEN (bsc#1111666).
- iwlwifi: pcie: read correct prph address for newer devices (bsc#1111666).
- ixgbe: fix double clean of Tx descriptors with xdp (bsc#1113994 ).
- ixgbevf: Fix secpath usage for IPsec Tx offload (bsc#1113994 ).
- kABI fixup alloc_dax_region (bsc#1158071).
- kABI workaround for ath10k hw_filter_reset_required field (bsc#1111666).
- kABI workaround for ath10k last_wmi_vdev_start_status field (bsc#1051510).
- kABI workaround for drm_vma_offset_node readonly field addition (bsc#1135967)
- kABI workaround for iwlwifi iwl_rx_cmd_buffer change (bsc#1111666).
- kABI workaround for struct mwifiex_power_cfg change (bsc#1051510).
- kABI: Fix for 'KVM: x86: Introduce vcpu-&gt;arch.xsaves_enabled' (bsc#1158066).
- kabi protect enum RDMA_DRIVER_EFA (jsc#SLE-4805)
- kabi: s390: struct subchannel (git-fixes).
- lib/scatterlist: Fix chaining support in sgl_alloc_order() (git-fixes).
- lib/scatterlist: Introduce sgl_alloc() and sgl_free() (git-fixes).
- libnvdimm: Export the target_node attribute for regions and namespaces (bsc#1158071).
- liquidio: fix race condition in instruction completion processing (bsc#1051510).
- livepatch: Allow to distinguish different version of system state changes (bsc#1071995).
- livepatch: Basic API to track system state changes (bsc#1071995 ).
- livepatch: Keep replaced patches until post_patch callback is called (bsc#1071995).
- livepatch: Selftests of the API for tracking system state changes (bsc#1071995).
- loop: add ioctl for changing logical block size (bsc#1108043).
- lpfc: size cpu map by last cpu id set (bsc#1157160).
- mISDN: Fix type of switch control variable in ctrl_teimanager (bsc#1051510).
- mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED (bsc#1051510).
- mac80211: minstrel: fix CCK rate group streams value (bsc#1051510).
- mac80211: minstrel: fix sampling/reporting of CCK rates in HT mode (bsc#1051510).
- macvlan: schedule bc_work even if error (bsc#1051510).
- mailbox: reset txdone_method TXDONE_BY_POLL if client knows_txdone (git-fixes).
- media: au0828: Fix incorrect error messages (bsc#1051510).
- media: bdisp: fix memleak on release (git-fixes).
- media: cxusb: detect cxusb_ctrl_msg error in query (bsc#1051510).
- media: davinci: Fix implicit enum conversion warning (bsc#1051510).
- media: exynos4-is: Fix recursive locking in isp_video_release() (git-fixes).
- media: fix: media: pci: meye: validate offset to avoid arbitrary access (bsc#1051510).
- media: flexcop-usb: ensure -EIO is returned on error condition (git-fixes).
- media: imon: invalid dereference in imon_touch_event (bsc#1051510).
- media: isif: fix a NULL pointer dereference bug (bsc#1051510).
- media: pci: ivtv: Fix a sleep-in-atomic-context bug in ivtv_yuv_init() (bsc#1051510).
- media: pxa_camera: Fix check for pdev-&gt;dev.of_node (bsc#1051510).
- media: radio: wl1273: fix interrupt masking on release (git-fixes).
- media: ti-vpe: vpe: Fix Motion Vector vpdma stride (git-fixes).
- media: usbvision: Fix races among open, close, and disconnect (bsc#1051510).
- media: vim2m: Fix abort issue (git-fixes).
- media: vivid: Set vid_cap_streaming and vid_out_streaming to true (bsc#1051510).
- mei: fix modalias documentation (git-fixes).
- mei: samples: fix a signedness bug in amt_host_if_call() (bsc#1051510).
- mfd: intel-lpss: Add default I2C device properties for Gemini Lake (bsc#1051510).
- mfd: max8997: Enale irq-wakeup unconditionally (bsc#1051510).
- mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values (bsc#1051510).
- mfd: palmas: Assign the right powerhold mask for tps65917 (git-fixes).
- mfd: ti_am335x_tscadc: Keep ADC interface on if child is wakeup capable (bsc#1051510).
- mlx5: add parameter to disable enhanced IPoIB (bsc#1142095)
- mlx5: add parameter to disable enhanced IPoIB (bsc#1142095) Fix badly backported patch
- mlxsw: spectrum_flower: Fail in case user specifies multiple mirror actions (bsc#1112374).
- mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d() (git fixes (mm/gup)).
- mm/compaction.c: clear total_{migrate,free}_scanned before scanning a new zone (git fixes (mm/compaction)).
- mm/debug.c: PageAnon() is true for PageKsm() pages (git fixes (mm/debug)).
- mmc: core: fix wl1251 sdio quirks (git-fixes).
- mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of pandora_wl1251_init_card (git-fixes).
- mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail (bsc#1051510).
- mmc: sdhci-esdhc-imx: correct the fix of ERR004536 (git-fixes).
- mmc: sdhci-of-at91: fix quirk2 overwrite (git-fixes).
- mmc: sdio: fix wl1251 vendor id (git-fixes).
- mt7601u: fix bbp version check in mt7601u_wait_bbp_ready (bsc#1051510).
- mt76x0: init hw capabilities.
- mtd: nand: mtk: fix incorrect register setting order about ecc irq.
- mtd: spear_smi: Fix Write Burst mode (bsc#1051510).
- mtd: spi-nor: fix silent truncation in spi_nor_read() (bsc#1051510).
- mwifex: free rx_cmd skb in suspended state (bsc#1111666).
- mwifiex: Fix NL80211_TX_POWER_LIMITED (bsc#1051510).
- mwifiex: do no submit URB in suspended state (bsc#1111666).
- net/ibmvnic: Ignore H_FUNCTION return from H_EOI to tolerate XIVE mode (bsc#1089644, ltc#166495, ltc#165544, git-fixes).
- net/mlx4_core: Dynamically set guaranteed amount of counters per VF (networking-stable-19_11_05).
- net/mlx5: FWTrace, Reduce stack usage (bsc#1103990).
- net/mlx5e: Fix eswitch debug print of max fdb flow (bsc#1103990 ).
- net/mlx5e: Fix ethtool self test: link speed (bsc#1103990 ).
- net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget (networking-stable-19_11_05).
- net/mlx5e: Print a warning when LRO feature is dropped or not allowed (bsc#1103990).
- net/sched: cbs: Fix not adding cbs instance to list (bsc#1109837).
- net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate (bsc#1109837).
- net/smc: Fix error path in smc_init (git-fixes).
- net/smc: avoid fallback in case of non-blocking connect (git-fixes).
- net/smc: do not schedule tx_work in SMC_CLOSED state (git-fixes).
- net/smc: fix SMCD link group creation with VLAN id (git-fixes).
- net/smc: fix closing of fallback SMC sockets (git-fixes).
- net/smc: fix ethernet interface refcounting (git-fixes).
- net/smc: fix fastopen for non-blocking connect() (git-fixes).
- net/smc: fix refcount non-blocking connect() -part 2 (git-fixes).
- net/smc: fix refcounting for non-blocking connect() (git-fixes).
- net/smc: keep vlan_id for SMC-R in smc_listen_work() (git-fixes).
- net/smc: original socket family in inet_sock_diag (git-fixes).
- net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol() (networking-stable-19_11_05).
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (networking-stable-19_11_05).
- net: add skb_queue_empty_lockless() (networking-stable-19_11_05).
- net: annotate accesses to sk-&gt;sk_incoming_cpu (networking-stable-19_11_05).
- net: annotate lockless accesses to sk-&gt;sk_napi_id (networking-stable-19_11_05).
- net: avoid potential infinite loop in tc_ctl_action() (networking-stable-19_10_24).
- net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3 (networking-stable-19_10_24).
- net: bcmgenet: Set phydev-&gt;dev_flags only for internal PHYs (networking-stable-19_10_24).
- net: bcmgenet: reset 40nm EPHY on energy detect (networking-stable-19_11_05).
- net: dsa: b53: Do not clear existing mirrored port mask (networking-stable-19_11_05).
- net: dsa: bcm_sf2: Fix IMP setup for port different than 8 (networking-stable-19_11_05).
- net: dsa: fix switch tree list (networking-stable-19_11_05).
- net: ethernet: ftgmac100: Fix DMA coherency issue with SW checksum (networking-stable-19_11_05).
- net: fix sk_page_frag() recursion from memory reclaim (networking-stable-19_11_05).
- net: hisilicon: Fix ping latency when deal with high throughput (networking-stable-19_11_05).
- net: hns3: change GFP flag during lock period (bsc#1104353 ).
- net: hns3: do not query unsupported commands in debugfs (bsc#1104353).
- net: hns3: fix GFP flag error in hclge_mac_update_stats() (bsc#1126390).
- net: hns3: fix some reset handshake issue (bsc#1104353 ).
- net: hns3: prevent unnecessary MAC TNL interrupt (bsc#1104353 bsc#1134983).
- net: hns: Fix the stray netpoll locks causing deadlock in NAPI path (bsc#1104353).
- net: phy: bcm7xxx: define soft_reset for 40nm EPHY (bsc#1119113 ).
- net: phylink: Fix flow control resolution (bsc#1119113 ).
- net: sched: cbs: Avoid division by zero when calculating the port rate (bsc#1109837).
- net: sched: fix possible crash in tcf_action_destroy() (bsc#1109837).
- net: sched: fix reordering issues (bsc#1109837).
- net: sock_map, fix missing ulp check in sock hash case (bsc#1109837).
- net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow (networking-stable-19_10_24).
- net: use skb_queue_empty_lockless() in busy poll contexts (networking-stable-19_11_05).
- net: use skb_queue_empty_lockless() in poll() handlers (networking-stable-19_11_05).
- net: wireless: ti: remove local VENDOR_ID and DEVICE_ID definitions (git-fixes).
- net: wireless: ti: wl1251 use new SDIO_VENDOR_ID_TI_WL1251 definition (git-fixes).
- netns: fix GFP flags in rtnl_net_notifyid() (networking-stable-19_11_05).
- nfc: netlink: fix double device reference drop (git-fixes).
- nfc: port100: handle command failure cleanly (git-fixes).
- nfp: flower: fix memory leak in nfp_flower_spawn_vnic_reprs (bsc#1109837).
- nfp: flower: prevent memory leak in nfp_flower_spawn_phy_reprs (bsc#1109837).
- nl80211: Fix a GET_KEY reply attribute (bsc#1051510).
- nvme-tcp: support C2HData with SUCCESS flag (bsc#1157386).
- openvswitch: fix flow command message size (git-fixes).
- padata: use smp_mb in padata_reorder to avoid orphaned padata jobs (git-fixes).
- perf/x86/amd: Change/fix NMI latency mitigation to use a timestamp (bsc#1142924).
- phy: phy-twl4030-usb: fix denied runtime access (git-fixes).
- phylink: fix kernel-doc warnings (bsc#1111666).
- pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call (git-fixes).
- pinctrl: at91: do not use the same irqchip with multiple gpiochips (git-fixes).
- pinctrl: cherryview: Allocate IRQ chip dynamic (git-fixes).
- pinctrl: lewisburg: Update pin list according to v1.1v6 (bsc#1051510).
- pinctrl: lpc18xx: Use define directive for PIN_CONFIG_GPIO_PIN_INT (bsc#1051510).
- pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in S3C24xx wakeup controller init (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in S3C64xx wakeup controller init (bsc#1051510).
- pinctrl: samsung: Fix device node refcount leaks in init code (bsc#1051510).
- pinctrl: sunxi: Fix a memory leak in 'sunxi_pinctrl_build_state()' (bsc#1051510).
- pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD (bsc#1051510).
- power: reset: at91-poweroff: do not procede if at91_shdwc is allocated (bsc#1051510).
- power: supply: ab8500_fg: silence uninitialized variable warnings (bsc#1051510).
- power: supply: max14656: fix potential use-after-free (bsc#1051510).
- power: supply: twl4030_charger: disable eoc interrupt on linear charge (bsc#1051510).
- power: supply: twl4030_charger: fix charging current out-of-bounds (bsc#1051510).
- powerpc/64: Make meltdown reporting Book3S 64 specific (bsc#1091041).
- powerpc/book3s64/hash: Use secondary hash for bolted mapping if the primary is full (bsc#1157778 ltc#182520).
- powerpc/bpf: Fix tail call implementation (bsc#1157698).
- powerpc/pseries: Do not fail hash page table insert for bolted mapping (bsc#1157778 ltc#182520).
- powerpc/pseries: Do not opencode HPTE_V_BOLTED (bsc#1157778 ltc#182520).
- powerpc/pseries: address checkpatch warnings in dlpar_offline_cpu (bsc#1156700 ltc#182459).
- powerpc/pseries: safely roll back failed DLPAR cpu add (bsc#1156700 ltc#182459).
- powerpc/security/book3s64: Report L1TF status in sysfs (bsc#1091041).
- powerpc/security: Fix wrong message when RFI Flush is disable (bsc#1131107).
- powerpc/xive: Prevent page fault issues in the machine crash handler (bsc#1156882 ltc#182435).
- ppdev: fix PPGETTIME/PPSETTIME ioctls (bsc#1051510).
- printk: Export console_printk (bsc#1071995).
- pwm: bcm-iproc: Prevent unloading the driver module while in use (git-fixes).
- pwm: lpss: Only set update bit if we are actually changing the settings (bsc#1051510).
- qxl: fix null-pointer crash during suspend (bsc#1111666).
- r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2 (networking-stable-19_11_05).
- regulator: ab8500: Remove AB8505 USB regulator (bsc#1051510).
- regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id (bsc#1051510).
- remoteproc: Check for NULL firmwares in sysfs interface (git-fixes).
- reset: Fix potential use-after-free in __of_reset_control_get() (bsc#1051510).
- reset: fix of_reset_simple_xlate kerneldoc comment (bsc#1051510).
- reset: fix reset_control_get_exclusive kerneldoc comment (bsc#1051510).
- rpm/kernel-binary.spec.in: add COMPRESS_VMLINUX (bnc#1155921) Let COMPRESS_VMLINUX determine the compression used for vmlinux. By default (historically), it is gz.
- rpm/kernel-source.spec.in: Fix dependency of kernel-devel (bsc#1154043)
- rtl8187: Fix warning generated when strncpy() destination length matches the sixe argument (bsc#1051510).
- rtlwifi: Remove unnecessary NULL check in rtl_regd_init (bsc#1051510).
- rtlwifi: btcoex: Use proper enumerated types for Wi-Fi only interface (bsc#1111666).
- rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing enable interrupt flag (bsc#1051510).
- s390/bpf: fix lcgr instruction encoding (bsc#1051510).
- s390/bpf: use 32-bit index for tail calls (bsc#1051510).
- s390/cio: avoid calling strlen on null pointer (bsc#1051510).
- s390/cio: exclude subchannels with no parent from pseudo check (bsc#1051510).
- s390/cio: fix virtio-ccw DMA without PV (git-fixes).
- s390/cmm: fix information leak in cmm_timeout_handler() (bsc#1051510).
- s390/idle: fix cpu idle time calculation (bsc#1051510).
- s390/mm: properly clear _PAGE_NOEXEC bit when it is not supported (bsc#1051510).
- s390/process: avoid potential reading of freed stack (bsc#1051510).
- s390/qdio: (re-)initialize tiqdio list entries (bsc#1051510).
- s390/qdio: do not touch the dsci in tiqdio_add_input_queues() (bsc#1051510).
- s390/qeth: return proper errno on IO error (bsc#1051510).
- s390/setup: fix boot crash for machine without EDAT-1 (bsc#1051510 bsc#1140948).
- s390/setup: fix early warning messages (bsc#1051510 bsc#1140948).
- s390/topology: avoid firing events before kobjs are created (bsc#1051510).
- s390/zcrypt: fix memleak at release (git-fixes).
- s390: fix stfle zero padding (bsc#1051510).
- s390: vsie: Use effective CRYCBD.31 to check CRYCBD validity (git-fixes).
- sc16is7xx: Fix for 'Unexpected interrupt: 8' (bsc#1051510).
- scsi: lpfc: Add enablement of multiple adapter dumps (bsc#1154601).
- scsi: lpfc: Add registration for CPU Offline/Online events (bsc#1154601).
- scsi: lpfc: Change default IRQ model on AMD architectures (bsc#1154601).
- scsi: lpfc: Clarify FAWNN error message (bsc#1154601).
- scsi: lpfc: Fix NULL check before mempool_destroy is not needed (bsc#1154601).
- scsi: lpfc: Fix Oops in nvme_register with target logout/login (bsc#1151900).
- scsi: lpfc: Fix a kernel warning triggered by lpfc_get_sgl_per_hdwq() (bsc#1154601).
- scsi: lpfc: Fix a kernel warning triggered by lpfc_sli4_enable_intr() (bsc#1154601).
- scsi: lpfc: Fix configuration of BB credit recovery in service parameters (bsc#1154601).
- scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow (bsc#1154601).
- scsi: lpfc: Fix dynamic fw log enablement check (bsc#1154601).
- scsi: lpfc: Fix kernel crash at lpfc_nvme_info_show during remote port bounce (bsc#1154601).
- scsi: lpfc: Fix lpfc_cpumask_of_node_init() (bsc#1154601).
- scsi: lpfc: Fix unexpected error messages during RSCN handling (bsc#1154601).
- scsi: lpfc: Honor module parameter lpfc_use_adisc (bsc#1153628).
- scsi: lpfc: Honor module parameter lpfc_use_adisc (bsc#1154601).
- scsi: lpfc: Initialize cpu_map for not present cpus (bsc#1154601).
- scsi: lpfc: Limit xri count for kdump environment (bsc#1154124).
- scsi: lpfc: Make lpfc_debugfs_ras_log_data static (bsc#1154601).
- scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ (bsc#1154601).
- scsi: lpfc: Raise config max for lpfc_fcp_mq_threshold variable (bsc#1154601).
- scsi: lpfc: Sync with FC-NVMe-2 SLER change to require Conf with SLER (bsc#1154601).
- scsi: lpfc: Update lpfc version to 12.6.0.1 (bsc#1154601).
- scsi: lpfc: Update lpfc version to 12.6.0.2 (bsc#1154601).
- scsi: lpfc: fix build error of lpfc_debugfs.c for vfree/vmalloc (bsc#1154601).
- scsi: lpfc: fix inlining of lpfc_sli4_cleanup_poll_list() (bsc#1154601).
- scsi: lpfc: fix spelling error in MAGIC_NUMER_xxx (bsc#1154601).
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences (bsc#1154601).
- scsi: lpfc: fix: Coverity: lpfc_get_scsi_buf_s3(): Null pointer dereferences (bsc#1154601).
- scsi: lpfc: lpfc_attr: Fix Use plain integer as NULL pointer (bsc#1154601).
- scsi: lpfc: lpfc_nvmet: Fix Use plain integer as NULL pointer (bsc#1154601).
- scsi: lpfc: revise nvme max queues to be hdwq count (bsc#1154601).
- scsi: lpfc: use hdwq assigned cpu for allocation (bsc#1157160).
- scsi: qla2xxx: Add debug dump of LOGO payload and ELS IOCB (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Allow PLOGI in target mode (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Change discovery state before PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Configure local loop for N2N target (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Do command completion on abort timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Do not call qlt_async_event twice (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Do not defer relogin unconditonally (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Drop superfluous INIT_WORK of del_work (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Fix SRB leak on switch command timeout (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix a dma_pool_free() call (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix device connect issues in P2P configuration (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix double scsi_done for abort path (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix driver unload hang (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix memory leak when sending I/O fails (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Ignore NULL pointer in tcm_qla2xxx_free_mcmd (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Initialize free_work before flushing it (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Remove an include directive (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Send Notify ACK after N2N PLOGI (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: Update driver version to 10.01.00.21-k (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: Use correct number of vectors for online CPUs (bsc#1137223).
- scsi: qla2xxx: Use explicit LOGO in target mode (bsc#1157424, bsc#1157908. bsc#1117169, bsc#1151548).
- scsi: qla2xxx: do not use zero for FC4_PRIORITY_NVME (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan (bsc#1138039).
- scsi: qla2xxx: initialize fc4_type_priority (bsc#1143706 bsc#1082635 bsc#1154526 bsc#1048942).
- scsi: qla2xxx: unregister ports after GPN_FT failure (bsc#1138039).
- scsi: sd: Ignore a failure to sync cache due to lack of authorization (git-fixes).
- scsi: storvsc: Add ability to change scsi queue depth (bsc#1155021).
- scsi: zfcp: fix request object use-after-free in send path causing wrong traces (bsc#1051510).
- sctp: change sctp_prot .no_autobind with true (networking-stable-19_10_24).
- selftests: net: reuseport_dualstack: fix uninitalized parameter (networking-stable-19_11_05).
- serial: fix kernel-doc warning in comments (bsc#1051510).
- serial: mctrl_gpio: Check for NULL pointer (bsc#1051510).
- serial: mxs-auart: Fix potential infinite loop (bsc#1051510).
- serial: samsung: Enable baud clock for UART reset procedure in resume (bsc#1051510).
- serial: uartlite: fix exit path null pointer (bsc#1051510).
- serial: uartps: Fix suspend functionality (bsc#1051510).
- signal: Properly set TRACE_SIGNAL_LOSE_INFO in __send_signal (bsc#1157463).
- slcan: Fix memory leak in error path (bsc#1051510).
- slip: Fix memory leak in slip_open error path (bsc#1051510).
- slip: Fix use-after-free Read in slip_open (bsc#1051510).
- smb3: Incorrect size for netname negotiate context (bsc#1144333, bsc#1154355).
- smb3: fix leak in 'open on server' perf counter (bsc#1144333, bsc#1154355).
- smb3: fix signing verification of large reads (bsc#1144333, bsc#1154355).
- smb3: fix unmount hang in open_shroot (bsc#1144333, bsc#1154355).
- smb3: improve handling of share deleted (and share recreated) (bsc#1144333, bsc#1154355).
- soc: imx: gpc: fix PDN delay (bsc#1051510).
- soc: qcom: wcnss_ctrl: Avoid string overflow (bsc#1051510).
- spi: atmel: Fix CS high support (bsc#1051510).
- spi: atmel: fix handling of cs_change set on non-last xfer (bsc#1051510).
- spi: fsl-lpspi: Prevent FIFO under/overrun by default (bsc#1051510).
- spi: mediatek: Do not modify spi_transfer when transfer (bsc#1051510).
- spi: mediatek: use correct mata-&gt;xfer_len when in fifo transfer (bsc#1051510).
- spi: pic32: Use proper enum in dmaengine_prep_slave_rg (bsc#1051510).
- spi: rockchip: initialize dma_slave_config properly (bsc#1051510).
- spi: spidev: Fix OF tree warning logic (bsc#1051510).
- staging: rtl8188eu: fix null dereference when kzalloc fails (bsc#1051510).
- supported.conf:
- synclink_gt(): fix compat_ioctl() (bsc#1051510).
- tcp_nv: fix potential integer overflow in tcpnv_acked (bsc#1051510).
- thunderbolt: Fix lockdep circular locking depedency warning (git-fixes).
- tipc: Avoid copying bytes beyond the supplied data (bsc#1051510).
- tipc: check bearer name with right length in tipc_nl_compat_bearer_enable (bsc#1051510).
- tipc: check link name with right length in tipc_nl_compat_link_set (bsc#1051510).
- tipc: check msg-&gt;req data len in tipc_nl_compat_bearer_disable (bsc#1051510).
- tipc: compat: allow tipc commands without arguments (bsc#1051510).
- tipc: fix tipc_mon_delete() oops in tipc_enable_bearer() error path (bsc#1051510).
- tipc: fix wrong timeout input for tipc_wait_for_cond() (bsc#1051510).
- tipc: handle the err returned from cmd header function (bsc#1051510).
- tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb (bsc#1051510).
- tipc: tipc clang warning (bsc#1051510).
- tools/power/x86/intel-speed-select: Fix a read overflow in isst_set_tdp_level_msr() (bsc#1111666).
- tools: bpftool: fix arguments for p_err() in do_event_pipe() (bsc#1109837).
- tpm: add check after commands attribs tab allocation (bsc#1051510).
- tracing: Get trace_array reference for available_tracers files (bsc#1156429).
- tty: serial: fsl_lpuart: use the sg count from dma_map_sg (bsc#1051510).
- tty: serial: imx: use the sg count from dma_map_sg (bsc#1051510).
- tty: serial: msm_serial: Fix flow control (bsc#1051510).
- tty: serial: pch_uart: correct usage of dma_unmap_sg (bsc#1051510).
- tun: fix data-race in gro_normal_list() (bsc#1111666).
- udp: use skb_queue_empty_lockless() (networking-stable-19_11_05).
- usb-serial: cp201x: support Mark-10 digital force gauge (bsc#1051510).
- usb-storage: Revert commit 747668dbc061 ('usb-storage: Set virt_boundary_mask to avoid SG overflows') (bsc#1051510).
- usb: chipidea: Fix otg event handler (bsc#1051510).
- usb: chipidea: imx: enable OTG overcurrent in case USB subsystem is already started (bsc#1051510).
- usb: dwc3: gadget: Check ENBLSLPM before sending ep command (bsc#1051510).
- usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode (bsc#1051510).
- usb: gadget: udc: fotg210-udc: Fix a sleep-in-atomic-context bug in fotg210_get_status() (bsc#1051510).
- usb: gadget: uvc: Factor out video USB request queueing (bsc#1051510).
- usb: gadget: uvc: Only halt video streaming endpoint in bulk mode (bsc#1051510).
- usb: gadget: uvc: configfs: Drop leaked references to config items (bsc#1051510).
- usb: gadget: uvc: configfs: Prevent format changes after linking header (bsc#1051510).
- usb: handle warm-reset port requests on hub resume (bsc#1051510).
- usb: xhci-mtk: fix ISOC error when interval is zero (bsc#1051510).
- usbip: Fix free of unallocated memory in vhci tx (git-fixes).
- usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path (git-fixes).
- usbip: Implement SG support to vhci-hcd and stub driver (git-fixes).
- usbip: tools: fix fd leakage in the function of read_attr_usbip_status (git-fixes).
- vfio-ccw: Fix misleading comment when setting orb.cmd.c64 (bsc#1051510).
- vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn (bsc#1051510).
- vfio: ccw: push down unsupported IDA check (bsc#1156471 LTC#182362).
- video/hdmi: Fix AVI bar unpack (git-fixes).
- virtio/s390: fix race on airq_areas (bsc#1051510).
- virtio_console: allocate inbufs in add_port() only if it is needed (git-fixes).
- virtio_ring: fix return code on DMA mapping fails (git-fixes).
- vmxnet3: turn off lro when rxcsum is disabled (bsc#1157499).
- vsock/virtio: fix sock refcnt holding during the shutdown (git-fixes).
- watchdog: meson: Fix the wrong value of left time (bsc#1051510).
- wil6210: drop Rx multicast packets that are looped-back to STA (bsc#1111666).
- wil6210: fix L2 RX status handling (bsc#1111666).
- wil6210: fix RGF_CAF_ICR address for Talyn-MB (bsc#1111666).
- wil6210: fix debugfs memory access alignment (bsc#1111666).
- wil6210: fix freeing of rx buffers in EDMA mode (bsc#1111666).
- wil6210: fix invalid memory access for rx_buff_mgmt debugfs (bsc#1111666).
- wil6210: fix locking in wmi_call (bsc#1111666).
- wil6210: prevent usage of tx ring 0 for eDMA (bsc#1111666).
- wil6210: set edma variables only for Talyn-MB devices (bsc#1111666).
- x86/alternatives: Add int3_emulate_call() selftest (bsc#1153811).
- x86/alternatives: Fix int3_emulate_call() selftest stack corruption (bsc#1153811).
- x86/mm/pkeys: Fix typo in Documentation/x86/protection-keys.txt (bsc#1078248).
- x86/pkeys: Update documentation about availability (bsc#1078248).
- x86/resctrl: Fix potential lockdep warning (bsc#1114279).
- x86/resctrl: Prevent NULL pointer dereference when reading mondata (bsc#1114279).
- x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs (bsc#1158068).
- xfrm: Fix xfrm sel prefix length validation (git-fixes).
- xfrm: fix sa selector validation (bsc#1156609).
- xsk: Fix registration of Rx-only sockets (bsc#1109837).
- xsk: relax UMEM headroom alignment (bsc#1109837).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-17"/>
	<updated date="2019-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1048942">SUSE bug 1048942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1078248">SUSE bug 1078248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082635">SUSE bug 1082635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089644">SUSE bug 1089644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091041">SUSE bug 1091041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108043">SUSE bug 1108043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113722">SUSE bug 1113722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113994">SUSE bug 1113994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117169">SUSE bug 1117169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118661">SUSE bug 1118661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120853">SUSE bug 1120853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126390">SUSE bug 1126390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131107">SUSE bug 1131107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134983">SUSE bug 1134983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135966">SUSE bug 1135966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1135967">SUSE bug 1135967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137223">SUSE bug 1137223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137236">SUSE bug 1137236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138039">SUSE bug 1138039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140948">SUSE bug 1140948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142095">SUSE bug 1142095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142635">SUSE bug 1142635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142924">SUSE bug 1142924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143706">SUSE bug 1143706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149448">SUSE bug 1149448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150466">SUSE bug 1150466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151067">SUSE bug 1151067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151548">SUSE bug 1151548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151900">SUSE bug 1151900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152782">SUSE bug 1152782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153628">SUSE bug 1153628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153811">SUSE bug 1153811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154043">SUSE bug 1154043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154058">SUSE bug 1154058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154124">SUSE bug 1154124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154355">SUSE bug 1154355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154526">SUSE bug 1154526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154601">SUSE bug 1154601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155021">SUSE bug 1155021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155689">SUSE bug 1155689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155692">SUSE bug 1155692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155836">SUSE bug 1155836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155897">SUSE bug 1155897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155921">SUSE bug 1155921</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155982">SUSE bug 1155982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156187">SUSE bug 1156187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156258">SUSE bug 1156258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156429">SUSE bug 1156429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156466">SUSE bug 1156466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156471">SUSE bug 1156471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156494">SUSE bug 1156494</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156609">SUSE bug 1156609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156700">SUSE bug 1156700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156729">SUSE bug 1156729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156882">SUSE bug 1156882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156928">SUSE bug 1156928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157032">SUSE bug 1157032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157038">SUSE bug 1157038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157042">SUSE bug 1157042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157044">SUSE bug 1157044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157045">SUSE bug 1157045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157046">SUSE bug 1157046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157049">SUSE bug 1157049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157070">SUSE bug 1157070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157115">SUSE bug 1157115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157143">SUSE bug 1157143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157145">SUSE bug 1157145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157158">SUSE bug 1157158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157160">SUSE bug 1157160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157162">SUSE bug 1157162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157171">SUSE bug 1157171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157173">SUSE bug 1157173</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157178">SUSE bug 1157178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157180">SUSE bug 1157180</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157182">SUSE bug 1157182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157183">SUSE bug 1157183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157184">SUSE bug 1157184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157191">SUSE bug 1157191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157193">SUSE bug 1157193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157197">SUSE bug 1157197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157298">SUSE bug 1157298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157304">SUSE bug 1157304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157307">SUSE bug 1157307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157324">SUSE bug 1157324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157333">SUSE bug 1157333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157386">SUSE bug 1157386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157463">SUSE bug 1157463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157499">SUSE bug 1157499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157678">SUSE bug 1157678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157698">SUSE bug 1157698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157778">SUSE bug 1157778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157908">SUSE bug 1157908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158049">SUSE bug 1158049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158063">SUSE bug 1158063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158064">SUSE bug 1158064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158065">SUSE bug 1158065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158066">SUSE bug 1158066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158067">SUSE bug 1158067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158068">SUSE bug 1158068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158071">SUSE bug 1158071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158082">SUSE bug 1158082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158394">SUSE bug 1158394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158398">SUSE bug 1158398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158407">SUSE bug 1158407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158410">SUSE bug 1158410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158413">SUSE bug 1158413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158417">SUSE bug 1158417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158427">SUSE bug 1158427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158445">SUSE bug 1158445</bugzilla>
	<cve impact="important" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-0154/">CVE-2019-0154</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14895/">CVE-2019-14895</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14901/">CVE-2019-14901</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-15916/">CVE-2019-15916</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16231/">CVE-2019-16231</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17055/">CVE-2019-17055</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-18660/">CVE-2019-18660</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18683/">CVE-2019-18683</cve>
	<cve impact="low" cvss3="2.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-18805/">CVE-2019-18805</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18809/">CVE-2019-18809</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19046/">CVE-2019-19046</cve>
	<cve impact="moderate" cvss3="1.6/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19049/">CVE-2019-19049</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19052/">CVE-2019-19052</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19056/">CVE-2019-19056</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19057/">CVE-2019-19057</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19058/">CVE-2019-19058</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19060/">CVE-2019-19060</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19062/">CVE-2019-19062</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19063/">CVE-2019-19063</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19065/">CVE-2019-19065</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19067/">CVE-2019-19067</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19068/">CVE-2019-19068</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19073/">CVE-2019-19073</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19074/">CVE-2019-19074</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19075/">CVE-2019-19075</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19077/">CVE-2019-19077</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19078/">CVE-2019-19078</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19080/">CVE-2019-19080</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19081/">CVE-2019-19081</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19082/">CVE-2019-19082</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19083/">CVE-2019-19083</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19227/">CVE-2019-19227</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19524/">CVE-2019-19524</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19525/">CVE-2019-19525</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19528/">CVE-2019-19528</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19529/">CVE-2019-19529</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19530/">CVE-2019-19530</cve>
	<cve impact="low" cvss3="2.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19531/">CVE-2019-19531</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19534/">CVE-2019-19534</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19536/">CVE-2019-19536</cve>
	<cve impact="low" cvss3="2.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19543/">CVE-2019-19543</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501572" comment="cluster-md-kmp-default-4.12.14-197.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501573" comment="dlm-kmp-default-4.12.14-197.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501574" comment="gfs2-kmp-default-4.12.14-197.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501575" comment="ocfs2-kmp-default-4.12.14-197.29.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139110" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1158108" ref_url="https://bugzilla.suse.com/1158108" source="BUGZILLA"/>
		<reference ref_id="1158109" ref_url="https://bugzilla.suse.com/1158109" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14861" ref_url="https://www.suse.com/security/cve/CVE-2019-14861/" source="CVE"/>
		<reference ref_id="CVE-2019-14870" ref_url="https://www.suse.com/security/cve/CVE-2019-14870/" source="CVE"/>
		<reference ref_id="SUSE-SU-2019:3319-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2019-December/006265.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

-  CVE-2019-14861: Fixed a DNSServer RPC server crash, that allowed an authenticated user to crash the DCE/RPC DNS management server by creating records with matching the zone name (bsc#1158108).
-  CVE-2019-14870: Fixed a DelegationNotAllowed not being enforced (bsc#1158109).
		</description>
<advisory from="security@suse.de">
	<issued date="2019-12-17"/>
	<updated date="2019-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1158108">SUSE bug 1158108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158109">SUSE bug 1158109</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14861/">CVE-2019-14861</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-14870/">CVE-2019-14870</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501576" comment="ctdb-4.9.5+git.224.86a8e66adea-3.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139111" version="1" class="patch">
	<metadata>
		<title>Security update for resource-agents (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1021689" ref_url="https://bugzilla.suse.com/1021689" source="BUGZILLA"/>
		<reference ref_id="1146687" ref_url="https://bugzilla.suse.com/1146687" source="BUGZILLA"/>
		<reference ref_id="1146690" ref_url="https://bugzilla.suse.com/1146690" source="BUGZILLA"/>
		<reference ref_id="1146691" ref_url="https://bugzilla.suse.com/1146691" source="BUGZILLA"/>
		<reference ref_id="1146692" ref_url="https://bugzilla.suse.com/1146692" source="BUGZILLA"/>
		<reference ref_id="1146766" ref_url="https://bugzilla.suse.com/1146766" source="BUGZILLA"/>
		<reference ref_id="1146776" ref_url="https://bugzilla.suse.com/1146776" source="BUGZILLA"/>
		<reference ref_id="1146784" ref_url="https://bugzilla.suse.com/1146784" source="BUGZILLA"/>
		<reference ref_id="1146785" ref_url="https://bugzilla.suse.com/1146785" source="BUGZILLA"/>
		<reference ref_id="1146787" ref_url="https://bugzilla.suse.com/1146787" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:1089-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006734.html" source="SUSE-SU"/>
		<description>
This update for resource-agents fixes the following issues:

- Fixed multiple vulnerabilities related to unsafe tempfile usage.
  (bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776 
  bsc#1146784 bsc#1146785 bsc#1146787)
- Fixed issues where the ocfmon user was created with a default password (bsc#1021689, bsc#1146687).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-23"/>
	<updated date="2020-04-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1021689">SUSE bug 1021689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146687">SUSE bug 1146687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146690">SUSE bug 1146690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146691">SUSE bug 1146691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146692">SUSE bug 1146692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146766">SUSE bug 1146766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146776">SUSE bug 1146776</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146784">SUSE bug 1146784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146785">SUSE bug 1146785</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146787">SUSE bug 1146787</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501577" comment="ldirectord-4.3.0184.6ee15eb2-4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501578" comment="monitoring-plugins-metadata-4.3.0184.6ee15eb2-4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501579" comment="resource-agents-4.3.0184.6ee15eb2-4.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139112" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1167070" ref_url="https://bugzilla.suse.com/1167070" source="BUGZILLA"/>
		<reference ref_id="1169473" ref_url="https://bugzilla.suse.com/1169473" source="BUGZILLA"/>
		<reference ref_id="1169851" ref_url="https://bugzilla.suse.com/1169851" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10704" ref_url="https://www.suse.com/security/cve/CVE-2020-10704/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1133-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006749.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

Security issue fixed:

- CVE-2020-10704: Fixed a stack overflow in the AD DC (C)LDAP server (bsc#1169851).

Non-security issues fixed:

- Fixed spnego fallback from kerberos to ntlmssp in smbd server (bsc#1169473).
- Fixed warning messages for non root users using smbclient (bsc#1167070).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-28"/>
	<updated date="2020-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1167070">SUSE bug 1167070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169473">SUSE bug 1169473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169851">SUSE bug 1169851</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10704/">CVE-2020-10704</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501580" comment="ctdb-4.9.5+git.317.6d82fb3918b-3.35.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139113" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1109911" ref_url="https://bugzilla.suse.com/1109911" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1118338" ref_url="https://bugzilla.suse.com/1118338" source="BUGZILLA"/>
		<reference ref_id="1120386" ref_url="https://bugzilla.suse.com/1120386" source="BUGZILLA"/>
		<reference ref_id="1137325" ref_url="https://bugzilla.suse.com/1137325" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1145051" ref_url="https://bugzilla.suse.com/1145051" source="BUGZILLA"/>
		<reference ref_id="1145929" ref_url="https://bugzilla.suse.com/1145929" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1158983" ref_url="https://bugzilla.suse.com/1158983" source="BUGZILLA"/>
		<reference ref_id="1159037" ref_url="https://bugzilla.suse.com/1159037" source="BUGZILLA"/>
		<reference ref_id="1159198" ref_url="https://bugzilla.suse.com/1159198" source="BUGZILLA"/>
		<reference ref_id="1159199" ref_url="https://bugzilla.suse.com/1159199" source="BUGZILLA"/>
		<reference ref_id="1161561" ref_url="https://bugzilla.suse.com/1161561" source="BUGZILLA"/>
		<reference ref_id="1161951" ref_url="https://bugzilla.suse.com/1161951" source="BUGZILLA"/>
		<reference ref_id="1162171" ref_url="https://bugzilla.suse.com/1162171" source="BUGZILLA"/>
		<reference ref_id="1163403" ref_url="https://bugzilla.suse.com/1163403" source="BUGZILLA"/>
		<reference ref_id="1163897" ref_url="https://bugzilla.suse.com/1163897" source="BUGZILLA"/>
		<reference ref_id="1164284" ref_url="https://bugzilla.suse.com/1164284" source="BUGZILLA"/>
		<reference ref_id="1164777" ref_url="https://bugzilla.suse.com/1164777" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1164893" ref_url="https://bugzilla.suse.com/1164893" source="BUGZILLA"/>
		<reference ref_id="1165019" ref_url="https://bugzilla.suse.com/1165019" source="BUGZILLA"/>
		<reference ref_id="1165182" ref_url="https://bugzilla.suse.com/1165182" source="BUGZILLA"/>
		<reference ref_id="1165185" ref_url="https://bugzilla.suse.com/1165185" source="BUGZILLA"/>
		<reference ref_id="1165211" ref_url="https://bugzilla.suse.com/1165211" source="BUGZILLA"/>
		<reference ref_id="1165823" ref_url="https://bugzilla.suse.com/1165823" source="BUGZILLA"/>
		<reference ref_id="1165949" ref_url="https://bugzilla.suse.com/1165949" source="BUGZILLA"/>
		<reference ref_id="1166780" ref_url="https://bugzilla.suse.com/1166780" source="BUGZILLA"/>
		<reference ref_id="1166860" ref_url="https://bugzilla.suse.com/1166860" source="BUGZILLA"/>
		<reference ref_id="1166861" ref_url="https://bugzilla.suse.com/1166861" source="BUGZILLA"/>
		<reference ref_id="1166862" ref_url="https://bugzilla.suse.com/1166862" source="BUGZILLA"/>
		<reference ref_id="1166864" ref_url="https://bugzilla.suse.com/1166864" source="BUGZILLA"/>
		<reference ref_id="1166866" ref_url="https://bugzilla.suse.com/1166866" source="BUGZILLA"/>
		<reference ref_id="1166867" ref_url="https://bugzilla.suse.com/1166867" source="BUGZILLA"/>
		<reference ref_id="1166868" ref_url="https://bugzilla.suse.com/1166868" source="BUGZILLA"/>
		<reference ref_id="1166870" ref_url="https://bugzilla.suse.com/1166870" source="BUGZILLA"/>
		<reference ref_id="1166940" ref_url="https://bugzilla.suse.com/1166940" source="BUGZILLA"/>
		<reference ref_id="1166982" ref_url="https://bugzilla.suse.com/1166982" source="BUGZILLA"/>
		<reference ref_id="1167005" ref_url="https://bugzilla.suse.com/1167005" source="BUGZILLA"/>
		<reference ref_id="1167216" ref_url="https://bugzilla.suse.com/1167216" source="BUGZILLA"/>
		<reference ref_id="1167288" ref_url="https://bugzilla.suse.com/1167288" source="BUGZILLA"/>
		<reference ref_id="1167290" ref_url="https://bugzilla.suse.com/1167290" source="BUGZILLA"/>
		<reference ref_id="1167316" ref_url="https://bugzilla.suse.com/1167316" source="BUGZILLA"/>
		<reference ref_id="1167421" ref_url="https://bugzilla.suse.com/1167421" source="BUGZILLA"/>
		<reference ref_id="1167423" ref_url="https://bugzilla.suse.com/1167423" source="BUGZILLA"/>
		<reference ref_id="1167627" ref_url="https://bugzilla.suse.com/1167627" source="BUGZILLA"/>
		<reference ref_id="1167629" ref_url="https://bugzilla.suse.com/1167629" source="BUGZILLA"/>
		<reference ref_id="1168075" ref_url="https://bugzilla.suse.com/1168075" source="BUGZILLA"/>
		<reference ref_id="1168202" ref_url="https://bugzilla.suse.com/1168202" source="BUGZILLA"/>
		<reference ref_id="1168273" ref_url="https://bugzilla.suse.com/1168273" source="BUGZILLA"/>
		<reference ref_id="1168276" ref_url="https://bugzilla.suse.com/1168276" source="BUGZILLA"/>
		<reference ref_id="1168295" ref_url="https://bugzilla.suse.com/1168295" source="BUGZILLA"/>
		<reference ref_id="1168367" ref_url="https://bugzilla.suse.com/1168367" source="BUGZILLA"/>
		<reference ref_id="1168424" ref_url="https://bugzilla.suse.com/1168424" source="BUGZILLA"/>
		<reference ref_id="1168443" ref_url="https://bugzilla.suse.com/1168443" source="BUGZILLA"/>
		<reference ref_id="1168486" ref_url="https://bugzilla.suse.com/1168486" source="BUGZILLA"/>
		<reference ref_id="1168552" ref_url="https://bugzilla.suse.com/1168552" source="BUGZILLA"/>
		<reference ref_id="1168760" ref_url="https://bugzilla.suse.com/1168760" source="BUGZILLA"/>
		<reference ref_id="1168762" ref_url="https://bugzilla.suse.com/1168762" source="BUGZILLA"/>
		<reference ref_id="1168763" ref_url="https://bugzilla.suse.com/1168763" source="BUGZILLA"/>
		<reference ref_id="1168764" ref_url="https://bugzilla.suse.com/1168764" source="BUGZILLA"/>
		<reference ref_id="1168765" ref_url="https://bugzilla.suse.com/1168765" source="BUGZILLA"/>
		<reference ref_id="1168829" ref_url="https://bugzilla.suse.com/1168829" source="BUGZILLA"/>
		<reference ref_id="1168854" ref_url="https://bugzilla.suse.com/1168854" source="BUGZILLA"/>
		<reference ref_id="1168881" ref_url="https://bugzilla.suse.com/1168881" source="BUGZILLA"/>
		<reference ref_id="1168884" ref_url="https://bugzilla.suse.com/1168884" source="BUGZILLA"/>
		<reference ref_id="1168952" ref_url="https://bugzilla.suse.com/1168952" source="BUGZILLA"/>
		<reference ref_id="1169013" ref_url="https://bugzilla.suse.com/1169013" source="BUGZILLA"/>
		<reference ref_id="1169057" ref_url="https://bugzilla.suse.com/1169057" source="BUGZILLA"/>
		<reference ref_id="1169307" ref_url="https://bugzilla.suse.com/1169307" source="BUGZILLA"/>
		<reference ref_id="1169308" ref_url="https://bugzilla.suse.com/1169308" source="BUGZILLA"/>
		<reference ref_id="1169390" ref_url="https://bugzilla.suse.com/1169390" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169625" ref_url="https://bugzilla.suse.com/1169625" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19770" ref_url="https://www.suse.com/security/cve/CVE-2019-19770/" source="CVE"/>
		<reference ref_id="CVE-2019-3701" ref_url="https://www.suse.com/security/cve/CVE-2019-3701/" source="CVE"/>
		<reference ref_id="CVE-2019-9458" ref_url="https://www.suse.com/security/cve/CVE-2019-9458/" source="CVE"/>
		<reference ref_id="CVE-2020-10942" ref_url="https://www.suse.com/security/cve/CVE-2020-10942/" source="CVE"/>
		<reference ref_id="CVE-2020-11494" ref_url="https://www.suse.com/security/cve/CVE-2020-11494/" source="CVE"/>
		<reference ref_id="CVE-2020-11669" ref_url="https://www.suse.com/security/cve/CVE-2020-11669/" source="CVE"/>
		<reference ref_id="CVE-2020-8834" ref_url="https://www.suse.com/security/cve/CVE-2020-8834/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006760.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).
- CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).
- CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).
- CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).
- CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).
- CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).
- CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).

The following non-security bugs were fixed:

- ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).
- ACPI: watchdog: Fix gas-&gt;access_width usage (bsc#1051510).
- ahci: Add support for Amazon's Annapurna Labs SATA controller (bsc#1169013).
- ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).
- ALSA: core: Add snd_device_get_state() helper (bsc#1051510).
- ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: emu10k1: Fix endianness annotations (bsc#1051510).
- ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard (bsc#1051510).
- ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: hda: default enable CA0132 DSP support (bsc#1051510).
- ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).
- ALSA: hda/realtek - a fake key event is triggered by running shutup (bsc#1051510).
- ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (git-fixes).
- ALSA: hda/realtek: Enable mute LED on an HP system (bsc#1051510).
- ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (git-fixes).
- ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).
- ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups (bsc#1051510).
- ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).
- ALSA: hda: remove redundant assignment to variable timeout (bsc#1051510).
- ALSA: hda: Use scnprintf() for string truncation (bsc#1051510).
- ALSA: hdsp: remove redundant assignment to variable err (bsc#1051510).
- ALSA: ice1724: Fix invalid access for enumerated ctl items (bsc#1051510).
- ALSA: info: remove redundant assignment to variable c (bsc#1051510).
- ALSA: korg1212: fix if-statement empty body warnings (bsc#1051510).
- ALSA: line6: Fix endless MIDI read loop (git-fixes).
- ALSA: pcm: Fix superfluous snprintf() usage (bsc#1051510).
- ALSA: pcm.h: add for_each_pcm_streams() (bsc#1051510).
- ALSA: pcm: oss: Avoid plugin buffer overflow (git-fixes).
- ALSA: pcm: oss: Fix regression by buffer overflow fix (bsc#1051510).
- ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks (git-fixes).
- ALSA: pcm: oss: Unlock mutex temporarily for sleeping at read/write (bsc#1051510).
- ALSA: pcm: Use a macro for parameter masks to reduce the needed cast (bsc#1051510).
- ALSA: seq: oss: Fix running status after receiving sysex (git-fixes).
- ALSA: seq: virmidi: Fix running status after receiving sysex (git-fixes).
- ALSA: usb-audio: Add delayed_register option (bsc#1051510).
- ALSA: usb-audio: Add support for MOTU MicroBook IIc (bsc#1051510).
- ALSA: usb-audio: Create a registration quirk for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
- ALSA: usb-audio: Do not create a mixer element with bogus volume range (bsc#1051510).
- ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor (bsc#1051510).
- ALSA: usb-audio: Fix mixer controls' USB interface for Kingston HyperX Amp (0951:16d8) (bsc#1051510).
- ALSA: usb-audio: Inform devices that need delayed registration (bsc#1051510).
- ALSA: usb-audio: Parse source ID of UAC2 effect unit (bsc#1051510).
- ALSA: usb-audio: Rewrite registration quirk handling (bsc#1051510).
- ALSA: usb-midi: Replace zero-length array with flexible-array member (bsc#1051510).
- ALSA: usx2y: use for_each_pcm_streams() macro (bsc#1051510).
- ALSA: via82xx: Fix endianness annotations (bsc#1051510).
- apei/ghes: Do not delay GHES polling (bsc#1166982).
- ASoC: Intel: atom: Take the drv-&gt;lock mutex before calling sst_send_slot_map() (bsc#1051510).
- ASoC: Intel: mrfld: fix incorrect check on p-&gt;sink (bsc#1051510).
- ASoC: Intel: mrfld: return error codes when an error occurs (bsc#1051510).
- ASoC: jz4740-i2s: Fix divider written at incorrect offset in register (bsc#1051510).
- ASoC: sun8i-codec: Remove unused dev from codec struct (bsc#1051510).
- ath9k: Handle txpower changes even when TPC is disabled (bsc#1051510).
- batman-adv: Avoid spurious warnings from bat_v neigh_cmp implementation (bsc#1051510).
- batman-adv: Do not schedule OGM for disabled interface (bsc#1051510).
- batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs (bsc#1051510).
- binfmt_elf: Do not move brk for INTERP-less ET_EXEC (bsc#1169013).
- binfmt_elf: move brk out of mmap when doing direct loader exec (bsc#1169013).
- blk-mq: Allow blocking queue tag iter callbacks (bsc#1167316).
- block, bfq: fix use-after-free in bfq_idle_slice_timer_body (bsc#1168760).
- block: keep bdi-&gt;io_pages in sync with max_sectors_kb for stacked devices (bsc#1168762).
- Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl (bsc#1051510).
- bnxt_en: Support all variants of the 5750X chip family (bsc#1167216).
- bpf: Explicitly memset some bpf info structures declared on the stack (bsc#1083647).
- bpf: Explicitly memset the bpf_attr structure (bsc#1083647).
- brcmfmac: abort and release host after error (bsc#1111666).
- btrfs: Account for trans_block_rsv in may_commit_transaction (bsc#1165949).
- btrfs: add a flush step for delayed iputs (bsc#1165949).
- btrfs: add assertions for releasing trans handle reservations (bsc#1165949).
- btrfs: add btrfs_delete_ref_head helper (bsc#1165949).
- btrfs: add enospc debug messages for ticket failure (bsc#1165949).
- btrfs: Add enospc_debug printing in metadata_reserve_bytes (bsc#1165949).
- btrfs: add new flushing states for the delayed refs rsv (bsc#1165949).
- btrfs: add space reservation tracepoint for reserved bytes (bsc#1165949).
- btrfs: adjust dirty_metadata_bytes after writeback failure of extent buffer (bsc#1168273).
- btrfs: allow us to use up to 90% of the global rsv for unlink (bsc#1165949).
- btrfs: always reserve our entire size for the global reserve (bsc#1165949).
- btrfs: assert on non-empty delayed iputs (bsc##1165949).
- btrfs: be more explicit about allowed flush states (bsc#1165949).
- btrfs: call btrfs_create_pending_block_groups unconditionally (bsc#1165949).
- btrfs: catch cow on deleting snapshots (bsc#1165949).
- btrfs: change the minimum global reserve size (bsc#1165949).
- btrfs: check if there are free block groups for commit (bsc#1165949).
- btrfs: clean up error handling in btrfs_truncate() (bsc#1165949).
- btrfs: cleanup extent_op handling (bsc#1165949).
- btrfs: cleanup root usage by btrfs_get_alloc_profile (bsc#1165949).
- btrfs: cleanup the target logic in __btrfs_block_rsv_release (bsc#1165949).
- btrfs: clear space cache inode generation always (bsc#1165949).
- btrfs: delayed-ref: pass delayed_refs directly to btrfs_delayed_ref_lock (bsc#1165949).
- btrfs: Do mandatory tree block check before submitting bio (bsc#1168273).
- btrfs: do not account global reserve in can_overcommit (bsc#1165949).
- btrfs: do not allow reservations if we have pending tickets (bsc#1165949).
- btrfs: do not call btrfs_start_delalloc_roots in flushoncommit (bsc#1165949).
- btrfs: do not end the transaction for delayed refs in throttle (bsc#1165949).
- btrfs: do not enospc all tickets on flush failure (bsc#1165949).
- btrfs: do not reset bio-&gt;bi_ops while writing bio (bsc#1168273).
- btrfs: do not run delayed_iputs in commit (bsc##1165949).
- btrfs: do not run delayed refs in the end transaction logic (bsc#1165949).
- btrfs: do not use ctl-&gt;free_space for max_extent_size (bsc##1165949).
- btrfs: do not use global reserve for chunk allocation (bsc#1165949).
- btrfs: drop get_extent from extent_page_data (bsc#1168273).
- btrfs: drop min_size from evict_refill_and_join (bsc##1165949).
- btrfs: drop unused space_info parameter from create_space_info (bsc#1165949).
- btrfs: dump block_rsv details when dumping space info  (bsc#1165949).
- btrfs: export block group accounting helpers (bsc#1165949).
- btrfs: export block_rsv_use_bytes (bsc#1165949).
- btrfs: export btrfs_block_rsv_add_bytes (bsc#1165949).
- btrfs: export __btrfs_block_rsv_release (bsc#1165949).
- btrfs: export space_info_add_*_bytes (bsc#1165949).
- btrfs: export the block group caching helpers (bsc#1165949).
- btrfs: export the caching control helpers (bsc#1165949).
- btrfs: export the excluded extents helpers (bsc#1165949).
- btrfs: extent_io: add proper error handling to lock_extent_buffer_for_io() (bsc#1168273).
- btrfs: extent_io: Handle errors better in btree_write_cache_pages() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_write_full_page() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_write_locked_range() (bsc#1168273).
- btrfs: extent_io: Handle errors better in extent_writepages() (bsc#1168273).
- btrfs: extent_io: Kill dead condition in extent_write_cache_pages() (bsc#1168273).
- btrfs: extent_io: Kill the forward declaration of flush_write_bio (bsc#1168273).
- btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up (bsc#1168273).
- btrfs: extent-tree: Add lockdep assert when updating space info (bsc#1165949).
- btrfs: extent-tree: Add trace events for space info numbers update (bsc#1165949).
- btrfs: extent-tree: Detect bytes_may_use underflow earlier (bsc#1165949).
- btrfs: extent-tree: Detect bytes_pinned underflow earlier (bsc#1165949).
- btrfs: factor our read/write stage off csum_tree_block into its callers (bsc#1168273).
- btrfs: factor out the ticket flush handling (bsc#1165949).
- btrfs: fix insert_reserved error handling (bsc##1165949).
- btrfs: fix may_commit_transaction to deal with no partial filling (bsc#1165949).
- btrfs: fix missing delayed iputs on unmount (bsc#1165949).
- btrfs: fix qgroup double free after failure to reserve metadata for delalloc (bsc#1165949).
- btrfs: fix race leading to metadata space leak after task received signal (bsc#1165949).
- btrfs: fix truncate throttling (bsc#1165949).
- btrfs: fix unwritten extent buffers and hangs on future writeback attempts (bsc#1168273).
- btrfs: force chunk allocation if our global rsv is larger than metadata (bsc#1165949).
- btrfs: Improve global reserve stealing logic (bsc#1165949).
- btrfs: introduce an evict flushing state (bsc#1165949).
- btrfs: introduce delayed_refs_rsv (bsc#1165949).
- btrfs: loop in inode_rsv_refill (bsc#1165949).
- btrfs: make btrfs_destroy_delayed_refs use btrfs_delayed_ref_lock (bsc#1165949).
- btrfs: make btrfs_destroy_delayed_refs use btrfs_delete_ref_head (bsc#1165949).
- btrfs: make caching_thread use btrfs_find_next_key (bsc#1165949).
- btrfs: make plug in writing meta blocks really work (bsc#1168273).
- btrfs: merge two flush_write_bio helpers (bsc#1168273).
- btrfs: migrate btrfs_trans_release_chunk_metadata (bsc#1165949).
- btrfs: migrate inc/dec_block_group_ro code (bsc#1165949).
- btrfs: migrate nocow and reservation helpers (bsc#1165949).
- btrfs: migrate the alloc_profile helpers (bsc#1165949).
- btrfs: migrate the block group caching code (bsc#1165949).
- btrfs: migrate the block group cleanup code (bsc#1165949).
- btrfs: migrate the block group lookup code (bsc#1165949).
- btrfs: migrate the block group read/creation code (bsc#1165949).
- btrfs: migrate the block group ref counting stuff (bsc#1165949).
- btrfs: migrate the block group removal code (bsc#1165949).
- btrfs: migrate the block group space accounting helpers (bsc#1165949).
- btrfs: migrate the block-rsv code to block-rsv.c (bsc#1165949).
- btrfs: migrate the chunk allocation code (bsc#1165949).
- btrfs: migrate the delalloc space stuff to it's own home (bsc#1165949).
- btrfs: migrate the delayed refs rsv code (bsc#1165949).
- btrfs: migrate the dirty bg writeout code (bsc#1165949).
- btrfs: migrate the global_block_rsv helpers to block-rsv.c (bsc#1165949).
- btrfs: move and export can_overcommit (bsc#1165949).
- btrfs: move basic block_group definitions to their own header (bsc#1165949).
- btrfs: move btrfs_add_free_space out of a header file (bsc#1165949).
- btrfs: move btrfs_block_rsv definitions into it's own header (bsc#1165949).
- btrfs: move btrfs_raid_group values to btrfs_raid_attr table (bsc#1165949).
- btrfs: move btrfs_space_info_add_*_bytes to space-info.c (bsc#1165949).
- btrfs: move dump_space_info to space-info.c (bsc#1165949).
- btrfs: move reserve_metadata_bytes and supporting code to space-info.c (bsc#1165949).
- btrfs: move space_info to space-info.h (bsc#1165949).
- btrfs: move the space_info handling code to space-info.c (bsc#1165949).
- btrfs: move the space info update macro to space-info.h (bsc#1165949).
- btrfs: move the subvolume reservation stuff out of extent-tree.c (bsc#1165949).
- btrfs: only check delayed ref usage in should_end_transaction (bsc#1165949).
- btrfs: only check priority tickets for priority flushing (bsc#1165949).
- btrfs: only free reserved extent if we didn't insert it (bsc##1165949).
- btrfs: only reserve metadata_size for inodes (bsc#1165949).
- btrfs: only track ref_heads in delayed_ref_updates (bsc#1165949).
- btrfs: Output ENOSPC debug info in inc_block_group_ro (bsc#1165949).
- btrfs: pass root to various extent ref mod functions (bsc#1165949).
- btrfs: qgroup: Do not hold qgroup_ioctl_lock in btrfs_qgroup_inherit() (bsc#1165823).
- btrfs: qgroup: Mark qgroup inconsistent if we're inherting snapshot to a new qgroup (bsc#1165823).
- btrfs: refactor block group replication factor calculation to a helper (bsc#1165949).
- btrfs: refactor priority_reclaim_metadata_space (bsc#1165949).
- btrfs: refactor the ticket wakeup code (bsc#1165949).
- btrfs: release metadata before running delayed refs (bsc##1165949).
- btrfs: remove bio_flags which indicates a meta block of log-tree (bsc#1168273).
- btrfs: Remove btrfs_inode::delayed_iput_count (bsc#1165949).
- btrfs: Remove fs_info from do_chunk_alloc (bsc#1165949).
- btrfs: remove orig_bytes from reserve_ticket (bsc#1165949).
- btrfs: Remove redundant argument of flush_space (bsc#1165949).
- btrfs: Remove redundant mirror_num arg (bsc#1168273).
- btrfs: Rename bin_search -&gt; btrfs_bin_search (bsc#1168273).
- btrfs: rename btrfs_space_info_add_old_bytes (bsc#1165949).
- btrfs: rename do_chunk_alloc to btrfs_chunk_alloc (bsc#1165949).
- btrfs: rename the btrfs_calc_*_metadata_size helpers (bsc#1165949).
- btrfs: replace cleaner_delayed_iput_mutex with a waitqueue (bsc#1165949).
- btrfs: reserve delalloc metadata differently (bsc#1165949).
- btrfs: reserve extra space during evict (bsc#1165949).
- btrfs: reset max_extent_size on clear in a bitmap (bsc##1165949).
- btrfs: reset max_extent_size properly (bsc##1165949).
- btrfs: rework btrfs_check_space_for_delayed_refs (bsc#1165949).
- btrfs: rework wake_all_tickets (bsc#1165949).
- btrfs: roll tracepoint into btrfs_space_info_update helper (bsc#1165949).
- btrfs: run btrfs_try_granting_tickets if a priority ticket fails (bsc#1165949).
- btrfs: run delayed iput at unlink time (bsc#1165949).
- btrfs: run delayed iputs before committing (bsc#1165949).
- btrfs: set max_extent_size properly (bsc##1165949).
- btrfs: sink extent_write_full_page tree argument (bsc#1168273).
- btrfs: sink extent_write_locked_range tree parameter (bsc#1168273).
- btrfs: sink flush_fn to extent_write_cache_pages (bsc#1168273).
- btrfs: sink get_extent parameter to extent_fiemap (bsc#1168273).
- btrfs: sink get_extent parameter to extent_readpages (bsc#1168273).
- btrfs: sink get_extent parameter to extent_write_full_page (bsc#1168273).
- btrfs: sink get_extent parameter to extent_write_locked_range (bsc#1168273).
- btrfs: sink get_extent parameter to extent_writepages (bsc#1168273).
- btrfs: sink get_extent parameter to get_extent_skip_holes (bsc#1168273).
- btrfs: sink writepage parameter to extent_write_cache_pages (bsc#1168273).
- btrfs: stop partially refilling tickets when releasing space (bsc#1165949).
- btrfs: stop using block_rsv_release_bytes everywhere (bsc#1165949).
- btrfs: switch to on-stack csum buffer in csum_tree_block (bsc#1168273).
- btrfs: temporarily export btrfs_get_restripe_target (bsc#1165949).
- btrfs: temporarily export fragment_free_space (bsc#1165949).
- btrfs: temporarily export inc_block_group_ro (bsc#1165949).
- btrfs: track DIO bytes in flight (bsc#1165949).
- btrfs: tree-checker: Remove comprehensive root owner check (bsc#1168273).
- btrfs: unexport can_overcommit (bsc#1165949).
- btrfs: unexport the temporary exported functions (bsc#1165949).
- btrfs: unify error handling for ticket flushing (bsc#1165949).
- btrfs: unify extent_page_data type passed as void (bsc#1168273).
- btrfs: update may_commit_transaction to use the delayed refs rsv (bsc#1165949).
- btrfs: use btrfs_try_granting_tickets in update_global_rsv (bsc#1165949).
- btrfs: wait on caching when putting the bg cache (bsc#1165949).
- btrfs: wait on ordered extents on abort cleanup (bsc#1165949).
- btrfs: wakeup cleaner thread when adding delayed iput (bsc#1165949).
- ceph: canonicalize server path in place (bsc#1168443).
- ceph: check POOL_FLAG_FULL/NEARFULL in addition to OSDMAP_FULL/NEARFULL (bsc#1169307).
- ceph: remove the extra slashes in the server path (bsc#1168443).
- cfg80211: check reg_rule for NULL in handle_channel_custom() (bsc#1051510).
- cfg80211: check wiphy driver existence for drvinfo report (bsc#1051510).
- cgroup: memcg: net: do not associate sock with unrelated cgroup (bsc#1167290).
- cifs: ignore cached share root handle closing errors (bsc#1166780).
- clk: imx: Align imx sc clock msg structs to 4 (bsc#1111666).
- clk: imx: Align imx sc clock msg structs to 4 (git-fixes).
- clk: qcom: rcg: Return failure for RCG update (bsc#1051510).
- configfs: Fix bool initialization/comparison (bsc#1051510).
- cpufreq: Register drivers only after CPU devices have been registered (bsc#1051510).
- cpuidle: Do not unset the driver if it is there already (bsc#1051510).
- crypto: arm64/sha-ce - implement export/import (bsc#1051510).
- Crypto: chelsio - Fixes a deadlock between rtnl_lock and uld_mutex (bsc#1111666).
- Crypto: chelsio - Fixes a hang issue during driver registration (bsc#1111666).
- crypto: mxs-dcp - fix scatterlist linearization for hash (bsc#1051510).
- crypto: tcrypt - fix printed skcipher [a]sync mode (bsc#1051510).
- debugfs: add support for more elaborate -&gt;d_fsdata (bsc#1159198  bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198). Prerequisite for bsc#1159198.
- debugfs: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: debugfs_real_fops(): drop __must_hold sparse annotation (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: debugfs_use_start/finish do not exist anymore (bsc#1159198). Prerequisite for bsc#1159198.
- debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198). Prerequisite for bsc#1159198.
- debugfs: fix debugfs_real_fops() build error (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: implement per-file removal protection (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: purge obsolete SRCU based removal protection (bsc#1159198 bsc#1109911). Prerequisite for bsc#1159198.
- debugfs: simplify __debugfs_remove_file() (bsc#1159198). Prerequisite for bsc#1159198.
- Deprecate NR_UNSTABLE_NFS, use NR_WRITEBACK (bsc#1163403).
- dmaengine: ste_dma40: fix unneeded variable warning (bsc#1051510).
- drm/amd/amdgpu: Fix GPR read from debugfs (v2) (bsc#1113956)
- drm/amd/display: Add link_rate quirk for Apple 15' MBP 2017 (bsc#1111666).
- drm/amd/display: Fix wrongly passed static prefix (bsc#1111666).
- drm/amd/display: remove duplicated assignment to grph_obj_type (bsc#1051510).
- drm/amdgpu: fix typo for vcn1 idle check (bsc#1111666).
- drm/bochs: downgrade pci_request_region failure from error to warning (bsc#1051510).
- drm/bridge: dw-hdmi: fix AVI frame colorimetry (bsc#1051510).
- drm_dp_mst_topology: fix broken drm_dp_sideband_parse_remote_dpcd_read() (bsc#1051510).
- drm/drm_dp_mst:remove set but not used variable 'origlen' (bsc#1051510).
- drm/exynos: dsi: fix workaround for the legacy clock name (bsc#1111666).
- drm/exynos: dsi: propagate error value and silence meaningless warning (bsc#1111666).
- drm/lease: fix WARNING in idr_destroy (bsc#1113956)
- drm/msm: Set dma maximum segment size for mdss (bsc#1051510).
- drm/msm: stop abusing dma_map/unmap for cache (bsc#1051510).
- drm/msm: Use the correct dma_sync calls harder (bsc#1051510).
- drm/msm: Use the correct dma_sync calls in msm_gem (bsc#1051510).
- drm/sun4i: dsi: Use NULL to signify 'no panel' (bsc#1111666).
- drm/v3d: Replace wait_for macros to remove use of msleep (bsc#1111666).
- drm/vc4: Fix HDMI mode validation (git-fixes).
- dt-bindings: allow up to four clocks for orion-mdio (bsc#1051510).
- efi: Do not attempt to map RCI2 config table if it does not exist (jsc#ECO-366, bsc#1168367).
- efi: Export Runtime Configuration Interface table to sysfs (jsc#ECO-366, bsc#1168367).
- efi: Fix a race and a buffer overflow while reading efivars via sysfs (bsc#1164893).
- efi: x86: move efi_is_table_address() into arch/x86 (jsc#ECO-366, bsc#1168367).
- ext4: add cond_resched() to __ext4_find_entry() (bsc#1166862).
- ext4: Avoid ENOSPC when avoiding to reuse recently deleted inodes (bsc#1165019).
- ext4: Check for non-zero journal inum in ext4_calculate_overhead (bsc#1167288).
- ext4: do not assume that mmp_nodename/bdevname have NUL (bsc#1166860).
- ext4: fix a data race in EXT4_I(inode)-&gt;i_disksize (bsc#1166861).
- ext4: fix incorrect group count in ext4_fill_super error message (bsc#1168765).
- ext4: fix incorrect inodes per group in error message (bsc#1168764).
- ext4: fix potential race between online resizing and write operations (bsc#1166864).
- ext4: fix potential race between s_flex_groups online resizing and access (bsc#1166867).
- ext4: fix potential race between s_group_info online resizing and access (bsc#1166866).
- ext4: fix race between writepages and enabling EXT4_EXTENTS_FL (bsc#1166870).
- ext4: fix support for inode sizes &gt; 1024 bytes (bsc#1164284).
- ext4: potential crash on allocation error in ext4_alloc_flex_bg_array() (bsc#1166940).
- ext4: rename s_journal_flag_rwsem to s_writepages_rwsem (bsc#1166868).
- ext4: validate the debug_want_extra_isize mount option at parse time (bsc#1163897).
- fat: fix uninit-memory access for partial initialized inode (bsc#1051510).
- fat: work around race with userspace's read via blockdev while mounting (bsc#1051510).
- fbdev/g364fb: Fix build failure (bsc#1051510).
- fbdev: potential information leak in do_fb_ioctl() (bsc#1114279)
- fbmem: Adjust indentation in fb_prepare_logo and fb_blank (bsc#1114279)
- firmware: arm_sdei: fix double-lock on hibernate with shared events (bsc#1111666).
- firmware: arm_sdei: fix possible double-lock on hibernate error path (bsc#1111666).
- ftrace/kprobe: Show the maxactive number on kprobe_events (git-fixes).
- HID: apple: Add support for recent firmware on Magic Keyboards (bsc#1051510).
- i2c: hix5hd2: add missed clk_disable_unprepare in remove (bsc#1051510).
- i2c: jz4780: silence log flood on txabrt (bsc#1051510).
- IB/hfi1: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911).
- ibmvfc: do not send implicit logouts prior to NPIV login (bsc#1169625 ltc#184611).
- iio: gyro: adis16136: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis16400: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis16480: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: imu: adis: check ret val for non-zero vs less-than-zero (bsc#1051510).
- iio: magnetometer: ak8974: Fix negative raw values in sysfs (bsc#1051510).
- iio: potentiostat: lmp9100: fix iio_triggered_buffer_{predisable,postenable} positions (bsc#1051510).
- Input: add safety guards to input_set_keycode() (bsc#1168075).
- Input: avoid BIT() macro usage in the serio.h UAPI header (bsc#1051510).
- Input: raydium_i2c_ts - fix error codes in raydium_i2c_boot_trigger() (bsc#1051510).
- Input: synaptics - enable RMI on HP Envy 13-ad105ng (bsc#1051510).
- intel_th: Fix user-visible error codes (bsc#1051510).
- intel_th: pci: Add Elkhart Lake CPU support (bsc#1051510).
- iommu/amd: Fix the configuration of GCR3 table root pointer (bsc#1169057).
- ipmi: fix hung processes in __get_guid() (bsc#1111666).
- ipmi: fix hung processes in __get_guid() (git-fixes).
- ipmi:ssif: Handle a possible NULL pointer reference (bsc#1051510).
- ipv6: Fix nlmsg_flags when splitting a multipath route (networking-stable-20_03_01).
- ipv6: Fix route replacement with dev-only route (networking-stable-20_03_01).
- ipvlan: do not add hardware address of master to its unicast filter list (bsc#1137325).
- irqchip/bcm2835: Quiesce IRQs left enabled by bootloader (bsc#1051510).
- irqdomain: Fix a memory leak in irq_domain_push_irq() (bsc#1051510).
- kABI: fixes for debugfs per-file removal protection backports (bsc#1159198 bsc#1109911).
- kABI: restore debugfs_remove_recursive() (bsc#1159198).
- kABI workaround for pcie_port_bus_type change (bsc#1161561).
- KVM: s390: vsie: Fix possible race when shadowing region 3 tables (git-fixes).
- KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks (git-fixes).
- libceph: fix alloc_msg_with_page_vector() memory leaks (bsc#1169308).
- libfs: fix infoleak in simple_attr_read() (bsc#1168881).
- lpfc: add support for translating an RSCN rcv into a discovery rescan (bsc#1164777 bsc#1164780 bsc#1165211).
- lpfc: add support to generate RSCN events for nport (bsc#1164777 bsc#1164780 bsc#1165211).
- mac80211: consider more elements in parsing CRC (bsc#1051510).
- mac80211: Do not send mesh HWMP PREQ if HWMP is disabled (bsc#1051510).
- mac80211: free peer keys before vif down in mesh (bsc#1051510).
- mac80211: mesh: fix RCU warning (bsc#1051510).
- mac80211: only warn once on chanctx_conf being NULL (bsc#1051510).
- mac80211: rx: avoid RCU list traversal under mutex (bsc#1051510).
- macsec: add missing attribute validation for port (bsc#1051510).
- macsec: fix refcnt leak in module exit routine (bsc#1051510).
- media: dib0700: fix rc endpoint lookup (bsc#1051510).
- media: flexcop-usb: fix endpoint sanity check (git-fixes).
- media: go7007: Fix URB type for interrupt handling (bsc#1051510).
- media: ov519: add missing endpoint sanity checks (bsc#1168829).
- media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support (bsc#1051510).
- media: ov6650: Fix some format attributes not under control (bsc#1051510).
- media: ov6650: Fix stored crop rectangle not in sync with hardware (bsc#1051510).
- media: ov6650: Fix stored frame format not in sync with hardware (bsc#1051510).
- media: stv06xx: add missing descriptor sanity checks (bsc#1168854).
- media: tda10071: fix unsigned sign extension overflow (bsc#1051510).
- media: usbtv: fix control-message timeouts (bsc#1051510).
- media: v4l2-core: fix entity initialization in device_register_subdev (bsc#1051510).
- media: vsp1: tidyup VI6_HGT_LBn_H() macro (bsc#1051510).
- media: xirlink_cit: add missing descriptor sanity checks (bsc#1051510).
- mfd: dln2: Fix sanity checking for endpoints (bsc#1051510).
- misc: pci_endpoint_test: Fix to support &gt; 10 pci-endpoint-test devices (bsc#1051510).
- mmc: sdhci-of-at91: fix cd-gpios for SAMA5D2 (bsc#1051510).
- mm/filemap.c: do not initiate writeback if mapping has no dirty pages (bsc#1168884).
- mm/memory_hotplug.c: only respect mem= parameter during boot stage (bsc#1065600).
- mm: replace PF_LESS_THROTTLE with PF_LOCAL_THROTTLE (bsc#1163403).
- mwifiex: set needed_headroom, not hard_header_len (bsc#1051510).
- net: dsa: bcm_sf2: Fix overflow checks (git-fixes).
- net: dsa: tag_qca: Make sure there is headroom for tag (networking-stable-20_02_19).
- net: ena: Add PCI shutdown handler to allow safe kexec (bsc#1167421, bsc#1167423).
- net: fib_rules: Correctly set table field when table number exceeds 8 bits (networking-stable-20_03_01).
- netfilter: conntrack: sctp: use distinct states for new SCTP connections (bsc#1159199).
- net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL (bsc#1051510).
- net: nfc: fix bounds checking bugs on 'pipe' (bsc#1051510).
- net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before accessing PHY registers (bsc#1051510).
- net: phy: restore mdio regs in the iproc mdio driver (networking-stable-20_03_01).
- net/sched: flower: add missing validation of TCA_FLOWER_FLAGS (networking-stable-20_02_19).
- net_sched: keep alloc_hash updated after hash allocation (git-fixes).
- net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS (networking-stable-20_02_19).
- net/smc: fix leak of kernel memory to user space (networking-stable-20_02_19).
- NFC: fdp: Fix a signedness bug in fdp_nci_send_patch() (bsc#1051510).
- nfc: pn544: Fix occasional HW initialization failure (networking-stable-20_03_01).
- NFS: send state management on a single connection (bsc#1167005).
- nvme: fix a possible deadlock when passthru commands sent to a multipath device (bsc#1158983).
- nvme: fix controller removal race with scan work (bsc#1158983).
- nvme-multipath: also check for a disabled path if there is a single sibling (bsc#1158983).
- nvme-multipath: do not select namespaces which are about to be removed (bsc#1158983).
- nvme-multipath: factor out a nvme_path_is_disabled helper (bsc#1158983).
- nvme-multipath: fix crash in nvme_mpath_clear_ctrl_paths (bsc#1158983).
- nvme-multipath: fix possible io hang after ctrl reconnect (bsc#1158983).
- nvme-multipath: fix possible I/O hang when paths are updated (bsc#1158983).
- nvme-multipath: remove unused groups_only mode in ana log (bsc#1158983).
- nvme-multipath: round-robin I/O policy (bsc#1158983).
- objtool: Add is_static_jump() helper (bsc#1169514).
- objtool: Add relocation check for alternative sections (bsc#1169514).
- OMAP: DSS2: remove non-zero check on variable r (bsc#1114279)
- partitions/efi: Fix partition name parsing in GUID partition entry (bsc#1168763).
- PCI/AER: Factor message prefixes with dev_fmt() (bsc#1161561).
- PCI/AER: Log which device prevents error recovery (bsc#1161561).
- PCI/AER: Remove ERR_FATAL code from ERR_NONFATAL path (bsc#1161561).
- PCI/ASPM: Clear the correct bits when enabling L1 substates (bsc#1051510).
- PCI: endpoint: Fix clearing start entry in configfs (bsc#1051510).
- PCI/ERR: Always report current recovery status for udev (bsc#1161561).
- PCI/ERR: Handle fatal error recovery (bsc#1161561).
- PCI/ERR: Remove duplicated include from err.c (bsc#1161561).
- PCI/ERR: Simplify broadcast callouts (bsc#1161561).
- PCI: pciehp: Fix MSI interrupt race (bsc#1159037).
- PCI: portdrv: Initialize service drivers directly (bsc#1161561).
- PCI/portdrv: Remove pcie_port_bus_type link order dependency (bsc#1161561).
- PCI: Simplify disconnected marking (bsc#1161561).
- PCI/switchtec: Fix init_completion race condition with poll_wait() (bsc#1051510).
- PCI: Unify device inaccessible (bsc#1161561).
- perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag (bsc#1114279).
- perf: qcom_l2: fix column exclusion check (git-fixes).
- pinctrl: core: Remove extra kref_get which blocks hogs being freed (bsc#1051510).
- platform/x86: pmc_atom: Add Lex 2I385SW to critclk_systems DMI table (bsc#1051510).
- PM: core: Fix handling of devices deleted during system-wide resume (git-fixes).
- powerpc/64: mark start_here_multiplatform as __ref (bsc#1148868).
- powerpc/64s: Fix section mismatch warnings from boot code (bsc#1148868).
- powerpc/64/tm: Do not let userspace set regs-&gt;trap via sigreturn (bsc#1118338 ltc#173734).
- powerpc/hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE entries (bsc#1065729).
- powerpc/kprobes: Ignore traps that happened in real mode (bsc#1065729).
- powerpc/mm: Fix section mismatch warning in stop_machine_change_mapping() (bsc#1148868).
- powerpc/pseries/ddw: Extend upper limit for huge DMA window for persistent memory (bsc#1142685 ltc#179509).
- powerpc/pseries/iommu: Fix set but not used values (bsc#1142685 ltc#179509).
- powerpc/pseries/iommu: Use memory@ nodes in max RAM address calculation (bsc#1142685 ltc#179509).
- powerpc/vmlinux.lds: Explicitly retain .gnu.hash (bsc#1148868).
- powerpc/xive: Replace msleep(x) with msleep(OPAL_BUSY_DELAY_MS) (bsc#1085030).
- powerpc/xive: Use XIVE_BAD_IRQ instead of zero to catch non configured IPIs (bsc#1085030).
- pwm: bcm2835: Dynamically allocate base (bsc#1051510).
- pwm: meson: Fix confusing indentation (bsc#1051510).
- pwm: pca9685: Fix PWM/GPIO inter-operation (bsc#1051510).
- pwm: rcar: Fix late Runtime PM enablement (bsc#1051510).
- pwm: renesas-tpu: Fix late Runtime PM enablement (bsc#1051510).
- pxa168fb: fix release function mismatch in probe failure (bsc#1051510).
- qede: Fix race between rdma destroy workqueue and link change event (networking-stable-20_03_01).
- qmi_wwan: unconditionally reject 2 ep interfaces (bsc#1051510).
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (git-fixes).
- s390/cio: avoid duplicated 'ADD' uevents (git-fixes).
- s390/cio: generate delayed uevent for vfio-ccw subchannels (git-fixes).
- s390/cpuinfo: fix wrong output when CPU0 is offline (git-fixes).
- s390/diag: fix display of diagnose call statistics (git-fixes).
- s390/gmap: return proper error code on ksm unsharing (git-fixes).
- s390/mm: fix dynamic pagetable upgrade for hugetlbfs (bsc#1165182 LTC#184102).
- s390/qeth: cancel RX reclaim work earlier (git-fixes).
- s390/qeth: do not return -ENOTSUPP to userspace (git-fixes).
- s390/qeth: do not warn for napi with 0 budget (git-fixes).
- s390/qeth: fix off-by-one in RX copybreak check (git-fixes).
- s390/qeth: fix potential deadlock on workqueue flush (bsc#1165185 LTC#184108).
- s390/qeth: fix promiscuous mode after reset (git-fixes).
- s390/qeth: fix qdio teardown after early init error (git-fixes).
- s390/qeth: handle error due to unsupported transport mode (git-fixes).
- s390/qeth: handle error when backing RX buffer (git-fixes).
- s390/qeth: lock the card while changing its hsuid (git-fixes).
- s390/qeth: support net namespaces for L3 devices (git-fixes).
- s390/time: Fix clk type in get_tod_clock (git-fixes).
- scsi: core: avoid repetitive logging of device offline messages (bsc#1145929).
- scsi: core: kABI fix offline_already (bsc#1145929).
- scsi: fc: Update Descriptor definition and add RDF and Link Integrity FPINs (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551). Refresh sorted patches.
- scsi: lpfc: add RDF registration and Link Integrity FPIN logging (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Change default SCSI LUN QD to 64 (bsc#1164777 bsc#1164780 bsc#1165211 jsc#SLE-8654).
- scsi: lpfc: Clean up hba max_lun_queue_depth checks (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Copyright updates for 12.6.0.4 patches (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix broken Credit Recovery after driver load (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix compiler warning on frame size (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix coverity errors in fmdi attribute handling (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix crash after handling a pci error (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix disablement of FC-AL on lpe35000 models (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix driver nvme rescan logging (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix erroneous cpu limit of 128 on I/O statistics (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix Fabric hostname registration if system hostname changes (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix improper flag check for IO type (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix incomplete NVME discovery when target (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lockdep error - register non-static key (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lpfc_io_buf resource leak in lpfc_get_scsi_buf_s4 error path (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix lpfc overwrite of sg_cnt field in nvmefc_tgt_fcp_req (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix MDS Latency Diagnostics Err-drop rates (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix missing check for CSF in Write Object Mbox Rsp (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix ras_log via debugfs (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix registration of ELS type support in fdmi (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix release of hwq to clear the eq relationship (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix: Rework setting of fdmi symbolic node name registration (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix RQ buffer leakage when no IOCBs available (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix scsi host template for SLI3 vports (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: fix spelling mistake 'Notication' -&gt; 'Notification' (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: fix spelling mistakes of asynchronous (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix unmap of dpp bars affecting next driver load (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Fix update of wq consumer index in lpfc_sli4_wq_release (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Make debugfs ktime stats generic for NVME and SCSI (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Make lpfc_defer_acc_rsp static (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Remove handler for obsolete ELS - Read Port Status (RPS) (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Remove prototype FIPS/DSS options from SLI-3 (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: lpfc: Update lpfc version to 12.8.0.0 (bsc#1164777 bsc#1164780 bsc#1165211).
- scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (bsc#1157424).
- scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point (git-fixes).
- sctp: move the format error check out of __sctp_sf_do_9_1_abort (networking-stable-20_03_01).
- serdev: ttyport: restore client ops on deregistration (bsc#1051510).
- staging: ccree: use signal safe completion wait (git-fixes).
- staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table (bsc#1051510).
- staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi (bsc#1051510).
- staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb (bsc#1051510).
- staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback (bsc#1051510).
- SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202).
- swiotlb: do not panic on mapping failures (bsc#1162171).
- swiotlb: remove the overflow buffer (bsc#1162171).
- thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n (bsc#1051510).
- tpm: ibmvtpm: Wait for buffer to be set before proceeding (bsc#1065729).
- tty: evh_bytechan: Fix out of bounds accesses (bsc#1051510).
- tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode (bsc#1051510).
- tty: serial: imx: setup the correct sg entry for tx dma (bsc#1051510).
- USB: audio-v2: Add uac2_effect_unit_descriptor definition (bsc#1051510).
- USB: cdc-acm: fix rounding error in TIOCSSERIAL (git-fixes).
- USB: core: hub: do error out if usb_autopm_get_interface() fails (git-fixes).
- USB: core: port: do error out if usb_autopm_get_interface() fails (git-fixes).
- USB: Disable LPM on WD19's Realtek Hub (git-fixes).
- USB: dwc2: Fix in ISOC request length checking (git-fixes).
- USB: Fix novation SourceControl XL after suspend (git-fixes).
- USB: gadget: composite: Fix bMaxPower for SuperSpeedPlus (git-fixes).
- USB: gadget: f_fs: Fix use after free issue as part of queue failure (bsc#1051510).
- USB: host: xhci-plat: add a shutdown (git-fixes).
- USB: hub: Do not record a connect-change event during reset-resume (git-fixes).
- USB: misc: iowarrior: add support for 2 OEMed devices (git-fixes).
- USB: misc: iowarrior: add support for the 100 device (git-fixes).
- USB: misc: iowarrior: add support for the 28 and 28L devices (git-fixes).
- USB: musb: Disable pullup at init (git-fixes).
- USB: musb: fix crash with highmen PIO and usbmon (bsc#1051510).
- USB: quirks: add NO_LPM quirk for Logitech Screen Share (git-fixes).
- USB: quirks: add NO_LPM quirk for RTL8153 based ethernet adapters (git-fixes).
- USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback (bsc#1051510).
- USB: serial: option: add ME910G1 ECM composition 0x110b (git-fixes).
- USB: serial: pl2303: add device-id for HP LD381 (git-fixes).
- USB: storage: Add quirk for Samsung Fit flash (git-fixes).
- USB: uas: fix a plug &amp; unplug racing (git-fixes).
- USB: xhci: apply XHCI_SUSPEND_DELAY to AMD XHCI controller 1022:145c (git-fixes).
- virtio-blk: improve virtqueue error to BLK_STS (bsc#1167627).
- virtio_ring: fix unmap of indirect descriptors (bsc#1162171).
- x86/mce: Fix logic and comments around MSR_PPIN_CTL (bsc#1114279).
- x86/pkeys: Manually set X86_FEATURE_OSPKE to preserve existing changes (bsc#1114279).
- x86/xen: fix booting 32-bit pv guest (bsc#1071995).
- x86/xen: Make the boot CPU idle task reliable (bsc#1071995).
- x86/xen: Make the secondary CPU idle tasks reliable (bsc#1071995).
- xen/blkfront: fix memory allocation flags in blkfront_setup_indirect() (bsc#1168486).
- xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms (git-fixes).
- xhci: Do not open code __print_symbolic() in xhci trace events (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-29"/>
	<updated date="2020-04-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109911">SUSE bug 1109911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118338">SUSE bug 1118338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120386">SUSE bug 1120386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1137325">SUSE bug 1137325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145051">SUSE bug 1145051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145929">SUSE bug 1145929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158983">SUSE bug 1158983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159037">SUSE bug 1159037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159198">SUSE bug 1159198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159199">SUSE bug 1159199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161561">SUSE bug 1161561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161951">SUSE bug 1161951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162171">SUSE bug 1162171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163403">SUSE bug 1163403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163897">SUSE bug 1163897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164284">SUSE bug 1164284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164777">SUSE bug 1164777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164893">SUSE bug 1164893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165019">SUSE bug 1165019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165182">SUSE bug 1165182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165185">SUSE bug 1165185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165211">SUSE bug 1165211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165823">SUSE bug 1165823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165949">SUSE bug 1165949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166780">SUSE bug 1166780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166860">SUSE bug 1166860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166861">SUSE bug 1166861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166862">SUSE bug 1166862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166864">SUSE bug 1166864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166866">SUSE bug 1166866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166867">SUSE bug 1166867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166868">SUSE bug 1166868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166870">SUSE bug 1166870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166940">SUSE bug 1166940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166982">SUSE bug 1166982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167005">SUSE bug 1167005</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167216">SUSE bug 1167216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167288">SUSE bug 1167288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167290">SUSE bug 1167290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167316">SUSE bug 1167316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167421">SUSE bug 1167421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167423">SUSE bug 1167423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167627">SUSE bug 1167627</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167629">SUSE bug 1167629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168075">SUSE bug 1168075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168202">SUSE bug 1168202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168273">SUSE bug 1168273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168276">SUSE bug 1168276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168295">SUSE bug 1168295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168367">SUSE bug 1168367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168424">SUSE bug 1168424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168443">SUSE bug 1168443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168486">SUSE bug 1168486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168552">SUSE bug 1168552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168760">SUSE bug 1168760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168762">SUSE bug 1168762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168763">SUSE bug 1168763</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168764">SUSE bug 1168764</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168765">SUSE bug 1168765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168829">SUSE bug 1168829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168854">SUSE bug 1168854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168881">SUSE bug 1168881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168884">SUSE bug 1168884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168952">SUSE bug 1168952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169013">SUSE bug 1169013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169057">SUSE bug 1169057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169307">SUSE bug 1169307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169308">SUSE bug 1169308</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169390">SUSE bug 1169390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169625">SUSE bug 1169625</bugzilla>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19770/">CVE-2019-19770</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-3701/">CVE-2019-3701</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9458/">CVE-2019-9458</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10942/">CVE-2020-10942</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11494/">CVE-2020-11494</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11669/">CVE-2020-11669</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8834/">CVE-2020-8834</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501581" comment="cluster-md-kmp-default-4.12.14-197.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501582" comment="dlm-kmp-default-4.12.14-197.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501583" comment="gfs2-kmp-default-4.12.14-197.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501584" comment="ocfs2-kmp-default-4.12.14-197.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139114" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-actionview-5_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1167240" ref_url="https://bugzilla.suse.com/1167240" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-5267" ref_url="https://www.suse.com/security/cve/CVE-2020-5267/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-May/006777.html" source="SUSE-SU"/>
		<description>
This update for rubygem-actionview-5_1 fixes the following issues:

- CVE-2020-5267: Fixed an XSS vulnerability in ActionView's JavaScript literal escape helpers (bsc#1167240).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-05-05"/>
	<updated date="2020-05-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1167240">SUSE bug 1167240</bugzilla>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-5267/">CVE-2020-5267</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501469" comment="ruby2.5-rubygem-actionview-5_1-5.1.4-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139115" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1082555" ref_url="https://bugzilla.suse.com/1082555" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1089895" ref_url="https://bugzilla.suse.com/1089895" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1124278" ref_url="https://bugzilla.suse.com/1124278" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127355" ref_url="https://bugzilla.suse.com/1127355" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1151794" ref_url="https://bugzilla.suse.com/1151794" source="BUGZILLA"/>
		<reference ref_id="1152489" ref_url="https://bugzilla.suse.com/1152489" source="BUGZILLA"/>
		<reference ref_id="1154824" ref_url="https://bugzilla.suse.com/1154824" source="BUGZILLA"/>
		<reference ref_id="1157169" ref_url="https://bugzilla.suse.com/1157169" source="BUGZILLA"/>
		<reference ref_id="1158265" ref_url="https://bugzilla.suse.com/1158265" source="BUGZILLA"/>
		<reference ref_id="1160388" ref_url="https://bugzilla.suse.com/1160388" source="BUGZILLA"/>
		<reference ref_id="1160947" ref_url="https://bugzilla.suse.com/1160947" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1164871" ref_url="https://bugzilla.suse.com/1164871" source="BUGZILLA"/>
		<reference ref_id="1165183" ref_url="https://bugzilla.suse.com/1165183" source="BUGZILLA"/>
		<reference ref_id="1165478" ref_url="https://bugzilla.suse.com/1165478" source="BUGZILLA"/>
		<reference ref_id="1165741" ref_url="https://bugzilla.suse.com/1165741" source="BUGZILLA"/>
		<reference ref_id="1166969" ref_url="https://bugzilla.suse.com/1166969" source="BUGZILLA"/>
		<reference ref_id="1166978" ref_url="https://bugzilla.suse.com/1166978" source="BUGZILLA"/>
		<reference ref_id="1167574" ref_url="https://bugzilla.suse.com/1167574" source="BUGZILLA"/>
		<reference ref_id="1167851" ref_url="https://bugzilla.suse.com/1167851" source="BUGZILLA"/>
		<reference ref_id="1167867" ref_url="https://bugzilla.suse.com/1167867" source="BUGZILLA"/>
		<reference ref_id="1168332" ref_url="https://bugzilla.suse.com/1168332" source="BUGZILLA"/>
		<reference ref_id="1168670" ref_url="https://bugzilla.suse.com/1168670" source="BUGZILLA"/>
		<reference ref_id="1168789" ref_url="https://bugzilla.suse.com/1168789" source="BUGZILLA"/>
		<reference ref_id="1169020" ref_url="https://bugzilla.suse.com/1169020" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169525" ref_url="https://bugzilla.suse.com/1169525" source="BUGZILLA"/>
		<reference ref_id="1169762" ref_url="https://bugzilla.suse.com/1169762" source="BUGZILLA"/>
		<reference ref_id="1170056" ref_url="https://bugzilla.suse.com/1170056" source="BUGZILLA"/>
		<reference ref_id="1170125" ref_url="https://bugzilla.suse.com/1170125" source="BUGZILLA"/>
		<reference ref_id="1170145" ref_url="https://bugzilla.suse.com/1170145" source="BUGZILLA"/>
		<reference ref_id="1170284" ref_url="https://bugzilla.suse.com/1170284" source="BUGZILLA"/>
		<reference ref_id="1170345" ref_url="https://bugzilla.suse.com/1170345" source="BUGZILLA"/>
		<reference ref_id="1170457" ref_url="https://bugzilla.suse.com/1170457" source="BUGZILLA"/>
		<reference ref_id="1170522" ref_url="https://bugzilla.suse.com/1170522" source="BUGZILLA"/>
		<reference ref_id="1170592" ref_url="https://bugzilla.suse.com/1170592" source="BUGZILLA"/>
		<reference ref_id="1170617" ref_url="https://bugzilla.suse.com/1170617" source="BUGZILLA"/>
		<reference ref_id="1170618" ref_url="https://bugzilla.suse.com/1170618" source="BUGZILLA"/>
		<reference ref_id="1170620" ref_url="https://bugzilla.suse.com/1170620" source="BUGZILLA"/>
		<reference ref_id="1170621" ref_url="https://bugzilla.suse.com/1170621" source="BUGZILLA"/>
		<reference ref_id="1170770" ref_url="https://bugzilla.suse.com/1170770" source="BUGZILLA"/>
		<reference ref_id="1170778" ref_url="https://bugzilla.suse.com/1170778" source="BUGZILLA"/>
		<reference ref_id="1170791" ref_url="https://bugzilla.suse.com/1170791" source="BUGZILLA"/>
		<reference ref_id="1170901" ref_url="https://bugzilla.suse.com/1170901" source="BUGZILLA"/>
		<reference ref_id="1171078" ref_url="https://bugzilla.suse.com/1171078" source="BUGZILLA"/>
		<reference ref_id="1171098" ref_url="https://bugzilla.suse.com/1171098" source="BUGZILLA"/>
		<reference ref_id="1171118" ref_url="https://bugzilla.suse.com/1171118" source="BUGZILLA"/>
		<reference ref_id="1171189" ref_url="https://bugzilla.suse.com/1171189" source="BUGZILLA"/>
		<reference ref_id="1171191" ref_url="https://bugzilla.suse.com/1171191" source="BUGZILLA"/>
		<reference ref_id="1171195" ref_url="https://bugzilla.suse.com/1171195" source="BUGZILLA"/>
		<reference ref_id="1171202" ref_url="https://bugzilla.suse.com/1171202" source="BUGZILLA"/>
		<reference ref_id="1171205" ref_url="https://bugzilla.suse.com/1171205" source="BUGZILLA"/>
		<reference ref_id="1171214" ref_url="https://bugzilla.suse.com/1171214" source="BUGZILLA"/>
		<reference ref_id="1171217" ref_url="https://bugzilla.suse.com/1171217" source="BUGZILLA"/>
		<reference ref_id="1171218" ref_url="https://bugzilla.suse.com/1171218" source="BUGZILLA"/>
		<reference ref_id="1171219" ref_url="https://bugzilla.suse.com/1171219" source="BUGZILLA"/>
		<reference ref_id="1171220" ref_url="https://bugzilla.suse.com/1171220" source="BUGZILLA"/>
		<reference ref_id="1171244" ref_url="https://bugzilla.suse.com/1171244" source="BUGZILLA"/>
		<reference ref_id="1171293" ref_url="https://bugzilla.suse.com/1171293" source="BUGZILLA"/>
		<reference ref_id="1171417" ref_url="https://bugzilla.suse.com/1171417" source="BUGZILLA"/>
		<reference ref_id="1171527" ref_url="https://bugzilla.suse.com/1171527" source="BUGZILLA"/>
		<reference ref_id="1171599" ref_url="https://bugzilla.suse.com/1171599" source="BUGZILLA"/>
		<reference ref_id="1171600" ref_url="https://bugzilla.suse.com/1171600" source="BUGZILLA"/>
		<reference ref_id="1171601" ref_url="https://bugzilla.suse.com/1171601" source="BUGZILLA"/>
		<reference ref_id="1171602" ref_url="https://bugzilla.suse.com/1171602" source="BUGZILLA"/>
		<reference ref_id="1171604" ref_url="https://bugzilla.suse.com/1171604" source="BUGZILLA"/>
		<reference ref_id="1171605" ref_url="https://bugzilla.suse.com/1171605" source="BUGZILLA"/>
		<reference ref_id="1171606" ref_url="https://bugzilla.suse.com/1171606" source="BUGZILLA"/>
		<reference ref_id="1171607" ref_url="https://bugzilla.suse.com/1171607" source="BUGZILLA"/>
		<reference ref_id="1171608" ref_url="https://bugzilla.suse.com/1171608" source="BUGZILLA"/>
		<reference ref_id="1171609" ref_url="https://bugzilla.suse.com/1171609" source="BUGZILLA"/>
		<reference ref_id="1171610" ref_url="https://bugzilla.suse.com/1171610" source="BUGZILLA"/>
		<reference ref_id="1171611" ref_url="https://bugzilla.suse.com/1171611" source="BUGZILLA"/>
		<reference ref_id="1171612" ref_url="https://bugzilla.suse.com/1171612" source="BUGZILLA"/>
		<reference ref_id="1171613" ref_url="https://bugzilla.suse.com/1171613" source="BUGZILLA"/>
		<reference ref_id="1171614" ref_url="https://bugzilla.suse.com/1171614" source="BUGZILLA"/>
		<reference ref_id="1171615" ref_url="https://bugzilla.suse.com/1171615" source="BUGZILLA"/>
		<reference ref_id="1171616" ref_url="https://bugzilla.suse.com/1171616" source="BUGZILLA"/>
		<reference ref_id="1171617" ref_url="https://bugzilla.suse.com/1171617" source="BUGZILLA"/>
		<reference ref_id="1171618" ref_url="https://bugzilla.suse.com/1171618" source="BUGZILLA"/>
		<reference ref_id="1171619" ref_url="https://bugzilla.suse.com/1171619" source="BUGZILLA"/>
		<reference ref_id="1171620" ref_url="https://bugzilla.suse.com/1171620" source="BUGZILLA"/>
		<reference ref_id="1171621" ref_url="https://bugzilla.suse.com/1171621" source="BUGZILLA"/>
		<reference ref_id="1171622" ref_url="https://bugzilla.suse.com/1171622" source="BUGZILLA"/>
		<reference ref_id="1171623" ref_url="https://bugzilla.suse.com/1171623" source="BUGZILLA"/>
		<reference ref_id="1171624" ref_url="https://bugzilla.suse.com/1171624" source="BUGZILLA"/>
		<reference ref_id="1171625" ref_url="https://bugzilla.suse.com/1171625" source="BUGZILLA"/>
		<reference ref_id="1171626" ref_url="https://bugzilla.suse.com/1171626" source="BUGZILLA"/>
		<reference ref_id="1171662" ref_url="https://bugzilla.suse.com/1171662" source="BUGZILLA"/>
		<reference ref_id="1171679" ref_url="https://bugzilla.suse.com/1171679" source="BUGZILLA"/>
		<reference ref_id="1171691" ref_url="https://bugzilla.suse.com/1171691" source="BUGZILLA"/>
		<reference ref_id="1171692" ref_url="https://bugzilla.suse.com/1171692" source="BUGZILLA"/>
		<reference ref_id="1171694" ref_url="https://bugzilla.suse.com/1171694" source="BUGZILLA"/>
		<reference ref_id="1171695" ref_url="https://bugzilla.suse.com/1171695" source="BUGZILLA"/>
		<reference ref_id="1171736" ref_url="https://bugzilla.suse.com/1171736" source="BUGZILLA"/>
		<reference ref_id="1171817" ref_url="https://bugzilla.suse.com/1171817" source="BUGZILLA"/>
		<reference ref_id="1171948" ref_url="https://bugzilla.suse.com/1171948" source="BUGZILLA"/>
		<reference ref_id="1171949" ref_url="https://bugzilla.suse.com/1171949" source="BUGZILLA"/>
		<reference ref_id="1171951" ref_url="https://bugzilla.suse.com/1171951" source="BUGZILLA"/>
		<reference ref_id="1171952" ref_url="https://bugzilla.suse.com/1171952" source="BUGZILLA"/>
		<reference ref_id="1171979" ref_url="https://bugzilla.suse.com/1171979" source="BUGZILLA"/>
		<reference ref_id="1171982" ref_url="https://bugzilla.suse.com/1171982" source="BUGZILLA"/>
		<reference ref_id="1171983" ref_url="https://bugzilla.suse.com/1171983" source="BUGZILLA"/>
		<reference ref_id="1172017" ref_url="https://bugzilla.suse.com/1172017" source="BUGZILLA"/>
		<reference ref_id="1172096" ref_url="https://bugzilla.suse.com/1172096" source="BUGZILLA"/>
		<reference ref_id="1172097" ref_url="https://bugzilla.suse.com/1172097" source="BUGZILLA"/>
		<reference ref_id="1172098" ref_url="https://bugzilla.suse.com/1172098" source="BUGZILLA"/>
		<reference ref_id="1172099" ref_url="https://bugzilla.suse.com/1172099" source="BUGZILLA"/>
		<reference ref_id="1172101" ref_url="https://bugzilla.suse.com/1172101" source="BUGZILLA"/>
		<reference ref_id="1172102" ref_url="https://bugzilla.suse.com/1172102" source="BUGZILLA"/>
		<reference ref_id="1172103" ref_url="https://bugzilla.suse.com/1172103" source="BUGZILLA"/>
		<reference ref_id="1172104" ref_url="https://bugzilla.suse.com/1172104" source="BUGZILLA"/>
		<reference ref_id="1172127" ref_url="https://bugzilla.suse.com/1172127" source="BUGZILLA"/>
		<reference ref_id="1172130" ref_url="https://bugzilla.suse.com/1172130" source="BUGZILLA"/>
		<reference ref_id="1172185" ref_url="https://bugzilla.suse.com/1172185" source="BUGZILLA"/>
		<reference ref_id="1172188" ref_url="https://bugzilla.suse.com/1172188" source="BUGZILLA"/>
		<reference ref_id="1172199" ref_url="https://bugzilla.suse.com/1172199" source="BUGZILLA"/>
		<reference ref_id="1172201" ref_url="https://bugzilla.suse.com/1172201" source="BUGZILLA"/>
		<reference ref_id="1172202" ref_url="https://bugzilla.suse.com/1172202" source="BUGZILLA"/>
		<reference ref_id="1172221" ref_url="https://bugzilla.suse.com/1172221" source="BUGZILLA"/>
		<reference ref_id="1172249" ref_url="https://bugzilla.suse.com/1172249" source="BUGZILLA"/>
		<reference ref_id="1172251" ref_url="https://bugzilla.suse.com/1172251" source="BUGZILLA"/>
		<reference ref_id="1172317" ref_url="https://bugzilla.suse.com/1172317" source="BUGZILLA"/>
		<reference ref_id="1172342" ref_url="https://bugzilla.suse.com/1172342" source="BUGZILLA"/>
		<reference ref_id="1172343" ref_url="https://bugzilla.suse.com/1172343" source="BUGZILLA"/>
		<reference ref_id="1172344" ref_url="https://bugzilla.suse.com/1172344" source="BUGZILLA"/>
		<reference ref_id="1172366" ref_url="https://bugzilla.suse.com/1172366" source="BUGZILLA"/>
		<reference ref_id="1172378" ref_url="https://bugzilla.suse.com/1172378" source="BUGZILLA"/>
		<reference ref_id="1172391" ref_url="https://bugzilla.suse.com/1172391" source="BUGZILLA"/>
		<reference ref_id="1172397" ref_url="https://bugzilla.suse.com/1172397" source="BUGZILLA"/>
		<reference ref_id="1172453" ref_url="https://bugzilla.suse.com/1172453" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000199" ref_url="https://www.suse.com/security/cve/CVE-2018-1000199/" source="CVE"/>
		<reference ref_id="CVE-2019-19462" ref_url="https://www.suse.com/security/cve/CVE-2019-19462/" source="CVE"/>
		<reference ref_id="CVE-2019-20806" ref_url="https://www.suse.com/security/cve/CVE-2019-20806/" source="CVE"/>
		<reference ref_id="CVE-2019-20812" ref_url="https://www.suse.com/security/cve/CVE-2019-20812/" source="CVE"/>
		<reference ref_id="CVE-2019-9455" ref_url="https://www.suse.com/security/cve/CVE-2019-9455/" source="CVE"/>
		<reference ref_id="CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543/" source="CVE"/>
		<reference ref_id="CVE-2020-10690" ref_url="https://www.suse.com/security/cve/CVE-2020-10690/" source="CVE"/>
		<reference ref_id="CVE-2020-10711" ref_url="https://www.suse.com/security/cve/CVE-2020-10711/" source="CVE"/>
		<reference ref_id="CVE-2020-10720" ref_url="https://www.suse.com/security/cve/CVE-2020-10720/" source="CVE"/>
		<reference ref_id="CVE-2020-10732" ref_url="https://www.suse.com/security/cve/CVE-2020-10732/" source="CVE"/>
		<reference ref_id="CVE-2020-10751" ref_url="https://www.suse.com/security/cve/CVE-2020-10751/" source="CVE"/>
		<reference ref_id="CVE-2020-10757" ref_url="https://www.suse.com/security/cve/CVE-2020-10757/" source="CVE"/>
		<reference ref_id="CVE-2020-12114" ref_url="https://www.suse.com/security/cve/CVE-2020-12114/" source="CVE"/>
		<reference ref_id="CVE-2020-12464" ref_url="https://www.suse.com/security/cve/CVE-2020-12464/" source="CVE"/>
		<reference ref_id="CVE-2020-12652" ref_url="https://www.suse.com/security/cve/CVE-2020-12652/" source="CVE"/>
		<reference ref_id="CVE-2020-12653" ref_url="https://www.suse.com/security/cve/CVE-2020-12653/" source="CVE"/>
		<reference ref_id="CVE-2020-12654" ref_url="https://www.suse.com/security/cve/CVE-2020-12654/" source="CVE"/>
		<reference ref_id="CVE-2020-12655" ref_url="https://www.suse.com/security/cve/CVE-2020-12655/" source="CVE"/>
		<reference ref_id="CVE-2020-12656" ref_url="https://www.suse.com/security/cve/CVE-2020-12656/" source="CVE"/>
		<reference ref_id="CVE-2020-12657" ref_url="https://www.suse.com/security/cve/CVE-2020-12657/" source="CVE"/>
		<reference ref_id="CVE-2020-12659" ref_url="https://www.suse.com/security/cve/CVE-2020-12659/" source="CVE"/>
		<reference ref_id="CVE-2020-12768" ref_url="https://www.suse.com/security/cve/CVE-2020-12768/" source="CVE"/>
		<reference ref_id="CVE-2020-12769" ref_url="https://www.suse.com/security/cve/CVE-2020-12769/" source="CVE"/>
		<reference ref_id="CVE-2020-13143" ref_url="https://www.suse.com/security/cve/CVE-2020-13143/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1599-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-June/006921.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it.
  This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1154824).
- CVE-2020-13143: Fixed an out-of-bounds read in gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c (bsc#1171982).
- CVE-2020-12769: Fixed an issue which could have allowed attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one (bsc#1171983).
- CVE-2020-12768: Fixed a memory leak in svm_cpu_uninit in arch/x86/kvm/svm.c (bsc#1171736).
- CVE-2020-12659: Fixed an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) due to improper headroom validation (bsc#1171214).
- CVE-2020-12657: An a use-after-free in block/bfq-iosched.c (bsc#1171205).
- CVE-2020-12656: Fixed an improper handling of certain domain_release calls leadingch could have led to a memory leak (bsc#1171219).
- CVE-2020-12655: Fixed an issue which could have allowed attackers to trigger a sync of excessive duration via an XFS v5 image with crafted metadata (bsc#1171217).
- CVE-2020-12654: Fixed an issue in he wifi driver which could have allowed a remote AP to trigger a heap-based buffer overflow (bsc#1171202).
- CVE-2020-12653: Fixed an issue in the wifi driver which could have allowed local users to gain privileges or cause a denial of service (bsc#1171195).
- CVE-2020-12652: Fixed an issue which could have allowed local users to hold an incorrect lock during the ioctl operation and trigger a race condition (bsc#1171218).
- CVE-2020-12464: Fixed a use-after-free due to a transfer without a reference (bsc#1170901).
- CVE-2020-12114: Fixed a pivot_root race condition which could have allowed local users to cause a denial of service (panic) by corrupting a mountpoint reference counter (bsc#1171098).
- CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172317).
- CVE-2020-10751: Fixed an improper implementation in SELinux LSM hook  where it was assumed that an skb would only contain a single netlink message (bsc#1171189).
- CVE-2020-10732: Fixed kernel data leak in userspace coredumps due to uninitialized data (bsc#1171220).
- CVE-2020-10720: Fixed a use-after-free read in napi_gro_frags() (bsc#1170778).
- CVE-2020-10711: Fixed a null pointer dereference in SELinux subsystem which could have allowed a remote network user to crash the kernel resulting in a denial of service (bsc#1171191).
- CVE-2020-10690: Fixed the race between the release of ptp_clock and cdev (bsc#1170056).
- CVE-2019-9455: Fixed a pointer leak due to a WARN_ON statement in a video driver. This could lead to local information disclosure with System execution privileges needed (bsc#1170345).
- CVE-2019-20812: Fixed an issue in prb_calc_retire_blk_tmo() which could have resulted in a denial of service (bsc#1172453).
- CVE-2019-20806: Fixed a null pointer dereference which may had lead to denial of service (bsc#1172199).
- CVE-2019-19462: Fixed an issue which could have allowed local user to cause denial of service (bsc#1158265).
- CVE-2018-1000199: Fixed a potential local code execution via ptrace (bsc#1089895)

The following non-security bugs were fixed:

- ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe() (bsc#1051510).
- ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile() (bsc#1051510).
- acpi/x86: ignore unspecified bit positions in the ACPI global lock field (bsc#1051510).
- Add br_netfilter to kernel-default-base (bsc#1169020)
- Add commit for git-fix that's not a fix This commit cleans up debug code but does not fix anything, and it relies on a new kernel function that isn't yet in this version of SLE.
- agp/intel: Reinforce the barrier after GTT updates (bsc#1051510).
- ALSA: ctxfi: Remove unnecessary cast in kfree (bsc#1051510).
- ALSA: doc: Document PC Beep Hidden Register on Realtek ALC256 (bsc#1051510).
- ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
- ALSA: hda: Add driver blacklist (bsc#1051510).
- ALSA: hda: Always use jackpoll helper for jack update after resume (bsc#1051510).
- ALSA: hda: call runtime_allow() for all hda controllers (bsc#1051510).
- ALSA: hda: Do not release card at firmware loading error (bsc#1051510).
- ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported (bsc#1051510).
- ALSA: hda/hdmi: fix race in monitor detection during probe (bsc#1051510).
- ALSA: hda/hdmi: fix without unlocked before return (bsc#1051510).
- ALSA: hda: Honor PM disablement in PM freeze and thaw_noirq ops (bsc#1051510).
- ALSA: hda: Keep the controller initialization even if no codecs found (bsc#1051510).
- ALSA: hda: Match both PCI ID and SSID for driver blacklist (bsc#1111666).
- ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround (bsc#1172017).
- ALSA: hda/realtek - Add COEF workaround for ASUS ZenBook UX431DA (git-fixes).
- ALSA: hda/realtek - Add HP new mute led supported for ALC236 (git-fixes).
- ALSA: hda/realtek - Add more fixup entries for Clevo machines (git-fixes).
- ALSA: hda/realtek - Add new codec supported for ALC245 (bsc#1051510).
- ALSA: hda/realtek - Add new codec supported for ALC287 (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Notebook (git-fixes).
- ALSA: hda/realtek - Add supported new mute Led for HP (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS GL503VM with ALC295 (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS UX550GE with ALC295 (git-fixes).
- ALSA: hda/realtek: Enable headset mic of ASUS UX581LV with ALC295 (git-fixes).
- ALSA: hda/realtek - Enable the headset mic on Asus FX505DT (bsc#1051510).
- ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse (git-fixes).
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme (bsc#1111666).
- ALSA: hda/realtek - Fix unexpected init_amp override (bsc#1051510).
- ALSA: hda/realtek - Limit int mic boost for Thinkpad T530 (git-fixes bsc#1171293).
- ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter (bsc#1051510).
- ALSA: hda: Release resources at error in delayed probe (bsc#1051510).
- ALSA: hda: Remove ASUS ROG Zenith from the blacklist (bsc#1051510).
- ALSA: hda: Skip controller resume if not needed (bsc#1051510).
- ALSA: hwdep: fix a left shifting 1 by 31 UB bug (git-fixes).
- ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio option (git-fixes).
- ALSA: opti9xx: shut up gcc-10 range warning (bsc#1051510).
- ALSA: pcm: fix incorrect hw_base increase (git-fixes).
- ALSA: pcm: oss: Place the plugin buffer overflow checks correctly (bsc#1170522).
- ALSA: rawmidi: Fix racy buffer resize under concurrent accesses (git-fixes).
- ALSA: usb-audio: Add connector notifier delegation (bsc#1051510).
- ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset (git-fixes).
- ALSA: usb-audio: add mapping for ASRock TRX40 Creator (git-fixes).
- ALSA: usb-audio: Add mixer workaround for TRX40 and co (bsc#1051510).
- ALSA: usb-audio: Add quirk for Focusrite Scarlett 2i2 (bsc#1051510).
- ALSA: usb-audio: Add static mapping table for ALC1220-VB-based mobos (bsc#1051510).
- ALSA: usb-audio: Apply async workaround for Scarlett 2i4 2nd gen (bsc#1051510).
- ALSA: usb-audio: Check mapping at creating connector controls, too (bsc#1051510).
- ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID (bsc#1051510).
- ALSA: usb-audio: Do not create jack controls for PCM terminals (bsc#1051510).
- ALSA: usb-audio: Do not override ignore_ctl_error value from the map (bsc#1051510).
- ALSA: usb-audio: Filter error from connector kctl ops, too (bsc#1051510).
- ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif (bsc#1051510).
- ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC (git-fixes).
- ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio (git-fixes).
- ALSA: usx2y: Fix potential NULL dereference (bsc#1051510).
- ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry (bsc#1051510).
- ASoC: dapm: connect virtual mux with default value (bsc#1051510).
- ASoC: dapm: fixup dapm kcontrol widget (bsc#1051510).
- ASoC: dpcm: allow start or stop during pause for backend (bsc#1051510).
- ASoC: fix regwmask (bsc#1051510).
- ASoC: msm8916-wcd-digital: Reset RX interpolation path after use (bsc#1051510).
- ASoC: samsung: Prevent clk_get_rate() calls in atomic context (bsc#1111666).
- ASoC: topology: Check return value of pcm_new_ver (bsc#1051510).
- ASoC: topology: use name_prefix for new kcontrol (bsc#1051510).
- b43legacy: Fix case where channel status is corrupted (bsc#1051510).
- batman-adv: fix batadv_nc_random_weight_tq (git-fixes).
- batman-adv: Fix refcnt leak in batadv_show_throughput_override (git-fixes).
- batman-adv: Fix refcnt leak in batadv_store_throughput_override (git-fixes).
- batman-adv: Fix refcnt leak in batadv_v_ogm_process (git-fixes).
- bcache: avoid unnecessary btree nodes flushing in btree_flush_write() (git fixes (block drivers)).
- bcache: fix incorrect data type usage in btree_flush_write() (git fixes (block drivers)).
- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (git fixes (block drivers)).
- blk-mq: honor IO scheduler for multiqueue devices (bsc#1165478).
- blk-mq: simplify blk_mq_make_request() (bsc#1165478).
- block/drbd: delete invalid function drbd_md_mark_dirty_ (bsc#1171527).
- block: drbd: remove a stray unlock in __drbd_send_protocol() (bsc#1171599).
- block: fix busy device checking in blk_drop_partitions again (bsc#1171948).
- block: fix busy device checking in blk_drop_partitions (bsc#1171948).
- block: fix memleak of bio integrity data (git fixes (block drivers)).
- block: remove the bd_openers checks in blk_drop_partitions (bsc#1171948).
- bnxt_en: fix memory leaks in bnxt_dcbnl_ieee_getets() (networking-stable-20_03_28).
- bnxt_en: Reduce BNXT_MSIX_VEC_MAX value to supported CQs per PF (bsc#1104745).
- bnxt_en: reinitialize IRQs when MTU is modified (networking-stable-20_03_14).
- bnxt_en: Return error if bnxt_alloc_ctx_mem() fails (bsc#1104745 ).
- bnxt_en: Return error when allocating zero size context memory (bsc#1104745).
- bonding/alb: make sure arp header is pulled before accessing it (networking-stable-20_03_14).
- bpf: Fix sk_psock refcnt leak when receiving message (bsc#1083647).
- bpf: Forbid XADD on spilled pointers for unprivileged users (bsc#1083647).
- brcmfmac: abort and release host after error (bsc#1051510).
- BTRFS: fix deadlock with memory reclaim during scrub (bsc#1172127).
- BTRFS: fix log context list corruption after rename whiteout error (bsc#1172342).
- BTRFS: fix partial loss of prealloc extent past i_size after fsync (bsc#1172343).
- BTRFS: relocation: add error injection points for cancelling balance (bsc#1171417).
- BTRFS: relocation: Check cancel request after each data page read (bsc#1171417).
- BTRFS: relocation: Check cancel request after each extent found (bsc#1171417).
- BTRFS: relocation: Clear the DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417).
- BTRFS: relocation: Fix reloc root leakage and the NULL pointer reference caused by the leakage (bsc#1171417).
- BTRFS: relocation: Work around dead relocation stage loop (bsc#1171417).
- BTRFS: reloc: clear DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance (bsc#1171417 bsc#1160947 bsc#1172366).
- BTRFS: reloc: fix reloc root leak and NULL pointer dereference (bsc#1171417 bsc#1160947 bsc#1172366).
- BTRFS: setup a nofs context for memory allocation at btrfs_create_tree() (bsc#1172127).
- BTRFS: setup a nofs context for memory allocation at __btrfs_set_acl (bsc#1172127).
- BTRFS: use nofs context when initializing security xattrs to avoid deadlock (bsc#1172127).
- can: add missing attribute validation for termination (networking-stable-20_03_14).
- cdc-acm: close race betrween suspend() and acm_softint (git-fixes).
- cdc-acm: introduce a cool down (git-fixes).
- ceph: check if file lock exists before sending unlock request (bsc#1168789).
- ceph: demote quotarealm lookup warning to a debug message (bsc#1171692).
- ceph: fix double unlock in handle_cap_export() (bsc#1171694).
- ceph: fix endianness bug when handling MDS session feature bits (bsc#1171695).
- cgroup, netclassid: periodically release file_lock on classid updating (networking-stable-20_03_14).
- cifs: Allocate crypto structures on the fly for calculating signatures of incoming packets (bsc#1144333).
- cifs: Allocate encryption header through kmalloc (bsc#1144333).
- cifs: allow unlock flock and OFD lock across fork (bsc#1144333).
- cifs: check new file size when extending file by fallocate (bsc#1144333).
- cifs: cifspdu.h: Replace zero-length array with flexible-array member (bsc#1144333).
- cifs: clear PF_MEMALLOC before exiting demultiplex thread (bsc#1144333).
- cifs: do not share tcons with DFS (bsc#1144333).
- cifs: dump the session id and keys also for SMB2 sessions (bsc#1144333).
- cifs: ensure correct super block for DFS reconnect (bsc#1144333).
- cifs: Fix bug which the return value by asynchronous read is error (bsc#1144333).
- cifs: fix uninitialised lease_key in open_shroot() (bsc#1144333).
- cifs: improve read performance for page size 64KB &amp; cache=strict &amp; vers=2.1+ (bsc#1144333).
- cifs: Increment num_remote_opens stats counter even in case of smb2_query_dir_first (bsc#1144333).
- cifs: minor update to comments around the cifs_tcp_ses_lock mutex (bsc#1144333).
- cifs: protect updating server-&gt;dstaddr with a spinlock (bsc#1144333).
- cifs: smb2pdu.h: Replace zero-length array with flexible-array member (bsc#1144333).
- cifs: smbd: Calculate the correct maximum packet size for segmented SMBDirect send/receive (bsc#1144333).
- cifs: smbd: Check and extend sender credits in interrupt context (bsc#1144333).
- cifs: smbd: Check send queue size before posting a send (bsc#1144333).
- cifs: smbd: Do not schedule work to send immediate packet on every receive (bsc#1144333).
- cifs: smbd: Merge code to track pending packets (bsc#1144333).
- cifs: smbd: Properly process errors on ib_post_send (bsc#1144333).
- cifs: smbd: Update receive credits before sending and deal with credits roll back on failure before sending (bsc#1144333).
- cifs: Warn less noisily on default mount (bsc#1144333).
- clk: Add clk_hw_unregister_composite helper function definition (bsc#1051510).
- clk: imx6ull: use OSC clock during AXI rate change (bsc#1051510).
- clk: imx: make mux parent strings const (bsc#1051510).
- clk: mediatek: correct the clocks for MT2701 HDMI PHY module (bsc#1051510).
- clk: sunxi-ng: a64: Fix gate bit of DSI DPHY (bsc#1051510).
- clocksource/drivers/hyper-v: Set TSC clocksource as default w/ InvariantTSC (bsc#1170620, bsc#1170621).
- clocksource: dw_apb_timer_of: Fix missing clockevent timers (bsc#1051510).
- component: Silence bind error on -EPROBE_DEFER (bsc#1051510).
- coresight: do not use the BIT() macro in the UAPI header (git fixes (block drivers)).
- cpufreq: s3c64xx: Remove pointless NULL check in s3c64xx_cpufreq_driver_init (bsc#1051510).
- crypto: ccp - AES CFB mode is a stream cipher (git-fixes).
- crypto: ccp - Clean up and exit correctly on allocation failure (git-fixes).
- crypto: ccp - Cleanup misc_dev on sev_exit() (bsc#1114279).
- crypto: ccp - Cleanup sp_dev_master in psp_dev_destroy() (bsc#1114279).
- cxgb4: fix MPS index overwrite when setting MAC address (bsc#1127355).
- cxgb4: fix Txq restart check during backpressure (bsc#1127354 bsc#1127371).
- debugfs: Add debugfs_create_xul() for hexadecimal unsigned long (git-fixes).
- debugfs_lookup(): switch to lookup_one_len_unlocked() (bsc#1171979).
- devlink: fix return value after hitting end in region read (bsc#1109837).
- devlink: validate length of param values (bsc#1109837).
- devlink: validate length of region addr/len (bsc#1109837).
- dmaengine: dmatest: Fix iteration non-stop logic (bsc#1051510).
- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574).
- dm-raid1: fix invalid return value from dm_mirror (bsc#1172378).
- dm writecache: fix data corruption when reloading the target (git fixes (block drivers)).
- dm writecache: fix incorrect flush sequence when doing SSD mode commit (git fixes (block drivers)).
- dm writecache: verify watermark during resume (git fixes (block drivers)).
- dm zoned: fix invalid memory access (git fixes (block drivers)).
- dm zoned: reduce overhead of backing device checks (git fixes (block drivers)).
- dm zoned: remove duplicate nr_rnd_zones increase in dmz_init_zone() (git fixes (block drivers)).
- dm zoned: support zone sizes smaller than 128MiB (git fixes (block drivers)).
- dp83640: reverse arguments to list_add_tail (git-fixes).
- drivers: hv: Add a module description line to the hv_vmbus driver (bsc#1172249, bsc#1172251).
- drivers/net/ibmvnic: Update VNIC protocol version reporting (bsc#1065729).
- drivers: w1: add hwmon support structures (jsc#SLE-11048).
- drivers: w1: add hwmon temp support for w1_therm (jsc#SLE-11048).
- drivers: w1: refactor w1_slave_show to make the temp reading functionality separate (jsc#SLE-11048).
- drm: amd/acp: fix broken menu structure (bsc#1114279) 	* context changes
- drm/amdgpu: Correctly initialize thermal controller for GPUs with Powerplay table v0 (e.g Hawaii) (bsc#1111666).
- drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event (bsc#1111666).
- drm/amd/powerplay: force the trim of the mclk dpm_levels if OD is (bsc#1113956)
- drm/atomic: Take the atomic toys away from X (bsc#1112178) 	* context changes
- drm/crc: Actually allow to change the crc source (bsc#1114279) 	* offset changes
- drm/dp_mst: Fix clearing payload state on topology disable (bsc#1051510).
- drm/dp_mst: Reformat drm_dp_check_act_status() a bit (bsc#1051510).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (bsc#1114279)
- drm/etnaviv: fix perfmon domain interation (bsc#1113956)
- drm/etnaviv: rework perfmon query infrastructure (bsc#1112178)
- drm/i915: Apply Wa_1406680159:icl,ehl as an engine workaround (bsc#1112178) 	* rename gt/intel_workarounds.c to intel_workarounds.c 	* context changes
- drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of (bsc#1114279)
- drm/i915: HDCP: fix Ri prime check done during link check (bsc#1112178) 	* rename display/intel_hdmi.c to intel_hdmi.c 	* context changes
- drm/i915: properly sanity check batch_start_offset (bsc#1114279) 	* renamed display/intel_fbc.c -&gt; intel_fb.c 	* renamed gt/intel_rc6.c -&gt; intel_pm.c 	* context changes
- drm/meson: Delete an error message in meson_dw_hdmi_bind() (bsc#1051510).
- drm: NULL pointer dereference [null-pointer-deref] (CWE 476) problem (bsc#1114279)
- drm/qxl: qxl_release leak in qxl_draw_dirty_fb() (bsc#1051510).
- drm/qxl: qxl_release leak in qxl_hw_surface_alloc() (bsc#1051510).
- drm/qxl: qxl_release use after free (bsc#1051510).
- drm: Remove PageReserved manipulation from drm_pci_alloc (bsc#1114279) 	* offset changes
- drm/sun4i: dsi: Allow binding the host without a panel (bsc#1113956)
- drm/sun4i: dsi: Avoid hotplug race with DRM driver bind (bsc#1113956)
- drm/sun4i: dsi: Remove incorrect use of runtime PM (bsc#1113956) 	* context changes
- drm/sun4i: dsi: Remove unused drv from driver context (bsc#1113956) 	* context changes 	* keep include of sun4i_drv.h
- dump_stack: avoid the livelock of the dump_lock (git fixes (block drivers)).
- EDAC, sb_edac: Add support for systems with segmented PCI buses (bsc#1169525).
- ext4: do not zeroout extents beyond i_disksize (bsc#1167851).
- ext4: fix extent_status fragmentation for plain files (bsc#1171949).
- ext4: use non-movable memory for superblock readahead (bsc#1171952).
- fanotify: fix merging marks masks with FAN_ONDIR (bsc#1171679).
- fbcon: fix null-ptr-deref in fbcon_switch (bsc#1114279) 	* rename drivers/video/fbdev/core to drivers/video/console 	* context changes
- fib: add missing attribute validation for tun_id (networking-stable-20_03_14).
- firmware: qcom: scm: fix compilation error when disabled (bsc#1051510).
- fs/cifs: fix gcc warning in sid_to_id (bsc#1144333).
- fs/seq_file.c: simplify seq_file iteration code and interface (bsc#1170125).
- gpio: tegra: mask GPIO IRQs during IRQ shutdown (bsc#1051510).
- gre: fix uninit-value in __iptunnel_pull_header (networking-stable-20_03_14).
- HID: hid-input: clear unmapped usages (git-fixes).
- HID: Hyper-V: Add a module description line (bsc#1172249, bsc#1172251).
- HID: i2c-hid: add Trekstor Primebook C11B to descriptor override (git-fixes).
- HID: i2c-hid: override HID descriptors for certain devices (git-fixes).
- HID: multitouch: add eGalaxTouch P80H84 support (bsc#1051510).
- HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices (git-fixes).
- hrtimer: Annotate lockless access to timer-&gt;state (git fixes (block drivers)).
- hsr: add restart routine into hsr_get_node_list() (networking-stable-20_03_28).
- hsr: check protocol version in hsr_newlink() (networking-stable-20_04_17).
- hsr: fix general protection fault in hsr_addr_is_self() (networking-stable-20_03_28).
- hsr: set .netnsok flag (networking-stable-20_03_28).
- hsr: use rcu_read_lock() in hsr_get_node_{list/status}() (networking-stable-20_03_28).
- i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present (git-fixes).
- i2c: acpi: put device when verifying client fails (git-fixes).
- i2c: brcmstb: remove unused struct member (git-fixes).
- i2c: core: Allow empty id_table in ACPI case as well (git-fixes).
- i2c: core: decrease reference count of device node in i2c_unregister_device (git-fixes).
- i2c: dev: Fix the race between the release of i2c_dev and cdev (bsc#1051510).
- i2c: fix missing pm_runtime_put_sync in i2c_device_probe (git-fixes).
- i2c-hid: properly terminate i2c_hid_dmi_desc_override_table array (git-fixes).
- i2c: i801: Do not add ICH_RES_IO_SMI for the iTCO_wdt device (git-fixes).
- i2c: iproc: Stop advertising support of SMBUS quick cmd (git-fixes).
- i2c: isch: Remove unnecessary acpi.h include (git-fixes).
- i2c: mux: demux-pinctrl: Fix an error handling path in 'i2c_demux_pinctrl_probe()' (bsc#1051510).
- i2c: st: fix missing struct parameter description (bsc#1051510).
- IB/mlx5: Fix missing congestion control debugfs on rep rdma device (bsc#1103991).
- ibmvnic: Skip fatal error reset after passive init (bsc#1171078 ltc#184239).
- iio:ad7797: Use correct attribute_group (bsc#1051510).
- iio: adc: stm32-adc: fix device used to request dma (bsc#1051510).
- iio: adc: stm32-adc: fix sleep in atomic context (git-fixes).
- iio: adc: stm32-adc: Use dma_request_chan() instead dma_request_slave_channel() (bsc#1051510).
- iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()' (bsc#1051510).
- iio: sca3000: Remove an erroneous 'get_device()' (bsc#1051510).
- iio: xilinx-xadc: Fix ADC-B powerdown (bsc#1051510).
- iio: xilinx-xadc: Fix clearing interrupt when enabling trigger (bsc#1051510).
- iio: xilinx-xadc: Fix sequencer configuration for aux channels in simultaneous mode (bsc#1051510).
- ima: Fix return value of ima_write_policy() (git-fixes).
- Input: evdev - call input_flush_device() on release(), not flush() (bsc#1051510).
- Input: hyperv-keyboard - add module description (bsc#1172249, bsc#1172251).
- Input: i8042 - add Acer Aspire 5738z to nomux list (bsc#1051510).
- Input: i8042 - add ThinkPad S230u to i8042 reset list (bsc#1051510).
- Input: raydium_i2c_ts - use true and false for boolean values (bsc#1051510).
- Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() (bsc#1051510).
- Input: synaptics-rmi4 - really fix attn_data use-after-free (git-fixes).
- Input: usbtouchscreen - add support for BonXeon TP (bsc#1051510).
- Input: xpad - add custom init packet for Xbox One S controllers (bsc#1051510).
- iommu/amd: Call domain_flush_complete() in update_domain() (bsc#1172096).
- iommu/amd: Do not flush Device Table in iommu_map_page() (bsc#1172097).
- iommu/amd: Do not loop forever when trying to increase address space (bsc#1172098).
- iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system (bsc#1172099).
- iommu/amd: Fix over-read of ACPI UID from IVRS table (bsc#1172101).
- iommu/amd: Fix race in increase_address_space()/fetch_pte() (bsc#1172102).
- iommu/amd: Update Device Table in increase_address_space() (bsc#1172103).
- iommu: Fix reference count leak in iommu_group_alloc (bsc#1172397).
- ip6_tunnel: Allow rcv/xmit even if remote address is a local address (bsc#1166978).
- ipv4: fix a RCU-list lock in fib_triestat_seq_show (networking-stable-20_04_02).
- ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface (networking-stable-20_03_14).
- ipv6: do not auto-add link-local address to lag ports (networking-stable-20_04_09).
- ipv6: fix IPV6_ADDRFORM operation logic (bsc#1171662).
- ipv6: fix restrict IPV6_ADDRFORM operation (bsc#1171662).
- ipvlan: add cond_resched_rcu() while processing muticast backlog (networking-stable-20_03_14).
- ipvlan: do not deref eth hdr before checking it's set (networking-stable-20_03_14).
- ipvlan: do not use cond_resched_rcu() in ipvlan_process_multicast() (networking-stable-20_03_14).
- iwlwifi: pcie: actually release queue memory in TVQM (bsc#1051510).
- ixgbe: do not check firmware errors (bsc#1170284).
- kabi fix for early XHCI debug (git-fixes).
- kabi for for md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (git-fixes).
- kabi/severities: Do not track KVM internal symbols.
- kabi/severities: Ingnore get_dev_data() The function is internal to the AMD IOMMU driver and must not be called by any third party.
- kabi workaround for snd_rawmidi buffer_ref field addition (git-fixes).
- KEYS: reaching the keys quotas correctly (bsc#1051510).
- KVM: arm64: Change hyp_panic()s dependency on tpidr_el2 (bsc#1133021).
- KVM: arm64: Stop save/restoring host tpidr_el1 on VHE (bsc#1133021).
- KVM: Check validity of resolved slot when searching memslots (bsc#1172104).
- KVM: s390: vsie: Fix delivery of addressing exceptions (git-fixes).
- KVM: SVM: Fix potential memory leak in svm_cpu_init() (bsc#1171736).
- KVM x86: Extend AMD specific guest behavior to Hygon virtual CPUs (bsc#1152489).
- l2tp: Allow management of tunnels and session in user namespace (networking-stable-20_04_17).
- libata: Remove extra scsi_host_put() in ata_scsi_add_hosts() (bsc#1051510).
- libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set (bsc#1051510).
- lib: raid6: fix awk build warnings (git fixes (block drivers)).
- lib/raid6/test: fix build on distros whose /bin/sh is not bash (git fixes (block drivers)).
- lib/stackdepot.c: fix global out-of-bounds in stack_slabs (git fixes (block drivers)).
- locks: print unsigned ino in /proc/locks (bsc#1171951). 
- mac80211: add ieee80211_is_any_nullfunc() (bsc#1051510).
- mac80211_hwsim: Use kstrndup() in place of kasprintf() (bsc#1051510).
- mac80211: mesh: fix discovery timer re-arming issue / crash (bsc#1051510).
- macsec: avoid to set wrong mtu (bsc#1051510).
- macsec: restrict to ethernet devices (networking-stable-20_03_28).
- macvlan: add cond_resched() during multicast processing (networking-stable-20_03_14).
- macvlan: fix null dereference in macvlan_device_event() (bsc#1051510).
- md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (git-fixes).
- md/raid0: Fix an error message in raid0_make_request() (git fixes (block drivers)).
- md/raid10: prevent access of uninitialized resync_pages offset (git-fixes).
- media: dvb: return -EREMOTEIO on i2c transfer failure (bsc#1051510).
- media: platform: fcp: Set appropriate DMA parameters (bsc#1051510).
- media: ti-vpe: cal: fix disable_irqs to only the intended target (git-fixes).
- mei: release me_cl object reference (bsc#1051510).
- mlxsw: Fix some IS_ERR() vs NULL bugs (networking-stable-20_04_27).
- mlxsw: spectrum_flower: Do not stop at FLOW_ACTION_VLAN_MANGLE (networking-stable-20_04_09).
- mlxsw: spectrum_mr: Fix list iteration in error path (bsc#1112374).
- mmc: atmel-mci: Fix debugfs on 64-bit platforms (git-fixes).
- mmc: core: Check request type before completing the request (git-fixes).
- mmc: core: Fix recursive locking issue in CQE recovery path (git-fixes).
- mmc: cqhci: Avoid false 'cqhci: CQE stuck on' by not open-coding timeout loop (git-fixes).
- mmc: dw_mmc: Fix debugfs on 64-bit platforms (git-fixes).
- mmc: meson-gx: make sure the descriptor is stopped on errors (git-fixes).
- mmc: meson-gx: simplify interrupt handler (git-fixes).
- mmc: renesas_sdhi: limit block count to 16 bit for old revisions (git-fixes).
- mmc: sdhci-esdhc-imx: fix the mask for tuning start point (bsc#1051510).
- mmc: sdhci-msm: Clear tuning done flag while hs400 tuning (bsc#1051510).
- mmc: sdhci-of-at91: fix memleak on clk_get failure (git-fixes).
- mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers (bsc#1051510).
- mmc: sdhci-xenon: fix annoying 1.8V regulator warning (bsc#1051510).
- mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card() (bsc#1051510).
- mmc: tmio: fix access width of Block Count Register (git-fixes).
- mm: limit boost_watermark on small zones (git fixes (mm/pgalloc)).
- mm: thp: handle page cache THP correctly in PageTransCompoundMap (git fixes (block drivers)).
- mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer (bsc#1051510).
- mtd: spi-nor: cadence-quadspi: add a delay in write sequence (git-fixes).
- mtd: spi-nor: enable 4B opcodes for mx66l51235l (git-fixes).
- mwifiex: avoid -Wstringop-overflow warning (bsc#1051510).
- mwifiex: Fix memory corruption in dump_station (bsc#1051510).
- net: bcmgenet: correct per TX/RX ring statistics (networking-stable-20_04_27).
- net: dsa: b53: Fix ARL register definitions (networking-stable-20_04_27).
- net: dsa: b53: Rework ARL bin logic (networking-stable-20_04_27).
- net: dsa: bcm_sf2: Do not register slave MDIO bus with OF (networking-stable-20_04_09).
- net: dsa: bcm_sf2: Ensure correct sub-node is parsed (networking-stable-20_04_09).
- net: dsa: Fix duplicate frames flooded by learning (networking-stable-20_03_28).
- net: dsa: mv88e6xxx: fix lockup on warm boot (networking-stable-20_03_14).
- net/ethernet: add Google GVE driver (jsc#SLE-10538)
- net: fec: add phy_reset_after_clk_enable() support (git-fixes).
- net: fec: validate the new settings in fec_enet_set_coalesce() (networking-stable-20_03_14).
- net: fix race condition in __inet_lookup_established() (bsc#1151794).
- net: fq: add missing attribute validation for orphan mask (networking-stable-20_03_14).
- net: hns3: fix 'tc qdisc del' failed issue (bsc#1109837).
- net, ip_tunnel: fix interface lookup with no key (networking-stable-20_04_02).
- net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin (networking-stable-20_04_17).
- net: ipv6: do not consider routes via gateways for anycast address check (networking-stable-20_04_17).
- netlink: Use netlink header as base to calculate bad attribute offset (networking-stable-20_03_14).
- net: macsec: update SCI upon MAC address change (networking-stable-20_03_14).
- net: memcg: fix lockdep splat in inet_csk_accept() (networking-stable-20_03_14).
- net: memcg: late association of sock to memcg (networking-stable-20_03_14).
- net/mlx4_en: avoid indirect call in TX completion (networking-stable-20_04_27).
- net/mlx5: Add new fields to Port Type and Speed register (bsc#1171118).
- net/mlx5: Expose link speed directly (bsc#1171118).
- net/mlx5: Expose port speed when possible (bsc#1171118).
- net/mlx5: Fix failing fw tracer allocation on s390 (bsc#1103990 ).
- net: mvneta: Fix the case where the last poll did not process all rx (networking-stable-20_03_28).
- net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node (networking-stable-20_04_27).
- net/packet: tpacket_rcv: do not increment ring index on drop (networking-stable-20_03_14).
- net: qmi_wwan: add support for ASKEY WWHC050 (networking-stable-20_03_28).
- net: revert default NAPI poll timeout to 2 jiffies (networking-stable-20_04_17).
- net_sched: cls_route: remove the right filter from hashtable (networking-stable-20_03_28).
- net_sched: sch_skbprio: add message validation to skbprio_change() (bsc#1109837).
- net/x25: Fix x25_neigh refcnt leak when receiving frame (networking-stable-20_04_27).
- nfc: add missing attribute validation for SE API (networking-stable-20_03_14).
- nfc: add missing attribute validation for vendor subcommand (networking-stable-20_03_14).
- nfc: st21nfca: add missed kfree_skb() in an error path (bsc#1051510).
- nfp: abm: fix a memory leak bug (bsc#1109837).
- nfsd4: fix up replay_matches_cache() (git-fixes).
- nfsd: Ensure CLONE persists data and metadata changes to the target file (git-fixes).
- nfsd: fix delay timer on 32-bit architectures (git-fixes).
- nfsd: fix jiffies/time_t mixup in LRU list (git-fixes).
- NFS: Directory page cache pages need to be locked when read (git-fixes).
- nfsd: memory corruption in nfsd4_lock() (git-fixes).
- NFS: Do not call generic_error_remove_page() while holding locks (bsc#1170457).
- NFS: Fix memory leaks and corruption in readdir (git-fixes).
- NFS: Fix O_DIRECT accounting of number of bytes read/written (git-fixes).
- NFS: Fix potential posix_acl refcnt leak in nfs3_set_acl (git-fixes).
- NFS: fix racey wait in nfs_set_open_stateid_locked (bsc#1170592).
- NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O (git-fixes).
- NFS/pnfs: Fix pnfs_generic_prepare_to_resend_writes() (git-fixes).
- NFS: Revalidate the file size on a fatal write error (git-fixes).
- NFSv4.0: nfs4_do_fsinfo() should not do implicit lease renewals (git-fixes).
- NFSv4: Do not allow a cached open with a revoked delegation (git-fixes).
- NFSv4: Fix leak of clp-&gt;cl_acceptor string (git-fixes).
- NFSv4/pnfs: Return valid stateids in nfs_layout_find_inode_by_stateid() (git-fixes).
- NFSv4: try lease recovery on NFS4ERR_EXPIRED (git-fixes).
- NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn (git-fixes).
- nl802154: add missing attribute validation for dev_type (networking-stable-20_03_14).
- nl802154: add missing attribute validation (networking-stable-20_03_14).
- nvme-fc: print proper nvme-fc devloss_tmo value (bsc#1172391).
- objtool: Fix stack offset tracking for indirect CFAs (bsc#1169514).
- objtool: Fix switch table detection in .text.unlikely (bsc#1169514).
- objtool: Make BP scratch register warning more robust (bsc#1169514).
- padata: Remove broken queue flushing (git-fixes).
- Partially revert 'kfifo: fix kfifo_alloc() and kfifo_init()' (git fixes (block drivers)).
- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (bsc#1172201, bsc#1172202).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (bsc#1172201, bsc#1172202).
- pinctrl: baytrail: Enable pin configuration setting for GPIO chip (git-fixes).
- pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler (git-fixes).
- pinctrl: sunrisepoint: Fix PAD lock register offset for SPT-H (git-fixes).
- platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA (bsc#1051510).
- pNFS: Ensure we do clear the return-on-close layout stateid on fatal errors (git-fixes).
- powerpc: Add attributes for setjmp/longjmp (bsc#1065729).
- powerpc/pci/of: Parse unassigned resources (bsc#1065729).
- powerpc/setup_64: Set cache-line-size based on cache-block-size (bsc#1065729).
- powerpc/sstep: Fix DS operand in ld encoding to appropriate value (bsc#1065729).
- r8152: check disconnect status after long sleep (networking-stable-20_03_14).
- raid6/ppc: Fix build for clang (git fixes (block drivers)).
- random: always use batched entropy for get_random_u{32,64} (bsc#1164871).
- rcu: locking and unlocking need to always be at least barriers (git fixes (block drivers)).
- Revert 'ALSA: hda/realtek: Fix pop noise on ALC225' (git-fixes).
- Revert 'drm/panel: simple: Add support for Sharp LQ150X1LG11 panels' (bsc#1114279) 	* offset changes
- Revert 'ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()' (bsc#1172221).
- Revert 'RDMA/cma: Simplify rdma_resolve_addr() error flow' (bsc#1103992).
- rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup() (bsc#1051510).
- s390/cpum_cf: Add new extended counters for IBM z15 (bsc#1169762 LTC#185291).
- s390/ftrace: fix potential crashes when switching tracers (git-fixes).
- s390/ism: fix error return code in ism_probe() (git-fixes).
- s390/pci: do not set affinity for floating irqs (git-fixes).
- s390/pci: Fix possible deadlock in recover_store() (bsc#1165183 LTC#184103).
- s390/pci: Recover handle in clp_set_pci_fn() (bsc#1165183 LTC#184103).
- scripts/decodecode: fix trapping instruction formatting (bsc#1065729).
- scripts/dtc: Remove redundant YYLOC global declaration (bsc#1160388).
- scsi: bnx2i: fix potential use after free (bsc#1171600).
- scsi: core: Handle drivers which set sg_tablesize to zero (bsc#1171601) This commit also required: &gt; scsi: core: avoid preallocating big SGL for data
- scsi: core: save/restore command resid for error handling (bsc#1171602).
- scsi: core: scsi_trace: Use get_unaligned_be*() (bsc#1171604).
- scsi: core: try to get module before removing device (bsc#1171605).
- scsi: csiostor: Adjust indentation in csio_device_reset (bsc#1171606).
- scsi: csiostor: Do not enable IRQs too early (bsc#1171607).
- scsi: esas2r: unlock on error in esas2r_nvram_read_direct() (bsc#1171608).
- scsi: fnic: fix invalid stack access (bsc#1171609).
- scsi: fnic: fix msix interrupt allocation (bsc#1171610).
- scsi: ibmvscsi: Fix WARN_ON during event pool release (bsc#1170791 ltc#185128).
- scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func (bsc#1171611).
- scsi: iscsi: Fix a potential deadlock in the timeout handler (bsc#1171612).
- scsi: iscsi: qla4xxx: fix double free in probe (bsc#1171613).
- scsi: lpfc: Change default queue allocation for reduced memory consumption (bsc#1164780).
- scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences (bsc#1171614).
- scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG (bsc#1171615).
- scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event (bsc#1164780).
- scsi: lpfc: Fix MDS Diagnostic Enablement definition (bsc#1164780).
- scsi: lpfc: Fix negation of else clause in lpfc_prep_node_fc4type (bsc#1164780).
- scsi: lpfc: Fix noderef and address space warnings (bsc#1164780).
- scsi: lpfc: Maintain atomic consistency of queue_claimed flag (bsc#1164780).
- scsi: lpfc: remove duplicate unloading checks (bsc#1164780).
- scsi: lpfc: Remove re-binding of nvme rport during registration (bsc#1164780).
- scsi: lpfc: Remove redundant initialization to variable rc (bsc#1164780).
- scsi: lpfc: Remove unnecessary lockdep_assert_held calls (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.1 (bsc#1164780).
- scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state (bsc#1171616).
- scsi: qla2xxx: add ring buffer for tracing debug logs (bsc#1157169).
- scsi: qla2xxx: check UNLOADING before posting async work (bsc#1157169).
- scsi: qla2xxx: Delete all sessions before unregister local nvme port (bsc#1157169).
- scsi: qla2xxx: Do not log message when reading port speed via sysfs (bsc#1157169).
- scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV (bsc#1157169).
- scsi: qla2xxx: Fix regression warnings (bsc#1157169).
- scsi: qla2xxx: Remove non functional code (bsc#1157169).
- scsi: qla2xxx: set UNLOADING before waiting for session deletion (bsc#1157169).
- scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free (bsc#1171617).
- scsi: qla4xxx: fix double free bug (bsc#1171618).
- scsi: sd: Clear sdkp-&gt;protection_type if disk is reformatted without PI (bsc#1171619).
- scsi: sg: add sg_remove_request in sg_common_write (bsc#1171620).
- scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) (bsc#1171621).
- scsi: ufs: change msleep to usleep_range (bsc#1171622).
- scsi: ufs: Clean up ufshcd_scale_clks() and clock scaling error out path (bsc#1171623).
- scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic (bsc#1171624).
- scsi: ufs: Fix ufshcd_probe_hba() reture value in case ufshcd_scsi_add_wlus() fails (bsc#1171625).
- scsi: ufs: Recheck bkops level if bkops is disabled (bsc#1171626).
- sctp: fix possibly using a bad saddr with a given dst (networking-stable-20_04_02).
- sctp: fix refcount bug in sctp_wfree (networking-stable-20_04_02).
- selftests/powerpc: Fix build errors in powerpc ptrace selftests (boo#1124278).
- Separate one more kABI fixup from the functional change:
- seq_file: fix problem when seeking mid-record (bsc#1170125).
- serial: uartps: Move the spinlock after the read of the tx empty (git-fixes).
- sfc: detach from cb_page in efx_copy_channel() (networking-stable-20_03_14).
- signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig (bsc#1172185).
- slcan: not call free_netdev before rtnl_unlock in slcan_open (networking-stable-20_03_28).
- slip: make slhc_compress() more robust against malicious packets (networking-stable-20_03_14).
- SMB3: Additional compression structures (bsc#1144333).
- SMB3: Add new compression flags (bsc#1144333).
- SMB3: change noisy error message to FYI (bsc#1144333).
- SMB3: enable swap on SMB3 mounts (bsc#1144333).
- SMB3: Minor cleanup of protocol definitions (bsc#1144333).
- SMB3: remove overly noisy debug line in signing errors (bsc#1144333).
- SMB3: smbdirect support can be configured by default (bsc#1144333).
- SMB3: use SMB2_SIGNATURE_SIZE define (bsc#1144333).
- spi: bcm63xx-hsspi: Really keep pll clk enabled (bsc#1051510).
- spi: bcm-qspi: when tx/rx buffer is NULL set to 0 (bsc#1051510).
- spi: dw: Add SPI Rx-done wait method to DMA-based transfer (bsc#1051510).
- spi: dw: Zero DMA Tx and Rx configurations on stack (bsc#1051510).
- spi: pxa2xx: Add CS control clock quirk (bsc#1051510).
- spi: qup: call spi_qup_pm_resume_runtime before suspending (bsc#1051510).
- spi/zynqmp: remove entry that causes a cs glitch (bsc#1051510).
- staging: comedi: dt2815: fix writing hi byte of analog output (bsc#1051510).
- staging: comedi: Fix comedi_device refcnt leak in comedi_open (bsc#1051510).
- staging: iio: ad2s1210: Fix SPI reading (bsc#1051510).
- supported.conf: Add br_netfilter to base (bsc#1169020).
- supported.conf: support w1 core and thermometer support
- svcrdma: Fix double svc_rdma_send_ctxt_put() in an error path (bsc#1103992).
- svcrdma: Fix leak of transport addresses (git-fixes).
- svcrdma: Fix trace point use-after-free race (bsc#1103992 ).
- taskstats: fix data-race (bsc#1172188).
- tcp: cache line align MAX_TCP_HEADER (networking-stable-20_04_27).
- tcp: repair: fix TCP_QUEUE_SEQ implementation (networking-stable-20_03_28).
- team: add missing attribute validation for array index (networking-stable-20_03_14).
- team: add missing attribute validation for port ifindex (networking-stable-20_03_14).
- team: fix hang in team_mode_get() (networking-stable-20_04_27).
- tools lib traceevent: Remove unneeded qsort and uses memmove instead (git-fixes).
- tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send() (bsc#1065729).
- tpm/tpm_tis: Free IRQ if probing fails (bsc#1082555).
- tun: Do not put_page() for all negative return values from XDP program (bsc#1109837).
- Update config files: Build w1 bus on arm64 (jsc#SLE-11048)
- USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair K70 RGB RAPIDFIRE (git-fixes).
- USB: cdc-acm: restore capability check order (git-fixes).
- USB: core: Fix misleading driver bug report (bsc#1051510).
- USB: dwc3: do not set gadget-&gt;is_otg flag (git-fixes).
- USB: dwc3: gadget: Do link recovery for SS and SSP (git-fixes).
- USB: early: Handle AMD's spec-compliant identifiers, too (git-fixes).
- USB: f_fs: Clear OS Extended descriptor counts to zero in ffs_data_reset() (git-fixes).
- USB: gadget: audio: Fix a missing error return value in audio_bind() (git-fixes).
- USB: gadget: composite: Inform controller driver of self-powered (git-fixes).
- USB: gadget: legacy: fix error return code in cdc_bind() (git-fixes).
- USB: gadget: legacy: fix error return code in gncm_bind() (git-fixes).
- usb: gadget: legacy: fix redundant initialization warnings (bsc#1051510).
- USB: gadget: net2272: Fix a memory leak in an error handling path in 'net2272_plat_probe()' (git-fixes).
- USB: gadget: udc: atmel: Fix vbus disconnect handling (git-fixes).
- USB: gadget: udc: atmel: Make some symbols static (git-fixes).
- USB: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete (git-fixes).
- USB: host: xhci-plat: keep runtime active when removing host (git-fixes).
- USB: hub: Fix handling of connect changes during sleep (git-fixes).
- usbnet: silence an unnecessary warning (bsc#1170770).
- USB: serial: garmin_gps: add sanity checking for data length (git-fixes).
- USB: serial: option: add BroadMobi BM806U (git-fixes).
- USB: serial: option: add support for ASKEY WWHC050 (git-fixes).
- USB: serial: option: add Wistron Neweb D19Q1 (git-fixes).
- USB: serial: qcserial: Add DW5816e support (git-fixes).
- USB: sisusbvga: Change port variable from signed to unsigned (git-fixes).
- usb-storage: Add unusual_devs entry for JMicron JMS566 (git-fixes).
- USB: uas: add quirk for LaCie 2Big Quadra (git-fixes).
- USB: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list (git-fixes).
- video: fbdev: sis: Remove unnecessary parentheses and commented code (bsc#1114279)
- video: fbdev: w100fb: Fix a potential double free (bsc#1051510).
- vrf: Check skb for XFRM_TRANSFORMED flag (networking-stable-20_04_27).
- vxlan: check return value of gro_cells_init() (networking-stable-20_03_28).
- w1: Add subsystem kernel public interface (jsc#SLE-11048).
- w1: Fix slave count on 1-Wire bus (resend) (jsc#SLE-11048).
- w1: keep balance of mutex locks and refcnts (jsc#SLE-11048).
- w1: use put_device() if device_register() fail (jsc#SLE-11048).
- watchdog: reset last_hw_keepalive time at start (git-fixes).
- wcn36xx: Fix error handling path in 'wcn36xx_probe()' (bsc#1051510).
- wil6210: remove reset file from debugfs (git-fixes).
- wimax/i2400m: Fix potential urb refcnt leak (bsc#1051510).
- workqueue: do not use wq_select_unbound_cpu() for bound works (bsc#1172130).
- x86/entry/64: Fix unwind hints in kernel exit path (bsc#1058115).
- x86/entry/64: Fix unwind hints in register clearing code (bsc#1058115).
- x86/entry/64: Fix unwind hints in rewind_stack_do_exit() (bsc#1058115).
- x86/entry/64: Fix unwind hints in __switch_to_asm() (bsc#1058115).
- x86/Hyper-V: Allow guests to enable InvariantTSC (bsc#1170621, bsc#1170620).
- x86/Hyper-V: Free hv_panic_page when fail to register kmsg dump (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash data in die() when panic_on_oops is set (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash register data or kmsg before running crash kernel (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Report crash register data when sysctl_record_panic_msg is not set (bsc#1170617, bsc#1170618).
- x86: Hyper-V: report value of misc_features (git fixes).
- x86/Hyper-V: Trigger crash enlightenment only once during system crash (bsc#1170617, bsc#1170618).
- x86/Hyper-V: Unload vmbus channel in hv panic callback (bsc#1170617, bsc#1170618).
- x86/kprobes: Avoid kretprobe recursion bug (bsc#1114279).
- x86/resctrl: Fix invalid attempt at removing the default resource group (git-fixes).
- x86/resctrl: Preserve CDP enable over CPU hotplug (bsc#1114279).
- x86/unwind/orc: Do not skip the first frame for inactive tasks (bsc#1058115).
- x86/unwind/orc: Fix error handling in __unwind_start() (bsc#1058115).
- x86/unwind/orc: Fix error path for bad ORC entry type (bsc#1058115).
- x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks (bsc#1058115).
- x86/unwind/orc: Prevent unwinding before ORC initialization (bsc#1058115).
- x86/unwind: Prevent false warnings for non-current tasks (bsc#1058115).
- xen/pci: reserve MCFG areas earlier (bsc#1170145).
- xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish (networking-stable-20_04_27).
- xfs: clear PF_MEMALLOC before exiting xfsaild thread (git-fixes).
- xfs: Correctly invert xfs_buftarg LRU isolation logic (git-fixes).
- xfs: do not ever return a stale pointer from __xfs_dir3_free_read (git-fixes).
- xprtrdma: Fix completion wait during device removal (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-06-10"/>
	<updated date="2020-06-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1082555">SUSE bug 1082555</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1089895">SUSE bug 1089895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124278">SUSE bug 1124278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127355">SUSE bug 1127355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151794">SUSE bug 1151794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152489">SUSE bug 1152489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154824">SUSE bug 1154824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157169">SUSE bug 1157169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158265">SUSE bug 1158265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160388">SUSE bug 1160388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160947">SUSE bug 1160947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164871">SUSE bug 1164871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165183">SUSE bug 1165183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165478">SUSE bug 1165478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165741">SUSE bug 1165741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166969">SUSE bug 1166969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166978">SUSE bug 1166978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167574">SUSE bug 1167574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167851">SUSE bug 1167851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167867">SUSE bug 1167867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168332">SUSE bug 1168332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168670">SUSE bug 1168670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168789">SUSE bug 1168789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169020">SUSE bug 1169020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169525">SUSE bug 1169525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169762">SUSE bug 1169762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170056">SUSE bug 1170056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170125">SUSE bug 1170125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170145">SUSE bug 1170145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170284">SUSE bug 1170284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170345">SUSE bug 1170345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170457">SUSE bug 1170457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170522">SUSE bug 1170522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170592">SUSE bug 1170592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170617">SUSE bug 1170617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170618">SUSE bug 1170618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170620">SUSE bug 1170620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170621">SUSE bug 1170621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170770">SUSE bug 1170770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170778">SUSE bug 1170778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170791">SUSE bug 1170791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170901">SUSE bug 1170901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171078">SUSE bug 1171078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171098">SUSE bug 1171098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171118">SUSE bug 1171118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171189">SUSE bug 1171189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171191">SUSE bug 1171191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171195">SUSE bug 1171195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171202">SUSE bug 1171202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171205">SUSE bug 1171205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171214">SUSE bug 1171214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171217">SUSE bug 1171217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171218">SUSE bug 1171218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171219">SUSE bug 1171219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171220">SUSE bug 1171220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171244">SUSE bug 1171244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171293">SUSE bug 1171293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171417">SUSE bug 1171417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171527">SUSE bug 1171527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171599">SUSE bug 1171599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171600">SUSE bug 1171600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171601">SUSE bug 1171601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171602">SUSE bug 1171602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171604">SUSE bug 1171604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171605">SUSE bug 1171605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171606">SUSE bug 1171606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171607">SUSE bug 1171607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171608">SUSE bug 1171608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171609">SUSE bug 1171609</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171610">SUSE bug 1171610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171611">SUSE bug 1171611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171612">SUSE bug 1171612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171613">SUSE bug 1171613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171614">SUSE bug 1171614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171615">SUSE bug 1171615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171616">SUSE bug 1171616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171617">SUSE bug 1171617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171618">SUSE bug 1171618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171619">SUSE bug 1171619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171620">SUSE bug 1171620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171621">SUSE bug 1171621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171622">SUSE bug 1171622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171623">SUSE bug 1171623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171624">SUSE bug 1171624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171625">SUSE bug 1171625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171626">SUSE bug 1171626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171662">SUSE bug 1171662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171679">SUSE bug 1171679</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171691">SUSE bug 1171691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171692">SUSE bug 1171692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171694">SUSE bug 1171694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171695">SUSE bug 1171695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171736">SUSE bug 1171736</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171817">SUSE bug 1171817</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171948">SUSE bug 1171948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171949">SUSE bug 1171949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171951">SUSE bug 1171951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171952">SUSE bug 1171952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171979">SUSE bug 1171979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171982">SUSE bug 1171982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171983">SUSE bug 1171983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172017">SUSE bug 1172017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172096">SUSE bug 1172096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172097">SUSE bug 1172097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172098">SUSE bug 1172098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172099">SUSE bug 1172099</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172101">SUSE bug 1172101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172102">SUSE bug 1172102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172103">SUSE bug 1172103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172104">SUSE bug 1172104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172127">SUSE bug 1172127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172130">SUSE bug 1172130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172185">SUSE bug 1172185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172188">SUSE bug 1172188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172199">SUSE bug 1172199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172201">SUSE bug 1172201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172202">SUSE bug 1172202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172221">SUSE bug 1172221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172249">SUSE bug 1172249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172251">SUSE bug 1172251</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172317">SUSE bug 1172317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172342">SUSE bug 1172342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172343">SUSE bug 1172343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172344">SUSE bug 1172344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172366">SUSE bug 1172366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172378">SUSE bug 1172378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172391">SUSE bug 1172391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172397">SUSE bug 1172397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172453">SUSE bug 1172453</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000199/">CVE-2018-1000199</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19462/">CVE-2019-19462</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20806/">CVE-2019-20806</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20812/">CVE-2019-20812</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9455/">CVE-2019-9455</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10690/">CVE-2020-10690</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10711/">CVE-2020-10711</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10720/">CVE-2020-10720</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10732/">CVE-2020-10732</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-10751/">CVE-2020-10751</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10757/">CVE-2020-10757</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12114/">CVE-2020-12114</cve>
	<cve impact="low" cvss3="1.8/CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12464/">CVE-2020-12464</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12652/">CVE-2020-12652</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12653/">CVE-2020-12653</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12654/">CVE-2020-12654</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12655/">CVE-2020-12655</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12656/">CVE-2020-12656</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12657/">CVE-2020-12657</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12659/">CVE-2020-12659</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12768/">CVE-2020-12768</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12769/">CVE-2020-12769</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13143/">CVE-2020-13143</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501585" comment="cluster-md-kmp-default-4.12.14-197.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501586" comment="dlm-kmp-default-4.12.14-197.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501587" comment="gfs2-kmp-default-4.12.14-197.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501588" comment="ocfs2-kmp-default-4.12.14-197.45.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139116" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1171437" ref_url="https://bugzilla.suse.com/1171437" source="BUGZILLA"/>
		<reference ref_id="1172307" ref_url="https://bugzilla.suse.com/1172307" source="BUGZILLA"/>
		<reference ref_id="1173159" ref_url="https://bugzilla.suse.com/1173159" source="BUGZILLA"/>
		<reference ref_id="1173160" ref_url="https://bugzilla.suse.com/1173160" source="BUGZILLA"/>
		<reference ref_id="1173161" ref_url="https://bugzilla.suse.com/1173161" source="BUGZILLA"/>
		<reference ref_id="1173359" ref_url="https://bugzilla.suse.com/1173359" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10730" ref_url="https://www.suse.com/security/cve/CVE-2020-10730/" source="CVE"/>
		<reference ref_id="CVE-2020-10745" ref_url="https://www.suse.com/security/cve/CVE-2020-10745/" source="CVE"/>
		<reference ref_id="CVE-2020-10760" ref_url="https://www.suse.com/security/cve/CVE-2020-10760/" source="CVE"/>
		<reference ref_id="CVE-2020-14303" ref_url="https://www.suse.com/security/cve/CVE-2020-14303/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1913-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007127.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2020-10745: Fixed an issue which parsing and packing of NBT and DNS packets 
  containing dots could potentially have consumed excessive CPU (bsc#1173160).
- CVE-2020-14303: Fixed an endless loop when receiving at AD DC empty UDP packets (bsc#1173359).
- CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined (bsc#1173159).
- CVE-2020-10760: Fixed a use-after-free in AD DC Global Catalog LDAP server with paged_result or VLV (bsc#1173161).
- Added libnetapi-devel to baselibs conf, for wine usage (bsc#1172307).
- Fixed an installing issue where samba - samba-ad-dc.service did not exist and unit was not found (bsc#1171437).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-14"/>
	<updated date="2020-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171437">SUSE bug 1171437</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172307">SUSE bug 1172307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173159">SUSE bug 1173159</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173160">SUSE bug 1173160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173161">SUSE bug 1173161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173359">SUSE bug 1173359</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10730/">CVE-2020-10730</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10745/">CVE-2020-10745</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10760/">CVE-2020-10760</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14303/">CVE-2020-14303</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501589" comment="ctdb-4.9.5+git.343.4bc358522a9-3.38.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139117" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-puma (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1172175" ref_url="https://bugzilla.suse.com/1172175" source="BUGZILLA"/>
		<reference ref_id="1172176" ref_url="https://bugzilla.suse.com/1172176" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11076" ref_url="https://www.suse.com/security/cve/CVE-2020-11076/" source="CVE"/>
		<reference ref_id="CVE-2020-11077" ref_url="https://www.suse.com/security/cve/CVE-2020-11077/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:1919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-July/007132.html" source="SUSE-SU"/>
		<description>
This update for rubygem-puma to version 4.3.5 fixes the following issues:

- CVE-2020-11077: Fixed a HTTP smuggling issue related to proxy usage (bsc#1172175).
- CVE-2020-11076: Fixed a HTTP smuggling issue when using an invalid transfer-encoding header (bsc#1172176).
- Disabled TLSv1.0 and TLSv1.1 (jsc#SLE-6965).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-07-15"/>
	<updated date="2020-07-15"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172175">SUSE bug 1172175</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172176">SUSE bug 1172176</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-11076/">CVE-2020-11076</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-11077/">CVE-2020-11077</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501474" comment="ruby2.5-rubygem-puma-4.3.5-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139118" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1148868" ref_url="https://bugzilla.suse.com/1148868" source="BUGZILLA"/>
		<reference ref_id="1150660" ref_url="https://bugzilla.suse.com/1150660" source="BUGZILLA"/>
		<reference ref_id="1151927" ref_url="https://bugzilla.suse.com/1151927" source="BUGZILLA"/>
		<reference ref_id="1152107" ref_url="https://bugzilla.suse.com/1152107" source="BUGZILLA"/>
		<reference ref_id="1152624" ref_url="https://bugzilla.suse.com/1152624" source="BUGZILLA"/>
		<reference ref_id="1158983" ref_url="https://bugzilla.suse.com/1158983" source="BUGZILLA"/>
		<reference ref_id="1159058" ref_url="https://bugzilla.suse.com/1159058" source="BUGZILLA"/>
		<reference ref_id="1161016" ref_url="https://bugzilla.suse.com/1161016" source="BUGZILLA"/>
		<reference ref_id="1162002" ref_url="https://bugzilla.suse.com/1162002" source="BUGZILLA"/>
		<reference ref_id="1162063" ref_url="https://bugzilla.suse.com/1162063" source="BUGZILLA"/>
		<reference ref_id="1163309" ref_url="https://bugzilla.suse.com/1163309" source="BUGZILLA"/>
		<reference ref_id="1166985" ref_url="https://bugzilla.suse.com/1166985" source="BUGZILLA"/>
		<reference ref_id="1167104" ref_url="https://bugzilla.suse.com/1167104" source="BUGZILLA"/>
		<reference ref_id="1168081" ref_url="https://bugzilla.suse.com/1168081" source="BUGZILLA"/>
		<reference ref_id="1168959" ref_url="https://bugzilla.suse.com/1168959" source="BUGZILLA"/>
		<reference ref_id="1169194" ref_url="https://bugzilla.suse.com/1169194" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1169771" ref_url="https://bugzilla.suse.com/1169771" source="BUGZILLA"/>
		<reference ref_id="1169795" ref_url="https://bugzilla.suse.com/1169795" source="BUGZILLA"/>
		<reference ref_id="1170011" ref_url="https://bugzilla.suse.com/1170011" source="BUGZILLA"/>
		<reference ref_id="1170442" ref_url="https://bugzilla.suse.com/1170442" source="BUGZILLA"/>
		<reference ref_id="1170592" ref_url="https://bugzilla.suse.com/1170592" source="BUGZILLA"/>
		<reference ref_id="1170617" ref_url="https://bugzilla.suse.com/1170617" source="BUGZILLA"/>
		<reference ref_id="1170618" ref_url="https://bugzilla.suse.com/1170618" source="BUGZILLA"/>
		<reference ref_id="1171124" ref_url="https://bugzilla.suse.com/1171124" source="BUGZILLA"/>
		<reference ref_id="1171424" ref_url="https://bugzilla.suse.com/1171424" source="BUGZILLA"/>
		<reference ref_id="1171529" ref_url="https://bugzilla.suse.com/1171529" source="BUGZILLA"/>
		<reference ref_id="1171530" ref_url="https://bugzilla.suse.com/1171530" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1171732" ref_url="https://bugzilla.suse.com/1171732" source="BUGZILLA"/>
		<reference ref_id="1171739" ref_url="https://bugzilla.suse.com/1171739" source="BUGZILLA"/>
		<reference ref_id="1171743" ref_url="https://bugzilla.suse.com/1171743" source="BUGZILLA"/>
		<reference ref_id="1171753" ref_url="https://bugzilla.suse.com/1171753" source="BUGZILLA"/>
		<reference ref_id="1171759" ref_url="https://bugzilla.suse.com/1171759" source="BUGZILLA"/>
		<reference ref_id="1171835" ref_url="https://bugzilla.suse.com/1171835" source="BUGZILLA"/>
		<reference ref_id="1171841" ref_url="https://bugzilla.suse.com/1171841" source="BUGZILLA"/>
		<reference ref_id="1171868" ref_url="https://bugzilla.suse.com/1171868" source="BUGZILLA"/>
		<reference ref_id="1171904" ref_url="https://bugzilla.suse.com/1171904" source="BUGZILLA"/>
		<reference ref_id="1172247" ref_url="https://bugzilla.suse.com/1172247" source="BUGZILLA"/>
		<reference ref_id="1172257" ref_url="https://bugzilla.suse.com/1172257" source="BUGZILLA"/>
		<reference ref_id="1172344" ref_url="https://bugzilla.suse.com/1172344" source="BUGZILLA"/>
		<reference ref_id="1172458" ref_url="https://bugzilla.suse.com/1172458" source="BUGZILLA"/>
		<reference ref_id="1172484" ref_url="https://bugzilla.suse.com/1172484" source="BUGZILLA"/>
		<reference ref_id="1172537" ref_url="https://bugzilla.suse.com/1172537" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1172687" ref_url="https://bugzilla.suse.com/1172687" source="BUGZILLA"/>
		<reference ref_id="1172719" ref_url="https://bugzilla.suse.com/1172719" source="BUGZILLA"/>
		<reference ref_id="1172759" ref_url="https://bugzilla.suse.com/1172759" source="BUGZILLA"/>
		<reference ref_id="1172775" ref_url="https://bugzilla.suse.com/1172775" source="BUGZILLA"/>
		<reference ref_id="1172781" ref_url="https://bugzilla.suse.com/1172781" source="BUGZILLA"/>
		<reference ref_id="1172782" ref_url="https://bugzilla.suse.com/1172782" source="BUGZILLA"/>
		<reference ref_id="1172783" ref_url="https://bugzilla.suse.com/1172783" source="BUGZILLA"/>
		<reference ref_id="1172871" ref_url="https://bugzilla.suse.com/1172871" source="BUGZILLA"/>
		<reference ref_id="1172872" ref_url="https://bugzilla.suse.com/1172872" source="BUGZILLA"/>
		<reference ref_id="1172999" ref_url="https://bugzilla.suse.com/1172999" source="BUGZILLA"/>
		<reference ref_id="1173060" ref_url="https://bugzilla.suse.com/1173060" source="BUGZILLA"/>
		<reference ref_id="1173074" ref_url="https://bugzilla.suse.com/1173074" source="BUGZILLA"/>
		<reference ref_id="1173146" ref_url="https://bugzilla.suse.com/1173146" source="BUGZILLA"/>
		<reference ref_id="1173265" ref_url="https://bugzilla.suse.com/1173265" source="BUGZILLA"/>
		<reference ref_id="1173280" ref_url="https://bugzilla.suse.com/1173280" source="BUGZILLA"/>
		<reference ref_id="1173284" ref_url="https://bugzilla.suse.com/1173284" source="BUGZILLA"/>
		<reference ref_id="1173428" ref_url="https://bugzilla.suse.com/1173428" source="BUGZILLA"/>
		<reference ref_id="1173514" ref_url="https://bugzilla.suse.com/1173514" source="BUGZILLA"/>
		<reference ref_id="1173567" ref_url="https://bugzilla.suse.com/1173567" source="BUGZILLA"/>
		<reference ref_id="1173573" ref_url="https://bugzilla.suse.com/1173573" source="BUGZILLA"/>
		<reference ref_id="1173659" ref_url="https://bugzilla.suse.com/1173659" source="BUGZILLA"/>
		<reference ref_id="1173746" ref_url="https://bugzilla.suse.com/1173746" source="BUGZILLA"/>
		<reference ref_id="1173818" ref_url="https://bugzilla.suse.com/1173818" source="BUGZILLA"/>
		<reference ref_id="1173820" ref_url="https://bugzilla.suse.com/1173820" source="BUGZILLA"/>
		<reference ref_id="1173825" ref_url="https://bugzilla.suse.com/1173825" source="BUGZILLA"/>
		<reference ref_id="1173826" ref_url="https://bugzilla.suse.com/1173826" source="BUGZILLA"/>
		<reference ref_id="1173833" ref_url="https://bugzilla.suse.com/1173833" source="BUGZILLA"/>
		<reference ref_id="1173838" ref_url="https://bugzilla.suse.com/1173838" source="BUGZILLA"/>
		<reference ref_id="1173839" ref_url="https://bugzilla.suse.com/1173839" source="BUGZILLA"/>
		<reference ref_id="1173845" ref_url="https://bugzilla.suse.com/1173845" source="BUGZILLA"/>
		<reference ref_id="1173857" ref_url="https://bugzilla.suse.com/1173857" source="BUGZILLA"/>
		<reference ref_id="1174113" ref_url="https://bugzilla.suse.com/1174113" source="BUGZILLA"/>
		<reference ref_id="1174115" ref_url="https://bugzilla.suse.com/1174115" source="BUGZILLA"/>
		<reference ref_id="1174122" ref_url="https://bugzilla.suse.com/1174122" source="BUGZILLA"/>
		<reference ref_id="1174123" ref_url="https://bugzilla.suse.com/1174123" source="BUGZILLA"/>
		<reference ref_id="1174186" ref_url="https://bugzilla.suse.com/1174186" source="BUGZILLA"/>
		<reference ref_id="1174187" ref_url="https://bugzilla.suse.com/1174187" source="BUGZILLA"/>
		<reference ref_id="1174296" ref_url="https://bugzilla.suse.com/1174296" source="BUGZILLA"/>
		<reference ref_id="1174343" ref_url="https://bugzilla.suse.com/1174343" source="BUGZILLA"/>
		<reference ref_id="1174356" ref_url="https://bugzilla.suse.com/1174356" source="BUGZILLA"/>
		<reference ref_id="1174409" ref_url="https://bugzilla.suse.com/1174409" source="BUGZILLA"/>
		<reference ref_id="1174438" ref_url="https://bugzilla.suse.com/1174438" source="BUGZILLA"/>
		<reference ref_id="1174462" ref_url="https://bugzilla.suse.com/1174462" source="BUGZILLA"/>
		<reference ref_id="1174543" ref_url="https://bugzilla.suse.com/1174543" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-16746" ref_url="https://www.suse.com/security/cve/CVE-2019-16746/" source="CVE"/>
		<reference ref_id="CVE-2019-20810" ref_url="https://www.suse.com/security/cve/CVE-2019-20810/" source="CVE"/>
		<reference ref_id="CVE-2019-20908" ref_url="https://www.suse.com/security/cve/CVE-2019-20908/" source="CVE"/>
		<reference ref_id="CVE-2020-0305" ref_url="https://www.suse.com/security/cve/CVE-2020-0305/" source="CVE"/>
		<reference ref_id="CVE-2020-10766" ref_url="https://www.suse.com/security/cve/CVE-2020-10766/" source="CVE"/>
		<reference ref_id="CVE-2020-10767" ref_url="https://www.suse.com/security/cve/CVE-2020-10767/" source="CVE"/>
		<reference ref_id="CVE-2020-10768" ref_url="https://www.suse.com/security/cve/CVE-2020-10768/" source="CVE"/>
		<reference ref_id="CVE-2020-10769" ref_url="https://www.suse.com/security/cve/CVE-2020-10769/" source="CVE"/>
		<reference ref_id="CVE-2020-10773" ref_url="https://www.suse.com/security/cve/CVE-2020-10773/" source="CVE"/>
		<reference ref_id="CVE-2020-10781" ref_url="https://www.suse.com/security/cve/CVE-2020-10781/" source="CVE"/>
		<reference ref_id="CVE-2020-12771" ref_url="https://www.suse.com/security/cve/CVE-2020-12771/" source="CVE"/>
		<reference ref_id="CVE-2020-12888" ref_url="https://www.suse.com/security/cve/CVE-2020-12888/" source="CVE"/>
		<reference ref_id="CVE-2020-13974" ref_url="https://www.suse.com/security/cve/CVE-2020-13974/" source="CVE"/>
		<reference ref_id="CVE-2020-14416" ref_url="https://www.suse.com/security/cve/CVE-2020-14416/" source="CVE"/>
		<reference ref_id="CVE-2020-15393" ref_url="https://www.suse.com/security/cve/CVE-2020-15393/" source="CVE"/>
		<reference ref_id="CVE-2020-15780" ref_url="https://www.suse.com/security/cve/CVE-2020-15780/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007212.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:


- CVE-2020-15780: A lockdown bypass for loading unsigned modules using ACPI table injection was fixed. (bsc#1173573)
- CVE-2020-15393: Fixed a memory leak in usbtest_disconnect (bnc#1173514).
- CVE-2020-12771: An issue was discovered in btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails (bnc#1171732).
- CVE-2020-12888: The VFIO PCI driver mishandled attempts to access disabled memory space (bnc#1171868).
- CVE-2020-10773: Fixed a memory leak on s390/s390x, in the cmm_timeout_hander in file arch/s390/mm/cmm.c (bnc#1172999).
- CVE-2020-14416: Fixed a race condition in tty-&gt;disc_data handling in the slip and slcan line discipline could lead to a use-after-free. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c (bnc#1162002).
- CVE-2020-10768: Fixed an issue with the prctl() function, where indirect branch speculation could be enabled even though it was diabled before (bnc#1172783).
- CVE-2020-10766: Fixed an issue which allowed an attacker with a local account to disable SSBD protection (bnc#1172781).
- CVE-2020-10767: Fixed an issue where Indirect Branch Prediction Barrier was disabled in certain circumstances, leaving the system open to a spectre v2 style attack (bnc#1172782).
- CVE-2020-13974: Fixed a integer overflow in drivers/tty/vt/keyboard.c, if k_ascii is called several times in a row (bnc#1172775).
- CVE-2020-0305: Fixed a possible use-after-free due to a race condition incdev_get of char_dev.c. This could lead to local escalation of privilege. User interaction is not needed for exploitation (bnc#1174462).
- CVE-2020-10769: A buffer over-read flaw was found in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. This flaw allowed a local attacker with user privileges to cause a denial of service (bnc#1173265).
- CVE-2020-10781: Fixed a denial of service issue in the ZRAM implementation (bnc#1173074).
- CVE-2019-20908: Fixed incorrect access permissions for the efivar_ssdt ACPI variable, which could be used by attackers to bypass lockdown or secure boot restrictions (bnc#1173567).
- CVE-2019-20810: Fixed a memory leak in go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c because it did not call snd_card_free for a failure path (bnc#1172458).
- CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c, related to invalid length checks for variable elements in a beacon head (bnc#1152107).

The following non-security bugs were fixed:

- ACPI: GED: add support for _Exx / _Lxx handler methods (bsc#1111666).
- ACPI: GED: use correct trigger type field in _Exx / _Lxx handling (bsc#1111666).
- ACPI: NFIT: Fix unlock on error in scrub_show() (bsc#1171753).
- ACPI: PM: Avoid using power resources if there are none for D0 (bsc#1051510).
- ACPI: sysfs: Fix pm_profile_attr type (bsc#1111666).
- ACPI: video: Use native backlight on Acer Aspire 5783z (bsc#1111666).
- ACPI: video: Use native backlight on Acer TravelMate 5735Z (bsc#1111666).
- ALSA: es1688: Add the missed snd_card_free() (bsc#1051510).
- ALSA: hda: Add ElkhartLake HDMI codec vid (bsc#1111666).
- ALSA: hda: add sienna_cichlid audio asic id for sienna_cichlid up (bsc#1111666).
- ALSA: hda/hdmi - enable runtime pm for newer AMD display audio (bsc#1111666).
- ALSA: hda - let hs_mic be picked ahead of hp_mic (bsc#1111666).
- ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines (bsc#1111666).
- ALSA: hda/realtek - Add LED class support for micmute LED (bsc#1111666).
- ALSA: hda/realtek - Enable micmute LED on and HP system (bsc#1111666).
- ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 (bsc#1111666).
- ALSA: hda/realtek - Fix unused variable warning w/o CONFIG_LEDS_TRIGGER_AUDIO (bsc#1111666).
- ALSA: hda/realtek - Introduce polarity for micmute LED GPIO (bsc#1111666).
- ALSA: lx6464es - add support for LX6464ESe pci express variant (bsc#1111666).
- ALSA: opl3: fix infoleak in opl3 (bsc#1111666).
- ALSA: pcm: disallow linking stream to itself (bsc#1111666).
- ALSA: usb-audio: Add duplex sound support for USB devices using implicit feedback (bsc#1111666).
- ALSA: usb-audio: Add Pioneer DJ DJM-900NXS2 support (bsc#1111666).
- ALSA: usb-audio: add quirk for MacroSilicon MS2109 (bsc#1111666).
- ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock (bsc#1111666).
- ALSA: usb-audio: Clean up quirk entries with macros (bsc#1111666).
- ALSA: usb-audio: Fix inconsistent card PM state after resume (bsc#1111666).
- ALSA: usb-audio: Fix packet size calculation (bsc#1111666).
- ALSA: usb-audio: Fix racy list management in output queue (bsc#1111666).
- ALSA: usb-audio: Improve frames size computation (bsc#1111666).
- ALSA: usb-audio: Manage auto-pm of all bundled interfaces (bsc#1111666).
- ALSA: usb-audio: Use the new macro for HP Dock rename quirks (bsc#1111666).
- amdgpu: a NULL -&gt;mm does not mean a thread is a kthread (git-fixes).
- arm64: map FDT as RW for early_init_dt_scan() (jsc#SLE-12423).
- ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (bsc#1111666).
- ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx (bsc#1111666).
- ath9k: Fix use-after-free Write in ath9k_htc_rx_msg (bsc#1111666).
- ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb (bsc#1111666).
- ax25: fix setsockopt(SO_BINDTODEVICE) (networking-stable-20_05_27).
- b43: Fix connection problem with WPA3 (bsc#1111666).
- b43_legacy: Fix connection problem with WPA3 (bsc#1111666).
- bcache: Fix an error code in bch_dump_read() (git fixes (block drivers)).
- be2net: fix link failure after ethtool offline test (git-fixes).
- block: nr_sects_write(): Disable preemption on seqcount write (bsc#1173818).
- block: remove QUEUE_FLAG_STACKABLE (git fixes (block drivers)).
- block: sed-opal: fix sparse warning: convert __be64 data (git fixes (block drivers)).
- Bluetooth: Add SCO fallback for invalid LMP parameters error (bsc#1111666).
- bnxt_en: Fix AER reset logic on 57500 chips (git-fixes).
- bnxt_en: Fix ethtool selftest crash under error conditions (git-fixes).
- bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails (git-fixes).
- bnxt_en: Fix ipv6 RFS filter matching logic (git-fixes).
- bnxt_en: fix NULL dereference in case SR-IOV configuration fails (git-fixes).
- bnxt_en: Fix VF anti-spoof filter setup (networking-stable-20_05_12).
- bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features() (networking-stable-20_05_12).
- bnxt_en: Improve AER slot reset (networking-stable-20_05_12).
- brcmfmac: fix wrong location to get firmware feature (bsc#1111666).
- brcmfmac: Transform compatible string for FW loading (bsc#1169771).
- btrfs: add assertions for tree == inode-&gt;io_tree to extent IO helpers (bsc#1174438).
- btrfs: add new helper btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: Always use a cached extent_state in btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: do not zero f_bavail if we have available space (bsc#1168081).
- btrfs: do not zero f_bavail if we have available space (bsc#1168081).
- btrfs: drop argument tree from btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: fix extent_state leak in btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof (bsc#1174438).
- btrfs: fix hang on snapshot creation after RWF_NOWAIT write (bsc#1174438).
- btrfs: fix RWF_NOWAIT write not failling when we need to cow (bsc#1174438).
- btrfs: fix RWF_NOWAIT writes blocking on extent locks and waiting for IO (bsc#1174438).
- btrfs: qgroup: Fix a bug that prevents qgroup to be re-enabled after disable (bsc#1172247).
- btrfs: Return EAGAIN if we can't start no snpashot write in check_can_nocow (bsc#1174438).
- btrfs: use correct count in btrfs_file_write_iter() (bsc#1174438).
- btrfs: Use newly introduced btrfs_lock_and_flush_ordered_range (bsc#1174438).
- btrfs: volumes: Remove ENOSPC-prone btrfs_can_relocate() (bsc#1171124).
- bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads (bsc#1111666).
- carl9170: remove P2P_GO support (bsc#1111666).
- CDC-ACM: heed quirk also in error handling (git-fixes).
- ceph: convert mdsc-&gt;cap_dirty to a per-session list (bsc#1167104).
- ceph: request expedited service on session's last cap flush (bsc#1167104).
- cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages (bsc#1173857).
- char/random: Add a newline at the end of the file (jsc#SLE-12423).
- cifs: get rid of unused parameter in reconn_setup_dfs_targets() (bsc#1144333).
- cifs: handle hostnames that resolve to same ip in failover (bsc#1144333 bsc#1161016).
- cifs: set up next DFS target before generic_ip_connect() (bsc#1144333 bsc#1161016).
- clk: bcm2835: Fix return type of bcm2835_register_gate (bsc#1051510).
- clk: clk-flexgen: fix clock-critical handling (bsc#1051510).
- clk: sunxi: Fix incorrect usage of round_down() (bsc#1051510).
- clocksource: dw_apb_timer: Make CPU-affiliation being optional (bsc#1111666).
- compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE (git fixes (block drivers)).
- compat_ioctl: block: handle Persistent Reservations (git fixes (block drivers)).
- copy_{to,from}_user(): consolidate object size checks (git fixes).
- crypto: algboss - do not wait during notifier callback (bsc#1111666).
- crypto: algif_skcipher - Cap recv SG list at ctx-&gt;used (bsc#1111666).
- crypto: caam - update xts sector size for large input length (bsc#1111666).
- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (bsc#1111666).
- crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (git-fixes).
- Crypto/chcr: fix for ccm(aes) failed test (bsc#1111666).
- crypto: chelsio/chtls: properly set tp-&gt;lsndtime (bsc#1111666).
- crypto: talitos - fix IPsec cipher in length (git-fixes).
- crypto: talitos - reorder code in talitos_edesc_alloc() (git-fixes).
- debugfs: Check module state before warning in {full/open}_proxy_open() (bsc#1173746).
- devinet: fix memleak in inetdev_init() (networking-stable-20_06_07).
- dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()' (bsc#1111666).
- dm btree: increase rebalance threshold in __rebalance2() (git fixes (block drivers)).
- dm cache: fix a crash due to incorrect work item cancelling (git fixes (block drivers)).
- dm crypt: fix benbi IV constructor crash if used in authenticated mode (git fixes (block drivers)).
- dm: fix potential for q-&gt;make_request_fn NULL pointer (git fixes (block drivers)).
- dm space map common: fix to ensure new block isn't already in use (git fixes (block drivers)).
- dm: various cleanups to md-&gt;queue initialization code (git fixes).
- dm verity fec: fix hash block number in verity_fec_decode (git fixes (block drivers)).
- dm verity fec: fix memory leak in verity_fec_dtr (git fixes (block drivers)).
- dpaa_eth: fix usage as DSA master, try 3 (networking-stable-20_05_27).
- driver-core, libnvdimm: Let device subsystems add local lockdep coverage (bsc#1171753).
- Drivers: hv: Change flag to write log level in panic msg to false (bsc#1170617, bsc#1170618).
- drivers: soc: ti: knav_qmss_queue: Make knav_gp_range_ops static (bsc#1051510).
- drm: amd/display: fix Kconfig help text (bsc#1113956) 	* only fix DEBUG_KERNEL_DC
- drm: bridge: adv7511: Extend list of audio sample rates (bsc#1111666).
- drm/dp_mst: Increase ACT retry timeout to 3s (bsc#1113956)  * context changes
- drm: encoder_slave: fix refcouting error for modules (bsc#1111666).
- drm: encoder_slave: fix refcouting error for modules (bsc#1114279)
- drm/i915/icl+: Fix hotplug interrupt disabling after storm detection (bsc#1112178)
- drm/i915: Whitelist context-local timestamp in the gen9 cmdparser (bsc#1111666).
- drm/mediatek: Check plane visibility in atomic_update (bsc#1113956)  * context changes
- drm/msm/dpu: fix error return code in dpu_encoder_init (bsc#1111666).
- drm: panel-orientation-quirks: Add quirk for Asus T101HA panel (bsc#1111666).
- drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003 (bsc#1111666).
- drm/qxl: Use correct notify port address when creating cursor ring (bsc#1113956)
- drm/radeon: fix double free (bsc#1113956)
- drm/radeon: fix fb_div check in ni_init_smc_spll_table() (bsc#1113956)
- drm/sun4i: hdmi ddc clk: Fix size of m divider (bsc#1111666).
- drm/tegra: hub: Do not enable orphaned window group (bsc#1111666).
- drm/vkms: Hold gem object while still in-use (bsc#1113956)  * context changes
- e1000: Distribute switch variables for initialization (bsc#1111666).
- e1000e: Disable TSO for buffer overrun workaround (bsc#1051510).
- e1000e: Do not wake up the system via WOL if device wakeup is disabled (bsc#1051510).
- e1000e: Relax condition to trigger reset for ME workaround (bsc#1111666).
- EDAC/amd64: Read back the scrub rate PCI register on F15h (bsc#1114279).
- efi/random: Increase size of firmware supplied randomness (jsc#SLE-12423).
- efi/random: Treat EFI_RNG_PROTOCOL output as bootloader randomness (jsc#SLE-12423).
- efi: READ_ONCE rng seed size before munmap (jsc#SLE-12423).
- efi: Reorder pr_notice() with add_device_randomness() call (jsc#SLE-12423).
- evm: Check also if *tfm is an error pointer in init_desc() (bsc#1051510).
- evm: Fix a small race in init_desc() (bsc#1051510).
- ext4: fix a data race at inode-&gt;i_blocks (bsc#1171835).
- ext4: fix partial cluster initialization when splitting extent (bsc#1173839).
- ext4: fix race between ext4_sync_parent() and rename() (bsc#1173838).
- ext4, jbd2: ensure panic by fix a race between jbd2 abort and ext4 error handlers (bsc#1173833).
- extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()' (bsc#1051510).
- fanotify: fix ignore mask logic for events on child and on dir (bsc#1172719).
- fdt: add support for rng-seed (jsc#SLE-12423).
- fdt: Update CRC check for rng-seed (jsc#SLE-12423).
- firmware: imx: scu: Fix corruption of header (git-fixes).
- firmware: imx: scu: Fix possible memory leak in imx_scu_probe() (bsc#1111666).
- Fix boot crash with MD (bsc#1174343)
- fix multiplication overflow in copy_fdtable() (bsc#1173825).
- fpga: dfl: afu: Corrected error handling levels (git-fixes).
- fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (networking-stable-20_05_12).
- gpiolib: Document that GPIO line names are not globally unique (bsc#1051510).
- gpu: host1x: Detach driver on unregister (bsc#1111666).
- gpu: ipu-v3: pre: do not trigger update if buffer address does not change (bsc#1111666).
- HID: magicmouse: do not set up autorepeat (git-fixes).
- HID: sony: Fix for broken buttons on DS3 USB dongles (bsc#1051510).
- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() (bsc#1111666).
- hwmon: (emc2103) fix unable to change fan pwm1_enable attribute (bsc#1111666).
- hwmon: (max6697) Make sure the OVERT mask is set correctly (bsc#1111666).
- i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 (bsc#1111666).
- i2c: eg20t: Load module automatically if ID matches (bsc#1111666).
- i2c: mlxcpld: check correct size of maximum RECV_LEN packet (bsc#1111666).
- i40e: reduce stack usage in i40e_set_fc (git-fixes).
- IB/hfi1: Do not destroy hfi1_wq when the device is shut down (bsc#1174409).
- IB/hfi1: Do not destroy link_wq when the device is shut down (bsc#1174409).
- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- ibmvnic: continue to init in CRQ reset returns H_CLOSED (bsc#1173280 ltc#185369).
- ibmvnic: Flush existing work items before device removal (bsc#1065729).
- ibmvnic: Harden device login requests (bsc#1170011 ltc#183538).
- iio: buffer: Do not allow buffers without any channels enabled to be activated (bsc#1051510).
- iio:health:afe4404 Fix timestamp alignment and prevent data leak (bsc#1111666).
- iio:humidity:hdc100x Fix alignment and data leak issues (bsc#1111666).
- iio:magnetometer:ak8974: Fix alignment and data leak issues (bsc#1111666).
- iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() (bsc#1111666).
- iio: pressure: bmp280: Tolerate IRQ before registering (bsc#1051510).
- iio:pressure:ms5611 Fix buffer element alignment (bsc#1111666).
- iio: pressure: zpa2326: handle pm_runtime_get_sync failure (bsc#1111666).
- ima: Directly assign the ima_default_policy pointer to ima_rules (bsc#1051510).
- ima: Fix ima digest hash table key calculation (bsc#1051510).
- include/asm-generic/topology.h: guard cpumask_of_node() macro argument (bsc#1148868).
- Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list (bsc#1111666).
- input: i8042 - Remove special PowerPC handling (git-fixes).
- Input: synaptics - add a second working PNP_ID for Lenovo T470s (bsc#1111666).
- intel_idle: Graceful probe failure when MWAIT is disabled (bsc#1174115).
- intel_th: Fix a NULL dereference when hub driver is not loaded (bsc#1111666).
- ipvlan: call dev_change_flags when ipvlan mode is reset (git-fixes).
- ixgbevf: Remove limit of 10 entries for unicast filter list (git-fixes).
- jbd2: avoid leaking transaction credits when unreserving handle (bsc#1173845).
- jbd2: Preserve kABI when adding j_abort_mutex (bsc#1173833).
- kabi: hv: prevent struct device_node to become defined (bsc#1172871).
- kabi: ppc64le: prevent struct dma_map_ops to become defined (jsc#SLE-12423).
- kABI: protect struct mlx5_cmd_work_ent (kabi).
- kABI: reintroduce inet_hashtables.h include to l2tp_ip (kabi).
- kernfs: fix barrier usage in __kernfs_new_node() (bsc#1111666).
- KVM: nVMX: Do not reread VMCS-agnostic state when switching VMCS (bsc#1114279).
- KVM: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1114279).
- KVM: x86: Fix APIC page invalidation race (bsc#1174122).
- kvm: x86: Fix L1TF mitigation for shadow MMU (bsc#1171904).
- KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated (bsc#1171904).
- KVM: x86: only do L1TF workaround on affected processors (bsc#1171904).
- l2tp: add sk_family checks to l2tp_validate_socket (networking-stable-20_06_07).
- l2tp: do not use inet_hash()/inet_unhash() (networking-stable-20_06_07).
- libceph: do not omit recovery_deletes in target_copy() (bsc#1174113).
- libceph: ignore pool overlay and cache logic on redirects (bsc#1173146).
- libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock (bsc#1171753).
- libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant (bsc#1171753).
- libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl() (bsc#1171753).
- libnvdimm: cover up changes in struct nvdimm_bus (bsc#1171753).
- libnvdimm: cover up nd_pfn_sb changes (bsc#1171759).
- libnvdimm/dax: Pick the right alignment default when creating dax devices (bsc#1171759).
- libnvdimm/label: Remove the dpa align check (bsc#1171759).
- libnvdimm/of_pmem: Provide a unique name for bus provider (bsc#1171739).
- libnvdimm/pfn_dev: Add a build check to make sure we notice when struct page size change (bsc#1171743).
- libnvdimm/pfn_dev: Add page size and struct page size to pfn superblock (bsc#1171759).
- libnvdimm/pfn: Prevent raw mode fallback if pfn-infoblock valid (bsc#1171743).
- libnvdimm/pmem: Advance namespace seed for specific probe errors (bsc#1171743).
- libnvdimm/region: Initialize bad block for volatile namespaces (bnc#1151927 5.3.6).
- libnvdimm/region: Rewrite _probe_success() to _advance_seeds() (bsc#1171743).
- libnvdimm: Use PAGE_SIZE instead of SZ_4K for align check (bsc#1171759).
- livepatch: Apply vmlinux-specific KLP relocations early (bsc#1071995).
- livepatch: Disallow vmlinux.ko (bsc#1071995).
- livepatch: Make klp_apply_object_relocs static (bsc#1071995).
- livepatch: Prevent module-specific KLP rela sections from referencing vmlinux symbols (bsc#1071995).
- livepatch: Remove .klp.arch (bsc#1071995).
- loop: replace kill_bdev with invalidate_bdev (bsc#1173820).
- lpfc_debugfs: get rid of pointless access_ok() (bsc#1172687 bsc#1171530).
- lpfc: Synchronize NVME transport and lpfc driver devloss_tmo (bcs#1173060).
- mac80211: add option for setting control flags (bsc#1111666).
- mac80211: set IEEE80211_TX_CTRL_PORT_CTRL_PROTO for nl80211 TX (bsc#1111666).
- mailbox: imx: Disable the clock on devm_mbox_controller_register() failure (git-fixes).
- md: Avoid namespace collision with bitmap API (git fixes (block drivers)).
- mdraid: fix read/write bytes accounting (bsc#1172537).
- md: use memalloc scope APIs in mddev_suspend()/mddev_resume() (bsc#1166985)).
- media: cec: silence shift wrapping warning in __cec_s_log_addrs() (git-fixes).
- media: si2157: Better check for running tuner in init (bsc#1111666).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue (git-fixes).
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue (git-fixes).
- mlxsw: pci: Return error on PCI reset timeout (git-fixes).
- mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list properly (networking-stable-20_05_12).
- mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed (git-fixes).
- mlxsw: spectrum_dpipe: Add missing error path (git-fixes).
- mlxsw: spectrum: Prevent force of 56G (git-fixes).
- mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead (git-fixes).
- mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON() (git-fixes).
- mlxsw: spectrum_switchdev: Add MDB entries in prepare phase (git-fixes).
- mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky (git-fixes).
- mmc: block: Fix request completion in the CQE timeout path (bsc#1111666).
- mmc: block: Fix use-after-free issue for rpmb (bsc#1111666).
- mmc: fix compilation of user API (bsc#1051510).
- mmc: sdhci: do not enable card detect interrupt for gpio cd type (bsc#1111666).
- mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk (bsc#1111666).
- Move upstreamed lpfc patches into sorted section
- mvpp2: remove misleading comment (git-fixes).
- net: be more gentle about silly gso requests coming from user (networking-stable-20_06_07).
- net: check untrusted gso_size at kernel entry (networking-stable-20_06_07).
- net/cxgb4: Check the return from t4_query_params properly (git-fixes).
- net: dsa: loop: Add module soft dependency (networking-stable-20_05_16).
- net: dsa: mt7530: fix roaming from DSA user ports (networking-stable-20_05_27).
- net: ena: add intr_moder_rx_interval to struct ena_com_dev and use it (git-fixes).
- net: ena: add missing ethtool TX timestamping indication (git-fixes).
- net: ena: avoid memory access violation by validating req_id properly (git-fixes).
- net: ena: do not wake up tx queue when down (git-fixes).
- net: ena: ena-com.c: prevent NULL pointer dereference (git-fixes).
- net: ena: ethtool: use correct value for crc32 hash (git-fixes).
- net: ena: fix continuous keep-alive resets (git-fixes).
- net: ena: fix corruption of dev_idx_to_host_tbl (git-fixes).
- net: ena: fix default tx interrupt moderation interval (git-fixes).
- net: ena: fix incorrect default RSS key (git-fixes).
- net: ena: fix incorrectly saving queue numbers when setting RSS indirection table (git-fixes).
- net: ena: fix issues in setting interrupt moderation params in ethtool (git-fixes).
- net: ena: fix potential crash when rxfh key is NULL (git-fixes).
- net: ena: fix retrieval of nonadaptive interrupt moderation intervals (git-fixes).
- net: ena: fix uses of round_jiffies() (git-fixes).
- net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE (git-fixes).
- net: ena: reimplement set/get_coalesce() (git-fixes).
- net: ena: rss: do not allocate key when not supported (git-fixes).
- net: ena: rss: fix failure to get indirection table (git-fixes).
- net: ena: rss: store hash function as values and not bits (git-fixes).
- netfilter: connlabels: prefer static lock initialiser (git-fixes).
- netfilter: ctnetlink: netns exit must wait for callbacks (bsc#1169795).
- netfilter: not mark a spinlock as __read_mostly (git-fixes).
- net: fix a potential recursive NETDEV_FEAT_CHANGE (networking-stable-20_05_16).
- net: inet_csk: Fix so_reuseport bind-address cache in tb-&gt;fast* (networking-stable-20_05_27).
- net: ipip: fix wrong address family in init error path (networking-stable-20_05_27).
- net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set (git-fixes).
- net: macsec: preserve ingress frame ordering (networking-stable-20_05_12).
- net/mlx4_core: drop useless LIST_HEAD (git-fixes).
- net/mlx4_core: fix a memory leak bug (git-fixes).
- net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (networking-stable-20_05_12).
- net/mlx5: Add command entry handling completion (networking-stable-20_05_27).
- net/mlx5: Avoid panic when setting vport rate (git-fixes).
- net/mlx5: Continue driver initialization despite debugfs failure (git-fixes).
- net/mlx5e: ethtool, Fix a typo in WOL function names (git-fixes).
- net/mlx5e: Fix traffic duplication in ethtool steering (git-fixes).
- net/mlx5e: Remove unnecessary clear_bit()s (git-fixes).
- net/mlx5e: Update netdev txq on completions during closure (networking-stable-20_05_27).
- net/mlx5: Fix command entry leak in Internal Error State (networking-stable-20_05_12).
- net/mlx5: Fix crash upon suspend/resume (networking-stable-20_06_07).
- net/mlx5: Fix forced completion access non initialized command entry (networking-stable-20_05_12).
- net: mvmdio: allow up to four clocks to be specified for orion-mdio (git-fixes).
- net: mvpp2: prs: Do not override the sign bit in SRAM parser shift (git-fixes).
- net: phy: fix aneg restart in phy_ethtool_set_eee (networking-stable-20_05_16).
- netprio_cgroup: Fix unlimited memory leak of v2 cgroups (networking-stable-20_05_16).
- net: qede: stop adding events on an already destroyed workqueue (git-fixes).
- net: qed: fix excessive QM ILT lines consumption (git-fixes).
- net: qed: fix NVMe login fails over VFs (git-fixes).
- net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (networking-stable-20_05_27).
- net: revert 'net: get rid of an signed integer overflow in ip_idents_reserve()' (networking-stable-20_05_27).
- net sched: fix reporting the first-time use timestamp (networking-stable-20_05_27).
- net: stricter validation of untrusted gso packets (networking-stable-20_05_12).
- net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict() (networking-stable-20_05_12).
- net/tls: Fix sk_psock refcnt leak when in tls_data_ready() (networking-stable-20_05_12).
- net: usb: qmi_wwan: add support for DW5816e (networking-stable-20_05_12).
- net: usb: qmi_wwan: add Telit 0x1050 composition (networking-stable-20_06_07).
- net: usb: qmi_wwan: add Telit LE910C1-EUX composition (networking-stable-20_06_07).
- net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() (bsc#1172484).
- nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K (git-fixes).
- NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() (bsc#1170592).
- NFSv4: Retry CLOSE and DELEGRETURN on NFS4ERR_OLD_STATEID (bsc#1170592).
- nilfs2: fix null pointer dereference at nilfs_segctor_do_construct() (bsc#1173857).
- nl80211: fix NL80211_ATTR_CHANNEL_WIDTH attribute type (bsc#1111666).
- nvdimm: Avoid race between probe and reading device attributes (bsc#1170442).
- nvme: check for NVME_CTRL_LIVE in nvme_report_ns_ids() (bcs#1171558 bsc#1159058).
- nvme: do not update multipath disk information if the controller is down (bcs#1171558 bsc#1159058).
- nvme: fail cancelled commands with NVME_SC_HOST_PATH_ERROR (bsc#1158983 bsc#1172538).
- nvme-fc: Fail transport errors with NVME_SC_HOST_PATH (bsc#1158983 bsc#1172538).
- nvme-tcp: fail command with NVME_SC_HOST_PATH_ERROR send failed (bsc#1158983 bsc#1172538).
- objtool: Clean instruction state before each function validation (bsc#1169514).
- objtool: Ignore empty alternatives (bsc#1169514).
- ocfs2: no need try to truncate file beyond i_size (bsc#1171841).
- overflow: Fix -Wtype-limits compilation warnings (git fixes).
- overflow.h: Add arithmetic shift helper (git fixes).
- p54usb: add AirVasT USB stick device-id (bsc#1051510).
- padata: ensure the reorder timer callback runs on the correct CPU (git-fixes).
- padata: reorder work kABI fixup (git-fixes).
- PCI/AER: Remove HEST/FIRMWARE_FIRST parsing for AER ownership (bsc#1174356).
- PCI/AER: Use only _OSC to determine AER ownership (bsc#1174356).
- PCI: Allow pci_resize_resource() for devices on root bus (bsc#1051510).
- PCI: Fix pci_register_host_bridge() device_register() error handling (bsc#1051510).
- PCI: Generalize multi-function power dependency device links (bsc#1111666).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871, bsc#1172872).
- PCI: hv: Fix the PCI HyperV probe failure path to release resource properly (bsc#1172871, bsc#1172872).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871, bsc#1172872).
- PCI: hv: Move hypercall related definitions into tlfs header (bsc#1172871, bsc#1172872).
- PCI: hv: Move retarget related structures into tlfs header (bsc#1172871, bsc#1172872).
- PCI: hv: Reorganize the code in preparation of hibernation (bsc#1172871, bsc#1172872).
- PCI: hv: Retry PCI bus D0 entry on invalid device state (bsc#1172871, bsc#1172872).
- PCI: pciehp: Fix indefinite wait on sysfs requests (git-fixes).
- PCI: pciehp: Support interrupts sent from D3hot (git-fixes).
- PCI/PM: Call .bridge_d3() hook only if non-NULL (git-fixes).
- PCI: Program MPS for RCiEP devices (bsc#1051510).
- PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port (bsc#1051510).
- pci: Revive pci_dev __aer_firmware_first* fields for kABI (bsc#1174356).
- pcm_native: result of put_user() needs to be checked (bsc#1111666).
- perf: Allocate context task_ctx_data for child event (git-fixes).
- perf/cgroup: Fix perf cgroup hierarchy support (git-fixes).
- perf: Copy parent's address filter offsets on clone (git-fixes).
- perf/core: Add sanity check to deal with pinned event failure (git-fixes).
- perf/core: Avoid freeing static PMU contexts when PMU is unregistered (git-fixes).
- perf/core: Correct event creation with PERF_FORMAT_GROUP (git-fixes).
- perf/core: Do not WARN() for impossible ring-buffer sizes (git-fixes).
- perf/core: Fix ctx_event_type in ctx_resched() (git-fixes).
- perf/core: Fix error handling in perf_event_alloc() (git-fixes).
- perf/core: Fix exclusive events' grouping (git-fixes).
- perf/core: Fix group scheduling with mixed hw and sw events (git-fixes).
- perf/core: Fix impossible ring-buffer sizes warning (git-fixes).
- perf/core: Fix locking for children siblings group read (git-fixes).
- perf/core: Fix lock inversion between perf,trace,cpuhp (git-fixes (dependent patch for 18736eef1213)).
- perf/core: Fix perf_event_read_value() locking (git-fixes).
- perf/core: Fix perf_pmu_unregister() locking (git-fixes).
- perf/core: Fix __perf_read_group_add() locking (git-fixes (dependent patch)).
- perf/core: Fix perf_sample_regs_user() mm check (git-fixes).
- perf/core: Fix possible Spectre-v1 indexing for -&gt;aux_pages (git-fixes).
- perf/core: Fix race between close() and fork() (git-fixes).
- perf/core: Fix the address filtering fix (git-fixes).
- perf/core: Fix use-after-free in uprobe_perf_close() (git-fixes).
- perf/core: Force USER_DS when recording user stack data (git-fixes).
- perf/core: Restore mmap record type correctly (git-fixes).
- perf: Fix header.size for namespace events (git-fixes).
- perf/ioctl: Add check for the sample_period value (git-fixes).
- perf, pt, coresight: Fix address filters for vmas with non-zero offset (git-fixes).
- perf: Return proper values for user stack errors (git-fixes).
- perf/x86/amd: Constrain Large Increment per Cycle events (git-fixes).
- perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity (git-fixes).
- perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops (git-fixes).
- perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) (git-fixes).
- perf/x86/amd/iommu: Make the 'amd_iommu_attr_groups' symbol static (git-fixes).
- perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs (git-fixes stable).
- perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs (git-fixes).
- perf/x86/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf events (git-fixes stable).
- perf/x86: Enable free running PEBS for REGS_USER/INTR (git-fixes).
- perf/x86: Fix incorrect PEBS_REGS (git-fixes).
- perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts() (git-fixes).
- perf/x86/intel: Add proper condition to run sched_task callbacks (git-fixes).
- perf/x86/intel/bts: Fix the use of page_private() (git-fixes).
- perf/x86/intel: Fix PT PMI handling (git-fixes).
- perf/x86/intel: Move branch tracing setup to the Intel-specific source file (git-fixes).
- perf/x86/intel/uncore: Add Node ID mask (git-fixes).
- perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX (git-fixes).
- perf/x86/intel/uncore: Handle invalid event coding for free-running counter (git-fixes).
- perf/x86/uncore: Fix event group support (git-fixes).
- pid: Improve the comment about waiting in zap_pid_ns_processes (git fixes)).
- pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()' (bsc#1051510).
- pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()' (bsc#1051510).
- pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs (bsc#1051510).
- platform/x86: dell-laptop: do not register micmute LED if there is no token (bsc#1111666).
- platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() (bsc#1111666).
- PM / Domains: Allow genpd users to specify default active wakeup behavior (git-fixes).
- pnp: Use list_for_each_entry() instead of open coding (git fixes).
- powerpc/64s: Do not let DT CPU features set FSCR_DSCR (bsc#1065729).
- powerpc/64s: Save FSCR to init_task.thread.fscr after feature init (bsc#1065729).
- powerpc/book3s64: Export has_transparent_hugepage() related functions (bsc#1171759).
- powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey (bsc#1065729).
- powerpc/fadump: fix race between pstore write and fadump crash trigger (bsc#1168959 ltc#185010).
- powerpc/xive: Clear the page tables for the ESB IO mapping (bsc#1085030).
- powerpc/xmon: Reset RCU and soft lockup watchdogs (bsc#1065729).
- power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select (bsc#1051510).
- power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()' (bsc#1051510).
- power: supply: smb347-charger: IRQSTAT_D is volatile (bsc#1051510).
- power: vexpress: add suppress_bind_attrs to true (bsc#1111666).
- pppoe: only process PADT targeted at local interfaces (networking-stable-20_05_16).
- qed: reduce maximum stack frame size (git-fixes).
- qlcnic: fix missing release in qlcnic_83xx_interrupt_test (git-fixes).
- r8152: support additional Microsoft Surface Ethernet Adapter variant (networking-stable-20_05_27).
- raid5: remove gfp flags from scribble_alloc() (bsc#1166985).
- RDMA/efa: Fix setting of wrong bit in get/set_feature commands (bsc#1111666)
- RDMA/efa: Set maximum pkeys device attribute (bsc#1111666)
- RDMA/efa: Support remote read access in MR registration (bsc#1111666)
- RDMA/efa: Unified getters/setters for device structs bitmask access (bsc#1111666)
- README.BRANCH: Add Takashi Iwai as primary maintainer.
- regmap: debugfs: Do not sleep while atomic for fast_io regmaps (bsc#1111666).
- resolve KABI warning for perf-pt-coresight (git-fixes).
- Revert 'bcache: ignore pending signals when creating gc and allocator thread' (git fixes (block drivers)).
- Revert commit e918e570415c ('tpm_tis: Remove the HID IFX0102') (bsc#1111666).
- Revert 'dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues' (git fixes (block drivers)).
- Revert 'thermal: mediatek: fix register index error' (bsc#1111666).
- Revert 'tools lib traceevent: Remove unneeded qsort and uses memmove'
- s390/bpf: Maintain 8-byte stack alignment (bsc#1169194).
- s390: fix syscall_get_error for compat processes (git-fixes).
- s390/qdio: consistently restore the IRQ handler (git-fixes).
- s390/qdio: lock device while installing IRQ handler (git-fixes).
- s390/qdio: put thinint indicator after early error (git-fixes).
- s390/qdio: tear down thinint indicator after early error (git-fixes).
- s390/qeth: fix error handling for isolation mode cmds (git-fixes).
- sch_choke: avoid potential panic in choke_reset() (networking-stable-20_05_12).
- sch_sfq: validate silly quantum values (networking-stable-20_05_12).
- scsi: aacraid: fix a signedness bug (bsc#1174296).
- scsi: hisi_sas: fix calls to dma_set_mask_and_coherent() (bsc#1174296).
- scsi: ibmvscsi: Do not send host info in adapter info MAD after LPM (bsc#1172759 ltc#184814).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Avoid another null dereference in lpfc_sli4_hba_unset() (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1158983).
- scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (bsc#1158983).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix less-than-zero comparison of unsigned value (bsc#1158983).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1158983).
- scsi: megaraid_sas: Fix a compilation warning (bsc#1174296).
- scsi: mpt3sas: Fix double free in attach error handling (bsc#1174296).
- scsi: qedf: Add port_id getter (bsc#1150660).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (bsc#1174296).
- scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (bsc#1158983).
- sctp: Do not add the shutdown timer if its already been added (networking-stable-20_05_27).
- sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (networking-stable-20_05_27).
- spi: dw: use 'smp_mb()' to avoid sending spi data error (bsc#1051510).
- spi: fix initial SPI_SR value in spi-fsl-dspi (bsc#1111666).
- spi: pxa2xx: Apply CS clk quirk to BXT (bsc#1111666).
- spi: spidev: fix a race between spidev_release and spidev_remove (bsc#1111666).
- spi: spi-mem: Fix Dual/Quad modes on Octal-capable devices (bsc#1111666).
- spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate (bsc#1111666).
- staging: comedi: verify array index is correct before using it (bsc#1111666).
- staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK (bsc#1051510).
- staging: sm750fb: add missing case while setting FB_VISUAL (bsc#1051510).
- SUNRPC: The TCP back channel mustn't disappear while requests are outstanding (bsc#1152624).
- tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes (bsc#1173284).
- timers: Add a function to start/reduce a timer (networking-stable-20_05_27).
- tpm_tis: extra chip-&gt;ops check on error path in tpm_tis_core_init (bsc#1111666).
- tpm_tis: Remove the HID IFX0102 (bsc#1111666).
- tracing: Fix event trigger to accept redundant spaces (git-fixes).
- tty: n_gsm: Fix bogus i++ in gsm_data_kick (bsc#1051510).
- tty: n_gsm: Fix SOF skipping (bsc#1051510).
- tty: n_gsm: Fix waking up upper tty layer when room available (bsc#1051510).
- tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040 (networking-stable-20_05_12).
- ubifs: remove broken lazytime support (bsc#1173826).
- usb: add USB_QUIRK_DELAY_INIT for Logitech C922 (git-fixes).
- USB: c67x00: fix use after free in c67x00_giveback_urb (bsc#1111666).
- usb: chipidea: core: add wakeup support for extcon (bsc#1111666).
- usb: dwc2: Fix shutdown callback in platform (bsc#1111666).
- usb: dwc2: gadget: move gadget resume after the core is in L0 state (bsc#1051510).
- usb: dwc3: gadget: introduce cancelled_list (git-fixes).
- usb: dwc3: gadget: never call -&gt;complete() from -&gt;ep_queue() (git-fixes).
- usb: dwc3: gadget: Properly handle ClearFeature(halt) (git-fixes).
- usb: dwc3: gadget: Properly handle failed kick_transfer (git-fixes).
- USB: ehci: reopen solution for Synopsys HC bug (git-fixes).
- usb: gadget: fix potential double-free in m66592_probe (bsc#1111666).
- usb: gadget: lpc32xx_udc: do not dereference ep pointer before null check (bsc#1051510).
- usb: gadget: udc: atmel: fix uninitialized read in debug printk (bsc#1111666).
- usb: gadget: udc: atmel: remove outdated comment in usba_ep_disable() (bsc#1111666).
- usb: gadget: udc: Potential Oops in error handling code (bsc#1111666).
- USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke (bsc#1051510).
- usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() (bsc#1111666).
- USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe() (bsc#1051510).
- usb: musb: Fix runtime PM imbalance on error (bsc#1051510).
- usb: musb: start session in resume for host port (bsc#1051510).
- usbnet: smsc95xx: Fix use-after-free after removal (bsc#1111666).
- USB: ohci-sm501: Add missed iounmap() in remove (bsc#1111666).
- USB: serial: ch341: add new Product ID for CH340 (bsc#1111666).
- USB: serial: cypress_m8: enable Simply Automated UPB PIM (bsc#1111666).
- USB: serial: iuu_phoenix: fix memory corruption (bsc#1111666).
- USB: serial: option: add GosunCn GM500 series (bsc#1111666).
- USB: serial: option: add Quectel EG95 LTE modem (bsc#1111666).
- USB: serial: option: add Telit LE910C1-EUX compositions (bsc#1051510).
- USB: serial: qcserial: add DW5816e QDL support (bsc#1051510).
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (bsc#1051510).
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (git-fixes).
- vfio/pci: Fix SR-IOV VF handling with MMIO blocking (bsc#1174123).
- vfs: Fix EOVERFLOW testing in put_compat_statfs64 (bnc#1151927 5.3.6).
- virtio-blk: handle block_device_operations callbacks after hot unplug (git fixes (block drivers)).
- vmxnet3: add geneve and vxlan tunnel offload support (bsc#1172484).
- vmxnet3: add support to get/set rx flow hash (bsc#1172484).
- vmxnet3: allow rx flow hash ops only when rss is enabled (bsc#1172484).
- vmxnet3: avoid format strint overflow warning (bsc#1172484).
- vmxnet3: prepare for version 4 changes (bsc#1172484).
- vmxnet3: Remove always false conditional statement (bsc#1172484).
- vmxnet3: remove redundant initialization of pointer 'rq' (bsc#1172484).
- vmxnet3: remove unused flag 'rxcsum' from struct vmxnet3_adapter (bsc#1172484).
- vmxnet3: Replace msleep(1) with usleep_range() (bsc#1172484).
- vmxnet3: update to version 4 (bsc#1172484).
- vmxnet3: use correct hdr reference when packet is encapsulated (bsc#1172484).
- vsock: fix timeout in vsock_accept() (networking-stable-20_06_07).
- vxlan: Avoid infinite loop when suppressing NS messages with invalid options (git-fixes).
- w1: omap-hdq: cleanup to add missing newline for some dev_dbg (bsc#1051510).
- watchdog: sp805: fix restart handler (bsc#1111666).
- wil6210: add general initialization/size checks (bsc#1111666).
- wil6210: check rx_buff_mgmt before accessing it (bsc#1111666).
- wil6210: ignore HALP ICR if already handled (bsc#1111666).
- wil6210: make sure Rx ring sizes are correlated (git-fixes).
- work around mvfs bug (bsc#1162063).
- x86/apic: Install an empty physflat_init_apic_ldr (bsc#1163309).
- x86/cpu/amd: Make erratum #1054 a legacy erratum (bsc#1114279).
- x86/events/intel/ds: Add PERF_SAMPLE_PERIOD into PEBS_FREERUNNING_FLAGS (git-fixes).
- x86: Fix early boot crash on gcc-10, third try (bsc#1114279).
- x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (bsc#1172257).
- x86/reboot/quirks: Add MacBook6,1 reboot quirk (bsc#1114279).
- xfrm: fix error in comment (git fixes).
- xhci: Fix incorrect EP_STATE_MASK (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-03"/>
	<updated date="2020-08-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1148868">SUSE bug 1148868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150660">SUSE bug 1150660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151927">SUSE bug 1151927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152107">SUSE bug 1152107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152624">SUSE bug 1152624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158983">SUSE bug 1158983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159058">SUSE bug 1159058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161016">SUSE bug 1161016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162002">SUSE bug 1162002</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162063">SUSE bug 1162063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163309">SUSE bug 1163309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166985">SUSE bug 1166985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167104">SUSE bug 1167104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168081">SUSE bug 1168081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168959">SUSE bug 1168959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169194">SUSE bug 1169194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169771">SUSE bug 1169771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169795">SUSE bug 1169795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170011">SUSE bug 1170011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170442">SUSE bug 1170442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170592">SUSE bug 1170592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170617">SUSE bug 1170617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170618">SUSE bug 1170618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171124">SUSE bug 1171124</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171424">SUSE bug 1171424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171529">SUSE bug 1171529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171530">SUSE bug 1171530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171732">SUSE bug 1171732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171739">SUSE bug 1171739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171743">SUSE bug 1171743</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171753">SUSE bug 1171753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171759">SUSE bug 1171759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171835">SUSE bug 1171835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171841">SUSE bug 1171841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171868">SUSE bug 1171868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171904">SUSE bug 1171904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172247">SUSE bug 1172247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172257">SUSE bug 1172257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172344">SUSE bug 1172344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172458">SUSE bug 1172458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172484">SUSE bug 1172484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172537">SUSE bug 1172537</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172687">SUSE bug 1172687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172719">SUSE bug 1172719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172759">SUSE bug 1172759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172775">SUSE bug 1172775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172781">SUSE bug 1172781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172782">SUSE bug 1172782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172783">SUSE bug 1172783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172871">SUSE bug 1172871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172872">SUSE bug 1172872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172999">SUSE bug 1172999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173060">SUSE bug 1173060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173074">SUSE bug 1173074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173146">SUSE bug 1173146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173265">SUSE bug 1173265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173280">SUSE bug 1173280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173284">SUSE bug 1173284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173428">SUSE bug 1173428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173514">SUSE bug 1173514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173567">SUSE bug 1173567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173573">SUSE bug 1173573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173659">SUSE bug 1173659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173746">SUSE bug 1173746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173818">SUSE bug 1173818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173820">SUSE bug 1173820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173825">SUSE bug 1173825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173826">SUSE bug 1173826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173833">SUSE bug 1173833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173838">SUSE bug 1173838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173839">SUSE bug 1173839</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173845">SUSE bug 1173845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173857">SUSE bug 1173857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174113">SUSE bug 1174113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174115">SUSE bug 1174115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174122">SUSE bug 1174122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174123">SUSE bug 1174123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174186">SUSE bug 1174186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174187">SUSE bug 1174187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174296">SUSE bug 1174296</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174343">SUSE bug 1174343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174356">SUSE bug 1174356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174409">SUSE bug 1174409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174438">SUSE bug 1174438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174462">SUSE bug 1174462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174543">SUSE bug 1174543</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16746/">CVE-2019-16746</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20810/">CVE-2019-20810</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20908/">CVE-2019-20908</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0305/">CVE-2020-0305</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10766/">CVE-2020-10766</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10767/">CVE-2020-10767</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10768/">CVE-2020-10768</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10769/">CVE-2020-10769</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10773/">CVE-2020-10773</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10781/">CVE-2020-10781</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12771/">CVE-2020-12771</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12888/">CVE-2020-12888</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13974/">CVE-2020-13974</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14416/">CVE-2020-14416</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15393/">CVE-2020-15393</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15780/">CVE-2020-15780</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501590" comment="cluster-md-kmp-default-4.12.14-197.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501591" comment="dlm-kmp-default-4.12.14-197.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501592" comment="gfs2-kmp-default-4.12.14-197.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501593" comment="ocfs2-kmp-default-4.12.14-197.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139119" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1141320" ref_url="https://bugzilla.suse.com/1141320" source="BUGZILLA"/>
		<reference ref_id="1160850" ref_url="https://bugzilla.suse.com/1160850" source="BUGZILLA"/>
		<reference ref_id="1160852" ref_url="https://bugzilla.suse.com/1160852" source="BUGZILLA"/>
		<reference ref_id="1160888" ref_url="https://bugzilla.suse.com/1160888" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14902" ref_url="https://www.suse.com/security/cve/CVE-2019-14902/" source="CVE"/>
		<reference ref_id="CVE-2019-14907" ref_url="https://www.suse.com/security/cve/CVE-2019-14907/" source="CVE"/>
		<reference ref_id="CVE-2019-19344" ref_url="https://www.suse.com/security/cve/CVE-2019-19344/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-January/006401.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

Security issues fixed:

- CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888).
- CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not working (bsc#1160850).
- CVE-2019-19344: Fixed a server crash when using dns zone scavenging = yes (bsc#1160852).

Non-security issue fixed:

- Fixed Ceph snapshot path handling relative to root (bsc#1141320).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-01-23"/>
	<updated date="2020-01-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1141320">SUSE bug 1141320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160850">SUSE bug 1160850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160852">SUSE bug 1160852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160888">SUSE bug 1160888</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-14902/">CVE-2019-14902</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-14907/">CVE-2019-14907</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19344/">CVE-2019-19344</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501594" comment="ctdb-4.9.5+git.243.e76c5cb3d97-3.21.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139120" version="1" class="patch">
	<metadata>
		<title>Security update for graphviz (Low)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1093447" ref_url="https://bugzilla.suse.com/1093447" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10196" ref_url="https://www.suse.com/security/cve/CVE-2018-10196/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2346-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-August/007306.html" source="SUSE-SU"/>
		<description>
This update for graphviz fixes the following issues:

- CVE-2018-10196: Fixed a null dereference in rebuild_vlis (bsc#1093447).	  
		</description>
<advisory from="security@suse.de">
	<issued date="2020-08-26"/>
	<updated date="2020-08-26"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1093447">SUSE bug 1093447</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10196/">CVE-2018-10196</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501481" comment="graphviz-gd-2.40.1-6.6.8 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501482" comment="graphviz-python-2.40.1-6.6.8 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139121" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083548" ref_url="https://bugzilla.suse.com/1083548" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1120163" ref_url="https://bugzilla.suse.com/1120163" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1136666" ref_url="https://bugzilla.suse.com/1136666" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1152148" ref_url="https://bugzilla.suse.com/1152148" source="BUGZILLA"/>
		<reference ref_id="1163524" ref_url="https://bugzilla.suse.com/1163524" source="BUGZILLA"/>
		<reference ref_id="1165629" ref_url="https://bugzilla.suse.com/1165629" source="BUGZILLA"/>
		<reference ref_id="1166965" ref_url="https://bugzilla.suse.com/1166965" source="BUGZILLA"/>
		<reference ref_id="1169790" ref_url="https://bugzilla.suse.com/1169790" source="BUGZILLA"/>
		<reference ref_id="1170232" ref_url="https://bugzilla.suse.com/1170232" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1171688" ref_url="https://bugzilla.suse.com/1171688" source="BUGZILLA"/>
		<reference ref_id="1171988" ref_url="https://bugzilla.suse.com/1171988" source="BUGZILLA"/>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1172108" ref_url="https://bugzilla.suse.com/1172108" source="BUGZILLA"/>
		<reference ref_id="1172247" ref_url="https://bugzilla.suse.com/1172247" source="BUGZILLA"/>
		<reference ref_id="1172418" ref_url="https://bugzilla.suse.com/1172418" source="BUGZILLA"/>
		<reference ref_id="1172428" ref_url="https://bugzilla.suse.com/1172428" source="BUGZILLA"/>
		<reference ref_id="1172871" ref_url="https://bugzilla.suse.com/1172871" source="BUGZILLA"/>
		<reference ref_id="1172872" ref_url="https://bugzilla.suse.com/1172872" source="BUGZILLA"/>
		<reference ref_id="1172873" ref_url="https://bugzilla.suse.com/1172873" source="BUGZILLA"/>
		<reference ref_id="1172963" ref_url="https://bugzilla.suse.com/1172963" source="BUGZILLA"/>
		<reference ref_id="1173060" ref_url="https://bugzilla.suse.com/1173060" source="BUGZILLA"/>
		<reference ref_id="1173485" ref_url="https://bugzilla.suse.com/1173485" source="BUGZILLA"/>
		<reference ref_id="1173798" ref_url="https://bugzilla.suse.com/1173798" source="BUGZILLA"/>
		<reference ref_id="1173954" ref_url="https://bugzilla.suse.com/1173954" source="BUGZILLA"/>
		<reference ref_id="1174003" ref_url="https://bugzilla.suse.com/1174003" source="BUGZILLA"/>
		<reference ref_id="1174026" ref_url="https://bugzilla.suse.com/1174026" source="BUGZILLA"/>
		<reference ref_id="1174070" ref_url="https://bugzilla.suse.com/1174070" source="BUGZILLA"/>
		<reference ref_id="1174205" ref_url="https://bugzilla.suse.com/1174205" source="BUGZILLA"/>
		<reference ref_id="1174387" ref_url="https://bugzilla.suse.com/1174387" source="BUGZILLA"/>
		<reference ref_id="1174484" ref_url="https://bugzilla.suse.com/1174484" source="BUGZILLA"/>
		<reference ref_id="1174547" ref_url="https://bugzilla.suse.com/1174547" source="BUGZILLA"/>
		<reference ref_id="1174549" ref_url="https://bugzilla.suse.com/1174549" source="BUGZILLA"/>
		<reference ref_id="1174550" ref_url="https://bugzilla.suse.com/1174550" source="BUGZILLA"/>
		<reference ref_id="1174625" ref_url="https://bugzilla.suse.com/1174625" source="BUGZILLA"/>
		<reference ref_id="1174658" ref_url="https://bugzilla.suse.com/1174658" source="BUGZILLA"/>
		<reference ref_id="1174685" ref_url="https://bugzilla.suse.com/1174685" source="BUGZILLA"/>
		<reference ref_id="1174689" ref_url="https://bugzilla.suse.com/1174689" source="BUGZILLA"/>
		<reference ref_id="1174699" ref_url="https://bugzilla.suse.com/1174699" source="BUGZILLA"/>
		<reference ref_id="1174734" ref_url="https://bugzilla.suse.com/1174734" source="BUGZILLA"/>
		<reference ref_id="1174757" ref_url="https://bugzilla.suse.com/1174757" source="BUGZILLA"/>
		<reference ref_id="1174771" ref_url="https://bugzilla.suse.com/1174771" source="BUGZILLA"/>
		<reference ref_id="1174840" ref_url="https://bugzilla.suse.com/1174840" source="BUGZILLA"/>
		<reference ref_id="1174841" ref_url="https://bugzilla.suse.com/1174841" source="BUGZILLA"/>
		<reference ref_id="1174843" ref_url="https://bugzilla.suse.com/1174843" source="BUGZILLA"/>
		<reference ref_id="1174844" ref_url="https://bugzilla.suse.com/1174844" source="BUGZILLA"/>
		<reference ref_id="1174845" ref_url="https://bugzilla.suse.com/1174845" source="BUGZILLA"/>
		<reference ref_id="1174852" ref_url="https://bugzilla.suse.com/1174852" source="BUGZILLA"/>
		<reference ref_id="1174873" ref_url="https://bugzilla.suse.com/1174873" source="BUGZILLA"/>
		<reference ref_id="1174904" ref_url="https://bugzilla.suse.com/1174904" source="BUGZILLA"/>
		<reference ref_id="1174926" ref_url="https://bugzilla.suse.com/1174926" source="BUGZILLA"/>
		<reference ref_id="1174968" ref_url="https://bugzilla.suse.com/1174968" source="BUGZILLA"/>
		<reference ref_id="1175062" ref_url="https://bugzilla.suse.com/1175062" source="BUGZILLA"/>
		<reference ref_id="1175063" ref_url="https://bugzilla.suse.com/1175063" source="BUGZILLA"/>
		<reference ref_id="1175064" ref_url="https://bugzilla.suse.com/1175064" source="BUGZILLA"/>
		<reference ref_id="1175065" ref_url="https://bugzilla.suse.com/1175065" source="BUGZILLA"/>
		<reference ref_id="1175066" ref_url="https://bugzilla.suse.com/1175066" source="BUGZILLA"/>
		<reference ref_id="1175067" ref_url="https://bugzilla.suse.com/1175067" source="BUGZILLA"/>
		<reference ref_id="1175112" ref_url="https://bugzilla.suse.com/1175112" source="BUGZILLA"/>
		<reference ref_id="1175127" ref_url="https://bugzilla.suse.com/1175127" source="BUGZILLA"/>
		<reference ref_id="1175128" ref_url="https://bugzilla.suse.com/1175128" source="BUGZILLA"/>
		<reference ref_id="1175149" ref_url="https://bugzilla.suse.com/1175149" source="BUGZILLA"/>
		<reference ref_id="1175199" ref_url="https://bugzilla.suse.com/1175199" source="BUGZILLA"/>
		<reference ref_id="1175213" ref_url="https://bugzilla.suse.com/1175213" source="BUGZILLA"/>
		<reference ref_id="1175228" ref_url="https://bugzilla.suse.com/1175228" source="BUGZILLA"/>
		<reference ref_id="1175232" ref_url="https://bugzilla.suse.com/1175232" source="BUGZILLA"/>
		<reference ref_id="1175284" ref_url="https://bugzilla.suse.com/1175284" source="BUGZILLA"/>
		<reference ref_id="1175393" ref_url="https://bugzilla.suse.com/1175393" source="BUGZILLA"/>
		<reference ref_id="1175394" ref_url="https://bugzilla.suse.com/1175394" source="BUGZILLA"/>
		<reference ref_id="1175396" ref_url="https://bugzilla.suse.com/1175396" source="BUGZILLA"/>
		<reference ref_id="1175397" ref_url="https://bugzilla.suse.com/1175397" source="BUGZILLA"/>
		<reference ref_id="1175398" ref_url="https://bugzilla.suse.com/1175398" source="BUGZILLA"/>
		<reference ref_id="1175399" ref_url="https://bugzilla.suse.com/1175399" source="BUGZILLA"/>
		<reference ref_id="1175400" ref_url="https://bugzilla.suse.com/1175400" source="BUGZILLA"/>
		<reference ref_id="1175401" ref_url="https://bugzilla.suse.com/1175401" source="BUGZILLA"/>
		<reference ref_id="1175402" ref_url="https://bugzilla.suse.com/1175402" source="BUGZILLA"/>
		<reference ref_id="1175403" ref_url="https://bugzilla.suse.com/1175403" source="BUGZILLA"/>
		<reference ref_id="1175404" ref_url="https://bugzilla.suse.com/1175404" source="BUGZILLA"/>
		<reference ref_id="1175405" ref_url="https://bugzilla.suse.com/1175405" source="BUGZILLA"/>
		<reference ref_id="1175406" ref_url="https://bugzilla.suse.com/1175406" source="BUGZILLA"/>
		<reference ref_id="1175407" ref_url="https://bugzilla.suse.com/1175407" source="BUGZILLA"/>
		<reference ref_id="1175408" ref_url="https://bugzilla.suse.com/1175408" source="BUGZILLA"/>
		<reference ref_id="1175409" ref_url="https://bugzilla.suse.com/1175409" source="BUGZILLA"/>
		<reference ref_id="1175410" ref_url="https://bugzilla.suse.com/1175410" source="BUGZILLA"/>
		<reference ref_id="1175411" ref_url="https://bugzilla.suse.com/1175411" source="BUGZILLA"/>
		<reference ref_id="1175412" ref_url="https://bugzilla.suse.com/1175412" source="BUGZILLA"/>
		<reference ref_id="1175413" ref_url="https://bugzilla.suse.com/1175413" source="BUGZILLA"/>
		<reference ref_id="1175414" ref_url="https://bugzilla.suse.com/1175414" source="BUGZILLA"/>
		<reference ref_id="1175415" ref_url="https://bugzilla.suse.com/1175415" source="BUGZILLA"/>
		<reference ref_id="1175416" ref_url="https://bugzilla.suse.com/1175416" source="BUGZILLA"/>
		<reference ref_id="1175417" ref_url="https://bugzilla.suse.com/1175417" source="BUGZILLA"/>
		<reference ref_id="1175418" ref_url="https://bugzilla.suse.com/1175418" source="BUGZILLA"/>
		<reference ref_id="1175419" ref_url="https://bugzilla.suse.com/1175419" source="BUGZILLA"/>
		<reference ref_id="1175420" ref_url="https://bugzilla.suse.com/1175420" source="BUGZILLA"/>
		<reference ref_id="1175421" ref_url="https://bugzilla.suse.com/1175421" source="BUGZILLA"/>
		<reference ref_id="1175422" ref_url="https://bugzilla.suse.com/1175422" source="BUGZILLA"/>
		<reference ref_id="1175423" ref_url="https://bugzilla.suse.com/1175423" source="BUGZILLA"/>
		<reference ref_id="1175440" ref_url="https://bugzilla.suse.com/1175440" source="BUGZILLA"/>
		<reference ref_id="1175493" ref_url="https://bugzilla.suse.com/1175493" source="BUGZILLA"/>
		<reference ref_id="1175515" ref_url="https://bugzilla.suse.com/1175515" source="BUGZILLA"/>
		<reference ref_id="1175518" ref_url="https://bugzilla.suse.com/1175518" source="BUGZILLA"/>
		<reference ref_id="1175526" ref_url="https://bugzilla.suse.com/1175526" source="BUGZILLA"/>
		<reference ref_id="1175550" ref_url="https://bugzilla.suse.com/1175550" source="BUGZILLA"/>
		<reference ref_id="1175654" ref_url="https://bugzilla.suse.com/1175654" source="BUGZILLA"/>
		<reference ref_id="1175666" ref_url="https://bugzilla.suse.com/1175666" source="BUGZILLA"/>
		<reference ref_id="1175667" ref_url="https://bugzilla.suse.com/1175667" source="BUGZILLA"/>
		<reference ref_id="1175668" ref_url="https://bugzilla.suse.com/1175668" source="BUGZILLA"/>
		<reference ref_id="1175669" ref_url="https://bugzilla.suse.com/1175669" source="BUGZILLA"/>
		<reference ref_id="1175670" ref_url="https://bugzilla.suse.com/1175670" source="BUGZILLA"/>
		<reference ref_id="1175691" ref_url="https://bugzilla.suse.com/1175691" source="BUGZILLA"/>
		<reference ref_id="1175767" ref_url="https://bugzilla.suse.com/1175767" source="BUGZILLA"/>
		<reference ref_id="1175768" ref_url="https://bugzilla.suse.com/1175768" source="BUGZILLA"/>
		<reference ref_id="1175769" ref_url="https://bugzilla.suse.com/1175769" source="BUGZILLA"/>
		<reference ref_id="1175770" ref_url="https://bugzilla.suse.com/1175770" source="BUGZILLA"/>
		<reference ref_id="1175771" ref_url="https://bugzilla.suse.com/1175771" source="BUGZILLA"/>
		<reference ref_id="1175772" ref_url="https://bugzilla.suse.com/1175772" source="BUGZILLA"/>
		<reference ref_id="1175786" ref_url="https://bugzilla.suse.com/1175786" source="BUGZILLA"/>
		<reference ref_id="1175873" ref_url="https://bugzilla.suse.com/1175873" source="BUGZILLA"/>
		<reference ref_id="1176069" ref_url="https://bugzilla.suse.com/1176069" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10135" ref_url="https://www.suse.com/security/cve/CVE-2020-10135/" source="CVE"/>
		<reference ref_id="CVE-2020-14314" ref_url="https://www.suse.com/security/cve/CVE-2020-14314/" source="CVE"/>
		<reference ref_id="CVE-2020-14331" ref_url="https://www.suse.com/security/cve/CVE-2020-14331/" source="CVE"/>
		<reference ref_id="CVE-2020-14356" ref_url="https://www.suse.com/security/cve/CVE-2020-14356/" source="CVE"/>
		<reference ref_id="CVE-2020-14386" ref_url="https://www.suse.com/security/cve/CVE-2020-14386/" source="CVE"/>
		<reference ref_id="CVE-2020-16166" ref_url="https://www.suse.com/security/cve/CVE-2020-16166/" source="CVE"/>
		<reference ref_id="CVE-2020-1749" ref_url="https://www.suse.com/security/cve/CVE-2020-1749/" source="CVE"/>
		<reference ref_id="CVE-2020-24394" ref_url="https://www.suse.com/security/cve/CVE-2020-24394/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2575-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007383.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629).
- CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798).
- CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem which could have led to privilege escalation (bsc#1175213).
- CVE-2020-14331: Fixed a missing check in vgacon scrollback handling (bsc#1174205).
- CVE-2020-16166: Fixed a potential issue which could have allowed remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG (bsc#1174757).
- CVE-2020-24394: Fixed an issue which could set incorrect permissions on new filesystem objects when the filesystem lacks ACL support (bsc#1175518).
- CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated user to complete authentication without pairing credentials via adjacent access (bsc#1171988).
- CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069).
    
The following non-security bugs were fixed:

- ACPI: kABI fixes for subsys exports (bsc#1174968).
- ACPI / LPSS: Resume BYT/CHT I2C controllers from resume_noirq (bsc#1174968).
- ACPI / LPSS: Use acpi_lpss_* instead of acpi_subsys_* functions for hibernate (bsc#1174968).
- ACPI: PM: Introduce 'poweroff' callbacks for ACPI PM domain and LPSS (bsc#1174968).
- ACPI: PM: Simplify and fix PM domain hibernation callbacks (bsc#1174968).
- af_key: pfkey_dump needs parameter validation (git-fixes).
- agp/intel: Fix a memory leak on module initialisation failure (git-fixes).
- ALSA: core: pcm_iec958: fix kernel-doc (bsc#1111666).
- ALSA: echoaduio: Drop superfluous volatile modifier (bsc#1111666).
- ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (bsc#1111666).
- ALSA: hda: Add support for Loongson 7A1000 controller (bsc#1111666).
- ALSA: hda/ca0132 - Add new quirk ID for Recon3D (bsc#1111666).
- ALSA: hda/ca0132 - Fix AE-5 microphone selection commands (bsc#1111666).
- ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value (bsc#1111666).
- ALSA: hda: fix NULL pointer dereference during suspend (git-fixes).
- ALSA: hda: fix snd_hda_codec_cleanup() documentation (bsc#1111666).
- ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (bsc#1111666).
- ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (bsc#1111666).
- ALSA: hda/realtek: Add model alc298-samsung-headphone (git-fixes).
- ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems (bsc#1111666).
- ALSA: hda/realtek - Add quirk for Lenovo Carbon X1 8th gen (bsc#1111666).
- ALSA: hda/realtek - Add quirk for MSI GE63 laptop (bsc#1111666).
- ALSA: hda/realtek - Add quirk for MSI GL63 (bsc#1111666).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (git-fixes).
- ALSA: hda/realtek - change to suitable link model for ASUS platform (bsc#1111666).
- ALSA: hda/realtek - Check headset type by unplug and resume (bsc#1111666).
- ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 (bsc#1111666).
- ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC (bsc#1111666).
- ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 (bsc#1111666).
- ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (bsc#1111666).
- ALSA: hda/realtek - Enable Speaker for ASUS UX563 (bsc#1111666).
- ALSA: hda/realtek: Fix add a 'ultra_low_power' function for intel reference board (alc256) (bsc#1111666).
- ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung Notebook Pen S (bsc#1111666).
- ALSA: hda/realtek - Fixed HP right speaker no sound (bsc#1111666).
- ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id (bsc#1111666).
- ALSA: hda/realtek: Fix pin default on Intel NUC 8 Rugged (bsc#1111666).
- ALSA: hda/realtek - Fix unused variable warning (bsc#1111666).
- ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus G14(GA401) series with ALC289 (bsc#1111666).
- ALSA: hda - reverse the setting value in the micmute_led_set (bsc#1111666).
- ALSA: hda: Workaround for spurious wakeups on some Intel platforms (git-fixes).
- ALSA: pci: delete repeated words in comments (bsc#1111666).
- ALSA: seq: oss: Serialize ioctls (bsc#1111666).
- ALSA: usb-audio: Add capture support for Saffire 6 (USB 1.1) (git-fixes).
- ALSA: usb-audio: add quirk for Pioneer DDJ-RB (bsc#1111666).
- ALSA: usb-audio: add startech usb audio dock name (bsc#1111666).
- ALSA: usb-audio: Add support for Lenovo ThinkStation P620 (bsc#1111666).
- ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support (bsc#1111666).
- ALSA: usb-audio: Disable Lenovo P620 Rear line-in volume control (bsc#1111666).
- ALSA: usb-audio: endpoint : remove needless check before usb_free_coherent() (bsc#1111666).
- ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 (bsc#1174625).
- ALSA: usb-audio: fix spelling mistake 'buss' -&gt; 'bus' (bsc#1111666).
- ALSA: usb-audio: ignore broken processing/extension unit (git-fixes).
- ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109 (bsc#1111666).
- ALSA: usb/line6: remove 'defined but not used' warning (bsc#1111666).
- arm64: Add MIDR encoding for HiSilicon Taishan CPUs (bsc#1174547).
- arm64: Add MIDR encoding for NVIDIA CPUs (bsc#1174547).
- arm64: add sysfs vulnerability show for meltdown (bsc#1174547).
- arm64: Add sysfs vulnerability show for spectre-v1 (bsc#1174547).
- arm64: add sysfs vulnerability show for spectre-v2 (bsc#1174547).
- arm64: add sysfs vulnerability show for speculative store bypass (bsc#1174547). 
- arm64: Advertise mitigation of Spectre-v2, or lack thereof (bsc#1174547). 
- arm64: Always enable spectre-v2 vulnerability detection (bsc#1174547). 
- arm64: Always enable ssb vulnerability detection (bsc#1174547). 
- arm64: backtrace: Do not bother trying to unwind the userspace stack (bsc#1175397).
- arm64: capabilities: Add NVIDIA Denver CPU to bp_harden list (bsc#1174547).
- arm64: capabilities: Merge duplicate Cavium erratum entries (bsc#1174547).
- arm64: capabilities: Merge entries for ARM64_WORKAROUND_CLEAN_CACHE (bsc#1174547). 
- arm64: cpufeature: Enable Qualcomm Falkor/Kryo errata 1003 (bsc#1175398).
- arm64: Do not mask out PTE_RDONLY in pte_same() (bsc#1175393).
- arm64: enable generic CPU vulnerabilites support (bsc#1174547). Update config/arm64/default
- arm64: Ensure VM_WRITE|VM_SHARED ptes are clean by default (bsc#1175394).
- arm64: errata: Do not define type field twice for arm64_errata entries (bsc#1174547).
- arm64: errata: Update stale comment (bsc#1174547).
- arm64: Get rid of __smccc_workaround_1_hvc_* (bsc#1174547).
- arm64: kpti: Avoid rewriting early page tables when KASLR is enabled (bsc#1174547).
- arm64: kpti: Update arm64_kernel_use_ng_mappings() when forced on (bsc#1174547).
- arm64: kpti: Whitelist Cortex-A CPUs that do not implement the CSV3 field (bsc#1174547).
- arm64: kpti: Whitelist HiSilicon Taishan v110 CPUs (bsc#1174547).
- arm64: KVM: Avoid setting the upper 32 bits of VTCR_EL2 to 1 (bsc#1133021).
- arm64: KVM: Guests can skip __install_bp_hardening_cb()s HYP work (bsc#1174547).
- arm64: KVM: Use SMCCC_ARCH_WORKAROUND_1 for Falkor BP hardening (bsc#1174547). 
- arm64: mm: Fix pte_mkclean, pte_mkdirty semantics (bsc#1175526). 
- arm64: Provide a command line to disable spectre_v2 mitigation (bsc#1174547).
- arm64: Silence clang warning on mismatched value/register sizes (bsc#1175396).
- arm64/speculation: Support 'mitigations=' cmdline option (bsc#1174547). 
- arm64: ssbd: explicitly depend on &lt;linux/prctl.h&gt; (bsc#1175399).
- arm64: ssbs: Do not treat CPUs with SSBS as unaffected by SSB (bsc#1174547).
- arm64: ssbs: Fix context-switch when SSBS is present on all CPUs (bsc#1175669).
- arm64/sve: Fix wrong free for task-&gt;thread.sve_state (bsc#1175400).
- arm64/sve: &lt;uapi/asm/ptrace.h&gt; should not depend on &amp;lt;uapi/linux/prctl.h&gt; (bsc#1175401).
- arm64: tlbflush: avoid writing RES0 bits (bsc#1175402).
- arm64: Use firmware to detect CPUs that are not affected by Spectre-v2 (bsc#1174547).
- ARM: KVM: invalidate BTB on guest exit for Cortex-A12/A17 (bsc#1133021). 
- ARM: KVM: invalidate icache on guest exit for Cortex-A15 (bsc#1133021).
- ARM: spectre-v2: KVM: invalidate icache on guest exit for Brahma B15 (bsc#1133021).
- ASoC: hda/tegra: Set buffer alignment to 128 bytes (bsc#1111666).
- ASoC: intel: Fix memleak in sst_media_open (git-fixes).
- ASoC: rt5670: Correct RT5670_LDO_SEL_MASK (git-fixes).
- AX.25: Fix out-of-bounds read in ax25_connect() (git-fixes).
- AX.25: Prevent integer overflows in connect and sendmsg (git-fixes).
- AX.25: Prevent out-of-bounds read in ax25_sendmsg() (git-fixes).
- ax88172a: fix ax88172a_unbind() failures (git-fixes).
- b43: Remove uninitialized_var() usage (git-fixes).
- bcache: allocate meta data pages as compound pages (bsc#1172873).
- block: check queue's limits.discard_granularity in __blkdev_issue_discard() (bsc#1152148).
- block: Fix use-after-free in blkdev_get() (bsc#1174843).
- block: improve discard bio alignment in __blkdev_issue_discard() (bsc#1152148).
- Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() (bsc#1111666).
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt() (bsc#1111666).
- Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt() (bsc#1111666).
- bonding: fix active-backup failover for current ARP slave (bsc#1174771).
- bonding: fix a potential double-unregister (git-fixes).
- bonding: show saner speed for broadcast mode (git-fixes).
- bpf: Fix map leak in HASH_OF_MAPS map (git-fixes).
- brcmfmac: keep SDIO watchdog running when console_interval is non-zero (bsc#1111666).
- brcmfmac: set state of hanger slot to FREE when flushing PSQ (bsc#1111666).
- brcmfmac: To fix Bss Info flag definition Bug (bsc#1111666).
- btrfs: change timing for qgroup reserved space for ordered extents to fix reserved space leak (bsc#1172247).
- btrfs: file: reserve qgroup space after the hole punch range is locked (bsc#1172247).
- btrfs: fix a block group ref counter leak after failure to remove block group (bsc#1175149).
- btrfs: fix block group leak when removing fails (bsc#1175149).
- btrfs: fix bytes_may_use underflow when running balance and scrub in parallel (bsc#1175149).
- btrfs: fix corrupt log due to concurrent fsync of inodes with shared extents (bsc#1175149).
- btrfs: fix data block group relocation failure due to concurrent scrub (bsc#1175149).
- btrfs: fix double free on ulist after backref resolution failure (bsc#1175149).
- btrfs: fix fatal extent_buffer readahead vs releasepage race (bsc#1175149).
- btrfs: fix memory leaks after failure to lookup checksums during inode logging (bsc#1175550).
- btrfs: fix page leaks after failure to lock page for delalloc (bsc#1175149).
- btrfs: fix race between block group removal and block group creation (bsc#1175149).
- btrfs: fix space_info bytes_may_use underflow after nocow buffered write (bsc#1175149).
- btrfs: fix space_info bytes_may_use underflow during space cache writeout (bsc#1175149).
- btrfs: fix wrong file range cleanup after an error filling dealloc range (bsc#1175149).
- btrfs: inode: fix NULL pointer dereference if inode does not need compression (bsc#1174484).
- btrfs: inode: move qgroup reserved space release to the callers of insert_reserved_file_extent() (bsc#1172247).
- btrfs: inode: refactor the parameters of insert_reserved_file_extent() (bsc#1172247).
- btrfs: make btrfs_ordered_extent naming consistent with btrfs_file_extent_item (bsc#1172247).
- btrfs: Open code btrfs_write_and_wait_marked_extents (bsc#1175149).
- btrfs: qgroup: allow to unreserve range without releasing other ranges (bsc#1120163).
- btrfs: qgroup: fix data leak caused by race between writeback and truncate (bsc#1172247).
- btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT (bsc#1120163).
- btrfs: qgroup: try to flush qgroup space when we get -EDQUOT (bsc#1120163).
- btrfs: Rename and export clear_btree_io_tree (bsc#1175149).
- btrfs: treat RWF_{,D}SYNC writes as sync for CRCs (bsc#1175493).
- bus: hisi_lpc: Add .remove method to avoid driver unbind crash (bsc#1174658).
- bus: hisi_lpc: Do not fail probe for unrecognised child devices (bsc#1174658).
- bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-free (bsc#1174658).
- cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip (git-fixes).
- cfg80211: check vendor command doit pointer before use (git-fixes).
- char: virtio: Select VIRTIO from VIRTIO_CONSOLE (bsc#1175667).
- cifs: document and cleanup dfs mount (bsc#1144333 bsc#1172428).
- cifs: Fix an error pointer dereference in cifs_mount() (bsc#1144333 bsc#1172428).
- cifs: fix double free error on share and prefix (bsc#1144333 bsc#1172428).
- cifs: handle empty list of targets in cifs_reconnect() (bsc#1144333 bsc#1172428).
- cifs: handle RESP_GET_DFS_REFERRAL.PathConsumed in reconnect (bsc#1144333 bsc#1172428).
- cifs: merge __{cifs,smb2}_reconnect[_tcon]() into cifs_tree_connect() (bsc#1144333 bsc#1172428).
- cifs: only update prefix path of DFS links in cifs_tree_connect() (bsc#1144333 bsc#1172428).
- cifs: reduce number of referral requests in DFS link lookups (bsc#1144333 bsc#1172428).
- cifs: rename reconn_inval_dfs_target() (bsc#1144333 bsc#1172428).
- clk: at91: clk-generated: check best_rate against ranges (bsc#1111666).
- clk: clk-atlas6: fix return value check in atlas6_clk_init() (bsc#1111666).
- clk: iproc: round clock rate to the closest (bsc#1111666).
- clk: spear: Remove uninitialized_var() usage (git-fixes).
- clk: st: Remove uninitialized_var() usage (git-fixes).
- config: arm64: enable CONFIG_IOMMU_DEFAULT_PASSTHROUGH References: bsc#1174549
- console: newport_con: fix an issue about leak related system resources (git-fixes).
- constrants: fix malformed XML Closing tag of an element is '&lt;/foo&gt;', not '&lt;foo/&gt;'. Fixes: 8b37de2eb835 ('rpm/constraints.in: Increase memory for kernel-docs')
- Created new preempt kernel flavor (jsc#SLE-11309) Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT-&gt;y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.
- crypto: ccp - Fix use of merged scatterlists (git-fixes).
- crypto: cpt - do not sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified (git-fixes).
- crypto: qat - fix double free in qat_uclo_create_batch_init_list (git-fixes).
- crypto: rockchip - fix scatterlist nents error (git-fixes).
- crypto: stm32/crc32 - fix ext4 chksum BUG_ON() (git-fixes).
- crypto: talitos - check AES key size (git-fixes).
- crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK (git-fixes).
- crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req() (git-fixes).
- dev: Defer free of skbs in flush_backlog (git-fixes).
- device property: Fix the secondary firmware node handling in set_primary_fwnode() (git-fixes).
- devres: keep both device name and resource name in pretty name (git-fixes).
- dlm: Fix kobject memleak (bsc#1175768).
- dlm: remove BUG() before panic() (bsc#1174844).
- dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler (git-fixes).
- Documentation/networking: Add net DIM documentation (bsc#1174852).
- dpaa2-eth: Fix passing zero to 'PTR_ERR' warning (bsc#1175403).
- dpaa2-eth: free already allocated channels on probe defer (bsc#1175404).
- dpaa2-eth: prevent array underflow in update_cls_rule() (bsc#1175405).
- dpaa_eth: add dropped frames to percpu ethtool stats (bsc#1174550).
- dpaa_eth: add newline in dev_err() msg (bsc#1174550).
- dpaa_eth: avoid timestamp read on error paths (bsc#1175406).
- dpaa_eth: change DMA device (bsc#1174550).
- dpaa_eth: cleanup skb_to_contig_fd() (bsc#1174550).
- dpaa_eth: defer probing after qbman (bsc#1174550).
- dpaa_eth: extend delays in ndo_stop (bsc#1174550).
- dpaa_eth: fix DMA mapping leak (bsc#1174550).
- dpaa_eth: Fix one possible memleak in dpaa_eth_probe (bsc#1174550).
- dpaa_eth: FMan erratum A050385 workaround (bsc#1174550).
- dpaa_eth: perform DMA unmapping before read (bsc#1175407).
- dpaa_eth: register a device link for the qman portal used (bsc#1174550).
- dpaa_eth: remove netdev_err() for user errors (bsc#1174550).
- dpaa_eth: remove redundant code (bsc#1174550).
- dpaa_eth: simplify variables used in dpaa_cleanup_tx_fd() (bsc#1174550).
- dpaa_eth: use a page to store the SGT (bsc#1174550).
- dpaa_eth: use fd information in dpaa_cleanup_tx_fd() (bsc#1174550).
- dpaa_eth: use only one buffer pool per interface (bsc#1174550).
- dpaa_eth: use page backed rx buffers (bsc#1174550).
- driver core: Avoid binding drivers to dead devices (git-fixes).
- Drivers: hv: balloon: Remove dependencies on guest page size (git-fixes).
- Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE (git-fixes).
- Drivers: hv: vmbus: Only notify Hyper-V for die events that are oops (bsc#1175127, bsc#1175128).
- Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup() (git-fixes).
- drivers/perf: hisi: Fix typo in events attribute array (bsc#1175408).
- drivers/perf: hisi: Fixup one DDRC PMU register offset (bsc#1175410).
- drivers/perf: hisi: Fix wrong value for all counters enable (bsc#1175409).
- drm: Added orientation quirk for ASUS tablet model T103HAF (bsc#1111666).
- drm/amd/display: fix pow() crashing when given base 0 (git-fixes).
- drm/amdgpu: avoid dereferencing a NULL pointer (bsc#1111666).
- drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume (bsc#1111666).
- drm/amdgpu: Fix NULL dereference in dpm sysfs handlers (bsc#1113956) 	* refresh for context changes
- drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() (git-fixes).
- drm/amdgpu: Replace invalid device ID with a valid device ID (bsc#1113956)
- drm/arm: fix unintentional integer overflow on left shift (git-fixes).
- drm/bridge: dw-hdmi: Do not cleanup i2c adapter and ddc ptr in (bsc#1113956) 	* refreshed for context changes
- drm/bridge: sil_sii8620: initialize return of sii8620_readb (git-fixes).
- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1113956) 	* move drm_mipi_dbi.c -&gt; tinydrm/mipi-drm.c 	* refresh for context changes
- drm/debugfs: fix plain echo to connector 'force' attribute (bsc#1111666).
- drm/etnaviv: Fix error path on failure to enable bus clk (git-fixes).
- drm/etnaviv: fix ref count leak via pm_runtime_get_sync (bsc#1111666).
- drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi (bsc#1112178) 	* updated names of get/put functions
- drm: hold gem reference until object is no longer accessed (bsc#1113956)
- drm/imx: fix use after free (git-fixes).
- drm/imx: imx-ldb: Disable both channels for split mode in enc-&gt;disable() (git-fixes).
- drm/imx: tve: fix regulator_disable error path (git-fixes).
- drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline (git-fixes).
- drm/msm/adreno: fix updating ring fence (git-fixes).
- drm/msm: ratelimit crtc event overflow error (bsc#1111666).
- drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason (git-fixes).
- drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure (git-fixes).
- drm/nouveau: fix multiple instances of reference count leaks (bsc#1111666).
- drm/panel: otm8009a: Drop unnessary backlight_device_unregister() (git-fixes).
- drm: panel: simple: Fix bpc for LG LB070WV8 panel (git-fixes).
- drm/radeon: disable AGP by default (bsc#1111666).
- drm/radeon: fix array out-of-bounds read and write issues (git-fixes).
- drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync (bsc#1111666).
- drm/rockchip: fix VOP_WIN_GET macro (bsc#1175411).
- drm/tilcdc: fix leak &amp; null ref in panel_connector_get_modes (bsc#1111666).
- drm/ttm/nouveau: do not call tt destroy callback on alloc failure (bsc#1175232).
- drm/vmwgfx: Fix two list_for_each loop exit tests (bsc#1111666).
- drm/vmwgfx: Use correct vmw_legacy_display_unit pointer (bsc#1111666).
- drm/xen-front: Fix misused IS_ERR_OR_NULL checks (bsc#1065600).
- efi/memreserve: deal with memreserve entries in unmapped memory (bsc#1174685).
- ext4: check journal inode extents more carefully (bsc#1173485).
- ext4: do not allow overlapping system zones (bsc#1173485).
- ext4: fix checking of directory entry validity for inline directories (bsc#1175771).
- ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max (bsc#1174840).
- ext4: handle error of ext4_setup_system_zone() on remount (bsc#1173485).
- fat: do not allow to mount if the FAT length == 0 (bsc#1174845).
- fbdev: Detect integer underflow at 'struct fbcon_ops'-&gt;clear_margins. (bsc#1112178) 	* move files drivers/video/fbdev/core -&gt; drivers/video/console 	* refresh for context changes
- firmware: google: check if size is valid when decoding VPD data (git-fixes).
- firmware: google: increment VPD key_len properly (git-fixes).
- fpga: dfl: fix bug in port reset handshake (git-fixes).
- fsl/fman: add API to get the device behind a fman port (bsc#1174550).
- fsl/fman: check dereferencing null pointer (git-fixes).
- fsl/fman: detect FMan erratum A050385 (bsc#1174550).
- fsl/fman: do not touch liodn base regs reserved on non-PAMU SoCs (bsc#1174550).
- fsl/fman: fix dereference null return value (git-fixes).
- fsl/fman: fix eth hash table allocation (git-fixes).
- fsl/fman: fix unreachable code (git-fixes).
- fsl/fman: remove unused struct member (bsc#1174550).
- fsl/fman: use 32-bit unsigned integer (git-fixes).
- fuse: fix memleak in cuse_channel_open (bsc#1174926).
- fuse: fix missing unlock_page in fuse_writepage() (bsc#1174904).
- fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS (bsc#1175062).
- fuse: fix weird page warning (bsc#1175063).
- fuse: flush dirty data/metadata before non-truncate setattr (bsc#1175064).
- fuse: truncate pending writes on O_TRUNC (bsc#1175065).
- fuse: verify attributes (bsc#1175066).
- fuse: verify nlink (bsc#1175067).
- genetlink: remove genl_bind (networking-stable-20_07_17).
- go7007: add sanity checking for endpoints (git-fixes).
- gpu: host1x: debug: Fix multiple channels emitting messages simultaneously (bsc#1111666).
- HID: hiddev: fix mess in hiddev_open() (git-fixes).
- HISI LPC: Re-Add ACPI child enumeration support (bsc#1174658).
- HISI LPC: Stop using MFD APIs (bsc#1174658).
- hv_balloon: Balloon up according to request page number (git-fixes).
- hv_balloon: Use a static page for the balloon_up send buffer (git-fixes).
- hv_netvsc: Allow scatter-gather feature to be tunable (git-fixes).
- hv_netvsc: do not use VF device if link is down (git-fixes).
- hv_netvsc: Fix a warning of suspicious RCU usage (git-fixes).
- hv_netvsc: Fix error handling in netvsc_attach() (git-fixes).
- hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback() (git-fixes).
- hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit() (git-fixes).
- hv_netvsc: Fix unwanted wakeup in netvsc_attach() (git-fixes).
- hv_netvsc: flag software created hash value (git-fixes).
- hv_netvsc: Remove 'unlikely' from netvsc_select_queue (git-fixes).
- i2c: rcar: in slave mode, clear NACK earlier (git-fixes).
- i2c: rcar: slave: only send STOP event when we have been addressed (bsc#1111666).
- i40e: Fix crash during removing i40e driver (git-fixes).
- i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (git-fixes).
- ibmveth: Fix use of ibmveth in a bridge (bsc#1174387 ltc#187506).
- ibmvnic: Fix IRQ mapping disposal in error path (bsc#1175112 ltc#187459).
- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset (bsc#1175873 ltc#187922).
- include/linux/poison.h: remove obsolete comment (git fixes (poison)).
- Input: psmouse - add a newline when printing 'proto' by sysfs (git-fixes).
- Input: sentelic - fix error return when fsp_reg_write fails (bsc#1111666).
- integrity: remove redundant initialization of variable ret (git-fixes).
- io-mapping: indicate mapping failure (git-fixes).
- ip6_gre: fix null-ptr-deref in ip6gre_init_net() (git-fixes).
- ip6_gre: fix use-after-free in ip6gre_tunnel_lookup() (networking-stable-20_06_28).
- ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL (bsc#1175515).
- ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL (bsc#1175515).
- ip_tunnel: Emit events for post-register MTU changes (git-fixes).
- ip_tunnel: fix use-after-free in ip_tunnel_lookup() (networking-stable-20_06_28).
- ip_tunnel: restore binding to ifaces with a large mtu (git-fixes).
- ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg (networking-stable-20_07_17).
- ipv4: Silence suspicious RCU usage warning (git-fixes).
- ipv6: fix memory leaks on IPV6_ADDRFORM path (git-fixes).
- ipvlan: fix device features (git-fixes).
- ipvs: allow connection reuse for unconfirmed conntrack (git-fixes).
- ipvs: fix refcount usage for conns in ops mode (git-fixes).
- ipvs: fix the connection sync failed in some cases (bsc#1174699).
- irqchip/gic: Atomically update affinity (bsc#1111666).
- iwlegacy: Check the return value of pcie_capability_read_*() (bsc#1111666).
- jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock() (bsc#1175772).
- kabi: genetlink: remove genl_bind (kabi).
- kabi: hide new parameter of ip6_dst_lookup_flow() (bsc#1165629).
- kabi: mask changes to struct ipv6_stub (bsc#1165629).
- kernel/cpu_pm: Fix uninitted local in cpu_pm (git fixes (kernel/pm)).
- kernel-docs: Change Requires on python-Sphinx to earlier than version 3 References: bsc#1166965 From 3 on the internal API that the build system uses was rewritten in an incompatible way. See https://github.com/sphinx-doc/sphinx/issues/7421 and https://bugzilla.suse.com/show_bug.cgi?id=1166965#c16 for some details.
- kernel/relay.c: fix memleak on destroy relay channel (git-fixes).
- kernfs: do not call fsnotify() with name without a parent (bsc#1175770).
- KVM: arm64: Ensure 'params' is initialised when looking up sys register (bsc#1133021).
- KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART (bsc#1133021).
- KVM: arm/arm64: Fix young bit from mmu notifier (bsc#1133021).
- KVM: arm/arm64: vgic: Do not rely on the wrong pending table (bsc#1133021).
- KVM: arm/arm64: vgic-its: Fix restoration of unmapped collections (bsc#1133021).
- KVM: arm: Fix DFSR setting for non-LPAE aarch32 guests (bsc#1133021).
- KVM: arm: Make inject_abt32() inject an external abort instead (bsc#1133021).
- KVM: Change offset in kvm_write_guest_offset_cached to unsigned (bsc#1133021).
- KVM: Check for a bad hva before dropping into the ghc slow path (bsc#1133021).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage (bsc#1065729).
- l2tp: remove skb_dst_set() from l2tp_xmit_skb() (networking-stable-20_07_17).
- leds: 88pm860x: fix use-after-free on unbind (git-fixes).
- leds: core: Flush scheduled work for system suspend (git-fixes).
- leds: da903x: fix use-after-free on unbind (git-fixes).
- leds: lm3533: fix use-after-free on unbind (git-fixes).
- leds: lm355x: avoid enum conversion warning (git-fixes).
- leds: wm831x-status: fix use-after-free on unbind (git-fixes).
- lib/dim: Fix -Wunused-const-variable warnings (bsc#1174852).
- lib: dimlib: fix help text typos (bsc#1174852).
- lib: logic_pio: Add logic_pio_unregister_range() (bsc#1174658).
- lib: logic_pio: Avoid possible overlap for unregistering regions (bsc#1174658).
- lib: logic_pio: Fix RCU usage (bsc#1174658).
- linux/dim: Add completions count to dim_sample (bsc#1174852).
- linux/dim: Fix overflow in dim calculation (bsc#1174852).
- linux/dim: Move implementation to .c files (bsc#1174852).
- linux/dim: Move logic to dim.h (bsc#1174852).
- linux/dim: Remove 'net' prefix from internal DIM members (bsc#1174852).
- linux/dim: Rename externally exposed macros (bsc#1174852).
- linux/dim: Rename externally used net_dim members (bsc#1174852).
- linux/dim: Rename net_dim_sample() to net_dim_update_sample() (bsc#1174852).
- liquidio: Fix wrong return value in cn23xx_get_pf_num() (git-fixes).
- llc: make sure applications use ARPHRD_ETHER (networking-stable-20_07_17).
- mac80211: mesh: Free ie data when leaving mesh (git-fixes).
- mac80211: mesh: Free pending skb when destroying a mpath (git-fixes).
- MAINTAINERS: add entry for Dynamic Interrupt Moderation (bsc#1174852).
- md-cluster: Fix potential error pointer dereference in resize_bitmaps() (git-fixes).
- md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 (git-fixes).
- media: budget-core: Improve exception handling in budget_register() (git-fixes).
- media: exynos4-is: Add missed check for pinctrl_lookup_state() (git-fixes).
- media: firewire: Using uninitialized values in node_probe() (git-fixes).
- media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities() (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- mfd: arizona: Ensure 32k clock is put on driver unbind and error (git-fixes).
- mfd: dln2: Run event handler loop under spinlock (git-fixes).
- mfd: rk808: Fix RK818 ID template (bsc#1175412).
- mld: fix memory leak in ipv6_mc_destroy_dev() (networking-stable-20_06_28).
- mm: filemap: clear idle flag for writes (bsc#1175769).
- mm/migrate.c: add missing flush_dcache_page for non-mapped page migrate (git fixes (mm/migrate)).
- mm/mmu_notifier: use hlist_add_head_rcu() (git fixes (mm/mmu_notifiers)).
- mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() (git fixes (mm/compaction)).
- mm/rmap.c: do not reuse anon_vma if we just want a copy (git fixes (mm/rmap)).
- mm/shmem.c: cast the type of unmap_start to u64 (git fixes (mm/shmem)).
- mm, thp: fix defrag setting if newline is not used (git fixes (mm/thp)).
- mm/vunmap: add cond_resched() in vunmap_pmd_range (bsc#1175654 ltc#184617).
- mtd: spi-nor: Fix an error code in spi_nor_read_raw() (bsc#1175413).
- mtd: spi-nor: fix kernel-doc for spi_nor::info (bsc#1175414).
- mtd: spi-nor: fix kernel-doc for spi_nor::reg_proto (bsc#1175415).
- mtd: spi-nor: fix silent truncation in spi_nor_read_raw() (bsc#1175416).
- mwifiex: Prevent memory corruption handling keys (git-fixes).
- net: Added pointer check for dst-&gt;ops-&gt;neigh_lookup in dst_neigh_lookup_skb (git-fixes).
- net: bridge: enfore alignment for ethernet address (networking-stable-20_06_28).
- net: core: reduce recursion limit value (networking-stable-20_06_28).
- net: Do not clear the sock TX queue in sk_set_socket() (networking-stable-20_06_28).
- net: dsa: b53: check for timeout (git-fixes).
- net: dsa: bcm_sf2: Fix node reference count (git-fixes).
- net: ena: Add first_interrupt field to napi struct (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: add support for reporting of packet drops (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool (bsc#1174852).
- net: ena: allow setting the hash function without changing the key (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function set fails (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when busy-polling (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz (bsc#1174852).
- net: ena: change num_queues to num_io_queues for clarity and consistency (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: Change WARN_ON expression in ena_del_napi_in_range() (bsc#1174852).
- net: ena: clean up indentation issue (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64 (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set() (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in comments (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in ena_com.h macros (bsc#1174852).
- net: ena: cosmetic: rename ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: enable support of rss hash key and function changes (bsc#1174852).
- net: ena: enable the interrupt_moderation in driver_supported_features (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue (bsc#1174852).
- net: ena: ethtool: get_channels: use combined only (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc (bsc#1174852).
- net: ena: ethtool: support set_channels callback (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function() (bsc#1174852).
- net: ena: fix incorrect setting of the number of msix vectors (bsc#1174852).
- net: ena: fix incorrect update of intr_delay_resolution (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors (bsc#1174852).
- net: ena: fix update of interrupt moderation register (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in ena_init_napi_in_range (bsc#1174852).
- net: ena: implement XDP drop support (bsc#1174852).
- net: ena: Implement XDP_TX action (bsc#1174852).
- net: ena: make ethtool -l show correct max number of queues (bsc#1174852).
- net: ena: Make missed_tx stat incremental (bsc#1083548).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: move llq configuration from ena_probe to ena_device_init() (bsc#1174852).
- net: ena: multiple queue creation related cleanups (bsc#1174852).
- net: ena: Prevent reset after device destruction (bsc#1083548).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: remove all old adaptive rx interrupt moderation code from ena_com (bsc#1174852).
- net: ena: remove code duplication in ena_com_update_nonadaptive_moderation_interval _*() (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: remove ena_restore_ethtool_params() and relevant fields (bsc#1174852).
- net: ena: remove old adaptive interrupt moderation code from ena_netdev (bsc#1174852).
- net: ena: remove redundant print of number of queues (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key' (bsc#1174852).
- net: ena: remove set but not used variable 'rx_ring' (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform (bsc#1174852).
- net: ena: Select DIMLIB for ENA_ETHERNET (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution() (bsc#1174852).
- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: switch to dim algorithm for rx adaptive interrupt moderation (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface (bsc#1174852).
- net: ena: xdp: update napi budget for DROP and ABORTED (bsc#1174852).
- net: ena: xdp: XDP_TX: fix memory leak (bsc#1174852).
- net: ethernet: aquantia: Fix wrong return value (git-fixes).
- net: ethernet: broadcom: have drivers select DIMLIB as needed (bsc#1174852).
- net: ethernet: stmmac: Disable hardware multicast filter (git-fixes).
- net: fec: correct the error path for regulator disable in probe (git-fixes).
- netfilter: x_tables: add counters allocation wrapper (git-fixes).
- netfilter: x_tables: cap allocations at 512 mbyte (git-fixes).
- netfilter: x_tables: limit allocation requests for blob rule heads (git-fixes).
- net: Fix a documentation bug wrt. ip_unprivileged_port_start (git-fixes). (SLES tuning guide refers to ip-sysctl.txt.)
- net: fix memleak in register_netdevice() (networking-stable-20_06_28).
- net: Fix the arp error in some cases (networking-stable-20_06_28).
- net: gre: recompute gre csum for sctp over gre tunnels (git-fixes).
- net: hns3: add autoneg and change speed support for fibre port (bsc#1174070).
- net: hns3: add support for FEC encoding control (bsc#1174070).
- net: hns3: add support for multiple media type (bsc#1174070).
- net: hns3: fix a not link up issue when fibre port supports autoneg (bsc#1174070).
- net: hns3: fix for FEC configuration (bsc#1174070).
- net: hns3: fix port capbility updating issue (bsc#1174070).
- net: hns3: fix port setting handle for fibre port (bsc#1174070).
- net: hns3: fix selftest fail issue for fibre port with autoneg on (bsc#1174070).
- net: hns3: restore the MAC autoneg state after reset (bsc#1174070).
- net: increment xmit_recursion level in dev_direct_xmit() (networking-stable-20_06_28).
- net: ip6_gre: Request headroom in __gre6_xmit() (git-fixes).
- net: lan78xx: add missing endpoint sanity check (git-fixes).
- net: lan78xx: fix transfer-buffer memory leak (git-fixes).
- net: make symbol 'flush_works' static (git-fixes).
- net/mlx5e: vxlan: Use RCU for vxlan table lookup (git-fixes).
- net: mvpp2: fix memory leak in mvpp2_rx (git-fixes).
- net: netsec: Fix signedness bug in netsec_probe() (bsc#1175417).
- net: netsec: initialize tx ring on ndo_open (bsc#1175418).
- net: phy: Check harder for errors in get_phy_id() (bsc#1111666).
- net: qcom/emac: add missed clk_disable_unprepare in error path of emac_clks_phase1_init (git-fixes).
- net: Set fput_needed iff FDPUT_FPUT is set (git-fixes).
- net: socionext: Fix a signedness bug in ave_probe() (bsc#1175419).
- net: socionext: replace napi_alloc_frag with the netdev variant on init (bsc#1175420).
- net: spider_net: Fix the size used in a 'dma_free_coherent()' call (git-fixes).
- net: stmmac: dwmac1000: provide multicast filter fallback (git-fixes).
- net: stmmac: Fix RX packet size &gt; 8191 (git-fixes).
- net: udp: Fix wrong clean up for IS_UDPLITE macro (git-fixes).
- net: update net_dim documentation after rename (bsc#1174852).
- net: usb: ax88179_178a: fix packet alignment padding (networking-stable-20_06_28).
- net: usb: qmi_wwan: add support for Quectel EG95 LTE modem (networking-stable-20_07_17).
- netvsc: unshare skb in VF rx handler (git-fixes).
- nfc: nci: add missed destroy_workqueue in nci_register_device (git-fixes).
- ntb: Fix an error in get link status (git-fixes).
- ntb_netdev: fix sleep time mismatch (git-fixes).
- ntb: ntb_transport: Use scnprintf() for avoiding potential buffer overflow (git-fixes).
- nvme: fix possible deadlock when I/O is blocked (git-fixes).
- nvme-multipath: do not fall back to __nvme_find_path() for non-optimized paths (bsc#1172108).
- nvme-multipath: fix logic for non-optimized paths (bsc#1172108).
- nvme-multipath: round-robin: eliminate 'fallback' variable (bsc#1172108).
- nvme: multipath: round-robin: fix single non-optimized path case (bsc#1172108).
- obsolete_kmp: provide newer version than the obsoleted one (boo#1170232).
- ocfs2: add trimfs dlm lock resource (bsc#1175228).
- ocfs2: add trimfs lock to avoid duplicated trims in cluster (bsc#1175228).
- ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
- ocfs2: avoid inode removal while nfsd is accessing it (bsc#1172963).
- ocfs2: change slot number type s16 to u16 (bsc#1175786).
- ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
- ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).
- ocfs2: fix remounting needed after setfacl command (bsc#1173954).
- ocfs2: fix the application IO timeout when fstrim is running (bsc#1175228).
- ocfs2: fix value of OCFS2_INVALID_SLOT (bsc#1175767).
- ocfs2: load global_inode_alloc (bsc#1172963).
- ocfs2: load global_inode_alloc (bsc#1172963).
- omapfb: dss: Fix max fclk divider for omap36xx (bsc#1113956)
- openvswitch: Prevent kernel-infoleak in ovs_ct_put_key() (git-fixes).
- PCI/ASPM: Add missing newline in sysfs 'policy' (git-fixes).
- PCI: dwc: Move interrupt acking into the proper callback (bsc#1175666).
- PCI: Fix pci_cfg_wait queue locking problem (git-fixes).
- PCI: Fix 'try' semantics of bus and slot reset (git-fixes).
- PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context() (git-fixes).
- PCI: hv: Fix a timing issue which causes kdump to fail occasionally (bsc#1172871, bsc#1172872, git-fixes).
- PCI: Release IVRS table in AMD ACS quirk (git-fixes).
- PCI: switchtec: Add missing __iomem and __user tags to fix sparse warnings (git-fixes).
- PCI: switchtec: Add missing __iomem tag to fix sparse warnings (git-fixes).
- phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked (git-fixes).
- pinctrl: single: fix function name in documentation (git-fixes).
- pinctrl-single: fix pcs_parse_pinconf() return value (git-fixes).
- platform/x86: intel-hid: Fix return value check in check_acpi_dev() (git-fixes).
- platform/x86: intel-vbtn: Fix return value check in check_acpi_dev() (git-fixes).
- PM / CPU: replace raw_notifier with atomic_notifier (git fixes (kernel/pm)).
- PM / devfreq: rk3399_dmc: Add missing of_node_put() (bsc#1175668).
- PM / devfreq: rk3399_dmc: Disable devfreq-event device when fails.
- PM / devfreq: rk3399_dmc: Fix kernel oops when rockchip,pmu is absent (bsc#1175668).
- PM: sleep: core: Fix the handling of pending runtime resume requests (git-fixes).
- powerpc/64s: Do not init FSCR_DSCR in __init_FSCR() (bsc#1065729).
- powerpc/64s: Fix early_init_mmu section mismatch (bsc#1065729).
- powerpc: Allow 4224 bytes of stack expansion for the signal frame (bsc#1065729).
- powerpc/book3s64/pkeys: Use PVR check instead of cpu feature (bsc#1065729).
- powerpc/boot: Fix CONFIG_PPC_MPC52XX references (bsc#1065729).
- powerpc/eeh: Fix pseries_eeh_configure_bridge() (bsc#1174689).
- powerpc/nvdimm: Use HCALL error as the return value (bsc#1175284).
- powerpc/nvdimm: use H_SCM_QUERY hcall on H_OVERLAP error (bsc#1175284).
- powerpc/perf: Fix missing is_sier_aviable() during build (bsc#1065729).
- powerpc/pseries: Do not initiate shutdown when system is running on UPS (bsc#1175440 ltc#187574).
- powerpc/pseries/hotplug-cpu: Remove double free in error path (bsc#1065729).
- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death (bsc#1085030 ltC#165630).
- powerpc/pseries: PCIE PHB reset (bsc#1174689).
- powerpc/pseries: remove cede offline state for CPUs (bsc#1065729).
- powerpc/rtas: do not online CPUs for partition suspend (bsc#1065729).
- powerpc/vdso: Fix vdso cpu truncation (bsc#1065729).
- power: supply: check if calc_soc succeeded in pm860x_init_battery (git-fixes).
- propagate_one(): mnt_set_mountpoint() needs mount_lock (bsc#1174841).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- pwm: bcm-iproc: handle clk_get_rate() return (git-fixes).
- rds: Prevent kernel-infoleak in rds_notify_queue_get() (git-fixes).
- regulator: gpio: Honor regulator-boot-on property (git-fixes).
- Revert 'ALSA: hda: call runtime_allow() for all hda controllers' (bsc#1111666).
- Revert 'drm/amdgpu: Fix NULL dereference in dpm sysfs handlers' (bsc#1113956) 	* refresh for context changes
- Revert 'ocfs2: avoid inode removal while nfsd is accessing it' This reverts commit 9e096c72476eda333a9998ff464580c00ff59c83.
- Revert 'ocfs2: fix panic on nfs server over ocfs2 (bsc#1172963).' This reverts commit 0bf6e248f93736b3f17f399b4a8f64ffa30d371e.
- Revert 'ocfs2: load global_inode_alloc (bsc#1172963).' This reverts commit fc476497b53f967dc615b9cbad9427ba3107b5c4.
- Revert 'scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe' (bsc#1171688 bsc#1174003).
- Revert 'scsi: qla2xxx: Fix crash on qla2x00_mailbox_command' (bsc#1171688 bsc#1174003).
- Revert 'xen/balloon: Fix crash when ballooning on x86 32 bit PAE' (bsc#1065600).
- rocker: fix incorrect error handling in dma_rings_init (networking-stable-20_06_28).
- rpm/check-for-config-changes: Ignore CONFIG_CC_VERSION_TEXT
- rpm/check-for-config-changes: Ignore CONFIG_LD_VERSION
- rpm/constraints.in: Increase memory for kernel-docs References: https://build.opensuse.org/request/show/792664
- rpm: drop execute permissions on source files Sometimes a source file with execute permission appears in upstream repository and makes it into our kernel-source packages. This is caught by OBS build checks and may even result in build failures. Sanitize the source tree by removing execute permissions from all C source and header files.
- rpm/kabi.pl: account for namespace field being moved last Upstream is moving the namespace field in Module.symvers last in order to preserve backwards compatibility with kmod tools (depmod, etc). Fix the kabi.pl script to expect the namespace field last. Since split() ignores trailing empty fields and delimeters, switch to using tr to count how many fields/tabs are in a line. Also, in load_symvers(), pass LIMIT of -1 to split() so it does not strip trailing empty fields, as namespace is an optional field.
- rpm/kernel-binary.spec.in: do not run klp-symbols for configs with no modules Starting with 5.8-rc1, s390x/zfcpdump builds fail because rpm/klp-symbols script does not find .tmp_versions directory. This is missing because s390x/zfcpdump is built without modules (CONFIG_MODULES disabled). As livepatching cannot work without modules, the cleanest solution is setting %klp_symbols to 0 if CONFIG_MODULES is disabled. (We cannot simply add another condition to the place where %klp_symbols is set as it can be already set to 1 from prjconf.)
- rpm/kernel-binary.spec.in: restrict livepatch metapackage to default flavor It has been reported that the kernel-*-livepatch metapackage got erroneously enabled for SLE15-SP3's new -preempt flavor, leading to a unresolvable dependency to a non-existing kernel-livepatch-x.y.z-preempt package. As SLE12 and SLE12-SP1 have run out of livepatching support, the need to build said metapackage for the -xen flavor is gone and the only remaining flavor for which they're still wanted is -default. Restrict the build of the kernel-*-livepatch metapackage to the -default flavor.
- rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup Co-Authored-By: Adam Spiers &lt;aspiers@suse.com&gt;
- rpm/kernel-obs-build.spec.in: Enable overlayfs Overlayfs is needed for podman or docker builds when no more specific driver can be used (like lvm or btrfs). As the default build fs is ext4 currently, we need overlayfs kernel modules to be available.
- rpm/kernel-source.spec.in: Add obsolete_rebuilds (boo#1172073).
- rpm/mkspec-dtb: add mt76 based dtb package
- rpm/package-descriptions: garbege collection remove old ARM and Xen flavors.
- rtlwifi: rtl8192cu: Remove uninitialized_var() usage (git-fixes).
- rtnetlink: Fix memory(net_device) leak when -&gt;newlink fails (git-fixes).
- s390, dcssblk: kaddr and pfn can be NULL to -&gt;direct_access() (bsc#1174873).
- sched: consistently handle layer3 header accesses in the presence of VLANs (networking-stable-20_07_17).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1112178).
- scripts/git_sort/git_sort.py: add bluetooth/bluetooth-next.git repository
- scsi: lpfc: Add and rename a whole bunch of function parameter descriptions (bsc#1171558 bsc#1136666).
- scsi: lpfc: Add description for lpfc_release_rpi()'s 'ndlpl param (bsc#1171558 bsc#1136666).
- scsi: lpfc: Add missing misc_deregister() for lpfc_init() (bsc#1171558 bsc#1136666).
- scsi: lpfc: Ensure variable has the same stipulations as code using it (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix a bunch of kerneldoc misdemeanors (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix FCoE speed reporting (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix kerneldoc parameter formatting/misnaming/missing issues (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix LUN loss after cable pull (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix no message shown for lpfc_hdw_queue out of range value (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix oops when unloading driver while running mds diags (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix retry of PRLI when status indicates its unsupported (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix RSCN timeout due to incorrect gidft counter (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix some function parameter descriptions (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix typo in comment for ULP (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix-up around 120 documentation issues (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix-up formatting/docrot where appropriate (bsc#1171558 bsc#1136666).
- scsi: lpfc: Fix validation of bsg reply lengths (bsc#1171558 bsc#1136666).
- scsi: lpfc: NVMe remote port devloss_tmo from lldd (bsc#1171558 bsc#1136666 bsc#1173060).
- scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying targetport (bsc#1171558 bsc#1136666).
- scsi: lpfc: Provide description for lpfc_mem_alloc()'s 'align' param (bsc#1171558 bsc#1136666).
- scsi: lpfc: Quieten some printks (bsc#1171558 bsc#1136666).
- scsi: lpfc: Remove unused variable 'pg_addr' (bsc#1171558 bsc#1136666).
- scsi: lpfc: Update lpfc version to 12.8.0.3 (bsc#1171558 bsc#1136666).
- scsi: lpfc: Use __printf() format notation (bsc#1171558 bsc#1136666).
- scsi: dh: Add Fujitsu device to devinfo and dh lists (bsc#1174026).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value 1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in header files (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files (bsc#1171688 bsc#1174003). 
- scsi: qla2xxx: Fix failure message in qlt_disable_vha() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688 bsc#1174003).
- scsi: smartpqi: add bay identifier (bsc#1172418).
- scsi: smartpqi: add gigabyte controller (bsc#1172418).
- scsi: smartpqi: add id support for SmartRAID 3152-8i (bsc#1172418).
- scsi: smartpqi: add inquiry timeouts (bsc#1172418).
- scsi: smartpqi: add module param for exposure order (bsc#1172418).
- scsi: smartpqi: add module param to hide vsep (bsc#1172418).
- scsi: smartpqi: add new pci ids (bsc#1172418).
- scsi: smartpqi: add pci ids for fiberhome controller (bsc#1172418).
- scsi: smartpqi: add RAID bypass counter (bsc#1172418).
- scsi: smartpqi: add sysfs entries (bsc#1172418).
- scsi: smartpqi: Align driver syntax with oob (bsc#1172418).
- scsi: smartpqi: avoid crashing kernel for controller issues (bsc#1172418).
- scsi: smartpqi: bump version (bsc#1172418).
- scsi: smartpqi: bump version (bsc#1172418).
- scsi: smartpqi: bump version to 1.2.16-010 (bsc#1172418).
- scsi: smartpqi: change TMF timeout from 60 to 30 seconds (bsc#1172418).
- scsi: smartpqi: correct hang when deleting 32 lds (bsc#1172418).
- scsi: smartpqi: correct REGNEWD return status (bsc#1172418).
- scsi: smartpqi: correct syntax issue (bsc#1172418).
- scsi: smartpqi: fix call trace in device discovery (bsc#1172418).
- scsi: smartpqi: fix controller lockup observed during force reboot (bsc#1172418).
- scsi: smartpqi: fix LUN reset when fw bkgnd thread is hung (bsc#1172418).
- scsi: smartpqi: fix problem with unique ID for physical device (bsc#1172418).
- scsi: smartpqi: identify physical devices without issuing INQUIRY (bsc#1172418).
- scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask (bsc#1172418).
- scsi: smartpqi: remove unused manifest constants (bsc#1172418).
- scsi: smartpqi: Reporting unhandled SCSI errors (bsc#1172418).
- scsi: smartpqi: support device deletion via sysfs (bsc#1172418).
- scsi: smartpqi: update copyright (bsc#1172418).
- scsi: smartpqi: update logical volume size after expansion (bsc#1172418).
- scsi: smartpqi: Use scnprintf() for avoiding potential buffer overflow (bsc#1172418).
- scsi: storvsc: Correctly set number of hardware queues for IDE disk (git-fixes).
- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- sctp: Do not advertise IPv4 addresses if ipv6only is set on the socket (networking-stable-20_06_28).
- selftests/livepatch: fix mem leaks in test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: more verification in test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- selftests/livepatch: simplify test-klp-callbacks busy target tests (bsc#1071995).
- serial: 8250: change lock order in serial8250_do_startup() (git-fixes).
- serial: pl011: Do not leak amba_ports entry on driver register error (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- Set VIRTIO_CONSOLE=y (bsc#1175667).
- sign also s390x kernel images (bsc#1163524)
- soc: fsl: qbman: allow registering a device link for the portal user (bsc#1174550).
- soc: fsl: qbman_portals: add APIs to retrieve the probing status (bsc#1174550).
- spi: davinci: Remove uninitialized_var() usage (git-fixes).
- spi: lantiq: fix: Rx overflow error in full duplex mode (git-fixes).
- spi: nxp-fspi: Ensure width is respected in spi-mem operations (bsc#1175421).
- spi: spi-fsl-dspi: Fix 16-bit word order in 32-bit XSPI mode (bsc#1175422).
- spi: spi-mem: export spi_mem_default_supports_op() (bsc#1175421).
- staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes).
- staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes).
- staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift (git-fixes).
- staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support (git-fixes).
- staging: fsl-dpaa2: ethsw: Add missing netdevice check (bsc#1175423).
- staging: rtl8192u: fix a dubious looking mask before a shift (git-fixes).
- staging/speakup: fix get_word non-space look-ahead (git-fixes).
- tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT (networking-stable-20_06_28).
- tcp: grow window for OOO packets only for SACK flows (networking-stable-20_06_28).
- tcp: make sure listeners do not initialize congestion-control state (networking-stable-20_07_17).
- tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key() (networking-stable-20_07_17).
- tcp: md5: do not send silly options in SYNCOOKIES (networking-stable-20_07_17).
- tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers (networking-stable-20_07_17).
- tracepoint: Mark __tracepoint_string's __used (git-fixes).
- tracing: Use trace_sched_process_free() instead of exit() for pid tracing (git-fixes).
- tty: hvc_console, fix crashes on parallel open/close (git-fixes).
- tty: serial: fsl_lpuart: add imx8qxp support (bsc#1175670).
- tty: serial: fsl_lpuart: free IDs allocated by IDA (bsc#1175670).
- USB: cdc-acm: rework notification_buffer resizing (git-fixes).
- USB: gadget: f_tcm: Fix some resource leaks in some error paths (git-fixes).
- USB: host: ohci-exynos: Fix error handling in exynos_ohci_probe() (git-fixes).
- USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge (git-fixes).
- USB: iowarrior: fix up report size handling for some devices (git-fixes).
- usbip: tools: fix module name in man page (git-fixes).
- USB: rename USB quirk to USB_QUIRK_ENDPOINT_IGNORE (git-fixes).
- USB: serial: cp210x: enable usb generic throttle/unthrottle (git-fixes).
- USB: serial: cp210x: re-enable auto-RTS on open (git-fixes).
- USB: serial: ftdi_sio: clean up receive processing (git-fixes).
- USB: serial: ftdi_sio: fix break and sysrq handling (git-fixes).
- USB: serial: ftdi_sio: make process-packet buffer unsigned (git-fixes).
- USB: serial: iuu_phoenix: fix led-activity helpers (git-fixes).
- USB: serial: qcserial: add EM7305 QDL product ID (git-fixes).
- USB: xhci: define IDs for various ASMedia host controllers (git-fixes).
- USB: xhci: Fix ASM2142/ASM3142 DMA addressing (git-fixes).
- USB: xhci: Fix ASMedia ASM1142 DMA addressing (git-fixes).
- USB: xhci-mtk: fix the failure of bandwidth allocation (git-fixes).
- VFS: Check rename_lock in lookup_fast() (bsc#1174734).
- video: fbdev: sm712fb: fix an issue about iounmap for a wrong address (git-fixes).
- video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call (git-fixes).
- virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial (git-fixes).
- vlan: consolidate VLAN parsing code and limit max parsing depth (networking-stable-20_07_17).
- vmxnet3: use correct tcp hdr length when packet is encapsulated (bsc#1175199).
- vt_compat_ioctl(): clean up, use compat_ptr() properly (git-fixes).
- vt: vt_ioctl: remove unnecessary console allocation checks (git-fixes).
- vxlan: Ensure FDB dump is performed under RCU (git-fixes).
- watchdog: f71808e_wdt: clear watchdog timeout occurred flag (bsc#1111666).
- watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options (bsc#1111666).
- watchdog: f71808e_wdt: remove use of wrong watchdog_info option (bsc#1111666).
- wl1251: fix always return 0 error (git-fixes).
- x86/hyperv: Create and use Hyper-V page definitions (git-fixes).
- x86/hyper-v: Fix overflow bug in fill_gva_list() (git-fixes).
- x86/hyperv: Make hv_vcpu_is_preempted() visible (git-fixes).
- x86/mce/inject: Fix a wrong assignment of i_mce.status (bsc#1112178).
- x86/unwind/orc: Fix ORC for newly forked tasks (bsc#1058115).
- xen/balloon: fix accounting in alloc_xenballooned_pages error path (bsc#1065600).
- xen/balloon: make the balloon wait interruptible (bsc#1065600).
- xfrm: check id proto in validate_tmpl() (git-fixes).
- xfrm: clean up xfrm protocol checks (git-fixes).
- xfrm_user: uncoditionally validate esn replay attribute struct (git-fixes).
- xfs: fix inode allocation block res calculation precedence (git-fixes).
- xfs: fix reflink quota reservation accounting error (git-fixes).
- xhci: Fix enumeration issue when setting max packet size for FS devices (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-09"/>
	<updated date="2020-09-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083548">SUSE bug 1083548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120163">SUSE bug 1120163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136666">SUSE bug 1136666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152148">SUSE bug 1152148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163524">SUSE bug 1163524</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165629">SUSE bug 1165629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166965">SUSE bug 1166965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169790">SUSE bug 1169790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170232">SUSE bug 1170232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171688">SUSE bug 1171688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171988">SUSE bug 1171988</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172108">SUSE bug 1172108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172247">SUSE bug 1172247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172418">SUSE bug 1172418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172428">SUSE bug 1172428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172871">SUSE bug 1172871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172872">SUSE bug 1172872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172873">SUSE bug 1172873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172963">SUSE bug 1172963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173060">SUSE bug 1173060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173485">SUSE bug 1173485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173798">SUSE bug 1173798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173954">SUSE bug 1173954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174003">SUSE bug 1174003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174026">SUSE bug 1174026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174070">SUSE bug 1174070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174205">SUSE bug 1174205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174387">SUSE bug 1174387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174484">SUSE bug 1174484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174547">SUSE bug 1174547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174549">SUSE bug 1174549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174550">SUSE bug 1174550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174625">SUSE bug 1174625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174658">SUSE bug 1174658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174685">SUSE bug 1174685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174689">SUSE bug 1174689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174699">SUSE bug 1174699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174734">SUSE bug 1174734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174757">SUSE bug 1174757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174771">SUSE bug 1174771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174840">SUSE bug 1174840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174841">SUSE bug 1174841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174843">SUSE bug 1174843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174844">SUSE bug 1174844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174845">SUSE bug 1174845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174852">SUSE bug 1174852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174873">SUSE bug 1174873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174904">SUSE bug 1174904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174926">SUSE bug 1174926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174968">SUSE bug 1174968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175062">SUSE bug 1175062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175063">SUSE bug 1175063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175064">SUSE bug 1175064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175065">SUSE bug 1175065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175066">SUSE bug 1175066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175067">SUSE bug 1175067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175112">SUSE bug 1175112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175127">SUSE bug 1175127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175128">SUSE bug 1175128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175149">SUSE bug 1175149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175199">SUSE bug 1175199</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175213">SUSE bug 1175213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175228">SUSE bug 1175228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175232">SUSE bug 1175232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175284">SUSE bug 1175284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175393">SUSE bug 1175393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175394">SUSE bug 1175394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175396">SUSE bug 1175396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175397">SUSE bug 1175397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175398">SUSE bug 1175398</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175399">SUSE bug 1175399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175400">SUSE bug 1175400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175401">SUSE bug 1175401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175402">SUSE bug 1175402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175403">SUSE bug 1175403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175404">SUSE bug 1175404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175405">SUSE bug 1175405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175406">SUSE bug 1175406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175407">SUSE bug 1175407</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175408">SUSE bug 1175408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175409">SUSE bug 1175409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175410">SUSE bug 1175410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175411">SUSE bug 1175411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175412">SUSE bug 1175412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175413">SUSE bug 1175413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175414">SUSE bug 1175414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175415">SUSE bug 1175415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175416">SUSE bug 1175416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175417">SUSE bug 1175417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175418">SUSE bug 1175418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175419">SUSE bug 1175419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175420">SUSE bug 1175420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175421">SUSE bug 1175421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175422">SUSE bug 1175422</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175423">SUSE bug 1175423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175440">SUSE bug 1175440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175493">SUSE bug 1175493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175515">SUSE bug 1175515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175518">SUSE bug 1175518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175526">SUSE bug 1175526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175550">SUSE bug 1175550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175654">SUSE bug 1175654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175666">SUSE bug 1175666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175667">SUSE bug 1175667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175668">SUSE bug 1175668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175669">SUSE bug 1175669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175670">SUSE bug 1175670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175691">SUSE bug 1175691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175767">SUSE bug 1175767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175768">SUSE bug 1175768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175769">SUSE bug 1175769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175770">SUSE bug 1175770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175771">SUSE bug 1175771</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175772">SUSE bug 1175772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175786">SUSE bug 1175786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175873">SUSE bug 1175873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176069">SUSE bug 1176069</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-10135/">CVE-2020-10135</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14314/">CVE-2020-14314</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14331/">CVE-2020-14331</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14356/">CVE-2020-14356</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14386/">CVE-2020-14386</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16166/">CVE-2020-16166</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-1749/">CVE-2020-1749</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24394/">CVE-2020-24394</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501595" comment="cluster-md-kmp-default-4.12.14-197.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501596" comment="dlm-kmp-default-4.12.14-197.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501597" comment="gfs2-kmp-default-4.12.14-197.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501598" comment="ocfs2-kmp-default-4.12.14-197.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139122" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-actionpack-5_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1172177" ref_url="https://bugzilla.suse.com/1172177" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8164" ref_url="https://www.suse.com/security/cve/CVE-2020-8164/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2710-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007453.html" source="SUSE-SU"/>
		<description>
This update for rubygem-actionpack-5_1 fixes the following issues:

- CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack.
  There is a strong parameters bypass vector in ActionPack.
  (bsc#1172177)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-22"/>
	<updated date="2020-09-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172177">SUSE bug 1172177</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8164/">CVE-2020-8164</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501487" comment="ruby2.5-rubygem-actionpack-5_1-5.1.4-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139123" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1176579" ref_url="https://bugzilla.suse.com/1176579" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-1472" ref_url="https://www.suse.com/security/cve/CVE-2020-1472/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-September/007465.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

 - ZeroLogon: An elevation of privilege was possible with some non default configurations when an attacker established
 a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC) 
 (CVE-2020-1472, bsc#1176579).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-09-23"/>
	<updated date="2020-09-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176579">SUSE bug 1176579</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1472/">CVE-2020-1472</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501599" comment="ctdb-4.9.5+git.373.26895a83dbf-3.44.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139124" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-activesupport-5_1 (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1172186" ref_url="https://bugzilla.suse.com/1172186" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8165" ref_url="https://www.suse.com/security/cve/CVE-2020-8165/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007539.html" source="SUSE-SU"/>
		<description>
This update for rubygem-activesupport-5_1 fixes the following issues:

- CVE-2020-8165: Fixed deserialization of untrusted data in MemCacheStore potentially resulting in remote code execution (bsc#1172186)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-13"/>
	<updated date="2020-10-13"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1172186">SUSE bug 1172186</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8165/">CVE-2020-8165</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501489" comment="ruby2.5-rubygem-activesupport-5_1-5.1.4-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139125" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1055186" ref_url="https://bugzilla.suse.com/1055186" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1094244" ref_url="https://bugzilla.suse.com/1094244" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1154366" ref_url="https://bugzilla.suse.com/1154366" source="BUGZILLA"/>
		<reference ref_id="1167527" ref_url="https://bugzilla.suse.com/1167527" source="BUGZILLA"/>
		<reference ref_id="1168468" ref_url="https://bugzilla.suse.com/1168468" source="BUGZILLA"/>
		<reference ref_id="1169972" ref_url="https://bugzilla.suse.com/1169972" source="BUGZILLA"/>
		<reference ref_id="1171675" ref_url="https://bugzilla.suse.com/1171675" source="BUGZILLA"/>
		<reference ref_id="1171688" ref_url="https://bugzilla.suse.com/1171688" source="BUGZILLA"/>
		<reference ref_id="1171742" ref_url="https://bugzilla.suse.com/1171742" source="BUGZILLA"/>
		<reference ref_id="1173115" ref_url="https://bugzilla.suse.com/1173115" source="BUGZILLA"/>
		<reference ref_id="1174899" ref_url="https://bugzilla.suse.com/1174899" source="BUGZILLA"/>
		<reference ref_id="1175228" ref_url="https://bugzilla.suse.com/1175228" source="BUGZILLA"/>
		<reference ref_id="1175749" ref_url="https://bugzilla.suse.com/1175749" source="BUGZILLA"/>
		<reference ref_id="1175882" ref_url="https://bugzilla.suse.com/1175882" source="BUGZILLA"/>
		<reference ref_id="1176011" ref_url="https://bugzilla.suse.com/1176011" source="BUGZILLA"/>
		<reference ref_id="1176022" ref_url="https://bugzilla.suse.com/1176022" source="BUGZILLA"/>
		<reference ref_id="1176038" ref_url="https://bugzilla.suse.com/1176038" source="BUGZILLA"/>
		<reference ref_id="1176235" ref_url="https://bugzilla.suse.com/1176235" source="BUGZILLA"/>
		<reference ref_id="1176242" ref_url="https://bugzilla.suse.com/1176242" source="BUGZILLA"/>
		<reference ref_id="1176278" ref_url="https://bugzilla.suse.com/1176278" source="BUGZILLA"/>
		<reference ref_id="1176316" ref_url="https://bugzilla.suse.com/1176316" source="BUGZILLA"/>
		<reference ref_id="1176317" ref_url="https://bugzilla.suse.com/1176317" source="BUGZILLA"/>
		<reference ref_id="1176318" ref_url="https://bugzilla.suse.com/1176318" source="BUGZILLA"/>
		<reference ref_id="1176319" ref_url="https://bugzilla.suse.com/1176319" source="BUGZILLA"/>
		<reference ref_id="1176320" ref_url="https://bugzilla.suse.com/1176320" source="BUGZILLA"/>
		<reference ref_id="1176321" ref_url="https://bugzilla.suse.com/1176321" source="BUGZILLA"/>
		<reference ref_id="1176381" ref_url="https://bugzilla.suse.com/1176381" source="BUGZILLA"/>
		<reference ref_id="1176395" ref_url="https://bugzilla.suse.com/1176395" source="BUGZILLA"/>
		<reference ref_id="1176410" ref_url="https://bugzilla.suse.com/1176410" source="BUGZILLA"/>
		<reference ref_id="1176423" ref_url="https://bugzilla.suse.com/1176423" source="BUGZILLA"/>
		<reference ref_id="1176482" ref_url="https://bugzilla.suse.com/1176482" source="BUGZILLA"/>
		<reference ref_id="1176507" ref_url="https://bugzilla.suse.com/1176507" source="BUGZILLA"/>
		<reference ref_id="1176536" ref_url="https://bugzilla.suse.com/1176536" source="BUGZILLA"/>
		<reference ref_id="1176544" ref_url="https://bugzilla.suse.com/1176544" source="BUGZILLA"/>
		<reference ref_id="1176545" ref_url="https://bugzilla.suse.com/1176545" source="BUGZILLA"/>
		<reference ref_id="1176546" ref_url="https://bugzilla.suse.com/1176546" source="BUGZILLA"/>
		<reference ref_id="1176548" ref_url="https://bugzilla.suse.com/1176548" source="BUGZILLA"/>
		<reference ref_id="1176659" ref_url="https://bugzilla.suse.com/1176659" source="BUGZILLA"/>
		<reference ref_id="1176698" ref_url="https://bugzilla.suse.com/1176698" source="BUGZILLA"/>
		<reference ref_id="1176699" ref_url="https://bugzilla.suse.com/1176699" source="BUGZILLA"/>
		<reference ref_id="1176700" ref_url="https://bugzilla.suse.com/1176700" source="BUGZILLA"/>
		<reference ref_id="1176721" ref_url="https://bugzilla.suse.com/1176721" source="BUGZILLA"/>
		<reference ref_id="1176722" ref_url="https://bugzilla.suse.com/1176722" source="BUGZILLA"/>
		<reference ref_id="1176725" ref_url="https://bugzilla.suse.com/1176725" source="BUGZILLA"/>
		<reference ref_id="1176732" ref_url="https://bugzilla.suse.com/1176732" source="BUGZILLA"/>
		<reference ref_id="1176788" ref_url="https://bugzilla.suse.com/1176788" source="BUGZILLA"/>
		<reference ref_id="1176789" ref_url="https://bugzilla.suse.com/1176789" source="BUGZILLA"/>
		<reference ref_id="1176869" ref_url="https://bugzilla.suse.com/1176869" source="BUGZILLA"/>
		<reference ref_id="1176877" ref_url="https://bugzilla.suse.com/1176877" source="BUGZILLA"/>
		<reference ref_id="1176935" ref_url="https://bugzilla.suse.com/1176935" source="BUGZILLA"/>
		<reference ref_id="1176950" ref_url="https://bugzilla.suse.com/1176950" source="BUGZILLA"/>
		<reference ref_id="1176962" ref_url="https://bugzilla.suse.com/1176962" source="BUGZILLA"/>
		<reference ref_id="1176966" ref_url="https://bugzilla.suse.com/1176966" source="BUGZILLA"/>
		<reference ref_id="1176990" ref_url="https://bugzilla.suse.com/1176990" source="BUGZILLA"/>
		<reference ref_id="1177027" ref_url="https://bugzilla.suse.com/1177027" source="BUGZILLA"/>
		<reference ref_id="1177030" ref_url="https://bugzilla.suse.com/1177030" source="BUGZILLA"/>
		<reference ref_id="1177041" ref_url="https://bugzilla.suse.com/1177041" source="BUGZILLA"/>
		<reference ref_id="1177042" ref_url="https://bugzilla.suse.com/1177042" source="BUGZILLA"/>
		<reference ref_id="1177043" ref_url="https://bugzilla.suse.com/1177043" source="BUGZILLA"/>
		<reference ref_id="1177044" ref_url="https://bugzilla.suse.com/1177044" source="BUGZILLA"/>
		<reference ref_id="1177121" ref_url="https://bugzilla.suse.com/1177121" source="BUGZILLA"/>
		<reference ref_id="1177206" ref_url="https://bugzilla.suse.com/1177206" source="BUGZILLA"/>
		<reference ref_id="1177258" ref_url="https://bugzilla.suse.com/1177258" source="BUGZILLA"/>
		<reference ref_id="1177291" ref_url="https://bugzilla.suse.com/1177291" source="BUGZILLA"/>
		<reference ref_id="1177293" ref_url="https://bugzilla.suse.com/1177293" source="BUGZILLA"/>
		<reference ref_id="1177294" ref_url="https://bugzilla.suse.com/1177294" source="BUGZILLA"/>
		<reference ref_id="1177295" ref_url="https://bugzilla.suse.com/1177295" source="BUGZILLA"/>
		<reference ref_id="1177296" ref_url="https://bugzilla.suse.com/1177296" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0404" ref_url="https://www.suse.com/security/cve/CVE-2020-0404/" source="CVE"/>
		<reference ref_id="CVE-2020-0427" ref_url="https://www.suse.com/security/cve/CVE-2020-0427/" source="CVE"/>
		<reference ref_id="CVE-2020-0431" ref_url="https://www.suse.com/security/cve/CVE-2020-0431/" source="CVE"/>
		<reference ref_id="CVE-2020-0432" ref_url="https://www.suse.com/security/cve/CVE-2020-0432/" source="CVE"/>
		<reference ref_id="CVE-2020-14381" ref_url="https://www.suse.com/security/cve/CVE-2020-14381/" source="CVE"/>
		<reference ref_id="CVE-2020-14390" ref_url="https://www.suse.com/security/cve/CVE-2020-14390/" source="CVE"/>
		<reference ref_id="CVE-2020-25212" ref_url="https://www.suse.com/security/cve/CVE-2020-25212/" source="CVE"/>
		<reference ref_id="CVE-2020-25284" ref_url="https://www.suse.com/security/cve/CVE-2020-25284/" source="CVE"/>
		<reference ref_id="CVE-2020-25641" ref_url="https://www.suse.com/security/cve/CVE-2020-25641/" source="CVE"/>
		<reference ref_id="CVE-2020-25643" ref_url="https://www.suse.com/security/cve/CVE-2020-25643/" source="CVE"/>
		<reference ref_id="CVE-2020-26088" ref_url="https://www.suse.com/security/cve/CVE-2020-26088/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2905-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007545.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-26088: Fixed an improper CAP_NET_RAW check in NFC socket creation could have been used by local attackers to create raw sockets, bypassing security mechanisms (bsc#1176990).
- CVE-2020-14390: Fixed an out-of-bounds memory write leading to memory corruption or a denial of service when changing screen size (bnc#1176235).
- CVE-2020-0432: Fixed an out of bounds write due to an integer overflow (bsc#1176721).
- CVE-2020-0427: Fixed an out of bounds read due to a use after free (bsc#1176725).
- CVE-2020-0431: Fixed an out of bounds write due to a missing bounds check (bsc#1176722).
- CVE-2020-0404: Fixed a linked list corruption due to an unusual root cause (bsc#1176423).
- CVE-2020-25212: Fixed getxattr kernel panic and memory overflow (bsc#1176381).
- CVE-2020-25284: Fixed an incomplete permission checking for access to rbd devices, which could have been leveraged by local attackers to map or unmap rbd block devices (bsc#1176482).
- CVE-2020-14381: Fixed requeue paths such that filp was valid when dropping the references (bsc#1176011).
- CVE-2019-25643: Fixed an improper input validation in ppp_cp_parse_cr function which could have led to memory corruption and read overflow (bsc#1177206).
- CVE-2020-25641: Fixed ann issue where length bvec was causing softlockups (bsc#1177121).

The following non-security bugs were fixed:

- 9p: Fix memory leak in v9fs_mount (git-fixes).
- ACPI: EC: Reference count query handlers under lock (git-fixes).
- airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE (git-fixes).
- airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE (git-fixes).
- airo: Fix read overflows sending packets (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- ALSA: firewire-digi00x: exclude Avid Adrenaline from detection (git-fixes).
- ALSA; firewire-tascam: exclude Tascam FE-8 from detection (git-fixes).
- ALSA: hda: Fix 2 channel swapping for Tegra (git-fixes).
- ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled (git-fixes).
- ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion NT950XCJ-X716A (git-fixes).
- ALSA: hda/realtek - Improved routing for Thinkpad X1 7th/8th Gen (git-fixes).
- altera-stapl: altera_get_note: prevent write beyond end of 'key' (git-fixes).
- ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter (git-fixes).
- arm64: KVM: Do not generate UNDEF when LORegion feature is present (jsc#SLE-4084).
- arm64: KVM: regmap: Fix unexpected switch fall-through (jsc#SLE-4084).
- asm-generic: fix -Wtype-limits compiler warnings (bsc#1112178).
- ASoC: kirkwood: fix IRQ error handling (git-fixes).
- ASoC: tegra: Fix reference count leaks (git-fixes).
- ath10k: fix array out-of-bounds access (git-fixes).
- ath10k: fix memory leak for tpc_stats_final (git-fixes).
- ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read (git-fixes).
- batman-adv: Add missing include for in_interrupt() (git-fixes).
- batman-adv: Avoid uninitialized chaddr when handling DHCP (git-fixes).
- batman-adv: bla: fix type misuse for backbone_gw hash indexing (git-fixes).
- batman-adv: bla: use netif_rx_ni when not in interrupt context (git-fixes).
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh (git-fixes).
- batman-adv: mcast/TT: fix wrongly dropped or rerouted packets (git-fixes).
- bcache: Convert pr_&lt;level&gt; uses to a more typical style (git fixes (block drivers)).
- bcache: fix overflow in offset_to_stripe() (git fixes (block drivers)).
- bcm63xx_enet: correct clock usage (git-fixes).
- bcm63xx_enet: do not write to random DMA channel on BCM6345 (git-fixes).
- bitfield.h: do not compile-time validate _val in FIELD_FIT (git fixes (bitfield)).
- blktrace: fix debugfs use after free (git fixes (block drivers)).
- block: add docs for gendisk / request_queue refcount helpers (git fixes (block drivers)).
- block: revert back to synchronous request_queue removal (git fixes (block drivers)).
- block: Use non _rcu version of list functions for tag_set_list (git-fixes).
- Bluetooth: Fix refcount use-after-free issue (git-fixes).
- Bluetooth: guard against controllers sending zero'd events (git-fixes).
- Bluetooth: Handle Inquiry Cancel error after Inquiry Complete (git-fixes).
- Bluetooth: L2CAP: handle l2cap config request during open state (git-fixes).
- Bluetooth: prefetch channel before killing sock (git-fixes).
- bnxt_en: Fix completion ring sizing with TPA enabled (networking-stable-20_07_29).
- bonding: use nla_get_u64 to extract the value for IFLA_BOND_AD_ACTOR_SYSTEM (git-fixes).
- btrfs: require only sector size alignment for parent eb bytenr (bsc#1176789).
- btrfs: tree-checker: fix the error message for transid error (bsc#1176788).
- ceph: do not allow setlease on cephfs (bsc#1177041).
- ceph: fix potential mdsc use-after-free crash (bsc#1177042).
- ceph: fix use-after-free for fsc-&gt;mdsc (bsc#1177043).
- ceph: handle zero-length feature mask in session messages (bsc#1177044).
- cfg80211: regulatory: reject invalid hints (bsc#1176699).
- cifs: Fix leak when handling lease break for cached root fid (bsc#1176242).
- cifs/smb3: Fix data inconsistent when punch hole (bsc#1176544).
- cifs/smb3: Fix data inconsistent when zero file range (bsc#1176536).
- clk: Add (devm_)clk_get_optional() functions (git-fixes).
- clk: rockchip: Fix initialization of mux_pll_src_4plls_p (git-fixes).
- clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED (git-fixes).
- clk/ti/adpll: allocate room for terminating null (git-fixes).
- clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() (git-fixes).
- cpufreq: intel_pstate: Fix EPP setting via sysfs in active mode (bsc#1176966).
- dmaengine: at_hdmac: check return value of of_find_device_by_node() in at_dma_xlate() (git-fixes).
- dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling (git-fixes).
- dmaengine: pl330: Fix burst length if burst size is smaller than bus width (git-fixes).
- dmaengine: tegra-apb: Prevent race conditions on channel's freeing (git-fixes).
- dmaengine: zynqmp_dma: fix burst length configuration (git-fixes).
- dm crypt: avoid truncating the logical block size (git fixes (block drivers)).
- dm: fix redundant IO accounting for bios that need splitting (git fixes (block drivers)).
- dm integrity: fix a deadlock due to offloading to an incorrect workqueue (git fixes (block drivers)).
- dm integrity: fix integrity recalculation that is improperly skipped (git fixes (block drivers)).
- dm: report suspended device during destroy (git fixes (block drivers)).
- dm rq: do not call blk_mq_queue_stopped() in dm_stop_queue() (git fixes (block drivers)).
- dm: use noio when sending kobject event (git fixes (block drivers)).
- dm writecache: add cond_resched to loop in persistent_memory_claim() (git fixes (block drivers)).
- dm writecache: correct uncommitted_block when discarding uncommitted entry (git fixes (block drivers)).
- dm zoned: assign max_io_len correctly (git fixes (block drivers)).
- drivers: char: tlclk.c: Avoid data race between init and interrupt handler (git-fixes).
- Drivers: hv: Specify receive buffer size using Hyper-V page size (bsc#1176877).
- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload (git-fixes).
- drivers/net/wan/x25_asy: Fix to make it work (networking-stable-20_07_29).
- drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic (git-fixes).
- drm/amd/display: fix ref count leak in amdgpu_drm_ioctl (git-fixes).
- drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails (git-fixes).
- drm/amdgpu: Fix buffer overflow in INFO ioctl (git-fixes).
- drm/amdgpu: Fix bug in reporting voltage for CIK (git-fixes).
- drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms (git-fixes).
- drm/amdgpu: increase atombios cmd timeout (git-fixes).
- drm/amdgpu/powerplay: fix AVFS handling with custom powerplay table (git-fixes).
- drm/amdgpu/powerplay/smu7: fix AVFS handling with custom powerplay table (git-fixes).
- drm/amdkfd: fix a memory leak issue (git-fixes).
- drm/amdkfd: Fix reference count leaks (git-fixes).
- drm/amd/pm: correct Vega10 swctf limit setting (git-fixes).
- drm/amd/pm: correct Vega12 swctf limit setting (git-fixes).
- drm/ast: Initialize DRAM type before posting GPU (bsc#1113956) 	* context changes
- drm/mediatek: Add exception handing in mtk_drm_probe() if component init fail (git-fixes).
- drm/mediatek: Add missing put_device() call in mtk_hdmi_dt_parse_pdata() (git-fixes).
- drm/msm/a5xx: Always set an OPP supported hardware value (git-fixes).
- drm/msm: add shutdown support for display platform_driver (git-fixes).
- drm/msm: Disable preemption on all 5xx targets (git-fixes).
- drm/msm: fix leaks if initialization fails (git-fixes).
- drm/msm/gpu: make ringbuffer readonly (bsc#1112178) 	* context changes
- drm/nouveau/debugfs: fix runtime pm imbalance on error (git-fixes).
- drm/nouveau/dispnv50: fix runtime pm imbalance on error (git-fixes).
- drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open (git-fixes).
- drm/nouveau: Fix reference count leak in nouveau_connector_detect (git-fixes).
- drm/nouveau: fix reference count leak in nv50_disp_atomic_commit (git-fixes).
- drm/nouveau: fix runtime pm imbalance on error (git-fixes).
- drm/omap: fix possible object reference leak (git-fixes).
- drm/radeon: fix multiple reference count leak (git-fixes).
- drm/radeon: Prefer lower feedback dividers (git-fixes).
- drm/radeon: revert 'Prefer lower feedback dividers' (git-fixes).
- drm/sun4i: Fix dsi dcs long write function (git-fixes).
- drm/sun4i: sun8i-csc: Secondary CSC register correction (git-fixes).
- drm/tve200: Stabilize enable/disable (git-fixes).
- drm/vc4/vc4_hdmi: fill ASoC card owner (git-fixes).
- e1000: Do not perform reset in reset_task if we are already down (git-fixes).
- EDAC: Fix reference count leaks (bsc#1112178).
- fbcon: prevent user font height or width change from causing (bsc#1112178) 	
- Fix error in kabi fix for: NFSv4: Fix OPEN / CLOSE race (bsc#1176950).
- ftrace: Move RCU is watching check after recursion check (git-fixes).
- ftrace: Setup correct FTRACE_FL_REGS flags for module (git-fixes).
- gma/gma500: fix a memory disclosure bug due to uninitialized bytes (git-fixes).
- gpio: tc35894: fix up tc35894 interrupt configuration (git-fixes).
- gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable() (git-fixes).
- gtp: fix Illegal context switch in RCU read-side critical section (git-fixes).
- gtp: fix use-after-free in gtp_newlink() (git-fixes).
- Hide e21a4f3a930c as of its duplication
- HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage() (git-fixes).
- hsr: use netdev_err() instead of WARN_ONCE() (bsc#1176659).
- hv_utils: drain the timesync packets on onchannelcallback (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale (bsc#1176877).
- hwmon: (applesmc) check status earlier (git-fixes).
- i2c: core: Do not fail PRP0001 enumeration when no ID table exist (git-fixes).
- i2c: cpm: Fix i2c_ram structure (git-fixes).
- ibmvnic: add missing parenthesis in do_reset() (bsc#1176700 ltc#188140).
- ieee802154/adf7242: check status of adf7242_read_reg (git-fixes).
- ieee802154: fix one possible memleak in ca8210_dev_com_init (git-fixes).
- iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak (git-fixes).
- iio: accel: kxsd9: Fix alignment of local buffer (git-fixes).
- iio:accel:mma7455: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:adc:ina2xx Fix timestamp alignment issue (git-fixes).
- iio: adc: mcp3422: fix locking on error path (git-fixes).
- iio: adc: mcp3422: fix locking scope (git-fixes).
- iio:adc:ti-adc081c Fix alignment and data leak issues (git-fixes).
- iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set (git-fixes).
- iio: improve IIO_CONCENTRATION channel type description (git-fixes).
- iio:light:ltr501 Fix timestamp alignment issue (git-fixes).
- iio:light:max44000 Fix timestamp alignment and prevent data leak (git-fixes).
- iio:magnetometer:ak8975 Fix alignment and data leak issues (git-fixes).
- include: add additional sizes (bsc#1094244 ltc#168122).
- iommu/amd: Fix IOMMU AVIC not properly update the is_run bit in IRTE (bsc#1177293).
- iommu/amd: Fix potential @entry null deref (bsc#1177294).
- iommu/amd: Print extended features in one line to fix divergent log levels (bsc#1176316).
- iommu/amd: Re-factor guest virtual APIC (de-)activation code (bsc#1177291).
- iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (bsc#1176317).
- iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (bsc#1177295).
- iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (bsc#1176318).
- iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate() (bsc#1177296).
- iommu/omap: Check for failure of a call to omap_iommu_dump_ctx (bsc#1176319).
- iommu/vt-d: Serialize IOMMU GCMD register modifications (bsc#1176320).
- kernel-syms.spec.in: Also use bz compression (boo#1175882).
- KVM: arm64: Change 32-bit handling of VM system registers (jsc#SLE-4084).
- KVM: arm64: Cleanup __activate_traps and __deactive_traps for VHE and non-VHE (jsc#SLE-4084).
- KVM: arm64: Configure c15, PMU, and debug register traps on cpu load/put for VHE (jsc#SLE-4084).
- KVM: arm64: Defer saving/restoring 32-bit sysregs to vcpu load/put (jsc#SLE-4084).
- KVM: arm64: Defer saving/restoring 64-bit sysregs to vcpu load/put on VHE (jsc#SLE-4084).
- KVM: arm64: Directly call VHE and non-VHE FPSIMD enabled functions (jsc#SLE-4084).
- KVM: arm64: Do not deactivate VM on VHE systems (jsc#SLE-4084).
- KVM: arm64: Do not save the host ELR_EL2 and SPSR_EL2 on VHE systems (jsc#SLE-4084).
- KVM: arm64: Factor out fault info population and gic workarounds (jsc#SLE-4084).
- KVM: arm64: Fix order of vcpu_write_sys_reg() arguments (jsc#SLE-4084).
- KVM: arm64: Forbid kprobing of the VHE world-switch code (jsc#SLE-4084).
- KVM: arm64: Improve debug register save/restore flow (jsc#SLE-4084).
- KVM: arm64: Introduce framework for accessing deferred sysregs (jsc#SLE-4084).
- KVM: arm64: Introduce separate VHE/non-VHE sysreg save/restore functions (jsc#SLE-4084).
- KVM: arm64: Introduce VHE-specific kvm_vcpu_run (jsc#SLE-4084).
- KVM: arm64: Move common VHE/non-VHE trap config in separate functions (jsc#SLE-4084).
- KVM: arm64: Move debug dirty flag calculation out of world switch (jsc#SLE-4084).
- KVM: arm64: Move HCR_INT_OVERRIDE to default HCR_EL2 guest flag (jsc#SLE-4084).
- KVM: arm64: Move userspace system registers into separate function (jsc#SLE-4084).
- KVM: arm64: Prepare to handle deferred save/restore of 32-bit registers (jsc#SLE-4084).
- KVM: arm64: Prepare to handle deferred save/restore of ELR_EL1 (jsc#SLE-4084).
- KVM: arm64: Remove kern_hyp_va() use in VHE switch function (jsc#SLE-4084).
- KVM: arm64: Remove noop calls to timer save/restore from VHE switch (jsc#SLE-4084).
- KVM: arm64: Rework hyp_panic for VHE and non-VHE (jsc#SLE-4084).
- KVM: arm64: Rewrite sysreg alternatives to static keys (jsc#SLE-4084).
- KVM: arm64: Rewrite system register accessors to read/write functions (jsc#SLE-4084).
- KVM: arm64: Slightly improve debug save/restore functions (jsc#SLE-4084).
- KVM: arm64: Unify non-VHE host/guest sysreg save and restore functions (jsc#SLE-4084).
- KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE (jsc#SLE-4084).
- KVM: arm/arm64: Avoid vcpu_load for other vcpu ioctls than KVM_RUN (jsc#SLE-4084).
- KVM: arm/arm64: Avoid VGICv3 save/restore on VHE with no IRQs (jsc#SLE-4084).
- KVM: arm/arm64: Get rid of vcpu-&gt;arch.irq_lines (jsc#SLE-4084).
- KVM: arm/arm64: Handle VGICv3 save/restore from the main VGIC code on VHE (jsc#SLE-4084).
- KVM: arm/arm64: Move vcpu_load call after kvm_vcpu_first_run_init (jsc#SLE-4084).
- KVM: arm/arm64: Move VGIC APR save/restore to vgic put/load (jsc#SLE-4084).
- KVM: arm/arm64: Prepare to handle deferred save/restore of SPSR_EL1 (jsc#SLE-4084).
- KVM: arm/arm64: Remove leftover comment from kvm_vcpu_run_vhe (jsc#SLE-4084).
- KVM: introduce kvm_arch_vcpu_async_ioctl (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_fpu (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_mpstate (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_get_regs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_run (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_fpu (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_guest_debug (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_mpstate (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_regs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_set_sregs (jsc#SLE-4084).
- KVM: Move vcpu_load to arch-specific kvm_arch_vcpu_ioctl_translate (jsc#SLE-4084).
- KVM: PPC: Fix compile error that occurs when CONFIG_ALTIVEC=n (jsc#SLE-4084).
- KVM: Prepare for moving vcpu_load/vcpu_put into arch specific code (jsc#SLE-4084).
- KVM: SVM: Add a dedicated INVD intercept routine (bsc#1112178).
- KVM: SVM: Fix disable pause loop exit/pause filtering capability on SVM (bsc#1176321).
- KVM: SVM: fix svn_pin_memory()'s use of get_user_pages_fast() (bsc#1112178).
- KVM: Take vcpu-&gt;mutex outside vcpu_load (jsc#SLE-4084).
- libceph: allow setting abort_on_full for rbd (bsc#1169972).
- libnvdimm: cover up nvdimm_security_ops changes (bsc#1171742).
- libnvdimm: cover up struct nvdimm changes (bsc#1171742).
- libnvdimm/security, acpi/nfit: unify zero-key for all security commands (bsc#1171742).
- libnvdimm/security: fix a typo (bsc#1171742 bsc#1167527).
- libnvdimm/security: Introduce a 'frozen' attribute (bsc#1171742).
- lib/raid6: use vdupq_n_u8 to avoid endianness warnings (git fixes (block drivers)).
- mac802154: tx: fix use-after-free (git-fixes).
- md: raid0/linear: fix dereference before null check on pointer mddev (git fixes (block drivers)).
- media: davinci: vpif_capture: fix potential double free (git-fixes).
- media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq() (git-fixes).
- media: smiapp: Fix error handling at NVM reading (git-fixes).
- media: ti-vpe: cal: Restrict DMA to avoid memory corruption (git-fixes).
- mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs (git-fixes).
- mfd: mfd-core: Protect against NULL call-back function pointer (git-fixes).
- mm: Avoid calling build_all_zonelists_init under hotplug context (bsc#1154366).
- mmc: cqhci: Add cqhci_deactivate() (git-fixes).
- mmc: sdhci-msm: Add retries when all tuning phases are found valid (git-fixes).
- mmc: sdhci-pci: Fix SDHCI_RESET_ALL for CQHCI for Intel GLK-based controllers (git-fixes).
- mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS models (git-fixes).
- mm/page_alloc.c: fix a crash in free_pages_prepare() (git fixes (mm/pgalloc)).
- mm/vmalloc.c: move 'area-&gt;pages' after if statement (git fixes (mm/vmalloc)).
- mtd: cfi_cmdset_0002: do not free cfi-&gt;cfiq in error path of cfi_amdstd_setup() (git-fixes).
- mtd: lpddr: Fix a double free in probe() (git-fixes).
- mtd: phram: fix a double free issue in error path (git-fixes).
- mtd: properly check all write ioctls for permissions (git-fixes).
- net: dsa: b53: Fix sparse warnings in b53_mmap.c (git-fixes).
- net: dsa: b53: Use strlcpy() for ethtool::get_strings (git-fixes).
- net: dsa: mv88e6xxx: fix 6085 frame mode masking (git-fixes).
- net: dsa: mv88e6xxx: Fix interrupt masking on removal (git-fixes).
- net: dsa: mv88e6xxx: Fix name of switch 88E6141 (git-fixes).
- net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge() (git-fixes).
- net: dsa: mv88e6xxx: Unregister MDIO bus on error path (git-fixes).
- net: dsa: qca8k: Allow overwriting CPU port setting (git-fixes).
- net: dsa: qca8k: Enable RXMAC when bringing up a port (git-fixes).
- net: dsa: qca8k: Force CPU port to its highest bandwidth (git-fixes).
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (git-fixes).
- net: fs_enet: do not call phy_stop() in interrupts (git-fixes).
- net: initialize fastreuse on inet_inherit_port (networking-stable-20_08_15).
- net: lan78xx: Bail out if lan78xx_get_endpoints fails (git-fixes).
- net: lan78xx: replace bogus endpoint lookup (networking-stable-20_08_08).
- net: lio_core: fix potential sign-extension overflow on large shift (git-fixes).
- net/mlx5: Add meaningful return codes to status_to_err function (git-fixes).
- net/mlx5: E-Switch, Use correct flags when configuring vlan (git-fixes).
- net/mlx5e: XDP, Avoid checksum complete when XDP prog is loaded (git-fixes).
- net: mvneta: fix mtu change on port without link (git-fixes).
- net-next: ax88796: Do not free IRQ in ax_remove() (already freed in ax_close()) (git-fixes).
- net/nfc/rawsock.c: add CAP_NET_RAW check (networking-stable-20_08_15).
- net: qca_spi: Avoid packet drop during initial sync (git-fixes).
- net: qca_spi: Make sure the QCA7000 reset is triggered (git-fixes).
- net: refactor bind_bucket fastreuse into helper (networking-stable-20_08_15).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: fix restoring of fallback changes (git-fixes).
- net/smc: fix sock refcounting in case of termination (git-fixes).
- net/smc: improve close of terminated socket (git-fixes).
- net/smc: Prevent kernel-infoleak in __smc_diag_dump() (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: tolerate future SMCD versions (git-fixes).
- net: stmmac: call correct function in stmmac_mac_config_rx_queues_routing() (git-fixes).
- net: stmmac: Disable ACS Feature for GMAC &gt;= 4 (git-fixes).
- net: stmmac: do not stop NAPI processing when dropping a packet (git-fixes).
- net: stmmac: dwmac4: fix flow control issue (git-fixes).
- net: stmmac: dwmac_lib: fix interchanged sleep/timeout values in DMA reset function (git-fixes).
- net: stmmac: dwmac-meson8b: Add missing boundary to RGMII TX clock array (git-fixes).
- net: stmmac: dwmac-meson8b: fix internal RGMII clock configuration (git-fixes).
- net: stmmac: dwmac-meson8b: fix setting the RGMII TX clock on Meson8b (git-fixes).
- net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on Meson8b/8m2 SoCs (git-fixes).
- net: stmmac: dwmac-meson8b: only configure the clocks in RGMII mode (git-fixes).
- net: stmmac: dwmac-meson8b: propagate rate changes to the parent clock (git-fixes).
- net: stmmac: Fix error handling path in 'alloc_dma_rx_desc_resources()' (git-fixes).
- net: stmmac: Fix error handling path in 'alloc_dma_tx_desc_resources()' (git-fixes).
- net: stmmac: rename dwmac4_tx_queue_routing() to match reality (git-fixes).
- net: stmmac: set MSS for each tx DMA channel (git-fixes).
- net: stmmac: Use correct values in TQS/RQS fields (git-fixes).
- net-sysfs: add a newline when printing 'tx_timeout' by sysfs (networking-stable-20_07_29).
- net: systemport: Fix software statistics for SYSTEMPORT Lite (git-fixes).
- net: systemport: Fix sparse warnings in bcm_sysport_insert_tsb() (git-fixes).
- net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE() (git-fixes).
- net: ucc_geth - fix Oops when changing number of buffers in the ring (git-fixes).
- NFSv4: do not mark all open state for recovery when handling recallable state revoked flag (bsc#1176935).
- nvme-fc: set max_segments to lldd max value (bsc#1176038).
- nvme-pci: override the value of the controller's numa node (bsc#1176507).
- ocfs2: give applications more IO opportunities during fstrim (bsc#1175228).
- omapfb: fix multiple reference count leaks due to pm_runtime_get_sync (git-fixes).
- PCI/ASPM: Allow re-enabling Clock PM (git-fixes).
- PCI: Fix pci_create_slot() reference count leak (git-fixes).
- PCI: qcom: Add missing ipq806x clocks in PCIe driver (git-fixes).
- PCI: qcom: Add missing reset for ipq806x (git-fixes).
- PCI: qcom: Add support for tx term offset for rev 2.1.0 (git-fixes).
- PCI: qcom: Define some PARF params needed for ipq8064 SoC (git-fixes).
- PCI: rcar: Fix incorrect programming of OB windows (git-fixes).
- phy: samsung: s5pv210-usb2: Add delay after reset (git-fixes).
- pinctrl: mvebu: Fix i2c sda definition for 98DX3236 (git-fixes).
- powerpc/64s: Blacklist functions invoked on a trap (bsc#1094244 ltc#168122).
- powerpc/64s: Fix HV NMI vs HV interrupt recoverability test (bsc#1094244 ltc#168122).
- powerpc/64s: Fix unrelocated interrupt trampoline address test (bsc#1094244 ltc#168122).
- powerpc/64s: Include &lt;asm/nmi.h&gt; header file to fix a warning (bsc#1094244 ltc#168122).
- powerpc/64s: machine check do not trace real-mode handler (bsc#1094244 ltc#168122).
- powerpc/64s: sreset panic if there is no debugger or crash dump handlers (bsc#1094244 ltc#168122).
- powerpc/64s: system reset interrupt preserve HSRRs (bsc#1094244 ltc#168122).
- powerpc: Add cputime_to_nsecs() (bsc#1065729).
- powerpc/book3s64/radix: Add kernel command line option to disable radix GTSE (bsc#1055186 ltc#153436).
- powerpc/book3s64/radix: Fix boot failure with large amount of guest memory (bsc#1176022 ltc#187208).
- powerpc: Implement ftrace_enabled() helpers (bsc#1094244 ltc#168122).
- powerpc/init: Do not advertise radix during client-architecture-support (bsc#1055186 ltc#153436 ).
- powerpc/kernel: Cleanup machine check function declarations (bsc#1065729).
- powerpc/kernel: Enables memory hot-remove after reboot on pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Enable radix GTSE only if supported (bsc#1055186 ltc#153436).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests only (bsc#1177030 ltc#187588).
- powerpc/mm: Move book3s64 specifics in subdirectory mm/book3s64 (bsc#1176022 ltc#187208).
- powerpc/powernv: Remove real mode access limit for early allocations (bsc#1176022 ltc#187208).
- powerpc/prom: Enable Radix GTSE in cpu pa-features (bsc#1055186 ltc#153436).
- powerpc/pseries/le: Work around a firmware quirk (bsc#1094244 ltc#168122).
- powerpc/pseries: lift RTAS limit for radix (bsc#1176022 ltc#187208).
- powerpc/pseries: Limit machine check stack to 4GB (bsc#1094244 ltc#168122).
- powerpc/pseries: Machine check use rtas_call_unlocked() with args on stack (bsc#1094244 ltc#168122).
- powerpc/pseries: radix is not subject to RMA limit, remove it (bsc#1176022 ltc#187208).
- powerpc/pseries/ras: Avoid calling rtas_token() in NMI paths (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: Fix FWNMI_VALID off by one (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: fwnmi avoid modifying r3 in error case (bsc#1094244 ltc#168122).
- powerpc/pseries/ras: fwnmi sreset should not interlock (bsc#1094244 ltc#168122).
- powerpc/traps: Do not trace system reset (bsc#1094244 ltc#168122).
- powerpc/traps: fix recoverability of machine check handling on book3s/32 (bsc#1094244 ltc#168122).
- powerpc/traps: Make unrecoverable NMIs die instead of panic (bsc#1094244 ltc#168122).
- powerpc/xmon: Use `dcbf` inplace of `dcbi` instruction for 64bit Book3S (bsc#1065729).
- power: supply: max17040: Correct voltage reading (git-fixes).
- rcu: Do RCU GP kthread self-wakeup from softirq and interrupt (git fixes (rcu)).
- regulator: push allocation in set_consumer_device_supply() out of lock (git-fixes).
- rpadlpar_io: Add MODULE_DESCRIPTION entries to kernel modules (bsc#1176869 ltc#188243).
- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- rpm/kernel-binary.spec.in: Also sign ppc64 kernels (jsc#SLE-15857 jsc#SLE-13618).
- rpm/kernel-cert-subpackage: add CA check on key enrollment (bsc#1173115) To avoid the unnecessary key enrollment, when enrolling the signing key of the kernel package, '--ca-check' is added to mokutil so that mokutil will ignore the request if the CA of the signing key already exists in MokList or UEFI db. Since the macro, %_suse_kernel_module_subpackage, is only defined in a kernel module package (KMP), it's used to determine whether the %post script is running in a kernel package, or a kernel module package.
- rpm/kernel-source.spec.in: Also use bz compression (boo#1175882).
- rpm/macros.kernel-source: pass -c proerly in kernel module package (bsc#1176698) The '-c' option wasn't passed down to %_kernel_module_package so the ueficert subpackage wasn't generated even if the certificate is specified in the spec file.
- rtc: ds1374: fix possible race condition (git-fixes).
- rtlwifi: rtl8192cu: Prevent leaking urb (git-fixes).
- rxrpc: Fix race between recvmsg and sendmsg on immediate call failure (networking-stable-20_08_08).
- rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA (networking-stable-20_07_29).
- s390/mm: fix huge pte soft dirty copying (git-fixes).
- s390/qeth: do not process empty bridge port events (git-fixes).
- s390/qeth: integrate RX refill worker with NAPI (git-fixes).
- s390/qeth: tolerate pre-filled RX buffer (git-fixes).
- scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del() (bsc#1174899).
- scsi: fnic: Do not call 'scsi_done()' for unhandled commands (bsc#1168468, bsc#1171675).
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (bsc#1176962 ltc#188304).
- scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling getpeername() (bsc#1177258).
- scsi: libfc: Fix for double free() (bsc#1174899).
- scsi: libfc: free response frame from GPN_ID (bsc#1174899).
- scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases (bsc#1174899).
- scsi: lpfc: Add dependency on CPU_FREQ (git-fixes).
- scsi: lpfc: Fix setting IRQ affinity with an empty CPU mask (git-fixes).
- scsi: qla2xxx: Fix regression on sparc64 (git-fixes).
- scsi: qla2xxx: Fix the return value (bsc#1171688).
- scsi: qla2xxx: Fix the size used in a 'dma_free_coherent()' call (bsc#1171688).
- scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba() (bsc#1171688).
- scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg() (bsc#1171688).
- scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1171688).
- scsi: qla2xxx: Log calling function name in qla2x00_get_sp_from_handle() (bsc#1171688).
- scsi: qla2xxx: Remove pci-dma-compat wrapper API (bsc#1171688).
- scsi: qla2xxx: Remove redundant variable initialization (bsc#1171688).
- scsi: qla2xxx: Remove superfluous memset() (bsc#1171688).
- scsi: qla2xxx: Simplify return value logic in qla2x00_get_sp_from_handle() (bsc#1171688).
- scsi: qla2xxx: Suppress two recently introduced compiler warnings (git-fixes).
- scsi: qla2xxx: Warn if done() or free() are called on an already freed srb (bsc#1171688).
- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for Tegra186 (git-fixes).
- sdhci: tegra: Remove SDHCI_QUIRK_DATA_TIMEOUT_USES_SDCLK for Tegra210 (git-fixes).
- serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout (git-fixes).
- serial: 8250_omap: Fix sleeping function called from invalid context during probe (git-fixes).
- serial: 8250_port: Do not service RX FIFO if throttled (git-fixes).
- Set CONFIG_HAVE_KVM_VCPU_ASYNC_IOCTL=y (jsc#SLE-4084).
- SMB3: Honor persistent/resilient handle flags for multiuser mounts (bsc#1176546).
- SMB3: Honor 'seal' flag for multiuser mounts (bsc#1176545).
- SMB3: warn on confusing error scenario with sec=krb5 (bsc#1176548).
- stmmac: Do not access tx_q-&gt;dirty_tx before netif_tx_lock (git-fixes).
- tcp: apply a floor of 1 for RTT samples from TCP timestamps (networking-stable-20_08_08).
- thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430 (git-fixes).
- tools/power/cpupower: Fix initializer override in hsw_ext_cstates (bsc#1112178).
- USB: core: fix slab-out-of-bounds Read in read_descriptors (git-fixes).
- USB: dwc3: Increase timeout for CmdAct cleared by device controller (git-fixes).
- USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() (git-fixes).
- USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int (git-fixes).
- USB: Fix out of sync data toggle if a configured device is reconfigured (git-fixes).
- USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() (git-fixes).
- USB: gadget: f_ncm: Fix NDP16 datagram validation (git-fixes).
- USB: gadget: u_f: add overflow checks to VLA macros (git-fixes).
- USB: gadget: u_f: Unbreak offset calculation in VLAs (git-fixes).
- USB: hso: check for return value in hso_serial_common_create() (networking-stable-20_08_08).
- usblp: fix race between disconnect() and read() (git-fixes).
- USB: lvtest: return proper error code in probe (git-fixes).
- usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set (git-fixes).
- USB: qmi_wwan: add D-Link DWM-222 A2 device ID (git-fixes).
- USB: quirks: Add no-lpm quirk for another Raydium touchscreen (git-fixes).
- USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin notebook (git-fixes).
- USB: quirks: Ignore duplicate endpoint on Sound Devices MixPre-D (git-fixes).
- USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter (git-fixes).
- USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules (git-fixes).
- USB: serial: option: support dynamic Quectel USB compositions (git-fixes).
- USB: sisusbvga: Fix a potential UB casued by left shifting a negative value (git-fixes).
- USB: storage: Add unusual_uas entry for Sony PSZ drives (git-fixes).
- USB: typec: ucsi: acpi: Check the _DEP dependencies (git-fixes).
- USB: uas: Add quirk for PNY Pro Elite (git-fixes).
- USB: UAS: fix disconnect by unplugging a hub (git-fixes).
- USB: yurex: Fix bad gfp argument (git-fixes).
- vgacon: remove software scrollback support (bsc#1176278).
- video: fbdev: fix OOB read in vga_8planes_imageblit() (git-fixes).
- virtio-blk: free vblk-vqs in error path of virtblk_probe() (git fixes (block drivers)).
- vrf: prevent adding upper devices (git-fixes).
- vxge: fix return of a free'd memblock on a failed dma mapping (git-fixes).
- x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task (bsc#1112178).
- xen: do not reschedule in preemption off sections (bsc#1175749).
- xen/events: do not use chip_data for legacy IRQs (bsc#1065600).
- xen uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information (bsc#1065600).
- xhci: Do warm-reset when both CAS and XDEV_RESUME are set (git-fixes).
- yam: fix possible memory leak in yam_init_driver (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-13"/>
	<updated date="2020-10-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1055186">SUSE bug 1055186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094244">SUSE bug 1094244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154366">SUSE bug 1154366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167527">SUSE bug 1167527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1168468">SUSE bug 1168468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169972">SUSE bug 1169972</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171675">SUSE bug 1171675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171688">SUSE bug 1171688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171742">SUSE bug 1171742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173115">SUSE bug 1173115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174899">SUSE bug 1174899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175228">SUSE bug 1175228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175749">SUSE bug 1175749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175882">SUSE bug 1175882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176011">SUSE bug 1176011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176022">SUSE bug 1176022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176038">SUSE bug 1176038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176235">SUSE bug 1176235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176242">SUSE bug 1176242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176278">SUSE bug 1176278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176316">SUSE bug 1176316</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176317">SUSE bug 1176317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176318">SUSE bug 1176318</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176319">SUSE bug 1176319</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176320">SUSE bug 1176320</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176321">SUSE bug 1176321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176381">SUSE bug 1176381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176395">SUSE bug 1176395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176410">SUSE bug 1176410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176423">SUSE bug 1176423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176482">SUSE bug 1176482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176507">SUSE bug 1176507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176536">SUSE bug 1176536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176544">SUSE bug 1176544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176545">SUSE bug 1176545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176546">SUSE bug 1176546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176548">SUSE bug 1176548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176659">SUSE bug 1176659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176698">SUSE bug 1176698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176699">SUSE bug 1176699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176700">SUSE bug 1176700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176721">SUSE bug 1176721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176722">SUSE bug 1176722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176725">SUSE bug 1176725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176732">SUSE bug 1176732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176788">SUSE bug 1176788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176789">SUSE bug 1176789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176869">SUSE bug 1176869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176877">SUSE bug 1176877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176935">SUSE bug 1176935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176950">SUSE bug 1176950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176962">SUSE bug 1176962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176966">SUSE bug 1176966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176990">SUSE bug 1176990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177027">SUSE bug 1177027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177030">SUSE bug 1177030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177041">SUSE bug 1177041</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177042">SUSE bug 1177042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177043">SUSE bug 1177043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177044">SUSE bug 1177044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177121">SUSE bug 1177121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177206">SUSE bug 1177206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177258">SUSE bug 1177258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177291">SUSE bug 1177291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177293">SUSE bug 1177293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177294">SUSE bug 1177294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177295">SUSE bug 1177295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177296">SUSE bug 1177296</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-0404/">CVE-2020-0404</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0427/">CVE-2020-0427</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0431/">CVE-2020-0431</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0432/">CVE-2020-0432</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14381/">CVE-2020-14381</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14390/">CVE-2020-14390</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25212/">CVE-2020-25212</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25284/">CVE-2020-25284</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25641/">CVE-2020-25641</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25643/">CVE-2020-25643</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-26088/">CVE-2020-26088</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501600" comment="cluster-md-kmp-default-4.12.14-197.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501601" comment="dlm-kmp-default-4.12.14-197.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501602" comment="gfs2-kmp-default-4.12.14-197.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501603" comment="ocfs2-kmp-default-4.12.14-197.61.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139126" version="1" class="patch">
	<metadata>
		<title>Security update for crmsh (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1163581" ref_url="https://bugzilla.suse.com/1163581" source="BUGZILLA"/>
		<reference ref_id="1176569" ref_url="https://bugzilla.suse.com/1176569" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2020:2928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007561.html" source="SUSE-SU"/>
		<description>
This update for crmsh fixes the following issues:

- Fixed start_delay with start-delay(bsc#1176569)
- fix on_fail should be on-fail(bsc#1176569)
- config: Try to handle configparser.MissingSectionHeaderError while reading config file
- ui_configure: Obscure sensitive data by default(bsc#1163581)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-14"/>
	<updated date="2020-10-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1163581">SUSE bug 1163581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176569">SUSE bug 1176569</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501604" comment="crmsh-4.1.0+git.1602227275.3d680577-3.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501605" comment="crmsh-scripts-4.1.0+git.1602227275.3d680577-3.39.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139127" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1140683" ref_url="https://bugzilla.suse.com/1140683" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1174748" ref_url="https://bugzilla.suse.com/1174748" source="BUGZILLA"/>
		<reference ref_id="1175520" ref_url="https://bugzilla.suse.com/1175520" source="BUGZILLA"/>
		<reference ref_id="1176400" ref_url="https://bugzilla.suse.com/1176400" source="BUGZILLA"/>
		<reference ref_id="1176946" ref_url="https://bugzilla.suse.com/1176946" source="BUGZILLA"/>
		<reference ref_id="1177027" ref_url="https://bugzilla.suse.com/1177027" source="BUGZILLA"/>
		<reference ref_id="1177340" ref_url="https://bugzilla.suse.com/1177340" source="BUGZILLA"/>
		<reference ref_id="1177511" ref_url="https://bugzilla.suse.com/1177511" source="BUGZILLA"/>
		<reference ref_id="1177685" ref_url="https://bugzilla.suse.com/1177685" source="BUGZILLA"/>
		<reference ref_id="1177724" ref_url="https://bugzilla.suse.com/1177724" source="BUGZILLA"/>
		<reference ref_id="1177725" ref_url="https://bugzilla.suse.com/1177725" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12351" ref_url="https://www.suse.com/security/cve/CVE-2020-12351/" source="CVE"/>
		<reference ref_id="CVE-2020-12352" ref_url="https://www.suse.com/security/cve/CVE-2020-12352/" source="CVE"/>
		<reference ref_id="CVE-2020-25645" ref_url="https://www.suse.com/security/cve/CVE-2020-25645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:2972-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007592.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724).
- CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka 'BleedingTooth' aka 'BadChoice' (bsc#1177725).
- CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted (bsc#1177511).


The following non-security bugs were fixed:

- drm/sun4i: mixer: Extend regmap max_register (git-fixes).
- i2c: meson: fix clock setting overwrite (git-fixes).
- iommu/vt-d: Correctly calculate agaw in domain_init() (bsc#1176400).
- mac80211: do not allow bigger VHT MPDUs than the hardware supports (git-fixes).
- macsec: avoid use-after-free in macsec_handle_frame() (git-fixes).
- mmc: core: do not set limits.discard_granularity as 0 (git-fixes).
- mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() (bsc#1177685).
- NFS: On fatal writeback errors, we need to call nfs_inode_remove_request() (bsc#1177340).
- NFS: Revalidate the file mapping on all fatal writeback errors (bsc#1177340).
- nvme: add a Identify Namespace Identification Descriptor list quirk (bsc#1174748). add two previous futile attempts to fix the bug to blacklist.conf
- nvme: Fix ctrl use-after-free during sysfs deletion (bsc#1174748).
- nvme: fix deadlock caused by ANA update wrong locking (bsc#1174748).
- nvme: fix possible io failures when removing multipathed ns (bsc#1174748).
- nvme: make nvme_identify_ns propagate errors back (bsc#1174748). Refresh:  - patches.suse/nvme-flush-scan_work-when-resetting-controller.patch
- nvme: make nvme_report_ns_ids propagate error back (bsc#1174748).
- nvme-multipath: do not reset on unknown status (bsc#1174748).
- nvme: Namepace identification descriptor list is optional (bsc#1174748).
- nvme: pass status to nvme_error_status (bsc#1174748).
- nvme-rdma: Avoid double freeing of async event data (bsc#1174748).
- nvme: return error from nvme_alloc_ns() (bsc#1174748).
- powerpc/dma: Fix dma_map_ops::get_required_mask (bsc#1065729).
- scsi-hisi-kabi-fixes.patch
- scsi-hisi-kabi-fixes.patch
- scsi: hisi_sas: Add debugfs ITCT file and add file operations (bsc#1140683).
- scsi: hisi_sas: Add manual trigger for debugfs dump (bsc#1140683).
- scsi: hisi_sas: Add missing seq_printf() call in hisi_sas_show_row_32() (bsc#1140683).
- scsi: hisi_sas: Change return variable type in phy_up_v3_hw() (bsc#1140683).
- scsi: hisi_sas: Correct memory allocation size for DQ debugfs (bsc#1140683).
- scsi: hisi_sas: Do some more tidy-up (bsc#1140683).
- scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO (bsc#1140683).
- scsi: hisi_sas: Fix type casting and missing static qualifier in debugfs code (bsc#1140683). Refresh:
- scsi-hisi_sas-Issue-internal-abort-on-all-relevant-q.patch
- scsi: hisi_sas: No need to check return value of debugfs_create functions (bsc#1140683). Update:
- scsi: hisi_sas: Some misc tidy-up (bsc#1140683).
- scsi: qla2xxx: Add IOCB resource tracking (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Add rport fields in debugfs (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Add SLER and PI control support (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Correct the check for sscanf() return value (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix buffer-buffer credit extraction error (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix crash on session cleanup with unload (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix I/O errors during LIP reset tests (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix I/O failures during remote port toggle testing (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix memory size truncation (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix MPI reset needed message (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Fix reset of MPI firmware (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Make tgt_port_database available in initiator mode (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Performance tweak (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Reduce duplicate code in reporting speed (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Remove unneeded variable 'rval' (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Setup debugfs entries for remote ports (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Update version to 10.02.00.102-k (bsc#1176946 bsc#1175520 bsc#1172538).
- scsi: qla2xxx: Update version to 10.02.00.103-k (bsc#1176946 bsc#1175520 bsc#1172538).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-20"/>
	<updated date="2020-10-20"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140683">SUSE bug 1140683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174748">SUSE bug 1174748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175520">SUSE bug 1175520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176400">SUSE bug 1176400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176946">SUSE bug 1176946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177027">SUSE bug 1177027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177340">SUSE bug 1177340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177511">SUSE bug 1177511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177685">SUSE bug 1177685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177724">SUSE bug 1177724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177725">SUSE bug 1177725</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12351/">CVE-2020-12351</cve>
	<cve impact="moderate" cvss3="3.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12352/">CVE-2020-12352</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25645/">CVE-2020-25645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501606" comment="cluster-md-kmp-default-4.12.14-197.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501607" comment="dlm-kmp-default-4.12.14-197.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501608" comment="gfs2-kmp-default-4.12.14-197.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501609" comment="ocfs2-kmp-default-4.12.14-197.64.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139128" version="1" class="patch">
	<metadata>
		<title>Security update for pacemaker (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1167171" ref_url="https://bugzilla.suse.com/1167171" source="BUGZILLA"/>
		<reference ref_id="1173668" ref_url="https://bugzilla.suse.com/1173668" source="BUGZILLA"/>
		<reference ref_id="1175557" ref_url="https://bugzilla.suse.com/1175557" source="BUGZILLA"/>
		<reference ref_id="1177916" ref_url="https://bugzilla.suse.com/1177916" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25654" ref_url="https://www.suse.com/security/cve/CVE-2020-25654/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3073-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007657.html" source="SUSE-SU"/>
		<description>
This update for pacemaker fixes the following issues:

- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- extra: add vim modelines to agents
- extra: quote shell variables in agent code where appropriate (bsc#1175557)
- extra: remove trailing whitespace from agent code
- extra: update agent boilerplate (copyright/license notices)
- extra: use 4-space indents in resource agent code
- extra: use ':=' where appropriate in agent code
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- move bcond_with/without up front for e.g. pcmk_release
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- rpm: add spec option for enabling CIB secrets
- rpm: put user-configurable items at top of spec
- rpm: use the user/group ID 90 for haclient/hacluster to be consistent with cluster-glue (bsc#1167171)
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-28"/>
	<updated date="2020-10-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1167171">SUSE bug 1167171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173668">SUSE bug 1173668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175557">SUSE bug 1175557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177916">SUSE bug 1177916</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25654/">CVE-2020-25654</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501610" comment="libpacemaker-devel-2.0.1+20190417.13d370ca9-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501611" comment="libpacemaker3-2.0.1+20190417.13d370ca9-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501612" comment="pacemaker-2.0.1+20190417.13d370ca9-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501613" comment="pacemaker-cli-2.0.1+20190417.13d370ca9-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501614" comment="pacemaker-cts-2.0.1+20190417.13d370ca9-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501615" comment="pacemaker-remote-2.0.1+20190417.13d370ca9-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139129" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1173902" ref_url="https://bugzilla.suse.com/1173902" source="BUGZILLA"/>
		<reference ref_id="1173994" ref_url="https://bugzilla.suse.com/1173994" source="BUGZILLA"/>
		<reference ref_id="1177613" ref_url="https://bugzilla.suse.com/1177613" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14318" ref_url="https://www.suse.com/security/cve/CVE-2020-14318/" source="CVE"/>
		<reference ref_id="CVE-2020-14323" ref_url="https://www.suse.com/security/cve/CVE-2020-14323/" source="CVE"/>
		<reference ref_id="CVE-2020-14383" ref_url="https://www.suse.com/security/cve/CVE-2020-14383/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3092-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-October/007675.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613).
- CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994).
- CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-10-29"/>
	<updated date="2020-10-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173902">SUSE bug 1173902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173994">SUSE bug 1173994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177613">SUSE bug 1177613</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14318/">CVE-2020-14318</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14323/">CVE-2020-14323</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14383/">CVE-2020-14383</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501616" comment="ctdb-4.9.5+git.383.7b7f8f14df8-3.47.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139130" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1055014" ref_url="https://bugzilla.suse.com/1055014" source="BUGZILLA"/>
		<reference ref_id="1061843" ref_url="https://bugzilla.suse.com/1061843" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066382" ref_url="https://bugzilla.suse.com/1066382" source="BUGZILLA"/>
		<reference ref_id="1077428" ref_url="https://bugzilla.suse.com/1077428" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1131277" ref_url="https://bugzilla.suse.com/1131277" source="BUGZILLA"/>
		<reference ref_id="1134760" ref_url="https://bugzilla.suse.com/1134760" source="BUGZILLA"/>
		<reference ref_id="1170415" ref_url="https://bugzilla.suse.com/1170415" source="BUGZILLA"/>
		<reference ref_id="1171558" ref_url="https://bugzilla.suse.com/1171558" source="BUGZILLA"/>
		<reference ref_id="1173432" ref_url="https://bugzilla.suse.com/1173432" source="BUGZILLA"/>
		<reference ref_id="1174748" ref_url="https://bugzilla.suse.com/1174748" source="BUGZILLA"/>
		<reference ref_id="1176354" ref_url="https://bugzilla.suse.com/1176354" source="BUGZILLA"/>
		<reference ref_id="1176485" ref_url="https://bugzilla.suse.com/1176485" source="BUGZILLA"/>
		<reference ref_id="1176560" ref_url="https://bugzilla.suse.com/1176560" source="BUGZILLA"/>
		<reference ref_id="1176713" ref_url="https://bugzilla.suse.com/1176713" source="BUGZILLA"/>
		<reference ref_id="1176723" ref_url="https://bugzilla.suse.com/1176723" source="BUGZILLA"/>
		<reference ref_id="1177086" ref_url="https://bugzilla.suse.com/1177086" source="BUGZILLA"/>
		<reference ref_id="1177101" ref_url="https://bugzilla.suse.com/1177101" source="BUGZILLA"/>
		<reference ref_id="1177271" ref_url="https://bugzilla.suse.com/1177271" source="BUGZILLA"/>
		<reference ref_id="1177281" ref_url="https://bugzilla.suse.com/1177281" source="BUGZILLA"/>
		<reference ref_id="1177410" ref_url="https://bugzilla.suse.com/1177410" source="BUGZILLA"/>
		<reference ref_id="1177411" ref_url="https://bugzilla.suse.com/1177411" source="BUGZILLA"/>
		<reference ref_id="1177470" ref_url="https://bugzilla.suse.com/1177470" source="BUGZILLA"/>
		<reference ref_id="1177687" ref_url="https://bugzilla.suse.com/1177687" source="BUGZILLA"/>
		<reference ref_id="1177719" ref_url="https://bugzilla.suse.com/1177719" source="BUGZILLA"/>
		<reference ref_id="1177740" ref_url="https://bugzilla.suse.com/1177740" source="BUGZILLA"/>
		<reference ref_id="1177749" ref_url="https://bugzilla.suse.com/1177749" source="BUGZILLA"/>
		<reference ref_id="1177750" ref_url="https://bugzilla.suse.com/1177750" source="BUGZILLA"/>
		<reference ref_id="1177753" ref_url="https://bugzilla.suse.com/1177753" source="BUGZILLA"/>
		<reference ref_id="1177754" ref_url="https://bugzilla.suse.com/1177754" source="BUGZILLA"/>
		<reference ref_id="1177755" ref_url="https://bugzilla.suse.com/1177755" source="BUGZILLA"/>
		<reference ref_id="1177766" ref_url="https://bugzilla.suse.com/1177766" source="BUGZILLA"/>
		<reference ref_id="1177855" ref_url="https://bugzilla.suse.com/1177855" source="BUGZILLA"/>
		<reference ref_id="1177856" ref_url="https://bugzilla.suse.com/1177856" source="BUGZILLA"/>
		<reference ref_id="1177861" ref_url="https://bugzilla.suse.com/1177861" source="BUGZILLA"/>
		<reference ref_id="1178003" ref_url="https://bugzilla.suse.com/1178003" source="BUGZILLA"/>
		<reference ref_id="1178027" ref_url="https://bugzilla.suse.com/1178027" source="BUGZILLA"/>
		<reference ref_id="1178166" ref_url="https://bugzilla.suse.com/1178166" source="BUGZILLA"/>
		<reference ref_id="1178185" ref_url="https://bugzilla.suse.com/1178185" source="BUGZILLA"/>
		<reference ref_id="1178187" ref_url="https://bugzilla.suse.com/1178187" source="BUGZILLA"/>
		<reference ref_id="1178188" ref_url="https://bugzilla.suse.com/1178188" source="BUGZILLA"/>
		<reference ref_id="1178202" ref_url="https://bugzilla.suse.com/1178202" source="BUGZILLA"/>
		<reference ref_id="1178234" ref_url="https://bugzilla.suse.com/1178234" source="BUGZILLA"/>
		<reference ref_id="1178330" ref_url="https://bugzilla.suse.com/1178330" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0430" ref_url="https://www.suse.com/security/cve/CVE-2020-0430/" source="CVE"/>
		<reference ref_id="CVE-2020-14351" ref_url="https://www.suse.com/security/cve/CVE-2020-14351/" source="CVE"/>
		<reference ref_id="CVE-2020-16120" ref_url="https://www.suse.com/security/cve/CVE-2020-16120/" source="CVE"/>
		<reference ref_id="CVE-2020-25285" ref_url="https://www.suse.com/security/cve/CVE-2020-25285/" source="CVE"/>
		<reference ref_id="CVE-2020-25656" ref_url="https://www.suse.com/security/cve/CVE-2020-25656/" source="CVE"/>
		<reference ref_id="CVE-2020-27673" ref_url="https://www.suse.com/security/cve/CVE-2020-27673/" source="CVE"/>
		<reference ref_id="CVE-2020-27675" ref_url="https://www.suse.com/security/cve/CVE-2020-27675/" source="CVE"/>
		<reference ref_id="CVE-2020-8694" ref_url="https://www.suse.com/security/cve/CVE-2020-8694/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007748.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bug fixes.


The following security bugs were fixed:

- CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766).
- CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in mm/hugetlb.c (bnc#1176485).
- CVE-2020-0430: Fixed an OOB read in skb_headlen of /include/linux/skbuff.h (bnc#1176723).
- CVE-2020-14351: Fixed a race in the perf_mmap_close() function (bsc#1177086).
- CVE-2020-16120: Fixed a permissions issue in ovl_path_open() (bsc#1177470).
- CVE-2020-8694: Restricted energy meter to root access (bsc#1170415).
- CVE-2020-27673: Fixed an issue where rogue guests could have caused denial of service of Dom0 via high frequency events (XSA-332 bsc#1177411)
- CVE-2020-27675: Fixed a race condition in event handler which may crash dom0 (XSA-331 bsc#1177410).

The following non-security bugs were fixed:

- ALSA: bebob: potential info leak in hwdep_read() (git-fixes).
- ALSA: compress_offload: remove redundant initialization (git-fixes).
- ALSA: core: init: use DECLARE_COMPLETION_ONSTACK() macro (git-fixes).
- ALSA: core: pcm: simplify locking for timers (git-fixes).
- ALSA: core: timer: clarify operator precedence (git-fixes).
- ALSA: core: timer: remove redundant assignment (git-fixes).
- ALSA: ctl: Workaround for lockdep warning wrt card-&gt;ctl_files_rwlock (git-fixes).
- ALSA: hda - Do not register a cb func if it is registered already (git-fixes).
- ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 (git-fixes).
- ALSA: hda/realtek - The front Mic on a HP machine does not work (git-fixes).
- ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (git-fixes).
- ALSA: hda: auto_parser: remove shadowed variable declaration (git-fixes).
- ALSA: hda: use semicolons rather than commas to separate statements (git-fixes).
- ALSA: mixart: Correct comment wrt obsoleted tasklet usage (git-fixes).
- ALSA: rawmidi: (cosmetic) align function parameters (git-fixes).
- ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (git-fixes).
- ALSA: usb-audio: Add mixer support for Pioneer DJ DJM-250MK2 (git-fixes).
- ALSA: usb-audio: endpoint.c: fix repeated word 'there' (git-fixes).
- ALSA: usb-audio: fix spelling mistake 'Frequence' -&gt; 'Frequency' (git-fixes).
- ASoC: qcom: lpass-cpu: fix concurrency issue (git-fixes).
- ASoC: qcom: lpass-platform: fix memory leak (git-fixes).
- ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() (git-fixes).
- ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path (git-fixes).
- ath10k: provide survey info as accumulated data (git-fixes).
- ath6kl: prevent potential array overflow in ath6kl_add_new_sta() (git-fixes).
- ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() (git-fixes).
- ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() (git-fixes).
- backlight: sky81452-backlight: Fix refcount imbalance on error (git-fixes).
- blk-mq: order adding requests to hctx-&gt;dispatch and checking SCHED_RESTART (bsc#1177750).
- block: ensure bdi-&gt;io_pages is always initialized (bsc#1177749).
- Bluetooth: MGMT: Fix not checking if BT_HS is enabled (git-fixes).
- Bluetooth: Only mark socket zapped after unlocking (git-fixes).
- bnxt: do not enable NAPI until rings are ready (networking-stable-20_09_11).
- bnxt_en: Check for zero dir entries in NVRAM (networking-stable-20_09_11).
- brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach (git-fixes).
- brcmfmac: check ndev pointer (git-fixes).
- brcmsmac: fix memory leak in wlc_phy_attach_lcnphy (git-fixes).
- btrfs: check the right error variable in btrfs_del_dir_entries_in_log (bsc#1177687).
- btrfs: do not force read-only after error in drop snapshot (bsc#1176354).
- btrfs: do not set the full sync flag on the inode during page release (bsc#1177687).
- btrfs: fix incorrect updating of log root tree (bsc#1177687).
- btrfs: fix race between page release and a fast fsync (bsc#1177687).
- btrfs: only commit delayed items at fsync if we are logging a directory (bsc#1177687).
- btrfs: only commit the delayed inode when doing a full fsync (bsc#1177687).
- btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations (bsc#1177856).
- btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode (bsc#1177855).
- btrfs: reduce contention on log trees when logging checksums (bsc#1177687).
- btrfs: release old extent maps during page release (bsc#1177687).
- btrfs: remove no longer needed use of log_writers for the log root tree (bsc#1177687).
- btrfs: remove root usage from can_overcommit (bsc#1131277).
- btrfs: stop incremening log_batch for the log root tree when syncing log (bsc#1177687).
- btrfs: take overcommit into account in inc_block_group_ro (bsc#1176560).
- btrfs: tree-checker: fix false alert caused by legacy btrfs root item (bsc#1177861).
- can: c_can: reg_map_{c,d}_can: mark as __maybe_unused (git-fixes).
- can: flexcan: flexcan_chip_stop(): add error handling and propagate error value (git-fixes).
- can: softing: softing_card_shutdown(): add braces around empty body in an 'if' statement (git-fixes).
- ceph: fix memory leak in ceph_cleanup_snapid_map() (bsc#1178234).
- ceph: map snapid to anonymous bdev ID (bsc#1178234).
- ceph: promote to unsigned long long before shifting (bsc#1178187).
- clk: at91: clk-main: update key before writing AT91_CKGR_MOR (git-fixes).
- clk: at91: remove the checking of parent_name (git-fixes).
- clk: bcm2835: add missing release if devm_clk_hw_register fails (git-fixes).
- clk: imx8mq: Fix usdhc parents order (git-fixes).
- coredump: fix crash when umh is disabled (bsc#1177753).
- crypto: algif_skcipher - EBUSY on aio should be an error (git-fixes).
- crypto: ccp - fix error handling (git-fixes).
- crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call (git-fixes).
- crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() (git-fixes).
- crypto: omap-sham - fix digcnt register handling with export/import (git-fixes).
- cxl: Rework error message for incompatible slots (bsc#1055014 git-fixes).
- cypto: mediatek - fix leaks in mtk_desc_ring_alloc (git-fixes).
- Disable ipa-clones dump for KMP builds (bsc#1178330) The feature is not really useful for KMP, and rather confusing, so let's disable it at building out-of-tree codes
- dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status (git-fixes).
- drm/amdgpu: prevent double kfree ttm-&gt;sg (git-fixes).
- drm/gma500: fix error check (git-fixes).
- drm/msm: Drop debug print in _dpu_crtc_setup_lm_bounds() (git-fixes).
- drm/nouveau/mem: guard against NULL pointer access in mem_del (git-fixes).
- EDAC/i5100: Fix error handling order in i5100_init_one() (bsc#1112178).
- eeprom: at25: set minimum read/write access stride to 1 (git-fixes).
- Fix use after free in get_capset_info callback (git-fixes).
- gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY (networking-stable-20_08_24).
- gtp: add GTPA_LINK info to msg sent to userspace (networking-stable-20_09_11).
- HID: roccat: add bounds checking in kone_sysfs_write_settings() (git-fixes).
- HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery (git-fixes).
- i2c: imx: Fix external abort on interrupt in exit paths (git-fixes).
- ibmveth: Identify ingress large send packets (bsc#1178185 ltc#188897).
- ibmveth: Switch order of ibmveth_helper calls (bsc#1061843 git-fixes).
- ibmvnic: fix ibmvnic_set_mac (bsc#1066382 ltc#160943 git-fixes).
- ibmvnic: save changed mac address to adapter-&gt;mac_addr (bsc#1134760 ltc#177449 git-fixes).
- iio:accel:bma180: Fix use of true when should be iio_shared_by enum (git-fixes).
- iio:adc:max1118 Fix alignment of timestamp and data leak issues (git-fixes).
- iio:adc:ti-adc0832 Fix alignment issue with timestamp (git-fixes).
- iio:adc:ti-adc12138 Fix alignment issue with timestamp (git-fixes).
- iio:dac:ad5592r: Fix use of true for IIO_SHARED_BY_TYPE (git-fixes).
- iio:gyro:itg3200: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:light:si1145: Fix timestamp alignment and prevent data leak (git-fixes).
- iio:magn:hmc5843: Fix passing true where iio_shared_by enum required (git-fixes).
- ima: Remove semicolon at the end of ima_get_binary_runtime_size() (git-fixes).
- include/linux/swapops.h: correct guards for non_swap_entry() (git-fixes (mm/swap)).
- Input: ep93xx_keypad - fix handling of platform_get_irq() error (git-fixes).
- Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 (git-fixes).
- Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() (git-fixes).
- Input: omap4-keypad - fix handling of platform_get_irq() error (git-fixes).
- Input: sun4i-ps2 - fix handling of platform_get_irq() error (git-fixes).
- Input: twl4030_keypad - fix handling of platform_get_irq() error (git-fixes).
- iomap: Make sure iomap_end is called after iomap_begin (bsc#1177754).
- ip: fix tos reflection in ack and reset packets (networking-stable-20_09_24).
- ipv4: Restore flowi4_oif update before call to xfrm_lookup_route (git-fixes).
- iwlwifi: mvm: split a print to avoid a WARNING in ROC (git-fixes).
- kbuild: enforce -Werror=return-type (bsc#1177281).
- leds: mt6323: move period calculation (git-fixes).
- lib/crc32.c: fix trivial typo in preprocessor condition (git-fixes).
- libceph: clear con-&gt;out_msg on Policy::stateful_server faults (bsc#1178188).
- livepatch: Test if -fdump-ipa-clones is really available As of now we add -fdump-ipa-clones unconditionally. It does not cause a trouble if the kernel is build with the supported toolchain. Otherwise it could fail easily. Do the correct thing and test for the availability.
- mac80211: handle lack of sband-&gt;bitrates in rates (git-fixes).
- mailbox: avoid timer start from callback (git-fixes).
- media: ati_remote: sanity check for both endpoints (git-fixes).
- media: bdisp: Fix runtime PM imbalance on error (git-fixes).
- media: exynos4-is: Fix a reference count leak (git-fixes).
- media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync (git-fixes).
- media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync (git-fixes).
- media: firewire: fix memory leak (git-fixes).
- media: m5mols: Check function pointer in m5mols_sensor_power (git-fixes).
- media: media/pci: prevent memory leak in bttv_probe (git-fixes).
- media: omap3isp: Fix memleak in isp_probe (git-fixes).
- media: platform: fcp: Fix a reference count leak (git-fixes).
- media: platform: s3c-camif: Fix runtime PM imbalance on error (git-fixes).
- media: platform: sti: hva: Fix runtime PM imbalance on error (git-fixes).
- media: Revert 'media: exynos4-is: Add missed check for pinctrl_lookup_state()' (git-fixes).
- media: s5p-mfc: Fix a reference count leak (git-fixes).
- media: saa7134: avoid a shift overflow (git-fixes).
- media: st-delta: Fix reference count leak in delta_run_work (git-fixes).
- media: sti: Fix reference count leaks (git-fixes).
- media: tc358743: initialize variable (git-fixes).
- media: ti-vpe: Fix a missing check and reference count leak (git-fixes).
- media: tuner-simple: fix regression in simple_set_radio_freq (git-fixes).
- media: usbtv: Fix refcounting mixup (git-fixes).
- media: uvcvideo: Ensure all probed info is returned to v4l2 (git-fixes).
- media: vsp1: Fix runtime PM imbalance on error (git-fixes).
- memory: fsl-corenet-cf: Fix handling of platform_get_irq() error (git-fixes).
- memory: omap-gpmc: Fix a couple off by ones (git-fixes).
- mfd: sm501: Fix leaks in probe() (git-fixes).
- mic: vop: copy data to kernel space then write to io memory (git-fixes).
- misc: mic: scif: Fix error handling path (git-fixes).
- misc: rtsx: Fix memory leak in rtsx_pci_probe (git-fixes).
- misc: vop: add round_up(x,4) for vring_size to avoid kernel panic (git-fixes).
- mlx5 PPC ringsize workaround (bsc#1173432).
- mlx5: remove support for ib_get_vector_affinity (bsc#1174748).
- mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa (git-fixes (mm/numa)).
- mm/huge_memory.c: use head to check huge zero page (git-fixes (mm/thp)).
- mm/ksm.c: do not WARN if page is still mapped in remove_stable_node() (git-fixes (mm/hugetlb)).
- mm/mempolicy.c: fix out of bounds write in mpol_parse_str() (git-fixes (mm/mempolicy)).
- mm/mempolicy.c: use match_string() helper to simplify the code (git-fixes (mm/mempolicy)).
- mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() (git-fixes (mm/writeback)).
- mm/page-writeback.c: improve arithmetic divisions (git-fixes (mm/writeback)).
- mm/page-writeback.c: use div64_ul() for u64-by-unsigned-long divide (git-fixes (mm/writeback)).
- mm/page_owner.c: remove drain_all_pages from init_early_allocated_pages (git-fixes (mm/debug)).
- mm/rmap: fixup copying of soft dirty and uffd ptes (git-fixes (mm/rmap)).
- mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: fix race condition in zs_destroy_pool (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: fix the migrated zspage statistics (git-fixes (mm/zsmalloc)).
- mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely (git-fixes (mm/zsmalloc)).
- mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() (git-fixes (mm/hugetlb)).
- mmc: sdio: Check for CISTPL_VERS_1 buffer size (git-fixes).
- Move upstreamed patches into sorted section
- mtd: lpddr: fix excessive stack usage with clang (git-fixes).
- mtd: mtdoops: Do not write panic data twice (git-fixes).
- mwifiex: do not call del_timer_sync() on uninitialized timer (git-fixes).
- mwifiex: Do not use GFP_KERNEL in atomic context (git-fixes).
- mwifiex: fix double free (git-fixes).
- mwifiex: remove function pointer check (git-fixes).
- mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO (git-fixes).
- net/mlx5e: Take common TIR context settings into a function (bsc#1177740).
- net/mlx5e: Turn on HW tunnel offload in all TIRs (bsc#1177740).
- net: disable netpoll on fresh napis (networking-stable-20_09_11).
- net: fec: Fix PHY init after phy_reset_after_clk_enable() (git-fixes).
- net: fec: Fix phy_device lookup for phy_reset_after_clk_enable() (git-fixes).
- net: Fix potential wrong skb-&gt;protocol in skb_vlan_untag() (networking-stable-20_08_24).
- net: hns: Fix memleak in hns_nic_dev_probe (networking-stable-20_09_11).
- net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC (networking-stable-20_09_24).
- net: phy: Avoid NPD upon phy_detach() when driver is unbound (networking-stable-20_09_24).
- net: qrtr: fix usage of idr in port assignment to socket (networking-stable-20_08_24).
- net: systemport: Fix memleak in bcm_sysport_probe (networking-stable-20_09_11).
- net: usb: dm9601: Add USB ID of Keenetic Plus DSL (networking-stable-20_09_11).
- net: usb: qmi_wwan: add Cellient MPL200 card (git-fixes).
- net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails (git-fixes).
- net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key() (git-fixes).
- netlabel: fix problems with mapping removal (networking-stable-20_09_11).
- nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() (git-fixes).
- nl80211: fix non-split wiphy information (git-fixes).
- NTB: hw: amd: fix an issue about leak system resources (git-fixes).
- nvme-rdma: fix crash due to incorrect cqe (bsc#1174748).
- nvme-rdma: fix crash when connect rejected (bsc#1174748).
- nvme: do not update disk info for multipathed device (bsc#1171558).
- platform/x86: mlx-platform: Remove PSU EEPROM configuration (git-fixes).
- powerpc/hwirq: Remove stale forward irq_chip declaration (bsc#1065729).
- powerpc/icp-hv: Fix missing of_node_put() in success path (bsc#1065729).
- powerpc/irq: Drop forward declaration of struct irqaction (bsc#1065729).
- powerpc/perf/hv-gpci: Fix starting index value (bsc#1065729).
- powerpc/powernv/dump: Fix race while processing OPAL dump (bsc#1065729).
- powerpc/powernv/elog: Fix race while processing OPAL error log event (bsc#1065729).
- powerpc/pseries: explicitly reschedule during drmem_lmb list traversal (bsc#1077428 ltc#163882 git-fixes).
- powerpc/pseries: Fix missing of_node_put() in rng_init() (bsc#1065729).
- powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation (bsc#1065729).
- pty: do tty_flip_buffer_push without port-&gt;lock in pty_write (git-fixes).
- pwm: lpss: Add range limit check for the base_unit register value (git-fixes).
- pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare() (git-fixes).
- ring-buffer: Return 0 on success from ring_buffer_resize() (git-fixes).
- rtl8xxxu: prevent potential memory leak (git-fixes).
- scsi: ibmvfc: Fix error return in ibmvfc_probe() (bsc#1065729).
- scsi: ibmvscsi: Fix potential race after loss of transport (bsc#1178166 ltc#188226).
- sctp: not disable bh in the whole sctp_get_port_local() (networking-stable-20_09_11).
- spi: fsl-espi: Only process interrupts for expected events (git-fixes).
- tg3: Fix soft lockup when tg3_reset_task() fails (networking-stable-20_09_11).
- tipc: fix memory leak caused by tipc_buf_append() (git-fixes).
- tipc: fix shutdown() of connection oriented socket (networking-stable-20_09_24).
- tipc: fix shutdown() of connectionless socket (networking-stable-20_09_11).
- tipc: fix the skb_unshare() in tipc_buf_append() (git-fixes).
- tipc: fix uninit skb-&gt;data in tipc_nl_compat_dumpit() (networking-stable-20_08_24).
- tipc: use skb_unshare() instead in tipc_buf_append() (networking-stable-20_09_24).
- tty: ipwireless: fix error handling (git-fixes).
- tty: serial: earlycon dependency (git-fixes).
- tty: serial: fsl_lpuart: fix lpuart32_poll_get_char (git-fixes).
- usb: cdc-acm: add quirk to blacklist ETAS ES58X devices (git-fixes).
- usb: cdc-acm: handle broken union descriptors (git-fixes).
- usb: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync() (git-fixes).
- usb: core: Solve race condition in anchor cleanup functions (git-fixes).
- usb: dwc2: Fix INTR OUT transfers in DDMA mode (git-fixes).
- usb: dwc2: Fix parameter type in function pointer prototype (git-fixes).
- usb: dwc3: core: add phy cleanup for probe error handling (git-fixes).
- usb: dwc3: core: do not trigger runtime pm when remove driver (git-fixes).
- usb: dwc3: ep0: Fix ZLP for OUT ep0 requests (git-fixes).
- usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets (git-fixes).
- usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above (git-fixes).
- usb: gadget: function: printer: fix use-after-free in __lock_acquire (git-fixes).
- usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well (git-fixes).
- usb: ohci: Default to per-port over-current protection (git-fixes).
- usb: serial: qcserial: fix altsetting probing (git-fixes).
- vfs: fix FIGETBSZ ioctl on an overlayfs file (bsc#1178202).
- video: fbdev: sis: fix null ptr dereference (git-fixes).
- video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error (git-fixes).
- VMCI: check return value of get_user_pages_fast() for errors (git-fixes).
- w1: mxc_w1: Fix timeout resolution problem leading to bus error (git-fixes).
- watchdog: iTCO_wdt: Export vendorsupport (bsc#1177101).
- watchdog: iTCO_wdt: Make ICH_RES_IO_SMI optional (bsc#1177101).
- wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 (git-fixes).
- writeback: Avoid skipping inode writeback (bsc#1177755).
- writeback: Fix sync livelock due to b_dirty_time processing (bsc#1177755).
- writeback: Protect inode-&gt;i_io_list with inode-&gt;i_lock (bsc#1177755).
- x86, fakenuma: Fix invalid starting node ID (git-fixes (mm/x86/fakenuma)).
- x86/apic: Unify duplicated local apic timer clockevent initialization (bsc#1112178).
- x86/fpu: Allow multiple bits in clearcpuid= parameter (bsc#1112178).
- x86/xen: disable Firmware First mode for correctable memory errors (bsc#1176713).
- xen/blkback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/events: add a new 'late EOI' evtchn framework (XSA-332 bsc#1177411).
- xen/events: add a proper barrier to 2-level uevent unmasking (XSA-332 bsc#1177411).
- xen/events: avoid removing an event channel while handling it (XSA-331 bsc#1177410).
- xen/events: block rogue events for some time (XSA-332 bsc#1177411).
- xen/events: defer eoi in case of excessive number of events (XSA-332 bsc#1177411).
- xen/events: do not use chip_data for legacy IRQs (XSA-332 bsc#1065600).
- xen/events: fix race in evtchn_fifo_unmask() (XSA-332 bsc#1177411).
- xen/events: switch user event channels to lateeoi model (XSA-332 bsc#1177411).
- xen/events: use a common cpu hotplug hook for event channels (XSA-332 bsc#1177411).
- xen/gntdev.c: Mark pages as dirty (bsc#1065600).
- xen/netback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/pciback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen/scsiback: use lateeoi irq binding (XSA-332 bsc#1177411).
- xen: XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information (XSA-332 bsc#1065600).
- xfs: avoid infinite loop when cancelling CoW blocks after writeback failure (bsc#1178027).
- xfs: limit entries returned when counting fsmap records (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-10"/>
	<updated date="2020-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1055014">SUSE bug 1055014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061843">SUSE bug 1061843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066382">SUSE bug 1066382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1077428">SUSE bug 1077428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131277">SUSE bug 1131277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134760">SUSE bug 1134760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170415">SUSE bug 1170415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171558">SUSE bug 1171558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173432">SUSE bug 1173432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174748">SUSE bug 1174748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176354">SUSE bug 1176354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176485">SUSE bug 1176485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176560">SUSE bug 1176560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176713">SUSE bug 1176713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176723">SUSE bug 1176723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177086">SUSE bug 1177086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177101">SUSE bug 1177101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177271">SUSE bug 1177271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177281">SUSE bug 1177281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177410">SUSE bug 1177410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177411">SUSE bug 1177411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177470">SUSE bug 1177470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177687">SUSE bug 1177687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177719">SUSE bug 1177719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177740">SUSE bug 1177740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177749">SUSE bug 1177749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177750">SUSE bug 1177750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177753">SUSE bug 1177753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177754">SUSE bug 1177754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177755">SUSE bug 1177755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177766">SUSE bug 1177766</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177855">SUSE bug 1177855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177856">SUSE bug 1177856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177861">SUSE bug 1177861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178003">SUSE bug 1178003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178027">SUSE bug 1178027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178166">SUSE bug 1178166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178185">SUSE bug 1178185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178187">SUSE bug 1178187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178188">SUSE bug 1178188</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178202">SUSE bug 1178202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178234">SUSE bug 1178234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178330">SUSE bug 1178330</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0430/">CVE-2020-0430</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-14351/">CVE-2020-14351</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-16120/">CVE-2020-16120</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25285/">CVE-2020-25285</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25656/">CVE-2020-25656</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27673/">CVE-2020-27673</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27675/">CVE-2020-27675</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8694/">CVE-2020-8694</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501617" comment="cluster-md-kmp-default-4.12.14-197.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501618" comment="dlm-kmp-default-4.12.14-197.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501619" comment="gfs2-kmp-default-4.12.14-197.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501620" comment="ocfs2-kmp-default-4.12.14-197.67.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139131" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1058115" ref_url="https://bugzilla.suse.com/1058115" source="BUGZILLA"/>
		<reference ref_id="1163592" ref_url="https://bugzilla.suse.com/1163592" source="BUGZILLA"/>
		<reference ref_id="1167030" ref_url="https://bugzilla.suse.com/1167030" source="BUGZILLA"/>
		<reference ref_id="1172873" ref_url="https://bugzilla.suse.com/1172873" source="BUGZILLA"/>
		<reference ref_id="1175306" ref_url="https://bugzilla.suse.com/1175306" source="BUGZILLA"/>
		<reference ref_id="1175721" ref_url="https://bugzilla.suse.com/1175721" source="BUGZILLA"/>
		<reference ref_id="1176855" ref_url="https://bugzilla.suse.com/1176855" source="BUGZILLA"/>
		<reference ref_id="1176907" ref_url="https://bugzilla.suse.com/1176907" source="BUGZILLA"/>
		<reference ref_id="1176983" ref_url="https://bugzilla.suse.com/1176983" source="BUGZILLA"/>
		<reference ref_id="1177703" ref_url="https://bugzilla.suse.com/1177703" source="BUGZILLA"/>
		<reference ref_id="1177819" ref_url="https://bugzilla.suse.com/1177819" source="BUGZILLA"/>
		<reference ref_id="1177820" ref_url="https://bugzilla.suse.com/1177820" source="BUGZILLA"/>
		<reference ref_id="1178123" ref_url="https://bugzilla.suse.com/1178123" source="BUGZILLA"/>
		<reference ref_id="1178393" ref_url="https://bugzilla.suse.com/1178393" source="BUGZILLA"/>
		<reference ref_id="1178589" ref_url="https://bugzilla.suse.com/1178589" source="BUGZILLA"/>
		<reference ref_id="1178622" ref_url="https://bugzilla.suse.com/1178622" source="BUGZILLA"/>
		<reference ref_id="1178686" ref_url="https://bugzilla.suse.com/1178686" source="BUGZILLA"/>
		<reference ref_id="1178765" ref_url="https://bugzilla.suse.com/1178765" source="BUGZILLA"/>
		<reference ref_id="1178782" ref_url="https://bugzilla.suse.com/1178782" source="BUGZILLA"/>
		<reference ref_id="927455" ref_url="https://bugzilla.suse.com/927455" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25668" ref_url="https://www.suse.com/security/cve/CVE-2020-25668/" source="CVE"/>
		<reference ref_id="CVE-2020-25704" ref_url="https://www.suse.com/security/cve/CVE-2020-25704/" source="CVE"/>
		<reference ref_id="CVE-2020-25705" ref_url="https://www.suse.com/security/cve/CVE-2020-25705/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-November/007848.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote user to effectively bypassing source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software and services that rely on UDP source port randomization (like DNS) are indirectly affected as well. Kernel versions may be vulnerable to this issue (bsc#1175721, bsc#1178782).
- CVE-2020-25704: Fixed a memory leak in perf_event_parse_addr_filter() (bsc#1178393).
- CVE-2020-25668: Fixed a use-after-free in con_font_op() (bnc#1178123).

The following non-security bugs were fixed:

- 9P: Cast to loff_t before multiplying (git-fixes).
- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (git-fixes).
- ACPI: debug: do not allow debugging when ACPI is disabled (git-fixes).
- ACPI: dock: fix enum-conversion warning (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: NFIT: Fix comparison to '-ENXIO' (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- ALSA: hda - Fix the return value if cb func is already registered (git-fixes).
- ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (git-fixes).
- ata: sata_rcar: Fix DMA boundary mask (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled (git-fixes).
- ath10k: start recovery process when payload length exceeds max htc length for sdio (git-fixes).
- bus/fsl_mc: Do not rely on caller to provide non NULL mc_io (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on (git-fixes).
- can: peak_usb: add range checking in decode operations (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping (git-fixes).
- can: rx-offload: do not call kfree_skb() from IRQ context (git-fixes).
- clk: ti: clockdomain: fix static checker warning (git-fixes).
- crypto: bcm - Verify GCM/CCM key length in setkey (git-fixes).
- device property: Do not clear secondary pointer for shared primary firmware node (git-fixes).
- device property: Keep secondary firmware node secondary by type (git-fixes).
- drbd: code cleanup by using sendpage_ok() to check page for kernel_sendpage() (bsc#1172873).
- drm/amd/display: Do not invoke kgdb_breakpoint() unconditionally (git-fixes).
- drm/amd/display: HDMI remote sink need mode validation for Linux (git-fixes).
- drm/amdgpu: do not map BO in reserved region (git-fixes).
- drm/bridge/synopsys: dsi: add support for non-continuous HS clock (git-fixes).
- drm/brige/megachips: Add checking if ge_b850v3_lvds_init() is working correctly (git-fixes).
- drm/i915: Break up error capture compression loops with cond_resched() (git-fixes).
- drm/i915: Force VT'd workarounds when running as a guest OS (git-fixes).
- drm/imx: tve remove extraneous type qualifier (git-fixes).
- drm/ttm: fix eviction valuable range check (git-fixes).
- drm/vc4: drv: Add error handding for bind (git-fixes).
- efivarfs: Replace invalid slashes with exclamation marks in dentries (git-fixes).
- ftrace: Fix recursion check for NMI test (git-fixes).
- ftrace: Handle tracing when switching between context (git-fixes).
- hv_netvsc: Add XDP support (bsc#1177819, bsc#1177820).
- hv_netvsc: Fix XDP refcnt for synthetic and VF NICs (bsc#1177819, bsc#1177820).
- hyperv_fb: Update screen_info after removing old framebuffer (bsc#1175306).
- icmp: randomize the global rate limiter (git-fixes).
- kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function (git-fixes).
- libceph: use sendpage_ok() in ceph_tcp_sendpage() (bsc#1172873).
- media: platform: Improve queue set up flow for bug fixing (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get (git-fixes).
- memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event (bsc#1177703).
- mmc: sdhci-of-esdhc: Handle pulse width detection erratum for more SoCs (git-fixes).
- mmc: sdhci-of-esdhc: set timeout to max before tuning (git-fixes).
- mm/memcg: fix refcount error while moving and swapping (bsc#1178686).
- Move the upstreamed powercap fix into sorted sectio
- mtd: lpddr: Fix bad logic in print_drs_error (git-fixes).
- net: add WARN_ONCE in kernel_sendpage() for improper zero-copy send (bsc#1172873).
- net: introduce helper sendpage_ok() in include/linux/net.h (bsc#1172873).
- net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition (git-fixes).
- nvme-tcp: check page by sendpage_ok() before calling kernel_sendpage() (bsc#1172873).
- p54: avoid accessing the data mapped to streaming DMA (git-fixes).
- pinctrl: intel: Set default bias in case no particular value given (git-fixes).
- powerpc/pseries/cpuidle: add polling idle for shared processor guests (bsc#1178765 ltc#188968).
- powerpc/vnic: Extend 'failover pending' window (bsc#1176855 ltc#187293).
- power: supply: test_power: add missing newlines when printing parameters by sysfs (git-fixes).
- regulator: defer probe when trying to get voltage from unresolved supply (git-fixes).
- regulator: resolve supply after creating regulator (git-fixes).
- ring-buffer: Fix recursion protection transitions between interrupt context (git-fixes).
- rpm/kernel-module-subpackage: make Group tag optional (bsc#1163592)
- scsi: libiscsi: use sendpage_ok() in iscsi_tcp_segment_map() (bsc#1172873).
- staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error (git-fixes).
- staging: octeon: repair 'fixed-link' support (git-fixes).
- thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() (git-fixes).
- USB: Add NO_LPM quirk for Kingston flash drive (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- usb: host: fsl-mph-dr-of: check return of dma_set_mask() (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231 (git-fixes).
- USB: serial: option: add Quectel EC200T module support (git-fixes).
- USB: serial: option: add Telit FN980 composition 0x1055 (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart (git-fixes).
- usb: typec: tcpm: reset hard_reset_count for any disconnect (git-fixes).
- video: fbdev: pvr2fb: initialize variables (git-fixes).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV Gen 1 VMs (bsc#1175306).
- vt: Disable KD_FONT_OP_COPY (bsc#1178589).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params (bsc#1175306).
- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels (bsc#1058115 bsc#1176907).
- xfs: do not update mtime on COW faults (bsc#1167030).
- xfs: fix a missing unlock on error in xfs_fs_map_blocks (git-fixes).
- xfs: fix flags argument to rmap lookup when converting shared file rmaps (git-fixes).
- xfs: fix rmap key and record comparison functions (git-fixes).
- xfs: flush new eof page on truncate to avoid post-eof corruption (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-11-24"/>
	<updated date="2020-11-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1058115">SUSE bug 1058115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163592">SUSE bug 1163592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167030">SUSE bug 1167030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172873">SUSE bug 1172873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175306">SUSE bug 1175306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175721">SUSE bug 1175721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176855">SUSE bug 1176855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176907">SUSE bug 1176907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176983">SUSE bug 1176983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177703">SUSE bug 1177703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177819">SUSE bug 1177819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177820">SUSE bug 1177820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178123">SUSE bug 1178123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178393">SUSE bug 1178393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178589">SUSE bug 1178589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178622">SUSE bug 1178622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178686">SUSE bug 1178686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178765">SUSE bug 1178765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178782">SUSE bug 1178782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/927455">SUSE bug 927455</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25668/">CVE-2020-25668</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25704/">CVE-2020-25704</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25705/">CVE-2020-25705</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501621" comment="cluster-md-kmp-default-4.12.14-197.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501622" comment="dlm-kmp-default-4.12.14-197.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501623" comment="gfs2-kmp-default-4.12.14-197.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501624" comment="ocfs2-kmp-default-4.12.14-197.72.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139132" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-rack (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1114828" ref_url="https://bugzilla.suse.com/1114828" source="BUGZILLA"/>
		<reference ref_id="1116600" ref_url="https://bugzilla.suse.com/1116600" source="BUGZILLA"/>
		<reference ref_id="1159548" ref_url="https://bugzilla.suse.com/1159548" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16471" ref_url="https://www.suse.com/security/cve/CVE-2018-16471/" source="CVE"/>
		<reference ref_id="CVE-2019-16782" ref_url="https://www.suse.com/security/cve/CVE-2019-16782/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0359-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-February/006468.html" source="SUSE-SU"/>
		<description>
This update for rubygem-rack to version 2.0.8 fixes the following issues:

- CVE-2018-16471: Fixed a cross-site scripting (XSS) flaw via the scheme method on Rack::Request (bsc#1116600).
- CVE-2019-16782: Fixed a possible information leak and session hijack vulnerability (bsc#1159548).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-02-07"/>
	<updated date="2020-02-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1114828">SUSE bug 1114828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116600">SUSE bug 1116600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159548">SUSE bug 1159548</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-16471/">CVE-2018-16471</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16782/">CVE-2019-16782</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501503" comment="ruby2.5-rubygem-rack-2.0.8-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139133" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1067665" ref_url="https://bugzilla.suse.com/1067665" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1158775" ref_url="https://bugzilla.suse.com/1158775" source="BUGZILLA"/>
		<reference ref_id="1170139" ref_url="https://bugzilla.suse.com/1170139" source="BUGZILLA"/>
		<reference ref_id="1170630" ref_url="https://bugzilla.suse.com/1170630" source="BUGZILLA"/>
		<reference ref_id="1172542" ref_url="https://bugzilla.suse.com/1172542" source="BUGZILLA"/>
		<reference ref_id="1174726" ref_url="https://bugzilla.suse.com/1174726" source="BUGZILLA"/>
		<reference ref_id="1175916" ref_url="https://bugzilla.suse.com/1175916" source="BUGZILLA"/>
		<reference ref_id="1176109" ref_url="https://bugzilla.suse.com/1176109" source="BUGZILLA"/>
		<reference ref_id="1177304" ref_url="https://bugzilla.suse.com/1177304" source="BUGZILLA"/>
		<reference ref_id="1177397" ref_url="https://bugzilla.suse.com/1177397" source="BUGZILLA"/>
		<reference ref_id="1177805" ref_url="https://bugzilla.suse.com/1177805" source="BUGZILLA"/>
		<reference ref_id="1177808" ref_url="https://bugzilla.suse.com/1177808" source="BUGZILLA"/>
		<reference ref_id="1177819" ref_url="https://bugzilla.suse.com/1177819" source="BUGZILLA"/>
		<reference ref_id="1177820" ref_url="https://bugzilla.suse.com/1177820" source="BUGZILLA"/>
		<reference ref_id="1178182" ref_url="https://bugzilla.suse.com/1178182" source="BUGZILLA"/>
		<reference ref_id="1178589" ref_url="https://bugzilla.suse.com/1178589" source="BUGZILLA"/>
		<reference ref_id="1178635" ref_url="https://bugzilla.suse.com/1178635" source="BUGZILLA"/>
		<reference ref_id="1178669" ref_url="https://bugzilla.suse.com/1178669" source="BUGZILLA"/>
		<reference ref_id="1178838" ref_url="https://bugzilla.suse.com/1178838" source="BUGZILLA"/>
		<reference ref_id="1178853" ref_url="https://bugzilla.suse.com/1178853" source="BUGZILLA"/>
		<reference ref_id="1178854" ref_url="https://bugzilla.suse.com/1178854" source="BUGZILLA"/>
		<reference ref_id="1178878" ref_url="https://bugzilla.suse.com/1178878" source="BUGZILLA"/>
		<reference ref_id="1178886" ref_url="https://bugzilla.suse.com/1178886" source="BUGZILLA"/>
		<reference ref_id="1178897" ref_url="https://bugzilla.suse.com/1178897" source="BUGZILLA"/>
		<reference ref_id="1178940" ref_url="https://bugzilla.suse.com/1178940" source="BUGZILLA"/>
		<reference ref_id="1178962" ref_url="https://bugzilla.suse.com/1178962" source="BUGZILLA"/>
		<reference ref_id="1179107" ref_url="https://bugzilla.suse.com/1179107" source="BUGZILLA"/>
		<reference ref_id="1179140" ref_url="https://bugzilla.suse.com/1179140" source="BUGZILLA"/>
		<reference ref_id="1179141" ref_url="https://bugzilla.suse.com/1179141" source="BUGZILLA"/>
		<reference ref_id="1179211" ref_url="https://bugzilla.suse.com/1179211" source="BUGZILLA"/>
		<reference ref_id="1179213" ref_url="https://bugzilla.suse.com/1179213" source="BUGZILLA"/>
		<reference ref_id="1179259" ref_url="https://bugzilla.suse.com/1179259" source="BUGZILLA"/>
		<reference ref_id="1179403" ref_url="https://bugzilla.suse.com/1179403" source="BUGZILLA"/>
		<reference ref_id="1179406" ref_url="https://bugzilla.suse.com/1179406" source="BUGZILLA"/>
		<reference ref_id="1179418" ref_url="https://bugzilla.suse.com/1179418" source="BUGZILLA"/>
		<reference ref_id="1179421" ref_url="https://bugzilla.suse.com/1179421" source="BUGZILLA"/>
		<reference ref_id="1179424" ref_url="https://bugzilla.suse.com/1179424" source="BUGZILLA"/>
		<reference ref_id="1179426" ref_url="https://bugzilla.suse.com/1179426" source="BUGZILLA"/>
		<reference ref_id="1179427" ref_url="https://bugzilla.suse.com/1179427" source="BUGZILLA"/>
		<reference ref_id="1179429" ref_url="https://bugzilla.suse.com/1179429" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15436" ref_url="https://www.suse.com/security/cve/CVE-2020-15436/" source="CVE"/>
		<reference ref_id="CVE-2020-15437" ref_url="https://www.suse.com/security/cve/CVE-2020-15437/" source="CVE"/>
		<reference ref_id="CVE-2020-25669" ref_url="https://www.suse.com/security/cve/CVE-2020-25669/" source="CVE"/>
		<reference ref_id="CVE-2020-27777" ref_url="https://www.suse.com/security/cve/CVE-2020-27777/" source="CVE"/>
		<reference ref_id="CVE-2020-28915" ref_url="https://www.suse.com/security/cve/CVE-2020-28915/" source="CVE"/>
		<reference ref_id="CVE-2020-28974" ref_url="https://www.suse.com/security/cve/CVE-2020-28974/" source="CVE"/>
		<reference ref_id="CVE-2020-29371" ref_url="https://www.suse.com/security/cve/CVE-2020-29371/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:3718-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-December/007941.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain privileges or cause a denial of service (bsc#1179141).
- CVE-2020-15437: Fixed a null pointer dereference which could have allowed local users to cause a denial of service(bsc#1179140).
- CVE-2020-25669: Fixed a use-after-free read in sunkbd_reinit() (bsc#1178182).
- CVE-2020-27777: Restrict RTAS requests from userspace  (bsc#1179107).
- CVE-2020-28915: Fixed a buffer over-read in the fbcon code which could have been used by local attackers to read kernel memory (bsc#1178886).
- CVE-2020-28974: Fixed a slab-out-of-bounds read in fbcon which could have been used by local attackers to read privileged information or potentially crash the kernel (bsc#1178589).
- CVE-2020-29371: Fixed uninitialized memory leaks to userspace (bsc#1179429).

The following non-security bugs were fixed:

- ACPI: GED: fix -Wformat (git-fixes).
- ALSA: ctl: fix error path at adding user-defined element set (git-fixes).
- ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() (git-fixes).
- ALSA: mixart: Fix mutex deadlock (git-fixes).
- arm64: KVM: Fix system register enumeration (bsc#1174726).
- arm/arm64: KVM: Add PSCI version selection API (bsc#1174726).
- ASoC: qcom: lpass-platform: Fix memory leak (git-fixes).
- ath10k: Acquire tx_lock in tx error paths (git-fixes).
- batman-adv: set .owner to THIS_MODULE (git-fixes).
- Bluetooth: btusb: Fix and detect most of the Chinese Bluetooth controllers (git-fixes).
- Bluetooth: hci_bcm: fix freeing not-requested IRQ (git-fixes).
- bpf: Zero-fill re-used per-cpu map element (git-fixes).
- btrfs: account ticket size at add/delete time (bsc#1178897).
- btrfs: add helper to obtain number of devices with ongoing dev-replace (bsc#1178897).
- btrfs: check rw_devices, not num_devices for balance (bsc#1178897).
- btrfs: do not delete mismatched root refs (bsc#1178962).
- btrfs: fix btrfs_calc_reclaim_metadata_size calculation (bsc#1178897).
- btrfs: fix force usage in inc_block_group_ro (bsc#1178897).
- btrfs: fix invalid removal of root ref (bsc#1178962).
- btrfs: fix reclaim counter leak of space_info objects (bsc#1178897).
- btrfs: fix reclaim_size counter leak after stealing from global reserve (bsc#1178897).
- btrfs: kill min_allocable_bytes in inc_block_group_ro (bsc#1178897).
- btrfs: rework arguments of btrfs_unlink_subvol (bsc#1178962).
- btrfs: split dev-replace locking helpers for read and write (bsc#1178897). 
- can: af_can: prevent potential access of uninitialized member in canfd_rcv() (git-fixes).
- can: af_can: prevent potential access of uninitialized member in can_rcv() (git-fixes).
- can: dev: can_restart(): post buffer from the right context (git-fixes).
- can: gs_usb: fix endianess problem with candleLight firmware (git-fixes).
- can: m_can: fix nominal bitiming tseg2 min for version &gt;= 3.1 (git-fixes).
- can: m_can: m_can_handle_state_change(): fix state change (git-fixes).
- can: m_can: m_can_stop(): set device to software init mode before closing (git-fixes).
- can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb() (git-fixes).
- can: peak_usb: fix potential integer overflow on shift of a int (git-fixes).
- ceph: add check_session_state() helper and make it global (bsc#1179259).
- ceph: check session state after bumping session-&gt;s_seq (bsc#1179259).
- ceph: fix race in concurrent __ceph_remove_cap invocations (bsc#1178635).
- cifs: Fix incomplete memory allocation on setxattr path (bsc#1179211).
- cifs: remove bogus debug code (bsc#1179427).
- cifs: Return the error from crypt_message when enc/dec key not found (bsc#1179426).
- Convert trailing spaces and periods in path components (bsc#1179424).
- docs: ABI: stable: remove a duplicated documentation (git-fixes).
- docs: ABI: sysfs-c2port: remove a duplicated entry (git-fixes).
- Drivers: hv: vmbus: Remove the unused 'tsc_page' from struct hv_context (git-fixes).
- drm/i915/gvt: Set ENHANCED_FRAME_CAP bit (git-fixes).
- drm/sun4i: dw-hdmi: fix error return code in sun8i_dw_hdmi_bind() (git-fixes).
- Drop sysctl files for dropped archs, add ppc64le and arm64 (bsc#1178838). Also fix the ppc64 page size.
- efi: cper: Fix possible out-of-bounds access (git-fixes).
- efi/efivars: Add missing kobject_put() in sysfs entry creation error path (git-fixes).
- efi/esrt: Fix reference count leak in esre_create_sysfs_entry (git-fixes).
- efi: provide empty efi_enter_virtual_mode implementation (git-fixes).
- efivarfs: fix memory leak in efivarfs_create() (git-fixes).
- efivarfs: revert 'fix memory leak in efivarfs_create()' (git-fixes).
- efi/x86: Do not panic or BUG() on non-critical error conditions (git-fixes).
- efi/x86: Free efi_pgd with free_pages() (bsc#1112178).
- efi/x86: Ignore the memory attributes table on i386 (git-fixes).
- efi/x86: Map the entire EFI vendor string before copying it (git-fixes).
- fs/proc/array.c: allow reporting eip/esp for all coredumping threads (bsc#1050549).
- fuse: fix page dereference after free (bsc#1179213).
- futex: Do not enable IRQs unconditionally in put_pi_state() (bsc#1067665).
- futex: Handle transient 'ownerless' rtmutex state correctly (bsc#1067665).
- hv_balloon: disable warning when floor reached (git-fixes).
- hv_netvsc: deal with bpf API differences in 4.12 (bsc#1177819, bsc#1177820).
- hv_netvsc: make recording RSS hash depend on feature flag (bsc#1178853, bsc#1178854).
- hv_netvsc: record hardware hash in skb (bsc#1178853, bsc#1178854).
- i40iw: Fix error handling in i40iw_manage_arp_cache() (bsc#1111666)
- i40iw: fix null pointer dereference on a null wqe pointer (bsc#1111666)
- i40iw: Report correct firmware version (bsc#1111666)
- IB/cma: Fix ports memory leak in cma_configfs (bsc#1111666)
- IB/core: Set qp-&gt;real_qp before it may be accessed (bsc#1111666)
- IB/hfi1: Add missing INVALIDATE opcodes for trace (bsc#1111666)
- IB/hfi1: Add RcvShortLengthErrCnt to hfi1stats (bsc#1111666)
- IB/hfi1: Add software counter for ctxt0 seq drop (bsc#1111666)
- IB/hfi1: Avoid hardlockup with flushlist_lock (bsc#1111666)
- IB/hfi1: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666)
- IB/hfi1: Check for error on call to alloc_rsm_map_table (bsc#1111666)
- IB/hfi1: Close PSM sdma_progress sleep window (bsc#1111666)
- IB/hfi1: Define variables as unsigned long to fix KASAN warning (bsc#1111666)
- IB/hfi1: Ensure full Gen3 speed in a Gen4 system (bsc#1111666)
- IB/hfi1: Fix memory leaks in sysfs registration and unregistration (bsc#1111666)
- IB/hfi1: Fix Spectre v1 vulnerability (bsc#1111666)
- IB/hfi1: Handle port down properly in pio (bsc#1111666)
- IB/hfi1: Handle wakeup of orphaned QPs for pio (bsc#1111666)
- IB/hfi1: Insure freeze_work work_struct is canceled on shutdown (bsc#1111666)
- IB/hfi1, qib: Ensure RCU is locked when accessing list (bsc#1111666)
- IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM (bsc#1111666)
- IB/hfi1: Remove unused define (bsc#1111666)
- IB/hfi1: Silence txreq allocation warnings (bsc#1111666)
- IB/hfi1: Validate page aligned for a given virtual address (bsc#1111666)
- IB/hfi1: Wakeup QPs orphaned on wait list after flush (bsc#1111666)
- IB/ipoib: drop useless LIST_HEAD (bsc#1111666)
- IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode (bsc#1111666)
- IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start (bsc#1111666)
- IB/iser: Fix dma_nents type definition (bsc#1111666)
- IB/iser: Pass the correct number of entries for dma mapped SGL (bsc#1111666)
- IB/mad: Fix use-after-free in ib mad completion handling (bsc#1111666)
- IB/mlx4: Add and improve logging (bsc#1111666)
- IB/mlx4: Add support for MRA (bsc#1111666)
- IB/mlx4: Adjust delayed work when a dup is observed (bsc#1111666)
- IB/mlx4: Fix leak in id_map_find_del (bsc#1111666)
- IB/mlx4: Fix memory leak in add_gid error flow (bsc#1111666)
- IB/mlx4: Fix race condition between catas error reset and aliasguid flows (bsc#1111666)
- IB/mlx4: Fix starvation in paravirt mux/demux (bsc#1111666)
- IB/mlx4: Follow mirror sequence of device add during device removal (bsc#1111666)
- IB/mlx4: Remove unneeded NULL check (bsc#1111666)
- IB/mlx4: Test return value of calls to ib_get_cached_pkey (bsc#1111666)
- IB/mlx5: Add missing XRC options to QP optional params mask (bsc#1111666)
- IB/mlx5: Compare only index part of a memory window rkey (bsc#1111666)
- IB/mlx5: Do not override existing ip_protocol (bsc#1111666)
- IB/mlx5: Fix clean_mr() to work in the expected order (bsc#1111666)
- IB/mlx5: Fix implicit MR release flow (bsc#1111666)
- IB/mlx5: Fix outstanding_pi index for GSI qps (bsc#1111666)
- IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification (bsc#1111666)
- IB/mlx5: Fix unreg_umr to ignore the mkey state (bsc#1111666)
- IB/mlx5: Improve ODP debugging messages (bsc#1111666)
- IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache (bsc#1111666)
- IB/mlx5: Prevent concurrent MR updates during invalidation (bsc#1111666)
- IB/mlx5: Reset access mask when looping inside page fault handler (bsc#1111666)
- IB/mlx5: Set correct write permissions for implicit ODP MR (bsc#1111666)
- IB/mlx5: Use direct mkey destroy command upon UMR unreg failure (bsc#1111666)
- IB/mlx5: Use fragmented QP's buffer for in-kernel users (bsc#1111666)
- IB/mlx5: WQE dump jumps over first 16 bytes (bsc#1111666)
- IB/mthca: fix return value of error branch in mthca_init_cq() (bsc#1111666)
- IB/qib: Call kobject_put() when kobject_init_and_add() fails (bsc#1111666)
- IB/qib: Fix an error code in qib_sdma_verbs_send() (bsc#1111666)
- IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value (bsc#1111666)
- IB/qib: Remove a set-but-not-used variable (bsc#1111666)
- IB/rdmavt: Convert timers to use timer_setup() (bsc#1111666)
- IB/rdmavt: Fix alloc_qpn() WARN_ON() (bsc#1111666)
- IB/rdmavt: Fix sizeof mismatch (bsc#1111666)
- IB/rdmavt: Reset all QPs when the device is shut down (bsc#1111666)
- IB/rxe: Fix incorrect cache cleanup in error flow (bsc#1111666)
- IB/rxe: Make counters thread safe (bsc#1111666)
- IB/srpt: Fix memory leak in srpt_add_one (bsc#1111666)
- IB/umad: Avoid additional device reference during open()/close() (bsc#1111666)
- IB/umad: Avoid destroying device while it is accessed (bsc#1111666)
- IB/umad: Do not check status of nonseekable_open() (bsc#1111666)
- IB/umad: Fix kernel crash while unloading ib_umad (bsc#1111666)
- IB/umad: Refactor code to use cdev_device_add() (bsc#1111666)
- IB/umad: Simplify and avoid dynamic allocation of class (bsc#1111666)
- IB/usnic: Fix out of bounds index check in query pkey (bsc#1111666)
- IB/uverbs: Fix OOPs upon device disassociation (bsc#1111666)
- iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode (git-fixes).
- iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum (git-fixes).
- inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() (git-fixes).
- Input: adxl34x - clean up a data type in adxl34x_probe() (git-fixes).
- iw_cxgb4: fix ECN check on the passive accept (bsc#1111666)
- iw_cxgb4: only reconnect with MPAv1 if the peer aborts (bsc#1111666)
- kABI: add back flush_dcache_range (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- kABI workaround for usermodehelper changes (bsc#1179406).
- KVM: arm64: Add missing #include of -&lt;linux/string.h&gt; in guest.c (bsc#1174726).
- KVM: arm64: Factor out core register ID enumeration (bsc#1174726).
- KVM: arm64: Filter out invalid core register IDs in KVM_GET_REG_LIST (bsc#1174726).
- KVM: arm64: Refactor kvm_arm_num_regs() for easier maintenance (bsc#1174726).
- KVM: arm64: Reject ioctl access to FPSIMD V-regs on SVE vcpus (bsc#1174726).
- KVM host: kabi fixes for psci_version (bsc#1174726).
- libnvdimm/nvdimm/flush: Allow architecture to override the flush barrier (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- locking/lockdep: Add debug_locks check in __lock_downgrade() (bsc#1050549).
- locking/percpu-rwsem: Use this_cpu_{inc,dec}() for read_count (bsc#1050549).
- locktorture: Print ratio of acquisitions, not failures (bsc#1050549).
- mac80211: always wind down STA state (git-fixes).
- mac80211: free sta in sta_info_insert_finish() on errors (git-fixes).
- mac80211: minstrel: fix tx status processing corner case (git-fixes).
- mac80211: minstrel: remove deferred sampling code (git-fixes).
- mm: always have io_remap_pfn_range() set pgprot_decrypted() (bsc#1112178).
- net: ena: Capitalize all log strings and improve code readability (bsc#1177397).
- net: ena: Change license into format to SPDX in all files (bsc#1177397).
- net: ena: Change log message to netif/dev function (bsc#1177397).
- net: ena: Change RSS related macros and variables names (bsc#1177397).
- net: ena: ethtool: Add new device statistics (bsc#1177397).
- net: ena: ethtool: add stats printing to XDP queues (bsc#1177397).
- net: ena: ethtool: convert stat_offset to 64 bit resolution (bsc#1177397).
- net: ena: Fix all static chekers' warnings (bsc#1177397).
- net: ena: Remove redundant print of placement policy (bsc#1177397).
- net: ena: xdp: add queue counters for xdp actions (bsc#1177397).
- netfilter: nat: can't use dst_hold on noref dst (bsc#1178878).
- net/mlx4_core: Fix init_hca fields offset (git-fixes).
- nfc: s3fwrn5: use signed integer for parsing GPIO numbers (git-fixes).
- NFS: mark nfsiod as CPU_INTENSIVE (bsc#1177304).
- NFS: only invalidate dentrys that are clearly invalid (bsc#1178669 bsc#1170139).
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (bsc#1170630).
- PCI: pci-hyperv: Fix build errors on non-SYSFS config (git-fixes).
- pinctrl: amd: fix incorrect way to disable debounce filter (git-fixes).
- pinctrl: amd: use higher precision for 512 RtcClk (git-fixes).
- pinctrl: aspeed: Fix GPI only function problem (git-fixes).
- platform/x86: toshiba_acpi: Fix the wrong variable assignment (git-fixes).
- powerpc/32: define helpers to get L1 cache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/64: flush_inval_dcache_range() becomes flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/64: reuse PPC32 static inline flush_dcache_range() (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc: Chunk calls to flush_dcache_range in arch_*_memory (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964 git-fixes).
- powerpc: define helpers to get L1 icache sizes (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/mm: Flush cache on memory hot(un)plug (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Add flush routines using new pmem store and sync instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Add new instructions for persistent storage and sync (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Avoid the barrier in flush routines (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Fix kernel crash due to wrong range value usage in flush_dcache_range (jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Initialize pmem device on newer hardware (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Restrict papr_scm to P8 and above (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- powerpc/pmem: Update ppc64 to use the new barrier instruction (jsc#SLE-16402 jsc#SLE-16497 bsc#1176109 ltc#187964).
- RDMA/bnxt_re: Fix lifetimes in bnxt_re_task (bsc#1111666)
- RDMA/bnxt_re: Fix Send Work Entry state check while polling completions (bsc#1111666)
- RDMA/bnxt_re: Fix sizeof mismatch for allocation of pbl_tbl. (bsc#1111666)
- RDMA/bnxt_re: Fix stack-out-of-bounds in bnxt_qplib_rcfw_send_message (bsc#1111666)
- RDMA/cma: add missed unregister_pernet_subsys in init failure (bsc#1111666)
- RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (bsc#1111666)
- RDMA/cma: Fix false error message (bsc#1111666)
- RDMA/cma: fix null-ptr-deref Read in cma_cleanup (bsc#1111666)
- RDMA/cma: Protect bind_list and listen_list while finding matching cm id (bsc#1111666)
- RDMA/cm: Fix checking for allowed duplicate listens (bsc#1111666)
- RDMA/cm: Remove a race freeing timewait_info (bsc#1111666)
- RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow (bsc#1111666)
- RDMA/core: Do not depend device ODP capabilities on kconfig option (bsc#1111666)
- RDMA/core: Fix invalid memory access in spec_filter_size (bsc#1111666)
- RDMA/core: Fix locking in ib_uverbs_event_read (bsc#1111666)
- RDMA/core: Fix protection fault in ib_mr_pool_destroy (bsc#1111666)
- RDMA/core: Fix race between destroy and release FD object (bsc#1111666)
- RDMA/core: Fix race when resolving IP address (bsc#1111666)
- RDMA/core: Prevent mixed use of FDs between shared ufiles (bsc#1111666)
- RDMA/cxgb3: Delete and properly mark unimplemented resize CQ function (bsc#1111666)
- RDMA: Directly cast the sockaddr union to sockaddr (bsc#1111666)
- RDMA/hns: Correct the value of HNS_ROCE_HEM_CHUNK_LEN (bsc#1111666)
- RDMA/hns: Correct typo of hns_roce_create_cq() (bsc#1111666)
- RDMA/hns: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/hns: Set the unsupported wr opcode (bsc#1111666)
- RDMA/i40iw: fix a potential NULL pointer dereference (bsc#1111666)
- RDMA/i40iw: Set queue pair state when being queried (bsc#1111666)
- RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (bsc#1111666)
- RDMA/ipoib: Remove check for ETH_SS_TEST (bsc#1111666)
- RDMA/ipoib: Return void from ipoib_ib_dev_stop() (bsc#1111666)
- RDMA/ipoib: Set rtnl_link_ops for ipoib interfaces (bsc#1111666)
- RDMA/iwcm: Fix a lock inversion issue (bsc#1111666)
- RDMA/iwcm: Fix iwcm work deallocation (bsc#1111666)
- RDMA/iwcm: move iw_rem_ref() calls out of spinlock (bsc#1111666)
- RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case (bsc#1111666)
- RDMA/iw_cxgb4: Fix the unchecked ep dereference (bsc#1111666)
- RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads() (bsc#1111666)
- RDMA/mlx4: Initialize ib_spec on the stack (bsc#1111666)
- RDMA/mlx4: Read pkey table length instead of hardcoded value (bsc#1111666)
- RDMA/mlx5: Clear old rate limit when closing QP (bsc#1111666)
- RDMA/mlx5: Delete unreachable handle_atomic code by simplifying SW completion (bsc#1111666)
- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (bsc#1111666)
- RDMA/mlx5: Fix a race with mlx5_ib_update_xlt on an implicit MR (bsc#1111666)
- RDMA/mlx5: Fix function name typo 'fileds' -&gt; 'fields' (bsc#1111666)
- RDMA/mlx5: Return proper error value (bsc#1111666)
- RDMA/mlx5: Set GRH fields in query QP on RoCE (bsc#1111666)
- RDMA/mlx5: Verify that QP is created with RQ or SQ (bsc#1111666)
- RDMA/nes: Remove second wait queue initialization call (bsc#1111666)
- RDMA/netlink: Do not always generate an ACK for some netlink operations (bsc#1111666)
- RDMA/ocrdma: Fix out of bounds index check in query pkey (bsc#1111666)
- RDMA/ocrdma: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() (bsc#1111666)
- RDMA/qedr: Endianness warnings cleanup (bsc#1111666)
- RDMA/qedr: Fix doorbell setting (bsc#1111666)
- RDMA/qedr: Fix memory leak in user qp and mr (bsc#1111666)
- RDMA/qedr: Fix reported firmware version (bsc#1111666)
- RDMA/qedr: Fix use of uninitialized field (bsc#1111666)
- RDMA/qedr: Remove unsupported modify_port callback (bsc#1111666)
- RDMA/qedr: SRQ's bug fixes (bsc#1111666)
- RDMA/qib: Delete extra line (bsc#1111666)
- RDMA/qib: Remove all occurrences of BUG_ON() (bsc#1111666)
- RDMA/qib: Validate -&gt;show()/store() callbacks before calling them (bsc#1111666)
- RDMA/rxe: Drop pointless checks in rxe_init_ports (bsc#1111666)
- RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM (bsc#1111666)
- RDMA/rxe: Fix configuration of atomic queue pair attributes (bsc#1111666)
- RDMA/rxe: Fix memleak in rxe_mem_init_user (bsc#1111666)
- RDMA/rxe: Fix slab-out-bounds access which lead to kernel crash later (bsc#1111666)
- RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq (bsc#1111666)
- RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars (bsc#1111666)
- RDMA/rxe: Prevent access to wr-&gt;next ptr afrer wr is posted to send queue (bsc#1111666)
- RDMA/rxe: Remove unused rxe_mem_map_pages (bsc#1111666)
- RDMA/rxe: Remove useless rxe_init_device_param assignments (bsc#1111666)
- RDMA/rxe: Return void from rxe_init_port_param() (bsc#1111666)
- RDMA/rxe: Return void from rxe_mem_init_dma() (bsc#1111666)
- RDMA/rxe: Set default vendor ID (bsc#1111666)
- RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices (bsc#1111666)
- RDMA/rxe: Skip dgid check in loopback mode (bsc#1111666)
- RDMA/rxe: Use for_each_sg_page iterator on umem SGL (bsc#1111666)
- RDMA/srp: Rework SCSI device reset handling (bsc#1111666)
- RDMA/srpt: Fix typo in srpt_unregister_mad_agent docstring (bsc#1111666)
- RDMA/srpt: Report the SCSI residual to the initiator (bsc#1111666)
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (bsc#1111666)
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (bsc#1111666)
- RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated (bsc#1111666)
- RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove (bsc#1111666)
- RDMA/vmw_pvrdma: Use atomic memory allocation in create AH (bsc#1111666)
- reboot: fix overflow parsing reboot cpu number (bsc#1179421).
- regulator: avoid resolve_supply() infinite recursion (git-fixes).
- regulator: fix memory leak with repeated set_machine_constraints() (git-fixes).
- regulator: ti-abb: Fix array out of bound read access on the first transition (git-fixes).
- regulator: workaround self-referent regulators (git-fixes).
- Revert 'cdc-acm: hardening against malicious devices' (git-fixes).
- Revert 'kernel/reboot.c: convert simple_strtoul to kstrtoint' (bsc#1179418).
- RMDA/cm: Fix missing ib_cm_destroy_id() in ib_cm_insert_listen() (bsc#1111666)
- rxe: correctly calculate iCRC for unaligned payloads (bsc#1111666)
- rxe: fix error completion wr_id and qp_num (bsc#1111666)
- s390/cio: add cond_resched() in the slow_eval_known_fn() loop (bsc#1177805 LTC#188737).
- s390/cpum_cf,perf: change DFLT_CCERROR counter name (bsc#1175916 LTC#187937).
- s390/dasd: Fix zero write for FBA devices (bsc#1177808 LTC#188739).
- s390: kernel/uv: handle length extension properly (bsc#1178940 LTC#189323).
- sched/core: Fix PI boosting between RT and DEADLINE tasks (bsc#1112178).
- sched/x86: SaveFLAGS on context switch (bsc#1112178).
- scripts/git_sort/git_sort.py: add ceph maintainers git tree
- scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported (git-fixes).
- scsi: RDMA/srpt: Fix a credit leak for aborted commands (bsc#1111666)
- Staging: rtl8188eu: rtw_mlme: Fix uninitialized variable authmode (git-fixes).
- staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids (git-fixes).
- time: Prevent undefined behaviour in timespec64_to_ns() (git-fixes).
- tracing: Fix out of bounds write in get_trace_buf (bsc#1179403).
- tty: serial: imx: keep console clocks always on (git-fixes).
- Update references in patches.suse/net-smc-tolerate-future-smcd-versions (bsc#1172542 LTC#186070 git-fixes).
- USB: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode (git-fixes).
- USB: core: driver: fix stray tabs in error messages (git-fixes).
- USB: core: Fix regression in Hercules audio card (git-fixes).
- USB: gadget: Fix memleak in gadgetfs_fill_super (git-fixes).
- USB: gadget: f_midi: Fix memleak in f_midi_alloc (git-fixes).
- USB: host: ehci-tegra: Fix error handling in tegra_ehci_probe() (git-fixes).
- USB: host: xhci-mtk: avoid runtime suspend when removing hcd (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race (git-fixes).
- USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters (git-fixes).
- USB: serial: option: add Cellient MPL200 card (git-fixes).
- USB: serial: option: Add Telit FT980-KS composition (git-fixes).
- USB: serial: pl2303: add device-id for HP GC device (git-fixes).
- usermodehelper: reset umask to default before executing user process (bsc#1179406).
- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- x86/hyperv: Clarify comment on x2apic mode (git-fixes).
- x86/hyperv: Make vapic support x2apic mode (git-fixes).
- x86/microcode/intel: Check patch signature before saving microcode for early loading (bsc#1112178).
- x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect (git-fixes).
- x86/PCI: Fix intel_mid_pci.c build error when ACPI is not enabled (git-fixes).
- x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (git-fixes).
- x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP (bsc#1112178).
- x86/sysfb_efi: Add quirks for some devices with swapped width and height (git-fixes).
- xfrm: Fix memleak on xfrm state destroy (bsc#1158775).
- xfs: revert 'xfs: fix rmap key and record comparison functions' (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-12-09"/>
	<updated date="2020-12-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1067665">SUSE bug 1067665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158775">SUSE bug 1158775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170139">SUSE bug 1170139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170630">SUSE bug 1170630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172542">SUSE bug 1172542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174726">SUSE bug 1174726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175916">SUSE bug 1175916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176109">SUSE bug 1176109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177304">SUSE bug 1177304</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177397">SUSE bug 1177397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177805">SUSE bug 1177805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177808">SUSE bug 1177808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177819">SUSE bug 1177819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177820">SUSE bug 1177820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178182">SUSE bug 1178182</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178589">SUSE bug 1178589</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178635">SUSE bug 1178635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178669">SUSE bug 1178669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178838">SUSE bug 1178838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178853">SUSE bug 1178853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178854">SUSE bug 1178854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178878">SUSE bug 1178878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178886">SUSE bug 1178886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178897">SUSE bug 1178897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178940">SUSE bug 1178940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178962">SUSE bug 1178962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179107">SUSE bug 1179107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179140">SUSE bug 1179140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179141">SUSE bug 1179141</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179211">SUSE bug 1179211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179213">SUSE bug 1179213</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179259">SUSE bug 1179259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179403">SUSE bug 1179403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179406">SUSE bug 1179406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179418">SUSE bug 1179418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179421">SUSE bug 1179421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179424">SUSE bug 1179424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179426">SUSE bug 1179426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179427">SUSE bug 1179427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179429">SUSE bug 1179429</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15436/">CVE-2020-15436</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15437/">CVE-2020-15437</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25669/">CVE-2020-25669</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27777/">CVE-2020-27777</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28915/">CVE-2020-28915</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28974/">CVE-2020-28974</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29371/">CVE-2020-29371</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501625" comment="cluster-md-kmp-default-4.12.14-197.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501626" comment="dlm-kmp-default-4.12.14-197.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501627" comment="gfs2-kmp-default-4.12.14-197.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501628" comment="ocfs2-kmp-default-4.12.14-197.75.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139134" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1046303" ref_url="https://bugzilla.suse.com/1046303" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050549" ref_url="https://bugzilla.suse.com/1050549" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1051858" ref_url="https://bugzilla.suse.com/1051858" source="BUGZILLA"/>
		<reference ref_id="1061840" ref_url="https://bugzilla.suse.com/1061840" source="BUGZILLA"/>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1083647" ref_url="https://bugzilla.suse.com/1083647" source="BUGZILLA"/>
		<reference ref_id="1085030" ref_url="https://bugzilla.suse.com/1085030" source="BUGZILLA"/>
		<reference ref_id="1086301" ref_url="https://bugzilla.suse.com/1086301" source="BUGZILLA"/>
		<reference ref_id="1086313" ref_url="https://bugzilla.suse.com/1086313" source="BUGZILLA"/>
		<reference ref_id="1086314" ref_url="https://bugzilla.suse.com/1086314" source="BUGZILLA"/>
		<reference ref_id="1088810" ref_url="https://bugzilla.suse.com/1088810" source="BUGZILLA"/>
		<reference ref_id="1090888" ref_url="https://bugzilla.suse.com/1090888" source="BUGZILLA"/>
		<reference ref_id="1103989" ref_url="https://bugzilla.suse.com/1103989" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1105392" ref_url="https://bugzilla.suse.com/1105392" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1112504" ref_url="https://bugzilla.suse.com/1112504" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1115026" ref_url="https://bugzilla.suse.com/1115026" source="BUGZILLA"/>
		<reference ref_id="1118338" ref_url="https://bugzilla.suse.com/1118338" source="BUGZILLA"/>
		<reference ref_id="1118661" ref_url="https://bugzilla.suse.com/1118661" source="BUGZILLA"/>
		<reference ref_id="1123328" ref_url="https://bugzilla.suse.com/1123328" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1127682" ref_url="https://bugzilla.suse.com/1127682" source="BUGZILLA"/>
		<reference ref_id="1129551" ref_url="https://bugzilla.suse.com/1129551" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1133147" ref_url="https://bugzilla.suse.com/1133147" source="BUGZILLA"/>
		<reference ref_id="1134973" ref_url="https://bugzilla.suse.com/1134973" source="BUGZILLA"/>
		<reference ref_id="1140025" ref_url="https://bugzilla.suse.com/1140025" source="BUGZILLA"/>
		<reference ref_id="1142685" ref_url="https://bugzilla.suse.com/1142685" source="BUGZILLA"/>
		<reference ref_id="1143959" ref_url="https://bugzilla.suse.com/1143959" source="BUGZILLA"/>
		<reference ref_id="1144162" ref_url="https://bugzilla.suse.com/1144162" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1146519" ref_url="https://bugzilla.suse.com/1146519" source="BUGZILLA"/>
		<reference ref_id="1146544" ref_url="https://bugzilla.suse.com/1146544" source="BUGZILLA"/>
		<reference ref_id="1151548" ref_url="https://bugzilla.suse.com/1151548" source="BUGZILLA"/>
		<reference ref_id="1151910" ref_url="https://bugzilla.suse.com/1151910" source="BUGZILLA"/>
		<reference ref_id="1151927" ref_url="https://bugzilla.suse.com/1151927" source="BUGZILLA"/>
		<reference ref_id="1152107" ref_url="https://bugzilla.suse.com/1152107" source="BUGZILLA"/>
		<reference ref_id="1152631" ref_url="https://bugzilla.suse.com/1152631" source="BUGZILLA"/>
		<reference ref_id="1153535" ref_url="https://bugzilla.suse.com/1153535" source="BUGZILLA"/>
		<reference ref_id="1153917" ref_url="https://bugzilla.suse.com/1153917" source="BUGZILLA"/>
		<reference ref_id="1154243" ref_url="https://bugzilla.suse.com/1154243" source="BUGZILLA"/>
		<reference ref_id="1154601" ref_url="https://bugzilla.suse.com/1154601" source="BUGZILLA"/>
		<reference ref_id="1154768" ref_url="https://bugzilla.suse.com/1154768" source="BUGZILLA"/>
		<reference ref_id="1154916" ref_url="https://bugzilla.suse.com/1154916" source="BUGZILLA"/>
		<reference ref_id="1155331" ref_url="https://bugzilla.suse.com/1155331" source="BUGZILLA"/>
		<reference ref_id="1155334" ref_url="https://bugzilla.suse.com/1155334" source="BUGZILLA"/>
		<reference ref_id="1155689" ref_url="https://bugzilla.suse.com/1155689" source="BUGZILLA"/>
		<reference ref_id="1156259" ref_url="https://bugzilla.suse.com/1156259" source="BUGZILLA"/>
		<reference ref_id="1156286" ref_url="https://bugzilla.suse.com/1156286" source="BUGZILLA"/>
		<reference ref_id="1156462" ref_url="https://bugzilla.suse.com/1156462" source="BUGZILLA"/>
		<reference ref_id="1157155" ref_url="https://bugzilla.suse.com/1157155" source="BUGZILLA"/>
		<reference ref_id="1157157" ref_url="https://bugzilla.suse.com/1157157" source="BUGZILLA"/>
		<reference ref_id="1157169" ref_url="https://bugzilla.suse.com/1157169" source="BUGZILLA"/>
		<reference ref_id="1157303" ref_url="https://bugzilla.suse.com/1157303" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1157480" ref_url="https://bugzilla.suse.com/1157480" source="BUGZILLA"/>
		<reference ref_id="1157692" ref_url="https://bugzilla.suse.com/1157692" source="BUGZILLA"/>
		<reference ref_id="1157853" ref_url="https://bugzilla.suse.com/1157853" source="BUGZILLA"/>
		<reference ref_id="1157895" ref_url="https://bugzilla.suse.com/1157895" source="BUGZILLA"/>
		<reference ref_id="1157908" ref_url="https://bugzilla.suse.com/1157908" source="BUGZILLA"/>
		<reference ref_id="1157966" ref_url="https://bugzilla.suse.com/1157966" source="BUGZILLA"/>
		<reference ref_id="1158013" ref_url="https://bugzilla.suse.com/1158013" source="BUGZILLA"/>
		<reference ref_id="1158021" ref_url="https://bugzilla.suse.com/1158021" source="BUGZILLA"/>
		<reference ref_id="1158026" ref_url="https://bugzilla.suse.com/1158026" source="BUGZILLA"/>
		<reference ref_id="1158071" ref_url="https://bugzilla.suse.com/1158071" source="BUGZILLA"/>
		<reference ref_id="1158094" ref_url="https://bugzilla.suse.com/1158094" source="BUGZILLA"/>
		<reference ref_id="1158132" ref_url="https://bugzilla.suse.com/1158132" source="BUGZILLA"/>
		<reference ref_id="1158381" ref_url="https://bugzilla.suse.com/1158381" source="BUGZILLA"/>
		<reference ref_id="1158533" ref_url="https://bugzilla.suse.com/1158533" source="BUGZILLA"/>
		<reference ref_id="1158637" ref_url="https://bugzilla.suse.com/1158637" source="BUGZILLA"/>
		<reference ref_id="1158638" ref_url="https://bugzilla.suse.com/1158638" source="BUGZILLA"/>
		<reference ref_id="1158639" ref_url="https://bugzilla.suse.com/1158639" source="BUGZILLA"/>
		<reference ref_id="1158640" ref_url="https://bugzilla.suse.com/1158640" source="BUGZILLA"/>
		<reference ref_id="1158641" ref_url="https://bugzilla.suse.com/1158641" source="BUGZILLA"/>
		<reference ref_id="1158643" ref_url="https://bugzilla.suse.com/1158643" source="BUGZILLA"/>
		<reference ref_id="1158644" ref_url="https://bugzilla.suse.com/1158644" source="BUGZILLA"/>
		<reference ref_id="1158645" ref_url="https://bugzilla.suse.com/1158645" source="BUGZILLA"/>
		<reference ref_id="1158646" ref_url="https://bugzilla.suse.com/1158646" source="BUGZILLA"/>
		<reference ref_id="1158647" ref_url="https://bugzilla.suse.com/1158647" source="BUGZILLA"/>
		<reference ref_id="1158649" ref_url="https://bugzilla.suse.com/1158649" source="BUGZILLA"/>
		<reference ref_id="1158651" ref_url="https://bugzilla.suse.com/1158651" source="BUGZILLA"/>
		<reference ref_id="1158652" ref_url="https://bugzilla.suse.com/1158652" source="BUGZILLA"/>
		<reference ref_id="1158819" ref_url="https://bugzilla.suse.com/1158819" source="BUGZILLA"/>
		<reference ref_id="1158823" ref_url="https://bugzilla.suse.com/1158823" source="BUGZILLA"/>
		<reference ref_id="1158824" ref_url="https://bugzilla.suse.com/1158824" source="BUGZILLA"/>
		<reference ref_id="1158827" ref_url="https://bugzilla.suse.com/1158827" source="BUGZILLA"/>
		<reference ref_id="1158834" ref_url="https://bugzilla.suse.com/1158834" source="BUGZILLA"/>
		<reference ref_id="1158893" ref_url="https://bugzilla.suse.com/1158893" source="BUGZILLA"/>
		<reference ref_id="1158900" ref_url="https://bugzilla.suse.com/1158900" source="BUGZILLA"/>
		<reference ref_id="1158903" ref_url="https://bugzilla.suse.com/1158903" source="BUGZILLA"/>
		<reference ref_id="1158904" ref_url="https://bugzilla.suse.com/1158904" source="BUGZILLA"/>
		<reference ref_id="1158954" ref_url="https://bugzilla.suse.com/1158954" source="BUGZILLA"/>
		<reference ref_id="1159024" ref_url="https://bugzilla.suse.com/1159024" source="BUGZILLA"/>
		<reference ref_id="1159028" ref_url="https://bugzilla.suse.com/1159028" source="BUGZILLA"/>
		<reference ref_id="1159271" ref_url="https://bugzilla.suse.com/1159271" source="BUGZILLA"/>
		<reference ref_id="1159297" ref_url="https://bugzilla.suse.com/1159297" source="BUGZILLA"/>
		<reference ref_id="1159377" ref_url="https://bugzilla.suse.com/1159377" source="BUGZILLA"/>
		<reference ref_id="1159394" ref_url="https://bugzilla.suse.com/1159394" source="BUGZILLA"/>
		<reference ref_id="1159483" ref_url="https://bugzilla.suse.com/1159483" source="BUGZILLA"/>
		<reference ref_id="1159484" ref_url="https://bugzilla.suse.com/1159484" source="BUGZILLA"/>
		<reference ref_id="1159500" ref_url="https://bugzilla.suse.com/1159500" source="BUGZILLA"/>
		<reference ref_id="1159569" ref_url="https://bugzilla.suse.com/1159569" source="BUGZILLA"/>
		<reference ref_id="1159588" ref_url="https://bugzilla.suse.com/1159588" source="BUGZILLA"/>
		<reference ref_id="1159841" ref_url="https://bugzilla.suse.com/1159841" source="BUGZILLA"/>
		<reference ref_id="1159908" ref_url="https://bugzilla.suse.com/1159908" source="BUGZILLA"/>
		<reference ref_id="1159909" ref_url="https://bugzilla.suse.com/1159909" source="BUGZILLA"/>
		<reference ref_id="1159910" ref_url="https://bugzilla.suse.com/1159910" source="BUGZILLA"/>
		<reference ref_id="1159911" ref_url="https://bugzilla.suse.com/1159911" source="BUGZILLA"/>
		<reference ref_id="1159955" ref_url="https://bugzilla.suse.com/1159955" source="BUGZILLA"/>
		<reference ref_id="1160147" ref_url="https://bugzilla.suse.com/1160147" source="BUGZILLA"/>
		<reference ref_id="1160195" ref_url="https://bugzilla.suse.com/1160195" source="BUGZILLA"/>
		<reference ref_id="1160210" ref_url="https://bugzilla.suse.com/1160210" source="BUGZILLA"/>
		<reference ref_id="1160211" ref_url="https://bugzilla.suse.com/1160211" source="BUGZILLA"/>
		<reference ref_id="1160218" ref_url="https://bugzilla.suse.com/1160218" source="BUGZILLA"/>
		<reference ref_id="1160433" ref_url="https://bugzilla.suse.com/1160433" source="BUGZILLA"/>
		<reference ref_id="1160442" ref_url="https://bugzilla.suse.com/1160442" source="BUGZILLA"/>
		<reference ref_id="1160469" ref_url="https://bugzilla.suse.com/1160469" source="BUGZILLA"/>
		<reference ref_id="1160470" ref_url="https://bugzilla.suse.com/1160470" source="BUGZILLA"/>
		<reference ref_id="1160476" ref_url="https://bugzilla.suse.com/1160476" source="BUGZILLA"/>
		<reference ref_id="1160560" ref_url="https://bugzilla.suse.com/1160560" source="BUGZILLA"/>
		<reference ref_id="1160618" ref_url="https://bugzilla.suse.com/1160618" source="BUGZILLA"/>
		<reference ref_id="1160678" ref_url="https://bugzilla.suse.com/1160678" source="BUGZILLA"/>
		<reference ref_id="1160755" ref_url="https://bugzilla.suse.com/1160755" source="BUGZILLA"/>
		<reference ref_id="1160756" ref_url="https://bugzilla.suse.com/1160756" source="BUGZILLA"/>
		<reference ref_id="1160784" ref_url="https://bugzilla.suse.com/1160784" source="BUGZILLA"/>
		<reference ref_id="1160787" ref_url="https://bugzilla.suse.com/1160787" source="BUGZILLA"/>
		<reference ref_id="1160802" ref_url="https://bugzilla.suse.com/1160802" source="BUGZILLA"/>
		<reference ref_id="1160803" ref_url="https://bugzilla.suse.com/1160803" source="BUGZILLA"/>
		<reference ref_id="1160804" ref_url="https://bugzilla.suse.com/1160804" source="BUGZILLA"/>
		<reference ref_id="1160917" ref_url="https://bugzilla.suse.com/1160917" source="BUGZILLA"/>
		<reference ref_id="1160966" ref_url="https://bugzilla.suse.com/1160966" source="BUGZILLA"/>
		<reference ref_id="1160979" ref_url="https://bugzilla.suse.com/1160979" source="BUGZILLA"/>
		<reference ref_id="1161087" ref_url="https://bugzilla.suse.com/1161087" source="BUGZILLA"/>
		<reference ref_id="1161243" ref_url="https://bugzilla.suse.com/1161243" source="BUGZILLA"/>
		<reference ref_id="1161360" ref_url="https://bugzilla.suse.com/1161360" source="BUGZILLA"/>
		<reference ref_id="1161472" ref_url="https://bugzilla.suse.com/1161472" source="BUGZILLA"/>
		<reference ref_id="1161514" ref_url="https://bugzilla.suse.com/1161514" source="BUGZILLA"/>
		<reference ref_id="1161518" ref_url="https://bugzilla.suse.com/1161518" source="BUGZILLA"/>
		<reference ref_id="1161522" ref_url="https://bugzilla.suse.com/1161522" source="BUGZILLA"/>
		<reference ref_id="1161523" ref_url="https://bugzilla.suse.com/1161523" source="BUGZILLA"/>
		<reference ref_id="1161549" ref_url="https://bugzilla.suse.com/1161549" source="BUGZILLA"/>
		<reference ref_id="1161552" ref_url="https://bugzilla.suse.com/1161552" source="BUGZILLA"/>
		<reference ref_id="1161674" ref_url="https://bugzilla.suse.com/1161674" source="BUGZILLA"/>
		<reference ref_id="1161702" ref_url="https://bugzilla.suse.com/1161702" source="BUGZILLA"/>
		<reference ref_id="1161907" ref_url="https://bugzilla.suse.com/1161907" source="BUGZILLA"/>
		<reference ref_id="1161931" ref_url="https://bugzilla.suse.com/1161931" source="BUGZILLA"/>
		<reference ref_id="1161933" ref_url="https://bugzilla.suse.com/1161933" source="BUGZILLA"/>
		<reference ref_id="1161934" ref_url="https://bugzilla.suse.com/1161934" source="BUGZILLA"/>
		<reference ref_id="1161935" ref_url="https://bugzilla.suse.com/1161935" source="BUGZILLA"/>
		<reference ref_id="1161936" ref_url="https://bugzilla.suse.com/1161936" source="BUGZILLA"/>
		<reference ref_id="1161937" ref_url="https://bugzilla.suse.com/1161937" source="BUGZILLA"/>
		<reference ref_id="1162028" ref_url="https://bugzilla.suse.com/1162028" source="BUGZILLA"/>
		<reference ref_id="1162067" ref_url="https://bugzilla.suse.com/1162067" source="BUGZILLA"/>
		<reference ref_id="1162109" ref_url="https://bugzilla.suse.com/1162109" source="BUGZILLA"/>
		<reference ref_id="1162139" ref_url="https://bugzilla.suse.com/1162139" source="BUGZILLA"/>
		<reference ref_id="1162557" ref_url="https://bugzilla.suse.com/1162557" source="BUGZILLA"/>
		<reference ref_id="1162617" ref_url="https://bugzilla.suse.com/1162617" source="BUGZILLA"/>
		<reference ref_id="1162618" ref_url="https://bugzilla.suse.com/1162618" source="BUGZILLA"/>
		<reference ref_id="1162619" ref_url="https://bugzilla.suse.com/1162619" source="BUGZILLA"/>
		<reference ref_id="1162623" ref_url="https://bugzilla.suse.com/1162623" source="BUGZILLA"/>
		<reference ref_id="1162928" ref_url="https://bugzilla.suse.com/1162928" source="BUGZILLA"/>
		<reference ref_id="1162943" ref_url="https://bugzilla.suse.com/1162943" source="BUGZILLA"/>
		<reference ref_id="1163206" ref_url="https://bugzilla.suse.com/1163206" source="BUGZILLA"/>
		<reference ref_id="1163383" ref_url="https://bugzilla.suse.com/1163383" source="BUGZILLA"/>
		<reference ref_id="1163384" ref_url="https://bugzilla.suse.com/1163384" source="BUGZILLA"/>
		<reference ref_id="1163762" ref_url="https://bugzilla.suse.com/1163762" source="BUGZILLA"/>
		<reference ref_id="1163774" ref_url="https://bugzilla.suse.com/1163774" source="BUGZILLA"/>
		<reference ref_id="1163836" ref_url="https://bugzilla.suse.com/1163836" source="BUGZILLA"/>
		<reference ref_id="1163840" ref_url="https://bugzilla.suse.com/1163840" source="BUGZILLA"/>
		<reference ref_id="1163841" ref_url="https://bugzilla.suse.com/1163841" source="BUGZILLA"/>
		<reference ref_id="1163842" ref_url="https://bugzilla.suse.com/1163842" source="BUGZILLA"/>
		<reference ref_id="1163843" ref_url="https://bugzilla.suse.com/1163843" source="BUGZILLA"/>
		<reference ref_id="1163844" ref_url="https://bugzilla.suse.com/1163844" source="BUGZILLA"/>
		<reference ref_id="1163845" ref_url="https://bugzilla.suse.com/1163845" source="BUGZILLA"/>
		<reference ref_id="1163846" ref_url="https://bugzilla.suse.com/1163846" source="BUGZILLA"/>
		<reference ref_id="1163849" ref_url="https://bugzilla.suse.com/1163849" source="BUGZILLA"/>
		<reference ref_id="1163850" ref_url="https://bugzilla.suse.com/1163850" source="BUGZILLA"/>
		<reference ref_id="1163851" ref_url="https://bugzilla.suse.com/1163851" source="BUGZILLA"/>
		<reference ref_id="1163852" ref_url="https://bugzilla.suse.com/1163852" source="BUGZILLA"/>
		<reference ref_id="1163853" ref_url="https://bugzilla.suse.com/1163853" source="BUGZILLA"/>
		<reference ref_id="1163855" ref_url="https://bugzilla.suse.com/1163855" source="BUGZILLA"/>
		<reference ref_id="1163856" ref_url="https://bugzilla.suse.com/1163856" source="BUGZILLA"/>
		<reference ref_id="1163857" ref_url="https://bugzilla.suse.com/1163857" source="BUGZILLA"/>
		<reference ref_id="1163858" ref_url="https://bugzilla.suse.com/1163858" source="BUGZILLA"/>
		<reference ref_id="1163859" ref_url="https://bugzilla.suse.com/1163859" source="BUGZILLA"/>
		<reference ref_id="1163860" ref_url="https://bugzilla.suse.com/1163860" source="BUGZILLA"/>
		<reference ref_id="1163861" ref_url="https://bugzilla.suse.com/1163861" source="BUGZILLA"/>
		<reference ref_id="1163862" ref_url="https://bugzilla.suse.com/1163862" source="BUGZILLA"/>
		<reference ref_id="1163863" ref_url="https://bugzilla.suse.com/1163863" source="BUGZILLA"/>
		<reference ref_id="1163867" ref_url="https://bugzilla.suse.com/1163867" source="BUGZILLA"/>
		<reference ref_id="1163869" ref_url="https://bugzilla.suse.com/1163869" source="BUGZILLA"/>
		<reference ref_id="1163880" ref_url="https://bugzilla.suse.com/1163880" source="BUGZILLA"/>
		<reference ref_id="1163971" ref_url="https://bugzilla.suse.com/1163971" source="BUGZILLA"/>
		<reference ref_id="1164051" ref_url="https://bugzilla.suse.com/1164051" source="BUGZILLA"/>
		<reference ref_id="1164069" ref_url="https://bugzilla.suse.com/1164069" source="BUGZILLA"/>
		<reference ref_id="1164098" ref_url="https://bugzilla.suse.com/1164098" source="BUGZILLA"/>
		<reference ref_id="1164115" ref_url="https://bugzilla.suse.com/1164115" source="BUGZILLA"/>
		<reference ref_id="1164314" ref_url="https://bugzilla.suse.com/1164314" source="BUGZILLA"/>
		<reference ref_id="1164315" ref_url="https://bugzilla.suse.com/1164315" source="BUGZILLA"/>
		<reference ref_id="1164388" ref_url="https://bugzilla.suse.com/1164388" source="BUGZILLA"/>
		<reference ref_id="1164471" ref_url="https://bugzilla.suse.com/1164471" source="BUGZILLA"/>
		<reference ref_id="1164598" ref_url="https://bugzilla.suse.com/1164598" source="BUGZILLA"/>
		<reference ref_id="1164632" ref_url="https://bugzilla.suse.com/1164632" source="BUGZILLA"/>
		<reference ref_id="1164705" ref_url="https://bugzilla.suse.com/1164705" source="BUGZILLA"/>
		<reference ref_id="1164712" ref_url="https://bugzilla.suse.com/1164712" source="BUGZILLA"/>
		<reference ref_id="1164727" ref_url="https://bugzilla.suse.com/1164727" source="BUGZILLA"/>
		<reference ref_id="1164728" ref_url="https://bugzilla.suse.com/1164728" source="BUGZILLA"/>
		<reference ref_id="1164729" ref_url="https://bugzilla.suse.com/1164729" source="BUGZILLA"/>
		<reference ref_id="1164730" ref_url="https://bugzilla.suse.com/1164730" source="BUGZILLA"/>
		<reference ref_id="1164731" ref_url="https://bugzilla.suse.com/1164731" source="BUGZILLA"/>
		<reference ref_id="1164732" ref_url="https://bugzilla.suse.com/1164732" source="BUGZILLA"/>
		<reference ref_id="1164733" ref_url="https://bugzilla.suse.com/1164733" source="BUGZILLA"/>
		<reference ref_id="1164734" ref_url="https://bugzilla.suse.com/1164734" source="BUGZILLA"/>
		<reference ref_id="1164735" ref_url="https://bugzilla.suse.com/1164735" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14615" ref_url="https://www.suse.com/security/cve/CVE-2019-14615/" source="CVE"/>
		<reference ref_id="CVE-2019-14896" ref_url="https://www.suse.com/security/cve/CVE-2019-14896/" source="CVE"/>
		<reference ref_id="CVE-2019-14897" ref_url="https://www.suse.com/security/cve/CVE-2019-14897/" source="CVE"/>
		<reference ref_id="CVE-2019-15213" ref_url="https://www.suse.com/security/cve/CVE-2019-15213/" source="CVE"/>
		<reference ref_id="CVE-2019-16746" ref_url="https://www.suse.com/security/cve/CVE-2019-16746/" source="CVE"/>
		<reference ref_id="CVE-2019-16994" ref_url="https://www.suse.com/security/cve/CVE-2019-16994/" source="CVE"/>
		<reference ref_id="CVE-2019-18808" ref_url="https://www.suse.com/security/cve/CVE-2019-18808/" source="CVE"/>
		<reference ref_id="CVE-2019-19036" ref_url="https://www.suse.com/security/cve/CVE-2019-19036/" source="CVE"/>
		<reference ref_id="CVE-2019-19045" ref_url="https://www.suse.com/security/cve/CVE-2019-19045/" source="CVE"/>
		<reference ref_id="CVE-2019-19051" ref_url="https://www.suse.com/security/cve/CVE-2019-19051/" source="CVE"/>
		<reference ref_id="CVE-2019-19054" ref_url="https://www.suse.com/security/cve/CVE-2019-19054/" source="CVE"/>
		<reference ref_id="CVE-2019-19066" ref_url="https://www.suse.com/security/cve/CVE-2019-19066/" source="CVE"/>
		<reference ref_id="CVE-2019-19318" ref_url="https://www.suse.com/security/cve/CVE-2019-19318/" source="CVE"/>
		<reference ref_id="CVE-2019-19319" ref_url="https://www.suse.com/security/cve/CVE-2019-19319/" source="CVE"/>
		<reference ref_id="CVE-2019-19332" ref_url="https://www.suse.com/security/cve/CVE-2019-19332/" source="CVE"/>
		<reference ref_id="CVE-2019-19338" ref_url="https://www.suse.com/security/cve/CVE-2019-19338/" source="CVE"/>
		<reference ref_id="CVE-2019-19447" ref_url="https://www.suse.com/security/cve/CVE-2019-19447/" source="CVE"/>
		<reference ref_id="CVE-2019-19523" ref_url="https://www.suse.com/security/cve/CVE-2019-19523/" source="CVE"/>
		<reference ref_id="CVE-2019-19526" ref_url="https://www.suse.com/security/cve/CVE-2019-19526/" source="CVE"/>
		<reference ref_id="CVE-2019-19527" ref_url="https://www.suse.com/security/cve/CVE-2019-19527/" source="CVE"/>
		<reference ref_id="CVE-2019-19532" ref_url="https://www.suse.com/security/cve/CVE-2019-19532/" source="CVE"/>
		<reference ref_id="CVE-2019-19533" ref_url="https://www.suse.com/security/cve/CVE-2019-19533/" source="CVE"/>
		<reference ref_id="CVE-2019-19535" ref_url="https://www.suse.com/security/cve/CVE-2019-19535/" source="CVE"/>
		<reference ref_id="CVE-2019-19537" ref_url="https://www.suse.com/security/cve/CVE-2019-19537/" source="CVE"/>
		<reference ref_id="CVE-2019-19767" ref_url="https://www.suse.com/security/cve/CVE-2019-19767/" source="CVE"/>
		<reference ref_id="CVE-2019-19927" ref_url="https://www.suse.com/security/cve/CVE-2019-19927/" source="CVE"/>
		<reference ref_id="CVE-2019-19965" ref_url="https://www.suse.com/security/cve/CVE-2019-19965/" source="CVE"/>
		<reference ref_id="CVE-2019-19966" ref_url="https://www.suse.com/security/cve/CVE-2019-19966/" source="CVE"/>
		<reference ref_id="CVE-2019-20054" ref_url="https://www.suse.com/security/cve/CVE-2019-20054/" source="CVE"/>
		<reference ref_id="CVE-2019-20095" ref_url="https://www.suse.com/security/cve/CVE-2019-20095/" source="CVE"/>
		<reference ref_id="CVE-2019-20096" ref_url="https://www.suse.com/security/cve/CVE-2019-20096/" source="CVE"/>
		<reference ref_id="CVE-2020-2732" ref_url="https://www.suse.com/security/cve/CVE-2020-2732/" source="CVE"/>
		<reference ref_id="CVE-2020-7053" ref_url="https://www.suse.com/security/cve/CVE-2020-7053/" source="CVE"/>
		<reference ref_id="CVE-2020-8428" ref_url="https://www.suse.com/security/cve/CVE-2020-8428/" source="CVE"/>
		<reference ref_id="CVE-2020-8648" ref_url="https://www.suse.com/security/cve/CVE-2020-8648/" source="CVE"/>
		<reference ref_id="CVE-2020-8992" ref_url="https://www.suse.com/security/cve/CVE-2020-8992/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006565.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-8992: An issue was discovered in ext4_protect_reserved_inode in fs/ext4/block_validity.c that allowed attackers to cause a soft lockup via a crafted journal size (bnc#1164069).
- CVE-2020-8648: There was a use-after-free vulnerability in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bnc#1162928).
- CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c. It did not check the length of variable elements in a beacon head, leading to a buffer overflow (bnc#1152107).
- CVE-2020-8428: There was a use-after-free bug in fs/namei.c, which allowed local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9 (bnc#1162109).
- CVE-2019-19045: A memory leak in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c allowed attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7 (bnc#1161522).
- CVE-2019-16994: A memory leak existed in sit_init_net() in net/ipv6/sit.c which might have caused denial of service, aka CID-07f12b26e21a (bnc#1161523).
- CVE-2019-19054: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c allowed attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b (bnc#1161518).
- CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bnc#1157157).
- CVE-2019-14897: A stack-based buffer overflow was found in the Marvell WiFi driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bnc#1157155).
- CVE-2020-7053: There was a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c (bnc#1160966).
- CVE-2019-19318: Mounting a crafted btrfs image twice could have caused a use-after-free (bnc#1158026).
- CVE-2019-19036: An issue discovered in btrfs_root_node in fs/btrfs/ctree.c allowed a NULL pointer dereference because rcu_dereference(root-&gt;node) can be zero (bnc#1157692).
- CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures for some Intel(R) Processors (bnc#1160195).
- CVE-2019-19965: There was a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5 (bnc#1159911).
- CVE-2019-19927: A slab-out-of-bounds read access could have been caused when mounting a crafted f2fs filesystem image and performing some operations on it, in drivers/gpu/drm/ttm/ttm_page_alloc.c (bnc#1160147).
- CVE-2019-20095: Several memory leaks were found in drivers/net/wireless/marvell/mwifiex/cfg80211.c, aka CID-003b686ace82 (bnc#1159909).
- CVE-2019-20054: There was a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e (bnc#1159910).
- CVE-2019-20096: There was a memory leak in __feat_register_sp() in net/dccp/feat.c, aka CID-1d3ff0950e2b (bnc#1159908).
- CVE-2019-19966: There was a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that could have caused a denial of service, aka CID-dea37a972655 (bnc#1159841).
- CVE-2019-19447: Mounting a crafted ext4 filesystem image, performing some operations, and unmounting could have led to a use-after-free in fs/ext4/super.c (bnc#1158819).
- CVE-2019-19319: A slab-out-of-bounds write access could have occured when setxattr was called after mounting of a specially crafted ext4 image (bnc#1158021).
- CVE-2019-19767: There were multiple use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163 (bnc#1159297).
- CVE-2019-18808: A memory leak in drivers/crypto/ccp/ccp-ops.c allowed attackers to cause a denial of service (memory consumption), aka CID-128c66429247 (bnc#1156259).
- CVE-2019-19066: A memory leak in drivers/scsi/bfa/bfad_attr.c allowed attackers to cause a denial of service (memory consumption), aka CID-0e62395da2bd (bnc#1157303).
- CVE-2019-19051: A memory leak in drivers/net/wimax/i2400m/op-rfkill.c allowed attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7 (bnc#1159024).
- CVE-2019-19338: There was an incomplete fix for an issue with Transactional Synchronisation Extensions in the KVM code (bsc#1158954).
- CVE-2019-19332: An out-of-bounds memory write issue was found in the way the KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could have used this flaw to crash the system (bnc#1158827).
- CVE-2019-19537: There was a race condition bug that could be caused by a malicious USB character device, aka CID-303911cfc5b9. (bsc#1158904).
- CVE-2019-19535: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042 (bsc#1158903).
- CVE-2019-19527: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e (bsc#1158900).
- CVE-2019-19526: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af3aa57a098 (bsc#1158893).
- CVE-2019-19533: There was an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464 (bsc#1158834).
- CVE-2019-19532: There were multiple out-of-bounds write bugs that can be caused by a malicious USB HID device, aka CID-d9d4b1e46d95 (bsc#1158824).
- CVE-2019-19523: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79 (bsc#1158823).
- CVE-2019-15213: A use-after-free bug caused by a malicious USB device was found in drivers/media/usb/dvb-usb/dvb-usb-init.c (bsc#1146544).
- CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L1 resources (bsc#1163971).


The following non-security bugs were fixed:

- 6pack,mkiss: fix possible deadlock (bsc#1051510).
- ACPI / APEI: Do not wait to serialise with oops messages when panic()ing (bsc#1051510).
- ACPI / APEI: Switch estatus pool to use vmalloc memory (bsc#1051510).
- ACPI / LPSS: Ignore acpi_device_fix_up_power() return value (bsc#1051510).
- ACPI / video: Add force_none quirk for Dell OptiPlex 9020M (bsc#1051510).
- ACPI / watchdog: Fix init failure with overlapping register regions (bsc#1162557).
- ACPI / watchdog: Set default timeout in probe (bsc#1162557).
- ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data() (bsc#1051510).
- ACPI: fix acpi_find_child_device() invocation in acpi_preset_companion() (bsc#1051510).
- ACPI: OSL: only free map once in osl.c (bsc#1051510).
- ACPI: PM: Avoid attaching ACPI PM domain to certain devices (bsc#1051510).
- ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 (bsc#1051510).
- ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards (bsc#1051510).
- ACPI: watchdog: Allow disabling WDAT at boot (bsc#1162557).
- af_packet: set defaule value for tmo (bsc#1051510).
- ALSA: control: remove useless assignment in .info callback of PCM chmap element (git-fixes).
- ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
- ALSA: echoaudio: simplify get_audio_levels (bsc#1051510).
- ALSA: fireface: fix return value in error path of isochronous resources reservation (bsc#1051510).
- ALSA: hda - Add docking station support for Lenovo Thinkpad T420s (git-fixes).
- ALSA: hda - Apply sync-write workaround to old Intel platforms, too (bsc#1111666).
- ALSA: hda - constify and cleanup static NodeID tables (bsc#1111666).
- ALSA: hda - Downgrade error message for single-cmd fallback (git-fixes).
- ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen (git-fixes).
- ALSA: hda/analog - Minor optimization for SPDIF mux connections (git-fixes).
- ALSA: hda/ca0132 - Avoid endless loop (git-fixes).
- ALSA: hda/ca0132 - Fix work handling in delayed HP detection (git-fixes).
- ALSA: hda/ca0132 - Keep power on during processing DSP response (git-fixes).
- ALSA: hda/hdmi - Add new pci ids for AMD GPU display audio (git-fixes).
- ALSA: hda/hdmi - add retry logic to parse_intel_hdmi() (git-fixes).
- ALSA: hda/hdmi - Clean up Intel platform-specific fixup checks (bsc#1111666).
- ALSA: hda/hdmi - fix atpx_present when CLASS is not VGA (bsc#1051510).
- ALSA: hda/hdmi - Fix duplicate unref of pci_dev (bsc#1051510).
- ALSA: hda/hdmi - fix vgaswitcheroo detection for AMD (git-fixes).
- ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker (bsc#1111666).
- ALSA: hda/realtek - Add headset Mic no shutup for ALC283 (bsc#1051510).
- ALSA: hda/realtek - Add Headset Mic supported for HP cPC (bsc#1111666).
- ALSA: hda/realtek - Add new codec supported for ALCS1200A (bsc#1111666).
- ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen (bsc#1111666).
- ALSA: hda/realtek - Apply mic mute LED quirk for Dell E7xx laptops, too (bsc#1111666).
- ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 (git-fixes).
- ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC (bsc#1111666).
- ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G (git-fixes).
- ALSA: hda/realtek - Fix silent output on MSI-GL73 (git-fixes).
- ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported (bsc#1111666).
- ALSA: hda/realtek - Line-out jack does not work on a Dell AIO (bsc#1051510).
- ALSA: hda/realtek - More constifications (bsc#1111666).
- ALSA: hda/realtek - Set EAPD control to default for ALC222 (bsc#1111666).
- ALSA: hda: Add Clevo W65_67SB the power_save blacklist (git-fixes).
- ALSA: hda: Add JasperLake PCI ID and codec vid (bsc#1111666).
- ALSA: hda: Clear RIRB status before reading WP (bsc#1111666).
- ALSA: hda: constify copied structure (bsc#1111666).
- ALSA: hda: Constify snd_kcontrol_new items (bsc#1111666).
- ALSA: hda: Constify snd_pci_quirk tables (bsc#1111666).
- ALSA: hda: correct kernel-doc parameter descriptions (bsc#1111666).
- ALSA: hda: hdmi - add Tigerlake support (bsc#1111666).
- ALSA: hda: hdmi - fix pin setup on Tigerlake (bsc#1111666).
- ALSA: hda: More constifications (bsc#1111666).
- ALSA: hda: patch_hdmi: remove warnings with empty body (bsc#1111666).
- ALSA: hda: patch_realtek: fix empty macro usage in if block (bsc#1111666).
- ALSA: hda: Reset stream if DMA RUN bit not cleared (bsc#1111666).
- ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs (git-fixes).
- ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code (bsc#1051510).
- ALSA: oxfw: fix return value in error path of isochronous resources reservation (bsc#1051510).
- ALSA: pcm: Avoid possible info leaks from PCM stream buffers (git-fixes).
- ALSA: pcm: oss: Avoid potential buffer overflows (git-fixes).
- ALSA: seq: Avoid concurrent access to queue flags (git-fixes).
- ALSA: seq: Fix concurrent access to queue current tick/time (git-fixes).
- ALSA: seq: Fix racy access for queue timer in proc read (bsc#1051510).
- ALSA: sh: Fix compile warning wrt const (git-fixes).
- ALSA: sh: Fix unused variable warnings (bsc#1111666).
- ALSA: usb-audio: Apply sample rate quirk for Audioengine D1 (git-fixes).
- ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 (bsc#1111666).
- ALSA: usb-audio: Fix endianess in descriptor validation (bsc#1111666).
- ALSA: usb-audio: fix set_format altsetting sanity check (bsc#1051510).
- ALSA: usb-audio: fix sync-ep altsetting sanity check (bsc#1051510).
- apparmor: fix unsigned len comparison with less than zero (git-fixes).
- ar5523: check NULL before memcpy() in ar5523_cmd() (bsc#1051510).
- arm64: Revert support for execute-only user mappings (bsc#1160218).
- ASoC: au8540: use 64-bit arithmetic instead of 32-bit (bsc#1051510).
- ASoC: compress: fix unsigned integer overflow check (bsc#1051510).
- ASoC: cs4349: Use PM ops 'cs4349_runtime_pm' (bsc#1051510).
- ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report (bsc#1051510).
- ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1 (bsc#1051510).
- ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI (bsc#1111666).
- ASoC: sun8i-codec: Fix setting DAI data format (git-fixes).
- ASoC: wm8962: fix lambda value (git-fixes).
- ata: ahci: Add shutdown to freeze hardware resources of ahci (bsc#1164388).
- ath10k: Correct the DMA direction for management tx buffers (bsc#1111666).
- ath10k: fix fw crash by moving chip reset after napi disabled (bsc#1051510).
- ath10k: pci: Fix comment on ath10k_pci_dump_memory_sram (bsc#1111666).
- ath10k: pci: Only dump ATH10K_MEM_REGION_TYPE_IOREG when safe (bsc#1111666).
- ath6kl: Fix off by one error in scan completion (bsc#1051510).
- ath9k: fix storage endpoint lookup (git-fixes).
- atl1e: checking the status of atl1e_write_phy_reg (bsc#1051510).
- audit: Allow auditd to set pid to 0 to end auditing (bsc#1158094).
- batman-adv: Fix DAT candidate selection on little endian systems (bsc#1051510).
- bcache: add code comment bch_keylist_pop() and bch_keylist_pop_front() (bsc#1163762).
- bcache: add code comments for state-&gt;pool in __btree_sort() (bsc#1163762).
- bcache: add code comments in bch_btree_leaf_dirty() (bsc#1163762).
- bcache: add cond_resched() in __bch_cache_cmp() (bsc#1163762).
- bcache: add idle_max_writeback_rate sysfs interface (bsc#1163762).
- bcache: add more accurate error messages in read_super() (bsc#1163762).
- bcache: add readahead cache policy options via sysfs interface (bsc#1163762).
- bcache: at least try to shrink 1 node in bch_mca_scan() (bsc#1163762).
- bcache: avoid unnecessary btree nodes flushing in btree_flush_write() (bsc#1163762).
- bcache: check return value of prio_read() (bsc#1163762).
- bcache: deleted code comments for dead code in bch_data_insert_keys() (bsc#1163762).
- bcache: do not export symbols (bsc#1163762).
- bcache: explicity type cast in bset_bkey_last() (bsc#1163762).
- bcache: fix a lost wake-up problem caused by mca_cannibalize_lock (bsc#1163762).
- bcache: Fix an error code in bch_dump_read() (bsc#1163762).
- bcache: fix deadlock in bcache_allocator (bsc#1163762).
- bcache: fix incorrect data type usage in btree_flush_write() (bsc#1163762).
- bcache: fix memory corruption in bch_cache_accounting_clear() (bsc#1163762).
- bcache: fix static checker warning in bcache_device_free() (bsc#1163762).
- bcache: ignore pending signals when creating gc and allocator thread (bsc#1163762, bsc#1112504).
- bcache: print written and keys in trace_bcache_btree_write (bsc#1163762).
- bcache: reap c-&gt;btree_cache_freeable from the tail in bch_mca_scan() (bsc#1163762).
- bcache: reap from tail of c-&gt;btree_cache in bch_mca_scan() (bsc#1163762).
- bcache: remove macro nr_to_fifo_front() (bsc#1163762).
- bcache: remove member accessed from struct btree (bsc#1163762).
- bcache: remove the extra cflags for request.o (bsc#1163762).
- bcache: Revert 'bcache: shrink btree node cache after bch_btree_check()' (bsc#1163762, bsc#1112504).
- bcma: remove set but not used variable 'sizel' (git-fixes).
- blk-mq: avoid sysfs buffer overflow with too many CPU cores (bsc#1159377).
- blk-mq: avoid sysfs buffer overflow with too many CPU cores (bsc#1163840).
- blk-mq: make sure that line break can be printed (bsc#1159377).
- blk-mq: make sure that line break can be printed (bsc#1164098).
- Bluetooth: Fix race condition in hci_release_sock() (bsc#1051510).
- Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading (bsc#1051510).
- bnxt: apply computed clamp value for coalece parameter (bsc#1104745).
- bnxt_en: Fix MSIX request logic for RDMA driver (bsc#1104745 ).
- bnxt_en: Return error if FW returns more data than dump length (bsc#1104745).
- bonding: fix active-backup transition after link failure (git-fixes).
- bonding: fix potential NULL deref in bond_update_slave_arr (bsc#1051510).
- bonding: fix slave stuck in BOND_LINK_FAIL state (networking-stable-19_11_10).
- bonding: fix state transition issue in link monitoring (networking-stable-19_11_10).
- bonding: fix unexpected IFF_BONDING bit unset (bsc#1051510).
- bpf, offload: Unlock on error in bpf_offload_dev_create() (bsc#1109837).
- bpf/sockmap: Read psock ingress_msg before sk_receive_queue (bsc#1083647).
- bpf/stackmap: Fix deadlock with rq_lock in bpf_get_stack() (bsc#1083647).
- bpf: add self-check logic to liveness analysis (bsc#1160618).
- bpf: add verifier stats and log_level bit 2 (bsc#1160618).
- bpf: Fix incorrect verifier simulation of ARSH under ALU32 (bsc#1083647).
- bpf: improve stacksafe state comparison (bco#1160618).
- bpf: improve verification speed by droping states (bsc#1160618).
- bpf: improve verification speed by not remarking live_read (bsc#1160618).
- bpf: improve verifier branch analysis (bsc#1160618).
- bpf: increase complexity limit and maximum program size (bsc#1160618).
- bpf: increase verifier log limit (bsc#1160618).
- bpf: Make use of probe_user_write in probe write helper (bsc#1083647).
- bpf: Reject indirect var_off stack access in raw mode (bsc#1160618).
- bpf: Reject indirect var_off stack access in unpriv mode (bco#1160618).
- bpf: Sanity check max value for var_off stack access (bco#1160618).
- bpf: skmsg, fix potential psock NULL pointer dereference (bsc#1109837).
- bpf: speed up stacksafe check (bco#1160618).
- bpf: Support variable offset stack access from helpers (bco#1160618).
- bpf: verifier: teach the verifier to reason about the BPF_JSET instruction (bco#1160618).
- brcmfmac: fix interface sanity check (git-fixes).
- brcmfmac: Fix memory leak in brcmf_p2p_create_p2pdev() (bsc#1111666).
- brcmfmac: Fix memory leak in brcmf_usbdev_qinit (git-fixes).
- brcmfmac: Fix use after free in brcmf_sdio_readframes() (git-fixes).
- brcmfmac: sdio: Fix OOB interrupt initialization on brcm43362 (bsc#1111666).
- brcmfmac: set F2 watermark to 256 for 4373 (bsc#1111666).
- brcmfmac: set SDIO F1 MesBusyCtrl for CYW4373 (bsc#1111666).
- btrfs: abort transaction after failed inode updates in create_subvol (bsc#1161936).
- btrfs: add missing extents release on file extent cluster relocation error (bsc#1159483).
- btrfs: avoid fallback to transaction commit during fsync of files with holes (bsc#1159569).
- btrfs: dev-replace: remove warning for unknown return codes when finished (dependency for bsc#1162067).
- btrfs: do not call synchronize_srcu() in inode_tree_del (bsc#1161934).
- btrfs: do not double lock the subvol_sem for rename exchange (bsc#1162943).
- btrfs: Ensure we trim ranges across block group boundary (bsc#1151910).
- btrfs: fix block group remaining RO forever after error during device replace (bsc#1160442).
- btrfs: fix btrfs_write_inode vs delayed iput deadlock (bsc#1154243).
- btrfs: fix infinite loop during fsync after rename operations (bsc#1163383).
- btrfs: fix infinite loop during nocow writeback due to race (bsc#1160804).
- btrfs: fix integer overflow in calc_reclaim_items_nr (bsc#1160433).
- btrfs: fix missing data checksums after replaying a log tree (bsc#1161931).
- btrfs: fix negative subv_writers counter and data space leak after buffered write (bsc#1160802).
- btrfs: fix race between adding and putting tree mod seq elements and nodes (bsc#1163384).
- btrfs: fix removal logic of the tree mod log that leads to use-after-free issues (bsc#1160803).
- btrfs: fix selftests failure due to uninitialized i_mode in test inodes (Fix for dependency of bsc#1157692).
- btrfs: handle ENOENT in btrfs_uuid_tree_iterate (bsc#1161937).
- btrfs: harden agaist duplicate fsid on scanned devices (bsc#1134973).
- btrfs: inode: Verify inode mode to avoid NULL pointer dereference (dependency for bsc#1157692).
- btrfs: make tree checker detect checksum items with overlapping ranges (bsc#1161931).
- btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it (dependency for bsc#1157692).
- btrfs: record all roots for rename exchange on a subvol (bsc#1161933).
- btrfs: relocation: fix reloc_root lifespan and access (bsc#1159588).
- btrfs: scrub: Require mandatory block group RO for dev-replace (bsc#1162067).
- btrfs: send, skip backreference walking for extents with many references (bsc#1162139).
- btrfs: simplify inode locking for RWF_NOWAIT (git-fixes).
- btrfs: skip log replay on orphaned roots (bsc#1161935).
- btrfs: tree-checker: Check chunk item at tree block read time (dependency for bsc#1157692).
- btrfs: tree-checker: Check level for leaves and nodes (dependency for bsc#1157692).
- btrfs: tree-checker: Enhance chunk checker to validate chunk profile (dependency for bsc#1157692).
- btrfs: tree-checker: Fix wrong check on max devid (fixes for dependency of bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in block_group_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_block_group_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_csum_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_dev_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_dir_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_extent_data_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_inode_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_leaf (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in check_leaf_item (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in chunk_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in dev_item_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in dir_item_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in file_extent_err (dependency for bsc#1157692).
- btrfs: tree-checker: get fs_info from eb in generic_err (dependency for bsc#1157692).
- btrfs: tree-checker: Make btrfs_check_chunk_valid() return EUCLEAN instead of EIO (dependency for bsc#1157692).
- btrfs: tree-checker: Make chunk item checker messages more readable (dependency for bsc#1157692).
- btrfs: tree-checker: Verify dev item (dependency for bsc#1157692).
- btrfs: tree-checker: Verify inode item (dependency for bsc#1157692).
- btrfs: volumes: Use more straightforward way to calculate map length (bsc#1151910).
- can, slip: Protect tty-&gt;disc_data in write_wakeup and close with RCU (bsc#1051510).
- can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs (bsc#1051510).
- can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open (bsc#1051510).
- can: gs_usb: gs_usb_probe(): use descriptors of current altsetting (bsc#1051510).
- can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling to irq mode (bsc#1051510).
- can: peak_usb: report bus recovery as well (bsc#1051510).
- can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error (bsc#1051510).
- can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error (bsc#1051510).
- can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on queue overflow or OOM (bsc#1051510).
- can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate error value in case of errors (bsc#1051510).
- can: slcan: Fix use-after-free Read in slcan_open (bsc#1051510).
- CDC-NCM: handle incomplete transfer of MTU (networking-stable-19_11_10).
- cdrom: respect device capabilities during opening action (boo#1164632).
- cfg80211/mac80211: make ieee80211_send_layer2_update a public function (bsc#1051510).
- cfg80211: check for set_wiphy_params (bsc#1051510).
- cfg80211: fix deadlocks in autodisconnect work (bsc#1111666).
- cfg80211: fix memory leak in cfg80211_cqm_rssi_update (bsc#1111666).
- cfg80211: fix page refcount issue in A-MSDU decap (bsc#1051510).
- cgroup,writeback: do not switch wbs immediately on dead wbs if the memcg is dead (bsc#1158645).
- cgroup: pids: use atomic64_t for pids-&gt;limit (bsc#1161514).
- chardev: Avoid potential use-after-free in 'chrdev_open()' (bsc#1163849).
- cifs: add support for flock (bsc#1144333).
- cifs: Close cached root handle only if it had a lease (bsc#1144333).
- cifs: Close open handle after interrupted close (bsc#1144333).
- cifs: close the shared root handle on tree disconnect (bsc#1144333).
- cifs: Do not miss cancelled OPEN responses (bsc#1144333).
- cifs: Fix lookup of root ses in DFS referral cache (bsc#1144333).
- cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333).
- cifs: fix mount option display for sec=krb5i (bsc#1161907).
- cifs: Fix mount options set in automount (bsc#1144333).
- cifs: Fix NULL pointer dereference in mid callback (bsc#1144333).
- cifs: Fix NULL-pointer dereference in smb2_push_mandatory_locks (bsc#1144333).
- cifs: Fix potential softlockups while refreshing DFS cache (bsc#1144333).
- cifs: Fix retrieval of DFS referrals in cifs_mount() (bsc#1144333).
- cifs: Fix use-after-free bug in cifs_reconnect() (bsc#1144333).
- cifs: Properly process SMB3 lease breaks (bsc#1144333).
- cifs: remove set but not used variables 'cinode' and 'netfid' (bsc#1144333).
- cifs: Respect O_SYNC and O_DIRECT flags during reconnect (bsc#1144333).
- clk: Do not try to enable critical clocks if prepare failed (bsc#1051510).
- clk: imx: clk-composite-8m: add lock to gate/mux (git-fixes).
- clk: mmp2: Fix the order of timer mux parents (bsc#1051510).
- clk: qcom: rcg2: Do not crash if our parent can't be found; return an error (bsc#1051510).
- clk: rockchip: fix I2S1 clock gate register for rk3328 (bsc#1051510).
- clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328 (bsc#1051510).
- clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering (bsc#1051510).
- clk: rockchip: fix rk3188 sclk_smc gate data (bsc#1051510).
- clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock (bsc#1051510).
- clk: sunxi: sun9i-mmc: Implement reset callback for reset controls (bsc#1051510).
- clk: tegra: Mark fuse clock as critical (bsc#1051510).
- clocksource/drivers/bcm2835_timer: Fix memory leak of timer (bsc#1051510).
- clocksource: Prevent double add_timer_on() for watchdog_timer (bsc#1051510).
- closures: fix a race on wakeup from closure_sync (bsc#1163762).
- configfs_register_group() shouldn't be (and isn't) called in rmdirable parts (bsc#1051510).
- copy/pasted 'Recommends:' instead of 'Provides:', 'Obsoletes:' and 'Conflicts:
- Cover up kABI breakage due to DH key verification (bsc#1155331).
- crypto: af_alg - Use bh_lock_sock in sk_destruct (bsc#1051510).
- crypto: api - Check spawn-&gt;alg under lock in crypto_drop_spawn (bsc#1051510).
- crypto: api - Fix race condition in crypto_spawn_alg (bsc#1051510).
- crypto: atmel-sha - fix error handling when setting hmac key (bsc#1051510).
- crypto: caam/qi2 - fix typo in algorithm's driver name (bsc#1111666).
- crypto: ccp - fix uninitialized list head (bsc#1051510).
- crypto: chelsio - fix writing tfm flags to wrong place (bsc#1051510).
- crypto: dh - add public key verification test (bsc#1155331).
- crypto: dh - fix calculating encoded key size (bsc#1155331).
- crypto: dh - fix memory leak (bsc#1155331).
- crypto: dh - update test for public key verification (bsc#1155331).
- crypto: DRBG - add FIPS 140-2 CTRNG for noise source (bsc#1155334).
- crypto: ecdh - add public key verification test (bsc#1155331).
- crypto: ecdh - fix typo of P-192 b value (bsc#1155331).
- crypto: mxc-scc - fix build warnings on ARM64 (bsc#1051510).
- crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (bsc#1051510).
- crypto: picoxcell - adjust the position of tasklet_init and fix missed tasklet_kill (bsc#1051510).
- crypto: reexport crypto_shoot_alg() (bsc#1051510, kABI fix).
- cxgb4: request the TX CIDX updates to status page (bsc#1127371).
- dma-buf: Fix memory leak in sync_file_merge() (git-fixes).
- dma-mapping: fix return type of dma_set_max_seg_size() (bsc#1051510).
- dmaengine: coh901318: Fix a double-lock bug (bsc#1051510).
- dmaengine: coh901318: Remove unused variable (bsc#1051510).
- dmaengine: Fix access to uninitialized dma_slave_caps (bsc#1051510).
- Documentation: Document arm64 kpti control (bsc#1162623).
- drivers/base/memory.c: cache blocks in radix tree to accelerate lookup (bsc#1159955 ltc#182993).
- drivers/base/memory.c: do not access uninitialized memmaps in soft_offline_page_store() (bsc#1051510).
- drivers/base/platform.c: kmemleak ignore a known leak (bsc#1051510).
- drivers/regulator: fix a missing check of return value (bsc#1051510).
- drm/amd/display: Retrain dongles when SINK_COUNT becomes non-zero (bsc#1111666).
- drm/amd/powerplay: remove set but not used variable 'us_mvdd' (bsc#1111666).
- drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc (bsc#1111666).
- drm/amdgpu: add function parameter description in 'amdgpu_device_set_cg_state' (bsc#1111666).
- drm/amdgpu: add function parameter description in 'amdgpu_gart_bind' (bsc#1051510).
- drm/amdgpu: fix bad DMA from INTERRUPT_CNTL2 (bsc#1114279)
- drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2) (bsc#1111666).
- drm/amdgpu: remove 4 set but not used variable in amdgpu_atombios_get_connector_info_from_object_table (bsc#1051510).
- drm/amdgpu: remove always false comparison in 'amdgpu_atombios_i2c_process_i2c_ch' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'amdgpu_connector' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'dig' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'dig_connector' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'invalid' (bsc#1111666).
- drm/amdgpu: remove set but not used variable 'mc_shared_chmap' (bsc#1051510).
- drm/amdgpu: remove set but not used variable 'mc_shared_chmap' from 'gfx_v6_0.c' and 'gfx_v7_0.c' (bsc#1051510).
- drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ (bsc#1051510).
- drm/fb-helper: Round up bits_per_pixel if possible (bsc#1051510).
- drm/i810: Prevent underflow in ioctl (bsc#1114279)
- drm/i915/gvt: Pin vgpu dma address before using (bsc#1112178)
- drm/i915/gvt: set guest display buffer as readonly (bsc#1112178)
- drm/i915/gvt: use vgpu lock for active state setting (bsc#1112178)
- drm/i915/perf: add missing delay for OA muxes configuration (bsc#1111666).
- drm/i915: Add missing include file &lt;linux/math64.h&gt; (bsc#1051510).
- drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() (bsc#1111666).
- drm/i915: Fix pid leak with banned clients (bsc#1114279)
- drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set (bsc#1111666).
- drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV (bsc#1111666).
- drm/i915: Reacquire priolist cache after dropping the engine lock (bsc#1129770).
- drm/i915: Sanity check mmap length against object size (bsc#1111666).
- drm/msm: include linux/sched/task.h (bsc#1112178)
- drm/mst: Fix MST sideband up-reply failure handling (bsc#1051510).
- drm/nouveau/bar/gf100: ensure BAR is mapped (bsc#1111666).
- drm/nouveau/bar/nv50: check bar1 vmm return value (bsc#1111666).
- drm/nouveau/mmu: qualify vmm during dtor (bsc#1111666).
- drm/nouveau/secboot/gm20b: initialize pointer in gm20b_secboot_new() (bsc#1051510).
- drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler (bsc#1051510).
- drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028)
- drm/qxl: Return error if fbdev is not 32 bpp (bsc#1159028)
- drm/radeon: fix r1xx/r2xx register checker for POT textures (bsc#1114279)
- drm/rect: Avoid division by zero (bsc#1111666).
- drm/rect: update kerneldoc for drm_rect_clip_scaled() (bsc#1111666).
- drm/rockchip: lvds: Fix indentation of a #define (bsc#1051510).
- drm/rockchip: Round up _before_ giving to the clock framework (bsc#1114279)
- drm/sun4i: hdmi: Remove duplicate cleanup calls (bsc#1113956)
- drm/sun4i: tcon: Set min division of TCON0_DCLK to 1 (bsc#1111666).
- drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model (bsc#1111666).
- drm/ttm: ttm_tt_init_fields() can be static (bsc#1111666).
- drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add (bsc#1051510).
- drm: bridge: dw-hdmi: constify copied structure (bsc#1051510).
- drm: limit to INT_MAX in create_blob ioctl (bsc#1051510).
- drm: meson: venc: cvbs: fix CVBS mode matching (bsc#1051510).
- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable (bsc#1111666).
- drm: panel-lvds: Potential Oops in probe error handling (bsc#1114279)
- e1000e: Add support for Comet Lake (bsc#1158533).
- e1000e: Add support for Tiger Lake (bsc#1158533).
- e1000e: Increase pause and refresh time (bsc#1158533).
- e100: Fix passing zero to 'PTR_ERR' warning in e100_load_ucode_wait (bsc#1051510).
- ecryptfs_lookup_interpose(): lower_dentry-&gt;d_inode is not stable (bsc#1158646).
- ecryptfs_lookup_interpose(): lower_dentry-&gt;d_parent is not stable either (bsc#1158647).
- EDAC/ghes: Fix locking and memory barrier issues (bsc#1114279). EDAC/ghes: Do not warn when incrementing refcount on 0 (bsc#1114279).
- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632).
- enic: prevent waking up stopped tx queues over watchdog reset (bsc#1133147).
- exit: panic before exit_mm() on global init exit (bsc#1161549).
- ext2: check err when partial != NULL (bsc#1163859).
- ext4, jbd2: ensure panic when aborting with zero errno (bsc#1163853).
- ext4: check for directory entries too close to block end (bsc#1163861).
- ext4: fix a bug in ext4_wait_for_tail_page_commit (bsc#1163841).
- ext4: fix checksum errors with indexed dirs (bsc#1160979).
- ext4: fix deadlock allocating crypto bounce page from mempool (bsc#1163842).
- ext4: Fix mount failure with quota configured as module (bsc#1164471).
- ext4: fix mount failure with quota configured as module (bsc#1164471).
- ext4: fix punch hole for inline_data file systems (bsc#1158640).
- ext4: improve explanation of a mount failure caused by a misconfigured kernel (bsc#1163843).
- ext4: update direct I/O read lock pattern for IOCB_NOWAIT (bsc#1158639).
- extcon: max8997: Fix lack of path setting in USB device mode (bsc#1051510).
- firestream: fix memory leaks (bsc#1051510).
- fix autofs regression caused by follow_managed() changes (bsc#1159271).
- fix dget_parent() fastpath race (bsc#1159271).
- fix partial checked out tree build ... so that bisection does not break.
- fix the locking in dcache_readdir() and friends (bsc#1123328).
- fjes: fix missed check in fjes_acpi_add (bsc#1051510).
- fs/namei.c: fix missing barriers when checking positivity (bsc#1159271).
- fs/namei.c: pull positivity check into follow_managed() (bsc#1159271).
- fs/open.c: allow opening only regular files during execve() (bsc#1163845).
- fs: cifs: Fix atime update check vs mtime (bsc#1144333).
- fscrypt: do not set policy for a dead directory (bsc#1163846).
- ftrace: Add comment to why rcu_dereference_sched() is open coded (git-fixes).
- ftrace: Avoid potential division by zero in function profiler (bsc#1160784).
- ftrace: Protect ftrace_graph_hash with ftrace_sync (git-fixes).
- genirq/proc: Return proper error code when irq_set_affinity() fails (bnc#1105392).
- genirq: Prevent NULL pointer dereference in resend_irqs() (bsc#1051510).
- genirq: Properly pair kobject_del() with kobject_add() (bsc#1051510).
- gpio: Fix error message on out-of-range GPIO in lookup table (bsc#1051510).
- gtp: avoid zero size hashtable (networking-stable-20_01_01).
- gtp: do not allow adding duplicate tid and ms_addr pdp context (networking-stable-20_01_01).
- gtp: fix an use-after-free in ipv4_pdp_find() (networking-stable-20_01_01).
- gtp: fix wrong condition in gtp_genl_dump_pdp() (networking-stable-20_01_01).
- HID: doc: fix wrong data structure reference for UHID_OUTPUT (bsc#1051510).
- HID: hidraw, uhid: Always report EPOLLOUT (bsc#1051510).
- HID: hidraw: Fix returning EPOLLOUT from hidraw_poll (bsc#1051510).
- HID: intel-ish-hid: fixes incorrect error handling (bsc#1051510).
- HID: uhid: Fix returning EPOLLOUT from uhid_char_poll (bsc#1051510).
- hidraw: Return EPOLLOUT from hidraw_poll (bsc#1051510).
- hotplug/drc-info: Add code to search ibm,drc-info property (bsc#1157480 ltc#181028).
- hv_netvsc: Fix offset usage in netvsc_send_table() (bsc#1164598).
- hv_netvsc: Fix send_table offset in case of a host bug (bsc#1164598).
- hv_netvsc: Fix tx_table init in rndis_set_subchannel() (bsc#1164598).
- hv_netvsc: Fix unwanted rx_table reset (bsc#1164598).
- hwmon: (adt7475) Make volt2reg return same reg as reg2volt input (bsc#1051510).
- hwmon: (core) Do not use device managed functions for memory allocations (bsc#1051510).
- hwmon: (k10temp) Add support for AMD family 17h, model 70h CPUs (bsc#1163206).
- hwmon: (nct7802) Fix voltage limits to wrong registers (bsc#1051510).
- hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions (bsc#1051510).
- hwrng: stm32 - fix unbalanced pm_runtime_enable (bsc#1051510).
- i2c: imx: do not print error message on probe defer (bsc#1051510).
- IB/hfi1: Do not cancel unused work item (bsc#1114685 ).
- IB/mlx5: Fix steering rule of drop and count (bsc#1103991 ).
- IB/mlx5: Remove dead code (bsc#1103991).
- ibmveth: Detect unsupported packets before sending to the hypervisor (bsc#1159484 ltc#182983).
- ibmvnic: Bound waits for device queries (bsc#1155689 ltc#182047).
- ibmvnic: Fix completion structure initialization (bsc#1155689 ltc#182047).
- ibmvnic: Serialize device queries (bsc#1155689 ltc#182047).
- ibmvnic: Terminate waiting device threads after loss of service (bsc#1155689 ltc#182047).
- ice: fix stack leakage (bsc#1118661).
- idr: Fix idr_alloc_u32 on 32-bit systems (bsc#1051510).
- iio: adc: max9611: Fix too short conversion time delay (bsc#1051510).
- iio: buffer: align the size of scan bytes to size of the largest element (bsc#1051510).
- inet: protect against too small mtu values (networking-stable-19_12_16).
- Input: aiptek - fix endpoint sanity check (bsc#1051510).
- Input: cyttsp4_core - fix use after free bug (bsc#1051510).
- Input: goodix - add upside-down quirk for Teclast X89 tablet (bsc#1051510).
- Input: gtco - fix endpoint sanity check (bsc#1051510).
- Input: keyspan-remote - fix control-message timeouts (bsc#1051510).
- Input: pegasus_notetaker - fix endpoint sanity check (bsc#1051510).
- Input: pm8xxx-vib - fix handling of separate enable register (bsc#1051510).
- Input: rmi_f54 - read from FIFO in 32 byte blocks (bsc#1051510).
- Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register (bsc#1051510).
- Input: sur40 - fix interface sanity checks (bsc#1051510).
- Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus (bsc#1051510).
- Input: synaptics-rmi4 - do not increment rmiaddr for SMBus transfers (bsc#1051510).
- Input: synaptics-rmi4 - simplify data read in rmi_f54_work (bsc#1051510).
- iomap: Fix pipe page leakage during splicing (bsc#1158651).
- iommu/amd: Fix IOMMU perf counter clobbering during init (bsc#1162617).
- iommu/arm-smmu-v3: Populate VMID field for CMDQ_OP_TLBI_NH_VA (bsc#1164314).
- iommu/io-pgtable-arm: Fix race handling in split_blk_unmap() (bsc#1164115).
- iommu/iova: Init the struct iova to fix the possible memleak (bsc#1160469).
- iommu/mediatek: Correct the flush_iotlb_all callback (bsc#1160470).
- iommu/vt-d: Unlink device if failed to add to group (bsc#1160756).
- iommu: Remove device link to group on failure (bsc#1160755).
- ipmi: Do not allow device module unload when in use (bsc#1154768).
- ipv4: Fix table id reference in fib_sync_down_addr (networking-stable-19_11_10).
- iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop (git-fixes).
- iwlwifi: change monitor DMA to be coherent (bsc#1161243).
- iwlwifi: clear persistence bit according to device family (bsc#1111666).
- iwlwifi: do not throw error when trying to remove IGTK (bsc#1051510).
- iwlwifi: mvm: fix NVM check for 3168 devices (bsc#1051510).
- iwlwifi: mvm: force TCM re-evaluation on TCM resume (bsc#1111666).
- iwlwifi: mvm: Send non offchannel traffic via AP sta (bsc#1051510).
- iwlwifi: mvm: synchronize TID queue removal (bsc#1051510).
- iwlwifi: pcie: fix erroneous print (bsc#1111666).
- iwlwifi: trans: Clear persistence bit when starting the FW (bsc#1111666).
- jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal (bsc#1163862).
- jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer (bsc#1163836).
- jbd2: Fix possible overflow in jbd2_log_space_left() (bsc#1163860).
- jbd2: make sure ESHUTDOWN to be recorded in the journal superblock (bsc#1163863).
- jbd2: move the clearing of b_modified flag to the journal_unmap_buffer() (bsc#1163880).
- jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record (bsc#1163852).
- kABI fix for 'ipmi: Do not allow device module unload when in use' (bsc#1154768).
- kABI fixup for alloc_dax_region (bsc#1158071,bsc#1160678).
- kABI workaround for can/skb.h inclusion (bsc#1051510).
- kABI/severities: Whitelist rpaphp_get_drc_props (bsc#1157480 ltc#181028).
- kABI: add _q suffix to exports that take struct dh (bsc#1155331).
- kABI: protect struct sctp_ep_common (kabi).
- kABI: Protest new fields in BPF structs (bsc#1160618).
- kconfig: fix broken dependency in randconfig-generated .config (bsc#1051510).
- kernel-binary.spec.in: do not recommend firmware for kvmsmall and azure flavor (boo#1161360).
- kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail (bsc#1160787).
- kernfs: Fix range checks in kernfs_get_target_path (bsc#1051510).
- kexec: bail out upon SIGKILL when allocating memory (git-fixes).
- KVM: Clean up __kvm_gfn_to_hva_cache_init() and its callers (bsc#1133021).
- KVM: fix spectrev1 gadgets (bsc#1164705).
- KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails (bsc#1061840).
- KVM: PPC: Book3S PR: Fix -Werror=return-type build failure (bsc#1061840).
- KVM: PPC: Book3S PR: Free shared page if mmu initialization fails (bsc#1061840).
- KVM: s390: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl (git-fixes).
- KVM: s390: Test for bad access register and size at the start of S390_MEM_OP (git-fixes).
- KVM: SVM: Override default MMIO mask if memory encryption is enabled (bsc#1162618).
- KVM: x86: Host feature SSBD does not imply guest feature SPEC_CTRL_SSBD (bsc#1160476).
- KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks (bsc#1164734).
- KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks (bsc#1164728).
- KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks (bsc#1164729).
- KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF attacks (bsc#1164712).
- KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks (bsc#1164730).
- KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c (bsc#1164733).
- KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks (bsc#1164731).
- KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks (bsc#1164732).
- KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks (bsc#1164735).
- KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks (bsc#1164705).
- KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks (bsc#1164727).
- KVM: x86: Remove a spurious export of a static function (bsc#1158954).
- lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop (bsc#1050549).
- leds: Allow to call led_classdev_unregister() unconditionally (bsc#1161674).
- leds: class: ensure workqueue is initialized before setting brightness (bsc#1161674).
- lib/scatterlist.c: adjust indentation in __sg_alloc_table (bsc#1051510).
- lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more() (bsc#1051510).
- lib: crc64: include &lt;linux/crc64.h&gt; for 'crc64_be' (bsc#1163762).
- libnvdimm/namespace: Differentiate between probe mapping and runtime mapping (bsc#1153535).
- libnvdimm/pfn: Account for PAGE_SIZE &gt; info-block-size in nd_pfn_init() (bsc#1127682 bsc#1153535 ltc#175033 ltc#181834).
- libnvdimm: Fix devm_nsio_enable() kabi (bsc#1153535).
- livepatch/samples/selftest: Use klp_shadow_alloc() API correctly (bsc#1071995).
- livepatch/selftest: Clean up shadow variable names and type (bsc#1071995).
- locking/rwsem: Prevent decrement of reader count before increment (bsc#1050549).
- loop: fix no-unmap write-zeroes request behavior (bsc#1158637).
- mac80211: Do not send Layer 2 Update frame before authorization (bsc#1051510).
- mac80211: fix ieee80211_txq_setup_flows() failure path (bsc#1111666).
- mac80211: fix station inactive_time shortly after boot (bsc#1051510).
- mac80211: Fix TKIP replay protection immediately after key setup (bsc#1051510).
- mac80211: mesh: restrict airtime metric to peered established plinks (bsc#1051510).
- macvlan: do not assume mac_header is set in macvlan_broadcast() (bsc#1051510).
- macvlan: use skb_reset_mac_header() in macvlan_queue_xmit() (bsc#1051510).
- mailbox: mailbox-test: fix null pointer if no mmio (bsc#1051510).
- md/raid0: Fix buffer overflow at debug print (bsc#1164051).
- media/v4l2-core: set pages dirty upon releasing DMA buffers (bsc#1051510).
- media: af9005: uninitialized variable printked (bsc#1051510).
- media: cec.h: CEC_OP_REC_FLAG_ values were swapped (bsc#1051510).
- media: cec: CEC 2.0-only bcast messages were ignored (git-fixes).
- media: cec: report Vendor ID after initialization (bsc#1051510).
- media: digitv: do not continue if remote control state can't be read (bsc#1051510).
- media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0 (bsc#1051510).
- media: exynos4-is: fix wrong mdev and v4l2 dev order in error path (git-fixes).
- media: gspca: zero usb_buf (bsc#1051510).
- media: iguanair: fix endpoint sanity check (bsc#1051510).
- media: ov6650: Fix control handler not freed on init error (git-fixes).
- media: ov6650: Fix crop rectangle alignment not passed back (git-fixes).
- media: ov6650: Fix incorrect use of JPEG colorspace (git-fixes).
- media: pulse8-cec: fix lost cec_transmit_attempt_done() call.
- media: pulse8-cec: return 0 when invalidating the logical address (bsc#1051510).
- media: stkwebcam: Bugfix for wrong return values (bsc#1051510).
- media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors (bsc#1051510).
- media: uvcvideo: Fix error path in control parsing failure (git-fixes).
- media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE (bsc#1051510).
- media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT (bsc#1051510).
- media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments (bsc#1051510).
- mei: bus: prefix device names on bus with the bus name (bsc#1051510).
- mfd: da9062: Fix watchdog compatible string (bsc#1051510).
- mfd: dln2: More sanity checking for endpoints (bsc#1051510).
- mfd: rn5t618: Mark ADC control register volatile (bsc#1051510).
- missing escaping of backslashes in macro expansions Fixes: f3b74b0ae86b ('rpm/kernel-subpackage-spec: Unify dependency handling.') Fixes: 3fd22e219f77 ('rpm/kernel-subpackage-spec: Fix empty Recommends tag (bsc#1143959)')
- mlxsw: spectrum_qdisc: Ignore grafting of invisible FIFO (bsc#1112374).
- mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel (bsc#1112374).
- mm, memory_hotplug: do not clear numa_node association after hot_remove (bnc#1115026).
- mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock (bsc#1159394).
- mm: memory_hotplug: use put_device() if device_register fail (bsc#1159955 ltc#182993).
- mmc: mediatek: fix CMD_TA to 2 for MT8173 HS200/HS400 mode (bsc#1051510).
- mmc: sdhci-of-esdhc: fix P2020 errata handling (bsc#1051510).
- mmc: sdhci-of-esdhc: Revert 'mmc: sdhci-of-esdhc: add erratum A-009204 support' (bsc#1051510).
- mmc: sdhci: Add a quirk for broken command queuing (git-fixes).
- mmc: sdhci: fix minimum clock rate for v3 controller (bsc#1051510).
- mmc: sdhci: Workaround broken command queuing on Intel GLK (git-fixes).
- mmc: spi: Toggle SPI polarity, do not hardcode it (bsc#1051510).
- mmc: tegra: fix SDR50 tuning override (bsc#1051510).
- moduleparam: fix parameter description mismatch (bsc#1051510).
- mod_devicetable: fix PHY module format (networking-stable-19_12_28).
- mqprio: Fix out-of-bounds access in mqprio_dump (bsc#1109837).
- mtd: fix mtd_oobavail() incoherent returned value (bsc#1051510).
- mwifiex: debugfs: correct histogram spacing, formatting (bsc#1051510).
- mwifiex: delete unused mwifiex_get_intf_num() (bsc#1111666).
- mwifiex: drop most magic numbers from mwifiex_process_tdls_action_frame() (git-fixes).
- mwifiex: fix potential NULL dereference and use after free (bsc#1051510).
- mwifiex: update set_mac_address logic (bsc#1111666).
- namei: only return -ECHILD from follow_dotdot_rcu() (bsc#1163851).
- nbd: prevent memory leak (bsc#1158638).
- net, sysctl: Fix compiler warning when only cBPF is present (bsc#1109837).
- net/ibmvnic: Fix typo in retry check (bsc#1155689 ltc#182047).
- net/mlx4_en: fix mlx4 ethtool -N insertion (networking-stable-19_11_25).
- net/mlx4_en: Fix wrong limitation for number of TX rings (bsc#1103989).
- net/mlx5: Accumulate levels for chains prio namespaces (bsc#1103990).
- net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq (bsc#1046303).
- net/mlx5: Update the list of the PCI supported devices (bsc#1127611).
- net/mlx5e: Fix set vf link state error flow (networking-stable-19_11_25).
- net/mlx5e: Fix SFF 8472 eeprom length (git-fixes).
- net/mlx5e: Query global pause state before setting prio2buffer (bsc#1103990).
- net/mlxfw: Fix out-of-memory error in mfa2 flash burning (bsc#1051858).
- net/sched: act_pedit: fix WARN() in the traffic path (networking-stable-19_11_25).
- net: add sendmsg_locked and sendpage_locked to af_inet6 (bsc#1144162).
- net: bridge: deny dev_set_mac_address() when unregistering (networking-stable-19_12_16).
- net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size() (git-fixes).
- net: dst: Force 4-byte alignment of dst_metrics (networking-stable-19_12_28).
- net: ena: fix napi handler misbehavior when the napi budget is zero (networking-stable-20_01_01).
- net: ethernet: octeon_mgmt: Account for second possible VLAN header (networking-stable-19_11_10).
- net: ethernet: ti: cpsw: fix extra rx interrupt (networking-stable-19_12_16).
- net: fix data-race in neigh_event_send() (networking-stable-19_11_10).
- net: hisilicon: Fix a BUG trigered by wrong bytes_compl (networking-stable-19_12_28).
- net: hns3: fix ETS bandwidth validation bug (bsc#1104353 ).
- net: nfc: nci: fix a possible sleep-in-atomic-context bug in nci_uart_tty_receive() (networking-stable-19_12_28).
- net: phy: at803x: Change error to EINVAL for invalid MAC (bsc#1051510).
- net: phy: broadcom: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: Check against net_device being NULL (bsc#1051510).
- net: phy: dp83867: Set up RGMII TX delay (bsc#1051510).
- net: phy: Fix not to call phy_resume() if PHY is not attached (bsc#1051510).
- net: phy: Fix the register offsets in Broadcom iProc mdio mux driver (bsc#1051510).
- net: phy: fixed_phy: Fix fixed_phy not checking GPIO (bsc#1051510).
- net: phy: marvell: clear wol event before setting it (bsc#1051510).
- net: phy: marvell: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: meson-gxl: check phy_write return value (bsc#1051510).
- net: phy: micrel: Use strlcpy() for ethtool::get_strings (bsc#1051510).
- net: phy: mscc: read 'vsc8531, edge-slowdown' as an u32 (bsc#1051510).
- net: phy: mscc: read 'vsc8531,vddmac' as an u32 (bsc#1051510).
- net: phy: xgene: disable clk on error paths (bsc#1051510).
- net: phy: xgmiitorgmii: Check phy_driver ready before accessing (bsc#1051510).
- net: phy: xgmiitorgmii: Check read_status results (bsc#1051510).
- net: phy: xgmiitorgmii: Support generic PHY status read (bsc#1051510).
- net: psample: fix skb_over_panic (networking-stable-19_12_03).
- net: qlogic: Fix error paths in ql_alloc_large_buffers() (networking-stable-19_12_28).
- net: rtnetlink: prevent underflows in do_setvfinfo() (networking-stable-19_11_25).
- net: sched: correct flower port blocking (git-fixes).
- net: sched: ensure opts_len &lt;= IP_TUNNEL_OPTS_MAX in act_tunnel_key (bsc#1109837).
- net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues (bsc#1109837).
- net: sched: fix `tc -s class show` no bstats on class with nolock subqueues (networking-stable-19_12_03).
- net: usb: lan78xx: Fix suspend/resume PHY register access error (networking-stable-19_12_28).
- net: usb: lan78xx: limit size of local TSO packets (bsc#1051510).
- net: usb: qmi_wwan: add support for DW5821e with eSIM support (networking-stable-19_11_10).
- net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules (networking-stable-19_11_18).
- netfilter: nf_queue: enqueue skbs with NULL dst (git-fixes).
- new helper: lookup_positive_unlocked() (bsc#1159271).
- NFC: fdp: fix incorrect free object (networking-stable-19_11_10).
- NFC: pn533: fix bulk-message timeout (bsc#1051510).
- NFC: pn544: Adjust indentation in pn544_hci_check_presence (git-fixes).
- NFC: st21nfca: fix double free (networking-stable-19_11_10).
- nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info (bsc#1163774).
- ocfs2: fix panic due to ocfs2_wq is null (bsc#1158644).
- ocfs2: fix passing zero to 'PTR_ERR' warning (bsc#1158649).
- openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() (networking-stable-19_12_03).
- openvswitch: remove another BUG_ON() (networking-stable-19_12_03).
- openvswitch: support asymmetric conntrack (networking-stable-19_12_16).
- orinoco_usb: fix interface sanity check (git-fixes).
- PCI/IOV: Fix memory leak in pci_iov_add_virtfn() (git-fixes).
- PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity() (bsc#1051510).
- PCI/switchtec: Fix vep_vector_number ioread width (bsc#1051510).
- PCI: Add DMA alias quirk for Intel VCA NTB (bsc#1051510).
- PCI: Do not disable bridge BARs when assigning bus resources (bsc#1051510).
- PCI: pciehp: Avoid returning prematurely from sysfs requests (git-fixes).
- PCI: rpaphp: Add drc-info support for hotplug slot registration (bsc#1157480 ltc#181028).
- PCI: rpaphp: Annotate and correctly byte swap DRC properties (bsc#1157480 ltc#181028).
- PCI: rpaphp: Avoid a sometimes-uninitialized warning (bsc#1157480 ltc#181028).
- PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-info (bsc#1157480 ltc#181028).
- PCI: rpaphp: Do not rely on firmware feature to imply drc-info support (bsc#1157480 ltc#181028).
- PCI: rpaphp: Fix up pointer to first drc-info entry (bsc#1157480 ltc#181028).
- percpu: Separate decrypted varaibles anytime encryption can be enabled (bsc#1114279).
- perf/x86/intel: Fix inaccurate period in context switch for auto-reload (bsc#1164315).
- phy: qualcomm: Adjust indentation in read_poll_timeout (bsc#1051510).
- pinctrl: cherryview: Fix irq_valid_mask calculation (bsc#1111666).
- pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues (bsc#1051510).
- pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELF_B and SD1_CLK_B (bsc#1051510).
- pinctrl: xway: fix gpio-hog related boot issues (bsc#1051510).
- pktcdvd: remove warning on attempting to register non-passthrough dev (bsc#1051510).
- platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 (bsc#1051510).
- platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size (bsc#1051510).
- platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer (bsc#1051510).
- platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes (bsc#1051510).
- platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table (bsc#1051510).
- PM / AVS: SmartReflex: NULL check before some freeing functions is not needed (bsc#1051510).
- PM / Domains: Deal with multiple states but no governor in genpd (bsc#1051510).
- power: supply: ltc2941-battery-gauge: fix use-after-free (bsc#1051510).
- powerpc/archrandom: fix arch_get_random_seed_int() (bsc#1065729).
- powerpc/irq: fix stack overflow verification (bsc#1065729).
- powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (bsc#1065729).
- powerpc/mm: Remove kvm radix prefetch workaround for Power9 DD2.2 (bsc#1061840).
- powerpc/papr_scm: Do not enable direct map for a region by default (bsc#1129551).
- powerpc/papr_scm: Fix leaking 'bus_desc.provider_name' in some paths (bsc#1142685 ltc#179509).
- powerpc/pkeys: remove unused pkey_allows_readwrite (bsc#1065729).
- powerpc/powernv: Disable native PCIe port management (bsc#1065729).
- powerpc/pseries/hotplug-memory: Change rc variable to bool (bsc#1065729).
- powerpc/pseries/lparcfg: Fix display of Maximum Memory (bsc#1162028 ltc#181740).
- powerpc/pseries/mobility: notify network peers after migration (bsc#1152631 ltc#181798).
- powerpc/pseries/vio: Fix iommu_table use-after-free refcount warning (bsc#1065729).
- powerpc/pseries: Add cpu DLPAR support for drc-info property (bsc#1157480 ltc#181028).
- powerpc/pseries: Advance pfn if section is not present in lmb_is_removable() (bsc#1065729).
- powerpc/pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce for DDW (bsc#1065729).
- powerpc/pseries: Drop pointless static qualifier in vpa_debugfs_init() (git-fixes).
- powerpc/pseries: Enable support for ibm,drc-info property (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix bad drc_index_start value parsing of drc-info entry (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix drc-info mappings of logical cpus to drc-index (bsc#1157480 ltc#181028).
- powerpc/pseries: Fix vector5 in ibm architecture vector table (bsc#1157480 ltc#181028).
- powerpc/pseries: Revert support for ibm,drc-info devtree property (bsc#1157480 ltc#181028).
- powerpc/security: Fix debugfs data leak on 32-bit (bsc#1065729).
- powerpc/tm: Fix clearing MSR[TS] in current when reclaiming on signal delivery (bsc#1118338 ltc#173734).
- powerpc/tools: Do not quote $objdump in scripts (bsc#1065729).
- powerpc/xive: Discard ESB load value when interrupt is invalid (bsc#1085030).
- powerpc/xive: Skip ioremap() of ESB pages for LSI interrupts (bsc#1085030).
- powerpc/xmon: do not access ASDR in VMs (bsc#1065729).
- powerpc: Allow 64bit VDSO __kernel_sync_dicache to work across ranges &gt;4GB (bnc#1151927 5.3.17).
- powerpc: Allow flush_icache_range to work across ranges &gt;4GB (bnc#1151927 5.3.17).
- powerpc: avoid adjusting memory_limit for capture kernel memory reservation (bsc#1140025 ltc#176086).
- powerpc: Enable support for ibm,drc-info devtree property (bsc#1157480 ltc#181028).
- powerpc: Fix vDSO clock_getres() (bsc#1065729).
- powerpc: reserve memory for capture kernel after hugepages init (bsc#1140025 ltc#176086).
- ppp: Adjust indentation into ppp_async_input (git-fixes).
- prevent active file list thrashing due to refault detection (VM Performance, bsc#1156286).
- pseries/drc-info: Search DRC properties for CPU indexes (bsc#1157480 ltc#181028).
- pstore/ram: Write new dumps to start of recycled zones (bsc#1051510).
- pwm: Clear chip_data in pwm_put() (bsc#1051510).
- pwm: clps711x: Fix period calculation (bsc#1051510).
- pwm: omap-dmtimer: Remove PWM chip in .remove before making it unfunctional (git-fixes).
- pwm: Remove set but not set variable 'pwm' (git-fixes).
- pxa168fb: Fix the function used to release some memory in an error (bsc#1114279)
- qede: Disable hardware gro when xdp prog is installed (bsc#1086314 bsc#1086313 bsc#1086301 ).
- qede: Fix multicast mac configuration (networking-stable-19_12_28).
- qede: fix NULL pointer deref in __qede_remove() (networking-stable-19_11_10).
- qmi_wwan: Add support for Quectel RM500Q (bsc#1051510).
- quota: Check that quota is not dirty before release (bsc#1163858).
- quota: fix livelock in dquot_writeback_dquots (bsc#1163857).
- r8152: add missing endpoint sanity check (bsc#1051510).
- r8152: get default setting of WOL before initializing (bsc#1051510).
- random: move FIPS continuous test to output functions (bsc#1155334).
- RDMA/bnxt_re: Avoid freeing MR resources if dereg fails (bsc#1050244).
- RDMA/bnxt_re: Enable SRIOV VF support on Broadcom's 57500 adapter series (bsc#1154916).
- RDMA/bnxt_re: Fix chip number validation Broadcom's Gen P5 series (bsc#1157895).
- RDMA/bnxt_re: Fix missing le16_to_cpu (bsc#1157895).
- RDMA/hns: Bugfix for qpc/cqc timer configuration (bsc#1104427 bsc#1126206).
- RDMA/hns: Correct the value of srq_desc_size (bsc#1104427 ).
- RDMA/hns: Fix to support 64K page for srq (bsc#1104427 ).
- RDMA/hns: Prevent memory leaks of eq-&gt;buf_list (bsc#1104427 ).
- README.BRANCH: Removing myself from the maintainer list
- README.BRANCH: Update the branch name to cve/linux-4.12
- regulator: Fix return value of _set_load() stub (bsc#1051510).
- regulator: rk808: Lower log level on optional GPIOs being not available (bsc#1051510).
- regulator: rn5t618: fix module aliases (bsc#1051510).
- regulator: tps65910: fix a missing check of return value (bsc#1051510).
- reiserfs: Fix memory leak of journal device string (bsc#1163867).
- reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling (bsc#1163869).
- reset: fix reset_control_ops kerneldoc comment (bsc#1051510).
- resource: fix locking in find_next_iomem_res() (bsc#1114279).
- Revert 'ath10k: fix DMA related firmware crashes on multiple devices' (git-fixes).
- Revert 'Input: synaptics-rmi4 - do not increment rmiaddr for SMBus transfers' (bsc#1051510).
- Revert 'locking/pvqspinlock: Do not wait if vCPU is preempted' (bsc#1050549).
- Revert 'mmc: sdhci: Fix incorrect switch to HS mode' (bsc#1051510).
- rpm/kabi.pl: support new (&gt;=5.4) Module.symvers format (new symbol namespace field)
- rpm/kernel-binary.spec.in: Conflict with too old powerpc-utils (jsc#ECO-920, jsc#SLE-11054, jsc#SLE-11322).
- rpm/kernel-binary.spec.in: Replace Novell with SUSE
- rpm/kernel-subpackage-spec: Exclude kernel-firmware recommends (bsc#1143959) For reducing the dependency on kernel-firmware in sub packages
- rpm/kernel-subpackage-spec: Fix empty Recommends tag (bsc#1143959)
- rpm/kernel-subpackage-spec: fix kernel-default-base build There were some issues with recent changes to subpackage dependencies handling:
- rpm/kernel-subpackage-spec: Unify dependency handling.
- rpm/modules.fips: update module list (bsc#1157853)
- rsi_91x_usb: fix interface sanity check (git-fixes).
- rt2800: remove errornous duplicate condition (git-fixes).
- rtc: cmos: Stop using shared IRQ (bsc#1051510).
- rtc: dt-binding: abx80x: fix resistance scale (bsc#1051510).
- rtc: hym8563: Return -EINVAL if the time is known to be invalid (bsc#1051510).
- rtc: max8997: Fix the returned value in case of error in 'max8997_rtc_read_alarm()' (bsc#1051510).
- rtc: msm6242: Fix reading of 10-hour digit (bsc#1051510).
- rtc: pcf8523: set xtal load capacitance from DT (bsc#1051510).
- rtc: s35390a: Change buf's type to u8 in s35390a_init (bsc#1051510).
- rtl818x: fix potential use after free (bsc#1051510).
- rtl8xxxu: fix interface sanity check (git-fixes).
- rtlwifi: Fix MAX MPDU of VHT capability (git-fixes).
- rtlwifi: Remove redundant semicolon in wifi.h (git-fixes).
- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (bsc#1111666).
- s390/qeth: clean up page frag creation (git-fixes).
- s390/qeth: consolidate skb allocation (git-fixes).
- s390/qeth: ensure linear access to packet headers (git-fixes).
- s390/qeth: guard against runt packets (git-fixes).
- sched/fair: Add tmp_alone_branch assertion (bnc#1156462).
- sched/fair: Fix insertion in rq-&gt;leaf_cfs_rq_list (bnc#1156462).
- sched/fair: Fix O(nr_cgroups) in the load balancing path (bnc#1156462).
- sched/fair: Optimize update_blocked_averages() (bnc#1156462).
- sched/fair: WARN() and refuse to set buddy when !se-&gt;on_rq (bsc#1158132).
- scsi: lpfc: fix build failure with DEBUGFS disabled (bsc#1154601).
- scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (bsc#1158013).
- scsi: qla2xxx: Add D-Port Diagnostic reason explanation logs (bsc#1158013).
- scsi: qla2xxx: Added support for MPI and PEP regions for ISP28XX (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Cleanup unused async_logout_done (bsc#1158013).
- scsi: qla2xxx: Consolidate fabric scan (bsc#1158013).
- scsi: qla2xxx: Correct fcport flags handling (bsc#1158013).
- scsi: qla2xxx: Correctly retrieve and interpret active flash region (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Fix a NULL pointer dereference in an error path (bsc#1157966 bsc#1158013 bsc#1157424).
- scsi: qla2xxx: Fix fabric scan hang (bsc#1158013).
- scsi: qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (bsc#1157424, bsc#1157908, bsc#1157169, bsc#1151548).
- scsi: qla2xxx: Fix mtcp dump collection failure (bsc#1158013).
- scsi: qla2xxx: Fix RIDA Format-2 (bsc#1158013).
- scsi: qla2xxx: Fix stuck login session using prli_pend_timer (bsc#1158013).
- scsi: qla2xxx: Fix stuck session in GNL (bsc#1158013).
- scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type (bsc#1158013).
- scsi: qla2xxx: Fix unbound NVME response length (bsc#1157966 bsc#1158013 bsc#1157424).
- scsi: qla2xxx: Fix update_fcport for current_topology (bsc#1158013).
- scsi: qla2xxx: Improve readability of the code that handles qla_flt_header (bsc#1158013).
- scsi: qla2xxx: Remove defer flag to indicate immeadiate port loss (bsc#1158013).
- scsi: qla2xxx: Update driver version to 10.01.00.22-k (bsc#1158013).
- scsi: qla2xxx: Use common routine to free fcport struct (bsc#1158013).
- scsi: qla2xxx: Use get_unaligned_*() instead of open-coding these functions (bsc#1158013).
- scsi: zfcp: trace channel log even for FCP command responses (git-fixes).
- sctp: cache netns in sctp_ep_common (networking-stable-19_12_03).
- sctp: fully initialize v4 addr in some functions (networking-stable-19_12_28).
- serial: 8250_bcm2835aux: Fix line mismatch on driver unbind (bsc#1051510).
- serial: ifx6x60: add missed pm_runtime_disable (bsc#1051510).
- serial: max310x: Fix tx_empty() callback (bsc#1051510).
- serial: pl011: Fix DMA -&gt;flush_buffer() (bsc#1051510).
- serial: serial_core: Perform NULL checks for break_ctl ops (bsc#1051510).
- serial: stm32: fix transmit_chars when tx is stopped (bsc#1051510).
- sfc: Only cancel the PPS workqueue if it exists (networking-stable-19_11_25).
- sfc: Remove 'PCIE error reporting unavailable' (bsc#1161472).
- sh_eth: check sh_eth_cpu_data::dual_port when dumping registers (bsc#1051510).
- sh_eth: fix dumping ARSTR (bsc#1051510).
- sh_eth: fix invalid context bug while calling auto-negotiation by ethtool (bsc#1051510).
- sh_eth: fix invalid context bug while changing link options by ethtool (bsc#1051510).
- sh_eth: fix TSU init on SH7734/R8A7740 (bsc#1051510).
- sh_eth: fix TXALCR1 offsets (bsc#1051510).
- sh_eth: TSU_QTAG0/1 registers the same as TSU_QTAGM0/1 (bsc#1051510).
- smb3: Fix crash in SMB2_open_init due to uninitialized field in compounding path (bsc#1144333).
- smb3: Fix persistent handles reconnect (bsc#1144333).
- smb3: fix refcount underflow warning on unmount when no directory leases (bsc#1144333).
- smb3: remove confusing dmesg when mounting with encryption ('seal') (bsc#1144333).
- soc/tegra: fuse: Correct straps' address for older Tegra124 device trees (bsc#1051510).
- soc: renesas: rcar-sysc: Add goto to of_node_put() before return (bsc#1051510).
- soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot (bsc#1051510).
- spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch (bsc#1051510).
- spi: omap2-mcspi: Set FIFO DMA trigger level to word length (bsc#1051510).
- spi: tegra114: clear packed bit for unpacked mode (bsc#1051510).
- spi: tegra114: configure dma burst size to fifo trig level (bsc#1051510).
- spi: tegra114: fix for unpacked mode transfers (bsc#1051510).
- spi: tegra114: flush fifos (bsc#1051510).
- spi: tegra114: terminate dma and reset on transfer timeout (bsc#1051510).
- sr_vendor: support Beurer GL50 evo CD-on-a-chip devices (boo#1164632).
- staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 (bsc#1051510).
- Staging: iio: adt7316: Fix i2c data reading, set the data field (bsc#1051510).
- staging: rtl8188eu: fix interface sanity check (bsc#1051510).
- staging: rtl8192e: fix potential use after free (bsc#1051510).
- staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids (bsc#1051510).
- staging: rtl8723bs: Drop ACPI device ids (bsc#1051510).
- staging: vt6656: correct packet types for CTS protect, mode (bsc#1051510).
- staging: vt6656: Fix false Tx excessive retries reporting (bsc#1051510).
- staging: vt6656: use NULLFUCTION stack on mac80211 (bsc#1051510).
- staging: wlan-ng: ensure error return is actually returned (bsc#1051510).
- stm class: Fix a double free of stm_source_device (bsc#1051510).
- stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (bsc#1088810, bsc#1161702).
- stop_machine: Atomically queue and wake stopper threads (bsc#1088810, bsc#1161702).
- stop_machine: Disable preemption after queueing stopper threads (bsc#1088810, bsc#1161702).
- stop_machine: Disable preemption when waking two stopper threads (bsc#1088810, bsc#1161702).
- tcp: clear tp-&gt;packets_out when purging write queue (bsc#1160560).
- tcp: do not send empty skb from tcp_write_xmit() (networking-stable-20_01_01).
- tcp: exit if nothing to retransmit on RTO timeout (bsc#1160560, stable 4.14.159).
- tcp: md5: fix potential overestimation of TCP option space (networking-stable-19_12_16).
- thermal: Fix deadlock in thermal thermal_zone_device_check (bsc#1051510).
- tipc: fix a missing check of genlmsg_put (bsc#1051510).
- tipc: fix link name length check (bsc#1051510).
- tipc: fix memory leak in tipc_nl_compat_publ_dump (bsc#1051510).
- tipc: fix skb may be leaky in tipc_link_input (bsc#1051510).
- tracing: Annotate ftrace_graph_hash pointer with __rcu (git-fixes).
- tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu (git-fixes).
- tracing: Fix tracing_stat return values in error handling paths (git-fixes).
- tracing: Fix very unlikely race of registering two stat tracers (git-fixes).
- tracing: Have the histogram compare functions convert to u64 first (bsc#1160210).
- tracing: xen: Ordered comparison of function pointers (git-fixes).
- tty/serial: atmel: Add is_half_duplex helper (bsc#1051510).
- tty: n_hdlc: fix build on SPARC (bsc#1051510).
- tty: serial: msm_serial: Fix lockup for sysrq and oops (bsc#1051510).
- tty: vt: keyboard: reject invalid keycodes (bsc#1051510).
- uaccess: Add non-pagefault user-space write function (bsc#1083647).
- ubifs: Correctly initialize c-&gt;min_log_bytes (bsc#1158641).
- ubifs: do not trigger assertion on invalid no-key filename (bsc#1163850).
- ubifs: Fix deadlock in concurrent bulk-read and writepage (bsc#1163856).
- ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag (bsc#1163855).
- ubifs: Limit the number of pages in shrink_liability (bsc#1158643).
- ubifs: Reject unsupported ioctl flags explicitly (bsc#1163844).
- udp: fix integer overflow while computing available space in sk_rcvbuf (networking-stable-20_01_01).
- usb-storage: Disable UAS on JMicron SATA enclosure (bsc#1051510).
- usb: adutux: fix interface sanity check (bsc#1051510).
- usb: Allow USB device to be warm reset in suspended state (bsc#1051510).
- usb: atm: ueagle-atm: add missing endpoint check (bsc#1051510).
- usb: chipidea: host: Disable port power only if previously enabled (bsc#1051510).
- usb: core: fix check for duplicate endpoints (git-fixes).
- usb: core: hub: Improved device recognition on remote wakeup (bsc#1051510).
- usb: core: urb: fix URB structure initialization function (bsc#1051510).
- usb: documentation: flags on usb-storage versus UAS (bsc#1051510).
- usb: dwc3: debugfs: Properly print/set link state for HS (bsc#1051510).
- usb: dwc3: do not log probe deferrals; but do log other error codes (bsc#1051510).
- usb: dwc3: ep0: Clear started flag on completion (bsc#1051510).
- usb: dwc3: turn off VBUS when leaving host mode (bsc#1051510).
- usb: EHCI: Do not return -EPIPE when hub is disconnected (git-fixes).
- usb: gadget: f_ecm: Use atomic_t to track in-flight request (bsc#1051510).
- usb: gadget: f_ncm: Use atomic_t to track in-flight request (bsc#1051510).
- usb: gadget: legacy: set max_speed to super-speed (bsc#1051510).
- usb: gadget: pch_udc: fix use after free (bsc#1051510).
- usb: gadget: u_serial: add missing port entry locking (bsc#1051510).
- usb: gadget: Zero ffs_io_data (bsc#1051510).
- usb: host: xhci-hub: fix extra endianness conversion (bsc#1051510).
- usb: idmouse: fix interface sanity checks (bsc#1051510).
- usb: mon: Fix a deadlock in usbmon between mmap and read (bsc#1051510).
- usb: mtu3: fix dbginfo in qmu_tx_zlp_error_handler (bsc#1051510).
- usb: musb: dma: Correct parameter passed to IRQ handler (bsc#1051510).
- usb: musb: fix idling for suspend after disconnect interrupt (bsc#1051510).
- usb: roles: fix a potential use after free (git-fixes).
- usb: serial: ch341: handle unbound port at reset_resume (bsc#1051510).
- usb: serial: ftdi_sio: add device IDs for U-Blox C099-F9P (bsc#1051510).
- usb: serial: io_edgeport: add missing active-port sanity check (bsc#1051510).
- usb: serial: io_edgeport: fix epic endpoint lookup (bsc#1051510).
- usb: serial: io_edgeport: handle unbound ports on URB completion (bsc#1051510).
- usb: serial: io_edgeport: use irqsave() in USB's complete callback (bsc#1051510).
- usb: serial: ir-usb: add missing endpoint sanity check (bsc#1051510).
- usb: serial: ir-usb: fix IrLAP framing (bsc#1051510).
- usb: serial: ir-usb: fix link-speed handling (bsc#1051510).
- usb: serial: keyspan: handle unbound ports (bsc#1051510).
- usb: serial: opticon: fix control-message timeouts (bsc#1051510).
- usb: serial: option: Add support for Quectel RM500Q (bsc#1051510).
- usb: serial: option: add support for Quectel RM500Q in QDL mode (git-fixes).
- usb: serial: option: add Telit ME910G1 0x110a composition (git-fixes).
- usb: serial: option: add ZLP support for 0x1bc7/0x9010 (git-fixes).
- usb: serial: quatech2: handle unbound ports (bsc#1051510).
- usb: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx (bsc#1051510).
- usb: serial: suppress driver bind attributes (bsc#1051510).
- usb: typec: tcpci: mask event interrupts when remove driver (bsc#1051510).
- usb: uas: heed CAPACITY_HEURISTICS (bsc#1051510).
- usb: uas: honor flag to avoid CAPACITY16 (bsc#1051510).
- usb: xhci: Fix build warning seen with CONFIG_PM=n (bsc#1051510).
- usb: xhci: only set D3hot for pci device (bsc#1051510).
- usbip: Fix error path of vhci_recv_ret_submit() (git-fixes).
- usbip: Fix receive error in vhci-hcd when using scatter-gather (bsc#1051510).
- vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset == -1 (bsc#1051510).
- vhost/vsock: accept only packets with the right dst_cid (networking-stable-20_01_01).
- video: backlight: Add devres versions of of_find_backlight (bsc#1090888) Taken for 6010831dde5.
- video: backlight: Add of_find_backlight helper in backlight.c (bsc#1090888) Taken for 6010831dde5.
- watchdog: max77620_wdt: fix potential build errors (bsc#1051510).
- watchdog: rn5t618_wdt: fix module aliases (bsc#1051510).
- watchdog: sama5d4: fix WDD value to be always set to max (bsc#1051510).
- watchdog: wdat_wdt: fix get_timeleft call for wdat_wdt (bsc#1162557).
- wireless: fix enabling channel 12 for custom regulatory domain (bsc#1051510).
- wireless: wext: avoid gcc -O3 warning (bsc#1051510).
- workqueue: Fix pwq ref leak in rescuer_thread() (bsc#1160211).
- x86/amd_nb: Add PCI device IDs for family 17h, model 70h (bsc#1163206).
- x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR (bsc#1162619).
- x86/intel_rdt: Split resource group removal in two (bsc#1112178).
- x86/intel_rdt: Split resource group removal in two (bsc#1112178).
- x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI (bsc#1114279).
- x86/mce/AMD: Allow any CPU to initialize the smca_banks array (bsc#1114279).
- x86/MCE/AMD: Allow Reserved types to be overwritten in smca_banks (bsc#1114279).
- x86/MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure() (bsc#1114279).
- x86/mce: Fix possibly incorrect severity calculation on AMD (bsc#1114279).
- x86/resctrl: Check monitoring static key in the MBM overflow handler (bsc#1114279).
- x86/resctrl: Fix a deadlock due to inaccurate reference (bsc#1112178).
- x86/resctrl: Fix a deadlock due to inaccurate reference (bsc#1112178).
- x86/resctrl: Fix an imbalance in domain_remove_cpu() (bsc#1114279).
- x86/resctrl: Fix potential memory leak (bsc#1114279).
- x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup (bsc#1112178).
- x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup (bsc#1112178).
- x86/resctrl: Fix use-after-free when deleting resource groups (bsc#1114279).
- x86/speculation: Fix incorrect MDS/TAA mitigation status (bsc#1114279).
- x86/speculation: Fix redundant MDS mitigation message (bsc#1114279).
- xen-blkfront: switch kcalloc to kvcalloc for large array allocation (bsc#1160917).
- xen/balloon: Support xend-based toolstack take two (bsc#1065600).
- xen/blkback: Avoid unmapping unmapped grant pages (bsc#1065600).
- xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk (bsc#1065600).
- xen: Enable interrupts when calling _cond_resched() (bsc#1065600).
- xfrm: Fix transport mode skb control buffer usage (bsc#1161552).
- xfs: Fix tail rounding in xfs_alloc_file_space() (bsc#1161087, bsc#1153917).
- xfs: Sanity check flags of Q_XQUOTARM call (bsc#1158652).
- xhci: Fix memory leak in xhci_add_in_port() (bsc#1051510).
- xhci: fix USB3 device initiated resume race with roothub autosuspend (bsc#1051510).
- xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour (bsc#1051510).
- xhci: Increase STS_HALT timeout in xhci_suspend() (bsc#1051510).
- xhci: make sure interrupts are restored to correct state (bsc#1051510).
- zd1211rw: fix storage endpoint lookup (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-02"/>
	<updated date="2020-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046303">SUSE bug 1046303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050549">SUSE bug 1050549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051858">SUSE bug 1051858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1061840">SUSE bug 1061840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1083647">SUSE bug 1083647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1085030">SUSE bug 1085030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086301">SUSE bug 1086301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086313">SUSE bug 1086313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086314">SUSE bug 1086314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1088810">SUSE bug 1088810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1090888">SUSE bug 1090888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103989">SUSE bug 1103989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1105392">SUSE bug 1105392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112504">SUSE bug 1112504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115026">SUSE bug 1115026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118338">SUSE bug 1118338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118661">SUSE bug 1118661</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1123328">SUSE bug 1123328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127682">SUSE bug 1127682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129551">SUSE bug 1129551</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133147">SUSE bug 1133147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134973">SUSE bug 1134973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140025">SUSE bug 1140025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142685">SUSE bug 1142685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143959">SUSE bug 1143959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144162">SUSE bug 1144162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146519">SUSE bug 1146519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146544">SUSE bug 1146544</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151548">SUSE bug 1151548</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151910">SUSE bug 1151910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1151927">SUSE bug 1151927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152107">SUSE bug 1152107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152631">SUSE bug 1152631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153535">SUSE bug 1153535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153917">SUSE bug 1153917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154243">SUSE bug 1154243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154601">SUSE bug 1154601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154768">SUSE bug 1154768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154916">SUSE bug 1154916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155331">SUSE bug 1155331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155334">SUSE bug 1155334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1155689">SUSE bug 1155689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156259">SUSE bug 1156259</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156286">SUSE bug 1156286</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156462">SUSE bug 1156462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157155">SUSE bug 1157155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157157">SUSE bug 1157157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157169">SUSE bug 1157169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157303">SUSE bug 1157303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157480">SUSE bug 1157480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157692">SUSE bug 1157692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157853">SUSE bug 1157853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157895">SUSE bug 1157895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157908">SUSE bug 1157908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157966">SUSE bug 1157966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158013">SUSE bug 1158013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158021">SUSE bug 1158021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158026">SUSE bug 1158026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158071">SUSE bug 1158071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158094">SUSE bug 1158094</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158132">SUSE bug 1158132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158381">SUSE bug 1158381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158533">SUSE bug 1158533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158637">SUSE bug 1158637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158638">SUSE bug 1158638</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158639">SUSE bug 1158639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158640">SUSE bug 1158640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158641">SUSE bug 1158641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158643">SUSE bug 1158643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158644">SUSE bug 1158644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158645">SUSE bug 1158645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158646">SUSE bug 1158646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158647">SUSE bug 1158647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158649">SUSE bug 1158649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158651">SUSE bug 1158651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158652">SUSE bug 1158652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158819">SUSE bug 1158819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158823">SUSE bug 1158823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158824">SUSE bug 1158824</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158827">SUSE bug 1158827</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158834">SUSE bug 1158834</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158893">SUSE bug 1158893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158900">SUSE bug 1158900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158903">SUSE bug 1158903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158904">SUSE bug 1158904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158954">SUSE bug 1158954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159024">SUSE bug 1159024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159028">SUSE bug 1159028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159271">SUSE bug 1159271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159297">SUSE bug 1159297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159377">SUSE bug 1159377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159394">SUSE bug 1159394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159483">SUSE bug 1159483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159484">SUSE bug 1159484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159500">SUSE bug 1159500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159569">SUSE bug 1159569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159588">SUSE bug 1159588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159841">SUSE bug 1159841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159908">SUSE bug 1159908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159909">SUSE bug 1159909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159910">SUSE bug 1159910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159911">SUSE bug 1159911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159955">SUSE bug 1159955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160147">SUSE bug 1160147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160195">SUSE bug 1160195</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160210">SUSE bug 1160210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160211">SUSE bug 1160211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160218">SUSE bug 1160218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160433">SUSE bug 1160433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160442">SUSE bug 1160442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160469">SUSE bug 1160469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160470">SUSE bug 1160470</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160476">SUSE bug 1160476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160560">SUSE bug 1160560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160618">SUSE bug 1160618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160678">SUSE bug 1160678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160755">SUSE bug 1160755</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160756">SUSE bug 1160756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160784">SUSE bug 1160784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160787">SUSE bug 1160787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160802">SUSE bug 1160802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160803">SUSE bug 1160803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160804">SUSE bug 1160804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160917">SUSE bug 1160917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160966">SUSE bug 1160966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160979">SUSE bug 1160979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161087">SUSE bug 1161087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161243">SUSE bug 1161243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161360">SUSE bug 1161360</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161472">SUSE bug 1161472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161514">SUSE bug 1161514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161518">SUSE bug 1161518</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161522">SUSE bug 1161522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161523">SUSE bug 1161523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161549">SUSE bug 1161549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161552">SUSE bug 1161552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161674">SUSE bug 1161674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161702">SUSE bug 1161702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161907">SUSE bug 1161907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161931">SUSE bug 1161931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161933">SUSE bug 1161933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161934">SUSE bug 1161934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161935">SUSE bug 1161935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161936">SUSE bug 1161936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161937">SUSE bug 1161937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162028">SUSE bug 1162028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162067">SUSE bug 1162067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162109">SUSE bug 1162109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162139">SUSE bug 1162139</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162557">SUSE bug 1162557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162617">SUSE bug 1162617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162618">SUSE bug 1162618</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162619">SUSE bug 1162619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162623">SUSE bug 1162623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162928">SUSE bug 1162928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162943">SUSE bug 1162943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163206">SUSE bug 1163206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163383">SUSE bug 1163383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163384">SUSE bug 1163384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163762">SUSE bug 1163762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163774">SUSE bug 1163774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163836">SUSE bug 1163836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163840">SUSE bug 1163840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163841">SUSE bug 1163841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163842">SUSE bug 1163842</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163843">SUSE bug 1163843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163844">SUSE bug 1163844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163845">SUSE bug 1163845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163846">SUSE bug 1163846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163849">SUSE bug 1163849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163850">SUSE bug 1163850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163851">SUSE bug 1163851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163852">SUSE bug 1163852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163853">SUSE bug 1163853</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163855">SUSE bug 1163855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163856">SUSE bug 1163856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163857">SUSE bug 1163857</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163858">SUSE bug 1163858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163859">SUSE bug 1163859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163860">SUSE bug 1163860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163861">SUSE bug 1163861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163862">SUSE bug 1163862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163863">SUSE bug 1163863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163867">SUSE bug 1163867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163869">SUSE bug 1163869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163880">SUSE bug 1163880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163971">SUSE bug 1163971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164051">SUSE bug 1164051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164069">SUSE bug 1164069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164098">SUSE bug 1164098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164115">SUSE bug 1164115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164314">SUSE bug 1164314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164315">SUSE bug 1164315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164388">SUSE bug 1164388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164471">SUSE bug 1164471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164598">SUSE bug 1164598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164632">SUSE bug 1164632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164705">SUSE bug 1164705</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164712">SUSE bug 1164712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164727">SUSE bug 1164727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164728">SUSE bug 1164728</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164729">SUSE bug 1164729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164730">SUSE bug 1164730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164731">SUSE bug 1164731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164732">SUSE bug 1164732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164733">SUSE bug 1164733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164734">SUSE bug 1164734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164735">SUSE bug 1164735</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-14615/">CVE-2019-14615</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14896/">CVE-2019-14896</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-14897/">CVE-2019-14897</cve>
	<cve impact="moderate" cvss3="5.2/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-15213/">CVE-2019-15213</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-16746/">CVE-2019-16746</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16994/">CVE-2019-16994</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-18808/">CVE-2019-18808</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19036/">CVE-2019-19036</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19045/">CVE-2019-19045</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19051/">CVE-2019-19051</cve>
	<cve impact="moderate" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19054/">CVE-2019-19054</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19066/">CVE-2019-19066</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19318/">CVE-2019-19318</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19319/">CVE-2019-19319</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19332/">CVE-2019-19332</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19338/">CVE-2019-19338</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19447/">CVE-2019-19447</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19523/">CVE-2019-19523</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19526/">CVE-2019-19526</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-19527/">CVE-2019-19527</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19532/">CVE-2019-19532</cve>
	<cve impact="low" cvss3="2.4/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19533/">CVE-2019-19533</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19535/">CVE-2019-19535</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19537/">CVE-2019-19537</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19767/">CVE-2019-19767</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-19927/">CVE-2019-19927</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19965/">CVE-2019-19965</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19966/">CVE-2019-19966</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20054/">CVE-2019-20054</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20095/">CVE-2019-20095</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-20096/">CVE-2019-20096</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-2732/">CVE-2020-2732</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-7053/">CVE-2020-7053</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8428/">CVE-2020-8428</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8648/">CVE-2020-8648</cve>
	<cve impact="low" cvss3="2.1/CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8992/">CVE-2020-8992</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501629" comment="cluster-md-kmp-default-4.12.14-197.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501630" comment="dlm-kmp-default-4.12.14-197.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501631" comment="gfs2-kmp-default-4.12.14-197.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501632" comment="ocfs2-kmp-default-4.12.14-197.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139135" version="1" class="patch">
	<metadata>
		<title>Security update for keepalived (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1015141" ref_url="https://bugzilla.suse.com/1015141" source="BUGZILLA"/>
		<reference ref_id="1069468" ref_url="https://bugzilla.suse.com/1069468" source="BUGZILLA"/>
		<reference ref_id="1158280" ref_url="https://bugzilla.suse.com/1158280" source="BUGZILLA"/>
		<reference ref_id="949238" ref_url="https://bugzilla.suse.com/949238" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-19044" ref_url="https://www.suse.com/security/cve/CVE-2018-19044/" source="CVE"/>
		<reference ref_id="CVE-2018-19045" ref_url="https://www.suse.com/security/cve/CVE-2018-19045/" source="CVE"/>
		<reference ref_id="CVE-2018-19046" ref_url="https://www.suse.com/security/cve/CVE-2018-19046/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006642.html" source="SUSE-SU"/>
		<description>
This update for keepalived fixes the following issues:

Initial release of keepalived v2.0.19 as supported package. (bsc#1158280, jsc#ECO-223)

		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-24"/>
	<updated date="2020-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1015141">SUSE bug 1015141</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069468">SUSE bug 1069468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158280">SUSE bug 1158280</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/949238">SUSE bug 949238</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-19044/">CVE-2018-19044</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-19045/">CVE-2018-19045</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-19046/">CVE-2018-19046</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501633" comment="keepalived-2.0.19-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139136" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1044231" ref_url="https://bugzilla.suse.com/1044231" source="BUGZILLA"/>
		<reference ref_id="1051510" ref_url="https://bugzilla.suse.com/1051510" source="BUGZILLA"/>
		<reference ref_id="1051858" ref_url="https://bugzilla.suse.com/1051858" source="BUGZILLA"/>
		<reference ref_id="1056686" ref_url="https://bugzilla.suse.com/1056686" source="BUGZILLA"/>
		<reference ref_id="1060463" ref_url="https://bugzilla.suse.com/1060463" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111666" ref_url="https://bugzilla.suse.com/1111666" source="BUGZILLA"/>
		<reference ref_id="1111974" ref_url="https://bugzilla.suse.com/1111974" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1114279" ref_url="https://bugzilla.suse.com/1114279" source="BUGZILLA"/>
		<reference ref_id="1114685" ref_url="https://bugzilla.suse.com/1114685" source="BUGZILLA"/>
		<reference ref_id="1119680" ref_url="https://bugzilla.suse.com/1119680" source="BUGZILLA"/>
		<reference ref_id="1127611" ref_url="https://bugzilla.suse.com/1127611" source="BUGZILLA"/>
		<reference ref_id="1133021" ref_url="https://bugzilla.suse.com/1133021" source="BUGZILLA"/>
		<reference ref_id="1134090" ref_url="https://bugzilla.suse.com/1134090" source="BUGZILLA"/>
		<reference ref_id="1136157" ref_url="https://bugzilla.suse.com/1136157" source="BUGZILLA"/>
		<reference ref_id="1141895" ref_url="https://bugzilla.suse.com/1141895" source="BUGZILLA"/>
		<reference ref_id="1144333" ref_url="https://bugzilla.suse.com/1144333" source="BUGZILLA"/>
		<reference ref_id="1146539" ref_url="https://bugzilla.suse.com/1146539" source="BUGZILLA"/>
		<reference ref_id="1156510" ref_url="https://bugzilla.suse.com/1156510" source="BUGZILLA"/>
		<reference ref_id="1157424" ref_url="https://bugzilla.suse.com/1157424" source="BUGZILLA"/>
		<reference ref_id="1158187" ref_url="https://bugzilla.suse.com/1158187" source="BUGZILLA"/>
		<reference ref_id="1159285" ref_url="https://bugzilla.suse.com/1159285" source="BUGZILLA"/>
		<reference ref_id="1160659" ref_url="https://bugzilla.suse.com/1160659" source="BUGZILLA"/>
		<reference ref_id="1161561" ref_url="https://bugzilla.suse.com/1161561" source="BUGZILLA"/>
		<reference ref_id="1161951" ref_url="https://bugzilla.suse.com/1161951" source="BUGZILLA"/>
		<reference ref_id="1162928" ref_url="https://bugzilla.suse.com/1162928" source="BUGZILLA"/>
		<reference ref_id="1162929" ref_url="https://bugzilla.suse.com/1162929" source="BUGZILLA"/>
		<reference ref_id="1162931" ref_url="https://bugzilla.suse.com/1162931" source="BUGZILLA"/>
		<reference ref_id="1164078" ref_url="https://bugzilla.suse.com/1164078" source="BUGZILLA"/>
		<reference ref_id="1164507" ref_url="https://bugzilla.suse.com/1164507" source="BUGZILLA"/>
		<reference ref_id="1165111" ref_url="https://bugzilla.suse.com/1165111" source="BUGZILLA"/>
		<reference ref_id="1165404" ref_url="https://bugzilla.suse.com/1165404" source="BUGZILLA"/>
		<reference ref_id="1165488" ref_url="https://bugzilla.suse.com/1165488" source="BUGZILLA"/>
		<reference ref_id="1165527" ref_url="https://bugzilla.suse.com/1165527" source="BUGZILLA"/>
		<reference ref_id="1165741" ref_url="https://bugzilla.suse.com/1165741" source="BUGZILLA"/>
		<reference ref_id="1165813" ref_url="https://bugzilla.suse.com/1165813" source="BUGZILLA"/>
		<reference ref_id="1165873" ref_url="https://bugzilla.suse.com/1165873" source="BUGZILLA"/>
		<reference ref_id="1165929" ref_url="https://bugzilla.suse.com/1165929" source="BUGZILLA"/>
		<reference ref_id="1165950" ref_url="https://bugzilla.suse.com/1165950" source="BUGZILLA"/>
		<reference ref_id="1165980" ref_url="https://bugzilla.suse.com/1165980" source="BUGZILLA"/>
		<reference ref_id="1165984" ref_url="https://bugzilla.suse.com/1165984" source="BUGZILLA"/>
		<reference ref_id="1165985" ref_url="https://bugzilla.suse.com/1165985" source="BUGZILLA"/>
		<reference ref_id="1166003" ref_url="https://bugzilla.suse.com/1166003" source="BUGZILLA"/>
		<reference ref_id="1166101" ref_url="https://bugzilla.suse.com/1166101" source="BUGZILLA"/>
		<reference ref_id="1166102" ref_url="https://bugzilla.suse.com/1166102" source="BUGZILLA"/>
		<reference ref_id="1166103" ref_url="https://bugzilla.suse.com/1166103" source="BUGZILLA"/>
		<reference ref_id="1166104" ref_url="https://bugzilla.suse.com/1166104" source="BUGZILLA"/>
		<reference ref_id="1166632" ref_url="https://bugzilla.suse.com/1166632" source="BUGZILLA"/>
		<reference ref_id="1166658" ref_url="https://bugzilla.suse.com/1166658" source="BUGZILLA"/>
		<reference ref_id="1166730" ref_url="https://bugzilla.suse.com/1166730" source="BUGZILLA"/>
		<reference ref_id="1166731" ref_url="https://bugzilla.suse.com/1166731" source="BUGZILLA"/>
		<reference ref_id="1166732" ref_url="https://bugzilla.suse.com/1166732" source="BUGZILLA"/>
		<reference ref_id="1166733" ref_url="https://bugzilla.suse.com/1166733" source="BUGZILLA"/>
		<reference ref_id="1166734" ref_url="https://bugzilla.suse.com/1166734" source="BUGZILLA"/>
		<reference ref_id="1166735" ref_url="https://bugzilla.suse.com/1166735" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19768" ref_url="https://www.suse.com/security/cve/CVE-2019-19768/" source="CVE"/>
		<reference ref_id="CVE-2020-8647" ref_url="https://www.suse.com/security/cve/CVE-2020-8647/" source="CVE"/>
		<reference ref_id="CVE-2020-8648" ref_url="https://www.suse.com/security/cve/CVE-2020-8648/" source="CVE"/>
		<reference ref_id="CVE-2020-8649" ref_url="https://www.suse.com/security/cve/CVE-2020-8649/" source="CVE"/>
		<reference ref_id="CVE-2020-9383" ref_url="https://www.suse.com/security/cve/CVE-2020-9383/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-March/006656.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-8647: Fixed a use-after-free in the vc_do_resize function in drivers/tty/vt/vt.c (bsc#1162929).
- CVE-2020-8649: Fixed a use-after-free in the vgacon_invert_region function in drivers/video/console/vgacon.c (bsc#1162931).
- CVE-2020-8648: Fixed a use-after-free in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bsc#1162928).
- CVE-2020-9383: Fixed an out-of-bounds read due to improper error condition check of FDC index (bsc#1165111).
- CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).

The following non-security bugs were fixed:

- ALSA: hda/realtek - Add Headset Button supported for ThinkPad X1 (bsc#1111666).
- ALSA: hda/realtek - Add Headset Mic supported (bsc#1111666).
- ALSA: hda/realtek - Add more codec supported Headset Button (bsc#1111666).
- ALSA: hda/realtek - Apply quirk for MSI GP63, too (bsc#1111666).
- ALSA: hda/realtek - Apply quirk for yet another MSI laptop (bsc#1111666).
- ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294 (bsc#1111666).
- ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1 (bsc#1111666).
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master (bsc#1111666).
- ALSA: usb-audio: Add boot quirk for MOTU M Series (bsc#1111666).
- ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000 (bsc#1111666).
- ALSA: usb-audio: add implicit fb quirk for MOTU M Series (bsc#1111666).
- ALSA: usb-audio: add quirks for Line6 Helix devices fw&gt;=2.82 (bsc#1111666).
- ALSA: usb-audio: Apply 48kHz fixed rate playback for Jabra Evolve 65 headset (bsc#1111666).
- ALSA: usb-audio: fix Corsair Virtuoso mixer label collision (bsc#1111666).
- ALSA: usb-audio: Fix UAC2/3 effect unit parsing (bsc#1111666).
- ALSA: usb-audio: unlock on error in probe (bsc#1111666).
- ALSA: usb-audio: Use lower hex numbers for IDs (bsc#1111666).
- ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status (bsc#1051510).
- amdgpu/gmc_v9: save/restore sdpif regs during S3 (bsc#1113956)
- ASoC: dapm: Correct DAPM handling of active widgets during shutdown (bsc#1051510).
- ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path (bsc#1051510).
- ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output (bsc#1051510).
- ASoC: pcm: update FE/BE trigger order based on the command (bsc#1051510).
- ASoC: topology: Fix memleak in soc_tplg_link_elems_load() (bsc#1051510).
- atm: zatm: Fix empty body Clang warnings (bsc#1051510).
- b43legacy: Fix -Wcast-function-type (bsc#1051510).
- blk: Fix kabi due to blk_trace_mutex addition (bsc#1159285).
- blktrace: fix dereference after null check (bsc#1159285).
- blktrace: fix trace mutex deadlock (bsc#1159285).
- bnxt_en: Fix NTUPLE firmware command failures (bsc#1104745 ).
- bnxt_en: Fix TC queue mapping (networking-stable-20_02_05).
- bnxt_en: Improve device shutdown method (bsc#1104745 ).
- bnxt_en: Issue PCIe FLR in kdump kernel to cleanup pending DMAs (bsc#1134090 jsc#SLE-5954).
- bonding/alb: properly access headers in bond_alb_xmit() (networking-stable-20_02_09).
- bpf, offload: Replace bitwise AND by logical AND in bpf_prog_offload_info_fill (bsc#1109837).
- CIFS: add a debug macro that prints \\server\share for errors (bsc#1144333).
- CIFS: add missing mount option to /proc/mounts (bsc#1144333).
- CIFS: add new debugging macro cifs_server_dbg (bsc#1144333).
- CIFS: add passthrough for smb2 setinfo (bsc#1144333).
- CIFS: add SMB2_open() arg to return POSIX data (bsc#1144333).
- CIFS: add smb2 POSIX info level (bsc#1144333).
- CIFS: add SMB3 change notification support (bsc#1144333).
- CIFS: add support for fallocate mode 0 for non-sparse files (bsc#1144333).
- CIFS: Add support for setting owner info, dos attributes, and create time (bsc#1144333).
- CIFS: Add tracepoints for errors on flush or fsync (bsc#1144333).
- CIFS: Adjust indentation in smb2_open_file (bsc#1144333).
- CIFS: allow chmod to set mode bits using special sid (bsc#1144333).
- CIFS: Avoid doing network I/O while holding cache lock (bsc#1144333).
- CIFS: call wake_up(server-&gt;response_q) inside of cifs_reconnect() (bsc#1144333).
- CIFS: Clean up DFS referral cache (bsc#1144333).
- CIFS: create a helper function to parse the query-directory response buffer (bsc#1144333).
- CIFS: do d_move in rename (bsc#1144333).
- CIFS: Do not display RDMA transport on reconnect (bsc#1144333).
- CIFS: do not ignore the SYNC flags in getattr (bsc#1144333).
- CIFS: do not leak -EAGAIN for stat() during reconnect (bsc#1144333).
- CIFS: do not use 'pre:' for MODULE_SOFTDEP (bsc#1144333).
- CIFS: enable change notification for SMB2.1 dialect (bsc#1144333).
- CIFS: fail i/o on soft mounts if sessionsetup errors out (bsc#1144333).
- CIFS: fix a comment for the timeouts when sending echos (bsc#1144333).
- CIFS: fix a white space issue in cifs_get_inode_info() (bsc#1144333).
- CIFS: fix dereference on ses before it is null checked (bsc#1144333).
- CIFS: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333).
- CIFS: fix mode bits from dir listing when mounted with modefromsid (bsc#1144333).
- CIFS: Fix mode output in debugging statements (bsc#1144333).
- CIFS: Fix mount options set in automount (bsc#1144333).
- CIFS: fix NULL dereference in match_prepath (bsc#1144333).
- CIFS: Fix potential deadlock when updating vol in cifs_reconnect() (bsc#1144333).
- CIFS: fix potential mismatch of UNC paths (bsc#1144333).
- CIFS: fix rename() by ensuring source handle opened with DELETE bit (bsc#1144333).
- CIFS: Fix return value in __update_cache_entry (bsc#1144333).
- CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333).
- CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333).
- CIFS: Fix task struct use-after-free on reconnect (bsc#1144333).
- CIFS: fix unitialized variable poential problem with network I/O cache lock patch (bsc#1144333).
- CIFS: get mode bits from special sid on stat (bsc#1144333).
- CIFS: Get rid of kstrdup_const()'d paths (bsc#1144333).
- CIFS: handle prefix paths in reconnect (bsc#1144333).
- CIFS: Introduce helpers for finding TCP connection (bsc#1144333).
- CIFS: log warning message (once) if out of disk space (bsc#1144333).
- CIFS: make sure we do not overflow the max EA buffer size (bsc#1144333).
- CIFS: make use of cap_unix(ses) in cifs_reconnect_tcon() (bsc#1144333).
- CIFS: Merge is_path_valid() into get_normalized_path() (bsc#1144333).
- CIFS: modefromsid: make room for 4 ACE (bsc#1144333).
- CIFS: modefromsid: write mode ACE first (bsc#1144333).
- CIFS: Optimize readdir on reparse points (bsc#1144333).
- CIFS: plumb smb2 POSIX dir enumeration (bsc#1144333).
- CIFS: potential unintitliazed error code in cifs_getattr() (bsc#1144333).
- CIFS: prepare SMB2_query_directory to be used with compounding (bsc#1144333).
- CIFS: print warning once if mounting with vers=1.0 (bsc#1144333).
- CIFS: refactor cifs_get_inode_info() (bsc#1144333).
- CIFS: remove redundant assignment to pointer pneg_ctxt (bsc#1144333).
- CIFS: remove redundant assignment to variable rc (bsc#1144333).
- CIFS: remove set but not used variables (bsc#1144333).
- CIFS: remove set but not used variable 'server' (bsc#1144333).
- CIFS: remove unused variable (bsc#1144333).
- CIFS: remove unused variable 'sid_user' (bsc#1144333).
- CIFS: rename a variable in SendReceive() (bsc#1144333).
- CIFS: rename posix create rsp (bsc#1144333).
- CIFS: replace various strncpy with strscpy and similar (bsc#1144333).
- CIFS: Return directly after a failed build_path_from_dentry() in cifs_do_create() (bsc#1144333).
- CIFS: set correct max-buffer-size for smb2_ioctl_init() (bsc#1144333).
- CIFS: smbd: Add messages on RDMA session destroy and reconnection (bsc#1144333).
- CIFS: smbd: Invalidate and deregister memory registration on re-send for direct I/O (bsc#1144333).
- CIFS: smbd: Only queue work for error recovery on memory registration (bsc#1144333).
- CIFS: smbd: Return -EAGAIN when transport is reconnecting (bsc#1144333).
- CIFS: smbd: Return -ECONNABORTED when trasnport is not in connected state (bsc#1144333).
- CIFS: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE (bsc#1144333).
- CIFS: Use common error handling code in smb2_ioctl_query_info() (bsc#1144333).
- CIFS: use compounding for open and first query-dir for readdir() (bsc#1144333).
- CIFS: Use #define in cifs_dbg (bsc#1144333).
- CIFS: Use memdup_user() rather than duplicating its implementation (bsc#1144333).
- CIFS: use mod_delayed_work() for server-&gt;reconnect if already queued (bsc#1144333).
- CIFS: use PTR_ERR_OR_ZERO() to simplify code (bsc#1144333).
- cls_rsvp: fix rsvp_policy (networking-stable-20_02_05).
- core: Do not skip generic XDP program execution for cloned SKBs (bsc#1109837).
- cpufreq: powernv: Fix unsafe notifiers (bsc#1065729).
- cpufreq: powernv: Fix use-after-free (bsc#1065729).
- crypto: pcrypt - Fix user-after-free on module unload (git-fixes).
- devlink: report 0 after hitting end in region read (bsc#1109837).
- dmaengine: coh901318: Fix a double lock bug in dma_tc_handle() (bsc#1051510).
- driver core: platform: fix u32 greater or equal to zero comparison (bsc#1051510).
- driver core: platform: Prevent resouce overflow from causing infinite loops (bsc#1051510).
- driver core: Print device when resources present in really_probe() (bsc#1051510).
- drivers/md/raid5.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).
- drivers/md/raid5-ppl.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).
- drm/amd/dm/mst: Ignore payload update failures (bsc#1112178)
- drm/amdkfd: fix a use after free race with mmu_notifer unregister (bsc#1114279)
- drm: atmel-hlcdc: enable clock before configuring timing engine (bsc#1114279)
- drm/etnaviv: fix dumping of iommuv2 (bsc#1114279)
- drm/gma500: Fixup fbdev stolen size usage evaluation (bsc#1051510).
- drm/i915/gvt: Fix orphan vgpu dmabuf_objs' lifetime (git-fixes).
- drm/i915/gvt: Fix unnecessary schedule timer when no vGPU exits (git-fixes).
- drm/i915/gvt: Separate display reset from ALL_ENGINES reset (bsc#1114279)
- drm/i915: Program MBUS with rmw during initialization (git-fixes).
- drm/i915/selftests: Fix return in assert_mmap_offset() (bsc#1114279) 
- drm/i915/userptr: fix size calculation (bsc#1114279)
- drm/i915/userptr: Try to acquire the page lock around (bsc#1114279)
- drm/i915: Wean off drm_pci_alloc/drm_pci_free (bsc#1114279)
- drm/mediatek: Add gamma property according to hardware capability (bsc#1114279)
- drm/mediatek: disable all the planes in atomic_disable (bsc#1114279)
- drm/mediatek: handle events when enabling/disabling crtc (bsc#1051510).
- drm/mipi_dbi: Fix off-by-one bugs in mipi_dbi_blank() (bsc#1114279)
- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable (bsc#1114279)
- drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (bsc#1051510).
- drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from fw (bsc#1051510).
- drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (git-fixes).
- drm: rcar-du: Recognize 'renesas,vsps' in addition to 'vsps' (bsc#1114279)
- drm: remove the newline for CRC source name (bsc#1051510).
- EDAC/mc: Fix use-after-free and memleaks during device removal (bsc#1114279).
- Enabled the following two patches in series.conf, and refresh the KABI patch due to previous md commit (bsc#1119680)
- ethtool: Factored out similar ethtool link settings for virtual devices to core (bsc#1136157 ltc#177197).
- fcntl: fix typo in RWH_WRITE_LIFE_NOT_SET r/w hint name (bsc#1166003).
- firmware: imx: misc: Align imx sc msg structs to 4 (git-fixes).
- firmware: imx: scu: Ensure sequential TX (git-fixes).
- firmware: imx: scu-pd: Align imx sc msg structs to 4 (git-fixes).
- Fixed memory leak in large read decrypt offload (bsc#1144333).
- Fixed some regressions (bsc#1165527 ltc#184149).
- fs/cifs/cifssmb.c: use true,false for bool variable (bsc#1144333).
- fs: cifs: cifsssmb: remove redundant assignment to variable ret (bsc#1144333).
- fs: cifs: Initialize filesystem timestamp ranges (bsc#1144333).
- fs: cifs: mute -Wunused-const-variable message (bsc#1144333).
- fs/cifs/sess.c: Remove set but not used variable 'capabilities' (bsc#1144333).
- fs/cifs/smb2ops.c: use true,false for bool variable (bsc#1144333).
- fs/cifs/smb2pdu.c: Make SMB2_notify_init static (bsc#1144333).
- fs/xfs: fix f_ffree value for statfs when project quota is set (bsc#1165985).
- gtp: make sure only SOCK_DGRAM UDP sockets are accepted (networking-stable-20_01_27).
- gtp: use __GFP_NOWARN to avoid memalloc warning (networking-stable-20_02_05).
- HID: core: fix off-by-one memset in hid_report_raw_event() (bsc#1051510).
- HID: hiddev: Fix race in in hiddev_disconnect() (git-fixes).
- hv_netvsc: Fix memory leak when removing rndis device (networking-stable-20_01_20).
- hwmon: (adt7462) Fix an error return in ADT7462_REG_VOLT() (bsc#1051510).
- IB/hfi1: Close window for pq and request coliding (bsc#1060463 ).
- ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551).
- ibmvnic: Do not process device remove during device reset (bsc#1065729).
- ibmvnic: Warn unknown speed message only when carrier is present (bsc#1065729).
- Input: edt-ft5x06 - work around first register access error (bsc#1051510).
- Input: synaptics - enable SMBus on ThinkPad L470 (bsc#1051510).
- Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list (bsc#1051510).
- Input: synaptics - switch T470s to RMI4 by default (bsc#1051510).
- iommu/amd: Check feature support bit before accessing MSI capability registers (bsc#1166101).
- iommu/amd: Only support x2APIC with IVHD type 11h/40h (bsc#1166102).
- iommu/amd: Remap the IOMMU device table with the memory encryption mask for kdump (bsc#1141895).
- iommu/dma: Fix MSI reservation allocation (bsc#1166730).
- iommu/vt-d: dmar: replace WARN_TAINT with pr_warn + add_taint (bsc#1166731).
- iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys() for huge page (bsc#1166732).
- iommu/vt-d: Fix compile warning from intel-svm.h (bsc#1166103).
- iommu/vt-d: Fix the wrong printing in RHSA parsing (bsc#1166733).
- iommu/vt-d: Ignore devices with out-of-spec domain number (bsc#1166734).
- iommu/vt-d: quirk_ioat_snb_local_iommu: replace WARN_TAINT with pr_warn + add_taint (bsc#1166735).
- ipv4: ensure rcu_read_lock() in cipso_v4_error() (git-fixes).
- ipv6: restrict IPV6_ADDRFORM operation (bsc#1109837).
- iwlegacy: Fix -Wcast-function-type (bsc#1051510).
- iwlwifi: mvm: Do not require PHY_SKU NVM section for 3168 devices (bsc#1166632).
- iwlwifi: mvm: Fix thermal zone registration (bsc#1051510).
- kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (bsc#1141895).
- kernel/module.c: Only return -EEXIST for modules that have finished loading (bsc#1165488).
- kernel/module.c: wakeup processes in module_wq on module unload (bsc#1165488).
- kexec: Allocate decrypted control pages for kdump if SME is enabled (bsc#1141895).
- KVM: arm64: Store vcpu on the stack during __guest_enter() (bsc#1133021).
- KVM: s390: do not clobber registers during guest reset/store status (bsc#1133021).
- KVM: s390: ENOTSUPP -&gt; EOPNOTSUPP fixups (bsc#1133021).
- KVM: VMX: check descriptor table exits on instruction emulation (bsc#1166104).
- l2tp: Allow duplicate session creation with UDP (networking-stable-20_02_05).
- libnvdimm/pfn_dev: Do not clear device memmap area during generic namespace probe (bsc#1165929 bsc#1165950).
- libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields (bsc#1165929).
- libnvdimm: remove redundant __func__ in dev_dbg (bsc#1165929).
- lib/raid6: add missing include for raid6test (bsc#1166003).
- lib/raid6: add option to skip algo benchmarking (bsc#1166003).
- lib/raid6: avoid __attribute_const__ redefinition (bsc#1166003).
- md: add __acquires/__releases annotations to handle_active_stripes (bsc#1166003).
- md: add __acquires/__releases annotations to (un)lock_two_stripes (bsc#1166003).
- md: add a missing endianness conversion in check_sb_changes (bsc#1166003).
- md: add bitmap_abort label in md_run (bsc#1166003).
- md: add feature flag MD_FEATURE_RAID0_LAYOUT (bsc#1166003).
- md: allow last device to be forcibly removed from RAID1/RAID10 (bsc#1166003).
- md: avoid invalid memory access for array sb-&gt;dev_roles (bsc#1166003).
- md/bitmap: avoid race window between md_bitmap_resize and bitmap_file_clear_bit (bsc#1166003).
- md-bitmap: create and destroy wb_info_pool with the change of backlog (bsc#1166003).
- md-bitmap: create and destroy wb_info_pool with the change of bitmap (bsc#1166003).
- md-bitmap: small cleanups (bsc#1166003).
- md/bitmap: use mddev_suspend/resume instead of -&gt;quiesce() (bsc#1166003).
- md-cluster/bitmap: do not call md_bitmap_sync_with_cluster during reshaping stage (bsc#1166003).
- md-cluster: introduce resync_info_get interface for sanity check (bsc#1166003).
- md-cluster/raid10: call update_size in md_reap_sync_thread (bsc#1166003).
- md-cluster/raid10: do not call remove_and_add_spares during reshaping stage (bsc#1166003).
- md-cluster/raid10: resize all the bitmaps before start reshape (bsc#1166003).
- md-cluster/raid10: support add disk under grow mode (bsc#1166003).
- md-cluster: remove suspend_info (bsc#1166003).
- md-cluster: send BITMAP_NEEDS_SYNC message if reshaping is interrupted (bsc#1166003).
- md: convert to kvmalloc (bsc#1166003).
- md: do not call spare_active in md_reap_sync_thread if all member devices can't work (bsc#1166003).
- md: do not set In_sync if array is frozen (bsc#1166003).
- md: fix a typo s/creat/create (bsc#1166003).
- md: fix for divide error in status_resync (bsc#1166003).
- md: fix spelling typo and add necessary space (bsc#1166003).
- md: introduce mddev_create/destroy_wb_pool for the change of member device (bsc#1166003).
- md-linear: use struct_size() in kzalloc() (bsc#1166003).
- md: Make bio_alloc_mddev use bio_alloc_bioset (bsc#1166003).
- md: make sure desc_nr less than MD_SB_DISKS (bsc#1166003).
- md: md.c: Return -ENODEV when mddev is NULL in rdev_attr_show (bsc#1166003).
- md: no longer compare spare disk superblock events in super_load (bsc#1166003).
- md/raid0: Fix an error message in raid0_make_request() (bsc#1166003).
- md raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone (bsc#1166003).
- md/raid10: end bio when the device faulty (bsc#1166003).
- md/raid10: Fix raid10 replace hang when new added disk faulty (bsc#1166003).
- md/raid10: prevent access of uninitialized resync_pages offset (bsc#1166003).
- md/raid10: read balance chooses idlest disk for SSD (bsc#1166003).
- md: raid10: Use struct_size() in kmalloc() (bsc#1166003).
- md/raid1: avoid soft lockup under high load (bsc#1166003).
- md: raid1: check rdev before reference in raid1_sync_request func (bsc#1166003).
- md/raid1: end bio when the device faulty (bsc#1166003).
- md/raid1: fail run raid1 array when active disk less than one (bsc#1166003).
- md/raid1: Fix a warning message in remove_wb() (bsc#1166003).
- md/raid1: fix potential data inconsistency issue with write behind device (bsc#1166003).
- md/raid1: get rid of extra blank line and space (bsc#1166003).
- md/raid5: use bio_end_sector to calculate last_sector (bsc#1166003).
- md/raid6: fix algorithm choice under larger PAGE_SIZE (bsc#1166003).
- md: remove set but not used variable 'bi_rdev' (bsc#1166003).
- md: rename wb stuffs (bsc#1166003).
- md: return -ENODEV if rdev has no mddev assigned (bsc#1166003).
- md: use correct type in super_1_load (bsc#1166003).
- md: use correct type in super_1_sync (bsc#1166003).
- md: use correct types in md_bitmap_print_sb (bsc#1166003).
- media: uvcvideo: Refactor teardown of uvc on USB disconnect (bsc#1164507).
- mlxsw: spectrum_qdisc: Include MC TCs in Qdisc counters (bsc#1112374).
- mlxsw: spectrum: Wipe xstats.backlog of down ports (bsc#1112374).
- net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM (networking-stable-20_01_27).
- net: dsa: mv88e6xxx: Preserve priority when setting CPU port (networking-stable-20_01_11).
- net: dsa: tag_qca: fix doubled Tx statistics (networking-stable-20_01_20).
- net/ethtool: Introduce link_ksettings API for virtual network devices (bsc#1136157 ltc#177197).
- net: Fix Tx hash bound checking (bsc#1109837).
- net: hns3: fix a copying IPv6 address error in hclge_fd_get_flow_tuples() (bsc#1104353).
- net: hns: fix soft lockup when there is not enough memory (networking-stable-20_01_20).
- net: hsr: fix possible NULL deref in hsr_handle_frame() (networking-stable-20_02_05).
- net: ip6_gre: fix moving ip6gre between namespaces (networking-stable-20_01_27).
- net, ip6_tunnel: fix namespaces move (networking-stable-20_01_27).
- net, ip_tunnel: fix namespaces move (networking-stable-20_01_27).
- net: macb: Limit maximum GEM TX length in TSO (networking-stable-20_02_09).
- net: macb: Remove unnecessary alignment check for TSO (networking-stable-20_02_09).
- net/mlx5: Fix lowest FDB pool size (bsc#1103990).
- net/mlx5: IPsec, Fix esp modify function attribute (bsc#1103990 ).
- net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx (bsc#1103990).
- net/mlx5: Update the list of the PCI supported devices (bsc#1127611).
- net/mlxfw: Verify FSM error code translation does not exceed array size (bsc#1051858).
- net: mvneta: move rx_dropped and rx_errors in per-cpu stats (networking-stable-20_02_09).
- net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link() (networking-stable-20_01_27).
- net_sched: ematch: reject invalid TCF_EM_SIMPLE (networking-stable-20_01_30).
- net_sched: fix an OOB access in cls_tcindex (networking-stable-20_02_05).
- net_sched: fix a resource leak in tcindex_set_parms() (networking-stable-20_02_09).
- net_sched: fix datalen for ematch (networking-stable-20_01_27).
- net: sch_prio: When ungrafting, replace with FIFO (networking-stable-20_01_11).
- net/smc: add fallback check to connect() (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- net: stmmac: dwmac-sunxi: Allow all RGMII modes (networking-stable-20_01_11).
- net-sysfs: Fix reference count leak (networking-stable-20_01_27).
- net: systemport: Avoid RBUF stuck in Wake-on-LAN mode (networking-stable-20_02_09).
- net/tls: fix async operation (bsc#1109837).
- net/tls: free the record on encryption error (bsc#1109837).
- net/tls: take into account that bpf_exec_tx_verdict() may free the record (bsc#1109837).
- net: usb: lan78xx: Add .ndo_features_check (networking-stable-20_01_27).
- net: usb: lan78xx: fix possible skb leak (networking-stable-20_01_11).
- net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info (networking-stable-20_01_20).
- NFC: pn544: Fix a typo in a debug message (bsc#1051510).
- NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu() (bsc#1051510).
- nvme: Fix parsing of ANA log page (bsc#1166658).
- nvme: resync include/linux/nvme.h with nvmecli (bsc#1156510).
- nvme: Translate more status codes to blk_status_t (bsc#1156510).
- orinoco: avoid assertion in case of NULL pointer (bsc#1051510).
- padata: always acquire cpu_hotplug_lock before pinst-&gt;lock (git-fixes).
- PCI/AER: Clear device status bits during ERR_COR handling (bsc#1161561).
- PCI/AER: Clear device status bits during ERR_FATAL and ERR_NONFATAL (bsc#1161561).
- PCI/AER: Clear only ERR_FATAL status bits during fatal recovery (bsc#1161561).
- PCI/AER: Clear only ERR_NONFATAL bits during non-fatal recovery (bsc#1161561).
- PCI/AER: Do not clear AER bits if error handling is Firmware-First (bsc#1161561).
- PCI/AER: Do not read upstream ports below fatal errors (bsc#1161561).
- PCI/AER: Factor out ERR_NONFATAL status bit clearing (bsc#1161561).
- PCI/AER: Take reference on error devices (bsc#1161561).
- PCI/ERR: Run error recovery callbacks for all affected devices (bsc#1161561).
- PCI/ERR: Use slot reset if available (bsc#1161561).
- pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled pins (bsc#1051510).
- pinctrl: imx: scu: Align imx sc msg structs to 4 (git-fixes).
- pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs (bsc#1051510).
- pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs (bsc#1051510).
- pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM (networking-stable-20_01_11).
- platform/mellanox: fix potential deadlock in the tmfifo driver (bsc#1136333 jsc#SLE-4994).
- powerpc: fix hardware PMU exception bug on PowerVM compatibility mode systems (bsc#1056686).
- powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (bsc#1160659).
- powerpc/pseries: fix of_read_drc_info_cell() to point at next record (bsc#1165980 ltc#183834).
- powerpc/pseries: group lmb operation and memblock's (bsc#1165404 ltc#183498).
- powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (bsc#1165404 ltc#183498).
- powerpc/pseries: update device tree before ejecting hotplug uevents (bsc#1165404 ltc#183498).
- powerpc/smp: Use nid as fallback for package_id (bsc#1165813 ltc#184091).
- ptr_ring: add include of linux/mm.h (bsc#1109837).
- qmi_wwan: re-add DW5821e pre-production variant (bsc#1051510).
- raid10: refactor common wait code from regular read/write request (bsc#1166003).
- raid1: factor out a common routine to handle the completion of sync write (bsc#1166003).
- raid1: simplify raid1_error function (bsc#1166003).
- raid1: use an int as the return value of raise_barrier() (bsc#1166003).
- raid5: block failing device if raid will be failed (bsc#1166003).
- raid5: do not increment read_errors on EILSEQ return (bsc#1166003).
- raid5: do not set STRIPE_HANDLE to stripe which is in batch list (bsc#1166003).
- raid5 improve too many read errors msg by adding limits (bsc#1166003).
- raid5: need to set STRIPE_HANDLE for batch head (bsc#1166003).
- raid5: remove STRIPE_OPS_REQ_PENDING (bsc#1166003).
- raid5: remove worker_cnt_per_group argument from alloc_thread_groups (bsc#1166003). 
- raid5: set write hint for PPL (bsc#1166003).
- raid5: use bio_end_sector in r5_next_bio (bsc#1166003).
- raid6/test: fix a compilation error (bsc#1166003).
- raid6/test: fix a compilation warning (bsc#1166003).
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (bsc#1103992).
- RDMA/hfi1: Fix memory leak in _dev_comp_vect_mappings_create (bsc#1114685).
- RDMA/uverbs: Verify MR access flags (bsc#1103992).
- remoteproc: Initialize rproc_class before use (bsc#1051510).
- Revert 'HID: add NOGET quirk for Eaton Ellipse MAX UPS' (git-fixes).
- rtlwifi: rtl_pci: Fix -Wcast-function-type (bsc#1051510).
- rxrpc: Fix insufficient receive notification generation (networking-stable-20_02_05).
- s390/pci: Fix unexpected write combine on resource (git-fixes).
- s390/uv: Fix handling of length extensions (git-fixes).
- scsi: fnic: do not queue commands during fwreset (bsc#1146539).
- scsi: ibmvfc: Add failed PRLI to cmd_status lookup array (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Byte swap status and error codes when logging (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Clean up transport events (bsc#1161951 ltc#183551).
- scsi: ibmvfc: constify dev_pm_ops structures (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Do not call fc_block_scsi_eh() on host reset (bsc#1161951 ltc#183551).
- scsi: ibmvfc: ibmvscsi: ibmvscsi_tgt: constify vio_device_id (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Mark expected switch fall-throughs (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Remove 'failed' from logged errors (bsc#1161951 ltc#183551).
- scsi: ibmvfc: Remove unneeded semicolons (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: change strncpy+truncation to strlcpy (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: constify dev_pm_ops structures (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Do not use rc uninitialized in ibmvscsi_do_work (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: fix tripping of blk_mq_run_hw_queue WARN_ON (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Improve strings handling (bsc#1161951 ltc#183551). 
- scsi: ibmvscsi: redo driver work thread to use enum action states (bsc#1161951 ltc#183551).
- scsi: ibmvscsi: Wire up host_reset() in the driver's scsi_host_template (bsc#1161951 ltc#183551).
- scsi: qla2xxx: Add 16.0GT for PCI String (bsc#1157424).
- scsi: qla2xxx: Add beacon LED config sysfs interface (bsc#1157424).
- scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (bsc#1157424).
- scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (bsc#1157424).
- scsi: qla2xxx: Add endianizer macro calls to fc host stats (bsc#1157424).
- scsi: qla2xxx: Add fixes for mailbox command (bsc#1157424).
- scsi: qla2xxx: add more FW debug information (bsc#1157424).
- scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (bsc#1157424).
- scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (bsc#1157424).
- scsi: qla2xxx: Add vendor extended FDMI commands (bsc#1157424).
- scsi: qla2xxx: Add vendor extended RDP additions and amendments (bsc#1157424).
- scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options (bsc#1157424).
- scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb() (bsc#1157424).
- scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (bsc#1157424).
- scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function (bsc#1157424).
- scsi: qla2xxx: Correction to selection of loopback/echo test (bsc#1157424).
- scsi: qla2xxx: Display message for FCE enabled (bsc#1157424).
- scsi: qla2xxx: Fix control flags for login/logout IOCB (bsc#1157424).
- scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (bsc#1157424).
- scsi: qla2xxx: fix FW resource count values (bsc#1157424).
- scsi: qla2xxx: Fix NPIV instantiation after FW dump (bsc#1157424).
- scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (bsc#1157424).
- scsi: qla2xxx: Fix RDP respond data format (bsc#1157424).
- scsi: qla2xxx: Fix RDP response size (bsc#1157424).
- scsi: qla2xxx: Fix sparse warning reported by kbuild bot (bsc#1157424).
- scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code (bsc#1157424).
- scsi: qla2xxx: Force semaphore on flash validation failure (bsc#1157424).
- scsi: qla2xxx: Handle cases for limiting RDP response payload length (bsc#1157424).
- scsi: qla2xxx: Handle NVME status iocb correctly (bsc#1157424).
- scsi: qla2xxx: Improved secure flash support messages (bsc#1157424).
- scsi: qla2xxx: Move free of fcport out of interrupt context (bsc#1157424).
- scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (bsc#1157424).
- scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (bsc#1157424).
- scsi: qla2xxx: Return appropriate failure through BSG Interface (bsc#1157424).
- scsi: qla2xxx: Save rscn_gen for new fcport (bsc#1157424).
- scsi: qla2xxx: Serialize fc_port alloc in N2N (bsc#1157424).
- scsi: qla2xxx: Set Nport ID for N2N (bsc#1157424).
- scsi: qla2xxx: Show correct port speed capabilities for RDP command (bsc#1157424).
- scsi: qla2xxx: Simplify the code for aborting SCSI commands (bsc#1157424).
- scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop() (bsc#1157424).
- scsi: qla2xxx: Update BPM enablement semantics (bsc#1157424).
- scsi: qla2xxx: Update driver version to 10.01.00.24-k (bsc#1157424).
- scsi: qla2xxx: Update driver version to 10.01.00.25-k (bsc#1157424).
- scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required' ISPs (bsc#1157424).
- scsi: qla2xxx: Use correct ISP28xx active FW region (bsc#1157424).
- scsi: qla2xxx: Use endian macros to assign static fields in fwdump header (bsc#1157424).
- scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx (bsc#1157424).
- scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (bsc#1157424).
- scsi: tcm_qla2xxx: Make qlt_alloc_qfull_cmd() set cmd-&gt;se_cmd.map_tag (bsc#1157424).
- sctp: free cmd-&gt;obj.chunk for the unprocessed SCTP_CMD_REPLY (networking-stable-20_01_11).
- smb3: add debug messages for closing unmatched open (bsc#1144333).
- smb3: Add defines for new information level, FileIdInformation (bsc#1144333).
- smb3: add dynamic tracepoints for flush and close (bsc#1144333).
- smb3: add missing flag definitions (bsc#1144333).
- smb3: Add missing reparse tags (bsc#1144333).
- smb3: add missing worker function for SMB3 change notify (bsc#1144333).
- smb3: add mount option to allow forced caching of read only share (bsc#1144333).
- smb3: add mount option to allow RW caching of share accessed by only 1 client (bsc#1144333).
- smb3: add one more dynamic tracepoint missing from strict fsync path (bsc#1144333).
- smb3: add some more descriptive messages about share when mounting cache=ro (bsc#1144333).
- smb3: allow decryption keys to be dumped by admin for debugging (bsc#1144333).
- smb3: allow disabling requesting leases (bsc#1144333).
- smb3: allow parallelizing decryption of reads (bsc#1144333).
- smb3: allow skipping signature verification for perf sensitive configurations (bsc#1144333).
- smb3: Backup intent flag missing from some more ops (bsc#1144333).
- smb3: cleanup some recent endian errors spotted by updated sparse (bsc#1144333).
- smb3: display max smb3 requests in flight at any one time (bsc#1144333).
- smb3: dump in_send and num_waiters stats counters by default (bsc#1144333).
- smb3: enable offload of decryption of large reads via mount option (bsc#1144333).
- smb3: fix default permissions on new files when mounting with modefromsid (bsc#1144333).
- smb3: fix mode passed in on create for modetosid mount option (bsc#1144333).
- smb3: fix performance regression with setting mtime (bsc#1144333).
- smb3: fix potential null dereference in decrypt offload (bsc#1144333).
- smb3: fix problem with null cifs super block with previous patch (bsc#1144333).
- smb3: Fix regression in time handling (bsc#1144333).
- smb3: improve check for when we send the security descriptor context on create (bsc#1144333).
- smb3: log warning if CSC policy conflicts with cache mount option (bsc#1144333).
- smb3: missing ACL related flags (bsc#1144333).
- smb3: only offload decryption of read responses if multiple requests (bsc#1144333).
- smb3: pass mode bits into create calls (bsc#1144333).
- smb3: print warning once if posix context returned on open  (bsc#1144333).
- smb3: query attributes on file close (bsc#1144333).
- smb3: remove noisy debug message and minor cleanup (bsc#1144333).
- smb3: remove unused flag passed into close functions (bsc#1144333).
- staging: rtl8188eu: Fix potential overuse of kernel memory (bsc#1051510).
- staging: rtl8188eu: Fix potential security hole (bsc#1051510).
- staging: rtl8723bs: Fix potential overuse of kernel memory (bsc#1051510).
- staging: rtl8723bs: Fix potential security hole (bsc#1051510).
- SUNRPC: Fix svcauth_gss_proxy_init() (bsc#1103992).
- tcp_bbr: improve arithmetic division in bbr_update_bw() (networking-stable-20_01_27).
- tcp: clear tp-&gt;data_segs{in|out} in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;delivered in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;segs_{in|out} in tcp_disconnect() (networking-stable-20_02_05).
- tcp: clear tp-&gt;total_retrans in tcp_disconnect() (networking-stable-20_02_05).
- tcp: fix marked lost packets not being retransmitted (networking-stable-20_01_20).
- tcp: fix 'old stuff' D-SACK causing SACK to be treated as D-SACK (networking-stable-20_01_11).
- thunderbolt: Prevent crash if non-active NVMem file is read (git-fixes).
- tick: broadcast-hrtimer: Fix a race in bc_set_next (bsc#1044231).
- tools lib traceevent: Do not free tep-&gt;cmdlines in add_new_comm() on failure (git-fixes).
- tools: Update include/uapi/linux/fcntl.h copy from the kernel (bsc#1166003).
- ttyprintk: fix a potential deadlock in interrupt context issue (git-fixes).
- tun: add mutex_unlock() call and napi.skb clearing in tun_get_user() (bsc#1109837).
- Updated block layer, timers and md code for SLE15-SP1 kernel (bsc#1111974).
- Updated 'drm/i915: Wean off drm_pci_alloc/drm_pci_free' (bsc#1114279) 
- USB: core: add endpoint-blacklist quirk (git-fixes).
- USBip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() (git-fixes).
- USB: quirks: blacklist duplicate ep on Sound Devices USBPre2 (git-fixes).
- uvcvideo: Refactor teardown of uvc on USB disconnect (https://patchwork.kernel.org/patch/9683663/) (bsc#1164507)
- vgacon: Fix a UAF in vgacon_invert_region (bsc#1114279)
- virtio-blk: fix hw_queue stopped on arbitrary error (git-fixes).
- vlan: fix memory leak in vlan_dev_set_egress_priority (networking-stable-20_01_11).
- vlan: vlan_changelink() should propagate errors (networking-stable-20_01_11).
- vxlan: fix tos value before xmit (networking-stable-20_01_11).
- x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF (bsc#1114279).
- x86/ioremap: Add an ioremap_encrypted() helper (bsc#1141895).
- x86/kdump: Export the SME mask to vmcoreinfo (bsc#1141895).
- x86/mce/amd: Fix kobject lifetime (bsc#1114279).
- x86/mce/amd: Publish the bank pointer only after setup has succeeded (bsc#1114279).
- x86/mm: Split vmalloc_sync_all() (bsc#1165741).
- xfs: also remove cached ACLs when removing the underlying attr (bsc#1165873).
- xfs: bulkstat should copy lastip whenever userspace supplies one (bsc#1165984).
- xhci: fix runtime pm enabling for quirky Intel hosts (bsc#1051510).
- xhci: Force Maximum Packet size for Full-speed bulk devices to valid range (bsc#1051510).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-03-31"/>
	<updated date="2020-03-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1044231">SUSE bug 1044231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051510">SUSE bug 1051510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1051858">SUSE bug 1051858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056686">SUSE bug 1056686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1060463">SUSE bug 1060463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111666">SUSE bug 1111666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111974">SUSE bug 1111974</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114279">SUSE bug 1114279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114685">SUSE bug 1114685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119680">SUSE bug 1119680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127611">SUSE bug 1127611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133021">SUSE bug 1133021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134090">SUSE bug 1134090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136157">SUSE bug 1136157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1141895">SUSE bug 1141895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144333">SUSE bug 1144333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146539">SUSE bug 1146539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156510">SUSE bug 1156510</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157424">SUSE bug 1157424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158187">SUSE bug 1158187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159285">SUSE bug 1159285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160659">SUSE bug 1160659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161561">SUSE bug 1161561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1161951">SUSE bug 1161951</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162928">SUSE bug 1162928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162929">SUSE bug 1162929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162931">SUSE bug 1162931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164078">SUSE bug 1164078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164507">SUSE bug 1164507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165111">SUSE bug 1165111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165404">SUSE bug 1165404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165488">SUSE bug 1165488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165527">SUSE bug 1165527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165741">SUSE bug 1165741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165813">SUSE bug 1165813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165873">SUSE bug 1165873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165929">SUSE bug 1165929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165950">SUSE bug 1165950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165980">SUSE bug 1165980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165984">SUSE bug 1165984</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1165985">SUSE bug 1165985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166003">SUSE bug 1166003</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166101">SUSE bug 1166101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166102">SUSE bug 1166102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166103">SUSE bug 1166103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166104">SUSE bug 1166104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166632">SUSE bug 1166632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166658">SUSE bug 1166658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166730">SUSE bug 1166730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166731">SUSE bug 1166731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166732">SUSE bug 1166732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166733">SUSE bug 1166733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166734">SUSE bug 1166734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1166735">SUSE bug 1166735</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19768/">CVE-2019-19768</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8647/">CVE-2020-8647</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-8648/">CVE-2020-8648</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-8649/">CVE-2020-8649</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-9383/">CVE-2020-9383</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501634" comment="cluster-md-kmp-default-4.12.14-197.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501635" comment="dlm-kmp-default-4.12.14-197.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501636" comment="gfs2-kmp-default-4.12.14-197.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501637" comment="ocfs2-kmp-default-4.12.14-197.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139137" version="1" class="patch">
	<metadata>
		<title>Security update for haproxy (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1168023" ref_url="https://bugzilla.suse.com/1168023" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11100" ref_url="https://www.suse.com/security/cve/CVE-2020-11100/" source="CVE"/>
		<reference ref_id="SUSE-SU-2020:0851-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2020-April/006665.html" source="SUSE-SU"/>
		<description>
This update for haproxy fixes the following issues:

- CVE-2020-11100: Fixed an H2/HPAC vulnerability ch might have allowed arbitrary 
  writes into a 32-bit relative address space (bsc#1168023).
		</description>
<advisory from="security@suse.de">
	<issued date="2020-04-02"/>
	<updated date="2020-04-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168023">SUSE bug 1168023</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11100/">CVE-2020-11100</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501638" comment="haproxy-2.0.10+git0.ac198b92-8.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139138" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1040855" ref_url="https://bugzilla.suse.com/1040855" source="BUGZILLA"/>
		<reference ref_id="1044120" ref_url="https://bugzilla.suse.com/1044120" source="BUGZILLA"/>
		<reference ref_id="1044767" ref_url="https://bugzilla.suse.com/1044767" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1055117" ref_url="https://bugzilla.suse.com/1055117" source="BUGZILLA"/>
		<reference ref_id="1056653" ref_url="https://bugzilla.suse.com/1056653" source="BUGZILLA"/>
		<reference ref_id="1056657" ref_url="https://bugzilla.suse.com/1056657" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1094840" ref_url="https://bugzilla.suse.com/1094840" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104389" ref_url="https://bugzilla.suse.com/1104389" source="BUGZILLA"/>
		<reference ref_id="1104393" ref_url="https://bugzilla.suse.com/1104393" source="BUGZILLA"/>
		<reference ref_id="1109695" ref_url="https://bugzilla.suse.com/1109695" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1110096" ref_url="https://bugzilla.suse.com/1110096" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1115431" ref_url="https://bugzilla.suse.com/1115431" source="BUGZILLA"/>
		<reference ref_id="1118657" ref_url="https://bugzilla.suse.com/1118657" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1136460" ref_url="https://bugzilla.suse.com/1136460" source="BUGZILLA"/>
		<reference ref_id="1136461" ref_url="https://bugzilla.suse.com/1136461" source="BUGZILLA"/>
		<reference ref_id="1138374" ref_url="https://bugzilla.suse.com/1138374" source="BUGZILLA"/>
		<reference ref_id="1139944" ref_url="https://bugzilla.suse.com/1139944" source="BUGZILLA"/>
		<reference ref_id="1144912" ref_url="https://bugzilla.suse.com/1144912" source="BUGZILLA"/>
		<reference ref_id="1152457" ref_url="https://bugzilla.suse.com/1152457" source="BUGZILLA"/>
		<reference ref_id="1163727" ref_url="https://bugzilla.suse.com/1163727" source="BUGZILLA"/>
		<reference ref_id="1164780" ref_url="https://bugzilla.suse.com/1164780" source="BUGZILLA"/>
		<reference ref_id="1171078" ref_url="https://bugzilla.suse.com/1171078" source="BUGZILLA"/>
		<reference ref_id="1172145" ref_url="https://bugzilla.suse.com/1172145" source="BUGZILLA"/>
		<reference ref_id="1172538" ref_url="https://bugzilla.suse.com/1172538" source="BUGZILLA"/>
		<reference ref_id="1172694" ref_url="https://bugzilla.suse.com/1172694" source="BUGZILLA"/>
		<reference ref_id="1174784" ref_url="https://bugzilla.suse.com/1174784" source="BUGZILLA"/>
		<reference ref_id="1174852" ref_url="https://bugzilla.suse.com/1174852" source="BUGZILLA"/>
		<reference ref_id="1176558" ref_url="https://bugzilla.suse.com/1176558" source="BUGZILLA"/>
		<reference ref_id="1176559" ref_url="https://bugzilla.suse.com/1176559" source="BUGZILLA"/>
		<reference ref_id="1176956" ref_url="https://bugzilla.suse.com/1176956" source="BUGZILLA"/>
		<reference ref_id="1178270" ref_url="https://bugzilla.suse.com/1178270" source="BUGZILLA"/>
		<reference ref_id="1178372" ref_url="https://bugzilla.suse.com/1178372" source="BUGZILLA"/>
		<reference ref_id="1178401" ref_url="https://bugzilla.suse.com/1178401" source="BUGZILLA"/>
		<reference ref_id="1178590" ref_url="https://bugzilla.suse.com/1178590" source="BUGZILLA"/>
		<reference ref_id="1178634" ref_url="https://bugzilla.suse.com/1178634" source="BUGZILLA"/>
		<reference ref_id="1178762" ref_url="https://bugzilla.suse.com/1178762" source="BUGZILLA"/>
		<reference ref_id="1179014" ref_url="https://bugzilla.suse.com/1179014" source="BUGZILLA"/>
		<reference ref_id="1179015" ref_url="https://bugzilla.suse.com/1179015" source="BUGZILLA"/>
		<reference ref_id="1179045" ref_url="https://bugzilla.suse.com/1179045" source="BUGZILLA"/>
		<reference ref_id="1179082" ref_url="https://bugzilla.suse.com/1179082" source="BUGZILLA"/>
		<reference ref_id="1179107" ref_url="https://bugzilla.suse.com/1179107" source="BUGZILLA"/>
		<reference ref_id="1179142" ref_url="https://bugzilla.suse.com/1179142" source="BUGZILLA"/>
		<reference ref_id="1179204" ref_url="https://bugzilla.suse.com/1179204" source="BUGZILLA"/>
		<reference ref_id="1179419" ref_url="https://bugzilla.suse.com/1179419" source="BUGZILLA"/>
		<reference ref_id="1179444" ref_url="https://bugzilla.suse.com/1179444" source="BUGZILLA"/>
		<reference ref_id="1179520" ref_url="https://bugzilla.suse.com/1179520" source="BUGZILLA"/>
		<reference ref_id="1179578" ref_url="https://bugzilla.suse.com/1179578" source="BUGZILLA"/>
		<reference ref_id="1179601" ref_url="https://bugzilla.suse.com/1179601" source="BUGZILLA"/>
		<reference ref_id="1179663" ref_url="https://bugzilla.suse.com/1179663" source="BUGZILLA"/>
		<reference ref_id="1179666" ref_url="https://bugzilla.suse.com/1179666" source="BUGZILLA"/>
		<reference ref_id="1179670" ref_url="https://bugzilla.suse.com/1179670" source="BUGZILLA"/>
		<reference ref_id="1179671" ref_url="https://bugzilla.suse.com/1179671" source="BUGZILLA"/>
		<reference ref_id="1179672" ref_url="https://bugzilla.suse.com/1179672" source="BUGZILLA"/>
		<reference ref_id="1179673" ref_url="https://bugzilla.suse.com/1179673" source="BUGZILLA"/>
		<reference ref_id="1179711" ref_url="https://bugzilla.suse.com/1179711" source="BUGZILLA"/>
		<reference ref_id="1179713" ref_url="https://bugzilla.suse.com/1179713" source="BUGZILLA"/>
		<reference ref_id="1179714" ref_url="https://bugzilla.suse.com/1179714" source="BUGZILLA"/>
		<reference ref_id="1179715" ref_url="https://bugzilla.suse.com/1179715" source="BUGZILLA"/>
		<reference ref_id="1179716" ref_url="https://bugzilla.suse.com/1179716" source="BUGZILLA"/>
		<reference ref_id="1179722" ref_url="https://bugzilla.suse.com/1179722" source="BUGZILLA"/>
		<reference ref_id="1179723" ref_url="https://bugzilla.suse.com/1179723" source="BUGZILLA"/>
		<reference ref_id="1179724" ref_url="https://bugzilla.suse.com/1179724" source="BUGZILLA"/>
		<reference ref_id="1179745" ref_url="https://bugzilla.suse.com/1179745" source="BUGZILLA"/>
		<reference ref_id="1179810" ref_url="https://bugzilla.suse.com/1179810" source="BUGZILLA"/>
		<reference ref_id="1179888" ref_url="https://bugzilla.suse.com/1179888" source="BUGZILLA"/>
		<reference ref_id="1179895" ref_url="https://bugzilla.suse.com/1179895" source="BUGZILLA"/>
		<reference ref_id="1179896" ref_url="https://bugzilla.suse.com/1179896" source="BUGZILLA"/>
		<reference ref_id="1179960" ref_url="https://bugzilla.suse.com/1179960" source="BUGZILLA"/>
		<reference ref_id="1179963" ref_url="https://bugzilla.suse.com/1179963" source="BUGZILLA"/>
		<reference ref_id="1180027" ref_url="https://bugzilla.suse.com/1180027" source="BUGZILLA"/>
		<reference ref_id="1180029" ref_url="https://bugzilla.suse.com/1180029" source="BUGZILLA"/>
		<reference ref_id="1180031" ref_url="https://bugzilla.suse.com/1180031" source="BUGZILLA"/>
		<reference ref_id="1180052" ref_url="https://bugzilla.suse.com/1180052" source="BUGZILLA"/>
		<reference ref_id="1180086" ref_url="https://bugzilla.suse.com/1180086" source="BUGZILLA"/>
		<reference ref_id="1180117" ref_url="https://bugzilla.suse.com/1180117" source="BUGZILLA"/>
		<reference ref_id="1180258" ref_url="https://bugzilla.suse.com/1180258" source="BUGZILLA"/>
		<reference ref_id="1180506" ref_url="https://bugzilla.suse.com/1180506" source="BUGZILLA"/>
		<reference ref_id="1180559" ref_url="https://bugzilla.suse.com/1180559" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20669" ref_url="https://www.suse.com/security/cve/CVE-2018-20669/" source="CVE"/>
		<reference ref_id="CVE-2019-20934" ref_url="https://www.suse.com/security/cve/CVE-2019-20934/" source="CVE"/>
		<reference ref_id="CVE-2020-0444" ref_url="https://www.suse.com/security/cve/CVE-2020-0444/" source="CVE"/>
		<reference ref_id="CVE-2020-0465" ref_url="https://www.suse.com/security/cve/CVE-2020-0465/" source="CVE"/>
		<reference ref_id="CVE-2020-0466" ref_url="https://www.suse.com/security/cve/CVE-2020-0466/" source="CVE"/>
		<reference ref_id="CVE-2020-27068" ref_url="https://www.suse.com/security/cve/CVE-2020-27068/" source="CVE"/>
		<reference ref_id="CVE-2020-27777" ref_url="https://www.suse.com/security/cve/CVE-2020-27777/" source="CVE"/>
		<reference ref_id="CVE-2020-27786" ref_url="https://www.suse.com/security/cve/CVE-2020-27786/" source="CVE"/>
		<reference ref_id="CVE-2020-27825" ref_url="https://www.suse.com/security/cve/CVE-2020-27825/" source="CVE"/>
		<reference ref_id="CVE-2020-28374" ref_url="https://www.suse.com/security/cve/CVE-2020-28374/" source="CVE"/>
		<reference ref_id="CVE-2020-29660" ref_url="https://www.suse.com/security/cve/CVE-2020-29660/" source="CVE"/>
		<reference ref_id="CVE-2020-29661" ref_url="https://www.suse.com/security/cve/CVE-2020-29661/" source="CVE"/>
		<reference ref_id="CVE-2020-36158" ref_url="https://www.suse.com/security/cve/CVE-2020-36158/" source="CVE"/>
		<reference ref_id="CVE-2020-4788" ref_url="https://www.suse.com/security/cve/CVE-2020-4788/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0118-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008197.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-28374: Fixed a Linux SCSI target issue (bsc#1178372).
- CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180559).
- CVE-2020-27825: Fixed a race in the trace_open and buffer resize calls (bsc#1179960).
- CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180031).
- CVE-2020-27068: Fixed an out-of-bounds read due to a missing bounds check in the nl80211_policy policy of nl80211.c (bnc#1180086).
- CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180029).
- CVE-2020-0444: Fixed a bad kfree due to a logic error in audit_data_to_entry (bnc#1180027).
- CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bnc#1179745).
- CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179745).
- CVE-2020-27777: Fixed a privilege escalation in the Run-Time Abstraction Services (RTAS) interface, affecting guests running on top of PowerVM or KVM hypervisors (bnc#1179107).
- CVE-2019-20934: Fixed a use-after-free in show_numa_stats() because NUMA fault statistics were inappropriately freed, aka CID-16d51a590a8c (bsc#1179663).
- CVE-2020-27786: Fixed a use after free in kernel midi subsystem snd_rawmidi_kernel_read1() (bsc#1179601).

The following non-security bugs were fixed:

- ACPI: PNP: compare the string length in the matching_id() (git-fixes).
- ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1 (git-fixes).
- ACPICA: Do not increment operation_region reference counts for field units (git-fixes).
- ALSA: ca0106: fix error code handling (git-fixes).
- ALSA: ctl: allow TLV read operation for callback type of element in locked case (git-fixes).
- ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO (git-fixes).
- ALSA: hda/ca0132 - Change Input Source enum strings (git-fixes).
- ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg (git-fixes).
- ALSA: hda/generic: Add option to enforce preferred_dacs pairs (git-fixes).
- ALSA: hda/hdmi: always check pin power status in i915 pin fixup (git-fixes).
- ALSA: hda/realtek - Add new codec supported for ALC897 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged (git-fixes).
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (git-fixes).
- ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (git-fixes).
- ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520 (git-fixes).
- ALSA: hda/realtek: Enable headset of ASUS UX482EG &amp; B9400CEA with ALC294 (git-fixes).
- ALSA: hda: Add NVIDIA codec IDs 9a &amp; 9d through a0 to patch table (git-fixes).
- ALSA: hda: Fix potential race in unsol event handler (git-fixes).
- ALSA: hda: Fix regressions on clear and reconfig sysfs (git-fixes).
- ALSA: info: Drop WARN_ON() from buffer NULL sanity check (git-fixes).
- ALSA: isa/wavefront: prevent out of bounds write in ioctl (git-fixes).
- ALSA: line6: Perform sanity check for each URB creation (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: pcm: oss: Fix potential out-of-bounds shift (git-fixes).
- ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check (git-fixes).
- ALSA: timer: Limit max amount of slave instances (git-fixes).
- ALSA: usb-audio: Add delay quirk for all Logitech USB devices (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16 (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2 (git-fixes).
- ALSA: usb-audio: add quirk for Denon DCD-1500RE (git-fixes).
- ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG) (git-fixes).
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Alpha S (git-fixes).
- ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight S (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware does not give back (git-fixes).
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (git-fixes).
- ALSA: usb-audio: Fix OOB access of mixer element list (git-fixes).
- ALSA: usb-audio: Fix potential out-of-bounds shift (git-fixes).
- ALSA: usb-audio: Fix race against the error recovery URB submission (git-fixes).
- ALSA: usb-audio: US16x08: fix value count for level meters (git-fixes).
- ASoC: arizona: Fix a wrong free in wm8997_probe (git-fixes).
- ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams (git-fixes).
- ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed (git-fixes).
- ASoC: jz4740-i2s: add missed checks for clk_get() (git-fixes).
- ASoC: pcm3168a: The codec does not support S32_LE (git-fixes).
- ASoC: pcm: DRAIN support reactivation (git-fixes).
- ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile (git-fixes).
- ASoC: sti: fix possible sleep-in-atomic (git-fixes).
- ASoC: wm8904: fix regcache handling (git-fixes).
- ASoC: wm8998: Fix PM disable depth imbalance on error (git-fixes).
- ASoC: wm_adsp: Do not generate kcontrols without READ flags (git-fixes).
- ASoC: wm_adsp: remove 'ctl' from list on error in wm_adsp_create_control() (git-fixes).
- ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function (git-fixes).
- ath10k: Fix an error handling path (git-fixes).
- ath10k: fix backtrace on coredump (git-fixes).
- ath10k: fix get invalid tx rate for Mesh metric (git-fixes).
- ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq (git-fixes).
- ath10k: Release some resources in an error handling path (git-fixes).
- ath10k: Remove msdu from idr when management pkt send fails (git-fixes).
- ath6kl: fix enum-conversion warning (git-fixes).
- ath9k_htc: Discard undersized packets (git-fixes).
- ath9k_htc: Modify byte order for an error message (git-fixes).
- ath9k_htc: Silence undersized packet warnings (git-fixes).
- ath9k_htc: Use appropriate rs_datalen type (git-fixes).
- Avoid a GCC warning about '/*' within a comment.
- backlight: lp855x: Ensure regulators are disabled on probe failure (git-fixes).
- Bluetooth: add a mutex lock to avoid UAF in do_enale_set (git-fixes).
- Bluetooth: btusb: Fix detection of some fake CSR controllers with a bcdDevice val of 0x0134 (git-fixes).
- Bluetooth: Fix advertising duplicated flags (git-fixes).
- Bluetooth: Fix null pointer dereference in hci_event_packet() (git-fixes).
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (git-fixes).
- bnxt_en: Fix race when modifying pause settings (bsc#1050242 ).
- bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex (bsc#1050242).
- btmrvl: Fix firmware filename for sd8997 chipset (bsc#1172694).
- btrfs: fix use-after-free on readahead extent after failure to create it (bsc#1179963).
- btrfs: qgroup: do not commit transaction when we already hold the handle (bsc#1178634).
- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1174784).
- bus: fsl-mc: fix error return code in fsl_mc_object_allocate() (git-fixes).
- can: mcp251x: add error check when wq alloc failed (git-fixes).
- can: softing: softing_netdev_open(): fix error handling (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- cfg80211: regulatory: Fix inconsistent format argument (git-fixes).
- cifs: add NULL check for ses-&gt;tcon_ipc (bsc#1178270).
- cifs: allow syscalls to be restarted in __smb_send_rqst() (bsc#1176956).
- cifs: fix check of tcon dfs in smb1 (bsc#1178270).
- cifs: fix potential use-after-free in cifs_echo_request() (bsc#1139944).
- cirrus: cs89x0: remove set but not used variable 'lp' (git-fixes).
- cirrus: cs89x0: use devm_platform_ioremap_resource() to simplify code (git-fixes).
- clk: at91: usb: continue if clk_hw_round_rate() return zero (git-fixes).
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (git-fixes).
- clk: qcom: Allow constant ratio freq tables for rcg (git-fixes).
- clk: qcom: msm8916: Fix the address location of pll-&gt;config_reg (git-fixes).
- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (git-fixes).
- clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1 (git-fixes).
- clk: sunxi-ng: Make sure divider tables have sentinel (git-fixes).
- clk: tegra: Fix duplicated SE clock entry (git-fixes).
- clk: tegra: Fix Tegra PMC clock out parents (git-fixes).
- clk: ti: composite: fix memory leak (git-fixes).
- clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call (git-fixes).
- clk: ti: Fix memleak in ti_fapll_synth_setup (git-fixes).
- clocksource/drivers/asm9260: Add a check for of_clk_get (git-fixes).
- coredump: fix core_pattern parse error (git-fixes).
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (git-fixes).
- cpufreq: loongson1: Add missing MODULE_ALIAS (git-fixes).
- cpufreq: scpi: Add missing MODULE_ALIAS (git-fixes).
- cpufreq: st: Add missing MODULE_DEVICE_TABLE (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (git-fixes).
- crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr() (git-fixes).
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (git-fixes).
- cxgb4: Fix offset when clearing filter byte counters (bsc#1064802 bsc#1066129).
- drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish (git-fixes).
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (git-fixes).
- drm/amd/display: remove useless if/else (git-fixes).
- drm/amdgpu: fix build_coefficients() argument (git-fixes).
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (git-fixes).
- drm/gma500: fix double free of gma_connector (git-fixes).
- drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] (bsc#1129770)
- drm/meson: dw-hdmi: Register a callback to disable the regulator (git-fixes).
- drm/msm/dpu: Add newline to printks (git-fixes).
- drm/msm/dsi_phy_10nm: implement PHY disabling (git-fixes).
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (git-fixes).
- drm/rockchip: Avoid uninitialized use of endpoint id in LVDS (git-fixes).
- epoll: Keep a reference on files added to the check list (bsc#1180031).
- ext4: correctly report 'not supported' for {usr,grp}jquota when !CONFIG_QUOTA (bsc#1179672).
- ext4: fix bogus warning in ext4_update_dx_flag() (bsc#1179716).
- ext4: fix error handling code in add_new_gdb (bsc#1179722).
- ext4: fix invalid inode checksum (bsc#1179723).
- ext4: fix leaking sysfs kobject after failed mount (bsc#1179670).
- ext4: limit entries returned when counting fsmap records (bsc#1179671).
- ext4: unlock xattr_sem properly in ext4_inline_data_truncate() (bsc#1179673).
- extcon: max77693: Fix modalias string (git-fixes).
- fbcon: Fix user font detection test at fbcon_resize(). (bsc#1112178) Backporting changes: 	* updated path drivers/video/fbcon/core to drivers/video/console
- fbcon: Remove the superfluous break (bsc#1129770) Backporting changes: 	* updated path drivers/video/fbcon/core to drivers/video/console 	* context changes
- firmware: qcom: scm: Ensure 'a0' status code is treated as signed (git-fixes).
- fix regression in 'epoll: Keep a reference on files added to the check list' (bsc#1180031, git-fixes).
- forcedeth: use per cpu to collect xmit/recv statistics (git-fixes).
- fs: Do not invalidate page buffers in block_write_full_page() (bsc#1179711).
- geneve: change from tx_error to tx_dropped on missing metadata (git-fixes).
- genirq/irqdomain: Add an irq_create_mapping_affinity() function (bsc#1065729).
- gpio: arizona: handle pm_runtime_get_sync failure case (git-fixes).
- gpio: gpio-grgpio: fix possible sleep-in-atomic-context bugs in grgpio_irq_map/unmap() (git-fixes).
- gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP (git-fixes).
- gpio: max77620: Fixup debounce delays (git-fixes).
- gpio: max77620: Use correct unit for debounce times (git-fixes).
- gpio: mpc8xxx: Add platform device to gpiochip-&gt;parent (git-fixes).
- gpio: mvebu: fix potential user-after-free on probe (git-fixes).
- gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism (git-fixes).
- gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 BYT + AXP288 model (git-fixes).
- gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 CHT + AXP288 model (git-fixes).
- gpiolib: acpi: Correct comment for HP x2 10 honor_wakeup quirk (git-fixes).
- gpiolib: acpi: Rework honor_wakeup option into an ignore_wake option (git-fixes).
- gpiolib: acpi: Turn dmi_system_id table into a generic quirk table (git-fixes).
- gpiolib: fix up emulated open drain outputs (git-fixes).
- HID: Add another Primax PIXART OEM mouse quirk (git-fixes).
- HID: apple: Disable Fn-key key-re-mapping on clone keyboards (git-fixes).
- HID: core: check whether Usage Page item is after Usage ID items (git-fixes).
- HID: core: Correctly handle ReportSize being zero (git-fixes).
- HID: cypress: Support Varmilo Keyboards' media hotkeys (git-fixes).
- HID: Fix slab-out-of-bounds read in hid_field_extract (bsc#1180052).
- HID: hid-sensor-hub: Fix issue with devices with no report ID (git-fixes).
- HID: Improve Windows Precision Touchpad detection (git-fixes).
- HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() (git-fixes).
- HID: logitech-hidpp: Silence intermittent get_battery_capacity errors (git-fixes).
- HSI: omap_ssi: Do not jump to free ID in ssi_add_controller() (git-fixes).
- hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow (git-fixes).
- hwmon: (jc42) Fix name to have no illegal characters (git-fixes).
- i2c: algo: pca: Reapply i2c bus settings after reset (git-fixes).
- i2c: i801: Fix resume bug (git-fixes).
- i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets (git-fixes).
- i2c: pxa: clear all master action bits in i2c_pxa_stop_message() (git-fixes).
- i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output (git-fixes).
- i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (git-fixes).
- ibmvnic: add some debugs (bsc#1179896 ltc#190255).
- ibmvnic: avoid memset null scrq msgs (bsc#1044767 ltc#155231 git-fixes).
- ibmvnic: continue fatal error reset after passive init (bsc#1171078 ltc#184239 git-fixes).
- ibmvnic: delay next reset if hard reset fails (bsc#1094840 ltc#167098 git-fixes).
- ibmvnic: enhance resetting status check during module exit (bsc#1065729).
- ibmvnic: fix call_netdevice_notifiers in do_reset (bsc#1115431 ltc#171853 git-fixes).
- ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues (bsc#1040855 ltc#155067 git-fixes).
- ibmvnic: fix: NULL pointer dereference (bsc#1044767 ltc#155231 git-fixes).
- ibmvnic: notify peers when failover and migration happen (bsc#1044120 ltc#155423 git-fixes).
- ibmvnic: restore adapter state on failed reset (bsc#1152457 ltc#174432 git-fixes).
- igc: Fix returning wrong statistics (bsc#1118657).
- iio: adc: max1027: Reset the device at probe time (git-fixes).
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (git-fixes).
- iio: bmp280: fix compensation of humidity (git-fixes).
- iio: buffer: Fix demux update (git-fixes).
- iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw() (git-fixes).
- iio: fix center temperature of bmc150-accel-core (git-fixes).
- iio: humidity: hdc100x: fix IIO_HUMIDITYRELATIVE channel reporting (git-fixes).
- iio: light: bh1750: Resolve compiler warning and make code more readable (git-fixes).
- iio: srf04: fix wrong limitation in distance measuring (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- iio:pressure:mpl3115: Force alignment of buffer (git-fixes).
- inet_ecn: Fix endianness of checksum update when setting ECT(1) (git-fixes).
- Input: ads7846 - fix integer overflow on Rt calculation (git-fixes).
- Input: ads7846 - fix race that causes missing releases (git-fixes).
- Input: ads7846 - fix unaligned access on 7845 (git-fixes).
- Input: atmel_mxt_ts - disable IRQ across suspend (git-fixes).
- Input: cm109 - do not stomp on control URB (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events (git-fixes).
- Input: cyapa_gen6 - fix out-of-bounds stack access (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (git-fixes).
- Input: i8042 - add Acer laptops to the i8042 reset list (git-fixes).
- Input: i8042 - add ByteSpeed touchpad to noloop table (git-fixes).
- Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists (git-fixes).
- Input: i8042 - allow insmod to succeed on devices without an i8042 controller (git-fixes).
- Input: i8042 - fix error return code in i8042_setup_aux() (git-fixes).
- Input: omap4-keypad - fix runtime PM error handling (git-fixes).
- Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen (git-fixes).
- Input: trackpoint - add new trackpoint variant IDs (git-fixes).
- Input: trackpoint - enable Synaptics trackpoints (git-fixes).
- Input: xpad - support Ardwiino Controllers (git-fixes).
- ipw2x00: Fix -Wcast-function-type (git-fixes).
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (git-fixes).
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (git-fixes).
- iwlwifi: mvm: fix unaligned read of rx_pkt_status (git-fixes).
- iwlwifi: pcie: limit memory read spin time (git-fixes).
- kABI fix for g2d (git-fixes).
- kABI workaround for dsa/b53 changes (git-fixes).
- kABI workaround for HD-audio generic parser (git-fixes).
- kABI workaround for net/ipvlan changes (git-fixes).
- kABI: ath10k: move a new structure member to the end (git-fixes).
- kABI: genirq: add back irq_create_mapping (bsc#1065729).
- kernel-source.spec: Fix build with rpm 4.16 (boo#1179015). RPM_BUILD_ROOT is cleared before %%install. Do the unpack into RPM_BUILD_ROOT in %%install
- kernel-{binary,source}.spec.in: do not create loop symlinks (bsc#1179082)
- kgdb: Fix spurious true from in_dbg_master() (git-fixes).
- KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (bsc#1112178).
- mac80211: allow rx of mesh eapol frames with default rx key (git-fixes).
- mac80211: Check port authorization in the ieee80211_tx_dequeue() case (git-fixes).
- mac80211: do not set set TDLS STA bandwidth wider than possible (git-fixes).
- mac80211: fix authentication with iwlwifi/mvm (git-fixes).
- mac80211: fix use of skb payload instead of header (git-fixes).
- mac80211: mesh: fix mesh_pathtbl_init() error path (git-fixes).
- matroxfb: avoid -Warray-bounds warning (git-fixes).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps() (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/cluster: fix deadlock when node is doing resync job (bsc#1163727).
- md/raid5: fix oops during stripe resizing (git-fixes).
- media: am437x-vpfe: Setting STD to current value is not an error (git-fixes).
- media: cec-funcs.h: add status_req checks (git-fixes).
- media: cx88: Fix some error handling path in 'cx8800_initdev()' (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: i2c: mt9v032: fix enum mbus codes and frame sizes (git-fixes).
- media: i2c: ov2659: Fix missing 720p register config (git-fixes).
- media: i2c: ov2659: fix s_stream return value (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: mtk-mdp: Fix a refcounting bug on error in init (git-fixes).
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (git-fixes).
- media: platform: add missing put_device() call in mtk_jpeg_probe() and mtk_jpeg_remove() (git-patches).
- media: pvrusb2: Fix oops on tear-down when radio support is not present (git-fixes).
- media: s5p-g2d: Fix a memory leak in an error handling path in 'g2d_probe()' (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio() (git-fixes).
- media: si470x-i2c: add missed operations in remove (git-fixes).
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling case (git-fixes).
- media: sti: bdisp: fix a possible sleep-in-atomic-context bug in bdisp_device_run() (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous (git-fixes).
- media: ti-vpe: vpe: ensure buffers are cleaned up properly in abort cases (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence number (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid sizeimage (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance failure causing a kernel panic (git-fixes).
- media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format (git-fixes).
- media: ti-vpe: vpe: Make sure YUYV is set as default format (git-fixes).
- media: uvcvideo: Set media controller entity functions (git-fixes).
- media: uvcvideo: Silence shift-out-of-bounds warning (git-fixes).
- media: v4l2-async: Fix trivial documentation typo (git-fixes).
- media: v4l2-core: fix touch support in v4l_g_fmt (git-fixes).
- media: v4l2-device.h: Explicitly compare grp{id,mask} to zero in v4l2_device macros (git-fixes).
- mei: bus: do not clean driver pointer (git-fixes).
- mei: protect mei_cl_mtu from null dereference (git-fixes).
- memstick: fix a double-free bug in memstick_check (git-fixes).
- memstick: r592: Fix error return in r592_probe() (git-fixes).
- mfd: rt5033: Fix errorneous defines (git-fixes).
- mfd: wm8994: Fix driver operation if loaded as modules (git-fixes).
- mlxsw: core: Fix memory leak on module removal (bsc#1112374).
- mm,memory_failure: always pin the page in madvise_inject_error (bsc#1180258).
- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (bsc#1179204).
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/tls: Fix kmap usage (bsc#1109837).
- net/tls: missing received data after fast remote close (bsc#1109837).
- net/x25: prevent a couple of overflows (bsc#1178590).
- net: aquantia: Fix aq_vec_isr_legacy() return value (git-fixes).
- net: aquantia: fix LRO with FCS error (git-fixes).
- net: DCB: Validate DCB_ATTR_DCB_BUFFER argument (bsc#1103990 ).
- net: dsa: b53: Always use dev-&gt;vlan_enabled in b53_configure_vlan() (git-fixes).
- net: dsa: b53: Ensure the default VID is untagged (git-fixes).
- net: dsa: b53: Fix default VLAN ID (git-fixes).
- net: dsa: b53: Properly account for VLAN filtering (git-fixes).
- net: dsa: bcm_sf2: Do not assume DSA master supports WoL (git-fixes).
- net: dsa: bcm_sf2: potential array overflow in bcm_sf2_sw_suspend() (git-fixes).
- net: dsa: qca8k: remove leftover phy accessors (git-fixes).
- net: ena: fix packet's addresses for rx_offset feature (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (git-fixes).
- net: ethernet: ti: cpsw: fix runtime_pm while add/kill vlan (git-fixes).
- net: hisilicon: Fix signedness bug in hix5hd2_dev_probe() (git-fixes).
- net: macb: add missing barriers when reading descriptors (git-fixes).
- net: macb: fix dropped RX frames due to a race (git-fixes).
- net: macb: fix error format in dev_err() (git-fixes).
- net: macb: fix random memory corruption on RX with 64-bit DMA (git-fixes).
- net: pasemi: fix an use-after-free in pasemi_mac_phy_init() (git-fixes).
- net: phy: Avoid multiple suspends (git-fixes).
- net: qed: fix 'maybe uninitialized' warning (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: qed: fix async event callbacks unregistering (bsc#1104393 bsc#1104389).
- net: qede: fix PTP initialization on recovery (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: qede: fix use-after-free on recovery and AER handling (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- net: seeq: Fix the function used to release some memory in an error handling path (git-fixes).
- net: sh_eth: fix a missing check of of_get_phy_mode (git-fixes).
- net: sonic: replace dev_kfree_skb in sonic_send_packet (git-fixes).
- net: sonic: return NETDEV_TX_OK if failed to map buffer (git-fixes).
- net: stmmac: fix csr_clk can't be zero issue (git-fixes).
- net: stmmac: Fix reception of Broadcom switches tags (git-fixes).
- net: thunderx: use spin_lock_bh in nicvf_set_rx_mode_task() (bsc#1110096).
- net: usb: sr9800: fix uninitialized local variable (git-fixes).
- net:ethernet:aquantia: Extra spinlocks removed (git-fixes).
- net_sched: fix a memory leak in atm_tc_init() (bsc#1056657 bsc#1056653 bsc#1056787).
- nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame (git-fixes).
- nfc: s3fwrn5: Release the nfc firmware (git-fixes).
- nfc: st95hf: Fix memleak in st95hf_in_send_cmd (git-fixes).
- nfp: use correct define to return NONE fec (bsc#1109837).
- NFS: fix nfs_path in case of a rename retry (git-fixes).
- NFSD: Add missing NFSv2 .pc_func methods (git-fixes).
- NFSv4.2: fix client's attribute cache management for copy_file_range (git-fixes).
- NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag (git-fixes).
- ocfs2: fix unbalanced locking (bsc#1180506).
- ocfs2: initialize ip_next_orphan (bsc#1179724).
- orinoco: Move context allocation after processing the skb (git-fixes).
- parport: load lowlevel driver if ports not found (git-fixes).
- PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges (git-fixes).
- PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge (git-fixes).
- PCI: Do not disable decoding when mmio_always_on is set (git-fixes).
- PCI: Fix pci_slot_release() NULL pointer dereference (git-fixes).
- phy: Revert toggling reset changes (git-fixes).
- pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler() (git-fixes).
- pinctrl: amd: fix npins for uart0 in kerncz_groups (git-fixes).
- pinctrl: amd: remove debounce filter setting in IRQ type setting (git-fixes).
- pinctrl: baytrail: Avoid clearing debounce value when turning it off (git-fixes).
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (git-fixes).
- pinctrl: merrifield: Set default bias in case no particular value given (git-fixes).
- pinctrl: sh-pfc: sh7734: Fix duplicate TCLK1_B (git-fixes).
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (git-fixes).
- platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init (git-fixes).
- platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems (git-fixes).
- platform/x86: mlx-platform: remove an unused variable (git-fixes).
- platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration (git-fixes).
- platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration (git-fixes).
- PM / hibernate: memory_bm_find_bit(): Tighten node optimisation (git-fixes).
- PM: ACPI: Output correct message on target power state (git-fixes).
- PM: hibernate: Freeze kernel threads in software_resume() (git-fixes).
- PM: hibernate: remove the bogus call to get_gendisk() in software_resume() (git-fixes).
- pNFS/flexfiles: Fix list corruption if the mirror count changes (git-fixes).
- power: supply: bq24190_charger: fix reference leak (git-fixes).
- power: supply: bq27xxx_battery: Silence deferred-probe error (git-fixes).
- powerpc/64: Set up a kernel stack for secondaries before cpu_restore() (bsc#1065729).
- powerpc/64s/pseries: Fix hash tlbiel_all_isa300 for guest kernels (bsc#1179888 ltc#190253).
- powerpc/64s: Fix hash ISA v3.0 TLBIEL instruction generation (bsc#1055117 ltc#159753 git-fixes bsc#1179888 ltc#190253).
- powerpc/pci: Fix broken INTx configuration via OF (bsc#1172145 ltc#184630).
- powerpc/pci: Remove legacy debug code (bsc#1172145 ltc#184630 git-fixes).
- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145 ltc#184630).
- powerpc/pci: Use of_irq_parse_and_map_pci() helper (bsc#1172145 ltc#184630).
- powerpc/perf: Fix crash with is_sier_available when pmu is not set (bsc#1179578 ltc#189313).
- powerpc/pseries/hibernation: remove redundant cacheinfo update (bsc#1138374 ltc#178199 git-fixes).
- powerpc/pseries: Pass MSI affinity to irq_create_mapping() (bsc#1065729).
- powerpc/smp: Add __init to init_big_cores() (bsc#1109695 ltc#171067 git-fixes).
- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- powerpc: Convert to using %pOF instead of full_name (bsc#1172145 ltc#184630).
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (bsc#1065729).
- ppp: remove the PPPIOCDETACH ioctl (git-fixes).
- pwm: lp3943: Dynamically allocate PWM chip base (git-fixes).
- qed: fix error return code in qed_iwarp_ll2_start() (bsc#1050536 bsc#1050545).
- qed: suppress 'do not support RoCE &amp; iWARP' flooding on HW init (bsc#1050536 bsc#1050545).
- qed: suppress false-positives interrupt error messages on HW init (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- quota: clear padding in v2r1_mem2diskdqb() (bsc#1179714).
- radeon: insert 10ms sleep in dce5_crtc_load_lut (git-fixes).
- ravb: Fix use-after-free ravb_tstamp_skb (git-fixes).
- RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532 (bsc#1050545).
- RDMA/qedr: Fix memory leak in iWARP CM (bsc#1050545 ).
- regmap: debugfs: check count when read regmap file (git-fixes).
- regmap: dev_get_regmap_match(): fix string comparison (git-fixes).
- regmap: Remove duplicate `type` field from regmap `regcache_sync` trace event (git-fixes).
- regulator: max8907: Fix the usage of uninitialized variable in max8907_regulator_probe() (git-fixes).
- regulator: pfuze100-regulator: Variable 'val' in pfuze100_regulator_probe() could be uninitialized (git-fixes).
- regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone (git-fixes).
- reiserfs: Fix oops during mount (bsc#1179715).
- reiserfs: Initialize inode keys properly (bsc#1179713).
- remoteproc: Fix wrong rvring index computation (git-fixes).
- rfkill: Fix incorrect check to avoid NULL pointer dereference (git-fixes).
- rtc: 88pm860x: fix possible race condition (git-fixes).
- rtc: hym8563: enable wakeup when applicable (git-fixes).
- rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot (git-fixes).
- rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt() (git-fixes).
- s390/bpf: Fix multiple tail calls (git-fixes).
- s390/cpuinfo: show processor physical address (git-fixes).
- s390/cpum_sf.c: fix file permission for cpum_sfb_size (git-fixes).
- s390/dasd: fix hanging device offline processing (bsc#1144912).
- s390/dasd: fix null pointer dereference for ERP requests (git-fixes).
- s390/pci: fix CPU address in MSI for directed IRQ (git-fixes).
- s390/qeth: fix af_iucv notification race (git-fixes).
- s390/qeth: fix tear down of async TX buffers (git-fixes).
- s390/qeth: make af_iucv TX notification call more robust (git-fixes).
- s390/stp: add locking to sysfs functions (git-fixes).
- s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (git-fixes).
- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- scsi: lpfc: Add FDMI Vendor MIB support (bsc#1164780).
- scsi: lpfc: Convert abort handling to SLI-3 and SLI-4 handlers (bsc#1164780).
- scsi: lpfc: Convert SCSI I/O completions to SLI-3 and SLI-4 handlers (bsc#1164780).
- scsi: lpfc: Convert SCSI path to use common I/O submission path (bsc#1164780).
- scsi: lpfc: Correct null ndlp reference on routine exit (bsc#1164780).
- scsi: lpfc: Drop nodelist reference on error in lpfc_gen_req() (bsc#1164780).
- scsi: lpfc: Enable common send_io interface for SCSI and NVMe (bsc#1164780).
- scsi: lpfc: Enable common wqe_template support for both SCSI and NVMe (bsc#1164780).
- scsi: lpfc: Enlarge max_sectors in scsi host templates (bsc#1164780).
- scsi: lpfc: Extend the RDF FPIN Registration descriptor for additional events (bsc#1164780).
- scsi: lpfc: Fix duplicate wq_create_version check (bsc#1164780).
- scsi: lpfc: Fix fall-through warnings for Clang (bsc#1164780).
- scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery (bsc#1164780).
- scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc() (bsc#1164780).
- scsi: lpfc: Fix memory leak on lcb_context (bsc#1164780).
- scsi: lpfc: Fix missing prototype for lpfc_nvmet_prep_abort_wqe() (bsc#1164780).
- scsi: lpfc: Fix missing prototype warning for lpfc_fdmi_vendor_attr_mi() (bsc#1164780).
- scsi: lpfc: Fix NPIV discovery and Fabric Node detection (bsc#1164780).
- scsi: lpfc: Fix NPIV Fabric Node reference counting (bsc#1164780).
- scsi: lpfc: Fix pointer defereference before it is null checked issue (bsc#1164780).
- scsi: lpfc: Fix refcounting around SCSI and NVMe transport APIs (bsc#1164780).
- scsi: lpfc: Fix removal of SCSI transport device get and put on dev structure (bsc#1164780).
- scsi: lpfc: Fix scheduling call while in softirq context in lpfc_unreg_rpi (bsc#1164780).
- scsi: lpfc: Fix set but not used warnings from Rework remote port lock handling (bsc#1164780).
- scsi: lpfc: Fix set but unused variables in lpfc_dev_loss_tmo_handler() (bsc#1164780).
- scsi: lpfc: Fix spelling mistake 'Cant' -&gt; 'Can't' (bsc#1164780).
- scsi: lpfc: Fix variable 'vport' set but not used in lpfc_sli4_abts_err_handler() (bsc#1164780).
- scsi: lpfc: lpfc_attr: Demote kernel-doc format for redefined functions (bsc#1164780).
- scsi: lpfc: lpfc_attr: Fix-up a bunch of kernel-doc misdemeanours (bsc#1164780).
- scsi: lpfc: lpfc_debugfs: Fix a couple of function documentation issues (bsc#1164780).
- scsi: lpfc: lpfc_scsi: Fix a whole host of kernel-doc issues (bsc#1164780).
- scsi: lpfc: Refactor WQE structure definitions for common use (bsc#1164780).
- scsi: lpfc: Reject CT request for MIB commands (bsc#1164780).
- scsi: lpfc: Remove dead code on second !ndlp check (bsc#1164780).
- scsi: lpfc: Remove ndlp when a PLOGI/ADISC/PRLI/REG_RPI ultimately fails (bsc#1164780).
- scsi: lpfc: Remove set but not used 'qp' (bsc#1164780).
- scsi: lpfc: Remove unneeded variable 'status' in lpfc_fcp_cpu_map_store() (bsc#1164780).
- scsi: lpfc: Removed unused macros in lpfc_attr.c (bsc#1164780).
- scsi: lpfc: Rework locations of ndlp reference taking (bsc#1164780).
- scsi: lpfc: Rework remote port lock handling (bsc#1164780).
- scsi: lpfc: Rework remote port ref counting and node freeing (bsc#1164780).
- scsi: lpfc: Unsolicited ELS leaves node in incorrect state while dropping it (bsc#1164780).
- scsi: lpfc: Update changed file copyrights for 2020 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.4 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.5 (bsc#1164780).
- scsi: lpfc: Update lpfc version to 12.8.0.6 (bsc#1164780).
- scsi: lpfc: Use generic power management (bsc#1164780).
- scsi: qla2xxx: Change post del message from debug level to log level (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Do not check for fw_started while posting NVMe command (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Do not consume srb greedily (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix compilation issue in PPC systems (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix crash during driver load on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix device loss on 4G and older HBAs (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix flash update in 28XX adapters on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix FW initialization error on big endian machines (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix N2N and NVMe connect retry failure (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix return of uninitialized value in rval (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Fix the call trace for flush workqueue (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Handle aborts correctly for port undergoing deletion (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Handle incorrect entry_type entries (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Initialize variable in qla8044_poll_reg() (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Limit interrupt vectors to number of CPUs (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Move sess cmd list/lock to driver (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove in_interrupt() from qla82xx-specific code (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove in_interrupt() from qla83xx-specific code (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: remove incorrect sparse #ifdef (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Remove trailing semicolon in macro definition (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Return EBUSY on fcport deletion (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Tear down session if FW say it is down (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Update version to 10.02.00.104-k (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: qla2xxx: Use constant when it is known (bsc#1172538 bsc#1179142 bsc#1179810).
- scsi: Remove unneeded break statements (bsc#1164780).
- scsi: storvsc: Fix error return in storvsc_probe() (git-fixes).
- scsi: target: tcm_qla2xxx: Remove BUG_ON(in_interrupt()) (bsc#1172538 bsc#1179142 bsc#1179810).
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (git-fixes).
- serial: 8250_pci: Add Realtek 816a and 816b (git-fixes).
- serial: amba-pl011: Make sure we initialize the port.lock spinlock (git-fixes).
- serial: ar933x_uart: set UART_CS_{RX,TX}_READY_ORIDE (git-fixes).
- serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init (git-fixes).
- serial_core: Check for port state when tty is in error state (git-fixes).
- SMB3: Honor 'handletimeout' flag for multiuser mounts (bsc#1176558).
- SMB3: Honor 'posix' flag for multiuser mounts (bsc#1176559).
- SMB3: Honor lease disabling for multiuser mounts (git-fixes).
- soc/tegra: fuse: Fix index bug in get_process_id (git-fixes).
- soc: imx: gpc: fix power up sequencing (git-fixes).
- soc: mediatek: Check if power domains can be powered on at boot time (git-fixes).
- soc: qcom: smp2p: Safely acquire spinlock without IRQs (git-fixes).
- soc: ti: Fix reference imbalance in knav_dma_probe (git-fixes).
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (git-fixes).
- spi: Add call to spi_slave_abort() function when spidev driver is released (git-fixes).
- spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume (git-fixes).
- spi: davinci: Fix use-after-free on unbind (git-fixes).
- spi: dw: Enable interrupts in accordance with DMA xfer mode (git-fixes).
- spi: dw: Fix Rx-only DMA transfers (git-fixes).
- spi: dw: Return any value retrieved from the dma_transfer callback (git-fixes).
- spi: Fix memory leak on splited transfers (git-fixes).
- spi: img-spfi: fix potential double release (git-fixes).
- spi: img-spfi: fix reference leak in img_spfi_resume (git-fixes).
- spi: pic32: Do not leak DMA channels in probe error path (git-fixes).
- spi: pxa2xx: Add missed security checks (git-fixes).
- spi: spi-cavium-thunderx: Add missing pci_release_regions() (git-fixes).
- spi: spi-loopback-test: Fix out-of-bounds read (git-fixes).
- spi: spi-mem: Fix passing zero to 'PTR_ERR' warning (git-fixes).
- spi: spi-mem: fix reference leak in spi_mem_access_start (git-fixes).
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (git-fixes).
- spi: spidev: fix a potential use-after-free in spidev_release() (git-fixes).
- spi: st-ssc4: add missed pm_runtime_disable (git-fixes).
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (git-fixes).
- spi: tegra114: fix reference leak in tegra spi ops (git-fixes).
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (git-fixes).
- spi: tegra20-slink: add missed clk_unprepare (git-fixes).
- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (git-fixes).
- splice: only read in as much information as there is pipe buffer space (bsc#1179520).
- staging: comedi: check validity of wMaxPacketSize of usb endpoints found (git-fixes).
- staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value (git-fixes).
- staging: comedi: mf6x4: Fix AI end-of-conversion detection (git-fixes).
- staging: olpc_dcon: add a missing dependency (git-fixes).
- staging: olpc_dcon: Do not call platform_device_unregister() in dcon_probe() (git-fixes).
- staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21 (git-fixes).
- staging: rtl8188eu: Add device id for MERCUSYS MW150US v2 (git-fixes).
- staging: rtl8188eu: fix possible null dereference (git-fixes).
- staging: rtl8192u: fix multiple memory leaks on error path (git-fixes).
- staging: vt6656: set usb_set_intfdata on driver fail (git-fixes).
- staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() (git-fixes).
- staging: wlan-ng: properly check endpoint types (git-fixes).
- sunrpc: fix copying of multiple pages in gss_read_proxy_verf() (bsc#1103992).
- sunrpc: fixed rollback in rpc_gssd_dummy_populate() (git-fixes).
- sunrpc: Properly set the @subbuf parameter of xdr_buf_subsegment() (git-fixes).
- sunrpc: The RDMA back channel mustn't disappear while requests are outstanding (git-fixes).
- svcrdma: fix bounce buffers for unaligned offsets and multiple pages (bsc#1103992).
- svcrdma: Fix page leak in svc_rdma_recv_read_chunk() (bsc#1103992).
- tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (bsc#1109837).
- thunderbolt: Use 32-bit writes when writing ring producer/consumer (git-fixes).
- timer: Fix wheel index calculation on last level (git fixes)
- timer: Prevent base-&gt;clk from moving backward (git-fixes)
- tty: always relink the port (git-fixes).
- tty: Fix -&gt;pgrp locking in tiocspgrp() (git-fixes).
- tty: link tty and port before configuring it as console (git-fixes).
- tty: synclink_gt: Adjust indentation in several functions (git-fixes).
- tty: synclinkmp: Adjust indentation in several functions (git-fixes).
- tty:serial:mvebu-uart:fix a wrong return (git-fixes).
- uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define (git-fixes).
- uapi/if_ether.h: prevent redefinition of struct ethhdr (git-fixes).
- usb: add RESET_RESUME quirk for Snapscan 1212 (git-fixes).
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (git-fixes).
- usb: dummy-hcd: Fix uninitialized array use in init() (git-fixes).
- usb: dwc2: Fix IN FIFO allocation (git-fixes).
- usb: dwc3: remove the call trace of USBx_GFLADJ (git-fixes).
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (git-fixes).
- usb: Fix: Do not skip endpoint descriptors with maxpacket=0 (git-fixes).
- usb: fsl: Check memory resource before releasing it (git-fixes).
- usb: gadget: composite: Fix possible double free memory bug (git-fixes).
- usb: gadget: configfs: fix concurrent issue between composite APIs (git-fixes).
- usb: gadget: configfs: Fix missing spin_lock_init() (git-fixes).
- usb: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- usb: gadget: f_fs: Use local copy of descriptors for userspace copy (git-fixes).
- usb: gadget: f_midi: setup SuperSpeed Plus descriptors (git-fixes).
- usb: gadget: f_rndis: fix bitrate for SuperSpeed and above (git-fixes).
- usb: gadget: ffs: ffs_aio_cancel(): Save/restore IRQ flags (git-fixes).
- usb: gadget: fix wrong endpoint desc (git-fixes).
- usb: gadget: goku_udc: fix potential crashes in probe (git-fixes).
- usb: gadget: net2280: fix memory leak on probe error handling paths (git-fixes).
- usb: gadget: serial: fix Tx stall after buffer overflow (git-fixes).
- usb: gadget: udc: fix possible sleep-in-atomic-context bugs in gr_probe() (git-fixes).
- usb: gadget: udc: gr_udc: fix memleak on error handling path in gr_ep_init() (git-fixes).
- usb: hso: Fix debug compile warning on sparc32 (git-fixes).
- usb: ldusb: use unsigned size format specifiers (git-fixes).
- usb: musb: omap2430: Get rid of musb .set_vbus for omap2430 glue (git-fixes).
- usb: oxu210hp-hcd: Fix memory leak in oxu_create (git-fixes).
- usb: serial: ch341: add new Product ID for CH341A (git-fixes).
- usb: serial: ch341: sort device-id entries (git-fixes).
- usb: serial: digi_acceleport: clean up modem-control handling (git-fixes).
- usb: serial: digi_acceleport: clean up set_termios (git-fixes).
- usb: serial: digi_acceleport: fix write-wakeup deadlocks (git-fixes).
- usb: serial: digi_acceleport: remove in_interrupt() usage.
- usb: serial: digi_acceleport: remove redundant assignment to pointer priv (git-fixes).
- usb: serial: digi_acceleport: rename tty flag variable (git-fixes).
- usb: serial: digi_acceleport: use irqsave() in USB's complete callback (git-fixes).
- usb: serial: keyspan_pda: fix dropped unthrottle interrupts (git-fixes).
- usb: serial: keyspan_pda: fix stalled writes (git-fixes).
- usb: serial: keyspan_pda: fix tx-unthrottle use-after-free (git-fixes).
- usb: serial: keyspan_pda: fix write deadlock (git-fixes).
- usb: serial: keyspan_pda: fix write unthrottling (git-fixes).
- usb: serial: keyspan_pda: fix write-wakeup use-after-free (git-fixes).
- usb: serial: kl5kusb105: fix memleak on open (git-fixes).
- usb: serial: mos7720: fix parallel-port state restore (git-fixes).
- usb: serial: option: add Fibocom NL668 variants (git-fixes).
- usb: serial: option: add interface-number sanity check to flag handling (git-fixes).
- usb: serial: option: add support for Thales Cinterion EXS82 (git-fixes).
- usb: serial: option: fix Quectel BG96 matching (git-fixes).
- usb: Skip endpoints with 0 maxpacket length (git-fixes).
- usb: UAS: introduce a quirk to set no_write_same (git-fixes).
- usb: usbfs: Suppress problematic bind and unbind uevents (git-fixes).
- usblp: poison URBs upon disconnect (git-fixes).
- usbnet: ipheth: fix connectivity with iOS 14 (git-fixes).
- video: fbdev: neofb: fix memory leak in neo_scan_monitor() (git-fixes).
- vt: do not hardcode the mem allocation upper bound (git-fixes).
- vt: Reject zero-sized screen buffer size (git-fixes).
- watchdog: coh901327: add COMMON_CLK dependency (git-fixes).
- watchdog: da9062: do not ping the hw during stop() (git-fixes).
- watchdog: da9062: No need to ping manually before setting timeout (git-fixes).
- watchdog: qcom: Avoid context switch in restart handler (git-fixes).
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (git-fixes).
- wimax: fix duplicate initializer warning (git-fixes).
- wireless: Use linux/stddef.h instead of stddef.h (git-fixes).
- wireless: Use offsetof instead of custom macro (git-fixes).
- x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz (bsc#1112178).
- x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes (bsc#1112178).
- x86/mm/ident_map: Check for errors from ident_pud_init() (bsc#1112178).
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (bsc#1112178).
- x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak (bsc#1112178).
- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (bsc#1112178).
- x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak (bsc#1112178).
- x86/resctrl: Remove unused struct mbm_state::chunks_bw (bsc#1112178).
- x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb (bsc#1112178).
- x86/tracing: Introduce a static key for exception tracing (bsc#1179895).
- x86/traps: Simplify pagefault tracing logic (bsc#1179895).
- x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (bsc#1112178).
- xhci: Give USB2 ports time to enter U3 in bus suspend (git-fixes).
- xprtrdma: fix incorrect header size calculations (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-14"/>
	<updated date="2021-01-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1040855">SUSE bug 1040855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044120">SUSE bug 1044120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1044767">SUSE bug 1044767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055117">SUSE bug 1055117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056653">SUSE bug 1056653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056657">SUSE bug 1056657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1094840">SUSE bug 1094840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104389">SUSE bug 1104389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104393">SUSE bug 1104393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109695">SUSE bug 1109695</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110096">SUSE bug 1110096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115431">SUSE bug 1115431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1118657">SUSE bug 1118657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136460">SUSE bug 1136460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136461">SUSE bug 1136461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138374">SUSE bug 1138374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1139944">SUSE bug 1139944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144912">SUSE bug 1144912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152457">SUSE bug 1152457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163727">SUSE bug 1163727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164780">SUSE bug 1164780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171078">SUSE bug 1171078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172145">SUSE bug 1172145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172538">SUSE bug 1172538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172694">SUSE bug 1172694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174784">SUSE bug 1174784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174852">SUSE bug 1174852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176558">SUSE bug 1176558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176559">SUSE bug 1176559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176956">SUSE bug 1176956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178270">SUSE bug 1178270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178372">SUSE bug 1178372</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178401">SUSE bug 1178401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178590">SUSE bug 1178590</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178634">SUSE bug 1178634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178762">SUSE bug 1178762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179014">SUSE bug 1179014</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179015">SUSE bug 1179015</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179045">SUSE bug 1179045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179082">SUSE bug 1179082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179107">SUSE bug 1179107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179142">SUSE bug 1179142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179204">SUSE bug 1179204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179419">SUSE bug 1179419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179444">SUSE bug 1179444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179520">SUSE bug 1179520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179578">SUSE bug 1179578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179601">SUSE bug 1179601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179663">SUSE bug 1179663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179666">SUSE bug 1179666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179670">SUSE bug 1179670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179671">SUSE bug 1179671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179672">SUSE bug 1179672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179673">SUSE bug 1179673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179711">SUSE bug 1179711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179713">SUSE bug 1179713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179714">SUSE bug 1179714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179715">SUSE bug 1179715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179716">SUSE bug 1179716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179722">SUSE bug 1179722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179723">SUSE bug 1179723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179724">SUSE bug 1179724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179745">SUSE bug 1179745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179810">SUSE bug 1179810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179888">SUSE bug 1179888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179895">SUSE bug 1179895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179896">SUSE bug 1179896</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179960">SUSE bug 1179960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179963">SUSE bug 1179963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180027">SUSE bug 1180027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180029">SUSE bug 1180029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180031">SUSE bug 1180031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180052">SUSE bug 1180052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180086">SUSE bug 1180086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180117">SUSE bug 1180117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180258">SUSE bug 1180258</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180506">SUSE bug 1180506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180559">SUSE bug 1180559</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-20669/">CVE-2018-20669</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-20934/">CVE-2019-20934</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0444/">CVE-2020-0444</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0465/">CVE-2020-0465</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0466/">CVE-2020-0466</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27068/">CVE-2020-27068</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27777/">CVE-2020-27777</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27786/">CVE-2020-27786</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27825/">CVE-2020-27825</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28374/">CVE-2020-28374</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29660/">CVE-2020-29660</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29661/">CVE-2020-29661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36158/">CVE-2020-36158</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-4788/">CVE-2020-4788</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501639" comment="cluster-md-kmp-default-4.12.14-197.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501640" comment="dlm-kmp-default-4.12.14-197.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501641" comment="gfs2-kmp-default-4.12.14-197.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501642" comment="ocfs2-kmp-default-4.12.14-197.78.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139139" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1178469" ref_url="https://bugzilla.suse.com/1178469" source="BUGZILLA"/>
		<reference ref_id="1179156" ref_url="https://bugzilla.suse.com/1179156" source="BUGZILLA"/>
		<reference ref_id="1183572" ref_url="https://bugzilla.suse.com/1183572" source="BUGZILLA"/>
		<reference ref_id="1183574" ref_url="https://bugzilla.suse.com/1183574" source="BUGZILLA"/>
		<reference ref_id="1184310" ref_url="https://bugzilla.suse.com/1184310" source="BUGZILLA"/>
		<reference ref_id="1184677" ref_url="https://bugzilla.suse.com/1184677" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27840" ref_url="https://www.suse.com/security/cve/CVE-2020-27840/" source="CVE"/>
		<reference ref_id="CVE-2021-20254" ref_url="https://www.suse.com/security/cve/CVE-2021-20254/" source="CVE"/>
		<reference ref_id="CVE-2021-20277" ref_url="https://www.suse.com/security/cve/CVE-2021-20277/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008730.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574).
- CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677).
- CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572).
- Avoid free'ing our own pointer in memcache when memcache_trim attempts to reduce cache size (bsc#1179156).
- s3-libads: use dns name to open a ldap session (bsc#1184310).
- Adjust smbcacls '--propagate-inheritance' feature to align with upstream (bsc#1178469).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178469">SUSE bug 1178469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179156">SUSE bug 1179156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183572">SUSE bug 1183572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183574">SUSE bug 1183574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184310">SUSE bug 1184310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184677">SUSE bug 1184677</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27840/">CVE-2020-27840</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-20254/">CVE-2021-20254</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20277/">CVE-2021-20277</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501643" comment="ctdb-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139140" version="1" class="patch">
	<metadata>
		<title>Security update for drbd-utils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1185132" ref_url="https://bugzilla.suse.com/1185132" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:1560-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008757.html" source="SUSE-SU"/>
		<description>
This update for drbd-utils fixes the following issues:

- Hardening: Made all binaries position independent (bsc#1185132)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-11"/>
	<updated date="2021-05-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1185132">SUSE bug 1185132</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501644" comment="drbd-utils-9.6.0-6.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139141" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1047233" ref_url="https://bugzilla.suse.com/1047233" source="BUGZILLA"/>
		<reference ref_id="1172455" ref_url="https://bugzilla.suse.com/1172455" source="BUGZILLA"/>
		<reference ref_id="1173485" ref_url="https://bugzilla.suse.com/1173485" source="BUGZILLA"/>
		<reference ref_id="1176720" ref_url="https://bugzilla.suse.com/1176720" source="BUGZILLA"/>
		<reference ref_id="1177411" ref_url="https://bugzilla.suse.com/1177411" source="BUGZILLA"/>
		<reference ref_id="1178181" ref_url="https://bugzilla.suse.com/1178181" source="BUGZILLA"/>
		<reference ref_id="1179454" ref_url="https://bugzilla.suse.com/1179454" source="BUGZILLA"/>
		<reference ref_id="1180197" ref_url="https://bugzilla.suse.com/1180197" source="BUGZILLA"/>
		<reference ref_id="1181960" ref_url="https://bugzilla.suse.com/1181960" source="BUGZILLA"/>
		<reference ref_id="1182011" ref_url="https://bugzilla.suse.com/1182011" source="BUGZILLA"/>
		<reference ref_id="1182672" ref_url="https://bugzilla.suse.com/1182672" source="BUGZILLA"/>
		<reference ref_id="1182715" ref_url="https://bugzilla.suse.com/1182715" source="BUGZILLA"/>
		<reference ref_id="1182716" ref_url="https://bugzilla.suse.com/1182716" source="BUGZILLA"/>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183022" ref_url="https://bugzilla.suse.com/1183022" source="BUGZILLA"/>
		<reference ref_id="1183063" ref_url="https://bugzilla.suse.com/1183063" source="BUGZILLA"/>
		<reference ref_id="1183069" ref_url="https://bugzilla.suse.com/1183069" source="BUGZILLA"/>
		<reference ref_id="1183509" ref_url="https://bugzilla.suse.com/1183509" source="BUGZILLA"/>
		<reference ref_id="1183593" ref_url="https://bugzilla.suse.com/1183593" source="BUGZILLA"/>
		<reference ref_id="1183646" ref_url="https://bugzilla.suse.com/1183646" source="BUGZILLA"/>
		<reference ref_id="1183686" ref_url="https://bugzilla.suse.com/1183686" source="BUGZILLA"/>
		<reference ref_id="1183696" ref_url="https://bugzilla.suse.com/1183696" source="BUGZILLA"/>
		<reference ref_id="1183775" ref_url="https://bugzilla.suse.com/1183775" source="BUGZILLA"/>
		<reference ref_id="1184120" ref_url="https://bugzilla.suse.com/1184120" source="BUGZILLA"/>
		<reference ref_id="1184167" ref_url="https://bugzilla.suse.com/1184167" source="BUGZILLA"/>
		<reference ref_id="1184168" ref_url="https://bugzilla.suse.com/1184168" source="BUGZILLA"/>
		<reference ref_id="1184170" ref_url="https://bugzilla.suse.com/1184170" source="BUGZILLA"/>
		<reference ref_id="1184192" ref_url="https://bugzilla.suse.com/1184192" source="BUGZILLA"/>
		<reference ref_id="1184193" ref_url="https://bugzilla.suse.com/1184193" source="BUGZILLA"/>
		<reference ref_id="1184194" ref_url="https://bugzilla.suse.com/1184194" source="BUGZILLA"/>
		<reference ref_id="1184196" ref_url="https://bugzilla.suse.com/1184196" source="BUGZILLA"/>
		<reference ref_id="1184198" ref_url="https://bugzilla.suse.com/1184198" source="BUGZILLA"/>
		<reference ref_id="1184208" ref_url="https://bugzilla.suse.com/1184208" source="BUGZILLA"/>
		<reference ref_id="1184211" ref_url="https://bugzilla.suse.com/1184211" source="BUGZILLA"/>
		<reference ref_id="1184388" ref_url="https://bugzilla.suse.com/1184388" source="BUGZILLA"/>
		<reference ref_id="1184391" ref_url="https://bugzilla.suse.com/1184391" source="BUGZILLA"/>
		<reference ref_id="1184393" ref_url="https://bugzilla.suse.com/1184393" source="BUGZILLA"/>
		<reference ref_id="1184397" ref_url="https://bugzilla.suse.com/1184397" source="BUGZILLA"/>
		<reference ref_id="1184509" ref_url="https://bugzilla.suse.com/1184509" source="BUGZILLA"/>
		<reference ref_id="1184511" ref_url="https://bugzilla.suse.com/1184511" source="BUGZILLA"/>
		<reference ref_id="1184512" ref_url="https://bugzilla.suse.com/1184512" source="BUGZILLA"/>
		<reference ref_id="1184514" ref_url="https://bugzilla.suse.com/1184514" source="BUGZILLA"/>
		<reference ref_id="1184583" ref_url="https://bugzilla.suse.com/1184583" source="BUGZILLA"/>
		<reference ref_id="1184650" ref_url="https://bugzilla.suse.com/1184650" source="BUGZILLA"/>
		<reference ref_id="1184942" ref_url="https://bugzilla.suse.com/1184942" source="BUGZILLA"/>
		<reference ref_id="1185113" ref_url="https://bugzilla.suse.com/1185113" source="BUGZILLA"/>
		<reference ref_id="1185244" ref_url="https://bugzilla.suse.com/1185244" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0433" ref_url="https://www.suse.com/security/cve/CVE-2020-0433/" source="CVE"/>
		<reference ref_id="CVE-2020-25670" ref_url="https://www.suse.com/security/cve/CVE-2020-25670/" source="CVE"/>
		<reference ref_id="CVE-2020-25671" ref_url="https://www.suse.com/security/cve/CVE-2020-25671/" source="CVE"/>
		<reference ref_id="CVE-2020-25672" ref_url="https://www.suse.com/security/cve/CVE-2020-25672/" source="CVE"/>
		<reference ref_id="CVE-2020-25673" ref_url="https://www.suse.com/security/cve/CVE-2020-25673/" source="CVE"/>
		<reference ref_id="CVE-2020-27170" ref_url="https://www.suse.com/security/cve/CVE-2020-27170/" source="CVE"/>
		<reference ref_id="CVE-2020-27171" ref_url="https://www.suse.com/security/cve/CVE-2020-27171/" source="CVE"/>
		<reference ref_id="CVE-2020-27673" ref_url="https://www.suse.com/security/cve/CVE-2020-27673/" source="CVE"/>
		<reference ref_id="CVE-2020-27815" ref_url="https://www.suse.com/security/cve/CVE-2020-27815/" source="CVE"/>
		<reference ref_id="CVE-2020-35519" ref_url="https://www.suse.com/security/cve/CVE-2020-35519/" source="CVE"/>
		<reference ref_id="CVE-2020-36310" ref_url="https://www.suse.com/security/cve/CVE-2020-36310/" source="CVE"/>
		<reference ref_id="CVE-2020-36311" ref_url="https://www.suse.com/security/cve/CVE-2020-36311/" source="CVE"/>
		<reference ref_id="CVE-2020-36312" ref_url="https://www.suse.com/security/cve/CVE-2020-36312/" source="CVE"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-20219" ref_url="https://www.suse.com/security/cve/CVE-2021-20219/" source="CVE"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="CVE-2021-28038" ref_url="https://www.suse.com/security/cve/CVE-2021-28038/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-28950" ref_url="https://www.suse.com/security/cve/CVE-2021-28950/" source="CVE"/>
		<reference ref_id="CVE-2021-28964" ref_url="https://www.suse.com/security/cve/CVE-2021-28964/" source="CVE"/>
		<reference ref_id="CVE-2021-28971" ref_url="https://www.suse.com/security/cve/CVE-2021-28971/" source="CVE"/>
		<reference ref_id="CVE-2021-28972" ref_url="https://www.suse.com/security/cve/CVE-2021-28972/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="CVE-2021-29155" ref_url="https://www.suse.com/security/cve/CVE-2021-29155/" source="CVE"/>
		<reference ref_id="CVE-2021-29264" ref_url="https://www.suse.com/security/cve/CVE-2021-29264/" source="CVE"/>
		<reference ref_id="CVE-2021-29265" ref_url="https://www.suse.com/security/cve/CVE-2021-29265/" source="CVE"/>
		<reference ref_id="CVE-2021-29647" ref_url="https://www.suse.com/security/cve/CVE-2021-29647/" source="CVE"/>
		<reference ref_id="CVE-2021-29650" ref_url="https://www.suse.com/security/cve/CVE-2021-29650/" source="CVE"/>
		<reference ref_id="CVE-2021-30002" ref_url="https://www.suse.com/security/cve/CVE-2021-30002/" source="CVE"/>
		<reference ref_id="CVE-2021-3428" ref_url="https://www.suse.com/security/cve/CVE-2021-3428/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="CVE-2021-3483" ref_url="https://www.suse.com/security/cve/CVE-2021-3483/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bnc#1184509).
- CVE-2021-29650: Fixed an issue inside the netfilter subsystem that allowed attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value (bnc#1184208).
- CVE-2021-29155: Fixed an issue within kernel/bpf/verifier.c that performed undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations (bnc#1184942).
- CVE-2020-36310: Fixed an issue in arch/x86/kvm/svm/svm.c that allowed a set_memory_region_test infinite loop for certain nested page faults (bnc#1184512).
- CVE-2020-27673: Fixed an issue in Xen where a guest OS users could have caused a denial of service (host OS hang) via a high rate of events to dom0 (bnc#1177411, bnc#1184583).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bnc#1184391).
- CVE-2020-25673: Fixed NFC endless loops caused by repeated llcp_sock_connect() (bsc#1178181).
- CVE-2020-25672: Fixed NFC memory leak in llcp_sock_connect() (bsc#1178181).
- CVE-2020-25671: Fixed NFC refcount leak in llcp_sock_connect() (bsc#1178181).
- CVE-2020-25670: Fixed NFC refcount leak in llcp_sock_bind() (bsc#1178181).
- CVE-2020-36311: Fixed an issue in arch/x86/kvm/svm/sev.c that allowed attackers to cause a denial of service (soft lockup) by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions) (bnc#1184511).
- CVE-2021-28950: Fixed an issue in fs/fuse/fuse_i.h where a 'stall on CPU' could have occured because a retry loop continually finds the same bad inode (bnc#1184194, bnc#1184211).
- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bnc#1184211).
- CVE-2021-30002: Fixed a memory leak issue when a webcam device exists (bnc#1184120).
- CVE-2021-3483: Fixed a use-after-free bug in nosy_ioctl() (bsc#1184393).
- CVE-2021-20219: Fixed a denial of service vulnerability in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could have delayed the loop and cause a threat to the system availability (bnc#1184397).
- CVE-2021-28964: Fixed a race condition in fs/btrfs/ctree.c that could have caused a denial of service because of a lack of locking on an extent buffer before a cloning operation (bnc#1184193).
- CVE-2021-3444: Fixed the bpf verifier as it did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution (bnc#1184170).
- CVE-2021-28971: Fixed a potential local denial of service in intel_pmu_drain_pebs_nhm where userspace applications can cause a system crash because the PEBS status in a PEBS record is mishandled (bnc#1184196).
- CVE-2021-28688: Fixed XSA-365 that includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in leaking persistent grants. The leak in turn would prevent fully cleaning up after a respective guest has died, leaving around zombie domains (bnc#1183646).
- CVE-2021-29265: Fixed an issue in usbip_sockfd_store in drivers/usb/usbip/stub_dev.c that allowed attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status (bnc#1184167).
- CVE-2021-29264: Fixed an issue in drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver that allowed attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is enabled (bnc#1184168).
- CVE-2021-28972: Fixed an issue in drivers/pci/hotplug/rpadlpar_sysfs.c where the RPA PCI Hotplug driver had a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination (bnc#1184198).
- CVE-2021-29647: Fixed an issue in kernel qrtr_recvmsg in net/qrtr/qrtr.c that allowed attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure (bnc#1184192).
- CVE-2020-27171: Fixed an issue in kernel/bpf/verifier.c that had an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory (bnc#1183686, bnc#1183775).
- CVE-2020-27170: Fixed an issue in kernel/bpf/verifier.c that performed undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. This affects pointer types that do not define a ptr_limit (bnc#1183686 bnc#1183775).
- CVE-2021-28660: Fixed rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c that allowed writing beyond the end of the ssid array (bnc#1183593).
- CVE-2020-35519: Update patch reference for x25 fix (bsc#1183696).
- CVE-2021-3428: Fixed ext4 integer overflow in ext4_es_cache_extent (bsc#1173485, bsc#1183509).
- CVE-2020-0433: Fixed blk_mq_queue_tag_busy_iter of blk-mq-tag.c, where a possible use after free due to improper locking could have happened. This could have led to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1176720).
- CVE-2021-28038: Fixed an issue with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931 (bnc#1183022, bnc#1183069).
- CVE-2020-27815: Fixed jfs array index bounds check in dbAdjTree (bsc#1179454).
- CVE-2021-27365: Fixed an issue inside the iSCSI data structures that does not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message (bnc#1182715).
- CVE-2021-27363: Fixed an issue with a kernel pointer leak that could have been used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables (bnc#1182716).
- CVE-2021-27364: Fixed an issue in drivers/scsi/scsi_transport_iscsi.c where an unprivileged user can craft Netlink messages (bnc#1182717).

The following non-security bugs were fixed:

- Revert 'rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)' This turned out to be a bad idea: the kernel-$flavor-devel package must be usable without kernel-$flavor, e.g. at the build of a KMP. And this change brought superfluous installation of kernel-preempt when a system had kernel-syms (bsc#1185113).
- Xen/gnttab: handle p2m update errors on a per-slot basis (bsc#1183022 XSA-367).
- bfq: Fix kABI for update internal depth state when queue depth changes (bsc#1172455).
- bfq: update internal depth state when queue depth changes (bsc#1172455).
- bpf: Add sanity check for upper ptr_limit (bsc#1183686 bsc#1183775).
- bpf: Simplify alu_limit masking for pointer arithmetic (bsc#1183686 bsc#1183775).
- handle also the opposite type of race condition
- ibmvnic: Clear failover_pending if unable to schedule (bsc#1181960 ltc#190997).
- ibmvnic: always store valid MAC address (bsc#1182011 ltc#191844).
- ibmvnic: store valid MAC address (bsc#1182011).
- macros.kernel-source: Use spec_install_pre for certificate installation (boo#1182672).
- nvme: return an error if nvme_set_queue_count() fails (bsc#1180197).
- post.sh: Return an error when module update fails (bsc#1047233 bsc#1184388).
- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- rpm/mkspec: Use tilde instead of dot for version string with rc (bsc#1184650)
- xen-netback: respect gnttab_map_refs()'s return value (bsc#1183022, XSA-367).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-18"/>
	<updated date="2021-05-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1047233">SUSE bug 1047233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172455">SUSE bug 1172455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173485">SUSE bug 1173485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176720">SUSE bug 1176720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177411">SUSE bug 1177411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178181">SUSE bug 1178181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179454">SUSE bug 1179454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180197">SUSE bug 1180197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181960">SUSE bug 1181960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182011">SUSE bug 1182011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182672">SUSE bug 1182672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182715">SUSE bug 1182715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182716">SUSE bug 1182716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183022">SUSE bug 1183022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183063">SUSE bug 1183063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183069">SUSE bug 1183069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183509">SUSE bug 1183509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183593">SUSE bug 1183593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183646">SUSE bug 1183646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183686">SUSE bug 1183686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183696">SUSE bug 1183696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183775">SUSE bug 1183775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184120">SUSE bug 1184120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184167">SUSE bug 1184167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184168">SUSE bug 1184168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184170">SUSE bug 1184170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184192">SUSE bug 1184192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184193">SUSE bug 1184193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184194">SUSE bug 1184194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184196">SUSE bug 1184196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184198">SUSE bug 1184198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184208">SUSE bug 1184208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184211">SUSE bug 1184211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184388">SUSE bug 1184388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184391">SUSE bug 1184391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184393">SUSE bug 1184393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184397">SUSE bug 1184397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184509">SUSE bug 1184509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184511">SUSE bug 1184511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184512">SUSE bug 1184512</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184514">SUSE bug 1184514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184583">SUSE bug 1184583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184650">SUSE bug 1184650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184942">SUSE bug 1184942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185113">SUSE bug 1185113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185244">SUSE bug 1185244</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0433/">CVE-2020-0433</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25670/">CVE-2020-25670</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25671/">CVE-2020-25671</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25672/">CVE-2020-25672</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25673/">CVE-2020-25673</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27170/">CVE-2020-27170</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27171/">CVE-2020-27171</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27673/">CVE-2020-27673</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27815/">CVE-2020-27815</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35519/">CVE-2020-35519</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36310/">CVE-2020-36310</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36311/">CVE-2020-36311</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36312/">CVE-2020-36312</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20219/">CVE-2021-20219</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28038/">CVE-2021-28038</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28950/">CVE-2021-28950</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28964/">CVE-2021-28964</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28971/">CVE-2021-28971</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28972/">CVE-2021-28972</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29155/">CVE-2021-29155</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29264/">CVE-2021-29264</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29265/">CVE-2021-29265</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29647/">CVE-2021-29647</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29650/">CVE-2021-29650</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-30002/">CVE-2021-30002</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3428/">CVE-2021-3428</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3483/">CVE-2021-3483</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501645" comment="cluster-md-kmp-default-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501646" comment="dlm-kmp-default-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501647" comment="gfs2-kmp-default-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501648" comment="ocfs2-kmp-default-4.12.14-197.89.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139142" version="1" class="patch">
	<metadata>
		<title>Security update for graphviz (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1185833" ref_url="https://bugzilla.suse.com/1185833" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-18032" ref_url="https://www.suse.com/security/cve/CVE-2020-18032/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1651-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/018980.html" source="SUSE-SU"/>
		<description>
This update for graphviz fixes the following issues:

- CVE-2020-18032: Fixed possible remote code execution via buffer overflow (bsc#1185833).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-19"/>
	<updated date="2021-05-19"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1185833">SUSE bug 1185833</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-18032/">CVE-2020-18032</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501511" comment="graphviz-gd-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501512" comment="graphviz-python-2.40.1-6.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139143" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-actionpack-5_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1185715" ref_url="https://bugzilla.suse.com/1185715" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22885" ref_url="https://www.suse.com/security/cve/CVE-2021-22885/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1759-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008839.html" source="SUSE-SU"/>
		<description>
This update for rubygem-actionpack-5_1 fixes the following issues:

- CVE-2021-22885: Fixed possible information disclosure / unintended method execution in Action Pack (bsc#1185715).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-26"/>
	<updated date="2021-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185715">SUSE bug 1185715</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22885/">CVE-2021-22885</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501513" comment="ruby2.5-rubygem-actionpack-5_1-5.1.4-3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139144" version="1" class="patch">
	<metadata>
		<title>Security update for csync2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1147137" ref_url="https://bugzilla.suse.com/1147137" source="BUGZILLA"/>
		<reference ref_id="1147139" ref_url="https://bugzilla.suse.com/1147139" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15522" ref_url="https://www.suse.com/security/cve/CVE-2019-15522/" source="CVE"/>
		<reference ref_id="CVE-2019-15523" ref_url="https://www.suse.com/security/cve/CVE-2019-15523/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008934.html" source="SUSE-SU"/>
		<description>
This update for csync2 fixes the following issues:

- CVE-2019-15522: Fixed an issue where daemon fails to enforce TLS (bsc#1147137)
- CVE-2019-15523: Fixed an incorrect TLS handshake error handling (bsc#1147139)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1147137">SUSE bug 1147137</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1147139">SUSE bug 1147139</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-15522/">CVE-2019-15522</cve>
	<cve impact="low" cvss3="2.6/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-15523/">CVE-2019-15523</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501514" comment="csync2-2.0+git.1461714863.10636a4-4.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139145" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1181161" ref_url="https://bugzilla.suse.com/1181161" source="BUGZILLA"/>
		<reference ref_id="1183405" ref_url="https://bugzilla.suse.com/1183405" source="BUGZILLA"/>
		<reference ref_id="1183738" ref_url="https://bugzilla.suse.com/1183738" source="BUGZILLA"/>
		<reference ref_id="1183947" ref_url="https://bugzilla.suse.com/1183947" source="BUGZILLA"/>
		<reference ref_id="1184611" ref_url="https://bugzilla.suse.com/1184611" source="BUGZILLA"/>
		<reference ref_id="1184675" ref_url="https://bugzilla.suse.com/1184675" source="BUGZILLA"/>
		<reference ref_id="1185642" ref_url="https://bugzilla.suse.com/1185642" source="BUGZILLA"/>
		<reference ref_id="1185680" ref_url="https://bugzilla.suse.com/1185680" source="BUGZILLA"/>
		<reference ref_id="1185725" ref_url="https://bugzilla.suse.com/1185725" source="BUGZILLA"/>
		<reference ref_id="1185859" ref_url="https://bugzilla.suse.com/1185859" source="BUGZILLA"/>
		<reference ref_id="1185860" ref_url="https://bugzilla.suse.com/1185860" source="BUGZILLA"/>
		<reference ref_id="1185862" ref_url="https://bugzilla.suse.com/1185862" source="BUGZILLA"/>
		<reference ref_id="1185863" ref_url="https://bugzilla.suse.com/1185863" source="BUGZILLA"/>
		<reference ref_id="1185898" ref_url="https://bugzilla.suse.com/1185898" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1185938" ref_url="https://bugzilla.suse.com/1185938" source="BUGZILLA"/>
		<reference ref_id="1185950" ref_url="https://bugzilla.suse.com/1185950" source="BUGZILLA"/>
		<reference ref_id="1185987" ref_url="https://bugzilla.suse.com/1185987" source="BUGZILLA"/>
		<reference ref_id="1186060" ref_url="https://bugzilla.suse.com/1186060" source="BUGZILLA"/>
		<reference ref_id="1186061" ref_url="https://bugzilla.suse.com/1186061" source="BUGZILLA"/>
		<reference ref_id="1186062" ref_url="https://bugzilla.suse.com/1186062" source="BUGZILLA"/>
		<reference ref_id="1186111" ref_url="https://bugzilla.suse.com/1186111" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="1186390" ref_url="https://bugzilla.suse.com/1186390" source="BUGZILLA"/>
		<reference ref_id="1186484" ref_url="https://bugzilla.suse.com/1186484" source="BUGZILLA"/>
		<reference ref_id="1186498" ref_url="https://bugzilla.suse.com/1186498" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24586" ref_url="https://www.suse.com/security/cve/CVE-2020-24586/" source="CVE"/>
		<reference ref_id="CVE-2020-24587" ref_url="https://www.suse.com/security/cve/CVE-2020-24587/" source="CVE"/>
		<reference ref_id="CVE-2020-26139" ref_url="https://www.suse.com/security/cve/CVE-2020-26139/" source="CVE"/>
		<reference ref_id="CVE-2020-26141" ref_url="https://www.suse.com/security/cve/CVE-2020-26141/" source="CVE"/>
		<reference ref_id="CVE-2020-26145" ref_url="https://www.suse.com/security/cve/CVE-2020-26145/" source="CVE"/>
		<reference ref_id="CVE-2020-26147" ref_url="https://www.suse.com/security/cve/CVE-2020-26147/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="CVE-2021-23134" ref_url="https://www.suse.com/security/cve/CVE-2021-23134/" source="CVE"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="CVE-2021-33200" ref_url="https://www.suse.com/security/cve/CVE-2021-33200/" source="CVE"/>
		<reference ref_id="CVE-2021-3491" ref_url="https://www.suse.com/security/cve/CVE-2021-3491/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008974.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in kernel memory (bsc#1186484).
- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values. (bsc#1186111)
- CVE-2020-26139: Fixed a denial-of-service when an Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. (bnc#1186062)
- CVE-2021-23134: A Use After Free vulnerability in nfc sockets allowed local attackers to elevate their privileges. (bnc#1186060)
- CVE-2021-23133: Fixed a race condition in SCTP sockets, which could lead to privilege escalation from the context of a network service or an unprivileged process. (bnc#1184675)
- CVE-2021-3491: Fixed a potential heap overflow in mem_rw(). This vulnerability is related to the PROVIDE_BUFFERS operation, which allowed the MAX_RW_COUNT limit to be bypassed (bsc#1185642).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- CVE-2020-24586: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances this can be abused to inject arbitrary network packets and/or exfiltrate user data (bnc#1185859).
- CVE-2020-24587: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed (bnc#1185859 bnc#1185862).
- CVE-2020-26147: The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments, even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used (bnc#1185859).
- CVE-2020-26145: An issue was discovered with Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration. (bnc#1185860)
- CVE-2020-26141: An issue was discovered in the ALFA driver for AWUS036H, where the Message Integrity Check (authenticity) of fragmented TKIP frames was not verified. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol. (bnc#1185987)


The following non-security bugs were fixed:

- Drivers: hv: vmbus: Increase wait time for VMbus unload (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically (bsc#1185725).
- dm: fix redundant IO accounting for bios that need splitting (bsc#1183738).
- ibmvfc: Avoid move login if fast fail is enabled (bsc#1185938 ltc#192043).
- ibmvfc: Handle move login failure (bsc#1185938 ltc#192043).
- ibmvfc: Reinit target retries (bsc#1185938 ltc#192043).
- kabi: Fix breakage in NVMe driver (bsc#1181161).
- kabi: Fix nvmet error log definitions (bsc#1181161).
- kabi: nvme: fix fast_io_fail_tmo (bsc#1181161).
- md/raid1: properly indicate failure when ending a failed write request (bsc#1185680).
- net: sched: disable TCQ_F_NOLOCK for pfifo_fast (bsc#1183405)
- netfilter: conntrack: add new sysctl to disable RST check (bsc#1183947 bsc#1185950).
- netfilter: conntrack: avoid misleading 'invalid' in log message (bsc#1183947 bsc#1185950).
- netfilter: conntrack: improve RST handling when tuple is re-used (bsc#1183947 bsc#1185950).
- netfilter: conntrack: tcp: only close if RST matches exact sequence (bsc#1183947 bsc#1185950).
- nvme-fabrics: allow to queue requests for live queues (bsc#1181161).
- nvme-fabrics: do not check state NVME_CTRL_NEW for request acceptance (bsc#1181161).
- nvme-fabrics: reject I/O to offline device (bsc#1181161).
- nvme-pci: Sync queues on reset (bsc#1181161).
- nvme-rdma: avoid race between time out and tear down (bsc#1181161).
- nvme-rdma: avoid repeated request completion (bsc#1181161).
- nvme-rdma: avoid request double completion for concurrent nvme_rdma_timeout (bsc#1181161).
- nvme-rdma: fix controller reset hang during traffic (bsc#1181161).
- nvme-rdma: fix possible hang when failing to set io queues (bsc#1181161).
- nvme-rdma: fix timeout handler (bsc#1181161).
- nvme-rdma: serialize controller teardown sequences (bsc#1181161).
- nvme-tcp: avoid race between time out and tear down (bsc#1181161).
- nvme-tcp: avoid repeated request completion (bsc#1181161).
- nvme-tcp: avoid request double completion for concurrent nvme_tcp_timeout (bsc#1181161).
- nvme-tcp: fix controller reset hang during traffic (bsc#1181161).
- nvme-tcp: fix possible hang when failing to set io queues (bsc#1181161).
- nvme-tcp: fix timeout handler (bsc#1181161).
- nvme-tcp: serialize controller teardown sequences (bsc#1181161).
- nvme: Restart request timers in resetting state (bsc#1181161).
- nvme: add error log page slot definition (bsc#1181161).
- nvme: include admin_q sync with nvme_sync_queues (bsc#1181161).
- nvme: introduce 'Command Aborted By host' status code (bsc#1181161).
- nvme: introduce nvme_is_fabrics to check fabrics cmd (bsc#1181161).
- nvme: introduce nvme_sync_io_queues (bsc#1181161).
- nvme: make fabrics command run on a separate request queue (bsc#1181161).
- nvme: prevent warning triggered by nvme_stop_keep_alive (bsc#1181161).
- nvme: unlink head after removing last namespace (bsc#1181161).
- nvmet: add error log support for fabrics-cmd (bsc#1181161).
- nvmet: add error-log definitions (bsc#1181161).
- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-09"/>
	<updated date="2021-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181161">SUSE bug 1181161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183405">SUSE bug 1183405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183738">SUSE bug 1183738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183947">SUSE bug 1183947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184611">SUSE bug 1184611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184675">SUSE bug 1184675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185642">SUSE bug 1185642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185680">SUSE bug 1185680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185725">SUSE bug 1185725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185859">SUSE bug 1185859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185860">SUSE bug 1185860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185862">SUSE bug 1185862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185863">SUSE bug 1185863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185898">SUSE bug 1185898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185938">SUSE bug 1185938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185950">SUSE bug 1185950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185987">SUSE bug 1185987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186060">SUSE bug 1186060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186061">SUSE bug 1186061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186062">SUSE bug 1186062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186111">SUSE bug 1186111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186390">SUSE bug 1186390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186484">SUSE bug 1186484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186498">SUSE bug 1186498</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24586/">CVE-2020-24586</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24587/">CVE-2020-24587</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-26139/">CVE-2020-26139</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26141/">CVE-2020-26141</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26145/">CVE-2020-26145</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26147/">CVE-2020-26147</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23134/">CVE-2021-23134</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33200/">CVE-2021-33200</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3491/">CVE-2021-3491</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501649" comment="cluster-md-kmp-default-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501650" comment="dlm-kmp-default-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501651" comment="gfs2-kmp-default-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501652" comment="ocfs2-kmp-default-4.12.14-197.92.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139146" version="1" class="patch">
	<metadata>
		<title>Security update for hawk2 (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1179998" ref_url="https://bugzilla.suse.com/1179998" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35458" ref_url="https://www.suse.com/security/cve/CVE-2020-35458/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0200-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008242.html" source="SUSE-SU"/>
		<description>
This update for hawk2 fixes the following issues:

hawk2 was updated to version 2.4.0+git.1611141202.2fe6369e.

Security issue fixed:

- Fixed another possible code execution vulnerability in the controller code (bsc#1179998).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-22"/>
	<updated date="2021-01-22"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1179998">SUSE bug 1179998</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35458/">CVE-2020-35458</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501515" comment="hawk2-2.4.0+git.1611141202.2fe6369e-3.21.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139147" version="1" class="patch">
	<metadata>
		<title>Security update for crmsh (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1163460" ref_url="https://bugzilla.suse.com/1163460" source="BUGZILLA"/>
		<reference ref_id="1175982" ref_url="https://bugzilla.suse.com/1175982" source="BUGZILLA"/>
		<reference ref_id="1179999" ref_url="https://bugzilla.suse.com/1179999" source="BUGZILLA"/>
		<reference ref_id="1184465" ref_url="https://bugzilla.suse.com/1184465" source="BUGZILLA"/>
		<reference ref_id="1185423" ref_url="https://bugzilla.suse.com/1185423" source="BUGZILLA"/>
		<reference ref_id="1187553" ref_url="https://bugzilla.suse.com/1187553" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35459" ref_url="https://www.suse.com/security/cve/CVE-2020-35459/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2238-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009110.html" source="SUSE-SU"/>
		<description>
This update for crmsh fixes the following issues:

Update to version 4.3.1+20210624.67223df2:

- Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553)
- Fix: history: use Path.mkdir instead of mkdir command(bsc#1179999, CVE-2020-35459)
- Dev: crash_test: Add big warnings to have users' attention to potential failover(jsc#SLE-17979)
- Dev: crash_test: rename preflight_check as crash_test(jsc#SLE-17979)
- Fix: bootstrap: update sbd watchdog timeout when using diskless SBD with qdevice(bsc#1184465)
- Dev: utils: allow configure link-local ipv6 address(bsc#1163460)
- Fix: parse: shouldn't allow property setting with an empty value(bsc#1185423)
- Fix: help: show help message from argparse(bsc#1175982)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-02"/>
	<updated date="2021-07-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1163460">SUSE bug 1163460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175982">SUSE bug 1175982</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179999">SUSE bug 1179999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184465">SUSE bug 1184465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185423">SUSE bug 1185423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187553">SUSE bug 1187553</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35459/">CVE-2020-35459</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501653" comment="crmsh-4.3.1+20210624.67223df2-3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501654" comment="crmsh-scripts-4.3.1+20210624.67223df2-3.69.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139148" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1153720" ref_url="https://bugzilla.suse.com/1153720" source="BUGZILLA"/>
		<reference ref_id="1174978" ref_url="https://bugzilla.suse.com/1174978" source="BUGZILLA"/>
		<reference ref_id="1179610" ref_url="https://bugzilla.suse.com/1179610" source="BUGZILLA"/>
		<reference ref_id="1181193" ref_url="https://bugzilla.suse.com/1181193" source="BUGZILLA"/>
		<reference ref_id="1185428" ref_url="https://bugzilla.suse.com/1185428" source="BUGZILLA"/>
		<reference ref_id="1185701" ref_url="https://bugzilla.suse.com/1185701" source="BUGZILLA"/>
		<reference ref_id="1185861" ref_url="https://bugzilla.suse.com/1185861" source="BUGZILLA"/>
		<reference ref_id="1186463" ref_url="https://bugzilla.suse.com/1186463" source="BUGZILLA"/>
		<reference ref_id="1186484" ref_url="https://bugzilla.suse.com/1186484" source="BUGZILLA"/>
		<reference ref_id="1187038" ref_url="https://bugzilla.suse.com/1187038" source="BUGZILLA"/>
		<reference ref_id="1187050" ref_url="https://bugzilla.suse.com/1187050" source="BUGZILLA"/>
		<reference ref_id="1187215" ref_url="https://bugzilla.suse.com/1187215" source="BUGZILLA"/>
		<reference ref_id="1187452" ref_url="https://bugzilla.suse.com/1187452" source="BUGZILLA"/>
		<reference ref_id="1187554" ref_url="https://bugzilla.suse.com/1187554" source="BUGZILLA"/>
		<reference ref_id="1187595" ref_url="https://bugzilla.suse.com/1187595" source="BUGZILLA"/>
		<reference ref_id="1187601" ref_url="https://bugzilla.suse.com/1187601" source="BUGZILLA"/>
		<reference ref_id="1188062" ref_url="https://bugzilla.suse.com/1188062" source="BUGZILLA"/>
		<reference ref_id="1188116" ref_url="https://bugzilla.suse.com/1188116" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24588" ref_url="https://www.suse.com/security/cve/CVE-2020-24588/" source="CVE"/>
		<reference ref_id="CVE-2020-26558" ref_url="https://www.suse.com/security/cve/CVE-2020-26558/" source="CVE"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2020-36386" ref_url="https://www.suse.com/security/cve/CVE-2020-36386/" source="CVE"/>
		<reference ref_id="CVE-2021-0129" ref_url="https://www.suse.com/security/cve/CVE-2021-0129/" source="CVE"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-0605" ref_url="https://www.suse.com/security/cve/CVE-2021-0605/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33200" ref_url="https://www.suse.com/security/cve/CVE-2021-33200/" source="CVE"/>
		<reference ref_id="CVE-2021-33624" ref_url="https://www.suse.com/security/cve/CVE-2021-33624/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="CVE-2021-34693" ref_url="https://www.suse.com/security/cve/CVE-2021-34693/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009190.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2021-33624: Fixed a bug which allows unprivileged BPF program to leak the contents of arbitrary kernel memory (and therefore, of all physical memory) via a side-channel. (bsc#1187554)
- CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. (bsc#1187601)
- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187595)
- CVE-2020-26558: Fixed a flaw in the Bluetooth LE and BR/EDR secure pairing that could permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing. (bnc#1179610)
- CVE-2021-34693: Fixed a bug in net/can/bcm.c which could allow local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized. (bsc#1187452)
- CVE-2021-0129: Fixed an improper access control in BlueZ that may have allowed an authenticated user to potentially enable information disclosure via adjacent access. (bnc#1186463)
- CVE-2020-36386: Fixed an out-of-bounds read in hci_extended_inquiry_result_evt. (bsc#1187038)
- CVE-2020-24588: Fixed a bug that could allow an adversary to abuse devices that support receiving non-SSP A-MSDU frames to inject arbitrary network packets. (bsc#1185861 bsc#1185863)
- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-3609: Fixed a race condition in the CAN BCM networking protocol which allows for local privilege escalation. (bsc#1187215)
- CVE-2020-36385: Fixed a use-after-free flaw in ucma.c which allows for local privilege escalation. (bsc#1187050)
- CVE-2021-33200: Fix leakage of uninitialized bpf stack under speculation. (bsc#1186484)

The following non-security bugs were fixed:

- af_packet: fix the tx skb protocol in raw sockets with ETH_P_ALL (bsc#1176081).
- kabi: preserve struct header_ops after bsc#1176081 fix (bsc#1176081).
- net: Do not set transport offset to invalid value (bsc#1176081).
- net: Introduce parse_protocol header_ops callback (bsc#1176081).
- net/ethernet: Add parse_protocol header_ops support (bsc#1176081).
- net/mlx5e: Remove the wrong assumption about transport offset (bsc#1176081).
- net/mlx5e: Trust kernel regarding transport offset (bsc#1176081).
- net/packet: Ask driver for protocol if not provided by user (bsc#1176081).
- net/packet: Remove redundant skb-&gt;protocol set (bsc#1176081).
- resource: Fix find_next_iomem_res() iteration issue (bsc#1181193).
- scsi: scsi_dh_alua: Retry RTPG on a different path after failure (bsc#1174978 bsc#1185701).
- SUNRPC in case of backlog, hand free slots directly to waiting task (bsc#1185428).
- SUNRPC: More fixes for backlog congestion (bsc#1185428).
- x86/crash: Add e820 reserved ranges to kdump kernel's e820 table (bsc#1181193).
- x86/debug: Extend the lower bound of crash kernel low reservations (bsc#1153720).
- x86/e820, ioport: Add a new I/O resource descriptor IORES_DESC_RESERVED (bsc#1181193).
- x86/mm: Rework ioremap resource mapping determination (bsc#1181193).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-21"/>
	<updated date="2021-07-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153720">SUSE bug 1153720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174978">SUSE bug 1174978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179610">SUSE bug 1179610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181193">SUSE bug 1181193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185428">SUSE bug 1185428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185701">SUSE bug 1185701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185861">SUSE bug 1185861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186463">SUSE bug 1186463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186484">SUSE bug 1186484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187038">SUSE bug 1187038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187050">SUSE bug 1187050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187215">SUSE bug 1187215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187452">SUSE bug 1187452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187554">SUSE bug 1187554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187595">SUSE bug 1187595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187601">SUSE bug 1187601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188062">SUSE bug 1188062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188116">SUSE bug 1188116</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-24588/">CVE-2020-24588</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26558/">CVE-2020-26558</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36386/">CVE-2020-36386</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-0129/">CVE-2021-0129</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0605/">CVE-2021-0605</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33200/">CVE-2021-33200</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-33624/">CVE-2021-33624</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-34693/">CVE-2021-34693</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009625639" comment="cluster-md-kmp-default-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625640" comment="dlm-kmp-default-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625641" comment="gfs2-kmp-default-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625642" comment="ocfs2-kmp-default-4.12.14-197.99.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139149" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-nokogiri (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1146578" ref_url="https://bugzilla.suse.com/1146578" source="BUGZILLA"/>
		<reference ref_id="1156722" ref_url="https://bugzilla.suse.com/1156722" source="BUGZILLA"/>
		<reference ref_id="1180507" ref_url="https://bugzilla.suse.com/1180507" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-5477" ref_url="https://www.suse.com/security/cve/CVE-2019-5477/" source="CVE"/>
		<reference ref_id="CVE-2020-26247" ref_url="https://www.suse.com/security/cve/CVE-2020-26247/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0251-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008258.html" source="SUSE-SU"/>
		<description>
This update for rubygem-nokogiri fixes the following issues:
  
rubygem-nokogiri was updated to 1.8.5 (bsc#1156722).

Security issues fixed:

- CVE-2019-5477: Fixed a command injection vulnerability (bsc#1146578).
- CVE-2020-26247: Fixed an XXE vulnerability in Nokogiri::XML::Schema (bsc#1180507).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-01"/>
	<updated date="2021-02-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1146578">SUSE bug 1146578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1156722">SUSE bug 1156722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180507">SUSE bug 1180507</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-5477/">CVE-2019-5477</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-26247/">CVE-2020-26247</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501518" comment="ruby2.5-rubygem-nokogiri-1.8.5-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139150" version="1" class="patch">
	<metadata>
		<title>Security update for haproxy (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1189366" ref_url="https://bugzilla.suse.com/1189366" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:2768-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-August/019882.html" source="SUSE-SU"/>
		<description>
This update for haproxy fixes the following issues:

- Fixes HAProxy vulnerabilities on H2 (bsc#1189366).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189366">SUSE bug 1189366</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630856" comment="haproxy-2.0.14-8.19.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139151" version="1" class="patch">
	<metadata>
		<title>Security update for haproxy (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1189877" ref_url="https://bugzilla.suse.com/1189877" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-40346" ref_url="https://www.suse.com/security/cve/CVE-2021-40346/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3257-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009521.html" source="SUSE-SU"/>
		<description>
This update for haproxy fixes the following issues:

- CVE-2021-40346: Fixed request smuggling vulnerability in HTX (bsc#1189877).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-29"/>
	<updated date="2021-09-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1189877">SUSE bug 1189877</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-40346/">CVE-2021-40346</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632725" comment="haproxy-2.0.14-8.23.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139152" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-activerecord-5_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1182169" ref_url="https://bugzilla.suse.com/1182169" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22880" ref_url="https://www.suse.com/security/cve/CVE-2021-22880/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3634-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009706.html" source="SUSE-SU"/>
		<description>
This update for rubygem-activerecord-5_1 fixes the following issues:

- CVE-2021-22880: Fixed possible DoS vector in PostgreSQL money type (bsc#1182169).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-09"/>
	<updated date="2021-11-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1182169">SUSE bug 1182169</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-22880/">CVE-2021-22880</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652336" comment="ruby2.5-rubygem-activerecord-5_1-5.1.4-5.3.3 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139153" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1014440" ref_url="https://bugzilla.suse.com/1014440" source="BUGZILLA"/>
		<reference ref_id="1192284" ref_url="https://bugzilla.suse.com/1192284" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-2124" ref_url="https://www.suse.com/security/cve/CVE-2016-2124/" source="CVE"/>
		<reference ref_id="CVE-2020-25717" ref_url="https://www.suse.com/security/cve/CVE-2020-25717/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009729.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos (bsc#1014440).
- CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members (bsc#1192284).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-16"/>
	<updated date="2021-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1014440">SUSE bug 1014440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192284">SUSE bug 1192284</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2124/">CVE-2016-2124</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25717/">CVE-2020-25717</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009654816" comment="ctdb-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654817" comment="ctdb-pcp-pmda-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654818" comment="ctdb-tests-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654819" comment="libdcerpc-binding0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654820" comment="libdcerpc-binding0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654821" comment="libdcerpc-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654822" comment="libdcerpc-samr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654823" comment="libdcerpc-samr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654824" comment="libdcerpc-samr0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654825" comment="libdcerpc0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654826" comment="libdcerpc0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654827" comment="libndr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654828" comment="libndr-krb5pac-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654829" comment="libndr-krb5pac0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654830" comment="libndr-krb5pac0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654831" comment="libndr-nbt-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654832" comment="libndr-nbt0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654833" comment="libndr-nbt0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654834" comment="libndr-standard-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654835" comment="libndr-standard0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654836" comment="libndr-standard0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654837" comment="libndr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654838" comment="libndr0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654839" comment="libnetapi-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654840" comment="libnetapi-devel-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654841" comment="libnetapi0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654842" comment="libnetapi0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654843" comment="libsamba-credentials-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654844" comment="libsamba-credentials0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654845" comment="libsamba-credentials0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654846" comment="libsamba-errors-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654847" comment="libsamba-errors0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654848" comment="libsamba-errors0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654849" comment="libsamba-hostconfig-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654850" comment="libsamba-hostconfig0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654851" comment="libsamba-hostconfig0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654852" comment="libsamba-passdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654853" comment="libsamba-passdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654854" comment="libsamba-passdb0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654855" comment="libsamba-policy-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654856" comment="libsamba-policy-python-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654857" comment="libsamba-policy-python3-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654858" comment="libsamba-policy0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654859" comment="libsamba-policy0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654860" comment="libsamba-policy0-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654861" comment="libsamba-policy0-python3-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654862" comment="libsamba-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654863" comment="libsamba-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654864" comment="libsamba-util0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654865" comment="libsamdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654866" comment="libsamdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654867" comment="libsamdb0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654868" comment="libsmbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654869" comment="libsmbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654870" comment="libsmbclient0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654871" comment="libsmbconf-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654872" comment="libsmbconf0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654873" comment="libsmbconf0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654874" comment="libsmbldap-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654875" comment="libsmbldap2-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654876" comment="libsmbldap2-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654877" comment="libtevent-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654878" comment="libtevent-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654879" comment="libtevent-util0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654880" comment="libwbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654881" comment="libwbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654882" comment="libwbclient0-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654883" comment="samba-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654884" comment="samba-ad-dc-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654885" comment="samba-ad-dc-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654886" comment="samba-ceph-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654887" comment="samba-client-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654888" comment="samba-client-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654889" comment="samba-core-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654890" comment="samba-doc-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654891" comment="samba-dsdb-modules-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654892" comment="samba-libs-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654893" comment="samba-libs-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654894" comment="samba-libs-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654895" comment="samba-libs-python-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654896" comment="samba-libs-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654897" comment="samba-libs-python3-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654898" comment="samba-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654899" comment="samba-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654900" comment="samba-test-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654901" comment="samba-winbind-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654902" comment="samba-winbind-64bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139154" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1100416" ref_url="https://bugzilla.suse.com/1100416" source="BUGZILLA"/>
		<reference ref_id="1108488" ref_url="https://bugzilla.suse.com/1108488" source="BUGZILLA"/>
		<reference ref_id="1129735" ref_url="https://bugzilla.suse.com/1129735" source="BUGZILLA"/>
		<reference ref_id="1129898" ref_url="https://bugzilla.suse.com/1129898" source="BUGZILLA"/>
		<reference ref_id="1133374" ref_url="https://bugzilla.suse.com/1133374" source="BUGZILLA"/>
		<reference ref_id="1136513" ref_url="https://bugzilla.suse.com/1136513" source="BUGZILLA"/>
		<reference ref_id="1171420" ref_url="https://bugzilla.suse.com/1171420" source="BUGZILLA"/>
		<reference ref_id="1176724" ref_url="https://bugzilla.suse.com/1176724" source="BUGZILLA"/>
		<reference ref_id="1177666" ref_url="https://bugzilla.suse.com/1177666" source="BUGZILLA"/>
		<reference ref_id="1181158" ref_url="https://bugzilla.suse.com/1181158" source="BUGZILLA"/>
		<reference ref_id="1184673" ref_url="https://bugzilla.suse.com/1184673" source="BUGZILLA"/>
		<reference ref_id="1184804" ref_url="https://bugzilla.suse.com/1184804" source="BUGZILLA"/>
		<reference ref_id="1185377" ref_url="https://bugzilla.suse.com/1185377" source="BUGZILLA"/>
		<reference ref_id="1185726" ref_url="https://bugzilla.suse.com/1185726" source="BUGZILLA"/>
		<reference ref_id="1185758" ref_url="https://bugzilla.suse.com/1185758" source="BUGZILLA"/>
		<reference ref_id="1185973" ref_url="https://bugzilla.suse.com/1185973" source="BUGZILLA"/>
		<reference ref_id="1186078" ref_url="https://bugzilla.suse.com/1186078" source="BUGZILLA"/>
		<reference ref_id="1186109" ref_url="https://bugzilla.suse.com/1186109" source="BUGZILLA"/>
		<reference ref_id="1186390" ref_url="https://bugzilla.suse.com/1186390" source="BUGZILLA"/>
		<reference ref_id="1186482" ref_url="https://bugzilla.suse.com/1186482" source="BUGZILLA"/>
		<reference ref_id="1186672" ref_url="https://bugzilla.suse.com/1186672" source="BUGZILLA"/>
		<reference ref_id="1188062" ref_url="https://bugzilla.suse.com/1188062" source="BUGZILLA"/>
		<reference ref_id="1188063" ref_url="https://bugzilla.suse.com/1188063" source="BUGZILLA"/>
		<reference ref_id="1188172" ref_url="https://bugzilla.suse.com/1188172" source="BUGZILLA"/>
		<reference ref_id="1188563" ref_url="https://bugzilla.suse.com/1188563" source="BUGZILLA"/>
		<reference ref_id="1188601" ref_url="https://bugzilla.suse.com/1188601" source="BUGZILLA"/>
		<reference ref_id="1188616" ref_url="https://bugzilla.suse.com/1188616" source="BUGZILLA"/>
		<reference ref_id="1188838" ref_url="https://bugzilla.suse.com/1188838" source="BUGZILLA"/>
		<reference ref_id="1188876" ref_url="https://bugzilla.suse.com/1188876" source="BUGZILLA"/>
		<reference ref_id="1188983" ref_url="https://bugzilla.suse.com/1188983" source="BUGZILLA"/>
		<reference ref_id="1188985" ref_url="https://bugzilla.suse.com/1188985" source="BUGZILLA"/>
		<reference ref_id="1189057" ref_url="https://bugzilla.suse.com/1189057" source="BUGZILLA"/>
		<reference ref_id="1189262" ref_url="https://bugzilla.suse.com/1189262" source="BUGZILLA"/>
		<reference ref_id="1189291" ref_url="https://bugzilla.suse.com/1189291" source="BUGZILLA"/>
		<reference ref_id="1189399" ref_url="https://bugzilla.suse.com/1189399" source="BUGZILLA"/>
		<reference ref_id="1189400" ref_url="https://bugzilla.suse.com/1189400" source="BUGZILLA"/>
		<reference ref_id="1189706" ref_url="https://bugzilla.suse.com/1189706" source="BUGZILLA"/>
		<reference ref_id="1189846" ref_url="https://bugzilla.suse.com/1189846" source="BUGZILLA"/>
		<reference ref_id="1189884" ref_url="https://bugzilla.suse.com/1189884" source="BUGZILLA"/>
		<reference ref_id="1190023" ref_url="https://bugzilla.suse.com/1190023" source="BUGZILLA"/>
		<reference ref_id="1190025" ref_url="https://bugzilla.suse.com/1190025" source="BUGZILLA"/>
		<reference ref_id="1190067" ref_url="https://bugzilla.suse.com/1190067" source="BUGZILLA"/>
		<reference ref_id="1190115" ref_url="https://bugzilla.suse.com/1190115" source="BUGZILLA"/>
		<reference ref_id="1190117" ref_url="https://bugzilla.suse.com/1190117" source="BUGZILLA"/>
		<reference ref_id="1190159" ref_url="https://bugzilla.suse.com/1190159" source="BUGZILLA"/>
		<reference ref_id="1190276" ref_url="https://bugzilla.suse.com/1190276" source="BUGZILLA"/>
		<reference ref_id="1190349" ref_url="https://bugzilla.suse.com/1190349" source="BUGZILLA"/>
		<reference ref_id="1190351" ref_url="https://bugzilla.suse.com/1190351" source="BUGZILLA"/>
		<reference ref_id="1190479" ref_url="https://bugzilla.suse.com/1190479" source="BUGZILLA"/>
		<reference ref_id="1190534" ref_url="https://bugzilla.suse.com/1190534" source="BUGZILLA"/>
		<reference ref_id="1190601" ref_url="https://bugzilla.suse.com/1190601" source="BUGZILLA"/>
		<reference ref_id="1190717" ref_url="https://bugzilla.suse.com/1190717" source="BUGZILLA"/>
		<reference ref_id="1191193" ref_url="https://bugzilla.suse.com/1191193" source="BUGZILLA"/>
		<reference ref_id="1191315" ref_url="https://bugzilla.suse.com/1191315" source="BUGZILLA"/>
		<reference ref_id="1191317" ref_url="https://bugzilla.suse.com/1191317" source="BUGZILLA"/>
		<reference ref_id="1191349" ref_url="https://bugzilla.suse.com/1191349" source="BUGZILLA"/>
		<reference ref_id="1191457" ref_url="https://bugzilla.suse.com/1191457" source="BUGZILLA"/>
		<reference ref_id="1191628" ref_url="https://bugzilla.suse.com/1191628" source="BUGZILLA"/>
		<reference ref_id="1191790" ref_url="https://bugzilla.suse.com/1191790" source="BUGZILLA"/>
		<reference ref_id="1191800" ref_url="https://bugzilla.suse.com/1191800" source="BUGZILLA"/>
		<reference ref_id="1191888" ref_url="https://bugzilla.suse.com/1191888" source="BUGZILLA"/>
		<reference ref_id="1191961" ref_url="https://bugzilla.suse.com/1191961" source="BUGZILLA"/>
		<reference ref_id="1192045" ref_url="https://bugzilla.suse.com/1192045" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="1192379" ref_url="https://bugzilla.suse.com/1192379" source="BUGZILLA"/>
		<reference ref_id="1192400" ref_url="https://bugzilla.suse.com/1192400" source="BUGZILLA"/>
		<reference ref_id="1192775" ref_url="https://bugzilla.suse.com/1192775" source="BUGZILLA"/>
		<reference ref_id="1192781" ref_url="https://bugzilla.suse.com/1192781" source="BUGZILLA"/>
		<reference ref_id="1192802" ref_url="https://bugzilla.suse.com/1192802" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13405" ref_url="https://www.suse.com/security/cve/CVE-2018-13405/" source="CVE"/>
		<reference ref_id="CVE-2018-9517" ref_url="https://www.suse.com/security/cve/CVE-2018-9517/" source="CVE"/>
		<reference ref_id="CVE-2019-3874" ref_url="https://www.suse.com/security/cve/CVE-2019-3874/" source="CVE"/>
		<reference ref_id="CVE-2019-3900" ref_url="https://www.suse.com/security/cve/CVE-2019-3900/" source="CVE"/>
		<reference ref_id="CVE-2020-0429" ref_url="https://www.suse.com/security/cve/CVE-2020-0429/" source="CVE"/>
		<reference ref_id="CVE-2020-12770" ref_url="https://www.suse.com/security/cve/CVE-2020-12770/" source="CVE"/>
		<reference ref_id="CVE-2020-3702" ref_url="https://www.suse.com/security/cve/CVE-2020-3702/" source="CVE"/>
		<reference ref_id="CVE-2020-4788" ref_url="https://www.suse.com/security/cve/CVE-2020-4788/" source="CVE"/>
		<reference ref_id="CVE-2021-0941" ref_url="https://www.suse.com/security/cve/CVE-2021-0941/" source="CVE"/>
		<reference ref_id="CVE-2021-20322" ref_url="https://www.suse.com/security/cve/CVE-2021-20322/" source="CVE"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-31916" ref_url="https://www.suse.com/security/cve/CVE-2021-31916/" source="CVE"/>
		<reference ref_id="CVE-2021-33033" ref_url="https://www.suse.com/security/cve/CVE-2021-33033/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="CVE-2021-34556" ref_url="https://www.suse.com/security/cve/CVE-2021-34556/" source="CVE"/>
		<reference ref_id="CVE-2021-34981" ref_url="https://www.suse.com/security/cve/CVE-2021-34981/" source="CVE"/>
		<reference ref_id="CVE-2021-3542" ref_url="https://www.suse.com/security/cve/CVE-2021-3542/" source="CVE"/>
		<reference ref_id="CVE-2021-35477" ref_url="https://www.suse.com/security/cve/CVE-2021-35477/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3655" ref_url="https://www.suse.com/security/cve/CVE-2021-3655/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-3659" ref_url="https://www.suse.com/security/cve/CVE-2021-3659/" source="CVE"/>
		<reference ref_id="CVE-2021-3679" ref_url="https://www.suse.com/security/cve/CVE-2021-3679/" source="CVE"/>
		<reference ref_id="CVE-2021-3715" ref_url="https://www.suse.com/security/cve/CVE-2021-3715/" source="CVE"/>
		<reference ref_id="CVE-2021-37159" ref_url="https://www.suse.com/security/cve/CVE-2021-37159/" source="CVE"/>
		<reference ref_id="CVE-2021-3732" ref_url="https://www.suse.com/security/cve/CVE-2021-3732/" source="CVE"/>
		<reference ref_id="CVE-2021-3744" ref_url="https://www.suse.com/security/cve/CVE-2021-3744/" source="CVE"/>
		<reference ref_id="CVE-2021-3752" ref_url="https://www.suse.com/security/cve/CVE-2021-3752/" source="CVE"/>
		<reference ref_id="CVE-2021-3753" ref_url="https://www.suse.com/security/cve/CVE-2021-3753/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="CVE-2021-3759" ref_url="https://www.suse.com/security/cve/CVE-2021-3759/" source="CVE"/>
		<reference ref_id="CVE-2021-3760" ref_url="https://www.suse.com/security/cve/CVE-2021-3760/" source="CVE"/>
		<reference ref_id="CVE-2021-3764" ref_url="https://www.suse.com/security/cve/CVE-2021-3764/" source="CVE"/>
		<reference ref_id="CVE-2021-3772" ref_url="https://www.suse.com/security/cve/CVE-2021-3772/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="CVE-2021-38204" ref_url="https://www.suse.com/security/cve/CVE-2021-38204/" source="CVE"/>
		<reference ref_id="CVE-2021-40490" ref_url="https://www.suse.com/security/cve/CVE-2021-40490/" source="CVE"/>
		<reference ref_id="CVE-2021-41864" ref_url="https://www.suse.com/security/cve/CVE-2021-41864/" source="CVE"/>
		<reference ref_id="CVE-2021-42008" ref_url="https://www.suse.com/security/cve/CVE-2021-42008/" source="CVE"/>
		<reference ref_id="CVE-2021-42252" ref_url="https://www.suse.com/security/cve/CVE-2021-42252/" source="CVE"/>
		<reference ref_id="CVE-2021-42739" ref_url="https://www.suse.com/security/cve/CVE-2021-42739/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

  You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

- CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).
- CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).
- CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
- CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails  (bsc#1191961).
- CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).
- CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).
- CVE-2021-3655: Missing size validations on inbound SCTP packets may have allowed the kernel to read uninitialized memory (bnc#1188563).
- CVE-2021-33033: The Linux kernel has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value (bnc#1186109 bnc#1186390 bnc#1188876).
- CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev-&gt;rf_conn_info object (bsc#1190067).
- CVE-2021-42739: The firewire subsystem in the Linux kernel has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bnc#1184673).
- CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).
- CVE-2018-13405: The inode_init_owner function in fs/inode.c in the Linux kernel allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID (bnc#1100416 bnc#1129735).
- CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349).
- CVE-2021-34556: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack (bnc#1188983).
- CVE-2021-35477: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation did not necessarily occur before a store operation that has an attacker-controlled value (bnc#1188985).
- CVE-2021-42252: An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a certain comparison uses values that are not memory sizes (bnc#1190479).
- CVE-2021-41864: prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317).
- CVE-2021-42008: The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access (bnc#1191315).
- CVE-2021-3759: Unaccounted ipc objects could have lead to breaking memcg limits and DoS attacks (bsc#1190115).
- CVE-2020-3702: Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic (bnc#1191193).
- CVE-2021-3752: Fixed a use after free vulnerability in the bluetooth module. (bsc#1190023)
- CVE-2021-40490: A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel (bnc#1190159 bnc#1192775)
- CVE-2021-3744: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1189884)
- CVE-2021-3764: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1190534)
- CVE-2020-12770: An issue was discovered in the Linux kernel sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040 (bnc#1171420).
- CVE-2021-3640: Fixed a Use-After-Free vulnerability in function sco_sock_sendmsg() in the bluetooth stack (bsc#1188172).
- CVE-2019-3900: An infinite loop issue was found in the vhost_net kernel module, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario (bnc#1133374).
- CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. (bnc#1129898).
- CVE-2018-9517: In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. (bnc#1108488).
- CVE-2021-38160: Data corruption or loss could be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190117)
- CVE-2021-3753: Fixed race out-of-bounds in virtual terminal handling (bsc#1190025).
- CVE-2021-3732: Mounting overlayfs inside an unprivileged user namespace can reveal files (bsc#1189706).
- CVE-2021-3653: A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the 'int_ctl' field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7 (bnc#1189399).
- CVE-2021-3656: Missing validation of the the `virt_ext` VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS for the L2 guest (bsc#1189400).
- CVE-2021-38204: drivers/usb/host/max3421-hcd.c allowed physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations (bnc#1189291).
- CVE-2021-3679: A lack of CPU resource in the tracing module functionality was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service (bnc#1189057).
- CVE-2020-4788: IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296 (bnc#0 bnc#1177666 bnc#1181158).
- CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (bsc#1188876).
- CVE-2020-0429: In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1176724).
- CVE-2021-37576: arch/powerpc/kvm/book3s_rtas.c on the powerpc platform allowed KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e (bnc#1188838 bnc#1190276).
- CVE-2021-22543: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allowed users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation (bnc#1186482 bnc#1190276).
- CVE-2021-33909: fs/seq_file.c did not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05 (bnc#1188062 bnc#1188063).

The following non-security bugs were fixed:

- Add arch-dependent support markers in supported.conf (bsc#1186672) 
- Add the support for kernel-FLAVOR-optional subpackage (jsc#SLE-11796)
- bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22913)
- bpf: Disallow unprivileged bpf by default (jsc#SLE-22913).
- ceph: take snap_empty_lock atomically with snaprealm refcount change (bsc#1191888).
- config: disable unprivileged BPF by default (jsc#SLE-22913)
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (bsc#1185758,bsc#1192400).
- drm: fix spectre issue in vmw_execbuf_ioctl (bsc#1192802).
- ftrace: Fix scripts/recordmcount.pl due to new binutils (bsc#1192267).
- gigaset: fix spectre issue in do_data_b3_req (bsc#1192802).
- hisax: fix spectre issues (bsc#1192802).
- hv: mana: adjust mana_select_queue to old API (jsc#SLE-18779, bsc#1185726).
- hv: mana: remove netdev_lockdep_set_classes usage (jsc#SLE-18779, bsc#1185726).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number (jsc#SLE-18779, bsc#1185726).
- hysdn: fix spectre issue in hycapi_send_message (bsc#1192802).
- infiniband: fix spectre issue in ib_uverbs_write (bsc#1192802).
- infiniband: fix spectre issue in ib_uverbs_write (bsc#1192802).
- ipc: remove memcg accounting for sops objects in do_semtimedop() (bsc#1190115).
- iwlwifi: fix spectre issue in iwl_dbgfs_update_pm (bsc#1192802).
- kernel-binary.spec: Exctract s390 decompression code (jsc#SLE-17042).
- kernel-binary.spec: Fix up usrmerge for non-modular kernels.
- kernel-binary.spec.in: build-id check requires elfutils.
- kernel-binary.spec.in: Regenerate makefile when not using mkmakefile.
- kernel-binary.spec: Only use mkmakefile when it exists Linux 5.13 no longer had a mkmakefile script
- kernel-binary.spec: Remove obsolete and wrong comment mkmakefile is repleced by echo on newer kernel
- kernel-docs.spec.in: Build using an utf-8 locale. Sphinx cannot handle UTF-8 input in non-UTF-8 locale.
- media: dvb_ca_en50221: prevent using slot_info for Spectre attacs (bsc#1192802).
- media: dvb_ca_en50221: sanity check slot number from userspace (bsc#1192802).
- media: wl128x: get rid of a potential spectre issue (bsc#1192802).
- memcg: enable accounting for file lock caches (bsc#1190115).
- mm/memory.c: do_fault: avoid usage of stale vm_area_struct (bsc#1136513).
- mpt3sas: fix spectre issues (bsc#1192802).
- net: mana: Add a driver for Microsoft Azure Network Adapter (MANA) (jsc#SLE-18779, bsc#1185726).
- net: mana: Add support for EQ sharing (jsc#SLE-18779, bsc#1185726).
- net: mana: Add WARN_ON_ONCE in case of CQE read overflow (jsc#SLE-18779, bsc#1185726).
- net: mana: Fix a memory leak in an error handling path in (jsc#SLE-18779, bsc#1185726).
- net: mana: Fix error handling in mana_create_rxq() (git-fixes, bsc#1191800).
- net: mana: fix PCI_HYPERV dependency (jsc#SLE-18779, bsc#1185726).
- net: mana: Move NAPI from EQ to CQ (jsc#SLE-18779, bsc#1185726).
- net: mana: Prefer struct_size over open coded arithmetic (jsc#SLE-18779, bsc#1185726).
- net: mana: remove redundant initialization of variable err (jsc#SLE-18779, bsc#1185726).
- net: mana: Use int to check the return value of mana_gd_poll_cq() (jsc#SLE-18779, bsc#1185726).
- net: mana: Use struct_size() in kzalloc() (jsc#SLE-18779, bsc#1185726).
- net_sched: cls_route: remove the right filter from hashtable (networking-stable-20_03_28).
- net: sched: sch_teql: fix null-pointer dereference (bsc#1190717).
- net: sock_diag: Fix spectre v1 gadget in __sock_diag_cmd() (bsc#1192802).
- NFS: Do uncached readdir when we're seeking a cookie in an empty page cache (bsc#1191628).
- objtool: Do not fail on missing symbol table (bsc#1192379).
- osst: fix spectre issue in osst_verify_frame (bsc#1192802).
- ovl: check whiteout in ovl_create_over_whiteout() (bsc#1189846).
- ovl: filter of trusted xattr results in audit (bsc#1189846).
- ovl: fix dentry leak in ovl_get_redirect (bsc#1189846).
- ovl: initialize error in ovl_copy_xattr (bsc#1189846).
- ovl: relax WARN_ON() on rename to self (bsc#1189846).
- PCI: hv: Use expected affinity when unmasking IRQ (bsc#1185973).
- Revert 'memcg: enable accounting for file lock caches (bsc#1190115).' This reverts commit 912b4421a3e9bb9f0ef1aadc64a436666259bd4d. It's effectively upstream commit 3754707bcc3e190e5dadc978d172b61e809cb3bd applied to kernel-source (to avoid proliferation of patches). Make a note in blacklist.conf too.
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (bsc#1190601).
- s390/bpf: Fix branch shortening during codegen pass (bsc#1190601).
- s390/bpf: Fix optimizing out zero-extensions (bsc#1190601).
- s390: bpf: implement jitting of BPF_ALU | BPF_ARSH | BPF_* (bsc#1190601).
- s390/bpf: Wrap JIT macro parameter usages in parentheses (bsc#1190601).
- scripts/git_sort/git_sort.py: add bpf git repo
- scripts/git_sort/git_sort.py: Update nvme repositories
- scsi: libfc: Fix array index out of bound exception (bsc#1188616).
- scsi: lpfc: Fix FLOGI failure due to accessing a freed node (bsc#1191349).
- scsi: lpfc: Fix memory overwrite during FC-GS I/O abort handling (bsc#1191349 bsc#1191457).
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (bsc#1191349 bsc#1191457).
- scsi: target: avoid using lun_tg_pt_gp after unlock (bsc#1186078).
- sctp: check asoc peer.asconf_capable before processing asconf (bsc#1190351).
- sctp: fully initialize v4 addr in some functions (bsc#1188563).
- sysvipc/sem: mitigate semnum index against spectre v1 (bsc#1192802).
- target: core: Fix sense key for invalid XCOPY request (bsc#1186078).
- Update config files: Add CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
- Use /usr/lib/modules as module dir when usermerge is active in the target distro.
- UsrMerge the kernel (boo#1184804)
- x86/CPU: Add more Icelake model numbers (bsc#1185758,bsc#1192400).
- xfrm: xfrm_state_mtu should return at least 1280 for ipv6 (bsc#1185377).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-02"/>
	<updated date="2021-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1100416">SUSE bug 1100416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108488">SUSE bug 1108488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129735">SUSE bug 1129735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129898">SUSE bug 1129898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133374">SUSE bug 1133374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136513">SUSE bug 1136513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171420">SUSE bug 1171420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176724">SUSE bug 1176724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177666">SUSE bug 1177666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181158">SUSE bug 1181158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184673">SUSE bug 1184673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184804">SUSE bug 1184804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185377">SUSE bug 1185377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185726">SUSE bug 1185726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185758">SUSE bug 1185758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185973">SUSE bug 1185973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186078">SUSE bug 1186078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186109">SUSE bug 1186109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186390">SUSE bug 1186390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186482">SUSE bug 1186482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186672">SUSE bug 1186672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188062">SUSE bug 1188062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188063">SUSE bug 1188063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188172">SUSE bug 1188172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188563">SUSE bug 1188563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188601">SUSE bug 1188601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188616">SUSE bug 1188616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188838">SUSE bug 1188838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188876">SUSE bug 1188876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188983">SUSE bug 1188983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188985">SUSE bug 1188985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189057">SUSE bug 1189057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189262">SUSE bug 1189262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189291">SUSE bug 1189291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189399">SUSE bug 1189399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189400">SUSE bug 1189400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189706">SUSE bug 1189706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189846">SUSE bug 1189846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189884">SUSE bug 1189884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190023">SUSE bug 1190023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190025">SUSE bug 1190025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190067">SUSE bug 1190067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190115">SUSE bug 1190115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190117">SUSE bug 1190117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190159">SUSE bug 1190159</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190276">SUSE bug 1190276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190349">SUSE bug 1190349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190351">SUSE bug 1190351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190479">SUSE bug 1190479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190534">SUSE bug 1190534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190601">SUSE bug 1190601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190717">SUSE bug 1190717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191193">SUSE bug 1191193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191315">SUSE bug 1191315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191317">SUSE bug 1191317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191349">SUSE bug 1191349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191457">SUSE bug 1191457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191628">SUSE bug 1191628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191790">SUSE bug 1191790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191800">SUSE bug 1191800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191888">SUSE bug 1191888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191961">SUSE bug 1191961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192045">SUSE bug 1192045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192379">SUSE bug 1192379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192400">SUSE bug 1192400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192775">SUSE bug 1192775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192781">SUSE bug 1192781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192802">SUSE bug 1192802</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-13405/">CVE-2018-13405</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-9517/">CVE-2018-9517</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3874/">CVE-2019-3874</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3900/">CVE-2019-3900</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0429/">CVE-2020-0429</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12770/">CVE-2020-12770</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3702/">CVE-2020-3702</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-4788/">CVE-2020-4788</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0941/">CVE-2021-0941</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20322/">CVE-2021-20322</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31916/">CVE-2021-31916</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33033/">CVE-2021-33033</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-34556/">CVE-2021-34556</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-34981/">CVE-2021-34981</cve>
	<cve impact="important" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3542/">CVE-2021-3542</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35477/">CVE-2021-35477</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3655/">CVE-2021-3655</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3659/">CVE-2021-3659</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3679/">CVE-2021-3679</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3715/">CVE-2021-3715</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-37159/">CVE-2021-37159</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3732/">CVE-2021-3732</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3744/">CVE-2021-3744</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3752/">CVE-2021-3752</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3753/">CVE-2021-3753</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3759/">CVE-2021-3759</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3760/">CVE-2021-3760</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3764/">CVE-2021-3764</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3772/">CVE-2021-3772</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38204/">CVE-2021-38204</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-40490/">CVE-2021-40490</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41864/">CVE-2021-41864</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42008/">CVE-2021-42008</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42252/">CVE-2021-42252</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42739/">CVE-2021-42739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658104" comment="cluster-md-kmp-default-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658105" comment="dlm-kmp-default-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658106" comment="gfs2-kmp-default-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658107" comment="ocfs2-kmp-default-4.12.14-197.102.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139155" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1046305" ref_url="https://bugzilla.suse.com/1046305" source="BUGZILLA"/>
		<reference ref_id="1046306" ref_url="https://bugzilla.suse.com/1046306" source="BUGZILLA"/>
		<reference ref_id="1046540" ref_url="https://bugzilla.suse.com/1046540" source="BUGZILLA"/>
		<reference ref_id="1046542" ref_url="https://bugzilla.suse.com/1046542" source="BUGZILLA"/>
		<reference ref_id="1046648" ref_url="https://bugzilla.suse.com/1046648" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050538" ref_url="https://bugzilla.suse.com/1050538" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1056653" ref_url="https://bugzilla.suse.com/1056653" source="BUGZILLA"/>
		<reference ref_id="1056657" ref_url="https://bugzilla.suse.com/1056657" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1073513" ref_url="https://bugzilla.suse.com/1073513" source="BUGZILLA"/>
		<reference ref_id="1074220" ref_url="https://bugzilla.suse.com/1074220" source="BUGZILLA"/>
		<reference ref_id="1075020" ref_url="https://bugzilla.suse.com/1075020" source="BUGZILLA"/>
		<reference ref_id="1086282" ref_url="https://bugzilla.suse.com/1086282" source="BUGZILLA"/>
		<reference ref_id="1086301" ref_url="https://bugzilla.suse.com/1086301" source="BUGZILLA"/>
		<reference ref_id="1086313" ref_url="https://bugzilla.suse.com/1086313" source="BUGZILLA"/>
		<reference ref_id="1086314" ref_url="https://bugzilla.suse.com/1086314" source="BUGZILLA"/>
		<reference ref_id="1098633" ref_url="https://bugzilla.suse.com/1098633" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104270" ref_url="https://bugzilla.suse.com/1104270" source="BUGZILLA"/>
		<reference ref_id="1104277" ref_url="https://bugzilla.suse.com/1104277" source="BUGZILLA"/>
		<reference ref_id="1104279" ref_url="https://bugzilla.suse.com/1104279" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104742" ref_url="https://bugzilla.suse.com/1104742" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111981" ref_url="https://bugzilla.suse.com/1111981" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1126390" ref_url="https://bugzilla.suse.com/1126390" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1136348" ref_url="https://bugzilla.suse.com/1136348" source="BUGZILLA"/>
		<reference ref_id="1149032" ref_url="https://bugzilla.suse.com/1149032" source="BUGZILLA"/>
		<reference ref_id="1174206" ref_url="https://bugzilla.suse.com/1174206" source="BUGZILLA"/>
		<reference ref_id="1176831" ref_url="https://bugzilla.suse.com/1176831" source="BUGZILLA"/>
		<reference ref_id="1176846" ref_url="https://bugzilla.suse.com/1176846" source="BUGZILLA"/>
		<reference ref_id="1178036" ref_url="https://bugzilla.suse.com/1178036" source="BUGZILLA"/>
		<reference ref_id="1178049" ref_url="https://bugzilla.suse.com/1178049" source="BUGZILLA"/>
		<reference ref_id="1178900" ref_url="https://bugzilla.suse.com/1178900" source="BUGZILLA"/>
		<reference ref_id="1179093" ref_url="https://bugzilla.suse.com/1179093" source="BUGZILLA"/>
		<reference ref_id="1179142" ref_url="https://bugzilla.suse.com/1179142" source="BUGZILLA"/>
		<reference ref_id="1179508" ref_url="https://bugzilla.suse.com/1179508" source="BUGZILLA"/>
		<reference ref_id="1179509" ref_url="https://bugzilla.suse.com/1179509" source="BUGZILLA"/>
		<reference ref_id="1179563" ref_url="https://bugzilla.suse.com/1179563" source="BUGZILLA"/>
		<reference ref_id="1179573" ref_url="https://bugzilla.suse.com/1179573" source="BUGZILLA"/>
		<reference ref_id="1179575" ref_url="https://bugzilla.suse.com/1179575" source="BUGZILLA"/>
		<reference ref_id="1179878" ref_url="https://bugzilla.suse.com/1179878" source="BUGZILLA"/>
		<reference ref_id="1180130" ref_url="https://bugzilla.suse.com/1180130" source="BUGZILLA"/>
		<reference ref_id="1180765" ref_url="https://bugzilla.suse.com/1180765" source="BUGZILLA"/>
		<reference ref_id="1180812" ref_url="https://bugzilla.suse.com/1180812" source="BUGZILLA"/>
		<reference ref_id="1180891" ref_url="https://bugzilla.suse.com/1180891" source="BUGZILLA"/>
		<reference ref_id="1180912" ref_url="https://bugzilla.suse.com/1180912" source="BUGZILLA"/>
		<reference ref_id="1181018" ref_url="https://bugzilla.suse.com/1181018" source="BUGZILLA"/>
		<reference ref_id="1181170" ref_url="https://bugzilla.suse.com/1181170" source="BUGZILLA"/>
		<reference ref_id="1181230" ref_url="https://bugzilla.suse.com/1181230" source="BUGZILLA"/>
		<reference ref_id="1181231" ref_url="https://bugzilla.suse.com/1181231" source="BUGZILLA"/>
		<reference ref_id="1181260" ref_url="https://bugzilla.suse.com/1181260" source="BUGZILLA"/>
		<reference ref_id="1181349" ref_url="https://bugzilla.suse.com/1181349" source="BUGZILLA"/>
		<reference ref_id="1181425" ref_url="https://bugzilla.suse.com/1181425" source="BUGZILLA"/>
		<reference ref_id="1181504" ref_url="https://bugzilla.suse.com/1181504" source="BUGZILLA"/>
		<reference ref_id="1181809" ref_url="https://bugzilla.suse.com/1181809" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25639" ref_url="https://www.suse.com/security/cve/CVE-2020-25639/" source="CVE"/>
		<reference ref_id="CVE-2020-27835" ref_url="https://www.suse.com/security/cve/CVE-2020-27835/" source="CVE"/>
		<reference ref_id="CVE-2020-29568" ref_url="https://www.suse.com/security/cve/CVE-2020-29568/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-20177" ref_url="https://www.suse.com/security/cve/CVE-2021-20177/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="CVE-2021-3348" ref_url="https://www.suse.com/security/cve/CVE-2021-3348/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008354.html" source="SUSE-SU"/>
		<description>
 The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349).
- CVE-2021-3348: Fixed a use-after-free in nbd_add_socket that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup (bnc#1181504).
- CVE-2021-20177: Fixed a kernel panic related to iptables string matching rules. A privileged user could insert a rule which could lead to denial of service (bnc#1180765).
- CVE-2021-0342: In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. (bnc#1180812)
- CVE-2020-27835: A use-after-free in the infiniband hfi1 driver was found, specifically in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).
- CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).
- CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509).
- CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508).

The following non-security bugs were fixed:

- ACPI: scan: Harden acpi_device_add() against device ID overflows (git-fixes).
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (git-fixes).
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (git-fixes).
- ALSA: doc: Fix reference to mixart.rst (git-fixes).
- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (git-fixes).
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (git-fixes).
- ALSA: hda/via: Add minimum mute flag (git-fixes).
- ALSA: hda/via: Fix runtime PM for Clevo W35xSS (git-fixes).
- ALSA: pcm: Clear the full allocated memory at hw_params (git-fixes).
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (git-fixes).
- ASoC: Intel: haswell: Add missing pm_ops (git-fixes).
- ASoC: dapm: remove widget from dirty list on free (git-fixes).
- EDAC/amd64: Fix PCI component registration (bsc#1112178).
- IB/mlx5: Fix DEVX support for MLX5_CMD_OP_INIT2INIT_QP command (bsc#1103991).
- KVM: SVM: Initialize prev_ga_tag before use (bsc#1180912).
- KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages (bsc#1181230).
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (git-fixes).
- NFS: nfs_igrab_and_active must first reference the superblock (git-fixes).
- NFS: switch nfsiod to be an UNBOUND workqueue (git-fixes).
- NFSv4.2: condition READDIR's mask for security label based on LSM state (git-fixes).
- RDMA/addr: Fix race with netevent_callback()/rdma_addr_cancel() (bsc#1103992).
- RDMA/bnxt_re: Do not add user qps to flushlist (bsc#1050244 ).
- RDMA/bnxt_re: Do not report transparent vlan from QP1 (bsc#1104742).
- RDMA/cma: Do not overwrite sgid_attr after device is released (bsc#1103992).
- RDMA/core: Ensure security pkey modify is not lost (bsc#1046306 ).
- RDMA/core: Fix pkey and port assignment in get_new_pps (bsc#1046306).
- RDMA/core: Fix protection fault in get_pkey_idx_qp_list (bsc#1046306).
- RDMA/core: Fix reported speed and width (bsc#1046306 ).
- RDMA/core: Fix return error value in _ib_modify_qp() to negative (bsc#1103992).
- RDMA/core: Fix use of logical OR in get_new_pps (bsc#1046306 ).
- RDMA/hns: Bugfix for memory window mtpt configuration (bsc#1104427).
- RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver (bsc#1104427).
- RDMA/hns: Fix cmdq parameter of querying pf timer resource (bsc#1104427 bsc#1126206).
- RDMA/hns: Fix missing sq_sig_type when querying QP (bsc#1104427 ).
- RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver (bsc#1104427).
- RDMA/iw_cxgb4: Fix incorrect function parameters (bsc#1136348 jsc#SLE-4684).
- RDMA/iw_cxgb4: initiate CLOSE when entering TERM (bsc#1136348 jsc#SLE-4684).
- RDMA/mlx5: Add init2init as a modify command (bsc#1103991 ).
- RDMA/mlx5: Fix typo in enum name (bsc#1103991).
- RDMA/mlx5: Fix wrong free of blue flame register on error (bsc#1103991).
- RDMA/qedr: Fix inline size returned for iWARP (bsc#1050545 ).
- SUNRPC: cache: ignore timestamp written to 'flush' file (bsc#1178036).
- USB: ehci: fix an interrupt calltrace error (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind() (git-fixes).
- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- __netif_receive_skb_core: pass skb by reference (bsc#1109837).
- arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() (bsc#1180130).
- arm64: pgtable: Fix pte_accessible() (bsc#1180130).
- bnxt_en: Do not query FW when netif_running() is false (bsc#1086282).
- bnxt_en: Fix accumulation of bp-&gt;net_stats_prev (bsc#1104745 ).
- bnxt_en: Improve stats context resource accounting with RDMA driver loaded (bsc#1104745).
- bnxt_en: Release PCI regions when DMA mask setup fails during probe (git-fixes).
- bnxt_en: Reset rings if ring reservation fails during open() (bsc#1086282).
- bnxt_en: fix HWRM error when querying VF temperature (bsc#1104745).
- bnxt_en: fix error return code in bnxt_init_board() (git-fixes).
- bnxt_en: fix error return code in bnxt_init_one() (bsc#1050242 ).
- bnxt_en: read EEPROM A2h address using page 0 (git-fixes).
- bnxt_en: return proper error codes in bnxt_show_temp (bsc#1104745).
- bonding: set dev-&gt;needed_headroom in bond_setup_by_slave() (git-fixes).
- btrfs: add a flag to iterate_inodes_from_logical to find all extent refs for uncompressed extents (bsc#1174206).
- btrfs: add a flags argument to LOGICAL_INO and call it LOGICAL_INO_V2 (bsc#1174206).
- btrfs: increase output size for LOGICAL_INO_V2 ioctl (bsc#1174206).
- btrfs: qgroup: do not try to wait flushing if we're already holding a transaction (bsc#1179575).
- caif: no need to check return value of debugfs_create functions (git-fixes).
- can: c_can: c_can_power_up(): fix error handling (git-fixes).
- can: dev: prevent potential information leak in can_fill_info() (git-fixes).
- can: vxcan: vxcan_xmit: fix use after free bug (git-fixes).
- chelsio/chtls: correct function return and return type (bsc#1104270).
- chelsio/chtls: correct netdevice for vlan interface (bsc#1104270 ).
- chelsio/chtls: fix a double free in chtls_setkey() (bsc#1104270 ).
- chelsio/chtls: fix always leaking ctrl_skb (bsc#1104270 ).
- chelsio/chtls: fix deadlock issue (bsc#1104270).
- chelsio/chtls: fix memory leaks caused by a race (bsc#1104270 ).
- chelsio/chtls: fix memory leaks in CPL handlers (bsc#1104270 ).
- chelsio/chtls: fix panic during unload reload chtls (bsc#1104270 ).
- chelsio/chtls: fix socket lock (bsc#1104270).
- chelsio/chtls: fix tls record info to user (bsc#1104270 ).
- chtls: Added a check to avoid NULL pointer dereference (bsc#1104270).
- chtls: Fix chtls resources release sequence (bsc#1104270 ).
- chtls: Fix hardware tid leak (bsc#1104270).
- chtls: Remove invalid set_tcb call (bsc#1104270).
- chtls: Replace skb_dequeue with skb_peek (bsc#1104270 ).
- cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled (bsc#1109837).
- cxgb3: fix error return code in t3_sge_alloc_qset() (git-fixes).
- cxgb4/cxgb4vf: fix flow control display for auto negotiation (bsc#1046540 bsc#1046542).
- cxgb4: fix SGE queue dump destination buffer context (bsc#1073513).
- cxgb4: fix adapter crash due to wrong MC size (bsc#1073513).
- cxgb4: fix all-mask IP address comparison (bsc#1064802 bsc#1066129).
- cxgb4: fix large delays in PTP synchronization (bsc#1046540 bsc#1046648).
- cxgb4: fix the panic caused by non smac rewrite (bsc#1064802 bsc#1066129).
- cxgb4: fix thermal zone device registration (bsc#1104279 bsc#1104277).
- cxgb4: fix throughput drop during Tx backpressure (bsc#1127354 bsc#1127371).
- cxgb4: move DCB version extern to header file (bsc#1104279 ).
- cxgb4: remove cast when saving IPv4 partial checksum (bsc#1074220).
- cxgb4: set up filter action after rewrites (bsc#1064802 bsc#1066129).
- cxgb4: use correct type for all-mask IP address comparison (bsc#1064802 bsc#1066129).
- cxgb4: use unaligned conversion for fetching timestamp (bsc#1046540 bsc#1046648).
- dm: avoid filesystem lookup in dm_get_dev_t() (bsc#1178049).
- dmaengine: xilinx_dma: check dma_async_device_register return value (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (git-fixes).
- docs: Fix reST markup when linking to sections (git-fixes).
- drivers: net: xgene: Fix the order of the arguments of 'alloc_etherdev_mqs()' (git-fixes).
- drm/amd/powerplay: fix a crash when overclocking Vega M (bsc#1113956)
- drm/amdkfd: Put ACPI table after using it (bsc#1129770) Backporting changes: 	* context changes
- drm/atomic: put state on error path (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/i915: Clear the repeater bit on HDCP disable (bsc#1112178)
- drm/i915: Fix sha_text population code (bsc#1112178)
- drm/msm: Avoid div-by-zero in dpu_crtc_atomic_check() (bsc#1129770)
- drm/msm: Fix WARN_ON() splat in _free_object() (bsc#1129770)
- drm/msm: Fix use-after-free in msm_gem with carveout (bsc#1129770)
- drm/nouveau/bios: fix issue shadowing expansion ROMs (git-fixes).
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (git-fixes).
- drm/nouveau/privring: ack interrupts the same way as RM (git-fixes).
- drm/tve200: Fix handling of platform_get_irq() error (bsc#1129770)
- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1112178)
- drm: sun4i: hdmi: Fix inverted HPD result (bsc#1112178)
- drm: sun4i: hdmi: Remove extra HPD polling (bsc#1112178)
- ehci: fix EHCI host controller initialization sequence (git-fixes).
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (git-fixes).
- floppy: reintroduce O_NDELAY fix (boo#1181018).
- futex: Do not enable IRQs unconditionally in put_pi_state() (bsc#1149032).
- futex: Ensure the correct return value from futex_lock_pi() (bsc#1181349 bsc#1149032).
- futex: Fix incorrect should_fail_futex() handling (bsc#1181349).
- futex: Handle faults correctly for PI futexes (bsc#1181349 bsc#1149032).
- futex: Provide and use pi_state_update_owner() (bsc#1181349 bsc#1149032).
- futex: Replace pointless printk in fixup_owner() (bsc#1181349 bsc#1149032).
- futex: Simplify fixup_pi_state_owner() (bsc#1181349 bsc#1149032).
- futex: Use pi_state_update_owner() in put_pi_state() (bsc#1181349 bsc#1149032).
- i2c: octeon: check correct size of maximum RECV_LEN packet (git-fixes).
- i40e: Fix removing driver while bare-metal VFs pass traffic (git-fixes).
- i40e: avoid premature Rx buffer reuse (bsc#1111981).
- igb: Report speed and duplex as unknown when device is runtime suspended (git-fixes).
- igc: fix link speed advertising (jsc#SLE-4799).
- iio: ad5504: Fix setting power-down state (git-fixes).
- iommu/vt-d: Do not dereference iommu_device if IOMMU_API is not built (bsc#1181260, jsc#ECO-3191).
- iommu/vt-d: Gracefully handle DMAR units with no supported address widths (bsc#1181260, jsc#ECO-3191).
- ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K (bsc#1109837).
- ixgbe: avoid premature Rx buffer reuse (bsc#1109837 ).
- kABI: Fix kABI for extended APIC-ID support (bsc#1181260, jsc#ECO-3191).
- kernfs: deal with kernfs_fill_super() failures (bsc#1181809).
- lockd: do not use interval-based rebinding over TCP (git-fixes).
- locking/futex: Allow low-level atomic operations to return -EAGAIN (bsc#1149032).
- md/raid10: initialize r10_bio-&gt;read_slot before use (git-fixes).
- md: fix a warning caused by a race between concurrent md_ioctl()s (git-fixes).
- media: gp8psk: initialize stats at power control logic (git-fixes).
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (git-fixes).
- misdn: dsp: select CONFIG_BITREVERSE (git-fixes).
- mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() (git-fixes).
- mlxsw: destroy workqueue when trap_register in mlxsw_emad_init (bsc#1112374).
- mlxsw: spectrum: Do not modify cloned SKBs during xmit (git-fixes).
- mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails (bsc#1112374).
- mlxsw: switchx2: Do not modify cloned SKBs during xmit (git-fixes).
- mm, page_alloc: fix core hung in free_pcppages_bulk() (git fixes (mm/hotplug)).
- mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous() (git fixes (mm/pgalloc)).
- mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly (git fixes (mm/hmm)).
- mm/slab: use memzero_explicit() in kzfree() (git fixes (mm/slab)).
- mm: do not wake kswapd prematurely when watermark boosting is disabled (git fixes (mm/vmscan)).
- mm: hwpoison: disable memory error handling on 1GB hugepage (git fixes (mm/hwpoison)).
- mmc: sdhci-xenon: fix 1.8v regulator stabilization (git-fixes).
- nbd: Fix memory leak in nbd_add_socket (bsc#1181504).
- net/af_iucv: always register net_device notifier (git-fixes).
- net/af_iucv: fix null pointer dereference on shutdown (bsc#1179563 LTC#190108).
- net/af_iucv: set correct sk_protocol for child sockets (git-fixes).
- net/filter: Permit reading NET in load_bytes_relative when MAC not set (bsc#1109837).
- net/liquidio: Delete driver version assignment (git-fixes).
- net/liquidio: Delete non-working LIQUIDIO_PACKAGE check (git-fixes).
- net/mlx4_en: Avoid scheduling restart task if it is already running (git-fixes).
- net/mlx5: Add handling of port type in rule deletion (bsc#1103991).
- net/mlx5: Fix memory leak on flow table creation error flow (bsc#1046305).
- net/mlx5e: Fix VLAN cleanup flow (git-fixes).
- net/mlx5e: Fix VLAN create flow (git-fixes).
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (git-fixes).
- net/mlx5e: Fix two double free cases (bsc#1046305).
- net/mlx5e: IPoIB, Drop multicast packets that this interface sent (bsc#1075020).
- net/mlx5e: TX, Fix consumer index of error cqe dump (bsc#1103990 ).
- net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq (bsc#1103990).
- net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels (bsc#1109837).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource() (git-fixes).
- net/smc: receive pending data after RCV_SHUTDOWN (git-fixes).
- net/smc: receive returns without data (git-fixes).
- net/sonic: Add mutual exclusion for accessing shared state (git-fixes).
- net: atlantic: fix potential error handling (git-fixes).
- net: atlantic: fix use after free kasan warn (git-fixes).
- net: bcmgenet: keep MAC in reset until PHY is up (git-fixes).
- net: bcmgenet: reapply manual settings to the PHY (git-fixes).
- net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe() (git-fixes).
- net: cbs: Fix software cbs to consider packet sending time (bsc#1109837).
- net: dsa: LAN9303: select REGMAP when LAN9303 enable (git-fixes).
- net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL (git-fixes).
- net: ena: set initial DMA width to avoid intel iommu issue (git-fixes).
- net: ethernet: mlx4: Avoid assigning a value to ring_cons but not used it anymore in mlx4_en_xmit() (git-fixes).
- net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse() (git-fixes).
- net: freescale: fec: Fix ethtool -d runtime PM (git-fixes).
- net: hns3: add a missing uninit debugfs when unload driver (bsc#1104353).
- net: hns3: add compatible handling for command HCLGE_OPC_PF_RST_DONE (git-fixes).
- net: hns3: add management table after IMP reset (bsc#1104353 ).
- net: hns3: check reset interrupt status when reset fails (git-fixes).
- net: hns3: clear reset interrupt status in hclge_irq_handle() (git-fixes).
- net: hns3: fix a TX timeout issue (bsc#1104353).
- net: hns3: fix a wrong reset interrupt status mask (git-fixes).
- net: hns3: fix error VF index when setting VLAN offload (bsc#1104353).
- net: hns3: fix error handling for desc filling (bsc#1104353 ).
- net: hns3: fix for not calculating TX BD send size correctly (bsc#1126390).
- net: hns3: fix interrupt clearing error for VF (bsc#1104353 ).
- net: hns3: fix mis-counting IRQ vector numbers issue (bsc#1104353).
- net: hns3: fix shaper parameter algorithm (bsc#1104353 ).
- net: hns3: fix the number of queues actually used by ARQ (bsc#1104353).
- net: hns3: fix use-after-free when doing self test (bsc#1104353 ).
- net: hns3: reallocate SSU' buffer size when pfc_en changes (bsc#1104353).
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (bsc#1098633).
- net: mvpp2: Fix error return code in mvpp2_open() (bsc#1119113 ).
- net: mvpp2: fix pkt coalescing int-threshold configuration (bsc#1098633).
- net: phy: Allow BCM54616S PHY to setup internal TX/RX clock delay (git-fixes).
- net: phy: broadcom: Fix RGMII delays configuration for BCM54210E (git-fixes).
- net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs (git-fixes).
- net: phy: micrel: make sure the factory test bit is cleared (git-fixes).
- net: qca_spi: Move reset_count to struct qcaspi (git-fixes).
- net: smc911x: Adjust indentation in smc911x_phy_configure (git-fixes).
- net: stmmac: 16KB buffer must be 16 byte aligned (git-fixes).
- net: stmmac: Do not accept invalid MTU values (git-fixes).
- net: stmmac: Enable 16KB buffer size (git-fixes).
- net: stmmac: RX buffer size must be 16 byte aligned (git-fixes).
- net: stmmac: dwmac-meson8b: Fix signedness bug in probe (git-fixes).
- net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes (git-fixes).
- net: stmmac: fix length of PTP clock's name string (git-fixes).
- net: stmmac: gmac4+: Not all Unicast addresses may be available (git-fixes).
- net: sunrpc: interpret the return value of kstrtou32 correctly (git-fixes).
- net: team: fix memory leak in __team_options_register (git-fixes).
- net: tulip: Adjust indentation in {dmfe, uli526x}_init_module (git-fixes).
- net: usb: lan78xx: Fix error message format specifier (git-fixes).
- net: vlan: avoid leaks on register_vlan_dev() failures (git-fixes).
- net_failover: fixed rollback in net_failover_open() (bsc#1109837).
- net_sched: let qdisc_put() accept NULL pointer (bsc#1056657 bsc#1056653 bsc#1056787).
- nfp: validate the return code from dev_queue_xmit() (git-fixes).
- nfs_common: need lock during iterate through the list (git-fixes).
- nfsd4: readdirplus shouldn't return parent of export (git-fixes).
- nfsd: Fix message level for normal termination (git-fixes).
- pNFS: Mark layout for return if return-on-close was not sent (git-fixes).
- page_frag: Recover from memory pressure (git fixes (mm/pgalloc)).
- powerpc/perf: Add generic compat mode pmu driver (bsc#1178900 ltc#189284).
- powerpc/perf: Fix crashes with generic_compat_pmu &amp; BHRB (bsc#1178900 ltc#189284 git-fixes).
- powerpc/perf: init pmu from core-book3s (bsc#1178900 ltc#189284).
- qed: Fix race condition between scheduling and destroying the slowpath workqueue (bsc#1086314 bsc#1086313 bsc#1086301).
- qed: Fix use after free in qed_chain_free (bsc#1050536 bsc#1050538).
- r8152: Add Lenovo Powered USB-C Travel Hub (git-fixes).
- rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (bsc#1181349 bsc#1149032).
- s390/cio: fix use-after-free in ccw_device_destroy_console (git-fixes).
- s390/dasd: fix list corruption of lcu list (bsc#1181170 LTC#190915).
- s390/dasd: fix list corruption of pavgroup group list (bsc#1181170 LTC#190915).
- s390/dasd: prevent inconsistent LCU device data (bsc#1181170 LTC#190915).
- s390/qeth: delay draining the TX buffers (git-fixes).
- s390/qeth: fix L2 header access in qeth_l3_osa_features_check() (git-fixes).
- s390/qeth: fix deadlock during recovery (git-fixes).
- s390/qeth: fix locking for discipline setup / removal (git-fixes).
- s390/smp: perform initial CPU reset also for SMT siblings (git-fixes).
- sched/fair: Fix enqueue_task_fair warning (bsc#1179093).
- sched/fair: Fix enqueue_task_fair() warning some more (bsc#1179093).
- sched/fair: Fix reordering of enqueue/dequeue_task_fair() (bsc#1179093).
- sched/fair: Fix unthrottle_cfs_rq() for leaf_cfs_rq list (bsc#1179093).
- sched/fair: Reorder enqueue/dequeue_task_fair path (bsc#1179093).
- scsi: core: Fix VPD LUN ID designator priorities (bsc#1178049, git-fixes).
- scsi: ibmvfc: Set default timeout to avoid crash during migration (bsc#1181425 ltc#188252).
- scsi: lpfc: Enhancements to LOG_TRACE_EVENT for better readability (bsc#1180891).
- scsi: lpfc: Fix FW reset action if I/Os are outstanding (bsc#1180891).
- scsi: lpfc: Fix NVMe recovery after mailbox timeout (bsc#1180891).
- scsi: lpfc: Fix PLOGI S_ID of 0 on pt2pt config (bsc#1180891).
- scsi: lpfc: Fix auto sli_mode and its effect on CONFIG_PORT for SLI3 (bsc#1180891).
- scsi: lpfc: Fix crash when a fabric node is released prematurely (bsc#1180891).
- scsi: lpfc: Fix error log messages being logged following SCSI task mgnt (bsc#1180891).
- scsi: lpfc: Fix target reset failing (bsc#1180891).
- scsi: lpfc: Fix vport create logging (bsc#1180891).
- scsi: lpfc: Implement health checking when aborting I/O (bsc#1180891).
- scsi: lpfc: Prevent duplicate requests to unregister with cpuhp framework (bsc#1180891).
- scsi: lpfc: Refresh ndlp when a new PRLI is received in the PRLI issue state (bsc#1180891).
- scsi: lpfc: Simplify bool comparison (bsc#1180891).
- scsi: lpfc: Update lpfc version to 12.8.0.7 (bsc#1180891).
- scsi: lpfc: Use the nvme-fc transport supplied timeout for LS requests (bsc#1180891).
- scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit (bsc#1179142).
- serial: mvebu-uart: fix tx lost characters at power off (git-fixes).
- spi: cadence: cache reference clock rate during probe (git-fixes).
- team: set dev-&gt;needed_headroom in team_setup_by_port() (git-fixes).
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (bsc#1109837).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind failure (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: udc: core: Use lock when write to soft_connect (git-fixes).
- veth: Adjust hard_start offset on redirect XDP frames (bsc#1109837).
- vfio iommu: Add dma available capability (bsc#1179573 LTC#190106).
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (bsc#1181231).
- vhost/vsock: fix vhost vsock cid hashing inconsistent (git-fixes).
- virtio_net: Keep vnet header zeroed if XDP is loaded for small buffer (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- x86/apic: Fix x2apic enablement without interrupt remapping (bsc#1181260, jsc#ECO-3191).
- x86/apic: Support 15 bits of APIC ID in IOAPIC/MSI where available (bsc#1181260, jsc#ECO-3191).
- x86/hyperv: Fix kexec panic/hang issues (bsc#1176831).
- x86/i8259: Use printk_deferred() to prevent deadlock (bsc#1112178).
- x86/ioapic: Handle Extended Destination ID field in RTE (bsc#1181260, jsc#ECO-3191).
- x86/kvm: Add KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181260, jsc#ECO-3191).
- x86/kvm: Reserve KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181260, jsc#ECO-3191).
- x86/mm/numa: Remove uninitialized_var() usage (bsc#1112178).
- x86/mm: Fix leak of pmd ptlock (bsc#1112178).
- x86/msi: Only use high bits of MSI address for DMAR unit (bsc#1181260, jsc#ECO-3191).
- x86/mtrr: Correct the range check before performing MTRR type lookups (bsc#1112178).
- x86/resctrl: Do not move a task to the same resource group (bsc#1112178).
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (bsc#1112178).
- xdp: Fix xsk_generic_xmit errno (bsc#1109837).
- xhci: make sure TRB is fully written before giving it to the controller (git-fixes).
- xhci: tegra: Delay for disabling LFPS detector (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-19"/>
	<updated date="2021-02-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046305">SUSE bug 1046305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046306">SUSE bug 1046306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046540">SUSE bug 1046540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046542">SUSE bug 1046542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046648">SUSE bug 1046648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050538">SUSE bug 1050538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056653">SUSE bug 1056653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056657">SUSE bug 1056657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073513">SUSE bug 1073513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074220">SUSE bug 1074220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075020">SUSE bug 1075020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086282">SUSE bug 1086282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086301">SUSE bug 1086301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086313">SUSE bug 1086313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086314">SUSE bug 1086314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098633">SUSE bug 1098633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104270">SUSE bug 1104270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104277">SUSE bug 1104277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104279">SUSE bug 1104279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104742">SUSE bug 1104742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111981">SUSE bug 1111981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126390">SUSE bug 1126390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136348">SUSE bug 1136348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149032">SUSE bug 1149032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174206">SUSE bug 1174206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176831">SUSE bug 1176831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176846">SUSE bug 1176846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178036">SUSE bug 1178036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178049">SUSE bug 1178049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178900">SUSE bug 1178900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179093">SUSE bug 1179093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179142">SUSE bug 1179142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179508">SUSE bug 1179508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179509">SUSE bug 1179509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179563">SUSE bug 1179563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179573">SUSE bug 1179573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179575">SUSE bug 1179575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179878">SUSE bug 1179878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180130">SUSE bug 1180130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180765">SUSE bug 1180765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180812">SUSE bug 1180812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180891">SUSE bug 1180891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180912">SUSE bug 1180912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181018">SUSE bug 1181018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181170">SUSE bug 1181170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181230">SUSE bug 1181230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181231">SUSE bug 1181231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181260">SUSE bug 1181260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181349">SUSE bug 1181349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181425">SUSE bug 1181425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181504">SUSE bug 1181504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181809">SUSE bug 1181809</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25639/">CVE-2020-25639</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27835/">CVE-2020-27835</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29568/">CVE-2020-29568</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20177/">CVE-2021-20177</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3348/">CVE-2021-3348</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501655" comment="cluster-md-kmp-default-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501656" comment="dlm-kmp-default-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501657" comment="gfs2-kmp-default-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501658" comment="ocfs2-kmp-default-4.12.14-197.83.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139156" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1163617" ref_url="https://bugzilla.suse.com/1163617" source="BUGZILLA"/>
		<reference ref_id="1170442" ref_url="https://bugzilla.suse.com/1170442" source="BUGZILLA"/>
		<reference ref_id="1176855" ref_url="https://bugzilla.suse.com/1176855" source="BUGZILLA"/>
		<reference ref_id="1179082" ref_url="https://bugzilla.suse.com/1179082" source="BUGZILLA"/>
		<reference ref_id="1179428" ref_url="https://bugzilla.suse.com/1179428" source="BUGZILLA"/>
		<reference ref_id="1179660" ref_url="https://bugzilla.suse.com/1179660" source="BUGZILLA"/>
		<reference ref_id="1180058" ref_url="https://bugzilla.suse.com/1180058" source="BUGZILLA"/>
		<reference ref_id="1180262" ref_url="https://bugzilla.suse.com/1180262" source="BUGZILLA"/>
		<reference ref_id="1180964" ref_url="https://bugzilla.suse.com/1180964" source="BUGZILLA"/>
		<reference ref_id="1181671" ref_url="https://bugzilla.suse.com/1181671" source="BUGZILLA"/>
		<reference ref_id="1181747" ref_url="https://bugzilla.suse.com/1181747" source="BUGZILLA"/>
		<reference ref_id="1181753" ref_url="https://bugzilla.suse.com/1181753" source="BUGZILLA"/>
		<reference ref_id="1181843" ref_url="https://bugzilla.suse.com/1181843" source="BUGZILLA"/>
		<reference ref_id="1181854" ref_url="https://bugzilla.suse.com/1181854" source="BUGZILLA"/>
		<reference ref_id="1182047" ref_url="https://bugzilla.suse.com/1182047" source="BUGZILLA"/>
		<reference ref_id="1182130" ref_url="https://bugzilla.suse.com/1182130" source="BUGZILLA"/>
		<reference ref_id="1182140" ref_url="https://bugzilla.suse.com/1182140" source="BUGZILLA"/>
		<reference ref_id="1182175" ref_url="https://bugzilla.suse.com/1182175" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29374" ref_url="https://www.suse.com/security/cve/CVE-2020-29374/" source="CVE"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-26932" ref_url="https://www.suse.com/security/cve/CVE-2021-26932/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008455.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1181843).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1181753).
- CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping (XSA-361 bsc#1181747).
  by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#178372).
- CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write implementation which could have granted unintended write access
  because of a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).

The following non-security bugs were fixed:

- btrfs: Cleanup try_flush_qgroup (bsc#1182047).
- btrfs: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: fix data bytes_may_use underflow with fallocate due to failed quota reserve (bsc#1182130)
- btrfs: Free correct amount of space in btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Simplify code flow in btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Unlock extents in btrfs_zero_range in case of errors (bsc#1182047).
- Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (git-fixes).
- ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293).
- kernel-binary.spec: Add back initrd and image symlink ghosts to filelist (bsc#1182140). Fixes: 76a9256314c3 ('rpm/kernel-{source,binary}.spec: do not include ghost symlinks (boo#1179082).')
- libnvdimm/dimm: Avoid race between probe and available_slots_show() (bsc#1170442).
- net: bcmgenet: add support for ethtool rxnfc flows (git-fixes).
- net: bcmgenet: code movement (git-fixes).
- net: bcmgenet: fix mask check in bcmgenet_validate_flow() (git-fixes).
- net: bcmgenet: Fix WoL with password after deep sleep (git-fixes).
- net: bcmgenet: re-remove bcmgenet_hfb_add_filter (git-fixes).
- net: bcmgenet: set Rx mode before starting netif (git-fixes).
- net: bcmgenet: use __be16 for htons(ETH_P_IP) (git-fixes).
- net: bcmgenet: Use correct I/O accessors (git-fixes).
- net: lpc-enet: fix error return code in lpc_mii_init() (git-fixes).
- net/mlx4_en: Handle TX error CQE (bsc#1181854).
- net: moxa: Fix a potential double 'free_irq()' (git-fixes).
- net: sun: fix missing release regions in cas_init_one() (git-fixes).
- nvme-multipath: Early exit if no path is available (bsc#1180964).
- rpm/post.sh: Avoid purge-kernel for the first installed kernel (bsc#1180058)
- scsi: target: fix unmap_zeroes_data boolean initialisation (bsc#1163617).
- usb: dwc2: Abort transaction after errors with unknown reason (bsc#1180262).
- usb: dwc2: Do not update data length if it is 0 on inbound transfers (bsc#1180262).
- usb: dwc2: Make 'trimming xfer length' a debug message (bsc#1180262).
- vmxnet3: Remove buf_info from device accessible structures (bsc#1181671).
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).
- xen/netback: fix spurious event detection for common event case (bsc#1182175).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-09"/>
	<updated date="2021-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163617">SUSE bug 1163617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170442">SUSE bug 1170442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176855">SUSE bug 1176855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179082">SUSE bug 1179082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179428">SUSE bug 1179428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179660">SUSE bug 1179660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180058">SUSE bug 1180058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180262">SUSE bug 1180262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180964">SUSE bug 1180964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181671">SUSE bug 1181671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181747">SUSE bug 1181747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181753">SUSE bug 1181753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181843">SUSE bug 1181843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181854">SUSE bug 1181854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182047">SUSE bug 1182047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182130">SUSE bug 1182130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182140">SUSE bug 1182140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182175">SUSE bug 1182175</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29374/">CVE-2020-29374</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26932/">CVE-2021-26932</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501659" comment="cluster-md-kmp-default-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501660" comment="dlm-kmp-default-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501661" comment="gfs2-kmp-default-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501662" comment="ocfs2-kmp-default-4.12.14-197.86.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139157" version="1" class="patch">
	<metadata>
		<title>Security update for crmsh (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1154927" ref_url="https://bugzilla.suse.com/1154927" source="BUGZILLA"/>
		<reference ref_id="1178454" ref_url="https://bugzilla.suse.com/1178454" source="BUGZILLA"/>
		<reference ref_id="1178869" ref_url="https://bugzilla.suse.com/1178869" source="BUGZILLA"/>
		<reference ref_id="1179999" ref_url="https://bugzilla.suse.com/1179999" source="BUGZILLA"/>
		<reference ref_id="1180137" ref_url="https://bugzilla.suse.com/1180137" source="BUGZILLA"/>
		<reference ref_id="1180571" ref_url="https://bugzilla.suse.com/1180571" source="BUGZILLA"/>
		<reference ref_id="1180688" ref_url="https://bugzilla.suse.com/1180688" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35459" ref_url="https://www.suse.com/security/cve/CVE-2020-35459/" source="CVE"/>
		<reference ref_id="CVE-2021-3020" ref_url="https://www.suse.com/security/cve/CVE-2021-3020/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008487.html" source="SUSE-SU"/>
		<description>
This update for crmsh fixes the following issues:

- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-12"/>
	<updated date="2021-03-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1154927">SUSE bug 1154927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178454">SUSE bug 1178454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178869">SUSE bug 1178869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179999">SUSE bug 1179999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180137">SUSE bug 1180137</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180571">SUSE bug 1180571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180688">SUSE bug 1180688</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35459/">CVE-2020-35459</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3020/">CVE-2021-3020</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501663" comment="crmsh-4.3.0+20210219.5d1bf034-3.57.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501664" comment="crmsh-scripts-4.3.0+20210219.5d1bf034-3.57.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139158" version="1" class="patch">
	<metadata>
		<title>Security update for crmsh (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1179999" ref_url="https://bugzilla.suse.com/1179999" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35459" ref_url="https://www.suse.com/security/cve/CVE-2020-35459/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0085-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008177.html" source="SUSE-SU"/>
		<description>
This update for crmsh fixes the following issue:

- CVE-2020-35459: Fixed a privilege escalation in hawk_invoke (bsc#1179999).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-12"/>
	<updated date="2021-01-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179999">SUSE bug 1179999</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35459/">CVE-2020-35459</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501665" comment="crmsh-4.2.0+git.1607075079.a25648d8-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501666" comment="crmsh-scripts-4.2.0+git.1607075079.a25648d8-3.51.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139159" version="1" class="patch">
	<metadata>
		<title>Security update for hawk2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1179998" ref_url="https://bugzilla.suse.com/1179998" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35458" ref_url="https://www.suse.com/security/cve/CVE-2020-35458/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0088-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008179.html" source="SUSE-SU"/>
		<description>
This update for hawk2 fixes the following security issue:

- CVE-2020-35458: Fixed an insufficient input handler that could have led to remote code execution (bsc#1179998).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-12"/>
	<updated date="2021-01-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179998">SUSE bug 1179998</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35458/">CVE-2020-35458</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501531" comment="hawk2-2.3.0+git.1603969748.10468582-3.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139160" version="1" class="patch">
	<metadata>
		<title>Security update for hawk2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1179999" ref_url="https://bugzilla.suse.com/1179999" source="BUGZILLA"/>
		<reference ref_id="1182165" ref_url="https://bugzilla.suse.com/1182165" source="BUGZILLA"/>
		<reference ref_id="1182166" ref_url="https://bugzilla.suse.com/1182166" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35459" ref_url="https://www.suse.com/security/cve/CVE-2020-35459/" source="CVE"/>
		<reference ref_id="CVE-2021-25314" ref_url="https://www.suse.com/security/cve/CVE-2021-25314/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0941-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008543.html" source="SUSE-SU"/>
		<description>
This update for hawk2 fixes the following issues:

- Update to version 2.6.3:
  * Remove hawk_invoke and use capture3 instead of runas (bsc#1179999)(CVE-2020-35459)
  * Remove unnecessary chmod (bsc#1182166)(CVE-2021-25314) 
  * Sanitize filename to contains whitelist of alphanumeric (bsc#1182165)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179999">SUSE bug 1179999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182165">SUSE bug 1182165</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182166">SUSE bug 1182166</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35459/">CVE-2020-35459</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25314/">CVE-2021-25314</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501532" comment="hawk2-2.6.3+git.1614684118.af555ad9-3.27.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139161" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1189562" ref_url="https://bugzilla.suse.com/1189562" source="BUGZILLA"/>
		<reference ref_id="1193738" ref_url="https://bugzilla.suse.com/1193738" source="BUGZILLA"/>
		<reference ref_id="1194943" ref_url="https://bugzilla.suse.com/1194943" source="BUGZILLA"/>
		<reference ref_id="1195051" ref_url="https://bugzilla.suse.com/1195051" source="BUGZILLA"/>
		<reference ref_id="1195254" ref_url="https://bugzilla.suse.com/1195254" source="BUGZILLA"/>
		<reference ref_id="1195353" ref_url="https://bugzilla.suse.com/1195353" source="BUGZILLA"/>
		<reference ref_id="1196018" ref_url="https://bugzilla.suse.com/1196018" source="BUGZILLA"/>
		<reference ref_id="1196114" ref_url="https://bugzilla.suse.com/1196114" source="BUGZILLA"/>
		<reference ref_id="1196433" ref_url="https://bugzilla.suse.com/1196433" source="BUGZILLA"/>
		<reference ref_id="1196468" ref_url="https://bugzilla.suse.com/1196468" source="BUGZILLA"/>
		<reference ref_id="1196488" ref_url="https://bugzilla.suse.com/1196488" source="BUGZILLA"/>
		<reference ref_id="1196514" ref_url="https://bugzilla.suse.com/1196514" source="BUGZILLA"/>
		<reference ref_id="1196639" ref_url="https://bugzilla.suse.com/1196639" source="BUGZILLA"/>
		<reference ref_id="1196761" ref_url="https://bugzilla.suse.com/1196761" source="BUGZILLA"/>
		<reference ref_id="1196830" ref_url="https://bugzilla.suse.com/1196830" source="BUGZILLA"/>
		<reference ref_id="1196836" ref_url="https://bugzilla.suse.com/1196836" source="BUGZILLA"/>
		<reference ref_id="1196942" ref_url="https://bugzilla.suse.com/1196942" source="BUGZILLA"/>
		<reference ref_id="1196973" ref_url="https://bugzilla.suse.com/1196973" source="BUGZILLA"/>
		<reference ref_id="1197227" ref_url="https://bugzilla.suse.com/1197227" source="BUGZILLA"/>
		<reference ref_id="1197331" ref_url="https://bugzilla.suse.com/1197331" source="BUGZILLA"/>
		<reference ref_id="1197366" ref_url="https://bugzilla.suse.com/1197366" source="BUGZILLA"/>
		<reference ref_id="1197391" ref_url="https://bugzilla.suse.com/1197391" source="BUGZILLA"/>
		<reference ref_id="1198031" ref_url="https://bugzilla.suse.com/1198031" source="BUGZILLA"/>
		<reference ref_id="1198032" ref_url="https://bugzilla.suse.com/1198032" source="BUGZILLA"/>
		<reference ref_id="1198033" ref_url="https://bugzilla.suse.com/1198033" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-39713" ref_url="https://www.suse.com/security/cve/CVE-2021-39713/" source="CVE"/>
		<reference ref_id="CVE-2021-45868" ref_url="https://www.suse.com/security/cve/CVE-2021-45868/" source="CVE"/>
		<reference ref_id="CVE-2022-0812" ref_url="https://www.suse.com/security/cve/CVE-2022-0812/" source="CVE"/>
		<reference ref_id="CVE-2022-0850" ref_url="https://www.suse.com/security/cve/CVE-2022-0850/" source="CVE"/>
		<reference ref_id="CVE-2022-1016" ref_url="https://www.suse.com/security/cve/CVE-2022-1016/" source="CVE"/>
		<reference ref_id="CVE-2022-1048" ref_url="https://www.suse.com/security/cve/CVE-2022-1048/" source="CVE"/>
		<reference ref_id="CVE-2022-23036" ref_url="https://www.suse.com/security/cve/CVE-2022-23036/" source="CVE"/>
		<reference ref_id="CVE-2022-23037" ref_url="https://www.suse.com/security/cve/CVE-2022-23037/" source="CVE"/>
		<reference ref_id="CVE-2022-23038" ref_url="https://www.suse.com/security/cve/CVE-2022-23038/" source="CVE"/>
		<reference ref_id="CVE-2022-23039" ref_url="https://www.suse.com/security/cve/CVE-2022-23039/" source="CVE"/>
		<reference ref_id="CVE-2022-23040" ref_url="https://www.suse.com/security/cve/CVE-2022-23040/" source="CVE"/>
		<reference ref_id="CVE-2022-23041" ref_url="https://www.suse.com/security/cve/CVE-2022-23041/" source="CVE"/>
		<reference ref_id="CVE-2022-23042" ref_url="https://www.suse.com/security/cve/CVE-2022-23042/" source="CVE"/>
		<reference ref_id="CVE-2022-26490" ref_url="https://www.suse.com/security/cve/CVE-2022-26490/" source="CVE"/>
		<reference ref_id="CVE-2022-26966" ref_url="https://www.suse.com/security/cve/CVE-2022-26966/" source="CVE"/>
		<reference ref_id="CVE-2022-28356" ref_url="https://www.suse.com/security/cve/CVE-2022-28356/" source="CVE"/>
		<reference ref_id="CVE-2022-28388" ref_url="https://www.suse.com/security/cve/CVE-2022-28388/" source="CVE"/>
		<reference ref_id="CVE-2022-28389" ref_url="https://www.suse.com/security/cve/CVE-2022-28389/" source="CVE"/>
		<reference ref_id="CVE-2022-28390" ref_url="https://www.suse.com/security/cve/CVE-2022-28390/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1256-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010751.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-28356: Fixed a refcount leak bug in net/llc/af_llc.c (bnc#1197391).
- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution (bsc#1197227).
- CVE-2022-28388: Fixed a double free in drivers/net/can/usb/usb_8dev.c vulnerability in the Linux kernel (bnc#1198032).
- CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel (bnc#1198033).
- CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel (bnc#1198031).
- CVE-2022-0812: Fixed an incorrect header size calculations in xprtrdma (bsc#1196639).
- CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock (bsc#1197331).
- CVE-2022-0850: Fixed a kernel information leak vulnerability in iov_iter.c (bsc#1196761).
- CVE-2022-26966: Fixed an issue in drivers/net/usb/sr9700.c, which allowed attackers to obtain sensitive information from the memory via crafted frame lengths from a USB device (bsc#1196836).
- CVE-2021-45868: Fixed a wrong validation check in fs/quota/quota_tree.c which could lead to an use-after-free if there is a corrupted quota file (bnc#1197366).
- CVE-2021-39713: Fixed a race condition in the network scheduling subsystem which could lead to a use-after-free (bsc#1196973).
- CVE-2022-23036,CVE-2022-23037,CVE-2022-23038,CVE-2022-23039,CVE-2022-23040,CVE-2022-23041,CVE-2022-23042: Fixed multiple issues which could have lead to read/write access to memory pages or denial of service. These issues are related to the Xen PV device frontend drivers (bsc#1196488).
- CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could trigger crash the system or corrupt system memory (bsc#1196830).

The following non-security bugs were fixed:

- ax88179_178a: Fixed memory issues that could be triggered by malicious USB devices (bsc#1196018).
- genirq: Use rcu in kstat_irqs_usr() (bsc#1193738).
- gve/net: Fixed multiple bugfixes (jsc#SLE-23652).
- net/mlx5e: Fix page DMA map/unmap attributes (bsc#1196468).
- net: tipc: validate domain record count on input (bsc#1195254).
- powerpc: Fixed issues related to slow I/O on PowerPC (bsc#1196433).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-19"/>
	<updated date="2022-04-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189562">SUSE bug 1189562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193738">SUSE bug 1193738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194943">SUSE bug 1194943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195051">SUSE bug 1195051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195254">SUSE bug 1195254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195353">SUSE bug 1195353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196018">SUSE bug 1196018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196114">SUSE bug 1196114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196433">SUSE bug 1196433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196468">SUSE bug 1196468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196488">SUSE bug 1196488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196514">SUSE bug 1196514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196639">SUSE bug 1196639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196761">SUSE bug 1196761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196830">SUSE bug 1196830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196836">SUSE bug 1196836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196942">SUSE bug 1196942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196973">SUSE bug 1196973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197227">SUSE bug 1197227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197331">SUSE bug 1197331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197366">SUSE bug 1197366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197391">SUSE bug 1197391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198031">SUSE bug 1198031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198032">SUSE bug 1198032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198033">SUSE bug 1198033</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-39713/">CVE-2021-39713</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45868/">CVE-2021-45868</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0812/">CVE-2022-0812</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0850/">CVE-2022-0850</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1016/">CVE-2022-1016</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1048/">CVE-2022-1048</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23036/">CVE-2022-23036</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23037/">CVE-2022-23037</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23038/">CVE-2022-23038</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23039/">CVE-2022-23039</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23040/">CVE-2022-23040</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23041/">CVE-2022-23041</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23042/">CVE-2022-23042</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26490/">CVE-2022-26490</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26966/">CVE-2022-26966</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-28356/">CVE-2022-28356</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-28388/">CVE-2022-28388</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28389/">CVE-2022-28389</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28390/">CVE-2022-28390</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679836" comment="cluster-md-kmp-default-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679837" comment="dlm-kmp-default-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679838" comment="gfs2-kmp-default-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679839" comment="ocfs2-kmp-default-4.12.14-150100.197.111.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139162" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-puma (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1188527" ref_url="https://bugzilla.suse.com/1188527" source="BUGZILLA"/>
		<reference ref_id="1191681" ref_url="https://bugzilla.suse.com/1191681" source="BUGZILLA"/>
		<reference ref_id="1196222" ref_url="https://bugzilla.suse.com/1196222" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29509" ref_url="https://www.suse.com/security/cve/CVE-2021-29509/" source="CVE"/>
		<reference ref_id="CVE-2021-41136" ref_url="https://www.suse.com/security/cve/CVE-2021-41136/" source="CVE"/>
		<reference ref_id="CVE-2022-23634" ref_url="https://www.suse.com/security/cve/CVE-2022-23634/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1515-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010927.html" source="SUSE-SU"/>
		<description>
This update for rubygem-puma fixes the following issues:

rubygem-puma was updated to version 4.3.11:

* CVE-2021-29509: Adjusted an incomplete fix for  allows Denial of Service (DoS) (bsc#1188527)
* CVE-2021-41136: Fixed request smuggling if HTTP header value contains the LF character (bsc#1191681)
* CVE-2022-23634: Fixed information leak between requests (bsc#1196222)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-04"/>
	<updated date="2022-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188527">SUSE bug 1188527</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191681">SUSE bug 1191681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196222">SUSE bug 1196222</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29509/">CVE-2021-29509</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-41136/">CVE-2021-41136</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23634/">CVE-2022-23634</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680815" comment="ruby2.5-rubygem-puma-4.3.11-150000.3.6.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139163" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-actionpack-5_1, rubygem-activesupport-5_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1185780" ref_url="https://bugzilla.suse.com/1185780" source="BUGZILLA"/>
		<reference ref_id="1196182" ref_url="https://bugzilla.suse.com/1196182" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22904" ref_url="https://www.suse.com/security/cve/CVE-2021-22904/" source="CVE"/>
		<reference ref_id="CVE-2022-23633" ref_url="https://www.suse.com/security/cve/CVE-2022-23633/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011300.html" source="SUSE-SU"/>
		<description>
This update for rubygem-actionpack-5_1 and rubygem-activesupport-5_1 fixes the following issues:

- CVE-2021-22904: Fixed possible DoS Vulnerability in Action Controller Token Authentication (bsc#1185780)
- CVE-2022-23633: Fixed possible exposure of information vulnerability in Action Pack (bsc#1196182)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-16"/>
	<updated date="2022-06-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185780">SUSE bug 1185780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196182">SUSE bug 1196182</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-22904/">CVE-2021-22904</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23633/">CVE-2022-23633</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684894" comment="ruby2.5-rubygem-actionpack-5_1-5.1.4-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684895" comment="ruby2.5-rubygem-activesupport-5_1-5.1.4-150000.3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139164" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1028340" ref_url="https://bugzilla.suse.com/1028340" source="BUGZILLA"/>
		<reference ref_id="1055710" ref_url="https://bugzilla.suse.com/1055710" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1084513" ref_url="https://bugzilla.suse.com/1084513" source="BUGZILLA"/>
		<reference ref_id="1087082" ref_url="https://bugzilla.suse.com/1087082" source="BUGZILLA"/>
		<reference ref_id="1114648" ref_url="https://bugzilla.suse.com/1114648" source="BUGZILLA"/>
		<reference ref_id="1158266" ref_url="https://bugzilla.suse.com/1158266" source="BUGZILLA"/>
		<reference ref_id="1172456" ref_url="https://bugzilla.suse.com/1172456" source="BUGZILLA"/>
		<reference ref_id="1177282" ref_url="https://bugzilla.suse.com/1177282" source="BUGZILLA"/>
		<reference ref_id="1182171" ref_url="https://bugzilla.suse.com/1182171" source="BUGZILLA"/>
		<reference ref_id="1183723" ref_url="https://bugzilla.suse.com/1183723" source="BUGZILLA"/>
		<reference ref_id="1187055" ref_url="https://bugzilla.suse.com/1187055" source="BUGZILLA"/>
		<reference ref_id="1191647" ref_url="https://bugzilla.suse.com/1191647" source="BUGZILLA"/>
		<reference ref_id="1191958" ref_url="https://bugzilla.suse.com/1191958" source="BUGZILLA"/>
		<reference ref_id="1195065" ref_url="https://bugzilla.suse.com/1195065" source="BUGZILLA"/>
		<reference ref_id="1195651" ref_url="https://bugzilla.suse.com/1195651" source="BUGZILLA"/>
		<reference ref_id="1196018" ref_url="https://bugzilla.suse.com/1196018" source="BUGZILLA"/>
		<reference ref_id="1196367" ref_url="https://bugzilla.suse.com/1196367" source="BUGZILLA"/>
		<reference ref_id="1196426" ref_url="https://bugzilla.suse.com/1196426" source="BUGZILLA"/>
		<reference ref_id="1196999" ref_url="https://bugzilla.suse.com/1196999" source="BUGZILLA"/>
		<reference ref_id="1197219" ref_url="https://bugzilla.suse.com/1197219" source="BUGZILLA"/>
		<reference ref_id="1197343" ref_url="https://bugzilla.suse.com/1197343" source="BUGZILLA"/>
		<reference ref_id="1197663" ref_url="https://bugzilla.suse.com/1197663" source="BUGZILLA"/>
		<reference ref_id="1198400" ref_url="https://bugzilla.suse.com/1198400" source="BUGZILLA"/>
		<reference ref_id="1198516" ref_url="https://bugzilla.suse.com/1198516" source="BUGZILLA"/>
		<reference ref_id="1198577" ref_url="https://bugzilla.suse.com/1198577" source="BUGZILLA"/>
		<reference ref_id="1198660" ref_url="https://bugzilla.suse.com/1198660" source="BUGZILLA"/>
		<reference ref_id="1198687" ref_url="https://bugzilla.suse.com/1198687" source="BUGZILLA"/>
		<reference ref_id="1198742" ref_url="https://bugzilla.suse.com/1198742" source="BUGZILLA"/>
		<reference ref_id="1198777" ref_url="https://bugzilla.suse.com/1198777" source="BUGZILLA"/>
		<reference ref_id="1198825" ref_url="https://bugzilla.suse.com/1198825" source="BUGZILLA"/>
		<reference ref_id="1199012" ref_url="https://bugzilla.suse.com/1199012" source="BUGZILLA"/>
		<reference ref_id="1199063" ref_url="https://bugzilla.suse.com/1199063" source="BUGZILLA"/>
		<reference ref_id="1199314" ref_url="https://bugzilla.suse.com/1199314" source="BUGZILLA"/>
		<reference ref_id="1199399" ref_url="https://bugzilla.suse.com/1199399" source="BUGZILLA"/>
		<reference ref_id="1199426" ref_url="https://bugzilla.suse.com/1199426" source="BUGZILLA"/>
		<reference ref_id="1199505" ref_url="https://bugzilla.suse.com/1199505" source="BUGZILLA"/>
		<reference ref_id="1199507" ref_url="https://bugzilla.suse.com/1199507" source="BUGZILLA"/>
		<reference ref_id="1199605" ref_url="https://bugzilla.suse.com/1199605" source="BUGZILLA"/>
		<reference ref_id="1199650" ref_url="https://bugzilla.suse.com/1199650" source="BUGZILLA"/>
		<reference ref_id="1200143" ref_url="https://bugzilla.suse.com/1200143" source="BUGZILLA"/>
		<reference ref_id="1200144" ref_url="https://bugzilla.suse.com/1200144" source="BUGZILLA"/>
		<reference ref_id="1200249" ref_url="https://bugzilla.suse.com/1200249" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-13695" ref_url="https://www.suse.com/security/cve/CVE-2017-13695/" source="CVE"/>
		<reference ref_id="CVE-2018-7755" ref_url="https://www.suse.com/security/cve/CVE-2018-7755/" source="CVE"/>
		<reference ref_id="CVE-2019-19377" ref_url="https://www.suse.com/security/cve/CVE-2019-19377/" source="CVE"/>
		<reference ref_id="CVE-2019-20811" ref_url="https://www.suse.com/security/cve/CVE-2019-20811/" source="CVE"/>
		<reference ref_id="CVE-2020-26541" ref_url="https://www.suse.com/security/cve/CVE-2020-26541/" source="CVE"/>
		<reference ref_id="CVE-2021-20292" ref_url="https://www.suse.com/security/cve/CVE-2021-20292/" source="CVE"/>
		<reference ref_id="CVE-2021-20321" ref_url="https://www.suse.com/security/cve/CVE-2021-20321/" source="CVE"/>
		<reference ref_id="CVE-2021-33061" ref_url="https://www.suse.com/security/cve/CVE-2021-33061/" source="CVE"/>
		<reference ref_id="CVE-2021-38208" ref_url="https://www.suse.com/security/cve/CVE-2021-38208/" source="CVE"/>
		<reference ref_id="CVE-2021-39711" ref_url="https://www.suse.com/security/cve/CVE-2021-39711/" source="CVE"/>
		<reference ref_id="CVE-2021-43389" ref_url="https://www.suse.com/security/cve/CVE-2021-43389/" source="CVE"/>
		<reference ref_id="CVE-2022-1011" ref_url="https://www.suse.com/security/cve/CVE-2022-1011/" source="CVE"/>
		<reference ref_id="CVE-2022-1184" ref_url="https://www.suse.com/security/cve/CVE-2022-1184/" source="CVE"/>
		<reference ref_id="CVE-2022-1353" ref_url="https://www.suse.com/security/cve/CVE-2022-1353/" source="CVE"/>
		<reference ref_id="CVE-2022-1419" ref_url="https://www.suse.com/security/cve/CVE-2022-1419/" source="CVE"/>
		<reference ref_id="CVE-2022-1516" ref_url="https://www.suse.com/security/cve/CVE-2022-1516/" source="CVE"/>
		<reference ref_id="CVE-2022-1652" ref_url="https://www.suse.com/security/cve/CVE-2022-1652/" source="CVE"/>
		<reference ref_id="CVE-2022-1729" ref_url="https://www.suse.com/security/cve/CVE-2022-1729/" source="CVE"/>
		<reference ref_id="CVE-2022-1734" ref_url="https://www.suse.com/security/cve/CVE-2022-1734/" source="CVE"/>
		<reference ref_id="CVE-2022-1974" ref_url="https://www.suse.com/security/cve/CVE-2022-1974/" source="CVE"/>
		<reference ref_id="CVE-2022-1975" ref_url="https://www.suse.com/security/cve/CVE-2022-1975/" source="CVE"/>
		<reference ref_id="CVE-2022-21123" ref_url="https://www.suse.com/security/cve/CVE-2022-21123/" source="CVE"/>
		<reference ref_id="CVE-2022-21125" ref_url="https://www.suse.com/security/cve/CVE-2022-21125/" source="CVE"/>
		<reference ref_id="CVE-2022-21127" ref_url="https://www.suse.com/security/cve/CVE-2022-21127/" source="CVE"/>
		<reference ref_id="CVE-2022-21166" ref_url="https://www.suse.com/security/cve/CVE-2022-21166/" source="CVE"/>
		<reference ref_id="CVE-2022-21180" ref_url="https://www.suse.com/security/cve/CVE-2022-21180/" source="CVE"/>
		<reference ref_id="CVE-2022-21499" ref_url="https://www.suse.com/security/cve/CVE-2022-21499/" source="CVE"/>
		<reference ref_id="CVE-2022-22942" ref_url="https://www.suse.com/security/cve/CVE-2022-22942/" source="CVE"/>
		<reference ref_id="CVE-2022-28748" ref_url="https://www.suse.com/security/cve/CVE-2022-28748/" source="CVE"/>
		<reference ref_id="CVE-2022-30594" ref_url="https://www.suse.com/security/cve/CVE-2022-30594/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011310.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated.

The following security bugs were fixed:

- CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image. (bnc#1158266)
- CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a corrupted image. (bsc#1198577)
- CVE-2017-13695: Fixed a bug that caused a stack dump allowing local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted ACPI table. (bnc#1055710)
- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
- CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063).
- CVE-2021-39711: In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1197219).
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505).
- CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters that may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1196426).
- CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012).
- CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system (bnc#1191647).
- CVE-2019-20811: Fixed issue in rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, where a reference count is mishandled (bnc#1172456).
- CVE-2022-28748: Fixed memory lead over the network by ax88179_178a devices (bsc#1196018).
- CVE-2018-7755: Fixed an issue in the fd_locked_ioctl function in drivers/block/floppy.c. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR (bnc#1084513).
- CVE-2022-22942: Fixed stale file descriptors on failed usercopy (bsc#1195065).
- CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
- CVE-2021-43389: Fixed an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).
- CVE-2021-38208: Fixed a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call (bnc#1187055).
- CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c (bnc#1198516).
- CVE-2021-20292: Fixed object validation prior to performing operations on the object in nouveau_sgdma_create_ttm in Nouveau DRM subsystem (bnc#1183723).
- CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bnc#1197343)
- CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space. (bsc#1200144).
- CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism. (bnc#1177282)
- CVE-2022-1975: Fixed a bug that allows an attacker to crash the linux kernel by simulating nfc device from user-space. (bsc#1200143)
- CVE-2022-21499: Reinforce the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb. (bsc#1199426)
- CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605).

The following non-security bugs were fixed:

- btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (bsc#1199399).
- btrfs: tree-checker: fix incorrect printk format (bsc#1200249).
- net: ena: A typo fix in the file ena_com.h (bsc#1198777).
- net: ena: Add capabilities field with support for ENI stats capability (bsc#1198777).
- net: ena: Add debug prints for invalid req_id resets (bsc#1198777).
- net: ena: add device distinct log prefix to files (bsc#1198777).
- net: ena: add jiffies of last napi call to stats (bsc#1198777).
- net: ena: aggregate doorbell common operations into a function (bsc#1198777).
- net: ena: aggregate stats increase into a function (bsc#1198777).
- net: ena: Change ENI stats support check to use capabilities field (bsc#1198777).
- net: ena: Change return value of ena_calc_io_queue_size() to void (bsc#1198777).
- net: ena: Change the name of bad_csum variable (bsc#1198777).
- net: ena: Extract recurring driver reset code into a function (bsc#1198777).
- net: ena: fix coding style nits (bsc#1198777).
- net: ena: fix DMA mapping function issues in XDP (bsc#1198777).
- net: ena: Fix error handling when calculating max IO queues number (bsc#1198777).
- net: ena: fix inaccurate print type (bsc#1198777).
- net: ena: Fix undefined state when tx request id is out of bounds (bsc#1198777).
- net: ena: Fix wrong rx request id by resetting device (bsc#1198777).
- net: ena: Improve error logging in driver (bsc#1198777).
- net: ena: introduce ndo_xdp_xmit() function for XDP_REDIRECT (bsc#1198777).
- net: ena: introduce XDP redirect implementation (bsc#1198777).
- net: ena: make symbol 'ena_alloc_map_page' static (bsc#1198777).
- net: ena: Move reset completion print to the reset function (bsc#1198777).
- net: ena: optimize data access in fast-path code (bsc#1198777).
- net: ena: re-organize code to improve readability (bsc#1198777).
- net: ena: Remove ena_calc_queue_size_ctx struct (bsc#1198777).
- net: ena: remove extra words from comments (bsc#1198777).
- net: ena: Remove module param and change message severity (bsc#1198777).
- net: ena: Remove rcu_read_lock() around XDP program invocation (bsc#1198777).
- net: ena: Remove redundant return code check (bsc#1198777).
- net: ena: Remove unused code (bsc#1198777).
- net: ena: store values in their appropriate variables types (bsc#1198777).
- net: ena: Update XDP verdict upon failure (bsc#1198777).
- net: ena: use build_skb() in RX path (bsc#1198777).
- net: ena: use constant value for net_device allocation (bsc#1198777).
- net: ena: Use dev_alloc() in RX buffer allocation (bsc#1198777).
- net: ena: Use pci_sriov_configure_simple() to enable VFs (bsc#1198777).
- net: ena: use xdp_frame in XDP TX flow (bsc#1198777).
- net: ena: use xdp_return_frame() to free xdp frames (bsc#1198777).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Remove unnecessary check of cqe_type in mana_process_rx_cqe() (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Use struct_size() helper in mana_gd_create_dma_region() (bsc#1195651).
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (bsc#1199314).
- powerpc/64: Fix kernel stack 16-byte alignment (bsc#1196999 ltc#196609S git-fixes).
- powerpc/64: Interrupts save PPR on stack rather than thread_struct (bsc#1196999 ltc#196609).
- powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc#1182171 ltc#190900 bsc#1198660 ltc#197803).
- powerpc/pseries: Fix use after free in remove_phb_dynamic() (bsc#1065729 bsc#1198660 ltc#197803).
- scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() (bsc#1028340 bsc#1198825).
- SUNRPC: change locking for xs_swap_enable/disable (bsc#1196367).
- x86/pm: Save the MSR validity status at context setup (bsc#1114648).
- x86/speculation: Restore speculation related MSRs during S3 resume (bsc#1114648).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-17"/>
	<updated date="2022-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1028340">SUSE bug 1028340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055710">SUSE bug 1055710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084513">SUSE bug 1084513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114648">SUSE bug 1114648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158266">SUSE bug 1158266</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172456">SUSE bug 1172456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177282">SUSE bug 1177282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182171">SUSE bug 1182171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183723">SUSE bug 1183723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187055">SUSE bug 1187055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191647">SUSE bug 1191647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191958">SUSE bug 1191958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195065">SUSE bug 1195065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195651">SUSE bug 1195651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196018">SUSE bug 1196018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196367">SUSE bug 1196367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196426">SUSE bug 1196426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196999">SUSE bug 1196999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197219">SUSE bug 1197219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197343">SUSE bug 1197343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197663">SUSE bug 1197663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198400">SUSE bug 1198400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198516">SUSE bug 1198516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198577">SUSE bug 1198577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198660">SUSE bug 1198660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198687">SUSE bug 1198687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198742">SUSE bug 1198742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198777">SUSE bug 1198777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198825">SUSE bug 1198825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199012">SUSE bug 1199012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199063">SUSE bug 1199063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199314">SUSE bug 1199314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199399">SUSE bug 1199399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199426">SUSE bug 1199426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199505">SUSE bug 1199505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199507">SUSE bug 1199507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199605">SUSE bug 1199605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199650">SUSE bug 1199650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200143">SUSE bug 1200143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200144">SUSE bug 1200144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200249">SUSE bug 1200249</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-13695/">CVE-2017-13695</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-7755/">CVE-2018-7755</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19377/">CVE-2019-19377</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20811/">CVE-2019-20811</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26541/">CVE-2020-26541</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20292/">CVE-2021-20292</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20321/">CVE-2021-20321</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33061/">CVE-2021-33061</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38208/">CVE-2021-38208</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39711/">CVE-2021-39711</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43389/">CVE-2021-43389</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1011/">CVE-2022-1011</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1184/">CVE-2022-1184</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1353/">CVE-2022-1353</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1419/">CVE-2022-1419</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1516/">CVE-2022-1516</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1652/">CVE-2022-1652</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1729/">CVE-2022-1729</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1734/">CVE-2022-1734</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1974/">CVE-2022-1974</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1975/">CVE-2022-1975</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21123/">CVE-2022-21123</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21125/">CVE-2022-21125</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21127/">CVE-2022-21127</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21166/">CVE-2022-21166</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21180/">CVE-2022-21180</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-21499/">CVE-2022-21499</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22942/">CVE-2022-22942</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28748/">CVE-2022-28748</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30594/">CVE-2022-30594</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692394" comment="cluster-md-kmp-default-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692395" comment="dlm-kmp-default-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692396" comment="gfs2-kmp-default-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692397" comment="ocfs2-kmp-default-4.12.14-150100.197.114.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139165" version="1" class="patch">
	<metadata>
		<title>Security update for drbd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011365.html" source="SUSE-SU"/>
		<description>

This update of drbd fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-27"/>
	<updated date="2022-06-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692398" comment="drbd-9.0.16+git.ab9777df-150100.8.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692399" comment="drbd-kmp-default-9.0.16+git.ab9777df_k4.12.14_150100.197.114-150100.8.27.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139166" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-rack (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1200748" ref_url="https://bugzilla.suse.com/1200748" source="BUGZILLA"/>
		<reference ref_id="1200750" ref_url="https://bugzilla.suse.com/1200750" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-30122" ref_url="https://www.suse.com/security/cve/CVE-2022-30122/" source="CVE"/>
		<reference ref_id="CVE-2022-30123" ref_url="https://www.suse.com/security/cve/CVE-2022-30123/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2192-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011366.html" source="SUSE-SU"/>
		<description>
This update for rubygem-rack fixes the following issues:

- CVE-2022-30122: Fixed crafted multipart POST request may cause a DoS (bsc#1200748)
- CVE-2022-30123: Fixed crafted requests can cause shell escape sequences (bsc#1200750)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-27"/>
	<updated date="2022-06-27"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1200748">SUSE bug 1200748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200750">SUSE bug 1200750</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-30122/">CVE-2022-30122</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30123/">CVE-2022-30123</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684902" comment="ruby2.5-rubygem-rack-2.0.8-150000.3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139167" version="1" class="patch">
	<metadata>
		<title>Security update for resource-agents (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1146691" ref_url="https://bugzilla.suse.com/1146691" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2336-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011481.html" source="SUSE-SU"/>
		<description>
This update for resource-agents fixes the following issues:
    
- Fixed predictable log file in /tmp in mariadb.in (bsc#1146691).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1146691">SUSE bug 1146691</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699009" comment="ldirectord-4.3.0184.6ee15eb2-150100.4.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699010" comment="monitoring-plugins-metadata-4.3.0184.6ee15eb2-150100.4.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699011" comment="resource-agents-4.3.0184.6ee15eb2-150100.4.66.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139168" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1194013" ref_url="https://bugzilla.suse.com/1194013" source="BUGZILLA"/>
		<reference ref_id="1196901" ref_url="https://bugzilla.suse.com/1196901" source="BUGZILLA"/>
		<reference ref_id="1199487" ref_url="https://bugzilla.suse.com/1199487" source="BUGZILLA"/>
		<reference ref_id="1199657" ref_url="https://bugzilla.suse.com/1199657" source="BUGZILLA"/>
		<reference ref_id="1200571" ref_url="https://bugzilla.suse.com/1200571" source="BUGZILLA"/>
		<reference ref_id="1200599" ref_url="https://bugzilla.suse.com/1200599" source="BUGZILLA"/>
		<reference ref_id="1200604" ref_url="https://bugzilla.suse.com/1200604" source="BUGZILLA"/>
		<reference ref_id="1200605" ref_url="https://bugzilla.suse.com/1200605" source="BUGZILLA"/>
		<reference ref_id="1200608" ref_url="https://bugzilla.suse.com/1200608" source="BUGZILLA"/>
		<reference ref_id="1200619" ref_url="https://bugzilla.suse.com/1200619" source="BUGZILLA"/>
		<reference ref_id="1200692" ref_url="https://bugzilla.suse.com/1200692" source="BUGZILLA"/>
		<reference ref_id="1200762" ref_url="https://bugzilla.suse.com/1200762" source="BUGZILLA"/>
		<reference ref_id="1201050" ref_url="https://bugzilla.suse.com/1201050" source="BUGZILLA"/>
		<reference ref_id="1201080" ref_url="https://bugzilla.suse.com/1201080" source="BUGZILLA"/>
		<reference ref_id="1201251" ref_url="https://bugzilla.suse.com/1201251" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26341" ref_url="https://www.suse.com/security/cve/CVE-2021-26341/" source="CVE"/>
		<reference ref_id="CVE-2021-4157" ref_url="https://www.suse.com/security/cve/CVE-2021-4157/" source="CVE"/>
		<reference ref_id="CVE-2022-1679" ref_url="https://www.suse.com/security/cve/CVE-2022-1679/" source="CVE"/>
		<reference ref_id="CVE-2022-20132" ref_url="https://www.suse.com/security/cve/CVE-2022-20132/" source="CVE"/>
		<reference ref_id="CVE-2022-20141" ref_url="https://www.suse.com/security/cve/CVE-2022-20141/" source="CVE"/>
		<reference ref_id="CVE-2022-20154" ref_url="https://www.suse.com/security/cve/CVE-2022-20154/" source="CVE"/>
		<reference ref_id="CVE-2022-2318" ref_url="https://www.suse.com/security/cve/CVE-2022-2318/" source="CVE"/>
		<reference ref_id="CVE-2022-26365" ref_url="https://www.suse.com/security/cve/CVE-2022-26365/" source="CVE"/>
		<reference ref_id="CVE-2022-29900" ref_url="https://www.suse.com/security/cve/CVE-2022-29900/" source="CVE"/>
		<reference ref_id="CVE-2022-29901" ref_url="https://www.suse.com/security/cve/CVE-2022-29901/" source="CVE"/>
		<reference ref_id="CVE-2022-33740" ref_url="https://www.suse.com/security/cve/CVE-2022-33740/" source="CVE"/>
		<reference ref_id="CVE-2022-33741" ref_url="https://www.suse.com/security/cve/CVE-2022-33741/" source="CVE"/>
		<reference ref_id="CVE-2022-33742" ref_url="https://www.suse.com/security/cve/CVE-2022-33742/" source="CVE"/>
		<reference ref_id="CVE-2022-33981" ref_url="https://www.suse.com/security/cve/CVE-2022-33981/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011558.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).
- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).
- CVE-2022-20132: Fixed out of bounds read due to improper input validation in lg_probe and related functions of hid-lg.c (bsc#1200619).
- CVE-2022-33981: Fixed use-after-free in floppy driver (bsc#1200692)
- CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604).
- CVE-2021-4157: Fixed an out of memory bounds write flaw in the NFS subsystem, related to the replication of files with NFS. A user could potentially crash the system or escalate privileges on the system (bsc#1194013).
- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).
- CVE-2022-2318: Fixed a use-after-free vulnerabilities in the timer handler in net/rose/rose_timer.c that allow attackers to crash the system without any privileges (bsc#1201251).
- CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762).
- CVE-2021-26341: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bsc#1201050).

The following non-security bugs were fixed:

- exec: Force single empty string when argv is empty (bsc#1200571).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-15"/>
	<updated date="2022-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194013">SUSE bug 1194013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196901">SUSE bug 1196901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199487">SUSE bug 1199487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199657">SUSE bug 1199657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200571">SUSE bug 1200571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200599">SUSE bug 1200599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200604">SUSE bug 1200604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200605">SUSE bug 1200605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200608">SUSE bug 1200608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200619">SUSE bug 1200619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200692">SUSE bug 1200692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200762">SUSE bug 1200762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201050">SUSE bug 1201050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201080">SUSE bug 1201080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201251">SUSE bug 1201251</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-26341/">CVE-2021-26341</cve>
	<cve impact="low" cvss3="3.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4157/">CVE-2021-4157</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1679/">CVE-2022-1679</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-20132/">CVE-2022-20132</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20141/">CVE-2022-20141</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20154/">CVE-2022-20154</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2318/">CVE-2022-2318</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-26365/">CVE-2022-26365</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29900/">CVE-2022-29900</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29901/">CVE-2022-29901</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33740/">CVE-2022-33740</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33741/">CVE-2022-33741</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33742/">CVE-2022-33742</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-33981/">CVE-2022-33981</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699012" comment="cluster-md-kmp-default-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699013" comment="dlm-kmp-default-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699014" comment="gfs2-kmp-default-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699015" comment="ocfs2-kmp-default-4.12.14-150100.197.117.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139169" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-tzinfo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1201835" ref_url="https://bugzilla.suse.com/1201835" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31163" ref_url="https://www.suse.com/security/cve/CVE-2022-31163/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2592-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011712.html" source="SUSE-SU"/>
		<description>
This update for rubygem-tzinfo fixes the following issues:

- CVE-2022-31163: Fixed relative path traversal vulnerability that allows TZInfo::Timezone.get to load arbitrary files (bsc#1201835).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-29"/>
	<updated date="2022-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201835">SUSE bug 1201835</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31163/">CVE-2022-31163</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702144" comment="ruby2.5-rubygem-tzinfo-1.2.4-150000.3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139170" version="1" class="patch">
	<metadata>
		<title>Security update for booth (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1201946" ref_url="https://bugzilla.suse.com/1201946" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2553" ref_url="https://www.suse.com/security/cve/CVE-2022-2553/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011730.html" source="SUSE-SU"/>
		<description>
This update for booth fixes the following issues:

- CVE-2022-2553: authfile directive in booth config file is completely ignored (bsc#1201946).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-01"/>
	<updated date="2022-08-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201946">SUSE bug 1201946</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-2553/">CVE-2022-2553</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702717" comment="booth-1.0-150100.11.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139171" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1201496" ref_url="https://bugzilla.suse.com/1201496" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32742" ref_url="https://www.suse.com/security/cve/CVE-2022-32742/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2621-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011742.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1write_and_close, SMB1write_and_unlock (bso#15085) (bsc#1201496).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-02"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1201496">SUSE bug 1201496</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32742/">CVE-2022-32742</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702716" comment="ctdb-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139172" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1195775" ref_url="https://bugzilla.suse.com/1195775" source="BUGZILLA"/>
		<reference ref_id="1195926" ref_url="https://bugzilla.suse.com/1195926" source="BUGZILLA"/>
		<reference ref_id="1198484" ref_url="https://bugzilla.suse.com/1198484" source="BUGZILLA"/>
		<reference ref_id="1198829" ref_url="https://bugzilla.suse.com/1198829" source="BUGZILLA"/>
		<reference ref_id="1200442" ref_url="https://bugzilla.suse.com/1200442" source="BUGZILLA"/>
		<reference ref_id="1200598" ref_url="https://bugzilla.suse.com/1200598" source="BUGZILLA"/>
		<reference ref_id="1200910" ref_url="https://bugzilla.suse.com/1200910" source="BUGZILLA"/>
		<reference ref_id="1201429" ref_url="https://bugzilla.suse.com/1201429" source="BUGZILLA"/>
		<reference ref_id="1201635" ref_url="https://bugzilla.suse.com/1201635" source="BUGZILLA"/>
		<reference ref_id="1201636" ref_url="https://bugzilla.suse.com/1201636" source="BUGZILLA"/>
		<reference ref_id="1201644" ref_url="https://bugzilla.suse.com/1201644" source="BUGZILLA"/>
		<reference ref_id="1201926" ref_url="https://bugzilla.suse.com/1201926" source="BUGZILLA"/>
		<reference ref_id="1201930" ref_url="https://bugzilla.suse.com/1201930" source="BUGZILLA"/>
		<reference ref_id="1201940" ref_url="https://bugzilla.suse.com/1201940" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36557" ref_url="https://www.suse.com/security/cve/CVE-2020-36557/" source="CVE"/>
		<reference ref_id="CVE-2020-36558" ref_url="https://www.suse.com/security/cve/CVE-2020-36558/" source="CVE"/>
		<reference ref_id="CVE-2021-33655" ref_url="https://www.suse.com/security/cve/CVE-2021-33655/" source="CVE"/>
		<reference ref_id="CVE-2021-33656" ref_url="https://www.suse.com/security/cve/CVE-2021-33656/" source="CVE"/>
		<reference ref_id="CVE-2022-1462" ref_url="https://www.suse.com/security/cve/CVE-2022-1462/" source="CVE"/>
		<reference ref_id="CVE-2022-20166" ref_url="https://www.suse.com/security/cve/CVE-2022-20166/" source="CVE"/>
		<reference ref_id="CVE-2022-36946" ref_url="https://www.suse.com/security/cve/CVE-2022-36946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011923.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-36557: Fixed race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys that could lead to a use-after-free (bnc#1201429).
- CVE-2020-36558: Fixed race condition involving VT_RESIZEX that could lead to a NULL pointer dereference and general protection fault (bnc#1200910).
- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2021-33656: Fixed out of bounds write with ioctl PIO_FONT (bnc#1201636).
- CVE-2022-1462: Fixed an out-of-bounds read flaw in the TeleTYpe subsystem (bnc#1198829).
- CVE-2022-20166: Fixed possible out of bounds write due to sprintf unsafety that could cause local escalation of privilege (bnc#1200598).
- CVE-2022-36946: Fixed incorrect packet truncation in nfqnl_mangle() that could lead to remote DoS (bnc#1201940).

The following non-security bugs were fixed:

- cifs: On cifs_reconnect, resolve the hostname again (bsc#1201926).
- cifs: Simplify reconnect code when dfs upcall is enabled (bsc#1201926).
- cifs: To match file servers, make sure the server hostname matches (bsc#1201926).
- cifs: fix memory leak of smb3_fs_context_dup::server_hostname (bsc#1201926).
- cifs: set a minimum of 120s for next dns resolution (bsc#1201926).
- cifs: use the expiry output of dns_query to schedule next resolution (bsc#1201926).
- kvm: emulate: Fix SETcc emulation function offsets with SLS (bsc#1201930).
- kvm: emulate: do not adjust size of fastop and setcc subroutines (bsc#1201930).
- rpm/*.spec.in: remove backtick usage
- rpm/constraints.in: skip SLOW_DISK workers for kernel-source
- rpm/kernel-obs-build.spec.in: Also depend on dracut-systemd (bsc#1195775)
- rpm/kernel-obs-build.spec.in: add systemd-initrd and terminfo dracut module (bsc#1195775)
- rpm/kernel-obs-build.spec.in: use default dracut modules (bsc#1195926, bsc#1198484)
- x86/entry: Remove skip_r11rcx (bsc#1201644).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-16"/>
	<updated date="2022-08-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195775">SUSE bug 1195775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195926">SUSE bug 1195926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198484">SUSE bug 1198484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198829">SUSE bug 1198829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200442">SUSE bug 1200442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200598">SUSE bug 1200598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200910">SUSE bug 1200910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201429">SUSE bug 1201429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201635">SUSE bug 1201635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201636">SUSE bug 1201636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201644">SUSE bug 1201644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201926">SUSE bug 1201926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201930">SUSE bug 1201930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201940">SUSE bug 1201940</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36557/">CVE-2020-36557</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36558/">CVE-2020-36558</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33655/">CVE-2021-33655</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33656/">CVE-2021-33656</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1462/">CVE-2022-1462</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-20166/">CVE-2022-20166</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36946/">CVE-2022-36946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009704370" comment="cluster-md-kmp-default-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704371" comment="dlm-kmp-default-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704372" comment="gfs2-kmp-default-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704373" comment="ocfs2-kmp-default-4.12.14-150100.197.120.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139173" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1194859" ref_url="https://bugzilla.suse.com/1194859" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44142" ref_url="https://www.suse.com/security/cve/CVE-2021-44142/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010165.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:
	  
- CVE-2021-44142: Fixed out-of-Bound Read/Write on Samba vfs_fruit module. (bsc#1194859)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-01"/>
	<updated date="2022-02-01"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1194859">SUSE bug 1194859</bugzilla>
	<cve impact="critical" cvss3="9.9/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-44142/">CVE-2021-44142</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665450" comment="ctdb-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139174" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-rails-html-sanitizer (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1201183" ref_url="https://bugzilla.suse.com/1201183" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32209" ref_url="https://www.suse.com/security/cve/CVE-2022-32209/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2870-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011964.html" source="SUSE-SU"/>
		<description>
This update for rubygem-rails-html-sanitizer fixes the following issues:

- CVE-2022-32209: Fixed a potential content injection under specific
  configurations (bsc#1201183).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-22"/>
	<updated date="2022-08-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1201183">SUSE bug 1201183</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-32209/">CVE-2022-32209</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707098" comment="ruby2.5-rubygem-rails-html-sanitizer-1.0.4-150000.4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139175" version="1" class="patch">
	<metadata>
		<title>Security update for keepalived (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1193115" ref_url="https://bugzilla.suse.com/1193115" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44225" ref_url="https://www.suse.com/security/cve/CVE-2021-44225/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2923-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012005.html" source="SUSE-SU"/>
		<description>
This update for keepalived fixes the following issues:

- CVE-2021-44225: Fix a potential privilege escalation due to
  insufficient control in the D-Bus policy (bsc#1193115).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-26"/>
	<updated date="2022-08-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193115">SUSE bug 1193115</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-44225/">CVE-2021-44225</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707786" comment="keepalived-2.0.19-150100.3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139176" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-kramdown (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1174297" ref_url="https://bugzilla.suse.com/1174297" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14001" ref_url="https://www.suse.com/security/cve/CVE-2020-14001/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012214.html" source="SUSE-SU"/>
		<description>
This update for rubygem-kramdown fixes the following issues:

- CVE-2020-14001: Fixed processing template options inside documents allowing unintended read access or embedded Ruby code execution (bsc#1174297).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-12"/>
	<updated date="2022-09-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174297">SUSE bug 1174297</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14001/">CVE-2020-14001</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710254" comment="ruby2.5-rubygem-kramdown-1.15.0-150000.3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139177" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-rack (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1172037" ref_url="https://bugzilla.suse.com/1172037" source="BUGZILLA"/>
		<reference ref_id="1173351" ref_url="https://bugzilla.suse.com/1173351" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8161" ref_url="https://www.suse.com/security/cve/CVE-2020-8161/" source="CVE"/>
		<reference ref_id="CVE-2020-8184" ref_url="https://www.suse.com/security/cve/CVE-2020-8184/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3347-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012347.html" source="SUSE-SU"/>
		<description>
This update for rubygem-rack fixes the following issues:

- CVE-2020-8184: Fixed vulnerability where percent-encoded cookies can be used to overwrite existing prefixed cookie names (bsc#1173351). 
- CVE-2020-8161: Fixed directory traversal in Rack:Directory (bsc#1172037).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-23"/>
	<updated date="2022-09-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172037">SUSE bug 1172037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173351">SUSE bug 1173351</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-8161/">CVE-2020-8161</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-8184/">CVE-2020-8184</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009713886" comment="ruby2.5-rubygem-rack-2.0.8-150000.3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139178" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1177440" ref_url="https://bugzilla.suse.com/1177440" source="BUGZILLA"/>
		<reference ref_id="1180153" ref_url="https://bugzilla.suse.com/1180153" source="BUGZILLA"/>
		<reference ref_id="1188944" ref_url="https://bugzilla.suse.com/1188944" source="BUGZILLA"/>
		<reference ref_id="1191881" ref_url="https://bugzilla.suse.com/1191881" source="BUGZILLA"/>
		<reference ref_id="1194535" ref_url="https://bugzilla.suse.com/1194535" source="BUGZILLA"/>
		<reference ref_id="1196616" ref_url="https://bugzilla.suse.com/1196616" source="BUGZILLA"/>
		<reference ref_id="1197158" ref_url="https://bugzilla.suse.com/1197158" source="BUGZILLA"/>
		<reference ref_id="1199482" ref_url="https://bugzilla.suse.com/1199482" source="BUGZILLA"/>
		<reference ref_id="1199665" ref_url="https://bugzilla.suse.com/1199665" source="BUGZILLA"/>
		<reference ref_id="1201019" ref_url="https://bugzilla.suse.com/1201019" source="BUGZILLA"/>
		<reference ref_id="1201420" ref_url="https://bugzilla.suse.com/1201420" source="BUGZILLA"/>
		<reference ref_id="1201705" ref_url="https://bugzilla.suse.com/1201705" source="BUGZILLA"/>
		<reference ref_id="1201726" ref_url="https://bugzilla.suse.com/1201726" source="BUGZILLA"/>
		<reference ref_id="1201948" ref_url="https://bugzilla.suse.com/1201948" source="BUGZILLA"/>
		<reference ref_id="1202096" ref_url="https://bugzilla.suse.com/1202096" source="BUGZILLA"/>
		<reference ref_id="1202097" ref_url="https://bugzilla.suse.com/1202097" source="BUGZILLA"/>
		<reference ref_id="1202154" ref_url="https://bugzilla.suse.com/1202154" source="BUGZILLA"/>
		<reference ref_id="1202335" ref_url="https://bugzilla.suse.com/1202335" source="BUGZILLA"/>
		<reference ref_id="1202346" ref_url="https://bugzilla.suse.com/1202346" source="BUGZILLA"/>
		<reference ref_id="1202347" ref_url="https://bugzilla.suse.com/1202347" source="BUGZILLA"/>
		<reference ref_id="1202393" ref_url="https://bugzilla.suse.com/1202393" source="BUGZILLA"/>
		<reference ref_id="1202396" ref_url="https://bugzilla.suse.com/1202396" source="BUGZILLA"/>
		<reference ref_id="1202672" ref_url="https://bugzilla.suse.com/1202672" source="BUGZILLA"/>
		<reference ref_id="1202897" ref_url="https://bugzilla.suse.com/1202897" source="BUGZILLA"/>
		<reference ref_id="1202898" ref_url="https://bugzilla.suse.com/1202898" source="BUGZILLA"/>
		<reference ref_id="1203098" ref_url="https://bugzilla.suse.com/1203098" source="BUGZILLA"/>
		<reference ref_id="1203107" ref_url="https://bugzilla.suse.com/1203107" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36516" ref_url="https://www.suse.com/security/cve/CVE-2020-36516/" source="CVE"/>
		<reference ref_id="CVE-2021-4203" ref_url="https://www.suse.com/security/cve/CVE-2021-4203/" source="CVE"/>
		<reference ref_id="CVE-2022-1012" ref_url="https://www.suse.com/security/cve/CVE-2022-1012/" source="CVE"/>
		<reference ref_id="CVE-2022-20368" ref_url="https://www.suse.com/security/cve/CVE-2022-20368/" source="CVE"/>
		<reference ref_id="CVE-2022-20369" ref_url="https://www.suse.com/security/cve/CVE-2022-20369/" source="CVE"/>
		<reference ref_id="CVE-2022-21385" ref_url="https://www.suse.com/security/cve/CVE-2022-21385/" source="CVE"/>
		<reference ref_id="CVE-2022-2588" ref_url="https://www.suse.com/security/cve/CVE-2022-2588/" source="CVE"/>
		<reference ref_id="CVE-2022-26373" ref_url="https://www.suse.com/security/cve/CVE-2022-26373/" source="CVE"/>
		<reference ref_id="CVE-2022-2639" ref_url="https://www.suse.com/security/cve/CVE-2022-2639/" source="CVE"/>
		<reference ref_id="CVE-2022-2663" ref_url="https://www.suse.com/security/cve/CVE-2022-2663/" source="CVE"/>
		<reference ref_id="CVE-2022-29581" ref_url="https://www.suse.com/security/cve/CVE-2022-29581/" source="CVE"/>
		<reference ref_id="CVE-2022-2977" ref_url="https://www.suse.com/security/cve/CVE-2022-2977/" source="CVE"/>
		<reference ref_id="CVE-2022-3028" ref_url="https://www.suse.com/security/cve/CVE-2022-3028/" source="CVE"/>
		<reference ref_id="CVE-2022-36879" ref_url="https://www.suse.com/security/cve/CVE-2022-36879/" source="CVE"/>
		<reference ref_id="CVE-2022-39188" ref_url="https://www.suse.com/security/cve/CVE-2022-39188/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012386.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-36516: Fixed an issue in the mixed IPID assignment method where an attacker was able to inject data into or terminate a victim's TCP session (bnc#1196616).
- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bnc#1194535).
- CVE-2022-1012: Fixed a memory leak problem that was found in the TCP source port generation algorithm in net/ipv4/tcp.c (bnc#1199482).
- CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bsc#1202346).
- CVE-2022-20369: Fixed out of bounds write in v4l2_m2m_querybuf of v4l2-mem2mem.c (bnc#1202347).
- CVE-2022-21385: Fixed a flaw in net_rds_alloc_sgs() that allowed unprivileged local users to crash the machine (bnc#1202897).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-26373: Fixed non-transparent sharing of return predictor targets between contexts in some Intel Processors (bnc#1201726).
- CVE-2022-2639: Fixed an integer coercion error that was found in the openvswitch kernel module (bnc#1202154).
- CVE-2022-2663: Fixed an issue that was found in nf_conntrack_irc where the message handling could be confused and incorrectly matches the message (bnc#1202097).
- CVE-2022-29581: Fixed improper update of reference count vulnerability in net/sched that allowed a local attacker to cause privilege escalation to root (bnc#1199665).
- CVE-2022-2977: Fixed reference counting for struct tpm_chip (bsc#1202672).
- CVE-2022-3028: Fixed race condition that was found in the IP framework for transforming packets (XFRM subsystem) (bnc#1202898).
- CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bnc#1201948).
- CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has stale TLB entries (bnc#1203107).

The following non-security bugs were fixed:

- rpm: Fix parsing of rpm/macros.kernel-source on SLE12 (bsc#1201019).
- cifs: fix error paths in cifs_tree_connect() (bsc#1177440).
- cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (bsc#1188944).
- cifs: report error instead of invalid when revalidating a dentry fails (bsc#1177440).
- cifs: skip trailing separators of prefix paths (bsc#1188944).
- kernel-obs-build: include qemu_fw_cfg (boo#1201705)
- lightnvm: Remove lightnvm implemenation (bsc#1191881 bsc#1201420 ZDI-CAN-17325).
- md/bitmap: do not set sb values if can't pass sanity check (bsc#1197158).
- mm/rmap.c: do not reuse anon_vma if we just want a copy (git-fixes, bsc#1203098).
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (git-fixes, bsc#1203098). 
- net_sched: cls_route: disallow handle of 0 (bsc#1202393).
- net_sched: cls_route: disallow handle of 0 (bsc#1202393).
- objtool: Add --backtrace support (bsc#1202396).
- objtool: Add support for intra-function calls (bsc#1202396).
- objtool: Allow no-op CFI ops in alternatives (bsc#1202396).
- objtool: Convert insn type to enum (bsc#1202396).
- objtool: Do not use ignore flag for fake jumps (bsc#1202396).
- objtool: Fix !CFI insn_state propagation (bsc#1202396).
- objtool: Fix ORC vs alternatives (bsc#1202396).
- objtool: Fix sibling call detection (bsc#1202396).
- objtool: Make handle_insn_ops() unconditional (bsc#1202396).
- objtool: Remove INSN_STACK (bsc#1202396).
- objtool: Remove check preventing branches within alternative (bsc#1202396).
- objtool: Rename elf_open() to prevent conflict with libelf from elftoolchain (bsc#1202396).
- objtool: Rename struct cfi_state (bsc#1202396).
- objtool: Rework allocating stack_ops on decode (bsc#1202396).
- objtool: Rewrite alt-&gt;skip_orig (bsc#1202396).
- objtool: Set insn-&gt;func for alternatives (bsc#1202396).
- objtool: Support conditional retpolines (bsc#1202396).
- objtool: Support multiple stack_op per instruction (bsc#1202396).
- objtool: Track original function across branches (bsc#1202396).
- objtool: Uniquely identify alternative instruction groups (bsc#1202396).
- objtool: Use Elf_Scn typedef instead of assuming struct name (bsc#1202396).
- tcp: add some entropy in __inet_hash_connect() (bsc#1180153 bsc#1202335).
- tcp: change source port randomizarion at connect() time (bsc#1180153 bsc#1202335).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-26"/>
	<updated date="2022-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177440">SUSE bug 1177440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180153">SUSE bug 1180153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188944">SUSE bug 1188944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191881">SUSE bug 1191881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194535">SUSE bug 1194535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196616">SUSE bug 1196616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197158">SUSE bug 1197158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199482">SUSE bug 1199482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199665">SUSE bug 1199665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201019">SUSE bug 1201019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201420">SUSE bug 1201420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201705">SUSE bug 1201705</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201726">SUSE bug 1201726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201948">SUSE bug 1201948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202096">SUSE bug 1202096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202097">SUSE bug 1202097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202154">SUSE bug 1202154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202335">SUSE bug 1202335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202346">SUSE bug 1202346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202347">SUSE bug 1202347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202393">SUSE bug 1202393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202396">SUSE bug 1202396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202672">SUSE bug 1202672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202897">SUSE bug 1202897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202898">SUSE bug 1202898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203098">SUSE bug 1203098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203107">SUSE bug 1203107</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36516/">CVE-2020-36516</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4203/">CVE-2021-4203</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1012/">CVE-2022-1012</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20368/">CVE-2022-20368</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20369/">CVE-2022-20369</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21385/">CVE-2022-21385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2588/">CVE-2022-2588</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26373/">CVE-2022-26373</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-2639/">CVE-2022-2639</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-2663/">CVE-2022-2663</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29581/">CVE-2022-29581</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2977/">CVE-2022-2977</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3028/">CVE-2022-3028</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36879/">CVE-2022-36879</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-39188/">CVE-2022-39188</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710884" comment="cluster-md-kmp-default-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710885" comment="dlm-kmp-default-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710886" comment="gfs2-kmp-default-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710887" comment="ocfs2-kmp-default-4.12.14-150100.197.123.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139179" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-puma (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1197818" ref_url="https://bugzilla.suse.com/1197818" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24790" ref_url="https://www.suse.com/security/cve/CVE-2022-24790/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3571-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012533.html" source="SUSE-SU"/>
		<description>
This update for rubygem-puma fixes the following issues:

  Updated to version 4.3.12:
  - CVE-2022-24790: Fixed HTTP request smuggling if proxy is not RFC7230 compliant (bsc#1197818).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-13"/>
	<updated date="2022-10-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197818">SUSE bug 1197818</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-24790/">CVE-2022-24790</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715925" comment="ruby2.5-rubygem-puma-4.3.12-150000.3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139180" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-activesupport-5_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1199060" ref_url="https://bugzilla.suse.com/1199060" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-27777" ref_url="https://www.suse.com/security/cve/CVE-2022-27777/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3621-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012561.html" source="SUSE-SU"/>
		<description>
This update for rubygem-activesupport-5_1 fixes the following issues:

- CVE-2022-27777: Fixed cross-site scripting vulnerability in Action View tag helper (bsc#1199060).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-18"/>
	<updated date="2022-10-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1199060">SUSE bug 1199060</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-27777/">CVE-2022-27777</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716155" comment="ruby2.5-rubygem-activesupport-5_1-5.1.4-150000.3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139181" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1124431" ref_url="https://bugzilla.suse.com/1124431" source="BUGZILLA"/>
		<reference ref_id="1167162" ref_url="https://bugzilla.suse.com/1167162" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1179599" ref_url="https://bugzilla.suse.com/1179599" source="BUGZILLA"/>
		<reference ref_id="1184804" ref_url="https://bugzilla.suse.com/1184804" source="BUGZILLA"/>
		<reference ref_id="1185377" ref_url="https://bugzilla.suse.com/1185377" source="BUGZILLA"/>
		<reference ref_id="1186207" ref_url="https://bugzilla.suse.com/1186207" source="BUGZILLA"/>
		<reference ref_id="1186222" ref_url="https://bugzilla.suse.com/1186222" source="BUGZILLA"/>
		<reference ref_id="1187167" ref_url="https://bugzilla.suse.com/1187167" source="BUGZILLA"/>
		<reference ref_id="1189305" ref_url="https://bugzilla.suse.com/1189305" source="BUGZILLA"/>
		<reference ref_id="1189841" ref_url="https://bugzilla.suse.com/1189841" source="BUGZILLA"/>
		<reference ref_id="1190358" ref_url="https://bugzilla.suse.com/1190358" source="BUGZILLA"/>
		<reference ref_id="1190428" ref_url="https://bugzilla.suse.com/1190428" source="BUGZILLA"/>
		<reference ref_id="1191229" ref_url="https://bugzilla.suse.com/1191229" source="BUGZILLA"/>
		<reference ref_id="1191241" ref_url="https://bugzilla.suse.com/1191241" source="BUGZILLA"/>
		<reference ref_id="1191384" ref_url="https://bugzilla.suse.com/1191384" source="BUGZILLA"/>
		<reference ref_id="1191731" ref_url="https://bugzilla.suse.com/1191731" source="BUGZILLA"/>
		<reference ref_id="1192032" ref_url="https://bugzilla.suse.com/1192032" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="1192740" ref_url="https://bugzilla.suse.com/1192740" source="BUGZILLA"/>
		<reference ref_id="1192845" ref_url="https://bugzilla.suse.com/1192845" source="BUGZILLA"/>
		<reference ref_id="1192847" ref_url="https://bugzilla.suse.com/1192847" source="BUGZILLA"/>
		<reference ref_id="1192877" ref_url="https://bugzilla.suse.com/1192877" source="BUGZILLA"/>
		<reference ref_id="1192946" ref_url="https://bugzilla.suse.com/1192946" source="BUGZILLA"/>
		<reference ref_id="1193306" ref_url="https://bugzilla.suse.com/1193306" source="BUGZILLA"/>
		<reference ref_id="1193440" ref_url="https://bugzilla.suse.com/1193440" source="BUGZILLA"/>
		<reference ref_id="1193442" ref_url="https://bugzilla.suse.com/1193442" source="BUGZILLA"/>
		<reference ref_id="1193575" ref_url="https://bugzilla.suse.com/1193575" source="BUGZILLA"/>
		<reference ref_id="1193669" ref_url="https://bugzilla.suse.com/1193669" source="BUGZILLA"/>
		<reference ref_id="1193727" ref_url="https://bugzilla.suse.com/1193727" source="BUGZILLA"/>
		<reference ref_id="1193731" ref_url="https://bugzilla.suse.com/1193731" source="BUGZILLA"/>
		<reference ref_id="1193767" ref_url="https://bugzilla.suse.com/1193767" source="BUGZILLA"/>
		<reference ref_id="1193861" ref_url="https://bugzilla.suse.com/1193861" source="BUGZILLA"/>
		<reference ref_id="1193864" ref_url="https://bugzilla.suse.com/1193864" source="BUGZILLA"/>
		<reference ref_id="1193867" ref_url="https://bugzilla.suse.com/1193867" source="BUGZILLA"/>
		<reference ref_id="1193927" ref_url="https://bugzilla.suse.com/1193927" source="BUGZILLA"/>
		<reference ref_id="1194001" ref_url="https://bugzilla.suse.com/1194001" source="BUGZILLA"/>
		<reference ref_id="1194048" ref_url="https://bugzilla.suse.com/1194048" source="BUGZILLA"/>
		<reference ref_id="1194087" ref_url="https://bugzilla.suse.com/1194087" source="BUGZILLA"/>
		<reference ref_id="1194227" ref_url="https://bugzilla.suse.com/1194227" source="BUGZILLA"/>
		<reference ref_id="1194302" ref_url="https://bugzilla.suse.com/1194302" source="BUGZILLA"/>
		<reference ref_id="1194516" ref_url="https://bugzilla.suse.com/1194516" source="BUGZILLA"/>
		<reference ref_id="1194529" ref_url="https://bugzilla.suse.com/1194529" source="BUGZILLA"/>
		<reference ref_id="1194880" ref_url="https://bugzilla.suse.com/1194880" source="BUGZILLA"/>
		<reference ref_id="1194888" ref_url="https://bugzilla.suse.com/1194888" source="BUGZILLA"/>
		<reference ref_id="1194985" ref_url="https://bugzilla.suse.com/1194985" source="BUGZILLA"/>
		<reference ref_id="1195166" ref_url="https://bugzilla.suse.com/1195166" source="BUGZILLA"/>
		<reference ref_id="1195254" ref_url="https://bugzilla.suse.com/1195254" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-25020" ref_url="https://www.suse.com/security/cve/CVE-2018-25020/" source="CVE"/>
		<reference ref_id="CVE-2019-15126" ref_url="https://www.suse.com/security/cve/CVE-2019-15126/" source="CVE"/>
		<reference ref_id="CVE-2020-27820" ref_url="https://www.suse.com/security/cve/CVE-2020-27820/" source="CVE"/>
		<reference ref_id="CVE-2021-0920" ref_url="https://www.suse.com/security/cve/CVE-2021-0920/" source="CVE"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="CVE-2021-28711" ref_url="https://www.suse.com/security/cve/CVE-2021-28711/" source="CVE"/>
		<reference ref_id="CVE-2021-28712" ref_url="https://www.suse.com/security/cve/CVE-2021-28712/" source="CVE"/>
		<reference ref_id="CVE-2021-28713" ref_url="https://www.suse.com/security/cve/CVE-2021-28713/" source="CVE"/>
		<reference ref_id="CVE-2021-28714" ref_url="https://www.suse.com/security/cve/CVE-2021-28714/" source="CVE"/>
		<reference ref_id="CVE-2021-28715" ref_url="https://www.suse.com/security/cve/CVE-2021-28715/" source="CVE"/>
		<reference ref_id="CVE-2021-33098" ref_url="https://www.suse.com/security/cve/CVE-2021-33098/" source="CVE"/>
		<reference ref_id="CVE-2021-3564" ref_url="https://www.suse.com/security/cve/CVE-2021-3564/" source="CVE"/>
		<reference ref_id="CVE-2021-39648" ref_url="https://www.suse.com/security/cve/CVE-2021-39648/" source="CVE"/>
		<reference ref_id="CVE-2021-39657" ref_url="https://www.suse.com/security/cve/CVE-2021-39657/" source="CVE"/>
		<reference ref_id="CVE-2021-4002" ref_url="https://www.suse.com/security/cve/CVE-2021-4002/" source="CVE"/>
		<reference ref_id="CVE-2021-4083" ref_url="https://www.suse.com/security/cve/CVE-2021-4083/" source="CVE"/>
		<reference ref_id="CVE-2021-4135" ref_url="https://www.suse.com/security/cve/CVE-2021-4135/" source="CVE"/>
		<reference ref_id="CVE-2021-4149" ref_url="https://www.suse.com/security/cve/CVE-2021-4149/" source="CVE"/>
		<reference ref_id="CVE-2021-4197" ref_url="https://www.suse.com/security/cve/CVE-2021-4197/" source="CVE"/>
		<reference ref_id="CVE-2021-4202" ref_url="https://www.suse.com/security/cve/CVE-2021-4202/" source="CVE"/>
		<reference ref_id="CVE-2021-43975" ref_url="https://www.suse.com/security/cve/CVE-2021-43975/" source="CVE"/>
		<reference ref_id="CVE-2021-43976" ref_url="https://www.suse.com/security/cve/CVE-2021-43976/" source="CVE"/>
		<reference ref_id="CVE-2021-44733" ref_url="https://www.suse.com/security/cve/CVE-2021-44733/" source="CVE"/>
		<reference ref_id="CVE-2021-45095" ref_url="https://www.suse.com/security/cve/CVE-2021-45095/" source="CVE"/>
		<reference ref_id="CVE-2021-45486" ref_url="https://www.suse.com/security/cve/CVE-2021-45486/" source="CVE"/>
		<reference ref_id="CVE-2022-0322" ref_url="https://www.suse.com/security/cve/CVE-2022-0322/" source="CVE"/>
		<reference ref_id="CVE-2022-0330" ref_url="https://www.suse.com/security/cve/CVE-2022-0330/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010214.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254).
- CVE-2022-0330: Fixed flush TLBs before releasing backing store (bsc#1194880).
- CVE-2021-45486: Fixed an information leak because the hash table is very small in net/ipv4/route.c (bnc#1194087).
- CVE-2021-45095: Fixed refcount leak in pep_sock_accept in net/phonet/pep.c (bnc#1193867).
- CVE-2021-44733: Fixed a use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem, that could have occured because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object (bnc#1193767).
- CVE-2021-43976: Fixed a flaw that could allow an attacker (who can connect a crafted USB device) to cause a denial of service. (bnc#1192847)
- CVE-2021-43975: Fixed a flaw in hw_atl_utils_fw_rpc_wait that could allow an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. (bsc#1192845)
- CVE-2021-4202: Fixed NFC race condition by adding NCI_UNREG flag (bsc#1194529).
- CVE-2021-4197: Use cgroup open-time credentials for process migraton perm checks (bsc#1194302).
- CVE-2021-4159: Fixed kernel ptr leak vulnerability via BPF in coerce_reg_to_size (bsc#1194227).
- CVE-2021-4149: Fixed btrfs unlock newly allocated extent buffer after error (bsc#1194001).
- CVE-2021-4135: Fixed zero-initialize memory inside netdevsim for new map's value in function nsim_bpf_map_alloc (bsc#1193927).
- CVE-2021-4083: Fixed a read-after-free memory flaw inside the garbage collection for Unix domain socket file handlers when users call close() and fget() simultaneouslyand can potentially trigger a race condition (bnc#1193727).
- CVE-2021-4002: Fixed incorrect TLBs flush in hugetlbfs after huge_pmd_unshare (bsc#1192946).
- CVE-2021-39657: Fixed out of bounds read due to a missing bounds check in ufshcd_eh_device_reset_handler of ufshcd.c. This could lead to local information disclosure with System execution privileges needed (bnc#1193864).
- CVE-2021-39648: Fixed possible disclosure of kernel heap memory due to a race condition in gadget_dev_desc_UDC_show of configfs.c. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1193861). 
- CVE-2021-3564: Fixed double-free memory corruption in the Linux kernel HCI device initialization subsystem that could have been used by attaching malicious HCI TTY Bluetooth devices. A local user could use this flaw to crash the system (bnc#1186207).
- CVE-2021-33098: Fixed a potential denial of service in Intel(R) Ethernet ixgbe driver due to improper input validation. (bsc#1192877)
- CVE-2021-28715: Fixed issue with xen/netback to do not queue unlimited number of packages (XSA-392) (bsc#1193442).
- CVE-2021-28714: Fixed issue with xen/netback to handle rx queue stall detection (XSA-392) (bsc#1193442).
- CVE-2021-28713: Fixed issue with xen/console to harden hvc_xen against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-28712: Fixed issue with xen/netfront to harden netfront against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-28711: Fixed issue with xen/blkfront to harden blkfront against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-0935: Fixed possible out of bounds write in ip6_xmit of ip6_output.c due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192032).
- CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1193731).
- CVE-2020-27820: Fixed a vulnerability where a use-after-frees in nouveau's postclose() handler could happen if removing device (bsc#1179599).
- CVE-2019-15126: Fixed a vulnerability in Broadcom and Cypress Wi-Fi chips, used in RPi family of devices aka 'Kr00k'. (bsc#1167162)
- CVE-2018-25020: Fixed an overflow in the BPF subsystem due to a mishandling of a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions. This affects kernel/bpf/core.c and net/core/filter.c (bnc#1193575).

The following non-security bugs were fixed:

- Bluetooth: fix the erroneous flush_work() order (git-fixes).
- Build: Add obsolete_rebuilds_subpackage (boo#1172073 bsc#1191731).
- ICMPv6: Add ICMPv6 Parameter Problem, code 3 definition (bsc#1191241 bsc#1195166).
- IPv6: reply ICMP error if the first fragment do not include all headers (bsc#1191241).
- elfcore: fix building with clang (bsc#1169514).
- hv_netvsc: Set needed_headroom according to VF (bsc#1193506).
- ipv6/netfilter: Discard first fragment not including all headers (bsc#1191241 bsc#1195166).
- kernel-*-subpackage: Add dependency on kernel scriptlets (bsc#1192740).
- kernel-binary.spec.in Stop templating the scriptlets for subpackages (bsc#1190358).
- kernel-binary.spec.in: add zstd to BuildRequires if used
- kernel-binary.spec.in: make sure zstd is supported by kmod if used
- kernel-binary.spec: Check for no kernel signing certificates. Also remove unused variable.
- kernel-binary.spec: Define $image as rpm macro (bsc#1189841).
- kernel-binary.spec: Do not fail silently when KMP is empty (bsc#1190358). Copy the code from kernel-module-subpackage that deals with empty KMPs.
- kernel-binary.spec: Do not sign kernel when no key provided (bsc#1187167).
- kernel-binary.spec: Fix kernel-default-base scriptlets after packaging merge.
- kernel-binary.spec: Require dwarves for kernel-binary-devel when BTF is enabled (jsc#SLE-17288).
- kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as well.
- kernel-cert-subpackage: Fix certificate location in scriptlets (bsc#1189841). 
- kernel-source.spec: install-kernel-tools also required on 15.4
- kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229). The semantic changed in an incompatible way so invoking the macro now causes a build failure.
- kprobes: Limit max data_size of the kretprobe instances (bsc#1193669).
- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- memstick: rtsx_usb_ms: fix UAF (bsc#1194516).
- moxart: fix potential use-after-free on remove path (bsc#1194516).
- net, xdp: Introduce xdp_init_buff utility routine (bsc#1193506).
- net, xdp: Introduce xdp_prepare_buff utility routine (bsc#1193506).
- net: Using proper atomic helper (bsc#1186222).
- net: ipv6: Discard next-hop MTU less than minimum link MTU (bsc#1191241).
- net: mana: Add RX fencing (bsc#1193506).
- net: mana: Add XDP support (bsc#1193506).
- net: mana: Allow setting the number of queues while the NIC is down (bsc#1193506).
- net: mana: Fix spelling mistake 'calledd' -&gt; 'called' (bsc#1193506).
- net: mana: Fix the netdev_err()'s vPort argument in mana_init_port() (bsc#1193506).
- net: mana: Improve the HWC error handling (bsc#1193506).
- net: mana: Support hibernation and kexec (bsc#1193506).
- net: mana: Use kcalloc() instead of kzalloc() (bsc#1193506).
- objtool: Support Clang non-section symbols in ORC generation (bsc#1169514).
- post.sh: detect /usr mountpoint too
- recordmcount.pl: fix typo in s390 mcount regex (bsc#1192267).
- recordmcount.pl: look for jgnop instruction as well as bcrl on s390 (bsc#1192267).
- rpm/kernel-binary.spec.in: Use kmod-zstd provide. This makes it possible to use kmod with ZSTD support on non-Tumbleweed.
- rpm/kernel-binary.spec.in: avoid conflicting suse-release suse-release had arbitrary values in staging, we can't use it for dependencies. The filesystem one has to be enough (boo#1184804).
- rpm/kernel-binary.spec.in: do not strip vmlinux again (bsc#1193306). 
- rpm/kernel-binary.spec: Use only non-empty certificates.
- rpm/kernel-obs-build.spec.in: make builds reproducible (bsc#1189305).
- rpm/kernel-source.rpmlintrc: ignore new include/config files. 
- rpm/kernel-source.spec.in: do some more for vanilla_only.
- rpm: Abolish image suffix (bsc#1189841).
- rpm: Abolish scritplet templating (bsc#1189841). Outsource kernel-binary and KMP scriptlets to suse-module-tools. 
- rpm: Define $certs as rpm macro (bsc#1189841). 
- rpm: Fold kernel-devel and kernel-source scriptlets into spec files (bsc#1189841). 
- rpm: fix kmp install path
- rpm: use _rpmmacrodir (boo#1191384)
- tty: hvc: replace BUG_ON() with negative return value.
- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- x86/xen: Mark cpu_bringup_and_idle() as dead_end_function (bsc#1169514).
- xen/blkfront: do not take local copy of a request from the ring page (git-fixes).
- xen/blkfront: do not trust the backend response data blindly (git-fixes).
- xen/blkfront: read response from backend only once (git-fixes).
- xen/netfront: disentangle tx_skb_freelist (git-fixes).
- xen/netfront: do not read data from request on the ring page (git-fixes).
- xen/netfront: do not trust the backend response data blindly (git-fixes).
- xen/netfront: read response from backend only once (git-fixes).
- xen: sync include/xen/interface/io/ring.h with Xen's newest version (git-fixes).
- xfrm: fix MTU regression (bsc#1185377, bsc#1194048).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-10"/>
	<updated date="2022-02-10"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124431">SUSE bug 1124431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167162">SUSE bug 1167162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179599">SUSE bug 1179599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184804">SUSE bug 1184804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185377">SUSE bug 1185377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186207">SUSE bug 1186207</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186222">SUSE bug 1186222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187167">SUSE bug 1187167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189305">SUSE bug 1189305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189841">SUSE bug 1189841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190358">SUSE bug 1190358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190428">SUSE bug 1190428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191229">SUSE bug 1191229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191241">SUSE bug 1191241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191384">SUSE bug 1191384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191731">SUSE bug 1191731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192032">SUSE bug 1192032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192740">SUSE bug 1192740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192845">SUSE bug 1192845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192847">SUSE bug 1192847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192877">SUSE bug 1192877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192946">SUSE bug 1192946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193306">SUSE bug 1193306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193440">SUSE bug 1193440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193442">SUSE bug 1193442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193575">SUSE bug 1193575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193669">SUSE bug 1193669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193727">SUSE bug 1193727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193731">SUSE bug 1193731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193767">SUSE bug 1193767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193861">SUSE bug 1193861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193864">SUSE bug 1193864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193867">SUSE bug 1193867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193927">SUSE bug 1193927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194001">SUSE bug 1194001</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194048">SUSE bug 1194048</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194087">SUSE bug 1194087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194227">SUSE bug 1194227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194302">SUSE bug 1194302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194516">SUSE bug 1194516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194529">SUSE bug 1194529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194880">SUSE bug 1194880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194888">SUSE bug 1194888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194985">SUSE bug 1194985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195166">SUSE bug 1195166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195254">SUSE bug 1195254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25020/">CVE-2018-25020</cve>
	<cve impact="important" cvss3="3.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15126/">CVE-2019-15126</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-27820/">CVE-2020-27820</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0920/">CVE-2021-0920</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28711/">CVE-2021-28711</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28712/">CVE-2021-28712</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28713/">CVE-2021-28713</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28714/">CVE-2021-28714</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28715/">CVE-2021-28715</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33098/">CVE-2021-33098</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3564/">CVE-2021-3564</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39648/">CVE-2021-39648</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-39657/">CVE-2021-39657</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4002/">CVE-2021-4002</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4083/">CVE-2021-4083</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-4135/">CVE-2021-4135</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4149/">CVE-2021-4149</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-4197/">CVE-2021-4197</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4202/">CVE-2021-4202</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43975/">CVE-2021-43975</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43976/">CVE-2021-43976</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-44733/">CVE-2021-44733</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-45095/">CVE-2021-45095</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-45486/">CVE-2021-45486</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0322/">CVE-2022-0322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0330/">CVE-2022-0330</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667048" comment="cluster-md-kmp-default-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667049" comment="dlm-kmp-default-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667050" comment="gfs2-kmp-default-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667051" comment="ocfs2-kmp-default-4.12.14-197.105.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139182" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1199564" ref_url="https://bugzilla.suse.com/1199564" source="BUGZILLA"/>
		<reference ref_id="1200288" ref_url="https://bugzilla.suse.com/1200288" source="BUGZILLA"/>
		<reference ref_id="1201309" ref_url="https://bugzilla.suse.com/1201309" source="BUGZILLA"/>
		<reference ref_id="1202677" ref_url="https://bugzilla.suse.com/1202677" source="BUGZILLA"/>
		<reference ref_id="1202960" ref_url="https://bugzilla.suse.com/1202960" source="BUGZILLA"/>
		<reference ref_id="1203552" ref_url="https://bugzilla.suse.com/1203552" source="BUGZILLA"/>
		<reference ref_id="1203769" ref_url="https://bugzilla.suse.com/1203769" source="BUGZILLA"/>
		<reference ref_id="1203987" ref_url="https://bugzilla.suse.com/1203987" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-20008" ref_url="https://www.suse.com/security/cve/CVE-2022-20008/" source="CVE"/>
		<reference ref_id="CVE-2022-2503" ref_url="https://www.suse.com/security/cve/CVE-2022-2503/" source="CVE"/>
		<reference ref_id="CVE-2022-32296" ref_url="https://www.suse.com/security/cve/CVE-2022-32296/" source="CVE"/>
		<reference ref_id="CVE-2022-3239" ref_url="https://www.suse.com/security/cve/CVE-2022-3239/" source="CVE"/>
		<reference ref_id="CVE-2022-3303" ref_url="https://www.suse.com/security/cve/CVE-2022-3303/" source="CVE"/>
		<reference ref_id="CVE-2022-41218" ref_url="https://www.suse.com/security/cve/CVE-2022-41218/" source="CVE"/>
		<reference ref_id="CVE-2022-41848" ref_url="https://www.suse.com/security/cve/CVE-2022-41848/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012617.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-20008: Fixed local information disclosure due to possibility to read kernel heap memory via mmc_blk_read_single of block.c (bnc#1199564).
- CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677).
- CVE-2022-32296: Fixed vulnerability where TCP servers were allowed to identify clients by observing what source ports are used (bnc#1200288).
- CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
- CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
- CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
- CVE-2022-41848: Fixed a race condition in drivers/char/pcmcia/synclink_cs.c mgslpc_ioctl and mgslpc_detach (bnc#1203987).

The following non-security bugs were fixed:

- dtb: Do not include sources in src.rpm - refer to kernel-source Same as other kernel binary packages there is no need to carry duplicate sources in dtb packages.
- mkspec: eliminate @NOSOURCE@ macro This should be alsways used with @SOURCES@, just include the content there.
- net: mana: Add rmb after checking owner bits (git-fixes).
- net: mana: Add the Linux MANA PF driver (bnc#1201309, jsc#PED-529).
- x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still be possible to do so that the mitigation can still be disabled on Intel who do not use the return thunks but IBRS.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-22"/>
	<updated date="2022-10-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199564">SUSE bug 1199564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200288">SUSE bug 1200288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201309">SUSE bug 1201309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202677">SUSE bug 1202677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202960">SUSE bug 1202960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203552">SUSE bug 1203552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203769">SUSE bug 1203769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203987">SUSE bug 1203987</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-20008/">CVE-2022-20008</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2503/">CVE-2022-2503</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32296/">CVE-2022-32296</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3239/">CVE-2022-3239</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3303/">CVE-2022-3303</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41218/">CVE-2022-41218</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41848/">CVE-2022-41848</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716961" comment="cluster-md-kmp-default-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716962" comment="dlm-kmp-default-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716963" comment="gfs2-kmp-default-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716964" comment="ocfs2-kmp-default-4.12.14-150100.197.126.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139183" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-loofah (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1154751" ref_url="https://bugzilla.suse.com/1154751" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15587" ref_url="https://www.suse.com/security/cve/CVE-2019-15587/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012810.html" source="SUSE-SU"/>
		<description>
This update for rubygem-loofah fixes the following issues:

  - CVE-2019-15587: Fixed issue in sanitization of crafted SVG elements (bsc#1154751).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-04"/>
	<updated date="2022-11-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1154751">SUSE bug 1154751</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-15587/">CVE-2019-15587</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721356" comment="ruby2.5-rubygem-loofah-2.2.2-150000.4.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139184" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-nokogiri (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1198408" ref_url="https://bugzilla.suse.com/1198408" source="BUGZILLA"/>
		<reference ref_id="1199782" ref_url="https://bugzilla.suse.com/1199782" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24836" ref_url="https://www.suse.com/security/cve/CVE-2022-24836/" source="CVE"/>
		<reference ref_id="CVE-2022-29181" ref_url="https://www.suse.com/security/cve/CVE-2022-29181/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4015-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012945.html" source="SUSE-SU"/>
		<description>
This update for rubygem-nokogiri fixes the following issues:

- CVE-2022-24836: Fixes possibility to DoS because of inefficient RE in HTML encoding. (bsc#1198408)
- CVE-2022-29181: Fixes Improper Handling of Unexpected Data Typesi. (bsc#1199782)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-16"/>
	<updated date="2022-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198408">SUSE bug 1198408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199782">SUSE bug 1199782</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-24836/">CVE-2022-24836</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-29181/">CVE-2022-29181</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009722263" comment="ruby2.5-rubygem-nokogiri-1.8.5-150000.3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139185" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1198702" ref_url="https://bugzilla.suse.com/1198702" source="BUGZILLA"/>
		<reference ref_id="1199365" ref_url="https://bugzilla.suse.com/1199365" source="BUGZILLA"/>
		<reference ref_id="1200788" ref_url="https://bugzilla.suse.com/1200788" source="BUGZILLA"/>
		<reference ref_id="1200845" ref_url="https://bugzilla.suse.com/1200845" source="BUGZILLA"/>
		<reference ref_id="1201455" ref_url="https://bugzilla.suse.com/1201455" source="BUGZILLA"/>
		<reference ref_id="1202686" ref_url="https://bugzilla.suse.com/1202686" source="BUGZILLA"/>
		<reference ref_id="1203008" ref_url="https://bugzilla.suse.com/1203008" source="BUGZILLA"/>
		<reference ref_id="1203183" ref_url="https://bugzilla.suse.com/1203183" source="BUGZILLA"/>
		<reference ref_id="1203290" ref_url="https://bugzilla.suse.com/1203290" source="BUGZILLA"/>
		<reference ref_id="1203322" ref_url="https://bugzilla.suse.com/1203322" source="BUGZILLA"/>
		<reference ref_id="1203514" ref_url="https://bugzilla.suse.com/1203514" source="BUGZILLA"/>
		<reference ref_id="1203860" ref_url="https://bugzilla.suse.com/1203860" source="BUGZILLA"/>
		<reference ref_id="1203960" ref_url="https://bugzilla.suse.com/1203960" source="BUGZILLA"/>
		<reference ref_id="1204017" ref_url="https://bugzilla.suse.com/1204017" source="BUGZILLA"/>
		<reference ref_id="1204166" ref_url="https://bugzilla.suse.com/1204166" source="BUGZILLA"/>
		<reference ref_id="1204170" ref_url="https://bugzilla.suse.com/1204170" source="BUGZILLA"/>
		<reference ref_id="1204354" ref_url="https://bugzilla.suse.com/1204354" source="BUGZILLA"/>
		<reference ref_id="1204355" ref_url="https://bugzilla.suse.com/1204355" source="BUGZILLA"/>
		<reference ref_id="1204402" ref_url="https://bugzilla.suse.com/1204402" source="BUGZILLA"/>
		<reference ref_id="1204414" ref_url="https://bugzilla.suse.com/1204414" source="BUGZILLA"/>
		<reference ref_id="1204415" ref_url="https://bugzilla.suse.com/1204415" source="BUGZILLA"/>
		<reference ref_id="1204424" ref_url="https://bugzilla.suse.com/1204424" source="BUGZILLA"/>
		<reference ref_id="1204431" ref_url="https://bugzilla.suse.com/1204431" source="BUGZILLA"/>
		<reference ref_id="1204432" ref_url="https://bugzilla.suse.com/1204432" source="BUGZILLA"/>
		<reference ref_id="1204439" ref_url="https://bugzilla.suse.com/1204439" source="BUGZILLA"/>
		<reference ref_id="1204446" ref_url="https://bugzilla.suse.com/1204446" source="BUGZILLA"/>
		<reference ref_id="1204479" ref_url="https://bugzilla.suse.com/1204479" source="BUGZILLA"/>
		<reference ref_id="1204574" ref_url="https://bugzilla.suse.com/1204574" source="BUGZILLA"/>
		<reference ref_id="1204576" ref_url="https://bugzilla.suse.com/1204576" source="BUGZILLA"/>
		<reference ref_id="1204631" ref_url="https://bugzilla.suse.com/1204631" source="BUGZILLA"/>
		<reference ref_id="1204635" ref_url="https://bugzilla.suse.com/1204635" source="BUGZILLA"/>
		<reference ref_id="1204636" ref_url="https://bugzilla.suse.com/1204636" source="BUGZILLA"/>
		<reference ref_id="1204646" ref_url="https://bugzilla.suse.com/1204646" source="BUGZILLA"/>
		<reference ref_id="1204647" ref_url="https://bugzilla.suse.com/1204647" source="BUGZILLA"/>
		<reference ref_id="1204653" ref_url="https://bugzilla.suse.com/1204653" source="BUGZILLA"/>
		<reference ref_id="1204850" ref_url="https://bugzilla.suse.com/1204850" source="BUGZILLA"/>
		<reference ref_id="1204868" ref_url="https://bugzilla.suse.com/1204868" source="BUGZILLA"/>
		<reference ref_id="1205006" ref_url="https://bugzilla.suse.com/1205006" source="BUGZILLA"/>
		<reference ref_id="1205128" ref_url="https://bugzilla.suse.com/1205128" source="BUGZILLA"/>
		<reference ref_id="1205220" ref_url="https://bugzilla.suse.com/1205220" source="BUGZILLA"/>
		<reference ref_id="1205473" ref_url="https://bugzilla.suse.com/1205473" source="BUGZILLA"/>
		<reference ref_id="1205514" ref_url="https://bugzilla.suse.com/1205514" source="BUGZILLA"/>
		<reference ref_id="1205617" ref_url="https://bugzilla.suse.com/1205617" source="BUGZILLA"/>
		<reference ref_id="1205671" ref_url="https://bugzilla.suse.com/1205671" source="BUGZILLA"/>
		<reference ref_id="1205796" ref_url="https://bugzilla.suse.com/1205796" source="BUGZILLA"/>
		<reference ref_id="1206113" ref_url="https://bugzilla.suse.com/1206113" source="BUGZILLA"/>
		<reference ref_id="1206114" ref_url="https://bugzilla.suse.com/1206114" source="BUGZILLA"/>
		<reference ref_id="1206207" ref_url="https://bugzilla.suse.com/1206207" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4037" ref_url="https://www.suse.com/security/cve/CVE-2021-4037/" source="CVE"/>
		<reference ref_id="CVE-2022-2153" ref_url="https://www.suse.com/security/cve/CVE-2022-2153/" source="CVE"/>
		<reference ref_id="CVE-2022-28693" ref_url="https://www.suse.com/security/cve/CVE-2022-28693/" source="CVE"/>
		<reference ref_id="CVE-2022-2964" ref_url="https://www.suse.com/security/cve/CVE-2022-2964/" source="CVE"/>
		<reference ref_id="CVE-2022-3169" ref_url="https://www.suse.com/security/cve/CVE-2022-3169/" source="CVE"/>
		<reference ref_id="CVE-2022-3424" ref_url="https://www.suse.com/security/cve/CVE-2022-3424/" source="CVE"/>
		<reference ref_id="CVE-2022-3521" ref_url="https://www.suse.com/security/cve/CVE-2022-3521/" source="CVE"/>
		<reference ref_id="CVE-2022-3524" ref_url="https://www.suse.com/security/cve/CVE-2022-3524/" source="CVE"/>
		<reference ref_id="CVE-2022-3542" ref_url="https://www.suse.com/security/cve/CVE-2022-3542/" source="CVE"/>
		<reference ref_id="CVE-2022-3545" ref_url="https://www.suse.com/security/cve/CVE-2022-3545/" source="CVE"/>
		<reference ref_id="CVE-2022-3565" ref_url="https://www.suse.com/security/cve/CVE-2022-3565/" source="CVE"/>
		<reference ref_id="CVE-2022-3567" ref_url="https://www.suse.com/security/cve/CVE-2022-3567/" source="CVE"/>
		<reference ref_id="CVE-2022-3586" ref_url="https://www.suse.com/security/cve/CVE-2022-3586/" source="CVE"/>
		<reference ref_id="CVE-2022-3594" ref_url="https://www.suse.com/security/cve/CVE-2022-3594/" source="CVE"/>
		<reference ref_id="CVE-2022-3621" ref_url="https://www.suse.com/security/cve/CVE-2022-3621/" source="CVE"/>
		<reference ref_id="CVE-2022-3628" ref_url="https://www.suse.com/security/cve/CVE-2022-3628/" source="CVE"/>
		<reference ref_id="CVE-2022-3629" ref_url="https://www.suse.com/security/cve/CVE-2022-3629/" source="CVE"/>
		<reference ref_id="CVE-2022-3635" ref_url="https://www.suse.com/security/cve/CVE-2022-3635/" source="CVE"/>
		<reference ref_id="CVE-2022-3643" ref_url="https://www.suse.com/security/cve/CVE-2022-3643/" source="CVE"/>
		<reference ref_id="CVE-2022-3646" ref_url="https://www.suse.com/security/cve/CVE-2022-3646/" source="CVE"/>
		<reference ref_id="CVE-2022-3649" ref_url="https://www.suse.com/security/cve/CVE-2022-3649/" source="CVE"/>
		<reference ref_id="CVE-2022-3903" ref_url="https://www.suse.com/security/cve/CVE-2022-3903/" source="CVE"/>
		<reference ref_id="CVE-2022-40307" ref_url="https://www.suse.com/security/cve/CVE-2022-40307/" source="CVE"/>
		<reference ref_id="CVE-2022-40768" ref_url="https://www.suse.com/security/cve/CVE-2022-40768/" source="CVE"/>
		<reference ref_id="CVE-2022-4095" ref_url="https://www.suse.com/security/cve/CVE-2022-4095/" source="CVE"/>
		<reference ref_id="CVE-2022-41850" ref_url="https://www.suse.com/security/cve/CVE-2022-41850/" source="CVE"/>
		<reference ref_id="CVE-2022-41858" ref_url="https://www.suse.com/security/cve/CVE-2022-41858/" source="CVE"/>
		<reference ref_id="CVE-2022-42328" ref_url="https://www.suse.com/security/cve/CVE-2022-42328/" source="CVE"/>
		<reference ref_id="CVE-2022-42329" ref_url="https://www.suse.com/security/cve/CVE-2022-42329/" source="CVE"/>
		<reference ref_id="CVE-2022-42703" ref_url="https://www.suse.com/security/cve/CVE-2022-42703/" source="CVE"/>
		<reference ref_id="CVE-2022-42895" ref_url="https://www.suse.com/security/cve/CVE-2022-42895/" source="CVE"/>
		<reference ref_id="CVE-2022-42896" ref_url="https://www.suse.com/security/cve/CVE-2022-42896/" source="CVE"/>
		<reference ref_id="CVE-2022-43750" ref_url="https://www.suse.com/security/cve/CVE-2022-43750/" source="CVE"/>
		<reference ref_id="CVE-2022-4378" ref_url="https://www.suse.com/security/cve/CVE-2022-4378/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="CVE-2022-45934" ref_url="https://www.suse.com/security/cve/CVE-2022-45934/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013279.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-42328: Guests could trigger denial of service via the netback driver (bsc#1206114).
- CVE-2022-42329: Guests could trigger denial of service via the netback driver (bsc#1206113).
- CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver (bsc#1206113).
- CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631).
- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1204166).
- CVE-2022-41850: Fixed a race condition in roccat_report_event() in drivers/hid/hid-roccat.c (bsc#1203960).
- CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in net/bluetooth/l2cap_core.c (bsc#1205796).
- CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wifi/brcmfmac (bsc#1204868).
- CVE-2022-3567: Fixed a to race condition in inet6_stream_ops()/inet6_dgram_ops() (bsc#1204414).
- CVE-2022-41858: Fixed a denial of service in sl_tx_timeout() in drivers/net/slip (bsc#1205671).
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).
- CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).
- CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).
- CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set (bsc#1198702).
- CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's internal memory (bsc#1204653).
- CVE-2022-3542: Fixed memory leak in bnx2x_tpa_stop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c (bsc#1204402).
- CVE-2022-3629: Fixed memory leak in vsock_connect() in net/vmw_vsock/af_vsock.c (bsc#1204635).
- CVE-2022-3646: Fixed memory leak in nilfs_attach_log_writer() in fs/nilfs2/segment.c (bsc#1204646).
- CVE-2022-3649: Fixed use-after-free in nilfs_new_inode() in fs/nilfs2/inode.c (bsc#1204647).
- CVE-2022-3621: Fixed null pointer dereference in nilfs_bmap_lookup_at_level() in fs/nilfs2/inode.c (bsc#1204574).
- CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bsc#1204479).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3565: Fixed use-after-free in del_timer() in drivers/isdn/mISDN/l1oip_core.c (bsc#1204431).
- CVE-2022-3524: Fixed memory leak in ipv6_renew_options() in the IPv6 handler (bsc#1204354).
- CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory (bsc#1203514).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bsc#1204168).
- CVE-2022-3169: Fixed an denial of service though request to NVME_IOCTL_RESET and NVME_IOCTL_SUBSYS_RESET (bsc#1203290).
- CVE-2022-40307: Fixed a race condition that could had been exploited to trigger a use-after-free in the efi firmware capsule-loader.c (bsc#1203322).
- CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2cap_core.c's l2cap_parse_conf_req() which can be used to leak kernel pointers remotely (bsc#1205705).
- CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2cap_core.c's l2cap_connect() and l2cap_le_connect_req() which may have allowed code execution and leaking kernel memory (respectively) remotely via Bluetooth (bsc#1205709).
- CVE-2022-3545: Fixed a use-after-free vulnerability is area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-3521: Fixed a race condition in kcm_tx_work() of the file net/kcm/kcmsock.c (bsc#1204355).
- CVE-2022-2153: Fixed a NULL pointer dereference in KVM when attempting to set a SynIC IRQ (bsc#1200788).

The following non-security bugs were fixed:

- Drivers: hv: vmbus: Add VMbus IMC device to unsupported list (git-fixes).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Drop error message when 'No request id available' (bsc#1204017).
- Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (git-fixes).
- Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero (bsc#1204017).
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (git-fixes).
- Drivers: hv: vmbus: Fix potential crash on module unload (git-fixes).
- Drivers: hv: vmbus: Introduce {lock,unlock}_requestor() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Introduce vmbus_request_addr_match() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Introduce vmbus_sendpacket_getid() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Move __vmbus_open() (bsc#1204017).
- Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (git-fixes).
- hv_netvsc: Add check for kvmalloc_array (git-fixes).
- hv_netvsc: Add error handling while switching data path (bsc#1204850).
- hv_netvsc: Add validation for untrusted Hyper-V values (bsc#1204017).
- hv_netvsc: Cache the current data path to avoid duplicate call and message (bsc#1204017).
- hv_netvsc: Check VF datapath when sending traffic to VF (bsc#1204017).
- hv_netvsc: Fix error handling in netvsc_set_features() (git-fixes).
- hv_netvsc: Fix race between VF offering and VF association message from host (bsc#1204850).
- hv_netvsc: Print value of invalid ID in netvsc_send_{completion,tx_complete}() (bsc#1204017).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove (bsc#1204850).
- hv_netvsc: Remove unnecessary round_up for recv_completion_cnt (bsc#1204017).
- hv_netvsc: Reset the RSC count if NVSP_STAT_FAIL in netvsc_receive() (bsc#1204017).
- hv_netvsc: Sync offloading features to VF NIC (git-fixes).
- hv_netvsc: use netif_is_bond_master() instead of open code (git-fixes).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening (bsc#1204017).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH (bsc#1204017).
- ipv6: ping: fix wrong checksum for large frames (bsc#1203183).
- net: hyperv: remove use of bpf_op_t (git-fixes).
- net: netvsc: remove break after return (git-fixes).
- PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv() (bsc#1204446).
- PCI: hv: Add validation for untrusted Hyper-V values (bsc#1204017).
- PCI: hv: Drop msi_controller structure (bsc#1204446).
- PCI: hv: Fix a race condition when removing the device (bsc#1204446).
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (bsc#1200845).
- PCI: hv: Fix interrupt mapping for multi-MSI (bsc#1200845).
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (bsc#1200845).
- PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology (bsc#1199365).
- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (bsc#1204446).
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (bsc#1204017, bsc#1203860, bsc#1205617).
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (bsc#1204017, bsc#1205617).
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (bsc#1200845).
- PCI: hv: Make the code arch neutral by adding arch specific interfaces (bsc#1200845).
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (bsc#1200845).
- PCI: hv: Remove bus device removal unused refcount/functions (bsc#1204446).
- PCI: hv: Remove unnecessary use of %hx (bsc#1204446).
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (bsc#1200845).
- PCI: hv: Support for create interrupt v3 (git-fixes).
- PCI: hv: Use struct_size() helper (bsc#1204446).
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (bsc#1204017).
- Revert 'scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback()' (bsc#1204017).
- scsi: storvsc: Drop DID_TARGET_FAILURE use (git-fixes).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8 and newer (bsc#1204017).
- scsi: storvsc: Fix validation for unsolicited incoming packets (bsc#1204017).
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (git-fixes).
- scsi: storvsc: Resolve data race in storvsc_probe() (bsc#1204017).
- scsi: storvsc: Use blk_mq_unique_tag() to generate requestIDs (bsc#1204017).
- scsi: storvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening (bsc#1204017).
- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1204017).
- sunrpc: Re-purpose trace_svc_process (bsc#1205006).
- x86/cpu: Restore AMD's DE_CFG MSR after resume (bsc#1205473).
- x86/hyperv: Output host build info as normal Windows version number (git-fixes).
- x86/hyperv: Set pv_info.name to 'Hyper-V' (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-19"/>
	<updated date="2022-12-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198702">SUSE bug 1198702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199365">SUSE bug 1199365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200788">SUSE bug 1200788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200845">SUSE bug 1200845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201455">SUSE bug 1201455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202686">SUSE bug 1202686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203008">SUSE bug 1203008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203183">SUSE bug 1203183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203290">SUSE bug 1203290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203322">SUSE bug 1203322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203514">SUSE bug 1203514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203860">SUSE bug 1203860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203960">SUSE bug 1203960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204017">SUSE bug 1204017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204166">SUSE bug 1204166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204170">SUSE bug 1204170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204354">SUSE bug 1204354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204355">SUSE bug 1204355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204402">SUSE bug 1204402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204414">SUSE bug 1204414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204415">SUSE bug 1204415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204424">SUSE bug 1204424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204431">SUSE bug 1204431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204432">SUSE bug 1204432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204439">SUSE bug 1204439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204446">SUSE bug 1204446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204479">SUSE bug 1204479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204574">SUSE bug 1204574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204576">SUSE bug 1204576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204631">SUSE bug 1204631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204635">SUSE bug 1204635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204636">SUSE bug 1204636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204646">SUSE bug 1204646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204647">SUSE bug 1204647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204653">SUSE bug 1204653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204850">SUSE bug 1204850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204868">SUSE bug 1204868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205006">SUSE bug 1205006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205128">SUSE bug 1205128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205220">SUSE bug 1205220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205473">SUSE bug 1205473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205514">SUSE bug 1205514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205617">SUSE bug 1205617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205671">SUSE bug 1205671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205796">SUSE bug 1205796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206113">SUSE bug 1206113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206114">SUSE bug 1206114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206207">SUSE bug 1206207</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4037/">CVE-2021-4037</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2153/">CVE-2022-2153</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28693/">CVE-2022-28693</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2964/">CVE-2022-2964</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3169/">CVE-2022-3169</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3424/">CVE-2022-3424</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3521/">CVE-2022-3521</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3524/">CVE-2022-3524</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3542/">CVE-2022-3542</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3545/">CVE-2022-3545</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3565/">CVE-2022-3565</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3567/">CVE-2022-3567</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3586/">CVE-2022-3586</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3594/">CVE-2022-3594</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3621/">CVE-2022-3621</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3628/">CVE-2022-3628</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3629/">CVE-2022-3629</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3635/">CVE-2022-3635</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-3643/">CVE-2022-3643</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3646/">CVE-2022-3646</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3649/">CVE-2022-3649</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3903/">CVE-2022-3903</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40307/">CVE-2022-40307</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40768/">CVE-2022-40768</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4095/">CVE-2022-4095</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-41850/">CVE-2022-41850</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41858/">CVE-2022-41858</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42328/">CVE-2022-42328</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42329/">CVE-2022-42329</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42703/">CVE-2022-42703</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42895/">CVE-2022-42895</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-42896/">CVE-2022-42896</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43750/">CVE-2022-43750</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4378/">CVE-2022-4378</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-45934/">CVE-2022-45934</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728724" comment="cluster-md-kmp-default-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728725" comment="dlm-kmp-default-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728726" comment="gfs2-kmp-default-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728727" comment="ocfs2-kmp-default-4.12.14-150100.197.131.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139186" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1185973" ref_url="https://bugzilla.suse.com/1185973" source="BUGZILLA"/>
		<reference ref_id="1191580" ref_url="https://bugzilla.suse.com/1191580" source="BUGZILLA"/>
		<reference ref_id="1194516" ref_url="https://bugzilla.suse.com/1194516" source="BUGZILLA"/>
		<reference ref_id="1195536" ref_url="https://bugzilla.suse.com/1195536" source="BUGZILLA"/>
		<reference ref_id="1195543" ref_url="https://bugzilla.suse.com/1195543" source="BUGZILLA"/>
		<reference ref_id="1195612" ref_url="https://bugzilla.suse.com/1195612" source="BUGZILLA"/>
		<reference ref_id="1195840" ref_url="https://bugzilla.suse.com/1195840" source="BUGZILLA"/>
		<reference ref_id="1195897" ref_url="https://bugzilla.suse.com/1195897" source="BUGZILLA"/>
		<reference ref_id="1195908" ref_url="https://bugzilla.suse.com/1195908" source="BUGZILLA"/>
		<reference ref_id="1195949" ref_url="https://bugzilla.suse.com/1195949" source="BUGZILLA"/>
		<reference ref_id="1195987" ref_url="https://bugzilla.suse.com/1195987" source="BUGZILLA"/>
		<reference ref_id="1196079" ref_url="https://bugzilla.suse.com/1196079" source="BUGZILLA"/>
		<reference ref_id="1196155" ref_url="https://bugzilla.suse.com/1196155" source="BUGZILLA"/>
		<reference ref_id="1196584" ref_url="https://bugzilla.suse.com/1196584" source="BUGZILLA"/>
		<reference ref_id="1196612" ref_url="https://bugzilla.suse.com/1196612" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44879" ref_url="https://www.suse.com/security/cve/CVE-2021-44879/" source="CVE"/>
		<reference ref_id="CVE-2022-0001" ref_url="https://www.suse.com/security/cve/CVE-2022-0001/" source="CVE"/>
		<reference ref_id="CVE-2022-0002" ref_url="https://www.suse.com/security/cve/CVE-2022-0002/" source="CVE"/>
		<reference ref_id="CVE-2022-0487" ref_url="https://www.suse.com/security/cve/CVE-2022-0487/" source="CVE"/>
		<reference ref_id="CVE-2022-0492" ref_url="https://www.suse.com/security/cve/CVE-2022-0492/" source="CVE"/>
		<reference ref_id="CVE-2022-0617" ref_url="https://www.suse.com/security/cve/CVE-2022-0617/" source="CVE"/>
		<reference ref_id="CVE-2022-0644" ref_url="https://www.suse.com/security/cve/CVE-2022-0644/" source="CVE"/>
		<reference ref_id="CVE-2022-0847" ref_url="https://www.suse.com/security/cve/CVE-2022-0847/" source="CVE"/>
		<reference ref_id="CVE-2022-24448" ref_url="https://www.suse.com/security/cve/CVE-2022-24448/" source="CVE"/>
		<reference ref_id="CVE-2022-24959" ref_url="https://www.suse.com/security/cve/CVE-2022-24959/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010395.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


Transient execution side-channel attacks attacking the Branch History Buffer (BHB),
named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.

The following security bugs were fixed:

- CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).
- CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).
- CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584).
- CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079)
- CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd() (bsc#1196155).
- CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987).
- CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897).
- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
- CVE-2022-24448: Fixed an issue in fs/nfs/dir.c. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612).


The following non-security bugs were fixed:

- crypto: af_alg - get_page upon reassignment to TX SGL (bsc#1195840).
- lib/iov_iter: initialize 'flags' in new pipe_buffer (bsc#1196584).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185973">SUSE bug 1185973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191580">SUSE bug 1191580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194516">SUSE bug 1194516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195536">SUSE bug 1195536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195543">SUSE bug 1195543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195612">SUSE bug 1195612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195840">SUSE bug 1195840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195897">SUSE bug 1195897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195908">SUSE bug 1195908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195949">SUSE bug 1195949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195987">SUSE bug 1195987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196079">SUSE bug 1196079</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196155">SUSE bug 1196155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196584">SUSE bug 1196584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196612">SUSE bug 1196612</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-44879/">CVE-2021-44879</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0001/">CVE-2022-0001</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0002/">CVE-2022-0002</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0487/">CVE-2022-0487</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0492/">CVE-2022-0492</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0617/">CVE-2022-0617</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0644/">CVE-2022-0644</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0847/">CVE-2022-0847</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-24448/">CVE-2022-24448</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-24959/">CVE-2022-24959</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671438" comment="cluster-md-kmp-default-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671439" comment="dlm-kmp-default-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671440" comment="gfs2-kmp-default-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671441" comment="ocfs2-kmp-default-4.12.14-197.108.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139187" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-websocket-extensions (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1172445" ref_url="https://bugzilla.suse.com/1172445" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7663" ref_url="https://www.suse.com/security/cve/CVE-2020-7663/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0127-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013515.html" source="SUSE-SU"/>
		<description>
This update for rubygem-websocket-extensions fixes the following issues:

- CVE-2020-7663: Fixed an excessive resource consumption when parsing
  crafted message headers sent by an attacker (bsc#1172445).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-24"/>
	<updated date="2023-01-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1172445">SUSE bug 1172445</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7663/">CVE-2020-7663</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732633" comment="ruby2.5-rubygem-websocket-extensions-0.1.3-150000.3.4.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139188" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-loofah (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1206415" ref_url="https://bugzilla.suse.com/1206415" source="BUGZILLA"/>
		<reference ref_id="1206416" ref_url="https://bugzilla.suse.com/1206416" source="BUGZILLA"/>
		<reference ref_id="1206417" ref_url="https://bugzilla.suse.com/1206417" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23514" ref_url="https://www.suse.com/security/cve/CVE-2022-23514/" source="CVE"/>
		<reference ref_id="CVE-2022-23515" ref_url="https://www.suse.com/security/cve/CVE-2022-23515/" source="CVE"/>
		<reference ref_id="CVE-2022-23516" ref_url="https://www.suse.com/security/cve/CVE-2022-23516/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1657-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028447.html" source="SUSE-SU"/>
		<description>
This update for rubygem-loofah fixes the following issues:

- CVE-2022-23514: Fixed inefficient regular expression leading to denial of service (bsc#1206415).
- CVE-2022-23515: Fixed improper neutralization of data URIs leading to Cross Site Scripting (bsc#1206417).
- CVE-2022-23516: Fixed uncontrolled Recursion leading to denial of service (bsc#1206416).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-29"/>
	<updated date="2023-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206415">SUSE bug 1206415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206416">SUSE bug 1206416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206417">SUSE bug 1206417</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23514/">CVE-2022-23514</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-23515/">CVE-2022-23515</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23516/">CVE-2022-23516</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750754" comment="ruby2.5-rubygem-loofah-2.2.2-150000.4.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139189" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1209481" ref_url="https://bugzilla.suse.com/1209481" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0922" ref_url="https://www.suse.com/security/cve/CVE-2023-0922/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1683-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028466.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:


- CVE-2023-0922: Fixed Samba AD DC admin tool samba-tool sending passwords in cleartext (bso#15315) (bsc#1209481).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-29"/>
	<updated date="2023-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209481">SUSE bug 1209481</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-0922/">CVE-2023-0922</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751707" comment="ctdb-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139190" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-rack (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1209503" ref_url="https://bugzilla.suse.com/1209503" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-27539" ref_url="https://www.suse.com/security/cve/CVE-2023-27539/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1685-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028464.html" source="SUSE-SU"/>
		<description>
This update for rubygem-rack fixes the following issues:

- CVE-2023-27539: Fixed denial of service in header parsing (bsc#1209503).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-29"/>
	<updated date="2023-03-29"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1209503">SUSE bug 1209503</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-27539/">CVE-2023-27539</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009747846" comment="ruby2.5-rubygem-rack-2.0.8-150000.3.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139191" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1076830" ref_url="https://bugzilla.suse.com/1076830" source="BUGZILLA"/>
		<reference ref_id="1192273" ref_url="https://bugzilla.suse.com/1192273" source="BUGZILLA"/>
		<reference ref_id="1194535" ref_url="https://bugzilla.suse.com/1194535" source="BUGZILLA"/>
		<reference ref_id="1207036" ref_url="https://bugzilla.suse.com/1207036" source="BUGZILLA"/>
		<reference ref_id="1207125" ref_url="https://bugzilla.suse.com/1207125" source="BUGZILLA"/>
		<reference ref_id="1207168" ref_url="https://bugzilla.suse.com/1207168" source="BUGZILLA"/>
		<reference ref_id="1207795" ref_url="https://bugzilla.suse.com/1207795" source="BUGZILLA"/>
		<reference ref_id="1208179" ref_url="https://bugzilla.suse.com/1208179" source="BUGZILLA"/>
		<reference ref_id="1208599" ref_url="https://bugzilla.suse.com/1208599" source="BUGZILLA"/>
		<reference ref_id="1208777" ref_url="https://bugzilla.suse.com/1208777" source="BUGZILLA"/>
		<reference ref_id="1208811" ref_url="https://bugzilla.suse.com/1208811" source="BUGZILLA"/>
		<reference ref_id="1208850" ref_url="https://bugzilla.suse.com/1208850" source="BUGZILLA"/>
		<reference ref_id="1209008" ref_url="https://bugzilla.suse.com/1209008" source="BUGZILLA"/>
		<reference ref_id="1209052" ref_url="https://bugzilla.suse.com/1209052" source="BUGZILLA"/>
		<reference ref_id="1209256" ref_url="https://bugzilla.suse.com/1209256" source="BUGZILLA"/>
		<reference ref_id="1209289" ref_url="https://bugzilla.suse.com/1209289" source="BUGZILLA"/>
		<reference ref_id="1209291" ref_url="https://bugzilla.suse.com/1209291" source="BUGZILLA"/>
		<reference ref_id="1209532" ref_url="https://bugzilla.suse.com/1209532" source="BUGZILLA"/>
		<reference ref_id="1209547" ref_url="https://bugzilla.suse.com/1209547" source="BUGZILLA"/>
		<reference ref_id="1209549" ref_url="https://bugzilla.suse.com/1209549" source="BUGZILLA"/>
		<reference ref_id="1209634" ref_url="https://bugzilla.suse.com/1209634" source="BUGZILLA"/>
		<reference ref_id="1209778" ref_url="https://bugzilla.suse.com/1209778" source="BUGZILLA"/>
		<reference ref_id="1209845" ref_url="https://bugzilla.suse.com/1209845" source="BUGZILLA"/>
		<reference ref_id="1209887" ref_url="https://bugzilla.suse.com/1209887" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2021-3923" ref_url="https://www.suse.com/security/cve/CVE-2021-3923/" source="CVE"/>
		<reference ref_id="CVE-2021-4203" ref_url="https://www.suse.com/security/cve/CVE-2021-4203/" source="CVE"/>
		<reference ref_id="CVE-2022-20567" ref_url="https://www.suse.com/security/cve/CVE-2022-20567/" source="CVE"/>
		<reference ref_id="CVE-2023-0394" ref_url="https://www.suse.com/security/cve/CVE-2023-0394/" source="CVE"/>
		<reference ref_id="CVE-2023-0590" ref_url="https://www.suse.com/security/cve/CVE-2023-0590/" source="CVE"/>
		<reference ref_id="CVE-2023-1076" ref_url="https://www.suse.com/security/cve/CVE-2023-1076/" source="CVE"/>
		<reference ref_id="CVE-2023-1095" ref_url="https://www.suse.com/security/cve/CVE-2023-1095/" source="CVE"/>
		<reference ref_id="CVE-2023-1281" ref_url="https://www.suse.com/security/cve/CVE-2023-1281/" source="CVE"/>
		<reference ref_id="CVE-2023-1390" ref_url="https://www.suse.com/security/cve/CVE-2023-1390/" source="CVE"/>
		<reference ref_id="CVE-2023-1513" ref_url="https://www.suse.com/security/cve/CVE-2023-1513/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="CVE-2023-23455" ref_url="https://www.suse.com/security/cve/CVE-2023-23455/" source="CVE"/>
		<reference ref_id="CVE-2023-28328" ref_url="https://www.suse.com/security/cve/CVE-2023-28328/" source="CVE"/>
		<reference ref_id="CVE-2023-28464" ref_url="https://www.suse.com/security/cve/CVE-2023-28464/" source="CVE"/>
		<reference ref_id="CVE-2023-28772" ref_url="https://www.suse.com/security/cve/CVE-2023-28772/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1848-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028819.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).
- CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).
- CVE-2021-3923: Fixed stack information leak vulnerability that could lead to kernel protection bypass in infiniband RDMA (bsc#1209778).
- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bsc#1194535).
- CVE-2022-20567: Fixed use after free that could lead to a local privilege escalation in pppol2tp_create of l2tp_ppp.c (bsc#1208850).
- CVE-2023-0394: Fixed a null pointer dereference flaw in the network subcomponent in the Linux kernel which could lead to system crash (bsc#1207168).
- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599).
- CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634).
- CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1209289).
- CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532).
- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207036).
- CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207125).
- CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291).
- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052).
- CVE-2023-28772: Fixed buffer overflow in seq_buf_putmem_hex in lib/seq_buf.c (bsc#1209549).

The following non-security bugs were fixed:

- Do not sign the vanilla kernel (bsc#1209008).
- PCI: hv: Add a per-bus mutex state_lock (bsc#1208811).
- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1208811).
- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1208811).
- PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1208811).
- Revert 'PCI: hv: Fix a timing issue which causes kdump to fail occasionally' (bsc#1208811).
- cifs: fix double free in dfs mounts (bsc#1209845).
- cifs: fix nodfs mount option (bsc#1209845).
- cifs: handle reconnect of tcon when there is no cached dfs referral (bsc#1209845).
- cifs: missing null pointer check in cifs_mount (bsc#1209845).
- cifs: serialize all mount attempts (bsc#1209845).
- cred: allow get_cred() and put_cred() to be given NULL (bsc#1209887).
- ibmvnic: Process crqs after enabling interrupts (bsc#1192273 ltc#194629).
- ibmvnic: do not stop queue in xmit (bsc#1192273 ltc#194629).
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (bsc#1207168).
- kernel-module-subpackage: Fix expansion with -b parameter (bsc#1208179).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-06"/>
	<updated date="2023-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076830">SUSE bug 1076830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192273">SUSE bug 1192273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194535">SUSE bug 1194535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207036">SUSE bug 1207036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207125">SUSE bug 1207125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207168">SUSE bug 1207168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207795">SUSE bug 1207795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208179">SUSE bug 1208179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208599">SUSE bug 1208599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208777">SUSE bug 1208777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208811">SUSE bug 1208811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208850">SUSE bug 1208850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209008">SUSE bug 1209008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209052">SUSE bug 1209052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209256">SUSE bug 1209256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209289">SUSE bug 1209289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209291">SUSE bug 1209291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209532">SUSE bug 1209532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209547">SUSE bug 1209547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209549">SUSE bug 1209549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209634">SUSE bug 1209634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209778">SUSE bug 1209778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209845">SUSE bug 1209845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209887">SUSE bug 1209887</bugzilla>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3923/">CVE-2021-3923</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4203/">CVE-2021-4203</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20567/">CVE-2022-20567</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0394/">CVE-2023-0394</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0590/">CVE-2023-0590</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-1076/">CVE-2023-1076</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1095/">CVE-2023-1095</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1281/">CVE-2023-1281</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1390/">CVE-2023-1390</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-1513/">CVE-2023-1513</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23455/">CVE-2023-23455</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-28328/">CVE-2023-28328</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28464/">CVE-2023-28464</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28772/">CVE-2023-28772</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009753702" comment="cluster-md-kmp-default-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753703" comment="dlm-kmp-default-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753704" comment="gfs2-kmp-default-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753705" comment="ocfs2-kmp-default-4.12.14-150100.197.142.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139192" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-actionview-5_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1172184" ref_url="https://bugzilla.suse.com/1172184" source="BUGZILLA"/>
		<reference ref_id="1176421" ref_url="https://bugzilla.suse.com/1176421" source="BUGZILLA"/>
		<reference ref_id="1199060" ref_url="https://bugzilla.suse.com/1199060" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15169" ref_url="https://www.suse.com/security/cve/CVE-2020-15169/" source="CVE"/>
		<reference ref_id="CVE-2020-8167" ref_url="https://www.suse.com/security/cve/CVE-2020-8167/" source="CVE"/>
		<reference ref_id="CVE-2022-27777" ref_url="https://www.suse.com/security/cve/CVE-2022-27777/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2059-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014619.html" source="SUSE-SU"/>
		<description>
This update for rubygem-actionview-5_1 fixes the following issues:

- CVE-2022-27777: Fixed possible cross-site scripting vulnerability in Action View tag helpers (bsc#1199060).
- CVE-2020-15169: Fixed cross-site scripting in translation helpers (bsc#1176421).
- CVE-2020-8167: Fixed CSRF vulnerability in rails-ujs (bsc#1172184).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-27"/>
	<updated date="2023-04-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172184">SUSE bug 1172184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176421">SUSE bug 1176421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199060">SUSE bug 1199060</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-15169/">CVE-2020-15169</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8167/">CVE-2020-8167</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-27777/">CVE-2022-27777</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716233" comment="ruby2.5-rubygem-actionview-5_1-5.1.4-150000.3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139193" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1202353" ref_url="https://bugzilla.suse.com/1202353" source="BUGZILLA"/>
		<reference ref_id="1205128" ref_url="https://bugzilla.suse.com/1205128" source="BUGZILLA"/>
		<reference ref_id="1209613" ref_url="https://bugzilla.suse.com/1209613" source="BUGZILLA"/>
		<reference ref_id="1209687" ref_url="https://bugzilla.suse.com/1209687" source="BUGZILLA"/>
		<reference ref_id="1209777" ref_url="https://bugzilla.suse.com/1209777" source="BUGZILLA"/>
		<reference ref_id="1209871" ref_url="https://bugzilla.suse.com/1209871" source="BUGZILLA"/>
		<reference ref_id="1209887" ref_url="https://bugzilla.suse.com/1209887" source="BUGZILLA"/>
		<reference ref_id="1210202" ref_url="https://bugzilla.suse.com/1210202" source="BUGZILLA"/>
		<reference ref_id="1210301" ref_url="https://bugzilla.suse.com/1210301" source="BUGZILLA"/>
		<reference ref_id="1210329" ref_url="https://bugzilla.suse.com/1210329" source="BUGZILLA"/>
		<reference ref_id="1210336" ref_url="https://bugzilla.suse.com/1210336" source="BUGZILLA"/>
		<reference ref_id="1210337" ref_url="https://bugzilla.suse.com/1210337" source="BUGZILLA"/>
		<reference ref_id="1210469" ref_url="https://bugzilla.suse.com/1210469" source="BUGZILLA"/>
		<reference ref_id="1210498" ref_url="https://bugzilla.suse.com/1210498" source="BUGZILLA"/>
		<reference ref_id="1210506" ref_url="https://bugzilla.suse.com/1210506" source="BUGZILLA"/>
		<reference ref_id="1210647" ref_url="https://bugzilla.suse.com/1210647" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36691" ref_url="https://www.suse.com/security/cve/CVE-2020-36691/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="CVE-2023-1611" ref_url="https://www.suse.com/security/cve/CVE-2023-1611/" source="CVE"/>
		<reference ref_id="CVE-2023-1670" ref_url="https://www.suse.com/security/cve/CVE-2023-1670/" source="CVE"/>
		<reference ref_id="CVE-2023-1855" ref_url="https://www.suse.com/security/cve/CVE-2023-1855/" source="CVE"/>
		<reference ref_id="CVE-2023-1989" ref_url="https://www.suse.com/security/cve/CVE-2023-1989/" source="CVE"/>
		<reference ref_id="CVE-2023-1990" ref_url="https://www.suse.com/security/cve/CVE-2023-1990/" source="CVE"/>
		<reference ref_id="CVE-2023-1998" ref_url="https://www.suse.com/security/cve/CVE-2023-1998/" source="CVE"/>
		<reference ref_id="CVE-2023-2124" ref_url="https://www.suse.com/security/cve/CVE-2023-2124/" source="CVE"/>
		<reference ref_id="CVE-2023-2162" ref_url="https://www.suse.com/security/cve/CVE-2023-2162/" source="CVE"/>
		<reference ref_id="CVE-2023-30772" ref_url="https://www.suse.com/security/cve/CVE-2023-30772/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2151-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029294.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-2124: Fixed an out of bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498).
- CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647).
- CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).
- CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329).
- CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).
- CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687).
- CVE-2020-36691: Fixed a denial of service vulnerability via a nested Netlink policy with a back reference (bsc#1209777).

The following non-security bugs were fixed:

- cifs: fix negotiate context parsing (bsc#1210301).
- cred: allow get_cred() and put_cred() to be given NULL (bsc#1209887).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-09"/>
	<updated date="2023-05-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202353">SUSE bug 1202353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205128">SUSE bug 1205128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209613">SUSE bug 1209613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209687">SUSE bug 1209687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209777">SUSE bug 1209777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209871">SUSE bug 1209871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209887">SUSE bug 1209887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210202">SUSE bug 1210202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210301">SUSE bug 1210301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210329">SUSE bug 1210329</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210336">SUSE bug 1210336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210337">SUSE bug 1210337</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210469">SUSE bug 1210469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210498">SUSE bug 1210498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210506">SUSE bug 1210506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210647">SUSE bug 1210647</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36691/">CVE-2020-36691</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1611/">CVE-2023-1611</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1670/">CVE-2023-1670</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1855/">CVE-2023-1855</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1989/">CVE-2023-1989</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1990/">CVE-2023-1990</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-1998/">CVE-2023-1998</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2124/">CVE-2023-2124</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2162/">CVE-2023-2162</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-30772/">CVE-2023-30772</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009756954" comment="cluster-md-kmp-default-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756955" comment="dlm-kmp-default-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756956" comment="gfs2-kmp-default-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756957" comment="ocfs2-kmp-default-4.12.14-150100.197.145.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139194" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1205385" ref_url="https://bugzilla.suse.com/1205385" source="BUGZILLA"/>
		<reference ref_id="1206504" ref_url="https://bugzilla.suse.com/1206504" source="BUGZILLA"/>
		<reference ref_id="1206546" ref_url="https://bugzilla.suse.com/1206546" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20251" ref_url="https://www.suse.com/security/cve/CVE-2021-20251/" source="CVE"/>
		<reference ref_id="CVE-2022-37966" ref_url="https://www.suse.com/security/cve/CVE-2022-37966/" source="CVE"/>
		<reference ref_id="CVE-2022-38023" ref_url="https://www.suse.com/security/cve/CVE-2022-38023/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0222-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3YTRBE2CLOHDFXSGJQCTU4DTNHNRTBU/" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2021-20251: Fixed an issue where the bad password count would
  not be properly incremented, which could allow attackers to brute
  force a user's password (bsc#1206546).
- CVE-2022-38023: Disabled weak ciphers by default in the Netlogon
  Secure channel (bsc#1206504).
- CVE-2022-37966: Fixed an issue where a weak cipher would be
  selected to encrypt session keys, which could lead to privilege
  escalation (bsc#1205385).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-01"/>
	<updated date="2023-02-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205385">SUSE bug 1205385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206504">SUSE bug 1206504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206546">SUSE bug 1206546</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20251/">CVE-2021-20251</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-37966/">CVE-2022-37966</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38023/">CVE-2022-38023</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732801" comment="ctdb-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139195" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1191731" ref_url="https://bugzilla.suse.com/1191731" source="BUGZILLA"/>
		<reference ref_id="1199046" ref_url="https://bugzilla.suse.com/1199046" source="BUGZILLA"/>
		<reference ref_id="1204405" ref_url="https://bugzilla.suse.com/1204405" source="BUGZILLA"/>
		<reference ref_id="1205756" ref_url="https://bugzilla.suse.com/1205756" source="BUGZILLA"/>
		<reference ref_id="1205758" ref_url="https://bugzilla.suse.com/1205758" source="BUGZILLA"/>
		<reference ref_id="1205760" ref_url="https://bugzilla.suse.com/1205760" source="BUGZILLA"/>
		<reference ref_id="1205762" ref_url="https://bugzilla.suse.com/1205762" source="BUGZILLA"/>
		<reference ref_id="1205803" ref_url="https://bugzilla.suse.com/1205803" source="BUGZILLA"/>
		<reference ref_id="1206878" ref_url="https://bugzilla.suse.com/1206878" source="BUGZILLA"/>
		<reference ref_id="1208600" ref_url="https://bugzilla.suse.com/1208600" source="BUGZILLA"/>
		<reference ref_id="1209287" ref_url="https://bugzilla.suse.com/1209287" source="BUGZILLA"/>
		<reference ref_id="1209366" ref_url="https://bugzilla.suse.com/1209366" source="BUGZILLA"/>
		<reference ref_id="1210629" ref_url="https://bugzilla.suse.com/1210629" source="BUGZILLA"/>
		<reference ref_id="1210715" ref_url="https://bugzilla.suse.com/1210715" source="BUGZILLA"/>
		<reference ref_id="1210783" ref_url="https://bugzilla.suse.com/1210783" source="BUGZILLA"/>
		<reference ref_id="1210791" ref_url="https://bugzilla.suse.com/1210791" source="BUGZILLA"/>
		<reference ref_id="1210940" ref_url="https://bugzilla.suse.com/1210940" source="BUGZILLA"/>
		<reference ref_id="1211037" ref_url="https://bugzilla.suse.com/1211037" source="BUGZILLA"/>
		<reference ref_id="1211089" ref_url="https://bugzilla.suse.com/1211089" source="BUGZILLA"/>
		<reference ref_id="1211105" ref_url="https://bugzilla.suse.com/1211105" source="BUGZILLA"/>
		<reference ref_id="1211186" ref_url="https://bugzilla.suse.com/1211186" source="BUGZILLA"/>
		<reference ref_id="1211519" ref_url="https://bugzilla.suse.com/1211519" source="BUGZILLA"/>
		<reference ref_id="1211592" ref_url="https://bugzilla.suse.com/1211592" source="BUGZILLA"/>
		<reference ref_id="1211622" ref_url="https://bugzilla.suse.com/1211622" source="BUGZILLA"/>
		<reference ref_id="1211796" ref_url="https://bugzilla.suse.com/1211796" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3566" ref_url="https://www.suse.com/security/cve/CVE-2022-3566/" source="CVE"/>
		<reference ref_id="CVE-2022-45884" ref_url="https://www.suse.com/security/cve/CVE-2022-45884/" source="CVE"/>
		<reference ref_id="CVE-2022-45885" ref_url="https://www.suse.com/security/cve/CVE-2022-45885/" source="CVE"/>
		<reference ref_id="CVE-2022-45886" ref_url="https://www.suse.com/security/cve/CVE-2022-45886/" source="CVE"/>
		<reference ref_id="CVE-2022-45887" ref_url="https://www.suse.com/security/cve/CVE-2022-45887/" source="CVE"/>
		<reference ref_id="CVE-2022-45919" ref_url="https://www.suse.com/security/cve/CVE-2022-45919/" source="CVE"/>
		<reference ref_id="CVE-2023-1077" ref_url="https://www.suse.com/security/cve/CVE-2023-1077/" source="CVE"/>
		<reference ref_id="CVE-2023-1380" ref_url="https://www.suse.com/security/cve/CVE-2023-1380/" source="CVE"/>
		<reference ref_id="CVE-2023-2176" ref_url="https://www.suse.com/security/cve/CVE-2023-2176/" source="CVE"/>
		<reference ref_id="CVE-2023-2194" ref_url="https://www.suse.com/security/cve/CVE-2023-2194/" source="CVE"/>
		<reference ref_id="CVE-2023-2483" ref_url="https://www.suse.com/security/cve/CVE-2023-2483/" source="CVE"/>
		<reference ref_id="CVE-2023-2513" ref_url="https://www.suse.com/security/cve/CVE-2023-2513/" source="CVE"/>
		<reference ref_id="CVE-2023-28466" ref_url="https://www.suse.com/security/cve/CVE-2023-28466/" source="CVE"/>
		<reference ref_id="CVE-2023-31084" ref_url="https://www.suse.com/security/cve/CVE-2023-31084/" source="CVE"/>
		<reference ref_id="CVE-2023-31436" ref_url="https://www.suse.com/security/cve/CVE-2023-31436/" source="CVE"/>
		<reference ref_id="CVE-2023-32269" ref_url="https://www.suse.com/security/cve/CVE-2023-32269/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2534-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029918.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).
- CVE-2022-3566: Fixed race condition in the TCP Handler (bsc#1204405).
- CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760).
- CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758).
- CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762).
- CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803).
- CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756).
- CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783).
- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940).
- CVE-2023-2194: Fixed an out-of-bounds write vulnerability in the SLIMpro I2C device driver (bsc#1210715).
- CVE-2023-32269: Fixed a use-after-free in af_netrom.c, related to the fact that accept() was also allowed for a successfully connected AF_NETROM socket (bsc#1211186).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366).
- CVE-2023-1380: Fixed a slab-out-of-bound read problem in brcmf_get_assoc_ies() (bsc#1209287).
- CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105).
- CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037).
- CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629).

The following non-security bugs were fixed:

- ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519).
- gve: Fix spelling mistake 'droping' -&gt; 'dropping' (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519).
- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592).
- kernel-binary: install expoline.o (boo#1210791 bsc#1211089)
- scsi: storvsc: Parameterize number hardware queues (bsc#1211622).
- usrmerge: Compatibility with earlier rpm (boo#1211796)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-19"/>
	<updated date="2023-06-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191731">SUSE bug 1191731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199046">SUSE bug 1199046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204405">SUSE bug 1204405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205756">SUSE bug 1205756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205758">SUSE bug 1205758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205760">SUSE bug 1205760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205762">SUSE bug 1205762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205803">SUSE bug 1205803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206878">SUSE bug 1206878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208600">SUSE bug 1208600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209287">SUSE bug 1209287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209366">SUSE bug 1209366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210629">SUSE bug 1210629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210715">SUSE bug 1210715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210783">SUSE bug 1210783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210791">SUSE bug 1210791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210940">SUSE bug 1210940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211037">SUSE bug 1211037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211089">SUSE bug 1211089</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211105">SUSE bug 1211105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211186">SUSE bug 1211186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211519">SUSE bug 1211519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211592">SUSE bug 1211592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211622">SUSE bug 1211622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211796">SUSE bug 1211796</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3566/">CVE-2022-3566</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45884/">CVE-2022-45884</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45885/">CVE-2022-45885</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45886/">CVE-2022-45886</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45887/">CVE-2022-45887</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45919/">CVE-2022-45919</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1077/">CVE-2023-1077</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-1380/">CVE-2023-1380</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2176/">CVE-2023-2176</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2023-2194/">CVE-2023-2194</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2483/">CVE-2023-2483</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2513/">CVE-2023-2513</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28466/">CVE-2023-28466</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-31084/">CVE-2023-31084</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-31436/">CVE-2023-31436</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32269/">CVE-2023-32269</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009765129" comment="cluster-md-kmp-default-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765130" comment="dlm-kmp-default-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765131" comment="gfs2-kmp-default-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765132" comment="ocfs2-kmp-default-4.12.14-150100.197.148.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139196" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-activesupport-5_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1207454" ref_url="https://bugzilla.suse.com/1207454" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-22796" ref_url="https://www.suse.com/security/cve/CVE-2023-22796/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013632.html" source="SUSE-SU"/>
		<description>
This update for rubygem-activesupport-5_1 fixes the following issues:

- CVE-2023-22796: Fixed a potential denial of service when passing a
  crafted input to the underscore method due to an inefficient
  regular expression (bsc#1207454).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-06"/>
	<updated date="2023-02-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1207454">SUSE bug 1207454</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-22796/">CVE-2023-22796</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736771" comment="ruby2.5-rubygem-activesupport-5_1-5.1.4-150000.3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139197" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-rack (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1207596" ref_url="https://bugzilla.suse.com/1207596" source="BUGZILLA"/>
		<reference ref_id="1207597" ref_url="https://bugzilla.suse.com/1207597" source="BUGZILLA"/>
		<reference ref_id="1207599" ref_url="https://bugzilla.suse.com/1207599" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-44570" ref_url="https://www.suse.com/security/cve/CVE-2022-44570/" source="CVE"/>
		<reference ref_id="CVE-2022-44571" ref_url="https://www.suse.com/security/cve/CVE-2022-44571/" source="CVE"/>
		<reference ref_id="CVE-2022-44572" ref_url="https://www.suse.com/security/cve/CVE-2022-44572/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013629.html" source="SUSE-SU"/>
		<description>
This update for rubygem-rack fixes the following issues:

- CVE-2022-44570: Fixed a potential denial of service when parsing a
  RFC2183 multipart boundary (bsc#1207597).
- CVE-2022-44571: Fixed a potential denial of service when parsing a
  Range header (bsc#1207599).
- CVE-2022-44572: Fixed a potential denial of service when parsing a
  Content-Disposition header (bsc#1207596).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-06"/>
	<updated date="2023-02-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1207596">SUSE bug 1207596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207597">SUSE bug 1207597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207599">SUSE bug 1207599</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-44570/">CVE-2022-44570</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-44571/">CVE-2022-44571</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-44572/">CVE-2022-44572</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737006" comment="ruby2.5-rubygem-rack-2.0.8-150000.3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139198" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1160435" ref_url="https://bugzilla.suse.com/1160435" source="BUGZILLA"/>
		<reference ref_id="1198400" ref_url="https://bugzilla.suse.com/1198400" source="BUGZILLA"/>
		<reference ref_id="1208604" ref_url="https://bugzilla.suse.com/1208604" source="BUGZILLA"/>
		<reference ref_id="1209039" ref_url="https://bugzilla.suse.com/1209039" source="BUGZILLA"/>
		<reference ref_id="1209779" ref_url="https://bugzilla.suse.com/1209779" source="BUGZILLA"/>
		<reference ref_id="1210533" ref_url="https://bugzilla.suse.com/1210533" source="BUGZILLA"/>
		<reference ref_id="1211449" ref_url="https://bugzilla.suse.com/1211449" source="BUGZILLA"/>
		<reference ref_id="1212051" ref_url="https://bugzilla.suse.com/1212051" source="BUGZILLA"/>
		<reference ref_id="1212128" ref_url="https://bugzilla.suse.com/1212128" source="BUGZILLA"/>
		<reference ref_id="1212129" ref_url="https://bugzilla.suse.com/1212129" source="BUGZILLA"/>
		<reference ref_id="1212154" ref_url="https://bugzilla.suse.com/1212154" source="BUGZILLA"/>
		<reference ref_id="1212158" ref_url="https://bugzilla.suse.com/1212158" source="BUGZILLA"/>
		<reference ref_id="1212501" ref_url="https://bugzilla.suse.com/1212501" source="BUGZILLA"/>
		<reference ref_id="1212502" ref_url="https://bugzilla.suse.com/1212502" source="BUGZILLA"/>
		<reference ref_id="1212606" ref_url="https://bugzilla.suse.com/1212606" source="BUGZILLA"/>
		<reference ref_id="1212842" ref_url="https://bugzilla.suse.com/1212842" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1079" ref_url="https://www.suse.com/security/cve/CVE-2023-1079/" source="CVE"/>
		<reference ref_id="CVE-2023-1249" ref_url="https://www.suse.com/security/cve/CVE-2023-1249/" source="CVE"/>
		<reference ref_id="CVE-2023-1637" ref_url="https://www.suse.com/security/cve/CVE-2023-1637/" source="CVE"/>
		<reference ref_id="CVE-2023-2002" ref_url="https://www.suse.com/security/cve/CVE-2023-2002/" source="CVE"/>
		<reference ref_id="CVE-2023-3090" ref_url="https://www.suse.com/security/cve/CVE-2023-3090/" source="CVE"/>
		<reference ref_id="CVE-2023-3111" ref_url="https://www.suse.com/security/cve/CVE-2023-3111/" source="CVE"/>
		<reference ref_id="CVE-2023-3141" ref_url="https://www.suse.com/security/cve/CVE-2023-3141/" source="CVE"/>
		<reference ref_id="CVE-2023-3159" ref_url="https://www.suse.com/security/cve/CVE-2023-3159/" source="CVE"/>
		<reference ref_id="CVE-2023-3161" ref_url="https://www.suse.com/security/cve/CVE-2023-3161/" source="CVE"/>
		<reference ref_id="CVE-2023-3268" ref_url="https://www.suse.com/security/cve/CVE-2023-3268/" source="CVE"/>
		<reference ref_id="CVE-2023-3358" ref_url="https://www.suse.com/security/cve/CVE-2023-3358/" source="CVE"/>
		<reference ref_id="CVE-2023-35824" ref_url="https://www.suse.com/security/cve/CVE-2023-35824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015491.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604).
- CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).
- CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
- CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).
- CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
- CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).
- CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
- CVE-2023-3268: Fixed an out of bounds flaw in relay_file_read_start_pos in kernel/relay.c that allowed a local attacker to crash the system or leak kernel internal information (bsc#1212502).
- CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
- CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).

The following non-security bugs were fixed:

- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- Move setting %%build_html to config.sh
- Move setting %%split_optional to config.sh
- Move setting %%supported_modules_check to config.sh
- rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm
- rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-14"/>
	<updated date="2023-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160435">SUSE bug 1160435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198400">SUSE bug 1198400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208604">SUSE bug 1208604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209039">SUSE bug 1209039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209779">SUSE bug 1209779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210533">SUSE bug 1210533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211449">SUSE bug 1211449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212051">SUSE bug 1212051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212128">SUSE bug 1212128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212129">SUSE bug 1212129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212154">SUSE bug 1212154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212158">SUSE bug 1212158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212501">SUSE bug 1212501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212502">SUSE bug 1212502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212606">SUSE bug 1212606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212842">SUSE bug 1212842</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1079/">CVE-2023-1079</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-1249/">CVE-2023-1249</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2023-1637/">CVE-2023-1637</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2002/">CVE-2023-2002</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3090/">CVE-2023-3090</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3111/">CVE-2023-3111</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-3141/">CVE-2023-3141</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3159/">CVE-2023-3159</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-3161/">CVE-2023-3161</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-3268/">CVE-2023-3268</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-3358/">CVE-2023-3358</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-35824/">CVE-2023-35824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009771167" comment="cluster-md-kmp-default-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771168" comment="dlm-kmp-default-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771169" comment="gfs2-kmp-default-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771170" comment="ocfs2-kmp-default-4.12.14-150100.197.151.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139199" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1213174" ref_url="https://bugzilla.suse.com/1213174" source="BUGZILLA"/>
		<reference ref_id="1213384" ref_url="https://bugzilla.suse.com/1213384" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2127" ref_url="https://www.suse.com/security/cve/CVE-2022-2127/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3017-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-July/030625.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

  - CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174).

  Bugfixes:

  - Fixed trust relationship failure (bsc#1213384).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-28"/>
	<updated date="2023-07-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1213174">SUSE bug 1213174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213384">SUSE bug 1213384</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2127/">CVE-2022-2127</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773180" comment="ctdb-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139200" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-puma (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1214425" ref_url="https://bugzilla.suse.com/1214425" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-40175" ref_url="https://www.suse.com/security/cve/CVE-2023-40175/" source="CVE"/>
		<description>
This update for rubygem-puma fixes the following issues:

- CVE-2023-40175: Fixed HTTP request smuggling when parsing chunked transfer encoding bodies and zero-length content-length headers (bsc#1214425).

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-25"/>
	<updated date="2023-09-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214425">SUSE bug 1214425</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2023-40175/">CVE-2023-40175</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798666" comment="ruby2.5-rubygem-puma-4.3.12-150000.3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139201" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-actionpack-5_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1213312" ref_url="https://bugzilla.suse.com/1213312" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28362" ref_url="https://www.suse.com/security/cve/CVE-2023-28362/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3229-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-August/030838.html" source="SUSE-SU"/>
		<description>
This update for rubygem-actionpack-5_1 fixes the following issues:

- CVE-2023-28362: Fixed possible XSS via User Supplied Values to redirect_to (bsc#1213312).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-08"/>
	<updated date="2023-08-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213312">SUSE bug 1213312</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-28362/">CVE-2023-28362</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009776515" comment="ruby2.5-rubygem-actionpack-5_1-5.1.4-150000.3.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139202" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-globalid (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1207587" ref_url="https://bugzilla.suse.com/1207587" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-22799" ref_url="https://www.suse.com/security/cve/CVE-2023-22799/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0328-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013709.html" source="SUSE-SU"/>
		<description>
This update for rubygem-globalid fixes the following issues:

- CVE-2023-22799: Fixed ReDoS vulnerability (bsc#1207587).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-09"/>
	<updated date="2023-02-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1207587">SUSE bug 1207587</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-22799/">CVE-2023-22799</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737560" comment="ruby2.5-rubygem-globalid-0.4.1-150000.3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139203" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1206418" ref_url="https://bugzilla.suse.com/1206418" source="BUGZILLA"/>
		<reference ref_id="1207088" ref_url="https://bugzilla.suse.com/1207088" source="BUGZILLA"/>
		<reference ref_id="1210584" ref_url="https://bugzilla.suse.com/1210584" source="BUGZILLA"/>
		<reference ref_id="1211738" ref_url="https://bugzilla.suse.com/1211738" source="BUGZILLA"/>
		<reference ref_id="1211867" ref_url="https://bugzilla.suse.com/1211867" source="BUGZILLA"/>
		<reference ref_id="1212301" ref_url="https://bugzilla.suse.com/1212301" source="BUGZILLA"/>
		<reference ref_id="1212741" ref_url="https://bugzilla.suse.com/1212741" source="BUGZILLA"/>
		<reference ref_id="1212835" ref_url="https://bugzilla.suse.com/1212835" source="BUGZILLA"/>
		<reference ref_id="1213059" ref_url="https://bugzilla.suse.com/1213059" source="BUGZILLA"/>
		<reference ref_id="1213167" ref_url="https://bugzilla.suse.com/1213167" source="BUGZILLA"/>
		<reference ref_id="1213286" ref_url="https://bugzilla.suse.com/1213286" source="BUGZILLA"/>
		<reference ref_id="1213287" ref_url="https://bugzilla.suse.com/1213287" source="BUGZILLA"/>
		<reference ref_id="1213546" ref_url="https://bugzilla.suse.com/1213546" source="BUGZILLA"/>
		<reference ref_id="1213585" ref_url="https://bugzilla.suse.com/1213585" source="BUGZILLA"/>
		<reference ref_id="1213586" ref_url="https://bugzilla.suse.com/1213586" source="BUGZILLA"/>
		<reference ref_id="1213588" ref_url="https://bugzilla.suse.com/1213588" source="BUGZILLA"/>
		<reference ref_id="1213970" ref_url="https://bugzilla.suse.com/1213970" source="BUGZILLA"/>
		<reference ref_id="1214019" ref_url="https://bugzilla.suse.com/1214019" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40982" ref_url="https://www.suse.com/security/cve/CVE-2022-40982/" source="CVE"/>
		<reference ref_id="CVE-2023-0459" ref_url="https://www.suse.com/security/cve/CVE-2023-0459/" source="CVE"/>
		<reference ref_id="CVE-2023-20569" ref_url="https://www.suse.com/security/cve/CVE-2023-20569/" source="CVE"/>
		<reference ref_id="CVE-2023-20593" ref_url="https://www.suse.com/security/cve/CVE-2023-20593/" source="CVE"/>
		<reference ref_id="CVE-2023-2985" ref_url="https://www.suse.com/security/cve/CVE-2023-2985/" source="CVE"/>
		<reference ref_id="CVE-2023-34319" ref_url="https://www.suse.com/security/cve/CVE-2023-34319/" source="CVE"/>
		<reference ref_id="CVE-2023-35001" ref_url="https://www.suse.com/security/cve/CVE-2023-35001/" source="CVE"/>
		<reference ref_id="CVE-2023-3567" ref_url="https://www.suse.com/security/cve/CVE-2023-3567/" source="CVE"/>
		<reference ref_id="CVE-2023-3609" ref_url="https://www.suse.com/security/cve/CVE-2023-3609/" source="CVE"/>
		<reference ref_id="CVE-2023-3611" ref_url="https://www.suse.com/security/cve/CVE-2023-3611/" source="CVE"/>
		<reference ref_id="CVE-2023-3776" ref_url="https://www.suse.com/security/cve/CVE-2023-3776/" source="CVE"/>
		<reference ref_id="CVE-2023-4133" ref_url="https://www.suse.com/security/cve/CVE-2023-4133/" source="CVE"/>
		<reference ref_id="CVE-2023-4194" ref_url="https://www.suse.com/security/cve/CVE-2023-4194/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015997.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).
- CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
- CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
- CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).
- CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).
- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213586).
- CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
- CVE-2023-3776: Fixed improper refcount update in  cls_fw leads to use-after-free (bsc#1213588).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open()  bsc#1214019).

The following non-security bugs were fixed:

- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- cpufeatures: allow adding more cpuid words
- get module prefix from kmod (bsc#1212835).
- kernel-binary.spec.in: remove superfluous %% in supplements fixes: 02b7735e0caf ('rpm/kernel-binary.spec.in: add enhances and supplements tags to in-tree kmps')
- kernel-docs: add buildrequires on python3-base when using python3 the python3 binary is provided by python3-base.
- kernel-docs: use python3 together with python3-sphinx (bsc#1212741).
- keys: change keyring_serialise_link_sem to a mutex (bsc#1207088).
- keys: fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).
- keys: hoist locking out of __key_link_begin() (bsc#1207088).
- net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).
- net: mana: add support for vlan tagging (bsc#1212301).
- readme.branch: add myself as co-maintainer
- remove more packaging cruft for sle &amp;lt; 12 sp3
- rpm/check-for-config-changes: ignore also pahole_has_* we now also have options like config_pahole_has_lang_exclude.
- rpm/check-for-config-changes: ignore also riscv_isa_* and dynamic_sigframe they depend on config_toolchain_has_*.
- timers: add shutdown mechanism to the internal functions (bsc#1213970).
- timers: provide timer_shutdown[_sync]() (bsc#1213970).
- timers: rename del_timer() to timer_delete() (bsc#1213970).
- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: replace bug_on()s (bsc#1213970).
- timers: silently ignore timers with a null function (bsc#1213970).
- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: update kernel-doc for various functions (bsc#1213970).
- timers: use del_timer_sync() even on up (bsc#1213970).
- ubi: ensure that vid header offset + vid header size &amp;lt;= alloc, size (bsc#1210584).
- ubi: fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).
- usrmerge: Adjust module path in the kernel sources (bsc#1212835).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-23"/>
	<updated date="2023-08-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206418">SUSE bug 1206418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207088">SUSE bug 1207088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210584">SUSE bug 1210584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211738">SUSE bug 1211738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211867">SUSE bug 1211867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212301">SUSE bug 1212301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212741">SUSE bug 1212741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212835">SUSE bug 1212835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213059">SUSE bug 1213059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213167">SUSE bug 1213167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213286">SUSE bug 1213286</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213287">SUSE bug 1213287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213546">SUSE bug 1213546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213585">SUSE bug 1213585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213586">SUSE bug 1213586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213588">SUSE bug 1213588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213970">SUSE bug 1213970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214019">SUSE bug 1214019</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40982/">CVE-2022-40982</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-0459/">CVE-2023-0459</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20569/">CVE-2023-20569</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20593/">CVE-2023-20593</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2985/">CVE-2023-2985</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-34319/">CVE-2023-34319</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-35001/">CVE-2023-35001</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3567/">CVE-2023-3567</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3609/">CVE-2023-3609</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3611/">CVE-2023-3611</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3776/">CVE-2023-3776</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4133/">CVE-2023-4133</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-4194/">CVE-2023-4194</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009779643" comment="cluster-md-kmp-default-4.12.14-150100.197.154.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779644" comment="dlm-kmp-default-4.12.14-150100.197.154.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779645" comment="gfs2-kmp-default-4.12.14-150100.197.154.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779646" comment="ocfs2-kmp-default-4.12.14-150100.197.154.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139204" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1203517" ref_url="https://bugzilla.suse.com/1203517" source="BUGZILLA"/>
		<reference ref_id="1210448" ref_url="https://bugzilla.suse.com/1210448" source="BUGZILLA"/>
		<reference ref_id="1213543" ref_url="https://bugzilla.suse.com/1213543" source="BUGZILLA"/>
		<reference ref_id="1213601" ref_url="https://bugzilla.suse.com/1213601" source="BUGZILLA"/>
		<reference ref_id="1213666" ref_url="https://bugzilla.suse.com/1213666" source="BUGZILLA"/>
		<reference ref_id="1213927" ref_url="https://bugzilla.suse.com/1213927" source="BUGZILLA"/>
		<reference ref_id="1213969" ref_url="https://bugzilla.suse.com/1213969" source="BUGZILLA"/>
		<reference ref_id="1213971" ref_url="https://bugzilla.suse.com/1213971" source="BUGZILLA"/>
		<reference ref_id="1214149" ref_url="https://bugzilla.suse.com/1214149" source="BUGZILLA"/>
		<reference ref_id="1214348" ref_url="https://bugzilla.suse.com/1214348" source="BUGZILLA"/>
		<reference ref_id="1214350" ref_url="https://bugzilla.suse.com/1214350" source="BUGZILLA"/>
		<reference ref_id="1214451" ref_url="https://bugzilla.suse.com/1214451" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-36402" ref_url="https://www.suse.com/security/cve/CVE-2022-36402/" source="CVE"/>
		<reference ref_id="CVE-2023-2007" ref_url="https://www.suse.com/security/cve/CVE-2023-2007/" source="CVE"/>
		<reference ref_id="CVE-2023-20588" ref_url="https://www.suse.com/security/cve/CVE-2023-20588/" source="CVE"/>
		<reference ref_id="CVE-2023-3772" ref_url="https://www.suse.com/security/cve/CVE-2023-3772/" source="CVE"/>
		<reference ref_id="CVE-2023-3812" ref_url="https://www.suse.com/security/cve/CVE-2023-3812/" source="CVE"/>
		<reference ref_id="CVE-2023-3863" ref_url="https://www.suse.com/security/cve/CVE-2023-3863/" source="CVE"/>
		<reference ref_id="CVE-2023-4128" ref_url="https://www.suse.com/security/cve/CVE-2023-4128/" source="CVE"/>
		<reference ref_id="CVE-2023-4132" ref_url="https://www.suse.com/security/cve/CVE-2023-4132/" source="CVE"/>
		<reference ref_id="CVE-2023-4134" ref_url="https://www.suse.com/security/cve/CVE-2023-4134/" source="CVE"/>
		<reference ref_id="CVE-2023-4385" ref_url="https://www.suse.com/security/cve/CVE-2023-4385/" source="CVE"/>
		<reference ref_id="CVE-2023-4387" ref_url="https://www.suse.com/security/cve/CVE-2023-4387/" source="CVE"/>
		<reference ref_id="CVE-2023-4459" ref_url="https://www.suse.com/security/cve/CVE-2023-4459/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3680-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016208.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local attacker with a user account on the system to gain privilege, causing a denial of service (bsc#1203517).
- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4132: Fixed use-after-free vulnerability was found in the siano smsusb module that allowed a local user to crash the system, causing a denial of service condition (bsc#1213969).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to crash the system due to a missing sanity check (bsc#1214348).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).

The following non-security bugs were fixed:

- kabi/severities: Ignore newly added SRSO mitigation functions
- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
- x86/cpu: Cleanup the untrain mess (git-fixes).
- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: Rename original retbleed methods (git-fixes).
- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).
- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).
- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: Explain the untraining sequences a bit more (git-fixes).
- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
- x86: Move gds_ucode_mitigated() declaration to header (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-19"/>
	<updated date="2023-09-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203517">SUSE bug 1203517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210448">SUSE bug 1210448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213543">SUSE bug 1213543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213601">SUSE bug 1213601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213666">SUSE bug 1213666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213927">SUSE bug 1213927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213969">SUSE bug 1213969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213971">SUSE bug 1213971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214149">SUSE bug 1214149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214348">SUSE bug 1214348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214350">SUSE bug 1214350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214451">SUSE bug 1214451</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36402/">CVE-2022-36402</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-2007/">CVE-2023-2007</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20588/">CVE-2023-20588</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-3772/">CVE-2023-3772</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3812/">CVE-2023-3812</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3863/">CVE-2023-3863</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4128/">CVE-2023-4128</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4132/">CVE-2023-4132</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4134/">CVE-2023-4134</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4385/">CVE-2023-4385</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4387/">CVE-2023-4387</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4459/">CVE-2023-4459</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009795434" comment="cluster-md-kmp-default-4.12.14-150100.197.157.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795435" comment="dlm-kmp-default-4.12.14-150100.197.157.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795436" comment="gfs2-kmp-default-4.12.14-150100.197.157.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795437" comment="ocfs2-kmp-default-4.12.14-150100.197.157.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139205" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-rails-html-sanitizer (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1206433" ref_url="https://bugzilla.suse.com/1206433" source="BUGZILLA"/>
		<reference ref_id="1206434" ref_url="https://bugzilla.suse.com/1206434" source="BUGZILLA"/>
		<reference ref_id="1206435" ref_url="https://bugzilla.suse.com/1206435" source="BUGZILLA"/>
		<reference ref_id="1206436" ref_url="https://bugzilla.suse.com/1206436" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23517" ref_url="https://www.suse.com/security/cve/CVE-2022-23517/" source="CVE"/>
		<reference ref_id="CVE-2022-23518" ref_url="https://www.suse.com/security/cve/CVE-2022-23518/" source="CVE"/>
		<reference ref_id="CVE-2022-23519" ref_url="https://www.suse.com/security/cve/CVE-2022-23519/" source="CVE"/>
		<reference ref_id="CVE-2022-23520" ref_url="https://www.suse.com/security/cve/CVE-2022-23520/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3714-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016255.html" source="SUSE-SU"/>
		<description>
This update for rubygem-rails-html-sanitizer fixes the following issues:

  - CVE-2022-23517: Fixed inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. (bsc#1206433)
  - CVE-2022-23518: Fixed XSS via data URIs when used in combination with Loofah. (bsc#1206434)
  - CVE-2022-23519: Fixed XSS vulnerability with certain configurations of Rails::Html::Sanitizer. (bsc#1206435)
  - CVE-2022-23520: Fixed XSS vulnerability with certain configurations of Rails::Html::Sanitizer. (bsc#1206436)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-20"/>
	<updated date="2023-09-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206433">SUSE bug 1206433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206434">SUSE bug 1206434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206435">SUSE bug 1206435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206436">SUSE bug 1206436</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23517/">CVE-2022-23517</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-23518/">CVE-2022-23518</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-23519/">CVE-2022-23519</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-23520/">CVE-2022-23520</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781425" comment="ruby2.5-rubygem-rails-html-sanitizer-1.0.4-150000.4.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139206" version="1" class="patch">
	<metadata>
		<title>Security update for libqb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1214066" ref_url="https://bugzilla.suse.com/1214066" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-39976" ref_url="https://www.suse.com/security/cve/CVE-2023-39976/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016295.html" source="SUSE-SU"/>
		<description>
This update for libqb fixes the following issues:

- CVE-2023-39976: Fixed potential buffer overflow with long log messages (bsc#1214066).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-22"/>
	<updated date="2023-09-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1214066">SUSE bug 1214066</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-39976/">CVE-2023-39976</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009795438" comment="libqb-devel-1.0.3+20190326.a521604-150100.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795439" comment="libqb-tests-1.0.3+20190326.a521604-150100.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795440" comment="libqb-tools-1.0.3+20190326.a521604-150100.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795117" comment="libqb20-1.0.3+20190326.a521604-150100.3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139207" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-actionview-5_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1209826" ref_url="https://bugzilla.suse.com/1209826" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-23913" ref_url="https://www.suse.com/security/cve/CVE-2023-23913/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016345.html" source="SUSE-SU"/>
		<description>
This update for rubygem-actionview-5_1 fixes the following issues:

 - CVE-2023-23913: Fixed DOM Based Cross-site Scripting in rails-ujs (bsc#1209826).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209826">SUSE bug 1209826</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-23913/">CVE-2023-23913</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797400" comment="ruby2.5-rubygem-actionview-5_1-5.1.4-150000.3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139208" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1203693" ref_url="https://bugzilla.suse.com/1203693" source="BUGZILLA"/>
		<reference ref_id="1205149" ref_url="https://bugzilla.suse.com/1205149" source="BUGZILLA"/>
		<reference ref_id="1206073" ref_url="https://bugzilla.suse.com/1206073" source="BUGZILLA"/>
		<reference ref_id="1206389" ref_url="https://bugzilla.suse.com/1206389" source="BUGZILLA"/>
		<reference ref_id="1206395" ref_url="https://bugzilla.suse.com/1206395" source="BUGZILLA"/>
		<reference ref_id="1206664" ref_url="https://bugzilla.suse.com/1206664" source="BUGZILLA"/>
		<reference ref_id="1206677" ref_url="https://bugzilla.suse.com/1206677" source="BUGZILLA"/>
		<reference ref_id="1206784" ref_url="https://bugzilla.suse.com/1206784" source="BUGZILLA"/>
		<reference ref_id="1207036" ref_url="https://bugzilla.suse.com/1207036" source="BUGZILLA"/>
		<reference ref_id="1207186" ref_url="https://bugzilla.suse.com/1207186" source="BUGZILLA"/>
		<reference ref_id="1207237" ref_url="https://bugzilla.suse.com/1207237" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3107" ref_url="https://www.suse.com/security/cve/CVE-2022-3107/" source="CVE"/>
		<reference ref_id="CVE-2022-3108" ref_url="https://www.suse.com/security/cve/CVE-2022-3108/" source="CVE"/>
		<reference ref_id="CVE-2022-3564" ref_url="https://www.suse.com/security/cve/CVE-2022-3564/" source="CVE"/>
		<reference ref_id="CVE-2022-4662" ref_url="https://www.suse.com/security/cve/CVE-2022-4662/" source="CVE"/>
		<reference ref_id="CVE-2022-47929" ref_url="https://www.suse.com/security/cve/CVE-2022-47929/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013764.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-3107: Fixed missing check of return value of kvmalloc_array() (bnc#1206395).
- CVE-2022-3108: Fixed missing check of return value of kmemdup() (bnc#1206389).
- CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bnc#1206073).
- CVE-2022-4662: Fixed incorrect access control in the USB core subsystem that could lead a local user to crash the system (bnc#1206664).
- CVE-2022-47929: Fixed NULL pointer dereference bug in the traffic control subsystem (bnc#1207237).
- CVE-2023-23454: Fixed denial or service in cbq_classify in net/sched/sch_cbq.c (bnc#1207036).

The following non-security bugs were fixed:

- Added support for enabling livepatching related packages on -RT (jsc#PED-1706).
- Added suse-kernel-rpm-scriptlets to kmp buildreqs (boo#1205149).
- HID: betop: check shape of output reports (git-fixes, bsc#1207186).
- HID: betop: fix slab-out-of-bounds Write in betop_probe (git-fixes, bsc#1207186).
- HID: check empty report_list in hid_validate_values() (git-fixes, bsc#1206784).
- Reverted 'constraints: increase disk space for all architectures' (bsc#1203693)
- net: sched: atm: dont intepret cls results when asked to drop (bsc#1207036).
- net: sched: cbq: dont intepret cls results when asked to drop (bsc#1207036).
- sctp: fail if no bound addresses can be used for a given scope (bsc#1206677).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-14"/>
	<updated date="2023-02-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203693">SUSE bug 1203693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205149">SUSE bug 1205149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206073">SUSE bug 1206073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206389">SUSE bug 1206389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206395">SUSE bug 1206395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206664">SUSE bug 1206664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206677">SUSE bug 1206677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206784">SUSE bug 1206784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207036">SUSE bug 1207036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207186">SUSE bug 1207186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207237">SUSE bug 1207237</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3107/">CVE-2022-3107</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3108/">CVE-2022-3108</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3564/">CVE-2022-3564</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-4662/">CVE-2022-4662</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-47929/">CVE-2022-47929</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009738369" comment="cluster-md-kmp-default-4.12.14-150100.197.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738370" comment="dlm-kmp-default-4.12.14-150100.197.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738371" comment="gfs2-kmp-default-4.12.14-150100.197.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738372" comment="ocfs2-kmp-default-4.12.14-150100.197.134.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139209" version="1" class="patch">
	<metadata>
		<title>Security update for haproxy (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1207181" ref_url="https://bugzilla.suse.com/1207181" source="BUGZILLA"/>
		<reference ref_id="1208132" ref_url="https://bugzilla.suse.com/1208132" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0056" ref_url="https://www.suse.com/security/cve/CVE-2023-0056/" source="CVE"/>
		<reference ref_id="CVE-2023-25725" ref_url="https://www.suse.com/security/cve/CVE-2023-25725/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013763.html" source="SUSE-SU"/>
		<description>
This update for haproxy fixes the following issues:

- CVE-2023-25725: Fixed a serious vulnerability in the HTTP/1 parser (bsc#1208132).
- CVE-2023-0056: Fixed denial of service via crash in http_wait_for_response() (bsc#1207181).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-14"/>
	<updated date="2023-02-14"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1207181">SUSE bug 1207181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208132">SUSE bug 1208132</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0056/">CVE-2023-0056</cve>
	<cve impact="critical" cvss3="9.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2023-25725/">CVE-2023-25725</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739105" comment="haproxy-2.0.14-150100.8.27.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139210" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-actionpack-5_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1207451" ref_url="https://bugzilla.suse.com/1207451" source="BUGZILLA"/>
		<reference ref_id="1207455" ref_url="https://bugzilla.suse.com/1207455" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-22792" ref_url="https://www.suse.com/security/cve/CVE-2023-22792/" source="CVE"/>
		<reference ref_id="CVE-2023-22795" ref_url="https://www.suse.com/security/cve/CVE-2023-22795/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0444-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013832.html" source="SUSE-SU"/>
		<description>
This update for rubygem-actionpack-5_1 fixes the following issues:

  - CVE-2023-22795: Fixed ReDoS in Action Dispatch cache (bsc#1207451).
  - CVE-2023-22792: Fixed ReDoS in Action Dispatch cookies (bnc#1207455).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207451">SUSE bug 1207451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207455">SUSE bug 1207455</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-22792/">CVE-2023-22792</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-22795/">CVE-2023-22795</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739310" comment="ruby2.5-rubygem-actionpack-5_1-5.1.4-150000.3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139211" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-activerecord-5_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1207450" ref_url="https://bugzilla.suse.com/1207450" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-44566" ref_url="https://www.suse.com/security/cve/CVE-2022-44566/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013874.html" source="SUSE-SU"/>
		<description>
This update for rubygem-activerecord-5_1 fixes the following issues:

- CVE-2022-44566: Fixed possible denial of service vulnerability in ActiveRecord's PostgreSQL adapter (bsc#1207450).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-23"/>
	<updated date="2023-02-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1207450">SUSE bug 1207450</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-44566/">CVE-2022-44566</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741916" comment="ruby2.5-rubygem-activerecord-5_1-5.1.4-150000.5.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139212" version="1" class="patch">
	<metadata>
		<title>Security update for rubygem-rack (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1209095" ref_url="https://bugzilla.suse.com/1209095" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-27530" ref_url="https://www.suse.com/security/cve/CVE-2023-27530/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014032.html" source="SUSE-SU"/>
		<description>
This update for rubygem-rack fixes the following issues:

- CVE-2023-27530: Fixed denial of service in Multipart MIME parsing (bsc#1209095).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-14"/>
	<updated date="2023-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209095">SUSE bug 1209095</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-27530/">CVE-2023-27530</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744162" comment="ruby2.5-rubygem-rack-2.0.8-150000.3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139213" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1186449" ref_url="https://bugzilla.suse.com/1186449" source="BUGZILLA"/>
		<reference ref_id="1194535" ref_url="https://bugzilla.suse.com/1194535" source="BUGZILLA"/>
		<reference ref_id="1201420" ref_url="https://bugzilla.suse.com/1201420" source="BUGZILLA"/>
		<reference ref_id="1203331" ref_url="https://bugzilla.suse.com/1203331" source="BUGZILLA"/>
		<reference ref_id="1203332" ref_url="https://bugzilla.suse.com/1203332" source="BUGZILLA"/>
		<reference ref_id="1204356" ref_url="https://bugzilla.suse.com/1204356" source="BUGZILLA"/>
		<reference ref_id="1204662" ref_url="https://bugzilla.suse.com/1204662" source="BUGZILLA"/>
		<reference ref_id="1205711" ref_url="https://bugzilla.suse.com/1205711" source="BUGZILLA"/>
		<reference ref_id="1207051" ref_url="https://bugzilla.suse.com/1207051" source="BUGZILLA"/>
		<reference ref_id="1207773" ref_url="https://bugzilla.suse.com/1207773" source="BUGZILLA"/>
		<reference ref_id="1207795" ref_url="https://bugzilla.suse.com/1207795" source="BUGZILLA"/>
		<reference ref_id="1207845" ref_url="https://bugzilla.suse.com/1207845" source="BUGZILLA"/>
		<reference ref_id="1207875" ref_url="https://bugzilla.suse.com/1207875" source="BUGZILLA"/>
		<reference ref_id="1208700" ref_url="https://bugzilla.suse.com/1208700" source="BUGZILLA"/>
		<reference ref_id="1208837" ref_url="https://bugzilla.suse.com/1208837" source="BUGZILLA"/>
		<reference ref_id="1209188" ref_url="https://bugzilla.suse.com/1209188" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4203" ref_url="https://www.suse.com/security/cve/CVE-2021-4203/" source="CVE"/>
		<reference ref_id="CVE-2022-2991" ref_url="https://www.suse.com/security/cve/CVE-2022-2991/" source="CVE"/>
		<reference ref_id="CVE-2022-36280" ref_url="https://www.suse.com/security/cve/CVE-2022-36280/" source="CVE"/>
		<reference ref_id="CVE-2022-38096" ref_url="https://www.suse.com/security/cve/CVE-2022-38096/" source="CVE"/>
		<reference ref_id="CVE-2022-4129" ref_url="https://www.suse.com/security/cve/CVE-2022-4129/" source="CVE"/>
		<reference ref_id="CVE-2023-0045" ref_url="https://www.suse.com/security/cve/CVE-2023-0045/" source="CVE"/>
		<reference ref_id="CVE-2023-0590" ref_url="https://www.suse.com/security/cve/CVE-2023-0590/" source="CVE"/>
		<reference ref_id="CVE-2023-0597" ref_url="https://www.suse.com/security/cve/CVE-2023-0597/" source="CVE"/>
		<reference ref_id="CVE-2023-1118" ref_url="https://www.suse.com/security/cve/CVE-2023-1118/" source="CVE"/>
		<reference ref_id="CVE-2023-23559" ref_url="https://www.suse.com/security/cve/CVE-2023-23559/" source="CVE"/>
		<reference ref_id="CVE-2023-26545" ref_url="https://www.suse.com/security/cve/CVE-2023-26545/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014072.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bsc#1194535).
- CVE-2022-2991: Fixed an heap-based overflow in the lightnvm implemenation (bsc#1201420).
- CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332).
- CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331).
- CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. (bsc#1205711)
- CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773).
- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-0597: Fixed a lack of randomization of per-cpu entry area in x86/mm (bsc#1207845).
- CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
- CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051).
- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700).

The following non-security bugs were fixed:

- kabi/severities: add l2tp local symbols
- module: Do not wait for GOING modules (bsc#1196058, bsc#1186449, bsc#1204356, bsc#1204662).
- net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-16"/>
	<updated date="2023-03-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186449">SUSE bug 1186449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194535">SUSE bug 1194535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201420">SUSE bug 1201420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203331">SUSE bug 1203331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203332">SUSE bug 1203332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204356">SUSE bug 1204356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204662">SUSE bug 1204662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205711">SUSE bug 1205711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207051">SUSE bug 1207051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207773">SUSE bug 1207773</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207795">SUSE bug 1207795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207845">SUSE bug 1207845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207875">SUSE bug 1207875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208700">SUSE bug 1208700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208837">SUSE bug 1208837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209188">SUSE bug 1209188</bugzilla>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4203/">CVE-2021-4203</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2991/">CVE-2022-2991</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36280/">CVE-2022-36280</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38096/">CVE-2022-38096</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-4129/">CVE-2022-4129</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-0045/">CVE-2023-0045</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0590/">CVE-2023-0590</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-0597/">CVE-2023-0597</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1118/">CVE-2023-1118</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2023-23559/">CVE-2023-23559</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26545/">CVE-2023-26545</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009744373" comment="cluster-md-kmp-default-4.12.14-150100.197.137.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744374" comment="dlm-kmp-default-4.12.14-150100.197.137.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744375" comment="gfs2-kmp-default-4.12.14-150100.197.137.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744376" comment="ocfs2-kmp-default-4.12.14-150100.197.137.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139214" version="1" class="patch">
	<metadata>
		<title>Security update for drbd (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Availability Extension 15 SP1</platform>
		</affected>
		<reference ref_id="1209188" ref_url="https://bugzilla.suse.com/1209188" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:0772-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028596.html" source="SUSE-SU"/>
		<description>

This update of drbd fixes the following issues:

- rebuild the package with the new secure boot key (bsc#1209188).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-16"/>
	<updated date="2023-03-16"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1209188">SUSE bug 1209188</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle-ha:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009254603" comment="SUSE Linux Enterprise High Availability Extension 15 SP1 is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009744819" comment="drbd-9.0.16+git.ab9777df-150100.8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744820" comment="drbd-kmp-default-9.0.16+git.ab9777df_k4.12.14_150100.197.134-150100.8.29.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139215" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1183942" ref_url="https://bugzilla.suse.com/1183942" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23981" ref_url="https://www.suse.com/security/cve/CVE-2021-23981/" source="CVE"/>
		<reference ref_id="CVE-2021-23982" ref_url="https://www.suse.com/security/cve/CVE-2021-23982/" source="CVE"/>
		<reference ref_id="CVE-2021-23984" ref_url="https://www.suse.com/security/cve/CVE-2021-23984/" source="CVE"/>
		<reference ref_id="CVE-2021-23987" ref_url="https://www.suse.com/security/cve/CVE-2021-23987/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008579.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox was updated to 78.9.0 ESR  (MFSA 2021-11, bsc#1183942)
  * CVE-2021-23981: Texture upload into an unbound backing buffer resulted in an out-of-bound read
  * CVE-2021-23982: Internal network hosts could have been probed by a malicious webpage
  * CVE-2021-23984: Malicious extensions could have spoofed popup information
  * CVE-2021-23987: Memory safety bugs 	  
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-01"/>
	<updated date="2021-04-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183942">SUSE bug 1183942</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23981/">CVE-2021-23981</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23982/">CVE-2021-23982</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23984/">CVE-2021-23984</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23987/">CVE-2021-23987</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503118" comment="MozillaFirefox-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503119" comment="MozillaFirefox-branding-SLE-78-4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503120" comment="MozillaFirefox-devel-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503121" comment="MozillaFirefox-translations-common-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503122" comment="MozillaFirefox-translations-other-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503123" comment="mozilla-nspr-4.25.1-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493661" comment="mozilla-nspr-32bit-4.25.1-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503124" comment="mozilla-nspr-devel-4.25.1-3.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139216" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1180947" ref_url="https://bugzilla.suse.com/1180947" source="BUGZILLA"/>
		<reference ref_id="1182909" ref_url="https://bugzilla.suse.com/1182909" source="BUGZILLA"/>
		<reference ref_id="1182912" ref_url="https://bugzilla.suse.com/1182912" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-24122" ref_url="https://www.suse.com/security/cve/CVE-2021-24122/" source="CVE"/>
		<reference ref_id="CVE-2021-25122" ref_url="https://www.suse.com/security/cve/CVE-2021-25122/" source="CVE"/>
		<reference ref_id="CVE-2021-25329" ref_url="https://www.suse.com/security/cve/CVE-2021-25329/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1009-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008578.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2021-24122: Fixed an information disclosure if resources are served from the NTFS file system (bsc#1180947).
- CVE-2021-25122: Apache Tomcat h2c request mix-up (bsc#1182912)
- CVE-2021-25329: Complete fix for CVE-2020-9484 (bsc#1182909)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-01"/>
	<updated date="2021-04-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180947">SUSE bug 1180947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182909">SUSE bug 1182909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182912">SUSE bug 1182912</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-24122/">CVE-2021-24122</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-25122/">CVE-2021-25122</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25329/">CVE-2021-25329</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503831" comment="tomcat-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503832" comment="tomcat-admin-webapps-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503833" comment="tomcat-el-3_0-api-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503834" comment="tomcat-jsp-2_3-api-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503835" comment="tomcat-lib-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503836" comment="tomcat-servlet-4_0-api-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503837" comment="tomcat-webapps-9.0.36-4.58.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139217" version="1" class="patch">
	<metadata>
		<title>Security update for OpenIPMI (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1183178" ref_url="https://bugzilla.suse.com/1183178" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:1010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008580.html" source="SUSE-SU"/>
		<description>
This update for OpenIPMI fixes the following issues:

- Fixed an issue where OpenIPMI was creating non-position independent binaries (bsc#1183178).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-01"/>
	<updated date="2021-04-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1183178">SUSE bug 1183178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503838" comment="OpenIPMI-2.0.25-7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503839" comment="OpenIPMI-devel-2.0.25-7.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139218" version="1" class="patch">
	<metadata>
		<title>Security update for fwupdate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182057" ref_url="https://bugzilla.suse.com/1182057" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008599.html" source="SUSE-SU"/>
		<description>
This update for fwupdate fixes the following issues:

- Add SBAT section to EFI images (bsc#1182057)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-08"/>
	<updated date="2021-04-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182057">SUSE bug 1182057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493673" comment="fwupdate-12-11.8.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493674" comment="fwupdate-devel-12-11.8.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493675" comment="fwupdate-efi-12-11.8.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493676" comment="libfwup1-12-11.8.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139219" version="1" class="patch">
	<metadata>
		<title>Security update for umoci (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1184147" ref_url="https://bugzilla.suse.com/1184147" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29136" ref_url="https://www.suse.com/security/cve/CVE-2021-29136/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008608.html" source="SUSE-SU"/>
		<description>
This update for umoci fixes the following issues:

- Update to umoci v0.4.6.
- CVE-2021-29136: malicious layer allows overwriting of host files (bsc#1184147)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-09"/>
	<updated date="2021-04-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184147">SUSE bug 1184147</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29136/">CVE-2021-29136</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503840" comment="umoci-0.4.6-3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139220" version="1" class="patch">
	<metadata>
		<title>Security update for spamassassin (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1159133" ref_url="https://bugzilla.suse.com/1159133" source="BUGZILLA"/>
		<reference ref_id="1184221" ref_url="https://bugzilla.suse.com/1184221" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12420" ref_url="https://www.suse.com/security/cve/CVE-2019-12420/" source="CVE"/>
		<reference ref_id="CVE-2020-1946" ref_url="https://www.suse.com/security/cve/CVE-2020-1946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008622.html" source="SUSE-SU"/>
		<description>
This update for spamassassin fixes the following issues:

- CVE-2019-12420: memory leak via crafted messages (bsc#1159133)
- CVE-2020-1946: security update (bsc#1184221)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-13"/>
	<updated date="2021-04-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159133">SUSE bug 1159133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184221">SUSE bug 1184221</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12420/">CVE-2019-12420</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1946/">CVE-2020-1946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503841" comment="perl-Mail-SpamAssassin-3.4.5-12.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503842" comment="perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503843" comment="spamassassin-3.4.5-12.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139221" version="1" class="patch">
	<metadata>
		<title>Security update for open-iscsi (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1173886" ref_url="https://bugzilla.suse.com/1173886" source="BUGZILLA"/>
		<reference ref_id="1179908" ref_url="https://bugzilla.suse.com/1179908" source="BUGZILLA"/>
		<reference ref_id="1183421" ref_url="https://bugzilla.suse.com/1183421" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13987" ref_url="https://www.suse.com/security/cve/CVE-2020-13987/" source="CVE"/>
		<reference ref_id="CVE-2020-13988" ref_url="https://www.suse.com/security/cve/CVE-2020-13988/" source="CVE"/>
		<reference ref_id="CVE-2020-17437" ref_url="https://www.suse.com/security/cve/CVE-2020-17437/" source="CVE"/>
		<reference ref_id="CVE-2020-17438" ref_url="https://www.suse.com/security/cve/CVE-2020-17438/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008619.html" source="SUSE-SU"/>
		<description>
This update for open-iscsi fixes the following issues:

- CVE-2020-17437: uIP Out-of-Bounds Write (bsc#1179908)
- CVE-2020-17438: uIP Out-of-Bounds Write (bsc#1179908)
- CVE-2020-13987: uIP Out-of-Bounds Read (bsc#1179908)
- CVE-2020-13988: uIP Integer Overflow (bsc#1179908)
- Enabled no-wait ('-W') iscsiadm option for iscsi login service (bsc#1173886, bsc#1183421)
- Added the ability to perform async logins (bsc#1173886)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-13"/>
	<updated date="2021-04-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173886">SUSE bug 1173886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179908">SUSE bug 1179908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183421">SUSE bug 1183421</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-13987/">CVE-2020-13987</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13988/">CVE-2020-13988</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-17437/">CVE-2020-17437</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-17438/">CVE-2020-17438</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503133" comment="iscsiuio-0.7.8.2-13.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503134" comment="libopeniscsiusr0_2_0-2.0.876-13.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503135" comment="open-iscsi-2.0.876-13.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503136" comment="open-iscsi-devel-2.0.876-13.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139222" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1180128" ref_url="https://bugzilla.suse.com/1180128" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3472" ref_url="https://www.suse.com/security/cve/CVE-2021-3472/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008637.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation (bsc#1180128)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-14"/>
	<updated date="2021-04-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180128">SUSE bug 1180128</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3472/">CVE-2021-3472</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503844" comment="xorg-x11-server-1.20.3-14.5.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503845" comment="xorg-x11-server-extra-1.20.3-14.5.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503846" comment="xorg-x11-server-sdk-1.20.3-14.5.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139223" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181256" ref_url="https://bugzilla.suse.com/1181256" source="BUGZILLA"/>
		<reference ref_id="1184532" ref_url="https://bugzilla.suse.com/1184532" source="BUGZILLA"/>
		<reference ref_id="1184533" ref_url="https://bugzilla.suse.com/1184533" source="BUGZILLA"/>
		<reference ref_id="1184534" ref_url="https://bugzilla.suse.com/1184534" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-1252" ref_url="https://www.suse.com/security/cve/CVE-2021-1252/" source="CVE"/>
		<reference ref_id="CVE-2021-1404" ref_url="https://www.suse.com/security/cve/CVE-2021-1404/" source="CVE"/>
		<reference ref_id="CVE-2021-1405" ref_url="https://www.suse.com/security/cve/CVE-2021-1405/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008636.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

- CVE-2021-1252: Fix for Excel XLM parser infinite loop. (bsc#1184532)
- CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. (bsc#1184533)
- CVE-2021-1405: Fix for mail parser NULL-dereference crash. (bsc#1184534)
- Fix errors when scanning files &gt; 4G (bsc#1181256)
- Update clamav.keyring
- Update to 0.103.2
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-14"/>
	<updated date="2021-04-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181256">SUSE bug 1181256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184532">SUSE bug 1184532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184533">SUSE bug 1184533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184534">SUSE bug 1184534</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-1252/">CVE-2021-1252</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-1404/">CVE-2021-1404</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-1405/">CVE-2021-1405</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503140" comment="clamav-0.103.2-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503141" comment="clamav-devel-0.103.2-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503142" comment="libclamav9-0.103.2-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503143" comment="libfreshclam2-0.103.2-3.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139224" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1172383" ref_url="https://bugzilla.suse.com/1172383" source="BUGZILLA"/>
		<reference ref_id="1172384" ref_url="https://bugzilla.suse.com/1172384" source="BUGZILLA"/>
		<reference ref_id="1172385" ref_url="https://bugzilla.suse.com/1172385" source="BUGZILLA"/>
		<reference ref_id="1172386" ref_url="https://bugzilla.suse.com/1172386" source="BUGZILLA"/>
		<reference ref_id="1172478" ref_url="https://bugzilla.suse.com/1172478" source="BUGZILLA"/>
		<reference ref_id="1173612" ref_url="https://bugzilla.suse.com/1173612" source="BUGZILLA"/>
		<reference ref_id="1174386" ref_url="https://bugzilla.suse.com/1174386" source="BUGZILLA"/>
		<reference ref_id="1174641" ref_url="https://bugzilla.suse.com/1174641" source="BUGZILLA"/>
		<reference ref_id="1175441" ref_url="https://bugzilla.suse.com/1175441" source="BUGZILLA"/>
		<reference ref_id="1176673" ref_url="https://bugzilla.suse.com/1176673" source="BUGZILLA"/>
		<reference ref_id="1176682" ref_url="https://bugzilla.suse.com/1176682" source="BUGZILLA"/>
		<reference ref_id="1176684" ref_url="https://bugzilla.suse.com/1176684" source="BUGZILLA"/>
		<reference ref_id="1178049" ref_url="https://bugzilla.suse.com/1178049" source="BUGZILLA"/>
		<reference ref_id="1178174" ref_url="https://bugzilla.suse.com/1178174" source="BUGZILLA"/>
		<reference ref_id="1178565" ref_url="https://bugzilla.suse.com/1178565" source="BUGZILLA"/>
		<reference ref_id="1178934" ref_url="https://bugzilla.suse.com/1178934" source="BUGZILLA"/>
		<reference ref_id="1179466" ref_url="https://bugzilla.suse.com/1179466" source="BUGZILLA"/>
		<reference ref_id="1179467" ref_url="https://bugzilla.suse.com/1179467" source="BUGZILLA"/>
		<reference ref_id="1179468" ref_url="https://bugzilla.suse.com/1179468" source="BUGZILLA"/>
		<reference ref_id="1179686" ref_url="https://bugzilla.suse.com/1179686" source="BUGZILLA"/>
		<reference ref_id="1180523" ref_url="https://bugzilla.suse.com/1180523" source="BUGZILLA"/>
		<reference ref_id="1181108" ref_url="https://bugzilla.suse.com/1181108" source="BUGZILLA"/>
		<reference ref_id="1181639" ref_url="https://bugzilla.suse.com/1181639" source="BUGZILLA"/>
		<reference ref_id="1181933" ref_url="https://bugzilla.suse.com/1181933" source="BUGZILLA"/>
		<reference ref_id="1182137" ref_url="https://bugzilla.suse.com/1182137" source="BUGZILLA"/>
		<reference ref_id="1182425" ref_url="https://bugzilla.suse.com/1182425" source="BUGZILLA"/>
		<reference ref_id="1182577" ref_url="https://bugzilla.suse.com/1182577" source="BUGZILLA"/>
		<reference ref_id="1182968" ref_url="https://bugzilla.suse.com/1182968" source="BUGZILLA"/>
		<reference ref_id="1183979" ref_url="https://bugzilla.suse.com/1183979" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11947" ref_url="https://www.suse.com/security/cve/CVE-2020-11947/" source="CVE"/>
		<reference ref_id="CVE-2020-12829" ref_url="https://www.suse.com/security/cve/CVE-2020-12829/" source="CVE"/>
		<reference ref_id="CVE-2020-13361" ref_url="https://www.suse.com/security/cve/CVE-2020-13361/" source="CVE"/>
		<reference ref_id="CVE-2020-13362" ref_url="https://www.suse.com/security/cve/CVE-2020-13362/" source="CVE"/>
		<reference ref_id="CVE-2020-13659" ref_url="https://www.suse.com/security/cve/CVE-2020-13659/" source="CVE"/>
		<reference ref_id="CVE-2020-13765" ref_url="https://www.suse.com/security/cve/CVE-2020-13765/" source="CVE"/>
		<reference ref_id="CVE-2020-14364" ref_url="https://www.suse.com/security/cve/CVE-2020-14364/" source="CVE"/>
		<reference ref_id="CVE-2020-15469" ref_url="https://www.suse.com/security/cve/CVE-2020-15469/" source="CVE"/>
		<reference ref_id="CVE-2020-15863" ref_url="https://www.suse.com/security/cve/CVE-2020-15863/" source="CVE"/>
		<reference ref_id="CVE-2020-16092" ref_url="https://www.suse.com/security/cve/CVE-2020-16092/" source="CVE"/>
		<reference ref_id="CVE-2020-25084" ref_url="https://www.suse.com/security/cve/CVE-2020-25084/" source="CVE"/>
		<reference ref_id="CVE-2020-25624" ref_url="https://www.suse.com/security/cve/CVE-2020-25624/" source="CVE"/>
		<reference ref_id="CVE-2020-25625" ref_url="https://www.suse.com/security/cve/CVE-2020-25625/" source="CVE"/>
		<reference ref_id="CVE-2020-25723" ref_url="https://www.suse.com/security/cve/CVE-2020-25723/" source="CVE"/>
		<reference ref_id="CVE-2020-27617" ref_url="https://www.suse.com/security/cve/CVE-2020-27617/" source="CVE"/>
		<reference ref_id="CVE-2020-27821" ref_url="https://www.suse.com/security/cve/CVE-2020-27821/" source="CVE"/>
		<reference ref_id="CVE-2020-28916" ref_url="https://www.suse.com/security/cve/CVE-2020-28916/" source="CVE"/>
		<reference ref_id="CVE-2020-29129" ref_url="https://www.suse.com/security/cve/CVE-2020-29129/" source="CVE"/>
		<reference ref_id="CVE-2020-29130" ref_url="https://www.suse.com/security/cve/CVE-2020-29130/" source="CVE"/>
		<reference ref_id="CVE-2020-29443" ref_url="https://www.suse.com/security/cve/CVE-2020-29443/" source="CVE"/>
		<reference ref_id="CVE-2021-20181" ref_url="https://www.suse.com/security/cve/CVE-2021-20181/" source="CVE"/>
		<reference ref_id="CVE-2021-20203" ref_url="https://www.suse.com/security/cve/CVE-2021-20203/" source="CVE"/>
		<reference ref_id="CVE-2021-20221" ref_url="https://www.suse.com/security/cve/CVE-2021-20221/" source="CVE"/>
		<reference ref_id="CVE-2021-20257" ref_url="https://www.suse.com/security/cve/CVE-2021-20257/" source="CVE"/>
		<reference ref_id="CVE-2021-3416" ref_url="https://www.suse.com/security/cve/CVE-2021-3416/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:


- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383)
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)
- Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)
- Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174)
- Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468)
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612)
- Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577)
- Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)
- Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416)
- Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659 bsc#1172386)
- Fix issue where s390 guest fails to find zipl boot menu index (bsc#1183979)
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
- Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)
- Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137)
- Apply fixes to qemu scsi passthrough with respect to timeout and error conditions, including using more correct status codes. (bsc#1178049)
- Fix OOB access in ARM interrupt handling (CVE-2021-20221 bsc#1181933)
- Tweaks to spec file for better formatting, and remove not needed BuildRequires for e2fsprogs-devel and libpcap-devel
- Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384)
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
- Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441)
- Fix DoS in packet processing of various emulated NICs (CVE-2020-16092 bsc#1174641)
- Fix buffer overflow in the XGMAC device (CVE-2020-15863 bsc#1174386)
- Use '%service_del_postun_without_restart' instead of '%service_del_postun' to avoid 'Failed to try-restart qemu-ga@.service' error while updating the qemu-guest-agent. (bsc#1178565)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-16"/>
	<updated date="2021-04-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172383">SUSE bug 1172383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172384">SUSE bug 1172384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172385">SUSE bug 1172385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172386">SUSE bug 1172386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172478">SUSE bug 1172478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173612">SUSE bug 1173612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174386">SUSE bug 1174386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174641">SUSE bug 1174641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175441">SUSE bug 1175441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176673">SUSE bug 1176673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176682">SUSE bug 1176682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176684">SUSE bug 1176684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178049">SUSE bug 1178049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178174">SUSE bug 1178174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178565">SUSE bug 1178565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178934">SUSE bug 1178934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179466">SUSE bug 1179466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179467">SUSE bug 1179467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179468">SUSE bug 1179468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179686">SUSE bug 1179686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180523">SUSE bug 1180523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181108">SUSE bug 1181108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181639">SUSE bug 1181639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181933">SUSE bug 1181933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182137">SUSE bug 1182137</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182425">SUSE bug 1182425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182577">SUSE bug 1182577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182968">SUSE bug 1182968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183979">SUSE bug 1183979</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11947/">CVE-2020-11947</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12829/">CVE-2020-12829</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13361/">CVE-2020-13361</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13362/">CVE-2020-13362</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13659/">CVE-2020-13659</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13765/">CVE-2020-13765</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14364/">CVE-2020-14364</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15469/">CVE-2020-15469</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15863/">CVE-2020-15863</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16092/">CVE-2020-16092</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-25084/">CVE-2020-25084</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-25624/">CVE-2020-25624</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25625/">CVE-2020-25625</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25723/">CVE-2020-25723</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27617/">CVE-2020-27617</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-27821/">CVE-2020-27821</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28916/">CVE-2020-28916</cve>
	<cve impact="low" cvss3="2.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29129/">CVE-2020-29129</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29130/">CVE-2020-29130</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-29443/">CVE-2020-29443</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20181/">CVE-2021-20181</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20203/">CVE-2021-20203</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-20221/">CVE-2021-20221</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20257/">CVE-2021-20257</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3416/">CVE-2021-3416</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503847" comment="qemu-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503848" comment="qemu-arm-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503849" comment="qemu-audio-alsa-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503850" comment="qemu-audio-oss-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503851" comment="qemu-audio-pa-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503852" comment="qemu-block-curl-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503853" comment="qemu-block-iscsi-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503854" comment="qemu-block-rbd-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503855" comment="qemu-block-ssh-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503856" comment="qemu-guest-agent-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503857" comment="qemu-ipxe-1.0.0+-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503858" comment="qemu-kvm-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503859" comment="qemu-lang-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503860" comment="qemu-seabios-1.12.0_0_ga698c89-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503861" comment="qemu-sgabios-8-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503862" comment="qemu-tools-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503863" comment="qemu-ui-curses-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503864" comment="qemu-ui-gtk-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503865" comment="qemu-vgabios-1.12.0_0_ga698c89-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503866" comment="qemu-x86-3.1.1.1-9.24.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139225" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1183936" ref_url="https://bugzilla.suse.com/1183936" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3156" ref_url="https://www.suse.com/security/cve/CVE-2021-3156/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008661.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:

- L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-20"/>
	<updated date="2021-04-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183936">SUSE bug 1183936</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3156/">CVE-2021-3156</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503164" comment="sudo-1.8.22-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503165" comment="sudo-devel-1.8.22-4.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139226" version="1" class="patch">
	<metadata>
		<title>Security update for libnettle (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1184401" ref_url="https://bugzilla.suse.com/1184401" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20305" ref_url="https://www.suse.com/security/cve/CVE-2021-20305/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008693.html" source="SUSE-SU"/>
		<description>
This update for libnettle fixes the following issues:

- CVE-2021-20305: Fixed the multiply function which was being called with out-of-range scalars (bsc#1184401).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184401">SUSE bug 1184401</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20305/">CVE-2021-20305</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503185" comment="libhogweed4-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493746" comment="libhogweed4-32bit-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503186" comment="libnettle-devel-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503187" comment="libnettle6-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493749" comment="libnettle6-32bit-3.4.1-4.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139227" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1184960" ref_url="https://bugzilla.suse.com/1184960" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23961" ref_url="https://www.suse.com/security/cve/CVE-2021-23961/" source="CVE"/>
		<reference ref_id="CVE-2021-23994" ref_url="https://www.suse.com/security/cve/CVE-2021-23994/" source="CVE"/>
		<reference ref_id="CVE-2021-23995" ref_url="https://www.suse.com/security/cve/CVE-2021-23995/" source="CVE"/>
		<reference ref_id="CVE-2021-23998" ref_url="https://www.suse.com/security/cve/CVE-2021-23998/" source="CVE"/>
		<reference ref_id="CVE-2021-23999" ref_url="https://www.suse.com/security/cve/CVE-2021-23999/" source="CVE"/>
		<reference ref_id="CVE-2021-24002" ref_url="https://www.suse.com/security/cve/CVE-2021-24002/" source="CVE"/>
		<reference ref_id="CVE-2021-29945" ref_url="https://www.suse.com/security/cve/CVE-2021-29945/" source="CVE"/>
		<reference ref_id="CVE-2021-29946" ref_url="https://www.suse.com/security/cve/CVE-2021-29946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008700.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- MozillaFirefox was updated to 78.10.0 ESR (bsc#1184960)
  * CVE-2021-23994: Out of bound write due to lazy initialization
  * CVE-2021-23995: Use-after-free in Responsive Design Mode
  * CVE-2021-23998: Secure Lock icon could have been spoofed
  * CVE-2021-23961: More internal network hosts could have been probed by a malicious webpage
  * CVE-2021-23999: Blob URLs may have been granted additional privileges
  * CVE-2021-24002: Arbitrary FTP command execution on FTP servers using an encoded URL
  * CVE-2021-29945: Incorrect size computation in WebAssembly JIT could lead to null-reads
  * CVE-2021-29946: Port blocking could be bypassed
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-29"/>
	<updated date="2021-04-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184960">SUSE bug 1184960</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23961/">CVE-2021-23961</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23994/">CVE-2021-23994</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23995/">CVE-2021-23995</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23998/">CVE-2021-23998</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23999/">CVE-2021-23999</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-24002/">CVE-2021-24002</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29945/">CVE-2021-29945</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29946/">CVE-2021-29946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503188" comment="MozillaFirefox-78.10.0-3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503189" comment="MozillaFirefox-devel-78.10.0-3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503190" comment="MozillaFirefox-translations-common-78.10.0-3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503191" comment="MozillaFirefox-translations-other-78.10.0-3.139.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139228" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1184161" ref_url="https://bugzilla.suse.com/1184161" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25317" ref_url="https://www.suse.com/security/cve/CVE-2021-25317/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008715.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:

- CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks (bsc#1184161)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-30"/>
	<updated date="2021-04-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184161">SUSE bug 1184161</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-25317/">CVE-2021-25317</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503257" comment="cups-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503258" comment="cups-client-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503259" comment="cups-config-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503260" comment="cups-ddk-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503261" comment="cups-devel-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503262" comment="libcups2-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493827" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503263" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503264" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503265" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503266" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139229" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1177204" ref_url="https://bugzilla.suse.com/1177204" source="BUGZILLA"/>
		<reference ref_id="1178591" ref_url="https://bugzilla.suse.com/1178591" source="BUGZILLA"/>
		<reference ref_id="1179148" ref_url="https://bugzilla.suse.com/1179148" source="BUGZILLA"/>
		<reference ref_id="1181254" ref_url="https://bugzilla.suse.com/1181254" source="BUGZILLA"/>
		<reference ref_id="1181989" ref_url="https://bugzilla.suse.com/1181989" source="BUGZILLA"/>
		<reference ref_id="1183072" ref_url="https://bugzilla.suse.com/1183072" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28368" ref_url="https://www.suse.com/security/cve/CVE-2020-28368/" source="CVE"/>
		<reference ref_id="CVE-2021-28687" ref_url="https://www.suse.com/security/cve/CVE-2021-28687/" source="CVE"/>
		<reference ref_id="CVE-2021-3308" ref_url="https://www.suse.com/security/cve/CVE-2021-3308/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008718.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2020-28368: Intel RAPL sidechannel attack aka PLATYPUS attack (bsc#1178591, XSA-351) 
- CVE-2021-3308: IRQ vector leak on x86 (bsc#1181254, XSA-360)
- CVE-2021-28687: HVM soft-reset crashes toolstack (bsc#1183072, XSA-368) 
- L3: conring size for XEN HV's with huge memory to small (bsc#1177204).
- kdump of HVM fails, soft-reset not handled by libxl (bsc#1179148)
- openQA job causes libvirtd to dump core when running kdump inside domain (bsc#1181989).
- Upstream bug fixes (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-30"/>
	<updated date="2021-04-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177204">SUSE bug 1177204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178591">SUSE bug 1178591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179148">SUSE bug 1179148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181254">SUSE bug 1181254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181989">SUSE bug 1181989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183072">SUSE bug 1183072</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-28368/">CVE-2020-28368</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28687/">CVE-2021-28687</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3308/">CVE-2021-3308</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503867" comment="xen-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503868" comment="xen-devel-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503869" comment="xen-libs-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503870" comment="xen-tools-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503871" comment="xen-tools-domU-4.12.4_08-3.43.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139230" version="1" class="patch">
	<metadata>
		<title>Security update for stunnel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1177580" ref_url="https://bugzilla.suse.com/1177580" source="BUGZILLA"/>
		<reference ref_id="1182529" ref_url="https://bugzilla.suse.com/1182529" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20230" ref_url="https://www.suse.com/security/cve/CVE-2021-20230/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008719.html" source="SUSE-SU"/>
		<description>
This update for stunnel fixes the following issues:

- Security fix: [bsc#1177580, bsc#1182529, CVE-2021-20230]
  * 'redirect' option does not properly handle 'verifyChain = yes'
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-03"/>
	<updated date="2021-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177580">SUSE bug 1177580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182529">SUSE bug 1182529</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-20230/">CVE-2021-20230</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503269" comment="stunnel-5.44-3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139231" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1183453" ref_url="https://bugzilla.suse.com/1183453" source="BUGZILLA"/>
		<reference ref_id="1185345" ref_url="https://bugzilla.suse.com/1185345" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25214" ref_url="https://www.suse.com/security/cve/CVE-2021-25214/" source="CVE"/>
		<reference ref_id="CVE-2021-25215" ref_url="https://www.suse.com/security/cve/CVE-2021-25215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1471-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008724.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- CVE-2021-25214: Fixed a broken inbound incremental zone update (IXFR) which could have caused named to terminate unexpectedly (bsc#1185345).
- CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that required the DNAME to be processed to resolve itself (bsc#1185345).
- make /usr/bin/delv in bind-tools position independent (bsc#1183453).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183453">SUSE bug 1183453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185345">SUSE bug 1185345</bugzilla>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-25214/">CVE-2021-25214</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-25215/">CVE-2021-25215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503270" comment="bind-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503271" comment="bind-chrootenv-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503272" comment="bind-devel-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499852" comment="bind-doc-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503273" comment="bind-utils-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503274" comment="libbind9-1600-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503275" comment="libdns1605-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503276" comment="libirs-devel-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503277" comment="libirs1601-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503278" comment="libisc1606-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503279" comment="libisccc1600-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503280" comment="libisccfg1600-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503281" comment="libns1604-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493844" comment="python3-bind-9.16.6-12.49.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139232" version="1" class="patch">
	<metadata>
		<title>Security update for ceph (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1145463" ref_url="https://bugzilla.suse.com/1145463" source="BUGZILLA"/>
		<reference ref_id="1174466" ref_url="https://bugzilla.suse.com/1174466" source="BUGZILLA"/>
		<reference ref_id="1177200" ref_url="https://bugzilla.suse.com/1177200" source="BUGZILLA"/>
		<reference ref_id="1178235" ref_url="https://bugzilla.suse.com/1178235" source="BUGZILLA"/>
		<reference ref_id="1178837" ref_url="https://bugzilla.suse.com/1178837" source="BUGZILLA"/>
		<reference ref_id="1178860" ref_url="https://bugzilla.suse.com/1178860" source="BUGZILLA"/>
		<reference ref_id="1178905" ref_url="https://bugzilla.suse.com/1178905" source="BUGZILLA"/>
		<reference ref_id="1179997" ref_url="https://bugzilla.suse.com/1179997" source="BUGZILLA"/>
		<reference ref_id="1180118" ref_url="https://bugzilla.suse.com/1180118" source="BUGZILLA"/>
		<reference ref_id="1180594" ref_url="https://bugzilla.suse.com/1180594" source="BUGZILLA"/>
		<reference ref_id="1181378" ref_url="https://bugzilla.suse.com/1181378" source="BUGZILLA"/>
		<reference ref_id="1183074" ref_url="https://bugzilla.suse.com/1183074" source="BUGZILLA"/>
		<reference ref_id="1183487" ref_url="https://bugzilla.suse.com/1183487" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25678" ref_url="https://www.suse.com/security/cve/CVE-2020-25678/" source="CVE"/>
		<reference ref_id="CVE-2020-27839" ref_url="https://www.suse.com/security/cve/CVE-2020-27839/" source="CVE"/>
		<reference ref_id="CVE-2021-20288" ref_url="https://www.suse.com/security/cve/CVE-2021-20288/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008721.html" source="SUSE-SU"/>
		<description>
This update for ceph fixes the following issues:

- ceph was updated to 14.2.20-402-g6aa76c6815:
    * CVE-2021-20288: Fixed unauthorized global_id reuse (bsc#1183074).
    * CVE-2020-25678: Do not add sensitive information in Ceph log files (bsc#1178905).
    * CVE-2020-27839: Use secure cookies to store JWT Token (bsc#1179997). 
    * mgr/dashboard: prometheus alerting: add some leeway for package drops and errors (bsc#1145463) 
    * mon: have 'mon stat' output json as well (bsc#1174466) 
    * rpm: ceph-mgr-dashboard recommends python3-saml on SUSE (bsc#1177200) 
    * mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled (bsc#1178235) 
    * rgw: cls/user: set from_index for reset stats calls (bsc#1178837) 
    * mgr/dashboard: Disable TLS 1.0 and 1.1 (bsc#1178860)
    * bluestore: provide a different name for fallback allocator (bsc#1180118) 
    * test/run-cli-tests: use cram from github (bsc#1181378) 
    * mgr/dashboard: fix 'Python2 Cookie module import fails on Python3' (bsc#1183487) 
    * common: make ms_bind_msgr2 default to 'false' (bsc#1180594) 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1145463">SUSE bug 1145463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174466">SUSE bug 1174466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177200">SUSE bug 1177200</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178235">SUSE bug 1178235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178837">SUSE bug 1178837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178860">SUSE bug 1178860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178905">SUSE bug 1178905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179997">SUSE bug 1179997</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180118">SUSE bug 1180118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180594">SUSE bug 1180594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181378">SUSE bug 1181378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183074">SUSE bug 1183074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183487">SUSE bug 1183487</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25678/">CVE-2020-25678</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27839/">CVE-2020-27839</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20288/">CVE-2021-20288</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503872" comment="ceph-common-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503873" comment="libcephfs-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503874" comment="libcephfs2-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503875" comment="librados-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503876" comment="librados2-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503877" comment="libradospp-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503878" comment="librbd-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503879" comment="librbd1-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503880" comment="librgw-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503881" comment="librgw2-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503882" comment="python3-ceph-argparse-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503883" comment="python3-cephfs-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503884" comment="python3-rados-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503885" comment="python3-rbd-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503886" comment="python3-rgw-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503887" comment="rados-objclass-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139233" version="1" class="patch">
	<metadata>
		<title>Security update for avahi (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1184521" ref_url="https://bugzilla.suse.com/1184521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3468" ref_url="https://www.suse.com/security/cve/CVE-2021-3468/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1493-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008937.html" source="SUSE-SU"/>
		<description>
This update for avahi fixes the following issues:

- CVE-2021-3468: avoid infinite loop by handling  HUP event in client_work (bsc#1184521).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1184521">SUSE bug 1184521</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3468/">CVE-2021-3468</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503888" comment="avahi-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503889" comment="avahi-autoipd-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503890" comment="avahi-compat-howl-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503891" comment="avahi-compat-mDNSResponder-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493868" comment="avahi-lang-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503892" comment="avahi-utils-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503893" comment="avahi-utils-gtk-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503894" comment="libavahi-client3-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493871" comment="libavahi-client3-32bit-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503895" comment="libavahi-common3-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493873" comment="libavahi-common3-32bit-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503896" comment="libavahi-core7-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503897" comment="libavahi-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503898" comment="libavahi-glib-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503899" comment="libavahi-glib1-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503900" comment="libavahi-gobject-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503901" comment="libavahi-gobject0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503902" comment="libavahi-ui-gtk3-0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503903" comment="libavahi-ui0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503904" comment="libdns_sd-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503905" comment="libhowl0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503906" comment="typelib-1_0-Avahi-0_6-0.7-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139234" version="1" class="patch">
	<metadata>
		<title>Security update for sca-patterns-sle11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1154824" ref_url="https://bugzilla.suse.com/1154824" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008731.html" source="SUSE-SU"/>
		<description>
This update for sca-patterns-sle11 fixes the following issues:

- New regular patterns (1) for version 1.3.1
   * Special Register Buffer Data Sampling aka CrossTalk (CVE-2020-0543) (bsc#1154824)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1154824">SUSE bug 1154824</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499853" comment="sca-patterns-sle11-1.3.1-7.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139235" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1178469" ref_url="https://bugzilla.suse.com/1178469" source="BUGZILLA"/>
		<reference ref_id="1179156" ref_url="https://bugzilla.suse.com/1179156" source="BUGZILLA"/>
		<reference ref_id="1183572" ref_url="https://bugzilla.suse.com/1183572" source="BUGZILLA"/>
		<reference ref_id="1183574" ref_url="https://bugzilla.suse.com/1183574" source="BUGZILLA"/>
		<reference ref_id="1184310" ref_url="https://bugzilla.suse.com/1184310" source="BUGZILLA"/>
		<reference ref_id="1184677" ref_url="https://bugzilla.suse.com/1184677" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27840" ref_url="https://www.suse.com/security/cve/CVE-2020-27840/" source="CVE"/>
		<reference ref_id="CVE-2021-20254" ref_url="https://www.suse.com/security/cve/CVE-2021-20254/" source="CVE"/>
		<reference ref_id="CVE-2021-20277" ref_url="https://www.suse.com/security/cve/CVE-2021-20277/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008730.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574).
- CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677).
- CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572).
- Avoid free'ing our own pointer in memcache when memcache_trim attempts to reduce cache size (bsc#1179156).
- s3-libads: use dns name to open a ldap session (bsc#1184310).
- Adjust smbcacls '--propagate-inheritance' feature to align with upstream (bsc#1178469).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178469">SUSE bug 1178469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179156">SUSE bug 1179156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183572">SUSE bug 1183572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183574">SUSE bug 1183574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184310">SUSE bug 1184310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184677">SUSE bug 1184677</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27840/">CVE-2020-27840</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-20254/">CVE-2021-20254</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20277/">CVE-2021-20277</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503907" comment="libdcerpc-binding0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503908" comment="libdcerpc-binding0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503909" comment="libdcerpc-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503910" comment="libdcerpc-samr-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503911" comment="libdcerpc-samr0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503912" comment="libdcerpc0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503913" comment="libdcerpc0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503914" comment="libndr-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503915" comment="libndr-krb5pac-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503916" comment="libndr-krb5pac0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503917" comment="libndr-krb5pac0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503918" comment="libndr-nbt-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503919" comment="libndr-nbt0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503920" comment="libndr-nbt0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503921" comment="libndr-standard-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503922" comment="libndr-standard0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503923" comment="libndr-standard0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503924" comment="libndr0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503925" comment="libndr0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503926" comment="libnetapi-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503927" comment="libnetapi0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503928" comment="libnetapi0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503929" comment="libsamba-credentials-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503930" comment="libsamba-credentials0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503931" comment="libsamba-credentials0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503932" comment="libsamba-errors-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503933" comment="libsamba-errors0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503934" comment="libsamba-errors0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503935" comment="libsamba-hostconfig-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503936" comment="libsamba-hostconfig0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503937" comment="libsamba-hostconfig0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503938" comment="libsamba-passdb-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503939" comment="libsamba-passdb0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503940" comment="libsamba-passdb0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503941" comment="libsamba-policy-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503942" comment="libsamba-policy-python3-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503943" comment="libsamba-policy0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503944" comment="libsamba-policy0-python3-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503945" comment="libsamba-util-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503946" comment="libsamba-util0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503947" comment="libsamba-util0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503948" comment="libsamdb-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503949" comment="libsamdb0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503950" comment="libsamdb0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503951" comment="libsmbclient-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503952" comment="libsmbclient0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503953" comment="libsmbconf-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503954" comment="libsmbconf0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503955" comment="libsmbconf0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503956" comment="libsmbldap-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503957" comment="libsmbldap2-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503958" comment="libsmbldap2-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503959" comment="libtevent-util-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503960" comment="libtevent-util0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503961" comment="libtevent-util0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503962" comment="libwbclient-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503963" comment="libwbclient0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503964" comment="libwbclient0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503965" comment="samba-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503966" comment="samba-ad-dc-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503967" comment="samba-client-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503968" comment="samba-core-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503969" comment="samba-dsdb-modules-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503970" comment="samba-libs-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503971" comment="samba-libs-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503972" comment="samba-libs-python-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503973" comment="samba-libs-python3-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503974" comment="samba-python-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503975" comment="samba-python3-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503976" comment="samba-winbind-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503977" comment="samba-winbind-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139236" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182719" ref_url="https://bugzilla.suse.com/1182719" source="BUGZILLA"/>
		<reference ref_id="1184155" ref_url="https://bugzilla.suse.com/1184155" source="BUGZILLA"/>
		<reference ref_id="1184262" ref_url="https://bugzilla.suse.com/1184262" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27918" ref_url="https://www.suse.com/security/cve/CVE-2020-27918/" source="CVE"/>
		<reference ref_id="CVE-2020-29623" ref_url="https://www.suse.com/security/cve/CVE-2020-29623/" source="CVE"/>
		<reference ref_id="CVE-2021-1765" ref_url="https://www.suse.com/security/cve/CVE-2021-1765/" source="CVE"/>
		<reference ref_id="CVE-2021-1788" ref_url="https://www.suse.com/security/cve/CVE-2021-1788/" source="CVE"/>
		<reference ref_id="CVE-2021-1789" ref_url="https://www.suse.com/security/cve/CVE-2021-1789/" source="CVE"/>
		<reference ref_id="CVE-2021-1799" ref_url="https://www.suse.com/security/cve/CVE-2021-1799/" source="CVE"/>
		<reference ref_id="CVE-2021-1801" ref_url="https://www.suse.com/security/cve/CVE-2021-1801/" source="CVE"/>
		<reference ref_id="CVE-2021-1844" ref_url="https://www.suse.com/security/cve/CVE-2021-1844/" source="CVE"/>
		<reference ref_id="CVE-2021-1870" ref_url="https://www.suse.com/security/cve/CVE-2021-1870/" source="CVE"/>
		<reference ref_id="CVE-2021-1871" ref_url="https://www.suse.com/security/cve/CVE-2021-1871/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008734.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.32.0 (bsc#1184155):
  * Fix the authentication request port when URL omits the port.
  * Fix iframe scrolling when main frame is scrolled in async
  * scrolling mode.
  * Stop using g_memdup.
  * Show a warning message when overriding signal handler for
  * threading suspension.
  * Fix the build on RISC-V with GCC 11.
  * Fix several crashes and rendering issues.
  * Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
- Update in version 2.30.6 (bsc#1184262):
  * Update user agent quirks again for Google Docs and Google Drive.
  * Fix several crashes and rendering issues.
  * Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
    CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Update _constraints for armv6/armv7 (bsc#1182719)
- restore NPAPI plugin support which was removed in 2.32.0
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182719">SUSE bug 1182719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184155">SUSE bug 1184155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184262">SUSE bug 1184262</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27918/">CVE-2020-27918</cve>
	<cve impact="important" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29623/">CVE-2020-29623</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1765/">CVE-2021-1765</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1788/">CVE-2021-1788</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1789/">CVE-2021-1789</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1799/">CVE-2021-1799</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1801/">CVE-2021-1801</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1844/">CVE-2021-1844</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1870/">CVE-2021-1870</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1871/">CVE-2021-1871</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503282" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503283" comment="libwebkit2gtk-4_0-37-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503284" comment="libwebkit2gtk3-lang-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503285" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503286" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503287" comment="typelib-1_0-WebKit2WebExtension-4_0-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503288" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503289" comment="webkit2gtk3-devel-2.32.0-3.74.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139237" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1184606" ref_url="https://bugzilla.suse.com/1184606" source="BUGZILLA"/>
		<reference ref_id="1185055" ref_url="https://bugzilla.suse.com/1185055" source="BUGZILLA"/>
		<reference ref_id="1185056" ref_url="https://bugzilla.suse.com/1185056" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2161" ref_url="https://www.suse.com/security/cve/CVE-2021-2161/" source="CVE"/>
		<reference ref_id="CVE-2021-2163" ref_url="https://www.suse.com/security/cve/CVE-2021-2163/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008756.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to upstream tag jdk-11.0.11+9 (April 2021 CPU)
  * CVE-2021-2163: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055)
  * CVE-2021-2161: Fixed incorrect handling of partially quoted arguments in ProcessBuilder (bsc#1185056)
- moved mozilla-nss dependency to java-11-openjdk-headless package, this is necessary to be able to do crypto 
  with just java-11-openjdk-headless installed (bsc#1184606).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-11"/>
	<updated date="2021-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184606">SUSE bug 1184606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185055">SUSE bug 1185055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185056">SUSE bug 1185056</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2161/">CVE-2021-2161</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2163/">CVE-2021-2163</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503291" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503292" comment="java-11-openjdk-demo-11.0.11.0-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503293" comment="java-11-openjdk-devel-11.0.11.0-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503294" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139238" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1179103" ref_url="https://bugzilla.suse.com/1179103" source="BUGZILLA"/>
		<reference ref_id="1179202" ref_url="https://bugzilla.suse.com/1179202" source="BUGZILLA"/>
		<reference ref_id="1179208" ref_url="https://bugzilla.suse.com/1179208" source="BUGZILLA"/>
		<reference ref_id="1179212" ref_url="https://bugzilla.suse.com/1179212" source="BUGZILLA"/>
		<reference ref_id="1179221" ref_url="https://bugzilla.suse.com/1179221" source="BUGZILLA"/>
		<reference ref_id="1179223" ref_url="https://bugzilla.suse.com/1179223" source="BUGZILLA"/>
		<reference ref_id="1179240" ref_url="https://bugzilla.suse.com/1179240" source="BUGZILLA"/>
		<reference ref_id="1179244" ref_url="https://bugzilla.suse.com/1179244" source="BUGZILLA"/>
		<reference ref_id="1179260" ref_url="https://bugzilla.suse.com/1179260" source="BUGZILLA"/>
		<reference ref_id="1179268" ref_url="https://bugzilla.suse.com/1179268" source="BUGZILLA"/>
		<reference ref_id="1179269" ref_url="https://bugzilla.suse.com/1179269" source="BUGZILLA"/>
		<reference ref_id="1179276" ref_url="https://bugzilla.suse.com/1179276" source="BUGZILLA"/>
		<reference ref_id="1179278" ref_url="https://bugzilla.suse.com/1179278" source="BUGZILLA"/>
		<reference ref_id="1179281" ref_url="https://bugzilla.suse.com/1179281" source="BUGZILLA"/>
		<reference ref_id="1179285" ref_url="https://bugzilla.suse.com/1179285" source="BUGZILLA"/>
		<reference ref_id="1179311" ref_url="https://bugzilla.suse.com/1179311" source="BUGZILLA"/>
		<reference ref_id="1179312" ref_url="https://bugzilla.suse.com/1179312" source="BUGZILLA"/>
		<reference ref_id="1179313" ref_url="https://bugzilla.suse.com/1179313" source="BUGZILLA"/>
		<reference ref_id="1179315" ref_url="https://bugzilla.suse.com/1179315" source="BUGZILLA"/>
		<reference ref_id="1179317" ref_url="https://bugzilla.suse.com/1179317" source="BUGZILLA"/>
		<reference ref_id="1179321" ref_url="https://bugzilla.suse.com/1179321" source="BUGZILLA"/>
		<reference ref_id="1179322" ref_url="https://bugzilla.suse.com/1179322" source="BUGZILLA"/>
		<reference ref_id="1179327" ref_url="https://bugzilla.suse.com/1179327" source="BUGZILLA"/>
		<reference ref_id="1179333" ref_url="https://bugzilla.suse.com/1179333" source="BUGZILLA"/>
		<reference ref_id="1179336" ref_url="https://bugzilla.suse.com/1179336" source="BUGZILLA"/>
		<reference ref_id="1179338" ref_url="https://bugzilla.suse.com/1179338" source="BUGZILLA"/>
		<reference ref_id="1179339" ref_url="https://bugzilla.suse.com/1179339" source="BUGZILLA"/>
		<reference ref_id="1179343" ref_url="https://bugzilla.suse.com/1179343" source="BUGZILLA"/>
		<reference ref_id="1179345" ref_url="https://bugzilla.suse.com/1179345" source="BUGZILLA"/>
		<reference ref_id="1179346" ref_url="https://bugzilla.suse.com/1179346" source="BUGZILLA"/>
		<reference ref_id="1179347" ref_url="https://bugzilla.suse.com/1179347" source="BUGZILLA"/>
		<reference ref_id="1179361" ref_url="https://bugzilla.suse.com/1179361" source="BUGZILLA"/>
		<reference ref_id="1179362" ref_url="https://bugzilla.suse.com/1179362" source="BUGZILLA"/>
		<reference ref_id="1179397" ref_url="https://bugzilla.suse.com/1179397" source="BUGZILLA"/>
		<reference ref_id="1179753" ref_url="https://bugzilla.suse.com/1179753" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-19667" ref_url="https://www.suse.com/security/cve/CVE-2020-19667/" source="CVE"/>
		<reference ref_id="CVE-2020-25664" ref_url="https://www.suse.com/security/cve/CVE-2020-25664/" source="CVE"/>
		<reference ref_id="CVE-2020-25665" ref_url="https://www.suse.com/security/cve/CVE-2020-25665/" source="CVE"/>
		<reference ref_id="CVE-2020-25666" ref_url="https://www.suse.com/security/cve/CVE-2020-25666/" source="CVE"/>
		<reference ref_id="CVE-2020-25674" ref_url="https://www.suse.com/security/cve/CVE-2020-25674/" source="CVE"/>
		<reference ref_id="CVE-2020-25675" ref_url="https://www.suse.com/security/cve/CVE-2020-25675/" source="CVE"/>
		<reference ref_id="CVE-2020-25676" ref_url="https://www.suse.com/security/cve/CVE-2020-25676/" source="CVE"/>
		<reference ref_id="CVE-2020-27750" ref_url="https://www.suse.com/security/cve/CVE-2020-27750/" source="CVE"/>
		<reference ref_id="CVE-2020-27751" ref_url="https://www.suse.com/security/cve/CVE-2020-27751/" source="CVE"/>
		<reference ref_id="CVE-2020-27752" ref_url="https://www.suse.com/security/cve/CVE-2020-27752/" source="CVE"/>
		<reference ref_id="CVE-2020-27753" ref_url="https://www.suse.com/security/cve/CVE-2020-27753/" source="CVE"/>
		<reference ref_id="CVE-2020-27754" ref_url="https://www.suse.com/security/cve/CVE-2020-27754/" source="CVE"/>
		<reference ref_id="CVE-2020-27755" ref_url="https://www.suse.com/security/cve/CVE-2020-27755/" source="CVE"/>
		<reference ref_id="CVE-2020-27756" ref_url="https://www.suse.com/security/cve/CVE-2020-27756/" source="CVE"/>
		<reference ref_id="CVE-2020-27757" ref_url="https://www.suse.com/security/cve/CVE-2020-27757/" source="CVE"/>
		<reference ref_id="CVE-2020-27758" ref_url="https://www.suse.com/security/cve/CVE-2020-27758/" source="CVE"/>
		<reference ref_id="CVE-2020-27759" ref_url="https://www.suse.com/security/cve/CVE-2020-27759/" source="CVE"/>
		<reference ref_id="CVE-2020-27760" ref_url="https://www.suse.com/security/cve/CVE-2020-27760/" source="CVE"/>
		<reference ref_id="CVE-2020-27761" ref_url="https://www.suse.com/security/cve/CVE-2020-27761/" source="CVE"/>
		<reference ref_id="CVE-2020-27762" ref_url="https://www.suse.com/security/cve/CVE-2020-27762/" source="CVE"/>
		<reference ref_id="CVE-2020-27763" ref_url="https://www.suse.com/security/cve/CVE-2020-27763/" source="CVE"/>
		<reference ref_id="CVE-2020-27764" ref_url="https://www.suse.com/security/cve/CVE-2020-27764/" source="CVE"/>
		<reference ref_id="CVE-2020-27765" ref_url="https://www.suse.com/security/cve/CVE-2020-27765/" source="CVE"/>
		<reference ref_id="CVE-2020-27766" ref_url="https://www.suse.com/security/cve/CVE-2020-27766/" source="CVE"/>
		<reference ref_id="CVE-2020-27767" ref_url="https://www.suse.com/security/cve/CVE-2020-27767/" source="CVE"/>
		<reference ref_id="CVE-2020-27768" ref_url="https://www.suse.com/security/cve/CVE-2020-27768/" source="CVE"/>
		<reference ref_id="CVE-2020-27769" ref_url="https://www.suse.com/security/cve/CVE-2020-27769/" source="CVE"/>
		<reference ref_id="CVE-2020-27770" ref_url="https://www.suse.com/security/cve/CVE-2020-27770/" source="CVE"/>
		<reference ref_id="CVE-2020-27771" ref_url="https://www.suse.com/security/cve/CVE-2020-27771/" source="CVE"/>
		<reference ref_id="CVE-2020-27772" ref_url="https://www.suse.com/security/cve/CVE-2020-27772/" source="CVE"/>
		<reference ref_id="CVE-2020-27773" ref_url="https://www.suse.com/security/cve/CVE-2020-27773/" source="CVE"/>
		<reference ref_id="CVE-2020-27774" ref_url="https://www.suse.com/security/cve/CVE-2020-27774/" source="CVE"/>
		<reference ref_id="CVE-2020-27775" ref_url="https://www.suse.com/security/cve/CVE-2020-27775/" source="CVE"/>
		<reference ref_id="CVE-2020-27776" ref_url="https://www.suse.com/security/cve/CVE-2020-27776/" source="CVE"/>
		<reference ref_id="CVE-2020-29599" ref_url="https://www.suse.com/security/cve/CVE-2020-29599/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).
- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).
- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).
- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).
- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).
- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).
- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).
- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).
- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).
- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).
- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).
- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).
- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).
- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).
- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).
- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).
- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).
- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).
- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).
- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).
- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).
- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).
- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).
- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).
- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).
- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).
- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).
- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).
- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).
- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).
- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).
- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).
- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).
- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).
- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-18"/>
	<updated date="2021-01-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179103">SUSE bug 1179103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179202">SUSE bug 1179202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179208">SUSE bug 1179208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179212">SUSE bug 1179212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179221">SUSE bug 1179221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179223">SUSE bug 1179223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179240">SUSE bug 1179240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179244">SUSE bug 1179244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179260">SUSE bug 1179260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179268">SUSE bug 1179268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179269">SUSE bug 1179269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179276">SUSE bug 1179276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179278">SUSE bug 1179278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179281">SUSE bug 1179281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179285">SUSE bug 1179285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179311">SUSE bug 1179311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179312">SUSE bug 1179312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179313">SUSE bug 1179313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179315">SUSE bug 1179315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179317">SUSE bug 1179317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179321">SUSE bug 1179321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179322">SUSE bug 1179322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179327">SUSE bug 1179327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179333">SUSE bug 1179333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179336">SUSE bug 1179336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179338">SUSE bug 1179338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179339">SUSE bug 1179339</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179343">SUSE bug 1179343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179345">SUSE bug 1179345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179346">SUSE bug 1179346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179347">SUSE bug 1179347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179361">SUSE bug 1179361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179362">SUSE bug 1179362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179397">SUSE bug 1179397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179753">SUSE bug 1179753</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-19667/">CVE-2020-19667</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-25664/">CVE-2020-25664</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25665/">CVE-2020-25665</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25666/">CVE-2020-25666</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25674/">CVE-2020-25674</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25675/">CVE-2020-25675</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25676/">CVE-2020-25676</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27750/">CVE-2020-27750</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27751/">CVE-2020-27751</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27752/">CVE-2020-27752</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27753/">CVE-2020-27753</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27754/">CVE-2020-27754</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27755/">CVE-2020-27755</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27756/">CVE-2020-27756</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27757/">CVE-2020-27757</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27758/">CVE-2020-27758</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27759/">CVE-2020-27759</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27760/">CVE-2020-27760</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27761/">CVE-2020-27761</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27762/">CVE-2020-27762</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27763/">CVE-2020-27763</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27764/">CVE-2020-27764</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27765/">CVE-2020-27765</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27766/">CVE-2020-27766</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27767/">CVE-2020-27767</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27768/">CVE-2020-27768</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27769/">CVE-2020-27769</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27770/">CVE-2020-27770</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27771/">CVE-2020-27771</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27772/">CVE-2020-27772</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27773/">CVE-2020-27773</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27774/">CVE-2020-27774</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27775/">CVE-2020-27775</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27776/">CVE-2020-27776</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29599/">CVE-2020-29599</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503978" comment="ImageMagick-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503979" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503980" comment="ImageMagick-config-7-upstream-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503981" comment="ImageMagick-devel-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503982" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503983" comment="libMagick++-devel-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503984" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503985" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503295" comment="perl-PerlMagick-7.0.7.34-3.90.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139239" version="1" class="patch">
	<metadata>
		<title>Security update for shim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1177315" ref_url="https://bugzilla.suse.com/1177315" source="BUGZILLA"/>
		<reference ref_id="1182057" ref_url="https://bugzilla.suse.com/1182057" source="BUGZILLA"/>
		<reference ref_id="1185464" ref_url="https://bugzilla.suse.com/1185464" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:1564-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008758.html" source="SUSE-SU"/>
		<description>
This update for shim fixes the following issues:

- Update to the unified shim binary for SBAT support (bsc#1182057)
  + Merged EKU codesign check (bsc#1177315)
- shim-install: Always assume 'removable' for Azure to avoid the endless reset loop (bsc#1185464).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-11"/>
	<updated date="2021-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177315">SUSE bug 1177315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182057">SUSE bug 1182057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185464">SUSE bug 1185464</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493901" comment="shim-15.4-3.20.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139240" version="1" class="patch">
	<metadata>
		<title>Security update for tcmu-runner (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1180676" ref_url="https://bugzilla.suse.com/1180676" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3139" ref_url="https://www.suse.com/security/cve/CVE-2021-3139/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008219.html" source="SUSE-SU"/>
		<description>
This update for tcmu-runner fixes the following issue:

- CVE-2021-3139: Fixed a LIO security issue (bsc#1180676).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-18"/>
	<updated date="2021-01-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180676">SUSE bug 1180676</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3139/">CVE-2021-3139</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503306" comment="libtcmu2-1.4.0-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503307" comment="tcmu-runner-1.4.0-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139241" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1047233" ref_url="https://bugzilla.suse.com/1047233" source="BUGZILLA"/>
		<reference ref_id="1172455" ref_url="https://bugzilla.suse.com/1172455" source="BUGZILLA"/>
		<reference ref_id="1173485" ref_url="https://bugzilla.suse.com/1173485" source="BUGZILLA"/>
		<reference ref_id="1176720" ref_url="https://bugzilla.suse.com/1176720" source="BUGZILLA"/>
		<reference ref_id="1177411" ref_url="https://bugzilla.suse.com/1177411" source="BUGZILLA"/>
		<reference ref_id="1178181" ref_url="https://bugzilla.suse.com/1178181" source="BUGZILLA"/>
		<reference ref_id="1179454" ref_url="https://bugzilla.suse.com/1179454" source="BUGZILLA"/>
		<reference ref_id="1180197" ref_url="https://bugzilla.suse.com/1180197" source="BUGZILLA"/>
		<reference ref_id="1181960" ref_url="https://bugzilla.suse.com/1181960" source="BUGZILLA"/>
		<reference ref_id="1182011" ref_url="https://bugzilla.suse.com/1182011" source="BUGZILLA"/>
		<reference ref_id="1182672" ref_url="https://bugzilla.suse.com/1182672" source="BUGZILLA"/>
		<reference ref_id="1182715" ref_url="https://bugzilla.suse.com/1182715" source="BUGZILLA"/>
		<reference ref_id="1182716" ref_url="https://bugzilla.suse.com/1182716" source="BUGZILLA"/>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183022" ref_url="https://bugzilla.suse.com/1183022" source="BUGZILLA"/>
		<reference ref_id="1183063" ref_url="https://bugzilla.suse.com/1183063" source="BUGZILLA"/>
		<reference ref_id="1183069" ref_url="https://bugzilla.suse.com/1183069" source="BUGZILLA"/>
		<reference ref_id="1183509" ref_url="https://bugzilla.suse.com/1183509" source="BUGZILLA"/>
		<reference ref_id="1183593" ref_url="https://bugzilla.suse.com/1183593" source="BUGZILLA"/>
		<reference ref_id="1183646" ref_url="https://bugzilla.suse.com/1183646" source="BUGZILLA"/>
		<reference ref_id="1183686" ref_url="https://bugzilla.suse.com/1183686" source="BUGZILLA"/>
		<reference ref_id="1183696" ref_url="https://bugzilla.suse.com/1183696" source="BUGZILLA"/>
		<reference ref_id="1183775" ref_url="https://bugzilla.suse.com/1183775" source="BUGZILLA"/>
		<reference ref_id="1184120" ref_url="https://bugzilla.suse.com/1184120" source="BUGZILLA"/>
		<reference ref_id="1184167" ref_url="https://bugzilla.suse.com/1184167" source="BUGZILLA"/>
		<reference ref_id="1184168" ref_url="https://bugzilla.suse.com/1184168" source="BUGZILLA"/>
		<reference ref_id="1184170" ref_url="https://bugzilla.suse.com/1184170" source="BUGZILLA"/>
		<reference ref_id="1184192" ref_url="https://bugzilla.suse.com/1184192" source="BUGZILLA"/>
		<reference ref_id="1184193" ref_url="https://bugzilla.suse.com/1184193" source="BUGZILLA"/>
		<reference ref_id="1184194" ref_url="https://bugzilla.suse.com/1184194" source="BUGZILLA"/>
		<reference ref_id="1184196" ref_url="https://bugzilla.suse.com/1184196" source="BUGZILLA"/>
		<reference ref_id="1184198" ref_url="https://bugzilla.suse.com/1184198" source="BUGZILLA"/>
		<reference ref_id="1184208" ref_url="https://bugzilla.suse.com/1184208" source="BUGZILLA"/>
		<reference ref_id="1184211" ref_url="https://bugzilla.suse.com/1184211" source="BUGZILLA"/>
		<reference ref_id="1184388" ref_url="https://bugzilla.suse.com/1184388" source="BUGZILLA"/>
		<reference ref_id="1184391" ref_url="https://bugzilla.suse.com/1184391" source="BUGZILLA"/>
		<reference ref_id="1184393" ref_url="https://bugzilla.suse.com/1184393" source="BUGZILLA"/>
		<reference ref_id="1184397" ref_url="https://bugzilla.suse.com/1184397" source="BUGZILLA"/>
		<reference ref_id="1184509" ref_url="https://bugzilla.suse.com/1184509" source="BUGZILLA"/>
		<reference ref_id="1184511" ref_url="https://bugzilla.suse.com/1184511" source="BUGZILLA"/>
		<reference ref_id="1184512" ref_url="https://bugzilla.suse.com/1184512" source="BUGZILLA"/>
		<reference ref_id="1184514" ref_url="https://bugzilla.suse.com/1184514" source="BUGZILLA"/>
		<reference ref_id="1184583" ref_url="https://bugzilla.suse.com/1184583" source="BUGZILLA"/>
		<reference ref_id="1184650" ref_url="https://bugzilla.suse.com/1184650" source="BUGZILLA"/>
		<reference ref_id="1184942" ref_url="https://bugzilla.suse.com/1184942" source="BUGZILLA"/>
		<reference ref_id="1185113" ref_url="https://bugzilla.suse.com/1185113" source="BUGZILLA"/>
		<reference ref_id="1185244" ref_url="https://bugzilla.suse.com/1185244" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0433" ref_url="https://www.suse.com/security/cve/CVE-2020-0433/" source="CVE"/>
		<reference ref_id="CVE-2020-25670" ref_url="https://www.suse.com/security/cve/CVE-2020-25670/" source="CVE"/>
		<reference ref_id="CVE-2020-25671" ref_url="https://www.suse.com/security/cve/CVE-2020-25671/" source="CVE"/>
		<reference ref_id="CVE-2020-25672" ref_url="https://www.suse.com/security/cve/CVE-2020-25672/" source="CVE"/>
		<reference ref_id="CVE-2020-25673" ref_url="https://www.suse.com/security/cve/CVE-2020-25673/" source="CVE"/>
		<reference ref_id="CVE-2020-27170" ref_url="https://www.suse.com/security/cve/CVE-2020-27170/" source="CVE"/>
		<reference ref_id="CVE-2020-27171" ref_url="https://www.suse.com/security/cve/CVE-2020-27171/" source="CVE"/>
		<reference ref_id="CVE-2020-27673" ref_url="https://www.suse.com/security/cve/CVE-2020-27673/" source="CVE"/>
		<reference ref_id="CVE-2020-27815" ref_url="https://www.suse.com/security/cve/CVE-2020-27815/" source="CVE"/>
		<reference ref_id="CVE-2020-35519" ref_url="https://www.suse.com/security/cve/CVE-2020-35519/" source="CVE"/>
		<reference ref_id="CVE-2020-36310" ref_url="https://www.suse.com/security/cve/CVE-2020-36310/" source="CVE"/>
		<reference ref_id="CVE-2020-36311" ref_url="https://www.suse.com/security/cve/CVE-2020-36311/" source="CVE"/>
		<reference ref_id="CVE-2020-36312" ref_url="https://www.suse.com/security/cve/CVE-2020-36312/" source="CVE"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-20219" ref_url="https://www.suse.com/security/cve/CVE-2021-20219/" source="CVE"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="CVE-2021-28038" ref_url="https://www.suse.com/security/cve/CVE-2021-28038/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-28950" ref_url="https://www.suse.com/security/cve/CVE-2021-28950/" source="CVE"/>
		<reference ref_id="CVE-2021-28964" ref_url="https://www.suse.com/security/cve/CVE-2021-28964/" source="CVE"/>
		<reference ref_id="CVE-2021-28971" ref_url="https://www.suse.com/security/cve/CVE-2021-28971/" source="CVE"/>
		<reference ref_id="CVE-2021-28972" ref_url="https://www.suse.com/security/cve/CVE-2021-28972/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="CVE-2021-29155" ref_url="https://www.suse.com/security/cve/CVE-2021-29155/" source="CVE"/>
		<reference ref_id="CVE-2021-29264" ref_url="https://www.suse.com/security/cve/CVE-2021-29264/" source="CVE"/>
		<reference ref_id="CVE-2021-29265" ref_url="https://www.suse.com/security/cve/CVE-2021-29265/" source="CVE"/>
		<reference ref_id="CVE-2021-29647" ref_url="https://www.suse.com/security/cve/CVE-2021-29647/" source="CVE"/>
		<reference ref_id="CVE-2021-29650" ref_url="https://www.suse.com/security/cve/CVE-2021-29650/" source="CVE"/>
		<reference ref_id="CVE-2021-30002" ref_url="https://www.suse.com/security/cve/CVE-2021-30002/" source="CVE"/>
		<reference ref_id="CVE-2021-3428" ref_url="https://www.suse.com/security/cve/CVE-2021-3428/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="CVE-2021-3483" ref_url="https://www.suse.com/security/cve/CVE-2021-3483/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bnc#1184509).
- CVE-2021-29650: Fixed an issue inside the netfilter subsystem that allowed attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value (bnc#1184208).
- CVE-2021-29155: Fixed an issue within kernel/bpf/verifier.c that performed undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations (bnc#1184942).
- CVE-2020-36310: Fixed an issue in arch/x86/kvm/svm/svm.c that allowed a set_memory_region_test infinite loop for certain nested page faults (bnc#1184512).
- CVE-2020-27673: Fixed an issue in Xen where a guest OS users could have caused a denial of service (host OS hang) via a high rate of events to dom0 (bnc#1177411, bnc#1184583).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bnc#1184391).
- CVE-2020-25673: Fixed NFC endless loops caused by repeated llcp_sock_connect() (bsc#1178181).
- CVE-2020-25672: Fixed NFC memory leak in llcp_sock_connect() (bsc#1178181).
- CVE-2020-25671: Fixed NFC refcount leak in llcp_sock_connect() (bsc#1178181).
- CVE-2020-25670: Fixed NFC refcount leak in llcp_sock_bind() (bsc#1178181).
- CVE-2020-36311: Fixed an issue in arch/x86/kvm/svm/sev.c that allowed attackers to cause a denial of service (soft lockup) by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions) (bnc#1184511).
- CVE-2021-28950: Fixed an issue in fs/fuse/fuse_i.h where a 'stall on CPU' could have occured because a retry loop continually finds the same bad inode (bnc#1184194, bnc#1184211).
- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bnc#1184211).
- CVE-2021-30002: Fixed a memory leak issue when a webcam device exists (bnc#1184120).
- CVE-2021-3483: Fixed a use-after-free bug in nosy_ioctl() (bsc#1184393).
- CVE-2021-20219: Fixed a denial of service vulnerability in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could have delayed the loop and cause a threat to the system availability (bnc#1184397).
- CVE-2021-28964: Fixed a race condition in fs/btrfs/ctree.c that could have caused a denial of service because of a lack of locking on an extent buffer before a cloning operation (bnc#1184193).
- CVE-2021-3444: Fixed the bpf verifier as it did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution (bnc#1184170).
- CVE-2021-28971: Fixed a potential local denial of service in intel_pmu_drain_pebs_nhm where userspace applications can cause a system crash because the PEBS status in a PEBS record is mishandled (bnc#1184196).
- CVE-2021-28688: Fixed XSA-365 that includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in leaking persistent grants. The leak in turn would prevent fully cleaning up after a respective guest has died, leaving around zombie domains (bnc#1183646).
- CVE-2021-29265: Fixed an issue in usbip_sockfd_store in drivers/usb/usbip/stub_dev.c that allowed attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status (bnc#1184167).
- CVE-2021-29264: Fixed an issue in drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver that allowed attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is enabled (bnc#1184168).
- CVE-2021-28972: Fixed an issue in drivers/pci/hotplug/rpadlpar_sysfs.c where the RPA PCI Hotplug driver had a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination (bnc#1184198).
- CVE-2021-29647: Fixed an issue in kernel qrtr_recvmsg in net/qrtr/qrtr.c that allowed attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure (bnc#1184192).
- CVE-2020-27171: Fixed an issue in kernel/bpf/verifier.c that had an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory (bnc#1183686, bnc#1183775).
- CVE-2020-27170: Fixed an issue in kernel/bpf/verifier.c that performed undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. This affects pointer types that do not define a ptr_limit (bnc#1183686 bnc#1183775).
- CVE-2021-28660: Fixed rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c that allowed writing beyond the end of the ssid array (bnc#1183593).
- CVE-2020-35519: Update patch reference for x25 fix (bsc#1183696).
- CVE-2021-3428: Fixed ext4 integer overflow in ext4_es_cache_extent (bsc#1173485, bsc#1183509).
- CVE-2020-0433: Fixed blk_mq_queue_tag_busy_iter of blk-mq-tag.c, where a possible use after free due to improper locking could have happened. This could have led to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1176720).
- CVE-2021-28038: Fixed an issue with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931 (bnc#1183022, bnc#1183069).
- CVE-2020-27815: Fixed jfs array index bounds check in dbAdjTree (bsc#1179454).
- CVE-2021-27365: Fixed an issue inside the iSCSI data structures that does not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message (bnc#1182715).
- CVE-2021-27363: Fixed an issue with a kernel pointer leak that could have been used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables (bnc#1182716).
- CVE-2021-27364: Fixed an issue in drivers/scsi/scsi_transport_iscsi.c where an unprivileged user can craft Netlink messages (bnc#1182717).

The following non-security bugs were fixed:

- Revert 'rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)' This turned out to be a bad idea: the kernel-$flavor-devel package must be usable without kernel-$flavor, e.g. at the build of a KMP. And this change brought superfluous installation of kernel-preempt when a system had kernel-syms (bsc#1185113).
- Xen/gnttab: handle p2m update errors on a per-slot basis (bsc#1183022 XSA-367).
- bfq: Fix kABI for update internal depth state when queue depth changes (bsc#1172455).
- bfq: update internal depth state when queue depth changes (bsc#1172455).
- bpf: Add sanity check for upper ptr_limit (bsc#1183686 bsc#1183775).
- bpf: Simplify alu_limit masking for pointer arithmetic (bsc#1183686 bsc#1183775).
- handle also the opposite type of race condition
- ibmvnic: Clear failover_pending if unable to schedule (bsc#1181960 ltc#190997).
- ibmvnic: always store valid MAC address (bsc#1182011 ltc#191844).
- ibmvnic: store valid MAC address (bsc#1182011).
- macros.kernel-source: Use spec_install_pre for certificate installation (boo#1182672).
- nvme: return an error if nvme_set_queue_count() fails (bsc#1180197).
- post.sh: Return an error when module update fails (bsc#1047233 bsc#1184388).
- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- rpm/mkspec: Use tilde instead of dot for version string with rc (bsc#1184650)
- xen-netback: respect gnttab_map_refs()'s return value (bsc#1183022, XSA-367).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-18"/>
	<updated date="2021-05-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1047233">SUSE bug 1047233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172455">SUSE bug 1172455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173485">SUSE bug 1173485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176720">SUSE bug 1176720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177411">SUSE bug 1177411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178181">SUSE bug 1178181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179454">SUSE bug 1179454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180197">SUSE bug 1180197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181960">SUSE bug 1181960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182011">SUSE bug 1182011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182672">SUSE bug 1182672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182715">SUSE bug 1182715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182716">SUSE bug 1182716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183022">SUSE bug 1183022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183063">SUSE bug 1183063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183069">SUSE bug 1183069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183509">SUSE bug 1183509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183593">SUSE bug 1183593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183646">SUSE bug 1183646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183686">SUSE bug 1183686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183696">SUSE bug 1183696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183775">SUSE bug 1183775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184120">SUSE bug 1184120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184167">SUSE bug 1184167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184168">SUSE bug 1184168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184170">SUSE bug 1184170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184192">SUSE bug 1184192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184193">SUSE bug 1184193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184194">SUSE bug 1184194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184196">SUSE bug 1184196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184198">SUSE bug 1184198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184208">SUSE bug 1184208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184211">SUSE bug 1184211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184388">SUSE bug 1184388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184391">SUSE bug 1184391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184393">SUSE bug 1184393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184397">SUSE bug 1184397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184509">SUSE bug 1184509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184511">SUSE bug 1184511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184512">SUSE bug 1184512</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184514">SUSE bug 1184514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184583">SUSE bug 1184583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184650">SUSE bug 1184650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184942">SUSE bug 1184942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185113">SUSE bug 1185113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185244">SUSE bug 1185244</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0433/">CVE-2020-0433</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25670/">CVE-2020-25670</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25671/">CVE-2020-25671</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25672/">CVE-2020-25672</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25673/">CVE-2020-25673</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27170/">CVE-2020-27170</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27171/">CVE-2020-27171</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27673/">CVE-2020-27673</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27815/">CVE-2020-27815</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35519/">CVE-2020-35519</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36310/">CVE-2020-36310</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36311/">CVE-2020-36311</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36312/">CVE-2020-36312</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20219/">CVE-2021-20219</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28038/">CVE-2021-28038</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28950/">CVE-2021-28950</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28964/">CVE-2021-28964</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28971/">CVE-2021-28971</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28972/">CVE-2021-28972</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29155/">CVE-2021-29155</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29264/">CVE-2021-29264</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29265/">CVE-2021-29265</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29647/">CVE-2021-29647</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29650/">CVE-2021-29650</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-30002/">CVE-2021-30002</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3428/">CVE-2021-3428</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3483/">CVE-2021-3483</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503986" comment="kernel-default-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503987" comment="kernel-default-base-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503988" comment="kernel-default-devel-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503989" comment="kernel-devel-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503990" comment="kernel-docs-4.12.14-197.89.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503991" comment="kernel-macros-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503992" comment="kernel-obs-build-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503993" comment="kernel-source-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503994" comment="kernel-syms-4.12.14-197.89.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139242" version="1" class="patch">
	<metadata>
		<title>Security update for lz4 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1185438" ref_url="https://bugzilla.suse.com/1185438" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3520" ref_url="https://www.suse.com/security/cve/CVE-2021-3520/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1647-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/018981.html" source="SUSE-SU"/>
		<description>
This update for lz4 fixes the following issues:

- CVE-2021-3520: Fixed memory corruption due to an integer overflow bug caused by memmove argument (bsc#1185438).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-19"/>
	<updated date="2021-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185438">SUSE bug 1185438</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-3520/">CVE-2021-3520</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503309" comment="liblz4-1-1.8.0-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493923" comment="liblz4-1-32bit-1.8.0-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503310" comment="liblz4-devel-1.8.0-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503311" comment="lz4-1.8.0-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139243" version="1" class="patch">
	<metadata>
		<title>Security update for djvulibre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1185895" ref_url="https://bugzilla.suse.com/1185895" source="BUGZILLA"/>
		<reference ref_id="1185900" ref_url="https://bugzilla.suse.com/1185900" source="BUGZILLA"/>
		<reference ref_id="1185904" ref_url="https://bugzilla.suse.com/1185904" source="BUGZILLA"/>
		<reference ref_id="1185905" ref_url="https://bugzilla.suse.com/1185905" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-32490" ref_url="https://www.suse.com/security/cve/CVE-2021-32490/" source="CVE"/>
		<reference ref_id="CVE-2021-32491" ref_url="https://www.suse.com/security/cve/CVE-2021-32491/" source="CVE"/>
		<reference ref_id="CVE-2021-32492" ref_url="https://www.suse.com/security/cve/CVE-2021-32492/" source="CVE"/>
		<reference ref_id="CVE-2021-32493" ref_url="https://www.suse.com/security/cve/CVE-2021-32493/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008784.html" source="SUSE-SU"/>
		<description>
This update for djvulibre fixes the following issues:

Security issues fixed:

- CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
- CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
- CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
- CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-19"/>
	<updated date="2021-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185895">SUSE bug 1185895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185900">SUSE bug 1185900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185904">SUSE bug 1185904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185905">SUSE bug 1185905</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32490/">CVE-2021-32490</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32491/">CVE-2021-32491</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32492/">CVE-2021-32492</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32493/">CVE-2021-32493</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503312" comment="libdjvulibre-devel-3.5.27-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503313" comment="libdjvulibre21-3.5.27-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139244" version="1" class="patch">
	<metadata>
		<title>Security update for graphviz (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1185833" ref_url="https://bugzilla.suse.com/1185833" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-18032" ref_url="https://www.suse.com/security/cve/CVE-2020-18032/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1651-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/018980.html" source="SUSE-SU"/>
		<description>
This update for graphviz fixes the following issues:

- CVE-2020-18032: Fixed possible remote code execution via buffer overflow (bsc#1185833).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-19"/>
	<updated date="2021-05-19"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1185833">SUSE bug 1185833</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-18032/">CVE-2020-18032</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503314" comment="graphviz-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503315" comment="graphviz-devel-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503316" comment="graphviz-perl-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503317" comment="graphviz-plugins-core-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503318" comment="graphviz-tcl-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503319" comment="libgraphviz6-2.40.1-6.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139245" version="1" class="patch">
	<metadata>
		<title>Security update for slurm_20_11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186024" ref_url="https://bugzilla.suse.com/1186024" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31215" ref_url="https://www.suse.com/security/cve/CVE-2021-31215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008877.html" source="SUSE-SU"/>
		<description>
This update for slurm_20_11 fixes the following issues:

- Udpate to 20.02.7:
- CVE-2021-31215: remote code execution as SlurmUser because of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling (bsc#1186024)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-27"/>
	<updated date="2021-05-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186024">SUSE bug 1186024</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-31215/">CVE-2021-31215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503995" comment="libnss_slurm2_20_02-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503996" comment="libpmi0_20_02-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503997" comment="libslurm35-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503998" comment="perl-slurm_20_02-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503999" comment="slurm_20_02-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504000" comment="slurm_20_02-auth-none-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504001" comment="slurm_20_02-config-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504002" comment="slurm_20_02-config-man-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504003" comment="slurm_20_02-devel-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504004" comment="slurm_20_02-doc-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504005" comment="slurm_20_02-lua-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504006" comment="slurm_20_02-munge-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504007" comment="slurm_20_02-node-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504008" comment="slurm_20_02-pam_slurm-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504009" comment="slurm_20_02-plugins-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504010" comment="slurm_20_02-slurmdbd-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504011" comment="slurm_20_02-sql-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504012" comment="slurm_20_02-sview-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504013" comment="slurm_20_02-torque-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504014" comment="slurm_20_02-webdoc-20.02.7-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139246" version="1" class="patch">
	<metadata>
		<title>Security update for slurm_20_11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1180700" ref_url="https://bugzilla.suse.com/1180700" source="BUGZILLA"/>
		<reference ref_id="1185603" ref_url="https://bugzilla.suse.com/1185603" source="BUGZILLA"/>
		<reference ref_id="1186024" ref_url="https://bugzilla.suse.com/1186024" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31215" ref_url="https://www.suse.com/security/cve/CVE-2021-31215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008871.html" source="SUSE-SU"/>
		<description>
This update for slurm_20_11 fixes the following issues:

- Udpate to 20.11.7:
- CVE-2021-31215: remote code execution as SlurmUser because of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling (bsc#1186024)
- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).
- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-27"/>
	<updated date="2021-05-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180700">SUSE bug 1180700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185603">SUSE bug 1185603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186024">SUSE bug 1186024</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-31215/">CVE-2021-31215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504015" comment="libnss_slurm2_20_11-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504016" comment="libpmi0_20_11-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504017" comment="libslurm36-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504018" comment="perl-slurm_20_11-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504019" comment="slurm_20_11-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504020" comment="slurm_20_11-auth-none-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504021" comment="slurm_20_11-config-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504022" comment="slurm_20_11-config-man-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504023" comment="slurm_20_11-devel-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504024" comment="slurm_20_11-doc-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504025" comment="slurm_20_11-lua-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504026" comment="slurm_20_11-munge-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504027" comment="slurm_20_11-node-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504028" comment="slurm_20_11-pam_slurm-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504029" comment="slurm_20_11-plugins-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504030" comment="slurm_20_11-slurmdbd-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504031" comment="slurm_20_11-sql-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504032" comment="slurm_20_11-sview-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504033" comment="slurm_20_11-torque-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504034" comment="slurm_20_11-webdoc-20.11.7-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139247" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1177976" ref_url="https://bugzilla.suse.com/1177976" source="BUGZILLA"/>
		<reference ref_id="1183933" ref_url="https://bugzilla.suse.com/1183933" source="BUGZILLA"/>
		<reference ref_id="1186114" ref_url="https://bugzilla.suse.com/1186114" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22876" ref_url="https://www.suse.com/security/cve/CVE-2021-22876/" source="CVE"/>
		<reference ref_id="CVE-2021-22898" ref_url="https://www.suse.com/security/cve/CVE-2021-22898/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008887.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2021-22876: Fixed an issue where the automatic referer was leaking credentials (bsc#1183933).
- CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114).
- Fix for SFTP uploads when it results in empty uploaded files (bsc#1177976).
- Allow partial chain verification (jsc#SLE-17956).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-31"/>
	<updated date="2021-05-31"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177976">SUSE bug 1177976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183933">SUSE bug 1183933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186114">SUSE bug 1186114</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22876/">CVE-2021-22876</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22898/">CVE-2021-22898</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503321" comment="curl-7.60.0-3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503322" comment="libcurl-devel-7.60.0-3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503323" comment="libcurl4-7.60.0-3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503324" comment="libcurl4-32bit-7.60.0-3.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139248" version="1" class="patch">
	<metadata>
		<title>Security update for slurm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186024" ref_url="https://bugzilla.suse.com/1186024" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31215" ref_url="https://www.suse.com/security/cve/CVE-2021-31215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008891.html" source="SUSE-SU"/>
		<description>
This update for slurm fixes the following issues:

- CVE-2021-31215: remote code execution as SlurmUser because of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling (bsc#1186024)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-31"/>
	<updated date="2021-05-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186024">SUSE bug 1186024</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-31215/">CVE-2021-31215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504035" comment="libpmi0-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504036" comment="libslurm33-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504037" comment="perl-slurm-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504038" comment="slurm-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504039" comment="slurm-auth-none-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504040" comment="slurm-config-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504041" comment="slurm-config-man-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504042" comment="slurm-devel-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504043" comment="slurm-doc-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504044" comment="slurm-lua-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504045" comment="slurm-munge-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504046" comment="slurm-node-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504047" comment="slurm-pam_slurm-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504048" comment="slurm-plugins-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504049" comment="slurm-slurmdbd-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504050" comment="slurm-sql-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504051" comment="slurm-sview-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504052" comment="slurm-torque-18.08.9-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139249" version="1" class="patch">
	<metadata>
		<title>Security update for ceph (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1185619" ref_url="https://bugzilla.suse.com/1185619" source="BUGZILLA"/>
		<reference ref_id="1186020" ref_url="https://bugzilla.suse.com/1186020" source="BUGZILLA"/>
		<reference ref_id="1186021" ref_url="https://bugzilla.suse.com/1186021" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3509" ref_url="https://www.suse.com/security/cve/CVE-2021-3509/" source="CVE"/>
		<reference ref_id="CVE-2021-3524" ref_url="https://www.suse.com/security/cve/CVE-2021-3524/" source="CVE"/>
		<reference ref_id="CVE-2021-3531" ref_url="https://www.suse.com/security/cve/CVE-2021-3531/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008918.html" source="SUSE-SU"/>
		<description>
This update for ceph fixes the following issues:

- Update to 15.2.12-83-g528da226523:
- (CVE-2021-3509) fix cookie injection issue (bsc#1186021)
- (CVE-2021-3531) RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (bsc#1186020)
- (CVE-2021-3524) sanitize \r in s3 CORSConfiguration’s ExposeHeader (bsc#1185619)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-02"/>
	<updated date="2021-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185619">SUSE bug 1185619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186020">SUSE bug 1186020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186021">SUSE bug 1186021</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3509/">CVE-2021-3509</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3524/">CVE-2021-3524</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3531/">CVE-2021-3531</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504053" comment="ceph-common-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504054" comment="libcephfs-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504055" comment="libcephfs2-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504056" comment="librados-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504057" comment="librados2-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504058" comment="libradospp-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504059" comment="librbd-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504060" comment="librbd1-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504061" comment="librgw-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504062" comment="librgw2-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504063" comment="python3-ceph-argparse-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504064" comment="python3-cephfs-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504065" comment="python3-rados-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504066" comment="python3-rbd-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504067" comment="python3-rgw-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504068" comment="rados-objclass-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139250" version="1" class="patch">
	<metadata>
		<title>Security update for nginx (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186126" ref_url="https://bugzilla.suse.com/1186126" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23017" ref_url="https://www.suse.com/security/cve/CVE-2021-23017/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008913.html" source="SUSE-SU"/>
		<description>
This update for nginx fixes the following issues:

- CVE-2021-23017: nginx DNS resolver off-by-one heap write (bsc#1186126)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-02"/>
	<updated date="2021-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186126">SUSE bug 1186126</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23017/">CVE-2021-23017</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504069" comment="nginx-1.16.1-6.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504070" comment="nginx-source-1.16.1-6.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139251" version="1" class="patch">
	<metadata>
		<title>Security update for dhcp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186382" ref_url="https://bugzilla.suse.com/1186382" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25217" ref_url="https://www.suse.com/security/cve/CVE-2021-25217/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008914.html" source="SUSE-SU"/>
		<description>
This update for dhcp fixes the following issues:

- CVE-2021-25217: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient (bsc#1186382)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-02"/>
	<updated date="2021-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186382">SUSE bug 1186382</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-25217/">CVE-2021-25217</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503326" comment="dhcp-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503327" comment="dhcp-client-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503328" comment="dhcp-devel-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503329" comment="dhcp-relay-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503330" comment="dhcp-server-4.3.6.P1-6.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139252" version="1" class="patch">
	<metadata>
		<title>Security update for polkit (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186497" ref_url="https://bugzilla.suse.com/1186497" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3560" ref_url="https://www.suse.com/security/cve/CVE-2021-3560/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008926.html" source="SUSE-SU"/>
		<description>
This update for polkit fixes the following issues:

- CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-03"/>
	<updated date="2021-06-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186497">SUSE bug 1186497</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3560/">CVE-2021-3560</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503331" comment="libpolkit0-0.114-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503332" comment="polkit-0.114-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503333" comment="polkit-devel-0.114-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503334" comment="typelib-1_0-Polkit-1_0-0.114-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139253" version="1" class="patch">
	<metadata>
		<title>Security update for slurm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186024" ref_url="https://bugzilla.suse.com/1186024" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31215" ref_url="https://www.suse.com/security/cve/CVE-2021-31215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008930.html" source="SUSE-SU"/>
		<description>
This update for slurm fixes the following issues:

- CVE-2021-31215: remote code execution as SlurmUser because of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling (bsc#1186024)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186024">SUSE bug 1186024</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-31215/">CVE-2021-31215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503358" comment="libslurm32-17.11.13-6.37.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139254" version="1" class="patch">
	<metadata>
		<title>Security update for djvulibre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186253" ref_url="https://bugzilla.suse.com/1186253" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3500" ref_url="https://www.suse.com/security/cve/CVE-2021-3500/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1857-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008932.html" source="SUSE-SU"/>
		<description>
This update for djvulibre fixes the following issues:

- CVE-2021-3500: Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file (bsc#1186253)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186253">SUSE bug 1186253</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3500/">CVE-2021-3500</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503389" comment="libdjvulibre-devel-3.5.27-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503390" comment="libdjvulibre21-3.5.27-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139255" version="1" class="patch">
	<metadata>
		<title>Security update for wavpack (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1091340" ref_url="https://bugzilla.suse.com/1091340" source="BUGZILLA"/>
		<reference ref_id="1091341" ref_url="https://bugzilla.suse.com/1091341" source="BUGZILLA"/>
		<reference ref_id="1091342" ref_url="https://bugzilla.suse.com/1091342" source="BUGZILLA"/>
		<reference ref_id="1091343" ref_url="https://bugzilla.suse.com/1091343" source="BUGZILLA"/>
		<reference ref_id="1091344" ref_url="https://bugzilla.suse.com/1091344" source="BUGZILLA"/>
		<reference ref_id="1180414" ref_url="https://bugzilla.suse.com/1180414" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10536" ref_url="https://www.suse.com/security/cve/CVE-2018-10536/" source="CVE"/>
		<reference ref_id="CVE-2018-10537" ref_url="https://www.suse.com/security/cve/CVE-2018-10537/" source="CVE"/>
		<reference ref_id="CVE-2018-10538" ref_url="https://www.suse.com/security/cve/CVE-2018-10538/" source="CVE"/>
		<reference ref_id="CVE-2018-10539" ref_url="https://www.suse.com/security/cve/CVE-2018-10539/" source="CVE"/>
		<reference ref_id="CVE-2018-10540" ref_url="https://www.suse.com/security/cve/CVE-2018-10540/" source="CVE"/>
		<reference ref_id="CVE-2018-19840" ref_url="https://www.suse.com/security/cve/CVE-2018-19840/" source="CVE"/>
		<reference ref_id="CVE-2018-19841" ref_url="https://www.suse.com/security/cve/CVE-2018-19841/" source="CVE"/>
		<reference ref_id="CVE-2018-6767" ref_url="https://www.suse.com/security/cve/CVE-2018-6767/" source="CVE"/>
		<reference ref_id="CVE-2018-7253" ref_url="https://www.suse.com/security/cve/CVE-2018-7253/" source="CVE"/>
		<reference ref_id="CVE-2018-7254" ref_url="https://www.suse.com/security/cve/CVE-2018-7254/" source="CVE"/>
		<reference ref_id="CVE-2019-1010319" ref_url="https://www.suse.com/security/cve/CVE-2019-1010319/" source="CVE"/>
		<reference ref_id="CVE-2019-11498" ref_url="https://www.suse.com/security/cve/CVE-2019-11498/" source="CVE"/>
		<reference ref_id="CVE-2020-35738" ref_url="https://www.suse.com/security/cve/CVE-2020-35738/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<description>
This update for wavpack fixes the following issues:

- Update to version 5.4.0
  * CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples (bsc#1180414) 
  * fixed: disable A32 asm code when building for Apple silicon
  * fixed: issues with Adobe-style floating-point WAV files
  * added: --normalize-floats option to wvunpack for correctly
             exporting un-normalized floating-point files
- Update to version 5.3.0 
  * fixed: OSS-Fuzz issues 19925, 19928, 20060, 20448
  * fixed: trailing garbage characters on imported ID3v2 TXXX tags
  * fixed: various minor undefined behavior and memory access issues
  * fixed: sanitize tag extraction names for length and path inclusion
  * improved: reformat wvunpack 'help' and split into long + short versions
  * added: regression testing to Travis CI for OSS-Fuzz crashers
- Updated to version 5.2.0 
  *fixed: potential security issues including the following CVEs:
         CVE-2018-19840, CVE-2018-19841, CVE-2018-10536 (bsc#1091344),
         CVE-2018-10537 (bsc#1091343) CVE-2018-10538 (bsc#1091342),  
         CVE-2018-10539 (bsc#1091341), CVE-2018-10540 (bsc#1091340), 
         CVE-2018-7254,  CVE-2018-7253, CVE-2018-6767, CVE-2019-11498 
         and CVE-2019-1010319
  * added: support for CMake, Travis CI, and Google's OSS-fuzz
  * fixed: use correction file for encode verify (pipe input, Windows)
  * fixed: correct WAV header with actual length (pipe input, -i option)
  * fixed: thumb interworking and not needing v6 architecture (ARM asm)
  * added: handle more ID3v2.3 tag items and from all file types
  * fixed: coredump on Sparc64 (changed MD5 implementation)
  * fixed: handle invalid ID3v2.3 tags from sacd-ripper
  * fixed: several corner-case memory leaks
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-21"/>
	<updated date="2021-01-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1091340">SUSE bug 1091340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091341">SUSE bug 1091341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091342">SUSE bug 1091342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091343">SUSE bug 1091343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091344">SUSE bug 1091344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180414">SUSE bug 1180414</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10536/">CVE-2018-10536</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10537/">CVE-2018-10537</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10538/">CVE-2018-10538</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10539/">CVE-2018-10539</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10540/">CVE-2018-10540</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19840/">CVE-2018-19840</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19841/">CVE-2018-19841</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6767/">CVE-2018-6767</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7253/">CVE-2018-7253</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7254/">CVE-2018-7254</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-1010319/">CVE-2019-1010319</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11498/">CVE-2019-11498</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35738/">CVE-2020-35738</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503391" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504071" comment="wavpack-5.4.0-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504072" comment="wavpack-devel-5.4.0-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139256" version="1" class="patch">
	<metadata>
		<title>Security update for libwebp (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1185652" ref_url="https://bugzilla.suse.com/1185652" source="BUGZILLA"/>
		<reference ref_id="1185654" ref_url="https://bugzilla.suse.com/1185654" source="BUGZILLA"/>
		<reference ref_id="1185673" ref_url="https://bugzilla.suse.com/1185673" source="BUGZILLA"/>
		<reference ref_id="1185674" ref_url="https://bugzilla.suse.com/1185674" source="BUGZILLA"/>
		<reference ref_id="1185685" ref_url="https://bugzilla.suse.com/1185685" source="BUGZILLA"/>
		<reference ref_id="1185686" ref_url="https://bugzilla.suse.com/1185686" source="BUGZILLA"/>
		<reference ref_id="1185688" ref_url="https://bugzilla.suse.com/1185688" source="BUGZILLA"/>
		<reference ref_id="1185690" ref_url="https://bugzilla.suse.com/1185690" source="BUGZILLA"/>
		<reference ref_id="1185691" ref_url="https://bugzilla.suse.com/1185691" source="BUGZILLA"/>
		<reference ref_id="1186247" ref_url="https://bugzilla.suse.com/1186247" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-25009" ref_url="https://www.suse.com/security/cve/CVE-2018-25009/" source="CVE"/>
		<reference ref_id="CVE-2018-25010" ref_url="https://www.suse.com/security/cve/CVE-2018-25010/" source="CVE"/>
		<reference ref_id="CVE-2018-25011" ref_url="https://www.suse.com/security/cve/CVE-2018-25011/" source="CVE"/>
		<reference ref_id="CVE-2018-25012" ref_url="https://www.suse.com/security/cve/CVE-2018-25012/" source="CVE"/>
		<reference ref_id="CVE-2018-25013" ref_url="https://www.suse.com/security/cve/CVE-2018-25013/" source="CVE"/>
		<reference ref_id="CVE-2020-36328" ref_url="https://www.suse.com/security/cve/CVE-2020-36328/" source="CVE"/>
		<reference ref_id="CVE-2020-36329" ref_url="https://www.suse.com/security/cve/CVE-2020-36329/" source="CVE"/>
		<reference ref_id="CVE-2020-36330" ref_url="https://www.suse.com/security/cve/CVE-2020-36330/" source="CVE"/>
		<reference ref_id="CVE-2020-36331" ref_url="https://www.suse.com/security/cve/CVE-2020-36331/" source="CVE"/>
		<reference ref_id="CVE-2020-36332" ref_url="https://www.suse.com/security/cve/CVE-2020-36332/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008936.html" source="SUSE-SU"/>
		<description>
This update for libwebp fixes the following issues:

- CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter() (bsc#1185685).
- CVE-2020-36330: Fixed heap-based buffer overflow in ChunkVerifyAndAssign() (bsc#1185691).
- CVE-2020-36332: Fixed extreme memory allocation when reading a file (bsc#1185674).
- CVE-2020-36329: Fixed use-after-free in EmitFancyRGB() (bsc#1185652).
- CVE-2018-25012: Fixed heap-based buffer overflow in GetLE24() (bsc#1185690).
- CVE-2020-36328: Fixed heap-based buffer overflow in WebPDecode*Into functions (bsc#1185688).
- CVE-2018-25013: Fixed heap-based buffer overflow in ShiftBytes() (bsc#1185654).
- CVE-2020-36331: Fixed heap-based buffer overflow in ChunkAssignData() (bsc#1185686).
- CVE-2018-25009: Fixed heap-based buffer overflow in GetLE16() (bsc#1185673).
- CVE-2018-25011: Fixed fail on multiple image chunks (bsc#1186247).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1185652">SUSE bug 1185652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185654">SUSE bug 1185654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185673">SUSE bug 1185673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185674">SUSE bug 1185674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185685">SUSE bug 1185685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185686">SUSE bug 1185686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185688">SUSE bug 1185688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185690">SUSE bug 1185690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185691">SUSE bug 1185691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186247">SUSE bug 1186247</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25009/">CVE-2018-25009</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25010/">CVE-2018-25010</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25011/">CVE-2018-25011</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25012/">CVE-2018-25012</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25013/">CVE-2018-25013</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36328/">CVE-2020-36328</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36329/">CVE-2020-36329</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36330/">CVE-2020-36330</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36331/">CVE-2020-36331</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36332/">CVE-2020-36332</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503392" comment="libwebp-devel-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503393" comment="libwebp6-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503394" comment="libwebpdecoder2-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503395" comment="libwebpdemux2-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503396" comment="libwebpextras0-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503397" comment="libwebpmux2-0.5.0-3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139257" version="1" class="patch">
	<metadata>
		<title>Security update for umoci (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1184147" ref_url="https://bugzilla.suse.com/1184147" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29136" ref_url="https://www.suse.com/security/cve/CVE-2021-29136/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1863-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008938.html" source="SUSE-SU"/>
		<description>
This update for umoci fixes the following issues:

Update to v0.4.7 (bsc#1184147).

- CVE-2021-29136: Fixed overwriting of host files via malicious layer (bsc#1184147).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184147">SUSE bug 1184147</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29136/">CVE-2021-29136</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504073" comment="umoci-0.4.7-3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139258" version="1" class="patch">
	<metadata>
		<title>Security update for pam_radius (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1163933" ref_url="https://bugzilla.suse.com/1163933" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-9542" ref_url="https://www.suse.com/security/cve/CVE-2015-9542/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008958.html" source="SUSE-SU"/>
		<description>
This update for pam_radius fixes the following issues:

- CVE-2015-9542: pam_radius: buffer overflow in password field (bsc#1163933)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-08"/>
	<updated date="2021-06-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1163933">SUSE bug 1163933</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9542/">CVE-2015-9542</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503413" comment="pam_radius-1.4.0-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139259" version="1" class="patch">
	<metadata>
		<title>Security update for libX11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186643" ref_url="https://bugzilla.suse.com/1186643" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31535" ref_url="https://www.suse.com/security/cve/CVE-2021-31535/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1897-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008960.html" source="SUSE-SU"/>
		<description>
This update for libX11 fixes the following issues:

- Regression in the fix for CVE-2021-31535, causing segfaults for xforms applications like fdesign (bsc#1186643)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-08"/>
	<updated date="2021-06-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186643">SUSE bug 1186643</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31535/">CVE-2021-31535</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503414" comment="libX11-6-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494025" comment="libX11-6-32bit-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494026" comment="libX11-data-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503415" comment="libX11-devel-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503416" comment="libX11-xcb1-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494029" comment="libX11-xcb1-32bit-1.6.5-3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139260" version="1" class="patch">
	<metadata>
		<title>Security update for gstreamer-plugins-bad (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181255" ref_url="https://bugzilla.suse.com/1181255" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3185" ref_url="https://www.suse.com/security/cve/CVE-2021-3185/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008961.html" source="SUSE-SU"/>
		<description>
This update for gstreamer-plugins-bad fixes the following issues:

- CVE-2021-3185: h264parser: guard against ref_pic_markings overflow (bsc#1181255 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-08"/>
	<updated date="2021-06-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181255">SUSE bug 1181255</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3185/">CVE-2021-3185</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503419" comment="gstreamer-plugins-bad-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503420" comment="gstreamer-plugins-bad-devel-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503421" comment="gstreamer-plugins-bad-lang-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503422" comment="libgstadaptivedemux-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503423" comment="libgstbadallocators-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503424" comment="libgstbadaudio-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503425" comment="libgstbadbase-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503426" comment="libgstbadvideo-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503427" comment="libgstbasecamerabinsrc-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503428" comment="libgstcodecparsers-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503429" comment="libgstgl-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503430" comment="libgstinsertbin-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503431" comment="libgstmpegts-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503432" comment="libgstphotography-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503433" comment="libgstplayer-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503434" comment="libgsturidownloader-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503435" comment="libgstwayland-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503436" comment="typelib-1_0-GstBadAllocators-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503437" comment="typelib-1_0-GstGL-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503438" comment="typelib-1_0-GstInsertBin-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503439" comment="typelib-1_0-GstMpegts-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503440" comment="typelib-1_0-GstPlayer-1_0-1.12.5-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139261" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181161" ref_url="https://bugzilla.suse.com/1181161" source="BUGZILLA"/>
		<reference ref_id="1183405" ref_url="https://bugzilla.suse.com/1183405" source="BUGZILLA"/>
		<reference ref_id="1183738" ref_url="https://bugzilla.suse.com/1183738" source="BUGZILLA"/>
		<reference ref_id="1183947" ref_url="https://bugzilla.suse.com/1183947" source="BUGZILLA"/>
		<reference ref_id="1184611" ref_url="https://bugzilla.suse.com/1184611" source="BUGZILLA"/>
		<reference ref_id="1184675" ref_url="https://bugzilla.suse.com/1184675" source="BUGZILLA"/>
		<reference ref_id="1185642" ref_url="https://bugzilla.suse.com/1185642" source="BUGZILLA"/>
		<reference ref_id="1185680" ref_url="https://bugzilla.suse.com/1185680" source="BUGZILLA"/>
		<reference ref_id="1185725" ref_url="https://bugzilla.suse.com/1185725" source="BUGZILLA"/>
		<reference ref_id="1185859" ref_url="https://bugzilla.suse.com/1185859" source="BUGZILLA"/>
		<reference ref_id="1185860" ref_url="https://bugzilla.suse.com/1185860" source="BUGZILLA"/>
		<reference ref_id="1185862" ref_url="https://bugzilla.suse.com/1185862" source="BUGZILLA"/>
		<reference ref_id="1185863" ref_url="https://bugzilla.suse.com/1185863" source="BUGZILLA"/>
		<reference ref_id="1185898" ref_url="https://bugzilla.suse.com/1185898" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1185938" ref_url="https://bugzilla.suse.com/1185938" source="BUGZILLA"/>
		<reference ref_id="1185950" ref_url="https://bugzilla.suse.com/1185950" source="BUGZILLA"/>
		<reference ref_id="1185987" ref_url="https://bugzilla.suse.com/1185987" source="BUGZILLA"/>
		<reference ref_id="1186060" ref_url="https://bugzilla.suse.com/1186060" source="BUGZILLA"/>
		<reference ref_id="1186061" ref_url="https://bugzilla.suse.com/1186061" source="BUGZILLA"/>
		<reference ref_id="1186062" ref_url="https://bugzilla.suse.com/1186062" source="BUGZILLA"/>
		<reference ref_id="1186111" ref_url="https://bugzilla.suse.com/1186111" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="1186390" ref_url="https://bugzilla.suse.com/1186390" source="BUGZILLA"/>
		<reference ref_id="1186484" ref_url="https://bugzilla.suse.com/1186484" source="BUGZILLA"/>
		<reference ref_id="1186498" ref_url="https://bugzilla.suse.com/1186498" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24586" ref_url="https://www.suse.com/security/cve/CVE-2020-24586/" source="CVE"/>
		<reference ref_id="CVE-2020-24587" ref_url="https://www.suse.com/security/cve/CVE-2020-24587/" source="CVE"/>
		<reference ref_id="CVE-2020-26139" ref_url="https://www.suse.com/security/cve/CVE-2020-26139/" source="CVE"/>
		<reference ref_id="CVE-2020-26141" ref_url="https://www.suse.com/security/cve/CVE-2020-26141/" source="CVE"/>
		<reference ref_id="CVE-2020-26145" ref_url="https://www.suse.com/security/cve/CVE-2020-26145/" source="CVE"/>
		<reference ref_id="CVE-2020-26147" ref_url="https://www.suse.com/security/cve/CVE-2020-26147/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="CVE-2021-23134" ref_url="https://www.suse.com/security/cve/CVE-2021-23134/" source="CVE"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="CVE-2021-33200" ref_url="https://www.suse.com/security/cve/CVE-2021-33200/" source="CVE"/>
		<reference ref_id="CVE-2021-3491" ref_url="https://www.suse.com/security/cve/CVE-2021-3491/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008974.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in kernel memory (bsc#1186484).
- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values. (bsc#1186111)
- CVE-2020-26139: Fixed a denial-of-service when an Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. (bnc#1186062)
- CVE-2021-23134: A Use After Free vulnerability in nfc sockets allowed local attackers to elevate their privileges. (bnc#1186060)
- CVE-2021-23133: Fixed a race condition in SCTP sockets, which could lead to privilege escalation from the context of a network service or an unprivileged process. (bnc#1184675)
- CVE-2021-3491: Fixed a potential heap overflow in mem_rw(). This vulnerability is related to the PROVIDE_BUFFERS operation, which allowed the MAX_RW_COUNT limit to be bypassed (bsc#1185642).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- CVE-2020-24586: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances this can be abused to inject arbitrary network packets and/or exfiltrate user data (bnc#1185859).
- CVE-2020-24587: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed (bnc#1185859 bnc#1185862).
- CVE-2020-26147: The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments, even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used (bnc#1185859).
- CVE-2020-26145: An issue was discovered with Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration. (bnc#1185860)
- CVE-2020-26141: An issue was discovered in the ALFA driver for AWUS036H, where the Message Integrity Check (authenticity) of fragmented TKIP frames was not verified. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol. (bnc#1185987)


The following non-security bugs were fixed:

- Drivers: hv: vmbus: Increase wait time for VMbus unload (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically (bsc#1185725).
- dm: fix redundant IO accounting for bios that need splitting (bsc#1183738).
- ibmvfc: Avoid move login if fast fail is enabled (bsc#1185938 ltc#192043).
- ibmvfc: Handle move login failure (bsc#1185938 ltc#192043).
- ibmvfc: Reinit target retries (bsc#1185938 ltc#192043).
- kabi: Fix breakage in NVMe driver (bsc#1181161).
- kabi: Fix nvmet error log definitions (bsc#1181161).
- kabi: nvme: fix fast_io_fail_tmo (bsc#1181161).
- md/raid1: properly indicate failure when ending a failed write request (bsc#1185680).
- net: sched: disable TCQ_F_NOLOCK for pfifo_fast (bsc#1183405)
- netfilter: conntrack: add new sysctl to disable RST check (bsc#1183947 bsc#1185950).
- netfilter: conntrack: avoid misleading 'invalid' in log message (bsc#1183947 bsc#1185950).
- netfilter: conntrack: improve RST handling when tuple is re-used (bsc#1183947 bsc#1185950).
- netfilter: conntrack: tcp: only close if RST matches exact sequence (bsc#1183947 bsc#1185950).
- nvme-fabrics: allow to queue requests for live queues (bsc#1181161).
- nvme-fabrics: do not check state NVME_CTRL_NEW for request acceptance (bsc#1181161).
- nvme-fabrics: reject I/O to offline device (bsc#1181161).
- nvme-pci: Sync queues on reset (bsc#1181161).
- nvme-rdma: avoid race between time out and tear down (bsc#1181161).
- nvme-rdma: avoid repeated request completion (bsc#1181161).
- nvme-rdma: avoid request double completion for concurrent nvme_rdma_timeout (bsc#1181161).
- nvme-rdma: fix controller reset hang during traffic (bsc#1181161).
- nvme-rdma: fix possible hang when failing to set io queues (bsc#1181161).
- nvme-rdma: fix timeout handler (bsc#1181161).
- nvme-rdma: serialize controller teardown sequences (bsc#1181161).
- nvme-tcp: avoid race between time out and tear down (bsc#1181161).
- nvme-tcp: avoid repeated request completion (bsc#1181161).
- nvme-tcp: avoid request double completion for concurrent nvme_tcp_timeout (bsc#1181161).
- nvme-tcp: fix controller reset hang during traffic (bsc#1181161).
- nvme-tcp: fix possible hang when failing to set io queues (bsc#1181161).
- nvme-tcp: fix timeout handler (bsc#1181161).
- nvme-tcp: serialize controller teardown sequences (bsc#1181161).
- nvme: Restart request timers in resetting state (bsc#1181161).
- nvme: add error log page slot definition (bsc#1181161).
- nvme: include admin_q sync with nvme_sync_queues (bsc#1181161).
- nvme: introduce 'Command Aborted By host' status code (bsc#1181161).
- nvme: introduce nvme_is_fabrics to check fabrics cmd (bsc#1181161).
- nvme: introduce nvme_sync_io_queues (bsc#1181161).
- nvme: make fabrics command run on a separate request queue (bsc#1181161).
- nvme: prevent warning triggered by nvme_stop_keep_alive (bsc#1181161).
- nvme: unlink head after removing last namespace (bsc#1181161).
- nvmet: add error log support for fabrics-cmd (bsc#1181161).
- nvmet: add error-log definitions (bsc#1181161).
- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-09"/>
	<updated date="2021-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181161">SUSE bug 1181161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183405">SUSE bug 1183405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183738">SUSE bug 1183738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183947">SUSE bug 1183947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184611">SUSE bug 1184611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184675">SUSE bug 1184675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185642">SUSE bug 1185642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185680">SUSE bug 1185680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185725">SUSE bug 1185725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185859">SUSE bug 1185859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185860">SUSE bug 1185860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185862">SUSE bug 1185862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185863">SUSE bug 1185863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185898">SUSE bug 1185898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185938">SUSE bug 1185938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185950">SUSE bug 1185950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185987">SUSE bug 1185987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186060">SUSE bug 1186060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186061">SUSE bug 1186061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186062">SUSE bug 1186062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186111">SUSE bug 1186111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186390">SUSE bug 1186390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186484">SUSE bug 1186484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186498">SUSE bug 1186498</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24586/">CVE-2020-24586</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24587/">CVE-2020-24587</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-26139/">CVE-2020-26139</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26141/">CVE-2020-26141</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26145/">CVE-2020-26145</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26147/">CVE-2020-26147</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23134/">CVE-2021-23134</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33200/">CVE-2021-33200</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3491/">CVE-2021-3491</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504074" comment="kernel-default-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504075" comment="kernel-default-base-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504076" comment="kernel-default-devel-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504077" comment="kernel-devel-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504078" comment="kernel-docs-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504079" comment="kernel-macros-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504080" comment="kernel-obs-build-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504081" comment="kernel-source-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504082" comment="kernel-syms-4.12.14-197.92.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139262" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1149813" ref_url="https://bugzilla.suse.com/1149813" source="BUGZILLA"/>
		<reference ref_id="1163019" ref_url="https://bugzilla.suse.com/1163019" source="BUGZILLA"/>
		<reference ref_id="1172380" ref_url="https://bugzilla.suse.com/1172380" source="BUGZILLA"/>
		<reference ref_id="1175534" ref_url="https://bugzilla.suse.com/1175534" source="BUGZILLA"/>
		<reference ref_id="1178683" ref_url="https://bugzilla.suse.com/1178683" source="BUGZILLA"/>
		<reference ref_id="1178935" ref_url="https://bugzilla.suse.com/1178935" source="BUGZILLA"/>
		<reference ref_id="1179477" ref_url="https://bugzilla.suse.com/1179477" source="BUGZILLA"/>
		<reference ref_id="1179484" ref_url="https://bugzilla.suse.com/1179484" source="BUGZILLA"/>
		<reference ref_id="1182846" ref_url="https://bugzilla.suse.com/1182846" source="BUGZILLA"/>
		<reference ref_id="1182975" ref_url="https://bugzilla.suse.com/1182975" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15890" ref_url="https://www.suse.com/security/cve/CVE-2019-15890/" source="CVE"/>
		<reference ref_id="CVE-2020-10756" ref_url="https://www.suse.com/security/cve/CVE-2020-10756/" source="CVE"/>
		<reference ref_id="CVE-2020-14364" ref_url="https://www.suse.com/security/cve/CVE-2020-14364/" source="CVE"/>
		<reference ref_id="CVE-2020-25707" ref_url="https://www.suse.com/security/cve/CVE-2020-25707/" source="CVE"/>
		<reference ref_id="CVE-2020-25723" ref_url="https://www.suse.com/security/cve/CVE-2020-25723/" source="CVE"/>
		<reference ref_id="CVE-2020-29129" ref_url="https://www.suse.com/security/cve/CVE-2020-29129/" source="CVE"/>
		<reference ref_id="CVE-2020-29130" ref_url="https://www.suse.com/security/cve/CVE-2020-29130/" source="CVE"/>
		<reference ref_id="CVE-2020-8608" ref_url="https://www.suse.com/security/cve/CVE-2020-8608/" source="CVE"/>
		<reference ref_id="CVE-2021-20257" ref_url="https://www.suse.com/security/cve/CVE-2021-20257/" source="CVE"/>
		<reference ref_id="CVE-2021-3419" ref_url="https://www.suse.com/security/cve/CVE-2021-3419/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008972.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

- CVE-2020-10756: Fix out-of-bounds read information disclosure in icmp6_send_echoreply (bsc#1172380)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-09"/>
	<updated date="2021-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1149813">SUSE bug 1149813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163019">SUSE bug 1163019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172380">SUSE bug 1172380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175534">SUSE bug 1175534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178683">SUSE bug 1178683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178935">SUSE bug 1178935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179477">SUSE bug 1179477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179484">SUSE bug 1179484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182846">SUSE bug 1182846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182975">SUSE bug 1182975</bugzilla>
	<cve impact="moderate" cvss3="5.8/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15890/">CVE-2019-15890</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10756/">CVE-2020-10756</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14364/">CVE-2020-14364</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25707/">CVE-2020-25707</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25723/">CVE-2020-25723</cve>
	<cve impact="low" cvss3="2.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29129/">CVE-2020-29129</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29130/">CVE-2020-29130</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-8608/">CVE-2020-8608</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20257/">CVE-2021-20257</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3419/">CVE-2021-3419</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504083" comment="qemu-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504084" comment="qemu-arm-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504085" comment="qemu-audio-alsa-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499919" comment="qemu-audio-oss-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504086" comment="qemu-audio-pa-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504087" comment="qemu-block-curl-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504088" comment="qemu-block-iscsi-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504089" comment="qemu-block-rbd-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504090" comment="qemu-block-ssh-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504091" comment="qemu-guest-agent-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504092" comment="qemu-ipxe-1.0.0+-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504093" comment="qemu-kvm-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504094" comment="qemu-lang-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504095" comment="qemu-seabios-1.12.0_0_ga698c89-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504096" comment="qemu-sgabios-8-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504097" comment="qemu-tools-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504098" comment="qemu-ui-curses-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504099" comment="qemu-ui-gtk-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504100" comment="qemu-vgabios-1.12.0_0_ga698c89-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504101" comment="qemu-x86-3.1.1.1-9.27.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139263" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1185633" ref_url="https://bugzilla.suse.com/1185633" source="BUGZILLA"/>
		<reference ref_id="1186696" ref_url="https://bugzilla.suse.com/1186696" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29951" ref_url="https://www.suse.com/security/cve/CVE-2021-29951/" source="CVE"/>
		<reference ref_id="CVE-2021-29964" ref_url="https://www.suse.com/security/cve/CVE-2021-29964/" source="CVE"/>
		<reference ref_id="CVE-2021-29967" ref_url="https://www.suse.com/security/cve/CVE-2021-29967/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008975.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 78.11.0 ESR (bsc#1186696)

  * CVE-2021-29964: Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967: Memory safety bugs fixed in Firefox
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-09"/>
	<updated date="2021-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185633">SUSE bug 1185633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186696">SUSE bug 1186696</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-29951/">CVE-2021-29951</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29964/">CVE-2021-29964</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29967/">CVE-2021-29967</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503448" comment="MozillaFirefox-78.11.0-3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503449" comment="MozillaFirefox-devel-78.11.0-3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503450" comment="MozillaFirefox-translations-common-78.11.0-3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503451" comment="MozillaFirefox-translations-other-78.11.0-3.144.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139264" version="1" class="patch">
	<metadata>
		<title>Security update for spice-gtk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1177158" ref_url="https://bugzilla.suse.com/1177158" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14355" ref_url="https://www.suse.com/security/cve/CVE-2020-14355/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008978.html" source="SUSE-SU"/>
		<description>
This update for spice-gtk fixes the following issues:

- CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC decoding code (bsc#1177158)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-10"/>
	<updated date="2021-06-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177158">SUSE bug 1177158</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14355/">CVE-2020-14355</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504102" comment="libspice-client-glib-2_0-8-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504103" comment="libspice-client-glib-helper-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504104" comment="libspice-client-gtk-3_0-5-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504105" comment="spice-gtk-devel-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504106" comment="typelib-1_0-SpiceClientGlib-2_0-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504107" comment="typelib-1_0-SpiceClientGtk-3_0-0.35-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139265" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1179833" ref_url="https://bugzilla.suse.com/1179833" source="BUGZILLA"/>
		<reference ref_id="1179836" ref_url="https://bugzilla.suse.com/1179836" source="BUGZILLA"/>
		<reference ref_id="1179837" ref_url="https://bugzilla.suse.com/1179837" source="BUGZILLA"/>
		<reference ref_id="1179839" ref_url="https://bugzilla.suse.com/1179839" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24489" ref_url="https://www.suse.com/security/cve/CVE-2020-24489/" source="CVE"/>
		<reference ref_id="CVE-2020-24511" ref_url="https://www.suse.com/security/cve/CVE-2020-24511/" source="CVE"/>
		<reference ref_id="CVE-2020-24512" ref_url="https://www.suse.com/security/cve/CVE-2020-24512/" source="CVE"/>
		<reference ref_id="CVE-2020-24513" ref_url="https://www.suse.com/security/cve/CVE-2020-24513/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008980.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20210525 release.

  - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)

    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html

  - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)

    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)

  - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)

    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)

  - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)

    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html

Other fixes:

- Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
- Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
- Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
- Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
- Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
- Update for functional issues. Refer to [6th Gen Intel Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
- Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.

- New platforms:

| Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2
| ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3
| ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3
| SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB
| SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB
| TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile
| TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile
| TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile
| EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
| JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
| RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11

- Updated platforms:

| Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3
| HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3
| SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
| SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
| BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx
| SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable
| SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable
| SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx
| CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2
| CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2
| CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3
| BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
| BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87
| BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53
| APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
| APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx
| SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5
| DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series
| GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx
| GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
| ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile
| LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology
| AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile
| KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile
| CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile
| WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile
| AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
| CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
| WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile
| KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6
| CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E
| CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8
| CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9
| CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile
| CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile
| CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10
| CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10
| CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile
| CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-10"/>
	<updated date="2021-06-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179833">SUSE bug 1179833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179836">SUSE bug 1179836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179837">SUSE bug 1179837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179839">SUSE bug 1179839</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24489/">CVE-2020-24489</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24511/">CVE-2020-24511</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24512/">CVE-2020-24512</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24513/">CVE-2020-24513</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504108" comment="ucode-intel-20210525-3.203.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139266" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1168481" ref_url="https://bugzilla.suse.com/1168481" source="BUGZILLA"/>
		<reference ref_id="1175081" ref_url="https://bugzilla.suse.com/1175081" source="BUGZILLA"/>
		<reference ref_id="1175821" ref_url="https://bugzilla.suse.com/1175821" source="BUGZILLA"/>
		<reference ref_id="1181594" ref_url="https://bugzilla.suse.com/1181594" source="BUGZILLA"/>
		<reference ref_id="1181641" ref_url="https://bugzilla.suse.com/1181641" source="BUGZILLA"/>
		<reference ref_id="1181677" ref_url="https://bugzilla.suse.com/1181677" source="BUGZILLA"/>
		<reference ref_id="1181730" ref_url="https://bugzilla.suse.com/1181730" source="BUGZILLA"/>
		<reference ref_id="1181732" ref_url="https://bugzilla.suse.com/1181732" source="BUGZILLA"/>
		<reference ref_id="1181749" ref_url="https://bugzilla.suse.com/1181749" source="BUGZILLA"/>
		<reference ref_id="1182451" ref_url="https://bugzilla.suse.com/1182451" source="BUGZILLA"/>
		<reference ref_id="1182476" ref_url="https://bugzilla.suse.com/1182476" source="BUGZILLA"/>
		<reference ref_id="1182947" ref_url="https://bugzilla.suse.com/1182947" source="BUGZILLA"/>
		<reference ref_id="1183024" ref_url="https://bugzilla.suse.com/1183024" source="BUGZILLA"/>
		<reference ref_id="1183855" ref_url="https://bugzilla.suse.com/1183855" source="BUGZILLA"/>
		<reference ref_id="1184768" ref_url="https://bugzilla.suse.com/1184768" source="BUGZILLA"/>
		<reference ref_id="1184962" ref_url="https://bugzilla.suse.com/1184962" source="BUGZILLA"/>
		<reference ref_id="1185405" ref_url="https://bugzilla.suse.com/1185405" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21284" ref_url="https://www.suse.com/security/cve/CVE-2021-21284/" source="CVE"/>
		<reference ref_id="CVE-2021-21285" ref_url="https://www.suse.com/security/cve/CVE-2021-21285/" source="CVE"/>
		<reference ref_id="CVE-2021-21334" ref_url="https://www.suse.com/security/cve/CVE-2021-21334/" source="CVE"/>
		<reference ref_id="CVE-2021-30465" ref_url="https://www.suse.com/security/cve/CVE-2021-30465/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008994.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, runc fixes the following issues:

Docker was updated to 20.10.6-ce (bsc#1184768, bsc#1182947, bsc#1181594)

* Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools (bsc#1182476).
* CVE-2021-21284: Fixed a potential privilege escalation when the root user in 
  the remapped namespace has access to the host filesystem (bsc#1181732)
* CVE-2021-21285: Fixed an issue where pulling a malformed Docker image manifest 
  crashes the dockerd daemon (bsc#1181730). 
* btrfs quotas being removed by Docker regularly (bsc#1183855, bsc#1175081)

runc was updated to v1.0.0~rc93 (bsc#1182451, bsc#1175821 bsc#1184962).

* Use the upstream runc package (bsc#1181641, bsc#1181677, bsc#1175821).
* Fixed /dev/null is not available (bsc#1168481).
* CVE-2021-30465: Fixed a symlink-exchange attack vulnarability (bsc#1185405).

containerd was updated to v1.4.4

* CVE-2021-21334: Fixed a potential information leak through environment variables (bsc#1183397).
* Handle a requirement from docker (bsc#1181594).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-11"/>
	<updated date="2021-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168481">SUSE bug 1168481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175081">SUSE bug 1175081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175821">SUSE bug 1175821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181594">SUSE bug 1181594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181641">SUSE bug 1181641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181677">SUSE bug 1181677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181730">SUSE bug 1181730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181732">SUSE bug 1181732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181749">SUSE bug 1181749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182451">SUSE bug 1182451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182476">SUSE bug 1182476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182947">SUSE bug 1182947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183024">SUSE bug 1183024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183855">SUSE bug 1183855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184768">SUSE bug 1184768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184962">SUSE bug 1184962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185405">SUSE bug 1185405</bugzilla>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21284/">CVE-2021-21284</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21285/">CVE-2021-21285</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21334/">CVE-2021-21334</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30465/">CVE-2021-30465</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504109" comment="containerd-1.4.4-5.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504110" comment="docker-20.10.6_ce-6.49.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494424" comment="docker-bash-completion-20.10.6_ce-6.49.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504111" comment="runc-1.0.0~rc93-1.14.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139267" version="1" class="patch">
	<metadata>
		<title>Security update for spice (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1177158" ref_url="https://bugzilla.suse.com/1177158" source="BUGZILLA"/>
		<reference ref_id="1181686" ref_url="https://bugzilla.suse.com/1181686" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14355" ref_url="https://www.suse.com/security/cve/CVE-2020-14355/" source="CVE"/>
		<reference ref_id="CVE-2021-20201" ref_url="https://www.suse.com/security/cve/CVE-2021-20201/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008998.html" source="SUSE-SU"/>
		<description>
This update for spice fixes the following issues:

- CVE-2021-20201: client initiated renegotiation causing denial of service (bsc#1181686)
- CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC decoding code (bsc#1177158)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-11"/>
	<updated date="2021-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177158">SUSE bug 1177158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181686">SUSE bug 1181686</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14355/">CVE-2020-14355</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20201/">CVE-2021-20201</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504112" comment="libspice-server-devel-0.14.1-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504113" comment="libspice-server1-0.14.1-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139268" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1171164" ref_url="https://bugzilla.suse.com/1171164" source="BUGZILLA"/>
		<reference ref_id="1171569" ref_url="https://bugzilla.suse.com/1171569" source="BUGZILLA"/>
		<reference ref_id="1183436" ref_url="https://bugzilla.suse.com/1183436" source="BUGZILLA"/>
		<reference ref_id="1185916" ref_url="https://bugzilla.suse.com/1185916" source="BUGZILLA"/>
		<reference ref_id="1185918" ref_url="https://bugzilla.suse.com/1185918" source="BUGZILLA"/>
		<reference ref_id="1185919" ref_url="https://bugzilla.suse.com/1185919" source="BUGZILLA"/>
		<reference ref_id="1185921" ref_url="https://bugzilla.suse.com/1185921" source="BUGZILLA"/>
		<reference ref_id="1185923" ref_url="https://bugzilla.suse.com/1185923" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25097" ref_url="https://www.suse.com/security/cve/CVE-2020-25097/" source="CVE"/>
		<reference ref_id="CVE-2021-28651" ref_url="https://www.suse.com/security/cve/CVE-2021-28651/" source="CVE"/>
		<reference ref_id="CVE-2021-28652" ref_url="https://www.suse.com/security/cve/CVE-2021-28652/" source="CVE"/>
		<reference ref_id="CVE-2021-28662" ref_url="https://www.suse.com/security/cve/CVE-2021-28662/" source="CVE"/>
		<reference ref_id="CVE-2021-31806" ref_url="https://www.suse.com/security/cve/CVE-2021-31806/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009003.html" source="SUSE-SU"/>
		<description>
This update for squid fixes the following issues:

- update to 4.15:
- CVE-2021-28652: Broken cache manager URL parsing (bsc#1185918)
- CVE-2021-28651: Memory leak in RFC 2169 response parsing (bsc#1185921)
- CVE-2021-28662: Limit HeaderLookupTable_t::lookup() to BadHdr and specific IDs (bsc#1185919)
- CVE-2021-31806: Handle more Range requests (bsc#1185916)
- CVE-2020-25097: HTTP Request Smuggling vulnerability (bsc#1183436)
- Handle more partial responses (bsc#1185923)
- fix previous change to reinstante permissions macros, because the wrong path has been used (bsc#1171569).
- use libexecdir instead of libdir to conform to recent changes in Factory (bsc#1171164).
- Reinstate permissions macros for pinger binary, because the permissions
  package is also responsible for setting up the cap_net_raw capability,
  currently a fresh squid install doesn't get a capability bit at all (bsc#1171569).
- Change pinger and basic_pam_auth helper to use standard permissions. pinger uses cap_net_raw=ep instead (bsc#1171569)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-11"/>
	<updated date="2021-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171164">SUSE bug 1171164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171569">SUSE bug 1171569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183436">SUSE bug 1183436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185916">SUSE bug 1185916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185918">SUSE bug 1185918</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185919">SUSE bug 1185919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185921">SUSE bug 1185921</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185923">SUSE bug 1185923</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25097/">CVE-2020-25097</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28651/">CVE-2021-28651</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28652/">CVE-2021-28652</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28662/">CVE-2021-28662</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31806/">CVE-2021-31806</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503456" comment="squid-4.15-5.26.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139269" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1145740" ref_url="https://bugzilla.suse.com/1145740" source="BUGZILLA"/>
		<reference ref_id="1180530" ref_url="https://bugzilla.suse.com/1180530" source="BUGZILLA"/>
		<reference ref_id="1182703" ref_url="https://bugzilla.suse.com/1182703" source="BUGZILLA"/>
		<reference ref_id="1186922" ref_url="https://bugzilla.suse.com/1186922" source="BUGZILLA"/>
		<reference ref_id="1186923" ref_url="https://bugzilla.suse.com/1186923" source="BUGZILLA"/>
		<reference ref_id="1186924" ref_url="https://bugzilla.suse.com/1186924" source="BUGZILLA"/>
		<reference ref_id="1187017" ref_url="https://bugzilla.suse.com/1187017" source="BUGZILLA"/>
		<reference ref_id="1187174" ref_url="https://bugzilla.suse.com/1187174" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10092" ref_url="https://www.suse.com/security/cve/CVE-2019-10092/" source="CVE"/>
		<reference ref_id="CVE-2020-35452" ref_url="https://www.suse.com/security/cve/CVE-2020-35452/" source="CVE"/>
		<reference ref_id="CVE-2021-26690" ref_url="https://www.suse.com/security/cve/CVE-2021-26690/" source="CVE"/>
		<reference ref_id="CVE-2021-26691" ref_url="https://www.suse.com/security/cve/CVE-2021-26691/" source="CVE"/>
		<reference ref_id="CVE-2021-30641" ref_url="https://www.suse.com/security/cve/CVE-2021-30641/" source="CVE"/>
		<reference ref_id="CVE-2021-31618" ref_url="https://www.suse.com/security/cve/CVE-2021-31618/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009030.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2021-30641: Fixed MergeSlashes regression (bsc#1187174)
- CVE-2021-31618: Fixed NULL pointer dereference on specially crafted HTTP/2 request (bsc#1186924)
- CVE-2020-35452: Fixed Single zero byte stack overflow in mod_auth_digest (bsc#1186922)
- CVE-2021-26690: Fixed mod_session NULL pointer dereference in parser (bsc#1186923)
- CVE-2021-26691: Fixed Heap overflow in mod_session (bsc#1187017)
- Fixed potential content spoofing with default error pages (bsc#1182703)
- Fixed for an issue when 'gensslcert' does not set CA:True. (bsc#1180530)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-17"/>
	<updated date="2021-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1145740">SUSE bug 1145740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180530">SUSE bug 1180530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182703">SUSE bug 1182703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186922">SUSE bug 1186922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186923">SUSE bug 1186923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186924">SUSE bug 1186924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187017">SUSE bug 1187017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187174">SUSE bug 1187174</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-10092/">CVE-2019-10092</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35452/">CVE-2020-35452</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26690/">CVE-2021-26690</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26691/">CVE-2021-26691</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30641/">CVE-2021-30641</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31618/">CVE-2021-31618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503466" comment="apache2-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503467" comment="apache2-devel-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503468" comment="apache2-doc-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503469" comment="apache2-prefork-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503470" comment="apache2-utils-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503471" comment="apache2-worker-2.4.33-3.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139270" version="1" class="patch">
	<metadata>
		<title>Security update for caribou (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186617" ref_url="https://bugzilla.suse.com/1186617" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3567" ref_url="https://www.suse.com/security/cve/CVE-2021-3567/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009035.html" source="SUSE-SU"/>
		<description>
This update for caribou fixes the following issues:

Security issue fixed:

- CVE-2021-3567: Fixed a segfault when attempting to use shifted characters (bsc#1186617).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-17"/>
	<updated date="2021-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186617">SUSE bug 1186617</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3567/">CVE-2021-3567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503472" comment="caribou-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503473" comment="caribou-common-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503474" comment="caribou-devel-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503475" comment="caribou-gtk-module-common-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503476" comment="caribou-gtk2-module-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503477" comment="caribou-gtk3-module-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503478" comment="caribou-lang-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503479" comment="libcaribou0-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503480" comment="typelib-1_0-Caribou-1_0-0.4.21-5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139271" version="1" class="patch">
	<metadata>
		<title>Security update for python-rsa (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1172389" ref_url="https://bugzilla.suse.com/1172389" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13757" ref_url="https://www.suse.com/security/cve/CVE-2020-13757/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009029.html" source="SUSE-SU"/>
		<description>
This update for python-rsa fixes the following issues:

- CVE-2020-13757: Proper handling of leading '\0' bytes during decryption of ciphertext (bsc#1172389)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-17"/>
	<updated date="2021-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172389">SUSE bug 1172389</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-13757/">CVE-2020-13757</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494053" comment="python3-rsa-3.4.2-3.4.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139272" version="1" class="patch">
	<metadata>
		<title>Security update for xterm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1169444" ref_url="https://bugzilla.suse.com/1169444" source="BUGZILLA"/>
		<reference ref_id="1182091" ref_url="https://bugzilla.suse.com/1182091" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27135" ref_url="https://www.suse.com/security/cve/CVE-2021-27135/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009040.html" source="SUSE-SU"/>
		<description>
This update for xterm fixes the following issues:

- CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. (bsc#1182091)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1169444">SUSE bug 1169444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182091">SUSE bug 1182091</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27135/">CVE-2021-27135</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503481" comment="xterm-330-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503482" comment="xterm-bin-330-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139273" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1171257" ref_url="https://bugzilla.suse.com/1171257" source="BUGZILLA"/>
		<reference ref_id="1176293" ref_url="https://bugzilla.suse.com/1176293" source="BUGZILLA"/>
		<reference ref_id="1179831" ref_url="https://bugzilla.suse.com/1179831" source="BUGZILLA"/>
		<reference ref_id="1181368" ref_url="https://bugzilla.suse.com/1181368" source="BUGZILLA"/>
		<reference ref_id="1182281" ref_url="https://bugzilla.suse.com/1182281" source="BUGZILLA"/>
		<reference ref_id="1182293" ref_url="https://bugzilla.suse.com/1182293" source="BUGZILLA"/>
		<reference ref_id="1182382" ref_url="https://bugzilla.suse.com/1182382" source="BUGZILLA"/>
		<reference ref_id="1185092" ref_url="https://bugzilla.suse.com/1185092" source="BUGZILLA"/>
		<reference ref_id="1185281" ref_url="https://bugzilla.suse.com/1185281" source="BUGZILLA"/>
		<reference ref_id="1186674" ref_url="https://bugzilla.suse.com/1186674" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-15750" ref_url="https://www.suse.com/security/cve/CVE-2018-15750/" source="CVE"/>
		<reference ref_id="CVE-2018-15751" ref_url="https://www.suse.com/security/cve/CVE-2018-15751/" source="CVE"/>
		<reference ref_id="CVE-2020-11651" ref_url="https://www.suse.com/security/cve/CVE-2020-11651/" source="CVE"/>
		<reference ref_id="CVE-2020-11652" ref_url="https://www.suse.com/security/cve/CVE-2020-11652/" source="CVE"/>
		<reference ref_id="CVE-2020-25592" ref_url="https://www.suse.com/security/cve/CVE-2020-25592/" source="CVE"/>
		<reference ref_id="CVE-2021-25315" ref_url="https://www.suse.com/security/cve/CVE-2021-25315/" source="CVE"/>
		<reference ref_id="CVE-2021-31607" ref_url="https://www.suse.com/security/cve/CVE-2021-31607/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009057.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

Update to Salt release version 3002.2 (jsc#ECO-3212, jsc#SLE-18033, jsc#SLE-18028)

- Check if dpkgnotify is executable (bsc#1186674)
- Drop support for Python2. Obsoletes `python2-salt` package (jsc#SLE-18028)
- virt module updates
  * network: handle missing ipv4 netmask attribute
  * more network support
  * PCI/USB host devices passthrough support
- Set distro requirement to oldest supported version in requirements/base.txt
- Bring missing part of async batch implementation back (bsc#1182382, CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Remove deprecated warning that breaks minion execution when 'server_id_use_crc' opts is missing
- Fix pkg states when DEB package has 'all' arch
- Do not force beacons configuration to be a list.
- Remove msgpack &lt; 1.0.0 from base requirements (bsc#1176293)
- msgpack support for version &gt;= 1.0.0 (bsc#1171257)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281, CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18033)
- Remove duplicate directories from specfile
- Improvements on 'ansiblegate' module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Regression fix of salt-ssh on processing targets
- Update target fix for salt-ssh and avoiding race condition on salt-ssh event processing (bsc#1179831, bsc#1182281)
- Add notify beacon for Debian/Ubuntu systems
- Fix zmq bug that causes salt-call to freeze (bsc#1181368)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-21"/>
	<updated date="2021-06-21"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1171257">SUSE bug 1171257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176293">SUSE bug 1176293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179831">SUSE bug 1179831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181368">SUSE bug 1181368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182281">SUSE bug 1182281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182293">SUSE bug 1182293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182382">SUSE bug 1182382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185092">SUSE bug 1185092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185281">SUSE bug 1185281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186674">SUSE bug 1186674</bugzilla>
	<cve impact="important" cvss3="8.7/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-15750/">CVE-2018-15750</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15751/">CVE-2018-15751</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11651/">CVE-2020-11651</cve>
	<cve impact="critical" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11652/">CVE-2020-11652</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25592/">CVE-2020-25592</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25315/">CVE-2021-25315</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31607/">CVE-2021-31607</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504114" comment="python3-salt-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504115" comment="salt-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504116" comment="salt-api-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494060" comment="salt-bash-completion-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504117" comment="salt-cloud-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504118" comment="salt-doc-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499949" comment="salt-fish-completion-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504119" comment="salt-master-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504120" comment="salt-minion-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504121" comment="salt-proxy-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504122" comment="salt-ssh-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504123" comment="salt-standalone-formulas-configuration-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504124" comment="salt-syndic-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504125" comment="salt-transactional-update-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494063" comment="salt-zsh-completion-3002.2-37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139274" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1187418" ref_url="https://bugzilla.suse.com/1187418" source="BUGZILLA"/>
		<reference ref_id="1187419" ref_url="https://bugzilla.suse.com/1187419" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29157" ref_url="https://www.suse.com/security/cve/CVE-2021-29157/" source="CVE"/>
		<reference ref_id="CVE-2021-33515" ref_url="https://www.suse.com/security/cve/CVE-2021-33515/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2124-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019410.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 fixes the following issues:

- CVE-2021-29157: Local attacker can login as any user and access their emails (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails (bsc#1187419)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-22"/>
	<updated date="2021-06-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187418">SUSE bug 1187418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187419">SUSE bug 1187419</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29157/">CVE-2021-29157</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-33515/">CVE-2021-33515</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504126" comment="dovecot23-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504127" comment="dovecot23-backend-mysql-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504128" comment="dovecot23-backend-pgsql-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504129" comment="dovecot23-backend-sqlite-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504130" comment="dovecot23-devel-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504131" comment="dovecot23-fts-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504132" comment="dovecot23-fts-lucene-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504133" comment="dovecot23-fts-solr-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504134" comment="dovecot23-fts-squat-2.3.11.3-24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139275" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1179930" ref_url="https://bugzilla.suse.com/1179930" source="BUGZILLA"/>
		<reference ref_id="1179931" ref_url="https://bugzilla.suse.com/1179931" source="BUGZILLA"/>
		<reference ref_id="1179932" ref_url="https://bugzilla.suse.com/1179932" source="BUGZILLA"/>
		<reference ref_id="1179933" ref_url="https://bugzilla.suse.com/1179933" source="BUGZILLA"/>
		<reference ref_id="1180102" ref_url="https://bugzilla.suse.com/1180102" source="BUGZILLA"/>
		<reference ref_id="1180232" ref_url="https://bugzilla.suse.com/1180232" source="BUGZILLA"/>
		<reference ref_id="1181598" ref_url="https://bugzilla.suse.com/1181598" source="BUGZILLA"/>
		<reference ref_id="1181599" ref_url="https://bugzilla.suse.com/1181599" source="BUGZILLA"/>
		<reference ref_id="1183353" ref_url="https://bugzilla.suse.com/1183353" source="BUGZILLA"/>
		<reference ref_id="1184110" ref_url="https://bugzilla.suse.com/1184110" source="BUGZILLA"/>
		<reference ref_id="1185128" ref_url="https://bugzilla.suse.com/1185128" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26418" ref_url="https://www.suse.com/security/cve/CVE-2020-26418/" source="CVE"/>
		<reference ref_id="CVE-2020-26419" ref_url="https://www.suse.com/security/cve/CVE-2020-26419/" source="CVE"/>
		<reference ref_id="CVE-2020-26420" ref_url="https://www.suse.com/security/cve/CVE-2020-26420/" source="CVE"/>
		<reference ref_id="CVE-2020-26421" ref_url="https://www.suse.com/security/cve/CVE-2020-26421/" source="CVE"/>
		<reference ref_id="CVE-2020-26422" ref_url="https://www.suse.com/security/cve/CVE-2020-26422/" source="CVE"/>
		<reference ref_id="CVE-2021-22173" ref_url="https://www.suse.com/security/cve/CVE-2021-22173/" source="CVE"/>
		<reference ref_id="CVE-2021-22174" ref_url="https://www.suse.com/security/cve/CVE-2021-22174/" source="CVE"/>
		<reference ref_id="CVE-2021-22191" ref_url="https://www.suse.com/security/cve/CVE-2021-22191/" source="CVE"/>
		<reference ref_id="CVE-2021-22207" ref_url="https://www.suse.com/security/cve/CVE-2021-22207/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009067.html" source="SUSE-SU"/>
		<description>
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:

Update wireshark to version 3.4.5

- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements

Including security fixes for:

- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932) 
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)

libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-22"/>
	<updated date="2021-06-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179930">SUSE bug 1179930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179931">SUSE bug 1179931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179932">SUSE bug 1179932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179933">SUSE bug 1179933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180102">SUSE bug 1180102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180232">SUSE bug 1180232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181598">SUSE bug 1181598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181599">SUSE bug 1181599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183353">SUSE bug 1183353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184110">SUSE bug 1184110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185128">SUSE bug 1185128</bugzilla>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26418/">CVE-2020-26418</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26419/">CVE-2020-26419</cve>
	<cve impact="low" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26420/">CVE-2020-26420</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-26421/">CVE-2020-26421</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26422/">CVE-2020-26422</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-22173/">CVE-2021-22173</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-22174/">CVE-2021-22174</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22191/">CVE-2021-22191</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-22207/">CVE-2021-22207</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504135" comment="libQt5Multimedia5-5.9.7-7.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504136" comment="libqt5-qtmultimedia-devel-5.9.7-7.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504137" comment="libqt5-qtmultimedia-private-headers-devel-5.9.7-7.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503504" comment="libsbc1-1.3-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503536" comment="libwireshark14-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503537" comment="libwiretap11-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503538" comment="libwsutil12-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503539" comment="sbc-devel-1.3-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503540" comment="wireshark-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503541" comment="wireshark-devel-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503542" comment="wireshark-ui-qt-3.4.5-3.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139276" version="1" class="patch">
	<metadata>
		<title>Security update for cryptctl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186226" ref_url="https://bugzilla.suse.com/1186226" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18906" ref_url="https://www.suse.com/security/cve/CVE-2019-18906/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2136-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009076.html" source="SUSE-SU"/>
		<description>
This update for cryptctl fixes the following issues:

Update to version 2.4:

- CVE-2019-18906: Client side password hashing was equivalent to clear text password storage (bsc#1186226)
- First step to use plain text password instead of hashed password.
- Move repository into the SUSE github organization
- in RPC server, if client comes from localhost, remember its ipv4 localhost address instead of ipv6 address
- tell a record to clear expired pending commands upon saving a command result; introduce pending commands RPC test case
- avoid hard coding 127.0.0.1 in host ID of alive message test; let system administrator mount and unmount disks by issuing these two commands on key server.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-23"/>
	<updated date="2021-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186226">SUSE bug 1186226</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18906/">CVE-2019-18906</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504138" comment="cryptctl-2.4-4.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139277" version="1" class="patch">
	<metadata>
		<title>Security update for libnettle (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1187060" ref_url="https://bugzilla.suse.com/1187060" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3580" ref_url="https://www.suse.com/security/cve/CVE-2021-3580/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009079.html" source="SUSE-SU"/>
		<description>
This update for libnettle fixes the following issues:

- CVE-2021-3580: Fixed a remote denial of service in the RSA decryption via manipulated ciphertext (bsc#1187060).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-23"/>
	<updated date="2021-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187060">SUSE bug 1187060</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3580/">CVE-2021-3580</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503543" comment="libhogweed4-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494074" comment="libhogweed4-32bit-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503544" comment="libnettle-devel-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503545" comment="libnettle6-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494077" comment="libnettle6-32bit-3.4.1-4.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139278" version="1" class="patch">
	<metadata>
		<title>Security update for libgcrypt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1187212" ref_url="https://bugzilla.suse.com/1187212" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33560" ref_url="https://www.suse.com/security/cve/CVE-2021-33560/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2157-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009085.html" source="SUSE-SU"/>
		<description>
This update for libgcrypt fixes the following issues:

- CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-24"/>
	<updated date="2021-06-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187212">SUSE bug 1187212</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-33560/">CVE-2021-33560</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504139" comment="libgcrypt-devel-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504140" comment="libgcrypt20-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494080" comment="libgcrypt20-32bit-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504141" comment="libgcrypt20-hmac-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494082" comment="libgcrypt20-hmac-32bit-1.8.2-8.39.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139279" version="1" class="patch">
	<metadata>
		<title>Security update for openexr (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1187310" ref_url="https://bugzilla.suse.com/1187310" source="BUGZILLA"/>
		<reference ref_id="1187395" ref_url="https://bugzilla.suse.com/1187395" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3598" ref_url="https://www.suse.com/security/cve/CVE-2021-3598/" source="CVE"/>
		<reference ref_id="CVE-2021-3605" ref_url="https://www.suse.com/security/cve/CVE-2021-3605/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009086.html" source="SUSE-SU"/>
		<description>
This update for openexr fixes the following issues:

- Fixed CVE-2021-3605 [bsc#1187395]: Heap buffer overflow in the rleUncompress function
- Fixed CVE-2021-3598 [bsc#1187310]: Heap buffer overflow in Imf_3_1:CharPtrIO:readChars
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-24"/>
	<updated date="2021-06-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187310">SUSE bug 1187310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187395">SUSE bug 1187395</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3598/">CVE-2021-3598</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3605/">CVE-2021-3605</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503551" comment="libIlmImf-2_2-23-2.2.1-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503552" comment="libIlmImfUtil-2_2-23-2.2.1-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503553" comment="openexr-devel-2.2.1-3.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139280" version="1" class="patch">
	<metadata>
		<title>Security update for ovmf (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1183578" ref_url="https://bugzilla.suse.com/1183578" source="BUGZILLA"/>
		<reference ref_id="1183579" ref_url="https://bugzilla.suse.com/1183579" source="BUGZILLA"/>
		<reference ref_id="1186151" ref_url="https://bugzilla.suse.com/1186151" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28210" ref_url="https://www.suse.com/security/cve/CVE-2021-28210/" source="CVE"/>
		<reference ref_id="CVE-2021-28211" ref_url="https://www.suse.com/security/cve/CVE-2021-28211/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009089.html" source="SUSE-SU"/>
		<description>
This update for ovmf fixes the following issues:

- Fixed a possible buffer overflow in IScsiDxe (bsc#1186151)
- CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo (bsc#1183578)
- CVE-2021-28210: ovmf: unlimited FV recursion, round 2 (bsc#1183579)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-25"/>
	<updated date="2021-06-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183578">SUSE bug 1183578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183579">SUSE bug 1183579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186151">SUSE bug 1186151</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-28210/">CVE-2021-28210</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28211/">CVE-2021-28211</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503554" comment="ovmf-2017+git1510945757.b2662641d5-5.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503555" comment="ovmf-tools-2017+git1510945757.b2662641d5-5.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503556" comment="qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503557" comment="qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139281" version="1" class="patch">
	<metadata>
		<title>Security update for arpwatch (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186240" ref_url="https://bugzilla.suse.com/1186240" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25321" ref_url="https://www.suse.com/security/cve/CVE-2021-25321/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009098.html" source="SUSE-SU"/>
		<description>
This update for arpwatch fixes the following issues:

- CVE-2021-25321: Fixed local privilege escalation from runtime user to root (bsc#1186240).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-28"/>
	<updated date="2021-06-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186240">SUSE bug 1186240</bugzilla>
	<cve impact="moderate" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-25321/">CVE-2021-25321</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615918" comment="arpwatch-2.1a15-5.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139282" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1186622" ref_url="https://bugzilla.suse.com/1186622" source="BUGZILLA"/>
		<reference ref_id="1187443" ref_url="https://bugzilla.suse.com/1187443" source="BUGZILLA"/>
		<reference ref_id="1187444" ref_url="https://bugzilla.suse.com/1187444" source="BUGZILLA"/>
		<reference ref_id="1187445" ref_url="https://bugzilla.suse.com/1187445" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33195" ref_url="https://www.suse.com/security/cve/CVE-2021-33195/" source="CVE"/>
		<reference ref_id="CVE-2021-33196" ref_url="https://www.suse.com/security/cve/CVE-2021-33196/" source="CVE"/>
		<reference ref_id="CVE-2021-33197" ref_url="https://www.suse.com/security/cve/CVE-2021-33197/" source="CVE"/>
		<reference ref_id="CVE-2021-33198" ref_url="https://www.suse.com/security/cve/CVE-2021-33198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009104.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

Update to 1.15.13.
    
Includes these security fixes 

- CVE-2021-33195: net: Lookup functions may return invalid host names (bsc#1187443).
- CVE-2021-33196: archive/zip: malformed archive may cause panic or memory exhaustion (bsc#1186622).
- CVE-2021-33197: net/http/httputil: ReverseProxy forwards Connection headers if first one is empty (bsc#1187444)
- CVE-2021-33198: math/big: (*Rat).SetString with '1.770p02041010010011001001' crashes with 'makeslice: len out of range' (bsc#1187445).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-30"/>
	<updated date="2021-06-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186622">SUSE bug 1186622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187443">SUSE bug 1187443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187444">SUSE bug 1187444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187445">SUSE bug 1187445</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-33195/">CVE-2021-33195</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33196/">CVE-2021-33196</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-33197/">CVE-2021-33197</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33198/">CVE-2021-33198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009615807" comment="go1.15-1.15.13-1.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615808" comment="go1.15-doc-1.15.13-1.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615798" comment="go1.15-race-1.15.13-1.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139283" version="1" class="patch">
	<metadata>
		<title>Security update for go1.14 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1164903" ref_url="https://bugzilla.suse.com/1164903" source="BUGZILLA"/>
		<reference ref_id="1181145" ref_url="https://bugzilla.suse.com/1181145" source="BUGZILLA"/>
		<reference ref_id="1181146" ref_url="https://bugzilla.suse.com/1181146" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3114" ref_url="https://www.suse.com/security/cve/CVE-2021-3114/" source="CVE"/>
		<reference ref_id="CVE-2021-3115" ref_url="https://www.suse.com/security/cve/CVE-2021-3115/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008248.html" source="SUSE-SU"/>
		<description>
This update for go1.14 fixes the following issues:

Go was updated to version 1.14.14 (bsc#1164903).

Security issues fixed:

- CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic (bsc#1181145).
- CVE-2021-3115: Fixed a potential arbitrary code execution in the build process (bsc#1181146).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-26"/>
	<updated date="2021-01-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1164903">SUSE bug 1164903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181145">SUSE bug 1181145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181146">SUSE bug 1181146</bugzilla>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3114/">CVE-2021-3114</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3115/">CVE-2021-3115</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504142" comment="go1.14-1.14.14-1.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504143" comment="go1.14-doc-1.14.14-1.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139284" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1181145" ref_url="https://bugzilla.suse.com/1181145" source="BUGZILLA"/>
		<reference ref_id="1181146" ref_url="https://bugzilla.suse.com/1181146" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3114" ref_url="https://www.suse.com/security/cve/CVE-2021-3114/" source="CVE"/>
		<reference ref_id="CVE-2021-3115" ref_url="https://www.suse.com/security/cve/CVE-2021-3115/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008246.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

Go was updated to version 1.15.7 (bsc#1175132).

Security issues fixed:

- CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic (bsc#1181145).
- CVE-2021-3115: Fixed a potential arbitrary code execution in the build process (bsc#1181146).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-28"/>
	<updated date="2021-01-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181145">SUSE bug 1181145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181146">SUSE bug 1181146</bugzilla>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3114/">CVE-2021-3114</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3115/">CVE-2021-3115</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504144" comment="go1.15-1.15.7-1.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504145" comment="go1.15-doc-1.15.7-1.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496581" comment="go1.15-race-1.15.7-1.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139285" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1180554" ref_url="https://bugzilla.suse.com/1180554" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8287" ref_url="https://www.suse.com/security/cve/CVE-2020-8287/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0224-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008247.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issue:

- CVE-2020-8287: Fixed an HTTP request smuggling vulnerability (bsc#1180554).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-26"/>
	<updated date="2021-01-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1180554">SUSE bug 1180554</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8287/">CVE-2020-8287</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503558" comment="nodejs8-8.17.0-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503559" comment="nodejs8-devel-8.17.0-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503560" comment="nodejs8-docs-8.17.0-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503561" comment="npm8-8.17.0-3.42.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139286" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1180684" ref_url="https://bugzilla.suse.com/1180684" source="BUGZILLA"/>
		<reference ref_id="1180685" ref_url="https://bugzilla.suse.com/1180685" source="BUGZILLA"/>
		<reference ref_id="1180687" ref_url="https://bugzilla.suse.com/1180687" source="BUGZILLA"/>
		<reference ref_id="1181090" ref_url="https://bugzilla.suse.com/1181090" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23239" ref_url="https://www.suse.com/security/cve/CVE-2021-23239/" source="CVE"/>
		<reference ref_id="CVE-2021-23240" ref_url="https://www.suse.com/security/cve/CVE-2021-23240/" source="CVE"/>
		<reference ref_id="CVE-2021-3156" ref_url="https://www.suse.com/security/cve/CVE-2021-3156/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0227-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008250.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:

- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges 
  [bsc#1181090,CVE-2021-3156]
- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`
  [bsc#1180684,CVE-2021-23239]
- A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685,
  CVE-2021-23240]
- It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-26"/>
	<updated date="2021-01-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180684">SUSE bug 1180684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180685">SUSE bug 1180685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180687">SUSE bug 1180687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181090">SUSE bug 1181090</bugzilla>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23239/">CVE-2021-23239</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23240/">CVE-2021-23240</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3156/">CVE-2021-3156</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503562" comment="sudo-1.8.22-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503563" comment="sudo-devel-1.8.22-4.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139287" version="1" class="patch">
	<metadata>
		<title>Security update for dbus-1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1187105" ref_url="https://bugzilla.suse.com/1187105" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35512" ref_url="https://www.suse.com/security/cve/CVE-2020-35512/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009121.html" source="SUSE-SU"/>
		<description>
This update for dbus-1 fixes the following issues:

- CVE-2020-35512: Fixed a use-after-free or potential undefined behaviour caused by shared UID's (bsc#1187105)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-12"/>
	<updated date="2021-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187105">SUSE bug 1187105</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35512/">CVE-2020-35512</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009615809" comment="dbus-1-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615810" comment="dbus-1-devel-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615811" comment="dbus-1-x11-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615812" comment="libdbus-1-3-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615795" comment="libdbus-1-3-32bit-1.12.2-8.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139288" version="1" class="patch">
	<metadata>
		<title>Security update for sqlite3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1157818" ref_url="https://bugzilla.suse.com/1157818" source="BUGZILLA"/>
		<reference ref_id="1158812" ref_url="https://bugzilla.suse.com/1158812" source="BUGZILLA"/>
		<reference ref_id="1158958" ref_url="https://bugzilla.suse.com/1158958" source="BUGZILLA"/>
		<reference ref_id="1158959" ref_url="https://bugzilla.suse.com/1158959" source="BUGZILLA"/>
		<reference ref_id="1158960" ref_url="https://bugzilla.suse.com/1158960" source="BUGZILLA"/>
		<reference ref_id="1159491" ref_url="https://bugzilla.suse.com/1159491" source="BUGZILLA"/>
		<reference ref_id="1159715" ref_url="https://bugzilla.suse.com/1159715" source="BUGZILLA"/>
		<reference ref_id="1159847" ref_url="https://bugzilla.suse.com/1159847" source="BUGZILLA"/>
		<reference ref_id="1159850" ref_url="https://bugzilla.suse.com/1159850" source="BUGZILLA"/>
		<reference ref_id="1160309" ref_url="https://bugzilla.suse.com/1160309" source="BUGZILLA"/>
		<reference ref_id="1160438" ref_url="https://bugzilla.suse.com/1160438" source="BUGZILLA"/>
		<reference ref_id="1160439" ref_url="https://bugzilla.suse.com/1160439" source="BUGZILLA"/>
		<reference ref_id="1164719" ref_url="https://bugzilla.suse.com/1164719" source="BUGZILLA"/>
		<reference ref_id="1172091" ref_url="https://bugzilla.suse.com/1172091" source="BUGZILLA"/>
		<reference ref_id="1172115" ref_url="https://bugzilla.suse.com/1172115" source="BUGZILLA"/>
		<reference ref_id="1172234" ref_url="https://bugzilla.suse.com/1172234" source="BUGZILLA"/>
		<reference ref_id="1172236" ref_url="https://bugzilla.suse.com/1172236" source="BUGZILLA"/>
		<reference ref_id="1172240" ref_url="https://bugzilla.suse.com/1172240" source="BUGZILLA"/>
		<reference ref_id="1173641" ref_url="https://bugzilla.suse.com/1173641" source="BUGZILLA"/>
		<reference ref_id="928700" ref_url="https://bugzilla.suse.com/928700" source="BUGZILLA"/>
		<reference ref_id="928701" ref_url="https://bugzilla.suse.com/928701" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-3414" ref_url="https://www.suse.com/security/cve/CVE-2015-3414/" source="CVE"/>
		<reference ref_id="CVE-2015-3415" ref_url="https://www.suse.com/security/cve/CVE-2015-3415/" source="CVE"/>
		<reference ref_id="CVE-2019-19244" ref_url="https://www.suse.com/security/cve/CVE-2019-19244/" source="CVE"/>
		<reference ref_id="CVE-2019-19317" ref_url="https://www.suse.com/security/cve/CVE-2019-19317/" source="CVE"/>
		<reference ref_id="CVE-2019-19603" ref_url="https://www.suse.com/security/cve/CVE-2019-19603/" source="CVE"/>
		<reference ref_id="CVE-2019-19645" ref_url="https://www.suse.com/security/cve/CVE-2019-19645/" source="CVE"/>
		<reference ref_id="CVE-2019-19646" ref_url="https://www.suse.com/security/cve/CVE-2019-19646/" source="CVE"/>
		<reference ref_id="CVE-2019-19880" ref_url="https://www.suse.com/security/cve/CVE-2019-19880/" source="CVE"/>
		<reference ref_id="CVE-2019-19923" ref_url="https://www.suse.com/security/cve/CVE-2019-19923/" source="CVE"/>
		<reference ref_id="CVE-2019-19924" ref_url="https://www.suse.com/security/cve/CVE-2019-19924/" source="CVE"/>
		<reference ref_id="CVE-2019-19925" ref_url="https://www.suse.com/security/cve/CVE-2019-19925/" source="CVE"/>
		<reference ref_id="CVE-2019-19926" ref_url="https://www.suse.com/security/cve/CVE-2019-19926/" source="CVE"/>
		<reference ref_id="CVE-2019-19959" ref_url="https://www.suse.com/security/cve/CVE-2019-19959/" source="CVE"/>
		<reference ref_id="CVE-2019-20218" ref_url="https://www.suse.com/security/cve/CVE-2019-20218/" source="CVE"/>
		<reference ref_id="CVE-2020-13434" ref_url="https://www.suse.com/security/cve/CVE-2020-13434/" source="CVE"/>
		<reference ref_id="CVE-2020-13435" ref_url="https://www.suse.com/security/cve/CVE-2020-13435/" source="CVE"/>
		<reference ref_id="CVE-2020-13630" ref_url="https://www.suse.com/security/cve/CVE-2020-13630/" source="CVE"/>
		<reference ref_id="CVE-2020-13631" ref_url="https://www.suse.com/security/cve/CVE-2020-13631/" source="CVE"/>
		<reference ref_id="CVE-2020-13632" ref_url="https://www.suse.com/security/cve/CVE-2020-13632/" source="CVE"/>
		<reference ref_id="CVE-2020-15358" ref_url="https://www.suse.com/security/cve/CVE-2020-15358/" source="CVE"/>
		<reference ref_id="CVE-2020-9327" ref_url="https://www.suse.com/security/cve/CVE-2020-9327/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<description>
This update for sqlite3 fixes the following issues:

- Update to version 3.36.0
- CVE-2020-15358: heap-based buffer overflow in multiSelectOrderBy due to mishandling of query-flattener
  optimization (bsc#1173641)
- CVE-2020-9327: NULL pointer dereference and segmentation fault because of generated column optimizations in
  isAuxiliaryVtabOperator (bsc#1164719)
- CVE-2019-20218: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error (bsc#1160439)
- CVE-2019-19959: memory-management error via ext/misc/zipfile.c involving embedded '\0' input (bsc#1160438)
- CVE-2019-19923: improper handling  of  certain uses of SELECT DISTINCT in flattenSubquery may lead to null pointer
  dereference (bsc#1160309)
- CVE-2019-19924: improper error handling in sqlite3WindowRewrite() (bsc#1159850)
- CVE-2019-19925: improper handling of NULL pathname during an update of a ZIP archive (bsc#1159847)
- CVE-2019-19926: improper handling  of certain errors during parsing  multiSelect in select.c (bsc#1159715)
- CVE-2019-19880: exprListAppendList in window.c allows attackers to trigger an invalid pointer dereference
  (bsc#1159491)
- CVE-2019-19603: during handling of CREATE TABLE and CREATE VIEW statements, does not consider confusion with
  a shadow table name (bsc#1158960)
- CVE-2019-19646: pragma.c mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated
  columns (bsc#1158959)
- CVE-2019-19645: alter.c allows attackers to trigger infinite recursion via certain types of self-referential views
  in conjunction with ALTER TABLE statements (bsc#1158958)
- CVE-2019-19317: lookupName in resolve.c omits bits from the colUsed bitmask in the case of a generated column,
  which allows attackers to cause a denial of service (bsc#1158812)
- CVE-2019-19244: sqlite3,sqlite2,sqlite: The function sqlite3Select in select.c allows a crash if a
  sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage (bsc#1157818)
- CVE-2015-3415: sqlite3VdbeExec comparison operator vulnerability (bsc#928701)
- CVE-2015-3414: sqlite3,sqlite2: dequoting of collation-sequence names (bsc#928700)
- CVE-2020-13434: integer overflow in sqlite3_str_vappendf (bsc#1172115)
- CVE-2020-13630: (bsc#1172234: use-after-free in fts3EvalNextRow
- CVE-2020-13631: virtual table allowed to be renamed to one of its shadow tables (bsc#1172236)
- CVE-2020-13632: NULL pointer dereference via crafted matchinfo() query (bsc#1172240)
- CVE-2020-13435: Malicious SQL statements could have crashed the process that is running SQLite (bsc#1172091)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-14"/>
	<updated date="2021-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1157818">SUSE bug 1157818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158812">SUSE bug 1158812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158958">SUSE bug 1158958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158959">SUSE bug 1158959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158960">SUSE bug 1158960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159491">SUSE bug 1159491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159715">SUSE bug 1159715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159847">SUSE bug 1159847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159850">SUSE bug 1159850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160309">SUSE bug 1160309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160438">SUSE bug 1160438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160439">SUSE bug 1160439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164719">SUSE bug 1164719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172091">SUSE bug 1172091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172115">SUSE bug 1172115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172234">SUSE bug 1172234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172236">SUSE bug 1172236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172240">SUSE bug 1172240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173641">SUSE bug 1173641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928700">SUSE bug 928700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928701">SUSE bug 928701</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-3414/">CVE-2015-3414</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-3415/">CVE-2015-3415</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19244/">CVE-2019-19244</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-19317/">CVE-2019-19317</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19603/">CVE-2019-19603</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19645/">CVE-2019-19645</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19646/">CVE-2019-19646</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19880/">CVE-2019-19880</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19923/">CVE-2019-19923</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-19924/">CVE-2019-19924</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19925/">CVE-2019-19925</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19926/">CVE-2019-19926</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19959/">CVE-2019-19959</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20218/">CVE-2019-20218</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13434/">CVE-2020-13434</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13435/">CVE-2020-13435</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13630/">CVE-2020-13630</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-13631/">CVE-2020-13631</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13632/">CVE-2020-13632</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-15358/">CVE-2020-15358</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-9327/">CVE-2020-9327</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009624167" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624168" comment="sqlite3-3.36.0-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624169" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139289" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1183155" ref_url="https://bugzilla.suse.com/1183155" source="BUGZILLA"/>
		<reference ref_id="1183851" ref_url="https://bugzilla.suse.com/1183851" source="BUGZILLA"/>
		<reference ref_id="1183852" ref_url="https://bugzilla.suse.com/1183852" source="BUGZILLA"/>
		<reference ref_id="1184450" ref_url="https://bugzilla.suse.com/1184450" source="BUGZILLA"/>
		<reference ref_id="1187973" ref_url="https://bugzilla.suse.com/1187973" source="BUGZILLA"/>
		<reference ref_id="1187976" ref_url="https://bugzilla.suse.com/1187976" source="BUGZILLA"/>
		<reference ref_id="1187977" ref_url="https://bugzilla.suse.com/1187977" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7774" ref_url="https://www.suse.com/security/cve/CVE-2020-7774/" source="CVE"/>
		<reference ref_id="CVE-2021-22918" ref_url="https://www.suse.com/security/cve/CVE-2021-22918/" source="CVE"/>
		<reference ref_id="CVE-2021-23362" ref_url="https://www.suse.com/security/cve/CVE-2021-23362/" source="CVE"/>
		<reference ref_id="CVE-2021-27290" ref_url="https://www.suse.com/security/cve/CVE-2021-27290/" source="CVE"/>
		<reference ref_id="CVE-2021-3449" ref_url="https://www.suse.com/security/cve/CVE-2021-3449/" source="CVE"/>
		<reference ref_id="CVE-2021-3450" ref_url="https://www.suse.com/security/cve/CVE-2021-3450/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009145.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

Update nodejs10 to 10.24.1.

Including fixes for 

- CVE-2021-22918: libuv upgrade - Out of bounds read (bsc#1187973)
- CVE-2021-27290: ssri Regular Expression Denial of Service (bsc#1187976)
- CVE-2021-23362: hosted-git-info Regular Expression Denial of Service (bsc#1187977)
- CVE-2020-7774: y18n Prototype Pollution (bsc#1184450)
- CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (bsc#1183851)
- CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing (bsc#1183852)
- reduce memory footprint of test-worker-stdio (bsc#1183155)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-15"/>
	<updated date="2021-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183155">SUSE bug 1183155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183851">SUSE bug 1183851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183852">SUSE bug 1183852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184450">SUSE bug 1184450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187973">SUSE bug 1187973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187976">SUSE bug 1187976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187977">SUSE bug 1187977</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-7774/">CVE-2020-7774</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22918/">CVE-2021-22918</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23362/">CVE-2021-23362</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27290/">CVE-2021-27290</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3449/">CVE-2021-3449</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3450/">CVE-2021-3450</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009624552" comment="nodejs10-10.24.1-1.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624553" comment="nodejs10-devel-10.24.1-1.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624546" comment="nodejs10-docs-10.24.1-1.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624554" comment="npm10-10.24.1-1.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139290" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1153720" ref_url="https://bugzilla.suse.com/1153720" source="BUGZILLA"/>
		<reference ref_id="1174978" ref_url="https://bugzilla.suse.com/1174978" source="BUGZILLA"/>
		<reference ref_id="1179610" ref_url="https://bugzilla.suse.com/1179610" source="BUGZILLA"/>
		<reference ref_id="1181193" ref_url="https://bugzilla.suse.com/1181193" source="BUGZILLA"/>
		<reference ref_id="1185428" ref_url="https://bugzilla.suse.com/1185428" source="BUGZILLA"/>
		<reference ref_id="1185701" ref_url="https://bugzilla.suse.com/1185701" source="BUGZILLA"/>
		<reference ref_id="1185861" ref_url="https://bugzilla.suse.com/1185861" source="BUGZILLA"/>
		<reference ref_id="1186463" ref_url="https://bugzilla.suse.com/1186463" source="BUGZILLA"/>
		<reference ref_id="1186484" ref_url="https://bugzilla.suse.com/1186484" source="BUGZILLA"/>
		<reference ref_id="1187038" ref_url="https://bugzilla.suse.com/1187038" source="BUGZILLA"/>
		<reference ref_id="1187050" ref_url="https://bugzilla.suse.com/1187050" source="BUGZILLA"/>
		<reference ref_id="1187215" ref_url="https://bugzilla.suse.com/1187215" source="BUGZILLA"/>
		<reference ref_id="1187452" ref_url="https://bugzilla.suse.com/1187452" source="BUGZILLA"/>
		<reference ref_id="1187554" ref_url="https://bugzilla.suse.com/1187554" source="BUGZILLA"/>
		<reference ref_id="1187595" ref_url="https://bugzilla.suse.com/1187595" source="BUGZILLA"/>
		<reference ref_id="1187601" ref_url="https://bugzilla.suse.com/1187601" source="BUGZILLA"/>
		<reference ref_id="1188062" ref_url="https://bugzilla.suse.com/1188062" source="BUGZILLA"/>
		<reference ref_id="1188116" ref_url="https://bugzilla.suse.com/1188116" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24588" ref_url="https://www.suse.com/security/cve/CVE-2020-24588/" source="CVE"/>
		<reference ref_id="CVE-2020-26558" ref_url="https://www.suse.com/security/cve/CVE-2020-26558/" source="CVE"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2020-36386" ref_url="https://www.suse.com/security/cve/CVE-2020-36386/" source="CVE"/>
		<reference ref_id="CVE-2021-0129" ref_url="https://www.suse.com/security/cve/CVE-2021-0129/" source="CVE"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-0605" ref_url="https://www.suse.com/security/cve/CVE-2021-0605/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33200" ref_url="https://www.suse.com/security/cve/CVE-2021-33200/" source="CVE"/>
		<reference ref_id="CVE-2021-33624" ref_url="https://www.suse.com/security/cve/CVE-2021-33624/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="CVE-2021-34693" ref_url="https://www.suse.com/security/cve/CVE-2021-34693/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009190.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2021-33624: Fixed a bug which allows unprivileged BPF program to leak the contents of arbitrary kernel memory (and therefore, of all physical memory) via a side-channel. (bsc#1187554)
- CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. (bsc#1187601)
- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187595)
- CVE-2020-26558: Fixed a flaw in the Bluetooth LE and BR/EDR secure pairing that could permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing. (bnc#1179610)
- CVE-2021-34693: Fixed a bug in net/can/bcm.c which could allow local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized. (bsc#1187452)
- CVE-2021-0129: Fixed an improper access control in BlueZ that may have allowed an authenticated user to potentially enable information disclosure via adjacent access. (bnc#1186463)
- CVE-2020-36386: Fixed an out-of-bounds read in hci_extended_inquiry_result_evt. (bsc#1187038)
- CVE-2020-24588: Fixed a bug that could allow an adversary to abuse devices that support receiving non-SSP A-MSDU frames to inject arbitrary network packets. (bsc#1185861 bsc#1185863)
- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-3609: Fixed a race condition in the CAN BCM networking protocol which allows for local privilege escalation. (bsc#1187215)
- CVE-2020-36385: Fixed a use-after-free flaw in ucma.c which allows for local privilege escalation. (bsc#1187050)
- CVE-2021-33200: Fix leakage of uninitialized bpf stack under speculation. (bsc#1186484)

The following non-security bugs were fixed:

- af_packet: fix the tx skb protocol in raw sockets with ETH_P_ALL (bsc#1176081).
- kabi: preserve struct header_ops after bsc#1176081 fix (bsc#1176081).
- net: Do not set transport offset to invalid value (bsc#1176081).
- net: Introduce parse_protocol header_ops callback (bsc#1176081).
- net/ethernet: Add parse_protocol header_ops support (bsc#1176081).
- net/mlx5e: Remove the wrong assumption about transport offset (bsc#1176081).
- net/mlx5e: Trust kernel regarding transport offset (bsc#1176081).
- net/packet: Ask driver for protocol if not provided by user (bsc#1176081).
- net/packet: Remove redundant skb-&gt;protocol set (bsc#1176081).
- resource: Fix find_next_iomem_res() iteration issue (bsc#1181193).
- scsi: scsi_dh_alua: Retry RTPG on a different path after failure (bsc#1174978 bsc#1185701).
- SUNRPC in case of backlog, hand free slots directly to waiting task (bsc#1185428).
- SUNRPC: More fixes for backlog congestion (bsc#1185428).
- x86/crash: Add e820 reserved ranges to kdump kernel's e820 table (bsc#1181193).
- x86/debug: Extend the lower bound of crash kernel low reservations (bsc#1153720).
- x86/e820, ioport: Add a new I/O resource descriptor IORES_DESC_RESERVED (bsc#1181193).
- x86/mm: Rework ioremap resource mapping determination (bsc#1181193).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-21"/>
	<updated date="2021-07-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153720">SUSE bug 1153720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174978">SUSE bug 1174978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179610">SUSE bug 1179610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181193">SUSE bug 1181193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185428">SUSE bug 1185428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185701">SUSE bug 1185701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185861">SUSE bug 1185861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186463">SUSE bug 1186463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186484">SUSE bug 1186484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187038">SUSE bug 1187038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187050">SUSE bug 1187050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187215">SUSE bug 1187215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187452">SUSE bug 1187452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187554">SUSE bug 1187554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187595">SUSE bug 1187595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187601">SUSE bug 1187601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188062">SUSE bug 1188062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188116">SUSE bug 1188116</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-24588/">CVE-2020-24588</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26558/">CVE-2020-26558</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36386/">CVE-2020-36386</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-0129/">CVE-2021-0129</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0605/">CVE-2021-0605</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33200/">CVE-2021-33200</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-33624/">CVE-2021-33624</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-34693/">CVE-2021-34693</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009625666" comment="kernel-default-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625667" comment="kernel-default-base-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625668" comment="kernel-default-devel-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625669" comment="kernel-devel-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625670" comment="kernel-docs-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625671" comment="kernel-macros-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625672" comment="kernel-obs-build-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625673" comment="kernel-source-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625674" comment="kernel-syms-4.12.14-197.99.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139291" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188217" ref_url="https://bugzilla.suse.com/1188217" source="BUGZILLA"/>
		<reference ref_id="1188218" ref_url="https://bugzilla.suse.com/1188218" source="BUGZILLA"/>
		<reference ref_id="1188219" ref_url="https://bugzilla.suse.com/1188219" source="BUGZILLA"/>
		<reference ref_id="1188220" ref_url="https://bugzilla.suse.com/1188220" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22922" ref_url="https://www.suse.com/security/cve/CVE-2021-22922/" source="CVE"/>
		<reference ref_id="CVE-2021-22923" ref_url="https://www.suse.com/security/cve/CVE-2021-22923/" source="CVE"/>
		<reference ref_id="CVE-2021-22924" ref_url="https://www.suse.com/security/cve/CVE-2021-22924/" source="CVE"/>
		<reference ref_id="CVE-2021-22925" ref_url="https://www.suse.com/security/cve/CVE-2021-22925/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009199.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2021-22925: TELNET stack contents disclosure again. (bsc#1188220)
- CVE-2021-22924: Bad connection reuse due to flawed path name checks. (bsc#1188219)
- CVE-2021-22923: Insufficiently Protected Credentials. (bsc#1188218)
- CVE-2021-22922: Wrong content via metalink not discarded. (bsc#1188217)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-21"/>
	<updated date="2021-07-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1188217">SUSE bug 1188217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188218">SUSE bug 1188218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188219">SUSE bug 1188219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188220">SUSE bug 1188220</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22922/">CVE-2021-22922</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22923/">CVE-2021-22923</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-22924/">CVE-2021-22924</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22925/">CVE-2021-22925</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626005" comment="curl-7.60.0-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626006" comment="libcurl-devel-7.60.0-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626007" comment="libcurl4-7.60.0-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626008" comment="libcurl4-32bit-7.60.0-3.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139292" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181414" ref_url="https://bugzilla.suse.com/1181414" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26976" ref_url="https://www.suse.com/security/cve/CVE-2020-26976/" source="CVE"/>
		<reference ref_id="CVE-2021-23953" ref_url="https://www.suse.com/security/cve/CVE-2021-23953/" source="CVE"/>
		<reference ref_id="CVE-2021-23954" ref_url="https://www.suse.com/security/cve/CVE-2021-23954/" source="CVE"/>
		<reference ref_id="CVE-2021-23960" ref_url="https://www.suse.com/security/cve/CVE-2021-23960/" source="CVE"/>
		<reference ref_id="CVE-2021-23964" ref_url="https://www.suse.com/security/cve/CVE-2021-23964/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008257.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.7.0 ESR  (MFSA 2021-04, bsc#1181414)
  * CVE-2021-23953: Fixed a Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954: Fixed a type confusion when using logical assignment operators in JavaScript switch statements
  * CVE-2020-26976: Fixed an issue where HTTPS pages could have been intercepted by a registered service worker when they should not have been
  * CVE-2021-23960: Fixed a use-after-poison for incorrectly redeclared JavaScript variables during GC
  * CVE-2021-23964: Fixed Memory safety bugs 	
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-29"/>
	<updated date="2021-01-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181414">SUSE bug 1181414</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26976/">CVE-2020-26976</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23953/">CVE-2021-23953</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23954/">CVE-2021-23954</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23960/">CVE-2021-23960</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23964/">CVE-2021-23964</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504146" comment="MozillaFirefox-78.7.0-3.128.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504147" comment="MozillaFirefox-devel-78.7.0-3.128.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504148" comment="MozillaFirefox-translations-common-78.7.0-3.128.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504149" comment="MozillaFirefox-translations-other-78.7.0-3.128.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139293" version="1" class="patch">
	<metadata>
		<title>Security update for linuxptp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1187646" ref_url="https://bugzilla.suse.com/1187646" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3570" ref_url="https://www.suse.com/security/cve/CVE-2021-3570/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009215.html" source="SUSE-SU"/>
		<description>
This update for linuxptp fixes the following issues:

- CVE-2021-3570: Validate the messageLength field of incoming messages. (bsc#1187646)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187646">SUSE bug 1187646</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3570/">CVE-2021-3570</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626003" comment="linuxptp-1.8+git65.g303b08c-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139294" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188275" ref_url="https://bugzilla.suse.com/1188275" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29970" ref_url="https://www.suse.com/security/cve/CVE-2021-29970/" source="CVE"/>
		<reference ref_id="CVE-2021-29976" ref_url="https://www.suse.com/security/cve/CVE-2021-29976/" source="CVE"/>
		<reference ref_id="CVE-2021-30547" ref_url="https://www.suse.com/security/cve/CVE-2021-30547/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009220.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 78.12.0 ESR

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-29 (bsc#1188275)

* CVE-2021-29970: Use-after-free in accessibility features of a document
* CVE-2021-30547: Out of bounds write in ANGLE
* CVE-2021-29976: Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188275">SUSE bug 1188275</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29970/">CVE-2021-29970</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29976/">CVE-2021-29976</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30547/">CVE-2021-30547</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009625199" comment="MozillaFirefox-78.12.0-3.147.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625200" comment="MozillaFirefox-devel-78.12.0-3.147.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625201" comment="MozillaFirefox-translations-common-78.12.0-3.147.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625202" comment="MozillaFirefox-translations-other-78.12.0-3.147.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139295" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1176681" ref_url="https://bugzilla.suse.com/1176681" source="BUGZILLA"/>
		<reference ref_id="1185591" ref_url="https://bugzilla.suse.com/1185591" source="BUGZILLA"/>
		<reference ref_id="1186290" ref_url="https://bugzilla.suse.com/1186290" source="BUGZILLA"/>
		<reference ref_id="1187364" ref_url="https://bugzilla.suse.com/1187364" source="BUGZILLA"/>
		<reference ref_id="1187365" ref_url="https://bugzilla.suse.com/1187365" source="BUGZILLA"/>
		<reference ref_id="1187366" ref_url="https://bugzilla.suse.com/1187366" source="BUGZILLA"/>
		<reference ref_id="1187367" ref_url="https://bugzilla.suse.com/1187367" source="BUGZILLA"/>
		<reference ref_id="1187499" ref_url="https://bugzilla.suse.com/1187499" source="BUGZILLA"/>
		<reference ref_id="1187529" ref_url="https://bugzilla.suse.com/1187529" source="BUGZILLA"/>
		<reference ref_id="1187538" ref_url="https://bugzilla.suse.com/1187538" source="BUGZILLA"/>
		<reference ref_id="1187539" ref_url="https://bugzilla.suse.com/1187539" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25085" ref_url="https://www.suse.com/security/cve/CVE-2020-25085/" source="CVE"/>
		<reference ref_id="CVE-2021-3582" ref_url="https://www.suse.com/security/cve/CVE-2021-3582/" source="CVE"/>
		<reference ref_id="CVE-2021-3592" ref_url="https://www.suse.com/security/cve/CVE-2021-3592/" source="CVE"/>
		<reference ref_id="CVE-2021-3593" ref_url="https://www.suse.com/security/cve/CVE-2021-3593/" source="CVE"/>
		<reference ref_id="CVE-2021-3594" ref_url="https://www.suse.com/security/cve/CVE-2021-3594/" source="CVE"/>
		<reference ref_id="CVE-2021-3595" ref_url="https://www.suse.com/security/cve/CVE-2021-3595/" source="CVE"/>
		<reference ref_id="CVE-2021-3607" ref_url="https://www.suse.com/security/cve/CVE-2021-3607/" source="CVE"/>
		<reference ref_id="CVE-2021-3608" ref_url="https://www.suse.com/security/cve/CVE-2021-3608/" source="CVE"/>
		<reference ref_id="CVE-2021-3611" ref_url="https://www.suse.com/security/cve/CVE-2021-3611/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009241.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

Security issues fixed:

- CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)
- CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)
- CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)
- CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)
- CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)
- CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
- CVE-2021-3608: Fix the ring init error flow (bsc#1187538)
- CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)
- CVE-2020-25085: Fix out-of-bounds access issue while doing multi block SDMA (bsc#1176681)

Other issues fixed:

- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
- Fix qemu hang while cancelling migrating hugepage vm (bsc#1185591)

		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-02"/>
	<updated date="2021-08-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176681">SUSE bug 1176681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185591">SUSE bug 1185591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186290">SUSE bug 1186290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187364">SUSE bug 1187364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187365">SUSE bug 1187365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187366">SUSE bug 1187366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187367">SUSE bug 1187367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187499">SUSE bug 1187499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187529">SUSE bug 1187529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187538">SUSE bug 1187538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187539">SUSE bug 1187539</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-25085/">CVE-2020-25085</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3582/">CVE-2021-3582</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3592/">CVE-2021-3592</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3593/">CVE-2021-3593</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3594/">CVE-2021-3594</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3595/">CVE-2021-3595</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3607/">CVE-2021-3607</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3608/">CVE-2021-3608</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3611/">CVE-2021-3611</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009625398" comment="qemu-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625399" comment="qemu-arm-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625400" comment="qemu-audio-alsa-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625401" comment="qemu-audio-oss-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625402" comment="qemu-audio-pa-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625403" comment="qemu-block-curl-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625404" comment="qemu-block-iscsi-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625405" comment="qemu-block-rbd-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625406" comment="qemu-block-ssh-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625407" comment="qemu-guest-agent-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625408" comment="qemu-ipxe-1.0.0+-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625409" comment="qemu-kvm-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625410" comment="qemu-lang-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625411" comment="qemu-seabios-1.12.0_0_ga698c89-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625412" comment="qemu-sgabios-8-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625413" comment="qemu-tools-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625414" comment="qemu-ui-curses-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625415" comment="qemu-ui-gtk-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625416" comment="qemu-vgabios-1.12.0_0_ga698c89-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625417" comment="qemu-x86-3.1.1.1-9.30.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139296" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182739" ref_url="https://bugzilla.suse.com/1182739" source="BUGZILLA"/>
		<reference ref_id="1183770" ref_url="https://bugzilla.suse.com/1183770" source="BUGZILLA"/>
		<reference ref_id="1185868" ref_url="https://bugzilla.suse.com/1185868" source="BUGZILLA"/>
		<reference ref_id="1185870" ref_url="https://bugzilla.suse.com/1185870" source="BUGZILLA"/>
		<reference ref_id="1185872" ref_url="https://bugzilla.suse.com/1185872" source="BUGZILLA"/>
		<reference ref_id="1188300" ref_url="https://bugzilla.suse.com/1188300" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2154" ref_url="https://www.suse.com/security/cve/CVE-2021-2154/" source="CVE"/>
		<reference ref_id="CVE-2021-2166" ref_url="https://www.suse.com/security/cve/CVE-2021-2166/" source="CVE"/>
		<reference ref_id="CVE-2021-2180" ref_url="https://www.suse.com/security/cve/CVE-2021-2180/" source="CVE"/>
		<reference ref_id="CVE-2021-27928" ref_url="https://www.suse.com/security/cve/CVE-2021-27928/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009251.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

- Update to 10.2.39 (bsc#1182739)
- CVE-2021-2166: DML unspecified vulnerability lead to complete DOS. (bsc#1185870)
- CVE-2021-2154: DML unspecified vulnerability can lead to complete DOS. (bsc#1185872)
- CVE-2021-2180: InnoDB unspecified vulnerability lead to complete DOS. (bsc#1185868)
- CVE-2021-27928: Fixed a remote code execution issue. (bsc#1183770)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-05"/>
	<updated date="2021-08-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182739">SUSE bug 1182739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183770">SUSE bug 1183770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185868">SUSE bug 1185868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185870">SUSE bug 1185870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185872">SUSE bug 1185872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188300">SUSE bug 1188300</bugzilla>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2154/">CVE-2021-2154</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2166/">CVE-2021-2166</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2180/">CVE-2021-2180</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27928/">CVE-2021-27928</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626447" comment="libmysqld-devel-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626448" comment="libmysqld19-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626449" comment="mariadb-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626450" comment="mariadb-client-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626451" comment="mariadb-errormessages-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626452" comment="mariadb-tools-10.2.39-3.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139297" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182620" ref_url="https://bugzilla.suse.com/1182620" source="BUGZILLA"/>
		<reference ref_id="1184450" ref_url="https://bugzilla.suse.com/1184450" source="BUGZILLA"/>
		<reference ref_id="1187976" ref_url="https://bugzilla.suse.com/1187976" source="BUGZILLA"/>
		<reference ref_id="1187977" ref_url="https://bugzilla.suse.com/1187977" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7774" ref_url="https://www.suse.com/security/cve/CVE-2020-7774/" source="CVE"/>
		<reference ref_id="CVE-2021-22884" ref_url="https://www.suse.com/security/cve/CVE-2021-22884/" source="CVE"/>
		<reference ref_id="CVE-2021-23362" ref_url="https://www.suse.com/security/cve/CVE-2021-23362/" source="CVE"/>
		<reference ref_id="CVE-2021-27290" ref_url="https://www.suse.com/security/cve/CVE-2021-27290/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009256.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

- update to npm 6.14.13
- CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. (bsc#1187976)
- CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service (bsc#1187977)
- CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-05"/>
	<updated date="2021-08-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182620">SUSE bug 1182620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184450">SUSE bug 1184450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187976">SUSE bug 1187976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187977">SUSE bug 1187977</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-7774/">CVE-2020-7774</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-22884/">CVE-2021-22884</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23362/">CVE-2021-23362</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27290/">CVE-2021-27290</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626438" comment="nodejs-common-2.0-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626439" comment="nodejs8-8.17.0-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626440" comment="nodejs8-devel-8.17.0-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626441" comment="nodejs8-docs-8.17.0-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626442" comment="npm8-8.17.0-3.47.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139298" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188891" ref_url="https://bugzilla.suse.com/1188891" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29980" ref_url="https://www.suse.com/security/cve/CVE-2021-29980/" source="CVE"/>
		<reference ref_id="CVE-2021-29984" ref_url="https://www.suse.com/security/cve/CVE-2021-29984/" source="CVE"/>
		<reference ref_id="CVE-2021-29985" ref_url="https://www.suse.com/security/cve/CVE-2021-29985/" source="CVE"/>
		<reference ref_id="CVE-2021-29986" ref_url="https://www.suse.com/security/cve/CVE-2021-29986/" source="CVE"/>
		<reference ref_id="CVE-2021-29988" ref_url="https://www.suse.com/security/cve/CVE-2021-29988/" source="CVE"/>
		<reference ref_id="CVE-2021-29989" ref_url="https://www.suse.com/security/cve/CVE-2021-29989/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009297.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 78.13.0 ESR (MFSA 2021-34, bsc#1188891):

- CVE-2021-29986: Race condition when resolving DNS names could have led to memory corruption
- CVE-2021-29988: Memory corruption as a result of incorrect style treatment
- CVE-2021-29984: Incorrect instruction reordering during JIT optimization
- CVE-2021-29980: Uninitialized memory in a canvas object could have led to memory corruption
- CVE-2021-29985: Use-after-free media channels
- CVE-2021-29989: Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188891">SUSE bug 1188891</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29980/">CVE-2021-29980</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29984/">CVE-2021-29984</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29985/">CVE-2021-29985</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29986/">CVE-2021-29986</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29988/">CVE-2021-29988</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29989/">CVE-2021-29989</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009630573" comment="MozillaFirefox-78.13.0-3.150.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630574" comment="MozillaFirefox-devel-78.13.0-3.150.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630575" comment="MozillaFirefox-translations-common-78.13.0-3.150.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630576" comment="MozillaFirefox-translations-other-78.13.0-3.150.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139299" version="1" class="patch">
	<metadata>
		<title>Security update for c-ares (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188881" ref_url="https://bugzilla.suse.com/1188881" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3672" ref_url="https://www.suse.com/security/cve/CVE-2021-3672/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2760-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-August/019883.html" source="SUSE-SU"/>
		<description>
This update for c-ares fixes the following issues:

Version update to git snapshot 1.17.1+20200724:

- CVE-2021-3672: fixed missing input validation on hostnames returned by DNS servers (bsc#1188881)
- If ares_getaddrinfo() was terminated by an ares_destroy(), it would cause crash
- Crash in sortaddrinfo() if the list size equals 0 due to an unexpected DNS response
- Expand number of escaped characters in DNS replies as per RFC1035 5.1 to prevent spoofing
- Use unbuffered /dev/urandom for random data to prevent early startup performance issues
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188881">SUSE bug 1188881</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3672/">CVE-2021-3672</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009630366" comment="c-ares-devel-1.17.1+20200724-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630367" comment="libcares2-1.17.1+20200724-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139300" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188697" ref_url="https://bugzilla.suse.com/1188697" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21775" ref_url="https://www.suse.com/security/cve/CVE-2021-21775/" source="CVE"/>
		<reference ref_id="CVE-2021-21779" ref_url="https://www.suse.com/security/cve/CVE-2021-21779/" source="CVE"/>
		<reference ref_id="CVE-2021-30663" ref_url="https://www.suse.com/security/cve/CVE-2021-30663/" source="CVE"/>
		<reference ref_id="CVE-2021-30665" ref_url="https://www.suse.com/security/cve/CVE-2021-30665/" source="CVE"/>
		<reference ref_id="CVE-2021-30689" ref_url="https://www.suse.com/security/cve/CVE-2021-30689/" source="CVE"/>
		<reference ref_id="CVE-2021-30720" ref_url="https://www.suse.com/security/cve/CVE-2021-30720/" source="CVE"/>
		<reference ref_id="CVE-2021-30734" ref_url="https://www.suse.com/security/cve/CVE-2021-30734/" source="CVE"/>
		<reference ref_id="CVE-2021-30744" ref_url="https://www.suse.com/security/cve/CVE-2021-30744/" source="CVE"/>
		<reference ref_id="CVE-2021-30749" ref_url="https://www.suse.com/security/cve/CVE-2021-30749/" source="CVE"/>
		<reference ref_id="CVE-2021-30758" ref_url="https://www.suse.com/security/cve/CVE-2021-30758/" source="CVE"/>
		<reference ref_id="CVE-2021-30795" ref_url="https://www.suse.com/security/cve/CVE-2021-30795/" source="CVE"/>
		<reference ref_id="CVE-2021-30797" ref_url="https://www.suse.com/security/cve/CVE-2021-30797/" source="CVE"/>
		<reference ref_id="CVE-2021-30799" ref_url="https://www.suse.com/security/cve/CVE-2021-30799/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2762-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009300.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.32.3:
- CVE-2021-21775: Fixed a use-after-free vulnerability in the way certain events are processed for ImageLoader objects. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger this vulnerability. (bsc#1188697)
- CVE-2021-21779: Fixed a use-after-free vulnerability in the way that WebKit GraphicsContext handles certain events. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger this vulnerability. (bsc#1188697)
- CVE-2021-30663: An integer overflow was addressed with improved input validation. (bsc#1188697)
- CVE-2021-30665: A memory corruption issue was addressed with improved state management. (bsc#1188697)
- CVE-2021-30689: A logic issue was addressed with improved state management. (bsc#1188697)
- CVE-2021-30720: A logic issue was addressed with improved restrictions. (bsc#1188697)
- CVE-2021-30734: Multiple memory corruption issues were addressed with improved memory handling. (bsc#1188697)
- CVE-2021-30744: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. (bsc#1188697)
- CVE-2021-30749: Multiple memory corruption issues were addressed with improved memory handling. (bsc#1188697)
- CVE-2021-30758: A type confusion issue was addressed with improved state handling. (bsc#1188697)
- CVE-2021-30795: A use after free issue was addressed with improved memory management. (bsc#1188697)
- CVE-2021-30797: This issue was addressed with improved checks. (bsc#1188697)
- CVE-2021-30799: Multiple memory corruption issues were addressed with improved memory handling. (bsc#1188697)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188697">SUSE bug 1188697</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21775/">CVE-2021-21775</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21779/">CVE-2021-21779</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30663/">CVE-2021-30663</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30665/">CVE-2021-30665</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30689/">CVE-2021-30689</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30720/">CVE-2021-30720</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30734/">CVE-2021-30734</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30744/">CVE-2021-30744</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30749/">CVE-2021-30749</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30758/">CVE-2021-30758</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30795/">CVE-2021-30795</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30797/">CVE-2021-30797</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30799/">CVE-2021-30799</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627234" comment="libjavascriptcoregtk-4_0-18-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627235" comment="libsoup-2_4-1-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627236" comment="libsoup-devel-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627237" comment="libsoup-lang-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627238" comment="libwebkit2gtk-4_0-37-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627239" comment="libwebkit2gtk3-lang-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627240" comment="typelib-1_0-JavaScriptCore-4_0-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627241" comment="typelib-1_0-Soup-2_4-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627242" comment="typelib-1_0-WebKit2-4_0-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627243" comment="typelib-1_0-WebKit2WebExtension-4_0-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627244" comment="webkit2gtk-4_0-injected-bundles-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627245" comment="webkit2gtk3-devel-2.32.3-3.77.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139301" version="1" class="patch">
	<metadata>
		<title>Security update for libsndfile (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1100167" ref_url="https://bugzilla.suse.com/1100167" source="BUGZILLA"/>
		<reference ref_id="1116993" ref_url="https://bugzilla.suse.com/1116993" source="BUGZILLA"/>
		<reference ref_id="1117954" ref_url="https://bugzilla.suse.com/1117954" source="BUGZILLA"/>
		<reference ref_id="1188540" ref_url="https://bugzilla.suse.com/1188540" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13139" ref_url="https://www.suse.com/security/cve/CVE-2018-13139/" source="CVE"/>
		<reference ref_id="CVE-2018-19432" ref_url="https://www.suse.com/security/cve/CVE-2018-19432/" source="CVE"/>
		<reference ref_id="CVE-2018-19758" ref_url="https://www.suse.com/security/cve/CVE-2018-19758/" source="CVE"/>
		<reference ref_id="CVE-2021-3246" ref_url="https://www.suse.com/security/cve/CVE-2021-3246/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009301.html" source="SUSE-SU"/>
		<description>
This update for libsndfile fixes the following issues:

- CVE-2018-13139: Fixed a stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. (bsc#1100167)
- CVE-2018-19432: Fixed a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a denial of service. (bsc#1116993)
- CVE-2021-3246: Fixed a heap buffer overflow vulnerability in msadpcm_decode_block. (bsc#1188540)
- CVE-2018-19758: Fixed a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service. (bsc#1117954)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1100167">SUSE bug 1100167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116993">SUSE bug 1116993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117954">SUSE bug 1117954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188540">SUSE bug 1188540</bugzilla>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-13139/">CVE-2018-13139</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-19432/">CVE-2018-19432</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19758/">CVE-2018-19758</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3246/">CVE-2021-3246</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626849" comment="libsndfile-devel-1.0.28-5.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626850" comment="libsndfile1-1.0.28-5.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139302" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1188906" ref_url="https://bugzilla.suse.com/1188906" source="BUGZILLA"/>
		<reference ref_id="1189162" ref_url="https://bugzilla.suse.com/1189162" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36221" ref_url="https://www.suse.com/security/cve/CVE-2021-36221/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009321.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

Update to go1.15.15:

- go#47473 net/http: panic due to racy read of persistConn after handler panic (CVE-2021-36221 bsc#1189162)
- go#47347 cmd/go: 'go list -f '{{.Stale}}'' stack overflow with cyclic imports
- go#47014 cmd/go: go mod vendor: open C:\Users\LICENSE: Access is denied.
- go#46927 cmd/compile: register conflict between external linker and duffzero on arm64
- go#46857 runtime: ppc64x binaries randomly segfault on linux 5.13rc6
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188906">SUSE bug 1188906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189162">SUSE bug 1189162</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36221/">CVE-2021-36221</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009630577" comment="go1.15-1.15.15-1.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630578" comment="go1.15-doc-1.15.15-1.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630567" comment="go1.15-race-1.15.15-1.39.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139303" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188917" ref_url="https://bugzilla.suse.com/1188917" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22930" ref_url="https://www.suse.com/security/cve/CVE-2021-22930/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009320.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

- CVE-2021-22930: http2: fixes use after free on close in stream canceling (bsc#1188917).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188917">SUSE bug 1188917</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22930/">CVE-2021-22930</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009629437" comment="nodejs8-8.17.0-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629438" comment="nodejs8-devel-8.17.0-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629439" comment="nodejs8-docs-8.17.0-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629440" comment="npm8-8.17.0-3.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139304" version="1" class="patch">
	<metadata>
		<title>Security update for fetchmail (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188034" ref_url="https://bugzilla.suse.com/1188034" source="BUGZILLA"/>
		<reference ref_id="1188875" ref_url="https://bugzilla.suse.com/1188875" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36386" ref_url="https://www.suse.com/security/cve/CVE-2021-36386/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009317.html" source="SUSE-SU"/>
		<description>
This update for fetchmail fixes the following issues:

- CVE-2021-36386: Fixed a missing variable initialization that can cause read from bad memory locations. (bsc#1188875)
- Change PASSWORDLEN from 64 to 256 (bsc#1188034)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1188034">SUSE bug 1188034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188875">SUSE bug 1188875</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-36386/">CVE-2021-36386</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009628203" comment="fetchmail-6.3.26-20.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009628204" comment="fetchmailconf-6.3.26-20.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139305" version="1" class="patch">
	<metadata>
		<title>Security update for libass (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188539" ref_url="https://bugzilla.suse.com/1188539" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36430" ref_url="https://www.suse.com/security/cve/CVE-2020-36430/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009325.html" source="SUSE-SU"/>
		<description>
This update for libass fixes the following issues:

- CVE-2020-36430: Fixed heap-based buffer overflow in decode_chars (bsc#1188539).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188539">SUSE bug 1188539</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36430/">CVE-2020-36430</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009628085" comment="libass-devel-0.14.0-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009628086" comment="libass9-0.14.0-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139306" version="1" class="patch">
	<metadata>
		<title>Security update for openexr (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188457" ref_url="https://bugzilla.suse.com/1188457" source="BUGZILLA"/>
		<reference ref_id="1188458" ref_url="https://bugzilla.suse.com/1188458" source="BUGZILLA"/>
		<reference ref_id="1188459" ref_url="https://bugzilla.suse.com/1188459" source="BUGZILLA"/>
		<reference ref_id="1188460" ref_url="https://bugzilla.suse.com/1188460" source="BUGZILLA"/>
		<reference ref_id="1188461" ref_url="https://bugzilla.suse.com/1188461" source="BUGZILLA"/>
		<reference ref_id="1188462" ref_url="https://bugzilla.suse.com/1188462" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20298" ref_url="https://www.suse.com/security/cve/CVE-2021-20298/" source="CVE"/>
		<reference ref_id="CVE-2021-20299" ref_url="https://www.suse.com/security/cve/CVE-2021-20299/" source="CVE"/>
		<reference ref_id="CVE-2021-20300" ref_url="https://www.suse.com/security/cve/CVE-2021-20300/" source="CVE"/>
		<reference ref_id="CVE-2021-20302" ref_url="https://www.suse.com/security/cve/CVE-2021-20302/" source="CVE"/>
		<reference ref_id="CVE-2021-20303" ref_url="https://www.suse.com/security/cve/CVE-2021-20303/" source="CVE"/>
		<reference ref_id="CVE-2021-20304" ref_url="https://www.suse.com/security/cve/CVE-2021-20304/" source="CVE"/>
		<reference ref_id="CVE-2021-3476" ref_url="https://www.suse.com/security/cve/CVE-2021-3476/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009313.html" source="SUSE-SU"/>
		<description>
This update for openexr fixes the following issues:

- CVE-2021-20298 [bsc#1188460]: Fixed Out-of-memory in B44Compressor
- CVE-2021-20299 [bsc#1188459]: Fixed Null-dereference READ in Imf_2_5:Header:operator
- CVE-2021-20300 [bsc#1188458]: Fixed Integer-overflow in Imf_2_5:hufUncompress
- CVE-2021-20302 [bsc#1188462]: Fixed Floating-point-exception in Imf_2_5:precalculateTileInfot
- CVE-2021-20303 [bsc#1188457]: Fixed Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer
- CVE-2021-20304 [bsc#1188461]: Fixed Undefined-shift in Imf_2_5:hufDecode
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188457">SUSE bug 1188457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188458">SUSE bug 1188458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188459">SUSE bug 1188459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188460">SUSE bug 1188460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188461">SUSE bug 1188461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188462">SUSE bug 1188462</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20298/">CVE-2021-20298</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20299/">CVE-2021-20299</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20300/">CVE-2021-20300</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20302/">CVE-2021-20302</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-20303/">CVE-2021-20303</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20304/">CVE-2021-20304</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3476/">CVE-2021-3476</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627904" comment="libIlmImf-2_2-23-2.2.1-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627905" comment="libIlmImfUtil-2_2-23-2.2.1-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627906" comment="openexr-devel-2.2.1-3.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139307" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188035" ref_url="https://bugzilla.suse.com/1188035" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21704" ref_url="https://www.suse.com/security/cve/CVE-2021-21704/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009327.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2021-21704: Fixed security issues in pdo_firebase module (bsc#1188035).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188035">SUSE bug 1188035</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21704/">CVE-2021-21704</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627408" comment="apache2-mod_php7-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627409" comment="php7-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627410" comment="php7-bcmath-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627411" comment="php7-bz2-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627412" comment="php7-calendar-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627413" comment="php7-ctype-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627414" comment="php7-curl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627415" comment="php7-dba-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627416" comment="php7-devel-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627417" comment="php7-dom-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627418" comment="php7-enchant-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627419" comment="php7-exif-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627420" comment="php7-fastcgi-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627421" comment="php7-fileinfo-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627422" comment="php7-fpm-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627423" comment="php7-ftp-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627424" comment="php7-gd-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627425" comment="php7-gettext-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627426" comment="php7-gmp-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627427" comment="php7-iconv-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627428" comment="php7-intl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627429" comment="php7-json-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627430" comment="php7-ldap-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627431" comment="php7-mbstring-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627432" comment="php7-mysql-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627433" comment="php7-odbc-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627434" comment="php7-opcache-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627435" comment="php7-openssl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627436" comment="php7-pcntl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627437" comment="php7-pdo-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627438" comment="php7-pear-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627439" comment="php7-pear-Archive_Tar-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627440" comment="php7-pgsql-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627441" comment="php7-phar-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627442" comment="php7-posix-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627443" comment="php7-readline-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627444" comment="php7-shmop-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627445" comment="php7-snmp-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627446" comment="php7-soap-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627447" comment="php7-sockets-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627448" comment="php7-sodium-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627449" comment="php7-sqlite-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627450" comment="php7-sysvmsg-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627451" comment="php7-sysvsem-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627452" comment="php7-sysvshm-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627461" comment="php7-tidy-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627453" comment="php7-tokenizer-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627454" comment="php7-wddx-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627455" comment="php7-xmlreader-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627456" comment="php7-xmlrpc-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627457" comment="php7-xmlwriter-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627458" comment="php7-xsl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627459" comment="php7-zip-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627460" comment="php7-zlib-7.2.5-4.79.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139308" version="1" class="patch">
	<metadata>
		<title>Security update for djvulibre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1187869" ref_url="https://bugzilla.suse.com/1187869" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3630" ref_url="https://www.suse.com/security/cve/CVE-2021-3630/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009319.html" source="SUSE-SU"/>
		<description>
This update for djvulibre fixes the following issues:

- CVE-2021-3630: out-of-bounds write in DJVU:DjVuTXT:decode() in DjVuText.cpp (bsc#1187869)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187869">SUSE bug 1187869</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3630/">CVE-2021-3630</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627406" comment="libdjvulibre-devel-3.5.27-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627407" comment="libdjvulibre21-3.5.27-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139309" version="1" class="patch">
	<metadata>
		<title>Security update for krb5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188571" ref_url="https://bugzilla.suse.com/1188571" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36222" ref_url="https://www.suse.com/security/cve/CVE-2021-36222/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009316.html" source="SUSE-SU"/>
		<description>
This update for krb5 fixes the following issues:

- CVE-2021-36222: Fixed KDC null deref on bad encrypted challenge. (bsc#1188571)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188571">SUSE bug 1188571</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36222/">CVE-2021-36222</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626718" comment="krb5-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626700" comment="krb5-32bit-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626719" comment="krb5-client-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626720" comment="krb5-devel-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626721" comment="krb5-plugin-kdb-ldap-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626722" comment="krb5-plugin-preauth-otp-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626723" comment="krb5-plugin-preauth-pkinit-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626724" comment="krb5-server-1.16.3-3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139310" version="1" class="patch">
	<metadata>
		<title>Security update for spice-vdagent (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1177780" ref_url="https://bugzilla.suse.com/1177780" source="BUGZILLA"/>
		<reference ref_id="1177781" ref_url="https://bugzilla.suse.com/1177781" source="BUGZILLA"/>
		<reference ref_id="1177782" ref_url="https://bugzilla.suse.com/1177782" source="BUGZILLA"/>
		<reference ref_id="1177783" ref_url="https://bugzilla.suse.com/1177783" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25650" ref_url="https://www.suse.com/security/cve/CVE-2020-25650/" source="CVE"/>
		<reference ref_id="CVE-2020-25651" ref_url="https://www.suse.com/security/cve/CVE-2020-25651/" source="CVE"/>
		<reference ref_id="CVE-2020-25652" ref_url="https://www.suse.com/security/cve/CVE-2020-25652/" source="CVE"/>
		<reference ref_id="CVE-2020-25653" ref_url="https://www.suse.com/security/cve/CVE-2020-25653/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009312.html" source="SUSE-SU"/>
		<description>
This update for spice-vdagent fixes the following issues:

- CVE-2020-25650: memory DoS via arbitrary entries in `active_xfers` hash table (bsc#1177780)
- CVE-2020-25651: possible file transfer DoS and information leak via `active_xfers` hash map (bsc#1177781)
- CVE-2020-25652: possibility to exhaust file descriptors in `vdagentd` (bsc#1177782) 
- CVE-2020-25653: UNIX domain socket peer PID retrieved via `SO_PEERCRED` is subject to race condition (bsc#1177783) 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177780">SUSE bug 1177780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177781">SUSE bug 1177781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177782">SUSE bug 1177782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177783">SUSE bug 1177783</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25650/">CVE-2020-25650</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25651/">CVE-2020-25651</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25652/">CVE-2020-25652</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25653/">CVE-2020-25653</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626004" comment="spice-vdagent-0.17.0-4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139311" version="1" class="patch">
	<metadata>
		<title>Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1102408" ref_url="https://bugzilla.suse.com/1102408" source="BUGZILLA"/>
		<reference ref_id="1138715" ref_url="https://bugzilla.suse.com/1138715" source="BUGZILLA"/>
		<reference ref_id="1138746" ref_url="https://bugzilla.suse.com/1138746" source="BUGZILLA"/>
		<reference ref_id="1176389" ref_url="https://bugzilla.suse.com/1176389" source="BUGZILLA"/>
		<reference ref_id="1177120" ref_url="https://bugzilla.suse.com/1177120" source="BUGZILLA"/>
		<reference ref_id="1182421" ref_url="https://bugzilla.suse.com/1182421" source="BUGZILLA"/>
		<reference ref_id="1182422" ref_url="https://bugzilla.suse.com/1182422" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26137" ref_url="https://www.suse.com/security/cve/CVE-2020-26137/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009334.html" source="SUSE-SU"/>
		<description>
This patch updates the Python AWS SDK stack in SLE 15:

General:

# aws-cli

- Version updated to upstream release v1.19.9
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-boto3

- Version updated to upstream release 1.17.9
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-botocore

- Version updated to upstream release 1.20.9
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-urllib3

- Version updated to upstream release 1.25.10
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-service_identity

- Added this new package to resolve runtime dependencies for other packages.
  Version: 18.1.0

# python-trustme

- Added this new package to resolve runtime dependencies for other packages.
  Version: 0.6.0

Security fixes:

# python-urllib3:
  
- CVE-2020-26137: urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated
  by inserting CR and LF control characters in the first argument of putrequest() (bsc#1177120)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-23"/>
	<updated date="2021-08-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1102408">SUSE bug 1102408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138715">SUSE bug 1138715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138746">SUSE bug 1138746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176389">SUSE bug 1176389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177120">SUSE bug 1177120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182421">SUSE bug 1182421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182422">SUSE bug 1182422</bugzilla>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26137/">CVE-2020-26137</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626960" comment="python2-asn1crypto-0.24.0-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626964" comment="python2-pyasn1-0.4.2-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626965" comment="python2-pycparser-2.17-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626966" comment="python2-urllib3-1.25.10-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626945" comment="python3-asn1crypto-0.24.0-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626946" comment="python3-boto3-1.17.9-19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626947" comment="python3-botocore-1.20.9-33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626951" comment="python3-pyasn1-0.4.2-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626952" comment="python3-pycparser-2.17-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626953" comment="python3-urllib3-1.25.10-9.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139312" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1189521" ref_url="https://bugzilla.suse.com/1189521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3712" ref_url="https://www.suse.com/security/cve/CVE-2021-3712/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009340.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following security issue:

- CVE-2021-3712: a bug in the code for printing certificate details could
  lead to a buffer overrun that a malicious actor could exploit to crash
  the application, causing a denial-of-service attack. [bsc#1189521]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-24"/>
	<updated date="2021-08-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189521">SUSE bug 1189521</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3712/">CVE-2021-3712</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631638" comment="libopenssl-1_1-devel-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631639" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631640" comment="libopenssl1_1-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631641" comment="libopenssl1_1-32bit-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631642" comment="libopenssl1_1-hmac-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631643" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631644" comment="openssl-1_1-1.1.0i-14.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139313" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1189320" ref_url="https://bugzilla.suse.com/1189320" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2372" ref_url="https://www.suse.com/security/cve/CVE-2021-2372/" source="CVE"/>
		<reference ref_id="CVE-2021-2389" ref_url="https://www.suse.com/security/cve/CVE-2021-2389/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009352.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

Update to version 10.2.40 [bsc#1189320]:

- fixes for the following security vulnerabilities: CVE-2021-2372 and CVE-2021-2389
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-25"/>
	<updated date="2021-08-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1189320">SUSE bug 1189320</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2372/">CVE-2021-2372</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2389/">CVE-2021-2389</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009630976" comment="libmysqld-devel-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630977" comment="libmysqld19-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630978" comment="mariadb-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630979" comment="mariadb-client-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630980" comment="mariadb-errormessages-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630981" comment="mariadb-tools-10.2.40-3.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139314" version="1" class="patch">
	<metadata>
		<title>Security update for spectre-meltdown-checker (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1189477" ref_url="https://bugzilla.suse.com/1189477" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009366.html" source="SUSE-SU"/>
		<description>
This update for spectre-meltdown-checker fixes the following issues:

spectre-meltdown-checker was updated to version 0.44 (bsc#1189477)

- feat: add support for SRBDS related vulnerabilities
- feat: add zstd kernel decompression (#370)
- enh: arm: add experimental support for binary arm images
- enh: rsb filling: no longer need the 'strings' tool to check for kernel support in live mode
- fix: fwdb: remove Intel extract tempdir on exit
- fix: has_vmm: ignore kernel threads when looking for a hypervisor (fixes #278)
- fix: fwdb: use the commit date as the intel fwdb version
- fix: fwdb: update Intel's repository URL
- fix: arm64: CVE-2017-5753: kernels 4.19+ use a different nospec macro
- fix: on CPU parse info under FreeBSD
- chore: github: add check run on pull requests
- chore: fwdb: update to v165.20201021+i20200616
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-27"/>
	<updated date="2021-08-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1189477">SUSE bug 1189477</bugzilla>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631131" comment="spectre-meltdown-checker-0.44-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139315" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1187418" ref_url="https://bugzilla.suse.com/1187418" source="BUGZILLA"/>
		<reference ref_id="1187419" ref_url="https://bugzilla.suse.com/1187419" source="BUGZILLA"/>
		<reference ref_id="1187420" ref_url="https://bugzilla.suse.com/1187420" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28200" ref_url="https://www.suse.com/security/cve/CVE-2020-28200/" source="CVE"/>
		<reference ref_id="CVE-2021-29157" ref_url="https://www.suse.com/security/cve/CVE-2021-29157/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009375.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 fixes the following issues:

Update dovecot to version 2.3.15 (jsc#SLE-19970):

Security issues fixed:

- CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
  JWT tokens. This may be used to supply attacker controlled keys to
  validate tokens, if attacker has local access. (bsc#1187418)
  Local attacker can login as any user and access their emails
- CVE-2021-33515:  On-path attacker could have injected plaintext commands
  before STARTTLS negotiation that would be executed after STARTTLS
  finished with the client. (bsc#1187419)
  Attacker can potentially steal user credentials and mails

* Disconnection log messages are now more standardized across services.
  They also always now start with 'Disconnected' prefix.
* Dovecot now depends on libsystemd for systemd integration.
* Removed support for Lua 5.2. Use version 5.1 or 5.3 instead.
* config: Some settings are now marked as 'hidden'. It's discouraged to
  change these settings. They will no longer be visible in doveconf
  output, except if they have been changed or if doveconf -s parameter
  is used. See https://doc.dovecot.org/settings/advanced/ for details.
* imap-compress: Compression level is now algorithm specific.
  See https://doc.dovecot.org/settings/plugin/compress-plugin/
* indexer-worker: Convert 'Indexed' info logs to an event named
  'indexer_worker_indexing_finished'. See
  https://doc.dovecot.org/admin_manual/list_of_events/#indexer-worker-indexing-finished
+ Add TSLv1.3 support to min_protocols.
+ Allow configuring ssl_cipher_suites. (for TLSv1.3+)
+ acl: Add acl_ignore_namespace setting which allows to entirely ignore
  ACLs for the listed namespaces.
+ imap: Support official RFC8970 preview/snippet syntax. Old methods of
  retrieving preview information via IMAP commands ('SNIPPET and PREVIEW
  with explicit algorithm selection') have been deprecated.
+ imapc: Support INDEXPVT for imapc storage to enable private
  message flags for cluster wide shared mailboxes.
+ lib-storage: Add new events: mail_opened, mail_expunge_requested,
  mail_expunged, mail_cache_lookup_finished. See
  https://doc.dovecot.org/admin_manual/list_of_events/#mail
+ zlib, imap-compression, fs-compress: Support compression levels that
  the algorithm supports. Before, we would allow hardcoded value between
  1 to 9 and would default to 6. Now we allow using per-algorithm value
  range and default to whatever default the algorithm specifies.
- *-login: Commands pipelined together with and just after the authenticate
  command cause these commands to be executed twice. This applies to all
  protocols that involve user login, which currently comprises of imap,
  pop3, submisision and managesieve.
- *-login: Processes are supposed to disconnect the oldest non-logged in
  connection when process_limit was reached. This didn't actually happen
  with the default 'high-security mode' (with service_count=1) where each
  connection is handled by a separate process.
- *-login: When login process reaches client/process limits, oldest
  client connections are disconnected. If one of these was still doing
  anvil lookup, this caused a crash. This could happen only if the login
  process limits were very low or if the server was overloaded.
- Fixed building with link time optimizations (-flto).
- auth: Userdb iteration with passwd driver does not always return all
  users with some nss drivers.
- dsync: Shared INBOX not synced when 'mail_shared_explicit_inbox' was
  disabled. If a user has a shared mailbox which is another user's INBOX,
  dsync didn't include the mailbox in syncing unless explicit naming is
  enabled with 'mail_shared_explicit_inbox' set to 'yes'.
- dsync: Shared namespaces were not synced with '-n' flag.
- dsync: Syncing shared INBOX failed if mail_attribute_dict was not set.
  If a user has a shared mailbox that is another user's INBOX, dsync
  failed to export the mailbox if mail attributes are disabled.
- fts-solr, fts-tika: Using both Solr FTS and Tika may have caused HTTP
  requests to assert-crash: Panic: file http-client-request.c: line 1232
  (http_client_request_send_more): assertion failed: (req-&gt;payload_input != NULL)
- fts-tika: 5xx errors returned by Tika server as indexing failures.
  However, Tika can return 5xx for some attachments every time.
  So the 5xx error should be retried once, but treated as success if it
  happens on the retry as well. v2.3 regression.
- fts-tika: v2.3.11 regression: Indexing messages with fts-tika may have
  resulted in Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts):
  assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
- imap: SETMETADATA could not be used to unset metadata values.
  Instead NIL was handled as a 'NIL' string. v2.3.14 regression.
- imap: IMAP BINARY FETCH crashes at least on empty base64 body:
  Panic: file index-mail-binary.c: line 358 (blocks_count_lines):
  assertion failed: (block_count == 0 || block_idx+1 == block_count)
- imap: If IMAP client using the NOTIFY command was disconnected while
  sending FETCH notifications to the client, imap could crash with
  Panic: Trying to close mailbox INBOX with open transactions.
- imap: Using IMAP COMPRESS extension can cause IMAP connection to hang
  when IMAP commands are &gt;8 kB long.
- imapc: If remote server sent BYE but didn't immediately disconnect, it
  could cause infinite busy-loop.
- lib-index: Corrupted cache record size in dovecot.index.cache file
  could have caused a crash (segfault) when accessing it.
- lib-oauth2: JWT token time validation now works correctly with
  32-bit systems.
- lib-ssl-iostream: Checking hostnames against an SSL certificate was
  case-sensitive.
- lib-storage: Corrupted mime.parts in dovecot.index.cache may have
  resulted in Panic: file imap-bodystructure.c: line 206 (part_write_body):
  assertion failed: (text == ((part-&gt;flags &amp; MESSAGE_PART_FLAG_TEXT) != 0))
- lib-storage: Index rebuilding (e.g. via doveadm force-resync) didn't
  preserve the 'hdr-pop3-uidl' header. Because of this, the next pop3
  session could have accessed all of the emails' metadata to read their
  POP3 UIDL (opening dbox files).
- listescape: When using the listescape plugin and a shared namespace
  the plugin didn't work properly anymore resulting in errors like:
  'Invalid mailbox name: Name must not have '/' character.'
- lmtp: Connection crashes if connection gets disconnected due to
  multiple bad commands and the last bad command is BDAT.
- lmtp: The Dovecot-specific LMTP parameter XRCPTFORWARD was blindly
  forwarded by LMTP proxy without checking that the backend has support.
  This caused a command parameter error from the backend if it was
  running an older Dovecot release. This could only occur in more complex
  setups where the message was proxied twice; when the proxy generated
  the XRCPTFORWARD parameter itself the problem did not occur, so this
  only happened when it was forwarded.
- lmtp: The LMTP proxy crashes with a panic when the remote server
  replies with an error while the mail is still being forwarded through
  a DATA/BDAT command.
- lmtp: Username may have been missing from lmtp log line prefixes when
  it was performing autoexpunging.
- master: Dovecot would incorrectly fail with haproxy 2.0.14 service
  checks.
- master: Systemd service: Dovecot announces readiness for accepting
  connections earlier than it should. The following environment variables
  are now imported automatically and can be omitted from
  import_environment setting: NOTIFY_SOCKET LISTEN_FDS LISTEN_PID.
- master: service { process_min_avail } was launching processes too
  slowly when master was forking a lot of processes.
- util: Make the health-check.sh example script POSIX shell compatible.
* Added new aliases for some variables. Usage of the old ones is possible,
  but discouraged. (These were partially added already to v2.3.13.)
  See https://doc.dovecot.org/configuration_manual/config_file/config_variables/
  for more information.
* Optimize imap/pop3/submission/managesieve proxies to use less CPU at
  the cost of extra memory usage.
* Remove autocreate, expire, snarf and mail-filter plugins.
* Remove cydir storage driver.
* Remove XZ/LZMA write support. Read support will be removed in future release.
* doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP
  environment variable is not set. Timestamp format is taken from
  log_timestamp setting.
* If BROKENCHAR or listescape plugin is used, the escaped folder names
  may be slightly different from before in some situations. This is
  unlikely to cause issues, although caching clients may redownload the
  folders.
* imapc: It now enables BROKENCHAR=~ by default to escape remote folder
  names if necessary. This also means that if there are any '~'
  characters in the remote folder names, they will be visible as '~7e'.
* imapc: When using local index files folder names were escaped on
  filesystem a bit differently. This affects only if there are folder
  names that actually require escaping, which isn't so common. The old
  style folders will be automatically deleted from filesystem.
* stats: Update exported metrics to be compliant with OpenMetrics standard.
+ doveadm: Add an optional '-p' parameter to metadata list command. If
  enabled, '/private', and '/shared' metadata prefixes will be prepended
  to the keys in the list output.
+ doveconf: Support environment variables in config files. See
  https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables
  for more details.
+ indexer-worker: Change indexer to disconnect from indexer-worker
  after each request. This allows service indexer-worker's service_count &amp;
  idle_kill settings to work. These can be used to restart indexer-worker
  processes once in a while to reduce their memory usage.
- auth: 'nodelay' with various authentication mechanisms such as apop
  and digest-md5 crashed AUTH process if authentication failed.
- auth: Auth lua script generating an error triggered an assertion
  failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify):
  assertion failed: (lua_gettop(script-&gt;L) == 0).
- configure: Fix libunwind detection to work on other than x86_64 systems.
- doveadm-server: Process could crash if logging was done outside command
  handling. For example http-client could have done debug logging
  afterwards, resulting in either segfault or Panic:
  file http-client.c: line 642 (http_client_context_close):
  assertion failed: (cctx-&gt;clients_list == NULL).
- dsync: Folder name escaping with BROKENCHAR didn't work completely
  correctly. This especially caused problems with dsync-migrations using
  imapc where some of the remote folder names may not have been accessible.
- dsync: doveadm sync + imapc doesn't always sync all mails when doing
  an incremental sync (-1), which could lead to mail loss when it's used
  for migration. This happens only when GUIDs aren't used (i.e.
  imapc without imapc_features=guid-forced).
- fts-tika: When tika server returns error, some mails cause Panic:
  file message-parser.c: line 802 (message_parser_deinit_from_parts):
  assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
- lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have
  resulted in crashes. This exposed that Dovecot was wrongly accepting
  atoms in 'nstring' handling. Changed the IMAP parsing to be more
  strict about this now.
- lib-index: If dovecot.index.cache has corrupted message size, fetching
  BODY/BODYSTRUCTURE may cause assert-crash:
  Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish):
  assertion failed: (mail-&gt;data.parts != NULL).
- lib-index: Minor error handling and race condition fixes related to
  rotating dovecot.index.log. These didn't usually cause problems,
  unless the log files were rotated rapidly.
- lib-lua: Lua scripts using coroutines or lua libraries using coroutines
  (e.g., cqueues) panicked.
- Message PREVIEW handled whitespace wrong so first space would get
  eaten from between words.
- FTS and message PREVIEW (snippet) parsed HTML &amp;entities case-sensitively.
- lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
  was written in a way that may have caused confusion for IMAP clients
  and also Dovecot itself when parsing it. The truncated part is now
  written out using application/octet-stream MIME type.
- lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to
  use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed:
  (meth-&gt;context_size &lt;= MAC_MAX_CONTEXT_SIZE).
- event filters: NOT keyword did not have the correct associativity.
- Ignore ECONNRESET when closing socket. This avoids logging useless
  errors on systems like FreeBSD.
- event filters: event filter syntax error may lead to Panic:
  file event-filter.c: line 137 (event_filter_parse): assertion failed:
  (state.output == NULL)
- lib: timeval_cmp_margin() was broken on 32-bit systems. This could
  potentially have caused HTTP timeouts to be handled incorrectly.
- log: instance_name wasn't used as syslog ident by the log process.
- master: After a service reached process_limit and client_limit, it
  could have taken up to 1 second to realize that more client connections
  became available. During this time client connections could have been
  unnecessarily rejected and a warning logged:
  Warning: service(...): process_limit (...) reached, client connections are being dropped
- stats: Crash would occur when generating openmetrics data for metrics
  using aggregating functions.
- stats: Event filters comparing against empty strings crash the stats
  process.
* CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
  allow logged in user to access other people's emails and filesystem
  information.
* Metric filter and global event filter variable syntax changed to a
  SQL-like format. See https://doc.dovecot.org/configuration_manual/event_filter/
* auth: Added new aliases for %{variables}. Usage of the old ones is
  possible, but discouraged.
* auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
  mechanism and related password schemes.
* auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
* auth: Removed postfix postmap socket
+ auth: Added new fields for auth server events. These fields are now
  also available for all auth events. See
  https://doc.dovecot.org/admin_manual/list_of_events/#authentication-server
  for details.
+ imap-hibernate: Added imap_client_hibernated, imap_client_unhibernated
  and imap_client_unhibernate_retried events. See
  https://doc.dovecot.org/admin_manual/list_of_events/ for details.
+ lib-index: Added new mail_index_recreated event. See
  https://doc.dovecot.org/admin_manual/list_of_events/#mail-index-recreated
+ lib-sql: Support TLS options for cassandra driver. This requires
  cpp-driver v2.15 (or later) to work reliably.
+ lib-storage: Missing $HasAttachment / $HasNoAttachment flags are now
  added to existing mails if mail_attachment_detection_option=add-flags
  and it can be done inexpensively.
+ login proxy: Added login_proxy_max_reconnects setting (default 3) to
  control how many reconnections are attempted.
+ login proxy: imap/pop3/submission/managesieve proxying now supports
  reconnection retrying on more than just connect() failure. Any error
  except a non-temporary authentication failure will result in reconnect
  attempts.
- auth: Lua passdb/userdb leaks stack elements per call, eventually
  causing the stack to become too deep and crashing the auth or
  auth-worker process.
- auth: SASL authentication PLAIN mechanism could be used to trigger
  read buffer overflow. However, this doesn't seem to be exploitable in
  any way.
- auth: v2.3.11 regression: GSSAPI authentication fails because dovecot
  disallows NUL bytes for it.
- dict: Process used too much CPU when iterating keys, because each key
  used a separate write() syscall.
- doveadm-server: Crash could occur if logging was done outside command
  handling. For example http-client could have done debug logging
  afterwards, resulting in either segfault or
  Panic: file http-client.c: line 642 (http_client_context_close):
  assertion failed: (cctx-&gt;clients_list == NULL).
- doveadm-server: v2.3.11 regression: Trying to connect to doveadm server
  process via starttls assert-crashed if there were no ssl=yes listeners:
  Panic: file master-service-ssl.c: line 22 (master_service_ssl_init):
  assertion failed: (service-&gt;ssl_ctx_initialized).
- fts-solr: HTTP requests may have assert-crashed:
  Panic: file http-client-request.c: line 1232 (http_client_request_send_more):
  assertion failed: (req-&gt;payload_input != NULL)
- imap: IMAP NOTIFY could crash with a segmentation fault due to a bad
  configuration that causes errors. Sending the error responses to the
  client can cause the segmentation fault. This can for example happen
  when several namespaces use the same mail storage location.
- imap: IMAP NOTIFY used on a shared namespace that doesn't actually
  exist (e.g. public namespace for a nonexistent user) can crash with a panic:
  Panic: Leaked view for index /tmp/home/asdf/mdbox/dovecot.list.index: Opened in (null):0
- imap: IMAP session can crash with QRESYNC extension if many changes
  are done before asking for expunged mails since last sync.
- imap: Process might hang indefinitely if client disconnects after
  sending some long-running commands pipelined, for example FETCH+LOGOUT.
- lib-compress: Mitigate crashes when configuring a not compiled in
  compression. Errors with compression configuration now distinguish
  between not supported and unknown.
- lib-compression: Using xz/lzma compression in v2.3.11 could have
  written truncated output in some situations. This would result in
  'Broken pipe' read errors when trying to read it back.
- lib-compression: zstd compression could have crashed in some situations:
  Panic: file ostream.c: line 287 (o_stream_sendv_int): assertion failed: (!stream-&gt;blocking)
- lib-dict: dict client could have crashed in some rare situations when
  iterating keys.
- lib-http: Fix several assert-crashes in HTTP client.
- lib-index: v2.3.11 regression: When mails were expunged at the same
  time as lots of new content was being saved to the cache (e.g. cache
  file was lost and is being re-filled) a deadlock could occur with
  dovecot.index.cache / dovecot.index.log.
- lib-index: v2.3.11 regression: dovecot.index.cache file was being
  purged (rewritten) too often when it had a field that hadn't been
  accessed for over 1 month, but less than 2 months. Every cache file
  change caused a purging in this situation.
- lib-mail: MIME parts were not returned correctly by Dovecot MIME parser.
  Regression caused by fixing CVE-2020-12100.
- lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
  was written in a way that may have caused confusion for both IMAP
  clients and Dovecot itself when parsing it. The truncated part is now
  written out using application/octet-stream MIME type.
- lib-mail: v2.3.11 regression: Mail delivery / parsing crashed when the
  10000th MIME part was message/rfc822 (or if parent was multipart/digest):
  Panic: file message-parser.c: line 167 (message_part_append):
  assertion failed: (ctx-&gt;total_parts_count &lt;= ctx-&gt;max_total_mime_parts).
- lib-oauth2: Dovecot incorrectly required oauth2 server introspection
  reply to contain username with invalid token.
- lib-ssl-iostream, lib-dcrypt: Fix building with OpenSSL that has
  deprecated APIs disabled.
- lib-storage: When mail's size is different from the cached one (in
  dovecot.index.cache or Maildir S=size in the filename), this is
  handled by logging 'Cached message size smaller/larger than expected'
  error. However, in some situations this also ended up crashing with:
  Panic: file istream.c: line 315 (i_stream_read_memarea):
  assertion failed: (old_size &lt;= _stream-&gt;pos - _stream-&gt;skip).
- lib-storage: v2.3 regression: Copying/moving mails was taking much more
  memory than before. This was mainly visible when copying/moving
  thousands of mails in a single transaction.
- lib-storage: v2.3.11 regression: Searching messages assert-crashed
  (without FTS): Panic: file message-parser.c: line 174 (message_part_finish):
  assertion failed: (ctx-&gt;nested_parts_count &gt; 0).
- lib: Dovecot v2.3 moved signal handlers around in ioloops,
  causing more CPU usage than in v2.2.
- lib: Fixed JSON parsing: '\' escape sequence may have wrongly resulted
  in error if it happened to be at read boundary. Any NUL characters and
  '\u0000' will now result in parsing error instead of silently
  truncating the data.
- lmtp, submission: Server may hang if SSL client connection disconnects
  during the delivery. If this happened repeated, it could have ended
  up reaching process_limit and preventing any further lmtp/submission
  deliveries.
- lmtp: Proxy does not always properly log TLS connection problems as
  errors; in some cases, only a debug message is logged if enabled.
- lmtp: The LMTP service can hang when commands are pipelined. This can
  particularly occur when one command in the middle of the pipeline fails.
  One example of this occurs for proxied LMTP transactions in which the
  final DATA or BDAT command is pipelined after a failing RCPT command.
- login-proxy: The login_source_ips setting has no effect, and therefore
  the proxy source IPs are not cycled through as they should be.
- master: Process was using 100% CPU in some situations when a broken
  service was being throttled.
- pop3-login: POP3 login would fail with 'Input buffer full' if the
  initial response for SASL was too long.
- stats: Crash would occur when generating openmetrics data for metrics
  using aggregating functions.

Update pigeonhole to version 0.5.15

* CVE-2020-28200: Sieve interpreter is not protected against abusive
  scripts that claim excessive resource usage. Fixed by limiting the
  user CPU time per single script execution and cumulatively over
  several script runs within a configurable timeout period. Sufficiently
  large CPU time usage is summed in the Sieve script binary and execution
  is blocked when the sum exceeds the limit within that time. The block
  is lifted when the script is updated after the resource usage times out.
  (bsc#1187420) Attacker can DoS the mail delivery system
  (jsc#PM-2746) ECO: Dovecot 2.3.15 version upgrade
* Disconnection log messages are now more standardized across services.
  They also always now start with 'Disconnected' prefix.
* managesieve: Commands pipelined together with and just after the
  authenticate command cause these commands to be executed twice.
* duplicate: The test was handled badly in a multiscript (sieve_before,
  sieve_after) scenario in which an earlier script in the sequence with
  a duplicate test succeeded, while a later script caused a runtime
  failure. In that case, the message is recorded for duplicate tracking,
  while the message may not actually have been delivered in the end.
* editheader: Sieve interpreter entered infinite loop at startup when
  the 'editheader' configuration listed an invalid header name. This
  problem can only be triggered by the administrator.
* relational: The Sieve relational extension can cause a segfault at
  compile time. This is triggered by invalid script syntax. The segfault
  happens when this match type is the last argument of the test command.
  This situation is not possible in a valid script; positional arguments
  are normally present after that, which would prevent the segfault.
* sieve: For some Sieve commands the provided mailbox name is not
  properly checked for UTF-8 validity, which can cause assert crashes at
  runtime when an invalid mailbox name is encountered. This can be
  caused by the user by writing a bad Sieve script involving the
  affected commands ('mailboxexists', 'specialuse_exists').
  This can be triggered by the remote sender only when the user has
  written a Sieve script that passes message content to one of the
  affected commands.
* sieve: Large sequences of 8-bit octets passed to certain Sieve
  commands that create or modify message headers that allow UTF-8 text
  (vacation, notify and addheader) can cause the delivery or IMAP
  process (when IMAPSieve is used) to enter a memory-consuming
  semi-infinite loop that ends when the process exceeds its memory
  limits. Logged in users can cause these hangs only for their own
  processes.

		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-31"/>
	<updated date="2021-08-31"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1187418">SUSE bug 1187418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187419">SUSE bug 1187419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187420">SUSE bug 1187420</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28200/">CVE-2020-28200</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29157/">CVE-2021-29157</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632159" comment="dovecot23-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632160" comment="dovecot23-backend-mysql-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632161" comment="dovecot23-backend-pgsql-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632162" comment="dovecot23-backend-sqlite-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632163" comment="dovecot23-devel-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632164" comment="dovecot23-fts-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632165" comment="dovecot23-fts-lucene-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632166" comment="dovecot23-fts-solr-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632167" comment="dovecot23-fts-squat-2.3.15-27.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139316" version="1" class="patch">
	<metadata>
		<title>Security update for xerces-c (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1159552" ref_url="https://bugzilla.suse.com/1159552" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1311" ref_url="https://www.suse.com/security/cve/CVE-2018-1311/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009385.html" source="SUSE-SU"/>
		<description>
This update for xerces-c fixes the following issues:

- CVE-2018-1311: Fixed use-after-free inside XML parser during the scanning of external DTDs (bsc#1159552).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-02"/>
	<updated date="2021-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159552">SUSE bug 1159552</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1311/">CVE-2018-1311</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631968" comment="libxerces-c-3_1-3.1.4-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631969" comment="libxerces-c-devel-3.1.4-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139317" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1179148" ref_url="https://bugzilla.suse.com/1179148" source="BUGZILLA"/>
		<reference ref_id="1179246" ref_url="https://bugzilla.suse.com/1179246" source="BUGZILLA"/>
		<reference ref_id="1180491" ref_url="https://bugzilla.suse.com/1180491" source="BUGZILLA"/>
		<reference ref_id="1180846" ref_url="https://bugzilla.suse.com/1180846" source="BUGZILLA"/>
		<reference ref_id="1181989" ref_url="https://bugzilla.suse.com/1181989" source="BUGZILLA"/>
		<reference ref_id="1183243" ref_url="https://bugzilla.suse.com/1183243" source="BUGZILLA"/>
		<reference ref_id="1186428" ref_url="https://bugzilla.suse.com/1186428" source="BUGZILLA"/>
		<reference ref_id="1186429" ref_url="https://bugzilla.suse.com/1186429" source="BUGZILLA"/>
		<reference ref_id="1186433" ref_url="https://bugzilla.suse.com/1186433" source="BUGZILLA"/>
		<reference ref_id="1186434" ref_url="https://bugzilla.suse.com/1186434" source="BUGZILLA"/>
		<reference ref_id="1188050" ref_url="https://bugzilla.suse.com/1188050" source="BUGZILLA"/>
		<reference ref_id="1189373" ref_url="https://bugzilla.suse.com/1189373" source="BUGZILLA"/>
		<reference ref_id="1189376" ref_url="https://bugzilla.suse.com/1189376" source="BUGZILLA"/>
		<reference ref_id="1189378" ref_url="https://bugzilla.suse.com/1189378" source="BUGZILLA"/>
		<reference ref_id="1189380" ref_url="https://bugzilla.suse.com/1189380" source="BUGZILLA"/>
		<reference ref_id="1189381" ref_url="https://bugzilla.suse.com/1189381" source="BUGZILLA"/>
		<reference ref_id="1189882" ref_url="https://bugzilla.suse.com/1189882" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0089" ref_url="https://www.suse.com/security/cve/CVE-2021-0089/" source="CVE"/>
		<reference ref_id="CVE-2021-28690" ref_url="https://www.suse.com/security/cve/CVE-2021-28690/" source="CVE"/>
		<reference ref_id="CVE-2021-28692" ref_url="https://www.suse.com/security/cve/CVE-2021-28692/" source="CVE"/>
		<reference ref_id="CVE-2021-28693" ref_url="https://www.suse.com/security/cve/CVE-2021-28693/" source="CVE"/>
		<reference ref_id="CVE-2021-28694" ref_url="https://www.suse.com/security/cve/CVE-2021-28694/" source="CVE"/>
		<reference ref_id="CVE-2021-28695" ref_url="https://www.suse.com/security/cve/CVE-2021-28695/" source="CVE"/>
		<reference ref_id="CVE-2021-28696" ref_url="https://www.suse.com/security/cve/CVE-2021-28696/" source="CVE"/>
		<reference ref_id="CVE-2021-28697" ref_url="https://www.suse.com/security/cve/CVE-2021-28697/" source="CVE"/>
		<reference ref_id="CVE-2021-28698" ref_url="https://www.suse.com/security/cve/CVE-2021-28698/" source="CVE"/>
		<reference ref_id="CVE-2021-28699" ref_url="https://www.suse.com/security/cve/CVE-2021-28699/" source="CVE"/>
		<reference ref_id="CVE-2021-28700" ref_url="https://www.suse.com/security/cve/CVE-2021-28700/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009395.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

Security issues fixed:

- CVE-2021-28693: xen/arm: Boot modules are not scrubbed (bsc#1186428)
- CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (bsc#1186429)
- CVE-2021-0089: xen: Speculative Code Store Bypass (bsc#1186433)
- CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (bsc#1186434)

- CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)(bsc#1189373).
- CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation (XSA-379)(bsc#1189376).
- CVE-2021-28698: long running loops in grant table handling (XSA-380)(bsc#1189378).
- CVE-2021-28699: inadequate grant-v2 status frames array bounds check (XSA-382)(bsc#1189380).
- CVE-2021-28700: No memory limit for dom0less domUs (XSA-383)(bsc#1189381).

Other issues fixed:

- Fixed 'Panic on CPU 0: IO-APIC + timer doesn't work!' (bsc#1180491)
- Upstream bug fixes (bsc#1027519)
- Dom0 hangs when pinning CPUs for dom0 with HVM guest (bsc#1179246).
- Fixed Xen SLES11SP4 guest hangs on cluster (bsc#1188050).
- Fixed PVHVM SLES12 SP5 - NMI Watchdog CPU Stuck (bsc#1180846).
- Core cannot be opened when using xl dump-core of VM with PTF (bsc#1183243).
- Prevent superpage allocation in the LAPIC and ACPI_INFO range (bsc#1189882).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-02"/>
	<updated date="2021-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179148">SUSE bug 1179148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179246">SUSE bug 1179246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180491">SUSE bug 1180491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180846">SUSE bug 1180846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181989">SUSE bug 1181989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183243">SUSE bug 1183243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186428">SUSE bug 1186428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186429">SUSE bug 1186429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186433">SUSE bug 1186433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186434">SUSE bug 1186434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188050">SUSE bug 1188050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189373">SUSE bug 1189373</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189376">SUSE bug 1189376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189378">SUSE bug 1189378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189380">SUSE bug 1189380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189381">SUSE bug 1189381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189882">SUSE bug 1189882</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0089/">CVE-2021-0089</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28690/">CVE-2021-28690</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-28692/">CVE-2021-28692</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28693/">CVE-2021-28693</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28694/">CVE-2021-28694</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28695/">CVE-2021-28695</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28696/">CVE-2021-28696</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28697/">CVE-2021-28697</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28698/">CVE-2021-28698</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28699/">CVE-2021-28699</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28700/">CVE-2021-28700</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632260" comment="xen-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632261" comment="xen-devel-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632262" comment="xen-libs-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632263" comment="xen-tools-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632264" comment="xen-tools-domU-4.12.4_12-3.52.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139318" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1129714" ref_url="https://bugzilla.suse.com/1129714" source="BUGZILLA"/>
		<reference ref_id="1172640" ref_url="https://bugzilla.suse.com/1172640" source="BUGZILLA"/>
		<reference ref_id="1186406" ref_url="https://bugzilla.suse.com/1186406" source="BUGZILLA"/>
		<reference ref_id="1186583" ref_url="https://bugzilla.suse.com/1186583" source="BUGZILLA"/>
		<reference ref_id="1186586" ref_url="https://bugzilla.suse.com/1186586" source="BUGZILLA"/>
		<reference ref_id="1186587" ref_url="https://bugzilla.suse.com/1186587" source="BUGZILLA"/>
		<reference ref_id="1186596" ref_url="https://bugzilla.suse.com/1186596" source="BUGZILLA"/>
		<reference ref_id="1186597" ref_url="https://bugzilla.suse.com/1186597" source="BUGZILLA"/>
		<reference ref_id="1186598" ref_url="https://bugzilla.suse.com/1186598" source="BUGZILLA"/>
		<reference ref_id="1186600" ref_url="https://bugzilla.suse.com/1186600" source="BUGZILLA"/>
		<reference ref_id="1186603" ref_url="https://bugzilla.suse.com/1186603" source="BUGZILLA"/>
		<reference ref_id="1186604" ref_url="https://bugzilla.suse.com/1186604" source="BUGZILLA"/>
		<reference ref_id="1186605" ref_url="https://bugzilla.suse.com/1186605" source="BUGZILLA"/>
		<reference ref_id="1186613" ref_url="https://bugzilla.suse.com/1186613" source="BUGZILLA"/>
		<reference ref_id="1186614" ref_url="https://bugzilla.suse.com/1186614" source="BUGZILLA"/>
		<reference ref_id="1186615" ref_url="https://bugzilla.suse.com/1186615" source="BUGZILLA"/>
		<reference ref_id="1186616" ref_url="https://bugzilla.suse.com/1186616" source="BUGZILLA"/>
		<reference ref_id="1186658" ref_url="https://bugzilla.suse.com/1186658" source="BUGZILLA"/>
		<reference ref_id="1186660" ref_url="https://bugzilla.suse.com/1186660" source="BUGZILLA"/>
		<reference ref_id="1186757" ref_url="https://bugzilla.suse.com/1186757" source="BUGZILLA"/>
		<reference ref_id="1186758" ref_url="https://bugzilla.suse.com/1186758" source="BUGZILLA"/>
		<reference ref_id="1186762" ref_url="https://bugzilla.suse.com/1186762" source="BUGZILLA"/>
		<reference ref_id="1186763" ref_url="https://bugzilla.suse.com/1186763" source="BUGZILLA"/>
		<reference ref_id="1186849" ref_url="https://bugzilla.suse.com/1186849" source="BUGZILLA"/>
		<reference ref_id="1186859" ref_url="https://bugzilla.suse.com/1186859" source="BUGZILLA"/>
		<reference ref_id="1186861" ref_url="https://bugzilla.suse.com/1186861" source="BUGZILLA"/>
		<reference ref_id="1186863" ref_url="https://bugzilla.suse.com/1186863" source="BUGZILLA"/>
		<reference ref_id="1189142" ref_url="https://bugzilla.suse.com/1189142" source="BUGZILLA"/>
		<reference ref_id="1189348" ref_url="https://bugzilla.suse.com/1189348" source="BUGZILLA"/>
		<reference ref_id="1189350" ref_url="https://bugzilla.suse.com/1189350" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17539" ref_url="https://www.suse.com/security/cve/CVE-2019-17539/" source="CVE"/>
		<reference ref_id="CVE-2019-9721" ref_url="https://www.suse.com/security/cve/CVE-2019-9721/" source="CVE"/>
		<reference ref_id="CVE-2020-13904" ref_url="https://www.suse.com/security/cve/CVE-2020-13904/" source="CVE"/>
		<reference ref_id="CVE-2020-20448" ref_url="https://www.suse.com/security/cve/CVE-2020-20448/" source="CVE"/>
		<reference ref_id="CVE-2020-20451" ref_url="https://www.suse.com/security/cve/CVE-2020-20451/" source="CVE"/>
		<reference ref_id="CVE-2020-21041" ref_url="https://www.suse.com/security/cve/CVE-2020-21041/" source="CVE"/>
		<reference ref_id="CVE-2020-21688" ref_url="https://www.suse.com/security/cve/CVE-2020-21688/" source="CVE"/>
		<reference ref_id="CVE-2020-21697" ref_url="https://www.suse.com/security/cve/CVE-2020-21697/" source="CVE"/>
		<reference ref_id="CVE-2020-22015" ref_url="https://www.suse.com/security/cve/CVE-2020-22015/" source="CVE"/>
		<reference ref_id="CVE-2020-22016" ref_url="https://www.suse.com/security/cve/CVE-2020-22016/" source="CVE"/>
		<reference ref_id="CVE-2020-22017" ref_url="https://www.suse.com/security/cve/CVE-2020-22017/" source="CVE"/>
		<reference ref_id="CVE-2020-22019" ref_url="https://www.suse.com/security/cve/CVE-2020-22019/" source="CVE"/>
		<reference ref_id="CVE-2020-22020" ref_url="https://www.suse.com/security/cve/CVE-2020-22020/" source="CVE"/>
		<reference ref_id="CVE-2020-22021" ref_url="https://www.suse.com/security/cve/CVE-2020-22021/" source="CVE"/>
		<reference ref_id="CVE-2020-22022" ref_url="https://www.suse.com/security/cve/CVE-2020-22022/" source="CVE"/>
		<reference ref_id="CVE-2020-22023" ref_url="https://www.suse.com/security/cve/CVE-2020-22023/" source="CVE"/>
		<reference ref_id="CVE-2020-22025" ref_url="https://www.suse.com/security/cve/CVE-2020-22025/" source="CVE"/>
		<reference ref_id="CVE-2020-22026" ref_url="https://www.suse.com/security/cve/CVE-2020-22026/" source="CVE"/>
		<reference ref_id="CVE-2020-22031" ref_url="https://www.suse.com/security/cve/CVE-2020-22031/" source="CVE"/>
		<reference ref_id="CVE-2020-22032" ref_url="https://www.suse.com/security/cve/CVE-2020-22032/" source="CVE"/>
		<reference ref_id="CVE-2020-22033" ref_url="https://www.suse.com/security/cve/CVE-2020-22033/" source="CVE"/>
		<reference ref_id="CVE-2020-22034" ref_url="https://www.suse.com/security/cve/CVE-2020-22034/" source="CVE"/>
		<reference ref_id="CVE-2020-22038" ref_url="https://www.suse.com/security/cve/CVE-2020-22038/" source="CVE"/>
		<reference ref_id="CVE-2020-22039" ref_url="https://www.suse.com/security/cve/CVE-2020-22039/" source="CVE"/>
		<reference ref_id="CVE-2020-22043" ref_url="https://www.suse.com/security/cve/CVE-2020-22043/" source="CVE"/>
		<reference ref_id="CVE-2020-22044" ref_url="https://www.suse.com/security/cve/CVE-2020-22044/" source="CVE"/>
		<reference ref_id="CVE-2020-22046" ref_url="https://www.suse.com/security/cve/CVE-2020-22046/" source="CVE"/>
		<reference ref_id="CVE-2020-22048" ref_url="https://www.suse.com/security/cve/CVE-2020-22048/" source="CVE"/>
		<reference ref_id="CVE-2020-22049" ref_url="https://www.suse.com/security/cve/CVE-2020-22049/" source="CVE"/>
		<reference ref_id="CVE-2020-22054" ref_url="https://www.suse.com/security/cve/CVE-2020-22054/" source="CVE"/>
		<reference ref_id="CVE-2021-38114" ref_url="https://www.suse.com/security/cve/CVE-2021-38114/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

- CVE-2019-9721: Fixed a denial of service in the subtitle decoder in handle_open_brace from libavcodec/htmlsubtitles.c (bsc#1129714).
- CVE-2020-22046: Fixed a denial of service vulnerability due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c (bsc#1186849).
- CVE-2020-22048: Fixed a denial of service vulnerability due to a memory leak in the ff_frame_pool_get function in framepool.c (bsc#1186859).
- CVE-2020-22049: Fixed a denial of service vulnerability caused by a memory leak in the wtvfile_open_sector function in wtvdec.c (bsc#1186861).
- CVE-2020-22054: Fixed a denial of service vulnerability due to a memory leak in the av_dict_set function in dict.c (bsc#1186863).
- CVE-2020-13904: Fixed use-after-free via a crafted EXTINF duration in an m3u8 file (bsc#1172640).
- CVE-2020-21041: Fixed buffer overflow vulnerability via apng_do_inverse_blend in libavcodec/pngenc.c  (bsc#1186406).
- CVE-2019-17539: Fixed NULL pointer dereference in avcodec_open2 in libavcodec/utils.c (bsc# 1154065).
- CVE-2020-22026: Fixed buffer overflow vulnerability in config_input() at libavfilter/af_tremolo.c (bsc#1186583).
- CVE-2020-22021: Fixed buffer overflow vulnerability in filter_edges function in libavfilter/vf_yadif.c (bsc#1186586).
- CVE-2020-22020: Fixed buffer overflow vulnerability in build_diff_map() in libavfilter/vf_fieldmatch.c (bsc#1186587).
- CVE-2020-22015: Fixed buffer overflow vulnerability in mov_write_video_tag() due to the out of bounds in libavformat/movenc.c (bsc#1186596).
- CVE-2020-22016: Fixed a heap-based Buffer Overflow vulnerability at libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- CVE-2020-22017: Fixed a heap-based Buffer Overflow vulnerability in ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- CVE-2020-22022: Fixed a heap-based Buffer Overflow vulnerability in filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- CVE-2020-22023: Fixed a heap-based Buffer Overflow vulnerability in filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- CVE-2020-22025: Fixed a heap-based Buffer Overflow vulnerability in gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- CVE-2020-22031: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_w3fdif.c in filter16_complex_low() (bsc#1186613).
- CVE-2020-22032: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- CVE-2020-22034: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_floodfill.c (bsc#1186616).
- CVE-2020-20451: Fixed denial of service issue due to resource management errors via fftools/cmdutils.c (bsc#1186658).
- CVE-2020-20448: Fixed divide by zero issue via libavcodec/ratecontrol.c (bsc#1186660).
- CVE-2020-22038: Fixed denial of service vulnerability due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c (bsc#1186757).
- CVE-2020-22039: Fixed denial of service vulnerability due to a memory leak in the inavi_add_ientry function (bsc#1186758).
- CVE-2020-22043: Fixed denial of service vulnerability due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c (bsc#1186762).
- CVE-2020-22044: Fixed denial of service vulnerability due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c (bsc#1186763).
- CVE-2020-22033,CVE-2020-22019: Fixed a heap-based Buffer Overflow Vulnerability at libavfilter/vf_vmafmotion.c in convolution_y_8bit() and in convolution_y_10bit() in libavfilter/vf_vmafmotion.c (bsc#1186615, bsc#1186597).
- CVE-2020-21688: Fixed a heap-use-after-free in the av_freep function in libavutil/mem.c (bsc#1189348).
- CVE-2020-21697: Fixed a heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c (bsc#1189350).
- CVE-2021-38114: Fixed a not checked return value of the init_vlc function (bsc#1189142).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-02"/>
	<updated date="2021-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1129714">SUSE bug 1129714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172640">SUSE bug 1172640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186406">SUSE bug 1186406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186583">SUSE bug 1186583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186586">SUSE bug 1186586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186587">SUSE bug 1186587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186596">SUSE bug 1186596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186597">SUSE bug 1186597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186598">SUSE bug 1186598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186600">SUSE bug 1186600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186603">SUSE bug 1186603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186604">SUSE bug 1186604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186605">SUSE bug 1186605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186613">SUSE bug 1186613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186614">SUSE bug 1186614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186615">SUSE bug 1186615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186616">SUSE bug 1186616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186658">SUSE bug 1186658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186660">SUSE bug 1186660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186757">SUSE bug 1186757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186758">SUSE bug 1186758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186762">SUSE bug 1186762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186763">SUSE bug 1186763</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186849">SUSE bug 1186849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186859">SUSE bug 1186859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186861">SUSE bug 1186861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186863">SUSE bug 1186863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189142">SUSE bug 1189142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189348">SUSE bug 1189348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189350">SUSE bug 1189350</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17539/">CVE-2019-17539</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9721/">CVE-2019-9721</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13904/">CVE-2020-13904</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20448/">CVE-2020-20448</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20451/">CVE-2020-20451</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-21041/">CVE-2020-21041</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-21688/">CVE-2020-21688</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-21697/">CVE-2020-21697</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22015/">CVE-2020-22015</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-22016/">CVE-2020-22016</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22017/">CVE-2020-22017</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22019/">CVE-2020-22019</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22020/">CVE-2020-22020</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22021/">CVE-2020-22021</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22022/">CVE-2020-22022</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22023/">CVE-2020-22023</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22025/">CVE-2020-22025</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22026/">CVE-2020-22026</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22031/">CVE-2020-22031</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22032/">CVE-2020-22032</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22033/">CVE-2020-22033</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22034/">CVE-2020-22034</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22038/">CVE-2020-22038</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22039/">CVE-2020-22039</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22043/">CVE-2020-22043</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22044/">CVE-2020-22044</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22046/">CVE-2020-22046</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22048/">CVE-2020-22048</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22049/">CVE-2020-22049</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22054/">CVE-2020-22054</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-38114/">CVE-2021-38114</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631159" comment="libavcodec-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631160" comment="libavcodec57-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631161" comment="libavcodec57-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631162" comment="libavdevice-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631163" comment="libavdevice57-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631164" comment="libavdevice57-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631165" comment="libavfilter-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631166" comment="libavfilter6-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631167" comment="libavfilter6-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631168" comment="libavformat-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631169" comment="libavformat57-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631170" comment="libavformat57-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631171" comment="libavresample-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631172" comment="libavresample3-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631173" comment="libavresample3-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631174" comment="libavutil-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631175" comment="libavutil55-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631176" comment="libavutil55-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631177" comment="libpostproc-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631178" comment="libpostproc54-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631179" comment="libpostproc54-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631180" comment="libswresample-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631181" comment="libswresample2-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631182" comment="libswresample2-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631183" comment="libswscale-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631184" comment="libswscale4-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631185" comment="libswscale4-32bit-3.4.2-4.34.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139319" version="1" class="patch">
	<metadata>
		<title>Security update for libesmtp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1160462" ref_url="https://bugzilla.suse.com/1160462" source="BUGZILLA"/>
		<reference ref_id="1189097" ref_url="https://bugzilla.suse.com/1189097" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19977" ref_url="https://www.suse.com/security/cve/CVE-2019-19977/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2937-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009397.html" source="SUSE-SU"/>
		<description>
This update for libesmtp fixes the following issues:

- CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c (bsc#1160462).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-03"/>
	<updated date="2021-09-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160462">SUSE bug 1160462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189097">SUSE bug 1189097</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19977/">CVE-2019-19977</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009629441" comment="libesmtp-1.0.6-150.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629442" comment="libesmtp-devel-1.0.6-150.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139320" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1185476" ref_url="https://bugzilla.suse.com/1185476" source="BUGZILLA"/>
		<reference ref_id="1188564" ref_url="https://bugzilla.suse.com/1188564" source="BUGZILLA"/>
		<reference ref_id="1188565" ref_url="https://bugzilla.suse.com/1188565" source="BUGZILLA"/>
		<reference ref_id="1188566" ref_url="https://bugzilla.suse.com/1188566" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2341" ref_url="https://www.suse.com/security/cve/CVE-2021-2341/" source="CVE"/>
		<reference ref_id="CVE-2021-2369" ref_url="https://www.suse.com/security/cve/CVE-2021-2369/" source="CVE"/>
		<reference ref_id="CVE-2021-2388" ref_url="https://www.suse.com/security/cve/CVE-2021-2388/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009404.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to jdk-11.0.12+7
- CVE-2021-2369: Fixed JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565)
- CVE-2021-2388: Fixed a flaw inside the Hotspot component performed range check elimination. (bsc#1188566)
- CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-03"/>
	<updated date="2021-09-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185476">SUSE bug 1185476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188564">SUSE bug 1188564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188565">SUSE bug 1188565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188566">SUSE bug 1188566</bugzilla>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-2341/">CVE-2021-2341</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-2369/">CVE-2021-2369</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-2388/">CVE-2021-2388</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626443" comment="java-11-openjdk-11.0.12.0-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626444" comment="java-11-openjdk-demo-11.0.12.0-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626445" comment="java-11-openjdk-devel-11.0.12.0-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626446" comment="java-11-openjdk-headless-11.0.12.0-3.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139321" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Low)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1189521" ref_url="https://bugzilla.suse.com/1189521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3712" ref_url="https://www.suse.com/security/cve/CVE-2021-3712/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2968-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009417.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. 
  Read buffer overruns processing ASN.1 strings (bsc#1189521).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-07"/>
	<updated date="2021-09-07"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1189521">SUSE bug 1189521</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3712/">CVE-2021-3712</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632354" comment="libopenssl-1_1-devel-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632355" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632356" comment="libopenssl1_1-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632357" comment="libopenssl1_1-32bit-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632358" comment="libopenssl1_1-hmac-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632359" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632360" comment="openssl-1_1-1.1.0i-14.21.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139322" version="1" class="patch">
	<metadata>
		<title>Security update for openvswitch (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1117483" ref_url="https://bugzilla.suse.com/1117483" source="BUGZILLA"/>
		<reference ref_id="1181345" ref_url="https://bugzilla.suse.com/1181345" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27827" ref_url="https://www.suse.com/security/cve/CVE-2020-27827/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008270.html" source="SUSE-SU"/>
		<description>
This update for openvswitch fixes the following issues:
	  
- openvswitch was updated to 2.11.5 
- CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345)	  
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-03"/>
	<updated date="2021-02-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1117483">SUSE bug 1117483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181345">SUSE bug 1181345</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27827/">CVE-2020-27827</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504150" comment="libopenvswitch-2_11-0-2.11.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504151" comment="openvswitch-2.11.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504152" comment="openvswitch-devel-2.11.5-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139323" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1184123" ref_url="https://bugzilla.suse.com/1184123" source="BUGZILLA"/>
		<reference ref_id="1190381" ref_url="https://bugzilla.suse.com/1190381" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3781" ref_url="https://www.suse.com/security/cve/CVE-2021-3781/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009444.html" source="SUSE-SU"/>
		<description>
This update for ghostscript fixes the following issues:

Security issue fixed:

- CVE-2021-3781: Fixed a trivial -dSAFER bypass command injection (bsc#1190381)

Also a hardening fix was added:

- Link as position independent executable (bsc#1184123)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-15"/>
	<updated date="2021-09-15"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1184123">SUSE bug 1184123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190381">SUSE bug 1190381</bugzilla>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3781/">CVE-2021-3781</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632746" comment="ghostscript-9.52-155.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632747" comment="ghostscript-devel-9.52-155.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632748" comment="ghostscript-x11-9.52-155.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632749" comment="libspectre-devel-0.2.8-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632750" comment="libspectre1-0.2.8-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139324" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1189724" ref_url="https://bugzilla.suse.com/1189724" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-38171" ref_url="https://www.suse.com/security/cve/CVE-2021-38171/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009506.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

- CVE-2021-38171: Fixed adts_decode_extradata in libavformat/adtsenc.c to check the init_get_bits return value (bsc#1189724).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-23"/>
	<updated date="2021-09-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189724">SUSE bug 1189724</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38171/">CVE-2021-38171</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009633479" comment="libavcodec-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633480" comment="libavcodec57-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633481" comment="libavcodec57-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633482" comment="libavdevice-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633483" comment="libavdevice57-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633484" comment="libavdevice57-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633485" comment="libavfilter-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633486" comment="libavfilter6-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633487" comment="libavfilter6-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633488" comment="libavformat-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633489" comment="libavformat57-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633490" comment="libavformat57-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633491" comment="libavresample-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633492" comment="libavresample3-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633493" comment="libavresample3-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633494" comment="libavutil-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633495" comment="libavutil55-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633496" comment="libavutil55-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633497" comment="libpostproc-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633498" comment="libpostproc54-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633499" comment="libpostproc54-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633500" comment="libswresample-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633501" comment="libswresample2-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633502" comment="libswresample2-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633503" comment="libswscale-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633504" comment="libswscale4-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633505" comment="libswscale4-32bit-3.4.2-4.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139325" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188697" ref_url="https://bugzilla.suse.com/1188697" source="BUGZILLA"/>
		<reference ref_id="1190701" ref_url="https://bugzilla.suse.com/1190701" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21806" ref_url="https://www.suse.com/security/cve/CVE-2021-21806/" source="CVE"/>
		<reference ref_id="CVE-2021-30858" ref_url="https://www.suse.com/security/cve/CVE-2021-30858/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009531.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.32.4
- CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve arbitrary code execution. (bsc#1190701)
- CVE-2021-21806: Fixed an exploitable use-after-free vulnerability via specially crafted HTML web page. (bsc#1188697)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-04"/>
	<updated date="2021-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188697">SUSE bug 1188697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190701">SUSE bug 1190701</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21806/">CVE-2021-21806</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30858/">CVE-2021-30858</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009634109" comment="libjavascriptcoregtk-4_0-18-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634110" comment="libwebkit2gtk-4_0-37-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634111" comment="libwebkit2gtk3-lang-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634112" comment="typelib-1_0-JavaScriptCore-4_0-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634113" comment="typelib-1_0-WebKit2-4_0-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634114" comment="typelib-1_0-WebKit2WebExtension-4_0-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634115" comment="webkit2gtk-4_0-injected-bundles-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634116" comment="webkit2gtk3-devel-2.32.4-3.82.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139326" version="1" class="patch">
	<metadata>
		<title>Security update for grilo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1189839" ref_url="https://bugzilla.suse.com/1189839" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-39365" ref_url="https://www.suse.com/security/cve/CVE-2021-39365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009536.html" source="SUSE-SU"/>
		<description>
This update for grilo fixes the following issues:

- CVE-2021-39365: Fixed missing TLS certificate verification (bsc#1189839).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-06"/>
	<updated date="2021-10-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189839">SUSE bug 1189839</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39365/">CVE-2021-39365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009634441" comment="grilo-devel-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634442" comment="libgrilo-0_3-0-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634443" comment="libgrlnet-0_3-0-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634444" comment="libgrlpls-0_3-0-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634445" comment="typelib-1_0-Grl-0_3-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634446" comment="typelib-1_0-GrlNet-0_3-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634447" comment="typelib-1_0-GrlPls-0_3-0.3.4-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139327" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1190373" ref_url="https://bugzilla.suse.com/1190373" source="BUGZILLA"/>
		<reference ref_id="1190374" ref_url="https://bugzilla.suse.com/1190374" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22946" ref_url="https://www.suse.com/security/cve/CVE-2021-22946/" source="CVE"/>
		<reference ref_id="CVE-2021-22947" ref_url="https://www.suse.com/security/cve/CVE-2021-22947/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3297-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009542.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2021-22947: Fixed STARTTLS protocol injection via MITM (bsc#1190374).
- CVE-2021-22946: Fixed protocol downgrade required TLS bypassed (bsc#1190373).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-06"/>
	<updated date="2021-10-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1190373">SUSE bug 1190373</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190374">SUSE bug 1190374</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22946/">CVE-2021-22946</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22947/">CVE-2021-22947</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009633983" comment="curl-7.60.0-25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633984" comment="libcurl-devel-7.60.0-25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633985" comment="libcurl4-7.60.0-25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633986" comment="libcurl4-32bit-7.60.0-25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139328" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188891" ref_url="https://bugzilla.suse.com/1188891" source="BUGZILLA"/>
		<reference ref_id="1189547" ref_url="https://bugzilla.suse.com/1189547" source="BUGZILLA"/>
		<reference ref_id="1190269" ref_url="https://bugzilla.suse.com/1190269" source="BUGZILLA"/>
		<reference ref_id="1190274" ref_url="https://bugzilla.suse.com/1190274" source="BUGZILLA"/>
		<reference ref_id="1190710" ref_url="https://bugzilla.suse.com/1190710" source="BUGZILLA"/>
		<reference ref_id="1191332" ref_url="https://bugzilla.suse.com/1191332" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29980" ref_url="https://www.suse.com/security/cve/CVE-2021-29980/" source="CVE"/>
		<reference ref_id="CVE-2021-29981" ref_url="https://www.suse.com/security/cve/CVE-2021-29981/" source="CVE"/>
		<reference ref_id="CVE-2021-29982" ref_url="https://www.suse.com/security/cve/CVE-2021-29982/" source="CVE"/>
		<reference ref_id="CVE-2021-29983" ref_url="https://www.suse.com/security/cve/CVE-2021-29983/" source="CVE"/>
		<reference ref_id="CVE-2021-29984" ref_url="https://www.suse.com/security/cve/CVE-2021-29984/" source="CVE"/>
		<reference ref_id="CVE-2021-29985" ref_url="https://www.suse.com/security/cve/CVE-2021-29985/" source="CVE"/>
		<reference ref_id="CVE-2021-29986" ref_url="https://www.suse.com/security/cve/CVE-2021-29986/" source="CVE"/>
		<reference ref_id="CVE-2021-29987" ref_url="https://www.suse.com/security/cve/CVE-2021-29987/" source="CVE"/>
		<reference ref_id="CVE-2021-29988" ref_url="https://www.suse.com/security/cve/CVE-2021-29988/" source="CVE"/>
		<reference ref_id="CVE-2021-29989" ref_url="https://www.suse.com/security/cve/CVE-2021-29989/" source="CVE"/>
		<reference ref_id="CVE-2021-29990" ref_url="https://www.suse.com/security/cve/CVE-2021-29990/" source="CVE"/>
		<reference ref_id="CVE-2021-29991" ref_url="https://www.suse.com/security/cve/CVE-2021-29991/" source="CVE"/>
		<reference ref_id="CVE-2021-32810" ref_url="https://www.suse.com/security/cve/CVE-2021-32810/" source="CVE"/>
		<reference ref_id="CVE-2021-38492" ref_url="https://www.suse.com/security/cve/CVE-2021-38492/" source="CVE"/>
		<reference ref_id="CVE-2021-38495" ref_url="https://www.suse.com/security/cve/CVE-2021-38495/" source="CVE"/>
		<reference ref_id="CVE-2021-38496" ref_url="https://www.suse.com/security/cve/CVE-2021-38496/" source="CVE"/>
		<reference ref_id="CVE-2021-38497" ref_url="https://www.suse.com/security/cve/CVE-2021-38497/" source="CVE"/>
		<reference ref_id="CVE-2021-38498" ref_url="https://www.suse.com/security/cve/CVE-2021-38498/" source="CVE"/>
		<reference ref_id="CVE-2021-38500" ref_url="https://www.suse.com/security/cve/CVE-2021-38500/" source="CVE"/>
		<reference ref_id="CVE-2021-38501" ref_url="https://www.suse.com/security/cve/CVE-2021-38501/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009561.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

This update contains the Firefox Extended Support Release 91.2.0 ESR.

Firefox Extended Support Release 91.2.0 ESR

* Fixed: Various stability, functionality, and security fixes
 MFSA 2021-45 (bsc#1191332)
* CVE-2021-38496: Use-after-free in MessageTask
* CVE-2021-38497: Validation message could have been overlaid on another origin
* CVE-2021-38498: Use-after-free of nsLanguageAtomService object
* CVE-2021-32810: Data race in crossbeam-deque

  https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
   
* CVE-2021-38500 (bmo#1725854, bmo#1728321)
  Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
  and Firefox ESR 91.2
* CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
  Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2

- Fixed crash in FIPS mode (bsc#1190710)

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-40 (bsc#1190269, bsc#1190274):

* CVE-2021-38492: Navigating to `mk:` URL scheme could load Internet Explorer
* CVE-2021-38495: Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1

Firefox Extended Support Release 91.0.1 ESR

* Fixed: Fixed an issue causing buttons on the tab bar to be
  resized when loading certain websites (bug 1704404)
* Fixed: Fixed an issue which caused tabs from private windows
  to be visible in non-private windows when viewing switch-to-
  tab results in the address bar panel (bug 1720369)
* Fixed: Various stability fixes
* Fixed: Security fix MFSA 2021-37 (bsc#1189547)
* CVE-2021-29991 (bmo#1724896)
  Header Splitting possible with HTTP/3 Responses

Firefox Extended Support Release 91.0 ESR

* New: Some of the highlights of the new Extended Support Release are:

  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded 'just in time' if you decide to 'Log in with Facebook'
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We’ve improved functionality and design for a number of
    Firefox search features:
    * Selecting a search engine at the bottom of the search
      panel now enters search mode for that engine, allowing you to
      see suggestions (if available) for your search terms. The old
      behavior (immediately performing a search) is available with
      a shift-click.
    * When Firefox autocompletes the URL of one of your search
      engines, you can now search with that engine directly in the
      address bar by selecting the shortcut in the address bar
      results.
    * We’ve added buttons at the bottom of the search panel to
      allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
* Changed: Firefox no longer supports Adobe Flash. There is no
  setting available to re-enable Flash support.
* Enterprise: Various bug fixes and new policies have been
  implemented in the latest version of Firefox. See more
  details in the Firefox for Enterprise 91 Release Notes.

  MFSA 2021-33 (bsc#1188891):

* CVE-2021-29986: Race condition when resolving DNS names could have led to
  memory corruption
* CVE-2021-29981: Live range splitting could have led to conflicting
  assignments in the JIT
* CVE-2021-29988: Memory corruption as a result of incorrect style treatment
* CVE-2021-29983: Firefox for Android could get stuck in fullscreen mode
* CVE-2021-29984: Incorrect instruction reordering during JIT optimization
* CVE-2021-29980: Uninitialized memory in a canvas object could have led to
  memory corruption
* CVE-2021-29987: Users could have been tricked into accepting unwanted
  permissions on Linux
* CVE-2021-29985: Use-after-free media channels
* CVE-2021-29982: Single bit data leak due to incorrect JIT optimization and
  type confusion
* CVE-2021-29989: Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
* CVE-2021-29990: Memory safety bugs fixed in Firefox 91
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-11"/>
	<updated date="2021-10-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188891">SUSE bug 1188891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189547">SUSE bug 1189547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190269">SUSE bug 1190269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190274">SUSE bug 1190274</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190710">SUSE bug 1190710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191332">SUSE bug 1191332</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29980/">CVE-2021-29980</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29981/">CVE-2021-29981</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29982/">CVE-2021-29982</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29983/">CVE-2021-29983</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29984/">CVE-2021-29984</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29985/">CVE-2021-29985</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29986/">CVE-2021-29986</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29987/">CVE-2021-29987</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29988/">CVE-2021-29988</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29989/">CVE-2021-29989</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29990/">CVE-2021-29990</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29991/">CVE-2021-29991</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32810/">CVE-2021-32810</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38492/">CVE-2021-38492</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38495/">CVE-2021-38495</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38496/">CVE-2021-38496</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38497/">CVE-2021-38497</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38498/">CVE-2021-38498</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38500/">CVE-2021-38500</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38501/">CVE-2021-38501</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009651315" comment="MozillaFirefox-91.2.0-3.155.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633337" comment="MozillaFirefox-branding-SLE-91-4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651316" comment="MozillaFirefox-devel-91.2.0-3.155.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651317" comment="MozillaFirefox-translations-common-91.2.0-3.155.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651318" comment="MozillaFirefox-translations-other-91.2.0-3.155.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139329" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1189387" ref_url="https://bugzilla.suse.com/1189387" source="BUGZILLA"/>
		<reference ref_id="1190666" ref_url="https://bugzilla.suse.com/1190666" source="BUGZILLA"/>
		<reference ref_id="1190669" ref_url="https://bugzilla.suse.com/1190669" source="BUGZILLA"/>
		<reference ref_id="1190702" ref_url="https://bugzilla.suse.com/1190702" source="BUGZILLA"/>
		<reference ref_id="1190703" ref_url="https://bugzilla.suse.com/1190703" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33193" ref_url="https://www.suse.com/security/cve/CVE-2021-33193/" source="CVE"/>
		<reference ref_id="CVE-2021-34798" ref_url="https://www.suse.com/security/cve/CVE-2021-34798/" source="CVE"/>
		<reference ref_id="CVE-2021-36160" ref_url="https://www.suse.com/security/cve/CVE-2021-36160/" source="CVE"/>
		<reference ref_id="CVE-2021-39275" ref_url="https://www.suse.com/security/cve/CVE-2021-39275/" source="CVE"/>
		<reference ref_id="CVE-2021-40438" ref_url="https://www.suse.com/security/cve/CVE-2021-40438/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009564.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703)
- CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702)
- CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)
- CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)
- CVE-2021-33193: Fixed request splitting via HTTP/2 method injection and mod_proxy. (bsc#1189387)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-12"/>
	<updated date="2021-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189387">SUSE bug 1189387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190666">SUSE bug 1190666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190669">SUSE bug 1190669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190702">SUSE bug 1190702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190703">SUSE bug 1190703</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-33193/">CVE-2021-33193</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-34798/">CVE-2021-34798</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36160/">CVE-2021-36160</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-39275/">CVE-2021-39275</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-40438/">CVE-2021-40438</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009633977" comment="apache2-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633978" comment="apache2-devel-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633979" comment="apache2-doc-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633980" comment="apache2-prefork-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633981" comment="apache2-utils-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633982" comment="apache2-worker-2.4.33-3.55.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139330" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186489" ref_url="https://bugzilla.suse.com/1186489" source="BUGZILLA"/>
		<reference ref_id="1187911" ref_url="https://bugzilla.suse.com/1187911" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33574" ref_url="https://www.suse.com/security/cve/CVE-2021-33574/" source="CVE"/>
		<reference ref_id="CVE-2021-35942" ref_url="https://www.suse.com/security/cve/CVE-2021-35942/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009579.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

- CVE-2021-35942: wordexp: handle overflow in positional parameter number (bsc#1187911)
- CVE-2021-33574: Use __pthread_attr_copy in mq_notify (bsc#1186489)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-12"/>
	<updated date="2021-10-12"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1186489">SUSE bug 1186489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187911">SUSE bug 1187911</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33574/">CVE-2021-33574</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35942/">CVE-2021-35942</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009634576" comment="glibc-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634544" comment="glibc-32bit-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634577" comment="glibc-devel-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634569" comment="glibc-devel-32bit-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634578" comment="glibc-devel-static-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634579" comment="glibc-extra-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634547" comment="glibc-i18ndata-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634548" comment="glibc-info-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634580" comment="glibc-locale-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634581" comment="glibc-locale-base-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634551" comment="glibc-locale-base-32bit-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634582" comment="glibc-profile-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634583" comment="glibc-utils-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634584" comment="nscd-2.26-13.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139331" version="1" class="patch">
	<metadata>
		<title>Security update for strongswan (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1167880" ref_url="https://bugzilla.suse.com/1167880" source="BUGZILLA"/>
		<reference ref_id="1191367" ref_url="https://bugzilla.suse.com/1191367" source="BUGZILLA"/>
		<reference ref_id="1191435" ref_url="https://bugzilla.suse.com/1191435" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-41990" ref_url="https://www.suse.com/security/cve/CVE-2021-41990/" source="CVE"/>
		<reference ref_id="CVE-2021-41991" ref_url="https://www.suse.com/security/cve/CVE-2021-41991/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009614.html" source="SUSE-SU"/>
		<description>
This update for strongswan fixes the following issues:

- Fix trailing quotation mark missing from example in README. (bsc#1167880)
- CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. (bsc#1191435)
- CVE-2021-41990: Fixed an integer Overflow in the gmp Plugin. (bsc#1191367)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-19"/>
	<updated date="2021-10-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1167880">SUSE bug 1167880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191367">SUSE bug 1191367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191435">SUSE bug 1191435</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41990/">CVE-2021-41990</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41991/">CVE-2021-41991</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009652769" comment="strongswan-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652770" comment="strongswan-doc-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652771" comment="strongswan-hmac-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652772" comment="strongswan-ipsec-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652773" comment="strongswan-libs0-5.8.2-4.14.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139332" version="1" class="patch">
	<metadata>
		<title>Security update for python-Pygments (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1183169" ref_url="https://bugzilla.suse.com/1183169" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20270" ref_url="https://www.suse.com/security/cve/CVE-2021-20270/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009616.html" source="SUSE-SU"/>
		<description>
This update for python-Pygments fixes the following issues:

- CVE-2021-20270: Fixed an infinite loop in the SML lexer (bsc#1183169).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-20"/>
	<updated date="2021-10-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183169">SUSE bug 1183169</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20270/">CVE-2021-20270</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652625" comment="python3-Pygments-2.6.1-7.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139333" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1102408" ref_url="https://bugzilla.suse.com/1102408" source="BUGZILLA"/>
		<reference ref_id="1185405" ref_url="https://bugzilla.suse.com/1185405" source="BUGZILLA"/>
		<reference ref_id="1187704" ref_url="https://bugzilla.suse.com/1187704" source="BUGZILLA"/>
		<reference ref_id="1188282" ref_url="https://bugzilla.suse.com/1188282" source="BUGZILLA"/>
		<reference ref_id="1190826" ref_url="https://bugzilla.suse.com/1190826" source="BUGZILLA"/>
		<reference ref_id="1191015" ref_url="https://bugzilla.suse.com/1191015" source="BUGZILLA"/>
		<reference ref_id="1191121" ref_url="https://bugzilla.suse.com/1191121" source="BUGZILLA"/>
		<reference ref_id="1191334" ref_url="https://bugzilla.suse.com/1191334" source="BUGZILLA"/>
		<reference ref_id="1191355" ref_url="https://bugzilla.suse.com/1191355" source="BUGZILLA"/>
		<reference ref_id="1191434" ref_url="https://bugzilla.suse.com/1191434" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30465" ref_url="https://www.suse.com/security/cve/CVE-2021-30465/" source="CVE"/>
		<reference ref_id="CVE-2021-32760" ref_url="https://www.suse.com/security/cve/CVE-2021-32760/" source="CVE"/>
		<reference ref_id="CVE-2021-41089" ref_url="https://www.suse.com/security/cve/CVE-2021-41089/" source="CVE"/>
		<reference ref_id="CVE-2021-41091" ref_url="https://www.suse.com/security/cve/CVE-2021-41091/" source="CVE"/>
		<reference ref_id="CVE-2021-41092" ref_url="https://www.suse.com/security/cve/CVE-2021-41092/" source="CVE"/>
		<reference ref_id="CVE-2021-41103" ref_url="https://www.suse.com/security/cve/CVE-2021-41103/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009645.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, runc fixes the following issues:

Docker was updated to 20.10.9-ce. (bsc#1191355)

See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. 

  CVE-2021-41092 CVE-2021-41089 CVE-2021-41091 CVE-2021-41103

container was updated to v1.4.11, to fix CVE-2021-41103. bsc#1191355

- CVE-2021-32760: Fixed that a archive package allows chmod of file outside of unpack target directory (bsc#1188282)

- Install systemd service file as well (bsc#1190826)

Update to runc v1.0.2. Upstream changelog is available from

  https://github.com/opencontainers/runc/releases/tag/v1.0.2

* Fixed a failure to set CPU quota period in some cases on cgroup v1.
* Fixed the inability to start a container with the 'adding seccomp filter
  rule for syscall ...' error, caused by redundant seccomp rules (i.e. those
  that has action equal to the default one). Such redundant rules are now
  skipped.
* Made release builds reproducible from now on.
* Fixed a rare debug log race in runc init, which can result in occasional
  harmful 'failed to decode ...' errors from runc run or exec.
* Fixed the check in cgroup v1 systemd manager if a container needs to be
  frozen before Set, and add a setting to skip such freeze unconditionally.
  The previous fix for that issue, done in runc 1.0.1, was not working.

Update to runc v1.0.1. Upstream changelog is available from

https://github.com/opencontainers/runc/releases/tag/v1.0.1

* Fixed occasional runc exec/run failure ('interrupted system call') on an
  Azure volume.
* Fixed 'unable to find groups ... token too long' error with /etc/group
  containing lines longer than 64K characters.
* cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
  frozen. This is a regression in 1.0.0, not affecting runc itself but some
  of libcontainer users (e.g Kubernetes).
* cgroupv2: bpf: Ignore inaccessible existing programs in case of
  permission error when handling replacement of existing bpf cgroup
  programs. This fixes a regression in 1.0.0, where some SELinux
  policies would block runc from being able to run entirely.
* cgroup/systemd/v2: don't freeze cgroup on Set.
* cgroup/systemd/v1: avoid unnecessary freeze on Set.
- fix issues with runc under openSUSE MicroOS's SELinux policy. bsc#1187704

Update to runc v1.0.0. Upstream changelog is available from

https://github.com/opencontainers/runc/releases/tag/v1.0.0

! The usage of relative paths for mountpoints will now produce a warning
  (such configurations are outside of the spec, and in future runc will
  produce an error when given such configurations).
* cgroupv2: devices: rework the filter generation to produce consistent
  results with cgroupv1, and always clobber any existing eBPF
  program(s) to fix runc update and avoid leaking eBPF programs
  (resulting in errors when managing containers).
* cgroupv2: correctly convert 'number of IOs' statistics in a
  cgroupv1-compatible way.
* cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
* cgroupv2: wait for freeze to finish before returning from the freezing
  code, optimize the method for checking whether a cgroup is frozen.
* cgroups/systemd: fixed 'retry on dbus disconnect' logic introduced in rc94
* cgroups/systemd: fixed returning 'unit already exists' error from a systemd
  cgroup manager (regression in rc94)
+ cgroupv2: support SkipDevices with systemd driver
+ cgroup/systemd: return, not ignore, stop unit error from Destroy
+ Make 'runc --version' output sane even when built with go get or
  otherwise outside of our build scripts.
+ cgroups: set SkipDevices during runc update (so we don't modify
  cgroups at all during runc update).
+ cgroup1: blkio: support BFQ weights.
+ cgroupv2: set per-device io weights if BFQ IO scheduler is available.

Update to runc v1.0.0~rc95. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95

This release of runc contains a fix for CVE-2021-30465, and users are
strongly recommended to update (especially if you are providing
semi-limited access to spawn containers to untrusted users). (bsc#1185405)

Update to runc v1.0.0~rc94. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94

Breaking Changes:
* cgroupv1: kernel memory limits are now always ignored, as kmemcg has
  been effectively deprecated by the kernel. Users should make use of regular
  memory cgroup controls.

Regression Fixes:

* seccomp: fix 32-bit compilation errors
* runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
* runc start: fix 'chdir to cwd: permission denied' for some setups
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-25"/>
	<updated date="2021-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1102408">SUSE bug 1102408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185405">SUSE bug 1185405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187704">SUSE bug 1187704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188282">SUSE bug 1188282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190826">SUSE bug 1190826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191015">SUSE bug 1191015</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191121">SUSE bug 1191121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191334">SUSE bug 1191334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191355">SUSE bug 1191355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191434">SUSE bug 1191434</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30465/">CVE-2021-30465</cve>
	<cve impact="low" cvss3="3/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-32760/">CVE-2021-32760</cve>
	<cve impact="moderate" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-41089/">CVE-2021-41089</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-41091/">CVE-2021-41091</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-41092/">CVE-2021-41092</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-41103/">CVE-2021-41103</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009651737" comment="containerd-1.4.11-56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651738" comment="docker-20.10.9_ce-156.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651639" comment="docker-bash-completion-20.10.9_ce-156.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651739" comment="runc-1.0.2-23.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139334" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181239" ref_url="https://bugzilla.suse.com/1181239" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008289.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

java-11-openjdk was upgraded to include January 2021 CPU  (bsc#1181239)
- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-09"/>
	<updated date="2021-02-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181239">SUSE bug 1181239</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503578" comment="java-11-openjdk-11.0.10.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503579" comment="java-11-openjdk-demo-11.0.10.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503580" comment="java-11-openjdk-devel-11.0.10.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503581" comment="java-11-openjdk-headless-11.0.10.0-3.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139335" version="1" class="patch">
	<metadata>
		<title>Security update for dnsmasq (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1173646" ref_url="https://bugzilla.suse.com/1173646" source="BUGZILLA"/>
		<reference ref_id="1180914" ref_url="https://bugzilla.suse.com/1180914" source="BUGZILLA"/>
		<reference ref_id="1183709" ref_url="https://bugzilla.suse.com/1183709" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14312" ref_url="https://www.suse.com/security/cve/CVE-2020-14312/" source="CVE"/>
		<reference ref_id="CVE-2021-3448" ref_url="https://www.suse.com/security/cve/CVE-2021-3448/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009660.html" source="SUSE-SU"/>
		<description>
This update for dnsmasq fixes the following issues:

Update to version 2.86

- CVE-2021-3448: fixed outgoing port used when --server is used with an interface name. (bsc#1183709)
- CVE-2020-14312: Set --local-service by default (bsc#1173646).
- Open inotify socket only when used (bsc#1180914).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173646">SUSE bug 1173646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180914">SUSE bug 1180914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183709">SUSE bug 1183709</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14312/">CVE-2020-14312</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3448/">CVE-2021-3448</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653320" comment="dnsmasq-2.86-7.14.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139336" version="1" class="patch">
	<metadata>
		<title>Security update for busybox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1099260" ref_url="https://bugzilla.suse.com/1099260" source="BUGZILLA"/>
		<reference ref_id="1099263" ref_url="https://bugzilla.suse.com/1099263" source="BUGZILLA"/>
		<reference ref_id="1121426" ref_url="https://bugzilla.suse.com/1121426" source="BUGZILLA"/>
		<reference ref_id="1184522" ref_url="https://bugzilla.suse.com/1184522" source="BUGZILLA"/>
		<reference ref_id="951562" ref_url="https://bugzilla.suse.com/951562" source="BUGZILLA"/>
		<reference ref_id="CVE-2011-5325" ref_url="https://www.suse.com/security/cve/CVE-2011-5325/" source="CVE"/>
		<reference ref_id="CVE-2018-1000500" ref_url="https://www.suse.com/security/cve/CVE-2018-1000500/" source="CVE"/>
		<reference ref_id="CVE-2018-1000517" ref_url="https://www.suse.com/security/cve/CVE-2018-1000517/" source="CVE"/>
		<reference ref_id="CVE-2018-20679" ref_url="https://www.suse.com/security/cve/CVE-2018-20679/" source="CVE"/>
		<reference ref_id="CVE-2021-28831" ref_url="https://www.suse.com/security/cve/CVE-2021-28831/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009658.html" source="SUSE-SU"/>
		<description>
This update for busybox fixes the following issues:

- CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522).
- CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426).
- CVE-2018-1000517: Fixed buffer overflow in the retrieve_file_data() (bsc#1099260).
- CVE-2011-5325: Fixed a directory traversal related to 'tar' command (bsc#951562).
- CVE-2018-1000500: Fixed missing SSL certificate validation related to the 'wget' command (bsc#1099263).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1099260">SUSE bug 1099260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099263">SUSE bug 1099263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121426">SUSE bug 1121426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184522">SUSE bug 1184522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951562">SUSE bug 951562</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2011-5325/">CVE-2011-5325</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000500/">CVE-2018-1000500</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000517/">CVE-2018-1000517</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20679/">CVE-2018-20679</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28831/">CVE-2021-28831</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009652768" comment="busybox-1.26.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652774" comment="busybox-static-1.26.2-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139337" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182783" ref_url="https://bugzilla.suse.com/1182783" source="BUGZILLA"/>
		<reference ref_id="1184152" ref_url="https://bugzilla.suse.com/1184152" source="BUGZILLA"/>
		<reference ref_id="1184772" ref_url="https://bugzilla.suse.com/1184772" source="BUGZILLA"/>
		<reference ref_id="1185081" ref_url="https://bugzilla.suse.com/1185081" source="BUGZILLA"/>
		<reference ref_id="1188843" ref_url="https://bugzilla.suse.com/1188843" source="BUGZILLA"/>
		<reference ref_id="1190420" ref_url="https://bugzilla.suse.com/1190420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3667" ref_url="https://www.suse.com/security/cve/CVE-2021-3667/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009661.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:

Security issue fixed:

- CVE-2021-3667: Fixed a DoS vulnerability in the libvirt virStoragePoolLookupByTargetPath API. (bsc#1188843)

Non-security issues fixed:

- resolved hangs/crashes on libvirtd shutdown (bsc#1182783)
- qemu: Normalize MAC address in device conf on netdev hotplug (bsc#1184772)
- libxl: Fix driver reload (bsc#1190420)
- libxl: Add support for 'e820_host' settings (bsc#1185081)
- libxl: Fix domain shutdown (bsc#1184152)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182783">SUSE bug 1182783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184152">SUSE bug 1184152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184772">SUSE bug 1184772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185081">SUSE bug 1185081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188843">SUSE bug 1188843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190420">SUSE bug 1190420</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3667/">CVE-2021-3667</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009652337" comment="libvirt-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652338" comment="libvirt-admin-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652339" comment="libvirt-bash-completion-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652340" comment="libvirt-client-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652341" comment="libvirt-daemon-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652342" comment="libvirt-daemon-config-network-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652343" comment="libvirt-daemon-config-nwfilter-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652344" comment="libvirt-daemon-driver-interface-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652345" comment="libvirt-daemon-driver-libxl-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652346" comment="libvirt-daemon-driver-lxc-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652347" comment="libvirt-daemon-driver-network-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652348" comment="libvirt-daemon-driver-nodedev-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652349" comment="libvirt-daemon-driver-nwfilter-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652350" comment="libvirt-daemon-driver-qemu-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652351" comment="libvirt-daemon-driver-secret-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652352" comment="libvirt-daemon-driver-storage-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652353" comment="libvirt-daemon-driver-storage-core-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652354" comment="libvirt-daemon-driver-storage-disk-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652355" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652356" comment="libvirt-daemon-driver-storage-logical-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652357" comment="libvirt-daemon-driver-storage-mpath-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652358" comment="libvirt-daemon-driver-storage-rbd-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652359" comment="libvirt-daemon-driver-storage-scsi-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652360" comment="libvirt-daemon-hooks-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652361" comment="libvirt-daemon-lxc-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652362" comment="libvirt-daemon-qemu-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652363" comment="libvirt-daemon-xen-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652364" comment="libvirt-devel-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652365" comment="libvirt-doc-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652366" comment="libvirt-libs-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652367" comment="libvirt-lock-sanlock-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652368" comment="libvirt-nss-5.1.0-8.29.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139338" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="1180686" ref_url="https://bugzilla.suse.com/1180686" source="BUGZILLA"/>
		<reference ref_id="1181126" ref_url="https://bugzilla.suse.com/1181126" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="CVE-2021-3177" ref_url="https://www.suse.com/security/cve/CVE-2021-3177/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008291.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- buffer overflow in PyCArg_repr in _ctypes/callproc.c,
  which may lead to remote code execution (bsc#1181126, CVE-2021-3177).
- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-09"/>
	<updated date="2021-02-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180686">SUSE bug 1180686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181126">SUSE bug 1181126</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3177/">CVE-2021-3177</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503582" comment="libpython2_7-1_0-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503583" comment="python-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503584" comment="python-base-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503585" comment="python-curses-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503586" comment="python-devel-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503587" comment="python-gdbm-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504153" comment="python-tk-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503588" comment="python-xml-2.7.17-7.52.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139339" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1190265" ref_url="https://bugzilla.suse.com/1190265" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21996" ref_url="https://www.suse.com/security/cve/CVE-2021-21996/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009662.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Support querying for JSON data in external sql pillar.
- Exclude the full path of a download URL to prevent injection of malicious code.
  (bsc#1190265, CVE-2021-21996)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1190265">SUSE bug 1190265</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-21996/">CVE-2021-21996</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009652204" comment="python3-salt-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652205" comment="salt-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652206" comment="salt-api-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652207" comment="salt-bash-completion-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652208" comment="salt-cloud-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652209" comment="salt-doc-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652210" comment="salt-fish-completion-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652211" comment="salt-master-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652212" comment="salt-minion-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652213" comment="salt-proxy-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652214" comment="salt-ssh-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652215" comment="salt-standalone-formulas-configuration-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652216" comment="salt-syndic-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652217" comment="salt-transactional-update-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652218" comment="salt-zsh-completion-3002.2-48.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139340" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1180432" ref_url="https://bugzilla.suse.com/1180432" source="BUGZILLA"/>
		<reference ref_id="1180433" ref_url="https://bugzilla.suse.com/1180433" source="BUGZILLA"/>
		<reference ref_id="1180434" ref_url="https://bugzilla.suse.com/1180434" source="BUGZILLA"/>
		<reference ref_id="1180435" ref_url="https://bugzilla.suse.com/1180435" source="BUGZILLA"/>
		<reference ref_id="1182651" ref_url="https://bugzilla.suse.com/1182651" source="BUGZILLA"/>
		<reference ref_id="1186012" ref_url="https://bugzilla.suse.com/1186012" source="BUGZILLA"/>
		<reference ref_id="1189145" ref_url="https://bugzilla.suse.com/1189145" source="BUGZILLA"/>
		<reference ref_id="1189702" ref_url="https://bugzilla.suse.com/1189702" source="BUGZILLA"/>
		<reference ref_id="1189938" ref_url="https://bugzilla.suse.com/1189938" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35503" ref_url="https://www.suse.com/security/cve/CVE-2020-35503/" source="CVE"/>
		<reference ref_id="CVE-2020-35504" ref_url="https://www.suse.com/security/cve/CVE-2020-35504/" source="CVE"/>
		<reference ref_id="CVE-2020-35505" ref_url="https://www.suse.com/security/cve/CVE-2020-35505/" source="CVE"/>
		<reference ref_id="CVE-2020-35506" ref_url="https://www.suse.com/security/cve/CVE-2020-35506/" source="CVE"/>
		<reference ref_id="CVE-2021-20255" ref_url="https://www.suse.com/security/cve/CVE-2021-20255/" source="CVE"/>
		<reference ref_id="CVE-2021-3527" ref_url="https://www.suse.com/security/cve/CVE-2021-3527/" source="CVE"/>
		<reference ref_id="CVE-2021-3682" ref_url="https://www.suse.com/security/cve/CVE-2021-3682/" source="CVE"/>
		<reference ref_id="CVE-2021-3713" ref_url="https://www.suse.com/security/cve/CVE-2021-3713/" source="CVE"/>
		<reference ref_id="CVE-2021-3748" ref_url="https://www.suse.com/security/cve/CVE-2021-3748/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009697.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

Security issues fixed:

- Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702, CVE-2021-3713)
- Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938, CVE-2021-3748)
- usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)
- NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)
- NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)
- eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)
- usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)

Non-security issues fixed:

- Use max host physical address if -cpu max is used (bsc#1188299)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-04"/>
	<updated date="2021-11-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180432">SUSE bug 1180432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180433">SUSE bug 1180433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180434">SUSE bug 1180434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180435">SUSE bug 1180435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182651">SUSE bug 1182651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186012">SUSE bug 1186012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189145">SUSE bug 1189145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189702">SUSE bug 1189702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189938">SUSE bug 1189938</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35503/">CVE-2020-35503</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35504/">CVE-2020-35504</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35505/">CVE-2020-35505</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-35506/">CVE-2020-35506</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20255/">CVE-2021-20255</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3527/">CVE-2021-3527</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3682/">CVE-2021-3682</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3713/">CVE-2021-3713</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3748/">CVE-2021-3748</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653097" comment="qemu-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653098" comment="qemu-arm-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653099" comment="qemu-audio-alsa-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653100" comment="qemu-audio-oss-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653101" comment="qemu-audio-pa-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653102" comment="qemu-block-curl-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653103" comment="qemu-block-iscsi-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653104" comment="qemu-block-rbd-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653105" comment="qemu-block-ssh-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653106" comment="qemu-guest-agent-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653107" comment="qemu-ipxe-1.0.0+-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653108" comment="qemu-kvm-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653109" comment="qemu-lang-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653110" comment="qemu-seabios-1.12.0_0_ga698c89-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653111" comment="qemu-sgabios-8-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653112" comment="qemu-tools-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653113" comment="qemu-ui-curses-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653114" comment="qemu-ui-gtk-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653115" comment="qemu-vgabios-1.12.0_0_ga698c89-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653116" comment="qemu-x86-3.1.1.1-80.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139341" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1179898" ref_url="https://bugzilla.suse.com/1179898" source="BUGZILLA"/>
		<reference ref_id="1179899" ref_url="https://bugzilla.suse.com/1179899" source="BUGZILLA"/>
		<reference ref_id="1179900" ref_url="https://bugzilla.suse.com/1179900" source="BUGZILLA"/>
		<reference ref_id="1179901" ref_url="https://bugzilla.suse.com/1179901" source="BUGZILLA"/>
		<reference ref_id="1179902" ref_url="https://bugzilla.suse.com/1179902" source="BUGZILLA"/>
		<reference ref_id="1179903" ref_url="https://bugzilla.suse.com/1179903" source="BUGZILLA"/>
		<reference ref_id="1180451" ref_url="https://bugzilla.suse.com/1180451" source="BUGZILLA"/>
		<reference ref_id="1180454" ref_url="https://bugzilla.suse.com/1180454" source="BUGZILLA"/>
		<reference ref_id="1180461" ref_url="https://bugzilla.suse.com/1180461" source="BUGZILLA"/>
		<reference ref_id="1181452" ref_url="https://bugzilla.suse.com/1181452" source="BUGZILLA"/>
		<reference ref_id="1182252" ref_url="https://bugzilla.suse.com/1182252" source="BUGZILLA"/>
		<reference ref_id="1183511" ref_url="https://bugzilla.suse.com/1183511" source="BUGZILLA"/>
		<reference ref_id="1184620" ref_url="https://bugzilla.suse.com/1184620" source="BUGZILLA"/>
		<reference ref_id="1184794" ref_url="https://bugzilla.suse.com/1184794" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-16590" ref_url="https://www.suse.com/security/cve/CVE-2020-16590/" source="CVE"/>
		<reference ref_id="CVE-2020-16591" ref_url="https://www.suse.com/security/cve/CVE-2020-16591/" source="CVE"/>
		<reference ref_id="CVE-2020-16592" ref_url="https://www.suse.com/security/cve/CVE-2020-16592/" source="CVE"/>
		<reference ref_id="CVE-2020-16593" ref_url="https://www.suse.com/security/cve/CVE-2020-16593/" source="CVE"/>
		<reference ref_id="CVE-2020-16598" ref_url="https://www.suse.com/security/cve/CVE-2020-16598/" source="CVE"/>
		<reference ref_id="CVE-2020-16599" ref_url="https://www.suse.com/security/cve/CVE-2020-16599/" source="CVE"/>
		<reference ref_id="CVE-2020-35448" ref_url="https://www.suse.com/security/cve/CVE-2020-35448/" source="CVE"/>
		<reference ref_id="CVE-2020-35493" ref_url="https://www.suse.com/security/cve/CVE-2020-35493/" source="CVE"/>
		<reference ref_id="CVE-2020-35496" ref_url="https://www.suse.com/security/cve/CVE-2020-35496/" source="CVE"/>
		<reference ref_id="CVE-2020-35507" ref_url="https://www.suse.com/security/cve/CVE-2020-35507/" source="CVE"/>
		<reference ref_id="CVE-2021-20197" ref_url="https://www.suse.com/security/cve/CVE-2021-20197/" source="CVE"/>
		<reference ref_id="CVE-2021-20284" ref_url="https://www.suse.com/security/cve/CVE-2021-20284/" source="CVE"/>
		<reference ref_id="CVE-2021-3487" ref_url="https://www.suse.com/security/cve/CVE-2021-3487/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

Update to binutils 2.37:

* The GNU Binutils sources now requires a C99 compiler and library to
  build.
* Support for Realm Management Extension (RME) for AArch64 has been
  added.
* A new linker option '-z report-relative-reloc' for x86 ELF targets
  has been added to report dynamic relative relocations.
* A new linker option '-z start-stop-gc' has been added to disable
  special treatment of __start_*/__stop_* references when
  --gc-sections.
* A new linker options '-Bno-symbolic' has been added which will
  cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
* The readelf tool has a new command line option which can be used to
  specify how the numeric values of symbols are reported.
  --sym-base=0|8|10|16 tells readelf to display the values in base 8,
  base 10 or base 16.  A sym base of 0 represents the default action
  of displaying values under 10000 in base 10 and values above that in
  base 16.
* A new format has been added to the nm program.  Specifying
  '--format=just-symbols' (or just using -j) will tell the program to
  only display symbol names and nothing else.
* A new command line option '--keep-section-symbols' has been added to
  objcopy and strip.  This stops the removal of unused section symbols
  when the file is copied.  Removing these symbols saves space, but
  sometimes they are needed by other tools.
* The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
  supported by objcopy now make undefined symbols weak on targets that
  support weak symbols. 
* Readelf and objdump can now display and use the contents of .debug_sup
  sections.
* Readelf and objdump will now follow links to separate debug info
  files by default.  This behaviour can be stopped via the use of the
  new '-wN' or '--debug-dump=no-follow-links' options for readelf and
  the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
  the old behaviour can be restored by the use of the
  '--enable-follow-debug-links=no' configure time option.

  The semantics of the =follow-links option have also been slightly
  changed.  When enabled, the option allows for the loading of symbol
  tables and string tables from the separate files which can be used
  to enhance the information displayed when dumping other sections,
  but it does not automatically imply that information from the
  separate files should be displayed.

  If other debug section display options are also enabled (eg
  '--debug-dump=info') then the contents of matching sections in both
  the main file and the separate debuginfo file *will* be displayed.
  This is because in most cases the debug section will only be present
  in one of the files.

  If however non-debug section display options are enabled (eg
  '--sections') then the contents of matching parts of the separate
  debuginfo file will *not* be displayed.  This is because in most
  cases the user probably only wanted to load the symbol information
  from the separate debuginfo file.  In order to change this behaviour
  a new command line option --process-links can be used.  This will
  allow di0pslay options to applied to both the main file and any
  separate debuginfo files.

* Nm has a new command line option: '--quiet'.  This suppresses 'no
  symbols' diagnostic.

Update to binutils 2.36:

New features in the Assembler:

- General:

   * When setting the link order attribute of ELF sections, it is now
     possible to use a numeric section index instead of symbol name.
   * Added a .nop directive to generate a single no-op instruction in
     a target neutral manner.  This instruction does have an effect on
     DWARF line number generation, if that is active.
   * Removed --reduce-memory-overheads and --hash-size as gas now
     uses hash tables that can be expand and shrink automatically.

- X86/x86_64:

   * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
     Locker instructions. 
   * Support non-absolute segment values for lcall and ljmp.
   * Add {disp16} pseudo prefix to x86 assembler.
   * Configure with --enable-x86-used-note by default for Linux/x86.

-  ARM/AArch64:

   * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
     Cortex-R82, Neoverse V1, and Neoverse N2 cores.
   * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
     Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
     Stack Recorder Extension) and BRBE (Branch Record Buffer
     Extension) system registers.
   * Add support for Armv8-R and Armv8.7-A ISA extensions.
   * Add support for DSB memory nXS barrier, WFET and WFIT
     instruction for Armv8.7.
   * Add support for +csre feature for -march. Add CSR PDEC
     instruction for CSRE feature in AArch64.
   * Add support for +flagm feature for -march in Armv8.4 AArch64.
   * Add support for +ls64 feature for -march in Armv8.7
     AArch64. Add atomic 64-byte load/store instructions for this
     feature. 
   * Add support for +pauth (Pointer Authentication) feature for
     -march in AArch64.

New features in the Linker:

  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new 
     command-line option --ctf-share-types describes how to do this:
     its default value, share-unconflicted, produces the most compact
     output.
  * The linker now omits the 'variable section' from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.

New features in other binary tools:

  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
    --no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.

The following security fixes are addressed by the update:

- CVE-2021-20197: Fixed a race condition which allows users to own arbitrary files (bsc#1181452).
- CVE-2021-20284: Fixed a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c (bsc#1183511).
- CVE-2021-3487: Fixed a denial of service via excessive debug section size causing excessive memory consumption in bfd's dwarf2.c read_section() (bsc#1184620).
- CVE-2020-35448: Fixed a heap-based buffer over-read in bfd_getl_signed_32() in libbfd.c (bsc#1184794).
- CVE-2020-16590: Fixed a double free vulnerability in process_symbol_table() (bsc#1179898).
- CVE-2020-16591: Fixed an invalid read in process_symbol_table() (bsc#1179899).
- CVE-2020-16592: Fixed an use-after-free in bfd_hash_lookup() (bsc#1179900).
- CVE-2020-16593: Fixed a null pointer dereference in scan_unit_for_symbols() (bsc#1179901).
- CVE-2020-16598: Fixed a null pointer dereference in debug_get_real_type() (bsc#1179902).
- CVE-2020-16599: Fixed a null pointer dereference in _bfd_elf_get_symbol_version_string() (bsc#1179903)
- CVE-2020-35493: Fixed heap-based buffer overflow in bfd_pef_parse_function_stubs function in bfd/pef.c via crafted PEF file (bsc#1180451).
- CVE-2020-35496: Fixed multiple null pointer dereferences in bfd module due to not checking return value of bfd_malloc (bsc#1180454).
- CVE-2020-35507: Fixed a null pointer dereference in bfd_pef_parse_function_stubs() (bsc#1180461).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-04"/>
	<updated date="2021-11-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179898">SUSE bug 1179898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179899">SUSE bug 1179899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179900">SUSE bug 1179900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179901">SUSE bug 1179901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179902">SUSE bug 1179902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179903">SUSE bug 1179903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180451">SUSE bug 1180451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180454">SUSE bug 1180454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180461">SUSE bug 1180461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181452">SUSE bug 1181452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182252">SUSE bug 1182252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183511">SUSE bug 1183511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184620">SUSE bug 1184620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184794">SUSE bug 1184794</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16590/">CVE-2020-16590</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16591/">CVE-2020-16591</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16592/">CVE-2020-16592</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16593/">CVE-2020-16593</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16598/">CVE-2020-16598</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16599/">CVE-2020-16599</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-35448/">CVE-2020-35448</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35493/">CVE-2020-35493</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35496/">CVE-2020-35496</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35507/">CVE-2020-35507</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20197/">CVE-2021-20197</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20284/">CVE-2021-20284</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3487/">CVE-2021-3487</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653459" comment="binutils-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653460" comment="binutils-devel-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653461" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653462" comment="libctf0-2.37-7.21.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139342" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1183909" ref_url="https://bugzilla.suse.com/1183909" source="BUGZILLA"/>
		<reference ref_id="1184519" ref_url="https://bugzilla.suse.com/1184519" source="BUGZILLA"/>
		<reference ref_id="1188941" ref_url="https://bugzilla.suse.com/1188941" source="BUGZILLA"/>
		<reference ref_id="1191473" ref_url="https://bugzilla.suse.com/1191473" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20294" ref_url="https://www.suse.com/security/cve/CVE-2021-20294/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009711.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

- For compatibility on old code stream that expect 'brcl 0,label' to
  not be disassembled as 'jgnop label' on s390x.  (bsc#1192267)
  This reverts IBM zSeries HLASM support for now.
- Fixed that ppc64 optflags did not enable LTO (bsc#1188941).
- Fix empty man-pages from broken release tarball
- Fixed a memory corruption with rpath option (bsc#1191473).
- Fixed slow performance of stripping some binaries (bsc#1183909).

Security issue fixed:

- CVE-2021-20294: Fixed out-of-bounds write in print_dynamic_symbol in readelf (bnc#1184519)

		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-09"/>
	<updated date="2021-11-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1183909">SUSE bug 1183909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184519">SUSE bug 1184519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188941">SUSE bug 1188941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191473">SUSE bug 1191473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20294/">CVE-2021-20294</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009654364" comment="binutils-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654365" comment="binutils-devel-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654320" comment="binutils-devel-32bit-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654366" comment="libctf-nobfd0-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654367" comment="libctf0-2.37-7.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139343" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1192250" ref_url="https://bugzilla.suse.com/1192250" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-38503" ref_url="https://www.suse.com/security/cve/CVE-2021-38503/" source="CVE"/>
		<reference ref_id="CVE-2021-38504" ref_url="https://www.suse.com/security/cve/CVE-2021-38504/" source="CVE"/>
		<reference ref_id="CVE-2021-38505" ref_url="https://www.suse.com/security/cve/CVE-2021-38505/" source="CVE"/>
		<reference ref_id="CVE-2021-38506" ref_url="https://www.suse.com/security/cve/CVE-2021-38506/" source="CVE"/>
		<reference ref_id="CVE-2021-38507" ref_url="https://www.suse.com/security/cve/CVE-2021-38507/" source="CVE"/>
		<reference ref_id="CVE-2021-38508" ref_url="https://www.suse.com/security/cve/CVE-2021-38508/" source="CVE"/>
		<reference ref_id="CVE-2021-38509" ref_url="https://www.suse.com/security/cve/CVE-2021-38509/" source="CVE"/>
		<reference ref_id="CVE-2021-38510" ref_url="https://www.suse.com/security/cve/CVE-2021-38510/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3651-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009712.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

MozillaFirefox was updated to Extended Support Release 91.3.0 ESR

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-49 (bsc#1192250)

  * CVE-2021-38503: iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504: Use-after-free in file picker dialog
  * CVE-2021-38505: Windows 10 Cloud Clipboard may have recorded sensitive user data
  * CVE-2021-38506: Firefox could be coaxed into going into fullscreen mode without notification or warning
  * CVE-2021-38507: Opportunistic Encryption in HTTP2 could be used to bypass the Same-Origin-Policy on services hosted on other ports
  * CVE-2021-38508: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing
  * CVE-2021-38509: Javascript alert box could have been spoofed onto an arbitrary domain
  * CVE-2021-38510: Download Protections were bypassed by .inetloc files on Mac OS
  * MOZ-2021-0008: Use-after-free in HTTP2 Session object
  * MOZ-2021-0007: Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-10"/>
	<updated date="2021-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192250">SUSE bug 1192250</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38503/">CVE-2021-38503</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38504/">CVE-2021-38504</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38505/">CVE-2021-38505</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38506/">CVE-2021-38506</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38507/">CVE-2021-38507</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38508/">CVE-2021-38508</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38509/">CVE-2021-38509</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38510/">CVE-2021-38510</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009654098" comment="MozillaFirefox-91.3.0-150.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654099" comment="MozillaFirefox-devel-91.3.0-150.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654100" comment="MozillaFirefox-translations-common-91.3.0-150.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654101" comment="MozillaFirefox-translations-other-91.3.0-150.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139344" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188278" ref_url="https://bugzilla.suse.com/1188278" source="BUGZILLA"/>
		<reference ref_id="1188279" ref_url="https://bugzilla.suse.com/1188279" source="BUGZILLA"/>
		<reference ref_id="1190558" ref_url="https://bugzilla.suse.com/1190558" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30640" ref_url="https://www.suse.com/security/cve/CVE-2021-30640/" source="CVE"/>
		<reference ref_id="CVE-2021-33037" ref_url="https://www.suse.com/security/cve/CVE-2021-33037/" source="CVE"/>
		<reference ref_id="CVE-2021-41079" ref_url="https://www.suse.com/security/cve/CVE-2021-41079/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009733.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279).
- CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278).
- CVE-2021-41079: Fixed a denial of service caused by an unexpected TLS packet (bsc#1190558).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-16"/>
	<updated date="2021-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188278">SUSE bug 1188278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188279">SUSE bug 1188279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190558">SUSE bug 1190558</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30640/">CVE-2021-30640</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-33037/">CVE-2021-33037</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41079/">CVE-2021-41079</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653671" comment="tomcat-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653672" comment="tomcat-admin-webapps-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653673" comment="tomcat-el-3_0-api-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653674" comment="tomcat-jsp-2_3-api-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653675" comment="tomcat-lib-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653676" comment="tomcat-servlet-4_0-api-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653677" comment="tomcat-webapps-9.0.36-4.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139345" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1191901" ref_url="https://bugzilla.suse.com/1191901" source="BUGZILLA"/>
		<reference ref_id="1191903" ref_url="https://bugzilla.suse.com/1191903" source="BUGZILLA"/>
		<reference ref_id="1191904" ref_url="https://bugzilla.suse.com/1191904" source="BUGZILLA"/>
		<reference ref_id="1191906" ref_url="https://bugzilla.suse.com/1191906" source="BUGZILLA"/>
		<reference ref_id="1191909" ref_url="https://bugzilla.suse.com/1191909" source="BUGZILLA"/>
		<reference ref_id="1191910" ref_url="https://bugzilla.suse.com/1191910" source="BUGZILLA"/>
		<reference ref_id="1191911" ref_url="https://bugzilla.suse.com/1191911" source="BUGZILLA"/>
		<reference ref_id="1191912" ref_url="https://bugzilla.suse.com/1191912" source="BUGZILLA"/>
		<reference ref_id="1191913" ref_url="https://bugzilla.suse.com/1191913" source="BUGZILLA"/>
		<reference ref_id="1191914" ref_url="https://bugzilla.suse.com/1191914" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-35550" ref_url="https://www.suse.com/security/cve/CVE-2021-35550/" source="CVE"/>
		<reference ref_id="CVE-2021-35556" ref_url="https://www.suse.com/security/cve/CVE-2021-35556/" source="CVE"/>
		<reference ref_id="CVE-2021-35559" ref_url="https://www.suse.com/security/cve/CVE-2021-35559/" source="CVE"/>
		<reference ref_id="CVE-2021-35561" ref_url="https://www.suse.com/security/cve/CVE-2021-35561/" source="CVE"/>
		<reference ref_id="CVE-2021-35564" ref_url="https://www.suse.com/security/cve/CVE-2021-35564/" source="CVE"/>
		<reference ref_id="CVE-2021-35565" ref_url="https://www.suse.com/security/cve/CVE-2021-35565/" source="CVE"/>
		<reference ref_id="CVE-2021-35567" ref_url="https://www.suse.com/security/cve/CVE-2021-35567/" source="CVE"/>
		<reference ref_id="CVE-2021-35578" ref_url="https://www.suse.com/security/cve/CVE-2021-35578/" source="CVE"/>
		<reference ref_id="CVE-2021-35586" ref_url="https://www.suse.com/security/cve/CVE-2021-35586/" source="CVE"/>
		<reference ref_id="CVE-2021-35603" ref_url="https://www.suse.com/security/cve/CVE-2021-35603/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009728.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

Update to 11.0.13+8 (October 2021 CPU)

- CVE-2021-35550, bsc#1191901: Update the default enabled cipher suites preference
- CVE-2021-35565, bsc#1191909: com.sun.net.HttpsServer spins on TLS session close
- CVE-2021-35556, bsc#1191910: Richer Text Editors
- CVE-2021-35559, bsc#1191911: Enhanced style for RTF kit
- CVE-2021-35561, bsc#1191912: Better hashing support
- CVE-2021-35564, bsc#1191913: Improve Keystore integrity
- CVE-2021-35567, bsc#1191903: More Constrained Delegation
- CVE-2021-35578, bsc#1191904: Improve TLS client handshaking
- CVE-2021-35586, bsc#1191914: Better BMP support
- CVE-2021-35603, bsc#1191906: Better session identification
- Improve Stream handling for SSL
- Improve requests of certificates
- Correct certificate requests
- Enhance DTLS client handshake
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-16"/>
	<updated date="2021-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191901">SUSE bug 1191901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191903">SUSE bug 1191903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191904">SUSE bug 1191904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191906">SUSE bug 1191906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191909">SUSE bug 1191909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191910">SUSE bug 1191910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191911">SUSE bug 1191911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191912">SUSE bug 1191912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191913">SUSE bug 1191913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191914">SUSE bug 1191914</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35550/">CVE-2021-35550</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35556/">CVE-2021-35556</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35559/">CVE-2021-35559</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35561/">CVE-2021-35561</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-35564/">CVE-2021-35564</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35565/">CVE-2021-35565</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35567/">CVE-2021-35567</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35578/">CVE-2021-35578</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35586/">CVE-2021-35586</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35603/">CVE-2021-35603</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653316" comment="java-11-openjdk-11.0.13.0-3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653317" comment="java-11-openjdk-demo-11.0.13.0-3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653318" comment="java-11-openjdk-devel-11.0.13.0-3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653319" comment="java-11-openjdk-headless-11.0.13.0-3.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139346" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1014440" ref_url="https://bugzilla.suse.com/1014440" source="BUGZILLA"/>
		<reference ref_id="1192284" ref_url="https://bugzilla.suse.com/1192284" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-2124" ref_url="https://www.suse.com/security/cve/CVE-2016-2124/" source="CVE"/>
		<reference ref_id="CVE-2020-25717" ref_url="https://www.suse.com/security/cve/CVE-2020-25717/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009729.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos (bsc#1014440).
- CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members (bsc#1192284).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-16"/>
	<updated date="2021-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1014440">SUSE bug 1014440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192284">SUSE bug 1192284</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2124/">CVE-2016-2124</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25717/">CVE-2020-25717</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009654913" comment="libdcerpc-binding0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654914" comment="libdcerpc-binding0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654915" comment="libdcerpc-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654916" comment="libdcerpc-samr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654917" comment="libdcerpc-samr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654918" comment="libdcerpc0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654919" comment="libdcerpc0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654920" comment="libndr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654921" comment="libndr-krb5pac-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654922" comment="libndr-krb5pac0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654923" comment="libndr-krb5pac0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654924" comment="libndr-nbt-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654925" comment="libndr-nbt0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654926" comment="libndr-nbt0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654927" comment="libndr-standard-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654928" comment="libndr-standard0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654929" comment="libndr-standard0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654930" comment="libndr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654931" comment="libndr0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654932" comment="libnetapi-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654933" comment="libnetapi0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654934" comment="libnetapi0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654935" comment="libsamba-credentials-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654936" comment="libsamba-credentials0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654937" comment="libsamba-credentials0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654938" comment="libsamba-errors-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654939" comment="libsamba-errors0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654940" comment="libsamba-errors0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654941" comment="libsamba-hostconfig-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654942" comment="libsamba-hostconfig0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654943" comment="libsamba-hostconfig0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654944" comment="libsamba-passdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654945" comment="libsamba-passdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654946" comment="libsamba-passdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654947" comment="libsamba-policy-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654948" comment="libsamba-policy-python3-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654949" comment="libsamba-policy0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654950" comment="libsamba-policy0-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654951" comment="libsamba-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654952" comment="libsamba-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654953" comment="libsamba-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654954" comment="libsamdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654955" comment="libsamdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654956" comment="libsamdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654957" comment="libsmbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654958" comment="libsmbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654959" comment="libsmbconf-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654960" comment="libsmbconf0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654961" comment="libsmbconf0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654962" comment="libsmbldap-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654963" comment="libsmbldap2-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654964" comment="libsmbldap2-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654965" comment="libtevent-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654966" comment="libtevent-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654967" comment="libtevent-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654968" comment="libwbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654969" comment="libwbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654970" comment="libwbclient0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654971" comment="samba-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654972" comment="samba-ad-dc-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654973" comment="samba-client-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654974" comment="samba-core-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654975" comment="samba-dsdb-modules-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654976" comment="samba-libs-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654977" comment="samba-libs-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654978" comment="samba-libs-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654979" comment="samba-libs-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654980" comment="samba-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654981" comment="samba-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654982" comment="samba-winbind-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654983" comment="samba-winbind-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139347" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1191937" ref_url="https://bugzilla.suse.com/1191937" source="BUGZILLA"/>
		<reference ref_id="1192063" ref_url="https://bugzilla.suse.com/1192063" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30846" ref_url="https://www.suse.com/security/cve/CVE-2021-30846/" source="CVE"/>
		<reference ref_id="CVE-2021-30851" ref_url="https://www.suse.com/security/cve/CVE-2021-30851/" source="CVE"/>
		<reference ref_id="CVE-2021-42762" ref_url="https://www.suse.com/security/cve/CVE-2021-42762/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009770.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- CVE-2021-30846: Fixed memory corruption issue that could lead to arbitrary code execution when processing maliciously crafted web content (bsc#1192063).
- CVE-2021-30851: Fixed memory corruption vulnerability that could lead to arbitrary code execution when processing maliciously crafted web content (bsc#1192063).   
- CVE-2021-42762: Updated seccomp rules with latest changes from flatpak (bsc#1191937).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-23"/>
	<updated date="2021-11-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191937">SUSE bug 1191937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192063">SUSE bug 1192063</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30846/">CVE-2021-30846</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30851/">CVE-2021-30851</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42762/">CVE-2021-42762</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657280" comment="libjavascriptcoregtk-4_0-18-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657281" comment="libwebkit2gtk-4_0-37-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657282" comment="libwebkit2gtk3-lang-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657283" comment="typelib-1_0-JavaScriptCore-4_0-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657284" comment="typelib-1_0-WebKit2-4_0-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657285" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657286" comment="webkit2gtk-4_0-injected-bundles-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657287" comment="webkit2gtk3-devel-2.34.1-3.87.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139348" version="1" class="patch">
	<metadata>
		<title>Security update for netcdf (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1191856" ref_url="https://bugzilla.suse.com/1191856" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20005" ref_url="https://www.suse.com/security/cve/CVE-2019-20005/" source="CVE"/>
		<reference ref_id="CVE-2019-20006" ref_url="https://www.suse.com/security/cve/CVE-2019-20006/" source="CVE"/>
		<reference ref_id="CVE-2019-20007" ref_url="https://www.suse.com/security/cve/CVE-2019-20007/" source="CVE"/>
		<reference ref_id="CVE-2019-20198" ref_url="https://www.suse.com/security/cve/CVE-2019-20198/" source="CVE"/>
		<reference ref_id="CVE-2019-20199" ref_url="https://www.suse.com/security/cve/CVE-2019-20199/" source="CVE"/>
		<reference ref_id="CVE-2019-20200" ref_url="https://www.suse.com/security/cve/CVE-2019-20200/" source="CVE"/>
		<reference ref_id="CVE-2019-20201" ref_url="https://www.suse.com/security/cve/CVE-2019-20201/" source="CVE"/>
		<reference ref_id="CVE-2019-20202" ref_url="https://www.suse.com/security/cve/CVE-2019-20202/" source="CVE"/>
		<reference ref_id="CVE-2021-26220" ref_url="https://www.suse.com/security/cve/CVE-2021-26220/" source="CVE"/>
		<reference ref_id="CVE-2021-26221" ref_url="https://www.suse.com/security/cve/CVE-2021-26221/" source="CVE"/>
		<reference ref_id="CVE-2021-26222" ref_url="https://www.suse.com/security/cve/CVE-2021-26222/" source="CVE"/>
		<reference ref_id="CVE-2021-30485" ref_url="https://www.suse.com/security/cve/CVE-2021-30485/" source="CVE"/>
		<reference ref_id="CVE-2021-31229" ref_url="https://www.suse.com/security/cve/CVE-2021-31229/" source="CVE"/>
		<reference ref_id="CVE-2021-31347" ref_url="https://www.suse.com/security/cve/CVE-2021-31347/" source="CVE"/>
		<reference ref_id="CVE-2021-31348" ref_url="https://www.suse.com/security/cve/CVE-2021-31348/" source="CVE"/>
		<reference ref_id="CVE-2021-31598" ref_url="https://www.suse.com/security/cve/CVE-2021-31598/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009780.html" source="SUSE-SU"/>
		<description>
This update for netcdf fixes the following issues:

- Fixed multiple vulnerabilities in ezXML:
    CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
    CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
    CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
    CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
   Note:
   * CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23
     not relevant for netcdf: code isn't used.
   * CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14
     Issue cannot be reproduced and no patch is available upstream.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-30"/>
	<updated date="2021-11-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191856">SUSE bug 1191856</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20005/">CVE-2019-20005</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20006/">CVE-2019-20006</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20007/">CVE-2019-20007</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20198/">CVE-2019-20198</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20199/">CVE-2019-20199</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20200/">CVE-2019-20200</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20201/">CVE-2019-20201</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20202/">CVE-2019-20202</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26220/">CVE-2021-26220</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26221/">CVE-2021-26221</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26222/">CVE-2021-26222</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-30485/">CVE-2021-30485</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31229/">CVE-2021-31229</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31347/">CVE-2021-31347</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31348/">CVE-2021-31348</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31598/">CVE-2021-31598</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657795" comment="libnetcdf-gnu-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657796" comment="libnetcdf-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657797" comment="libnetcdf-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657798" comment="libnetcdf-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657799" comment="libnetcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657800" comment="libnetcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657801" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657802" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657803" comment="netcdf-gnu-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657804" comment="netcdf-gnu-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657805" comment="netcdf-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657806" comment="netcdf-gnu-mpich-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657807" comment="netcdf-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657808" comment="netcdf-gnu-mvapich2-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657809" comment="netcdf-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657810" comment="netcdf-gnu-openmpi2-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657811" comment="netcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657812" comment="netcdf_4_6_1-gnu-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657813" comment="netcdf_4_6_1-gnu-hpc-devel-static-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657814" comment="netcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657815" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657816" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657817" comment="netcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657818" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657819" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657820" comment="netcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657821" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657822" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139349" version="1" class="patch">
	<metadata>
		<title>Security update for ruby2.5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188160" ref_url="https://bugzilla.suse.com/1188160" source="BUGZILLA"/>
		<reference ref_id="1188161" ref_url="https://bugzilla.suse.com/1188161" source="BUGZILLA"/>
		<reference ref_id="1190375" ref_url="https://bugzilla.suse.com/1190375" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31799" ref_url="https://www.suse.com/security/cve/CVE-2021-31799/" source="CVE"/>
		<reference ref_id="CVE-2021-31810" ref_url="https://www.suse.com/security/cve/CVE-2021-31810/" source="CVE"/>
		<reference ref_id="CVE-2021-32066" ref_url="https://www.suse.com/security/cve/CVE-2021-32066/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009795.html" source="SUSE-SU"/>
		<description>
This update for ruby2.5 fixes the following issues:

- CVE-2021-31799: Fixed Command injection vulnerability in RDoc (bsc#1190375).
- CVE-2021-31810: Fixed trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161).
- CVE-2021-32066: Fixed StartTLS stripping vulnerability in Net:IMAP (bsc#1188160).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-01"/>
	<updated date="2021-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188160">SUSE bug 1188160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188161">SUSE bug 1188161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190375">SUSE bug 1190375</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31799/">CVE-2021-31799</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-31810/">CVE-2021-31810</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-32066/">CVE-2021-32066</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657505" comment="libruby2_5-2_5-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657506" comment="ruby2.5-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657507" comment="ruby2.5-devel-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657508" comment="ruby2.5-devel-extra-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657509" comment="ruby2.5-stdlib-2.5.9-4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139350" version="1" class="patch">
	<metadata>
		<title>Security update for python-Pygments (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1184812" ref_url="https://bugzilla.suse.com/1184812" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27291" ref_url="https://www.suse.com/security/cve/CVE-2021-27291/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009782.html" source="SUSE-SU"/>
		<description>
This update for python-Pygments fixes the following issues:

- CVE-2021-27291: Fixed ReDoS via crafted malicious input (bsc#1184812).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-01"/>
	<updated date="2021-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184812">SUSE bug 1184812</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27291/">CVE-2021-27291</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657672" comment="python3-Pygments-2.6.1-7.10.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139351" version="1" class="patch">
	<metadata>
		<title>Security update for poppler (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1092945" ref_url="https://bugzilla.suse.com/1092945" source="BUGZILLA"/>
		<reference ref_id="1102531" ref_url="https://bugzilla.suse.com/1102531" source="BUGZILLA"/>
		<reference ref_id="1107597" ref_url="https://bugzilla.suse.com/1107597" source="BUGZILLA"/>
		<reference ref_id="1114966" ref_url="https://bugzilla.suse.com/1114966" source="BUGZILLA"/>
		<reference ref_id="1115185" ref_url="https://bugzilla.suse.com/1115185" source="BUGZILLA"/>
		<reference ref_id="1115186" ref_url="https://bugzilla.suse.com/1115186" source="BUGZILLA"/>
		<reference ref_id="1115187" ref_url="https://bugzilla.suse.com/1115187" source="BUGZILLA"/>
		<reference ref_id="1115626" ref_url="https://bugzilla.suse.com/1115626" source="BUGZILLA"/>
		<reference ref_id="1120495" ref_url="https://bugzilla.suse.com/1120495" source="BUGZILLA"/>
		<reference ref_id="1120496" ref_url="https://bugzilla.suse.com/1120496" source="BUGZILLA"/>
		<reference ref_id="1120939" ref_url="https://bugzilla.suse.com/1120939" source="BUGZILLA"/>
		<reference ref_id="1120956" ref_url="https://bugzilla.suse.com/1120956" source="BUGZILLA"/>
		<reference ref_id="1124150" ref_url="https://bugzilla.suse.com/1124150" source="BUGZILLA"/>
		<reference ref_id="1127329" ref_url="https://bugzilla.suse.com/1127329" source="BUGZILLA"/>
		<reference ref_id="1129202" ref_url="https://bugzilla.suse.com/1129202" source="BUGZILLA"/>
		<reference ref_id="1130229" ref_url="https://bugzilla.suse.com/1130229" source="BUGZILLA"/>
		<reference ref_id="1131696" ref_url="https://bugzilla.suse.com/1131696" source="BUGZILLA"/>
		<reference ref_id="1131722" ref_url="https://bugzilla.suse.com/1131722" source="BUGZILLA"/>
		<reference ref_id="1142465" ref_url="https://bugzilla.suse.com/1142465" source="BUGZILLA"/>
		<reference ref_id="1143950" ref_url="https://bugzilla.suse.com/1143950" source="BUGZILLA"/>
		<reference ref_id="1179163" ref_url="https://bugzilla.suse.com/1179163" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18267" ref_url="https://www.suse.com/security/cve/CVE-2017-18267/" source="CVE"/>
		<reference ref_id="CVE-2018-13988" ref_url="https://www.suse.com/security/cve/CVE-2018-13988/" source="CVE"/>
		<reference ref_id="CVE-2018-16646" ref_url="https://www.suse.com/security/cve/CVE-2018-16646/" source="CVE"/>
		<reference ref_id="CVE-2018-18897" ref_url="https://www.suse.com/security/cve/CVE-2018-18897/" source="CVE"/>
		<reference ref_id="CVE-2018-19058" ref_url="https://www.suse.com/security/cve/CVE-2018-19058/" source="CVE"/>
		<reference ref_id="CVE-2018-19059" ref_url="https://www.suse.com/security/cve/CVE-2018-19059/" source="CVE"/>
		<reference ref_id="CVE-2018-19060" ref_url="https://www.suse.com/security/cve/CVE-2018-19060/" source="CVE"/>
		<reference ref_id="CVE-2018-19149" ref_url="https://www.suse.com/security/cve/CVE-2018-19149/" source="CVE"/>
		<reference ref_id="CVE-2018-20481" ref_url="https://www.suse.com/security/cve/CVE-2018-20481/" source="CVE"/>
		<reference ref_id="CVE-2018-20551" ref_url="https://www.suse.com/security/cve/CVE-2018-20551/" source="CVE"/>
		<reference ref_id="CVE-2018-20650" ref_url="https://www.suse.com/security/cve/CVE-2018-20650/" source="CVE"/>
		<reference ref_id="CVE-2018-20662" ref_url="https://www.suse.com/security/cve/CVE-2018-20662/" source="CVE"/>
		<reference ref_id="CVE-2019-10871" ref_url="https://www.suse.com/security/cve/CVE-2019-10871/" source="CVE"/>
		<reference ref_id="CVE-2019-10872" ref_url="https://www.suse.com/security/cve/CVE-2019-10872/" source="CVE"/>
		<reference ref_id="CVE-2019-14494" ref_url="https://www.suse.com/security/cve/CVE-2019-14494/" source="CVE"/>
		<reference ref_id="CVE-2019-7310" ref_url="https://www.suse.com/security/cve/CVE-2019-7310/" source="CVE"/>
		<reference ref_id="CVE-2019-9200" ref_url="https://www.suse.com/security/cve/CVE-2019-9200/" source="CVE"/>
		<reference ref_id="CVE-2019-9631" ref_url="https://www.suse.com/security/cve/CVE-2019-9631/" source="CVE"/>
		<reference ref_id="CVE-2019-9903" ref_url="https://www.suse.com/security/cve/CVE-2019-9903/" source="CVE"/>
		<reference ref_id="CVE-2019-9959" ref_url="https://www.suse.com/security/cve/CVE-2019-9959/" source="CVE"/>
		<reference ref_id="CVE-2020-27778" ref_url="https://www.suse.com/security/cve/CVE-2020-27778/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<description>
This update for poppler fixes the following issues:

- CVE-2017-18267: Fixed an infinite recursion that would allow remote attackers to cause a denial of service (bsc#1092945).
- CVE-2018-13988: Added an improper implementation check which otherwise could allow buffer overflows, memory corruption, and denial of service (bsc#1102531).
- CVE-2018-16646: Fixed an infinite recursion which could allow a denial-of-service attack via a specially crafted PDF file (bsc#1107597).
- CVE-2018-18897: Fixed a memory leak (bsc#1114966).
- CVE-2018-19058: Fixed a bug which could allow a denial-of-service attack via a specially crafted PDF file (bsc#1115187).
- CVE-2018-19059: Fixed an out-of-bounds read access which could allow a denial-of-service attack (bsc#1115186).
- CVE-2018-19060: Fixed a NULL pointer dereference which could allow a denial-of-service attack (bsc#1115185).
- CVE-2018-19149: Fixed a NULL pointer dereference which could allow a denial-of-service attack (bsc#1115626).
- CVE-2018-20481: Fixed a NULL pointer dereference while handling unallocated XRef entries which could allow a denial-of-service attack (bsc#1120495).
- CVE-2018-20551: Fixed a reachable assertion which could allow a denial-of-service attack through specially crafted PDF files (bsc#1120496).
- CVE-2018-20650: Fixed a reachable assertion which could allow denial-of-service through specially crafted PDF files (bsc#1120939).
- CVE-2018-20662: Fixed a bug which could potentially crash the running process by SIGABRT resulting in a denial-of-service attack through a specially crafted PDF file (bsc#1120956).
- CVE-2019-10871: Fixed a heap-based buffer  over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc (bsc#1131696).
- CVE-2019-10872: Fixed a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc (bsc#1131722).
- CVE-2019-14494: Fixed a divide-by-zero error in the function SplashOutputDev::tilingPatternFill (bsc#1143950).
- CVE-2019-7310: Fixed a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) that allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document (bsc#1124150).
- CVE-2019-9200: Fixed a heap-based buffer underwrite which could allow denial-of-service attack through a specially crafted PDF file (bsc#1127329)
- CVE-2019-9631: Fixed a heap-based buffer over-read  in the CairoRescaleBox.cc downsample_row_box_filter function (bsc#1129202).
- CVE-2019-9903: Fixed excessive stack consumption in the Dict::find() method, which can be triggered by passing a crafted pdf file to the pdfunite binary (bsc#1130229).
- CVE-2019-9959: Fixed integer overflow that made it possible to allocate a large memory chunk on the heap with a size controlled by an attacker (bsc#1142465).
- CVE-2020-27778: Fixed buffer overflow vulnerability in pdftohtml (bsc#1179163).
  		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-01"/>
	<updated date="2021-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1092945">SUSE bug 1092945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102531">SUSE bug 1102531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107597">SUSE bug 1107597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114966">SUSE bug 1114966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115185">SUSE bug 1115185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115186">SUSE bug 1115186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115187">SUSE bug 1115187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115626">SUSE bug 1115626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120495">SUSE bug 1120495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120496">SUSE bug 1120496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120939">SUSE bug 1120939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120956">SUSE bug 1120956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124150">SUSE bug 1124150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127329">SUSE bug 1127329</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129202">SUSE bug 1129202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130229">SUSE bug 1130229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131696">SUSE bug 1131696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131722">SUSE bug 1131722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142465">SUSE bug 1142465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143950">SUSE bug 1143950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179163">SUSE bug 1179163</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18267/">CVE-2017-18267</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13988/">CVE-2018-13988</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16646/">CVE-2018-16646</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18897/">CVE-2018-18897</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19058/">CVE-2018-19058</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19059/">CVE-2018-19059</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19060/">CVE-2018-19060</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19149/">CVE-2018-19149</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20481/">CVE-2018-20481</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20551/">CVE-2018-20551</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20650/">CVE-2018-20650</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20662/">CVE-2018-20662</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10871/">CVE-2019-10871</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10872/">CVE-2019-10872</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14494/">CVE-2019-14494</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7310/">CVE-2019-7310</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9200/">CVE-2019-9200</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9631/">CVE-2019-9631</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9903/">CVE-2019-9903</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9959/">CVE-2019-9959</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27778/">CVE-2020-27778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658108" comment="libpoppler-cpp0-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658109" comment="libpoppler-devel-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658110" comment="libpoppler-glib-devel-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658111" comment="libpoppler-glib8-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658112" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658113" comment="poppler-tools-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658114" comment="typelib-1_0-Poppler-0_18-0.62.0-4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139352" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1100416" ref_url="https://bugzilla.suse.com/1100416" source="BUGZILLA"/>
		<reference ref_id="1108488" ref_url="https://bugzilla.suse.com/1108488" source="BUGZILLA"/>
		<reference ref_id="1129735" ref_url="https://bugzilla.suse.com/1129735" source="BUGZILLA"/>
		<reference ref_id="1129898" ref_url="https://bugzilla.suse.com/1129898" source="BUGZILLA"/>
		<reference ref_id="1133374" ref_url="https://bugzilla.suse.com/1133374" source="BUGZILLA"/>
		<reference ref_id="1136513" ref_url="https://bugzilla.suse.com/1136513" source="BUGZILLA"/>
		<reference ref_id="1171420" ref_url="https://bugzilla.suse.com/1171420" source="BUGZILLA"/>
		<reference ref_id="1176724" ref_url="https://bugzilla.suse.com/1176724" source="BUGZILLA"/>
		<reference ref_id="1177666" ref_url="https://bugzilla.suse.com/1177666" source="BUGZILLA"/>
		<reference ref_id="1181158" ref_url="https://bugzilla.suse.com/1181158" source="BUGZILLA"/>
		<reference ref_id="1184673" ref_url="https://bugzilla.suse.com/1184673" source="BUGZILLA"/>
		<reference ref_id="1184804" ref_url="https://bugzilla.suse.com/1184804" source="BUGZILLA"/>
		<reference ref_id="1185377" ref_url="https://bugzilla.suse.com/1185377" source="BUGZILLA"/>
		<reference ref_id="1185726" ref_url="https://bugzilla.suse.com/1185726" source="BUGZILLA"/>
		<reference ref_id="1185758" ref_url="https://bugzilla.suse.com/1185758" source="BUGZILLA"/>
		<reference ref_id="1185973" ref_url="https://bugzilla.suse.com/1185973" source="BUGZILLA"/>
		<reference ref_id="1186078" ref_url="https://bugzilla.suse.com/1186078" source="BUGZILLA"/>
		<reference ref_id="1186109" ref_url="https://bugzilla.suse.com/1186109" source="BUGZILLA"/>
		<reference ref_id="1186390" ref_url="https://bugzilla.suse.com/1186390" source="BUGZILLA"/>
		<reference ref_id="1186482" ref_url="https://bugzilla.suse.com/1186482" source="BUGZILLA"/>
		<reference ref_id="1186672" ref_url="https://bugzilla.suse.com/1186672" source="BUGZILLA"/>
		<reference ref_id="1188062" ref_url="https://bugzilla.suse.com/1188062" source="BUGZILLA"/>
		<reference ref_id="1188063" ref_url="https://bugzilla.suse.com/1188063" source="BUGZILLA"/>
		<reference ref_id="1188172" ref_url="https://bugzilla.suse.com/1188172" source="BUGZILLA"/>
		<reference ref_id="1188563" ref_url="https://bugzilla.suse.com/1188563" source="BUGZILLA"/>
		<reference ref_id="1188601" ref_url="https://bugzilla.suse.com/1188601" source="BUGZILLA"/>
		<reference ref_id="1188616" ref_url="https://bugzilla.suse.com/1188616" source="BUGZILLA"/>
		<reference ref_id="1188838" ref_url="https://bugzilla.suse.com/1188838" source="BUGZILLA"/>
		<reference ref_id="1188876" ref_url="https://bugzilla.suse.com/1188876" source="BUGZILLA"/>
		<reference ref_id="1188983" ref_url="https://bugzilla.suse.com/1188983" source="BUGZILLA"/>
		<reference ref_id="1188985" ref_url="https://bugzilla.suse.com/1188985" source="BUGZILLA"/>
		<reference ref_id="1189057" ref_url="https://bugzilla.suse.com/1189057" source="BUGZILLA"/>
		<reference ref_id="1189262" ref_url="https://bugzilla.suse.com/1189262" source="BUGZILLA"/>
		<reference ref_id="1189291" ref_url="https://bugzilla.suse.com/1189291" source="BUGZILLA"/>
		<reference ref_id="1189399" ref_url="https://bugzilla.suse.com/1189399" source="BUGZILLA"/>
		<reference ref_id="1189400" ref_url="https://bugzilla.suse.com/1189400" source="BUGZILLA"/>
		<reference ref_id="1189706" ref_url="https://bugzilla.suse.com/1189706" source="BUGZILLA"/>
		<reference ref_id="1189846" ref_url="https://bugzilla.suse.com/1189846" source="BUGZILLA"/>
		<reference ref_id="1189884" ref_url="https://bugzilla.suse.com/1189884" source="BUGZILLA"/>
		<reference ref_id="1190023" ref_url="https://bugzilla.suse.com/1190023" source="BUGZILLA"/>
		<reference ref_id="1190025" ref_url="https://bugzilla.suse.com/1190025" source="BUGZILLA"/>
		<reference ref_id="1190067" ref_url="https://bugzilla.suse.com/1190067" source="BUGZILLA"/>
		<reference ref_id="1190115" ref_url="https://bugzilla.suse.com/1190115" source="BUGZILLA"/>
		<reference ref_id="1190117" ref_url="https://bugzilla.suse.com/1190117" source="BUGZILLA"/>
		<reference ref_id="1190159" ref_url="https://bugzilla.suse.com/1190159" source="BUGZILLA"/>
		<reference ref_id="1190276" ref_url="https://bugzilla.suse.com/1190276" source="BUGZILLA"/>
		<reference ref_id="1190349" ref_url="https://bugzilla.suse.com/1190349" source="BUGZILLA"/>
		<reference ref_id="1190351" ref_url="https://bugzilla.suse.com/1190351" source="BUGZILLA"/>
		<reference ref_id="1190479" ref_url="https://bugzilla.suse.com/1190479" source="BUGZILLA"/>
		<reference ref_id="1190534" ref_url="https://bugzilla.suse.com/1190534" source="BUGZILLA"/>
		<reference ref_id="1190601" ref_url="https://bugzilla.suse.com/1190601" source="BUGZILLA"/>
		<reference ref_id="1190717" ref_url="https://bugzilla.suse.com/1190717" source="BUGZILLA"/>
		<reference ref_id="1191193" ref_url="https://bugzilla.suse.com/1191193" source="BUGZILLA"/>
		<reference ref_id="1191315" ref_url="https://bugzilla.suse.com/1191315" source="BUGZILLA"/>
		<reference ref_id="1191317" ref_url="https://bugzilla.suse.com/1191317" source="BUGZILLA"/>
		<reference ref_id="1191349" ref_url="https://bugzilla.suse.com/1191349" source="BUGZILLA"/>
		<reference ref_id="1191457" ref_url="https://bugzilla.suse.com/1191457" source="BUGZILLA"/>
		<reference ref_id="1191628" ref_url="https://bugzilla.suse.com/1191628" source="BUGZILLA"/>
		<reference ref_id="1191790" ref_url="https://bugzilla.suse.com/1191790" source="BUGZILLA"/>
		<reference ref_id="1191800" ref_url="https://bugzilla.suse.com/1191800" source="BUGZILLA"/>
		<reference ref_id="1191888" ref_url="https://bugzilla.suse.com/1191888" source="BUGZILLA"/>
		<reference ref_id="1191961" ref_url="https://bugzilla.suse.com/1191961" source="BUGZILLA"/>
		<reference ref_id="1192045" ref_url="https://bugzilla.suse.com/1192045" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="1192379" ref_url="https://bugzilla.suse.com/1192379" source="BUGZILLA"/>
		<reference ref_id="1192400" ref_url="https://bugzilla.suse.com/1192400" source="BUGZILLA"/>
		<reference ref_id="1192775" ref_url="https://bugzilla.suse.com/1192775" source="BUGZILLA"/>
		<reference ref_id="1192781" ref_url="https://bugzilla.suse.com/1192781" source="BUGZILLA"/>
		<reference ref_id="1192802" ref_url="https://bugzilla.suse.com/1192802" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13405" ref_url="https://www.suse.com/security/cve/CVE-2018-13405/" source="CVE"/>
		<reference ref_id="CVE-2018-9517" ref_url="https://www.suse.com/security/cve/CVE-2018-9517/" source="CVE"/>
		<reference ref_id="CVE-2019-3874" ref_url="https://www.suse.com/security/cve/CVE-2019-3874/" source="CVE"/>
		<reference ref_id="CVE-2019-3900" ref_url="https://www.suse.com/security/cve/CVE-2019-3900/" source="CVE"/>
		<reference ref_id="CVE-2020-0429" ref_url="https://www.suse.com/security/cve/CVE-2020-0429/" source="CVE"/>
		<reference ref_id="CVE-2020-12770" ref_url="https://www.suse.com/security/cve/CVE-2020-12770/" source="CVE"/>
		<reference ref_id="CVE-2020-3702" ref_url="https://www.suse.com/security/cve/CVE-2020-3702/" source="CVE"/>
		<reference ref_id="CVE-2020-4788" ref_url="https://www.suse.com/security/cve/CVE-2020-4788/" source="CVE"/>
		<reference ref_id="CVE-2021-0941" ref_url="https://www.suse.com/security/cve/CVE-2021-0941/" source="CVE"/>
		<reference ref_id="CVE-2021-20322" ref_url="https://www.suse.com/security/cve/CVE-2021-20322/" source="CVE"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-31916" ref_url="https://www.suse.com/security/cve/CVE-2021-31916/" source="CVE"/>
		<reference ref_id="CVE-2021-33033" ref_url="https://www.suse.com/security/cve/CVE-2021-33033/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="CVE-2021-34556" ref_url="https://www.suse.com/security/cve/CVE-2021-34556/" source="CVE"/>
		<reference ref_id="CVE-2021-34981" ref_url="https://www.suse.com/security/cve/CVE-2021-34981/" source="CVE"/>
		<reference ref_id="CVE-2021-3542" ref_url="https://www.suse.com/security/cve/CVE-2021-3542/" source="CVE"/>
		<reference ref_id="CVE-2021-35477" ref_url="https://www.suse.com/security/cve/CVE-2021-35477/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3655" ref_url="https://www.suse.com/security/cve/CVE-2021-3655/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-3659" ref_url="https://www.suse.com/security/cve/CVE-2021-3659/" source="CVE"/>
		<reference ref_id="CVE-2021-3679" ref_url="https://www.suse.com/security/cve/CVE-2021-3679/" source="CVE"/>
		<reference ref_id="CVE-2021-3715" ref_url="https://www.suse.com/security/cve/CVE-2021-3715/" source="CVE"/>
		<reference ref_id="CVE-2021-37159" ref_url="https://www.suse.com/security/cve/CVE-2021-37159/" source="CVE"/>
		<reference ref_id="CVE-2021-3732" ref_url="https://www.suse.com/security/cve/CVE-2021-3732/" source="CVE"/>
		<reference ref_id="CVE-2021-3744" ref_url="https://www.suse.com/security/cve/CVE-2021-3744/" source="CVE"/>
		<reference ref_id="CVE-2021-3752" ref_url="https://www.suse.com/security/cve/CVE-2021-3752/" source="CVE"/>
		<reference ref_id="CVE-2021-3753" ref_url="https://www.suse.com/security/cve/CVE-2021-3753/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="CVE-2021-3759" ref_url="https://www.suse.com/security/cve/CVE-2021-3759/" source="CVE"/>
		<reference ref_id="CVE-2021-3760" ref_url="https://www.suse.com/security/cve/CVE-2021-3760/" source="CVE"/>
		<reference ref_id="CVE-2021-3764" ref_url="https://www.suse.com/security/cve/CVE-2021-3764/" source="CVE"/>
		<reference ref_id="CVE-2021-3772" ref_url="https://www.suse.com/security/cve/CVE-2021-3772/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="CVE-2021-38204" ref_url="https://www.suse.com/security/cve/CVE-2021-38204/" source="CVE"/>
		<reference ref_id="CVE-2021-40490" ref_url="https://www.suse.com/security/cve/CVE-2021-40490/" source="CVE"/>
		<reference ref_id="CVE-2021-41864" ref_url="https://www.suse.com/security/cve/CVE-2021-41864/" source="CVE"/>
		<reference ref_id="CVE-2021-42008" ref_url="https://www.suse.com/security/cve/CVE-2021-42008/" source="CVE"/>
		<reference ref_id="CVE-2021-42252" ref_url="https://www.suse.com/security/cve/CVE-2021-42252/" source="CVE"/>
		<reference ref_id="CVE-2021-42739" ref_url="https://www.suse.com/security/cve/CVE-2021-42739/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

  You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

- CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).
- CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).
- CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
- CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails  (bsc#1191961).
- CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).
- CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).
- CVE-2021-3655: Missing size validations on inbound SCTP packets may have allowed the kernel to read uninitialized memory (bnc#1188563).
- CVE-2021-33033: The Linux kernel has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value (bnc#1186109 bnc#1186390 bnc#1188876).
- CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev-&gt;rf_conn_info object (bsc#1190067).
- CVE-2021-42739: The firewire subsystem in the Linux kernel has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bnc#1184673).
- CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).
- CVE-2018-13405: The inode_init_owner function in fs/inode.c in the Linux kernel allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID (bnc#1100416 bnc#1129735).
- CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349).
- CVE-2021-34556: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack (bnc#1188983).
- CVE-2021-35477: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation did not necessarily occur before a store operation that has an attacker-controlled value (bnc#1188985).
- CVE-2021-42252: An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a certain comparison uses values that are not memory sizes (bnc#1190479).
- CVE-2021-41864: prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317).
- CVE-2021-42008: The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access (bnc#1191315).
- CVE-2021-3759: Unaccounted ipc objects could have lead to breaking memcg limits and DoS attacks (bsc#1190115).
- CVE-2020-3702: Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic (bnc#1191193).
- CVE-2021-3752: Fixed a use after free vulnerability in the bluetooth module. (bsc#1190023)
- CVE-2021-40490: A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel (bnc#1190159 bnc#1192775)
- CVE-2021-3744: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1189884)
- CVE-2021-3764: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1190534)
- CVE-2020-12770: An issue was discovered in the Linux kernel sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040 (bnc#1171420).
- CVE-2021-3640: Fixed a Use-After-Free vulnerability in function sco_sock_sendmsg() in the bluetooth stack (bsc#1188172).
- CVE-2019-3900: An infinite loop issue was found in the vhost_net kernel module, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario (bnc#1133374).
- CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. (bnc#1129898).
- CVE-2018-9517: In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. (bnc#1108488).
- CVE-2021-38160: Data corruption or loss could be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190117)
- CVE-2021-3753: Fixed race out-of-bounds in virtual terminal handling (bsc#1190025).
- CVE-2021-3732: Mounting overlayfs inside an unprivileged user namespace can reveal files (bsc#1189706).
- CVE-2021-3653: A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the 'int_ctl' field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7 (bnc#1189399).
- CVE-2021-3656: Missing validation of the the `virt_ext` VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS for the L2 guest (bsc#1189400).
- CVE-2021-38204: drivers/usb/host/max3421-hcd.c allowed physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations (bnc#1189291).
- CVE-2021-3679: A lack of CPU resource in the tracing module functionality was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service (bnc#1189057).
- CVE-2020-4788: IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296 (bnc#0 bnc#1177666 bnc#1181158).
- CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (bsc#1188876).
- CVE-2020-0429: In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1176724).
- CVE-2021-37576: arch/powerpc/kvm/book3s_rtas.c on the powerpc platform allowed KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e (bnc#1188838 bnc#1190276).
- CVE-2021-22543: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allowed users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation (bnc#1186482 bnc#1190276).
- CVE-2021-33909: fs/seq_file.c did not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05 (bnc#1188062 bnc#1188063).

The following non-security bugs were fixed:

- Add arch-dependent support markers in supported.conf (bsc#1186672) 
- Add the support for kernel-FLAVOR-optional subpackage (jsc#SLE-11796)
- bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22913)
- bpf: Disallow unprivileged bpf by default (jsc#SLE-22913).
- ceph: take snap_empty_lock atomically with snaprealm refcount change (bsc#1191888).
- config: disable unprivileged BPF by default (jsc#SLE-22913)
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (bsc#1185758,bsc#1192400).
- drm: fix spectre issue in vmw_execbuf_ioctl (bsc#1192802).
- ftrace: Fix scripts/recordmcount.pl due to new binutils (bsc#1192267).
- gigaset: fix spectre issue in do_data_b3_req (bsc#1192802).
- hisax: fix spectre issues (bsc#1192802).
- hv: mana: adjust mana_select_queue to old API (jsc#SLE-18779, bsc#1185726).
- hv: mana: remove netdev_lockdep_set_classes usage (jsc#SLE-18779, bsc#1185726).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number (jsc#SLE-18779, bsc#1185726).
- hysdn: fix spectre issue in hycapi_send_message (bsc#1192802).
- infiniband: fix spectre issue in ib_uverbs_write (bsc#1192802).
- infiniband: fix spectre issue in ib_uverbs_write (bsc#1192802).
- ipc: remove memcg accounting for sops objects in do_semtimedop() (bsc#1190115).
- iwlwifi: fix spectre issue in iwl_dbgfs_update_pm (bsc#1192802).
- kernel-binary.spec: Exctract s390 decompression code (jsc#SLE-17042).
- kernel-binary.spec: Fix up usrmerge for non-modular kernels.
- kernel-binary.spec.in: build-id check requires elfutils.
- kernel-binary.spec.in: Regenerate makefile when not using mkmakefile.
- kernel-binary.spec: Only use mkmakefile when it exists Linux 5.13 no longer had a mkmakefile script
- kernel-binary.spec: Remove obsolete and wrong comment mkmakefile is repleced by echo on newer kernel
- kernel-docs.spec.in: Build using an utf-8 locale. Sphinx cannot handle UTF-8 input in non-UTF-8 locale.
- media: dvb_ca_en50221: prevent using slot_info for Spectre attacs (bsc#1192802).
- media: dvb_ca_en50221: sanity check slot number from userspace (bsc#1192802).
- media: wl128x: get rid of a potential spectre issue (bsc#1192802).
- memcg: enable accounting for file lock caches (bsc#1190115).
- mm/memory.c: do_fault: avoid usage of stale vm_area_struct (bsc#1136513).
- mpt3sas: fix spectre issues (bsc#1192802).
- net: mana: Add a driver for Microsoft Azure Network Adapter (MANA) (jsc#SLE-18779, bsc#1185726).
- net: mana: Add support for EQ sharing (jsc#SLE-18779, bsc#1185726).
- net: mana: Add WARN_ON_ONCE in case of CQE read overflow (jsc#SLE-18779, bsc#1185726).
- net: mana: Fix a memory leak in an error handling path in (jsc#SLE-18779, bsc#1185726).
- net: mana: Fix error handling in mana_create_rxq() (git-fixes, bsc#1191800).
- net: mana: fix PCI_HYPERV dependency (jsc#SLE-18779, bsc#1185726).
- net: mana: Move NAPI from EQ to CQ (jsc#SLE-18779, bsc#1185726).
- net: mana: Prefer struct_size over open coded arithmetic (jsc#SLE-18779, bsc#1185726).
- net: mana: remove redundant initialization of variable err (jsc#SLE-18779, bsc#1185726).
- net: mana: Use int to check the return value of mana_gd_poll_cq() (jsc#SLE-18779, bsc#1185726).
- net: mana: Use struct_size() in kzalloc() (jsc#SLE-18779, bsc#1185726).
- net_sched: cls_route: remove the right filter from hashtable (networking-stable-20_03_28).
- net: sched: sch_teql: fix null-pointer dereference (bsc#1190717).
- net: sock_diag: Fix spectre v1 gadget in __sock_diag_cmd() (bsc#1192802).
- NFS: Do uncached readdir when we're seeking a cookie in an empty page cache (bsc#1191628).
- objtool: Do not fail on missing symbol table (bsc#1192379).
- osst: fix spectre issue in osst_verify_frame (bsc#1192802).
- ovl: check whiteout in ovl_create_over_whiteout() (bsc#1189846).
- ovl: filter of trusted xattr results in audit (bsc#1189846).
- ovl: fix dentry leak in ovl_get_redirect (bsc#1189846).
- ovl: initialize error in ovl_copy_xattr (bsc#1189846).
- ovl: relax WARN_ON() on rename to self (bsc#1189846).
- PCI: hv: Use expected affinity when unmasking IRQ (bsc#1185973).
- Revert 'memcg: enable accounting for file lock caches (bsc#1190115).' This reverts commit 912b4421a3e9bb9f0ef1aadc64a436666259bd4d. It's effectively upstream commit 3754707bcc3e190e5dadc978d172b61e809cb3bd applied to kernel-source (to avoid proliferation of patches). Make a note in blacklist.conf too.
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (bsc#1190601).
- s390/bpf: Fix branch shortening during codegen pass (bsc#1190601).
- s390/bpf: Fix optimizing out zero-extensions (bsc#1190601).
- s390: bpf: implement jitting of BPF_ALU | BPF_ARSH | BPF_* (bsc#1190601).
- s390/bpf: Wrap JIT macro parameter usages in parentheses (bsc#1190601).
- scripts/git_sort/git_sort.py: add bpf git repo
- scripts/git_sort/git_sort.py: Update nvme repositories
- scsi: libfc: Fix array index out of bound exception (bsc#1188616).
- scsi: lpfc: Fix FLOGI failure due to accessing a freed node (bsc#1191349).
- scsi: lpfc: Fix memory overwrite during FC-GS I/O abort handling (bsc#1191349 bsc#1191457).
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (bsc#1191349 bsc#1191457).
- scsi: target: avoid using lun_tg_pt_gp after unlock (bsc#1186078).
- sctp: check asoc peer.asconf_capable before processing asconf (bsc#1190351).
- sctp: fully initialize v4 addr in some functions (bsc#1188563).
- sysvipc/sem: mitigate semnum index against spectre v1 (bsc#1192802).
- target: core: Fix sense key for invalid XCOPY request (bsc#1186078).
- Update config files: Add CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
- Use /usr/lib/modules as module dir when usermerge is active in the target distro.
- UsrMerge the kernel (boo#1184804)
- x86/CPU: Add more Icelake model numbers (bsc#1185758,bsc#1192400).
- xfrm: xfrm_state_mtu should return at least 1280 for ipv6 (bsc#1185377).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-02"/>
	<updated date="2021-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1100416">SUSE bug 1100416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108488">SUSE bug 1108488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129735">SUSE bug 1129735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129898">SUSE bug 1129898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133374">SUSE bug 1133374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136513">SUSE bug 1136513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171420">SUSE bug 1171420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176724">SUSE bug 1176724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177666">SUSE bug 1177666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181158">SUSE bug 1181158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184673">SUSE bug 1184673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184804">SUSE bug 1184804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185377">SUSE bug 1185377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185726">SUSE bug 1185726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185758">SUSE bug 1185758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185973">SUSE bug 1185973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186078">SUSE bug 1186078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186109">SUSE bug 1186109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186390">SUSE bug 1186390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186482">SUSE bug 1186482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186672">SUSE bug 1186672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188062">SUSE bug 1188062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188063">SUSE bug 1188063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188172">SUSE bug 1188172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188563">SUSE bug 1188563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188601">SUSE bug 1188601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188616">SUSE bug 1188616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188838">SUSE bug 1188838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188876">SUSE bug 1188876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188983">SUSE bug 1188983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188985">SUSE bug 1188985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189057">SUSE bug 1189057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189262">SUSE bug 1189262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189291">SUSE bug 1189291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189399">SUSE bug 1189399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189400">SUSE bug 1189400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189706">SUSE bug 1189706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189846">SUSE bug 1189846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189884">SUSE bug 1189884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190023">SUSE bug 1190023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190025">SUSE bug 1190025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190067">SUSE bug 1190067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190115">SUSE bug 1190115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190117">SUSE bug 1190117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190159">SUSE bug 1190159</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190276">SUSE bug 1190276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190349">SUSE bug 1190349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190351">SUSE bug 1190351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190479">SUSE bug 1190479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190534">SUSE bug 1190534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190601">SUSE bug 1190601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190717">SUSE bug 1190717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191193">SUSE bug 1191193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191315">SUSE bug 1191315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191317">SUSE bug 1191317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191349">SUSE bug 1191349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191457">SUSE bug 1191457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191628">SUSE bug 1191628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191790">SUSE bug 1191790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191800">SUSE bug 1191800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191888">SUSE bug 1191888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191961">SUSE bug 1191961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192045">SUSE bug 1192045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192379">SUSE bug 1192379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192400">SUSE bug 1192400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192775">SUSE bug 1192775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192781">SUSE bug 1192781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192802">SUSE bug 1192802</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-13405/">CVE-2018-13405</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-9517/">CVE-2018-9517</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3874/">CVE-2019-3874</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3900/">CVE-2019-3900</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0429/">CVE-2020-0429</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12770/">CVE-2020-12770</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3702/">CVE-2020-3702</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-4788/">CVE-2020-4788</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0941/">CVE-2021-0941</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20322/">CVE-2021-20322</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31916/">CVE-2021-31916</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33033/">CVE-2021-33033</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-34556/">CVE-2021-34556</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-34981/">CVE-2021-34981</cve>
	<cve impact="important" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3542/">CVE-2021-3542</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35477/">CVE-2021-35477</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3655/">CVE-2021-3655</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3659/">CVE-2021-3659</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3679/">CVE-2021-3679</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3715/">CVE-2021-3715</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-37159/">CVE-2021-37159</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3732/">CVE-2021-3732</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3744/">CVE-2021-3744</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3752/">CVE-2021-3752</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3753/">CVE-2021-3753</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3759/">CVE-2021-3759</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3760/">CVE-2021-3760</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3764/">CVE-2021-3764</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3772/">CVE-2021-3772</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38204/">CVE-2021-38204</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-40490/">CVE-2021-40490</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41864/">CVE-2021-41864</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42008/">CVE-2021-42008</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42252/">CVE-2021-42252</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42739/">CVE-2021-42739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658116" comment="kernel-default-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658117" comment="kernel-default-base-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658118" comment="kernel-default-devel-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658119" comment="kernel-devel-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658120" comment="kernel-docs-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658121" comment="kernel-macros-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658122" comment="kernel-obs-build-4.12.14-197.102.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658123" comment="kernel-source-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658124" comment="kernel-syms-4.12.14-197.102.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139353" version="1" class="patch">
	<metadata>
		<title>Security update for aaa_base (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1162581" ref_url="https://bugzilla.suse.com/1162581" source="BUGZILLA"/>
		<reference ref_id="1174504" ref_url="https://bugzilla.suse.com/1174504" source="BUGZILLA"/>
		<reference ref_id="1191563" ref_url="https://bugzilla.suse.com/1191563" source="BUGZILLA"/>
		<reference ref_id="1192248" ref_url="https://bugzilla.suse.com/1192248" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:3899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009830.html" source="SUSE-SU"/>
		<description>
This update for aaa_base fixes the following issues:

- Allowed ping and ICMP commands without CAP_NET_RAW (bsc#1174504).
- Add $HOME/.local/bin to PATH, if it exists (bsc#1192248).
- Fixed get_kernel_version.c to work also for recent kernels on the s390/X platform (bsc#1191563).
- Support xz compressed kernel (bsc#1162581)   
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-03"/>
	<updated date="2021-12-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162581">SUSE bug 1162581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174504">SUSE bug 1174504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191563">SUSE bug 1191563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192248">SUSE bug 1192248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658795" comment="aaa_base-84.87+git20180409.04c9dae-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658796" comment="aaa_base-extras-84.87+git20180409.04c9dae-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658797" comment="aaa_base-malloccheck-84.87+git20180409.04c9dae-3.52.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139354" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1193170" ref_url="https://bugzilla.suse.com/1193170" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43527" ref_url="https://www.suse.com/security/cve/CVE-2021-43527/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3934-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/020999.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

Update to version 3.68.1:

- CVE-2021-43527: Fixed a Heap overflow in NSS when verifying DER-encoded DSA or RSA-PSS signatures (bsc#1193170).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193170">SUSE bug 1193170</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43527/">CVE-2021-43527</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659044" comment="libfreebl3-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659027" comment="libfreebl3-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659045" comment="libfreebl3-hmac-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659029" comment="libfreebl3-hmac-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659046" comment="libsoftokn3-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659031" comment="libsoftokn3-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659047" comment="libsoftokn3-hmac-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659033" comment="libsoftokn3-hmac-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659048" comment="mozilla-nss-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659035" comment="mozilla-nss-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659049" comment="mozilla-nss-certs-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659037" comment="mozilla-nss-certs-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659050" comment="mozilla-nss-devel-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659051" comment="mozilla-nss-sysinit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659052" comment="mozilla-nss-tools-3.68.1-3.61.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139355" version="1" class="patch">
	<metadata>
		<title>Security update for openssh (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1190975" ref_url="https://bugzilla.suse.com/1190975" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-41617" ref_url="https://www.suse.com/security/cve/CVE-2021-41617/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009854.html" source="SUSE-SU"/>
		<description>
This update for openssh fixes the following issues:

- CVE-2021-41617: Fixed privilege escalation when AuthorizedKeysCommand/AuthorizedPrincipalsCommand are configured (bsc#1190975).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190975">SUSE bug 1190975</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41617/">CVE-2021-41617</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658304" comment="openssh-7.9p1-6.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658305" comment="openssh-askpass-gnome-7.9p1-6.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658306" comment="openssh-fips-7.9p1-6.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658307" comment="openssh-helpers-7.9p1-6.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139356" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1173028" ref_url="https://bugzilla.suse.com/1173028" source="BUGZILLA"/>
		<reference ref_id="1186031" ref_url="https://bugzilla.suse.com/1186031" source="BUGZILLA"/>
		<reference ref_id="1192497" ref_url="https://bugzilla.suse.com/1192497" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-35604" ref_url="https://www.suse.com/security/cve/CVE-2021-35604/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009852.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issue:
    
- Update to 10.2.41:
- CVE-2021-35604: Fixed InnoDB vulnerability that allowed an high privileged attacker with network access via multiple protocols to compromise MySQL (bsc#1192497).
    
- Add missing dependency to liblz4 to enable lz4 compression for INNODB (bsc#1186031). 
- Add a 'mysql-user.conf' file to let 'systemd' generate mysql user in containers. (bsc#1173028)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173028">SUSE bug 1173028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186031">SUSE bug 1186031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192497">SUSE bug 1192497</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-35604/">CVE-2021-35604</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657761" comment="libmysqld-devel-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657762" comment="libmysqld19-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657763" comment="mariadb-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657764" comment="mariadb-client-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657765" comment="mariadb-errormessages-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657766" comment="mariadb-tools-10.2.41-3.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139357" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188284" ref_url="https://bugzilla.suse.com/1188284" source="BUGZILLA"/>
		<reference ref_id="1192346" ref_url="https://bugzilla.suse.com/1192346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:3949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009859.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

- Update to 0.103.4 (bsc#1192346).
- Update to 0.103.3 (bsc#1188284).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1188284">SUSE bug 1188284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192346">SUSE bug 1192346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009656944" comment="clamav-0.103.4-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656945" comment="clamav-devel-0.103.4-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656946" comment="libclamav9-0.103.4-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656947" comment="libfreshclam2-0.103.4-3.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139358" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1189632" ref_url="https://bugzilla.suse.com/1189632" source="BUGZILLA"/>
		<reference ref_id="1191363" ref_url="https://bugzilla.suse.com/1191363" source="BUGZILLA"/>
		<reference ref_id="1192554" ref_url="https://bugzilla.suse.com/1192554" source="BUGZILLA"/>
		<reference ref_id="1192557" ref_url="https://bugzilla.suse.com/1192557" source="BUGZILLA"/>
		<reference ref_id="1192559" ref_url="https://bugzilla.suse.com/1192559" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28701" ref_url="https://www.suse.com/security/cve/CVE-2021-28701/" source="CVE"/>
		<reference ref_id="CVE-2021-28702" ref_url="https://www.suse.com/security/cve/CVE-2021-28702/" source="CVE"/>
		<reference ref_id="CVE-2021-28704" ref_url="https://www.suse.com/security/cve/CVE-2021-28704/" source="CVE"/>
		<reference ref_id="CVE-2021-28705" ref_url="https://www.suse.com/security/cve/CVE-2021-28705/" source="CVE"/>
		<reference ref_id="CVE-2021-28706" ref_url="https://www.suse.com/security/cve/CVE-2021-28706/" source="CVE"/>
		<reference ref_id="CVE-2021-28707" ref_url="https://www.suse.com/security/cve/CVE-2021-28707/" source="CVE"/>
		<reference ref_id="CVE-2021-28708" ref_url="https://www.suse.com/security/cve/CVE-2021-28708/" source="CVE"/>
		<reference ref_id="CVE-2021-28709" ref_url="https://www.suse.com/security/cve/CVE-2021-28709/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009874.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2021-28701: Fixed race condition in XENMAPSPACE_grant_table handling (XSA-384) (bsc#1189632).
- CVE-2021-28702: Fixed PCI devices with RMRRs not deassigned correctly (XSA-386) (bsc#1191363).
- CVE-2021-28704, CVE-2021-28707, CVE-2021-28708: Fixed PoD operations on misaligned GFNs (XSA-388) (bsc#1192557).
- CVE-2021-28705, CVE-2021-28709: Fixed issues with partially successful P2M updates on x86 (XSA-389) (bsc#1192559).
- CVE-2021-28706: Fixed guests may exceed their designated memory limit (XSA-385) (bsc#1192554).

- Upstream bug fixes (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-09"/>
	<updated date="2021-12-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189632">SUSE bug 1189632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191363">SUSE bug 1191363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192554">SUSE bug 1192554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192557">SUSE bug 1192557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192559">SUSE bug 1192559</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28701/">CVE-2021-28701</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28702/">CVE-2021-28702</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28704/">CVE-2021-28704</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28705/">CVE-2021-28705</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28706/">CVE-2021-28706</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28707/">CVE-2021-28707</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28708/">CVE-2021-28708</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28709/">CVE-2021-28709</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658607" comment="xen-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658608" comment="xen-devel-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658609" comment="xen-libs-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658610" comment="xen-tools-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658611" comment="xen-tools-domU-4.12.4_16-3.57.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139359" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1193321" ref_url="https://bugzilla.suse.com/1193321" source="BUGZILLA"/>
		<reference ref_id="1193485" ref_url="https://bugzilla.suse.com/1193485" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43536" ref_url="https://www.suse.com/security/cve/CVE-2021-43536/" source="CVE"/>
		<reference ref_id="CVE-2021-43537" ref_url="https://www.suse.com/security/cve/CVE-2021-43537/" source="CVE"/>
		<reference ref_id="CVE-2021-43538" ref_url="https://www.suse.com/security/cve/CVE-2021-43538/" source="CVE"/>
		<reference ref_id="CVE-2021-43539" ref_url="https://www.suse.com/security/cve/CVE-2021-43539/" source="CVE"/>
		<reference ref_id="CVE-2021-43541" ref_url="https://www.suse.com/security/cve/CVE-2021-43541/" source="CVE"/>
		<reference ref_id="CVE-2021-43542" ref_url="https://www.suse.com/security/cve/CVE-2021-43542/" source="CVE"/>
		<reference ref_id="CVE-2021-43543" ref_url="https://www.suse.com/security/cve/CVE-2021-43543/" source="CVE"/>
		<reference ref_id="CVE-2021-43545" ref_url="https://www.suse.com/security/cve/CVE-2021-43545/" source="CVE"/>
		<reference ref_id="CVE-2021-43546" ref_url="https://www.suse.com/security/cve/CVE-2021-43546/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3995-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/021069.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:


Update to Extended Support Release 91.4.0 (bsc#1193485):

- CVE-2021-43536: URL leakage when navigating while executing asynchronous function
- CVE-2021-43537: Heap buffer overflow when using structured clone
- CVE-2021-43538: Missing fullscreen and pointer lock notification when requesting both
- CVE-2021-43539: GC rooting failure when calling wasm instance methods
- CVE-2021-43541: External protocol handler parameters were unescaped
- CVE-2021-43542: XMLHttpRequest error codes could have leaked the existence of an external protocol handler
- CVE-2021-43543: Bypass of CSP sandbox directive when embedding
- CVE-2021-43545: Denial of Service when using the Location API in a loop
- CVE-2021-43546: Cursor spoofing could overlay user interface when native cursor is zoomed
- Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4
- Removed x-scheme-handler/ftp from MozillaFirefox.desktop (bsc#1193321)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-10"/>
	<updated date="2021-12-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193321">SUSE bug 1193321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193485">SUSE bug 1193485</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43536/">CVE-2021-43536</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43537/">CVE-2021-43537</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43538/">CVE-2021-43538</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43539/">CVE-2021-43539</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43541/">CVE-2021-43541</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43542/">CVE-2021-43542</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43543/">CVE-2021-43543</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-43545/">CVE-2021-43545</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-43546/">CVE-2021-43546</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659334" comment="MozillaFirefox-91.4.0-150.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659335" comment="MozillaFirefox-devel-91.4.0-150.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659336" comment="MozillaFirefox-translations-common-91.4.0-150.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659337" comment="MozillaFirefox-translations-other-91.4.0-150.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139360" version="1" class="patch">
	<metadata>
		<title>Security update for glib-networking (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1172460" ref_url="https://bugzilla.suse.com/1172460" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13645" ref_url="https://www.suse.com/security/cve/CVE-2020-13645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009879.html" source="SUSE-SU"/>
		<description>
This update for glib-networking fixes the following issues:

- CVE-2020-13645: Fixed a connection failure when the server identity is unset (bsc#1172460).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-10"/>
	<updated date="2021-12-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172460">SUSE bug 1172460</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-13645/">CVE-2020-13645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659042" comment="glib-networking-2.54.1-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659043" comment="glib-networking-lang-2.54.1-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139361" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1180125" ref_url="https://bugzilla.suse.com/1180125" source="BUGZILLA"/>
		<reference ref_id="1183374" ref_url="https://bugzilla.suse.com/1183374" source="BUGZILLA"/>
		<reference ref_id="1183858" ref_url="https://bugzilla.suse.com/1183858" source="BUGZILLA"/>
		<reference ref_id="1185588" ref_url="https://bugzilla.suse.com/1185588" source="BUGZILLA"/>
		<reference ref_id="1187338" ref_url="https://bugzilla.suse.com/1187338" source="BUGZILLA"/>
		<reference ref_id="1187668" ref_url="https://bugzilla.suse.com/1187668" source="BUGZILLA"/>
		<reference ref_id="1189241" ref_url="https://bugzilla.suse.com/1189241" source="BUGZILLA"/>
		<reference ref_id="1189287" ref_url="https://bugzilla.suse.com/1189287" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3426" ref_url="https://www.suse.com/security/cve/CVE-2021-3426/" source="CVE"/>
		<reference ref_id="CVE-2021-3733" ref_url="https://www.suse.com/security/cve/CVE-2021-3733/" source="CVE"/>
		<reference ref_id="CVE-2021-3737" ref_url="https://www.suse.com/security/cve/CVE-2021-3737/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4015-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009941.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:


- CVE-2021-3737: Fixed http client infinite line reading (DoS) after a http 100. (bsc#1189241)
- CVE-2021-3733: Fixed ReDoS in urllib.request. (bsc#1189287)
- CVE-2021-3426: Fixed an information disclosure via pydoc. (bsc#1183374)

- Rebuild to get new headers, avoid building in support for stropts.h (bsc#1187338).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-23"/>
	<updated date="2021-12-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1180125">SUSE bug 1180125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183374">SUSE bug 1183374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183858">SUSE bug 1183858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185588">SUSE bug 1185588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187338">SUSE bug 1187338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187668">SUSE bug 1187668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189241">SUSE bug 1189241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189287">SUSE bug 1189287</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3426/">CVE-2021-3426</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3733/">CVE-2021-3733</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3737/">CVE-2021-3737</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009660091" comment="libpython3_6m1_0-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660092" comment="python3-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660093" comment="python3-base-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660094" comment="python3-curses-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660095" comment="python3-dbm-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660096" comment="python3-devel-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660097" comment="python3-idle-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660102" comment="python3-testsuite-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660098" comment="python3-tk-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660099" comment="python3-tools-3.6.15-3.91.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139362" version="1" class="patch">
	<metadata>
		<title>Security update for fetchmail (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1152964" ref_url="https://bugzilla.suse.com/1152964" source="BUGZILLA"/>
		<reference ref_id="1174075" ref_url="https://bugzilla.suse.com/1174075" source="BUGZILLA"/>
		<reference ref_id="1181400" ref_url="https://bugzilla.suse.com/1181400" source="BUGZILLA"/>
		<reference ref_id="1188875" ref_url="https://bugzilla.suse.com/1188875" source="BUGZILLA"/>
		<reference ref_id="1190069" ref_url="https://bugzilla.suse.com/1190069" source="BUGZILLA"/>
		<reference ref_id="1190896" ref_url="https://bugzilla.suse.com/1190896" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36386" ref_url="https://www.suse.com/security/cve/CVE-2021-36386/" source="CVE"/>
		<reference ref_id="CVE-2021-39272" ref_url="https://www.suse.com/security/cve/CVE-2021-39272/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009892.html" source="SUSE-SU"/>
		<description>
This update for fetchmail fixes the following issues:

- CVE-2021-36386: Fixed DoS or information disclosure in some configurations (bsc#1188875).
- CVE-2021-39272: Fixed STARTTLS session encryption bypassing (fetchmail-SA-2021-02) (bsc#1190069).

- Update to 6.4.22 (bsc#1152964, jsc#SLE-18159, jsc#SLE-17903, jsc#SLE-18059)
- Remove all python2 dependencies (bsc#1190896).
- De-hardcode /usr/lib path for launch executable (bsc#1174075).
- Added hardening to systemd service(s) (bsc#1181400).
  		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1152964">SUSE bug 1152964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174075">SUSE bug 1174075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181400">SUSE bug 1181400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188875">SUSE bug 1188875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190069">SUSE bug 1190069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190896">SUSE bug 1190896</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-36386/">CVE-2021-36386</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39272/">CVE-2021-39272</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657503" comment="fetchmail-6.4.22-20.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657504" comment="fetchmailconf-6.4.22-20.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139363" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1192516" ref_url="https://bugzilla.suse.com/1192516" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23214" ref_url="https://www.suse.com/security/cve/CVE-2021-23214/" source="CVE"/>
		<reference ref_id="CVE-2021-23222" ref_url="https://www.suse.com/security/cve/CVE-2021-23222/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009898.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:
          
- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).
- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192516">SUSE bug 1192516</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23214/">CVE-2021-23214</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23222/">CVE-2021-23222</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009656475" comment="postgresql10-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656476" comment="postgresql10-contrib-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656477" comment="postgresql10-devel-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656465" comment="postgresql10-docs-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656478" comment="postgresql10-plperl-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656479" comment="postgresql10-plpython-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656480" comment="postgresql10-pltcl-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656481" comment="postgresql10-server-10.19-8.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139364" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1193030" ref_url="https://bugzilla.suse.com/1193030" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4008" ref_url="https://www.suse.com/security/cve/CVE-2021-4008/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4071-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009900.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2021-4008: Fixed Privilege Escalation Vulnerability via Out-Of-Bounds Access in SProcRenderCompositeGlyphs (bsc#1193030).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193030">SUSE bug 1193030</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4008/">CVE-2021-4008</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659817" comment="xorg-x11-server-1.20.3-14.5.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659818" comment="xorg-x11-server-extra-1.20.3-14.5.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659819" comment="xorg-x11-server-sdk-1.20.3-14.5.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139365" version="1" class="patch">
	<metadata>
		<title>Security update for log4j (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1193662" ref_url="https://bugzilla.suse.com/1193662" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4104" ref_url="https://www.suse.com/security/cve/CVE-2021-4104/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009917.html" source="SUSE-SU"/>
		<description>
This update for log4j fixes the following issue:

- CVE-2021-4104: Disable the JMSAppender class from log4j to protect against
  the log4jshell vulnerability. [bsc#1193662]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-17"/>
	<updated date="2021-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193662">SUSE bug 1193662</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4104/">CVE-2021-4104</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009660100" comment="log4j-1.2.17-5.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660101" comment="log4j-manual-1.2.17-5.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139366" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1190487" ref_url="https://bugzilla.suse.com/1190487" source="BUGZILLA"/>
		<reference ref_id="1190488" ref_url="https://bugzilla.suse.com/1190488" source="BUGZILLA"/>
		<reference ref_id="1190489" ref_url="https://bugzilla.suse.com/1190489" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4009" ref_url="https://www.suse.com/security/cve/CVE-2021-4009/" source="CVE"/>
		<reference ref_id="CVE-2021-4010" ref_url="https://www.suse.com/security/cve/CVE-2021-4010/" source="CVE"/>
		<reference ref_id="CVE-2021-4011" ref_url="https://www.suse.com/security/cve/CVE-2021-4011/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009921.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes 
  extension does not properly validate the request length leading to out of 
  bounds memory write. (bsc#1190487)
- CVE-2021-4010: The handler for the Suspend request of the Screen Saver extension
  does not properly validate the request length leading to out of
  bounds memory write. (bsc#1190488)
- CVE-2021-4011: The handlers for the RecordCreateContext and RecordRegisterClients
  requests of the Record extension do not properly validate the request
  length leading to out of bounds memory write. (bsc#1190489)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-20"/>
	<updated date="2021-12-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190487">SUSE bug 1190487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190488">SUSE bug 1190488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190489">SUSE bug 1190489</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4009/">CVE-2021-4009</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4010/">CVE-2021-4010</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4011/">CVE-2021-4011</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009660287" comment="xorg-x11-server-1.20.3-14.5.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660288" comment="xorg-x11-server-extra-1.20.3-14.5.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660289" comment="xorg-x11-server-sdk-1.20.3-14.5.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139367" version="1" class="patch">
	<metadata>
		<title>Security update for p11-kit (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1180064" ref_url="https://bugzilla.suse.com/1180064" source="BUGZILLA"/>
		<reference ref_id="1187993" ref_url="https://bugzilla.suse.com/1187993" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-29361" ref_url="https://www.suse.com/security/cve/CVE-2020-29361/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4154-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009932.html" source="SUSE-SU"/>
		<description>
This update for p11-kit fixes the following issues:

- CVE-2020-29361: Fixed multiple integer overflows in rpc code (bsc#1180064)
- Add support for CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER (bsc#1187993).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-22"/>
	<updated date="2021-12-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180064">SUSE bug 1180064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187993">SUSE bug 1187993</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29361/">CVE-2020-29361</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659809" comment="libp11-kit0-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659794" comment="libp11-kit0-32bit-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659810" comment="p11-kit-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659811" comment="p11-kit-devel-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659812" comment="p11-kit-nss-trust-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659813" comment="p11-kit-tools-0.23.2-4.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139368" version="1" class="patch">
	<metadata>
		<title>Security update for subversion (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181687" ref_url="https://bugzilla.suse.com/1181687" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-17525" ref_url="https://www.suse.com/security/cve/CVE-2020-17525/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0425-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008302.html" source="SUSE-SU"/>
		<description>
This update for subversion fixes the following issues:

- CVE-2020-17525: A null-pointer-dereference has been found in mod_authz_svn that results in
    a remote unauthenticated Denial-of-Service in some server configurations (bsc#1181687).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181687">SUSE bug 1181687</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-17525/">CVE-2020-17525</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503596" comment="subversion-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496589" comment="subversion-bash-completion-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503597" comment="subversion-devel-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503598" comment="subversion-perl-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503599" comment="subversion-python-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503600" comment="subversion-server-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503601" comment="subversion-tools-1.10.6-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139369" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1174075" ref_url="https://bugzilla.suse.com/1174075" source="BUGZILLA"/>
		<reference ref_id="1176708" ref_url="https://bugzilla.suse.com/1176708" source="BUGZILLA"/>
		<reference ref_id="1178801" ref_url="https://bugzilla.suse.com/1178801" source="BUGZILLA"/>
		<reference ref_id="1178969" ref_url="https://bugzilla.suse.com/1178969" source="BUGZILLA"/>
		<reference ref_id="1180243" ref_url="https://bugzilla.suse.com/1180243" source="BUGZILLA"/>
		<reference ref_id="1180401" ref_url="https://bugzilla.suse.com/1180401" source="BUGZILLA"/>
		<reference ref_id="1181730" ref_url="https://bugzilla.suse.com/1181730" source="BUGZILLA"/>
		<reference ref_id="1181732" ref_url="https://bugzilla.suse.com/1181732" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15257" ref_url="https://www.suse.com/security/cve/CVE-2020-15257/" source="CVE"/>
		<reference ref_id="CVE-2021-21284" ref_url="https://www.suse.com/security/cve/CVE-2021-21284/" source="CVE"/>
		<reference ref_id="CVE-2021-21285" ref_url="https://www.suse.com/security/cve/CVE-2021-21285/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008311.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues:

Security issues fixed:

- CVE-2020-15257: Fixed a privilege escalation in containerd (bsc#1178969).
- CVE-2021-21284: potential privilege escalation when the root user in the remapped namespace has access to the host filesystem (bsc#1181732)
- CVE-2021-21285: pulling a malformed Docker image manifest crashes the dockerd daemon (bsc#1181730)

Non-security issues fixed:

- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).

- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. (bsc#1180401)

- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1180243

- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  bsc#1176708

- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14

- Enable fish-completion

- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (bsc#1178801, SLE-16460)

- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708

- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)

- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.

- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.

- Update to libnetwork 55e924b8a842, which is required for Docker 19.03.14-ce.
  bsc#1180243

- Add patch which makes libnetwork compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (bsc#1178801, SLE-16460)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-11"/>
	<updated date="2021-02-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174075">SUSE bug 1174075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176708">SUSE bug 1176708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178801">SUSE bug 1178801</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178969">SUSE bug 1178969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180243">SUSE bug 1180243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180401">SUSE bug 1180401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181730">SUSE bug 1181730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181732">SUSE bug 1181732</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15257/">CVE-2020-15257</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21284/">CVE-2021-21284</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21285/">CVE-2021-21285</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504154" comment="containerd-1.3.9-5.29.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504155" comment="docker-19.03.15_ce-6.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494429" comment="docker-bash-completion-19.03.15_ce-6.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504156" comment="docker-libnetwork-0.7.0.1+gitr2908_55e924b8a842-4.28.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504157" comment="docker-runc-1.0.0rc10+gitr3981_dc9208a3303f-6.45.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139370" version="1" class="patch">
	<metadata>
		<title>Security update for openvswitch (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181742" ref_url="https://bugzilla.suse.com/1181742" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35498" ref_url="https://www.suse.com/security/cve/CVE-2020-35498/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008313.html" source="SUSE-SU"/>
		<description>
This update for openvswitch fixes the following issues:

- CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-11"/>
	<updated date="2021-02-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181742">SUSE bug 1181742</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35498/">CVE-2020-35498</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504158" comment="libopenvswitch-2_11-0-2.11.5-3.15.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504159" comment="openvswitch-2.11.5-3.15.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504160" comment="openvswitch-devel-2.11.5-3.15.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139371" version="1" class="patch">
	<metadata>
		<title>Security update for wpa_supplicant (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181777" ref_url="https://bugzilla.suse.com/1181777" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0326" ref_url="https://www.suse.com/security/cve/CVE-2021-0326/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008316.html" source="SUSE-SU"/>
		<description>
This update for wpa_supplicant fixes the following issues:

- CVE-2021-0326: P2P group information processing vulnerability (bsc#1181777).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-11"/>
	<updated date="2021-02-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181777">SUSE bug 1181777</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0326/">CVE-2021-0326</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503615" comment="wpa_supplicant-2.9-4.23.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139372" version="1" class="patch">
	<metadata>
		<title>Security update for jasper (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1179748" ref_url="https://bugzilla.suse.com/1179748" source="BUGZILLA"/>
		<reference ref_id="1181483" ref_url="https://bugzilla.suse.com/1181483" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27828" ref_url="https://www.suse.com/security/cve/CVE-2020-27828/" source="CVE"/>
		<reference ref_id="CVE-2021-3272" ref_url="https://www.suse.com/security/cve/CVE-2021-3272/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0488-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008334.html" source="SUSE-SU"/>
		<description>
This update for jasper fixes the following issues:

- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
- bsc#1181483 CVE-2021-3272: Fix buffer over-read in jp2_decode
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-16"/>
	<updated date="2021-02-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179748">SUSE bug 1179748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181483">SUSE bug 1181483</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27828/">CVE-2020-27828</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3272/">CVE-2021-3272</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504161" comment="libjasper-devel-2.0.14-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503616" comment="libjasper4-2.0.14-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139373" version="1" class="patch">
	<metadata>
		<title>Security update for screen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182092" ref_url="https://bugzilla.suse.com/1182092" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26937" ref_url="https://www.suse.com/security/cve/CVE-2021-26937/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008337.html" source="SUSE-SU"/>
		<description>
This update for screen fixes the following issues:

- CVE-2021-26937: Fixed double width combining char handling that could lead to a denial of service or code execution (bsc#1182092).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-17"/>
	<updated date="2021-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182092">SUSE bug 1182092</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26937/">CVE-2021-26937</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503617" comment="screen-4.6.2-5.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139374" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182246" ref_url="https://bugzilla.suse.com/1182246" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8625" ref_url="https://www.suse.com/security/cve/CVE-2020-8625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008340.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack [bsc#1182246]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-18"/>
	<updated date="2021-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182246">SUSE bug 1182246</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8625/">CVE-2020-8625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503618" comment="bind-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503619" comment="bind-chrootenv-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503620" comment="bind-devel-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500020" comment="bind-doc-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503621" comment="bind-utils-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503622" comment="libbind9-1600-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503623" comment="libdns1605-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503624" comment="libirs-devel-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503625" comment="libirs1601-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503626" comment="libisc1606-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503627" comment="libisccc1600-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503628" comment="libisccfg1600-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503629" comment="libns1604-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494121" comment="python3-bind-9.16.6-12.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139375" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1046305" ref_url="https://bugzilla.suse.com/1046305" source="BUGZILLA"/>
		<reference ref_id="1046306" ref_url="https://bugzilla.suse.com/1046306" source="BUGZILLA"/>
		<reference ref_id="1046540" ref_url="https://bugzilla.suse.com/1046540" source="BUGZILLA"/>
		<reference ref_id="1046542" ref_url="https://bugzilla.suse.com/1046542" source="BUGZILLA"/>
		<reference ref_id="1046648" ref_url="https://bugzilla.suse.com/1046648" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050538" ref_url="https://bugzilla.suse.com/1050538" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1056653" ref_url="https://bugzilla.suse.com/1056653" source="BUGZILLA"/>
		<reference ref_id="1056657" ref_url="https://bugzilla.suse.com/1056657" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1073513" ref_url="https://bugzilla.suse.com/1073513" source="BUGZILLA"/>
		<reference ref_id="1074220" ref_url="https://bugzilla.suse.com/1074220" source="BUGZILLA"/>
		<reference ref_id="1075020" ref_url="https://bugzilla.suse.com/1075020" source="BUGZILLA"/>
		<reference ref_id="1086282" ref_url="https://bugzilla.suse.com/1086282" source="BUGZILLA"/>
		<reference ref_id="1086301" ref_url="https://bugzilla.suse.com/1086301" source="BUGZILLA"/>
		<reference ref_id="1086313" ref_url="https://bugzilla.suse.com/1086313" source="BUGZILLA"/>
		<reference ref_id="1086314" ref_url="https://bugzilla.suse.com/1086314" source="BUGZILLA"/>
		<reference ref_id="1098633" ref_url="https://bugzilla.suse.com/1098633" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104270" ref_url="https://bugzilla.suse.com/1104270" source="BUGZILLA"/>
		<reference ref_id="1104277" ref_url="https://bugzilla.suse.com/1104277" source="BUGZILLA"/>
		<reference ref_id="1104279" ref_url="https://bugzilla.suse.com/1104279" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104742" ref_url="https://bugzilla.suse.com/1104742" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111981" ref_url="https://bugzilla.suse.com/1111981" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1126390" ref_url="https://bugzilla.suse.com/1126390" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1136348" ref_url="https://bugzilla.suse.com/1136348" source="BUGZILLA"/>
		<reference ref_id="1149032" ref_url="https://bugzilla.suse.com/1149032" source="BUGZILLA"/>
		<reference ref_id="1174206" ref_url="https://bugzilla.suse.com/1174206" source="BUGZILLA"/>
		<reference ref_id="1176831" ref_url="https://bugzilla.suse.com/1176831" source="BUGZILLA"/>
		<reference ref_id="1176846" ref_url="https://bugzilla.suse.com/1176846" source="BUGZILLA"/>
		<reference ref_id="1178036" ref_url="https://bugzilla.suse.com/1178036" source="BUGZILLA"/>
		<reference ref_id="1178049" ref_url="https://bugzilla.suse.com/1178049" source="BUGZILLA"/>
		<reference ref_id="1178900" ref_url="https://bugzilla.suse.com/1178900" source="BUGZILLA"/>
		<reference ref_id="1179093" ref_url="https://bugzilla.suse.com/1179093" source="BUGZILLA"/>
		<reference ref_id="1179142" ref_url="https://bugzilla.suse.com/1179142" source="BUGZILLA"/>
		<reference ref_id="1179508" ref_url="https://bugzilla.suse.com/1179508" source="BUGZILLA"/>
		<reference ref_id="1179509" ref_url="https://bugzilla.suse.com/1179509" source="BUGZILLA"/>
		<reference ref_id="1179563" ref_url="https://bugzilla.suse.com/1179563" source="BUGZILLA"/>
		<reference ref_id="1179573" ref_url="https://bugzilla.suse.com/1179573" source="BUGZILLA"/>
		<reference ref_id="1179575" ref_url="https://bugzilla.suse.com/1179575" source="BUGZILLA"/>
		<reference ref_id="1179878" ref_url="https://bugzilla.suse.com/1179878" source="BUGZILLA"/>
		<reference ref_id="1180130" ref_url="https://bugzilla.suse.com/1180130" source="BUGZILLA"/>
		<reference ref_id="1180765" ref_url="https://bugzilla.suse.com/1180765" source="BUGZILLA"/>
		<reference ref_id="1180812" ref_url="https://bugzilla.suse.com/1180812" source="BUGZILLA"/>
		<reference ref_id="1180891" ref_url="https://bugzilla.suse.com/1180891" source="BUGZILLA"/>
		<reference ref_id="1180912" ref_url="https://bugzilla.suse.com/1180912" source="BUGZILLA"/>
		<reference ref_id="1181018" ref_url="https://bugzilla.suse.com/1181018" source="BUGZILLA"/>
		<reference ref_id="1181170" ref_url="https://bugzilla.suse.com/1181170" source="BUGZILLA"/>
		<reference ref_id="1181230" ref_url="https://bugzilla.suse.com/1181230" source="BUGZILLA"/>
		<reference ref_id="1181231" ref_url="https://bugzilla.suse.com/1181231" source="BUGZILLA"/>
		<reference ref_id="1181260" ref_url="https://bugzilla.suse.com/1181260" source="BUGZILLA"/>
		<reference ref_id="1181349" ref_url="https://bugzilla.suse.com/1181349" source="BUGZILLA"/>
		<reference ref_id="1181425" ref_url="https://bugzilla.suse.com/1181425" source="BUGZILLA"/>
		<reference ref_id="1181504" ref_url="https://bugzilla.suse.com/1181504" source="BUGZILLA"/>
		<reference ref_id="1181809" ref_url="https://bugzilla.suse.com/1181809" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25639" ref_url="https://www.suse.com/security/cve/CVE-2020-25639/" source="CVE"/>
		<reference ref_id="CVE-2020-27835" ref_url="https://www.suse.com/security/cve/CVE-2020-27835/" source="CVE"/>
		<reference ref_id="CVE-2020-29568" ref_url="https://www.suse.com/security/cve/CVE-2020-29568/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-20177" ref_url="https://www.suse.com/security/cve/CVE-2021-20177/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="CVE-2021-3348" ref_url="https://www.suse.com/security/cve/CVE-2021-3348/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008354.html" source="SUSE-SU"/>
		<description>
 The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349).
- CVE-2021-3348: Fixed a use-after-free in nbd_add_socket that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup (bnc#1181504).
- CVE-2021-20177: Fixed a kernel panic related to iptables string matching rules. A privileged user could insert a rule which could lead to denial of service (bnc#1180765).
- CVE-2021-0342: In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. (bnc#1180812)
- CVE-2020-27835: A use-after-free in the infiniband hfi1 driver was found, specifically in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).
- CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).
- CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509).
- CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508).

The following non-security bugs were fixed:

- ACPI: scan: Harden acpi_device_add() against device ID overflows (git-fixes).
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (git-fixes).
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (git-fixes).
- ALSA: doc: Fix reference to mixart.rst (git-fixes).
- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (git-fixes).
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (git-fixes).
- ALSA: hda/via: Add minimum mute flag (git-fixes).
- ALSA: hda/via: Fix runtime PM for Clevo W35xSS (git-fixes).
- ALSA: pcm: Clear the full allocated memory at hw_params (git-fixes).
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (git-fixes).
- ASoC: Intel: haswell: Add missing pm_ops (git-fixes).
- ASoC: dapm: remove widget from dirty list on free (git-fixes).
- EDAC/amd64: Fix PCI component registration (bsc#1112178).
- IB/mlx5: Fix DEVX support for MLX5_CMD_OP_INIT2INIT_QP command (bsc#1103991).
- KVM: SVM: Initialize prev_ga_tag before use (bsc#1180912).
- KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages (bsc#1181230).
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (git-fixes).
- NFS: nfs_igrab_and_active must first reference the superblock (git-fixes).
- NFS: switch nfsiod to be an UNBOUND workqueue (git-fixes).
- NFSv4.2: condition READDIR's mask for security label based on LSM state (git-fixes).
- RDMA/addr: Fix race with netevent_callback()/rdma_addr_cancel() (bsc#1103992).
- RDMA/bnxt_re: Do not add user qps to flushlist (bsc#1050244 ).
- RDMA/bnxt_re: Do not report transparent vlan from QP1 (bsc#1104742).
- RDMA/cma: Do not overwrite sgid_attr after device is released (bsc#1103992).
- RDMA/core: Ensure security pkey modify is not lost (bsc#1046306 ).
- RDMA/core: Fix pkey and port assignment in get_new_pps (bsc#1046306).
- RDMA/core: Fix protection fault in get_pkey_idx_qp_list (bsc#1046306).
- RDMA/core: Fix reported speed and width (bsc#1046306 ).
- RDMA/core: Fix return error value in _ib_modify_qp() to negative (bsc#1103992).
- RDMA/core: Fix use of logical OR in get_new_pps (bsc#1046306 ).
- RDMA/hns: Bugfix for memory window mtpt configuration (bsc#1104427).
- RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver (bsc#1104427).
- RDMA/hns: Fix cmdq parameter of querying pf timer resource (bsc#1104427 bsc#1126206).
- RDMA/hns: Fix missing sq_sig_type when querying QP (bsc#1104427 ).
- RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver (bsc#1104427).
- RDMA/iw_cxgb4: Fix incorrect function parameters (bsc#1136348 jsc#SLE-4684).
- RDMA/iw_cxgb4: initiate CLOSE when entering TERM (bsc#1136348 jsc#SLE-4684).
- RDMA/mlx5: Add init2init as a modify command (bsc#1103991 ).
- RDMA/mlx5: Fix typo in enum name (bsc#1103991).
- RDMA/mlx5: Fix wrong free of blue flame register on error (bsc#1103991).
- RDMA/qedr: Fix inline size returned for iWARP (bsc#1050545 ).
- SUNRPC: cache: ignore timestamp written to 'flush' file (bsc#1178036).
- USB: ehci: fix an interrupt calltrace error (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind() (git-fixes).
- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- __netif_receive_skb_core: pass skb by reference (bsc#1109837).
- arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() (bsc#1180130).
- arm64: pgtable: Fix pte_accessible() (bsc#1180130).
- bnxt_en: Do not query FW when netif_running() is false (bsc#1086282).
- bnxt_en: Fix accumulation of bp-&gt;net_stats_prev (bsc#1104745 ).
- bnxt_en: Improve stats context resource accounting with RDMA driver loaded (bsc#1104745).
- bnxt_en: Release PCI regions when DMA mask setup fails during probe (git-fixes).
- bnxt_en: Reset rings if ring reservation fails during open() (bsc#1086282).
- bnxt_en: fix HWRM error when querying VF temperature (bsc#1104745).
- bnxt_en: fix error return code in bnxt_init_board() (git-fixes).
- bnxt_en: fix error return code in bnxt_init_one() (bsc#1050242 ).
- bnxt_en: read EEPROM A2h address using page 0 (git-fixes).
- bnxt_en: return proper error codes in bnxt_show_temp (bsc#1104745).
- bonding: set dev-&gt;needed_headroom in bond_setup_by_slave() (git-fixes).
- btrfs: add a flag to iterate_inodes_from_logical to find all extent refs for uncompressed extents (bsc#1174206).
- btrfs: add a flags argument to LOGICAL_INO and call it LOGICAL_INO_V2 (bsc#1174206).
- btrfs: increase output size for LOGICAL_INO_V2 ioctl (bsc#1174206).
- btrfs: qgroup: do not try to wait flushing if we're already holding a transaction (bsc#1179575).
- caif: no need to check return value of debugfs_create functions (git-fixes).
- can: c_can: c_can_power_up(): fix error handling (git-fixes).
- can: dev: prevent potential information leak in can_fill_info() (git-fixes).
- can: vxcan: vxcan_xmit: fix use after free bug (git-fixes).
- chelsio/chtls: correct function return and return type (bsc#1104270).
- chelsio/chtls: correct netdevice for vlan interface (bsc#1104270 ).
- chelsio/chtls: fix a double free in chtls_setkey() (bsc#1104270 ).
- chelsio/chtls: fix always leaking ctrl_skb (bsc#1104270 ).
- chelsio/chtls: fix deadlock issue (bsc#1104270).
- chelsio/chtls: fix memory leaks caused by a race (bsc#1104270 ).
- chelsio/chtls: fix memory leaks in CPL handlers (bsc#1104270 ).
- chelsio/chtls: fix panic during unload reload chtls (bsc#1104270 ).
- chelsio/chtls: fix socket lock (bsc#1104270).
- chelsio/chtls: fix tls record info to user (bsc#1104270 ).
- chtls: Added a check to avoid NULL pointer dereference (bsc#1104270).
- chtls: Fix chtls resources release sequence (bsc#1104270 ).
- chtls: Fix hardware tid leak (bsc#1104270).
- chtls: Remove invalid set_tcb call (bsc#1104270).
- chtls: Replace skb_dequeue with skb_peek (bsc#1104270 ).
- cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled (bsc#1109837).
- cxgb3: fix error return code in t3_sge_alloc_qset() (git-fixes).
- cxgb4/cxgb4vf: fix flow control display for auto negotiation (bsc#1046540 bsc#1046542).
- cxgb4: fix SGE queue dump destination buffer context (bsc#1073513).
- cxgb4: fix adapter crash due to wrong MC size (bsc#1073513).
- cxgb4: fix all-mask IP address comparison (bsc#1064802 bsc#1066129).
- cxgb4: fix large delays in PTP synchronization (bsc#1046540 bsc#1046648).
- cxgb4: fix the panic caused by non smac rewrite (bsc#1064802 bsc#1066129).
- cxgb4: fix thermal zone device registration (bsc#1104279 bsc#1104277).
- cxgb4: fix throughput drop during Tx backpressure (bsc#1127354 bsc#1127371).
- cxgb4: move DCB version extern to header file (bsc#1104279 ).
- cxgb4: remove cast when saving IPv4 partial checksum (bsc#1074220).
- cxgb4: set up filter action after rewrites (bsc#1064802 bsc#1066129).
- cxgb4: use correct type for all-mask IP address comparison (bsc#1064802 bsc#1066129).
- cxgb4: use unaligned conversion for fetching timestamp (bsc#1046540 bsc#1046648).
- dm: avoid filesystem lookup in dm_get_dev_t() (bsc#1178049).
- dmaengine: xilinx_dma: check dma_async_device_register return value (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (git-fixes).
- docs: Fix reST markup when linking to sections (git-fixes).
- drivers: net: xgene: Fix the order of the arguments of 'alloc_etherdev_mqs()' (git-fixes).
- drm/amd/powerplay: fix a crash when overclocking Vega M (bsc#1113956)
- drm/amdkfd: Put ACPI table after using it (bsc#1129770) Backporting changes: 	* context changes
- drm/atomic: put state on error path (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/i915: Clear the repeater bit on HDCP disable (bsc#1112178)
- drm/i915: Fix sha_text population code (bsc#1112178)
- drm/msm: Avoid div-by-zero in dpu_crtc_atomic_check() (bsc#1129770)
- drm/msm: Fix WARN_ON() splat in _free_object() (bsc#1129770)
- drm/msm: Fix use-after-free in msm_gem with carveout (bsc#1129770)
- drm/nouveau/bios: fix issue shadowing expansion ROMs (git-fixes).
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (git-fixes).
- drm/nouveau/privring: ack interrupts the same way as RM (git-fixes).
- drm/tve200: Fix handling of platform_get_irq() error (bsc#1129770)
- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1112178)
- drm: sun4i: hdmi: Fix inverted HPD result (bsc#1112178)
- drm: sun4i: hdmi: Remove extra HPD polling (bsc#1112178)
- ehci: fix EHCI host controller initialization sequence (git-fixes).
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (git-fixes).
- floppy: reintroduce O_NDELAY fix (boo#1181018).
- futex: Do not enable IRQs unconditionally in put_pi_state() (bsc#1149032).
- futex: Ensure the correct return value from futex_lock_pi() (bsc#1181349 bsc#1149032).
- futex: Fix incorrect should_fail_futex() handling (bsc#1181349).
- futex: Handle faults correctly for PI futexes (bsc#1181349 bsc#1149032).
- futex: Provide and use pi_state_update_owner() (bsc#1181349 bsc#1149032).
- futex: Replace pointless printk in fixup_owner() (bsc#1181349 bsc#1149032).
- futex: Simplify fixup_pi_state_owner() (bsc#1181349 bsc#1149032).
- futex: Use pi_state_update_owner() in put_pi_state() (bsc#1181349 bsc#1149032).
- i2c: octeon: check correct size of maximum RECV_LEN packet (git-fixes).
- i40e: Fix removing driver while bare-metal VFs pass traffic (git-fixes).
- i40e: avoid premature Rx buffer reuse (bsc#1111981).
- igb: Report speed and duplex as unknown when device is runtime suspended (git-fixes).
- igc: fix link speed advertising (jsc#SLE-4799).
- iio: ad5504: Fix setting power-down state (git-fixes).
- iommu/vt-d: Do not dereference iommu_device if IOMMU_API is not built (bsc#1181260, jsc#ECO-3191).
- iommu/vt-d: Gracefully handle DMAR units with no supported address widths (bsc#1181260, jsc#ECO-3191).
- ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K (bsc#1109837).
- ixgbe: avoid premature Rx buffer reuse (bsc#1109837 ).
- kABI: Fix kABI for extended APIC-ID support (bsc#1181260, jsc#ECO-3191).
- kernfs: deal with kernfs_fill_super() failures (bsc#1181809).
- lockd: do not use interval-based rebinding over TCP (git-fixes).
- locking/futex: Allow low-level atomic operations to return -EAGAIN (bsc#1149032).
- md/raid10: initialize r10_bio-&gt;read_slot before use (git-fixes).
- md: fix a warning caused by a race between concurrent md_ioctl()s (git-fixes).
- media: gp8psk: initialize stats at power control logic (git-fixes).
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (git-fixes).
- misdn: dsp: select CONFIG_BITREVERSE (git-fixes).
- mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() (git-fixes).
- mlxsw: destroy workqueue when trap_register in mlxsw_emad_init (bsc#1112374).
- mlxsw: spectrum: Do not modify cloned SKBs during xmit (git-fixes).
- mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails (bsc#1112374).
- mlxsw: switchx2: Do not modify cloned SKBs during xmit (git-fixes).
- mm, page_alloc: fix core hung in free_pcppages_bulk() (git fixes (mm/hotplug)).
- mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous() (git fixes (mm/pgalloc)).
- mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly (git fixes (mm/hmm)).
- mm/slab: use memzero_explicit() in kzfree() (git fixes (mm/slab)).
- mm: do not wake kswapd prematurely when watermark boosting is disabled (git fixes (mm/vmscan)).
- mm: hwpoison: disable memory error handling on 1GB hugepage (git fixes (mm/hwpoison)).
- mmc: sdhci-xenon: fix 1.8v regulator stabilization (git-fixes).
- nbd: Fix memory leak in nbd_add_socket (bsc#1181504).
- net/af_iucv: always register net_device notifier (git-fixes).
- net/af_iucv: fix null pointer dereference on shutdown (bsc#1179563 LTC#190108).
- net/af_iucv: set correct sk_protocol for child sockets (git-fixes).
- net/filter: Permit reading NET in load_bytes_relative when MAC not set (bsc#1109837).
- net/liquidio: Delete driver version assignment (git-fixes).
- net/liquidio: Delete non-working LIQUIDIO_PACKAGE check (git-fixes).
- net/mlx4_en: Avoid scheduling restart task if it is already running (git-fixes).
- net/mlx5: Add handling of port type in rule deletion (bsc#1103991).
- net/mlx5: Fix memory leak on flow table creation error flow (bsc#1046305).
- net/mlx5e: Fix VLAN cleanup flow (git-fixes).
- net/mlx5e: Fix VLAN create flow (git-fixes).
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (git-fixes).
- net/mlx5e: Fix two double free cases (bsc#1046305).
- net/mlx5e: IPoIB, Drop multicast packets that this interface sent (bsc#1075020).
- net/mlx5e: TX, Fix consumer index of error cqe dump (bsc#1103990 ).
- net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq (bsc#1103990).
- net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels (bsc#1109837).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource() (git-fixes).
- net/smc: receive pending data after RCV_SHUTDOWN (git-fixes).
- net/smc: receive returns without data (git-fixes).
- net/sonic: Add mutual exclusion for accessing shared state (git-fixes).
- net: atlantic: fix potential error handling (git-fixes).
- net: atlantic: fix use after free kasan warn (git-fixes).
- net: bcmgenet: keep MAC in reset until PHY is up (git-fixes).
- net: bcmgenet: reapply manual settings to the PHY (git-fixes).
- net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe() (git-fixes).
- net: cbs: Fix software cbs to consider packet sending time (bsc#1109837).
- net: dsa: LAN9303: select REGMAP when LAN9303 enable (git-fixes).
- net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL (git-fixes).
- net: ena: set initial DMA width to avoid intel iommu issue (git-fixes).
- net: ethernet: mlx4: Avoid assigning a value to ring_cons but not used it anymore in mlx4_en_xmit() (git-fixes).
- net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse() (git-fixes).
- net: freescale: fec: Fix ethtool -d runtime PM (git-fixes).
- net: hns3: add a missing uninit debugfs when unload driver (bsc#1104353).
- net: hns3: add compatible handling for command HCLGE_OPC_PF_RST_DONE (git-fixes).
- net: hns3: add management table after IMP reset (bsc#1104353 ).
- net: hns3: check reset interrupt status when reset fails (git-fixes).
- net: hns3: clear reset interrupt status in hclge_irq_handle() (git-fixes).
- net: hns3: fix a TX timeout issue (bsc#1104353).
- net: hns3: fix a wrong reset interrupt status mask (git-fixes).
- net: hns3: fix error VF index when setting VLAN offload (bsc#1104353).
- net: hns3: fix error handling for desc filling (bsc#1104353 ).
- net: hns3: fix for not calculating TX BD send size correctly (bsc#1126390).
- net: hns3: fix interrupt clearing error for VF (bsc#1104353 ).
- net: hns3: fix mis-counting IRQ vector numbers issue (bsc#1104353).
- net: hns3: fix shaper parameter algorithm (bsc#1104353 ).
- net: hns3: fix the number of queues actually used by ARQ (bsc#1104353).
- net: hns3: fix use-after-free when doing self test (bsc#1104353 ).
- net: hns3: reallocate SSU' buffer size when pfc_en changes (bsc#1104353).
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (bsc#1098633).
- net: mvpp2: Fix error return code in mvpp2_open() (bsc#1119113 ).
- net: mvpp2: fix pkt coalescing int-threshold configuration (bsc#1098633).
- net: phy: Allow BCM54616S PHY to setup internal TX/RX clock delay (git-fixes).
- net: phy: broadcom: Fix RGMII delays configuration for BCM54210E (git-fixes).
- net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs (git-fixes).
- net: phy: micrel: make sure the factory test bit is cleared (git-fixes).
- net: qca_spi: Move reset_count to struct qcaspi (git-fixes).
- net: smc911x: Adjust indentation in smc911x_phy_configure (git-fixes).
- net: stmmac: 16KB buffer must be 16 byte aligned (git-fixes).
- net: stmmac: Do not accept invalid MTU values (git-fixes).
- net: stmmac: Enable 16KB buffer size (git-fixes).
- net: stmmac: RX buffer size must be 16 byte aligned (git-fixes).
- net: stmmac: dwmac-meson8b: Fix signedness bug in probe (git-fixes).
- net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes (git-fixes).
- net: stmmac: fix length of PTP clock's name string (git-fixes).
- net: stmmac: gmac4+: Not all Unicast addresses may be available (git-fixes).
- net: sunrpc: interpret the return value of kstrtou32 correctly (git-fixes).
- net: team: fix memory leak in __team_options_register (git-fixes).
- net: tulip: Adjust indentation in {dmfe, uli526x}_init_module (git-fixes).
- net: usb: lan78xx: Fix error message format specifier (git-fixes).
- net: vlan: avoid leaks on register_vlan_dev() failures (git-fixes).
- net_failover: fixed rollback in net_failover_open() (bsc#1109837).
- net_sched: let qdisc_put() accept NULL pointer (bsc#1056657 bsc#1056653 bsc#1056787).
- nfp: validate the return code from dev_queue_xmit() (git-fixes).
- nfs_common: need lock during iterate through the list (git-fixes).
- nfsd4: readdirplus shouldn't return parent of export (git-fixes).
- nfsd: Fix message level for normal termination (git-fixes).
- pNFS: Mark layout for return if return-on-close was not sent (git-fixes).
- page_frag: Recover from memory pressure (git fixes (mm/pgalloc)).
- powerpc/perf: Add generic compat mode pmu driver (bsc#1178900 ltc#189284).
- powerpc/perf: Fix crashes with generic_compat_pmu &amp; BHRB (bsc#1178900 ltc#189284 git-fixes).
- powerpc/perf: init pmu from core-book3s (bsc#1178900 ltc#189284).
- qed: Fix race condition between scheduling and destroying the slowpath workqueue (bsc#1086314 bsc#1086313 bsc#1086301).
- qed: Fix use after free in qed_chain_free (bsc#1050536 bsc#1050538).
- r8152: Add Lenovo Powered USB-C Travel Hub (git-fixes).
- rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (bsc#1181349 bsc#1149032).
- s390/cio: fix use-after-free in ccw_device_destroy_console (git-fixes).
- s390/dasd: fix list corruption of lcu list (bsc#1181170 LTC#190915).
- s390/dasd: fix list corruption of pavgroup group list (bsc#1181170 LTC#190915).
- s390/dasd: prevent inconsistent LCU device data (bsc#1181170 LTC#190915).
- s390/qeth: delay draining the TX buffers (git-fixes).
- s390/qeth: fix L2 header access in qeth_l3_osa_features_check() (git-fixes).
- s390/qeth: fix deadlock during recovery (git-fixes).
- s390/qeth: fix locking for discipline setup / removal (git-fixes).
- s390/smp: perform initial CPU reset also for SMT siblings (git-fixes).
- sched/fair: Fix enqueue_task_fair warning (bsc#1179093).
- sched/fair: Fix enqueue_task_fair() warning some more (bsc#1179093).
- sched/fair: Fix reordering of enqueue/dequeue_task_fair() (bsc#1179093).
- sched/fair: Fix unthrottle_cfs_rq() for leaf_cfs_rq list (bsc#1179093).
- sched/fair: Reorder enqueue/dequeue_task_fair path (bsc#1179093).
- scsi: core: Fix VPD LUN ID designator priorities (bsc#1178049, git-fixes).
- scsi: ibmvfc: Set default timeout to avoid crash during migration (bsc#1181425 ltc#188252).
- scsi: lpfc: Enhancements to LOG_TRACE_EVENT for better readability (bsc#1180891).
- scsi: lpfc: Fix FW reset action if I/Os are outstanding (bsc#1180891).
- scsi: lpfc: Fix NVMe recovery after mailbox timeout (bsc#1180891).
- scsi: lpfc: Fix PLOGI S_ID of 0 on pt2pt config (bsc#1180891).
- scsi: lpfc: Fix auto sli_mode and its effect on CONFIG_PORT for SLI3 (bsc#1180891).
- scsi: lpfc: Fix crash when a fabric node is released prematurely (bsc#1180891).
- scsi: lpfc: Fix error log messages being logged following SCSI task mgnt (bsc#1180891).
- scsi: lpfc: Fix target reset failing (bsc#1180891).
- scsi: lpfc: Fix vport create logging (bsc#1180891).
- scsi: lpfc: Implement health checking when aborting I/O (bsc#1180891).
- scsi: lpfc: Prevent duplicate requests to unregister with cpuhp framework (bsc#1180891).
- scsi: lpfc: Refresh ndlp when a new PRLI is received in the PRLI issue state (bsc#1180891).
- scsi: lpfc: Simplify bool comparison (bsc#1180891).
- scsi: lpfc: Update lpfc version to 12.8.0.7 (bsc#1180891).
- scsi: lpfc: Use the nvme-fc transport supplied timeout for LS requests (bsc#1180891).
- scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit (bsc#1179142).
- serial: mvebu-uart: fix tx lost characters at power off (git-fixes).
- spi: cadence: cache reference clock rate during probe (git-fixes).
- team: set dev-&gt;needed_headroom in team_setup_by_port() (git-fixes).
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (bsc#1109837).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind failure (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: udc: core: Use lock when write to soft_connect (git-fixes).
- veth: Adjust hard_start offset on redirect XDP frames (bsc#1109837).
- vfio iommu: Add dma available capability (bsc#1179573 LTC#190106).
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (bsc#1181231).
- vhost/vsock: fix vhost vsock cid hashing inconsistent (git-fixes).
- virtio_net: Keep vnet header zeroed if XDP is loaded for small buffer (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- x86/apic: Fix x2apic enablement without interrupt remapping (bsc#1181260, jsc#ECO-3191).
- x86/apic: Support 15 bits of APIC ID in IOAPIC/MSI where available (bsc#1181260, jsc#ECO-3191).
- x86/hyperv: Fix kexec panic/hang issues (bsc#1176831).
- x86/i8259: Use printk_deferred() to prevent deadlock (bsc#1112178).
- x86/ioapic: Handle Extended Destination ID field in RTE (bsc#1181260, jsc#ECO-3191).
- x86/kvm: Add KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181260, jsc#ECO-3191).
- x86/kvm: Reserve KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181260, jsc#ECO-3191).
- x86/mm/numa: Remove uninitialized_var() usage (bsc#1112178).
- x86/mm: Fix leak of pmd ptlock (bsc#1112178).
- x86/msi: Only use high bits of MSI address for DMAR unit (bsc#1181260, jsc#ECO-3191).
- x86/mtrr: Correct the range check before performing MTRR type lookups (bsc#1112178).
- x86/resctrl: Do not move a task to the same resource group (bsc#1112178).
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (bsc#1112178).
- xdp: Fix xsk_generic_xmit errno (bsc#1109837).
- xhci: make sure TRB is fully written before giving it to the controller (git-fixes).
- xhci: tegra: Delay for disabling LFPS detector (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-19"/>
	<updated date="2021-02-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046305">SUSE bug 1046305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046306">SUSE bug 1046306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046540">SUSE bug 1046540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046542">SUSE bug 1046542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046648">SUSE bug 1046648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050538">SUSE bug 1050538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056653">SUSE bug 1056653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056657">SUSE bug 1056657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073513">SUSE bug 1073513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074220">SUSE bug 1074220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075020">SUSE bug 1075020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086282">SUSE bug 1086282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086301">SUSE bug 1086301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086313">SUSE bug 1086313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086314">SUSE bug 1086314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098633">SUSE bug 1098633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104270">SUSE bug 1104270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104277">SUSE bug 1104277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104279">SUSE bug 1104279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104742">SUSE bug 1104742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111981">SUSE bug 1111981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126390">SUSE bug 1126390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136348">SUSE bug 1136348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149032">SUSE bug 1149032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174206">SUSE bug 1174206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176831">SUSE bug 1176831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176846">SUSE bug 1176846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178036">SUSE bug 1178036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178049">SUSE bug 1178049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178900">SUSE bug 1178900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179093">SUSE bug 1179093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179142">SUSE bug 1179142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179508">SUSE bug 1179508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179509">SUSE bug 1179509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179563">SUSE bug 1179563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179573">SUSE bug 1179573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179575">SUSE bug 1179575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179878">SUSE bug 1179878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180130">SUSE bug 1180130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180765">SUSE bug 1180765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180812">SUSE bug 1180812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180891">SUSE bug 1180891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180912">SUSE bug 1180912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181018">SUSE bug 1181018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181170">SUSE bug 1181170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181230">SUSE bug 1181230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181231">SUSE bug 1181231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181260">SUSE bug 1181260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181349">SUSE bug 1181349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181425">SUSE bug 1181425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181504">SUSE bug 1181504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181809">SUSE bug 1181809</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25639/">CVE-2020-25639</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27835/">CVE-2020-27835</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29568/">CVE-2020-29568</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20177/">CVE-2021-20177</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3348/">CVE-2021-3348</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504162" comment="kernel-default-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504163" comment="kernel-default-base-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504164" comment="kernel-default-devel-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504165" comment="kernel-devel-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504166" comment="kernel-docs-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504167" comment="kernel-macros-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504168" comment="kernel-obs-build-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504169" comment="kernel-source-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504170" comment="kernel-syms-4.12.14-197.83.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139376" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182286" ref_url="https://bugzilla.suse.com/1182286" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13558" ref_url="https://www.suse.com/security/cve/CVE-2020-13558/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0583-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008365.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.30.5 (bsc#1182286):

  + Bring back the WebKitPluginProcess installation that was removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-24"/>
	<updated date="2021-02-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182286">SUSE bug 1182286</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13558/">CVE-2020-13558</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503630" comment="libjavascriptcoregtk-4_0-18-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503631" comment="libwebkit2gtk-4_0-37-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503632" comment="libwebkit2gtk3-lang-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503633" comment="typelib-1_0-JavaScriptCore-4_0-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503634" comment="typelib-1_0-WebKit2-4_0-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503635" comment="typelib-1_0-WebKit2WebExtension-4_0-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503636" comment="webkit2gtk-4_0-injected-bundles-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503637" comment="webkit2gtk3-devel-2.30.5-3.66.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139377" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182049" ref_url="https://bugzilla.suse.com/1182049" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21702" ref_url="https://www.suse.com/security/cve/CVE-2021-21702/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008366.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2021-21702 [bsc#1182049]: NULL pointer dereference in SoapClient
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-24"/>
	<updated date="2021-02-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182049">SUSE bug 1182049</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21702/">CVE-2021-21702</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503638" comment="apache2-mod_php7-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503639" comment="php7-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503640" comment="php7-bcmath-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503641" comment="php7-bz2-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503642" comment="php7-calendar-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503643" comment="php7-ctype-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503644" comment="php7-curl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503645" comment="php7-dba-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503646" comment="php7-devel-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503647" comment="php7-dom-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503648" comment="php7-enchant-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503649" comment="php7-exif-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503650" comment="php7-fastcgi-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503651" comment="php7-fileinfo-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503652" comment="php7-fpm-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503653" comment="php7-ftp-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503654" comment="php7-gd-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503655" comment="php7-gettext-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503656" comment="php7-gmp-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503657" comment="php7-iconv-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503658" comment="php7-intl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503659" comment="php7-json-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503660" comment="php7-ldap-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503661" comment="php7-mbstring-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503662" comment="php7-mysql-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503663" comment="php7-odbc-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503664" comment="php7-opcache-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503665" comment="php7-openssl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503666" comment="php7-pcntl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503667" comment="php7-pdo-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503668" comment="php7-pear-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503669" comment="php7-pear-Archive_Tar-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503670" comment="php7-pgsql-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503671" comment="php7-phar-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503672" comment="php7-posix-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503673" comment="php7-readline-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503674" comment="php7-shmop-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503675" comment="php7-snmp-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503676" comment="php7-soap-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503677" comment="php7-sockets-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503678" comment="php7-sodium-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503679" comment="php7-sqlite-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503680" comment="php7-sysvmsg-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503681" comment="php7-sysvsem-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503682" comment="php7-sysvshm-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504171" comment="php7-tidy-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503683" comment="php7-tokenizer-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503684" comment="php7-wddx-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503685" comment="php7-xmlreader-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503686" comment="php7-xmlrpc-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503687" comment="php7-xmlwriter-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503688" comment="php7-xsl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503689" comment="php7-zip-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503690" comment="php7-zlib-7.2.5-4.73.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139378" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181550" ref_url="https://bugzilla.suse.com/1181550" source="BUGZILLA"/>
		<reference ref_id="1181556" ref_url="https://bugzilla.suse.com/1181556" source="BUGZILLA"/>
		<reference ref_id="1181557" ref_url="https://bugzilla.suse.com/1181557" source="BUGZILLA"/>
		<reference ref_id="1181558" ref_url="https://bugzilla.suse.com/1181558" source="BUGZILLA"/>
		<reference ref_id="1181559" ref_url="https://bugzilla.suse.com/1181559" source="BUGZILLA"/>
		<reference ref_id="1181560" ref_url="https://bugzilla.suse.com/1181560" source="BUGZILLA"/>
		<reference ref_id="1181561" ref_url="https://bugzilla.suse.com/1181561" source="BUGZILLA"/>
		<reference ref_id="1181562" ref_url="https://bugzilla.suse.com/1181562" source="BUGZILLA"/>
		<reference ref_id="1181563" ref_url="https://bugzilla.suse.com/1181563" source="BUGZILLA"/>
		<reference ref_id="1181564" ref_url="https://bugzilla.suse.com/1181564" source="BUGZILLA"/>
		<reference ref_id="1181565" ref_url="https://bugzilla.suse.com/1181565" source="BUGZILLA"/>
		<reference ref_id="1182740" ref_url="https://bugzilla.suse.com/1182740" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28243" ref_url="https://www.suse.com/security/cve/CVE-2020-28243/" source="CVE"/>
		<reference ref_id="CVE-2020-28972" ref_url="https://www.suse.com/security/cve/CVE-2020-28972/" source="CVE"/>
		<reference ref_id="CVE-2020-35662" ref_url="https://www.suse.com/security/cve/CVE-2020-35662/" source="CVE"/>
		<reference ref_id="CVE-2021-25281" ref_url="https://www.suse.com/security/cve/CVE-2021-25281/" source="CVE"/>
		<reference ref_id="CVE-2021-25282" ref_url="https://www.suse.com/security/cve/CVE-2021-25282/" source="CVE"/>
		<reference ref_id="CVE-2021-25283" ref_url="https://www.suse.com/security/cve/CVE-2021-25283/" source="CVE"/>
		<reference ref_id="CVE-2021-25284" ref_url="https://www.suse.com/security/cve/CVE-2021-25284/" source="CVE"/>
		<reference ref_id="CVE-2021-3144" ref_url="https://www.suse.com/security/cve/CVE-2021-3144/" source="CVE"/>
		<reference ref_id="CVE-2021-3148" ref_url="https://www.suse.com/security/cve/CVE-2021-3148/" source="CVE"/>
		<reference ref_id="CVE-2021-3197" ref_url="https://www.suse.com/security/cve/CVE-2021-3197/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008388.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix errors with virt.update
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-26"/>
	<updated date="2021-02-26"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1181550">SUSE bug 1181550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181556">SUSE bug 1181556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181557">SUSE bug 1181557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181558">SUSE bug 1181558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181559">SUSE bug 1181559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181560">SUSE bug 1181560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181561">SUSE bug 1181561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181562">SUSE bug 1181562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181563">SUSE bug 1181563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181564">SUSE bug 1181564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181565">SUSE bug 1181565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182740">SUSE bug 1182740</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-28243/">CVE-2020-28243</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28972/">CVE-2020-28972</cve>
	<cve impact="important" cvss3="9.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2020-35662/">CVE-2020-35662</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25281/">CVE-2021-25281</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25282/">CVE-2021-25282</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25283/">CVE-2021-25283</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-25284/">CVE-2021-25284</cve>
	<cve impact="important" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3144/">CVE-2021-3144</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3148/">CVE-2021-3148</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3197/">CVE-2021-3197</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504172" comment="python2-salt-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504173" comment="python3-salt-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504174" comment="salt-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504175" comment="salt-api-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494161" comment="salt-bash-completion-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504176" comment="salt-cloud-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504177" comment="salt-doc-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500064" comment="salt-fish-completion-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504178" comment="salt-master-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504179" comment="salt-minion-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504180" comment="salt-proxy-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504181" comment="salt-ssh-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504182" comment="salt-standalone-formulas-configuration-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504183" comment="salt-syndic-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494164" comment="salt-zsh-completion-3000-24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139379" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1178386" ref_url="https://bugzilla.suse.com/1178386" source="BUGZILLA"/>
		<reference ref_id="1179694" ref_url="https://bugzilla.suse.com/1179694" source="BUGZILLA"/>
		<reference ref_id="1179721" ref_url="https://bugzilla.suse.com/1179721" source="BUGZILLA"/>
		<reference ref_id="1180038" ref_url="https://bugzilla.suse.com/1180038" source="BUGZILLA"/>
		<reference ref_id="1181505" ref_url="https://bugzilla.suse.com/1181505" source="BUGZILLA"/>
		<reference ref_id="1182117" ref_url="https://bugzilla.suse.com/1182117" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-25013" ref_url="https://www.suse.com/security/cve/CVE-2019-25013/" source="CVE"/>
		<reference ref_id="CVE-2020-27618" ref_url="https://www.suse.com/security/cve/CVE-2020-27618/" source="CVE"/>
		<reference ref_id="CVE-2020-29562" ref_url="https://www.suse.com/security/cve/CVE-2020-29562/" source="CVE"/>
		<reference ref_id="CVE-2020-29573" ref_url="https://www.suse.com/security/cve/CVE-2020-29573/" source="CVE"/>
		<reference ref_id="CVE-2021-3326" ref_url="https://www.suse.com/security/cve/CVE-2021-3326/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008397.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

- Fix buffer overrun in EUC-KR conversion module (CVE-2019-25013, bsc#1182117, BZ #24973)
- x86: Harden printf against non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- gconv: Fix assertion failure in ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)
- iconv: Accept redundant shift sequences in IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv: Fix incorrect UCS4 inner loop bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- Fix parsing of /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-26"/>
	<updated date="2021-02-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178386">SUSE bug 1178386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179694">SUSE bug 1179694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179721">SUSE bug 1179721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180038">SUSE bug 1180038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181505">SUSE bug 1181505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182117">SUSE bug 1182117</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-25013/">CVE-2019-25013</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27618/">CVE-2020-27618</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29562/">CVE-2020-29562</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29573/">CVE-2020-29573</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3326/">CVE-2021-3326</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503709" comment="glibc-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494166" comment="glibc-32bit-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503710" comment="glibc-devel-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496617" comment="glibc-devel-32bit-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503711" comment="glibc-devel-static-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503712" comment="glibc-extra-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494169" comment="glibc-i18ndata-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494170" comment="glibc-info-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503713" comment="glibc-locale-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503714" comment="glibc-locale-base-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494173" comment="glibc-locale-base-32bit-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503715" comment="glibc-profile-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503716" comment="glibc-utils-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503717" comment="nscd-2.26-13.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139380" version="1" class="patch">
	<metadata>
		<title>Security update for python-Jinja2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181944" ref_url="https://bugzilla.suse.com/1181944" source="BUGZILLA"/>
		<reference ref_id="1182244" ref_url="https://bugzilla.suse.com/1182244" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28493" ref_url="https://www.suse.com/security/cve/CVE-2020-28493/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0654-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008398.html" source="SUSE-SU"/>
		<description>
This update for python-Jinja2 fixes the following issues:

- CVE-2020-28493: Fixed a ReDOS vulnerability where urlize could have 
  been called with untrusted user data (bsc#1181944).  
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-26"/>
	<updated date="2021-02-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181944">SUSE bug 1181944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182244">SUSE bug 1182244</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28493/">CVE-2020-28493</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498309" comment="python2-Jinja2-2.10.1-3.10.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494176" comment="python3-Jinja2-2.10.1-3.10.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139381" version="1" class="patch">
	<metadata>
		<title>Security update for rpmlint (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1169614" ref_url="https://bugzilla.suse.com/1169614" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:0658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008401.html" source="SUSE-SU"/>
		<description>
This update for rpmlint fixes the following issues:

- Whitelist PAM modules and DBUS rules for cockpit (bsc#1169614)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-01"/>
	<updated date="2021-03-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1169614">SUSE bug 1169614</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504184" comment="rpmlint-mini-1.10-7.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139382" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182333" ref_url="https://bugzilla.suse.com/1182333" source="BUGZILLA"/>
		<reference ref_id="1182619" ref_url="https://bugzilla.suse.com/1182619" source="BUGZILLA"/>
		<reference ref_id="1182620" ref_url="https://bugzilla.suse.com/1182620" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22883" ref_url="https://www.suse.com/security/cve/CVE-2021-22883/" source="CVE"/>
		<reference ref_id="CVE-2021-22884" ref_url="https://www.suse.com/security/cve/CVE-2021-22884/" source="CVE"/>
		<reference ref_id="CVE-2021-23840" ref_url="https://www.suse.com/security/cve/CVE-2021-23840/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008416.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

New upstream LTS version 10.24.0:

- CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (bsc#1182619)
- CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
- CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate (bsc#1182333)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182333">SUSE bug 1182333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182619">SUSE bug 1182619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182620">SUSE bug 1182620</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-22883/">CVE-2021-22883</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-22884/">CVE-2021-22884</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-23840/">CVE-2021-23840</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503718" comment="nodejs10-10.24.0-1.33.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503719" comment="nodejs10-devel-10.24.0-1.33.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501363" comment="nodejs10-docs-10.24.0-1.33.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503720" comment="npm10-10.24.0-1.33.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139383" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181848" ref_url="https://bugzilla.suse.com/1181848" source="BUGZILLA"/>
		<reference ref_id="1182357" ref_url="https://bugzilla.suse.com/1182357" source="BUGZILLA"/>
		<reference ref_id="1182614" ref_url="https://bugzilla.suse.com/1182614" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23968" ref_url="https://www.suse.com/security/cve/CVE-2021-23968/" source="CVE"/>
		<reference ref_id="CVE-2021-23969" ref_url="https://www.suse.com/security/cve/CVE-2021-23969/" source="CVE"/>
		<reference ref_id="CVE-2021-23973" ref_url="https://www.suse.com/security/cve/CVE-2021-23973/" source="CVE"/>
		<reference ref_id="CVE-2021-23978" ref_url="https://www.suse.com/security/cve/CVE-2021-23978/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008414.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969: Content Security Policy violation report could have contained the destination of a redirect
  * CVE-2021-23968: Content Security Policy violation report could have contained the destination of a redirect
  * CVE-2021-23973: MediaError message property could have leaked information about cross-origin resources
  * CVE-2021-23978: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
  * Fixed: Prevent access to NTFS special paths that could lead to filesystem corruption. 
  * Buffer overflow in depth pitch calculations for compressed textures 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181848">SUSE bug 1181848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182357">SUSE bug 1182357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182614">SUSE bug 1182614</bugzilla>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23968/">CVE-2021-23968</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23969/">CVE-2021-23969</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23973/">CVE-2021-23973</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23978/">CVE-2021-23978</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504185" comment="MozillaFirefox-78.8.0-3.133.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504186" comment="MozillaFirefox-devel-78.8.0-3.133.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504187" comment="MozillaFirefox-translations-common-78.8.0-3.133.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504188" comment="MozillaFirefox-translations-other-78.8.0-3.133.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139384" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1175970" ref_url="https://bugzilla.suse.com/1175970" source="BUGZILLA"/>
		<reference ref_id="1176711" ref_url="https://bugzilla.suse.com/1176711" source="BUGZILLA"/>
		<reference ref_id="1177883" ref_url="https://bugzilla.suse.com/1177883" source="BUGZILLA"/>
		<reference ref_id="1179264" ref_url="https://bugzilla.suse.com/1179264" source="BUGZILLA"/>
		<reference ref_id="1179265" ref_url="https://bugzilla.suse.com/1179265" source="BUGZILLA"/>
		<reference ref_id="1182057" ref_url="https://bugzilla.suse.com/1182057" source="BUGZILLA"/>
		<reference ref_id="1182262" ref_url="https://bugzilla.suse.com/1182262" source="BUGZILLA"/>
		<reference ref_id="1182263" ref_url="https://bugzilla.suse.com/1182263" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14372" ref_url="https://www.suse.com/security/cve/CVE-2020-14372/" source="CVE"/>
		<reference ref_id="CVE-2020-25632" ref_url="https://www.suse.com/security/cve/CVE-2020-25632/" source="CVE"/>
		<reference ref_id="CVE-2020-25647" ref_url="https://www.suse.com/security/cve/CVE-2020-25647/" source="CVE"/>
		<reference ref_id="CVE-2020-27749" ref_url="https://www.suse.com/security/cve/CVE-2020-27749/" source="CVE"/>
		<reference ref_id="CVE-2020-27779" ref_url="https://www.suse.com/security/cve/CVE-2020-27779/" source="CVE"/>
		<reference ref_id="CVE-2021-20225" ref_url="https://www.suse.com/security/cve/CVE-2021-20225/" source="CVE"/>
		<reference ref_id="CVE-2021-20233" ref_url="https://www.suse.com/security/cve/CVE-2021-20233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008427.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

grub2 now implements the new 'SBAT' method for SHIM based secure boot revocation. (bsc#1182057)

Following security issues are fixed that can violate secure boot constraints:

- CVE-2020-25632: Fixed a use-after-free in rmmod command (bsc#1176711)
- CVE-2020-25647: Fixed an out-of-bound write in grub_usb_device_initialize() (bsc#1177883)
- CVE-2020-27749: Fixed a stack buffer overflow in grub_parser_split_cmdline (bsc#1179264)
- CVE-2020-27779, CVE-2020-14372: Disallow cutmem and acpi commands in secure boot mode (bsc#1179265 bsc#1175970)
- CVE-2021-20225: Fixed a heap out-of-bounds write in short form option parser (bsc#1182262)
- CVE-2021-20233: Fixed a heap out-of-bound write due to mis-calculation of space required for quoting (bsc#1182263)

		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175970">SUSE bug 1175970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176711">SUSE bug 1176711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177883">SUSE bug 1177883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179264">SUSE bug 1179264</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179265">SUSE bug 1179265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182057">SUSE bug 1182057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182262">SUSE bug 1182262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182263">SUSE bug 1182263</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14372/">CVE-2020-14372</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25632/">CVE-2020-25632</cve>
	<cve impact="important" cvss3="7.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25647/">CVE-2020-25647</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27749/">CVE-2020-27749</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27779/">CVE-2020-27779</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20225/">CVE-2021-20225</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20233/">CVE-2021-20233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504189" comment="grub2-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504190" comment="grub2-arm64-efi-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504191" comment="grub2-i386-pc-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504192" comment="grub2-snapper-plugin-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504193" comment="grub2-systemd-sleep-plugin-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504194" comment="grub2-x86_64-efi-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504195" comment="grub2-x86_64-xen-2.02-26.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139385" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1180933" ref_url="https://bugzilla.suse.com/1180933" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:0689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008421.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- dnssec-keygen can no longer generate HMAC keys. Use tsig-keygen instead. [bsc#1180933]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180933">SUSE bug 1180933</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503728" comment="bind-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503729" comment="bind-chrootenv-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503730" comment="bind-devel-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500073" comment="bind-doc-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503731" comment="bind-utils-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503732" comment="libbind9-1600-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503733" comment="libdns1605-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503734" comment="libirs-devel-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503735" comment="libirs1601-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503736" comment="libisc1606-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503737" comment="libisccc1600-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503738" comment="libisccfg1600-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503739" comment="libns1604-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494195" comment="python3-bind-9.16.6-12.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139386" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181720" ref_url="https://bugzilla.suse.com/1181720" source="BUGZILLA"/>
		<reference ref_id="1181735" ref_url="https://bugzilla.suse.com/1181735" source="BUGZILLA"/>
		<reference ref_id="1181736" ref_url="https://bugzilla.suse.com/1181736" source="BUGZILLA"/>
		<reference ref_id="1181738" ref_url="https://bugzilla.suse.com/1181738" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12362" ref_url="https://www.suse.com/security/cve/CVE-2020-12362/" source="CVE"/>
		<reference ref_id="CVE-2020-12363" ref_url="https://www.suse.com/security/cve/CVE-2020-12363/" source="CVE"/>
		<reference ref_id="CVE-2020-12364" ref_url="https://www.suse.com/security/cve/CVE-2020-12364/" source="CVE"/>
		<reference ref_id="CVE-2020-12373" ref_url="https://www.suse.com/security/cve/CVE-2020-12373/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008432.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

- CVE-2020-12373: Fixed an expired pointer dereference may lead to DOS (bsc#1181738).
- CVE-2020-12364: Fixed a null pointer reference may lead to DOS (bsc#1181736). 
- CVE-2020-12362: Fixed an integer overflow which could have led to privilege escalation (bsc#1181720).
- CVE-2020-12363: Fixed an improper input validation which may have led to DOS (bsc#1181735).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-03"/>
	<updated date="2021-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181720">SUSE bug 1181720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181735">SUSE bug 1181735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181736">SUSE bug 1181736</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181738">SUSE bug 1181738</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12362/">CVE-2020-12362</cve>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12363/">CVE-2020-12363</cve>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12364/">CVE-2020-12364</cve>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12373/">CVE-2020-12373</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494196" comment="kernel-firmware-20200107-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494197" comment="ucode-amd-20200107-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139387" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1179765" ref_url="https://bugzilla.suse.com/1179765" source="BUGZILLA"/>
		<reference ref_id="1182040" ref_url="https://bugzilla.suse.com/1182040" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3393" ref_url="https://www.suse.com/security/cve/CVE-2021-3393/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008430.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

Upgrade to version 12.6:

- Reindexing might be needed after applying this update.
- CVE-2021-3393, bsc#1182040: Fix information leakage in constraint-violation error messages.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-03"/>
	<updated date="2021-03-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179765">SUSE bug 1179765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182040">SUSE bug 1182040</bugzilla>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3393/">CVE-2021-3393</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504196" comment="libecpg6-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504197" comment="libpq5-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504198" comment="libpq5-32bit-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504199" comment="postgresql12-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504200" comment="postgresql12-contrib-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504201" comment="postgresql12-devel-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504202" comment="postgresql12-docs-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504203" comment="postgresql12-plperl-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504204" comment="postgresql12-plpython-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504205" comment="postgresql12-pltcl-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504206" comment="postgresql12-server-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504207" comment="postgresql12-server-devel-12.6-3.21.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139388" version="1" class="patch">
	<metadata>
		<title>Security update for python-cryptography (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182066" ref_url="https://bugzilla.suse.com/1182066" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36242" ref_url="https://www.suse.com/security/cve/CVE-2020-36242/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008429.html" source="SUSE-SU"/>
		<description>
This update for python-cryptography fixes the following issues:

- CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte
  values could result in an integer overflow and buffer overflow (bsc#1182066).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-03"/>
	<updated date="2021-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182066">SUSE bug 1182066</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36242/">CVE-2020-36242</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503740" comment="python2-cryptography-2.1.4-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503741" comment="python3-cryptography-2.1.4-4.9.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139389" version="1" class="patch">
	<metadata>
		<title>Security update for wpa_supplicant (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182805" ref_url="https://bugzilla.suse.com/1182805" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27803" ref_url="https://www.suse.com/security/cve/CVE-2021-27803/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008439.html" source="SUSE-SU"/>
		<description>
This update for wpa_supplicant fixes the following issues:

- CVE-2021-27803: Fixed a P2P provision discovery processing vulnerability (bsc#1182805).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-08"/>
	<updated date="2021-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182805">SUSE bug 1182805</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27803/">CVE-2021-27803</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503742" comment="wpa_supplicant-2.9-4.26.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139390" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182279" ref_url="https://bugzilla.suse.com/1182279" source="BUGZILLA"/>
		<reference ref_id="1182408" ref_url="https://bugzilla.suse.com/1182408" source="BUGZILLA"/>
		<reference ref_id="1182411" ref_url="https://bugzilla.suse.com/1182411" source="BUGZILLA"/>
		<reference ref_id="1182412" ref_url="https://bugzilla.suse.com/1182412" source="BUGZILLA"/>
		<reference ref_id="1182413" ref_url="https://bugzilla.suse.com/1182413" source="BUGZILLA"/>
		<reference ref_id="1182415" ref_url="https://bugzilla.suse.com/1182415" source="BUGZILLA"/>
		<reference ref_id="1182416" ref_url="https://bugzilla.suse.com/1182416" source="BUGZILLA"/>
		<reference ref_id="1182417" ref_url="https://bugzilla.suse.com/1182417" source="BUGZILLA"/>
		<reference ref_id="1182418" ref_url="https://bugzilla.suse.com/1182418" source="BUGZILLA"/>
		<reference ref_id="1182419" ref_url="https://bugzilla.suse.com/1182419" source="BUGZILLA"/>
		<reference ref_id="1182420" ref_url="https://bugzilla.suse.com/1182420" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36221" ref_url="https://www.suse.com/security/cve/CVE-2020-36221/" source="CVE"/>
		<reference ref_id="CVE-2020-36222" ref_url="https://www.suse.com/security/cve/CVE-2020-36222/" source="CVE"/>
		<reference ref_id="CVE-2020-36223" ref_url="https://www.suse.com/security/cve/CVE-2020-36223/" source="CVE"/>
		<reference ref_id="CVE-2020-36224" ref_url="https://www.suse.com/security/cve/CVE-2020-36224/" source="CVE"/>
		<reference ref_id="CVE-2020-36225" ref_url="https://www.suse.com/security/cve/CVE-2020-36225/" source="CVE"/>
		<reference ref_id="CVE-2020-36226" ref_url="https://www.suse.com/security/cve/CVE-2020-36226/" source="CVE"/>
		<reference ref_id="CVE-2020-36227" ref_url="https://www.suse.com/security/cve/CVE-2020-36227/" source="CVE"/>
		<reference ref_id="CVE-2020-36228" ref_url="https://www.suse.com/security/cve/CVE-2020-36228/" source="CVE"/>
		<reference ref_id="CVE-2020-36229" ref_url="https://www.suse.com/security/cve/CVE-2020-36229/" source="CVE"/>
		<reference ref_id="CVE-2020-36230" ref_url="https://www.suse.com/security/cve/CVE-2020-36230/" source="CVE"/>
		<reference ref_id="CVE-2021-27212" ref_url="https://www.suse.com/security/cve/CVE-2021-27212/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008438.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-08"/>
	<updated date="2021-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182279">SUSE bug 1182279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182408">SUSE bug 1182408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182411">SUSE bug 1182411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182412">SUSE bug 1182412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182413">SUSE bug 1182413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182415">SUSE bug 1182415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182416">SUSE bug 1182416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182417">SUSE bug 1182417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182418">SUSE bug 1182418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182419">SUSE bug 1182419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182420">SUSE bug 1182420</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36221/">CVE-2020-36221</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36222/">CVE-2020-36222</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36223/">CVE-2020-36223</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36224/">CVE-2020-36224</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36225/">CVE-2020-36225</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36226/">CVE-2020-36226</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36227/">CVE-2020-36227</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36228/">CVE-2020-36228</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36229/">CVE-2020-36229</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36230/">CVE-2020-36230</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27212/">CVE-2021-27212</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503743" comment="libldap-2_4-2-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494200" comment="libldap-2_4-2-32bit-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494201" comment="libldap-data-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503744" comment="openldap2-client-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503745" comment="openldap2-devel-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496620" comment="openldap2-devel-32bit-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503746" comment="openldap2-devel-static-2.4.46-9.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139391" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1163617" ref_url="https://bugzilla.suse.com/1163617" source="BUGZILLA"/>
		<reference ref_id="1170442" ref_url="https://bugzilla.suse.com/1170442" source="BUGZILLA"/>
		<reference ref_id="1176855" ref_url="https://bugzilla.suse.com/1176855" source="BUGZILLA"/>
		<reference ref_id="1179082" ref_url="https://bugzilla.suse.com/1179082" source="BUGZILLA"/>
		<reference ref_id="1179428" ref_url="https://bugzilla.suse.com/1179428" source="BUGZILLA"/>
		<reference ref_id="1179660" ref_url="https://bugzilla.suse.com/1179660" source="BUGZILLA"/>
		<reference ref_id="1180058" ref_url="https://bugzilla.suse.com/1180058" source="BUGZILLA"/>
		<reference ref_id="1180262" ref_url="https://bugzilla.suse.com/1180262" source="BUGZILLA"/>
		<reference ref_id="1180964" ref_url="https://bugzilla.suse.com/1180964" source="BUGZILLA"/>
		<reference ref_id="1181671" ref_url="https://bugzilla.suse.com/1181671" source="BUGZILLA"/>
		<reference ref_id="1181747" ref_url="https://bugzilla.suse.com/1181747" source="BUGZILLA"/>
		<reference ref_id="1181753" ref_url="https://bugzilla.suse.com/1181753" source="BUGZILLA"/>
		<reference ref_id="1181843" ref_url="https://bugzilla.suse.com/1181843" source="BUGZILLA"/>
		<reference ref_id="1181854" ref_url="https://bugzilla.suse.com/1181854" source="BUGZILLA"/>
		<reference ref_id="1182047" ref_url="https://bugzilla.suse.com/1182047" source="BUGZILLA"/>
		<reference ref_id="1182130" ref_url="https://bugzilla.suse.com/1182130" source="BUGZILLA"/>
		<reference ref_id="1182140" ref_url="https://bugzilla.suse.com/1182140" source="BUGZILLA"/>
		<reference ref_id="1182175" ref_url="https://bugzilla.suse.com/1182175" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29374" ref_url="https://www.suse.com/security/cve/CVE-2020-29374/" source="CVE"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-26932" ref_url="https://www.suse.com/security/cve/CVE-2021-26932/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008455.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1181843).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1181753).
- CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping (XSA-361 bsc#1181747).
  by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#178372).
- CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write implementation which could have granted unintended write access
  because of a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).

The following non-security bugs were fixed:

- btrfs: Cleanup try_flush_qgroup (bsc#1182047).
- btrfs: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: fix data bytes_may_use underflow with fallocate due to failed quota reserve (bsc#1182130)
- btrfs: Free correct amount of space in btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Simplify code flow in btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Unlock extents in btrfs_zero_range in case of errors (bsc#1182047).
- Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (git-fixes).
- ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293).
- kernel-binary.spec: Add back initrd and image symlink ghosts to filelist (bsc#1182140). Fixes: 76a9256314c3 ('rpm/kernel-{source,binary}.spec: do not include ghost symlinks (boo#1179082).')
- libnvdimm/dimm: Avoid race between probe and available_slots_show() (bsc#1170442).
- net: bcmgenet: add support for ethtool rxnfc flows (git-fixes).
- net: bcmgenet: code movement (git-fixes).
- net: bcmgenet: fix mask check in bcmgenet_validate_flow() (git-fixes).
- net: bcmgenet: Fix WoL with password after deep sleep (git-fixes).
- net: bcmgenet: re-remove bcmgenet_hfb_add_filter (git-fixes).
- net: bcmgenet: set Rx mode before starting netif (git-fixes).
- net: bcmgenet: use __be16 for htons(ETH_P_IP) (git-fixes).
- net: bcmgenet: Use correct I/O accessors (git-fixes).
- net: lpc-enet: fix error return code in lpc_mii_init() (git-fixes).
- net/mlx4_en: Handle TX error CQE (bsc#1181854).
- net: moxa: Fix a potential double 'free_irq()' (git-fixes).
- net: sun: fix missing release regions in cas_init_one() (git-fixes).
- nvme-multipath: Early exit if no path is available (bsc#1180964).
- rpm/post.sh: Avoid purge-kernel for the first installed kernel (bsc#1180058)
- scsi: target: fix unmap_zeroes_data boolean initialisation (bsc#1163617).
- usb: dwc2: Abort transaction after errors with unknown reason (bsc#1180262).
- usb: dwc2: Do not update data length if it is 0 on inbound transfers (bsc#1180262).
- usb: dwc2: Make 'trimming xfer length' a debug message (bsc#1180262).
- vmxnet3: Remove buf_info from device accessible structures (bsc#1181671).
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).
- xen/netback: fix spurious event detection for common event case (bsc#1182175).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-09"/>
	<updated date="2021-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163617">SUSE bug 1163617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170442">SUSE bug 1170442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176855">SUSE bug 1176855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179082">SUSE bug 1179082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179428">SUSE bug 1179428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179660">SUSE bug 1179660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180058">SUSE bug 1180058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180262">SUSE bug 1180262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180964">SUSE bug 1180964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181671">SUSE bug 1181671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181747">SUSE bug 1181747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181753">SUSE bug 1181753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181843">SUSE bug 1181843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181854">SUSE bug 1181854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182047">SUSE bug 1182047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182130">SUSE bug 1182130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182140">SUSE bug 1182140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182175">SUSE bug 1182175</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29374/">CVE-2020-29374</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26932/">CVE-2021-26932</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504208" comment="kernel-default-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504209" comment="kernel-default-base-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504210" comment="kernel-default-devel-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504211" comment="kernel-devel-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504212" comment="kernel-docs-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504213" comment="kernel-macros-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504214" comment="kernel-obs-build-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504215" comment="kernel-source-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504216" comment="kernel-syms-4.12.14-197.86.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139392" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182331" ref_url="https://bugzilla.suse.com/1182331" source="BUGZILLA"/>
		<reference ref_id="1182333" ref_url="https://bugzilla.suse.com/1182333" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23840" ref_url="https://www.suse.com/security/cve/CVE-2021-23840/" source="CVE"/>
		<reference ref_id="CVE-2021-23841" ref_url="https://www.suse.com/security/cve/CVE-2021-23841/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008447.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333)
- CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-09"/>
	<updated date="2021-03-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1182331">SUSE bug 1182331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182333">SUSE bug 1182333</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-23840/">CVE-2021-23840</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-23841/">CVE-2021-23841</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504217" comment="libopenssl-1_1-devel-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504218" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504219" comment="libopenssl1_1-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504220" comment="libopenssl1_1-32bit-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504221" comment="libopenssl1_1-hmac-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504222" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504223" comment="openssl-1_1-1.1.0i-14.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139393" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1183026" ref_url="https://bugzilla.suse.com/1183026" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21300" ref_url="https://www.suse.com/security/cve/CVE-2021-21300/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0757-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008461.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-09"/>
	<updated date="2021-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183026">SUSE bug 1183026</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21300/">CVE-2021-21300</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503764" comment="git-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503765" comment="git-arch-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503766" comment="git-core-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503767" comment="git-cvs-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503768" comment="git-daemon-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496630" comment="git-doc-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503769" comment="git-email-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503770" comment="git-gui-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503771" comment="git-svn-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503772" comment="git-web-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503773" comment="gitk-2.26.2-3.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139394" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182379" ref_url="https://bugzilla.suse.com/1182379" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23336" ref_url="https://www.suse.com/security/cve/CVE-2021-23336/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0768-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018251.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- python27 was upgraded to 2.7.18
- CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-11"/>
	<updated date="2021-03-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1182379">SUSE bug 1182379</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-23336/">CVE-2021-23336</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503774" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503775" comment="python-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503776" comment="python-base-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503777" comment="python-curses-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503778" comment="python-devel-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503779" comment="python-gdbm-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503780" comment="python-tk-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503781" comment="python-xml-2.7.18-7.55.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139395" version="1" class="patch">
	<metadata>
		<title>Security update for glib2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182328" ref_url="https://bugzilla.suse.com/1182328" source="BUGZILLA"/>
		<reference ref_id="1182362" ref_url="https://bugzilla.suse.com/1182362" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27218" ref_url="https://www.suse.com/security/cve/CVE-2021-27218/" source="CVE"/>
		<reference ref_id="CVE-2021-27219" ref_url="https://www.suse.com/security/cve/CVE-2021-27219/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008532.html" source="SUSE-SU"/>
		<description>
This update for glib2 fixes the following issues:

- CVE-2021-27218: g_byte_array_new_take takes a gsize as length but stores in a guint, this patch will refuse if the length is larger than guint. (bsc#1182328)

- CVE-2021-27219: g_memdup takes a guint as parameter and sometimes leads into an integer overflow, so add a g_memdup2 function which uses gsize to replace it. (bsc#1182362)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-19"/>
	<updated date="2021-03-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182328">SUSE bug 1182328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182362">SUSE bug 1182362</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-27218/">CVE-2021-27218</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-27219/">CVE-2021-27219</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503792" comment="glib2-devel-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503793" comment="glib2-lang-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503794" comment="glib2-tools-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503795" comment="libgio-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503796" comment="libgio-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503797" comment="libglib-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503798" comment="libglib-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503799" comment="libgmodule-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503800" comment="libgmodule-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503801" comment="libgobject-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503802" comment="libgobject-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503803" comment="libgthread-2_0-0-2.54.3-4.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139396" version="1" class="patch">
	<metadata>
		<title>Security update for nghttp2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1172442" ref_url="https://bugzilla.suse.com/1172442" source="BUGZILLA"/>
		<reference ref_id="1181358" ref_url="https://bugzilla.suse.com/1181358" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11080" ref_url="https://www.suse.com/security/cve/CVE-2020-11080/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008539.html" source="SUSE-SU"/>
		<description>
This update for nghttp2 fixes the following issues:

- CVE-2020-11080: HTTP/2 Large Settings Frame DoS (bsc#1181358)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172442">SUSE bug 1172442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181358">SUSE bug 1181358</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11080/">CVE-2020-11080</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503804" comment="libnghttp2-14-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503805" comment="libnghttp2-14-32bit-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503806" comment="libnghttp2-devel-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503807" comment="libnghttp2_asio-devel-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503808" comment="libnghttp2_asio1-1.40.0-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139397" version="1" class="patch">
	<metadata>
		<title>Security update for ruby2.5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1177125" ref_url="https://bugzilla.suse.com/1177125" source="BUGZILLA"/>
		<reference ref_id="1177222" ref_url="https://bugzilla.suse.com/1177222" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25613" ref_url="https://www.suse.com/security/cve/CVE-2020-25613/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008549.html" source="SUSE-SU"/>
		<description>
This update for ruby2.5 fixes the following issues:

- CVE-2020-25613: Fixed a potential HTTP Request Smuggling  in WEBrick (bsc#1177125).
- Enable optimizations also on ARM64 (bsc#1177222)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177125">SUSE bug 1177125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177222">SUSE bug 1177222</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25613/">CVE-2020-25613</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503809" comment="libruby2_5-2_5-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503810" comment="ruby2.5-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503811" comment="ruby2.5-devel-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503812" comment="ruby2.5-devel-extra-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503813" comment="ruby2.5-stdlib-2.5.8-4.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139398" version="1" class="patch">
	<metadata>
		<title>Security update for gnutls (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1183456" ref_url="https://bugzilla.suse.com/1183456" source="BUGZILLA"/>
		<reference ref_id="1183457" ref_url="https://bugzilla.suse.com/1183457" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20231" ref_url="https://www.suse.com/security/cve/CVE-2021-20231/" source="CVE"/>
		<reference ref_id="CVE-2021-20232" ref_url="https://www.suse.com/security/cve/CVE-2021-20232/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008545.html" source="SUSE-SU"/>
		<description>
This update for gnutls fixes the following issues:

- CVE-2021-20232: Fixed a use after free issue which could have led to memory corruption and other potential consequences (bsc#1183456).
- CVE-2021-20231: Fixed a use after free issue which could have led to memory corruption and other potential consequences (bsc#1183457).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183456">SUSE bug 1183456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183457">SUSE bug 1183457</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20231/">CVE-2021-20231</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20232/">CVE-2021-20232</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503814" comment="gnutls-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503815" comment="libgnutls-devel-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503816" comment="libgnutls30-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503817" comment="libgnutls30-32bit-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503818" comment="libgnutls30-hmac-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503819" comment="libgnutls30-hmac-32bit-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503820" comment="libgnutlsxx-devel-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503821" comment="libgnutlsxx28-3.6.7-6.40.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139399" version="1" class="patch">
	<metadata>
		<title>Security update for libass (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1177862" ref_url="https://bugzilla.suse.com/1177862" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26682" ref_url="https://www.suse.com/security/cve/CVE-2020-26682/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0936-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008546.html" source="SUSE-SU"/>
		<description>
This update for libass fixes the following issues:

- CVE-2020-26682: Fixed a signed integer overflow in the call to outline_stroke() (bsc#1177862).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177862">SUSE bug 1177862</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26682/">CVE-2020-26682</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503822" comment="libass-devel-0.14.0-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503823" comment="libass9-0.14.0-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139400" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1183333" ref_url="https://bugzilla.suse.com/1183333" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27918" ref_url="https://www.suse.com/security/cve/CVE-2021-27918/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008542.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

- go1.15.10 (released 2021-03-11) (bsc#1175132)
- go1.15.9 (released 2021-03-10) (bsc#1175132)
  - CVE-2021-27918: Fixed an infinite loop when using xml.NewTokenDecoder with a custom TokenReader (bsc#1183333).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183333">SUSE bug 1183333</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27918/">CVE-2021-27918</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504224" comment="go1.15-1.15.10-1.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504225" comment="go1.15-doc-1.15.10-1.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496643" comment="go1.15-race-1.15.10-1.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139401" version="1" class="patch">
	<metadata>
		<title>Security update for ldb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1183572" ref_url="https://bugzilla.suse.com/1183572" source="BUGZILLA"/>
		<reference ref_id="1183574" ref_url="https://bugzilla.suse.com/1183574" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27840" ref_url="https://www.suse.com/security/cve/CVE-2020-27840/" source="CVE"/>
		<reference ref_id="CVE-2021-20277" ref_url="https://www.suse.com/security/cve/CVE-2021-20277/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0944-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008557.html" source="SUSE-SU"/>
		<description>
This update for ldb fixes the following issues:

- CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572).
- CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183572">SUSE bug 1183572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183574">SUSE bug 1183574</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27840/">CVE-2020-27840</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20277/">CVE-2021-20277</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504226" comment="ldb-tools-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504227" comment="libldb-devel-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504228" comment="libldb1-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504229" comment="libldb1-32bit-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504230" comment="python-ldb-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504231" comment="python-ldb-devel-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504232" comment="python3-ldb-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504233" comment="python3-ldb-devel-1.4.6-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139402" version="1" class="patch">
	<metadata>
		<title>Security update for libzypp, zypper (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1050625" ref_url="https://bugzilla.suse.com/1050625" source="BUGZILLA"/>
		<reference ref_id="1174016" ref_url="https://bugzilla.suse.com/1174016" source="BUGZILLA"/>
		<reference ref_id="1177238" ref_url="https://bugzilla.suse.com/1177238" source="BUGZILLA"/>
		<reference ref_id="1177275" ref_url="https://bugzilla.suse.com/1177275" source="BUGZILLA"/>
		<reference ref_id="1177427" ref_url="https://bugzilla.suse.com/1177427" source="BUGZILLA"/>
		<reference ref_id="1177583" ref_url="https://bugzilla.suse.com/1177583" source="BUGZILLA"/>
		<reference ref_id="1178910" ref_url="https://bugzilla.suse.com/1178910" source="BUGZILLA"/>
		<reference ref_id="1178966" ref_url="https://bugzilla.suse.com/1178966" source="BUGZILLA"/>
		<reference ref_id="1179083" ref_url="https://bugzilla.suse.com/1179083" source="BUGZILLA"/>
		<reference ref_id="1179222" ref_url="https://bugzilla.suse.com/1179222" source="BUGZILLA"/>
		<reference ref_id="1179816" ref_url="https://bugzilla.suse.com/1179816" source="BUGZILLA"/>
		<reference ref_id="1179847" ref_url="https://bugzilla.suse.com/1179847" source="BUGZILLA"/>
		<reference ref_id="1179909" ref_url="https://bugzilla.suse.com/1179909" source="BUGZILLA"/>
		<reference ref_id="1180077" ref_url="https://bugzilla.suse.com/1180077" source="BUGZILLA"/>
		<reference ref_id="1180663" ref_url="https://bugzilla.suse.com/1180663" source="BUGZILLA"/>
		<reference ref_id="1180721" ref_url="https://bugzilla.suse.com/1180721" source="BUGZILLA"/>
		<reference ref_id="1181328" ref_url="https://bugzilla.suse.com/1181328" source="BUGZILLA"/>
		<reference ref_id="1181622" ref_url="https://bugzilla.suse.com/1181622" source="BUGZILLA"/>
		<reference ref_id="1182629" ref_url="https://bugzilla.suse.com/1182629" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-9271" ref_url="https://www.suse.com/security/cve/CVE-2017-9271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008560.html" source="SUSE-SU"/>
		<description>
This update for libzypp, zypper fixes the following issues:

Update zypper to version 1.14.43:

- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- Fix source-download commands help (bsc#1180663)
- man: Recommend to use the --non-interactive global option rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quiet: Fix install summary to write nothing if there's nothing todo (bsc#1180077)
- Prefer /run over /var/run.

Update libzypp to 17.25.8:

- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommended = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility.
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- CVE-2017-9271: Fixed information leak in the log file (bsc#1050625 bsc#1177583)
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoManager: Carefully tidy up the caches. Remove non-directory entries. (bsc#1178966)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager probe (bsc#1177427).
- RpmDb: If no database exists use the _dbpath configured in rpm.  Still makes sure a compat
  symlink at /var/lib/rpm exists in case the configures _dbpath is elsewhere. (bsc#1178910)
- Fixed update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Fix lsof monitoring (bsc#1179909)
- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-25"/>
	<updated date="2021-03-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1050625">SUSE bug 1050625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174016">SUSE bug 1174016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177238">SUSE bug 1177238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177275">SUSE bug 1177275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177427">SUSE bug 1177427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177583">SUSE bug 1177583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178910">SUSE bug 1178910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178966">SUSE bug 1178966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179083">SUSE bug 1179083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179222">SUSE bug 1179222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179816">SUSE bug 1179816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179847">SUSE bug 1179847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179909">SUSE bug 1179909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180077">SUSE bug 1180077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180663">SUSE bug 1180663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180721">SUSE bug 1180721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181328">SUSE bug 1181328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181622">SUSE bug 1181622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182629">SUSE bug 1182629</bugzilla>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-9271/">CVE-2017-9271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504234" comment="libsigc++2-devel-2.10.0-3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504235" comment="libsigc-2_0-0-2.10.0-3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504236" comment="libsolv-devel-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504237" comment="libsolv-tools-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504238" comment="libyui-ncurses-pkg-devel-2.48.9-7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504239" comment="libyui-ncurses-pkg-doc-2.48.9-7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504240" comment="libyui-ncurses-pkg9-2.48.9-7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504241" comment="libyui-qt-pkg-devel-2.45.28-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504242" comment="libyui-qt-pkg-doc-2.45.28-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504243" comment="libyui-qt-pkg9-2.45.28-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504244" comment="libzypp-17.25.8-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504245" comment="libzypp-devel-17.25.8-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504246" comment="perl-solv-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504247" comment="python3-solv-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504248" comment="ruby-solv-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504249" comment="yast2-pkg-bindings-4.1.3-3.10.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504250" comment="zypper-1.14.43-3.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504251" comment="zypper-log-1.14.43-3.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504252" comment="zypper-needs-restarting-1.14.43-3.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139403" version="1" class="patch">
	<metadata>
		<title>Security update for openvpn (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1197341" ref_url="https://bugzilla.suse.com/1197341" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0547" ref_url="https://www.suse.com/security/cve/CVE-2022-0547/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1029-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010558.html" source="SUSE-SU"/>
		<description>
This update for openvpn fixes the following issues:

- CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-29"/>
	<updated date="2022-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197341">SUSE bug 1197341</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-0547/">CVE-2022-0547</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009676860" comment="openvpn-2.4.3-150000.5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676861" comment="openvpn-auth-pam-plugin-2.4.3-150000.5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676862" comment="openvpn-devel-2.4.3-150000.5.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139404" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1197417" ref_url="https://bugzilla.suse.com/1197417" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22934" ref_url="https://www.suse.com/security/cve/CVE-2022-22934/" source="CVE"/>
		<reference ref_id="CVE-2022-22935" ref_url="https://www.suse.com/security/cve/CVE-2022-22935/" source="CVE"/>
		<reference ref_id="CVE-2022-22936" ref_url="https://www.suse.com/security/cve/CVE-2022-22936/" source="CVE"/>
		<reference ref_id="CVE-2022-22941" ref_url="https://www.suse.com/security/cve/CVE-2022-22941/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010577.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- CVE-2022-22935: Sign authentication replies to prevent MiTM (bsc#1197417)
- CVE-2022-22934: Sign pillar data to prevent MiTM attacks. (bsc#1197417)
- CVE-2022-22936: Prevent job and fileserver replays (bsc#1197417)
- CVE-2022-22941: Fixed targeting bug, especially visible when using syndic and user auth. (bsc#1197417)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-30"/>
	<updated date="2022-03-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197417">SUSE bug 1197417</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22934/">CVE-2022-22934</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22935/">CVE-2022-22935</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22936/">CVE-2022-22936</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22941/">CVE-2022-22941</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677297" comment="python3-salt-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677298" comment="salt-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677299" comment="salt-api-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677300" comment="salt-bash-completion-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677301" comment="salt-cloud-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677302" comment="salt-doc-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677303" comment="salt-fish-completion-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677304" comment="salt-master-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677305" comment="salt-minion-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677306" comment="salt-proxy-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677307" comment="salt-ssh-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677308" comment="salt-standalone-formulas-configuration-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677309" comment="salt-syndic-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677310" comment="salt-transactional-update-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677311" comment="salt-zsh-completion-3002.2-150100.57.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139405" version="1" class="patch">
	<metadata>
		<title>Security update for zlib (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1197459" ref_url="https://bugzilla.suse.com/1197459" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-25032" ref_url="https://www.suse.com/security/cve/CVE-2018-25032/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010582.html" source="SUSE-SU"/>
		<description>
This update for zlib fixes the following issues:

- CVE-2018-25032: Fixed memory corruption on deflate (bsc#1197459).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-30"/>
	<updated date="2022-03-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197459">SUSE bug 1197459</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25032/">CVE-2018-25032</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009676997" comment="libminizip1-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676998" comment="libz1-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676992" comment="libz1-32bit-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676999" comment="minizip-devel-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677000" comment="zlib-devel-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676996" comment="zlib-devel-32bit-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677001" comment="zlib-devel-static-1.2.11-150000.3.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139406" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1197698" ref_url="https://bugzilla.suse.com/1197698" source="BUGZILLA"/>
		<reference ref_id="1197903" ref_url="https://bugzilla.suse.com/1197903" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1097" ref_url="https://www.suse.com/security/cve/CVE-2022-1097/" source="CVE"/>
		<reference ref_id="CVE-2022-1196" ref_url="https://www.suse.com/security/cve/CVE-2022-1196/" source="CVE"/>
		<reference ref_id="CVE-2022-24713" ref_url="https://www.suse.com/security/cve/CVE-2022-24713/" source="CVE"/>
		<reference ref_id="CVE-2022-28281" ref_url="https://www.suse.com/security/cve/CVE-2022-28281/" source="CVE"/>
		<reference ref_id="CVE-2022-28282" ref_url="https://www.suse.com/security/cve/CVE-2022-28282/" source="CVE"/>
		<reference ref_id="CVE-2022-28285" ref_url="https://www.suse.com/security/cve/CVE-2022-28285/" source="CVE"/>
		<reference ref_id="CVE-2022-28286" ref_url="https://www.suse.com/security/cve/CVE-2022-28286/" source="CVE"/>
		<reference ref_id="CVE-2022-28289" ref_url="https://www.suse.com/security/cve/CVE-2022-28289/" source="CVE"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.8.0 ESR (bsc#1197903):

MFSA 2022-14 (bsc#1197903)

* CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11 tokens are removed while in use
* CVE-2022-28281: Fixed an out of bounds write due to unexpected WebAuthN Extensions
* CVE-2022-1196: Fixed a use-after-free after VR Process destruction
* CVE-2022-28282: Fixed a use-after-free in DocumentL10n::TranslateDocument
* CVE-2022-28285: Fixed incorrect AliasSet used in JIT Codegen
* CVE-2022-28286: Fixed that iframe contents could be rendered outside the border
* CVE-2022-24713: Fixed a denial of service via complex regular expressions
* CVE-2022-28289: Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8

The following non-security bugs were fixed:
- Adjust rust dependency for SP3 and later. TW uses always the 
  newest version of rust, but we don't, so we can't use the 
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-07"/>
	<updated date="2022-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197698">SUSE bug 1197698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197903">SUSE bug 1197903</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1097/">CVE-2022-1097</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-1196/">CVE-2022-1196</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-24713/">CVE-2022-24713</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28281/">CVE-2022-28281</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-28282/">CVE-2022-28282</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-28285/">CVE-2022-28285</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28286/">CVE-2022-28286</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28289/">CVE-2022-28289</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009678574" comment="MozillaFirefox-91.8.0-150000.150.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678575" comment="MozillaFirefox-devel-91.8.0-150000.150.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678576" comment="MozillaFirefox-translations-common-91.8.0-150000.150.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678577" comment="MozillaFirefox-translations-other-91.8.0-150000.150.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139407" version="1" class="patch">
	<metadata>
		<title>Security update for libsolv, libzypp, zypper (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1184501" ref_url="https://bugzilla.suse.com/1184501" source="BUGZILLA"/>
		<reference ref_id="1194848" ref_url="https://bugzilla.suse.com/1194848" source="BUGZILLA"/>
		<reference ref_id="1195999" ref_url="https://bugzilla.suse.com/1195999" source="BUGZILLA"/>
		<reference ref_id="1196061" ref_url="https://bugzilla.suse.com/1196061" source="BUGZILLA"/>
		<reference ref_id="1196317" ref_url="https://bugzilla.suse.com/1196317" source="BUGZILLA"/>
		<reference ref_id="1196368" ref_url="https://bugzilla.suse.com/1196368" source="BUGZILLA"/>
		<reference ref_id="1196514" ref_url="https://bugzilla.suse.com/1196514" source="BUGZILLA"/>
		<reference ref_id="1196925" ref_url="https://bugzilla.suse.com/1196925" source="BUGZILLA"/>
		<reference ref_id="1197134" ref_url="https://bugzilla.suse.com/1197134" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:1131-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010670.html" source="SUSE-SU"/>
		<description>
This update for libsolv, libzypp, zypper fixes the following issues:

Security relevant fix:

- Harden package signature checks (bsc#1184501).

libsolv to 0.7.22:

- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code (bsc#1196514)
- support parsing of Debian's Multi-Arch indicator
- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ('requires' is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime

libzypp to 17.30.0:

- ZConfig: Update solver settings if target changes (bsc#1196368)
- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)

zypper to 1.14.52:

- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-08"/>
	<updated date="2022-04-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184501">SUSE bug 1184501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194848">SUSE bug 1194848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195999">SUSE bug 1195999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196061">SUSE bug 1196061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196317">SUSE bug 1196317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196368">SUSE bug 1196368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196514">SUSE bug 1196514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196925">SUSE bug 1196925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197134">SUSE bug 1197134</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677312" comment="libsolv-devel-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677313" comment="libsolv-tools-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677314" comment="libzypp-17.30.0-150100.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677315" comment="libzypp-devel-17.30.0-150100.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677316" comment="perl-solv-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677317" comment="python3-solv-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677318" comment="ruby-solv-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677319" comment="zypper-1.14.52-150100.3.55.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677320" comment="zypper-log-1.14.52-150100.3.55.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677321" comment="zypper-needs-restarting-1.14.52-150100.3.55.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139408" version="1" class="patch">
	<metadata>
		<title>Security update for libexif (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1172768" ref_url="https://bugzilla.suse.com/1172768" source="BUGZILLA"/>
		<reference ref_id="1172802" ref_url="https://bugzilla.suse.com/1172802" source="BUGZILLA"/>
		<reference ref_id="1178479" ref_url="https://bugzilla.suse.com/1178479" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0181" ref_url="https://www.suse.com/security/cve/CVE-2020-0181/" source="CVE"/>
		<reference ref_id="CVE-2020-0198" ref_url="https://www.suse.com/security/cve/CVE-2020-0198/" source="CVE"/>
		<reference ref_id="CVE-2020-0452" ref_url="https://www.suse.com/security/cve/CVE-2020-0452/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010678.html" source="SUSE-SU"/>
		<description>
This update for libexif fixes the following issues:

- CVE-2020-0181: Fixed an integer overflow that could lead to denial of service
  (bsc#1172802).
- CVE-2020-0198: Fixed and unsigned integer overflow that could lead to denial
  of service (bsc#1172768).
- CVE-2020-0452: Fixed a buffer overflow check that could be optimized away
  by the compiler (bsc#1178479).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-11"/>
	<updated date="2022-04-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172768">SUSE bug 1172768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172802">SUSE bug 1172802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178479">SUSE bug 1178479</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-0181/">CVE-2020-0181</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-0198/">CVE-2020-0198</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0452/">CVE-2020-0452</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677295" comment="libexif-devel-0.6.22-150000.5.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677296" comment="libexif12-0.6.22-150000.5.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139409" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1197903" ref_url="https://bugzilla.suse.com/1197903" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1097" ref_url="https://www.suse.com/security/cve/CVE-2022-1097/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010677.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

Mozilla NSS 3.68.3 (bsc#1197903):
  - CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11
    tokens are removed while in use.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-11"/>
	<updated date="2022-04-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197903">SUSE bug 1197903</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1097/">CVE-2022-1097</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009678060" comment="libfreebl3-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678030" comment="libfreebl3-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678061" comment="libfreebl3-hmac-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678032" comment="libfreebl3-hmac-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678062" comment="libsoftokn3-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678034" comment="libsoftokn3-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678063" comment="libsoftokn3-hmac-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678036" comment="libsoftokn3-hmac-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678064" comment="mozilla-nss-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678038" comment="mozilla-nss-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678065" comment="mozilla-nss-certs-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678040" comment="mozilla-nss-certs-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678066" comment="mozilla-nss-devel-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678067" comment="mozilla-nss-sysinit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678068" comment="mozilla-nss-tools-3.68.3-150000.3.67.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139410" version="1" class="patch">
	<metadata>
		<title>Security update for opensc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1114649" ref_url="https://bugzilla.suse.com/1114649" source="BUGZILLA"/>
		<reference ref_id="1191957" ref_url="https://bugzilla.suse.com/1191957" source="BUGZILLA"/>
		<reference ref_id="1191992" ref_url="https://bugzilla.suse.com/1191992" source="BUGZILLA"/>
		<reference ref_id="1192000" ref_url="https://bugzilla.suse.com/1192000" source="BUGZILLA"/>
		<reference ref_id="1192005" ref_url="https://bugzilla.suse.com/1192005" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-42779" ref_url="https://www.suse.com/security/cve/CVE-2021-42779/" source="CVE"/>
		<reference ref_id="CVE-2021-42780" ref_url="https://www.suse.com/security/cve/CVE-2021-42780/" source="CVE"/>
		<reference ref_id="CVE-2021-42781" ref_url="https://www.suse.com/security/cve/CVE-2021-42781/" source="CVE"/>
		<reference ref_id="CVE-2021-42782" ref_url="https://www.suse.com/security/cve/CVE-2021-42782/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010682.html" source="SUSE-SU"/>
		<description>
This update for opensc fixes the following issues:

Security issues fixed:

- CVE-2021-42782: Stack buffer overflow issues in various places (bsc#1191957).
- CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c (bsc#1192000).
- CVE-2021-42780: Fixed use after return in insert_pin() (bsc#1192005).
- CVE-2021-42779: Fixed use after free in sc_file_valid() (bsc#1191992).

Non-security issues fixed: 

- Fixes segmentation fault in 'pkcs11-tool.c'. (bsc#1114649)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-12"/>
	<updated date="2022-04-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1114649">SUSE bug 1114649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191957">SUSE bug 1191957</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191992">SUSE bug 1191992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192000">SUSE bug 1192000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192005">SUSE bug 1192005</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42779/">CVE-2021-42779</cve>
	<cve impact="low" cvss3="2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-42780/">CVE-2021-42780</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42781/">CVE-2021-42781</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42782/">CVE-2021-42782</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677092" comment="opensc-0.19.0-150100.3.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139411" version="1" class="patch">
	<metadata>
		<title>Security update for xz (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198062" ref_url="https://bugzilla.suse.com/1198062" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1271" ref_url="https://www.suse.com/security/cve/CVE-2022-1271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010686.html" source="SUSE-SU"/>
		<description>
This update for xz fixes the following issues:

- CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-12"/>
	<updated date="2022-04-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198062">SUSE bug 1198062</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1271/">CVE-2022-1271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679181" comment="liblzma5-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679124" comment="liblzma5-32bit-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679182" comment="xz-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679183" comment="xz-devel-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679127" comment="xz-lang-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679184" comment="xz-static-devel-5.2.3-150000.4.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139412" version="1" class="patch">
	<metadata>
		<title>Security update for subversion (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1197939" ref_url="https://bugzilla.suse.com/1197939" source="BUGZILLA"/>
		<reference ref_id="1197940" ref_url="https://bugzilla.suse.com/1197940" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28544" ref_url="https://www.suse.com/security/cve/CVE-2021-28544/" source="CVE"/>
		<reference ref_id="CVE-2022-24070" ref_url="https://www.suse.com/security/cve/CVE-2022-24070/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010683.html" source="SUSE-SU"/>
		<description>
This update for subversion fixes the following issues:

- CVE-2022-24070: Fixed a memory corruption issue in mod_dav_svn as used by Apache
  HTTP server. This could be exploited by a remote attacker to cause a denegation
  of service (bsc#1197940).
- CVE-2021-28544: Fixed an information leak issue where Subversion servers may
  reveal the original path of files protected by path-based authorization
  (bsc#1197939).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-12"/>
	<updated date="2022-04-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197939">SUSE bug 1197939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197940">SUSE bug 1197940</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28544/">CVE-2021-28544</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-24070/">CVE-2022-24070</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679185" comment="subversion-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679186" comment="subversion-bash-completion-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679187" comment="subversion-devel-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679188" comment="subversion-perl-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679189" comment="subversion-python-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679190" comment="subversion-server-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679191" comment="subversion-tools-1.10.6-150000.3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139413" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1193942" ref_url="https://bugzilla.suse.com/1193942" source="BUGZILLA"/>
		<reference ref_id="1193943" ref_url="https://bugzilla.suse.com/1193943" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44224" ref_url="https://www.suse.com/security/cve/CVE-2021-44224/" source="CVE"/>
		<reference ref_id="CVE-2021-44790" ref_url="https://www.suse.com/security/cve/CVE-2021-44790/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010025.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations. (bsc#1193943)
- CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua. (bsc#1193942)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-18"/>
	<updated date="2022-01-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193942">SUSE bug 1193942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193943">SUSE bug 1193943</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-44224/">CVE-2021-44224</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-44790/">CVE-2021-44790</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009662960" comment="apache2-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662961" comment="apache2-devel-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662962" comment="apache2-doc-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662963" comment="apache2-prefork-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662964" comment="apache2-utils-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662965" comment="apache2-worker-2.4.33-3.61.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139414" version="1" class="patch">
	<metadata>
		<title>Security update for gzip (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1177047" ref_url="https://bugzilla.suse.com/1177047" source="BUGZILLA"/>
		<reference ref_id="1180713" ref_url="https://bugzilla.suse.com/1180713" source="BUGZILLA"/>
		<reference ref_id="1198062" ref_url="https://bugzilla.suse.com/1198062" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1271" ref_url="https://www.suse.com/security/cve/CVE-2022-1271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1250-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010742.html" source="SUSE-SU"/>
		<description>
This update for gzip fixes the following issues:

- CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)

The following non-security bugs were fixed:

- Fixed an issue when 'gzexe' counts the lines to skip wrong. (bsc#1180713)
- Fixed a potential segfault when zlib acceleration is enabled (bsc#1177047)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-17"/>
	<updated date="2022-04-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177047">SUSE bug 1177047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180713">SUSE bug 1180713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198062">SUSE bug 1198062</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1271/">CVE-2022-1271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679482" comment="gzip-1.10-150000.4.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139415" version="1" class="patch">
	<metadata>
		<title>Security update for openjpeg2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1076314" ref_url="https://bugzilla.suse.com/1076314" source="BUGZILLA"/>
		<reference ref_id="1076967" ref_url="https://bugzilla.suse.com/1076967" source="BUGZILLA"/>
		<reference ref_id="1079845" ref_url="https://bugzilla.suse.com/1079845" source="BUGZILLA"/>
		<reference ref_id="1102016" ref_url="https://bugzilla.suse.com/1102016" source="BUGZILLA"/>
		<reference ref_id="1106881" ref_url="https://bugzilla.suse.com/1106881" source="BUGZILLA"/>
		<reference ref_id="1106882" ref_url="https://bugzilla.suse.com/1106882" source="BUGZILLA"/>
		<reference ref_id="1140130" ref_url="https://bugzilla.suse.com/1140130" source="BUGZILLA"/>
		<reference ref_id="1160782" ref_url="https://bugzilla.suse.com/1160782" source="BUGZILLA"/>
		<reference ref_id="1162090" ref_url="https://bugzilla.suse.com/1162090" source="BUGZILLA"/>
		<reference ref_id="1173578" ref_url="https://bugzilla.suse.com/1173578" source="BUGZILLA"/>
		<reference ref_id="1180457" ref_url="https://bugzilla.suse.com/1180457" source="BUGZILLA"/>
		<reference ref_id="1184774" ref_url="https://bugzilla.suse.com/1184774" source="BUGZILLA"/>
		<reference ref_id="1197738" ref_url="https://bugzilla.suse.com/1197738" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14423" ref_url="https://www.suse.com/security/cve/CVE-2018-14423/" source="CVE"/>
		<reference ref_id="CVE-2018-16375" ref_url="https://www.suse.com/security/cve/CVE-2018-16375/" source="CVE"/>
		<reference ref_id="CVE-2018-16376" ref_url="https://www.suse.com/security/cve/CVE-2018-16376/" source="CVE"/>
		<reference ref_id="CVE-2018-20845" ref_url="https://www.suse.com/security/cve/CVE-2018-20845/" source="CVE"/>
		<reference ref_id="CVE-2018-5727" ref_url="https://www.suse.com/security/cve/CVE-2018-5727/" source="CVE"/>
		<reference ref_id="CVE-2018-5785" ref_url="https://www.suse.com/security/cve/CVE-2018-5785/" source="CVE"/>
		<reference ref_id="CVE-2018-6616" ref_url="https://www.suse.com/security/cve/CVE-2018-6616/" source="CVE"/>
		<reference ref_id="CVE-2020-15389" ref_url="https://www.suse.com/security/cve/CVE-2020-15389/" source="CVE"/>
		<reference ref_id="CVE-2020-27823" ref_url="https://www.suse.com/security/cve/CVE-2020-27823/" source="CVE"/>
		<reference ref_id="CVE-2020-6851" ref_url="https://www.suse.com/security/cve/CVE-2020-6851/" source="CVE"/>
		<reference ref_id="CVE-2020-8112" ref_url="https://www.suse.com/security/cve/CVE-2020-8112/" source="CVE"/>
		<reference ref_id="CVE-2021-29338" ref_url="https://www.suse.com/security/cve/CVE-2021-29338/" source="CVE"/>
		<reference ref_id="CVE-2022-1122" ref_url="https://www.suse.com/security/cve/CVE-2022-1122/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html" source="SUSE-SU"/>
		<description>
This update for openjpeg2 fixes the following issues:

- CVE-2018-5727: Fixed integer overflow vulnerability in theopj_t1_encode_cblks function (bsc#1076314).
- CVE-2018-5785: Fixed integer overflow caused by an out-of-bounds leftshift in the opj_j2k_setup_encoder function (bsc#1076967).
- CVE-2018-6616: Fixed excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c (bsc#1079845).
- CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016).
- CVE-2018-16375: Fixed missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c (bsc#1106882).
- CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881).
- CVE-2018-20845: Fixed division-by-zero in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.ci (bsc#1140130).
- CVE-2020-6851: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor (bsc#1160782).
- CVE-2020-8112: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090).
- CVE-2020-15389: Fixed use-after-free if t a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578).
- CVE-2020-27823: Fixed heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457).
- CVE-2021-29338: Fixed integer overflow that allows remote attackers to crash the application (bsc#1184774).
- CVE-2022-1122: Fixed segmentation fault in opj2_decompress due to uninitialized pointer (bsc#1197738).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-19"/>
	<updated date="2022-04-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076314">SUSE bug 1076314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076967">SUSE bug 1076967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1079845">SUSE bug 1079845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102016">SUSE bug 1102016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106881">SUSE bug 1106881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106882">SUSE bug 1106882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140130">SUSE bug 1140130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160782">SUSE bug 1160782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162090">SUSE bug 1162090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173578">SUSE bug 1173578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180457">SUSE bug 1180457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184774">SUSE bug 1184774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197738">SUSE bug 1197738</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14423/">CVE-2018-14423</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16375/">CVE-2018-16375</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16376/">CVE-2018-16376</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20845/">CVE-2018-20845</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5727/">CVE-2018-5727</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-5785/">CVE-2018-5785</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6616/">CVE-2018-6616</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-15389/">CVE-2020-15389</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27823/">CVE-2020-27823</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6851/">CVE-2020-6851</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-8112/">CVE-2020-8112</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-29338/">CVE-2021-29338</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1122/">CVE-2022-1122</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677921" comment="libopenjp2-7-2.3.0-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677922" comment="openjpeg2-2.3.0-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677923" comment="openjpeg2-devel-2.3.0-150000.3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139416" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1189562" ref_url="https://bugzilla.suse.com/1189562" source="BUGZILLA"/>
		<reference ref_id="1193738" ref_url="https://bugzilla.suse.com/1193738" source="BUGZILLA"/>
		<reference ref_id="1194943" ref_url="https://bugzilla.suse.com/1194943" source="BUGZILLA"/>
		<reference ref_id="1195051" ref_url="https://bugzilla.suse.com/1195051" source="BUGZILLA"/>
		<reference ref_id="1195254" ref_url="https://bugzilla.suse.com/1195254" source="BUGZILLA"/>
		<reference ref_id="1195353" ref_url="https://bugzilla.suse.com/1195353" source="BUGZILLA"/>
		<reference ref_id="1196018" ref_url="https://bugzilla.suse.com/1196018" source="BUGZILLA"/>
		<reference ref_id="1196114" ref_url="https://bugzilla.suse.com/1196114" source="BUGZILLA"/>
		<reference ref_id="1196433" ref_url="https://bugzilla.suse.com/1196433" source="BUGZILLA"/>
		<reference ref_id="1196468" ref_url="https://bugzilla.suse.com/1196468" source="BUGZILLA"/>
		<reference ref_id="1196488" ref_url="https://bugzilla.suse.com/1196488" source="BUGZILLA"/>
		<reference ref_id="1196514" ref_url="https://bugzilla.suse.com/1196514" source="BUGZILLA"/>
		<reference ref_id="1196639" ref_url="https://bugzilla.suse.com/1196639" source="BUGZILLA"/>
		<reference ref_id="1196761" ref_url="https://bugzilla.suse.com/1196761" source="BUGZILLA"/>
		<reference ref_id="1196830" ref_url="https://bugzilla.suse.com/1196830" source="BUGZILLA"/>
		<reference ref_id="1196836" ref_url="https://bugzilla.suse.com/1196836" source="BUGZILLA"/>
		<reference ref_id="1196942" ref_url="https://bugzilla.suse.com/1196942" source="BUGZILLA"/>
		<reference ref_id="1196973" ref_url="https://bugzilla.suse.com/1196973" source="BUGZILLA"/>
		<reference ref_id="1197227" ref_url="https://bugzilla.suse.com/1197227" source="BUGZILLA"/>
		<reference ref_id="1197331" ref_url="https://bugzilla.suse.com/1197331" source="BUGZILLA"/>
		<reference ref_id="1197366" ref_url="https://bugzilla.suse.com/1197366" source="BUGZILLA"/>
		<reference ref_id="1197391" ref_url="https://bugzilla.suse.com/1197391" source="BUGZILLA"/>
		<reference ref_id="1198031" ref_url="https://bugzilla.suse.com/1198031" source="BUGZILLA"/>
		<reference ref_id="1198032" ref_url="https://bugzilla.suse.com/1198032" source="BUGZILLA"/>
		<reference ref_id="1198033" ref_url="https://bugzilla.suse.com/1198033" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-39713" ref_url="https://www.suse.com/security/cve/CVE-2021-39713/" source="CVE"/>
		<reference ref_id="CVE-2021-45868" ref_url="https://www.suse.com/security/cve/CVE-2021-45868/" source="CVE"/>
		<reference ref_id="CVE-2022-0812" ref_url="https://www.suse.com/security/cve/CVE-2022-0812/" source="CVE"/>
		<reference ref_id="CVE-2022-0850" ref_url="https://www.suse.com/security/cve/CVE-2022-0850/" source="CVE"/>
		<reference ref_id="CVE-2022-1016" ref_url="https://www.suse.com/security/cve/CVE-2022-1016/" source="CVE"/>
		<reference ref_id="CVE-2022-1048" ref_url="https://www.suse.com/security/cve/CVE-2022-1048/" source="CVE"/>
		<reference ref_id="CVE-2022-23036" ref_url="https://www.suse.com/security/cve/CVE-2022-23036/" source="CVE"/>
		<reference ref_id="CVE-2022-23037" ref_url="https://www.suse.com/security/cve/CVE-2022-23037/" source="CVE"/>
		<reference ref_id="CVE-2022-23038" ref_url="https://www.suse.com/security/cve/CVE-2022-23038/" source="CVE"/>
		<reference ref_id="CVE-2022-23039" ref_url="https://www.suse.com/security/cve/CVE-2022-23039/" source="CVE"/>
		<reference ref_id="CVE-2022-23040" ref_url="https://www.suse.com/security/cve/CVE-2022-23040/" source="CVE"/>
		<reference ref_id="CVE-2022-23041" ref_url="https://www.suse.com/security/cve/CVE-2022-23041/" source="CVE"/>
		<reference ref_id="CVE-2022-23042" ref_url="https://www.suse.com/security/cve/CVE-2022-23042/" source="CVE"/>
		<reference ref_id="CVE-2022-26490" ref_url="https://www.suse.com/security/cve/CVE-2022-26490/" source="CVE"/>
		<reference ref_id="CVE-2022-26966" ref_url="https://www.suse.com/security/cve/CVE-2022-26966/" source="CVE"/>
		<reference ref_id="CVE-2022-28356" ref_url="https://www.suse.com/security/cve/CVE-2022-28356/" source="CVE"/>
		<reference ref_id="CVE-2022-28388" ref_url="https://www.suse.com/security/cve/CVE-2022-28388/" source="CVE"/>
		<reference ref_id="CVE-2022-28389" ref_url="https://www.suse.com/security/cve/CVE-2022-28389/" source="CVE"/>
		<reference ref_id="CVE-2022-28390" ref_url="https://www.suse.com/security/cve/CVE-2022-28390/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1256-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010751.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-28356: Fixed a refcount leak bug in net/llc/af_llc.c (bnc#1197391).
- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution (bsc#1197227).
- CVE-2022-28388: Fixed a double free in drivers/net/can/usb/usb_8dev.c vulnerability in the Linux kernel (bnc#1198032).
- CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel (bnc#1198033).
- CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel (bnc#1198031).
- CVE-2022-0812: Fixed an incorrect header size calculations in xprtrdma (bsc#1196639).
- CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock (bsc#1197331).
- CVE-2022-0850: Fixed a kernel information leak vulnerability in iov_iter.c (bsc#1196761).
- CVE-2022-26966: Fixed an issue in drivers/net/usb/sr9700.c, which allowed attackers to obtain sensitive information from the memory via crafted frame lengths from a USB device (bsc#1196836).
- CVE-2021-45868: Fixed a wrong validation check in fs/quota/quota_tree.c which could lead to an use-after-free if there is a corrupted quota file (bnc#1197366).
- CVE-2021-39713: Fixed a race condition in the network scheduling subsystem which could lead to a use-after-free (bsc#1196973).
- CVE-2022-23036,CVE-2022-23037,CVE-2022-23038,CVE-2022-23039,CVE-2022-23040,CVE-2022-23041,CVE-2022-23042: Fixed multiple issues which could have lead to read/write access to memory pages or denial of service. These issues are related to the Xen PV device frontend drivers (bsc#1196488).
- CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could trigger crash the system or corrupt system memory (bsc#1196830).

The following non-security bugs were fixed:

- ax88179_178a: Fixed memory issues that could be triggered by malicious USB devices (bsc#1196018).
- genirq: Use rcu in kstat_irqs_usr() (bsc#1193738).
- gve/net: Fixed multiple bugfixes (jsc#SLE-23652).
- net/mlx5e: Fix page DMA map/unmap attributes (bsc#1196468).
- net: tipc: validate domain record count on input (bsc#1195254).
- powerpc: Fixed issues related to slow I/O on PowerPC (bsc#1196433).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-19"/>
	<updated date="2022-04-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189562">SUSE bug 1189562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193738">SUSE bug 1193738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194943">SUSE bug 1194943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195051">SUSE bug 1195051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195254">SUSE bug 1195254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195353">SUSE bug 1195353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196018">SUSE bug 1196018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196114">SUSE bug 1196114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196433">SUSE bug 1196433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196468">SUSE bug 1196468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196488">SUSE bug 1196488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196514">SUSE bug 1196514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196639">SUSE bug 1196639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196761">SUSE bug 1196761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196830">SUSE bug 1196830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196836">SUSE bug 1196836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196942">SUSE bug 1196942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196973">SUSE bug 1196973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197227">SUSE bug 1197227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197331">SUSE bug 1197331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197366">SUSE bug 1197366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197391">SUSE bug 1197391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198031">SUSE bug 1198031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198032">SUSE bug 1198032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198033">SUSE bug 1198033</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-39713/">CVE-2021-39713</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45868/">CVE-2021-45868</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0812/">CVE-2022-0812</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0850/">CVE-2022-0850</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1016/">CVE-2022-1016</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1048/">CVE-2022-1048</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23036/">CVE-2022-23036</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23037/">CVE-2022-23037</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23038/">CVE-2022-23038</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23039/">CVE-2022-23039</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23040/">CVE-2022-23040</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23041/">CVE-2022-23041</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23042/">CVE-2022-23042</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26490/">CVE-2022-26490</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26966/">CVE-2022-26966</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-28356/">CVE-2022-28356</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-28388/">CVE-2022-28388</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28389/">CVE-2022-28389</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28390/">CVE-2022-28390</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679861" comment="kernel-default-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679862" comment="kernel-default-base-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679863" comment="kernel-default-devel-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679864" comment="kernel-devel-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679865" comment="kernel-docs-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679866" comment="kernel-macros-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679867" comment="kernel-obs-build-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679868" comment="kernel-source-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679869" comment="kernel-syms-4.12.14-150100.197.111.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139417" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198234" ref_url="https://bugzilla.suse.com/1198234" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24765" ref_url="https://www.suse.com/security/cve/CVE-2022-24765/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010750.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- CVE-2022-24765: Fixed a potential command injection via git worktree (bsc#1198234).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-19"/>
	<updated date="2022-04-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198234">SUSE bug 1198234</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24765/">CVE-2022-24765</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679850" comment="git-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679851" comment="git-arch-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679852" comment="git-core-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679853" comment="git-cvs-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679854" comment="git-daemon-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679855" comment="git-doc-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679856" comment="git-email-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679857" comment="git-gui-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679858" comment="git-svn-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679859" comment="git-web-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679860" comment="gitk-2.26.2-150000.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139418" version="1" class="patch">
	<metadata>
		<title>Security update for SDL (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181201" ref_url="https://bugzilla.suse.com/1181201" source="BUGZILLA"/>
		<reference ref_id="1181202" ref_url="https://bugzilla.suse.com/1181202" source="BUGZILLA"/>
		<reference ref_id="1198001" ref_url="https://bugzilla.suse.com/1198001" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14409" ref_url="https://www.suse.com/security/cve/CVE-2020-14409/" source="CVE"/>
		<reference ref_id="CVE-2020-14410" ref_url="https://www.suse.com/security/cve/CVE-2020-14410/" source="CVE"/>
		<reference ref_id="CVE-2021-33657" ref_url="https://www.suse.com/security/cve/CVE-2021-33657/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010769.html" source="SUSE-SU"/>
		<description>
This update for SDL fixes the following issues:

- CVE-2020-14409: Fixed an integer overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c. (bsc#1181202)
- CVE-2020-14410: Fixed a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c. (bsc#1181201)
- CVE-2021-33657: Fixed a Heap overflow problem in video/SDL_pixels.c. (bsc#1198001)
  		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-20"/>
	<updated date="2022-04-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181201">SUSE bug 1181201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181202">SUSE bug 1181202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198001">SUSE bug 1198001</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14409/">CVE-2020-14409</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14410/">CVE-2020-14410</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33657/">CVE-2021-33657</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679483" comment="libSDL-1_2-0-1.2.15-150000.3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679484" comment="libSDL-devel-1.2.15-150000.3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139419" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1191668" ref_url="https://bugzilla.suse.com/1191668" source="BUGZILLA"/>
		<reference ref_id="1192017" ref_url="https://bugzilla.suse.com/1192017" source="BUGZILLA"/>
		<reference ref_id="1192876" ref_url="https://bugzilla.suse.com/1192876" source="BUGZILLA"/>
		<reference ref_id="1193981" ref_url="https://bugzilla.suse.com/1193981" source="BUGZILLA"/>
		<reference ref_id="1194041" ref_url="https://bugzilla.suse.com/1194041" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3975" ref_url="https://www.suse.com/security/cve/CVE-2021-3975/" source="CVE"/>
		<reference ref_id="CVE-2021-4147" ref_url="https://www.suse.com/security/cve/CVE-2021-4147/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0128-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010027.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:

- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)
- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-19"/>
	<updated date="2022-01-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191668">SUSE bug 1191668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192017">SUSE bug 1192017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192876">SUSE bug 1192876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193981">SUSE bug 1193981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194041">SUSE bug 1194041</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3975/">CVE-2021-3975</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4147/">CVE-2021-4147</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663288" comment="libvirt-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663289" comment="libvirt-admin-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663290" comment="libvirt-bash-completion-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663291" comment="libvirt-client-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663292" comment="libvirt-daemon-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663293" comment="libvirt-daemon-config-network-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663294" comment="libvirt-daemon-config-nwfilter-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663295" comment="libvirt-daemon-driver-interface-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663296" comment="libvirt-daemon-driver-libxl-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663297" comment="libvirt-daemon-driver-lxc-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663298" comment="libvirt-daemon-driver-network-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663299" comment="libvirt-daemon-driver-nodedev-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663300" comment="libvirt-daemon-driver-nwfilter-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663301" comment="libvirt-daemon-driver-qemu-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663302" comment="libvirt-daemon-driver-secret-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663303" comment="libvirt-daemon-driver-storage-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663304" comment="libvirt-daemon-driver-storage-core-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663305" comment="libvirt-daemon-driver-storage-disk-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663306" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663307" comment="libvirt-daemon-driver-storage-logical-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663308" comment="libvirt-daemon-driver-storage-mpath-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663309" comment="libvirt-daemon-driver-storage-rbd-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663310" comment="libvirt-daemon-driver-storage-scsi-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663311" comment="libvirt-daemon-hooks-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663312" comment="libvirt-daemon-lxc-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663313" comment="libvirt-daemon-qemu-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663314" comment="libvirt-daemon-xen-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663315" comment="libvirt-devel-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663316" comment="libvirt-doc-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663317" comment="libvirt-libs-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663318" comment="libvirt-lock-sanlock-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663319" comment="libvirt-nss-5.1.0-17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139420" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198136" ref_url="https://bugzilla.suse.com/1198136" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:1293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010785.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

Security hardening, related to Spring Framework vulnerabilities:
    
- Deprecate getResources() and always return null (bsc#1198136).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-21"/>
	<updated date="2022-04-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198136">SUSE bug 1198136</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679648" comment="tomcat-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679649" comment="tomcat-admin-webapps-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679650" comment="tomcat-el-3_0-api-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679651" comment="tomcat-jsp-2_3-api-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679652" comment="tomcat-lib-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679653" comment="tomcat-servlet-4_0-api-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679654" comment="tomcat-webapps-9.0.36-150100.4.76.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139421" version="1" class="patch">
	<metadata>
		<title>Security update for openjpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1102016" ref_url="https://bugzilla.suse.com/1102016" source="BUGZILLA"/>
		<reference ref_id="1106881" ref_url="https://bugzilla.suse.com/1106881" source="BUGZILLA"/>
		<reference ref_id="1162090" ref_url="https://bugzilla.suse.com/1162090" source="BUGZILLA"/>
		<reference ref_id="1173578" ref_url="https://bugzilla.suse.com/1173578" source="BUGZILLA"/>
		<reference ref_id="1180457" ref_url="https://bugzilla.suse.com/1180457" source="BUGZILLA"/>
		<reference ref_id="1184774" ref_url="https://bugzilla.suse.com/1184774" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14423" ref_url="https://www.suse.com/security/cve/CVE-2018-14423/" source="CVE"/>
		<reference ref_id="CVE-2018-16376" ref_url="https://www.suse.com/security/cve/CVE-2018-16376/" source="CVE"/>
		<reference ref_id="CVE-2020-15389" ref_url="https://www.suse.com/security/cve/CVE-2020-15389/" source="CVE"/>
		<reference ref_id="CVE-2020-27823" ref_url="https://www.suse.com/security/cve/CVE-2020-27823/" source="CVE"/>
		<reference ref_id="CVE-2020-8112" ref_url="https://www.suse.com/security/cve/CVE-2020-8112/" source="CVE"/>
		<reference ref_id="CVE-2021-29338" ref_url="https://www.suse.com/security/cve/CVE-2021-29338/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010791.html" source="SUSE-SU"/>
		<description>
This update for openjpeg fixes the following issues:

- CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016).
- CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881).
- CVE-2020-8112: Fixed a heap buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090).
- CVE-2020-15389: Fixed a use-after-free if a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578).
- CVE-2020-27823: Fixed a heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457),
- CVE-2021-29338: Fixed an integer Overflow allows remote attackers to crash the application (bsc#1184774).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-21"/>
	<updated date="2022-04-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1102016">SUSE bug 1102016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106881">SUSE bug 1106881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162090">SUSE bug 1162090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173578">SUSE bug 1173578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180457">SUSE bug 1180457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184774">SUSE bug 1184774</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14423/">CVE-2018-14423</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16376/">CVE-2018-16376</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-15389/">CVE-2020-15389</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27823/">CVE-2020-27823</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-8112/">CVE-2020-8112</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-29338/">CVE-2021-29338</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679723" comment="libopenjpeg1-1.5.2-150000.4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679724" comment="openjpeg-devel-1.5.2-150000.4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139422" version="1" class="patch">
	<metadata>
		<title>Security update for libinput (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198111" ref_url="https://bugzilla.suse.com/1198111" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1215" ref_url="https://www.suse.com/security/cve/CVE-2022-1215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010797.html" source="SUSE-SU"/>
		<description>
This update for libinput fixes the following issues:

- CVE-2022-1215: Fixed a format string vulnerability (bsc#1198111).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-22"/>
	<updated date="2022-04-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198111">SUSE bug 1198111</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1215/">CVE-2022-1215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680285" comment="libinput-devel-1.10.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680286" comment="libinput-tools-1.10.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680287" comment="libinput-udev-1.10.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680288" comment="libinput10-1.10.5-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139423" version="1" class="patch">
	<metadata>
		<title>Security update for dnsmasq (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1197872" ref_url="https://bugzilla.suse.com/1197872" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0934" ref_url="https://www.suse.com/security/cve/CVE-2022-0934/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010803.html" source="SUSE-SU"/>
		<description>
This update for dnsmasq fixes the following issues:

- CVE-2022-0934: Fixed an invalid memory access that could lead to remote denial
  of service via crafted packet (bsc#1197872).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-22"/>
	<updated date="2022-04-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197872">SUSE bug 1197872</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-0934/">CVE-2022-0934</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679488" comment="dnsmasq-2.86-150100.7.20.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139424" version="1" class="patch">
	<metadata>
		<title>Security update for SDL2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198001" ref_url="https://bugzilla.suse.com/1198001" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33657" ref_url="https://www.suse.com/security/cve/CVE-2021-33657/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010801.html" source="SUSE-SU"/>
		<description>
This update for SDL2 fixes the following issues:

- CVE-2021-33657: Fixed a heap overflow problem in video/SDL_pixels.c (bsc#1198001).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-22"/>
	<updated date="2022-04-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198001">SUSE bug 1198001</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33657/">CVE-2021-33657</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679485" comment="libSDL2-2_0-0-2.0.8-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679486" comment="libSDL2-devel-2.0.8-150000.3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139425" version="1" class="patch">
	<metadata>
		<title>Security update for python-numpy (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1193907" ref_url="https://bugzilla.suse.com/1193907" source="BUGZILLA"/>
		<reference ref_id="1193913" ref_url="https://bugzilla.suse.com/1193913" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33430" ref_url="https://www.suse.com/security/cve/CVE-2021-33430/" source="CVE"/>
		<reference ref_id="CVE-2021-41496" ref_url="https://www.suse.com/security/cve/CVE-2021-41496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0134-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012546.html" source="SUSE-SU"/>
		<description>
This update for python-numpy fixes the following issues:

- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193907">SUSE bug 1193907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193913">SUSE bug 1193913</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33430/">CVE-2021-33430</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41496/">CVE-2021-41496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709943" comment="python3-numpy-1.17.3-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709944" comment="python3-numpy-devel-1.17.3-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663859" comment="python3-numpy-gnu-hpc-1.17.3-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663860" comment="python3-numpy-gnu-hpc-devel-1.17.3-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663861" comment="python3-numpy_1_17_3-gnu-hpc-1.17.3-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663862" comment="python3-numpy_1_17_3-gnu-hpc-devel-1.17.3-10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139426" version="1" class="patch">
	<metadata>
		<title>Security update for busybox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1064976" ref_url="https://bugzilla.suse.com/1064976" source="BUGZILLA"/>
		<reference ref_id="1064978" ref_url="https://bugzilla.suse.com/1064978" source="BUGZILLA"/>
		<reference ref_id="1069412" ref_url="https://bugzilla.suse.com/1069412" source="BUGZILLA"/>
		<reference ref_id="1099260" ref_url="https://bugzilla.suse.com/1099260" source="BUGZILLA"/>
		<reference ref_id="1099263" ref_url="https://bugzilla.suse.com/1099263" source="BUGZILLA"/>
		<reference ref_id="1102912" ref_url="https://bugzilla.suse.com/1102912" source="BUGZILLA"/>
		<reference ref_id="1121426" ref_url="https://bugzilla.suse.com/1121426" source="BUGZILLA"/>
		<reference ref_id="1121428" ref_url="https://bugzilla.suse.com/1121428" source="BUGZILLA"/>
		<reference ref_id="1184522" ref_url="https://bugzilla.suse.com/1184522" source="BUGZILLA"/>
		<reference ref_id="1192869" ref_url="https://bugzilla.suse.com/1192869" source="BUGZILLA"/>
		<reference ref_id="951562" ref_url="https://bugzilla.suse.com/951562" source="BUGZILLA"/>
		<reference ref_id="970662" ref_url="https://bugzilla.suse.com/970662" source="BUGZILLA"/>
		<reference ref_id="970663" ref_url="https://bugzilla.suse.com/970663" source="BUGZILLA"/>
		<reference ref_id="991940" ref_url="https://bugzilla.suse.com/991940" source="BUGZILLA"/>
		<reference ref_id="CVE-2011-5325" ref_url="https://www.suse.com/security/cve/CVE-2011-5325/" source="CVE"/>
		<reference ref_id="CVE-2015-9261" ref_url="https://www.suse.com/security/cve/CVE-2015-9261/" source="CVE"/>
		<reference ref_id="CVE-2016-2147" ref_url="https://www.suse.com/security/cve/CVE-2016-2147/" source="CVE"/>
		<reference ref_id="CVE-2016-2148" ref_url="https://www.suse.com/security/cve/CVE-2016-2148/" source="CVE"/>
		<reference ref_id="CVE-2016-6301" ref_url="https://www.suse.com/security/cve/CVE-2016-6301/" source="CVE"/>
		<reference ref_id="CVE-2017-15873" ref_url="https://www.suse.com/security/cve/CVE-2017-15873/" source="CVE"/>
		<reference ref_id="CVE-2017-15874" ref_url="https://www.suse.com/security/cve/CVE-2017-15874/" source="CVE"/>
		<reference ref_id="CVE-2017-16544" ref_url="https://www.suse.com/security/cve/CVE-2017-16544/" source="CVE"/>
		<reference ref_id="CVE-2018-1000500" ref_url="https://www.suse.com/security/cve/CVE-2018-1000500/" source="CVE"/>
		<reference ref_id="CVE-2018-1000517" ref_url="https://www.suse.com/security/cve/CVE-2018-1000517/" source="CVE"/>
		<reference ref_id="CVE-2018-20679" ref_url="https://www.suse.com/security/cve/CVE-2018-20679/" source="CVE"/>
		<reference ref_id="CVE-2019-5747" ref_url="https://www.suse.com/security/cve/CVE-2019-5747/" source="CVE"/>
		<reference ref_id="CVE-2021-28831" ref_url="https://www.suse.com/security/cve/CVE-2021-28831/" source="CVE"/>
		<reference ref_id="CVE-2021-42373" ref_url="https://www.suse.com/security/cve/CVE-2021-42373/" source="CVE"/>
		<reference ref_id="CVE-2021-42374" ref_url="https://www.suse.com/security/cve/CVE-2021-42374/" source="CVE"/>
		<reference ref_id="CVE-2021-42375" ref_url="https://www.suse.com/security/cve/CVE-2021-42375/" source="CVE"/>
		<reference ref_id="CVE-2021-42376" ref_url="https://www.suse.com/security/cve/CVE-2021-42376/" source="CVE"/>
		<reference ref_id="CVE-2021-42377" ref_url="https://www.suse.com/security/cve/CVE-2021-42377/" source="CVE"/>
		<reference ref_id="CVE-2021-42378" ref_url="https://www.suse.com/security/cve/CVE-2021-42378/" source="CVE"/>
		<reference ref_id="CVE-2021-42379" ref_url="https://www.suse.com/security/cve/CVE-2021-42379/" source="CVE"/>
		<reference ref_id="CVE-2021-42380" ref_url="https://www.suse.com/security/cve/CVE-2021-42380/" source="CVE"/>
		<reference ref_id="CVE-2021-42381" ref_url="https://www.suse.com/security/cve/CVE-2021-42381/" source="CVE"/>
		<reference ref_id="CVE-2021-42382" ref_url="https://www.suse.com/security/cve/CVE-2021-42382/" source="CVE"/>
		<reference ref_id="CVE-2021-42383" ref_url="https://www.suse.com/security/cve/CVE-2021-42383/" source="CVE"/>
		<reference ref_id="CVE-2021-42384" ref_url="https://www.suse.com/security/cve/CVE-2021-42384/" source="CVE"/>
		<reference ref_id="CVE-2021-42385" ref_url="https://www.suse.com/security/cve/CVE-2021-42385/" source="CVE"/>
		<reference ref_id="CVE-2021-42386" ref_url="https://www.suse.com/security/cve/CVE-2021-42386/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<description>
This update for busybox fixes the following issues:

- CVE-2011-5325: Fixed tar directory traversal (bsc#951562).
- CVE-2015-9261: Fixed segfalts and application crashes in huft_build (bsc#1102912).
- CVE-2016-2147: Fixed out of bounds write (heap) due to integer underflow in udhcpc (bsc#970663).
- CVE-2016-2148: Fixed heap-based buffer overflow in OPTION_6RD parsing (bsc#970662).
- CVE-2016-6301: Fixed NTP server denial of service flaw (bsc#991940).
- CVE-2017-15873: Fixed integer overflow in get_next_block function in archival/libarchive/decompress_bunzip2.c (bsc#1064976).
- CVE-2017-15874: Fixed integer underflow in archival/libarchive/decompress_unlzma.c (bsc#1064978).
- CVE-2017-16544: Fixed Insufficient sanitization of filenames when autocompleting (bsc#1069412).
- CVE-2018-1000500 : Fixed missing SSL certificate validation in wget (bsc#1099263).
- CVE-2018-1000517: Fixed heap-based buffer overflow in the retrieve_file_data() (bsc#1099260).
- CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426).
- CVE-2019-5747: Fixed out of bounds read in udhcp components (bsc#1121428).
- CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522).
- CVE-2021-42373: Fixed NULL pointer dereference in man leading to DoS when a section name is supplied but no page argument is given (bsc#1192869).
- CVE-2021-42374: Fixed out-of-bounds heap read in unlzma leading to information leak and DoS when crafted LZMA-compressed input is decompressed (bsc#1192869).
- CVE-2021-42375: Fixed incorrect handling of a special element in ash leading to DoS when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters (bsc#1192869).
- CVE-2021-42376: Fixed NULL pointer dereference in hush leading to DoS when processing a crafted shell command (bsc#1192869).
- CVE-2021-42377: Fixed attacker-controlled pointer free in hush leading to DoS and possible code execution when processing a crafted shell command (bsc#1192869).
- CVE-2021-42378: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the getvar_i function (bsc#1192869).
- CVE-2021-42379: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the next_input_file function (bsc#1192869).
- CVE-2021-42380: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the clrvar function (bsc#1192869).
- CVE-2021-42381: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the hash_init function (bsc#1192869).
- CVE-2021-42382: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the getvar_s function (bsc#1192869).
- CVE-2021-42383: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the evaluate function (bsc#1192869).
- CVE-2021-42384: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the handle_special function (bsc#1192869).
- CVE-2021-42385: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the evaluate function (bsc#1192869).
- CVE-2021-42386: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the nvalloc function (bsc#1192869).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-20"/>
	<updated date="2022-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1064976">SUSE bug 1064976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064978">SUSE bug 1064978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069412">SUSE bug 1069412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099260">SUSE bug 1099260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099263">SUSE bug 1099263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102912">SUSE bug 1102912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121426">SUSE bug 1121426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121428">SUSE bug 1121428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184522">SUSE bug 1184522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192869">SUSE bug 1192869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951562">SUSE bug 951562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970662">SUSE bug 970662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970663">SUSE bug 970663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991940">SUSE bug 991940</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2011-5325/">CVE-2011-5325</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9261/">CVE-2015-9261</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2147/">CVE-2016-2147</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2148/">CVE-2016-2148</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6301/">CVE-2016-6301</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15873/">CVE-2017-15873</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15874/">CVE-2017-15874</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16544/">CVE-2017-16544</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000500/">CVE-2018-1000500</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000517/">CVE-2018-1000517</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20679/">CVE-2018-20679</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5747/">CVE-2019-5747</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28831/">CVE-2021-28831</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42373/">CVE-2021-42373</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42374/">CVE-2021-42374</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42375/">CVE-2021-42375</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42376/">CVE-2021-42376</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42377/">CVE-2021-42377</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42378/">CVE-2021-42378</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42379/">CVE-2021-42379</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42380/">CVE-2021-42380</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42381/">CVE-2021-42381</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42382/">CVE-2021-42382</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42383/">CVE-2021-42383</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42384/">CVE-2021-42384</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42385/">CVE-2021-42385</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42386/">CVE-2021-42386</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663736" comment="busybox-1.34.1-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663741" comment="busybox-static-1.34.1-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139427" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194547" ref_url="https://bugzilla.suse.com/1194547" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4140" ref_url="https://www.suse.com/security/cve/CVE-2021-4140/" source="CVE"/>
		<reference ref_id="CVE-2022-22737" ref_url="https://www.suse.com/security/cve/CVE-2022-22737/" source="CVE"/>
		<reference ref_id="CVE-2022-22738" ref_url="https://www.suse.com/security/cve/CVE-2022-22738/" source="CVE"/>
		<reference ref_id="CVE-2022-22739" ref_url="https://www.suse.com/security/cve/CVE-2022-22739/" source="CVE"/>
		<reference ref_id="CVE-2022-22740" ref_url="https://www.suse.com/security/cve/CVE-2022-22740/" source="CVE"/>
		<reference ref_id="CVE-2022-22741" ref_url="https://www.suse.com/security/cve/CVE-2022-22741/" source="CVE"/>
		<reference ref_id="CVE-2022-22742" ref_url="https://www.suse.com/security/cve/CVE-2022-22742/" source="CVE"/>
		<reference ref_id="CVE-2022-22743" ref_url="https://www.suse.com/security/cve/CVE-2022-22743/" source="CVE"/>
		<reference ref_id="CVE-2022-22744" ref_url="https://www.suse.com/security/cve/CVE-2022-22744/" source="CVE"/>
		<reference ref_id="CVE-2022-22745" ref_url="https://www.suse.com/security/cve/CVE-2022-22745/" source="CVE"/>
		<reference ref_id="CVE-2022-22746" ref_url="https://www.suse.com/security/cve/CVE-2022-22746/" source="CVE"/>
		<reference ref_id="CVE-2022-22747" ref_url="https://www.suse.com/security/cve/CVE-2022-22747/" source="CVE"/>
		<reference ref_id="CVE-2022-22748" ref_url="https://www.suse.com/security/cve/CVE-2022-22748/" source="CVE"/>
		<reference ref_id="CVE-2022-22751" ref_url="https://www.suse.com/security/cve/CVE-2022-22751/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0137-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021405.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- CVE-2021-4140: Fixed iframe sandbox bypass with XSLT (bsc#1194547).
- CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547).
- CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur (bsc#1194547).
- CVE-2022-22739: Fixed missing throttling on external protocol launch dialog (bsc#1194547).
- CVE-2022-22740: Fixed use-after-free of ChannelEventQueue::mOwner (bsc#1194547).
- CVE-2022-22741: Fixed browser window spoof using fullscreen mode (bsc#1194547).
- CVE-2022-22742: Fixed out-of-bounds memory access when inserting text in edit mode (bsc#1194547).
- CVE-2022-22743: Fixed browser window spoof using fullscreen mode (bsc#1194547).
- CVE-2022-22744: Fixed possible command injection via the 'Copy as curl' feature in DevTools (bsc#1194547).
- CVE-2022-22745: Fixed leaking cross-origin URLs through securitypolicyviolation event (bsc#1194547).
- CVE-2022-22746: Fixed calling into reportValidity could have lead to fullscreen window spoof (bsc#1194547).
- CVE-2022-22747: Fixed crash when handling empty pkcs7 sequence(bsc#1194547).
- CVE-2022-22748: Fixed spoofed origin on external protocol launch dialog (bsc#1194547).
- CVE-2022-22751: Fixed memory safety bugs (bsc#1194547).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-20"/>
	<updated date="2022-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194547">SUSE bug 1194547</bugzilla>
	<cve impact="moderate" cvss3="10/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4140/">CVE-2021-4140</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22737/">CVE-2022-22737</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22738/">CVE-2022-22738</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22739/">CVE-2022-22739</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22740/">CVE-2022-22740</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22741/">CVE-2022-22741</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22742/">CVE-2022-22742</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-22743/">CVE-2022-22743</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22744/">CVE-2022-22744</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22745/">CVE-2022-22745</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22746/">CVE-2022-22746</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-22747/">CVE-2022-22747</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22748/">CVE-2022-22748</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22751/">CVE-2022-22751</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663737" comment="MozillaFirefox-91.5.0-150.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663738" comment="MozillaFirefox-devel-91.5.0-150.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663739" comment="MozillaFirefox-translations-common-91.5.0-150.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663740" comment="MozillaFirefox-translations-other-91.5.0-150.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139428" version="1" class="patch">
	<metadata>
		<title>Security update for cifs-utils (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1197216" ref_url="https://bugzilla.suse.com/1197216" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-27239" ref_url="https://www.suse.com/security/cve/CVE-2022-27239/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010845.html" source="SUSE-SU"/>
		<description>
This update for cifs-utils fixes the following issues:

- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-27"/>
	<updated date="2022-04-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197216">SUSE bug 1197216</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-27239/">CVE-2022-27239</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009681178" comment="cifs-utils-6.9-150100.5.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009681179" comment="cifs-utils-devel-6.9-150100.5.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139429" version="1" class="patch">
	<metadata>
		<title>Security update for aide (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194735" ref_url="https://bugzilla.suse.com/1194735" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-45417" ref_url="https://www.suse.com/security/cve/CVE-2021-45417/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010046.html" source="SUSE-SU"/>
		<description>
This update for aide fixes the following issues:

- CVE-2021-45417: Fix a bufferoverflow in base64 functions (bsc#1194735)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-21"/>
	<updated date="2022-01-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194735">SUSE bug 1194735</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-45417/">CVE-2021-45417</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664168" comment="aide-0.16-24.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139430" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1196133" ref_url="https://bugzilla.suse.com/1196133" source="BUGZILLA"/>
		<reference ref_id="1198290" ref_url="https://bugzilla.suse.com/1198290" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22594" ref_url="https://www.suse.com/security/cve/CVE-2022-22594/" source="CVE"/>
		<reference ref_id="CVE-2022-22624" ref_url="https://www.suse.com/security/cve/CVE-2022-22624/" source="CVE"/>
		<reference ref_id="CVE-2022-22628" ref_url="https://www.suse.com/security/cve/CVE-2022-22628/" source="CVE"/>
		<reference ref_id="CVE-2022-22629" ref_url="https://www.suse.com/security/cve/CVE-2022-22629/" source="CVE"/>
		<reference ref_id="CVE-2022-22637" ref_url="https://www.suse.com/security/cve/CVE-2022-22637/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010915.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.36.0 (bsc#1198290):

- CVE-2022-22624: Fixed use after free that may lead to arbitrary code execution.
- CVE-2022-22628: Fixed use after free that may lead to arbitrary code execution.
- CVE-2022-22629: Fixed a buffer overflow that may lead to arbitrary code execution.
- CVE-2022-22637: Fixed an unexpected cross-origin behavior due to a logic error.

Missing CVE reference for the update to 2.34.6 (bsc#1196133):

- CVE-2022-22594: Fixed a cross-origin issue in the IndexDB API.   
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-03"/>
	<updated date="2022-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196133">SUSE bug 1196133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198290">SUSE bug 1198290</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22594/">CVE-2022-22594</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22624/">CVE-2022-22624</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22628/">CVE-2022-22628</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22629/">CVE-2022-22629</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22637/">CVE-2022-22637</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680321" comment="libjavascriptcoregtk-4_0-18-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680322" comment="libwebkit2gtk-4_0-37-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680323" comment="libwebkit2gtk3-lang-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680324" comment="typelib-1_0-JavaScriptCore-4_0-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680325" comment="typelib-1_0-WebKit2-4_0-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680326" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680327" comment="webkit2gtk-4_0-injected-bundles-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680328" comment="webkit2gtk3-devel-2.36.0-150000.3.100.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139431" version="1" class="patch">
	<metadata>
		<title>Security update for ruby2.5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188160" ref_url="https://bugzilla.suse.com/1188160" source="BUGZILLA"/>
		<reference ref_id="1188161" ref_url="https://bugzilla.suse.com/1188161" source="BUGZILLA"/>
		<reference ref_id="1190375" ref_url="https://bugzilla.suse.com/1190375" source="BUGZILLA"/>
		<reference ref_id="1193035" ref_url="https://bugzilla.suse.com/1193035" source="BUGZILLA"/>
		<reference ref_id="1198441" ref_url="https://bugzilla.suse.com/1198441" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31799" ref_url="https://www.suse.com/security/cve/CVE-2021-31799/" source="CVE"/>
		<reference ref_id="CVE-2021-31810" ref_url="https://www.suse.com/security/cve/CVE-2021-31810/" source="CVE"/>
		<reference ref_id="CVE-2021-32066" ref_url="https://www.suse.com/security/cve/CVE-2021-32066/" source="CVE"/>
		<reference ref_id="CVE-2021-41817" ref_url="https://www.suse.com/security/cve/CVE-2021-41817/" source="CVE"/>
		<reference ref_id="CVE-2022-28739" ref_url="https://www.suse.com/security/cve/CVE-2022-28739/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010920.html" source="SUSE-SU"/>
		<description>
This update for ruby2.5 fixes the following issues:

- CVE-2022-28739: Fixed a buffer overrun in String-to-Float conversion (bsc#1198441).
- CVE-2021-41817: Fixed a regular expression denial of service in Date Parsing Methods (bsc#1193035).
- CVE-2021-32066: Fixed a StartTLS stripping vulnerability in Net:IMAP (bsc#1188160).
- CVE-2021-31810: Fixed a trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161).
- CVE-2021-31799: Fixed a command injection vulnerability in RDoc (bsc#1190375). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-03"/>
	<updated date="2022-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188160">SUSE bug 1188160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188161">SUSE bug 1188161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190375">SUSE bug 1190375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193035">SUSE bug 1193035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198441">SUSE bug 1198441</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31799/">CVE-2021-31799</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-31810/">CVE-2021-31810</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-32066/">CVE-2021-32066</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-41817/">CVE-2021-41817</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-28739/">CVE-2022-28739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680329" comment="libruby2_5-2_5-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680330" comment="ruby2.5-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680331" comment="ruby2.5-devel-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680332" comment="ruby2.5-devel-extra-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680333" comment="ruby2.5-stdlib-2.5.9-150000.4.23.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139432" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198671" ref_url="https://bugzilla.suse.com/1198671" source="BUGZILLA"/>
		<reference ref_id="1198672" ref_url="https://bugzilla.suse.com/1198672" source="BUGZILLA"/>
		<reference ref_id="1198673" ref_url="https://bugzilla.suse.com/1198673" source="BUGZILLA"/>
		<reference ref_id="1198674" ref_url="https://bugzilla.suse.com/1198674" source="BUGZILLA"/>
		<reference ref_id="1198675" ref_url="https://bugzilla.suse.com/1198675" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21426" ref_url="https://www.suse.com/security/cve/CVE-2022-21426/" source="CVE"/>
		<reference ref_id="CVE-2022-21434" ref_url="https://www.suse.com/security/cve/CVE-2022-21434/" source="CVE"/>
		<reference ref_id="CVE-2022-21443" ref_url="https://www.suse.com/security/cve/CVE-2022-21443/" source="CVE"/>
		<reference ref_id="CVE-2022-21476" ref_url="https://www.suse.com/security/cve/CVE-2022-21476/" source="CVE"/>
		<reference ref_id="CVE-2022-21496" ref_url="https://www.suse.com/security/cve/CVE-2022-21496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010919.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- CVE-2022-21426: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198672).
- CVE-2022-21434: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198674).
- CVE-2022-21496: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198673).
- CVE-2022-21443: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198675).
- CVE-2022-21476: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198671).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-03"/>
	<updated date="2022-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198671">SUSE bug 1198671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198672">SUSE bug 1198672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198673">SUSE bug 1198673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198674">SUSE bug 1198674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198675">SUSE bug 1198675</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21426/">CVE-2022-21426</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21434/">CVE-2022-21434</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21443/">CVE-2022-21443</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21476/">CVE-2022-21476</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21496/">CVE-2022-21496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680334" comment="java-11-openjdk-11.0.15.0-150000.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680335" comment="java-11-openjdk-demo-11.0.15.0-150000.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680336" comment="java-11-openjdk-devel-11.0.15.0-150000.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680337" comment="java-11-openjdk-headless-11.0.15.0-150000.3.80.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139433" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188891" ref_url="https://bugzilla.suse.com/1188891" source="BUGZILLA"/>
		<reference ref_id="1189547" ref_url="https://bugzilla.suse.com/1189547" source="BUGZILLA"/>
		<reference ref_id="1190269" ref_url="https://bugzilla.suse.com/1190269" source="BUGZILLA"/>
		<reference ref_id="1190274" ref_url="https://bugzilla.suse.com/1190274" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29980" ref_url="https://www.suse.com/security/cve/CVE-2021-29980/" source="CVE"/>
		<reference ref_id="CVE-2021-29981" ref_url="https://www.suse.com/security/cve/CVE-2021-29981/" source="CVE"/>
		<reference ref_id="CVE-2021-29982" ref_url="https://www.suse.com/security/cve/CVE-2021-29982/" source="CVE"/>
		<reference ref_id="CVE-2021-29983" ref_url="https://www.suse.com/security/cve/CVE-2021-29983/" source="CVE"/>
		<reference ref_id="CVE-2021-29984" ref_url="https://www.suse.com/security/cve/CVE-2021-29984/" source="CVE"/>
		<reference ref_id="CVE-2021-29985" ref_url="https://www.suse.com/security/cve/CVE-2021-29985/" source="CVE"/>
		<reference ref_id="CVE-2021-29986" ref_url="https://www.suse.com/security/cve/CVE-2021-29986/" source="CVE"/>
		<reference ref_id="CVE-2021-29987" ref_url="https://www.suse.com/security/cve/CVE-2021-29987/" source="CVE"/>
		<reference ref_id="CVE-2021-29988" ref_url="https://www.suse.com/security/cve/CVE-2021-29988/" source="CVE"/>
		<reference ref_id="CVE-2021-29989" ref_url="https://www.suse.com/security/cve/CVE-2021-29989/" source="CVE"/>
		<reference ref_id="CVE-2021-29990" ref_url="https://www.suse.com/security/cve/CVE-2021-29990/" source="CVE"/>
		<reference ref_id="CVE-2021-29991" ref_url="https://www.suse.com/security/cve/CVE-2021-29991/" source="CVE"/>
		<reference ref_id="CVE-2021-38492" ref_url="https://www.suse.com/security/cve/CVE-2021-38492/" source="CVE"/>
		<reference ref_id="CVE-2021-38495" ref_url="https://www.suse.com/security/cve/CVE-2021-38495/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010973.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

This update contains the Firefox Extended Support Release 91.1.0 ESR.

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-40 (bsc#1190269, bsc#1190274):

* CVE-2021-38492: Navigating to `mk:` URL scheme could load Internet Explorer
* CVE-2021-38495: Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1

Firefox 91.0.1esr ESR

* Fixed: Fixed an issue causing buttons on the tab bar to be
  resized when loading certain websites (bug 1704404)
* Fixed: Fixed an issue which caused tabs from private windows
  to be visible in non-private windows when viewing switch-to-
  tab results in the address bar panel (bug 1720369)
* Fixed: Various stability fixes
* Fixed: Security fix MFSA 2021-37 (bsc#1189547)
* CVE-2021-29991 (bmo#1724896)
  Header Splitting possible with HTTP/3 Responses

Firefox Extended Support Release 91.0 ESR

* New: Some of the highlights of the new Extended Support Release are:

  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded 'just in time' if you decide to 'Log in with Facebook'
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We’ve improved functionality and design for a number of
    Firefox search features:
    * Selecting a search engine at the bottom of the search
      panel now enters search mode for that engine, allowing you to
      see suggestions (if available) for your search terms. The old
      behavior (immediately performing a search) is available with
      a shift-click.
    * When Firefox autocompletes the URL of one of your search
      engines, you can now search with that engine directly in the
      address bar by selecting the shortcut in the address bar
      results.
    * We’ve added buttons at the bottom of the search panel to
      allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
* Changed: Firefox no longer supports Adobe Flash. There is no
  setting available to re-enable Flash support.
* Enterprise: Various bug fixes and new policies have been
  implemented in the latest version of Firefox. See more
  details in the Firefox for Enterprise 91 Release Notes.

  MFSA 2021-33 (bsc#1188891):

* CVE-2021-29986: Race condition when resolving DNS names could have led to
  memory corruption
* CVE-2021-29981: Live range splitting could have led to conflicting
  assignments in the JIT
* CVE-2021-29988: Memory corruption as a result of incorrect style treatment
* CVE-2021-29983: Firefox for Android could get stuck in fullscreen mode
* CVE-2021-29984: Incorrect instruction reordering during JIT optimization
* CVE-2021-29980: Uninitialized memory in a canvas object could have led to
  memory corruption
* CVE-2021-29987: Users could have been tricked into accepting unwanted
  permissions on Linux
* CVE-2021-29985: Use-after-free media channels
* CVE-2021-29982: Single bit data leak due to incorrect JIT optimization and
  type confusion
* CVE-2021-29989: Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
* CVE-2021-29990: Memory safety bugs fixed in Firefox 91
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-09"/>
	<updated date="2022-05-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188891">SUSE bug 1188891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189547">SUSE bug 1189547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190269">SUSE bug 1190269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190274">SUSE bug 1190274</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29980/">CVE-2021-29980</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29981/">CVE-2021-29981</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29982/">CVE-2021-29982</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29983/">CVE-2021-29983</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29984/">CVE-2021-29984</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29985/">CVE-2021-29985</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29986/">CVE-2021-29986</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29987/">CVE-2021-29987</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29988/">CVE-2021-29988</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29989/">CVE-2021-29989</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29990/">CVE-2021-29990</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29991/">CVE-2021-29991</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38492/">CVE-2021-38492</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38495/">CVE-2021-38495</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009682419" comment="MozillaFirefox-91.9.0-150000.150.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682420" comment="MozillaFirefox-devel-91.9.0-150000.150.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682421" comment="MozillaFirefox-translations-common-91.9.0-150000.150.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682422" comment="MozillaFirefox-translations-other-91.9.0-150000.150.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139434" version="1" class="patch">
	<metadata>
		<title>Security update for gzip (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="CVE-2022-1271" ref_url="https://www.suse.com/security/cve/CVE-2022-1271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011021.html" source="SUSE-SU"/>
		<description>
This update for gzip fixes the following issues:

- CVE-2022-1271: Add hardening for zgrep. (bsc#1198062)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-16"/>
	<updated date="2022-05-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1271/">CVE-2022-1271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682433" comment="gzip-1.10-150000.4.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139435" version="1" class="patch">
	<metadata>
		<title>Security update for e2fsprogs (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198446" ref_url="https://bugzilla.suse.com/1198446" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1304" ref_url="https://www.suse.com/security/cve/CVE-2022-1304/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1688-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011031.html" source="SUSE-SU"/>
		<description>
This update for e2fsprogs fixes the following issues:

- CVE-2022-1304: Fixed out-of-bounds read/write leading to segmentation fault
  and possibly arbitrary code execution. (bsc#1198446)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-16"/>
	<updated date="2022-05-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198446">SUSE bug 1198446</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-1304/">CVE-2022-1304</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009682231" comment="e2fsprogs-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682232" comment="e2fsprogs-devel-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682233" comment="libcom_err-devel-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682234" comment="libcom_err-devel-static-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682235" comment="libcom_err2-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682218" comment="libcom_err2-32bit-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682236" comment="libext2fs-devel-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682237" comment="libext2fs-devel-static-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682238" comment="libext2fs2-1.43.8-150000.4.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139436" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1193930" ref_url="https://bugzilla.suse.com/1193930" source="BUGZILLA"/>
		<reference ref_id="1196441" ref_url="https://bugzilla.suse.com/1196441" source="BUGZILLA"/>
		<reference ref_id="1197284" ref_url="https://bugzilla.suse.com/1197284" source="BUGZILLA"/>
		<reference ref_id="1197517" ref_url="https://bugzilla.suse.com/1197517" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43565" ref_url="https://www.suse.com/security/cve/CVE-2021-43565/" source="CVE"/>
		<reference ref_id="CVE-2022-23648" ref_url="https://www.suse.com/security/cve/CVE-2022-23648/" source="CVE"/>
		<reference ref_id="CVE-2022-24769" ref_url="https://www.suse.com/security/cve/CVE-2022-24769/" source="CVE"/>
		<reference ref_id="CVE-2022-27191" ref_url="https://www.suse.com/security/cve/CVE-2022-27191/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011030.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker fixes the following issues:

- CVE-2022-24769: Fixed incorrect default inheritable capabilities (bsc#1197517).
- CVE-2022-23648: Fixed directory traversal issue (bsc#1196441).
- CVE-2022-27191: Fixed a crash in a golang.org/x/crypto/ssh server (bsc#1197284).
- CVE-2021-43565: Fixed a panic in golang.org/x/crypto by empty plaintext packet (bsc#1193930).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-16"/>
	<updated date="2022-05-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193930">SUSE bug 1193930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196441">SUSE bug 1196441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197284">SUSE bug 1197284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197517">SUSE bug 1197517</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43565/">CVE-2021-43565</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23648/">CVE-2022-23648</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-24769/">CVE-2022-24769</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27191/">CVE-2022-27191</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009681381" comment="containerd-1.5.11-150000.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682435" comment="containerd-ctr-1.5.11-150000.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009681382" comment="docker-20.10.14_ce-150000.163.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009681370" comment="docker-bash-completion-20.10.14_ce-150000.163.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139437" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1191962" ref_url="https://bugzilla.suse.com/1191962" source="BUGZILLA"/>
		<reference ref_id="1191963" ref_url="https://bugzilla.suse.com/1191963" source="BUGZILLA"/>
		<reference ref_id="1192153" ref_url="https://bugzilla.suse.com/1192153" source="BUGZILLA"/>
		<reference ref_id="1192154" ref_url="https://bugzilla.suse.com/1192154" source="BUGZILLA"/>
		<reference ref_id="1192696" ref_url="https://bugzilla.suse.com/1192696" source="BUGZILLA"/>
		<reference ref_id="1194514" ref_url="https://bugzilla.suse.com/1194514" source="BUGZILLA"/>
		<reference ref_id="1194819" ref_url="https://bugzilla.suse.com/1194819" source="BUGZILLA"/>
		<reference ref_id="1197283" ref_url="https://bugzilla.suse.com/1197283" source="BUGZILLA"/>
		<reference ref_id="1198247" ref_url="https://bugzilla.suse.com/1198247" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23343" ref_url="https://www.suse.com/security/cve/CVE-2021-23343/" source="CVE"/>
		<reference ref_id="CVE-2021-32803" ref_url="https://www.suse.com/security/cve/CVE-2021-32803/" source="CVE"/>
		<reference ref_id="CVE-2021-32804" ref_url="https://www.suse.com/security/cve/CVE-2021-32804/" source="CVE"/>
		<reference ref_id="CVE-2021-3807" ref_url="https://www.suse.com/security/cve/CVE-2021-3807/" source="CVE"/>
		<reference ref_id="CVE-2021-3918" ref_url="https://www.suse.com/security/cve/CVE-2021-3918/" source="CVE"/>
		<reference ref_id="CVE-2021-44906" ref_url="https://www.suse.com/security/cve/CVE-2021-44906/" source="CVE"/>
		<reference ref_id="CVE-2021-44907" ref_url="https://www.suse.com/security/cve/CVE-2021-44907/" source="CVE"/>
		<reference ref_id="CVE-2022-0235" ref_url="https://www.suse.com/security/cve/CVE-2022-0235/" source="CVE"/>
		<reference ref_id="CVE-2022-21824" ref_url="https://www.suse.com/security/cve/CVE-2022-21824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011058.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).
- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).
- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).
- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).
- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).
- CVE-2022-21824: Fixed prototype pollution via console.table (bsc#1194514).
- CVE-2021-44906: Fixed prototype pollution in npm dependency (bsc#1198247).
- CVE-2021-44907: Fixed insuficient sanitation in npm dependency (bsc#1197283).
- CVE-2022-0235: Fixed passing of cookie data and sensitive headers to different hostnames in node-fetch-npm (bsc#1194819).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-17"/>
	<updated date="2022-05-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191962">SUSE bug 1191962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191963">SUSE bug 1191963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192153">SUSE bug 1192153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192154">SUSE bug 1192154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192696">SUSE bug 1192696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194514">SUSE bug 1194514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194819">SUSE bug 1194819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197283">SUSE bug 1197283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198247">SUSE bug 1198247</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23343/">CVE-2021-23343</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32803/">CVE-2021-32803</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32804/">CVE-2021-32804</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3807/">CVE-2021-3807</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3918/">CVE-2021-3918</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-44906/">CVE-2021-44906</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-44907/">CVE-2021-44907</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0235/">CVE-2022-0235</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-21824/">CVE-2022-21824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009683549" comment="nodejs10-10.24.1-150000.1.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683550" comment="nodejs10-devel-10.24.1-150000.1.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683551" comment="nodejs10-docs-10.24.1-150000.1.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683552" comment="npm10-10.24.1-150000.1.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139438" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198717" ref_url="https://bugzilla.suse.com/1198717" source="BUGZILLA"/>
		<reference ref_id="1199423" ref_url="https://bugzilla.suse.com/1199423" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21151" ref_url="https://www.suse.com/security/cve/CVE-2022-21151/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011081.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20220510 release. (bsc#1199423)
Updated to Intel CPU Microcode 20220419 release. (bsc#1198717)

- CVE-2022-21151: Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access (bsc#1199423).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-18"/>
	<updated date="2022-05-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1198717">SUSE bug 1198717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199423">SUSE bug 1199423</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21151/">CVE-2022-21151</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683567" comment="ucode-intel-20220510-150100.3.210.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139439" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198970" ref_url="https://bugzilla.suse.com/1198970" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29909" ref_url="https://www.suse.com/security/cve/CVE-2022-29909/" source="CVE"/>
		<reference ref_id="CVE-2022-29911" ref_url="https://www.suse.com/security/cve/CVE-2022-29911/" source="CVE"/>
		<reference ref_id="CVE-2022-29912" ref_url="https://www.suse.com/security/cve/CVE-2022-29912/" source="CVE"/>
		<reference ref_id="CVE-2022-29914" ref_url="https://www.suse.com/security/cve/CVE-2022-29914/" source="CVE"/>
		<reference ref_id="CVE-2022-29916" ref_url="https://www.suse.com/security/cve/CVE-2022-29916/" source="CVE"/>
		<reference ref_id="CVE-2022-29917" ref_url="https://www.suse.com/security/cve/CVE-2022-29917/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011084.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.9.0 ESR (MFSA 2022-17)(bsc#1198970):

- CVE-2022-29914: Fullscreen notification bypass using popups
- CVE-2022-29909: Bypassing permission prompt in nested browsing contexts
- CVE-2022-29916: Leaking browser history with CSS variables
- CVE-2022-29911: iframe Sandbox bypass
- CVE-2022-29912: Reader mode bypassed SameSite cookies
- CVE-2022-29917: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-18"/>
	<updated date="2022-05-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198970">SUSE bug 1198970</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29909/">CVE-2022-29909</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29911/">CVE-2022-29911</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-29912/">CVE-2022-29912</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29914/">CVE-2022-29914</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29916/">CVE-2022-29916</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29917/">CVE-2022-29917</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684018" comment="MozillaFirefox-91.9.0-150000.150.38.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684019" comment="MozillaFirefox-devel-91.9.0-150000.150.38.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684020" comment="MozillaFirefox-translations-common-91.9.0-150000.150.38.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684021" comment="MozillaFirefox-translations-other-91.9.0-150000.150.38.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139440" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1196490" ref_url="https://bugzilla.suse.com/1196490" source="BUGZILLA"/>
		<reference ref_id="1199132" ref_url="https://bugzilla.suse.com/1199132" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23308" ref_url="https://www.suse.com/security/cve/CVE-2022-23308/" source="CVE"/>
		<reference ref_id="CVE-2022-29824" ref_url="https://www.suse.com/security/cve/CVE-2022-29824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1750-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011098.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

- CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes (bsc#1196490).
- CVE-2022-29824: Fixed integer overflow that could have led to an out-of-bounds write in buf.c (xmlBuf*) and tree.c (xmlBuffer*) (bsc#1199132).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-19"/>
	<updated date="2022-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196490">SUSE bug 1196490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199132">SUSE bug 1199132</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-23308/">CVE-2022-23308</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29824/">CVE-2022-29824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009683561" comment="libxml2-2-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683446" comment="libxml2-2-32bit-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683562" comment="libxml2-devel-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683563" comment="libxml2-tools-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683564" comment="python2-libxml2-python-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683565" comment="python3-libxml2-python-2.9.7-150000.3.46.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139441" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1192953" ref_url="https://bugzilla.suse.com/1192953" source="BUGZILLA"/>
		<reference ref_id="1195786" ref_url="https://bugzilla.suse.com/1195786" source="BUGZILLA"/>
		<reference ref_id="1199459" ref_url="https://bugzilla.suse.com/1199459" source="BUGZILLA"/>
		<reference ref_id="1199470" ref_url="https://bugzilla.suse.com/1199470" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0071" ref_url="https://www.suse.com/security/cve/CVE-2021-0071/" source="CVE"/>
		<reference ref_id="CVE-2021-26312" ref_url="https://www.suse.com/security/cve/CVE-2021-26312/" source="CVE"/>
		<reference ref_id="CVE-2021-26339" ref_url="https://www.suse.com/security/cve/CVE-2021-26339/" source="CVE"/>
		<reference ref_id="CVE-2021-26342" ref_url="https://www.suse.com/security/cve/CVE-2021-26342/" source="CVE"/>
		<reference ref_id="CVE-2021-26347" ref_url="https://www.suse.com/security/cve/CVE-2021-26347/" source="CVE"/>
		<reference ref_id="CVE-2021-26348" ref_url="https://www.suse.com/security/cve/CVE-2021-26348/" source="CVE"/>
		<reference ref_id="CVE-2021-26349" ref_url="https://www.suse.com/security/cve/CVE-2021-26349/" source="CVE"/>
		<reference ref_id="CVE-2021-26350" ref_url="https://www.suse.com/security/cve/CVE-2021-26350/" source="CVE"/>
		<reference ref_id="CVE-2021-26364" ref_url="https://www.suse.com/security/cve/CVE-2021-26364/" source="CVE"/>
		<reference ref_id="CVE-2021-26372" ref_url="https://www.suse.com/security/cve/CVE-2021-26372/" source="CVE"/>
		<reference ref_id="CVE-2021-26373" ref_url="https://www.suse.com/security/cve/CVE-2021-26373/" source="CVE"/>
		<reference ref_id="CVE-2021-26375" ref_url="https://www.suse.com/security/cve/CVE-2021-26375/" source="CVE"/>
		<reference ref_id="CVE-2021-26376" ref_url="https://www.suse.com/security/cve/CVE-2021-26376/" source="CVE"/>
		<reference ref_id="CVE-2021-26378" ref_url="https://www.suse.com/security/cve/CVE-2021-26378/" source="CVE"/>
		<reference ref_id="CVE-2021-26388" ref_url="https://www.suse.com/security/cve/CVE-2021-26388/" source="CVE"/>
		<reference ref_id="CVE-2021-33139" ref_url="https://www.suse.com/security/cve/CVE-2021-33139/" source="CVE"/>
		<reference ref_id="CVE-2021-33155" ref_url="https://www.suse.com/security/cve/CVE-2021-33155/" source="CVE"/>
		<reference ref_id="CVE-2021-46744" ref_url="https://www.suse.com/security/cve/CVE-2021-46744/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011100.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

Update AMD ucode and SEV firmware

- CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
  CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
  CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
  CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, CVE-2021-46744,
  bsc#1199459, bsc#1199470)

Update Intel Bluetooth firmware (INTEL-SA-00604, bsc#1195786):

- CVE-2021-33139, CVE-2021-33155: Improper conditions check in the firmware for some Intel Wireless Bluetooth and Killer Bluetooth products may allow an authenticated user to potentially cause denial of service via adjacent access.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-19"/>
	<updated date="2022-05-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1192953">SUSE bug 1192953</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195786">SUSE bug 1195786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199459">SUSE bug 1199459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199470">SUSE bug 1199470</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0071/">CVE-2021-0071</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-26312/">CVE-2021-26312</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26339/">CVE-2021-26339</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-26342/">CVE-2021-26342</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26347/">CVE-2021-26347</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-26348/">CVE-2021-26348</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-26349/">CVE-2021-26349</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26350/">CVE-2021-26350</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26364/">CVE-2021-26364</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26372/">CVE-2021-26372</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26373/">CVE-2021-26373</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26375/">CVE-2021-26375</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26376/">CVE-2021-26376</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26378/">CVE-2021-26378</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26388/">CVE-2021-26388</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33139/">CVE-2021-33139</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33155/">CVE-2021-33155</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-46744/">CVE-2021-46744</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684024" comment="kernel-firmware-20200107-150100.3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684025" comment="ucode-amd-20200107-150100.3.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139442" version="1" class="patch">
	<metadata>
		<title>Security update for unbound (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1076963" ref_url="https://bugzilla.suse.com/1076963" source="BUGZILLA"/>
		<reference ref_id="1112009" ref_url="https://bugzilla.suse.com/1112009" source="BUGZILLA"/>
		<reference ref_id="1112033" ref_url="https://bugzilla.suse.com/1112033" source="BUGZILLA"/>
		<reference ref_id="1179191" ref_url="https://bugzilla.suse.com/1179191" source="BUGZILLA"/>
		<reference ref_id="1185382" ref_url="https://bugzilla.suse.com/1185382" source="BUGZILLA"/>
		<reference ref_id="1185383" ref_url="https://bugzilla.suse.com/1185383" source="BUGZILLA"/>
		<reference ref_id="1185384" ref_url="https://bugzilla.suse.com/1185384" source="BUGZILLA"/>
		<reference ref_id="1185385" ref_url="https://bugzilla.suse.com/1185385" source="BUGZILLA"/>
		<reference ref_id="1185386" ref_url="https://bugzilla.suse.com/1185386" source="BUGZILLA"/>
		<reference ref_id="1185387" ref_url="https://bugzilla.suse.com/1185387" source="BUGZILLA"/>
		<reference ref_id="1185388" ref_url="https://bugzilla.suse.com/1185388" source="BUGZILLA"/>
		<reference ref_id="1185389" ref_url="https://bugzilla.suse.com/1185389" source="BUGZILLA"/>
		<reference ref_id="1185390" ref_url="https://bugzilla.suse.com/1185390" source="BUGZILLA"/>
		<reference ref_id="1185391" ref_url="https://bugzilla.suse.com/1185391" source="BUGZILLA"/>
		<reference ref_id="1185392" ref_url="https://bugzilla.suse.com/1185392" source="BUGZILLA"/>
		<reference ref_id="1185393" ref_url="https://bugzilla.suse.com/1185393" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-25031" ref_url="https://www.suse.com/security/cve/CVE-2019-25031/" source="CVE"/>
		<reference ref_id="CVE-2019-25032" ref_url="https://www.suse.com/security/cve/CVE-2019-25032/" source="CVE"/>
		<reference ref_id="CVE-2019-25033" ref_url="https://www.suse.com/security/cve/CVE-2019-25033/" source="CVE"/>
		<reference ref_id="CVE-2019-25034" ref_url="https://www.suse.com/security/cve/CVE-2019-25034/" source="CVE"/>
		<reference ref_id="CVE-2019-25035" ref_url="https://www.suse.com/security/cve/CVE-2019-25035/" source="CVE"/>
		<reference ref_id="CVE-2019-25036" ref_url="https://www.suse.com/security/cve/CVE-2019-25036/" source="CVE"/>
		<reference ref_id="CVE-2019-25037" ref_url="https://www.suse.com/security/cve/CVE-2019-25037/" source="CVE"/>
		<reference ref_id="CVE-2019-25038" ref_url="https://www.suse.com/security/cve/CVE-2019-25038/" source="CVE"/>
		<reference ref_id="CVE-2019-25039" ref_url="https://www.suse.com/security/cve/CVE-2019-25039/" source="CVE"/>
		<reference ref_id="CVE-2019-25040" ref_url="https://www.suse.com/security/cve/CVE-2019-25040/" source="CVE"/>
		<reference ref_id="CVE-2019-25041" ref_url="https://www.suse.com/security/cve/CVE-2019-25041/" source="CVE"/>
		<reference ref_id="CVE-2019-25042" ref_url="https://www.suse.com/security/cve/CVE-2019-25042/" source="CVE"/>
		<reference ref_id="CVE-2020-28935" ref_url="https://www.suse.com/security/cve/CVE-2020-28935/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<description>
This update for unbound fixes the following issues:

- CVE-2019-25031: Fixed configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack (bsc#1185382).
- CVE-2019-25032: Fixed integer overflow in the regional allocator via regional_alloc (bsc#1185383).
- CVE-2019-25033: Fixed integer overflow in the regional allocator via the ALIGN_UP macro (bsc#1185384).
- CVE-2019-25034: Fixed integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write (bsc#1185385).
- CVE-2019-25035: Fixed out-of-bounds write in sldns_bget_token_par (bsc#1185386).
- CVE-2019-25036: Fixed assertion failure and denial of service in synth_cname (bsc#1185387).
- CVE-2019-25037: Fixed assertion failure and denial of service in dname_pkt_copy via an invalid packet (bsc#1185388).
- CVE-2019-25038: Fixed integer overflow in a size calculation in dnscrypt/dnscrypt.c (bsc#1185389).
- CVE-2019-25039: Fixed integer overflow in a size calculation in respip/respip.c (bsc#1185390).
- CVE-2019-25040: Fixed infinite loop via a compressed name in dname_pkt_copy (bsc#1185391).
- CVE-2019-25041: Fixed assertion failure via a compressed name in dname_pkt_copy (bsc#1185392).
- CVE-2019-25042: Fixed out-of-bounds write via a compressed name in rdata_copy (bsc#1185393).
- CVE-2020-28935: Fixed symbolic link traversal when writing PID file (bsc#1179191).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076963">SUSE bug 1076963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112009">SUSE bug 1112009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112033">SUSE bug 1112033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179191">SUSE bug 1179191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185382">SUSE bug 1185382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185383">SUSE bug 1185383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185384">SUSE bug 1185384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185385">SUSE bug 1185385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185386">SUSE bug 1185386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185387">SUSE bug 1185387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185388">SUSE bug 1185388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185389">SUSE bug 1185389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185390">SUSE bug 1185390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185391">SUSE bug 1185391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185392">SUSE bug 1185392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185393">SUSE bug 1185393</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-25031/">CVE-2019-25031</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25032/">CVE-2019-25032</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25033/">CVE-2019-25033</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-25034/">CVE-2019-25034</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-25035/">CVE-2019-25035</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25036/">CVE-2019-25036</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25037/">CVE-2019-25037</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25038/">CVE-2019-25038</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25039/">CVE-2019-25039</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25040/">CVE-2019-25040</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25041/">CVE-2019-25041</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-25042/">CVE-2019-25042</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28935/">CVE-2020-28935</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664308" comment="libunbound2-1.6.8-10.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664309" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664310" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139443" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194251" ref_url="https://bugzilla.suse.com/1194251" source="BUGZILLA"/>
		<reference ref_id="1194362" ref_url="https://bugzilla.suse.com/1194362" source="BUGZILLA"/>
		<reference ref_id="1194474" ref_url="https://bugzilla.suse.com/1194474" source="BUGZILLA"/>
		<reference ref_id="1194476" ref_url="https://bugzilla.suse.com/1194476" source="BUGZILLA"/>
		<reference ref_id="1194477" ref_url="https://bugzilla.suse.com/1194477" source="BUGZILLA"/>
		<reference ref_id="1194478" ref_url="https://bugzilla.suse.com/1194478" source="BUGZILLA"/>
		<reference ref_id="1194479" ref_url="https://bugzilla.suse.com/1194479" source="BUGZILLA"/>
		<reference ref_id="1194480" ref_url="https://bugzilla.suse.com/1194480" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-45960" ref_url="https://www.suse.com/security/cve/CVE-2021-45960/" source="CVE"/>
		<reference ref_id="CVE-2021-46143" ref_url="https://www.suse.com/security/cve/CVE-2021-46143/" source="CVE"/>
		<reference ref_id="CVE-2022-22822" ref_url="https://www.suse.com/security/cve/CVE-2022-22822/" source="CVE"/>
		<reference ref_id="CVE-2022-22823" ref_url="https://www.suse.com/security/cve/CVE-2022-22823/" source="CVE"/>
		<reference ref_id="CVE-2022-22824" ref_url="https://www.suse.com/security/cve/CVE-2022-22824/" source="CVE"/>
		<reference ref_id="CVE-2022-22825" ref_url="https://www.suse.com/security/cve/CVE-2022-22825/" source="CVE"/>
		<reference ref_id="CVE-2022-22826" ref_url="https://www.suse.com/security/cve/CVE-2022-22826/" source="CVE"/>
		<reference ref_id="CVE-2022-22827" ref_url="https://www.suse.com/security/cve/CVE-2022-22827/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010063.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:
  
- CVE-2021-45960: Fixed left shift in the storeAtts function in xmlparse.c that can lead to realloc misbehavior (bsc#1194251).
- CVE-2021-46143: Fixed integer overflow in m_groupSize in doProlog (bsc#1194362).
- CVE-2022-22822: Fixed integer overflow in addBinding in xmlparse.c (bsc#1194474).
- CVE-2022-22823: Fixed integer overflow in build_model in xmlparse.c (bsc#1194476).
- CVE-2022-22824: Fixed integer overflow in defineAttribute in xmlparse.c (bsc#1194477).
- CVE-2022-22825: Fixed integer overflow in lookup in xmlparse.c (bsc#1194478).
- CVE-2022-22826: Fixed integer overflow in nextScaffoldPart in xmlparse.c (bsc#1194479).
- CVE-2022-22827: Fixed integer overflow in storeAtts in xmlparse.c (bsc#1194480).  
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194251">SUSE bug 1194251</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194362">SUSE bug 1194362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194474">SUSE bug 1194474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194476">SUSE bug 1194476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194477">SUSE bug 1194477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194478">SUSE bug 1194478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194479">SUSE bug 1194479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194480">SUSE bug 1194480</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-45960/">CVE-2021-45960</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-46143/">CVE-2021-46143</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22822/">CVE-2022-22822</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22823/">CVE-2022-22823</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22824/">CVE-2022-22824</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22825/">CVE-2022-22825</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22826/">CVE-2022-22826</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22827/">CVE-2022-22827</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664060" comment="expat-2.2.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664061" comment="libexpat-devel-2.2.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664062" comment="libexpat1-2.2.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664063" comment="libexpat1-32bit-2.2.5-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139444" version="1" class="patch">
	<metadata>
		<title>Security update for slurm_20_11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1199278" ref_url="https://bugzilla.suse.com/1199278" source="BUGZILLA"/>
		<reference ref_id="1199279" ref_url="https://bugzilla.suse.com/1199279" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29500" ref_url="https://www.suse.com/security/cve/CVE-2022-29500/" source="CVE"/>
		<reference ref_id="CVE-2022-29501" ref_url="https://www.suse.com/security/cve/CVE-2022-29501/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011135.html" source="SUSE-SU"/>
		<description>
This update for slurm_20_11 fixes the following issues:

- CVE-2022-29500: Fixed architectural flaw that could have been exploited to allow an unprivileged user to execute arbitrary processes as root (bsc#1199278).
- CVE-2022-29501: Fixed a problem that an unprivileged user could have sent data to arbitrary unix socket as root (bsc#1199279).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-23"/>
	<updated date="2022-05-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199278">SUSE bug 1199278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199279">SUSE bug 1199279</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29500/">CVE-2022-29500</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29501/">CVE-2022-29501</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009683012" comment="libnss_slurm2_20_11-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683013" comment="libpmi0_20_11-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683014" comment="libslurm36-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683015" comment="perl-slurm_20_11-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683016" comment="slurm_20_11-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683017" comment="slurm_20_11-auth-none-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683018" comment="slurm_20_11-config-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683019" comment="slurm_20_11-config-man-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683020" comment="slurm_20_11-devel-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683021" comment="slurm_20_11-doc-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683022" comment="slurm_20_11-lua-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683023" comment="slurm_20_11-munge-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683024" comment="slurm_20_11-node-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683025" comment="slurm_20_11-pam_slurm-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683026" comment="slurm_20_11-plugins-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683027" comment="slurm_20_11-slurmdbd-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683028" comment="slurm_20_11-sql-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683029" comment="slurm_20_11-sview-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683030" comment="slurm_20_11-torque-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683031" comment="slurm_20_11-webdoc-20.11.9-150100.3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139445" version="1" class="patch">
	<metadata>
		<title>Security update for rsyslog (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1199061" ref_url="https://bugzilla.suse.com/1199061" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24903" ref_url="https://www.suse.com/security/cve/CVE-2022-24903/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011136.html" source="SUSE-SU"/>
		<description>
This update for rsyslog fixes the following issues:

- CVE-2022-24903: Fixed potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-23"/>
	<updated date="2022-05-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199061">SUSE bug 1199061</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24903/">CVE-2022-24903</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009682424" comment="rsyslog-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682425" comment="rsyslog-module-gssapi-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682426" comment="rsyslog-module-gtls-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682427" comment="rsyslog-module-mmnormalize-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682428" comment="rsyslog-module-mysql-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682429" comment="rsyslog-module-pgsql-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682430" comment="rsyslog-module-relp-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682431" comment="rsyslog-module-snmp-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682432" comment="rsyslog-module-udpspoof-8.33.1-150000.3.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139446" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1199768" ref_url="https://bugzilla.suse.com/1199768" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1529" ref_url="https://www.suse.com/security/cve/CVE-2022-1529/" source="CVE"/>
		<reference ref_id="CVE-2022-1802" ref_url="https://www.suse.com/security/cve/CVE-2022-1802/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011133.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.9.1 ESR - MFSA 2022-19 (bsc#1199768):

- CVE-2022-1802: Prototype pollution in Top-Level Await implementation
- CVE-2022-1529: Untrusted input used in JavaScript object indexing, leading to prototype pollution
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-23"/>
	<updated date="2022-05-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199768">SUSE bug 1199768</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1529/">CVE-2022-1529</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1802/">CVE-2022-1802</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692408" comment="MozillaFirefox-91.9.1-150000.150.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692409" comment="MozillaFirefox-devel-91.9.1-150000.150.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692410" comment="MozillaFirefox-translations-common-91.9.1-150000.150.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692411" comment="MozillaFirefox-translations-other-91.9.1-150000.150.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139447" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194019" ref_url="https://bugzilla.suse.com/1194019" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-8518" ref_url="https://www.suse.com/security/cve/CVE-2018-8518/" source="CVE"/>
		<reference ref_id="CVE-2018-8523" ref_url="https://www.suse.com/security/cve/CVE-2018-8523/" source="CVE"/>
		<reference ref_id="CVE-2019-8766" ref_url="https://www.suse.com/security/cve/CVE-2019-8766/" source="CVE"/>
		<reference ref_id="CVE-2019-8768" ref_url="https://www.suse.com/security/cve/CVE-2019-8768/" source="CVE"/>
		<reference ref_id="CVE-2019-8782" ref_url="https://www.suse.com/security/cve/CVE-2019-8782/" source="CVE"/>
		<reference ref_id="CVE-2019-8808" ref_url="https://www.suse.com/security/cve/CVE-2019-8808/" source="CVE"/>
		<reference ref_id="CVE-2019-8815" ref_url="https://www.suse.com/security/cve/CVE-2019-8815/" source="CVE"/>
		<reference ref_id="CVE-2020-10018" ref_url="https://www.suse.com/security/cve/CVE-2020-10018/" source="CVE"/>
		<reference ref_id="CVE-2020-13753" ref_url="https://www.suse.com/security/cve/CVE-2020-13753/" source="CVE"/>
		<reference ref_id="CVE-2020-27918" ref_url="https://www.suse.com/security/cve/CVE-2020-27918/" source="CVE"/>
		<reference ref_id="CVE-2020-29623" ref_url="https://www.suse.com/security/cve/CVE-2020-29623/" source="CVE"/>
		<reference ref_id="CVE-2020-3885" ref_url="https://www.suse.com/security/cve/CVE-2020-3885/" source="CVE"/>
		<reference ref_id="CVE-2020-3894" ref_url="https://www.suse.com/security/cve/CVE-2020-3894/" source="CVE"/>
		<reference ref_id="CVE-2020-3895" ref_url="https://www.suse.com/security/cve/CVE-2020-3895/" source="CVE"/>
		<reference ref_id="CVE-2020-3897" ref_url="https://www.suse.com/security/cve/CVE-2020-3897/" source="CVE"/>
		<reference ref_id="CVE-2020-3900" ref_url="https://www.suse.com/security/cve/CVE-2020-3900/" source="CVE"/>
		<reference ref_id="CVE-2020-3901" ref_url="https://www.suse.com/security/cve/CVE-2020-3901/" source="CVE"/>
		<reference ref_id="CVE-2020-3902" ref_url="https://www.suse.com/security/cve/CVE-2020-3902/" source="CVE"/>
		<reference ref_id="CVE-2020-9802" ref_url="https://www.suse.com/security/cve/CVE-2020-9802/" source="CVE"/>
		<reference ref_id="CVE-2020-9803" ref_url="https://www.suse.com/security/cve/CVE-2020-9803/" source="CVE"/>
		<reference ref_id="CVE-2020-9805" ref_url="https://www.suse.com/security/cve/CVE-2020-9805/" source="CVE"/>
		<reference ref_id="CVE-2020-9947" ref_url="https://www.suse.com/security/cve/CVE-2020-9947/" source="CVE"/>
		<reference ref_id="CVE-2020-9948" ref_url="https://www.suse.com/security/cve/CVE-2020-9948/" source="CVE"/>
		<reference ref_id="CVE-2020-9951" ref_url="https://www.suse.com/security/cve/CVE-2020-9951/" source="CVE"/>
		<reference ref_id="CVE-2020-9952" ref_url="https://www.suse.com/security/cve/CVE-2020-9952/" source="CVE"/>
		<reference ref_id="CVE-2021-1765" ref_url="https://www.suse.com/security/cve/CVE-2021-1765/" source="CVE"/>
		<reference ref_id="CVE-2021-1788" ref_url="https://www.suse.com/security/cve/CVE-2021-1788/" source="CVE"/>
		<reference ref_id="CVE-2021-1817" ref_url="https://www.suse.com/security/cve/CVE-2021-1817/" source="CVE"/>
		<reference ref_id="CVE-2021-1820" ref_url="https://www.suse.com/security/cve/CVE-2021-1820/" source="CVE"/>
		<reference ref_id="CVE-2021-1825" ref_url="https://www.suse.com/security/cve/CVE-2021-1825/" source="CVE"/>
		<reference ref_id="CVE-2021-1826" ref_url="https://www.suse.com/security/cve/CVE-2021-1826/" source="CVE"/>
		<reference ref_id="CVE-2021-1844" ref_url="https://www.suse.com/security/cve/CVE-2021-1844/" source="CVE"/>
		<reference ref_id="CVE-2021-1871" ref_url="https://www.suse.com/security/cve/CVE-2021-1871/" source="CVE"/>
		<reference ref_id="CVE-2021-30661" ref_url="https://www.suse.com/security/cve/CVE-2021-30661/" source="CVE"/>
		<reference ref_id="CVE-2021-30666" ref_url="https://www.suse.com/security/cve/CVE-2021-30666/" source="CVE"/>
		<reference ref_id="CVE-2021-30682" ref_url="https://www.suse.com/security/cve/CVE-2021-30682/" source="CVE"/>
		<reference ref_id="CVE-2021-30761" ref_url="https://www.suse.com/security/cve/CVE-2021-30761/" source="CVE"/>
		<reference ref_id="CVE-2021-30762" ref_url="https://www.suse.com/security/cve/CVE-2021-30762/" source="CVE"/>
		<reference ref_id="CVE-2021-30809" ref_url="https://www.suse.com/security/cve/CVE-2021-30809/" source="CVE"/>
		<reference ref_id="CVE-2021-30818" ref_url="https://www.suse.com/security/cve/CVE-2021-30818/" source="CVE"/>
		<reference ref_id="CVE-2021-30823" ref_url="https://www.suse.com/security/cve/CVE-2021-30823/" source="CVE"/>
		<reference ref_id="CVE-2021-30836" ref_url="https://www.suse.com/security/cve/CVE-2021-30836/" source="CVE"/>
		<reference ref_id="CVE-2021-30846" ref_url="https://www.suse.com/security/cve/CVE-2021-30846/" source="CVE"/>
		<reference ref_id="CVE-2021-30848" ref_url="https://www.suse.com/security/cve/CVE-2021-30848/" source="CVE"/>
		<reference ref_id="CVE-2021-30849" ref_url="https://www.suse.com/security/cve/CVE-2021-30849/" source="CVE"/>
		<reference ref_id="CVE-2021-30851" ref_url="https://www.suse.com/security/cve/CVE-2021-30851/" source="CVE"/>
		<reference ref_id="CVE-2021-30858" ref_url="https://www.suse.com/security/cve/CVE-2021-30858/" source="CVE"/>
		<reference ref_id="CVE-2021-30884" ref_url="https://www.suse.com/security/cve/CVE-2021-30884/" source="CVE"/>
		<reference ref_id="CVE-2021-30887" ref_url="https://www.suse.com/security/cve/CVE-2021-30887/" source="CVE"/>
		<reference ref_id="CVE-2021-30888" ref_url="https://www.suse.com/security/cve/CVE-2021-30888/" source="CVE"/>
		<reference ref_id="CVE-2021-30889" ref_url="https://www.suse.com/security/cve/CVE-2021-30889/" source="CVE"/>
		<reference ref_id="CVE-2021-30890" ref_url="https://www.suse.com/security/cve/CVE-2021-30890/" source="CVE"/>
		<reference ref_id="CVE-2021-30897" ref_url="https://www.suse.com/security/cve/CVE-2021-30897/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.34.3 (bsc#1194019).
- CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content.
- CVE-2021-30890: Fixed logic issue allowing universal cross site scripting when processing maliciously crafted web content.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194019">SUSE bug 1194019</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-8518/">CVE-2018-8518</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2018-8523/">CVE-2018-8523</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8766/">CVE-2019-8766</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8768/">CVE-2019-8768</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8782/">CVE-2019-8782</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8808/">CVE-2019-8808</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8815/">CVE-2019-8815</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10018/">CVE-2020-10018</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13753/">CVE-2020-13753</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27918/">CVE-2020-27918</cve>
	<cve impact="important" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29623/">CVE-2020-29623</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-3885/">CVE-2020-3885</cve>
	<cve impact="important" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3894/">CVE-2020-3894</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3895/">CVE-2020-3895</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3897/">CVE-2020-3897</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3900/">CVE-2020-3900</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3901/">CVE-2020-3901</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-3902/">CVE-2020-3902</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9802/">CVE-2020-9802</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9803/">CVE-2020-9803</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9805/">CVE-2020-9805</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9947/">CVE-2020-9947</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9948/">CVE-2020-9948</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9951/">CVE-2020-9951</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-9952/">CVE-2020-9952</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1765/">CVE-2021-1765</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1788/">CVE-2021-1788</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1817/">CVE-2021-1817</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-1820/">CVE-2021-1820</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-1825/">CVE-2021-1825</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-1826/">CVE-2021-1826</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1844/">CVE-2021-1844</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1871/">CVE-2021-1871</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30661/">CVE-2021-30661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30666/">CVE-2021-30666</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30682/">CVE-2021-30682</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30761/">CVE-2021-30761</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30762/">CVE-2021-30762</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30809/">CVE-2021-30809</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30818/">CVE-2021-30818</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30823/">CVE-2021-30823</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30836/">CVE-2021-30836</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30846/">CVE-2021-30846</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30848/">CVE-2021-30848</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30849/">CVE-2021-30849</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30851/">CVE-2021-30851</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30858/">CVE-2021-30858</cve>
	<cve impact="important" cvss3="4.7/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30884/">CVE-2021-30884</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30887/">CVE-2021-30887</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30888/">CVE-2021-30888</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30889/">CVE-2021-30889</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30890/">CVE-2021-30890</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30897/">CVE-2021-30897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664158" comment="libjavascriptcoregtk-4_0-18-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664159" comment="libwebkit2gtk-4_0-37-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664160" comment="libwebkit2gtk3-lang-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664161" comment="typelib-1_0-JavaScriptCore-4_0-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664162" comment="typelib-1_0-WebKit2-4_0-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664163" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664164" comment="webkit2gtk-4_0-injected-bundles-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664165" comment="webkit2gtk3-devel-2.34.3-3.92.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139448" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1191157" ref_url="https://bugzilla.suse.com/1191157" source="BUGZILLA"/>
		<reference ref_id="1197004" ref_url="https://bugzilla.suse.com/1197004" source="BUGZILLA"/>
		<reference ref_id="1199240" ref_url="https://bugzilla.suse.com/1199240" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29155" ref_url="https://www.suse.com/security/cve/CVE-2022-29155/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011147.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

Security:
- CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).

Bugfixes:
- allow specification of max/min TLS version with TLS1.3 (bsc#1191157)
- libldap was able to be out of step with openldap in some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their related release versions. (bsc#1197004)
- restore CLDAP functionality in CLI tools (jsc#PM-3288)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-24"/>
	<updated date="2022-05-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191157">SUSE bug 1191157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197004">SUSE bug 1197004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199240">SUSE bug 1199240</bugzilla>
	<cve impact="critical" cvss3="9.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29155/">CVE-2022-29155</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009683553" comment="libldap-2_4-2-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683554" comment="libldap-2_4-2-32bit-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683555" comment="libldap-data-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683556" comment="openldap2-client-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683557" comment="openldap2-devel-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683558" comment="openldap2-devel-32bit-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683559" comment="openldap2-devel-static-2.4.46-150000.9.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139449" version="1" class="patch">
	<metadata>
		<title>Security update for json-c (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1171479" ref_url="https://bugzilla.suse.com/1171479" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12762" ref_url="https://www.suse.com/security/cve/CVE-2020-12762/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010072.html" source="SUSE-SU"/>
		<description>
This update for json-c fixes the following issues:

- CVE-2020-12762: Fixed integer overflow and out-of-bounds write. (bsc#1171479)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171479">SUSE bug 1171479</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12762/">CVE-2020-12762</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664166" comment="libjson-c-devel-0.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664167" comment="libjson-c3-0.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664150" comment="libjson-c3-32bit-0.13-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139450" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1199474" ref_url="https://bugzilla.suse.com/1199474" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26691" ref_url="https://www.suse.com/security/cve/CVE-2022-26691/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011166.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:

- CVE-2022-26691: Fixed an authentication bypass and code execution vulnerability (bsc#1199474)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-26"/>
	<updated date="2022-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199474">SUSE bug 1199474</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26691/">CVE-2022-26691</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692412" comment="cups-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692413" comment="cups-client-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692414" comment="cups-config-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692415" comment="cups-ddk-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692416" comment="cups-devel-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692417" comment="libcups2-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684254" comment="libcups2-32bit-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692418" comment="libcupscgi1-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692419" comment="libcupsimage2-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692420" comment="libcupsmime1-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692421" comment="libcupsppdc1-2.2.7-150000.3.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139451" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1195964" ref_url="https://bugzilla.suse.com/1195964" source="BUGZILLA"/>
		<reference ref_id="1195965" ref_url="https://bugzilla.suse.com/1195965" source="BUGZILLA"/>
		<reference ref_id="1197066" ref_url="https://bugzilla.suse.com/1197066" source="BUGZILLA"/>
		<reference ref_id="1197068" ref_url="https://bugzilla.suse.com/1197068" source="BUGZILLA"/>
		<reference ref_id="1197072" ref_url="https://bugzilla.suse.com/1197072" source="BUGZILLA"/>
		<reference ref_id="1197073" ref_url="https://bugzilla.suse.com/1197073" source="BUGZILLA"/>
		<reference ref_id="1197074" ref_url="https://bugzilla.suse.com/1197074" source="BUGZILLA"/>
		<reference ref_id="1197631" ref_url="https://bugzilla.suse.com/1197631" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0561" ref_url="https://www.suse.com/security/cve/CVE-2022-0561/" source="CVE"/>
		<reference ref_id="CVE-2022-0562" ref_url="https://www.suse.com/security/cve/CVE-2022-0562/" source="CVE"/>
		<reference ref_id="CVE-2022-0865" ref_url="https://www.suse.com/security/cve/CVE-2022-0865/" source="CVE"/>
		<reference ref_id="CVE-2022-0891" ref_url="https://www.suse.com/security/cve/CVE-2022-0891/" source="CVE"/>
		<reference ref_id="CVE-2022-0908" ref_url="https://www.suse.com/security/cve/CVE-2022-0908/" source="CVE"/>
		<reference ref_id="CVE-2022-0909" ref_url="https://www.suse.com/security/cve/CVE-2022-0909/" source="CVE"/>
		<reference ref_id="CVE-2022-0924" ref_url="https://www.suse.com/security/cve/CVE-2022-0924/" source="CVE"/>
		<reference ref_id="CVE-2022-1056" ref_url="https://www.suse.com/security/cve/CVE-2022-1056/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011182.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-0561: Fixed null source pointer passed as an argument to memcpy() within TIFFFetchStripThing() in tif_dirread.c (bsc#1195964).
- CVE-2022-0562: Fixed null source pointer passed as an argument to memcpy() within TIFFReadDirectory() in tif_dirread.c (bsc#1195965).
- CVE-2022-0865: Fixed assertion failure in TIFFReadAndRealloc (bsc#1197066).
- CVE-2022-0909: Fixed divide by zero error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197072).
- CVE-2022-0924: Fixed out-of-bounds read error in tiffcp that could have led to a denial-of-service via a crafted tiff file (bsc#1197073).
- CVE-2022-0908: Fixed null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() (bsc#1197074).
- CVE-2022-1056: Fixed out-of-bounds read error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197631).
- CVE-2022-0891: Fixed heap buffer overflow in extractImageSection (bsc#1197068).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-30"/>
	<updated date="2022-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195964">SUSE bug 1195964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195965">SUSE bug 1195965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197066">SUSE bug 1197066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197068">SUSE bug 1197068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197072">SUSE bug 1197072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197073">SUSE bug 1197073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197074">SUSE bug 1197074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197631">SUSE bug 1197631</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0561/">CVE-2022-0561</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0562/">CVE-2022-0562</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0865/">CVE-2022-0865</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0891/">CVE-2022-0891</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0908/">CVE-2022-0908</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0909/">CVE-2022-0909</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0924/">CVE-2022-0924</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1056/">CVE-2022-1056</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692422" comment="libtiff-devel-4.0.9-150000.45.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692423" comment="libtiff5-4.0.9-150000.45.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684380" comment="libtiff5-32bit-4.0.9-150000.45.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139452" version="1" class="patch">
	<metadata>
		<title>Security update for pcre2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1199232" ref_url="https://bugzilla.suse.com/1199232" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1586" ref_url="https://www.suse.com/security/cve/CVE-2022-1586/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011183.html" source="SUSE-SU"/>
		<description>
This update for pcre2 fixes the following issues:

- CVE-2022-1586: Fixed out-of-bounds read via missing Unicode property matching issue in JIT compiled regular expressions (bsc#1199232).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-30"/>
	<updated date="2022-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199232">SUSE bug 1199232</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1586/">CVE-2022-1586</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692424" comment="libpcre2-16-0-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692425" comment="libpcre2-32-0-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692426" comment="libpcre2-8-0-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692427" comment="libpcre2-posix2-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692428" comment="pcre2-devel-10.31-150000.3.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139453" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1199475" ref_url="https://bugzilla.suse.com/1199475" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1552" ref_url="https://www.suse.com/security/cve/CVE-2022-1552/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011202.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:
 
- CVE-2022-1552: Confine additional operations within 'security restricted operation' sandboxes (bsc#1199475).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-31"/>
	<updated date="2022-05-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199475">SUSE bug 1199475</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1552/">CVE-2022-1552</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692660" comment="postgresql10-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692661" comment="postgresql10-contrib-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692662" comment="postgresql10-devel-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692663" comment="postgresql10-docs-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692664" comment="postgresql10-plperl-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692665" comment="postgresql10-plpython-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692666" comment="postgresql10-pltcl-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692667" comment="postgresql10-server-10.21-150100.8.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139454" version="1" class="patch">
	<metadata>
		<title>Security update for hdf5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1072087" ref_url="https://bugzilla.suse.com/1072087" source="BUGZILLA"/>
		<reference ref_id="1072090" ref_url="https://bugzilla.suse.com/1072090" source="BUGZILLA"/>
		<reference ref_id="1072108" ref_url="https://bugzilla.suse.com/1072108" source="BUGZILLA"/>
		<reference ref_id="1072111" ref_url="https://bugzilla.suse.com/1072111" source="BUGZILLA"/>
		<reference ref_id="1093641" ref_url="https://bugzilla.suse.com/1093641" source="BUGZILLA"/>
		<reference ref_id="1093649" ref_url="https://bugzilla.suse.com/1093649" source="BUGZILLA"/>
		<reference ref_id="1093653" ref_url="https://bugzilla.suse.com/1093653" source="BUGZILLA"/>
		<reference ref_id="1093655" ref_url="https://bugzilla.suse.com/1093655" source="BUGZILLA"/>
		<reference ref_id="1093657" ref_url="https://bugzilla.suse.com/1093657" source="BUGZILLA"/>
		<reference ref_id="1101471" ref_url="https://bugzilla.suse.com/1101471" source="BUGZILLA"/>
		<reference ref_id="1101474" ref_url="https://bugzilla.suse.com/1101474" source="BUGZILLA"/>
		<reference ref_id="1101493" ref_url="https://bugzilla.suse.com/1101493" source="BUGZILLA"/>
		<reference ref_id="1101495" ref_url="https://bugzilla.suse.com/1101495" source="BUGZILLA"/>
		<reference ref_id="1102175" ref_url="https://bugzilla.suse.com/1102175" source="BUGZILLA"/>
		<reference ref_id="1109166" ref_url="https://bugzilla.suse.com/1109166" source="BUGZILLA"/>
		<reference ref_id="1109167" ref_url="https://bugzilla.suse.com/1109167" source="BUGZILLA"/>
		<reference ref_id="1109168" ref_url="https://bugzilla.suse.com/1109168" source="BUGZILLA"/>
		<reference ref_id="1109564" ref_url="https://bugzilla.suse.com/1109564" source="BUGZILLA"/>
		<reference ref_id="1109565" ref_url="https://bugzilla.suse.com/1109565" source="BUGZILLA"/>
		<reference ref_id="1109566" ref_url="https://bugzilla.suse.com/1109566" source="BUGZILLA"/>
		<reference ref_id="1109567" ref_url="https://bugzilla.suse.com/1109567" source="BUGZILLA"/>
		<reference ref_id="1109568" ref_url="https://bugzilla.suse.com/1109568" source="BUGZILLA"/>
		<reference ref_id="1109569" ref_url="https://bugzilla.suse.com/1109569" source="BUGZILLA"/>
		<reference ref_id="1109570" ref_url="https://bugzilla.suse.com/1109570" source="BUGZILLA"/>
		<reference ref_id="1134298" ref_url="https://bugzilla.suse.com/1134298" source="BUGZILLA"/>
		<reference ref_id="1167401" ref_url="https://bugzilla.suse.com/1167401" source="BUGZILLA"/>
		<reference ref_id="1167404" ref_url="https://bugzilla.suse.com/1167404" source="BUGZILLA"/>
		<reference ref_id="1167405" ref_url="https://bugzilla.suse.com/1167405" source="BUGZILLA"/>
		<reference ref_id="1169793" ref_url="https://bugzilla.suse.com/1169793" source="BUGZILLA"/>
		<reference ref_id="1174439" ref_url="https://bugzilla.suse.com/1174439" source="BUGZILLA"/>
		<reference ref_id="1179521" ref_url="https://bugzilla.suse.com/1179521" source="BUGZILLA"/>
		<reference ref_id="1196682" ref_url="https://bugzilla.suse.com/1196682" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17505" ref_url="https://www.suse.com/security/cve/CVE-2017-17505/" source="CVE"/>
		<reference ref_id="CVE-2017-17506" ref_url="https://www.suse.com/security/cve/CVE-2017-17506/" source="CVE"/>
		<reference ref_id="CVE-2017-17508" ref_url="https://www.suse.com/security/cve/CVE-2017-17508/" source="CVE"/>
		<reference ref_id="CVE-2017-17509" ref_url="https://www.suse.com/security/cve/CVE-2017-17509/" source="CVE"/>
		<reference ref_id="CVE-2018-11202" ref_url="https://www.suse.com/security/cve/CVE-2018-11202/" source="CVE"/>
		<reference ref_id="CVE-2018-11203" ref_url="https://www.suse.com/security/cve/CVE-2018-11203/" source="CVE"/>
		<reference ref_id="CVE-2018-11204" ref_url="https://www.suse.com/security/cve/CVE-2018-11204/" source="CVE"/>
		<reference ref_id="CVE-2018-11206" ref_url="https://www.suse.com/security/cve/CVE-2018-11206/" source="CVE"/>
		<reference ref_id="CVE-2018-11207" ref_url="https://www.suse.com/security/cve/CVE-2018-11207/" source="CVE"/>
		<reference ref_id="CVE-2018-13869" ref_url="https://www.suse.com/security/cve/CVE-2018-13869/" source="CVE"/>
		<reference ref_id="CVE-2018-13870" ref_url="https://www.suse.com/security/cve/CVE-2018-13870/" source="CVE"/>
		<reference ref_id="CVE-2018-14032" ref_url="https://www.suse.com/security/cve/CVE-2018-14032/" source="CVE"/>
		<reference ref_id="CVE-2018-14033" ref_url="https://www.suse.com/security/cve/CVE-2018-14033/" source="CVE"/>
		<reference ref_id="CVE-2018-14460" ref_url="https://www.suse.com/security/cve/CVE-2018-14460/" source="CVE"/>
		<reference ref_id="CVE-2018-17233" ref_url="https://www.suse.com/security/cve/CVE-2018-17233/" source="CVE"/>
		<reference ref_id="CVE-2018-17234" ref_url="https://www.suse.com/security/cve/CVE-2018-17234/" source="CVE"/>
		<reference ref_id="CVE-2018-17237" ref_url="https://www.suse.com/security/cve/CVE-2018-17237/" source="CVE"/>
		<reference ref_id="CVE-2018-17432" ref_url="https://www.suse.com/security/cve/CVE-2018-17432/" source="CVE"/>
		<reference ref_id="CVE-2018-17433" ref_url="https://www.suse.com/security/cve/CVE-2018-17433/" source="CVE"/>
		<reference ref_id="CVE-2018-17434" ref_url="https://www.suse.com/security/cve/CVE-2018-17434/" source="CVE"/>
		<reference ref_id="CVE-2018-17435" ref_url="https://www.suse.com/security/cve/CVE-2018-17435/" source="CVE"/>
		<reference ref_id="CVE-2018-17436" ref_url="https://www.suse.com/security/cve/CVE-2018-17436/" source="CVE"/>
		<reference ref_id="CVE-2018-17437" ref_url="https://www.suse.com/security/cve/CVE-2018-17437/" source="CVE"/>
		<reference ref_id="CVE-2018-17438" ref_url="https://www.suse.com/security/cve/CVE-2018-17438/" source="CVE"/>
		<reference ref_id="CVE-2020-10809" ref_url="https://www.suse.com/security/cve/CVE-2020-10809/" source="CVE"/>
		<reference ref_id="CVE-2020-10810" ref_url="https://www.suse.com/security/cve/CVE-2020-10810/" source="CVE"/>
		<reference ref_id="CVE-2020-10811" ref_url="https://www.suse.com/security/cve/CVE-2020-10811/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<description>
This update for hdf5 fixes the following issues:

Security issues fixed:

- CVE-2020-10811: Fixed heap-based buffer over-read in the function H5O__layout_decode() located in H5Olayout.c (bsc#1167405).
- CVE-2020-10810: Fixed NULL pointer dereference in the function H5AC_unpin_entry() located in H5AC.c (bsc#1167401).
- CVE-2020-10809: Fixed heap-based buffer overflow in the function Decompress() located in decompress.c (bsc#1167404).
- CVE-2018-17438: Fixed SIGFPE signal raise in the function H5D__select_io() of H5Dselect.c (bsc#1109570).
- CVE-2018-17437: Fixed memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c. (bsc#1109569).
- CVE-2018-17436: Fixed issue in ReadCode() in decompress.c that allowed attackers to cause a denial of service via a crafted HDF5 file (bsc#1109568).
- CVE-2018-17435: Fixed heap-based buffer over-read in H5O_attr_decode() in H5Oattr.c (bsc#1109567).
- CVE-2018-17434: Fixed SIGFPE signal raise in function apply_filters() of h5repack_filters.c (bsc#1109566).
- CVE-2018-17433: Fixed heap-based buffer overflow in ReadGifImageDesc() in gifread.c (bsc#1109565).
- CVE-2018-17432: Fixed NULL pointer dereference in H5O_sdspace_encode() in H5Osdspace.c (bsc#1109564).
- CVE-2018-17237: Fixed SIGFPE signal raise in the function H5D__chunk_set_info_real() (bsc#1109168).
- CVE-2018-17234: Fixed memory leak in the H5O__chunk_deserialize() function in H5Ocache.c (bsc#1109167).
- CVE-2018-17233: Fixed SIGFPE signal is raise in the function H5D__create_chunk_file_map_hyper (bsc#1109166).
- CVE-2018-14460: Fixed heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c (bsc#1102175).
- CVE-2018-14033: Fixed heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c (bsc#1101471).
- CVE-2018-14032: Fixed heap-based buffer over-read in the function H5O_fill_new_decode in H5Ofill.c (bsc#1101474).
- CVE-2018-13870: Fixed heap-based buffer over-read in the function H5O_link_decode in H5Olink.c (bsc#1101493).
- CVE-2018-13869: Fixed memcpy parameter overlap in the function H5O_link_decode in H5Olink.c (bsc#1101495).
- CVE-2018-11207: Fixed division by zero was discovered in H5D__chunk_init in H5Dchunk.c (bsc#1093653).
- CVE-2018-11206: Fixed out of bounds read in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c (bsc#1093657).
- CVE-2018-11204: Fixed NULL pointer dereference in H5O__chunk_deserialize in H5Ocache.c (bsc#1093655).
- CVE-2018-11203: Fixed division by zero in H5D__btree_decode_key in H5Dbtree.c (bsc#1093649).
- CVE-2018-11202: Fixed NULL pointer dereference in H5S_hyper_make_spans in H5Shyper.c (bsc#1093641).
- CVE-2017-17509: Fixed out of bounds write vulnerability in function H5G__ent_decode_vec (bsc#1072111).
- CVE-2017-17508: Fixed divide-by-zero vulnerability in function H5T_set_loc (bsc#1072108).
- CVE-2017-17506: Fixed out of bounds read in the function H5Opline_pline_decode (bsc#1072090).
- CVE-2017-17505: Fixed NULL pointer dereference in the function H5O_pline_decode (bsc#1072087).

Bugfixes:

- Fix library link flags on pkg-config file for HPC builds (bsc#1134298).
- Fix .so number in baselibs.conf for libhdf5_fortran libs (bsc#1169793).
- Fix python-h5py packages built against out-of-date version of HDF5 (bsc#1196682).
- Fix netcdf-cxx4 packages built against out-of-date version of HDF5 (bsc#1179521).
- Add build support for gcc10 to HPC build (bsc#1174439).
- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- HDF5 version Update to 1.10.5 (jsc#SLE-8501).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-01"/>
	<updated date="2022-06-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1072087">SUSE bug 1072087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1072090">SUSE bug 1072090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1072108">SUSE bug 1072108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1072111">SUSE bug 1072111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093641">SUSE bug 1093641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093649">SUSE bug 1093649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093653">SUSE bug 1093653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093655">SUSE bug 1093655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093657">SUSE bug 1093657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101471">SUSE bug 1101471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101474">SUSE bug 1101474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101493">SUSE bug 1101493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101495">SUSE bug 1101495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102175">SUSE bug 1102175</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109166">SUSE bug 1109166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109167">SUSE bug 1109167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109168">SUSE bug 1109168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109564">SUSE bug 1109564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109565">SUSE bug 1109565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109566">SUSE bug 1109566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109567">SUSE bug 1109567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109568">SUSE bug 1109568</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109569">SUSE bug 1109569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109570">SUSE bug 1109570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134298">SUSE bug 1134298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167401">SUSE bug 1167401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167404">SUSE bug 1167404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167405">SUSE bug 1167405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169793">SUSE bug 1169793</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174439">SUSE bug 1174439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179521">SUSE bug 1179521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196682">SUSE bug 1196682</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17505/">CVE-2017-17505</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17506/">CVE-2017-17506</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17508/">CVE-2017-17508</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17509/">CVE-2017-17509</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11202/">CVE-2018-11202</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11203/">CVE-2018-11203</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11204/">CVE-2018-11204</cve>
	<cve impact="low" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11206/">CVE-2018-11206</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11207/">CVE-2018-11207</cve>
	<cve impact="moderate" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13869/">CVE-2018-13869</cve>
	<cve impact="moderate" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13870/">CVE-2018-13870</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14032/">CVE-2018-14032</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14033/">CVE-2018-14033</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14460/">CVE-2018-14460</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17233/">CVE-2018-17233</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17234/">CVE-2018-17234</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17237/">CVE-2018-17237</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17432/">CVE-2018-17432</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17433/">CVE-2018-17433</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17434/">CVE-2018-17434</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17435/">CVE-2018-17435</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17436/">CVE-2018-17436</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17437/">CVE-2018-17437</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17438/">CVE-2018-17438</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10809/">CVE-2020-10809</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10810/">CVE-2020-10810</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10811/">CVE-2020-10811</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692668" comment="hdf5-gnu-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692669" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692670" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692671" comment="hdf5-gnu-openmpi2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692672" comment="hdf5-hpc-examples-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692673" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692674" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692675" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692676" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692677" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692678" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692679" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692680" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692681" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692682" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692683" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692684" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692685" comment="hdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692686" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692687" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692688" comment="hdf5_1_10_8-gnu-openmpi2-hpc-module-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692689" comment="hdf5_1_10_8-hpc-examples-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692690" comment="libhdf5-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692691" comment="libhdf5-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692692" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692693" comment="libhdf5-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692694" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692695" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692696" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692697" comment="libhdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692698" comment="libhdf5_cpp-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692699" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692700" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692701" comment="libhdf5_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692702" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692703" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692704" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692705" comment="libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692706" comment="libhdf5_fortran-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692707" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692708" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692709" comment="libhdf5_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692710" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692711" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692712" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692713" comment="libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692714" comment="libhdf5_hl-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692715" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692716" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692717" comment="libhdf5_hl-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692718" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692719" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692720" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692721" comment="libhdf5_hl_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692722" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692723" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692724" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692725" comment="libhdf5_hl_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692726" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692727" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692728" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692729" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692730" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692731" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692732" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692733" comment="libhdf5_hl_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692734" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692735" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692736" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692737" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139455" version="1" class="patch">
	<metadata>
		<title>Security update for polkit (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194568" ref_url="https://bugzilla.suse.com/1194568" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4034" ref_url="https://www.suse.com/security/cve/CVE-2021-4034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010075.html" source="SUSE-SU"/>
		<description>
This update for polkit fixes the following issues:

- CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194568">SUSE bug 1194568</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4034/">CVE-2021-4034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664535" comment="libpolkit0-0.114-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664536" comment="polkit-0.114-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664537" comment="polkit-devel-0.114-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664538" comment="typelib-1_0-Polkit-1_0-0.114-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139456" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1200027" ref_url="https://bugzilla.suse.com/1200027" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31736" ref_url="https://www.suse.com/security/cve/CVE-2022-31736/" source="CVE"/>
		<reference ref_id="CVE-2022-31737" ref_url="https://www.suse.com/security/cve/CVE-2022-31737/" source="CVE"/>
		<reference ref_id="CVE-2022-31738" ref_url="https://www.suse.com/security/cve/CVE-2022-31738/" source="CVE"/>
		<reference ref_id="CVE-2022-31739" ref_url="https://www.suse.com/security/cve/CVE-2022-31739/" source="CVE"/>
		<reference ref_id="CVE-2022-31740" ref_url="https://www.suse.com/security/cve/CVE-2022-31740/" source="CVE"/>
		<reference ref_id="CVE-2022-31741" ref_url="https://www.suse.com/security/cve/CVE-2022-31741/" source="CVE"/>
		<reference ref_id="CVE-2022-31742" ref_url="https://www.suse.com/security/cve/CVE-2022-31742/" source="CVE"/>
		<reference ref_id="CVE-2022-31747" ref_url="https://www.suse.com/security/cve/CVE-2022-31747/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011229.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.10.0 ESR (MFSA 2022-21)(bsc#1200027)

- CVE-2022-31736: Cross-Origin resource's length leaked
- CVE-2022-31737: Heap buffer overflow in WebGL
- CVE-2022-31738: Browser window spoof using fullscreen mode
- CVE-2022-31739: Attacker-influenced path traversal when saving downloaded files
- CVE-2022-31740: Register allocation problem in WASM on arm64
- CVE-2022-31741: Uninitialized variable leads to invalid memory read
- CVE-2022-31742: Querying a WebAuthn token with a large number of allowCredential entries may have leaked cross-origin information
- CVE-2022-31747: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-02"/>
	<updated date="2022-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200027">SUSE bug 1200027</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31736/">CVE-2022-31736</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31737/">CVE-2022-31737</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31738/">CVE-2022-31738</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31739/">CVE-2022-31739</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31740/">CVE-2022-31740</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31741/">CVE-2022-31741</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-31742/">CVE-2022-31742</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31747/">CVE-2022-31747</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692486" comment="MozillaFirefox-91.10.0-150000.150.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692487" comment="MozillaFirefox-devel-91.10.0-150000.150.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692488" comment="MozillaFirefox-translations-common-91.10.0-150000.150.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692489" comment="MozillaFirefox-translations-other-91.10.0-150000.150.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139457" version="1" class="patch">
	<metadata>
		<title>Security update for fribidi (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1196147" ref_url="https://bugzilla.suse.com/1196147" source="BUGZILLA"/>
		<reference ref_id="1196148" ref_url="https://bugzilla.suse.com/1196148" source="BUGZILLA"/>
		<reference ref_id="1196150" ref_url="https://bugzilla.suse.com/1196150" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25308" ref_url="https://www.suse.com/security/cve/CVE-2022-25308/" source="CVE"/>
		<reference ref_id="CVE-2022-25309" ref_url="https://www.suse.com/security/cve/CVE-2022-25309/" source="CVE"/>
		<reference ref_id="CVE-2022-25310" ref_url="https://www.suse.com/security/cve/CVE-2022-25310/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2029-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011256.html" source="SUSE-SU"/>
		<description>
This update for fribidi fixes the following issues:

- CVE-2022-25308: Fixed stack out of bounds read (bsc#1196147).
- CVE-2022-25309: Fixed heap-buffer-overflow in fribidi_cap_rtl_to_unicode (bsc#1196148).
- CVE-2022-25310: Fixed NULL pointer dereference in fribidi_remove_bidi_marks (bsc#1196150).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-09"/>
	<updated date="2022-06-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196147">SUSE bug 1196147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196148">SUSE bug 1196148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196150">SUSE bug 1196150</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-25308/">CVE-2022-25308</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-25309/">CVE-2022-25309</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-25310/">CVE-2022-25310</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692490" comment="fribidi-0.19.6-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692491" comment="fribidi-devel-0.19.6-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692492" comment="libfribidi0-0.19.6-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692738" comment="libfribidi0-32bit-0.19.6-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139458" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1199287" ref_url="https://bugzilla.suse.com/1199287" source="BUGZILLA"/>
		<reference ref_id="1200106" ref_url="https://bugzilla.suse.com/1200106" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26700" ref_url="https://www.suse.com/security/cve/CVE-2022-26700/" source="CVE"/>
		<reference ref_id="CVE-2022-26709" ref_url="https://www.suse.com/security/cve/CVE-2022-26709/" source="CVE"/>
		<reference ref_id="CVE-2022-26716" ref_url="https://www.suse.com/security/cve/CVE-2022-26716/" source="CVE"/>
		<reference ref_id="CVE-2022-26717" ref_url="https://www.suse.com/security/cve/CVE-2022-26717/" source="CVE"/>
		<reference ref_id="CVE-2022-26719" ref_url="https://www.suse.com/security/cve/CVE-2022-26719/" source="CVE"/>
		<reference ref_id="CVE-2022-30293" ref_url="https://www.suse.com/security/cve/CVE-2022-30293/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011254.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.36.3 (bsc#1200106)

- CVE-2022-30293: Fixed heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer (bsc#1199287).
- CVE-2022-26700: Fixed memory corruption issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26709: Fixed use after free issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26716: Fixed use after free issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26717: Fixed memory corruption issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26719: Fixed memory corruption issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-09"/>
	<updated date="2022-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199287">SUSE bug 1199287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200106">SUSE bug 1200106</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26700/">CVE-2022-26700</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26709/">CVE-2022-26709</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26716/">CVE-2022-26716</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26717/">CVE-2022-26717</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26719/">CVE-2022-26719</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-30293/">CVE-2022-30293</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692493" comment="libjavascriptcoregtk-4_0-18-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692494" comment="libwebkit2gtk-4_0-37-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692495" comment="libwebkit2gtk3-lang-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692496" comment="typelib-1_0-JavaScriptCore-4_0-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692497" comment="typelib-1_0-WebKit2-4_0-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692498" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692499" comment="webkit2gtk-4_0-injected-bundles-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692500" comment="webkit2gtk3-devel-2.36.3-150000.3.103.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139459" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1191184" ref_url="https://bugzilla.suse.com/1191184" source="BUGZILLA"/>
		<reference ref_id="1191185" ref_url="https://bugzilla.suse.com/1191185" source="BUGZILLA"/>
		<reference ref_id="1191186" ref_url="https://bugzilla.suse.com/1191186" source="BUGZILLA"/>
		<reference ref_id="1193282" ref_url="https://bugzilla.suse.com/1193282" source="BUGZILLA"/>
		<reference ref_id="1198460" ref_url="https://bugzilla.suse.com/1198460" source="BUGZILLA"/>
		<reference ref_id="1198493" ref_url="https://bugzilla.suse.com/1198493" source="BUGZILLA"/>
		<reference ref_id="1198496" ref_url="https://bugzilla.suse.com/1198496" source="BUGZILLA"/>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3695" ref_url="https://www.suse.com/security/cve/CVE-2021-3695/" source="CVE"/>
		<reference ref_id="CVE-2021-3696" ref_url="https://www.suse.com/security/cve/CVE-2021-3696/" source="CVE"/>
		<reference ref_id="CVE-2021-3697" ref_url="https://www.suse.com/security/cve/CVE-2021-3697/" source="CVE"/>
		<reference ref_id="CVE-2022-28733" ref_url="https://www.suse.com/security/cve/CVE-2022-28733/" source="CVE"/>
		<reference ref_id="CVE-2022-28734" ref_url="https://www.suse.com/security/cve/CVE-2022-28734/" source="CVE"/>
		<reference ref_id="CVE-2022-28736" ref_url="https://www.suse.com/security/cve/CVE-2022-28736/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011260.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

Security fixes and hardenings for Boothole 3 / Boothole 2022 (bsc#1198581)

- CVE-2021-3695: Fixed that a crafted PNG grayscale image could lead to out-of-bounds write in heap (bsc#1191184)
- CVE-2021-3696: Fixed that a crafted PNG image could lead to out-of-bound write during huffman table handling (bsc#1191185)
- CVE-2021-3697: Fixed that a crafted JPEG image could lead to buffer underflow write in the heap (bsc#1191186)
- CVE-2022-28733: Fixed fragmentation math in net/ip (bsc#1198460)
- CVE-2022-28734: Fixed an out-of-bound write for split http headers (bsc#1198493)
- CVE-2022-28736: Fixed a use-after-free in chainloader command (bsc#1198496)
- Update SBAT security contact (bsc#1193282)
- Bump grub's SBAT generation to 2
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-10"/>
	<updated date="2022-06-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191184">SUSE bug 1191184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191185">SUSE bug 1191185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191186">SUSE bug 1191186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193282">SUSE bug 1193282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198460">SUSE bug 1198460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198493">SUSE bug 1198493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198496">SUSE bug 1198496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3695/">CVE-2021-3695</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3696/">CVE-2021-3696</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3697/">CVE-2021-3697</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28733/">CVE-2022-28733</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-28734/">CVE-2022-28734</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28736/">CVE-2022-28736</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692739" comment="grub2-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692740" comment="grub2-arm64-efi-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692741" comment="grub2-i386-pc-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692742" comment="grub2-snapper-plugin-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692743" comment="grub2-systemd-sleep-plugin-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692744" comment="grub2-x86_64-efi-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692745" comment="grub2-x86_64-xen-2.02-150100.123.12.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139460" version="1" class="patch">
	<metadata>
		<title>Security update for u-boot (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1200363" ref_url="https://bugzilla.suse.com/1200363" source="BUGZILLA"/>
		<reference ref_id="1200364" ref_url="https://bugzilla.suse.com/1200364" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-30552" ref_url="https://www.suse.com/security/cve/CVE-2022-30552/" source="CVE"/>
		<reference ref_id="CVE-2022-30790" ref_url="https://www.suse.com/security/cve/CVE-2022-30790/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2057-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011271.html" source="SUSE-SU"/>
		<description>
This update for u-boot fixes the following issues:

- A large buffer overflow could have lead to a denial of service in the IP Packet deframentation code.
(CVE-2022-30552, bsc#1200363)
- A Hole Descriptor Overwrite could have lead to an arbitrary out of bounds write primitive.
(CVE-2022-30790, bsc#1200364)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-13"/>
	<updated date="2022-06-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200363">SUSE bug 1200363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200364">SUSE bug 1200364</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-30552/">CVE-2022-30552</cve>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30790/">CVE-2022-30790</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692746" comment="u-boot-rpi3-2019.01-150100.7.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692747" comment="u-boot-tools-2019.01-150100.7.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139461" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1185637" ref_url="https://bugzilla.suse.com/1185637" source="BUGZILLA"/>
		<reference ref_id="1199166" ref_url="https://bugzilla.suse.com/1199166" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1292" ref_url="https://www.suse.com/security/cve/CVE-2022-1292/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011281.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-14"/>
	<updated date="2022-06-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185637">SUSE bug 1185637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199166">SUSE bug 1199166</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1292/">CVE-2022-1292</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692748" comment="libopenssl-1_1-devel-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692749" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692750" comment="libopenssl1_1-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692751" comment="libopenssl1_1-32bit-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692752" comment="libopenssl1_1-hmac-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692753" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692754" comment="openssl-1_1-1.1.0i-150100.14.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139462" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1070955" ref_url="https://bugzilla.suse.com/1070955" source="BUGZILLA"/>
		<reference ref_id="1191770" ref_url="https://bugzilla.suse.com/1191770" source="BUGZILLA"/>
		<reference ref_id="1192167" ref_url="https://bugzilla.suse.com/1192167" source="BUGZILLA"/>
		<reference ref_id="1192902" ref_url="https://bugzilla.suse.com/1192902" source="BUGZILLA"/>
		<reference ref_id="1192903" ref_url="https://bugzilla.suse.com/1192903" source="BUGZILLA"/>
		<reference ref_id="1192904" ref_url="https://bugzilla.suse.com/1192904" source="BUGZILLA"/>
		<reference ref_id="1193466" ref_url="https://bugzilla.suse.com/1193466" source="BUGZILLA"/>
		<reference ref_id="1193905" ref_url="https://bugzilla.suse.com/1193905" source="BUGZILLA"/>
		<reference ref_id="1194093" ref_url="https://bugzilla.suse.com/1194093" source="BUGZILLA"/>
		<reference ref_id="1194216" ref_url="https://bugzilla.suse.com/1194216" source="BUGZILLA"/>
		<reference ref_id="1194217" ref_url="https://bugzilla.suse.com/1194217" source="BUGZILLA"/>
		<reference ref_id="1194388" ref_url="https://bugzilla.suse.com/1194388" source="BUGZILLA"/>
		<reference ref_id="1194872" ref_url="https://bugzilla.suse.com/1194872" source="BUGZILLA"/>
		<reference ref_id="1194885" ref_url="https://bugzilla.suse.com/1194885" source="BUGZILLA"/>
		<reference ref_id="1195004" ref_url="https://bugzilla.suse.com/1195004" source="BUGZILLA"/>
		<reference ref_id="1195203" ref_url="https://bugzilla.suse.com/1195203" source="BUGZILLA"/>
		<reference ref_id="1195332" ref_url="https://bugzilla.suse.com/1195332" source="BUGZILLA"/>
		<reference ref_id="1195354" ref_url="https://bugzilla.suse.com/1195354" source="BUGZILLA"/>
		<reference ref_id="1196361" ref_url="https://bugzilla.suse.com/1196361" source="BUGZILLA"/>
		<reference ref_id="1198596" ref_url="https://bugzilla.suse.com/1198596" source="BUGZILLA"/>
		<reference ref_id="1198748" ref_url="https://bugzilla.suse.com/1198748" source="BUGZILLA"/>
		<reference ref_id="1199331" ref_url="https://bugzilla.suse.com/1199331" source="BUGZILLA"/>
		<reference ref_id="1199333" ref_url="https://bugzilla.suse.com/1199333" source="BUGZILLA"/>
		<reference ref_id="1199334" ref_url="https://bugzilla.suse.com/1199334" source="BUGZILLA"/>
		<reference ref_id="1199651" ref_url="https://bugzilla.suse.com/1199651" source="BUGZILLA"/>
		<reference ref_id="1199655" ref_url="https://bugzilla.suse.com/1199655" source="BUGZILLA"/>
		<reference ref_id="1199693" ref_url="https://bugzilla.suse.com/1199693" source="BUGZILLA"/>
		<reference ref_id="1199745" ref_url="https://bugzilla.suse.com/1199745" source="BUGZILLA"/>
		<reference ref_id="1199747" ref_url="https://bugzilla.suse.com/1199747" source="BUGZILLA"/>
		<reference ref_id="1199936" ref_url="https://bugzilla.suse.com/1199936" source="BUGZILLA"/>
		<reference ref_id="1200010" ref_url="https://bugzilla.suse.com/1200010" source="BUGZILLA"/>
		<reference ref_id="1200011" ref_url="https://bugzilla.suse.com/1200011" source="BUGZILLA"/>
		<reference ref_id="1200012" ref_url="https://bugzilla.suse.com/1200012" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17087" ref_url="https://www.suse.com/security/cve/CVE-2017-17087/" source="CVE"/>
		<reference ref_id="CVE-2021-3778" ref_url="https://www.suse.com/security/cve/CVE-2021-3778/" source="CVE"/>
		<reference ref_id="CVE-2021-3796" ref_url="https://www.suse.com/security/cve/CVE-2021-3796/" source="CVE"/>
		<reference ref_id="CVE-2021-3872" ref_url="https://www.suse.com/security/cve/CVE-2021-3872/" source="CVE"/>
		<reference ref_id="CVE-2021-3875" ref_url="https://www.suse.com/security/cve/CVE-2021-3875/" source="CVE"/>
		<reference ref_id="CVE-2021-3903" ref_url="https://www.suse.com/security/cve/CVE-2021-3903/" source="CVE"/>
		<reference ref_id="CVE-2021-3927" ref_url="https://www.suse.com/security/cve/CVE-2021-3927/" source="CVE"/>
		<reference ref_id="CVE-2021-3928" ref_url="https://www.suse.com/security/cve/CVE-2021-3928/" source="CVE"/>
		<reference ref_id="CVE-2021-3968" ref_url="https://www.suse.com/security/cve/CVE-2021-3968/" source="CVE"/>
		<reference ref_id="CVE-2021-3973" ref_url="https://www.suse.com/security/cve/CVE-2021-3973/" source="CVE"/>
		<reference ref_id="CVE-2021-3974" ref_url="https://www.suse.com/security/cve/CVE-2021-3974/" source="CVE"/>
		<reference ref_id="CVE-2021-3984" ref_url="https://www.suse.com/security/cve/CVE-2021-3984/" source="CVE"/>
		<reference ref_id="CVE-2021-4019" ref_url="https://www.suse.com/security/cve/CVE-2021-4019/" source="CVE"/>
		<reference ref_id="CVE-2021-4069" ref_url="https://www.suse.com/security/cve/CVE-2021-4069/" source="CVE"/>
		<reference ref_id="CVE-2021-4136" ref_url="https://www.suse.com/security/cve/CVE-2021-4136/" source="CVE"/>
		<reference ref_id="CVE-2021-4166" ref_url="https://www.suse.com/security/cve/CVE-2021-4166/" source="CVE"/>
		<reference ref_id="CVE-2021-4192" ref_url="https://www.suse.com/security/cve/CVE-2021-4192/" source="CVE"/>
		<reference ref_id="CVE-2021-4193" ref_url="https://www.suse.com/security/cve/CVE-2021-4193/" source="CVE"/>
		<reference ref_id="CVE-2021-46059" ref_url="https://www.suse.com/security/cve/CVE-2021-46059/" source="CVE"/>
		<reference ref_id="CVE-2022-0128" ref_url="https://www.suse.com/security/cve/CVE-2022-0128/" source="CVE"/>
		<reference ref_id="CVE-2022-0213" ref_url="https://www.suse.com/security/cve/CVE-2022-0213/" source="CVE"/>
		<reference ref_id="CVE-2022-0261" ref_url="https://www.suse.com/security/cve/CVE-2022-0261/" source="CVE"/>
		<reference ref_id="CVE-2022-0318" ref_url="https://www.suse.com/security/cve/CVE-2022-0318/" source="CVE"/>
		<reference ref_id="CVE-2022-0319" ref_url="https://www.suse.com/security/cve/CVE-2022-0319/" source="CVE"/>
		<reference ref_id="CVE-2022-0351" ref_url="https://www.suse.com/security/cve/CVE-2022-0351/" source="CVE"/>
		<reference ref_id="CVE-2022-0359" ref_url="https://www.suse.com/security/cve/CVE-2022-0359/" source="CVE"/>
		<reference ref_id="CVE-2022-0361" ref_url="https://www.suse.com/security/cve/CVE-2022-0361/" source="CVE"/>
		<reference ref_id="CVE-2022-0392" ref_url="https://www.suse.com/security/cve/CVE-2022-0392/" source="CVE"/>
		<reference ref_id="CVE-2022-0407" ref_url="https://www.suse.com/security/cve/CVE-2022-0407/" source="CVE"/>
		<reference ref_id="CVE-2022-0413" ref_url="https://www.suse.com/security/cve/CVE-2022-0413/" source="CVE"/>
		<reference ref_id="CVE-2022-0696" ref_url="https://www.suse.com/security/cve/CVE-2022-0696/" source="CVE"/>
		<reference ref_id="CVE-2022-1381" ref_url="https://www.suse.com/security/cve/CVE-2022-1381/" source="CVE"/>
		<reference ref_id="CVE-2022-1420" ref_url="https://www.suse.com/security/cve/CVE-2022-1420/" source="CVE"/>
		<reference ref_id="CVE-2022-1616" ref_url="https://www.suse.com/security/cve/CVE-2022-1616/" source="CVE"/>
		<reference ref_id="CVE-2022-1619" ref_url="https://www.suse.com/security/cve/CVE-2022-1619/" source="CVE"/>
		<reference ref_id="CVE-2022-1620" ref_url="https://www.suse.com/security/cve/CVE-2022-1620/" source="CVE"/>
		<reference ref_id="CVE-2022-1733" ref_url="https://www.suse.com/security/cve/CVE-2022-1733/" source="CVE"/>
		<reference ref_id="CVE-2022-1735" ref_url="https://www.suse.com/security/cve/CVE-2022-1735/" source="CVE"/>
		<reference ref_id="CVE-2022-1771" ref_url="https://www.suse.com/security/cve/CVE-2022-1771/" source="CVE"/>
		<reference ref_id="CVE-2022-1785" ref_url="https://www.suse.com/security/cve/CVE-2022-1785/" source="CVE"/>
		<reference ref_id="CVE-2022-1796" ref_url="https://www.suse.com/security/cve/CVE-2022-1796/" source="CVE"/>
		<reference ref_id="CVE-2022-1851" ref_url="https://www.suse.com/security/cve/CVE-2022-1851/" source="CVE"/>
		<reference ref_id="CVE-2022-1897" ref_url="https://www.suse.com/security/cve/CVE-2022-1897/" source="CVE"/>
		<reference ref_id="CVE-2022-1898" ref_url="https://www.suse.com/security/cve/CVE-2022-1898/" source="CVE"/>
		<reference ref_id="CVE-2022-1927" ref_url="https://www.suse.com/security/cve/CVE-2022-1927/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011301.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

- CVE-2017-17087: Fixed information leak via .swp files (bsc#1070955).
- CVE-2021-3875: Fixed heap-based buffer overflow (bsc#1191770).
- CVE-2021-3903: Fixed heap-based buffer overflow (bsc#1192167).
- CVE-2021-3968: Fixed heap-based buffer overflow (bsc#1192902).
- CVE-2021-3973: Fixed heap-based buffer overflow (bsc#1192903).
- CVE-2021-3974: Fixed use-after-free (bsc#1192904).
- CVE-2021-4069: Fixed use-after-free in ex_open()in src/ex_docmd.c (bsc#1193466).
- CVE-2021-4136: Fixed heap-based buffer overflow (bsc#1193905).
- CVE-2021-4166: Fixed out-of-bounds read (bsc#1194093).
- CVE-2021-4192: Fixed use-after-free (bsc#1194217).
- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).
- CVE-2022-0128: Fixed out-of-bounds read (bsc#1194388).
- CVE-2022-0213: Fixed heap-based buffer overflow (bsc#1194885).
- CVE-2022-0261: Fixed heap-based buffer overflow (bsc#1194872).
- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).
- CVE-2022-0359: Fixed heap-based buffer overflow in init_ccline() in ex_getln.c (bsc#1195203).
- CVE-2022-0392: Fixed heap-based buffer overflow (bsc#1195332).
- CVE-2022-0407: Fixed heap-based buffer overflow (bsc#1195354).
- CVE-2022-0696: Fixed NULL pointer dereference (bsc#1196361).
- CVE-2022-1381: Fixed global heap buffer overflow in skip_range (bsc#1198596).
- CVE-2022-1420: Fixed out-of-range pointer offset (bsc#1198748).
- CVE-2022-1616: Fixed use-after-free in append_command (bsc#1199331).
- CVE-2022-1619: Fixed heap-based Buffer Overflow in function cmdline_erase_chars (bsc#1199333).
- CVE-2022-1620: Fixed NULL pointer dereference in function vim_regexec_string (bsc#1199334).
- CVE-2022-1733: Fixed heap-based buffer overflow in cindent.c (bsc#1199655).
- CVE-2022-1735: Fixed heap-based buffer overflow (bsc#1199651).
- CVE-2022-1771: Fixed stack exhaustion (bsc#1199693).
- CVE-2022-1785: Fixed out-of-bounds write (bsc#1199745).
- CVE-2022-1796: Fixed use-after-free in find_pattern_in_path (bsc#1199747).
- CVE-2022-1851: Fixed out-of-bounds read (bsc#1199936).
- CVE-2022-1897: Fixed out-of-bounds write (bsc#1200010).
- CVE-2022-1898: Fixed use-after-free (bsc#1200011).
- CVE-2022-1927: Fixed buffer over-read (bsc#1200012).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-16"/>
	<updated date="2022-06-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1070955">SUSE bug 1070955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191770">SUSE bug 1191770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192167">SUSE bug 1192167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192902">SUSE bug 1192902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192903">SUSE bug 1192903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192904">SUSE bug 1192904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193466">SUSE bug 1193466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193905">SUSE bug 1193905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194093">SUSE bug 1194093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194216">SUSE bug 1194216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194217">SUSE bug 1194217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194388">SUSE bug 1194388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194872">SUSE bug 1194872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194885">SUSE bug 1194885</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195004">SUSE bug 1195004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195203">SUSE bug 1195203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195332">SUSE bug 1195332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195354">SUSE bug 1195354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196361">SUSE bug 1196361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198596">SUSE bug 1198596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198748">SUSE bug 1198748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199331">SUSE bug 1199331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199333">SUSE bug 1199333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199334">SUSE bug 1199334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199651">SUSE bug 1199651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199655">SUSE bug 1199655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199693">SUSE bug 1199693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199745">SUSE bug 1199745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199747">SUSE bug 1199747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199936">SUSE bug 1199936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200010">SUSE bug 1200010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200011">SUSE bug 1200011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200012">SUSE bug 1200012</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17087/">CVE-2017-17087</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3778/">CVE-2021-3778</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3796/">CVE-2021-3796</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3872/">CVE-2021-3872</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3875/">CVE-2021-3875</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3903/">CVE-2021-3903</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3927/">CVE-2021-3927</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3928/">CVE-2021-3928</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3968/">CVE-2021-3968</cve>
	<cve impact="critical" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3973/">CVE-2021-3973</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3974/">CVE-2021-3974</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3984/">CVE-2021-3984</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4019/">CVE-2021-4019</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4069/">CVE-2021-4069</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4136/">CVE-2021-4136</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4166/">CVE-2021-4166</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4192/">CVE-2021-4192</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4193/">CVE-2021-4193</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46059/">CVE-2021-46059</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0128/">CVE-2022-0128</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0213/">CVE-2022-0213</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0261/">CVE-2022-0261</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0318/">CVE-2022-0318</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0319/">CVE-2022-0319</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0351/">CVE-2022-0351</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-0359/">CVE-2022-0359</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-0361/">CVE-2022-0361</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-0392/">CVE-2022-0392</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0407/">CVE-2022-0407</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0413/">CVE-2022-0413</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0696/">CVE-2022-0696</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1381/">CVE-2022-1381</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1420/">CVE-2022-1420</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1616/">CVE-2022-1616</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1619/">CVE-2022-1619</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1620/">CVE-2022-1620</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1733/">CVE-2022-1733</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1735/">CVE-2022-1735</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1771/">CVE-2022-1771</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1785/">CVE-2022-1785</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1796/">CVE-2022-1796</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1851/">CVE-2022-1851</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1897/">CVE-2022-1897</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1898/">CVE-2022-1898</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-1927/">CVE-2022-1927</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692514" comment="gvim-8.2.5038-150000.5.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692515" comment="vim-8.2.5038-150000.5.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684301" comment="vim-data-8.2.5038-150000.5.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684302" comment="vim-data-common-8.2.5038-150000.5.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139463" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198603" ref_url="https://bugzilla.suse.com/1198603" source="BUGZILLA"/>
		<reference ref_id="1198604" ref_url="https://bugzilla.suse.com/1198604" source="BUGZILLA"/>
		<reference ref_id="1198606" ref_url="https://bugzilla.suse.com/1198606" source="BUGZILLA"/>
		<reference ref_id="1198607" ref_url="https://bugzilla.suse.com/1198607" source="BUGZILLA"/>
		<reference ref_id="1198610" ref_url="https://bugzilla.suse.com/1198610" source="BUGZILLA"/>
		<reference ref_id="1198611" ref_url="https://bugzilla.suse.com/1198611" source="BUGZILLA"/>
		<reference ref_id="1198612" ref_url="https://bugzilla.suse.com/1198612" source="BUGZILLA"/>
		<reference ref_id="1198613" ref_url="https://bugzilla.suse.com/1198613" source="BUGZILLA"/>
		<reference ref_id="1198629" ref_url="https://bugzilla.suse.com/1198629" source="BUGZILLA"/>
		<reference ref_id="1199928" ref_url="https://bugzilla.suse.com/1199928" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46669" ref_url="https://www.suse.com/security/cve/CVE-2021-46669/" source="CVE"/>
		<reference ref_id="CVE-2022-21427" ref_url="https://www.suse.com/security/cve/CVE-2022-21427/" source="CVE"/>
		<reference ref_id="CVE-2022-27377" ref_url="https://www.suse.com/security/cve/CVE-2022-27377/" source="CVE"/>
		<reference ref_id="CVE-2022-27378" ref_url="https://www.suse.com/security/cve/CVE-2022-27378/" source="CVE"/>
		<reference ref_id="CVE-2022-27380" ref_url="https://www.suse.com/security/cve/CVE-2022-27380/" source="CVE"/>
		<reference ref_id="CVE-2022-27381" ref_url="https://www.suse.com/security/cve/CVE-2022-27381/" source="CVE"/>
		<reference ref_id="CVE-2022-27383" ref_url="https://www.suse.com/security/cve/CVE-2022-27383/" source="CVE"/>
		<reference ref_id="CVE-2022-27384" ref_url="https://www.suse.com/security/cve/CVE-2022-27384/" source="CVE"/>
		<reference ref_id="CVE-2022-27386" ref_url="https://www.suse.com/security/cve/CVE-2022-27386/" source="CVE"/>
		<reference ref_id="CVE-2022-27387" ref_url="https://www.suse.com/security/cve/CVE-2022-27387/" source="CVE"/>
		<reference ref_id="CVE-2022-27445" ref_url="https://www.suse.com/security/cve/CVE-2022-27445/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011306.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

- CVE-2021-46669 (bsc#1199928)
- CVE-2022-21427 (bsc#1199928)
- CVE-2022-27377 (bsc#1198603)
- CVE-2022-27378 (bsc#1198604)
- CVE-2022-27380 (bsc#1198606)
- CVE-2022-27381 (bsc#1198607)
- CVE-2022-27383 (bsc#1198610)
- CVE-2022-27384 (bsc#1198611)
- CVE-2022-27386 (bsc#1198612)
- CVE-2022-27387 (bsc#1198613)
- CVE-2022-27445 (bsc#1198629)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-16"/>
	<updated date="2022-06-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198603">SUSE bug 1198603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198604">SUSE bug 1198604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198606">SUSE bug 1198606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198607">SUSE bug 1198607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198610">SUSE bug 1198610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198611">SUSE bug 1198611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198612">SUSE bug 1198612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198613">SUSE bug 1198613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198629">SUSE bug 1198629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199928">SUSE bug 1199928</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46669/">CVE-2021-46669</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21427/">CVE-2022-21427</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27377/">CVE-2022-27377</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27378/">CVE-2022-27378</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27380/">CVE-2022-27380</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27381/">CVE-2022-27381</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27383/">CVE-2022-27383</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27384/">CVE-2022-27384</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27386/">CVE-2022-27386</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-27387/">CVE-2022-27387</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27445/">CVE-2022-27445</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692526" comment="libmysqld-devel-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692527" comment="libmysqld19-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692528" comment="mariadb-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692529" comment="mariadb-client-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692530" comment="mariadb-errormessages-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692531" comment="mariadb-tools-10.2.44-150000.3.54.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139464" version="1" class="patch">
	<metadata>
		<title>Security update for strongswan (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194471" ref_url="https://bugzilla.suse.com/1194471" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-45079" ref_url="https://www.suse.com/security/cve/CVE-2021-45079/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010126.html" source="SUSE-SU"/>
		<description>
This update for strongswan fixes the following issues:

- CVE-2021-45079: Fixed authentication bypass in EAP authentication. (bsc#1194471)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-27"/>
	<updated date="2022-01-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194471">SUSE bug 1194471</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-45079/">CVE-2021-45079</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664859" comment="strongswan-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664860" comment="strongswan-doc-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664861" comment="strongswan-hmac-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664862" comment="strongswan-ipsec-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664863" comment="strongswan-libs0-5.8.2-4.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139465" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1028340" ref_url="https://bugzilla.suse.com/1028340" source="BUGZILLA"/>
		<reference ref_id="1055710" ref_url="https://bugzilla.suse.com/1055710" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1084513" ref_url="https://bugzilla.suse.com/1084513" source="BUGZILLA"/>
		<reference ref_id="1087082" ref_url="https://bugzilla.suse.com/1087082" source="BUGZILLA"/>
		<reference ref_id="1114648" ref_url="https://bugzilla.suse.com/1114648" source="BUGZILLA"/>
		<reference ref_id="1158266" ref_url="https://bugzilla.suse.com/1158266" source="BUGZILLA"/>
		<reference ref_id="1172456" ref_url="https://bugzilla.suse.com/1172456" source="BUGZILLA"/>
		<reference ref_id="1177282" ref_url="https://bugzilla.suse.com/1177282" source="BUGZILLA"/>
		<reference ref_id="1182171" ref_url="https://bugzilla.suse.com/1182171" source="BUGZILLA"/>
		<reference ref_id="1183723" ref_url="https://bugzilla.suse.com/1183723" source="BUGZILLA"/>
		<reference ref_id="1187055" ref_url="https://bugzilla.suse.com/1187055" source="BUGZILLA"/>
		<reference ref_id="1191647" ref_url="https://bugzilla.suse.com/1191647" source="BUGZILLA"/>
		<reference ref_id="1191958" ref_url="https://bugzilla.suse.com/1191958" source="BUGZILLA"/>
		<reference ref_id="1195065" ref_url="https://bugzilla.suse.com/1195065" source="BUGZILLA"/>
		<reference ref_id="1195651" ref_url="https://bugzilla.suse.com/1195651" source="BUGZILLA"/>
		<reference ref_id="1196018" ref_url="https://bugzilla.suse.com/1196018" source="BUGZILLA"/>
		<reference ref_id="1196367" ref_url="https://bugzilla.suse.com/1196367" source="BUGZILLA"/>
		<reference ref_id="1196426" ref_url="https://bugzilla.suse.com/1196426" source="BUGZILLA"/>
		<reference ref_id="1196999" ref_url="https://bugzilla.suse.com/1196999" source="BUGZILLA"/>
		<reference ref_id="1197219" ref_url="https://bugzilla.suse.com/1197219" source="BUGZILLA"/>
		<reference ref_id="1197343" ref_url="https://bugzilla.suse.com/1197343" source="BUGZILLA"/>
		<reference ref_id="1197663" ref_url="https://bugzilla.suse.com/1197663" source="BUGZILLA"/>
		<reference ref_id="1198400" ref_url="https://bugzilla.suse.com/1198400" source="BUGZILLA"/>
		<reference ref_id="1198516" ref_url="https://bugzilla.suse.com/1198516" source="BUGZILLA"/>
		<reference ref_id="1198577" ref_url="https://bugzilla.suse.com/1198577" source="BUGZILLA"/>
		<reference ref_id="1198660" ref_url="https://bugzilla.suse.com/1198660" source="BUGZILLA"/>
		<reference ref_id="1198687" ref_url="https://bugzilla.suse.com/1198687" source="BUGZILLA"/>
		<reference ref_id="1198742" ref_url="https://bugzilla.suse.com/1198742" source="BUGZILLA"/>
		<reference ref_id="1198777" ref_url="https://bugzilla.suse.com/1198777" source="BUGZILLA"/>
		<reference ref_id="1198825" ref_url="https://bugzilla.suse.com/1198825" source="BUGZILLA"/>
		<reference ref_id="1199012" ref_url="https://bugzilla.suse.com/1199012" source="BUGZILLA"/>
		<reference ref_id="1199063" ref_url="https://bugzilla.suse.com/1199063" source="BUGZILLA"/>
		<reference ref_id="1199314" ref_url="https://bugzilla.suse.com/1199314" source="BUGZILLA"/>
		<reference ref_id="1199399" ref_url="https://bugzilla.suse.com/1199399" source="BUGZILLA"/>
		<reference ref_id="1199426" ref_url="https://bugzilla.suse.com/1199426" source="BUGZILLA"/>
		<reference ref_id="1199505" ref_url="https://bugzilla.suse.com/1199505" source="BUGZILLA"/>
		<reference ref_id="1199507" ref_url="https://bugzilla.suse.com/1199507" source="BUGZILLA"/>
		<reference ref_id="1199605" ref_url="https://bugzilla.suse.com/1199605" source="BUGZILLA"/>
		<reference ref_id="1199650" ref_url="https://bugzilla.suse.com/1199650" source="BUGZILLA"/>
		<reference ref_id="1200143" ref_url="https://bugzilla.suse.com/1200143" source="BUGZILLA"/>
		<reference ref_id="1200144" ref_url="https://bugzilla.suse.com/1200144" source="BUGZILLA"/>
		<reference ref_id="1200249" ref_url="https://bugzilla.suse.com/1200249" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-13695" ref_url="https://www.suse.com/security/cve/CVE-2017-13695/" source="CVE"/>
		<reference ref_id="CVE-2018-7755" ref_url="https://www.suse.com/security/cve/CVE-2018-7755/" source="CVE"/>
		<reference ref_id="CVE-2019-19377" ref_url="https://www.suse.com/security/cve/CVE-2019-19377/" source="CVE"/>
		<reference ref_id="CVE-2019-20811" ref_url="https://www.suse.com/security/cve/CVE-2019-20811/" source="CVE"/>
		<reference ref_id="CVE-2020-26541" ref_url="https://www.suse.com/security/cve/CVE-2020-26541/" source="CVE"/>
		<reference ref_id="CVE-2021-20292" ref_url="https://www.suse.com/security/cve/CVE-2021-20292/" source="CVE"/>
		<reference ref_id="CVE-2021-20321" ref_url="https://www.suse.com/security/cve/CVE-2021-20321/" source="CVE"/>
		<reference ref_id="CVE-2021-33061" ref_url="https://www.suse.com/security/cve/CVE-2021-33061/" source="CVE"/>
		<reference ref_id="CVE-2021-38208" ref_url="https://www.suse.com/security/cve/CVE-2021-38208/" source="CVE"/>
		<reference ref_id="CVE-2021-39711" ref_url="https://www.suse.com/security/cve/CVE-2021-39711/" source="CVE"/>
		<reference ref_id="CVE-2021-43389" ref_url="https://www.suse.com/security/cve/CVE-2021-43389/" source="CVE"/>
		<reference ref_id="CVE-2022-1011" ref_url="https://www.suse.com/security/cve/CVE-2022-1011/" source="CVE"/>
		<reference ref_id="CVE-2022-1184" ref_url="https://www.suse.com/security/cve/CVE-2022-1184/" source="CVE"/>
		<reference ref_id="CVE-2022-1353" ref_url="https://www.suse.com/security/cve/CVE-2022-1353/" source="CVE"/>
		<reference ref_id="CVE-2022-1419" ref_url="https://www.suse.com/security/cve/CVE-2022-1419/" source="CVE"/>
		<reference ref_id="CVE-2022-1516" ref_url="https://www.suse.com/security/cve/CVE-2022-1516/" source="CVE"/>
		<reference ref_id="CVE-2022-1652" ref_url="https://www.suse.com/security/cve/CVE-2022-1652/" source="CVE"/>
		<reference ref_id="CVE-2022-1729" ref_url="https://www.suse.com/security/cve/CVE-2022-1729/" source="CVE"/>
		<reference ref_id="CVE-2022-1734" ref_url="https://www.suse.com/security/cve/CVE-2022-1734/" source="CVE"/>
		<reference ref_id="CVE-2022-1974" ref_url="https://www.suse.com/security/cve/CVE-2022-1974/" source="CVE"/>
		<reference ref_id="CVE-2022-1975" ref_url="https://www.suse.com/security/cve/CVE-2022-1975/" source="CVE"/>
		<reference ref_id="CVE-2022-21123" ref_url="https://www.suse.com/security/cve/CVE-2022-21123/" source="CVE"/>
		<reference ref_id="CVE-2022-21125" ref_url="https://www.suse.com/security/cve/CVE-2022-21125/" source="CVE"/>
		<reference ref_id="CVE-2022-21127" ref_url="https://www.suse.com/security/cve/CVE-2022-21127/" source="CVE"/>
		<reference ref_id="CVE-2022-21166" ref_url="https://www.suse.com/security/cve/CVE-2022-21166/" source="CVE"/>
		<reference ref_id="CVE-2022-21180" ref_url="https://www.suse.com/security/cve/CVE-2022-21180/" source="CVE"/>
		<reference ref_id="CVE-2022-21499" ref_url="https://www.suse.com/security/cve/CVE-2022-21499/" source="CVE"/>
		<reference ref_id="CVE-2022-22942" ref_url="https://www.suse.com/security/cve/CVE-2022-22942/" source="CVE"/>
		<reference ref_id="CVE-2022-28748" ref_url="https://www.suse.com/security/cve/CVE-2022-28748/" source="CVE"/>
		<reference ref_id="CVE-2022-30594" ref_url="https://www.suse.com/security/cve/CVE-2022-30594/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011310.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated.

The following security bugs were fixed:

- CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image. (bnc#1158266)
- CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a corrupted image. (bsc#1198577)
- CVE-2017-13695: Fixed a bug that caused a stack dump allowing local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted ACPI table. (bnc#1055710)
- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
- CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063).
- CVE-2021-39711: In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1197219).
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505).
- CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters that may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1196426).
- CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012).
- CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system (bnc#1191647).
- CVE-2019-20811: Fixed issue in rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, where a reference count is mishandled (bnc#1172456).
- CVE-2022-28748: Fixed memory lead over the network by ax88179_178a devices (bsc#1196018).
- CVE-2018-7755: Fixed an issue in the fd_locked_ioctl function in drivers/block/floppy.c. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR (bnc#1084513).
- CVE-2022-22942: Fixed stale file descriptors on failed usercopy (bsc#1195065).
- CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
- CVE-2021-43389: Fixed an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).
- CVE-2021-38208: Fixed a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call (bnc#1187055).
- CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c (bnc#1198516).
- CVE-2021-20292: Fixed object validation prior to performing operations on the object in nouveau_sgdma_create_ttm in Nouveau DRM subsystem (bnc#1183723).
- CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bnc#1197343)
- CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space. (bsc#1200144).
- CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism. (bnc#1177282)
- CVE-2022-1975: Fixed a bug that allows an attacker to crash the linux kernel by simulating nfc device from user-space. (bsc#1200143)
- CVE-2022-21499: Reinforce the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb. (bsc#1199426)
- CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605).

The following non-security bugs were fixed:

- btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (bsc#1199399).
- btrfs: tree-checker: fix incorrect printk format (bsc#1200249).
- net: ena: A typo fix in the file ena_com.h (bsc#1198777).
- net: ena: Add capabilities field with support for ENI stats capability (bsc#1198777).
- net: ena: Add debug prints for invalid req_id resets (bsc#1198777).
- net: ena: add device distinct log prefix to files (bsc#1198777).
- net: ena: add jiffies of last napi call to stats (bsc#1198777).
- net: ena: aggregate doorbell common operations into a function (bsc#1198777).
- net: ena: aggregate stats increase into a function (bsc#1198777).
- net: ena: Change ENI stats support check to use capabilities field (bsc#1198777).
- net: ena: Change return value of ena_calc_io_queue_size() to void (bsc#1198777).
- net: ena: Change the name of bad_csum variable (bsc#1198777).
- net: ena: Extract recurring driver reset code into a function (bsc#1198777).
- net: ena: fix coding style nits (bsc#1198777).
- net: ena: fix DMA mapping function issues in XDP (bsc#1198777).
- net: ena: Fix error handling when calculating max IO queues number (bsc#1198777).
- net: ena: fix inaccurate print type (bsc#1198777).
- net: ena: Fix undefined state when tx request id is out of bounds (bsc#1198777).
- net: ena: Fix wrong rx request id by resetting device (bsc#1198777).
- net: ena: Improve error logging in driver (bsc#1198777).
- net: ena: introduce ndo_xdp_xmit() function for XDP_REDIRECT (bsc#1198777).
- net: ena: introduce XDP redirect implementation (bsc#1198777).
- net: ena: make symbol 'ena_alloc_map_page' static (bsc#1198777).
- net: ena: Move reset completion print to the reset function (bsc#1198777).
- net: ena: optimize data access in fast-path code (bsc#1198777).
- net: ena: re-organize code to improve readability (bsc#1198777).
- net: ena: Remove ena_calc_queue_size_ctx struct (bsc#1198777).
- net: ena: remove extra words from comments (bsc#1198777).
- net: ena: Remove module param and change message severity (bsc#1198777).
- net: ena: Remove rcu_read_lock() around XDP program invocation (bsc#1198777).
- net: ena: Remove redundant return code check (bsc#1198777).
- net: ena: Remove unused code (bsc#1198777).
- net: ena: store values in their appropriate variables types (bsc#1198777).
- net: ena: Update XDP verdict upon failure (bsc#1198777).
- net: ena: use build_skb() in RX path (bsc#1198777).
- net: ena: use constant value for net_device allocation (bsc#1198777).
- net: ena: Use dev_alloc() in RX buffer allocation (bsc#1198777).
- net: ena: Use pci_sriov_configure_simple() to enable VFs (bsc#1198777).
- net: ena: use xdp_frame in XDP TX flow (bsc#1198777).
- net: ena: use xdp_return_frame() to free xdp frames (bsc#1198777).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Remove unnecessary check of cqe_type in mana_process_rx_cqe() (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Use struct_size() helper in mana_gd_create_dma_region() (bsc#1195651).
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (bsc#1199314).
- powerpc/64: Fix kernel stack 16-byte alignment (bsc#1196999 ltc#196609S git-fixes).
- powerpc/64: Interrupts save PPR on stack rather than thread_struct (bsc#1196999 ltc#196609).
- powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc#1182171 ltc#190900 bsc#1198660 ltc#197803).
- powerpc/pseries: Fix use after free in remove_phb_dynamic() (bsc#1065729 bsc#1198660 ltc#197803).
- scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() (bsc#1028340 bsc#1198825).
- SUNRPC: change locking for xs_swap_enable/disable (bsc#1196367).
- x86/pm: Save the MSR validity status at context setup (bsc#1114648).
- x86/speculation: Restore speculation related MSRs during S3 resume (bsc#1114648).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-17"/>
	<updated date="2022-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1028340">SUSE bug 1028340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055710">SUSE bug 1055710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084513">SUSE bug 1084513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114648">SUSE bug 1114648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158266">SUSE bug 1158266</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172456">SUSE bug 1172456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177282">SUSE bug 1177282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182171">SUSE bug 1182171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183723">SUSE bug 1183723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187055">SUSE bug 1187055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191647">SUSE bug 1191647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191958">SUSE bug 1191958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195065">SUSE bug 1195065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195651">SUSE bug 1195651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196018">SUSE bug 1196018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196367">SUSE bug 1196367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196426">SUSE bug 1196426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196999">SUSE bug 1196999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197219">SUSE bug 1197219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197343">SUSE bug 1197343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197663">SUSE bug 1197663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198400">SUSE bug 1198400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198516">SUSE bug 1198516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198577">SUSE bug 1198577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198660">SUSE bug 1198660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198687">SUSE bug 1198687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198742">SUSE bug 1198742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198777">SUSE bug 1198777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198825">SUSE bug 1198825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199012">SUSE bug 1199012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199063">SUSE bug 1199063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199314">SUSE bug 1199314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199399">SUSE bug 1199399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199426">SUSE bug 1199426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199505">SUSE bug 1199505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199507">SUSE bug 1199507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199605">SUSE bug 1199605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199650">SUSE bug 1199650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200143">SUSE bug 1200143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200144">SUSE bug 1200144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200249">SUSE bug 1200249</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-13695/">CVE-2017-13695</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-7755/">CVE-2018-7755</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19377/">CVE-2019-19377</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20811/">CVE-2019-20811</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26541/">CVE-2020-26541</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20292/">CVE-2021-20292</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20321/">CVE-2021-20321</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33061/">CVE-2021-33061</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38208/">CVE-2021-38208</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39711/">CVE-2021-39711</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43389/">CVE-2021-43389</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1011/">CVE-2022-1011</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1184/">CVE-2022-1184</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1353/">CVE-2022-1353</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1419/">CVE-2022-1419</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1516/">CVE-2022-1516</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1652/">CVE-2022-1652</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1729/">CVE-2022-1729</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1734/">CVE-2022-1734</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1974/">CVE-2022-1974</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1975/">CVE-2022-1975</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21123/">CVE-2022-21123</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21125/">CVE-2022-21125</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21127/">CVE-2022-21127</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21166/">CVE-2022-21166</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21180/">CVE-2022-21180</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-21499/">CVE-2022-21499</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22942/">CVE-2022-22942</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28748/">CVE-2022-28748</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30594/">CVE-2022-30594</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692755" comment="kernel-default-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692756" comment="kernel-default-base-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692757" comment="kernel-default-devel-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692758" comment="kernel-devel-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692759" comment="kernel-docs-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692760" comment="kernel-macros-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692761" comment="kernel-obs-build-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692762" comment="kernel-source-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692763" comment="kernel-syms-4.12.14-150100.197.114.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139466" version="1" class="patch">
	<metadata>
		<title>Security update for log4j (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194842" ref_url="https://bugzilla.suse.com/1194842" source="BUGZILLA"/>
		<reference ref_id="1194843" ref_url="https://bugzilla.suse.com/1194843" source="BUGZILLA"/>
		<reference ref_id="1194844" ref_url="https://bugzilla.suse.com/1194844" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23302" ref_url="https://www.suse.com/security/cve/CVE-2022-23302/" source="CVE"/>
		<reference ref_id="CVE-2022-23305" ref_url="https://www.suse.com/security/cve/CVE-2022-23305/" source="CVE"/>
		<reference ref_id="CVE-2022-23307" ref_url="https://www.suse.com/security/cve/CVE-2022-23307/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010127.html" source="SUSE-SU"/>
		<description>
This update for log4j fixes the following issues:

- CVE-2022-23307: Fixed deserialization flaw in the chainsaw component of log4j leading to malicious code execution. (bsc#1194844)
- CVE-2022-23305: Fixed SQL injection when application is configured to use JDBCAppender. (bsc#1194843)
- CVE-2022-23302: Fixed remote code execution when application is configured to use JMSSink. (bsc#1194842)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-27"/>
	<updated date="2022-01-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194842">SUSE bug 1194842</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194843">SUSE bug 1194843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194844">SUSE bug 1194844</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23302/">CVE-2022-23302</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23305/">CVE-2022-23305</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23307/">CVE-2022-23307</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664552" comment="log4j-1.2.17-5.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664553" comment="log4j-manual-1.2.17-5.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139467" version="1" class="patch">
	<metadata>
		<title>Security update for node_exporter (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1190535" ref_url="https://bugzilla.suse.com/1190535" source="BUGZILLA"/>
		<reference ref_id="1196338" ref_url="https://bugzilla.suse.com/1196338" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21698" ref_url="https://www.suse.com/security/cve/CVE-2022-21698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011315.html" source="SUSE-SU"/>
		<description>
This security update for golang-github-prometheus-node_exporter provides:

Update golang-github-prometheus-node_exporter from version 1.1.2 to version 1.3.0 (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239)

- CVE-2022-21698: Denial of service using InstrumentHandlerCounter
- Update vendor tarball with prometheus/client_golang 1.11.1
- Update to 1.3.0
  * [CHANGE] Add path label to rapl collector #2146
  * [CHANGE] Exclude filesystems under /run/credentials #2157
  * [CHANGE] Add TCPTimeouts to netstat default filter #2189
  * [FEATURE] Add lnstat collector for metrics from /proc/net/stat/ #1771
  * [FEATURE] Add darwin powersupply collector #1777
  * [FEATURE] Add support for monitoring GPUs on Linux #1998
  * [FEATURE] Add Darwin thermal collector #2032
  * [FEATURE] Add os release collector #2094
  * [FEATURE] Add netdev.address-info collector #2105
  * [FEATURE] Add clocksource metrics to time collector #2197
  * [ENHANCEMENT] Support glob textfile collector directories #1985
  * [ENHANCEMENT] ethtool: Expose node_ethtool_info metric #2080
  * [ENHANCEMENT] Use include/exclude flags for ethtool filtering #2165
  * [ENHANCEMENT] Add flag to disable guest CPU metrics #2123
  * [ENHANCEMENT] Add DMI collector #2131
  * [ENHANCEMENT] Add threads metrics to processes collector #2164
  * [ENHANCMMENT] Reduce timer GC delays in the Linux filesystem collector #2169
  * [ENHANCMMENT] Add TCPTimeouts to netstat default filter #2189
  * [ENHANCMMENT] Use SysctlTimeval for boottime collector on BSD #2208
  * [BUGFIX] ethtool: Sanitize metric names #2093
  * [BUGFIX] Fix ethtool collector for multiple interfaces #2126
  * [BUGFIX] Fix possible panic on macOS #2133
  * [BUGFIX] Collect flag_info and bug_info only for one core #2156
  * [BUGFIX] Prevent duplicate ethtool metric names #2187
- Update to 1.2.2
  * Bug fixes
     Fix processes collector long int parsing #2112
- Update to 1.2.1
  * Removed
     Remove obsolete capture permission denied error fix already included upstream
  * Bug fixes
     Fix zoneinfo parsing prometheus/procfs#386
     Fix nvme collector log noise #2091
     Fix rapl collector log noise #2092
- Update to 1.2.0
  * Changes
     Rename filesystem collector flags to match other collectors #2012
     Make node_exporter print usage to STDOUT #203
  * Features
     Add conntrack statistics metrics #1155
     Add ethtool stats collector #1832
     Add flag to ignore network speed if it is unknown #1989
     Add tapestats collector for Linux #2044
     Add nvme collector #2062
  * Enhancements
     Add ErrorLog plumbing to promhttp #1887
     Add more Infiniband counters #2019
     netclass: retrieve interface names and filter before parsing #2033
     Add time zone offset metric #2060
  * Bug fixes
     Handle errors from disabled PSI subsystem #1983
     Fix panic when using backwards compatible flags #2000
     Fix wrong value for OpenBSD memory buffer cache #2015
     Only initiate collectors once #2048
     Handle small backwards jumps in CPU idle #2067
- Capture permission denied error for 'energy_uj' file (bsc#1190535)
  		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-20"/>
	<updated date="2022-06-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190535">SUSE bug 1190535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196338">SUSE bug 1196338</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21698/">CVE-2022-21698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683011" comment="golang-github-prometheus-node_exporter-1.3.0-150100.3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139468" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1197423" ref_url="https://bugzilla.suse.com/1197423" source="BUGZILLA"/>
		<reference ref_id="1197425" ref_url="https://bugzilla.suse.com/1197425" source="BUGZILLA"/>
		<reference ref_id="1197426" ref_url="https://bugzilla.suse.com/1197426" source="BUGZILLA"/>
		<reference ref_id="1199965" ref_url="https://bugzilla.suse.com/1199965" source="BUGZILLA"/>
		<reference ref_id="1199966" ref_url="https://bugzilla.suse.com/1199966" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26356" ref_url="https://www.suse.com/security/cve/CVE-2022-26356/" source="CVE"/>
		<reference ref_id="CVE-2022-26357" ref_url="https://www.suse.com/security/cve/CVE-2022-26357/" source="CVE"/>
		<reference ref_id="CVE-2022-26358" ref_url="https://www.suse.com/security/cve/CVE-2022-26358/" source="CVE"/>
		<reference ref_id="CVE-2022-26359" ref_url="https://www.suse.com/security/cve/CVE-2022-26359/" source="CVE"/>
		<reference ref_id="CVE-2022-26360" ref_url="https://www.suse.com/security/cve/CVE-2022-26360/" source="CVE"/>
		<reference ref_id="CVE-2022-26361" ref_url="https://www.suse.com/security/cve/CVE-2022-26361/" source="CVE"/>
		<reference ref_id="CVE-2022-26362" ref_url="https://www.suse.com/security/cve/CVE-2022-26362/" source="CVE"/>
		<reference ref_id="CVE-2022-26363" ref_url="https://www.suse.com/security/cve/CVE-2022-26363/" source="CVE"/>
		<reference ref_id="CVE-2022-26364" ref_url="https://www.suse.com/security/cve/CVE-2022-26364/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011336.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that
  could cause a denial of service in the host (bsc#1197423).
- CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts
  using VT-d IOMMU hardware, which could lead to a denial of service in the host
  (bsc#1197425).
- CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory
  corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be
  leveraged by an attacker to cause a denial of service in the host (bsc#1197426).
- CVE-2022-26362: Fixed race condition in typeref acquisition (bsc#1199965)
- CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (bsc#1199966)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-23"/>
	<updated date="2022-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197423">SUSE bug 1197423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197425">SUSE bug 1197425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197426">SUSE bug 1197426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199965">SUSE bug 1199965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199966">SUSE bug 1199966</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26356/">CVE-2022-26356</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26357/">CVE-2022-26357</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26358/">CVE-2022-26358</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26359/">CVE-2022-26359</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26360/">CVE-2022-26360</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26361/">CVE-2022-26361</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26362/">CVE-2022-26362</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26363/">CVE-2022-26363</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26364/">CVE-2022-26364</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692764" comment="xen-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692765" comment="xen-devel-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692766" comment="xen-libs-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692767" comment="xen-tools-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692768" comment="xen-tools-domU-4.12.4_24-150100.3.72.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139469" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1200566" ref_url="https://bugzilla.suse.com/1200566" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22967" ref_url="https://www.suse.com/security/cve/CVE-2022-22967/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011334.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could be used to bypass authentication when using PAM (bsc#1200566)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-23"/>
	<updated date="2022-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200566">SUSE bug 1200566</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22967/">CVE-2022-22967</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692769" comment="python3-salt-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692770" comment="salt-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692771" comment="salt-api-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692772" comment="salt-bash-completion-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692773" comment="salt-cloud-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692774" comment="salt-doc-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692775" comment="salt-fish-completion-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692776" comment="salt-master-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692777" comment="salt-minion-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692778" comment="salt-proxy-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692779" comment="salt-ssh-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692780" comment="salt-standalone-formulas-configuration-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692781" comment="salt-syndic-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692782" comment="salt-transactional-update-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692783" comment="salt-zsh-completion-3004-150100.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139470" version="1" class="patch">
	<metadata>
		<title>Security update for 389-ds (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188455" ref_url="https://bugzilla.suse.com/1188455" source="BUGZILLA"/>
		<reference ref_id="1195324" ref_url="https://bugzilla.suse.com/1195324" source="BUGZILLA"/>
		<reference ref_id="1197275" ref_url="https://bugzilla.suse.com/1197275" source="BUGZILLA"/>
		<reference ref_id="1197345" ref_url="https://bugzilla.suse.com/1197345" source="BUGZILLA"/>
		<reference ref_id="1199889" ref_url="https://bugzilla.suse.com/1199889" source="BUGZILLA"/>
		<reference ref_id="1200175" ref_url="https://bugzilla.suse.com/1200175" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3652" ref_url="https://www.suse.com/security/cve/CVE-2021-3652/" source="CVE"/>
		<reference ref_id="CVE-2021-4091" ref_url="https://www.suse.com/security/cve/CVE-2021-4091/" source="CVE"/>
		<reference ref_id="CVE-2022-0918" ref_url="https://www.suse.com/security/cve/CVE-2022-0918/" source="CVE"/>
		<reference ref_id="CVE-2022-0996" ref_url="https://www.suse.com/security/cve/CVE-2022-0996/" source="CVE"/>
		<reference ref_id="CVE-2022-1949" ref_url="https://www.suse.com/security/cve/CVE-2022-1949/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011338.html" source="SUSE-SU"/>
		<description>
This update for 389-ds fixes the following issues:

- CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).
- CVE-2022-0918: Fixed denial of service issue via crafted messages (bsc#1197275).
- CVE-2022-0996: Fixed mishandling of password expiry (bsc#1197345).
- CVE-2021-4091: Fixed double free in psearch (bsc#1195324).
- CVE-2021-3652: Fixed disabled accounts may be able to bind with crypt passwords (bsc#1188455). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-23"/>
	<updated date="2022-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188455">SUSE bug 1188455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195324">SUSE bug 1195324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197275">SUSE bug 1197275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197345">SUSE bug 1197345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199889">SUSE bug 1199889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200175">SUSE bug 1200175</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3652/">CVE-2021-3652</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4091/">CVE-2021-4091</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0918/">CVE-2022-0918</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0996/">CVE-2022-0996</cve>
	<cve impact="important" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-1949/">CVE-2022-1949</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692784" comment="389-ds-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692785" comment="389-ds-devel-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692786" comment="389-ds-snmp-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692787" comment="lib389-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692788" comment="libsvrcore0-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139471" version="1" class="patch">
	<metadata>
		<title>Security update for openssl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1200550" ref_url="https://bugzilla.suse.com/1200550" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2068" ref_url="https://www.suse.com/security/cve/CVE-2022-2068/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011349.html" source="SUSE-SU"/>
		<description>
This update for openssl fixes the following issues:

- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-24"/>
	<updated date="2022-06-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1200550">SUSE bug 1200550</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2068/">CVE-2022-2068</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692789" comment="libopenssl-1_1-devel-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692790" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692791" comment="libopenssl1_1-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692792" comment="libopenssl1_1-32bit-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692793" comment="libopenssl1_1-hmac-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692794" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692795" comment="openssl-1_1-1.1.0i-150100.14.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139472" version="1" class="patch">
	<metadata>
		<title>Security update for liblouis (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1130813" ref_url="https://bugzilla.suse.com/1130813" source="BUGZILLA"/>
		<reference ref_id="1197085" ref_url="https://bugzilla.suse.com/1197085" source="BUGZILLA"/>
		<reference ref_id="1200120" ref_url="https://bugzilla.suse.com/1200120" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26981" ref_url="https://www.suse.com/security/cve/CVE-2022-26981/" source="CVE"/>
		<reference ref_id="CVE-2022-31783" ref_url="https://www.suse.com/security/cve/CVE-2022-31783/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011386.html" source="SUSE-SU"/>
		<description>
This update for liblouis fixes the following issues:

- CVE-2022-26981: fix buffer overrun in compilePassOpcode (bsc#1197085).
- CVE-2022-31783: prevent an invalid memory write in compileRule (bsc#1200120).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-04"/>
	<updated date="2022-07-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1130813">SUSE bug 1130813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197085">SUSE bug 1197085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200120">SUSE bug 1200120</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26981/">CVE-2022-26981</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-31783/">CVE-2022-31783</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692549" comment="liblouis-data-3.3.0-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692550" comment="liblouis-devel-3.3.0-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692551" comment="liblouis14-3.3.0-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692552" comment="python3-louis-3.3.0-150000.4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139473" version="1" class="patch">
	<metadata>
		<title>Security update for dpdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011405.html" source="SUSE-SU"/>
		<description>

This update of dpdk fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-05"/>
	<updated date="2022-07-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692802" comment="dpdk-18.11.9-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692803" comment="dpdk-devel-18.11.9-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692804" comment="dpdk-kmp-default-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692805" comment="dpdk-tools-18.11.9-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692806" comment="libdpdk-18_11-18.11.9-150100.4.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139474" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1200628" ref_url="https://bugzilla.suse.com/1200628" source="BUGZILLA"/>
		<reference ref_id="1200645" ref_url="https://bugzilla.suse.com/1200645" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31625" ref_url="https://www.suse.com/security/cve/CVE-2022-31625/" source="CVE"/>
		<reference ref_id="CVE-2022-31626" ref_url="https://www.suse.com/security/cve/CVE-2022-31626/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011408.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2022-31625: Fixed uninitialized pointers free in Postgres extension. (bsc#1200645)
- CVE-2022-31626: Fixed buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver. (bsc#1200628).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-05"/>
	<updated date="2022-07-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200628">SUSE bug 1200628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200645">SUSE bug 1200645</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31625/">CVE-2022-31625</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31626/">CVE-2022-31626</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692601" comment="apache2-mod_php7-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692602" comment="php7-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692603" comment="php7-bcmath-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692604" comment="php7-bz2-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692605" comment="php7-calendar-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692606" comment="php7-ctype-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692607" comment="php7-curl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692608" comment="php7-dba-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692609" comment="php7-devel-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692610" comment="php7-dom-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692611" comment="php7-enchant-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692612" comment="php7-exif-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692613" comment="php7-fastcgi-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692614" comment="php7-fileinfo-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692615" comment="php7-fpm-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692616" comment="php7-ftp-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692617" comment="php7-gd-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692618" comment="php7-gettext-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692619" comment="php7-gmp-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692620" comment="php7-iconv-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692621" comment="php7-intl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692622" comment="php7-json-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692623" comment="php7-ldap-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692624" comment="php7-mbstring-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692625" comment="php7-mysql-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692626" comment="php7-odbc-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692627" comment="php7-opcache-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692628" comment="php7-openssl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692629" comment="php7-pcntl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692630" comment="php7-pdo-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692631" comment="php7-pear-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692632" comment="php7-pear-Archive_Tar-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692633" comment="php7-pgsql-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692634" comment="php7-phar-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692635" comment="php7-posix-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692636" comment="php7-readline-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692637" comment="php7-shmop-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692638" comment="php7-snmp-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692639" comment="php7-soap-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692640" comment="php7-sockets-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692641" comment="php7-sodium-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692642" comment="php7-sqlite-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692643" comment="php7-sysvmsg-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692644" comment="php7-sysvsem-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692645" comment="php7-sysvshm-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692809" comment="php7-tidy-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692646" comment="php7-tokenizer-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692647" comment="php7-wddx-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692648" comment="php7-xmlreader-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692649" comment="php7-xmlrpc-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692650" comment="php7-xmlwriter-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692651" comment="php7-xsl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692652" comment="php7-zip-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692653" comment="php7-zlib-7.2.5-150000.4.95.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139475" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1200793" ref_url="https://bugzilla.suse.com/1200793" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2200" ref_url="https://www.suse.com/security/cve/CVE-2022-2200/" source="CVE"/>
		<reference ref_id="CVE-2022-31744" ref_url="https://www.suse.com/security/cve/CVE-2022-31744/" source="CVE"/>
		<reference ref_id="CVE-2022-34468" ref_url="https://www.suse.com/security/cve/CVE-2022-34468/" source="CVE"/>
		<reference ref_id="CVE-2022-34470" ref_url="https://www.suse.com/security/cve/CVE-2022-34470/" source="CVE"/>
		<reference ref_id="CVE-2022-34472" ref_url="https://www.suse.com/security/cve/CVE-2022-34472/" source="CVE"/>
		<reference ref_id="CVE-2022-34478" ref_url="https://www.suse.com/security/cve/CVE-2022-34478/" source="CVE"/>
		<reference ref_id="CVE-2022-34479" ref_url="https://www.suse.com/security/cve/CVE-2022-34479/" source="CVE"/>
		<reference ref_id="CVE-2022-34481" ref_url="https://www.suse.com/security/cve/CVE-2022-34481/" source="CVE"/>
		<reference ref_id="CVE-2022-34484" ref_url="https://www.suse.com/security/cve/CVE-2022-34484/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011411.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 91.11.0 ESR (MFSA 2022-25) (bsc#1200793):

- CVE-2022-2200: Undesired attributes could be set as part of prototype pollution (bmo#1771381)
- CVE-2022-31744: CSP bypass enabling stylesheet injection (bmo#1757604)
- CVE-2022-34468: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI (bmo#1768537)
- CVE-2022-34470: Use-after-free in nsSHistory (bmo#1765951)
- CVE-2022-34472: Unavailable PAC file resulted in OCSP requests being blocked (bmo#1770123)
- CVE-2022-34478: Microsoft protocols can be attacked if a user accepts a prompt (bmo#1773717)
- CVE-2022-34479: A popup window could be resized in a way to overlay the address bar with web content (bmo#1745595)
- CVE-2022-34481: Potential integer overflow in ReplaceElementsAt (bmo#1497246)
- CVE-2022-34484: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11 (bmo#1763634, bmo#1772651)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-06"/>
	<updated date="2022-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200793">SUSE bug 1200793</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2200/">CVE-2022-2200</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-31744/">CVE-2022-31744</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34468/">CVE-2022-34468</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34470/">CVE-2022-34470</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34472/">CVE-2022-34472</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34478/">CVE-2022-34478</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34479/">CVE-2022-34479</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34481/">CVE-2022-34481</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34484/">CVE-2022-34484</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699032" comment="MozillaFirefox-91.11.0-150000.150.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699033" comment="MozillaFirefox-devel-91.11.0-150000.150.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699034" comment="MozillaFirefox-translations-common-91.11.0-150000.150.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699035" comment="MozillaFirefox-translations-other-91.11.0-150000.150.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139476" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1201099" ref_url="https://bugzilla.suse.com/1201099" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2097" ref_url="https://www.suse.com/security/cve/CVE-2022-2097/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011422.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2022-2097: Fixed partial missing encryption in AES OCB mode (bsc#1201099).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-06"/>
	<updated date="2022-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201099">SUSE bug 1201099</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-2097/">CVE-2022-2097</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699102" comment="libopenssl-1_1-devel-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699103" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699104" comment="libopenssl1_1-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699105" comment="libopenssl1_1-32bit-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699106" comment="libopenssl1_1-hmac-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699107" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699108" comment="openssl-1_1-1.1.0i-150100.14.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139477" version="1" class="patch">
	<metadata>
		<title>Security update for oracleasm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011438.html" source="SUSE-SU"/>
		<description>

This update of oracleasm fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-06"/>
	<updated date="2022-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692807" comment="oracleasm-kmp-default-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139478" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1200338" ref_url="https://bugzilla.suse.com/1200338" source="BUGZILLA"/>
		<reference ref_id="1200340" ref_url="https://bugzilla.suse.com/1200340" source="BUGZILLA"/>
		<reference ref_id="1200341" ref_url="https://bugzilla.suse.com/1200341" source="BUGZILLA"/>
		<reference ref_id="1200345" ref_url="https://bugzilla.suse.com/1200345" source="BUGZILLA"/>
		<reference ref_id="1200348" ref_url="https://bugzilla.suse.com/1200348" source="BUGZILLA"/>
		<reference ref_id="1200350" ref_url="https://bugzilla.suse.com/1200350" source="BUGZILLA"/>
		<reference ref_id="1200352" ref_url="https://bugzilla.suse.com/1200352" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26377" ref_url="https://www.suse.com/security/cve/CVE-2022-26377/" source="CVE"/>
		<reference ref_id="CVE-2022-28614" ref_url="https://www.suse.com/security/cve/CVE-2022-28614/" source="CVE"/>
		<reference ref_id="CVE-2022-28615" ref_url="https://www.suse.com/security/cve/CVE-2022-28615/" source="CVE"/>
		<reference ref_id="CVE-2022-29404" ref_url="https://www.suse.com/security/cve/CVE-2022-29404/" source="CVE"/>
		<reference ref_id="CVE-2022-30522" ref_url="https://www.suse.com/security/cve/CVE-2022-30522/" source="CVE"/>
		<reference ref_id="CVE-2022-30556" ref_url="https://www.suse.com/security/cve/CVE-2022-30556/" source="CVE"/>
		<reference ref_id="CVE-2022-31813" ref_url="https://www.suse.com/security/cve/CVE-2022-31813/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011487.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2022-26377: Fixed possible request smuggling in mod_proxy_ajp (bsc#1200338)
- CVE-2022-28614: Fixed read beyond bounds via ap_rwrite() (bsc#1200340)
- CVE-2022-28615: Fixed read beyond bounds in ap_strcmp_match() (bsc#1200341)
- CVE-2022-29404: Fixed denial of service in mod_lua r:parsebody (bsc#1200345)
- CVE-2022-30556: Fixed information disclosure in mod_lua with websockets (bsc#1200350)
- CVE-2022-30522: Fixed mod_sed denial of service (bsc#1200352)
- CVE-2022-31813: Fixed mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism (bsc#1200348)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200338">SUSE bug 1200338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200340">SUSE bug 1200340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200341">SUSE bug 1200341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200345">SUSE bug 1200345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200348">SUSE bug 1200348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200350">SUSE bug 1200350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200352">SUSE bug 1200352</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-26377/">CVE-2022-26377</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28614/">CVE-2022-28614</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-28615/">CVE-2022-28615</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-29404/">CVE-2022-29404</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-30522/">CVE-2022-30522</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-30556/">CVE-2022-30556</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-31813/">CVE-2022-31813</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692561" comment="apache2-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692562" comment="apache2-devel-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692563" comment="apache2-doc-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692564" comment="apache2-prefork-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692565" comment="apache2-utils-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692566" comment="apache2-worker-2.4.33-150000.3.69.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139479" version="1" class="patch">
	<metadata>
		<title>Security update for fwupdate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011486.html" source="SUSE-SU"/>
		<description>

This update of fwupdate fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684356" comment="fwupdate-12-150100.11.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684357" comment="fwupdate-devel-12-150100.11.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684358" comment="fwupdate-efi-12-150100.11.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684359" comment="libfwup1-12-150100.11.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139480" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker and runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1192051" ref_url="https://bugzilla.suse.com/1192051" source="BUGZILLA"/>
		<reference ref_id="1199460" ref_url="https://bugzilla.suse.com/1199460" source="BUGZILLA"/>
		<reference ref_id="1199565" ref_url="https://bugzilla.suse.com/1199565" source="BUGZILLA"/>
		<reference ref_id="1200088" ref_url="https://bugzilla.suse.com/1200088" source="BUGZILLA"/>
		<reference ref_id="1200145" ref_url="https://bugzilla.suse.com/1200145" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29162" ref_url="https://www.suse.com/security/cve/CVE-2022-29162/" source="CVE"/>
		<reference ref_id="CVE-2022-31030" ref_url="https://www.suse.com/security/cve/CVE-2022-31030/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2341-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011489.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker and runc fixes the following issues:

containerd:

- CVE-2022-31030: Fixed denial of service via invocation of the ExecSync API (bsc#1200145)

docker:

- Update to Docker 20.10.17-ce. See upstream changelog online at
  https://docs.docker.com/engine/release-notes/#201017. (bsc#1200145)

runc:

Update to runc v1.1.3.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.3.

* Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
  s390 and s390x. This solves the issue where syscalls the host kernel did not
  support would return `-EPERM` despite the existence of the `-ENOSYS` stub
  code (this was due to how s390x does syscall multiplexing).
* Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
  intended; this fix does not affect runc binary itself but is important for
  libcontainer users such as Kubernetes.
* Inability to compile with recent clang due to an issue with duplicate
  constants in libseccomp-golang.
* When using systemd cgroup driver, skip adding device paths that don't exist,
  to stop systemd from emitting warnings about those paths.
* Socket activation was failing when more than 3 sockets were used.
* Various CI fixes.
* Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
- Fixed issues with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. (bsc#1192051 bsc#1199565)

Update to runc v1.1.2.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.2.

Security issue fixed:

- CVE-2022-29162: A bug was found in runc where runc exec --cap executed processes with
  non-empty inheritable Linux process capabilities, creating an atypical Linux
  environment. (bsc#1199460)

- `runc spec` no longer sets any inheritable capabilities in the created
  example OCI spec (`config.json`) file.

Update to runc v1.1.1.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.1.

* runc run/start can now run a container with read-only /dev in OCI spec,
  rather than error out. (#3355)
* runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
  libcontainer systemd v2 manager no longer errors out if one of the files
  listed in /sys/kernel/cgroup/delegate do not exist in container's
  cgroup. (#3387, #3404)
* Loosen OCI spec validation to avoid bogus 'Intel RDT is not supported'
  error. (#3406)
* libcontainer/cgroups no longer panics in cgroup v1 managers if stat
  of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)

Update to runc v1.1.0.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.0.

- libcontainer will now refuse to build without the nsenter package being
  correctly compiled (specifically this requires CGO to be enabled). This
  should avoid folks accidentally creating broken runc binaries (and
  incorrectly importing our internal libraries into their projects). (#3331)

Update to runc v1.1.0~rc1.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.

+ Add support for RDMA cgroup added in Linux 4.11.
* runc exec now produces exit code of 255 when the exec failed.
  This may help in distinguishing between runc exec failures
  (such as invalid options, non-running container or non-existent
  binary etc.) and failures of the command being executed.
+ runc run: new --keep option to skip removal exited containers artefacts.
  This might be useful to check the state (e.g. of cgroup controllers) after
  the container has￼exited.
+ seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
  (the latter is just an alias for SCMP_ACT_KILL).
+ seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
  users to create sophisticated seccomp filters where syscalls can be
  efficiently emulated by privileged processes on the host.
+ checkpoint/restore: add an option (--lsm-mount-context) to set
  a different LSM mount context on restore.
+ intelrdt: support ClosID parameter.
+ runc exec --cgroup: an option to specify a (non-top) in-container cgroup
  to use for the process being executed.
+ cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
  machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
  run/exec now adds the container to the appropriate cgroup under it).
+ sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
  behaviour.
+ mounts: add support for bind-mounts which are inaccessible after switching
  the user namespace. Note that this does not permit the container any
  additional access to the host filesystem, it simply allows containers to
  have bind-mounts configured for paths the user can access but have
  restrictive access control settings for other users.
+ Add support for recursive mount attributes using mount_setattr(2). These
  have the same names as the proposed mount(8) options -- just prepend r
  to the option name (such as rro).
+ Add runc features subcommand to allow runc users to detect what features
  runc has been built with. This includes critical information such as
  supported mount flags, hook names, and so on. Note that the output of this
  command is subject to change and will not be considered stable until runc
  1.2 at the earliest. The runtime-spec specification for this feature is
  being developed in opencontainers/runtime-spec#1130.
* system: improve performance of /proc/$pid/stat parsing.
* cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
  the ownership of certain cgroup control files (as per
  /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
  process.
* runc checkpoint/restore: fixed for containers with an external bind mount
  which destination is a symlink.
* cgroup: improve openat2 handling for cgroup directory handle hardening.
  runc delete -f now succeeds (rather than timing out) on a paused
  container.
* runc run/start/exec now refuses a frozen cgroup (paused container in case of
  exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of the release.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192051">SUSE bug 1192051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199460">SUSE bug 1199460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199565">SUSE bug 1199565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200088">SUSE bug 1200088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200145">SUSE bug 1200145</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-29162/">CVE-2022-29162</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-31030/">CVE-2022-31030</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692797" comment="containerd-1.6.6-150000.73.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692798" comment="containerd-ctr-1.6.6-150000.73.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692799" comment="docker-20.10.17_ce-150000.166.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684372" comment="docker-bash-completion-20.10.17_ce-150000.166.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692800" comment="runc-1.1.3-150000.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139481" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198511" ref_url="https://bugzilla.suse.com/1198511" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-20107" ref_url="https://www.suse.com/security/cve/CVE-2015-20107/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011485.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198511">SUSE bug 1198511</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2015-20107/">CVE-2015-20107</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692553" comment="libpython2_7-1_0-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692554" comment="python-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692555" comment="python-base-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692556" comment="python-curses-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692557" comment="python-devel-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692558" comment="python-gdbm-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692559" comment="python-tk-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692560" comment="python-xml-2.7.18-150000.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139482" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186819" ref_url="https://bugzilla.suse.com/1186819" source="BUGZILLA"/>
		<reference ref_id="1190566" ref_url="https://bugzilla.suse.com/1190566" source="BUGZILLA"/>
		<reference ref_id="1192249" ref_url="https://bugzilla.suse.com/1192249" source="BUGZILLA"/>
		<reference ref_id="1193179" ref_url="https://bugzilla.suse.com/1193179" source="BUGZILLA"/>
		<reference ref_id="1198511" ref_url="https://bugzilla.suse.com/1198511" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-20107" ref_url="https://www.suse.com/security/cve/CVE-2015-20107/" source="CVE"/>
		<reference ref_id="CVE-2021-3572" ref_url="https://www.suse.com/security/cve/CVE-2021-3572/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011496.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

Security issues fixed:

- CVE-2021-3572: Update bundled pip wheel to the latest SLE version (bsc#1186819)
- CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).

Other bugs fixed:

- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-11"/>
	<updated date="2022-07-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186819">SUSE bug 1186819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190566">SUSE bug 1190566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192249">SUSE bug 1192249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193179">SUSE bug 1193179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198511">SUSE bug 1198511</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2015-20107/">CVE-2015-20107</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3572/">CVE-2021-3572</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692535" comment="libpython3_6m1_0-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692536" comment="python3-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692537" comment="python3-base-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692538" comment="python3-curses-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692539" comment="python3-dbm-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692540" comment="python3-devel-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692541" comment="python3-idle-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692796" comment="python3-testsuite-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692542" comment="python3-tk-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692543" comment="python3-tools-3.6.15-150000.3.106.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139483" version="1" class="patch">
	<metadata>
		<title>Security update for pcre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1199232" ref_url="https://bugzilla.suse.com/1199232" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1586" ref_url="https://www.suse.com/security/cve/CVE-2022-1586/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011510.html" source="SUSE-SU"/>
		<description>
This update for pcre fixes the following issues:

- CVE-2022-1586: Fixed unicode property matching issue. (bsc#1199232)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-12"/>
	<updated date="2022-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199232">SUSE bug 1199232</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1586/">CVE-2022-1586</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692654" comment="libpcre1-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684362" comment="libpcre1-32bit-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692655" comment="libpcre16-0-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692656" comment="libpcrecpp0-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684365" comment="libpcrecpp0-32bit-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692657" comment="libpcreposix0-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692658" comment="pcre-devel-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692659" comment="pcre-tools-8.45-150000.20.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139484" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194179" ref_url="https://bugzilla.suse.com/1194179" source="BUGZILLA"/>
		<reference ref_id="1194181" ref_url="https://bugzilla.suse.com/1194181" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2319" ref_url="https://www.suse.com/security/cve/CVE-2022-2319/" source="CVE"/>
		<reference ref_id="CVE-2022-2320" ref_url="https://www.suse.com/security/cve/CVE-2022-2320/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011518.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2022-2319: Fixed out-of-bounds access in _CheckSetSections() (ZDI-CAN-16062) (bsc#1194179).
- CVE-2022-2320: Fixed out-of-bounds access in CheckSetDeviceIndicators() (ZDI-CAN-16070) (bsc#1194181). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-12"/>
	<updated date="2022-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194179">SUSE bug 1194179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194181">SUSE bug 1194181</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2319/">CVE-2022-2319</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2320/">CVE-2022-2320</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699109" comment="xorg-x11-server-1.20.3-150100.14.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699110" comment="xorg-x11-server-extra-1.20.3-150100.14.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699111" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139485" version="1" class="patch">
	<metadata>
		<title>Security update for python-PyJWT (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1199756" ref_url="https://bugzilla.suse.com/1199756" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29217" ref_url="https://www.suse.com/security/cve/CVE-2022-29217/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2403-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011549.html" source="SUSE-SU"/>
		<description>
This update for python-PyJWT fixes the following issues:

- CVE-2022-29217: Fixed key confusion through non-blocklisted public key format (bsc#1199756).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-14"/>
	<updated date="2022-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199756">SUSE bug 1199756</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29217/">CVE-2022-29217</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692808" comment="python3-PyJWT-1.7.1-150100.6.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139486" version="1" class="patch">
	<metadata>
		<title>Security update for crash (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011559.html" source="SUSE-SU"/>
		<description>

This update of crash fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-15"/>
	<updated date="2022-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699112" comment="crash-7.2.1-150100.9.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699113" comment="crash-devel-7.2.1-150100.9.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699114" comment="crash-gcore-7.2.1-150100.9.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699115" comment="crash-kmp-default-7.2.1_k4.12.14_150100.197.114-150100.9.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139487" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194013" ref_url="https://bugzilla.suse.com/1194013" source="BUGZILLA"/>
		<reference ref_id="1196901" ref_url="https://bugzilla.suse.com/1196901" source="BUGZILLA"/>
		<reference ref_id="1199487" ref_url="https://bugzilla.suse.com/1199487" source="BUGZILLA"/>
		<reference ref_id="1199657" ref_url="https://bugzilla.suse.com/1199657" source="BUGZILLA"/>
		<reference ref_id="1200571" ref_url="https://bugzilla.suse.com/1200571" source="BUGZILLA"/>
		<reference ref_id="1200599" ref_url="https://bugzilla.suse.com/1200599" source="BUGZILLA"/>
		<reference ref_id="1200604" ref_url="https://bugzilla.suse.com/1200604" source="BUGZILLA"/>
		<reference ref_id="1200605" ref_url="https://bugzilla.suse.com/1200605" source="BUGZILLA"/>
		<reference ref_id="1200608" ref_url="https://bugzilla.suse.com/1200608" source="BUGZILLA"/>
		<reference ref_id="1200619" ref_url="https://bugzilla.suse.com/1200619" source="BUGZILLA"/>
		<reference ref_id="1200692" ref_url="https://bugzilla.suse.com/1200692" source="BUGZILLA"/>
		<reference ref_id="1200762" ref_url="https://bugzilla.suse.com/1200762" source="BUGZILLA"/>
		<reference ref_id="1201050" ref_url="https://bugzilla.suse.com/1201050" source="BUGZILLA"/>
		<reference ref_id="1201080" ref_url="https://bugzilla.suse.com/1201080" source="BUGZILLA"/>
		<reference ref_id="1201251" ref_url="https://bugzilla.suse.com/1201251" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26341" ref_url="https://www.suse.com/security/cve/CVE-2021-26341/" source="CVE"/>
		<reference ref_id="CVE-2021-4157" ref_url="https://www.suse.com/security/cve/CVE-2021-4157/" source="CVE"/>
		<reference ref_id="CVE-2022-1679" ref_url="https://www.suse.com/security/cve/CVE-2022-1679/" source="CVE"/>
		<reference ref_id="CVE-2022-20132" ref_url="https://www.suse.com/security/cve/CVE-2022-20132/" source="CVE"/>
		<reference ref_id="CVE-2022-20141" ref_url="https://www.suse.com/security/cve/CVE-2022-20141/" source="CVE"/>
		<reference ref_id="CVE-2022-20154" ref_url="https://www.suse.com/security/cve/CVE-2022-20154/" source="CVE"/>
		<reference ref_id="CVE-2022-2318" ref_url="https://www.suse.com/security/cve/CVE-2022-2318/" source="CVE"/>
		<reference ref_id="CVE-2022-26365" ref_url="https://www.suse.com/security/cve/CVE-2022-26365/" source="CVE"/>
		<reference ref_id="CVE-2022-29900" ref_url="https://www.suse.com/security/cve/CVE-2022-29900/" source="CVE"/>
		<reference ref_id="CVE-2022-29901" ref_url="https://www.suse.com/security/cve/CVE-2022-29901/" source="CVE"/>
		<reference ref_id="CVE-2022-33740" ref_url="https://www.suse.com/security/cve/CVE-2022-33740/" source="CVE"/>
		<reference ref_id="CVE-2022-33741" ref_url="https://www.suse.com/security/cve/CVE-2022-33741/" source="CVE"/>
		<reference ref_id="CVE-2022-33742" ref_url="https://www.suse.com/security/cve/CVE-2022-33742/" source="CVE"/>
		<reference ref_id="CVE-2022-33981" ref_url="https://www.suse.com/security/cve/CVE-2022-33981/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011558.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).
- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).
- CVE-2022-20132: Fixed out of bounds read due to improper input validation in lg_probe and related functions of hid-lg.c (bsc#1200619).
- CVE-2022-33981: Fixed use-after-free in floppy driver (bsc#1200692)
- CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604).
- CVE-2021-4157: Fixed an out of memory bounds write flaw in the NFS subsystem, related to the replication of files with NFS. A user could potentially crash the system or escalate privileges on the system (bsc#1194013).
- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).
- CVE-2022-2318: Fixed a use-after-free vulnerabilities in the timer handler in net/rose/rose_timer.c that allow attackers to crash the system without any privileges (bsc#1201251).
- CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762).
- CVE-2021-26341: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bsc#1201050).

The following non-security bugs were fixed:

- exec: Force single empty string when argv is empty (bsc#1200571).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-15"/>
	<updated date="2022-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194013">SUSE bug 1194013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196901">SUSE bug 1196901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199487">SUSE bug 1199487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199657">SUSE bug 1199657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200571">SUSE bug 1200571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200599">SUSE bug 1200599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200604">SUSE bug 1200604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200605">SUSE bug 1200605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200608">SUSE bug 1200608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200619">SUSE bug 1200619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200692">SUSE bug 1200692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200762">SUSE bug 1200762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201050">SUSE bug 1201050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201080">SUSE bug 1201080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201251">SUSE bug 1201251</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-26341/">CVE-2021-26341</cve>
	<cve impact="low" cvss3="3.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4157/">CVE-2021-4157</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1679/">CVE-2022-1679</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-20132/">CVE-2022-20132</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20141/">CVE-2022-20141</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20154/">CVE-2022-20154</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2318/">CVE-2022-2318</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-26365/">CVE-2022-26365</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29900/">CVE-2022-29900</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29901/">CVE-2022-29901</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33740/">CVE-2022-33740</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33741/">CVE-2022-33741</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33742/">CVE-2022-33742</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-33981/">CVE-2022-33981</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699116" comment="kernel-default-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699117" comment="kernel-default-base-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699118" comment="kernel-default-devel-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699119" comment="kernel-devel-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699120" comment="kernel-docs-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699121" comment="kernel-macros-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699122" comment="kernel-obs-build-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699123" comment="kernel-source-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699124" comment="kernel-syms-4.12.14-150100.197.117.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139488" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1201267" ref_url="https://bugzilla.suse.com/1201267" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-30550" ref_url="https://www.suse.com/security/cve/CVE-2022-30550/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2432-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011581.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 fixes the following issues:

- CVE-2022-30550: Fixed privilege escalation in dovecot when similar master and non-master passdbs are used (bsc#1201267).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-18"/>
	<updated date="2022-07-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201267">SUSE bug 1201267</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-30550/">CVE-2022-30550</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699125" comment="dovecot23-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699126" comment="dovecot23-backend-mysql-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699127" comment="dovecot23-backend-pgsql-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699128" comment="dovecot23-backend-sqlite-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699129" comment="dovecot23-devel-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699130" comment="dovecot23-fts-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699131" comment="dovecot23-fts-lucene-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699132" comment="dovecot23-fts-solr-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699133" comment="dovecot23-fts-squat-2.3.15-150100.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139489" version="1" class="patch">
	<metadata>
		<title>Security update for python2-numpy (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1193907" ref_url="https://bugzilla.suse.com/1193907" source="BUGZILLA"/>
		<reference ref_id="1193911" ref_url="https://bugzilla.suse.com/1193911" source="BUGZILLA"/>
		<reference ref_id="1193913" ref_url="https://bugzilla.suse.com/1193913" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33430" ref_url="https://www.suse.com/security/cve/CVE-2021-33430/" source="CVE"/>
		<reference ref_id="CVE-2021-41495" ref_url="https://www.suse.com/security/cve/CVE-2021-41495/" source="CVE"/>
		<reference ref_id="CVE-2021-41496" ref_url="https://www.suse.com/security/cve/CVE-2021-41496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011595.html" source="SUSE-SU"/>
		<description>
This update for python2-numpy fixes the following issues:

- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort (bsc#1193911).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-19"/>
	<updated date="2022-07-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193907">SUSE bug 1193907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193911">SUSE bug 1193911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193913">SUSE bug 1193913</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33430/">CVE-2021-33430</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41495/">CVE-2021-41495</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41496/">CVE-2021-41496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699026" comment="python2-numpy-1.16.5-150000.1.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699027" comment="python2-numpy-devel-1.16.5-150000.1.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699028" comment="python2-numpy-gnu-hpc-1.16.5-150000.1.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699029" comment="python2-numpy-gnu-hpc-devel-1.16.5-150000.1.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699030" comment="python2-numpy_1_16_5-gnu-hpc-1.16.5-150000.1.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699031" comment="python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150000.1.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139490" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1201221" ref_url="https://bugzilla.suse.com/1201221" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22662" ref_url="https://www.suse.com/security/cve/CVE-2022-22662/" source="CVE"/>
		<reference ref_id="CVE-2022-22677" ref_url="https://www.suse.com/security/cve/CVE-2022-22677/" source="CVE"/>
		<reference ref_id="CVE-2022-26710" ref_url="https://www.suse.com/security/cve/CVE-2022-26710/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011629.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.36.4 (bsc#1201221):

- CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information.
- CVE-2022-22677: The video in a webRTC call may be interrupted if the audio capture gets interrupted.
- CVE-2022-26710: Processing maliciously crafted web content may lead to arbitrary code execution.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201221">SUSE bug 1201221</bugzilla>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22662/">CVE-2022-22662</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-22677/">CVE-2022-22677</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26710/">CVE-2022-26710</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699083" comment="libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699084" comment="libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699085" comment="libwebkit2gtk3-lang-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699086" comment="typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699087" comment="typelib-1_0-WebKit2-4_0-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699088" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699089" comment="webkit2gtk-4_0-injected-bundles-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699090" comment="webkit2gtk3-devel-2.36.4-150000.3.106.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139491" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1192079" ref_url="https://bugzilla.suse.com/1192079" source="BUGZILLA"/>
		<reference ref_id="1192080" ref_url="https://bugzilla.suse.com/1192080" source="BUGZILLA"/>
		<reference ref_id="1192086" ref_url="https://bugzilla.suse.com/1192086" source="BUGZILLA"/>
		<reference ref_id="1192087" ref_url="https://bugzilla.suse.com/1192087" source="BUGZILLA"/>
		<reference ref_id="1192228" ref_url="https://bugzilla.suse.com/1192228" source="BUGZILLA"/>
		<reference ref_id="1198486" ref_url="https://bugzilla.suse.com/1198486" source="BUGZILLA"/>
		<reference ref_id="1200027" ref_url="https://bugzilla.suse.com/1200027" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31741" ref_url="https://www.suse.com/security/cve/CVE-2022-31741/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2533-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011637.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

Various FIPS 140-3 related fixes were backported from SUSE Linux Enterprise 15 SP4:

- Makes the PBKDF known answer test compliant with NIST SP800-132. (bsc#1192079). 
- FIPS: Add on-demand integrity tests through sftk_FIPSRepeatIntegrityCheck()
  (bsc#1198980).
- FIPS: mark algorithms as approved/non-approved according to security policy
  (bsc#1191546, bsc#1201298).
- FIPS: remove hard disabling of unapproved algorithms. This requirement is now
  fulfilled by the service level indicator (bsc#1200325).
- Run test suite at build time, and make it pass (bsc#1198486).
- FIPS: skip algorithms that are hard disabled in FIPS mode.
- Prevent expired PayPalEE cert from failing the tests.
- Allow checksumming to be disabled, but only if we entered FIPS mode
  due to NSS_FIPS being set, not if it came from /proc.
- FIPS: Make the PBKDF known answer test compliant with NIST SP800-132.
- Update FIPS validation string to version-release format.
- FIPS: remove XCBC MAC from list of FIPS approved algorithms.
- Enable NSS_ENABLE_FIPS_INDICATORS and set NSS_FIPS_MODULE_ID
  for build.
- FIPS: claim 3DES unapproved in FIPS mode (bsc#1192080).
- FIPS: allow testing of unapproved algorithms (bsc#1192228).
- FIPS: add version indicators. (bmo#1729550, bsc#1192086).
- FIPS: fix some secret clearing (bmo#1697303, bsc#1192087).

Version update to NSS 3.79:

- Use PK11_GetSlotInfo instead of raw C_GetSlotInfo calls.
- Update mercurial in clang-format docker image.
- Use of uninitialized pointer in lg_init after alloc fail.
- selfserv and tstclnt should use PR_GetPrefLoopbackAddrInfo.
- Add SECMOD_LockedModuleHasRemovableSlots.
- Fix secasn1d parsing of indefinite SEQUENCE inside indefinite GROUP.
- Added RFC8422 compliant TLS &lt;= 1.2 undefined/compressed ECPointFormat extension alerts.
- TLS 1.3 Server: Send protocol_version alert on unsupported ClientHello.legacy_version.
- Correct invalid record inner and outer content type alerts.
- NSS does not properly import or export pkcs12 files with large passwords and pkcs5v2 encoding.
- improve error handling after nssCKFWInstance_CreateObjectHandle.
- Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple.
- NSS 3.79 should depend on NSPR 4.34   

Version update to NSS 3.78.1:

- Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple

Version update to NSS 3.78:

- Added TLS 1.3 zero-length inner plaintext checks and tests, zero-length record/fragment handling tests.
- Reworked overlong record size checks and added TLS1.3 specific boundaries.
- Add ECH Grease Support to tstclnt
- Add a strict variant of moz::pkix::CheckCertHostname.
- Change SSL_REUSE_SERVER_ECDHE_KEY default to false.
- Make SEC_PKCS12EnableCipher succeed
- Update zlib in NSS to 1.2.12.

Version update to NSS 3.77:

- Fix link to TLS page on wireshark wiki
- Add two D-TRUST 2020 root certificates.
- Add Telia Root CA v2 root certificate.
- Remove expired explicitly distrusted certificates from certdata.txt.
- support specific RSA-PSS parameters in mozilla::pkix
- Remove obsolete stateEnd check in SEC_ASN1DecoderUpdate.
- Remove token member from NSSSlot struct.
- Provide secure variants of mpp_pprime and mpp_make_prime.
- Support UTF-8 library path in the module spec string.
- Update nssUTF8_Length to RFC 3629 and fix buffer overrun.
- Update googletest to 1.11.0
- Add SetTls13GreaseEchSize to experimental API.
- TLS 1.3 Illegal legacy_version handling/alerts.
- Fix calculation of ECH HRR Transcript.
- Allow ld path to be set as environment variable.
- Ensure we don't read uninitialized memory in ssl gtests.
- Fix DataBuffer Move Assignment.
- internal_error alert on Certificate Request with sha1+ecdsa in TLS 1.3
- rework signature verification in mozilla::pkix

Version update to NSS 3.76.1

- Remove token member from NSSSlot struct.
- Hold tokensLock through nssToken_GetSlot calls in nssTrustDomain_GetActiveSlots.
- Check return value of PK11Slot_GetNSSToken.
- Use Wycheproof JSON for RSASSA-PSS
- Add SHA256 fingerprint comments to old certdata.txt entries.
- Avoid truncating files in nss-release-helper.py.
- Throw illegal_parameter alert for illegal extensions in handshake message.

Version update to NSS 3.75

- Make DottedOIDToCode.py compatible with python3.
- Avoid undefined shift in SSL_CERT_IS while fuzzing.
- Remove redundant key type check.
- Update ABI expectations to match ECH changes.
- Enable CKM_CHACHA20.
- check return on NSS_NoDB_Init and NSS_Shutdown.
- Run ECDSA test vectors from bltest as part of the CI tests.
- Add ECDSA test vectors to the bltest command line tool.
- Allow to build using clang's integrated assembler.
- Allow to override python for the build.
- test HKDF output rather than input.
- Use ASSERT macros to end failed tests early.
- move assignment operator for DataBuffer.
- Add test cases for ECH compression and unexpected extensions in SH.
- Update tests for ECH-13.
- Tidy up error handling.
- Add tests for ECH HRR Changes.
- Server only sends GREASE HRR extension if enabled by preference.
- Update generation of the Associated Data for ECH-13.
- When ECH is accepted, reject extensions which were only advertised in the Outer Client Hello.
- Allow for compressed, non-contiguous, extensions.
- Scramble the PSK extension in CHOuter.
- Split custom extension handling for ECH.
- Add ECH-13 HRR Handling.
- Client side ECH padding.
- Stricter ClientHelloInner Decompression.
- Remove ECH_inner extension, use new enum format.
- Update the version number for ECH-13 and adjust the ECHConfig size.

Version update to NSS 3.74

- mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses
- Ensure clients offer consistent ciphersuites after HRR
- NSS does not properly restrict server keys based on policy
- Set nssckbi version number to 2.54
- Replace Google Trust Services LLC (GTS) R4 root certificate
- Replace Google Trust Services LLC (GTS) R3 root certificate
- Replace Google Trust Services LLC (GTS) R2 root certificate
- Replace Google Trust Services LLC (GTS) R1 root certificate
- Replace GlobalSign ECC Root CA R4
- Remove Expired Root Certificates - DST Root CA X3
- Remove Expiring Cybertrust Global Root and GlobalSign root certificates
- Add renewed Autoridad de Certificacion Firmaprofesional CIF A62634068 root certificate
- Add iTrusChina ECC root certificate
- Add iTrusChina RSA root certificate
- Add ISRG Root X2 root certificate
- Add Chunghwa Telecom's HiPKI Root CA - G1 root certificate
- Avoid a clang 13 unused variable warning in opt build
- Check for missing signedData field
- Ensure DER encoded signatures are within size limits

- enable key logging option (boo#1195040)

Version update to NSS 3.73.1:

- Add SHA-2 support to mozilla::pkix's OSCP implementation

Version update to NSS 3.73

- check for missing signedData field.
- Ensure DER encoded signatures are within size limits.
- NSS needs FiPS 140-3 version indicators.
- pkix_CacheCert_Lookup doesn't return cached certs
- sunset Coverity from NSS

Fixed MFSA 2021-51 (bsc#1193170) CVE-2021-43527: Memory corruption via DER-encoded DSA and RSA-PSS signatures

Version update to NSS 3.72

- Fix nsinstall parallel failure.
- Increase KDF cache size to mitigate perf regression in about:logins

Version update to NSS 3.71

- Set nssckbi version number to 2.52.
- Respect server requirements of tlsfuzzer/test-tls13-signature-algorithms.py
- Import of PKCS#12 files with Camellia encryption is not supported
- Add HARICA Client ECC Root CA 2021.
- Add HARICA Client RSA Root CA 2021.
- Add HARICA TLS ECC Root CA 2021.
- Add HARICA TLS RSA Root CA 2021.
- Add TunTrust Root CA certificate to NSS.

Version update to NSS 3.70

- Update test case to verify fix.
- Explicitly disable downgrade check in TlsConnectStreamTls13.EchOuterWith12Max
- Explicitly disable downgrade check in TlsConnectTest.DisableFalseStartOnFallback
- Avoid using a lookup table in nssb64d.
- Use HW accelerated SHA2 on AArch64 Big Endian.
- Change default value of enableHelloDowngradeCheck to true.
- Cache additional PBE entries.
- Read HPKE vectors from official JSON.

Version update to NSS 3.69.1:

- Disable DTLS 1.0 and 1.1 by default
- integrity checks in key4.db not happening on private components with AES_CBC

NSS 3.69:

- Disable DTLS 1.0 and 1.1 by default (backed out again)
- integrity checks in key4.db not happening on private components with AES_CBC (backed out again)
- SSL handling of signature algorithms ignores environmental invalid algorithms.
- sqlite 3.34 changed it's open semantics, causing nss failures.
- Gtest update changed the gtest reports, losing gtest details in all.sh reports.
- NSS incorrectly accepting 1536 bit DH primes in FIPS mode
- SQLite calls could timeout in starvation situations.
- Coverity/cpp scanner errors found in nss 3.67
- Import the NSS documentation from MDN in nss/doc.
- NSS using a tempdir to measure sql performance not active

Version Update to 3.68.4 (bsc#1200027)

- CVE-2022-31741: Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple.  (bmo#1767590)


Mozilla NSPR was updated to version 4.34:

* add an API that returns a preferred loopback IP on hosts that have two IP stacks available.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192079">SUSE bug 1192079</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192080">SUSE bug 1192080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192086">SUSE bug 1192086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192087">SUSE bug 1192087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192228">SUSE bug 1192228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198486">SUSE bug 1198486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200027">SUSE bug 1200027</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31741/">CVE-2022-31741</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699059" comment="libfreebl3-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698490" comment="libfreebl3-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699060" comment="libfreebl3-hmac-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698492" comment="libfreebl3-hmac-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699061" comment="libsoftokn3-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698494" comment="libsoftokn3-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699062" comment="libsoftokn3-hmac-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698496" comment="libsoftokn3-hmac-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699063" comment="mozilla-nspr-4.34-150000.3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698498" comment="mozilla-nspr-32bit-4.34-150000.3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699064" comment="mozilla-nspr-devel-4.34-150000.3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699065" comment="mozilla-nss-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698501" comment="mozilla-nss-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699066" comment="mozilla-nss-certs-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698503" comment="mozilla-nss-certs-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699067" comment="mozilla-nss-devel-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699068" comment="mozilla-nss-sysinit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699069" comment="mozilla-nss-tools-3.79-150000.3.74.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139492" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1200119" ref_url="https://bugzilla.suse.com/1200119" source="BUGZILLA"/>
		<reference ref_id="1201431" ref_url="https://bugzilla.suse.com/1201431" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29187" ref_url="https://www.suse.com/security/cve/CVE-2022-29187/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011633.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- CVE-2022-29187: Incomplete fix for CVE-2022-24765: potential command injection via git worktree (bsc#1201431).
- Allow to opt-out from the check added in the security fix for CVE-2022-24765 (bsc#1200119)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200119">SUSE bug 1200119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201431">SUSE bug 1201431</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29187/">CVE-2022-29187</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699071" comment="git-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699072" comment="git-arch-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699073" comment="git-core-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699074" comment="git-cvs-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699075" comment="git-daemon-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699076" comment="git-doc-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699077" comment="git-email-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699078" comment="git-gui-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699079" comment="git-svn-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699080" comment="git-web-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699081" comment="gitk-2.26.2-150000.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139493" version="1" class="patch">
	<metadata>
		<title>Security update for logrotate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1192449" ref_url="https://bugzilla.suse.com/1192449" source="BUGZILLA"/>
		<reference ref_id="1200278" ref_url="https://bugzilla.suse.com/1200278" source="BUGZILLA"/>
		<reference ref_id="1200802" ref_url="https://bugzilla.suse.com/1200802" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011649.html" source="SUSE-SU"/>
		<description>
This update for logrotate fixes the following issues:

Security issues fixed:

- Improved coredump handing for SUID binaries (bsc#1192449).

Non-security issues fixed:

- Fixed 'logrotate emits unintended warning: keyword size not properly separated, found 0x3d' (bsc#1200278, bsc#1200802).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-25"/>
	<updated date="2022-07-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192449">SUSE bug 1192449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200278">SUSE bug 1200278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200802">SUSE bug 1200802</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699082" comment="logrotate-3.13.0-150000.4.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139494" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1185923" ref_url="https://bugzilla.suse.com/1185923" source="BUGZILLA"/>
		<reference ref_id="1186654" ref_url="https://bugzilla.suse.com/1186654" source="BUGZILLA"/>
		<reference ref_id="1200907" ref_url="https://bugzilla.suse.com/1200907" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33620" ref_url="https://www.suse.com/security/cve/CVE-2021-33620/" source="CVE"/>
		<reference ref_id="CVE-2021-46784" ref_url="https://www.suse.com/security/cve/CVE-2021-46784/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011655.html" source="SUSE-SU"/>
		<description>
This update for squid fixes the following issues:

- CVE-2021-46784: Fixed DoS when processing gopher server responses. (bsc#1200907)
- CVE-2021-33620: Fixed DoS in HTTP Response processing (bsc#1185923, bsc#1186654)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-26"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185923">SUSE bug 1185923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186654">SUSE bug 1186654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200907">SUSE bug 1200907</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33620/">CVE-2021-33620</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46784/">CVE-2021-46784</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699070" comment="squid-4.17-150000.5.32.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139495" version="1" class="patch">
	<metadata>
		<title>Security update for python-M2Crypto (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1178829" ref_url="https://bugzilla.suse.com/1178829" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25657" ref_url="https://www.suse.com/security/cve/CVE-2020-25657/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2562-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011682.html" source="SUSE-SU"/>
		<description>
This update for python-M2Crypto fixes the following issues:

- CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-27"/>
	<updated date="2022-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178829">SUSE bug 1178829</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25657/">CVE-2020-25657</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699100" comment="python2-M2Crypto-0.35.2-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699101" comment="python3-M2Crypto-0.35.2-150000.3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139496" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1201758" ref_url="https://bugzilla.suse.com/1201758" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-36318" ref_url="https://www.suse.com/security/cve/CVE-2022-36318/" source="CVE"/>
		<reference ref_id="CVE-2022-36319" ref_url="https://www.suse.com/security/cve/CVE-2022-36319/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011719.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.12.0 ESR (bsc#1201758):

- CVE-2022-36319: Mouse Position spoofing with CSS transforms
- CVE-2022-36318: Directory indexes for bundled resources reflected URL parameters
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-29"/>
	<updated date="2022-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201758">SUSE bug 1201758</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36318/">CVE-2022-36318</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36319/">CVE-2022-36319</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702508" comment="MozillaFirefox-91.12.0-150000.150.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702509" comment="MozillaFirefox-devel-91.12.0-150000.150.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702510" comment="MozillaFirefox-translations-common-91.12.0-150000.150.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702511" comment="MozillaFirefox-translations-other-91.12.0-150000.150.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139497" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1199965" ref_url="https://bugzilla.suse.com/1199965" source="BUGZILLA"/>
		<reference ref_id="1199966" ref_url="https://bugzilla.suse.com/1199966" source="BUGZILLA"/>
		<reference ref_id="1200549" ref_url="https://bugzilla.suse.com/1200549" source="BUGZILLA"/>
		<reference ref_id="1201394" ref_url="https://bugzilla.suse.com/1201394" source="BUGZILLA"/>
		<reference ref_id="1201469" ref_url="https://bugzilla.suse.com/1201469" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21123" ref_url="https://www.suse.com/security/cve/CVE-2022-21123/" source="CVE"/>
		<reference ref_id="CVE-2022-21125" ref_url="https://www.suse.com/security/cve/CVE-2022-21125/" source="CVE"/>
		<reference ref_id="CVE-2022-21166" ref_url="https://www.suse.com/security/cve/CVE-2022-21166/" source="CVE"/>
		<reference ref_id="CVE-2022-23816" ref_url="https://www.suse.com/security/cve/CVE-2022-23816/" source="CVE"/>
		<reference ref_id="CVE-2022-23825" ref_url="https://www.suse.com/security/cve/CVE-2022-23825/" source="CVE"/>
		<reference ref_id="CVE-2022-26362" ref_url="https://www.suse.com/security/cve/CVE-2022-26362/" source="CVE"/>
		<reference ref_id="CVE-2022-26363" ref_url="https://www.suse.com/security/cve/CVE-2022-26363/" source="CVE"/>
		<reference ref_id="CVE-2022-26364" ref_url="https://www.suse.com/security/cve/CVE-2022-26364/" source="CVE"/>
		<reference ref_id="CVE-2022-29900" ref_url="https://www.suse.com/security/cve/CVE-2022-29900/" source="CVE"/>
		<reference ref_id="CVE-2022-33745" ref_url="https://www.suse.com/security/cve/CVE-2022-33745/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011720.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966).
- CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549).
- CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965).
- CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394).
- CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-29"/>
	<updated date="2022-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199965">SUSE bug 1199965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199966">SUSE bug 1199966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200549">SUSE bug 1200549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201394">SUSE bug 1201394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201469">SUSE bug 1201469</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21123/">CVE-2022-21123</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21125/">CVE-2022-21125</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21166/">CVE-2022-21166</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23816/">CVE-2022-23816</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23825/">CVE-2022-23825</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26362/">CVE-2022-26362</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26363/">CVE-2022-26363</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26364/">CVE-2022-26364</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29900/">CVE-2022-29900</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-33745/">CVE-2022-33745</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702512" comment="xen-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702513" comment="xen-devel-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702514" comment="xen-libs-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702515" comment="xen-tools-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702516" comment="xen-tools-domU-4.12.4_26-150100.3.75.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139498" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1201496" ref_url="https://bugzilla.suse.com/1201496" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32742" ref_url="https://www.suse.com/security/cve/CVE-2022-32742/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2621-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011742.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1write_and_close, SMB1write_and_unlock (bso#15085) (bsc#1201496).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-02"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1201496">SUSE bug 1201496</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32742/">CVE-2022-32742</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702788" comment="libdcerpc-binding0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702789" comment="libdcerpc-binding0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702790" comment="libdcerpc-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702791" comment="libdcerpc-samr-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702792" comment="libdcerpc-samr0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702793" comment="libdcerpc0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702794" comment="libdcerpc0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702795" comment="libndr-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702796" comment="libndr-krb5pac-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702797" comment="libndr-krb5pac0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702798" comment="libndr-krb5pac0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702799" comment="libndr-nbt-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702800" comment="libndr-nbt0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702801" comment="libndr-nbt0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702802" comment="libndr-standard-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702803" comment="libndr-standard0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702804" comment="libndr-standard0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702805" comment="libndr0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702806" comment="libndr0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702807" comment="libnetapi-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702808" comment="libnetapi0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702809" comment="libnetapi0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702810" comment="libsamba-credentials-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702811" comment="libsamba-credentials0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702812" comment="libsamba-credentials0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702813" comment="libsamba-errors-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702814" comment="libsamba-errors0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702815" comment="libsamba-errors0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702816" comment="libsamba-hostconfig-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702817" comment="libsamba-hostconfig0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702818" comment="libsamba-hostconfig0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702819" comment="libsamba-passdb-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702820" comment="libsamba-passdb0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702821" comment="libsamba-passdb0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702822" comment="libsamba-policy-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702823" comment="libsamba-policy-python3-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702824" comment="libsamba-policy0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702825" comment="libsamba-policy0-python3-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702826" comment="libsamba-util-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702827" comment="libsamba-util0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702828" comment="libsamba-util0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702829" comment="libsamdb-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702830" comment="libsamdb0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702831" comment="libsamdb0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702832" comment="libsmbclient-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702833" comment="libsmbclient0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702834" comment="libsmbconf-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702835" comment="libsmbconf0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702836" comment="libsmbconf0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702837" comment="libsmbldap-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702838" comment="libsmbldap2-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702839" comment="libsmbldap2-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702840" comment="libtevent-util-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702841" comment="libtevent-util0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702842" comment="libtevent-util0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702843" comment="libwbclient-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702844" comment="libwbclient0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702845" comment="libwbclient0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702846" comment="samba-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702847" comment="samba-ad-dc-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702848" comment="samba-client-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702849" comment="samba-core-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702850" comment="samba-dsdb-modules-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702851" comment="samba-libs-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702852" comment="samba-libs-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702853" comment="samba-libs-python-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702854" comment="samba-libs-python3-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702855" comment="samba-python-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702856" comment="samba-python3-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702857" comment="samba-winbind-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702858" comment="samba-winbind-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139499" version="1" class="patch">
	<metadata>
		<title>Security update for mokutil (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198458" ref_url="https://bugzilla.suse.com/1198458" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2636-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011750.html" source="SUSE-SU"/>
		<description>
This update for mokutil fixes the following issues:

- Adds SBAT revocation support to mokutil. (bsc#1198458)

New options added (see manpage):

- mokutil --sbat

  List all entries in SBAT.

- mokutil --set-sbat-policy  (latest | previous | delete)
  To set the SBAT acceptance policy.

- mokutil --list-sbat-revocations

  To list the current SBAT revocations.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-03"/>
	<updated date="2022-08-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1198458">SUSE bug 1198458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692801" comment="mokutil-0.3.0-150100.8.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139500" version="1" class="patch">
	<metadata>
		<title>Security update for pcre2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1164384" ref_url="https://bugzilla.suse.com/1164384" source="BUGZILLA"/>
		<reference ref_id="1199235" ref_url="https://bugzilla.suse.com/1199235" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20454" ref_url="https://www.suse.com/security/cve/CVE-2019-20454/" source="CVE"/>
		<reference ref_id="CVE-2022-1587" ref_url="https://www.suse.com/security/cve/CVE-2022-1587/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011755.html" source="SUSE-SU"/>
		<description>
This update for pcre2 fixes the following issues:

- CVE-2019-20454: Fixed out-of-bounds read in JIT mode when \X is used in non-UTF mode (bsc#1164384).
- CVE-2022-1587: Fixed out-of-bounds read due to bug in recursions (bsc#1199235).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-03"/>
	<updated date="2022-08-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1164384">SUSE bug 1164384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199235">SUSE bug 1199235</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20454/">CVE-2019-20454</cve>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1587/">CVE-2022-1587</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009701287" comment="libpcre2-16-0-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701288" comment="libpcre2-32-0-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701289" comment="libpcre2-8-0-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701290" comment="libpcre2-posix2-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701291" comment="pcre2-devel-10.31-150000.3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139501" version="1" class="patch">
	<metadata>
		<title>Security update for u-boot (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1201214" ref_url="https://bugzilla.suse.com/1201214" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-34835" ref_url="https://www.suse.com/security/cve/CVE-2022-34835/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011796.html" source="SUSE-SU"/>
		<description>
This update for u-boot fixes the following issues:

- CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-04"/>
	<updated date="2022-08-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201214">SUSE bug 1201214</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34835/">CVE-2022-34835</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702160" comment="u-boot-rpi3-2019.01-150100.7.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702161" comment="u-boot-tools-2019.01-150100.7.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139502" version="1" class="patch">
	<metadata>
		<title>Security update for qpdf (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188514" ref_url="https://bugzilla.suse.com/1188514" source="BUGZILLA"/>
		<reference ref_id="1201830" ref_url="https://bugzilla.suse.com/1201830" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36978" ref_url="https://www.suse.com/security/cve/CVE-2021-36978/" source="CVE"/>
		<reference ref_id="CVE-2022-34503" ref_url="https://www.suse.com/security/cve/CVE-2022-34503/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011797.html" source="SUSE-SU"/>
		<description>
This update for qpdf fixes the following issues:

- CVE-2022-34503: Fixed a heap buffer overflow via the function QPDF:processXRefStream (bsc#1201830).
- CVE-2021-36978: Fixed heap-based buffer overflow in Pl_ASCII85Decoder::write (bsc#1188514).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-04"/>
	<updated date="2022-08-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188514">SUSE bug 1188514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201830">SUSE bug 1201830</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36978/">CVE-2021-36978</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-34503/">CVE-2022-34503</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702785" comment="libqpdf21-8.0.2-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702786" comment="qpdf-8.0.2-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702787" comment="qpdf-devel-8.0.2-150000.3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139503" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1201684" ref_url="https://bugzilla.suse.com/1201684" source="BUGZILLA"/>
		<reference ref_id="1201692" ref_url="https://bugzilla.suse.com/1201692" source="BUGZILLA"/>
		<reference ref_id="1201694" ref_url="https://bugzilla.suse.com/1201694" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21540" ref_url="https://www.suse.com/security/cve/CVE-2022-21540/" source="CVE"/>
		<reference ref_id="CVE-2022-21541" ref_url="https://www.suse.com/security/cve/CVE-2022-21541/" source="CVE"/>
		<reference ref_id="CVE-2022-34169" ref_url="https://www.suse.com/security/cve/CVE-2022-34169/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011827.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)

- CVE-2022-21540: Improve class compilation (bsc#1201694)
- CVE-2022-21541: Enhance MethodHandle invocations (bsc#1201692)
- CVE-2022-34169: Improve Xalan supports (bsc#1201684)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-09"/>
	<updated date="2022-08-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201684">SUSE bug 1201684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201692">SUSE bug 1201692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201694">SUSE bug 1201694</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21540/">CVE-2022-21540</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21541/">CVE-2022-21541</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34169/">CVE-2022-34169</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009701868" comment="java-11-openjdk-11.0.16.0-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701869" comment="java-11-openjdk-demo-11.0.16.0-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701870" comment="java-11-openjdk-devel-11.0.16.0-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701871" comment="java-11-openjdk-headless-11.0.16.0-150000.3.83.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139504" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1201980" ref_url="https://bugzilla.suse.com/1201980" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32792" ref_url="https://www.suse.com/security/cve/CVE-2022-32792/" source="CVE"/>
		<reference ref_id="CVE-2022-32816" ref_url="https://www.suse.com/security/cve/CVE-2022-32816/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011919.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.36.5 (bsc#1201980):
  - Add support for PAC proxy in the WebDriver implementation.
  - Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.

- Security fixes: 
  - CVE-2022-32792: Fixed processing maliciously crafted web content may lead to
    arbitrary code execution.
  - CVE-2022-32816: Fixed visiting a website that frames malicious content may lead to
    UI spoofing.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-16"/>
	<updated date="2022-08-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201980">SUSE bug 1201980</bugzilla>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32792/">CVE-2022-32792</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32816/">CVE-2022-32816</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009704384" comment="libjavascriptcoregtk-4_0-18-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704385" comment="libwebkit2gtk-4_0-37-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704386" comment="libwebkit2gtk3-lang-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704387" comment="typelib-1_0-JavaScriptCore-4_0-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704388" comment="typelib-1_0-WebKit2-4_0-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704389" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704390" comment="webkit2gtk-4_0-injected-bundles-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704391" comment="webkit2gtk3-devel-2.36.5-150000.3.109.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139505" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1195775" ref_url="https://bugzilla.suse.com/1195775" source="BUGZILLA"/>
		<reference ref_id="1195926" ref_url="https://bugzilla.suse.com/1195926" source="BUGZILLA"/>
		<reference ref_id="1198484" ref_url="https://bugzilla.suse.com/1198484" source="BUGZILLA"/>
		<reference ref_id="1198829" ref_url="https://bugzilla.suse.com/1198829" source="BUGZILLA"/>
		<reference ref_id="1200442" ref_url="https://bugzilla.suse.com/1200442" source="BUGZILLA"/>
		<reference ref_id="1200598" ref_url="https://bugzilla.suse.com/1200598" source="BUGZILLA"/>
		<reference ref_id="1200910" ref_url="https://bugzilla.suse.com/1200910" source="BUGZILLA"/>
		<reference ref_id="1201429" ref_url="https://bugzilla.suse.com/1201429" source="BUGZILLA"/>
		<reference ref_id="1201635" ref_url="https://bugzilla.suse.com/1201635" source="BUGZILLA"/>
		<reference ref_id="1201636" ref_url="https://bugzilla.suse.com/1201636" source="BUGZILLA"/>
		<reference ref_id="1201644" ref_url="https://bugzilla.suse.com/1201644" source="BUGZILLA"/>
		<reference ref_id="1201926" ref_url="https://bugzilla.suse.com/1201926" source="BUGZILLA"/>
		<reference ref_id="1201930" ref_url="https://bugzilla.suse.com/1201930" source="BUGZILLA"/>
		<reference ref_id="1201940" ref_url="https://bugzilla.suse.com/1201940" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36557" ref_url="https://www.suse.com/security/cve/CVE-2020-36557/" source="CVE"/>
		<reference ref_id="CVE-2020-36558" ref_url="https://www.suse.com/security/cve/CVE-2020-36558/" source="CVE"/>
		<reference ref_id="CVE-2021-33655" ref_url="https://www.suse.com/security/cve/CVE-2021-33655/" source="CVE"/>
		<reference ref_id="CVE-2021-33656" ref_url="https://www.suse.com/security/cve/CVE-2021-33656/" source="CVE"/>
		<reference ref_id="CVE-2022-1462" ref_url="https://www.suse.com/security/cve/CVE-2022-1462/" source="CVE"/>
		<reference ref_id="CVE-2022-20166" ref_url="https://www.suse.com/security/cve/CVE-2022-20166/" source="CVE"/>
		<reference ref_id="CVE-2022-36946" ref_url="https://www.suse.com/security/cve/CVE-2022-36946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011923.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-36557: Fixed race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys that could lead to a use-after-free (bnc#1201429).
- CVE-2020-36558: Fixed race condition involving VT_RESIZEX that could lead to a NULL pointer dereference and general protection fault (bnc#1200910).
- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2021-33656: Fixed out of bounds write with ioctl PIO_FONT (bnc#1201636).
- CVE-2022-1462: Fixed an out-of-bounds read flaw in the TeleTYpe subsystem (bnc#1198829).
- CVE-2022-20166: Fixed possible out of bounds write due to sprintf unsafety that could cause local escalation of privilege (bnc#1200598).
- CVE-2022-36946: Fixed incorrect packet truncation in nfqnl_mangle() that could lead to remote DoS (bnc#1201940).

The following non-security bugs were fixed:

- cifs: On cifs_reconnect, resolve the hostname again (bsc#1201926).
- cifs: Simplify reconnect code when dfs upcall is enabled (bsc#1201926).
- cifs: To match file servers, make sure the server hostname matches (bsc#1201926).
- cifs: fix memory leak of smb3_fs_context_dup::server_hostname (bsc#1201926).
- cifs: set a minimum of 120s for next dns resolution (bsc#1201926).
- cifs: use the expiry output of dns_query to schedule next resolution (bsc#1201926).
- kvm: emulate: Fix SETcc emulation function offsets with SLS (bsc#1201930).
- kvm: emulate: do not adjust size of fastop and setcc subroutines (bsc#1201930).
- rpm/*.spec.in: remove backtick usage
- rpm/constraints.in: skip SLOW_DISK workers for kernel-source
- rpm/kernel-obs-build.spec.in: Also depend on dracut-systemd (bsc#1195775)
- rpm/kernel-obs-build.spec.in: add systemd-initrd and terminfo dracut module (bsc#1195775)
- rpm/kernel-obs-build.spec.in: use default dracut modules (bsc#1195926, bsc#1198484)
- x86/entry: Remove skip_r11rcx (bsc#1201644).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-16"/>
	<updated date="2022-08-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195775">SUSE bug 1195775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195926">SUSE bug 1195926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198484">SUSE bug 1198484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198829">SUSE bug 1198829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200442">SUSE bug 1200442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200598">SUSE bug 1200598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200910">SUSE bug 1200910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201429">SUSE bug 1201429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201635">SUSE bug 1201635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201636">SUSE bug 1201636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201644">SUSE bug 1201644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201926">SUSE bug 1201926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201930">SUSE bug 1201930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201940">SUSE bug 1201940</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36557/">CVE-2020-36557</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36558/">CVE-2020-36558</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33655/">CVE-2021-33655</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33656/">CVE-2021-33656</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1462/">CVE-2022-1462</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-20166/">CVE-2022-20166</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36946/">CVE-2022-36946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009704392" comment="kernel-default-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704393" comment="kernel-default-base-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704394" comment="kernel-default-devel-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704395" comment="kernel-devel-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704396" comment="kernel-docs-4.12.14-150100.197.120.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704397" comment="kernel-macros-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704398" comment="kernel-obs-build-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704399" comment="kernel-source-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704400" comment="kernel-syms-4.12.14-150100.197.120.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139506" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1199223" ref_url="https://bugzilla.suse.com/1199223" source="BUGZILLA"/>
		<reference ref_id="1199224" ref_url="https://bugzilla.suse.com/1199224" source="BUGZILLA"/>
		<reference ref_id="1200735" ref_url="https://bugzilla.suse.com/1200735" source="BUGZILLA"/>
		<reference ref_id="1200737" ref_url="https://bugzilla.suse.com/1200737" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-27781" ref_url="https://www.suse.com/security/cve/CVE-2022-27781/" source="CVE"/>
		<reference ref_id="CVE-2022-27782" ref_url="https://www.suse.com/security/cve/CVE-2022-27782/" source="CVE"/>
		<reference ref_id="CVE-2022-32206" ref_url="https://www.suse.com/security/cve/CVE-2022-32206/" source="CVE"/>
		<reference ref_id="CVE-2022-32208" ref_url="https://www.suse.com/security/cve/CVE-2022-32208/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011931.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2022-27781: Fixed an issue where curl will get stuck in an infinite
  loop when trying to retrieve details about a TLS server's certificate chain (bnc#1199223).
- CVE-2022-27782: Fixed an issue where TLS and SSH connections would
  be reused even when a related option had been changed (bsc#1199224).
- CVE-2022-32206: Fixed an uncontrolled memory consumption issue caused
  by an unbounded number of compression layers (bsc#1200735).
- CVE-2022-32208: Fixed an incorrect message verification issue when
  performing FTP transfers using krb5 (bsc#1200737).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-17"/>
	<updated date="2022-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199223">SUSE bug 1199223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199224">SUSE bug 1199224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200735">SUSE bug 1200735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200737">SUSE bug 1200737</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-27781/">CVE-2022-27781</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-27782/">CVE-2022-27782</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-32206/">CVE-2022-32206</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32208/">CVE-2022-32208</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706283" comment="curl-7.60.0-150000.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706284" comment="libcurl-devel-7.60.0-150000.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706285" comment="libcurl4-7.60.0-150000.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706286" comment="libcurl4-32bit-7.60.0-150000.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139507" version="1" class="patch">
	<metadata>
		<title>Security update for gnutls (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1196167" ref_url="https://bugzilla.suse.com/1196167" source="BUGZILLA"/>
		<reference ref_id="1202020" ref_url="https://bugzilla.suse.com/1202020" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4209" ref_url="https://www.suse.com/security/cve/CVE-2021-4209/" source="CVE"/>
		<reference ref_id="CVE-2022-2509" ref_url="https://www.suse.com/security/cve/CVE-2022-2509/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011930.html" source="SUSE-SU"/>
		<description>
This update for gnutls fixes the following issues:

- CVE-2022-2509: Fixed a double free issue during PKCS7 verification (bsc#1202020).
- CVE-2021-4209: Fixed null pointer dereference in MD_UPDATE (bsc#1196167). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-17"/>
	<updated date="2022-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196167">SUSE bug 1196167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202020">SUSE bug 1202020</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4209/">CVE-2021-4209</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2509/">CVE-2022-2509</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009705681" comment="gnutls-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705682" comment="libgnutls-devel-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705683" comment="libgnutls30-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705684" comment="libgnutls30-32bit-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705685" comment="libgnutls30-hmac-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705686" comment="libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705687" comment="libgnutlsxx-devel-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705688" comment="libgnutlsxx28-3.6.7-150000.6.45.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139508" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1201727" ref_url="https://bugzilla.suse.com/1201727" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21233" ref_url="https://www.suse.com/security/cve/CVE-2022-21233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011932.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20220809 release (bsc#1201727):

- CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave (INTEL-SA-00657).
    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html

Other fixes:

- Update for functional issues.
    See also: https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update

- Updated Platforms:

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | B1       | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11
  | ADL            | C0       | 06-97-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-97-05/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | C0       | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12
  ------------------------------------------------------------------
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-17"/>
	<updated date="2022-08-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1201727">SUSE bug 1201727</bugzilla>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21233/">CVE-2022-21233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706922" comment="ucode-intel-20220809-150100.3.214.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139509" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194704" ref_url="https://bugzilla.suse.com/1194704" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0204" ref_url="https://www.suse.com/security/cve/CVE-2022-0204/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011940.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2022-0204: Fixed a buffer overflow in the implementation of the
  gatt protocol (bsc#1194704).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-18"/>
	<updated date="2022-08-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194704">SUSE bug 1194704</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-0204/">CVE-2022-0204</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706692" comment="bluez-5.48-150000.5.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706693" comment="bluez-devel-5.48-150000.5.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706694" comment="libbluetooth3-5.48-150000.5.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139510" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194859" ref_url="https://bugzilla.suse.com/1194859" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44142" ref_url="https://www.suse.com/security/cve/CVE-2021-44142/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010165.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:
	  
- CVE-2021-44142: Fixed out-of-Bound Read/Write on Samba vfs_fruit module. (bsc#1194859)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-01"/>
	<updated date="2022-02-01"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1194859">SUSE bug 1194859</bugzilla>
	<cve impact="critical" cvss3="9.9/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-44142/">CVE-2021-44142</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009665533" comment="libdcerpc-binding0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665534" comment="libdcerpc-binding0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665535" comment="libdcerpc-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665536" comment="libdcerpc-samr-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665537" comment="libdcerpc-samr0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665538" comment="libdcerpc0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665539" comment="libdcerpc0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665540" comment="libndr-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665541" comment="libndr-krb5pac-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665542" comment="libndr-krb5pac0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665543" comment="libndr-krb5pac0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665544" comment="libndr-nbt-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665545" comment="libndr-nbt0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665546" comment="libndr-nbt0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665547" comment="libndr-standard-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665548" comment="libndr-standard0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665549" comment="libndr-standard0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665550" comment="libndr0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665551" comment="libndr0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665552" comment="libnetapi-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665553" comment="libnetapi0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665554" comment="libnetapi0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665555" comment="libsamba-credentials-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665556" comment="libsamba-credentials0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665557" comment="libsamba-credentials0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665558" comment="libsamba-errors-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665559" comment="libsamba-errors0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665560" comment="libsamba-errors0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665561" comment="libsamba-hostconfig-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665562" comment="libsamba-hostconfig0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665563" comment="libsamba-hostconfig0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665564" comment="libsamba-passdb-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665565" comment="libsamba-passdb0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665566" comment="libsamba-passdb0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665567" comment="libsamba-policy-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665568" comment="libsamba-policy-python3-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665569" comment="libsamba-policy0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665570" comment="libsamba-policy0-python3-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665571" comment="libsamba-util-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665572" comment="libsamba-util0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665573" comment="libsamba-util0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665574" comment="libsamdb-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665575" comment="libsamdb0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665576" comment="libsamdb0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665577" comment="libsmbclient-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665578" comment="libsmbclient0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665579" comment="libsmbconf-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665580" comment="libsmbconf0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665581" comment="libsmbconf0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665582" comment="libsmbldap-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665583" comment="libsmbldap2-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665584" comment="libsmbldap2-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665585" comment="libtevent-util-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665586" comment="libtevent-util0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665587" comment="libtevent-util0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665588" comment="libwbclient-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665589" comment="libwbclient0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665590" comment="libwbclient0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665591" comment="samba-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665592" comment="samba-ad-dc-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665593" comment="samba-client-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665594" comment="samba-core-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665595" comment="samba-dsdb-modules-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665596" comment="samba-libs-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665597" comment="samba-libs-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665598" comment="samba-libs-python-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665599" comment="samba-libs-python3-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665600" comment="samba-python-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665601" comment="samba-python3-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665602" comment="samba-winbind-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665603" comment="samba-winbind-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139511" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1188917" ref_url="https://bugzilla.suse.com/1188917" source="BUGZILLA"/>
		<reference ref_id="1189368" ref_url="https://bugzilla.suse.com/1189368" source="BUGZILLA"/>
		<reference ref_id="1191601" ref_url="https://bugzilla.suse.com/1191601" source="BUGZILLA"/>
		<reference ref_id="1191602" ref_url="https://bugzilla.suse.com/1191602" source="BUGZILLA"/>
		<reference ref_id="1201325" ref_url="https://bugzilla.suse.com/1201325" source="BUGZILLA"/>
		<reference ref_id="1201326" ref_url="https://bugzilla.suse.com/1201326" source="BUGZILLA"/>
		<reference ref_id="1201327" ref_url="https://bugzilla.suse.com/1201327" source="BUGZILLA"/>
		<reference ref_id="1201328" ref_url="https://bugzilla.suse.com/1201328" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22930" ref_url="https://www.suse.com/security/cve/CVE-2021-22930/" source="CVE"/>
		<reference ref_id="CVE-2021-22940" ref_url="https://www.suse.com/security/cve/CVE-2021-22940/" source="CVE"/>
		<reference ref_id="CVE-2021-22959" ref_url="https://www.suse.com/security/cve/CVE-2021-22959/" source="CVE"/>
		<reference ref_id="CVE-2021-22960" ref_url="https://www.suse.com/security/cve/CVE-2021-22960/" source="CVE"/>
		<reference ref_id="CVE-2022-32212" ref_url="https://www.suse.com/security/cve/CVE-2022-32212/" source="CVE"/>
		<reference ref_id="CVE-2022-32213" ref_url="https://www.suse.com/security/cve/CVE-2022-32213/" source="CVE"/>
		<reference ref_id="CVE-2022-32214" ref_url="https://www.suse.com/security/cve/CVE-2022-32214/" source="CVE"/>
		<reference ref_id="CVE-2022-32215" ref_url="https://www.suse.com/security/cve/CVE-2022-32215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011954.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- CVE-2021-22930, CVE-2021-22940: Fixed two memory corruption issues
  during HTTP/2 stream cancellation (bsc#1188917, bsc#1189368).
- CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2021-22960,
  CVE-2021-22959: Fixed multiple HTTP request smuggling issues in
  the underlying HTTP parser (bsc#1201325, bsc#1201326, bsc#1201327, 
  bsc#1191602, bsc#1191601).
- CVE-2022-32212: Fixed a DNS rebinding issue caused by improper IPv4
  validation (bsc#1201328).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-19"/>
	<updated date="2022-08-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188917">SUSE bug 1188917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189368">SUSE bug 1189368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191601">SUSE bug 1191601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191602">SUSE bug 1191602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201325">SUSE bug 1201325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201326">SUSE bug 1201326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201327">SUSE bug 1201327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201328">SUSE bug 1201328</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22930/">CVE-2021-22930</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22940/">CVE-2021-22940</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-22959/">CVE-2021-22959</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-22960/">CVE-2021-22960</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32212/">CVE-2022-32212</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32213/">CVE-2022-32213</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-32214/">CVE-2022-32214</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-32215/">CVE-2022-32215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706128" comment="nodejs10-10.24.1-150000.1.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706129" comment="nodejs10-devel-10.24.1-150000.1.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706130" comment="nodejs10-docs-10.24.1-150000.1.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706131" comment="npm10-10.24.1-150000.1.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139512" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1193227" ref_url="https://bugzilla.suse.com/1193227" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8922" ref_url="https://www.suse.com/security/cve/CVE-2019-8922/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011959.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2019-8922: Fixed a buffer overflow in the implementation of the
  Service Discovery Protocol (bsc#1193227).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-22"/>
	<updated date="2022-08-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193227">SUSE bug 1193227</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-8922/">CVE-2019-8922</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707112" comment="bluez-5.48-150000.5.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707113" comment="bluez-devel-5.48-150000.5.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707114" comment="libbluetooth3-5.48-150000.5.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139513" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1179945" ref_url="https://bugzilla.suse.com/1179945" source="BUGZILLA"/>
		<reference ref_id="1183168" ref_url="https://bugzilla.suse.com/1183168" source="BUGZILLA"/>
		<reference ref_id="1185952" ref_url="https://bugzilla.suse.com/1185952" source="BUGZILLA"/>
		<reference ref_id="1187751" ref_url="https://bugzilla.suse.com/1187751" source="BUGZILLA"/>
		<reference ref_id="1190177" ref_url="https://bugzilla.suse.com/1190177" source="BUGZILLA"/>
		<reference ref_id="1190740" ref_url="https://bugzilla.suse.com/1190740" source="BUGZILLA"/>
		<reference ref_id="1192516" ref_url="https://bugzilla.suse.com/1192516" source="BUGZILLA"/>
		<reference ref_id="1195680" ref_url="https://bugzilla.suse.com/1195680" source="BUGZILLA"/>
		<reference ref_id="1199475" ref_url="https://bugzilla.suse.com/1199475" source="BUGZILLA"/>
		<reference ref_id="1202368" ref_url="https://bugzilla.suse.com/1202368" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23214" ref_url="https://www.suse.com/security/cve/CVE-2021-23214/" source="CVE"/>
		<reference ref_id="CVE-2021-23222" ref_url="https://www.suse.com/security/cve/CVE-2021-23222/" source="CVE"/>
		<reference ref_id="CVE-2022-1552" ref_url="https://www.suse.com/security/cve/CVE-2022-1552/" source="CVE"/>
		<reference ref_id="CVE-2022-2625" ref_url="https://www.suse.com/security/cve/CVE-2022-2625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011992.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

- Upgrade to 10.22:
- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).

- Upgrade to 10.21:
- CVE-2022-1552: Confined additional operations within 'security restricted operation' sandboxes (bsc#1199475).

- Upgrade to 10.20 (bsc#1195680)
- Add constraints file with 12GB of memory for s390x as a workaround (boo#1190740)

- Upgrade to version 10.19 (bsc#1192516):
- CVE-2021-23214: Made the server reject extraneous data after an SSL or GSS encryption handshake
- CVE-2021-23222: Made libpq reject extraneous data after an SSL or GSS encryption handshake

- Fix for build with llvm12 on s390x. (bsc#1185952)
- Re-enable 'icu' for PostgreSQL 10. (bsc#1179945)
- Add postgresqlXX-server-devel as a dependency for postgresql13-server-devel. (bsc#1187751)
- Upgrade to version 10.18. (bsc#1190177)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-25"/>
	<updated date="2022-08-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179945">SUSE bug 1179945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183168">SUSE bug 1183168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185952">SUSE bug 1185952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187751">SUSE bug 1187751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190177">SUSE bug 1190177</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190740">SUSE bug 1190740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192516">SUSE bug 1192516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195680">SUSE bug 1195680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199475">SUSE bug 1199475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202368">SUSE bug 1202368</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23214/">CVE-2021-23214</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23222/">CVE-2021-23222</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1552/">CVE-2022-1552</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2625/">CVE-2022-2625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707103" comment="postgresql-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707104" comment="postgresql-contrib-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707105" comment="postgresql-devel-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707106" comment="postgresql-docs-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707107" comment="postgresql-plperl-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707108" comment="postgresql-plpython-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707109" comment="postgresql-pltcl-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707110" comment="postgresql-server-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707111" comment="postgresql-server-devel-12.0.1-150000.8.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139514" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1202368" ref_url="https://bugzilla.suse.com/1202368" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2625" ref_url="https://www.suse.com/security/cve/CVE-2022-2625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2946-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012011.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

- Upgrade to 10.22:
- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202368">SUSE bug 1202368</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2625/">CVE-2022-2625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706914" comment="postgresql10-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706915" comment="postgresql10-contrib-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706916" comment="postgresql10-devel-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706917" comment="postgresql10-docs-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706918" comment="postgresql10-plperl-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706919" comment="postgresql10-plpython-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706920" comment="postgresql10-pltcl-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706921" comment="postgresql10-server-10.22-150100.8.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139515" version="1" class="patch">
	<metadata>
		<title>Security update for zlib (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1202175" ref_url="https://bugzilla.suse.com/1202175" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-37434" ref_url="https://www.suse.com/security/cve/CVE-2022-37434/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012012.html" source="SUSE-SU"/>
		<description>
This update for zlib fixes the following issues:

- CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field (bsc#1202175).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202175">SUSE bug 1202175</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-37434/">CVE-2022-37434</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706290" comment="libminizip1-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706291" comment="libz1-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706232" comment="libz1-32bit-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706292" comment="minizip-devel-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706293" comment="zlib-devel-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706240" comment="zlib-devel-32bit-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706294" comment="zlib-devel-static-1.2.11-150000.3.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139516" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1179945" ref_url="https://bugzilla.suse.com/1179945" source="BUGZILLA"/>
		<reference ref_id="1183168" ref_url="https://bugzilla.suse.com/1183168" source="BUGZILLA"/>
		<reference ref_id="1185924" ref_url="https://bugzilla.suse.com/1185924" source="BUGZILLA"/>
		<reference ref_id="1185925" ref_url="https://bugzilla.suse.com/1185925" source="BUGZILLA"/>
		<reference ref_id="1185926" ref_url="https://bugzilla.suse.com/1185926" source="BUGZILLA"/>
		<reference ref_id="1185952" ref_url="https://bugzilla.suse.com/1185952" source="BUGZILLA"/>
		<reference ref_id="1187751" ref_url="https://bugzilla.suse.com/1187751" source="BUGZILLA"/>
		<reference ref_id="1189748" ref_url="https://bugzilla.suse.com/1189748" source="BUGZILLA"/>
		<reference ref_id="1190740" ref_url="https://bugzilla.suse.com/1190740" source="BUGZILLA"/>
		<reference ref_id="1192516" ref_url="https://bugzilla.suse.com/1192516" source="BUGZILLA"/>
		<reference ref_id="1195680" ref_url="https://bugzilla.suse.com/1195680" source="BUGZILLA"/>
		<reference ref_id="1198166" ref_url="https://bugzilla.suse.com/1198166" source="BUGZILLA"/>
		<reference ref_id="1199475" ref_url="https://bugzilla.suse.com/1199475" source="BUGZILLA"/>
		<reference ref_id="1202368" ref_url="https://bugzilla.suse.com/1202368" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23214" ref_url="https://www.suse.com/security/cve/CVE-2021-23214/" source="CVE"/>
		<reference ref_id="CVE-2021-23222" ref_url="https://www.suse.com/security/cve/CVE-2021-23222/" source="CVE"/>
		<reference ref_id="CVE-2021-32027" ref_url="https://www.suse.com/security/cve/CVE-2021-32027/" source="CVE"/>
		<reference ref_id="CVE-2021-32028" ref_url="https://www.suse.com/security/cve/CVE-2021-32028/" source="CVE"/>
		<reference ref_id="CVE-2021-32029" ref_url="https://www.suse.com/security/cve/CVE-2021-32029/" source="CVE"/>
		<reference ref_id="CVE-2021-3677" ref_url="https://www.suse.com/security/cve/CVE-2021-3677/" source="CVE"/>
		<reference ref_id="CVE-2022-1552" ref_url="https://www.suse.com/security/cve/CVE-2022-1552/" source="CVE"/>
		<reference ref_id="CVE-2022-2625" ref_url="https://www.suse.com/security/cve/CVE-2022-2625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2958-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012016.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

- Upgrade to 12.12:
- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).

- Upgrade to 12.11:
- CVE-2022-1552: Confined additional operations within 'security restricted operation' sandboxes (bsc#1199475).

- Upgrade to 12.10 (bsc#1195680)
- Add constraints file with 12GB of memory for s390x as a workaround (boo#1190740)

- Upgrade to version 12.9 (bsc#1192516):
- CVE-2021-23214: Made the server reject extraneous data after an SSL or GSS encryption handshake
- CVE-2021-23222: Made libpq reject extraneous data after an SSL or GSS encryption handshake
    
- Upgrade to version 12.8:
- CVE-2021-3677: Fixed memory disclosure in certain queries (bsc#1189748).

- Upgrade to version 12.7:
- CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924).
- CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925).
- CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING 'pg_psql_temporary_savepoint' does not exist (bsc#1185926).

- Fixed build with llvm12 on s390x (bsc#1185952).
- Re-enabled icu for PostgreSQL 10 (bsc#1179945).
- Made the dependency of postgresqlXX-server-devel on llvm and clang optional (bsc#1187751).
- llvm12 breaks PostgreSQL 11 and 12 on s390x. Use llvm11 as a workaround (bsc#1185952).
- Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179945">SUSE bug 1179945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183168">SUSE bug 1183168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185924">SUSE bug 1185924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185925">SUSE bug 1185925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185926">SUSE bug 1185926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185952">SUSE bug 1185952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187751">SUSE bug 1187751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189748">SUSE bug 1189748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190740">SUSE bug 1190740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192516">SUSE bug 1192516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195680">SUSE bug 1195680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198166">SUSE bug 1198166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199475">SUSE bug 1199475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202368">SUSE bug 1202368</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23214/">CVE-2021-23214</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23222/">CVE-2021-23222</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32027/">CVE-2021-32027</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-32028/">CVE-2021-32028</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-32029/">CVE-2021-32029</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3677/">CVE-2021-3677</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1552/">CVE-2022-1552</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2625/">CVE-2022-2625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707115" comment="libecpg6-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707116" comment="libpq5-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707117" comment="libpq5-32bit-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707118" comment="postgresql12-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707119" comment="postgresql12-contrib-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707120" comment="postgresql12-devel-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707121" comment="postgresql12-docs-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707122" comment="postgresql12-plperl-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707123" comment="postgresql12-plpython-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707124" comment="postgresql12-pltcl-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707125" comment="postgresql12-server-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707126" comment="postgresql12-server-devel-12.12-150100.3.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139517" version="1" class="patch">
	<metadata>
		<title>Security update for rsync (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1201840" ref_url="https://bugzilla.suse.com/1201840" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29154" ref_url="https://www.suse.com/security/cve/CVE-2022-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012015.html" source="SUSE-SU"/>
		<description>
This update for rsync fixes the following issues:

- CVE-2022-29154: Fixed an arbitrary file write issue that could be
  triggered by a malicious remote server (bsc#1201840).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201840">SUSE bug 1201840</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29154/">CVE-2022-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706912" comment="rsync-3.1.3-150000.4.13.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139518" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1202645" ref_url="https://bugzilla.suse.com/1202645" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-38472" ref_url="https://www.suse.com/security/cve/CVE-2022-38472/" source="CVE"/>
		<reference ref_id="CVE-2022-38473" ref_url="https://www.suse.com/security/cve/CVE-2022-38473/" source="CVE"/>
		<reference ref_id="CVE-2022-38478" ref_url="https://www.suse.com/security/cve/CVE-2022-38478/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012051.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.13.0 ESR (bsc#1202645):

- CVE-2022-38472: Fixed a potential address bar spoofing via XSLT error handling.
- CVE-2022-38473: Fixed an issue where cross-origin XSLT documents could inherit the parent's permissions.
- CVE-2022-38478: Fixed various memory safety issues.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202645">SUSE bug 1202645</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38472/">CVE-2022-38472</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38473/">CVE-2022-38473</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38478/">CVE-2022-38478</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707789" comment="MozillaFirefox-91.13.0-150000.150.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707790" comment="MozillaFirefox-devel-91.13.0-150000.150.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707791" comment="MozillaFirefox-translations-common-91.13.0-150000.150.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707792" comment="MozillaFirefox-translations-other-91.13.0-150000.150.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139519" version="1" class="patch">
	<metadata>
		<title>Security update for open-vm-tools (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1202657" ref_url="https://bugzilla.suse.com/1202657" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31676" ref_url="https://www.suse.com/security/cve/CVE-2022-31676/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2986-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012049.html" source="SUSE-SU"/>
		<description>
This update for open-vm-tools fixes the following issues:

- CVE-2022-31676: Fixed an issue that could allow unprivileged users
  inside a virtual machine to escalate privileges (bsc#1202657).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202657">SUSE bug 1202657</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31676/">CVE-2022-31676</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707877" comment="libvmtools-devel-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707878" comment="libvmtools0-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707879" comment="open-vm-tools-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707880" comment="open-vm-tools-desktop-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707881" comment="open-vm-tools-sdmp-11.3.5-150100.4.37.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139520" version="1" class="patch">
	<metadata>
		<title>Security update for flatpak (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1155688" ref_url="https://bugzilla.suse.com/1155688" source="BUGZILLA"/>
		<reference ref_id="1180996" ref_url="https://bugzilla.suse.com/1180996" source="BUGZILLA"/>
		<reference ref_id="1183459" ref_url="https://bugzilla.suse.com/1183459" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21261" ref_url="https://www.suse.com/security/cve/CVE-2021-21261/" source="CVE"/>
		<reference ref_id="CVE-2021-21381" ref_url="https://www.suse.com/security/cve/CVE-2021-21381/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012061.html" source="SUSE-SU"/>
		<description>
This update for flatpak fixes the following issues:

- CVE-2021-21381: Fixed an issue where a sandboxed application could
  read and write arbitrary host files via special tokens in the
  .desktop file (bsc#1183459).
- CVE-2021-21261: Fixed a sandbox escape issue via the flatpak-portal
  service (bsc#1180996).

Non-security fixes:

- openh264 extension needs to use 'extra_data'. (bsc#1155688)
  The update will provide the support for extra_data' in extensions
  and will provide a list of versions that are supported. This will
  be useful for the extra_data for extensions because that will require
  it to say that it is supported for version &gt; 1.2.5 in the 1.2 series 
  and &gt; 1.4.2 otherwise.
  The update  will includes fixes for a segfault in the function that 
  lists the installed references (flatpak_installation_list_installed_refs).
  When an appstream update is cancelled while downloading icons, the update
  will show a proper fail. Before this fix the next update attempt will see
  an up-to-date timestamp, think everyhing is ok and not download the missing icons.
  The update will introduce checks in the OCI (Open Container Initiative format)
  updates for validating if it is gpg verified.
  The update will install the required runtime for the installed extension.
  The update will prevent a crash if the 'FlatpakDir' can't ensure it has a repo configured.
  The update will prevent the removal of local extensions considered remote and not locally related.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1155688">SUSE bug 1155688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180996">SUSE bug 1180996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183459">SUSE bug 1183459</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21261/">CVE-2021-21261</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21381/">CVE-2021-21381</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708034" comment="flatpak-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708035" comment="flatpak-devel-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708036" comment="flatpak-zsh-completion-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708037" comment="libflatpak0-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708038" comment="typelib-1_0-Flatpak-1_0-1.2.3-150100.4.5.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139521" version="1" class="patch">
	<metadata>
		<title>Security update for libtirpc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198752" ref_url="https://bugzilla.suse.com/1198752" source="BUGZILLA"/>
		<reference ref_id="1200800" ref_url="https://bugzilla.suse.com/1200800" source="BUGZILLA"/>
		<reference ref_id="1201680" ref_url="https://bugzilla.suse.com/1201680" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46828" ref_url="https://www.suse.com/security/cve/CVE-2021-46828/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2991-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012060.html" source="SUSE-SU"/>
		<description>
This update for libtirpc fixes the following issues:

- CVE-2021-46828: Fixed an uncontrolled file descriptor consumption,
  which could be exploited by remote attackers to prevent applications
  using the library from accepting new connections (bsc#1201680).

Non-security fixes:

- Exclude ipv6 addresses in client protocol version 2 code (bsc#1200800)
- Fix memory leak in params.r_addr assignement (bsc#1198752)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198752">SUSE bug 1198752</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200800">SUSE bug 1200800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201680">SUSE bug 1201680</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46828/">CVE-2021-46828</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707722" comment="libtirpc-devel-1.0.2-150000.3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707723" comment="libtirpc-netconfig-1.0.2-150000.3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707724" comment="libtirpc3-1.0.2-150000.3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707725" comment="libtirpc3-32bit-1.0.2-150000.3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139522" version="1" class="patch">
	<metadata>
		<title>Security update for python-pyxdg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1137627" ref_url="https://bugzilla.suse.com/1137627" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12761" ref_url="https://www.suse.com/security/cve/CVE-2019-12761/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012064.html" source="SUSE-SU"/>
		<description>
This update for python-pyxdg fixes the following issues:

- CVE-2019-12761: Fixed a code injection issue in Category elements of
  a Menu XML (bsc#1137627).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-02"/>
	<updated date="2022-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1137627">SUSE bug 1137627</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12761/">CVE-2019-12761</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708033" comment="python2-pyxdg-0.25-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708041" comment="python3-pyxdg-0.25-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139523" version="1" class="patch">
	<metadata>
		<title>Security update for python-bottle (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1200286" ref_url="https://bugzilla.suse.com/1200286" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31799" ref_url="https://www.suse.com/security/cve/CVE-2022-31799/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012109.html" source="SUSE-SU"/>
		<description>
This update for python-bottle fixes the following issues:

- CVE-2022-31799: Fixed an error mishandling issue that could lead to
  remote denial of service (bsc#1200286).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-06"/>
	<updated date="2022-09-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200286">SUSE bug 1200286</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-31799/">CVE-2022-31799</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707087" comment="python2-bottle-0.12.13-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707069" comment="python3-bottle-0.12.13-150000.3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139524" version="1" class="patch">
	<metadata>
		<title>Security update for gpg2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1201225" ref_url="https://bugzilla.suse.com/1201225" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-34903" ref_url="https://www.suse.com/security/cve/CVE-2022-34903/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3144-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012160.html" source="SUSE-SU"/>
		<description>
This update for gpg2 fixes the following issues:

- CVE-2022-34903: Fixed a potential signature forgery via injection
  into the status line when certain unusual conditions are met (bsc#1201225).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-07"/>
	<updated date="2022-09-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201225">SUSE bug 1201225</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34903/">CVE-2022-34903</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707793" comment="gpg2-2.2.5-150000.4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707794" comment="gpg2-lang-2.2.5-150000.4.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139525" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1200270" ref_url="https://bugzilla.suse.com/1200270" source="BUGZILLA"/>
		<reference ref_id="1200697" ref_url="https://bugzilla.suse.com/1200697" source="BUGZILLA"/>
		<reference ref_id="1200698" ref_url="https://bugzilla.suse.com/1200698" source="BUGZILLA"/>
		<reference ref_id="1200700" ref_url="https://bugzilla.suse.com/1200700" source="BUGZILLA"/>
		<reference ref_id="1200701" ref_url="https://bugzilla.suse.com/1200701" source="BUGZILLA"/>
		<reference ref_id="1200732" ref_url="https://bugzilla.suse.com/1200732" source="BUGZILLA"/>
		<reference ref_id="1200884" ref_url="https://bugzilla.suse.com/1200884" source="BUGZILLA"/>
		<reference ref_id="1200902" ref_url="https://bugzilla.suse.com/1200902" source="BUGZILLA"/>
		<reference ref_id="1200903" ref_url="https://bugzilla.suse.com/1200903" source="BUGZILLA"/>
		<reference ref_id="1200904" ref_url="https://bugzilla.suse.com/1200904" source="BUGZILLA"/>
		<reference ref_id="1201132" ref_url="https://bugzilla.suse.com/1201132" source="BUGZILLA"/>
		<reference ref_id="1201133" ref_url="https://bugzilla.suse.com/1201133" source="BUGZILLA"/>
		<reference ref_id="1201134" ref_url="https://bugzilla.suse.com/1201134" source="BUGZILLA"/>
		<reference ref_id="1201135" ref_url="https://bugzilla.suse.com/1201135" source="BUGZILLA"/>
		<reference ref_id="1201136" ref_url="https://bugzilla.suse.com/1201136" source="BUGZILLA"/>
		<reference ref_id="1201150" ref_url="https://bugzilla.suse.com/1201150" source="BUGZILLA"/>
		<reference ref_id="1201151" ref_url="https://bugzilla.suse.com/1201151" source="BUGZILLA"/>
		<reference ref_id="1201152" ref_url="https://bugzilla.suse.com/1201152" source="BUGZILLA"/>
		<reference ref_id="1201153" ref_url="https://bugzilla.suse.com/1201153" source="BUGZILLA"/>
		<reference ref_id="1201154" ref_url="https://bugzilla.suse.com/1201154" source="BUGZILLA"/>
		<reference ref_id="1201155" ref_url="https://bugzilla.suse.com/1201155" source="BUGZILLA"/>
		<reference ref_id="1201249" ref_url="https://bugzilla.suse.com/1201249" source="BUGZILLA"/>
		<reference ref_id="1201356" ref_url="https://bugzilla.suse.com/1201356" source="BUGZILLA"/>
		<reference ref_id="1201359" ref_url="https://bugzilla.suse.com/1201359" source="BUGZILLA"/>
		<reference ref_id="1201363" ref_url="https://bugzilla.suse.com/1201363" source="BUGZILLA"/>
		<reference ref_id="1201620" ref_url="https://bugzilla.suse.com/1201620" source="BUGZILLA"/>
		<reference ref_id="1201863" ref_url="https://bugzilla.suse.com/1201863" source="BUGZILLA"/>
		<reference ref_id="1202046" ref_url="https://bugzilla.suse.com/1202046" source="BUGZILLA"/>
		<reference ref_id="1202049" ref_url="https://bugzilla.suse.com/1202049" source="BUGZILLA"/>
		<reference ref_id="1202050" ref_url="https://bugzilla.suse.com/1202050" source="BUGZILLA"/>
		<reference ref_id="1202051" ref_url="https://bugzilla.suse.com/1202051" source="BUGZILLA"/>
		<reference ref_id="1202414" ref_url="https://bugzilla.suse.com/1202414" source="BUGZILLA"/>
		<reference ref_id="1202420" ref_url="https://bugzilla.suse.com/1202420" source="BUGZILLA"/>
		<reference ref_id="1202421" ref_url="https://bugzilla.suse.com/1202421" source="BUGZILLA"/>
		<reference ref_id="1202511" ref_url="https://bugzilla.suse.com/1202511" source="BUGZILLA"/>
		<reference ref_id="1202512" ref_url="https://bugzilla.suse.com/1202512" source="BUGZILLA"/>
		<reference ref_id="1202515" ref_url="https://bugzilla.suse.com/1202515" source="BUGZILLA"/>
		<reference ref_id="1202552" ref_url="https://bugzilla.suse.com/1202552" source="BUGZILLA"/>
		<reference ref_id="1202599" ref_url="https://bugzilla.suse.com/1202599" source="BUGZILLA"/>
		<reference ref_id="1202687" ref_url="https://bugzilla.suse.com/1202687" source="BUGZILLA"/>
		<reference ref_id="1202689" ref_url="https://bugzilla.suse.com/1202689" source="BUGZILLA"/>
		<reference ref_id="1202862" ref_url="https://bugzilla.suse.com/1202862" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1720" ref_url="https://www.suse.com/security/cve/CVE-2022-1720/" source="CVE"/>
		<reference ref_id="CVE-2022-1968" ref_url="https://www.suse.com/security/cve/CVE-2022-1968/" source="CVE"/>
		<reference ref_id="CVE-2022-2124" ref_url="https://www.suse.com/security/cve/CVE-2022-2124/" source="CVE"/>
		<reference ref_id="CVE-2022-2125" ref_url="https://www.suse.com/security/cve/CVE-2022-2125/" source="CVE"/>
		<reference ref_id="CVE-2022-2126" ref_url="https://www.suse.com/security/cve/CVE-2022-2126/" source="CVE"/>
		<reference ref_id="CVE-2022-2129" ref_url="https://www.suse.com/security/cve/CVE-2022-2129/" source="CVE"/>
		<reference ref_id="CVE-2022-2175" ref_url="https://www.suse.com/security/cve/CVE-2022-2175/" source="CVE"/>
		<reference ref_id="CVE-2022-2182" ref_url="https://www.suse.com/security/cve/CVE-2022-2182/" source="CVE"/>
		<reference ref_id="CVE-2022-2183" ref_url="https://www.suse.com/security/cve/CVE-2022-2183/" source="CVE"/>
		<reference ref_id="CVE-2022-2206" ref_url="https://www.suse.com/security/cve/CVE-2022-2206/" source="CVE"/>
		<reference ref_id="CVE-2022-2207" ref_url="https://www.suse.com/security/cve/CVE-2022-2207/" source="CVE"/>
		<reference ref_id="CVE-2022-2208" ref_url="https://www.suse.com/security/cve/CVE-2022-2208/" source="CVE"/>
		<reference ref_id="CVE-2022-2210" ref_url="https://www.suse.com/security/cve/CVE-2022-2210/" source="CVE"/>
		<reference ref_id="CVE-2022-2231" ref_url="https://www.suse.com/security/cve/CVE-2022-2231/" source="CVE"/>
		<reference ref_id="CVE-2022-2257" ref_url="https://www.suse.com/security/cve/CVE-2022-2257/" source="CVE"/>
		<reference ref_id="CVE-2022-2264" ref_url="https://www.suse.com/security/cve/CVE-2022-2264/" source="CVE"/>
		<reference ref_id="CVE-2022-2284" ref_url="https://www.suse.com/security/cve/CVE-2022-2284/" source="CVE"/>
		<reference ref_id="CVE-2022-2285" ref_url="https://www.suse.com/security/cve/CVE-2022-2285/" source="CVE"/>
		<reference ref_id="CVE-2022-2286" ref_url="https://www.suse.com/security/cve/CVE-2022-2286/" source="CVE"/>
		<reference ref_id="CVE-2022-2287" ref_url="https://www.suse.com/security/cve/CVE-2022-2287/" source="CVE"/>
		<reference ref_id="CVE-2022-2304" ref_url="https://www.suse.com/security/cve/CVE-2022-2304/" source="CVE"/>
		<reference ref_id="CVE-2022-2343" ref_url="https://www.suse.com/security/cve/CVE-2022-2343/" source="CVE"/>
		<reference ref_id="CVE-2022-2344" ref_url="https://www.suse.com/security/cve/CVE-2022-2344/" source="CVE"/>
		<reference ref_id="CVE-2022-2345" ref_url="https://www.suse.com/security/cve/CVE-2022-2345/" source="CVE"/>
		<reference ref_id="CVE-2022-2522" ref_url="https://www.suse.com/security/cve/CVE-2022-2522/" source="CVE"/>
		<reference ref_id="CVE-2022-2571" ref_url="https://www.suse.com/security/cve/CVE-2022-2571/" source="CVE"/>
		<reference ref_id="CVE-2022-2580" ref_url="https://www.suse.com/security/cve/CVE-2022-2580/" source="CVE"/>
		<reference ref_id="CVE-2022-2581" ref_url="https://www.suse.com/security/cve/CVE-2022-2581/" source="CVE"/>
		<reference ref_id="CVE-2022-2598" ref_url="https://www.suse.com/security/cve/CVE-2022-2598/" source="CVE"/>
		<reference ref_id="CVE-2022-2816" ref_url="https://www.suse.com/security/cve/CVE-2022-2816/" source="CVE"/>
		<reference ref_id="CVE-2022-2817" ref_url="https://www.suse.com/security/cve/CVE-2022-2817/" source="CVE"/>
		<reference ref_id="CVE-2022-2819" ref_url="https://www.suse.com/security/cve/CVE-2022-2819/" source="CVE"/>
		<reference ref_id="CVE-2022-2845" ref_url="https://www.suse.com/security/cve/CVE-2022-2845/" source="CVE"/>
		<reference ref_id="CVE-2022-2849" ref_url="https://www.suse.com/security/cve/CVE-2022-2849/" source="CVE"/>
		<reference ref_id="CVE-2022-2862" ref_url="https://www.suse.com/security/cve/CVE-2022-2862/" source="CVE"/>
		<reference ref_id="CVE-2022-2874" ref_url="https://www.suse.com/security/cve/CVE-2022-2874/" source="CVE"/>
		<reference ref_id="CVE-2022-2889" ref_url="https://www.suse.com/security/cve/CVE-2022-2889/" source="CVE"/>
		<reference ref_id="CVE-2022-2923" ref_url="https://www.suse.com/security/cve/CVE-2022-2923/" source="CVE"/>
		<reference ref_id="CVE-2022-2946" ref_url="https://www.suse.com/security/cve/CVE-2022-2946/" source="CVE"/>
		<reference ref_id="CVE-2022-3016" ref_url="https://www.suse.com/security/cve/CVE-2022-3016/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3229-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012199.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

Updated to version 9.0 with patch level 0313:

- CVE-2022-2183: Fixed out-of-bounds read through get_lisp_indent() (bsc#1200902).
- CVE-2022-2182: Fixed heap-based buffer overflow through parse_cmd_address() (bsc#1200903).
- CVE-2022-2175: Fixed buffer over-read through cmdline_insert_reg() (bsc#1200904).
- CVE-2022-2304: Fixed stack buffer overflow in spell_dump_compl() (bsc#1201249).
- CVE-2022-2343: Fixed heap-based buffer overflow in GitHub repository vim prior to 9.0.0044 (bsc#1201356).
- CVE-2022-2344: Fixed another heap-based buffer overflow vim prior to 9.0.0045 (bsc#1201359).
- CVE-2022-2345: Fixed use after free in GitHub repository vim prior to 9.0.0046. (bsc#1201363).
- CVE-2022-2819: Fixed heap-based Buffer Overflow in compile_lock_unlock() (bsc#1202414).
- CVE-2022-2874: Fixed NULL Pointer Dereference in generate_loadvar() (bsc#1202552).
- CVE-2022-1968: Fixed use after free in utf_ptr2char (bsc#1200270).
- CVE-2022-2124: Fixed out of bounds read in current_quote() (bsc#1200697).
- CVE-2022-2125: Fixed out of bounds read in get_lisp_indent() (bsc#1200698).
- CVE-2022-2126: Fixed out of bounds read in suggest_trie_walk() (bsc#1200700).
- CVE-2022-2129: Fixed out of bounds write in vim_regsub_both() (bsc#1200701).
- CVE-2022-1720: Fixed out of bounds read in grab_file_name() (bsc#1200732).
- CVE-2022-2264: Fixed out of bounds read in inc() (bsc#1201132).
- CVE-2022-2284: Fixed out of bounds read in utfc_ptr2len() (bsc#1201133).
- CVE-2022-2285: Fixed negative size passed to memmove() due to integer overflow (bsc#1201134).
- CVE-2022-2286: Fixed out of bounds read in ins_bytes() (bsc#1201135).
- CVE-2022-2287: Fixed out of bounds read in suggest_trie_walk() (bsc#1201136).
- CVE-2022-2231: Fixed null pointer dereference skipwhite() (bsc#1201150).
- CVE-2022-2210: Fixed out of bounds read in ml_append_int() (bsc#1201151).
- CVE-2022-2208: Fixed null pointer dereference in diff_check() (bsc#1201152).
- CVE-2022-2207: Fixed out of bounds read in ins_bs() (bsc#1201153).
- CVE-2022-2257: Fixed out of bounds read in msg_outtrans_special() (bsc#1201154).
- CVE-2022-2206: Fixed out of bounds read in msg_outtrans_attr() (bsc#1201155).
- CVE-2022-2522: Fixed out of bounds read via nested autocommand (bsc#1201863).
- CVE-2022-2571: Fixed heap-based buffer overflow related to ins_comp_get_next_word_or_line() (bsc#1202046).
- CVE-2022-2580: Fixed heap-based buffer overflow related to eval_string() (bsc#1202049).
- CVE-2022-2581: Fixed out-of-bounds read related to cstrchr() (bsc#1202050).
- CVE-2022-2598: Fixed undefined behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput() (bsc#1202051).
- CVE-2022-2817: Fixed use after gree in f_assert_fails() (bsc#1202420).
- CVE-2022-2816: Fixed out-of-bounds Read in check_vim9_unlet() (bsc#1202421).
- CVE-2022-2862: Fixed use-after-free in compile_nested_function() (bsc#1202511).
- CVE-2022-2849: Fixed invalid memory access related to mb_ptr2len() (bsc#1202512).
- CVE-2022-2845: Fixed buffer Over-read related to display_dollar() (bsc#1202515).
- CVE-2022-2889: Fixed use-after-free in find_var_also_in_script() in evalvars.c (bsc#1202599).
- CVE-2022-2923: Fixed NULL pointer dereference in GitHub repository vim/vim prior to 9.0.0240 (bsc#1202687).
- CVE-2022-2946: Fixed use after free in function vim_vsnprintf_typval (bsc#1202689).
- CVE-2022-3016: Fixed use after free in vim prior to 9.0.0285 (bsc#1202862).
  
Bugfixes:

- Fixing vim error on startup (bsc#1200884).
- Fixing vim SUSE Linux Enterprise Server 15 SP4 Basesystem plugin-tlib issue (bsc#1201620).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-09"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200270">SUSE bug 1200270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200697">SUSE bug 1200697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200698">SUSE bug 1200698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200700">SUSE bug 1200700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200701">SUSE bug 1200701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200732">SUSE bug 1200732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200884">SUSE bug 1200884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200902">SUSE bug 1200902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200903">SUSE bug 1200903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200904">SUSE bug 1200904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201132">SUSE bug 1201132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201133">SUSE bug 1201133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201134">SUSE bug 1201134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201135">SUSE bug 1201135</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201136">SUSE bug 1201136</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201150">SUSE bug 1201150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201151">SUSE bug 1201151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201152">SUSE bug 1201152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201153">SUSE bug 1201153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201154">SUSE bug 1201154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201155">SUSE bug 1201155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201249">SUSE bug 1201249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201356">SUSE bug 1201356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201359">SUSE bug 1201359</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201363">SUSE bug 1201363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201620">SUSE bug 1201620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201863">SUSE bug 1201863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202046">SUSE bug 1202046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202049">SUSE bug 1202049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202050">SUSE bug 1202050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202051">SUSE bug 1202051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202414">SUSE bug 1202414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202420">SUSE bug 1202420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202421">SUSE bug 1202421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202511">SUSE bug 1202511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202512">SUSE bug 1202512</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202515">SUSE bug 1202515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202552">SUSE bug 1202552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202599">SUSE bug 1202599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202687">SUSE bug 1202687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202689">SUSE bug 1202689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202862">SUSE bug 1202862</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1720/">CVE-2022-1720</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1968/">CVE-2022-1968</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2124/">CVE-2022-2124</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2125/">CVE-2022-2125</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2126/">CVE-2022-2126</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2129/">CVE-2022-2129</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2175/">CVE-2022-2175</cve>
	<cve impact="moderate" cvss3="3.9/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2182/">CVE-2022-2182</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2183/">CVE-2022-2183</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2206/">CVE-2022-2206</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2207/">CVE-2022-2207</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2208/">CVE-2022-2208</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2210/">CVE-2022-2210</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2231/">CVE-2022-2231</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2257/">CVE-2022-2257</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2264/">CVE-2022-2264</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2284/">CVE-2022-2284</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2285/">CVE-2022-2285</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2286/">CVE-2022-2286</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2287/">CVE-2022-2287</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2304/">CVE-2022-2304</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2343/">CVE-2022-2343</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2344/">CVE-2022-2344</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2345/">CVE-2022-2345</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2522/">CVE-2022-2522</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2571/">CVE-2022-2571</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2580/">CVE-2022-2580</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-2581/">CVE-2022-2581</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2598/">CVE-2022-2598</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2816/">CVE-2022-2816</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2817/">CVE-2022-2817</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2819/">CVE-2022-2819</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2845/">CVE-2022-2845</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2849/">CVE-2022-2849</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2862/">CVE-2022-2862</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2874/">CVE-2022-2874</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2889/">CVE-2022-2889</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2923/">CVE-2022-2923</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2946/">CVE-2022-2946</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3016/">CVE-2022-3016</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709747" comment="gvim-9.0.0313-150000.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709748" comment="vim-9.0.0313-150000.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709662" comment="vim-data-9.0.0313-150000.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709663" comment="vim-data-common-9.0.0313-150000.5.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139526" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1202986" ref_url="https://bugzilla.suse.com/1202986" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:3249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012211.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

clamav was updated to 0.103.7 (bsc#1202986)

* Upgrade the vendored UnRAR library to version 6.1.7.
* Fix logical signature 'Intermediates' feature.
* Relax constraints on slightly malformed zip archives that
  contain overlapping file entries.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-12"/>
	<updated date="2022-09-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202986">SUSE bug 1202986</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709578" comment="clamav-0.103.7-150000.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709579" comment="clamav-devel-0.103.7-150000.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709580" comment="libclamav9-0.103.7-150000.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709581" comment="libfreshclam2-0.103.7-150000.3.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139527" version="1" class="patch">
	<metadata>
		<title>Security update for freetype2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198823" ref_url="https://bugzilla.suse.com/1198823" source="BUGZILLA"/>
		<reference ref_id="1198830" ref_url="https://bugzilla.suse.com/1198830" source="BUGZILLA"/>
		<reference ref_id="1198832" ref_url="https://bugzilla.suse.com/1198832" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-27404" ref_url="https://www.suse.com/security/cve/CVE-2022-27404/" source="CVE"/>
		<reference ref_id="CVE-2022-27405" ref_url="https://www.suse.com/security/cve/CVE-2022-27405/" source="CVE"/>
		<reference ref_id="CVE-2022-27406" ref_url="https://www.suse.com/security/cve/CVE-2022-27406/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3252-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012330.html" source="SUSE-SU"/>
		<description>
This update for freetype2 fixes the following issues:

- CVE-2022-27404 Fixed a segmentation fault via a crafted typeface (bsc#1198830).
- CVE-2022-27405 Fixed a buffer overflow via a crafted typeface (bsc#1198832).
- CVE-2022-27406 Fixed a segmentation fault via a crafted typeface (bsc#1198823).

Non-security fixes:

- Updated to version 2.10.4
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-22"/>
	<updated date="2022-09-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1198823">SUSE bug 1198823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198830">SUSE bug 1198830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198832">SUSE bug 1198832</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27404/">CVE-2022-27404</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27405/">CVE-2022-27405</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27406/">CVE-2022-27406</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710678" comment="freetype2-devel-2.10.4-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708370" comment="libfreetype6-2.10.4-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708194" comment="libfreetype6-32bit-2.10.4-150000.4.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139528" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1200793" ref_url="https://bugzilla.suse.com/1200793" source="BUGZILLA"/>
		<reference ref_id="1201758" ref_url="https://bugzilla.suse.com/1201758" source="BUGZILLA"/>
		<reference ref_id="1202645" ref_url="https://bugzilla.suse.com/1202645" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2200" ref_url="https://www.suse.com/security/cve/CVE-2022-2200/" source="CVE"/>
		<reference ref_id="CVE-2022-2505" ref_url="https://www.suse.com/security/cve/CVE-2022-2505/" source="CVE"/>
		<reference ref_id="CVE-2022-34468" ref_url="https://www.suse.com/security/cve/CVE-2022-34468/" source="CVE"/>
		<reference ref_id="CVE-2022-34469" ref_url="https://www.suse.com/security/cve/CVE-2022-34469/" source="CVE"/>
		<reference ref_id="CVE-2022-34470" ref_url="https://www.suse.com/security/cve/CVE-2022-34470/" source="CVE"/>
		<reference ref_id="CVE-2022-34471" ref_url="https://www.suse.com/security/cve/CVE-2022-34471/" source="CVE"/>
		<reference ref_id="CVE-2022-34472" ref_url="https://www.suse.com/security/cve/CVE-2022-34472/" source="CVE"/>
		<reference ref_id="CVE-2022-34473" ref_url="https://www.suse.com/security/cve/CVE-2022-34473/" source="CVE"/>
		<reference ref_id="CVE-2022-34474" ref_url="https://www.suse.com/security/cve/CVE-2022-34474/" source="CVE"/>
		<reference ref_id="CVE-2022-34475" ref_url="https://www.suse.com/security/cve/CVE-2022-34475/" source="CVE"/>
		<reference ref_id="CVE-2022-34476" ref_url="https://www.suse.com/security/cve/CVE-2022-34476/" source="CVE"/>
		<reference ref_id="CVE-2022-34477" ref_url="https://www.suse.com/security/cve/CVE-2022-34477/" source="CVE"/>
		<reference ref_id="CVE-2022-34478" ref_url="https://www.suse.com/security/cve/CVE-2022-34478/" source="CVE"/>
		<reference ref_id="CVE-2022-34479" ref_url="https://www.suse.com/security/cve/CVE-2022-34479/" source="CVE"/>
		<reference ref_id="CVE-2022-34480" ref_url="https://www.suse.com/security/cve/CVE-2022-34480/" source="CVE"/>
		<reference ref_id="CVE-2022-34481" ref_url="https://www.suse.com/security/cve/CVE-2022-34481/" source="CVE"/>
		<reference ref_id="CVE-2022-34482" ref_url="https://www.suse.com/security/cve/CVE-2022-34482/" source="CVE"/>
		<reference ref_id="CVE-2022-34483" ref_url="https://www.suse.com/security/cve/CVE-2022-34483/" source="CVE"/>
		<reference ref_id="CVE-2022-34484" ref_url="https://www.suse.com/security/cve/CVE-2022-34484/" source="CVE"/>
		<reference ref_id="CVE-2022-34485" ref_url="https://www.suse.com/security/cve/CVE-2022-34485/" source="CVE"/>
		<reference ref_id="CVE-2022-36314" ref_url="https://www.suse.com/security/cve/CVE-2022-36314/" source="CVE"/>
		<reference ref_id="CVE-2022-36318" ref_url="https://www.suse.com/security/cve/CVE-2022-36318/" source="CVE"/>
		<reference ref_id="CVE-2022-36319" ref_url="https://www.suse.com/security/cve/CVE-2022-36319/" source="CVE"/>
		<reference ref_id="CVE-2022-38472" ref_url="https://www.suse.com/security/cve/CVE-2022-38472/" source="CVE"/>
		<reference ref_id="CVE-2022-38473" ref_url="https://www.suse.com/security/cve/CVE-2022-38473/" source="CVE"/>
		<reference ref_id="CVE-2022-38476" ref_url="https://www.suse.com/security/cve/CVE-2022-38476/" source="CVE"/>
		<reference ref_id="CVE-2022-38477" ref_url="https://www.suse.com/security/cve/CVE-2022-38477/" source="CVE"/>
		<reference ref_id="CVE-2022-38478" ref_url="https://www.suse.com/security/cve/CVE-2022-38478/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012227.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Mozilla Firefox was updated to 102.2.0esr ESR:

* Fixed: Various stability, functionality, and security fixes.

- MFSA 2022-34 (bsc#1202645)

  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13

Firefox Extended Support Release 102.1 ESR

  * Fixed: Various stability, functionality, and security fixes.

- MFSA 2022-30 (bsc#1201758)

  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1

- Firefox Extended Support Release 102.0.1 ESR

  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes

Firefox 102.0 ESR:

* New: 

  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voil?! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
 -  Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut 'n.'
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.

  * Fixed: Various security fixes.

- MFSA 2022-24 (bsc#1200793)

  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-14"/>
	<updated date="2022-09-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200793">SUSE bug 1200793</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201758">SUSE bug 1201758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202645">SUSE bug 1202645</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2200/">CVE-2022-2200</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2505/">CVE-2022-2505</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34468/">CVE-2022-34468</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34469/">CVE-2022-34469</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34470/">CVE-2022-34470</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34471/">CVE-2022-34471</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34472/">CVE-2022-34472</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34473/">CVE-2022-34473</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34474/">CVE-2022-34474</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34475/">CVE-2022-34475</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34476/">CVE-2022-34476</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-34477/">CVE-2022-34477</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34478/">CVE-2022-34478</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34479/">CVE-2022-34479</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34480/">CVE-2022-34480</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34481/">CVE-2022-34481</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34482/">CVE-2022-34482</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34483/">CVE-2022-34483</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34484/">CVE-2022-34484</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34485/">CVE-2022-34485</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36314/">CVE-2022-36314</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36318/">CVE-2022-36318</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36319/">CVE-2022-36319</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38472/">CVE-2022-38472</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38473/">CVE-2022-38473</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38476/">CVE-2022-38476</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38477/">CVE-2022-38477</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38478/">CVE-2022-38478</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710303" comment="MozillaFirefox-102.2.0-150000.150.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710304" comment="MozillaFirefox-branding-SLE-102-150000.4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710305" comment="MozillaFirefox-devel-102.2.0-150000.150.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710306" comment="MozillaFirefox-translations-common-102.2.0-150000.150.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710307" comment="MozillaFirefox-translations-other-102.2.0-150000.150.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139529" version="1" class="patch">
	<metadata>
		<title>Security update for flatpak (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1191507" ref_url="https://bugzilla.suse.com/1191507" source="BUGZILLA"/>
		<reference ref_id="1194610" ref_url="https://bugzilla.suse.com/1194610" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21261" ref_url="https://www.suse.com/security/cve/CVE-2021-21261/" source="CVE"/>
		<reference ref_id="CVE-2021-41133" ref_url="https://www.suse.com/security/cve/CVE-2021-41133/" source="CVE"/>
		<reference ref_id="CVE-2021-43860" ref_url="https://www.suse.com/security/cve/CVE-2021-43860/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012249.html" source="SUSE-SU"/>
		<description>
This update for flatpak fixes the following issues:

- CVE-2021-41133: Fixed sandbox bypass via recent syscalls (bsc#1191507).
- CVE-2021-43860: Fixed metadata validation (bsc#1194610).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-15"/>
	<updated date="2022-09-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191507">SUSE bug 1191507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194610">SUSE bug 1194610</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21261/">CVE-2021-21261</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41133/">CVE-2021-41133</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-43860/">CVE-2021-43860</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709949" comment="flatpak-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709950" comment="flatpak-devel-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709951" comment="flatpak-zsh-completion-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709952" comment="libflatpak0-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709953" comment="typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139530" version="1" class="patch">
	<metadata>
		<title>Security update for sqlite3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1189802" ref_url="https://bugzilla.suse.com/1189802" source="BUGZILLA"/>
		<reference ref_id="1195773" ref_url="https://bugzilla.suse.com/1195773" source="BUGZILLA"/>
		<reference ref_id="1201783" ref_url="https://bugzilla.suse.com/1201783" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36690" ref_url="https://www.suse.com/security/cve/CVE-2021-36690/" source="CVE"/>
		<reference ref_id="CVE-2022-35737" ref_url="https://www.suse.com/security/cve/CVE-2022-35737/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3307-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012802.html" source="SUSE-SU"/>
		<description>
This update for sqlite3 fixes the following issues:

Security issues fixed:

- CVE-2022-35737: Fixed an array-bounds overflow if billions of bytes are used in a string argument to a C API (bnc#1201783).
- CVE-2021-36690: Fixed an issue with the SQLite Expert extension when a column has no collating sequence (bsc#1189802).
  
- Package the Tcl bindings here again so that we only ship one copy of SQLite (bsc#1195773).

sqlite was updated to 3.39.3:

* Use a statement journal on DML statement affecting two or more
  database rows if the statement makes use of a SQL functions
  that might abort.
* Use a mutex to protect the PRAGMA temp_store_directory and
  PRAGMA data_store_directory statements, even though they are
  decremented and documented as not being threadsafe.

Update to 3.39.2:

* Fix a performance regression in the query planner associated
  with rearranging the order of FROM clause terms in the
  presences of a LEFT JOIN.
* Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
  1345947, forum post 3607259d3c, and other minor problems
  discovered by internal testing. [boo#1201783]

Update to 3.39.1:

* Fix an incorrect result from a query that uses a view that
  contains a compound SELECT in which only one arm contains a
  RIGHT JOIN and where the view is not the first FROM clause term
  of the query that contains the view
* Fix a long-standing problem with ALTER TABLE RENAME that can
  only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
  to a very small value.
* Fix a long-standing problem in FTS3 that can only arise when
  compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
  option.
* Fix the initial-prefix optimization for the REGEXP extension so
  that it works correctly even if the prefix contains characters
  that require a 3-byte UTF8 encoding.
* Enhance the sqlite_stmt virtual table so that it buffers all of
  its output. 

Update to 3.39.0:

* Add (long overdue) support for RIGHT and FULL OUTER JOIN
* Add new binary comparison operators IS NOT DISTINCT FROM and 
  IS DISTINCT FROM that are equivalent to IS and IS NOT, 
  respective, for compatibility with PostgreSQL and SQL standards
* Add a new return code (value '3') from the sqlite3_vtab_distinct()
  interface that indicates a query that has both DISTINCT and 
  ORDER BY clauses
* Added the sqlite3_db_name() interface
* The unix os interface resolves all symbolic links in database
  filenames to create a canonical name for the database before
  the file is opened
* Defer materializing views until the materialization is actually
  needed, thus avoiding unnecessary work if the materialization
  turns out to never be used
* The HAVING clause of a SELECT statement is now allowed on any
  aggregate query, even queries that do not have a GROUP BY
  clause
* Many microoptimizations collectively reduce CPU cycles by about
  2.3%. 

Update to 3.38.5:

* Fix a blunder in the CLI of the 3.38.4 release

Update to 3.38.4:

* fix a byte-code problem in the Bloom filter pull-down
  optimization added by release 3.38.0 in which an error in the
  byte code causes the byte code engine to enter an infinite loop
  when the pull-down optimization encounters a NULL key   

Update to 3.38.3:

* Fix a case of the query planner be overly aggressive with
  optimizing automatic-index and Bloom-filter construction,
  using inappropriate ON clause terms to restrict the size of the
  automatic-index or Bloom filter, and resulting in missing rows
  in the output.
* Other minor patches. See the timeline for details. 

Update to 3.38.2:

* Fix a problem with the Bloom filter optimization that might
  cause an incorrect answer when doing a LEFT JOIN with a WHERE
  clause constraint that says that one of the columns on the
  right table of the LEFT JOIN is NULL.
* Other minor patches.

- Package the Tcl bindings here again so that we only ship one copy
of SQLite (bsc#1195773).

Update to 3.38.1:

* Fix problems with the new Bloom filter optimization that might
  cause some obscure queries to get an incorrect answer.
* Fix the localtime modifier of the date and time functions so
  that it preserves fractional seconds.
* Fix the sqlite_offset SQL function so that it works correctly
  even in corner cases such as when the argument is a virtual
  column or the column of a view.
* Fix row value IN operator constraints on virtual tables so that
  they work correctly even if the virtual table implementation
  relies on bytecode to filter rows that do not satisfy the
  constraint.
* Other minor fixes to assert() statements, test cases, and
  documentation. See the source code timeline for details.

Update to 3.38.0

* Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
* The JSON functions are now built-ins
* Enhancements to date and time functions
* Rename the printf() SQL function to format() for better
  compatibility, with alias for backwards compatibility.
* Add the sqlite3_error_offset() interface for helping localize
  an SQL error to a specific character in the input SQL text 
* Enhance the interface to virtual tables 
* CLI columnar output modes are enhanced to correctly handle tabs
  and newlines embedded in text, and add options like '--wrap N',
  '--wordwrap on', and '--quote' to the columnar output modes.
* Query planner enhancements using a Bloom filter to speed up 
  large analytic queries, and a balanced merge tree to evaluate
  UNION or UNION ALL compound SELECT statements that have an
  ORDER BY clause.
* The ALTER TABLE statement is changed to silently ignores
  entries in the sqlite_schema table that do not parse when
  PRAGMA writable_schema=ON

Update to 3.37.2:

* Fix a bug introduced in version 3.35.0 (2021-03-12) that can
  cause database corruption if a SAVEPOINT is rolled back while
  in PRAGMA temp_store=MEMORY mode, and other changes are made,
  and then the outer transaction commits
* Fix a long-standing problem with ON DELETE CASCADE and ON 
  UPDATE CASCADE in which a cache of the bytecode used to
  implement the cascading change was not being reset following a
  local DDL change

Update to 3.37.1:

* Fix a bug introduced by the UPSERT enhancements of version
  3.35.0 that can cause incorrect byte-code to be generated for
  some obscure but valid SQL, possibly resulting in a NULL-
  pointer dereference.
* Fix an OOB read that can occur in FTS5 when reading corrupt
  database files.
* Improved robustness of the --safe option in the CLI.
* Other minor fixes to assert() statements and test cases. 

Updated to 3.37.0:

* STRICT tables provide a prescriptive style of data type
  management, for developers who prefer that kind of thing.
* When adding columns that contain a CHECK constraint or a
  generated column containing a NOT NULL constraint, the
  ALTER TABLE ADD COLUMN now checks new constraints against
  preexisting rows in the database and will only proceed if no
  constraints are violated.
* Added the PRAGMA table_list statement.
* Add the .connection command, allowing the CLI to keep multiple
  database connections open at the same time.
* Add the --safe command-line option that disables dot-commands
  and SQL statements that might cause side-effects that extend
  beyond the single database file named on the command-line.
* CLI: Performance improvements when reading SQL statements that
  span many lines.
* Added the sqlite3_autovacuum_pages() interface.
* The sqlite3_deserialize() does not and has never worked
  for the TEMP database. That limitation is now noted in the
  documentation.
* The query planner now omits ORDER BY clauses on subqueries and
  views if removing those clauses does not change the semantics
  of the query.
* The generate_series table-valued function extension is modified
  so that the first parameter ('START') is now required. This is
  done as a way to demonstrate how to write table-valued
  functions with required parameters. The legacy behavior is
  available using the -DZERO_ARGUMENT_GENERATE_SERIES
  compile-time option.
* Added new sqlite3_changes64() and sqlite3_total_changes64()
  interfaces.
* Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
* Use less memory to hold the database schema.
* bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
  extension when a column has no collating sequence.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1189802">SUSE bug 1189802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195773">SUSE bug 1195773</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201783">SUSE bug 1201783</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36690/">CVE-2021-36690</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-35737/">CVE-2022-35737</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009711219" comment="libsqlite3-0-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710768" comment="libsqlite3-0-32bit-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714909" comment="sqlite3-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714910" comment="sqlite3-devel-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714911" comment="sqlite3-tcl-3.39.3-150000.3.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139531" version="1" class="patch">
	<metadata>
		<title>Security update for libcontainers-common (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1176804" ref_url="https://bugzilla.suse.com/1176804" source="BUGZILLA"/>
		<reference ref_id="1177598" ref_url="https://bugzilla.suse.com/1177598" source="BUGZILLA"/>
		<reference ref_id="1181640" ref_url="https://bugzilla.suse.com/1181640" source="BUGZILLA"/>
		<reference ref_id="1182998" ref_url="https://bugzilla.suse.com/1182998" source="BUGZILLA"/>
		<reference ref_id="1188520" ref_url="https://bugzilla.suse.com/1188520" source="BUGZILLA"/>
		<reference ref_id="1189893" ref_url="https://bugzilla.suse.com/1189893" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14370" ref_url="https://www.suse.com/security/cve/CVE-2020-14370/" source="CVE"/>
		<reference ref_id="CVE-2020-15157" ref_url="https://www.suse.com/security/cve/CVE-2020-15157/" source="CVE"/>
		<reference ref_id="CVE-2021-20199" ref_url="https://www.suse.com/security/cve/CVE-2021-20199/" source="CVE"/>
		<reference ref_id="CVE-2021-20291" ref_url="https://www.suse.com/security/cve/CVE-2021-20291/" source="CVE"/>
		<reference ref_id="CVE-2021-3602" ref_url="https://www.suse.com/security/cve/CVE-2021-3602/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012287.html" source="SUSE-SU"/>
		<description>
This update for libcontainers-common fixes the following issues:

libcontainers-common was updated:

- common component was updated to 0.44.0.
- storage component was updated to 1.36.0.
- image component was updated to 5.16.0.
- podman component was updated to 3.3.1.

3.3.1:

Bugfixes:

- Fixed a bug where unit files created by `podman generate systemd` could not cleanup shut down containers when stopped by `systemctl stop` .
- Fixed a bug where `podman machine` commands would not properly locate the `gvproxy` binary in some circumstances.
- Fixed a bug where containers created as part of a pod using the `--pod-id-file` option would not join the pod's network namespace .
- Fixed a bug where Podman, when using the systemd cgroups driver, could sometimes leak dbus sessions.
- Fixed a bug where the `until` filter to `podman logs` and `podman events` was improperly handled, requiring input to be negated .
- Fixed a bug where rootless containers using CNI networking run on systems using `systemd-resolved` for DNS would fail to start if resolved symlinked `/etc/resolv.conf` to an absolute path .

API:

- A large number of potential file descriptor leaks from improperly closing client connections have been fixed.

3.3.0:

Features:

- Containers inside VMs created by `podman machine` will now automatically handle port forwarding - containers in `podman machine` VMs that publish ports via `--publish` or `--publish-all` will have these ports not just forwarded on the VM, but also on the host system.
- The `podman play kube` command's `--network` option now accepts advanced network options (e.g. `--network slirp4netns:port_handler=slirp4netns`) .
- The `podman play kube` commmand now supports Kubernetes liveness probes, which will be created as Podman healthchecks.
- Podman now provides a systemd unit, `podman-restart.service`, which, when enabled, will restart all containers that were started with `--restart=always` after the system reboots.
- Rootless Podman can now be configured to use CNI networking by default by using the `rootless_networking` option in `containers.conf`.
- Images can now be pulled using `image:tag@digest` syntax (e.g. `podman pull fedora:34@sha256:1b0d4ddd99b1a8c8a80e885aafe6034c95f266da44ead992aab388e6aa91611a`) .
- The `podman container checkpoint` and `podman container restore` commands can now be used to checkpoint containers that are in pods, and restore those containers into pods.
- The `podman container restore` command now features a new option, `--publish`, to change the ports that are forwarded to a container that is being restored from an exported checkpoint.
- The `podman container checkpoint` command now features a new option, `--compress`, to specify the compression algorithm that will be used on the generated checkpoint.
- The `podman pull` command can now pull multiple images at once (e.g. `podman pull fedora:34 ubi8:latest` will pull both specified images).
- THe `podman cp` command can now copy files from one container into another directly (e.g. `podman cp containera:/etc/hosts containerb:/etc/`) .
- The `podman cp` command now supports a new option, `--archive`, which controls whether copied files will be chown'd to the UID and GID of the user of the destination container.
- The `podman stats` command now provides two additional metrics: Average CPU, and CPU time.
- The `podman pod create` command supports a new flag, `--pid`, to specify the PID namespace of the pod. If specified, containers that join the pod will automatically share its PID namespace.
- The `podman pod create` command supports a new flag, `--infra-name`, which allows the name of the pod's infra container to be set .
- The `podman auto-update` command has had its output reformatted - it is now much clearer what images were pulled and what containers were updated.
- The `podman auto-update` command now supports a new option, `--dry-run`, which reports what would be updated but does not actually perform the update .
- The `podman build` command now supports a new option, `--secret`, to mount secrets into build containers.
- The `podman manifest remove` command now has a new alias, `podman manifest rm`.
- The `podman login` command now supports a new option, `--verbose`, to print detailed information about where the credentials entered were stored.
- The `podman events` command now supports a new event, `exec_died`, which is produced when an exec session exits, and includes the exit code of the exec session.
- The `podman system connection add` command now supports adding connections that connect using the `tcp://` and `unix://` URL schemes.
- The `podman system connection list` command now supports a new flag, `--format`, to determine how the output is printed.
- The `podman volume prune` and `podman volume ls` commands' `--filter` option now support a new filter, `until`, that matches volumes created before a certain time .
- The `podman ps --filter` option's `network` filter now accepts a new value: `container:`, which matches containers that share a network namespace with a specific container .
- The `podman diff` command can now accept two arguments, allowing two images or two containers to be specified; the diff between the two will be printed .
- Podman can now optionally copy-up content from containers into volumes mounted into those containers earlier (at creation time, instead of at runtime) via the `prepare_on_create` option in `containers.conf` .
- A new option, `--gpus`, has been added to `podman create` and `podman run` as a no-op for better compatibility with Docker. If the nvidia-container-runtime package is installed, GPUs should be automatically added to containers without using the flag.
- If an invalid subcommand is provided, similar commands to try will now be suggested in the error message.
### Changes
- The `podman system reset` command now removes non-Podman (e.g. Buildah and CRI-O) containers as well.
- The new port forwarding offered by `podman machine` requires [gvproxy] in order to function.
- Podman will now automatically create the default CNI network if it does not exist, for both root and rootless users. This will only be done once per user - if the network is subsequently removed, it will not be recreated.
- The `install.cni` makefile option has been removed. It is no longer required to distribute the default `87-podman.conflist` CNI configuration file, as Podman will now automatically create it.
- The `--root` option to Podman will not automatically clear all default storage options when set. Storage options can be set manually using `--storage-opt` .
- The output of `podman system connection list` is now deterministic, with connections being sorted alpabetically by their name.
- The auto-update service (`podman-auto-update.service`) has had its default timer adjusted so it now starts at a random time up to 15 minutes after midnight, to help prevent system congestion from numerous daily services run at once.
- Systemd unit files generated by `podman generate systemd` now depend on `network-online.target` by default .
- Systemd unit files generated by `podman generate systemd` now use `Type=notify` by default, instead of using PID files.
- The `podman info` command's logic for detecting package versions on Gentoo has been improved, and should be significantly faster.

Bugfixes:

- Fixed a bug where the `podman play kube` command did not perform SELinux relabelling of volumes specified with a `mountPath` that included the `:z` or `:Z` options .
- Fixed a bug where the `podman play kube` command would ignore the `USER` and `EXPOSE` directives in images .
- Fixed a bug where the `podman play kube` command would only accept lowercase pull policies.
- Fixed a bug where named volumes mounted into containers with the `:z` or `:Z` options were not appropriately relabelled for access from the container .
- Fixed a bug where the `podman logs -f` command, with the `journald` log driver, could sometimes fail to pick up the last line of output from a container .
- Fixed a bug where running `podman rm` on a container created with the `--rm` option would occasionally emit an error message saying the container failed to be removed, when it was successfully removed.
- Fixed a bug where starting a Podman container would segfault if the `LISTEN_PID` and `LISTEN_FDS` environment variables were set, but `LISTEN_FDNAMES` was not .
- Fixed a bug where exec sessions in containers were sometimes not cleaned up when run without `-d` and when the associated `podman exec` process was killed before completion.
- Fixed a bug where `podman system service` could, when run in a systemd unit file with sdnotify in use, drop some connections when it was starting up.
- Fixed a bug where containers run using the REST API using the `slirp4netns` network mode would leave zombie processes that were not cleaned up until `podman system service` exited .
- Fixed a bug where the `podman system service` command would leave zombie processes after its initial launch that were not cleaned up until it exited .
- Fixed a bug where VMs created by `podman machine` could not be started after the host system restarted .
- Fixed a bug where the `podman pod ps` command would not show headers for optional information (e.g. container names when the `--ctr-names` option was given).
- Fixed a bug where the remote Podman client's `podman create` and `podman run` commands would ignore timezone configuration from the server's `containers.conf` file .
- Fixed a bug where the remote Podman client's `podman build` command would only respect `.containerignore` and not `.dockerignore` files (when both are present, `.containerignore` will be preferred) .
- Fixed a bug where the remote Podman client's `podman build` command would fail to send the Dockerfile being built to the server when it was excluded by the `.dockerignore` file, resulting in an error .
- Fixed a bug where the remote Podman client's `podman build` command could unexpectedly stop streaming the output of the build .
- Fixed a bug where the remote Podman client's `podman build` command would fail to build when run on Windows .
- Fixed a bug where the `podman manifest create` command accepted at most two arguments (an arbitrary number of images are allowed as arguments, which will be added to the manifest).
- Fixed a bug where named volumes would not be properly chowned to the UID and GID of the directory they were mounted over when first mounted into a container .
- Fixed a bug where named volumes created using a volume plugin would be removed from Podman, even if the plugin reported a failure to remove the volume .
- Fixed a bug where the remote Podman client's `podman exec -i` command would hang when input was provided via shell redirection (e.g. `podman --remote exec -i foo cat &lt;&lt;&lt;'hello'`) .
- Fixed a bug where containers created with `--rm` were not immediately removed after being started by `podman start` if they failed to start .
- Fixed a bug where the `--storage-opt` flag to `podman create` and `podman run` was nonfunctional .
- Fixed a bug where the `--device-cgroup-rule` option to `podman create` and `podman run` was nonfunctional .
- Fixed a bug where the `--tls-verify` option to `podman manifest push` was nonfunctional.
- Fixed a bug where the `podman import` command could, in some circumstances, produce empty images .
- Fixed a bug where images pulled using the `docker-daemon:` transport had the wrong registry (`localhost` instead of `docker.io/library`) .
- Fixed a bug where operations that pruned images (`podman image prune` and `podman system prune`) would prune untagged images with children .
- Fixed a bug where dual-stack networks created by `podman network create` did not properly auto-assign an IPv4 subnet when one was not explicitly specified .
- Fixed a bug where port forwarding using the `rootlessport` port forwarder would break when a network was disconnected and then reconnected .
- Fixed a bug where Podman would ignore user-specified SELinux policies for containers using the Kata OCI runtime, or containers using systemd as PID 1 .
- Fixed a bug where Podman containers created using `--net=host` would add an entry to `/etc/hosts` for the container's hostname pointing to `127.0.1.1` .
- Fixed a bug where the `podman unpause --all` command would throw an error for every container that was not paused .
- Fixed a bug where timestamps for the `since` and `until` filters using Unix timestamps with a nanoseconds portion could not be parsed .
- Fixed a bug where the `podman info` command would sometimes print the wrong path for the `slirp4netns` binary.
- Fixed a bug where rootless Podman containers joined to a CNI network would not have functional DNS when the host used systemd-resolved without the resolved stub resolver being enabled .
- Fixed a bug where `podman network connect` and `podman network disconnect` of rootless containers could sometimes break port forwarding to the container .
- Fixed a bug where joining a container to a CNI network by ID and adding network aliases to this network would cause the container to fail to start .
### API
- Fixed a bug where the Compat List endpoint for Containers included healthcheck information for all containers, even those that did not have a configured healthcheck.
- Fixed a bug where the Compat Create endpoint for Containers would fail to create containers with the `NetworkMode` parameter set to `default` .
- Fixed a bug where the Compat Create endpoint for Containers did not properly handle healthcheck commands .
- Fixed a bug where the Compat Wait endpoint for Containers would always send an empty string error message when no error occurred.
- Fixed a bug where the Libpod Stats endpoint for Containers would not error when run on rootless containers on cgroups v1 systems (nonsensical results would be returned, as this configuration cannot be supportable).
- Fixed a bug where the Compat List endpoint for Images omitted the `ContainerConfig` field .
- Fixed a bug where the Compat Build endpoint for Images was too strict when validating the `Content-Type` header, rejecting content that Docker would have accepted .
- Fixed a bug where the Compat Pull endpoint for Images could fail, but return a 200 status code, if an image name that could not be parsed was provided.
- Fixed a bug where the Compat Pull endpoint for Images would continue to pull images after the client disconnected.
- Fixed a bug where the Compat List endpoint for Networks would fail for non-bridge (e.g. macvlan) networks .
- Fixed a bug where the Libpod List endpoint for Networks would return nil, instead of an empty list, when no networks were present .
- The Compat and Libpod Logs endpoints for Containers now support the `until` query parameter .
- The Compat Import endpoint for Images now supports the `platform`, `message`, and `repo` query parameters.
- The Compat Pull endpoint for Images now supports the `platform` query parameter.

Misc:

- Updated Buildah to v1.22.3
- Updated the containers/storage library to v1.34.1
- Updated the containers/image library to v5.15.2
- Updated the containers/common library to v0.42.1

storage was updated to 1.36.0.

Updated image to 5.16.0.

Update podman to 3.2.3:

Security:

- This release addresses CVE-2021-3602, an issue with the `podman build` command with the `--isolation chroot` flag that results in environment variables from the host leaking into build containers. (bsc#1188520)

Bugfixes:

- Fixed a bug where events related to images could occur before the relevant operation had completed (e.g. an image pull event could be written before the pull was finished) .
- Fixed a bug where `podman save` would refuse to save images with an architecture different from that of the host .
- Fixed a bug where the `podman import` command did not correctly handle images without tags .
- Fixed a bug where Podman's journald events backend would fail and prevent Podman from running when run on a host with systemd as PID1 but in an environment (e.g. a container) without systemd .
- Fixed a bug where containers using rootless CNI networking would fail to start when the `dnsname` CNI plugin was in use and the host system's `/etc/resolv.conf` was a symlink ([#10855] and [#10929](https://github.com/containers/podman/issues/10929)).
- Fixed a bug where containers using rootless CNI networking could fail to start due to a race in rootless CNI initialization .

Update podman to 3.2.2

3.2.2:

- Podman's handling of the Architecture field of images has been relaxed. Since 3.2.0, Podman required that the architecture of the image match the architecture of the system to run containers based on an image, but images often incorrectly report architecture, causing Podman to reject valid images ([#10648] and [#10682](https://github.com/containers/podman/issues/10682)).
- Podman no longer uses inotify to monitor for changes to CNI configurations. This removes potential issues where Podman cannot be run because a user has exhausted their available inotify sessions .

Bugfixes

- Fixed a bug where the `podman cp` would, when given a directory as its source and a target that existed and was a file, copy the contents of the directory into the parent directory of the file; this now results in an error.
- Fixed a bug where the `podman logs` command would, when following a running container's logs, not include the last line of output from the container when it exited when the `k8s-file` driver was in use .
- Fixed a bug where Podman would fail to run containers if `systemd-resolved` was incorrectly detected as the system's DNS server .
- Fixed a bug where the `podman exec -t` command would only resize the exec session's TTY after the session started, leading to a race condition where the terminal would initially not have a size set .
- Fixed a bug where Podman containers using the `slirp4netns` network mode would add an incorrect entry to `/etc/hosts` pointing the container's hostname to the wrong IP address.
- Fixed a bug where Podman would create volumes specified by images with incorrect permissions ([#10188] and [#10606](https://github.com/containers/podman/issues/10606)).
- Fixed a bug where Podman would not respect the `uid` and `gid` options to `podman volume create -o` .
- Fixed a bug where the `podman run` command could panic when parsing the system's cgroup configuration .
- Fixed a bug where the remote Podman client's `podman build -f - ...` command did not read a Containerfile from STDIN .
- Fixed a bug where the `podman container restore --import` command would fail to restore checkpoints created from privileged containers .
- Fixed a bug where Podman was not respecting the `TMPDIR` environment variable when pulling images .
- Fixed a bug where a number of Podman commands did not properly support using Go templates as an argument to the `--format` option.

API:

- Fixed a bug where the Compat Inspect endpoint for Containers did not include information on container healthchecks .
- Fixed a bug where the Libpod and Compat Build endpoints for Images did not properly handle the `devices` query parameter .

Misc:

- Fixed a bug where the Makefile's `make podman-remote-static` target to build a statically-linked `podman-remote` binary was instead producing dynamic binaries .
- Updated the containers/common library to v0.38.11

3.2.1:

Changes:
- Podman now allows corrupt images (e.g. from restarting the system during an image pull) to be replaced by a `podman pull` of the same image (instead of requiring they be removed first, then re-pulled).

Bugfixes:

- Fixed a bug where Podman would fail to start containers if a Seccomp profile was not available at `/usr/share/containers/seccomp.json` .
- Fixed a bug where the `podman machine start` command failed on OS X machines with the AMD64 architecture and certain QEMU versions .
- Fixed a bug where Podman would always use the slow path for joining the rootless user namespace.
- Fixed a bug where the `podman stats` command would fail on Cgroups v1 systems when run on a container running systemd .
- Fixed a bug where pre-checkpoint support for `podman container checkpoint` did not function correctly.
- Fixed a bug where the remote Podman client's `podman build` command did not properly handle the `-f` option .
- Fixed a bug where the remote Podman client's `podman run` command would sometimes not resize the container's terminal before execution began .
- Fixed a bug where the `--filter` option to the `podman image prune` command was nonfunctional.
- Fixed a bug where the `podman logs -f` command would exit before all output for a container was printed when the `k8s-file` log driver was in use .
- Fixed a bug where Podman would not correctly detect that systemd-resolved was in use on the host and adjust DNS servers in the container appropriately under some circumstances .
- Fixed a bug where the `podman network connect` and `podman network disconnect` commands acted improperly when containers were in the Created state, marking the changes as done but not actually performing them.

API:

- Fixed a bug where the Compat and Libpod Prune endpoints for Networks returned null, instead of an empty array, when nothing was pruned.
- Fixed a bug where the Create API for Images would continue to pull images even if a client closed the connection mid-pull .
- Fixed a bug where the Events API did not include some information (including labels) when sending events.
- Fixed a bug where the Events API would, when streaming was not requested, send at most one event .

3.2.0:

Features:

- Docker Compose is now supported with rootless Podman .
- The `podman network connect`, `podman network disconnect`, and `podman network reload` commands have been enabled for rootless Podman.
- An experimental new set of commands, `podman machine`, was added to assist in managing virtual machines containing a Podman server. These are intended for easing the use of Podman on OS X by handling the creation of a Linux VM for running Podman.
- The `podman generate kube` command can now be run on Podman named volumes (generating `PersistentVolumeClaim` YAML), in addition to pods and containers.
- The `podman play kube` command now supports two new options, `--ip` and `--mac`, to set static IPs and MAC addresses for created pods ([#8442] and [#9731](https://github.com/containers/podman/issues/9731)).
- The `podman play kube` command's support for `PersistentVolumeClaim` YAML has been greatly improved.
- The `podman generate kube` command now preserves the label used by `podman auto-update` to identify containers to update as a Kubernetes annotation, and the `podman play kube` command will convert this annotation back into a label. This allows `podman auto-update` to be used with containers created by `podman play kube`.
- The `podman play kube` command now supports Kubernetes `secretRef` YAML (using the secrets support from `podman secret`) for environment variables.
- Secrets can now be added to containers as environment variables using the `type=env` option to the `--secret` flag to `podman create` and `podman run`.
- The `podman start` command now supports the `--all` option, allowing all containers to be started simultaneously with a single command. The `--filter` option has also been added to filter which containers to start when `--all` is used.
- Filtering containers with the `--filter` option to `podman ps` and `podman start` now supports a new filter, `restart-policy`, to filter containers based on their restart policy.
- The `--group-add` option to rootless `podman run` and `podman create` now accepts a new value, `keep-groups`, which instructs Podman to retain the supplemental groups of the user running Podman in the created container. This is only supported with the `crun` OCI runtime.
- The `podman run` and `podman create` commands now support a new option, `--timeout`. This sets a maximum time the container is allowed to run, after which it is killed .
- The `podman run` and `podman create` commands now support a new option, `--pidfile`. This will create a file when the container is started containing the PID of the first process in the container.
- The `podman run` and `podman create` commands now support a new option, `--requires`. The `--requires` option adds dependency containers - containers that must be running before the current container. Commands like `podman start` will automatically start the requirements of a container before starting the container itself.
- Auto-updating containers can now be done with locally-built images, not just images hosted on a registry, by creating containers with the `io.containers.autoupdate` label set to `local`.
- Podman now supports the [Container Device Interface] (CDI) standard.
- Podman now adds an entry to `/etc/hosts`, `host.containers.internal`, pointing to the current gateway (which, for root containers, is usually a bridge interface on the host system) .
- The `podman ps`, `podman pod ps`, `podman network list`, `podman secret list`, and `podman volume list` commands now support a `--noheading` option, which will cause Podman to omit the heading line including column names.
- The `podman unshare` command now supports a new flag, `--rootless-cni`, to join the rootless network namespace. This allows commands to be run in the same network environment as rootless containers with CNI networking.
- The `--security-opt unmask=` option to `podman run` and `podman create` now supports glob operations to unmask a group of paths at once (e.g. `podman run --security-opt unmask=/proc/* ...` will unmask all paths in `/proc` in the container).
- The `podman network prune` command now supports a `--filter` option to filter which networks will be pruned.
### Changes
- The change in Podman 3.1.2 where the `:z` and `:Z` mount options for volumes were ignored for privileged containers has been reverted after discussion in [#10209].
- Podman's rootless CNI functionality no longer requires a sidecar container! The removal of the requirement for the `rootless-cni-infra` container means that rootless CNI is now usable on all architectures, not just AMD64, and no longer requires pulling an image .
- The Image handling code used by Podman has seen a major rewrite to improve code sharing with our other projects, Buildah and CRI-O. This should result in fewer bugs and performance gains in the long term. Work on this is still ongoing.
- The `podman auto-update` command now prunes previous versions of images after updating if they are unused, to prevent disk exhaustion after repeated updates .
- The `podman play kube` now treats environment variables configured as references to a `ConfigMap` as mandatory unless the `optional` parameter was set; this better matches the behavior of Kubernetes.
- Podman now supports the `--context=default` flag from Docker as a no-op for compatibility purposes.
- When Podman is run as root, but without `CAP_SYS_ADMIN` being available, it will run in a user namespace using the same code as rootless Podman (instead of failing outright).
- The `podman info` command now includes the path of the Seccomp profile Podman is using, available cgroup controllers, and whether Podman is connected to a remote service or running containers locally.
- Containers created with the `--rm` option now automatically use the `volatile` storage flag when available for their root filesystems, causing them not to write changes to disk as often as they will be removed at completion anyways. This should result in improved performance.
- The `podman generate systemd --new` command will now include environment variables referenced by the container in generated unit files if the value would be looked up from the system environment.
- Podman now requires that Conmon v2.0.24 be available.

Bugfixes:

- Fixed a bug where the remote Podman client's `podman build` command did not support the `--arch`, `--platform`, and `--os`, options.
- Fixed a bug where the remote Podman client's `podman build` command ignored the `--rm=false` option .
- Fixed a bug where the remote Podman client's `podman build --iidfile` command could include extra output (in addition to just the image ID) in the image ID file written .
- Fixed a bug where the remote Podman client's `podman build` command did not preserve hardlinks when moving files into the container via `COPY` instructions .
- Fixed a bug where the `podman generate systemd --new` command could generate extra `--iidfile` arguments if the container was already created with one.
- Fixed a bug where the `podman generate systemd --new` command would generate unit files that did not include `RequiresMountsFor` lines .
- Fixed a bug where the `podman generate kube` command produced incorrect YAML for containers which bind-mounted both `/` and `/root` from the host system into the container .
- Fixed a bug where pods created by `podman play kube` from YAML that specified `ShareProcessNamespace` would only share the PID namespace (and not also the UTS, Network, and IPC namespaces) .
- Fixed a bug where the `podman network reload` command could generate spurious error messages when `iptables-nft` was in use.
- Fixed a bug where rootless Podman could fail to attach to containers when the user running Podman had a large UID.
- Fixed a bug where the `podman ps` command could fail with a `no such container` error due to a race condition with container removal .
- Fixed a bug where containers using the `slirp4netns` network mode and setting a custom `slirp4netns` subnet while using the `rootlesskit` port forwarder would not be able to forward ports .
- Fixed a bug where the `--filter ancestor=` option to `podman ps` did not require an exact match of the image name/ID to include a container in its results.
- Fixed a bug where the `--filter until=` option to `podman image prune` would prune images created after the specified time (instead of before).
- Fixed a bug where setting a custom Seccomp profile via the `seccomp_profile` option in `containers.conf` had no effect, and the default profile was used instead.
- Fixed a bug where the `--cgroup-parent` option to `podman create` and `podman run` was ignored in rootless Podman on cgroups v2 systems with the `cgroupfs` cgroup manager .
- Fixed a bug where the `IMAGE` and `NAME` variables in `podman container runlabel` were not being correctly substituted .
- Fixed a bug where Podman could freeze when creating containers with a specific combination of volumes and working directory .
- Fixed a bug where rootless Podman containers restarted by restart policy (e.g. containers created with `--restart=always`) would lose networking after being restarted .
- Fixed a bug where the `podman cp` command could not copy files into containers created with the `--pid=host` flag .
- Fixed a bug where filters to the `podman events` command could not be specified twice (if a filter is specified more than once, it will match if any of the given values match - logical or) .
- Fixed a bug where Podman would include IPv6 nameservers in `resolv.conf` in containers without IPv6 connectivity .
- Fixed a bug where containers could not be created with static IP addresses when connecting to a network using the `macvlan` driver .
### API
- Fixed a bug where the Compat Create endpoint for Containers did not allow advanced network options to be set .
- Fixed a bug where the Compat Create endpoint for Containers ignored static IP information provided in the `IPAMConfig` block .
- Fixed a bug where the Compat Inspect endpoint for Containers returned null (instead of an empty list) for Networks when the container was not joined to a CNI network .
- Fixed a bug where the Compat Wait endpoint for Containers could miss containers exiting if they were immediately restarted.
- Fixed a bug where the Compat Create endpoint for Volumes required that the user provide a name for the new volume .
- Fixed a bug where the Libpod Info handler would sometimes not return the correct path to the Podman API socket.
- Fixed a bug where the Compat Events handler used the wrong name for container exited events (`died` instead of `die`) .
- Fixed a bug where the Compat Push endpoint for Images could leak goroutines if the remote end closed the connection prematurely.


Update storage to 1.32.5

Update podman to 3.1.2

3.1.2:

Bugfixes:

- Fixed a bug where images with empty layers were stored incorrectly, causing them to be unable to be pushed or saved.
- Fixed a bug where the `podman rmi` command could fail to remove corrupt images from storage.
- Fixed a bug where the remote Podman client's `podman save` command did not support the `oci-dir` and `docker-dir` formats .
- Fixed a bug where volume mounts from `podman play kube` created with a trailing `/` in the container path were were not properly superceding named volumes from the image .
- Fixed a bug where Podman could fail to build on 32-bit architectures.

Update podman to 3.1.1

- Podman now recognizes `trace` as a valid argument to the `--log-level` command. Trace logging is now the most verbose level of logging available.
- The `:z` and `:Z` options for volume mounts are now ignored when the container is privileged or is run with SELinux isolation disabled (`--security-opt label=disable`). This matches better matches Docker's behavior in this case.

Bugfixes

- Fixed a bug where pruning images with the `podman image prune` or `podman system prune` commands could cause Podman to panic.
- Fixed a bug where the `podman save` command did not properly error when the `--compress` flag was used with incompatible format types.
- Fixed a bug where the `--security-opt` and `--ulimit` options to the remote Podman client's `podman build` command were nonfunctional.
- Fixed a bug where the `--log-rusage` option to the remote Podman client's `podman build` command was nonfunctional .
- Fixed a bug where the `podman build` command could, in some circumstances, use the wrong OCI runtime .
- Fixed a bug where the remote Podman client's `podman build` command could return 0 despite failing .
- Fixed a bug where the `podman container runlabel` command did not properly expand the `IMAGE` and `NAME` variables in the label .
- Fixed a bug where poststop OCI hooks would be executed twice on containers started with the `--rm` argument .
- Fixed a bug where rootless Podman could fail to launch containers on cgroups v2 systems when the `cgroupfs` cgroup manager was in use.
- Fixed a bug where the `podman stats` command could error when statistics tracked exceeded the maximum size of a 32-bit signed integer .
- Fixed a bug where rootless Podman containers run with `--userns=keepid` (without a `--user` flag in addition) would grant exec sessions run in them too many capabilities .
- Fixed a bug where the `--authfile` option to `podman build` did not validate that the path given existed .
- Fixed a bug where the `--storage-opt` option to Podman was appending to, instead of overriding (as is documented), the default storage options.
- Fixed a bug where the `podman system service` connection did not function properly when run in a socket-activated systemd unit file as a non-root user.
- Fixed a bug where the `--network` option to the `podman play kube` command of the remote Podman client was being ignored .
- Fixed a bug where the `--log-driver` option to the `podman play kube` command was nonfunctional .

API

- Fixed a bug where the Libpod Create endpoint for Manifests did not properly validate the image the manifest was being created with.
- Fixed a bug where the Libpod DF endpoint could, in error cases, append an extra null to the JSON response, causing decode errors.
- Fixed a bug where the Libpod and Compat Top endpoint for Containers would return process names that included extra whitespace.
- Fixed a bug where the Compat Prune endpoint for Containers accepted too many types of filter.

Update podman to 3.1.0

Features:

- A set of new commands has been added to manage secrets! The `podman secret create`, `podman secret inspect`, `podman secret ls` and `podman secret rm` commands have been added to handle secrets, along with the `--secret` option to `podman run` and `podman create` to add secrets to containers. The initial driver for secrets does not support encryption - this will be added in a future release.
- A new command to prune networks, `podman network prune`, has been added .
- The `-v` option to `podman run` and `podman create` now supports a new volume option, `:U`, to chown the volume's source directory on the host to match the UID and GID of the container and prevent permissions issues .
- Three new commands, `podman network exists`, `podman volume exists`, and `podman manifest exists`, have been added to check for the existence of networks, volumes, and manifest lists.
- The `podman cp` command can now copy files into directories mounted as `tmpfs` in a running container.
- The `podman volume prune` command will now list volumes that will be pruned when prompting the user whether to continue and perform the prune .
- The Podman remote client's `podman build` command now supports the `--disable-compression`, `--excludes`, and `--jobs` options.
- The Podman remote client's `podman push` command now supports the `--format` option.
- The Podman remote client's `podman rm` command now supports the `--all` and `--ignore` options.
- The Podman remote client's `podman search` command now supports the `--no-trunc` and `--list-tags` options.
- The `podman play kube` command can now read in Kubernetes YAML from `STDIN` when `-` is specified as file name (`podman play kube -`), allowing input to be piped into the command for scripting .
- The `podman generate systemd` command now supports a `--no-header` option, which disables creation of the header comment automatically added by Podman to generated unit files.
- The `podman generate kube` command can now generate `PersistentVolumeClaim` YAML for Podman named volumes .
- The `podman generate kube` command can now generate YAML files containing multiple resources (pods or deployments) .

Security:

- This release resolves CVE-2021-20291, a deadlock vulnerability in the storage library caused by pulling a specially-crafted container image. (bsc#1196497)

Changes:

- The Podman remote client's `podman build` command no longer allows the `-v` flag to be used. Volumes are not yet supported with remote Podman when the client and service are on different machines.
- The `podman kill` and `podman stop` commands now print the name given by the user for each container, instead of the full ID.
- When the `--security-opt unmask=ALL` or `--security-opt unmask=/sys/fs/cgroup` options to `podman create` or `podman run` are given, Podman will mount cgroups into the container as read-write, instead of read-only .
- The `podman rmi` command has been changed to better handle cases where an image is incomplete or corrupted, which can be caused by interrupted image pulls.
- The `podman rename` command has been improved to be more atomic, eliminating many race conditions that could potentially render a renamed container unusable.
- Detection of which OCI runtimes run using virtual machines and thus require custom SELinux labelling has been improved .
- The hidden `--trace` option to `podman` has been turned into a no-op. It was used in very early versions for performance tracing, but has not been supported for some time.
- The `podman generate systemd` command now generates `RequiresMountsFor` lines to ensure necessary storage directories are mounted before systemd starts Podman.
- Podman will now emit a warning when `--tty` and `--interactive` are both passed, but `STDIN` is not a TTY. This will be made into an error in the next major Podman release some time next year.
### Bugfixes
- Fixed a bug where rootless Podman containers joined to CNI networks could not receive traffic from forwarded ports .
- Fixed a bug where `podman network create` with the `--macvlan` flag did not honor the `--gateway`, `--subnet`, and `--opt` options .
- Fixed a bug where the `podman generate kube` command generated invalid YAML for privileged containers .
- Fixed a bug where the `podman generate kube` command could not be used with containers that were not running.
- Fixed a bug where the `podman generate systemd` command could duplicate some parameters to Podman in generated unit files .
- Fixed a bug where Podman did not add annotations specified in `containers.conf` to containers.
- Foxed a bug where Podman did not respect the `no_hosts` default in `containers.conf` when creating containers.
- Fixed a bug where the `--tail=0`, `--since`, and `--follow` options to the `podman logs` command did not function properly when using the `journald` log backend.
- Fixed a bug where specifying more than one container to `podman logs` when the `journald` log backend was in use did not function correctly.
- Fixed a bug where the `podman run` and `podman create` commands would panic if a memory limit was set, but the swap limit was set to unlimited .
- Fixed a bug where the `--network` option to `podman run`, `podman create`, and `podman pod create` would error if the user attempted to specify CNI networks by ID, instead of name .
- Fixed a bug where Podman's cgroup handling for cgroups v1 systems did not properly handle cases where a cgroup existed on some, but not all, controllers, resulting in errors from the `podman stats` command .
- Fixed a bug where the `podman cp` did not properly handle cases where `/dev/stdout` was specified as the destination (it was treated identically to `-`) .
- Fixed a bug where the `podman cp` command would create files with incorrect ownership .
- Fixed a bug where the `podman cp` command did not properly handle cases where the destination directory did not exist.
- Fixed a bug where the `podman cp` command did not properly evaluate symlinks when copying out of containers.
- Fixed a bug where the `podman rm -fa` command would error when attempting to remove containers created with `--rm` .
- Fixed a bug where the ordering of capabilities was nondeterministic in the `CapDrop` field of the output of `podman inspect` on a container .
- Fixed a bug where the `podman network connect` command could be used with containers that were not initially connected to a CNI bridge network (e.g. containers created with `--net=host`) .
- Fixed a bug where DNS search domains required by the `dnsname` CNI plugin were not being added to container's `resolv.conf` under some circumstances.
- Fixed a bug where the `--ignorefile` option to `podman build` was nonfunctional .
- Fixed a bug where the `--timestamp` option to `podman build` was nonfunctional .
- Fixed a bug where the `--iidfile` option to `podman build` could cause Podman to panic if an error occurred during the build.
- Fixed a bug where the `--dns-search` option to `podman build` was nonfunctional .
- Fixed a bug where the `--pull-never` option to `podman build` was nonfunctional .
- Fixed a bug where the `--build-arg` option to `podman build` would, when given a key but not a value, error (instead of attempting to look up the key as an environment variable) .
- Fixed a bug where the `--isolation` option to `podman build` in the remote Podman client was nonfunctional.
- Fixed a bug where the `podman network disconnect` command could cause errors when the container that had a network removed was stopped and its network was cleaned up .
- Fixed a bug where the `podman network rm` command did not properly check what networks a container was present in, resulting in unexpected behavior if `podman network connect` or `podman network disconnect` had been used with the network .
- Fixed a bug where some errors with stopping a container could cause Podman to panic, and the container to be stuck in an unusable `stopping` state .
- Fixed a bug where the `podman load` command could return 0 even in cases where an error occurred .
- Fixed a bug where specifying storage options to Podman using the `--storage-opt` option would override all storage options. Instead, storage options are now overridden only when the `--storage-driver` option is used to override the current graph driver .
- Fixed a bug where containers created with `--privileged` could request more capabilities than were available to Podman.
- Fixed a bug where `podman commit` did not use the `TMPDIR` environment variable to place temporary files created during the commit .
- Fixed a bug where remote Podman could error when attempting to resize short-lived containers .
- Fixed a bug where Podman was unusable on kernels built without `CONFIG_USER_NS`.
- Fixed a bug where the ownership of volumes created by `podman volume create` and then mounted into a container could be incorrect .
- Fixed a bug where Podman volumes using a volume plugin could not pass certain options, and could not be used as non-root users.
- Fixed a bug where the `--tz` option to `podman create` and `podman run` did not properly validate its input.
### API
- Fixed a bug where the `X-Registry-Auth` header did not accept `null` as a valid value.
- A new compat endpoint, `/auth`, has been added. This endpoint validates credentials against a registry .
- Fixed a bug where the compat Build endpoint for Images specified labels using the wrong type (array vs map). Both formats will be accepted now.
- Fixed a bug where the compat Build endpoint for Images did not report that it successfully tagged the built image in its response.
- Fixed a bug where the compat Create endpoint for Images did not provide progress information on pulling the image in its response.
- Fixed a bug where the compat Push endpoint for Images did not properly handle the destination (used a query parameter, instead of a path parameter).
- Fixed a bug where the compat Push endpoint for Images did not send the progress of the push and the digest of the pushed image in the response body.
- Fixed a bug where the compat List endpoint for Networks returned null, instead of an empty array (`[]`), when no networks were present .
- Fixed a bug where the compat List endpoint for Networks returned nulls, instead of empty maps, for networks that do not have Labels and/or Options.
- The Libpod Inspect endpoint for networks (`/libpod/network/$ID/json`) now has an alias at `/libpod/network/$ID` .
- Fixed a bug where the libpod Inspect endpoint for Networks returned a 1-size array of results, instead of a single result .
- The Compat List endpoint for Networks now supports the legacy format for filters in parallel with the current filter format .
- Fixed a bug where the compat Create endpoint for Containers did not properly handle tmpfs filesystems specified with options .
- Fixed a bug where the compat Create endpoint for Containers did not create bind-mount source directories .
- Fixed a bug where the compat Create endpoint for Containers did not properly handle the `NanoCpus` option .
- Fixed a bug where the Libpod create endpoint for Containers has a misnamed field in its JSON.
- Fixed a bug where the compat List endpoint for Containers did not populate information on forwarded ports 
- Fixed a bug where the compat List endpoint for Containers did not populate information on container CNI networks .
- Fixed a bug where the compat and libpod Stop endpoints for Containers would ignore a timeout of 0.
- Fixed a bug where the compat and libpod Resize endpoints for Containers did not set the correct terminal sizes (dimensions were reversed) .
- Fixed a bug where the compat Remove endpoint for Containers would not return 404 when attempting to remove a container that does not exist .
- Fixed a bug where the compat Prune endpoint for Volumes would still prune even if an invalid filter was specified.
- Numerous bugs related to filters have been addressed.

Update podman to 3.0.1

3.0.1:

Changes:

- Several frequently-occurring `WARN` level log messages have been downgraded to `INFO` or `DEBUG` to not clutter terminal output.

Bugfixes:

- Fixed a bug where the `Created` field of `podman ps --format=json` was formatted as a string instead of an Unix timestamp (integer) .
- Fixed a bug where failing lookups of individual layers during the `podman images` command would cause the whole command to fail without printing output.
- Fixed a bug where `--cgroups=split` did not function properly on cgroups v1 systems.
- Fixed a bug where mounting a volume over an directory in the container that existed, but was empty, could fail .
- Fixed a bug where mounting a volume over a directory in the container that existed could copy the entirety of the container's rootfs, instead of just the directory mounted over, into the volume .
- Fixed a bug where Podman would treat the `--entrypoint=['']` option to `podman run` and `podman create` as a literal empty string in the entrypoint, when instead it should have been ignored .
- Fixed a bug where Podman would set the `HOME` environment variable to `''` when the container ran as a user without an assigned home directory .
- Fixed a bug where specifying a pod infra image that had no tags (by using its ID) would cause `podman pod create` to panic .
- Fixed a bug where the `--runtime` option was not properly handled by the `podman build` command .
- Fixed a bug where Podman would incorrectly print an error message related to the remote API when the remote API was not in use and starting Podman failed.
- Fixed a bug where Podman would change ownership of a container's working directory, even if it already existed .
- Fixed a bug where the `podman generate systemd --new` command would incorrectly escape `%t` when generating the path for the PID file .
- Fixed a bug where Podman could, when run inside a Podman container with the host's containers/storage directory mounted into the container, erroneously detect a reboot and reset container state if the temporary directory was not also mounted in .
- Fixed a bug where some options of the `podman build` command (including but not limited to `--jobs`) were nonfunctional .
### API
- Fixed a breaking change to the Libpod Wait API for Containers where the Conditions parameter changed type in Podman v3.0 .
- Fixed a bug where the Compat Create endpoint for Containers did not properly handle forwarded ports that did not specify a host port.
- Fixed a bug where the Libpod Wait endpoint for Containers could write duplicate headers after an error occurred.
- Fixed a bug where the Compat Create endpoint for Images would not pull images that already had a matching tag present locally, even if a more recent version was available at the registry .
- The Compat Create endpoint for Images has had its compatibility with Docker improved, allowing its use with the `docker-java` library.
### Misc
- Updated Buildah to v1.19.4
- Updated the containers/storage library to v1.24.6

3.0.0:

Features:

- Podman now features initial support for Docker Compose.
- Added the `podman rename` command, which allows containers to be renamed after they are created .
- The Podman remote client now supports the `podman copy` command.
- A new command, `podman network reload`, has been added. This command will re-configure the network of all running containers, and can be used to recreate firewall rules lost when the system firewall was reloaded (e.g. via `firewall-cmd --reload`).
- Podman networks now have IDs. They can be seen in `podman network ls` and can be used when removing and inspecting networks. Existing networks receive IDs automatically.
- Podman networks now also support labels. They can be added via the `--label` option to `network create`, and `podman network ls` can filter labels based on them.
- The `podman network create` command now supports setting bridge MTU and VLAN through the `--opt` option .
- The `podman container checkpoint` and `podman container restore` commands can now checkpoint and restore containers that include volumes.
- The `podman container checkpoint` command now supports the `--with-previous` and `--pre-checkpoint` options, and the `podman container restore` command now support the `--import-previous` option. These add support for two-step checkpointing with lowered dump times.
- The `podman push` command can now push manifest lists. Podman will first attempt to push as an image, then fall back to pushing as a manifest list if that fails.
- The `podman generate kube` command can now be run on multiple containers at once, and will generate a single pod containing all of them.
- The `podman generate kube` and `podman play kube` commands now support Kubernetes DNS configuration, and will preserve custom DNS configuration when exporting or importing YAML .
- The `podman generate kube` command now properly supports generating YAML for containers and pods creating using host networking (`--net=host`) .
- The `podman kill` command now supports a `--cidfile` option to kill containers given a file containing the container's ID .
- The `podman pod create` command now supports the `--net=none` option .
- The `podman volume create` command can now specify volume UID and GID as options with the `UID` and `GID` fields passed to the the `--opt` option.
- Initial support has been added for Docker Volume Plugins. Podman can now define available plugins in `containers.conf` and use them to create volumes with `podman volume create --driver`.
- The `podman run` and `podman create` commands now support a new option, `--platform`, to specify the platform of the image to be used when creating the container.
- The `--security-opt` option to `podman run` and `podman create` now supports the `systempaths=unconfined` option to unrestrict access to all paths in the container, as well as `mask` and `unmask` options to allow more granular restriction of container paths.
- The `podman stats --format` command now supports a new format specified, `MemUsageBytes`, which prints the raw bytes of memory consumed by a container without human-readable formatting [#8945].
- The `podman ps` command can now filter containers based on what pod they are joined to via the `pod` filter .
- The `podman pod ps` command can now filter pods based on what networks they are joined to via the `network` filter.
- The `podman pod ps` command can now print information on what networks a pod is joined to via the `.Networks` specifier to the `--format` option.
- The `podman system prune` command now supports filtering what containers, pods, images, and volumes will be pruned.
- The `podman volume prune` commands now supports filtering what volumes will be pruned.
- The `podman system prune` command now includes information on space reclaimed .
- The `podman info` command will now properly print information about packages in use on Gentoo and Arch systems.
- The `containers.conf` file now contains an option for disabling creation of a new kernel keyring on container creation .
- The `podman image sign` command can now sign multi-arch images by producing a signature for each image in a given manifest list.
- The `podman image sign` command, when run as rootless, now supports per-user registry configuration files in `$HOME/.config/containers/registries.d`.
- Configuration options for `slirp4netns` can now be set system-wide via the `NetworkCmdOptions` configuration option in `containers.conf`.
- The MTU of `slirp4netns` can now be configured via the `mtu=` network command option (e.g. `podman run --net slirp4netns:mtu=9000`).

Security:

- A fix for CVE-2021-20199 is included. Podman between v1.8.0 and v2.2.1 used `127.0.0.1` as the source address for all traffic forwarded into rootless containers by a forwarded port; this has been changed to address the issue. (bsc#1181640)

Changes:

- Shortname aliasing support has now been turned on by default. All Podman commands that must pull an image will, if a TTY is available, prompt the user about what image to pull.
- The `podman load` command no longer accepts a `NAME[:TAG]` argument. The presence of this argument broke CLI compatibility with Docker by making `docker load` commands unusable with Podman .
- The Go bindings for the HTTP API have been rewritten with a focus on limiting dependency footprint and improving extensibility. Read more [here].
- The legacy Varlink API has been completely removed from Podman.
- The default log level for Podman has been changed from Error to Warn.
- The `podman network create` command can now create `macvlan` networks using the `--driver macvlan` option for Docker compatibility. The existing `--macvlan` flag has been deprecated and will be removed in Podman 4.0 some time next year.
- The `podman inspect` command has had the `LogPath` and `LogTag` fields moved into the `LogConfig` structure (from the root of the Inspect structure). The maximum size of the log file is also included.
- The `podman generate systemd` command no longer generates unit files using the deprecated `KillMode=none` option .
- The `podman stop` command now releases the container lock while waiting for it to stop - as such, commands like `podman ps` will no longer block until `podman stop` completes .
- Networks created with `podman network create --internal` no longer use the `dnsname` plugin. This configuration never functioned as expected.
- Error messages for the remote Podman client have been improved when it cannot connect to a Podman service.
- Error messages for `podman run` when an invalid SELinux is specified have been improved.
- Rootless Podman features improved support for containers with a single user mapped into the rootless user namespace.
- Pod infra containers now respect default sysctls specified in `containers.conf` allowing for advanced configuration of the namespaces they will share.
- SSH public key handling for remote Podman has been improved.
### Bugfixes
- Fixed a bug where the `podman history --no-trunc` command would truncate the `Created By` field .
- Fixed a bug where root containers that did not explicitly specify a CNI network to join did not generate an entry for the network in use in the `Networks` field of the output of `podman inspect` .
- Fixed a bug where, under some circumstances, container working directories specified by the image (via the `WORKDIR` instruction) but not present in the image, would not be created .
- Fixed a bug where the `podman generate systemd` command would generate invalid unit files if the container was creating using a command line that included doubled braces (`{{` and `}}`), e.g. `--log-opt-tag={{.Name}}` .
- Fixed a bug where the `podman generate systemd --new` command could generate unit files including invalid Podman commands if the container was created using merged short options (e.g. `podman run -dt`) .
- Fixed a bug where the `podman generate systemd --new` command could generate unit files that did not handle Podman commands including some special characters (e.g. `$`) ([#9176]
- Fixed a bug where rootless containers joining CNI networks could not set a static IP address .
- Fixed a bug where rootless containers joining CNI networks could not set network aliases .
- Fixed a bug where the remote client could, under some circumstances, not include the `Containerfile` when sending build context to the server .
- Fixed a bug where rootless Podman did not mount `/sys` as a new `sysfs` in some circumstances where it was acceptable.
- Fixed a bug where rootless containers that both joined a user namespace and a CNI networks would cause a segfault. These options are incompatible and now return an error.
- Fixed a bug where the `podman play kube` command did not properly handle `CMD` and `ARGS` from images .
- Fixed a bug where the `podman play kube` command did not properly handle environment variables from images .
- Fixed a bug where the `podman play kube` command did not properly print errors that occurred when starting containers.
- Fixed a bug where the `podman play kube` command errored when `hostNetwork` was used .
- Fixed a bug where the `podman play kube` command would always pull images when the `:latest` tag was specified, even if the image was available locally .
- Fixed a bug where the `podman play kube` command did not properly handle SELinux configuration, rending YAML with custom SELinux configuration unusable .
- Fixed a bug where the `podman generate kube` command incorrectly populated the `args` and `command` fields of generated YAML .
- Fixed a bug where containers in a pod would create a duplicate entry in the pod's shared `/etc/hosts` file every time the container restarted .
- Fixed a bug where the `podman search --list-tags` command did not support the `--format` option .
- Fixed a bug where the `http_proxy` option in `containers.conf` was not being respected, and instead was set unconditionally to true .
- Fixed a bug where rootless Podman could, on systems with a recent Conmon and users with a long username, fail to attach to containers .
- Fixed a bug where the `podman images` command would break and fail to display any images if an empty manifest list was present in storage .
- Fixed a bug where locale environment variables were not properly passed on to Conmon.
- Fixed a bug where Podman would not build on the MIPS architecture .
- Fixed a bug where rootless Podman could fail to properly configure user namespaces for rootless containers when the user specified a `--uidmap` option that included a mapping beginning with UID `0`.
- Fixed a bug where the `podman logs` command using the `k8s-file` backend did not properly handle partial log lines with a length of 1 .
- Fixed a bug where the `podman logs` command with the `--follow` option did not properly handle log rotation .
- Fixed a bug where user-specified `HOSTNAME` environment variables were overwritten by Podman .
- Fixed a bug where Podman would applied default sysctls from `containers.conf` in too many situations (e.g. applying network sysctls when the container shared its network with a pod).
- Fixed a bug where Podman did not properly handle cases where a secondary image store was in use and an image was present in both the secondary and primary stores .
- Fixed a bug where systemd-managed rootless Podman containers where the user in the container was not root could fail as the container's PID file was not accessible to systemd on the host .
- Fixed a bug where the `--privileged` option to `podman run` and `podman create` would, under some circumstances, not disable Seccomp .
- Fixed a bug where the `podman exec` command did not properly add capabilities when the container or exec session were run with `--privileged`.
- Fixed a bug where rootless Podman would use the `--enable-sandbox` option to `slirp4netns` unconditionally, even when `pivot_root` was disabled, rendering `slirp4netns` unusable when `pivot_root` was disabled .
- Fixed a bug where `podman build --logfile` did not actually write the build's log to the logfile.
- Fixed a bug where the `podman system service` command did not close STDIN, and could display user-interactive prompts .
- Fixed a bug where the `podman system reset` command could, under some circumstances, remove all the contents of the `XDG_RUNTIME_DIR` directory .
- Fixed a bug where the `podman network create` command created CNI configurations that did not include a default gateway .
- Fixed a bug where the `podman.service` systemd unit provided by default used the wrong service type, and would cause systemd to not correctly register the service as started .
- Fixed a bug where, if the `TMPDIR` environment variable was set for the container engine in `containers.conf`, it was being ignored.
- Fixed a bug where the `podman events` command did not properly handle future times given to the `--until` option .
- Fixed a bug where the `podman logs` command wrote container `STDERR` logs to `STDOUT` instead of `STDERR` .
- Fixed a bug where containers created from an image with multiple tags would report that they were created from the wrong tag .
- Fixed a bug where container capabilities were not set properly when the `--cap-add=all` and `--user` options to `podman create` and `podman run` were combined.
- Fixed a bug where the `--layers` option to `podman build` was nonfunctional .
- Fixed a bug where the `podman system prune` command did not act recursively, and thus would leave images, containers, pods, and volumes present that would be removed by a subsequent call to `podman system prune` .
- Fixed a bug where the `--publish` option to `podman run` and `podman create` did not properly handle ports specified as a range of ports with no host port specified .
- Fixed a bug where `--format` did not support JSON output for individual fields .
- Fixed a bug where the `podman stats` command would fail when run on root containers using the `slirp4netns` network mode .
- Fixed a bug where the Podman remote client would ask for a password even if the server's SSH daemon did not support password authentication .
- Fixed a bug where the `podman stats` command would fail if the system did not support one or more of the cgroup controllers Podman supports .
- Fixed a bug where the `--mount` option to `podman create` and `podman run` did not ignore the `consistency` mount option.
- Fixed a bug where failures during the resizing of a container's TTY would print the wrong error.
- Fixed a bug where the `podman network disconnect` command could cause the `podman inspect` command to fail for a container until it was restarted .
- Fixed a bug where containers created from a read-only rootfs (using the `--rootfs` option to `podman create` and `podman run`) would fail .
- Fixed a bug where specifying Go templates to the `--format` option to multiple Podman commands did not support the `join` function .
- Fixed a bug where the `podman rmi` command could, when run in parallel on multiple images, return `layer not known` errors .
- Fixed a bug where the `podman inspect` command on containers displayed unlimited ulimits incorrectly .
- Fixed a bug where Podman would fail to start when a volume was mounted over a directory in a container that contained symlinks that terminated outside the directory and its subdirectories .
### API
- All Libpod Pod APIs have been modified to properly report errors with individual containers. Cases where the operation as a whole succeeded but individual containers failed now report an HTTP 409 error .
- The Compat API for Containers now supports the Rename and Copy APIs.
- Fixed a bug where the Compat Prune APIs (for volumes, containers, and images) did not return the amount of space reclaimed in their responses.
- Fixed a bug where the Compat and Libpod Exec APIs for Containers would drop errors that occurred prior to the exec session successfully starting (e.g. a 'no such file' error if an invalid executable was passed) 
- Fixed a bug where the Volumes field in the Compat Create API for Containers was being ignored .
- Fixed a bug where the NetworkMode field in the Compat Create API for Containers was not handling some values, e.g. `container:`, correctly.
- Fixed a bug where the Compat Create API for Containers did not set container name properly.
- Fixed a bug where containers created using the Compat Create API unconditionally used Kubernetes file logging (the default specified in `containers.conf` is now used).
- Fixed a bug where the Compat Inspect API for Containers could include container states not recognized by Docker.
- Fixed a bug where Podman did not properly clean up after calls to the Events API when the `journald` backend was in use, resulting in a leak of file descriptors .
- Fixed a bug where the Libpod Pull endpoint for Images could fail with an `index out of range` error under certain circumstances .
- Fixed a bug where the Libpod Exists endpoint for Images could panic.
- Fixed a bug where the Compat List API for Containers did not support all filters .
- Fixed a bug where the Compat List API for Containers did not properly populate the Status field.
- Fixed a bug where the Compat and Libpod Resize APIs for Containers ignored the height and width parameters .
- Fixed a bug where the Compat Search API for Images returned an incorrectly-formatted JSON response .
- Fixed a bug where the Compat Load API for Images did not properly clean up temporary files.
- Fixed a bug where the Compat Create API for Networks could panic when an empty IPAM configuration was specified.
- Fixed a bug where the Compat Inspect and List APIs for Networks did not include Scope.
- Fixed a bug where the Compat Wait endpoint for Containers did not support the same wait conditions that Docker did.

		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-19"/>
	<updated date="2022-09-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1176804">SUSE bug 1176804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177598">SUSE bug 1177598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181640">SUSE bug 1181640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182998">SUSE bug 1182998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188520">SUSE bug 1188520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189893">SUSE bug 1189893</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14370/">CVE-2020-14370</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-15157/">CVE-2020-15157</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-20199/">CVE-2021-20199</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20291/">CVE-2021-20291</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3602/">CVE-2021-3602</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708252" comment="libcontainers-common-20210626-150100.3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139532" version="1" class="patch">
	<metadata>
		<title>Security update for oniguruma (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1142847" ref_url="https://bugzilla.suse.com/1142847" source="BUGZILLA"/>
		<reference ref_id="1150130" ref_url="https://bugzilla.suse.com/1150130" source="BUGZILLA"/>
		<reference ref_id="1157805" ref_url="https://bugzilla.suse.com/1157805" source="BUGZILLA"/>
		<reference ref_id="1164550" ref_url="https://bugzilla.suse.com/1164550" source="BUGZILLA"/>
		<reference ref_id="1164569" ref_url="https://bugzilla.suse.com/1164569" source="BUGZILLA"/>
		<reference ref_id="1177179" ref_url="https://bugzilla.suse.com/1177179" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13224" ref_url="https://www.suse.com/security/cve/CVE-2019-13224/" source="CVE"/>
		<reference ref_id="CVE-2019-16163" ref_url="https://www.suse.com/security/cve/CVE-2019-16163/" source="CVE"/>
		<reference ref_id="CVE-2019-19203" ref_url="https://www.suse.com/security/cve/CVE-2019-19203/" source="CVE"/>
		<reference ref_id="CVE-2019-19204" ref_url="https://www.suse.com/security/cve/CVE-2019-19204/" source="CVE"/>
		<reference ref_id="CVE-2019-19246" ref_url="https://www.suse.com/security/cve/CVE-2019-19246/" source="CVE"/>
		<reference ref_id="CVE-2020-26159" ref_url="https://www.suse.com/security/cve/CVE-2020-26159/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012320.html" source="SUSE-SU"/>
		<description>
This update for oniguruma fixes the following issues:

- CVE-2019-19246: Fixed an out of bounds access during regular
  expression matching (bsc#1157805).
- CVE-2019-19204: Fixed an out of bounds access when compiling a
  crafted regular expression (bsc#1164569).
- CVE-2019-19203: Fixed an out of bounds access when performing a
  string search (bsc#1164550).
- CVE-2019-16163: Fixed an uncontrolled recursion issue when compiling
  a crafted regular expression, which could lead to denial of service (bsc#1150130).
- CVE-2020-26159: Fixed an off-by-one buffer overflow (bsc#1177179).
- CVE-2019-13224: Fixed a potential use-after-free when handling
  multiple different encodings (bsc#1142847).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-21"/>
	<updated date="2022-09-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1142847">SUSE bug 1142847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150130">SUSE bug 1150130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157805">SUSE bug 1157805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164550">SUSE bug 1164550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164569">SUSE bug 1164569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177179">SUSE bug 1177179</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-13224/">CVE-2019-13224</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16163/">CVE-2019-16163</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19203/">CVE-2019-19203</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19204/">CVE-2019-19204</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19246/">CVE-2019-19246</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26159/">CVE-2020-26159</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708039" comment="libonig4-6.7.0-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708040" comment="oniguruma-devel-6.7.0-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139533" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1202169" ref_url="https://bugzilla.suse.com/1202169" source="BUGZILLA"/>
		<reference ref_id="1202807" ref_url="https://bugzilla.suse.com/1202807" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32893" ref_url="https://www.suse.com/security/cve/CVE-2022-32893/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012351.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- CVE-2022-32893: Fixed processing maliciously crafted web content may lead to arbitrary code execution (bsc#1202807).

Bugfixes:
- Fixed WebKitGTK not allowing to be used from non-main threads (bsc#1202169).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-23"/>
	<updated date="2022-09-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202169">SUSE bug 1202169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202807">SUSE bug 1202807</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32893/">CVE-2022-32893</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009714218" comment="libjavascriptcoregtk-4_0-18-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714219" comment="libwebkit2gtk-4_0-37-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714220" comment="libwebkit2gtk3-lang-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714221" comment="typelib-1_0-JavaScriptCore-4_0-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714222" comment="typelib-1_0-WebKit2-4_0-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714223" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714224" comment="webkit2gtk-4_0-injected-bundles-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714225" comment="webkit2gtk3-devel-2.36.7-150000.3.112.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139534" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1177440" ref_url="https://bugzilla.suse.com/1177440" source="BUGZILLA"/>
		<reference ref_id="1180153" ref_url="https://bugzilla.suse.com/1180153" source="BUGZILLA"/>
		<reference ref_id="1188944" ref_url="https://bugzilla.suse.com/1188944" source="BUGZILLA"/>
		<reference ref_id="1191881" ref_url="https://bugzilla.suse.com/1191881" source="BUGZILLA"/>
		<reference ref_id="1194535" ref_url="https://bugzilla.suse.com/1194535" source="BUGZILLA"/>
		<reference ref_id="1196616" ref_url="https://bugzilla.suse.com/1196616" source="BUGZILLA"/>
		<reference ref_id="1197158" ref_url="https://bugzilla.suse.com/1197158" source="BUGZILLA"/>
		<reference ref_id="1199482" ref_url="https://bugzilla.suse.com/1199482" source="BUGZILLA"/>
		<reference ref_id="1199665" ref_url="https://bugzilla.suse.com/1199665" source="BUGZILLA"/>
		<reference ref_id="1201019" ref_url="https://bugzilla.suse.com/1201019" source="BUGZILLA"/>
		<reference ref_id="1201420" ref_url="https://bugzilla.suse.com/1201420" source="BUGZILLA"/>
		<reference ref_id="1201705" ref_url="https://bugzilla.suse.com/1201705" source="BUGZILLA"/>
		<reference ref_id="1201726" ref_url="https://bugzilla.suse.com/1201726" source="BUGZILLA"/>
		<reference ref_id="1201948" ref_url="https://bugzilla.suse.com/1201948" source="BUGZILLA"/>
		<reference ref_id="1202096" ref_url="https://bugzilla.suse.com/1202096" source="BUGZILLA"/>
		<reference ref_id="1202097" ref_url="https://bugzilla.suse.com/1202097" source="BUGZILLA"/>
		<reference ref_id="1202154" ref_url="https://bugzilla.suse.com/1202154" source="BUGZILLA"/>
		<reference ref_id="1202335" ref_url="https://bugzilla.suse.com/1202335" source="BUGZILLA"/>
		<reference ref_id="1202346" ref_url="https://bugzilla.suse.com/1202346" source="BUGZILLA"/>
		<reference ref_id="1202347" ref_url="https://bugzilla.suse.com/1202347" source="BUGZILLA"/>
		<reference ref_id="1202393" ref_url="https://bugzilla.suse.com/1202393" source="BUGZILLA"/>
		<reference ref_id="1202396" ref_url="https://bugzilla.suse.com/1202396" source="BUGZILLA"/>
		<reference ref_id="1202672" ref_url="https://bugzilla.suse.com/1202672" source="BUGZILLA"/>
		<reference ref_id="1202897" ref_url="https://bugzilla.suse.com/1202897" source="BUGZILLA"/>
		<reference ref_id="1202898" ref_url="https://bugzilla.suse.com/1202898" source="BUGZILLA"/>
		<reference ref_id="1203098" ref_url="https://bugzilla.suse.com/1203098" source="BUGZILLA"/>
		<reference ref_id="1203107" ref_url="https://bugzilla.suse.com/1203107" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36516" ref_url="https://www.suse.com/security/cve/CVE-2020-36516/" source="CVE"/>
		<reference ref_id="CVE-2021-4203" ref_url="https://www.suse.com/security/cve/CVE-2021-4203/" source="CVE"/>
		<reference ref_id="CVE-2022-1012" ref_url="https://www.suse.com/security/cve/CVE-2022-1012/" source="CVE"/>
		<reference ref_id="CVE-2022-20368" ref_url="https://www.suse.com/security/cve/CVE-2022-20368/" source="CVE"/>
		<reference ref_id="CVE-2022-20369" ref_url="https://www.suse.com/security/cve/CVE-2022-20369/" source="CVE"/>
		<reference ref_id="CVE-2022-21385" ref_url="https://www.suse.com/security/cve/CVE-2022-21385/" source="CVE"/>
		<reference ref_id="CVE-2022-2588" ref_url="https://www.suse.com/security/cve/CVE-2022-2588/" source="CVE"/>
		<reference ref_id="CVE-2022-26373" ref_url="https://www.suse.com/security/cve/CVE-2022-26373/" source="CVE"/>
		<reference ref_id="CVE-2022-2639" ref_url="https://www.suse.com/security/cve/CVE-2022-2639/" source="CVE"/>
		<reference ref_id="CVE-2022-2663" ref_url="https://www.suse.com/security/cve/CVE-2022-2663/" source="CVE"/>
		<reference ref_id="CVE-2022-29581" ref_url="https://www.suse.com/security/cve/CVE-2022-29581/" source="CVE"/>
		<reference ref_id="CVE-2022-2977" ref_url="https://www.suse.com/security/cve/CVE-2022-2977/" source="CVE"/>
		<reference ref_id="CVE-2022-3028" ref_url="https://www.suse.com/security/cve/CVE-2022-3028/" source="CVE"/>
		<reference ref_id="CVE-2022-36879" ref_url="https://www.suse.com/security/cve/CVE-2022-36879/" source="CVE"/>
		<reference ref_id="CVE-2022-39188" ref_url="https://www.suse.com/security/cve/CVE-2022-39188/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012386.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-36516: Fixed an issue in the mixed IPID assignment method where an attacker was able to inject data into or terminate a victim's TCP session (bnc#1196616).
- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bnc#1194535).
- CVE-2022-1012: Fixed a memory leak problem that was found in the TCP source port generation algorithm in net/ipv4/tcp.c (bnc#1199482).
- CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bsc#1202346).
- CVE-2022-20369: Fixed out of bounds write in v4l2_m2m_querybuf of v4l2-mem2mem.c (bnc#1202347).
- CVE-2022-21385: Fixed a flaw in net_rds_alloc_sgs() that allowed unprivileged local users to crash the machine (bnc#1202897).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-26373: Fixed non-transparent sharing of return predictor targets between contexts in some Intel Processors (bnc#1201726).
- CVE-2022-2639: Fixed an integer coercion error that was found in the openvswitch kernel module (bnc#1202154).
- CVE-2022-2663: Fixed an issue that was found in nf_conntrack_irc where the message handling could be confused and incorrectly matches the message (bnc#1202097).
- CVE-2022-29581: Fixed improper update of reference count vulnerability in net/sched that allowed a local attacker to cause privilege escalation to root (bnc#1199665).
- CVE-2022-2977: Fixed reference counting for struct tpm_chip (bsc#1202672).
- CVE-2022-3028: Fixed race condition that was found in the IP framework for transforming packets (XFRM subsystem) (bnc#1202898).
- CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bnc#1201948).
- CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has stale TLB entries (bnc#1203107).

The following non-security bugs were fixed:

- rpm: Fix parsing of rpm/macros.kernel-source on SLE12 (bsc#1201019).
- cifs: fix error paths in cifs_tree_connect() (bsc#1177440).
- cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (bsc#1188944).
- cifs: report error instead of invalid when revalidating a dentry fails (bsc#1177440).
- cifs: skip trailing separators of prefix paths (bsc#1188944).
- kernel-obs-build: include qemu_fw_cfg (boo#1201705)
- lightnvm: Remove lightnvm implemenation (bsc#1191881 bsc#1201420 ZDI-CAN-17325).
- md/bitmap: do not set sb values if can't pass sanity check (bsc#1197158).
- mm/rmap.c: do not reuse anon_vma if we just want a copy (git-fixes, bsc#1203098).
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (git-fixes, bsc#1203098). 
- net_sched: cls_route: disallow handle of 0 (bsc#1202393).
- net_sched: cls_route: disallow handle of 0 (bsc#1202393).
- objtool: Add --backtrace support (bsc#1202396).
- objtool: Add support for intra-function calls (bsc#1202396).
- objtool: Allow no-op CFI ops in alternatives (bsc#1202396).
- objtool: Convert insn type to enum (bsc#1202396).
- objtool: Do not use ignore flag for fake jumps (bsc#1202396).
- objtool: Fix !CFI insn_state propagation (bsc#1202396).
- objtool: Fix ORC vs alternatives (bsc#1202396).
- objtool: Fix sibling call detection (bsc#1202396).
- objtool: Make handle_insn_ops() unconditional (bsc#1202396).
- objtool: Remove INSN_STACK (bsc#1202396).
- objtool: Remove check preventing branches within alternative (bsc#1202396).
- objtool: Rename elf_open() to prevent conflict with libelf from elftoolchain (bsc#1202396).
- objtool: Rename struct cfi_state (bsc#1202396).
- objtool: Rework allocating stack_ops on decode (bsc#1202396).
- objtool: Rewrite alt-&gt;skip_orig (bsc#1202396).
- objtool: Set insn-&gt;func for alternatives (bsc#1202396).
- objtool: Support conditional retpolines (bsc#1202396).
- objtool: Support multiple stack_op per instruction (bsc#1202396).
- objtool: Track original function across branches (bsc#1202396).
- objtool: Uniquely identify alternative instruction groups (bsc#1202396).
- objtool: Use Elf_Scn typedef instead of assuming struct name (bsc#1202396).
- tcp: add some entropy in __inet_hash_connect() (bsc#1180153 bsc#1202335).
- tcp: change source port randomizarion at connect() time (bsc#1180153 bsc#1202335).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-26"/>
	<updated date="2022-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177440">SUSE bug 1177440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180153">SUSE bug 1180153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188944">SUSE bug 1188944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191881">SUSE bug 1191881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194535">SUSE bug 1194535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196616">SUSE bug 1196616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197158">SUSE bug 1197158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199482">SUSE bug 1199482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199665">SUSE bug 1199665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201019">SUSE bug 1201019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201420">SUSE bug 1201420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201705">SUSE bug 1201705</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201726">SUSE bug 1201726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201948">SUSE bug 1201948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202096">SUSE bug 1202096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202097">SUSE bug 1202097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202154">SUSE bug 1202154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202335">SUSE bug 1202335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202346">SUSE bug 1202346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202347">SUSE bug 1202347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202393">SUSE bug 1202393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202396">SUSE bug 1202396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202672">SUSE bug 1202672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202897">SUSE bug 1202897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202898">SUSE bug 1202898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203098">SUSE bug 1203098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203107">SUSE bug 1203107</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36516/">CVE-2020-36516</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4203/">CVE-2021-4203</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1012/">CVE-2022-1012</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20368/">CVE-2022-20368</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20369/">CVE-2022-20369</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21385/">CVE-2022-21385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2588/">CVE-2022-2588</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26373/">CVE-2022-26373</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-2639/">CVE-2022-2639</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-2663/">CVE-2022-2663</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29581/">CVE-2022-29581</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2977/">CVE-2022-2977</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3028/">CVE-2022-3028</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36879/">CVE-2022-36879</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-39188/">CVE-2022-39188</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710921" comment="kernel-default-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710922" comment="kernel-default-base-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710923" comment="kernel-default-devel-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710924" comment="kernel-devel-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710925" comment="kernel-docs-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710926" comment="kernel-macros-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710927" comment="kernel-obs-build-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710928" comment="kernel-source-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710929" comment="kernel-syms-4.12.14-150100.197.123.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139535" version="1" class="patch">
	<metadata>
		<title>Security update for dpdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1202903" ref_url="https://bugzilla.suse.com/1202903" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2132" ref_url="https://www.suse.com/security/cve/CVE-2022-2132/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012404.html" source="SUSE-SU"/>
		<description>
This update for dpdk fixes the following issues:

- CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs (bsc#1202903).    
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-27"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202903">SUSE bug 1202903</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2132/">CVE-2022-2132</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710687" comment="dpdk-18.11.9-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710688" comment="dpdk-devel-18.11.9-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710689" comment="dpdk-kmp-default-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710690" comment="dpdk-tools-18.11.9-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710691" comment="libdpdk-18_11-18.11.9-150100.4.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139536" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1203477" ref_url="https://bugzilla.suse.com/1203477" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40956" ref_url="https://www.suse.com/security/cve/CVE-2022-40956/" source="CVE"/>
		<reference ref_id="CVE-2022-40957" ref_url="https://www.suse.com/security/cve/CVE-2022-40957/" source="CVE"/>
		<reference ref_id="CVE-2022-40958" ref_url="https://www.suse.com/security/cve/CVE-2022-40958/" source="CVE"/>
		<reference ref_id="CVE-2022-40959" ref_url="https://www.suse.com/security/cve/CVE-2022-40959/" source="CVE"/>
		<reference ref_id="CVE-2022-40960" ref_url="https://www.suse.com/security/cve/CVE-2022-40960/" source="CVE"/>
		<reference ref_id="CVE-2022-40962" ref_url="https://www.suse.com/security/cve/CVE-2022-40962/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012407.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

  Mozilla Firefox was updated from 102.2.0esr to 102.3.0esr (bsc#1203477):

  - CVE-2022-40959: Fixed bypassing FeaturePolicy restrictions on transient pages.
  - CVE-2022-40960: Fixed data-race when parsing non-UTF-8 URLs in threads.
  - CVE-2022-40958: Fixed bypassing secure context restriction for cookies with __Host and __Secure prefix.
  - CVE-2022-40956: Fixed content-security-policy base-uri bypass.
  - CVE-2022-40957: Fixed incoherent instruction cache when building WASM on ARM64.
  - CVE-2022-40962: Fixed memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-27"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203477">SUSE bug 1203477</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-40956/">CVE-2022-40956</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-40957/">CVE-2022-40957</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-40958/">CVE-2022-40958</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40959/">CVE-2022-40959</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-40960/">CVE-2022-40960</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40962/">CVE-2022-40962</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009714214" comment="MozillaFirefox-102.3.0-150000.150.59.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714215" comment="MozillaFirefox-devel-102.3.0-150000.150.59.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714216" comment="MozillaFirefox-translations-common-102.3.0-150000.150.59.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714217" comment="MozillaFirefox-translations-other-102.3.0-150000.150.59.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139537" version="1" class="patch">
	<metadata>
		<title>Security update for libostree (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1201770" ref_url="https://bugzilla.suse.com/1201770" source="BUGZILLA"/>
		<reference ref_id="CVE-2014-9862" ref_url="https://www.suse.com/security/cve/CVE-2014-9862/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012442.html" source="SUSE-SU"/>
		<description>
This update for libostree fixes the following issues:

- CVE-2014-9862: Fixed arbitrary write on heap vulnerability (bsc#1201770).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-28"/>
	<updated date="2022-09-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201770">SUSE bug 1201770</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9862/">CVE-2014-9862</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709749" comment="libostree-2018.9-150100.7.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709750" comment="libostree-1-1-2018.9-150100.7.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709751" comment="libostree-devel-2018.9-150100.7.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709752" comment="typelib-1_0-OSTree-1_0-2018.9-150100.7.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139538" version="1" class="patch">
	<metadata>
		<title>Security update for vsftpd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1021387" ref_url="https://bugzilla.suse.com/1021387" source="BUGZILLA"/>
		<reference ref_id="1052900" ref_url="https://bugzilla.suse.com/1052900" source="BUGZILLA"/>
		<reference ref_id="1181400" ref_url="https://bugzilla.suse.com/1181400" source="BUGZILLA"/>
		<reference ref_id="1187678" ref_url="https://bugzilla.suse.com/1187678" source="BUGZILLA"/>
		<reference ref_id="1187686" ref_url="https://bugzilla.suse.com/1187686" source="BUGZILLA"/>
		<reference ref_id="786024" ref_url="https://bugzilla.suse.com/786024" source="BUGZILLA"/>
		<reference ref_id="971784" ref_url="https://bugzilla.suse.com/971784" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3618" ref_url="https://www.suse.com/security/cve/CVE-2021-3618/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012444.html" source="SUSE-SU"/>
		<description>
This update for vsftpd fixes the following issues:

- CVE-2021-3618: Enforced security checks against ALPACA attack (PM-3322, jsc#SLE-23895, bsc#1187686, bsc#1187678).
- Added hardening to systemd services (bsc#1181400).

Bugfixes:
- Fixed a seccomp failure in FIPS mode when SSL was enabled (bsc#1052900).
- Allowed wait4() to be called so that the broker can wait for its child processes (bsc#1021387).
- Fixed hang when using seccomp and syslog (bsc#971784).
- Allowed sendto() syscall when /dev/log support is enabled (bsc#786024).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-28"/>
	<updated date="2022-09-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1021387">SUSE bug 1021387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052900">SUSE bug 1052900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181400">SUSE bug 1181400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187678">SUSE bug 1187678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187686">SUSE bug 1187686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786024">SUSE bug 786024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/971784">SUSE bug 971784</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3618/">CVE-2021-3618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009713842" comment="vsftpd-3.0.5-150000.7.19.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139539" version="1" class="patch">
	<metadata>
		<title>Security update for slurm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1199278" ref_url="https://bugzilla.suse.com/1199278" source="BUGZILLA"/>
		<reference ref_id="1199279" ref_url="https://bugzilla.suse.com/1199279" source="BUGZILLA"/>
		<reference ref_id="1201674" ref_url="https://bugzilla.suse.com/1201674" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29500" ref_url="https://www.suse.com/security/cve/CVE-2022-29500/" source="CVE"/>
		<reference ref_id="CVE-2022-29501" ref_url="https://www.suse.com/security/cve/CVE-2022-29501/" source="CVE"/>
		<reference ref_id="CVE-2022-31251" ref_url="https://www.suse.com/security/cve/CVE-2022-31251/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012448.html" source="SUSE-SU"/>
		<description>
This update for slurm fixes the following issues:

- CVE-2022-31251: Fixed a potential security vulnerability in the test package (bsc#1201674).
- CVE-2022-29500: Fixed an architectural flaw can be exploited to allow an unprivileged user to execute arbitrary processes as root (bsc#1199278).
- CVE-2022-29501: Fixed a vulnerability where an unprivileged user can send data to arbitrary unix socket as root (bsc#1199279).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-29"/>
	<updated date="2022-09-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199278">SUSE bug 1199278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199279">SUSE bug 1199279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201674">SUSE bug 1201674</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29500/">CVE-2022-29500</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29501/">CVE-2022-29501</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-31251/">CVE-2022-31251</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715951" comment="libpmi0-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715952" comment="libslurm33-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715953" comment="perl-slurm-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715954" comment="slurm-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715955" comment="slurm-auth-none-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715956" comment="slurm-config-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715957" comment="slurm-config-man-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715958" comment="slurm-devel-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715959" comment="slurm-doc-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715960" comment="slurm-lua-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715961" comment="slurm-munge-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715962" comment="slurm-node-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715963" comment="slurm-pam_slurm-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715964" comment="slurm-plugins-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715965" comment="slurm-slurmdbd-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715966" comment="slurm-sql-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715967" comment="slurm-sview-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715968" comment="slurm-torque-18.08.9-150100.3.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139540" version="1" class="patch">
	<metadata>
		<title>Security update for buildah (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1167864" ref_url="https://bugzilla.suse.com/1167864" source="BUGZILLA"/>
		<reference ref_id="1181961" ref_url="https://bugzilla.suse.com/1181961" source="BUGZILLA"/>
		<reference ref_id="1183043" ref_url="https://bugzilla.suse.com/1183043" source="BUGZILLA"/>
		<reference ref_id="1192999" ref_url="https://bugzilla.suse.com/1192999" source="BUGZILLA"/>
		<reference ref_id="1197870" ref_url="https://bugzilla.suse.com/1197870" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10696" ref_url="https://www.suse.com/security/cve/CVE-2020-10696/" source="CVE"/>
		<reference ref_id="CVE-2021-20206" ref_url="https://www.suse.com/security/cve/CVE-2021-20206/" source="CVE"/>
		<reference ref_id="CVE-2022-27651" ref_url="https://www.suse.com/security/cve/CVE-2022-27651/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012462.html" source="SUSE-SU"/>
		<description>
This update for buildah fixes the following issues:

- Updated to version 1.26.0:
  - CVE-2022-27651: Fixed an issue where containers were incorrectly started with non-empty inheritable Linux process capabilities (bsc#1197870).
  - CVE-2021-20206: Fixed an issue in libcni that could allow an attacker to execute arbitrary binaries on the host (bsc#1181961).
  - CVE-2020-10696: Fixed an issue that could lead to files being overwritten during the image building process (bsc#1167864).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-30"/>
	<updated date="2022-09-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1167864">SUSE bug 1167864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181961">SUSE bug 1181961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183043">SUSE bug 1183043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192999">SUSE bug 1192999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197870">SUSE bug 1197870</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10696/">CVE-2020-10696</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20206/">CVE-2021-20206</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-27651/">CVE-2022-27651</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714363" comment="buildah-1.25.1-150100.3.13.12 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139541" version="1" class="patch">
	<metadata>
		<title>Security update for slurm_20_02 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186646" ref_url="https://bugzilla.suse.com/1186646" source="BUGZILLA"/>
		<reference ref_id="1199278" ref_url="https://bugzilla.suse.com/1199278" source="BUGZILLA"/>
		<reference ref_id="1199279" ref_url="https://bugzilla.suse.com/1199279" source="BUGZILLA"/>
		<reference ref_id="1201674" ref_url="https://bugzilla.suse.com/1201674" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29500" ref_url="https://www.suse.com/security/cve/CVE-2022-29500/" source="CVE"/>
		<reference ref_id="CVE-2022-29501" ref_url="https://www.suse.com/security/cve/CVE-2022-29501/" source="CVE"/>
		<reference ref_id="CVE-2022-31251" ref_url="https://www.suse.com/security/cve/CVE-2022-31251/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012479.html" source="SUSE-SU"/>
		<description>
This update for slurm_20_02 fixes the following issues:


- CVE-2022-31251: Fixed security vulnerability in the test package (bsc#1201674).
- CVE-2022-29500: Fixed architectural flaw that can be exploited to allow an unprivileged user to execute arbitrary processes as root (bsc#1199278).
- CVE-2022-29501: Fixed vulnerability where an unprivileged user can send data to arbitrary unix socket as root (bsc#1199279).

Bugfixes:
- Fixed qstat error message (torque wrapper) (bsc#1186646).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-03"/>
	<updated date="2022-10-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186646">SUSE bug 1186646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199278">SUSE bug 1199278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199279">SUSE bug 1199279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201674">SUSE bug 1201674</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29500/">CVE-2022-29500</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29501/">CVE-2022-29501</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-31251/">CVE-2022-31251</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715969" comment="libnss_slurm2_20_02-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715970" comment="libpmi0_20_02-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715971" comment="libslurm35-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715972" comment="perl-slurm_20_02-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715973" comment="slurm_20_02-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715974" comment="slurm_20_02-auth-none-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715975" comment="slurm_20_02-config-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715976" comment="slurm_20_02-config-man-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715977" comment="slurm_20_02-devel-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715978" comment="slurm_20_02-doc-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715979" comment="slurm_20_02-lua-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715980" comment="slurm_20_02-munge-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715981" comment="slurm_20_02-node-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715982" comment="slurm_20_02-pam_slurm-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715983" comment="slurm_20_02-plugins-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715984" comment="slurm_20_02-slurmdbd-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715985" comment="slurm_20_02-sql-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715986" comment="slurm_20_02-sview-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715987" comment="slurm_20_02-torque-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715988" comment="slurm_20_02-webdoc-20.02.7-150100.3.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139542" version="1" class="patch">
	<metadata>
		<title>Security update for libcroco (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1171685" ref_url="https://bugzilla.suse.com/1171685" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12825" ref_url="https://www.suse.com/security/cve/CVE-2020-12825/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012482.html" source="SUSE-SU"/>
		<description>
This update for libcroco fixes the following issues:

- CVE-2020-12825: Fixed recursion issue in block and any productions (bsc#1171685).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-04"/>
	<updated date="2022-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171685">SUSE bug 1171685</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12825/">CVE-2020-12825</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715651" comment="libcroco-0.6.12-150000.4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715652" comment="libcroco-0_6-3-0.6.12-150000.4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715653" comment="libcroco-0_6-3-32bit-0.6.12-150000.4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715654" comment="libcroco-devel-0.6.12-150000.4.6.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139543" version="1" class="patch">
	<metadata>
		<title>Security update for libgit2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1158790" ref_url="https://bugzilla.suse.com/1158790" source="BUGZILLA"/>
		<reference ref_id="1158981" ref_url="https://bugzilla.suse.com/1158981" source="BUGZILLA"/>
		<reference ref_id="1198234" ref_url="https://bugzilla.suse.com/1198234" source="BUGZILLA"/>
		<reference ref_id="1201431" ref_url="https://bugzilla.suse.com/1201431" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1352" ref_url="https://www.suse.com/security/cve/CVE-2019-1352/" source="CVE"/>
		<reference ref_id="CVE-2022-24765" ref_url="https://www.suse.com/security/cve/CVE-2022-24765/" source="CVE"/>
		<reference ref_id="CVE-2022-29187" ref_url="https://www.suse.com/security/cve/CVE-2022-29187/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012490.html" source="SUSE-SU"/>
		<description>
This update for libgit2 fixes the following issues:

- Fixed DoS by oob write in constructed commit object with a very large number of parents (bsc#1158981).
- CVE-2019-1352: Fixed git on Windows being unaware of NTFS Alternate Data Streams (bnc#1158790). 
- CVE-2022-24765: Fixed potential command injection via git worktree (bsc#1198234).
- CVE-2022-29187: Fixed incomplete fix for CVE-2022-24765 (bsc#1201431).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-04"/>
	<updated date="2022-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1158790">SUSE bug 1158790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158981">SUSE bug 1158981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198234">SUSE bug 1198234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201431">SUSE bug 1201431</bugzilla>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1352/">CVE-2019-1352</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24765/">CVE-2022-24765</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29187/">CVE-2022-29187</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710919" comment="libgit2-26-0.26.8-150000.3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710920" comment="libgit2-devel-0.26.8-150000.3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139544" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1203530" ref_url="https://bugzilla.suse.com/1203530" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32886" ref_url="https://www.suse.com/security/cve/CVE-2022-32886/" source="CVE"/>
		<reference ref_id="CVE-2022-32912" ref_url="https://www.suse.com/security/cve/CVE-2022-32912/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012491.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Updated to version 2.36.8 (bsc#1203530):
  - CVE-2022-32886: Fixed a buffer overflow issue that could potentially lead to code execution.
  - CVE-2022-32912: Fixed an out-of-bounds read that could potentially lead to code execution.

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-04"/>
	<updated date="2022-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203530">SUSE bug 1203530</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32886/">CVE-2022-32886</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32912/">CVE-2022-32912</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715655" comment="libjavascriptcoregtk-4_0-18-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715656" comment="libwebkit2gtk-4_0-37-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715657" comment="libwebkit2gtk3-lang-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715658" comment="typelib-1_0-JavaScriptCore-4_0-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715659" comment="typelib-1_0-WebKit2-4_0-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715660" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715661" comment="webkit2gtk-4_0-injected-bundles-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715662" comment="webkit2gtk3-devel-2.36.8-150000.3.115.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139545" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1202624" ref_url="https://bugzilla.suse.com/1202624" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28861" ref_url="https://www.suse.com/security/cve/CVE-2021-28861/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3512-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012543.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:
                                                                                                                                                                                               
- CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).                                                                    
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202624">SUSE bug 1202624</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28861/">CVE-2021-28861</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716511" comment="libpython2_7-1_0-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716512" comment="python-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716513" comment="python-base-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716514" comment="python-curses-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716515" comment="python-devel-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716516" comment="python-gdbm-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716517" comment="python-tk-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716518" comment="python-xml-2.7.18-150000.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139546" version="1" class="patch">
	<metadata>
		<title>Security update for jdom (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1187446" ref_url="https://bugzilla.suse.com/1187446" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33813" ref_url="https://www.suse.com/security/cve/CVE-2021-33813/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012660.html" source="SUSE-SU"/>
		<description>
This update for jdom fixes the following issues:

  - CVE-2021-33813: Fixed XXE issue in SAXBuilder can cause a denial of service via a crafted HTTP request (bsc#1187446).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187446">SUSE bug 1187446</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33813/">CVE-2021-33813</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009717154" comment="jaxen-1.1.1-150000.5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717155" comment="jdom-1.1-150000.5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139547" version="1" class="patch">
	<metadata>
		<title>Security update for cyrus-sasl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1159635" ref_url="https://bugzilla.suse.com/1159635" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19906" ref_url="https://www.suse.com/security/cve/CVE-2019-19906/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012519.html" source="SUSE-SU"/>
		<description>
This update for cyrus-sasl fixes the following issues:

- CVE-2019-19906: Fixed an out-of-bounds write that could lead to unauthenticated remote denial of service in OpenLDAP via a malformed LDAP packet (bsc#1159635).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-07"/>
	<updated date="2022-10-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159635">SUSE bug 1159635</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19906/">CVE-2019-19906</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710903" comment="cyrus-sasl-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710904" comment="cyrus-sasl-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710905" comment="cyrus-sasl-crammd5-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710906" comment="cyrus-sasl-crammd5-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710907" comment="cyrus-sasl-devel-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710908" comment="cyrus-sasl-digestmd5-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710909" comment="cyrus-sasl-digestmd5-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710910" comment="cyrus-sasl-gssapi-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710911" comment="cyrus-sasl-gssapi-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710912" comment="cyrus-sasl-otp-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710913" comment="cyrus-sasl-plain-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710914" comment="cyrus-sasl-plain-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710915" comment="cyrus-sasl-saslauthd-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710916" comment="cyrus-sasl-sqlauxprop-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710917" comment="libsasl2-3-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710918" comment="libsasl2-3-32bit-2.1.26-150000.5.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139548" version="1" class="patch">
	<metadata>
		<title>Security update for python-Babel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1185768" ref_url="https://bugzilla.suse.com/1185768" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-42771" ref_url="https://www.suse.com/security/cve/CVE-2021-42771/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012537.html" source="SUSE-SU"/>
		<description>
This update for python-Babel fixes the following issues:

- CVE-2021-42771: Fixed relative path traversal (bsc#1185768).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-14"/>
	<updated date="2022-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185768">SUSE bug 1185768</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42771/">CVE-2021-42771</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715848" comment="python2-Babel-2.5.1-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715849" comment="python3-Babel-2.5.1-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139549" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1202624" ref_url="https://bugzilla.suse.com/1202624" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28861" ref_url="https://www.suse.com/security/cve/CVE-2021-28861/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012541.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-14"/>
	<updated date="2022-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202624">SUSE bug 1202624</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28861/">CVE-2021-28861</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716415" comment="libpython3_6m1_0-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716416" comment="python3-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716417" comment="python3-base-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716418" comment="python3-curses-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716419" comment="python3-dbm-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716420" comment="python3-devel-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716421" comment="python3-idle-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716424" comment="python3-testsuite-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716422" comment="python3-tk-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716423" comment="python3-tools-3.6.15-150000.3.109.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139550" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1203677" ref_url="https://bugzilla.suse.com/1203677" source="BUGZILLA"/>
		<reference ref_id="1203680" ref_url="https://bugzilla.suse.com/1203680" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41317" ref_url="https://www.suse.com/security/cve/CVE-2022-41317/" source="CVE"/>
		<reference ref_id="CVE-2022-41318" ref_url="https://www.suse.com/security/cve/CVE-2022-41318/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012545.html" source="SUSE-SU"/>
		<description>
This update for squid fixes the following issues:

  - CVE-2022-41317: Fixed exposure of sensitive information in cache manager (bsc#1203677).
  - CVE-2022-41318: Fixed buffer overread in SSPI and SMB Authentication (bsc#1203680).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203677">SUSE bug 1203677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203680">SUSE bug 1203680</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-41317/">CVE-2022-41317</cve>
	<cve impact="important" cvss3="8.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-41318/">CVE-2022-41318</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715844" comment="squid-4.17-150000.5.35.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139551" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1203438" ref_url="https://bugzilla.suse.com/1203438" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40674" ref_url="https://www.suse.com/security/cve/CVE-2022-40674/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012544.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

- CVE-2022-40674: Fixed use-after-free in the doContent function in xmlparse.c (bsc#1203438).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203438">SUSE bug 1203438</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40674/">CVE-2022-40674</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715845" comment="expat-2.2.5-150000.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715846" comment="libexpat-devel-2.2.5-150000.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715847" comment="libexpat1-2.2.5-150000.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715806" comment="libexpat1-32bit-2.2.5-150000.3.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139552" version="1" class="patch">
	<metadata>
		<title>Security update for exiv2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1076579" ref_url="https://bugzilla.suse.com/1076579" source="BUGZILLA"/>
		<reference ref_id="1086798" ref_url="https://bugzilla.suse.com/1086798" source="BUGZILLA"/>
		<reference ref_id="1086810" ref_url="https://bugzilla.suse.com/1086810" source="BUGZILLA"/>
		<reference ref_id="1092096" ref_url="https://bugzilla.suse.com/1092096" source="BUGZILLA"/>
		<reference ref_id="1114690" ref_url="https://bugzilla.suse.com/1114690" source="BUGZILLA"/>
		<reference ref_id="1185447" ref_url="https://bugzilla.suse.com/1185447" source="BUGZILLA"/>
		<reference ref_id="1186192" ref_url="https://bugzilla.suse.com/1186192" source="BUGZILLA"/>
		<reference ref_id="1188733" ref_url="https://bugzilla.suse.com/1188733" source="BUGZILLA"/>
		<reference ref_id="1188756" ref_url="https://bugzilla.suse.com/1188756" source="BUGZILLA"/>
		<reference ref_id="1189330" ref_url="https://bugzilla.suse.com/1189330" source="BUGZILLA"/>
		<reference ref_id="1189331" ref_url="https://bugzilla.suse.com/1189331" source="BUGZILLA"/>
		<reference ref_id="1189332" ref_url="https://bugzilla.suse.com/1189332" source="BUGZILLA"/>
		<reference ref_id="1189333" ref_url="https://bugzilla.suse.com/1189333" source="BUGZILLA"/>
		<reference ref_id="1189636" ref_url="https://bugzilla.suse.com/1189636" source="BUGZILLA"/>
		<reference ref_id="1189780" ref_url="https://bugzilla.suse.com/1189780" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10772" ref_url="https://www.suse.com/security/cve/CVE-2018-10772/" source="CVE"/>
		<reference ref_id="CVE-2018-18915" ref_url="https://www.suse.com/security/cve/CVE-2018-18915/" source="CVE"/>
		<reference ref_id="CVE-2018-5772" ref_url="https://www.suse.com/security/cve/CVE-2018-5772/" source="CVE"/>
		<reference ref_id="CVE-2018-8976" ref_url="https://www.suse.com/security/cve/CVE-2018-8976/" source="CVE"/>
		<reference ref_id="CVE-2018-8977" ref_url="https://www.suse.com/security/cve/CVE-2018-8977/" source="CVE"/>
		<reference ref_id="CVE-2020-18898" ref_url="https://www.suse.com/security/cve/CVE-2020-18898/" source="CVE"/>
		<reference ref_id="CVE-2020-18899" ref_url="https://www.suse.com/security/cve/CVE-2020-18899/" source="CVE"/>
		<reference ref_id="CVE-2021-29470" ref_url="https://www.suse.com/security/cve/CVE-2021-29470/" source="CVE"/>
		<reference ref_id="CVE-2021-31291" ref_url="https://www.suse.com/security/cve/CVE-2021-31291/" source="CVE"/>
		<reference ref_id="CVE-2021-31292" ref_url="https://www.suse.com/security/cve/CVE-2021-31292/" source="CVE"/>
		<reference ref_id="CVE-2021-32617" ref_url="https://www.suse.com/security/cve/CVE-2021-32617/" source="CVE"/>
		<reference ref_id="CVE-2021-37618" ref_url="https://www.suse.com/security/cve/CVE-2021-37618/" source="CVE"/>
		<reference ref_id="CVE-2021-37619" ref_url="https://www.suse.com/security/cve/CVE-2021-37619/" source="CVE"/>
		<reference ref_id="CVE-2021-37620" ref_url="https://www.suse.com/security/cve/CVE-2021-37620/" source="CVE"/>
		<reference ref_id="CVE-2021-37621" ref_url="https://www.suse.com/security/cve/CVE-2021-37621/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3598-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-October/025597.html" source="SUSE-SU"/>
		<description>
This update for exiv2 fixes the following issues:

- CVE-2021-37621: Fixed denial of service due to infinite loop in Image:printIFDStructure (bsc#1189333).
- CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read() (bsc#1189332).
- CVE-2021-37619: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1189331).
- CVE-2021-37618: Fixed out-of-bounds read in Exiv2:Jp2Image:printStructure (bsc#1189330).
- CVE-2021-32617: Fixed denial of service inside inefficient algorithm (quadratic complexity) (bsc#1186192).
- CVE-2021-31292: Fixed integer overflow in CrwMap:encode0x1810 (bsc#1188756).
- CVE-2021-31291: Fixed heap-based buffer overflow vulnerability in jp2image.cpp may lead to a denial of service (bsc#1188733).
- CVE-2021-29470: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1185447).
- CVE-2020-18899: Fixed uncontrolled memory allocation (bsc#1189636).
- CVE-2020-18898: Fixed remote denial of service in printIFDStructure function (bsc#1189780).
- CVE-2018-8977: Fixed remote denial of service in Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp (bsc#1086798).
- CVE-2018-8976: Fixed remote denial of service in image.cpp Exiv2::Internal::stringFormat via out-of-bounds read (bsc#1086810).
- CVE-2018-5772: Fixed segmentation fault caused by uncontrolled recursion inthe Exiv2::Image::printIFDStructure (bsc#1076579).
- CVE-2018-18915: Fixed an infinite loop in the Exiv2:Image:printIFDStructure function (bsc#1114690).
- CVE-2018-10772: Fixed segmentation fault when the function Exiv2::tEXtToDataBuf() is finished (bsc#1092096).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076579">SUSE bug 1076579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086798">SUSE bug 1086798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086810">SUSE bug 1086810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092096">SUSE bug 1092096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114690">SUSE bug 1114690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185447">SUSE bug 1185447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186192">SUSE bug 1186192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188733">SUSE bug 1188733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188756">SUSE bug 1188756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189330">SUSE bug 1189330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189331">SUSE bug 1189331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189332">SUSE bug 1189332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189333">SUSE bug 1189333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189636">SUSE bug 1189636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189780">SUSE bug 1189780</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10772/">CVE-2018-10772</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18915/">CVE-2018-18915</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5772/">CVE-2018-5772</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8976/">CVE-2018-8976</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8977/">CVE-2018-8977</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-18898/">CVE-2020-18898</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-18899/">CVE-2020-18899</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29470/">CVE-2021-29470</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31291/">CVE-2021-31291</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31292/">CVE-2021-31292</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32617/">CVE-2021-32617</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-37618/">CVE-2021-37618</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-37619/">CVE-2021-37619</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-37620/">CVE-2021-37620</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-37621/">CVE-2021-37621</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716335" comment="libexiv2-26-0.26-150000.6.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716336" comment="libexiv2-devel-0.26-150000.6.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139553" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1124431" ref_url="https://bugzilla.suse.com/1124431" source="BUGZILLA"/>
		<reference ref_id="1167162" ref_url="https://bugzilla.suse.com/1167162" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1179599" ref_url="https://bugzilla.suse.com/1179599" source="BUGZILLA"/>
		<reference ref_id="1184804" ref_url="https://bugzilla.suse.com/1184804" source="BUGZILLA"/>
		<reference ref_id="1185377" ref_url="https://bugzilla.suse.com/1185377" source="BUGZILLA"/>
		<reference ref_id="1186207" ref_url="https://bugzilla.suse.com/1186207" source="BUGZILLA"/>
		<reference ref_id="1186222" ref_url="https://bugzilla.suse.com/1186222" source="BUGZILLA"/>
		<reference ref_id="1187167" ref_url="https://bugzilla.suse.com/1187167" source="BUGZILLA"/>
		<reference ref_id="1189305" ref_url="https://bugzilla.suse.com/1189305" source="BUGZILLA"/>
		<reference ref_id="1189841" ref_url="https://bugzilla.suse.com/1189841" source="BUGZILLA"/>
		<reference ref_id="1190358" ref_url="https://bugzilla.suse.com/1190358" source="BUGZILLA"/>
		<reference ref_id="1190428" ref_url="https://bugzilla.suse.com/1190428" source="BUGZILLA"/>
		<reference ref_id="1191229" ref_url="https://bugzilla.suse.com/1191229" source="BUGZILLA"/>
		<reference ref_id="1191241" ref_url="https://bugzilla.suse.com/1191241" source="BUGZILLA"/>
		<reference ref_id="1191384" ref_url="https://bugzilla.suse.com/1191384" source="BUGZILLA"/>
		<reference ref_id="1191731" ref_url="https://bugzilla.suse.com/1191731" source="BUGZILLA"/>
		<reference ref_id="1192032" ref_url="https://bugzilla.suse.com/1192032" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="1192740" ref_url="https://bugzilla.suse.com/1192740" source="BUGZILLA"/>
		<reference ref_id="1192845" ref_url="https://bugzilla.suse.com/1192845" source="BUGZILLA"/>
		<reference ref_id="1192847" ref_url="https://bugzilla.suse.com/1192847" source="BUGZILLA"/>
		<reference ref_id="1192877" ref_url="https://bugzilla.suse.com/1192877" source="BUGZILLA"/>
		<reference ref_id="1192946" ref_url="https://bugzilla.suse.com/1192946" source="BUGZILLA"/>
		<reference ref_id="1193306" ref_url="https://bugzilla.suse.com/1193306" source="BUGZILLA"/>
		<reference ref_id="1193440" ref_url="https://bugzilla.suse.com/1193440" source="BUGZILLA"/>
		<reference ref_id="1193442" ref_url="https://bugzilla.suse.com/1193442" source="BUGZILLA"/>
		<reference ref_id="1193575" ref_url="https://bugzilla.suse.com/1193575" source="BUGZILLA"/>
		<reference ref_id="1193669" ref_url="https://bugzilla.suse.com/1193669" source="BUGZILLA"/>
		<reference ref_id="1193727" ref_url="https://bugzilla.suse.com/1193727" source="BUGZILLA"/>
		<reference ref_id="1193731" ref_url="https://bugzilla.suse.com/1193731" source="BUGZILLA"/>
		<reference ref_id="1193767" ref_url="https://bugzilla.suse.com/1193767" source="BUGZILLA"/>
		<reference ref_id="1193861" ref_url="https://bugzilla.suse.com/1193861" source="BUGZILLA"/>
		<reference ref_id="1193864" ref_url="https://bugzilla.suse.com/1193864" source="BUGZILLA"/>
		<reference ref_id="1193867" ref_url="https://bugzilla.suse.com/1193867" source="BUGZILLA"/>
		<reference ref_id="1193927" ref_url="https://bugzilla.suse.com/1193927" source="BUGZILLA"/>
		<reference ref_id="1194001" ref_url="https://bugzilla.suse.com/1194001" source="BUGZILLA"/>
		<reference ref_id="1194048" ref_url="https://bugzilla.suse.com/1194048" source="BUGZILLA"/>
		<reference ref_id="1194087" ref_url="https://bugzilla.suse.com/1194087" source="BUGZILLA"/>
		<reference ref_id="1194227" ref_url="https://bugzilla.suse.com/1194227" source="BUGZILLA"/>
		<reference ref_id="1194302" ref_url="https://bugzilla.suse.com/1194302" source="BUGZILLA"/>
		<reference ref_id="1194516" ref_url="https://bugzilla.suse.com/1194516" source="BUGZILLA"/>
		<reference ref_id="1194529" ref_url="https://bugzilla.suse.com/1194529" source="BUGZILLA"/>
		<reference ref_id="1194880" ref_url="https://bugzilla.suse.com/1194880" source="BUGZILLA"/>
		<reference ref_id="1194888" ref_url="https://bugzilla.suse.com/1194888" source="BUGZILLA"/>
		<reference ref_id="1194985" ref_url="https://bugzilla.suse.com/1194985" source="BUGZILLA"/>
		<reference ref_id="1195166" ref_url="https://bugzilla.suse.com/1195166" source="BUGZILLA"/>
		<reference ref_id="1195254" ref_url="https://bugzilla.suse.com/1195254" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-25020" ref_url="https://www.suse.com/security/cve/CVE-2018-25020/" source="CVE"/>
		<reference ref_id="CVE-2019-15126" ref_url="https://www.suse.com/security/cve/CVE-2019-15126/" source="CVE"/>
		<reference ref_id="CVE-2020-27820" ref_url="https://www.suse.com/security/cve/CVE-2020-27820/" source="CVE"/>
		<reference ref_id="CVE-2021-0920" ref_url="https://www.suse.com/security/cve/CVE-2021-0920/" source="CVE"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="CVE-2021-28711" ref_url="https://www.suse.com/security/cve/CVE-2021-28711/" source="CVE"/>
		<reference ref_id="CVE-2021-28712" ref_url="https://www.suse.com/security/cve/CVE-2021-28712/" source="CVE"/>
		<reference ref_id="CVE-2021-28713" ref_url="https://www.suse.com/security/cve/CVE-2021-28713/" source="CVE"/>
		<reference ref_id="CVE-2021-28714" ref_url="https://www.suse.com/security/cve/CVE-2021-28714/" source="CVE"/>
		<reference ref_id="CVE-2021-28715" ref_url="https://www.suse.com/security/cve/CVE-2021-28715/" source="CVE"/>
		<reference ref_id="CVE-2021-33098" ref_url="https://www.suse.com/security/cve/CVE-2021-33098/" source="CVE"/>
		<reference ref_id="CVE-2021-3564" ref_url="https://www.suse.com/security/cve/CVE-2021-3564/" source="CVE"/>
		<reference ref_id="CVE-2021-39648" ref_url="https://www.suse.com/security/cve/CVE-2021-39648/" source="CVE"/>
		<reference ref_id="CVE-2021-39657" ref_url="https://www.suse.com/security/cve/CVE-2021-39657/" source="CVE"/>
		<reference ref_id="CVE-2021-4002" ref_url="https://www.suse.com/security/cve/CVE-2021-4002/" source="CVE"/>
		<reference ref_id="CVE-2021-4083" ref_url="https://www.suse.com/security/cve/CVE-2021-4083/" source="CVE"/>
		<reference ref_id="CVE-2021-4135" ref_url="https://www.suse.com/security/cve/CVE-2021-4135/" source="CVE"/>
		<reference ref_id="CVE-2021-4149" ref_url="https://www.suse.com/security/cve/CVE-2021-4149/" source="CVE"/>
		<reference ref_id="CVE-2021-4197" ref_url="https://www.suse.com/security/cve/CVE-2021-4197/" source="CVE"/>
		<reference ref_id="CVE-2021-4202" ref_url="https://www.suse.com/security/cve/CVE-2021-4202/" source="CVE"/>
		<reference ref_id="CVE-2021-43975" ref_url="https://www.suse.com/security/cve/CVE-2021-43975/" source="CVE"/>
		<reference ref_id="CVE-2021-43976" ref_url="https://www.suse.com/security/cve/CVE-2021-43976/" source="CVE"/>
		<reference ref_id="CVE-2021-44733" ref_url="https://www.suse.com/security/cve/CVE-2021-44733/" source="CVE"/>
		<reference ref_id="CVE-2021-45095" ref_url="https://www.suse.com/security/cve/CVE-2021-45095/" source="CVE"/>
		<reference ref_id="CVE-2021-45486" ref_url="https://www.suse.com/security/cve/CVE-2021-45486/" source="CVE"/>
		<reference ref_id="CVE-2022-0322" ref_url="https://www.suse.com/security/cve/CVE-2022-0322/" source="CVE"/>
		<reference ref_id="CVE-2022-0330" ref_url="https://www.suse.com/security/cve/CVE-2022-0330/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010214.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254).
- CVE-2022-0330: Fixed flush TLBs before releasing backing store (bsc#1194880).
- CVE-2021-45486: Fixed an information leak because the hash table is very small in net/ipv4/route.c (bnc#1194087).
- CVE-2021-45095: Fixed refcount leak in pep_sock_accept in net/phonet/pep.c (bnc#1193867).
- CVE-2021-44733: Fixed a use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem, that could have occured because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object (bnc#1193767).
- CVE-2021-43976: Fixed a flaw that could allow an attacker (who can connect a crafted USB device) to cause a denial of service. (bnc#1192847)
- CVE-2021-43975: Fixed a flaw in hw_atl_utils_fw_rpc_wait that could allow an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. (bsc#1192845)
- CVE-2021-4202: Fixed NFC race condition by adding NCI_UNREG flag (bsc#1194529).
- CVE-2021-4197: Use cgroup open-time credentials for process migraton perm checks (bsc#1194302).
- CVE-2021-4159: Fixed kernel ptr leak vulnerability via BPF in coerce_reg_to_size (bsc#1194227).
- CVE-2021-4149: Fixed btrfs unlock newly allocated extent buffer after error (bsc#1194001).
- CVE-2021-4135: Fixed zero-initialize memory inside netdevsim for new map's value in function nsim_bpf_map_alloc (bsc#1193927).
- CVE-2021-4083: Fixed a read-after-free memory flaw inside the garbage collection for Unix domain socket file handlers when users call close() and fget() simultaneouslyand can potentially trigger a race condition (bnc#1193727).
- CVE-2021-4002: Fixed incorrect TLBs flush in hugetlbfs after huge_pmd_unshare (bsc#1192946).
- CVE-2021-39657: Fixed out of bounds read due to a missing bounds check in ufshcd_eh_device_reset_handler of ufshcd.c. This could lead to local information disclosure with System execution privileges needed (bnc#1193864).
- CVE-2021-39648: Fixed possible disclosure of kernel heap memory due to a race condition in gadget_dev_desc_UDC_show of configfs.c. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1193861). 
- CVE-2021-3564: Fixed double-free memory corruption in the Linux kernel HCI device initialization subsystem that could have been used by attaching malicious HCI TTY Bluetooth devices. A local user could use this flaw to crash the system (bnc#1186207).
- CVE-2021-33098: Fixed a potential denial of service in Intel(R) Ethernet ixgbe driver due to improper input validation. (bsc#1192877)
- CVE-2021-28715: Fixed issue with xen/netback to do not queue unlimited number of packages (XSA-392) (bsc#1193442).
- CVE-2021-28714: Fixed issue with xen/netback to handle rx queue stall detection (XSA-392) (bsc#1193442).
- CVE-2021-28713: Fixed issue with xen/console to harden hvc_xen against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-28712: Fixed issue with xen/netfront to harden netfront against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-28711: Fixed issue with xen/blkfront to harden blkfront against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-0935: Fixed possible out of bounds write in ip6_xmit of ip6_output.c due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192032).
- CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1193731).
- CVE-2020-27820: Fixed a vulnerability where a use-after-frees in nouveau's postclose() handler could happen if removing device (bsc#1179599).
- CVE-2019-15126: Fixed a vulnerability in Broadcom and Cypress Wi-Fi chips, used in RPi family of devices aka 'Kr00k'. (bsc#1167162)
- CVE-2018-25020: Fixed an overflow in the BPF subsystem due to a mishandling of a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions. This affects kernel/bpf/core.c and net/core/filter.c (bnc#1193575).

The following non-security bugs were fixed:

- Bluetooth: fix the erroneous flush_work() order (git-fixes).
- Build: Add obsolete_rebuilds_subpackage (boo#1172073 bsc#1191731).
- ICMPv6: Add ICMPv6 Parameter Problem, code 3 definition (bsc#1191241 bsc#1195166).
- IPv6: reply ICMP error if the first fragment do not include all headers (bsc#1191241).
- elfcore: fix building with clang (bsc#1169514).
- hv_netvsc: Set needed_headroom according to VF (bsc#1193506).
- ipv6/netfilter: Discard first fragment not including all headers (bsc#1191241 bsc#1195166).
- kernel-*-subpackage: Add dependency on kernel scriptlets (bsc#1192740).
- kernel-binary.spec.in Stop templating the scriptlets for subpackages (bsc#1190358).
- kernel-binary.spec.in: add zstd to BuildRequires if used
- kernel-binary.spec.in: make sure zstd is supported by kmod if used
- kernel-binary.spec: Check for no kernel signing certificates. Also remove unused variable.
- kernel-binary.spec: Define $image as rpm macro (bsc#1189841).
- kernel-binary.spec: Do not fail silently when KMP is empty (bsc#1190358). Copy the code from kernel-module-subpackage that deals with empty KMPs.
- kernel-binary.spec: Do not sign kernel when no key provided (bsc#1187167).
- kernel-binary.spec: Fix kernel-default-base scriptlets after packaging merge.
- kernel-binary.spec: Require dwarves for kernel-binary-devel when BTF is enabled (jsc#SLE-17288).
- kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as well.
- kernel-cert-subpackage: Fix certificate location in scriptlets (bsc#1189841). 
- kernel-source.spec: install-kernel-tools also required on 15.4
- kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229). The semantic changed in an incompatible way so invoking the macro now causes a build failure.
- kprobes: Limit max data_size of the kretprobe instances (bsc#1193669).
- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- memstick: rtsx_usb_ms: fix UAF (bsc#1194516).
- moxart: fix potential use-after-free on remove path (bsc#1194516).
- net, xdp: Introduce xdp_init_buff utility routine (bsc#1193506).
- net, xdp: Introduce xdp_prepare_buff utility routine (bsc#1193506).
- net: Using proper atomic helper (bsc#1186222).
- net: ipv6: Discard next-hop MTU less than minimum link MTU (bsc#1191241).
- net: mana: Add RX fencing (bsc#1193506).
- net: mana: Add XDP support (bsc#1193506).
- net: mana: Allow setting the number of queues while the NIC is down (bsc#1193506).
- net: mana: Fix spelling mistake 'calledd' -&gt; 'called' (bsc#1193506).
- net: mana: Fix the netdev_err()'s vPort argument in mana_init_port() (bsc#1193506).
- net: mana: Improve the HWC error handling (bsc#1193506).
- net: mana: Support hibernation and kexec (bsc#1193506).
- net: mana: Use kcalloc() instead of kzalloc() (bsc#1193506).
- objtool: Support Clang non-section symbols in ORC generation (bsc#1169514).
- post.sh: detect /usr mountpoint too
- recordmcount.pl: fix typo in s390 mcount regex (bsc#1192267).
- recordmcount.pl: look for jgnop instruction as well as bcrl on s390 (bsc#1192267).
- rpm/kernel-binary.spec.in: Use kmod-zstd provide. This makes it possible to use kmod with ZSTD support on non-Tumbleweed.
- rpm/kernel-binary.spec.in: avoid conflicting suse-release suse-release had arbitrary values in staging, we can't use it for dependencies. The filesystem one has to be enough (boo#1184804).
- rpm/kernel-binary.spec.in: do not strip vmlinux again (bsc#1193306). 
- rpm/kernel-binary.spec: Use only non-empty certificates.
- rpm/kernel-obs-build.spec.in: make builds reproducible (bsc#1189305).
- rpm/kernel-source.rpmlintrc: ignore new include/config files. 
- rpm/kernel-source.spec.in: do some more for vanilla_only.
- rpm: Abolish image suffix (bsc#1189841).
- rpm: Abolish scritplet templating (bsc#1189841). Outsource kernel-binary and KMP scriptlets to suse-module-tools. 
- rpm: Define $certs as rpm macro (bsc#1189841). 
- rpm: Fold kernel-devel and kernel-source scriptlets into spec files (bsc#1189841). 
- rpm: fix kmp install path
- rpm: use _rpmmacrodir (boo#1191384)
- tty: hvc: replace BUG_ON() with negative return value.
- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- x86/xen: Mark cpu_bringup_and_idle() as dead_end_function (bsc#1169514).
- xen/blkfront: do not take local copy of a request from the ring page (git-fixes).
- xen/blkfront: do not trust the backend response data blindly (git-fixes).
- xen/blkfront: read response from backend only once (git-fixes).
- xen/netfront: disentangle tx_skb_freelist (git-fixes).
- xen/netfront: do not read data from request on the ring page (git-fixes).
- xen/netfront: do not trust the backend response data blindly (git-fixes).
- xen/netfront: read response from backend only once (git-fixes).
- xen: sync include/xen/interface/io/ring.h with Xen's newest version (git-fixes).
- xfrm: fix MTU regression (bsc#1185377, bsc#1194048).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-10"/>
	<updated date="2022-02-10"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124431">SUSE bug 1124431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167162">SUSE bug 1167162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179599">SUSE bug 1179599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184804">SUSE bug 1184804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185377">SUSE bug 1185377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186207">SUSE bug 1186207</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186222">SUSE bug 1186222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187167">SUSE bug 1187167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189305">SUSE bug 1189305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189841">SUSE bug 1189841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190358">SUSE bug 1190358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190428">SUSE bug 1190428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191229">SUSE bug 1191229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191241">SUSE bug 1191241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191384">SUSE bug 1191384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191731">SUSE bug 1191731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192032">SUSE bug 1192032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192740">SUSE bug 1192740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192845">SUSE bug 1192845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192847">SUSE bug 1192847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192877">SUSE bug 1192877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192946">SUSE bug 1192946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193306">SUSE bug 1193306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193440">SUSE bug 1193440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193442">SUSE bug 1193442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193575">SUSE bug 1193575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193669">SUSE bug 1193669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193727">SUSE bug 1193727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193731">SUSE bug 1193731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193767">SUSE bug 1193767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193861">SUSE bug 1193861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193864">SUSE bug 1193864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193867">SUSE bug 1193867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193927">SUSE bug 1193927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194001">SUSE bug 1194001</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194048">SUSE bug 1194048</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194087">SUSE bug 1194087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194227">SUSE bug 1194227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194302">SUSE bug 1194302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194516">SUSE bug 1194516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194529">SUSE bug 1194529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194880">SUSE bug 1194880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194888">SUSE bug 1194888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194985">SUSE bug 1194985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195166">SUSE bug 1195166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195254">SUSE bug 1195254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25020/">CVE-2018-25020</cve>
	<cve impact="important" cvss3="3.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15126/">CVE-2019-15126</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-27820/">CVE-2020-27820</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0920/">CVE-2021-0920</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28711/">CVE-2021-28711</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28712/">CVE-2021-28712</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28713/">CVE-2021-28713</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28714/">CVE-2021-28714</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28715/">CVE-2021-28715</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33098/">CVE-2021-33098</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3564/">CVE-2021-3564</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39648/">CVE-2021-39648</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-39657/">CVE-2021-39657</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4002/">CVE-2021-4002</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4083/">CVE-2021-4083</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-4135/">CVE-2021-4135</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4149/">CVE-2021-4149</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-4197/">CVE-2021-4197</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4202/">CVE-2021-4202</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43975/">CVE-2021-43975</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43976/">CVE-2021-43976</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-44733/">CVE-2021-44733</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-45095/">CVE-2021-45095</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-45486/">CVE-2021-45486</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0322/">CVE-2022-0322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0330/">CVE-2022-0330</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667052" comment="kernel-default-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667053" comment="kernel-default-base-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667054" comment="kernel-default-devel-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667055" comment="kernel-devel-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667056" comment="kernel-docs-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667057" comment="kernel-macros-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667058" comment="kernel-obs-build-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667059" comment="kernel-source-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667060" comment="kernel-syms-4.12.14-197.105.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139554" version="1" class="patch">
	<metadata>
		<title>Security update for libksba (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1204357" ref_url="https://bugzilla.suse.com/1204357" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3515" ref_url="https://www.suse.com/security/cve/CVE-2022-3515/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012597.html" source="SUSE-SU"/>
		<description>
This update for libksba fixes the following issues:

  - CVE-2022-3515: Fixed a possible overflow in the TLV parser (bsc#1204357).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-21"/>
	<updated date="2022-10-21"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1204357">SUSE bug 1204357</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3515/">CVE-2022-3515</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718553" comment="libksba-devel-1.3.5-150000.4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718554" comment="libksba8-1.3.5-150000.4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139555" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186463" ref_url="https://bugzilla.suse.com/1186463" source="BUGZILLA"/>
		<reference ref_id="1188859" ref_url="https://bugzilla.suse.com/1188859" source="BUGZILLA"/>
		<reference ref_id="1192394" ref_url="https://bugzilla.suse.com/1192394" source="BUGZILLA"/>
		<reference ref_id="1193227" ref_url="https://bugzilla.suse.com/1193227" source="BUGZILLA"/>
		<reference ref_id="1193237" ref_url="https://bugzilla.suse.com/1193237" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8921" ref_url="https://www.suse.com/security/cve/CVE-2019-8921/" source="CVE"/>
		<reference ref_id="CVE-2019-8922" ref_url="https://www.suse.com/security/cve/CVE-2019-8922/" source="CVE"/>
		<reference ref_id="CVE-2020-26558" ref_url="https://www.suse.com/security/cve/CVE-2020-26558/" source="CVE"/>
		<reference ref_id="CVE-2021-0129" ref_url="https://www.suse.com/security/cve/CVE-2021-0129/" source="CVE"/>
		<reference ref_id="CVE-2021-3658" ref_url="https://www.suse.com/security/cve/CVE-2021-3658/" source="CVE"/>
		<reference ref_id="CVE-2021-43400" ref_url="https://www.suse.com/security/cve/CVE-2021-43400/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012600.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2021-0129: Fixed improper access control (bsc#1186463).
- CVE-2020-26558: Fixed vulnerability that may permit a nearby man-in-the-middle attacker to identify the Passkey (bsc#1186463).
- CVE-2019-8921: Fixed heap-based buffer overflow via crafted request (bsc#1193237).
- CVE-2019-8922: Fixed heap-based buffer overflow via crafted request (bsc#1193227).
- CVE-2021-3658: Fixed adapter incorrectly restoring discoverable state after powered down (bsc#1188859).
- CVE-2021-43400: Fixed use-after-free in gatt-database.c (bsc#1192394).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-21"/>
	<updated date="2022-10-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186463">SUSE bug 1186463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188859">SUSE bug 1188859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192394">SUSE bug 1192394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193227">SUSE bug 1193227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193237">SUSE bug 1193237</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8921/">CVE-2019-8921</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-8922/">CVE-2019-8922</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26558/">CVE-2020-26558</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-0129/">CVE-2021-0129</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3658/">CVE-2021-3658</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43400/">CVE-2021-43400</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718908" comment="bluez-5.48-150000.5.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718909" comment="bluez-devel-5.48-150000.5.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718910" comment="libbluetooth3-5.48-150000.5.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139556" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1201723" ref_url="https://bugzilla.suse.com/1201723" source="BUGZILLA"/>
		<reference ref_id="1201971" ref_url="https://bugzilla.suse.com/1201971" source="BUGZILLA"/>
		<reference ref_id="1202026" ref_url="https://bugzilla.suse.com/1202026" source="BUGZILLA"/>
		<reference ref_id="1202466" ref_url="https://bugzilla.suse.com/1202466" source="BUGZILLA"/>
		<reference ref_id="1202467" ref_url="https://bugzilla.suse.com/1202467" source="BUGZILLA"/>
		<reference ref_id="1202468" ref_url="https://bugzilla.suse.com/1202468" source="BUGZILLA"/>
		<reference ref_id="1202968" ref_url="https://bugzilla.suse.com/1202968" source="BUGZILLA"/>
		<reference ref_id="1202971" ref_url="https://bugzilla.suse.com/1202971" source="BUGZILLA"/>
		<reference ref_id="1202973" ref_url="https://bugzilla.suse.com/1202973" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0561" ref_url="https://www.suse.com/security/cve/CVE-2022-0561/" source="CVE"/>
		<reference ref_id="CVE-2022-2519" ref_url="https://www.suse.com/security/cve/CVE-2022-2519/" source="CVE"/>
		<reference ref_id="CVE-2022-2520" ref_url="https://www.suse.com/security/cve/CVE-2022-2520/" source="CVE"/>
		<reference ref_id="CVE-2022-2521" ref_url="https://www.suse.com/security/cve/CVE-2022-2521/" source="CVE"/>
		<reference ref_id="CVE-2022-2867" ref_url="https://www.suse.com/security/cve/CVE-2022-2867/" source="CVE"/>
		<reference ref_id="CVE-2022-2868" ref_url="https://www.suse.com/security/cve/CVE-2022-2868/" source="CVE"/>
		<reference ref_id="CVE-2022-2869" ref_url="https://www.suse.com/security/cve/CVE-2022-2869/" source="CVE"/>
		<reference ref_id="CVE-2022-34266" ref_url="https://www.suse.com/security/cve/CVE-2022-34266/" source="CVE"/>
		<reference ref_id="CVE-2022-34526" ref_url="https://www.suse.com/security/cve/CVE-2022-34526/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012599.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-2519: Fixed a double free in rotateImage() (bsc#1202968).
- CVE-2022-2520: Fixed a assertion failure in rotateImage() (bsc#1202973).
- CVE-2022-2521: Fixed invalid free in TIFFClose() (bsc#1202971).
- CVE-2022-2867: Fixed out of bounds read and write in tiffcrop.c (bsc#1202466).
- CVE-2022-2868: Fixed out of bounds read in reverseSamples16bits() (bsc#1202467).
- CVE-2022-2869: Fixed out of bounds read and write in extractContigSamples8bits() (bsc#1202468).
- CVE-2022-34526: Fixed stack overflow in the _TIFFVGetField function of Tiffsplit (bsc#1202026).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-21"/>
	<updated date="2022-10-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201723">SUSE bug 1201723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201971">SUSE bug 1201971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202026">SUSE bug 1202026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202466">SUSE bug 1202466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202467">SUSE bug 1202467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202468">SUSE bug 1202468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202968">SUSE bug 1202968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202971">SUSE bug 1202971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202973">SUSE bug 1202973</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0561/">CVE-2022-0561</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-2519/">CVE-2022-2519</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2520/">CVE-2022-2520</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2521/">CVE-2022-2521</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2867/">CVE-2022-2867</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2868/">CVE-2022-2868</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2869/">CVE-2022-2869</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-34266/">CVE-2022-34266</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34526/">CVE-2022-34526</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718762" comment="libtiff-devel-4.0.9-150000.45.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718763" comment="libtiff5-4.0.9-150000.45.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718725" comment="libtiff5-32bit-4.0.9-150000.45.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139557" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1199564" ref_url="https://bugzilla.suse.com/1199564" source="BUGZILLA"/>
		<reference ref_id="1200288" ref_url="https://bugzilla.suse.com/1200288" source="BUGZILLA"/>
		<reference ref_id="1201309" ref_url="https://bugzilla.suse.com/1201309" source="BUGZILLA"/>
		<reference ref_id="1202677" ref_url="https://bugzilla.suse.com/1202677" source="BUGZILLA"/>
		<reference ref_id="1202960" ref_url="https://bugzilla.suse.com/1202960" source="BUGZILLA"/>
		<reference ref_id="1203552" ref_url="https://bugzilla.suse.com/1203552" source="BUGZILLA"/>
		<reference ref_id="1203769" ref_url="https://bugzilla.suse.com/1203769" source="BUGZILLA"/>
		<reference ref_id="1203987" ref_url="https://bugzilla.suse.com/1203987" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-20008" ref_url="https://www.suse.com/security/cve/CVE-2022-20008/" source="CVE"/>
		<reference ref_id="CVE-2022-2503" ref_url="https://www.suse.com/security/cve/CVE-2022-2503/" source="CVE"/>
		<reference ref_id="CVE-2022-32296" ref_url="https://www.suse.com/security/cve/CVE-2022-32296/" source="CVE"/>
		<reference ref_id="CVE-2022-3239" ref_url="https://www.suse.com/security/cve/CVE-2022-3239/" source="CVE"/>
		<reference ref_id="CVE-2022-3303" ref_url="https://www.suse.com/security/cve/CVE-2022-3303/" source="CVE"/>
		<reference ref_id="CVE-2022-41218" ref_url="https://www.suse.com/security/cve/CVE-2022-41218/" source="CVE"/>
		<reference ref_id="CVE-2022-41848" ref_url="https://www.suse.com/security/cve/CVE-2022-41848/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012617.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-20008: Fixed local information disclosure due to possibility to read kernel heap memory via mmc_blk_read_single of block.c (bnc#1199564).
- CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677).
- CVE-2022-32296: Fixed vulnerability where TCP servers were allowed to identify clients by observing what source ports are used (bnc#1200288).
- CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
- CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
- CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
- CVE-2022-41848: Fixed a race condition in drivers/char/pcmcia/synclink_cs.c mgslpc_ioctl and mgslpc_detach (bnc#1203987).

The following non-security bugs were fixed:

- dtb: Do not include sources in src.rpm - refer to kernel-source Same as other kernel binary packages there is no need to carry duplicate sources in dtb packages.
- mkspec: eliminate @NOSOURCE@ macro This should be alsways used with @SOURCES@, just include the content there.
- net: mana: Add rmb after checking owner bits (git-fixes).
- net: mana: Add the Linux MANA PF driver (bnc#1201309, jsc#PED-529).
- x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still be possible to do so that the mitigation can still be disabled on Intel who do not use the return thunks but IBRS.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-22"/>
	<updated date="2022-10-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199564">SUSE bug 1199564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200288">SUSE bug 1200288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201309">SUSE bug 1201309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202677">SUSE bug 1202677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202960">SUSE bug 1202960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203552">SUSE bug 1203552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203769">SUSE bug 1203769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203987">SUSE bug 1203987</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-20008/">CVE-2022-20008</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2503/">CVE-2022-2503</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32296/">CVE-2022-32296</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3239/">CVE-2022-3239</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3303/">CVE-2022-3303</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41218/">CVE-2022-41218</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41848/">CVE-2022-41848</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716967" comment="kernel-default-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716968" comment="kernel-default-base-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716969" comment="kernel-default-devel-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716970" comment="kernel-devel-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716971" comment="kernel-docs-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716972" comment="kernel-macros-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716973" comment="kernel-obs-build-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716974" comment="kernel-source-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716975" comment="kernel-syms-4.12.14-150100.197.126.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139558" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1204421" ref_url="https://bugzilla.suse.com/1204421" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42927" ref_url="https://www.suse.com/security/cve/CVE-2022-42927/" source="CVE"/>
		<reference ref_id="CVE-2022-42928" ref_url="https://www.suse.com/security/cve/CVE-2022-42928/" source="CVE"/>
		<reference ref_id="CVE-2022-42929" ref_url="https://www.suse.com/security/cve/CVE-2022-42929/" source="CVE"/>
		<reference ref_id="CVE-2022-42932" ref_url="https://www.suse.com/security/cve/CVE-2022-42932/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3698-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012635.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Updated to version 102.4.0 ESR (bsc#1204421)
- CVE-2022-42927: Fixed same-origin policy violation that could have leaked cross-origin URLs.
- CVE-2022-42928: Fixed memory Corruption in JS Engine.
- CVE-2022-42929: Fixed denial of Service via window.print.
- CVE-2022-42932: Fixed memory safety bugs.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-24"/>
	<updated date="2022-10-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204421">SUSE bug 1204421</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42927/">CVE-2022-42927</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42928/">CVE-2022-42928</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-42929/">CVE-2022-42929</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-42932/">CVE-2022-42932</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718911" comment="MozillaFirefox-102.4.0-150000.150.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718912" comment="MozillaFirefox-devel-102.4.0-150000.150.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718913" comment="MozillaFirefox-translations-common-102.4.0-150000.150.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718914" comment="MozillaFirefox-translations-other-102.4.0-150000.150.62.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139559" version="1" class="patch">
	<metadata>
		<title>Security update for multipath-tools (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1187534" ref_url="https://bugzilla.suse.com/1187534" source="BUGZILLA"/>
		<reference ref_id="1202616" ref_url="https://bugzilla.suse.com/1202616" source="BUGZILLA"/>
		<reference ref_id="1202739" ref_url="https://bugzilla.suse.com/1202739" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41973" ref_url="https://www.suse.com/security/cve/CVE-2022-41973/" source="CVE"/>
		<reference ref_id="CVE-2022-41974" ref_url="https://www.suse.com/security/cve/CVE-2022-41974/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012647.html" source="SUSE-SU"/>
		<description>
This update for multipath-tools fixes the following issues:

- CVE-2022-41973: Fixed a symlink attack in multipathd. (bsc#1202739)
- CVE-2022-41974: Fixed an authorization bypass issue in multipathd. (bsc#1202739)
- Avoid linking to libreadline to avoid licensing issue (bsc#1202616)
- Fix that some zfcp devices have large/negative LUN IDs (bsc#1187534)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-24"/>
	<updated date="2022-10-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187534">SUSE bug 1187534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202616">SUSE bug 1202616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202739">SUSE bug 1202739</bugzilla>
	<cve impact="important" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-41973/">CVE-2022-41973</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41974/">CVE-2022-41974</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009720549" comment="kpartx-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720550" comment="libdmmp-devel-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720551" comment="libdmmp0_2_0-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720552" comment="multipath-tools-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720553" comment="multipath-tools-devel-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139560" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1203614" ref_url="https://bugzilla.suse.com/1203614" source="BUGZILLA"/>
		<reference ref_id="1203619" ref_url="https://bugzilla.suse.com/1203619" source="BUGZILLA"/>
		<reference ref_id="1203620" ref_url="https://bugzilla.suse.com/1203620" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2795" ref_url="https://www.suse.com/security/cve/CVE-2022-2795/" source="CVE"/>
		<reference ref_id="CVE-2022-38177" ref_url="https://www.suse.com/security/cve/CVE-2022-38177/" source="CVE"/>
		<reference ref_id="CVE-2022-38178" ref_url="https://www.suse.com/security/cve/CVE-2022-38178/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012671.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

  - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations (bsc#1203614).
  - CVE-2022-38177: Fixed a memory leak that could be externally triggered in the DNSSEC verification code for the ECDSA algorithm (bsc#1203619).
  - CVE-2022-38178: Fixed memory leaks that could be externally triggered in the DNSSEC verification code for the EdDSA algorithm (bsc#1203620).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203614">SUSE bug 1203614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203619">SUSE bug 1203619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203620">SUSE bug 1203620</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2795/">CVE-2022-2795</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38177/">CVE-2022-38177</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38178/">CVE-2022-38178</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009714565" comment="bind-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714566" comment="bind-chrootenv-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714567" comment="bind-devel-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714568" comment="bind-doc-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714569" comment="bind-utils-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714570" comment="libbind9-1600-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714571" comment="libdns1605-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714572" comment="libirs-devel-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714573" comment="libirs1601-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714574" comment="libisc1606-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714575" comment="libisccc1600-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714576" comment="libisccfg1600-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714577" comment="libns1604-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714578" comment="python3-bind-9.16.6-150000.12.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139561" version="1" class="patch">
	<metadata>
		<title>Security update for python-paramiko (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1111151" ref_url="https://bugzilla.suse.com/1111151" source="BUGZILLA"/>
		<reference ref_id="1200603" ref_url="https://bugzilla.suse.com/1200603" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000805" ref_url="https://www.suse.com/security/cve/CVE-2018-1000805/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012669.html" source="SUSE-SU"/>
		<description>
This update for python-paramiko fixes the following issues:

Updated to version 2.4.3:

- CVE-2018-1000805: Fixed authentication bypass (bsc#1111151).

Bugfixes:

- Fixed Ed25519 key handling for certain key comment lengths (bsc#1200603).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1111151">SUSE bug 1111151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200603">SUSE bug 1200603</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000805/">CVE-2018-1000805</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716215" comment="python2-paramiko-2.4.3-150100.6.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716204" comment="python3-paramiko-2.4.3-150100.6.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139562" version="1" class="patch">
	<metadata>
		<title>Security update for python-waitress (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1197255" ref_url="https://bugzilla.suse.com/1197255" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24761" ref_url="https://www.suse.com/security/cve/CVE-2022-24761/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012668.html" source="SUSE-SU"/>
		<description>
This update for python-waitress fixes the following issues:

- CVE-2022-24761: Fixed a bug to avoid inconsistent interpretation of HTTP requests leading to request smuggling. (bsc#1197255)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197255">SUSE bug 1197255</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-24761/">CVE-2022-24761</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716743" comment="python3-waitress-1.4.3-150000.3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139563" version="1" class="patch">
	<metadata>
		<title>Security update for golang-github-prometheus-node_exporter (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1196338" ref_url="https://bugzilla.suse.com/1196338" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21698" ref_url="https://www.suse.com/security/cve/CVE-2022-21698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3745-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012700.html" source="SUSE-SU"/>
		<description>
This update for golang-github-prometheus-node_exporter fixes the following issues:

  (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239, jsc#SUMA-114,
  CVE-2022-21698)		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196338">SUSE bug 1196338</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21698/">CVE-2022-21698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716966" comment="golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139564" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194166" ref_url="https://bugzilla.suse.com/1194166" source="BUGZILLA"/>
		<reference ref_id="1194167" ref_url="https://bugzilla.suse.com/1194167" source="BUGZILLA"/>
		<reference ref_id="1194168" ref_url="https://bugzilla.suse.com/1194168" source="BUGZILLA"/>
		<reference ref_id="1194169" ref_url="https://bugzilla.suse.com/1194169" source="BUGZILLA"/>
		<reference ref_id="1194170" ref_url="https://bugzilla.suse.com/1194170" source="BUGZILLA"/>
		<reference ref_id="1194171" ref_url="https://bugzilla.suse.com/1194171" source="BUGZILLA"/>
		<reference ref_id="1194780" ref_url="https://bugzilla.suse.com/1194780" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4181" ref_url="https://www.suse.com/security/cve/CVE-2021-4181/" source="CVE"/>
		<reference ref_id="CVE-2021-4182" ref_url="https://www.suse.com/security/cve/CVE-2021-4182/" source="CVE"/>
		<reference ref_id="CVE-2021-4183" ref_url="https://www.suse.com/security/cve/CVE-2021-4183/" source="CVE"/>
		<reference ref_id="CVE-2021-4184" ref_url="https://www.suse.com/security/cve/CVE-2021-4184/" source="CVE"/>
		<reference ref_id="CVE-2021-4185" ref_url="https://www.suse.com/security/cve/CVE-2021-4185/" source="CVE"/>
		<reference ref_id="CVE-2021-4190" ref_url="https://www.suse.com/security/cve/CVE-2021-4190/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0375-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010221.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

Update to version 3.6.1: 

- CVE-2021-4185: RTMPT dissector infinite loop (bsc#1194166)
- CVE-2021-4184: BitTorrent DHT dissector infinite loop (bsc#1194167)
- CVE-2021-4183: pcapng file parser crash (bsc#1194168)
- CVE-2021-4182: RFC 7468 file parser infinite loop (bsc#1194169)
- CVE-2021-4181: Sysdig Event dissector crash (bsc#1194170)
- CVE-2021-4190: Kafka dissector infinite loop (bsc#1194171)
- Support for Shared Memory Communications (SMC) (jsc#SLE-18727)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-14"/>
	<updated date="2022-02-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1194166">SUSE bug 1194166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194167">SUSE bug 1194167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194168">SUSE bug 1194168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194169">SUSE bug 1194169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194170">SUSE bug 1194170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194171">SUSE bug 1194171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194780">SUSE bug 1194780</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4181/">CVE-2021-4181</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4182/">CVE-2021-4182</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4183/">CVE-2021-4183</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4184/">CVE-2021-4184</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4185/">CVE-2021-4185</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4190/">CVE-2021-4190</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663932" comment="libwireshark15-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663933" comment="libwiretap12-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663934" comment="libwsutil13-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663935" comment="wireshark-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663936" comment="wireshark-devel-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663937" comment="wireshark-ui-qt-3.6.1-3.68.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139565" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1175144" ref_url="https://bugzilla.suse.com/1175144" source="BUGZILLA"/>
		<reference ref_id="1182282" ref_url="https://bugzilla.suse.com/1182282" source="BUGZILLA"/>
		<reference ref_id="1185000" ref_url="https://bugzilla.suse.com/1185000" source="BUGZILLA"/>
		<reference ref_id="1192463" ref_url="https://bugzilla.suse.com/1192463" source="BUGZILLA"/>
		<reference ref_id="1198035" ref_url="https://bugzilla.suse.com/1198035" source="BUGZILLA"/>
		<reference ref_id="1198037" ref_url="https://bugzilla.suse.com/1198037" source="BUGZILLA"/>
		<reference ref_id="1198038" ref_url="https://bugzilla.suse.com/1198038" source="BUGZILLA"/>
		<reference ref_id="1201367" ref_url="https://bugzilla.suse.com/1201367" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-17380" ref_url="https://www.suse.com/security/cve/CVE-2020-17380/" source="CVE"/>
		<reference ref_id="CVE-2021-3409" ref_url="https://www.suse.com/security/cve/CVE-2021-3409/" source="CVE"/>
		<reference ref_id="CVE-2021-3507" ref_url="https://www.suse.com/security/cve/CVE-2021-3507/" source="CVE"/>
		<reference ref_id="CVE-2021-4206" ref_url="https://www.suse.com/security/cve/CVE-2021-4206/" source="CVE"/>
		<reference ref_id="CVE-2021-4207" ref_url="https://www.suse.com/security/cve/CVE-2021-4207/" source="CVE"/>
		<reference ref_id="CVE-2022-0216" ref_url="https://www.suse.com/security/cve/CVE-2022-0216/" source="CVE"/>
		<reference ref_id="CVE-2022-35414" ref_url="https://www.suse.com/security/cve/CVE-2022-35414/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012710.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

- CVE-2021-3409: Fixed an incomplete fix for CVE-2020-17380 and CVE-2020-25085 in sdhi controller. (bsc#1182282)
- CVE-2021-4206: Fixed an integer overflow in cursor_alloc which can lead to heap buffer overflow. (bsc#1198035)
- CVE-2021-4207: Fixed a double fetch in qxl_cursor ehich can lead to heap buffer overflow. (bsc#1198037)
- CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038)
- CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)
- CVE-2021-3507: Fixed a heap buffer overflow in DMA read data transfers. (bsc#1185000)
- CVE-2020-17380: Fixed a heap buffer overflow in sdhci_sdma_transfer_multi_blocks. (bsc#1175144)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175144">SUSE bug 1175144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182282">SUSE bug 1182282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185000">SUSE bug 1185000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192463">SUSE bug 1192463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198035">SUSE bug 1198035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198037">SUSE bug 1198037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198038">SUSE bug 1198038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201367">SUSE bug 1201367</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-17380/">CVE-2020-17380</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3409/">CVE-2021-3409</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3507/">CVE-2021-3507</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4206/">CVE-2021-4206</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4207/">CVE-2021-4207</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0216/">CVE-2022-0216</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-35414/">CVE-2022-35414</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009717361" comment="qemu-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717362" comment="qemu-arm-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717363" comment="qemu-audio-alsa-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717364" comment="qemu-audio-oss-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717365" comment="qemu-audio-pa-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717366" comment="qemu-block-curl-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717367" comment="qemu-block-iscsi-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717368" comment="qemu-block-rbd-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717369" comment="qemu-block-ssh-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717370" comment="qemu-guest-agent-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717371" comment="qemu-ipxe-1.0.0+-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717372" comment="qemu-kvm-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717373" comment="qemu-lang-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717374" comment="qemu-seabios-1.12.0_0_ga698c89-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717375" comment="qemu-sgabios-8-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717376" comment="qemu-tools-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717377" comment="qemu-ui-curses-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717378" comment="qemu-ui-gtk-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717379" comment="qemu-vgabios-1.12.0_0_ga698c89-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717380" comment="qemu-x86-3.1.1.1-150100.80.43.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139566" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1202593" ref_url="https://bugzilla.suse.com/1202593" source="BUGZILLA"/>
		<reference ref_id="1204383" ref_url="https://bugzilla.suse.com/1204383" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32221" ref_url="https://www.suse.com/security/cve/CVE-2022-32221/" source="CVE"/>
		<reference ref_id="CVE-2022-35252" ref_url="https://www.suse.com/security/cve/CVE-2022-35252/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012702.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

  - CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).
  - CVE-2022-35252: Fixed a potential injection of control characters into cookies (bsc#1202593).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202593">SUSE bug 1202593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204383">SUSE bug 1204383</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-32221/">CVE-2022-32221</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-35252/">CVE-2022-35252</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721614" comment="curl-7.60.0-150000.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721615" comment="libcurl-devel-7.60.0-150000.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721616" comment="libcurl4-7.60.0-150000.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721617" comment="libcurl4-32bit-7.60.0-150000.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139567" version="1" class="patch">
	<metadata>
		<title>Security update for libmad (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1036968" ref_url="https://bugzilla.suse.com/1036968" source="BUGZILLA"/>
		<reference ref_id="1036969" ref_url="https://bugzilla.suse.com/1036969" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-8372" ref_url="https://www.suse.com/security/cve/CVE-2017-8372/" source="CVE"/>
		<reference ref_id="CVE-2017-8373" ref_url="https://www.suse.com/security/cve/CVE-2017-8373/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012717.html" source="SUSE-SU"/>
		<description>
This update for libmad fixes the following issues:

  - CVE-2017-8373: Fixed heap-based buffer overflow in mad_layer_III (bsc#1036968).
  - CVE-2017-8372: Fixed assertion failure in layer3.c (bsc#1036969).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1036968">SUSE bug 1036968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036969">SUSE bug 1036969</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8372/">CVE-2017-8372</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8373/">CVE-2017-8373</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009719716" comment="libmad-devel-0.15.1b-150000.5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009719717" comment="libmad0-0.15.1b-150000.5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139568" version="1" class="patch">
	<metadata>
		<title>Security update for telnet (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1203759" ref_url="https://bugzilla.suse.com/1203759" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-39028" ref_url="https://www.suse.com/security/cve/CVE-2022-39028/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012714.html" source="SUSE-SU"/>
		<description>
This update for telnet fixes the following issues:

  - CVE-2022-39028: Fixed NULL pointer dereference in telnetd (bsc#1203759).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203759">SUSE bug 1203759</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-39028/">CVE-2022-39028</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720478" comment="telnet-1.2-150000.3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139569" version="1" class="patch">
	<metadata>
		<title>Security update for libtasn1 (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1204690" ref_url="https://bugzilla.suse.com/1204690" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46848" ref_url="https://www.suse.com/security/cve/CVE-2021-46848/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012715.html" source="SUSE-SU"/>
		<description>
This update for libtasn1 fixes the following issues:

- CVE-2021-46848: Fixed off-by-one array size check that affects asn1_encode_simple_der (bsc#1204690)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1204690">SUSE bug 1204690</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46848/">CVE-2021-46848</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721360" comment="libtasn1-4.13-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721361" comment="libtasn1-6-4.13-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721362" comment="libtasn1-6-32bit-4.13-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721363" comment="libtasn1-devel-4.13-150000.4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139570" version="1" class="patch">
	<metadata>
		<title>Security update for openjpeg2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1140205" ref_url="https://bugzilla.suse.com/1140205" source="BUGZILLA"/>
		<reference ref_id="1149789" ref_url="https://bugzilla.suse.com/1149789" source="BUGZILLA"/>
		<reference ref_id="1179594" ref_url="https://bugzilla.suse.com/1179594" source="BUGZILLA"/>
		<reference ref_id="1179821" ref_url="https://bugzilla.suse.com/1179821" source="BUGZILLA"/>
		<reference ref_id="1180042" ref_url="https://bugzilla.suse.com/1180042" source="BUGZILLA"/>
		<reference ref_id="1180043" ref_url="https://bugzilla.suse.com/1180043" source="BUGZILLA"/>
		<reference ref_id="1180044" ref_url="https://bugzilla.suse.com/1180044" source="BUGZILLA"/>
		<reference ref_id="1180046" ref_url="https://bugzilla.suse.com/1180046" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20846" ref_url="https://www.suse.com/security/cve/CVE-2018-20846/" source="CVE"/>
		<reference ref_id="CVE-2018-21010" ref_url="https://www.suse.com/security/cve/CVE-2018-21010/" source="CVE"/>
		<reference ref_id="CVE-2020-27814" ref_url="https://www.suse.com/security/cve/CVE-2020-27814/" source="CVE"/>
		<reference ref_id="CVE-2020-27824" ref_url="https://www.suse.com/security/cve/CVE-2020-27824/" source="CVE"/>
		<reference ref_id="CVE-2020-27841" ref_url="https://www.suse.com/security/cve/CVE-2020-27841/" source="CVE"/>
		<reference ref_id="CVE-2020-27842" ref_url="https://www.suse.com/security/cve/CVE-2020-27842/" source="CVE"/>
		<reference ref_id="CVE-2020-27843" ref_url="https://www.suse.com/security/cve/CVE-2020-27843/" source="CVE"/>
		<reference ref_id="CVE-2020-27845" ref_url="https://www.suse.com/security/cve/CVE-2020-27845/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012731.html" source="SUSE-SU"/>
		<description>
This update for openjpeg2 fixes the following issues:

  - CVE-2018-20846: Fixed OOB read in pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c (bsc#1140205).
  - CVE-2018-21010: Fixed heap buffer overflow in color_apply_icc_profile in bin/common/color.c (bsc#1149789).
  - CVE-2020-27814: Fixed heap buffer overflow in lib/openjp2/mqc.c (bsc#1179594),
  - CVE-2020-27824: Fixed OOB read in opj_dwt_calc_explicit_stepsizes() (bsc#1179821).
  - CVE-2020-27841: Fixed buffer over-read in lib/openjp2/pi.c (bsc#1180042).
  - CVE-2020-27842: Fixed null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (bsc#1180043).
  - CVE-2020-27843: Fixed OOB read in opj_t2_encode_packet function in openjp2/t2.c (bsc#1180044).
  - CVE-2020-27845: Fixed heap-based buffer over-read in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (bsc#1180046).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-27"/>
	<updated date="2022-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140205">SUSE bug 1140205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149789">SUSE bug 1149789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179594">SUSE bug 1179594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179821">SUSE bug 1179821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180042">SUSE bug 1180042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180043">SUSE bug 1180043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180044">SUSE bug 1180044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180046">SUSE bug 1180046</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20846/">CVE-2018-20846</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-21010/">CVE-2018-21010</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27814/">CVE-2020-27814</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27824/">CVE-2020-27824</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27841/">CVE-2020-27841</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27842/">CVE-2020-27842</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27843/">CVE-2020-27843</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27845/">CVE-2020-27845</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721357" comment="libopenjp2-7-2.3.0-150000.3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721340" comment="libopenjp2-7-32bit-2.3.0-150000.3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721358" comment="openjpeg2-2.3.0-150000.3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721359" comment="openjpeg2-devel-2.3.0-150000.3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139571" version="1" class="patch">
	<metadata>
		<title>Security update for dbus-1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1087072" ref_url="https://bugzilla.suse.com/1087072" source="BUGZILLA"/>
		<reference ref_id="1204111" ref_url="https://bugzilla.suse.com/1204111" source="BUGZILLA"/>
		<reference ref_id="1204112" ref_url="https://bugzilla.suse.com/1204112" source="BUGZILLA"/>
		<reference ref_id="1204113" ref_url="https://bugzilla.suse.com/1204113" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42010" ref_url="https://www.suse.com/security/cve/CVE-2022-42010/" source="CVE"/>
		<reference ref_id="CVE-2022-42011" ref_url="https://www.suse.com/security/cve/CVE-2022-42011/" source="CVE"/>
		<reference ref_id="CVE-2022-42012" ref_url="https://www.suse.com/security/cve/CVE-2022-42012/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012727.html" source="SUSE-SU"/>
		<description>
This update for dbus-1 fixes the following issues:

  - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111).
  - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112).
  - CVE-2022-42012: Fixed a use-after-free that could be trigged by a message in non-native endianness with out-of-band Unix file descriptor (bsc#1204113).

  Bugfixes:

  - Disable asserts (bsc#1087072).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-27"/>
	<updated date="2022-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1087072">SUSE bug 1087072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204111">SUSE bug 1204111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204112">SUSE bug 1204112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204113">SUSE bug 1204113</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-42010/">CVE-2022-42010</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-42011/">CVE-2022-42011</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-42012/">CVE-2022-42012</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009717556" comment="dbus-1-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717557" comment="dbus-1-devel-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717558" comment="dbus-1-x11-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717559" comment="libdbus-1-3-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717541" comment="libdbus-1-3-32bit-1.12.2-150100.8.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139572" version="1" class="patch">
	<metadata>
		<title>Security update for libconfuse0 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1203326" ref_url="https://bugzilla.suse.com/1203326" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40320" ref_url="https://www.suse.com/security/cve/CVE-2022-40320/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012757.html" source="SUSE-SU"/>
		<description>
This update for libconfuse0 fixes the following issues:

- CVE-2022-40320: Fixed a heap-based buffer over-read in cfg_tilde_expand in confuse.c (bsc#1203326).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-28"/>
	<updated date="2022-10-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203326">SUSE bug 1203326</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40320/">CVE-2022-40320</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710533" comment="libconfuse-devel-2.8-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710534" comment="libconfuse0-2.8-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139573" version="1" class="patch">
	<metadata>
		<title>Security update for hdf5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1093663" ref_url="https://bugzilla.suse.com/1093663" source="BUGZILLA"/>
		<reference ref_id="1101475" ref_url="https://bugzilla.suse.com/1101475" source="BUGZILLA"/>
		<reference ref_id="1101906" ref_url="https://bugzilla.suse.com/1101906" source="BUGZILLA"/>
		<reference ref_id="1107069" ref_url="https://bugzilla.suse.com/1107069" source="BUGZILLA"/>
		<reference ref_id="1111598" ref_url="https://bugzilla.suse.com/1111598" source="BUGZILLA"/>
		<reference ref_id="1125882" ref_url="https://bugzilla.suse.com/1125882" source="BUGZILLA"/>
		<reference ref_id="1167400" ref_url="https://bugzilla.suse.com/1167400" source="BUGZILLA"/>
		<reference ref_id="1194366" ref_url="https://bugzilla.suse.com/1194366" source="BUGZILLA"/>
		<reference ref_id="1194375" ref_url="https://bugzilla.suse.com/1194375" source="BUGZILLA"/>
		<reference ref_id="1195212" ref_url="https://bugzilla.suse.com/1195212" source="BUGZILLA"/>
		<reference ref_id="1195215" ref_url="https://bugzilla.suse.com/1195215" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11205" ref_url="https://www.suse.com/security/cve/CVE-2018-11205/" source="CVE"/>
		<reference ref_id="CVE-2018-13867" ref_url="https://www.suse.com/security/cve/CVE-2018-13867/" source="CVE"/>
		<reference ref_id="CVE-2018-14031" ref_url="https://www.suse.com/security/cve/CVE-2018-14031/" source="CVE"/>
		<reference ref_id="CVE-2018-16438" ref_url="https://www.suse.com/security/cve/CVE-2018-16438/" source="CVE"/>
		<reference ref_id="CVE-2018-17439" ref_url="https://www.suse.com/security/cve/CVE-2018-17439/" source="CVE"/>
		<reference ref_id="CVE-2019-8396" ref_url="https://www.suse.com/security/cve/CVE-2019-8396/" source="CVE"/>
		<reference ref_id="CVE-2020-10812" ref_url="https://www.suse.com/security/cve/CVE-2020-10812/" source="CVE"/>
		<reference ref_id="CVE-2021-45830" ref_url="https://www.suse.com/security/cve/CVE-2021-45830/" source="CVE"/>
		<reference ref_id="CVE-2021-45833" ref_url="https://www.suse.com/security/cve/CVE-2021-45833/" source="CVE"/>
		<reference ref_id="CVE-2021-46242" ref_url="https://www.suse.com/security/cve/CVE-2021-46242/" source="CVE"/>
		<reference ref_id="CVE-2021-46244" ref_url="https://www.suse.com/security/cve/CVE-2021-46244/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012789.html" source="SUSE-SU"/>
		<description>
This update for hdf5 fixes the following issues:

  - CVE-2021-46244: Fixed division by zero leading to DoS (bsc#1195215).
  - CVE-2018-13867: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1101906).
  - CVE-2018-16438: Fixed out of bounds read in H5L_extern_query at H5Lexternal.c (bsc#1107069).
  - CVE-2020-10812: Fixed NULL pointer dereference (bsc#1167400).
  - CVE-2021-45830: Fixed heap buffer overflow vulnerability in H5F_addr_decode_len in /hdf5/src/H5Fint.c (bsc#1194375).
  - CVE-2019-8396:  Fixed buffer overflow in function H5O__layout_encode in H5Olayout.c (bsc#1125882).
  - CVE-2018-11205: Fixed out of bounds read was discovered in H5VM_memcpyvv in H5VM.c (bsc#1093663).
  - CVE-2021-46242: Fixed heap-use-after free via the component H5AC_unpin_entry (bsc#1195212).
  - CVE-2021-45833: Fixed stack buffer overflow vulnerability (bsc#1194366).
  - CVE-2018-14031: Fixed heap-based buffer over-read in the function H5T_copy in H5T.c (bsc#1101475).
  - CVE-2018-17439: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1111598).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-01"/>
	<updated date="2022-11-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1093663">SUSE bug 1093663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101475">SUSE bug 1101475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101906">SUSE bug 1101906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107069">SUSE bug 1107069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111598">SUSE bug 1111598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125882">SUSE bug 1125882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167400">SUSE bug 1167400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194366">SUSE bug 1194366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194375">SUSE bug 1194375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195212">SUSE bug 1195212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195215">SUSE bug 1195215</bugzilla>
	<cve impact="low" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11205/">CVE-2018-11205</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13867/">CVE-2018-13867</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14031/">CVE-2018-14031</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16438/">CVE-2018-16438</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-17439/">CVE-2018-17439</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8396/">CVE-2019-8396</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10812/">CVE-2020-10812</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-45830/">CVE-2021-45830</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-45833/">CVE-2021-45833</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-46242/">CVE-2021-46242</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46244/">CVE-2021-46244</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009720479" comment="hdf5-gnu-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720480" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720481" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720482" comment="hdf5-gnu-openmpi2-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720483" comment="hdf5-hpc-examples-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720484" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720485" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720486" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720487" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720488" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720489" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720490" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720491" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720492" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720493" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720494" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720495" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720496" comment="hdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720497" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720498" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-static-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720499" comment="hdf5_1_10_8-gnu-openmpi2-hpc-module-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720500" comment="hdf5_1_10_8-hpc-examples-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720501" comment="libhdf5-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720502" comment="libhdf5-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720503" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720504" comment="libhdf5-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720505" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720506" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720507" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720508" comment="libhdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720509" comment="libhdf5_cpp-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720510" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720511" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720512" comment="libhdf5_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720513" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720514" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720515" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720516" comment="libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720517" comment="libhdf5_fortran-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720518" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720519" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720520" comment="libhdf5_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720521" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720522" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720523" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720524" comment="libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720525" comment="libhdf5_hl-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720526" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720527" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720528" comment="libhdf5_hl-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720529" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720530" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720531" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720532" comment="libhdf5_hl_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720533" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720534" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720535" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720536" comment="libhdf5_hl_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720537" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720538" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720539" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720540" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720541" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720542" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720543" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720544" comment="libhdf5_hl_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720545" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720546" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720547" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720548" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139574" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1204412" ref_url="https://bugzilla.suse.com/1204412" source="BUGZILLA"/>
		<reference ref_id="1204416" ref_url="https://bugzilla.suse.com/1204416" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3550" ref_url="https://www.suse.com/security/cve/CVE-2022-3550/" source="CVE"/>
		<reference ref_id="CVE-2022-3551" ref_url="https://www.suse.com/security/cve/CVE-2022-3551/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3856-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012800.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

  - CVE-2022-3550: Fixed out of bounds read/write in _GetCountedString() (bsc#1204412).
  - CVE-2022-3551: Fixed various leaks of the return value of GetComponentSpec() (bsc#1204416).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204412">SUSE bug 1204412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204416">SUSE bug 1204416</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3550/">CVE-2022-3550</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3551/">CVE-2022-3551</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718918" comment="xorg-x11-server-1.20.3-150100.14.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718919" comment="xorg-x11-server-extra-1.20.3-150100.14.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718920" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139575" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1201978" ref_url="https://bugzilla.suse.com/1201978" source="BUGZILLA"/>
		<reference ref_id="1204366" ref_url="https://bugzilla.suse.com/1204366" source="BUGZILLA"/>
		<reference ref_id="1204367" ref_url="https://bugzilla.suse.com/1204367" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-3709" ref_url="https://www.suse.com/security/cve/CVE-2016-3709/" source="CVE"/>
		<reference ref_id="CVE-2022-40303" ref_url="https://www.suse.com/security/cve/CVE-2022-40303/" source="CVE"/>
		<reference ref_id="CVE-2022-40304" ref_url="https://www.suse.com/security/cve/CVE-2022-40304/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012813.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

  - CVE-2016-3709: Fixed possible XSS vulnerability (bsc#1201978).
  - CVE-2022-40303: Fixed integer overflows with XML_PARSE_HUGE (bsc#1204366).
  - CVE-2022-40304: Fixed dict corruption caused by entity reference cycles (bsc#1204367).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-04"/>
	<updated date="2022-11-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201978">SUSE bug 1201978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204366">SUSE bug 1204366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204367">SUSE bug 1204367</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-3709/">CVE-2016-3709</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-40303/">CVE-2022-40303</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40304/">CVE-2022-40304</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718902" comment="libxml2-2-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718903" comment="libxml2-2-32bit-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718904" comment="libxml2-devel-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718905" comment="libxml2-tools-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718906" comment="python2-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718907" comment="python3-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139576" version="1" class="patch">
	<metadata>
		<title>Security update for conmon (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1200285" ref_url="https://bugzilla.suse.com/1200285" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1708" ref_url="https://www.suse.com/security/cve/CVE-2022-1708/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012837.html" source="SUSE-SU"/>
		<description>
This update for conmon fixes the following issues:

conmon was updated to 2.1.3:

* Stop using g_unix_signal_add() to avoid threads
* Rename CLI optionlog-size-global-max to log-global-size-max 

Update to version 2.1.2:

* add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 bsc#1200285)
* journald: print tag and name if both are specified
* drop some logs to debug level

Update to version 2.1.0

* logging: buffer partial messages to journald
* exit: close all fds &gt;= 3
* fix: cgroup: Free memory_cgroup_file_path if open fails.
  Call g_free instead of free.

Update to version 2.0.32

* Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
* exit_command: Fix: unset subreaper attribute before running exit command

Update to version 2.0.31
 
* logging: new mode -l passthrough
* ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
* conmon: Fix: free userdata files before exec cleanup

Update to version 2.0.30:

* Remove unreachable code path
* exit: report if the exit command was killed
* exit: fix race zombie reaper
* conn_sock: allow watchdog messages through the notify socket proxy
* seccomp: add support for seccomp notify

Update to version 2.0.29:

* Reset OOM score back to 0 for container runtime
* call functions registered with atexit on SIGTERM
* conn_sock: fix potential segfault

Update to version 2.0.27:

* Add CRI-O integration test GitHub action
* exec: don't fail on EBADFD
* close_fds: fix close of external fds
* Add arm64 static build binary

Update to version 2.0.26:

* conn_sock: do not fail on EAGAIN
* fix segfault from a double freed pointer
* Fix a bug where conmon could never spawn a container, because
  a disagreement between the caller and itself on where the attach
  socket was.
* improve --full-attach to ignore the socket-dir directly. that
  means callers don't need to specify a socket dir at all (and
  can remove it)
* add full-attach option to allow callers to not truncate a very
  long path for the attach socket
* close only opened FDs
* set locale to inherit environment

Update to version 2.0.22:

* added man page
* attach: always chdir
* conn_sock: Explicitly free a heap-allocated string
* refactor I/O and add SD_NOTIFY proxy support

Update to version 2.0.21:

* protect against kill(-1)
* Makefile: enable debuginfo generation
* Remove go.sum file and add go.mod
* Fail if conmon config could not be written
* nix: remove double definition for e2fsprogs
* Speedup static build by utilizing CI cache on `/nix` folder
* Fix nix build for failing e2fsprogs tests
* test: fix CI
* Use Podman for building
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1200285">SUSE bug 1200285</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1708/">CVE-2022-1708</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715850" comment="conmon-2.1.3-150100.3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139577" version="1" class="patch">
	<metadata>
		<title>Security update for sendmail (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1202937" ref_url="https://bugzilla.suse.com/1202937" source="BUGZILLA"/>
		<reference ref_id="1204696" ref_url="https://bugzilla.suse.com/1204696" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31256" ref_url="https://www.suse.com/security/cve/CVE-2022-31256/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012839.html" source="SUSE-SU"/>
		<description>
This update for sendmail fixes the following issues:

  - CVE-2022-31256: Fixed mail to root privilege escalation via sm-client.pre script (bsc#1204696, bsc#1202937).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202937">SUSE bug 1202937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204696">SUSE bug 1204696</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31256/">CVE-2022-31256</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721900" comment="libmilter1_0-8.15.2-150000.8.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139578" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1204708" ref_url="https://bugzilla.suse.com/1204708" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-43680" ref_url="https://www.suse.com/security/cve/CVE-2022-43680/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012847.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

  - CVE-2022-43680: Fixed use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate (bsc#1204708).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204708">SUSE bug 1204708</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43680/">CVE-2022-43680</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721901" comment="expat-2.2.5-150000.3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721902" comment="libexpat-devel-2.2.5-150000.3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721903" comment="libexpat1-2.2.5-150000.3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721891" comment="libexpat1-32bit-2.2.5-150000.3.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139579" version="1" class="patch">
	<metadata>
		<title>Security update for vsftpd (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1196918" ref_url="https://bugzilla.suse.com/1196918" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:3914-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/026042.html" source="SUSE-SU"/>
		<description>
This update for vsftpd fixes the following issues:

  Bugfixes:

  - Removed unsupported systemd hardening options (bsc#1196918).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196918">SUSE bug 1196918</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717512" comment="vsftpd-3.0.5-150000.7.22.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139580" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1203125" ref_url="https://bugzilla.suse.com/1203125" source="BUGZILLA"/>
		<reference ref_id="1204577" ref_url="https://bugzilla.suse.com/1204577" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10735" ref_url="https://www.suse.com/security/cve/CVE-2020-10735/" source="CVE"/>
		<reference ref_id="CVE-2022-37454" ref_url="https://www.suse.com/security/cve/CVE-2022-37454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3924-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012858.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2022-37454: Fixed a buffer overflow in hashlib.sha3_* implementations. (bsc#1204577)
- CVE-2020-10735: Fixed a bug to limit amount of digits converting text to int and vice vera. (bsc#1203125)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-09"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203125">SUSE bug 1203125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204577">SUSE bug 1204577</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10735/">CVE-2020-10735</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-37454/">CVE-2022-37454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723153" comment="libpython3_6m1_0-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723154" comment="python3-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723155" comment="python3-base-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723156" comment="python3-curses-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723157" comment="python3-dbm-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723158" comment="python3-devel-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723159" comment="python3-idle-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723164" comment="python3-testsuite-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723160" comment="python3-tk-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723161" comment="python3-tools-3.6.15-150000.3.116.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139581" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1185104" ref_url="https://bugzilla.suse.com/1185104" source="BUGZILLA"/>
		<reference ref_id="1193923" ref_url="https://bugzilla.suse.com/1193923" source="BUGZILLA"/>
		<reference ref_id="1199966" ref_url="https://bugzilla.suse.com/1199966" source="BUGZILLA"/>
		<reference ref_id="1200762" ref_url="https://bugzilla.suse.com/1200762" source="BUGZILLA"/>
		<reference ref_id="1203806" ref_url="https://bugzilla.suse.com/1203806" source="BUGZILLA"/>
		<reference ref_id="1203807" ref_url="https://bugzilla.suse.com/1203807" source="BUGZILLA"/>
		<reference ref_id="1204482" ref_url="https://bugzilla.suse.com/1204482" source="BUGZILLA"/>
		<reference ref_id="1204485" ref_url="https://bugzilla.suse.com/1204485" source="BUGZILLA"/>
		<reference ref_id="1204487" ref_url="https://bugzilla.suse.com/1204487" source="BUGZILLA"/>
		<reference ref_id="1204488" ref_url="https://bugzilla.suse.com/1204488" source="BUGZILLA"/>
		<reference ref_id="1204489" ref_url="https://bugzilla.suse.com/1204489" source="BUGZILLA"/>
		<reference ref_id="1204490" ref_url="https://bugzilla.suse.com/1204490" source="BUGZILLA"/>
		<reference ref_id="1204494" ref_url="https://bugzilla.suse.com/1204494" source="BUGZILLA"/>
		<reference ref_id="1204496" ref_url="https://bugzilla.suse.com/1204496" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28689" ref_url="https://www.suse.com/security/cve/CVE-2021-28689/" source="CVE"/>
		<reference ref_id="CVE-2022-26365" ref_url="https://www.suse.com/security/cve/CVE-2022-26365/" source="CVE"/>
		<reference ref_id="CVE-2022-33740" ref_url="https://www.suse.com/security/cve/CVE-2022-33740/" source="CVE"/>
		<reference ref_id="CVE-2022-33741" ref_url="https://www.suse.com/security/cve/CVE-2022-33741/" source="CVE"/>
		<reference ref_id="CVE-2022-33742" ref_url="https://www.suse.com/security/cve/CVE-2022-33742/" source="CVE"/>
		<reference ref_id="CVE-2022-33746" ref_url="https://www.suse.com/security/cve/CVE-2022-33746/" source="CVE"/>
		<reference ref_id="CVE-2022-33748" ref_url="https://www.suse.com/security/cve/CVE-2022-33748/" source="CVE"/>
		<reference ref_id="CVE-2022-42309" ref_url="https://www.suse.com/security/cve/CVE-2022-42309/" source="CVE"/>
		<reference ref_id="CVE-2022-42310" ref_url="https://www.suse.com/security/cve/CVE-2022-42310/" source="CVE"/>
		<reference ref_id="CVE-2022-42311" ref_url="https://www.suse.com/security/cve/CVE-2022-42311/" source="CVE"/>
		<reference ref_id="CVE-2022-42312" ref_url="https://www.suse.com/security/cve/CVE-2022-42312/" source="CVE"/>
		<reference ref_id="CVE-2022-42313" ref_url="https://www.suse.com/security/cve/CVE-2022-42313/" source="CVE"/>
		<reference ref_id="CVE-2022-42314" ref_url="https://www.suse.com/security/cve/CVE-2022-42314/" source="CVE"/>
		<reference ref_id="CVE-2022-42315" ref_url="https://www.suse.com/security/cve/CVE-2022-42315/" source="CVE"/>
		<reference ref_id="CVE-2022-42316" ref_url="https://www.suse.com/security/cve/CVE-2022-42316/" source="CVE"/>
		<reference ref_id="CVE-2022-42317" ref_url="https://www.suse.com/security/cve/CVE-2022-42317/" source="CVE"/>
		<reference ref_id="CVE-2022-42318" ref_url="https://www.suse.com/security/cve/CVE-2022-42318/" source="CVE"/>
		<reference ref_id="CVE-2022-42319" ref_url="https://www.suse.com/security/cve/CVE-2022-42319/" source="CVE"/>
		<reference ref_id="CVE-2022-42320" ref_url="https://www.suse.com/security/cve/CVE-2022-42320/" source="CVE"/>
		<reference ref_id="CVE-2022-42321" ref_url="https://www.suse.com/security/cve/CVE-2022-42321/" source="CVE"/>
		<reference ref_id="CVE-2022-42322" ref_url="https://www.suse.com/security/cve/CVE-2022-42322/" source="CVE"/>
		<reference ref_id="CVE-2022-42323" ref_url="https://www.suse.com/security/cve/CVE-2022-42323/" source="CVE"/>
		<reference ref_id="CVE-2022-42325" ref_url="https://www.suse.com/security/cve/CVE-2022-42325/" source="CVE"/>
		<reference ref_id="CVE-2022-42326" ref_url="https://www.suse.com/security/cve/CVE-2022-42326/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012866.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806).
- CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807).
- CVE-2021-28689: Fixed speculative vulnerabilities with bare (non-shim) 32-bit PV guests (bsc#1185104).
- CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let xenstored run out of memory (bsc#1204482)
- CVE-2022-42309: xen: Xenstore: Guests can crash xenstored (bsc#1204485)
- CVE-2022-42310: xen: Xenstore: Guests can create orphaned Xenstore nodes (bsc#1204487)
- CVE-2022-42319: xen: Xenstore: Guests can cause Xenstore to not free temporary memory (bsc#1204488)
- CVE-2022-42320: xen: Xenstore: Guests can get access to Xenstore nodes of deleted domains (bsc#1204489)
- CVE-2022-42321: xen: Xenstore: Guests can crash xenstored via exhausting the stack (bsc#1204490)
- CVE-2022-42322,CVE-2022-42323: xen: Xenstore: cooperating guests can create arbitrary numbers of nodes (bsc#1204494)
- CVE-2022-42325,CVE-2022-42326: xen: Xenstore: Guests can create arbitray number of nodes via transactions (bsc#1204496)
- CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings (bsc#1199966).
- CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742: xen: Linux disk/nic frontends data leaks (bsc#1200762).
- xen: Frontends vulnerable to backends (bsc#1193923).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-10"/>
	<updated date="2022-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185104">SUSE bug 1185104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193923">SUSE bug 1193923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199966">SUSE bug 1199966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200762">SUSE bug 1200762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203806">SUSE bug 1203806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203807">SUSE bug 1203807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204482">SUSE bug 1204482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204485">SUSE bug 1204485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204487">SUSE bug 1204487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204488">SUSE bug 1204488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204489">SUSE bug 1204489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204490">SUSE bug 1204490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204494">SUSE bug 1204494</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204496">SUSE bug 1204496</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28689/">CVE-2021-28689</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-26365/">CVE-2022-26365</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33740/">CVE-2022-33740</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33741/">CVE-2022-33741</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33742/">CVE-2022-33742</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-33746/">CVE-2022-33746</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-33748/">CVE-2022-33748</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42309/">CVE-2022-42309</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42310/">CVE-2022-42310</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42311/">CVE-2022-42311</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42312/">CVE-2022-42312</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42313/">CVE-2022-42313</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42314/">CVE-2022-42314</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42315/">CVE-2022-42315</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42316/">CVE-2022-42316</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42317/">CVE-2022-42317</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42318/">CVE-2022-42318</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42319/">CVE-2022-42319</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42320/">CVE-2022-42320</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42321/">CVE-2022-42321</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42322/">CVE-2022-42322</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42323/">CVE-2022-42323</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42325/">CVE-2022-42325</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42326/">CVE-2022-42326</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724683" comment="xen-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724684" comment="xen-devel-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724685" comment="xen-libs-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724686" comment="xen-tools-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724687" comment="xen-tools-domU-4.12.4_30-150100.3.80.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139582" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1204986" ref_url="https://bugzilla.suse.com/1204986" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-43995" ref_url="https://www.suse.com/security/cve/CVE-2022-43995/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012873.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:
  
- CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt() password backend (bsc#1204986).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-10"/>
	<updated date="2022-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204986">SUSE bug 1204986</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-43995/">CVE-2022-43995</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723162" comment="sudo-1.8.27-150000.4.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723163" comment="sudo-devel-1.8.27-150000.4.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139583" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1204577" ref_url="https://bugzilla.suse.com/1204577" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-9253" ref_url="https://www.suse.com/security/cve/CVE-2015-9253/" source="CVE"/>
		<reference ref_id="CVE-2017-8923" ref_url="https://www.suse.com/security/cve/CVE-2017-8923/" source="CVE"/>
		<reference ref_id="CVE-2017-9120" ref_url="https://www.suse.com/security/cve/CVE-2017-9120/" source="CVE"/>
		<reference ref_id="CVE-2018-1000222" ref_url="https://www.suse.com/security/cve/CVE-2018-1000222/" source="CVE"/>
		<reference ref_id="CVE-2018-12882" ref_url="https://www.suse.com/security/cve/CVE-2018-12882/" source="CVE"/>
		<reference ref_id="CVE-2018-14851" ref_url="https://www.suse.com/security/cve/CVE-2018-14851/" source="CVE"/>
		<reference ref_id="CVE-2018-17082" ref_url="https://www.suse.com/security/cve/CVE-2018-17082/" source="CVE"/>
		<reference ref_id="CVE-2018-19935" ref_url="https://www.suse.com/security/cve/CVE-2018-19935/" source="CVE"/>
		<reference ref_id="CVE-2018-20783" ref_url="https://www.suse.com/security/cve/CVE-2018-20783/" source="CVE"/>
		<reference ref_id="CVE-2019-11034" ref_url="https://www.suse.com/security/cve/CVE-2019-11034/" source="CVE"/>
		<reference ref_id="CVE-2019-11035" ref_url="https://www.suse.com/security/cve/CVE-2019-11035/" source="CVE"/>
		<reference ref_id="CVE-2019-11036" ref_url="https://www.suse.com/security/cve/CVE-2019-11036/" source="CVE"/>
		<reference ref_id="CVE-2019-11039" ref_url="https://www.suse.com/security/cve/CVE-2019-11039/" source="CVE"/>
		<reference ref_id="CVE-2019-11040" ref_url="https://www.suse.com/security/cve/CVE-2019-11040/" source="CVE"/>
		<reference ref_id="CVE-2019-11041" ref_url="https://www.suse.com/security/cve/CVE-2019-11041/" source="CVE"/>
		<reference ref_id="CVE-2019-11042" ref_url="https://www.suse.com/security/cve/CVE-2019-11042/" source="CVE"/>
		<reference ref_id="CVE-2019-11043" ref_url="https://www.suse.com/security/cve/CVE-2019-11043/" source="CVE"/>
		<reference ref_id="CVE-2019-11045" ref_url="https://www.suse.com/security/cve/CVE-2019-11045/" source="CVE"/>
		<reference ref_id="CVE-2019-11046" ref_url="https://www.suse.com/security/cve/CVE-2019-11046/" source="CVE"/>
		<reference ref_id="CVE-2019-11047" ref_url="https://www.suse.com/security/cve/CVE-2019-11047/" source="CVE"/>
		<reference ref_id="CVE-2019-11048" ref_url="https://www.suse.com/security/cve/CVE-2019-11048/" source="CVE"/>
		<reference ref_id="CVE-2019-11050" ref_url="https://www.suse.com/security/cve/CVE-2019-11050/" source="CVE"/>
		<reference ref_id="CVE-2019-9020" ref_url="https://www.suse.com/security/cve/CVE-2019-9020/" source="CVE"/>
		<reference ref_id="CVE-2019-9021" ref_url="https://www.suse.com/security/cve/CVE-2019-9021/" source="CVE"/>
		<reference ref_id="CVE-2019-9022" ref_url="https://www.suse.com/security/cve/CVE-2019-9022/" source="CVE"/>
		<reference ref_id="CVE-2019-9023" ref_url="https://www.suse.com/security/cve/CVE-2019-9023/" source="CVE"/>
		<reference ref_id="CVE-2019-9024" ref_url="https://www.suse.com/security/cve/CVE-2019-9024/" source="CVE"/>
		<reference ref_id="CVE-2019-9637" ref_url="https://www.suse.com/security/cve/CVE-2019-9637/" source="CVE"/>
		<reference ref_id="CVE-2019-9638" ref_url="https://www.suse.com/security/cve/CVE-2019-9638/" source="CVE"/>
		<reference ref_id="CVE-2019-9640" ref_url="https://www.suse.com/security/cve/CVE-2019-9640/" source="CVE"/>
		<reference ref_id="CVE-2019-9641" ref_url="https://www.suse.com/security/cve/CVE-2019-9641/" source="CVE"/>
		<reference ref_id="CVE-2019-9675" ref_url="https://www.suse.com/security/cve/CVE-2019-9675/" source="CVE"/>
		<reference ref_id="CVE-2020-7059" ref_url="https://www.suse.com/security/cve/CVE-2020-7059/" source="CVE"/>
		<reference ref_id="CVE-2020-7060" ref_url="https://www.suse.com/security/cve/CVE-2020-7060/" source="CVE"/>
		<reference ref_id="CVE-2020-7062" ref_url="https://www.suse.com/security/cve/CVE-2020-7062/" source="CVE"/>
		<reference ref_id="CVE-2020-7063" ref_url="https://www.suse.com/security/cve/CVE-2020-7063/" source="CVE"/>
		<reference ref_id="CVE-2020-7064" ref_url="https://www.suse.com/security/cve/CVE-2020-7064/" source="CVE"/>
		<reference ref_id="CVE-2020-7066" ref_url="https://www.suse.com/security/cve/CVE-2020-7066/" source="CVE"/>
		<reference ref_id="CVE-2020-7068" ref_url="https://www.suse.com/security/cve/CVE-2020-7068/" source="CVE"/>
		<reference ref_id="CVE-2020-7069" ref_url="https://www.suse.com/security/cve/CVE-2020-7069/" source="CVE"/>
		<reference ref_id="CVE-2020-7070" ref_url="https://www.suse.com/security/cve/CVE-2020-7070/" source="CVE"/>
		<reference ref_id="CVE-2020-7071" ref_url="https://www.suse.com/security/cve/CVE-2020-7071/" source="CVE"/>
		<reference ref_id="CVE-2021-21702" ref_url="https://www.suse.com/security/cve/CVE-2021-21702/" source="CVE"/>
		<reference ref_id="CVE-2021-21703" ref_url="https://www.suse.com/security/cve/CVE-2021-21703/" source="CVE"/>
		<reference ref_id="CVE-2021-21704" ref_url="https://www.suse.com/security/cve/CVE-2021-21704/" source="CVE"/>
		<reference ref_id="CVE-2021-21705" ref_url="https://www.suse.com/security/cve/CVE-2021-21705/" source="CVE"/>
		<reference ref_id="CVE-2021-21707" ref_url="https://www.suse.com/security/cve/CVE-2021-21707/" source="CVE"/>
		<reference ref_id="CVE-2022-31625" ref_url="https://www.suse.com/security/cve/CVE-2022-31625/" source="CVE"/>
		<reference ref_id="CVE-2022-31626" ref_url="https://www.suse.com/security/cve/CVE-2022-31626/" source="CVE"/>
		<reference ref_id="CVE-2022-31628" ref_url="https://www.suse.com/security/cve/CVE-2022-31628/" source="CVE"/>
		<reference ref_id="CVE-2022-31629" ref_url="https://www.suse.com/security/cve/CVE-2022-31629/" source="CVE"/>
		<reference ref_id="CVE-2022-37454" ref_url="https://www.suse.com/security/cve/CVE-2022-37454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- Version update to 7.2.34 [jsc#SLE-23639]

- CVE-2022-37454: Fixed SHA-3 buffer overflow (bsc#1204577).
- Fix integer overflow in PHP_SHA3##bits (bsc#1204577#c26).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204577">SUSE bug 1204577</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9253/">CVE-2015-9253</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8923/">CVE-2017-8923</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9120/">CVE-2017-9120</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000222/">CVE-2018-1000222</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12882/">CVE-2018-12882</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14851/">CVE-2018-14851</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-17082/">CVE-2018-17082</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19935/">CVE-2018-19935</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20783/">CVE-2018-20783</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11034/">CVE-2019-11034</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11035/">CVE-2019-11035</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11036/">CVE-2019-11036</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11039/">CVE-2019-11039</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11040/">CVE-2019-11040</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11041/">CVE-2019-11041</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11042/">CVE-2019-11042</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11043/">CVE-2019-11043</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11045/">CVE-2019-11045</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11046/">CVE-2019-11046</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11047/">CVE-2019-11047</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11048/">CVE-2019-11048</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11050/">CVE-2019-11050</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9020/">CVE-2019-9020</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9021/">CVE-2019-9021</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9022/">CVE-2019-9022</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9023/">CVE-2019-9023</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9024/">CVE-2019-9024</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9637/">CVE-2019-9637</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9638/">CVE-2019-9638</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9640/">CVE-2019-9640</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9641/">CVE-2019-9641</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9675/">CVE-2019-9675</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7059/">CVE-2020-7059</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-7060/">CVE-2020-7060</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7062/">CVE-2020-7062</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7063/">CVE-2020-7063</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7064/">CVE-2020-7064</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7066/">CVE-2020-7066</cve>
	<cve impact="moderate" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7068/">CVE-2020-7068</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-7069/">CVE-2020-7069</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-7070/">CVE-2020-7070</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-7071/">CVE-2020-7071</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21702/">CVE-2021-21702</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21703/">CVE-2021-21703</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21704/">CVE-2021-21704</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21705/">CVE-2021-21705</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21707/">CVE-2021-21707</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31625/">CVE-2022-31625</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31626/">CVE-2022-31626</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-31628/">CVE-2022-31628</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-31629/">CVE-2022-31629</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-37454/">CVE-2022-37454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723738" comment="apache2-mod_php7-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723739" comment="php7-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723740" comment="php7-bcmath-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723741" comment="php7-bz2-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723742" comment="php7-calendar-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723743" comment="php7-ctype-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723744" comment="php7-curl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723745" comment="php7-dba-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723746" comment="php7-devel-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723747" comment="php7-dom-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723748" comment="php7-enchant-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723749" comment="php7-exif-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723750" comment="php7-fastcgi-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723751" comment="php7-fileinfo-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723752" comment="php7-fpm-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723753" comment="php7-ftp-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723754" comment="php7-gd-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723755" comment="php7-gettext-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723756" comment="php7-gmp-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723757" comment="php7-iconv-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723758" comment="php7-intl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723759" comment="php7-json-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723760" comment="php7-ldap-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723761" comment="php7-mbstring-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723762" comment="php7-mysql-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723763" comment="php7-odbc-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723764" comment="php7-opcache-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723765" comment="php7-openssl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723766" comment="php7-pcntl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723767" comment="php7-pdo-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723768" comment="php7-pear-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723769" comment="php7-pear-Archive_Tar-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723770" comment="php7-pgsql-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723771" comment="php7-phar-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723772" comment="php7-posix-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723773" comment="php7-readline-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723774" comment="php7-shmop-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723775" comment="php7-snmp-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723776" comment="php7-soap-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723777" comment="php7-sockets-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723778" comment="php7-sodium-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723779" comment="php7-sqlite-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723780" comment="php7-sysvmsg-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723781" comment="php7-sysvsem-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723782" comment="php7-sysvshm-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723791" comment="php7-tidy-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723783" comment="php7-tokenizer-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723784" comment="php7-wddx-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723785" comment="php7-xmlreader-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723786" comment="php7-xmlrpc-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723787" comment="php7-xmlwriter-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723788" comment="php7-xsl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723789" comment="php7-zip-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723790" comment="php7-zlib-7.2.34-150000.4.103.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139584" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1203476" ref_url="https://bugzilla.suse.com/1203476" source="BUGZILLA"/>
		<reference ref_id="1204468" ref_url="https://bugzilla.suse.com/1204468" source="BUGZILLA"/>
		<reference ref_id="1204471" ref_url="https://bugzilla.suse.com/1204471" source="BUGZILLA"/>
		<reference ref_id="1204472" ref_url="https://bugzilla.suse.com/1204472" source="BUGZILLA"/>
		<reference ref_id="1204473" ref_url="https://bugzilla.suse.com/1204473" source="BUGZILLA"/>
		<reference ref_id="1204475" ref_url="https://bugzilla.suse.com/1204475" source="BUGZILLA"/>
		<reference ref_id="1204480" ref_url="https://bugzilla.suse.com/1204480" source="BUGZILLA"/>
		<reference ref_id="1204523" ref_url="https://bugzilla.suse.com/1204523" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21618" ref_url="https://www.suse.com/security/cve/CVE-2022-21618/" source="CVE"/>
		<reference ref_id="CVE-2022-21619" ref_url="https://www.suse.com/security/cve/CVE-2022-21619/" source="CVE"/>
		<reference ref_id="CVE-2022-21624" ref_url="https://www.suse.com/security/cve/CVE-2022-21624/" source="CVE"/>
		<reference ref_id="CVE-2022-21626" ref_url="https://www.suse.com/security/cve/CVE-2022-21626/" source="CVE"/>
		<reference ref_id="CVE-2022-21628" ref_url="https://www.suse.com/security/cve/CVE-2022-21628/" source="CVE"/>
		<reference ref_id="CVE-2022-39399" ref_url="https://www.suse.com/security/cve/CVE-2022-39399/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012996.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to jdk-11.0.17+8 (October 2022 CPU)
- CVE-2022-39399: Improve HTTP/2 client usage(bsc#1204480)
- CVE-2022-21628: Better HttpServer service (bsc#1204472)
- CVE-2022-21624: Enhance icon presentations (bsc#1204475)
- CVE-2022-21619: Improve NTLM support (bsc#1204473)
- CVE-2022-21626: Key X509 usages (bsc#1204471)
- CVE-2022-21618: Wider MultiByte (bsc#1204468)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1203476">SUSE bug 1203476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204468">SUSE bug 1204468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204471">SUSE bug 1204471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204472">SUSE bug 1204472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204473">SUSE bug 1204473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204475">SUSE bug 1204475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204480">SUSE bug 1204480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204523">SUSE bug 1204523</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21618/">CVE-2022-21618</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21619/">CVE-2022-21619</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21624/">CVE-2022-21624</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21626/">CVE-2022-21626</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21628/">CVE-2022-21628</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-39399/">CVE-2022-39399</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721025" comment="java-11-openjdk-11.0.17.0-150000.3.86.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721026" comment="java-11-openjdk-demo-11.0.17.0-150000.3.86.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721027" comment="java-11-openjdk-devel-11.0.17.0-150000.3.86.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721028" comment="java-11-openjdk-headless-11.0.17.0-150000.3.86.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139585" version="1" class="patch">
	<metadata>
		<title>Security update for dpkg (Low)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1199944" ref_url="https://bugzilla.suse.com/1199944" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1664" ref_url="https://www.suse.com/security/cve/CVE-2022-1664/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012992.html" source="SUSE-SU"/>
		<description>
This update for dpkg fixes the following issues:

- CVE-2022-1664: Fixed a directory traversal vulnerability in Dpkg::Source::Archive (bsc#1199944).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1199944">SUSE bug 1199944</bugzilla>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1664/">CVE-2022-1664</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723150" comment="dpkg-1.19.0.4-150000.4.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723151" comment="dpkg-devel-1.19.0.4-150000.4.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723152" comment="update-alternatives-1.19.0.4-150000.4.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139586" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1205270" ref_url="https://bugzilla.suse.com/1205270" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45403" ref_url="https://www.suse.com/security/cve/CVE-2022-45403/" source="CVE"/>
		<reference ref_id="CVE-2022-45404" ref_url="https://www.suse.com/security/cve/CVE-2022-45404/" source="CVE"/>
		<reference ref_id="CVE-2022-45405" ref_url="https://www.suse.com/security/cve/CVE-2022-45405/" source="CVE"/>
		<reference ref_id="CVE-2022-45406" ref_url="https://www.suse.com/security/cve/CVE-2022-45406/" source="CVE"/>
		<reference ref_id="CVE-2022-45408" ref_url="https://www.suse.com/security/cve/CVE-2022-45408/" source="CVE"/>
		<reference ref_id="CVE-2022-45409" ref_url="https://www.suse.com/security/cve/CVE-2022-45409/" source="CVE"/>
		<reference ref_id="CVE-2022-45410" ref_url="https://www.suse.com/security/cve/CVE-2022-45410/" source="CVE"/>
		<reference ref_id="CVE-2022-45411" ref_url="https://www.suse.com/security/cve/CVE-2022-45411/" source="CVE"/>
		<reference ref_id="CVE-2022-45412" ref_url="https://www.suse.com/security/cve/CVE-2022-45412/" source="CVE"/>
		<reference ref_id="CVE-2022-45416" ref_url="https://www.suse.com/security/cve/CVE-2022-45416/" source="CVE"/>
		<reference ref_id="CVE-2022-45418" ref_url="https://www.suse.com/security/cve/CVE-2022-45418/" source="CVE"/>
		<reference ref_id="CVE-2022-45420" ref_url="https://www.suse.com/security/cve/CVE-2022-45420/" source="CVE"/>
		<reference ref_id="CVE-2022-45421" ref_url="https://www.suse.com/security/cve/CVE-2022-45421/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012997.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 102.5.0 ESR (MFSA 2022-48, bsc#1205270):

- CVE-2022-45403: Service Workers might have learned size of cross-origin media files
- CVE-2022-45404: Fullscreen notification bypass
- CVE-2022-45405: Use-after-free in InputStream implementation
- CVE-2022-45406: Use-after-free of a JavaScript Realm
- CVE-2022-45408: Fullscreen notification bypass via windowName
- CVE-2022-45409: Use-after-free in Garbage Collection
- CVE-2022-45410: ServiceWorker-intercepted requests bypassed SameSite cookie policy
- CVE-2022-45411: Cross-Site Tracing was possible via non-standard override headers
- CVE-2022-45412: Symlinks may resolve to partially uninitialized buffers
- CVE-2022-45416: Keystroke Side-Channel Leakage
- CVE-2022-45418: Custom mouse cursor could have been drawn over browser UI
- CVE-2022-45420: Iframe contents could be rendered outside the iframe
- CVE-2022-45421: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205270">SUSE bug 1205270</bugzilla>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-45403/">CVE-2022-45403</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45404/">CVE-2022-45404</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45405/">CVE-2022-45405</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45406/">CVE-2022-45406</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45408/">CVE-2022-45408</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45409/">CVE-2022-45409</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45410/">CVE-2022-45410</cve>
	<cve impact="critical" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-45411/">CVE-2022-45411</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45412/">CVE-2022-45412</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-45416/">CVE-2022-45416</cve>
	<cve impact="critical" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-45418/">CVE-2022-45418</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45420/">CVE-2022-45420</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45421/">CVE-2022-45421</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724967" comment="MozillaFirefox-102.5.0-150000.150.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724968" comment="MozillaFirefox-devel-102.5.0-150000.150.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724969" comment="MozillaFirefox-translations-common-102.5.0-150000.150.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724970" comment="MozillaFirefox-translations-other-102.5.0-150000.150.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139587" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1205178" ref_url="https://bugzilla.suse.com/1205178" source="BUGZILLA"/>
		<reference ref_id="1205182" ref_url="https://bugzilla.suse.com/1205182" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2601" ref_url="https://www.suse.com/security/cve/CVE-2022-2601/" source="CVE"/>
		<reference ref_id="CVE-2022-3775" ref_url="https://www.suse.com/security/cve/CVE-2022-3775/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013044.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

Security Fixes:
    
- CVE-2022-2601: Fixed buffer overflow in grub_font_construct_glyph (bsc#1205178).
- CVE-2022-3775: Fixed integer underflow in blit_comb() (bsc#1205182).
    
Other:

- Bump upstream SBAT generation to 3
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205178">SUSE bug 1205178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205182">SUSE bug 1205182</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2601/">CVE-2022-2601</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3775/">CVE-2022-3775</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726257" comment="grub2-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726258" comment="grub2-arm64-efi-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726259" comment="grub2-i386-pc-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726260" comment="grub2-snapper-plugin-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726261" comment="grub2-systemd-sleep-plugin-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726262" comment="grub2-x86_64-efi-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726263" comment="grub2-x86_64-xen-2.02-150100.123.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139588" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1142579" ref_url="https://bugzilla.suse.com/1142579" source="BUGZILLA"/>
		<reference ref_id="1185597" ref_url="https://bugzilla.suse.com/1185597" source="BUGZILLA"/>
		<reference ref_id="1185712" ref_url="https://bugzilla.suse.com/1185712" source="BUGZILLA"/>
		<reference ref_id="1188374" ref_url="https://bugzilla.suse.com/1188374" source="BUGZILLA"/>
		<reference ref_id="1191473" ref_url="https://bugzilla.suse.com/1191473" source="BUGZILLA"/>
		<reference ref_id="1193929" ref_url="https://bugzilla.suse.com/1193929" source="BUGZILLA"/>
		<reference ref_id="1194783" ref_url="https://bugzilla.suse.com/1194783" source="BUGZILLA"/>
		<reference ref_id="1197592" ref_url="https://bugzilla.suse.com/1197592" source="BUGZILLA"/>
		<reference ref_id="1198237" ref_url="https://bugzilla.suse.com/1198237" source="BUGZILLA"/>
		<reference ref_id="1202816" ref_url="https://bugzilla.suse.com/1202816" source="BUGZILLA"/>
		<reference ref_id="1202966" ref_url="https://bugzilla.suse.com/1202966" source="BUGZILLA"/>
		<reference ref_id="1202967" ref_url="https://bugzilla.suse.com/1202967" source="BUGZILLA"/>
		<reference ref_id="1202969" ref_url="https://bugzilla.suse.com/1202969" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1010204" ref_url="https://www.suse.com/security/cve/CVE-2019-1010204/" source="CVE"/>
		<reference ref_id="CVE-2021-3530" ref_url="https://www.suse.com/security/cve/CVE-2021-3530/" source="CVE"/>
		<reference ref_id="CVE-2021-3648" ref_url="https://www.suse.com/security/cve/CVE-2021-3648/" source="CVE"/>
		<reference ref_id="CVE-2021-3826" ref_url="https://www.suse.com/security/cve/CVE-2021-3826/" source="CVE"/>
		<reference ref_id="CVE-2021-45078" ref_url="https://www.suse.com/security/cve/CVE-2021-45078/" source="CVE"/>
		<reference ref_id="CVE-2021-46195" ref_url="https://www.suse.com/security/cve/CVE-2021-46195/" source="CVE"/>
		<reference ref_id="CVE-2022-27943" ref_url="https://www.suse.com/security/cve/CVE-2022-27943/" source="CVE"/>
		<reference ref_id="CVE-2022-38126" ref_url="https://www.suse.com/security/cve/CVE-2022-38126/" source="CVE"/>
		<reference ref_id="CVE-2022-38127" ref_url="https://www.suse.com/security/cve/CVE-2022-38127/" source="CVE"/>
		<reference ref_id="CVE-2022-38533" ref_url="https://www.suse.com/security/cve/CVE-2022-38533/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013047.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

The following security bugs were fixed:

- CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579).
- CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-demangle.c (bsc#1185597).
- CVE-2021-3648: Fixed infinite loop while demangling rust symbols (bsc#1188374).
- CVE-2021-3826: Fixed heap/stack buffer overflow in the dlang_lname function in d-demangle.c (bsc#1202969).
- CVE-2021-45078: Fixed out-of-bounds write in stab_xcoff_builtin_type() in stabs.c (bsc#1193929).
- CVE-2021-46195: Fixed uncontrolled recursion in libiberty/rust-demangle.c (bsc#1194783).
- CVE-2022-27943: Fixed stack exhaustion in demangle_const in (bsc#1197592).
- CVE-2022-38126: Fixed assertion fail in the display_debug_names() function in binutils/dwarf.c (bsc#1202966).
- CVE-2022-38127: Fixed NULL pointer dereference in the read_and_display_attr_value() function in binutils/dwarf.c (bsc#1202967).
- CVE-2022-38533: Fixed heap out-of-bounds read in bfd_getl32 (bsc#1202816).


The following non-security bugs were fixed:
  
- SLE toolchain update of binutils, update to 2.39 from 2.37.
- Update to 2.39:  
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification. 
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
    --weaken-symbols options now works with unique symbols as well.

- Update to 2.38:
  * elfedit: Add --output-abiversion option to update ABIVERSION.
  * Add support for the LoongArch instruction set.
  * Tools which display symbols or strings (readelf, strings, nm, objdump)
    have a new command line option which controls how unicode characters are
    handled.  By default they are treated as normal for the tool.  Using
    --unicode=locale will display them according to the current locale.
    Using --unicode=hex will display them as hex byte values, whilst
    --unicode=escape will display them as escape sequences.  In addition
    using --unicode=highlight will display them as unicode escape sequences
    highlighted in red (if supported by the output device).
  * readelf -r dumps RELR relative relocations now.
  * Support for efi-app-aarch64, efi-rtdrv-aarch64 and efi-bsdrv-aarch64 has been
    added to objcopy in order to enable UEFI development using binutils.
  * ar: Add --thin for creating thin archives. -T is a deprecated alias without
    diagnostics. In many ar implementations -T has a different meaning, as
    specified by X/Open System Interface.
  * Add support for AArch64 system registers that were missing in previous
    releases.
  * Add support for the LoongArch instruction set.
  * Add a command-line option, -muse-unaligned-vector-move, for x86 target
    to encode aligned vector move as unaligned vector move.
  * Add support for Cortex-R52+ for Arm.
  * Add support for Cortex-A510, Cortex-A710, Cortex-X2 for AArch64.
  * Add support for Cortex-A710 for Arm.
  * Add support for Scalable Matrix Extension (SME) for AArch64.
  * The --multibyte-handling=[allow|warn|warn-sym-only] option tells the
    assembler what to when it encoutners multibyte characters in the input.  The
    default is to allow them.  Setting the option to 'warn' will generate a
    warning message whenever any multibyte character is encountered.  Using the
    option to 'warn-sym-only' will make the assembler generate a warning whenever a
    symbol is defined containing multibyte characters.  (References to undefined
    symbols will not generate warnings).
  * Outputs of .ds.x directive and .tfloat directive with hex input from
    x86 assembler have been reduced from 12 bytes to 10 bytes to match the
    output of .tfloat directive.
  * Add support for 'armv8.8-a', 'armv9-a', 'armv9.1-a', 'armv9.2-a' and
    'armv9.3-a' for -march in AArch64 GAS.
  * Add support for 'armv8.7-a', 'armv8.8-a', 'armv9-a', 'armv9.1-a',
    'armv9.2-a' and 'armv9.3-a' for -march in Arm GAS.
  * Add support for Intel AVX512_FP16 instructions.
  * Add -z pack-relative-relocs/-z no pack-relative-relocs to x86 ELF
    linker to pack relative relocations in the DT_RELR section.
  * Add support for the LoongArch architecture.
  * Add -z indirect-extern-access/-z noindirect-extern-access to x86 ELF
    linker to control canonical function pointers and copy relocation.
  * Add --max-cache-size=SIZE to set the the maximum cache size to SIZE
    bytes.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.
- Include recognition of 'z16' name for 'arch14' on s390. (bsc#1198237).
- Add back fix for bsc#1191473, which got lost in the update to 2.38.
- Install symlinks for all target specific tools on arm-eabi-none (bsc#1185712).
- Enable PRU architecture for AM335x CPU (Beagle Bone Black board)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1142579">SUSE bug 1142579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185597">SUSE bug 1185597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185712">SUSE bug 1185712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188374">SUSE bug 1188374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191473">SUSE bug 1191473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193929">SUSE bug 1193929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194783">SUSE bug 1194783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197592">SUSE bug 1197592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198237">SUSE bug 1198237</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202816">SUSE bug 1202816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202966">SUSE bug 1202966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202967">SUSE bug 1202967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202969">SUSE bug 1202969</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1010204/">CVE-2019-1010204</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3530/">CVE-2021-3530</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3648/">CVE-2021-3648</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-3826/">CVE-2021-3826</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-45078/">CVE-2021-45078</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46195/">CVE-2021-46195</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27943/">CVE-2022-27943</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38126/">CVE-2022-38126</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38127/">CVE-2022-38127</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-38533/">CVE-2022-38533</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723165" comment="binutils-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723166" comment="binutils-devel-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723073" comment="binutils-devel-32bit-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723167" comment="libctf-nobfd0-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723168" comment="libctf0-2.39-150100.7.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139589" version="1" class="patch">
	<metadata>
		<title>Security update for pixman (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1205033" ref_url="https://bugzilla.suse.com/1205033" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-44638" ref_url="https://www.suse.com/security/cve/CVE-2022-44638/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013043.html" source="SUSE-SU"/>
		<description>
This update for pixman fixes the following issues:

- CVE-2022-44638: Fixed an integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (bsc#1205033).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205033">SUSE bug 1205033</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-44638/">CVE-2022-44638</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724965" comment="libpixman-1-0-0.34.0-150000.7.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724872" comment="libpixman-1-0-32bit-0.34.0-150000.7.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724966" comment="libpixman-1-0-devel-0.34.0-150000.7.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139590" version="1" class="patch">
	<metadata>
		<title>Security update for krb5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1205126" ref_url="https://bugzilla.suse.com/1205126" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42898" ref_url="https://www.suse.com/security/cve/CVE-2022-42898/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013049.html" source="SUSE-SU"/>
		<description>
This update for krb5 fixes the following issues:

- CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205126">SUSE bug 1205126</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-42898/">CVE-2022-42898</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726264" comment="krb5-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726265" comment="krb5-32bit-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726266" comment="krb5-client-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726267" comment="krb5-devel-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726268" comment="krb5-plugin-kdb-ldap-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726269" comment="krb5-plugin-preauth-otp-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726270" comment="krb5-plugin-preauth-pkinit-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726271" comment="krb5-server-1.16.3-150100.3.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139591" version="1" class="patch">
	<metadata>
		<title>Security update for ganglia-web (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1160761" ref_url="https://bugzilla.suse.com/1160761" source="BUGZILLA"/>
		<reference ref_id="1179835" ref_url="https://bugzilla.suse.com/1179835" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20378" ref_url="https://www.suse.com/security/cve/CVE-2019-20378/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013124.html" source="SUSE-SU"/>
		<description>
This update for ganglia-web fixes the following issues:

- updated to 3.7.5 which fixes (bsc#1179835)
- CVE-2019-20378: Fixed a possible XSS via ce and cs parameters in header.php (bsc#1160761).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160761">SUSE bug 1160761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179835">SUSE bug 1179835</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-20378/">CVE-2019-20378</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009722279" comment="ganglia-web-3.7.5-150000.4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139592" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1203868" ref_url="https://bugzilla.suse.com/1203868" source="BUGZILLA"/>
		<reference ref_id="1204918" ref_url="https://bugzilla.suse.com/1204918" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43980" ref_url="https://www.suse.com/security/cve/CVE-2021-43980/" source="CVE"/>
		<reference ref_id="CVE-2022-42252" ref_url="https://www.suse.com/security/cve/CVE-2022-42252/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4257-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013132.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2021-43980: Fixed information disclosure due to concurrency issues in Http11Processor (bsc#1203868).
- CVE-2022-42252: Fixed a request smuggling (bsc#1204918).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203868">SUSE bug 1203868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204918">SUSE bug 1204918</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-43980/">CVE-2021-43980</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42252/">CVE-2022-42252</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726519" comment="tomcat-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726520" comment="tomcat-admin-webapps-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726521" comment="tomcat-el-3_0-api-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726522" comment="tomcat-jsp-2_3-api-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726523" comment="tomcat-lib-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726524" comment="tomcat-servlet-4_0-api-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726525" comment="tomcat-webapps-9.0.36-150100.4.81.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139593" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1205244" ref_url="https://bugzilla.suse.com/1205244" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45061" ref_url="https://www.suse.com/security/cve/CVE-2022-45061/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4258-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013134.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2022-45061: Fixed possible DoS when IDNA decoding extremely long domain names (bsc#1205244).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205244">SUSE bug 1205244</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45061/">CVE-2022-45061</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724956" comment="libpython3_6m1_0-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724957" comment="python3-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724958" comment="python3-base-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724959" comment="python3-curses-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724960" comment="python3-dbm-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724961" comment="python3-devel-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724962" comment="python3-idle-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724971" comment="python3-testsuite-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724963" comment="python3-tk-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724964" comment="python3-tools-3.6.15-150000.3.119.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139594" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1204641" ref_url="https://bugzilla.suse.com/1204641" source="BUGZILLA"/>
		<reference ref_id="1204643" ref_url="https://bugzilla.suse.com/1204643" source="BUGZILLA"/>
		<reference ref_id="1204644" ref_url="https://bugzilla.suse.com/1204644" source="BUGZILLA"/>
		<reference ref_id="1204645" ref_url="https://bugzilla.suse.com/1204645" source="BUGZILLA"/>
		<reference ref_id="1205392" ref_url="https://bugzilla.suse.com/1205392" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3597" ref_url="https://www.suse.com/security/cve/CVE-2022-3597/" source="CVE"/>
		<reference ref_id="CVE-2022-3599" ref_url="https://www.suse.com/security/cve/CVE-2022-3599/" source="CVE"/>
		<reference ref_id="CVE-2022-3626" ref_url="https://www.suse.com/security/cve/CVE-2022-3626/" source="CVE"/>
		<reference ref_id="CVE-2022-3627" ref_url="https://www.suse.com/security/cve/CVE-2022-3627/" source="CVE"/>
		<reference ref_id="CVE-2022-3970" ref_url="https://www.suse.com/security/cve/CVE-2022-3970/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013135.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-3597: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204641).
- CVE-2022-3599: Fixed out-of-bounds read in writeSingleSection in tools/tiffcrop.c (bnc#1204643).
- CVE-2022-3626: Fixed out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (bnc#1204644)
- CVE-2022-3627: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204645).
- CVE-2022-3970: Fixed unsigned integer overflow in TIFFReadRGBATileExt() (bnc#1205392).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204641">SUSE bug 1204641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204643">SUSE bug 1204643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204644">SUSE bug 1204644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204645">SUSE bug 1204645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205392">SUSE bug 1205392</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3597/">CVE-2022-3597</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3599/">CVE-2022-3599</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3626/">CVE-2022-3626</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3627/">CVE-2022-3627</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3970/">CVE-2022-3970</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725555" comment="libtiff-devel-4.0.9-150000.45.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725556" comment="libtiff5-4.0.9-150000.45.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725458" comment="libtiff5-32bit-4.0.9-150000.45.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139595" version="1" class="patch">
	<metadata>
		<title>Security update for busybox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1099260" ref_url="https://bugzilla.suse.com/1099260" source="BUGZILLA"/>
		<reference ref_id="914660" ref_url="https://bugzilla.suse.com/914660" source="BUGZILLA"/>
		<reference ref_id="CVE-2014-9645" ref_url="https://www.suse.com/security/cve/CVE-2014-9645/" source="CVE"/>
		<reference ref_id="CVE-2018-1000517" ref_url="https://www.suse.com/security/cve/CVE-2018-1000517/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013133.html" source="SUSE-SU"/>
		<description>
This update for busybox fixes the following issues:

- CVE-2014-9645: Fixed loading of unwanted module with / in module names (bsc#914660).

- Enable switch_root
  With this change virtme --force-initramfs works as expected.

- Enable udhcpc

Update to 1.35.0:
    
- awk: fix printf %%, fix read beyond end of buffer
- Adjust busybox.config for new features in find, date and cpio 
- chrt: silence analyzer warning
- libarchive: remove duplicate forward declaration
- mount: 'mount -o rw ....' should not fall back to RO mount
- ps: fix -o pid=PID,args interpreting entire 'PID,args' as header
- tar: prevent malicious archives with long name sizes causing OOM
- udhcpc6: fix udhcp_find_option to actually find DHCP6 options
- xxd: fix -p -r
- support for new optoins added to basename, cpio, date, find, 
  mktemp, wget and others

- Adjust busybox.config for new features in find, date and cpio 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1099260">SUSE bug 1099260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914660">SUSE bug 914660</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-9645/">CVE-2014-9645</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000517/">CVE-2018-1000517</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725910" comment="busybox-1.35.0-150000.4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725912" comment="busybox-static-1.35.0-150000.4.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139596" version="1" class="patch">
	<metadata>
		<title>Security update for nginx (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1187685" ref_url="https://bugzilla.suse.com/1187685" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3618" ref_url="https://www.suse.com/security/cve/CVE-2021-3618/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013137.html" source="SUSE-SU"/>
		<description>
This update for nginx fixes the following issues:

- CVE-2021-3618: Fixed the ALPACA attack limiting the number of errors after which the connection is closed (bsc#1187685).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187685">SUSE bug 1187685</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3618/">CVE-2021-3618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725915" comment="nginx-1.16.1-150100.6.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725916" comment="nginx-source-1.16.1-150100.6.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139597" version="1" class="patch">
	<metadata>
		<title>Security update for exiv2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1050257" ref_url="https://bugzilla.suse.com/1050257" source="BUGZILLA"/>
		<reference ref_id="1095070" ref_url="https://bugzilla.suse.com/1095070" source="BUGZILLA"/>
		<reference ref_id="1110282" ref_url="https://bugzilla.suse.com/1110282" source="BUGZILLA"/>
		<reference ref_id="1119559" ref_url="https://bugzilla.suse.com/1119559" source="BUGZILLA"/>
		<reference ref_id="1119560" ref_url="https://bugzilla.suse.com/1119560" source="BUGZILLA"/>
		<reference ref_id="1119562" ref_url="https://bugzilla.suse.com/1119562" source="BUGZILLA"/>
		<reference ref_id="1142677" ref_url="https://bugzilla.suse.com/1142677" source="BUGZILLA"/>
		<reference ref_id="1142678" ref_url="https://bugzilla.suse.com/1142678" source="BUGZILLA"/>
		<reference ref_id="1153577" ref_url="https://bugzilla.suse.com/1153577" source="BUGZILLA"/>
		<reference ref_id="1186231" ref_url="https://bugzilla.suse.com/1186231" source="BUGZILLA"/>
		<reference ref_id="1189337" ref_url="https://bugzilla.suse.com/1189337" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-11591" ref_url="https://www.suse.com/security/cve/CVE-2017-11591/" source="CVE"/>
		<reference ref_id="CVE-2018-11531" ref_url="https://www.suse.com/security/cve/CVE-2018-11531/" source="CVE"/>
		<reference ref_id="CVE-2018-17581" ref_url="https://www.suse.com/security/cve/CVE-2018-17581/" source="CVE"/>
		<reference ref_id="CVE-2018-20097" ref_url="https://www.suse.com/security/cve/CVE-2018-20097/" source="CVE"/>
		<reference ref_id="CVE-2018-20098" ref_url="https://www.suse.com/security/cve/CVE-2018-20098/" source="CVE"/>
		<reference ref_id="CVE-2018-20099" ref_url="https://www.suse.com/security/cve/CVE-2018-20099/" source="CVE"/>
		<reference ref_id="CVE-2019-13109" ref_url="https://www.suse.com/security/cve/CVE-2019-13109/" source="CVE"/>
		<reference ref_id="CVE-2019-13110" ref_url="https://www.suse.com/security/cve/CVE-2019-13110/" source="CVE"/>
		<reference ref_id="CVE-2019-17402" ref_url="https://www.suse.com/security/cve/CVE-2019-17402/" source="CVE"/>
		<reference ref_id="CVE-2021-29473" ref_url="https://www.suse.com/security/cve/CVE-2021-29473/" source="CVE"/>
		<reference ref_id="CVE-2021-32815" ref_url="https://www.suse.com/security/cve/CVE-2021-32815/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013143.html" source="SUSE-SU"/>
		<description>
This update for exiv2 fixes the following issues:

- CVE-2019-13110: Fixed an integer-overflow and out-of-bounds read in CiffDirectory:readDirectory leads to denail of service (bsc#1142678).
- CVE-2019-13109: Fixed a denial of service in PngImage:readMetadata (bsc#1142677).
- CVE-2018-17581: Fixed an excessive stack consumption CiffDirectory:readDirectory() at crwimage_int.cpp (bsc#1110282).
- CVE-2017-11591: Fixed a floating point exception in Exiv2::ValueType (bsc#1050257).
- CVE-2019-17402: Fixed an improper validation of the total size to the offset and size leads to a crash in Exiv2::getULong in types.cpp (bsc#1153577).
- CVE-2021-32815: Fixed a deny-of-service due to assertion failure in crwimage_int.cpp (bsc#1189337).
- CVE-2018-20097: Fixed SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroupsu (bsc#1119562).
- CVE-2021-29473: Fixed out-of-bounds read in Exiv2::Jp2Image:doWriteMetadata (bsc#1186231).
- CVE-2018-20098: Fixed a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header (bsc#1119560).
- CVE-2018-11531: Fixed a heap-based buffer overflow in getData in preview.cpp (bsc#1095070).
- CVE-2018-20099: exiv2: infinite loop in Exiv2::Jp2Image::encodeJp2Header (bsc#1119559).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1050257">SUSE bug 1050257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095070">SUSE bug 1095070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110282">SUSE bug 1110282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119559">SUSE bug 1119559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119560">SUSE bug 1119560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119562">SUSE bug 1119562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142677">SUSE bug 1142677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142678">SUSE bug 1142678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153577">SUSE bug 1153577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186231">SUSE bug 1186231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189337">SUSE bug 1189337</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11591/">CVE-2017-11591</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11531/">CVE-2018-11531</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17581/">CVE-2018-17581</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20097/">CVE-2018-20097</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20098/">CVE-2018-20098</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20099/">CVE-2018-20099</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13109/">CVE-2019-13109</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13110/">CVE-2019-13110</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17402/">CVE-2019-17402</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29473/">CVE-2021-29473</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-32815/">CVE-2021-32815</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725386" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725387" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139598" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1192478" ref_url="https://bugzilla.suse.com/1192478" source="BUGZILLA"/>
		<reference ref_id="1202962" ref_url="https://bugzilla.suse.com/1202962" source="BUGZILLA"/>
		<reference ref_id="1203110" ref_url="https://bugzilla.suse.com/1203110" source="BUGZILLA"/>
		<reference ref_id="1203152" ref_url="https://bugzilla.suse.com/1203152" source="BUGZILLA"/>
		<reference ref_id="1203155" ref_url="https://bugzilla.suse.com/1203155" source="BUGZILLA"/>
		<reference ref_id="1203194" ref_url="https://bugzilla.suse.com/1203194" source="BUGZILLA"/>
		<reference ref_id="1203272" ref_url="https://bugzilla.suse.com/1203272" source="BUGZILLA"/>
		<reference ref_id="1203508" ref_url="https://bugzilla.suse.com/1203508" source="BUGZILLA"/>
		<reference ref_id="1203509" ref_url="https://bugzilla.suse.com/1203509" source="BUGZILLA"/>
		<reference ref_id="1203796" ref_url="https://bugzilla.suse.com/1203796" source="BUGZILLA"/>
		<reference ref_id="1203797" ref_url="https://bugzilla.suse.com/1203797" source="BUGZILLA"/>
		<reference ref_id="1203799" ref_url="https://bugzilla.suse.com/1203799" source="BUGZILLA"/>
		<reference ref_id="1203820" ref_url="https://bugzilla.suse.com/1203820" source="BUGZILLA"/>
		<reference ref_id="1203924" ref_url="https://bugzilla.suse.com/1203924" source="BUGZILLA"/>
		<reference ref_id="1204779" ref_url="https://bugzilla.suse.com/1204779" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3928" ref_url="https://www.suse.com/security/cve/CVE-2021-3928/" source="CVE"/>
		<reference ref_id="CVE-2022-2980" ref_url="https://www.suse.com/security/cve/CVE-2022-2980/" source="CVE"/>
		<reference ref_id="CVE-2022-2982" ref_url="https://www.suse.com/security/cve/CVE-2022-2982/" source="CVE"/>
		<reference ref_id="CVE-2022-3037" ref_url="https://www.suse.com/security/cve/CVE-2022-3037/" source="CVE"/>
		<reference ref_id="CVE-2022-3099" ref_url="https://www.suse.com/security/cve/CVE-2022-3099/" source="CVE"/>
		<reference ref_id="CVE-2022-3134" ref_url="https://www.suse.com/security/cve/CVE-2022-3134/" source="CVE"/>
		<reference ref_id="CVE-2022-3153" ref_url="https://www.suse.com/security/cve/CVE-2022-3153/" source="CVE"/>
		<reference ref_id="CVE-2022-3234" ref_url="https://www.suse.com/security/cve/CVE-2022-3234/" source="CVE"/>
		<reference ref_id="CVE-2022-3235" ref_url="https://www.suse.com/security/cve/CVE-2022-3235/" source="CVE"/>
		<reference ref_id="CVE-2022-3278" ref_url="https://www.suse.com/security/cve/CVE-2022-3278/" source="CVE"/>
		<reference ref_id="CVE-2022-3296" ref_url="https://www.suse.com/security/cve/CVE-2022-3296/" source="CVE"/>
		<reference ref_id="CVE-2022-3297" ref_url="https://www.suse.com/security/cve/CVE-2022-3297/" source="CVE"/>
		<reference ref_id="CVE-2022-3324" ref_url="https://www.suse.com/security/cve/CVE-2022-3324/" source="CVE"/>
		<reference ref_id="CVE-2022-3352" ref_url="https://www.suse.com/security/cve/CVE-2022-3352/" source="CVE"/>
		<reference ref_id="CVE-2022-3705" ref_url="https://www.suse.com/security/cve/CVE-2022-3705/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013152.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

Updated to version 9.0 with patch level 0814:

- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).
- CVE-2022-3234: Fixed heap-based buffer overflow (bsc#1203508).
- CVE-2022-3235: Fixed use-after-free (bsc#1203509).
- CVE-2022-3324: Fixed stack-based buffer overflow (bsc#1203820).
- CVE-2022-3705: Fixed use-after-free in function qf_update_buffer of the file quickfix.c (bsc#1204779).
- CVE-2022-2982: Fixed use-after-free in qf_fill_buffer() (bsc#1203152).
- CVE-2022-3296: Fixed stack out of bounds read in ex_finally() in ex_eval.c (bsc#1203796).
- CVE-2022-3297: Fixed use-after-free in process_next_cpt_value() at insexpand.c (bsc#1203797).
- CVE-2022-3099: Fixed use-after-free in ex_docmd.c (bsc#1203110).
- CVE-2022-3134: Fixed use-after-free in do_tag() (bsc#1203194).
- CVE-2022-3153: Fixed NULL pointer dereference (bsc#1203272).
- CVE-2022-3278: Fixed NULL pointer dereference in eval_next_non_blank() in eval.c (bsc#1203799).
- CVE-2022-3352: Fixed use-after-free (bsc#1203924).
- CVE-2022-2980: Fixed NULL pointer dereference in do_mouse() (bsc#1203155).
- CVE-2022-3037: Fixed use-after-free (bsc#1202962).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192478">SUSE bug 1192478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202962">SUSE bug 1202962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203110">SUSE bug 1203110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203152">SUSE bug 1203152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203155">SUSE bug 1203155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203194">SUSE bug 1203194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203272">SUSE bug 1203272</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203508">SUSE bug 1203508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203509">SUSE bug 1203509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203796">SUSE bug 1203796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203797">SUSE bug 1203797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203799">SUSE bug 1203799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203820">SUSE bug 1203820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203924">SUSE bug 1203924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204779">SUSE bug 1204779</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3928/">CVE-2021-3928</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2980/">CVE-2022-2980</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2982/">CVE-2022-2982</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3037/">CVE-2022-3037</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-3099/">CVE-2022-3099</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3134/">CVE-2022-3134</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3153/">CVE-2022-3153</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3234/">CVE-2022-3234</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3235/">CVE-2022-3235</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3278/">CVE-2022-3278</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-3296/">CVE-2022-3296</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3297/">CVE-2022-3297</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3324/">CVE-2022-3324</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-3352/">CVE-2022-3352</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-3705/">CVE-2022-3705</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726824" comment="gvim-9.0.0814-150000.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726825" comment="vim-9.0.0814-150000.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726769" comment="vim-data-9.0.0814-150000.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726770" comment="vim-data-common-9.0.0814-150000.5.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139599" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1205120" ref_url="https://bugzilla.suse.com/1205120" source="BUGZILLA"/>
		<reference ref_id="1205121" ref_url="https://bugzilla.suse.com/1205121" source="BUGZILLA"/>
		<reference ref_id="1205122" ref_url="https://bugzilla.suse.com/1205122" source="BUGZILLA"/>
		<reference ref_id="1205123" ref_url="https://bugzilla.suse.com/1205123" source="BUGZILLA"/>
		<reference ref_id="1205124" ref_url="https://bugzilla.suse.com/1205124" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32888" ref_url="https://www.suse.com/security/cve/CVE-2022-32888/" source="CVE"/>
		<reference ref_id="CVE-2022-32923" ref_url="https://www.suse.com/security/cve/CVE-2022-32923/" source="CVE"/>
		<reference ref_id="CVE-2022-42799" ref_url="https://www.suse.com/security/cve/CVE-2022-42799/" source="CVE"/>
		<reference ref_id="CVE-2022-42823" ref_url="https://www.suse.com/security/cve/CVE-2022-42823/" source="CVE"/>
		<reference ref_id="CVE-2022-42824" ref_url="https://www.suse.com/security/cve/CVE-2022-42824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013159.html" source="SUSE-SU"/>
		<description>

Security fixes:

- CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205121).
- CVE-2022-32923: Fixed possible information leak via maliciously crafted web content (bsc#1205122).
- CVE-2022-42799: Fixed user interface spoofing when visiting a malicious website (bsc#1205123).
- CVE-2022-42823: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205120).
- CVE-2022-42824: Fixed possible sensitive user information leak via maliciously crafted web content (bsc#1205124).

Update to version 2.38.2:

  - Fix scrolling issues in some sites having fixed background.
  - Fix prolonged buffering during progressive live playback.
  - Fix the build with accessibility disabled.
  - Fix several crashes and rendering issues.
    
Update to version 2.38.1:

  - Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  - Use a single xdg-dbus-proxy process when sandbox is enabled.
  - Fix high resolution video playback due to unimplemented
    changeType operation.
  - Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  - Fix player stucking in buffering (paused) state for progressive
    streaming.
  - Do not try to preconnect on link click when link preconnect
    setting is disabled.
  - Fix close status code returned when the client closes a
    WebSocket in some cases.
  - Fix media player duration calculation.
  - Fix several crashes and rendering issues.

Update to version 2.38.0:

  - New media controls UI style.
  - Add new API to set WebView's Content-Security-Policy for web
    extensions support.
  - Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  - MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  - Add support for PDF documents using PDF.js.
  		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205120">SUSE bug 1205120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205121">SUSE bug 1205121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205122">SUSE bug 1205122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205123">SUSE bug 1205123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205124">SUSE bug 1205124</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32888/">CVE-2022-32888</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32923/">CVE-2022-32923</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-42799/">CVE-2022-42799</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42823/">CVE-2022-42823</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-42824/">CVE-2022-42824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726511" comment="libjavascriptcoregtk-4_0-18-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726512" comment="libwebkit2gtk-4_0-37-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726513" comment="libwebkit2gtk3-lang-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726514" comment="typelib-1_0-JavaScriptCore-4_0-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726515" comment="typelib-1_0-WebKit2-4_0-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726516" comment="typelib-1_0-WebKit2WebExtension-4_0-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726517" comment="webkit2gtk-4_0-injected-bundles-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726518" comment="webkit2gtk3-devel-2.38.2-150000.3.122.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139600" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1205119" ref_url="https://bugzilla.suse.com/1205119" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-43548" ref_url="https://www.suse.com/security/cve/CVE-2022-43548/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013181.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- CVE-2022-43548: Fixed DNS rebinding in --inspect via invalid octal IP address (bsc#1205119).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-01"/>
	<updated date="2022-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205119">SUSE bug 1205119</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-43548/">CVE-2022-43548</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724675" comment="nodejs10-10.24.1-150000.1.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724676" comment="nodejs10-devel-10.24.1-150000.1.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724645" comment="nodejs10-docs-10.24.1-150000.1.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724677" comment="npm10-10.24.1-150000.1.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139601" version="1" class="patch">
	<metadata>
		<title>Security update for emacs (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1205822" ref_url="https://bugzilla.suse.com/1205822" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45939" ref_url="https://www.suse.com/security/cve/CVE-2022-45939/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013190.html" source="SUSE-SU"/>
		<description>
This update for emacs fixes the following issues:

- CVE-2022-45939: Fixed shell command injection via source code files when using ctags (bsc#1205822).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-02"/>
	<updated date="2022-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205822">SUSE bug 1205822</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45939/">CVE-2022-45939</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009727423" comment="emacs-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727405" comment="emacs-el-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727406" comment="emacs-info-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727424" comment="emacs-nox-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727425" comment="emacs-x11-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727426" comment="etags-25.3-150000.3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139602" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1204642" ref_url="https://bugzilla.suse.com/1204642" source="BUGZILLA"/>
		<reference ref_id="1205422" ref_url="https://bugzilla.suse.com/1205422" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3570" ref_url="https://www.suse.com/security/cve/CVE-2022-3570/" source="CVE"/>
		<reference ref_id="CVE-2022-3598" ref_url="https://www.suse.com/security/cve/CVE-2022-3598/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013217.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-3570: Fixed heap buffer overflows in tiffcrop.c (bsc#1205422).
- CVE-2022-3598: Fixed out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c [bsc#1204642]
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204642">SUSE bug 1204642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205422">SUSE bug 1205422</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3570/">CVE-2022-3570</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3598/">CVE-2022-3598</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009727259" comment="libtiff-devel-4.0.9-150000.45.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727260" comment="libtiff5-4.0.9-150000.45.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727227" comment="libtiff5-32bit-4.0.9-150000.45.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139603" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1204822" ref_url="https://bugzilla.suse.com/1204822" source="BUGZILLA"/>
		<reference ref_id="1206189" ref_url="https://bugzilla.suse.com/1206189" source="BUGZILLA"/>
		<reference ref_id="1206190" ref_url="https://bugzilla.suse.com/1206190" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3725" ref_url="https://www.suse.com/security/cve/CVE-2022-3725/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013223.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

Update to version 3.6.10:

- CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Multiple dissector infinite loops (bsc#1206189).
- Kafka dissector memory exhaustion (bsc#1206190).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204822">SUSE bug 1204822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206189">SUSE bug 1206189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206190">SUSE bug 1206190</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3725/">CVE-2022-3725</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009727980" comment="libwireshark15-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727981" comment="libwiretap12-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727982" comment="libwsutil13-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727983" comment="wireshark-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727984" comment="wireshark-devel-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727985" comment="wireshark-ui-qt-3.6.10-150000.3.78.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139604" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1206242" ref_url="https://bugzilla.suse.com/1206242" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-46872" ref_url="https://www.suse.com/security/cve/CVE-2022-46872/" source="CVE"/>
		<reference ref_id="CVE-2022-46874" ref_url="https://www.suse.com/security/cve/CVE-2022-46874/" source="CVE"/>
		<reference ref_id="CVE-2022-46875" ref_url="https://www.suse.com/security/cve/CVE-2022-46875/" source="CVE"/>
		<reference ref_id="CVE-2022-46878" ref_url="https://www.suse.com/security/cve/CVE-2022-46878/" source="CVE"/>
		<reference ref_id="CVE-2022-46880" ref_url="https://www.suse.com/security/cve/CVE-2022-46880/" source="CVE"/>
		<reference ref_id="CVE-2022-46881" ref_url="https://www.suse.com/security/cve/CVE-2022-46881/" source="CVE"/>
		<reference ref_id="CVE-2022-46882" ref_url="https://www.suse.com/security/cve/CVE-2022-46882/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013227.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 102.6.0 ESR (bsc#1206242):

- CVE-2022-46880: Use-after-free in WebGL
- CVE-2022-46872: Arbitrary file read from a compromised content process
- CVE-2022-46881: Memory corruption in WebGL
- CVE-2022-46874: Drag and Dropped Filenames could have been truncated to malicious extensions
- CVE-2022-46875: Download Protections were bypassed by .atloc and .ftploc files on Mac OS
- CVE-2022-46882: Use-after-free in WebGL
- CVE-2022-46878: Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206242">SUSE bug 1206242</bugzilla>
	<cve impact="critical" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-46872/">CVE-2022-46872</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46874/">CVE-2022-46874</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-46875/">CVE-2022-46875</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46878/">CVE-2022-46878</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-46880/">CVE-2022-46880</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46881/">CVE-2022-46881</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46882/">CVE-2022-46882</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728134" comment="MozillaFirefox-102.6.0-150000.150.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728135" comment="MozillaFirefox-devel-102.6.0-150000.150.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728136" comment="MozillaFirefox-translations-common-102.6.0-150000.150.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728137" comment="MozillaFirefox-translations-other-102.6.0-150000.150.68.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139605" version="1" class="patch">
	<metadata>
		<title>Security update for containerd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1197284" ref_url="https://bugzilla.suse.com/1197284" source="BUGZILLA"/>
		<reference ref_id="1206065" ref_url="https://bugzilla.suse.com/1206065" source="BUGZILLA"/>
		<reference ref_id="1206235" ref_url="https://bugzilla.suse.com/1206235" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23471" ref_url="https://www.suse.com/security/cve/CVE-2022-23471/" source="CVE"/>
		<reference ref_id="CVE-2022-27191" ref_url="https://www.suse.com/security/cve/CVE-2022-27191/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013228.html" source="SUSE-SU"/>
		<description>
This update for containerd fixes the following issues:

Update to containerd v1.6.12 including Docker v20.10.21-ce (bsc#1206065). 

Also includes the following fix:

- CVE-2022-23471: host memory exhaustion through Terminal resize goroutine leak (bsc#1206235).
- CVE-2022-27191: crash in a golang.org/x/crypto/ssh server (bsc#1197284).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197284">SUSE bug 1197284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206065">SUSE bug 1206065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206235">SUSE bug 1206235</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23471/">CVE-2022-23471</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27191/">CVE-2022-27191</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728138" comment="containerd-1.6.12-150000.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728139" comment="containerd-ctr-1.6.12-150000.79.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139606" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1205874" ref_url="https://bugzilla.suse.com/1205874" source="BUGZILLA"/>
		<reference ref_id="1205875" ref_url="https://bugzilla.suse.com/1205875" source="BUGZILLA"/>
		<reference ref_id="1205876" ref_url="https://bugzilla.suse.com/1205876" source="BUGZILLA"/>
		<reference ref_id="1205877" ref_url="https://bugzilla.suse.com/1205877" source="BUGZILLA"/>
		<reference ref_id="1205878" ref_url="https://bugzilla.suse.com/1205878" source="BUGZILLA"/>
		<reference ref_id="1205879" ref_url="https://bugzilla.suse.com/1205879" source="BUGZILLA"/>
		<reference ref_id="1206017" ref_url="https://bugzilla.suse.com/1206017" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4283" ref_url="https://www.suse.com/security/cve/CVE-2022-4283/" source="CVE"/>
		<reference ref_id="CVE-2022-46340" ref_url="https://www.suse.com/security/cve/CVE-2022-46340/" source="CVE"/>
		<reference ref_id="CVE-2022-46341" ref_url="https://www.suse.com/security/cve/CVE-2022-46341/" source="CVE"/>
		<reference ref_id="CVE-2022-46342" ref_url="https://www.suse.com/security/cve/CVE-2022-46342/" source="CVE"/>
		<reference ref_id="CVE-2022-46343" ref_url="https://www.suse.com/security/cve/CVE-2022-46343/" source="CVE"/>
		<reference ref_id="CVE-2022-46344" ref_url="https://www.suse.com/security/cve/CVE-2022-46344/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013246.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2022-46340: Server XTestSwapFakeInput stack overflow (bsc#1205874)
- CVE-2022-46341: Server XIPassiveUngrabDevice out-of-bounds access (bsc#1205877)
- CVE-2022-46342: Server XvdiSelectVideoNotify use-after-free (bsc#1205879)
- CVE-2022-46343: Server ScreenSaverSetAttributes use-after-free (bsc#1205878)
- CVE-2022-46344: Server XIChangeProperty out-of-bounds access (bsc#1205876)
- CVE-2022-4283: Reset the radio_groups pointer to NULL after freeing it (bsc#1206017)
- Xi: return an error from XI property changes if verification failed (bsc#1205875)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-14"/>
	<updated date="2022-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205874">SUSE bug 1205874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205875">SUSE bug 1205875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205876">SUSE bug 1205876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205877">SUSE bug 1205877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205878">SUSE bug 1205878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205879">SUSE bug 1205879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206017">SUSE bug 1206017</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4283/">CVE-2022-4283</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46340/">CVE-2022-46340</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46341/">CVE-2022-46341</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-46342/">CVE-2022-46342</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-46343/">CVE-2022-46343</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-46344/">CVE-2022-46344</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728960" comment="xorg-x11-server-1.20.3-150100.14.5.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728961" comment="xorg-x11-server-extra-1.20.3-150100.14.5.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728962" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139607" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1198702" ref_url="https://bugzilla.suse.com/1198702" source="BUGZILLA"/>
		<reference ref_id="1199365" ref_url="https://bugzilla.suse.com/1199365" source="BUGZILLA"/>
		<reference ref_id="1200788" ref_url="https://bugzilla.suse.com/1200788" source="BUGZILLA"/>
		<reference ref_id="1200845" ref_url="https://bugzilla.suse.com/1200845" source="BUGZILLA"/>
		<reference ref_id="1201455" ref_url="https://bugzilla.suse.com/1201455" source="BUGZILLA"/>
		<reference ref_id="1202686" ref_url="https://bugzilla.suse.com/1202686" source="BUGZILLA"/>
		<reference ref_id="1203008" ref_url="https://bugzilla.suse.com/1203008" source="BUGZILLA"/>
		<reference ref_id="1203183" ref_url="https://bugzilla.suse.com/1203183" source="BUGZILLA"/>
		<reference ref_id="1203290" ref_url="https://bugzilla.suse.com/1203290" source="BUGZILLA"/>
		<reference ref_id="1203322" ref_url="https://bugzilla.suse.com/1203322" source="BUGZILLA"/>
		<reference ref_id="1203514" ref_url="https://bugzilla.suse.com/1203514" source="BUGZILLA"/>
		<reference ref_id="1203860" ref_url="https://bugzilla.suse.com/1203860" source="BUGZILLA"/>
		<reference ref_id="1203960" ref_url="https://bugzilla.suse.com/1203960" source="BUGZILLA"/>
		<reference ref_id="1204017" ref_url="https://bugzilla.suse.com/1204017" source="BUGZILLA"/>
		<reference ref_id="1204166" ref_url="https://bugzilla.suse.com/1204166" source="BUGZILLA"/>
		<reference ref_id="1204170" ref_url="https://bugzilla.suse.com/1204170" source="BUGZILLA"/>
		<reference ref_id="1204354" ref_url="https://bugzilla.suse.com/1204354" source="BUGZILLA"/>
		<reference ref_id="1204355" ref_url="https://bugzilla.suse.com/1204355" source="BUGZILLA"/>
		<reference ref_id="1204402" ref_url="https://bugzilla.suse.com/1204402" source="BUGZILLA"/>
		<reference ref_id="1204414" ref_url="https://bugzilla.suse.com/1204414" source="BUGZILLA"/>
		<reference ref_id="1204415" ref_url="https://bugzilla.suse.com/1204415" source="BUGZILLA"/>
		<reference ref_id="1204424" ref_url="https://bugzilla.suse.com/1204424" source="BUGZILLA"/>
		<reference ref_id="1204431" ref_url="https://bugzilla.suse.com/1204431" source="BUGZILLA"/>
		<reference ref_id="1204432" ref_url="https://bugzilla.suse.com/1204432" source="BUGZILLA"/>
		<reference ref_id="1204439" ref_url="https://bugzilla.suse.com/1204439" source="BUGZILLA"/>
		<reference ref_id="1204446" ref_url="https://bugzilla.suse.com/1204446" source="BUGZILLA"/>
		<reference ref_id="1204479" ref_url="https://bugzilla.suse.com/1204479" source="BUGZILLA"/>
		<reference ref_id="1204574" ref_url="https://bugzilla.suse.com/1204574" source="BUGZILLA"/>
		<reference ref_id="1204576" ref_url="https://bugzilla.suse.com/1204576" source="BUGZILLA"/>
		<reference ref_id="1204631" ref_url="https://bugzilla.suse.com/1204631" source="BUGZILLA"/>
		<reference ref_id="1204635" ref_url="https://bugzilla.suse.com/1204635" source="BUGZILLA"/>
		<reference ref_id="1204636" ref_url="https://bugzilla.suse.com/1204636" source="BUGZILLA"/>
		<reference ref_id="1204646" ref_url="https://bugzilla.suse.com/1204646" source="BUGZILLA"/>
		<reference ref_id="1204647" ref_url="https://bugzilla.suse.com/1204647" source="BUGZILLA"/>
		<reference ref_id="1204653" ref_url="https://bugzilla.suse.com/1204653" source="BUGZILLA"/>
		<reference ref_id="1204850" ref_url="https://bugzilla.suse.com/1204850" source="BUGZILLA"/>
		<reference ref_id="1204868" ref_url="https://bugzilla.suse.com/1204868" source="BUGZILLA"/>
		<reference ref_id="1205006" ref_url="https://bugzilla.suse.com/1205006" source="BUGZILLA"/>
		<reference ref_id="1205128" ref_url="https://bugzilla.suse.com/1205128" source="BUGZILLA"/>
		<reference ref_id="1205220" ref_url="https://bugzilla.suse.com/1205220" source="BUGZILLA"/>
		<reference ref_id="1205473" ref_url="https://bugzilla.suse.com/1205473" source="BUGZILLA"/>
		<reference ref_id="1205514" ref_url="https://bugzilla.suse.com/1205514" source="BUGZILLA"/>
		<reference ref_id="1205617" ref_url="https://bugzilla.suse.com/1205617" source="BUGZILLA"/>
		<reference ref_id="1205671" ref_url="https://bugzilla.suse.com/1205671" source="BUGZILLA"/>
		<reference ref_id="1205796" ref_url="https://bugzilla.suse.com/1205796" source="BUGZILLA"/>
		<reference ref_id="1206113" ref_url="https://bugzilla.suse.com/1206113" source="BUGZILLA"/>
		<reference ref_id="1206114" ref_url="https://bugzilla.suse.com/1206114" source="BUGZILLA"/>
		<reference ref_id="1206207" ref_url="https://bugzilla.suse.com/1206207" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4037" ref_url="https://www.suse.com/security/cve/CVE-2021-4037/" source="CVE"/>
		<reference ref_id="CVE-2022-2153" ref_url="https://www.suse.com/security/cve/CVE-2022-2153/" source="CVE"/>
		<reference ref_id="CVE-2022-28693" ref_url="https://www.suse.com/security/cve/CVE-2022-28693/" source="CVE"/>
		<reference ref_id="CVE-2022-2964" ref_url="https://www.suse.com/security/cve/CVE-2022-2964/" source="CVE"/>
		<reference ref_id="CVE-2022-3169" ref_url="https://www.suse.com/security/cve/CVE-2022-3169/" source="CVE"/>
		<reference ref_id="CVE-2022-3424" ref_url="https://www.suse.com/security/cve/CVE-2022-3424/" source="CVE"/>
		<reference ref_id="CVE-2022-3521" ref_url="https://www.suse.com/security/cve/CVE-2022-3521/" source="CVE"/>
		<reference ref_id="CVE-2022-3524" ref_url="https://www.suse.com/security/cve/CVE-2022-3524/" source="CVE"/>
		<reference ref_id="CVE-2022-3542" ref_url="https://www.suse.com/security/cve/CVE-2022-3542/" source="CVE"/>
		<reference ref_id="CVE-2022-3545" ref_url="https://www.suse.com/security/cve/CVE-2022-3545/" source="CVE"/>
		<reference ref_id="CVE-2022-3565" ref_url="https://www.suse.com/security/cve/CVE-2022-3565/" source="CVE"/>
		<reference ref_id="CVE-2022-3567" ref_url="https://www.suse.com/security/cve/CVE-2022-3567/" source="CVE"/>
		<reference ref_id="CVE-2022-3586" ref_url="https://www.suse.com/security/cve/CVE-2022-3586/" source="CVE"/>
		<reference ref_id="CVE-2022-3594" ref_url="https://www.suse.com/security/cve/CVE-2022-3594/" source="CVE"/>
		<reference ref_id="CVE-2022-3621" ref_url="https://www.suse.com/security/cve/CVE-2022-3621/" source="CVE"/>
		<reference ref_id="CVE-2022-3628" ref_url="https://www.suse.com/security/cve/CVE-2022-3628/" source="CVE"/>
		<reference ref_id="CVE-2022-3629" ref_url="https://www.suse.com/security/cve/CVE-2022-3629/" source="CVE"/>
		<reference ref_id="CVE-2022-3635" ref_url="https://www.suse.com/security/cve/CVE-2022-3635/" source="CVE"/>
		<reference ref_id="CVE-2022-3643" ref_url="https://www.suse.com/security/cve/CVE-2022-3643/" source="CVE"/>
		<reference ref_id="CVE-2022-3646" ref_url="https://www.suse.com/security/cve/CVE-2022-3646/" source="CVE"/>
		<reference ref_id="CVE-2022-3649" ref_url="https://www.suse.com/security/cve/CVE-2022-3649/" source="CVE"/>
		<reference ref_id="CVE-2022-3903" ref_url="https://www.suse.com/security/cve/CVE-2022-3903/" source="CVE"/>
		<reference ref_id="CVE-2022-40307" ref_url="https://www.suse.com/security/cve/CVE-2022-40307/" source="CVE"/>
		<reference ref_id="CVE-2022-40768" ref_url="https://www.suse.com/security/cve/CVE-2022-40768/" source="CVE"/>
		<reference ref_id="CVE-2022-4095" ref_url="https://www.suse.com/security/cve/CVE-2022-4095/" source="CVE"/>
		<reference ref_id="CVE-2022-41850" ref_url="https://www.suse.com/security/cve/CVE-2022-41850/" source="CVE"/>
		<reference ref_id="CVE-2022-41858" ref_url="https://www.suse.com/security/cve/CVE-2022-41858/" source="CVE"/>
		<reference ref_id="CVE-2022-42328" ref_url="https://www.suse.com/security/cve/CVE-2022-42328/" source="CVE"/>
		<reference ref_id="CVE-2022-42329" ref_url="https://www.suse.com/security/cve/CVE-2022-42329/" source="CVE"/>
		<reference ref_id="CVE-2022-42703" ref_url="https://www.suse.com/security/cve/CVE-2022-42703/" source="CVE"/>
		<reference ref_id="CVE-2022-42895" ref_url="https://www.suse.com/security/cve/CVE-2022-42895/" source="CVE"/>
		<reference ref_id="CVE-2022-42896" ref_url="https://www.suse.com/security/cve/CVE-2022-42896/" source="CVE"/>
		<reference ref_id="CVE-2022-43750" ref_url="https://www.suse.com/security/cve/CVE-2022-43750/" source="CVE"/>
		<reference ref_id="CVE-2022-4378" ref_url="https://www.suse.com/security/cve/CVE-2022-4378/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="CVE-2022-45934" ref_url="https://www.suse.com/security/cve/CVE-2022-45934/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013279.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-42328: Guests could trigger denial of service via the netback driver (bsc#1206114).
- CVE-2022-42329: Guests could trigger denial of service via the netback driver (bsc#1206113).
- CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver (bsc#1206113).
- CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631).
- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1204166).
- CVE-2022-41850: Fixed a race condition in roccat_report_event() in drivers/hid/hid-roccat.c (bsc#1203960).
- CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in net/bluetooth/l2cap_core.c (bsc#1205796).
- CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wifi/brcmfmac (bsc#1204868).
- CVE-2022-3567: Fixed a to race condition in inet6_stream_ops()/inet6_dgram_ops() (bsc#1204414).
- CVE-2022-41858: Fixed a denial of service in sl_tx_timeout() in drivers/net/slip (bsc#1205671).
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).
- CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).
- CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).
- CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set (bsc#1198702).
- CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's internal memory (bsc#1204653).
- CVE-2022-3542: Fixed memory leak in bnx2x_tpa_stop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c (bsc#1204402).
- CVE-2022-3629: Fixed memory leak in vsock_connect() in net/vmw_vsock/af_vsock.c (bsc#1204635).
- CVE-2022-3646: Fixed memory leak in nilfs_attach_log_writer() in fs/nilfs2/segment.c (bsc#1204646).
- CVE-2022-3649: Fixed use-after-free in nilfs_new_inode() in fs/nilfs2/inode.c (bsc#1204647).
- CVE-2022-3621: Fixed null pointer dereference in nilfs_bmap_lookup_at_level() in fs/nilfs2/inode.c (bsc#1204574).
- CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bsc#1204479).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3565: Fixed use-after-free in del_timer() in drivers/isdn/mISDN/l1oip_core.c (bsc#1204431).
- CVE-2022-3524: Fixed memory leak in ipv6_renew_options() in the IPv6 handler (bsc#1204354).
- CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory (bsc#1203514).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bsc#1204168).
- CVE-2022-3169: Fixed an denial of service though request to NVME_IOCTL_RESET and NVME_IOCTL_SUBSYS_RESET (bsc#1203290).
- CVE-2022-40307: Fixed a race condition that could had been exploited to trigger a use-after-free in the efi firmware capsule-loader.c (bsc#1203322).
- CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2cap_core.c's l2cap_parse_conf_req() which can be used to leak kernel pointers remotely (bsc#1205705).
- CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2cap_core.c's l2cap_connect() and l2cap_le_connect_req() which may have allowed code execution and leaking kernel memory (respectively) remotely via Bluetooth (bsc#1205709).
- CVE-2022-3545: Fixed a use-after-free vulnerability is area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-3521: Fixed a race condition in kcm_tx_work() of the file net/kcm/kcmsock.c (bsc#1204355).
- CVE-2022-2153: Fixed a NULL pointer dereference in KVM when attempting to set a SynIC IRQ (bsc#1200788).

The following non-security bugs were fixed:

- Drivers: hv: vmbus: Add VMbus IMC device to unsupported list (git-fixes).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Drop error message when 'No request id available' (bsc#1204017).
- Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (git-fixes).
- Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero (bsc#1204017).
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (git-fixes).
- Drivers: hv: vmbus: Fix potential crash on module unload (git-fixes).
- Drivers: hv: vmbus: Introduce {lock,unlock}_requestor() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Introduce vmbus_request_addr_match() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Introduce vmbus_sendpacket_getid() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Move __vmbus_open() (bsc#1204017).
- Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (git-fixes).
- hv_netvsc: Add check for kvmalloc_array (git-fixes).
- hv_netvsc: Add error handling while switching data path (bsc#1204850).
- hv_netvsc: Add validation for untrusted Hyper-V values (bsc#1204017).
- hv_netvsc: Cache the current data path to avoid duplicate call and message (bsc#1204017).
- hv_netvsc: Check VF datapath when sending traffic to VF (bsc#1204017).
- hv_netvsc: Fix error handling in netvsc_set_features() (git-fixes).
- hv_netvsc: Fix race between VF offering and VF association message from host (bsc#1204850).
- hv_netvsc: Print value of invalid ID in netvsc_send_{completion,tx_complete}() (bsc#1204017).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove (bsc#1204850).
- hv_netvsc: Remove unnecessary round_up for recv_completion_cnt (bsc#1204017).
- hv_netvsc: Reset the RSC count if NVSP_STAT_FAIL in netvsc_receive() (bsc#1204017).
- hv_netvsc: Sync offloading features to VF NIC (git-fixes).
- hv_netvsc: use netif_is_bond_master() instead of open code (git-fixes).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening (bsc#1204017).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH (bsc#1204017).
- ipv6: ping: fix wrong checksum for large frames (bsc#1203183).
- net: hyperv: remove use of bpf_op_t (git-fixes).
- net: netvsc: remove break after return (git-fixes).
- PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv() (bsc#1204446).
- PCI: hv: Add validation for untrusted Hyper-V values (bsc#1204017).
- PCI: hv: Drop msi_controller structure (bsc#1204446).
- PCI: hv: Fix a race condition when removing the device (bsc#1204446).
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (bsc#1200845).
- PCI: hv: Fix interrupt mapping for multi-MSI (bsc#1200845).
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (bsc#1200845).
- PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology (bsc#1199365).
- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (bsc#1204446).
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (bsc#1204017, bsc#1203860, bsc#1205617).
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (bsc#1204017, bsc#1205617).
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (bsc#1200845).
- PCI: hv: Make the code arch neutral by adding arch specific interfaces (bsc#1200845).
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (bsc#1200845).
- PCI: hv: Remove bus device removal unused refcount/functions (bsc#1204446).
- PCI: hv: Remove unnecessary use of %hx (bsc#1204446).
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (bsc#1200845).
- PCI: hv: Support for create interrupt v3 (git-fixes).
- PCI: hv: Use struct_size() helper (bsc#1204446).
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (bsc#1204017).
- Revert 'scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback()' (bsc#1204017).
- scsi: storvsc: Drop DID_TARGET_FAILURE use (git-fixes).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8 and newer (bsc#1204017).
- scsi: storvsc: Fix validation for unsolicited incoming packets (bsc#1204017).
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (git-fixes).
- scsi: storvsc: Resolve data race in storvsc_probe() (bsc#1204017).
- scsi: storvsc: Use blk_mq_unique_tag() to generate requestIDs (bsc#1204017).
- scsi: storvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening (bsc#1204017).
- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1204017).
- sunrpc: Re-purpose trace_svc_process (bsc#1205006).
- x86/cpu: Restore AMD's DE_CFG MSR after resume (bsc#1205473).
- x86/hyperv: Output host build info as normal Windows version number (git-fixes).
- x86/hyperv: Set pv_info.name to 'Hyper-V' (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-19"/>
	<updated date="2022-12-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198702">SUSE bug 1198702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199365">SUSE bug 1199365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200788">SUSE bug 1200788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200845">SUSE bug 1200845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201455">SUSE bug 1201455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202686">SUSE bug 1202686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203008">SUSE bug 1203008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203183">SUSE bug 1203183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203290">SUSE bug 1203290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203322">SUSE bug 1203322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203514">SUSE bug 1203514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203860">SUSE bug 1203860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203960">SUSE bug 1203960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204017">SUSE bug 1204017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204166">SUSE bug 1204166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204170">SUSE bug 1204170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204354">SUSE bug 1204354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204355">SUSE bug 1204355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204402">SUSE bug 1204402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204414">SUSE bug 1204414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204415">SUSE bug 1204415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204424">SUSE bug 1204424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204431">SUSE bug 1204431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204432">SUSE bug 1204432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204439">SUSE bug 1204439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204446">SUSE bug 1204446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204479">SUSE bug 1204479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204574">SUSE bug 1204574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204576">SUSE bug 1204576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204631">SUSE bug 1204631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204635">SUSE bug 1204635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204636">SUSE bug 1204636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204646">SUSE bug 1204646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204647">SUSE bug 1204647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204653">SUSE bug 1204653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204850">SUSE bug 1204850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204868">SUSE bug 1204868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205006">SUSE bug 1205006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205128">SUSE bug 1205128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205220">SUSE bug 1205220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205473">SUSE bug 1205473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205514">SUSE bug 1205514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205617">SUSE bug 1205617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205671">SUSE bug 1205671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205796">SUSE bug 1205796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206113">SUSE bug 1206113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206114">SUSE bug 1206114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206207">SUSE bug 1206207</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4037/">CVE-2021-4037</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2153/">CVE-2022-2153</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28693/">CVE-2022-28693</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2964/">CVE-2022-2964</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3169/">CVE-2022-3169</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3424/">CVE-2022-3424</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3521/">CVE-2022-3521</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3524/">CVE-2022-3524</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3542/">CVE-2022-3542</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3545/">CVE-2022-3545</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3565/">CVE-2022-3565</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3567/">CVE-2022-3567</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3586/">CVE-2022-3586</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3594/">CVE-2022-3594</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3621/">CVE-2022-3621</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3628/">CVE-2022-3628</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3629/">CVE-2022-3629</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3635/">CVE-2022-3635</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-3643/">CVE-2022-3643</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3646/">CVE-2022-3646</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3649/">CVE-2022-3649</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3903/">CVE-2022-3903</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40307/">CVE-2022-40307</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40768/">CVE-2022-40768</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4095/">CVE-2022-4095</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-41850/">CVE-2022-41850</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41858/">CVE-2022-41858</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42328/">CVE-2022-42328</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42329/">CVE-2022-42329</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42703/">CVE-2022-42703</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42895/">CVE-2022-42895</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-42896/">CVE-2022-42896</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43750/">CVE-2022-43750</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4378/">CVE-2022-4378</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-45934/">CVE-2022-45934</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728738" comment="kernel-default-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728739" comment="kernel-default-base-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728740" comment="kernel-default-devel-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728741" comment="kernel-devel-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728742" comment="kernel-docs-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728743" comment="kernel-macros-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728744" comment="kernel-obs-build-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728745" comment="kernel-source-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728746" comment="kernel-syms-4.12.14-150100.197.131.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139608" version="1" class="patch">
	<metadata>
		<title>Security update for cni (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181961" ref_url="https://bugzilla.suse.com/1181961" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20206" ref_url="https://www.suse.com/security/cve/CVE-2021-20206/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4592-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013299.html" source="SUSE-SU"/>
		<description>
This update for cni fixes the following issues:

- CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-20"/>
	<updated date="2022-12-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181961">SUSE bug 1181961</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20206/">CVE-2021-20206</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725913" comment="cni-0.7.1-150100.3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139609" version="1" class="patch">
	<metadata>
		<title>Security update for cni-plugins (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181961" ref_url="https://bugzilla.suse.com/1181961" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20206" ref_url="https://www.suse.com/security/cve/CVE-2021-20206/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013297.html" source="SUSE-SU"/>
		<description>
This update for cni-plugins fixes the following issues:

- CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-20"/>
	<updated date="2022-12-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181961">SUSE bug 1181961</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20206/">CVE-2021-20206</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725914" comment="cni-plugins-0.8.6-150100.3.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139610" version="1" class="patch">
	<metadata>
		<title>Security update for supportutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1184689" ref_url="https://bugzilla.suse.com/1184689" source="BUGZILLA"/>
		<reference ref_id="1188086" ref_url="https://bugzilla.suse.com/1188086" source="BUGZILLA"/>
		<reference ref_id="1192252" ref_url="https://bugzilla.suse.com/1192252" source="BUGZILLA"/>
		<reference ref_id="1192648" ref_url="https://bugzilla.suse.com/1192648" source="BUGZILLA"/>
		<reference ref_id="1197428" ref_url="https://bugzilla.suse.com/1197428" source="BUGZILLA"/>
		<reference ref_id="1200330" ref_url="https://bugzilla.suse.com/1200330" source="BUGZILLA"/>
		<reference ref_id="1202269" ref_url="https://bugzilla.suse.com/1202269" source="BUGZILLA"/>
		<reference ref_id="1202337" ref_url="https://bugzilla.suse.com/1202337" source="BUGZILLA"/>
		<reference ref_id="1202417" ref_url="https://bugzilla.suse.com/1202417" source="BUGZILLA"/>
		<reference ref_id="1203818" ref_url="https://bugzilla.suse.com/1203818" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:4594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013300.html" source="SUSE-SU"/>
		<description>
This update for supportutils fixes the following issues:

Security issues fixed:

- Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818)

Bug fixes:

- Added lifecycle information
- Fixed KVM virtualization detection on bare metal (bsc#1184689)
- Added logging using journalctl (bsc#1200330)
- Get current sar data before collecting files (bsc#1192648)
- Collects everything in /etc/multipath/ (bsc#1192252)
- Collects power management information in hardware.txt (bsc#1197428)
- Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337)
- Fixed conf_files and conf_text_files so y2log is gathered (bsc#1202269)
- Update to nvme_info and block_info (bsc#1202417)
- Added includedir directories from /etc/sudoers (bsc#1188086)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-20"/>
	<updated date="2022-12-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1184689">SUSE bug 1184689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188086">SUSE bug 1188086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192252">SUSE bug 1192252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192648">SUSE bug 1192648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197428">SUSE bug 1197428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200330">SUSE bug 1200330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202269">SUSE bug 1202269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202337">SUSE bug 1202337</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202417">SUSE bug 1202417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203818">SUSE bug 1203818</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726711" comment="supportutils-3.1.21-150000.5.44.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139611" version="1" class="patch">
	<metadata>
		<title>Security update for freeradius-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1180525" ref_url="https://bugzilla.suse.com/1180525" source="BUGZILLA"/>
		<reference ref_id="1184016" ref_url="https://bugzilla.suse.com/1184016" source="BUGZILLA"/>
		<reference ref_id="1206204" ref_url="https://bugzilla.suse.com/1206204" source="BUGZILLA"/>
		<reference ref_id="1206205" ref_url="https://bugzilla.suse.com/1206205" source="BUGZILLA"/>
		<reference ref_id="1206206" ref_url="https://bugzilla.suse.com/1206206" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41859" ref_url="https://www.suse.com/security/cve/CVE-2022-41859/" source="CVE"/>
		<reference ref_id="CVE-2022-41860" ref_url="https://www.suse.com/security/cve/CVE-2022-41860/" source="CVE"/>
		<reference ref_id="CVE-2022-41861" ref_url="https://www.suse.com/security/cve/CVE-2022-41861/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013344.html" source="SUSE-SU"/>
		<description>
This update for freeradius-server fixes the following issues:

- CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204).
- CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205).
- CVE-2022-41861: Fixes a crash on invalid abinary data (bsc#1206206).
- move logrotate options into specific parts for each log as 'global' options
  will persist past and clobber global options in the main logrotate config (bsc#1180525)
- Fixed plaintext password entries in logfiles (bsc#1184016).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-27"/>
	<updated date="2022-12-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180525">SUSE bug 1180525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184016">SUSE bug 1184016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206204">SUSE bug 1206204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206205">SUSE bug 1206205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206206">SUSE bug 1206206</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-41859/">CVE-2022-41859</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41860/">CVE-2022-41860</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41861/">CVE-2022-41861</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728323" comment="freeradius-server-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728324" comment="freeradius-server-devel-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728325" comment="freeradius-server-krb5-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728326" comment="freeradius-server-ldap-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728327" comment="freeradius-server-libs-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728328" comment="freeradius-server-mysql-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728329" comment="freeradius-server-perl-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728330" comment="freeradius-server-postgresql-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728331" comment="freeradius-server-python-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728332" comment="freeradius-server-sqlite-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728333" comment="freeradius-server-utils-3.0.16-150000.3.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139612" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194576" ref_url="https://bugzilla.suse.com/1194576" source="BUGZILLA"/>
		<reference ref_id="1194581" ref_url="https://bugzilla.suse.com/1194581" source="BUGZILLA"/>
		<reference ref_id="1194588" ref_url="https://bugzilla.suse.com/1194588" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23033" ref_url="https://www.suse.com/security/cve/CVE-2022-23033/" source="CVE"/>
		<reference ref_id="CVE-2022-23034" ref_url="https://www.suse.com/security/cve/CVE-2022-23034/" source="CVE"/>
		<reference ref_id="CVE-2022-23035" ref_url="https://www.suse.com/security/cve/CVE-2022-23035/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010242.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-23033: Fixed guest_physmap_remove_page not removing the p2m mappings. (XSA-393) (bsc#1194576)
- CVE-2022-23034: Fixed possible DoS by a PV guest Xen while unmapping a grant. (XSA-394) (bsc#1194581)
- CVE-2022-23035: Fixed insufficient cleanup of passed-through device IRQs. (XSA-395) (bsc#1194588)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-17"/>
	<updated date="2022-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194576">SUSE bug 1194576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194581">SUSE bug 1194581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194588">SUSE bug 1194588</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23033/">CVE-2022-23033</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23034/">CVE-2022-23034</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23035/">CVE-2022-23035</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009665528" comment="xen-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665529" comment="xen-devel-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665530" comment="xen-libs-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665531" comment="xen-tools-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665532" comment="xen-tools-domU-4.12.4_18-3.60.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139613" version="1" class="patch">
	<metadata>
		<title>Security update for virglrenderer (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1195389" ref_url="https://bugzilla.suse.com/1195389" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0135" ref_url="https://www.suse.com/security/cve/CVE-2022-0135/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010243.html" source="SUSE-SU"/>
		<description>
This update for virglrenderer fixes the following issues:
	  
- CVE-2022-0135: Fixed out-of-bonds write in read_transfer_data() (bsc#1195389).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-17"/>
	<updated date="2022-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195389">SUSE bug 1195389</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0135/">CVE-2022-0135</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667314" comment="libvirglrenderer0-0.6.0-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667315" comment="virglrenderer-devel-0.6.0-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139614" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1071031" ref_url="https://bugzilla.suse.com/1071031" source="BUGZILLA"/>
		<reference ref_id="1154365" ref_url="https://bugzilla.suse.com/1154365" source="BUGZILLA"/>
		<reference ref_id="1182808" ref_url="https://bugzilla.suse.com/1182808" source="BUGZILLA"/>
		<reference ref_id="1182809" ref_url="https://bugzilla.suse.com/1182809" source="BUGZILLA"/>
		<reference ref_id="1182811" ref_url="https://bugzilla.suse.com/1182811" source="BUGZILLA"/>
		<reference ref_id="1182812" ref_url="https://bugzilla.suse.com/1182812" source="BUGZILLA"/>
		<reference ref_id="1190312" ref_url="https://bugzilla.suse.com/1190312" source="BUGZILLA"/>
		<reference ref_id="1194539" ref_url="https://bugzilla.suse.com/1194539" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17095" ref_url="https://www.suse.com/security/cve/CVE-2017-17095/" source="CVE"/>
		<reference ref_id="CVE-2019-17546" ref_url="https://www.suse.com/security/cve/CVE-2019-17546/" source="CVE"/>
		<reference ref_id="CVE-2020-19131" ref_url="https://www.suse.com/security/cve/CVE-2020-19131/" source="CVE"/>
		<reference ref_id="CVE-2020-35521" ref_url="https://www.suse.com/security/cve/CVE-2020-35521/" source="CVE"/>
		<reference ref_id="CVE-2020-35522" ref_url="https://www.suse.com/security/cve/CVE-2020-35522/" source="CVE"/>
		<reference ref_id="CVE-2020-35523" ref_url="https://www.suse.com/security/cve/CVE-2020-35523/" source="CVE"/>
		<reference ref_id="CVE-2020-35524" ref_url="https://www.suse.com/security/cve/CVE-2020-35524/" source="CVE"/>
		<reference ref_id="CVE-2022-22844" ref_url="https://www.suse.com/security/cve/CVE-2022-22844/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010245.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2017-17095: Fixed DoS in tools/pal2rgb.c in pal2rgb (bsc#1071031).
- CVE-2019-17546: Fixed integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image (bsc#1154365).
- CVE-2020-19131: Fixed buffer overflow in tiffcrop that may cause DoS via the invertImage() function (bsc#1190312).
- CVE-2020-35521: Fixed memory allocation failure in tif_read.c (bsc#1182808).
- CVE-2020-35522: Fixed memory allocation failure in tif_pixarlog.c (bsc#1182809).
- CVE-2020-35523: Fixed integer overflow in tif_getimage.c (bsc#1182811).
- CVE-2020-35524: Fixed heap-based buffer overflow in TIFF2PDF tool (bsc#1182812).
- CVE-2022-22844: Fixed out-of-bounds read in _TIFFmemcpy in tif_unix.c (bsc#1194539).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-17"/>
	<updated date="2022-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1071031">SUSE bug 1071031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154365">SUSE bug 1154365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182808">SUSE bug 1182808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182809">SUSE bug 1182809</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182811">SUSE bug 1182811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182812">SUSE bug 1182812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190312">SUSE bug 1190312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194539">SUSE bug 1194539</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17095/">CVE-2017-17095</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17546/">CVE-2019-17546</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-19131/">CVE-2020-19131</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35521/">CVE-2020-35521</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35522/">CVE-2020-35522</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35523/">CVE-2020-35523</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35524/">CVE-2020-35524</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22844/">CVE-2022-22844</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009665458" comment="libtiff-devel-4.0.9-45.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665459" comment="libtiff5-4.0.9-45.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665439" comment="libtiff5-32bit-4.0.9-45.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139615" version="1" class="patch">
	<metadata>
		<title>Security update for rust (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194767" ref_url="https://bugzilla.suse.com/1194767" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21658" ref_url="https://www.suse.com/security/cve/CVE-2022-21658/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010252.html" source="SUSE-SU"/>
		<description>
This update for rust fixes the following issues:

- CVE-2022-21658: Fixed race condition in std::fs::remove_dir_all (bsc#1194767).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1194767">SUSE bug 1194767</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21658/">CVE-2022-21658</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664554" comment="cargo-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664555" comment="rls-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664556" comment="rust-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664557" comment="rust-analysis-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664558" comment="rust-src-1.53.0-22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139616" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194731" ref_url="https://bugzilla.suse.com/1194731" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-20698" ref_url="https://www.suse.com/security/cve/CVE-2022-20698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010270.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

- CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194731">SUSE bug 1194731</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20698/">CVE-2022-20698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664539" comment="clamav-0.103.5-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664540" comment="clamav-devel-0.103.5-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664541" comment="libclamav9-0.103.5-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664542" comment="libfreshclam2-0.103.5-3.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139617" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1195054" ref_url="https://bugzilla.suse.com/1195054" source="BUGZILLA"/>
		<reference ref_id="1195217" ref_url="https://bugzilla.suse.com/1195217" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23852" ref_url="https://www.suse.com/security/cve/CVE-2022-23852/" source="CVE"/>
		<reference ref_id="CVE-2022-23990" ref_url="https://www.suse.com/security/cve/CVE-2022-23990/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010268.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

- CVE-2022-23852: Fixed signed integer overflow in XML_GetBuffer (bsc#1195054).
- CVE-2022-23990: Fixed integer overflow in the doProlog function (bsc#1195217).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195054">SUSE bug 1195054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195217">SUSE bug 1195217</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23852/">CVE-2022-23852</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23990/">CVE-2022-23990</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009665460" comment="expat-2.2.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665461" comment="libexpat-devel-2.2.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665462" comment="libexpat1-2.2.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665436" comment="libexpat1-32bit-2.2.5-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139618" version="1" class="patch">
	<metadata>
		<title>Security update for net-snmp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1027353" ref_url="https://bugzilla.suse.com/1027353" source="BUGZILLA"/>
		<reference ref_id="1081164" ref_url="https://bugzilla.suse.com/1081164" source="BUGZILLA"/>
		<reference ref_id="1102775" ref_url="https://bugzilla.suse.com/1102775" source="BUGZILLA"/>
		<reference ref_id="1108471" ref_url="https://bugzilla.suse.com/1108471" source="BUGZILLA"/>
		<reference ref_id="1111122" ref_url="https://bugzilla.suse.com/1111122" source="BUGZILLA"/>
		<reference ref_id="1116807" ref_url="https://bugzilla.suse.com/1116807" source="BUGZILLA"/>
		<reference ref_id="1140341" ref_url="https://bugzilla.suse.com/1140341" source="BUGZILLA"/>
		<reference ref_id="1145864" ref_url="https://bugzilla.suse.com/1145864" source="BUGZILLA"/>
		<reference ref_id="1152968" ref_url="https://bugzilla.suse.com/1152968" source="BUGZILLA"/>
		<reference ref_id="1174961" ref_url="https://bugzilla.suse.com/1174961" source="BUGZILLA"/>
		<reference ref_id="1178021" ref_url="https://bugzilla.suse.com/1178021" source="BUGZILLA"/>
		<reference ref_id="1178351" ref_url="https://bugzilla.suse.com/1178351" source="BUGZILLA"/>
		<reference ref_id="1179009" ref_url="https://bugzilla.suse.com/1179009" source="BUGZILLA"/>
		<reference ref_id="1179699" ref_url="https://bugzilla.suse.com/1179699" source="BUGZILLA"/>
		<reference ref_id="1181591" ref_url="https://bugzilla.suse.com/1181591" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-18065" ref_url="https://www.suse.com/security/cve/CVE-2018-18065/" source="CVE"/>
		<reference ref_id="CVE-2020-15862" ref_url="https://www.suse.com/security/cve/CVE-2020-15862/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009993.html" source="SUSE-SU"/>
		<description>
This update for net-snmp fixes the following issues:

- CVE-2020-15862: Make extended MIB read-only (bsc#1174961)
- CVE-2018-18065: Fix remote DoS in agent/helpers/table.c (bsc#1111122)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-11"/>
	<updated date="2022-01-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027353">SUSE bug 1027353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081164">SUSE bug 1081164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102775">SUSE bug 1102775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108471">SUSE bug 1108471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111122">SUSE bug 1111122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116807">SUSE bug 1116807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140341">SUSE bug 1140341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145864">SUSE bug 1145864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152968">SUSE bug 1152968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174961">SUSE bug 1174961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178021">SUSE bug 1178021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178351">SUSE bug 1178351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179009">SUSE bug 1179009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179699">SUSE bug 1179699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181591">SUSE bug 1181591</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18065/">CVE-2018-18065</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15862/">CVE-2020-15862</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009661269" comment="libsnmp30-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661270" comment="net-snmp-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661271" comment="net-snmp-devel-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661272" comment="perl-SNMP-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661273" comment="snmp-mibs-5.7.3-10.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139619" version="1" class="patch">
	<metadata>
		<title>Security update for xerces-j2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1195108" ref_url="https://bugzilla.suse.com/1195108" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23437" ref_url="https://www.suse.com/security/cve/CVE-2022-23437/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010265.html" source="SUSE-SU"/>
		<description>
This update for xerces-j2 fixes the following issues:
	  
- CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser (bsc#1195108).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195108">SUSE bug 1195108</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23437/">CVE-2022-23437</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667902" comment="xerces-j2-2.11.0-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667903" comment="xerces-j2-xml-apis-2.11.0-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667904" comment="xerces-j2-xml-resolver-2.11.0-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139620" version="1" class="patch">
	<metadata>
		<title>Security update for libsndfile (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194006" ref_url="https://bugzilla.suse.com/1194006" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4156" ref_url="https://www.suse.com/security/cve/CVE-2021-4156/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009992.html" source="SUSE-SU"/>
		<description>
This update for libsndfile fixes the following issues:

- CVE-2021-4156: Fixed heap buffer overflow in flac_buffer_copy that 
could potentially lead to heap exploitation (bsc#1194006).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-11"/>
	<updated date="2022-01-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194006">SUSE bug 1194006</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4156/">CVE-2021-4156</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009662464" comment="libsndfile-devel-1.0.28-5.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662465" comment="libsndfile1-1.0.28-5.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139621" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1192615" ref_url="https://bugzilla.suse.com/1192615" source="BUGZILLA"/>
		<reference ref_id="1195779" ref_url="https://bugzilla.suse.com/1195779" source="BUGZILLA"/>
		<reference ref_id="1195780" ref_url="https://bugzilla.suse.com/1195780" source="BUGZILLA"/>
		<reference ref_id="1195781" ref_url="https://bugzilla.suse.com/1195781" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0127" ref_url="https://www.suse.com/security/cve/CVE-2021-0127/" source="CVE"/>
		<reference ref_id="CVE-2021-0145" ref_url="https://www.suse.com/security/cve/CVE-2021-0145/" source="CVE"/>
		<reference ref_id="CVE-2021-0146" ref_url="https://www.suse.com/security/cve/CVE-2021-0146/" source="CVE"/>
		<reference ref_id="CVE-2021-33120" ref_url="https://www.suse.com/security/cve/CVE-2021-33120/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010285.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20220207 release.

- CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)
- CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)
- CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)
- CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)

- Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)
- Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-21"/>
	<updated date="2022-02-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192615">SUSE bug 1192615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195779">SUSE bug 1195779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195780">SUSE bug 1195780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195781">SUSE bug 1195781</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0127/">CVE-2021-0127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0145/">CVE-2021-0145</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0146/">CVE-2021-0146</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-33120/">CVE-2021-33120</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667906" comment="ucode-intel-20220207-3.206.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139622" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1191962" ref_url="https://bugzilla.suse.com/1191962" source="BUGZILLA"/>
		<reference ref_id="1191963" ref_url="https://bugzilla.suse.com/1191963" source="BUGZILLA"/>
		<reference ref_id="1192153" ref_url="https://bugzilla.suse.com/1192153" source="BUGZILLA"/>
		<reference ref_id="1192154" ref_url="https://bugzilla.suse.com/1192154" source="BUGZILLA"/>
		<reference ref_id="1192696" ref_url="https://bugzilla.suse.com/1192696" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23343" ref_url="https://www.suse.com/security/cve/CVE-2021-23343/" source="CVE"/>
		<reference ref_id="CVE-2021-32803" ref_url="https://www.suse.com/security/cve/CVE-2021-32803/" source="CVE"/>
		<reference ref_id="CVE-2021-32804" ref_url="https://www.suse.com/security/cve/CVE-2021-32804/" source="CVE"/>
		<reference ref_id="CVE-2021-3807" ref_url="https://www.suse.com/security/cve/CVE-2021-3807/" source="CVE"/>
		<reference ref_id="CVE-2021-3918" ref_url="https://www.suse.com/security/cve/CVE-2021-3918/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010304.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:
	  
- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).
- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).
- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).
- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).
- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-24"/>
	<updated date="2022-02-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191962">SUSE bug 1191962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191963">SUSE bug 1191963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192153">SUSE bug 1192153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192154">SUSE bug 1192154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192696">SUSE bug 1192696</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23343/">CVE-2021-23343</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32803/">CVE-2021-32803</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32804/">CVE-2021-32804</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3807/">CVE-2021-3807</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3918/">CVE-2021-3918</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009668303" comment="nodejs8-8.17.0-3.54.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668304" comment="nodejs8-devel-8.17.0-3.54.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668305" comment="nodejs8-docs-8.17.0-3.54.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668306" comment="npm8-8.17.0-3.54.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139623" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1195230" ref_url="https://bugzilla.suse.com/1195230" source="BUGZILLA"/>
		<reference ref_id="1195682" ref_url="https://bugzilla.suse.com/1195682" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22753" ref_url="https://www.suse.com/security/cve/CVE-2022-22753/" source="CVE"/>
		<reference ref_id="CVE-2022-22754" ref_url="https://www.suse.com/security/cve/CVE-2022-22754/" source="CVE"/>
		<reference ref_id="CVE-2022-22756" ref_url="https://www.suse.com/security/cve/CVE-2022-22756/" source="CVE"/>
		<reference ref_id="CVE-2022-22759" ref_url="https://www.suse.com/security/cve/CVE-2022-22759/" source="CVE"/>
		<reference ref_id="CVE-2022-22760" ref_url="https://www.suse.com/security/cve/CVE-2022-22760/" source="CVE"/>
		<reference ref_id="CVE-2022-22761" ref_url="https://www.suse.com/security/cve/CVE-2022-22761/" source="CVE"/>
		<reference ref_id="CVE-2022-22763" ref_url="https://www.suse.com/security/cve/CVE-2022-22763/" source="CVE"/>
		<reference ref_id="CVE-2022-22764" ref_url="https://www.suse.com/security/cve/CVE-2022-22764/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010331.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682)

- CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service
- CVE-2022-22754: Extensions could have bypassed permission confirmation during update
- CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable
- CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements
- CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types
- CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages
- CVE-2022-22763: Script Execution during invalid object state
- CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6


Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)

- Fixed an issue that allowed unexpected data to be submitted in some of our search telemetry
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-02"/>
	<updated date="2022-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195230">SUSE bug 1195230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195682">SUSE bug 1195682</bugzilla>
	<cve impact="critical" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22753/">CVE-2022-22753</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22754/">CVE-2022-22754</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22756/">CVE-2022-22756</cve>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22759/">CVE-2022-22759</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22760/">CVE-2022-22760</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22761/">CVE-2022-22761</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22763/">CVE-2022-22763</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22764/">CVE-2022-22764</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667815" comment="MozillaFirefox-91.6.0-150.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667816" comment="MozillaFirefox-devel-91.6.0-150.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667817" comment="MozillaFirefox-translations-common-91.6.0-150.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667818" comment="MozillaFirefox-translations-other-91.6.0-150.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139624" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1038980" ref_url="https://bugzilla.suse.com/1038980" source="BUGZILLA"/>
		<reference ref_id="1081790" ref_url="https://bugzilla.suse.com/1081790" source="BUGZILLA"/>
		<reference ref_id="1192050" ref_url="https://bugzilla.suse.com/1192050" source="BUGZILLA"/>
		<reference ref_id="1193041" ref_url="https://bugzilla.suse.com/1193041" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-9253" ref_url="https://www.suse.com/security/cve/CVE-2015-9253/" source="CVE"/>
		<reference ref_id="CVE-2017-8923" ref_url="https://www.suse.com/security/cve/CVE-2017-8923/" source="CVE"/>
		<reference ref_id="CVE-2021-21703" ref_url="https://www.suse.com/security/cve/CVE-2021-21703/" source="CVE"/>
		<reference ref_id="CVE-2021-21707" ref_url="https://www.suse.com/security/cve/CVE-2021-21707/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010332.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2021-21703: Fixed local privilege escalation via PHP-FPM (bsc#1192050).
- CVE-2021-21707: Fixed special character breaks path in xml parsing (bsc#1193041).
- CVE-2017-8923: Fixed denial of service (application crash) when using .= with a long string (zend_string_extend func in Zend/zend_string.h) (bsc#1038980).
- CVE-2015-9253: Fixed endless loop when the master process restarts a child process using program execution functions (bsc#1081790).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-02"/>
	<updated date="2022-03-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1038980">SUSE bug 1038980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081790">SUSE bug 1081790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192050">SUSE bug 1192050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193041">SUSE bug 1193041</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9253/">CVE-2015-9253</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8923/">CVE-2017-8923</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21703/">CVE-2021-21703</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21707/">CVE-2021-21707</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009668512" comment="apache2-mod_php7-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668513" comment="php7-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668514" comment="php7-bcmath-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668515" comment="php7-bz2-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668516" comment="php7-calendar-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668517" comment="php7-ctype-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668518" comment="php7-curl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668519" comment="php7-dba-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668520" comment="php7-devel-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668521" comment="php7-dom-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668522" comment="php7-enchant-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668523" comment="php7-exif-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668524" comment="php7-fastcgi-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668525" comment="php7-fileinfo-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668526" comment="php7-fpm-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668527" comment="php7-ftp-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668528" comment="php7-gd-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668529" comment="php7-gettext-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668530" comment="php7-gmp-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668531" comment="php7-iconv-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668532" comment="php7-intl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668533" comment="php7-json-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668534" comment="php7-ldap-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668535" comment="php7-mbstring-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668536" comment="php7-mysql-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668537" comment="php7-odbc-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668538" comment="php7-opcache-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668539" comment="php7-openssl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668540" comment="php7-pcntl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668541" comment="php7-pdo-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668542" comment="php7-pear-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668543" comment="php7-pear-Archive_Tar-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668544" comment="php7-pgsql-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668545" comment="php7-phar-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668546" comment="php7-posix-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668547" comment="php7-readline-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668548" comment="php7-shmop-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668549" comment="php7-snmp-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668550" comment="php7-soap-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668551" comment="php7-sockets-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668552" comment="php7-sodium-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668553" comment="php7-sqlite-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668554" comment="php7-sysvmsg-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668555" comment="php7-sysvsem-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668556" comment="php7-sysvshm-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668572" comment="php7-tidy-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668557" comment="php7-tokenizer-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668558" comment="php7-wddx-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668559" comment="php7-xmlreader-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668560" comment="php7-xmlrpc-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668561" comment="php7-xmlwriter-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668562" comment="php7-xsl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668563" comment="php7-zip-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668564" comment="php7-zlib-7.2.5-4.89.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139625" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1195255" ref_url="https://bugzilla.suse.com/1195255" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23181" ref_url="https://www.suse.com/security/cve/CVE-2022-23181/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010339.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2022-23181: Fixed time of check, time of use vulnerability that allowed local privilege escalation. (bsc#1195255)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195255">SUSE bug 1195255</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23181/">CVE-2022-23181</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009668573" comment="tomcat-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668574" comment="tomcat-admin-webapps-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668575" comment="tomcat-el-3_0-api-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668576" comment="tomcat-jsp-2_3-api-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668577" comment="tomcat-lib-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668578" comment="tomcat-servlet-4_0-api-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668579" comment="tomcat-webapps-9.0.36-4.70.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139626" version="1" class="patch">
	<metadata>
		<title>Security update for cyrus-sasl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1196036" ref_url="https://bugzilla.suse.com/1196036" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24407" ref_url="https://www.suse.com/security/cve/CVE-2022-24407/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010340.html" source="SUSE-SU"/>
		<description>
This update for cyrus-sasl fixes the following issues:

- CVE-2022-24407: Fixed SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196036">SUSE bug 1196036</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24407/">CVE-2022-24407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669200" comment="cyrus-sasl-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669201" comment="cyrus-sasl-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669202" comment="cyrus-sasl-crammd5-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669203" comment="cyrus-sasl-crammd5-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669204" comment="cyrus-sasl-devel-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669205" comment="cyrus-sasl-digestmd5-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669206" comment="cyrus-sasl-digestmd5-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669207" comment="cyrus-sasl-gssapi-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669208" comment="cyrus-sasl-gssapi-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669209" comment="cyrus-sasl-otp-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669210" comment="cyrus-sasl-plain-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669211" comment="cyrus-sasl-plain-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669212" comment="cyrus-sasl-saslauthd-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669213" comment="cyrus-sasl-sqlauxprop-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669214" comment="libsasl2-3-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669215" comment="libsasl2-3-32bit-2.1.26-5.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139627" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1195064" ref_url="https://bugzilla.suse.com/1195064" source="BUGZILLA"/>
		<reference ref_id="1195735" ref_url="https://bugzilla.suse.com/1195735" source="BUGZILLA"/>
		<reference ref_id="1196133" ref_url="https://bugzilla.suse.com/1196133" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30934" ref_url="https://www.suse.com/security/cve/CVE-2021-30934/" source="CVE"/>
		<reference ref_id="CVE-2021-30936" ref_url="https://www.suse.com/security/cve/CVE-2021-30936/" source="CVE"/>
		<reference ref_id="CVE-2021-30951" ref_url="https://www.suse.com/security/cve/CVE-2021-30951/" source="CVE"/>
		<reference ref_id="CVE-2021-30952" ref_url="https://www.suse.com/security/cve/CVE-2021-30952/" source="CVE"/>
		<reference ref_id="CVE-2021-30953" ref_url="https://www.suse.com/security/cve/CVE-2021-30953/" source="CVE"/>
		<reference ref_id="CVE-2021-30954" ref_url="https://www.suse.com/security/cve/CVE-2021-30954/" source="CVE"/>
		<reference ref_id="CVE-2021-30984" ref_url="https://www.suse.com/security/cve/CVE-2021-30984/" source="CVE"/>
		<reference ref_id="CVE-2021-45481" ref_url="https://www.suse.com/security/cve/CVE-2021-45481/" source="CVE"/>
		<reference ref_id="CVE-2021-45482" ref_url="https://www.suse.com/security/cve/CVE-2021-45482/" source="CVE"/>
		<reference ref_id="CVE-2021-45483" ref_url="https://www.suse.com/security/cve/CVE-2021-45483/" source="CVE"/>
		<reference ref_id="CVE-2022-22589" ref_url="https://www.suse.com/security/cve/CVE-2022-22589/" source="CVE"/>
		<reference ref_id="CVE-2022-22590" ref_url="https://www.suse.com/security/cve/CVE-2022-22590/" source="CVE"/>
		<reference ref_id="CVE-2022-22592" ref_url="https://www.suse.com/security/cve/CVE-2022-22592/" source="CVE"/>
		<reference ref_id="CVE-2022-22594" ref_url="https://www.suse.com/security/cve/CVE-2022-22594/" source="CVE"/>
		<reference ref_id="CVE-2022-22620" ref_url="https://www.suse.com/security/cve/CVE-2022-22620/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010341.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.34.6 (bsc#1196133):

- CVE-2022-22620: Processing maliciously crafted web content may have lead to arbitrary code execution.

Update to version 2.34.5 (bsc#1195735):

- CVE-2022-22589: A validation issue was addressed with improved input sanitization.
- CVE-2022-22590: A use after free issue was addressed with improved memory management.
- CVE-2022-22592: A logic issue was addressed with improved state management.

Update to version 2.34.4 (bsc#1195064):

- CVE-2021-30934: A buffer overflow issue was addressed with improved memory handling.
- CVE-2021-30936: A use after free issue was addressed with improved memory management.
- CVE-2021-30951: A use after free issue was addressed with improved memory management.
- CVE-2021-30952: An integer overflow was addressed with improved input validation.
- CVE-2021-30953: An out-of-bounds read was addressed with improved bounds checking.
- CVE-2021-30954: A type confusion issue was addressed with improved memory handling.
- CVE-2021-30984: A race condition was addressed with improved state handling.
- CVE-2022-22594: A cross-origin issue in the IndexDB API was addressed with improved input validation.

The following CVEs were addressed in a previous update:

- CVE-2021-45481: Incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create.
- CVE-2021-45482: A use-after-free in WebCore::ContainerNode::firstChild.
- CVE-2021-45483: A use-after-free in WebCore::Frame::page.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195064">SUSE bug 1195064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195735">SUSE bug 1195735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196133">SUSE bug 1196133</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30934/">CVE-2021-30934</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30936/">CVE-2021-30936</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30951/">CVE-2021-30951</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30952/">CVE-2021-30952</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30953/">CVE-2021-30953</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30954/">CVE-2021-30954</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30984/">CVE-2021-30984</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45481/">CVE-2021-45481</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45482/">CVE-2021-45482</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45483/">CVE-2021-45483</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-22589/">CVE-2022-22589</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22590/">CVE-2022-22590</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-22592/">CVE-2022-22592</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22594/">CVE-2022-22594</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22620/">CVE-2022-22620</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670468" comment="libjavascriptcoregtk-4_0-18-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670469" comment="libwebkit2gtk-4_0-37-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670470" comment="libwebkit2gtk3-lang-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670471" comment="typelib-1_0-JavaScriptCore-4_0-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670472" comment="typelib-1_0-WebKit2-4_0-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670473" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670474" comment="webkit2gtk-4_0-injected-bundles-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670475" comment="webkit2gtk3-devel-2.34.6-3.97.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139628" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1191962" ref_url="https://bugzilla.suse.com/1191962" source="BUGZILLA"/>
		<reference ref_id="1191963" ref_url="https://bugzilla.suse.com/1191963" source="BUGZILLA"/>
		<reference ref_id="1192153" ref_url="https://bugzilla.suse.com/1192153" source="BUGZILLA"/>
		<reference ref_id="1192154" ref_url="https://bugzilla.suse.com/1192154" source="BUGZILLA"/>
		<reference ref_id="1192696" ref_url="https://bugzilla.suse.com/1192696" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23343" ref_url="https://www.suse.com/security/cve/CVE-2021-23343/" source="CVE"/>
		<reference ref_id="CVE-2021-32803" ref_url="https://www.suse.com/security/cve/CVE-2021-32803/" source="CVE"/>
		<reference ref_id="CVE-2021-32804" ref_url="https://www.suse.com/security/cve/CVE-2021-32804/" source="CVE"/>
		<reference ref_id="CVE-2021-3807" ref_url="https://www.suse.com/security/cve/CVE-2021-3807/" source="CVE"/>
		<reference ref_id="CVE-2021-3918" ref_url="https://www.suse.com/security/cve/CVE-2021-3918/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010344.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).
- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).
- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).
- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).
- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191962">SUSE bug 1191962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191963">SUSE bug 1191963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192153">SUSE bug 1192153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192154">SUSE bug 1192154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192696">SUSE bug 1192696</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23343/">CVE-2021-23343</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32803/">CVE-2021-32803</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32804/">CVE-2021-32804</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3807/">CVE-2021-3807</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3918/">CVE-2021-3918</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669756" comment="nodejs-common-2.0-3.4.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139629" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1196025" ref_url="https://bugzilla.suse.com/1196025" source="BUGZILLA"/>
		<reference ref_id="1196026" ref_url="https://bugzilla.suse.com/1196026" source="BUGZILLA"/>
		<reference ref_id="1196168" ref_url="https://bugzilla.suse.com/1196168" source="BUGZILLA"/>
		<reference ref_id="1196169" ref_url="https://bugzilla.suse.com/1196169" source="BUGZILLA"/>
		<reference ref_id="1196171" ref_url="https://bugzilla.suse.com/1196171" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25235" ref_url="https://www.suse.com/security/cve/CVE-2022-25235/" source="CVE"/>
		<reference ref_id="CVE-2022-25236" ref_url="https://www.suse.com/security/cve/CVE-2022-25236/" source="CVE"/>
		<reference ref_id="CVE-2022-25313" ref_url="https://www.suse.com/security/cve/CVE-2022-25313/" source="CVE"/>
		<reference ref_id="CVE-2022-25314" ref_url="https://www.suse.com/security/cve/CVE-2022-25314/" source="CVE"/>
		<reference ref_id="CVE-2022-25315" ref_url="https://www.suse.com/security/cve/CVE-2022-25315/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010357.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:
  
- CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs (bsc#1196025).
- CVE-2022-25235: Fixed UTF-8 character validation in a certain context (bsc#1196026).
- CVE-2022-25313: Fixed stack exhaustion in build_model() via uncontrolled recursion (bsc#1196168).
- CVE-2022-25314: Fixed integer overflow in copyString (bsc#1196169).
- CVE-2022-25315: Fixed integer overflow in storeRawNames (bsc#1196171).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196025">SUSE bug 1196025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196026">SUSE bug 1196026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196168">SUSE bug 1196168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196169">SUSE bug 1196169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196171">SUSE bug 1196171</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25235/">CVE-2022-25235</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25236/">CVE-2022-25236</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-25313/">CVE-2022-25313</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25314/">CVE-2022-25314</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25315/">CVE-2022-25315</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669763" comment="expat-2.2.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669764" comment="libexpat-devel-2.2.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669765" comment="libexpat1-2.2.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669165" comment="libexpat1-32bit-2.2.5-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139630" version="1" class="patch">
	<metadata>
		<title>Security update for wpa_supplicant (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1194732" ref_url="https://bugzilla.suse.com/1194732" source="BUGZILLA"/>
		<reference ref_id="1194733" ref_url="https://bugzilla.suse.com/1194733" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23303" ref_url="https://www.suse.com/security/cve/CVE-2022-23303/" source="CVE"/>
		<reference ref_id="CVE-2022-23304" ref_url="https://www.suse.com/security/cve/CVE-2022-23304/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010363.html" source="SUSE-SU"/>
		<description>
This update for wpa_supplicant fixes the following issues:
	  
- CVE-2022-23303: Fixed side-channel attacks in SAE (bsc#1194732).
- CVE-2022-23304: Fixed side-channel attacks in EAP-pwd (bsc#1194733).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194732">SUSE bug 1194732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194733">SUSE bug 1194733</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23303/">CVE-2022-23303</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23304/">CVE-2022-23304</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669199" comment="wpa_supplicant-2.9-4.33.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139631" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1195786" ref_url="https://bugzilla.suse.com/1195786" source="BUGZILLA"/>
		<reference ref_id="1196333" ref_url="https://bugzilla.suse.com/1196333" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0066" ref_url="https://www.suse.com/security/cve/CVE-2021-0066/" source="CVE"/>
		<reference ref_id="CVE-2021-0072" ref_url="https://www.suse.com/security/cve/CVE-2021-0072/" source="CVE"/>
		<reference ref_id="CVE-2021-0076" ref_url="https://www.suse.com/security/cve/CVE-2021-0076/" source="CVE"/>
		<reference ref_id="CVE-2021-0161" ref_url="https://www.suse.com/security/cve/CVE-2021-0161/" source="CVE"/>
		<reference ref_id="CVE-2021-0164" ref_url="https://www.suse.com/security/cve/CVE-2021-0164/" source="CVE"/>
		<reference ref_id="CVE-2021-0165" ref_url="https://www.suse.com/security/cve/CVE-2021-0165/" source="CVE"/>
		<reference ref_id="CVE-2021-0166" ref_url="https://www.suse.com/security/cve/CVE-2021-0166/" source="CVE"/>
		<reference ref_id="CVE-2021-0168" ref_url="https://www.suse.com/security/cve/CVE-2021-0168/" source="CVE"/>
		<reference ref_id="CVE-2021-0170" ref_url="https://www.suse.com/security/cve/CVE-2021-0170/" source="CVE"/>
		<reference ref_id="CVE-2021-0172" ref_url="https://www.suse.com/security/cve/CVE-2021-0172/" source="CVE"/>
		<reference ref_id="CVE-2021-0173" ref_url="https://www.suse.com/security/cve/CVE-2021-0173/" source="CVE"/>
		<reference ref_id="CVE-2021-0174" ref_url="https://www.suse.com/security/cve/CVE-2021-0174/" source="CVE"/>
		<reference ref_id="CVE-2021-0175" ref_url="https://www.suse.com/security/cve/CVE-2021-0175/" source="CVE"/>
		<reference ref_id="CVE-2021-0176" ref_url="https://www.suse.com/security/cve/CVE-2021-0176/" source="CVE"/>
		<reference ref_id="CVE-2021-0183" ref_url="https://www.suse.com/security/cve/CVE-2021-0183/" source="CVE"/>
		<reference ref_id="CVE-2021-33139" ref_url="https://www.suse.com/security/cve/CVE-2021-33139/" source="CVE"/>
		<reference ref_id="CVE-2021-33155" ref_url="https://www.suse.com/security/cve/CVE-2021-33155/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

- Update Intel Wireless firmware for 9xxx (CVE-2021-0161,
  CVE-2021-0164,CVE-2021-0165,CVE-2021-0066,CVE-2021-0166,
  CVE-2021-0168,CVE-2021-0170,CVE-2021-0172,CVE-2021-0173,
  CVE-2021-0174,CVE-2021-0175,CVE-2021-0076,CVE-2021-0176,
  CVE-2021-0183,CVE-2021-0072,INTEL-SA-00539,bsc#1196333):
  iwlwifi-9000-pu-b0-jf-b0-46.ucode
  iwlwifi-9000-pu-b0-jf-b0-46.ucode
- Update Intel Bluetooth firmware (CVE-2021-33139,CVE-2021-33155,
  INTEL-SA-00604,bsc#1195786)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195786">SUSE bug 1195786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0066/">CVE-2021-0066</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0072/">CVE-2021-0072</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0076/">CVE-2021-0076</cve>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0161/">CVE-2021-0161</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0164/">CVE-2021-0164</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0165/">CVE-2021-0165</cve>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0166/">CVE-2021-0166</cve>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0168/">CVE-2021-0168</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0170/">CVE-2021-0170</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0172/">CVE-2021-0172</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0173/">CVE-2021-0173</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0174/">CVE-2021-0174</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0175/">CVE-2021-0175</cve>
	<cve impact="important" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0176/">CVE-2021-0176</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0183/">CVE-2021-0183</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33139/">CVE-2021-33139</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33155/">CVE-2021-33155</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669993" comment="kernel-firmware-20200107-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669994" comment="ucode-amd-20200107-3.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139632" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1195866" ref_url="https://bugzilla.suse.com/1195866" source="BUGZILLA"/>
		<reference ref_id="1195867" ref_url="https://bugzilla.suse.com/1195867" source="BUGZILLA"/>
		<reference ref_id="1195868" ref_url="https://bugzilla.suse.com/1195868" source="BUGZILLA"/>
		<reference ref_id="1195869" ref_url="https://bugzilla.suse.com/1195869" source="BUGZILLA"/>
		<reference ref_id="1195870" ref_url="https://bugzilla.suse.com/1195870" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0581" ref_url="https://www.suse.com/security/cve/CVE-2022-0581/" source="CVE"/>
		<reference ref_id="CVE-2022-0582" ref_url="https://www.suse.com/security/cve/CVE-2022-0582/" source="CVE"/>
		<reference ref_id="CVE-2022-0583" ref_url="https://www.suse.com/security/cve/CVE-2022-0583/" source="CVE"/>
		<reference ref_id="CVE-2022-0585" ref_url="https://www.suse.com/security/cve/CVE-2022-0585/" source="CVE"/>
		<reference ref_id="CVE-2022-0586" ref_url="https://www.suse.com/security/cve/CVE-2022-0586/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010360.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

Update to Wireshark 3.6.2:

- CVE-2022-0586: RTMPT dissector infinite loop (bsc#1195866)
- CVE-2022-0585: Large loops in multiple dissectors (bsc#1195867)
- CVE-2022-0583: PVFS dissector crash (bsc#1195868)
- CVE-2022-0582: CSN.1 dissector crash (bsc#1195869)
- CVE-2022-0581: CMS dissector crash (bsc#1195870)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195866">SUSE bug 1195866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195867">SUSE bug 1195867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195868">SUSE bug 1195868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195869">SUSE bug 1195869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195870">SUSE bug 1195870</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0581/">CVE-2022-0581</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0582/">CVE-2022-0582</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0583/">CVE-2022-0583</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0585/">CVE-2022-0585</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0586/">CVE-2022-0586</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669985" comment="libwireshark15-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669986" comment="libwiretap12-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669987" comment="libwsutil13-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669988" comment="wireshark-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669989" comment="wireshark-devel-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669990" comment="wireshark-ui-qt-3.6.2-3.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139633" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1195325" ref_url="https://bugzilla.suse.com/1195325" source="BUGZILLA"/>
		<reference ref_id="1195334" ref_url="https://bugzilla.suse.com/1195334" source="BUGZILLA"/>
		<reference ref_id="1195339" ref_url="https://bugzilla.suse.com/1195339" source="BUGZILLA"/>
		<reference ref_id="1196016" ref_url="https://bugzilla.suse.com/1196016" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46657" ref_url="https://www.suse.com/security/cve/CVE-2021-46657/" source="CVE"/>
		<reference ref_id="CVE-2021-46658" ref_url="https://www.suse.com/security/cve/CVE-2021-46658/" source="CVE"/>
		<reference ref_id="CVE-2021-46659" ref_url="https://www.suse.com/security/cve/CVE-2021-46659/" source="CVE"/>
		<reference ref_id="CVE-2021-46661" ref_url="https://www.suse.com/security/cve/CVE-2021-46661/" source="CVE"/>
		<reference ref_id="CVE-2021-46663" ref_url="https://www.suse.com/security/cve/CVE-2021-46663/" source="CVE"/>
		<reference ref_id="CVE-2021-46664" ref_url="https://www.suse.com/security/cve/CVE-2021-46664/" source="CVE"/>
		<reference ref_id="CVE-2021-46665" ref_url="https://www.suse.com/security/cve/CVE-2021-46665/" source="CVE"/>
		<reference ref_id="CVE-2021-46668" ref_url="https://www.suse.com/security/cve/CVE-2021-46668/" source="CVE"/>
		<reference ref_id="CVE-2022-24048" ref_url="https://www.suse.com/security/cve/CVE-2022-24048/" source="CVE"/>
		<reference ref_id="CVE-2022-24050" ref_url="https://www.suse.com/security/cve/CVE-2022-24050/" source="CVE"/>
		<reference ref_id="CVE-2022-24051" ref_url="https://www.suse.com/security/cve/CVE-2022-24051/" source="CVE"/>
		<reference ref_id="CVE-2022-24052" ref_url="https://www.suse.com/security/cve/CVE-2022-24052/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010354.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

- Update to 10.2.43 (bsc#1196016):
    10.2.43: CVE-2021-46665
             CVE-2021-46664
             CVE-2021-46661
             CVE-2021-46668
             CVE-2021-46663 
    10.2.42: CVE-2022-24052
             CVE-2022-24051
             CVE-2022-24050
             CVE-2022-24048
             CVE-2021-46659, bsc#1195339
	     
- The following issues have already been fixed in this package but weren't 
previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195325">SUSE bug 1195325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195334">SUSE bug 1195334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195339">SUSE bug 1195339</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196016">SUSE bug 1196016</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46657/">CVE-2021-46657</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46658/">CVE-2021-46658</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46659/">CVE-2021-46659</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46661/">CVE-2021-46661</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46663/">CVE-2021-46663</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46664/">CVE-2021-46664</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46665/">CVE-2021-46665</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46668/">CVE-2021-46668</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24048/">CVE-2022-24048</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24050/">CVE-2022-24050</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24051/">CVE-2022-24051</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24052/">CVE-2022-24052</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669757" comment="libmysqld-devel-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669758" comment="libmysqld19-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669759" comment="mariadb-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669760" comment="mariadb-client-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669761" comment="mariadb-errormessages-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669762" comment="mariadb-tools-10.2.43-3.51.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139634" version="1" class="patch">
	<metadata>
		<title>Security update for zsh (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1163882" ref_url="https://bugzilla.suse.com/1163882" source="BUGZILLA"/>
		<reference ref_id="1196435" ref_url="https://bugzilla.suse.com/1196435" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20044" ref_url="https://www.suse.com/security/cve/CVE-2019-20044/" source="CVE"/>
		<reference ref_id="CVE-2021-45444" ref_url="https://www.suse.com/security/cve/CVE-2021-45444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010365.html" source="SUSE-SU"/>
		<description>
This update for zsh fixes the following issues:

- CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be 
  executed related to prompt expansion (bsc#1196435).
- CVE-2019-20044: Fixed a vulnerability where shell privileges would not be
  properly dropped when unsetting the PRIVILEGED option (bsc#1163882).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1163882">SUSE bug 1163882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196435">SUSE bug 1196435</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-20044/">CVE-2019-20044</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-45444/">CVE-2021-45444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670478" comment="zsh-5.6-7.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139635" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1190533" ref_url="https://bugzilla.suse.com/1190533" source="BUGZILLA"/>
		<reference ref_id="1190570" ref_url="https://bugzilla.suse.com/1190570" source="BUGZILLA"/>
		<reference ref_id="1191893" ref_url="https://bugzilla.suse.com/1191893" source="BUGZILLA"/>
		<reference ref_id="1192478" ref_url="https://bugzilla.suse.com/1192478" source="BUGZILLA"/>
		<reference ref_id="1192481" ref_url="https://bugzilla.suse.com/1192481" source="BUGZILLA"/>
		<reference ref_id="1193294" ref_url="https://bugzilla.suse.com/1193294" source="BUGZILLA"/>
		<reference ref_id="1193298" ref_url="https://bugzilla.suse.com/1193298" source="BUGZILLA"/>
		<reference ref_id="1194216" ref_url="https://bugzilla.suse.com/1194216" source="BUGZILLA"/>
		<reference ref_id="1194556" ref_url="https://bugzilla.suse.com/1194556" source="BUGZILLA"/>
		<reference ref_id="1195004" ref_url="https://bugzilla.suse.com/1195004" source="BUGZILLA"/>
		<reference ref_id="1195066" ref_url="https://bugzilla.suse.com/1195066" source="BUGZILLA"/>
		<reference ref_id="1195126" ref_url="https://bugzilla.suse.com/1195126" source="BUGZILLA"/>
		<reference ref_id="1195202" ref_url="https://bugzilla.suse.com/1195202" source="BUGZILLA"/>
		<reference ref_id="1195356" ref_url="https://bugzilla.suse.com/1195356" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3778" ref_url="https://www.suse.com/security/cve/CVE-2021-3778/" source="CVE"/>
		<reference ref_id="CVE-2021-3796" ref_url="https://www.suse.com/security/cve/CVE-2021-3796/" source="CVE"/>
		<reference ref_id="CVE-2021-3872" ref_url="https://www.suse.com/security/cve/CVE-2021-3872/" source="CVE"/>
		<reference ref_id="CVE-2021-3927" ref_url="https://www.suse.com/security/cve/CVE-2021-3927/" source="CVE"/>
		<reference ref_id="CVE-2021-3928" ref_url="https://www.suse.com/security/cve/CVE-2021-3928/" source="CVE"/>
		<reference ref_id="CVE-2021-3984" ref_url="https://www.suse.com/security/cve/CVE-2021-3984/" source="CVE"/>
		<reference ref_id="CVE-2021-4019" ref_url="https://www.suse.com/security/cve/CVE-2021-4019/" source="CVE"/>
		<reference ref_id="CVE-2021-4193" ref_url="https://www.suse.com/security/cve/CVE-2021-4193/" source="CVE"/>
		<reference ref_id="CVE-2021-46059" ref_url="https://www.suse.com/security/cve/CVE-2021-46059/" source="CVE"/>
		<reference ref_id="CVE-2022-0318" ref_url="https://www.suse.com/security/cve/CVE-2022-0318/" source="CVE"/>
		<reference ref_id="CVE-2022-0319" ref_url="https://www.suse.com/security/cve/CVE-2022-0319/" source="CVE"/>
		<reference ref_id="CVE-2022-0351" ref_url="https://www.suse.com/security/cve/CVE-2022-0351/" source="CVE"/>
		<reference ref_id="CVE-2022-0361" ref_url="https://www.suse.com/security/cve/CVE-2022-0361/" source="CVE"/>
		<reference ref_id="CVE-2022-0413" ref_url="https://www.suse.com/security/cve/CVE-2022-0413/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010366.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).
- CVE-2021-3796: Fixed use-after-free in nv_replace() in normal.c (bsc#1190570).
- CVE-2021-3872: Fixed heap-based buffer overflow in win_redr_status() drawscreen.c (bsc#1191893).
- CVE-2021-3927: Fixed heap-based buffer overflow (bsc#1192481).
- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).
- CVE-2021-4019: Fixed heap-based buffer overflow (bsc#1193294).
- CVE-2021-3984: Fixed illegal memory access when C-indenting could have led to heap buffer overflow (bsc#1193298).
- CVE-2021-3778: Fixed heap-based buffer overflow in regexp_nfa.c (bsc#1190533).
- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).
- CVE-2021-46059: Fixed pointer dereference vulnerability via the vim_regexec_multi function at regexp.c (bsc#1194556).
- CVE-2022-0319: Fixded out-of-bounds read (bsc#1195066).
- CVE-2022-0351: Fixed uncontrolled recursion in eval7() (bsc#1195126).
- CVE-2022-0361: Fixed buffer overflow (bsc#1195126).
- CVE-2022-0413: Fixed use-after-free in src/ex_cmds.c (bsc#1195356).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190533">SUSE bug 1190533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190570">SUSE bug 1190570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191893">SUSE bug 1191893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192478">SUSE bug 1192478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192481">SUSE bug 1192481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193294">SUSE bug 1193294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193298">SUSE bug 1193298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194216">SUSE bug 1194216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194556">SUSE bug 1194556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195004">SUSE bug 1195004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195066">SUSE bug 1195066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195126">SUSE bug 1195126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195202">SUSE bug 1195202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195356">SUSE bug 1195356</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3778/">CVE-2021-3778</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3796/">CVE-2021-3796</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3872/">CVE-2021-3872</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3927/">CVE-2021-3927</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3928/">CVE-2021-3928</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3984/">CVE-2021-3984</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4019/">CVE-2021-4019</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4193/">CVE-2021-4193</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46059/">CVE-2021-46059</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0318/">CVE-2022-0318</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0319/">CVE-2022-0319</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0351/">CVE-2022-0351</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-0361/">CVE-2022-0361</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0413/">CVE-2022-0413</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669991" comment="gvim-8.0.1568-5.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669992" comment="vim-8.0.1568-5.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669882" comment="vim-data-8.0.1568-5.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669883" comment="vim-data-common-8.0.1568-5.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139636" version="1" class="patch">
	<metadata>
		<title>Security update for libcaca (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182731" ref_url="https://bugzilla.suse.com/1182731" source="BUGZILLA"/>
		<reference ref_id="1184751" ref_url="https://bugzilla.suse.com/1184751" source="BUGZILLA"/>
		<reference ref_id="1184752" ref_url="https://bugzilla.suse.com/1184752" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30498" ref_url="https://www.suse.com/security/cve/CVE-2021-30498/" source="CVE"/>
		<reference ref_id="CVE-2021-30499" ref_url="https://www.suse.com/security/cve/CVE-2021-30499/" source="CVE"/>
		<reference ref_id="CVE-2021-3410" ref_url="https://www.suse.com/security/cve/CVE-2021-3410/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0754-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010388.html" source="SUSE-SU"/>
		<description>
This update for libcaca fixes the following issues:

- CVE-2021-30499: Fixed a memory corruption issue when exporting troff sources (bsc#1184751).
- CVE-2021-30498: Fixed a memory corruption issue when exporting TGA images (bsc#1184752).
- CVE-2021-3410: Fixed an illegal WRITE memory access (bsc#1182731).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-08"/>
	<updated date="2022-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182731">SUSE bug 1182731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184751">SUSE bug 1184751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184752">SUSE bug 1184752</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30498/">CVE-2021-30498</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30499/">CVE-2021-30499</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3410/">CVE-2021-3410</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670672" comment="libcaca-devel-0.99.beta19.git20171003-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670673" comment="libcaca0-0.99.beta19.git20171003-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670674" comment="libcaca0-plugins-0.99.beta19.git20171003-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139637" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1185973" ref_url="https://bugzilla.suse.com/1185973" source="BUGZILLA"/>
		<reference ref_id="1191580" ref_url="https://bugzilla.suse.com/1191580" source="BUGZILLA"/>
		<reference ref_id="1194516" ref_url="https://bugzilla.suse.com/1194516" source="BUGZILLA"/>
		<reference ref_id="1195536" ref_url="https://bugzilla.suse.com/1195536" source="BUGZILLA"/>
		<reference ref_id="1195543" ref_url="https://bugzilla.suse.com/1195543" source="BUGZILLA"/>
		<reference ref_id="1195612" ref_url="https://bugzilla.suse.com/1195612" source="BUGZILLA"/>
		<reference ref_id="1195840" ref_url="https://bugzilla.suse.com/1195840" source="BUGZILLA"/>
		<reference ref_id="1195897" ref_url="https://bugzilla.suse.com/1195897" source="BUGZILLA"/>
		<reference ref_id="1195908" ref_url="https://bugzilla.suse.com/1195908" source="BUGZILLA"/>
		<reference ref_id="1195949" ref_url="https://bugzilla.suse.com/1195949" source="BUGZILLA"/>
		<reference ref_id="1195987" ref_url="https://bugzilla.suse.com/1195987" source="BUGZILLA"/>
		<reference ref_id="1196079" ref_url="https://bugzilla.suse.com/1196079" source="BUGZILLA"/>
		<reference ref_id="1196155" ref_url="https://bugzilla.suse.com/1196155" source="BUGZILLA"/>
		<reference ref_id="1196584" ref_url="https://bugzilla.suse.com/1196584" source="BUGZILLA"/>
		<reference ref_id="1196612" ref_url="https://bugzilla.suse.com/1196612" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44879" ref_url="https://www.suse.com/security/cve/CVE-2021-44879/" source="CVE"/>
		<reference ref_id="CVE-2022-0001" ref_url="https://www.suse.com/security/cve/CVE-2022-0001/" source="CVE"/>
		<reference ref_id="CVE-2022-0002" ref_url="https://www.suse.com/security/cve/CVE-2022-0002/" source="CVE"/>
		<reference ref_id="CVE-2022-0487" ref_url="https://www.suse.com/security/cve/CVE-2022-0487/" source="CVE"/>
		<reference ref_id="CVE-2022-0492" ref_url="https://www.suse.com/security/cve/CVE-2022-0492/" source="CVE"/>
		<reference ref_id="CVE-2022-0617" ref_url="https://www.suse.com/security/cve/CVE-2022-0617/" source="CVE"/>
		<reference ref_id="CVE-2022-0644" ref_url="https://www.suse.com/security/cve/CVE-2022-0644/" source="CVE"/>
		<reference ref_id="CVE-2022-0847" ref_url="https://www.suse.com/security/cve/CVE-2022-0847/" source="CVE"/>
		<reference ref_id="CVE-2022-24448" ref_url="https://www.suse.com/security/cve/CVE-2022-24448/" source="CVE"/>
		<reference ref_id="CVE-2022-24959" ref_url="https://www.suse.com/security/cve/CVE-2022-24959/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010395.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


Transient execution side-channel attacks attacking the Branch History Buffer (BHB),
named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.

The following security bugs were fixed:

- CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).
- CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).
- CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584).
- CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079)
- CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd() (bsc#1196155).
- CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987).
- CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897).
- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
- CVE-2022-24448: Fixed an issue in fs/nfs/dir.c. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612).


The following non-security bugs were fixed:

- crypto: af_alg - get_page upon reassignment to TX SGL (bsc#1195840).
- lib/iov_iter: initialize 'flags' in new pipe_buffer (bsc#1196584).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185973">SUSE bug 1185973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191580">SUSE bug 1191580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194516">SUSE bug 1194516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195536">SUSE bug 1195536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195543">SUSE bug 1195543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195612">SUSE bug 1195612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195840">SUSE bug 1195840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195897">SUSE bug 1195897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195908">SUSE bug 1195908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195949">SUSE bug 1195949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195987">SUSE bug 1195987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196079">SUSE bug 1196079</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196155">SUSE bug 1196155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196584">SUSE bug 1196584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196612">SUSE bug 1196612</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-44879/">CVE-2021-44879</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0001/">CVE-2022-0001</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0002/">CVE-2022-0002</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0487/">CVE-2022-0487</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0492/">CVE-2022-0492</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0617/">CVE-2022-0617</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0644/">CVE-2022-0644</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0847/">CVE-2022-0847</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-24448/">CVE-2022-24448</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-24959/">CVE-2022-24959</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671488" comment="kernel-default-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671489" comment="kernel-default-base-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671490" comment="kernel-default-devel-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671491" comment="kernel-devel-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671492" comment="kernel-docs-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671493" comment="kernel-macros-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671494" comment="kernel-obs-build-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671495" comment="kernel-source-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671496" comment="kernel-syms-4.12.14-197.108.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139638" version="1" class="patch">
	<metadata>
		<title>Security update for tcpdump (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1195825" ref_url="https://bugzilla.suse.com/1195825" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16301" ref_url="https://www.suse.com/security/cve/CVE-2018-16301/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010403.html" source="SUSE-SU"/>
		<description>
This update for tcpdump fixes the following issues:

- CVE-2018-16301: Fixed segfault when handling large files (bsc#1195825).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1195825">SUSE bug 1195825</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16301/">CVE-2018-16301</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668002" comment="tcpdump-4.9.2-3.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139639" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1196809" ref_url="https://bugzilla.suse.com/1196809" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26485" ref_url="https://www.suse.com/security/cve/CVE-2022-26485/" source="CVE"/>
		<reference ref_id="CVE-2022-26486" ref_url="https://www.suse.com/security/cve/CVE-2022-26486/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010409.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.6.1 ESR (bsc#1196809):

- CVE-2022-26485: Use-after-free in XSLT parameter processing
- CVE-2022-26486: Use-after-free in WebGPU IPC Framework
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196809">SUSE bug 1196809</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26485/">CVE-2022-26485</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26486/">CVE-2022-26486</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671473" comment="MozillaFirefox-91.6.1-150.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671474" comment="MozillaFirefox-devel-91.6.1-150.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671475" comment="MozillaFirefox-translations-common-91.6.1-150.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671476" comment="MozillaFirefox-translations-other-91.6.1-150.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139640" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1196137" ref_url="https://bugzilla.suse.com/1196137" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:0779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010410.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- Remove hard log4j dependency, as it is not required by tomcat itself (bsc#1196137)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196137">SUSE bug 1196137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670690" comment="tomcat-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670691" comment="tomcat-admin-webapps-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670692" comment="tomcat-el-3_0-api-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670693" comment="tomcat-jsp-2_3-api-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670694" comment="tomcat-lib-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670695" comment="tomcat-servlet-4_0-api-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670696" comment="tomcat-webapps-9.0.36-4.73.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139641" version="1" class="patch">
	<metadata>
		<title>Security update for python-libxml2-python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1196490" ref_url="https://bugzilla.suse.com/1196490" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23308" ref_url="https://www.suse.com/security/cve/CVE-2022-23308/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010416.html" source="SUSE-SU"/>
		<description>
This update for python-libxml2-python fixes the following issues:

- CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes (bsc#1196490).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-10"/>
	<updated date="2022-03-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196490">SUSE bug 1196490</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-23308/">CVE-2022-23308</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670476" comment="python2-libxml2-python-2.9.7-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670477" comment="python3-libxml2-python-2.9.7-3.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139642" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1196900" ref_url="https://bugzilla.suse.com/1196900" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26381" ref_url="https://www.suse.com/security/cve/CVE-2022-26381/" source="CVE"/>
		<reference ref_id="CVE-2022-26383" ref_url="https://www.suse.com/security/cve/CVE-2022-26383/" source="CVE"/>
		<reference ref_id="CVE-2022-26384" ref_url="https://www.suse.com/security/cve/CVE-2022-26384/" source="CVE"/>
		<reference ref_id="CVE-2022-26386" ref_url="https://www.suse.com/security/cve/CVE-2022-26386/" source="CVE"/>
		<reference ref_id="CVE-2022-26387" ref_url="https://www.suse.com/security/cve/CVE-2022-26387/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010426.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.7.0 ESR (bsc#1196900):

- CVE-2022-26383: Browser window spoof using fullscreen mode
- CVE-2022-26384: iframe allow-scripts sandbox bypass
- CVE-2022-26387: Time-of-check time-of-use bug when verifying add-on signatures
- CVE-2022-26381: Use-after-free in text reflows
- CVE-2022-26386: Temporary files downloaded to /tmp and accessible by other local users
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196900">SUSE bug 1196900</bugzilla>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26381/">CVE-2022-26381</cve>
	<cve impact="critical" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-26383/">CVE-2022-26383</cve>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26384/">CVE-2022-26384</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26386/">CVE-2022-26386</cve>
	<cve impact="critical" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26387/">CVE-2022-26387</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009672522" comment="MozillaFirefox-91.7.0-150.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672523" comment="MozillaFirefox-devel-91.7.0-150.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672524" comment="MozillaFirefox-translations-common-91.7.0-150.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672525" comment="MozillaFirefox-translations-other-91.7.0-150.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139643" version="1" class="patch">
	<metadata>
		<title>Security update for SDL2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1181201" ref_url="https://bugzilla.suse.com/1181201" source="BUGZILLA"/>
		<reference ref_id="1181202" ref_url="https://bugzilla.suse.com/1181202" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14409" ref_url="https://www.suse.com/security/cve/CVE-2020-14409/" source="CVE"/>
		<reference ref_id="CVE-2020-14410" ref_url="https://www.suse.com/security/cve/CVE-2020-14410/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010429.html" source="SUSE-SU"/>
		<description>
This update for SDL2 fixes the following issues:

- CVE-2020-14409, CVE-2020-14410: Fixed overflow in surface pitch calculation (bsc#1181201, bsc#1181202).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181201">SUSE bug 1181201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181202">SUSE bug 1181202</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14409/">CVE-2020-14409</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14410/">CVE-2020-14410</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670675" comment="libSDL2-2_0-0-2.0.8-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670676" comment="libSDL2-devel-2.0.8-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139644" version="1" class="patch">
	<metadata>
		<title>Security update for sssd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182637" ref_url="https://bugzilla.suse.com/1182637" source="BUGZILLA"/>
		<reference ref_id="1189492" ref_url="https://bugzilla.suse.com/1189492" source="BUGZILLA"/>
		<reference ref_id="1190775" ref_url="https://bugzilla.suse.com/1190775" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3621" ref_url="https://www.suse.com/security/cve/CVE-2021-3621/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010431.html" source="SUSE-SU"/>
		<description>
This update for sssd fixes the following issues:

Security issues fixed:

- CVE-2021-3621: Fixed shell command injection in sssctl via the logs-fetch and cache-expire subcommands (bsc#1189492).

Non-security issues fixed:

- Create timestamp attribute in cache objects if missing. (bsc#1182637)
- Add 'ldap_ignore_unreadable_references' parameter to skip unreadable objects referenced by 'member' attributte (bsc#1190775).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182637">SUSE bug 1182637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189492">SUSE bug 1189492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190775">SUSE bug 1190775</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3621/">CVE-2021-3621</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671450" comment="libipa_hbac-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671451" comment="libipa_hbac0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671452" comment="libsss_certmap-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671453" comment="libsss_certmap0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671454" comment="libsss_idmap-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671455" comment="libsss_idmap0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671456" comment="libsss_nss_idmap-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671457" comment="libsss_nss_idmap0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671458" comment="libsss_simpleifp-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671459" comment="libsss_simpleifp0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671460" comment="python3-sssd-config-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671461" comment="sssd-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671462" comment="sssd-32bit-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671463" comment="sssd-ad-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671464" comment="sssd-dbus-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671465" comment="sssd-ipa-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671466" comment="sssd-krb5-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671467" comment="sssd-krb5-common-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671468" comment="sssd-ldap-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671469" comment="sssd-proxy-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671470" comment="sssd-tools-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671471" comment="sssd-wbclient-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671472" comment="sssd-wbclient-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671487" comment="sssd-winbind-idmap-1.16.1-8.64.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139645" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1193625" ref_url="https://bugzilla.suse.com/1193625" source="BUGZILLA"/>
		<reference ref_id="1194640" ref_url="https://bugzilla.suse.com/1194640" source="BUGZILLA"/>
		<reference ref_id="1194768" ref_url="https://bugzilla.suse.com/1194768" source="BUGZILLA"/>
		<reference ref_id="1194770" ref_url="https://bugzilla.suse.com/1194770" source="BUGZILLA"/>
		<reference ref_id="1195560" ref_url="https://bugzilla.suse.com/1195560" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-8985" ref_url="https://www.suse.com/security/cve/CVE-2015-8985/" source="CVE"/>
		<reference ref_id="CVE-2021-3999" ref_url="https://www.suse.com/security/cve/CVE-2021-3999/" source="CVE"/>
		<reference ref_id="CVE-2022-23218" ref_url="https://www.suse.com/security/cve/CVE-2022-23218/" source="CVE"/>
		<reference ref_id="CVE-2022-23219" ref_url="https://www.suse.com/security/cve/CVE-2022-23219/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010437.html" source="SUSE-SU"/>
		<description>

glibc was updated to fix the following issues:

Security issues fixed:

- CVE-2022-23219: Fixed Buffer overflow in sunrpc clnt_create for 'unix' (bsc#1194768)
- CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bsc#1194770)
- CVE-2021-3999: Fixed getcwd to set errno to ERANGE for size == 1 (bsc#1194640)
- CVE-2015-8985: Fixed Assertion failure in pop_fail_stack when executing a malformed regexp (bsc#1193625)

Also the following bug was fixed:

- Fix pthread_rwlock_try*lock stalls (bsc#1195560)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193625">SUSE bug 1193625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194640">SUSE bug 1194640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194768">SUSE bug 1194768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194770">SUSE bug 1194770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195560">SUSE bug 1195560</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8985/">CVE-2015-8985</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3999/">CVE-2021-3999</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-23218/">CVE-2022-23218</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-23219/">CVE-2022-23219</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669024" comment="glibc-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669025" comment="glibc-32bit-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669026" comment="glibc-devel-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669027" comment="glibc-devel-32bit-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669028" comment="glibc-devel-static-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669029" comment="glibc-extra-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669030" comment="glibc-i18ndata-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669031" comment="glibc-info-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669032" comment="glibc-locale-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669033" comment="glibc-locale-base-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669034" comment="glibc-locale-base-32bit-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669035" comment="glibc-profile-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669036" comment="glibc-utils-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669037" comment="nscd-2.26-13.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139646" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1196025" ref_url="https://bugzilla.suse.com/1196025" source="BUGZILLA"/>
		<reference ref_id="1196784" ref_url="https://bugzilla.suse.com/1196784" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25236" ref_url="https://www.suse.com/security/cve/CVE-2022-25236/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010445.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

- Fixed a regression caused by the patch for CVE-2022-25236 (bsc#1196784).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-15"/>
	<updated date="2022-03-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196025">SUSE bug 1196025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196784">SUSE bug 1196784</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25236/">CVE-2022-25236</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671236" comment="expat-2.2.5-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671237" comment="libexpat-devel-2.2.5-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671238" comment="libexpat1-2.2.5-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671084" comment="libexpat1-32bit-2.2.5-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139647" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1196877" ref_url="https://bugzilla.suse.com/1196877" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0778" ref_url="https://www.suse.com/security/cve/CVE-2022-0778/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010448.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-15"/>
	<updated date="2022-03-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196877">SUSE bug 1196877</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0778/">CVE-2022-0778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009672887" comment="libopenssl-1_1-devel-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672888" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672889" comment="libopenssl1_1-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672890" comment="libopenssl1_1-32bit-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672891" comment="libopenssl1_1-hmac-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672892" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672893" comment="openssl-1_1-1.1.0i-14.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139648" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1  (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1182959" ref_url="https://bugzilla.suse.com/1182959" source="BUGZILLA"/>
		<reference ref_id="1195149" ref_url="https://bugzilla.suse.com/1195149" source="BUGZILLA"/>
		<reference ref_id="1195792" ref_url="https://bugzilla.suse.com/1195792" source="BUGZILLA"/>
		<reference ref_id="1195856" ref_url="https://bugzilla.suse.com/1195856" source="BUGZILLA"/>
		<reference ref_id="1196877" ref_url="https://bugzilla.suse.com/1196877" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0778" ref_url="https://www.suse.com/security/cve/CVE-2022-0778/" source="CVE"/>
		<description>
This update for openssl-1_1 fixes the following issues:

openssl-1_1:

- CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
- Fix PAC pointer authentication in ARM (bsc#1195856)
- Pull libopenssl-1_1 when updating openssl-1_1 with the same version (bsc#1195792)
- FIPS: Fix function and reason error codes (bsc#1182959)
- Enable zlib compression support (bsc#1195149)
    
glibc:

- Resolve installation issue of `glibc-devel` in SUSE Linux Enterprise Micro 5.1
    
linux-glibc-devel:

- Resolve installation issue of `linux-kernel-headers` in SUSE Linux Enterprise Micro 5.1

libxcrypt:

- Resolve installation issue of `libxcrypt-devel` in SUSE Linux Enterprise Micro 5.1

zlib:

- Resolve installation issue of `zlib-devel` in SUSE Linux Enterprise Micro 5.1
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-16"/>
	<updated date="2022-03-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182959">SUSE bug 1182959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195149">SUSE bug 1195149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195792">SUSE bug 1195792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195856">SUSE bug 1195856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196877">SUSE bug 1196877</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0778/">CVE-2022-0778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673262" comment="libminizip1-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673263" comment="libz1-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673208" comment="libz1-32bit-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673264" comment="minizip-devel-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673265" comment="zlib-devel-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673222" comment="zlib-devel-32bit-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673266" comment="zlib-devel-static-1.2.11-3.26.10 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139649" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1197091" ref_url="https://bugzilla.suse.com/1197091" source="BUGZILLA"/>
		<reference ref_id="1197095" ref_url="https://bugzilla.suse.com/1197095" source="BUGZILLA"/>
		<reference ref_id="1197096" ref_url="https://bugzilla.suse.com/1197096" source="BUGZILLA"/>
		<reference ref_id="1197098" ref_url="https://bugzilla.suse.com/1197098" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22719" ref_url="https://www.suse.com/security/cve/CVE-2022-22719/" source="CVE"/>
		<reference ref_id="CVE-2022-22720" ref_url="https://www.suse.com/security/cve/CVE-2022-22720/" source="CVE"/>
		<reference ref_id="CVE-2022-22721" ref_url="https://www.suse.com/security/cve/CVE-2022-22721/" source="CVE"/>
		<reference ref_id="CVE-2022-23943" ref_url="https://www.suse.com/security/cve/CVE-2022-23943/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010499.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2022-23943: heap out-of-bounds write in mod_sed (bsc#1197098).
- CVE-2022-22720: HTTP request smuggling due to incorrect error handling (bsc#1197095).
- CVE-2022-22719: use of uninitialized value of in r:parsebody in mod_lua (bsc#1197091).
- CVE-2022-22721: possible buffer overflow with very large or unlimited LimitXMLRequestBody (bsc#1197096).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-22"/>
	<updated date="2022-03-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197091">SUSE bug 1197091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197095">SUSE bug 1197095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197096">SUSE bug 1197096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197098">SUSE bug 1197098</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22719/">CVE-2022-22719</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22720/">CVE-2022-22720</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22721/">CVE-2022-22721</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23943/">CVE-2022-23943</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673677" comment="apache2-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673678" comment="apache2-devel-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673679" comment="apache2-doc-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673680" comment="apache2-prefork-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673681" comment="apache2-utils-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673682" comment="apache2-worker-2.4.33-150000.3.66.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139650" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1196915" ref_url="https://bugzilla.suse.com/1196915" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26401" ref_url="https://www.suse.com/security/cve/CVE-2021-26401/" source="CVE"/>
		<reference ref_id="CVE-2022-0001" ref_url="https://www.suse.com/security/cve/CVE-2022-0001/" source="CVE"/>
		<reference ref_id="CVE-2022-0002" ref_url="https://www.suse.com/security/cve/CVE-2022-0002/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010501.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

Transient execution side-channel attacks attacking the Branch History Buffer (BHB),
named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.

- CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: BHB speculation issues (bsc#1196915).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-22"/>
	<updated date="2022-03-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196915">SUSE bug 1196915</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-26401/">CVE-2021-26401</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0001/">CVE-2022-0001</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0002/">CVE-2022-0002</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673267" comment="xen-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673268" comment="xen-devel-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673269" comment="xen-libs-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673270" comment="xen-tools-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673271" comment="xen-tools-domU-4.12.4_20-3.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139651" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1197135" ref_url="https://bugzilla.suse.com/1197135" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25220" ref_url="https://www.suse.com/security/cve/CVE-2021-25220/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0946-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010510.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- CVE-2021-25220: Fixed a DNS cache poisoning vulnerability due to loose
  caching rules (bsc#1197135).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-24"/>
	<updated date="2022-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197135">SUSE bug 1197135</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-25220/">CVE-2021-25220</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673904" comment="bind-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673905" comment="bind-chrootenv-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673906" comment="bind-devel-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673907" comment="bind-doc-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673908" comment="bind-utils-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673909" comment="libbind9-1600-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673910" comment="libdns1605-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673911" comment="libirs-devel-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673912" comment="libirs1601-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673913" comment="libisc1606-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673914" comment="libisccc1600-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673915" comment="libisccfg1600-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673916" comment="libns1604-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673917" comment="python3-bind-9.16.6-150000.12.60.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139652" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS</platform>
		</affected>
		<reference ref_id="1186756" ref_url="https://bugzilla.suse.com/1186756" source="BUGZILLA"/>
		<reference ref_id="1186761" ref_url="https://bugzilla.suse.com/1186761" source="BUGZILLA"/>
		<reference ref_id="1187852" ref_url="https://bugzilla.suse.com/1187852" source="BUGZILLA"/>
		<reference ref_id="1189166" ref_url="https://bugzilla.suse.com/1189166" source="BUGZILLA"/>
		<reference ref_id="1190718" ref_url="https://bugzilla.suse.com/1190718" source="BUGZILLA"/>
		<reference ref_id="1190719" ref_url="https://bugzilla.suse.com/1190719" source="BUGZILLA"/>
		<reference ref_id="1190722" ref_url="https://bugzilla.suse.com/1190722" source="BUGZILLA"/>
		<reference ref_id="1190723" ref_url="https://bugzilla.suse.com/1190723" source="BUGZILLA"/>
		<reference ref_id="1190726" ref_url="https://bugzilla.suse.com/1190726" source="BUGZILLA"/>
		<reference ref_id="1190729" ref_url="https://bugzilla.suse.com/1190729" source="BUGZILLA"/>
		<reference ref_id="1190733" ref_url="https://bugzilla.suse.com/1190733" source="BUGZILLA"/>
		<reference ref_id="1190734" ref_url="https://bugzilla.suse.com/1190734" source="BUGZILLA"/>
		<reference ref_id="1190735" ref_url="https://bugzilla.suse.com/1190735" source="BUGZILLA"/>
		<reference ref_id="1206442" ref_url="https://bugzilla.suse.com/1206442" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-20891" ref_url="https://www.suse.com/security/cve/CVE-2020-20891/" source="CVE"/>
		<reference ref_id="CVE-2020-20892" ref_url="https://www.suse.com/security/cve/CVE-2020-20892/" source="CVE"/>
		<reference ref_id="CVE-2020-20895" ref_url="https://www.suse.com/security/cve/CVE-2020-20895/" source="CVE"/>
		<reference ref_id="CVE-2020-20896" ref_url="https://www.suse.com/security/cve/CVE-2020-20896/" source="CVE"/>
		<reference ref_id="CVE-2020-20899" ref_url="https://www.suse.com/security/cve/CVE-2020-20899/" source="CVE"/>
		<reference ref_id="CVE-2020-20902" ref_url="https://www.suse.com/security/cve/CVE-2020-20902/" source="CVE"/>
		<reference ref_id="CVE-2020-22037" ref_url="https://www.suse.com/security/cve/CVE-2020-22037/" source="CVE"/>
		<reference ref_id="CVE-2020-22042" ref_url="https://www.suse.com/security/cve/CVE-2020-22042/" source="CVE"/>
		<reference ref_id="CVE-2020-35965" ref_url="https://www.suse.com/security/cve/CVE-2020-35965/" source="CVE"/>
		<reference ref_id="CVE-2021-3566" ref_url="https://www.suse.com/security/cve/CVE-2021-3566/" source="CVE"/>
		<reference ref_id="CVE-2021-38092" ref_url="https://www.suse.com/security/cve/CVE-2021-38092/" source="CVE"/>
		<reference ref_id="CVE-2021-38093" ref_url="https://www.suse.com/security/cve/CVE-2021-38093/" source="CVE"/>
		<reference ref_id="CVE-2021-38094" ref_url="https://www.suse.com/security/cve/CVE-2021-38094/" source="CVE"/>
		<reference ref_id="CVE-2022-3109" ref_url="https://www.suse.com/security/cve/CVE-2022-3109/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013405.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

- CVE-2022-3109: Fixed null pointer dereference in vp3_decode_frame() (bsc#1206442).
- CVE-2020-22042: Fixed a denial of service vulnerability led by a memory leak in the link_filter_inouts function in libavfilter/graphparser.c. (bsc#1186761)
- CVE-2021-38094: Fixed an integer overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c (bsc#1190735).
- CVE-2021-38093: Fixed an integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c (bsc#1190734).
- CVE-2021-38092: Fixed an Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c (bsc#1190733).
- CVE-2020-22037: Fixed a denial of service vulnerability due to a memory leak in avcodec_alloc_context3 at options.c (bsc#1186756).
- CVE-2021-3566: Fixed an exposure of sensitive information on ffmpeg version prior to 4.3 (bsc#1189166).
- CVE-2020-35965: Fixed an out-of-bounds write in decode_frame in libavcodec/exr.c (bsc#1187852).
- CVE-2020-20892: Fixed a division by zero in function filter_frame in libavfilter/vf_lenscorrection.c (bsc#1190719).
- CVE-2020-20891: Fixed a buffer overflow vulnerability in function config_input in libavfilter/vf_gblur.c (bsc#1190718).
- CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name in libavfilter/vf_avgblur.c (bsc#1190722).
- CVE-2020-20896: Fixed a NULL pointer dereference in function latm_write_packet in libavformat/latmenc.c (bsc#1190723).
- CVE-2020-20899: Fixed a buffer overflow vulnerability in function config_props in libavfilter/vf_bwdif.c (bsc#1190726).
- CVE-2020-20902: Fixed an out-of-bounds read vulnerability in long_term_filter function in g729postfilter.c (bsc#1190729).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-02"/>
	<updated date="2023-01-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186756">SUSE bug 1186756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186761">SUSE bug 1186761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187852">SUSE bug 1187852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189166">SUSE bug 1189166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190718">SUSE bug 1190718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190719">SUSE bug 1190719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190722">SUSE bug 1190722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190723">SUSE bug 1190723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190726">SUSE bug 1190726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190729">SUSE bug 1190729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190733">SUSE bug 1190733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190734">SUSE bug 1190734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190735">SUSE bug 1190735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206442">SUSE bug 1206442</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20891/">CVE-2020-20891</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20892/">CVE-2020-20892</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20895/">CVE-2020-20895</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20896/">CVE-2020-20896</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20899/">CVE-2020-20899</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20902/">CVE-2020-20902</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22037/">CVE-2020-22037</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22042/">CVE-2020-22042</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35965/">CVE-2020-35965</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3566/">CVE-2021-3566</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38092/">CVE-2021-38092</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38093/">CVE-2021-38093</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38094/">CVE-2021-38094</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3109/">CVE-2022-3109</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-espos:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341506" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009730500" comment="libavcodec-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730501" comment="libavcodec57-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730502" comment="libavcodec57-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730503" comment="libavdevice-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730504" comment="libavdevice57-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730505" comment="libavdevice57-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730506" comment="libavfilter-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730507" comment="libavfilter6-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730508" comment="libavfilter6-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730509" comment="libavformat-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730510" comment="libavformat57-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730511" comment="libavformat57-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730512" comment="libavresample-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730513" comment="libavresample3-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730514" comment="libavresample3-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730515" comment="libavutil-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730516" comment="libavutil55-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730517" comment="libavutil55-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730518" comment="libpostproc-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730519" comment="libpostproc54-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730520" comment="libpostproc54-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730521" comment="libswresample-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730522" comment="libswresample2-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730523" comment="libswresample2-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730524" comment="libswscale-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730525" comment="libswscale4-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730526" comment="libswscale4-32bit-3.4.2-150000.4.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139653" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183942" ref_url="https://bugzilla.suse.com/1183942" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23981" ref_url="https://www.suse.com/security/cve/CVE-2021-23981/" source="CVE"/>
		<reference ref_id="CVE-2021-23982" ref_url="https://www.suse.com/security/cve/CVE-2021-23982/" source="CVE"/>
		<reference ref_id="CVE-2021-23984" ref_url="https://www.suse.com/security/cve/CVE-2021-23984/" source="CVE"/>
		<reference ref_id="CVE-2021-23987" ref_url="https://www.suse.com/security/cve/CVE-2021-23987/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008579.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox was updated to 78.9.0 ESR  (MFSA 2021-11, bsc#1183942)
  * CVE-2021-23981: Texture upload into an unbound backing buffer resulted in an out-of-bound read
  * CVE-2021-23982: Internal network hosts could have been probed by a malicious webpage
  * CVE-2021-23984: Malicious extensions could have spoofed popup information
  * CVE-2021-23987: Memory safety bugs 	  
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-01"/>
	<updated date="2021-04-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183942">SUSE bug 1183942</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23981/">CVE-2021-23981</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23982/">CVE-2021-23982</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23984/">CVE-2021-23984</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23987/">CVE-2021-23987</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503118" comment="MozillaFirefox-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503119" comment="MozillaFirefox-branding-SLE-78-4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503120" comment="MozillaFirefox-devel-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503121" comment="MozillaFirefox-translations-common-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503122" comment="MozillaFirefox-translations-other-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503123" comment="mozilla-nspr-4.25.1-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493661" comment="mozilla-nspr-32bit-4.25.1-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503124" comment="mozilla-nspr-devel-4.25.1-3.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139654" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180947" ref_url="https://bugzilla.suse.com/1180947" source="BUGZILLA"/>
		<reference ref_id="1182909" ref_url="https://bugzilla.suse.com/1182909" source="BUGZILLA"/>
		<reference ref_id="1182912" ref_url="https://bugzilla.suse.com/1182912" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-24122" ref_url="https://www.suse.com/security/cve/CVE-2021-24122/" source="CVE"/>
		<reference ref_id="CVE-2021-25122" ref_url="https://www.suse.com/security/cve/CVE-2021-25122/" source="CVE"/>
		<reference ref_id="CVE-2021-25329" ref_url="https://www.suse.com/security/cve/CVE-2021-25329/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1009-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008578.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2021-24122: Fixed an information disclosure if resources are served from the NTFS file system (bsc#1180947).
- CVE-2021-25122: Apache Tomcat h2c request mix-up (bsc#1182912)
- CVE-2021-25329: Complete fix for CVE-2020-9484 (bsc#1182909)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-01"/>
	<updated date="2021-04-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180947">SUSE bug 1180947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182909">SUSE bug 1182909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182912">SUSE bug 1182912</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-24122/">CVE-2021-24122</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-25122/">CVE-2021-25122</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25329/">CVE-2021-25329</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503831" comment="tomcat-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503832" comment="tomcat-admin-webapps-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503833" comment="tomcat-el-3_0-api-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503834" comment="tomcat-jsp-2_3-api-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503835" comment="tomcat-lib-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503836" comment="tomcat-servlet-4_0-api-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503837" comment="tomcat-webapps-9.0.36-4.58.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139655" version="1" class="patch">
	<metadata>
		<title>Security update for OpenIPMI (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183178" ref_url="https://bugzilla.suse.com/1183178" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:1010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008580.html" source="SUSE-SU"/>
		<description>
This update for OpenIPMI fixes the following issues:

- Fixed an issue where OpenIPMI was creating non-position independent binaries (bsc#1183178).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-01"/>
	<updated date="2021-04-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1183178">SUSE bug 1183178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503838" comment="OpenIPMI-2.0.25-7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503839" comment="OpenIPMI-devel-2.0.25-7.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139656" version="1" class="patch">
	<metadata>
		<title>Security update for fwupdate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182057" ref_url="https://bugzilla.suse.com/1182057" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008599.html" source="SUSE-SU"/>
		<description>
This update for fwupdate fixes the following issues:

- Add SBAT section to EFI images (bsc#1182057)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-08"/>
	<updated date="2021-04-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182057">SUSE bug 1182057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493673" comment="fwupdate-12-11.8.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493674" comment="fwupdate-devel-12-11.8.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493675" comment="fwupdate-efi-12-11.8.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493676" comment="libfwup1-12-11.8.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139657" version="1" class="patch">
	<metadata>
		<title>Security update for umoci (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184147" ref_url="https://bugzilla.suse.com/1184147" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29136" ref_url="https://www.suse.com/security/cve/CVE-2021-29136/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008608.html" source="SUSE-SU"/>
		<description>
This update for umoci fixes the following issues:

- Update to umoci v0.4.6.
- CVE-2021-29136: malicious layer allows overwriting of host files (bsc#1184147)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-09"/>
	<updated date="2021-04-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184147">SUSE bug 1184147</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29136/">CVE-2021-29136</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503840" comment="umoci-0.4.6-3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139658" version="1" class="patch">
	<metadata>
		<title>Security update for spamassassin (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1159133" ref_url="https://bugzilla.suse.com/1159133" source="BUGZILLA"/>
		<reference ref_id="1184221" ref_url="https://bugzilla.suse.com/1184221" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12420" ref_url="https://www.suse.com/security/cve/CVE-2019-12420/" source="CVE"/>
		<reference ref_id="CVE-2020-1946" ref_url="https://www.suse.com/security/cve/CVE-2020-1946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008622.html" source="SUSE-SU"/>
		<description>
This update for spamassassin fixes the following issues:

- CVE-2019-12420: memory leak via crafted messages (bsc#1159133)
- CVE-2020-1946: security update (bsc#1184221)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-13"/>
	<updated date="2021-04-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159133">SUSE bug 1159133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184221">SUSE bug 1184221</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12420/">CVE-2019-12420</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1946/">CVE-2020-1946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503841" comment="perl-Mail-SpamAssassin-3.4.5-12.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503842" comment="perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503843" comment="spamassassin-3.4.5-12.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139659" version="1" class="patch">
	<metadata>
		<title>Security update for open-iscsi (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1173886" ref_url="https://bugzilla.suse.com/1173886" source="BUGZILLA"/>
		<reference ref_id="1179908" ref_url="https://bugzilla.suse.com/1179908" source="BUGZILLA"/>
		<reference ref_id="1183421" ref_url="https://bugzilla.suse.com/1183421" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13987" ref_url="https://www.suse.com/security/cve/CVE-2020-13987/" source="CVE"/>
		<reference ref_id="CVE-2020-13988" ref_url="https://www.suse.com/security/cve/CVE-2020-13988/" source="CVE"/>
		<reference ref_id="CVE-2020-17437" ref_url="https://www.suse.com/security/cve/CVE-2020-17437/" source="CVE"/>
		<reference ref_id="CVE-2020-17438" ref_url="https://www.suse.com/security/cve/CVE-2020-17438/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008619.html" source="SUSE-SU"/>
		<description>
This update for open-iscsi fixes the following issues:

- CVE-2020-17437: uIP Out-of-Bounds Write (bsc#1179908)
- CVE-2020-17438: uIP Out-of-Bounds Write (bsc#1179908)
- CVE-2020-13987: uIP Out-of-Bounds Read (bsc#1179908)
- CVE-2020-13988: uIP Integer Overflow (bsc#1179908)
- Enabled no-wait ('-W') iscsiadm option for iscsi login service (bsc#1173886, bsc#1183421)
- Added the ability to perform async logins (bsc#1173886)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-13"/>
	<updated date="2021-04-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173886">SUSE bug 1173886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179908">SUSE bug 1179908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183421">SUSE bug 1183421</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-13987/">CVE-2020-13987</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13988/">CVE-2020-13988</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-17437/">CVE-2020-17437</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-17438/">CVE-2020-17438</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503133" comment="iscsiuio-0.7.8.2-13.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503134" comment="libopeniscsiusr0_2_0-2.0.876-13.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503135" comment="open-iscsi-2.0.876-13.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503136" comment="open-iscsi-devel-2.0.876-13.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139660" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180128" ref_url="https://bugzilla.suse.com/1180128" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3472" ref_url="https://www.suse.com/security/cve/CVE-2021-3472/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008637.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation (bsc#1180128)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-14"/>
	<updated date="2021-04-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180128">SUSE bug 1180128</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3472/">CVE-2021-3472</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503844" comment="xorg-x11-server-1.20.3-14.5.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503845" comment="xorg-x11-server-extra-1.20.3-14.5.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503846" comment="xorg-x11-server-sdk-1.20.3-14.5.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139661" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181256" ref_url="https://bugzilla.suse.com/1181256" source="BUGZILLA"/>
		<reference ref_id="1184532" ref_url="https://bugzilla.suse.com/1184532" source="BUGZILLA"/>
		<reference ref_id="1184533" ref_url="https://bugzilla.suse.com/1184533" source="BUGZILLA"/>
		<reference ref_id="1184534" ref_url="https://bugzilla.suse.com/1184534" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-1252" ref_url="https://www.suse.com/security/cve/CVE-2021-1252/" source="CVE"/>
		<reference ref_id="CVE-2021-1404" ref_url="https://www.suse.com/security/cve/CVE-2021-1404/" source="CVE"/>
		<reference ref_id="CVE-2021-1405" ref_url="https://www.suse.com/security/cve/CVE-2021-1405/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008636.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

- CVE-2021-1252: Fix for Excel XLM parser infinite loop. (bsc#1184532)
- CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. (bsc#1184533)
- CVE-2021-1405: Fix for mail parser NULL-dereference crash. (bsc#1184534)
- Fix errors when scanning files &gt; 4G (bsc#1181256)
- Update clamav.keyring
- Update to 0.103.2
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-14"/>
	<updated date="2021-04-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181256">SUSE bug 1181256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184532">SUSE bug 1184532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184533">SUSE bug 1184533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184534">SUSE bug 1184534</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-1252/">CVE-2021-1252</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-1404/">CVE-2021-1404</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-1405/">CVE-2021-1405</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503140" comment="clamav-0.103.2-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503141" comment="clamav-devel-0.103.2-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503142" comment="libclamav9-0.103.2-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503143" comment="libfreshclam2-0.103.2-3.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139662" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1172383" ref_url="https://bugzilla.suse.com/1172383" source="BUGZILLA"/>
		<reference ref_id="1172384" ref_url="https://bugzilla.suse.com/1172384" source="BUGZILLA"/>
		<reference ref_id="1172385" ref_url="https://bugzilla.suse.com/1172385" source="BUGZILLA"/>
		<reference ref_id="1172386" ref_url="https://bugzilla.suse.com/1172386" source="BUGZILLA"/>
		<reference ref_id="1172478" ref_url="https://bugzilla.suse.com/1172478" source="BUGZILLA"/>
		<reference ref_id="1173612" ref_url="https://bugzilla.suse.com/1173612" source="BUGZILLA"/>
		<reference ref_id="1174386" ref_url="https://bugzilla.suse.com/1174386" source="BUGZILLA"/>
		<reference ref_id="1174641" ref_url="https://bugzilla.suse.com/1174641" source="BUGZILLA"/>
		<reference ref_id="1175441" ref_url="https://bugzilla.suse.com/1175441" source="BUGZILLA"/>
		<reference ref_id="1176673" ref_url="https://bugzilla.suse.com/1176673" source="BUGZILLA"/>
		<reference ref_id="1176682" ref_url="https://bugzilla.suse.com/1176682" source="BUGZILLA"/>
		<reference ref_id="1176684" ref_url="https://bugzilla.suse.com/1176684" source="BUGZILLA"/>
		<reference ref_id="1178049" ref_url="https://bugzilla.suse.com/1178049" source="BUGZILLA"/>
		<reference ref_id="1178174" ref_url="https://bugzilla.suse.com/1178174" source="BUGZILLA"/>
		<reference ref_id="1178565" ref_url="https://bugzilla.suse.com/1178565" source="BUGZILLA"/>
		<reference ref_id="1178934" ref_url="https://bugzilla.suse.com/1178934" source="BUGZILLA"/>
		<reference ref_id="1179466" ref_url="https://bugzilla.suse.com/1179466" source="BUGZILLA"/>
		<reference ref_id="1179467" ref_url="https://bugzilla.suse.com/1179467" source="BUGZILLA"/>
		<reference ref_id="1179468" ref_url="https://bugzilla.suse.com/1179468" source="BUGZILLA"/>
		<reference ref_id="1179686" ref_url="https://bugzilla.suse.com/1179686" source="BUGZILLA"/>
		<reference ref_id="1180523" ref_url="https://bugzilla.suse.com/1180523" source="BUGZILLA"/>
		<reference ref_id="1181108" ref_url="https://bugzilla.suse.com/1181108" source="BUGZILLA"/>
		<reference ref_id="1181639" ref_url="https://bugzilla.suse.com/1181639" source="BUGZILLA"/>
		<reference ref_id="1181933" ref_url="https://bugzilla.suse.com/1181933" source="BUGZILLA"/>
		<reference ref_id="1182137" ref_url="https://bugzilla.suse.com/1182137" source="BUGZILLA"/>
		<reference ref_id="1182425" ref_url="https://bugzilla.suse.com/1182425" source="BUGZILLA"/>
		<reference ref_id="1182577" ref_url="https://bugzilla.suse.com/1182577" source="BUGZILLA"/>
		<reference ref_id="1182968" ref_url="https://bugzilla.suse.com/1182968" source="BUGZILLA"/>
		<reference ref_id="1183979" ref_url="https://bugzilla.suse.com/1183979" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11947" ref_url="https://www.suse.com/security/cve/CVE-2020-11947/" source="CVE"/>
		<reference ref_id="CVE-2020-12829" ref_url="https://www.suse.com/security/cve/CVE-2020-12829/" source="CVE"/>
		<reference ref_id="CVE-2020-13361" ref_url="https://www.suse.com/security/cve/CVE-2020-13361/" source="CVE"/>
		<reference ref_id="CVE-2020-13362" ref_url="https://www.suse.com/security/cve/CVE-2020-13362/" source="CVE"/>
		<reference ref_id="CVE-2020-13659" ref_url="https://www.suse.com/security/cve/CVE-2020-13659/" source="CVE"/>
		<reference ref_id="CVE-2020-13765" ref_url="https://www.suse.com/security/cve/CVE-2020-13765/" source="CVE"/>
		<reference ref_id="CVE-2020-14364" ref_url="https://www.suse.com/security/cve/CVE-2020-14364/" source="CVE"/>
		<reference ref_id="CVE-2020-15469" ref_url="https://www.suse.com/security/cve/CVE-2020-15469/" source="CVE"/>
		<reference ref_id="CVE-2020-15863" ref_url="https://www.suse.com/security/cve/CVE-2020-15863/" source="CVE"/>
		<reference ref_id="CVE-2020-16092" ref_url="https://www.suse.com/security/cve/CVE-2020-16092/" source="CVE"/>
		<reference ref_id="CVE-2020-25084" ref_url="https://www.suse.com/security/cve/CVE-2020-25084/" source="CVE"/>
		<reference ref_id="CVE-2020-25624" ref_url="https://www.suse.com/security/cve/CVE-2020-25624/" source="CVE"/>
		<reference ref_id="CVE-2020-25625" ref_url="https://www.suse.com/security/cve/CVE-2020-25625/" source="CVE"/>
		<reference ref_id="CVE-2020-25723" ref_url="https://www.suse.com/security/cve/CVE-2020-25723/" source="CVE"/>
		<reference ref_id="CVE-2020-27617" ref_url="https://www.suse.com/security/cve/CVE-2020-27617/" source="CVE"/>
		<reference ref_id="CVE-2020-27821" ref_url="https://www.suse.com/security/cve/CVE-2020-27821/" source="CVE"/>
		<reference ref_id="CVE-2020-28916" ref_url="https://www.suse.com/security/cve/CVE-2020-28916/" source="CVE"/>
		<reference ref_id="CVE-2020-29129" ref_url="https://www.suse.com/security/cve/CVE-2020-29129/" source="CVE"/>
		<reference ref_id="CVE-2020-29130" ref_url="https://www.suse.com/security/cve/CVE-2020-29130/" source="CVE"/>
		<reference ref_id="CVE-2020-29443" ref_url="https://www.suse.com/security/cve/CVE-2020-29443/" source="CVE"/>
		<reference ref_id="CVE-2021-20181" ref_url="https://www.suse.com/security/cve/CVE-2021-20181/" source="CVE"/>
		<reference ref_id="CVE-2021-20203" ref_url="https://www.suse.com/security/cve/CVE-2021-20203/" source="CVE"/>
		<reference ref_id="CVE-2021-20221" ref_url="https://www.suse.com/security/cve/CVE-2021-20221/" source="CVE"/>
		<reference ref_id="CVE-2021-20257" ref_url="https://www.suse.com/security/cve/CVE-2021-20257/" source="CVE"/>
		<reference ref_id="CVE-2021-3416" ref_url="https://www.suse.com/security/cve/CVE-2021-3416/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:


- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383)
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)
- Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)
- Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174)
- Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468)
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612)
- Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577)
- Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)
- Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416)
- Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659 bsc#1172386)
- Fix issue where s390 guest fails to find zipl boot menu index (bsc#1183979)
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
- Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)
- Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137)
- Apply fixes to qemu scsi passthrough with respect to timeout and error conditions, including using more correct status codes. (bsc#1178049)
- Fix OOB access in ARM interrupt handling (CVE-2021-20221 bsc#1181933)
- Tweaks to spec file for better formatting, and remove not needed BuildRequires for e2fsprogs-devel and libpcap-devel
- Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384)
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
- Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441)
- Fix DoS in packet processing of various emulated NICs (CVE-2020-16092 bsc#1174641)
- Fix buffer overflow in the XGMAC device (CVE-2020-15863 bsc#1174386)
- Use '%service_del_postun_without_restart' instead of '%service_del_postun' to avoid 'Failed to try-restart qemu-ga@.service' error while updating the qemu-guest-agent. (bsc#1178565)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-16"/>
	<updated date="2021-04-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172383">SUSE bug 1172383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172384">SUSE bug 1172384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172385">SUSE bug 1172385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172386">SUSE bug 1172386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172478">SUSE bug 1172478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173612">SUSE bug 1173612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174386">SUSE bug 1174386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174641">SUSE bug 1174641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175441">SUSE bug 1175441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176673">SUSE bug 1176673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176682">SUSE bug 1176682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176684">SUSE bug 1176684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178049">SUSE bug 1178049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178174">SUSE bug 1178174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178565">SUSE bug 1178565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178934">SUSE bug 1178934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179466">SUSE bug 1179466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179467">SUSE bug 1179467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179468">SUSE bug 1179468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179686">SUSE bug 1179686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180523">SUSE bug 1180523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181108">SUSE bug 1181108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181639">SUSE bug 1181639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181933">SUSE bug 1181933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182137">SUSE bug 1182137</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182425">SUSE bug 1182425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182577">SUSE bug 1182577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182968">SUSE bug 1182968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183979">SUSE bug 1183979</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11947/">CVE-2020-11947</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12829/">CVE-2020-12829</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13361/">CVE-2020-13361</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13362/">CVE-2020-13362</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13659/">CVE-2020-13659</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13765/">CVE-2020-13765</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14364/">CVE-2020-14364</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15469/">CVE-2020-15469</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15863/">CVE-2020-15863</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16092/">CVE-2020-16092</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-25084/">CVE-2020-25084</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-25624/">CVE-2020-25624</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25625/">CVE-2020-25625</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25723/">CVE-2020-25723</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27617/">CVE-2020-27617</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-27821/">CVE-2020-27821</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28916/">CVE-2020-28916</cve>
	<cve impact="low" cvss3="2.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29129/">CVE-2020-29129</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29130/">CVE-2020-29130</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-29443/">CVE-2020-29443</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20181/">CVE-2021-20181</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20203/">CVE-2021-20203</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-20221/">CVE-2021-20221</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20257/">CVE-2021-20257</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3416/">CVE-2021-3416</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503847" comment="qemu-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503848" comment="qemu-arm-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503849" comment="qemu-audio-alsa-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503850" comment="qemu-audio-oss-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503851" comment="qemu-audio-pa-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503852" comment="qemu-block-curl-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503853" comment="qemu-block-iscsi-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503854" comment="qemu-block-rbd-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503855" comment="qemu-block-ssh-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503856" comment="qemu-guest-agent-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503857" comment="qemu-ipxe-1.0.0+-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503858" comment="qemu-kvm-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503859" comment="qemu-lang-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503860" comment="qemu-seabios-1.12.0_0_ga698c89-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503861" comment="qemu-sgabios-8-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503862" comment="qemu-tools-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503863" comment="qemu-ui-curses-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503864" comment="qemu-ui-gtk-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503865" comment="qemu-vgabios-1.12.0_0_ga698c89-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503866" comment="qemu-x86-3.1.1.1-9.24.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139663" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183936" ref_url="https://bugzilla.suse.com/1183936" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3156" ref_url="https://www.suse.com/security/cve/CVE-2021-3156/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008661.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:

- L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-20"/>
	<updated date="2021-04-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183936">SUSE bug 1183936</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3156/">CVE-2021-3156</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503164" comment="sudo-1.8.22-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503165" comment="sudo-devel-1.8.22-4.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139664" version="1" class="patch">
	<metadata>
		<title>Security update for libnettle (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184401" ref_url="https://bugzilla.suse.com/1184401" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20305" ref_url="https://www.suse.com/security/cve/CVE-2021-20305/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008693.html" source="SUSE-SU"/>
		<description>
This update for libnettle fixes the following issues:

- CVE-2021-20305: Fixed the multiply function which was being called with out-of-range scalars (bsc#1184401).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184401">SUSE bug 1184401</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20305/">CVE-2021-20305</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503185" comment="libhogweed4-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493746" comment="libhogweed4-32bit-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503186" comment="libnettle-devel-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503187" comment="libnettle6-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493749" comment="libnettle6-32bit-3.4.1-4.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139665" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184960" ref_url="https://bugzilla.suse.com/1184960" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23961" ref_url="https://www.suse.com/security/cve/CVE-2021-23961/" source="CVE"/>
		<reference ref_id="CVE-2021-23994" ref_url="https://www.suse.com/security/cve/CVE-2021-23994/" source="CVE"/>
		<reference ref_id="CVE-2021-23995" ref_url="https://www.suse.com/security/cve/CVE-2021-23995/" source="CVE"/>
		<reference ref_id="CVE-2021-23998" ref_url="https://www.suse.com/security/cve/CVE-2021-23998/" source="CVE"/>
		<reference ref_id="CVE-2021-23999" ref_url="https://www.suse.com/security/cve/CVE-2021-23999/" source="CVE"/>
		<reference ref_id="CVE-2021-24002" ref_url="https://www.suse.com/security/cve/CVE-2021-24002/" source="CVE"/>
		<reference ref_id="CVE-2021-29945" ref_url="https://www.suse.com/security/cve/CVE-2021-29945/" source="CVE"/>
		<reference ref_id="CVE-2021-29946" ref_url="https://www.suse.com/security/cve/CVE-2021-29946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008700.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- MozillaFirefox was updated to 78.10.0 ESR (bsc#1184960)
  * CVE-2021-23994: Out of bound write due to lazy initialization
  * CVE-2021-23995: Use-after-free in Responsive Design Mode
  * CVE-2021-23998: Secure Lock icon could have been spoofed
  * CVE-2021-23961: More internal network hosts could have been probed by a malicious webpage
  * CVE-2021-23999: Blob URLs may have been granted additional privileges
  * CVE-2021-24002: Arbitrary FTP command execution on FTP servers using an encoded URL
  * CVE-2021-29945: Incorrect size computation in WebAssembly JIT could lead to null-reads
  * CVE-2021-29946: Port blocking could be bypassed
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-29"/>
	<updated date="2021-04-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184960">SUSE bug 1184960</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23961/">CVE-2021-23961</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23994/">CVE-2021-23994</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23995/">CVE-2021-23995</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23998/">CVE-2021-23998</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23999/">CVE-2021-23999</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-24002/">CVE-2021-24002</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29945/">CVE-2021-29945</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29946/">CVE-2021-29946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503188" comment="MozillaFirefox-78.10.0-3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503189" comment="MozillaFirefox-devel-78.10.0-3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503190" comment="MozillaFirefox-translations-common-78.10.0-3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503191" comment="MozillaFirefox-translations-other-78.10.0-3.139.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139666" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184161" ref_url="https://bugzilla.suse.com/1184161" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25317" ref_url="https://www.suse.com/security/cve/CVE-2021-25317/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008715.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:

- CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks (bsc#1184161)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-30"/>
	<updated date="2021-04-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184161">SUSE bug 1184161</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-25317/">CVE-2021-25317</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503257" comment="cups-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503258" comment="cups-client-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503259" comment="cups-config-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503260" comment="cups-ddk-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503261" comment="cups-devel-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503262" comment="libcups2-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493827" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503263" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503264" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503265" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503266" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139667" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1177204" ref_url="https://bugzilla.suse.com/1177204" source="BUGZILLA"/>
		<reference ref_id="1178591" ref_url="https://bugzilla.suse.com/1178591" source="BUGZILLA"/>
		<reference ref_id="1179148" ref_url="https://bugzilla.suse.com/1179148" source="BUGZILLA"/>
		<reference ref_id="1181254" ref_url="https://bugzilla.suse.com/1181254" source="BUGZILLA"/>
		<reference ref_id="1181989" ref_url="https://bugzilla.suse.com/1181989" source="BUGZILLA"/>
		<reference ref_id="1183072" ref_url="https://bugzilla.suse.com/1183072" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28368" ref_url="https://www.suse.com/security/cve/CVE-2020-28368/" source="CVE"/>
		<reference ref_id="CVE-2021-28687" ref_url="https://www.suse.com/security/cve/CVE-2021-28687/" source="CVE"/>
		<reference ref_id="CVE-2021-3308" ref_url="https://www.suse.com/security/cve/CVE-2021-3308/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008718.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2020-28368: Intel RAPL sidechannel attack aka PLATYPUS attack (bsc#1178591, XSA-351) 
- CVE-2021-3308: IRQ vector leak on x86 (bsc#1181254, XSA-360)
- CVE-2021-28687: HVM soft-reset crashes toolstack (bsc#1183072, XSA-368) 
- L3: conring size for XEN HV's with huge memory to small (bsc#1177204).
- kdump of HVM fails, soft-reset not handled by libxl (bsc#1179148)
- openQA job causes libvirtd to dump core when running kdump inside domain (bsc#1181989).
- Upstream bug fixes (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-30"/>
	<updated date="2021-04-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177204">SUSE bug 1177204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178591">SUSE bug 1178591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179148">SUSE bug 1179148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181254">SUSE bug 1181254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181989">SUSE bug 1181989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183072">SUSE bug 1183072</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-28368/">CVE-2020-28368</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28687/">CVE-2021-28687</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3308/">CVE-2021-3308</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503867" comment="xen-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503868" comment="xen-devel-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503869" comment="xen-libs-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503870" comment="xen-tools-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503871" comment="xen-tools-domU-4.12.4_08-3.43.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139668" version="1" class="patch">
	<metadata>
		<title>Security update for stunnel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177580" ref_url="https://bugzilla.suse.com/1177580" source="BUGZILLA"/>
		<reference ref_id="1182529" ref_url="https://bugzilla.suse.com/1182529" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20230" ref_url="https://www.suse.com/security/cve/CVE-2021-20230/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008719.html" source="SUSE-SU"/>
		<description>
This update for stunnel fixes the following issues:

- Security fix: [bsc#1177580, bsc#1182529, CVE-2021-20230]
  * 'redirect' option does not properly handle 'verifyChain = yes'
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-03"/>
	<updated date="2021-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177580">SUSE bug 1177580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182529">SUSE bug 1182529</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-20230/">CVE-2021-20230</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503269" comment="stunnel-5.44-3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139669" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183453" ref_url="https://bugzilla.suse.com/1183453" source="BUGZILLA"/>
		<reference ref_id="1185345" ref_url="https://bugzilla.suse.com/1185345" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25214" ref_url="https://www.suse.com/security/cve/CVE-2021-25214/" source="CVE"/>
		<reference ref_id="CVE-2021-25215" ref_url="https://www.suse.com/security/cve/CVE-2021-25215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1471-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008724.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- CVE-2021-25214: Fixed a broken inbound incremental zone update (IXFR) which could have caused named to terminate unexpectedly (bsc#1185345).
- CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that required the DNAME to be processed to resolve itself (bsc#1185345).
- make /usr/bin/delv in bind-tools position independent (bsc#1183453).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183453">SUSE bug 1183453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185345">SUSE bug 1185345</bugzilla>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-25214/">CVE-2021-25214</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-25215/">CVE-2021-25215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503270" comment="bind-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503271" comment="bind-chrootenv-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503272" comment="bind-devel-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499852" comment="bind-doc-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503273" comment="bind-utils-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503274" comment="libbind9-1600-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503275" comment="libdns1605-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503276" comment="libirs-devel-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503277" comment="libirs1601-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503278" comment="libisc1606-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503279" comment="libisccc1600-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503280" comment="libisccfg1600-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503281" comment="libns1604-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493844" comment="python3-bind-9.16.6-12.49.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139670" version="1" class="patch">
	<metadata>
		<title>Security update for ceph (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1145463" ref_url="https://bugzilla.suse.com/1145463" source="BUGZILLA"/>
		<reference ref_id="1174466" ref_url="https://bugzilla.suse.com/1174466" source="BUGZILLA"/>
		<reference ref_id="1177200" ref_url="https://bugzilla.suse.com/1177200" source="BUGZILLA"/>
		<reference ref_id="1178235" ref_url="https://bugzilla.suse.com/1178235" source="BUGZILLA"/>
		<reference ref_id="1178837" ref_url="https://bugzilla.suse.com/1178837" source="BUGZILLA"/>
		<reference ref_id="1178860" ref_url="https://bugzilla.suse.com/1178860" source="BUGZILLA"/>
		<reference ref_id="1178905" ref_url="https://bugzilla.suse.com/1178905" source="BUGZILLA"/>
		<reference ref_id="1179997" ref_url="https://bugzilla.suse.com/1179997" source="BUGZILLA"/>
		<reference ref_id="1180118" ref_url="https://bugzilla.suse.com/1180118" source="BUGZILLA"/>
		<reference ref_id="1180594" ref_url="https://bugzilla.suse.com/1180594" source="BUGZILLA"/>
		<reference ref_id="1181378" ref_url="https://bugzilla.suse.com/1181378" source="BUGZILLA"/>
		<reference ref_id="1183074" ref_url="https://bugzilla.suse.com/1183074" source="BUGZILLA"/>
		<reference ref_id="1183487" ref_url="https://bugzilla.suse.com/1183487" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25678" ref_url="https://www.suse.com/security/cve/CVE-2020-25678/" source="CVE"/>
		<reference ref_id="CVE-2020-27839" ref_url="https://www.suse.com/security/cve/CVE-2020-27839/" source="CVE"/>
		<reference ref_id="CVE-2021-20288" ref_url="https://www.suse.com/security/cve/CVE-2021-20288/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008721.html" source="SUSE-SU"/>
		<description>
This update for ceph fixes the following issues:

- ceph was updated to 14.2.20-402-g6aa76c6815:
    * CVE-2021-20288: Fixed unauthorized global_id reuse (bsc#1183074).
    * CVE-2020-25678: Do not add sensitive information in Ceph log files (bsc#1178905).
    * CVE-2020-27839: Use secure cookies to store JWT Token (bsc#1179997). 
    * mgr/dashboard: prometheus alerting: add some leeway for package drops and errors (bsc#1145463) 
    * mon: have 'mon stat' output json as well (bsc#1174466) 
    * rpm: ceph-mgr-dashboard recommends python3-saml on SUSE (bsc#1177200) 
    * mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled (bsc#1178235) 
    * rgw: cls/user: set from_index for reset stats calls (bsc#1178837) 
    * mgr/dashboard: Disable TLS 1.0 and 1.1 (bsc#1178860)
    * bluestore: provide a different name for fallback allocator (bsc#1180118) 
    * test/run-cli-tests: use cram from github (bsc#1181378) 
    * mgr/dashboard: fix 'Python2 Cookie module import fails on Python3' (bsc#1183487) 
    * common: make ms_bind_msgr2 default to 'false' (bsc#1180594) 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1145463">SUSE bug 1145463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174466">SUSE bug 1174466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177200">SUSE bug 1177200</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178235">SUSE bug 1178235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178837">SUSE bug 1178837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178860">SUSE bug 1178860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178905">SUSE bug 1178905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179997">SUSE bug 1179997</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180118">SUSE bug 1180118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180594">SUSE bug 1180594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181378">SUSE bug 1181378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183074">SUSE bug 1183074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183487">SUSE bug 1183487</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25678/">CVE-2020-25678</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27839/">CVE-2020-27839</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20288/">CVE-2021-20288</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503872" comment="ceph-common-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503873" comment="libcephfs-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503874" comment="libcephfs2-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503875" comment="librados-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503876" comment="librados2-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503877" comment="libradospp-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503878" comment="librbd-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503879" comment="librbd1-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503880" comment="librgw-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503881" comment="librgw2-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503882" comment="python3-ceph-argparse-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503883" comment="python3-cephfs-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503884" comment="python3-rados-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503885" comment="python3-rbd-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503886" comment="python3-rgw-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503887" comment="rados-objclass-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139671" version="1" class="patch">
	<metadata>
		<title>Security update for avahi (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184521" ref_url="https://bugzilla.suse.com/1184521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3468" ref_url="https://www.suse.com/security/cve/CVE-2021-3468/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1493-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008937.html" source="SUSE-SU"/>
		<description>
This update for avahi fixes the following issues:

- CVE-2021-3468: avoid infinite loop by handling  HUP event in client_work (bsc#1184521).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1184521">SUSE bug 1184521</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3468/">CVE-2021-3468</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503888" comment="avahi-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503889" comment="avahi-autoipd-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503890" comment="avahi-compat-howl-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503891" comment="avahi-compat-mDNSResponder-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493868" comment="avahi-lang-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503892" comment="avahi-utils-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503893" comment="avahi-utils-gtk-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503894" comment="libavahi-client3-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493871" comment="libavahi-client3-32bit-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503895" comment="libavahi-common3-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493873" comment="libavahi-common3-32bit-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503896" comment="libavahi-core7-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503897" comment="libavahi-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503898" comment="libavahi-glib-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503899" comment="libavahi-glib1-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503900" comment="libavahi-gobject-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503901" comment="libavahi-gobject0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503902" comment="libavahi-ui-gtk3-0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503903" comment="libavahi-ui0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503904" comment="libdns_sd-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503905" comment="libhowl0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503906" comment="typelib-1_0-Avahi-0_6-0.7-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139672" version="1" class="patch">
	<metadata>
		<title>Security update for sca-patterns-sle11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1154824" ref_url="https://bugzilla.suse.com/1154824" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008731.html" source="SUSE-SU"/>
		<description>
This update for sca-patterns-sle11 fixes the following issues:

- New regular patterns (1) for version 1.3.1
   * Special Register Buffer Data Sampling aka CrossTalk (CVE-2020-0543) (bsc#1154824)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1154824">SUSE bug 1154824</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499853" comment="sca-patterns-sle11-1.3.1-7.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139673" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1178469" ref_url="https://bugzilla.suse.com/1178469" source="BUGZILLA"/>
		<reference ref_id="1179156" ref_url="https://bugzilla.suse.com/1179156" source="BUGZILLA"/>
		<reference ref_id="1183572" ref_url="https://bugzilla.suse.com/1183572" source="BUGZILLA"/>
		<reference ref_id="1183574" ref_url="https://bugzilla.suse.com/1183574" source="BUGZILLA"/>
		<reference ref_id="1184310" ref_url="https://bugzilla.suse.com/1184310" source="BUGZILLA"/>
		<reference ref_id="1184677" ref_url="https://bugzilla.suse.com/1184677" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27840" ref_url="https://www.suse.com/security/cve/CVE-2020-27840/" source="CVE"/>
		<reference ref_id="CVE-2021-20254" ref_url="https://www.suse.com/security/cve/CVE-2021-20254/" source="CVE"/>
		<reference ref_id="CVE-2021-20277" ref_url="https://www.suse.com/security/cve/CVE-2021-20277/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008730.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574).
- CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677).
- CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572).
- Avoid free'ing our own pointer in memcache when memcache_trim attempts to reduce cache size (bsc#1179156).
- s3-libads: use dns name to open a ldap session (bsc#1184310).
- Adjust smbcacls '--propagate-inheritance' feature to align with upstream (bsc#1178469).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178469">SUSE bug 1178469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179156">SUSE bug 1179156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183572">SUSE bug 1183572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183574">SUSE bug 1183574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184310">SUSE bug 1184310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184677">SUSE bug 1184677</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27840/">CVE-2020-27840</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-20254/">CVE-2021-20254</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20277/">CVE-2021-20277</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503907" comment="libdcerpc-binding0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503908" comment="libdcerpc-binding0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503909" comment="libdcerpc-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503910" comment="libdcerpc-samr-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503911" comment="libdcerpc-samr0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503912" comment="libdcerpc0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503913" comment="libdcerpc0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503914" comment="libndr-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503915" comment="libndr-krb5pac-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503916" comment="libndr-krb5pac0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503917" comment="libndr-krb5pac0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503918" comment="libndr-nbt-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503919" comment="libndr-nbt0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503920" comment="libndr-nbt0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503921" comment="libndr-standard-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503922" comment="libndr-standard0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503923" comment="libndr-standard0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503924" comment="libndr0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503925" comment="libndr0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503926" comment="libnetapi-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503927" comment="libnetapi0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503928" comment="libnetapi0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503929" comment="libsamba-credentials-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503930" comment="libsamba-credentials0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503931" comment="libsamba-credentials0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503932" comment="libsamba-errors-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503933" comment="libsamba-errors0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503934" comment="libsamba-errors0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503935" comment="libsamba-hostconfig-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503936" comment="libsamba-hostconfig0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503937" comment="libsamba-hostconfig0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503938" comment="libsamba-passdb-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503939" comment="libsamba-passdb0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503940" comment="libsamba-passdb0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503941" comment="libsamba-policy-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503942" comment="libsamba-policy-python3-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503943" comment="libsamba-policy0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503944" comment="libsamba-policy0-python3-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503945" comment="libsamba-util-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503946" comment="libsamba-util0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503947" comment="libsamba-util0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503948" comment="libsamdb-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503949" comment="libsamdb0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503950" comment="libsamdb0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503951" comment="libsmbclient-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503952" comment="libsmbclient0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503953" comment="libsmbconf-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503954" comment="libsmbconf0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503955" comment="libsmbconf0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503956" comment="libsmbldap-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503957" comment="libsmbldap2-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503958" comment="libsmbldap2-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503959" comment="libtevent-util-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503960" comment="libtevent-util0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503961" comment="libtevent-util0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503962" comment="libwbclient-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503963" comment="libwbclient0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503964" comment="libwbclient0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503965" comment="samba-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503966" comment="samba-ad-dc-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503967" comment="samba-client-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503968" comment="samba-core-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503969" comment="samba-dsdb-modules-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503970" comment="samba-libs-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503971" comment="samba-libs-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503972" comment="samba-libs-python-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503973" comment="samba-libs-python3-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503974" comment="samba-python-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503975" comment="samba-python3-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503976" comment="samba-winbind-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503977" comment="samba-winbind-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139674" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182719" ref_url="https://bugzilla.suse.com/1182719" source="BUGZILLA"/>
		<reference ref_id="1184155" ref_url="https://bugzilla.suse.com/1184155" source="BUGZILLA"/>
		<reference ref_id="1184262" ref_url="https://bugzilla.suse.com/1184262" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27918" ref_url="https://www.suse.com/security/cve/CVE-2020-27918/" source="CVE"/>
		<reference ref_id="CVE-2020-29623" ref_url="https://www.suse.com/security/cve/CVE-2020-29623/" source="CVE"/>
		<reference ref_id="CVE-2021-1765" ref_url="https://www.suse.com/security/cve/CVE-2021-1765/" source="CVE"/>
		<reference ref_id="CVE-2021-1788" ref_url="https://www.suse.com/security/cve/CVE-2021-1788/" source="CVE"/>
		<reference ref_id="CVE-2021-1789" ref_url="https://www.suse.com/security/cve/CVE-2021-1789/" source="CVE"/>
		<reference ref_id="CVE-2021-1799" ref_url="https://www.suse.com/security/cve/CVE-2021-1799/" source="CVE"/>
		<reference ref_id="CVE-2021-1801" ref_url="https://www.suse.com/security/cve/CVE-2021-1801/" source="CVE"/>
		<reference ref_id="CVE-2021-1844" ref_url="https://www.suse.com/security/cve/CVE-2021-1844/" source="CVE"/>
		<reference ref_id="CVE-2021-1870" ref_url="https://www.suse.com/security/cve/CVE-2021-1870/" source="CVE"/>
		<reference ref_id="CVE-2021-1871" ref_url="https://www.suse.com/security/cve/CVE-2021-1871/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008734.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.32.0 (bsc#1184155):
  * Fix the authentication request port when URL omits the port.
  * Fix iframe scrolling when main frame is scrolled in async
  * scrolling mode.
  * Stop using g_memdup.
  * Show a warning message when overriding signal handler for
  * threading suspension.
  * Fix the build on RISC-V with GCC 11.
  * Fix several crashes and rendering issues.
  * Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
- Update in version 2.30.6 (bsc#1184262):
  * Update user agent quirks again for Google Docs and Google Drive.
  * Fix several crashes and rendering issues.
  * Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
    CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Update _constraints for armv6/armv7 (bsc#1182719)
- restore NPAPI plugin support which was removed in 2.32.0
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182719">SUSE bug 1182719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184155">SUSE bug 1184155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184262">SUSE bug 1184262</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27918/">CVE-2020-27918</cve>
	<cve impact="important" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29623/">CVE-2020-29623</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1765/">CVE-2021-1765</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1788/">CVE-2021-1788</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1789/">CVE-2021-1789</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1799/">CVE-2021-1799</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1801/">CVE-2021-1801</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1844/">CVE-2021-1844</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1870/">CVE-2021-1870</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1871/">CVE-2021-1871</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503282" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503283" comment="libwebkit2gtk-4_0-37-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503284" comment="libwebkit2gtk3-lang-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503285" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503286" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503287" comment="typelib-1_0-WebKit2WebExtension-4_0-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503288" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503289" comment="webkit2gtk3-devel-2.32.0-3.74.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139675" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184606" ref_url="https://bugzilla.suse.com/1184606" source="BUGZILLA"/>
		<reference ref_id="1185055" ref_url="https://bugzilla.suse.com/1185055" source="BUGZILLA"/>
		<reference ref_id="1185056" ref_url="https://bugzilla.suse.com/1185056" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2161" ref_url="https://www.suse.com/security/cve/CVE-2021-2161/" source="CVE"/>
		<reference ref_id="CVE-2021-2163" ref_url="https://www.suse.com/security/cve/CVE-2021-2163/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008756.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to upstream tag jdk-11.0.11+9 (April 2021 CPU)
  * CVE-2021-2163: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055)
  * CVE-2021-2161: Fixed incorrect handling of partially quoted arguments in ProcessBuilder (bsc#1185056)
- moved mozilla-nss dependency to java-11-openjdk-headless package, this is necessary to be able to do crypto 
  with just java-11-openjdk-headless installed (bsc#1184606).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-11"/>
	<updated date="2021-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184606">SUSE bug 1184606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185055">SUSE bug 1185055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185056">SUSE bug 1185056</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2161/">CVE-2021-2161</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2163/">CVE-2021-2163</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503291" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503292" comment="java-11-openjdk-demo-11.0.11.0-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503293" comment="java-11-openjdk-devel-11.0.11.0-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503294" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139676" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179103" ref_url="https://bugzilla.suse.com/1179103" source="BUGZILLA"/>
		<reference ref_id="1179202" ref_url="https://bugzilla.suse.com/1179202" source="BUGZILLA"/>
		<reference ref_id="1179208" ref_url="https://bugzilla.suse.com/1179208" source="BUGZILLA"/>
		<reference ref_id="1179212" ref_url="https://bugzilla.suse.com/1179212" source="BUGZILLA"/>
		<reference ref_id="1179221" ref_url="https://bugzilla.suse.com/1179221" source="BUGZILLA"/>
		<reference ref_id="1179223" ref_url="https://bugzilla.suse.com/1179223" source="BUGZILLA"/>
		<reference ref_id="1179240" ref_url="https://bugzilla.suse.com/1179240" source="BUGZILLA"/>
		<reference ref_id="1179244" ref_url="https://bugzilla.suse.com/1179244" source="BUGZILLA"/>
		<reference ref_id="1179260" ref_url="https://bugzilla.suse.com/1179260" source="BUGZILLA"/>
		<reference ref_id="1179268" ref_url="https://bugzilla.suse.com/1179268" source="BUGZILLA"/>
		<reference ref_id="1179269" ref_url="https://bugzilla.suse.com/1179269" source="BUGZILLA"/>
		<reference ref_id="1179276" ref_url="https://bugzilla.suse.com/1179276" source="BUGZILLA"/>
		<reference ref_id="1179278" ref_url="https://bugzilla.suse.com/1179278" source="BUGZILLA"/>
		<reference ref_id="1179281" ref_url="https://bugzilla.suse.com/1179281" source="BUGZILLA"/>
		<reference ref_id="1179285" ref_url="https://bugzilla.suse.com/1179285" source="BUGZILLA"/>
		<reference ref_id="1179311" ref_url="https://bugzilla.suse.com/1179311" source="BUGZILLA"/>
		<reference ref_id="1179312" ref_url="https://bugzilla.suse.com/1179312" source="BUGZILLA"/>
		<reference ref_id="1179313" ref_url="https://bugzilla.suse.com/1179313" source="BUGZILLA"/>
		<reference ref_id="1179315" ref_url="https://bugzilla.suse.com/1179315" source="BUGZILLA"/>
		<reference ref_id="1179317" ref_url="https://bugzilla.suse.com/1179317" source="BUGZILLA"/>
		<reference ref_id="1179321" ref_url="https://bugzilla.suse.com/1179321" source="BUGZILLA"/>
		<reference ref_id="1179322" ref_url="https://bugzilla.suse.com/1179322" source="BUGZILLA"/>
		<reference ref_id="1179327" ref_url="https://bugzilla.suse.com/1179327" source="BUGZILLA"/>
		<reference ref_id="1179333" ref_url="https://bugzilla.suse.com/1179333" source="BUGZILLA"/>
		<reference ref_id="1179336" ref_url="https://bugzilla.suse.com/1179336" source="BUGZILLA"/>
		<reference ref_id="1179338" ref_url="https://bugzilla.suse.com/1179338" source="BUGZILLA"/>
		<reference ref_id="1179339" ref_url="https://bugzilla.suse.com/1179339" source="BUGZILLA"/>
		<reference ref_id="1179343" ref_url="https://bugzilla.suse.com/1179343" source="BUGZILLA"/>
		<reference ref_id="1179345" ref_url="https://bugzilla.suse.com/1179345" source="BUGZILLA"/>
		<reference ref_id="1179346" ref_url="https://bugzilla.suse.com/1179346" source="BUGZILLA"/>
		<reference ref_id="1179347" ref_url="https://bugzilla.suse.com/1179347" source="BUGZILLA"/>
		<reference ref_id="1179361" ref_url="https://bugzilla.suse.com/1179361" source="BUGZILLA"/>
		<reference ref_id="1179362" ref_url="https://bugzilla.suse.com/1179362" source="BUGZILLA"/>
		<reference ref_id="1179397" ref_url="https://bugzilla.suse.com/1179397" source="BUGZILLA"/>
		<reference ref_id="1179753" ref_url="https://bugzilla.suse.com/1179753" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-19667" ref_url="https://www.suse.com/security/cve/CVE-2020-19667/" source="CVE"/>
		<reference ref_id="CVE-2020-25664" ref_url="https://www.suse.com/security/cve/CVE-2020-25664/" source="CVE"/>
		<reference ref_id="CVE-2020-25665" ref_url="https://www.suse.com/security/cve/CVE-2020-25665/" source="CVE"/>
		<reference ref_id="CVE-2020-25666" ref_url="https://www.suse.com/security/cve/CVE-2020-25666/" source="CVE"/>
		<reference ref_id="CVE-2020-25674" ref_url="https://www.suse.com/security/cve/CVE-2020-25674/" source="CVE"/>
		<reference ref_id="CVE-2020-25675" ref_url="https://www.suse.com/security/cve/CVE-2020-25675/" source="CVE"/>
		<reference ref_id="CVE-2020-25676" ref_url="https://www.suse.com/security/cve/CVE-2020-25676/" source="CVE"/>
		<reference ref_id="CVE-2020-27750" ref_url="https://www.suse.com/security/cve/CVE-2020-27750/" source="CVE"/>
		<reference ref_id="CVE-2020-27751" ref_url="https://www.suse.com/security/cve/CVE-2020-27751/" source="CVE"/>
		<reference ref_id="CVE-2020-27752" ref_url="https://www.suse.com/security/cve/CVE-2020-27752/" source="CVE"/>
		<reference ref_id="CVE-2020-27753" ref_url="https://www.suse.com/security/cve/CVE-2020-27753/" source="CVE"/>
		<reference ref_id="CVE-2020-27754" ref_url="https://www.suse.com/security/cve/CVE-2020-27754/" source="CVE"/>
		<reference ref_id="CVE-2020-27755" ref_url="https://www.suse.com/security/cve/CVE-2020-27755/" source="CVE"/>
		<reference ref_id="CVE-2020-27756" ref_url="https://www.suse.com/security/cve/CVE-2020-27756/" source="CVE"/>
		<reference ref_id="CVE-2020-27757" ref_url="https://www.suse.com/security/cve/CVE-2020-27757/" source="CVE"/>
		<reference ref_id="CVE-2020-27758" ref_url="https://www.suse.com/security/cve/CVE-2020-27758/" source="CVE"/>
		<reference ref_id="CVE-2020-27759" ref_url="https://www.suse.com/security/cve/CVE-2020-27759/" source="CVE"/>
		<reference ref_id="CVE-2020-27760" ref_url="https://www.suse.com/security/cve/CVE-2020-27760/" source="CVE"/>
		<reference ref_id="CVE-2020-27761" ref_url="https://www.suse.com/security/cve/CVE-2020-27761/" source="CVE"/>
		<reference ref_id="CVE-2020-27762" ref_url="https://www.suse.com/security/cve/CVE-2020-27762/" source="CVE"/>
		<reference ref_id="CVE-2020-27763" ref_url="https://www.suse.com/security/cve/CVE-2020-27763/" source="CVE"/>
		<reference ref_id="CVE-2020-27764" ref_url="https://www.suse.com/security/cve/CVE-2020-27764/" source="CVE"/>
		<reference ref_id="CVE-2020-27765" ref_url="https://www.suse.com/security/cve/CVE-2020-27765/" source="CVE"/>
		<reference ref_id="CVE-2020-27766" ref_url="https://www.suse.com/security/cve/CVE-2020-27766/" source="CVE"/>
		<reference ref_id="CVE-2020-27767" ref_url="https://www.suse.com/security/cve/CVE-2020-27767/" source="CVE"/>
		<reference ref_id="CVE-2020-27768" ref_url="https://www.suse.com/security/cve/CVE-2020-27768/" source="CVE"/>
		<reference ref_id="CVE-2020-27769" ref_url="https://www.suse.com/security/cve/CVE-2020-27769/" source="CVE"/>
		<reference ref_id="CVE-2020-27770" ref_url="https://www.suse.com/security/cve/CVE-2020-27770/" source="CVE"/>
		<reference ref_id="CVE-2020-27771" ref_url="https://www.suse.com/security/cve/CVE-2020-27771/" source="CVE"/>
		<reference ref_id="CVE-2020-27772" ref_url="https://www.suse.com/security/cve/CVE-2020-27772/" source="CVE"/>
		<reference ref_id="CVE-2020-27773" ref_url="https://www.suse.com/security/cve/CVE-2020-27773/" source="CVE"/>
		<reference ref_id="CVE-2020-27774" ref_url="https://www.suse.com/security/cve/CVE-2020-27774/" source="CVE"/>
		<reference ref_id="CVE-2020-27775" ref_url="https://www.suse.com/security/cve/CVE-2020-27775/" source="CVE"/>
		<reference ref_id="CVE-2020-27776" ref_url="https://www.suse.com/security/cve/CVE-2020-27776/" source="CVE"/>
		<reference ref_id="CVE-2020-29599" ref_url="https://www.suse.com/security/cve/CVE-2020-29599/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).
- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).
- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).
- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).
- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).
- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).
- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).
- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).
- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).
- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).
- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).
- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).
- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).
- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).
- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).
- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).
- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).
- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).
- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).
- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).
- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).
- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).
- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).
- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).
- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).
- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).
- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).
- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).
- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).
- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).
- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).
- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).
- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).
- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).
- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-18"/>
	<updated date="2021-01-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179103">SUSE bug 1179103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179202">SUSE bug 1179202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179208">SUSE bug 1179208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179212">SUSE bug 1179212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179221">SUSE bug 1179221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179223">SUSE bug 1179223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179240">SUSE bug 1179240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179244">SUSE bug 1179244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179260">SUSE bug 1179260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179268">SUSE bug 1179268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179269">SUSE bug 1179269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179276">SUSE bug 1179276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179278">SUSE bug 1179278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179281">SUSE bug 1179281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179285">SUSE bug 1179285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179311">SUSE bug 1179311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179312">SUSE bug 1179312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179313">SUSE bug 1179313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179315">SUSE bug 1179315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179317">SUSE bug 1179317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179321">SUSE bug 1179321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179322">SUSE bug 1179322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179327">SUSE bug 1179327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179333">SUSE bug 1179333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179336">SUSE bug 1179336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179338">SUSE bug 1179338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179339">SUSE bug 1179339</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179343">SUSE bug 1179343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179345">SUSE bug 1179345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179346">SUSE bug 1179346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179347">SUSE bug 1179347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179361">SUSE bug 1179361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179362">SUSE bug 1179362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179397">SUSE bug 1179397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179753">SUSE bug 1179753</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-19667/">CVE-2020-19667</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-25664/">CVE-2020-25664</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25665/">CVE-2020-25665</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25666/">CVE-2020-25666</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25674/">CVE-2020-25674</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25675/">CVE-2020-25675</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25676/">CVE-2020-25676</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27750/">CVE-2020-27750</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27751/">CVE-2020-27751</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27752/">CVE-2020-27752</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27753/">CVE-2020-27753</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27754/">CVE-2020-27754</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27755/">CVE-2020-27755</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27756/">CVE-2020-27756</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27757/">CVE-2020-27757</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27758/">CVE-2020-27758</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27759/">CVE-2020-27759</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27760/">CVE-2020-27760</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27761/">CVE-2020-27761</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27762/">CVE-2020-27762</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27763/">CVE-2020-27763</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27764/">CVE-2020-27764</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27765/">CVE-2020-27765</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27766/">CVE-2020-27766</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27767/">CVE-2020-27767</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27768/">CVE-2020-27768</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27769/">CVE-2020-27769</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27770/">CVE-2020-27770</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27771/">CVE-2020-27771</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27772/">CVE-2020-27772</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27773/">CVE-2020-27773</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27774/">CVE-2020-27774</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27775/">CVE-2020-27775</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27776/">CVE-2020-27776</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29599/">CVE-2020-29599</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503978" comment="ImageMagick-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503979" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503980" comment="ImageMagick-config-7-upstream-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503981" comment="ImageMagick-devel-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503982" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503983" comment="libMagick++-devel-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503984" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503985" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503295" comment="perl-PerlMagick-7.0.7.34-3.90.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139677" version="1" class="patch">
	<metadata>
		<title>Security update for shim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177315" ref_url="https://bugzilla.suse.com/1177315" source="BUGZILLA"/>
		<reference ref_id="1182057" ref_url="https://bugzilla.suse.com/1182057" source="BUGZILLA"/>
		<reference ref_id="1185464" ref_url="https://bugzilla.suse.com/1185464" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:1564-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008758.html" source="SUSE-SU"/>
		<description>
This update for shim fixes the following issues:

- Update to the unified shim binary for SBAT support (bsc#1182057)
  + Merged EKU codesign check (bsc#1177315)
- shim-install: Always assume 'removable' for Azure to avoid the endless reset loop (bsc#1185464).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-11"/>
	<updated date="2021-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177315">SUSE bug 1177315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182057">SUSE bug 1182057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185464">SUSE bug 1185464</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493901" comment="shim-15.4-3.20.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139678" version="1" class="patch">
	<metadata>
		<title>Security update for tcmu-runner (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180676" ref_url="https://bugzilla.suse.com/1180676" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3139" ref_url="https://www.suse.com/security/cve/CVE-2021-3139/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008219.html" source="SUSE-SU"/>
		<description>
This update for tcmu-runner fixes the following issue:

- CVE-2021-3139: Fixed a LIO security issue (bsc#1180676).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-18"/>
	<updated date="2021-01-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180676">SUSE bug 1180676</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3139/">CVE-2021-3139</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503306" comment="libtcmu2-1.4.0-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503307" comment="tcmu-runner-1.4.0-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139679" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1047233" ref_url="https://bugzilla.suse.com/1047233" source="BUGZILLA"/>
		<reference ref_id="1172455" ref_url="https://bugzilla.suse.com/1172455" source="BUGZILLA"/>
		<reference ref_id="1173485" ref_url="https://bugzilla.suse.com/1173485" source="BUGZILLA"/>
		<reference ref_id="1176720" ref_url="https://bugzilla.suse.com/1176720" source="BUGZILLA"/>
		<reference ref_id="1177411" ref_url="https://bugzilla.suse.com/1177411" source="BUGZILLA"/>
		<reference ref_id="1178181" ref_url="https://bugzilla.suse.com/1178181" source="BUGZILLA"/>
		<reference ref_id="1179454" ref_url="https://bugzilla.suse.com/1179454" source="BUGZILLA"/>
		<reference ref_id="1180197" ref_url="https://bugzilla.suse.com/1180197" source="BUGZILLA"/>
		<reference ref_id="1181960" ref_url="https://bugzilla.suse.com/1181960" source="BUGZILLA"/>
		<reference ref_id="1182011" ref_url="https://bugzilla.suse.com/1182011" source="BUGZILLA"/>
		<reference ref_id="1182672" ref_url="https://bugzilla.suse.com/1182672" source="BUGZILLA"/>
		<reference ref_id="1182715" ref_url="https://bugzilla.suse.com/1182715" source="BUGZILLA"/>
		<reference ref_id="1182716" ref_url="https://bugzilla.suse.com/1182716" source="BUGZILLA"/>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183022" ref_url="https://bugzilla.suse.com/1183022" source="BUGZILLA"/>
		<reference ref_id="1183063" ref_url="https://bugzilla.suse.com/1183063" source="BUGZILLA"/>
		<reference ref_id="1183069" ref_url="https://bugzilla.suse.com/1183069" source="BUGZILLA"/>
		<reference ref_id="1183509" ref_url="https://bugzilla.suse.com/1183509" source="BUGZILLA"/>
		<reference ref_id="1183593" ref_url="https://bugzilla.suse.com/1183593" source="BUGZILLA"/>
		<reference ref_id="1183646" ref_url="https://bugzilla.suse.com/1183646" source="BUGZILLA"/>
		<reference ref_id="1183686" ref_url="https://bugzilla.suse.com/1183686" source="BUGZILLA"/>
		<reference ref_id="1183696" ref_url="https://bugzilla.suse.com/1183696" source="BUGZILLA"/>
		<reference ref_id="1183775" ref_url="https://bugzilla.suse.com/1183775" source="BUGZILLA"/>
		<reference ref_id="1184120" ref_url="https://bugzilla.suse.com/1184120" source="BUGZILLA"/>
		<reference ref_id="1184167" ref_url="https://bugzilla.suse.com/1184167" source="BUGZILLA"/>
		<reference ref_id="1184168" ref_url="https://bugzilla.suse.com/1184168" source="BUGZILLA"/>
		<reference ref_id="1184170" ref_url="https://bugzilla.suse.com/1184170" source="BUGZILLA"/>
		<reference ref_id="1184192" ref_url="https://bugzilla.suse.com/1184192" source="BUGZILLA"/>
		<reference ref_id="1184193" ref_url="https://bugzilla.suse.com/1184193" source="BUGZILLA"/>
		<reference ref_id="1184194" ref_url="https://bugzilla.suse.com/1184194" source="BUGZILLA"/>
		<reference ref_id="1184196" ref_url="https://bugzilla.suse.com/1184196" source="BUGZILLA"/>
		<reference ref_id="1184198" ref_url="https://bugzilla.suse.com/1184198" source="BUGZILLA"/>
		<reference ref_id="1184208" ref_url="https://bugzilla.suse.com/1184208" source="BUGZILLA"/>
		<reference ref_id="1184211" ref_url="https://bugzilla.suse.com/1184211" source="BUGZILLA"/>
		<reference ref_id="1184388" ref_url="https://bugzilla.suse.com/1184388" source="BUGZILLA"/>
		<reference ref_id="1184391" ref_url="https://bugzilla.suse.com/1184391" source="BUGZILLA"/>
		<reference ref_id="1184393" ref_url="https://bugzilla.suse.com/1184393" source="BUGZILLA"/>
		<reference ref_id="1184397" ref_url="https://bugzilla.suse.com/1184397" source="BUGZILLA"/>
		<reference ref_id="1184509" ref_url="https://bugzilla.suse.com/1184509" source="BUGZILLA"/>
		<reference ref_id="1184511" ref_url="https://bugzilla.suse.com/1184511" source="BUGZILLA"/>
		<reference ref_id="1184512" ref_url="https://bugzilla.suse.com/1184512" source="BUGZILLA"/>
		<reference ref_id="1184514" ref_url="https://bugzilla.suse.com/1184514" source="BUGZILLA"/>
		<reference ref_id="1184583" ref_url="https://bugzilla.suse.com/1184583" source="BUGZILLA"/>
		<reference ref_id="1184650" ref_url="https://bugzilla.suse.com/1184650" source="BUGZILLA"/>
		<reference ref_id="1184942" ref_url="https://bugzilla.suse.com/1184942" source="BUGZILLA"/>
		<reference ref_id="1185113" ref_url="https://bugzilla.suse.com/1185113" source="BUGZILLA"/>
		<reference ref_id="1185244" ref_url="https://bugzilla.suse.com/1185244" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0433" ref_url="https://www.suse.com/security/cve/CVE-2020-0433/" source="CVE"/>
		<reference ref_id="CVE-2020-25670" ref_url="https://www.suse.com/security/cve/CVE-2020-25670/" source="CVE"/>
		<reference ref_id="CVE-2020-25671" ref_url="https://www.suse.com/security/cve/CVE-2020-25671/" source="CVE"/>
		<reference ref_id="CVE-2020-25672" ref_url="https://www.suse.com/security/cve/CVE-2020-25672/" source="CVE"/>
		<reference ref_id="CVE-2020-25673" ref_url="https://www.suse.com/security/cve/CVE-2020-25673/" source="CVE"/>
		<reference ref_id="CVE-2020-27170" ref_url="https://www.suse.com/security/cve/CVE-2020-27170/" source="CVE"/>
		<reference ref_id="CVE-2020-27171" ref_url="https://www.suse.com/security/cve/CVE-2020-27171/" source="CVE"/>
		<reference ref_id="CVE-2020-27673" ref_url="https://www.suse.com/security/cve/CVE-2020-27673/" source="CVE"/>
		<reference ref_id="CVE-2020-27815" ref_url="https://www.suse.com/security/cve/CVE-2020-27815/" source="CVE"/>
		<reference ref_id="CVE-2020-35519" ref_url="https://www.suse.com/security/cve/CVE-2020-35519/" source="CVE"/>
		<reference ref_id="CVE-2020-36310" ref_url="https://www.suse.com/security/cve/CVE-2020-36310/" source="CVE"/>
		<reference ref_id="CVE-2020-36311" ref_url="https://www.suse.com/security/cve/CVE-2020-36311/" source="CVE"/>
		<reference ref_id="CVE-2020-36312" ref_url="https://www.suse.com/security/cve/CVE-2020-36312/" source="CVE"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-20219" ref_url="https://www.suse.com/security/cve/CVE-2021-20219/" source="CVE"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="CVE-2021-28038" ref_url="https://www.suse.com/security/cve/CVE-2021-28038/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-28950" ref_url="https://www.suse.com/security/cve/CVE-2021-28950/" source="CVE"/>
		<reference ref_id="CVE-2021-28964" ref_url="https://www.suse.com/security/cve/CVE-2021-28964/" source="CVE"/>
		<reference ref_id="CVE-2021-28971" ref_url="https://www.suse.com/security/cve/CVE-2021-28971/" source="CVE"/>
		<reference ref_id="CVE-2021-28972" ref_url="https://www.suse.com/security/cve/CVE-2021-28972/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="CVE-2021-29155" ref_url="https://www.suse.com/security/cve/CVE-2021-29155/" source="CVE"/>
		<reference ref_id="CVE-2021-29264" ref_url="https://www.suse.com/security/cve/CVE-2021-29264/" source="CVE"/>
		<reference ref_id="CVE-2021-29265" ref_url="https://www.suse.com/security/cve/CVE-2021-29265/" source="CVE"/>
		<reference ref_id="CVE-2021-29647" ref_url="https://www.suse.com/security/cve/CVE-2021-29647/" source="CVE"/>
		<reference ref_id="CVE-2021-29650" ref_url="https://www.suse.com/security/cve/CVE-2021-29650/" source="CVE"/>
		<reference ref_id="CVE-2021-30002" ref_url="https://www.suse.com/security/cve/CVE-2021-30002/" source="CVE"/>
		<reference ref_id="CVE-2021-3428" ref_url="https://www.suse.com/security/cve/CVE-2021-3428/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="CVE-2021-3483" ref_url="https://www.suse.com/security/cve/CVE-2021-3483/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bnc#1184509).
- CVE-2021-29650: Fixed an issue inside the netfilter subsystem that allowed attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value (bnc#1184208).
- CVE-2021-29155: Fixed an issue within kernel/bpf/verifier.c that performed undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations (bnc#1184942).
- CVE-2020-36310: Fixed an issue in arch/x86/kvm/svm/svm.c that allowed a set_memory_region_test infinite loop for certain nested page faults (bnc#1184512).
- CVE-2020-27673: Fixed an issue in Xen where a guest OS users could have caused a denial of service (host OS hang) via a high rate of events to dom0 (bnc#1177411, bnc#1184583).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bnc#1184391).
- CVE-2020-25673: Fixed NFC endless loops caused by repeated llcp_sock_connect() (bsc#1178181).
- CVE-2020-25672: Fixed NFC memory leak in llcp_sock_connect() (bsc#1178181).
- CVE-2020-25671: Fixed NFC refcount leak in llcp_sock_connect() (bsc#1178181).
- CVE-2020-25670: Fixed NFC refcount leak in llcp_sock_bind() (bsc#1178181).
- CVE-2020-36311: Fixed an issue in arch/x86/kvm/svm/sev.c that allowed attackers to cause a denial of service (soft lockup) by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions) (bnc#1184511).
- CVE-2021-28950: Fixed an issue in fs/fuse/fuse_i.h where a 'stall on CPU' could have occured because a retry loop continually finds the same bad inode (bnc#1184194, bnc#1184211).
- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bnc#1184211).
- CVE-2021-30002: Fixed a memory leak issue when a webcam device exists (bnc#1184120).
- CVE-2021-3483: Fixed a use-after-free bug in nosy_ioctl() (bsc#1184393).
- CVE-2021-20219: Fixed a denial of service vulnerability in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could have delayed the loop and cause a threat to the system availability (bnc#1184397).
- CVE-2021-28964: Fixed a race condition in fs/btrfs/ctree.c that could have caused a denial of service because of a lack of locking on an extent buffer before a cloning operation (bnc#1184193).
- CVE-2021-3444: Fixed the bpf verifier as it did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution (bnc#1184170).
- CVE-2021-28971: Fixed a potential local denial of service in intel_pmu_drain_pebs_nhm where userspace applications can cause a system crash because the PEBS status in a PEBS record is mishandled (bnc#1184196).
- CVE-2021-28688: Fixed XSA-365 that includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in leaking persistent grants. The leak in turn would prevent fully cleaning up after a respective guest has died, leaving around zombie domains (bnc#1183646).
- CVE-2021-29265: Fixed an issue in usbip_sockfd_store in drivers/usb/usbip/stub_dev.c that allowed attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status (bnc#1184167).
- CVE-2021-29264: Fixed an issue in drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver that allowed attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is enabled (bnc#1184168).
- CVE-2021-28972: Fixed an issue in drivers/pci/hotplug/rpadlpar_sysfs.c where the RPA PCI Hotplug driver had a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination (bnc#1184198).
- CVE-2021-29647: Fixed an issue in kernel qrtr_recvmsg in net/qrtr/qrtr.c that allowed attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure (bnc#1184192).
- CVE-2020-27171: Fixed an issue in kernel/bpf/verifier.c that had an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory (bnc#1183686, bnc#1183775).
- CVE-2020-27170: Fixed an issue in kernel/bpf/verifier.c that performed undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. This affects pointer types that do not define a ptr_limit (bnc#1183686 bnc#1183775).
- CVE-2021-28660: Fixed rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c that allowed writing beyond the end of the ssid array (bnc#1183593).
- CVE-2020-35519: Update patch reference for x25 fix (bsc#1183696).
- CVE-2021-3428: Fixed ext4 integer overflow in ext4_es_cache_extent (bsc#1173485, bsc#1183509).
- CVE-2020-0433: Fixed blk_mq_queue_tag_busy_iter of blk-mq-tag.c, where a possible use after free due to improper locking could have happened. This could have led to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1176720).
- CVE-2021-28038: Fixed an issue with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931 (bnc#1183022, bnc#1183069).
- CVE-2020-27815: Fixed jfs array index bounds check in dbAdjTree (bsc#1179454).
- CVE-2021-27365: Fixed an issue inside the iSCSI data structures that does not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message (bnc#1182715).
- CVE-2021-27363: Fixed an issue with a kernel pointer leak that could have been used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables (bnc#1182716).
- CVE-2021-27364: Fixed an issue in drivers/scsi/scsi_transport_iscsi.c where an unprivileged user can craft Netlink messages (bnc#1182717).

The following non-security bugs were fixed:

- Revert 'rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)' This turned out to be a bad idea: the kernel-$flavor-devel package must be usable without kernel-$flavor, e.g. at the build of a KMP. And this change brought superfluous installation of kernel-preempt when a system had kernel-syms (bsc#1185113).
- Xen/gnttab: handle p2m update errors on a per-slot basis (bsc#1183022 XSA-367).
- bfq: Fix kABI for update internal depth state when queue depth changes (bsc#1172455).
- bfq: update internal depth state when queue depth changes (bsc#1172455).
- bpf: Add sanity check for upper ptr_limit (bsc#1183686 bsc#1183775).
- bpf: Simplify alu_limit masking for pointer arithmetic (bsc#1183686 bsc#1183775).
- handle also the opposite type of race condition
- ibmvnic: Clear failover_pending if unable to schedule (bsc#1181960 ltc#190997).
- ibmvnic: always store valid MAC address (bsc#1182011 ltc#191844).
- ibmvnic: store valid MAC address (bsc#1182011).
- macros.kernel-source: Use spec_install_pre for certificate installation (boo#1182672).
- nvme: return an error if nvme_set_queue_count() fails (bsc#1180197).
- post.sh: Return an error when module update fails (bsc#1047233 bsc#1184388).
- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- rpm/mkspec: Use tilde instead of dot for version string with rc (bsc#1184650)
- xen-netback: respect gnttab_map_refs()'s return value (bsc#1183022, XSA-367).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-18"/>
	<updated date="2021-05-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1047233">SUSE bug 1047233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172455">SUSE bug 1172455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173485">SUSE bug 1173485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176720">SUSE bug 1176720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177411">SUSE bug 1177411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178181">SUSE bug 1178181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179454">SUSE bug 1179454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180197">SUSE bug 1180197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181960">SUSE bug 1181960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182011">SUSE bug 1182011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182672">SUSE bug 1182672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182715">SUSE bug 1182715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182716">SUSE bug 1182716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183022">SUSE bug 1183022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183063">SUSE bug 1183063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183069">SUSE bug 1183069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183509">SUSE bug 1183509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183593">SUSE bug 1183593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183646">SUSE bug 1183646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183686">SUSE bug 1183686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183696">SUSE bug 1183696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183775">SUSE bug 1183775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184120">SUSE bug 1184120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184167">SUSE bug 1184167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184168">SUSE bug 1184168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184170">SUSE bug 1184170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184192">SUSE bug 1184192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184193">SUSE bug 1184193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184194">SUSE bug 1184194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184196">SUSE bug 1184196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184198">SUSE bug 1184198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184208">SUSE bug 1184208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184211">SUSE bug 1184211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184388">SUSE bug 1184388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184391">SUSE bug 1184391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184393">SUSE bug 1184393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184397">SUSE bug 1184397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184509">SUSE bug 1184509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184511">SUSE bug 1184511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184512">SUSE bug 1184512</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184514">SUSE bug 1184514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184583">SUSE bug 1184583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184650">SUSE bug 1184650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184942">SUSE bug 1184942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185113">SUSE bug 1185113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185244">SUSE bug 1185244</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0433/">CVE-2020-0433</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25670/">CVE-2020-25670</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25671/">CVE-2020-25671</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25672/">CVE-2020-25672</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25673/">CVE-2020-25673</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27170/">CVE-2020-27170</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27171/">CVE-2020-27171</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27673/">CVE-2020-27673</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27815/">CVE-2020-27815</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35519/">CVE-2020-35519</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36310/">CVE-2020-36310</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36311/">CVE-2020-36311</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36312/">CVE-2020-36312</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20219/">CVE-2021-20219</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28038/">CVE-2021-28038</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28950/">CVE-2021-28950</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28964/">CVE-2021-28964</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28971/">CVE-2021-28971</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28972/">CVE-2021-28972</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29155/">CVE-2021-29155</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29264/">CVE-2021-29264</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29265/">CVE-2021-29265</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29647/">CVE-2021-29647</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29650/">CVE-2021-29650</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-30002/">CVE-2021-30002</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3428/">CVE-2021-3428</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3483/">CVE-2021-3483</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503986" comment="kernel-default-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503987" comment="kernel-default-base-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503988" comment="kernel-default-devel-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503989" comment="kernel-devel-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503990" comment="kernel-docs-4.12.14-197.89.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503991" comment="kernel-macros-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503992" comment="kernel-obs-build-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503993" comment="kernel-source-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503994" comment="kernel-syms-4.12.14-197.89.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139680" version="1" class="patch">
	<metadata>
		<title>Security update for lz4 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185438" ref_url="https://bugzilla.suse.com/1185438" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3520" ref_url="https://www.suse.com/security/cve/CVE-2021-3520/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1647-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/018981.html" source="SUSE-SU"/>
		<description>
This update for lz4 fixes the following issues:

- CVE-2021-3520: Fixed memory corruption due to an integer overflow bug caused by memmove argument (bsc#1185438).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-19"/>
	<updated date="2021-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185438">SUSE bug 1185438</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-3520/">CVE-2021-3520</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503309" comment="liblz4-1-1.8.0-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493923" comment="liblz4-1-32bit-1.8.0-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503310" comment="liblz4-devel-1.8.0-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503311" comment="lz4-1.8.0-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139681" version="1" class="patch">
	<metadata>
		<title>Security update for djvulibre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185895" ref_url="https://bugzilla.suse.com/1185895" source="BUGZILLA"/>
		<reference ref_id="1185900" ref_url="https://bugzilla.suse.com/1185900" source="BUGZILLA"/>
		<reference ref_id="1185904" ref_url="https://bugzilla.suse.com/1185904" source="BUGZILLA"/>
		<reference ref_id="1185905" ref_url="https://bugzilla.suse.com/1185905" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-32490" ref_url="https://www.suse.com/security/cve/CVE-2021-32490/" source="CVE"/>
		<reference ref_id="CVE-2021-32491" ref_url="https://www.suse.com/security/cve/CVE-2021-32491/" source="CVE"/>
		<reference ref_id="CVE-2021-32492" ref_url="https://www.suse.com/security/cve/CVE-2021-32492/" source="CVE"/>
		<reference ref_id="CVE-2021-32493" ref_url="https://www.suse.com/security/cve/CVE-2021-32493/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008784.html" source="SUSE-SU"/>
		<description>
This update for djvulibre fixes the following issues:

Security issues fixed:

- CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
- CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
- CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
- CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-19"/>
	<updated date="2021-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185895">SUSE bug 1185895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185900">SUSE bug 1185900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185904">SUSE bug 1185904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185905">SUSE bug 1185905</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32490/">CVE-2021-32490</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32491/">CVE-2021-32491</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32492/">CVE-2021-32492</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32493/">CVE-2021-32493</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503312" comment="libdjvulibre-devel-3.5.27-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503313" comment="libdjvulibre21-3.5.27-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139682" version="1" class="patch">
	<metadata>
		<title>Security update for graphviz (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185833" ref_url="https://bugzilla.suse.com/1185833" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-18032" ref_url="https://www.suse.com/security/cve/CVE-2020-18032/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1651-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/018980.html" source="SUSE-SU"/>
		<description>
This update for graphviz fixes the following issues:

- CVE-2020-18032: Fixed possible remote code execution via buffer overflow (bsc#1185833).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-19"/>
	<updated date="2021-05-19"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1185833">SUSE bug 1185833</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-18032/">CVE-2020-18032</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503314" comment="graphviz-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503315" comment="graphviz-devel-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503316" comment="graphviz-perl-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503317" comment="graphviz-plugins-core-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503318" comment="graphviz-tcl-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503319" comment="libgraphviz6-2.40.1-6.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139683" version="1" class="patch">
	<metadata>
		<title>Security update for slurm_20_11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186024" ref_url="https://bugzilla.suse.com/1186024" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31215" ref_url="https://www.suse.com/security/cve/CVE-2021-31215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008877.html" source="SUSE-SU"/>
		<description>
This update for slurm_20_11 fixes the following issues:

- Udpate to 20.02.7:
- CVE-2021-31215: remote code execution as SlurmUser because of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling (bsc#1186024)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-27"/>
	<updated date="2021-05-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186024">SUSE bug 1186024</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-31215/">CVE-2021-31215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503995" comment="libnss_slurm2_20_02-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503996" comment="libpmi0_20_02-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503997" comment="libslurm35-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503998" comment="perl-slurm_20_02-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503999" comment="slurm_20_02-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504000" comment="slurm_20_02-auth-none-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504001" comment="slurm_20_02-config-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504002" comment="slurm_20_02-config-man-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504003" comment="slurm_20_02-devel-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504004" comment="slurm_20_02-doc-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504005" comment="slurm_20_02-lua-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504006" comment="slurm_20_02-munge-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504007" comment="slurm_20_02-node-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504008" comment="slurm_20_02-pam_slurm-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504009" comment="slurm_20_02-plugins-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504010" comment="slurm_20_02-slurmdbd-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504011" comment="slurm_20_02-sql-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504012" comment="slurm_20_02-sview-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504013" comment="slurm_20_02-torque-20.02.7-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504014" comment="slurm_20_02-webdoc-20.02.7-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139684" version="1" class="patch">
	<metadata>
		<title>Security update for slurm_20_11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180700" ref_url="https://bugzilla.suse.com/1180700" source="BUGZILLA"/>
		<reference ref_id="1185603" ref_url="https://bugzilla.suse.com/1185603" source="BUGZILLA"/>
		<reference ref_id="1186024" ref_url="https://bugzilla.suse.com/1186024" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31215" ref_url="https://www.suse.com/security/cve/CVE-2021-31215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008871.html" source="SUSE-SU"/>
		<description>
This update for slurm_20_11 fixes the following issues:

- Udpate to 20.11.7:
- CVE-2021-31215: remote code execution as SlurmUser because of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling (bsc#1186024)
- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).
- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-27"/>
	<updated date="2021-05-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180700">SUSE bug 1180700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185603">SUSE bug 1185603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186024">SUSE bug 1186024</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-31215/">CVE-2021-31215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504015" comment="libnss_slurm2_20_11-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504016" comment="libpmi0_20_11-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504017" comment="libslurm36-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504018" comment="perl-slurm_20_11-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504019" comment="slurm_20_11-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504020" comment="slurm_20_11-auth-none-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504021" comment="slurm_20_11-config-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504022" comment="slurm_20_11-config-man-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504023" comment="slurm_20_11-devel-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504024" comment="slurm_20_11-doc-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504025" comment="slurm_20_11-lua-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504026" comment="slurm_20_11-munge-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504027" comment="slurm_20_11-node-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504028" comment="slurm_20_11-pam_slurm-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504029" comment="slurm_20_11-plugins-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504030" comment="slurm_20_11-slurmdbd-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504031" comment="slurm_20_11-sql-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504032" comment="slurm_20_11-sview-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504033" comment="slurm_20_11-torque-20.11.7-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504034" comment="slurm_20_11-webdoc-20.11.7-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139685" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177976" ref_url="https://bugzilla.suse.com/1177976" source="BUGZILLA"/>
		<reference ref_id="1183933" ref_url="https://bugzilla.suse.com/1183933" source="BUGZILLA"/>
		<reference ref_id="1186114" ref_url="https://bugzilla.suse.com/1186114" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22876" ref_url="https://www.suse.com/security/cve/CVE-2021-22876/" source="CVE"/>
		<reference ref_id="CVE-2021-22898" ref_url="https://www.suse.com/security/cve/CVE-2021-22898/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008887.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2021-22876: Fixed an issue where the automatic referer was leaking credentials (bsc#1183933).
- CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114).
- Fix for SFTP uploads when it results in empty uploaded files (bsc#1177976).
- Allow partial chain verification (jsc#SLE-17956).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-31"/>
	<updated date="2021-05-31"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177976">SUSE bug 1177976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183933">SUSE bug 1183933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186114">SUSE bug 1186114</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22876/">CVE-2021-22876</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22898/">CVE-2021-22898</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503321" comment="curl-7.60.0-3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503322" comment="libcurl-devel-7.60.0-3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503323" comment="libcurl4-7.60.0-3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503324" comment="libcurl4-32bit-7.60.0-3.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139686" version="1" class="patch">
	<metadata>
		<title>Security update for slurm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186024" ref_url="https://bugzilla.suse.com/1186024" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31215" ref_url="https://www.suse.com/security/cve/CVE-2021-31215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1811-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008891.html" source="SUSE-SU"/>
		<description>
This update for slurm fixes the following issues:

- CVE-2021-31215: remote code execution as SlurmUser because of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling (bsc#1186024)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-31"/>
	<updated date="2021-05-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186024">SUSE bug 1186024</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-31215/">CVE-2021-31215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504035" comment="libpmi0-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504036" comment="libslurm33-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504037" comment="perl-slurm-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504038" comment="slurm-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504039" comment="slurm-auth-none-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504040" comment="slurm-config-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504041" comment="slurm-config-man-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504042" comment="slurm-devel-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504043" comment="slurm-doc-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504044" comment="slurm-lua-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504045" comment="slurm-munge-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504046" comment="slurm-node-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504047" comment="slurm-pam_slurm-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504048" comment="slurm-plugins-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504049" comment="slurm-slurmdbd-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504050" comment="slurm-sql-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504051" comment="slurm-sview-18.08.9-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504052" comment="slurm-torque-18.08.9-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139687" version="1" class="patch">
	<metadata>
		<title>Security update for ceph (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185619" ref_url="https://bugzilla.suse.com/1185619" source="BUGZILLA"/>
		<reference ref_id="1186020" ref_url="https://bugzilla.suse.com/1186020" source="BUGZILLA"/>
		<reference ref_id="1186021" ref_url="https://bugzilla.suse.com/1186021" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3509" ref_url="https://www.suse.com/security/cve/CVE-2021-3509/" source="CVE"/>
		<reference ref_id="CVE-2021-3524" ref_url="https://www.suse.com/security/cve/CVE-2021-3524/" source="CVE"/>
		<reference ref_id="CVE-2021-3531" ref_url="https://www.suse.com/security/cve/CVE-2021-3531/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008918.html" source="SUSE-SU"/>
		<description>
This update for ceph fixes the following issues:

- Update to 15.2.12-83-g528da226523:
- (CVE-2021-3509) fix cookie injection issue (bsc#1186021)
- (CVE-2021-3531) RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (bsc#1186020)
- (CVE-2021-3524) sanitize \r in s3 CORSConfiguration’s ExposeHeader (bsc#1185619)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-02"/>
	<updated date="2021-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185619">SUSE bug 1185619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186020">SUSE bug 1186020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186021">SUSE bug 1186021</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3509/">CVE-2021-3509</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3524/">CVE-2021-3524</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3531/">CVE-2021-3531</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504053" comment="ceph-common-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504054" comment="libcephfs-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504055" comment="libcephfs2-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504056" comment="librados-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504057" comment="librados2-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504058" comment="libradospp-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504059" comment="librbd-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504060" comment="librbd1-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504061" comment="librgw-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504062" comment="librgw2-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504063" comment="python3-ceph-argparse-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504064" comment="python3-cephfs-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504065" comment="python3-rados-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504066" comment="python3-rbd-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504067" comment="python3-rgw-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504068" comment="rados-objclass-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139688" version="1" class="patch">
	<metadata>
		<title>Security update for nginx (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186126" ref_url="https://bugzilla.suse.com/1186126" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23017" ref_url="https://www.suse.com/security/cve/CVE-2021-23017/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008913.html" source="SUSE-SU"/>
		<description>
This update for nginx fixes the following issues:

- CVE-2021-23017: nginx DNS resolver off-by-one heap write (bsc#1186126)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-02"/>
	<updated date="2021-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186126">SUSE bug 1186126</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23017/">CVE-2021-23017</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504069" comment="nginx-1.16.1-6.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504070" comment="nginx-source-1.16.1-6.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139689" version="1" class="patch">
	<metadata>
		<title>Security update for dhcp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186382" ref_url="https://bugzilla.suse.com/1186382" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25217" ref_url="https://www.suse.com/security/cve/CVE-2021-25217/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008914.html" source="SUSE-SU"/>
		<description>
This update for dhcp fixes the following issues:

- CVE-2021-25217: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient (bsc#1186382)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-02"/>
	<updated date="2021-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186382">SUSE bug 1186382</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-25217/">CVE-2021-25217</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503326" comment="dhcp-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503327" comment="dhcp-client-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503328" comment="dhcp-devel-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503329" comment="dhcp-relay-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503330" comment="dhcp-server-4.3.6.P1-6.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139690" version="1" class="patch">
	<metadata>
		<title>Security update for polkit (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186497" ref_url="https://bugzilla.suse.com/1186497" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3560" ref_url="https://www.suse.com/security/cve/CVE-2021-3560/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008926.html" source="SUSE-SU"/>
		<description>
This update for polkit fixes the following issues:

- CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-03"/>
	<updated date="2021-06-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186497">SUSE bug 1186497</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3560/">CVE-2021-3560</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503331" comment="libpolkit0-0.114-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503332" comment="polkit-0.114-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503333" comment="polkit-devel-0.114-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503334" comment="typelib-1_0-Polkit-1_0-0.114-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139691" version="1" class="patch">
	<metadata>
		<title>Security update for slurm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186024" ref_url="https://bugzilla.suse.com/1186024" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31215" ref_url="https://www.suse.com/security/cve/CVE-2021-31215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008930.html" source="SUSE-SU"/>
		<description>
This update for slurm fixes the following issues:

- CVE-2021-31215: remote code execution as SlurmUser because of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling (bsc#1186024)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186024">SUSE bug 1186024</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-31215/">CVE-2021-31215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503358" comment="libslurm32-17.11.13-6.37.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139692" version="1" class="patch">
	<metadata>
		<title>Security update for djvulibre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186253" ref_url="https://bugzilla.suse.com/1186253" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3500" ref_url="https://www.suse.com/security/cve/CVE-2021-3500/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1857-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008932.html" source="SUSE-SU"/>
		<description>
This update for djvulibre fixes the following issues:

- CVE-2021-3500: Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file (bsc#1186253)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186253">SUSE bug 1186253</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3500/">CVE-2021-3500</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503389" comment="libdjvulibre-devel-3.5.27-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503390" comment="libdjvulibre21-3.5.27-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139693" version="1" class="patch">
	<metadata>
		<title>Security update for wavpack (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1091340" ref_url="https://bugzilla.suse.com/1091340" source="BUGZILLA"/>
		<reference ref_id="1091341" ref_url="https://bugzilla.suse.com/1091341" source="BUGZILLA"/>
		<reference ref_id="1091342" ref_url="https://bugzilla.suse.com/1091342" source="BUGZILLA"/>
		<reference ref_id="1091343" ref_url="https://bugzilla.suse.com/1091343" source="BUGZILLA"/>
		<reference ref_id="1091344" ref_url="https://bugzilla.suse.com/1091344" source="BUGZILLA"/>
		<reference ref_id="1180414" ref_url="https://bugzilla.suse.com/1180414" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10536" ref_url="https://www.suse.com/security/cve/CVE-2018-10536/" source="CVE"/>
		<reference ref_id="CVE-2018-10537" ref_url="https://www.suse.com/security/cve/CVE-2018-10537/" source="CVE"/>
		<reference ref_id="CVE-2018-10538" ref_url="https://www.suse.com/security/cve/CVE-2018-10538/" source="CVE"/>
		<reference ref_id="CVE-2018-10539" ref_url="https://www.suse.com/security/cve/CVE-2018-10539/" source="CVE"/>
		<reference ref_id="CVE-2018-10540" ref_url="https://www.suse.com/security/cve/CVE-2018-10540/" source="CVE"/>
		<reference ref_id="CVE-2018-19840" ref_url="https://www.suse.com/security/cve/CVE-2018-19840/" source="CVE"/>
		<reference ref_id="CVE-2018-19841" ref_url="https://www.suse.com/security/cve/CVE-2018-19841/" source="CVE"/>
		<reference ref_id="CVE-2018-6767" ref_url="https://www.suse.com/security/cve/CVE-2018-6767/" source="CVE"/>
		<reference ref_id="CVE-2018-7253" ref_url="https://www.suse.com/security/cve/CVE-2018-7253/" source="CVE"/>
		<reference ref_id="CVE-2018-7254" ref_url="https://www.suse.com/security/cve/CVE-2018-7254/" source="CVE"/>
		<reference ref_id="CVE-2019-1010319" ref_url="https://www.suse.com/security/cve/CVE-2019-1010319/" source="CVE"/>
		<reference ref_id="CVE-2019-11498" ref_url="https://www.suse.com/security/cve/CVE-2019-11498/" source="CVE"/>
		<reference ref_id="CVE-2020-35738" ref_url="https://www.suse.com/security/cve/CVE-2020-35738/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<description>
This update for wavpack fixes the following issues:

- Update to version 5.4.0
  * CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples (bsc#1180414) 
  * fixed: disable A32 asm code when building for Apple silicon
  * fixed: issues with Adobe-style floating-point WAV files
  * added: --normalize-floats option to wvunpack for correctly
             exporting un-normalized floating-point files
- Update to version 5.3.0 
  * fixed: OSS-Fuzz issues 19925, 19928, 20060, 20448
  * fixed: trailing garbage characters on imported ID3v2 TXXX tags
  * fixed: various minor undefined behavior and memory access issues
  * fixed: sanitize tag extraction names for length and path inclusion
  * improved: reformat wvunpack 'help' and split into long + short versions
  * added: regression testing to Travis CI for OSS-Fuzz crashers
- Updated to version 5.2.0 
  *fixed: potential security issues including the following CVEs:
         CVE-2018-19840, CVE-2018-19841, CVE-2018-10536 (bsc#1091344),
         CVE-2018-10537 (bsc#1091343) CVE-2018-10538 (bsc#1091342),  
         CVE-2018-10539 (bsc#1091341), CVE-2018-10540 (bsc#1091340), 
         CVE-2018-7254,  CVE-2018-7253, CVE-2018-6767, CVE-2019-11498 
         and CVE-2019-1010319
  * added: support for CMake, Travis CI, and Google's OSS-fuzz
  * fixed: use correction file for encode verify (pipe input, Windows)
  * fixed: correct WAV header with actual length (pipe input, -i option)
  * fixed: thumb interworking and not needing v6 architecture (ARM asm)
  * added: handle more ID3v2.3 tag items and from all file types
  * fixed: coredump on Sparc64 (changed MD5 implementation)
  * fixed: handle invalid ID3v2.3 tags from sacd-ripper
  * fixed: several corner-case memory leaks
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-21"/>
	<updated date="2021-01-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1091340">SUSE bug 1091340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091341">SUSE bug 1091341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091342">SUSE bug 1091342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091343">SUSE bug 1091343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091344">SUSE bug 1091344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180414">SUSE bug 1180414</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10536/">CVE-2018-10536</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10537/">CVE-2018-10537</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10538/">CVE-2018-10538</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10539/">CVE-2018-10539</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10540/">CVE-2018-10540</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19840/">CVE-2018-19840</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19841/">CVE-2018-19841</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6767/">CVE-2018-6767</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7253/">CVE-2018-7253</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7254/">CVE-2018-7254</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-1010319/">CVE-2019-1010319</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11498/">CVE-2019-11498</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35738/">CVE-2020-35738</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503391" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504071" comment="wavpack-5.4.0-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504072" comment="wavpack-devel-5.4.0-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139694" version="1" class="patch">
	<metadata>
		<title>Security update for libwebp (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185652" ref_url="https://bugzilla.suse.com/1185652" source="BUGZILLA"/>
		<reference ref_id="1185654" ref_url="https://bugzilla.suse.com/1185654" source="BUGZILLA"/>
		<reference ref_id="1185673" ref_url="https://bugzilla.suse.com/1185673" source="BUGZILLA"/>
		<reference ref_id="1185674" ref_url="https://bugzilla.suse.com/1185674" source="BUGZILLA"/>
		<reference ref_id="1185685" ref_url="https://bugzilla.suse.com/1185685" source="BUGZILLA"/>
		<reference ref_id="1185686" ref_url="https://bugzilla.suse.com/1185686" source="BUGZILLA"/>
		<reference ref_id="1185688" ref_url="https://bugzilla.suse.com/1185688" source="BUGZILLA"/>
		<reference ref_id="1185690" ref_url="https://bugzilla.suse.com/1185690" source="BUGZILLA"/>
		<reference ref_id="1185691" ref_url="https://bugzilla.suse.com/1185691" source="BUGZILLA"/>
		<reference ref_id="1186247" ref_url="https://bugzilla.suse.com/1186247" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-25009" ref_url="https://www.suse.com/security/cve/CVE-2018-25009/" source="CVE"/>
		<reference ref_id="CVE-2018-25010" ref_url="https://www.suse.com/security/cve/CVE-2018-25010/" source="CVE"/>
		<reference ref_id="CVE-2018-25011" ref_url="https://www.suse.com/security/cve/CVE-2018-25011/" source="CVE"/>
		<reference ref_id="CVE-2018-25012" ref_url="https://www.suse.com/security/cve/CVE-2018-25012/" source="CVE"/>
		<reference ref_id="CVE-2018-25013" ref_url="https://www.suse.com/security/cve/CVE-2018-25013/" source="CVE"/>
		<reference ref_id="CVE-2020-36328" ref_url="https://www.suse.com/security/cve/CVE-2020-36328/" source="CVE"/>
		<reference ref_id="CVE-2020-36329" ref_url="https://www.suse.com/security/cve/CVE-2020-36329/" source="CVE"/>
		<reference ref_id="CVE-2020-36330" ref_url="https://www.suse.com/security/cve/CVE-2020-36330/" source="CVE"/>
		<reference ref_id="CVE-2020-36331" ref_url="https://www.suse.com/security/cve/CVE-2020-36331/" source="CVE"/>
		<reference ref_id="CVE-2020-36332" ref_url="https://www.suse.com/security/cve/CVE-2020-36332/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008936.html" source="SUSE-SU"/>
		<description>
This update for libwebp fixes the following issues:

- CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter() (bsc#1185685).
- CVE-2020-36330: Fixed heap-based buffer overflow in ChunkVerifyAndAssign() (bsc#1185691).
- CVE-2020-36332: Fixed extreme memory allocation when reading a file (bsc#1185674).
- CVE-2020-36329: Fixed use-after-free in EmitFancyRGB() (bsc#1185652).
- CVE-2018-25012: Fixed heap-based buffer overflow in GetLE24() (bsc#1185690).
- CVE-2020-36328: Fixed heap-based buffer overflow in WebPDecode*Into functions (bsc#1185688).
- CVE-2018-25013: Fixed heap-based buffer overflow in ShiftBytes() (bsc#1185654).
- CVE-2020-36331: Fixed heap-based buffer overflow in ChunkAssignData() (bsc#1185686).
- CVE-2018-25009: Fixed heap-based buffer overflow in GetLE16() (bsc#1185673).
- CVE-2018-25011: Fixed fail on multiple image chunks (bsc#1186247).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1185652">SUSE bug 1185652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185654">SUSE bug 1185654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185673">SUSE bug 1185673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185674">SUSE bug 1185674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185685">SUSE bug 1185685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185686">SUSE bug 1185686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185688">SUSE bug 1185688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185690">SUSE bug 1185690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185691">SUSE bug 1185691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186247">SUSE bug 1186247</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25009/">CVE-2018-25009</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25010/">CVE-2018-25010</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25011/">CVE-2018-25011</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25012/">CVE-2018-25012</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25013/">CVE-2018-25013</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36328/">CVE-2020-36328</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36329/">CVE-2020-36329</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36330/">CVE-2020-36330</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36331/">CVE-2020-36331</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36332/">CVE-2020-36332</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503392" comment="libwebp-devel-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503393" comment="libwebp6-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503394" comment="libwebpdecoder2-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503395" comment="libwebpdemux2-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503396" comment="libwebpextras0-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503397" comment="libwebpmux2-0.5.0-3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139695" version="1" class="patch">
	<metadata>
		<title>Security update for umoci (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184147" ref_url="https://bugzilla.suse.com/1184147" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29136" ref_url="https://www.suse.com/security/cve/CVE-2021-29136/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1863-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008938.html" source="SUSE-SU"/>
		<description>
This update for umoci fixes the following issues:

Update to v0.4.7 (bsc#1184147).

- CVE-2021-29136: Fixed overwriting of host files via malicious layer (bsc#1184147).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184147">SUSE bug 1184147</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29136/">CVE-2021-29136</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504073" comment="umoci-0.4.7-3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139696" version="1" class="patch">
	<metadata>
		<title>Security update for pam_radius (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1163933" ref_url="https://bugzilla.suse.com/1163933" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-9542" ref_url="https://www.suse.com/security/cve/CVE-2015-9542/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008958.html" source="SUSE-SU"/>
		<description>
This update for pam_radius fixes the following issues:

- CVE-2015-9542: pam_radius: buffer overflow in password field (bsc#1163933)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-08"/>
	<updated date="2021-06-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1163933">SUSE bug 1163933</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9542/">CVE-2015-9542</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503413" comment="pam_radius-1.4.0-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139697" version="1" class="patch">
	<metadata>
		<title>Security update for libX11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186643" ref_url="https://bugzilla.suse.com/1186643" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31535" ref_url="https://www.suse.com/security/cve/CVE-2021-31535/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1897-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008960.html" source="SUSE-SU"/>
		<description>
This update for libX11 fixes the following issues:

- Regression in the fix for CVE-2021-31535, causing segfaults for xforms applications like fdesign (bsc#1186643)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-08"/>
	<updated date="2021-06-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186643">SUSE bug 1186643</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31535/">CVE-2021-31535</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503414" comment="libX11-6-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494025" comment="libX11-6-32bit-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494026" comment="libX11-data-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503415" comment="libX11-devel-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503416" comment="libX11-xcb1-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494029" comment="libX11-xcb1-32bit-1.6.5-3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139698" version="1" class="patch">
	<metadata>
		<title>Security update for gstreamer-plugins-bad (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181255" ref_url="https://bugzilla.suse.com/1181255" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3185" ref_url="https://www.suse.com/security/cve/CVE-2021-3185/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008961.html" source="SUSE-SU"/>
		<description>
This update for gstreamer-plugins-bad fixes the following issues:

- CVE-2021-3185: h264parser: guard against ref_pic_markings overflow (bsc#1181255 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-08"/>
	<updated date="2021-06-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181255">SUSE bug 1181255</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3185/">CVE-2021-3185</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503419" comment="gstreamer-plugins-bad-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503420" comment="gstreamer-plugins-bad-devel-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503421" comment="gstreamer-plugins-bad-lang-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503422" comment="libgstadaptivedemux-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503423" comment="libgstbadallocators-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503424" comment="libgstbadaudio-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503425" comment="libgstbadbase-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503426" comment="libgstbadvideo-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503427" comment="libgstbasecamerabinsrc-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503428" comment="libgstcodecparsers-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503429" comment="libgstgl-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503430" comment="libgstinsertbin-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503431" comment="libgstmpegts-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503432" comment="libgstphotography-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503433" comment="libgstplayer-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503434" comment="libgsturidownloader-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503435" comment="libgstwayland-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503436" comment="typelib-1_0-GstBadAllocators-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503437" comment="typelib-1_0-GstGL-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503438" comment="typelib-1_0-GstInsertBin-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503439" comment="typelib-1_0-GstMpegts-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503440" comment="typelib-1_0-GstPlayer-1_0-1.12.5-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139699" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181161" ref_url="https://bugzilla.suse.com/1181161" source="BUGZILLA"/>
		<reference ref_id="1183405" ref_url="https://bugzilla.suse.com/1183405" source="BUGZILLA"/>
		<reference ref_id="1183738" ref_url="https://bugzilla.suse.com/1183738" source="BUGZILLA"/>
		<reference ref_id="1183947" ref_url="https://bugzilla.suse.com/1183947" source="BUGZILLA"/>
		<reference ref_id="1184611" ref_url="https://bugzilla.suse.com/1184611" source="BUGZILLA"/>
		<reference ref_id="1184675" ref_url="https://bugzilla.suse.com/1184675" source="BUGZILLA"/>
		<reference ref_id="1185642" ref_url="https://bugzilla.suse.com/1185642" source="BUGZILLA"/>
		<reference ref_id="1185680" ref_url="https://bugzilla.suse.com/1185680" source="BUGZILLA"/>
		<reference ref_id="1185725" ref_url="https://bugzilla.suse.com/1185725" source="BUGZILLA"/>
		<reference ref_id="1185859" ref_url="https://bugzilla.suse.com/1185859" source="BUGZILLA"/>
		<reference ref_id="1185860" ref_url="https://bugzilla.suse.com/1185860" source="BUGZILLA"/>
		<reference ref_id="1185862" ref_url="https://bugzilla.suse.com/1185862" source="BUGZILLA"/>
		<reference ref_id="1185863" ref_url="https://bugzilla.suse.com/1185863" source="BUGZILLA"/>
		<reference ref_id="1185898" ref_url="https://bugzilla.suse.com/1185898" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1185938" ref_url="https://bugzilla.suse.com/1185938" source="BUGZILLA"/>
		<reference ref_id="1185950" ref_url="https://bugzilla.suse.com/1185950" source="BUGZILLA"/>
		<reference ref_id="1185987" ref_url="https://bugzilla.suse.com/1185987" source="BUGZILLA"/>
		<reference ref_id="1186060" ref_url="https://bugzilla.suse.com/1186060" source="BUGZILLA"/>
		<reference ref_id="1186061" ref_url="https://bugzilla.suse.com/1186061" source="BUGZILLA"/>
		<reference ref_id="1186062" ref_url="https://bugzilla.suse.com/1186062" source="BUGZILLA"/>
		<reference ref_id="1186111" ref_url="https://bugzilla.suse.com/1186111" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="1186390" ref_url="https://bugzilla.suse.com/1186390" source="BUGZILLA"/>
		<reference ref_id="1186484" ref_url="https://bugzilla.suse.com/1186484" source="BUGZILLA"/>
		<reference ref_id="1186498" ref_url="https://bugzilla.suse.com/1186498" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24586" ref_url="https://www.suse.com/security/cve/CVE-2020-24586/" source="CVE"/>
		<reference ref_id="CVE-2020-24587" ref_url="https://www.suse.com/security/cve/CVE-2020-24587/" source="CVE"/>
		<reference ref_id="CVE-2020-26139" ref_url="https://www.suse.com/security/cve/CVE-2020-26139/" source="CVE"/>
		<reference ref_id="CVE-2020-26141" ref_url="https://www.suse.com/security/cve/CVE-2020-26141/" source="CVE"/>
		<reference ref_id="CVE-2020-26145" ref_url="https://www.suse.com/security/cve/CVE-2020-26145/" source="CVE"/>
		<reference ref_id="CVE-2020-26147" ref_url="https://www.suse.com/security/cve/CVE-2020-26147/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="CVE-2021-23134" ref_url="https://www.suse.com/security/cve/CVE-2021-23134/" source="CVE"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="CVE-2021-33200" ref_url="https://www.suse.com/security/cve/CVE-2021-33200/" source="CVE"/>
		<reference ref_id="CVE-2021-3491" ref_url="https://www.suse.com/security/cve/CVE-2021-3491/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008974.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in kernel memory (bsc#1186484).
- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values. (bsc#1186111)
- CVE-2020-26139: Fixed a denial-of-service when an Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. (bnc#1186062)
- CVE-2021-23134: A Use After Free vulnerability in nfc sockets allowed local attackers to elevate their privileges. (bnc#1186060)
- CVE-2021-23133: Fixed a race condition in SCTP sockets, which could lead to privilege escalation from the context of a network service or an unprivileged process. (bnc#1184675)
- CVE-2021-3491: Fixed a potential heap overflow in mem_rw(). This vulnerability is related to the PROVIDE_BUFFERS operation, which allowed the MAX_RW_COUNT limit to be bypassed (bsc#1185642).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- CVE-2020-24586: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances this can be abused to inject arbitrary network packets and/or exfiltrate user data (bnc#1185859).
- CVE-2020-24587: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed (bnc#1185859 bnc#1185862).
- CVE-2020-26147: The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments, even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used (bnc#1185859).
- CVE-2020-26145: An issue was discovered with Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration. (bnc#1185860)
- CVE-2020-26141: An issue was discovered in the ALFA driver for AWUS036H, where the Message Integrity Check (authenticity) of fragmented TKIP frames was not verified. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol. (bnc#1185987)


The following non-security bugs were fixed:

- Drivers: hv: vmbus: Increase wait time for VMbus unload (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically (bsc#1185725).
- dm: fix redundant IO accounting for bios that need splitting (bsc#1183738).
- ibmvfc: Avoid move login if fast fail is enabled (bsc#1185938 ltc#192043).
- ibmvfc: Handle move login failure (bsc#1185938 ltc#192043).
- ibmvfc: Reinit target retries (bsc#1185938 ltc#192043).
- kabi: Fix breakage in NVMe driver (bsc#1181161).
- kabi: Fix nvmet error log definitions (bsc#1181161).
- kabi: nvme: fix fast_io_fail_tmo (bsc#1181161).
- md/raid1: properly indicate failure when ending a failed write request (bsc#1185680).
- net: sched: disable TCQ_F_NOLOCK for pfifo_fast (bsc#1183405)
- netfilter: conntrack: add new sysctl to disable RST check (bsc#1183947 bsc#1185950).
- netfilter: conntrack: avoid misleading 'invalid' in log message (bsc#1183947 bsc#1185950).
- netfilter: conntrack: improve RST handling when tuple is re-used (bsc#1183947 bsc#1185950).
- netfilter: conntrack: tcp: only close if RST matches exact sequence (bsc#1183947 bsc#1185950).
- nvme-fabrics: allow to queue requests for live queues (bsc#1181161).
- nvme-fabrics: do not check state NVME_CTRL_NEW for request acceptance (bsc#1181161).
- nvme-fabrics: reject I/O to offline device (bsc#1181161).
- nvme-pci: Sync queues on reset (bsc#1181161).
- nvme-rdma: avoid race between time out and tear down (bsc#1181161).
- nvme-rdma: avoid repeated request completion (bsc#1181161).
- nvme-rdma: avoid request double completion for concurrent nvme_rdma_timeout (bsc#1181161).
- nvme-rdma: fix controller reset hang during traffic (bsc#1181161).
- nvme-rdma: fix possible hang when failing to set io queues (bsc#1181161).
- nvme-rdma: fix timeout handler (bsc#1181161).
- nvme-rdma: serialize controller teardown sequences (bsc#1181161).
- nvme-tcp: avoid race between time out and tear down (bsc#1181161).
- nvme-tcp: avoid repeated request completion (bsc#1181161).
- nvme-tcp: avoid request double completion for concurrent nvme_tcp_timeout (bsc#1181161).
- nvme-tcp: fix controller reset hang during traffic (bsc#1181161).
- nvme-tcp: fix possible hang when failing to set io queues (bsc#1181161).
- nvme-tcp: fix timeout handler (bsc#1181161).
- nvme-tcp: serialize controller teardown sequences (bsc#1181161).
- nvme: Restart request timers in resetting state (bsc#1181161).
- nvme: add error log page slot definition (bsc#1181161).
- nvme: include admin_q sync with nvme_sync_queues (bsc#1181161).
- nvme: introduce 'Command Aborted By host' status code (bsc#1181161).
- nvme: introduce nvme_is_fabrics to check fabrics cmd (bsc#1181161).
- nvme: introduce nvme_sync_io_queues (bsc#1181161).
- nvme: make fabrics command run on a separate request queue (bsc#1181161).
- nvme: prevent warning triggered by nvme_stop_keep_alive (bsc#1181161).
- nvme: unlink head after removing last namespace (bsc#1181161).
- nvmet: add error log support for fabrics-cmd (bsc#1181161).
- nvmet: add error-log definitions (bsc#1181161).
- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-09"/>
	<updated date="2021-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181161">SUSE bug 1181161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183405">SUSE bug 1183405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183738">SUSE bug 1183738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183947">SUSE bug 1183947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184611">SUSE bug 1184611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184675">SUSE bug 1184675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185642">SUSE bug 1185642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185680">SUSE bug 1185680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185725">SUSE bug 1185725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185859">SUSE bug 1185859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185860">SUSE bug 1185860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185862">SUSE bug 1185862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185863">SUSE bug 1185863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185898">SUSE bug 1185898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185938">SUSE bug 1185938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185950">SUSE bug 1185950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185987">SUSE bug 1185987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186060">SUSE bug 1186060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186061">SUSE bug 1186061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186062">SUSE bug 1186062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186111">SUSE bug 1186111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186390">SUSE bug 1186390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186484">SUSE bug 1186484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186498">SUSE bug 1186498</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24586/">CVE-2020-24586</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24587/">CVE-2020-24587</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-26139/">CVE-2020-26139</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26141/">CVE-2020-26141</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26145/">CVE-2020-26145</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26147/">CVE-2020-26147</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23134/">CVE-2021-23134</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33200/">CVE-2021-33200</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3491/">CVE-2021-3491</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504074" comment="kernel-default-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504075" comment="kernel-default-base-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504076" comment="kernel-default-devel-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504077" comment="kernel-devel-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504078" comment="kernel-docs-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504079" comment="kernel-macros-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504080" comment="kernel-obs-build-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504081" comment="kernel-source-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504082" comment="kernel-syms-4.12.14-197.92.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139700" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1149813" ref_url="https://bugzilla.suse.com/1149813" source="BUGZILLA"/>
		<reference ref_id="1163019" ref_url="https://bugzilla.suse.com/1163019" source="BUGZILLA"/>
		<reference ref_id="1172380" ref_url="https://bugzilla.suse.com/1172380" source="BUGZILLA"/>
		<reference ref_id="1175534" ref_url="https://bugzilla.suse.com/1175534" source="BUGZILLA"/>
		<reference ref_id="1178683" ref_url="https://bugzilla.suse.com/1178683" source="BUGZILLA"/>
		<reference ref_id="1178935" ref_url="https://bugzilla.suse.com/1178935" source="BUGZILLA"/>
		<reference ref_id="1179477" ref_url="https://bugzilla.suse.com/1179477" source="BUGZILLA"/>
		<reference ref_id="1179484" ref_url="https://bugzilla.suse.com/1179484" source="BUGZILLA"/>
		<reference ref_id="1182846" ref_url="https://bugzilla.suse.com/1182846" source="BUGZILLA"/>
		<reference ref_id="1182975" ref_url="https://bugzilla.suse.com/1182975" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15890" ref_url="https://www.suse.com/security/cve/CVE-2019-15890/" source="CVE"/>
		<reference ref_id="CVE-2020-10756" ref_url="https://www.suse.com/security/cve/CVE-2020-10756/" source="CVE"/>
		<reference ref_id="CVE-2020-14364" ref_url="https://www.suse.com/security/cve/CVE-2020-14364/" source="CVE"/>
		<reference ref_id="CVE-2020-25707" ref_url="https://www.suse.com/security/cve/CVE-2020-25707/" source="CVE"/>
		<reference ref_id="CVE-2020-25723" ref_url="https://www.suse.com/security/cve/CVE-2020-25723/" source="CVE"/>
		<reference ref_id="CVE-2020-29129" ref_url="https://www.suse.com/security/cve/CVE-2020-29129/" source="CVE"/>
		<reference ref_id="CVE-2020-29130" ref_url="https://www.suse.com/security/cve/CVE-2020-29130/" source="CVE"/>
		<reference ref_id="CVE-2020-8608" ref_url="https://www.suse.com/security/cve/CVE-2020-8608/" source="CVE"/>
		<reference ref_id="CVE-2021-20257" ref_url="https://www.suse.com/security/cve/CVE-2021-20257/" source="CVE"/>
		<reference ref_id="CVE-2021-3419" ref_url="https://www.suse.com/security/cve/CVE-2021-3419/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008972.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

- CVE-2020-10756: Fix out-of-bounds read information disclosure in icmp6_send_echoreply (bsc#1172380)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-09"/>
	<updated date="2021-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1149813">SUSE bug 1149813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163019">SUSE bug 1163019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172380">SUSE bug 1172380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175534">SUSE bug 1175534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178683">SUSE bug 1178683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178935">SUSE bug 1178935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179477">SUSE bug 1179477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179484">SUSE bug 1179484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182846">SUSE bug 1182846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182975">SUSE bug 1182975</bugzilla>
	<cve impact="moderate" cvss3="5.8/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15890/">CVE-2019-15890</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10756/">CVE-2020-10756</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14364/">CVE-2020-14364</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25707/">CVE-2020-25707</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25723/">CVE-2020-25723</cve>
	<cve impact="low" cvss3="2.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29129/">CVE-2020-29129</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29130/">CVE-2020-29130</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-8608/">CVE-2020-8608</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20257/">CVE-2021-20257</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3419/">CVE-2021-3419</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504083" comment="qemu-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504084" comment="qemu-arm-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504085" comment="qemu-audio-alsa-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499919" comment="qemu-audio-oss-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504086" comment="qemu-audio-pa-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504087" comment="qemu-block-curl-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504088" comment="qemu-block-iscsi-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504089" comment="qemu-block-rbd-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504090" comment="qemu-block-ssh-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504091" comment="qemu-guest-agent-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504092" comment="qemu-ipxe-1.0.0+-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504093" comment="qemu-kvm-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504094" comment="qemu-lang-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504095" comment="qemu-seabios-1.12.0_0_ga698c89-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504096" comment="qemu-sgabios-8-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504097" comment="qemu-tools-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504098" comment="qemu-ui-curses-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504099" comment="qemu-ui-gtk-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504100" comment="qemu-vgabios-1.12.0_0_ga698c89-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504101" comment="qemu-x86-3.1.1.1-9.27.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139701" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185633" ref_url="https://bugzilla.suse.com/1185633" source="BUGZILLA"/>
		<reference ref_id="1186696" ref_url="https://bugzilla.suse.com/1186696" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29951" ref_url="https://www.suse.com/security/cve/CVE-2021-29951/" source="CVE"/>
		<reference ref_id="CVE-2021-29964" ref_url="https://www.suse.com/security/cve/CVE-2021-29964/" source="CVE"/>
		<reference ref_id="CVE-2021-29967" ref_url="https://www.suse.com/security/cve/CVE-2021-29967/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008975.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 78.11.0 ESR (bsc#1186696)

  * CVE-2021-29964: Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967: Memory safety bugs fixed in Firefox
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-09"/>
	<updated date="2021-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185633">SUSE bug 1185633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186696">SUSE bug 1186696</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-29951/">CVE-2021-29951</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29964/">CVE-2021-29964</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29967/">CVE-2021-29967</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503448" comment="MozillaFirefox-78.11.0-3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503449" comment="MozillaFirefox-devel-78.11.0-3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503450" comment="MozillaFirefox-translations-common-78.11.0-3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503451" comment="MozillaFirefox-translations-other-78.11.0-3.144.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139702" version="1" class="patch">
	<metadata>
		<title>Security update for spice-gtk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177158" ref_url="https://bugzilla.suse.com/1177158" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14355" ref_url="https://www.suse.com/security/cve/CVE-2020-14355/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008978.html" source="SUSE-SU"/>
		<description>
This update for spice-gtk fixes the following issues:

- CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC decoding code (bsc#1177158)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-10"/>
	<updated date="2021-06-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177158">SUSE bug 1177158</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14355/">CVE-2020-14355</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504102" comment="libspice-client-glib-2_0-8-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504103" comment="libspice-client-glib-helper-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504104" comment="libspice-client-gtk-3_0-5-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504105" comment="spice-gtk-devel-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504106" comment="typelib-1_0-SpiceClientGlib-2_0-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504107" comment="typelib-1_0-SpiceClientGtk-3_0-0.35-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139703" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179833" ref_url="https://bugzilla.suse.com/1179833" source="BUGZILLA"/>
		<reference ref_id="1179836" ref_url="https://bugzilla.suse.com/1179836" source="BUGZILLA"/>
		<reference ref_id="1179837" ref_url="https://bugzilla.suse.com/1179837" source="BUGZILLA"/>
		<reference ref_id="1179839" ref_url="https://bugzilla.suse.com/1179839" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24489" ref_url="https://www.suse.com/security/cve/CVE-2020-24489/" source="CVE"/>
		<reference ref_id="CVE-2020-24511" ref_url="https://www.suse.com/security/cve/CVE-2020-24511/" source="CVE"/>
		<reference ref_id="CVE-2020-24512" ref_url="https://www.suse.com/security/cve/CVE-2020-24512/" source="CVE"/>
		<reference ref_id="CVE-2020-24513" ref_url="https://www.suse.com/security/cve/CVE-2020-24513/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008980.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20210525 release.

  - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)

    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html

  - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)

    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)

  - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)

    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)

  - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)

    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html

Other fixes:

- Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
- Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
- Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
- Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
- Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
- Update for functional issues. Refer to [6th Gen Intel Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
- Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.

- New platforms:

| Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2
| ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3
| ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3
| SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB
| SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB
| TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile
| TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile
| TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile
| EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
| JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
| RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11

- Updated platforms:

| Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3
| HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3
| SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
| SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
| BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx
| SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable
| SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable
| SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx
| CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2
| CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2
| CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3
| BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
| BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87
| BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53
| APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
| APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx
| SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5
| DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series
| GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx
| GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
| ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile
| LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology
| AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile
| KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile
| CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile
| WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile
| AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
| CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
| WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile
| KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6
| CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E
| CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8
| CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9
| CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile
| CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile
| CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10
| CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10
| CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile
| CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-10"/>
	<updated date="2021-06-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179833">SUSE bug 1179833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179836">SUSE bug 1179836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179837">SUSE bug 1179837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179839">SUSE bug 1179839</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24489/">CVE-2020-24489</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24511/">CVE-2020-24511</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24512/">CVE-2020-24512</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24513/">CVE-2020-24513</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504108" comment="ucode-intel-20210525-3.203.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139704" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1168481" ref_url="https://bugzilla.suse.com/1168481" source="BUGZILLA"/>
		<reference ref_id="1175081" ref_url="https://bugzilla.suse.com/1175081" source="BUGZILLA"/>
		<reference ref_id="1175821" ref_url="https://bugzilla.suse.com/1175821" source="BUGZILLA"/>
		<reference ref_id="1181594" ref_url="https://bugzilla.suse.com/1181594" source="BUGZILLA"/>
		<reference ref_id="1181641" ref_url="https://bugzilla.suse.com/1181641" source="BUGZILLA"/>
		<reference ref_id="1181677" ref_url="https://bugzilla.suse.com/1181677" source="BUGZILLA"/>
		<reference ref_id="1181730" ref_url="https://bugzilla.suse.com/1181730" source="BUGZILLA"/>
		<reference ref_id="1181732" ref_url="https://bugzilla.suse.com/1181732" source="BUGZILLA"/>
		<reference ref_id="1181749" ref_url="https://bugzilla.suse.com/1181749" source="BUGZILLA"/>
		<reference ref_id="1182451" ref_url="https://bugzilla.suse.com/1182451" source="BUGZILLA"/>
		<reference ref_id="1182476" ref_url="https://bugzilla.suse.com/1182476" source="BUGZILLA"/>
		<reference ref_id="1182947" ref_url="https://bugzilla.suse.com/1182947" source="BUGZILLA"/>
		<reference ref_id="1183024" ref_url="https://bugzilla.suse.com/1183024" source="BUGZILLA"/>
		<reference ref_id="1183855" ref_url="https://bugzilla.suse.com/1183855" source="BUGZILLA"/>
		<reference ref_id="1184768" ref_url="https://bugzilla.suse.com/1184768" source="BUGZILLA"/>
		<reference ref_id="1184962" ref_url="https://bugzilla.suse.com/1184962" source="BUGZILLA"/>
		<reference ref_id="1185405" ref_url="https://bugzilla.suse.com/1185405" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21284" ref_url="https://www.suse.com/security/cve/CVE-2021-21284/" source="CVE"/>
		<reference ref_id="CVE-2021-21285" ref_url="https://www.suse.com/security/cve/CVE-2021-21285/" source="CVE"/>
		<reference ref_id="CVE-2021-21334" ref_url="https://www.suse.com/security/cve/CVE-2021-21334/" source="CVE"/>
		<reference ref_id="CVE-2021-30465" ref_url="https://www.suse.com/security/cve/CVE-2021-30465/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008994.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, runc fixes the following issues:

Docker was updated to 20.10.6-ce (bsc#1184768, bsc#1182947, bsc#1181594)

* Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools (bsc#1182476).
* CVE-2021-21284: Fixed a potential privilege escalation when the root user in 
  the remapped namespace has access to the host filesystem (bsc#1181732)
* CVE-2021-21285: Fixed an issue where pulling a malformed Docker image manifest 
  crashes the dockerd daemon (bsc#1181730). 
* btrfs quotas being removed by Docker regularly (bsc#1183855, bsc#1175081)

runc was updated to v1.0.0~rc93 (bsc#1182451, bsc#1175821 bsc#1184962).

* Use the upstream runc package (bsc#1181641, bsc#1181677, bsc#1175821).
* Fixed /dev/null is not available (bsc#1168481).
* CVE-2021-30465: Fixed a symlink-exchange attack vulnarability (bsc#1185405).

containerd was updated to v1.4.4

* CVE-2021-21334: Fixed a potential information leak through environment variables (bsc#1183397).
* Handle a requirement from docker (bsc#1181594).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-11"/>
	<updated date="2021-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168481">SUSE bug 1168481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175081">SUSE bug 1175081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175821">SUSE bug 1175821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181594">SUSE bug 1181594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181641">SUSE bug 1181641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181677">SUSE bug 1181677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181730">SUSE bug 1181730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181732">SUSE bug 1181732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181749">SUSE bug 1181749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182451">SUSE bug 1182451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182476">SUSE bug 1182476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182947">SUSE bug 1182947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183024">SUSE bug 1183024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183855">SUSE bug 1183855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184768">SUSE bug 1184768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184962">SUSE bug 1184962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185405">SUSE bug 1185405</bugzilla>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21284/">CVE-2021-21284</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21285/">CVE-2021-21285</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21334/">CVE-2021-21334</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30465/">CVE-2021-30465</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504109" comment="containerd-1.4.4-5.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504110" comment="docker-20.10.6_ce-6.49.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494424" comment="docker-bash-completion-20.10.6_ce-6.49.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504111" comment="runc-1.0.0~rc93-1.14.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139705" version="1" class="patch">
	<metadata>
		<title>Security update for spice (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177158" ref_url="https://bugzilla.suse.com/1177158" source="BUGZILLA"/>
		<reference ref_id="1181686" ref_url="https://bugzilla.suse.com/1181686" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14355" ref_url="https://www.suse.com/security/cve/CVE-2020-14355/" source="CVE"/>
		<reference ref_id="CVE-2021-20201" ref_url="https://www.suse.com/security/cve/CVE-2021-20201/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008998.html" source="SUSE-SU"/>
		<description>
This update for spice fixes the following issues:

- CVE-2021-20201: client initiated renegotiation causing denial of service (bsc#1181686)
- CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC decoding code (bsc#1177158)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-11"/>
	<updated date="2021-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177158">SUSE bug 1177158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181686">SUSE bug 1181686</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14355/">CVE-2020-14355</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20201/">CVE-2021-20201</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504112" comment="libspice-server-devel-0.14.1-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504113" comment="libspice-server1-0.14.1-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139706" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1171164" ref_url="https://bugzilla.suse.com/1171164" source="BUGZILLA"/>
		<reference ref_id="1171569" ref_url="https://bugzilla.suse.com/1171569" source="BUGZILLA"/>
		<reference ref_id="1183436" ref_url="https://bugzilla.suse.com/1183436" source="BUGZILLA"/>
		<reference ref_id="1185916" ref_url="https://bugzilla.suse.com/1185916" source="BUGZILLA"/>
		<reference ref_id="1185918" ref_url="https://bugzilla.suse.com/1185918" source="BUGZILLA"/>
		<reference ref_id="1185919" ref_url="https://bugzilla.suse.com/1185919" source="BUGZILLA"/>
		<reference ref_id="1185921" ref_url="https://bugzilla.suse.com/1185921" source="BUGZILLA"/>
		<reference ref_id="1185923" ref_url="https://bugzilla.suse.com/1185923" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25097" ref_url="https://www.suse.com/security/cve/CVE-2020-25097/" source="CVE"/>
		<reference ref_id="CVE-2021-28651" ref_url="https://www.suse.com/security/cve/CVE-2021-28651/" source="CVE"/>
		<reference ref_id="CVE-2021-28652" ref_url="https://www.suse.com/security/cve/CVE-2021-28652/" source="CVE"/>
		<reference ref_id="CVE-2021-28662" ref_url="https://www.suse.com/security/cve/CVE-2021-28662/" source="CVE"/>
		<reference ref_id="CVE-2021-31806" ref_url="https://www.suse.com/security/cve/CVE-2021-31806/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009003.html" source="SUSE-SU"/>
		<description>
This update for squid fixes the following issues:

- update to 4.15:
- CVE-2021-28652: Broken cache manager URL parsing (bsc#1185918)
- CVE-2021-28651: Memory leak in RFC 2169 response parsing (bsc#1185921)
- CVE-2021-28662: Limit HeaderLookupTable_t::lookup() to BadHdr and specific IDs (bsc#1185919)
- CVE-2021-31806: Handle more Range requests (bsc#1185916)
- CVE-2020-25097: HTTP Request Smuggling vulnerability (bsc#1183436)
- Handle more partial responses (bsc#1185923)
- fix previous change to reinstante permissions macros, because the wrong path has been used (bsc#1171569).
- use libexecdir instead of libdir to conform to recent changes in Factory (bsc#1171164).
- Reinstate permissions macros for pinger binary, because the permissions
  package is also responsible for setting up the cap_net_raw capability,
  currently a fresh squid install doesn't get a capability bit at all (bsc#1171569).
- Change pinger and basic_pam_auth helper to use standard permissions. pinger uses cap_net_raw=ep instead (bsc#1171569)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-11"/>
	<updated date="2021-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171164">SUSE bug 1171164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171569">SUSE bug 1171569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183436">SUSE bug 1183436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185916">SUSE bug 1185916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185918">SUSE bug 1185918</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185919">SUSE bug 1185919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185921">SUSE bug 1185921</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185923">SUSE bug 1185923</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25097/">CVE-2020-25097</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28651/">CVE-2021-28651</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28652/">CVE-2021-28652</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28662/">CVE-2021-28662</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31806/">CVE-2021-31806</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503456" comment="squid-4.15-5.26.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139707" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1145740" ref_url="https://bugzilla.suse.com/1145740" source="BUGZILLA"/>
		<reference ref_id="1180530" ref_url="https://bugzilla.suse.com/1180530" source="BUGZILLA"/>
		<reference ref_id="1182703" ref_url="https://bugzilla.suse.com/1182703" source="BUGZILLA"/>
		<reference ref_id="1186922" ref_url="https://bugzilla.suse.com/1186922" source="BUGZILLA"/>
		<reference ref_id="1186923" ref_url="https://bugzilla.suse.com/1186923" source="BUGZILLA"/>
		<reference ref_id="1186924" ref_url="https://bugzilla.suse.com/1186924" source="BUGZILLA"/>
		<reference ref_id="1187017" ref_url="https://bugzilla.suse.com/1187017" source="BUGZILLA"/>
		<reference ref_id="1187174" ref_url="https://bugzilla.suse.com/1187174" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10092" ref_url="https://www.suse.com/security/cve/CVE-2019-10092/" source="CVE"/>
		<reference ref_id="CVE-2020-35452" ref_url="https://www.suse.com/security/cve/CVE-2020-35452/" source="CVE"/>
		<reference ref_id="CVE-2021-26690" ref_url="https://www.suse.com/security/cve/CVE-2021-26690/" source="CVE"/>
		<reference ref_id="CVE-2021-26691" ref_url="https://www.suse.com/security/cve/CVE-2021-26691/" source="CVE"/>
		<reference ref_id="CVE-2021-30641" ref_url="https://www.suse.com/security/cve/CVE-2021-30641/" source="CVE"/>
		<reference ref_id="CVE-2021-31618" ref_url="https://www.suse.com/security/cve/CVE-2021-31618/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009030.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2021-30641: Fixed MergeSlashes regression (bsc#1187174)
- CVE-2021-31618: Fixed NULL pointer dereference on specially crafted HTTP/2 request (bsc#1186924)
- CVE-2020-35452: Fixed Single zero byte stack overflow in mod_auth_digest (bsc#1186922)
- CVE-2021-26690: Fixed mod_session NULL pointer dereference in parser (bsc#1186923)
- CVE-2021-26691: Fixed Heap overflow in mod_session (bsc#1187017)
- Fixed potential content spoofing with default error pages (bsc#1182703)
- Fixed for an issue when 'gensslcert' does not set CA:True. (bsc#1180530)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-17"/>
	<updated date="2021-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1145740">SUSE bug 1145740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180530">SUSE bug 1180530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182703">SUSE bug 1182703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186922">SUSE bug 1186922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186923">SUSE bug 1186923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186924">SUSE bug 1186924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187017">SUSE bug 1187017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187174">SUSE bug 1187174</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-10092/">CVE-2019-10092</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35452/">CVE-2020-35452</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26690/">CVE-2021-26690</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26691/">CVE-2021-26691</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30641/">CVE-2021-30641</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31618/">CVE-2021-31618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503466" comment="apache2-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503467" comment="apache2-devel-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503468" comment="apache2-doc-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503469" comment="apache2-prefork-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503470" comment="apache2-utils-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503471" comment="apache2-worker-2.4.33-3.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139708" version="1" class="patch">
	<metadata>
		<title>Security update for caribou (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186617" ref_url="https://bugzilla.suse.com/1186617" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3567" ref_url="https://www.suse.com/security/cve/CVE-2021-3567/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009035.html" source="SUSE-SU"/>
		<description>
This update for caribou fixes the following issues:

Security issue fixed:

- CVE-2021-3567: Fixed a segfault when attempting to use shifted characters (bsc#1186617).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-17"/>
	<updated date="2021-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186617">SUSE bug 1186617</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3567/">CVE-2021-3567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503472" comment="caribou-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503473" comment="caribou-common-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503474" comment="caribou-devel-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503475" comment="caribou-gtk-module-common-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503476" comment="caribou-gtk2-module-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503477" comment="caribou-gtk3-module-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503478" comment="caribou-lang-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503479" comment="libcaribou0-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503480" comment="typelib-1_0-Caribou-1_0-0.4.21-5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139709" version="1" class="patch">
	<metadata>
		<title>Security update for python-rsa (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1172389" ref_url="https://bugzilla.suse.com/1172389" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13757" ref_url="https://www.suse.com/security/cve/CVE-2020-13757/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009029.html" source="SUSE-SU"/>
		<description>
This update for python-rsa fixes the following issues:

- CVE-2020-13757: Proper handling of leading '\0' bytes during decryption of ciphertext (bsc#1172389)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-17"/>
	<updated date="2021-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172389">SUSE bug 1172389</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-13757/">CVE-2020-13757</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494053" comment="python3-rsa-3.4.2-3.4.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139710" version="1" class="patch">
	<metadata>
		<title>Security update for xterm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1169444" ref_url="https://bugzilla.suse.com/1169444" source="BUGZILLA"/>
		<reference ref_id="1182091" ref_url="https://bugzilla.suse.com/1182091" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27135" ref_url="https://www.suse.com/security/cve/CVE-2021-27135/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009040.html" source="SUSE-SU"/>
		<description>
This update for xterm fixes the following issues:

- CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. (bsc#1182091)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1169444">SUSE bug 1169444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182091">SUSE bug 1182091</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27135/">CVE-2021-27135</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503481" comment="xterm-330-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503482" comment="xterm-bin-330-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139711" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1171257" ref_url="https://bugzilla.suse.com/1171257" source="BUGZILLA"/>
		<reference ref_id="1176293" ref_url="https://bugzilla.suse.com/1176293" source="BUGZILLA"/>
		<reference ref_id="1179831" ref_url="https://bugzilla.suse.com/1179831" source="BUGZILLA"/>
		<reference ref_id="1181368" ref_url="https://bugzilla.suse.com/1181368" source="BUGZILLA"/>
		<reference ref_id="1182281" ref_url="https://bugzilla.suse.com/1182281" source="BUGZILLA"/>
		<reference ref_id="1182293" ref_url="https://bugzilla.suse.com/1182293" source="BUGZILLA"/>
		<reference ref_id="1182382" ref_url="https://bugzilla.suse.com/1182382" source="BUGZILLA"/>
		<reference ref_id="1185092" ref_url="https://bugzilla.suse.com/1185092" source="BUGZILLA"/>
		<reference ref_id="1185281" ref_url="https://bugzilla.suse.com/1185281" source="BUGZILLA"/>
		<reference ref_id="1186674" ref_url="https://bugzilla.suse.com/1186674" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-15750" ref_url="https://www.suse.com/security/cve/CVE-2018-15750/" source="CVE"/>
		<reference ref_id="CVE-2018-15751" ref_url="https://www.suse.com/security/cve/CVE-2018-15751/" source="CVE"/>
		<reference ref_id="CVE-2020-11651" ref_url="https://www.suse.com/security/cve/CVE-2020-11651/" source="CVE"/>
		<reference ref_id="CVE-2020-11652" ref_url="https://www.suse.com/security/cve/CVE-2020-11652/" source="CVE"/>
		<reference ref_id="CVE-2020-25592" ref_url="https://www.suse.com/security/cve/CVE-2020-25592/" source="CVE"/>
		<reference ref_id="CVE-2021-25315" ref_url="https://www.suse.com/security/cve/CVE-2021-25315/" source="CVE"/>
		<reference ref_id="CVE-2021-31607" ref_url="https://www.suse.com/security/cve/CVE-2021-31607/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009057.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

Update to Salt release version 3002.2 (jsc#ECO-3212, jsc#SLE-18033, jsc#SLE-18028)

- Check if dpkgnotify is executable (bsc#1186674)
- Drop support for Python2. Obsoletes `python2-salt` package (jsc#SLE-18028)
- virt module updates
  * network: handle missing ipv4 netmask attribute
  * more network support
  * PCI/USB host devices passthrough support
- Set distro requirement to oldest supported version in requirements/base.txt
- Bring missing part of async batch implementation back (bsc#1182382, CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Remove deprecated warning that breaks minion execution when 'server_id_use_crc' opts is missing
- Fix pkg states when DEB package has 'all' arch
- Do not force beacons configuration to be a list.
- Remove msgpack &lt; 1.0.0 from base requirements (bsc#1176293)
- msgpack support for version &gt;= 1.0.0 (bsc#1171257)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281, CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18033)
- Remove duplicate directories from specfile
- Improvements on 'ansiblegate' module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Regression fix of salt-ssh on processing targets
- Update target fix for salt-ssh and avoiding race condition on salt-ssh event processing (bsc#1179831, bsc#1182281)
- Add notify beacon for Debian/Ubuntu systems
- Fix zmq bug that causes salt-call to freeze (bsc#1181368)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-21"/>
	<updated date="2021-06-21"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1171257">SUSE bug 1171257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176293">SUSE bug 1176293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179831">SUSE bug 1179831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181368">SUSE bug 1181368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182281">SUSE bug 1182281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182293">SUSE bug 1182293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182382">SUSE bug 1182382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185092">SUSE bug 1185092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185281">SUSE bug 1185281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186674">SUSE bug 1186674</bugzilla>
	<cve impact="important" cvss3="8.7/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-15750/">CVE-2018-15750</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15751/">CVE-2018-15751</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11651/">CVE-2020-11651</cve>
	<cve impact="critical" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11652/">CVE-2020-11652</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25592/">CVE-2020-25592</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25315/">CVE-2021-25315</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31607/">CVE-2021-31607</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504114" comment="python3-salt-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504115" comment="salt-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504116" comment="salt-api-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494060" comment="salt-bash-completion-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504117" comment="salt-cloud-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504118" comment="salt-doc-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499949" comment="salt-fish-completion-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504119" comment="salt-master-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504120" comment="salt-minion-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504121" comment="salt-proxy-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504122" comment="salt-ssh-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504123" comment="salt-standalone-formulas-configuration-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504124" comment="salt-syndic-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504125" comment="salt-transactional-update-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494063" comment="salt-zsh-completion-3002.2-37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139712" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187418" ref_url="https://bugzilla.suse.com/1187418" source="BUGZILLA"/>
		<reference ref_id="1187419" ref_url="https://bugzilla.suse.com/1187419" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29157" ref_url="https://www.suse.com/security/cve/CVE-2021-29157/" source="CVE"/>
		<reference ref_id="CVE-2021-33515" ref_url="https://www.suse.com/security/cve/CVE-2021-33515/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2124-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019410.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 fixes the following issues:

- CVE-2021-29157: Local attacker can login as any user and access their emails (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails (bsc#1187419)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-22"/>
	<updated date="2021-06-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187418">SUSE bug 1187418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187419">SUSE bug 1187419</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29157/">CVE-2021-29157</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-33515/">CVE-2021-33515</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504126" comment="dovecot23-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504127" comment="dovecot23-backend-mysql-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504128" comment="dovecot23-backend-pgsql-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504129" comment="dovecot23-backend-sqlite-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504130" comment="dovecot23-devel-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504131" comment="dovecot23-fts-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504132" comment="dovecot23-fts-lucene-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504133" comment="dovecot23-fts-solr-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504134" comment="dovecot23-fts-squat-2.3.11.3-24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139713" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179930" ref_url="https://bugzilla.suse.com/1179930" source="BUGZILLA"/>
		<reference ref_id="1179931" ref_url="https://bugzilla.suse.com/1179931" source="BUGZILLA"/>
		<reference ref_id="1179932" ref_url="https://bugzilla.suse.com/1179932" source="BUGZILLA"/>
		<reference ref_id="1179933" ref_url="https://bugzilla.suse.com/1179933" source="BUGZILLA"/>
		<reference ref_id="1180102" ref_url="https://bugzilla.suse.com/1180102" source="BUGZILLA"/>
		<reference ref_id="1180232" ref_url="https://bugzilla.suse.com/1180232" source="BUGZILLA"/>
		<reference ref_id="1181598" ref_url="https://bugzilla.suse.com/1181598" source="BUGZILLA"/>
		<reference ref_id="1181599" ref_url="https://bugzilla.suse.com/1181599" source="BUGZILLA"/>
		<reference ref_id="1183353" ref_url="https://bugzilla.suse.com/1183353" source="BUGZILLA"/>
		<reference ref_id="1184110" ref_url="https://bugzilla.suse.com/1184110" source="BUGZILLA"/>
		<reference ref_id="1185128" ref_url="https://bugzilla.suse.com/1185128" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26418" ref_url="https://www.suse.com/security/cve/CVE-2020-26418/" source="CVE"/>
		<reference ref_id="CVE-2020-26419" ref_url="https://www.suse.com/security/cve/CVE-2020-26419/" source="CVE"/>
		<reference ref_id="CVE-2020-26420" ref_url="https://www.suse.com/security/cve/CVE-2020-26420/" source="CVE"/>
		<reference ref_id="CVE-2020-26421" ref_url="https://www.suse.com/security/cve/CVE-2020-26421/" source="CVE"/>
		<reference ref_id="CVE-2020-26422" ref_url="https://www.suse.com/security/cve/CVE-2020-26422/" source="CVE"/>
		<reference ref_id="CVE-2021-22173" ref_url="https://www.suse.com/security/cve/CVE-2021-22173/" source="CVE"/>
		<reference ref_id="CVE-2021-22174" ref_url="https://www.suse.com/security/cve/CVE-2021-22174/" source="CVE"/>
		<reference ref_id="CVE-2021-22191" ref_url="https://www.suse.com/security/cve/CVE-2021-22191/" source="CVE"/>
		<reference ref_id="CVE-2021-22207" ref_url="https://www.suse.com/security/cve/CVE-2021-22207/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009067.html" source="SUSE-SU"/>
		<description>
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:

Update wireshark to version 3.4.5

- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements

Including security fixes for:

- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932) 
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)

libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-22"/>
	<updated date="2021-06-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179930">SUSE bug 1179930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179931">SUSE bug 1179931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179932">SUSE bug 1179932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179933">SUSE bug 1179933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180102">SUSE bug 1180102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180232">SUSE bug 1180232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181598">SUSE bug 1181598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181599">SUSE bug 1181599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183353">SUSE bug 1183353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184110">SUSE bug 1184110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185128">SUSE bug 1185128</bugzilla>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26418/">CVE-2020-26418</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26419/">CVE-2020-26419</cve>
	<cve impact="low" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26420/">CVE-2020-26420</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-26421/">CVE-2020-26421</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26422/">CVE-2020-26422</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-22173/">CVE-2021-22173</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-22174/">CVE-2021-22174</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22191/">CVE-2021-22191</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-22207/">CVE-2021-22207</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504135" comment="libQt5Multimedia5-5.9.7-7.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504136" comment="libqt5-qtmultimedia-devel-5.9.7-7.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504137" comment="libqt5-qtmultimedia-private-headers-devel-5.9.7-7.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503504" comment="libsbc1-1.3-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503536" comment="libwireshark14-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503537" comment="libwiretap11-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503538" comment="libwsutil12-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503539" comment="sbc-devel-1.3-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503540" comment="wireshark-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503541" comment="wireshark-devel-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503542" comment="wireshark-ui-qt-3.4.5-3.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139714" version="1" class="patch">
	<metadata>
		<title>Security update for cryptctl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186226" ref_url="https://bugzilla.suse.com/1186226" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18906" ref_url="https://www.suse.com/security/cve/CVE-2019-18906/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2136-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009076.html" source="SUSE-SU"/>
		<description>
This update for cryptctl fixes the following issues:

Update to version 2.4:

- CVE-2019-18906: Client side password hashing was equivalent to clear text password storage (bsc#1186226)
- First step to use plain text password instead of hashed password.
- Move repository into the SUSE github organization
- in RPC server, if client comes from localhost, remember its ipv4 localhost address instead of ipv6 address
- tell a record to clear expired pending commands upon saving a command result; introduce pending commands RPC test case
- avoid hard coding 127.0.0.1 in host ID of alive message test; let system administrator mount and unmount disks by issuing these two commands on key server.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-23"/>
	<updated date="2021-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186226">SUSE bug 1186226</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18906/">CVE-2019-18906</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504138" comment="cryptctl-2.4-4.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139715" version="1" class="patch">
	<metadata>
		<title>Security update for libnettle (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187060" ref_url="https://bugzilla.suse.com/1187060" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3580" ref_url="https://www.suse.com/security/cve/CVE-2021-3580/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009079.html" source="SUSE-SU"/>
		<description>
This update for libnettle fixes the following issues:

- CVE-2021-3580: Fixed a remote denial of service in the RSA decryption via manipulated ciphertext (bsc#1187060).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-23"/>
	<updated date="2021-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187060">SUSE bug 1187060</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3580/">CVE-2021-3580</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503543" comment="libhogweed4-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494074" comment="libhogweed4-32bit-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503544" comment="libnettle-devel-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503545" comment="libnettle6-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494077" comment="libnettle6-32bit-3.4.1-4.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139716" version="1" class="patch">
	<metadata>
		<title>Security update for libgcrypt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187212" ref_url="https://bugzilla.suse.com/1187212" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33560" ref_url="https://www.suse.com/security/cve/CVE-2021-33560/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2157-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009085.html" source="SUSE-SU"/>
		<description>
This update for libgcrypt fixes the following issues:

- CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-24"/>
	<updated date="2021-06-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187212">SUSE bug 1187212</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-33560/">CVE-2021-33560</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504139" comment="libgcrypt-devel-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504140" comment="libgcrypt20-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494080" comment="libgcrypt20-32bit-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504141" comment="libgcrypt20-hmac-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494082" comment="libgcrypt20-hmac-32bit-1.8.2-8.39.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139717" version="1" class="patch">
	<metadata>
		<title>Security update for openexr (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187310" ref_url="https://bugzilla.suse.com/1187310" source="BUGZILLA"/>
		<reference ref_id="1187395" ref_url="https://bugzilla.suse.com/1187395" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3598" ref_url="https://www.suse.com/security/cve/CVE-2021-3598/" source="CVE"/>
		<reference ref_id="CVE-2021-3605" ref_url="https://www.suse.com/security/cve/CVE-2021-3605/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009086.html" source="SUSE-SU"/>
		<description>
This update for openexr fixes the following issues:

- Fixed CVE-2021-3605 [bsc#1187395]: Heap buffer overflow in the rleUncompress function
- Fixed CVE-2021-3598 [bsc#1187310]: Heap buffer overflow in Imf_3_1:CharPtrIO:readChars
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-24"/>
	<updated date="2021-06-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187310">SUSE bug 1187310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187395">SUSE bug 1187395</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3598/">CVE-2021-3598</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3605/">CVE-2021-3605</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503551" comment="libIlmImf-2_2-23-2.2.1-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503552" comment="libIlmImfUtil-2_2-23-2.2.1-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503553" comment="openexr-devel-2.2.1-3.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139718" version="1" class="patch">
	<metadata>
		<title>Security update for ovmf (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183578" ref_url="https://bugzilla.suse.com/1183578" source="BUGZILLA"/>
		<reference ref_id="1183579" ref_url="https://bugzilla.suse.com/1183579" source="BUGZILLA"/>
		<reference ref_id="1186151" ref_url="https://bugzilla.suse.com/1186151" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28210" ref_url="https://www.suse.com/security/cve/CVE-2021-28210/" source="CVE"/>
		<reference ref_id="CVE-2021-28211" ref_url="https://www.suse.com/security/cve/CVE-2021-28211/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009089.html" source="SUSE-SU"/>
		<description>
This update for ovmf fixes the following issues:

- Fixed a possible buffer overflow in IScsiDxe (bsc#1186151)
- CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo (bsc#1183578)
- CVE-2021-28210: ovmf: unlimited FV recursion, round 2 (bsc#1183579)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-25"/>
	<updated date="2021-06-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183578">SUSE bug 1183578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183579">SUSE bug 1183579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186151">SUSE bug 1186151</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-28210/">CVE-2021-28210</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28211/">CVE-2021-28211</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503554" comment="ovmf-2017+git1510945757.b2662641d5-5.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503555" comment="ovmf-tools-2017+git1510945757.b2662641d5-5.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503556" comment="qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503557" comment="qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139719" version="1" class="patch">
	<metadata>
		<title>Security update for arpwatch (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186240" ref_url="https://bugzilla.suse.com/1186240" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25321" ref_url="https://www.suse.com/security/cve/CVE-2021-25321/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009098.html" source="SUSE-SU"/>
		<description>
This update for arpwatch fixes the following issues:

- CVE-2021-25321: Fixed local privilege escalation from runtime user to root (bsc#1186240).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-28"/>
	<updated date="2021-06-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186240">SUSE bug 1186240</bugzilla>
	<cve impact="moderate" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-25321/">CVE-2021-25321</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615918" comment="arpwatch-2.1a15-5.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139720" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1186622" ref_url="https://bugzilla.suse.com/1186622" source="BUGZILLA"/>
		<reference ref_id="1187443" ref_url="https://bugzilla.suse.com/1187443" source="BUGZILLA"/>
		<reference ref_id="1187444" ref_url="https://bugzilla.suse.com/1187444" source="BUGZILLA"/>
		<reference ref_id="1187445" ref_url="https://bugzilla.suse.com/1187445" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33195" ref_url="https://www.suse.com/security/cve/CVE-2021-33195/" source="CVE"/>
		<reference ref_id="CVE-2021-33196" ref_url="https://www.suse.com/security/cve/CVE-2021-33196/" source="CVE"/>
		<reference ref_id="CVE-2021-33197" ref_url="https://www.suse.com/security/cve/CVE-2021-33197/" source="CVE"/>
		<reference ref_id="CVE-2021-33198" ref_url="https://www.suse.com/security/cve/CVE-2021-33198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009104.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

Update to 1.15.13.
    
Includes these security fixes 

- CVE-2021-33195: net: Lookup functions may return invalid host names (bsc#1187443).
- CVE-2021-33196: archive/zip: malformed archive may cause panic or memory exhaustion (bsc#1186622).
- CVE-2021-33197: net/http/httputil: ReverseProxy forwards Connection headers if first one is empty (bsc#1187444)
- CVE-2021-33198: math/big: (*Rat).SetString with '1.770p02041010010011001001' crashes with 'makeslice: len out of range' (bsc#1187445).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-30"/>
	<updated date="2021-06-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186622">SUSE bug 1186622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187443">SUSE bug 1187443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187444">SUSE bug 1187444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187445">SUSE bug 1187445</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-33195/">CVE-2021-33195</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33196/">CVE-2021-33196</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-33197/">CVE-2021-33197</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33198/">CVE-2021-33198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009615807" comment="go1.15-1.15.13-1.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615808" comment="go1.15-doc-1.15.13-1.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615798" comment="go1.15-race-1.15.13-1.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139721" version="1" class="patch">
	<metadata>
		<title>Security update for go1.14 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1164903" ref_url="https://bugzilla.suse.com/1164903" source="BUGZILLA"/>
		<reference ref_id="1181145" ref_url="https://bugzilla.suse.com/1181145" source="BUGZILLA"/>
		<reference ref_id="1181146" ref_url="https://bugzilla.suse.com/1181146" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3114" ref_url="https://www.suse.com/security/cve/CVE-2021-3114/" source="CVE"/>
		<reference ref_id="CVE-2021-3115" ref_url="https://www.suse.com/security/cve/CVE-2021-3115/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008248.html" source="SUSE-SU"/>
		<description>
This update for go1.14 fixes the following issues:

Go was updated to version 1.14.14 (bsc#1164903).

Security issues fixed:

- CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic (bsc#1181145).
- CVE-2021-3115: Fixed a potential arbitrary code execution in the build process (bsc#1181146).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-26"/>
	<updated date="2021-01-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1164903">SUSE bug 1164903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181145">SUSE bug 1181145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181146">SUSE bug 1181146</bugzilla>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3114/">CVE-2021-3114</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3115/">CVE-2021-3115</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504142" comment="go1.14-1.14.14-1.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504143" comment="go1.14-doc-1.14.14-1.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139722" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1181145" ref_url="https://bugzilla.suse.com/1181145" source="BUGZILLA"/>
		<reference ref_id="1181146" ref_url="https://bugzilla.suse.com/1181146" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3114" ref_url="https://www.suse.com/security/cve/CVE-2021-3114/" source="CVE"/>
		<reference ref_id="CVE-2021-3115" ref_url="https://www.suse.com/security/cve/CVE-2021-3115/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008246.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

Go was updated to version 1.15.7 (bsc#1175132).

Security issues fixed:

- CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic (bsc#1181145).
- CVE-2021-3115: Fixed a potential arbitrary code execution in the build process (bsc#1181146).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-28"/>
	<updated date="2021-01-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181145">SUSE bug 1181145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181146">SUSE bug 1181146</bugzilla>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3114/">CVE-2021-3114</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3115/">CVE-2021-3115</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504144" comment="go1.15-1.15.7-1.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504145" comment="go1.15-doc-1.15.7-1.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496581" comment="go1.15-race-1.15.7-1.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139723" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180554" ref_url="https://bugzilla.suse.com/1180554" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8287" ref_url="https://www.suse.com/security/cve/CVE-2020-8287/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0224-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008247.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issue:

- CVE-2020-8287: Fixed an HTTP request smuggling vulnerability (bsc#1180554).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-26"/>
	<updated date="2021-01-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1180554">SUSE bug 1180554</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8287/">CVE-2020-8287</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503558" comment="nodejs8-8.17.0-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503559" comment="nodejs8-devel-8.17.0-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503560" comment="nodejs8-docs-8.17.0-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503561" comment="npm8-8.17.0-3.42.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139724" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180684" ref_url="https://bugzilla.suse.com/1180684" source="BUGZILLA"/>
		<reference ref_id="1180685" ref_url="https://bugzilla.suse.com/1180685" source="BUGZILLA"/>
		<reference ref_id="1180687" ref_url="https://bugzilla.suse.com/1180687" source="BUGZILLA"/>
		<reference ref_id="1181090" ref_url="https://bugzilla.suse.com/1181090" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23239" ref_url="https://www.suse.com/security/cve/CVE-2021-23239/" source="CVE"/>
		<reference ref_id="CVE-2021-23240" ref_url="https://www.suse.com/security/cve/CVE-2021-23240/" source="CVE"/>
		<reference ref_id="CVE-2021-3156" ref_url="https://www.suse.com/security/cve/CVE-2021-3156/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0227-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008250.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:

- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges 
  [bsc#1181090,CVE-2021-3156]
- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`
  [bsc#1180684,CVE-2021-23239]
- A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685,
  CVE-2021-23240]
- It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-26"/>
	<updated date="2021-01-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180684">SUSE bug 1180684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180685">SUSE bug 1180685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180687">SUSE bug 1180687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181090">SUSE bug 1181090</bugzilla>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23239/">CVE-2021-23239</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23240/">CVE-2021-23240</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3156/">CVE-2021-3156</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503562" comment="sudo-1.8.22-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503563" comment="sudo-devel-1.8.22-4.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139725" version="1" class="patch">
	<metadata>
		<title>Security update for dbus-1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187105" ref_url="https://bugzilla.suse.com/1187105" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35512" ref_url="https://www.suse.com/security/cve/CVE-2020-35512/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009121.html" source="SUSE-SU"/>
		<description>
This update for dbus-1 fixes the following issues:

- CVE-2020-35512: Fixed a use-after-free or potential undefined behaviour caused by shared UID's (bsc#1187105)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-12"/>
	<updated date="2021-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187105">SUSE bug 1187105</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35512/">CVE-2020-35512</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009615809" comment="dbus-1-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615810" comment="dbus-1-devel-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615811" comment="dbus-1-x11-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615812" comment="libdbus-1-3-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615795" comment="libdbus-1-3-32bit-1.12.2-8.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139726" version="1" class="patch">
	<metadata>
		<title>Security update for sqlite3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1157818" ref_url="https://bugzilla.suse.com/1157818" source="BUGZILLA"/>
		<reference ref_id="1158812" ref_url="https://bugzilla.suse.com/1158812" source="BUGZILLA"/>
		<reference ref_id="1158958" ref_url="https://bugzilla.suse.com/1158958" source="BUGZILLA"/>
		<reference ref_id="1158959" ref_url="https://bugzilla.suse.com/1158959" source="BUGZILLA"/>
		<reference ref_id="1158960" ref_url="https://bugzilla.suse.com/1158960" source="BUGZILLA"/>
		<reference ref_id="1159491" ref_url="https://bugzilla.suse.com/1159491" source="BUGZILLA"/>
		<reference ref_id="1159715" ref_url="https://bugzilla.suse.com/1159715" source="BUGZILLA"/>
		<reference ref_id="1159847" ref_url="https://bugzilla.suse.com/1159847" source="BUGZILLA"/>
		<reference ref_id="1159850" ref_url="https://bugzilla.suse.com/1159850" source="BUGZILLA"/>
		<reference ref_id="1160309" ref_url="https://bugzilla.suse.com/1160309" source="BUGZILLA"/>
		<reference ref_id="1160438" ref_url="https://bugzilla.suse.com/1160438" source="BUGZILLA"/>
		<reference ref_id="1160439" ref_url="https://bugzilla.suse.com/1160439" source="BUGZILLA"/>
		<reference ref_id="1164719" ref_url="https://bugzilla.suse.com/1164719" source="BUGZILLA"/>
		<reference ref_id="1172091" ref_url="https://bugzilla.suse.com/1172091" source="BUGZILLA"/>
		<reference ref_id="1172115" ref_url="https://bugzilla.suse.com/1172115" source="BUGZILLA"/>
		<reference ref_id="1172234" ref_url="https://bugzilla.suse.com/1172234" source="BUGZILLA"/>
		<reference ref_id="1172236" ref_url="https://bugzilla.suse.com/1172236" source="BUGZILLA"/>
		<reference ref_id="1172240" ref_url="https://bugzilla.suse.com/1172240" source="BUGZILLA"/>
		<reference ref_id="1173641" ref_url="https://bugzilla.suse.com/1173641" source="BUGZILLA"/>
		<reference ref_id="928700" ref_url="https://bugzilla.suse.com/928700" source="BUGZILLA"/>
		<reference ref_id="928701" ref_url="https://bugzilla.suse.com/928701" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-3414" ref_url="https://www.suse.com/security/cve/CVE-2015-3414/" source="CVE"/>
		<reference ref_id="CVE-2015-3415" ref_url="https://www.suse.com/security/cve/CVE-2015-3415/" source="CVE"/>
		<reference ref_id="CVE-2019-19244" ref_url="https://www.suse.com/security/cve/CVE-2019-19244/" source="CVE"/>
		<reference ref_id="CVE-2019-19317" ref_url="https://www.suse.com/security/cve/CVE-2019-19317/" source="CVE"/>
		<reference ref_id="CVE-2019-19603" ref_url="https://www.suse.com/security/cve/CVE-2019-19603/" source="CVE"/>
		<reference ref_id="CVE-2019-19645" ref_url="https://www.suse.com/security/cve/CVE-2019-19645/" source="CVE"/>
		<reference ref_id="CVE-2019-19646" ref_url="https://www.suse.com/security/cve/CVE-2019-19646/" source="CVE"/>
		<reference ref_id="CVE-2019-19880" ref_url="https://www.suse.com/security/cve/CVE-2019-19880/" source="CVE"/>
		<reference ref_id="CVE-2019-19923" ref_url="https://www.suse.com/security/cve/CVE-2019-19923/" source="CVE"/>
		<reference ref_id="CVE-2019-19924" ref_url="https://www.suse.com/security/cve/CVE-2019-19924/" source="CVE"/>
		<reference ref_id="CVE-2019-19925" ref_url="https://www.suse.com/security/cve/CVE-2019-19925/" source="CVE"/>
		<reference ref_id="CVE-2019-19926" ref_url="https://www.suse.com/security/cve/CVE-2019-19926/" source="CVE"/>
		<reference ref_id="CVE-2019-19959" ref_url="https://www.suse.com/security/cve/CVE-2019-19959/" source="CVE"/>
		<reference ref_id="CVE-2019-20218" ref_url="https://www.suse.com/security/cve/CVE-2019-20218/" source="CVE"/>
		<reference ref_id="CVE-2020-13434" ref_url="https://www.suse.com/security/cve/CVE-2020-13434/" source="CVE"/>
		<reference ref_id="CVE-2020-13435" ref_url="https://www.suse.com/security/cve/CVE-2020-13435/" source="CVE"/>
		<reference ref_id="CVE-2020-13630" ref_url="https://www.suse.com/security/cve/CVE-2020-13630/" source="CVE"/>
		<reference ref_id="CVE-2020-13631" ref_url="https://www.suse.com/security/cve/CVE-2020-13631/" source="CVE"/>
		<reference ref_id="CVE-2020-13632" ref_url="https://www.suse.com/security/cve/CVE-2020-13632/" source="CVE"/>
		<reference ref_id="CVE-2020-15358" ref_url="https://www.suse.com/security/cve/CVE-2020-15358/" source="CVE"/>
		<reference ref_id="CVE-2020-9327" ref_url="https://www.suse.com/security/cve/CVE-2020-9327/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<description>
This update for sqlite3 fixes the following issues:

- Update to version 3.36.0
- CVE-2020-15358: heap-based buffer overflow in multiSelectOrderBy due to mishandling of query-flattener
  optimization (bsc#1173641)
- CVE-2020-9327: NULL pointer dereference and segmentation fault because of generated column optimizations in
  isAuxiliaryVtabOperator (bsc#1164719)
- CVE-2019-20218: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error (bsc#1160439)
- CVE-2019-19959: memory-management error via ext/misc/zipfile.c involving embedded '\0' input (bsc#1160438)
- CVE-2019-19923: improper handling  of  certain uses of SELECT DISTINCT in flattenSubquery may lead to null pointer
  dereference (bsc#1160309)
- CVE-2019-19924: improper error handling in sqlite3WindowRewrite() (bsc#1159850)
- CVE-2019-19925: improper handling of NULL pathname during an update of a ZIP archive (bsc#1159847)
- CVE-2019-19926: improper handling  of certain errors during parsing  multiSelect in select.c (bsc#1159715)
- CVE-2019-19880: exprListAppendList in window.c allows attackers to trigger an invalid pointer dereference
  (bsc#1159491)
- CVE-2019-19603: during handling of CREATE TABLE and CREATE VIEW statements, does not consider confusion with
  a shadow table name (bsc#1158960)
- CVE-2019-19646: pragma.c mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated
  columns (bsc#1158959)
- CVE-2019-19645: alter.c allows attackers to trigger infinite recursion via certain types of self-referential views
  in conjunction with ALTER TABLE statements (bsc#1158958)
- CVE-2019-19317: lookupName in resolve.c omits bits from the colUsed bitmask in the case of a generated column,
  which allows attackers to cause a denial of service (bsc#1158812)
- CVE-2019-19244: sqlite3,sqlite2,sqlite: The function sqlite3Select in select.c allows a crash if a
  sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage (bsc#1157818)
- CVE-2015-3415: sqlite3VdbeExec comparison operator vulnerability (bsc#928701)
- CVE-2015-3414: sqlite3,sqlite2: dequoting of collation-sequence names (bsc#928700)
- CVE-2020-13434: integer overflow in sqlite3_str_vappendf (bsc#1172115)
- CVE-2020-13630: (bsc#1172234: use-after-free in fts3EvalNextRow
- CVE-2020-13631: virtual table allowed to be renamed to one of its shadow tables (bsc#1172236)
- CVE-2020-13632: NULL pointer dereference via crafted matchinfo() query (bsc#1172240)
- CVE-2020-13435: Malicious SQL statements could have crashed the process that is running SQLite (bsc#1172091)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-14"/>
	<updated date="2021-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1157818">SUSE bug 1157818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158812">SUSE bug 1158812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158958">SUSE bug 1158958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158959">SUSE bug 1158959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158960">SUSE bug 1158960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159491">SUSE bug 1159491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159715">SUSE bug 1159715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159847">SUSE bug 1159847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159850">SUSE bug 1159850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160309">SUSE bug 1160309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160438">SUSE bug 1160438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160439">SUSE bug 1160439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164719">SUSE bug 1164719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172091">SUSE bug 1172091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172115">SUSE bug 1172115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172234">SUSE bug 1172234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172236">SUSE bug 1172236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172240">SUSE bug 1172240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173641">SUSE bug 1173641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928700">SUSE bug 928700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928701">SUSE bug 928701</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-3414/">CVE-2015-3414</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-3415/">CVE-2015-3415</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19244/">CVE-2019-19244</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-19317/">CVE-2019-19317</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19603/">CVE-2019-19603</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19645/">CVE-2019-19645</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19646/">CVE-2019-19646</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19880/">CVE-2019-19880</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19923/">CVE-2019-19923</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-19924/">CVE-2019-19924</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19925/">CVE-2019-19925</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19926/">CVE-2019-19926</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19959/">CVE-2019-19959</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20218/">CVE-2019-20218</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13434/">CVE-2020-13434</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13435/">CVE-2020-13435</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13630/">CVE-2020-13630</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-13631/">CVE-2020-13631</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13632/">CVE-2020-13632</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-15358/">CVE-2020-15358</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-9327/">CVE-2020-9327</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009624167" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624168" comment="sqlite3-3.36.0-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624169" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139727" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183155" ref_url="https://bugzilla.suse.com/1183155" source="BUGZILLA"/>
		<reference ref_id="1183851" ref_url="https://bugzilla.suse.com/1183851" source="BUGZILLA"/>
		<reference ref_id="1183852" ref_url="https://bugzilla.suse.com/1183852" source="BUGZILLA"/>
		<reference ref_id="1184450" ref_url="https://bugzilla.suse.com/1184450" source="BUGZILLA"/>
		<reference ref_id="1187973" ref_url="https://bugzilla.suse.com/1187973" source="BUGZILLA"/>
		<reference ref_id="1187976" ref_url="https://bugzilla.suse.com/1187976" source="BUGZILLA"/>
		<reference ref_id="1187977" ref_url="https://bugzilla.suse.com/1187977" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7774" ref_url="https://www.suse.com/security/cve/CVE-2020-7774/" source="CVE"/>
		<reference ref_id="CVE-2021-22918" ref_url="https://www.suse.com/security/cve/CVE-2021-22918/" source="CVE"/>
		<reference ref_id="CVE-2021-23362" ref_url="https://www.suse.com/security/cve/CVE-2021-23362/" source="CVE"/>
		<reference ref_id="CVE-2021-27290" ref_url="https://www.suse.com/security/cve/CVE-2021-27290/" source="CVE"/>
		<reference ref_id="CVE-2021-3449" ref_url="https://www.suse.com/security/cve/CVE-2021-3449/" source="CVE"/>
		<reference ref_id="CVE-2021-3450" ref_url="https://www.suse.com/security/cve/CVE-2021-3450/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009145.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

Update nodejs10 to 10.24.1.

Including fixes for 

- CVE-2021-22918: libuv upgrade - Out of bounds read (bsc#1187973)
- CVE-2021-27290: ssri Regular Expression Denial of Service (bsc#1187976)
- CVE-2021-23362: hosted-git-info Regular Expression Denial of Service (bsc#1187977)
- CVE-2020-7774: y18n Prototype Pollution (bsc#1184450)
- CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (bsc#1183851)
- CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing (bsc#1183852)
- reduce memory footprint of test-worker-stdio (bsc#1183155)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-15"/>
	<updated date="2021-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183155">SUSE bug 1183155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183851">SUSE bug 1183851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183852">SUSE bug 1183852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184450">SUSE bug 1184450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187973">SUSE bug 1187973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187976">SUSE bug 1187976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187977">SUSE bug 1187977</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-7774/">CVE-2020-7774</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22918/">CVE-2021-22918</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23362/">CVE-2021-23362</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27290/">CVE-2021-27290</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3449/">CVE-2021-3449</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3450/">CVE-2021-3450</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009624552" comment="nodejs10-10.24.1-1.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624553" comment="nodejs10-devel-10.24.1-1.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624546" comment="nodejs10-docs-10.24.1-1.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624554" comment="npm10-10.24.1-1.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139728" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1153720" ref_url="https://bugzilla.suse.com/1153720" source="BUGZILLA"/>
		<reference ref_id="1174978" ref_url="https://bugzilla.suse.com/1174978" source="BUGZILLA"/>
		<reference ref_id="1179610" ref_url="https://bugzilla.suse.com/1179610" source="BUGZILLA"/>
		<reference ref_id="1181193" ref_url="https://bugzilla.suse.com/1181193" source="BUGZILLA"/>
		<reference ref_id="1185428" ref_url="https://bugzilla.suse.com/1185428" source="BUGZILLA"/>
		<reference ref_id="1185701" ref_url="https://bugzilla.suse.com/1185701" source="BUGZILLA"/>
		<reference ref_id="1185861" ref_url="https://bugzilla.suse.com/1185861" source="BUGZILLA"/>
		<reference ref_id="1186463" ref_url="https://bugzilla.suse.com/1186463" source="BUGZILLA"/>
		<reference ref_id="1186484" ref_url="https://bugzilla.suse.com/1186484" source="BUGZILLA"/>
		<reference ref_id="1187038" ref_url="https://bugzilla.suse.com/1187038" source="BUGZILLA"/>
		<reference ref_id="1187050" ref_url="https://bugzilla.suse.com/1187050" source="BUGZILLA"/>
		<reference ref_id="1187215" ref_url="https://bugzilla.suse.com/1187215" source="BUGZILLA"/>
		<reference ref_id="1187452" ref_url="https://bugzilla.suse.com/1187452" source="BUGZILLA"/>
		<reference ref_id="1187554" ref_url="https://bugzilla.suse.com/1187554" source="BUGZILLA"/>
		<reference ref_id="1187595" ref_url="https://bugzilla.suse.com/1187595" source="BUGZILLA"/>
		<reference ref_id="1187601" ref_url="https://bugzilla.suse.com/1187601" source="BUGZILLA"/>
		<reference ref_id="1188062" ref_url="https://bugzilla.suse.com/1188062" source="BUGZILLA"/>
		<reference ref_id="1188116" ref_url="https://bugzilla.suse.com/1188116" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24588" ref_url="https://www.suse.com/security/cve/CVE-2020-24588/" source="CVE"/>
		<reference ref_id="CVE-2020-26558" ref_url="https://www.suse.com/security/cve/CVE-2020-26558/" source="CVE"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2020-36386" ref_url="https://www.suse.com/security/cve/CVE-2020-36386/" source="CVE"/>
		<reference ref_id="CVE-2021-0129" ref_url="https://www.suse.com/security/cve/CVE-2021-0129/" source="CVE"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-0605" ref_url="https://www.suse.com/security/cve/CVE-2021-0605/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33200" ref_url="https://www.suse.com/security/cve/CVE-2021-33200/" source="CVE"/>
		<reference ref_id="CVE-2021-33624" ref_url="https://www.suse.com/security/cve/CVE-2021-33624/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="CVE-2021-34693" ref_url="https://www.suse.com/security/cve/CVE-2021-34693/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009190.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2021-33624: Fixed a bug which allows unprivileged BPF program to leak the contents of arbitrary kernel memory (and therefore, of all physical memory) via a side-channel. (bsc#1187554)
- CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. (bsc#1187601)
- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187595)
- CVE-2020-26558: Fixed a flaw in the Bluetooth LE and BR/EDR secure pairing that could permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing. (bnc#1179610)
- CVE-2021-34693: Fixed a bug in net/can/bcm.c which could allow local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized. (bsc#1187452)
- CVE-2021-0129: Fixed an improper access control in BlueZ that may have allowed an authenticated user to potentially enable information disclosure via adjacent access. (bnc#1186463)
- CVE-2020-36386: Fixed an out-of-bounds read in hci_extended_inquiry_result_evt. (bsc#1187038)
- CVE-2020-24588: Fixed a bug that could allow an adversary to abuse devices that support receiving non-SSP A-MSDU frames to inject arbitrary network packets. (bsc#1185861 bsc#1185863)
- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-3609: Fixed a race condition in the CAN BCM networking protocol which allows for local privilege escalation. (bsc#1187215)
- CVE-2020-36385: Fixed a use-after-free flaw in ucma.c which allows for local privilege escalation. (bsc#1187050)
- CVE-2021-33200: Fix leakage of uninitialized bpf stack under speculation. (bsc#1186484)

The following non-security bugs were fixed:

- af_packet: fix the tx skb protocol in raw sockets with ETH_P_ALL (bsc#1176081).
- kabi: preserve struct header_ops after bsc#1176081 fix (bsc#1176081).
- net: Do not set transport offset to invalid value (bsc#1176081).
- net: Introduce parse_protocol header_ops callback (bsc#1176081).
- net/ethernet: Add parse_protocol header_ops support (bsc#1176081).
- net/mlx5e: Remove the wrong assumption about transport offset (bsc#1176081).
- net/mlx5e: Trust kernel regarding transport offset (bsc#1176081).
- net/packet: Ask driver for protocol if not provided by user (bsc#1176081).
- net/packet: Remove redundant skb-&gt;protocol set (bsc#1176081).
- resource: Fix find_next_iomem_res() iteration issue (bsc#1181193).
- scsi: scsi_dh_alua: Retry RTPG on a different path after failure (bsc#1174978 bsc#1185701).
- SUNRPC in case of backlog, hand free slots directly to waiting task (bsc#1185428).
- SUNRPC: More fixes for backlog congestion (bsc#1185428).
- x86/crash: Add e820 reserved ranges to kdump kernel's e820 table (bsc#1181193).
- x86/debug: Extend the lower bound of crash kernel low reservations (bsc#1153720).
- x86/e820, ioport: Add a new I/O resource descriptor IORES_DESC_RESERVED (bsc#1181193).
- x86/mm: Rework ioremap resource mapping determination (bsc#1181193).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-21"/>
	<updated date="2021-07-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153720">SUSE bug 1153720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174978">SUSE bug 1174978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179610">SUSE bug 1179610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181193">SUSE bug 1181193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185428">SUSE bug 1185428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185701">SUSE bug 1185701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185861">SUSE bug 1185861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186463">SUSE bug 1186463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186484">SUSE bug 1186484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187038">SUSE bug 1187038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187050">SUSE bug 1187050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187215">SUSE bug 1187215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187452">SUSE bug 1187452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187554">SUSE bug 1187554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187595">SUSE bug 1187595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187601">SUSE bug 1187601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188062">SUSE bug 1188062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188116">SUSE bug 1188116</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-24588/">CVE-2020-24588</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26558/">CVE-2020-26558</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36386/">CVE-2020-36386</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-0129/">CVE-2021-0129</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0605/">CVE-2021-0605</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33200/">CVE-2021-33200</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-33624/">CVE-2021-33624</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-34693/">CVE-2021-34693</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009625666" comment="kernel-default-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625667" comment="kernel-default-base-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625668" comment="kernel-default-devel-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625669" comment="kernel-devel-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625670" comment="kernel-docs-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625671" comment="kernel-macros-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625672" comment="kernel-obs-build-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625673" comment="kernel-source-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625674" comment="kernel-syms-4.12.14-197.99.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139729" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188217" ref_url="https://bugzilla.suse.com/1188217" source="BUGZILLA"/>
		<reference ref_id="1188218" ref_url="https://bugzilla.suse.com/1188218" source="BUGZILLA"/>
		<reference ref_id="1188219" ref_url="https://bugzilla.suse.com/1188219" source="BUGZILLA"/>
		<reference ref_id="1188220" ref_url="https://bugzilla.suse.com/1188220" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22922" ref_url="https://www.suse.com/security/cve/CVE-2021-22922/" source="CVE"/>
		<reference ref_id="CVE-2021-22923" ref_url="https://www.suse.com/security/cve/CVE-2021-22923/" source="CVE"/>
		<reference ref_id="CVE-2021-22924" ref_url="https://www.suse.com/security/cve/CVE-2021-22924/" source="CVE"/>
		<reference ref_id="CVE-2021-22925" ref_url="https://www.suse.com/security/cve/CVE-2021-22925/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009199.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2021-22925: TELNET stack contents disclosure again. (bsc#1188220)
- CVE-2021-22924: Bad connection reuse due to flawed path name checks. (bsc#1188219)
- CVE-2021-22923: Insufficiently Protected Credentials. (bsc#1188218)
- CVE-2021-22922: Wrong content via metalink not discarded. (bsc#1188217)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-21"/>
	<updated date="2021-07-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1188217">SUSE bug 1188217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188218">SUSE bug 1188218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188219">SUSE bug 1188219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188220">SUSE bug 1188220</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22922/">CVE-2021-22922</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22923/">CVE-2021-22923</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-22924/">CVE-2021-22924</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22925/">CVE-2021-22925</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626005" comment="curl-7.60.0-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626006" comment="libcurl-devel-7.60.0-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626007" comment="libcurl4-7.60.0-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626008" comment="libcurl4-32bit-7.60.0-3.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139730" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181414" ref_url="https://bugzilla.suse.com/1181414" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26976" ref_url="https://www.suse.com/security/cve/CVE-2020-26976/" source="CVE"/>
		<reference ref_id="CVE-2021-23953" ref_url="https://www.suse.com/security/cve/CVE-2021-23953/" source="CVE"/>
		<reference ref_id="CVE-2021-23954" ref_url="https://www.suse.com/security/cve/CVE-2021-23954/" source="CVE"/>
		<reference ref_id="CVE-2021-23960" ref_url="https://www.suse.com/security/cve/CVE-2021-23960/" source="CVE"/>
		<reference ref_id="CVE-2021-23964" ref_url="https://www.suse.com/security/cve/CVE-2021-23964/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008257.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.7.0 ESR  (MFSA 2021-04, bsc#1181414)
  * CVE-2021-23953: Fixed a Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954: Fixed a type confusion when using logical assignment operators in JavaScript switch statements
  * CVE-2020-26976: Fixed an issue where HTTPS pages could have been intercepted by a registered service worker when they should not have been
  * CVE-2021-23960: Fixed a use-after-poison for incorrectly redeclared JavaScript variables during GC
  * CVE-2021-23964: Fixed Memory safety bugs 	
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-29"/>
	<updated date="2021-01-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181414">SUSE bug 1181414</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26976/">CVE-2020-26976</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23953/">CVE-2021-23953</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23954/">CVE-2021-23954</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23960/">CVE-2021-23960</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23964/">CVE-2021-23964</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504146" comment="MozillaFirefox-78.7.0-3.128.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504147" comment="MozillaFirefox-devel-78.7.0-3.128.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504148" comment="MozillaFirefox-translations-common-78.7.0-3.128.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504149" comment="MozillaFirefox-translations-other-78.7.0-3.128.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139731" version="1" class="patch">
	<metadata>
		<title>Security update for linuxptp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187646" ref_url="https://bugzilla.suse.com/1187646" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3570" ref_url="https://www.suse.com/security/cve/CVE-2021-3570/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009215.html" source="SUSE-SU"/>
		<description>
This update for linuxptp fixes the following issues:

- CVE-2021-3570: Validate the messageLength field of incoming messages. (bsc#1187646)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187646">SUSE bug 1187646</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3570/">CVE-2021-3570</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626003" comment="linuxptp-1.8+git65.g303b08c-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139732" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188275" ref_url="https://bugzilla.suse.com/1188275" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29970" ref_url="https://www.suse.com/security/cve/CVE-2021-29970/" source="CVE"/>
		<reference ref_id="CVE-2021-29976" ref_url="https://www.suse.com/security/cve/CVE-2021-29976/" source="CVE"/>
		<reference ref_id="CVE-2021-30547" ref_url="https://www.suse.com/security/cve/CVE-2021-30547/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009220.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 78.12.0 ESR

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-29 (bsc#1188275)

* CVE-2021-29970: Use-after-free in accessibility features of a document
* CVE-2021-30547: Out of bounds write in ANGLE
* CVE-2021-29976: Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188275">SUSE bug 1188275</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29970/">CVE-2021-29970</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29976/">CVE-2021-29976</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30547/">CVE-2021-30547</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009625199" comment="MozillaFirefox-78.12.0-3.147.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625200" comment="MozillaFirefox-devel-78.12.0-3.147.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625201" comment="MozillaFirefox-translations-common-78.12.0-3.147.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625202" comment="MozillaFirefox-translations-other-78.12.0-3.147.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139733" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1176681" ref_url="https://bugzilla.suse.com/1176681" source="BUGZILLA"/>
		<reference ref_id="1185591" ref_url="https://bugzilla.suse.com/1185591" source="BUGZILLA"/>
		<reference ref_id="1186290" ref_url="https://bugzilla.suse.com/1186290" source="BUGZILLA"/>
		<reference ref_id="1187364" ref_url="https://bugzilla.suse.com/1187364" source="BUGZILLA"/>
		<reference ref_id="1187365" ref_url="https://bugzilla.suse.com/1187365" source="BUGZILLA"/>
		<reference ref_id="1187366" ref_url="https://bugzilla.suse.com/1187366" source="BUGZILLA"/>
		<reference ref_id="1187367" ref_url="https://bugzilla.suse.com/1187367" source="BUGZILLA"/>
		<reference ref_id="1187499" ref_url="https://bugzilla.suse.com/1187499" source="BUGZILLA"/>
		<reference ref_id="1187529" ref_url="https://bugzilla.suse.com/1187529" source="BUGZILLA"/>
		<reference ref_id="1187538" ref_url="https://bugzilla.suse.com/1187538" source="BUGZILLA"/>
		<reference ref_id="1187539" ref_url="https://bugzilla.suse.com/1187539" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25085" ref_url="https://www.suse.com/security/cve/CVE-2020-25085/" source="CVE"/>
		<reference ref_id="CVE-2021-3582" ref_url="https://www.suse.com/security/cve/CVE-2021-3582/" source="CVE"/>
		<reference ref_id="CVE-2021-3592" ref_url="https://www.suse.com/security/cve/CVE-2021-3592/" source="CVE"/>
		<reference ref_id="CVE-2021-3593" ref_url="https://www.suse.com/security/cve/CVE-2021-3593/" source="CVE"/>
		<reference ref_id="CVE-2021-3594" ref_url="https://www.suse.com/security/cve/CVE-2021-3594/" source="CVE"/>
		<reference ref_id="CVE-2021-3595" ref_url="https://www.suse.com/security/cve/CVE-2021-3595/" source="CVE"/>
		<reference ref_id="CVE-2021-3607" ref_url="https://www.suse.com/security/cve/CVE-2021-3607/" source="CVE"/>
		<reference ref_id="CVE-2021-3608" ref_url="https://www.suse.com/security/cve/CVE-2021-3608/" source="CVE"/>
		<reference ref_id="CVE-2021-3611" ref_url="https://www.suse.com/security/cve/CVE-2021-3611/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009241.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

Security issues fixed:

- CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)
- CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)
- CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)
- CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)
- CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)
- CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
- CVE-2021-3608: Fix the ring init error flow (bsc#1187538)
- CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)
- CVE-2020-25085: Fix out-of-bounds access issue while doing multi block SDMA (bsc#1176681)

Other issues fixed:

- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
- Fix qemu hang while cancelling migrating hugepage vm (bsc#1185591)

		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-02"/>
	<updated date="2021-08-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176681">SUSE bug 1176681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185591">SUSE bug 1185591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186290">SUSE bug 1186290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187364">SUSE bug 1187364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187365">SUSE bug 1187365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187366">SUSE bug 1187366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187367">SUSE bug 1187367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187499">SUSE bug 1187499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187529">SUSE bug 1187529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187538">SUSE bug 1187538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187539">SUSE bug 1187539</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-25085/">CVE-2020-25085</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3582/">CVE-2021-3582</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3592/">CVE-2021-3592</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3593/">CVE-2021-3593</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3594/">CVE-2021-3594</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3595/">CVE-2021-3595</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3607/">CVE-2021-3607</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3608/">CVE-2021-3608</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3611/">CVE-2021-3611</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009625398" comment="qemu-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625399" comment="qemu-arm-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625400" comment="qemu-audio-alsa-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625401" comment="qemu-audio-oss-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625402" comment="qemu-audio-pa-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625403" comment="qemu-block-curl-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625404" comment="qemu-block-iscsi-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625405" comment="qemu-block-rbd-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625406" comment="qemu-block-ssh-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625407" comment="qemu-guest-agent-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625408" comment="qemu-ipxe-1.0.0+-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625409" comment="qemu-kvm-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625410" comment="qemu-lang-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625411" comment="qemu-seabios-1.12.0_0_ga698c89-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625412" comment="qemu-sgabios-8-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625413" comment="qemu-tools-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625414" comment="qemu-ui-curses-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625415" comment="qemu-ui-gtk-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625416" comment="qemu-vgabios-1.12.0_0_ga698c89-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625417" comment="qemu-x86-3.1.1.1-9.30.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139734" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182739" ref_url="https://bugzilla.suse.com/1182739" source="BUGZILLA"/>
		<reference ref_id="1183770" ref_url="https://bugzilla.suse.com/1183770" source="BUGZILLA"/>
		<reference ref_id="1185868" ref_url="https://bugzilla.suse.com/1185868" source="BUGZILLA"/>
		<reference ref_id="1185870" ref_url="https://bugzilla.suse.com/1185870" source="BUGZILLA"/>
		<reference ref_id="1185872" ref_url="https://bugzilla.suse.com/1185872" source="BUGZILLA"/>
		<reference ref_id="1188300" ref_url="https://bugzilla.suse.com/1188300" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2154" ref_url="https://www.suse.com/security/cve/CVE-2021-2154/" source="CVE"/>
		<reference ref_id="CVE-2021-2166" ref_url="https://www.suse.com/security/cve/CVE-2021-2166/" source="CVE"/>
		<reference ref_id="CVE-2021-2180" ref_url="https://www.suse.com/security/cve/CVE-2021-2180/" source="CVE"/>
		<reference ref_id="CVE-2021-27928" ref_url="https://www.suse.com/security/cve/CVE-2021-27928/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009251.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

- Update to 10.2.39 (bsc#1182739)
- CVE-2021-2166: DML unspecified vulnerability lead to complete DOS. (bsc#1185870)
- CVE-2021-2154: DML unspecified vulnerability can lead to complete DOS. (bsc#1185872)
- CVE-2021-2180: InnoDB unspecified vulnerability lead to complete DOS. (bsc#1185868)
- CVE-2021-27928: Fixed a remote code execution issue. (bsc#1183770)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-05"/>
	<updated date="2021-08-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182739">SUSE bug 1182739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183770">SUSE bug 1183770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185868">SUSE bug 1185868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185870">SUSE bug 1185870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185872">SUSE bug 1185872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188300">SUSE bug 1188300</bugzilla>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2154/">CVE-2021-2154</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2166/">CVE-2021-2166</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2180/">CVE-2021-2180</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27928/">CVE-2021-27928</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626447" comment="libmysqld-devel-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626448" comment="libmysqld19-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626449" comment="mariadb-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626450" comment="mariadb-client-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626451" comment="mariadb-errormessages-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626452" comment="mariadb-tools-10.2.39-3.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139735" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182620" ref_url="https://bugzilla.suse.com/1182620" source="BUGZILLA"/>
		<reference ref_id="1184450" ref_url="https://bugzilla.suse.com/1184450" source="BUGZILLA"/>
		<reference ref_id="1187976" ref_url="https://bugzilla.suse.com/1187976" source="BUGZILLA"/>
		<reference ref_id="1187977" ref_url="https://bugzilla.suse.com/1187977" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7774" ref_url="https://www.suse.com/security/cve/CVE-2020-7774/" source="CVE"/>
		<reference ref_id="CVE-2021-22884" ref_url="https://www.suse.com/security/cve/CVE-2021-22884/" source="CVE"/>
		<reference ref_id="CVE-2021-23362" ref_url="https://www.suse.com/security/cve/CVE-2021-23362/" source="CVE"/>
		<reference ref_id="CVE-2021-27290" ref_url="https://www.suse.com/security/cve/CVE-2021-27290/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009256.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

- update to npm 6.14.13
- CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. (bsc#1187976)
- CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service (bsc#1187977)
- CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-05"/>
	<updated date="2021-08-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182620">SUSE bug 1182620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184450">SUSE bug 1184450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187976">SUSE bug 1187976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187977">SUSE bug 1187977</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-7774/">CVE-2020-7774</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-22884/">CVE-2021-22884</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23362/">CVE-2021-23362</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27290/">CVE-2021-27290</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626438" comment="nodejs-common-2.0-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626439" comment="nodejs8-8.17.0-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626440" comment="nodejs8-devel-8.17.0-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626441" comment="nodejs8-docs-8.17.0-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626442" comment="npm8-8.17.0-3.47.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139736" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188891" ref_url="https://bugzilla.suse.com/1188891" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29980" ref_url="https://www.suse.com/security/cve/CVE-2021-29980/" source="CVE"/>
		<reference ref_id="CVE-2021-29984" ref_url="https://www.suse.com/security/cve/CVE-2021-29984/" source="CVE"/>
		<reference ref_id="CVE-2021-29985" ref_url="https://www.suse.com/security/cve/CVE-2021-29985/" source="CVE"/>
		<reference ref_id="CVE-2021-29986" ref_url="https://www.suse.com/security/cve/CVE-2021-29986/" source="CVE"/>
		<reference ref_id="CVE-2021-29988" ref_url="https://www.suse.com/security/cve/CVE-2021-29988/" source="CVE"/>
		<reference ref_id="CVE-2021-29989" ref_url="https://www.suse.com/security/cve/CVE-2021-29989/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009297.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 78.13.0 ESR (MFSA 2021-34, bsc#1188891):

- CVE-2021-29986: Race condition when resolving DNS names could have led to memory corruption
- CVE-2021-29988: Memory corruption as a result of incorrect style treatment
- CVE-2021-29984: Incorrect instruction reordering during JIT optimization
- CVE-2021-29980: Uninitialized memory in a canvas object could have led to memory corruption
- CVE-2021-29985: Use-after-free media channels
- CVE-2021-29989: Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188891">SUSE bug 1188891</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29980/">CVE-2021-29980</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29984/">CVE-2021-29984</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29985/">CVE-2021-29985</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29986/">CVE-2021-29986</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29988/">CVE-2021-29988</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29989/">CVE-2021-29989</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009630573" comment="MozillaFirefox-78.13.0-3.150.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630574" comment="MozillaFirefox-devel-78.13.0-3.150.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630575" comment="MozillaFirefox-translations-common-78.13.0-3.150.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630576" comment="MozillaFirefox-translations-other-78.13.0-3.150.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139737" version="1" class="patch">
	<metadata>
		<title>Security update for c-ares (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188881" ref_url="https://bugzilla.suse.com/1188881" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3672" ref_url="https://www.suse.com/security/cve/CVE-2021-3672/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2760-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-August/019883.html" source="SUSE-SU"/>
		<description>
This update for c-ares fixes the following issues:

Version update to git snapshot 1.17.1+20200724:

- CVE-2021-3672: fixed missing input validation on hostnames returned by DNS servers (bsc#1188881)
- If ares_getaddrinfo() was terminated by an ares_destroy(), it would cause crash
- Crash in sortaddrinfo() if the list size equals 0 due to an unexpected DNS response
- Expand number of escaped characters in DNS replies as per RFC1035 5.1 to prevent spoofing
- Use unbuffered /dev/urandom for random data to prevent early startup performance issues
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188881">SUSE bug 1188881</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3672/">CVE-2021-3672</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009630366" comment="c-ares-devel-1.17.1+20200724-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630367" comment="libcares2-1.17.1+20200724-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139738" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188697" ref_url="https://bugzilla.suse.com/1188697" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21775" ref_url="https://www.suse.com/security/cve/CVE-2021-21775/" source="CVE"/>
		<reference ref_id="CVE-2021-21779" ref_url="https://www.suse.com/security/cve/CVE-2021-21779/" source="CVE"/>
		<reference ref_id="CVE-2021-30663" ref_url="https://www.suse.com/security/cve/CVE-2021-30663/" source="CVE"/>
		<reference ref_id="CVE-2021-30665" ref_url="https://www.suse.com/security/cve/CVE-2021-30665/" source="CVE"/>
		<reference ref_id="CVE-2021-30689" ref_url="https://www.suse.com/security/cve/CVE-2021-30689/" source="CVE"/>
		<reference ref_id="CVE-2021-30720" ref_url="https://www.suse.com/security/cve/CVE-2021-30720/" source="CVE"/>
		<reference ref_id="CVE-2021-30734" ref_url="https://www.suse.com/security/cve/CVE-2021-30734/" source="CVE"/>
		<reference ref_id="CVE-2021-30744" ref_url="https://www.suse.com/security/cve/CVE-2021-30744/" source="CVE"/>
		<reference ref_id="CVE-2021-30749" ref_url="https://www.suse.com/security/cve/CVE-2021-30749/" source="CVE"/>
		<reference ref_id="CVE-2021-30758" ref_url="https://www.suse.com/security/cve/CVE-2021-30758/" source="CVE"/>
		<reference ref_id="CVE-2021-30795" ref_url="https://www.suse.com/security/cve/CVE-2021-30795/" source="CVE"/>
		<reference ref_id="CVE-2021-30797" ref_url="https://www.suse.com/security/cve/CVE-2021-30797/" source="CVE"/>
		<reference ref_id="CVE-2021-30799" ref_url="https://www.suse.com/security/cve/CVE-2021-30799/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2762-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009300.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.32.3:
- CVE-2021-21775: Fixed a use-after-free vulnerability in the way certain events are processed for ImageLoader objects. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger this vulnerability. (bsc#1188697)
- CVE-2021-21779: Fixed a use-after-free vulnerability in the way that WebKit GraphicsContext handles certain events. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger this vulnerability. (bsc#1188697)
- CVE-2021-30663: An integer overflow was addressed with improved input validation. (bsc#1188697)
- CVE-2021-30665: A memory corruption issue was addressed with improved state management. (bsc#1188697)
- CVE-2021-30689: A logic issue was addressed with improved state management. (bsc#1188697)
- CVE-2021-30720: A logic issue was addressed with improved restrictions. (bsc#1188697)
- CVE-2021-30734: Multiple memory corruption issues were addressed with improved memory handling. (bsc#1188697)
- CVE-2021-30744: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. (bsc#1188697)
- CVE-2021-30749: Multiple memory corruption issues were addressed with improved memory handling. (bsc#1188697)
- CVE-2021-30758: A type confusion issue was addressed with improved state handling. (bsc#1188697)
- CVE-2021-30795: A use after free issue was addressed with improved memory management. (bsc#1188697)
- CVE-2021-30797: This issue was addressed with improved checks. (bsc#1188697)
- CVE-2021-30799: Multiple memory corruption issues were addressed with improved memory handling. (bsc#1188697)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188697">SUSE bug 1188697</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21775/">CVE-2021-21775</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21779/">CVE-2021-21779</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30663/">CVE-2021-30663</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30665/">CVE-2021-30665</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30689/">CVE-2021-30689</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30720/">CVE-2021-30720</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30734/">CVE-2021-30734</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30744/">CVE-2021-30744</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30749/">CVE-2021-30749</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30758/">CVE-2021-30758</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30795/">CVE-2021-30795</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30797/">CVE-2021-30797</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30799/">CVE-2021-30799</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627234" comment="libjavascriptcoregtk-4_0-18-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627235" comment="libsoup-2_4-1-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627236" comment="libsoup-devel-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627237" comment="libsoup-lang-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627238" comment="libwebkit2gtk-4_0-37-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627239" comment="libwebkit2gtk3-lang-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627240" comment="typelib-1_0-JavaScriptCore-4_0-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627241" comment="typelib-1_0-Soup-2_4-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627242" comment="typelib-1_0-WebKit2-4_0-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627243" comment="typelib-1_0-WebKit2WebExtension-4_0-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627244" comment="webkit2gtk-4_0-injected-bundles-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627245" comment="webkit2gtk3-devel-2.32.3-3.77.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139739" version="1" class="patch">
	<metadata>
		<title>Security update for libsndfile (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1100167" ref_url="https://bugzilla.suse.com/1100167" source="BUGZILLA"/>
		<reference ref_id="1116993" ref_url="https://bugzilla.suse.com/1116993" source="BUGZILLA"/>
		<reference ref_id="1117954" ref_url="https://bugzilla.suse.com/1117954" source="BUGZILLA"/>
		<reference ref_id="1188540" ref_url="https://bugzilla.suse.com/1188540" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13139" ref_url="https://www.suse.com/security/cve/CVE-2018-13139/" source="CVE"/>
		<reference ref_id="CVE-2018-19432" ref_url="https://www.suse.com/security/cve/CVE-2018-19432/" source="CVE"/>
		<reference ref_id="CVE-2018-19758" ref_url="https://www.suse.com/security/cve/CVE-2018-19758/" source="CVE"/>
		<reference ref_id="CVE-2021-3246" ref_url="https://www.suse.com/security/cve/CVE-2021-3246/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009301.html" source="SUSE-SU"/>
		<description>
This update for libsndfile fixes the following issues:

- CVE-2018-13139: Fixed a stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. (bsc#1100167)
- CVE-2018-19432: Fixed a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a denial of service. (bsc#1116993)
- CVE-2021-3246: Fixed a heap buffer overflow vulnerability in msadpcm_decode_block. (bsc#1188540)
- CVE-2018-19758: Fixed a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service. (bsc#1117954)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1100167">SUSE bug 1100167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116993">SUSE bug 1116993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117954">SUSE bug 1117954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188540">SUSE bug 1188540</bugzilla>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-13139/">CVE-2018-13139</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-19432/">CVE-2018-19432</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19758/">CVE-2018-19758</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3246/">CVE-2021-3246</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626849" comment="libsndfile-devel-1.0.28-5.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626850" comment="libsndfile1-1.0.28-5.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139740" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1188906" ref_url="https://bugzilla.suse.com/1188906" source="BUGZILLA"/>
		<reference ref_id="1189162" ref_url="https://bugzilla.suse.com/1189162" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36221" ref_url="https://www.suse.com/security/cve/CVE-2021-36221/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009321.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

Update to go1.15.15:

- go#47473 net/http: panic due to racy read of persistConn after handler panic (CVE-2021-36221 bsc#1189162)
- go#47347 cmd/go: 'go list -f '{{.Stale}}'' stack overflow with cyclic imports
- go#47014 cmd/go: go mod vendor: open C:\Users\LICENSE: Access is denied.
- go#46927 cmd/compile: register conflict between external linker and duffzero on arm64
- go#46857 runtime: ppc64x binaries randomly segfault on linux 5.13rc6
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188906">SUSE bug 1188906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189162">SUSE bug 1189162</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36221/">CVE-2021-36221</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009630577" comment="go1.15-1.15.15-1.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630578" comment="go1.15-doc-1.15.15-1.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630567" comment="go1.15-race-1.15.15-1.39.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139741" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188917" ref_url="https://bugzilla.suse.com/1188917" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22930" ref_url="https://www.suse.com/security/cve/CVE-2021-22930/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009320.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

- CVE-2021-22930: http2: fixes use after free on close in stream canceling (bsc#1188917).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188917">SUSE bug 1188917</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22930/">CVE-2021-22930</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009629437" comment="nodejs8-8.17.0-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629438" comment="nodejs8-devel-8.17.0-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629439" comment="nodejs8-docs-8.17.0-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629440" comment="npm8-8.17.0-3.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139742" version="1" class="patch">
	<metadata>
		<title>Security update for fetchmail (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188034" ref_url="https://bugzilla.suse.com/1188034" source="BUGZILLA"/>
		<reference ref_id="1188875" ref_url="https://bugzilla.suse.com/1188875" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36386" ref_url="https://www.suse.com/security/cve/CVE-2021-36386/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009317.html" source="SUSE-SU"/>
		<description>
This update for fetchmail fixes the following issues:

- CVE-2021-36386: Fixed a missing variable initialization that can cause read from bad memory locations. (bsc#1188875)
- Change PASSWORDLEN from 64 to 256 (bsc#1188034)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1188034">SUSE bug 1188034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188875">SUSE bug 1188875</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-36386/">CVE-2021-36386</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009628203" comment="fetchmail-6.3.26-20.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009628204" comment="fetchmailconf-6.3.26-20.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139743" version="1" class="patch">
	<metadata>
		<title>Security update for libass (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188539" ref_url="https://bugzilla.suse.com/1188539" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36430" ref_url="https://www.suse.com/security/cve/CVE-2020-36430/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009325.html" source="SUSE-SU"/>
		<description>
This update for libass fixes the following issues:

- CVE-2020-36430: Fixed heap-based buffer overflow in decode_chars (bsc#1188539).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188539">SUSE bug 1188539</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36430/">CVE-2020-36430</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009628085" comment="libass-devel-0.14.0-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009628086" comment="libass9-0.14.0-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139744" version="1" class="patch">
	<metadata>
		<title>Security update for openexr (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188457" ref_url="https://bugzilla.suse.com/1188457" source="BUGZILLA"/>
		<reference ref_id="1188458" ref_url="https://bugzilla.suse.com/1188458" source="BUGZILLA"/>
		<reference ref_id="1188459" ref_url="https://bugzilla.suse.com/1188459" source="BUGZILLA"/>
		<reference ref_id="1188460" ref_url="https://bugzilla.suse.com/1188460" source="BUGZILLA"/>
		<reference ref_id="1188461" ref_url="https://bugzilla.suse.com/1188461" source="BUGZILLA"/>
		<reference ref_id="1188462" ref_url="https://bugzilla.suse.com/1188462" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20298" ref_url="https://www.suse.com/security/cve/CVE-2021-20298/" source="CVE"/>
		<reference ref_id="CVE-2021-20299" ref_url="https://www.suse.com/security/cve/CVE-2021-20299/" source="CVE"/>
		<reference ref_id="CVE-2021-20300" ref_url="https://www.suse.com/security/cve/CVE-2021-20300/" source="CVE"/>
		<reference ref_id="CVE-2021-20302" ref_url="https://www.suse.com/security/cve/CVE-2021-20302/" source="CVE"/>
		<reference ref_id="CVE-2021-20303" ref_url="https://www.suse.com/security/cve/CVE-2021-20303/" source="CVE"/>
		<reference ref_id="CVE-2021-20304" ref_url="https://www.suse.com/security/cve/CVE-2021-20304/" source="CVE"/>
		<reference ref_id="CVE-2021-3476" ref_url="https://www.suse.com/security/cve/CVE-2021-3476/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009313.html" source="SUSE-SU"/>
		<description>
This update for openexr fixes the following issues:

- CVE-2021-20298 [bsc#1188460]: Fixed Out-of-memory in B44Compressor
- CVE-2021-20299 [bsc#1188459]: Fixed Null-dereference READ in Imf_2_5:Header:operator
- CVE-2021-20300 [bsc#1188458]: Fixed Integer-overflow in Imf_2_5:hufUncompress
- CVE-2021-20302 [bsc#1188462]: Fixed Floating-point-exception in Imf_2_5:precalculateTileInfot
- CVE-2021-20303 [bsc#1188457]: Fixed Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer
- CVE-2021-20304 [bsc#1188461]: Fixed Undefined-shift in Imf_2_5:hufDecode
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188457">SUSE bug 1188457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188458">SUSE bug 1188458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188459">SUSE bug 1188459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188460">SUSE bug 1188460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188461">SUSE bug 1188461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188462">SUSE bug 1188462</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20298/">CVE-2021-20298</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20299/">CVE-2021-20299</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20300/">CVE-2021-20300</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20302/">CVE-2021-20302</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-20303/">CVE-2021-20303</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20304/">CVE-2021-20304</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3476/">CVE-2021-3476</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627904" comment="libIlmImf-2_2-23-2.2.1-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627905" comment="libIlmImfUtil-2_2-23-2.2.1-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627906" comment="openexr-devel-2.2.1-3.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139745" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188035" ref_url="https://bugzilla.suse.com/1188035" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21704" ref_url="https://www.suse.com/security/cve/CVE-2021-21704/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009327.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2021-21704: Fixed security issues in pdo_firebase module (bsc#1188035).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188035">SUSE bug 1188035</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21704/">CVE-2021-21704</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627408" comment="apache2-mod_php7-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627409" comment="php7-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627410" comment="php7-bcmath-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627411" comment="php7-bz2-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627412" comment="php7-calendar-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627413" comment="php7-ctype-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627414" comment="php7-curl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627415" comment="php7-dba-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627416" comment="php7-devel-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627417" comment="php7-dom-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627418" comment="php7-enchant-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627419" comment="php7-exif-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627420" comment="php7-fastcgi-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627421" comment="php7-fileinfo-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627422" comment="php7-fpm-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627423" comment="php7-ftp-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627424" comment="php7-gd-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627425" comment="php7-gettext-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627426" comment="php7-gmp-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627427" comment="php7-iconv-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627428" comment="php7-intl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627429" comment="php7-json-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627430" comment="php7-ldap-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627431" comment="php7-mbstring-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627432" comment="php7-mysql-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627433" comment="php7-odbc-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627434" comment="php7-opcache-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627435" comment="php7-openssl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627436" comment="php7-pcntl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627437" comment="php7-pdo-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627438" comment="php7-pear-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627439" comment="php7-pear-Archive_Tar-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627440" comment="php7-pgsql-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627441" comment="php7-phar-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627442" comment="php7-posix-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627443" comment="php7-readline-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627444" comment="php7-shmop-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627445" comment="php7-snmp-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627446" comment="php7-soap-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627447" comment="php7-sockets-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627448" comment="php7-sodium-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627449" comment="php7-sqlite-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627450" comment="php7-sysvmsg-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627451" comment="php7-sysvsem-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627452" comment="php7-sysvshm-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627461" comment="php7-tidy-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627453" comment="php7-tokenizer-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627454" comment="php7-wddx-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627455" comment="php7-xmlreader-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627456" comment="php7-xmlrpc-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627457" comment="php7-xmlwriter-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627458" comment="php7-xsl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627459" comment="php7-zip-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627460" comment="php7-zlib-7.2.5-4.79.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139746" version="1" class="patch">
	<metadata>
		<title>Security update for djvulibre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187869" ref_url="https://bugzilla.suse.com/1187869" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3630" ref_url="https://www.suse.com/security/cve/CVE-2021-3630/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009319.html" source="SUSE-SU"/>
		<description>
This update for djvulibre fixes the following issues:

- CVE-2021-3630: out-of-bounds write in DJVU:DjVuTXT:decode() in DjVuText.cpp (bsc#1187869)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187869">SUSE bug 1187869</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3630/">CVE-2021-3630</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627406" comment="libdjvulibre-devel-3.5.27-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627407" comment="libdjvulibre21-3.5.27-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139747" version="1" class="patch">
	<metadata>
		<title>Security update for krb5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188571" ref_url="https://bugzilla.suse.com/1188571" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36222" ref_url="https://www.suse.com/security/cve/CVE-2021-36222/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009316.html" source="SUSE-SU"/>
		<description>
This update for krb5 fixes the following issues:

- CVE-2021-36222: Fixed KDC null deref on bad encrypted challenge. (bsc#1188571)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188571">SUSE bug 1188571</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36222/">CVE-2021-36222</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626718" comment="krb5-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626700" comment="krb5-32bit-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626719" comment="krb5-client-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626720" comment="krb5-devel-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626721" comment="krb5-plugin-kdb-ldap-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626722" comment="krb5-plugin-preauth-otp-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626723" comment="krb5-plugin-preauth-pkinit-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626724" comment="krb5-server-1.16.3-3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139748" version="1" class="patch">
	<metadata>
		<title>Security update for spice-vdagent (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177780" ref_url="https://bugzilla.suse.com/1177780" source="BUGZILLA"/>
		<reference ref_id="1177781" ref_url="https://bugzilla.suse.com/1177781" source="BUGZILLA"/>
		<reference ref_id="1177782" ref_url="https://bugzilla.suse.com/1177782" source="BUGZILLA"/>
		<reference ref_id="1177783" ref_url="https://bugzilla.suse.com/1177783" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25650" ref_url="https://www.suse.com/security/cve/CVE-2020-25650/" source="CVE"/>
		<reference ref_id="CVE-2020-25651" ref_url="https://www.suse.com/security/cve/CVE-2020-25651/" source="CVE"/>
		<reference ref_id="CVE-2020-25652" ref_url="https://www.suse.com/security/cve/CVE-2020-25652/" source="CVE"/>
		<reference ref_id="CVE-2020-25653" ref_url="https://www.suse.com/security/cve/CVE-2020-25653/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009312.html" source="SUSE-SU"/>
		<description>
This update for spice-vdagent fixes the following issues:

- CVE-2020-25650: memory DoS via arbitrary entries in `active_xfers` hash table (bsc#1177780)
- CVE-2020-25651: possible file transfer DoS and information leak via `active_xfers` hash map (bsc#1177781)
- CVE-2020-25652: possibility to exhaust file descriptors in `vdagentd` (bsc#1177782) 
- CVE-2020-25653: UNIX domain socket peer PID retrieved via `SO_PEERCRED` is subject to race condition (bsc#1177783) 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177780">SUSE bug 1177780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177781">SUSE bug 1177781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177782">SUSE bug 1177782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177783">SUSE bug 1177783</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25650/">CVE-2020-25650</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25651/">CVE-2020-25651</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25652/">CVE-2020-25652</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25653/">CVE-2020-25653</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626004" comment="spice-vdagent-0.17.0-4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139749" version="1" class="patch">
	<metadata>
		<title>Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1102408" ref_url="https://bugzilla.suse.com/1102408" source="BUGZILLA"/>
		<reference ref_id="1138715" ref_url="https://bugzilla.suse.com/1138715" source="BUGZILLA"/>
		<reference ref_id="1138746" ref_url="https://bugzilla.suse.com/1138746" source="BUGZILLA"/>
		<reference ref_id="1176389" ref_url="https://bugzilla.suse.com/1176389" source="BUGZILLA"/>
		<reference ref_id="1177120" ref_url="https://bugzilla.suse.com/1177120" source="BUGZILLA"/>
		<reference ref_id="1182421" ref_url="https://bugzilla.suse.com/1182421" source="BUGZILLA"/>
		<reference ref_id="1182422" ref_url="https://bugzilla.suse.com/1182422" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26137" ref_url="https://www.suse.com/security/cve/CVE-2020-26137/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009334.html" source="SUSE-SU"/>
		<description>
This patch updates the Python AWS SDK stack in SLE 15:

General:

# aws-cli

- Version updated to upstream release v1.19.9
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-boto3

- Version updated to upstream release 1.17.9
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-botocore

- Version updated to upstream release 1.20.9
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-urllib3

- Version updated to upstream release 1.25.10
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-service_identity

- Added this new package to resolve runtime dependencies for other packages.
  Version: 18.1.0

# python-trustme

- Added this new package to resolve runtime dependencies for other packages.
  Version: 0.6.0

Security fixes:

# python-urllib3:
  
- CVE-2020-26137: urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated
  by inserting CR and LF control characters in the first argument of putrequest() (bsc#1177120)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-23"/>
	<updated date="2021-08-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1102408">SUSE bug 1102408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138715">SUSE bug 1138715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138746">SUSE bug 1138746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176389">SUSE bug 1176389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177120">SUSE bug 1177120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182421">SUSE bug 1182421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182422">SUSE bug 1182422</bugzilla>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26137/">CVE-2020-26137</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626960" comment="python2-asn1crypto-0.24.0-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626964" comment="python2-pyasn1-0.4.2-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626965" comment="python2-pycparser-2.17-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626966" comment="python2-urllib3-1.25.10-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626945" comment="python3-asn1crypto-0.24.0-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626946" comment="python3-boto3-1.17.9-19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626947" comment="python3-botocore-1.20.9-33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626951" comment="python3-pyasn1-0.4.2-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626952" comment="python3-pycparser-2.17-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626953" comment="python3-urllib3-1.25.10-9.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139750" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189521" ref_url="https://bugzilla.suse.com/1189521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3712" ref_url="https://www.suse.com/security/cve/CVE-2021-3712/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009340.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following security issue:

- CVE-2021-3712: a bug in the code for printing certificate details could
  lead to a buffer overrun that a malicious actor could exploit to crash
  the application, causing a denial-of-service attack. [bsc#1189521]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-24"/>
	<updated date="2021-08-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189521">SUSE bug 1189521</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3712/">CVE-2021-3712</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631638" comment="libopenssl-1_1-devel-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631639" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631640" comment="libopenssl1_1-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631641" comment="libopenssl1_1-32bit-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631642" comment="libopenssl1_1-hmac-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631643" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631644" comment="openssl-1_1-1.1.0i-14.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139751" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189320" ref_url="https://bugzilla.suse.com/1189320" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2372" ref_url="https://www.suse.com/security/cve/CVE-2021-2372/" source="CVE"/>
		<reference ref_id="CVE-2021-2389" ref_url="https://www.suse.com/security/cve/CVE-2021-2389/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009352.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

Update to version 10.2.40 [bsc#1189320]:

- fixes for the following security vulnerabilities: CVE-2021-2372 and CVE-2021-2389
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-25"/>
	<updated date="2021-08-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1189320">SUSE bug 1189320</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2372/">CVE-2021-2372</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2389/">CVE-2021-2389</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009630976" comment="libmysqld-devel-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630977" comment="libmysqld19-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630978" comment="mariadb-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630979" comment="mariadb-client-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630980" comment="mariadb-errormessages-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630981" comment="mariadb-tools-10.2.40-3.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139752" version="1" class="patch">
	<metadata>
		<title>Security update for spectre-meltdown-checker (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189477" ref_url="https://bugzilla.suse.com/1189477" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009366.html" source="SUSE-SU"/>
		<description>
This update for spectre-meltdown-checker fixes the following issues:

spectre-meltdown-checker was updated to version 0.44 (bsc#1189477)

- feat: add support for SRBDS related vulnerabilities
- feat: add zstd kernel decompression (#370)
- enh: arm: add experimental support for binary arm images
- enh: rsb filling: no longer need the 'strings' tool to check for kernel support in live mode
- fix: fwdb: remove Intel extract tempdir on exit
- fix: has_vmm: ignore kernel threads when looking for a hypervisor (fixes #278)
- fix: fwdb: use the commit date as the intel fwdb version
- fix: fwdb: update Intel's repository URL
- fix: arm64: CVE-2017-5753: kernels 4.19+ use a different nospec macro
- fix: on CPU parse info under FreeBSD
- chore: github: add check run on pull requests
- chore: fwdb: update to v165.20201021+i20200616
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-27"/>
	<updated date="2021-08-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1189477">SUSE bug 1189477</bugzilla>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631131" comment="spectre-meltdown-checker-0.44-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139753" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187418" ref_url="https://bugzilla.suse.com/1187418" source="BUGZILLA"/>
		<reference ref_id="1187419" ref_url="https://bugzilla.suse.com/1187419" source="BUGZILLA"/>
		<reference ref_id="1187420" ref_url="https://bugzilla.suse.com/1187420" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28200" ref_url="https://www.suse.com/security/cve/CVE-2020-28200/" source="CVE"/>
		<reference ref_id="CVE-2021-29157" ref_url="https://www.suse.com/security/cve/CVE-2021-29157/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009375.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 fixes the following issues:

Update dovecot to version 2.3.15 (jsc#SLE-19970):

Security issues fixed:

- CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
  JWT tokens. This may be used to supply attacker controlled keys to
  validate tokens, if attacker has local access. (bsc#1187418)
  Local attacker can login as any user and access their emails
- CVE-2021-33515:  On-path attacker could have injected plaintext commands
  before STARTTLS negotiation that would be executed after STARTTLS
  finished with the client. (bsc#1187419)
  Attacker can potentially steal user credentials and mails

* Disconnection log messages are now more standardized across services.
  They also always now start with 'Disconnected' prefix.
* Dovecot now depends on libsystemd for systemd integration.
* Removed support for Lua 5.2. Use version 5.1 or 5.3 instead.
* config: Some settings are now marked as 'hidden'. It's discouraged to
  change these settings. They will no longer be visible in doveconf
  output, except if they have been changed or if doveconf -s parameter
  is used. See https://doc.dovecot.org/settings/advanced/ for details.
* imap-compress: Compression level is now algorithm specific.
  See https://doc.dovecot.org/settings/plugin/compress-plugin/
* indexer-worker: Convert 'Indexed' info logs to an event named
  'indexer_worker_indexing_finished'. See
  https://doc.dovecot.org/admin_manual/list_of_events/#indexer-worker-indexing-finished
+ Add TSLv1.3 support to min_protocols.
+ Allow configuring ssl_cipher_suites. (for TLSv1.3+)
+ acl: Add acl_ignore_namespace setting which allows to entirely ignore
  ACLs for the listed namespaces.
+ imap: Support official RFC8970 preview/snippet syntax. Old methods of
  retrieving preview information via IMAP commands ('SNIPPET and PREVIEW
  with explicit algorithm selection') have been deprecated.
+ imapc: Support INDEXPVT for imapc storage to enable private
  message flags for cluster wide shared mailboxes.
+ lib-storage: Add new events: mail_opened, mail_expunge_requested,
  mail_expunged, mail_cache_lookup_finished. See
  https://doc.dovecot.org/admin_manual/list_of_events/#mail
+ zlib, imap-compression, fs-compress: Support compression levels that
  the algorithm supports. Before, we would allow hardcoded value between
  1 to 9 and would default to 6. Now we allow using per-algorithm value
  range and default to whatever default the algorithm specifies.
- *-login: Commands pipelined together with and just after the authenticate
  command cause these commands to be executed twice. This applies to all
  protocols that involve user login, which currently comprises of imap,
  pop3, submisision and managesieve.
- *-login: Processes are supposed to disconnect the oldest non-logged in
  connection when process_limit was reached. This didn't actually happen
  with the default 'high-security mode' (with service_count=1) where each
  connection is handled by a separate process.
- *-login: When login process reaches client/process limits, oldest
  client connections are disconnected. If one of these was still doing
  anvil lookup, this caused a crash. This could happen only if the login
  process limits were very low or if the server was overloaded.
- Fixed building with link time optimizations (-flto).
- auth: Userdb iteration with passwd driver does not always return all
  users with some nss drivers.
- dsync: Shared INBOX not synced when 'mail_shared_explicit_inbox' was
  disabled. If a user has a shared mailbox which is another user's INBOX,
  dsync didn't include the mailbox in syncing unless explicit naming is
  enabled with 'mail_shared_explicit_inbox' set to 'yes'.
- dsync: Shared namespaces were not synced with '-n' flag.
- dsync: Syncing shared INBOX failed if mail_attribute_dict was not set.
  If a user has a shared mailbox that is another user's INBOX, dsync
  failed to export the mailbox if mail attributes are disabled.
- fts-solr, fts-tika: Using both Solr FTS and Tika may have caused HTTP
  requests to assert-crash: Panic: file http-client-request.c: line 1232
  (http_client_request_send_more): assertion failed: (req-&gt;payload_input != NULL)
- fts-tika: 5xx errors returned by Tika server as indexing failures.
  However, Tika can return 5xx for some attachments every time.
  So the 5xx error should be retried once, but treated as success if it
  happens on the retry as well. v2.3 regression.
- fts-tika: v2.3.11 regression: Indexing messages with fts-tika may have
  resulted in Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts):
  assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
- imap: SETMETADATA could not be used to unset metadata values.
  Instead NIL was handled as a 'NIL' string. v2.3.14 regression.
- imap: IMAP BINARY FETCH crashes at least on empty base64 body:
  Panic: file index-mail-binary.c: line 358 (blocks_count_lines):
  assertion failed: (block_count == 0 || block_idx+1 == block_count)
- imap: If IMAP client using the NOTIFY command was disconnected while
  sending FETCH notifications to the client, imap could crash with
  Panic: Trying to close mailbox INBOX with open transactions.
- imap: Using IMAP COMPRESS extension can cause IMAP connection to hang
  when IMAP commands are &gt;8 kB long.
- imapc: If remote server sent BYE but didn't immediately disconnect, it
  could cause infinite busy-loop.
- lib-index: Corrupted cache record size in dovecot.index.cache file
  could have caused a crash (segfault) when accessing it.
- lib-oauth2: JWT token time validation now works correctly with
  32-bit systems.
- lib-ssl-iostream: Checking hostnames against an SSL certificate was
  case-sensitive.
- lib-storage: Corrupted mime.parts in dovecot.index.cache may have
  resulted in Panic: file imap-bodystructure.c: line 206 (part_write_body):
  assertion failed: (text == ((part-&gt;flags &amp; MESSAGE_PART_FLAG_TEXT) != 0))
- lib-storage: Index rebuilding (e.g. via doveadm force-resync) didn't
  preserve the 'hdr-pop3-uidl' header. Because of this, the next pop3
  session could have accessed all of the emails' metadata to read their
  POP3 UIDL (opening dbox files).
- listescape: When using the listescape plugin and a shared namespace
  the plugin didn't work properly anymore resulting in errors like:
  'Invalid mailbox name: Name must not have '/' character.'
- lmtp: Connection crashes if connection gets disconnected due to
  multiple bad commands and the last bad command is BDAT.
- lmtp: The Dovecot-specific LMTP parameter XRCPTFORWARD was blindly
  forwarded by LMTP proxy without checking that the backend has support.
  This caused a command parameter error from the backend if it was
  running an older Dovecot release. This could only occur in more complex
  setups where the message was proxied twice; when the proxy generated
  the XRCPTFORWARD parameter itself the problem did not occur, so this
  only happened when it was forwarded.
- lmtp: The LMTP proxy crashes with a panic when the remote server
  replies with an error while the mail is still being forwarded through
  a DATA/BDAT command.
- lmtp: Username may have been missing from lmtp log line prefixes when
  it was performing autoexpunging.
- master: Dovecot would incorrectly fail with haproxy 2.0.14 service
  checks.
- master: Systemd service: Dovecot announces readiness for accepting
  connections earlier than it should. The following environment variables
  are now imported automatically and can be omitted from
  import_environment setting: NOTIFY_SOCKET LISTEN_FDS LISTEN_PID.
- master: service { process_min_avail } was launching processes too
  slowly when master was forking a lot of processes.
- util: Make the health-check.sh example script POSIX shell compatible.
* Added new aliases for some variables. Usage of the old ones is possible,
  but discouraged. (These were partially added already to v2.3.13.)
  See https://doc.dovecot.org/configuration_manual/config_file/config_variables/
  for more information.
* Optimize imap/pop3/submission/managesieve proxies to use less CPU at
  the cost of extra memory usage.
* Remove autocreate, expire, snarf and mail-filter plugins.
* Remove cydir storage driver.
* Remove XZ/LZMA write support. Read support will be removed in future release.
* doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP
  environment variable is not set. Timestamp format is taken from
  log_timestamp setting.
* If BROKENCHAR or listescape plugin is used, the escaped folder names
  may be slightly different from before in some situations. This is
  unlikely to cause issues, although caching clients may redownload the
  folders.
* imapc: It now enables BROKENCHAR=~ by default to escape remote folder
  names if necessary. This also means that if there are any '~'
  characters in the remote folder names, they will be visible as '~7e'.
* imapc: When using local index files folder names were escaped on
  filesystem a bit differently. This affects only if there are folder
  names that actually require escaping, which isn't so common. The old
  style folders will be automatically deleted from filesystem.
* stats: Update exported metrics to be compliant with OpenMetrics standard.
+ doveadm: Add an optional '-p' parameter to metadata list command. If
  enabled, '/private', and '/shared' metadata prefixes will be prepended
  to the keys in the list output.
+ doveconf: Support environment variables in config files. See
  https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables
  for more details.
+ indexer-worker: Change indexer to disconnect from indexer-worker
  after each request. This allows service indexer-worker's service_count &amp;
  idle_kill settings to work. These can be used to restart indexer-worker
  processes once in a while to reduce their memory usage.
- auth: 'nodelay' with various authentication mechanisms such as apop
  and digest-md5 crashed AUTH process if authentication failed.
- auth: Auth lua script generating an error triggered an assertion
  failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify):
  assertion failed: (lua_gettop(script-&gt;L) == 0).
- configure: Fix libunwind detection to work on other than x86_64 systems.
- doveadm-server: Process could crash if logging was done outside command
  handling. For example http-client could have done debug logging
  afterwards, resulting in either segfault or Panic:
  file http-client.c: line 642 (http_client_context_close):
  assertion failed: (cctx-&gt;clients_list == NULL).
- dsync: Folder name escaping with BROKENCHAR didn't work completely
  correctly. This especially caused problems with dsync-migrations using
  imapc where some of the remote folder names may not have been accessible.
- dsync: doveadm sync + imapc doesn't always sync all mails when doing
  an incremental sync (-1), which could lead to mail loss when it's used
  for migration. This happens only when GUIDs aren't used (i.e.
  imapc without imapc_features=guid-forced).
- fts-tika: When tika server returns error, some mails cause Panic:
  file message-parser.c: line 802 (message_parser_deinit_from_parts):
  assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
- lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have
  resulted in crashes. This exposed that Dovecot was wrongly accepting
  atoms in 'nstring' handling. Changed the IMAP parsing to be more
  strict about this now.
- lib-index: If dovecot.index.cache has corrupted message size, fetching
  BODY/BODYSTRUCTURE may cause assert-crash:
  Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish):
  assertion failed: (mail-&gt;data.parts != NULL).
- lib-index: Minor error handling and race condition fixes related to
  rotating dovecot.index.log. These didn't usually cause problems,
  unless the log files were rotated rapidly.
- lib-lua: Lua scripts using coroutines or lua libraries using coroutines
  (e.g., cqueues) panicked.
- Message PREVIEW handled whitespace wrong so first space would get
  eaten from between words.
- FTS and message PREVIEW (snippet) parsed HTML &amp;entities case-sensitively.
- lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
  was written in a way that may have caused confusion for IMAP clients
  and also Dovecot itself when parsing it. The truncated part is now
  written out using application/octet-stream MIME type.
- lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to
  use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed:
  (meth-&gt;context_size &lt;= MAC_MAX_CONTEXT_SIZE).
- event filters: NOT keyword did not have the correct associativity.
- Ignore ECONNRESET when closing socket. This avoids logging useless
  errors on systems like FreeBSD.
- event filters: event filter syntax error may lead to Panic:
  file event-filter.c: line 137 (event_filter_parse): assertion failed:
  (state.output == NULL)
- lib: timeval_cmp_margin() was broken on 32-bit systems. This could
  potentially have caused HTTP timeouts to be handled incorrectly.
- log: instance_name wasn't used as syslog ident by the log process.
- master: After a service reached process_limit and client_limit, it
  could have taken up to 1 second to realize that more client connections
  became available. During this time client connections could have been
  unnecessarily rejected and a warning logged:
  Warning: service(...): process_limit (...) reached, client connections are being dropped
- stats: Crash would occur when generating openmetrics data for metrics
  using aggregating functions.
- stats: Event filters comparing against empty strings crash the stats
  process.
* CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
  allow logged in user to access other people's emails and filesystem
  information.
* Metric filter and global event filter variable syntax changed to a
  SQL-like format. See https://doc.dovecot.org/configuration_manual/event_filter/
* auth: Added new aliases for %{variables}. Usage of the old ones is
  possible, but discouraged.
* auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
  mechanism and related password schemes.
* auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
* auth: Removed postfix postmap socket
+ auth: Added new fields for auth server events. These fields are now
  also available for all auth events. See
  https://doc.dovecot.org/admin_manual/list_of_events/#authentication-server
  for details.
+ imap-hibernate: Added imap_client_hibernated, imap_client_unhibernated
  and imap_client_unhibernate_retried events. See
  https://doc.dovecot.org/admin_manual/list_of_events/ for details.
+ lib-index: Added new mail_index_recreated event. See
  https://doc.dovecot.org/admin_manual/list_of_events/#mail-index-recreated
+ lib-sql: Support TLS options for cassandra driver. This requires
  cpp-driver v2.15 (or later) to work reliably.
+ lib-storage: Missing $HasAttachment / $HasNoAttachment flags are now
  added to existing mails if mail_attachment_detection_option=add-flags
  and it can be done inexpensively.
+ login proxy: Added login_proxy_max_reconnects setting (default 3) to
  control how many reconnections are attempted.
+ login proxy: imap/pop3/submission/managesieve proxying now supports
  reconnection retrying on more than just connect() failure. Any error
  except a non-temporary authentication failure will result in reconnect
  attempts.
- auth: Lua passdb/userdb leaks stack elements per call, eventually
  causing the stack to become too deep and crashing the auth or
  auth-worker process.
- auth: SASL authentication PLAIN mechanism could be used to trigger
  read buffer overflow. However, this doesn't seem to be exploitable in
  any way.
- auth: v2.3.11 regression: GSSAPI authentication fails because dovecot
  disallows NUL bytes for it.
- dict: Process used too much CPU when iterating keys, because each key
  used a separate write() syscall.
- doveadm-server: Crash could occur if logging was done outside command
  handling. For example http-client could have done debug logging
  afterwards, resulting in either segfault or
  Panic: file http-client.c: line 642 (http_client_context_close):
  assertion failed: (cctx-&gt;clients_list == NULL).
- doveadm-server: v2.3.11 regression: Trying to connect to doveadm server
  process via starttls assert-crashed if there were no ssl=yes listeners:
  Panic: file master-service-ssl.c: line 22 (master_service_ssl_init):
  assertion failed: (service-&gt;ssl_ctx_initialized).
- fts-solr: HTTP requests may have assert-crashed:
  Panic: file http-client-request.c: line 1232 (http_client_request_send_more):
  assertion failed: (req-&gt;payload_input != NULL)
- imap: IMAP NOTIFY could crash with a segmentation fault due to a bad
  configuration that causes errors. Sending the error responses to the
  client can cause the segmentation fault. This can for example happen
  when several namespaces use the same mail storage location.
- imap: IMAP NOTIFY used on a shared namespace that doesn't actually
  exist (e.g. public namespace for a nonexistent user) can crash with a panic:
  Panic: Leaked view for index /tmp/home/asdf/mdbox/dovecot.list.index: Opened in (null):0
- imap: IMAP session can crash with QRESYNC extension if many changes
  are done before asking for expunged mails since last sync.
- imap: Process might hang indefinitely if client disconnects after
  sending some long-running commands pipelined, for example FETCH+LOGOUT.
- lib-compress: Mitigate crashes when configuring a not compiled in
  compression. Errors with compression configuration now distinguish
  between not supported and unknown.
- lib-compression: Using xz/lzma compression in v2.3.11 could have
  written truncated output in some situations. This would result in
  'Broken pipe' read errors when trying to read it back.
- lib-compression: zstd compression could have crashed in some situations:
  Panic: file ostream.c: line 287 (o_stream_sendv_int): assertion failed: (!stream-&gt;blocking)
- lib-dict: dict client could have crashed in some rare situations when
  iterating keys.
- lib-http: Fix several assert-crashes in HTTP client.
- lib-index: v2.3.11 regression: When mails were expunged at the same
  time as lots of new content was being saved to the cache (e.g. cache
  file was lost and is being re-filled) a deadlock could occur with
  dovecot.index.cache / dovecot.index.log.
- lib-index: v2.3.11 regression: dovecot.index.cache file was being
  purged (rewritten) too often when it had a field that hadn't been
  accessed for over 1 month, but less than 2 months. Every cache file
  change caused a purging in this situation.
- lib-mail: MIME parts were not returned correctly by Dovecot MIME parser.
  Regression caused by fixing CVE-2020-12100.
- lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
  was written in a way that may have caused confusion for both IMAP
  clients and Dovecot itself when parsing it. The truncated part is now
  written out using application/octet-stream MIME type.
- lib-mail: v2.3.11 regression: Mail delivery / parsing crashed when the
  10000th MIME part was message/rfc822 (or if parent was multipart/digest):
  Panic: file message-parser.c: line 167 (message_part_append):
  assertion failed: (ctx-&gt;total_parts_count &lt;= ctx-&gt;max_total_mime_parts).
- lib-oauth2: Dovecot incorrectly required oauth2 server introspection
  reply to contain username with invalid token.
- lib-ssl-iostream, lib-dcrypt: Fix building with OpenSSL that has
  deprecated APIs disabled.
- lib-storage: When mail's size is different from the cached one (in
  dovecot.index.cache or Maildir S=size in the filename), this is
  handled by logging 'Cached message size smaller/larger than expected'
  error. However, in some situations this also ended up crashing with:
  Panic: file istream.c: line 315 (i_stream_read_memarea):
  assertion failed: (old_size &lt;= _stream-&gt;pos - _stream-&gt;skip).
- lib-storage: v2.3 regression: Copying/moving mails was taking much more
  memory than before. This was mainly visible when copying/moving
  thousands of mails in a single transaction.
- lib-storage: v2.3.11 regression: Searching messages assert-crashed
  (without FTS): Panic: file message-parser.c: line 174 (message_part_finish):
  assertion failed: (ctx-&gt;nested_parts_count &gt; 0).
- lib: Dovecot v2.3 moved signal handlers around in ioloops,
  causing more CPU usage than in v2.2.
- lib: Fixed JSON parsing: '\' escape sequence may have wrongly resulted
  in error if it happened to be at read boundary. Any NUL characters and
  '\u0000' will now result in parsing error instead of silently
  truncating the data.
- lmtp, submission: Server may hang if SSL client connection disconnects
  during the delivery. If this happened repeated, it could have ended
  up reaching process_limit and preventing any further lmtp/submission
  deliveries.
- lmtp: Proxy does not always properly log TLS connection problems as
  errors; in some cases, only a debug message is logged if enabled.
- lmtp: The LMTP service can hang when commands are pipelined. This can
  particularly occur when one command in the middle of the pipeline fails.
  One example of this occurs for proxied LMTP transactions in which the
  final DATA or BDAT command is pipelined after a failing RCPT command.
- login-proxy: The login_source_ips setting has no effect, and therefore
  the proxy source IPs are not cycled through as they should be.
- master: Process was using 100% CPU in some situations when a broken
  service was being throttled.
- pop3-login: POP3 login would fail with 'Input buffer full' if the
  initial response for SASL was too long.
- stats: Crash would occur when generating openmetrics data for metrics
  using aggregating functions.

Update pigeonhole to version 0.5.15

* CVE-2020-28200: Sieve interpreter is not protected against abusive
  scripts that claim excessive resource usage. Fixed by limiting the
  user CPU time per single script execution and cumulatively over
  several script runs within a configurable timeout period. Sufficiently
  large CPU time usage is summed in the Sieve script binary and execution
  is blocked when the sum exceeds the limit within that time. The block
  is lifted when the script is updated after the resource usage times out.
  (bsc#1187420) Attacker can DoS the mail delivery system
  (jsc#PM-2746) ECO: Dovecot 2.3.15 version upgrade
* Disconnection log messages are now more standardized across services.
  They also always now start with 'Disconnected' prefix.
* managesieve: Commands pipelined together with and just after the
  authenticate command cause these commands to be executed twice.
* duplicate: The test was handled badly in a multiscript (sieve_before,
  sieve_after) scenario in which an earlier script in the sequence with
  a duplicate test succeeded, while a later script caused a runtime
  failure. In that case, the message is recorded for duplicate tracking,
  while the message may not actually have been delivered in the end.
* editheader: Sieve interpreter entered infinite loop at startup when
  the 'editheader' configuration listed an invalid header name. This
  problem can only be triggered by the administrator.
* relational: The Sieve relational extension can cause a segfault at
  compile time. This is triggered by invalid script syntax. The segfault
  happens when this match type is the last argument of the test command.
  This situation is not possible in a valid script; positional arguments
  are normally present after that, which would prevent the segfault.
* sieve: For some Sieve commands the provided mailbox name is not
  properly checked for UTF-8 validity, which can cause assert crashes at
  runtime when an invalid mailbox name is encountered. This can be
  caused by the user by writing a bad Sieve script involving the
  affected commands ('mailboxexists', 'specialuse_exists').
  This can be triggered by the remote sender only when the user has
  written a Sieve script that passes message content to one of the
  affected commands.
* sieve: Large sequences of 8-bit octets passed to certain Sieve
  commands that create or modify message headers that allow UTF-8 text
  (vacation, notify and addheader) can cause the delivery or IMAP
  process (when IMAPSieve is used) to enter a memory-consuming
  semi-infinite loop that ends when the process exceeds its memory
  limits. Logged in users can cause these hangs only for their own
  processes.

		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-31"/>
	<updated date="2021-08-31"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1187418">SUSE bug 1187418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187419">SUSE bug 1187419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187420">SUSE bug 1187420</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28200/">CVE-2020-28200</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29157/">CVE-2021-29157</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632159" comment="dovecot23-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632160" comment="dovecot23-backend-mysql-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632161" comment="dovecot23-backend-pgsql-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632162" comment="dovecot23-backend-sqlite-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632163" comment="dovecot23-devel-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632164" comment="dovecot23-fts-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632165" comment="dovecot23-fts-lucene-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632166" comment="dovecot23-fts-solr-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632167" comment="dovecot23-fts-squat-2.3.15-27.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139754" version="1" class="patch">
	<metadata>
		<title>Security update for xerces-c (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1159552" ref_url="https://bugzilla.suse.com/1159552" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1311" ref_url="https://www.suse.com/security/cve/CVE-2018-1311/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009385.html" source="SUSE-SU"/>
		<description>
This update for xerces-c fixes the following issues:

- CVE-2018-1311: Fixed use-after-free inside XML parser during the scanning of external DTDs (bsc#1159552).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-02"/>
	<updated date="2021-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159552">SUSE bug 1159552</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1311/">CVE-2018-1311</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631968" comment="libxerces-c-3_1-3.1.4-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631969" comment="libxerces-c-devel-3.1.4-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139755" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1179148" ref_url="https://bugzilla.suse.com/1179148" source="BUGZILLA"/>
		<reference ref_id="1179246" ref_url="https://bugzilla.suse.com/1179246" source="BUGZILLA"/>
		<reference ref_id="1180491" ref_url="https://bugzilla.suse.com/1180491" source="BUGZILLA"/>
		<reference ref_id="1180846" ref_url="https://bugzilla.suse.com/1180846" source="BUGZILLA"/>
		<reference ref_id="1181989" ref_url="https://bugzilla.suse.com/1181989" source="BUGZILLA"/>
		<reference ref_id="1183243" ref_url="https://bugzilla.suse.com/1183243" source="BUGZILLA"/>
		<reference ref_id="1186428" ref_url="https://bugzilla.suse.com/1186428" source="BUGZILLA"/>
		<reference ref_id="1186429" ref_url="https://bugzilla.suse.com/1186429" source="BUGZILLA"/>
		<reference ref_id="1186433" ref_url="https://bugzilla.suse.com/1186433" source="BUGZILLA"/>
		<reference ref_id="1186434" ref_url="https://bugzilla.suse.com/1186434" source="BUGZILLA"/>
		<reference ref_id="1188050" ref_url="https://bugzilla.suse.com/1188050" source="BUGZILLA"/>
		<reference ref_id="1189373" ref_url="https://bugzilla.suse.com/1189373" source="BUGZILLA"/>
		<reference ref_id="1189376" ref_url="https://bugzilla.suse.com/1189376" source="BUGZILLA"/>
		<reference ref_id="1189378" ref_url="https://bugzilla.suse.com/1189378" source="BUGZILLA"/>
		<reference ref_id="1189380" ref_url="https://bugzilla.suse.com/1189380" source="BUGZILLA"/>
		<reference ref_id="1189381" ref_url="https://bugzilla.suse.com/1189381" source="BUGZILLA"/>
		<reference ref_id="1189882" ref_url="https://bugzilla.suse.com/1189882" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0089" ref_url="https://www.suse.com/security/cve/CVE-2021-0089/" source="CVE"/>
		<reference ref_id="CVE-2021-28690" ref_url="https://www.suse.com/security/cve/CVE-2021-28690/" source="CVE"/>
		<reference ref_id="CVE-2021-28692" ref_url="https://www.suse.com/security/cve/CVE-2021-28692/" source="CVE"/>
		<reference ref_id="CVE-2021-28693" ref_url="https://www.suse.com/security/cve/CVE-2021-28693/" source="CVE"/>
		<reference ref_id="CVE-2021-28694" ref_url="https://www.suse.com/security/cve/CVE-2021-28694/" source="CVE"/>
		<reference ref_id="CVE-2021-28695" ref_url="https://www.suse.com/security/cve/CVE-2021-28695/" source="CVE"/>
		<reference ref_id="CVE-2021-28696" ref_url="https://www.suse.com/security/cve/CVE-2021-28696/" source="CVE"/>
		<reference ref_id="CVE-2021-28697" ref_url="https://www.suse.com/security/cve/CVE-2021-28697/" source="CVE"/>
		<reference ref_id="CVE-2021-28698" ref_url="https://www.suse.com/security/cve/CVE-2021-28698/" source="CVE"/>
		<reference ref_id="CVE-2021-28699" ref_url="https://www.suse.com/security/cve/CVE-2021-28699/" source="CVE"/>
		<reference ref_id="CVE-2021-28700" ref_url="https://www.suse.com/security/cve/CVE-2021-28700/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009395.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

Security issues fixed:

- CVE-2021-28693: xen/arm: Boot modules are not scrubbed (bsc#1186428)
- CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (bsc#1186429)
- CVE-2021-0089: xen: Speculative Code Store Bypass (bsc#1186433)
- CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (bsc#1186434)

- CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)(bsc#1189373).
- CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation (XSA-379)(bsc#1189376).
- CVE-2021-28698: long running loops in grant table handling (XSA-380)(bsc#1189378).
- CVE-2021-28699: inadequate grant-v2 status frames array bounds check (XSA-382)(bsc#1189380).
- CVE-2021-28700: No memory limit for dom0less domUs (XSA-383)(bsc#1189381).

Other issues fixed:

- Fixed 'Panic on CPU 0: IO-APIC + timer doesn't work!' (bsc#1180491)
- Upstream bug fixes (bsc#1027519)
- Dom0 hangs when pinning CPUs for dom0 with HVM guest (bsc#1179246).
- Fixed Xen SLES11SP4 guest hangs on cluster (bsc#1188050).
- Fixed PVHVM SLES12 SP5 - NMI Watchdog CPU Stuck (bsc#1180846).
- Core cannot be opened when using xl dump-core of VM with PTF (bsc#1183243).
- Prevent superpage allocation in the LAPIC and ACPI_INFO range (bsc#1189882).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-02"/>
	<updated date="2021-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179148">SUSE bug 1179148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179246">SUSE bug 1179246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180491">SUSE bug 1180491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180846">SUSE bug 1180846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181989">SUSE bug 1181989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183243">SUSE bug 1183243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186428">SUSE bug 1186428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186429">SUSE bug 1186429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186433">SUSE bug 1186433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186434">SUSE bug 1186434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188050">SUSE bug 1188050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189373">SUSE bug 1189373</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189376">SUSE bug 1189376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189378">SUSE bug 1189378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189380">SUSE bug 1189380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189381">SUSE bug 1189381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189882">SUSE bug 1189882</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0089/">CVE-2021-0089</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28690/">CVE-2021-28690</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-28692/">CVE-2021-28692</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28693/">CVE-2021-28693</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28694/">CVE-2021-28694</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28695/">CVE-2021-28695</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28696/">CVE-2021-28696</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28697/">CVE-2021-28697</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28698/">CVE-2021-28698</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28699/">CVE-2021-28699</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28700/">CVE-2021-28700</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632260" comment="xen-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632261" comment="xen-devel-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632262" comment="xen-libs-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632263" comment="xen-tools-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632264" comment="xen-tools-domU-4.12.4_12-3.52.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139756" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1129714" ref_url="https://bugzilla.suse.com/1129714" source="BUGZILLA"/>
		<reference ref_id="1172640" ref_url="https://bugzilla.suse.com/1172640" source="BUGZILLA"/>
		<reference ref_id="1186406" ref_url="https://bugzilla.suse.com/1186406" source="BUGZILLA"/>
		<reference ref_id="1186583" ref_url="https://bugzilla.suse.com/1186583" source="BUGZILLA"/>
		<reference ref_id="1186586" ref_url="https://bugzilla.suse.com/1186586" source="BUGZILLA"/>
		<reference ref_id="1186587" ref_url="https://bugzilla.suse.com/1186587" source="BUGZILLA"/>
		<reference ref_id="1186596" ref_url="https://bugzilla.suse.com/1186596" source="BUGZILLA"/>
		<reference ref_id="1186597" ref_url="https://bugzilla.suse.com/1186597" source="BUGZILLA"/>
		<reference ref_id="1186598" ref_url="https://bugzilla.suse.com/1186598" source="BUGZILLA"/>
		<reference ref_id="1186600" ref_url="https://bugzilla.suse.com/1186600" source="BUGZILLA"/>
		<reference ref_id="1186603" ref_url="https://bugzilla.suse.com/1186603" source="BUGZILLA"/>
		<reference ref_id="1186604" ref_url="https://bugzilla.suse.com/1186604" source="BUGZILLA"/>
		<reference ref_id="1186605" ref_url="https://bugzilla.suse.com/1186605" source="BUGZILLA"/>
		<reference ref_id="1186613" ref_url="https://bugzilla.suse.com/1186613" source="BUGZILLA"/>
		<reference ref_id="1186614" ref_url="https://bugzilla.suse.com/1186614" source="BUGZILLA"/>
		<reference ref_id="1186615" ref_url="https://bugzilla.suse.com/1186615" source="BUGZILLA"/>
		<reference ref_id="1186616" ref_url="https://bugzilla.suse.com/1186616" source="BUGZILLA"/>
		<reference ref_id="1186658" ref_url="https://bugzilla.suse.com/1186658" source="BUGZILLA"/>
		<reference ref_id="1186660" ref_url="https://bugzilla.suse.com/1186660" source="BUGZILLA"/>
		<reference ref_id="1186757" ref_url="https://bugzilla.suse.com/1186757" source="BUGZILLA"/>
		<reference ref_id="1186758" ref_url="https://bugzilla.suse.com/1186758" source="BUGZILLA"/>
		<reference ref_id="1186762" ref_url="https://bugzilla.suse.com/1186762" source="BUGZILLA"/>
		<reference ref_id="1186763" ref_url="https://bugzilla.suse.com/1186763" source="BUGZILLA"/>
		<reference ref_id="1186849" ref_url="https://bugzilla.suse.com/1186849" source="BUGZILLA"/>
		<reference ref_id="1186859" ref_url="https://bugzilla.suse.com/1186859" source="BUGZILLA"/>
		<reference ref_id="1186861" ref_url="https://bugzilla.suse.com/1186861" source="BUGZILLA"/>
		<reference ref_id="1186863" ref_url="https://bugzilla.suse.com/1186863" source="BUGZILLA"/>
		<reference ref_id="1189142" ref_url="https://bugzilla.suse.com/1189142" source="BUGZILLA"/>
		<reference ref_id="1189348" ref_url="https://bugzilla.suse.com/1189348" source="BUGZILLA"/>
		<reference ref_id="1189350" ref_url="https://bugzilla.suse.com/1189350" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17539" ref_url="https://www.suse.com/security/cve/CVE-2019-17539/" source="CVE"/>
		<reference ref_id="CVE-2019-9721" ref_url="https://www.suse.com/security/cve/CVE-2019-9721/" source="CVE"/>
		<reference ref_id="CVE-2020-13904" ref_url="https://www.suse.com/security/cve/CVE-2020-13904/" source="CVE"/>
		<reference ref_id="CVE-2020-20448" ref_url="https://www.suse.com/security/cve/CVE-2020-20448/" source="CVE"/>
		<reference ref_id="CVE-2020-20451" ref_url="https://www.suse.com/security/cve/CVE-2020-20451/" source="CVE"/>
		<reference ref_id="CVE-2020-21041" ref_url="https://www.suse.com/security/cve/CVE-2020-21041/" source="CVE"/>
		<reference ref_id="CVE-2020-21688" ref_url="https://www.suse.com/security/cve/CVE-2020-21688/" source="CVE"/>
		<reference ref_id="CVE-2020-21697" ref_url="https://www.suse.com/security/cve/CVE-2020-21697/" source="CVE"/>
		<reference ref_id="CVE-2020-22015" ref_url="https://www.suse.com/security/cve/CVE-2020-22015/" source="CVE"/>
		<reference ref_id="CVE-2020-22016" ref_url="https://www.suse.com/security/cve/CVE-2020-22016/" source="CVE"/>
		<reference ref_id="CVE-2020-22017" ref_url="https://www.suse.com/security/cve/CVE-2020-22017/" source="CVE"/>
		<reference ref_id="CVE-2020-22019" ref_url="https://www.suse.com/security/cve/CVE-2020-22019/" source="CVE"/>
		<reference ref_id="CVE-2020-22020" ref_url="https://www.suse.com/security/cve/CVE-2020-22020/" source="CVE"/>
		<reference ref_id="CVE-2020-22021" ref_url="https://www.suse.com/security/cve/CVE-2020-22021/" source="CVE"/>
		<reference ref_id="CVE-2020-22022" ref_url="https://www.suse.com/security/cve/CVE-2020-22022/" source="CVE"/>
		<reference ref_id="CVE-2020-22023" ref_url="https://www.suse.com/security/cve/CVE-2020-22023/" source="CVE"/>
		<reference ref_id="CVE-2020-22025" ref_url="https://www.suse.com/security/cve/CVE-2020-22025/" source="CVE"/>
		<reference ref_id="CVE-2020-22026" ref_url="https://www.suse.com/security/cve/CVE-2020-22026/" source="CVE"/>
		<reference ref_id="CVE-2020-22031" ref_url="https://www.suse.com/security/cve/CVE-2020-22031/" source="CVE"/>
		<reference ref_id="CVE-2020-22032" ref_url="https://www.suse.com/security/cve/CVE-2020-22032/" source="CVE"/>
		<reference ref_id="CVE-2020-22033" ref_url="https://www.suse.com/security/cve/CVE-2020-22033/" source="CVE"/>
		<reference ref_id="CVE-2020-22034" ref_url="https://www.suse.com/security/cve/CVE-2020-22034/" source="CVE"/>
		<reference ref_id="CVE-2020-22038" ref_url="https://www.suse.com/security/cve/CVE-2020-22038/" source="CVE"/>
		<reference ref_id="CVE-2020-22039" ref_url="https://www.suse.com/security/cve/CVE-2020-22039/" source="CVE"/>
		<reference ref_id="CVE-2020-22043" ref_url="https://www.suse.com/security/cve/CVE-2020-22043/" source="CVE"/>
		<reference ref_id="CVE-2020-22044" ref_url="https://www.suse.com/security/cve/CVE-2020-22044/" source="CVE"/>
		<reference ref_id="CVE-2020-22046" ref_url="https://www.suse.com/security/cve/CVE-2020-22046/" source="CVE"/>
		<reference ref_id="CVE-2020-22048" ref_url="https://www.suse.com/security/cve/CVE-2020-22048/" source="CVE"/>
		<reference ref_id="CVE-2020-22049" ref_url="https://www.suse.com/security/cve/CVE-2020-22049/" source="CVE"/>
		<reference ref_id="CVE-2020-22054" ref_url="https://www.suse.com/security/cve/CVE-2020-22054/" source="CVE"/>
		<reference ref_id="CVE-2021-38114" ref_url="https://www.suse.com/security/cve/CVE-2021-38114/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

- CVE-2019-9721: Fixed a denial of service in the subtitle decoder in handle_open_brace from libavcodec/htmlsubtitles.c (bsc#1129714).
- CVE-2020-22046: Fixed a denial of service vulnerability due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c (bsc#1186849).
- CVE-2020-22048: Fixed a denial of service vulnerability due to a memory leak in the ff_frame_pool_get function in framepool.c (bsc#1186859).
- CVE-2020-22049: Fixed a denial of service vulnerability caused by a memory leak in the wtvfile_open_sector function in wtvdec.c (bsc#1186861).
- CVE-2020-22054: Fixed a denial of service vulnerability due to a memory leak in the av_dict_set function in dict.c (bsc#1186863).
- CVE-2020-13904: Fixed use-after-free via a crafted EXTINF duration in an m3u8 file (bsc#1172640).
- CVE-2020-21041: Fixed buffer overflow vulnerability via apng_do_inverse_blend in libavcodec/pngenc.c  (bsc#1186406).
- CVE-2019-17539: Fixed NULL pointer dereference in avcodec_open2 in libavcodec/utils.c (bsc# 1154065).
- CVE-2020-22026: Fixed buffer overflow vulnerability in config_input() at libavfilter/af_tremolo.c (bsc#1186583).
- CVE-2020-22021: Fixed buffer overflow vulnerability in filter_edges function in libavfilter/vf_yadif.c (bsc#1186586).
- CVE-2020-22020: Fixed buffer overflow vulnerability in build_diff_map() in libavfilter/vf_fieldmatch.c (bsc#1186587).
- CVE-2020-22015: Fixed buffer overflow vulnerability in mov_write_video_tag() due to the out of bounds in libavformat/movenc.c (bsc#1186596).
- CVE-2020-22016: Fixed a heap-based Buffer Overflow vulnerability at libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- CVE-2020-22017: Fixed a heap-based Buffer Overflow vulnerability in ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- CVE-2020-22022: Fixed a heap-based Buffer Overflow vulnerability in filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- CVE-2020-22023: Fixed a heap-based Buffer Overflow vulnerability in filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- CVE-2020-22025: Fixed a heap-based Buffer Overflow vulnerability in gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- CVE-2020-22031: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_w3fdif.c in filter16_complex_low() (bsc#1186613).
- CVE-2020-22032: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- CVE-2020-22034: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_floodfill.c (bsc#1186616).
- CVE-2020-20451: Fixed denial of service issue due to resource management errors via fftools/cmdutils.c (bsc#1186658).
- CVE-2020-20448: Fixed divide by zero issue via libavcodec/ratecontrol.c (bsc#1186660).
- CVE-2020-22038: Fixed denial of service vulnerability due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c (bsc#1186757).
- CVE-2020-22039: Fixed denial of service vulnerability due to a memory leak in the inavi_add_ientry function (bsc#1186758).
- CVE-2020-22043: Fixed denial of service vulnerability due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c (bsc#1186762).
- CVE-2020-22044: Fixed denial of service vulnerability due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c (bsc#1186763).
- CVE-2020-22033,CVE-2020-22019: Fixed a heap-based Buffer Overflow Vulnerability at libavfilter/vf_vmafmotion.c in convolution_y_8bit() and in convolution_y_10bit() in libavfilter/vf_vmafmotion.c (bsc#1186615, bsc#1186597).
- CVE-2020-21688: Fixed a heap-use-after-free in the av_freep function in libavutil/mem.c (bsc#1189348).
- CVE-2020-21697: Fixed a heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c (bsc#1189350).
- CVE-2021-38114: Fixed a not checked return value of the init_vlc function (bsc#1189142).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-02"/>
	<updated date="2021-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1129714">SUSE bug 1129714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172640">SUSE bug 1172640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186406">SUSE bug 1186406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186583">SUSE bug 1186583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186586">SUSE bug 1186586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186587">SUSE bug 1186587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186596">SUSE bug 1186596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186597">SUSE bug 1186597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186598">SUSE bug 1186598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186600">SUSE bug 1186600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186603">SUSE bug 1186603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186604">SUSE bug 1186604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186605">SUSE bug 1186605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186613">SUSE bug 1186613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186614">SUSE bug 1186614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186615">SUSE bug 1186615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186616">SUSE bug 1186616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186658">SUSE bug 1186658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186660">SUSE bug 1186660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186757">SUSE bug 1186757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186758">SUSE bug 1186758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186762">SUSE bug 1186762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186763">SUSE bug 1186763</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186849">SUSE bug 1186849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186859">SUSE bug 1186859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186861">SUSE bug 1186861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186863">SUSE bug 1186863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189142">SUSE bug 1189142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189348">SUSE bug 1189348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189350">SUSE bug 1189350</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17539/">CVE-2019-17539</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9721/">CVE-2019-9721</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13904/">CVE-2020-13904</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20448/">CVE-2020-20448</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20451/">CVE-2020-20451</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-21041/">CVE-2020-21041</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-21688/">CVE-2020-21688</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-21697/">CVE-2020-21697</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22015/">CVE-2020-22015</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-22016/">CVE-2020-22016</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22017/">CVE-2020-22017</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22019/">CVE-2020-22019</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22020/">CVE-2020-22020</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22021/">CVE-2020-22021</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22022/">CVE-2020-22022</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22023/">CVE-2020-22023</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22025/">CVE-2020-22025</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22026/">CVE-2020-22026</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22031/">CVE-2020-22031</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22032/">CVE-2020-22032</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22033/">CVE-2020-22033</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22034/">CVE-2020-22034</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22038/">CVE-2020-22038</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22039/">CVE-2020-22039</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22043/">CVE-2020-22043</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22044/">CVE-2020-22044</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22046/">CVE-2020-22046</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22048/">CVE-2020-22048</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22049/">CVE-2020-22049</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22054/">CVE-2020-22054</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-38114/">CVE-2021-38114</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631159" comment="libavcodec-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631160" comment="libavcodec57-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631161" comment="libavcodec57-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631162" comment="libavdevice-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631163" comment="libavdevice57-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631164" comment="libavdevice57-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631165" comment="libavfilter-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631166" comment="libavfilter6-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631167" comment="libavfilter6-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631168" comment="libavformat-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631169" comment="libavformat57-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631170" comment="libavformat57-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631171" comment="libavresample-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631172" comment="libavresample3-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631173" comment="libavresample3-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631174" comment="libavutil-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631175" comment="libavutil55-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631176" comment="libavutil55-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631177" comment="libpostproc-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631178" comment="libpostproc54-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631179" comment="libpostproc54-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631180" comment="libswresample-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631181" comment="libswresample2-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631182" comment="libswresample2-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631183" comment="libswscale-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631184" comment="libswscale4-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631185" comment="libswscale4-32bit-3.4.2-4.34.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139757" version="1" class="patch">
	<metadata>
		<title>Security update for libesmtp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1160462" ref_url="https://bugzilla.suse.com/1160462" source="BUGZILLA"/>
		<reference ref_id="1189097" ref_url="https://bugzilla.suse.com/1189097" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19977" ref_url="https://www.suse.com/security/cve/CVE-2019-19977/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2937-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009397.html" source="SUSE-SU"/>
		<description>
This update for libesmtp fixes the following issues:

- CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c (bsc#1160462).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-03"/>
	<updated date="2021-09-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160462">SUSE bug 1160462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189097">SUSE bug 1189097</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19977/">CVE-2019-19977</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009629441" comment="libesmtp-1.0.6-150.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629442" comment="libesmtp-devel-1.0.6-150.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139758" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185476" ref_url="https://bugzilla.suse.com/1185476" source="BUGZILLA"/>
		<reference ref_id="1188564" ref_url="https://bugzilla.suse.com/1188564" source="BUGZILLA"/>
		<reference ref_id="1188565" ref_url="https://bugzilla.suse.com/1188565" source="BUGZILLA"/>
		<reference ref_id="1188566" ref_url="https://bugzilla.suse.com/1188566" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2341" ref_url="https://www.suse.com/security/cve/CVE-2021-2341/" source="CVE"/>
		<reference ref_id="CVE-2021-2369" ref_url="https://www.suse.com/security/cve/CVE-2021-2369/" source="CVE"/>
		<reference ref_id="CVE-2021-2388" ref_url="https://www.suse.com/security/cve/CVE-2021-2388/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009404.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to jdk-11.0.12+7
- CVE-2021-2369: Fixed JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565)
- CVE-2021-2388: Fixed a flaw inside the Hotspot component performed range check elimination. (bsc#1188566)
- CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-03"/>
	<updated date="2021-09-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185476">SUSE bug 1185476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188564">SUSE bug 1188564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188565">SUSE bug 1188565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188566">SUSE bug 1188566</bugzilla>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-2341/">CVE-2021-2341</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-2369/">CVE-2021-2369</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-2388/">CVE-2021-2388</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626443" comment="java-11-openjdk-11.0.12.0-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626444" comment="java-11-openjdk-demo-11.0.12.0-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626445" comment="java-11-openjdk-devel-11.0.12.0-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626446" comment="java-11-openjdk-headless-11.0.12.0-3.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139759" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Low)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189521" ref_url="https://bugzilla.suse.com/1189521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3712" ref_url="https://www.suse.com/security/cve/CVE-2021-3712/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2968-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009417.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. 
  Read buffer overruns processing ASN.1 strings (bsc#1189521).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-07"/>
	<updated date="2021-09-07"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1189521">SUSE bug 1189521</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3712/">CVE-2021-3712</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632354" comment="libopenssl-1_1-devel-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632355" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632356" comment="libopenssl1_1-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632357" comment="libopenssl1_1-32bit-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632358" comment="libopenssl1_1-hmac-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632359" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632360" comment="openssl-1_1-1.1.0i-14.21.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139760" version="1" class="patch">
	<metadata>
		<title>Security update for openvswitch (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1117483" ref_url="https://bugzilla.suse.com/1117483" source="BUGZILLA"/>
		<reference ref_id="1181345" ref_url="https://bugzilla.suse.com/1181345" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27827" ref_url="https://www.suse.com/security/cve/CVE-2020-27827/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008270.html" source="SUSE-SU"/>
		<description>
This update for openvswitch fixes the following issues:
	  
- openvswitch was updated to 2.11.5 
- CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345)	  
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-03"/>
	<updated date="2021-02-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1117483">SUSE bug 1117483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181345">SUSE bug 1181345</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27827/">CVE-2020-27827</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504150" comment="libopenvswitch-2_11-0-2.11.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504151" comment="openvswitch-2.11.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504152" comment="openvswitch-devel-2.11.5-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139761" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184123" ref_url="https://bugzilla.suse.com/1184123" source="BUGZILLA"/>
		<reference ref_id="1190381" ref_url="https://bugzilla.suse.com/1190381" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3781" ref_url="https://www.suse.com/security/cve/CVE-2021-3781/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009444.html" source="SUSE-SU"/>
		<description>
This update for ghostscript fixes the following issues:

Security issue fixed:

- CVE-2021-3781: Fixed a trivial -dSAFER bypass command injection (bsc#1190381)

Also a hardening fix was added:

- Link as position independent executable (bsc#1184123)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-15"/>
	<updated date="2021-09-15"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1184123">SUSE bug 1184123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190381">SUSE bug 1190381</bugzilla>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3781/">CVE-2021-3781</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632746" comment="ghostscript-9.52-155.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632747" comment="ghostscript-devel-9.52-155.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632748" comment="ghostscript-x11-9.52-155.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632749" comment="libspectre-devel-0.2.8-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632750" comment="libspectre1-0.2.8-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139762" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189724" ref_url="https://bugzilla.suse.com/1189724" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-38171" ref_url="https://www.suse.com/security/cve/CVE-2021-38171/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009506.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

- CVE-2021-38171: Fixed adts_decode_extradata in libavformat/adtsenc.c to check the init_get_bits return value (bsc#1189724).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-23"/>
	<updated date="2021-09-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189724">SUSE bug 1189724</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38171/">CVE-2021-38171</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009633479" comment="libavcodec-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633480" comment="libavcodec57-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633481" comment="libavcodec57-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633482" comment="libavdevice-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633483" comment="libavdevice57-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633484" comment="libavdevice57-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633485" comment="libavfilter-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633486" comment="libavfilter6-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633487" comment="libavfilter6-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633488" comment="libavformat-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633489" comment="libavformat57-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633490" comment="libavformat57-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633491" comment="libavresample-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633492" comment="libavresample3-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633493" comment="libavresample3-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633494" comment="libavutil-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633495" comment="libavutil55-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633496" comment="libavutil55-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633497" comment="libpostproc-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633498" comment="libpostproc54-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633499" comment="libpostproc54-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633500" comment="libswresample-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633501" comment="libswresample2-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633502" comment="libswresample2-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633503" comment="libswscale-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633504" comment="libswscale4-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633505" comment="libswscale4-32bit-3.4.2-4.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139763" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188697" ref_url="https://bugzilla.suse.com/1188697" source="BUGZILLA"/>
		<reference ref_id="1190701" ref_url="https://bugzilla.suse.com/1190701" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21806" ref_url="https://www.suse.com/security/cve/CVE-2021-21806/" source="CVE"/>
		<reference ref_id="CVE-2021-30858" ref_url="https://www.suse.com/security/cve/CVE-2021-30858/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009531.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.32.4
- CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve arbitrary code execution. (bsc#1190701)
- CVE-2021-21806: Fixed an exploitable use-after-free vulnerability via specially crafted HTML web page. (bsc#1188697)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-04"/>
	<updated date="2021-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188697">SUSE bug 1188697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190701">SUSE bug 1190701</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21806/">CVE-2021-21806</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30858/">CVE-2021-30858</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009634109" comment="libjavascriptcoregtk-4_0-18-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634110" comment="libwebkit2gtk-4_0-37-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634111" comment="libwebkit2gtk3-lang-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634112" comment="typelib-1_0-JavaScriptCore-4_0-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634113" comment="typelib-1_0-WebKit2-4_0-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634114" comment="typelib-1_0-WebKit2WebExtension-4_0-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634115" comment="webkit2gtk-4_0-injected-bundles-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634116" comment="webkit2gtk3-devel-2.32.4-3.82.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139764" version="1" class="patch">
	<metadata>
		<title>Security update for grilo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189839" ref_url="https://bugzilla.suse.com/1189839" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-39365" ref_url="https://www.suse.com/security/cve/CVE-2021-39365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009536.html" source="SUSE-SU"/>
		<description>
This update for grilo fixes the following issues:

- CVE-2021-39365: Fixed missing TLS certificate verification (bsc#1189839).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-06"/>
	<updated date="2021-10-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189839">SUSE bug 1189839</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39365/">CVE-2021-39365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009634441" comment="grilo-devel-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634442" comment="libgrilo-0_3-0-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634443" comment="libgrlnet-0_3-0-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634444" comment="libgrlpls-0_3-0-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634445" comment="typelib-1_0-Grl-0_3-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634446" comment="typelib-1_0-GrlNet-0_3-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634447" comment="typelib-1_0-GrlPls-0_3-0.3.4-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139765" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1190373" ref_url="https://bugzilla.suse.com/1190373" source="BUGZILLA"/>
		<reference ref_id="1190374" ref_url="https://bugzilla.suse.com/1190374" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22946" ref_url="https://www.suse.com/security/cve/CVE-2021-22946/" source="CVE"/>
		<reference ref_id="CVE-2021-22947" ref_url="https://www.suse.com/security/cve/CVE-2021-22947/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3297-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009542.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2021-22947: Fixed STARTTLS protocol injection via MITM (bsc#1190374).
- CVE-2021-22946: Fixed protocol downgrade required TLS bypassed (bsc#1190373).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-06"/>
	<updated date="2021-10-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1190373">SUSE bug 1190373</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190374">SUSE bug 1190374</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22946/">CVE-2021-22946</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22947/">CVE-2021-22947</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009633983" comment="curl-7.60.0-25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633984" comment="libcurl-devel-7.60.0-25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633985" comment="libcurl4-7.60.0-25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633986" comment="libcurl4-32bit-7.60.0-25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139766" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188891" ref_url="https://bugzilla.suse.com/1188891" source="BUGZILLA"/>
		<reference ref_id="1189547" ref_url="https://bugzilla.suse.com/1189547" source="BUGZILLA"/>
		<reference ref_id="1190269" ref_url="https://bugzilla.suse.com/1190269" source="BUGZILLA"/>
		<reference ref_id="1190274" ref_url="https://bugzilla.suse.com/1190274" source="BUGZILLA"/>
		<reference ref_id="1190710" ref_url="https://bugzilla.suse.com/1190710" source="BUGZILLA"/>
		<reference ref_id="1191332" ref_url="https://bugzilla.suse.com/1191332" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29980" ref_url="https://www.suse.com/security/cve/CVE-2021-29980/" source="CVE"/>
		<reference ref_id="CVE-2021-29981" ref_url="https://www.suse.com/security/cve/CVE-2021-29981/" source="CVE"/>
		<reference ref_id="CVE-2021-29982" ref_url="https://www.suse.com/security/cve/CVE-2021-29982/" source="CVE"/>
		<reference ref_id="CVE-2021-29983" ref_url="https://www.suse.com/security/cve/CVE-2021-29983/" source="CVE"/>
		<reference ref_id="CVE-2021-29984" ref_url="https://www.suse.com/security/cve/CVE-2021-29984/" source="CVE"/>
		<reference ref_id="CVE-2021-29985" ref_url="https://www.suse.com/security/cve/CVE-2021-29985/" source="CVE"/>
		<reference ref_id="CVE-2021-29986" ref_url="https://www.suse.com/security/cve/CVE-2021-29986/" source="CVE"/>
		<reference ref_id="CVE-2021-29987" ref_url="https://www.suse.com/security/cve/CVE-2021-29987/" source="CVE"/>
		<reference ref_id="CVE-2021-29988" ref_url="https://www.suse.com/security/cve/CVE-2021-29988/" source="CVE"/>
		<reference ref_id="CVE-2021-29989" ref_url="https://www.suse.com/security/cve/CVE-2021-29989/" source="CVE"/>
		<reference ref_id="CVE-2021-29990" ref_url="https://www.suse.com/security/cve/CVE-2021-29990/" source="CVE"/>
		<reference ref_id="CVE-2021-29991" ref_url="https://www.suse.com/security/cve/CVE-2021-29991/" source="CVE"/>
		<reference ref_id="CVE-2021-32810" ref_url="https://www.suse.com/security/cve/CVE-2021-32810/" source="CVE"/>
		<reference ref_id="CVE-2021-38492" ref_url="https://www.suse.com/security/cve/CVE-2021-38492/" source="CVE"/>
		<reference ref_id="CVE-2021-38495" ref_url="https://www.suse.com/security/cve/CVE-2021-38495/" source="CVE"/>
		<reference ref_id="CVE-2021-38496" ref_url="https://www.suse.com/security/cve/CVE-2021-38496/" source="CVE"/>
		<reference ref_id="CVE-2021-38497" ref_url="https://www.suse.com/security/cve/CVE-2021-38497/" source="CVE"/>
		<reference ref_id="CVE-2021-38498" ref_url="https://www.suse.com/security/cve/CVE-2021-38498/" source="CVE"/>
		<reference ref_id="CVE-2021-38500" ref_url="https://www.suse.com/security/cve/CVE-2021-38500/" source="CVE"/>
		<reference ref_id="CVE-2021-38501" ref_url="https://www.suse.com/security/cve/CVE-2021-38501/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009561.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

This update contains the Firefox Extended Support Release 91.2.0 ESR.

Firefox Extended Support Release 91.2.0 ESR

* Fixed: Various stability, functionality, and security fixes
 MFSA 2021-45 (bsc#1191332)
* CVE-2021-38496: Use-after-free in MessageTask
* CVE-2021-38497: Validation message could have been overlaid on another origin
* CVE-2021-38498: Use-after-free of nsLanguageAtomService object
* CVE-2021-32810: Data race in crossbeam-deque

  https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
   
* CVE-2021-38500 (bmo#1725854, bmo#1728321)
  Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
  and Firefox ESR 91.2
* CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
  Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2

- Fixed crash in FIPS mode (bsc#1190710)

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-40 (bsc#1190269, bsc#1190274):

* CVE-2021-38492: Navigating to `mk:` URL scheme could load Internet Explorer
* CVE-2021-38495: Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1

Firefox Extended Support Release 91.0.1 ESR

* Fixed: Fixed an issue causing buttons on the tab bar to be
  resized when loading certain websites (bug 1704404)
* Fixed: Fixed an issue which caused tabs from private windows
  to be visible in non-private windows when viewing switch-to-
  tab results in the address bar panel (bug 1720369)
* Fixed: Various stability fixes
* Fixed: Security fix MFSA 2021-37 (bsc#1189547)
* CVE-2021-29991 (bmo#1724896)
  Header Splitting possible with HTTP/3 Responses

Firefox Extended Support Release 91.0 ESR

* New: Some of the highlights of the new Extended Support Release are:

  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded 'just in time' if you decide to 'Log in with Facebook'
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We’ve improved functionality and design for a number of
    Firefox search features:
    * Selecting a search engine at the bottom of the search
      panel now enters search mode for that engine, allowing you to
      see suggestions (if available) for your search terms. The old
      behavior (immediately performing a search) is available with
      a shift-click.
    * When Firefox autocompletes the URL of one of your search
      engines, you can now search with that engine directly in the
      address bar by selecting the shortcut in the address bar
      results.
    * We’ve added buttons at the bottom of the search panel to
      allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
* Changed: Firefox no longer supports Adobe Flash. There is no
  setting available to re-enable Flash support.
* Enterprise: Various bug fixes and new policies have been
  implemented in the latest version of Firefox. See more
  details in the Firefox for Enterprise 91 Release Notes.

  MFSA 2021-33 (bsc#1188891):

* CVE-2021-29986: Race condition when resolving DNS names could have led to
  memory corruption
* CVE-2021-29981: Live range splitting could have led to conflicting
  assignments in the JIT
* CVE-2021-29988: Memory corruption as a result of incorrect style treatment
* CVE-2021-29983: Firefox for Android could get stuck in fullscreen mode
* CVE-2021-29984: Incorrect instruction reordering during JIT optimization
* CVE-2021-29980: Uninitialized memory in a canvas object could have led to
  memory corruption
* CVE-2021-29987: Users could have been tricked into accepting unwanted
  permissions on Linux
* CVE-2021-29985: Use-after-free media channels
* CVE-2021-29982: Single bit data leak due to incorrect JIT optimization and
  type confusion
* CVE-2021-29989: Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
* CVE-2021-29990: Memory safety bugs fixed in Firefox 91
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-11"/>
	<updated date="2021-10-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188891">SUSE bug 1188891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189547">SUSE bug 1189547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190269">SUSE bug 1190269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190274">SUSE bug 1190274</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190710">SUSE bug 1190710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191332">SUSE bug 1191332</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29980/">CVE-2021-29980</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29981/">CVE-2021-29981</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29982/">CVE-2021-29982</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29983/">CVE-2021-29983</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29984/">CVE-2021-29984</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29985/">CVE-2021-29985</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29986/">CVE-2021-29986</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29987/">CVE-2021-29987</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29988/">CVE-2021-29988</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29989/">CVE-2021-29989</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29990/">CVE-2021-29990</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29991/">CVE-2021-29991</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32810/">CVE-2021-32810</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38492/">CVE-2021-38492</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38495/">CVE-2021-38495</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38496/">CVE-2021-38496</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38497/">CVE-2021-38497</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38498/">CVE-2021-38498</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38500/">CVE-2021-38500</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38501/">CVE-2021-38501</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009651315" comment="MozillaFirefox-91.2.0-3.155.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633337" comment="MozillaFirefox-branding-SLE-91-4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651316" comment="MozillaFirefox-devel-91.2.0-3.155.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651317" comment="MozillaFirefox-translations-common-91.2.0-3.155.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651318" comment="MozillaFirefox-translations-other-91.2.0-3.155.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139767" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189387" ref_url="https://bugzilla.suse.com/1189387" source="BUGZILLA"/>
		<reference ref_id="1190666" ref_url="https://bugzilla.suse.com/1190666" source="BUGZILLA"/>
		<reference ref_id="1190669" ref_url="https://bugzilla.suse.com/1190669" source="BUGZILLA"/>
		<reference ref_id="1190702" ref_url="https://bugzilla.suse.com/1190702" source="BUGZILLA"/>
		<reference ref_id="1190703" ref_url="https://bugzilla.suse.com/1190703" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33193" ref_url="https://www.suse.com/security/cve/CVE-2021-33193/" source="CVE"/>
		<reference ref_id="CVE-2021-34798" ref_url="https://www.suse.com/security/cve/CVE-2021-34798/" source="CVE"/>
		<reference ref_id="CVE-2021-36160" ref_url="https://www.suse.com/security/cve/CVE-2021-36160/" source="CVE"/>
		<reference ref_id="CVE-2021-39275" ref_url="https://www.suse.com/security/cve/CVE-2021-39275/" source="CVE"/>
		<reference ref_id="CVE-2021-40438" ref_url="https://www.suse.com/security/cve/CVE-2021-40438/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009564.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703)
- CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702)
- CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)
- CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)
- CVE-2021-33193: Fixed request splitting via HTTP/2 method injection and mod_proxy. (bsc#1189387)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-12"/>
	<updated date="2021-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189387">SUSE bug 1189387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190666">SUSE bug 1190666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190669">SUSE bug 1190669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190702">SUSE bug 1190702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190703">SUSE bug 1190703</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-33193/">CVE-2021-33193</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-34798/">CVE-2021-34798</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36160/">CVE-2021-36160</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-39275/">CVE-2021-39275</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-40438/">CVE-2021-40438</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009633977" comment="apache2-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633978" comment="apache2-devel-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633979" comment="apache2-doc-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633980" comment="apache2-prefork-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633981" comment="apache2-utils-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633982" comment="apache2-worker-2.4.33-3.55.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139768" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186489" ref_url="https://bugzilla.suse.com/1186489" source="BUGZILLA"/>
		<reference ref_id="1187911" ref_url="https://bugzilla.suse.com/1187911" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33574" ref_url="https://www.suse.com/security/cve/CVE-2021-33574/" source="CVE"/>
		<reference ref_id="CVE-2021-35942" ref_url="https://www.suse.com/security/cve/CVE-2021-35942/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009579.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

- CVE-2021-35942: wordexp: handle overflow in positional parameter number (bsc#1187911)
- CVE-2021-33574: Use __pthread_attr_copy in mq_notify (bsc#1186489)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-12"/>
	<updated date="2021-10-12"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1186489">SUSE bug 1186489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187911">SUSE bug 1187911</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33574/">CVE-2021-33574</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35942/">CVE-2021-35942</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009634576" comment="glibc-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634544" comment="glibc-32bit-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634577" comment="glibc-devel-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634569" comment="glibc-devel-32bit-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634578" comment="glibc-devel-static-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634579" comment="glibc-extra-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634547" comment="glibc-i18ndata-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634548" comment="glibc-info-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634580" comment="glibc-locale-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634581" comment="glibc-locale-base-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634551" comment="glibc-locale-base-32bit-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634582" comment="glibc-profile-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634583" comment="glibc-utils-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634584" comment="nscd-2.26-13.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139769" version="1" class="patch">
	<metadata>
		<title>Security update for strongswan (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1167880" ref_url="https://bugzilla.suse.com/1167880" source="BUGZILLA"/>
		<reference ref_id="1191367" ref_url="https://bugzilla.suse.com/1191367" source="BUGZILLA"/>
		<reference ref_id="1191435" ref_url="https://bugzilla.suse.com/1191435" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-41990" ref_url="https://www.suse.com/security/cve/CVE-2021-41990/" source="CVE"/>
		<reference ref_id="CVE-2021-41991" ref_url="https://www.suse.com/security/cve/CVE-2021-41991/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009614.html" source="SUSE-SU"/>
		<description>
This update for strongswan fixes the following issues:

- Fix trailing quotation mark missing from example in README. (bsc#1167880)
- CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. (bsc#1191435)
- CVE-2021-41990: Fixed an integer Overflow in the gmp Plugin. (bsc#1191367)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-19"/>
	<updated date="2021-10-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1167880">SUSE bug 1167880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191367">SUSE bug 1191367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191435">SUSE bug 1191435</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41990/">CVE-2021-41990</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41991/">CVE-2021-41991</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009652769" comment="strongswan-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652770" comment="strongswan-doc-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652771" comment="strongswan-hmac-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652772" comment="strongswan-ipsec-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652773" comment="strongswan-libs0-5.8.2-4.14.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139770" version="1" class="patch">
	<metadata>
		<title>Security update for python-Pygments (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183169" ref_url="https://bugzilla.suse.com/1183169" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20270" ref_url="https://www.suse.com/security/cve/CVE-2021-20270/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009616.html" source="SUSE-SU"/>
		<description>
This update for python-Pygments fixes the following issues:

- CVE-2021-20270: Fixed an infinite loop in the SML lexer (bsc#1183169).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-20"/>
	<updated date="2021-10-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183169">SUSE bug 1183169</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20270/">CVE-2021-20270</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652625" comment="python3-Pygments-2.6.1-7.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139771" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1102408" ref_url="https://bugzilla.suse.com/1102408" source="BUGZILLA"/>
		<reference ref_id="1185405" ref_url="https://bugzilla.suse.com/1185405" source="BUGZILLA"/>
		<reference ref_id="1187704" ref_url="https://bugzilla.suse.com/1187704" source="BUGZILLA"/>
		<reference ref_id="1188282" ref_url="https://bugzilla.suse.com/1188282" source="BUGZILLA"/>
		<reference ref_id="1190826" ref_url="https://bugzilla.suse.com/1190826" source="BUGZILLA"/>
		<reference ref_id="1191015" ref_url="https://bugzilla.suse.com/1191015" source="BUGZILLA"/>
		<reference ref_id="1191121" ref_url="https://bugzilla.suse.com/1191121" source="BUGZILLA"/>
		<reference ref_id="1191334" ref_url="https://bugzilla.suse.com/1191334" source="BUGZILLA"/>
		<reference ref_id="1191355" ref_url="https://bugzilla.suse.com/1191355" source="BUGZILLA"/>
		<reference ref_id="1191434" ref_url="https://bugzilla.suse.com/1191434" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30465" ref_url="https://www.suse.com/security/cve/CVE-2021-30465/" source="CVE"/>
		<reference ref_id="CVE-2021-32760" ref_url="https://www.suse.com/security/cve/CVE-2021-32760/" source="CVE"/>
		<reference ref_id="CVE-2021-41089" ref_url="https://www.suse.com/security/cve/CVE-2021-41089/" source="CVE"/>
		<reference ref_id="CVE-2021-41091" ref_url="https://www.suse.com/security/cve/CVE-2021-41091/" source="CVE"/>
		<reference ref_id="CVE-2021-41092" ref_url="https://www.suse.com/security/cve/CVE-2021-41092/" source="CVE"/>
		<reference ref_id="CVE-2021-41103" ref_url="https://www.suse.com/security/cve/CVE-2021-41103/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009645.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, runc fixes the following issues:

Docker was updated to 20.10.9-ce. (bsc#1191355)

See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. 

  CVE-2021-41092 CVE-2021-41089 CVE-2021-41091 CVE-2021-41103

container was updated to v1.4.11, to fix CVE-2021-41103. bsc#1191355

- CVE-2021-32760: Fixed that a archive package allows chmod of file outside of unpack target directory (bsc#1188282)

- Install systemd service file as well (bsc#1190826)

Update to runc v1.0.2. Upstream changelog is available from

  https://github.com/opencontainers/runc/releases/tag/v1.0.2

* Fixed a failure to set CPU quota period in some cases on cgroup v1.
* Fixed the inability to start a container with the 'adding seccomp filter
  rule for syscall ...' error, caused by redundant seccomp rules (i.e. those
  that has action equal to the default one). Such redundant rules are now
  skipped.
* Made release builds reproducible from now on.
* Fixed a rare debug log race in runc init, which can result in occasional
  harmful 'failed to decode ...' errors from runc run or exec.
* Fixed the check in cgroup v1 systemd manager if a container needs to be
  frozen before Set, and add a setting to skip such freeze unconditionally.
  The previous fix for that issue, done in runc 1.0.1, was not working.

Update to runc v1.0.1. Upstream changelog is available from

https://github.com/opencontainers/runc/releases/tag/v1.0.1

* Fixed occasional runc exec/run failure ('interrupted system call') on an
  Azure volume.
* Fixed 'unable to find groups ... token too long' error with /etc/group
  containing lines longer than 64K characters.
* cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
  frozen. This is a regression in 1.0.0, not affecting runc itself but some
  of libcontainer users (e.g Kubernetes).
* cgroupv2: bpf: Ignore inaccessible existing programs in case of
  permission error when handling replacement of existing bpf cgroup
  programs. This fixes a regression in 1.0.0, where some SELinux
  policies would block runc from being able to run entirely.
* cgroup/systemd/v2: don't freeze cgroup on Set.
* cgroup/systemd/v1: avoid unnecessary freeze on Set.
- fix issues with runc under openSUSE MicroOS's SELinux policy. bsc#1187704

Update to runc v1.0.0. Upstream changelog is available from

https://github.com/opencontainers/runc/releases/tag/v1.0.0

! The usage of relative paths for mountpoints will now produce a warning
  (such configurations are outside of the spec, and in future runc will
  produce an error when given such configurations).
* cgroupv2: devices: rework the filter generation to produce consistent
  results with cgroupv1, and always clobber any existing eBPF
  program(s) to fix runc update and avoid leaking eBPF programs
  (resulting in errors when managing containers).
* cgroupv2: correctly convert 'number of IOs' statistics in a
  cgroupv1-compatible way.
* cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
* cgroupv2: wait for freeze to finish before returning from the freezing
  code, optimize the method for checking whether a cgroup is frozen.
* cgroups/systemd: fixed 'retry on dbus disconnect' logic introduced in rc94
* cgroups/systemd: fixed returning 'unit already exists' error from a systemd
  cgroup manager (regression in rc94)
+ cgroupv2: support SkipDevices with systemd driver
+ cgroup/systemd: return, not ignore, stop unit error from Destroy
+ Make 'runc --version' output sane even when built with go get or
  otherwise outside of our build scripts.
+ cgroups: set SkipDevices during runc update (so we don't modify
  cgroups at all during runc update).
+ cgroup1: blkio: support BFQ weights.
+ cgroupv2: set per-device io weights if BFQ IO scheduler is available.

Update to runc v1.0.0~rc95. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95

This release of runc contains a fix for CVE-2021-30465, and users are
strongly recommended to update (especially if you are providing
semi-limited access to spawn containers to untrusted users). (bsc#1185405)

Update to runc v1.0.0~rc94. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94

Breaking Changes:
* cgroupv1: kernel memory limits are now always ignored, as kmemcg has
  been effectively deprecated by the kernel. Users should make use of regular
  memory cgroup controls.

Regression Fixes:

* seccomp: fix 32-bit compilation errors
* runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
* runc start: fix 'chdir to cwd: permission denied' for some setups
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-25"/>
	<updated date="2021-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1102408">SUSE bug 1102408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185405">SUSE bug 1185405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187704">SUSE bug 1187704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188282">SUSE bug 1188282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190826">SUSE bug 1190826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191015">SUSE bug 1191015</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191121">SUSE bug 1191121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191334">SUSE bug 1191334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191355">SUSE bug 1191355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191434">SUSE bug 1191434</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30465/">CVE-2021-30465</cve>
	<cve impact="low" cvss3="3/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-32760/">CVE-2021-32760</cve>
	<cve impact="moderate" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-41089/">CVE-2021-41089</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-41091/">CVE-2021-41091</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-41092/">CVE-2021-41092</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-41103/">CVE-2021-41103</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009651737" comment="containerd-1.4.11-56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651738" comment="docker-20.10.9_ce-156.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651639" comment="docker-bash-completion-20.10.9_ce-156.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651739" comment="runc-1.0.2-23.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139772" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181239" ref_url="https://bugzilla.suse.com/1181239" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008289.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

java-11-openjdk was upgraded to include January 2021 CPU  (bsc#1181239)
- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-09"/>
	<updated date="2021-02-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181239">SUSE bug 1181239</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503578" comment="java-11-openjdk-11.0.10.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503579" comment="java-11-openjdk-demo-11.0.10.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503580" comment="java-11-openjdk-devel-11.0.10.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503581" comment="java-11-openjdk-headless-11.0.10.0-3.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139773" version="1" class="patch">
	<metadata>
		<title>Security update for dnsmasq (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1173646" ref_url="https://bugzilla.suse.com/1173646" source="BUGZILLA"/>
		<reference ref_id="1180914" ref_url="https://bugzilla.suse.com/1180914" source="BUGZILLA"/>
		<reference ref_id="1183709" ref_url="https://bugzilla.suse.com/1183709" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14312" ref_url="https://www.suse.com/security/cve/CVE-2020-14312/" source="CVE"/>
		<reference ref_id="CVE-2021-3448" ref_url="https://www.suse.com/security/cve/CVE-2021-3448/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009660.html" source="SUSE-SU"/>
		<description>
This update for dnsmasq fixes the following issues:

Update to version 2.86

- CVE-2021-3448: fixed outgoing port used when --server is used with an interface name. (bsc#1183709)
- CVE-2020-14312: Set --local-service by default (bsc#1173646).
- Open inotify socket only when used (bsc#1180914).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173646">SUSE bug 1173646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180914">SUSE bug 1180914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183709">SUSE bug 1183709</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14312/">CVE-2020-14312</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3448/">CVE-2021-3448</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653320" comment="dnsmasq-2.86-7.14.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139774" version="1" class="patch">
	<metadata>
		<title>Security update for busybox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1099260" ref_url="https://bugzilla.suse.com/1099260" source="BUGZILLA"/>
		<reference ref_id="1099263" ref_url="https://bugzilla.suse.com/1099263" source="BUGZILLA"/>
		<reference ref_id="1121426" ref_url="https://bugzilla.suse.com/1121426" source="BUGZILLA"/>
		<reference ref_id="1184522" ref_url="https://bugzilla.suse.com/1184522" source="BUGZILLA"/>
		<reference ref_id="951562" ref_url="https://bugzilla.suse.com/951562" source="BUGZILLA"/>
		<reference ref_id="CVE-2011-5325" ref_url="https://www.suse.com/security/cve/CVE-2011-5325/" source="CVE"/>
		<reference ref_id="CVE-2018-1000500" ref_url="https://www.suse.com/security/cve/CVE-2018-1000500/" source="CVE"/>
		<reference ref_id="CVE-2018-1000517" ref_url="https://www.suse.com/security/cve/CVE-2018-1000517/" source="CVE"/>
		<reference ref_id="CVE-2018-20679" ref_url="https://www.suse.com/security/cve/CVE-2018-20679/" source="CVE"/>
		<reference ref_id="CVE-2021-28831" ref_url="https://www.suse.com/security/cve/CVE-2021-28831/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009658.html" source="SUSE-SU"/>
		<description>
This update for busybox fixes the following issues:

- CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522).
- CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426).
- CVE-2018-1000517: Fixed buffer overflow in the retrieve_file_data() (bsc#1099260).
- CVE-2011-5325: Fixed a directory traversal related to 'tar' command (bsc#951562).
- CVE-2018-1000500: Fixed missing SSL certificate validation related to the 'wget' command (bsc#1099263).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1099260">SUSE bug 1099260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099263">SUSE bug 1099263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121426">SUSE bug 1121426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184522">SUSE bug 1184522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951562">SUSE bug 951562</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2011-5325/">CVE-2011-5325</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000500/">CVE-2018-1000500</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000517/">CVE-2018-1000517</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20679/">CVE-2018-20679</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28831/">CVE-2021-28831</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009652768" comment="busybox-1.26.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652774" comment="busybox-static-1.26.2-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139775" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182783" ref_url="https://bugzilla.suse.com/1182783" source="BUGZILLA"/>
		<reference ref_id="1184152" ref_url="https://bugzilla.suse.com/1184152" source="BUGZILLA"/>
		<reference ref_id="1184772" ref_url="https://bugzilla.suse.com/1184772" source="BUGZILLA"/>
		<reference ref_id="1185081" ref_url="https://bugzilla.suse.com/1185081" source="BUGZILLA"/>
		<reference ref_id="1188843" ref_url="https://bugzilla.suse.com/1188843" source="BUGZILLA"/>
		<reference ref_id="1190420" ref_url="https://bugzilla.suse.com/1190420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3667" ref_url="https://www.suse.com/security/cve/CVE-2021-3667/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009661.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:

Security issue fixed:

- CVE-2021-3667: Fixed a DoS vulnerability in the libvirt virStoragePoolLookupByTargetPath API. (bsc#1188843)

Non-security issues fixed:

- resolved hangs/crashes on libvirtd shutdown (bsc#1182783)
- qemu: Normalize MAC address in device conf on netdev hotplug (bsc#1184772)
- libxl: Fix driver reload (bsc#1190420)
- libxl: Add support for 'e820_host' settings (bsc#1185081)
- libxl: Fix domain shutdown (bsc#1184152)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182783">SUSE bug 1182783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184152">SUSE bug 1184152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184772">SUSE bug 1184772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185081">SUSE bug 1185081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188843">SUSE bug 1188843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190420">SUSE bug 1190420</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3667/">CVE-2021-3667</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009652337" comment="libvirt-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652338" comment="libvirt-admin-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652339" comment="libvirt-bash-completion-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652340" comment="libvirt-client-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652341" comment="libvirt-daemon-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652342" comment="libvirt-daemon-config-network-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652343" comment="libvirt-daemon-config-nwfilter-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652344" comment="libvirt-daemon-driver-interface-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652345" comment="libvirt-daemon-driver-libxl-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652346" comment="libvirt-daemon-driver-lxc-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652347" comment="libvirt-daemon-driver-network-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652348" comment="libvirt-daemon-driver-nodedev-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652349" comment="libvirt-daemon-driver-nwfilter-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652350" comment="libvirt-daemon-driver-qemu-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652351" comment="libvirt-daemon-driver-secret-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652352" comment="libvirt-daemon-driver-storage-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652353" comment="libvirt-daemon-driver-storage-core-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652354" comment="libvirt-daemon-driver-storage-disk-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652355" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652356" comment="libvirt-daemon-driver-storage-logical-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652357" comment="libvirt-daemon-driver-storage-mpath-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652358" comment="libvirt-daemon-driver-storage-rbd-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652359" comment="libvirt-daemon-driver-storage-scsi-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652360" comment="libvirt-daemon-hooks-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652361" comment="libvirt-daemon-lxc-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652362" comment="libvirt-daemon-qemu-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652363" comment="libvirt-daemon-xen-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652364" comment="libvirt-devel-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652365" comment="libvirt-doc-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652366" comment="libvirt-libs-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652367" comment="libvirt-lock-sanlock-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652368" comment="libvirt-nss-5.1.0-8.29.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139776" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="1180686" ref_url="https://bugzilla.suse.com/1180686" source="BUGZILLA"/>
		<reference ref_id="1181126" ref_url="https://bugzilla.suse.com/1181126" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="CVE-2021-3177" ref_url="https://www.suse.com/security/cve/CVE-2021-3177/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008291.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- buffer overflow in PyCArg_repr in _ctypes/callproc.c,
  which may lead to remote code execution (bsc#1181126, CVE-2021-3177).
- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-09"/>
	<updated date="2021-02-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180686">SUSE bug 1180686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181126">SUSE bug 1181126</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3177/">CVE-2021-3177</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503582" comment="libpython2_7-1_0-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503583" comment="python-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503584" comment="python-base-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503585" comment="python-curses-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503586" comment="python-devel-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503587" comment="python-gdbm-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504153" comment="python-tk-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503588" comment="python-xml-2.7.17-7.52.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139777" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1190265" ref_url="https://bugzilla.suse.com/1190265" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21996" ref_url="https://www.suse.com/security/cve/CVE-2021-21996/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009662.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Support querying for JSON data in external sql pillar.
- Exclude the full path of a download URL to prevent injection of malicious code.
  (bsc#1190265, CVE-2021-21996)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1190265">SUSE bug 1190265</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-21996/">CVE-2021-21996</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009652204" comment="python3-salt-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652205" comment="salt-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652206" comment="salt-api-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652207" comment="salt-bash-completion-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652208" comment="salt-cloud-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652209" comment="salt-doc-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652210" comment="salt-fish-completion-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652211" comment="salt-master-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652212" comment="salt-minion-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652213" comment="salt-proxy-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652214" comment="salt-ssh-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652215" comment="salt-standalone-formulas-configuration-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652216" comment="salt-syndic-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652217" comment="salt-transactional-update-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652218" comment="salt-zsh-completion-3002.2-48.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139778" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180432" ref_url="https://bugzilla.suse.com/1180432" source="BUGZILLA"/>
		<reference ref_id="1180433" ref_url="https://bugzilla.suse.com/1180433" source="BUGZILLA"/>
		<reference ref_id="1180434" ref_url="https://bugzilla.suse.com/1180434" source="BUGZILLA"/>
		<reference ref_id="1180435" ref_url="https://bugzilla.suse.com/1180435" source="BUGZILLA"/>
		<reference ref_id="1182651" ref_url="https://bugzilla.suse.com/1182651" source="BUGZILLA"/>
		<reference ref_id="1186012" ref_url="https://bugzilla.suse.com/1186012" source="BUGZILLA"/>
		<reference ref_id="1189145" ref_url="https://bugzilla.suse.com/1189145" source="BUGZILLA"/>
		<reference ref_id="1189702" ref_url="https://bugzilla.suse.com/1189702" source="BUGZILLA"/>
		<reference ref_id="1189938" ref_url="https://bugzilla.suse.com/1189938" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35503" ref_url="https://www.suse.com/security/cve/CVE-2020-35503/" source="CVE"/>
		<reference ref_id="CVE-2020-35504" ref_url="https://www.suse.com/security/cve/CVE-2020-35504/" source="CVE"/>
		<reference ref_id="CVE-2020-35505" ref_url="https://www.suse.com/security/cve/CVE-2020-35505/" source="CVE"/>
		<reference ref_id="CVE-2020-35506" ref_url="https://www.suse.com/security/cve/CVE-2020-35506/" source="CVE"/>
		<reference ref_id="CVE-2021-20255" ref_url="https://www.suse.com/security/cve/CVE-2021-20255/" source="CVE"/>
		<reference ref_id="CVE-2021-3527" ref_url="https://www.suse.com/security/cve/CVE-2021-3527/" source="CVE"/>
		<reference ref_id="CVE-2021-3682" ref_url="https://www.suse.com/security/cve/CVE-2021-3682/" source="CVE"/>
		<reference ref_id="CVE-2021-3713" ref_url="https://www.suse.com/security/cve/CVE-2021-3713/" source="CVE"/>
		<reference ref_id="CVE-2021-3748" ref_url="https://www.suse.com/security/cve/CVE-2021-3748/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009697.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

Security issues fixed:

- Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702, CVE-2021-3713)
- Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938, CVE-2021-3748)
- usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)
- NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)
- NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)
- eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)
- usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)

Non-security issues fixed:

- Use max host physical address if -cpu max is used (bsc#1188299)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-04"/>
	<updated date="2021-11-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180432">SUSE bug 1180432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180433">SUSE bug 1180433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180434">SUSE bug 1180434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180435">SUSE bug 1180435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182651">SUSE bug 1182651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186012">SUSE bug 1186012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189145">SUSE bug 1189145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189702">SUSE bug 1189702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189938">SUSE bug 1189938</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35503/">CVE-2020-35503</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35504/">CVE-2020-35504</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35505/">CVE-2020-35505</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-35506/">CVE-2020-35506</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20255/">CVE-2021-20255</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3527/">CVE-2021-3527</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3682/">CVE-2021-3682</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3713/">CVE-2021-3713</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3748/">CVE-2021-3748</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653097" comment="qemu-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653098" comment="qemu-arm-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653099" comment="qemu-audio-alsa-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653100" comment="qemu-audio-oss-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653101" comment="qemu-audio-pa-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653102" comment="qemu-block-curl-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653103" comment="qemu-block-iscsi-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653104" comment="qemu-block-rbd-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653105" comment="qemu-block-ssh-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653106" comment="qemu-guest-agent-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653107" comment="qemu-ipxe-1.0.0+-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653108" comment="qemu-kvm-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653109" comment="qemu-lang-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653110" comment="qemu-seabios-1.12.0_0_ga698c89-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653111" comment="qemu-sgabios-8-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653112" comment="qemu-tools-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653113" comment="qemu-ui-curses-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653114" comment="qemu-ui-gtk-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653115" comment="qemu-vgabios-1.12.0_0_ga698c89-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653116" comment="qemu-x86-3.1.1.1-80.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139779" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179898" ref_url="https://bugzilla.suse.com/1179898" source="BUGZILLA"/>
		<reference ref_id="1179899" ref_url="https://bugzilla.suse.com/1179899" source="BUGZILLA"/>
		<reference ref_id="1179900" ref_url="https://bugzilla.suse.com/1179900" source="BUGZILLA"/>
		<reference ref_id="1179901" ref_url="https://bugzilla.suse.com/1179901" source="BUGZILLA"/>
		<reference ref_id="1179902" ref_url="https://bugzilla.suse.com/1179902" source="BUGZILLA"/>
		<reference ref_id="1179903" ref_url="https://bugzilla.suse.com/1179903" source="BUGZILLA"/>
		<reference ref_id="1180451" ref_url="https://bugzilla.suse.com/1180451" source="BUGZILLA"/>
		<reference ref_id="1180454" ref_url="https://bugzilla.suse.com/1180454" source="BUGZILLA"/>
		<reference ref_id="1180461" ref_url="https://bugzilla.suse.com/1180461" source="BUGZILLA"/>
		<reference ref_id="1181452" ref_url="https://bugzilla.suse.com/1181452" source="BUGZILLA"/>
		<reference ref_id="1182252" ref_url="https://bugzilla.suse.com/1182252" source="BUGZILLA"/>
		<reference ref_id="1183511" ref_url="https://bugzilla.suse.com/1183511" source="BUGZILLA"/>
		<reference ref_id="1184620" ref_url="https://bugzilla.suse.com/1184620" source="BUGZILLA"/>
		<reference ref_id="1184794" ref_url="https://bugzilla.suse.com/1184794" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-16590" ref_url="https://www.suse.com/security/cve/CVE-2020-16590/" source="CVE"/>
		<reference ref_id="CVE-2020-16591" ref_url="https://www.suse.com/security/cve/CVE-2020-16591/" source="CVE"/>
		<reference ref_id="CVE-2020-16592" ref_url="https://www.suse.com/security/cve/CVE-2020-16592/" source="CVE"/>
		<reference ref_id="CVE-2020-16593" ref_url="https://www.suse.com/security/cve/CVE-2020-16593/" source="CVE"/>
		<reference ref_id="CVE-2020-16598" ref_url="https://www.suse.com/security/cve/CVE-2020-16598/" source="CVE"/>
		<reference ref_id="CVE-2020-16599" ref_url="https://www.suse.com/security/cve/CVE-2020-16599/" source="CVE"/>
		<reference ref_id="CVE-2020-35448" ref_url="https://www.suse.com/security/cve/CVE-2020-35448/" source="CVE"/>
		<reference ref_id="CVE-2020-35493" ref_url="https://www.suse.com/security/cve/CVE-2020-35493/" source="CVE"/>
		<reference ref_id="CVE-2020-35496" ref_url="https://www.suse.com/security/cve/CVE-2020-35496/" source="CVE"/>
		<reference ref_id="CVE-2020-35507" ref_url="https://www.suse.com/security/cve/CVE-2020-35507/" source="CVE"/>
		<reference ref_id="CVE-2021-20197" ref_url="https://www.suse.com/security/cve/CVE-2021-20197/" source="CVE"/>
		<reference ref_id="CVE-2021-20284" ref_url="https://www.suse.com/security/cve/CVE-2021-20284/" source="CVE"/>
		<reference ref_id="CVE-2021-3487" ref_url="https://www.suse.com/security/cve/CVE-2021-3487/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

Update to binutils 2.37:

* The GNU Binutils sources now requires a C99 compiler and library to
  build.
* Support for Realm Management Extension (RME) for AArch64 has been
  added.
* A new linker option '-z report-relative-reloc' for x86 ELF targets
  has been added to report dynamic relative relocations.
* A new linker option '-z start-stop-gc' has been added to disable
  special treatment of __start_*/__stop_* references when
  --gc-sections.
* A new linker options '-Bno-symbolic' has been added which will
  cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
* The readelf tool has a new command line option which can be used to
  specify how the numeric values of symbols are reported.
  --sym-base=0|8|10|16 tells readelf to display the values in base 8,
  base 10 or base 16.  A sym base of 0 represents the default action
  of displaying values under 10000 in base 10 and values above that in
  base 16.
* A new format has been added to the nm program.  Specifying
  '--format=just-symbols' (or just using -j) will tell the program to
  only display symbol names and nothing else.
* A new command line option '--keep-section-symbols' has been added to
  objcopy and strip.  This stops the removal of unused section symbols
  when the file is copied.  Removing these symbols saves space, but
  sometimes they are needed by other tools.
* The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
  supported by objcopy now make undefined symbols weak on targets that
  support weak symbols. 
* Readelf and objdump can now display and use the contents of .debug_sup
  sections.
* Readelf and objdump will now follow links to separate debug info
  files by default.  This behaviour can be stopped via the use of the
  new '-wN' or '--debug-dump=no-follow-links' options for readelf and
  the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
  the old behaviour can be restored by the use of the
  '--enable-follow-debug-links=no' configure time option.

  The semantics of the =follow-links option have also been slightly
  changed.  When enabled, the option allows for the loading of symbol
  tables and string tables from the separate files which can be used
  to enhance the information displayed when dumping other sections,
  but it does not automatically imply that information from the
  separate files should be displayed.

  If other debug section display options are also enabled (eg
  '--debug-dump=info') then the contents of matching sections in both
  the main file and the separate debuginfo file *will* be displayed.
  This is because in most cases the debug section will only be present
  in one of the files.

  If however non-debug section display options are enabled (eg
  '--sections') then the contents of matching parts of the separate
  debuginfo file will *not* be displayed.  This is because in most
  cases the user probably only wanted to load the symbol information
  from the separate debuginfo file.  In order to change this behaviour
  a new command line option --process-links can be used.  This will
  allow di0pslay options to applied to both the main file and any
  separate debuginfo files.

* Nm has a new command line option: '--quiet'.  This suppresses 'no
  symbols' diagnostic.

Update to binutils 2.36:

New features in the Assembler:

- General:

   * When setting the link order attribute of ELF sections, it is now
     possible to use a numeric section index instead of symbol name.
   * Added a .nop directive to generate a single no-op instruction in
     a target neutral manner.  This instruction does have an effect on
     DWARF line number generation, if that is active.
   * Removed --reduce-memory-overheads and --hash-size as gas now
     uses hash tables that can be expand and shrink automatically.

- X86/x86_64:

   * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
     Locker instructions. 
   * Support non-absolute segment values for lcall and ljmp.
   * Add {disp16} pseudo prefix to x86 assembler.
   * Configure with --enable-x86-used-note by default for Linux/x86.

-  ARM/AArch64:

   * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
     Cortex-R82, Neoverse V1, and Neoverse N2 cores.
   * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
     Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
     Stack Recorder Extension) and BRBE (Branch Record Buffer
     Extension) system registers.
   * Add support for Armv8-R and Armv8.7-A ISA extensions.
   * Add support for DSB memory nXS barrier, WFET and WFIT
     instruction for Armv8.7.
   * Add support for +csre feature for -march. Add CSR PDEC
     instruction for CSRE feature in AArch64.
   * Add support for +flagm feature for -march in Armv8.4 AArch64.
   * Add support for +ls64 feature for -march in Armv8.7
     AArch64. Add atomic 64-byte load/store instructions for this
     feature. 
   * Add support for +pauth (Pointer Authentication) feature for
     -march in AArch64.

New features in the Linker:

  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new 
     command-line option --ctf-share-types describes how to do this:
     its default value, share-unconflicted, produces the most compact
     output.
  * The linker now omits the 'variable section' from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.

New features in other binary tools:

  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
    --no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.

The following security fixes are addressed by the update:

- CVE-2021-20197: Fixed a race condition which allows users to own arbitrary files (bsc#1181452).
- CVE-2021-20284: Fixed a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c (bsc#1183511).
- CVE-2021-3487: Fixed a denial of service via excessive debug section size causing excessive memory consumption in bfd's dwarf2.c read_section() (bsc#1184620).
- CVE-2020-35448: Fixed a heap-based buffer over-read in bfd_getl_signed_32() in libbfd.c (bsc#1184794).
- CVE-2020-16590: Fixed a double free vulnerability in process_symbol_table() (bsc#1179898).
- CVE-2020-16591: Fixed an invalid read in process_symbol_table() (bsc#1179899).
- CVE-2020-16592: Fixed an use-after-free in bfd_hash_lookup() (bsc#1179900).
- CVE-2020-16593: Fixed a null pointer dereference in scan_unit_for_symbols() (bsc#1179901).
- CVE-2020-16598: Fixed a null pointer dereference in debug_get_real_type() (bsc#1179902).
- CVE-2020-16599: Fixed a null pointer dereference in _bfd_elf_get_symbol_version_string() (bsc#1179903)
- CVE-2020-35493: Fixed heap-based buffer overflow in bfd_pef_parse_function_stubs function in bfd/pef.c via crafted PEF file (bsc#1180451).
- CVE-2020-35496: Fixed multiple null pointer dereferences in bfd module due to not checking return value of bfd_malloc (bsc#1180454).
- CVE-2020-35507: Fixed a null pointer dereference in bfd_pef_parse_function_stubs() (bsc#1180461).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-04"/>
	<updated date="2021-11-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179898">SUSE bug 1179898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179899">SUSE bug 1179899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179900">SUSE bug 1179900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179901">SUSE bug 1179901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179902">SUSE bug 1179902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179903">SUSE bug 1179903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180451">SUSE bug 1180451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180454">SUSE bug 1180454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180461">SUSE bug 1180461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181452">SUSE bug 1181452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182252">SUSE bug 1182252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183511">SUSE bug 1183511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184620">SUSE bug 1184620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184794">SUSE bug 1184794</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16590/">CVE-2020-16590</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16591/">CVE-2020-16591</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16592/">CVE-2020-16592</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16593/">CVE-2020-16593</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16598/">CVE-2020-16598</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16599/">CVE-2020-16599</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-35448/">CVE-2020-35448</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35493/">CVE-2020-35493</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35496/">CVE-2020-35496</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35507/">CVE-2020-35507</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20197/">CVE-2021-20197</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20284/">CVE-2021-20284</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3487/">CVE-2021-3487</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653459" comment="binutils-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653460" comment="binutils-devel-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653461" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653462" comment="libctf0-2.37-7.21.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139780" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183909" ref_url="https://bugzilla.suse.com/1183909" source="BUGZILLA"/>
		<reference ref_id="1184519" ref_url="https://bugzilla.suse.com/1184519" source="BUGZILLA"/>
		<reference ref_id="1188941" ref_url="https://bugzilla.suse.com/1188941" source="BUGZILLA"/>
		<reference ref_id="1191473" ref_url="https://bugzilla.suse.com/1191473" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20294" ref_url="https://www.suse.com/security/cve/CVE-2021-20294/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009711.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

- For compatibility on old code stream that expect 'brcl 0,label' to
  not be disassembled as 'jgnop label' on s390x.  (bsc#1192267)
  This reverts IBM zSeries HLASM support for now.
- Fixed that ppc64 optflags did not enable LTO (bsc#1188941).
- Fix empty man-pages from broken release tarball
- Fixed a memory corruption with rpath option (bsc#1191473).
- Fixed slow performance of stripping some binaries (bsc#1183909).

Security issue fixed:

- CVE-2021-20294: Fixed out-of-bounds write in print_dynamic_symbol in readelf (bnc#1184519)

		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-09"/>
	<updated date="2021-11-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1183909">SUSE bug 1183909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184519">SUSE bug 1184519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188941">SUSE bug 1188941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191473">SUSE bug 1191473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20294/">CVE-2021-20294</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009654364" comment="binutils-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654365" comment="binutils-devel-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654320" comment="binutils-devel-32bit-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654366" comment="libctf-nobfd0-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654367" comment="libctf0-2.37-7.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139781" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192250" ref_url="https://bugzilla.suse.com/1192250" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-38503" ref_url="https://www.suse.com/security/cve/CVE-2021-38503/" source="CVE"/>
		<reference ref_id="CVE-2021-38504" ref_url="https://www.suse.com/security/cve/CVE-2021-38504/" source="CVE"/>
		<reference ref_id="CVE-2021-38505" ref_url="https://www.suse.com/security/cve/CVE-2021-38505/" source="CVE"/>
		<reference ref_id="CVE-2021-38506" ref_url="https://www.suse.com/security/cve/CVE-2021-38506/" source="CVE"/>
		<reference ref_id="CVE-2021-38507" ref_url="https://www.suse.com/security/cve/CVE-2021-38507/" source="CVE"/>
		<reference ref_id="CVE-2021-38508" ref_url="https://www.suse.com/security/cve/CVE-2021-38508/" source="CVE"/>
		<reference ref_id="CVE-2021-38509" ref_url="https://www.suse.com/security/cve/CVE-2021-38509/" source="CVE"/>
		<reference ref_id="CVE-2021-38510" ref_url="https://www.suse.com/security/cve/CVE-2021-38510/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3651-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009712.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

MozillaFirefox was updated to Extended Support Release 91.3.0 ESR

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-49 (bsc#1192250)

  * CVE-2021-38503: iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504: Use-after-free in file picker dialog
  * CVE-2021-38505: Windows 10 Cloud Clipboard may have recorded sensitive user data
  * CVE-2021-38506: Firefox could be coaxed into going into fullscreen mode without notification or warning
  * CVE-2021-38507: Opportunistic Encryption in HTTP2 could be used to bypass the Same-Origin-Policy on services hosted on other ports
  * CVE-2021-38508: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing
  * CVE-2021-38509: Javascript alert box could have been spoofed onto an arbitrary domain
  * CVE-2021-38510: Download Protections were bypassed by .inetloc files on Mac OS
  * MOZ-2021-0008: Use-after-free in HTTP2 Session object
  * MOZ-2021-0007: Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-10"/>
	<updated date="2021-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192250">SUSE bug 1192250</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38503/">CVE-2021-38503</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38504/">CVE-2021-38504</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38505/">CVE-2021-38505</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38506/">CVE-2021-38506</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38507/">CVE-2021-38507</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38508/">CVE-2021-38508</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38509/">CVE-2021-38509</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38510/">CVE-2021-38510</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009654098" comment="MozillaFirefox-91.3.0-150.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654099" comment="MozillaFirefox-devel-91.3.0-150.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654100" comment="MozillaFirefox-translations-common-91.3.0-150.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654101" comment="MozillaFirefox-translations-other-91.3.0-150.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139782" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188278" ref_url="https://bugzilla.suse.com/1188278" source="BUGZILLA"/>
		<reference ref_id="1188279" ref_url="https://bugzilla.suse.com/1188279" source="BUGZILLA"/>
		<reference ref_id="1190558" ref_url="https://bugzilla.suse.com/1190558" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30640" ref_url="https://www.suse.com/security/cve/CVE-2021-30640/" source="CVE"/>
		<reference ref_id="CVE-2021-33037" ref_url="https://www.suse.com/security/cve/CVE-2021-33037/" source="CVE"/>
		<reference ref_id="CVE-2021-41079" ref_url="https://www.suse.com/security/cve/CVE-2021-41079/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009733.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279).
- CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278).
- CVE-2021-41079: Fixed a denial of service caused by an unexpected TLS packet (bsc#1190558).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-16"/>
	<updated date="2021-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188278">SUSE bug 1188278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188279">SUSE bug 1188279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190558">SUSE bug 1190558</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30640/">CVE-2021-30640</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-33037/">CVE-2021-33037</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41079/">CVE-2021-41079</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653671" comment="tomcat-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653672" comment="tomcat-admin-webapps-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653673" comment="tomcat-el-3_0-api-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653674" comment="tomcat-jsp-2_3-api-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653675" comment="tomcat-lib-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653676" comment="tomcat-servlet-4_0-api-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653677" comment="tomcat-webapps-9.0.36-4.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139783" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191901" ref_url="https://bugzilla.suse.com/1191901" source="BUGZILLA"/>
		<reference ref_id="1191903" ref_url="https://bugzilla.suse.com/1191903" source="BUGZILLA"/>
		<reference ref_id="1191904" ref_url="https://bugzilla.suse.com/1191904" source="BUGZILLA"/>
		<reference ref_id="1191906" ref_url="https://bugzilla.suse.com/1191906" source="BUGZILLA"/>
		<reference ref_id="1191909" ref_url="https://bugzilla.suse.com/1191909" source="BUGZILLA"/>
		<reference ref_id="1191910" ref_url="https://bugzilla.suse.com/1191910" source="BUGZILLA"/>
		<reference ref_id="1191911" ref_url="https://bugzilla.suse.com/1191911" source="BUGZILLA"/>
		<reference ref_id="1191912" ref_url="https://bugzilla.suse.com/1191912" source="BUGZILLA"/>
		<reference ref_id="1191913" ref_url="https://bugzilla.suse.com/1191913" source="BUGZILLA"/>
		<reference ref_id="1191914" ref_url="https://bugzilla.suse.com/1191914" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-35550" ref_url="https://www.suse.com/security/cve/CVE-2021-35550/" source="CVE"/>
		<reference ref_id="CVE-2021-35556" ref_url="https://www.suse.com/security/cve/CVE-2021-35556/" source="CVE"/>
		<reference ref_id="CVE-2021-35559" ref_url="https://www.suse.com/security/cve/CVE-2021-35559/" source="CVE"/>
		<reference ref_id="CVE-2021-35561" ref_url="https://www.suse.com/security/cve/CVE-2021-35561/" source="CVE"/>
		<reference ref_id="CVE-2021-35564" ref_url="https://www.suse.com/security/cve/CVE-2021-35564/" source="CVE"/>
		<reference ref_id="CVE-2021-35565" ref_url="https://www.suse.com/security/cve/CVE-2021-35565/" source="CVE"/>
		<reference ref_id="CVE-2021-35567" ref_url="https://www.suse.com/security/cve/CVE-2021-35567/" source="CVE"/>
		<reference ref_id="CVE-2021-35578" ref_url="https://www.suse.com/security/cve/CVE-2021-35578/" source="CVE"/>
		<reference ref_id="CVE-2021-35586" ref_url="https://www.suse.com/security/cve/CVE-2021-35586/" source="CVE"/>
		<reference ref_id="CVE-2021-35603" ref_url="https://www.suse.com/security/cve/CVE-2021-35603/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009728.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

Update to 11.0.13+8 (October 2021 CPU)

- CVE-2021-35550, bsc#1191901: Update the default enabled cipher suites preference
- CVE-2021-35565, bsc#1191909: com.sun.net.HttpsServer spins on TLS session close
- CVE-2021-35556, bsc#1191910: Richer Text Editors
- CVE-2021-35559, bsc#1191911: Enhanced style for RTF kit
- CVE-2021-35561, bsc#1191912: Better hashing support
- CVE-2021-35564, bsc#1191913: Improve Keystore integrity
- CVE-2021-35567, bsc#1191903: More Constrained Delegation
- CVE-2021-35578, bsc#1191904: Improve TLS client handshaking
- CVE-2021-35586, bsc#1191914: Better BMP support
- CVE-2021-35603, bsc#1191906: Better session identification
- Improve Stream handling for SSL
- Improve requests of certificates
- Correct certificate requests
- Enhance DTLS client handshake
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-16"/>
	<updated date="2021-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191901">SUSE bug 1191901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191903">SUSE bug 1191903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191904">SUSE bug 1191904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191906">SUSE bug 1191906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191909">SUSE bug 1191909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191910">SUSE bug 1191910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191911">SUSE bug 1191911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191912">SUSE bug 1191912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191913">SUSE bug 1191913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191914">SUSE bug 1191914</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35550/">CVE-2021-35550</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35556/">CVE-2021-35556</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35559/">CVE-2021-35559</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35561/">CVE-2021-35561</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-35564/">CVE-2021-35564</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35565/">CVE-2021-35565</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35567/">CVE-2021-35567</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35578/">CVE-2021-35578</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35586/">CVE-2021-35586</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35603/">CVE-2021-35603</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653316" comment="java-11-openjdk-11.0.13.0-3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653317" comment="java-11-openjdk-demo-11.0.13.0-3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653318" comment="java-11-openjdk-devel-11.0.13.0-3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653319" comment="java-11-openjdk-headless-11.0.13.0-3.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139784" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1014440" ref_url="https://bugzilla.suse.com/1014440" source="BUGZILLA"/>
		<reference ref_id="1192284" ref_url="https://bugzilla.suse.com/1192284" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-2124" ref_url="https://www.suse.com/security/cve/CVE-2016-2124/" source="CVE"/>
		<reference ref_id="CVE-2020-25717" ref_url="https://www.suse.com/security/cve/CVE-2020-25717/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009729.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos (bsc#1014440).
- CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members (bsc#1192284).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-16"/>
	<updated date="2021-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1014440">SUSE bug 1014440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192284">SUSE bug 1192284</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2124/">CVE-2016-2124</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25717/">CVE-2020-25717</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009654913" comment="libdcerpc-binding0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654914" comment="libdcerpc-binding0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654915" comment="libdcerpc-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654916" comment="libdcerpc-samr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654917" comment="libdcerpc-samr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654918" comment="libdcerpc0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654919" comment="libdcerpc0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654920" comment="libndr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654921" comment="libndr-krb5pac-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654922" comment="libndr-krb5pac0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654923" comment="libndr-krb5pac0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654924" comment="libndr-nbt-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654925" comment="libndr-nbt0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654926" comment="libndr-nbt0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654927" comment="libndr-standard-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654928" comment="libndr-standard0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654929" comment="libndr-standard0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654930" comment="libndr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654931" comment="libndr0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654932" comment="libnetapi-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654933" comment="libnetapi0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654934" comment="libnetapi0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654935" comment="libsamba-credentials-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654936" comment="libsamba-credentials0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654937" comment="libsamba-credentials0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654938" comment="libsamba-errors-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654939" comment="libsamba-errors0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654940" comment="libsamba-errors0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654941" comment="libsamba-hostconfig-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654942" comment="libsamba-hostconfig0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654943" comment="libsamba-hostconfig0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654944" comment="libsamba-passdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654945" comment="libsamba-passdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654946" comment="libsamba-passdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654947" comment="libsamba-policy-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654948" comment="libsamba-policy-python3-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654949" comment="libsamba-policy0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654950" comment="libsamba-policy0-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654951" comment="libsamba-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654952" comment="libsamba-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654953" comment="libsamba-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654954" comment="libsamdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654955" comment="libsamdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654956" comment="libsamdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654957" comment="libsmbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654958" comment="libsmbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654959" comment="libsmbconf-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654960" comment="libsmbconf0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654961" comment="libsmbconf0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654962" comment="libsmbldap-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654963" comment="libsmbldap2-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654964" comment="libsmbldap2-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654965" comment="libtevent-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654966" comment="libtevent-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654967" comment="libtevent-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654968" comment="libwbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654969" comment="libwbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654970" comment="libwbclient0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654971" comment="samba-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654972" comment="samba-ad-dc-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654973" comment="samba-client-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654974" comment="samba-core-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654975" comment="samba-dsdb-modules-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654976" comment="samba-libs-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654977" comment="samba-libs-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654978" comment="samba-libs-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654979" comment="samba-libs-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654980" comment="samba-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654981" comment="samba-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654982" comment="samba-winbind-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654983" comment="samba-winbind-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139785" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191937" ref_url="https://bugzilla.suse.com/1191937" source="BUGZILLA"/>
		<reference ref_id="1192063" ref_url="https://bugzilla.suse.com/1192063" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30846" ref_url="https://www.suse.com/security/cve/CVE-2021-30846/" source="CVE"/>
		<reference ref_id="CVE-2021-30851" ref_url="https://www.suse.com/security/cve/CVE-2021-30851/" source="CVE"/>
		<reference ref_id="CVE-2021-42762" ref_url="https://www.suse.com/security/cve/CVE-2021-42762/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009770.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- CVE-2021-30846: Fixed memory corruption issue that could lead to arbitrary code execution when processing maliciously crafted web content (bsc#1192063).
- CVE-2021-30851: Fixed memory corruption vulnerability that could lead to arbitrary code execution when processing maliciously crafted web content (bsc#1192063).   
- CVE-2021-42762: Updated seccomp rules with latest changes from flatpak (bsc#1191937).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-23"/>
	<updated date="2021-11-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191937">SUSE bug 1191937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192063">SUSE bug 1192063</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30846/">CVE-2021-30846</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30851/">CVE-2021-30851</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42762/">CVE-2021-42762</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657280" comment="libjavascriptcoregtk-4_0-18-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657281" comment="libwebkit2gtk-4_0-37-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657282" comment="libwebkit2gtk3-lang-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657283" comment="typelib-1_0-JavaScriptCore-4_0-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657284" comment="typelib-1_0-WebKit2-4_0-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657285" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657286" comment="webkit2gtk-4_0-injected-bundles-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657287" comment="webkit2gtk3-devel-2.34.1-3.87.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139786" version="1" class="patch">
	<metadata>
		<title>Security update for netcdf (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191856" ref_url="https://bugzilla.suse.com/1191856" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20005" ref_url="https://www.suse.com/security/cve/CVE-2019-20005/" source="CVE"/>
		<reference ref_id="CVE-2019-20006" ref_url="https://www.suse.com/security/cve/CVE-2019-20006/" source="CVE"/>
		<reference ref_id="CVE-2019-20007" ref_url="https://www.suse.com/security/cve/CVE-2019-20007/" source="CVE"/>
		<reference ref_id="CVE-2019-20198" ref_url="https://www.suse.com/security/cve/CVE-2019-20198/" source="CVE"/>
		<reference ref_id="CVE-2019-20199" ref_url="https://www.suse.com/security/cve/CVE-2019-20199/" source="CVE"/>
		<reference ref_id="CVE-2019-20200" ref_url="https://www.suse.com/security/cve/CVE-2019-20200/" source="CVE"/>
		<reference ref_id="CVE-2019-20201" ref_url="https://www.suse.com/security/cve/CVE-2019-20201/" source="CVE"/>
		<reference ref_id="CVE-2019-20202" ref_url="https://www.suse.com/security/cve/CVE-2019-20202/" source="CVE"/>
		<reference ref_id="CVE-2021-26220" ref_url="https://www.suse.com/security/cve/CVE-2021-26220/" source="CVE"/>
		<reference ref_id="CVE-2021-26221" ref_url="https://www.suse.com/security/cve/CVE-2021-26221/" source="CVE"/>
		<reference ref_id="CVE-2021-26222" ref_url="https://www.suse.com/security/cve/CVE-2021-26222/" source="CVE"/>
		<reference ref_id="CVE-2021-30485" ref_url="https://www.suse.com/security/cve/CVE-2021-30485/" source="CVE"/>
		<reference ref_id="CVE-2021-31229" ref_url="https://www.suse.com/security/cve/CVE-2021-31229/" source="CVE"/>
		<reference ref_id="CVE-2021-31347" ref_url="https://www.suse.com/security/cve/CVE-2021-31347/" source="CVE"/>
		<reference ref_id="CVE-2021-31348" ref_url="https://www.suse.com/security/cve/CVE-2021-31348/" source="CVE"/>
		<reference ref_id="CVE-2021-31598" ref_url="https://www.suse.com/security/cve/CVE-2021-31598/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009780.html" source="SUSE-SU"/>
		<description>
This update for netcdf fixes the following issues:

- Fixed multiple vulnerabilities in ezXML:
    CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202,
    CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221,
    CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,
    CVE-2021-31348, CVE-2021-31598 (bsc#1191856)
   Note:
   * CVE-2021-26220 https://sourceforge.net/p/ezxml/bugs/23
     not relevant for netcdf: code isn't used.
   * CVE-2019-20005 https://sourceforge.net/p/ezxml/bugs/14
     Issue cannot be reproduced and no patch is available upstream.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-30"/>
	<updated date="2021-11-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191856">SUSE bug 1191856</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20005/">CVE-2019-20005</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20006/">CVE-2019-20006</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20007/">CVE-2019-20007</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20198/">CVE-2019-20198</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20199/">CVE-2019-20199</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20200/">CVE-2019-20200</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20201/">CVE-2019-20201</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20202/">CVE-2019-20202</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26220/">CVE-2021-26220</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26221/">CVE-2021-26221</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26222/">CVE-2021-26222</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-30485/">CVE-2021-30485</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31229/">CVE-2021-31229</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31347/">CVE-2021-31347</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31348/">CVE-2021-31348</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31598/">CVE-2021-31598</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657795" comment="libnetcdf-gnu-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657796" comment="libnetcdf-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657797" comment="libnetcdf-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657798" comment="libnetcdf-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657799" comment="libnetcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657800" comment="libnetcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657801" comment="libnetcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657802" comment="libnetcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657803" comment="netcdf-gnu-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657804" comment="netcdf-gnu-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657805" comment="netcdf-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657806" comment="netcdf-gnu-mpich-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657807" comment="netcdf-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657808" comment="netcdf-gnu-mvapich2-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657809" comment="netcdf-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657810" comment="netcdf-gnu-openmpi2-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657811" comment="netcdf_4_6_1-gnu-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657812" comment="netcdf_4_6_1-gnu-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657813" comment="netcdf_4_6_1-gnu-hpc-devel-static-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657814" comment="netcdf_4_6_1-gnu-mpich-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657815" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657816" comment="netcdf_4_6_1-gnu-mpich-hpc-devel-static-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657817" comment="netcdf_4_6_1-gnu-mvapich2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657818" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657819" comment="netcdf_4_6_1-gnu-mvapich2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657820" comment="netcdf_4_6_1-gnu-openmpi2-hpc-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657821" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-4.6.1-10.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657822" comment="netcdf_4_6_1-gnu-openmpi2-hpc-devel-static-4.6.1-10.7.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139787" version="1" class="patch">
	<metadata>
		<title>Security update for ruby2.5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188160" ref_url="https://bugzilla.suse.com/1188160" source="BUGZILLA"/>
		<reference ref_id="1188161" ref_url="https://bugzilla.suse.com/1188161" source="BUGZILLA"/>
		<reference ref_id="1190375" ref_url="https://bugzilla.suse.com/1190375" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31799" ref_url="https://www.suse.com/security/cve/CVE-2021-31799/" source="CVE"/>
		<reference ref_id="CVE-2021-31810" ref_url="https://www.suse.com/security/cve/CVE-2021-31810/" source="CVE"/>
		<reference ref_id="CVE-2021-32066" ref_url="https://www.suse.com/security/cve/CVE-2021-32066/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009795.html" source="SUSE-SU"/>
		<description>
This update for ruby2.5 fixes the following issues:

- CVE-2021-31799: Fixed Command injection vulnerability in RDoc (bsc#1190375).
- CVE-2021-31810: Fixed trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161).
- CVE-2021-32066: Fixed StartTLS stripping vulnerability in Net:IMAP (bsc#1188160).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-01"/>
	<updated date="2021-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188160">SUSE bug 1188160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188161">SUSE bug 1188161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190375">SUSE bug 1190375</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31799/">CVE-2021-31799</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-31810/">CVE-2021-31810</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-32066/">CVE-2021-32066</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657505" comment="libruby2_5-2_5-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657506" comment="ruby2.5-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657507" comment="ruby2.5-devel-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657508" comment="ruby2.5-devel-extra-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657509" comment="ruby2.5-stdlib-2.5.9-4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139788" version="1" class="patch">
	<metadata>
		<title>Security update for python-Pygments (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184812" ref_url="https://bugzilla.suse.com/1184812" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27291" ref_url="https://www.suse.com/security/cve/CVE-2021-27291/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009782.html" source="SUSE-SU"/>
		<description>
This update for python-Pygments fixes the following issues:

- CVE-2021-27291: Fixed ReDoS via crafted malicious input (bsc#1184812).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-01"/>
	<updated date="2021-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184812">SUSE bug 1184812</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27291/">CVE-2021-27291</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657672" comment="python3-Pygments-2.6.1-7.10.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139789" version="1" class="patch">
	<metadata>
		<title>Security update for poppler (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1092945" ref_url="https://bugzilla.suse.com/1092945" source="BUGZILLA"/>
		<reference ref_id="1102531" ref_url="https://bugzilla.suse.com/1102531" source="BUGZILLA"/>
		<reference ref_id="1107597" ref_url="https://bugzilla.suse.com/1107597" source="BUGZILLA"/>
		<reference ref_id="1114966" ref_url="https://bugzilla.suse.com/1114966" source="BUGZILLA"/>
		<reference ref_id="1115185" ref_url="https://bugzilla.suse.com/1115185" source="BUGZILLA"/>
		<reference ref_id="1115186" ref_url="https://bugzilla.suse.com/1115186" source="BUGZILLA"/>
		<reference ref_id="1115187" ref_url="https://bugzilla.suse.com/1115187" source="BUGZILLA"/>
		<reference ref_id="1115626" ref_url="https://bugzilla.suse.com/1115626" source="BUGZILLA"/>
		<reference ref_id="1120495" ref_url="https://bugzilla.suse.com/1120495" source="BUGZILLA"/>
		<reference ref_id="1120496" ref_url="https://bugzilla.suse.com/1120496" source="BUGZILLA"/>
		<reference ref_id="1120939" ref_url="https://bugzilla.suse.com/1120939" source="BUGZILLA"/>
		<reference ref_id="1120956" ref_url="https://bugzilla.suse.com/1120956" source="BUGZILLA"/>
		<reference ref_id="1124150" ref_url="https://bugzilla.suse.com/1124150" source="BUGZILLA"/>
		<reference ref_id="1127329" ref_url="https://bugzilla.suse.com/1127329" source="BUGZILLA"/>
		<reference ref_id="1129202" ref_url="https://bugzilla.suse.com/1129202" source="BUGZILLA"/>
		<reference ref_id="1130229" ref_url="https://bugzilla.suse.com/1130229" source="BUGZILLA"/>
		<reference ref_id="1131696" ref_url="https://bugzilla.suse.com/1131696" source="BUGZILLA"/>
		<reference ref_id="1131722" ref_url="https://bugzilla.suse.com/1131722" source="BUGZILLA"/>
		<reference ref_id="1142465" ref_url="https://bugzilla.suse.com/1142465" source="BUGZILLA"/>
		<reference ref_id="1143950" ref_url="https://bugzilla.suse.com/1143950" source="BUGZILLA"/>
		<reference ref_id="1179163" ref_url="https://bugzilla.suse.com/1179163" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18267" ref_url="https://www.suse.com/security/cve/CVE-2017-18267/" source="CVE"/>
		<reference ref_id="CVE-2018-13988" ref_url="https://www.suse.com/security/cve/CVE-2018-13988/" source="CVE"/>
		<reference ref_id="CVE-2018-16646" ref_url="https://www.suse.com/security/cve/CVE-2018-16646/" source="CVE"/>
		<reference ref_id="CVE-2018-18897" ref_url="https://www.suse.com/security/cve/CVE-2018-18897/" source="CVE"/>
		<reference ref_id="CVE-2018-19058" ref_url="https://www.suse.com/security/cve/CVE-2018-19058/" source="CVE"/>
		<reference ref_id="CVE-2018-19059" ref_url="https://www.suse.com/security/cve/CVE-2018-19059/" source="CVE"/>
		<reference ref_id="CVE-2018-19060" ref_url="https://www.suse.com/security/cve/CVE-2018-19060/" source="CVE"/>
		<reference ref_id="CVE-2018-19149" ref_url="https://www.suse.com/security/cve/CVE-2018-19149/" source="CVE"/>
		<reference ref_id="CVE-2018-20481" ref_url="https://www.suse.com/security/cve/CVE-2018-20481/" source="CVE"/>
		<reference ref_id="CVE-2018-20551" ref_url="https://www.suse.com/security/cve/CVE-2018-20551/" source="CVE"/>
		<reference ref_id="CVE-2018-20650" ref_url="https://www.suse.com/security/cve/CVE-2018-20650/" source="CVE"/>
		<reference ref_id="CVE-2018-20662" ref_url="https://www.suse.com/security/cve/CVE-2018-20662/" source="CVE"/>
		<reference ref_id="CVE-2019-10871" ref_url="https://www.suse.com/security/cve/CVE-2019-10871/" source="CVE"/>
		<reference ref_id="CVE-2019-10872" ref_url="https://www.suse.com/security/cve/CVE-2019-10872/" source="CVE"/>
		<reference ref_id="CVE-2019-14494" ref_url="https://www.suse.com/security/cve/CVE-2019-14494/" source="CVE"/>
		<reference ref_id="CVE-2019-7310" ref_url="https://www.suse.com/security/cve/CVE-2019-7310/" source="CVE"/>
		<reference ref_id="CVE-2019-9200" ref_url="https://www.suse.com/security/cve/CVE-2019-9200/" source="CVE"/>
		<reference ref_id="CVE-2019-9631" ref_url="https://www.suse.com/security/cve/CVE-2019-9631/" source="CVE"/>
		<reference ref_id="CVE-2019-9903" ref_url="https://www.suse.com/security/cve/CVE-2019-9903/" source="CVE"/>
		<reference ref_id="CVE-2019-9959" ref_url="https://www.suse.com/security/cve/CVE-2019-9959/" source="CVE"/>
		<reference ref_id="CVE-2020-27778" ref_url="https://www.suse.com/security/cve/CVE-2020-27778/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<description>
This update for poppler fixes the following issues:

- CVE-2017-18267: Fixed an infinite recursion that would allow remote attackers to cause a denial of service (bsc#1092945).
- CVE-2018-13988: Added an improper implementation check which otherwise could allow buffer overflows, memory corruption, and denial of service (bsc#1102531).
- CVE-2018-16646: Fixed an infinite recursion which could allow a denial-of-service attack via a specially crafted PDF file (bsc#1107597).
- CVE-2018-18897: Fixed a memory leak (bsc#1114966).
- CVE-2018-19058: Fixed a bug which could allow a denial-of-service attack via a specially crafted PDF file (bsc#1115187).
- CVE-2018-19059: Fixed an out-of-bounds read access which could allow a denial-of-service attack (bsc#1115186).
- CVE-2018-19060: Fixed a NULL pointer dereference which could allow a denial-of-service attack (bsc#1115185).
- CVE-2018-19149: Fixed a NULL pointer dereference which could allow a denial-of-service attack (bsc#1115626).
- CVE-2018-20481: Fixed a NULL pointer dereference while handling unallocated XRef entries which could allow a denial-of-service attack (bsc#1120495).
- CVE-2018-20551: Fixed a reachable assertion which could allow a denial-of-service attack through specially crafted PDF files (bsc#1120496).
- CVE-2018-20650: Fixed a reachable assertion which could allow denial-of-service through specially crafted PDF files (bsc#1120939).
- CVE-2018-20662: Fixed a bug which could potentially crash the running process by SIGABRT resulting in a denial-of-service attack through a specially crafted PDF file (bsc#1120956).
- CVE-2019-10871: Fixed a heap-based buffer  over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc (bsc#1131696).
- CVE-2019-10872: Fixed a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc (bsc#1131722).
- CVE-2019-14494: Fixed a divide-by-zero error in the function SplashOutputDev::tilingPatternFill (bsc#1143950).
- CVE-2019-7310: Fixed a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) that allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document (bsc#1124150).
- CVE-2019-9200: Fixed a heap-based buffer underwrite which could allow denial-of-service attack through a specially crafted PDF file (bsc#1127329)
- CVE-2019-9631: Fixed a heap-based buffer over-read  in the CairoRescaleBox.cc downsample_row_box_filter function (bsc#1129202).
- CVE-2019-9903: Fixed excessive stack consumption in the Dict::find() method, which can be triggered by passing a crafted pdf file to the pdfunite binary (bsc#1130229).
- CVE-2019-9959: Fixed integer overflow that made it possible to allocate a large memory chunk on the heap with a size controlled by an attacker (bsc#1142465).
- CVE-2020-27778: Fixed buffer overflow vulnerability in pdftohtml (bsc#1179163).
  		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-01"/>
	<updated date="2021-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1092945">SUSE bug 1092945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102531">SUSE bug 1102531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107597">SUSE bug 1107597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114966">SUSE bug 1114966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115185">SUSE bug 1115185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115186">SUSE bug 1115186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115187">SUSE bug 1115187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115626">SUSE bug 1115626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120495">SUSE bug 1120495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120496">SUSE bug 1120496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120939">SUSE bug 1120939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120956">SUSE bug 1120956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124150">SUSE bug 1124150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127329">SUSE bug 1127329</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129202">SUSE bug 1129202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130229">SUSE bug 1130229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131696">SUSE bug 1131696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131722">SUSE bug 1131722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142465">SUSE bug 1142465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143950">SUSE bug 1143950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179163">SUSE bug 1179163</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18267/">CVE-2017-18267</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13988/">CVE-2018-13988</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16646/">CVE-2018-16646</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18897/">CVE-2018-18897</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19058/">CVE-2018-19058</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19059/">CVE-2018-19059</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19060/">CVE-2018-19060</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19149/">CVE-2018-19149</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20481/">CVE-2018-20481</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20551/">CVE-2018-20551</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20650/">CVE-2018-20650</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20662/">CVE-2018-20662</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10871/">CVE-2019-10871</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10872/">CVE-2019-10872</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14494/">CVE-2019-14494</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7310/">CVE-2019-7310</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9200/">CVE-2019-9200</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9631/">CVE-2019-9631</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9903/">CVE-2019-9903</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9959/">CVE-2019-9959</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27778/">CVE-2020-27778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658108" comment="libpoppler-cpp0-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658109" comment="libpoppler-devel-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658110" comment="libpoppler-glib-devel-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658111" comment="libpoppler-glib8-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658112" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658113" comment="poppler-tools-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658114" comment="typelib-1_0-Poppler-0_18-0.62.0-4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139790" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1100416" ref_url="https://bugzilla.suse.com/1100416" source="BUGZILLA"/>
		<reference ref_id="1108488" ref_url="https://bugzilla.suse.com/1108488" source="BUGZILLA"/>
		<reference ref_id="1129735" ref_url="https://bugzilla.suse.com/1129735" source="BUGZILLA"/>
		<reference ref_id="1129898" ref_url="https://bugzilla.suse.com/1129898" source="BUGZILLA"/>
		<reference ref_id="1133374" ref_url="https://bugzilla.suse.com/1133374" source="BUGZILLA"/>
		<reference ref_id="1136513" ref_url="https://bugzilla.suse.com/1136513" source="BUGZILLA"/>
		<reference ref_id="1171420" ref_url="https://bugzilla.suse.com/1171420" source="BUGZILLA"/>
		<reference ref_id="1176724" ref_url="https://bugzilla.suse.com/1176724" source="BUGZILLA"/>
		<reference ref_id="1177666" ref_url="https://bugzilla.suse.com/1177666" source="BUGZILLA"/>
		<reference ref_id="1181158" ref_url="https://bugzilla.suse.com/1181158" source="BUGZILLA"/>
		<reference ref_id="1184673" ref_url="https://bugzilla.suse.com/1184673" source="BUGZILLA"/>
		<reference ref_id="1184804" ref_url="https://bugzilla.suse.com/1184804" source="BUGZILLA"/>
		<reference ref_id="1185377" ref_url="https://bugzilla.suse.com/1185377" source="BUGZILLA"/>
		<reference ref_id="1185726" ref_url="https://bugzilla.suse.com/1185726" source="BUGZILLA"/>
		<reference ref_id="1185758" ref_url="https://bugzilla.suse.com/1185758" source="BUGZILLA"/>
		<reference ref_id="1185973" ref_url="https://bugzilla.suse.com/1185973" source="BUGZILLA"/>
		<reference ref_id="1186078" ref_url="https://bugzilla.suse.com/1186078" source="BUGZILLA"/>
		<reference ref_id="1186109" ref_url="https://bugzilla.suse.com/1186109" source="BUGZILLA"/>
		<reference ref_id="1186390" ref_url="https://bugzilla.suse.com/1186390" source="BUGZILLA"/>
		<reference ref_id="1186482" ref_url="https://bugzilla.suse.com/1186482" source="BUGZILLA"/>
		<reference ref_id="1186672" ref_url="https://bugzilla.suse.com/1186672" source="BUGZILLA"/>
		<reference ref_id="1188062" ref_url="https://bugzilla.suse.com/1188062" source="BUGZILLA"/>
		<reference ref_id="1188063" ref_url="https://bugzilla.suse.com/1188063" source="BUGZILLA"/>
		<reference ref_id="1188172" ref_url="https://bugzilla.suse.com/1188172" source="BUGZILLA"/>
		<reference ref_id="1188563" ref_url="https://bugzilla.suse.com/1188563" source="BUGZILLA"/>
		<reference ref_id="1188601" ref_url="https://bugzilla.suse.com/1188601" source="BUGZILLA"/>
		<reference ref_id="1188616" ref_url="https://bugzilla.suse.com/1188616" source="BUGZILLA"/>
		<reference ref_id="1188838" ref_url="https://bugzilla.suse.com/1188838" source="BUGZILLA"/>
		<reference ref_id="1188876" ref_url="https://bugzilla.suse.com/1188876" source="BUGZILLA"/>
		<reference ref_id="1188983" ref_url="https://bugzilla.suse.com/1188983" source="BUGZILLA"/>
		<reference ref_id="1188985" ref_url="https://bugzilla.suse.com/1188985" source="BUGZILLA"/>
		<reference ref_id="1189057" ref_url="https://bugzilla.suse.com/1189057" source="BUGZILLA"/>
		<reference ref_id="1189262" ref_url="https://bugzilla.suse.com/1189262" source="BUGZILLA"/>
		<reference ref_id="1189291" ref_url="https://bugzilla.suse.com/1189291" source="BUGZILLA"/>
		<reference ref_id="1189399" ref_url="https://bugzilla.suse.com/1189399" source="BUGZILLA"/>
		<reference ref_id="1189400" ref_url="https://bugzilla.suse.com/1189400" source="BUGZILLA"/>
		<reference ref_id="1189706" ref_url="https://bugzilla.suse.com/1189706" source="BUGZILLA"/>
		<reference ref_id="1189846" ref_url="https://bugzilla.suse.com/1189846" source="BUGZILLA"/>
		<reference ref_id="1189884" ref_url="https://bugzilla.suse.com/1189884" source="BUGZILLA"/>
		<reference ref_id="1190023" ref_url="https://bugzilla.suse.com/1190023" source="BUGZILLA"/>
		<reference ref_id="1190025" ref_url="https://bugzilla.suse.com/1190025" source="BUGZILLA"/>
		<reference ref_id="1190067" ref_url="https://bugzilla.suse.com/1190067" source="BUGZILLA"/>
		<reference ref_id="1190115" ref_url="https://bugzilla.suse.com/1190115" source="BUGZILLA"/>
		<reference ref_id="1190117" ref_url="https://bugzilla.suse.com/1190117" source="BUGZILLA"/>
		<reference ref_id="1190159" ref_url="https://bugzilla.suse.com/1190159" source="BUGZILLA"/>
		<reference ref_id="1190276" ref_url="https://bugzilla.suse.com/1190276" source="BUGZILLA"/>
		<reference ref_id="1190349" ref_url="https://bugzilla.suse.com/1190349" source="BUGZILLA"/>
		<reference ref_id="1190351" ref_url="https://bugzilla.suse.com/1190351" source="BUGZILLA"/>
		<reference ref_id="1190479" ref_url="https://bugzilla.suse.com/1190479" source="BUGZILLA"/>
		<reference ref_id="1190534" ref_url="https://bugzilla.suse.com/1190534" source="BUGZILLA"/>
		<reference ref_id="1190601" ref_url="https://bugzilla.suse.com/1190601" source="BUGZILLA"/>
		<reference ref_id="1190717" ref_url="https://bugzilla.suse.com/1190717" source="BUGZILLA"/>
		<reference ref_id="1191193" ref_url="https://bugzilla.suse.com/1191193" source="BUGZILLA"/>
		<reference ref_id="1191315" ref_url="https://bugzilla.suse.com/1191315" source="BUGZILLA"/>
		<reference ref_id="1191317" ref_url="https://bugzilla.suse.com/1191317" source="BUGZILLA"/>
		<reference ref_id="1191349" ref_url="https://bugzilla.suse.com/1191349" source="BUGZILLA"/>
		<reference ref_id="1191457" ref_url="https://bugzilla.suse.com/1191457" source="BUGZILLA"/>
		<reference ref_id="1191628" ref_url="https://bugzilla.suse.com/1191628" source="BUGZILLA"/>
		<reference ref_id="1191790" ref_url="https://bugzilla.suse.com/1191790" source="BUGZILLA"/>
		<reference ref_id="1191800" ref_url="https://bugzilla.suse.com/1191800" source="BUGZILLA"/>
		<reference ref_id="1191888" ref_url="https://bugzilla.suse.com/1191888" source="BUGZILLA"/>
		<reference ref_id="1191961" ref_url="https://bugzilla.suse.com/1191961" source="BUGZILLA"/>
		<reference ref_id="1192045" ref_url="https://bugzilla.suse.com/1192045" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="1192379" ref_url="https://bugzilla.suse.com/1192379" source="BUGZILLA"/>
		<reference ref_id="1192400" ref_url="https://bugzilla.suse.com/1192400" source="BUGZILLA"/>
		<reference ref_id="1192775" ref_url="https://bugzilla.suse.com/1192775" source="BUGZILLA"/>
		<reference ref_id="1192781" ref_url="https://bugzilla.suse.com/1192781" source="BUGZILLA"/>
		<reference ref_id="1192802" ref_url="https://bugzilla.suse.com/1192802" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13405" ref_url="https://www.suse.com/security/cve/CVE-2018-13405/" source="CVE"/>
		<reference ref_id="CVE-2018-9517" ref_url="https://www.suse.com/security/cve/CVE-2018-9517/" source="CVE"/>
		<reference ref_id="CVE-2019-3874" ref_url="https://www.suse.com/security/cve/CVE-2019-3874/" source="CVE"/>
		<reference ref_id="CVE-2019-3900" ref_url="https://www.suse.com/security/cve/CVE-2019-3900/" source="CVE"/>
		<reference ref_id="CVE-2020-0429" ref_url="https://www.suse.com/security/cve/CVE-2020-0429/" source="CVE"/>
		<reference ref_id="CVE-2020-12770" ref_url="https://www.suse.com/security/cve/CVE-2020-12770/" source="CVE"/>
		<reference ref_id="CVE-2020-3702" ref_url="https://www.suse.com/security/cve/CVE-2020-3702/" source="CVE"/>
		<reference ref_id="CVE-2020-4788" ref_url="https://www.suse.com/security/cve/CVE-2020-4788/" source="CVE"/>
		<reference ref_id="CVE-2021-0941" ref_url="https://www.suse.com/security/cve/CVE-2021-0941/" source="CVE"/>
		<reference ref_id="CVE-2021-20322" ref_url="https://www.suse.com/security/cve/CVE-2021-20322/" source="CVE"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-31916" ref_url="https://www.suse.com/security/cve/CVE-2021-31916/" source="CVE"/>
		<reference ref_id="CVE-2021-33033" ref_url="https://www.suse.com/security/cve/CVE-2021-33033/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="CVE-2021-34556" ref_url="https://www.suse.com/security/cve/CVE-2021-34556/" source="CVE"/>
		<reference ref_id="CVE-2021-34981" ref_url="https://www.suse.com/security/cve/CVE-2021-34981/" source="CVE"/>
		<reference ref_id="CVE-2021-3542" ref_url="https://www.suse.com/security/cve/CVE-2021-3542/" source="CVE"/>
		<reference ref_id="CVE-2021-35477" ref_url="https://www.suse.com/security/cve/CVE-2021-35477/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3655" ref_url="https://www.suse.com/security/cve/CVE-2021-3655/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-3659" ref_url="https://www.suse.com/security/cve/CVE-2021-3659/" source="CVE"/>
		<reference ref_id="CVE-2021-3679" ref_url="https://www.suse.com/security/cve/CVE-2021-3679/" source="CVE"/>
		<reference ref_id="CVE-2021-3715" ref_url="https://www.suse.com/security/cve/CVE-2021-3715/" source="CVE"/>
		<reference ref_id="CVE-2021-37159" ref_url="https://www.suse.com/security/cve/CVE-2021-37159/" source="CVE"/>
		<reference ref_id="CVE-2021-3732" ref_url="https://www.suse.com/security/cve/CVE-2021-3732/" source="CVE"/>
		<reference ref_id="CVE-2021-3744" ref_url="https://www.suse.com/security/cve/CVE-2021-3744/" source="CVE"/>
		<reference ref_id="CVE-2021-3752" ref_url="https://www.suse.com/security/cve/CVE-2021-3752/" source="CVE"/>
		<reference ref_id="CVE-2021-3753" ref_url="https://www.suse.com/security/cve/CVE-2021-3753/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="CVE-2021-3759" ref_url="https://www.suse.com/security/cve/CVE-2021-3759/" source="CVE"/>
		<reference ref_id="CVE-2021-3760" ref_url="https://www.suse.com/security/cve/CVE-2021-3760/" source="CVE"/>
		<reference ref_id="CVE-2021-3764" ref_url="https://www.suse.com/security/cve/CVE-2021-3764/" source="CVE"/>
		<reference ref_id="CVE-2021-3772" ref_url="https://www.suse.com/security/cve/CVE-2021-3772/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="CVE-2021-38204" ref_url="https://www.suse.com/security/cve/CVE-2021-38204/" source="CVE"/>
		<reference ref_id="CVE-2021-40490" ref_url="https://www.suse.com/security/cve/CVE-2021-40490/" source="CVE"/>
		<reference ref_id="CVE-2021-41864" ref_url="https://www.suse.com/security/cve/CVE-2021-41864/" source="CVE"/>
		<reference ref_id="CVE-2021-42008" ref_url="https://www.suse.com/security/cve/CVE-2021-42008/" source="CVE"/>
		<reference ref_id="CVE-2021-42252" ref_url="https://www.suse.com/security/cve/CVE-2021-42252/" source="CVE"/>
		<reference ref_id="CVE-2021-42739" ref_url="https://www.suse.com/security/cve/CVE-2021-42739/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

  You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

- CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).
- CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).
- CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
- CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails  (bsc#1191961).
- CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).
- CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).
- CVE-2021-3655: Missing size validations on inbound SCTP packets may have allowed the kernel to read uninitialized memory (bnc#1188563).
- CVE-2021-33033: The Linux kernel has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value (bnc#1186109 bnc#1186390 bnc#1188876).
- CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev-&gt;rf_conn_info object (bsc#1190067).
- CVE-2021-42739: The firewire subsystem in the Linux kernel has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bnc#1184673).
- CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).
- CVE-2018-13405: The inode_init_owner function in fs/inode.c in the Linux kernel allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID (bnc#1100416 bnc#1129735).
- CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349).
- CVE-2021-34556: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack (bnc#1188983).
- CVE-2021-35477: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation did not necessarily occur before a store operation that has an attacker-controlled value (bnc#1188985).
- CVE-2021-42252: An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a certain comparison uses values that are not memory sizes (bnc#1190479).
- CVE-2021-41864: prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317).
- CVE-2021-42008: The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access (bnc#1191315).
- CVE-2021-3759: Unaccounted ipc objects could have lead to breaking memcg limits and DoS attacks (bsc#1190115).
- CVE-2020-3702: Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic (bnc#1191193).
- CVE-2021-3752: Fixed a use after free vulnerability in the bluetooth module. (bsc#1190023)
- CVE-2021-40490: A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel (bnc#1190159 bnc#1192775)
- CVE-2021-3744: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1189884)
- CVE-2021-3764: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1190534)
- CVE-2020-12770: An issue was discovered in the Linux kernel sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040 (bnc#1171420).
- CVE-2021-3640: Fixed a Use-After-Free vulnerability in function sco_sock_sendmsg() in the bluetooth stack (bsc#1188172).
- CVE-2019-3900: An infinite loop issue was found in the vhost_net kernel module, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario (bnc#1133374).
- CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. (bnc#1129898).
- CVE-2018-9517: In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. (bnc#1108488).
- CVE-2021-38160: Data corruption or loss could be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190117)
- CVE-2021-3753: Fixed race out-of-bounds in virtual terminal handling (bsc#1190025).
- CVE-2021-3732: Mounting overlayfs inside an unprivileged user namespace can reveal files (bsc#1189706).
- CVE-2021-3653: A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the 'int_ctl' field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7 (bnc#1189399).
- CVE-2021-3656: Missing validation of the the `virt_ext` VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS for the L2 guest (bsc#1189400).
- CVE-2021-38204: drivers/usb/host/max3421-hcd.c allowed physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations (bnc#1189291).
- CVE-2021-3679: A lack of CPU resource in the tracing module functionality was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service (bnc#1189057).
- CVE-2020-4788: IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296 (bnc#0 bnc#1177666 bnc#1181158).
- CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (bsc#1188876).
- CVE-2020-0429: In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1176724).
- CVE-2021-37576: arch/powerpc/kvm/book3s_rtas.c on the powerpc platform allowed KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e (bnc#1188838 bnc#1190276).
- CVE-2021-22543: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allowed users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation (bnc#1186482 bnc#1190276).
- CVE-2021-33909: fs/seq_file.c did not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05 (bnc#1188062 bnc#1188063).

The following non-security bugs were fixed:

- Add arch-dependent support markers in supported.conf (bsc#1186672) 
- Add the support for kernel-FLAVOR-optional subpackage (jsc#SLE-11796)
- bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22913)
- bpf: Disallow unprivileged bpf by default (jsc#SLE-22913).
- ceph: take snap_empty_lock atomically with snaprealm refcount change (bsc#1191888).
- config: disable unprivileged BPF by default (jsc#SLE-22913)
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (bsc#1185758,bsc#1192400).
- drm: fix spectre issue in vmw_execbuf_ioctl (bsc#1192802).
- ftrace: Fix scripts/recordmcount.pl due to new binutils (bsc#1192267).
- gigaset: fix spectre issue in do_data_b3_req (bsc#1192802).
- hisax: fix spectre issues (bsc#1192802).
- hv: mana: adjust mana_select_queue to old API (jsc#SLE-18779, bsc#1185726).
- hv: mana: remove netdev_lockdep_set_classes usage (jsc#SLE-18779, bsc#1185726).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number (jsc#SLE-18779, bsc#1185726).
- hysdn: fix spectre issue in hycapi_send_message (bsc#1192802).
- infiniband: fix spectre issue in ib_uverbs_write (bsc#1192802).
- infiniband: fix spectre issue in ib_uverbs_write (bsc#1192802).
- ipc: remove memcg accounting for sops objects in do_semtimedop() (bsc#1190115).
- iwlwifi: fix spectre issue in iwl_dbgfs_update_pm (bsc#1192802).
- kernel-binary.spec: Exctract s390 decompression code (jsc#SLE-17042).
- kernel-binary.spec: Fix up usrmerge for non-modular kernels.
- kernel-binary.spec.in: build-id check requires elfutils.
- kernel-binary.spec.in: Regenerate makefile when not using mkmakefile.
- kernel-binary.spec: Only use mkmakefile when it exists Linux 5.13 no longer had a mkmakefile script
- kernel-binary.spec: Remove obsolete and wrong comment mkmakefile is repleced by echo on newer kernel
- kernel-docs.spec.in: Build using an utf-8 locale. Sphinx cannot handle UTF-8 input in non-UTF-8 locale.
- media: dvb_ca_en50221: prevent using slot_info for Spectre attacs (bsc#1192802).
- media: dvb_ca_en50221: sanity check slot number from userspace (bsc#1192802).
- media: wl128x: get rid of a potential spectre issue (bsc#1192802).
- memcg: enable accounting for file lock caches (bsc#1190115).
- mm/memory.c: do_fault: avoid usage of stale vm_area_struct (bsc#1136513).
- mpt3sas: fix spectre issues (bsc#1192802).
- net: mana: Add a driver for Microsoft Azure Network Adapter (MANA) (jsc#SLE-18779, bsc#1185726).
- net: mana: Add support for EQ sharing (jsc#SLE-18779, bsc#1185726).
- net: mana: Add WARN_ON_ONCE in case of CQE read overflow (jsc#SLE-18779, bsc#1185726).
- net: mana: Fix a memory leak in an error handling path in (jsc#SLE-18779, bsc#1185726).
- net: mana: Fix error handling in mana_create_rxq() (git-fixes, bsc#1191800).
- net: mana: fix PCI_HYPERV dependency (jsc#SLE-18779, bsc#1185726).
- net: mana: Move NAPI from EQ to CQ (jsc#SLE-18779, bsc#1185726).
- net: mana: Prefer struct_size over open coded arithmetic (jsc#SLE-18779, bsc#1185726).
- net: mana: remove redundant initialization of variable err (jsc#SLE-18779, bsc#1185726).
- net: mana: Use int to check the return value of mana_gd_poll_cq() (jsc#SLE-18779, bsc#1185726).
- net: mana: Use struct_size() in kzalloc() (jsc#SLE-18779, bsc#1185726).
- net_sched: cls_route: remove the right filter from hashtable (networking-stable-20_03_28).
- net: sched: sch_teql: fix null-pointer dereference (bsc#1190717).
- net: sock_diag: Fix spectre v1 gadget in __sock_diag_cmd() (bsc#1192802).
- NFS: Do uncached readdir when we're seeking a cookie in an empty page cache (bsc#1191628).
- objtool: Do not fail on missing symbol table (bsc#1192379).
- osst: fix spectre issue in osst_verify_frame (bsc#1192802).
- ovl: check whiteout in ovl_create_over_whiteout() (bsc#1189846).
- ovl: filter of trusted xattr results in audit (bsc#1189846).
- ovl: fix dentry leak in ovl_get_redirect (bsc#1189846).
- ovl: initialize error in ovl_copy_xattr (bsc#1189846).
- ovl: relax WARN_ON() on rename to self (bsc#1189846).
- PCI: hv: Use expected affinity when unmasking IRQ (bsc#1185973).
- Revert 'memcg: enable accounting for file lock caches (bsc#1190115).' This reverts commit 912b4421a3e9bb9f0ef1aadc64a436666259bd4d. It's effectively upstream commit 3754707bcc3e190e5dadc978d172b61e809cb3bd applied to kernel-source (to avoid proliferation of patches). Make a note in blacklist.conf too.
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (bsc#1190601).
- s390/bpf: Fix branch shortening during codegen pass (bsc#1190601).
- s390/bpf: Fix optimizing out zero-extensions (bsc#1190601).
- s390: bpf: implement jitting of BPF_ALU | BPF_ARSH | BPF_* (bsc#1190601).
- s390/bpf: Wrap JIT macro parameter usages in parentheses (bsc#1190601).
- scripts/git_sort/git_sort.py: add bpf git repo
- scripts/git_sort/git_sort.py: Update nvme repositories
- scsi: libfc: Fix array index out of bound exception (bsc#1188616).
- scsi: lpfc: Fix FLOGI failure due to accessing a freed node (bsc#1191349).
- scsi: lpfc: Fix memory overwrite during FC-GS I/O abort handling (bsc#1191349 bsc#1191457).
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (bsc#1191349 bsc#1191457).
- scsi: target: avoid using lun_tg_pt_gp after unlock (bsc#1186078).
- sctp: check asoc peer.asconf_capable before processing asconf (bsc#1190351).
- sctp: fully initialize v4 addr in some functions (bsc#1188563).
- sysvipc/sem: mitigate semnum index against spectre v1 (bsc#1192802).
- target: core: Fix sense key for invalid XCOPY request (bsc#1186078).
- Update config files: Add CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
- Use /usr/lib/modules as module dir when usermerge is active in the target distro.
- UsrMerge the kernel (boo#1184804)
- x86/CPU: Add more Icelake model numbers (bsc#1185758,bsc#1192400).
- xfrm: xfrm_state_mtu should return at least 1280 for ipv6 (bsc#1185377).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-02"/>
	<updated date="2021-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1100416">SUSE bug 1100416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108488">SUSE bug 1108488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129735">SUSE bug 1129735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129898">SUSE bug 1129898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133374">SUSE bug 1133374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136513">SUSE bug 1136513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171420">SUSE bug 1171420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176724">SUSE bug 1176724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177666">SUSE bug 1177666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181158">SUSE bug 1181158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184673">SUSE bug 1184673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184804">SUSE bug 1184804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185377">SUSE bug 1185377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185726">SUSE bug 1185726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185758">SUSE bug 1185758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185973">SUSE bug 1185973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186078">SUSE bug 1186078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186109">SUSE bug 1186109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186390">SUSE bug 1186390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186482">SUSE bug 1186482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186672">SUSE bug 1186672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188062">SUSE bug 1188062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188063">SUSE bug 1188063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188172">SUSE bug 1188172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188563">SUSE bug 1188563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188601">SUSE bug 1188601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188616">SUSE bug 1188616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188838">SUSE bug 1188838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188876">SUSE bug 1188876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188983">SUSE bug 1188983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188985">SUSE bug 1188985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189057">SUSE bug 1189057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189262">SUSE bug 1189262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189291">SUSE bug 1189291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189399">SUSE bug 1189399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189400">SUSE bug 1189400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189706">SUSE bug 1189706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189846">SUSE bug 1189846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189884">SUSE bug 1189884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190023">SUSE bug 1190023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190025">SUSE bug 1190025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190067">SUSE bug 1190067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190115">SUSE bug 1190115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190117">SUSE bug 1190117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190159">SUSE bug 1190159</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190276">SUSE bug 1190276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190349">SUSE bug 1190349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190351">SUSE bug 1190351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190479">SUSE bug 1190479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190534">SUSE bug 1190534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190601">SUSE bug 1190601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190717">SUSE bug 1190717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191193">SUSE bug 1191193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191315">SUSE bug 1191315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191317">SUSE bug 1191317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191349">SUSE bug 1191349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191457">SUSE bug 1191457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191628">SUSE bug 1191628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191790">SUSE bug 1191790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191800">SUSE bug 1191800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191888">SUSE bug 1191888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191961">SUSE bug 1191961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192045">SUSE bug 1192045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192379">SUSE bug 1192379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192400">SUSE bug 1192400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192775">SUSE bug 1192775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192781">SUSE bug 1192781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192802">SUSE bug 1192802</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-13405/">CVE-2018-13405</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-9517/">CVE-2018-9517</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3874/">CVE-2019-3874</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3900/">CVE-2019-3900</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0429/">CVE-2020-0429</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12770/">CVE-2020-12770</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3702/">CVE-2020-3702</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-4788/">CVE-2020-4788</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0941/">CVE-2021-0941</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20322/">CVE-2021-20322</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31916/">CVE-2021-31916</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33033/">CVE-2021-33033</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-34556/">CVE-2021-34556</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-34981/">CVE-2021-34981</cve>
	<cve impact="important" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3542/">CVE-2021-3542</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35477/">CVE-2021-35477</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3655/">CVE-2021-3655</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3659/">CVE-2021-3659</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3679/">CVE-2021-3679</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3715/">CVE-2021-3715</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-37159/">CVE-2021-37159</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3732/">CVE-2021-3732</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3744/">CVE-2021-3744</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3752/">CVE-2021-3752</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3753/">CVE-2021-3753</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3759/">CVE-2021-3759</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3760/">CVE-2021-3760</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3764/">CVE-2021-3764</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3772/">CVE-2021-3772</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38204/">CVE-2021-38204</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-40490/">CVE-2021-40490</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41864/">CVE-2021-41864</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42008/">CVE-2021-42008</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42252/">CVE-2021-42252</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42739/">CVE-2021-42739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658116" comment="kernel-default-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658117" comment="kernel-default-base-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658118" comment="kernel-default-devel-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658119" comment="kernel-devel-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658120" comment="kernel-docs-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658121" comment="kernel-macros-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658122" comment="kernel-obs-build-4.12.14-197.102.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658123" comment="kernel-source-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658124" comment="kernel-syms-4.12.14-197.102.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139791" version="1" class="patch">
	<metadata>
		<title>Security update for aaa_base (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1162581" ref_url="https://bugzilla.suse.com/1162581" source="BUGZILLA"/>
		<reference ref_id="1174504" ref_url="https://bugzilla.suse.com/1174504" source="BUGZILLA"/>
		<reference ref_id="1191563" ref_url="https://bugzilla.suse.com/1191563" source="BUGZILLA"/>
		<reference ref_id="1192248" ref_url="https://bugzilla.suse.com/1192248" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:3899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009830.html" source="SUSE-SU"/>
		<description>
This update for aaa_base fixes the following issues:

- Allowed ping and ICMP commands without CAP_NET_RAW (bsc#1174504).
- Add $HOME/.local/bin to PATH, if it exists (bsc#1192248).
- Fixed get_kernel_version.c to work also for recent kernels on the s390/X platform (bsc#1191563).
- Support xz compressed kernel (bsc#1162581)   
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-03"/>
	<updated date="2021-12-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162581">SUSE bug 1162581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174504">SUSE bug 1174504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191563">SUSE bug 1191563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192248">SUSE bug 1192248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658795" comment="aaa_base-84.87+git20180409.04c9dae-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658796" comment="aaa_base-extras-84.87+git20180409.04c9dae-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658797" comment="aaa_base-malloccheck-84.87+git20180409.04c9dae-3.52.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139792" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193170" ref_url="https://bugzilla.suse.com/1193170" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43527" ref_url="https://www.suse.com/security/cve/CVE-2021-43527/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3934-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/020999.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

Update to version 3.68.1:

- CVE-2021-43527: Fixed a Heap overflow in NSS when verifying DER-encoded DSA or RSA-PSS signatures (bsc#1193170).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193170">SUSE bug 1193170</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43527/">CVE-2021-43527</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659044" comment="libfreebl3-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659027" comment="libfreebl3-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659045" comment="libfreebl3-hmac-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659029" comment="libfreebl3-hmac-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659046" comment="libsoftokn3-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659031" comment="libsoftokn3-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659047" comment="libsoftokn3-hmac-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659033" comment="libsoftokn3-hmac-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659048" comment="mozilla-nss-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659035" comment="mozilla-nss-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659049" comment="mozilla-nss-certs-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659037" comment="mozilla-nss-certs-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659050" comment="mozilla-nss-devel-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659051" comment="mozilla-nss-sysinit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659052" comment="mozilla-nss-tools-3.68.1-3.61.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139793" version="1" class="patch">
	<metadata>
		<title>Security update for openssh (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1190975" ref_url="https://bugzilla.suse.com/1190975" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-41617" ref_url="https://www.suse.com/security/cve/CVE-2021-41617/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009854.html" source="SUSE-SU"/>
		<description>
This update for openssh fixes the following issues:

- CVE-2021-41617: Fixed privilege escalation when AuthorizedKeysCommand/AuthorizedPrincipalsCommand are configured (bsc#1190975).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190975">SUSE bug 1190975</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41617/">CVE-2021-41617</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658304" comment="openssh-7.9p1-6.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658305" comment="openssh-askpass-gnome-7.9p1-6.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658306" comment="openssh-fips-7.9p1-6.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658307" comment="openssh-helpers-7.9p1-6.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139794" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1173028" ref_url="https://bugzilla.suse.com/1173028" source="BUGZILLA"/>
		<reference ref_id="1186031" ref_url="https://bugzilla.suse.com/1186031" source="BUGZILLA"/>
		<reference ref_id="1192497" ref_url="https://bugzilla.suse.com/1192497" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-35604" ref_url="https://www.suse.com/security/cve/CVE-2021-35604/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009852.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issue:
    
- Update to 10.2.41:
- CVE-2021-35604: Fixed InnoDB vulnerability that allowed an high privileged attacker with network access via multiple protocols to compromise MySQL (bsc#1192497).
    
- Add missing dependency to liblz4 to enable lz4 compression for INNODB (bsc#1186031). 
- Add a 'mysql-user.conf' file to let 'systemd' generate mysql user in containers. (bsc#1173028)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173028">SUSE bug 1173028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186031">SUSE bug 1186031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192497">SUSE bug 1192497</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-35604/">CVE-2021-35604</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657761" comment="libmysqld-devel-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657762" comment="libmysqld19-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657763" comment="mariadb-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657764" comment="mariadb-client-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657765" comment="mariadb-errormessages-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657766" comment="mariadb-tools-10.2.41-3.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139795" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188284" ref_url="https://bugzilla.suse.com/1188284" source="BUGZILLA"/>
		<reference ref_id="1192346" ref_url="https://bugzilla.suse.com/1192346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:3949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009859.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

- Update to 0.103.4 (bsc#1192346).
- Update to 0.103.3 (bsc#1188284).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1188284">SUSE bug 1188284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192346">SUSE bug 1192346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009656944" comment="clamav-0.103.4-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656945" comment="clamav-devel-0.103.4-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656946" comment="libclamav9-0.103.4-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656947" comment="libfreshclam2-0.103.4-3.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139796" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1189632" ref_url="https://bugzilla.suse.com/1189632" source="BUGZILLA"/>
		<reference ref_id="1191363" ref_url="https://bugzilla.suse.com/1191363" source="BUGZILLA"/>
		<reference ref_id="1192554" ref_url="https://bugzilla.suse.com/1192554" source="BUGZILLA"/>
		<reference ref_id="1192557" ref_url="https://bugzilla.suse.com/1192557" source="BUGZILLA"/>
		<reference ref_id="1192559" ref_url="https://bugzilla.suse.com/1192559" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28701" ref_url="https://www.suse.com/security/cve/CVE-2021-28701/" source="CVE"/>
		<reference ref_id="CVE-2021-28702" ref_url="https://www.suse.com/security/cve/CVE-2021-28702/" source="CVE"/>
		<reference ref_id="CVE-2021-28704" ref_url="https://www.suse.com/security/cve/CVE-2021-28704/" source="CVE"/>
		<reference ref_id="CVE-2021-28705" ref_url="https://www.suse.com/security/cve/CVE-2021-28705/" source="CVE"/>
		<reference ref_id="CVE-2021-28706" ref_url="https://www.suse.com/security/cve/CVE-2021-28706/" source="CVE"/>
		<reference ref_id="CVE-2021-28707" ref_url="https://www.suse.com/security/cve/CVE-2021-28707/" source="CVE"/>
		<reference ref_id="CVE-2021-28708" ref_url="https://www.suse.com/security/cve/CVE-2021-28708/" source="CVE"/>
		<reference ref_id="CVE-2021-28709" ref_url="https://www.suse.com/security/cve/CVE-2021-28709/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009874.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2021-28701: Fixed race condition in XENMAPSPACE_grant_table handling (XSA-384) (bsc#1189632).
- CVE-2021-28702: Fixed PCI devices with RMRRs not deassigned correctly (XSA-386) (bsc#1191363).
- CVE-2021-28704, CVE-2021-28707, CVE-2021-28708: Fixed PoD operations on misaligned GFNs (XSA-388) (bsc#1192557).
- CVE-2021-28705, CVE-2021-28709: Fixed issues with partially successful P2M updates on x86 (XSA-389) (bsc#1192559).
- CVE-2021-28706: Fixed guests may exceed their designated memory limit (XSA-385) (bsc#1192554).

- Upstream bug fixes (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-09"/>
	<updated date="2021-12-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189632">SUSE bug 1189632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191363">SUSE bug 1191363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192554">SUSE bug 1192554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192557">SUSE bug 1192557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192559">SUSE bug 1192559</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28701/">CVE-2021-28701</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28702/">CVE-2021-28702</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28704/">CVE-2021-28704</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28705/">CVE-2021-28705</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28706/">CVE-2021-28706</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28707/">CVE-2021-28707</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28708/">CVE-2021-28708</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28709/">CVE-2021-28709</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658607" comment="xen-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658608" comment="xen-devel-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658609" comment="xen-libs-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658610" comment="xen-tools-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658611" comment="xen-tools-domU-4.12.4_16-3.57.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139797" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193321" ref_url="https://bugzilla.suse.com/1193321" source="BUGZILLA"/>
		<reference ref_id="1193485" ref_url="https://bugzilla.suse.com/1193485" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43536" ref_url="https://www.suse.com/security/cve/CVE-2021-43536/" source="CVE"/>
		<reference ref_id="CVE-2021-43537" ref_url="https://www.suse.com/security/cve/CVE-2021-43537/" source="CVE"/>
		<reference ref_id="CVE-2021-43538" ref_url="https://www.suse.com/security/cve/CVE-2021-43538/" source="CVE"/>
		<reference ref_id="CVE-2021-43539" ref_url="https://www.suse.com/security/cve/CVE-2021-43539/" source="CVE"/>
		<reference ref_id="CVE-2021-43541" ref_url="https://www.suse.com/security/cve/CVE-2021-43541/" source="CVE"/>
		<reference ref_id="CVE-2021-43542" ref_url="https://www.suse.com/security/cve/CVE-2021-43542/" source="CVE"/>
		<reference ref_id="CVE-2021-43543" ref_url="https://www.suse.com/security/cve/CVE-2021-43543/" source="CVE"/>
		<reference ref_id="CVE-2021-43545" ref_url="https://www.suse.com/security/cve/CVE-2021-43545/" source="CVE"/>
		<reference ref_id="CVE-2021-43546" ref_url="https://www.suse.com/security/cve/CVE-2021-43546/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3995-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/021069.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:


Update to Extended Support Release 91.4.0 (bsc#1193485):

- CVE-2021-43536: URL leakage when navigating while executing asynchronous function
- CVE-2021-43537: Heap buffer overflow when using structured clone
- CVE-2021-43538: Missing fullscreen and pointer lock notification when requesting both
- CVE-2021-43539: GC rooting failure when calling wasm instance methods
- CVE-2021-43541: External protocol handler parameters were unescaped
- CVE-2021-43542: XMLHttpRequest error codes could have leaked the existence of an external protocol handler
- CVE-2021-43543: Bypass of CSP sandbox directive when embedding
- CVE-2021-43545: Denial of Service when using the Location API in a loop
- CVE-2021-43546: Cursor spoofing could overlay user interface when native cursor is zoomed
- Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4
- Removed x-scheme-handler/ftp from MozillaFirefox.desktop (bsc#1193321)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-10"/>
	<updated date="2021-12-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193321">SUSE bug 1193321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193485">SUSE bug 1193485</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43536/">CVE-2021-43536</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43537/">CVE-2021-43537</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43538/">CVE-2021-43538</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43539/">CVE-2021-43539</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43541/">CVE-2021-43541</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43542/">CVE-2021-43542</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43543/">CVE-2021-43543</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-43545/">CVE-2021-43545</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-43546/">CVE-2021-43546</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659334" comment="MozillaFirefox-91.4.0-150.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659335" comment="MozillaFirefox-devel-91.4.0-150.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659336" comment="MozillaFirefox-translations-common-91.4.0-150.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659337" comment="MozillaFirefox-translations-other-91.4.0-150.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139798" version="1" class="patch">
	<metadata>
		<title>Security update for glib-networking (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1172460" ref_url="https://bugzilla.suse.com/1172460" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13645" ref_url="https://www.suse.com/security/cve/CVE-2020-13645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009879.html" source="SUSE-SU"/>
		<description>
This update for glib-networking fixes the following issues:

- CVE-2020-13645: Fixed a connection failure when the server identity is unset (bsc#1172460).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-10"/>
	<updated date="2021-12-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172460">SUSE bug 1172460</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-13645/">CVE-2020-13645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659042" comment="glib-networking-2.54.1-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659043" comment="glib-networking-lang-2.54.1-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139799" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180125" ref_url="https://bugzilla.suse.com/1180125" source="BUGZILLA"/>
		<reference ref_id="1183374" ref_url="https://bugzilla.suse.com/1183374" source="BUGZILLA"/>
		<reference ref_id="1183858" ref_url="https://bugzilla.suse.com/1183858" source="BUGZILLA"/>
		<reference ref_id="1185588" ref_url="https://bugzilla.suse.com/1185588" source="BUGZILLA"/>
		<reference ref_id="1187338" ref_url="https://bugzilla.suse.com/1187338" source="BUGZILLA"/>
		<reference ref_id="1187668" ref_url="https://bugzilla.suse.com/1187668" source="BUGZILLA"/>
		<reference ref_id="1189241" ref_url="https://bugzilla.suse.com/1189241" source="BUGZILLA"/>
		<reference ref_id="1189287" ref_url="https://bugzilla.suse.com/1189287" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3426" ref_url="https://www.suse.com/security/cve/CVE-2021-3426/" source="CVE"/>
		<reference ref_id="CVE-2021-3733" ref_url="https://www.suse.com/security/cve/CVE-2021-3733/" source="CVE"/>
		<reference ref_id="CVE-2021-3737" ref_url="https://www.suse.com/security/cve/CVE-2021-3737/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4015-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009941.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:


- CVE-2021-3737: Fixed http client infinite line reading (DoS) after a http 100. (bsc#1189241)
- CVE-2021-3733: Fixed ReDoS in urllib.request. (bsc#1189287)
- CVE-2021-3426: Fixed an information disclosure via pydoc. (bsc#1183374)

- Rebuild to get new headers, avoid building in support for stropts.h (bsc#1187338).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-23"/>
	<updated date="2021-12-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1180125">SUSE bug 1180125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183374">SUSE bug 1183374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183858">SUSE bug 1183858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185588">SUSE bug 1185588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187338">SUSE bug 1187338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187668">SUSE bug 1187668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189241">SUSE bug 1189241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189287">SUSE bug 1189287</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3426/">CVE-2021-3426</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3733/">CVE-2021-3733</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3737/">CVE-2021-3737</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009660091" comment="libpython3_6m1_0-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660092" comment="python3-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660093" comment="python3-base-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660094" comment="python3-curses-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660095" comment="python3-dbm-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660096" comment="python3-devel-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660097" comment="python3-idle-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660102" comment="python3-testsuite-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660098" comment="python3-tk-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660099" comment="python3-tools-3.6.15-3.91.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139800" version="1" class="patch">
	<metadata>
		<title>Security update for fetchmail (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1152964" ref_url="https://bugzilla.suse.com/1152964" source="BUGZILLA"/>
		<reference ref_id="1174075" ref_url="https://bugzilla.suse.com/1174075" source="BUGZILLA"/>
		<reference ref_id="1181400" ref_url="https://bugzilla.suse.com/1181400" source="BUGZILLA"/>
		<reference ref_id="1188875" ref_url="https://bugzilla.suse.com/1188875" source="BUGZILLA"/>
		<reference ref_id="1190069" ref_url="https://bugzilla.suse.com/1190069" source="BUGZILLA"/>
		<reference ref_id="1190896" ref_url="https://bugzilla.suse.com/1190896" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36386" ref_url="https://www.suse.com/security/cve/CVE-2021-36386/" source="CVE"/>
		<reference ref_id="CVE-2021-39272" ref_url="https://www.suse.com/security/cve/CVE-2021-39272/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009892.html" source="SUSE-SU"/>
		<description>
This update for fetchmail fixes the following issues:

- CVE-2021-36386: Fixed DoS or information disclosure in some configurations (bsc#1188875).
- CVE-2021-39272: Fixed STARTTLS session encryption bypassing (fetchmail-SA-2021-02) (bsc#1190069).

- Update to 6.4.22 (bsc#1152964, jsc#SLE-18159, jsc#SLE-17903, jsc#SLE-18059)
- Remove all python2 dependencies (bsc#1190896).
- De-hardcode /usr/lib path for launch executable (bsc#1174075).
- Added hardening to systemd service(s) (bsc#1181400).
  		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1152964">SUSE bug 1152964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174075">SUSE bug 1174075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181400">SUSE bug 1181400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188875">SUSE bug 1188875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190069">SUSE bug 1190069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190896">SUSE bug 1190896</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-36386/">CVE-2021-36386</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39272/">CVE-2021-39272</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657503" comment="fetchmail-6.4.22-20.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657504" comment="fetchmailconf-6.4.22-20.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139801" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192516" ref_url="https://bugzilla.suse.com/1192516" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23214" ref_url="https://www.suse.com/security/cve/CVE-2021-23214/" source="CVE"/>
		<reference ref_id="CVE-2021-23222" ref_url="https://www.suse.com/security/cve/CVE-2021-23222/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009898.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:
          
- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).
- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192516">SUSE bug 1192516</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23214/">CVE-2021-23214</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23222/">CVE-2021-23222</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009656475" comment="postgresql10-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656476" comment="postgresql10-contrib-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656477" comment="postgresql10-devel-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656465" comment="postgresql10-docs-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656478" comment="postgresql10-plperl-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656479" comment="postgresql10-plpython-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656480" comment="postgresql10-pltcl-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656481" comment="postgresql10-server-10.19-8.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139802" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193030" ref_url="https://bugzilla.suse.com/1193030" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4008" ref_url="https://www.suse.com/security/cve/CVE-2021-4008/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4071-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009900.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2021-4008: Fixed Privilege Escalation Vulnerability via Out-Of-Bounds Access in SProcRenderCompositeGlyphs (bsc#1193030).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193030">SUSE bug 1193030</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4008/">CVE-2021-4008</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659817" comment="xorg-x11-server-1.20.3-14.5.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659818" comment="xorg-x11-server-extra-1.20.3-14.5.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659819" comment="xorg-x11-server-sdk-1.20.3-14.5.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139803" version="1" class="patch">
	<metadata>
		<title>Security update for log4j (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193662" ref_url="https://bugzilla.suse.com/1193662" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4104" ref_url="https://www.suse.com/security/cve/CVE-2021-4104/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009917.html" source="SUSE-SU"/>
		<description>
This update for log4j fixes the following issue:

- CVE-2021-4104: Disable the JMSAppender class from log4j to protect against
  the log4jshell vulnerability. [bsc#1193662]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-17"/>
	<updated date="2021-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193662">SUSE bug 1193662</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4104/">CVE-2021-4104</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009660100" comment="log4j-1.2.17-5.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660101" comment="log4j-manual-1.2.17-5.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139804" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1190487" ref_url="https://bugzilla.suse.com/1190487" source="BUGZILLA"/>
		<reference ref_id="1190488" ref_url="https://bugzilla.suse.com/1190488" source="BUGZILLA"/>
		<reference ref_id="1190489" ref_url="https://bugzilla.suse.com/1190489" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4009" ref_url="https://www.suse.com/security/cve/CVE-2021-4009/" source="CVE"/>
		<reference ref_id="CVE-2021-4010" ref_url="https://www.suse.com/security/cve/CVE-2021-4010/" source="CVE"/>
		<reference ref_id="CVE-2021-4011" ref_url="https://www.suse.com/security/cve/CVE-2021-4011/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009921.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes 
  extension does not properly validate the request length leading to out of 
  bounds memory write. (bsc#1190487)
- CVE-2021-4010: The handler for the Suspend request of the Screen Saver extension
  does not properly validate the request length leading to out of
  bounds memory write. (bsc#1190488)
- CVE-2021-4011: The handlers for the RecordCreateContext and RecordRegisterClients
  requests of the Record extension do not properly validate the request
  length leading to out of bounds memory write. (bsc#1190489)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-20"/>
	<updated date="2021-12-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190487">SUSE bug 1190487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190488">SUSE bug 1190488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190489">SUSE bug 1190489</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4009/">CVE-2021-4009</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4010/">CVE-2021-4010</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4011/">CVE-2021-4011</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009660287" comment="xorg-x11-server-1.20.3-14.5.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660288" comment="xorg-x11-server-extra-1.20.3-14.5.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660289" comment="xorg-x11-server-sdk-1.20.3-14.5.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139805" version="1" class="patch">
	<metadata>
		<title>Security update for p11-kit (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180064" ref_url="https://bugzilla.suse.com/1180064" source="BUGZILLA"/>
		<reference ref_id="1187993" ref_url="https://bugzilla.suse.com/1187993" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-29361" ref_url="https://www.suse.com/security/cve/CVE-2020-29361/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4154-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009932.html" source="SUSE-SU"/>
		<description>
This update for p11-kit fixes the following issues:

- CVE-2020-29361: Fixed multiple integer overflows in rpc code (bsc#1180064)
- Add support for CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER (bsc#1187993).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-22"/>
	<updated date="2021-12-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180064">SUSE bug 1180064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187993">SUSE bug 1187993</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29361/">CVE-2020-29361</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659809" comment="libp11-kit0-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659794" comment="libp11-kit0-32bit-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659810" comment="p11-kit-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659811" comment="p11-kit-devel-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659812" comment="p11-kit-nss-trust-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659813" comment="p11-kit-tools-0.23.2-4.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139806" version="1" class="patch">
	<metadata>
		<title>Security update for subversion (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181687" ref_url="https://bugzilla.suse.com/1181687" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-17525" ref_url="https://www.suse.com/security/cve/CVE-2020-17525/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0425-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008302.html" source="SUSE-SU"/>
		<description>
This update for subversion fixes the following issues:

- CVE-2020-17525: A null-pointer-dereference has been found in mod_authz_svn that results in
    a remote unauthenticated Denial-of-Service in some server configurations (bsc#1181687).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181687">SUSE bug 1181687</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-17525/">CVE-2020-17525</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503596" comment="subversion-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496589" comment="subversion-bash-completion-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503597" comment="subversion-devel-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503598" comment="subversion-perl-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503599" comment="subversion-python-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503600" comment="subversion-server-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503601" comment="subversion-tools-1.10.6-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139807" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1174075" ref_url="https://bugzilla.suse.com/1174075" source="BUGZILLA"/>
		<reference ref_id="1176708" ref_url="https://bugzilla.suse.com/1176708" source="BUGZILLA"/>
		<reference ref_id="1178801" ref_url="https://bugzilla.suse.com/1178801" source="BUGZILLA"/>
		<reference ref_id="1178969" ref_url="https://bugzilla.suse.com/1178969" source="BUGZILLA"/>
		<reference ref_id="1180243" ref_url="https://bugzilla.suse.com/1180243" source="BUGZILLA"/>
		<reference ref_id="1180401" ref_url="https://bugzilla.suse.com/1180401" source="BUGZILLA"/>
		<reference ref_id="1181730" ref_url="https://bugzilla.suse.com/1181730" source="BUGZILLA"/>
		<reference ref_id="1181732" ref_url="https://bugzilla.suse.com/1181732" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15257" ref_url="https://www.suse.com/security/cve/CVE-2020-15257/" source="CVE"/>
		<reference ref_id="CVE-2021-21284" ref_url="https://www.suse.com/security/cve/CVE-2021-21284/" source="CVE"/>
		<reference ref_id="CVE-2021-21285" ref_url="https://www.suse.com/security/cve/CVE-2021-21285/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008311.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues:

Security issues fixed:

- CVE-2020-15257: Fixed a privilege escalation in containerd (bsc#1178969).
- CVE-2021-21284: potential privilege escalation when the root user in the remapped namespace has access to the host filesystem (bsc#1181732)
- CVE-2021-21285: pulling a malformed Docker image manifest crashes the dockerd daemon (bsc#1181730)

Non-security issues fixed:

- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).

- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. (bsc#1180401)

- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1180243

- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  bsc#1176708

- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14

- Enable fish-completion

- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (bsc#1178801, SLE-16460)

- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708

- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)

- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.

- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.

- Update to libnetwork 55e924b8a842, which is required for Docker 19.03.14-ce.
  bsc#1180243

- Add patch which makes libnetwork compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (bsc#1178801, SLE-16460)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-11"/>
	<updated date="2021-02-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174075">SUSE bug 1174075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176708">SUSE bug 1176708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178801">SUSE bug 1178801</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178969">SUSE bug 1178969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180243">SUSE bug 1180243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180401">SUSE bug 1180401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181730">SUSE bug 1181730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181732">SUSE bug 1181732</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15257/">CVE-2020-15257</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21284/">CVE-2021-21284</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21285/">CVE-2021-21285</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504154" comment="containerd-1.3.9-5.29.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504155" comment="docker-19.03.15_ce-6.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494429" comment="docker-bash-completion-19.03.15_ce-6.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504156" comment="docker-libnetwork-0.7.0.1+gitr2908_55e924b8a842-4.28.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504157" comment="docker-runc-1.0.0rc10+gitr3981_dc9208a3303f-6.45.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139808" version="1" class="patch">
	<metadata>
		<title>Security update for openvswitch (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181742" ref_url="https://bugzilla.suse.com/1181742" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35498" ref_url="https://www.suse.com/security/cve/CVE-2020-35498/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008313.html" source="SUSE-SU"/>
		<description>
This update for openvswitch fixes the following issues:

- CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-11"/>
	<updated date="2021-02-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181742">SUSE bug 1181742</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35498/">CVE-2020-35498</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504158" comment="libopenvswitch-2_11-0-2.11.5-3.15.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504159" comment="openvswitch-2.11.5-3.15.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504160" comment="openvswitch-devel-2.11.5-3.15.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139809" version="1" class="patch">
	<metadata>
		<title>Security update for wpa_supplicant (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181777" ref_url="https://bugzilla.suse.com/1181777" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0326" ref_url="https://www.suse.com/security/cve/CVE-2021-0326/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008316.html" source="SUSE-SU"/>
		<description>
This update for wpa_supplicant fixes the following issues:

- CVE-2021-0326: P2P group information processing vulnerability (bsc#1181777).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-11"/>
	<updated date="2021-02-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181777">SUSE bug 1181777</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0326/">CVE-2021-0326</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503615" comment="wpa_supplicant-2.9-4.23.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139810" version="1" class="patch">
	<metadata>
		<title>Security update for jasper (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179748" ref_url="https://bugzilla.suse.com/1179748" source="BUGZILLA"/>
		<reference ref_id="1181483" ref_url="https://bugzilla.suse.com/1181483" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27828" ref_url="https://www.suse.com/security/cve/CVE-2020-27828/" source="CVE"/>
		<reference ref_id="CVE-2021-3272" ref_url="https://www.suse.com/security/cve/CVE-2021-3272/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0488-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008334.html" source="SUSE-SU"/>
		<description>
This update for jasper fixes the following issues:

- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
- bsc#1181483 CVE-2021-3272: Fix buffer over-read in jp2_decode
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-16"/>
	<updated date="2021-02-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179748">SUSE bug 1179748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181483">SUSE bug 1181483</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27828/">CVE-2020-27828</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3272/">CVE-2021-3272</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504161" comment="libjasper-devel-2.0.14-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503616" comment="libjasper4-2.0.14-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139811" version="1" class="patch">
	<metadata>
		<title>Security update for screen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182092" ref_url="https://bugzilla.suse.com/1182092" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26937" ref_url="https://www.suse.com/security/cve/CVE-2021-26937/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008337.html" source="SUSE-SU"/>
		<description>
This update for screen fixes the following issues:

- CVE-2021-26937: Fixed double width combining char handling that could lead to a denial of service or code execution (bsc#1182092).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-17"/>
	<updated date="2021-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182092">SUSE bug 1182092</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26937/">CVE-2021-26937</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503617" comment="screen-4.6.2-5.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139812" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182246" ref_url="https://bugzilla.suse.com/1182246" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8625" ref_url="https://www.suse.com/security/cve/CVE-2020-8625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008340.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack [bsc#1182246]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-18"/>
	<updated date="2021-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182246">SUSE bug 1182246</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8625/">CVE-2020-8625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503618" comment="bind-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503619" comment="bind-chrootenv-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503620" comment="bind-devel-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500020" comment="bind-doc-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503621" comment="bind-utils-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503622" comment="libbind9-1600-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503623" comment="libdns1605-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503624" comment="libirs-devel-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503625" comment="libirs1601-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503626" comment="libisc1606-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503627" comment="libisccc1600-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503628" comment="libisccfg1600-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503629" comment="libns1604-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494121" comment="python3-bind-9.16.6-12.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139813" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1046305" ref_url="https://bugzilla.suse.com/1046305" source="BUGZILLA"/>
		<reference ref_id="1046306" ref_url="https://bugzilla.suse.com/1046306" source="BUGZILLA"/>
		<reference ref_id="1046540" ref_url="https://bugzilla.suse.com/1046540" source="BUGZILLA"/>
		<reference ref_id="1046542" ref_url="https://bugzilla.suse.com/1046542" source="BUGZILLA"/>
		<reference ref_id="1046648" ref_url="https://bugzilla.suse.com/1046648" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050538" ref_url="https://bugzilla.suse.com/1050538" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1056653" ref_url="https://bugzilla.suse.com/1056653" source="BUGZILLA"/>
		<reference ref_id="1056657" ref_url="https://bugzilla.suse.com/1056657" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1073513" ref_url="https://bugzilla.suse.com/1073513" source="BUGZILLA"/>
		<reference ref_id="1074220" ref_url="https://bugzilla.suse.com/1074220" source="BUGZILLA"/>
		<reference ref_id="1075020" ref_url="https://bugzilla.suse.com/1075020" source="BUGZILLA"/>
		<reference ref_id="1086282" ref_url="https://bugzilla.suse.com/1086282" source="BUGZILLA"/>
		<reference ref_id="1086301" ref_url="https://bugzilla.suse.com/1086301" source="BUGZILLA"/>
		<reference ref_id="1086313" ref_url="https://bugzilla.suse.com/1086313" source="BUGZILLA"/>
		<reference ref_id="1086314" ref_url="https://bugzilla.suse.com/1086314" source="BUGZILLA"/>
		<reference ref_id="1098633" ref_url="https://bugzilla.suse.com/1098633" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104270" ref_url="https://bugzilla.suse.com/1104270" source="BUGZILLA"/>
		<reference ref_id="1104277" ref_url="https://bugzilla.suse.com/1104277" source="BUGZILLA"/>
		<reference ref_id="1104279" ref_url="https://bugzilla.suse.com/1104279" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104742" ref_url="https://bugzilla.suse.com/1104742" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111981" ref_url="https://bugzilla.suse.com/1111981" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1126390" ref_url="https://bugzilla.suse.com/1126390" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1136348" ref_url="https://bugzilla.suse.com/1136348" source="BUGZILLA"/>
		<reference ref_id="1149032" ref_url="https://bugzilla.suse.com/1149032" source="BUGZILLA"/>
		<reference ref_id="1174206" ref_url="https://bugzilla.suse.com/1174206" source="BUGZILLA"/>
		<reference ref_id="1176831" ref_url="https://bugzilla.suse.com/1176831" source="BUGZILLA"/>
		<reference ref_id="1176846" ref_url="https://bugzilla.suse.com/1176846" source="BUGZILLA"/>
		<reference ref_id="1178036" ref_url="https://bugzilla.suse.com/1178036" source="BUGZILLA"/>
		<reference ref_id="1178049" ref_url="https://bugzilla.suse.com/1178049" source="BUGZILLA"/>
		<reference ref_id="1178900" ref_url="https://bugzilla.suse.com/1178900" source="BUGZILLA"/>
		<reference ref_id="1179093" ref_url="https://bugzilla.suse.com/1179093" source="BUGZILLA"/>
		<reference ref_id="1179142" ref_url="https://bugzilla.suse.com/1179142" source="BUGZILLA"/>
		<reference ref_id="1179508" ref_url="https://bugzilla.suse.com/1179508" source="BUGZILLA"/>
		<reference ref_id="1179509" ref_url="https://bugzilla.suse.com/1179509" source="BUGZILLA"/>
		<reference ref_id="1179563" ref_url="https://bugzilla.suse.com/1179563" source="BUGZILLA"/>
		<reference ref_id="1179573" ref_url="https://bugzilla.suse.com/1179573" source="BUGZILLA"/>
		<reference ref_id="1179575" ref_url="https://bugzilla.suse.com/1179575" source="BUGZILLA"/>
		<reference ref_id="1179878" ref_url="https://bugzilla.suse.com/1179878" source="BUGZILLA"/>
		<reference ref_id="1180130" ref_url="https://bugzilla.suse.com/1180130" source="BUGZILLA"/>
		<reference ref_id="1180765" ref_url="https://bugzilla.suse.com/1180765" source="BUGZILLA"/>
		<reference ref_id="1180812" ref_url="https://bugzilla.suse.com/1180812" source="BUGZILLA"/>
		<reference ref_id="1180891" ref_url="https://bugzilla.suse.com/1180891" source="BUGZILLA"/>
		<reference ref_id="1180912" ref_url="https://bugzilla.suse.com/1180912" source="BUGZILLA"/>
		<reference ref_id="1181018" ref_url="https://bugzilla.suse.com/1181018" source="BUGZILLA"/>
		<reference ref_id="1181170" ref_url="https://bugzilla.suse.com/1181170" source="BUGZILLA"/>
		<reference ref_id="1181230" ref_url="https://bugzilla.suse.com/1181230" source="BUGZILLA"/>
		<reference ref_id="1181231" ref_url="https://bugzilla.suse.com/1181231" source="BUGZILLA"/>
		<reference ref_id="1181260" ref_url="https://bugzilla.suse.com/1181260" source="BUGZILLA"/>
		<reference ref_id="1181349" ref_url="https://bugzilla.suse.com/1181349" source="BUGZILLA"/>
		<reference ref_id="1181425" ref_url="https://bugzilla.suse.com/1181425" source="BUGZILLA"/>
		<reference ref_id="1181504" ref_url="https://bugzilla.suse.com/1181504" source="BUGZILLA"/>
		<reference ref_id="1181809" ref_url="https://bugzilla.suse.com/1181809" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25639" ref_url="https://www.suse.com/security/cve/CVE-2020-25639/" source="CVE"/>
		<reference ref_id="CVE-2020-27835" ref_url="https://www.suse.com/security/cve/CVE-2020-27835/" source="CVE"/>
		<reference ref_id="CVE-2020-29568" ref_url="https://www.suse.com/security/cve/CVE-2020-29568/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-20177" ref_url="https://www.suse.com/security/cve/CVE-2021-20177/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="CVE-2021-3348" ref_url="https://www.suse.com/security/cve/CVE-2021-3348/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008354.html" source="SUSE-SU"/>
		<description>
 The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349).
- CVE-2021-3348: Fixed a use-after-free in nbd_add_socket that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup (bnc#1181504).
- CVE-2021-20177: Fixed a kernel panic related to iptables string matching rules. A privileged user could insert a rule which could lead to denial of service (bnc#1180765).
- CVE-2021-0342: In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. (bnc#1180812)
- CVE-2020-27835: A use-after-free in the infiniband hfi1 driver was found, specifically in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).
- CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).
- CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509).
- CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508).

The following non-security bugs were fixed:

- ACPI: scan: Harden acpi_device_add() against device ID overflows (git-fixes).
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (git-fixes).
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (git-fixes).
- ALSA: doc: Fix reference to mixart.rst (git-fixes).
- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (git-fixes).
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (git-fixes).
- ALSA: hda/via: Add minimum mute flag (git-fixes).
- ALSA: hda/via: Fix runtime PM for Clevo W35xSS (git-fixes).
- ALSA: pcm: Clear the full allocated memory at hw_params (git-fixes).
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (git-fixes).
- ASoC: Intel: haswell: Add missing pm_ops (git-fixes).
- ASoC: dapm: remove widget from dirty list on free (git-fixes).
- EDAC/amd64: Fix PCI component registration (bsc#1112178).
- IB/mlx5: Fix DEVX support for MLX5_CMD_OP_INIT2INIT_QP command (bsc#1103991).
- KVM: SVM: Initialize prev_ga_tag before use (bsc#1180912).
- KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages (bsc#1181230).
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (git-fixes).
- NFS: nfs_igrab_and_active must first reference the superblock (git-fixes).
- NFS: switch nfsiod to be an UNBOUND workqueue (git-fixes).
- NFSv4.2: condition READDIR's mask for security label based on LSM state (git-fixes).
- RDMA/addr: Fix race with netevent_callback()/rdma_addr_cancel() (bsc#1103992).
- RDMA/bnxt_re: Do not add user qps to flushlist (bsc#1050244 ).
- RDMA/bnxt_re: Do not report transparent vlan from QP1 (bsc#1104742).
- RDMA/cma: Do not overwrite sgid_attr after device is released (bsc#1103992).
- RDMA/core: Ensure security pkey modify is not lost (bsc#1046306 ).
- RDMA/core: Fix pkey and port assignment in get_new_pps (bsc#1046306).
- RDMA/core: Fix protection fault in get_pkey_idx_qp_list (bsc#1046306).
- RDMA/core: Fix reported speed and width (bsc#1046306 ).
- RDMA/core: Fix return error value in _ib_modify_qp() to negative (bsc#1103992).
- RDMA/core: Fix use of logical OR in get_new_pps (bsc#1046306 ).
- RDMA/hns: Bugfix for memory window mtpt configuration (bsc#1104427).
- RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver (bsc#1104427).
- RDMA/hns: Fix cmdq parameter of querying pf timer resource (bsc#1104427 bsc#1126206).
- RDMA/hns: Fix missing sq_sig_type when querying QP (bsc#1104427 ).
- RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver (bsc#1104427).
- RDMA/iw_cxgb4: Fix incorrect function parameters (bsc#1136348 jsc#SLE-4684).
- RDMA/iw_cxgb4: initiate CLOSE when entering TERM (bsc#1136348 jsc#SLE-4684).
- RDMA/mlx5: Add init2init as a modify command (bsc#1103991 ).
- RDMA/mlx5: Fix typo in enum name (bsc#1103991).
- RDMA/mlx5: Fix wrong free of blue flame register on error (bsc#1103991).
- RDMA/qedr: Fix inline size returned for iWARP (bsc#1050545 ).
- SUNRPC: cache: ignore timestamp written to 'flush' file (bsc#1178036).
- USB: ehci: fix an interrupt calltrace error (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind() (git-fixes).
- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- __netif_receive_skb_core: pass skb by reference (bsc#1109837).
- arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() (bsc#1180130).
- arm64: pgtable: Fix pte_accessible() (bsc#1180130).
- bnxt_en: Do not query FW when netif_running() is false (bsc#1086282).
- bnxt_en: Fix accumulation of bp-&gt;net_stats_prev (bsc#1104745 ).
- bnxt_en: Improve stats context resource accounting with RDMA driver loaded (bsc#1104745).
- bnxt_en: Release PCI regions when DMA mask setup fails during probe (git-fixes).
- bnxt_en: Reset rings if ring reservation fails during open() (bsc#1086282).
- bnxt_en: fix HWRM error when querying VF temperature (bsc#1104745).
- bnxt_en: fix error return code in bnxt_init_board() (git-fixes).
- bnxt_en: fix error return code in bnxt_init_one() (bsc#1050242 ).
- bnxt_en: read EEPROM A2h address using page 0 (git-fixes).
- bnxt_en: return proper error codes in bnxt_show_temp (bsc#1104745).
- bonding: set dev-&gt;needed_headroom in bond_setup_by_slave() (git-fixes).
- btrfs: add a flag to iterate_inodes_from_logical to find all extent refs for uncompressed extents (bsc#1174206).
- btrfs: add a flags argument to LOGICAL_INO and call it LOGICAL_INO_V2 (bsc#1174206).
- btrfs: increase output size for LOGICAL_INO_V2 ioctl (bsc#1174206).
- btrfs: qgroup: do not try to wait flushing if we're already holding a transaction (bsc#1179575).
- caif: no need to check return value of debugfs_create functions (git-fixes).
- can: c_can: c_can_power_up(): fix error handling (git-fixes).
- can: dev: prevent potential information leak in can_fill_info() (git-fixes).
- can: vxcan: vxcan_xmit: fix use after free bug (git-fixes).
- chelsio/chtls: correct function return and return type (bsc#1104270).
- chelsio/chtls: correct netdevice for vlan interface (bsc#1104270 ).
- chelsio/chtls: fix a double free in chtls_setkey() (bsc#1104270 ).
- chelsio/chtls: fix always leaking ctrl_skb (bsc#1104270 ).
- chelsio/chtls: fix deadlock issue (bsc#1104270).
- chelsio/chtls: fix memory leaks caused by a race (bsc#1104270 ).
- chelsio/chtls: fix memory leaks in CPL handlers (bsc#1104270 ).
- chelsio/chtls: fix panic during unload reload chtls (bsc#1104270 ).
- chelsio/chtls: fix socket lock (bsc#1104270).
- chelsio/chtls: fix tls record info to user (bsc#1104270 ).
- chtls: Added a check to avoid NULL pointer dereference (bsc#1104270).
- chtls: Fix chtls resources release sequence (bsc#1104270 ).
- chtls: Fix hardware tid leak (bsc#1104270).
- chtls: Remove invalid set_tcb call (bsc#1104270).
- chtls: Replace skb_dequeue with skb_peek (bsc#1104270 ).
- cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled (bsc#1109837).
- cxgb3: fix error return code in t3_sge_alloc_qset() (git-fixes).
- cxgb4/cxgb4vf: fix flow control display for auto negotiation (bsc#1046540 bsc#1046542).
- cxgb4: fix SGE queue dump destination buffer context (bsc#1073513).
- cxgb4: fix adapter crash due to wrong MC size (bsc#1073513).
- cxgb4: fix all-mask IP address comparison (bsc#1064802 bsc#1066129).
- cxgb4: fix large delays in PTP synchronization (bsc#1046540 bsc#1046648).
- cxgb4: fix the panic caused by non smac rewrite (bsc#1064802 bsc#1066129).
- cxgb4: fix thermal zone device registration (bsc#1104279 bsc#1104277).
- cxgb4: fix throughput drop during Tx backpressure (bsc#1127354 bsc#1127371).
- cxgb4: move DCB version extern to header file (bsc#1104279 ).
- cxgb4: remove cast when saving IPv4 partial checksum (bsc#1074220).
- cxgb4: set up filter action after rewrites (bsc#1064802 bsc#1066129).
- cxgb4: use correct type for all-mask IP address comparison (bsc#1064802 bsc#1066129).
- cxgb4: use unaligned conversion for fetching timestamp (bsc#1046540 bsc#1046648).
- dm: avoid filesystem lookup in dm_get_dev_t() (bsc#1178049).
- dmaengine: xilinx_dma: check dma_async_device_register return value (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (git-fixes).
- docs: Fix reST markup when linking to sections (git-fixes).
- drivers: net: xgene: Fix the order of the arguments of 'alloc_etherdev_mqs()' (git-fixes).
- drm/amd/powerplay: fix a crash when overclocking Vega M (bsc#1113956)
- drm/amdkfd: Put ACPI table after using it (bsc#1129770) Backporting changes: 	* context changes
- drm/atomic: put state on error path (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/i915: Clear the repeater bit on HDCP disable (bsc#1112178)
- drm/i915: Fix sha_text population code (bsc#1112178)
- drm/msm: Avoid div-by-zero in dpu_crtc_atomic_check() (bsc#1129770)
- drm/msm: Fix WARN_ON() splat in _free_object() (bsc#1129770)
- drm/msm: Fix use-after-free in msm_gem with carveout (bsc#1129770)
- drm/nouveau/bios: fix issue shadowing expansion ROMs (git-fixes).
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (git-fixes).
- drm/nouveau/privring: ack interrupts the same way as RM (git-fixes).
- drm/tve200: Fix handling of platform_get_irq() error (bsc#1129770)
- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1112178)
- drm: sun4i: hdmi: Fix inverted HPD result (bsc#1112178)
- drm: sun4i: hdmi: Remove extra HPD polling (bsc#1112178)
- ehci: fix EHCI host controller initialization sequence (git-fixes).
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (git-fixes).
- floppy: reintroduce O_NDELAY fix (boo#1181018).
- futex: Do not enable IRQs unconditionally in put_pi_state() (bsc#1149032).
- futex: Ensure the correct return value from futex_lock_pi() (bsc#1181349 bsc#1149032).
- futex: Fix incorrect should_fail_futex() handling (bsc#1181349).
- futex: Handle faults correctly for PI futexes (bsc#1181349 bsc#1149032).
- futex: Provide and use pi_state_update_owner() (bsc#1181349 bsc#1149032).
- futex: Replace pointless printk in fixup_owner() (bsc#1181349 bsc#1149032).
- futex: Simplify fixup_pi_state_owner() (bsc#1181349 bsc#1149032).
- futex: Use pi_state_update_owner() in put_pi_state() (bsc#1181349 bsc#1149032).
- i2c: octeon: check correct size of maximum RECV_LEN packet (git-fixes).
- i40e: Fix removing driver while bare-metal VFs pass traffic (git-fixes).
- i40e: avoid premature Rx buffer reuse (bsc#1111981).
- igb: Report speed and duplex as unknown when device is runtime suspended (git-fixes).
- igc: fix link speed advertising (jsc#SLE-4799).
- iio: ad5504: Fix setting power-down state (git-fixes).
- iommu/vt-d: Do not dereference iommu_device if IOMMU_API is not built (bsc#1181260, jsc#ECO-3191).
- iommu/vt-d: Gracefully handle DMAR units with no supported address widths (bsc#1181260, jsc#ECO-3191).
- ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K (bsc#1109837).
- ixgbe: avoid premature Rx buffer reuse (bsc#1109837 ).
- kABI: Fix kABI for extended APIC-ID support (bsc#1181260, jsc#ECO-3191).
- kernfs: deal with kernfs_fill_super() failures (bsc#1181809).
- lockd: do not use interval-based rebinding over TCP (git-fixes).
- locking/futex: Allow low-level atomic operations to return -EAGAIN (bsc#1149032).
- md/raid10: initialize r10_bio-&gt;read_slot before use (git-fixes).
- md: fix a warning caused by a race between concurrent md_ioctl()s (git-fixes).
- media: gp8psk: initialize stats at power control logic (git-fixes).
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (git-fixes).
- misdn: dsp: select CONFIG_BITREVERSE (git-fixes).
- mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() (git-fixes).
- mlxsw: destroy workqueue when trap_register in mlxsw_emad_init (bsc#1112374).
- mlxsw: spectrum: Do not modify cloned SKBs during xmit (git-fixes).
- mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails (bsc#1112374).
- mlxsw: switchx2: Do not modify cloned SKBs during xmit (git-fixes).
- mm, page_alloc: fix core hung in free_pcppages_bulk() (git fixes (mm/hotplug)).
- mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous() (git fixes (mm/pgalloc)).
- mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly (git fixes (mm/hmm)).
- mm/slab: use memzero_explicit() in kzfree() (git fixes (mm/slab)).
- mm: do not wake kswapd prematurely when watermark boosting is disabled (git fixes (mm/vmscan)).
- mm: hwpoison: disable memory error handling on 1GB hugepage (git fixes (mm/hwpoison)).
- mmc: sdhci-xenon: fix 1.8v regulator stabilization (git-fixes).
- nbd: Fix memory leak in nbd_add_socket (bsc#1181504).
- net/af_iucv: always register net_device notifier (git-fixes).
- net/af_iucv: fix null pointer dereference on shutdown (bsc#1179563 LTC#190108).
- net/af_iucv: set correct sk_protocol for child sockets (git-fixes).
- net/filter: Permit reading NET in load_bytes_relative when MAC not set (bsc#1109837).
- net/liquidio: Delete driver version assignment (git-fixes).
- net/liquidio: Delete non-working LIQUIDIO_PACKAGE check (git-fixes).
- net/mlx4_en: Avoid scheduling restart task if it is already running (git-fixes).
- net/mlx5: Add handling of port type in rule deletion (bsc#1103991).
- net/mlx5: Fix memory leak on flow table creation error flow (bsc#1046305).
- net/mlx5e: Fix VLAN cleanup flow (git-fixes).
- net/mlx5e: Fix VLAN create flow (git-fixes).
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (git-fixes).
- net/mlx5e: Fix two double free cases (bsc#1046305).
- net/mlx5e: IPoIB, Drop multicast packets that this interface sent (bsc#1075020).
- net/mlx5e: TX, Fix consumer index of error cqe dump (bsc#1103990 ).
- net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq (bsc#1103990).
- net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels (bsc#1109837).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource() (git-fixes).
- net/smc: receive pending data after RCV_SHUTDOWN (git-fixes).
- net/smc: receive returns without data (git-fixes).
- net/sonic: Add mutual exclusion for accessing shared state (git-fixes).
- net: atlantic: fix potential error handling (git-fixes).
- net: atlantic: fix use after free kasan warn (git-fixes).
- net: bcmgenet: keep MAC in reset until PHY is up (git-fixes).
- net: bcmgenet: reapply manual settings to the PHY (git-fixes).
- net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe() (git-fixes).
- net: cbs: Fix software cbs to consider packet sending time (bsc#1109837).
- net: dsa: LAN9303: select REGMAP when LAN9303 enable (git-fixes).
- net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL (git-fixes).
- net: ena: set initial DMA width to avoid intel iommu issue (git-fixes).
- net: ethernet: mlx4: Avoid assigning a value to ring_cons but not used it anymore in mlx4_en_xmit() (git-fixes).
- net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse() (git-fixes).
- net: freescale: fec: Fix ethtool -d runtime PM (git-fixes).
- net: hns3: add a missing uninit debugfs when unload driver (bsc#1104353).
- net: hns3: add compatible handling for command HCLGE_OPC_PF_RST_DONE (git-fixes).
- net: hns3: add management table after IMP reset (bsc#1104353 ).
- net: hns3: check reset interrupt status when reset fails (git-fixes).
- net: hns3: clear reset interrupt status in hclge_irq_handle() (git-fixes).
- net: hns3: fix a TX timeout issue (bsc#1104353).
- net: hns3: fix a wrong reset interrupt status mask (git-fixes).
- net: hns3: fix error VF index when setting VLAN offload (bsc#1104353).
- net: hns3: fix error handling for desc filling (bsc#1104353 ).
- net: hns3: fix for not calculating TX BD send size correctly (bsc#1126390).
- net: hns3: fix interrupt clearing error for VF (bsc#1104353 ).
- net: hns3: fix mis-counting IRQ vector numbers issue (bsc#1104353).
- net: hns3: fix shaper parameter algorithm (bsc#1104353 ).
- net: hns3: fix the number of queues actually used by ARQ (bsc#1104353).
- net: hns3: fix use-after-free when doing self test (bsc#1104353 ).
- net: hns3: reallocate SSU' buffer size when pfc_en changes (bsc#1104353).
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (bsc#1098633).
- net: mvpp2: Fix error return code in mvpp2_open() (bsc#1119113 ).
- net: mvpp2: fix pkt coalescing int-threshold configuration (bsc#1098633).
- net: phy: Allow BCM54616S PHY to setup internal TX/RX clock delay (git-fixes).
- net: phy: broadcom: Fix RGMII delays configuration for BCM54210E (git-fixes).
- net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs (git-fixes).
- net: phy: micrel: make sure the factory test bit is cleared (git-fixes).
- net: qca_spi: Move reset_count to struct qcaspi (git-fixes).
- net: smc911x: Adjust indentation in smc911x_phy_configure (git-fixes).
- net: stmmac: 16KB buffer must be 16 byte aligned (git-fixes).
- net: stmmac: Do not accept invalid MTU values (git-fixes).
- net: stmmac: Enable 16KB buffer size (git-fixes).
- net: stmmac: RX buffer size must be 16 byte aligned (git-fixes).
- net: stmmac: dwmac-meson8b: Fix signedness bug in probe (git-fixes).
- net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes (git-fixes).
- net: stmmac: fix length of PTP clock's name string (git-fixes).
- net: stmmac: gmac4+: Not all Unicast addresses may be available (git-fixes).
- net: sunrpc: interpret the return value of kstrtou32 correctly (git-fixes).
- net: team: fix memory leak in __team_options_register (git-fixes).
- net: tulip: Adjust indentation in {dmfe, uli526x}_init_module (git-fixes).
- net: usb: lan78xx: Fix error message format specifier (git-fixes).
- net: vlan: avoid leaks on register_vlan_dev() failures (git-fixes).
- net_failover: fixed rollback in net_failover_open() (bsc#1109837).
- net_sched: let qdisc_put() accept NULL pointer (bsc#1056657 bsc#1056653 bsc#1056787).
- nfp: validate the return code from dev_queue_xmit() (git-fixes).
- nfs_common: need lock during iterate through the list (git-fixes).
- nfsd4: readdirplus shouldn't return parent of export (git-fixes).
- nfsd: Fix message level for normal termination (git-fixes).
- pNFS: Mark layout for return if return-on-close was not sent (git-fixes).
- page_frag: Recover from memory pressure (git fixes (mm/pgalloc)).
- powerpc/perf: Add generic compat mode pmu driver (bsc#1178900 ltc#189284).
- powerpc/perf: Fix crashes with generic_compat_pmu &amp; BHRB (bsc#1178900 ltc#189284 git-fixes).
- powerpc/perf: init pmu from core-book3s (bsc#1178900 ltc#189284).
- qed: Fix race condition between scheduling and destroying the slowpath workqueue (bsc#1086314 bsc#1086313 bsc#1086301).
- qed: Fix use after free in qed_chain_free (bsc#1050536 bsc#1050538).
- r8152: Add Lenovo Powered USB-C Travel Hub (git-fixes).
- rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (bsc#1181349 bsc#1149032).
- s390/cio: fix use-after-free in ccw_device_destroy_console (git-fixes).
- s390/dasd: fix list corruption of lcu list (bsc#1181170 LTC#190915).
- s390/dasd: fix list corruption of pavgroup group list (bsc#1181170 LTC#190915).
- s390/dasd: prevent inconsistent LCU device data (bsc#1181170 LTC#190915).
- s390/qeth: delay draining the TX buffers (git-fixes).
- s390/qeth: fix L2 header access in qeth_l3_osa_features_check() (git-fixes).
- s390/qeth: fix deadlock during recovery (git-fixes).
- s390/qeth: fix locking for discipline setup / removal (git-fixes).
- s390/smp: perform initial CPU reset also for SMT siblings (git-fixes).
- sched/fair: Fix enqueue_task_fair warning (bsc#1179093).
- sched/fair: Fix enqueue_task_fair() warning some more (bsc#1179093).
- sched/fair: Fix reordering of enqueue/dequeue_task_fair() (bsc#1179093).
- sched/fair: Fix unthrottle_cfs_rq() for leaf_cfs_rq list (bsc#1179093).
- sched/fair: Reorder enqueue/dequeue_task_fair path (bsc#1179093).
- scsi: core: Fix VPD LUN ID designator priorities (bsc#1178049, git-fixes).
- scsi: ibmvfc: Set default timeout to avoid crash during migration (bsc#1181425 ltc#188252).
- scsi: lpfc: Enhancements to LOG_TRACE_EVENT for better readability (bsc#1180891).
- scsi: lpfc: Fix FW reset action if I/Os are outstanding (bsc#1180891).
- scsi: lpfc: Fix NVMe recovery after mailbox timeout (bsc#1180891).
- scsi: lpfc: Fix PLOGI S_ID of 0 on pt2pt config (bsc#1180891).
- scsi: lpfc: Fix auto sli_mode and its effect on CONFIG_PORT for SLI3 (bsc#1180891).
- scsi: lpfc: Fix crash when a fabric node is released prematurely (bsc#1180891).
- scsi: lpfc: Fix error log messages being logged following SCSI task mgnt (bsc#1180891).
- scsi: lpfc: Fix target reset failing (bsc#1180891).
- scsi: lpfc: Fix vport create logging (bsc#1180891).
- scsi: lpfc: Implement health checking when aborting I/O (bsc#1180891).
- scsi: lpfc: Prevent duplicate requests to unregister with cpuhp framework (bsc#1180891).
- scsi: lpfc: Refresh ndlp when a new PRLI is received in the PRLI issue state (bsc#1180891).
- scsi: lpfc: Simplify bool comparison (bsc#1180891).
- scsi: lpfc: Update lpfc version to 12.8.0.7 (bsc#1180891).
- scsi: lpfc: Use the nvme-fc transport supplied timeout for LS requests (bsc#1180891).
- scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit (bsc#1179142).
- serial: mvebu-uart: fix tx lost characters at power off (git-fixes).
- spi: cadence: cache reference clock rate during probe (git-fixes).
- team: set dev-&gt;needed_headroom in team_setup_by_port() (git-fixes).
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (bsc#1109837).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind failure (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: udc: core: Use lock when write to soft_connect (git-fixes).
- veth: Adjust hard_start offset on redirect XDP frames (bsc#1109837).
- vfio iommu: Add dma available capability (bsc#1179573 LTC#190106).
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (bsc#1181231).
- vhost/vsock: fix vhost vsock cid hashing inconsistent (git-fixes).
- virtio_net: Keep vnet header zeroed if XDP is loaded for small buffer (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- x86/apic: Fix x2apic enablement without interrupt remapping (bsc#1181260, jsc#ECO-3191).
- x86/apic: Support 15 bits of APIC ID in IOAPIC/MSI where available (bsc#1181260, jsc#ECO-3191).
- x86/hyperv: Fix kexec panic/hang issues (bsc#1176831).
- x86/i8259: Use printk_deferred() to prevent deadlock (bsc#1112178).
- x86/ioapic: Handle Extended Destination ID field in RTE (bsc#1181260, jsc#ECO-3191).
- x86/kvm: Add KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181260, jsc#ECO-3191).
- x86/kvm: Reserve KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181260, jsc#ECO-3191).
- x86/mm/numa: Remove uninitialized_var() usage (bsc#1112178).
- x86/mm: Fix leak of pmd ptlock (bsc#1112178).
- x86/msi: Only use high bits of MSI address for DMAR unit (bsc#1181260, jsc#ECO-3191).
- x86/mtrr: Correct the range check before performing MTRR type lookups (bsc#1112178).
- x86/resctrl: Do not move a task to the same resource group (bsc#1112178).
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (bsc#1112178).
- xdp: Fix xsk_generic_xmit errno (bsc#1109837).
- xhci: make sure TRB is fully written before giving it to the controller (git-fixes).
- xhci: tegra: Delay for disabling LFPS detector (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-19"/>
	<updated date="2021-02-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046305">SUSE bug 1046305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046306">SUSE bug 1046306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046540">SUSE bug 1046540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046542">SUSE bug 1046542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046648">SUSE bug 1046648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050538">SUSE bug 1050538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056653">SUSE bug 1056653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056657">SUSE bug 1056657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073513">SUSE bug 1073513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074220">SUSE bug 1074220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075020">SUSE bug 1075020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086282">SUSE bug 1086282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086301">SUSE bug 1086301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086313">SUSE bug 1086313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086314">SUSE bug 1086314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098633">SUSE bug 1098633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104270">SUSE bug 1104270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104277">SUSE bug 1104277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104279">SUSE bug 1104279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104742">SUSE bug 1104742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111981">SUSE bug 1111981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126390">SUSE bug 1126390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136348">SUSE bug 1136348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149032">SUSE bug 1149032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174206">SUSE bug 1174206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176831">SUSE bug 1176831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176846">SUSE bug 1176846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178036">SUSE bug 1178036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178049">SUSE bug 1178049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178900">SUSE bug 1178900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179093">SUSE bug 1179093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179142">SUSE bug 1179142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179508">SUSE bug 1179508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179509">SUSE bug 1179509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179563">SUSE bug 1179563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179573">SUSE bug 1179573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179575">SUSE bug 1179575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179878">SUSE bug 1179878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180130">SUSE bug 1180130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180765">SUSE bug 1180765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180812">SUSE bug 1180812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180891">SUSE bug 1180891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180912">SUSE bug 1180912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181018">SUSE bug 1181018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181170">SUSE bug 1181170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181230">SUSE bug 1181230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181231">SUSE bug 1181231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181260">SUSE bug 1181260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181349">SUSE bug 1181349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181425">SUSE bug 1181425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181504">SUSE bug 1181504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181809">SUSE bug 1181809</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25639/">CVE-2020-25639</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27835/">CVE-2020-27835</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29568/">CVE-2020-29568</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20177/">CVE-2021-20177</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3348/">CVE-2021-3348</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504162" comment="kernel-default-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504163" comment="kernel-default-base-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504164" comment="kernel-default-devel-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504165" comment="kernel-devel-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504166" comment="kernel-docs-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504167" comment="kernel-macros-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504168" comment="kernel-obs-build-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504169" comment="kernel-source-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504170" comment="kernel-syms-4.12.14-197.83.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139814" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182286" ref_url="https://bugzilla.suse.com/1182286" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13558" ref_url="https://www.suse.com/security/cve/CVE-2020-13558/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0583-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008365.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.30.5 (bsc#1182286):

  + Bring back the WebKitPluginProcess installation that was removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-24"/>
	<updated date="2021-02-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182286">SUSE bug 1182286</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13558/">CVE-2020-13558</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503630" comment="libjavascriptcoregtk-4_0-18-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503631" comment="libwebkit2gtk-4_0-37-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503632" comment="libwebkit2gtk3-lang-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503633" comment="typelib-1_0-JavaScriptCore-4_0-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503634" comment="typelib-1_0-WebKit2-4_0-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503635" comment="typelib-1_0-WebKit2WebExtension-4_0-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503636" comment="webkit2gtk-4_0-injected-bundles-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503637" comment="webkit2gtk3-devel-2.30.5-3.66.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139815" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182049" ref_url="https://bugzilla.suse.com/1182049" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21702" ref_url="https://www.suse.com/security/cve/CVE-2021-21702/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008366.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2021-21702 [bsc#1182049]: NULL pointer dereference in SoapClient
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-24"/>
	<updated date="2021-02-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182049">SUSE bug 1182049</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21702/">CVE-2021-21702</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503638" comment="apache2-mod_php7-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503639" comment="php7-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503640" comment="php7-bcmath-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503641" comment="php7-bz2-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503642" comment="php7-calendar-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503643" comment="php7-ctype-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503644" comment="php7-curl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503645" comment="php7-dba-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503646" comment="php7-devel-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503647" comment="php7-dom-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503648" comment="php7-enchant-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503649" comment="php7-exif-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503650" comment="php7-fastcgi-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503651" comment="php7-fileinfo-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503652" comment="php7-fpm-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503653" comment="php7-ftp-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503654" comment="php7-gd-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503655" comment="php7-gettext-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503656" comment="php7-gmp-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503657" comment="php7-iconv-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503658" comment="php7-intl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503659" comment="php7-json-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503660" comment="php7-ldap-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503661" comment="php7-mbstring-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503662" comment="php7-mysql-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503663" comment="php7-odbc-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503664" comment="php7-opcache-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503665" comment="php7-openssl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503666" comment="php7-pcntl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503667" comment="php7-pdo-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503668" comment="php7-pear-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503669" comment="php7-pear-Archive_Tar-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503670" comment="php7-pgsql-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503671" comment="php7-phar-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503672" comment="php7-posix-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503673" comment="php7-readline-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503674" comment="php7-shmop-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503675" comment="php7-snmp-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503676" comment="php7-soap-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503677" comment="php7-sockets-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503678" comment="php7-sodium-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503679" comment="php7-sqlite-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503680" comment="php7-sysvmsg-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503681" comment="php7-sysvsem-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503682" comment="php7-sysvshm-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504171" comment="php7-tidy-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503683" comment="php7-tokenizer-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503684" comment="php7-wddx-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503685" comment="php7-xmlreader-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503686" comment="php7-xmlrpc-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503687" comment="php7-xmlwriter-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503688" comment="php7-xsl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503689" comment="php7-zip-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503690" comment="php7-zlib-7.2.5-4.73.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139816" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181550" ref_url="https://bugzilla.suse.com/1181550" source="BUGZILLA"/>
		<reference ref_id="1181556" ref_url="https://bugzilla.suse.com/1181556" source="BUGZILLA"/>
		<reference ref_id="1181557" ref_url="https://bugzilla.suse.com/1181557" source="BUGZILLA"/>
		<reference ref_id="1181558" ref_url="https://bugzilla.suse.com/1181558" source="BUGZILLA"/>
		<reference ref_id="1181559" ref_url="https://bugzilla.suse.com/1181559" source="BUGZILLA"/>
		<reference ref_id="1181560" ref_url="https://bugzilla.suse.com/1181560" source="BUGZILLA"/>
		<reference ref_id="1181561" ref_url="https://bugzilla.suse.com/1181561" source="BUGZILLA"/>
		<reference ref_id="1181562" ref_url="https://bugzilla.suse.com/1181562" source="BUGZILLA"/>
		<reference ref_id="1181563" ref_url="https://bugzilla.suse.com/1181563" source="BUGZILLA"/>
		<reference ref_id="1181564" ref_url="https://bugzilla.suse.com/1181564" source="BUGZILLA"/>
		<reference ref_id="1181565" ref_url="https://bugzilla.suse.com/1181565" source="BUGZILLA"/>
		<reference ref_id="1182740" ref_url="https://bugzilla.suse.com/1182740" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28243" ref_url="https://www.suse.com/security/cve/CVE-2020-28243/" source="CVE"/>
		<reference ref_id="CVE-2020-28972" ref_url="https://www.suse.com/security/cve/CVE-2020-28972/" source="CVE"/>
		<reference ref_id="CVE-2020-35662" ref_url="https://www.suse.com/security/cve/CVE-2020-35662/" source="CVE"/>
		<reference ref_id="CVE-2021-25281" ref_url="https://www.suse.com/security/cve/CVE-2021-25281/" source="CVE"/>
		<reference ref_id="CVE-2021-25282" ref_url="https://www.suse.com/security/cve/CVE-2021-25282/" source="CVE"/>
		<reference ref_id="CVE-2021-25283" ref_url="https://www.suse.com/security/cve/CVE-2021-25283/" source="CVE"/>
		<reference ref_id="CVE-2021-25284" ref_url="https://www.suse.com/security/cve/CVE-2021-25284/" source="CVE"/>
		<reference ref_id="CVE-2021-3144" ref_url="https://www.suse.com/security/cve/CVE-2021-3144/" source="CVE"/>
		<reference ref_id="CVE-2021-3148" ref_url="https://www.suse.com/security/cve/CVE-2021-3148/" source="CVE"/>
		<reference ref_id="CVE-2021-3197" ref_url="https://www.suse.com/security/cve/CVE-2021-3197/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008388.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix errors with virt.update
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-26"/>
	<updated date="2021-02-26"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1181550">SUSE bug 1181550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181556">SUSE bug 1181556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181557">SUSE bug 1181557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181558">SUSE bug 1181558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181559">SUSE bug 1181559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181560">SUSE bug 1181560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181561">SUSE bug 1181561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181562">SUSE bug 1181562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181563">SUSE bug 1181563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181564">SUSE bug 1181564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181565">SUSE bug 1181565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182740">SUSE bug 1182740</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-28243/">CVE-2020-28243</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28972/">CVE-2020-28972</cve>
	<cve impact="important" cvss3="9.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2020-35662/">CVE-2020-35662</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25281/">CVE-2021-25281</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25282/">CVE-2021-25282</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25283/">CVE-2021-25283</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-25284/">CVE-2021-25284</cve>
	<cve impact="important" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3144/">CVE-2021-3144</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3148/">CVE-2021-3148</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3197/">CVE-2021-3197</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504172" comment="python2-salt-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504173" comment="python3-salt-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504174" comment="salt-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504175" comment="salt-api-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494161" comment="salt-bash-completion-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504176" comment="salt-cloud-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504177" comment="salt-doc-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500064" comment="salt-fish-completion-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504178" comment="salt-master-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504179" comment="salt-minion-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504180" comment="salt-proxy-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504181" comment="salt-ssh-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504182" comment="salt-standalone-formulas-configuration-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504183" comment="salt-syndic-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494164" comment="salt-zsh-completion-3000-24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139817" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1178386" ref_url="https://bugzilla.suse.com/1178386" source="BUGZILLA"/>
		<reference ref_id="1179694" ref_url="https://bugzilla.suse.com/1179694" source="BUGZILLA"/>
		<reference ref_id="1179721" ref_url="https://bugzilla.suse.com/1179721" source="BUGZILLA"/>
		<reference ref_id="1180038" ref_url="https://bugzilla.suse.com/1180038" source="BUGZILLA"/>
		<reference ref_id="1181505" ref_url="https://bugzilla.suse.com/1181505" source="BUGZILLA"/>
		<reference ref_id="1182117" ref_url="https://bugzilla.suse.com/1182117" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-25013" ref_url="https://www.suse.com/security/cve/CVE-2019-25013/" source="CVE"/>
		<reference ref_id="CVE-2020-27618" ref_url="https://www.suse.com/security/cve/CVE-2020-27618/" source="CVE"/>
		<reference ref_id="CVE-2020-29562" ref_url="https://www.suse.com/security/cve/CVE-2020-29562/" source="CVE"/>
		<reference ref_id="CVE-2020-29573" ref_url="https://www.suse.com/security/cve/CVE-2020-29573/" source="CVE"/>
		<reference ref_id="CVE-2021-3326" ref_url="https://www.suse.com/security/cve/CVE-2021-3326/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008397.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

- Fix buffer overrun in EUC-KR conversion module (CVE-2019-25013, bsc#1182117, BZ #24973)
- x86: Harden printf against non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- gconv: Fix assertion failure in ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)
- iconv: Accept redundant shift sequences in IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv: Fix incorrect UCS4 inner loop bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- Fix parsing of /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-26"/>
	<updated date="2021-02-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178386">SUSE bug 1178386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179694">SUSE bug 1179694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179721">SUSE bug 1179721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180038">SUSE bug 1180038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181505">SUSE bug 1181505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182117">SUSE bug 1182117</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-25013/">CVE-2019-25013</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27618/">CVE-2020-27618</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29562/">CVE-2020-29562</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29573/">CVE-2020-29573</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3326/">CVE-2021-3326</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503709" comment="glibc-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494166" comment="glibc-32bit-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503710" comment="glibc-devel-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496617" comment="glibc-devel-32bit-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503711" comment="glibc-devel-static-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503712" comment="glibc-extra-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494169" comment="glibc-i18ndata-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494170" comment="glibc-info-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503713" comment="glibc-locale-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503714" comment="glibc-locale-base-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494173" comment="glibc-locale-base-32bit-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503715" comment="glibc-profile-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503716" comment="glibc-utils-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503717" comment="nscd-2.26-13.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139818" version="1" class="patch">
	<metadata>
		<title>Security update for python-Jinja2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181944" ref_url="https://bugzilla.suse.com/1181944" source="BUGZILLA"/>
		<reference ref_id="1182244" ref_url="https://bugzilla.suse.com/1182244" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28493" ref_url="https://www.suse.com/security/cve/CVE-2020-28493/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0654-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008398.html" source="SUSE-SU"/>
		<description>
This update for python-Jinja2 fixes the following issues:

- CVE-2020-28493: Fixed a ReDOS vulnerability where urlize could have 
  been called with untrusted user data (bsc#1181944).  
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-26"/>
	<updated date="2021-02-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181944">SUSE bug 1181944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182244">SUSE bug 1182244</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28493/">CVE-2020-28493</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498309" comment="python2-Jinja2-2.10.1-3.10.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494176" comment="python3-Jinja2-2.10.1-3.10.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139819" version="1" class="patch">
	<metadata>
		<title>Security update for rpmlint (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1169614" ref_url="https://bugzilla.suse.com/1169614" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:0658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008401.html" source="SUSE-SU"/>
		<description>
This update for rpmlint fixes the following issues:

- Whitelist PAM modules and DBUS rules for cockpit (bsc#1169614)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-01"/>
	<updated date="2021-03-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1169614">SUSE bug 1169614</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504184" comment="rpmlint-mini-1.10-7.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139820" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182333" ref_url="https://bugzilla.suse.com/1182333" source="BUGZILLA"/>
		<reference ref_id="1182619" ref_url="https://bugzilla.suse.com/1182619" source="BUGZILLA"/>
		<reference ref_id="1182620" ref_url="https://bugzilla.suse.com/1182620" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22883" ref_url="https://www.suse.com/security/cve/CVE-2021-22883/" source="CVE"/>
		<reference ref_id="CVE-2021-22884" ref_url="https://www.suse.com/security/cve/CVE-2021-22884/" source="CVE"/>
		<reference ref_id="CVE-2021-23840" ref_url="https://www.suse.com/security/cve/CVE-2021-23840/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008416.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

New upstream LTS version 10.24.0:

- CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (bsc#1182619)
- CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
- CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate (bsc#1182333)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182333">SUSE bug 1182333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182619">SUSE bug 1182619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182620">SUSE bug 1182620</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-22883/">CVE-2021-22883</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-22884/">CVE-2021-22884</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-23840/">CVE-2021-23840</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503718" comment="nodejs10-10.24.0-1.33.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503719" comment="nodejs10-devel-10.24.0-1.33.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501363" comment="nodejs10-docs-10.24.0-1.33.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503720" comment="npm10-10.24.0-1.33.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139821" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181848" ref_url="https://bugzilla.suse.com/1181848" source="BUGZILLA"/>
		<reference ref_id="1182357" ref_url="https://bugzilla.suse.com/1182357" source="BUGZILLA"/>
		<reference ref_id="1182614" ref_url="https://bugzilla.suse.com/1182614" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23968" ref_url="https://www.suse.com/security/cve/CVE-2021-23968/" source="CVE"/>
		<reference ref_id="CVE-2021-23969" ref_url="https://www.suse.com/security/cve/CVE-2021-23969/" source="CVE"/>
		<reference ref_id="CVE-2021-23973" ref_url="https://www.suse.com/security/cve/CVE-2021-23973/" source="CVE"/>
		<reference ref_id="CVE-2021-23978" ref_url="https://www.suse.com/security/cve/CVE-2021-23978/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008414.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969: Content Security Policy violation report could have contained the destination of a redirect
  * CVE-2021-23968: Content Security Policy violation report could have contained the destination of a redirect
  * CVE-2021-23973: MediaError message property could have leaked information about cross-origin resources
  * CVE-2021-23978: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
  * Fixed: Prevent access to NTFS special paths that could lead to filesystem corruption. 
  * Buffer overflow in depth pitch calculations for compressed textures 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181848">SUSE bug 1181848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182357">SUSE bug 1182357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182614">SUSE bug 1182614</bugzilla>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23968/">CVE-2021-23968</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23969/">CVE-2021-23969</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23973/">CVE-2021-23973</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23978/">CVE-2021-23978</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504185" comment="MozillaFirefox-78.8.0-3.133.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504186" comment="MozillaFirefox-devel-78.8.0-3.133.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504187" comment="MozillaFirefox-translations-common-78.8.0-3.133.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504188" comment="MozillaFirefox-translations-other-78.8.0-3.133.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139822" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1175970" ref_url="https://bugzilla.suse.com/1175970" source="BUGZILLA"/>
		<reference ref_id="1176711" ref_url="https://bugzilla.suse.com/1176711" source="BUGZILLA"/>
		<reference ref_id="1177883" ref_url="https://bugzilla.suse.com/1177883" source="BUGZILLA"/>
		<reference ref_id="1179264" ref_url="https://bugzilla.suse.com/1179264" source="BUGZILLA"/>
		<reference ref_id="1179265" ref_url="https://bugzilla.suse.com/1179265" source="BUGZILLA"/>
		<reference ref_id="1182057" ref_url="https://bugzilla.suse.com/1182057" source="BUGZILLA"/>
		<reference ref_id="1182262" ref_url="https://bugzilla.suse.com/1182262" source="BUGZILLA"/>
		<reference ref_id="1182263" ref_url="https://bugzilla.suse.com/1182263" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14372" ref_url="https://www.suse.com/security/cve/CVE-2020-14372/" source="CVE"/>
		<reference ref_id="CVE-2020-25632" ref_url="https://www.suse.com/security/cve/CVE-2020-25632/" source="CVE"/>
		<reference ref_id="CVE-2020-25647" ref_url="https://www.suse.com/security/cve/CVE-2020-25647/" source="CVE"/>
		<reference ref_id="CVE-2020-27749" ref_url="https://www.suse.com/security/cve/CVE-2020-27749/" source="CVE"/>
		<reference ref_id="CVE-2020-27779" ref_url="https://www.suse.com/security/cve/CVE-2020-27779/" source="CVE"/>
		<reference ref_id="CVE-2021-20225" ref_url="https://www.suse.com/security/cve/CVE-2021-20225/" source="CVE"/>
		<reference ref_id="CVE-2021-20233" ref_url="https://www.suse.com/security/cve/CVE-2021-20233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008427.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

grub2 now implements the new 'SBAT' method for SHIM based secure boot revocation. (bsc#1182057)

Following security issues are fixed that can violate secure boot constraints:

- CVE-2020-25632: Fixed a use-after-free in rmmod command (bsc#1176711)
- CVE-2020-25647: Fixed an out-of-bound write in grub_usb_device_initialize() (bsc#1177883)
- CVE-2020-27749: Fixed a stack buffer overflow in grub_parser_split_cmdline (bsc#1179264)
- CVE-2020-27779, CVE-2020-14372: Disallow cutmem and acpi commands in secure boot mode (bsc#1179265 bsc#1175970)
- CVE-2021-20225: Fixed a heap out-of-bounds write in short form option parser (bsc#1182262)
- CVE-2021-20233: Fixed a heap out-of-bound write due to mis-calculation of space required for quoting (bsc#1182263)

		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175970">SUSE bug 1175970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176711">SUSE bug 1176711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177883">SUSE bug 1177883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179264">SUSE bug 1179264</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179265">SUSE bug 1179265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182057">SUSE bug 1182057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182262">SUSE bug 1182262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182263">SUSE bug 1182263</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14372/">CVE-2020-14372</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25632/">CVE-2020-25632</cve>
	<cve impact="important" cvss3="7.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25647/">CVE-2020-25647</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27749/">CVE-2020-27749</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27779/">CVE-2020-27779</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20225/">CVE-2021-20225</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20233/">CVE-2021-20233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504189" comment="grub2-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504190" comment="grub2-arm64-efi-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504191" comment="grub2-i386-pc-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504192" comment="grub2-snapper-plugin-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504193" comment="grub2-systemd-sleep-plugin-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504194" comment="grub2-x86_64-efi-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504195" comment="grub2-x86_64-xen-2.02-26.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139823" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180933" ref_url="https://bugzilla.suse.com/1180933" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:0689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008421.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- dnssec-keygen can no longer generate HMAC keys. Use tsig-keygen instead. [bsc#1180933]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180933">SUSE bug 1180933</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503728" comment="bind-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503729" comment="bind-chrootenv-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503730" comment="bind-devel-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500073" comment="bind-doc-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503731" comment="bind-utils-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503732" comment="libbind9-1600-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503733" comment="libdns1605-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503734" comment="libirs-devel-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503735" comment="libirs1601-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503736" comment="libisc1606-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503737" comment="libisccc1600-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503738" comment="libisccfg1600-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503739" comment="libns1604-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494195" comment="python3-bind-9.16.6-12.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139824" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181720" ref_url="https://bugzilla.suse.com/1181720" source="BUGZILLA"/>
		<reference ref_id="1181735" ref_url="https://bugzilla.suse.com/1181735" source="BUGZILLA"/>
		<reference ref_id="1181736" ref_url="https://bugzilla.suse.com/1181736" source="BUGZILLA"/>
		<reference ref_id="1181738" ref_url="https://bugzilla.suse.com/1181738" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12362" ref_url="https://www.suse.com/security/cve/CVE-2020-12362/" source="CVE"/>
		<reference ref_id="CVE-2020-12363" ref_url="https://www.suse.com/security/cve/CVE-2020-12363/" source="CVE"/>
		<reference ref_id="CVE-2020-12364" ref_url="https://www.suse.com/security/cve/CVE-2020-12364/" source="CVE"/>
		<reference ref_id="CVE-2020-12373" ref_url="https://www.suse.com/security/cve/CVE-2020-12373/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008432.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

- CVE-2020-12373: Fixed an expired pointer dereference may lead to DOS (bsc#1181738).
- CVE-2020-12364: Fixed a null pointer reference may lead to DOS (bsc#1181736). 
- CVE-2020-12362: Fixed an integer overflow which could have led to privilege escalation (bsc#1181720).
- CVE-2020-12363: Fixed an improper input validation which may have led to DOS (bsc#1181735).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-03"/>
	<updated date="2021-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181720">SUSE bug 1181720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181735">SUSE bug 1181735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181736">SUSE bug 1181736</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181738">SUSE bug 1181738</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12362/">CVE-2020-12362</cve>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12363/">CVE-2020-12363</cve>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12364/">CVE-2020-12364</cve>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12373/">CVE-2020-12373</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494196" comment="kernel-firmware-20200107-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494197" comment="ucode-amd-20200107-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139825" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179765" ref_url="https://bugzilla.suse.com/1179765" source="BUGZILLA"/>
		<reference ref_id="1182040" ref_url="https://bugzilla.suse.com/1182040" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3393" ref_url="https://www.suse.com/security/cve/CVE-2021-3393/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008430.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

Upgrade to version 12.6:

- Reindexing might be needed after applying this update.
- CVE-2021-3393, bsc#1182040: Fix information leakage in constraint-violation error messages.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-03"/>
	<updated date="2021-03-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179765">SUSE bug 1179765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182040">SUSE bug 1182040</bugzilla>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3393/">CVE-2021-3393</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504196" comment="libecpg6-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504197" comment="libpq5-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504198" comment="libpq5-32bit-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504199" comment="postgresql12-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504200" comment="postgresql12-contrib-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504201" comment="postgresql12-devel-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504202" comment="postgresql12-docs-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504203" comment="postgresql12-plperl-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504204" comment="postgresql12-plpython-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504205" comment="postgresql12-pltcl-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504206" comment="postgresql12-server-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504207" comment="postgresql12-server-devel-12.6-3.21.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139826" version="1" class="patch">
	<metadata>
		<title>Security update for python-cryptography (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182066" ref_url="https://bugzilla.suse.com/1182066" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36242" ref_url="https://www.suse.com/security/cve/CVE-2020-36242/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008429.html" source="SUSE-SU"/>
		<description>
This update for python-cryptography fixes the following issues:

- CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte
  values could result in an integer overflow and buffer overflow (bsc#1182066).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-03"/>
	<updated date="2021-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182066">SUSE bug 1182066</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36242/">CVE-2020-36242</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503740" comment="python2-cryptography-2.1.4-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503741" comment="python3-cryptography-2.1.4-4.9.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139827" version="1" class="patch">
	<metadata>
		<title>Security update for wpa_supplicant (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182805" ref_url="https://bugzilla.suse.com/1182805" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27803" ref_url="https://www.suse.com/security/cve/CVE-2021-27803/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008439.html" source="SUSE-SU"/>
		<description>
This update for wpa_supplicant fixes the following issues:

- CVE-2021-27803: Fixed a P2P provision discovery processing vulnerability (bsc#1182805).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-08"/>
	<updated date="2021-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182805">SUSE bug 1182805</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27803/">CVE-2021-27803</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503742" comment="wpa_supplicant-2.9-4.26.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139828" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182279" ref_url="https://bugzilla.suse.com/1182279" source="BUGZILLA"/>
		<reference ref_id="1182408" ref_url="https://bugzilla.suse.com/1182408" source="BUGZILLA"/>
		<reference ref_id="1182411" ref_url="https://bugzilla.suse.com/1182411" source="BUGZILLA"/>
		<reference ref_id="1182412" ref_url="https://bugzilla.suse.com/1182412" source="BUGZILLA"/>
		<reference ref_id="1182413" ref_url="https://bugzilla.suse.com/1182413" source="BUGZILLA"/>
		<reference ref_id="1182415" ref_url="https://bugzilla.suse.com/1182415" source="BUGZILLA"/>
		<reference ref_id="1182416" ref_url="https://bugzilla.suse.com/1182416" source="BUGZILLA"/>
		<reference ref_id="1182417" ref_url="https://bugzilla.suse.com/1182417" source="BUGZILLA"/>
		<reference ref_id="1182418" ref_url="https://bugzilla.suse.com/1182418" source="BUGZILLA"/>
		<reference ref_id="1182419" ref_url="https://bugzilla.suse.com/1182419" source="BUGZILLA"/>
		<reference ref_id="1182420" ref_url="https://bugzilla.suse.com/1182420" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36221" ref_url="https://www.suse.com/security/cve/CVE-2020-36221/" source="CVE"/>
		<reference ref_id="CVE-2020-36222" ref_url="https://www.suse.com/security/cve/CVE-2020-36222/" source="CVE"/>
		<reference ref_id="CVE-2020-36223" ref_url="https://www.suse.com/security/cve/CVE-2020-36223/" source="CVE"/>
		<reference ref_id="CVE-2020-36224" ref_url="https://www.suse.com/security/cve/CVE-2020-36224/" source="CVE"/>
		<reference ref_id="CVE-2020-36225" ref_url="https://www.suse.com/security/cve/CVE-2020-36225/" source="CVE"/>
		<reference ref_id="CVE-2020-36226" ref_url="https://www.suse.com/security/cve/CVE-2020-36226/" source="CVE"/>
		<reference ref_id="CVE-2020-36227" ref_url="https://www.suse.com/security/cve/CVE-2020-36227/" source="CVE"/>
		<reference ref_id="CVE-2020-36228" ref_url="https://www.suse.com/security/cve/CVE-2020-36228/" source="CVE"/>
		<reference ref_id="CVE-2020-36229" ref_url="https://www.suse.com/security/cve/CVE-2020-36229/" source="CVE"/>
		<reference ref_id="CVE-2020-36230" ref_url="https://www.suse.com/security/cve/CVE-2020-36230/" source="CVE"/>
		<reference ref_id="CVE-2021-27212" ref_url="https://www.suse.com/security/cve/CVE-2021-27212/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008438.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-08"/>
	<updated date="2021-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182279">SUSE bug 1182279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182408">SUSE bug 1182408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182411">SUSE bug 1182411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182412">SUSE bug 1182412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182413">SUSE bug 1182413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182415">SUSE bug 1182415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182416">SUSE bug 1182416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182417">SUSE bug 1182417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182418">SUSE bug 1182418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182419">SUSE bug 1182419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182420">SUSE bug 1182420</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36221/">CVE-2020-36221</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36222/">CVE-2020-36222</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36223/">CVE-2020-36223</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36224/">CVE-2020-36224</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36225/">CVE-2020-36225</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36226/">CVE-2020-36226</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36227/">CVE-2020-36227</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36228/">CVE-2020-36228</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36229/">CVE-2020-36229</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36230/">CVE-2020-36230</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27212/">CVE-2021-27212</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503743" comment="libldap-2_4-2-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494200" comment="libldap-2_4-2-32bit-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494201" comment="libldap-data-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503744" comment="openldap2-client-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503745" comment="openldap2-devel-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496620" comment="openldap2-devel-32bit-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503746" comment="openldap2-devel-static-2.4.46-9.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139829" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1163617" ref_url="https://bugzilla.suse.com/1163617" source="BUGZILLA"/>
		<reference ref_id="1170442" ref_url="https://bugzilla.suse.com/1170442" source="BUGZILLA"/>
		<reference ref_id="1176855" ref_url="https://bugzilla.suse.com/1176855" source="BUGZILLA"/>
		<reference ref_id="1179082" ref_url="https://bugzilla.suse.com/1179082" source="BUGZILLA"/>
		<reference ref_id="1179428" ref_url="https://bugzilla.suse.com/1179428" source="BUGZILLA"/>
		<reference ref_id="1179660" ref_url="https://bugzilla.suse.com/1179660" source="BUGZILLA"/>
		<reference ref_id="1180058" ref_url="https://bugzilla.suse.com/1180058" source="BUGZILLA"/>
		<reference ref_id="1180262" ref_url="https://bugzilla.suse.com/1180262" source="BUGZILLA"/>
		<reference ref_id="1180964" ref_url="https://bugzilla.suse.com/1180964" source="BUGZILLA"/>
		<reference ref_id="1181671" ref_url="https://bugzilla.suse.com/1181671" source="BUGZILLA"/>
		<reference ref_id="1181747" ref_url="https://bugzilla.suse.com/1181747" source="BUGZILLA"/>
		<reference ref_id="1181753" ref_url="https://bugzilla.suse.com/1181753" source="BUGZILLA"/>
		<reference ref_id="1181843" ref_url="https://bugzilla.suse.com/1181843" source="BUGZILLA"/>
		<reference ref_id="1181854" ref_url="https://bugzilla.suse.com/1181854" source="BUGZILLA"/>
		<reference ref_id="1182047" ref_url="https://bugzilla.suse.com/1182047" source="BUGZILLA"/>
		<reference ref_id="1182130" ref_url="https://bugzilla.suse.com/1182130" source="BUGZILLA"/>
		<reference ref_id="1182140" ref_url="https://bugzilla.suse.com/1182140" source="BUGZILLA"/>
		<reference ref_id="1182175" ref_url="https://bugzilla.suse.com/1182175" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29374" ref_url="https://www.suse.com/security/cve/CVE-2020-29374/" source="CVE"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-26932" ref_url="https://www.suse.com/security/cve/CVE-2021-26932/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008455.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1181843).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1181753).
- CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping (XSA-361 bsc#1181747).
  by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#178372).
- CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write implementation which could have granted unintended write access
  because of a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).

The following non-security bugs were fixed:

- btrfs: Cleanup try_flush_qgroup (bsc#1182047).
- btrfs: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: fix data bytes_may_use underflow with fallocate due to failed quota reserve (bsc#1182130)
- btrfs: Free correct amount of space in btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Simplify code flow in btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Unlock extents in btrfs_zero_range in case of errors (bsc#1182047).
- Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (git-fixes).
- ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293).
- kernel-binary.spec: Add back initrd and image symlink ghosts to filelist (bsc#1182140). Fixes: 76a9256314c3 ('rpm/kernel-{source,binary}.spec: do not include ghost symlinks (boo#1179082).')
- libnvdimm/dimm: Avoid race between probe and available_slots_show() (bsc#1170442).
- net: bcmgenet: add support for ethtool rxnfc flows (git-fixes).
- net: bcmgenet: code movement (git-fixes).
- net: bcmgenet: fix mask check in bcmgenet_validate_flow() (git-fixes).
- net: bcmgenet: Fix WoL with password after deep sleep (git-fixes).
- net: bcmgenet: re-remove bcmgenet_hfb_add_filter (git-fixes).
- net: bcmgenet: set Rx mode before starting netif (git-fixes).
- net: bcmgenet: use __be16 for htons(ETH_P_IP) (git-fixes).
- net: bcmgenet: Use correct I/O accessors (git-fixes).
- net: lpc-enet: fix error return code in lpc_mii_init() (git-fixes).
- net/mlx4_en: Handle TX error CQE (bsc#1181854).
- net: moxa: Fix a potential double 'free_irq()' (git-fixes).
- net: sun: fix missing release regions in cas_init_one() (git-fixes).
- nvme-multipath: Early exit if no path is available (bsc#1180964).
- rpm/post.sh: Avoid purge-kernel for the first installed kernel (bsc#1180058)
- scsi: target: fix unmap_zeroes_data boolean initialisation (bsc#1163617).
- usb: dwc2: Abort transaction after errors with unknown reason (bsc#1180262).
- usb: dwc2: Do not update data length if it is 0 on inbound transfers (bsc#1180262).
- usb: dwc2: Make 'trimming xfer length' a debug message (bsc#1180262).
- vmxnet3: Remove buf_info from device accessible structures (bsc#1181671).
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).
- xen/netback: fix spurious event detection for common event case (bsc#1182175).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-09"/>
	<updated date="2021-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163617">SUSE bug 1163617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170442">SUSE bug 1170442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176855">SUSE bug 1176855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179082">SUSE bug 1179082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179428">SUSE bug 1179428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179660">SUSE bug 1179660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180058">SUSE bug 1180058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180262">SUSE bug 1180262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180964">SUSE bug 1180964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181671">SUSE bug 1181671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181747">SUSE bug 1181747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181753">SUSE bug 1181753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181843">SUSE bug 1181843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181854">SUSE bug 1181854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182047">SUSE bug 1182047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182130">SUSE bug 1182130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182140">SUSE bug 1182140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182175">SUSE bug 1182175</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29374/">CVE-2020-29374</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26932/">CVE-2021-26932</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504208" comment="kernel-default-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504209" comment="kernel-default-base-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504210" comment="kernel-default-devel-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504211" comment="kernel-devel-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504212" comment="kernel-docs-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504213" comment="kernel-macros-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504214" comment="kernel-obs-build-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504215" comment="kernel-source-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504216" comment="kernel-syms-4.12.14-197.86.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139830" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182331" ref_url="https://bugzilla.suse.com/1182331" source="BUGZILLA"/>
		<reference ref_id="1182333" ref_url="https://bugzilla.suse.com/1182333" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23840" ref_url="https://www.suse.com/security/cve/CVE-2021-23840/" source="CVE"/>
		<reference ref_id="CVE-2021-23841" ref_url="https://www.suse.com/security/cve/CVE-2021-23841/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008447.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333)
- CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-09"/>
	<updated date="2021-03-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1182331">SUSE bug 1182331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182333">SUSE bug 1182333</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-23840/">CVE-2021-23840</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-23841/">CVE-2021-23841</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504217" comment="libopenssl-1_1-devel-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504218" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504219" comment="libopenssl1_1-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504220" comment="libopenssl1_1-32bit-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504221" comment="libopenssl1_1-hmac-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504222" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504223" comment="openssl-1_1-1.1.0i-14.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139831" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183026" ref_url="https://bugzilla.suse.com/1183026" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21300" ref_url="https://www.suse.com/security/cve/CVE-2021-21300/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0757-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008461.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-09"/>
	<updated date="2021-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183026">SUSE bug 1183026</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21300/">CVE-2021-21300</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503764" comment="git-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503765" comment="git-arch-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503766" comment="git-core-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503767" comment="git-cvs-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503768" comment="git-daemon-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496630" comment="git-doc-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503769" comment="git-email-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503770" comment="git-gui-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503771" comment="git-svn-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503772" comment="git-web-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503773" comment="gitk-2.26.2-3.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139832" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182379" ref_url="https://bugzilla.suse.com/1182379" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23336" ref_url="https://www.suse.com/security/cve/CVE-2021-23336/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0768-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018251.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- python27 was upgraded to 2.7.18
- CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-11"/>
	<updated date="2021-03-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1182379">SUSE bug 1182379</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-23336/">CVE-2021-23336</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503774" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503775" comment="python-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503776" comment="python-base-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503777" comment="python-curses-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503778" comment="python-devel-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503779" comment="python-gdbm-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503780" comment="python-tk-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503781" comment="python-xml-2.7.18-7.55.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139833" version="1" class="patch">
	<metadata>
		<title>Security update for glib2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182328" ref_url="https://bugzilla.suse.com/1182328" source="BUGZILLA"/>
		<reference ref_id="1182362" ref_url="https://bugzilla.suse.com/1182362" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27218" ref_url="https://www.suse.com/security/cve/CVE-2021-27218/" source="CVE"/>
		<reference ref_id="CVE-2021-27219" ref_url="https://www.suse.com/security/cve/CVE-2021-27219/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008532.html" source="SUSE-SU"/>
		<description>
This update for glib2 fixes the following issues:

- CVE-2021-27218: g_byte_array_new_take takes a gsize as length but stores in a guint, this patch will refuse if the length is larger than guint. (bsc#1182328)

- CVE-2021-27219: g_memdup takes a guint as parameter and sometimes leads into an integer overflow, so add a g_memdup2 function which uses gsize to replace it. (bsc#1182362)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-19"/>
	<updated date="2021-03-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182328">SUSE bug 1182328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182362">SUSE bug 1182362</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-27218/">CVE-2021-27218</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-27219/">CVE-2021-27219</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503792" comment="glib2-devel-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503793" comment="glib2-lang-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503794" comment="glib2-tools-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503795" comment="libgio-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503796" comment="libgio-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503797" comment="libglib-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503798" comment="libglib-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503799" comment="libgmodule-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503800" comment="libgmodule-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503801" comment="libgobject-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503802" comment="libgobject-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503803" comment="libgthread-2_0-0-2.54.3-4.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139834" version="1" class="patch">
	<metadata>
		<title>Security update for nghttp2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1172442" ref_url="https://bugzilla.suse.com/1172442" source="BUGZILLA"/>
		<reference ref_id="1181358" ref_url="https://bugzilla.suse.com/1181358" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11080" ref_url="https://www.suse.com/security/cve/CVE-2020-11080/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008539.html" source="SUSE-SU"/>
		<description>
This update for nghttp2 fixes the following issues:

- CVE-2020-11080: HTTP/2 Large Settings Frame DoS (bsc#1181358)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172442">SUSE bug 1172442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181358">SUSE bug 1181358</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11080/">CVE-2020-11080</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503804" comment="libnghttp2-14-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503805" comment="libnghttp2-14-32bit-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503806" comment="libnghttp2-devel-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503807" comment="libnghttp2_asio-devel-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503808" comment="libnghttp2_asio1-1.40.0-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139835" version="1" class="patch">
	<metadata>
		<title>Security update for ruby2.5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177125" ref_url="https://bugzilla.suse.com/1177125" source="BUGZILLA"/>
		<reference ref_id="1177222" ref_url="https://bugzilla.suse.com/1177222" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25613" ref_url="https://www.suse.com/security/cve/CVE-2020-25613/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008549.html" source="SUSE-SU"/>
		<description>
This update for ruby2.5 fixes the following issues:

- CVE-2020-25613: Fixed a potential HTTP Request Smuggling  in WEBrick (bsc#1177125).
- Enable optimizations also on ARM64 (bsc#1177222)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177125">SUSE bug 1177125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177222">SUSE bug 1177222</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25613/">CVE-2020-25613</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503809" comment="libruby2_5-2_5-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503810" comment="ruby2.5-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503811" comment="ruby2.5-devel-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503812" comment="ruby2.5-devel-extra-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503813" comment="ruby2.5-stdlib-2.5.8-4.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139836" version="1" class="patch">
	<metadata>
		<title>Security update for gnutls (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183456" ref_url="https://bugzilla.suse.com/1183456" source="BUGZILLA"/>
		<reference ref_id="1183457" ref_url="https://bugzilla.suse.com/1183457" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20231" ref_url="https://www.suse.com/security/cve/CVE-2021-20231/" source="CVE"/>
		<reference ref_id="CVE-2021-20232" ref_url="https://www.suse.com/security/cve/CVE-2021-20232/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008545.html" source="SUSE-SU"/>
		<description>
This update for gnutls fixes the following issues:

- CVE-2021-20232: Fixed a use after free issue which could have led to memory corruption and other potential consequences (bsc#1183456).
- CVE-2021-20231: Fixed a use after free issue which could have led to memory corruption and other potential consequences (bsc#1183457).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183456">SUSE bug 1183456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183457">SUSE bug 1183457</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20231/">CVE-2021-20231</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20232/">CVE-2021-20232</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503814" comment="gnutls-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503815" comment="libgnutls-devel-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503816" comment="libgnutls30-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503817" comment="libgnutls30-32bit-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503818" comment="libgnutls30-hmac-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503819" comment="libgnutls30-hmac-32bit-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503820" comment="libgnutlsxx-devel-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503821" comment="libgnutlsxx28-3.6.7-6.40.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139837" version="1" class="patch">
	<metadata>
		<title>Security update for libass (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177862" ref_url="https://bugzilla.suse.com/1177862" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26682" ref_url="https://www.suse.com/security/cve/CVE-2020-26682/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0936-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008546.html" source="SUSE-SU"/>
		<description>
This update for libass fixes the following issues:

- CVE-2020-26682: Fixed a signed integer overflow in the call to outline_stroke() (bsc#1177862).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177862">SUSE bug 1177862</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26682/">CVE-2020-26682</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503822" comment="libass-devel-0.14.0-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503823" comment="libass9-0.14.0-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139838" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1183333" ref_url="https://bugzilla.suse.com/1183333" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27918" ref_url="https://www.suse.com/security/cve/CVE-2021-27918/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008542.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

- go1.15.10 (released 2021-03-11) (bsc#1175132)
- go1.15.9 (released 2021-03-10) (bsc#1175132)
  - CVE-2021-27918: Fixed an infinite loop when using xml.NewTokenDecoder with a custom TokenReader (bsc#1183333).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183333">SUSE bug 1183333</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27918/">CVE-2021-27918</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504224" comment="go1.15-1.15.10-1.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504225" comment="go1.15-doc-1.15.10-1.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496643" comment="go1.15-race-1.15.10-1.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139839" version="1" class="patch">
	<metadata>
		<title>Security update for ldb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183572" ref_url="https://bugzilla.suse.com/1183572" source="BUGZILLA"/>
		<reference ref_id="1183574" ref_url="https://bugzilla.suse.com/1183574" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27840" ref_url="https://www.suse.com/security/cve/CVE-2020-27840/" source="CVE"/>
		<reference ref_id="CVE-2021-20277" ref_url="https://www.suse.com/security/cve/CVE-2021-20277/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0944-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008557.html" source="SUSE-SU"/>
		<description>
This update for ldb fixes the following issues:

- CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572).
- CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183572">SUSE bug 1183572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183574">SUSE bug 1183574</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27840/">CVE-2020-27840</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20277/">CVE-2021-20277</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504226" comment="ldb-tools-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504227" comment="libldb-devel-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504228" comment="libldb1-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504229" comment="libldb1-32bit-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504230" comment="python-ldb-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504231" comment="python-ldb-devel-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504232" comment="python3-ldb-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504233" comment="python3-ldb-devel-1.4.6-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139840" version="1" class="patch">
	<metadata>
		<title>Security update for libzypp, zypper (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1050625" ref_url="https://bugzilla.suse.com/1050625" source="BUGZILLA"/>
		<reference ref_id="1174016" ref_url="https://bugzilla.suse.com/1174016" source="BUGZILLA"/>
		<reference ref_id="1177238" ref_url="https://bugzilla.suse.com/1177238" source="BUGZILLA"/>
		<reference ref_id="1177275" ref_url="https://bugzilla.suse.com/1177275" source="BUGZILLA"/>
		<reference ref_id="1177427" ref_url="https://bugzilla.suse.com/1177427" source="BUGZILLA"/>
		<reference ref_id="1177583" ref_url="https://bugzilla.suse.com/1177583" source="BUGZILLA"/>
		<reference ref_id="1178910" ref_url="https://bugzilla.suse.com/1178910" source="BUGZILLA"/>
		<reference ref_id="1178966" ref_url="https://bugzilla.suse.com/1178966" source="BUGZILLA"/>
		<reference ref_id="1179083" ref_url="https://bugzilla.suse.com/1179083" source="BUGZILLA"/>
		<reference ref_id="1179222" ref_url="https://bugzilla.suse.com/1179222" source="BUGZILLA"/>
		<reference ref_id="1179816" ref_url="https://bugzilla.suse.com/1179816" source="BUGZILLA"/>
		<reference ref_id="1179847" ref_url="https://bugzilla.suse.com/1179847" source="BUGZILLA"/>
		<reference ref_id="1179909" ref_url="https://bugzilla.suse.com/1179909" source="BUGZILLA"/>
		<reference ref_id="1180077" ref_url="https://bugzilla.suse.com/1180077" source="BUGZILLA"/>
		<reference ref_id="1180663" ref_url="https://bugzilla.suse.com/1180663" source="BUGZILLA"/>
		<reference ref_id="1180721" ref_url="https://bugzilla.suse.com/1180721" source="BUGZILLA"/>
		<reference ref_id="1181328" ref_url="https://bugzilla.suse.com/1181328" source="BUGZILLA"/>
		<reference ref_id="1181622" ref_url="https://bugzilla.suse.com/1181622" source="BUGZILLA"/>
		<reference ref_id="1182629" ref_url="https://bugzilla.suse.com/1182629" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-9271" ref_url="https://www.suse.com/security/cve/CVE-2017-9271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008560.html" source="SUSE-SU"/>
		<description>
This update for libzypp, zypper fixes the following issues:

Update zypper to version 1.14.43:

- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- Fix source-download commands help (bsc#1180663)
- man: Recommend to use the --non-interactive global option rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quiet: Fix install summary to write nothing if there's nothing todo (bsc#1180077)
- Prefer /run over /var/run.

Update libzypp to 17.25.8:

- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommended = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility.
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- CVE-2017-9271: Fixed information leak in the log file (bsc#1050625 bsc#1177583)
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoManager: Carefully tidy up the caches. Remove non-directory entries. (bsc#1178966)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager probe (bsc#1177427).
- RpmDb: If no database exists use the _dbpath configured in rpm.  Still makes sure a compat
  symlink at /var/lib/rpm exists in case the configures _dbpath is elsewhere. (bsc#1178910)
- Fixed update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Fix lsof monitoring (bsc#1179909)
- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-25"/>
	<updated date="2021-03-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1050625">SUSE bug 1050625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174016">SUSE bug 1174016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177238">SUSE bug 1177238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177275">SUSE bug 1177275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177427">SUSE bug 1177427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177583">SUSE bug 1177583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178910">SUSE bug 1178910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178966">SUSE bug 1178966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179083">SUSE bug 1179083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179222">SUSE bug 1179222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179816">SUSE bug 1179816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179847">SUSE bug 1179847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179909">SUSE bug 1179909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180077">SUSE bug 1180077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180663">SUSE bug 1180663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180721">SUSE bug 1180721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181328">SUSE bug 1181328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181622">SUSE bug 1181622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182629">SUSE bug 1182629</bugzilla>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-9271/">CVE-2017-9271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504234" comment="libsigc++2-devel-2.10.0-3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504235" comment="libsigc-2_0-0-2.10.0-3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504236" comment="libsolv-devel-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504237" comment="libsolv-tools-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504238" comment="libyui-ncurses-pkg-devel-2.48.9-7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504239" comment="libyui-ncurses-pkg-doc-2.48.9-7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504240" comment="libyui-ncurses-pkg9-2.48.9-7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504241" comment="libyui-qt-pkg-devel-2.45.28-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504242" comment="libyui-qt-pkg-doc-2.45.28-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504243" comment="libyui-qt-pkg9-2.45.28-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504244" comment="libzypp-17.25.8-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504245" comment="libzypp-devel-17.25.8-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504246" comment="perl-solv-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504247" comment="python3-solv-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504248" comment="ruby-solv-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504249" comment="yast2-pkg-bindings-4.1.3-3.10.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504250" comment="zypper-1.14.43-3.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504251" comment="zypper-log-1.14.43-3.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504252" comment="zypper-needs-restarting-1.14.43-3.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139841" version="1" class="patch">
	<metadata>
		<title>Security update for openvpn (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197341" ref_url="https://bugzilla.suse.com/1197341" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0547" ref_url="https://www.suse.com/security/cve/CVE-2022-0547/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1029-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010558.html" source="SUSE-SU"/>
		<description>
This update for openvpn fixes the following issues:

- CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-29"/>
	<updated date="2022-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197341">SUSE bug 1197341</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-0547/">CVE-2022-0547</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009676860" comment="openvpn-2.4.3-150000.5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676861" comment="openvpn-auth-pam-plugin-2.4.3-150000.5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676862" comment="openvpn-devel-2.4.3-150000.5.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139842" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197417" ref_url="https://bugzilla.suse.com/1197417" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22934" ref_url="https://www.suse.com/security/cve/CVE-2022-22934/" source="CVE"/>
		<reference ref_id="CVE-2022-22935" ref_url="https://www.suse.com/security/cve/CVE-2022-22935/" source="CVE"/>
		<reference ref_id="CVE-2022-22936" ref_url="https://www.suse.com/security/cve/CVE-2022-22936/" source="CVE"/>
		<reference ref_id="CVE-2022-22941" ref_url="https://www.suse.com/security/cve/CVE-2022-22941/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010577.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- CVE-2022-22935: Sign authentication replies to prevent MiTM (bsc#1197417)
- CVE-2022-22934: Sign pillar data to prevent MiTM attacks. (bsc#1197417)
- CVE-2022-22936: Prevent job and fileserver replays (bsc#1197417)
- CVE-2022-22941: Fixed targeting bug, especially visible when using syndic and user auth. (bsc#1197417)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-30"/>
	<updated date="2022-03-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197417">SUSE bug 1197417</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22934/">CVE-2022-22934</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22935/">CVE-2022-22935</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22936/">CVE-2022-22936</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22941/">CVE-2022-22941</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677297" comment="python3-salt-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677298" comment="salt-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677299" comment="salt-api-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677300" comment="salt-bash-completion-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677301" comment="salt-cloud-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677302" comment="salt-doc-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677303" comment="salt-fish-completion-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677304" comment="salt-master-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677305" comment="salt-minion-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677306" comment="salt-proxy-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677307" comment="salt-ssh-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677308" comment="salt-standalone-formulas-configuration-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677309" comment="salt-syndic-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677310" comment="salt-transactional-update-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677311" comment="salt-zsh-completion-3002.2-150100.57.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139843" version="1" class="patch">
	<metadata>
		<title>Security update for zlib (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197459" ref_url="https://bugzilla.suse.com/1197459" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-25032" ref_url="https://www.suse.com/security/cve/CVE-2018-25032/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010582.html" source="SUSE-SU"/>
		<description>
This update for zlib fixes the following issues:

- CVE-2018-25032: Fixed memory corruption on deflate (bsc#1197459).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-30"/>
	<updated date="2022-03-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197459">SUSE bug 1197459</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25032/">CVE-2018-25032</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009676997" comment="libminizip1-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676998" comment="libz1-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676992" comment="libz1-32bit-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676999" comment="minizip-devel-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677000" comment="zlib-devel-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676996" comment="zlib-devel-32bit-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677001" comment="zlib-devel-static-1.2.11-150000.3.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139844" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197698" ref_url="https://bugzilla.suse.com/1197698" source="BUGZILLA"/>
		<reference ref_id="1197903" ref_url="https://bugzilla.suse.com/1197903" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1097" ref_url="https://www.suse.com/security/cve/CVE-2022-1097/" source="CVE"/>
		<reference ref_id="CVE-2022-1196" ref_url="https://www.suse.com/security/cve/CVE-2022-1196/" source="CVE"/>
		<reference ref_id="CVE-2022-24713" ref_url="https://www.suse.com/security/cve/CVE-2022-24713/" source="CVE"/>
		<reference ref_id="CVE-2022-28281" ref_url="https://www.suse.com/security/cve/CVE-2022-28281/" source="CVE"/>
		<reference ref_id="CVE-2022-28282" ref_url="https://www.suse.com/security/cve/CVE-2022-28282/" source="CVE"/>
		<reference ref_id="CVE-2022-28285" ref_url="https://www.suse.com/security/cve/CVE-2022-28285/" source="CVE"/>
		<reference ref_id="CVE-2022-28286" ref_url="https://www.suse.com/security/cve/CVE-2022-28286/" source="CVE"/>
		<reference ref_id="CVE-2022-28289" ref_url="https://www.suse.com/security/cve/CVE-2022-28289/" source="CVE"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.8.0 ESR (bsc#1197903):

MFSA 2022-14 (bsc#1197903)

* CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11 tokens are removed while in use
* CVE-2022-28281: Fixed an out of bounds write due to unexpected WebAuthN Extensions
* CVE-2022-1196: Fixed a use-after-free after VR Process destruction
* CVE-2022-28282: Fixed a use-after-free in DocumentL10n::TranslateDocument
* CVE-2022-28285: Fixed incorrect AliasSet used in JIT Codegen
* CVE-2022-28286: Fixed that iframe contents could be rendered outside the border
* CVE-2022-24713: Fixed a denial of service via complex regular expressions
* CVE-2022-28289: Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8

The following non-security bugs were fixed:
- Adjust rust dependency for SP3 and later. TW uses always the 
  newest version of rust, but we don't, so we can't use the 
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-07"/>
	<updated date="2022-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197698">SUSE bug 1197698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197903">SUSE bug 1197903</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1097/">CVE-2022-1097</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-1196/">CVE-2022-1196</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-24713/">CVE-2022-24713</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28281/">CVE-2022-28281</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-28282/">CVE-2022-28282</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-28285/">CVE-2022-28285</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28286/">CVE-2022-28286</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28289/">CVE-2022-28289</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009678574" comment="MozillaFirefox-91.8.0-150000.150.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678575" comment="MozillaFirefox-devel-91.8.0-150000.150.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678576" comment="MozillaFirefox-translations-common-91.8.0-150000.150.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678577" comment="MozillaFirefox-translations-other-91.8.0-150000.150.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139845" version="1" class="patch">
	<metadata>
		<title>Security update for libsolv, libzypp, zypper (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184501" ref_url="https://bugzilla.suse.com/1184501" source="BUGZILLA"/>
		<reference ref_id="1194848" ref_url="https://bugzilla.suse.com/1194848" source="BUGZILLA"/>
		<reference ref_id="1195999" ref_url="https://bugzilla.suse.com/1195999" source="BUGZILLA"/>
		<reference ref_id="1196061" ref_url="https://bugzilla.suse.com/1196061" source="BUGZILLA"/>
		<reference ref_id="1196317" ref_url="https://bugzilla.suse.com/1196317" source="BUGZILLA"/>
		<reference ref_id="1196368" ref_url="https://bugzilla.suse.com/1196368" source="BUGZILLA"/>
		<reference ref_id="1196514" ref_url="https://bugzilla.suse.com/1196514" source="BUGZILLA"/>
		<reference ref_id="1196925" ref_url="https://bugzilla.suse.com/1196925" source="BUGZILLA"/>
		<reference ref_id="1197134" ref_url="https://bugzilla.suse.com/1197134" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:1131-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010670.html" source="SUSE-SU"/>
		<description>
This update for libsolv, libzypp, zypper fixes the following issues:

Security relevant fix:

- Harden package signature checks (bsc#1184501).

libsolv to 0.7.22:

- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code (bsc#1196514)
- support parsing of Debian's Multi-Arch indicator
- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ('requires' is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime

libzypp to 17.30.0:

- ZConfig: Update solver settings if target changes (bsc#1196368)
- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)

zypper to 1.14.52:

- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-08"/>
	<updated date="2022-04-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184501">SUSE bug 1184501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194848">SUSE bug 1194848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195999">SUSE bug 1195999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196061">SUSE bug 1196061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196317">SUSE bug 1196317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196368">SUSE bug 1196368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196514">SUSE bug 1196514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196925">SUSE bug 1196925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197134">SUSE bug 1197134</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677312" comment="libsolv-devel-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677313" comment="libsolv-tools-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677314" comment="libzypp-17.30.0-150100.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677315" comment="libzypp-devel-17.30.0-150100.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677316" comment="perl-solv-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677317" comment="python3-solv-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677318" comment="ruby-solv-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677319" comment="zypper-1.14.52-150100.3.55.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677320" comment="zypper-log-1.14.52-150100.3.55.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677321" comment="zypper-needs-restarting-1.14.52-150100.3.55.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139846" version="1" class="patch">
	<metadata>
		<title>Security update for libexif (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1172768" ref_url="https://bugzilla.suse.com/1172768" source="BUGZILLA"/>
		<reference ref_id="1172802" ref_url="https://bugzilla.suse.com/1172802" source="BUGZILLA"/>
		<reference ref_id="1178479" ref_url="https://bugzilla.suse.com/1178479" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0181" ref_url="https://www.suse.com/security/cve/CVE-2020-0181/" source="CVE"/>
		<reference ref_id="CVE-2020-0198" ref_url="https://www.suse.com/security/cve/CVE-2020-0198/" source="CVE"/>
		<reference ref_id="CVE-2020-0452" ref_url="https://www.suse.com/security/cve/CVE-2020-0452/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010678.html" source="SUSE-SU"/>
		<description>
This update for libexif fixes the following issues:

- CVE-2020-0181: Fixed an integer overflow that could lead to denial of service
  (bsc#1172802).
- CVE-2020-0198: Fixed and unsigned integer overflow that could lead to denial
  of service (bsc#1172768).
- CVE-2020-0452: Fixed a buffer overflow check that could be optimized away
  by the compiler (bsc#1178479).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-11"/>
	<updated date="2022-04-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172768">SUSE bug 1172768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172802">SUSE bug 1172802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178479">SUSE bug 1178479</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-0181/">CVE-2020-0181</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-0198/">CVE-2020-0198</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0452/">CVE-2020-0452</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677295" comment="libexif-devel-0.6.22-150000.5.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677296" comment="libexif12-0.6.22-150000.5.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139847" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197903" ref_url="https://bugzilla.suse.com/1197903" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1097" ref_url="https://www.suse.com/security/cve/CVE-2022-1097/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010677.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

Mozilla NSS 3.68.3 (bsc#1197903):
  - CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11
    tokens are removed while in use.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-11"/>
	<updated date="2022-04-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197903">SUSE bug 1197903</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1097/">CVE-2022-1097</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009678060" comment="libfreebl3-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678030" comment="libfreebl3-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678061" comment="libfreebl3-hmac-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678032" comment="libfreebl3-hmac-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678062" comment="libsoftokn3-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678034" comment="libsoftokn3-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678063" comment="libsoftokn3-hmac-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678036" comment="libsoftokn3-hmac-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678064" comment="mozilla-nss-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678038" comment="mozilla-nss-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678065" comment="mozilla-nss-certs-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678040" comment="mozilla-nss-certs-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678066" comment="mozilla-nss-devel-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678067" comment="mozilla-nss-sysinit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678068" comment="mozilla-nss-tools-3.68.3-150000.3.67.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139848" version="1" class="patch">
	<metadata>
		<title>Security update for opensc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1114649" ref_url="https://bugzilla.suse.com/1114649" source="BUGZILLA"/>
		<reference ref_id="1191957" ref_url="https://bugzilla.suse.com/1191957" source="BUGZILLA"/>
		<reference ref_id="1191992" ref_url="https://bugzilla.suse.com/1191992" source="BUGZILLA"/>
		<reference ref_id="1192000" ref_url="https://bugzilla.suse.com/1192000" source="BUGZILLA"/>
		<reference ref_id="1192005" ref_url="https://bugzilla.suse.com/1192005" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-42779" ref_url="https://www.suse.com/security/cve/CVE-2021-42779/" source="CVE"/>
		<reference ref_id="CVE-2021-42780" ref_url="https://www.suse.com/security/cve/CVE-2021-42780/" source="CVE"/>
		<reference ref_id="CVE-2021-42781" ref_url="https://www.suse.com/security/cve/CVE-2021-42781/" source="CVE"/>
		<reference ref_id="CVE-2021-42782" ref_url="https://www.suse.com/security/cve/CVE-2021-42782/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010682.html" source="SUSE-SU"/>
		<description>
This update for opensc fixes the following issues:

Security issues fixed:

- CVE-2021-42782: Stack buffer overflow issues in various places (bsc#1191957).
- CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c (bsc#1192000).
- CVE-2021-42780: Fixed use after return in insert_pin() (bsc#1192005).
- CVE-2021-42779: Fixed use after free in sc_file_valid() (bsc#1191992).

Non-security issues fixed: 

- Fixes segmentation fault in 'pkcs11-tool.c'. (bsc#1114649)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-12"/>
	<updated date="2022-04-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1114649">SUSE bug 1114649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191957">SUSE bug 1191957</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191992">SUSE bug 1191992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192000">SUSE bug 1192000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192005">SUSE bug 1192005</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42779/">CVE-2021-42779</cve>
	<cve impact="low" cvss3="2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-42780/">CVE-2021-42780</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42781/">CVE-2021-42781</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42782/">CVE-2021-42782</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677092" comment="opensc-0.19.0-150100.3.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139849" version="1" class="patch">
	<metadata>
		<title>Security update for xz (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198062" ref_url="https://bugzilla.suse.com/1198062" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1271" ref_url="https://www.suse.com/security/cve/CVE-2022-1271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010686.html" source="SUSE-SU"/>
		<description>
This update for xz fixes the following issues:

- CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-12"/>
	<updated date="2022-04-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198062">SUSE bug 1198062</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1271/">CVE-2022-1271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679181" comment="liblzma5-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679124" comment="liblzma5-32bit-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679182" comment="xz-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679183" comment="xz-devel-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679127" comment="xz-lang-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679184" comment="xz-static-devel-5.2.3-150000.4.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139850" version="1" class="patch">
	<metadata>
		<title>Security update for subversion (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197939" ref_url="https://bugzilla.suse.com/1197939" source="BUGZILLA"/>
		<reference ref_id="1197940" ref_url="https://bugzilla.suse.com/1197940" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28544" ref_url="https://www.suse.com/security/cve/CVE-2021-28544/" source="CVE"/>
		<reference ref_id="CVE-2022-24070" ref_url="https://www.suse.com/security/cve/CVE-2022-24070/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010683.html" source="SUSE-SU"/>
		<description>
This update for subversion fixes the following issues:

- CVE-2022-24070: Fixed a memory corruption issue in mod_dav_svn as used by Apache
  HTTP server. This could be exploited by a remote attacker to cause a denegation
  of service (bsc#1197940).
- CVE-2021-28544: Fixed an information leak issue where Subversion servers may
  reveal the original path of files protected by path-based authorization
  (bsc#1197939).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-12"/>
	<updated date="2022-04-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197939">SUSE bug 1197939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197940">SUSE bug 1197940</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28544/">CVE-2021-28544</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-24070/">CVE-2022-24070</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679185" comment="subversion-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679186" comment="subversion-bash-completion-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679187" comment="subversion-devel-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679188" comment="subversion-perl-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679189" comment="subversion-python-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679190" comment="subversion-server-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679191" comment="subversion-tools-1.10.6-150000.3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139851" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193942" ref_url="https://bugzilla.suse.com/1193942" source="BUGZILLA"/>
		<reference ref_id="1193943" ref_url="https://bugzilla.suse.com/1193943" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44224" ref_url="https://www.suse.com/security/cve/CVE-2021-44224/" source="CVE"/>
		<reference ref_id="CVE-2021-44790" ref_url="https://www.suse.com/security/cve/CVE-2021-44790/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010025.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations. (bsc#1193943)
- CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua. (bsc#1193942)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-18"/>
	<updated date="2022-01-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193942">SUSE bug 1193942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193943">SUSE bug 1193943</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-44224/">CVE-2021-44224</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-44790/">CVE-2021-44790</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009662960" comment="apache2-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662961" comment="apache2-devel-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662962" comment="apache2-doc-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662963" comment="apache2-prefork-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662964" comment="apache2-utils-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662965" comment="apache2-worker-2.4.33-3.61.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139852" version="1" class="patch">
	<metadata>
		<title>Security update for gzip (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177047" ref_url="https://bugzilla.suse.com/1177047" source="BUGZILLA"/>
		<reference ref_id="1180713" ref_url="https://bugzilla.suse.com/1180713" source="BUGZILLA"/>
		<reference ref_id="1198062" ref_url="https://bugzilla.suse.com/1198062" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1271" ref_url="https://www.suse.com/security/cve/CVE-2022-1271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1250-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010742.html" source="SUSE-SU"/>
		<description>
This update for gzip fixes the following issues:

- CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)

The following non-security bugs were fixed:

- Fixed an issue when 'gzexe' counts the lines to skip wrong. (bsc#1180713)
- Fixed a potential segfault when zlib acceleration is enabled (bsc#1177047)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-17"/>
	<updated date="2022-04-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177047">SUSE bug 1177047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180713">SUSE bug 1180713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198062">SUSE bug 1198062</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1271/">CVE-2022-1271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679482" comment="gzip-1.10-150000.4.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139853" version="1" class="patch">
	<metadata>
		<title>Security update for openjpeg2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1076314" ref_url="https://bugzilla.suse.com/1076314" source="BUGZILLA"/>
		<reference ref_id="1076967" ref_url="https://bugzilla.suse.com/1076967" source="BUGZILLA"/>
		<reference ref_id="1079845" ref_url="https://bugzilla.suse.com/1079845" source="BUGZILLA"/>
		<reference ref_id="1102016" ref_url="https://bugzilla.suse.com/1102016" source="BUGZILLA"/>
		<reference ref_id="1106881" ref_url="https://bugzilla.suse.com/1106881" source="BUGZILLA"/>
		<reference ref_id="1106882" ref_url="https://bugzilla.suse.com/1106882" source="BUGZILLA"/>
		<reference ref_id="1140130" ref_url="https://bugzilla.suse.com/1140130" source="BUGZILLA"/>
		<reference ref_id="1160782" ref_url="https://bugzilla.suse.com/1160782" source="BUGZILLA"/>
		<reference ref_id="1162090" ref_url="https://bugzilla.suse.com/1162090" source="BUGZILLA"/>
		<reference ref_id="1173578" ref_url="https://bugzilla.suse.com/1173578" source="BUGZILLA"/>
		<reference ref_id="1180457" ref_url="https://bugzilla.suse.com/1180457" source="BUGZILLA"/>
		<reference ref_id="1184774" ref_url="https://bugzilla.suse.com/1184774" source="BUGZILLA"/>
		<reference ref_id="1197738" ref_url="https://bugzilla.suse.com/1197738" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14423" ref_url="https://www.suse.com/security/cve/CVE-2018-14423/" source="CVE"/>
		<reference ref_id="CVE-2018-16375" ref_url="https://www.suse.com/security/cve/CVE-2018-16375/" source="CVE"/>
		<reference ref_id="CVE-2018-16376" ref_url="https://www.suse.com/security/cve/CVE-2018-16376/" source="CVE"/>
		<reference ref_id="CVE-2018-20845" ref_url="https://www.suse.com/security/cve/CVE-2018-20845/" source="CVE"/>
		<reference ref_id="CVE-2018-5727" ref_url="https://www.suse.com/security/cve/CVE-2018-5727/" source="CVE"/>
		<reference ref_id="CVE-2018-5785" ref_url="https://www.suse.com/security/cve/CVE-2018-5785/" source="CVE"/>
		<reference ref_id="CVE-2018-6616" ref_url="https://www.suse.com/security/cve/CVE-2018-6616/" source="CVE"/>
		<reference ref_id="CVE-2020-15389" ref_url="https://www.suse.com/security/cve/CVE-2020-15389/" source="CVE"/>
		<reference ref_id="CVE-2020-27823" ref_url="https://www.suse.com/security/cve/CVE-2020-27823/" source="CVE"/>
		<reference ref_id="CVE-2020-6851" ref_url="https://www.suse.com/security/cve/CVE-2020-6851/" source="CVE"/>
		<reference ref_id="CVE-2020-8112" ref_url="https://www.suse.com/security/cve/CVE-2020-8112/" source="CVE"/>
		<reference ref_id="CVE-2021-29338" ref_url="https://www.suse.com/security/cve/CVE-2021-29338/" source="CVE"/>
		<reference ref_id="CVE-2022-1122" ref_url="https://www.suse.com/security/cve/CVE-2022-1122/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html" source="SUSE-SU"/>
		<description>
This update for openjpeg2 fixes the following issues:

- CVE-2018-5727: Fixed integer overflow vulnerability in theopj_t1_encode_cblks function (bsc#1076314).
- CVE-2018-5785: Fixed integer overflow caused by an out-of-bounds leftshift in the opj_j2k_setup_encoder function (bsc#1076967).
- CVE-2018-6616: Fixed excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c (bsc#1079845).
- CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016).
- CVE-2018-16375: Fixed missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c (bsc#1106882).
- CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881).
- CVE-2018-20845: Fixed division-by-zero in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.ci (bsc#1140130).
- CVE-2020-6851: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor (bsc#1160782).
- CVE-2020-8112: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090).
- CVE-2020-15389: Fixed use-after-free if t a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578).
- CVE-2020-27823: Fixed heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457).
- CVE-2021-29338: Fixed integer overflow that allows remote attackers to crash the application (bsc#1184774).
- CVE-2022-1122: Fixed segmentation fault in opj2_decompress due to uninitialized pointer (bsc#1197738).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-19"/>
	<updated date="2022-04-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076314">SUSE bug 1076314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076967">SUSE bug 1076967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1079845">SUSE bug 1079845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102016">SUSE bug 1102016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106881">SUSE bug 1106881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106882">SUSE bug 1106882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140130">SUSE bug 1140130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160782">SUSE bug 1160782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162090">SUSE bug 1162090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173578">SUSE bug 1173578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180457">SUSE bug 1180457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184774">SUSE bug 1184774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197738">SUSE bug 1197738</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14423/">CVE-2018-14423</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16375/">CVE-2018-16375</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16376/">CVE-2018-16376</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20845/">CVE-2018-20845</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5727/">CVE-2018-5727</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-5785/">CVE-2018-5785</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6616/">CVE-2018-6616</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-15389/">CVE-2020-15389</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27823/">CVE-2020-27823</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6851/">CVE-2020-6851</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-8112/">CVE-2020-8112</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-29338/">CVE-2021-29338</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1122/">CVE-2022-1122</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677921" comment="libopenjp2-7-2.3.0-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677922" comment="openjpeg2-2.3.0-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677923" comment="openjpeg2-devel-2.3.0-150000.3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139854" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189562" ref_url="https://bugzilla.suse.com/1189562" source="BUGZILLA"/>
		<reference ref_id="1193738" ref_url="https://bugzilla.suse.com/1193738" source="BUGZILLA"/>
		<reference ref_id="1194943" ref_url="https://bugzilla.suse.com/1194943" source="BUGZILLA"/>
		<reference ref_id="1195051" ref_url="https://bugzilla.suse.com/1195051" source="BUGZILLA"/>
		<reference ref_id="1195254" ref_url="https://bugzilla.suse.com/1195254" source="BUGZILLA"/>
		<reference ref_id="1195353" ref_url="https://bugzilla.suse.com/1195353" source="BUGZILLA"/>
		<reference ref_id="1196018" ref_url="https://bugzilla.suse.com/1196018" source="BUGZILLA"/>
		<reference ref_id="1196114" ref_url="https://bugzilla.suse.com/1196114" source="BUGZILLA"/>
		<reference ref_id="1196433" ref_url="https://bugzilla.suse.com/1196433" source="BUGZILLA"/>
		<reference ref_id="1196468" ref_url="https://bugzilla.suse.com/1196468" source="BUGZILLA"/>
		<reference ref_id="1196488" ref_url="https://bugzilla.suse.com/1196488" source="BUGZILLA"/>
		<reference ref_id="1196514" ref_url="https://bugzilla.suse.com/1196514" source="BUGZILLA"/>
		<reference ref_id="1196639" ref_url="https://bugzilla.suse.com/1196639" source="BUGZILLA"/>
		<reference ref_id="1196761" ref_url="https://bugzilla.suse.com/1196761" source="BUGZILLA"/>
		<reference ref_id="1196830" ref_url="https://bugzilla.suse.com/1196830" source="BUGZILLA"/>
		<reference ref_id="1196836" ref_url="https://bugzilla.suse.com/1196836" source="BUGZILLA"/>
		<reference ref_id="1196942" ref_url="https://bugzilla.suse.com/1196942" source="BUGZILLA"/>
		<reference ref_id="1196973" ref_url="https://bugzilla.suse.com/1196973" source="BUGZILLA"/>
		<reference ref_id="1197227" ref_url="https://bugzilla.suse.com/1197227" source="BUGZILLA"/>
		<reference ref_id="1197331" ref_url="https://bugzilla.suse.com/1197331" source="BUGZILLA"/>
		<reference ref_id="1197366" ref_url="https://bugzilla.suse.com/1197366" source="BUGZILLA"/>
		<reference ref_id="1197391" ref_url="https://bugzilla.suse.com/1197391" source="BUGZILLA"/>
		<reference ref_id="1198031" ref_url="https://bugzilla.suse.com/1198031" source="BUGZILLA"/>
		<reference ref_id="1198032" ref_url="https://bugzilla.suse.com/1198032" source="BUGZILLA"/>
		<reference ref_id="1198033" ref_url="https://bugzilla.suse.com/1198033" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-39713" ref_url="https://www.suse.com/security/cve/CVE-2021-39713/" source="CVE"/>
		<reference ref_id="CVE-2021-45868" ref_url="https://www.suse.com/security/cve/CVE-2021-45868/" source="CVE"/>
		<reference ref_id="CVE-2022-0812" ref_url="https://www.suse.com/security/cve/CVE-2022-0812/" source="CVE"/>
		<reference ref_id="CVE-2022-0850" ref_url="https://www.suse.com/security/cve/CVE-2022-0850/" source="CVE"/>
		<reference ref_id="CVE-2022-1016" ref_url="https://www.suse.com/security/cve/CVE-2022-1016/" source="CVE"/>
		<reference ref_id="CVE-2022-1048" ref_url="https://www.suse.com/security/cve/CVE-2022-1048/" source="CVE"/>
		<reference ref_id="CVE-2022-23036" ref_url="https://www.suse.com/security/cve/CVE-2022-23036/" source="CVE"/>
		<reference ref_id="CVE-2022-23037" ref_url="https://www.suse.com/security/cve/CVE-2022-23037/" source="CVE"/>
		<reference ref_id="CVE-2022-23038" ref_url="https://www.suse.com/security/cve/CVE-2022-23038/" source="CVE"/>
		<reference ref_id="CVE-2022-23039" ref_url="https://www.suse.com/security/cve/CVE-2022-23039/" source="CVE"/>
		<reference ref_id="CVE-2022-23040" ref_url="https://www.suse.com/security/cve/CVE-2022-23040/" source="CVE"/>
		<reference ref_id="CVE-2022-23041" ref_url="https://www.suse.com/security/cve/CVE-2022-23041/" source="CVE"/>
		<reference ref_id="CVE-2022-23042" ref_url="https://www.suse.com/security/cve/CVE-2022-23042/" source="CVE"/>
		<reference ref_id="CVE-2022-26490" ref_url="https://www.suse.com/security/cve/CVE-2022-26490/" source="CVE"/>
		<reference ref_id="CVE-2022-26966" ref_url="https://www.suse.com/security/cve/CVE-2022-26966/" source="CVE"/>
		<reference ref_id="CVE-2022-28356" ref_url="https://www.suse.com/security/cve/CVE-2022-28356/" source="CVE"/>
		<reference ref_id="CVE-2022-28388" ref_url="https://www.suse.com/security/cve/CVE-2022-28388/" source="CVE"/>
		<reference ref_id="CVE-2022-28389" ref_url="https://www.suse.com/security/cve/CVE-2022-28389/" source="CVE"/>
		<reference ref_id="CVE-2022-28390" ref_url="https://www.suse.com/security/cve/CVE-2022-28390/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1256-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010751.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-28356: Fixed a refcount leak bug in net/llc/af_llc.c (bnc#1197391).
- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution (bsc#1197227).
- CVE-2022-28388: Fixed a double free in drivers/net/can/usb/usb_8dev.c vulnerability in the Linux kernel (bnc#1198032).
- CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel (bnc#1198033).
- CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel (bnc#1198031).
- CVE-2022-0812: Fixed an incorrect header size calculations in xprtrdma (bsc#1196639).
- CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock (bsc#1197331).
- CVE-2022-0850: Fixed a kernel information leak vulnerability in iov_iter.c (bsc#1196761).
- CVE-2022-26966: Fixed an issue in drivers/net/usb/sr9700.c, which allowed attackers to obtain sensitive information from the memory via crafted frame lengths from a USB device (bsc#1196836).
- CVE-2021-45868: Fixed a wrong validation check in fs/quota/quota_tree.c which could lead to an use-after-free if there is a corrupted quota file (bnc#1197366).
- CVE-2021-39713: Fixed a race condition in the network scheduling subsystem which could lead to a use-after-free (bsc#1196973).
- CVE-2022-23036,CVE-2022-23037,CVE-2022-23038,CVE-2022-23039,CVE-2022-23040,CVE-2022-23041,CVE-2022-23042: Fixed multiple issues which could have lead to read/write access to memory pages or denial of service. These issues are related to the Xen PV device frontend drivers (bsc#1196488).
- CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could trigger crash the system or corrupt system memory (bsc#1196830).

The following non-security bugs were fixed:

- ax88179_178a: Fixed memory issues that could be triggered by malicious USB devices (bsc#1196018).
- genirq: Use rcu in kstat_irqs_usr() (bsc#1193738).
- gve/net: Fixed multiple bugfixes (jsc#SLE-23652).
- net/mlx5e: Fix page DMA map/unmap attributes (bsc#1196468).
- net: tipc: validate domain record count on input (bsc#1195254).
- powerpc: Fixed issues related to slow I/O on PowerPC (bsc#1196433).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-19"/>
	<updated date="2022-04-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189562">SUSE bug 1189562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193738">SUSE bug 1193738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194943">SUSE bug 1194943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195051">SUSE bug 1195051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195254">SUSE bug 1195254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195353">SUSE bug 1195353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196018">SUSE bug 1196018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196114">SUSE bug 1196114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196433">SUSE bug 1196433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196468">SUSE bug 1196468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196488">SUSE bug 1196488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196514">SUSE bug 1196514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196639">SUSE bug 1196639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196761">SUSE bug 1196761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196830">SUSE bug 1196830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196836">SUSE bug 1196836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196942">SUSE bug 1196942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196973">SUSE bug 1196973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197227">SUSE bug 1197227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197331">SUSE bug 1197331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197366">SUSE bug 1197366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197391">SUSE bug 1197391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198031">SUSE bug 1198031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198032">SUSE bug 1198032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198033">SUSE bug 1198033</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-39713/">CVE-2021-39713</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45868/">CVE-2021-45868</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0812/">CVE-2022-0812</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0850/">CVE-2022-0850</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1016/">CVE-2022-1016</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1048/">CVE-2022-1048</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23036/">CVE-2022-23036</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23037/">CVE-2022-23037</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23038/">CVE-2022-23038</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23039/">CVE-2022-23039</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23040/">CVE-2022-23040</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23041/">CVE-2022-23041</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23042/">CVE-2022-23042</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26490/">CVE-2022-26490</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26966/">CVE-2022-26966</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-28356/">CVE-2022-28356</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-28388/">CVE-2022-28388</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28389/">CVE-2022-28389</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28390/">CVE-2022-28390</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679861" comment="kernel-default-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679862" comment="kernel-default-base-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679863" comment="kernel-default-devel-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679864" comment="kernel-devel-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679865" comment="kernel-docs-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679866" comment="kernel-macros-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679867" comment="kernel-obs-build-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679868" comment="kernel-source-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679869" comment="kernel-syms-4.12.14-150100.197.111.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139855" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198234" ref_url="https://bugzilla.suse.com/1198234" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24765" ref_url="https://www.suse.com/security/cve/CVE-2022-24765/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010750.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- CVE-2022-24765: Fixed a potential command injection via git worktree (bsc#1198234).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-19"/>
	<updated date="2022-04-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198234">SUSE bug 1198234</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24765/">CVE-2022-24765</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679850" comment="git-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679851" comment="git-arch-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679852" comment="git-core-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679853" comment="git-cvs-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679854" comment="git-daemon-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679855" comment="git-doc-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679856" comment="git-email-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679857" comment="git-gui-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679858" comment="git-svn-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679859" comment="git-web-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679860" comment="gitk-2.26.2-150000.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139856" version="1" class="patch">
	<metadata>
		<title>Security update for SDL (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181201" ref_url="https://bugzilla.suse.com/1181201" source="BUGZILLA"/>
		<reference ref_id="1181202" ref_url="https://bugzilla.suse.com/1181202" source="BUGZILLA"/>
		<reference ref_id="1198001" ref_url="https://bugzilla.suse.com/1198001" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14409" ref_url="https://www.suse.com/security/cve/CVE-2020-14409/" source="CVE"/>
		<reference ref_id="CVE-2020-14410" ref_url="https://www.suse.com/security/cve/CVE-2020-14410/" source="CVE"/>
		<reference ref_id="CVE-2021-33657" ref_url="https://www.suse.com/security/cve/CVE-2021-33657/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010769.html" source="SUSE-SU"/>
		<description>
This update for SDL fixes the following issues:

- CVE-2020-14409: Fixed an integer overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c. (bsc#1181202)
- CVE-2020-14410: Fixed a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c. (bsc#1181201)
- CVE-2021-33657: Fixed a Heap overflow problem in video/SDL_pixels.c. (bsc#1198001)
  		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-20"/>
	<updated date="2022-04-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181201">SUSE bug 1181201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181202">SUSE bug 1181202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198001">SUSE bug 1198001</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14409/">CVE-2020-14409</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14410/">CVE-2020-14410</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33657/">CVE-2021-33657</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679483" comment="libSDL-1_2-0-1.2.15-150000.3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679484" comment="libSDL-devel-1.2.15-150000.3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139857" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191668" ref_url="https://bugzilla.suse.com/1191668" source="BUGZILLA"/>
		<reference ref_id="1192017" ref_url="https://bugzilla.suse.com/1192017" source="BUGZILLA"/>
		<reference ref_id="1192876" ref_url="https://bugzilla.suse.com/1192876" source="BUGZILLA"/>
		<reference ref_id="1193981" ref_url="https://bugzilla.suse.com/1193981" source="BUGZILLA"/>
		<reference ref_id="1194041" ref_url="https://bugzilla.suse.com/1194041" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3975" ref_url="https://www.suse.com/security/cve/CVE-2021-3975/" source="CVE"/>
		<reference ref_id="CVE-2021-4147" ref_url="https://www.suse.com/security/cve/CVE-2021-4147/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0128-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010027.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:

- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)
- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-19"/>
	<updated date="2022-01-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191668">SUSE bug 1191668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192017">SUSE bug 1192017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192876">SUSE bug 1192876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193981">SUSE bug 1193981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194041">SUSE bug 1194041</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3975/">CVE-2021-3975</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4147/">CVE-2021-4147</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663288" comment="libvirt-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663289" comment="libvirt-admin-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663290" comment="libvirt-bash-completion-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663291" comment="libvirt-client-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663292" comment="libvirt-daemon-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663293" comment="libvirt-daemon-config-network-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663294" comment="libvirt-daemon-config-nwfilter-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663295" comment="libvirt-daemon-driver-interface-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663296" comment="libvirt-daemon-driver-libxl-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663297" comment="libvirt-daemon-driver-lxc-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663298" comment="libvirt-daemon-driver-network-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663299" comment="libvirt-daemon-driver-nodedev-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663300" comment="libvirt-daemon-driver-nwfilter-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663301" comment="libvirt-daemon-driver-qemu-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663302" comment="libvirt-daemon-driver-secret-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663303" comment="libvirt-daemon-driver-storage-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663304" comment="libvirt-daemon-driver-storage-core-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663305" comment="libvirt-daemon-driver-storage-disk-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663306" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663307" comment="libvirt-daemon-driver-storage-logical-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663308" comment="libvirt-daemon-driver-storage-mpath-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663309" comment="libvirt-daemon-driver-storage-rbd-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663310" comment="libvirt-daemon-driver-storage-scsi-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663311" comment="libvirt-daemon-hooks-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663312" comment="libvirt-daemon-lxc-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663313" comment="libvirt-daemon-qemu-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663314" comment="libvirt-daemon-xen-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663315" comment="libvirt-devel-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663316" comment="libvirt-doc-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663317" comment="libvirt-libs-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663318" comment="libvirt-lock-sanlock-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663319" comment="libvirt-nss-5.1.0-17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139858" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198136" ref_url="https://bugzilla.suse.com/1198136" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:1293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010785.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

Security hardening, related to Spring Framework vulnerabilities:
    
- Deprecate getResources() and always return null (bsc#1198136).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-21"/>
	<updated date="2022-04-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198136">SUSE bug 1198136</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679648" comment="tomcat-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679649" comment="tomcat-admin-webapps-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679650" comment="tomcat-el-3_0-api-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679651" comment="tomcat-jsp-2_3-api-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679652" comment="tomcat-lib-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679653" comment="tomcat-servlet-4_0-api-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679654" comment="tomcat-webapps-9.0.36-150100.4.76.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139859" version="1" class="patch">
	<metadata>
		<title>Security update for openjpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1102016" ref_url="https://bugzilla.suse.com/1102016" source="BUGZILLA"/>
		<reference ref_id="1106881" ref_url="https://bugzilla.suse.com/1106881" source="BUGZILLA"/>
		<reference ref_id="1162090" ref_url="https://bugzilla.suse.com/1162090" source="BUGZILLA"/>
		<reference ref_id="1173578" ref_url="https://bugzilla.suse.com/1173578" source="BUGZILLA"/>
		<reference ref_id="1180457" ref_url="https://bugzilla.suse.com/1180457" source="BUGZILLA"/>
		<reference ref_id="1184774" ref_url="https://bugzilla.suse.com/1184774" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14423" ref_url="https://www.suse.com/security/cve/CVE-2018-14423/" source="CVE"/>
		<reference ref_id="CVE-2018-16376" ref_url="https://www.suse.com/security/cve/CVE-2018-16376/" source="CVE"/>
		<reference ref_id="CVE-2020-15389" ref_url="https://www.suse.com/security/cve/CVE-2020-15389/" source="CVE"/>
		<reference ref_id="CVE-2020-27823" ref_url="https://www.suse.com/security/cve/CVE-2020-27823/" source="CVE"/>
		<reference ref_id="CVE-2020-8112" ref_url="https://www.suse.com/security/cve/CVE-2020-8112/" source="CVE"/>
		<reference ref_id="CVE-2021-29338" ref_url="https://www.suse.com/security/cve/CVE-2021-29338/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010791.html" source="SUSE-SU"/>
		<description>
This update for openjpeg fixes the following issues:

- CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016).
- CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881).
- CVE-2020-8112: Fixed a heap buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090).
- CVE-2020-15389: Fixed a use-after-free if a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578).
- CVE-2020-27823: Fixed a heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457),
- CVE-2021-29338: Fixed an integer Overflow allows remote attackers to crash the application (bsc#1184774).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-21"/>
	<updated date="2022-04-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1102016">SUSE bug 1102016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106881">SUSE bug 1106881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162090">SUSE bug 1162090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173578">SUSE bug 1173578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180457">SUSE bug 1180457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184774">SUSE bug 1184774</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14423/">CVE-2018-14423</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16376/">CVE-2018-16376</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-15389/">CVE-2020-15389</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27823/">CVE-2020-27823</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-8112/">CVE-2020-8112</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-29338/">CVE-2021-29338</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679723" comment="libopenjpeg1-1.5.2-150000.4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679724" comment="openjpeg-devel-1.5.2-150000.4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139860" version="1" class="patch">
	<metadata>
		<title>Security update for libinput (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198111" ref_url="https://bugzilla.suse.com/1198111" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1215" ref_url="https://www.suse.com/security/cve/CVE-2022-1215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010797.html" source="SUSE-SU"/>
		<description>
This update for libinput fixes the following issues:

- CVE-2022-1215: Fixed a format string vulnerability (bsc#1198111).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-22"/>
	<updated date="2022-04-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198111">SUSE bug 1198111</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1215/">CVE-2022-1215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680285" comment="libinput-devel-1.10.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680286" comment="libinput-tools-1.10.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680287" comment="libinput-udev-1.10.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680288" comment="libinput10-1.10.5-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139861" version="1" class="patch">
	<metadata>
		<title>Security update for dnsmasq (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197872" ref_url="https://bugzilla.suse.com/1197872" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0934" ref_url="https://www.suse.com/security/cve/CVE-2022-0934/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010803.html" source="SUSE-SU"/>
		<description>
This update for dnsmasq fixes the following issues:

- CVE-2022-0934: Fixed an invalid memory access that could lead to remote denial
  of service via crafted packet (bsc#1197872).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-22"/>
	<updated date="2022-04-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197872">SUSE bug 1197872</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-0934/">CVE-2022-0934</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679488" comment="dnsmasq-2.86-150100.7.20.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139862" version="1" class="patch">
	<metadata>
		<title>Security update for SDL2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198001" ref_url="https://bugzilla.suse.com/1198001" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33657" ref_url="https://www.suse.com/security/cve/CVE-2021-33657/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010801.html" source="SUSE-SU"/>
		<description>
This update for SDL2 fixes the following issues:

- CVE-2021-33657: Fixed a heap overflow problem in video/SDL_pixels.c (bsc#1198001).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-22"/>
	<updated date="2022-04-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198001">SUSE bug 1198001</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33657/">CVE-2021-33657</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679485" comment="libSDL2-2_0-0-2.0.8-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679486" comment="libSDL2-devel-2.0.8-150000.3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139863" version="1" class="patch">
	<metadata>
		<title>Security update for python-numpy (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193907" ref_url="https://bugzilla.suse.com/1193907" source="BUGZILLA"/>
		<reference ref_id="1193913" ref_url="https://bugzilla.suse.com/1193913" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33430" ref_url="https://www.suse.com/security/cve/CVE-2021-33430/" source="CVE"/>
		<reference ref_id="CVE-2021-41496" ref_url="https://www.suse.com/security/cve/CVE-2021-41496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0134-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012546.html" source="SUSE-SU"/>
		<description>
This update for python-numpy fixes the following issues:

- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193907">SUSE bug 1193907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193913">SUSE bug 1193913</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33430/">CVE-2021-33430</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41496/">CVE-2021-41496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709943" comment="python3-numpy-1.17.3-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709944" comment="python3-numpy-devel-1.17.3-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663859" comment="python3-numpy-gnu-hpc-1.17.3-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663860" comment="python3-numpy-gnu-hpc-devel-1.17.3-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663861" comment="python3-numpy_1_17_3-gnu-hpc-1.17.3-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663862" comment="python3-numpy_1_17_3-gnu-hpc-devel-1.17.3-10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139864" version="1" class="patch">
	<metadata>
		<title>Security update for busybox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1064976" ref_url="https://bugzilla.suse.com/1064976" source="BUGZILLA"/>
		<reference ref_id="1064978" ref_url="https://bugzilla.suse.com/1064978" source="BUGZILLA"/>
		<reference ref_id="1069412" ref_url="https://bugzilla.suse.com/1069412" source="BUGZILLA"/>
		<reference ref_id="1099260" ref_url="https://bugzilla.suse.com/1099260" source="BUGZILLA"/>
		<reference ref_id="1099263" ref_url="https://bugzilla.suse.com/1099263" source="BUGZILLA"/>
		<reference ref_id="1102912" ref_url="https://bugzilla.suse.com/1102912" source="BUGZILLA"/>
		<reference ref_id="1121426" ref_url="https://bugzilla.suse.com/1121426" source="BUGZILLA"/>
		<reference ref_id="1121428" ref_url="https://bugzilla.suse.com/1121428" source="BUGZILLA"/>
		<reference ref_id="1184522" ref_url="https://bugzilla.suse.com/1184522" source="BUGZILLA"/>
		<reference ref_id="1192869" ref_url="https://bugzilla.suse.com/1192869" source="BUGZILLA"/>
		<reference ref_id="951562" ref_url="https://bugzilla.suse.com/951562" source="BUGZILLA"/>
		<reference ref_id="970662" ref_url="https://bugzilla.suse.com/970662" source="BUGZILLA"/>
		<reference ref_id="970663" ref_url="https://bugzilla.suse.com/970663" source="BUGZILLA"/>
		<reference ref_id="991940" ref_url="https://bugzilla.suse.com/991940" source="BUGZILLA"/>
		<reference ref_id="CVE-2011-5325" ref_url="https://www.suse.com/security/cve/CVE-2011-5325/" source="CVE"/>
		<reference ref_id="CVE-2015-9261" ref_url="https://www.suse.com/security/cve/CVE-2015-9261/" source="CVE"/>
		<reference ref_id="CVE-2016-2147" ref_url="https://www.suse.com/security/cve/CVE-2016-2147/" source="CVE"/>
		<reference ref_id="CVE-2016-2148" ref_url="https://www.suse.com/security/cve/CVE-2016-2148/" source="CVE"/>
		<reference ref_id="CVE-2016-6301" ref_url="https://www.suse.com/security/cve/CVE-2016-6301/" source="CVE"/>
		<reference ref_id="CVE-2017-15873" ref_url="https://www.suse.com/security/cve/CVE-2017-15873/" source="CVE"/>
		<reference ref_id="CVE-2017-15874" ref_url="https://www.suse.com/security/cve/CVE-2017-15874/" source="CVE"/>
		<reference ref_id="CVE-2017-16544" ref_url="https://www.suse.com/security/cve/CVE-2017-16544/" source="CVE"/>
		<reference ref_id="CVE-2018-1000500" ref_url="https://www.suse.com/security/cve/CVE-2018-1000500/" source="CVE"/>
		<reference ref_id="CVE-2018-1000517" ref_url="https://www.suse.com/security/cve/CVE-2018-1000517/" source="CVE"/>
		<reference ref_id="CVE-2018-20679" ref_url="https://www.suse.com/security/cve/CVE-2018-20679/" source="CVE"/>
		<reference ref_id="CVE-2019-5747" ref_url="https://www.suse.com/security/cve/CVE-2019-5747/" source="CVE"/>
		<reference ref_id="CVE-2021-28831" ref_url="https://www.suse.com/security/cve/CVE-2021-28831/" source="CVE"/>
		<reference ref_id="CVE-2021-42373" ref_url="https://www.suse.com/security/cve/CVE-2021-42373/" source="CVE"/>
		<reference ref_id="CVE-2021-42374" ref_url="https://www.suse.com/security/cve/CVE-2021-42374/" source="CVE"/>
		<reference ref_id="CVE-2021-42375" ref_url="https://www.suse.com/security/cve/CVE-2021-42375/" source="CVE"/>
		<reference ref_id="CVE-2021-42376" ref_url="https://www.suse.com/security/cve/CVE-2021-42376/" source="CVE"/>
		<reference ref_id="CVE-2021-42377" ref_url="https://www.suse.com/security/cve/CVE-2021-42377/" source="CVE"/>
		<reference ref_id="CVE-2021-42378" ref_url="https://www.suse.com/security/cve/CVE-2021-42378/" source="CVE"/>
		<reference ref_id="CVE-2021-42379" ref_url="https://www.suse.com/security/cve/CVE-2021-42379/" source="CVE"/>
		<reference ref_id="CVE-2021-42380" ref_url="https://www.suse.com/security/cve/CVE-2021-42380/" source="CVE"/>
		<reference ref_id="CVE-2021-42381" ref_url="https://www.suse.com/security/cve/CVE-2021-42381/" source="CVE"/>
		<reference ref_id="CVE-2021-42382" ref_url="https://www.suse.com/security/cve/CVE-2021-42382/" source="CVE"/>
		<reference ref_id="CVE-2021-42383" ref_url="https://www.suse.com/security/cve/CVE-2021-42383/" source="CVE"/>
		<reference ref_id="CVE-2021-42384" ref_url="https://www.suse.com/security/cve/CVE-2021-42384/" source="CVE"/>
		<reference ref_id="CVE-2021-42385" ref_url="https://www.suse.com/security/cve/CVE-2021-42385/" source="CVE"/>
		<reference ref_id="CVE-2021-42386" ref_url="https://www.suse.com/security/cve/CVE-2021-42386/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<description>
This update for busybox fixes the following issues:

- CVE-2011-5325: Fixed tar directory traversal (bsc#951562).
- CVE-2015-9261: Fixed segfalts and application crashes in huft_build (bsc#1102912).
- CVE-2016-2147: Fixed out of bounds write (heap) due to integer underflow in udhcpc (bsc#970663).
- CVE-2016-2148: Fixed heap-based buffer overflow in OPTION_6RD parsing (bsc#970662).
- CVE-2016-6301: Fixed NTP server denial of service flaw (bsc#991940).
- CVE-2017-15873: Fixed integer overflow in get_next_block function in archival/libarchive/decompress_bunzip2.c (bsc#1064976).
- CVE-2017-15874: Fixed integer underflow in archival/libarchive/decompress_unlzma.c (bsc#1064978).
- CVE-2017-16544: Fixed Insufficient sanitization of filenames when autocompleting (bsc#1069412).
- CVE-2018-1000500 : Fixed missing SSL certificate validation in wget (bsc#1099263).
- CVE-2018-1000517: Fixed heap-based buffer overflow in the retrieve_file_data() (bsc#1099260).
- CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426).
- CVE-2019-5747: Fixed out of bounds read in udhcp components (bsc#1121428).
- CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522).
- CVE-2021-42373: Fixed NULL pointer dereference in man leading to DoS when a section name is supplied but no page argument is given (bsc#1192869).
- CVE-2021-42374: Fixed out-of-bounds heap read in unlzma leading to information leak and DoS when crafted LZMA-compressed input is decompressed (bsc#1192869).
- CVE-2021-42375: Fixed incorrect handling of a special element in ash leading to DoS when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters (bsc#1192869).
- CVE-2021-42376: Fixed NULL pointer dereference in hush leading to DoS when processing a crafted shell command (bsc#1192869).
- CVE-2021-42377: Fixed attacker-controlled pointer free in hush leading to DoS and possible code execution when processing a crafted shell command (bsc#1192869).
- CVE-2021-42378: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the getvar_i function (bsc#1192869).
- CVE-2021-42379: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the next_input_file function (bsc#1192869).
- CVE-2021-42380: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the clrvar function (bsc#1192869).
- CVE-2021-42381: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the hash_init function (bsc#1192869).
- CVE-2021-42382: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the getvar_s function (bsc#1192869).
- CVE-2021-42383: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the evaluate function (bsc#1192869).
- CVE-2021-42384: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the handle_special function (bsc#1192869).
- CVE-2021-42385: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the evaluate function (bsc#1192869).
- CVE-2021-42386: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the nvalloc function (bsc#1192869).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-20"/>
	<updated date="2022-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1064976">SUSE bug 1064976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064978">SUSE bug 1064978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069412">SUSE bug 1069412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099260">SUSE bug 1099260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099263">SUSE bug 1099263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102912">SUSE bug 1102912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121426">SUSE bug 1121426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121428">SUSE bug 1121428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184522">SUSE bug 1184522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192869">SUSE bug 1192869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951562">SUSE bug 951562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970662">SUSE bug 970662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970663">SUSE bug 970663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991940">SUSE bug 991940</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2011-5325/">CVE-2011-5325</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9261/">CVE-2015-9261</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2147/">CVE-2016-2147</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2148/">CVE-2016-2148</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6301/">CVE-2016-6301</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15873/">CVE-2017-15873</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15874/">CVE-2017-15874</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16544/">CVE-2017-16544</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000500/">CVE-2018-1000500</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000517/">CVE-2018-1000517</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20679/">CVE-2018-20679</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5747/">CVE-2019-5747</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28831/">CVE-2021-28831</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42373/">CVE-2021-42373</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42374/">CVE-2021-42374</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42375/">CVE-2021-42375</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42376/">CVE-2021-42376</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42377/">CVE-2021-42377</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42378/">CVE-2021-42378</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42379/">CVE-2021-42379</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42380/">CVE-2021-42380</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42381/">CVE-2021-42381</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42382/">CVE-2021-42382</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42383/">CVE-2021-42383</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42384/">CVE-2021-42384</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42385/">CVE-2021-42385</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42386/">CVE-2021-42386</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663736" comment="busybox-1.34.1-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663741" comment="busybox-static-1.34.1-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139865" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194547" ref_url="https://bugzilla.suse.com/1194547" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4140" ref_url="https://www.suse.com/security/cve/CVE-2021-4140/" source="CVE"/>
		<reference ref_id="CVE-2022-22737" ref_url="https://www.suse.com/security/cve/CVE-2022-22737/" source="CVE"/>
		<reference ref_id="CVE-2022-22738" ref_url="https://www.suse.com/security/cve/CVE-2022-22738/" source="CVE"/>
		<reference ref_id="CVE-2022-22739" ref_url="https://www.suse.com/security/cve/CVE-2022-22739/" source="CVE"/>
		<reference ref_id="CVE-2022-22740" ref_url="https://www.suse.com/security/cve/CVE-2022-22740/" source="CVE"/>
		<reference ref_id="CVE-2022-22741" ref_url="https://www.suse.com/security/cve/CVE-2022-22741/" source="CVE"/>
		<reference ref_id="CVE-2022-22742" ref_url="https://www.suse.com/security/cve/CVE-2022-22742/" source="CVE"/>
		<reference ref_id="CVE-2022-22743" ref_url="https://www.suse.com/security/cve/CVE-2022-22743/" source="CVE"/>
		<reference ref_id="CVE-2022-22744" ref_url="https://www.suse.com/security/cve/CVE-2022-22744/" source="CVE"/>
		<reference ref_id="CVE-2022-22745" ref_url="https://www.suse.com/security/cve/CVE-2022-22745/" source="CVE"/>
		<reference ref_id="CVE-2022-22746" ref_url="https://www.suse.com/security/cve/CVE-2022-22746/" source="CVE"/>
		<reference ref_id="CVE-2022-22747" ref_url="https://www.suse.com/security/cve/CVE-2022-22747/" source="CVE"/>
		<reference ref_id="CVE-2022-22748" ref_url="https://www.suse.com/security/cve/CVE-2022-22748/" source="CVE"/>
		<reference ref_id="CVE-2022-22751" ref_url="https://www.suse.com/security/cve/CVE-2022-22751/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0137-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021405.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- CVE-2021-4140: Fixed iframe sandbox bypass with XSLT (bsc#1194547).
- CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547).
- CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur (bsc#1194547).
- CVE-2022-22739: Fixed missing throttling on external protocol launch dialog (bsc#1194547).
- CVE-2022-22740: Fixed use-after-free of ChannelEventQueue::mOwner (bsc#1194547).
- CVE-2022-22741: Fixed browser window spoof using fullscreen mode (bsc#1194547).
- CVE-2022-22742: Fixed out-of-bounds memory access when inserting text in edit mode (bsc#1194547).
- CVE-2022-22743: Fixed browser window spoof using fullscreen mode (bsc#1194547).
- CVE-2022-22744: Fixed possible command injection via the 'Copy as curl' feature in DevTools (bsc#1194547).
- CVE-2022-22745: Fixed leaking cross-origin URLs through securitypolicyviolation event (bsc#1194547).
- CVE-2022-22746: Fixed calling into reportValidity could have lead to fullscreen window spoof (bsc#1194547).
- CVE-2022-22747: Fixed crash when handling empty pkcs7 sequence(bsc#1194547).
- CVE-2022-22748: Fixed spoofed origin on external protocol launch dialog (bsc#1194547).
- CVE-2022-22751: Fixed memory safety bugs (bsc#1194547).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-20"/>
	<updated date="2022-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194547">SUSE bug 1194547</bugzilla>
	<cve impact="moderate" cvss3="10/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4140/">CVE-2021-4140</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22737/">CVE-2022-22737</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22738/">CVE-2022-22738</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22739/">CVE-2022-22739</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22740/">CVE-2022-22740</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22741/">CVE-2022-22741</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22742/">CVE-2022-22742</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-22743/">CVE-2022-22743</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22744/">CVE-2022-22744</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22745/">CVE-2022-22745</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22746/">CVE-2022-22746</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-22747/">CVE-2022-22747</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22748/">CVE-2022-22748</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22751/">CVE-2022-22751</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663737" comment="MozillaFirefox-91.5.0-150.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663738" comment="MozillaFirefox-devel-91.5.0-150.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663739" comment="MozillaFirefox-translations-common-91.5.0-150.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663740" comment="MozillaFirefox-translations-other-91.5.0-150.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139866" version="1" class="patch">
	<metadata>
		<title>Security update for cifs-utils (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197216" ref_url="https://bugzilla.suse.com/1197216" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-27239" ref_url="https://www.suse.com/security/cve/CVE-2022-27239/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010845.html" source="SUSE-SU"/>
		<description>
This update for cifs-utils fixes the following issues:

- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-27"/>
	<updated date="2022-04-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197216">SUSE bug 1197216</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-27239/">CVE-2022-27239</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009681178" comment="cifs-utils-6.9-150100.5.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009681179" comment="cifs-utils-devel-6.9-150100.5.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139867" version="1" class="patch">
	<metadata>
		<title>Security update for aide (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194735" ref_url="https://bugzilla.suse.com/1194735" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-45417" ref_url="https://www.suse.com/security/cve/CVE-2021-45417/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010046.html" source="SUSE-SU"/>
		<description>
This update for aide fixes the following issues:

- CVE-2021-45417: Fix a bufferoverflow in base64 functions (bsc#1194735)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-21"/>
	<updated date="2022-01-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194735">SUSE bug 1194735</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-45417/">CVE-2021-45417</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664168" comment="aide-0.16-24.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139868" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196133" ref_url="https://bugzilla.suse.com/1196133" source="BUGZILLA"/>
		<reference ref_id="1198290" ref_url="https://bugzilla.suse.com/1198290" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22594" ref_url="https://www.suse.com/security/cve/CVE-2022-22594/" source="CVE"/>
		<reference ref_id="CVE-2022-22624" ref_url="https://www.suse.com/security/cve/CVE-2022-22624/" source="CVE"/>
		<reference ref_id="CVE-2022-22628" ref_url="https://www.suse.com/security/cve/CVE-2022-22628/" source="CVE"/>
		<reference ref_id="CVE-2022-22629" ref_url="https://www.suse.com/security/cve/CVE-2022-22629/" source="CVE"/>
		<reference ref_id="CVE-2022-22637" ref_url="https://www.suse.com/security/cve/CVE-2022-22637/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010915.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.36.0 (bsc#1198290):

- CVE-2022-22624: Fixed use after free that may lead to arbitrary code execution.
- CVE-2022-22628: Fixed use after free that may lead to arbitrary code execution.
- CVE-2022-22629: Fixed a buffer overflow that may lead to arbitrary code execution.
- CVE-2022-22637: Fixed an unexpected cross-origin behavior due to a logic error.

Missing CVE reference for the update to 2.34.6 (bsc#1196133):

- CVE-2022-22594: Fixed a cross-origin issue in the IndexDB API.   
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-03"/>
	<updated date="2022-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196133">SUSE bug 1196133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198290">SUSE bug 1198290</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22594/">CVE-2022-22594</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22624/">CVE-2022-22624</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22628/">CVE-2022-22628</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22629/">CVE-2022-22629</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22637/">CVE-2022-22637</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680321" comment="libjavascriptcoregtk-4_0-18-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680322" comment="libwebkit2gtk-4_0-37-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680323" comment="libwebkit2gtk3-lang-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680324" comment="typelib-1_0-JavaScriptCore-4_0-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680325" comment="typelib-1_0-WebKit2-4_0-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680326" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680327" comment="webkit2gtk-4_0-injected-bundles-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680328" comment="webkit2gtk3-devel-2.36.0-150000.3.100.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139869" version="1" class="patch">
	<metadata>
		<title>Security update for ruby2.5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188160" ref_url="https://bugzilla.suse.com/1188160" source="BUGZILLA"/>
		<reference ref_id="1188161" ref_url="https://bugzilla.suse.com/1188161" source="BUGZILLA"/>
		<reference ref_id="1190375" ref_url="https://bugzilla.suse.com/1190375" source="BUGZILLA"/>
		<reference ref_id="1193035" ref_url="https://bugzilla.suse.com/1193035" source="BUGZILLA"/>
		<reference ref_id="1198441" ref_url="https://bugzilla.suse.com/1198441" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31799" ref_url="https://www.suse.com/security/cve/CVE-2021-31799/" source="CVE"/>
		<reference ref_id="CVE-2021-31810" ref_url="https://www.suse.com/security/cve/CVE-2021-31810/" source="CVE"/>
		<reference ref_id="CVE-2021-32066" ref_url="https://www.suse.com/security/cve/CVE-2021-32066/" source="CVE"/>
		<reference ref_id="CVE-2021-41817" ref_url="https://www.suse.com/security/cve/CVE-2021-41817/" source="CVE"/>
		<reference ref_id="CVE-2022-28739" ref_url="https://www.suse.com/security/cve/CVE-2022-28739/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010920.html" source="SUSE-SU"/>
		<description>
This update for ruby2.5 fixes the following issues:

- CVE-2022-28739: Fixed a buffer overrun in String-to-Float conversion (bsc#1198441).
- CVE-2021-41817: Fixed a regular expression denial of service in Date Parsing Methods (bsc#1193035).
- CVE-2021-32066: Fixed a StartTLS stripping vulnerability in Net:IMAP (bsc#1188160).
- CVE-2021-31810: Fixed a trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161).
- CVE-2021-31799: Fixed a command injection vulnerability in RDoc (bsc#1190375). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-03"/>
	<updated date="2022-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188160">SUSE bug 1188160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188161">SUSE bug 1188161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190375">SUSE bug 1190375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193035">SUSE bug 1193035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198441">SUSE bug 1198441</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31799/">CVE-2021-31799</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-31810/">CVE-2021-31810</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-32066/">CVE-2021-32066</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-41817/">CVE-2021-41817</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-28739/">CVE-2022-28739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680329" comment="libruby2_5-2_5-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680330" comment="ruby2.5-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680331" comment="ruby2.5-devel-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680332" comment="ruby2.5-devel-extra-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680333" comment="ruby2.5-stdlib-2.5.9-150000.4.23.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139870" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198671" ref_url="https://bugzilla.suse.com/1198671" source="BUGZILLA"/>
		<reference ref_id="1198672" ref_url="https://bugzilla.suse.com/1198672" source="BUGZILLA"/>
		<reference ref_id="1198673" ref_url="https://bugzilla.suse.com/1198673" source="BUGZILLA"/>
		<reference ref_id="1198674" ref_url="https://bugzilla.suse.com/1198674" source="BUGZILLA"/>
		<reference ref_id="1198675" ref_url="https://bugzilla.suse.com/1198675" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21426" ref_url="https://www.suse.com/security/cve/CVE-2022-21426/" source="CVE"/>
		<reference ref_id="CVE-2022-21434" ref_url="https://www.suse.com/security/cve/CVE-2022-21434/" source="CVE"/>
		<reference ref_id="CVE-2022-21443" ref_url="https://www.suse.com/security/cve/CVE-2022-21443/" source="CVE"/>
		<reference ref_id="CVE-2022-21476" ref_url="https://www.suse.com/security/cve/CVE-2022-21476/" source="CVE"/>
		<reference ref_id="CVE-2022-21496" ref_url="https://www.suse.com/security/cve/CVE-2022-21496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010919.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- CVE-2022-21426: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198672).
- CVE-2022-21434: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198674).
- CVE-2022-21496: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198673).
- CVE-2022-21443: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198675).
- CVE-2022-21476: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198671).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-03"/>
	<updated date="2022-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198671">SUSE bug 1198671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198672">SUSE bug 1198672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198673">SUSE bug 1198673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198674">SUSE bug 1198674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198675">SUSE bug 1198675</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21426/">CVE-2022-21426</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21434/">CVE-2022-21434</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21443/">CVE-2022-21443</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21476/">CVE-2022-21476</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21496/">CVE-2022-21496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680334" comment="java-11-openjdk-11.0.15.0-150000.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680335" comment="java-11-openjdk-demo-11.0.15.0-150000.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680336" comment="java-11-openjdk-devel-11.0.15.0-150000.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680337" comment="java-11-openjdk-headless-11.0.15.0-150000.3.80.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139871" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188891" ref_url="https://bugzilla.suse.com/1188891" source="BUGZILLA"/>
		<reference ref_id="1189547" ref_url="https://bugzilla.suse.com/1189547" source="BUGZILLA"/>
		<reference ref_id="1190269" ref_url="https://bugzilla.suse.com/1190269" source="BUGZILLA"/>
		<reference ref_id="1190274" ref_url="https://bugzilla.suse.com/1190274" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29980" ref_url="https://www.suse.com/security/cve/CVE-2021-29980/" source="CVE"/>
		<reference ref_id="CVE-2021-29981" ref_url="https://www.suse.com/security/cve/CVE-2021-29981/" source="CVE"/>
		<reference ref_id="CVE-2021-29982" ref_url="https://www.suse.com/security/cve/CVE-2021-29982/" source="CVE"/>
		<reference ref_id="CVE-2021-29983" ref_url="https://www.suse.com/security/cve/CVE-2021-29983/" source="CVE"/>
		<reference ref_id="CVE-2021-29984" ref_url="https://www.suse.com/security/cve/CVE-2021-29984/" source="CVE"/>
		<reference ref_id="CVE-2021-29985" ref_url="https://www.suse.com/security/cve/CVE-2021-29985/" source="CVE"/>
		<reference ref_id="CVE-2021-29986" ref_url="https://www.suse.com/security/cve/CVE-2021-29986/" source="CVE"/>
		<reference ref_id="CVE-2021-29987" ref_url="https://www.suse.com/security/cve/CVE-2021-29987/" source="CVE"/>
		<reference ref_id="CVE-2021-29988" ref_url="https://www.suse.com/security/cve/CVE-2021-29988/" source="CVE"/>
		<reference ref_id="CVE-2021-29989" ref_url="https://www.suse.com/security/cve/CVE-2021-29989/" source="CVE"/>
		<reference ref_id="CVE-2021-29990" ref_url="https://www.suse.com/security/cve/CVE-2021-29990/" source="CVE"/>
		<reference ref_id="CVE-2021-29991" ref_url="https://www.suse.com/security/cve/CVE-2021-29991/" source="CVE"/>
		<reference ref_id="CVE-2021-38492" ref_url="https://www.suse.com/security/cve/CVE-2021-38492/" source="CVE"/>
		<reference ref_id="CVE-2021-38495" ref_url="https://www.suse.com/security/cve/CVE-2021-38495/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010973.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

This update contains the Firefox Extended Support Release 91.1.0 ESR.

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-40 (bsc#1190269, bsc#1190274):

* CVE-2021-38492: Navigating to `mk:` URL scheme could load Internet Explorer
* CVE-2021-38495: Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1

Firefox 91.0.1esr ESR

* Fixed: Fixed an issue causing buttons on the tab bar to be
  resized when loading certain websites (bug 1704404)
* Fixed: Fixed an issue which caused tabs from private windows
  to be visible in non-private windows when viewing switch-to-
  tab results in the address bar panel (bug 1720369)
* Fixed: Various stability fixes
* Fixed: Security fix MFSA 2021-37 (bsc#1189547)
* CVE-2021-29991 (bmo#1724896)
  Header Splitting possible with HTTP/3 Responses

Firefox Extended Support Release 91.0 ESR

* New: Some of the highlights of the new Extended Support Release are:

  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded 'just in time' if you decide to 'Log in with Facebook'
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We’ve improved functionality and design for a number of
    Firefox search features:
    * Selecting a search engine at the bottom of the search
      panel now enters search mode for that engine, allowing you to
      see suggestions (if available) for your search terms. The old
      behavior (immediately performing a search) is available with
      a shift-click.
    * When Firefox autocompletes the URL of one of your search
      engines, you can now search with that engine directly in the
      address bar by selecting the shortcut in the address bar
      results.
    * We’ve added buttons at the bottom of the search panel to
      allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
* Changed: Firefox no longer supports Adobe Flash. There is no
  setting available to re-enable Flash support.
* Enterprise: Various bug fixes and new policies have been
  implemented in the latest version of Firefox. See more
  details in the Firefox for Enterprise 91 Release Notes.

  MFSA 2021-33 (bsc#1188891):

* CVE-2021-29986: Race condition when resolving DNS names could have led to
  memory corruption
* CVE-2021-29981: Live range splitting could have led to conflicting
  assignments in the JIT
* CVE-2021-29988: Memory corruption as a result of incorrect style treatment
* CVE-2021-29983: Firefox for Android could get stuck in fullscreen mode
* CVE-2021-29984: Incorrect instruction reordering during JIT optimization
* CVE-2021-29980: Uninitialized memory in a canvas object could have led to
  memory corruption
* CVE-2021-29987: Users could have been tricked into accepting unwanted
  permissions on Linux
* CVE-2021-29985: Use-after-free media channels
* CVE-2021-29982: Single bit data leak due to incorrect JIT optimization and
  type confusion
* CVE-2021-29989: Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
* CVE-2021-29990: Memory safety bugs fixed in Firefox 91
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-09"/>
	<updated date="2022-05-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188891">SUSE bug 1188891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189547">SUSE bug 1189547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190269">SUSE bug 1190269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190274">SUSE bug 1190274</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29980/">CVE-2021-29980</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29981/">CVE-2021-29981</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29982/">CVE-2021-29982</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29983/">CVE-2021-29983</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29984/">CVE-2021-29984</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29985/">CVE-2021-29985</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29986/">CVE-2021-29986</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29987/">CVE-2021-29987</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29988/">CVE-2021-29988</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29989/">CVE-2021-29989</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29990/">CVE-2021-29990</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29991/">CVE-2021-29991</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38492/">CVE-2021-38492</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38495/">CVE-2021-38495</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009682419" comment="MozillaFirefox-91.9.0-150000.150.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682420" comment="MozillaFirefox-devel-91.9.0-150000.150.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682421" comment="MozillaFirefox-translations-common-91.9.0-150000.150.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682422" comment="MozillaFirefox-translations-other-91.9.0-150000.150.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139872" version="1" class="patch">
	<metadata>
		<title>Security update for gzip (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="CVE-2022-1271" ref_url="https://www.suse.com/security/cve/CVE-2022-1271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011021.html" source="SUSE-SU"/>
		<description>
This update for gzip fixes the following issues:

- CVE-2022-1271: Add hardening for zgrep. (bsc#1198062)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-16"/>
	<updated date="2022-05-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1271/">CVE-2022-1271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682433" comment="gzip-1.10-150000.4.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139873" version="1" class="patch">
	<metadata>
		<title>Security update for e2fsprogs (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198446" ref_url="https://bugzilla.suse.com/1198446" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1304" ref_url="https://www.suse.com/security/cve/CVE-2022-1304/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1688-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011031.html" source="SUSE-SU"/>
		<description>
This update for e2fsprogs fixes the following issues:

- CVE-2022-1304: Fixed out-of-bounds read/write leading to segmentation fault
  and possibly arbitrary code execution. (bsc#1198446)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-16"/>
	<updated date="2022-05-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198446">SUSE bug 1198446</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-1304/">CVE-2022-1304</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009682231" comment="e2fsprogs-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682232" comment="e2fsprogs-devel-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682233" comment="libcom_err-devel-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682234" comment="libcom_err-devel-static-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682235" comment="libcom_err2-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682218" comment="libcom_err2-32bit-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682236" comment="libext2fs-devel-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682237" comment="libext2fs-devel-static-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682238" comment="libext2fs2-1.43.8-150000.4.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139874" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193930" ref_url="https://bugzilla.suse.com/1193930" source="BUGZILLA"/>
		<reference ref_id="1196441" ref_url="https://bugzilla.suse.com/1196441" source="BUGZILLA"/>
		<reference ref_id="1197284" ref_url="https://bugzilla.suse.com/1197284" source="BUGZILLA"/>
		<reference ref_id="1197517" ref_url="https://bugzilla.suse.com/1197517" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43565" ref_url="https://www.suse.com/security/cve/CVE-2021-43565/" source="CVE"/>
		<reference ref_id="CVE-2022-23648" ref_url="https://www.suse.com/security/cve/CVE-2022-23648/" source="CVE"/>
		<reference ref_id="CVE-2022-24769" ref_url="https://www.suse.com/security/cve/CVE-2022-24769/" source="CVE"/>
		<reference ref_id="CVE-2022-27191" ref_url="https://www.suse.com/security/cve/CVE-2022-27191/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011030.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker fixes the following issues:

- CVE-2022-24769: Fixed incorrect default inheritable capabilities (bsc#1197517).
- CVE-2022-23648: Fixed directory traversal issue (bsc#1196441).
- CVE-2022-27191: Fixed a crash in a golang.org/x/crypto/ssh server (bsc#1197284).
- CVE-2021-43565: Fixed a panic in golang.org/x/crypto by empty plaintext packet (bsc#1193930).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-16"/>
	<updated date="2022-05-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193930">SUSE bug 1193930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196441">SUSE bug 1196441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197284">SUSE bug 1197284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197517">SUSE bug 1197517</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43565/">CVE-2021-43565</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23648/">CVE-2022-23648</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-24769/">CVE-2022-24769</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27191/">CVE-2022-27191</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009681381" comment="containerd-1.5.11-150000.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682435" comment="containerd-ctr-1.5.11-150000.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009681382" comment="docker-20.10.14_ce-150000.163.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009681370" comment="docker-bash-completion-20.10.14_ce-150000.163.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139875" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191962" ref_url="https://bugzilla.suse.com/1191962" source="BUGZILLA"/>
		<reference ref_id="1191963" ref_url="https://bugzilla.suse.com/1191963" source="BUGZILLA"/>
		<reference ref_id="1192153" ref_url="https://bugzilla.suse.com/1192153" source="BUGZILLA"/>
		<reference ref_id="1192154" ref_url="https://bugzilla.suse.com/1192154" source="BUGZILLA"/>
		<reference ref_id="1192696" ref_url="https://bugzilla.suse.com/1192696" source="BUGZILLA"/>
		<reference ref_id="1194514" ref_url="https://bugzilla.suse.com/1194514" source="BUGZILLA"/>
		<reference ref_id="1194819" ref_url="https://bugzilla.suse.com/1194819" source="BUGZILLA"/>
		<reference ref_id="1197283" ref_url="https://bugzilla.suse.com/1197283" source="BUGZILLA"/>
		<reference ref_id="1198247" ref_url="https://bugzilla.suse.com/1198247" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23343" ref_url="https://www.suse.com/security/cve/CVE-2021-23343/" source="CVE"/>
		<reference ref_id="CVE-2021-32803" ref_url="https://www.suse.com/security/cve/CVE-2021-32803/" source="CVE"/>
		<reference ref_id="CVE-2021-32804" ref_url="https://www.suse.com/security/cve/CVE-2021-32804/" source="CVE"/>
		<reference ref_id="CVE-2021-3807" ref_url="https://www.suse.com/security/cve/CVE-2021-3807/" source="CVE"/>
		<reference ref_id="CVE-2021-3918" ref_url="https://www.suse.com/security/cve/CVE-2021-3918/" source="CVE"/>
		<reference ref_id="CVE-2021-44906" ref_url="https://www.suse.com/security/cve/CVE-2021-44906/" source="CVE"/>
		<reference ref_id="CVE-2021-44907" ref_url="https://www.suse.com/security/cve/CVE-2021-44907/" source="CVE"/>
		<reference ref_id="CVE-2022-0235" ref_url="https://www.suse.com/security/cve/CVE-2022-0235/" source="CVE"/>
		<reference ref_id="CVE-2022-21824" ref_url="https://www.suse.com/security/cve/CVE-2022-21824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011058.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).
- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).
- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).
- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).
- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).
- CVE-2022-21824: Fixed prototype pollution via console.table (bsc#1194514).
- CVE-2021-44906: Fixed prototype pollution in npm dependency (bsc#1198247).
- CVE-2021-44907: Fixed insuficient sanitation in npm dependency (bsc#1197283).
- CVE-2022-0235: Fixed passing of cookie data and sensitive headers to different hostnames in node-fetch-npm (bsc#1194819).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-17"/>
	<updated date="2022-05-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191962">SUSE bug 1191962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191963">SUSE bug 1191963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192153">SUSE bug 1192153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192154">SUSE bug 1192154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192696">SUSE bug 1192696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194514">SUSE bug 1194514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194819">SUSE bug 1194819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197283">SUSE bug 1197283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198247">SUSE bug 1198247</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23343/">CVE-2021-23343</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32803/">CVE-2021-32803</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32804/">CVE-2021-32804</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3807/">CVE-2021-3807</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3918/">CVE-2021-3918</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-44906/">CVE-2021-44906</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-44907/">CVE-2021-44907</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0235/">CVE-2022-0235</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-21824/">CVE-2022-21824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009683549" comment="nodejs10-10.24.1-150000.1.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683550" comment="nodejs10-devel-10.24.1-150000.1.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683551" comment="nodejs10-docs-10.24.1-150000.1.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683552" comment="npm10-10.24.1-150000.1.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139876" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198717" ref_url="https://bugzilla.suse.com/1198717" source="BUGZILLA"/>
		<reference ref_id="1199423" ref_url="https://bugzilla.suse.com/1199423" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21151" ref_url="https://www.suse.com/security/cve/CVE-2022-21151/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011081.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20220510 release. (bsc#1199423)
Updated to Intel CPU Microcode 20220419 release. (bsc#1198717)

- CVE-2022-21151: Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access (bsc#1199423).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-18"/>
	<updated date="2022-05-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1198717">SUSE bug 1198717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199423">SUSE bug 1199423</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21151/">CVE-2022-21151</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683567" comment="ucode-intel-20220510-150100.3.210.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139877" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198970" ref_url="https://bugzilla.suse.com/1198970" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29909" ref_url="https://www.suse.com/security/cve/CVE-2022-29909/" source="CVE"/>
		<reference ref_id="CVE-2022-29911" ref_url="https://www.suse.com/security/cve/CVE-2022-29911/" source="CVE"/>
		<reference ref_id="CVE-2022-29912" ref_url="https://www.suse.com/security/cve/CVE-2022-29912/" source="CVE"/>
		<reference ref_id="CVE-2022-29914" ref_url="https://www.suse.com/security/cve/CVE-2022-29914/" source="CVE"/>
		<reference ref_id="CVE-2022-29916" ref_url="https://www.suse.com/security/cve/CVE-2022-29916/" source="CVE"/>
		<reference ref_id="CVE-2022-29917" ref_url="https://www.suse.com/security/cve/CVE-2022-29917/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011084.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.9.0 ESR (MFSA 2022-17)(bsc#1198970):

- CVE-2022-29914: Fullscreen notification bypass using popups
- CVE-2022-29909: Bypassing permission prompt in nested browsing contexts
- CVE-2022-29916: Leaking browser history with CSS variables
- CVE-2022-29911: iframe Sandbox bypass
- CVE-2022-29912: Reader mode bypassed SameSite cookies
- CVE-2022-29917: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-18"/>
	<updated date="2022-05-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198970">SUSE bug 1198970</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29909/">CVE-2022-29909</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29911/">CVE-2022-29911</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-29912/">CVE-2022-29912</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29914/">CVE-2022-29914</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29916/">CVE-2022-29916</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29917/">CVE-2022-29917</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684018" comment="MozillaFirefox-91.9.0-150000.150.38.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684019" comment="MozillaFirefox-devel-91.9.0-150000.150.38.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684020" comment="MozillaFirefox-translations-common-91.9.0-150000.150.38.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684021" comment="MozillaFirefox-translations-other-91.9.0-150000.150.38.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139878" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196490" ref_url="https://bugzilla.suse.com/1196490" source="BUGZILLA"/>
		<reference ref_id="1199132" ref_url="https://bugzilla.suse.com/1199132" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23308" ref_url="https://www.suse.com/security/cve/CVE-2022-23308/" source="CVE"/>
		<reference ref_id="CVE-2022-29824" ref_url="https://www.suse.com/security/cve/CVE-2022-29824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1750-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011098.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

- CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes (bsc#1196490).
- CVE-2022-29824: Fixed integer overflow that could have led to an out-of-bounds write in buf.c (xmlBuf*) and tree.c (xmlBuffer*) (bsc#1199132).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-19"/>
	<updated date="2022-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196490">SUSE bug 1196490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199132">SUSE bug 1199132</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-23308/">CVE-2022-23308</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29824/">CVE-2022-29824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009683561" comment="libxml2-2-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683446" comment="libxml2-2-32bit-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683562" comment="libxml2-devel-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683563" comment="libxml2-tools-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683564" comment="python2-libxml2-python-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683565" comment="python3-libxml2-python-2.9.7-150000.3.46.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139879" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192953" ref_url="https://bugzilla.suse.com/1192953" source="BUGZILLA"/>
		<reference ref_id="1195786" ref_url="https://bugzilla.suse.com/1195786" source="BUGZILLA"/>
		<reference ref_id="1199459" ref_url="https://bugzilla.suse.com/1199459" source="BUGZILLA"/>
		<reference ref_id="1199470" ref_url="https://bugzilla.suse.com/1199470" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0071" ref_url="https://www.suse.com/security/cve/CVE-2021-0071/" source="CVE"/>
		<reference ref_id="CVE-2021-26312" ref_url="https://www.suse.com/security/cve/CVE-2021-26312/" source="CVE"/>
		<reference ref_id="CVE-2021-26339" ref_url="https://www.suse.com/security/cve/CVE-2021-26339/" source="CVE"/>
		<reference ref_id="CVE-2021-26342" ref_url="https://www.suse.com/security/cve/CVE-2021-26342/" source="CVE"/>
		<reference ref_id="CVE-2021-26347" ref_url="https://www.suse.com/security/cve/CVE-2021-26347/" source="CVE"/>
		<reference ref_id="CVE-2021-26348" ref_url="https://www.suse.com/security/cve/CVE-2021-26348/" source="CVE"/>
		<reference ref_id="CVE-2021-26349" ref_url="https://www.suse.com/security/cve/CVE-2021-26349/" source="CVE"/>
		<reference ref_id="CVE-2021-26350" ref_url="https://www.suse.com/security/cve/CVE-2021-26350/" source="CVE"/>
		<reference ref_id="CVE-2021-26364" ref_url="https://www.suse.com/security/cve/CVE-2021-26364/" source="CVE"/>
		<reference ref_id="CVE-2021-26372" ref_url="https://www.suse.com/security/cve/CVE-2021-26372/" source="CVE"/>
		<reference ref_id="CVE-2021-26373" ref_url="https://www.suse.com/security/cve/CVE-2021-26373/" source="CVE"/>
		<reference ref_id="CVE-2021-26375" ref_url="https://www.suse.com/security/cve/CVE-2021-26375/" source="CVE"/>
		<reference ref_id="CVE-2021-26376" ref_url="https://www.suse.com/security/cve/CVE-2021-26376/" source="CVE"/>
		<reference ref_id="CVE-2021-26378" ref_url="https://www.suse.com/security/cve/CVE-2021-26378/" source="CVE"/>
		<reference ref_id="CVE-2021-26388" ref_url="https://www.suse.com/security/cve/CVE-2021-26388/" source="CVE"/>
		<reference ref_id="CVE-2021-33139" ref_url="https://www.suse.com/security/cve/CVE-2021-33139/" source="CVE"/>
		<reference ref_id="CVE-2021-33155" ref_url="https://www.suse.com/security/cve/CVE-2021-33155/" source="CVE"/>
		<reference ref_id="CVE-2021-46744" ref_url="https://www.suse.com/security/cve/CVE-2021-46744/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011100.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

Update AMD ucode and SEV firmware

- CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
  CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
  CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
  CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, CVE-2021-46744,
  bsc#1199459, bsc#1199470)

Update Intel Bluetooth firmware (INTEL-SA-00604, bsc#1195786):

- CVE-2021-33139, CVE-2021-33155: Improper conditions check in the firmware for some Intel Wireless Bluetooth and Killer Bluetooth products may allow an authenticated user to potentially cause denial of service via adjacent access.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-19"/>
	<updated date="2022-05-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1192953">SUSE bug 1192953</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195786">SUSE bug 1195786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199459">SUSE bug 1199459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199470">SUSE bug 1199470</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0071/">CVE-2021-0071</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-26312/">CVE-2021-26312</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26339/">CVE-2021-26339</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-26342/">CVE-2021-26342</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26347/">CVE-2021-26347</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-26348/">CVE-2021-26348</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-26349/">CVE-2021-26349</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26350/">CVE-2021-26350</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26364/">CVE-2021-26364</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26372/">CVE-2021-26372</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26373/">CVE-2021-26373</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26375/">CVE-2021-26375</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26376/">CVE-2021-26376</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26378/">CVE-2021-26378</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26388/">CVE-2021-26388</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33139/">CVE-2021-33139</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33155/">CVE-2021-33155</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-46744/">CVE-2021-46744</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684024" comment="kernel-firmware-20200107-150100.3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684025" comment="ucode-amd-20200107-150100.3.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139880" version="1" class="patch">
	<metadata>
		<title>Security update for unbound (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1076963" ref_url="https://bugzilla.suse.com/1076963" source="BUGZILLA"/>
		<reference ref_id="1112009" ref_url="https://bugzilla.suse.com/1112009" source="BUGZILLA"/>
		<reference ref_id="1112033" ref_url="https://bugzilla.suse.com/1112033" source="BUGZILLA"/>
		<reference ref_id="1179191" ref_url="https://bugzilla.suse.com/1179191" source="BUGZILLA"/>
		<reference ref_id="1185382" ref_url="https://bugzilla.suse.com/1185382" source="BUGZILLA"/>
		<reference ref_id="1185383" ref_url="https://bugzilla.suse.com/1185383" source="BUGZILLA"/>
		<reference ref_id="1185384" ref_url="https://bugzilla.suse.com/1185384" source="BUGZILLA"/>
		<reference ref_id="1185385" ref_url="https://bugzilla.suse.com/1185385" source="BUGZILLA"/>
		<reference ref_id="1185386" ref_url="https://bugzilla.suse.com/1185386" source="BUGZILLA"/>
		<reference ref_id="1185387" ref_url="https://bugzilla.suse.com/1185387" source="BUGZILLA"/>
		<reference ref_id="1185388" ref_url="https://bugzilla.suse.com/1185388" source="BUGZILLA"/>
		<reference ref_id="1185389" ref_url="https://bugzilla.suse.com/1185389" source="BUGZILLA"/>
		<reference ref_id="1185390" ref_url="https://bugzilla.suse.com/1185390" source="BUGZILLA"/>
		<reference ref_id="1185391" ref_url="https://bugzilla.suse.com/1185391" source="BUGZILLA"/>
		<reference ref_id="1185392" ref_url="https://bugzilla.suse.com/1185392" source="BUGZILLA"/>
		<reference ref_id="1185393" ref_url="https://bugzilla.suse.com/1185393" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-25031" ref_url="https://www.suse.com/security/cve/CVE-2019-25031/" source="CVE"/>
		<reference ref_id="CVE-2019-25032" ref_url="https://www.suse.com/security/cve/CVE-2019-25032/" source="CVE"/>
		<reference ref_id="CVE-2019-25033" ref_url="https://www.suse.com/security/cve/CVE-2019-25033/" source="CVE"/>
		<reference ref_id="CVE-2019-25034" ref_url="https://www.suse.com/security/cve/CVE-2019-25034/" source="CVE"/>
		<reference ref_id="CVE-2019-25035" ref_url="https://www.suse.com/security/cve/CVE-2019-25035/" source="CVE"/>
		<reference ref_id="CVE-2019-25036" ref_url="https://www.suse.com/security/cve/CVE-2019-25036/" source="CVE"/>
		<reference ref_id="CVE-2019-25037" ref_url="https://www.suse.com/security/cve/CVE-2019-25037/" source="CVE"/>
		<reference ref_id="CVE-2019-25038" ref_url="https://www.suse.com/security/cve/CVE-2019-25038/" source="CVE"/>
		<reference ref_id="CVE-2019-25039" ref_url="https://www.suse.com/security/cve/CVE-2019-25039/" source="CVE"/>
		<reference ref_id="CVE-2019-25040" ref_url="https://www.suse.com/security/cve/CVE-2019-25040/" source="CVE"/>
		<reference ref_id="CVE-2019-25041" ref_url="https://www.suse.com/security/cve/CVE-2019-25041/" source="CVE"/>
		<reference ref_id="CVE-2019-25042" ref_url="https://www.suse.com/security/cve/CVE-2019-25042/" source="CVE"/>
		<reference ref_id="CVE-2020-28935" ref_url="https://www.suse.com/security/cve/CVE-2020-28935/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<description>
This update for unbound fixes the following issues:

- CVE-2019-25031: Fixed configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack (bsc#1185382).
- CVE-2019-25032: Fixed integer overflow in the regional allocator via regional_alloc (bsc#1185383).
- CVE-2019-25033: Fixed integer overflow in the regional allocator via the ALIGN_UP macro (bsc#1185384).
- CVE-2019-25034: Fixed integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write (bsc#1185385).
- CVE-2019-25035: Fixed out-of-bounds write in sldns_bget_token_par (bsc#1185386).
- CVE-2019-25036: Fixed assertion failure and denial of service in synth_cname (bsc#1185387).
- CVE-2019-25037: Fixed assertion failure and denial of service in dname_pkt_copy via an invalid packet (bsc#1185388).
- CVE-2019-25038: Fixed integer overflow in a size calculation in dnscrypt/dnscrypt.c (bsc#1185389).
- CVE-2019-25039: Fixed integer overflow in a size calculation in respip/respip.c (bsc#1185390).
- CVE-2019-25040: Fixed infinite loop via a compressed name in dname_pkt_copy (bsc#1185391).
- CVE-2019-25041: Fixed assertion failure via a compressed name in dname_pkt_copy (bsc#1185392).
- CVE-2019-25042: Fixed out-of-bounds write via a compressed name in rdata_copy (bsc#1185393).
- CVE-2020-28935: Fixed symbolic link traversal when writing PID file (bsc#1179191).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076963">SUSE bug 1076963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112009">SUSE bug 1112009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112033">SUSE bug 1112033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179191">SUSE bug 1179191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185382">SUSE bug 1185382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185383">SUSE bug 1185383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185384">SUSE bug 1185384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185385">SUSE bug 1185385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185386">SUSE bug 1185386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185387">SUSE bug 1185387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185388">SUSE bug 1185388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185389">SUSE bug 1185389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185390">SUSE bug 1185390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185391">SUSE bug 1185391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185392">SUSE bug 1185392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185393">SUSE bug 1185393</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-25031/">CVE-2019-25031</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25032/">CVE-2019-25032</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25033/">CVE-2019-25033</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-25034/">CVE-2019-25034</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-25035/">CVE-2019-25035</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25036/">CVE-2019-25036</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25037/">CVE-2019-25037</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25038/">CVE-2019-25038</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25039/">CVE-2019-25039</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25040/">CVE-2019-25040</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25041/">CVE-2019-25041</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-25042/">CVE-2019-25042</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28935/">CVE-2020-28935</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664308" comment="libunbound2-1.6.8-10.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664309" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664310" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139881" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194251" ref_url="https://bugzilla.suse.com/1194251" source="BUGZILLA"/>
		<reference ref_id="1194362" ref_url="https://bugzilla.suse.com/1194362" source="BUGZILLA"/>
		<reference ref_id="1194474" ref_url="https://bugzilla.suse.com/1194474" source="BUGZILLA"/>
		<reference ref_id="1194476" ref_url="https://bugzilla.suse.com/1194476" source="BUGZILLA"/>
		<reference ref_id="1194477" ref_url="https://bugzilla.suse.com/1194477" source="BUGZILLA"/>
		<reference ref_id="1194478" ref_url="https://bugzilla.suse.com/1194478" source="BUGZILLA"/>
		<reference ref_id="1194479" ref_url="https://bugzilla.suse.com/1194479" source="BUGZILLA"/>
		<reference ref_id="1194480" ref_url="https://bugzilla.suse.com/1194480" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-45960" ref_url="https://www.suse.com/security/cve/CVE-2021-45960/" source="CVE"/>
		<reference ref_id="CVE-2021-46143" ref_url="https://www.suse.com/security/cve/CVE-2021-46143/" source="CVE"/>
		<reference ref_id="CVE-2022-22822" ref_url="https://www.suse.com/security/cve/CVE-2022-22822/" source="CVE"/>
		<reference ref_id="CVE-2022-22823" ref_url="https://www.suse.com/security/cve/CVE-2022-22823/" source="CVE"/>
		<reference ref_id="CVE-2022-22824" ref_url="https://www.suse.com/security/cve/CVE-2022-22824/" source="CVE"/>
		<reference ref_id="CVE-2022-22825" ref_url="https://www.suse.com/security/cve/CVE-2022-22825/" source="CVE"/>
		<reference ref_id="CVE-2022-22826" ref_url="https://www.suse.com/security/cve/CVE-2022-22826/" source="CVE"/>
		<reference ref_id="CVE-2022-22827" ref_url="https://www.suse.com/security/cve/CVE-2022-22827/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010063.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:
  
- CVE-2021-45960: Fixed left shift in the storeAtts function in xmlparse.c that can lead to realloc misbehavior (bsc#1194251).
- CVE-2021-46143: Fixed integer overflow in m_groupSize in doProlog (bsc#1194362).
- CVE-2022-22822: Fixed integer overflow in addBinding in xmlparse.c (bsc#1194474).
- CVE-2022-22823: Fixed integer overflow in build_model in xmlparse.c (bsc#1194476).
- CVE-2022-22824: Fixed integer overflow in defineAttribute in xmlparse.c (bsc#1194477).
- CVE-2022-22825: Fixed integer overflow in lookup in xmlparse.c (bsc#1194478).
- CVE-2022-22826: Fixed integer overflow in nextScaffoldPart in xmlparse.c (bsc#1194479).
- CVE-2022-22827: Fixed integer overflow in storeAtts in xmlparse.c (bsc#1194480).  
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194251">SUSE bug 1194251</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194362">SUSE bug 1194362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194474">SUSE bug 1194474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194476">SUSE bug 1194476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194477">SUSE bug 1194477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194478">SUSE bug 1194478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194479">SUSE bug 1194479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194480">SUSE bug 1194480</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-45960/">CVE-2021-45960</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-46143/">CVE-2021-46143</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22822/">CVE-2022-22822</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22823/">CVE-2022-22823</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22824/">CVE-2022-22824</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22825/">CVE-2022-22825</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22826/">CVE-2022-22826</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22827/">CVE-2022-22827</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664060" comment="expat-2.2.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664061" comment="libexpat-devel-2.2.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664062" comment="libexpat1-2.2.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664063" comment="libexpat1-32bit-2.2.5-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139882" version="1" class="patch">
	<metadata>
		<title>Security update for slurm_20_11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199278" ref_url="https://bugzilla.suse.com/1199278" source="BUGZILLA"/>
		<reference ref_id="1199279" ref_url="https://bugzilla.suse.com/1199279" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29500" ref_url="https://www.suse.com/security/cve/CVE-2022-29500/" source="CVE"/>
		<reference ref_id="CVE-2022-29501" ref_url="https://www.suse.com/security/cve/CVE-2022-29501/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1815-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011135.html" source="SUSE-SU"/>
		<description>
This update for slurm_20_11 fixes the following issues:

- CVE-2022-29500: Fixed architectural flaw that could have been exploited to allow an unprivileged user to execute arbitrary processes as root (bsc#1199278).
- CVE-2022-29501: Fixed a problem that an unprivileged user could have sent data to arbitrary unix socket as root (bsc#1199279).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-23"/>
	<updated date="2022-05-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199278">SUSE bug 1199278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199279">SUSE bug 1199279</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29500/">CVE-2022-29500</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29501/">CVE-2022-29501</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009683012" comment="libnss_slurm2_20_11-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683013" comment="libpmi0_20_11-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683014" comment="libslurm36-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683015" comment="perl-slurm_20_11-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683016" comment="slurm_20_11-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683017" comment="slurm_20_11-auth-none-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683018" comment="slurm_20_11-config-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683019" comment="slurm_20_11-config-man-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683020" comment="slurm_20_11-devel-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683021" comment="slurm_20_11-doc-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683022" comment="slurm_20_11-lua-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683023" comment="slurm_20_11-munge-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683024" comment="slurm_20_11-node-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683025" comment="slurm_20_11-pam_slurm-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683026" comment="slurm_20_11-plugins-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683027" comment="slurm_20_11-slurmdbd-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683028" comment="slurm_20_11-sql-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683029" comment="slurm_20_11-sview-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683030" comment="slurm_20_11-torque-20.11.9-150100.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683031" comment="slurm_20_11-webdoc-20.11.9-150100.3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139883" version="1" class="patch">
	<metadata>
		<title>Security update for rsyslog (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199061" ref_url="https://bugzilla.suse.com/1199061" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24903" ref_url="https://www.suse.com/security/cve/CVE-2022-24903/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011136.html" source="SUSE-SU"/>
		<description>
This update for rsyslog fixes the following issues:

- CVE-2022-24903: Fixed potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-23"/>
	<updated date="2022-05-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199061">SUSE bug 1199061</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24903/">CVE-2022-24903</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009682424" comment="rsyslog-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682425" comment="rsyslog-module-gssapi-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682426" comment="rsyslog-module-gtls-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682427" comment="rsyslog-module-mmnormalize-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682428" comment="rsyslog-module-mysql-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682429" comment="rsyslog-module-pgsql-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682430" comment="rsyslog-module-relp-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682431" comment="rsyslog-module-snmp-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682432" comment="rsyslog-module-udpspoof-8.33.1-150000.3.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139884" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199768" ref_url="https://bugzilla.suse.com/1199768" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1529" ref_url="https://www.suse.com/security/cve/CVE-2022-1529/" source="CVE"/>
		<reference ref_id="CVE-2022-1802" ref_url="https://www.suse.com/security/cve/CVE-2022-1802/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011133.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.9.1 ESR - MFSA 2022-19 (bsc#1199768):

- CVE-2022-1802: Prototype pollution in Top-Level Await implementation
- CVE-2022-1529: Untrusted input used in JavaScript object indexing, leading to prototype pollution
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-23"/>
	<updated date="2022-05-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199768">SUSE bug 1199768</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1529/">CVE-2022-1529</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1802/">CVE-2022-1802</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692408" comment="MozillaFirefox-91.9.1-150000.150.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692409" comment="MozillaFirefox-devel-91.9.1-150000.150.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692410" comment="MozillaFirefox-translations-common-91.9.1-150000.150.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692411" comment="MozillaFirefox-translations-other-91.9.1-150000.150.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139885" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194019" ref_url="https://bugzilla.suse.com/1194019" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-8518" ref_url="https://www.suse.com/security/cve/CVE-2018-8518/" source="CVE"/>
		<reference ref_id="CVE-2018-8523" ref_url="https://www.suse.com/security/cve/CVE-2018-8523/" source="CVE"/>
		<reference ref_id="CVE-2019-8766" ref_url="https://www.suse.com/security/cve/CVE-2019-8766/" source="CVE"/>
		<reference ref_id="CVE-2019-8768" ref_url="https://www.suse.com/security/cve/CVE-2019-8768/" source="CVE"/>
		<reference ref_id="CVE-2019-8782" ref_url="https://www.suse.com/security/cve/CVE-2019-8782/" source="CVE"/>
		<reference ref_id="CVE-2019-8808" ref_url="https://www.suse.com/security/cve/CVE-2019-8808/" source="CVE"/>
		<reference ref_id="CVE-2019-8815" ref_url="https://www.suse.com/security/cve/CVE-2019-8815/" source="CVE"/>
		<reference ref_id="CVE-2020-10018" ref_url="https://www.suse.com/security/cve/CVE-2020-10018/" source="CVE"/>
		<reference ref_id="CVE-2020-13753" ref_url="https://www.suse.com/security/cve/CVE-2020-13753/" source="CVE"/>
		<reference ref_id="CVE-2020-27918" ref_url="https://www.suse.com/security/cve/CVE-2020-27918/" source="CVE"/>
		<reference ref_id="CVE-2020-29623" ref_url="https://www.suse.com/security/cve/CVE-2020-29623/" source="CVE"/>
		<reference ref_id="CVE-2020-3885" ref_url="https://www.suse.com/security/cve/CVE-2020-3885/" source="CVE"/>
		<reference ref_id="CVE-2020-3894" ref_url="https://www.suse.com/security/cve/CVE-2020-3894/" source="CVE"/>
		<reference ref_id="CVE-2020-3895" ref_url="https://www.suse.com/security/cve/CVE-2020-3895/" source="CVE"/>
		<reference ref_id="CVE-2020-3897" ref_url="https://www.suse.com/security/cve/CVE-2020-3897/" source="CVE"/>
		<reference ref_id="CVE-2020-3900" ref_url="https://www.suse.com/security/cve/CVE-2020-3900/" source="CVE"/>
		<reference ref_id="CVE-2020-3901" ref_url="https://www.suse.com/security/cve/CVE-2020-3901/" source="CVE"/>
		<reference ref_id="CVE-2020-3902" ref_url="https://www.suse.com/security/cve/CVE-2020-3902/" source="CVE"/>
		<reference ref_id="CVE-2020-9802" ref_url="https://www.suse.com/security/cve/CVE-2020-9802/" source="CVE"/>
		<reference ref_id="CVE-2020-9803" ref_url="https://www.suse.com/security/cve/CVE-2020-9803/" source="CVE"/>
		<reference ref_id="CVE-2020-9805" ref_url="https://www.suse.com/security/cve/CVE-2020-9805/" source="CVE"/>
		<reference ref_id="CVE-2020-9947" ref_url="https://www.suse.com/security/cve/CVE-2020-9947/" source="CVE"/>
		<reference ref_id="CVE-2020-9948" ref_url="https://www.suse.com/security/cve/CVE-2020-9948/" source="CVE"/>
		<reference ref_id="CVE-2020-9951" ref_url="https://www.suse.com/security/cve/CVE-2020-9951/" source="CVE"/>
		<reference ref_id="CVE-2020-9952" ref_url="https://www.suse.com/security/cve/CVE-2020-9952/" source="CVE"/>
		<reference ref_id="CVE-2021-1765" ref_url="https://www.suse.com/security/cve/CVE-2021-1765/" source="CVE"/>
		<reference ref_id="CVE-2021-1788" ref_url="https://www.suse.com/security/cve/CVE-2021-1788/" source="CVE"/>
		<reference ref_id="CVE-2021-1817" ref_url="https://www.suse.com/security/cve/CVE-2021-1817/" source="CVE"/>
		<reference ref_id="CVE-2021-1820" ref_url="https://www.suse.com/security/cve/CVE-2021-1820/" source="CVE"/>
		<reference ref_id="CVE-2021-1825" ref_url="https://www.suse.com/security/cve/CVE-2021-1825/" source="CVE"/>
		<reference ref_id="CVE-2021-1826" ref_url="https://www.suse.com/security/cve/CVE-2021-1826/" source="CVE"/>
		<reference ref_id="CVE-2021-1844" ref_url="https://www.suse.com/security/cve/CVE-2021-1844/" source="CVE"/>
		<reference ref_id="CVE-2021-1871" ref_url="https://www.suse.com/security/cve/CVE-2021-1871/" source="CVE"/>
		<reference ref_id="CVE-2021-30661" ref_url="https://www.suse.com/security/cve/CVE-2021-30661/" source="CVE"/>
		<reference ref_id="CVE-2021-30666" ref_url="https://www.suse.com/security/cve/CVE-2021-30666/" source="CVE"/>
		<reference ref_id="CVE-2021-30682" ref_url="https://www.suse.com/security/cve/CVE-2021-30682/" source="CVE"/>
		<reference ref_id="CVE-2021-30761" ref_url="https://www.suse.com/security/cve/CVE-2021-30761/" source="CVE"/>
		<reference ref_id="CVE-2021-30762" ref_url="https://www.suse.com/security/cve/CVE-2021-30762/" source="CVE"/>
		<reference ref_id="CVE-2021-30809" ref_url="https://www.suse.com/security/cve/CVE-2021-30809/" source="CVE"/>
		<reference ref_id="CVE-2021-30818" ref_url="https://www.suse.com/security/cve/CVE-2021-30818/" source="CVE"/>
		<reference ref_id="CVE-2021-30823" ref_url="https://www.suse.com/security/cve/CVE-2021-30823/" source="CVE"/>
		<reference ref_id="CVE-2021-30836" ref_url="https://www.suse.com/security/cve/CVE-2021-30836/" source="CVE"/>
		<reference ref_id="CVE-2021-30846" ref_url="https://www.suse.com/security/cve/CVE-2021-30846/" source="CVE"/>
		<reference ref_id="CVE-2021-30848" ref_url="https://www.suse.com/security/cve/CVE-2021-30848/" source="CVE"/>
		<reference ref_id="CVE-2021-30849" ref_url="https://www.suse.com/security/cve/CVE-2021-30849/" source="CVE"/>
		<reference ref_id="CVE-2021-30851" ref_url="https://www.suse.com/security/cve/CVE-2021-30851/" source="CVE"/>
		<reference ref_id="CVE-2021-30858" ref_url="https://www.suse.com/security/cve/CVE-2021-30858/" source="CVE"/>
		<reference ref_id="CVE-2021-30884" ref_url="https://www.suse.com/security/cve/CVE-2021-30884/" source="CVE"/>
		<reference ref_id="CVE-2021-30887" ref_url="https://www.suse.com/security/cve/CVE-2021-30887/" source="CVE"/>
		<reference ref_id="CVE-2021-30888" ref_url="https://www.suse.com/security/cve/CVE-2021-30888/" source="CVE"/>
		<reference ref_id="CVE-2021-30889" ref_url="https://www.suse.com/security/cve/CVE-2021-30889/" source="CVE"/>
		<reference ref_id="CVE-2021-30890" ref_url="https://www.suse.com/security/cve/CVE-2021-30890/" source="CVE"/>
		<reference ref_id="CVE-2021-30897" ref_url="https://www.suse.com/security/cve/CVE-2021-30897/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.34.3 (bsc#1194019).
- CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content.
- CVE-2021-30890: Fixed logic issue allowing universal cross site scripting when processing maliciously crafted web content.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194019">SUSE bug 1194019</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-8518/">CVE-2018-8518</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2018-8523/">CVE-2018-8523</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8766/">CVE-2019-8766</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8768/">CVE-2019-8768</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8782/">CVE-2019-8782</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8808/">CVE-2019-8808</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8815/">CVE-2019-8815</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10018/">CVE-2020-10018</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13753/">CVE-2020-13753</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27918/">CVE-2020-27918</cve>
	<cve impact="important" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29623/">CVE-2020-29623</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-3885/">CVE-2020-3885</cve>
	<cve impact="important" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3894/">CVE-2020-3894</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3895/">CVE-2020-3895</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3897/">CVE-2020-3897</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3900/">CVE-2020-3900</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3901/">CVE-2020-3901</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-3902/">CVE-2020-3902</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9802/">CVE-2020-9802</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9803/">CVE-2020-9803</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9805/">CVE-2020-9805</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9947/">CVE-2020-9947</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9948/">CVE-2020-9948</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9951/">CVE-2020-9951</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-9952/">CVE-2020-9952</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1765/">CVE-2021-1765</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1788/">CVE-2021-1788</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1817/">CVE-2021-1817</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-1820/">CVE-2021-1820</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-1825/">CVE-2021-1825</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-1826/">CVE-2021-1826</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1844/">CVE-2021-1844</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1871/">CVE-2021-1871</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30661/">CVE-2021-30661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30666/">CVE-2021-30666</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30682/">CVE-2021-30682</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30761/">CVE-2021-30761</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30762/">CVE-2021-30762</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30809/">CVE-2021-30809</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30818/">CVE-2021-30818</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30823/">CVE-2021-30823</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30836/">CVE-2021-30836</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30846/">CVE-2021-30846</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30848/">CVE-2021-30848</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30849/">CVE-2021-30849</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30851/">CVE-2021-30851</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30858/">CVE-2021-30858</cve>
	<cve impact="important" cvss3="4.7/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30884/">CVE-2021-30884</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30887/">CVE-2021-30887</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30888/">CVE-2021-30888</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30889/">CVE-2021-30889</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30890/">CVE-2021-30890</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30897/">CVE-2021-30897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664158" comment="libjavascriptcoregtk-4_0-18-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664159" comment="libwebkit2gtk-4_0-37-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664160" comment="libwebkit2gtk3-lang-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664161" comment="typelib-1_0-JavaScriptCore-4_0-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664162" comment="typelib-1_0-WebKit2-4_0-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664163" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664164" comment="webkit2gtk-4_0-injected-bundles-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664165" comment="webkit2gtk3-devel-2.34.3-3.92.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139886" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191157" ref_url="https://bugzilla.suse.com/1191157" source="BUGZILLA"/>
		<reference ref_id="1197004" ref_url="https://bugzilla.suse.com/1197004" source="BUGZILLA"/>
		<reference ref_id="1199240" ref_url="https://bugzilla.suse.com/1199240" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29155" ref_url="https://www.suse.com/security/cve/CVE-2022-29155/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011147.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

Security:
- CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).

Bugfixes:
- allow specification of max/min TLS version with TLS1.3 (bsc#1191157)
- libldap was able to be out of step with openldap in some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their related release versions. (bsc#1197004)
- restore CLDAP functionality in CLI tools (jsc#PM-3288)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-24"/>
	<updated date="2022-05-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191157">SUSE bug 1191157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197004">SUSE bug 1197004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199240">SUSE bug 1199240</bugzilla>
	<cve impact="critical" cvss3="9.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29155/">CVE-2022-29155</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009683553" comment="libldap-2_4-2-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683554" comment="libldap-2_4-2-32bit-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683555" comment="libldap-data-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683556" comment="openldap2-client-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683557" comment="openldap2-devel-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683558" comment="openldap2-devel-32bit-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683559" comment="openldap2-devel-static-2.4.46-150000.9.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139887" version="1" class="patch">
	<metadata>
		<title>Security update for json-c (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1171479" ref_url="https://bugzilla.suse.com/1171479" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12762" ref_url="https://www.suse.com/security/cve/CVE-2020-12762/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010072.html" source="SUSE-SU"/>
		<description>
This update for json-c fixes the following issues:

- CVE-2020-12762: Fixed integer overflow and out-of-bounds write. (bsc#1171479)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171479">SUSE bug 1171479</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12762/">CVE-2020-12762</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664166" comment="libjson-c-devel-0.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664167" comment="libjson-c3-0.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664150" comment="libjson-c3-32bit-0.13-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139888" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199474" ref_url="https://bugzilla.suse.com/1199474" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26691" ref_url="https://www.suse.com/security/cve/CVE-2022-26691/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011166.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:

- CVE-2022-26691: Fixed an authentication bypass and code execution vulnerability (bsc#1199474)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-26"/>
	<updated date="2022-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199474">SUSE bug 1199474</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26691/">CVE-2022-26691</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692412" comment="cups-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692413" comment="cups-client-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692414" comment="cups-config-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692415" comment="cups-ddk-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692416" comment="cups-devel-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692417" comment="libcups2-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684254" comment="libcups2-32bit-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692418" comment="libcupscgi1-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692419" comment="libcupsimage2-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692420" comment="libcupsmime1-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692421" comment="libcupsppdc1-2.2.7-150000.3.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139889" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195964" ref_url="https://bugzilla.suse.com/1195964" source="BUGZILLA"/>
		<reference ref_id="1195965" ref_url="https://bugzilla.suse.com/1195965" source="BUGZILLA"/>
		<reference ref_id="1197066" ref_url="https://bugzilla.suse.com/1197066" source="BUGZILLA"/>
		<reference ref_id="1197068" ref_url="https://bugzilla.suse.com/1197068" source="BUGZILLA"/>
		<reference ref_id="1197072" ref_url="https://bugzilla.suse.com/1197072" source="BUGZILLA"/>
		<reference ref_id="1197073" ref_url="https://bugzilla.suse.com/1197073" source="BUGZILLA"/>
		<reference ref_id="1197074" ref_url="https://bugzilla.suse.com/1197074" source="BUGZILLA"/>
		<reference ref_id="1197631" ref_url="https://bugzilla.suse.com/1197631" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0561" ref_url="https://www.suse.com/security/cve/CVE-2022-0561/" source="CVE"/>
		<reference ref_id="CVE-2022-0562" ref_url="https://www.suse.com/security/cve/CVE-2022-0562/" source="CVE"/>
		<reference ref_id="CVE-2022-0865" ref_url="https://www.suse.com/security/cve/CVE-2022-0865/" source="CVE"/>
		<reference ref_id="CVE-2022-0891" ref_url="https://www.suse.com/security/cve/CVE-2022-0891/" source="CVE"/>
		<reference ref_id="CVE-2022-0908" ref_url="https://www.suse.com/security/cve/CVE-2022-0908/" source="CVE"/>
		<reference ref_id="CVE-2022-0909" ref_url="https://www.suse.com/security/cve/CVE-2022-0909/" source="CVE"/>
		<reference ref_id="CVE-2022-0924" ref_url="https://www.suse.com/security/cve/CVE-2022-0924/" source="CVE"/>
		<reference ref_id="CVE-2022-1056" ref_url="https://www.suse.com/security/cve/CVE-2022-1056/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011182.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-0561: Fixed null source pointer passed as an argument to memcpy() within TIFFFetchStripThing() in tif_dirread.c (bsc#1195964).
- CVE-2022-0562: Fixed null source pointer passed as an argument to memcpy() within TIFFReadDirectory() in tif_dirread.c (bsc#1195965).
- CVE-2022-0865: Fixed assertion failure in TIFFReadAndRealloc (bsc#1197066).
- CVE-2022-0909: Fixed divide by zero error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197072).
- CVE-2022-0924: Fixed out-of-bounds read error in tiffcp that could have led to a denial-of-service via a crafted tiff file (bsc#1197073).
- CVE-2022-0908: Fixed null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() (bsc#1197074).
- CVE-2022-1056: Fixed out-of-bounds read error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197631).
- CVE-2022-0891: Fixed heap buffer overflow in extractImageSection (bsc#1197068).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-30"/>
	<updated date="2022-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195964">SUSE bug 1195964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195965">SUSE bug 1195965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197066">SUSE bug 1197066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197068">SUSE bug 1197068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197072">SUSE bug 1197072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197073">SUSE bug 1197073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197074">SUSE bug 1197074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197631">SUSE bug 1197631</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0561/">CVE-2022-0561</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0562/">CVE-2022-0562</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0865/">CVE-2022-0865</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0891/">CVE-2022-0891</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0908/">CVE-2022-0908</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0909/">CVE-2022-0909</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0924/">CVE-2022-0924</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1056/">CVE-2022-1056</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692422" comment="libtiff-devel-4.0.9-150000.45.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692423" comment="libtiff5-4.0.9-150000.45.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684380" comment="libtiff5-32bit-4.0.9-150000.45.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139890" version="1" class="patch">
	<metadata>
		<title>Security update for pcre2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199232" ref_url="https://bugzilla.suse.com/1199232" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1586" ref_url="https://www.suse.com/security/cve/CVE-2022-1586/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011183.html" source="SUSE-SU"/>
		<description>
This update for pcre2 fixes the following issues:

- CVE-2022-1586: Fixed out-of-bounds read via missing Unicode property matching issue in JIT compiled regular expressions (bsc#1199232).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-30"/>
	<updated date="2022-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199232">SUSE bug 1199232</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1586/">CVE-2022-1586</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692424" comment="libpcre2-16-0-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692425" comment="libpcre2-32-0-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692426" comment="libpcre2-8-0-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692427" comment="libpcre2-posix2-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692428" comment="pcre2-devel-10.31-150000.3.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139891" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199475" ref_url="https://bugzilla.suse.com/1199475" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1552" ref_url="https://www.suse.com/security/cve/CVE-2022-1552/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011202.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:
 
- CVE-2022-1552: Confine additional operations within 'security restricted operation' sandboxes (bsc#1199475).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-31"/>
	<updated date="2022-05-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199475">SUSE bug 1199475</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1552/">CVE-2022-1552</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692660" comment="postgresql10-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692661" comment="postgresql10-contrib-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692662" comment="postgresql10-devel-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692663" comment="postgresql10-docs-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692664" comment="postgresql10-plperl-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692665" comment="postgresql10-plpython-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692666" comment="postgresql10-pltcl-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692667" comment="postgresql10-server-10.21-150100.8.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139892" version="1" class="patch">
	<metadata>
		<title>Security update for hdf5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1072087" ref_url="https://bugzilla.suse.com/1072087" source="BUGZILLA"/>
		<reference ref_id="1072090" ref_url="https://bugzilla.suse.com/1072090" source="BUGZILLA"/>
		<reference ref_id="1072108" ref_url="https://bugzilla.suse.com/1072108" source="BUGZILLA"/>
		<reference ref_id="1072111" ref_url="https://bugzilla.suse.com/1072111" source="BUGZILLA"/>
		<reference ref_id="1093641" ref_url="https://bugzilla.suse.com/1093641" source="BUGZILLA"/>
		<reference ref_id="1093649" ref_url="https://bugzilla.suse.com/1093649" source="BUGZILLA"/>
		<reference ref_id="1093653" ref_url="https://bugzilla.suse.com/1093653" source="BUGZILLA"/>
		<reference ref_id="1093655" ref_url="https://bugzilla.suse.com/1093655" source="BUGZILLA"/>
		<reference ref_id="1093657" ref_url="https://bugzilla.suse.com/1093657" source="BUGZILLA"/>
		<reference ref_id="1101471" ref_url="https://bugzilla.suse.com/1101471" source="BUGZILLA"/>
		<reference ref_id="1101474" ref_url="https://bugzilla.suse.com/1101474" source="BUGZILLA"/>
		<reference ref_id="1101493" ref_url="https://bugzilla.suse.com/1101493" source="BUGZILLA"/>
		<reference ref_id="1101495" ref_url="https://bugzilla.suse.com/1101495" source="BUGZILLA"/>
		<reference ref_id="1102175" ref_url="https://bugzilla.suse.com/1102175" source="BUGZILLA"/>
		<reference ref_id="1109166" ref_url="https://bugzilla.suse.com/1109166" source="BUGZILLA"/>
		<reference ref_id="1109167" ref_url="https://bugzilla.suse.com/1109167" source="BUGZILLA"/>
		<reference ref_id="1109168" ref_url="https://bugzilla.suse.com/1109168" source="BUGZILLA"/>
		<reference ref_id="1109564" ref_url="https://bugzilla.suse.com/1109564" source="BUGZILLA"/>
		<reference ref_id="1109565" ref_url="https://bugzilla.suse.com/1109565" source="BUGZILLA"/>
		<reference ref_id="1109566" ref_url="https://bugzilla.suse.com/1109566" source="BUGZILLA"/>
		<reference ref_id="1109567" ref_url="https://bugzilla.suse.com/1109567" source="BUGZILLA"/>
		<reference ref_id="1109568" ref_url="https://bugzilla.suse.com/1109568" source="BUGZILLA"/>
		<reference ref_id="1109569" ref_url="https://bugzilla.suse.com/1109569" source="BUGZILLA"/>
		<reference ref_id="1109570" ref_url="https://bugzilla.suse.com/1109570" source="BUGZILLA"/>
		<reference ref_id="1134298" ref_url="https://bugzilla.suse.com/1134298" source="BUGZILLA"/>
		<reference ref_id="1167401" ref_url="https://bugzilla.suse.com/1167401" source="BUGZILLA"/>
		<reference ref_id="1167404" ref_url="https://bugzilla.suse.com/1167404" source="BUGZILLA"/>
		<reference ref_id="1167405" ref_url="https://bugzilla.suse.com/1167405" source="BUGZILLA"/>
		<reference ref_id="1169793" ref_url="https://bugzilla.suse.com/1169793" source="BUGZILLA"/>
		<reference ref_id="1174439" ref_url="https://bugzilla.suse.com/1174439" source="BUGZILLA"/>
		<reference ref_id="1179521" ref_url="https://bugzilla.suse.com/1179521" source="BUGZILLA"/>
		<reference ref_id="1196682" ref_url="https://bugzilla.suse.com/1196682" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17505" ref_url="https://www.suse.com/security/cve/CVE-2017-17505/" source="CVE"/>
		<reference ref_id="CVE-2017-17506" ref_url="https://www.suse.com/security/cve/CVE-2017-17506/" source="CVE"/>
		<reference ref_id="CVE-2017-17508" ref_url="https://www.suse.com/security/cve/CVE-2017-17508/" source="CVE"/>
		<reference ref_id="CVE-2017-17509" ref_url="https://www.suse.com/security/cve/CVE-2017-17509/" source="CVE"/>
		<reference ref_id="CVE-2018-11202" ref_url="https://www.suse.com/security/cve/CVE-2018-11202/" source="CVE"/>
		<reference ref_id="CVE-2018-11203" ref_url="https://www.suse.com/security/cve/CVE-2018-11203/" source="CVE"/>
		<reference ref_id="CVE-2018-11204" ref_url="https://www.suse.com/security/cve/CVE-2018-11204/" source="CVE"/>
		<reference ref_id="CVE-2018-11206" ref_url="https://www.suse.com/security/cve/CVE-2018-11206/" source="CVE"/>
		<reference ref_id="CVE-2018-11207" ref_url="https://www.suse.com/security/cve/CVE-2018-11207/" source="CVE"/>
		<reference ref_id="CVE-2018-13869" ref_url="https://www.suse.com/security/cve/CVE-2018-13869/" source="CVE"/>
		<reference ref_id="CVE-2018-13870" ref_url="https://www.suse.com/security/cve/CVE-2018-13870/" source="CVE"/>
		<reference ref_id="CVE-2018-14032" ref_url="https://www.suse.com/security/cve/CVE-2018-14032/" source="CVE"/>
		<reference ref_id="CVE-2018-14033" ref_url="https://www.suse.com/security/cve/CVE-2018-14033/" source="CVE"/>
		<reference ref_id="CVE-2018-14460" ref_url="https://www.suse.com/security/cve/CVE-2018-14460/" source="CVE"/>
		<reference ref_id="CVE-2018-17233" ref_url="https://www.suse.com/security/cve/CVE-2018-17233/" source="CVE"/>
		<reference ref_id="CVE-2018-17234" ref_url="https://www.suse.com/security/cve/CVE-2018-17234/" source="CVE"/>
		<reference ref_id="CVE-2018-17237" ref_url="https://www.suse.com/security/cve/CVE-2018-17237/" source="CVE"/>
		<reference ref_id="CVE-2018-17432" ref_url="https://www.suse.com/security/cve/CVE-2018-17432/" source="CVE"/>
		<reference ref_id="CVE-2018-17433" ref_url="https://www.suse.com/security/cve/CVE-2018-17433/" source="CVE"/>
		<reference ref_id="CVE-2018-17434" ref_url="https://www.suse.com/security/cve/CVE-2018-17434/" source="CVE"/>
		<reference ref_id="CVE-2018-17435" ref_url="https://www.suse.com/security/cve/CVE-2018-17435/" source="CVE"/>
		<reference ref_id="CVE-2018-17436" ref_url="https://www.suse.com/security/cve/CVE-2018-17436/" source="CVE"/>
		<reference ref_id="CVE-2018-17437" ref_url="https://www.suse.com/security/cve/CVE-2018-17437/" source="CVE"/>
		<reference ref_id="CVE-2018-17438" ref_url="https://www.suse.com/security/cve/CVE-2018-17438/" source="CVE"/>
		<reference ref_id="CVE-2020-10809" ref_url="https://www.suse.com/security/cve/CVE-2020-10809/" source="CVE"/>
		<reference ref_id="CVE-2020-10810" ref_url="https://www.suse.com/security/cve/CVE-2020-10810/" source="CVE"/>
		<reference ref_id="CVE-2020-10811" ref_url="https://www.suse.com/security/cve/CVE-2020-10811/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1903-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011212.html" source="SUSE-SU"/>
		<description>
This update for hdf5 fixes the following issues:

Security issues fixed:

- CVE-2020-10811: Fixed heap-based buffer over-read in the function H5O__layout_decode() located in H5Olayout.c (bsc#1167405).
- CVE-2020-10810: Fixed NULL pointer dereference in the function H5AC_unpin_entry() located in H5AC.c (bsc#1167401).
- CVE-2020-10809: Fixed heap-based buffer overflow in the function Decompress() located in decompress.c (bsc#1167404).
- CVE-2018-17438: Fixed SIGFPE signal raise in the function H5D__select_io() of H5Dselect.c (bsc#1109570).
- CVE-2018-17437: Fixed memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c. (bsc#1109569).
- CVE-2018-17436: Fixed issue in ReadCode() in decompress.c that allowed attackers to cause a denial of service via a crafted HDF5 file (bsc#1109568).
- CVE-2018-17435: Fixed heap-based buffer over-read in H5O_attr_decode() in H5Oattr.c (bsc#1109567).
- CVE-2018-17434: Fixed SIGFPE signal raise in function apply_filters() of h5repack_filters.c (bsc#1109566).
- CVE-2018-17433: Fixed heap-based buffer overflow in ReadGifImageDesc() in gifread.c (bsc#1109565).
- CVE-2018-17432: Fixed NULL pointer dereference in H5O_sdspace_encode() in H5Osdspace.c (bsc#1109564).
- CVE-2018-17237: Fixed SIGFPE signal raise in the function H5D__chunk_set_info_real() (bsc#1109168).
- CVE-2018-17234: Fixed memory leak in the H5O__chunk_deserialize() function in H5Ocache.c (bsc#1109167).
- CVE-2018-17233: Fixed SIGFPE signal is raise in the function H5D__create_chunk_file_map_hyper (bsc#1109166).
- CVE-2018-14460: Fixed heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c (bsc#1102175).
- CVE-2018-14033: Fixed heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c (bsc#1101471).
- CVE-2018-14032: Fixed heap-based buffer over-read in the function H5O_fill_new_decode in H5Ofill.c (bsc#1101474).
- CVE-2018-13870: Fixed heap-based buffer over-read in the function H5O_link_decode in H5Olink.c (bsc#1101493).
- CVE-2018-13869: Fixed memcpy parameter overlap in the function H5O_link_decode in H5Olink.c (bsc#1101495).
- CVE-2018-11207: Fixed division by zero was discovered in H5D__chunk_init in H5Dchunk.c (bsc#1093653).
- CVE-2018-11206: Fixed out of bounds read in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c (bsc#1093657).
- CVE-2018-11204: Fixed NULL pointer dereference in H5O__chunk_deserialize in H5Ocache.c (bsc#1093655).
- CVE-2018-11203: Fixed division by zero in H5D__btree_decode_key in H5Dbtree.c (bsc#1093649).
- CVE-2018-11202: Fixed NULL pointer dereference in H5S_hyper_make_spans in H5Shyper.c (bsc#1093641).
- CVE-2017-17509: Fixed out of bounds write vulnerability in function H5G__ent_decode_vec (bsc#1072111).
- CVE-2017-17508: Fixed divide-by-zero vulnerability in function H5T_set_loc (bsc#1072108).
- CVE-2017-17506: Fixed out of bounds read in the function H5Opline_pline_decode (bsc#1072090).
- CVE-2017-17505: Fixed NULL pointer dereference in the function H5O_pline_decode (bsc#1072087).

Bugfixes:

- Fix library link flags on pkg-config file for HPC builds (bsc#1134298).
- Fix .so number in baselibs.conf for libhdf5_fortran libs (bsc#1169793).
- Fix python-h5py packages built against out-of-date version of HDF5 (bsc#1196682).
- Fix netcdf-cxx4 packages built against out-of-date version of HDF5 (bsc#1179521).
- Add build support for gcc10 to HPC build (bsc#1174439).
- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- HDF5 version Update to 1.10.5 (jsc#SLE-8501).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-01"/>
	<updated date="2022-06-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1072087">SUSE bug 1072087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1072090">SUSE bug 1072090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1072108">SUSE bug 1072108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1072111">SUSE bug 1072111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093641">SUSE bug 1093641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093649">SUSE bug 1093649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093653">SUSE bug 1093653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093655">SUSE bug 1093655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1093657">SUSE bug 1093657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101471">SUSE bug 1101471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101474">SUSE bug 1101474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101493">SUSE bug 1101493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101495">SUSE bug 1101495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102175">SUSE bug 1102175</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109166">SUSE bug 1109166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109167">SUSE bug 1109167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109168">SUSE bug 1109168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109564">SUSE bug 1109564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109565">SUSE bug 1109565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109566">SUSE bug 1109566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109567">SUSE bug 1109567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109568">SUSE bug 1109568</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109569">SUSE bug 1109569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109570">SUSE bug 1109570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1134298">SUSE bug 1134298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167401">SUSE bug 1167401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167404">SUSE bug 1167404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167405">SUSE bug 1167405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169793">SUSE bug 1169793</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174439">SUSE bug 1174439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179521">SUSE bug 1179521</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196682">SUSE bug 1196682</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17505/">CVE-2017-17505</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17506/">CVE-2017-17506</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-17508/">CVE-2017-17508</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2017-17509/">CVE-2017-17509</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11202/">CVE-2018-11202</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11203/">CVE-2018-11203</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11204/">CVE-2018-11204</cve>
	<cve impact="low" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11206/">CVE-2018-11206</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11207/">CVE-2018-11207</cve>
	<cve impact="moderate" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13869/">CVE-2018-13869</cve>
	<cve impact="moderate" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13870/">CVE-2018-13870</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14032/">CVE-2018-14032</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14033/">CVE-2018-14033</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14460/">CVE-2018-14460</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17233/">CVE-2018-17233</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17234/">CVE-2018-17234</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17237/">CVE-2018-17237</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17432/">CVE-2018-17432</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17433/">CVE-2018-17433</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17434/">CVE-2018-17434</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17435/">CVE-2018-17435</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17436/">CVE-2018-17436</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17437/">CVE-2018-17437</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-17438/">CVE-2018-17438</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10809/">CVE-2020-10809</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10810/">CVE-2020-10810</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10811/">CVE-2020-10811</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692668" comment="hdf5-gnu-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692669" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692670" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692671" comment="hdf5-gnu-openmpi2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692672" comment="hdf5-hpc-examples-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692673" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692674" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692675" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692676" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692677" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692678" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692679" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692680" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692681" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692682" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692683" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692684" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692685" comment="hdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692686" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692687" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-static-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692688" comment="hdf5_1_10_8-gnu-openmpi2-hpc-module-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692689" comment="hdf5_1_10_8-hpc-examples-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692690" comment="libhdf5-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692691" comment="libhdf5-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692692" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692693" comment="libhdf5-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692694" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692695" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692696" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692697" comment="libhdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692698" comment="libhdf5_cpp-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692699" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692700" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692701" comment="libhdf5_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692702" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692703" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692704" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692705" comment="libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692706" comment="libhdf5_fortran-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692707" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692708" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692709" comment="libhdf5_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692710" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692711" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692712" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692713" comment="libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692714" comment="libhdf5_hl-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692715" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692716" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692717" comment="libhdf5_hl-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692718" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692719" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692720" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692721" comment="libhdf5_hl_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692722" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692723" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692724" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692725" comment="libhdf5_hl_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692726" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692727" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692728" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692729" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692730" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692731" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692732" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692733" comment="libhdf5_hl_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692734" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692735" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692736" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.4.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692737" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.4.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139893" version="1" class="patch">
	<metadata>
		<title>Security update for polkit (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194568" ref_url="https://bugzilla.suse.com/1194568" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4034" ref_url="https://www.suse.com/security/cve/CVE-2021-4034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010075.html" source="SUSE-SU"/>
		<description>
This update for polkit fixes the following issues:

- CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194568">SUSE bug 1194568</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4034/">CVE-2021-4034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664535" comment="libpolkit0-0.114-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664536" comment="polkit-0.114-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664537" comment="polkit-devel-0.114-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664538" comment="typelib-1_0-Polkit-1_0-0.114-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139894" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200027" ref_url="https://bugzilla.suse.com/1200027" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31736" ref_url="https://www.suse.com/security/cve/CVE-2022-31736/" source="CVE"/>
		<reference ref_id="CVE-2022-31737" ref_url="https://www.suse.com/security/cve/CVE-2022-31737/" source="CVE"/>
		<reference ref_id="CVE-2022-31738" ref_url="https://www.suse.com/security/cve/CVE-2022-31738/" source="CVE"/>
		<reference ref_id="CVE-2022-31739" ref_url="https://www.suse.com/security/cve/CVE-2022-31739/" source="CVE"/>
		<reference ref_id="CVE-2022-31740" ref_url="https://www.suse.com/security/cve/CVE-2022-31740/" source="CVE"/>
		<reference ref_id="CVE-2022-31741" ref_url="https://www.suse.com/security/cve/CVE-2022-31741/" source="CVE"/>
		<reference ref_id="CVE-2022-31742" ref_url="https://www.suse.com/security/cve/CVE-2022-31742/" source="CVE"/>
		<reference ref_id="CVE-2022-31747" ref_url="https://www.suse.com/security/cve/CVE-2022-31747/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011229.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.10.0 ESR (MFSA 2022-21)(bsc#1200027)

- CVE-2022-31736: Cross-Origin resource's length leaked
- CVE-2022-31737: Heap buffer overflow in WebGL
- CVE-2022-31738: Browser window spoof using fullscreen mode
- CVE-2022-31739: Attacker-influenced path traversal when saving downloaded files
- CVE-2022-31740: Register allocation problem in WASM on arm64
- CVE-2022-31741: Uninitialized variable leads to invalid memory read
- CVE-2022-31742: Querying a WebAuthn token with a large number of allowCredential entries may have leaked cross-origin information
- CVE-2022-31747: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-02"/>
	<updated date="2022-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200027">SUSE bug 1200027</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31736/">CVE-2022-31736</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31737/">CVE-2022-31737</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31738/">CVE-2022-31738</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31739/">CVE-2022-31739</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31740/">CVE-2022-31740</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31741/">CVE-2022-31741</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-31742/">CVE-2022-31742</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31747/">CVE-2022-31747</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692486" comment="MozillaFirefox-91.10.0-150000.150.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692487" comment="MozillaFirefox-devel-91.10.0-150000.150.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692488" comment="MozillaFirefox-translations-common-91.10.0-150000.150.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692489" comment="MozillaFirefox-translations-other-91.10.0-150000.150.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139895" version="1" class="patch">
	<metadata>
		<title>Security update for fribidi (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196147" ref_url="https://bugzilla.suse.com/1196147" source="BUGZILLA"/>
		<reference ref_id="1196148" ref_url="https://bugzilla.suse.com/1196148" source="BUGZILLA"/>
		<reference ref_id="1196150" ref_url="https://bugzilla.suse.com/1196150" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25308" ref_url="https://www.suse.com/security/cve/CVE-2022-25308/" source="CVE"/>
		<reference ref_id="CVE-2022-25309" ref_url="https://www.suse.com/security/cve/CVE-2022-25309/" source="CVE"/>
		<reference ref_id="CVE-2022-25310" ref_url="https://www.suse.com/security/cve/CVE-2022-25310/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2029-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011256.html" source="SUSE-SU"/>
		<description>
This update for fribidi fixes the following issues:

- CVE-2022-25308: Fixed stack out of bounds read (bsc#1196147).
- CVE-2022-25309: Fixed heap-buffer-overflow in fribidi_cap_rtl_to_unicode (bsc#1196148).
- CVE-2022-25310: Fixed NULL pointer dereference in fribidi_remove_bidi_marks (bsc#1196150).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-09"/>
	<updated date="2022-06-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196147">SUSE bug 1196147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196148">SUSE bug 1196148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196150">SUSE bug 1196150</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-25308/">CVE-2022-25308</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-25309/">CVE-2022-25309</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-25310/">CVE-2022-25310</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692490" comment="fribidi-0.19.6-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692491" comment="fribidi-devel-0.19.6-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692492" comment="libfribidi0-0.19.6-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692738" comment="libfribidi0-32bit-0.19.6-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139896" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199287" ref_url="https://bugzilla.suse.com/1199287" source="BUGZILLA"/>
		<reference ref_id="1200106" ref_url="https://bugzilla.suse.com/1200106" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26700" ref_url="https://www.suse.com/security/cve/CVE-2022-26700/" source="CVE"/>
		<reference ref_id="CVE-2022-26709" ref_url="https://www.suse.com/security/cve/CVE-2022-26709/" source="CVE"/>
		<reference ref_id="CVE-2022-26716" ref_url="https://www.suse.com/security/cve/CVE-2022-26716/" source="CVE"/>
		<reference ref_id="CVE-2022-26717" ref_url="https://www.suse.com/security/cve/CVE-2022-26717/" source="CVE"/>
		<reference ref_id="CVE-2022-26719" ref_url="https://www.suse.com/security/cve/CVE-2022-26719/" source="CVE"/>
		<reference ref_id="CVE-2022-30293" ref_url="https://www.suse.com/security/cve/CVE-2022-30293/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011254.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.36.3 (bsc#1200106)

- CVE-2022-30293: Fixed heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer (bsc#1199287).
- CVE-2022-26700: Fixed memory corruption issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26709: Fixed use after free issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26716: Fixed use after free issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26717: Fixed memory corruption issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26719: Fixed memory corruption issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-09"/>
	<updated date="2022-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199287">SUSE bug 1199287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200106">SUSE bug 1200106</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26700/">CVE-2022-26700</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26709/">CVE-2022-26709</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26716/">CVE-2022-26716</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26717/">CVE-2022-26717</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26719/">CVE-2022-26719</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-30293/">CVE-2022-30293</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692493" comment="libjavascriptcoregtk-4_0-18-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692494" comment="libwebkit2gtk-4_0-37-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692495" comment="libwebkit2gtk3-lang-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692496" comment="typelib-1_0-JavaScriptCore-4_0-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692497" comment="typelib-1_0-WebKit2-4_0-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692498" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692499" comment="webkit2gtk-4_0-injected-bundles-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692500" comment="webkit2gtk3-devel-2.36.3-150000.3.103.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139897" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191184" ref_url="https://bugzilla.suse.com/1191184" source="BUGZILLA"/>
		<reference ref_id="1191185" ref_url="https://bugzilla.suse.com/1191185" source="BUGZILLA"/>
		<reference ref_id="1191186" ref_url="https://bugzilla.suse.com/1191186" source="BUGZILLA"/>
		<reference ref_id="1193282" ref_url="https://bugzilla.suse.com/1193282" source="BUGZILLA"/>
		<reference ref_id="1198460" ref_url="https://bugzilla.suse.com/1198460" source="BUGZILLA"/>
		<reference ref_id="1198493" ref_url="https://bugzilla.suse.com/1198493" source="BUGZILLA"/>
		<reference ref_id="1198496" ref_url="https://bugzilla.suse.com/1198496" source="BUGZILLA"/>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3695" ref_url="https://www.suse.com/security/cve/CVE-2021-3695/" source="CVE"/>
		<reference ref_id="CVE-2021-3696" ref_url="https://www.suse.com/security/cve/CVE-2021-3696/" source="CVE"/>
		<reference ref_id="CVE-2021-3697" ref_url="https://www.suse.com/security/cve/CVE-2021-3697/" source="CVE"/>
		<reference ref_id="CVE-2022-28733" ref_url="https://www.suse.com/security/cve/CVE-2022-28733/" source="CVE"/>
		<reference ref_id="CVE-2022-28734" ref_url="https://www.suse.com/security/cve/CVE-2022-28734/" source="CVE"/>
		<reference ref_id="CVE-2022-28736" ref_url="https://www.suse.com/security/cve/CVE-2022-28736/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011260.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

Security fixes and hardenings for Boothole 3 / Boothole 2022 (bsc#1198581)

- CVE-2021-3695: Fixed that a crafted PNG grayscale image could lead to out-of-bounds write in heap (bsc#1191184)
- CVE-2021-3696: Fixed that a crafted PNG image could lead to out-of-bound write during huffman table handling (bsc#1191185)
- CVE-2021-3697: Fixed that a crafted JPEG image could lead to buffer underflow write in the heap (bsc#1191186)
- CVE-2022-28733: Fixed fragmentation math in net/ip (bsc#1198460)
- CVE-2022-28734: Fixed an out-of-bound write for split http headers (bsc#1198493)
- CVE-2022-28736: Fixed a use-after-free in chainloader command (bsc#1198496)
- Update SBAT security contact (bsc#1193282)
- Bump grub's SBAT generation to 2
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-10"/>
	<updated date="2022-06-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191184">SUSE bug 1191184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191185">SUSE bug 1191185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191186">SUSE bug 1191186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193282">SUSE bug 1193282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198460">SUSE bug 1198460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198493">SUSE bug 1198493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198496">SUSE bug 1198496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3695/">CVE-2021-3695</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3696/">CVE-2021-3696</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3697/">CVE-2021-3697</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28733/">CVE-2022-28733</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-28734/">CVE-2022-28734</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28736/">CVE-2022-28736</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692739" comment="grub2-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692740" comment="grub2-arm64-efi-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692741" comment="grub2-i386-pc-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692742" comment="grub2-snapper-plugin-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692743" comment="grub2-systemd-sleep-plugin-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692744" comment="grub2-x86_64-efi-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692745" comment="grub2-x86_64-xen-2.02-150100.123.12.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139898" version="1" class="patch">
	<metadata>
		<title>Security update for u-boot (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200363" ref_url="https://bugzilla.suse.com/1200363" source="BUGZILLA"/>
		<reference ref_id="1200364" ref_url="https://bugzilla.suse.com/1200364" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-30552" ref_url="https://www.suse.com/security/cve/CVE-2022-30552/" source="CVE"/>
		<reference ref_id="CVE-2022-30790" ref_url="https://www.suse.com/security/cve/CVE-2022-30790/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2057-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011271.html" source="SUSE-SU"/>
		<description>
This update for u-boot fixes the following issues:

- A large buffer overflow could have lead to a denial of service in the IP Packet deframentation code.
(CVE-2022-30552, bsc#1200363)
- A Hole Descriptor Overwrite could have lead to an arbitrary out of bounds write primitive.
(CVE-2022-30790, bsc#1200364)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-13"/>
	<updated date="2022-06-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200363">SUSE bug 1200363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200364">SUSE bug 1200364</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-30552/">CVE-2022-30552</cve>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30790/">CVE-2022-30790</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692746" comment="u-boot-rpi3-2019.01-150100.7.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692747" comment="u-boot-tools-2019.01-150100.7.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139899" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185637" ref_url="https://bugzilla.suse.com/1185637" source="BUGZILLA"/>
		<reference ref_id="1199166" ref_url="https://bugzilla.suse.com/1199166" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1292" ref_url="https://www.suse.com/security/cve/CVE-2022-1292/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011281.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-14"/>
	<updated date="2022-06-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185637">SUSE bug 1185637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199166">SUSE bug 1199166</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1292/">CVE-2022-1292</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692748" comment="libopenssl-1_1-devel-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692749" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692750" comment="libopenssl1_1-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692751" comment="libopenssl1_1-32bit-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692752" comment="libopenssl1_1-hmac-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692753" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692754" comment="openssl-1_1-1.1.0i-150100.14.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139900" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1070955" ref_url="https://bugzilla.suse.com/1070955" source="BUGZILLA"/>
		<reference ref_id="1191770" ref_url="https://bugzilla.suse.com/1191770" source="BUGZILLA"/>
		<reference ref_id="1192167" ref_url="https://bugzilla.suse.com/1192167" source="BUGZILLA"/>
		<reference ref_id="1192902" ref_url="https://bugzilla.suse.com/1192902" source="BUGZILLA"/>
		<reference ref_id="1192903" ref_url="https://bugzilla.suse.com/1192903" source="BUGZILLA"/>
		<reference ref_id="1192904" ref_url="https://bugzilla.suse.com/1192904" source="BUGZILLA"/>
		<reference ref_id="1193466" ref_url="https://bugzilla.suse.com/1193466" source="BUGZILLA"/>
		<reference ref_id="1193905" ref_url="https://bugzilla.suse.com/1193905" source="BUGZILLA"/>
		<reference ref_id="1194093" ref_url="https://bugzilla.suse.com/1194093" source="BUGZILLA"/>
		<reference ref_id="1194216" ref_url="https://bugzilla.suse.com/1194216" source="BUGZILLA"/>
		<reference ref_id="1194217" ref_url="https://bugzilla.suse.com/1194217" source="BUGZILLA"/>
		<reference ref_id="1194388" ref_url="https://bugzilla.suse.com/1194388" source="BUGZILLA"/>
		<reference ref_id="1194872" ref_url="https://bugzilla.suse.com/1194872" source="BUGZILLA"/>
		<reference ref_id="1194885" ref_url="https://bugzilla.suse.com/1194885" source="BUGZILLA"/>
		<reference ref_id="1195004" ref_url="https://bugzilla.suse.com/1195004" source="BUGZILLA"/>
		<reference ref_id="1195203" ref_url="https://bugzilla.suse.com/1195203" source="BUGZILLA"/>
		<reference ref_id="1195332" ref_url="https://bugzilla.suse.com/1195332" source="BUGZILLA"/>
		<reference ref_id="1195354" ref_url="https://bugzilla.suse.com/1195354" source="BUGZILLA"/>
		<reference ref_id="1196361" ref_url="https://bugzilla.suse.com/1196361" source="BUGZILLA"/>
		<reference ref_id="1198596" ref_url="https://bugzilla.suse.com/1198596" source="BUGZILLA"/>
		<reference ref_id="1198748" ref_url="https://bugzilla.suse.com/1198748" source="BUGZILLA"/>
		<reference ref_id="1199331" ref_url="https://bugzilla.suse.com/1199331" source="BUGZILLA"/>
		<reference ref_id="1199333" ref_url="https://bugzilla.suse.com/1199333" source="BUGZILLA"/>
		<reference ref_id="1199334" ref_url="https://bugzilla.suse.com/1199334" source="BUGZILLA"/>
		<reference ref_id="1199651" ref_url="https://bugzilla.suse.com/1199651" source="BUGZILLA"/>
		<reference ref_id="1199655" ref_url="https://bugzilla.suse.com/1199655" source="BUGZILLA"/>
		<reference ref_id="1199693" ref_url="https://bugzilla.suse.com/1199693" source="BUGZILLA"/>
		<reference ref_id="1199745" ref_url="https://bugzilla.suse.com/1199745" source="BUGZILLA"/>
		<reference ref_id="1199747" ref_url="https://bugzilla.suse.com/1199747" source="BUGZILLA"/>
		<reference ref_id="1199936" ref_url="https://bugzilla.suse.com/1199936" source="BUGZILLA"/>
		<reference ref_id="1200010" ref_url="https://bugzilla.suse.com/1200010" source="BUGZILLA"/>
		<reference ref_id="1200011" ref_url="https://bugzilla.suse.com/1200011" source="BUGZILLA"/>
		<reference ref_id="1200012" ref_url="https://bugzilla.suse.com/1200012" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17087" ref_url="https://www.suse.com/security/cve/CVE-2017-17087/" source="CVE"/>
		<reference ref_id="CVE-2021-3778" ref_url="https://www.suse.com/security/cve/CVE-2021-3778/" source="CVE"/>
		<reference ref_id="CVE-2021-3796" ref_url="https://www.suse.com/security/cve/CVE-2021-3796/" source="CVE"/>
		<reference ref_id="CVE-2021-3872" ref_url="https://www.suse.com/security/cve/CVE-2021-3872/" source="CVE"/>
		<reference ref_id="CVE-2021-3875" ref_url="https://www.suse.com/security/cve/CVE-2021-3875/" source="CVE"/>
		<reference ref_id="CVE-2021-3903" ref_url="https://www.suse.com/security/cve/CVE-2021-3903/" source="CVE"/>
		<reference ref_id="CVE-2021-3927" ref_url="https://www.suse.com/security/cve/CVE-2021-3927/" source="CVE"/>
		<reference ref_id="CVE-2021-3928" ref_url="https://www.suse.com/security/cve/CVE-2021-3928/" source="CVE"/>
		<reference ref_id="CVE-2021-3968" ref_url="https://www.suse.com/security/cve/CVE-2021-3968/" source="CVE"/>
		<reference ref_id="CVE-2021-3973" ref_url="https://www.suse.com/security/cve/CVE-2021-3973/" source="CVE"/>
		<reference ref_id="CVE-2021-3974" ref_url="https://www.suse.com/security/cve/CVE-2021-3974/" source="CVE"/>
		<reference ref_id="CVE-2021-3984" ref_url="https://www.suse.com/security/cve/CVE-2021-3984/" source="CVE"/>
		<reference ref_id="CVE-2021-4019" ref_url="https://www.suse.com/security/cve/CVE-2021-4019/" source="CVE"/>
		<reference ref_id="CVE-2021-4069" ref_url="https://www.suse.com/security/cve/CVE-2021-4069/" source="CVE"/>
		<reference ref_id="CVE-2021-4136" ref_url="https://www.suse.com/security/cve/CVE-2021-4136/" source="CVE"/>
		<reference ref_id="CVE-2021-4166" ref_url="https://www.suse.com/security/cve/CVE-2021-4166/" source="CVE"/>
		<reference ref_id="CVE-2021-4192" ref_url="https://www.suse.com/security/cve/CVE-2021-4192/" source="CVE"/>
		<reference ref_id="CVE-2021-4193" ref_url="https://www.suse.com/security/cve/CVE-2021-4193/" source="CVE"/>
		<reference ref_id="CVE-2021-46059" ref_url="https://www.suse.com/security/cve/CVE-2021-46059/" source="CVE"/>
		<reference ref_id="CVE-2022-0128" ref_url="https://www.suse.com/security/cve/CVE-2022-0128/" source="CVE"/>
		<reference ref_id="CVE-2022-0213" ref_url="https://www.suse.com/security/cve/CVE-2022-0213/" source="CVE"/>
		<reference ref_id="CVE-2022-0261" ref_url="https://www.suse.com/security/cve/CVE-2022-0261/" source="CVE"/>
		<reference ref_id="CVE-2022-0318" ref_url="https://www.suse.com/security/cve/CVE-2022-0318/" source="CVE"/>
		<reference ref_id="CVE-2022-0319" ref_url="https://www.suse.com/security/cve/CVE-2022-0319/" source="CVE"/>
		<reference ref_id="CVE-2022-0351" ref_url="https://www.suse.com/security/cve/CVE-2022-0351/" source="CVE"/>
		<reference ref_id="CVE-2022-0359" ref_url="https://www.suse.com/security/cve/CVE-2022-0359/" source="CVE"/>
		<reference ref_id="CVE-2022-0361" ref_url="https://www.suse.com/security/cve/CVE-2022-0361/" source="CVE"/>
		<reference ref_id="CVE-2022-0392" ref_url="https://www.suse.com/security/cve/CVE-2022-0392/" source="CVE"/>
		<reference ref_id="CVE-2022-0407" ref_url="https://www.suse.com/security/cve/CVE-2022-0407/" source="CVE"/>
		<reference ref_id="CVE-2022-0413" ref_url="https://www.suse.com/security/cve/CVE-2022-0413/" source="CVE"/>
		<reference ref_id="CVE-2022-0696" ref_url="https://www.suse.com/security/cve/CVE-2022-0696/" source="CVE"/>
		<reference ref_id="CVE-2022-1381" ref_url="https://www.suse.com/security/cve/CVE-2022-1381/" source="CVE"/>
		<reference ref_id="CVE-2022-1420" ref_url="https://www.suse.com/security/cve/CVE-2022-1420/" source="CVE"/>
		<reference ref_id="CVE-2022-1616" ref_url="https://www.suse.com/security/cve/CVE-2022-1616/" source="CVE"/>
		<reference ref_id="CVE-2022-1619" ref_url="https://www.suse.com/security/cve/CVE-2022-1619/" source="CVE"/>
		<reference ref_id="CVE-2022-1620" ref_url="https://www.suse.com/security/cve/CVE-2022-1620/" source="CVE"/>
		<reference ref_id="CVE-2022-1733" ref_url="https://www.suse.com/security/cve/CVE-2022-1733/" source="CVE"/>
		<reference ref_id="CVE-2022-1735" ref_url="https://www.suse.com/security/cve/CVE-2022-1735/" source="CVE"/>
		<reference ref_id="CVE-2022-1771" ref_url="https://www.suse.com/security/cve/CVE-2022-1771/" source="CVE"/>
		<reference ref_id="CVE-2022-1785" ref_url="https://www.suse.com/security/cve/CVE-2022-1785/" source="CVE"/>
		<reference ref_id="CVE-2022-1796" ref_url="https://www.suse.com/security/cve/CVE-2022-1796/" source="CVE"/>
		<reference ref_id="CVE-2022-1851" ref_url="https://www.suse.com/security/cve/CVE-2022-1851/" source="CVE"/>
		<reference ref_id="CVE-2022-1897" ref_url="https://www.suse.com/security/cve/CVE-2022-1897/" source="CVE"/>
		<reference ref_id="CVE-2022-1898" ref_url="https://www.suse.com/security/cve/CVE-2022-1898/" source="CVE"/>
		<reference ref_id="CVE-2022-1927" ref_url="https://www.suse.com/security/cve/CVE-2022-1927/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011301.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

- CVE-2017-17087: Fixed information leak via .swp files (bsc#1070955).
- CVE-2021-3875: Fixed heap-based buffer overflow (bsc#1191770).
- CVE-2021-3903: Fixed heap-based buffer overflow (bsc#1192167).
- CVE-2021-3968: Fixed heap-based buffer overflow (bsc#1192902).
- CVE-2021-3973: Fixed heap-based buffer overflow (bsc#1192903).
- CVE-2021-3974: Fixed use-after-free (bsc#1192904).
- CVE-2021-4069: Fixed use-after-free in ex_open()in src/ex_docmd.c (bsc#1193466).
- CVE-2021-4136: Fixed heap-based buffer overflow (bsc#1193905).
- CVE-2021-4166: Fixed out-of-bounds read (bsc#1194093).
- CVE-2021-4192: Fixed use-after-free (bsc#1194217).
- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).
- CVE-2022-0128: Fixed out-of-bounds read (bsc#1194388).
- CVE-2022-0213: Fixed heap-based buffer overflow (bsc#1194885).
- CVE-2022-0261: Fixed heap-based buffer overflow (bsc#1194872).
- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).
- CVE-2022-0359: Fixed heap-based buffer overflow in init_ccline() in ex_getln.c (bsc#1195203).
- CVE-2022-0392: Fixed heap-based buffer overflow (bsc#1195332).
- CVE-2022-0407: Fixed heap-based buffer overflow (bsc#1195354).
- CVE-2022-0696: Fixed NULL pointer dereference (bsc#1196361).
- CVE-2022-1381: Fixed global heap buffer overflow in skip_range (bsc#1198596).
- CVE-2022-1420: Fixed out-of-range pointer offset (bsc#1198748).
- CVE-2022-1616: Fixed use-after-free in append_command (bsc#1199331).
- CVE-2022-1619: Fixed heap-based Buffer Overflow in function cmdline_erase_chars (bsc#1199333).
- CVE-2022-1620: Fixed NULL pointer dereference in function vim_regexec_string (bsc#1199334).
- CVE-2022-1733: Fixed heap-based buffer overflow in cindent.c (bsc#1199655).
- CVE-2022-1735: Fixed heap-based buffer overflow (bsc#1199651).
- CVE-2022-1771: Fixed stack exhaustion (bsc#1199693).
- CVE-2022-1785: Fixed out-of-bounds write (bsc#1199745).
- CVE-2022-1796: Fixed use-after-free in find_pattern_in_path (bsc#1199747).
- CVE-2022-1851: Fixed out-of-bounds read (bsc#1199936).
- CVE-2022-1897: Fixed out-of-bounds write (bsc#1200010).
- CVE-2022-1898: Fixed use-after-free (bsc#1200011).
- CVE-2022-1927: Fixed buffer over-read (bsc#1200012).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-16"/>
	<updated date="2022-06-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1070955">SUSE bug 1070955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191770">SUSE bug 1191770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192167">SUSE bug 1192167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192902">SUSE bug 1192902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192903">SUSE bug 1192903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192904">SUSE bug 1192904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193466">SUSE bug 1193466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193905">SUSE bug 1193905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194093">SUSE bug 1194093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194216">SUSE bug 1194216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194217">SUSE bug 1194217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194388">SUSE bug 1194388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194872">SUSE bug 1194872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194885">SUSE bug 1194885</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195004">SUSE bug 1195004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195203">SUSE bug 1195203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195332">SUSE bug 1195332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195354">SUSE bug 1195354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196361">SUSE bug 1196361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198596">SUSE bug 1198596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198748">SUSE bug 1198748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199331">SUSE bug 1199331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199333">SUSE bug 1199333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199334">SUSE bug 1199334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199651">SUSE bug 1199651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199655">SUSE bug 1199655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199693">SUSE bug 1199693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199745">SUSE bug 1199745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199747">SUSE bug 1199747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199936">SUSE bug 1199936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200010">SUSE bug 1200010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200011">SUSE bug 1200011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200012">SUSE bug 1200012</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17087/">CVE-2017-17087</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3778/">CVE-2021-3778</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3796/">CVE-2021-3796</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3872/">CVE-2021-3872</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3875/">CVE-2021-3875</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3903/">CVE-2021-3903</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3927/">CVE-2021-3927</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3928/">CVE-2021-3928</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3968/">CVE-2021-3968</cve>
	<cve impact="critical" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3973/">CVE-2021-3973</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3974/">CVE-2021-3974</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3984/">CVE-2021-3984</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4019/">CVE-2021-4019</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4069/">CVE-2021-4069</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4136/">CVE-2021-4136</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4166/">CVE-2021-4166</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4192/">CVE-2021-4192</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4193/">CVE-2021-4193</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46059/">CVE-2021-46059</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0128/">CVE-2022-0128</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0213/">CVE-2022-0213</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0261/">CVE-2022-0261</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0318/">CVE-2022-0318</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0319/">CVE-2022-0319</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0351/">CVE-2022-0351</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-0359/">CVE-2022-0359</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-0361/">CVE-2022-0361</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-0392/">CVE-2022-0392</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0407/">CVE-2022-0407</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0413/">CVE-2022-0413</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0696/">CVE-2022-0696</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1381/">CVE-2022-1381</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1420/">CVE-2022-1420</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1616/">CVE-2022-1616</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1619/">CVE-2022-1619</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1620/">CVE-2022-1620</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1733/">CVE-2022-1733</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1735/">CVE-2022-1735</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1771/">CVE-2022-1771</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1785/">CVE-2022-1785</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1796/">CVE-2022-1796</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1851/">CVE-2022-1851</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1897/">CVE-2022-1897</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1898/">CVE-2022-1898</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-1927/">CVE-2022-1927</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692514" comment="gvim-8.2.5038-150000.5.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692515" comment="vim-8.2.5038-150000.5.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684301" comment="vim-data-8.2.5038-150000.5.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684302" comment="vim-data-common-8.2.5038-150000.5.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139901" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198603" ref_url="https://bugzilla.suse.com/1198603" source="BUGZILLA"/>
		<reference ref_id="1198604" ref_url="https://bugzilla.suse.com/1198604" source="BUGZILLA"/>
		<reference ref_id="1198606" ref_url="https://bugzilla.suse.com/1198606" source="BUGZILLA"/>
		<reference ref_id="1198607" ref_url="https://bugzilla.suse.com/1198607" source="BUGZILLA"/>
		<reference ref_id="1198610" ref_url="https://bugzilla.suse.com/1198610" source="BUGZILLA"/>
		<reference ref_id="1198611" ref_url="https://bugzilla.suse.com/1198611" source="BUGZILLA"/>
		<reference ref_id="1198612" ref_url="https://bugzilla.suse.com/1198612" source="BUGZILLA"/>
		<reference ref_id="1198613" ref_url="https://bugzilla.suse.com/1198613" source="BUGZILLA"/>
		<reference ref_id="1198629" ref_url="https://bugzilla.suse.com/1198629" source="BUGZILLA"/>
		<reference ref_id="1199928" ref_url="https://bugzilla.suse.com/1199928" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46669" ref_url="https://www.suse.com/security/cve/CVE-2021-46669/" source="CVE"/>
		<reference ref_id="CVE-2022-21427" ref_url="https://www.suse.com/security/cve/CVE-2022-21427/" source="CVE"/>
		<reference ref_id="CVE-2022-27377" ref_url="https://www.suse.com/security/cve/CVE-2022-27377/" source="CVE"/>
		<reference ref_id="CVE-2022-27378" ref_url="https://www.suse.com/security/cve/CVE-2022-27378/" source="CVE"/>
		<reference ref_id="CVE-2022-27380" ref_url="https://www.suse.com/security/cve/CVE-2022-27380/" source="CVE"/>
		<reference ref_id="CVE-2022-27381" ref_url="https://www.suse.com/security/cve/CVE-2022-27381/" source="CVE"/>
		<reference ref_id="CVE-2022-27383" ref_url="https://www.suse.com/security/cve/CVE-2022-27383/" source="CVE"/>
		<reference ref_id="CVE-2022-27384" ref_url="https://www.suse.com/security/cve/CVE-2022-27384/" source="CVE"/>
		<reference ref_id="CVE-2022-27386" ref_url="https://www.suse.com/security/cve/CVE-2022-27386/" source="CVE"/>
		<reference ref_id="CVE-2022-27387" ref_url="https://www.suse.com/security/cve/CVE-2022-27387/" source="CVE"/>
		<reference ref_id="CVE-2022-27445" ref_url="https://www.suse.com/security/cve/CVE-2022-27445/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011306.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

- CVE-2021-46669 (bsc#1199928)
- CVE-2022-21427 (bsc#1199928)
- CVE-2022-27377 (bsc#1198603)
- CVE-2022-27378 (bsc#1198604)
- CVE-2022-27380 (bsc#1198606)
- CVE-2022-27381 (bsc#1198607)
- CVE-2022-27383 (bsc#1198610)
- CVE-2022-27384 (bsc#1198611)
- CVE-2022-27386 (bsc#1198612)
- CVE-2022-27387 (bsc#1198613)
- CVE-2022-27445 (bsc#1198629)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-16"/>
	<updated date="2022-06-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198603">SUSE bug 1198603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198604">SUSE bug 1198604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198606">SUSE bug 1198606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198607">SUSE bug 1198607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198610">SUSE bug 1198610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198611">SUSE bug 1198611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198612">SUSE bug 1198612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198613">SUSE bug 1198613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198629">SUSE bug 1198629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199928">SUSE bug 1199928</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46669/">CVE-2021-46669</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21427/">CVE-2022-21427</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27377/">CVE-2022-27377</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27378/">CVE-2022-27378</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27380/">CVE-2022-27380</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27381/">CVE-2022-27381</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27383/">CVE-2022-27383</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27384/">CVE-2022-27384</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27386/">CVE-2022-27386</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-27387/">CVE-2022-27387</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27445/">CVE-2022-27445</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692526" comment="libmysqld-devel-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692527" comment="libmysqld19-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692528" comment="mariadb-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692529" comment="mariadb-client-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692530" comment="mariadb-errormessages-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692531" comment="mariadb-tools-10.2.44-150000.3.54.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139902" version="1" class="patch">
	<metadata>
		<title>Security update for strongswan (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194471" ref_url="https://bugzilla.suse.com/1194471" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-45079" ref_url="https://www.suse.com/security/cve/CVE-2021-45079/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010126.html" source="SUSE-SU"/>
		<description>
This update for strongswan fixes the following issues:

- CVE-2021-45079: Fixed authentication bypass in EAP authentication. (bsc#1194471)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-27"/>
	<updated date="2022-01-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194471">SUSE bug 1194471</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-45079/">CVE-2021-45079</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664859" comment="strongswan-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664860" comment="strongswan-doc-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664861" comment="strongswan-hmac-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664862" comment="strongswan-ipsec-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664863" comment="strongswan-libs0-5.8.2-4.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139903" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1028340" ref_url="https://bugzilla.suse.com/1028340" source="BUGZILLA"/>
		<reference ref_id="1055710" ref_url="https://bugzilla.suse.com/1055710" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1084513" ref_url="https://bugzilla.suse.com/1084513" source="BUGZILLA"/>
		<reference ref_id="1087082" ref_url="https://bugzilla.suse.com/1087082" source="BUGZILLA"/>
		<reference ref_id="1114648" ref_url="https://bugzilla.suse.com/1114648" source="BUGZILLA"/>
		<reference ref_id="1158266" ref_url="https://bugzilla.suse.com/1158266" source="BUGZILLA"/>
		<reference ref_id="1172456" ref_url="https://bugzilla.suse.com/1172456" source="BUGZILLA"/>
		<reference ref_id="1177282" ref_url="https://bugzilla.suse.com/1177282" source="BUGZILLA"/>
		<reference ref_id="1182171" ref_url="https://bugzilla.suse.com/1182171" source="BUGZILLA"/>
		<reference ref_id="1183723" ref_url="https://bugzilla.suse.com/1183723" source="BUGZILLA"/>
		<reference ref_id="1187055" ref_url="https://bugzilla.suse.com/1187055" source="BUGZILLA"/>
		<reference ref_id="1191647" ref_url="https://bugzilla.suse.com/1191647" source="BUGZILLA"/>
		<reference ref_id="1191958" ref_url="https://bugzilla.suse.com/1191958" source="BUGZILLA"/>
		<reference ref_id="1195065" ref_url="https://bugzilla.suse.com/1195065" source="BUGZILLA"/>
		<reference ref_id="1195651" ref_url="https://bugzilla.suse.com/1195651" source="BUGZILLA"/>
		<reference ref_id="1196018" ref_url="https://bugzilla.suse.com/1196018" source="BUGZILLA"/>
		<reference ref_id="1196367" ref_url="https://bugzilla.suse.com/1196367" source="BUGZILLA"/>
		<reference ref_id="1196426" ref_url="https://bugzilla.suse.com/1196426" source="BUGZILLA"/>
		<reference ref_id="1196999" ref_url="https://bugzilla.suse.com/1196999" source="BUGZILLA"/>
		<reference ref_id="1197219" ref_url="https://bugzilla.suse.com/1197219" source="BUGZILLA"/>
		<reference ref_id="1197343" ref_url="https://bugzilla.suse.com/1197343" source="BUGZILLA"/>
		<reference ref_id="1197663" ref_url="https://bugzilla.suse.com/1197663" source="BUGZILLA"/>
		<reference ref_id="1198400" ref_url="https://bugzilla.suse.com/1198400" source="BUGZILLA"/>
		<reference ref_id="1198516" ref_url="https://bugzilla.suse.com/1198516" source="BUGZILLA"/>
		<reference ref_id="1198577" ref_url="https://bugzilla.suse.com/1198577" source="BUGZILLA"/>
		<reference ref_id="1198660" ref_url="https://bugzilla.suse.com/1198660" source="BUGZILLA"/>
		<reference ref_id="1198687" ref_url="https://bugzilla.suse.com/1198687" source="BUGZILLA"/>
		<reference ref_id="1198742" ref_url="https://bugzilla.suse.com/1198742" source="BUGZILLA"/>
		<reference ref_id="1198777" ref_url="https://bugzilla.suse.com/1198777" source="BUGZILLA"/>
		<reference ref_id="1198825" ref_url="https://bugzilla.suse.com/1198825" source="BUGZILLA"/>
		<reference ref_id="1199012" ref_url="https://bugzilla.suse.com/1199012" source="BUGZILLA"/>
		<reference ref_id="1199063" ref_url="https://bugzilla.suse.com/1199063" source="BUGZILLA"/>
		<reference ref_id="1199314" ref_url="https://bugzilla.suse.com/1199314" source="BUGZILLA"/>
		<reference ref_id="1199399" ref_url="https://bugzilla.suse.com/1199399" source="BUGZILLA"/>
		<reference ref_id="1199426" ref_url="https://bugzilla.suse.com/1199426" source="BUGZILLA"/>
		<reference ref_id="1199505" ref_url="https://bugzilla.suse.com/1199505" source="BUGZILLA"/>
		<reference ref_id="1199507" ref_url="https://bugzilla.suse.com/1199507" source="BUGZILLA"/>
		<reference ref_id="1199605" ref_url="https://bugzilla.suse.com/1199605" source="BUGZILLA"/>
		<reference ref_id="1199650" ref_url="https://bugzilla.suse.com/1199650" source="BUGZILLA"/>
		<reference ref_id="1200143" ref_url="https://bugzilla.suse.com/1200143" source="BUGZILLA"/>
		<reference ref_id="1200144" ref_url="https://bugzilla.suse.com/1200144" source="BUGZILLA"/>
		<reference ref_id="1200249" ref_url="https://bugzilla.suse.com/1200249" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-13695" ref_url="https://www.suse.com/security/cve/CVE-2017-13695/" source="CVE"/>
		<reference ref_id="CVE-2018-7755" ref_url="https://www.suse.com/security/cve/CVE-2018-7755/" source="CVE"/>
		<reference ref_id="CVE-2019-19377" ref_url="https://www.suse.com/security/cve/CVE-2019-19377/" source="CVE"/>
		<reference ref_id="CVE-2019-20811" ref_url="https://www.suse.com/security/cve/CVE-2019-20811/" source="CVE"/>
		<reference ref_id="CVE-2020-26541" ref_url="https://www.suse.com/security/cve/CVE-2020-26541/" source="CVE"/>
		<reference ref_id="CVE-2021-20292" ref_url="https://www.suse.com/security/cve/CVE-2021-20292/" source="CVE"/>
		<reference ref_id="CVE-2021-20321" ref_url="https://www.suse.com/security/cve/CVE-2021-20321/" source="CVE"/>
		<reference ref_id="CVE-2021-33061" ref_url="https://www.suse.com/security/cve/CVE-2021-33061/" source="CVE"/>
		<reference ref_id="CVE-2021-38208" ref_url="https://www.suse.com/security/cve/CVE-2021-38208/" source="CVE"/>
		<reference ref_id="CVE-2021-39711" ref_url="https://www.suse.com/security/cve/CVE-2021-39711/" source="CVE"/>
		<reference ref_id="CVE-2021-43389" ref_url="https://www.suse.com/security/cve/CVE-2021-43389/" source="CVE"/>
		<reference ref_id="CVE-2022-1011" ref_url="https://www.suse.com/security/cve/CVE-2022-1011/" source="CVE"/>
		<reference ref_id="CVE-2022-1184" ref_url="https://www.suse.com/security/cve/CVE-2022-1184/" source="CVE"/>
		<reference ref_id="CVE-2022-1353" ref_url="https://www.suse.com/security/cve/CVE-2022-1353/" source="CVE"/>
		<reference ref_id="CVE-2022-1419" ref_url="https://www.suse.com/security/cve/CVE-2022-1419/" source="CVE"/>
		<reference ref_id="CVE-2022-1516" ref_url="https://www.suse.com/security/cve/CVE-2022-1516/" source="CVE"/>
		<reference ref_id="CVE-2022-1652" ref_url="https://www.suse.com/security/cve/CVE-2022-1652/" source="CVE"/>
		<reference ref_id="CVE-2022-1729" ref_url="https://www.suse.com/security/cve/CVE-2022-1729/" source="CVE"/>
		<reference ref_id="CVE-2022-1734" ref_url="https://www.suse.com/security/cve/CVE-2022-1734/" source="CVE"/>
		<reference ref_id="CVE-2022-1974" ref_url="https://www.suse.com/security/cve/CVE-2022-1974/" source="CVE"/>
		<reference ref_id="CVE-2022-1975" ref_url="https://www.suse.com/security/cve/CVE-2022-1975/" source="CVE"/>
		<reference ref_id="CVE-2022-21123" ref_url="https://www.suse.com/security/cve/CVE-2022-21123/" source="CVE"/>
		<reference ref_id="CVE-2022-21125" ref_url="https://www.suse.com/security/cve/CVE-2022-21125/" source="CVE"/>
		<reference ref_id="CVE-2022-21127" ref_url="https://www.suse.com/security/cve/CVE-2022-21127/" source="CVE"/>
		<reference ref_id="CVE-2022-21166" ref_url="https://www.suse.com/security/cve/CVE-2022-21166/" source="CVE"/>
		<reference ref_id="CVE-2022-21180" ref_url="https://www.suse.com/security/cve/CVE-2022-21180/" source="CVE"/>
		<reference ref_id="CVE-2022-21499" ref_url="https://www.suse.com/security/cve/CVE-2022-21499/" source="CVE"/>
		<reference ref_id="CVE-2022-22942" ref_url="https://www.suse.com/security/cve/CVE-2022-22942/" source="CVE"/>
		<reference ref_id="CVE-2022-28748" ref_url="https://www.suse.com/security/cve/CVE-2022-28748/" source="CVE"/>
		<reference ref_id="CVE-2022-30594" ref_url="https://www.suse.com/security/cve/CVE-2022-30594/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011310.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated.

The following security bugs were fixed:

- CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image. (bnc#1158266)
- CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a corrupted image. (bsc#1198577)
- CVE-2017-13695: Fixed a bug that caused a stack dump allowing local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted ACPI table. (bnc#1055710)
- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
- CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063).
- CVE-2021-39711: In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1197219).
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505).
- CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters that may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1196426).
- CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012).
- CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system (bnc#1191647).
- CVE-2019-20811: Fixed issue in rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, where a reference count is mishandled (bnc#1172456).
- CVE-2022-28748: Fixed memory lead over the network by ax88179_178a devices (bsc#1196018).
- CVE-2018-7755: Fixed an issue in the fd_locked_ioctl function in drivers/block/floppy.c. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR (bnc#1084513).
- CVE-2022-22942: Fixed stale file descriptors on failed usercopy (bsc#1195065).
- CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
- CVE-2021-43389: Fixed an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).
- CVE-2021-38208: Fixed a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call (bnc#1187055).
- CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c (bnc#1198516).
- CVE-2021-20292: Fixed object validation prior to performing operations on the object in nouveau_sgdma_create_ttm in Nouveau DRM subsystem (bnc#1183723).
- CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bnc#1197343)
- CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space. (bsc#1200144).
- CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism. (bnc#1177282)
- CVE-2022-1975: Fixed a bug that allows an attacker to crash the linux kernel by simulating nfc device from user-space. (bsc#1200143)
- CVE-2022-21499: Reinforce the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb. (bsc#1199426)
- CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605).

The following non-security bugs were fixed:

- btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (bsc#1199399).
- btrfs: tree-checker: fix incorrect printk format (bsc#1200249).
- net: ena: A typo fix in the file ena_com.h (bsc#1198777).
- net: ena: Add capabilities field with support for ENI stats capability (bsc#1198777).
- net: ena: Add debug prints for invalid req_id resets (bsc#1198777).
- net: ena: add device distinct log prefix to files (bsc#1198777).
- net: ena: add jiffies of last napi call to stats (bsc#1198777).
- net: ena: aggregate doorbell common operations into a function (bsc#1198777).
- net: ena: aggregate stats increase into a function (bsc#1198777).
- net: ena: Change ENI stats support check to use capabilities field (bsc#1198777).
- net: ena: Change return value of ena_calc_io_queue_size() to void (bsc#1198777).
- net: ena: Change the name of bad_csum variable (bsc#1198777).
- net: ena: Extract recurring driver reset code into a function (bsc#1198777).
- net: ena: fix coding style nits (bsc#1198777).
- net: ena: fix DMA mapping function issues in XDP (bsc#1198777).
- net: ena: Fix error handling when calculating max IO queues number (bsc#1198777).
- net: ena: fix inaccurate print type (bsc#1198777).
- net: ena: Fix undefined state when tx request id is out of bounds (bsc#1198777).
- net: ena: Fix wrong rx request id by resetting device (bsc#1198777).
- net: ena: Improve error logging in driver (bsc#1198777).
- net: ena: introduce ndo_xdp_xmit() function for XDP_REDIRECT (bsc#1198777).
- net: ena: introduce XDP redirect implementation (bsc#1198777).
- net: ena: make symbol 'ena_alloc_map_page' static (bsc#1198777).
- net: ena: Move reset completion print to the reset function (bsc#1198777).
- net: ena: optimize data access in fast-path code (bsc#1198777).
- net: ena: re-organize code to improve readability (bsc#1198777).
- net: ena: Remove ena_calc_queue_size_ctx struct (bsc#1198777).
- net: ena: remove extra words from comments (bsc#1198777).
- net: ena: Remove module param and change message severity (bsc#1198777).
- net: ena: Remove rcu_read_lock() around XDP program invocation (bsc#1198777).
- net: ena: Remove redundant return code check (bsc#1198777).
- net: ena: Remove unused code (bsc#1198777).
- net: ena: store values in their appropriate variables types (bsc#1198777).
- net: ena: Update XDP verdict upon failure (bsc#1198777).
- net: ena: use build_skb() in RX path (bsc#1198777).
- net: ena: use constant value for net_device allocation (bsc#1198777).
- net: ena: Use dev_alloc() in RX buffer allocation (bsc#1198777).
- net: ena: Use pci_sriov_configure_simple() to enable VFs (bsc#1198777).
- net: ena: use xdp_frame in XDP TX flow (bsc#1198777).
- net: ena: use xdp_return_frame() to free xdp frames (bsc#1198777).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Remove unnecessary check of cqe_type in mana_process_rx_cqe() (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Use struct_size() helper in mana_gd_create_dma_region() (bsc#1195651).
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (bsc#1199314).
- powerpc/64: Fix kernel stack 16-byte alignment (bsc#1196999 ltc#196609S git-fixes).
- powerpc/64: Interrupts save PPR on stack rather than thread_struct (bsc#1196999 ltc#196609).
- powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc#1182171 ltc#190900 bsc#1198660 ltc#197803).
- powerpc/pseries: Fix use after free in remove_phb_dynamic() (bsc#1065729 bsc#1198660 ltc#197803).
- scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() (bsc#1028340 bsc#1198825).
- SUNRPC: change locking for xs_swap_enable/disable (bsc#1196367).
- x86/pm: Save the MSR validity status at context setup (bsc#1114648).
- x86/speculation: Restore speculation related MSRs during S3 resume (bsc#1114648).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-17"/>
	<updated date="2022-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1028340">SUSE bug 1028340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055710">SUSE bug 1055710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084513">SUSE bug 1084513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114648">SUSE bug 1114648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158266">SUSE bug 1158266</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172456">SUSE bug 1172456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177282">SUSE bug 1177282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182171">SUSE bug 1182171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183723">SUSE bug 1183723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187055">SUSE bug 1187055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191647">SUSE bug 1191647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191958">SUSE bug 1191958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195065">SUSE bug 1195065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195651">SUSE bug 1195651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196018">SUSE bug 1196018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196367">SUSE bug 1196367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196426">SUSE bug 1196426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196999">SUSE bug 1196999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197219">SUSE bug 1197219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197343">SUSE bug 1197343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197663">SUSE bug 1197663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198400">SUSE bug 1198400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198516">SUSE bug 1198516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198577">SUSE bug 1198577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198660">SUSE bug 1198660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198687">SUSE bug 1198687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198742">SUSE bug 1198742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198777">SUSE bug 1198777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198825">SUSE bug 1198825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199012">SUSE bug 1199012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199063">SUSE bug 1199063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199314">SUSE bug 1199314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199399">SUSE bug 1199399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199426">SUSE bug 1199426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199505">SUSE bug 1199505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199507">SUSE bug 1199507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199605">SUSE bug 1199605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199650">SUSE bug 1199650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200143">SUSE bug 1200143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200144">SUSE bug 1200144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200249">SUSE bug 1200249</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-13695/">CVE-2017-13695</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-7755/">CVE-2018-7755</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19377/">CVE-2019-19377</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20811/">CVE-2019-20811</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26541/">CVE-2020-26541</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20292/">CVE-2021-20292</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20321/">CVE-2021-20321</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33061/">CVE-2021-33061</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38208/">CVE-2021-38208</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39711/">CVE-2021-39711</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43389/">CVE-2021-43389</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1011/">CVE-2022-1011</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1184/">CVE-2022-1184</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1353/">CVE-2022-1353</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1419/">CVE-2022-1419</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1516/">CVE-2022-1516</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1652/">CVE-2022-1652</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1729/">CVE-2022-1729</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1734/">CVE-2022-1734</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1974/">CVE-2022-1974</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1975/">CVE-2022-1975</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21123/">CVE-2022-21123</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21125/">CVE-2022-21125</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21127/">CVE-2022-21127</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21166/">CVE-2022-21166</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21180/">CVE-2022-21180</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-21499/">CVE-2022-21499</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22942/">CVE-2022-22942</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28748/">CVE-2022-28748</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30594/">CVE-2022-30594</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692755" comment="kernel-default-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692756" comment="kernel-default-base-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692757" comment="kernel-default-devel-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692758" comment="kernel-devel-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692759" comment="kernel-docs-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692760" comment="kernel-macros-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692761" comment="kernel-obs-build-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692762" comment="kernel-source-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692763" comment="kernel-syms-4.12.14-150100.197.114.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139904" version="1" class="patch">
	<metadata>
		<title>Security update for log4j (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194842" ref_url="https://bugzilla.suse.com/1194842" source="BUGZILLA"/>
		<reference ref_id="1194843" ref_url="https://bugzilla.suse.com/1194843" source="BUGZILLA"/>
		<reference ref_id="1194844" ref_url="https://bugzilla.suse.com/1194844" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23302" ref_url="https://www.suse.com/security/cve/CVE-2022-23302/" source="CVE"/>
		<reference ref_id="CVE-2022-23305" ref_url="https://www.suse.com/security/cve/CVE-2022-23305/" source="CVE"/>
		<reference ref_id="CVE-2022-23307" ref_url="https://www.suse.com/security/cve/CVE-2022-23307/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010127.html" source="SUSE-SU"/>
		<description>
This update for log4j fixes the following issues:

- CVE-2022-23307: Fixed deserialization flaw in the chainsaw component of log4j leading to malicious code execution. (bsc#1194844)
- CVE-2022-23305: Fixed SQL injection when application is configured to use JDBCAppender. (bsc#1194843)
- CVE-2022-23302: Fixed remote code execution when application is configured to use JMSSink. (bsc#1194842)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-27"/>
	<updated date="2022-01-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194842">SUSE bug 1194842</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194843">SUSE bug 1194843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194844">SUSE bug 1194844</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23302/">CVE-2022-23302</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23305/">CVE-2022-23305</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23307/">CVE-2022-23307</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664552" comment="log4j-1.2.17-5.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664553" comment="log4j-manual-1.2.17-5.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139905" version="1" class="patch">
	<metadata>
		<title>Security update for node_exporter (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1190535" ref_url="https://bugzilla.suse.com/1190535" source="BUGZILLA"/>
		<reference ref_id="1196338" ref_url="https://bugzilla.suse.com/1196338" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21698" ref_url="https://www.suse.com/security/cve/CVE-2022-21698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011315.html" source="SUSE-SU"/>
		<description>
This security update for golang-github-prometheus-node_exporter provides:

Update golang-github-prometheus-node_exporter from version 1.1.2 to version 1.3.0 (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239)

- CVE-2022-21698: Denial of service using InstrumentHandlerCounter
- Update vendor tarball with prometheus/client_golang 1.11.1
- Update to 1.3.0
  * [CHANGE] Add path label to rapl collector #2146
  * [CHANGE] Exclude filesystems under /run/credentials #2157
  * [CHANGE] Add TCPTimeouts to netstat default filter #2189
  * [FEATURE] Add lnstat collector for metrics from /proc/net/stat/ #1771
  * [FEATURE] Add darwin powersupply collector #1777
  * [FEATURE] Add support for monitoring GPUs on Linux #1998
  * [FEATURE] Add Darwin thermal collector #2032
  * [FEATURE] Add os release collector #2094
  * [FEATURE] Add netdev.address-info collector #2105
  * [FEATURE] Add clocksource metrics to time collector #2197
  * [ENHANCEMENT] Support glob textfile collector directories #1985
  * [ENHANCEMENT] ethtool: Expose node_ethtool_info metric #2080
  * [ENHANCEMENT] Use include/exclude flags for ethtool filtering #2165
  * [ENHANCEMENT] Add flag to disable guest CPU metrics #2123
  * [ENHANCEMENT] Add DMI collector #2131
  * [ENHANCEMENT] Add threads metrics to processes collector #2164
  * [ENHANCMMENT] Reduce timer GC delays in the Linux filesystem collector #2169
  * [ENHANCMMENT] Add TCPTimeouts to netstat default filter #2189
  * [ENHANCMMENT] Use SysctlTimeval for boottime collector on BSD #2208
  * [BUGFIX] ethtool: Sanitize metric names #2093
  * [BUGFIX] Fix ethtool collector for multiple interfaces #2126
  * [BUGFIX] Fix possible panic on macOS #2133
  * [BUGFIX] Collect flag_info and bug_info only for one core #2156
  * [BUGFIX] Prevent duplicate ethtool metric names #2187
- Update to 1.2.2
  * Bug fixes
     Fix processes collector long int parsing #2112
- Update to 1.2.1
  * Removed
     Remove obsolete capture permission denied error fix already included upstream
  * Bug fixes
     Fix zoneinfo parsing prometheus/procfs#386
     Fix nvme collector log noise #2091
     Fix rapl collector log noise #2092
- Update to 1.2.0
  * Changes
     Rename filesystem collector flags to match other collectors #2012
     Make node_exporter print usage to STDOUT #203
  * Features
     Add conntrack statistics metrics #1155
     Add ethtool stats collector #1832
     Add flag to ignore network speed if it is unknown #1989
     Add tapestats collector for Linux #2044
     Add nvme collector #2062
  * Enhancements
     Add ErrorLog plumbing to promhttp #1887
     Add more Infiniband counters #2019
     netclass: retrieve interface names and filter before parsing #2033
     Add time zone offset metric #2060
  * Bug fixes
     Handle errors from disabled PSI subsystem #1983
     Fix panic when using backwards compatible flags #2000
     Fix wrong value for OpenBSD memory buffer cache #2015
     Only initiate collectors once #2048
     Handle small backwards jumps in CPU idle #2067
- Capture permission denied error for 'energy_uj' file (bsc#1190535)
  		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-20"/>
	<updated date="2022-06-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190535">SUSE bug 1190535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196338">SUSE bug 1196338</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21698/">CVE-2022-21698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683011" comment="golang-github-prometheus-node_exporter-1.3.0-150100.3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139906" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197423" ref_url="https://bugzilla.suse.com/1197423" source="BUGZILLA"/>
		<reference ref_id="1197425" ref_url="https://bugzilla.suse.com/1197425" source="BUGZILLA"/>
		<reference ref_id="1197426" ref_url="https://bugzilla.suse.com/1197426" source="BUGZILLA"/>
		<reference ref_id="1199965" ref_url="https://bugzilla.suse.com/1199965" source="BUGZILLA"/>
		<reference ref_id="1199966" ref_url="https://bugzilla.suse.com/1199966" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26356" ref_url="https://www.suse.com/security/cve/CVE-2022-26356/" source="CVE"/>
		<reference ref_id="CVE-2022-26357" ref_url="https://www.suse.com/security/cve/CVE-2022-26357/" source="CVE"/>
		<reference ref_id="CVE-2022-26358" ref_url="https://www.suse.com/security/cve/CVE-2022-26358/" source="CVE"/>
		<reference ref_id="CVE-2022-26359" ref_url="https://www.suse.com/security/cve/CVE-2022-26359/" source="CVE"/>
		<reference ref_id="CVE-2022-26360" ref_url="https://www.suse.com/security/cve/CVE-2022-26360/" source="CVE"/>
		<reference ref_id="CVE-2022-26361" ref_url="https://www.suse.com/security/cve/CVE-2022-26361/" source="CVE"/>
		<reference ref_id="CVE-2022-26362" ref_url="https://www.suse.com/security/cve/CVE-2022-26362/" source="CVE"/>
		<reference ref_id="CVE-2022-26363" ref_url="https://www.suse.com/security/cve/CVE-2022-26363/" source="CVE"/>
		<reference ref_id="CVE-2022-26364" ref_url="https://www.suse.com/security/cve/CVE-2022-26364/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011336.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that
  could cause a denial of service in the host (bsc#1197423).
- CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts
  using VT-d IOMMU hardware, which could lead to a denial of service in the host
  (bsc#1197425).
- CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory
  corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be
  leveraged by an attacker to cause a denial of service in the host (bsc#1197426).
- CVE-2022-26362: Fixed race condition in typeref acquisition (bsc#1199965)
- CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (bsc#1199966)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-23"/>
	<updated date="2022-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197423">SUSE bug 1197423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197425">SUSE bug 1197425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197426">SUSE bug 1197426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199965">SUSE bug 1199965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199966">SUSE bug 1199966</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26356/">CVE-2022-26356</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26357/">CVE-2022-26357</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26358/">CVE-2022-26358</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26359/">CVE-2022-26359</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26360/">CVE-2022-26360</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26361/">CVE-2022-26361</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26362/">CVE-2022-26362</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26363/">CVE-2022-26363</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26364/">CVE-2022-26364</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692764" comment="xen-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692765" comment="xen-devel-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692766" comment="xen-libs-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692767" comment="xen-tools-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692768" comment="xen-tools-domU-4.12.4_24-150100.3.72.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139907" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200566" ref_url="https://bugzilla.suse.com/1200566" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22967" ref_url="https://www.suse.com/security/cve/CVE-2022-22967/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011334.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could be used to bypass authentication when using PAM (bsc#1200566)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-23"/>
	<updated date="2022-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200566">SUSE bug 1200566</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22967/">CVE-2022-22967</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692769" comment="python3-salt-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692770" comment="salt-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692771" comment="salt-api-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692772" comment="salt-bash-completion-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692773" comment="salt-cloud-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692774" comment="salt-doc-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692775" comment="salt-fish-completion-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692776" comment="salt-master-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692777" comment="salt-minion-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692778" comment="salt-proxy-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692779" comment="salt-ssh-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692780" comment="salt-standalone-formulas-configuration-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692781" comment="salt-syndic-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692782" comment="salt-transactional-update-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692783" comment="salt-zsh-completion-3004-150100.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139908" version="1" class="patch">
	<metadata>
		<title>Security update for 389-ds (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188455" ref_url="https://bugzilla.suse.com/1188455" source="BUGZILLA"/>
		<reference ref_id="1195324" ref_url="https://bugzilla.suse.com/1195324" source="BUGZILLA"/>
		<reference ref_id="1197275" ref_url="https://bugzilla.suse.com/1197275" source="BUGZILLA"/>
		<reference ref_id="1197345" ref_url="https://bugzilla.suse.com/1197345" source="BUGZILLA"/>
		<reference ref_id="1199889" ref_url="https://bugzilla.suse.com/1199889" source="BUGZILLA"/>
		<reference ref_id="1200175" ref_url="https://bugzilla.suse.com/1200175" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3652" ref_url="https://www.suse.com/security/cve/CVE-2021-3652/" source="CVE"/>
		<reference ref_id="CVE-2021-4091" ref_url="https://www.suse.com/security/cve/CVE-2021-4091/" source="CVE"/>
		<reference ref_id="CVE-2022-0918" ref_url="https://www.suse.com/security/cve/CVE-2022-0918/" source="CVE"/>
		<reference ref_id="CVE-2022-0996" ref_url="https://www.suse.com/security/cve/CVE-2022-0996/" source="CVE"/>
		<reference ref_id="CVE-2022-1949" ref_url="https://www.suse.com/security/cve/CVE-2022-1949/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011338.html" source="SUSE-SU"/>
		<description>
This update for 389-ds fixes the following issues:

- CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).
- CVE-2022-0918: Fixed denial of service issue via crafted messages (bsc#1197275).
- CVE-2022-0996: Fixed mishandling of password expiry (bsc#1197345).
- CVE-2021-4091: Fixed double free in psearch (bsc#1195324).
- CVE-2021-3652: Fixed disabled accounts may be able to bind with crypt passwords (bsc#1188455). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-23"/>
	<updated date="2022-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188455">SUSE bug 1188455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195324">SUSE bug 1195324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197275">SUSE bug 1197275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197345">SUSE bug 1197345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199889">SUSE bug 1199889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200175">SUSE bug 1200175</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3652/">CVE-2021-3652</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4091/">CVE-2021-4091</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0918/">CVE-2022-0918</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0996/">CVE-2022-0996</cve>
	<cve impact="important" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-1949/">CVE-2022-1949</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692784" comment="389-ds-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692785" comment="389-ds-devel-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692786" comment="389-ds-snmp-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692787" comment="lib389-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692788" comment="libsvrcore0-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139909" version="1" class="patch">
	<metadata>
		<title>Security update for openssl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200550" ref_url="https://bugzilla.suse.com/1200550" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2068" ref_url="https://www.suse.com/security/cve/CVE-2022-2068/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011349.html" source="SUSE-SU"/>
		<description>
This update for openssl fixes the following issues:

- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-24"/>
	<updated date="2022-06-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1200550">SUSE bug 1200550</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2068/">CVE-2022-2068</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692789" comment="libopenssl-1_1-devel-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692790" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692791" comment="libopenssl1_1-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692792" comment="libopenssl1_1-32bit-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692793" comment="libopenssl1_1-hmac-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692794" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692795" comment="openssl-1_1-1.1.0i-150100.14.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139910" version="1" class="patch">
	<metadata>
		<title>Security update for liblouis (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1130813" ref_url="https://bugzilla.suse.com/1130813" source="BUGZILLA"/>
		<reference ref_id="1197085" ref_url="https://bugzilla.suse.com/1197085" source="BUGZILLA"/>
		<reference ref_id="1200120" ref_url="https://bugzilla.suse.com/1200120" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26981" ref_url="https://www.suse.com/security/cve/CVE-2022-26981/" source="CVE"/>
		<reference ref_id="CVE-2022-31783" ref_url="https://www.suse.com/security/cve/CVE-2022-31783/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011386.html" source="SUSE-SU"/>
		<description>
This update for liblouis fixes the following issues:

- CVE-2022-26981: fix buffer overrun in compilePassOpcode (bsc#1197085).
- CVE-2022-31783: prevent an invalid memory write in compileRule (bsc#1200120).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-04"/>
	<updated date="2022-07-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1130813">SUSE bug 1130813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197085">SUSE bug 1197085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200120">SUSE bug 1200120</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26981/">CVE-2022-26981</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-31783/">CVE-2022-31783</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692549" comment="liblouis-data-3.3.0-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692550" comment="liblouis-devel-3.3.0-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692551" comment="liblouis14-3.3.0-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692552" comment="python3-louis-3.3.0-150000.4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139911" version="1" class="patch">
	<metadata>
		<title>Security update for dpdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011405.html" source="SUSE-SU"/>
		<description>

This update of dpdk fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-05"/>
	<updated date="2022-07-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692802" comment="dpdk-18.11.9-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692803" comment="dpdk-devel-18.11.9-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692804" comment="dpdk-kmp-default-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692805" comment="dpdk-tools-18.11.9-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692806" comment="libdpdk-18_11-18.11.9-150100.4.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139912" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200628" ref_url="https://bugzilla.suse.com/1200628" source="BUGZILLA"/>
		<reference ref_id="1200645" ref_url="https://bugzilla.suse.com/1200645" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31625" ref_url="https://www.suse.com/security/cve/CVE-2022-31625/" source="CVE"/>
		<reference ref_id="CVE-2022-31626" ref_url="https://www.suse.com/security/cve/CVE-2022-31626/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011408.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2022-31625: Fixed uninitialized pointers free in Postgres extension. (bsc#1200645)
- CVE-2022-31626: Fixed buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver. (bsc#1200628).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-05"/>
	<updated date="2022-07-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200628">SUSE bug 1200628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200645">SUSE bug 1200645</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31625/">CVE-2022-31625</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31626/">CVE-2022-31626</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692601" comment="apache2-mod_php7-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692602" comment="php7-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692603" comment="php7-bcmath-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692604" comment="php7-bz2-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692605" comment="php7-calendar-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692606" comment="php7-ctype-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692607" comment="php7-curl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692608" comment="php7-dba-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692609" comment="php7-devel-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692610" comment="php7-dom-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692611" comment="php7-enchant-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692612" comment="php7-exif-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692613" comment="php7-fastcgi-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692614" comment="php7-fileinfo-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692615" comment="php7-fpm-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692616" comment="php7-ftp-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692617" comment="php7-gd-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692618" comment="php7-gettext-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692619" comment="php7-gmp-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692620" comment="php7-iconv-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692621" comment="php7-intl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692622" comment="php7-json-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692623" comment="php7-ldap-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692624" comment="php7-mbstring-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692625" comment="php7-mysql-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692626" comment="php7-odbc-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692627" comment="php7-opcache-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692628" comment="php7-openssl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692629" comment="php7-pcntl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692630" comment="php7-pdo-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692631" comment="php7-pear-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692632" comment="php7-pear-Archive_Tar-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692633" comment="php7-pgsql-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692634" comment="php7-phar-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692635" comment="php7-posix-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692636" comment="php7-readline-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692637" comment="php7-shmop-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692638" comment="php7-snmp-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692639" comment="php7-soap-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692640" comment="php7-sockets-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692641" comment="php7-sodium-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692642" comment="php7-sqlite-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692643" comment="php7-sysvmsg-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692644" comment="php7-sysvsem-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692645" comment="php7-sysvshm-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692809" comment="php7-tidy-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692646" comment="php7-tokenizer-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692647" comment="php7-wddx-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692648" comment="php7-xmlreader-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692649" comment="php7-xmlrpc-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692650" comment="php7-xmlwriter-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692651" comment="php7-xsl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692652" comment="php7-zip-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692653" comment="php7-zlib-7.2.5-150000.4.95.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139913" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200793" ref_url="https://bugzilla.suse.com/1200793" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2200" ref_url="https://www.suse.com/security/cve/CVE-2022-2200/" source="CVE"/>
		<reference ref_id="CVE-2022-31744" ref_url="https://www.suse.com/security/cve/CVE-2022-31744/" source="CVE"/>
		<reference ref_id="CVE-2022-34468" ref_url="https://www.suse.com/security/cve/CVE-2022-34468/" source="CVE"/>
		<reference ref_id="CVE-2022-34470" ref_url="https://www.suse.com/security/cve/CVE-2022-34470/" source="CVE"/>
		<reference ref_id="CVE-2022-34472" ref_url="https://www.suse.com/security/cve/CVE-2022-34472/" source="CVE"/>
		<reference ref_id="CVE-2022-34478" ref_url="https://www.suse.com/security/cve/CVE-2022-34478/" source="CVE"/>
		<reference ref_id="CVE-2022-34479" ref_url="https://www.suse.com/security/cve/CVE-2022-34479/" source="CVE"/>
		<reference ref_id="CVE-2022-34481" ref_url="https://www.suse.com/security/cve/CVE-2022-34481/" source="CVE"/>
		<reference ref_id="CVE-2022-34484" ref_url="https://www.suse.com/security/cve/CVE-2022-34484/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011411.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 91.11.0 ESR (MFSA 2022-25) (bsc#1200793):

- CVE-2022-2200: Undesired attributes could be set as part of prototype pollution (bmo#1771381)
- CVE-2022-31744: CSP bypass enabling stylesheet injection (bmo#1757604)
- CVE-2022-34468: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI (bmo#1768537)
- CVE-2022-34470: Use-after-free in nsSHistory (bmo#1765951)
- CVE-2022-34472: Unavailable PAC file resulted in OCSP requests being blocked (bmo#1770123)
- CVE-2022-34478: Microsoft protocols can be attacked if a user accepts a prompt (bmo#1773717)
- CVE-2022-34479: A popup window could be resized in a way to overlay the address bar with web content (bmo#1745595)
- CVE-2022-34481: Potential integer overflow in ReplaceElementsAt (bmo#1497246)
- CVE-2022-34484: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11 (bmo#1763634, bmo#1772651)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-06"/>
	<updated date="2022-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200793">SUSE bug 1200793</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2200/">CVE-2022-2200</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-31744/">CVE-2022-31744</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34468/">CVE-2022-34468</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34470/">CVE-2022-34470</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34472/">CVE-2022-34472</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34478/">CVE-2022-34478</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34479/">CVE-2022-34479</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34481/">CVE-2022-34481</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34484/">CVE-2022-34484</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699032" comment="MozillaFirefox-91.11.0-150000.150.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699033" comment="MozillaFirefox-devel-91.11.0-150000.150.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699034" comment="MozillaFirefox-translations-common-91.11.0-150000.150.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699035" comment="MozillaFirefox-translations-other-91.11.0-150000.150.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139914" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201099" ref_url="https://bugzilla.suse.com/1201099" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2097" ref_url="https://www.suse.com/security/cve/CVE-2022-2097/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011422.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2022-2097: Fixed partial missing encryption in AES OCB mode (bsc#1201099).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-06"/>
	<updated date="2022-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201099">SUSE bug 1201099</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-2097/">CVE-2022-2097</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699102" comment="libopenssl-1_1-devel-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699103" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699104" comment="libopenssl1_1-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699105" comment="libopenssl1_1-32bit-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699106" comment="libopenssl1_1-hmac-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699107" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699108" comment="openssl-1_1-1.1.0i-150100.14.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139915" version="1" class="patch">
	<metadata>
		<title>Security update for oracleasm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011438.html" source="SUSE-SU"/>
		<description>

This update of oracleasm fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-06"/>
	<updated date="2022-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692807" comment="oracleasm-kmp-default-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139916" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200338" ref_url="https://bugzilla.suse.com/1200338" source="BUGZILLA"/>
		<reference ref_id="1200340" ref_url="https://bugzilla.suse.com/1200340" source="BUGZILLA"/>
		<reference ref_id="1200341" ref_url="https://bugzilla.suse.com/1200341" source="BUGZILLA"/>
		<reference ref_id="1200345" ref_url="https://bugzilla.suse.com/1200345" source="BUGZILLA"/>
		<reference ref_id="1200348" ref_url="https://bugzilla.suse.com/1200348" source="BUGZILLA"/>
		<reference ref_id="1200350" ref_url="https://bugzilla.suse.com/1200350" source="BUGZILLA"/>
		<reference ref_id="1200352" ref_url="https://bugzilla.suse.com/1200352" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26377" ref_url="https://www.suse.com/security/cve/CVE-2022-26377/" source="CVE"/>
		<reference ref_id="CVE-2022-28614" ref_url="https://www.suse.com/security/cve/CVE-2022-28614/" source="CVE"/>
		<reference ref_id="CVE-2022-28615" ref_url="https://www.suse.com/security/cve/CVE-2022-28615/" source="CVE"/>
		<reference ref_id="CVE-2022-29404" ref_url="https://www.suse.com/security/cve/CVE-2022-29404/" source="CVE"/>
		<reference ref_id="CVE-2022-30522" ref_url="https://www.suse.com/security/cve/CVE-2022-30522/" source="CVE"/>
		<reference ref_id="CVE-2022-30556" ref_url="https://www.suse.com/security/cve/CVE-2022-30556/" source="CVE"/>
		<reference ref_id="CVE-2022-31813" ref_url="https://www.suse.com/security/cve/CVE-2022-31813/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011487.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2022-26377: Fixed possible request smuggling in mod_proxy_ajp (bsc#1200338)
- CVE-2022-28614: Fixed read beyond bounds via ap_rwrite() (bsc#1200340)
- CVE-2022-28615: Fixed read beyond bounds in ap_strcmp_match() (bsc#1200341)
- CVE-2022-29404: Fixed denial of service in mod_lua r:parsebody (bsc#1200345)
- CVE-2022-30556: Fixed information disclosure in mod_lua with websockets (bsc#1200350)
- CVE-2022-30522: Fixed mod_sed denial of service (bsc#1200352)
- CVE-2022-31813: Fixed mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism (bsc#1200348)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200338">SUSE bug 1200338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200340">SUSE bug 1200340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200341">SUSE bug 1200341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200345">SUSE bug 1200345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200348">SUSE bug 1200348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200350">SUSE bug 1200350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200352">SUSE bug 1200352</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-26377/">CVE-2022-26377</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28614/">CVE-2022-28614</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-28615/">CVE-2022-28615</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-29404/">CVE-2022-29404</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-30522/">CVE-2022-30522</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-30556/">CVE-2022-30556</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-31813/">CVE-2022-31813</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692561" comment="apache2-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692562" comment="apache2-devel-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692563" comment="apache2-doc-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692564" comment="apache2-prefork-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692565" comment="apache2-utils-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692566" comment="apache2-worker-2.4.33-150000.3.69.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139917" version="1" class="patch">
	<metadata>
		<title>Security update for fwupdate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011486.html" source="SUSE-SU"/>
		<description>

This update of fwupdate fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684356" comment="fwupdate-12-150100.11.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684357" comment="fwupdate-devel-12-150100.11.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684358" comment="fwupdate-efi-12-150100.11.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684359" comment="libfwup1-12-150100.11.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139918" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker and runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192051" ref_url="https://bugzilla.suse.com/1192051" source="BUGZILLA"/>
		<reference ref_id="1199460" ref_url="https://bugzilla.suse.com/1199460" source="BUGZILLA"/>
		<reference ref_id="1199565" ref_url="https://bugzilla.suse.com/1199565" source="BUGZILLA"/>
		<reference ref_id="1200088" ref_url="https://bugzilla.suse.com/1200088" source="BUGZILLA"/>
		<reference ref_id="1200145" ref_url="https://bugzilla.suse.com/1200145" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29162" ref_url="https://www.suse.com/security/cve/CVE-2022-29162/" source="CVE"/>
		<reference ref_id="CVE-2022-31030" ref_url="https://www.suse.com/security/cve/CVE-2022-31030/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2341-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011489.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker and runc fixes the following issues:

containerd:

- CVE-2022-31030: Fixed denial of service via invocation of the ExecSync API (bsc#1200145)

docker:

- Update to Docker 20.10.17-ce. See upstream changelog online at
  https://docs.docker.com/engine/release-notes/#201017. (bsc#1200145)

runc:

Update to runc v1.1.3.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.3.

* Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
  s390 and s390x. This solves the issue where syscalls the host kernel did not
  support would return `-EPERM` despite the existence of the `-ENOSYS` stub
  code (this was due to how s390x does syscall multiplexing).
* Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
  intended; this fix does not affect runc binary itself but is important for
  libcontainer users such as Kubernetes.
* Inability to compile with recent clang due to an issue with duplicate
  constants in libseccomp-golang.
* When using systemd cgroup driver, skip adding device paths that don't exist,
  to stop systemd from emitting warnings about those paths.
* Socket activation was failing when more than 3 sockets were used.
* Various CI fixes.
* Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
- Fixed issues with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. (bsc#1192051 bsc#1199565)

Update to runc v1.1.2.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.2.

Security issue fixed:

- CVE-2022-29162: A bug was found in runc where runc exec --cap executed processes with
  non-empty inheritable Linux process capabilities, creating an atypical Linux
  environment. (bsc#1199460)

- `runc spec` no longer sets any inheritable capabilities in the created
  example OCI spec (`config.json`) file.

Update to runc v1.1.1.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.1.

* runc run/start can now run a container with read-only /dev in OCI spec,
  rather than error out. (#3355)
* runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
  libcontainer systemd v2 manager no longer errors out if one of the files
  listed in /sys/kernel/cgroup/delegate do not exist in container's
  cgroup. (#3387, #3404)
* Loosen OCI spec validation to avoid bogus 'Intel RDT is not supported'
  error. (#3406)
* libcontainer/cgroups no longer panics in cgroup v1 managers if stat
  of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)

Update to runc v1.1.0.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.0.

- libcontainer will now refuse to build without the nsenter package being
  correctly compiled (specifically this requires CGO to be enabled). This
  should avoid folks accidentally creating broken runc binaries (and
  incorrectly importing our internal libraries into their projects). (#3331)

Update to runc v1.1.0~rc1.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.

+ Add support for RDMA cgroup added in Linux 4.11.
* runc exec now produces exit code of 255 when the exec failed.
  This may help in distinguishing between runc exec failures
  (such as invalid options, non-running container or non-existent
  binary etc.) and failures of the command being executed.
+ runc run: new --keep option to skip removal exited containers artefacts.
  This might be useful to check the state (e.g. of cgroup controllers) after
  the container has￼exited.
+ seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
  (the latter is just an alias for SCMP_ACT_KILL).
+ seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
  users to create sophisticated seccomp filters where syscalls can be
  efficiently emulated by privileged processes on the host.
+ checkpoint/restore: add an option (--lsm-mount-context) to set
  a different LSM mount context on restore.
+ intelrdt: support ClosID parameter.
+ runc exec --cgroup: an option to specify a (non-top) in-container cgroup
  to use for the process being executed.
+ cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
  machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
  run/exec now adds the container to the appropriate cgroup under it).
+ sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
  behaviour.
+ mounts: add support for bind-mounts which are inaccessible after switching
  the user namespace. Note that this does not permit the container any
  additional access to the host filesystem, it simply allows containers to
  have bind-mounts configured for paths the user can access but have
  restrictive access control settings for other users.
+ Add support for recursive mount attributes using mount_setattr(2). These
  have the same names as the proposed mount(8) options -- just prepend r
  to the option name (such as rro).
+ Add runc features subcommand to allow runc users to detect what features
  runc has been built with. This includes critical information such as
  supported mount flags, hook names, and so on. Note that the output of this
  command is subject to change and will not be considered stable until runc
  1.2 at the earliest. The runtime-spec specification for this feature is
  being developed in opencontainers/runtime-spec#1130.
* system: improve performance of /proc/$pid/stat parsing.
* cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
  the ownership of certain cgroup control files (as per
  /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
  process.
* runc checkpoint/restore: fixed for containers with an external bind mount
  which destination is a symlink.
* cgroup: improve openat2 handling for cgroup directory handle hardening.
  runc delete -f now succeeds (rather than timing out) on a paused
  container.
* runc run/start/exec now refuses a frozen cgroup (paused container in case of
  exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of the release.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192051">SUSE bug 1192051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199460">SUSE bug 1199460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199565">SUSE bug 1199565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200088">SUSE bug 1200088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200145">SUSE bug 1200145</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-29162/">CVE-2022-29162</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-31030/">CVE-2022-31030</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692797" comment="containerd-1.6.6-150000.73.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692798" comment="containerd-ctr-1.6.6-150000.73.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692799" comment="docker-20.10.17_ce-150000.166.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684372" comment="docker-bash-completion-20.10.17_ce-150000.166.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692800" comment="runc-1.1.3-150000.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139919" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198511" ref_url="https://bugzilla.suse.com/1198511" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-20107" ref_url="https://www.suse.com/security/cve/CVE-2015-20107/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011485.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198511">SUSE bug 1198511</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2015-20107/">CVE-2015-20107</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692553" comment="libpython2_7-1_0-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692554" comment="python-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692555" comment="python-base-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692556" comment="python-curses-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692557" comment="python-devel-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692558" comment="python-gdbm-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692559" comment="python-tk-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692560" comment="python-xml-2.7.18-150000.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139920" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186819" ref_url="https://bugzilla.suse.com/1186819" source="BUGZILLA"/>
		<reference ref_id="1190566" ref_url="https://bugzilla.suse.com/1190566" source="BUGZILLA"/>
		<reference ref_id="1192249" ref_url="https://bugzilla.suse.com/1192249" source="BUGZILLA"/>
		<reference ref_id="1193179" ref_url="https://bugzilla.suse.com/1193179" source="BUGZILLA"/>
		<reference ref_id="1198511" ref_url="https://bugzilla.suse.com/1198511" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-20107" ref_url="https://www.suse.com/security/cve/CVE-2015-20107/" source="CVE"/>
		<reference ref_id="CVE-2021-3572" ref_url="https://www.suse.com/security/cve/CVE-2021-3572/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011496.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

Security issues fixed:

- CVE-2021-3572: Update bundled pip wheel to the latest SLE version (bsc#1186819)
- CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).

Other bugs fixed:

- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-11"/>
	<updated date="2022-07-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186819">SUSE bug 1186819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190566">SUSE bug 1190566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192249">SUSE bug 1192249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193179">SUSE bug 1193179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198511">SUSE bug 1198511</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2015-20107/">CVE-2015-20107</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3572/">CVE-2021-3572</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692535" comment="libpython3_6m1_0-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692536" comment="python3-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692537" comment="python3-base-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692538" comment="python3-curses-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692539" comment="python3-dbm-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692540" comment="python3-devel-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692541" comment="python3-idle-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692796" comment="python3-testsuite-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692542" comment="python3-tk-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692543" comment="python3-tools-3.6.15-150000.3.106.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139921" version="1" class="patch">
	<metadata>
		<title>Security update for pcre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199232" ref_url="https://bugzilla.suse.com/1199232" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1586" ref_url="https://www.suse.com/security/cve/CVE-2022-1586/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011510.html" source="SUSE-SU"/>
		<description>
This update for pcre fixes the following issues:

- CVE-2022-1586: Fixed unicode property matching issue. (bsc#1199232)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-12"/>
	<updated date="2022-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199232">SUSE bug 1199232</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1586/">CVE-2022-1586</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692654" comment="libpcre1-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684362" comment="libpcre1-32bit-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692655" comment="libpcre16-0-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692656" comment="libpcrecpp0-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684365" comment="libpcrecpp0-32bit-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692657" comment="libpcreposix0-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692658" comment="pcre-devel-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692659" comment="pcre-tools-8.45-150000.20.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139922" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194179" ref_url="https://bugzilla.suse.com/1194179" source="BUGZILLA"/>
		<reference ref_id="1194181" ref_url="https://bugzilla.suse.com/1194181" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2319" ref_url="https://www.suse.com/security/cve/CVE-2022-2319/" source="CVE"/>
		<reference ref_id="CVE-2022-2320" ref_url="https://www.suse.com/security/cve/CVE-2022-2320/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011518.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2022-2319: Fixed out-of-bounds access in _CheckSetSections() (ZDI-CAN-16062) (bsc#1194179).
- CVE-2022-2320: Fixed out-of-bounds access in CheckSetDeviceIndicators() (ZDI-CAN-16070) (bsc#1194181). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-12"/>
	<updated date="2022-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194179">SUSE bug 1194179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194181">SUSE bug 1194181</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2319/">CVE-2022-2319</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2320/">CVE-2022-2320</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699109" comment="xorg-x11-server-1.20.3-150100.14.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699110" comment="xorg-x11-server-extra-1.20.3-150100.14.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699111" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139923" version="1" class="patch">
	<metadata>
		<title>Security update for python-PyJWT (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199756" ref_url="https://bugzilla.suse.com/1199756" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29217" ref_url="https://www.suse.com/security/cve/CVE-2022-29217/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2403-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011549.html" source="SUSE-SU"/>
		<description>
This update for python-PyJWT fixes the following issues:

- CVE-2022-29217: Fixed key confusion through non-blocklisted public key format (bsc#1199756).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-14"/>
	<updated date="2022-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199756">SUSE bug 1199756</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29217/">CVE-2022-29217</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692808" comment="python3-PyJWT-1.7.1-150100.6.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139924" version="1" class="patch">
	<metadata>
		<title>Security update for crash (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011559.html" source="SUSE-SU"/>
		<description>

This update of crash fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-15"/>
	<updated date="2022-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699112" comment="crash-7.2.1-150100.9.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699113" comment="crash-devel-7.2.1-150100.9.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699114" comment="crash-gcore-7.2.1-150100.9.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699115" comment="crash-kmp-default-7.2.1_k4.12.14_150100.197.114-150100.9.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139925" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194013" ref_url="https://bugzilla.suse.com/1194013" source="BUGZILLA"/>
		<reference ref_id="1196901" ref_url="https://bugzilla.suse.com/1196901" source="BUGZILLA"/>
		<reference ref_id="1199487" ref_url="https://bugzilla.suse.com/1199487" source="BUGZILLA"/>
		<reference ref_id="1199657" ref_url="https://bugzilla.suse.com/1199657" source="BUGZILLA"/>
		<reference ref_id="1200571" ref_url="https://bugzilla.suse.com/1200571" source="BUGZILLA"/>
		<reference ref_id="1200599" ref_url="https://bugzilla.suse.com/1200599" source="BUGZILLA"/>
		<reference ref_id="1200604" ref_url="https://bugzilla.suse.com/1200604" source="BUGZILLA"/>
		<reference ref_id="1200605" ref_url="https://bugzilla.suse.com/1200605" source="BUGZILLA"/>
		<reference ref_id="1200608" ref_url="https://bugzilla.suse.com/1200608" source="BUGZILLA"/>
		<reference ref_id="1200619" ref_url="https://bugzilla.suse.com/1200619" source="BUGZILLA"/>
		<reference ref_id="1200692" ref_url="https://bugzilla.suse.com/1200692" source="BUGZILLA"/>
		<reference ref_id="1200762" ref_url="https://bugzilla.suse.com/1200762" source="BUGZILLA"/>
		<reference ref_id="1201050" ref_url="https://bugzilla.suse.com/1201050" source="BUGZILLA"/>
		<reference ref_id="1201080" ref_url="https://bugzilla.suse.com/1201080" source="BUGZILLA"/>
		<reference ref_id="1201251" ref_url="https://bugzilla.suse.com/1201251" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26341" ref_url="https://www.suse.com/security/cve/CVE-2021-26341/" source="CVE"/>
		<reference ref_id="CVE-2021-4157" ref_url="https://www.suse.com/security/cve/CVE-2021-4157/" source="CVE"/>
		<reference ref_id="CVE-2022-1679" ref_url="https://www.suse.com/security/cve/CVE-2022-1679/" source="CVE"/>
		<reference ref_id="CVE-2022-20132" ref_url="https://www.suse.com/security/cve/CVE-2022-20132/" source="CVE"/>
		<reference ref_id="CVE-2022-20141" ref_url="https://www.suse.com/security/cve/CVE-2022-20141/" source="CVE"/>
		<reference ref_id="CVE-2022-20154" ref_url="https://www.suse.com/security/cve/CVE-2022-20154/" source="CVE"/>
		<reference ref_id="CVE-2022-2318" ref_url="https://www.suse.com/security/cve/CVE-2022-2318/" source="CVE"/>
		<reference ref_id="CVE-2022-26365" ref_url="https://www.suse.com/security/cve/CVE-2022-26365/" source="CVE"/>
		<reference ref_id="CVE-2022-29900" ref_url="https://www.suse.com/security/cve/CVE-2022-29900/" source="CVE"/>
		<reference ref_id="CVE-2022-29901" ref_url="https://www.suse.com/security/cve/CVE-2022-29901/" source="CVE"/>
		<reference ref_id="CVE-2022-33740" ref_url="https://www.suse.com/security/cve/CVE-2022-33740/" source="CVE"/>
		<reference ref_id="CVE-2022-33741" ref_url="https://www.suse.com/security/cve/CVE-2022-33741/" source="CVE"/>
		<reference ref_id="CVE-2022-33742" ref_url="https://www.suse.com/security/cve/CVE-2022-33742/" source="CVE"/>
		<reference ref_id="CVE-2022-33981" ref_url="https://www.suse.com/security/cve/CVE-2022-33981/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011558.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).
- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).
- CVE-2022-20132: Fixed out of bounds read due to improper input validation in lg_probe and related functions of hid-lg.c (bsc#1200619).
- CVE-2022-33981: Fixed use-after-free in floppy driver (bsc#1200692)
- CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604).
- CVE-2021-4157: Fixed an out of memory bounds write flaw in the NFS subsystem, related to the replication of files with NFS. A user could potentially crash the system or escalate privileges on the system (bsc#1194013).
- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).
- CVE-2022-2318: Fixed a use-after-free vulnerabilities in the timer handler in net/rose/rose_timer.c that allow attackers to crash the system without any privileges (bsc#1201251).
- CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762).
- CVE-2021-26341: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bsc#1201050).

The following non-security bugs were fixed:

- exec: Force single empty string when argv is empty (bsc#1200571).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-15"/>
	<updated date="2022-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194013">SUSE bug 1194013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196901">SUSE bug 1196901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199487">SUSE bug 1199487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199657">SUSE bug 1199657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200571">SUSE bug 1200571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200599">SUSE bug 1200599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200604">SUSE bug 1200604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200605">SUSE bug 1200605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200608">SUSE bug 1200608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200619">SUSE bug 1200619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200692">SUSE bug 1200692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200762">SUSE bug 1200762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201050">SUSE bug 1201050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201080">SUSE bug 1201080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201251">SUSE bug 1201251</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-26341/">CVE-2021-26341</cve>
	<cve impact="low" cvss3="3.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4157/">CVE-2021-4157</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1679/">CVE-2022-1679</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-20132/">CVE-2022-20132</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20141/">CVE-2022-20141</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20154/">CVE-2022-20154</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2318/">CVE-2022-2318</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-26365/">CVE-2022-26365</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29900/">CVE-2022-29900</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29901/">CVE-2022-29901</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33740/">CVE-2022-33740</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33741/">CVE-2022-33741</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33742/">CVE-2022-33742</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-33981/">CVE-2022-33981</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699116" comment="kernel-default-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699117" comment="kernel-default-base-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699118" comment="kernel-default-devel-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699119" comment="kernel-devel-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699120" comment="kernel-docs-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699121" comment="kernel-macros-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699122" comment="kernel-obs-build-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699123" comment="kernel-source-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699124" comment="kernel-syms-4.12.14-150100.197.117.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139926" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201267" ref_url="https://bugzilla.suse.com/1201267" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-30550" ref_url="https://www.suse.com/security/cve/CVE-2022-30550/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2432-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011581.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 fixes the following issues:

- CVE-2022-30550: Fixed privilege escalation in dovecot when similar master and non-master passdbs are used (bsc#1201267).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-18"/>
	<updated date="2022-07-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201267">SUSE bug 1201267</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-30550/">CVE-2022-30550</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699125" comment="dovecot23-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699126" comment="dovecot23-backend-mysql-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699127" comment="dovecot23-backend-pgsql-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699128" comment="dovecot23-backend-sqlite-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699129" comment="dovecot23-devel-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699130" comment="dovecot23-fts-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699131" comment="dovecot23-fts-lucene-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699132" comment="dovecot23-fts-solr-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699133" comment="dovecot23-fts-squat-2.3.15-150100.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139927" version="1" class="patch">
	<metadata>
		<title>Security update for python2-numpy (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193907" ref_url="https://bugzilla.suse.com/1193907" source="BUGZILLA"/>
		<reference ref_id="1193911" ref_url="https://bugzilla.suse.com/1193911" source="BUGZILLA"/>
		<reference ref_id="1193913" ref_url="https://bugzilla.suse.com/1193913" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33430" ref_url="https://www.suse.com/security/cve/CVE-2021-33430/" source="CVE"/>
		<reference ref_id="CVE-2021-41495" ref_url="https://www.suse.com/security/cve/CVE-2021-41495/" source="CVE"/>
		<reference ref_id="CVE-2021-41496" ref_url="https://www.suse.com/security/cve/CVE-2021-41496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011595.html" source="SUSE-SU"/>
		<description>
This update for python2-numpy fixes the following issues:

- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort (bsc#1193911).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-19"/>
	<updated date="2022-07-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193907">SUSE bug 1193907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193911">SUSE bug 1193911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193913">SUSE bug 1193913</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33430/">CVE-2021-33430</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41495/">CVE-2021-41495</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41496/">CVE-2021-41496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699026" comment="python2-numpy-1.16.5-150000.1.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699027" comment="python2-numpy-devel-1.16.5-150000.1.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699028" comment="python2-numpy-gnu-hpc-1.16.5-150000.1.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699029" comment="python2-numpy-gnu-hpc-devel-1.16.5-150000.1.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699030" comment="python2-numpy_1_16_5-gnu-hpc-1.16.5-150000.1.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699031" comment="python2-numpy_1_16_5-gnu-hpc-devel-1.16.5-150000.1.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139928" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201221" ref_url="https://bugzilla.suse.com/1201221" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22662" ref_url="https://www.suse.com/security/cve/CVE-2022-22662/" source="CVE"/>
		<reference ref_id="CVE-2022-22677" ref_url="https://www.suse.com/security/cve/CVE-2022-22677/" source="CVE"/>
		<reference ref_id="CVE-2022-26710" ref_url="https://www.suse.com/security/cve/CVE-2022-26710/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011629.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.36.4 (bsc#1201221):

- CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information.
- CVE-2022-22677: The video in a webRTC call may be interrupted if the audio capture gets interrupted.
- CVE-2022-26710: Processing maliciously crafted web content may lead to arbitrary code execution.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201221">SUSE bug 1201221</bugzilla>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22662/">CVE-2022-22662</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-22677/">CVE-2022-22677</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26710/">CVE-2022-26710</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699083" comment="libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699084" comment="libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699085" comment="libwebkit2gtk3-lang-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699086" comment="typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699087" comment="typelib-1_0-WebKit2-4_0-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699088" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699089" comment="webkit2gtk-4_0-injected-bundles-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699090" comment="webkit2gtk3-devel-2.36.4-150000.3.106.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139929" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192079" ref_url="https://bugzilla.suse.com/1192079" source="BUGZILLA"/>
		<reference ref_id="1192080" ref_url="https://bugzilla.suse.com/1192080" source="BUGZILLA"/>
		<reference ref_id="1192086" ref_url="https://bugzilla.suse.com/1192086" source="BUGZILLA"/>
		<reference ref_id="1192087" ref_url="https://bugzilla.suse.com/1192087" source="BUGZILLA"/>
		<reference ref_id="1192228" ref_url="https://bugzilla.suse.com/1192228" source="BUGZILLA"/>
		<reference ref_id="1198486" ref_url="https://bugzilla.suse.com/1198486" source="BUGZILLA"/>
		<reference ref_id="1200027" ref_url="https://bugzilla.suse.com/1200027" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31741" ref_url="https://www.suse.com/security/cve/CVE-2022-31741/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2533-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011637.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

Various FIPS 140-3 related fixes were backported from SUSE Linux Enterprise 15 SP4:

- Makes the PBKDF known answer test compliant with NIST SP800-132. (bsc#1192079). 
- FIPS: Add on-demand integrity tests through sftk_FIPSRepeatIntegrityCheck()
  (bsc#1198980).
- FIPS: mark algorithms as approved/non-approved according to security policy
  (bsc#1191546, bsc#1201298).
- FIPS: remove hard disabling of unapproved algorithms. This requirement is now
  fulfilled by the service level indicator (bsc#1200325).
- Run test suite at build time, and make it pass (bsc#1198486).
- FIPS: skip algorithms that are hard disabled in FIPS mode.
- Prevent expired PayPalEE cert from failing the tests.
- Allow checksumming to be disabled, but only if we entered FIPS mode
  due to NSS_FIPS being set, not if it came from /proc.
- FIPS: Make the PBKDF known answer test compliant with NIST SP800-132.
- Update FIPS validation string to version-release format.
- FIPS: remove XCBC MAC from list of FIPS approved algorithms.
- Enable NSS_ENABLE_FIPS_INDICATORS and set NSS_FIPS_MODULE_ID
  for build.
- FIPS: claim 3DES unapproved in FIPS mode (bsc#1192080).
- FIPS: allow testing of unapproved algorithms (bsc#1192228).
- FIPS: add version indicators. (bmo#1729550, bsc#1192086).
- FIPS: fix some secret clearing (bmo#1697303, bsc#1192087).

Version update to NSS 3.79:

- Use PK11_GetSlotInfo instead of raw C_GetSlotInfo calls.
- Update mercurial in clang-format docker image.
- Use of uninitialized pointer in lg_init after alloc fail.
- selfserv and tstclnt should use PR_GetPrefLoopbackAddrInfo.
- Add SECMOD_LockedModuleHasRemovableSlots.
- Fix secasn1d parsing of indefinite SEQUENCE inside indefinite GROUP.
- Added RFC8422 compliant TLS &lt;= 1.2 undefined/compressed ECPointFormat extension alerts.
- TLS 1.3 Server: Send protocol_version alert on unsupported ClientHello.legacy_version.
- Correct invalid record inner and outer content type alerts.
- NSS does not properly import or export pkcs12 files with large passwords and pkcs5v2 encoding.
- improve error handling after nssCKFWInstance_CreateObjectHandle.
- Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple.
- NSS 3.79 should depend on NSPR 4.34   

Version update to NSS 3.78.1:

- Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple

Version update to NSS 3.78:

- Added TLS 1.3 zero-length inner plaintext checks and tests, zero-length record/fragment handling tests.
- Reworked overlong record size checks and added TLS1.3 specific boundaries.
- Add ECH Grease Support to tstclnt
- Add a strict variant of moz::pkix::CheckCertHostname.
- Change SSL_REUSE_SERVER_ECDHE_KEY default to false.
- Make SEC_PKCS12EnableCipher succeed
- Update zlib in NSS to 1.2.12.

Version update to NSS 3.77:

- Fix link to TLS page on wireshark wiki
- Add two D-TRUST 2020 root certificates.
- Add Telia Root CA v2 root certificate.
- Remove expired explicitly distrusted certificates from certdata.txt.
- support specific RSA-PSS parameters in mozilla::pkix
- Remove obsolete stateEnd check in SEC_ASN1DecoderUpdate.
- Remove token member from NSSSlot struct.
- Provide secure variants of mpp_pprime and mpp_make_prime.
- Support UTF-8 library path in the module spec string.
- Update nssUTF8_Length to RFC 3629 and fix buffer overrun.
- Update googletest to 1.11.0
- Add SetTls13GreaseEchSize to experimental API.
- TLS 1.3 Illegal legacy_version handling/alerts.
- Fix calculation of ECH HRR Transcript.
- Allow ld path to be set as environment variable.
- Ensure we don't read uninitialized memory in ssl gtests.
- Fix DataBuffer Move Assignment.
- internal_error alert on Certificate Request with sha1+ecdsa in TLS 1.3
- rework signature verification in mozilla::pkix

Version update to NSS 3.76.1

- Remove token member from NSSSlot struct.
- Hold tokensLock through nssToken_GetSlot calls in nssTrustDomain_GetActiveSlots.
- Check return value of PK11Slot_GetNSSToken.
- Use Wycheproof JSON for RSASSA-PSS
- Add SHA256 fingerprint comments to old certdata.txt entries.
- Avoid truncating files in nss-release-helper.py.
- Throw illegal_parameter alert for illegal extensions in handshake message.

Version update to NSS 3.75

- Make DottedOIDToCode.py compatible with python3.
- Avoid undefined shift in SSL_CERT_IS while fuzzing.
- Remove redundant key type check.
- Update ABI expectations to match ECH changes.
- Enable CKM_CHACHA20.
- check return on NSS_NoDB_Init and NSS_Shutdown.
- Run ECDSA test vectors from bltest as part of the CI tests.
- Add ECDSA test vectors to the bltest command line tool.
- Allow to build using clang's integrated assembler.
- Allow to override python for the build.
- test HKDF output rather than input.
- Use ASSERT macros to end failed tests early.
- move assignment operator for DataBuffer.
- Add test cases for ECH compression and unexpected extensions in SH.
- Update tests for ECH-13.
- Tidy up error handling.
- Add tests for ECH HRR Changes.
- Server only sends GREASE HRR extension if enabled by preference.
- Update generation of the Associated Data for ECH-13.
- When ECH is accepted, reject extensions which were only advertised in the Outer Client Hello.
- Allow for compressed, non-contiguous, extensions.
- Scramble the PSK extension in CHOuter.
- Split custom extension handling for ECH.
- Add ECH-13 HRR Handling.
- Client side ECH padding.
- Stricter ClientHelloInner Decompression.
- Remove ECH_inner extension, use new enum format.
- Update the version number for ECH-13 and adjust the ECHConfig size.

Version update to NSS 3.74

- mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses
- Ensure clients offer consistent ciphersuites after HRR
- NSS does not properly restrict server keys based on policy
- Set nssckbi version number to 2.54
- Replace Google Trust Services LLC (GTS) R4 root certificate
- Replace Google Trust Services LLC (GTS) R3 root certificate
- Replace Google Trust Services LLC (GTS) R2 root certificate
- Replace Google Trust Services LLC (GTS) R1 root certificate
- Replace GlobalSign ECC Root CA R4
- Remove Expired Root Certificates - DST Root CA X3
- Remove Expiring Cybertrust Global Root and GlobalSign root certificates
- Add renewed Autoridad de Certificacion Firmaprofesional CIF A62634068 root certificate
- Add iTrusChina ECC root certificate
- Add iTrusChina RSA root certificate
- Add ISRG Root X2 root certificate
- Add Chunghwa Telecom's HiPKI Root CA - G1 root certificate
- Avoid a clang 13 unused variable warning in opt build
- Check for missing signedData field
- Ensure DER encoded signatures are within size limits

- enable key logging option (boo#1195040)

Version update to NSS 3.73.1:

- Add SHA-2 support to mozilla::pkix's OSCP implementation

Version update to NSS 3.73

- check for missing signedData field.
- Ensure DER encoded signatures are within size limits.
- NSS needs FiPS 140-3 version indicators.
- pkix_CacheCert_Lookup doesn't return cached certs
- sunset Coverity from NSS

Fixed MFSA 2021-51 (bsc#1193170) CVE-2021-43527: Memory corruption via DER-encoded DSA and RSA-PSS signatures

Version update to NSS 3.72

- Fix nsinstall parallel failure.
- Increase KDF cache size to mitigate perf regression in about:logins

Version update to NSS 3.71

- Set nssckbi version number to 2.52.
- Respect server requirements of tlsfuzzer/test-tls13-signature-algorithms.py
- Import of PKCS#12 files with Camellia encryption is not supported
- Add HARICA Client ECC Root CA 2021.
- Add HARICA Client RSA Root CA 2021.
- Add HARICA TLS ECC Root CA 2021.
- Add HARICA TLS RSA Root CA 2021.
- Add TunTrust Root CA certificate to NSS.

Version update to NSS 3.70

- Update test case to verify fix.
- Explicitly disable downgrade check in TlsConnectStreamTls13.EchOuterWith12Max
- Explicitly disable downgrade check in TlsConnectTest.DisableFalseStartOnFallback
- Avoid using a lookup table in nssb64d.
- Use HW accelerated SHA2 on AArch64 Big Endian.
- Change default value of enableHelloDowngradeCheck to true.
- Cache additional PBE entries.
- Read HPKE vectors from official JSON.

Version update to NSS 3.69.1:

- Disable DTLS 1.0 and 1.1 by default
- integrity checks in key4.db not happening on private components with AES_CBC

NSS 3.69:

- Disable DTLS 1.0 and 1.1 by default (backed out again)
- integrity checks in key4.db not happening on private components with AES_CBC (backed out again)
- SSL handling of signature algorithms ignores environmental invalid algorithms.
- sqlite 3.34 changed it's open semantics, causing nss failures.
- Gtest update changed the gtest reports, losing gtest details in all.sh reports.
- NSS incorrectly accepting 1536 bit DH primes in FIPS mode
- SQLite calls could timeout in starvation situations.
- Coverity/cpp scanner errors found in nss 3.67
- Import the NSS documentation from MDN in nss/doc.
- NSS using a tempdir to measure sql performance not active

Version Update to 3.68.4 (bsc#1200027)

- CVE-2022-31741: Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple.  (bmo#1767590)


Mozilla NSPR was updated to version 4.34:

* add an API that returns a preferred loopback IP on hosts that have two IP stacks available.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192079">SUSE bug 1192079</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192080">SUSE bug 1192080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192086">SUSE bug 1192086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192087">SUSE bug 1192087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192228">SUSE bug 1192228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198486">SUSE bug 1198486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200027">SUSE bug 1200027</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31741/">CVE-2022-31741</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699059" comment="libfreebl3-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698490" comment="libfreebl3-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699060" comment="libfreebl3-hmac-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698492" comment="libfreebl3-hmac-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699061" comment="libsoftokn3-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698494" comment="libsoftokn3-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699062" comment="libsoftokn3-hmac-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698496" comment="libsoftokn3-hmac-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699063" comment="mozilla-nspr-4.34-150000.3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698498" comment="mozilla-nspr-32bit-4.34-150000.3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699064" comment="mozilla-nspr-devel-4.34-150000.3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699065" comment="mozilla-nss-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698501" comment="mozilla-nss-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699066" comment="mozilla-nss-certs-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698503" comment="mozilla-nss-certs-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699067" comment="mozilla-nss-devel-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699068" comment="mozilla-nss-sysinit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699069" comment="mozilla-nss-tools-3.79-150000.3.74.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139930" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200119" ref_url="https://bugzilla.suse.com/1200119" source="BUGZILLA"/>
		<reference ref_id="1201431" ref_url="https://bugzilla.suse.com/1201431" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29187" ref_url="https://www.suse.com/security/cve/CVE-2022-29187/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011633.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- CVE-2022-29187: Incomplete fix for CVE-2022-24765: potential command injection via git worktree (bsc#1201431).
- Allow to opt-out from the check added in the security fix for CVE-2022-24765 (bsc#1200119)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200119">SUSE bug 1200119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201431">SUSE bug 1201431</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29187/">CVE-2022-29187</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699071" comment="git-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699072" comment="git-arch-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699073" comment="git-core-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699074" comment="git-cvs-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699075" comment="git-daemon-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699076" comment="git-doc-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699077" comment="git-email-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699078" comment="git-gui-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699079" comment="git-svn-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699080" comment="git-web-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699081" comment="gitk-2.26.2-150000.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139931" version="1" class="patch">
	<metadata>
		<title>Security update for logrotate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192449" ref_url="https://bugzilla.suse.com/1192449" source="BUGZILLA"/>
		<reference ref_id="1200278" ref_url="https://bugzilla.suse.com/1200278" source="BUGZILLA"/>
		<reference ref_id="1200802" ref_url="https://bugzilla.suse.com/1200802" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011649.html" source="SUSE-SU"/>
		<description>
This update for logrotate fixes the following issues:

Security issues fixed:

- Improved coredump handing for SUID binaries (bsc#1192449).

Non-security issues fixed:

- Fixed 'logrotate emits unintended warning: keyword size not properly separated, found 0x3d' (bsc#1200278, bsc#1200802).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-25"/>
	<updated date="2022-07-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192449">SUSE bug 1192449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200278">SUSE bug 1200278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200802">SUSE bug 1200802</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699082" comment="logrotate-3.13.0-150000.4.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139932" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185923" ref_url="https://bugzilla.suse.com/1185923" source="BUGZILLA"/>
		<reference ref_id="1186654" ref_url="https://bugzilla.suse.com/1186654" source="BUGZILLA"/>
		<reference ref_id="1200907" ref_url="https://bugzilla.suse.com/1200907" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33620" ref_url="https://www.suse.com/security/cve/CVE-2021-33620/" source="CVE"/>
		<reference ref_id="CVE-2021-46784" ref_url="https://www.suse.com/security/cve/CVE-2021-46784/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011655.html" source="SUSE-SU"/>
		<description>
This update for squid fixes the following issues:

- CVE-2021-46784: Fixed DoS when processing gopher server responses. (bsc#1200907)
- CVE-2021-33620: Fixed DoS in HTTP Response processing (bsc#1185923, bsc#1186654)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-26"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185923">SUSE bug 1185923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186654">SUSE bug 1186654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200907">SUSE bug 1200907</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33620/">CVE-2021-33620</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46784/">CVE-2021-46784</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699070" comment="squid-4.17-150000.5.32.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139933" version="1" class="patch">
	<metadata>
		<title>Security update for python-M2Crypto (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1178829" ref_url="https://bugzilla.suse.com/1178829" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25657" ref_url="https://www.suse.com/security/cve/CVE-2020-25657/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2562-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011682.html" source="SUSE-SU"/>
		<description>
This update for python-M2Crypto fixes the following issues:

- CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-27"/>
	<updated date="2022-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178829">SUSE bug 1178829</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25657/">CVE-2020-25657</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699100" comment="python2-M2Crypto-0.35.2-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699101" comment="python3-M2Crypto-0.35.2-150000.3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139934" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201758" ref_url="https://bugzilla.suse.com/1201758" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-36318" ref_url="https://www.suse.com/security/cve/CVE-2022-36318/" source="CVE"/>
		<reference ref_id="CVE-2022-36319" ref_url="https://www.suse.com/security/cve/CVE-2022-36319/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011719.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.12.0 ESR (bsc#1201758):

- CVE-2022-36319: Mouse Position spoofing with CSS transforms
- CVE-2022-36318: Directory indexes for bundled resources reflected URL parameters
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-29"/>
	<updated date="2022-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201758">SUSE bug 1201758</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36318/">CVE-2022-36318</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36319/">CVE-2022-36319</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702508" comment="MozillaFirefox-91.12.0-150000.150.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702509" comment="MozillaFirefox-devel-91.12.0-150000.150.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702510" comment="MozillaFirefox-translations-common-91.12.0-150000.150.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702511" comment="MozillaFirefox-translations-other-91.12.0-150000.150.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139935" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199965" ref_url="https://bugzilla.suse.com/1199965" source="BUGZILLA"/>
		<reference ref_id="1199966" ref_url="https://bugzilla.suse.com/1199966" source="BUGZILLA"/>
		<reference ref_id="1200549" ref_url="https://bugzilla.suse.com/1200549" source="BUGZILLA"/>
		<reference ref_id="1201394" ref_url="https://bugzilla.suse.com/1201394" source="BUGZILLA"/>
		<reference ref_id="1201469" ref_url="https://bugzilla.suse.com/1201469" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21123" ref_url="https://www.suse.com/security/cve/CVE-2022-21123/" source="CVE"/>
		<reference ref_id="CVE-2022-21125" ref_url="https://www.suse.com/security/cve/CVE-2022-21125/" source="CVE"/>
		<reference ref_id="CVE-2022-21166" ref_url="https://www.suse.com/security/cve/CVE-2022-21166/" source="CVE"/>
		<reference ref_id="CVE-2022-23816" ref_url="https://www.suse.com/security/cve/CVE-2022-23816/" source="CVE"/>
		<reference ref_id="CVE-2022-23825" ref_url="https://www.suse.com/security/cve/CVE-2022-23825/" source="CVE"/>
		<reference ref_id="CVE-2022-26362" ref_url="https://www.suse.com/security/cve/CVE-2022-26362/" source="CVE"/>
		<reference ref_id="CVE-2022-26363" ref_url="https://www.suse.com/security/cve/CVE-2022-26363/" source="CVE"/>
		<reference ref_id="CVE-2022-26364" ref_url="https://www.suse.com/security/cve/CVE-2022-26364/" source="CVE"/>
		<reference ref_id="CVE-2022-29900" ref_url="https://www.suse.com/security/cve/CVE-2022-29900/" source="CVE"/>
		<reference ref_id="CVE-2022-33745" ref_url="https://www.suse.com/security/cve/CVE-2022-33745/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011720.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966).
- CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549).
- CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965).
- CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394).
- CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-29"/>
	<updated date="2022-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199965">SUSE bug 1199965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199966">SUSE bug 1199966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200549">SUSE bug 1200549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201394">SUSE bug 1201394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201469">SUSE bug 1201469</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21123/">CVE-2022-21123</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21125/">CVE-2022-21125</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21166/">CVE-2022-21166</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23816/">CVE-2022-23816</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23825/">CVE-2022-23825</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26362/">CVE-2022-26362</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26363/">CVE-2022-26363</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26364/">CVE-2022-26364</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29900/">CVE-2022-29900</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-33745/">CVE-2022-33745</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702512" comment="xen-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702513" comment="xen-devel-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702514" comment="xen-libs-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702515" comment="xen-tools-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702516" comment="xen-tools-domU-4.12.4_26-150100.3.75.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139936" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201496" ref_url="https://bugzilla.suse.com/1201496" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32742" ref_url="https://www.suse.com/security/cve/CVE-2022-32742/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2621-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011742.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1write_and_close, SMB1write_and_unlock (bso#15085) (bsc#1201496).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-02"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1201496">SUSE bug 1201496</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32742/">CVE-2022-32742</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702788" comment="libdcerpc-binding0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702789" comment="libdcerpc-binding0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702790" comment="libdcerpc-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702791" comment="libdcerpc-samr-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702792" comment="libdcerpc-samr0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702793" comment="libdcerpc0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702794" comment="libdcerpc0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702795" comment="libndr-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702796" comment="libndr-krb5pac-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702797" comment="libndr-krb5pac0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702798" comment="libndr-krb5pac0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702799" comment="libndr-nbt-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702800" comment="libndr-nbt0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702801" comment="libndr-nbt0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702802" comment="libndr-standard-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702803" comment="libndr-standard0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702804" comment="libndr-standard0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702805" comment="libndr0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702806" comment="libndr0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702807" comment="libnetapi-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702808" comment="libnetapi0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702809" comment="libnetapi0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702810" comment="libsamba-credentials-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702811" comment="libsamba-credentials0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702812" comment="libsamba-credentials0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702813" comment="libsamba-errors-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702814" comment="libsamba-errors0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702815" comment="libsamba-errors0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702816" comment="libsamba-hostconfig-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702817" comment="libsamba-hostconfig0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702818" comment="libsamba-hostconfig0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702819" comment="libsamba-passdb-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702820" comment="libsamba-passdb0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702821" comment="libsamba-passdb0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702822" comment="libsamba-policy-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702823" comment="libsamba-policy-python3-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702824" comment="libsamba-policy0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702825" comment="libsamba-policy0-python3-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702826" comment="libsamba-util-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702827" comment="libsamba-util0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702828" comment="libsamba-util0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702829" comment="libsamdb-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702830" comment="libsamdb0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702831" comment="libsamdb0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702832" comment="libsmbclient-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702833" comment="libsmbclient0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702834" comment="libsmbconf-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702835" comment="libsmbconf0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702836" comment="libsmbconf0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702837" comment="libsmbldap-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702838" comment="libsmbldap2-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702839" comment="libsmbldap2-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702840" comment="libtevent-util-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702841" comment="libtevent-util0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702842" comment="libtevent-util0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702843" comment="libwbclient-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702844" comment="libwbclient0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702845" comment="libwbclient0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702846" comment="samba-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702847" comment="samba-ad-dc-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702848" comment="samba-client-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702849" comment="samba-core-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702850" comment="samba-dsdb-modules-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702851" comment="samba-libs-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702852" comment="samba-libs-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702853" comment="samba-libs-python-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702854" comment="samba-libs-python3-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702855" comment="samba-python-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702856" comment="samba-python3-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702857" comment="samba-winbind-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702858" comment="samba-winbind-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139937" version="1" class="patch">
	<metadata>
		<title>Security update for mokutil (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198458" ref_url="https://bugzilla.suse.com/1198458" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2636-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011750.html" source="SUSE-SU"/>
		<description>
This update for mokutil fixes the following issues:

- Adds SBAT revocation support to mokutil. (bsc#1198458)

New options added (see manpage):

- mokutil --sbat

  List all entries in SBAT.

- mokutil --set-sbat-policy  (latest | previous | delete)
  To set the SBAT acceptance policy.

- mokutil --list-sbat-revocations

  To list the current SBAT revocations.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-03"/>
	<updated date="2022-08-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1198458">SUSE bug 1198458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692801" comment="mokutil-0.3.0-150100.8.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139938" version="1" class="patch">
	<metadata>
		<title>Security update for pcre2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1164384" ref_url="https://bugzilla.suse.com/1164384" source="BUGZILLA"/>
		<reference ref_id="1199235" ref_url="https://bugzilla.suse.com/1199235" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20454" ref_url="https://www.suse.com/security/cve/CVE-2019-20454/" source="CVE"/>
		<reference ref_id="CVE-2022-1587" ref_url="https://www.suse.com/security/cve/CVE-2022-1587/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011755.html" source="SUSE-SU"/>
		<description>
This update for pcre2 fixes the following issues:

- CVE-2019-20454: Fixed out-of-bounds read in JIT mode when \X is used in non-UTF mode (bsc#1164384).
- CVE-2022-1587: Fixed out-of-bounds read due to bug in recursions (bsc#1199235).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-03"/>
	<updated date="2022-08-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1164384">SUSE bug 1164384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199235">SUSE bug 1199235</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20454/">CVE-2019-20454</cve>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1587/">CVE-2022-1587</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009701287" comment="libpcre2-16-0-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701288" comment="libpcre2-32-0-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701289" comment="libpcre2-8-0-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701290" comment="libpcre2-posix2-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701291" comment="pcre2-devel-10.31-150000.3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139939" version="1" class="patch">
	<metadata>
		<title>Security update for u-boot (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201214" ref_url="https://bugzilla.suse.com/1201214" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-34835" ref_url="https://www.suse.com/security/cve/CVE-2022-34835/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011796.html" source="SUSE-SU"/>
		<description>
This update for u-boot fixes the following issues:

- CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-04"/>
	<updated date="2022-08-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201214">SUSE bug 1201214</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34835/">CVE-2022-34835</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702160" comment="u-boot-rpi3-2019.01-150100.7.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702161" comment="u-boot-tools-2019.01-150100.7.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139940" version="1" class="patch">
	<metadata>
		<title>Security update for qpdf (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188514" ref_url="https://bugzilla.suse.com/1188514" source="BUGZILLA"/>
		<reference ref_id="1201830" ref_url="https://bugzilla.suse.com/1201830" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36978" ref_url="https://www.suse.com/security/cve/CVE-2021-36978/" source="CVE"/>
		<reference ref_id="CVE-2022-34503" ref_url="https://www.suse.com/security/cve/CVE-2022-34503/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011797.html" source="SUSE-SU"/>
		<description>
This update for qpdf fixes the following issues:

- CVE-2022-34503: Fixed a heap buffer overflow via the function QPDF:processXRefStream (bsc#1201830).
- CVE-2021-36978: Fixed heap-based buffer overflow in Pl_ASCII85Decoder::write (bsc#1188514).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-04"/>
	<updated date="2022-08-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188514">SUSE bug 1188514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201830">SUSE bug 1201830</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36978/">CVE-2021-36978</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-34503/">CVE-2022-34503</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702785" comment="libqpdf21-8.0.2-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702786" comment="qpdf-8.0.2-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702787" comment="qpdf-devel-8.0.2-150000.3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139941" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201684" ref_url="https://bugzilla.suse.com/1201684" source="BUGZILLA"/>
		<reference ref_id="1201692" ref_url="https://bugzilla.suse.com/1201692" source="BUGZILLA"/>
		<reference ref_id="1201694" ref_url="https://bugzilla.suse.com/1201694" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21540" ref_url="https://www.suse.com/security/cve/CVE-2022-21540/" source="CVE"/>
		<reference ref_id="CVE-2022-21541" ref_url="https://www.suse.com/security/cve/CVE-2022-21541/" source="CVE"/>
		<reference ref_id="CVE-2022-34169" ref_url="https://www.suse.com/security/cve/CVE-2022-34169/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011827.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)

- CVE-2022-21540: Improve class compilation (bsc#1201694)
- CVE-2022-21541: Enhance MethodHandle invocations (bsc#1201692)
- CVE-2022-34169: Improve Xalan supports (bsc#1201684)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-09"/>
	<updated date="2022-08-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201684">SUSE bug 1201684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201692">SUSE bug 1201692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201694">SUSE bug 1201694</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21540/">CVE-2022-21540</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21541/">CVE-2022-21541</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34169/">CVE-2022-34169</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009701868" comment="java-11-openjdk-11.0.16.0-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701869" comment="java-11-openjdk-demo-11.0.16.0-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701870" comment="java-11-openjdk-devel-11.0.16.0-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701871" comment="java-11-openjdk-headless-11.0.16.0-150000.3.83.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139942" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201980" ref_url="https://bugzilla.suse.com/1201980" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32792" ref_url="https://www.suse.com/security/cve/CVE-2022-32792/" source="CVE"/>
		<reference ref_id="CVE-2022-32816" ref_url="https://www.suse.com/security/cve/CVE-2022-32816/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011919.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.36.5 (bsc#1201980):
  - Add support for PAC proxy in the WebDriver implementation.
  - Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.

- Security fixes: 
  - CVE-2022-32792: Fixed processing maliciously crafted web content may lead to
    arbitrary code execution.
  - CVE-2022-32816: Fixed visiting a website that frames malicious content may lead to
    UI spoofing.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-16"/>
	<updated date="2022-08-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201980">SUSE bug 1201980</bugzilla>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32792/">CVE-2022-32792</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32816/">CVE-2022-32816</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009704384" comment="libjavascriptcoregtk-4_0-18-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704385" comment="libwebkit2gtk-4_0-37-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704386" comment="libwebkit2gtk3-lang-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704387" comment="typelib-1_0-JavaScriptCore-4_0-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704388" comment="typelib-1_0-WebKit2-4_0-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704389" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704390" comment="webkit2gtk-4_0-injected-bundles-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704391" comment="webkit2gtk3-devel-2.36.5-150000.3.109.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139943" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195775" ref_url="https://bugzilla.suse.com/1195775" source="BUGZILLA"/>
		<reference ref_id="1195926" ref_url="https://bugzilla.suse.com/1195926" source="BUGZILLA"/>
		<reference ref_id="1198484" ref_url="https://bugzilla.suse.com/1198484" source="BUGZILLA"/>
		<reference ref_id="1198829" ref_url="https://bugzilla.suse.com/1198829" source="BUGZILLA"/>
		<reference ref_id="1200442" ref_url="https://bugzilla.suse.com/1200442" source="BUGZILLA"/>
		<reference ref_id="1200598" ref_url="https://bugzilla.suse.com/1200598" source="BUGZILLA"/>
		<reference ref_id="1200910" ref_url="https://bugzilla.suse.com/1200910" source="BUGZILLA"/>
		<reference ref_id="1201429" ref_url="https://bugzilla.suse.com/1201429" source="BUGZILLA"/>
		<reference ref_id="1201635" ref_url="https://bugzilla.suse.com/1201635" source="BUGZILLA"/>
		<reference ref_id="1201636" ref_url="https://bugzilla.suse.com/1201636" source="BUGZILLA"/>
		<reference ref_id="1201644" ref_url="https://bugzilla.suse.com/1201644" source="BUGZILLA"/>
		<reference ref_id="1201926" ref_url="https://bugzilla.suse.com/1201926" source="BUGZILLA"/>
		<reference ref_id="1201930" ref_url="https://bugzilla.suse.com/1201930" source="BUGZILLA"/>
		<reference ref_id="1201940" ref_url="https://bugzilla.suse.com/1201940" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36557" ref_url="https://www.suse.com/security/cve/CVE-2020-36557/" source="CVE"/>
		<reference ref_id="CVE-2020-36558" ref_url="https://www.suse.com/security/cve/CVE-2020-36558/" source="CVE"/>
		<reference ref_id="CVE-2021-33655" ref_url="https://www.suse.com/security/cve/CVE-2021-33655/" source="CVE"/>
		<reference ref_id="CVE-2021-33656" ref_url="https://www.suse.com/security/cve/CVE-2021-33656/" source="CVE"/>
		<reference ref_id="CVE-2022-1462" ref_url="https://www.suse.com/security/cve/CVE-2022-1462/" source="CVE"/>
		<reference ref_id="CVE-2022-20166" ref_url="https://www.suse.com/security/cve/CVE-2022-20166/" source="CVE"/>
		<reference ref_id="CVE-2022-36946" ref_url="https://www.suse.com/security/cve/CVE-2022-36946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011923.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-36557: Fixed race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys that could lead to a use-after-free (bnc#1201429).
- CVE-2020-36558: Fixed race condition involving VT_RESIZEX that could lead to a NULL pointer dereference and general protection fault (bnc#1200910).
- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2021-33656: Fixed out of bounds write with ioctl PIO_FONT (bnc#1201636).
- CVE-2022-1462: Fixed an out-of-bounds read flaw in the TeleTYpe subsystem (bnc#1198829).
- CVE-2022-20166: Fixed possible out of bounds write due to sprintf unsafety that could cause local escalation of privilege (bnc#1200598).
- CVE-2022-36946: Fixed incorrect packet truncation in nfqnl_mangle() that could lead to remote DoS (bnc#1201940).

The following non-security bugs were fixed:

- cifs: On cifs_reconnect, resolve the hostname again (bsc#1201926).
- cifs: Simplify reconnect code when dfs upcall is enabled (bsc#1201926).
- cifs: To match file servers, make sure the server hostname matches (bsc#1201926).
- cifs: fix memory leak of smb3_fs_context_dup::server_hostname (bsc#1201926).
- cifs: set a minimum of 120s for next dns resolution (bsc#1201926).
- cifs: use the expiry output of dns_query to schedule next resolution (bsc#1201926).
- kvm: emulate: Fix SETcc emulation function offsets with SLS (bsc#1201930).
- kvm: emulate: do not adjust size of fastop and setcc subroutines (bsc#1201930).
- rpm/*.spec.in: remove backtick usage
- rpm/constraints.in: skip SLOW_DISK workers for kernel-source
- rpm/kernel-obs-build.spec.in: Also depend on dracut-systemd (bsc#1195775)
- rpm/kernel-obs-build.spec.in: add systemd-initrd and terminfo dracut module (bsc#1195775)
- rpm/kernel-obs-build.spec.in: use default dracut modules (bsc#1195926, bsc#1198484)
- x86/entry: Remove skip_r11rcx (bsc#1201644).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-16"/>
	<updated date="2022-08-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195775">SUSE bug 1195775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195926">SUSE bug 1195926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198484">SUSE bug 1198484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198829">SUSE bug 1198829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200442">SUSE bug 1200442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200598">SUSE bug 1200598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200910">SUSE bug 1200910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201429">SUSE bug 1201429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201635">SUSE bug 1201635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201636">SUSE bug 1201636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201644">SUSE bug 1201644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201926">SUSE bug 1201926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201930">SUSE bug 1201930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201940">SUSE bug 1201940</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36557/">CVE-2020-36557</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36558/">CVE-2020-36558</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33655/">CVE-2021-33655</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33656/">CVE-2021-33656</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1462/">CVE-2022-1462</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-20166/">CVE-2022-20166</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36946/">CVE-2022-36946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009704392" comment="kernel-default-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704393" comment="kernel-default-base-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704394" comment="kernel-default-devel-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704395" comment="kernel-devel-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704396" comment="kernel-docs-4.12.14-150100.197.120.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704397" comment="kernel-macros-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704398" comment="kernel-obs-build-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704399" comment="kernel-source-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704400" comment="kernel-syms-4.12.14-150100.197.120.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139944" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199223" ref_url="https://bugzilla.suse.com/1199223" source="BUGZILLA"/>
		<reference ref_id="1199224" ref_url="https://bugzilla.suse.com/1199224" source="BUGZILLA"/>
		<reference ref_id="1200735" ref_url="https://bugzilla.suse.com/1200735" source="BUGZILLA"/>
		<reference ref_id="1200737" ref_url="https://bugzilla.suse.com/1200737" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-27781" ref_url="https://www.suse.com/security/cve/CVE-2022-27781/" source="CVE"/>
		<reference ref_id="CVE-2022-27782" ref_url="https://www.suse.com/security/cve/CVE-2022-27782/" source="CVE"/>
		<reference ref_id="CVE-2022-32206" ref_url="https://www.suse.com/security/cve/CVE-2022-32206/" source="CVE"/>
		<reference ref_id="CVE-2022-32208" ref_url="https://www.suse.com/security/cve/CVE-2022-32208/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011931.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2022-27781: Fixed an issue where curl will get stuck in an infinite
  loop when trying to retrieve details about a TLS server's certificate chain (bnc#1199223).
- CVE-2022-27782: Fixed an issue where TLS and SSH connections would
  be reused even when a related option had been changed (bsc#1199224).
- CVE-2022-32206: Fixed an uncontrolled memory consumption issue caused
  by an unbounded number of compression layers (bsc#1200735).
- CVE-2022-32208: Fixed an incorrect message verification issue when
  performing FTP transfers using krb5 (bsc#1200737).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-17"/>
	<updated date="2022-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199223">SUSE bug 1199223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199224">SUSE bug 1199224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200735">SUSE bug 1200735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200737">SUSE bug 1200737</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-27781/">CVE-2022-27781</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-27782/">CVE-2022-27782</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-32206/">CVE-2022-32206</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32208/">CVE-2022-32208</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706283" comment="curl-7.60.0-150000.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706284" comment="libcurl-devel-7.60.0-150000.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706285" comment="libcurl4-7.60.0-150000.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706286" comment="libcurl4-32bit-7.60.0-150000.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139945" version="1" class="patch">
	<metadata>
		<title>Security update for gnutls (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196167" ref_url="https://bugzilla.suse.com/1196167" source="BUGZILLA"/>
		<reference ref_id="1202020" ref_url="https://bugzilla.suse.com/1202020" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4209" ref_url="https://www.suse.com/security/cve/CVE-2021-4209/" source="CVE"/>
		<reference ref_id="CVE-2022-2509" ref_url="https://www.suse.com/security/cve/CVE-2022-2509/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011930.html" source="SUSE-SU"/>
		<description>
This update for gnutls fixes the following issues:

- CVE-2022-2509: Fixed a double free issue during PKCS7 verification (bsc#1202020).
- CVE-2021-4209: Fixed null pointer dereference in MD_UPDATE (bsc#1196167). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-17"/>
	<updated date="2022-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196167">SUSE bug 1196167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202020">SUSE bug 1202020</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4209/">CVE-2021-4209</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2509/">CVE-2022-2509</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009705681" comment="gnutls-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705682" comment="libgnutls-devel-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705683" comment="libgnutls30-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705684" comment="libgnutls30-32bit-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705685" comment="libgnutls30-hmac-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705686" comment="libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705687" comment="libgnutlsxx-devel-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705688" comment="libgnutlsxx28-3.6.7-150000.6.45.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139946" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201727" ref_url="https://bugzilla.suse.com/1201727" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21233" ref_url="https://www.suse.com/security/cve/CVE-2022-21233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011932.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20220809 release (bsc#1201727):

- CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave (INTEL-SA-00657).
    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html

Other fixes:

- Update for functional issues.
    See also: https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update

- Updated Platforms:

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | B1       | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11
  | ADL            | C0       | 06-97-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-97-05/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | C0       | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12
  ------------------------------------------------------------------
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-17"/>
	<updated date="2022-08-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1201727">SUSE bug 1201727</bugzilla>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21233/">CVE-2022-21233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706922" comment="ucode-intel-20220809-150100.3.214.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139947" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194704" ref_url="https://bugzilla.suse.com/1194704" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0204" ref_url="https://www.suse.com/security/cve/CVE-2022-0204/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011940.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2022-0204: Fixed a buffer overflow in the implementation of the
  gatt protocol (bsc#1194704).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-18"/>
	<updated date="2022-08-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194704">SUSE bug 1194704</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-0204/">CVE-2022-0204</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706692" comment="bluez-5.48-150000.5.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706693" comment="bluez-devel-5.48-150000.5.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706694" comment="libbluetooth3-5.48-150000.5.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139948" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194859" ref_url="https://bugzilla.suse.com/1194859" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44142" ref_url="https://www.suse.com/security/cve/CVE-2021-44142/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010165.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:
	  
- CVE-2021-44142: Fixed out-of-Bound Read/Write on Samba vfs_fruit module. (bsc#1194859)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-01"/>
	<updated date="2022-02-01"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1194859">SUSE bug 1194859</bugzilla>
	<cve impact="critical" cvss3="9.9/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-44142/">CVE-2021-44142</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009665533" comment="libdcerpc-binding0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665534" comment="libdcerpc-binding0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665535" comment="libdcerpc-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665536" comment="libdcerpc-samr-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665537" comment="libdcerpc-samr0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665538" comment="libdcerpc0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665539" comment="libdcerpc0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665540" comment="libndr-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665541" comment="libndr-krb5pac-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665542" comment="libndr-krb5pac0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665543" comment="libndr-krb5pac0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665544" comment="libndr-nbt-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665545" comment="libndr-nbt0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665546" comment="libndr-nbt0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665547" comment="libndr-standard-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665548" comment="libndr-standard0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665549" comment="libndr-standard0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665550" comment="libndr0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665551" comment="libndr0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665552" comment="libnetapi-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665553" comment="libnetapi0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665554" comment="libnetapi0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665555" comment="libsamba-credentials-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665556" comment="libsamba-credentials0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665557" comment="libsamba-credentials0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665558" comment="libsamba-errors-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665559" comment="libsamba-errors0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665560" comment="libsamba-errors0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665561" comment="libsamba-hostconfig-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665562" comment="libsamba-hostconfig0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665563" comment="libsamba-hostconfig0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665564" comment="libsamba-passdb-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665565" comment="libsamba-passdb0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665566" comment="libsamba-passdb0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665567" comment="libsamba-policy-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665568" comment="libsamba-policy-python3-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665569" comment="libsamba-policy0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665570" comment="libsamba-policy0-python3-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665571" comment="libsamba-util-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665572" comment="libsamba-util0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665573" comment="libsamba-util0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665574" comment="libsamdb-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665575" comment="libsamdb0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665576" comment="libsamdb0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665577" comment="libsmbclient-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665578" comment="libsmbclient0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665579" comment="libsmbconf-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665580" comment="libsmbconf0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665581" comment="libsmbconf0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665582" comment="libsmbldap-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665583" comment="libsmbldap2-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665584" comment="libsmbldap2-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665585" comment="libtevent-util-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665586" comment="libtevent-util0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665587" comment="libtevent-util0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665588" comment="libwbclient-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665589" comment="libwbclient0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665590" comment="libwbclient0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665591" comment="samba-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665592" comment="samba-ad-dc-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665593" comment="samba-client-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665594" comment="samba-core-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665595" comment="samba-dsdb-modules-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665596" comment="samba-libs-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665597" comment="samba-libs-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665598" comment="samba-libs-python-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665599" comment="samba-libs-python3-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665600" comment="samba-python-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665601" comment="samba-python3-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665602" comment="samba-winbind-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665603" comment="samba-winbind-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139949" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188917" ref_url="https://bugzilla.suse.com/1188917" source="BUGZILLA"/>
		<reference ref_id="1189368" ref_url="https://bugzilla.suse.com/1189368" source="BUGZILLA"/>
		<reference ref_id="1191601" ref_url="https://bugzilla.suse.com/1191601" source="BUGZILLA"/>
		<reference ref_id="1191602" ref_url="https://bugzilla.suse.com/1191602" source="BUGZILLA"/>
		<reference ref_id="1201325" ref_url="https://bugzilla.suse.com/1201325" source="BUGZILLA"/>
		<reference ref_id="1201326" ref_url="https://bugzilla.suse.com/1201326" source="BUGZILLA"/>
		<reference ref_id="1201327" ref_url="https://bugzilla.suse.com/1201327" source="BUGZILLA"/>
		<reference ref_id="1201328" ref_url="https://bugzilla.suse.com/1201328" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22930" ref_url="https://www.suse.com/security/cve/CVE-2021-22930/" source="CVE"/>
		<reference ref_id="CVE-2021-22940" ref_url="https://www.suse.com/security/cve/CVE-2021-22940/" source="CVE"/>
		<reference ref_id="CVE-2021-22959" ref_url="https://www.suse.com/security/cve/CVE-2021-22959/" source="CVE"/>
		<reference ref_id="CVE-2021-22960" ref_url="https://www.suse.com/security/cve/CVE-2021-22960/" source="CVE"/>
		<reference ref_id="CVE-2022-32212" ref_url="https://www.suse.com/security/cve/CVE-2022-32212/" source="CVE"/>
		<reference ref_id="CVE-2022-32213" ref_url="https://www.suse.com/security/cve/CVE-2022-32213/" source="CVE"/>
		<reference ref_id="CVE-2022-32214" ref_url="https://www.suse.com/security/cve/CVE-2022-32214/" source="CVE"/>
		<reference ref_id="CVE-2022-32215" ref_url="https://www.suse.com/security/cve/CVE-2022-32215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011954.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- CVE-2021-22930, CVE-2021-22940: Fixed two memory corruption issues
  during HTTP/2 stream cancellation (bsc#1188917, bsc#1189368).
- CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2021-22960,
  CVE-2021-22959: Fixed multiple HTTP request smuggling issues in
  the underlying HTTP parser (bsc#1201325, bsc#1201326, bsc#1201327, 
  bsc#1191602, bsc#1191601).
- CVE-2022-32212: Fixed a DNS rebinding issue caused by improper IPv4
  validation (bsc#1201328).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-19"/>
	<updated date="2022-08-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188917">SUSE bug 1188917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189368">SUSE bug 1189368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191601">SUSE bug 1191601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191602">SUSE bug 1191602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201325">SUSE bug 1201325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201326">SUSE bug 1201326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201327">SUSE bug 1201327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201328">SUSE bug 1201328</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22930/">CVE-2021-22930</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22940/">CVE-2021-22940</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-22959/">CVE-2021-22959</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-22960/">CVE-2021-22960</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32212/">CVE-2022-32212</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32213/">CVE-2022-32213</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-32214/">CVE-2022-32214</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-32215/">CVE-2022-32215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706128" comment="nodejs10-10.24.1-150000.1.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706129" comment="nodejs10-devel-10.24.1-150000.1.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706130" comment="nodejs10-docs-10.24.1-150000.1.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706131" comment="npm10-10.24.1-150000.1.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139950" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193227" ref_url="https://bugzilla.suse.com/1193227" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8922" ref_url="https://www.suse.com/security/cve/CVE-2019-8922/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011959.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2019-8922: Fixed a buffer overflow in the implementation of the
  Service Discovery Protocol (bsc#1193227).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-22"/>
	<updated date="2022-08-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193227">SUSE bug 1193227</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-8922/">CVE-2019-8922</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707112" comment="bluez-5.48-150000.5.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707113" comment="bluez-devel-5.48-150000.5.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707114" comment="libbluetooth3-5.48-150000.5.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139951" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179945" ref_url="https://bugzilla.suse.com/1179945" source="BUGZILLA"/>
		<reference ref_id="1183168" ref_url="https://bugzilla.suse.com/1183168" source="BUGZILLA"/>
		<reference ref_id="1185952" ref_url="https://bugzilla.suse.com/1185952" source="BUGZILLA"/>
		<reference ref_id="1187751" ref_url="https://bugzilla.suse.com/1187751" source="BUGZILLA"/>
		<reference ref_id="1190177" ref_url="https://bugzilla.suse.com/1190177" source="BUGZILLA"/>
		<reference ref_id="1190740" ref_url="https://bugzilla.suse.com/1190740" source="BUGZILLA"/>
		<reference ref_id="1192516" ref_url="https://bugzilla.suse.com/1192516" source="BUGZILLA"/>
		<reference ref_id="1195680" ref_url="https://bugzilla.suse.com/1195680" source="BUGZILLA"/>
		<reference ref_id="1199475" ref_url="https://bugzilla.suse.com/1199475" source="BUGZILLA"/>
		<reference ref_id="1202368" ref_url="https://bugzilla.suse.com/1202368" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23214" ref_url="https://www.suse.com/security/cve/CVE-2021-23214/" source="CVE"/>
		<reference ref_id="CVE-2021-23222" ref_url="https://www.suse.com/security/cve/CVE-2021-23222/" source="CVE"/>
		<reference ref_id="CVE-2022-1552" ref_url="https://www.suse.com/security/cve/CVE-2022-1552/" source="CVE"/>
		<reference ref_id="CVE-2022-2625" ref_url="https://www.suse.com/security/cve/CVE-2022-2625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011992.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

- Upgrade to 10.22:
- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).

- Upgrade to 10.21:
- CVE-2022-1552: Confined additional operations within 'security restricted operation' sandboxes (bsc#1199475).

- Upgrade to 10.20 (bsc#1195680)
- Add constraints file with 12GB of memory for s390x as a workaround (boo#1190740)

- Upgrade to version 10.19 (bsc#1192516):
- CVE-2021-23214: Made the server reject extraneous data after an SSL or GSS encryption handshake
- CVE-2021-23222: Made libpq reject extraneous data after an SSL or GSS encryption handshake

- Fix for build with llvm12 on s390x. (bsc#1185952)
- Re-enable 'icu' for PostgreSQL 10. (bsc#1179945)
- Add postgresqlXX-server-devel as a dependency for postgresql13-server-devel. (bsc#1187751)
- Upgrade to version 10.18. (bsc#1190177)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-25"/>
	<updated date="2022-08-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179945">SUSE bug 1179945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183168">SUSE bug 1183168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185952">SUSE bug 1185952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187751">SUSE bug 1187751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190177">SUSE bug 1190177</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190740">SUSE bug 1190740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192516">SUSE bug 1192516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195680">SUSE bug 1195680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199475">SUSE bug 1199475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202368">SUSE bug 1202368</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23214/">CVE-2021-23214</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23222/">CVE-2021-23222</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1552/">CVE-2022-1552</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2625/">CVE-2022-2625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707103" comment="postgresql-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707104" comment="postgresql-contrib-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707105" comment="postgresql-devel-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707106" comment="postgresql-docs-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707107" comment="postgresql-plperl-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707108" comment="postgresql-plpython-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707109" comment="postgresql-pltcl-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707110" comment="postgresql-server-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707111" comment="postgresql-server-devel-12.0.1-150000.8.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139952" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202368" ref_url="https://bugzilla.suse.com/1202368" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2625" ref_url="https://www.suse.com/security/cve/CVE-2022-2625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2946-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012011.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

- Upgrade to 10.22:
- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202368">SUSE bug 1202368</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2625/">CVE-2022-2625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706914" comment="postgresql10-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706915" comment="postgresql10-contrib-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706916" comment="postgresql10-devel-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706917" comment="postgresql10-docs-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706918" comment="postgresql10-plperl-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706919" comment="postgresql10-plpython-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706920" comment="postgresql10-pltcl-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706921" comment="postgresql10-server-10.22-150100.8.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139953" version="1" class="patch">
	<metadata>
		<title>Security update for zlib (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202175" ref_url="https://bugzilla.suse.com/1202175" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-37434" ref_url="https://www.suse.com/security/cve/CVE-2022-37434/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012012.html" source="SUSE-SU"/>
		<description>
This update for zlib fixes the following issues:

- CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field (bsc#1202175).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202175">SUSE bug 1202175</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-37434/">CVE-2022-37434</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706290" comment="libminizip1-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706291" comment="libz1-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706232" comment="libz1-32bit-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706292" comment="minizip-devel-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706293" comment="zlib-devel-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706240" comment="zlib-devel-32bit-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706294" comment="zlib-devel-static-1.2.11-150000.3.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139954" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179945" ref_url="https://bugzilla.suse.com/1179945" source="BUGZILLA"/>
		<reference ref_id="1183168" ref_url="https://bugzilla.suse.com/1183168" source="BUGZILLA"/>
		<reference ref_id="1185924" ref_url="https://bugzilla.suse.com/1185924" source="BUGZILLA"/>
		<reference ref_id="1185925" ref_url="https://bugzilla.suse.com/1185925" source="BUGZILLA"/>
		<reference ref_id="1185926" ref_url="https://bugzilla.suse.com/1185926" source="BUGZILLA"/>
		<reference ref_id="1185952" ref_url="https://bugzilla.suse.com/1185952" source="BUGZILLA"/>
		<reference ref_id="1187751" ref_url="https://bugzilla.suse.com/1187751" source="BUGZILLA"/>
		<reference ref_id="1189748" ref_url="https://bugzilla.suse.com/1189748" source="BUGZILLA"/>
		<reference ref_id="1190740" ref_url="https://bugzilla.suse.com/1190740" source="BUGZILLA"/>
		<reference ref_id="1192516" ref_url="https://bugzilla.suse.com/1192516" source="BUGZILLA"/>
		<reference ref_id="1195680" ref_url="https://bugzilla.suse.com/1195680" source="BUGZILLA"/>
		<reference ref_id="1198166" ref_url="https://bugzilla.suse.com/1198166" source="BUGZILLA"/>
		<reference ref_id="1199475" ref_url="https://bugzilla.suse.com/1199475" source="BUGZILLA"/>
		<reference ref_id="1202368" ref_url="https://bugzilla.suse.com/1202368" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23214" ref_url="https://www.suse.com/security/cve/CVE-2021-23214/" source="CVE"/>
		<reference ref_id="CVE-2021-23222" ref_url="https://www.suse.com/security/cve/CVE-2021-23222/" source="CVE"/>
		<reference ref_id="CVE-2021-32027" ref_url="https://www.suse.com/security/cve/CVE-2021-32027/" source="CVE"/>
		<reference ref_id="CVE-2021-32028" ref_url="https://www.suse.com/security/cve/CVE-2021-32028/" source="CVE"/>
		<reference ref_id="CVE-2021-32029" ref_url="https://www.suse.com/security/cve/CVE-2021-32029/" source="CVE"/>
		<reference ref_id="CVE-2021-3677" ref_url="https://www.suse.com/security/cve/CVE-2021-3677/" source="CVE"/>
		<reference ref_id="CVE-2022-1552" ref_url="https://www.suse.com/security/cve/CVE-2022-1552/" source="CVE"/>
		<reference ref_id="CVE-2022-2625" ref_url="https://www.suse.com/security/cve/CVE-2022-2625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2958-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012016.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

- Upgrade to 12.12:
- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).

- Upgrade to 12.11:
- CVE-2022-1552: Confined additional operations within 'security restricted operation' sandboxes (bsc#1199475).

- Upgrade to 12.10 (bsc#1195680)
- Add constraints file with 12GB of memory for s390x as a workaround (boo#1190740)

- Upgrade to version 12.9 (bsc#1192516):
- CVE-2021-23214: Made the server reject extraneous data after an SSL or GSS encryption handshake
- CVE-2021-23222: Made libpq reject extraneous data after an SSL or GSS encryption handshake
    
- Upgrade to version 12.8:
- CVE-2021-3677: Fixed memory disclosure in certain queries (bsc#1189748).

- Upgrade to version 12.7:
- CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924).
- CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925).
- CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING 'pg_psql_temporary_savepoint' does not exist (bsc#1185926).

- Fixed build with llvm12 on s390x (bsc#1185952).
- Re-enabled icu for PostgreSQL 10 (bsc#1179945).
- Made the dependency of postgresqlXX-server-devel on llvm and clang optional (bsc#1187751).
- llvm12 breaks PostgreSQL 11 and 12 on s390x. Use llvm11 as a workaround (bsc#1185952).
- Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179945">SUSE bug 1179945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183168">SUSE bug 1183168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185924">SUSE bug 1185924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185925">SUSE bug 1185925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185926">SUSE bug 1185926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185952">SUSE bug 1185952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187751">SUSE bug 1187751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189748">SUSE bug 1189748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190740">SUSE bug 1190740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192516">SUSE bug 1192516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195680">SUSE bug 1195680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198166">SUSE bug 1198166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199475">SUSE bug 1199475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202368">SUSE bug 1202368</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23214/">CVE-2021-23214</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23222/">CVE-2021-23222</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32027/">CVE-2021-32027</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-32028/">CVE-2021-32028</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-32029/">CVE-2021-32029</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3677/">CVE-2021-3677</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1552/">CVE-2022-1552</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2625/">CVE-2022-2625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707115" comment="libecpg6-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707116" comment="libpq5-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707117" comment="libpq5-32bit-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707118" comment="postgresql12-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707119" comment="postgresql12-contrib-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707120" comment="postgresql12-devel-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707121" comment="postgresql12-docs-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707122" comment="postgresql12-plperl-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707123" comment="postgresql12-plpython-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707124" comment="postgresql12-pltcl-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707125" comment="postgresql12-server-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707126" comment="postgresql12-server-devel-12.12-150100.3.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139955" version="1" class="patch">
	<metadata>
		<title>Security update for rsync (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201840" ref_url="https://bugzilla.suse.com/1201840" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29154" ref_url="https://www.suse.com/security/cve/CVE-2022-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012015.html" source="SUSE-SU"/>
		<description>
This update for rsync fixes the following issues:

- CVE-2022-29154: Fixed an arbitrary file write issue that could be
  triggered by a malicious remote server (bsc#1201840).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201840">SUSE bug 1201840</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29154/">CVE-2022-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706912" comment="rsync-3.1.3-150000.4.13.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139956" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202645" ref_url="https://bugzilla.suse.com/1202645" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-38472" ref_url="https://www.suse.com/security/cve/CVE-2022-38472/" source="CVE"/>
		<reference ref_id="CVE-2022-38473" ref_url="https://www.suse.com/security/cve/CVE-2022-38473/" source="CVE"/>
		<reference ref_id="CVE-2022-38478" ref_url="https://www.suse.com/security/cve/CVE-2022-38478/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012051.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.13.0 ESR (bsc#1202645):

- CVE-2022-38472: Fixed a potential address bar spoofing via XSLT error handling.
- CVE-2022-38473: Fixed an issue where cross-origin XSLT documents could inherit the parent's permissions.
- CVE-2022-38478: Fixed various memory safety issues.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202645">SUSE bug 1202645</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38472/">CVE-2022-38472</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38473/">CVE-2022-38473</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38478/">CVE-2022-38478</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707789" comment="MozillaFirefox-91.13.0-150000.150.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707790" comment="MozillaFirefox-devel-91.13.0-150000.150.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707791" comment="MozillaFirefox-translations-common-91.13.0-150000.150.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707792" comment="MozillaFirefox-translations-other-91.13.0-150000.150.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139957" version="1" class="patch">
	<metadata>
		<title>Security update for open-vm-tools (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202657" ref_url="https://bugzilla.suse.com/1202657" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31676" ref_url="https://www.suse.com/security/cve/CVE-2022-31676/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2986-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012049.html" source="SUSE-SU"/>
		<description>
This update for open-vm-tools fixes the following issues:

- CVE-2022-31676: Fixed an issue that could allow unprivileged users
  inside a virtual machine to escalate privileges (bsc#1202657).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202657">SUSE bug 1202657</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31676/">CVE-2022-31676</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707877" comment="libvmtools-devel-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707878" comment="libvmtools0-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707879" comment="open-vm-tools-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707880" comment="open-vm-tools-desktop-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707881" comment="open-vm-tools-sdmp-11.3.5-150100.4.37.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139958" version="1" class="patch">
	<metadata>
		<title>Security update for flatpak (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1155688" ref_url="https://bugzilla.suse.com/1155688" source="BUGZILLA"/>
		<reference ref_id="1180996" ref_url="https://bugzilla.suse.com/1180996" source="BUGZILLA"/>
		<reference ref_id="1183459" ref_url="https://bugzilla.suse.com/1183459" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21261" ref_url="https://www.suse.com/security/cve/CVE-2021-21261/" source="CVE"/>
		<reference ref_id="CVE-2021-21381" ref_url="https://www.suse.com/security/cve/CVE-2021-21381/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012061.html" source="SUSE-SU"/>
		<description>
This update for flatpak fixes the following issues:

- CVE-2021-21381: Fixed an issue where a sandboxed application could
  read and write arbitrary host files via special tokens in the
  .desktop file (bsc#1183459).
- CVE-2021-21261: Fixed a sandbox escape issue via the flatpak-portal
  service (bsc#1180996).

Non-security fixes:

- openh264 extension needs to use 'extra_data'. (bsc#1155688)
  The update will provide the support for extra_data' in extensions
  and will provide a list of versions that are supported. This will
  be useful for the extra_data for extensions because that will require
  it to say that it is supported for version &gt; 1.2.5 in the 1.2 series 
  and &gt; 1.4.2 otherwise.
  The update  will includes fixes for a segfault in the function that 
  lists the installed references (flatpak_installation_list_installed_refs).
  When an appstream update is cancelled while downloading icons, the update
  will show a proper fail. Before this fix the next update attempt will see
  an up-to-date timestamp, think everyhing is ok and not download the missing icons.
  The update will introduce checks in the OCI (Open Container Initiative format)
  updates for validating if it is gpg verified.
  The update will install the required runtime for the installed extension.
  The update will prevent a crash if the 'FlatpakDir' can't ensure it has a repo configured.
  The update will prevent the removal of local extensions considered remote and not locally related.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1155688">SUSE bug 1155688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180996">SUSE bug 1180996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183459">SUSE bug 1183459</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21261/">CVE-2021-21261</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21381/">CVE-2021-21381</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708034" comment="flatpak-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708035" comment="flatpak-devel-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708036" comment="flatpak-zsh-completion-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708037" comment="libflatpak0-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708038" comment="typelib-1_0-Flatpak-1_0-1.2.3-150100.4.5.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139959" version="1" class="patch">
	<metadata>
		<title>Security update for libtirpc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198752" ref_url="https://bugzilla.suse.com/1198752" source="BUGZILLA"/>
		<reference ref_id="1200800" ref_url="https://bugzilla.suse.com/1200800" source="BUGZILLA"/>
		<reference ref_id="1201680" ref_url="https://bugzilla.suse.com/1201680" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46828" ref_url="https://www.suse.com/security/cve/CVE-2021-46828/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2991-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012060.html" source="SUSE-SU"/>
		<description>
This update for libtirpc fixes the following issues:

- CVE-2021-46828: Fixed an uncontrolled file descriptor consumption,
  which could be exploited by remote attackers to prevent applications
  using the library from accepting new connections (bsc#1201680).

Non-security fixes:

- Exclude ipv6 addresses in client protocol version 2 code (bsc#1200800)
- Fix memory leak in params.r_addr assignement (bsc#1198752)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198752">SUSE bug 1198752</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200800">SUSE bug 1200800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201680">SUSE bug 1201680</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46828/">CVE-2021-46828</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707722" comment="libtirpc-devel-1.0.2-150000.3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707723" comment="libtirpc-netconfig-1.0.2-150000.3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707724" comment="libtirpc3-1.0.2-150000.3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707725" comment="libtirpc3-32bit-1.0.2-150000.3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139960" version="1" class="patch">
	<metadata>
		<title>Security update for python-pyxdg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1137627" ref_url="https://bugzilla.suse.com/1137627" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12761" ref_url="https://www.suse.com/security/cve/CVE-2019-12761/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012064.html" source="SUSE-SU"/>
		<description>
This update for python-pyxdg fixes the following issues:

- CVE-2019-12761: Fixed a code injection issue in Category elements of
  a Menu XML (bsc#1137627).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-02"/>
	<updated date="2022-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1137627">SUSE bug 1137627</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12761/">CVE-2019-12761</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708033" comment="python2-pyxdg-0.25-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708041" comment="python3-pyxdg-0.25-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139961" version="1" class="patch">
	<metadata>
		<title>Security update for python-bottle (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200286" ref_url="https://bugzilla.suse.com/1200286" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31799" ref_url="https://www.suse.com/security/cve/CVE-2022-31799/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012109.html" source="SUSE-SU"/>
		<description>
This update for python-bottle fixes the following issues:

- CVE-2022-31799: Fixed an error mishandling issue that could lead to
  remote denial of service (bsc#1200286).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-06"/>
	<updated date="2022-09-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200286">SUSE bug 1200286</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-31799/">CVE-2022-31799</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707087" comment="python2-bottle-0.12.13-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707069" comment="python3-bottle-0.12.13-150000.3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139962" version="1" class="patch">
	<metadata>
		<title>Security update for gpg2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201225" ref_url="https://bugzilla.suse.com/1201225" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-34903" ref_url="https://www.suse.com/security/cve/CVE-2022-34903/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3144-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012160.html" source="SUSE-SU"/>
		<description>
This update for gpg2 fixes the following issues:

- CVE-2022-34903: Fixed a potential signature forgery via injection
  into the status line when certain unusual conditions are met (bsc#1201225).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-07"/>
	<updated date="2022-09-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201225">SUSE bug 1201225</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34903/">CVE-2022-34903</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707793" comment="gpg2-2.2.5-150000.4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707794" comment="gpg2-lang-2.2.5-150000.4.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139963" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200270" ref_url="https://bugzilla.suse.com/1200270" source="BUGZILLA"/>
		<reference ref_id="1200697" ref_url="https://bugzilla.suse.com/1200697" source="BUGZILLA"/>
		<reference ref_id="1200698" ref_url="https://bugzilla.suse.com/1200698" source="BUGZILLA"/>
		<reference ref_id="1200700" ref_url="https://bugzilla.suse.com/1200700" source="BUGZILLA"/>
		<reference ref_id="1200701" ref_url="https://bugzilla.suse.com/1200701" source="BUGZILLA"/>
		<reference ref_id="1200732" ref_url="https://bugzilla.suse.com/1200732" source="BUGZILLA"/>
		<reference ref_id="1200884" ref_url="https://bugzilla.suse.com/1200884" source="BUGZILLA"/>
		<reference ref_id="1200902" ref_url="https://bugzilla.suse.com/1200902" source="BUGZILLA"/>
		<reference ref_id="1200903" ref_url="https://bugzilla.suse.com/1200903" source="BUGZILLA"/>
		<reference ref_id="1200904" ref_url="https://bugzilla.suse.com/1200904" source="BUGZILLA"/>
		<reference ref_id="1201132" ref_url="https://bugzilla.suse.com/1201132" source="BUGZILLA"/>
		<reference ref_id="1201133" ref_url="https://bugzilla.suse.com/1201133" source="BUGZILLA"/>
		<reference ref_id="1201134" ref_url="https://bugzilla.suse.com/1201134" source="BUGZILLA"/>
		<reference ref_id="1201135" ref_url="https://bugzilla.suse.com/1201135" source="BUGZILLA"/>
		<reference ref_id="1201136" ref_url="https://bugzilla.suse.com/1201136" source="BUGZILLA"/>
		<reference ref_id="1201150" ref_url="https://bugzilla.suse.com/1201150" source="BUGZILLA"/>
		<reference ref_id="1201151" ref_url="https://bugzilla.suse.com/1201151" source="BUGZILLA"/>
		<reference ref_id="1201152" ref_url="https://bugzilla.suse.com/1201152" source="BUGZILLA"/>
		<reference ref_id="1201153" ref_url="https://bugzilla.suse.com/1201153" source="BUGZILLA"/>
		<reference ref_id="1201154" ref_url="https://bugzilla.suse.com/1201154" source="BUGZILLA"/>
		<reference ref_id="1201155" ref_url="https://bugzilla.suse.com/1201155" source="BUGZILLA"/>
		<reference ref_id="1201249" ref_url="https://bugzilla.suse.com/1201249" source="BUGZILLA"/>
		<reference ref_id="1201356" ref_url="https://bugzilla.suse.com/1201356" source="BUGZILLA"/>
		<reference ref_id="1201359" ref_url="https://bugzilla.suse.com/1201359" source="BUGZILLA"/>
		<reference ref_id="1201363" ref_url="https://bugzilla.suse.com/1201363" source="BUGZILLA"/>
		<reference ref_id="1201620" ref_url="https://bugzilla.suse.com/1201620" source="BUGZILLA"/>
		<reference ref_id="1201863" ref_url="https://bugzilla.suse.com/1201863" source="BUGZILLA"/>
		<reference ref_id="1202046" ref_url="https://bugzilla.suse.com/1202046" source="BUGZILLA"/>
		<reference ref_id="1202049" ref_url="https://bugzilla.suse.com/1202049" source="BUGZILLA"/>
		<reference ref_id="1202050" ref_url="https://bugzilla.suse.com/1202050" source="BUGZILLA"/>
		<reference ref_id="1202051" ref_url="https://bugzilla.suse.com/1202051" source="BUGZILLA"/>
		<reference ref_id="1202414" ref_url="https://bugzilla.suse.com/1202414" source="BUGZILLA"/>
		<reference ref_id="1202420" ref_url="https://bugzilla.suse.com/1202420" source="BUGZILLA"/>
		<reference ref_id="1202421" ref_url="https://bugzilla.suse.com/1202421" source="BUGZILLA"/>
		<reference ref_id="1202511" ref_url="https://bugzilla.suse.com/1202511" source="BUGZILLA"/>
		<reference ref_id="1202512" ref_url="https://bugzilla.suse.com/1202512" source="BUGZILLA"/>
		<reference ref_id="1202515" ref_url="https://bugzilla.suse.com/1202515" source="BUGZILLA"/>
		<reference ref_id="1202552" ref_url="https://bugzilla.suse.com/1202552" source="BUGZILLA"/>
		<reference ref_id="1202599" ref_url="https://bugzilla.suse.com/1202599" source="BUGZILLA"/>
		<reference ref_id="1202687" ref_url="https://bugzilla.suse.com/1202687" source="BUGZILLA"/>
		<reference ref_id="1202689" ref_url="https://bugzilla.suse.com/1202689" source="BUGZILLA"/>
		<reference ref_id="1202862" ref_url="https://bugzilla.suse.com/1202862" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1720" ref_url="https://www.suse.com/security/cve/CVE-2022-1720/" source="CVE"/>
		<reference ref_id="CVE-2022-1968" ref_url="https://www.suse.com/security/cve/CVE-2022-1968/" source="CVE"/>
		<reference ref_id="CVE-2022-2124" ref_url="https://www.suse.com/security/cve/CVE-2022-2124/" source="CVE"/>
		<reference ref_id="CVE-2022-2125" ref_url="https://www.suse.com/security/cve/CVE-2022-2125/" source="CVE"/>
		<reference ref_id="CVE-2022-2126" ref_url="https://www.suse.com/security/cve/CVE-2022-2126/" source="CVE"/>
		<reference ref_id="CVE-2022-2129" ref_url="https://www.suse.com/security/cve/CVE-2022-2129/" source="CVE"/>
		<reference ref_id="CVE-2022-2175" ref_url="https://www.suse.com/security/cve/CVE-2022-2175/" source="CVE"/>
		<reference ref_id="CVE-2022-2182" ref_url="https://www.suse.com/security/cve/CVE-2022-2182/" source="CVE"/>
		<reference ref_id="CVE-2022-2183" ref_url="https://www.suse.com/security/cve/CVE-2022-2183/" source="CVE"/>
		<reference ref_id="CVE-2022-2206" ref_url="https://www.suse.com/security/cve/CVE-2022-2206/" source="CVE"/>
		<reference ref_id="CVE-2022-2207" ref_url="https://www.suse.com/security/cve/CVE-2022-2207/" source="CVE"/>
		<reference ref_id="CVE-2022-2208" ref_url="https://www.suse.com/security/cve/CVE-2022-2208/" source="CVE"/>
		<reference ref_id="CVE-2022-2210" ref_url="https://www.suse.com/security/cve/CVE-2022-2210/" source="CVE"/>
		<reference ref_id="CVE-2022-2231" ref_url="https://www.suse.com/security/cve/CVE-2022-2231/" source="CVE"/>
		<reference ref_id="CVE-2022-2257" ref_url="https://www.suse.com/security/cve/CVE-2022-2257/" source="CVE"/>
		<reference ref_id="CVE-2022-2264" ref_url="https://www.suse.com/security/cve/CVE-2022-2264/" source="CVE"/>
		<reference ref_id="CVE-2022-2284" ref_url="https://www.suse.com/security/cve/CVE-2022-2284/" source="CVE"/>
		<reference ref_id="CVE-2022-2285" ref_url="https://www.suse.com/security/cve/CVE-2022-2285/" source="CVE"/>
		<reference ref_id="CVE-2022-2286" ref_url="https://www.suse.com/security/cve/CVE-2022-2286/" source="CVE"/>
		<reference ref_id="CVE-2022-2287" ref_url="https://www.suse.com/security/cve/CVE-2022-2287/" source="CVE"/>
		<reference ref_id="CVE-2022-2304" ref_url="https://www.suse.com/security/cve/CVE-2022-2304/" source="CVE"/>
		<reference ref_id="CVE-2022-2343" ref_url="https://www.suse.com/security/cve/CVE-2022-2343/" source="CVE"/>
		<reference ref_id="CVE-2022-2344" ref_url="https://www.suse.com/security/cve/CVE-2022-2344/" source="CVE"/>
		<reference ref_id="CVE-2022-2345" ref_url="https://www.suse.com/security/cve/CVE-2022-2345/" source="CVE"/>
		<reference ref_id="CVE-2022-2522" ref_url="https://www.suse.com/security/cve/CVE-2022-2522/" source="CVE"/>
		<reference ref_id="CVE-2022-2571" ref_url="https://www.suse.com/security/cve/CVE-2022-2571/" source="CVE"/>
		<reference ref_id="CVE-2022-2580" ref_url="https://www.suse.com/security/cve/CVE-2022-2580/" source="CVE"/>
		<reference ref_id="CVE-2022-2581" ref_url="https://www.suse.com/security/cve/CVE-2022-2581/" source="CVE"/>
		<reference ref_id="CVE-2022-2598" ref_url="https://www.suse.com/security/cve/CVE-2022-2598/" source="CVE"/>
		<reference ref_id="CVE-2022-2816" ref_url="https://www.suse.com/security/cve/CVE-2022-2816/" source="CVE"/>
		<reference ref_id="CVE-2022-2817" ref_url="https://www.suse.com/security/cve/CVE-2022-2817/" source="CVE"/>
		<reference ref_id="CVE-2022-2819" ref_url="https://www.suse.com/security/cve/CVE-2022-2819/" source="CVE"/>
		<reference ref_id="CVE-2022-2845" ref_url="https://www.suse.com/security/cve/CVE-2022-2845/" source="CVE"/>
		<reference ref_id="CVE-2022-2849" ref_url="https://www.suse.com/security/cve/CVE-2022-2849/" source="CVE"/>
		<reference ref_id="CVE-2022-2862" ref_url="https://www.suse.com/security/cve/CVE-2022-2862/" source="CVE"/>
		<reference ref_id="CVE-2022-2874" ref_url="https://www.suse.com/security/cve/CVE-2022-2874/" source="CVE"/>
		<reference ref_id="CVE-2022-2889" ref_url="https://www.suse.com/security/cve/CVE-2022-2889/" source="CVE"/>
		<reference ref_id="CVE-2022-2923" ref_url="https://www.suse.com/security/cve/CVE-2022-2923/" source="CVE"/>
		<reference ref_id="CVE-2022-2946" ref_url="https://www.suse.com/security/cve/CVE-2022-2946/" source="CVE"/>
		<reference ref_id="CVE-2022-3016" ref_url="https://www.suse.com/security/cve/CVE-2022-3016/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3229-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012199.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

Updated to version 9.0 with patch level 0313:

- CVE-2022-2183: Fixed out-of-bounds read through get_lisp_indent() (bsc#1200902).
- CVE-2022-2182: Fixed heap-based buffer overflow through parse_cmd_address() (bsc#1200903).
- CVE-2022-2175: Fixed buffer over-read through cmdline_insert_reg() (bsc#1200904).
- CVE-2022-2304: Fixed stack buffer overflow in spell_dump_compl() (bsc#1201249).
- CVE-2022-2343: Fixed heap-based buffer overflow in GitHub repository vim prior to 9.0.0044 (bsc#1201356).
- CVE-2022-2344: Fixed another heap-based buffer overflow vim prior to 9.0.0045 (bsc#1201359).
- CVE-2022-2345: Fixed use after free in GitHub repository vim prior to 9.0.0046. (bsc#1201363).
- CVE-2022-2819: Fixed heap-based Buffer Overflow in compile_lock_unlock() (bsc#1202414).
- CVE-2022-2874: Fixed NULL Pointer Dereference in generate_loadvar() (bsc#1202552).
- CVE-2022-1968: Fixed use after free in utf_ptr2char (bsc#1200270).
- CVE-2022-2124: Fixed out of bounds read in current_quote() (bsc#1200697).
- CVE-2022-2125: Fixed out of bounds read in get_lisp_indent() (bsc#1200698).
- CVE-2022-2126: Fixed out of bounds read in suggest_trie_walk() (bsc#1200700).
- CVE-2022-2129: Fixed out of bounds write in vim_regsub_both() (bsc#1200701).
- CVE-2022-1720: Fixed out of bounds read in grab_file_name() (bsc#1200732).
- CVE-2022-2264: Fixed out of bounds read in inc() (bsc#1201132).
- CVE-2022-2284: Fixed out of bounds read in utfc_ptr2len() (bsc#1201133).
- CVE-2022-2285: Fixed negative size passed to memmove() due to integer overflow (bsc#1201134).
- CVE-2022-2286: Fixed out of bounds read in ins_bytes() (bsc#1201135).
- CVE-2022-2287: Fixed out of bounds read in suggest_trie_walk() (bsc#1201136).
- CVE-2022-2231: Fixed null pointer dereference skipwhite() (bsc#1201150).
- CVE-2022-2210: Fixed out of bounds read in ml_append_int() (bsc#1201151).
- CVE-2022-2208: Fixed null pointer dereference in diff_check() (bsc#1201152).
- CVE-2022-2207: Fixed out of bounds read in ins_bs() (bsc#1201153).
- CVE-2022-2257: Fixed out of bounds read in msg_outtrans_special() (bsc#1201154).
- CVE-2022-2206: Fixed out of bounds read in msg_outtrans_attr() (bsc#1201155).
- CVE-2022-2522: Fixed out of bounds read via nested autocommand (bsc#1201863).
- CVE-2022-2571: Fixed heap-based buffer overflow related to ins_comp_get_next_word_or_line() (bsc#1202046).
- CVE-2022-2580: Fixed heap-based buffer overflow related to eval_string() (bsc#1202049).
- CVE-2022-2581: Fixed out-of-bounds read related to cstrchr() (bsc#1202050).
- CVE-2022-2598: Fixed undefined behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput() (bsc#1202051).
- CVE-2022-2817: Fixed use after gree in f_assert_fails() (bsc#1202420).
- CVE-2022-2816: Fixed out-of-bounds Read in check_vim9_unlet() (bsc#1202421).
- CVE-2022-2862: Fixed use-after-free in compile_nested_function() (bsc#1202511).
- CVE-2022-2849: Fixed invalid memory access related to mb_ptr2len() (bsc#1202512).
- CVE-2022-2845: Fixed buffer Over-read related to display_dollar() (bsc#1202515).
- CVE-2022-2889: Fixed use-after-free in find_var_also_in_script() in evalvars.c (bsc#1202599).
- CVE-2022-2923: Fixed NULL pointer dereference in GitHub repository vim/vim prior to 9.0.0240 (bsc#1202687).
- CVE-2022-2946: Fixed use after free in function vim_vsnprintf_typval (bsc#1202689).
- CVE-2022-3016: Fixed use after free in vim prior to 9.0.0285 (bsc#1202862).
  
Bugfixes:

- Fixing vim error on startup (bsc#1200884).
- Fixing vim SUSE Linux Enterprise Server 15 SP4 Basesystem plugin-tlib issue (bsc#1201620).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-09"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200270">SUSE bug 1200270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200697">SUSE bug 1200697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200698">SUSE bug 1200698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200700">SUSE bug 1200700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200701">SUSE bug 1200701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200732">SUSE bug 1200732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200884">SUSE bug 1200884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200902">SUSE bug 1200902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200903">SUSE bug 1200903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200904">SUSE bug 1200904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201132">SUSE bug 1201132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201133">SUSE bug 1201133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201134">SUSE bug 1201134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201135">SUSE bug 1201135</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201136">SUSE bug 1201136</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201150">SUSE bug 1201150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201151">SUSE bug 1201151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201152">SUSE bug 1201152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201153">SUSE bug 1201153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201154">SUSE bug 1201154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201155">SUSE bug 1201155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201249">SUSE bug 1201249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201356">SUSE bug 1201356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201359">SUSE bug 1201359</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201363">SUSE bug 1201363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201620">SUSE bug 1201620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201863">SUSE bug 1201863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202046">SUSE bug 1202046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202049">SUSE bug 1202049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202050">SUSE bug 1202050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202051">SUSE bug 1202051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202414">SUSE bug 1202414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202420">SUSE bug 1202420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202421">SUSE bug 1202421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202511">SUSE bug 1202511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202512">SUSE bug 1202512</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202515">SUSE bug 1202515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202552">SUSE bug 1202552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202599">SUSE bug 1202599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202687">SUSE bug 1202687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202689">SUSE bug 1202689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202862">SUSE bug 1202862</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1720/">CVE-2022-1720</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1968/">CVE-2022-1968</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2124/">CVE-2022-2124</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2125/">CVE-2022-2125</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2126/">CVE-2022-2126</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2129/">CVE-2022-2129</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2175/">CVE-2022-2175</cve>
	<cve impact="moderate" cvss3="3.9/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2182/">CVE-2022-2182</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2183/">CVE-2022-2183</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2206/">CVE-2022-2206</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2207/">CVE-2022-2207</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2208/">CVE-2022-2208</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2210/">CVE-2022-2210</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2231/">CVE-2022-2231</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2257/">CVE-2022-2257</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2264/">CVE-2022-2264</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2284/">CVE-2022-2284</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2285/">CVE-2022-2285</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2286/">CVE-2022-2286</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2287/">CVE-2022-2287</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2304/">CVE-2022-2304</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2343/">CVE-2022-2343</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2344/">CVE-2022-2344</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2345/">CVE-2022-2345</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2522/">CVE-2022-2522</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2571/">CVE-2022-2571</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2580/">CVE-2022-2580</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-2581/">CVE-2022-2581</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2598/">CVE-2022-2598</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2816/">CVE-2022-2816</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2817/">CVE-2022-2817</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2819/">CVE-2022-2819</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2845/">CVE-2022-2845</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2849/">CVE-2022-2849</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2862/">CVE-2022-2862</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2874/">CVE-2022-2874</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2889/">CVE-2022-2889</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2923/">CVE-2022-2923</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2946/">CVE-2022-2946</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3016/">CVE-2022-3016</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709747" comment="gvim-9.0.0313-150000.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709748" comment="vim-9.0.0313-150000.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709662" comment="vim-data-9.0.0313-150000.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709663" comment="vim-data-common-9.0.0313-150000.5.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139964" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202986" ref_url="https://bugzilla.suse.com/1202986" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:3249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012211.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

clamav was updated to 0.103.7 (bsc#1202986)

* Upgrade the vendored UnRAR library to version 6.1.7.
* Fix logical signature 'Intermediates' feature.
* Relax constraints on slightly malformed zip archives that
  contain overlapping file entries.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-12"/>
	<updated date="2022-09-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202986">SUSE bug 1202986</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709578" comment="clamav-0.103.7-150000.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709579" comment="clamav-devel-0.103.7-150000.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709580" comment="libclamav9-0.103.7-150000.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709581" comment="libfreshclam2-0.103.7-150000.3.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139965" version="1" class="patch">
	<metadata>
		<title>Security update for freetype2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198823" ref_url="https://bugzilla.suse.com/1198823" source="BUGZILLA"/>
		<reference ref_id="1198830" ref_url="https://bugzilla.suse.com/1198830" source="BUGZILLA"/>
		<reference ref_id="1198832" ref_url="https://bugzilla.suse.com/1198832" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-27404" ref_url="https://www.suse.com/security/cve/CVE-2022-27404/" source="CVE"/>
		<reference ref_id="CVE-2022-27405" ref_url="https://www.suse.com/security/cve/CVE-2022-27405/" source="CVE"/>
		<reference ref_id="CVE-2022-27406" ref_url="https://www.suse.com/security/cve/CVE-2022-27406/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3252-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012330.html" source="SUSE-SU"/>
		<description>
This update for freetype2 fixes the following issues:

- CVE-2022-27404 Fixed a segmentation fault via a crafted typeface (bsc#1198830).
- CVE-2022-27405 Fixed a buffer overflow via a crafted typeface (bsc#1198832).
- CVE-2022-27406 Fixed a segmentation fault via a crafted typeface (bsc#1198823).

Non-security fixes:

- Updated to version 2.10.4
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-22"/>
	<updated date="2022-09-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1198823">SUSE bug 1198823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198830">SUSE bug 1198830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198832">SUSE bug 1198832</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27404/">CVE-2022-27404</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27405/">CVE-2022-27405</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27406/">CVE-2022-27406</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710678" comment="freetype2-devel-2.10.4-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708370" comment="libfreetype6-2.10.4-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708194" comment="libfreetype6-32bit-2.10.4-150000.4.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139966" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200793" ref_url="https://bugzilla.suse.com/1200793" source="BUGZILLA"/>
		<reference ref_id="1201758" ref_url="https://bugzilla.suse.com/1201758" source="BUGZILLA"/>
		<reference ref_id="1202645" ref_url="https://bugzilla.suse.com/1202645" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2200" ref_url="https://www.suse.com/security/cve/CVE-2022-2200/" source="CVE"/>
		<reference ref_id="CVE-2022-2505" ref_url="https://www.suse.com/security/cve/CVE-2022-2505/" source="CVE"/>
		<reference ref_id="CVE-2022-34468" ref_url="https://www.suse.com/security/cve/CVE-2022-34468/" source="CVE"/>
		<reference ref_id="CVE-2022-34469" ref_url="https://www.suse.com/security/cve/CVE-2022-34469/" source="CVE"/>
		<reference ref_id="CVE-2022-34470" ref_url="https://www.suse.com/security/cve/CVE-2022-34470/" source="CVE"/>
		<reference ref_id="CVE-2022-34471" ref_url="https://www.suse.com/security/cve/CVE-2022-34471/" source="CVE"/>
		<reference ref_id="CVE-2022-34472" ref_url="https://www.suse.com/security/cve/CVE-2022-34472/" source="CVE"/>
		<reference ref_id="CVE-2022-34473" ref_url="https://www.suse.com/security/cve/CVE-2022-34473/" source="CVE"/>
		<reference ref_id="CVE-2022-34474" ref_url="https://www.suse.com/security/cve/CVE-2022-34474/" source="CVE"/>
		<reference ref_id="CVE-2022-34475" ref_url="https://www.suse.com/security/cve/CVE-2022-34475/" source="CVE"/>
		<reference ref_id="CVE-2022-34476" ref_url="https://www.suse.com/security/cve/CVE-2022-34476/" source="CVE"/>
		<reference ref_id="CVE-2022-34477" ref_url="https://www.suse.com/security/cve/CVE-2022-34477/" source="CVE"/>
		<reference ref_id="CVE-2022-34478" ref_url="https://www.suse.com/security/cve/CVE-2022-34478/" source="CVE"/>
		<reference ref_id="CVE-2022-34479" ref_url="https://www.suse.com/security/cve/CVE-2022-34479/" source="CVE"/>
		<reference ref_id="CVE-2022-34480" ref_url="https://www.suse.com/security/cve/CVE-2022-34480/" source="CVE"/>
		<reference ref_id="CVE-2022-34481" ref_url="https://www.suse.com/security/cve/CVE-2022-34481/" source="CVE"/>
		<reference ref_id="CVE-2022-34482" ref_url="https://www.suse.com/security/cve/CVE-2022-34482/" source="CVE"/>
		<reference ref_id="CVE-2022-34483" ref_url="https://www.suse.com/security/cve/CVE-2022-34483/" source="CVE"/>
		<reference ref_id="CVE-2022-34484" ref_url="https://www.suse.com/security/cve/CVE-2022-34484/" source="CVE"/>
		<reference ref_id="CVE-2022-34485" ref_url="https://www.suse.com/security/cve/CVE-2022-34485/" source="CVE"/>
		<reference ref_id="CVE-2022-36314" ref_url="https://www.suse.com/security/cve/CVE-2022-36314/" source="CVE"/>
		<reference ref_id="CVE-2022-36318" ref_url="https://www.suse.com/security/cve/CVE-2022-36318/" source="CVE"/>
		<reference ref_id="CVE-2022-36319" ref_url="https://www.suse.com/security/cve/CVE-2022-36319/" source="CVE"/>
		<reference ref_id="CVE-2022-38472" ref_url="https://www.suse.com/security/cve/CVE-2022-38472/" source="CVE"/>
		<reference ref_id="CVE-2022-38473" ref_url="https://www.suse.com/security/cve/CVE-2022-38473/" source="CVE"/>
		<reference ref_id="CVE-2022-38476" ref_url="https://www.suse.com/security/cve/CVE-2022-38476/" source="CVE"/>
		<reference ref_id="CVE-2022-38477" ref_url="https://www.suse.com/security/cve/CVE-2022-38477/" source="CVE"/>
		<reference ref_id="CVE-2022-38478" ref_url="https://www.suse.com/security/cve/CVE-2022-38478/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012227.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Mozilla Firefox was updated to 102.2.0esr ESR:

* Fixed: Various stability, functionality, and security fixes.

- MFSA 2022-34 (bsc#1202645)

  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13

Firefox Extended Support Release 102.1 ESR

  * Fixed: Various stability, functionality, and security fixes.

- MFSA 2022-30 (bsc#1201758)

  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1

- Firefox Extended Support Release 102.0.1 ESR

  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes

Firefox 102.0 ESR:

* New: 

  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voil?! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
 -  Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut 'n.'
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.

  * Fixed: Various security fixes.

- MFSA 2022-24 (bsc#1200793)

  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-14"/>
	<updated date="2022-09-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200793">SUSE bug 1200793</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201758">SUSE bug 1201758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202645">SUSE bug 1202645</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2200/">CVE-2022-2200</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2505/">CVE-2022-2505</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34468/">CVE-2022-34468</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34469/">CVE-2022-34469</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34470/">CVE-2022-34470</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34471/">CVE-2022-34471</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34472/">CVE-2022-34472</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34473/">CVE-2022-34473</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34474/">CVE-2022-34474</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34475/">CVE-2022-34475</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34476/">CVE-2022-34476</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-34477/">CVE-2022-34477</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34478/">CVE-2022-34478</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34479/">CVE-2022-34479</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34480/">CVE-2022-34480</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34481/">CVE-2022-34481</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34482/">CVE-2022-34482</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34483/">CVE-2022-34483</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34484/">CVE-2022-34484</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34485/">CVE-2022-34485</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36314/">CVE-2022-36314</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36318/">CVE-2022-36318</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36319/">CVE-2022-36319</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38472/">CVE-2022-38472</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38473/">CVE-2022-38473</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38476/">CVE-2022-38476</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38477/">CVE-2022-38477</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38478/">CVE-2022-38478</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710303" comment="MozillaFirefox-102.2.0-150000.150.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710304" comment="MozillaFirefox-branding-SLE-102-150000.4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710305" comment="MozillaFirefox-devel-102.2.0-150000.150.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710306" comment="MozillaFirefox-translations-common-102.2.0-150000.150.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710307" comment="MozillaFirefox-translations-other-102.2.0-150000.150.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139967" version="1" class="patch">
	<metadata>
		<title>Security update for flatpak (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191507" ref_url="https://bugzilla.suse.com/1191507" source="BUGZILLA"/>
		<reference ref_id="1194610" ref_url="https://bugzilla.suse.com/1194610" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21261" ref_url="https://www.suse.com/security/cve/CVE-2021-21261/" source="CVE"/>
		<reference ref_id="CVE-2021-41133" ref_url="https://www.suse.com/security/cve/CVE-2021-41133/" source="CVE"/>
		<reference ref_id="CVE-2021-43860" ref_url="https://www.suse.com/security/cve/CVE-2021-43860/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012249.html" source="SUSE-SU"/>
		<description>
This update for flatpak fixes the following issues:

- CVE-2021-41133: Fixed sandbox bypass via recent syscalls (bsc#1191507).
- CVE-2021-43860: Fixed metadata validation (bsc#1194610).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-15"/>
	<updated date="2022-09-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191507">SUSE bug 1191507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194610">SUSE bug 1194610</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21261/">CVE-2021-21261</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41133/">CVE-2021-41133</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-43860/">CVE-2021-43860</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709949" comment="flatpak-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709950" comment="flatpak-devel-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709951" comment="flatpak-zsh-completion-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709952" comment="libflatpak0-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709953" comment="typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139968" version="1" class="patch">
	<metadata>
		<title>Security update for sqlite3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189802" ref_url="https://bugzilla.suse.com/1189802" source="BUGZILLA"/>
		<reference ref_id="1195773" ref_url="https://bugzilla.suse.com/1195773" source="BUGZILLA"/>
		<reference ref_id="1201783" ref_url="https://bugzilla.suse.com/1201783" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36690" ref_url="https://www.suse.com/security/cve/CVE-2021-36690/" source="CVE"/>
		<reference ref_id="CVE-2022-35737" ref_url="https://www.suse.com/security/cve/CVE-2022-35737/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3307-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012802.html" source="SUSE-SU"/>
		<description>
This update for sqlite3 fixes the following issues:

Security issues fixed:

- CVE-2022-35737: Fixed an array-bounds overflow if billions of bytes are used in a string argument to a C API (bnc#1201783).
- CVE-2021-36690: Fixed an issue with the SQLite Expert extension when a column has no collating sequence (bsc#1189802).
  
- Package the Tcl bindings here again so that we only ship one copy of SQLite (bsc#1195773).

sqlite was updated to 3.39.3:

* Use a statement journal on DML statement affecting two or more
  database rows if the statement makes use of a SQL functions
  that might abort.
* Use a mutex to protect the PRAGMA temp_store_directory and
  PRAGMA data_store_directory statements, even though they are
  decremented and documented as not being threadsafe.

Update to 3.39.2:

* Fix a performance regression in the query planner associated
  with rearranging the order of FROM clause terms in the
  presences of a LEFT JOIN.
* Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
  1345947, forum post 3607259d3c, and other minor problems
  discovered by internal testing. [boo#1201783]

Update to 3.39.1:

* Fix an incorrect result from a query that uses a view that
  contains a compound SELECT in which only one arm contains a
  RIGHT JOIN and where the view is not the first FROM clause term
  of the query that contains the view
* Fix a long-standing problem with ALTER TABLE RENAME that can
  only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
  to a very small value.
* Fix a long-standing problem in FTS3 that can only arise when
  compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
  option.
* Fix the initial-prefix optimization for the REGEXP extension so
  that it works correctly even if the prefix contains characters
  that require a 3-byte UTF8 encoding.
* Enhance the sqlite_stmt virtual table so that it buffers all of
  its output. 

Update to 3.39.0:

* Add (long overdue) support for RIGHT and FULL OUTER JOIN
* Add new binary comparison operators IS NOT DISTINCT FROM and 
  IS DISTINCT FROM that are equivalent to IS and IS NOT, 
  respective, for compatibility with PostgreSQL and SQL standards
* Add a new return code (value '3') from the sqlite3_vtab_distinct()
  interface that indicates a query that has both DISTINCT and 
  ORDER BY clauses
* Added the sqlite3_db_name() interface
* The unix os interface resolves all symbolic links in database
  filenames to create a canonical name for the database before
  the file is opened
* Defer materializing views until the materialization is actually
  needed, thus avoiding unnecessary work if the materialization
  turns out to never be used
* The HAVING clause of a SELECT statement is now allowed on any
  aggregate query, even queries that do not have a GROUP BY
  clause
* Many microoptimizations collectively reduce CPU cycles by about
  2.3%. 

Update to 3.38.5:

* Fix a blunder in the CLI of the 3.38.4 release

Update to 3.38.4:

* fix a byte-code problem in the Bloom filter pull-down
  optimization added by release 3.38.0 in which an error in the
  byte code causes the byte code engine to enter an infinite loop
  when the pull-down optimization encounters a NULL key   

Update to 3.38.3:

* Fix a case of the query planner be overly aggressive with
  optimizing automatic-index and Bloom-filter construction,
  using inappropriate ON clause terms to restrict the size of the
  automatic-index or Bloom filter, and resulting in missing rows
  in the output.
* Other minor patches. See the timeline for details. 

Update to 3.38.2:

* Fix a problem with the Bloom filter optimization that might
  cause an incorrect answer when doing a LEFT JOIN with a WHERE
  clause constraint that says that one of the columns on the
  right table of the LEFT JOIN is NULL.
* Other minor patches.

- Package the Tcl bindings here again so that we only ship one copy
of SQLite (bsc#1195773).

Update to 3.38.1:

* Fix problems with the new Bloom filter optimization that might
  cause some obscure queries to get an incorrect answer.
* Fix the localtime modifier of the date and time functions so
  that it preserves fractional seconds.
* Fix the sqlite_offset SQL function so that it works correctly
  even in corner cases such as when the argument is a virtual
  column or the column of a view.
* Fix row value IN operator constraints on virtual tables so that
  they work correctly even if the virtual table implementation
  relies on bytecode to filter rows that do not satisfy the
  constraint.
* Other minor fixes to assert() statements, test cases, and
  documentation. See the source code timeline for details.

Update to 3.38.0

* Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
* The JSON functions are now built-ins
* Enhancements to date and time functions
* Rename the printf() SQL function to format() for better
  compatibility, with alias for backwards compatibility.
* Add the sqlite3_error_offset() interface for helping localize
  an SQL error to a specific character in the input SQL text 
* Enhance the interface to virtual tables 
* CLI columnar output modes are enhanced to correctly handle tabs
  and newlines embedded in text, and add options like '--wrap N',
  '--wordwrap on', and '--quote' to the columnar output modes.
* Query planner enhancements using a Bloom filter to speed up 
  large analytic queries, and a balanced merge tree to evaluate
  UNION or UNION ALL compound SELECT statements that have an
  ORDER BY clause.
* The ALTER TABLE statement is changed to silently ignores
  entries in the sqlite_schema table that do not parse when
  PRAGMA writable_schema=ON

Update to 3.37.2:

* Fix a bug introduced in version 3.35.0 (2021-03-12) that can
  cause database corruption if a SAVEPOINT is rolled back while
  in PRAGMA temp_store=MEMORY mode, and other changes are made,
  and then the outer transaction commits
* Fix a long-standing problem with ON DELETE CASCADE and ON 
  UPDATE CASCADE in which a cache of the bytecode used to
  implement the cascading change was not being reset following a
  local DDL change

Update to 3.37.1:

* Fix a bug introduced by the UPSERT enhancements of version
  3.35.0 that can cause incorrect byte-code to be generated for
  some obscure but valid SQL, possibly resulting in a NULL-
  pointer dereference.
* Fix an OOB read that can occur in FTS5 when reading corrupt
  database files.
* Improved robustness of the --safe option in the CLI.
* Other minor fixes to assert() statements and test cases. 

Updated to 3.37.0:

* STRICT tables provide a prescriptive style of data type
  management, for developers who prefer that kind of thing.
* When adding columns that contain a CHECK constraint or a
  generated column containing a NOT NULL constraint, the
  ALTER TABLE ADD COLUMN now checks new constraints against
  preexisting rows in the database and will only proceed if no
  constraints are violated.
* Added the PRAGMA table_list statement.
* Add the .connection command, allowing the CLI to keep multiple
  database connections open at the same time.
* Add the --safe command-line option that disables dot-commands
  and SQL statements that might cause side-effects that extend
  beyond the single database file named on the command-line.
* CLI: Performance improvements when reading SQL statements that
  span many lines.
* Added the sqlite3_autovacuum_pages() interface.
* The sqlite3_deserialize() does not and has never worked
  for the TEMP database. That limitation is now noted in the
  documentation.
* The query planner now omits ORDER BY clauses on subqueries and
  views if removing those clauses does not change the semantics
  of the query.
* The generate_series table-valued function extension is modified
  so that the first parameter ('START') is now required. This is
  done as a way to demonstrate how to write table-valued
  functions with required parameters. The legacy behavior is
  available using the -DZERO_ARGUMENT_GENERATE_SERIES
  compile-time option.
* Added new sqlite3_changes64() and sqlite3_total_changes64()
  interfaces.
* Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
* Use less memory to hold the database schema.
* bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
  extension when a column has no collating sequence.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1189802">SUSE bug 1189802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195773">SUSE bug 1195773</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201783">SUSE bug 1201783</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36690/">CVE-2021-36690</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-35737/">CVE-2022-35737</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009711219" comment="libsqlite3-0-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710768" comment="libsqlite3-0-32bit-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714909" comment="sqlite3-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714910" comment="sqlite3-devel-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714911" comment="sqlite3-tcl-3.39.3-150000.3.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139969" version="1" class="patch">
	<metadata>
		<title>Security update for libcontainers-common (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1176804" ref_url="https://bugzilla.suse.com/1176804" source="BUGZILLA"/>
		<reference ref_id="1177598" ref_url="https://bugzilla.suse.com/1177598" source="BUGZILLA"/>
		<reference ref_id="1181640" ref_url="https://bugzilla.suse.com/1181640" source="BUGZILLA"/>
		<reference ref_id="1182998" ref_url="https://bugzilla.suse.com/1182998" source="BUGZILLA"/>
		<reference ref_id="1188520" ref_url="https://bugzilla.suse.com/1188520" source="BUGZILLA"/>
		<reference ref_id="1189893" ref_url="https://bugzilla.suse.com/1189893" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14370" ref_url="https://www.suse.com/security/cve/CVE-2020-14370/" source="CVE"/>
		<reference ref_id="CVE-2020-15157" ref_url="https://www.suse.com/security/cve/CVE-2020-15157/" source="CVE"/>
		<reference ref_id="CVE-2021-20199" ref_url="https://www.suse.com/security/cve/CVE-2021-20199/" source="CVE"/>
		<reference ref_id="CVE-2021-20291" ref_url="https://www.suse.com/security/cve/CVE-2021-20291/" source="CVE"/>
		<reference ref_id="CVE-2021-3602" ref_url="https://www.suse.com/security/cve/CVE-2021-3602/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012287.html" source="SUSE-SU"/>
		<description>
This update for libcontainers-common fixes the following issues:

libcontainers-common was updated:

- common component was updated to 0.44.0.
- storage component was updated to 1.36.0.
- image component was updated to 5.16.0.
- podman component was updated to 3.3.1.

3.3.1:

Bugfixes:

- Fixed a bug where unit files created by `podman generate systemd` could not cleanup shut down containers when stopped by `systemctl stop` .
- Fixed a bug where `podman machine` commands would not properly locate the `gvproxy` binary in some circumstances.
- Fixed a bug where containers created as part of a pod using the `--pod-id-file` option would not join the pod's network namespace .
- Fixed a bug where Podman, when using the systemd cgroups driver, could sometimes leak dbus sessions.
- Fixed a bug where the `until` filter to `podman logs` and `podman events` was improperly handled, requiring input to be negated .
- Fixed a bug where rootless containers using CNI networking run on systems using `systemd-resolved` for DNS would fail to start if resolved symlinked `/etc/resolv.conf` to an absolute path .

API:

- A large number of potential file descriptor leaks from improperly closing client connections have been fixed.

3.3.0:

Features:

- Containers inside VMs created by `podman machine` will now automatically handle port forwarding - containers in `podman machine` VMs that publish ports via `--publish` or `--publish-all` will have these ports not just forwarded on the VM, but also on the host system.
- The `podman play kube` command's `--network` option now accepts advanced network options (e.g. `--network slirp4netns:port_handler=slirp4netns`) .
- The `podman play kube` commmand now supports Kubernetes liveness probes, which will be created as Podman healthchecks.
- Podman now provides a systemd unit, `podman-restart.service`, which, when enabled, will restart all containers that were started with `--restart=always` after the system reboots.
- Rootless Podman can now be configured to use CNI networking by default by using the `rootless_networking` option in `containers.conf`.
- Images can now be pulled using `image:tag@digest` syntax (e.g. `podman pull fedora:34@sha256:1b0d4ddd99b1a8c8a80e885aafe6034c95f266da44ead992aab388e6aa91611a`) .
- The `podman container checkpoint` and `podman container restore` commands can now be used to checkpoint containers that are in pods, and restore those containers into pods.
- The `podman container restore` command now features a new option, `--publish`, to change the ports that are forwarded to a container that is being restored from an exported checkpoint.
- The `podman container checkpoint` command now features a new option, `--compress`, to specify the compression algorithm that will be used on the generated checkpoint.
- The `podman pull` command can now pull multiple images at once (e.g. `podman pull fedora:34 ubi8:latest` will pull both specified images).
- THe `podman cp` command can now copy files from one container into another directly (e.g. `podman cp containera:/etc/hosts containerb:/etc/`) .
- The `podman cp` command now supports a new option, `--archive`, which controls whether copied files will be chown'd to the UID and GID of the user of the destination container.
- The `podman stats` command now provides two additional metrics: Average CPU, and CPU time.
- The `podman pod create` command supports a new flag, `--pid`, to specify the PID namespace of the pod. If specified, containers that join the pod will automatically share its PID namespace.
- The `podman pod create` command supports a new flag, `--infra-name`, which allows the name of the pod's infra container to be set .
- The `podman auto-update` command has had its output reformatted - it is now much clearer what images were pulled and what containers were updated.
- The `podman auto-update` command now supports a new option, `--dry-run`, which reports what would be updated but does not actually perform the update .
- The `podman build` command now supports a new option, `--secret`, to mount secrets into build containers.
- The `podman manifest remove` command now has a new alias, `podman manifest rm`.
- The `podman login` command now supports a new option, `--verbose`, to print detailed information about where the credentials entered were stored.
- The `podman events` command now supports a new event, `exec_died`, which is produced when an exec session exits, and includes the exit code of the exec session.
- The `podman system connection add` command now supports adding connections that connect using the `tcp://` and `unix://` URL schemes.
- The `podman system connection list` command now supports a new flag, `--format`, to determine how the output is printed.
- The `podman volume prune` and `podman volume ls` commands' `--filter` option now support a new filter, `until`, that matches volumes created before a certain time .
- The `podman ps --filter` option's `network` filter now accepts a new value: `container:`, which matches containers that share a network namespace with a specific container .
- The `podman diff` command can now accept two arguments, allowing two images or two containers to be specified; the diff between the two will be printed .
- Podman can now optionally copy-up content from containers into volumes mounted into those containers earlier (at creation time, instead of at runtime) via the `prepare_on_create` option in `containers.conf` .
- A new option, `--gpus`, has been added to `podman create` and `podman run` as a no-op for better compatibility with Docker. If the nvidia-container-runtime package is installed, GPUs should be automatically added to containers without using the flag.
- If an invalid subcommand is provided, similar commands to try will now be suggested in the error message.
### Changes
- The `podman system reset` command now removes non-Podman (e.g. Buildah and CRI-O) containers as well.
- The new port forwarding offered by `podman machine` requires [gvproxy] in order to function.
- Podman will now automatically create the default CNI network if it does not exist, for both root and rootless users. This will only be done once per user - if the network is subsequently removed, it will not be recreated.
- The `install.cni` makefile option has been removed. It is no longer required to distribute the default `87-podman.conflist` CNI configuration file, as Podman will now automatically create it.
- The `--root` option to Podman will not automatically clear all default storage options when set. Storage options can be set manually using `--storage-opt` .
- The output of `podman system connection list` is now deterministic, with connections being sorted alpabetically by their name.
- The auto-update service (`podman-auto-update.service`) has had its default timer adjusted so it now starts at a random time up to 15 minutes after midnight, to help prevent system congestion from numerous daily services run at once.
- Systemd unit files generated by `podman generate systemd` now depend on `network-online.target` by default .
- Systemd unit files generated by `podman generate systemd` now use `Type=notify` by default, instead of using PID files.
- The `podman info` command's logic for detecting package versions on Gentoo has been improved, and should be significantly faster.

Bugfixes:

- Fixed a bug where the `podman play kube` command did not perform SELinux relabelling of volumes specified with a `mountPath` that included the `:z` or `:Z` options .
- Fixed a bug where the `podman play kube` command would ignore the `USER` and `EXPOSE` directives in images .
- Fixed a bug where the `podman play kube` command would only accept lowercase pull policies.
- Fixed a bug where named volumes mounted into containers with the `:z` or `:Z` options were not appropriately relabelled for access from the container .
- Fixed a bug where the `podman logs -f` command, with the `journald` log driver, could sometimes fail to pick up the last line of output from a container .
- Fixed a bug where running `podman rm` on a container created with the `--rm` option would occasionally emit an error message saying the container failed to be removed, when it was successfully removed.
- Fixed a bug where starting a Podman container would segfault if the `LISTEN_PID` and `LISTEN_FDS` environment variables were set, but `LISTEN_FDNAMES` was not .
- Fixed a bug where exec sessions in containers were sometimes not cleaned up when run without `-d` and when the associated `podman exec` process was killed before completion.
- Fixed a bug where `podman system service` could, when run in a systemd unit file with sdnotify in use, drop some connections when it was starting up.
- Fixed a bug where containers run using the REST API using the `slirp4netns` network mode would leave zombie processes that were not cleaned up until `podman system service` exited .
- Fixed a bug where the `podman system service` command would leave zombie processes after its initial launch that were not cleaned up until it exited .
- Fixed a bug where VMs created by `podman machine` could not be started after the host system restarted .
- Fixed a bug where the `podman pod ps` command would not show headers for optional information (e.g. container names when the `--ctr-names` option was given).
- Fixed a bug where the remote Podman client's `podman create` and `podman run` commands would ignore timezone configuration from the server's `containers.conf` file .
- Fixed a bug where the remote Podman client's `podman build` command would only respect `.containerignore` and not `.dockerignore` files (when both are present, `.containerignore` will be preferred) .
- Fixed a bug where the remote Podman client's `podman build` command would fail to send the Dockerfile being built to the server when it was excluded by the `.dockerignore` file, resulting in an error .
- Fixed a bug where the remote Podman client's `podman build` command could unexpectedly stop streaming the output of the build .
- Fixed a bug where the remote Podman client's `podman build` command would fail to build when run on Windows .
- Fixed a bug where the `podman manifest create` command accepted at most two arguments (an arbitrary number of images are allowed as arguments, which will be added to the manifest).
- Fixed a bug where named volumes would not be properly chowned to the UID and GID of the directory they were mounted over when first mounted into a container .
- Fixed a bug where named volumes created using a volume plugin would be removed from Podman, even if the plugin reported a failure to remove the volume .
- Fixed a bug where the remote Podman client's `podman exec -i` command would hang when input was provided via shell redirection (e.g. `podman --remote exec -i foo cat &lt;&lt;&lt;'hello'`) .
- Fixed a bug where containers created with `--rm` were not immediately removed after being started by `podman start` if they failed to start .
- Fixed a bug where the `--storage-opt` flag to `podman create` and `podman run` was nonfunctional .
- Fixed a bug where the `--device-cgroup-rule` option to `podman create` and `podman run` was nonfunctional .
- Fixed a bug where the `--tls-verify` option to `podman manifest push` was nonfunctional.
- Fixed a bug where the `podman import` command could, in some circumstances, produce empty images .
- Fixed a bug where images pulled using the `docker-daemon:` transport had the wrong registry (`localhost` instead of `docker.io/library`) .
- Fixed a bug where operations that pruned images (`podman image prune` and `podman system prune`) would prune untagged images with children .
- Fixed a bug where dual-stack networks created by `podman network create` did not properly auto-assign an IPv4 subnet when one was not explicitly specified .
- Fixed a bug where port forwarding using the `rootlessport` port forwarder would break when a network was disconnected and then reconnected .
- Fixed a bug where Podman would ignore user-specified SELinux policies for containers using the Kata OCI runtime, or containers using systemd as PID 1 .
- Fixed a bug where Podman containers created using `--net=host` would add an entry to `/etc/hosts` for the container's hostname pointing to `127.0.1.1` .
- Fixed a bug where the `podman unpause --all` command would throw an error for every container that was not paused .
- Fixed a bug where timestamps for the `since` and `until` filters using Unix timestamps with a nanoseconds portion could not be parsed .
- Fixed a bug where the `podman info` command would sometimes print the wrong path for the `slirp4netns` binary.
- Fixed a bug where rootless Podman containers joined to a CNI network would not have functional DNS when the host used systemd-resolved without the resolved stub resolver being enabled .
- Fixed a bug where `podman network connect` and `podman network disconnect` of rootless containers could sometimes break port forwarding to the container .
- Fixed a bug where joining a container to a CNI network by ID and adding network aliases to this network would cause the container to fail to start .
### API
- Fixed a bug where the Compat List endpoint for Containers included healthcheck information for all containers, even those that did not have a configured healthcheck.
- Fixed a bug where the Compat Create endpoint for Containers would fail to create containers with the `NetworkMode` parameter set to `default` .
- Fixed a bug where the Compat Create endpoint for Containers did not properly handle healthcheck commands .
- Fixed a bug where the Compat Wait endpoint for Containers would always send an empty string error message when no error occurred.
- Fixed a bug where the Libpod Stats endpoint for Containers would not error when run on rootless containers on cgroups v1 systems (nonsensical results would be returned, as this configuration cannot be supportable).
- Fixed a bug where the Compat List endpoint for Images omitted the `ContainerConfig` field .
- Fixed a bug where the Compat Build endpoint for Images was too strict when validating the `Content-Type` header, rejecting content that Docker would have accepted .
- Fixed a bug where the Compat Pull endpoint for Images could fail, but return a 200 status code, if an image name that could not be parsed was provided.
- Fixed a bug where the Compat Pull endpoint for Images would continue to pull images after the client disconnected.
- Fixed a bug where the Compat List endpoint for Networks would fail for non-bridge (e.g. macvlan) networks .
- Fixed a bug where the Libpod List endpoint for Networks would return nil, instead of an empty list, when no networks were present .
- The Compat and Libpod Logs endpoints for Containers now support the `until` query parameter .
- The Compat Import endpoint for Images now supports the `platform`, `message`, and `repo` query parameters.
- The Compat Pull endpoint for Images now supports the `platform` query parameter.

Misc:

- Updated Buildah to v1.22.3
- Updated the containers/storage library to v1.34.1
- Updated the containers/image library to v5.15.2
- Updated the containers/common library to v0.42.1

storage was updated to 1.36.0.

Updated image to 5.16.0.

Update podman to 3.2.3:

Security:

- This release addresses CVE-2021-3602, an issue with the `podman build` command with the `--isolation chroot` flag that results in environment variables from the host leaking into build containers. (bsc#1188520)

Bugfixes:

- Fixed a bug where events related to images could occur before the relevant operation had completed (e.g. an image pull event could be written before the pull was finished) .
- Fixed a bug where `podman save` would refuse to save images with an architecture different from that of the host .
- Fixed a bug where the `podman import` command did not correctly handle images without tags .
- Fixed a bug where Podman's journald events backend would fail and prevent Podman from running when run on a host with systemd as PID1 but in an environment (e.g. a container) without systemd .
- Fixed a bug where containers using rootless CNI networking would fail to start when the `dnsname` CNI plugin was in use and the host system's `/etc/resolv.conf` was a symlink ([#10855] and [#10929](https://github.com/containers/podman/issues/10929)).
- Fixed a bug where containers using rootless CNI networking could fail to start due to a race in rootless CNI initialization .

Update podman to 3.2.2

3.2.2:

- Podman's handling of the Architecture field of images has been relaxed. Since 3.2.0, Podman required that the architecture of the image match the architecture of the system to run containers based on an image, but images often incorrectly report architecture, causing Podman to reject valid images ([#10648] and [#10682](https://github.com/containers/podman/issues/10682)).
- Podman no longer uses inotify to monitor for changes to CNI configurations. This removes potential issues where Podman cannot be run because a user has exhausted their available inotify sessions .

Bugfixes

- Fixed a bug where the `podman cp` would, when given a directory as its source and a target that existed and was a file, copy the contents of the directory into the parent directory of the file; this now results in an error.
- Fixed a bug where the `podman logs` command would, when following a running container's logs, not include the last line of output from the container when it exited when the `k8s-file` driver was in use .
- Fixed a bug where Podman would fail to run containers if `systemd-resolved` was incorrectly detected as the system's DNS server .
- Fixed a bug where the `podman exec -t` command would only resize the exec session's TTY after the session started, leading to a race condition where the terminal would initially not have a size set .
- Fixed a bug where Podman containers using the `slirp4netns` network mode would add an incorrect entry to `/etc/hosts` pointing the container's hostname to the wrong IP address.
- Fixed a bug where Podman would create volumes specified by images with incorrect permissions ([#10188] and [#10606](https://github.com/containers/podman/issues/10606)).
- Fixed a bug where Podman would not respect the `uid` and `gid` options to `podman volume create -o` .
- Fixed a bug where the `podman run` command could panic when parsing the system's cgroup configuration .
- Fixed a bug where the remote Podman client's `podman build -f - ...` command did not read a Containerfile from STDIN .
- Fixed a bug where the `podman container restore --import` command would fail to restore checkpoints created from privileged containers .
- Fixed a bug where Podman was not respecting the `TMPDIR` environment variable when pulling images .
- Fixed a bug where a number of Podman commands did not properly support using Go templates as an argument to the `--format` option.

API:

- Fixed a bug where the Compat Inspect endpoint for Containers did not include information on container healthchecks .
- Fixed a bug where the Libpod and Compat Build endpoints for Images did not properly handle the `devices` query parameter .

Misc:

- Fixed a bug where the Makefile's `make podman-remote-static` target to build a statically-linked `podman-remote` binary was instead producing dynamic binaries .
- Updated the containers/common library to v0.38.11

3.2.1:

Changes:
- Podman now allows corrupt images (e.g. from restarting the system during an image pull) to be replaced by a `podman pull` of the same image (instead of requiring they be removed first, then re-pulled).

Bugfixes:

- Fixed a bug where Podman would fail to start containers if a Seccomp profile was not available at `/usr/share/containers/seccomp.json` .
- Fixed a bug where the `podman machine start` command failed on OS X machines with the AMD64 architecture and certain QEMU versions .
- Fixed a bug where Podman would always use the slow path for joining the rootless user namespace.
- Fixed a bug where the `podman stats` command would fail on Cgroups v1 systems when run on a container running systemd .
- Fixed a bug where pre-checkpoint support for `podman container checkpoint` did not function correctly.
- Fixed a bug where the remote Podman client's `podman build` command did not properly handle the `-f` option .
- Fixed a bug where the remote Podman client's `podman run` command would sometimes not resize the container's terminal before execution began .
- Fixed a bug where the `--filter` option to the `podman image prune` command was nonfunctional.
- Fixed a bug where the `podman logs -f` command would exit before all output for a container was printed when the `k8s-file` log driver was in use .
- Fixed a bug where Podman would not correctly detect that systemd-resolved was in use on the host and adjust DNS servers in the container appropriately under some circumstances .
- Fixed a bug where the `podman network connect` and `podman network disconnect` commands acted improperly when containers were in the Created state, marking the changes as done but not actually performing them.

API:

- Fixed a bug where the Compat and Libpod Prune endpoints for Networks returned null, instead of an empty array, when nothing was pruned.
- Fixed a bug where the Create API for Images would continue to pull images even if a client closed the connection mid-pull .
- Fixed a bug where the Events API did not include some information (including labels) when sending events.
- Fixed a bug where the Events API would, when streaming was not requested, send at most one event .

3.2.0:

Features:

- Docker Compose is now supported with rootless Podman .
- The `podman network connect`, `podman network disconnect`, and `podman network reload` commands have been enabled for rootless Podman.
- An experimental new set of commands, `podman machine`, was added to assist in managing virtual machines containing a Podman server. These are intended for easing the use of Podman on OS X by handling the creation of a Linux VM for running Podman.
- The `podman generate kube` command can now be run on Podman named volumes (generating `PersistentVolumeClaim` YAML), in addition to pods and containers.
- The `podman play kube` command now supports two new options, `--ip` and `--mac`, to set static IPs and MAC addresses for created pods ([#8442] and [#9731](https://github.com/containers/podman/issues/9731)).
- The `podman play kube` command's support for `PersistentVolumeClaim` YAML has been greatly improved.
- The `podman generate kube` command now preserves the label used by `podman auto-update` to identify containers to update as a Kubernetes annotation, and the `podman play kube` command will convert this annotation back into a label. This allows `podman auto-update` to be used with containers created by `podman play kube`.
- The `podman play kube` command now supports Kubernetes `secretRef` YAML (using the secrets support from `podman secret`) for environment variables.
- Secrets can now be added to containers as environment variables using the `type=env` option to the `--secret` flag to `podman create` and `podman run`.
- The `podman start` command now supports the `--all` option, allowing all containers to be started simultaneously with a single command. The `--filter` option has also been added to filter which containers to start when `--all` is used.
- Filtering containers with the `--filter` option to `podman ps` and `podman start` now supports a new filter, `restart-policy`, to filter containers based on their restart policy.
- The `--group-add` option to rootless `podman run` and `podman create` now accepts a new value, `keep-groups`, which instructs Podman to retain the supplemental groups of the user running Podman in the created container. This is only supported with the `crun` OCI runtime.
- The `podman run` and `podman create` commands now support a new option, `--timeout`. This sets a maximum time the container is allowed to run, after which it is killed .
- The `podman run` and `podman create` commands now support a new option, `--pidfile`. This will create a file when the container is started containing the PID of the first process in the container.
- The `podman run` and `podman create` commands now support a new option, `--requires`. The `--requires` option adds dependency containers - containers that must be running before the current container. Commands like `podman start` will automatically start the requirements of a container before starting the container itself.
- Auto-updating containers can now be done with locally-built images, not just images hosted on a registry, by creating containers with the `io.containers.autoupdate` label set to `local`.
- Podman now supports the [Container Device Interface] (CDI) standard.
- Podman now adds an entry to `/etc/hosts`, `host.containers.internal`, pointing to the current gateway (which, for root containers, is usually a bridge interface on the host system) .
- The `podman ps`, `podman pod ps`, `podman network list`, `podman secret list`, and `podman volume list` commands now support a `--noheading` option, which will cause Podman to omit the heading line including column names.
- The `podman unshare` command now supports a new flag, `--rootless-cni`, to join the rootless network namespace. This allows commands to be run in the same network environment as rootless containers with CNI networking.
- The `--security-opt unmask=` option to `podman run` and `podman create` now supports glob operations to unmask a group of paths at once (e.g. `podman run --security-opt unmask=/proc/* ...` will unmask all paths in `/proc` in the container).
- The `podman network prune` command now supports a `--filter` option to filter which networks will be pruned.
### Changes
- The change in Podman 3.1.2 where the `:z` and `:Z` mount options for volumes were ignored for privileged containers has been reverted after discussion in [#10209].
- Podman's rootless CNI functionality no longer requires a sidecar container! The removal of the requirement for the `rootless-cni-infra` container means that rootless CNI is now usable on all architectures, not just AMD64, and no longer requires pulling an image .
- The Image handling code used by Podman has seen a major rewrite to improve code sharing with our other projects, Buildah and CRI-O. This should result in fewer bugs and performance gains in the long term. Work on this is still ongoing.
- The `podman auto-update` command now prunes previous versions of images after updating if they are unused, to prevent disk exhaustion after repeated updates .
- The `podman play kube` now treats environment variables configured as references to a `ConfigMap` as mandatory unless the `optional` parameter was set; this better matches the behavior of Kubernetes.
- Podman now supports the `--context=default` flag from Docker as a no-op for compatibility purposes.
- When Podman is run as root, but without `CAP_SYS_ADMIN` being available, it will run in a user namespace using the same code as rootless Podman (instead of failing outright).
- The `podman info` command now includes the path of the Seccomp profile Podman is using, available cgroup controllers, and whether Podman is connected to a remote service or running containers locally.
- Containers created with the `--rm` option now automatically use the `volatile` storage flag when available for their root filesystems, causing them not to write changes to disk as often as they will be removed at completion anyways. This should result in improved performance.
- The `podman generate systemd --new` command will now include environment variables referenced by the container in generated unit files if the value would be looked up from the system environment.
- Podman now requires that Conmon v2.0.24 be available.

Bugfixes:

- Fixed a bug where the remote Podman client's `podman build` command did not support the `--arch`, `--platform`, and `--os`, options.
- Fixed a bug where the remote Podman client's `podman build` command ignored the `--rm=false` option .
- Fixed a bug where the remote Podman client's `podman build --iidfile` command could include extra output (in addition to just the image ID) in the image ID file written .
- Fixed a bug where the remote Podman client's `podman build` command did not preserve hardlinks when moving files into the container via `COPY` instructions .
- Fixed a bug where the `podman generate systemd --new` command could generate extra `--iidfile` arguments if the container was already created with one.
- Fixed a bug where the `podman generate systemd --new` command would generate unit files that did not include `RequiresMountsFor` lines .
- Fixed a bug where the `podman generate kube` command produced incorrect YAML for containers which bind-mounted both `/` and `/root` from the host system into the container .
- Fixed a bug where pods created by `podman play kube` from YAML that specified `ShareProcessNamespace` would only share the PID namespace (and not also the UTS, Network, and IPC namespaces) .
- Fixed a bug where the `podman network reload` command could generate spurious error messages when `iptables-nft` was in use.
- Fixed a bug where rootless Podman could fail to attach to containers when the user running Podman had a large UID.
- Fixed a bug where the `podman ps` command could fail with a `no such container` error due to a race condition with container removal .
- Fixed a bug where containers using the `slirp4netns` network mode and setting a custom `slirp4netns` subnet while using the `rootlesskit` port forwarder would not be able to forward ports .
- Fixed a bug where the `--filter ancestor=` option to `podman ps` did not require an exact match of the image name/ID to include a container in its results.
- Fixed a bug where the `--filter until=` option to `podman image prune` would prune images created after the specified time (instead of before).
- Fixed a bug where setting a custom Seccomp profile via the `seccomp_profile` option in `containers.conf` had no effect, and the default profile was used instead.
- Fixed a bug where the `--cgroup-parent` option to `podman create` and `podman run` was ignored in rootless Podman on cgroups v2 systems with the `cgroupfs` cgroup manager .
- Fixed a bug where the `IMAGE` and `NAME` variables in `podman container runlabel` were not being correctly substituted .
- Fixed a bug where Podman could freeze when creating containers with a specific combination of volumes and working directory .
- Fixed a bug where rootless Podman containers restarted by restart policy (e.g. containers created with `--restart=always`) would lose networking after being restarted .
- Fixed a bug where the `podman cp` command could not copy files into containers created with the `--pid=host` flag .
- Fixed a bug where filters to the `podman events` command could not be specified twice (if a filter is specified more than once, it will match if any of the given values match - logical or) .
- Fixed a bug where Podman would include IPv6 nameservers in `resolv.conf` in containers without IPv6 connectivity .
- Fixed a bug where containers could not be created with static IP addresses when connecting to a network using the `macvlan` driver .
### API
- Fixed a bug where the Compat Create endpoint for Containers did not allow advanced network options to be set .
- Fixed a bug where the Compat Create endpoint for Containers ignored static IP information provided in the `IPAMConfig` block .
- Fixed a bug where the Compat Inspect endpoint for Containers returned null (instead of an empty list) for Networks when the container was not joined to a CNI network .
- Fixed a bug where the Compat Wait endpoint for Containers could miss containers exiting if they were immediately restarted.
- Fixed a bug where the Compat Create endpoint for Volumes required that the user provide a name for the new volume .
- Fixed a bug where the Libpod Info handler would sometimes not return the correct path to the Podman API socket.
- Fixed a bug where the Compat Events handler used the wrong name for container exited events (`died` instead of `die`) .
- Fixed a bug where the Compat Push endpoint for Images could leak goroutines if the remote end closed the connection prematurely.


Update storage to 1.32.5

Update podman to 3.1.2

3.1.2:

Bugfixes:

- Fixed a bug where images with empty layers were stored incorrectly, causing them to be unable to be pushed or saved.
- Fixed a bug where the `podman rmi` command could fail to remove corrupt images from storage.
- Fixed a bug where the remote Podman client's `podman save` command did not support the `oci-dir` and `docker-dir` formats .
- Fixed a bug where volume mounts from `podman play kube` created with a trailing `/` in the container path were were not properly superceding named volumes from the image .
- Fixed a bug where Podman could fail to build on 32-bit architectures.

Update podman to 3.1.1

- Podman now recognizes `trace` as a valid argument to the `--log-level` command. Trace logging is now the most verbose level of logging available.
- The `:z` and `:Z` options for volume mounts are now ignored when the container is privileged or is run with SELinux isolation disabled (`--security-opt label=disable`). This matches better matches Docker's behavior in this case.

Bugfixes

- Fixed a bug where pruning images with the `podman image prune` or `podman system prune` commands could cause Podman to panic.
- Fixed a bug where the `podman save` command did not properly error when the `--compress` flag was used with incompatible format types.
- Fixed a bug where the `--security-opt` and `--ulimit` options to the remote Podman client's `podman build` command were nonfunctional.
- Fixed a bug where the `--log-rusage` option to the remote Podman client's `podman build` command was nonfunctional .
- Fixed a bug where the `podman build` command could, in some circumstances, use the wrong OCI runtime .
- Fixed a bug where the remote Podman client's `podman build` command could return 0 despite failing .
- Fixed a bug where the `podman container runlabel` command did not properly expand the `IMAGE` and `NAME` variables in the label .
- Fixed a bug where poststop OCI hooks would be executed twice on containers started with the `--rm` argument .
- Fixed a bug where rootless Podman could fail to launch containers on cgroups v2 systems when the `cgroupfs` cgroup manager was in use.
- Fixed a bug where the `podman stats` command could error when statistics tracked exceeded the maximum size of a 32-bit signed integer .
- Fixed a bug where rootless Podman containers run with `--userns=keepid` (without a `--user` flag in addition) would grant exec sessions run in them too many capabilities .
- Fixed a bug where the `--authfile` option to `podman build` did not validate that the path given existed .
- Fixed a bug where the `--storage-opt` option to Podman was appending to, instead of overriding (as is documented), the default storage options.
- Fixed a bug where the `podman system service` connection did not function properly when run in a socket-activated systemd unit file as a non-root user.
- Fixed a bug where the `--network` option to the `podman play kube` command of the remote Podman client was being ignored .
- Fixed a bug where the `--log-driver` option to the `podman play kube` command was nonfunctional .

API

- Fixed a bug where the Libpod Create endpoint for Manifests did not properly validate the image the manifest was being created with.
- Fixed a bug where the Libpod DF endpoint could, in error cases, append an extra null to the JSON response, causing decode errors.
- Fixed a bug where the Libpod and Compat Top endpoint for Containers would return process names that included extra whitespace.
- Fixed a bug where the Compat Prune endpoint for Containers accepted too many types of filter.

Update podman to 3.1.0

Features:

- A set of new commands has been added to manage secrets! The `podman secret create`, `podman secret inspect`, `podman secret ls` and `podman secret rm` commands have been added to handle secrets, along with the `--secret` option to `podman run` and `podman create` to add secrets to containers. The initial driver for secrets does not support encryption - this will be added in a future release.
- A new command to prune networks, `podman network prune`, has been added .
- The `-v` option to `podman run` and `podman create` now supports a new volume option, `:U`, to chown the volume's source directory on the host to match the UID and GID of the container and prevent permissions issues .
- Three new commands, `podman network exists`, `podman volume exists`, and `podman manifest exists`, have been added to check for the existence of networks, volumes, and manifest lists.
- The `podman cp` command can now copy files into directories mounted as `tmpfs` in a running container.
- The `podman volume prune` command will now list volumes that will be pruned when prompting the user whether to continue and perform the prune .
- The Podman remote client's `podman build` command now supports the `--disable-compression`, `--excludes`, and `--jobs` options.
- The Podman remote client's `podman push` command now supports the `--format` option.
- The Podman remote client's `podman rm` command now supports the `--all` and `--ignore` options.
- The Podman remote client's `podman search` command now supports the `--no-trunc` and `--list-tags` options.
- The `podman play kube` command can now read in Kubernetes YAML from `STDIN` when `-` is specified as file name (`podman play kube -`), allowing input to be piped into the command for scripting .
- The `podman generate systemd` command now supports a `--no-header` option, which disables creation of the header comment automatically added by Podman to generated unit files.
- The `podman generate kube` command can now generate `PersistentVolumeClaim` YAML for Podman named volumes .
- The `podman generate kube` command can now generate YAML files containing multiple resources (pods or deployments) .

Security:

- This release resolves CVE-2021-20291, a deadlock vulnerability in the storage library caused by pulling a specially-crafted container image. (bsc#1196497)

Changes:

- The Podman remote client's `podman build` command no longer allows the `-v` flag to be used. Volumes are not yet supported with remote Podman when the client and service are on different machines.
- The `podman kill` and `podman stop` commands now print the name given by the user for each container, instead of the full ID.
- When the `--security-opt unmask=ALL` or `--security-opt unmask=/sys/fs/cgroup` options to `podman create` or `podman run` are given, Podman will mount cgroups into the container as read-write, instead of read-only .
- The `podman rmi` command has been changed to better handle cases where an image is incomplete or corrupted, which can be caused by interrupted image pulls.
- The `podman rename` command has been improved to be more atomic, eliminating many race conditions that could potentially render a renamed container unusable.
- Detection of which OCI runtimes run using virtual machines and thus require custom SELinux labelling has been improved .
- The hidden `--trace` option to `podman` has been turned into a no-op. It was used in very early versions for performance tracing, but has not been supported for some time.
- The `podman generate systemd` command now generates `RequiresMountsFor` lines to ensure necessary storage directories are mounted before systemd starts Podman.
- Podman will now emit a warning when `--tty` and `--interactive` are both passed, but `STDIN` is not a TTY. This will be made into an error in the next major Podman release some time next year.
### Bugfixes
- Fixed a bug where rootless Podman containers joined to CNI networks could not receive traffic from forwarded ports .
- Fixed a bug where `podman network create` with the `--macvlan` flag did not honor the `--gateway`, `--subnet`, and `--opt` options .
- Fixed a bug where the `podman generate kube` command generated invalid YAML for privileged containers .
- Fixed a bug where the `podman generate kube` command could not be used with containers that were not running.
- Fixed a bug where the `podman generate systemd` command could duplicate some parameters to Podman in generated unit files .
- Fixed a bug where Podman did not add annotations specified in `containers.conf` to containers.
- Foxed a bug where Podman did not respect the `no_hosts` default in `containers.conf` when creating containers.
- Fixed a bug where the `--tail=0`, `--since`, and `--follow` options to the `podman logs` command did not function properly when using the `journald` log backend.
- Fixed a bug where specifying more than one container to `podman logs` when the `journald` log backend was in use did not function correctly.
- Fixed a bug where the `podman run` and `podman create` commands would panic if a memory limit was set, but the swap limit was set to unlimited .
- Fixed a bug where the `--network` option to `podman run`, `podman create`, and `podman pod create` would error if the user attempted to specify CNI networks by ID, instead of name .
- Fixed a bug where Podman's cgroup handling for cgroups v1 systems did not properly handle cases where a cgroup existed on some, but not all, controllers, resulting in errors from the `podman stats` command .
- Fixed a bug where the `podman cp` did not properly handle cases where `/dev/stdout` was specified as the destination (it was treated identically to `-`) .
- Fixed a bug where the `podman cp` command would create files with incorrect ownership .
- Fixed a bug where the `podman cp` command did not properly handle cases where the destination directory did not exist.
- Fixed a bug where the `podman cp` command did not properly evaluate symlinks when copying out of containers.
- Fixed a bug where the `podman rm -fa` command would error when attempting to remove containers created with `--rm` .
- Fixed a bug where the ordering of capabilities was nondeterministic in the `CapDrop` field of the output of `podman inspect` on a container .
- Fixed a bug where the `podman network connect` command could be used with containers that were not initially connected to a CNI bridge network (e.g. containers created with `--net=host`) .
- Fixed a bug where DNS search domains required by the `dnsname` CNI plugin were not being added to container's `resolv.conf` under some circumstances.
- Fixed a bug where the `--ignorefile` option to `podman build` was nonfunctional .
- Fixed a bug where the `--timestamp` option to `podman build` was nonfunctional .
- Fixed a bug where the `--iidfile` option to `podman build` could cause Podman to panic if an error occurred during the build.
- Fixed a bug where the `--dns-search` option to `podman build` was nonfunctional .
- Fixed a bug where the `--pull-never` option to `podman build` was nonfunctional .
- Fixed a bug where the `--build-arg` option to `podman build` would, when given a key but not a value, error (instead of attempting to look up the key as an environment variable) .
- Fixed a bug where the `--isolation` option to `podman build` in the remote Podman client was nonfunctional.
- Fixed a bug where the `podman network disconnect` command could cause errors when the container that had a network removed was stopped and its network was cleaned up .
- Fixed a bug where the `podman network rm` command did not properly check what networks a container was present in, resulting in unexpected behavior if `podman network connect` or `podman network disconnect` had been used with the network .
- Fixed a bug where some errors with stopping a container could cause Podman to panic, and the container to be stuck in an unusable `stopping` state .
- Fixed a bug where the `podman load` command could return 0 even in cases where an error occurred .
- Fixed a bug where specifying storage options to Podman using the `--storage-opt` option would override all storage options. Instead, storage options are now overridden only when the `--storage-driver` option is used to override the current graph driver .
- Fixed a bug where containers created with `--privileged` could request more capabilities than were available to Podman.
- Fixed a bug where `podman commit` did not use the `TMPDIR` environment variable to place temporary files created during the commit .
- Fixed a bug where remote Podman could error when attempting to resize short-lived containers .
- Fixed a bug where Podman was unusable on kernels built without `CONFIG_USER_NS`.
- Fixed a bug where the ownership of volumes created by `podman volume create` and then mounted into a container could be incorrect .
- Fixed a bug where Podman volumes using a volume plugin could not pass certain options, and could not be used as non-root users.
- Fixed a bug where the `--tz` option to `podman create` and `podman run` did not properly validate its input.
### API
- Fixed a bug where the `X-Registry-Auth` header did not accept `null` as a valid value.
- A new compat endpoint, `/auth`, has been added. This endpoint validates credentials against a registry .
- Fixed a bug where the compat Build endpoint for Images specified labels using the wrong type (array vs map). Both formats will be accepted now.
- Fixed a bug where the compat Build endpoint for Images did not report that it successfully tagged the built image in its response.
- Fixed a bug where the compat Create endpoint for Images did not provide progress information on pulling the image in its response.
- Fixed a bug where the compat Push endpoint for Images did not properly handle the destination (used a query parameter, instead of a path parameter).
- Fixed a bug where the compat Push endpoint for Images did not send the progress of the push and the digest of the pushed image in the response body.
- Fixed a bug where the compat List endpoint for Networks returned null, instead of an empty array (`[]`), when no networks were present .
- Fixed a bug where the compat List endpoint for Networks returned nulls, instead of empty maps, for networks that do not have Labels and/or Options.
- The Libpod Inspect endpoint for networks (`/libpod/network/$ID/json`) now has an alias at `/libpod/network/$ID` .
- Fixed a bug where the libpod Inspect endpoint for Networks returned a 1-size array of results, instead of a single result .
- The Compat List endpoint for Networks now supports the legacy format for filters in parallel with the current filter format .
- Fixed a bug where the compat Create endpoint for Containers did not properly handle tmpfs filesystems specified with options .
- Fixed a bug where the compat Create endpoint for Containers did not create bind-mount source directories .
- Fixed a bug where the compat Create endpoint for Containers did not properly handle the `NanoCpus` option .
- Fixed a bug where the Libpod create endpoint for Containers has a misnamed field in its JSON.
- Fixed a bug where the compat List endpoint for Containers did not populate information on forwarded ports 
- Fixed a bug where the compat List endpoint for Containers did not populate information on container CNI networks .
- Fixed a bug where the compat and libpod Stop endpoints for Containers would ignore a timeout of 0.
- Fixed a bug where the compat and libpod Resize endpoints for Containers did not set the correct terminal sizes (dimensions were reversed) .
- Fixed a bug where the compat Remove endpoint for Containers would not return 404 when attempting to remove a container that does not exist .
- Fixed a bug where the compat Prune endpoint for Volumes would still prune even if an invalid filter was specified.
- Numerous bugs related to filters have been addressed.

Update podman to 3.0.1

3.0.1:

Changes:

- Several frequently-occurring `WARN` level log messages have been downgraded to `INFO` or `DEBUG` to not clutter terminal output.

Bugfixes:

- Fixed a bug where the `Created` field of `podman ps --format=json` was formatted as a string instead of an Unix timestamp (integer) .
- Fixed a bug where failing lookups of individual layers during the `podman images` command would cause the whole command to fail without printing output.
- Fixed a bug where `--cgroups=split` did not function properly on cgroups v1 systems.
- Fixed a bug where mounting a volume over an directory in the container that existed, but was empty, could fail .
- Fixed a bug where mounting a volume over a directory in the container that existed could copy the entirety of the container's rootfs, instead of just the directory mounted over, into the volume .
- Fixed a bug where Podman would treat the `--entrypoint=['']` option to `podman run` and `podman create` as a literal empty string in the entrypoint, when instead it should have been ignored .
- Fixed a bug where Podman would set the `HOME` environment variable to `''` when the container ran as a user without an assigned home directory .
- Fixed a bug where specifying a pod infra image that had no tags (by using its ID) would cause `podman pod create` to panic .
- Fixed a bug where the `--runtime` option was not properly handled by the `podman build` command .
- Fixed a bug where Podman would incorrectly print an error message related to the remote API when the remote API was not in use and starting Podman failed.
- Fixed a bug where Podman would change ownership of a container's working directory, even if it already existed .
- Fixed a bug where the `podman generate systemd --new` command would incorrectly escape `%t` when generating the path for the PID file .
- Fixed a bug where Podman could, when run inside a Podman container with the host's containers/storage directory mounted into the container, erroneously detect a reboot and reset container state if the temporary directory was not also mounted in .
- Fixed a bug where some options of the `podman build` command (including but not limited to `--jobs`) were nonfunctional .
### API
- Fixed a breaking change to the Libpod Wait API for Containers where the Conditions parameter changed type in Podman v3.0 .
- Fixed a bug where the Compat Create endpoint for Containers did not properly handle forwarded ports that did not specify a host port.
- Fixed a bug where the Libpod Wait endpoint for Containers could write duplicate headers after an error occurred.
- Fixed a bug where the Compat Create endpoint for Images would not pull images that already had a matching tag present locally, even if a more recent version was available at the registry .
- The Compat Create endpoint for Images has had its compatibility with Docker improved, allowing its use with the `docker-java` library.
### Misc
- Updated Buildah to v1.19.4
- Updated the containers/storage library to v1.24.6

3.0.0:

Features:

- Podman now features initial support for Docker Compose.
- Added the `podman rename` command, which allows containers to be renamed after they are created .
- The Podman remote client now supports the `podman copy` command.
- A new command, `podman network reload`, has been added. This command will re-configure the network of all running containers, and can be used to recreate firewall rules lost when the system firewall was reloaded (e.g. via `firewall-cmd --reload`).
- Podman networks now have IDs. They can be seen in `podman network ls` and can be used when removing and inspecting networks. Existing networks receive IDs automatically.
- Podman networks now also support labels. They can be added via the `--label` option to `network create`, and `podman network ls` can filter labels based on them.
- The `podman network create` command now supports setting bridge MTU and VLAN through the `--opt` option .
- The `podman container checkpoint` and `podman container restore` commands can now checkpoint and restore containers that include volumes.
- The `podman container checkpoint` command now supports the `--with-previous` and `--pre-checkpoint` options, and the `podman container restore` command now support the `--import-previous` option. These add support for two-step checkpointing with lowered dump times.
- The `podman push` command can now push manifest lists. Podman will first attempt to push as an image, then fall back to pushing as a manifest list if that fails.
- The `podman generate kube` command can now be run on multiple containers at once, and will generate a single pod containing all of them.
- The `podman generate kube` and `podman play kube` commands now support Kubernetes DNS configuration, and will preserve custom DNS configuration when exporting or importing YAML .
- The `podman generate kube` command now properly supports generating YAML for containers and pods creating using host networking (`--net=host`) .
- The `podman kill` command now supports a `--cidfile` option to kill containers given a file containing the container's ID .
- The `podman pod create` command now supports the `--net=none` option .
- The `podman volume create` command can now specify volume UID and GID as options with the `UID` and `GID` fields passed to the the `--opt` option.
- Initial support has been added for Docker Volume Plugins. Podman can now define available plugins in `containers.conf` and use them to create volumes with `podman volume create --driver`.
- The `podman run` and `podman create` commands now support a new option, `--platform`, to specify the platform of the image to be used when creating the container.
- The `--security-opt` option to `podman run` and `podman create` now supports the `systempaths=unconfined` option to unrestrict access to all paths in the container, as well as `mask` and `unmask` options to allow more granular restriction of container paths.
- The `podman stats --format` command now supports a new format specified, `MemUsageBytes`, which prints the raw bytes of memory consumed by a container without human-readable formatting [#8945].
- The `podman ps` command can now filter containers based on what pod they are joined to via the `pod` filter .
- The `podman pod ps` command can now filter pods based on what networks they are joined to via the `network` filter.
- The `podman pod ps` command can now print information on what networks a pod is joined to via the `.Networks` specifier to the `--format` option.
- The `podman system prune` command now supports filtering what containers, pods, images, and volumes will be pruned.
- The `podman volume prune` commands now supports filtering what volumes will be pruned.
- The `podman system prune` command now includes information on space reclaimed .
- The `podman info` command will now properly print information about packages in use on Gentoo and Arch systems.
- The `containers.conf` file now contains an option for disabling creation of a new kernel keyring on container creation .
- The `podman image sign` command can now sign multi-arch images by producing a signature for each image in a given manifest list.
- The `podman image sign` command, when run as rootless, now supports per-user registry configuration files in `$HOME/.config/containers/registries.d`.
- Configuration options for `slirp4netns` can now be set system-wide via the `NetworkCmdOptions` configuration option in `containers.conf`.
- The MTU of `slirp4netns` can now be configured via the `mtu=` network command option (e.g. `podman run --net slirp4netns:mtu=9000`).

Security:

- A fix for CVE-2021-20199 is included. Podman between v1.8.0 and v2.2.1 used `127.0.0.1` as the source address for all traffic forwarded into rootless containers by a forwarded port; this has been changed to address the issue. (bsc#1181640)

Changes:

- Shortname aliasing support has now been turned on by default. All Podman commands that must pull an image will, if a TTY is available, prompt the user about what image to pull.
- The `podman load` command no longer accepts a `NAME[:TAG]` argument. The presence of this argument broke CLI compatibility with Docker by making `docker load` commands unusable with Podman .
- The Go bindings for the HTTP API have been rewritten with a focus on limiting dependency footprint and improving extensibility. Read more [here].
- The legacy Varlink API has been completely removed from Podman.
- The default log level for Podman has been changed from Error to Warn.
- The `podman network create` command can now create `macvlan` networks using the `--driver macvlan` option for Docker compatibility. The existing `--macvlan` flag has been deprecated and will be removed in Podman 4.0 some time next year.
- The `podman inspect` command has had the `LogPath` and `LogTag` fields moved into the `LogConfig` structure (from the root of the Inspect structure). The maximum size of the log file is also included.
- The `podman generate systemd` command no longer generates unit files using the deprecated `KillMode=none` option .
- The `podman stop` command now releases the container lock while waiting for it to stop - as such, commands like `podman ps` will no longer block until `podman stop` completes .
- Networks created with `podman network create --internal` no longer use the `dnsname` plugin. This configuration never functioned as expected.
- Error messages for the remote Podman client have been improved when it cannot connect to a Podman service.
- Error messages for `podman run` when an invalid SELinux is specified have been improved.
- Rootless Podman features improved support for containers with a single user mapped into the rootless user namespace.
- Pod infra containers now respect default sysctls specified in `containers.conf` allowing for advanced configuration of the namespaces they will share.
- SSH public key handling for remote Podman has been improved.
### Bugfixes
- Fixed a bug where the `podman history --no-trunc` command would truncate the `Created By` field .
- Fixed a bug where root containers that did not explicitly specify a CNI network to join did not generate an entry for the network in use in the `Networks` field of the output of `podman inspect` .
- Fixed a bug where, under some circumstances, container working directories specified by the image (via the `WORKDIR` instruction) but not present in the image, would not be created .
- Fixed a bug where the `podman generate systemd` command would generate invalid unit files if the container was creating using a command line that included doubled braces (`{{` and `}}`), e.g. `--log-opt-tag={{.Name}}` .
- Fixed a bug where the `podman generate systemd --new` command could generate unit files including invalid Podman commands if the container was created using merged short options (e.g. `podman run -dt`) .
- Fixed a bug where the `podman generate systemd --new` command could generate unit files that did not handle Podman commands including some special characters (e.g. `$`) ([#9176]
- Fixed a bug where rootless containers joining CNI networks could not set a static IP address .
- Fixed a bug where rootless containers joining CNI networks could not set network aliases .
- Fixed a bug where the remote client could, under some circumstances, not include the `Containerfile` when sending build context to the server .
- Fixed a bug where rootless Podman did not mount `/sys` as a new `sysfs` in some circumstances where it was acceptable.
- Fixed a bug where rootless containers that both joined a user namespace and a CNI networks would cause a segfault. These options are incompatible and now return an error.
- Fixed a bug where the `podman play kube` command did not properly handle `CMD` and `ARGS` from images .
- Fixed a bug where the `podman play kube` command did not properly handle environment variables from images .
- Fixed a bug where the `podman play kube` command did not properly print errors that occurred when starting containers.
- Fixed a bug where the `podman play kube` command errored when `hostNetwork` was used .
- Fixed a bug where the `podman play kube` command would always pull images when the `:latest` tag was specified, even if the image was available locally .
- Fixed a bug where the `podman play kube` command did not properly handle SELinux configuration, rending YAML with custom SELinux configuration unusable .
- Fixed a bug where the `podman generate kube` command incorrectly populated the `args` and `command` fields of generated YAML .
- Fixed a bug where containers in a pod would create a duplicate entry in the pod's shared `/etc/hosts` file every time the container restarted .
- Fixed a bug where the `podman search --list-tags` command did not support the `--format` option .
- Fixed a bug where the `http_proxy` option in `containers.conf` was not being respected, and instead was set unconditionally to true .
- Fixed a bug where rootless Podman could, on systems with a recent Conmon and users with a long username, fail to attach to containers .
- Fixed a bug where the `podman images` command would break and fail to display any images if an empty manifest list was present in storage .
- Fixed a bug where locale environment variables were not properly passed on to Conmon.
- Fixed a bug where Podman would not build on the MIPS architecture .
- Fixed a bug where rootless Podman could fail to properly configure user namespaces for rootless containers when the user specified a `--uidmap` option that included a mapping beginning with UID `0`.
- Fixed a bug where the `podman logs` command using the `k8s-file` backend did not properly handle partial log lines with a length of 1 .
- Fixed a bug where the `podman logs` command with the `--follow` option did not properly handle log rotation .
- Fixed a bug where user-specified `HOSTNAME` environment variables were overwritten by Podman .
- Fixed a bug where Podman would applied default sysctls from `containers.conf` in too many situations (e.g. applying network sysctls when the container shared its network with a pod).
- Fixed a bug where Podman did not properly handle cases where a secondary image store was in use and an image was present in both the secondary and primary stores .
- Fixed a bug where systemd-managed rootless Podman containers where the user in the container was not root could fail as the container's PID file was not accessible to systemd on the host .
- Fixed a bug where the `--privileged` option to `podman run` and `podman create` would, under some circumstances, not disable Seccomp .
- Fixed a bug where the `podman exec` command did not properly add capabilities when the container or exec session were run with `--privileged`.
- Fixed a bug where rootless Podman would use the `--enable-sandbox` option to `slirp4netns` unconditionally, even when `pivot_root` was disabled, rendering `slirp4netns` unusable when `pivot_root` was disabled .
- Fixed a bug where `podman build --logfile` did not actually write the build's log to the logfile.
- Fixed a bug where the `podman system service` command did not close STDIN, and could display user-interactive prompts .
- Fixed a bug where the `podman system reset` command could, under some circumstances, remove all the contents of the `XDG_RUNTIME_DIR` directory .
- Fixed a bug where the `podman network create` command created CNI configurations that did not include a default gateway .
- Fixed a bug where the `podman.service` systemd unit provided by default used the wrong service type, and would cause systemd to not correctly register the service as started .
- Fixed a bug where, if the `TMPDIR` environment variable was set for the container engine in `containers.conf`, it was being ignored.
- Fixed a bug where the `podman events` command did not properly handle future times given to the `--until` option .
- Fixed a bug where the `podman logs` command wrote container `STDERR` logs to `STDOUT` instead of `STDERR` .
- Fixed a bug where containers created from an image with multiple tags would report that they were created from the wrong tag .
- Fixed a bug where container capabilities were not set properly when the `--cap-add=all` and `--user` options to `podman create` and `podman run` were combined.
- Fixed a bug where the `--layers` option to `podman build` was nonfunctional .
- Fixed a bug where the `podman system prune` command did not act recursively, and thus would leave images, containers, pods, and volumes present that would be removed by a subsequent call to `podman system prune` .
- Fixed a bug where the `--publish` option to `podman run` and `podman create` did not properly handle ports specified as a range of ports with no host port specified .
- Fixed a bug where `--format` did not support JSON output for individual fields .
- Fixed a bug where the `podman stats` command would fail when run on root containers using the `slirp4netns` network mode .
- Fixed a bug where the Podman remote client would ask for a password even if the server's SSH daemon did not support password authentication .
- Fixed a bug where the `podman stats` command would fail if the system did not support one or more of the cgroup controllers Podman supports .
- Fixed a bug where the `--mount` option to `podman create` and `podman run` did not ignore the `consistency` mount option.
- Fixed a bug where failures during the resizing of a container's TTY would print the wrong error.
- Fixed a bug where the `podman network disconnect` command could cause the `podman inspect` command to fail for a container until it was restarted .
- Fixed a bug where containers created from a read-only rootfs (using the `--rootfs` option to `podman create` and `podman run`) would fail .
- Fixed a bug where specifying Go templates to the `--format` option to multiple Podman commands did not support the `join` function .
- Fixed a bug where the `podman rmi` command could, when run in parallel on multiple images, return `layer not known` errors .
- Fixed a bug where the `podman inspect` command on containers displayed unlimited ulimits incorrectly .
- Fixed a bug where Podman would fail to start when a volume was mounted over a directory in a container that contained symlinks that terminated outside the directory and its subdirectories .
### API
- All Libpod Pod APIs have been modified to properly report errors with individual containers. Cases where the operation as a whole succeeded but individual containers failed now report an HTTP 409 error .
- The Compat API for Containers now supports the Rename and Copy APIs.
- Fixed a bug where the Compat Prune APIs (for volumes, containers, and images) did not return the amount of space reclaimed in their responses.
- Fixed a bug where the Compat and Libpod Exec APIs for Containers would drop errors that occurred prior to the exec session successfully starting (e.g. a 'no such file' error if an invalid executable was passed) 
- Fixed a bug where the Volumes field in the Compat Create API for Containers was being ignored .
- Fixed a bug where the NetworkMode field in the Compat Create API for Containers was not handling some values, e.g. `container:`, correctly.
- Fixed a bug where the Compat Create API for Containers did not set container name properly.
- Fixed a bug where containers created using the Compat Create API unconditionally used Kubernetes file logging (the default specified in `containers.conf` is now used).
- Fixed a bug where the Compat Inspect API for Containers could include container states not recognized by Docker.
- Fixed a bug where Podman did not properly clean up after calls to the Events API when the `journald` backend was in use, resulting in a leak of file descriptors .
- Fixed a bug where the Libpod Pull endpoint for Images could fail with an `index out of range` error under certain circumstances .
- Fixed a bug where the Libpod Exists endpoint for Images could panic.
- Fixed a bug where the Compat List API for Containers did not support all filters .
- Fixed a bug where the Compat List API for Containers did not properly populate the Status field.
- Fixed a bug where the Compat and Libpod Resize APIs for Containers ignored the height and width parameters .
- Fixed a bug where the Compat Search API for Images returned an incorrectly-formatted JSON response .
- Fixed a bug where the Compat Load API for Images did not properly clean up temporary files.
- Fixed a bug where the Compat Create API for Networks could panic when an empty IPAM configuration was specified.
- Fixed a bug where the Compat Inspect and List APIs for Networks did not include Scope.
- Fixed a bug where the Compat Wait endpoint for Containers did not support the same wait conditions that Docker did.

		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-19"/>
	<updated date="2022-09-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1176804">SUSE bug 1176804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177598">SUSE bug 1177598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181640">SUSE bug 1181640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182998">SUSE bug 1182998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188520">SUSE bug 1188520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189893">SUSE bug 1189893</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14370/">CVE-2020-14370</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-15157/">CVE-2020-15157</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-20199/">CVE-2021-20199</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20291/">CVE-2021-20291</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3602/">CVE-2021-3602</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708252" comment="libcontainers-common-20210626-150100.3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139970" version="1" class="patch">
	<metadata>
		<title>Security update for oniguruma (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1142847" ref_url="https://bugzilla.suse.com/1142847" source="BUGZILLA"/>
		<reference ref_id="1150130" ref_url="https://bugzilla.suse.com/1150130" source="BUGZILLA"/>
		<reference ref_id="1157805" ref_url="https://bugzilla.suse.com/1157805" source="BUGZILLA"/>
		<reference ref_id="1164550" ref_url="https://bugzilla.suse.com/1164550" source="BUGZILLA"/>
		<reference ref_id="1164569" ref_url="https://bugzilla.suse.com/1164569" source="BUGZILLA"/>
		<reference ref_id="1177179" ref_url="https://bugzilla.suse.com/1177179" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13224" ref_url="https://www.suse.com/security/cve/CVE-2019-13224/" source="CVE"/>
		<reference ref_id="CVE-2019-16163" ref_url="https://www.suse.com/security/cve/CVE-2019-16163/" source="CVE"/>
		<reference ref_id="CVE-2019-19203" ref_url="https://www.suse.com/security/cve/CVE-2019-19203/" source="CVE"/>
		<reference ref_id="CVE-2019-19204" ref_url="https://www.suse.com/security/cve/CVE-2019-19204/" source="CVE"/>
		<reference ref_id="CVE-2019-19246" ref_url="https://www.suse.com/security/cve/CVE-2019-19246/" source="CVE"/>
		<reference ref_id="CVE-2020-26159" ref_url="https://www.suse.com/security/cve/CVE-2020-26159/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012320.html" source="SUSE-SU"/>
		<description>
This update for oniguruma fixes the following issues:

- CVE-2019-19246: Fixed an out of bounds access during regular
  expression matching (bsc#1157805).
- CVE-2019-19204: Fixed an out of bounds access when compiling a
  crafted regular expression (bsc#1164569).
- CVE-2019-19203: Fixed an out of bounds access when performing a
  string search (bsc#1164550).
- CVE-2019-16163: Fixed an uncontrolled recursion issue when compiling
  a crafted regular expression, which could lead to denial of service (bsc#1150130).
- CVE-2020-26159: Fixed an off-by-one buffer overflow (bsc#1177179).
- CVE-2019-13224: Fixed a potential use-after-free when handling
  multiple different encodings (bsc#1142847).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-21"/>
	<updated date="2022-09-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1142847">SUSE bug 1142847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150130">SUSE bug 1150130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157805">SUSE bug 1157805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164550">SUSE bug 1164550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164569">SUSE bug 1164569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177179">SUSE bug 1177179</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-13224/">CVE-2019-13224</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16163/">CVE-2019-16163</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19203/">CVE-2019-19203</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19204/">CVE-2019-19204</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19246/">CVE-2019-19246</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26159/">CVE-2020-26159</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708039" comment="libonig4-6.7.0-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708040" comment="oniguruma-devel-6.7.0-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139971" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202169" ref_url="https://bugzilla.suse.com/1202169" source="BUGZILLA"/>
		<reference ref_id="1202807" ref_url="https://bugzilla.suse.com/1202807" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32893" ref_url="https://www.suse.com/security/cve/CVE-2022-32893/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012351.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- CVE-2022-32893: Fixed processing maliciously crafted web content may lead to arbitrary code execution (bsc#1202807).

Bugfixes:
- Fixed WebKitGTK not allowing to be used from non-main threads (bsc#1202169).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-23"/>
	<updated date="2022-09-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202169">SUSE bug 1202169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202807">SUSE bug 1202807</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32893/">CVE-2022-32893</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009714218" comment="libjavascriptcoregtk-4_0-18-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714219" comment="libwebkit2gtk-4_0-37-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714220" comment="libwebkit2gtk3-lang-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714221" comment="typelib-1_0-JavaScriptCore-4_0-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714222" comment="typelib-1_0-WebKit2-4_0-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714223" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714224" comment="webkit2gtk-4_0-injected-bundles-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714225" comment="webkit2gtk3-devel-2.36.7-150000.3.112.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139972" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177440" ref_url="https://bugzilla.suse.com/1177440" source="BUGZILLA"/>
		<reference ref_id="1180153" ref_url="https://bugzilla.suse.com/1180153" source="BUGZILLA"/>
		<reference ref_id="1188944" ref_url="https://bugzilla.suse.com/1188944" source="BUGZILLA"/>
		<reference ref_id="1191881" ref_url="https://bugzilla.suse.com/1191881" source="BUGZILLA"/>
		<reference ref_id="1194535" ref_url="https://bugzilla.suse.com/1194535" source="BUGZILLA"/>
		<reference ref_id="1196616" ref_url="https://bugzilla.suse.com/1196616" source="BUGZILLA"/>
		<reference ref_id="1197158" ref_url="https://bugzilla.suse.com/1197158" source="BUGZILLA"/>
		<reference ref_id="1199482" ref_url="https://bugzilla.suse.com/1199482" source="BUGZILLA"/>
		<reference ref_id="1199665" ref_url="https://bugzilla.suse.com/1199665" source="BUGZILLA"/>
		<reference ref_id="1201019" ref_url="https://bugzilla.suse.com/1201019" source="BUGZILLA"/>
		<reference ref_id="1201420" ref_url="https://bugzilla.suse.com/1201420" source="BUGZILLA"/>
		<reference ref_id="1201705" ref_url="https://bugzilla.suse.com/1201705" source="BUGZILLA"/>
		<reference ref_id="1201726" ref_url="https://bugzilla.suse.com/1201726" source="BUGZILLA"/>
		<reference ref_id="1201948" ref_url="https://bugzilla.suse.com/1201948" source="BUGZILLA"/>
		<reference ref_id="1202096" ref_url="https://bugzilla.suse.com/1202096" source="BUGZILLA"/>
		<reference ref_id="1202097" ref_url="https://bugzilla.suse.com/1202097" source="BUGZILLA"/>
		<reference ref_id="1202154" ref_url="https://bugzilla.suse.com/1202154" source="BUGZILLA"/>
		<reference ref_id="1202335" ref_url="https://bugzilla.suse.com/1202335" source="BUGZILLA"/>
		<reference ref_id="1202346" ref_url="https://bugzilla.suse.com/1202346" source="BUGZILLA"/>
		<reference ref_id="1202347" ref_url="https://bugzilla.suse.com/1202347" source="BUGZILLA"/>
		<reference ref_id="1202393" ref_url="https://bugzilla.suse.com/1202393" source="BUGZILLA"/>
		<reference ref_id="1202396" ref_url="https://bugzilla.suse.com/1202396" source="BUGZILLA"/>
		<reference ref_id="1202672" ref_url="https://bugzilla.suse.com/1202672" source="BUGZILLA"/>
		<reference ref_id="1202897" ref_url="https://bugzilla.suse.com/1202897" source="BUGZILLA"/>
		<reference ref_id="1202898" ref_url="https://bugzilla.suse.com/1202898" source="BUGZILLA"/>
		<reference ref_id="1203098" ref_url="https://bugzilla.suse.com/1203098" source="BUGZILLA"/>
		<reference ref_id="1203107" ref_url="https://bugzilla.suse.com/1203107" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36516" ref_url="https://www.suse.com/security/cve/CVE-2020-36516/" source="CVE"/>
		<reference ref_id="CVE-2021-4203" ref_url="https://www.suse.com/security/cve/CVE-2021-4203/" source="CVE"/>
		<reference ref_id="CVE-2022-1012" ref_url="https://www.suse.com/security/cve/CVE-2022-1012/" source="CVE"/>
		<reference ref_id="CVE-2022-20368" ref_url="https://www.suse.com/security/cve/CVE-2022-20368/" source="CVE"/>
		<reference ref_id="CVE-2022-20369" ref_url="https://www.suse.com/security/cve/CVE-2022-20369/" source="CVE"/>
		<reference ref_id="CVE-2022-21385" ref_url="https://www.suse.com/security/cve/CVE-2022-21385/" source="CVE"/>
		<reference ref_id="CVE-2022-2588" ref_url="https://www.suse.com/security/cve/CVE-2022-2588/" source="CVE"/>
		<reference ref_id="CVE-2022-26373" ref_url="https://www.suse.com/security/cve/CVE-2022-26373/" source="CVE"/>
		<reference ref_id="CVE-2022-2639" ref_url="https://www.suse.com/security/cve/CVE-2022-2639/" source="CVE"/>
		<reference ref_id="CVE-2022-2663" ref_url="https://www.suse.com/security/cve/CVE-2022-2663/" source="CVE"/>
		<reference ref_id="CVE-2022-29581" ref_url="https://www.suse.com/security/cve/CVE-2022-29581/" source="CVE"/>
		<reference ref_id="CVE-2022-2977" ref_url="https://www.suse.com/security/cve/CVE-2022-2977/" source="CVE"/>
		<reference ref_id="CVE-2022-3028" ref_url="https://www.suse.com/security/cve/CVE-2022-3028/" source="CVE"/>
		<reference ref_id="CVE-2022-36879" ref_url="https://www.suse.com/security/cve/CVE-2022-36879/" source="CVE"/>
		<reference ref_id="CVE-2022-39188" ref_url="https://www.suse.com/security/cve/CVE-2022-39188/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012386.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-36516: Fixed an issue in the mixed IPID assignment method where an attacker was able to inject data into or terminate a victim's TCP session (bnc#1196616).
- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bnc#1194535).
- CVE-2022-1012: Fixed a memory leak problem that was found in the TCP source port generation algorithm in net/ipv4/tcp.c (bnc#1199482).
- CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bsc#1202346).
- CVE-2022-20369: Fixed out of bounds write in v4l2_m2m_querybuf of v4l2-mem2mem.c (bnc#1202347).
- CVE-2022-21385: Fixed a flaw in net_rds_alloc_sgs() that allowed unprivileged local users to crash the machine (bnc#1202897).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-26373: Fixed non-transparent sharing of return predictor targets between contexts in some Intel Processors (bnc#1201726).
- CVE-2022-2639: Fixed an integer coercion error that was found in the openvswitch kernel module (bnc#1202154).
- CVE-2022-2663: Fixed an issue that was found in nf_conntrack_irc where the message handling could be confused and incorrectly matches the message (bnc#1202097).
- CVE-2022-29581: Fixed improper update of reference count vulnerability in net/sched that allowed a local attacker to cause privilege escalation to root (bnc#1199665).
- CVE-2022-2977: Fixed reference counting for struct tpm_chip (bsc#1202672).
- CVE-2022-3028: Fixed race condition that was found in the IP framework for transforming packets (XFRM subsystem) (bnc#1202898).
- CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bnc#1201948).
- CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has stale TLB entries (bnc#1203107).

The following non-security bugs were fixed:

- rpm: Fix parsing of rpm/macros.kernel-source on SLE12 (bsc#1201019).
- cifs: fix error paths in cifs_tree_connect() (bsc#1177440).
- cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (bsc#1188944).
- cifs: report error instead of invalid when revalidating a dentry fails (bsc#1177440).
- cifs: skip trailing separators of prefix paths (bsc#1188944).
- kernel-obs-build: include qemu_fw_cfg (boo#1201705)
- lightnvm: Remove lightnvm implemenation (bsc#1191881 bsc#1201420 ZDI-CAN-17325).
- md/bitmap: do not set sb values if can't pass sanity check (bsc#1197158).
- mm/rmap.c: do not reuse anon_vma if we just want a copy (git-fixes, bsc#1203098).
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (git-fixes, bsc#1203098). 
- net_sched: cls_route: disallow handle of 0 (bsc#1202393).
- net_sched: cls_route: disallow handle of 0 (bsc#1202393).
- objtool: Add --backtrace support (bsc#1202396).
- objtool: Add support for intra-function calls (bsc#1202396).
- objtool: Allow no-op CFI ops in alternatives (bsc#1202396).
- objtool: Convert insn type to enum (bsc#1202396).
- objtool: Do not use ignore flag for fake jumps (bsc#1202396).
- objtool: Fix !CFI insn_state propagation (bsc#1202396).
- objtool: Fix ORC vs alternatives (bsc#1202396).
- objtool: Fix sibling call detection (bsc#1202396).
- objtool: Make handle_insn_ops() unconditional (bsc#1202396).
- objtool: Remove INSN_STACK (bsc#1202396).
- objtool: Remove check preventing branches within alternative (bsc#1202396).
- objtool: Rename elf_open() to prevent conflict with libelf from elftoolchain (bsc#1202396).
- objtool: Rename struct cfi_state (bsc#1202396).
- objtool: Rework allocating stack_ops on decode (bsc#1202396).
- objtool: Rewrite alt-&gt;skip_orig (bsc#1202396).
- objtool: Set insn-&gt;func for alternatives (bsc#1202396).
- objtool: Support conditional retpolines (bsc#1202396).
- objtool: Support multiple stack_op per instruction (bsc#1202396).
- objtool: Track original function across branches (bsc#1202396).
- objtool: Uniquely identify alternative instruction groups (bsc#1202396).
- objtool: Use Elf_Scn typedef instead of assuming struct name (bsc#1202396).
- tcp: add some entropy in __inet_hash_connect() (bsc#1180153 bsc#1202335).
- tcp: change source port randomizarion at connect() time (bsc#1180153 bsc#1202335).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-26"/>
	<updated date="2022-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177440">SUSE bug 1177440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180153">SUSE bug 1180153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188944">SUSE bug 1188944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191881">SUSE bug 1191881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194535">SUSE bug 1194535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196616">SUSE bug 1196616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197158">SUSE bug 1197158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199482">SUSE bug 1199482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199665">SUSE bug 1199665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201019">SUSE bug 1201019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201420">SUSE bug 1201420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201705">SUSE bug 1201705</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201726">SUSE bug 1201726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201948">SUSE bug 1201948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202096">SUSE bug 1202096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202097">SUSE bug 1202097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202154">SUSE bug 1202154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202335">SUSE bug 1202335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202346">SUSE bug 1202346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202347">SUSE bug 1202347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202393">SUSE bug 1202393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202396">SUSE bug 1202396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202672">SUSE bug 1202672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202897">SUSE bug 1202897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202898">SUSE bug 1202898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203098">SUSE bug 1203098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203107">SUSE bug 1203107</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36516/">CVE-2020-36516</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4203/">CVE-2021-4203</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1012/">CVE-2022-1012</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20368/">CVE-2022-20368</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20369/">CVE-2022-20369</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21385/">CVE-2022-21385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2588/">CVE-2022-2588</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26373/">CVE-2022-26373</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-2639/">CVE-2022-2639</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-2663/">CVE-2022-2663</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29581/">CVE-2022-29581</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2977/">CVE-2022-2977</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3028/">CVE-2022-3028</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36879/">CVE-2022-36879</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-39188/">CVE-2022-39188</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710921" comment="kernel-default-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710922" comment="kernel-default-base-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710923" comment="kernel-default-devel-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710924" comment="kernel-devel-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710925" comment="kernel-docs-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710926" comment="kernel-macros-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710927" comment="kernel-obs-build-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710928" comment="kernel-source-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710929" comment="kernel-syms-4.12.14-150100.197.123.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139973" version="1" class="patch">
	<metadata>
		<title>Security update for dpdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202903" ref_url="https://bugzilla.suse.com/1202903" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2132" ref_url="https://www.suse.com/security/cve/CVE-2022-2132/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012404.html" source="SUSE-SU"/>
		<description>
This update for dpdk fixes the following issues:

- CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs (bsc#1202903).    
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-27"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202903">SUSE bug 1202903</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2132/">CVE-2022-2132</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710687" comment="dpdk-18.11.9-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710688" comment="dpdk-devel-18.11.9-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710689" comment="dpdk-kmp-default-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710690" comment="dpdk-tools-18.11.9-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710691" comment="libdpdk-18_11-18.11.9-150100.4.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139974" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203477" ref_url="https://bugzilla.suse.com/1203477" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40956" ref_url="https://www.suse.com/security/cve/CVE-2022-40956/" source="CVE"/>
		<reference ref_id="CVE-2022-40957" ref_url="https://www.suse.com/security/cve/CVE-2022-40957/" source="CVE"/>
		<reference ref_id="CVE-2022-40958" ref_url="https://www.suse.com/security/cve/CVE-2022-40958/" source="CVE"/>
		<reference ref_id="CVE-2022-40959" ref_url="https://www.suse.com/security/cve/CVE-2022-40959/" source="CVE"/>
		<reference ref_id="CVE-2022-40960" ref_url="https://www.suse.com/security/cve/CVE-2022-40960/" source="CVE"/>
		<reference ref_id="CVE-2022-40962" ref_url="https://www.suse.com/security/cve/CVE-2022-40962/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012407.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

  Mozilla Firefox was updated from 102.2.0esr to 102.3.0esr (bsc#1203477):

  - CVE-2022-40959: Fixed bypassing FeaturePolicy restrictions on transient pages.
  - CVE-2022-40960: Fixed data-race when parsing non-UTF-8 URLs in threads.
  - CVE-2022-40958: Fixed bypassing secure context restriction for cookies with __Host and __Secure prefix.
  - CVE-2022-40956: Fixed content-security-policy base-uri bypass.
  - CVE-2022-40957: Fixed incoherent instruction cache when building WASM on ARM64.
  - CVE-2022-40962: Fixed memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-27"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203477">SUSE bug 1203477</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-40956/">CVE-2022-40956</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-40957/">CVE-2022-40957</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-40958/">CVE-2022-40958</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40959/">CVE-2022-40959</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-40960/">CVE-2022-40960</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40962/">CVE-2022-40962</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009714214" comment="MozillaFirefox-102.3.0-150000.150.59.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714215" comment="MozillaFirefox-devel-102.3.0-150000.150.59.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714216" comment="MozillaFirefox-translations-common-102.3.0-150000.150.59.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714217" comment="MozillaFirefox-translations-other-102.3.0-150000.150.59.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139975" version="1" class="patch">
	<metadata>
		<title>Security update for libostree (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201770" ref_url="https://bugzilla.suse.com/1201770" source="BUGZILLA"/>
		<reference ref_id="CVE-2014-9862" ref_url="https://www.suse.com/security/cve/CVE-2014-9862/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012442.html" source="SUSE-SU"/>
		<description>
This update for libostree fixes the following issues:

- CVE-2014-9862: Fixed arbitrary write on heap vulnerability (bsc#1201770).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-28"/>
	<updated date="2022-09-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201770">SUSE bug 1201770</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9862/">CVE-2014-9862</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709749" comment="libostree-2018.9-150100.7.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709750" comment="libostree-1-1-2018.9-150100.7.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709751" comment="libostree-devel-2018.9-150100.7.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709752" comment="typelib-1_0-OSTree-1_0-2018.9-150100.7.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139976" version="1" class="patch">
	<metadata>
		<title>Security update for vsftpd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1021387" ref_url="https://bugzilla.suse.com/1021387" source="BUGZILLA"/>
		<reference ref_id="1052900" ref_url="https://bugzilla.suse.com/1052900" source="BUGZILLA"/>
		<reference ref_id="1181400" ref_url="https://bugzilla.suse.com/1181400" source="BUGZILLA"/>
		<reference ref_id="1187678" ref_url="https://bugzilla.suse.com/1187678" source="BUGZILLA"/>
		<reference ref_id="1187686" ref_url="https://bugzilla.suse.com/1187686" source="BUGZILLA"/>
		<reference ref_id="786024" ref_url="https://bugzilla.suse.com/786024" source="BUGZILLA"/>
		<reference ref_id="971784" ref_url="https://bugzilla.suse.com/971784" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3618" ref_url="https://www.suse.com/security/cve/CVE-2021-3618/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012444.html" source="SUSE-SU"/>
		<description>
This update for vsftpd fixes the following issues:

- CVE-2021-3618: Enforced security checks against ALPACA attack (PM-3322, jsc#SLE-23895, bsc#1187686, bsc#1187678).
- Added hardening to systemd services (bsc#1181400).

Bugfixes:
- Fixed a seccomp failure in FIPS mode when SSL was enabled (bsc#1052900).
- Allowed wait4() to be called so that the broker can wait for its child processes (bsc#1021387).
- Fixed hang when using seccomp and syslog (bsc#971784).
- Allowed sendto() syscall when /dev/log support is enabled (bsc#786024).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-28"/>
	<updated date="2022-09-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1021387">SUSE bug 1021387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052900">SUSE bug 1052900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181400">SUSE bug 1181400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187678">SUSE bug 1187678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187686">SUSE bug 1187686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786024">SUSE bug 786024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/971784">SUSE bug 971784</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3618/">CVE-2021-3618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009713842" comment="vsftpd-3.0.5-150000.7.19.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139977" version="1" class="patch">
	<metadata>
		<title>Security update for slurm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199278" ref_url="https://bugzilla.suse.com/1199278" source="BUGZILLA"/>
		<reference ref_id="1199279" ref_url="https://bugzilla.suse.com/1199279" source="BUGZILLA"/>
		<reference ref_id="1201674" ref_url="https://bugzilla.suse.com/1201674" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29500" ref_url="https://www.suse.com/security/cve/CVE-2022-29500/" source="CVE"/>
		<reference ref_id="CVE-2022-29501" ref_url="https://www.suse.com/security/cve/CVE-2022-29501/" source="CVE"/>
		<reference ref_id="CVE-2022-31251" ref_url="https://www.suse.com/security/cve/CVE-2022-31251/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012448.html" source="SUSE-SU"/>
		<description>
This update for slurm fixes the following issues:

- CVE-2022-31251: Fixed a potential security vulnerability in the test package (bsc#1201674).
- CVE-2022-29500: Fixed an architectural flaw can be exploited to allow an unprivileged user to execute arbitrary processes as root (bsc#1199278).
- CVE-2022-29501: Fixed a vulnerability where an unprivileged user can send data to arbitrary unix socket as root (bsc#1199279).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-29"/>
	<updated date="2022-09-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199278">SUSE bug 1199278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199279">SUSE bug 1199279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201674">SUSE bug 1201674</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29500/">CVE-2022-29500</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29501/">CVE-2022-29501</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-31251/">CVE-2022-31251</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715951" comment="libpmi0-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715952" comment="libslurm33-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715953" comment="perl-slurm-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715954" comment="slurm-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715955" comment="slurm-auth-none-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715956" comment="slurm-config-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715957" comment="slurm-config-man-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715958" comment="slurm-devel-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715959" comment="slurm-doc-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715960" comment="slurm-lua-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715961" comment="slurm-munge-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715962" comment="slurm-node-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715963" comment="slurm-pam_slurm-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715964" comment="slurm-plugins-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715965" comment="slurm-slurmdbd-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715966" comment="slurm-sql-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715967" comment="slurm-sview-18.08.9-150100.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715968" comment="slurm-torque-18.08.9-150100.3.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139978" version="1" class="patch">
	<metadata>
		<title>Security update for buildah (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1167864" ref_url="https://bugzilla.suse.com/1167864" source="BUGZILLA"/>
		<reference ref_id="1181961" ref_url="https://bugzilla.suse.com/1181961" source="BUGZILLA"/>
		<reference ref_id="1183043" ref_url="https://bugzilla.suse.com/1183043" source="BUGZILLA"/>
		<reference ref_id="1192999" ref_url="https://bugzilla.suse.com/1192999" source="BUGZILLA"/>
		<reference ref_id="1197870" ref_url="https://bugzilla.suse.com/1197870" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10696" ref_url="https://www.suse.com/security/cve/CVE-2020-10696/" source="CVE"/>
		<reference ref_id="CVE-2021-20206" ref_url="https://www.suse.com/security/cve/CVE-2021-20206/" source="CVE"/>
		<reference ref_id="CVE-2022-27651" ref_url="https://www.suse.com/security/cve/CVE-2022-27651/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012462.html" source="SUSE-SU"/>
		<description>
This update for buildah fixes the following issues:

- Updated to version 1.26.0:
  - CVE-2022-27651: Fixed an issue where containers were incorrectly started with non-empty inheritable Linux process capabilities (bsc#1197870).
  - CVE-2021-20206: Fixed an issue in libcni that could allow an attacker to execute arbitrary binaries on the host (bsc#1181961).
  - CVE-2020-10696: Fixed an issue that could lead to files being overwritten during the image building process (bsc#1167864).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-30"/>
	<updated date="2022-09-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1167864">SUSE bug 1167864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181961">SUSE bug 1181961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183043">SUSE bug 1183043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192999">SUSE bug 1192999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197870">SUSE bug 1197870</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10696/">CVE-2020-10696</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20206/">CVE-2021-20206</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-27651/">CVE-2022-27651</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714363" comment="buildah-1.25.1-150100.3.13.12 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139979" version="1" class="patch">
	<metadata>
		<title>Security update for slurm_20_02 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186646" ref_url="https://bugzilla.suse.com/1186646" source="BUGZILLA"/>
		<reference ref_id="1199278" ref_url="https://bugzilla.suse.com/1199278" source="BUGZILLA"/>
		<reference ref_id="1199279" ref_url="https://bugzilla.suse.com/1199279" source="BUGZILLA"/>
		<reference ref_id="1201674" ref_url="https://bugzilla.suse.com/1201674" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29500" ref_url="https://www.suse.com/security/cve/CVE-2022-29500/" source="CVE"/>
		<reference ref_id="CVE-2022-29501" ref_url="https://www.suse.com/security/cve/CVE-2022-29501/" source="CVE"/>
		<reference ref_id="CVE-2022-31251" ref_url="https://www.suse.com/security/cve/CVE-2022-31251/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012479.html" source="SUSE-SU"/>
		<description>
This update for slurm_20_02 fixes the following issues:


- CVE-2022-31251: Fixed security vulnerability in the test package (bsc#1201674).
- CVE-2022-29500: Fixed architectural flaw that can be exploited to allow an unprivileged user to execute arbitrary processes as root (bsc#1199278).
- CVE-2022-29501: Fixed vulnerability where an unprivileged user can send data to arbitrary unix socket as root (bsc#1199279).

Bugfixes:
- Fixed qstat error message (torque wrapper) (bsc#1186646).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-03"/>
	<updated date="2022-10-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186646">SUSE bug 1186646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199278">SUSE bug 1199278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199279">SUSE bug 1199279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201674">SUSE bug 1201674</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29500/">CVE-2022-29500</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29501/">CVE-2022-29501</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-31251/">CVE-2022-31251</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715969" comment="libnss_slurm2_20_02-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715970" comment="libpmi0_20_02-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715971" comment="libslurm35-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715972" comment="perl-slurm_20_02-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715973" comment="slurm_20_02-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715974" comment="slurm_20_02-auth-none-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715975" comment="slurm_20_02-config-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715976" comment="slurm_20_02-config-man-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715977" comment="slurm_20_02-devel-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715978" comment="slurm_20_02-doc-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715979" comment="slurm_20_02-lua-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715980" comment="slurm_20_02-munge-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715981" comment="slurm_20_02-node-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715982" comment="slurm_20_02-pam_slurm-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715983" comment="slurm_20_02-plugins-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715984" comment="slurm_20_02-slurmdbd-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715985" comment="slurm_20_02-sql-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715986" comment="slurm_20_02-sview-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715987" comment="slurm_20_02-torque-20.02.7-150100.3.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715988" comment="slurm_20_02-webdoc-20.02.7-150100.3.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139980" version="1" class="patch">
	<metadata>
		<title>Security update for libcroco (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1171685" ref_url="https://bugzilla.suse.com/1171685" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12825" ref_url="https://www.suse.com/security/cve/CVE-2020-12825/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012482.html" source="SUSE-SU"/>
		<description>
This update for libcroco fixes the following issues:

- CVE-2020-12825: Fixed recursion issue in block and any productions (bsc#1171685).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-04"/>
	<updated date="2022-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171685">SUSE bug 1171685</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12825/">CVE-2020-12825</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715651" comment="libcroco-0.6.12-150000.4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715652" comment="libcroco-0_6-3-0.6.12-150000.4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715653" comment="libcroco-0_6-3-32bit-0.6.12-150000.4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715654" comment="libcroco-devel-0.6.12-150000.4.6.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139981" version="1" class="patch">
	<metadata>
		<title>Security update for libgit2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1158790" ref_url="https://bugzilla.suse.com/1158790" source="BUGZILLA"/>
		<reference ref_id="1158981" ref_url="https://bugzilla.suse.com/1158981" source="BUGZILLA"/>
		<reference ref_id="1198234" ref_url="https://bugzilla.suse.com/1198234" source="BUGZILLA"/>
		<reference ref_id="1201431" ref_url="https://bugzilla.suse.com/1201431" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1352" ref_url="https://www.suse.com/security/cve/CVE-2019-1352/" source="CVE"/>
		<reference ref_id="CVE-2022-24765" ref_url="https://www.suse.com/security/cve/CVE-2022-24765/" source="CVE"/>
		<reference ref_id="CVE-2022-29187" ref_url="https://www.suse.com/security/cve/CVE-2022-29187/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012490.html" source="SUSE-SU"/>
		<description>
This update for libgit2 fixes the following issues:

- Fixed DoS by oob write in constructed commit object with a very large number of parents (bsc#1158981).
- CVE-2019-1352: Fixed git on Windows being unaware of NTFS Alternate Data Streams (bnc#1158790). 
- CVE-2022-24765: Fixed potential command injection via git worktree (bsc#1198234).
- CVE-2022-29187: Fixed incomplete fix for CVE-2022-24765 (bsc#1201431).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-04"/>
	<updated date="2022-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1158790">SUSE bug 1158790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158981">SUSE bug 1158981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198234">SUSE bug 1198234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201431">SUSE bug 1201431</bugzilla>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1352/">CVE-2019-1352</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24765/">CVE-2022-24765</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29187/">CVE-2022-29187</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710919" comment="libgit2-26-0.26.8-150000.3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710920" comment="libgit2-devel-0.26.8-150000.3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139982" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203530" ref_url="https://bugzilla.suse.com/1203530" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32886" ref_url="https://www.suse.com/security/cve/CVE-2022-32886/" source="CVE"/>
		<reference ref_id="CVE-2022-32912" ref_url="https://www.suse.com/security/cve/CVE-2022-32912/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012491.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Updated to version 2.36.8 (bsc#1203530):
  - CVE-2022-32886: Fixed a buffer overflow issue that could potentially lead to code execution.
  - CVE-2022-32912: Fixed an out-of-bounds read that could potentially lead to code execution.

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-04"/>
	<updated date="2022-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203530">SUSE bug 1203530</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32886/">CVE-2022-32886</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32912/">CVE-2022-32912</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715655" comment="libjavascriptcoregtk-4_0-18-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715656" comment="libwebkit2gtk-4_0-37-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715657" comment="libwebkit2gtk3-lang-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715658" comment="typelib-1_0-JavaScriptCore-4_0-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715659" comment="typelib-1_0-WebKit2-4_0-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715660" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715661" comment="webkit2gtk-4_0-injected-bundles-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715662" comment="webkit2gtk3-devel-2.36.8-150000.3.115.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139983" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202624" ref_url="https://bugzilla.suse.com/1202624" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28861" ref_url="https://www.suse.com/security/cve/CVE-2021-28861/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3512-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012543.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:
                                                                                                                                                                                               
- CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).                                                                    
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202624">SUSE bug 1202624</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28861/">CVE-2021-28861</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716511" comment="libpython2_7-1_0-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716512" comment="python-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716513" comment="python-base-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716514" comment="python-curses-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716515" comment="python-devel-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716516" comment="python-gdbm-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716517" comment="python-tk-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716518" comment="python-xml-2.7.18-150000.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139984" version="1" class="patch">
	<metadata>
		<title>Security update for jdom (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187446" ref_url="https://bugzilla.suse.com/1187446" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33813" ref_url="https://www.suse.com/security/cve/CVE-2021-33813/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012660.html" source="SUSE-SU"/>
		<description>
This update for jdom fixes the following issues:

  - CVE-2021-33813: Fixed XXE issue in SAXBuilder can cause a denial of service via a crafted HTTP request (bsc#1187446).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187446">SUSE bug 1187446</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33813/">CVE-2021-33813</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009717154" comment="jaxen-1.1.1-150000.5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717155" comment="jdom-1.1-150000.5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139985" version="1" class="patch">
	<metadata>
		<title>Security update for cyrus-sasl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1159635" ref_url="https://bugzilla.suse.com/1159635" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19906" ref_url="https://www.suse.com/security/cve/CVE-2019-19906/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012519.html" source="SUSE-SU"/>
		<description>
This update for cyrus-sasl fixes the following issues:

- CVE-2019-19906: Fixed an out-of-bounds write that could lead to unauthenticated remote denial of service in OpenLDAP via a malformed LDAP packet (bsc#1159635).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-07"/>
	<updated date="2022-10-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159635">SUSE bug 1159635</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19906/">CVE-2019-19906</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710903" comment="cyrus-sasl-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710904" comment="cyrus-sasl-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710905" comment="cyrus-sasl-crammd5-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710906" comment="cyrus-sasl-crammd5-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710907" comment="cyrus-sasl-devel-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710908" comment="cyrus-sasl-digestmd5-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710909" comment="cyrus-sasl-digestmd5-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710910" comment="cyrus-sasl-gssapi-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710911" comment="cyrus-sasl-gssapi-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710912" comment="cyrus-sasl-otp-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710913" comment="cyrus-sasl-plain-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710914" comment="cyrus-sasl-plain-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710915" comment="cyrus-sasl-saslauthd-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710916" comment="cyrus-sasl-sqlauxprop-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710917" comment="libsasl2-3-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710918" comment="libsasl2-3-32bit-2.1.26-150000.5.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139986" version="1" class="patch">
	<metadata>
		<title>Security update for python-Babel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185768" ref_url="https://bugzilla.suse.com/1185768" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-42771" ref_url="https://www.suse.com/security/cve/CVE-2021-42771/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012537.html" source="SUSE-SU"/>
		<description>
This update for python-Babel fixes the following issues:

- CVE-2021-42771: Fixed relative path traversal (bsc#1185768).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-14"/>
	<updated date="2022-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185768">SUSE bug 1185768</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42771/">CVE-2021-42771</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715848" comment="python2-Babel-2.5.1-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715849" comment="python3-Babel-2.5.1-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139987" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202624" ref_url="https://bugzilla.suse.com/1202624" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28861" ref_url="https://www.suse.com/security/cve/CVE-2021-28861/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012541.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-14"/>
	<updated date="2022-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202624">SUSE bug 1202624</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28861/">CVE-2021-28861</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716415" comment="libpython3_6m1_0-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716416" comment="python3-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716417" comment="python3-base-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716418" comment="python3-curses-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716419" comment="python3-dbm-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716420" comment="python3-devel-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716421" comment="python3-idle-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716424" comment="python3-testsuite-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716422" comment="python3-tk-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716423" comment="python3-tools-3.6.15-150000.3.109.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139988" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203677" ref_url="https://bugzilla.suse.com/1203677" source="BUGZILLA"/>
		<reference ref_id="1203680" ref_url="https://bugzilla.suse.com/1203680" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41317" ref_url="https://www.suse.com/security/cve/CVE-2022-41317/" source="CVE"/>
		<reference ref_id="CVE-2022-41318" ref_url="https://www.suse.com/security/cve/CVE-2022-41318/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012545.html" source="SUSE-SU"/>
		<description>
This update for squid fixes the following issues:

  - CVE-2022-41317: Fixed exposure of sensitive information in cache manager (bsc#1203677).
  - CVE-2022-41318: Fixed buffer overread in SSPI and SMB Authentication (bsc#1203680).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203677">SUSE bug 1203677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203680">SUSE bug 1203680</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-41317/">CVE-2022-41317</cve>
	<cve impact="important" cvss3="8.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-41318/">CVE-2022-41318</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715844" comment="squid-4.17-150000.5.35.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139989" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203438" ref_url="https://bugzilla.suse.com/1203438" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40674" ref_url="https://www.suse.com/security/cve/CVE-2022-40674/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012544.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

- CVE-2022-40674: Fixed use-after-free in the doContent function in xmlparse.c (bsc#1203438).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203438">SUSE bug 1203438</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40674/">CVE-2022-40674</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715845" comment="expat-2.2.5-150000.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715846" comment="libexpat-devel-2.2.5-150000.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715847" comment="libexpat1-2.2.5-150000.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715806" comment="libexpat1-32bit-2.2.5-150000.3.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139990" version="1" class="patch">
	<metadata>
		<title>Security update for exiv2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1076579" ref_url="https://bugzilla.suse.com/1076579" source="BUGZILLA"/>
		<reference ref_id="1086798" ref_url="https://bugzilla.suse.com/1086798" source="BUGZILLA"/>
		<reference ref_id="1086810" ref_url="https://bugzilla.suse.com/1086810" source="BUGZILLA"/>
		<reference ref_id="1092096" ref_url="https://bugzilla.suse.com/1092096" source="BUGZILLA"/>
		<reference ref_id="1114690" ref_url="https://bugzilla.suse.com/1114690" source="BUGZILLA"/>
		<reference ref_id="1185447" ref_url="https://bugzilla.suse.com/1185447" source="BUGZILLA"/>
		<reference ref_id="1186192" ref_url="https://bugzilla.suse.com/1186192" source="BUGZILLA"/>
		<reference ref_id="1188733" ref_url="https://bugzilla.suse.com/1188733" source="BUGZILLA"/>
		<reference ref_id="1188756" ref_url="https://bugzilla.suse.com/1188756" source="BUGZILLA"/>
		<reference ref_id="1189330" ref_url="https://bugzilla.suse.com/1189330" source="BUGZILLA"/>
		<reference ref_id="1189331" ref_url="https://bugzilla.suse.com/1189331" source="BUGZILLA"/>
		<reference ref_id="1189332" ref_url="https://bugzilla.suse.com/1189332" source="BUGZILLA"/>
		<reference ref_id="1189333" ref_url="https://bugzilla.suse.com/1189333" source="BUGZILLA"/>
		<reference ref_id="1189636" ref_url="https://bugzilla.suse.com/1189636" source="BUGZILLA"/>
		<reference ref_id="1189780" ref_url="https://bugzilla.suse.com/1189780" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10772" ref_url="https://www.suse.com/security/cve/CVE-2018-10772/" source="CVE"/>
		<reference ref_id="CVE-2018-18915" ref_url="https://www.suse.com/security/cve/CVE-2018-18915/" source="CVE"/>
		<reference ref_id="CVE-2018-5772" ref_url="https://www.suse.com/security/cve/CVE-2018-5772/" source="CVE"/>
		<reference ref_id="CVE-2018-8976" ref_url="https://www.suse.com/security/cve/CVE-2018-8976/" source="CVE"/>
		<reference ref_id="CVE-2018-8977" ref_url="https://www.suse.com/security/cve/CVE-2018-8977/" source="CVE"/>
		<reference ref_id="CVE-2020-18898" ref_url="https://www.suse.com/security/cve/CVE-2020-18898/" source="CVE"/>
		<reference ref_id="CVE-2020-18899" ref_url="https://www.suse.com/security/cve/CVE-2020-18899/" source="CVE"/>
		<reference ref_id="CVE-2021-29470" ref_url="https://www.suse.com/security/cve/CVE-2021-29470/" source="CVE"/>
		<reference ref_id="CVE-2021-31291" ref_url="https://www.suse.com/security/cve/CVE-2021-31291/" source="CVE"/>
		<reference ref_id="CVE-2021-31292" ref_url="https://www.suse.com/security/cve/CVE-2021-31292/" source="CVE"/>
		<reference ref_id="CVE-2021-32617" ref_url="https://www.suse.com/security/cve/CVE-2021-32617/" source="CVE"/>
		<reference ref_id="CVE-2021-37618" ref_url="https://www.suse.com/security/cve/CVE-2021-37618/" source="CVE"/>
		<reference ref_id="CVE-2021-37619" ref_url="https://www.suse.com/security/cve/CVE-2021-37619/" source="CVE"/>
		<reference ref_id="CVE-2021-37620" ref_url="https://www.suse.com/security/cve/CVE-2021-37620/" source="CVE"/>
		<reference ref_id="CVE-2021-37621" ref_url="https://www.suse.com/security/cve/CVE-2021-37621/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3598-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-October/025597.html" source="SUSE-SU"/>
		<description>
This update for exiv2 fixes the following issues:

- CVE-2021-37621: Fixed denial of service due to infinite loop in Image:printIFDStructure (bsc#1189333).
- CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read() (bsc#1189332).
- CVE-2021-37619: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1189331).
- CVE-2021-37618: Fixed out-of-bounds read in Exiv2:Jp2Image:printStructure (bsc#1189330).
- CVE-2021-32617: Fixed denial of service inside inefficient algorithm (quadratic complexity) (bsc#1186192).
- CVE-2021-31292: Fixed integer overflow in CrwMap:encode0x1810 (bsc#1188756).
- CVE-2021-31291: Fixed heap-based buffer overflow vulnerability in jp2image.cpp may lead to a denial of service (bsc#1188733).
- CVE-2021-29470: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1185447).
- CVE-2020-18899: Fixed uncontrolled memory allocation (bsc#1189636).
- CVE-2020-18898: Fixed remote denial of service in printIFDStructure function (bsc#1189780).
- CVE-2018-8977: Fixed remote denial of service in Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp (bsc#1086798).
- CVE-2018-8976: Fixed remote denial of service in image.cpp Exiv2::Internal::stringFormat via out-of-bounds read (bsc#1086810).
- CVE-2018-5772: Fixed segmentation fault caused by uncontrolled recursion inthe Exiv2::Image::printIFDStructure (bsc#1076579).
- CVE-2018-18915: Fixed an infinite loop in the Exiv2:Image:printIFDStructure function (bsc#1114690).
- CVE-2018-10772: Fixed segmentation fault when the function Exiv2::tEXtToDataBuf() is finished (bsc#1092096).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076579">SUSE bug 1076579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086798">SUSE bug 1086798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086810">SUSE bug 1086810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092096">SUSE bug 1092096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114690">SUSE bug 1114690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185447">SUSE bug 1185447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186192">SUSE bug 1186192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188733">SUSE bug 1188733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188756">SUSE bug 1188756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189330">SUSE bug 1189330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189331">SUSE bug 1189331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189332">SUSE bug 1189332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189333">SUSE bug 1189333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189636">SUSE bug 1189636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189780">SUSE bug 1189780</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10772/">CVE-2018-10772</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18915/">CVE-2018-18915</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5772/">CVE-2018-5772</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8976/">CVE-2018-8976</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8977/">CVE-2018-8977</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-18898/">CVE-2020-18898</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-18899/">CVE-2020-18899</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29470/">CVE-2021-29470</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31291/">CVE-2021-31291</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31292/">CVE-2021-31292</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32617/">CVE-2021-32617</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-37618/">CVE-2021-37618</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-37619/">CVE-2021-37619</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-37620/">CVE-2021-37620</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-37621/">CVE-2021-37621</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716335" comment="libexiv2-26-0.26-150000.6.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716336" comment="libexiv2-devel-0.26-150000.6.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139991" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1124431" ref_url="https://bugzilla.suse.com/1124431" source="BUGZILLA"/>
		<reference ref_id="1167162" ref_url="https://bugzilla.suse.com/1167162" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1179599" ref_url="https://bugzilla.suse.com/1179599" source="BUGZILLA"/>
		<reference ref_id="1184804" ref_url="https://bugzilla.suse.com/1184804" source="BUGZILLA"/>
		<reference ref_id="1185377" ref_url="https://bugzilla.suse.com/1185377" source="BUGZILLA"/>
		<reference ref_id="1186207" ref_url="https://bugzilla.suse.com/1186207" source="BUGZILLA"/>
		<reference ref_id="1186222" ref_url="https://bugzilla.suse.com/1186222" source="BUGZILLA"/>
		<reference ref_id="1187167" ref_url="https://bugzilla.suse.com/1187167" source="BUGZILLA"/>
		<reference ref_id="1189305" ref_url="https://bugzilla.suse.com/1189305" source="BUGZILLA"/>
		<reference ref_id="1189841" ref_url="https://bugzilla.suse.com/1189841" source="BUGZILLA"/>
		<reference ref_id="1190358" ref_url="https://bugzilla.suse.com/1190358" source="BUGZILLA"/>
		<reference ref_id="1190428" ref_url="https://bugzilla.suse.com/1190428" source="BUGZILLA"/>
		<reference ref_id="1191229" ref_url="https://bugzilla.suse.com/1191229" source="BUGZILLA"/>
		<reference ref_id="1191241" ref_url="https://bugzilla.suse.com/1191241" source="BUGZILLA"/>
		<reference ref_id="1191384" ref_url="https://bugzilla.suse.com/1191384" source="BUGZILLA"/>
		<reference ref_id="1191731" ref_url="https://bugzilla.suse.com/1191731" source="BUGZILLA"/>
		<reference ref_id="1192032" ref_url="https://bugzilla.suse.com/1192032" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="1192740" ref_url="https://bugzilla.suse.com/1192740" source="BUGZILLA"/>
		<reference ref_id="1192845" ref_url="https://bugzilla.suse.com/1192845" source="BUGZILLA"/>
		<reference ref_id="1192847" ref_url="https://bugzilla.suse.com/1192847" source="BUGZILLA"/>
		<reference ref_id="1192877" ref_url="https://bugzilla.suse.com/1192877" source="BUGZILLA"/>
		<reference ref_id="1192946" ref_url="https://bugzilla.suse.com/1192946" source="BUGZILLA"/>
		<reference ref_id="1193306" ref_url="https://bugzilla.suse.com/1193306" source="BUGZILLA"/>
		<reference ref_id="1193440" ref_url="https://bugzilla.suse.com/1193440" source="BUGZILLA"/>
		<reference ref_id="1193442" ref_url="https://bugzilla.suse.com/1193442" source="BUGZILLA"/>
		<reference ref_id="1193575" ref_url="https://bugzilla.suse.com/1193575" source="BUGZILLA"/>
		<reference ref_id="1193669" ref_url="https://bugzilla.suse.com/1193669" source="BUGZILLA"/>
		<reference ref_id="1193727" ref_url="https://bugzilla.suse.com/1193727" source="BUGZILLA"/>
		<reference ref_id="1193731" ref_url="https://bugzilla.suse.com/1193731" source="BUGZILLA"/>
		<reference ref_id="1193767" ref_url="https://bugzilla.suse.com/1193767" source="BUGZILLA"/>
		<reference ref_id="1193861" ref_url="https://bugzilla.suse.com/1193861" source="BUGZILLA"/>
		<reference ref_id="1193864" ref_url="https://bugzilla.suse.com/1193864" source="BUGZILLA"/>
		<reference ref_id="1193867" ref_url="https://bugzilla.suse.com/1193867" source="BUGZILLA"/>
		<reference ref_id="1193927" ref_url="https://bugzilla.suse.com/1193927" source="BUGZILLA"/>
		<reference ref_id="1194001" ref_url="https://bugzilla.suse.com/1194001" source="BUGZILLA"/>
		<reference ref_id="1194048" ref_url="https://bugzilla.suse.com/1194048" source="BUGZILLA"/>
		<reference ref_id="1194087" ref_url="https://bugzilla.suse.com/1194087" source="BUGZILLA"/>
		<reference ref_id="1194227" ref_url="https://bugzilla.suse.com/1194227" source="BUGZILLA"/>
		<reference ref_id="1194302" ref_url="https://bugzilla.suse.com/1194302" source="BUGZILLA"/>
		<reference ref_id="1194516" ref_url="https://bugzilla.suse.com/1194516" source="BUGZILLA"/>
		<reference ref_id="1194529" ref_url="https://bugzilla.suse.com/1194529" source="BUGZILLA"/>
		<reference ref_id="1194880" ref_url="https://bugzilla.suse.com/1194880" source="BUGZILLA"/>
		<reference ref_id="1194888" ref_url="https://bugzilla.suse.com/1194888" source="BUGZILLA"/>
		<reference ref_id="1194985" ref_url="https://bugzilla.suse.com/1194985" source="BUGZILLA"/>
		<reference ref_id="1195166" ref_url="https://bugzilla.suse.com/1195166" source="BUGZILLA"/>
		<reference ref_id="1195254" ref_url="https://bugzilla.suse.com/1195254" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-25020" ref_url="https://www.suse.com/security/cve/CVE-2018-25020/" source="CVE"/>
		<reference ref_id="CVE-2019-15126" ref_url="https://www.suse.com/security/cve/CVE-2019-15126/" source="CVE"/>
		<reference ref_id="CVE-2020-27820" ref_url="https://www.suse.com/security/cve/CVE-2020-27820/" source="CVE"/>
		<reference ref_id="CVE-2021-0920" ref_url="https://www.suse.com/security/cve/CVE-2021-0920/" source="CVE"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="CVE-2021-28711" ref_url="https://www.suse.com/security/cve/CVE-2021-28711/" source="CVE"/>
		<reference ref_id="CVE-2021-28712" ref_url="https://www.suse.com/security/cve/CVE-2021-28712/" source="CVE"/>
		<reference ref_id="CVE-2021-28713" ref_url="https://www.suse.com/security/cve/CVE-2021-28713/" source="CVE"/>
		<reference ref_id="CVE-2021-28714" ref_url="https://www.suse.com/security/cve/CVE-2021-28714/" source="CVE"/>
		<reference ref_id="CVE-2021-28715" ref_url="https://www.suse.com/security/cve/CVE-2021-28715/" source="CVE"/>
		<reference ref_id="CVE-2021-33098" ref_url="https://www.suse.com/security/cve/CVE-2021-33098/" source="CVE"/>
		<reference ref_id="CVE-2021-3564" ref_url="https://www.suse.com/security/cve/CVE-2021-3564/" source="CVE"/>
		<reference ref_id="CVE-2021-39648" ref_url="https://www.suse.com/security/cve/CVE-2021-39648/" source="CVE"/>
		<reference ref_id="CVE-2021-39657" ref_url="https://www.suse.com/security/cve/CVE-2021-39657/" source="CVE"/>
		<reference ref_id="CVE-2021-4002" ref_url="https://www.suse.com/security/cve/CVE-2021-4002/" source="CVE"/>
		<reference ref_id="CVE-2021-4083" ref_url="https://www.suse.com/security/cve/CVE-2021-4083/" source="CVE"/>
		<reference ref_id="CVE-2021-4135" ref_url="https://www.suse.com/security/cve/CVE-2021-4135/" source="CVE"/>
		<reference ref_id="CVE-2021-4149" ref_url="https://www.suse.com/security/cve/CVE-2021-4149/" source="CVE"/>
		<reference ref_id="CVE-2021-4197" ref_url="https://www.suse.com/security/cve/CVE-2021-4197/" source="CVE"/>
		<reference ref_id="CVE-2021-4202" ref_url="https://www.suse.com/security/cve/CVE-2021-4202/" source="CVE"/>
		<reference ref_id="CVE-2021-43975" ref_url="https://www.suse.com/security/cve/CVE-2021-43975/" source="CVE"/>
		<reference ref_id="CVE-2021-43976" ref_url="https://www.suse.com/security/cve/CVE-2021-43976/" source="CVE"/>
		<reference ref_id="CVE-2021-44733" ref_url="https://www.suse.com/security/cve/CVE-2021-44733/" source="CVE"/>
		<reference ref_id="CVE-2021-45095" ref_url="https://www.suse.com/security/cve/CVE-2021-45095/" source="CVE"/>
		<reference ref_id="CVE-2021-45486" ref_url="https://www.suse.com/security/cve/CVE-2021-45486/" source="CVE"/>
		<reference ref_id="CVE-2022-0322" ref_url="https://www.suse.com/security/cve/CVE-2022-0322/" source="CVE"/>
		<reference ref_id="CVE-2022-0330" ref_url="https://www.suse.com/security/cve/CVE-2022-0330/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010214.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254).
- CVE-2022-0330: Fixed flush TLBs before releasing backing store (bsc#1194880).
- CVE-2021-45486: Fixed an information leak because the hash table is very small in net/ipv4/route.c (bnc#1194087).
- CVE-2021-45095: Fixed refcount leak in pep_sock_accept in net/phonet/pep.c (bnc#1193867).
- CVE-2021-44733: Fixed a use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem, that could have occured because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object (bnc#1193767).
- CVE-2021-43976: Fixed a flaw that could allow an attacker (who can connect a crafted USB device) to cause a denial of service. (bnc#1192847)
- CVE-2021-43975: Fixed a flaw in hw_atl_utils_fw_rpc_wait that could allow an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. (bsc#1192845)
- CVE-2021-4202: Fixed NFC race condition by adding NCI_UNREG flag (bsc#1194529).
- CVE-2021-4197: Use cgroup open-time credentials for process migraton perm checks (bsc#1194302).
- CVE-2021-4159: Fixed kernel ptr leak vulnerability via BPF in coerce_reg_to_size (bsc#1194227).
- CVE-2021-4149: Fixed btrfs unlock newly allocated extent buffer after error (bsc#1194001).
- CVE-2021-4135: Fixed zero-initialize memory inside netdevsim for new map's value in function nsim_bpf_map_alloc (bsc#1193927).
- CVE-2021-4083: Fixed a read-after-free memory flaw inside the garbage collection for Unix domain socket file handlers when users call close() and fget() simultaneouslyand can potentially trigger a race condition (bnc#1193727).
- CVE-2021-4002: Fixed incorrect TLBs flush in hugetlbfs after huge_pmd_unshare (bsc#1192946).
- CVE-2021-39657: Fixed out of bounds read due to a missing bounds check in ufshcd_eh_device_reset_handler of ufshcd.c. This could lead to local information disclosure with System execution privileges needed (bnc#1193864).
- CVE-2021-39648: Fixed possible disclosure of kernel heap memory due to a race condition in gadget_dev_desc_UDC_show of configfs.c. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1193861). 
- CVE-2021-3564: Fixed double-free memory corruption in the Linux kernel HCI device initialization subsystem that could have been used by attaching malicious HCI TTY Bluetooth devices. A local user could use this flaw to crash the system (bnc#1186207).
- CVE-2021-33098: Fixed a potential denial of service in Intel(R) Ethernet ixgbe driver due to improper input validation. (bsc#1192877)
- CVE-2021-28715: Fixed issue with xen/netback to do not queue unlimited number of packages (XSA-392) (bsc#1193442).
- CVE-2021-28714: Fixed issue with xen/netback to handle rx queue stall detection (XSA-392) (bsc#1193442).
- CVE-2021-28713: Fixed issue with xen/console to harden hvc_xen against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-28712: Fixed issue with xen/netfront to harden netfront against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-28711: Fixed issue with xen/blkfront to harden blkfront against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-0935: Fixed possible out of bounds write in ip6_xmit of ip6_output.c due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192032).
- CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1193731).
- CVE-2020-27820: Fixed a vulnerability where a use-after-frees in nouveau's postclose() handler could happen if removing device (bsc#1179599).
- CVE-2019-15126: Fixed a vulnerability in Broadcom and Cypress Wi-Fi chips, used in RPi family of devices aka 'Kr00k'. (bsc#1167162)
- CVE-2018-25020: Fixed an overflow in the BPF subsystem due to a mishandling of a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions. This affects kernel/bpf/core.c and net/core/filter.c (bnc#1193575).

The following non-security bugs were fixed:

- Bluetooth: fix the erroneous flush_work() order (git-fixes).
- Build: Add obsolete_rebuilds_subpackage (boo#1172073 bsc#1191731).
- ICMPv6: Add ICMPv6 Parameter Problem, code 3 definition (bsc#1191241 bsc#1195166).
- IPv6: reply ICMP error if the first fragment do not include all headers (bsc#1191241).
- elfcore: fix building with clang (bsc#1169514).
- hv_netvsc: Set needed_headroom according to VF (bsc#1193506).
- ipv6/netfilter: Discard first fragment not including all headers (bsc#1191241 bsc#1195166).
- kernel-*-subpackage: Add dependency on kernel scriptlets (bsc#1192740).
- kernel-binary.spec.in Stop templating the scriptlets for subpackages (bsc#1190358).
- kernel-binary.spec.in: add zstd to BuildRequires if used
- kernel-binary.spec.in: make sure zstd is supported by kmod if used
- kernel-binary.spec: Check for no kernel signing certificates. Also remove unused variable.
- kernel-binary.spec: Define $image as rpm macro (bsc#1189841).
- kernel-binary.spec: Do not fail silently when KMP is empty (bsc#1190358). Copy the code from kernel-module-subpackage that deals with empty KMPs.
- kernel-binary.spec: Do not sign kernel when no key provided (bsc#1187167).
- kernel-binary.spec: Fix kernel-default-base scriptlets after packaging merge.
- kernel-binary.spec: Require dwarves for kernel-binary-devel when BTF is enabled (jsc#SLE-17288).
- kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as well.
- kernel-cert-subpackage: Fix certificate location in scriptlets (bsc#1189841). 
- kernel-source.spec: install-kernel-tools also required on 15.4
- kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229). The semantic changed in an incompatible way so invoking the macro now causes a build failure.
- kprobes: Limit max data_size of the kretprobe instances (bsc#1193669).
- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- memstick: rtsx_usb_ms: fix UAF (bsc#1194516).
- moxart: fix potential use-after-free on remove path (bsc#1194516).
- net, xdp: Introduce xdp_init_buff utility routine (bsc#1193506).
- net, xdp: Introduce xdp_prepare_buff utility routine (bsc#1193506).
- net: Using proper atomic helper (bsc#1186222).
- net: ipv6: Discard next-hop MTU less than minimum link MTU (bsc#1191241).
- net: mana: Add RX fencing (bsc#1193506).
- net: mana: Add XDP support (bsc#1193506).
- net: mana: Allow setting the number of queues while the NIC is down (bsc#1193506).
- net: mana: Fix spelling mistake 'calledd' -&gt; 'called' (bsc#1193506).
- net: mana: Fix the netdev_err()'s vPort argument in mana_init_port() (bsc#1193506).
- net: mana: Improve the HWC error handling (bsc#1193506).
- net: mana: Support hibernation and kexec (bsc#1193506).
- net: mana: Use kcalloc() instead of kzalloc() (bsc#1193506).
- objtool: Support Clang non-section symbols in ORC generation (bsc#1169514).
- post.sh: detect /usr mountpoint too
- recordmcount.pl: fix typo in s390 mcount regex (bsc#1192267).
- recordmcount.pl: look for jgnop instruction as well as bcrl on s390 (bsc#1192267).
- rpm/kernel-binary.spec.in: Use kmod-zstd provide. This makes it possible to use kmod with ZSTD support on non-Tumbleweed.
- rpm/kernel-binary.spec.in: avoid conflicting suse-release suse-release had arbitrary values in staging, we can't use it for dependencies. The filesystem one has to be enough (boo#1184804).
- rpm/kernel-binary.spec.in: do not strip vmlinux again (bsc#1193306). 
- rpm/kernel-binary.spec: Use only non-empty certificates.
- rpm/kernel-obs-build.spec.in: make builds reproducible (bsc#1189305).
- rpm/kernel-source.rpmlintrc: ignore new include/config files. 
- rpm/kernel-source.spec.in: do some more for vanilla_only.
- rpm: Abolish image suffix (bsc#1189841).
- rpm: Abolish scritplet templating (bsc#1189841). Outsource kernel-binary and KMP scriptlets to suse-module-tools. 
- rpm: Define $certs as rpm macro (bsc#1189841). 
- rpm: Fold kernel-devel and kernel-source scriptlets into spec files (bsc#1189841). 
- rpm: fix kmp install path
- rpm: use _rpmmacrodir (boo#1191384)
- tty: hvc: replace BUG_ON() with negative return value.
- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- x86/xen: Mark cpu_bringup_and_idle() as dead_end_function (bsc#1169514).
- xen/blkfront: do not take local copy of a request from the ring page (git-fixes).
- xen/blkfront: do not trust the backend response data blindly (git-fixes).
- xen/blkfront: read response from backend only once (git-fixes).
- xen/netfront: disentangle tx_skb_freelist (git-fixes).
- xen/netfront: do not read data from request on the ring page (git-fixes).
- xen/netfront: do not trust the backend response data blindly (git-fixes).
- xen/netfront: read response from backend only once (git-fixes).
- xen: sync include/xen/interface/io/ring.h with Xen's newest version (git-fixes).
- xfrm: fix MTU regression (bsc#1185377, bsc#1194048).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-10"/>
	<updated date="2022-02-10"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124431">SUSE bug 1124431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167162">SUSE bug 1167162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179599">SUSE bug 1179599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184804">SUSE bug 1184804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185377">SUSE bug 1185377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186207">SUSE bug 1186207</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186222">SUSE bug 1186222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187167">SUSE bug 1187167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189305">SUSE bug 1189305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189841">SUSE bug 1189841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190358">SUSE bug 1190358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190428">SUSE bug 1190428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191229">SUSE bug 1191229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191241">SUSE bug 1191241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191384">SUSE bug 1191384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191731">SUSE bug 1191731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192032">SUSE bug 1192032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192740">SUSE bug 1192740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192845">SUSE bug 1192845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192847">SUSE bug 1192847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192877">SUSE bug 1192877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192946">SUSE bug 1192946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193306">SUSE bug 1193306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193440">SUSE bug 1193440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193442">SUSE bug 1193442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193575">SUSE bug 1193575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193669">SUSE bug 1193669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193727">SUSE bug 1193727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193731">SUSE bug 1193731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193767">SUSE bug 1193767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193861">SUSE bug 1193861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193864">SUSE bug 1193864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193867">SUSE bug 1193867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193927">SUSE bug 1193927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194001">SUSE bug 1194001</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194048">SUSE bug 1194048</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194087">SUSE bug 1194087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194227">SUSE bug 1194227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194302">SUSE bug 1194302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194516">SUSE bug 1194516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194529">SUSE bug 1194529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194880">SUSE bug 1194880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194888">SUSE bug 1194888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194985">SUSE bug 1194985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195166">SUSE bug 1195166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195254">SUSE bug 1195254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25020/">CVE-2018-25020</cve>
	<cve impact="important" cvss3="3.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15126/">CVE-2019-15126</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-27820/">CVE-2020-27820</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0920/">CVE-2021-0920</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28711/">CVE-2021-28711</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28712/">CVE-2021-28712</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28713/">CVE-2021-28713</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28714/">CVE-2021-28714</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28715/">CVE-2021-28715</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33098/">CVE-2021-33098</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3564/">CVE-2021-3564</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39648/">CVE-2021-39648</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-39657/">CVE-2021-39657</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4002/">CVE-2021-4002</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4083/">CVE-2021-4083</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-4135/">CVE-2021-4135</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4149/">CVE-2021-4149</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-4197/">CVE-2021-4197</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4202/">CVE-2021-4202</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43975/">CVE-2021-43975</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43976/">CVE-2021-43976</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-44733/">CVE-2021-44733</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-45095/">CVE-2021-45095</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-45486/">CVE-2021-45486</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0322/">CVE-2022-0322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0330/">CVE-2022-0330</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667052" comment="kernel-default-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667053" comment="kernel-default-base-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667054" comment="kernel-default-devel-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667055" comment="kernel-devel-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667056" comment="kernel-docs-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667057" comment="kernel-macros-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667058" comment="kernel-obs-build-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667059" comment="kernel-source-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667060" comment="kernel-syms-4.12.14-197.105.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139992" version="1" class="patch">
	<metadata>
		<title>Security update for libksba (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204357" ref_url="https://bugzilla.suse.com/1204357" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3515" ref_url="https://www.suse.com/security/cve/CVE-2022-3515/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012597.html" source="SUSE-SU"/>
		<description>
This update for libksba fixes the following issues:

  - CVE-2022-3515: Fixed a possible overflow in the TLV parser (bsc#1204357).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-21"/>
	<updated date="2022-10-21"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1204357">SUSE bug 1204357</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3515/">CVE-2022-3515</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718553" comment="libksba-devel-1.3.5-150000.4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718554" comment="libksba8-1.3.5-150000.4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139993" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186463" ref_url="https://bugzilla.suse.com/1186463" source="BUGZILLA"/>
		<reference ref_id="1188859" ref_url="https://bugzilla.suse.com/1188859" source="BUGZILLA"/>
		<reference ref_id="1192394" ref_url="https://bugzilla.suse.com/1192394" source="BUGZILLA"/>
		<reference ref_id="1193227" ref_url="https://bugzilla.suse.com/1193227" source="BUGZILLA"/>
		<reference ref_id="1193237" ref_url="https://bugzilla.suse.com/1193237" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8921" ref_url="https://www.suse.com/security/cve/CVE-2019-8921/" source="CVE"/>
		<reference ref_id="CVE-2019-8922" ref_url="https://www.suse.com/security/cve/CVE-2019-8922/" source="CVE"/>
		<reference ref_id="CVE-2020-26558" ref_url="https://www.suse.com/security/cve/CVE-2020-26558/" source="CVE"/>
		<reference ref_id="CVE-2021-0129" ref_url="https://www.suse.com/security/cve/CVE-2021-0129/" source="CVE"/>
		<reference ref_id="CVE-2021-3658" ref_url="https://www.suse.com/security/cve/CVE-2021-3658/" source="CVE"/>
		<reference ref_id="CVE-2021-43400" ref_url="https://www.suse.com/security/cve/CVE-2021-43400/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012600.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2021-0129: Fixed improper access control (bsc#1186463).
- CVE-2020-26558: Fixed vulnerability that may permit a nearby man-in-the-middle attacker to identify the Passkey (bsc#1186463).
- CVE-2019-8921: Fixed heap-based buffer overflow via crafted request (bsc#1193237).
- CVE-2019-8922: Fixed heap-based buffer overflow via crafted request (bsc#1193227).
- CVE-2021-3658: Fixed adapter incorrectly restoring discoverable state after powered down (bsc#1188859).
- CVE-2021-43400: Fixed use-after-free in gatt-database.c (bsc#1192394).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-21"/>
	<updated date="2022-10-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186463">SUSE bug 1186463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188859">SUSE bug 1188859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192394">SUSE bug 1192394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193227">SUSE bug 1193227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193237">SUSE bug 1193237</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8921/">CVE-2019-8921</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-8922/">CVE-2019-8922</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26558/">CVE-2020-26558</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-0129/">CVE-2021-0129</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3658/">CVE-2021-3658</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43400/">CVE-2021-43400</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718908" comment="bluez-5.48-150000.5.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718909" comment="bluez-devel-5.48-150000.5.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718910" comment="libbluetooth3-5.48-150000.5.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139994" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201723" ref_url="https://bugzilla.suse.com/1201723" source="BUGZILLA"/>
		<reference ref_id="1201971" ref_url="https://bugzilla.suse.com/1201971" source="BUGZILLA"/>
		<reference ref_id="1202026" ref_url="https://bugzilla.suse.com/1202026" source="BUGZILLA"/>
		<reference ref_id="1202466" ref_url="https://bugzilla.suse.com/1202466" source="BUGZILLA"/>
		<reference ref_id="1202467" ref_url="https://bugzilla.suse.com/1202467" source="BUGZILLA"/>
		<reference ref_id="1202468" ref_url="https://bugzilla.suse.com/1202468" source="BUGZILLA"/>
		<reference ref_id="1202968" ref_url="https://bugzilla.suse.com/1202968" source="BUGZILLA"/>
		<reference ref_id="1202971" ref_url="https://bugzilla.suse.com/1202971" source="BUGZILLA"/>
		<reference ref_id="1202973" ref_url="https://bugzilla.suse.com/1202973" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0561" ref_url="https://www.suse.com/security/cve/CVE-2022-0561/" source="CVE"/>
		<reference ref_id="CVE-2022-2519" ref_url="https://www.suse.com/security/cve/CVE-2022-2519/" source="CVE"/>
		<reference ref_id="CVE-2022-2520" ref_url="https://www.suse.com/security/cve/CVE-2022-2520/" source="CVE"/>
		<reference ref_id="CVE-2022-2521" ref_url="https://www.suse.com/security/cve/CVE-2022-2521/" source="CVE"/>
		<reference ref_id="CVE-2022-2867" ref_url="https://www.suse.com/security/cve/CVE-2022-2867/" source="CVE"/>
		<reference ref_id="CVE-2022-2868" ref_url="https://www.suse.com/security/cve/CVE-2022-2868/" source="CVE"/>
		<reference ref_id="CVE-2022-2869" ref_url="https://www.suse.com/security/cve/CVE-2022-2869/" source="CVE"/>
		<reference ref_id="CVE-2022-34266" ref_url="https://www.suse.com/security/cve/CVE-2022-34266/" source="CVE"/>
		<reference ref_id="CVE-2022-34526" ref_url="https://www.suse.com/security/cve/CVE-2022-34526/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012599.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-2519: Fixed a double free in rotateImage() (bsc#1202968).
- CVE-2022-2520: Fixed a assertion failure in rotateImage() (bsc#1202973).
- CVE-2022-2521: Fixed invalid free in TIFFClose() (bsc#1202971).
- CVE-2022-2867: Fixed out of bounds read and write in tiffcrop.c (bsc#1202466).
- CVE-2022-2868: Fixed out of bounds read in reverseSamples16bits() (bsc#1202467).
- CVE-2022-2869: Fixed out of bounds read and write in extractContigSamples8bits() (bsc#1202468).
- CVE-2022-34526: Fixed stack overflow in the _TIFFVGetField function of Tiffsplit (bsc#1202026).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-21"/>
	<updated date="2022-10-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201723">SUSE bug 1201723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201971">SUSE bug 1201971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202026">SUSE bug 1202026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202466">SUSE bug 1202466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202467">SUSE bug 1202467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202468">SUSE bug 1202468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202968">SUSE bug 1202968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202971">SUSE bug 1202971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202973">SUSE bug 1202973</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0561/">CVE-2022-0561</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-2519/">CVE-2022-2519</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2520/">CVE-2022-2520</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2521/">CVE-2022-2521</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2867/">CVE-2022-2867</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2868/">CVE-2022-2868</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2869/">CVE-2022-2869</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-34266/">CVE-2022-34266</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34526/">CVE-2022-34526</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718762" comment="libtiff-devel-4.0.9-150000.45.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718763" comment="libtiff5-4.0.9-150000.45.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718725" comment="libtiff5-32bit-4.0.9-150000.45.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139995" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199564" ref_url="https://bugzilla.suse.com/1199564" source="BUGZILLA"/>
		<reference ref_id="1200288" ref_url="https://bugzilla.suse.com/1200288" source="BUGZILLA"/>
		<reference ref_id="1201309" ref_url="https://bugzilla.suse.com/1201309" source="BUGZILLA"/>
		<reference ref_id="1202677" ref_url="https://bugzilla.suse.com/1202677" source="BUGZILLA"/>
		<reference ref_id="1202960" ref_url="https://bugzilla.suse.com/1202960" source="BUGZILLA"/>
		<reference ref_id="1203552" ref_url="https://bugzilla.suse.com/1203552" source="BUGZILLA"/>
		<reference ref_id="1203769" ref_url="https://bugzilla.suse.com/1203769" source="BUGZILLA"/>
		<reference ref_id="1203987" ref_url="https://bugzilla.suse.com/1203987" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-20008" ref_url="https://www.suse.com/security/cve/CVE-2022-20008/" source="CVE"/>
		<reference ref_id="CVE-2022-2503" ref_url="https://www.suse.com/security/cve/CVE-2022-2503/" source="CVE"/>
		<reference ref_id="CVE-2022-32296" ref_url="https://www.suse.com/security/cve/CVE-2022-32296/" source="CVE"/>
		<reference ref_id="CVE-2022-3239" ref_url="https://www.suse.com/security/cve/CVE-2022-3239/" source="CVE"/>
		<reference ref_id="CVE-2022-3303" ref_url="https://www.suse.com/security/cve/CVE-2022-3303/" source="CVE"/>
		<reference ref_id="CVE-2022-41218" ref_url="https://www.suse.com/security/cve/CVE-2022-41218/" source="CVE"/>
		<reference ref_id="CVE-2022-41848" ref_url="https://www.suse.com/security/cve/CVE-2022-41848/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012617.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-20008: Fixed local information disclosure due to possibility to read kernel heap memory via mmc_blk_read_single of block.c (bnc#1199564).
- CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677).
- CVE-2022-32296: Fixed vulnerability where TCP servers were allowed to identify clients by observing what source ports are used (bnc#1200288).
- CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
- CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
- CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
- CVE-2022-41848: Fixed a race condition in drivers/char/pcmcia/synclink_cs.c mgslpc_ioctl and mgslpc_detach (bnc#1203987).

The following non-security bugs were fixed:

- dtb: Do not include sources in src.rpm - refer to kernel-source Same as other kernel binary packages there is no need to carry duplicate sources in dtb packages.
- mkspec: eliminate @NOSOURCE@ macro This should be alsways used with @SOURCES@, just include the content there.
- net: mana: Add rmb after checking owner bits (git-fixes).
- net: mana: Add the Linux MANA PF driver (bnc#1201309, jsc#PED-529).
- x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still be possible to do so that the mitigation can still be disabled on Intel who do not use the return thunks but IBRS.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-22"/>
	<updated date="2022-10-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199564">SUSE bug 1199564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200288">SUSE bug 1200288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201309">SUSE bug 1201309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202677">SUSE bug 1202677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202960">SUSE bug 1202960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203552">SUSE bug 1203552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203769">SUSE bug 1203769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203987">SUSE bug 1203987</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-20008/">CVE-2022-20008</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2503/">CVE-2022-2503</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32296/">CVE-2022-32296</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3239/">CVE-2022-3239</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3303/">CVE-2022-3303</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41218/">CVE-2022-41218</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41848/">CVE-2022-41848</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716967" comment="kernel-default-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716968" comment="kernel-default-base-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716969" comment="kernel-default-devel-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716970" comment="kernel-devel-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716971" comment="kernel-docs-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716972" comment="kernel-macros-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716973" comment="kernel-obs-build-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716974" comment="kernel-source-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716975" comment="kernel-syms-4.12.14-150100.197.126.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139996" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204421" ref_url="https://bugzilla.suse.com/1204421" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42927" ref_url="https://www.suse.com/security/cve/CVE-2022-42927/" source="CVE"/>
		<reference ref_id="CVE-2022-42928" ref_url="https://www.suse.com/security/cve/CVE-2022-42928/" source="CVE"/>
		<reference ref_id="CVE-2022-42929" ref_url="https://www.suse.com/security/cve/CVE-2022-42929/" source="CVE"/>
		<reference ref_id="CVE-2022-42932" ref_url="https://www.suse.com/security/cve/CVE-2022-42932/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3698-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012635.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Updated to version 102.4.0 ESR (bsc#1204421)
- CVE-2022-42927: Fixed same-origin policy violation that could have leaked cross-origin URLs.
- CVE-2022-42928: Fixed memory Corruption in JS Engine.
- CVE-2022-42929: Fixed denial of Service via window.print.
- CVE-2022-42932: Fixed memory safety bugs.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-24"/>
	<updated date="2022-10-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204421">SUSE bug 1204421</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42927/">CVE-2022-42927</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42928/">CVE-2022-42928</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-42929/">CVE-2022-42929</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-42932/">CVE-2022-42932</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718911" comment="MozillaFirefox-102.4.0-150000.150.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718912" comment="MozillaFirefox-devel-102.4.0-150000.150.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718913" comment="MozillaFirefox-translations-common-102.4.0-150000.150.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718914" comment="MozillaFirefox-translations-other-102.4.0-150000.150.62.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139997" version="1" class="patch">
	<metadata>
		<title>Security update for multipath-tools (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187534" ref_url="https://bugzilla.suse.com/1187534" source="BUGZILLA"/>
		<reference ref_id="1202616" ref_url="https://bugzilla.suse.com/1202616" source="BUGZILLA"/>
		<reference ref_id="1202739" ref_url="https://bugzilla.suse.com/1202739" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41973" ref_url="https://www.suse.com/security/cve/CVE-2022-41973/" source="CVE"/>
		<reference ref_id="CVE-2022-41974" ref_url="https://www.suse.com/security/cve/CVE-2022-41974/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012647.html" source="SUSE-SU"/>
		<description>
This update for multipath-tools fixes the following issues:

- CVE-2022-41973: Fixed a symlink attack in multipathd. (bsc#1202739)
- CVE-2022-41974: Fixed an authorization bypass issue in multipathd. (bsc#1202739)
- Avoid linking to libreadline to avoid licensing issue (bsc#1202616)
- Fix that some zfcp devices have large/negative LUN IDs (bsc#1187534)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-24"/>
	<updated date="2022-10-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187534">SUSE bug 1187534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202616">SUSE bug 1202616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202739">SUSE bug 1202739</bugzilla>
	<cve impact="important" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-41973/">CVE-2022-41973</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41974/">CVE-2022-41974</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009720549" comment="kpartx-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720550" comment="libdmmp-devel-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720551" comment="libdmmp0_2_0-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720552" comment="multipath-tools-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720553" comment="multipath-tools-devel-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139998" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203614" ref_url="https://bugzilla.suse.com/1203614" source="BUGZILLA"/>
		<reference ref_id="1203619" ref_url="https://bugzilla.suse.com/1203619" source="BUGZILLA"/>
		<reference ref_id="1203620" ref_url="https://bugzilla.suse.com/1203620" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2795" ref_url="https://www.suse.com/security/cve/CVE-2022-2795/" source="CVE"/>
		<reference ref_id="CVE-2022-38177" ref_url="https://www.suse.com/security/cve/CVE-2022-38177/" source="CVE"/>
		<reference ref_id="CVE-2022-38178" ref_url="https://www.suse.com/security/cve/CVE-2022-38178/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012671.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

  - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations (bsc#1203614).
  - CVE-2022-38177: Fixed a memory leak that could be externally triggered in the DNSSEC verification code for the ECDSA algorithm (bsc#1203619).
  - CVE-2022-38178: Fixed memory leaks that could be externally triggered in the DNSSEC verification code for the EdDSA algorithm (bsc#1203620).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203614">SUSE bug 1203614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203619">SUSE bug 1203619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203620">SUSE bug 1203620</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2795/">CVE-2022-2795</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38177/">CVE-2022-38177</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38178/">CVE-2022-38178</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009714565" comment="bind-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714566" comment="bind-chrootenv-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714567" comment="bind-devel-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714568" comment="bind-doc-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714569" comment="bind-utils-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714570" comment="libbind9-1600-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714571" comment="libdns1605-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714572" comment="libirs-devel-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714573" comment="libirs1601-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714574" comment="libisc1606-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714575" comment="libisccc1600-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714576" comment="libisccfg1600-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714577" comment="libns1604-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714578" comment="python3-bind-9.16.6-150000.12.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:139999" version="1" class="patch">
	<metadata>
		<title>Security update for python-paramiko (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1111151" ref_url="https://bugzilla.suse.com/1111151" source="BUGZILLA"/>
		<reference ref_id="1200603" ref_url="https://bugzilla.suse.com/1200603" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000805" ref_url="https://www.suse.com/security/cve/CVE-2018-1000805/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012669.html" source="SUSE-SU"/>
		<description>
This update for python-paramiko fixes the following issues:

Updated to version 2.4.3:

- CVE-2018-1000805: Fixed authentication bypass (bsc#1111151).

Bugfixes:

- Fixed Ed25519 key handling for certain key comment lengths (bsc#1200603).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1111151">SUSE bug 1111151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200603">SUSE bug 1200603</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000805/">CVE-2018-1000805</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716215" comment="python2-paramiko-2.4.3-150100.6.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716204" comment="python3-paramiko-2.4.3-150100.6.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140000" version="1" class="patch">
	<metadata>
		<title>Security update for python-waitress (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197255" ref_url="https://bugzilla.suse.com/1197255" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24761" ref_url="https://www.suse.com/security/cve/CVE-2022-24761/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012668.html" source="SUSE-SU"/>
		<description>
This update for python-waitress fixes the following issues:

- CVE-2022-24761: Fixed a bug to avoid inconsistent interpretation of HTTP requests leading to request smuggling. (bsc#1197255)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197255">SUSE bug 1197255</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-24761/">CVE-2022-24761</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716743" comment="python3-waitress-1.4.3-150000.3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140001" version="1" class="patch">
	<metadata>
		<title>Security update for golang-github-prometheus-node_exporter (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196338" ref_url="https://bugzilla.suse.com/1196338" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21698" ref_url="https://www.suse.com/security/cve/CVE-2022-21698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3745-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012700.html" source="SUSE-SU"/>
		<description>
This update for golang-github-prometheus-node_exporter fixes the following issues:

  (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239, jsc#SUMA-114,
  CVE-2022-21698)		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196338">SUSE bug 1196338</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21698/">CVE-2022-21698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716966" comment="golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140002" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194166" ref_url="https://bugzilla.suse.com/1194166" source="BUGZILLA"/>
		<reference ref_id="1194167" ref_url="https://bugzilla.suse.com/1194167" source="BUGZILLA"/>
		<reference ref_id="1194168" ref_url="https://bugzilla.suse.com/1194168" source="BUGZILLA"/>
		<reference ref_id="1194169" ref_url="https://bugzilla.suse.com/1194169" source="BUGZILLA"/>
		<reference ref_id="1194170" ref_url="https://bugzilla.suse.com/1194170" source="BUGZILLA"/>
		<reference ref_id="1194171" ref_url="https://bugzilla.suse.com/1194171" source="BUGZILLA"/>
		<reference ref_id="1194780" ref_url="https://bugzilla.suse.com/1194780" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4181" ref_url="https://www.suse.com/security/cve/CVE-2021-4181/" source="CVE"/>
		<reference ref_id="CVE-2021-4182" ref_url="https://www.suse.com/security/cve/CVE-2021-4182/" source="CVE"/>
		<reference ref_id="CVE-2021-4183" ref_url="https://www.suse.com/security/cve/CVE-2021-4183/" source="CVE"/>
		<reference ref_id="CVE-2021-4184" ref_url="https://www.suse.com/security/cve/CVE-2021-4184/" source="CVE"/>
		<reference ref_id="CVE-2021-4185" ref_url="https://www.suse.com/security/cve/CVE-2021-4185/" source="CVE"/>
		<reference ref_id="CVE-2021-4190" ref_url="https://www.suse.com/security/cve/CVE-2021-4190/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0375-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010221.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

Update to version 3.6.1: 

- CVE-2021-4185: RTMPT dissector infinite loop (bsc#1194166)
- CVE-2021-4184: BitTorrent DHT dissector infinite loop (bsc#1194167)
- CVE-2021-4183: pcapng file parser crash (bsc#1194168)
- CVE-2021-4182: RFC 7468 file parser infinite loop (bsc#1194169)
- CVE-2021-4181: Sysdig Event dissector crash (bsc#1194170)
- CVE-2021-4190: Kafka dissector infinite loop (bsc#1194171)
- Support for Shared Memory Communications (SMC) (jsc#SLE-18727)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-14"/>
	<updated date="2022-02-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1194166">SUSE bug 1194166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194167">SUSE bug 1194167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194168">SUSE bug 1194168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194169">SUSE bug 1194169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194170">SUSE bug 1194170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194171">SUSE bug 1194171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194780">SUSE bug 1194780</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4181/">CVE-2021-4181</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4182/">CVE-2021-4182</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4183/">CVE-2021-4183</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4184/">CVE-2021-4184</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4185/">CVE-2021-4185</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4190/">CVE-2021-4190</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663932" comment="libwireshark15-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663933" comment="libwiretap12-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663934" comment="libwsutil13-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663935" comment="wireshark-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663936" comment="wireshark-devel-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663937" comment="wireshark-ui-qt-3.6.1-3.68.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140003" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1175144" ref_url="https://bugzilla.suse.com/1175144" source="BUGZILLA"/>
		<reference ref_id="1182282" ref_url="https://bugzilla.suse.com/1182282" source="BUGZILLA"/>
		<reference ref_id="1185000" ref_url="https://bugzilla.suse.com/1185000" source="BUGZILLA"/>
		<reference ref_id="1192463" ref_url="https://bugzilla.suse.com/1192463" source="BUGZILLA"/>
		<reference ref_id="1198035" ref_url="https://bugzilla.suse.com/1198035" source="BUGZILLA"/>
		<reference ref_id="1198037" ref_url="https://bugzilla.suse.com/1198037" source="BUGZILLA"/>
		<reference ref_id="1198038" ref_url="https://bugzilla.suse.com/1198038" source="BUGZILLA"/>
		<reference ref_id="1201367" ref_url="https://bugzilla.suse.com/1201367" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-17380" ref_url="https://www.suse.com/security/cve/CVE-2020-17380/" source="CVE"/>
		<reference ref_id="CVE-2021-3409" ref_url="https://www.suse.com/security/cve/CVE-2021-3409/" source="CVE"/>
		<reference ref_id="CVE-2021-3507" ref_url="https://www.suse.com/security/cve/CVE-2021-3507/" source="CVE"/>
		<reference ref_id="CVE-2021-4206" ref_url="https://www.suse.com/security/cve/CVE-2021-4206/" source="CVE"/>
		<reference ref_id="CVE-2021-4207" ref_url="https://www.suse.com/security/cve/CVE-2021-4207/" source="CVE"/>
		<reference ref_id="CVE-2022-0216" ref_url="https://www.suse.com/security/cve/CVE-2022-0216/" source="CVE"/>
		<reference ref_id="CVE-2022-35414" ref_url="https://www.suse.com/security/cve/CVE-2022-35414/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012710.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

- CVE-2021-3409: Fixed an incomplete fix for CVE-2020-17380 and CVE-2020-25085 in sdhi controller. (bsc#1182282)
- CVE-2021-4206: Fixed an integer overflow in cursor_alloc which can lead to heap buffer overflow. (bsc#1198035)
- CVE-2021-4207: Fixed a double fetch in qxl_cursor ehich can lead to heap buffer overflow. (bsc#1198037)
- CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038)
- CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)
- CVE-2021-3507: Fixed a heap buffer overflow in DMA read data transfers. (bsc#1185000)
- CVE-2020-17380: Fixed a heap buffer overflow in sdhci_sdma_transfer_multi_blocks. (bsc#1175144)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175144">SUSE bug 1175144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182282">SUSE bug 1182282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185000">SUSE bug 1185000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192463">SUSE bug 1192463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198035">SUSE bug 1198035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198037">SUSE bug 1198037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198038">SUSE bug 1198038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201367">SUSE bug 1201367</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-17380/">CVE-2020-17380</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3409/">CVE-2021-3409</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3507/">CVE-2021-3507</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4206/">CVE-2021-4206</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4207/">CVE-2021-4207</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0216/">CVE-2022-0216</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-35414/">CVE-2022-35414</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009717361" comment="qemu-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717362" comment="qemu-arm-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717363" comment="qemu-audio-alsa-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717364" comment="qemu-audio-oss-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717365" comment="qemu-audio-pa-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717366" comment="qemu-block-curl-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717367" comment="qemu-block-iscsi-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717368" comment="qemu-block-rbd-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717369" comment="qemu-block-ssh-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717370" comment="qemu-guest-agent-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717371" comment="qemu-ipxe-1.0.0+-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717372" comment="qemu-kvm-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717373" comment="qemu-lang-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717374" comment="qemu-seabios-1.12.0_0_ga698c89-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717375" comment="qemu-sgabios-8-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717376" comment="qemu-tools-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717377" comment="qemu-ui-curses-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717378" comment="qemu-ui-gtk-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717379" comment="qemu-vgabios-1.12.0_0_ga698c89-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717380" comment="qemu-x86-3.1.1.1-150100.80.43.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140004" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202593" ref_url="https://bugzilla.suse.com/1202593" source="BUGZILLA"/>
		<reference ref_id="1204383" ref_url="https://bugzilla.suse.com/1204383" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32221" ref_url="https://www.suse.com/security/cve/CVE-2022-32221/" source="CVE"/>
		<reference ref_id="CVE-2022-35252" ref_url="https://www.suse.com/security/cve/CVE-2022-35252/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012702.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

  - CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).
  - CVE-2022-35252: Fixed a potential injection of control characters into cookies (bsc#1202593).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202593">SUSE bug 1202593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204383">SUSE bug 1204383</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-32221/">CVE-2022-32221</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-35252/">CVE-2022-35252</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721614" comment="curl-7.60.0-150000.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721615" comment="libcurl-devel-7.60.0-150000.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721616" comment="libcurl4-7.60.0-150000.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721617" comment="libcurl4-32bit-7.60.0-150000.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140005" version="1" class="patch">
	<metadata>
		<title>Security update for libmad (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1036968" ref_url="https://bugzilla.suse.com/1036968" source="BUGZILLA"/>
		<reference ref_id="1036969" ref_url="https://bugzilla.suse.com/1036969" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-8372" ref_url="https://www.suse.com/security/cve/CVE-2017-8372/" source="CVE"/>
		<reference ref_id="CVE-2017-8373" ref_url="https://www.suse.com/security/cve/CVE-2017-8373/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012717.html" source="SUSE-SU"/>
		<description>
This update for libmad fixes the following issues:

  - CVE-2017-8373: Fixed heap-based buffer overflow in mad_layer_III (bsc#1036968).
  - CVE-2017-8372: Fixed assertion failure in layer3.c (bsc#1036969).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1036968">SUSE bug 1036968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036969">SUSE bug 1036969</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8372/">CVE-2017-8372</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8373/">CVE-2017-8373</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009719716" comment="libmad-devel-0.15.1b-150000.5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009719717" comment="libmad0-0.15.1b-150000.5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140006" version="1" class="patch">
	<metadata>
		<title>Security update for telnet (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203759" ref_url="https://bugzilla.suse.com/1203759" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-39028" ref_url="https://www.suse.com/security/cve/CVE-2022-39028/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012714.html" source="SUSE-SU"/>
		<description>
This update for telnet fixes the following issues:

  - CVE-2022-39028: Fixed NULL pointer dereference in telnetd (bsc#1203759).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203759">SUSE bug 1203759</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-39028/">CVE-2022-39028</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720478" comment="telnet-1.2-150000.3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140007" version="1" class="patch">
	<metadata>
		<title>Security update for libtasn1 (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204690" ref_url="https://bugzilla.suse.com/1204690" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46848" ref_url="https://www.suse.com/security/cve/CVE-2021-46848/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012715.html" source="SUSE-SU"/>
		<description>
This update for libtasn1 fixes the following issues:

- CVE-2021-46848: Fixed off-by-one array size check that affects asn1_encode_simple_der (bsc#1204690)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1204690">SUSE bug 1204690</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46848/">CVE-2021-46848</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721360" comment="libtasn1-4.13-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721361" comment="libtasn1-6-4.13-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721362" comment="libtasn1-6-32bit-4.13-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721363" comment="libtasn1-devel-4.13-150000.4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140008" version="1" class="patch">
	<metadata>
		<title>Security update for openjpeg2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1140205" ref_url="https://bugzilla.suse.com/1140205" source="BUGZILLA"/>
		<reference ref_id="1149789" ref_url="https://bugzilla.suse.com/1149789" source="BUGZILLA"/>
		<reference ref_id="1179594" ref_url="https://bugzilla.suse.com/1179594" source="BUGZILLA"/>
		<reference ref_id="1179821" ref_url="https://bugzilla.suse.com/1179821" source="BUGZILLA"/>
		<reference ref_id="1180042" ref_url="https://bugzilla.suse.com/1180042" source="BUGZILLA"/>
		<reference ref_id="1180043" ref_url="https://bugzilla.suse.com/1180043" source="BUGZILLA"/>
		<reference ref_id="1180044" ref_url="https://bugzilla.suse.com/1180044" source="BUGZILLA"/>
		<reference ref_id="1180046" ref_url="https://bugzilla.suse.com/1180046" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20846" ref_url="https://www.suse.com/security/cve/CVE-2018-20846/" source="CVE"/>
		<reference ref_id="CVE-2018-21010" ref_url="https://www.suse.com/security/cve/CVE-2018-21010/" source="CVE"/>
		<reference ref_id="CVE-2020-27814" ref_url="https://www.suse.com/security/cve/CVE-2020-27814/" source="CVE"/>
		<reference ref_id="CVE-2020-27824" ref_url="https://www.suse.com/security/cve/CVE-2020-27824/" source="CVE"/>
		<reference ref_id="CVE-2020-27841" ref_url="https://www.suse.com/security/cve/CVE-2020-27841/" source="CVE"/>
		<reference ref_id="CVE-2020-27842" ref_url="https://www.suse.com/security/cve/CVE-2020-27842/" source="CVE"/>
		<reference ref_id="CVE-2020-27843" ref_url="https://www.suse.com/security/cve/CVE-2020-27843/" source="CVE"/>
		<reference ref_id="CVE-2020-27845" ref_url="https://www.suse.com/security/cve/CVE-2020-27845/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012731.html" source="SUSE-SU"/>
		<description>
This update for openjpeg2 fixes the following issues:

  - CVE-2018-20846: Fixed OOB read in pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c (bsc#1140205).
  - CVE-2018-21010: Fixed heap buffer overflow in color_apply_icc_profile in bin/common/color.c (bsc#1149789).
  - CVE-2020-27814: Fixed heap buffer overflow in lib/openjp2/mqc.c (bsc#1179594),
  - CVE-2020-27824: Fixed OOB read in opj_dwt_calc_explicit_stepsizes() (bsc#1179821).
  - CVE-2020-27841: Fixed buffer over-read in lib/openjp2/pi.c (bsc#1180042).
  - CVE-2020-27842: Fixed null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (bsc#1180043).
  - CVE-2020-27843: Fixed OOB read in opj_t2_encode_packet function in openjp2/t2.c (bsc#1180044).
  - CVE-2020-27845: Fixed heap-based buffer over-read in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (bsc#1180046).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-27"/>
	<updated date="2022-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140205">SUSE bug 1140205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149789">SUSE bug 1149789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179594">SUSE bug 1179594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179821">SUSE bug 1179821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180042">SUSE bug 1180042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180043">SUSE bug 1180043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180044">SUSE bug 1180044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180046">SUSE bug 1180046</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20846/">CVE-2018-20846</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-21010/">CVE-2018-21010</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27814/">CVE-2020-27814</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27824/">CVE-2020-27824</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27841/">CVE-2020-27841</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27842/">CVE-2020-27842</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27843/">CVE-2020-27843</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27845/">CVE-2020-27845</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721357" comment="libopenjp2-7-2.3.0-150000.3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721340" comment="libopenjp2-7-32bit-2.3.0-150000.3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721358" comment="openjpeg2-2.3.0-150000.3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721359" comment="openjpeg2-devel-2.3.0-150000.3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140009" version="1" class="patch">
	<metadata>
		<title>Security update for dbus-1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1087072" ref_url="https://bugzilla.suse.com/1087072" source="BUGZILLA"/>
		<reference ref_id="1204111" ref_url="https://bugzilla.suse.com/1204111" source="BUGZILLA"/>
		<reference ref_id="1204112" ref_url="https://bugzilla.suse.com/1204112" source="BUGZILLA"/>
		<reference ref_id="1204113" ref_url="https://bugzilla.suse.com/1204113" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42010" ref_url="https://www.suse.com/security/cve/CVE-2022-42010/" source="CVE"/>
		<reference ref_id="CVE-2022-42011" ref_url="https://www.suse.com/security/cve/CVE-2022-42011/" source="CVE"/>
		<reference ref_id="CVE-2022-42012" ref_url="https://www.suse.com/security/cve/CVE-2022-42012/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012727.html" source="SUSE-SU"/>
		<description>
This update for dbus-1 fixes the following issues:

  - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111).
  - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112).
  - CVE-2022-42012: Fixed a use-after-free that could be trigged by a message in non-native endianness with out-of-band Unix file descriptor (bsc#1204113).

  Bugfixes:

  - Disable asserts (bsc#1087072).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-27"/>
	<updated date="2022-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1087072">SUSE bug 1087072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204111">SUSE bug 1204111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204112">SUSE bug 1204112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204113">SUSE bug 1204113</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-42010/">CVE-2022-42010</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-42011/">CVE-2022-42011</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-42012/">CVE-2022-42012</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009717556" comment="dbus-1-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717557" comment="dbus-1-devel-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717558" comment="dbus-1-x11-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717559" comment="libdbus-1-3-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717541" comment="libdbus-1-3-32bit-1.12.2-150100.8.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140010" version="1" class="patch">
	<metadata>
		<title>Security update for libconfuse0 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203326" ref_url="https://bugzilla.suse.com/1203326" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40320" ref_url="https://www.suse.com/security/cve/CVE-2022-40320/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3807-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012757.html" source="SUSE-SU"/>
		<description>
This update for libconfuse0 fixes the following issues:

- CVE-2022-40320: Fixed a heap-based buffer over-read in cfg_tilde_expand in confuse.c (bsc#1203326).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-28"/>
	<updated date="2022-10-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203326">SUSE bug 1203326</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40320/">CVE-2022-40320</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710533" comment="libconfuse-devel-2.8-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710534" comment="libconfuse0-2.8-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140011" version="1" class="patch">
	<metadata>
		<title>Security update for hdf5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1093663" ref_url="https://bugzilla.suse.com/1093663" source="BUGZILLA"/>
		<reference ref_id="1101475" ref_url="https://bugzilla.suse.com/1101475" source="BUGZILLA"/>
		<reference ref_id="1101906" ref_url="https://bugzilla.suse.com/1101906" source="BUGZILLA"/>
		<reference ref_id="1107069" ref_url="https://bugzilla.suse.com/1107069" source="BUGZILLA"/>
		<reference ref_id="1111598" ref_url="https://bugzilla.suse.com/1111598" source="BUGZILLA"/>
		<reference ref_id="1125882" ref_url="https://bugzilla.suse.com/1125882" source="BUGZILLA"/>
		<reference ref_id="1167400" ref_url="https://bugzilla.suse.com/1167400" source="BUGZILLA"/>
		<reference ref_id="1194366" ref_url="https://bugzilla.suse.com/1194366" source="BUGZILLA"/>
		<reference ref_id="1194375" ref_url="https://bugzilla.suse.com/1194375" source="BUGZILLA"/>
		<reference ref_id="1195212" ref_url="https://bugzilla.suse.com/1195212" source="BUGZILLA"/>
		<reference ref_id="1195215" ref_url="https://bugzilla.suse.com/1195215" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-11205" ref_url="https://www.suse.com/security/cve/CVE-2018-11205/" source="CVE"/>
		<reference ref_id="CVE-2018-13867" ref_url="https://www.suse.com/security/cve/CVE-2018-13867/" source="CVE"/>
		<reference ref_id="CVE-2018-14031" ref_url="https://www.suse.com/security/cve/CVE-2018-14031/" source="CVE"/>
		<reference ref_id="CVE-2018-16438" ref_url="https://www.suse.com/security/cve/CVE-2018-16438/" source="CVE"/>
		<reference ref_id="CVE-2018-17439" ref_url="https://www.suse.com/security/cve/CVE-2018-17439/" source="CVE"/>
		<reference ref_id="CVE-2019-8396" ref_url="https://www.suse.com/security/cve/CVE-2019-8396/" source="CVE"/>
		<reference ref_id="CVE-2020-10812" ref_url="https://www.suse.com/security/cve/CVE-2020-10812/" source="CVE"/>
		<reference ref_id="CVE-2021-45830" ref_url="https://www.suse.com/security/cve/CVE-2021-45830/" source="CVE"/>
		<reference ref_id="CVE-2021-45833" ref_url="https://www.suse.com/security/cve/CVE-2021-45833/" source="CVE"/>
		<reference ref_id="CVE-2021-46242" ref_url="https://www.suse.com/security/cve/CVE-2021-46242/" source="CVE"/>
		<reference ref_id="CVE-2021-46244" ref_url="https://www.suse.com/security/cve/CVE-2021-46244/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012789.html" source="SUSE-SU"/>
		<description>
This update for hdf5 fixes the following issues:

  - CVE-2021-46244: Fixed division by zero leading to DoS (bsc#1195215).
  - CVE-2018-13867: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1101906).
  - CVE-2018-16438: Fixed out of bounds read in H5L_extern_query at H5Lexternal.c (bsc#1107069).
  - CVE-2020-10812: Fixed NULL pointer dereference (bsc#1167400).
  - CVE-2021-45830: Fixed heap buffer overflow vulnerability in H5F_addr_decode_len in /hdf5/src/H5Fint.c (bsc#1194375).
  - CVE-2019-8396:  Fixed buffer overflow in function H5O__layout_encode in H5Olayout.c (bsc#1125882).
  - CVE-2018-11205: Fixed out of bounds read was discovered in H5VM_memcpyvv in H5VM.c (bsc#1093663).
  - CVE-2021-46242: Fixed heap-use-after free via the component H5AC_unpin_entry (bsc#1195212).
  - CVE-2021-45833: Fixed stack buffer overflow vulnerability (bsc#1194366).
  - CVE-2018-14031: Fixed heap-based buffer over-read in the function H5T_copy in H5T.c (bsc#1101475).
  - CVE-2018-17439: Fixed out of bounds read in the function H5F__accum_read in H5Faccum.c (bsc#1111598).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-01"/>
	<updated date="2022-11-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1093663">SUSE bug 1093663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101475">SUSE bug 1101475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1101906">SUSE bug 1101906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107069">SUSE bug 1107069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111598">SUSE bug 1111598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1125882">SUSE bug 1125882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167400">SUSE bug 1167400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194366">SUSE bug 1194366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194375">SUSE bug 1194375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195212">SUSE bug 1195212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195215">SUSE bug 1195215</bugzilla>
	<cve impact="low" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-11205/">CVE-2018-11205</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-13867/">CVE-2018-13867</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14031/">CVE-2018-14031</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16438/">CVE-2018-16438</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-17439/">CVE-2018-17439</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-8396/">CVE-2019-8396</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10812/">CVE-2020-10812</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-45830/">CVE-2021-45830</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-45833/">CVE-2021-45833</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-46242/">CVE-2021-46242</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46244/">CVE-2021-46244</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009720479" comment="hdf5-gnu-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720480" comment="hdf5-gnu-mpich-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720481" comment="hdf5-gnu-mvapich2-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720482" comment="hdf5-gnu-openmpi2-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720483" comment="hdf5-hpc-examples-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720484" comment="hdf5_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720485" comment="hdf5_1_10_8-gnu-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720486" comment="hdf5_1_10_8-gnu-hpc-devel-static-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720487" comment="hdf5_1_10_8-gnu-hpc-module-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720488" comment="hdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720489" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720490" comment="hdf5_1_10_8-gnu-mpich-hpc-devel-static-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720491" comment="hdf5_1_10_8-gnu-mpich-hpc-module-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720492" comment="hdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720493" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720494" comment="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720495" comment="hdf5_1_10_8-gnu-mvapich2-hpc-module-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720496" comment="hdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720497" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720498" comment="hdf5_1_10_8-gnu-openmpi2-hpc-devel-static-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720499" comment="hdf5_1_10_8-gnu-openmpi2-hpc-module-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720500" comment="hdf5_1_10_8-hpc-examples-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720501" comment="libhdf5-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720502" comment="libhdf5-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720503" comment="libhdf5-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720504" comment="libhdf5-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720505" comment="libhdf5_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720506" comment="libhdf5_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720507" comment="libhdf5_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720508" comment="libhdf5_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720509" comment="libhdf5_cpp-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720510" comment="libhdf5_cpp-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720511" comment="libhdf5_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720512" comment="libhdf5_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720513" comment="libhdf5_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720514" comment="libhdf5_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720515" comment="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720516" comment="libhdf5_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720517" comment="libhdf5_fortran-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720518" comment="libhdf5_fortran-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720519" comment="libhdf5_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720520" comment="libhdf5_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720521" comment="libhdf5_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720522" comment="libhdf5_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720523" comment="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720524" comment="libhdf5_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720525" comment="libhdf5_hl-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720526" comment="libhdf5_hl-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720527" comment="libhdf5_hl-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720528" comment="libhdf5_hl-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720529" comment="libhdf5_hl_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720530" comment="libhdf5_hl_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720531" comment="libhdf5_hl_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720532" comment="libhdf5_hl_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720533" comment="libhdf5_hl_cpp-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720534" comment="libhdf5_hl_cpp-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720535" comment="libhdf5_hl_cpp-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720536" comment="libhdf5_hl_cpp-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720537" comment="libhdf5_hl_cpp_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720538" comment="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720539" comment="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720540" comment="libhdf5_hl_cpp_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720541" comment="libhdf5_hl_fortran-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720542" comment="libhdf5_hl_fortran-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720543" comment="libhdf5_hl_fortran-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720544" comment="libhdf5_hl_fortran-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720545" comment="libhdf5hl_fortran_1_10_8-gnu-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720546" comment="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720547" comment="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc-1.10.8-150100.7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720548" comment="libhdf5hl_fortran_1_10_8-gnu-openmpi2-hpc-1.10.8-150100.7.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140012" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204412" ref_url="https://bugzilla.suse.com/1204412" source="BUGZILLA"/>
		<reference ref_id="1204416" ref_url="https://bugzilla.suse.com/1204416" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3550" ref_url="https://www.suse.com/security/cve/CVE-2022-3550/" source="CVE"/>
		<reference ref_id="CVE-2022-3551" ref_url="https://www.suse.com/security/cve/CVE-2022-3551/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3856-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012800.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

  - CVE-2022-3550: Fixed out of bounds read/write in _GetCountedString() (bsc#1204412).
  - CVE-2022-3551: Fixed various leaks of the return value of GetComponentSpec() (bsc#1204416).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204412">SUSE bug 1204412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204416">SUSE bug 1204416</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3550/">CVE-2022-3550</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3551/">CVE-2022-3551</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718918" comment="xorg-x11-server-1.20.3-150100.14.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718919" comment="xorg-x11-server-extra-1.20.3-150100.14.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718920" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140013" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201978" ref_url="https://bugzilla.suse.com/1201978" source="BUGZILLA"/>
		<reference ref_id="1204366" ref_url="https://bugzilla.suse.com/1204366" source="BUGZILLA"/>
		<reference ref_id="1204367" ref_url="https://bugzilla.suse.com/1204367" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-3709" ref_url="https://www.suse.com/security/cve/CVE-2016-3709/" source="CVE"/>
		<reference ref_id="CVE-2022-40303" ref_url="https://www.suse.com/security/cve/CVE-2022-40303/" source="CVE"/>
		<reference ref_id="CVE-2022-40304" ref_url="https://www.suse.com/security/cve/CVE-2022-40304/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012813.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

  - CVE-2016-3709: Fixed possible XSS vulnerability (bsc#1201978).
  - CVE-2022-40303: Fixed integer overflows with XML_PARSE_HUGE (bsc#1204366).
  - CVE-2022-40304: Fixed dict corruption caused by entity reference cycles (bsc#1204367).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-04"/>
	<updated date="2022-11-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201978">SUSE bug 1201978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204366">SUSE bug 1204366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204367">SUSE bug 1204367</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-3709/">CVE-2016-3709</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-40303/">CVE-2022-40303</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40304/">CVE-2022-40304</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718902" comment="libxml2-2-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718903" comment="libxml2-2-32bit-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718904" comment="libxml2-devel-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718905" comment="libxml2-tools-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718906" comment="python2-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718907" comment="python3-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140014" version="1" class="patch">
	<metadata>
		<title>Security update for conmon (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200285" ref_url="https://bugzilla.suse.com/1200285" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1708" ref_url="https://www.suse.com/security/cve/CVE-2022-1708/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012837.html" source="SUSE-SU"/>
		<description>
This update for conmon fixes the following issues:

conmon was updated to 2.1.3:

* Stop using g_unix_signal_add() to avoid threads
* Rename CLI optionlog-size-global-max to log-global-size-max 

Update to version 2.1.2:

* add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 bsc#1200285)
* journald: print tag and name if both are specified
* drop some logs to debug level

Update to version 2.1.0

* logging: buffer partial messages to journald
* exit: close all fds &gt;= 3
* fix: cgroup: Free memory_cgroup_file_path if open fails.
  Call g_free instead of free.

Update to version 2.0.32

* Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
* exit_command: Fix: unset subreaper attribute before running exit command

Update to version 2.0.31
 
* logging: new mode -l passthrough
* ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
* conmon: Fix: free userdata files before exec cleanup

Update to version 2.0.30:

* Remove unreachable code path
* exit: report if the exit command was killed
* exit: fix race zombie reaper
* conn_sock: allow watchdog messages through the notify socket proxy
* seccomp: add support for seccomp notify

Update to version 2.0.29:

* Reset OOM score back to 0 for container runtime
* call functions registered with atexit on SIGTERM
* conn_sock: fix potential segfault

Update to version 2.0.27:

* Add CRI-O integration test GitHub action
* exec: don't fail on EBADFD
* close_fds: fix close of external fds
* Add arm64 static build binary

Update to version 2.0.26:

* conn_sock: do not fail on EAGAIN
* fix segfault from a double freed pointer
* Fix a bug where conmon could never spawn a container, because
  a disagreement between the caller and itself on where the attach
  socket was.
* improve --full-attach to ignore the socket-dir directly. that
  means callers don't need to specify a socket dir at all (and
  can remove it)
* add full-attach option to allow callers to not truncate a very
  long path for the attach socket
* close only opened FDs
* set locale to inherit environment

Update to version 2.0.22:

* added man page
* attach: always chdir
* conn_sock: Explicitly free a heap-allocated string
* refactor I/O and add SD_NOTIFY proxy support

Update to version 2.0.21:

* protect against kill(-1)
* Makefile: enable debuginfo generation
* Remove go.sum file and add go.mod
* Fail if conmon config could not be written
* nix: remove double definition for e2fsprogs
* Speedup static build by utilizing CI cache on `/nix` folder
* Fix nix build for failing e2fsprogs tests
* test: fix CI
* Use Podman for building
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1200285">SUSE bug 1200285</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1708/">CVE-2022-1708</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715850" comment="conmon-2.1.3-150100.3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140015" version="1" class="patch">
	<metadata>
		<title>Security update for sendmail (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202937" ref_url="https://bugzilla.suse.com/1202937" source="BUGZILLA"/>
		<reference ref_id="1204696" ref_url="https://bugzilla.suse.com/1204696" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31256" ref_url="https://www.suse.com/security/cve/CVE-2022-31256/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012839.html" source="SUSE-SU"/>
		<description>
This update for sendmail fixes the following issues:

  - CVE-2022-31256: Fixed mail to root privilege escalation via sm-client.pre script (bsc#1204696, bsc#1202937).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202937">SUSE bug 1202937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204696">SUSE bug 1204696</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31256/">CVE-2022-31256</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721900" comment="libmilter1_0-8.15.2-150000.8.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140016" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204708" ref_url="https://bugzilla.suse.com/1204708" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-43680" ref_url="https://www.suse.com/security/cve/CVE-2022-43680/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012847.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

  - CVE-2022-43680: Fixed use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate (bsc#1204708).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204708">SUSE bug 1204708</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43680/">CVE-2022-43680</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721901" comment="expat-2.2.5-150000.3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721902" comment="libexpat-devel-2.2.5-150000.3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721903" comment="libexpat1-2.2.5-150000.3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721891" comment="libexpat1-32bit-2.2.5-150000.3.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140017" version="1" class="patch">
	<metadata>
		<title>Security update for vsftpd (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196918" ref_url="https://bugzilla.suse.com/1196918" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:3914-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/026042.html" source="SUSE-SU"/>
		<description>
This update for vsftpd fixes the following issues:

  Bugfixes:

  - Removed unsupported systemd hardening options (bsc#1196918).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196918">SUSE bug 1196918</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717512" comment="vsftpd-3.0.5-150000.7.22.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140018" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203125" ref_url="https://bugzilla.suse.com/1203125" source="BUGZILLA"/>
		<reference ref_id="1204577" ref_url="https://bugzilla.suse.com/1204577" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10735" ref_url="https://www.suse.com/security/cve/CVE-2020-10735/" source="CVE"/>
		<reference ref_id="CVE-2022-37454" ref_url="https://www.suse.com/security/cve/CVE-2022-37454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3924-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012858.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2022-37454: Fixed a buffer overflow in hashlib.sha3_* implementations. (bsc#1204577)
- CVE-2020-10735: Fixed a bug to limit amount of digits converting text to int and vice vera. (bsc#1203125)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-09"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203125">SUSE bug 1203125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204577">SUSE bug 1204577</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10735/">CVE-2020-10735</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-37454/">CVE-2022-37454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723153" comment="libpython3_6m1_0-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723154" comment="python3-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723155" comment="python3-base-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723156" comment="python3-curses-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723157" comment="python3-dbm-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723158" comment="python3-devel-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723159" comment="python3-idle-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723164" comment="python3-testsuite-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723160" comment="python3-tk-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723161" comment="python3-tools-3.6.15-150000.3.116.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140019" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185104" ref_url="https://bugzilla.suse.com/1185104" source="BUGZILLA"/>
		<reference ref_id="1193923" ref_url="https://bugzilla.suse.com/1193923" source="BUGZILLA"/>
		<reference ref_id="1199966" ref_url="https://bugzilla.suse.com/1199966" source="BUGZILLA"/>
		<reference ref_id="1200762" ref_url="https://bugzilla.suse.com/1200762" source="BUGZILLA"/>
		<reference ref_id="1203806" ref_url="https://bugzilla.suse.com/1203806" source="BUGZILLA"/>
		<reference ref_id="1203807" ref_url="https://bugzilla.suse.com/1203807" source="BUGZILLA"/>
		<reference ref_id="1204482" ref_url="https://bugzilla.suse.com/1204482" source="BUGZILLA"/>
		<reference ref_id="1204485" ref_url="https://bugzilla.suse.com/1204485" source="BUGZILLA"/>
		<reference ref_id="1204487" ref_url="https://bugzilla.suse.com/1204487" source="BUGZILLA"/>
		<reference ref_id="1204488" ref_url="https://bugzilla.suse.com/1204488" source="BUGZILLA"/>
		<reference ref_id="1204489" ref_url="https://bugzilla.suse.com/1204489" source="BUGZILLA"/>
		<reference ref_id="1204490" ref_url="https://bugzilla.suse.com/1204490" source="BUGZILLA"/>
		<reference ref_id="1204494" ref_url="https://bugzilla.suse.com/1204494" source="BUGZILLA"/>
		<reference ref_id="1204496" ref_url="https://bugzilla.suse.com/1204496" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28689" ref_url="https://www.suse.com/security/cve/CVE-2021-28689/" source="CVE"/>
		<reference ref_id="CVE-2022-26365" ref_url="https://www.suse.com/security/cve/CVE-2022-26365/" source="CVE"/>
		<reference ref_id="CVE-2022-33740" ref_url="https://www.suse.com/security/cve/CVE-2022-33740/" source="CVE"/>
		<reference ref_id="CVE-2022-33741" ref_url="https://www.suse.com/security/cve/CVE-2022-33741/" source="CVE"/>
		<reference ref_id="CVE-2022-33742" ref_url="https://www.suse.com/security/cve/CVE-2022-33742/" source="CVE"/>
		<reference ref_id="CVE-2022-33746" ref_url="https://www.suse.com/security/cve/CVE-2022-33746/" source="CVE"/>
		<reference ref_id="CVE-2022-33748" ref_url="https://www.suse.com/security/cve/CVE-2022-33748/" source="CVE"/>
		<reference ref_id="CVE-2022-42309" ref_url="https://www.suse.com/security/cve/CVE-2022-42309/" source="CVE"/>
		<reference ref_id="CVE-2022-42310" ref_url="https://www.suse.com/security/cve/CVE-2022-42310/" source="CVE"/>
		<reference ref_id="CVE-2022-42311" ref_url="https://www.suse.com/security/cve/CVE-2022-42311/" source="CVE"/>
		<reference ref_id="CVE-2022-42312" ref_url="https://www.suse.com/security/cve/CVE-2022-42312/" source="CVE"/>
		<reference ref_id="CVE-2022-42313" ref_url="https://www.suse.com/security/cve/CVE-2022-42313/" source="CVE"/>
		<reference ref_id="CVE-2022-42314" ref_url="https://www.suse.com/security/cve/CVE-2022-42314/" source="CVE"/>
		<reference ref_id="CVE-2022-42315" ref_url="https://www.suse.com/security/cve/CVE-2022-42315/" source="CVE"/>
		<reference ref_id="CVE-2022-42316" ref_url="https://www.suse.com/security/cve/CVE-2022-42316/" source="CVE"/>
		<reference ref_id="CVE-2022-42317" ref_url="https://www.suse.com/security/cve/CVE-2022-42317/" source="CVE"/>
		<reference ref_id="CVE-2022-42318" ref_url="https://www.suse.com/security/cve/CVE-2022-42318/" source="CVE"/>
		<reference ref_id="CVE-2022-42319" ref_url="https://www.suse.com/security/cve/CVE-2022-42319/" source="CVE"/>
		<reference ref_id="CVE-2022-42320" ref_url="https://www.suse.com/security/cve/CVE-2022-42320/" source="CVE"/>
		<reference ref_id="CVE-2022-42321" ref_url="https://www.suse.com/security/cve/CVE-2022-42321/" source="CVE"/>
		<reference ref_id="CVE-2022-42322" ref_url="https://www.suse.com/security/cve/CVE-2022-42322/" source="CVE"/>
		<reference ref_id="CVE-2022-42323" ref_url="https://www.suse.com/security/cve/CVE-2022-42323/" source="CVE"/>
		<reference ref_id="CVE-2022-42325" ref_url="https://www.suse.com/security/cve/CVE-2022-42325/" source="CVE"/>
		<reference ref_id="CVE-2022-42326" ref_url="https://www.suse.com/security/cve/CVE-2022-42326/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012866.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806).
- CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807).
- CVE-2021-28689: Fixed speculative vulnerabilities with bare (non-shim) 32-bit PV guests (bsc#1185104).
- CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let xenstored run out of memory (bsc#1204482)
- CVE-2022-42309: xen: Xenstore: Guests can crash xenstored (bsc#1204485)
- CVE-2022-42310: xen: Xenstore: Guests can create orphaned Xenstore nodes (bsc#1204487)
- CVE-2022-42319: xen: Xenstore: Guests can cause Xenstore to not free temporary memory (bsc#1204488)
- CVE-2022-42320: xen: Xenstore: Guests can get access to Xenstore nodes of deleted domains (bsc#1204489)
- CVE-2022-42321: xen: Xenstore: Guests can crash xenstored via exhausting the stack (bsc#1204490)
- CVE-2022-42322,CVE-2022-42323: xen: Xenstore: cooperating guests can create arbitrary numbers of nodes (bsc#1204494)
- CVE-2022-42325,CVE-2022-42326: xen: Xenstore: Guests can create arbitray number of nodes via transactions (bsc#1204496)
- CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings (bsc#1199966).
- CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742: xen: Linux disk/nic frontends data leaks (bsc#1200762).
- xen: Frontends vulnerable to backends (bsc#1193923).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-10"/>
	<updated date="2022-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185104">SUSE bug 1185104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193923">SUSE bug 1193923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199966">SUSE bug 1199966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200762">SUSE bug 1200762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203806">SUSE bug 1203806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203807">SUSE bug 1203807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204482">SUSE bug 1204482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204485">SUSE bug 1204485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204487">SUSE bug 1204487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204488">SUSE bug 1204488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204489">SUSE bug 1204489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204490">SUSE bug 1204490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204494">SUSE bug 1204494</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204496">SUSE bug 1204496</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28689/">CVE-2021-28689</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-26365/">CVE-2022-26365</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33740/">CVE-2022-33740</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33741/">CVE-2022-33741</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33742/">CVE-2022-33742</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-33746/">CVE-2022-33746</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-33748/">CVE-2022-33748</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42309/">CVE-2022-42309</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42310/">CVE-2022-42310</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42311/">CVE-2022-42311</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42312/">CVE-2022-42312</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42313/">CVE-2022-42313</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42314/">CVE-2022-42314</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42315/">CVE-2022-42315</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42316/">CVE-2022-42316</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42317/">CVE-2022-42317</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42318/">CVE-2022-42318</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42319/">CVE-2022-42319</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42320/">CVE-2022-42320</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42321/">CVE-2022-42321</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42322/">CVE-2022-42322</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42323/">CVE-2022-42323</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42325/">CVE-2022-42325</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42326/">CVE-2022-42326</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724683" comment="xen-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724684" comment="xen-devel-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724685" comment="xen-libs-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724686" comment="xen-tools-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724687" comment="xen-tools-domU-4.12.4_30-150100.3.80.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140020" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204986" ref_url="https://bugzilla.suse.com/1204986" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-43995" ref_url="https://www.suse.com/security/cve/CVE-2022-43995/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012873.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:
  
- CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt() password backend (bsc#1204986).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-10"/>
	<updated date="2022-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204986">SUSE bug 1204986</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-43995/">CVE-2022-43995</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723162" comment="sudo-1.8.27-150000.4.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723163" comment="sudo-devel-1.8.27-150000.4.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140021" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204577" ref_url="https://bugzilla.suse.com/1204577" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-9253" ref_url="https://www.suse.com/security/cve/CVE-2015-9253/" source="CVE"/>
		<reference ref_id="CVE-2017-8923" ref_url="https://www.suse.com/security/cve/CVE-2017-8923/" source="CVE"/>
		<reference ref_id="CVE-2017-9120" ref_url="https://www.suse.com/security/cve/CVE-2017-9120/" source="CVE"/>
		<reference ref_id="CVE-2018-1000222" ref_url="https://www.suse.com/security/cve/CVE-2018-1000222/" source="CVE"/>
		<reference ref_id="CVE-2018-12882" ref_url="https://www.suse.com/security/cve/CVE-2018-12882/" source="CVE"/>
		<reference ref_id="CVE-2018-14851" ref_url="https://www.suse.com/security/cve/CVE-2018-14851/" source="CVE"/>
		<reference ref_id="CVE-2018-17082" ref_url="https://www.suse.com/security/cve/CVE-2018-17082/" source="CVE"/>
		<reference ref_id="CVE-2018-19935" ref_url="https://www.suse.com/security/cve/CVE-2018-19935/" source="CVE"/>
		<reference ref_id="CVE-2018-20783" ref_url="https://www.suse.com/security/cve/CVE-2018-20783/" source="CVE"/>
		<reference ref_id="CVE-2019-11034" ref_url="https://www.suse.com/security/cve/CVE-2019-11034/" source="CVE"/>
		<reference ref_id="CVE-2019-11035" ref_url="https://www.suse.com/security/cve/CVE-2019-11035/" source="CVE"/>
		<reference ref_id="CVE-2019-11036" ref_url="https://www.suse.com/security/cve/CVE-2019-11036/" source="CVE"/>
		<reference ref_id="CVE-2019-11039" ref_url="https://www.suse.com/security/cve/CVE-2019-11039/" source="CVE"/>
		<reference ref_id="CVE-2019-11040" ref_url="https://www.suse.com/security/cve/CVE-2019-11040/" source="CVE"/>
		<reference ref_id="CVE-2019-11041" ref_url="https://www.suse.com/security/cve/CVE-2019-11041/" source="CVE"/>
		<reference ref_id="CVE-2019-11042" ref_url="https://www.suse.com/security/cve/CVE-2019-11042/" source="CVE"/>
		<reference ref_id="CVE-2019-11043" ref_url="https://www.suse.com/security/cve/CVE-2019-11043/" source="CVE"/>
		<reference ref_id="CVE-2019-11045" ref_url="https://www.suse.com/security/cve/CVE-2019-11045/" source="CVE"/>
		<reference ref_id="CVE-2019-11046" ref_url="https://www.suse.com/security/cve/CVE-2019-11046/" source="CVE"/>
		<reference ref_id="CVE-2019-11047" ref_url="https://www.suse.com/security/cve/CVE-2019-11047/" source="CVE"/>
		<reference ref_id="CVE-2019-11048" ref_url="https://www.suse.com/security/cve/CVE-2019-11048/" source="CVE"/>
		<reference ref_id="CVE-2019-11050" ref_url="https://www.suse.com/security/cve/CVE-2019-11050/" source="CVE"/>
		<reference ref_id="CVE-2019-9020" ref_url="https://www.suse.com/security/cve/CVE-2019-9020/" source="CVE"/>
		<reference ref_id="CVE-2019-9021" ref_url="https://www.suse.com/security/cve/CVE-2019-9021/" source="CVE"/>
		<reference ref_id="CVE-2019-9022" ref_url="https://www.suse.com/security/cve/CVE-2019-9022/" source="CVE"/>
		<reference ref_id="CVE-2019-9023" ref_url="https://www.suse.com/security/cve/CVE-2019-9023/" source="CVE"/>
		<reference ref_id="CVE-2019-9024" ref_url="https://www.suse.com/security/cve/CVE-2019-9024/" source="CVE"/>
		<reference ref_id="CVE-2019-9637" ref_url="https://www.suse.com/security/cve/CVE-2019-9637/" source="CVE"/>
		<reference ref_id="CVE-2019-9638" ref_url="https://www.suse.com/security/cve/CVE-2019-9638/" source="CVE"/>
		<reference ref_id="CVE-2019-9640" ref_url="https://www.suse.com/security/cve/CVE-2019-9640/" source="CVE"/>
		<reference ref_id="CVE-2019-9641" ref_url="https://www.suse.com/security/cve/CVE-2019-9641/" source="CVE"/>
		<reference ref_id="CVE-2019-9675" ref_url="https://www.suse.com/security/cve/CVE-2019-9675/" source="CVE"/>
		<reference ref_id="CVE-2020-7059" ref_url="https://www.suse.com/security/cve/CVE-2020-7059/" source="CVE"/>
		<reference ref_id="CVE-2020-7060" ref_url="https://www.suse.com/security/cve/CVE-2020-7060/" source="CVE"/>
		<reference ref_id="CVE-2020-7062" ref_url="https://www.suse.com/security/cve/CVE-2020-7062/" source="CVE"/>
		<reference ref_id="CVE-2020-7063" ref_url="https://www.suse.com/security/cve/CVE-2020-7063/" source="CVE"/>
		<reference ref_id="CVE-2020-7064" ref_url="https://www.suse.com/security/cve/CVE-2020-7064/" source="CVE"/>
		<reference ref_id="CVE-2020-7066" ref_url="https://www.suse.com/security/cve/CVE-2020-7066/" source="CVE"/>
		<reference ref_id="CVE-2020-7068" ref_url="https://www.suse.com/security/cve/CVE-2020-7068/" source="CVE"/>
		<reference ref_id="CVE-2020-7069" ref_url="https://www.suse.com/security/cve/CVE-2020-7069/" source="CVE"/>
		<reference ref_id="CVE-2020-7070" ref_url="https://www.suse.com/security/cve/CVE-2020-7070/" source="CVE"/>
		<reference ref_id="CVE-2020-7071" ref_url="https://www.suse.com/security/cve/CVE-2020-7071/" source="CVE"/>
		<reference ref_id="CVE-2021-21702" ref_url="https://www.suse.com/security/cve/CVE-2021-21702/" source="CVE"/>
		<reference ref_id="CVE-2021-21703" ref_url="https://www.suse.com/security/cve/CVE-2021-21703/" source="CVE"/>
		<reference ref_id="CVE-2021-21704" ref_url="https://www.suse.com/security/cve/CVE-2021-21704/" source="CVE"/>
		<reference ref_id="CVE-2021-21705" ref_url="https://www.suse.com/security/cve/CVE-2021-21705/" source="CVE"/>
		<reference ref_id="CVE-2021-21707" ref_url="https://www.suse.com/security/cve/CVE-2021-21707/" source="CVE"/>
		<reference ref_id="CVE-2022-31625" ref_url="https://www.suse.com/security/cve/CVE-2022-31625/" source="CVE"/>
		<reference ref_id="CVE-2022-31626" ref_url="https://www.suse.com/security/cve/CVE-2022-31626/" source="CVE"/>
		<reference ref_id="CVE-2022-31628" ref_url="https://www.suse.com/security/cve/CVE-2022-31628/" source="CVE"/>
		<reference ref_id="CVE-2022-31629" ref_url="https://www.suse.com/security/cve/CVE-2022-31629/" source="CVE"/>
		<reference ref_id="CVE-2022-37454" ref_url="https://www.suse.com/security/cve/CVE-2022-37454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- Version update to 7.2.34 [jsc#SLE-23639]

- CVE-2022-37454: Fixed SHA-3 buffer overflow (bsc#1204577).
- Fix integer overflow in PHP_SHA3##bits (bsc#1204577#c26).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204577">SUSE bug 1204577</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9253/">CVE-2015-9253</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8923/">CVE-2017-8923</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9120/">CVE-2017-9120</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000222/">CVE-2018-1000222</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12882/">CVE-2018-12882</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14851/">CVE-2018-14851</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-17082/">CVE-2018-17082</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19935/">CVE-2018-19935</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20783/">CVE-2018-20783</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11034/">CVE-2019-11034</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11035/">CVE-2019-11035</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11036/">CVE-2019-11036</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11039/">CVE-2019-11039</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11040/">CVE-2019-11040</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11041/">CVE-2019-11041</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11042/">CVE-2019-11042</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11043/">CVE-2019-11043</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11045/">CVE-2019-11045</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11046/">CVE-2019-11046</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11047/">CVE-2019-11047</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11048/">CVE-2019-11048</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11050/">CVE-2019-11050</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9020/">CVE-2019-9020</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9021/">CVE-2019-9021</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9022/">CVE-2019-9022</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9023/">CVE-2019-9023</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9024/">CVE-2019-9024</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9637/">CVE-2019-9637</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9638/">CVE-2019-9638</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9640/">CVE-2019-9640</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9641/">CVE-2019-9641</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9675/">CVE-2019-9675</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7059/">CVE-2020-7059</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-7060/">CVE-2020-7060</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7062/">CVE-2020-7062</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7063/">CVE-2020-7063</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7064/">CVE-2020-7064</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7066/">CVE-2020-7066</cve>
	<cve impact="moderate" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7068/">CVE-2020-7068</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-7069/">CVE-2020-7069</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-7070/">CVE-2020-7070</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-7071/">CVE-2020-7071</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21702/">CVE-2021-21702</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21703/">CVE-2021-21703</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21704/">CVE-2021-21704</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21705/">CVE-2021-21705</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21707/">CVE-2021-21707</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31625/">CVE-2022-31625</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31626/">CVE-2022-31626</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-31628/">CVE-2022-31628</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-31629/">CVE-2022-31629</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-37454/">CVE-2022-37454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723738" comment="apache2-mod_php7-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723739" comment="php7-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723740" comment="php7-bcmath-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723741" comment="php7-bz2-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723742" comment="php7-calendar-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723743" comment="php7-ctype-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723744" comment="php7-curl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723745" comment="php7-dba-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723746" comment="php7-devel-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723747" comment="php7-dom-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723748" comment="php7-enchant-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723749" comment="php7-exif-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723750" comment="php7-fastcgi-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723751" comment="php7-fileinfo-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723752" comment="php7-fpm-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723753" comment="php7-ftp-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723754" comment="php7-gd-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723755" comment="php7-gettext-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723756" comment="php7-gmp-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723757" comment="php7-iconv-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723758" comment="php7-intl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723759" comment="php7-json-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723760" comment="php7-ldap-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723761" comment="php7-mbstring-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723762" comment="php7-mysql-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723763" comment="php7-odbc-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723764" comment="php7-opcache-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723765" comment="php7-openssl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723766" comment="php7-pcntl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723767" comment="php7-pdo-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723768" comment="php7-pear-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723769" comment="php7-pear-Archive_Tar-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723770" comment="php7-pgsql-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723771" comment="php7-phar-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723772" comment="php7-posix-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723773" comment="php7-readline-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723774" comment="php7-shmop-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723775" comment="php7-snmp-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723776" comment="php7-soap-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723777" comment="php7-sockets-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723778" comment="php7-sodium-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723779" comment="php7-sqlite-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723780" comment="php7-sysvmsg-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723781" comment="php7-sysvsem-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723782" comment="php7-sysvshm-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723791" comment="php7-tidy-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723783" comment="php7-tokenizer-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723784" comment="php7-wddx-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723785" comment="php7-xmlreader-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723786" comment="php7-xmlrpc-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723787" comment="php7-xmlwriter-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723788" comment="php7-xsl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723789" comment="php7-zip-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723790" comment="php7-zlib-7.2.34-150000.4.103.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140022" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203476" ref_url="https://bugzilla.suse.com/1203476" source="BUGZILLA"/>
		<reference ref_id="1204468" ref_url="https://bugzilla.suse.com/1204468" source="BUGZILLA"/>
		<reference ref_id="1204471" ref_url="https://bugzilla.suse.com/1204471" source="BUGZILLA"/>
		<reference ref_id="1204472" ref_url="https://bugzilla.suse.com/1204472" source="BUGZILLA"/>
		<reference ref_id="1204473" ref_url="https://bugzilla.suse.com/1204473" source="BUGZILLA"/>
		<reference ref_id="1204475" ref_url="https://bugzilla.suse.com/1204475" source="BUGZILLA"/>
		<reference ref_id="1204480" ref_url="https://bugzilla.suse.com/1204480" source="BUGZILLA"/>
		<reference ref_id="1204523" ref_url="https://bugzilla.suse.com/1204523" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21618" ref_url="https://www.suse.com/security/cve/CVE-2022-21618/" source="CVE"/>
		<reference ref_id="CVE-2022-21619" ref_url="https://www.suse.com/security/cve/CVE-2022-21619/" source="CVE"/>
		<reference ref_id="CVE-2022-21624" ref_url="https://www.suse.com/security/cve/CVE-2022-21624/" source="CVE"/>
		<reference ref_id="CVE-2022-21626" ref_url="https://www.suse.com/security/cve/CVE-2022-21626/" source="CVE"/>
		<reference ref_id="CVE-2022-21628" ref_url="https://www.suse.com/security/cve/CVE-2022-21628/" source="CVE"/>
		<reference ref_id="CVE-2022-39399" ref_url="https://www.suse.com/security/cve/CVE-2022-39399/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012996.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to jdk-11.0.17+8 (October 2022 CPU)
- CVE-2022-39399: Improve HTTP/2 client usage(bsc#1204480)
- CVE-2022-21628: Better HttpServer service (bsc#1204472)
- CVE-2022-21624: Enhance icon presentations (bsc#1204475)
- CVE-2022-21619: Improve NTLM support (bsc#1204473)
- CVE-2022-21626: Key X509 usages (bsc#1204471)
- CVE-2022-21618: Wider MultiByte (bsc#1204468)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1203476">SUSE bug 1203476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204468">SUSE bug 1204468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204471">SUSE bug 1204471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204472">SUSE bug 1204472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204473">SUSE bug 1204473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204475">SUSE bug 1204475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204480">SUSE bug 1204480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204523">SUSE bug 1204523</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21618/">CVE-2022-21618</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21619/">CVE-2022-21619</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21624/">CVE-2022-21624</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21626/">CVE-2022-21626</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21628/">CVE-2022-21628</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-39399/">CVE-2022-39399</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721025" comment="java-11-openjdk-11.0.17.0-150000.3.86.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721026" comment="java-11-openjdk-demo-11.0.17.0-150000.3.86.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721027" comment="java-11-openjdk-devel-11.0.17.0-150000.3.86.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721028" comment="java-11-openjdk-headless-11.0.17.0-150000.3.86.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140023" version="1" class="patch">
	<metadata>
		<title>Security update for dpkg (Low)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199944" ref_url="https://bugzilla.suse.com/1199944" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1664" ref_url="https://www.suse.com/security/cve/CVE-2022-1664/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012992.html" source="SUSE-SU"/>
		<description>
This update for dpkg fixes the following issues:

- CVE-2022-1664: Fixed a directory traversal vulnerability in Dpkg::Source::Archive (bsc#1199944).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1199944">SUSE bug 1199944</bugzilla>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1664/">CVE-2022-1664</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723150" comment="dpkg-1.19.0.4-150000.4.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723151" comment="dpkg-devel-1.19.0.4-150000.4.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723152" comment="update-alternatives-1.19.0.4-150000.4.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140024" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205270" ref_url="https://bugzilla.suse.com/1205270" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45403" ref_url="https://www.suse.com/security/cve/CVE-2022-45403/" source="CVE"/>
		<reference ref_id="CVE-2022-45404" ref_url="https://www.suse.com/security/cve/CVE-2022-45404/" source="CVE"/>
		<reference ref_id="CVE-2022-45405" ref_url="https://www.suse.com/security/cve/CVE-2022-45405/" source="CVE"/>
		<reference ref_id="CVE-2022-45406" ref_url="https://www.suse.com/security/cve/CVE-2022-45406/" source="CVE"/>
		<reference ref_id="CVE-2022-45408" ref_url="https://www.suse.com/security/cve/CVE-2022-45408/" source="CVE"/>
		<reference ref_id="CVE-2022-45409" ref_url="https://www.suse.com/security/cve/CVE-2022-45409/" source="CVE"/>
		<reference ref_id="CVE-2022-45410" ref_url="https://www.suse.com/security/cve/CVE-2022-45410/" source="CVE"/>
		<reference ref_id="CVE-2022-45411" ref_url="https://www.suse.com/security/cve/CVE-2022-45411/" source="CVE"/>
		<reference ref_id="CVE-2022-45412" ref_url="https://www.suse.com/security/cve/CVE-2022-45412/" source="CVE"/>
		<reference ref_id="CVE-2022-45416" ref_url="https://www.suse.com/security/cve/CVE-2022-45416/" source="CVE"/>
		<reference ref_id="CVE-2022-45418" ref_url="https://www.suse.com/security/cve/CVE-2022-45418/" source="CVE"/>
		<reference ref_id="CVE-2022-45420" ref_url="https://www.suse.com/security/cve/CVE-2022-45420/" source="CVE"/>
		<reference ref_id="CVE-2022-45421" ref_url="https://www.suse.com/security/cve/CVE-2022-45421/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012997.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 102.5.0 ESR (MFSA 2022-48, bsc#1205270):

- CVE-2022-45403: Service Workers might have learned size of cross-origin media files
- CVE-2022-45404: Fullscreen notification bypass
- CVE-2022-45405: Use-after-free in InputStream implementation
- CVE-2022-45406: Use-after-free of a JavaScript Realm
- CVE-2022-45408: Fullscreen notification bypass via windowName
- CVE-2022-45409: Use-after-free in Garbage Collection
- CVE-2022-45410: ServiceWorker-intercepted requests bypassed SameSite cookie policy
- CVE-2022-45411: Cross-Site Tracing was possible via non-standard override headers
- CVE-2022-45412: Symlinks may resolve to partially uninitialized buffers
- CVE-2022-45416: Keystroke Side-Channel Leakage
- CVE-2022-45418: Custom mouse cursor could have been drawn over browser UI
- CVE-2022-45420: Iframe contents could be rendered outside the iframe
- CVE-2022-45421: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205270">SUSE bug 1205270</bugzilla>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-45403/">CVE-2022-45403</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45404/">CVE-2022-45404</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45405/">CVE-2022-45405</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45406/">CVE-2022-45406</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45408/">CVE-2022-45408</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45409/">CVE-2022-45409</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45410/">CVE-2022-45410</cve>
	<cve impact="critical" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-45411/">CVE-2022-45411</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45412/">CVE-2022-45412</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-45416/">CVE-2022-45416</cve>
	<cve impact="critical" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-45418/">CVE-2022-45418</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45420/">CVE-2022-45420</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45421/">CVE-2022-45421</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724967" comment="MozillaFirefox-102.5.0-150000.150.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724968" comment="MozillaFirefox-devel-102.5.0-150000.150.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724969" comment="MozillaFirefox-translations-common-102.5.0-150000.150.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724970" comment="MozillaFirefox-translations-other-102.5.0-150000.150.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140025" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205178" ref_url="https://bugzilla.suse.com/1205178" source="BUGZILLA"/>
		<reference ref_id="1205182" ref_url="https://bugzilla.suse.com/1205182" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2601" ref_url="https://www.suse.com/security/cve/CVE-2022-2601/" source="CVE"/>
		<reference ref_id="CVE-2022-3775" ref_url="https://www.suse.com/security/cve/CVE-2022-3775/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013044.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

Security Fixes:
    
- CVE-2022-2601: Fixed buffer overflow in grub_font_construct_glyph (bsc#1205178).
- CVE-2022-3775: Fixed integer underflow in blit_comb() (bsc#1205182).
    
Other:

- Bump upstream SBAT generation to 3
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205178">SUSE bug 1205178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205182">SUSE bug 1205182</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2601/">CVE-2022-2601</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3775/">CVE-2022-3775</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726257" comment="grub2-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726258" comment="grub2-arm64-efi-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726259" comment="grub2-i386-pc-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726260" comment="grub2-snapper-plugin-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726261" comment="grub2-systemd-sleep-plugin-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726262" comment="grub2-x86_64-efi-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726263" comment="grub2-x86_64-xen-2.02-150100.123.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140026" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1142579" ref_url="https://bugzilla.suse.com/1142579" source="BUGZILLA"/>
		<reference ref_id="1185597" ref_url="https://bugzilla.suse.com/1185597" source="BUGZILLA"/>
		<reference ref_id="1185712" ref_url="https://bugzilla.suse.com/1185712" source="BUGZILLA"/>
		<reference ref_id="1188374" ref_url="https://bugzilla.suse.com/1188374" source="BUGZILLA"/>
		<reference ref_id="1191473" ref_url="https://bugzilla.suse.com/1191473" source="BUGZILLA"/>
		<reference ref_id="1193929" ref_url="https://bugzilla.suse.com/1193929" source="BUGZILLA"/>
		<reference ref_id="1194783" ref_url="https://bugzilla.suse.com/1194783" source="BUGZILLA"/>
		<reference ref_id="1197592" ref_url="https://bugzilla.suse.com/1197592" source="BUGZILLA"/>
		<reference ref_id="1198237" ref_url="https://bugzilla.suse.com/1198237" source="BUGZILLA"/>
		<reference ref_id="1202816" ref_url="https://bugzilla.suse.com/1202816" source="BUGZILLA"/>
		<reference ref_id="1202966" ref_url="https://bugzilla.suse.com/1202966" source="BUGZILLA"/>
		<reference ref_id="1202967" ref_url="https://bugzilla.suse.com/1202967" source="BUGZILLA"/>
		<reference ref_id="1202969" ref_url="https://bugzilla.suse.com/1202969" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1010204" ref_url="https://www.suse.com/security/cve/CVE-2019-1010204/" source="CVE"/>
		<reference ref_id="CVE-2021-3530" ref_url="https://www.suse.com/security/cve/CVE-2021-3530/" source="CVE"/>
		<reference ref_id="CVE-2021-3648" ref_url="https://www.suse.com/security/cve/CVE-2021-3648/" source="CVE"/>
		<reference ref_id="CVE-2021-3826" ref_url="https://www.suse.com/security/cve/CVE-2021-3826/" source="CVE"/>
		<reference ref_id="CVE-2021-45078" ref_url="https://www.suse.com/security/cve/CVE-2021-45078/" source="CVE"/>
		<reference ref_id="CVE-2021-46195" ref_url="https://www.suse.com/security/cve/CVE-2021-46195/" source="CVE"/>
		<reference ref_id="CVE-2022-27943" ref_url="https://www.suse.com/security/cve/CVE-2022-27943/" source="CVE"/>
		<reference ref_id="CVE-2022-38126" ref_url="https://www.suse.com/security/cve/CVE-2022-38126/" source="CVE"/>
		<reference ref_id="CVE-2022-38127" ref_url="https://www.suse.com/security/cve/CVE-2022-38127/" source="CVE"/>
		<reference ref_id="CVE-2022-38533" ref_url="https://www.suse.com/security/cve/CVE-2022-38533/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013047.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

The following security bugs were fixed:

- CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579).
- CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-demangle.c (bsc#1185597).
- CVE-2021-3648: Fixed infinite loop while demangling rust symbols (bsc#1188374).
- CVE-2021-3826: Fixed heap/stack buffer overflow in the dlang_lname function in d-demangle.c (bsc#1202969).
- CVE-2021-45078: Fixed out-of-bounds write in stab_xcoff_builtin_type() in stabs.c (bsc#1193929).
- CVE-2021-46195: Fixed uncontrolled recursion in libiberty/rust-demangle.c (bsc#1194783).
- CVE-2022-27943: Fixed stack exhaustion in demangle_const in (bsc#1197592).
- CVE-2022-38126: Fixed assertion fail in the display_debug_names() function in binutils/dwarf.c (bsc#1202966).
- CVE-2022-38127: Fixed NULL pointer dereference in the read_and_display_attr_value() function in binutils/dwarf.c (bsc#1202967).
- CVE-2022-38533: Fixed heap out-of-bounds read in bfd_getl32 (bsc#1202816).


The following non-security bugs were fixed:
  
- SLE toolchain update of binutils, update to 2.39 from 2.37.
- Update to 2.39:  
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification. 
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
    --weaken-symbols options now works with unique symbols as well.

- Update to 2.38:
  * elfedit: Add --output-abiversion option to update ABIVERSION.
  * Add support for the LoongArch instruction set.
  * Tools which display symbols or strings (readelf, strings, nm, objdump)
    have a new command line option which controls how unicode characters are
    handled.  By default they are treated as normal for the tool.  Using
    --unicode=locale will display them according to the current locale.
    Using --unicode=hex will display them as hex byte values, whilst
    --unicode=escape will display them as escape sequences.  In addition
    using --unicode=highlight will display them as unicode escape sequences
    highlighted in red (if supported by the output device).
  * readelf -r dumps RELR relative relocations now.
  * Support for efi-app-aarch64, efi-rtdrv-aarch64 and efi-bsdrv-aarch64 has been
    added to objcopy in order to enable UEFI development using binutils.
  * ar: Add --thin for creating thin archives. -T is a deprecated alias without
    diagnostics. In many ar implementations -T has a different meaning, as
    specified by X/Open System Interface.
  * Add support for AArch64 system registers that were missing in previous
    releases.
  * Add support for the LoongArch instruction set.
  * Add a command-line option, -muse-unaligned-vector-move, for x86 target
    to encode aligned vector move as unaligned vector move.
  * Add support for Cortex-R52+ for Arm.
  * Add support for Cortex-A510, Cortex-A710, Cortex-X2 for AArch64.
  * Add support for Cortex-A710 for Arm.
  * Add support for Scalable Matrix Extension (SME) for AArch64.
  * The --multibyte-handling=[allow|warn|warn-sym-only] option tells the
    assembler what to when it encoutners multibyte characters in the input.  The
    default is to allow them.  Setting the option to 'warn' will generate a
    warning message whenever any multibyte character is encountered.  Using the
    option to 'warn-sym-only' will make the assembler generate a warning whenever a
    symbol is defined containing multibyte characters.  (References to undefined
    symbols will not generate warnings).
  * Outputs of .ds.x directive and .tfloat directive with hex input from
    x86 assembler have been reduced from 12 bytes to 10 bytes to match the
    output of .tfloat directive.
  * Add support for 'armv8.8-a', 'armv9-a', 'armv9.1-a', 'armv9.2-a' and
    'armv9.3-a' for -march in AArch64 GAS.
  * Add support for 'armv8.7-a', 'armv8.8-a', 'armv9-a', 'armv9.1-a',
    'armv9.2-a' and 'armv9.3-a' for -march in Arm GAS.
  * Add support for Intel AVX512_FP16 instructions.
  * Add -z pack-relative-relocs/-z no pack-relative-relocs to x86 ELF
    linker to pack relative relocations in the DT_RELR section.
  * Add support for the LoongArch architecture.
  * Add -z indirect-extern-access/-z noindirect-extern-access to x86 ELF
    linker to control canonical function pointers and copy relocation.
  * Add --max-cache-size=SIZE to set the the maximum cache size to SIZE
    bytes.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.
- Include recognition of 'z16' name for 'arch14' on s390. (bsc#1198237).
- Add back fix for bsc#1191473, which got lost in the update to 2.38.
- Install symlinks for all target specific tools on arm-eabi-none (bsc#1185712).
- Enable PRU architecture for AM335x CPU (Beagle Bone Black board)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1142579">SUSE bug 1142579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185597">SUSE bug 1185597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185712">SUSE bug 1185712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188374">SUSE bug 1188374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191473">SUSE bug 1191473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193929">SUSE bug 1193929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194783">SUSE bug 1194783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197592">SUSE bug 1197592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198237">SUSE bug 1198237</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202816">SUSE bug 1202816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202966">SUSE bug 1202966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202967">SUSE bug 1202967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202969">SUSE bug 1202969</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1010204/">CVE-2019-1010204</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3530/">CVE-2021-3530</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3648/">CVE-2021-3648</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-3826/">CVE-2021-3826</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-45078/">CVE-2021-45078</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46195/">CVE-2021-46195</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27943/">CVE-2022-27943</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38126/">CVE-2022-38126</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38127/">CVE-2022-38127</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-38533/">CVE-2022-38533</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723165" comment="binutils-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723166" comment="binutils-devel-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723073" comment="binutils-devel-32bit-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723167" comment="libctf-nobfd0-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723168" comment="libctf0-2.39-150100.7.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140027" version="1" class="patch">
	<metadata>
		<title>Security update for pixman (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205033" ref_url="https://bugzilla.suse.com/1205033" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-44638" ref_url="https://www.suse.com/security/cve/CVE-2022-44638/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013043.html" source="SUSE-SU"/>
		<description>
This update for pixman fixes the following issues:

- CVE-2022-44638: Fixed an integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (bsc#1205033).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205033">SUSE bug 1205033</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-44638/">CVE-2022-44638</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724965" comment="libpixman-1-0-0.34.0-150000.7.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724872" comment="libpixman-1-0-32bit-0.34.0-150000.7.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724966" comment="libpixman-1-0-devel-0.34.0-150000.7.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140028" version="1" class="patch">
	<metadata>
		<title>Security update for krb5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205126" ref_url="https://bugzilla.suse.com/1205126" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42898" ref_url="https://www.suse.com/security/cve/CVE-2022-42898/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013049.html" source="SUSE-SU"/>
		<description>
This update for krb5 fixes the following issues:

- CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205126">SUSE bug 1205126</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-42898/">CVE-2022-42898</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726264" comment="krb5-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726265" comment="krb5-32bit-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726266" comment="krb5-client-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726267" comment="krb5-devel-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726268" comment="krb5-plugin-kdb-ldap-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726269" comment="krb5-plugin-preauth-otp-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726270" comment="krb5-plugin-preauth-pkinit-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726271" comment="krb5-server-1.16.3-150100.3.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140029" version="1" class="patch">
	<metadata>
		<title>Security update for ganglia-web (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1160761" ref_url="https://bugzilla.suse.com/1160761" source="BUGZILLA"/>
		<reference ref_id="1179835" ref_url="https://bugzilla.suse.com/1179835" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20378" ref_url="https://www.suse.com/security/cve/CVE-2019-20378/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4244-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013124.html" source="SUSE-SU"/>
		<description>
This update for ganglia-web fixes the following issues:

- updated to 3.7.5 which fixes (bsc#1179835)
- CVE-2019-20378: Fixed a possible XSS via ce and cs parameters in header.php (bsc#1160761).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160761">SUSE bug 1160761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179835">SUSE bug 1179835</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-20378/">CVE-2019-20378</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009722279" comment="ganglia-web-3.7.5-150000.4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140030" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203868" ref_url="https://bugzilla.suse.com/1203868" source="BUGZILLA"/>
		<reference ref_id="1204918" ref_url="https://bugzilla.suse.com/1204918" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43980" ref_url="https://www.suse.com/security/cve/CVE-2021-43980/" source="CVE"/>
		<reference ref_id="CVE-2022-42252" ref_url="https://www.suse.com/security/cve/CVE-2022-42252/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4257-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013132.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2021-43980: Fixed information disclosure due to concurrency issues in Http11Processor (bsc#1203868).
- CVE-2022-42252: Fixed a request smuggling (bsc#1204918).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203868">SUSE bug 1203868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204918">SUSE bug 1204918</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-43980/">CVE-2021-43980</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42252/">CVE-2022-42252</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726519" comment="tomcat-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726520" comment="tomcat-admin-webapps-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726521" comment="tomcat-el-3_0-api-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726522" comment="tomcat-jsp-2_3-api-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726523" comment="tomcat-lib-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726524" comment="tomcat-servlet-4_0-api-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726525" comment="tomcat-webapps-9.0.36-150100.4.81.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140031" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205244" ref_url="https://bugzilla.suse.com/1205244" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45061" ref_url="https://www.suse.com/security/cve/CVE-2022-45061/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4258-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013134.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2022-45061: Fixed possible DoS when IDNA decoding extremely long domain names (bsc#1205244).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205244">SUSE bug 1205244</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45061/">CVE-2022-45061</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724956" comment="libpython3_6m1_0-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724957" comment="python3-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724958" comment="python3-base-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724959" comment="python3-curses-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724960" comment="python3-dbm-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724961" comment="python3-devel-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724962" comment="python3-idle-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724971" comment="python3-testsuite-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724963" comment="python3-tk-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724964" comment="python3-tools-3.6.15-150000.3.119.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140032" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204641" ref_url="https://bugzilla.suse.com/1204641" source="BUGZILLA"/>
		<reference ref_id="1204643" ref_url="https://bugzilla.suse.com/1204643" source="BUGZILLA"/>
		<reference ref_id="1204644" ref_url="https://bugzilla.suse.com/1204644" source="BUGZILLA"/>
		<reference ref_id="1204645" ref_url="https://bugzilla.suse.com/1204645" source="BUGZILLA"/>
		<reference ref_id="1205392" ref_url="https://bugzilla.suse.com/1205392" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3597" ref_url="https://www.suse.com/security/cve/CVE-2022-3597/" source="CVE"/>
		<reference ref_id="CVE-2022-3599" ref_url="https://www.suse.com/security/cve/CVE-2022-3599/" source="CVE"/>
		<reference ref_id="CVE-2022-3626" ref_url="https://www.suse.com/security/cve/CVE-2022-3626/" source="CVE"/>
		<reference ref_id="CVE-2022-3627" ref_url="https://www.suse.com/security/cve/CVE-2022-3627/" source="CVE"/>
		<reference ref_id="CVE-2022-3970" ref_url="https://www.suse.com/security/cve/CVE-2022-3970/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013135.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-3597: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204641).
- CVE-2022-3599: Fixed out-of-bounds read in writeSingleSection in tools/tiffcrop.c (bnc#1204643).
- CVE-2022-3626: Fixed out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (bnc#1204644)
- CVE-2022-3627: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204645).
- CVE-2022-3970: Fixed unsigned integer overflow in TIFFReadRGBATileExt() (bnc#1205392).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204641">SUSE bug 1204641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204643">SUSE bug 1204643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204644">SUSE bug 1204644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204645">SUSE bug 1204645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205392">SUSE bug 1205392</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3597/">CVE-2022-3597</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3599/">CVE-2022-3599</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3626/">CVE-2022-3626</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3627/">CVE-2022-3627</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3970/">CVE-2022-3970</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725555" comment="libtiff-devel-4.0.9-150000.45.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725556" comment="libtiff5-4.0.9-150000.45.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725458" comment="libtiff5-32bit-4.0.9-150000.45.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140033" version="1" class="patch">
	<metadata>
		<title>Security update for busybox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1099260" ref_url="https://bugzilla.suse.com/1099260" source="BUGZILLA"/>
		<reference ref_id="914660" ref_url="https://bugzilla.suse.com/914660" source="BUGZILLA"/>
		<reference ref_id="CVE-2014-9645" ref_url="https://www.suse.com/security/cve/CVE-2014-9645/" source="CVE"/>
		<reference ref_id="CVE-2018-1000517" ref_url="https://www.suse.com/security/cve/CVE-2018-1000517/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013133.html" source="SUSE-SU"/>
		<description>
This update for busybox fixes the following issues:

- CVE-2014-9645: Fixed loading of unwanted module with / in module names (bsc#914660).

- Enable switch_root
  With this change virtme --force-initramfs works as expected.

- Enable udhcpc

Update to 1.35.0:
    
- awk: fix printf %%, fix read beyond end of buffer
- Adjust busybox.config for new features in find, date and cpio 
- chrt: silence analyzer warning
- libarchive: remove duplicate forward declaration
- mount: 'mount -o rw ....' should not fall back to RO mount
- ps: fix -o pid=PID,args interpreting entire 'PID,args' as header
- tar: prevent malicious archives with long name sizes causing OOM
- udhcpc6: fix udhcp_find_option to actually find DHCP6 options
- xxd: fix -p -r
- support for new optoins added to basename, cpio, date, find, 
  mktemp, wget and others

- Adjust busybox.config for new features in find, date and cpio 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1099260">SUSE bug 1099260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914660">SUSE bug 914660</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-9645/">CVE-2014-9645</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000517/">CVE-2018-1000517</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725910" comment="busybox-1.35.0-150000.4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725912" comment="busybox-static-1.35.0-150000.4.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140034" version="1" class="patch">
	<metadata>
		<title>Security update for nginx (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187685" ref_url="https://bugzilla.suse.com/1187685" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3618" ref_url="https://www.suse.com/security/cve/CVE-2021-3618/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013137.html" source="SUSE-SU"/>
		<description>
This update for nginx fixes the following issues:

- CVE-2021-3618: Fixed the ALPACA attack limiting the number of errors after which the connection is closed (bsc#1187685).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187685">SUSE bug 1187685</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3618/">CVE-2021-3618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725915" comment="nginx-1.16.1-150100.6.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725916" comment="nginx-source-1.16.1-150100.6.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140035" version="1" class="patch">
	<metadata>
		<title>Security update for exiv2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1050257" ref_url="https://bugzilla.suse.com/1050257" source="BUGZILLA"/>
		<reference ref_id="1095070" ref_url="https://bugzilla.suse.com/1095070" source="BUGZILLA"/>
		<reference ref_id="1110282" ref_url="https://bugzilla.suse.com/1110282" source="BUGZILLA"/>
		<reference ref_id="1119559" ref_url="https://bugzilla.suse.com/1119559" source="BUGZILLA"/>
		<reference ref_id="1119560" ref_url="https://bugzilla.suse.com/1119560" source="BUGZILLA"/>
		<reference ref_id="1119562" ref_url="https://bugzilla.suse.com/1119562" source="BUGZILLA"/>
		<reference ref_id="1142677" ref_url="https://bugzilla.suse.com/1142677" source="BUGZILLA"/>
		<reference ref_id="1142678" ref_url="https://bugzilla.suse.com/1142678" source="BUGZILLA"/>
		<reference ref_id="1153577" ref_url="https://bugzilla.suse.com/1153577" source="BUGZILLA"/>
		<reference ref_id="1186231" ref_url="https://bugzilla.suse.com/1186231" source="BUGZILLA"/>
		<reference ref_id="1189337" ref_url="https://bugzilla.suse.com/1189337" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-11591" ref_url="https://www.suse.com/security/cve/CVE-2017-11591/" source="CVE"/>
		<reference ref_id="CVE-2018-11531" ref_url="https://www.suse.com/security/cve/CVE-2018-11531/" source="CVE"/>
		<reference ref_id="CVE-2018-17581" ref_url="https://www.suse.com/security/cve/CVE-2018-17581/" source="CVE"/>
		<reference ref_id="CVE-2018-20097" ref_url="https://www.suse.com/security/cve/CVE-2018-20097/" source="CVE"/>
		<reference ref_id="CVE-2018-20098" ref_url="https://www.suse.com/security/cve/CVE-2018-20098/" source="CVE"/>
		<reference ref_id="CVE-2018-20099" ref_url="https://www.suse.com/security/cve/CVE-2018-20099/" source="CVE"/>
		<reference ref_id="CVE-2019-13109" ref_url="https://www.suse.com/security/cve/CVE-2019-13109/" source="CVE"/>
		<reference ref_id="CVE-2019-13110" ref_url="https://www.suse.com/security/cve/CVE-2019-13110/" source="CVE"/>
		<reference ref_id="CVE-2019-17402" ref_url="https://www.suse.com/security/cve/CVE-2019-17402/" source="CVE"/>
		<reference ref_id="CVE-2021-29473" ref_url="https://www.suse.com/security/cve/CVE-2021-29473/" source="CVE"/>
		<reference ref_id="CVE-2021-32815" ref_url="https://www.suse.com/security/cve/CVE-2021-32815/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013143.html" source="SUSE-SU"/>
		<description>
This update for exiv2 fixes the following issues:

- CVE-2019-13110: Fixed an integer-overflow and out-of-bounds read in CiffDirectory:readDirectory leads to denail of service (bsc#1142678).
- CVE-2019-13109: Fixed a denial of service in PngImage:readMetadata (bsc#1142677).
- CVE-2018-17581: Fixed an excessive stack consumption CiffDirectory:readDirectory() at crwimage_int.cpp (bsc#1110282).
- CVE-2017-11591: Fixed a floating point exception in Exiv2::ValueType (bsc#1050257).
- CVE-2019-17402: Fixed an improper validation of the total size to the offset and size leads to a crash in Exiv2::getULong in types.cpp (bsc#1153577).
- CVE-2021-32815: Fixed a deny-of-service due to assertion failure in crwimage_int.cpp (bsc#1189337).
- CVE-2018-20097: Fixed SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroupsu (bsc#1119562).
- CVE-2021-29473: Fixed out-of-bounds read in Exiv2::Jp2Image:doWriteMetadata (bsc#1186231).
- CVE-2018-20098: Fixed a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header (bsc#1119560).
- CVE-2018-11531: Fixed a heap-based buffer overflow in getData in preview.cpp (bsc#1095070).
- CVE-2018-20099: exiv2: infinite loop in Exiv2::Jp2Image::encodeJp2Header (bsc#1119559).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1050257">SUSE bug 1050257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095070">SUSE bug 1095070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110282">SUSE bug 1110282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119559">SUSE bug 1119559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119560">SUSE bug 1119560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119562">SUSE bug 1119562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142677">SUSE bug 1142677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142678">SUSE bug 1142678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153577">SUSE bug 1153577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186231">SUSE bug 1186231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189337">SUSE bug 1189337</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11591/">CVE-2017-11591</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11531/">CVE-2018-11531</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17581/">CVE-2018-17581</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20097/">CVE-2018-20097</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20098/">CVE-2018-20098</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20099/">CVE-2018-20099</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13109/">CVE-2019-13109</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13110/">CVE-2019-13110</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17402/">CVE-2019-17402</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29473/">CVE-2021-29473</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-32815/">CVE-2021-32815</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725386" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725387" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140036" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192478" ref_url="https://bugzilla.suse.com/1192478" source="BUGZILLA"/>
		<reference ref_id="1202962" ref_url="https://bugzilla.suse.com/1202962" source="BUGZILLA"/>
		<reference ref_id="1203110" ref_url="https://bugzilla.suse.com/1203110" source="BUGZILLA"/>
		<reference ref_id="1203152" ref_url="https://bugzilla.suse.com/1203152" source="BUGZILLA"/>
		<reference ref_id="1203155" ref_url="https://bugzilla.suse.com/1203155" source="BUGZILLA"/>
		<reference ref_id="1203194" ref_url="https://bugzilla.suse.com/1203194" source="BUGZILLA"/>
		<reference ref_id="1203272" ref_url="https://bugzilla.suse.com/1203272" source="BUGZILLA"/>
		<reference ref_id="1203508" ref_url="https://bugzilla.suse.com/1203508" source="BUGZILLA"/>
		<reference ref_id="1203509" ref_url="https://bugzilla.suse.com/1203509" source="BUGZILLA"/>
		<reference ref_id="1203796" ref_url="https://bugzilla.suse.com/1203796" source="BUGZILLA"/>
		<reference ref_id="1203797" ref_url="https://bugzilla.suse.com/1203797" source="BUGZILLA"/>
		<reference ref_id="1203799" ref_url="https://bugzilla.suse.com/1203799" source="BUGZILLA"/>
		<reference ref_id="1203820" ref_url="https://bugzilla.suse.com/1203820" source="BUGZILLA"/>
		<reference ref_id="1203924" ref_url="https://bugzilla.suse.com/1203924" source="BUGZILLA"/>
		<reference ref_id="1204779" ref_url="https://bugzilla.suse.com/1204779" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3928" ref_url="https://www.suse.com/security/cve/CVE-2021-3928/" source="CVE"/>
		<reference ref_id="CVE-2022-2980" ref_url="https://www.suse.com/security/cve/CVE-2022-2980/" source="CVE"/>
		<reference ref_id="CVE-2022-2982" ref_url="https://www.suse.com/security/cve/CVE-2022-2982/" source="CVE"/>
		<reference ref_id="CVE-2022-3037" ref_url="https://www.suse.com/security/cve/CVE-2022-3037/" source="CVE"/>
		<reference ref_id="CVE-2022-3099" ref_url="https://www.suse.com/security/cve/CVE-2022-3099/" source="CVE"/>
		<reference ref_id="CVE-2022-3134" ref_url="https://www.suse.com/security/cve/CVE-2022-3134/" source="CVE"/>
		<reference ref_id="CVE-2022-3153" ref_url="https://www.suse.com/security/cve/CVE-2022-3153/" source="CVE"/>
		<reference ref_id="CVE-2022-3234" ref_url="https://www.suse.com/security/cve/CVE-2022-3234/" source="CVE"/>
		<reference ref_id="CVE-2022-3235" ref_url="https://www.suse.com/security/cve/CVE-2022-3235/" source="CVE"/>
		<reference ref_id="CVE-2022-3278" ref_url="https://www.suse.com/security/cve/CVE-2022-3278/" source="CVE"/>
		<reference ref_id="CVE-2022-3296" ref_url="https://www.suse.com/security/cve/CVE-2022-3296/" source="CVE"/>
		<reference ref_id="CVE-2022-3297" ref_url="https://www.suse.com/security/cve/CVE-2022-3297/" source="CVE"/>
		<reference ref_id="CVE-2022-3324" ref_url="https://www.suse.com/security/cve/CVE-2022-3324/" source="CVE"/>
		<reference ref_id="CVE-2022-3352" ref_url="https://www.suse.com/security/cve/CVE-2022-3352/" source="CVE"/>
		<reference ref_id="CVE-2022-3705" ref_url="https://www.suse.com/security/cve/CVE-2022-3705/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013152.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

Updated to version 9.0 with patch level 0814:

- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).
- CVE-2022-3234: Fixed heap-based buffer overflow (bsc#1203508).
- CVE-2022-3235: Fixed use-after-free (bsc#1203509).
- CVE-2022-3324: Fixed stack-based buffer overflow (bsc#1203820).
- CVE-2022-3705: Fixed use-after-free in function qf_update_buffer of the file quickfix.c (bsc#1204779).
- CVE-2022-2982: Fixed use-after-free in qf_fill_buffer() (bsc#1203152).
- CVE-2022-3296: Fixed stack out of bounds read in ex_finally() in ex_eval.c (bsc#1203796).
- CVE-2022-3297: Fixed use-after-free in process_next_cpt_value() at insexpand.c (bsc#1203797).
- CVE-2022-3099: Fixed use-after-free in ex_docmd.c (bsc#1203110).
- CVE-2022-3134: Fixed use-after-free in do_tag() (bsc#1203194).
- CVE-2022-3153: Fixed NULL pointer dereference (bsc#1203272).
- CVE-2022-3278: Fixed NULL pointer dereference in eval_next_non_blank() in eval.c (bsc#1203799).
- CVE-2022-3352: Fixed use-after-free (bsc#1203924).
- CVE-2022-2980: Fixed NULL pointer dereference in do_mouse() (bsc#1203155).
- CVE-2022-3037: Fixed use-after-free (bsc#1202962).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192478">SUSE bug 1192478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202962">SUSE bug 1202962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203110">SUSE bug 1203110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203152">SUSE bug 1203152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203155">SUSE bug 1203155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203194">SUSE bug 1203194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203272">SUSE bug 1203272</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203508">SUSE bug 1203508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203509">SUSE bug 1203509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203796">SUSE bug 1203796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203797">SUSE bug 1203797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203799">SUSE bug 1203799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203820">SUSE bug 1203820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203924">SUSE bug 1203924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204779">SUSE bug 1204779</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3928/">CVE-2021-3928</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2980/">CVE-2022-2980</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2982/">CVE-2022-2982</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3037/">CVE-2022-3037</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-3099/">CVE-2022-3099</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3134/">CVE-2022-3134</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3153/">CVE-2022-3153</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3234/">CVE-2022-3234</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3235/">CVE-2022-3235</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3278/">CVE-2022-3278</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-3296/">CVE-2022-3296</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3297/">CVE-2022-3297</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3324/">CVE-2022-3324</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-3352/">CVE-2022-3352</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-3705/">CVE-2022-3705</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726824" comment="gvim-9.0.0814-150000.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726825" comment="vim-9.0.0814-150000.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726769" comment="vim-data-9.0.0814-150000.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726770" comment="vim-data-common-9.0.0814-150000.5.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140037" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205120" ref_url="https://bugzilla.suse.com/1205120" source="BUGZILLA"/>
		<reference ref_id="1205121" ref_url="https://bugzilla.suse.com/1205121" source="BUGZILLA"/>
		<reference ref_id="1205122" ref_url="https://bugzilla.suse.com/1205122" source="BUGZILLA"/>
		<reference ref_id="1205123" ref_url="https://bugzilla.suse.com/1205123" source="BUGZILLA"/>
		<reference ref_id="1205124" ref_url="https://bugzilla.suse.com/1205124" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32888" ref_url="https://www.suse.com/security/cve/CVE-2022-32888/" source="CVE"/>
		<reference ref_id="CVE-2022-32923" ref_url="https://www.suse.com/security/cve/CVE-2022-32923/" source="CVE"/>
		<reference ref_id="CVE-2022-42799" ref_url="https://www.suse.com/security/cve/CVE-2022-42799/" source="CVE"/>
		<reference ref_id="CVE-2022-42823" ref_url="https://www.suse.com/security/cve/CVE-2022-42823/" source="CVE"/>
		<reference ref_id="CVE-2022-42824" ref_url="https://www.suse.com/security/cve/CVE-2022-42824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013159.html" source="SUSE-SU"/>
		<description>

Security fixes:

- CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205121).
- CVE-2022-32923: Fixed possible information leak via maliciously crafted web content (bsc#1205122).
- CVE-2022-42799: Fixed user interface spoofing when visiting a malicious website (bsc#1205123).
- CVE-2022-42823: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205120).
- CVE-2022-42824: Fixed possible sensitive user information leak via maliciously crafted web content (bsc#1205124).

Update to version 2.38.2:

  - Fix scrolling issues in some sites having fixed background.
  - Fix prolonged buffering during progressive live playback.
  - Fix the build with accessibility disabled.
  - Fix several crashes and rendering issues.
    
Update to version 2.38.1:

  - Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  - Use a single xdg-dbus-proxy process when sandbox is enabled.
  - Fix high resolution video playback due to unimplemented
    changeType operation.
  - Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  - Fix player stucking in buffering (paused) state for progressive
    streaming.
  - Do not try to preconnect on link click when link preconnect
    setting is disabled.
  - Fix close status code returned when the client closes a
    WebSocket in some cases.
  - Fix media player duration calculation.
  - Fix several crashes and rendering issues.

Update to version 2.38.0:

  - New media controls UI style.
  - Add new API to set WebView's Content-Security-Policy for web
    extensions support.
  - Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  - MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  - Add support for PDF documents using PDF.js.
  		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205120">SUSE bug 1205120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205121">SUSE bug 1205121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205122">SUSE bug 1205122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205123">SUSE bug 1205123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205124">SUSE bug 1205124</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32888/">CVE-2022-32888</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32923/">CVE-2022-32923</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-42799/">CVE-2022-42799</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42823/">CVE-2022-42823</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-42824/">CVE-2022-42824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726511" comment="libjavascriptcoregtk-4_0-18-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726512" comment="libwebkit2gtk-4_0-37-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726513" comment="libwebkit2gtk3-lang-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726514" comment="typelib-1_0-JavaScriptCore-4_0-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726515" comment="typelib-1_0-WebKit2-4_0-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726516" comment="typelib-1_0-WebKit2WebExtension-4_0-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726517" comment="webkit2gtk-4_0-injected-bundles-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726518" comment="webkit2gtk3-devel-2.38.2-150000.3.122.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140038" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205119" ref_url="https://bugzilla.suse.com/1205119" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-43548" ref_url="https://www.suse.com/security/cve/CVE-2022-43548/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013181.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- CVE-2022-43548: Fixed DNS rebinding in --inspect via invalid octal IP address (bsc#1205119).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-01"/>
	<updated date="2022-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205119">SUSE bug 1205119</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-43548/">CVE-2022-43548</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724675" comment="nodejs10-10.24.1-150000.1.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724676" comment="nodejs10-devel-10.24.1-150000.1.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724645" comment="nodejs10-docs-10.24.1-150000.1.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724677" comment="npm10-10.24.1-150000.1.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140039" version="1" class="patch">
	<metadata>
		<title>Security update for emacs (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205822" ref_url="https://bugzilla.suse.com/1205822" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45939" ref_url="https://www.suse.com/security/cve/CVE-2022-45939/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013190.html" source="SUSE-SU"/>
		<description>
This update for emacs fixes the following issues:

- CVE-2022-45939: Fixed shell command injection via source code files when using ctags (bsc#1205822).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-02"/>
	<updated date="2022-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205822">SUSE bug 1205822</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45939/">CVE-2022-45939</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009727423" comment="emacs-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727405" comment="emacs-el-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727406" comment="emacs-info-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727424" comment="emacs-nox-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727425" comment="emacs-x11-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727426" comment="etags-25.3-150000.3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140040" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204642" ref_url="https://bugzilla.suse.com/1204642" source="BUGZILLA"/>
		<reference ref_id="1205422" ref_url="https://bugzilla.suse.com/1205422" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3570" ref_url="https://www.suse.com/security/cve/CVE-2022-3570/" source="CVE"/>
		<reference ref_id="CVE-2022-3598" ref_url="https://www.suse.com/security/cve/CVE-2022-3598/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013217.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-3570: Fixed heap buffer overflows in tiffcrop.c (bsc#1205422).
- CVE-2022-3598: Fixed out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c [bsc#1204642]
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204642">SUSE bug 1204642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205422">SUSE bug 1205422</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3570/">CVE-2022-3570</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3598/">CVE-2022-3598</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009727259" comment="libtiff-devel-4.0.9-150000.45.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727260" comment="libtiff5-4.0.9-150000.45.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727227" comment="libtiff5-32bit-4.0.9-150000.45.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140041" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204822" ref_url="https://bugzilla.suse.com/1204822" source="BUGZILLA"/>
		<reference ref_id="1206189" ref_url="https://bugzilla.suse.com/1206189" source="BUGZILLA"/>
		<reference ref_id="1206190" ref_url="https://bugzilla.suse.com/1206190" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3725" ref_url="https://www.suse.com/security/cve/CVE-2022-3725/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013223.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

Update to version 3.6.10:

- CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Multiple dissector infinite loops (bsc#1206189).
- Kafka dissector memory exhaustion (bsc#1206190).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204822">SUSE bug 1204822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206189">SUSE bug 1206189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206190">SUSE bug 1206190</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3725/">CVE-2022-3725</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009727980" comment="libwireshark15-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727981" comment="libwiretap12-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727982" comment="libwsutil13-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727983" comment="wireshark-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727984" comment="wireshark-devel-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727985" comment="wireshark-ui-qt-3.6.10-150000.3.78.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140042" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206242" ref_url="https://bugzilla.suse.com/1206242" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-46872" ref_url="https://www.suse.com/security/cve/CVE-2022-46872/" source="CVE"/>
		<reference ref_id="CVE-2022-46874" ref_url="https://www.suse.com/security/cve/CVE-2022-46874/" source="CVE"/>
		<reference ref_id="CVE-2022-46875" ref_url="https://www.suse.com/security/cve/CVE-2022-46875/" source="CVE"/>
		<reference ref_id="CVE-2022-46878" ref_url="https://www.suse.com/security/cve/CVE-2022-46878/" source="CVE"/>
		<reference ref_id="CVE-2022-46880" ref_url="https://www.suse.com/security/cve/CVE-2022-46880/" source="CVE"/>
		<reference ref_id="CVE-2022-46881" ref_url="https://www.suse.com/security/cve/CVE-2022-46881/" source="CVE"/>
		<reference ref_id="CVE-2022-46882" ref_url="https://www.suse.com/security/cve/CVE-2022-46882/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013227.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 102.6.0 ESR (bsc#1206242):

- CVE-2022-46880: Use-after-free in WebGL
- CVE-2022-46872: Arbitrary file read from a compromised content process
- CVE-2022-46881: Memory corruption in WebGL
- CVE-2022-46874: Drag and Dropped Filenames could have been truncated to malicious extensions
- CVE-2022-46875: Download Protections were bypassed by .atloc and .ftploc files on Mac OS
- CVE-2022-46882: Use-after-free in WebGL
- CVE-2022-46878: Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206242">SUSE bug 1206242</bugzilla>
	<cve impact="critical" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-46872/">CVE-2022-46872</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46874/">CVE-2022-46874</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-46875/">CVE-2022-46875</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46878/">CVE-2022-46878</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-46880/">CVE-2022-46880</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46881/">CVE-2022-46881</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46882/">CVE-2022-46882</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728134" comment="MozillaFirefox-102.6.0-150000.150.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728135" comment="MozillaFirefox-devel-102.6.0-150000.150.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728136" comment="MozillaFirefox-translations-common-102.6.0-150000.150.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728137" comment="MozillaFirefox-translations-other-102.6.0-150000.150.68.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140043" version="1" class="patch">
	<metadata>
		<title>Security update for containerd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197284" ref_url="https://bugzilla.suse.com/1197284" source="BUGZILLA"/>
		<reference ref_id="1206065" ref_url="https://bugzilla.suse.com/1206065" source="BUGZILLA"/>
		<reference ref_id="1206235" ref_url="https://bugzilla.suse.com/1206235" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23471" ref_url="https://www.suse.com/security/cve/CVE-2022-23471/" source="CVE"/>
		<reference ref_id="CVE-2022-27191" ref_url="https://www.suse.com/security/cve/CVE-2022-27191/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013228.html" source="SUSE-SU"/>
		<description>
This update for containerd fixes the following issues:

Update to containerd v1.6.12 including Docker v20.10.21-ce (bsc#1206065). 

Also includes the following fix:

- CVE-2022-23471: host memory exhaustion through Terminal resize goroutine leak (bsc#1206235).
- CVE-2022-27191: crash in a golang.org/x/crypto/ssh server (bsc#1197284).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197284">SUSE bug 1197284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206065">SUSE bug 1206065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206235">SUSE bug 1206235</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23471/">CVE-2022-23471</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27191/">CVE-2022-27191</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728138" comment="containerd-1.6.12-150000.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728139" comment="containerd-ctr-1.6.12-150000.79.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140044" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205874" ref_url="https://bugzilla.suse.com/1205874" source="BUGZILLA"/>
		<reference ref_id="1205875" ref_url="https://bugzilla.suse.com/1205875" source="BUGZILLA"/>
		<reference ref_id="1205876" ref_url="https://bugzilla.suse.com/1205876" source="BUGZILLA"/>
		<reference ref_id="1205877" ref_url="https://bugzilla.suse.com/1205877" source="BUGZILLA"/>
		<reference ref_id="1205878" ref_url="https://bugzilla.suse.com/1205878" source="BUGZILLA"/>
		<reference ref_id="1205879" ref_url="https://bugzilla.suse.com/1205879" source="BUGZILLA"/>
		<reference ref_id="1206017" ref_url="https://bugzilla.suse.com/1206017" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4283" ref_url="https://www.suse.com/security/cve/CVE-2022-4283/" source="CVE"/>
		<reference ref_id="CVE-2022-46340" ref_url="https://www.suse.com/security/cve/CVE-2022-46340/" source="CVE"/>
		<reference ref_id="CVE-2022-46341" ref_url="https://www.suse.com/security/cve/CVE-2022-46341/" source="CVE"/>
		<reference ref_id="CVE-2022-46342" ref_url="https://www.suse.com/security/cve/CVE-2022-46342/" source="CVE"/>
		<reference ref_id="CVE-2022-46343" ref_url="https://www.suse.com/security/cve/CVE-2022-46343/" source="CVE"/>
		<reference ref_id="CVE-2022-46344" ref_url="https://www.suse.com/security/cve/CVE-2022-46344/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013246.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2022-46340: Server XTestSwapFakeInput stack overflow (bsc#1205874)
- CVE-2022-46341: Server XIPassiveUngrabDevice out-of-bounds access (bsc#1205877)
- CVE-2022-46342: Server XvdiSelectVideoNotify use-after-free (bsc#1205879)
- CVE-2022-46343: Server ScreenSaverSetAttributes use-after-free (bsc#1205878)
- CVE-2022-46344: Server XIChangeProperty out-of-bounds access (bsc#1205876)
- CVE-2022-4283: Reset the radio_groups pointer to NULL after freeing it (bsc#1206017)
- Xi: return an error from XI property changes if verification failed (bsc#1205875)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-14"/>
	<updated date="2022-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205874">SUSE bug 1205874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205875">SUSE bug 1205875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205876">SUSE bug 1205876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205877">SUSE bug 1205877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205878">SUSE bug 1205878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205879">SUSE bug 1205879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206017">SUSE bug 1206017</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4283/">CVE-2022-4283</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46340/">CVE-2022-46340</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46341/">CVE-2022-46341</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-46342/">CVE-2022-46342</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-46343/">CVE-2022-46343</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-46344/">CVE-2022-46344</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728960" comment="xorg-x11-server-1.20.3-150100.14.5.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728961" comment="xorg-x11-server-extra-1.20.3-150100.14.5.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728962" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140045" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198702" ref_url="https://bugzilla.suse.com/1198702" source="BUGZILLA"/>
		<reference ref_id="1199365" ref_url="https://bugzilla.suse.com/1199365" source="BUGZILLA"/>
		<reference ref_id="1200788" ref_url="https://bugzilla.suse.com/1200788" source="BUGZILLA"/>
		<reference ref_id="1200845" ref_url="https://bugzilla.suse.com/1200845" source="BUGZILLA"/>
		<reference ref_id="1201455" ref_url="https://bugzilla.suse.com/1201455" source="BUGZILLA"/>
		<reference ref_id="1202686" ref_url="https://bugzilla.suse.com/1202686" source="BUGZILLA"/>
		<reference ref_id="1203008" ref_url="https://bugzilla.suse.com/1203008" source="BUGZILLA"/>
		<reference ref_id="1203183" ref_url="https://bugzilla.suse.com/1203183" source="BUGZILLA"/>
		<reference ref_id="1203290" ref_url="https://bugzilla.suse.com/1203290" source="BUGZILLA"/>
		<reference ref_id="1203322" ref_url="https://bugzilla.suse.com/1203322" source="BUGZILLA"/>
		<reference ref_id="1203514" ref_url="https://bugzilla.suse.com/1203514" source="BUGZILLA"/>
		<reference ref_id="1203860" ref_url="https://bugzilla.suse.com/1203860" source="BUGZILLA"/>
		<reference ref_id="1203960" ref_url="https://bugzilla.suse.com/1203960" source="BUGZILLA"/>
		<reference ref_id="1204017" ref_url="https://bugzilla.suse.com/1204017" source="BUGZILLA"/>
		<reference ref_id="1204166" ref_url="https://bugzilla.suse.com/1204166" source="BUGZILLA"/>
		<reference ref_id="1204170" ref_url="https://bugzilla.suse.com/1204170" source="BUGZILLA"/>
		<reference ref_id="1204354" ref_url="https://bugzilla.suse.com/1204354" source="BUGZILLA"/>
		<reference ref_id="1204355" ref_url="https://bugzilla.suse.com/1204355" source="BUGZILLA"/>
		<reference ref_id="1204402" ref_url="https://bugzilla.suse.com/1204402" source="BUGZILLA"/>
		<reference ref_id="1204414" ref_url="https://bugzilla.suse.com/1204414" source="BUGZILLA"/>
		<reference ref_id="1204415" ref_url="https://bugzilla.suse.com/1204415" source="BUGZILLA"/>
		<reference ref_id="1204424" ref_url="https://bugzilla.suse.com/1204424" source="BUGZILLA"/>
		<reference ref_id="1204431" ref_url="https://bugzilla.suse.com/1204431" source="BUGZILLA"/>
		<reference ref_id="1204432" ref_url="https://bugzilla.suse.com/1204432" source="BUGZILLA"/>
		<reference ref_id="1204439" ref_url="https://bugzilla.suse.com/1204439" source="BUGZILLA"/>
		<reference ref_id="1204446" ref_url="https://bugzilla.suse.com/1204446" source="BUGZILLA"/>
		<reference ref_id="1204479" ref_url="https://bugzilla.suse.com/1204479" source="BUGZILLA"/>
		<reference ref_id="1204574" ref_url="https://bugzilla.suse.com/1204574" source="BUGZILLA"/>
		<reference ref_id="1204576" ref_url="https://bugzilla.suse.com/1204576" source="BUGZILLA"/>
		<reference ref_id="1204631" ref_url="https://bugzilla.suse.com/1204631" source="BUGZILLA"/>
		<reference ref_id="1204635" ref_url="https://bugzilla.suse.com/1204635" source="BUGZILLA"/>
		<reference ref_id="1204636" ref_url="https://bugzilla.suse.com/1204636" source="BUGZILLA"/>
		<reference ref_id="1204646" ref_url="https://bugzilla.suse.com/1204646" source="BUGZILLA"/>
		<reference ref_id="1204647" ref_url="https://bugzilla.suse.com/1204647" source="BUGZILLA"/>
		<reference ref_id="1204653" ref_url="https://bugzilla.suse.com/1204653" source="BUGZILLA"/>
		<reference ref_id="1204850" ref_url="https://bugzilla.suse.com/1204850" source="BUGZILLA"/>
		<reference ref_id="1204868" ref_url="https://bugzilla.suse.com/1204868" source="BUGZILLA"/>
		<reference ref_id="1205006" ref_url="https://bugzilla.suse.com/1205006" source="BUGZILLA"/>
		<reference ref_id="1205128" ref_url="https://bugzilla.suse.com/1205128" source="BUGZILLA"/>
		<reference ref_id="1205220" ref_url="https://bugzilla.suse.com/1205220" source="BUGZILLA"/>
		<reference ref_id="1205473" ref_url="https://bugzilla.suse.com/1205473" source="BUGZILLA"/>
		<reference ref_id="1205514" ref_url="https://bugzilla.suse.com/1205514" source="BUGZILLA"/>
		<reference ref_id="1205617" ref_url="https://bugzilla.suse.com/1205617" source="BUGZILLA"/>
		<reference ref_id="1205671" ref_url="https://bugzilla.suse.com/1205671" source="BUGZILLA"/>
		<reference ref_id="1205796" ref_url="https://bugzilla.suse.com/1205796" source="BUGZILLA"/>
		<reference ref_id="1206113" ref_url="https://bugzilla.suse.com/1206113" source="BUGZILLA"/>
		<reference ref_id="1206114" ref_url="https://bugzilla.suse.com/1206114" source="BUGZILLA"/>
		<reference ref_id="1206207" ref_url="https://bugzilla.suse.com/1206207" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4037" ref_url="https://www.suse.com/security/cve/CVE-2021-4037/" source="CVE"/>
		<reference ref_id="CVE-2022-2153" ref_url="https://www.suse.com/security/cve/CVE-2022-2153/" source="CVE"/>
		<reference ref_id="CVE-2022-28693" ref_url="https://www.suse.com/security/cve/CVE-2022-28693/" source="CVE"/>
		<reference ref_id="CVE-2022-2964" ref_url="https://www.suse.com/security/cve/CVE-2022-2964/" source="CVE"/>
		<reference ref_id="CVE-2022-3169" ref_url="https://www.suse.com/security/cve/CVE-2022-3169/" source="CVE"/>
		<reference ref_id="CVE-2022-3424" ref_url="https://www.suse.com/security/cve/CVE-2022-3424/" source="CVE"/>
		<reference ref_id="CVE-2022-3521" ref_url="https://www.suse.com/security/cve/CVE-2022-3521/" source="CVE"/>
		<reference ref_id="CVE-2022-3524" ref_url="https://www.suse.com/security/cve/CVE-2022-3524/" source="CVE"/>
		<reference ref_id="CVE-2022-3542" ref_url="https://www.suse.com/security/cve/CVE-2022-3542/" source="CVE"/>
		<reference ref_id="CVE-2022-3545" ref_url="https://www.suse.com/security/cve/CVE-2022-3545/" source="CVE"/>
		<reference ref_id="CVE-2022-3565" ref_url="https://www.suse.com/security/cve/CVE-2022-3565/" source="CVE"/>
		<reference ref_id="CVE-2022-3567" ref_url="https://www.suse.com/security/cve/CVE-2022-3567/" source="CVE"/>
		<reference ref_id="CVE-2022-3586" ref_url="https://www.suse.com/security/cve/CVE-2022-3586/" source="CVE"/>
		<reference ref_id="CVE-2022-3594" ref_url="https://www.suse.com/security/cve/CVE-2022-3594/" source="CVE"/>
		<reference ref_id="CVE-2022-3621" ref_url="https://www.suse.com/security/cve/CVE-2022-3621/" source="CVE"/>
		<reference ref_id="CVE-2022-3628" ref_url="https://www.suse.com/security/cve/CVE-2022-3628/" source="CVE"/>
		<reference ref_id="CVE-2022-3629" ref_url="https://www.suse.com/security/cve/CVE-2022-3629/" source="CVE"/>
		<reference ref_id="CVE-2022-3635" ref_url="https://www.suse.com/security/cve/CVE-2022-3635/" source="CVE"/>
		<reference ref_id="CVE-2022-3643" ref_url="https://www.suse.com/security/cve/CVE-2022-3643/" source="CVE"/>
		<reference ref_id="CVE-2022-3646" ref_url="https://www.suse.com/security/cve/CVE-2022-3646/" source="CVE"/>
		<reference ref_id="CVE-2022-3649" ref_url="https://www.suse.com/security/cve/CVE-2022-3649/" source="CVE"/>
		<reference ref_id="CVE-2022-3903" ref_url="https://www.suse.com/security/cve/CVE-2022-3903/" source="CVE"/>
		<reference ref_id="CVE-2022-40307" ref_url="https://www.suse.com/security/cve/CVE-2022-40307/" source="CVE"/>
		<reference ref_id="CVE-2022-40768" ref_url="https://www.suse.com/security/cve/CVE-2022-40768/" source="CVE"/>
		<reference ref_id="CVE-2022-4095" ref_url="https://www.suse.com/security/cve/CVE-2022-4095/" source="CVE"/>
		<reference ref_id="CVE-2022-41850" ref_url="https://www.suse.com/security/cve/CVE-2022-41850/" source="CVE"/>
		<reference ref_id="CVE-2022-41858" ref_url="https://www.suse.com/security/cve/CVE-2022-41858/" source="CVE"/>
		<reference ref_id="CVE-2022-42328" ref_url="https://www.suse.com/security/cve/CVE-2022-42328/" source="CVE"/>
		<reference ref_id="CVE-2022-42329" ref_url="https://www.suse.com/security/cve/CVE-2022-42329/" source="CVE"/>
		<reference ref_id="CVE-2022-42703" ref_url="https://www.suse.com/security/cve/CVE-2022-42703/" source="CVE"/>
		<reference ref_id="CVE-2022-42895" ref_url="https://www.suse.com/security/cve/CVE-2022-42895/" source="CVE"/>
		<reference ref_id="CVE-2022-42896" ref_url="https://www.suse.com/security/cve/CVE-2022-42896/" source="CVE"/>
		<reference ref_id="CVE-2022-43750" ref_url="https://www.suse.com/security/cve/CVE-2022-43750/" source="CVE"/>
		<reference ref_id="CVE-2022-4378" ref_url="https://www.suse.com/security/cve/CVE-2022-4378/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="CVE-2022-45934" ref_url="https://www.suse.com/security/cve/CVE-2022-45934/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013279.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-42328: Guests could trigger denial of service via the netback driver (bsc#1206114).
- CVE-2022-42329: Guests could trigger denial of service via the netback driver (bsc#1206113).
- CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver (bsc#1206113).
- CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631).
- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1204166).
- CVE-2022-41850: Fixed a race condition in roccat_report_event() in drivers/hid/hid-roccat.c (bsc#1203960).
- CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in net/bluetooth/l2cap_core.c (bsc#1205796).
- CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wifi/brcmfmac (bsc#1204868).
- CVE-2022-3567: Fixed a to race condition in inet6_stream_ops()/inet6_dgram_ops() (bsc#1204414).
- CVE-2022-41858: Fixed a denial of service in sl_tx_timeout() in drivers/net/slip (bsc#1205671).
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).
- CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).
- CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).
- CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set (bsc#1198702).
- CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's internal memory (bsc#1204653).
- CVE-2022-3542: Fixed memory leak in bnx2x_tpa_stop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c (bsc#1204402).
- CVE-2022-3629: Fixed memory leak in vsock_connect() in net/vmw_vsock/af_vsock.c (bsc#1204635).
- CVE-2022-3646: Fixed memory leak in nilfs_attach_log_writer() in fs/nilfs2/segment.c (bsc#1204646).
- CVE-2022-3649: Fixed use-after-free in nilfs_new_inode() in fs/nilfs2/inode.c (bsc#1204647).
- CVE-2022-3621: Fixed null pointer dereference in nilfs_bmap_lookup_at_level() in fs/nilfs2/inode.c (bsc#1204574).
- CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bsc#1204479).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3565: Fixed use-after-free in del_timer() in drivers/isdn/mISDN/l1oip_core.c (bsc#1204431).
- CVE-2022-3524: Fixed memory leak in ipv6_renew_options() in the IPv6 handler (bsc#1204354).
- CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory (bsc#1203514).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bsc#1204168).
- CVE-2022-3169: Fixed an denial of service though request to NVME_IOCTL_RESET and NVME_IOCTL_SUBSYS_RESET (bsc#1203290).
- CVE-2022-40307: Fixed a race condition that could had been exploited to trigger a use-after-free in the efi firmware capsule-loader.c (bsc#1203322).
- CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2cap_core.c's l2cap_parse_conf_req() which can be used to leak kernel pointers remotely (bsc#1205705).
- CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2cap_core.c's l2cap_connect() and l2cap_le_connect_req() which may have allowed code execution and leaking kernel memory (respectively) remotely via Bluetooth (bsc#1205709).
- CVE-2022-3545: Fixed a use-after-free vulnerability is area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-3521: Fixed a race condition in kcm_tx_work() of the file net/kcm/kcmsock.c (bsc#1204355).
- CVE-2022-2153: Fixed a NULL pointer dereference in KVM when attempting to set a SynIC IRQ (bsc#1200788).

The following non-security bugs were fixed:

- Drivers: hv: vmbus: Add VMbus IMC device to unsupported list (git-fixes).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Drop error message when 'No request id available' (bsc#1204017).
- Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (git-fixes).
- Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero (bsc#1204017).
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (git-fixes).
- Drivers: hv: vmbus: Fix potential crash on module unload (git-fixes).
- Drivers: hv: vmbus: Introduce {lock,unlock}_requestor() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Introduce vmbus_request_addr_match() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Introduce vmbus_sendpacket_getid() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Move __vmbus_open() (bsc#1204017).
- Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (git-fixes).
- hv_netvsc: Add check for kvmalloc_array (git-fixes).
- hv_netvsc: Add error handling while switching data path (bsc#1204850).
- hv_netvsc: Add validation for untrusted Hyper-V values (bsc#1204017).
- hv_netvsc: Cache the current data path to avoid duplicate call and message (bsc#1204017).
- hv_netvsc: Check VF datapath when sending traffic to VF (bsc#1204017).
- hv_netvsc: Fix error handling in netvsc_set_features() (git-fixes).
- hv_netvsc: Fix race between VF offering and VF association message from host (bsc#1204850).
- hv_netvsc: Print value of invalid ID in netvsc_send_{completion,tx_complete}() (bsc#1204017).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove (bsc#1204850).
- hv_netvsc: Remove unnecessary round_up for recv_completion_cnt (bsc#1204017).
- hv_netvsc: Reset the RSC count if NVSP_STAT_FAIL in netvsc_receive() (bsc#1204017).
- hv_netvsc: Sync offloading features to VF NIC (git-fixes).
- hv_netvsc: use netif_is_bond_master() instead of open code (git-fixes).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening (bsc#1204017).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH (bsc#1204017).
- ipv6: ping: fix wrong checksum for large frames (bsc#1203183).
- net: hyperv: remove use of bpf_op_t (git-fixes).
- net: netvsc: remove break after return (git-fixes).
- PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv() (bsc#1204446).
- PCI: hv: Add validation for untrusted Hyper-V values (bsc#1204017).
- PCI: hv: Drop msi_controller structure (bsc#1204446).
- PCI: hv: Fix a race condition when removing the device (bsc#1204446).
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (bsc#1200845).
- PCI: hv: Fix interrupt mapping for multi-MSI (bsc#1200845).
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (bsc#1200845).
- PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology (bsc#1199365).
- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (bsc#1204446).
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (bsc#1204017, bsc#1203860, bsc#1205617).
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (bsc#1204017, bsc#1205617).
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (bsc#1200845).
- PCI: hv: Make the code arch neutral by adding arch specific interfaces (bsc#1200845).
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (bsc#1200845).
- PCI: hv: Remove bus device removal unused refcount/functions (bsc#1204446).
- PCI: hv: Remove unnecessary use of %hx (bsc#1204446).
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (bsc#1200845).
- PCI: hv: Support for create interrupt v3 (git-fixes).
- PCI: hv: Use struct_size() helper (bsc#1204446).
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (bsc#1204017).
- Revert 'scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback()' (bsc#1204017).
- scsi: storvsc: Drop DID_TARGET_FAILURE use (git-fixes).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8 and newer (bsc#1204017).
- scsi: storvsc: Fix validation for unsolicited incoming packets (bsc#1204017).
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (git-fixes).
- scsi: storvsc: Resolve data race in storvsc_probe() (bsc#1204017).
- scsi: storvsc: Use blk_mq_unique_tag() to generate requestIDs (bsc#1204017).
- scsi: storvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening (bsc#1204017).
- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1204017).
- sunrpc: Re-purpose trace_svc_process (bsc#1205006).
- x86/cpu: Restore AMD's DE_CFG MSR after resume (bsc#1205473).
- x86/hyperv: Output host build info as normal Windows version number (git-fixes).
- x86/hyperv: Set pv_info.name to 'Hyper-V' (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-19"/>
	<updated date="2022-12-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198702">SUSE bug 1198702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199365">SUSE bug 1199365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200788">SUSE bug 1200788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200845">SUSE bug 1200845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201455">SUSE bug 1201455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202686">SUSE bug 1202686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203008">SUSE bug 1203008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203183">SUSE bug 1203183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203290">SUSE bug 1203290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203322">SUSE bug 1203322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203514">SUSE bug 1203514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203860">SUSE bug 1203860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203960">SUSE bug 1203960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204017">SUSE bug 1204017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204166">SUSE bug 1204166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204170">SUSE bug 1204170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204354">SUSE bug 1204354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204355">SUSE bug 1204355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204402">SUSE bug 1204402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204414">SUSE bug 1204414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204415">SUSE bug 1204415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204424">SUSE bug 1204424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204431">SUSE bug 1204431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204432">SUSE bug 1204432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204439">SUSE bug 1204439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204446">SUSE bug 1204446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204479">SUSE bug 1204479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204574">SUSE bug 1204574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204576">SUSE bug 1204576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204631">SUSE bug 1204631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204635">SUSE bug 1204635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204636">SUSE bug 1204636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204646">SUSE bug 1204646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204647">SUSE bug 1204647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204653">SUSE bug 1204653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204850">SUSE bug 1204850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204868">SUSE bug 1204868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205006">SUSE bug 1205006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205128">SUSE bug 1205128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205220">SUSE bug 1205220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205473">SUSE bug 1205473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205514">SUSE bug 1205514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205617">SUSE bug 1205617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205671">SUSE bug 1205671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205796">SUSE bug 1205796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206113">SUSE bug 1206113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206114">SUSE bug 1206114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206207">SUSE bug 1206207</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4037/">CVE-2021-4037</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2153/">CVE-2022-2153</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28693/">CVE-2022-28693</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2964/">CVE-2022-2964</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3169/">CVE-2022-3169</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3424/">CVE-2022-3424</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3521/">CVE-2022-3521</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3524/">CVE-2022-3524</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3542/">CVE-2022-3542</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3545/">CVE-2022-3545</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3565/">CVE-2022-3565</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3567/">CVE-2022-3567</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3586/">CVE-2022-3586</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3594/">CVE-2022-3594</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3621/">CVE-2022-3621</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3628/">CVE-2022-3628</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3629/">CVE-2022-3629</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3635/">CVE-2022-3635</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-3643/">CVE-2022-3643</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3646/">CVE-2022-3646</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3649/">CVE-2022-3649</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3903/">CVE-2022-3903</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40307/">CVE-2022-40307</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40768/">CVE-2022-40768</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4095/">CVE-2022-4095</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-41850/">CVE-2022-41850</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41858/">CVE-2022-41858</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42328/">CVE-2022-42328</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42329/">CVE-2022-42329</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42703/">CVE-2022-42703</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42895/">CVE-2022-42895</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-42896/">CVE-2022-42896</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43750/">CVE-2022-43750</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4378/">CVE-2022-4378</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-45934/">CVE-2022-45934</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728738" comment="kernel-default-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728739" comment="kernel-default-base-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728740" comment="kernel-default-devel-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728741" comment="kernel-devel-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728742" comment="kernel-docs-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728743" comment="kernel-macros-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728744" comment="kernel-obs-build-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728745" comment="kernel-source-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728746" comment="kernel-syms-4.12.14-150100.197.131.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140046" version="1" class="patch">
	<metadata>
		<title>Security update for cni (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181961" ref_url="https://bugzilla.suse.com/1181961" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20206" ref_url="https://www.suse.com/security/cve/CVE-2021-20206/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4592-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013299.html" source="SUSE-SU"/>
		<description>
This update for cni fixes the following issues:

- CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-20"/>
	<updated date="2022-12-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181961">SUSE bug 1181961</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20206/">CVE-2021-20206</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725913" comment="cni-0.7.1-150100.3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140047" version="1" class="patch">
	<metadata>
		<title>Security update for cni-plugins (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181961" ref_url="https://bugzilla.suse.com/1181961" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20206" ref_url="https://www.suse.com/security/cve/CVE-2021-20206/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013297.html" source="SUSE-SU"/>
		<description>
This update for cni-plugins fixes the following issues:

- CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-20"/>
	<updated date="2022-12-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181961">SUSE bug 1181961</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20206/">CVE-2021-20206</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725914" comment="cni-plugins-0.8.6-150100.3.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140048" version="1" class="patch">
	<metadata>
		<title>Security update for supportutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184689" ref_url="https://bugzilla.suse.com/1184689" source="BUGZILLA"/>
		<reference ref_id="1188086" ref_url="https://bugzilla.suse.com/1188086" source="BUGZILLA"/>
		<reference ref_id="1192252" ref_url="https://bugzilla.suse.com/1192252" source="BUGZILLA"/>
		<reference ref_id="1192648" ref_url="https://bugzilla.suse.com/1192648" source="BUGZILLA"/>
		<reference ref_id="1197428" ref_url="https://bugzilla.suse.com/1197428" source="BUGZILLA"/>
		<reference ref_id="1200330" ref_url="https://bugzilla.suse.com/1200330" source="BUGZILLA"/>
		<reference ref_id="1202269" ref_url="https://bugzilla.suse.com/1202269" source="BUGZILLA"/>
		<reference ref_id="1202337" ref_url="https://bugzilla.suse.com/1202337" source="BUGZILLA"/>
		<reference ref_id="1202417" ref_url="https://bugzilla.suse.com/1202417" source="BUGZILLA"/>
		<reference ref_id="1203818" ref_url="https://bugzilla.suse.com/1203818" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:4594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013300.html" source="SUSE-SU"/>
		<description>
This update for supportutils fixes the following issues:

Security issues fixed:

- Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818)

Bug fixes:

- Added lifecycle information
- Fixed KVM virtualization detection on bare metal (bsc#1184689)
- Added logging using journalctl (bsc#1200330)
- Get current sar data before collecting files (bsc#1192648)
- Collects everything in /etc/multipath/ (bsc#1192252)
- Collects power management information in hardware.txt (bsc#1197428)
- Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337)
- Fixed conf_files and conf_text_files so y2log is gathered (bsc#1202269)
- Update to nvme_info and block_info (bsc#1202417)
- Added includedir directories from /etc/sudoers (bsc#1188086)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-20"/>
	<updated date="2022-12-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1184689">SUSE bug 1184689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188086">SUSE bug 1188086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192252">SUSE bug 1192252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192648">SUSE bug 1192648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197428">SUSE bug 1197428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200330">SUSE bug 1200330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202269">SUSE bug 1202269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202337">SUSE bug 1202337</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202417">SUSE bug 1202417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203818">SUSE bug 1203818</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726711" comment="supportutils-3.1.21-150000.5.44.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140049" version="1" class="patch">
	<metadata>
		<title>Security update for freeradius-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180525" ref_url="https://bugzilla.suse.com/1180525" source="BUGZILLA"/>
		<reference ref_id="1184016" ref_url="https://bugzilla.suse.com/1184016" source="BUGZILLA"/>
		<reference ref_id="1206204" ref_url="https://bugzilla.suse.com/1206204" source="BUGZILLA"/>
		<reference ref_id="1206205" ref_url="https://bugzilla.suse.com/1206205" source="BUGZILLA"/>
		<reference ref_id="1206206" ref_url="https://bugzilla.suse.com/1206206" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41859" ref_url="https://www.suse.com/security/cve/CVE-2022-41859/" source="CVE"/>
		<reference ref_id="CVE-2022-41860" ref_url="https://www.suse.com/security/cve/CVE-2022-41860/" source="CVE"/>
		<reference ref_id="CVE-2022-41861" ref_url="https://www.suse.com/security/cve/CVE-2022-41861/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013344.html" source="SUSE-SU"/>
		<description>
This update for freeradius-server fixes the following issues:

- CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204).
- CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205).
- CVE-2022-41861: Fixes a crash on invalid abinary data (bsc#1206206).
- move logrotate options into specific parts for each log as 'global' options
  will persist past and clobber global options in the main logrotate config (bsc#1180525)
- Fixed plaintext password entries in logfiles (bsc#1184016).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-27"/>
	<updated date="2022-12-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180525">SUSE bug 1180525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184016">SUSE bug 1184016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206204">SUSE bug 1206204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206205">SUSE bug 1206205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206206">SUSE bug 1206206</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-41859/">CVE-2022-41859</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41860/">CVE-2022-41860</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41861/">CVE-2022-41861</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728323" comment="freeradius-server-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728324" comment="freeradius-server-devel-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728325" comment="freeradius-server-krb5-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728326" comment="freeradius-server-ldap-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728327" comment="freeradius-server-libs-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728328" comment="freeradius-server-mysql-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728329" comment="freeradius-server-perl-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728330" comment="freeradius-server-postgresql-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728331" comment="freeradius-server-python-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728332" comment="freeradius-server-sqlite-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728333" comment="freeradius-server-utils-3.0.16-150000.3.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140050" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204779" ref_url="https://bugzilla.suse.com/1204779" source="BUGZILLA"/>
		<reference ref_id="1205797" ref_url="https://bugzilla.suse.com/1205797" source="BUGZILLA"/>
		<reference ref_id="1206028" ref_url="https://bugzilla.suse.com/1206028" source="BUGZILLA"/>
		<reference ref_id="1206071" ref_url="https://bugzilla.suse.com/1206071" source="BUGZILLA"/>
		<reference ref_id="1206072" ref_url="https://bugzilla.suse.com/1206072" source="BUGZILLA"/>
		<reference ref_id="1206075" ref_url="https://bugzilla.suse.com/1206075" source="BUGZILLA"/>
		<reference ref_id="1206077" ref_url="https://bugzilla.suse.com/1206077" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3491" ref_url="https://www.suse.com/security/cve/CVE-2022-3491/" source="CVE"/>
		<reference ref_id="CVE-2022-3520" ref_url="https://www.suse.com/security/cve/CVE-2022-3520/" source="CVE"/>
		<reference ref_id="CVE-2022-3591" ref_url="https://www.suse.com/security/cve/CVE-2022-3591/" source="CVE"/>
		<reference ref_id="CVE-2022-3705" ref_url="https://www.suse.com/security/cve/CVE-2022-3705/" source="CVE"/>
		<reference ref_id="CVE-2022-4141" ref_url="https://www.suse.com/security/cve/CVE-2022-4141/" source="CVE"/>
		<reference ref_id="CVE-2022-4292" ref_url="https://www.suse.com/security/cve/CVE-2022-4292/" source="CVE"/>
		<reference ref_id="CVE-2022-4293" ref_url="https://www.suse.com/security/cve/CVE-2022-4293/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013353.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

Updated to version 9.0.1040:

- CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742 (bsc#1206028).
- CVE-2022-3520: vim: Heap-based Buffer Overflow (bsc#1206071).
- CVE-2022-3591: vim: Use After Free (bsc#1206072).
- CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882 (bsc#1206075).
- CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804 (bsc#1206077).
- CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11 (bsc#1205797).
- CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c (bsc#1204779).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-28"/>
	<updated date="2022-12-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204779">SUSE bug 1204779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205797">SUSE bug 1205797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206028">SUSE bug 1206028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206071">SUSE bug 1206071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206072">SUSE bug 1206072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206075">SUSE bug 1206075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206077">SUSE bug 1206077</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3491/">CVE-2022-3491</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3520/">CVE-2022-3520</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3591/">CVE-2022-3591</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-3705/">CVE-2022-3705</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4141/">CVE-2022-4141</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4292/">CVE-2022-4292</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-4293/">CVE-2022-4293</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009729639" comment="gvim-9.0.1040-150000.5.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729640" comment="vim-9.0.1040-150000.5.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729553" comment="vim-data-9.0.1040-150000.5.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729554" comment="vim-data-common-9.0.1040-150000.5.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140051" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206474" ref_url="https://bugzilla.suse.com/1206474" source="BUGZILLA"/>
		<reference ref_id="1206750" ref_url="https://bugzilla.suse.com/1206750" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42852" ref_url="https://www.suse.com/security/cve/CVE-2022-42852/" source="CVE"/>
		<reference ref_id="CVE-2022-42856" ref_url="https://www.suse.com/security/cve/CVE-2022-42856/" source="CVE"/>
		<reference ref_id="CVE-2022-42863" ref_url="https://www.suse.com/security/cve/CVE-2022-42863/" source="CVE"/>
		<reference ref_id="CVE-2022-42867" ref_url="https://www.suse.com/security/cve/CVE-2022-42867/" source="CVE"/>
		<reference ref_id="CVE-2022-46691" ref_url="https://www.suse.com/security/cve/CVE-2022-46691/" source="CVE"/>
		<reference ref_id="CVE-2022-46692" ref_url="https://www.suse.com/security/cve/CVE-2022-46692/" source="CVE"/>
		<reference ref_id="CVE-2022-46698" ref_url="https://www.suse.com/security/cve/CVE-2022-46698/" source="CVE"/>
		<reference ref_id="CVE-2022-46699" ref_url="https://www.suse.com/security/cve/CVE-2022-46699/" source="CVE"/>
		<reference ref_id="CVE-2022-46700" ref_url="https://www.suse.com/security/cve/CVE-2022-46700/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4642-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013402.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.38.3:

- CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously crafted web content (bsc#1206474).
- CVE-2022-42852: Fixed disclosure of process memory by improved memory handling.
- CVE-2022-42867: Fixed a use after free issue was addressed with improved memory management.
- CVE-2022-46692: Fixed bypass of Same Origin Policy through improved state management.
- CVE-2022-46698: Fixed disclosure of sensitive user information with improved checks.
- CVE-2022-46699: Fixed an arbitrary code execution caused by memory corruption.
- CVE-2022-46700: Fixed an arbitrary code execution caused by memory corruption.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-30"/>
	<updated date="2022-12-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206474">SUSE bug 1206474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206750">SUSE bug 1206750</bugzilla>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-42852/">CVE-2022-42852</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42856/">CVE-2022-42856</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42863/">CVE-2022-42863</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42867/">CVE-2022-42867</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46691/">CVE-2022-46691</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-46692/">CVE-2022-46692</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-46698/">CVE-2022-46698</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46699/">CVE-2022-46699</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46700/">CVE-2022-46700</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009730527" comment="libjavascriptcoregtk-4_0-18-2.38.3-150000.3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730528" comment="libwebkit2gtk-4_0-37-2.38.3-150000.3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730529" comment="libwebkit2gtk3-lang-2.38.3-150000.3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730530" comment="typelib-1_0-JavaScriptCore-4_0-2.38.3-150000.3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730531" comment="typelib-1_0-WebKit2-4_0-2.38.3-150000.3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730532" comment="typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150000.3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730533" comment="webkit2gtk-4_0-injected-bundles-2.38.3-150000.3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730534" comment="webkit2gtk3-devel-2.38.3-150000.3.125.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140052" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194576" ref_url="https://bugzilla.suse.com/1194576" source="BUGZILLA"/>
		<reference ref_id="1194581" ref_url="https://bugzilla.suse.com/1194581" source="BUGZILLA"/>
		<reference ref_id="1194588" ref_url="https://bugzilla.suse.com/1194588" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23033" ref_url="https://www.suse.com/security/cve/CVE-2022-23033/" source="CVE"/>
		<reference ref_id="CVE-2022-23034" ref_url="https://www.suse.com/security/cve/CVE-2022-23034/" source="CVE"/>
		<reference ref_id="CVE-2022-23035" ref_url="https://www.suse.com/security/cve/CVE-2022-23035/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010242.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-23033: Fixed guest_physmap_remove_page not removing the p2m mappings. (XSA-393) (bsc#1194576)
- CVE-2022-23034: Fixed possible DoS by a PV guest Xen while unmapping a grant. (XSA-394) (bsc#1194581)
- CVE-2022-23035: Fixed insufficient cleanup of passed-through device IRQs. (XSA-395) (bsc#1194588)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-17"/>
	<updated date="2022-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194576">SUSE bug 1194576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194581">SUSE bug 1194581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194588">SUSE bug 1194588</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23033/">CVE-2022-23033</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23034/">CVE-2022-23034</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23035/">CVE-2022-23035</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009665528" comment="xen-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665529" comment="xen-devel-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665530" comment="xen-libs-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665531" comment="xen-tools-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665532" comment="xen-tools-domU-4.12.4_18-3.60.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140053" version="1" class="patch">
	<metadata>
		<title>Security update for virglrenderer (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195389" ref_url="https://bugzilla.suse.com/1195389" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0135" ref_url="https://www.suse.com/security/cve/CVE-2022-0135/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010243.html" source="SUSE-SU"/>
		<description>
This update for virglrenderer fixes the following issues:
	  
- CVE-2022-0135: Fixed out-of-bonds write in read_transfer_data() (bsc#1195389).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-17"/>
	<updated date="2022-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195389">SUSE bug 1195389</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0135/">CVE-2022-0135</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667314" comment="libvirglrenderer0-0.6.0-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667315" comment="virglrenderer-devel-0.6.0-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140054" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1071031" ref_url="https://bugzilla.suse.com/1071031" source="BUGZILLA"/>
		<reference ref_id="1154365" ref_url="https://bugzilla.suse.com/1154365" source="BUGZILLA"/>
		<reference ref_id="1182808" ref_url="https://bugzilla.suse.com/1182808" source="BUGZILLA"/>
		<reference ref_id="1182809" ref_url="https://bugzilla.suse.com/1182809" source="BUGZILLA"/>
		<reference ref_id="1182811" ref_url="https://bugzilla.suse.com/1182811" source="BUGZILLA"/>
		<reference ref_id="1182812" ref_url="https://bugzilla.suse.com/1182812" source="BUGZILLA"/>
		<reference ref_id="1190312" ref_url="https://bugzilla.suse.com/1190312" source="BUGZILLA"/>
		<reference ref_id="1194539" ref_url="https://bugzilla.suse.com/1194539" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17095" ref_url="https://www.suse.com/security/cve/CVE-2017-17095/" source="CVE"/>
		<reference ref_id="CVE-2019-17546" ref_url="https://www.suse.com/security/cve/CVE-2019-17546/" source="CVE"/>
		<reference ref_id="CVE-2020-19131" ref_url="https://www.suse.com/security/cve/CVE-2020-19131/" source="CVE"/>
		<reference ref_id="CVE-2020-35521" ref_url="https://www.suse.com/security/cve/CVE-2020-35521/" source="CVE"/>
		<reference ref_id="CVE-2020-35522" ref_url="https://www.suse.com/security/cve/CVE-2020-35522/" source="CVE"/>
		<reference ref_id="CVE-2020-35523" ref_url="https://www.suse.com/security/cve/CVE-2020-35523/" source="CVE"/>
		<reference ref_id="CVE-2020-35524" ref_url="https://www.suse.com/security/cve/CVE-2020-35524/" source="CVE"/>
		<reference ref_id="CVE-2022-22844" ref_url="https://www.suse.com/security/cve/CVE-2022-22844/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010245.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2017-17095: Fixed DoS in tools/pal2rgb.c in pal2rgb (bsc#1071031).
- CVE-2019-17546: Fixed integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image (bsc#1154365).
- CVE-2020-19131: Fixed buffer overflow in tiffcrop that may cause DoS via the invertImage() function (bsc#1190312).
- CVE-2020-35521: Fixed memory allocation failure in tif_read.c (bsc#1182808).
- CVE-2020-35522: Fixed memory allocation failure in tif_pixarlog.c (bsc#1182809).
- CVE-2020-35523: Fixed integer overflow in tif_getimage.c (bsc#1182811).
- CVE-2020-35524: Fixed heap-based buffer overflow in TIFF2PDF tool (bsc#1182812).
- CVE-2022-22844: Fixed out-of-bounds read in _TIFFmemcpy in tif_unix.c (bsc#1194539).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-17"/>
	<updated date="2022-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1071031">SUSE bug 1071031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154365">SUSE bug 1154365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182808">SUSE bug 1182808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182809">SUSE bug 1182809</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182811">SUSE bug 1182811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182812">SUSE bug 1182812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190312">SUSE bug 1190312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194539">SUSE bug 1194539</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17095/">CVE-2017-17095</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17546/">CVE-2019-17546</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-19131/">CVE-2020-19131</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35521/">CVE-2020-35521</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35522/">CVE-2020-35522</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35523/">CVE-2020-35523</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35524/">CVE-2020-35524</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22844/">CVE-2022-22844</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009665458" comment="libtiff-devel-4.0.9-45.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665459" comment="libtiff5-4.0.9-45.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665439" comment="libtiff5-32bit-4.0.9-45.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140055" version="1" class="patch">
	<metadata>
		<title>Security update for rust (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194767" ref_url="https://bugzilla.suse.com/1194767" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21658" ref_url="https://www.suse.com/security/cve/CVE-2022-21658/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010252.html" source="SUSE-SU"/>
		<description>
This update for rust fixes the following issues:

- CVE-2022-21658: Fixed race condition in std::fs::remove_dir_all (bsc#1194767).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1194767">SUSE bug 1194767</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21658/">CVE-2022-21658</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664554" comment="cargo-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664555" comment="rls-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664556" comment="rust-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664557" comment="rust-analysis-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664558" comment="rust-src-1.53.0-22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140056" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194731" ref_url="https://bugzilla.suse.com/1194731" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-20698" ref_url="https://www.suse.com/security/cve/CVE-2022-20698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010270.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

- CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194731">SUSE bug 1194731</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20698/">CVE-2022-20698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664539" comment="clamav-0.103.5-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664540" comment="clamav-devel-0.103.5-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664541" comment="libclamav9-0.103.5-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664542" comment="libfreshclam2-0.103.5-3.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140057" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195054" ref_url="https://bugzilla.suse.com/1195054" source="BUGZILLA"/>
		<reference ref_id="1195217" ref_url="https://bugzilla.suse.com/1195217" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23852" ref_url="https://www.suse.com/security/cve/CVE-2022-23852/" source="CVE"/>
		<reference ref_id="CVE-2022-23990" ref_url="https://www.suse.com/security/cve/CVE-2022-23990/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010268.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

- CVE-2022-23852: Fixed signed integer overflow in XML_GetBuffer (bsc#1195054).
- CVE-2022-23990: Fixed integer overflow in the doProlog function (bsc#1195217).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195054">SUSE bug 1195054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195217">SUSE bug 1195217</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23852/">CVE-2022-23852</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23990/">CVE-2022-23990</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009665460" comment="expat-2.2.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665461" comment="libexpat-devel-2.2.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665462" comment="libexpat1-2.2.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665436" comment="libexpat1-32bit-2.2.5-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140058" version="1" class="patch">
	<metadata>
		<title>Security update for net-snmp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1027353" ref_url="https://bugzilla.suse.com/1027353" source="BUGZILLA"/>
		<reference ref_id="1081164" ref_url="https://bugzilla.suse.com/1081164" source="BUGZILLA"/>
		<reference ref_id="1102775" ref_url="https://bugzilla.suse.com/1102775" source="BUGZILLA"/>
		<reference ref_id="1108471" ref_url="https://bugzilla.suse.com/1108471" source="BUGZILLA"/>
		<reference ref_id="1111122" ref_url="https://bugzilla.suse.com/1111122" source="BUGZILLA"/>
		<reference ref_id="1116807" ref_url="https://bugzilla.suse.com/1116807" source="BUGZILLA"/>
		<reference ref_id="1140341" ref_url="https://bugzilla.suse.com/1140341" source="BUGZILLA"/>
		<reference ref_id="1145864" ref_url="https://bugzilla.suse.com/1145864" source="BUGZILLA"/>
		<reference ref_id="1152968" ref_url="https://bugzilla.suse.com/1152968" source="BUGZILLA"/>
		<reference ref_id="1174961" ref_url="https://bugzilla.suse.com/1174961" source="BUGZILLA"/>
		<reference ref_id="1178021" ref_url="https://bugzilla.suse.com/1178021" source="BUGZILLA"/>
		<reference ref_id="1178351" ref_url="https://bugzilla.suse.com/1178351" source="BUGZILLA"/>
		<reference ref_id="1179009" ref_url="https://bugzilla.suse.com/1179009" source="BUGZILLA"/>
		<reference ref_id="1179699" ref_url="https://bugzilla.suse.com/1179699" source="BUGZILLA"/>
		<reference ref_id="1181591" ref_url="https://bugzilla.suse.com/1181591" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-18065" ref_url="https://www.suse.com/security/cve/CVE-2018-18065/" source="CVE"/>
		<reference ref_id="CVE-2020-15862" ref_url="https://www.suse.com/security/cve/CVE-2020-15862/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009993.html" source="SUSE-SU"/>
		<description>
This update for net-snmp fixes the following issues:

- CVE-2020-15862: Make extended MIB read-only (bsc#1174961)
- CVE-2018-18065: Fix remote DoS in agent/helpers/table.c (bsc#1111122)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-11"/>
	<updated date="2022-01-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027353">SUSE bug 1027353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081164">SUSE bug 1081164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102775">SUSE bug 1102775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108471">SUSE bug 1108471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111122">SUSE bug 1111122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116807">SUSE bug 1116807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140341">SUSE bug 1140341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145864">SUSE bug 1145864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152968">SUSE bug 1152968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174961">SUSE bug 1174961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178021">SUSE bug 1178021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178351">SUSE bug 1178351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179009">SUSE bug 1179009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179699">SUSE bug 1179699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181591">SUSE bug 1181591</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18065/">CVE-2018-18065</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15862/">CVE-2020-15862</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009661269" comment="libsnmp30-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661270" comment="net-snmp-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661271" comment="net-snmp-devel-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661272" comment="perl-SNMP-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661273" comment="snmp-mibs-5.7.3-10.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140059" version="1" class="patch">
	<metadata>
		<title>Security update for xerces-j2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195108" ref_url="https://bugzilla.suse.com/1195108" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23437" ref_url="https://www.suse.com/security/cve/CVE-2022-23437/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010265.html" source="SUSE-SU"/>
		<description>
This update for xerces-j2 fixes the following issues:
	  
- CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser (bsc#1195108).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195108">SUSE bug 1195108</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23437/">CVE-2022-23437</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667902" comment="xerces-j2-2.11.0-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667903" comment="xerces-j2-xml-apis-2.11.0-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667904" comment="xerces-j2-xml-resolver-2.11.0-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140060" version="1" class="patch">
	<metadata>
		<title>Security update for libsndfile (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194006" ref_url="https://bugzilla.suse.com/1194006" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4156" ref_url="https://www.suse.com/security/cve/CVE-2021-4156/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009992.html" source="SUSE-SU"/>
		<description>
This update for libsndfile fixes the following issues:

- CVE-2021-4156: Fixed heap buffer overflow in flac_buffer_copy that 
could potentially lead to heap exploitation (bsc#1194006).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-11"/>
	<updated date="2022-01-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194006">SUSE bug 1194006</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4156/">CVE-2021-4156</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009662464" comment="libsndfile-devel-1.0.28-5.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662465" comment="libsndfile1-1.0.28-5.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140061" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192615" ref_url="https://bugzilla.suse.com/1192615" source="BUGZILLA"/>
		<reference ref_id="1195779" ref_url="https://bugzilla.suse.com/1195779" source="BUGZILLA"/>
		<reference ref_id="1195780" ref_url="https://bugzilla.suse.com/1195780" source="BUGZILLA"/>
		<reference ref_id="1195781" ref_url="https://bugzilla.suse.com/1195781" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0127" ref_url="https://www.suse.com/security/cve/CVE-2021-0127/" source="CVE"/>
		<reference ref_id="CVE-2021-0145" ref_url="https://www.suse.com/security/cve/CVE-2021-0145/" source="CVE"/>
		<reference ref_id="CVE-2021-0146" ref_url="https://www.suse.com/security/cve/CVE-2021-0146/" source="CVE"/>
		<reference ref_id="CVE-2021-33120" ref_url="https://www.suse.com/security/cve/CVE-2021-33120/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010285.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20220207 release.

- CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)
- CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)
- CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)
- CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)

- Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)
- Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-21"/>
	<updated date="2022-02-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192615">SUSE bug 1192615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195779">SUSE bug 1195779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195780">SUSE bug 1195780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195781">SUSE bug 1195781</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0127/">CVE-2021-0127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0145/">CVE-2021-0145</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0146/">CVE-2021-0146</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-33120/">CVE-2021-33120</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667906" comment="ucode-intel-20220207-3.206.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140062" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191962" ref_url="https://bugzilla.suse.com/1191962" source="BUGZILLA"/>
		<reference ref_id="1191963" ref_url="https://bugzilla.suse.com/1191963" source="BUGZILLA"/>
		<reference ref_id="1192153" ref_url="https://bugzilla.suse.com/1192153" source="BUGZILLA"/>
		<reference ref_id="1192154" ref_url="https://bugzilla.suse.com/1192154" source="BUGZILLA"/>
		<reference ref_id="1192696" ref_url="https://bugzilla.suse.com/1192696" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23343" ref_url="https://www.suse.com/security/cve/CVE-2021-23343/" source="CVE"/>
		<reference ref_id="CVE-2021-32803" ref_url="https://www.suse.com/security/cve/CVE-2021-32803/" source="CVE"/>
		<reference ref_id="CVE-2021-32804" ref_url="https://www.suse.com/security/cve/CVE-2021-32804/" source="CVE"/>
		<reference ref_id="CVE-2021-3807" ref_url="https://www.suse.com/security/cve/CVE-2021-3807/" source="CVE"/>
		<reference ref_id="CVE-2021-3918" ref_url="https://www.suse.com/security/cve/CVE-2021-3918/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010304.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:
	  
- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).
- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).
- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).
- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).
- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-24"/>
	<updated date="2022-02-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191962">SUSE bug 1191962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191963">SUSE bug 1191963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192153">SUSE bug 1192153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192154">SUSE bug 1192154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192696">SUSE bug 1192696</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23343/">CVE-2021-23343</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32803/">CVE-2021-32803</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32804/">CVE-2021-32804</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3807/">CVE-2021-3807</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3918/">CVE-2021-3918</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009668303" comment="nodejs8-8.17.0-3.54.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668304" comment="nodejs8-devel-8.17.0-3.54.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668305" comment="nodejs8-docs-8.17.0-3.54.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668306" comment="npm8-8.17.0-3.54.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140063" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195230" ref_url="https://bugzilla.suse.com/1195230" source="BUGZILLA"/>
		<reference ref_id="1195682" ref_url="https://bugzilla.suse.com/1195682" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22753" ref_url="https://www.suse.com/security/cve/CVE-2022-22753/" source="CVE"/>
		<reference ref_id="CVE-2022-22754" ref_url="https://www.suse.com/security/cve/CVE-2022-22754/" source="CVE"/>
		<reference ref_id="CVE-2022-22756" ref_url="https://www.suse.com/security/cve/CVE-2022-22756/" source="CVE"/>
		<reference ref_id="CVE-2022-22759" ref_url="https://www.suse.com/security/cve/CVE-2022-22759/" source="CVE"/>
		<reference ref_id="CVE-2022-22760" ref_url="https://www.suse.com/security/cve/CVE-2022-22760/" source="CVE"/>
		<reference ref_id="CVE-2022-22761" ref_url="https://www.suse.com/security/cve/CVE-2022-22761/" source="CVE"/>
		<reference ref_id="CVE-2022-22763" ref_url="https://www.suse.com/security/cve/CVE-2022-22763/" source="CVE"/>
		<reference ref_id="CVE-2022-22764" ref_url="https://www.suse.com/security/cve/CVE-2022-22764/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010331.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682)

- CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service
- CVE-2022-22754: Extensions could have bypassed permission confirmation during update
- CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable
- CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements
- CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types
- CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages
- CVE-2022-22763: Script Execution during invalid object state
- CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6


Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)

- Fixed an issue that allowed unexpected data to be submitted in some of our search telemetry
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-02"/>
	<updated date="2022-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195230">SUSE bug 1195230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195682">SUSE bug 1195682</bugzilla>
	<cve impact="critical" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22753/">CVE-2022-22753</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22754/">CVE-2022-22754</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22756/">CVE-2022-22756</cve>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22759/">CVE-2022-22759</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22760/">CVE-2022-22760</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22761/">CVE-2022-22761</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22763/">CVE-2022-22763</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22764/">CVE-2022-22764</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667815" comment="MozillaFirefox-91.6.0-150.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667816" comment="MozillaFirefox-devel-91.6.0-150.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667817" comment="MozillaFirefox-translations-common-91.6.0-150.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667818" comment="MozillaFirefox-translations-other-91.6.0-150.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140064" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1038980" ref_url="https://bugzilla.suse.com/1038980" source="BUGZILLA"/>
		<reference ref_id="1081790" ref_url="https://bugzilla.suse.com/1081790" source="BUGZILLA"/>
		<reference ref_id="1192050" ref_url="https://bugzilla.suse.com/1192050" source="BUGZILLA"/>
		<reference ref_id="1193041" ref_url="https://bugzilla.suse.com/1193041" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-9253" ref_url="https://www.suse.com/security/cve/CVE-2015-9253/" source="CVE"/>
		<reference ref_id="CVE-2017-8923" ref_url="https://www.suse.com/security/cve/CVE-2017-8923/" source="CVE"/>
		<reference ref_id="CVE-2021-21703" ref_url="https://www.suse.com/security/cve/CVE-2021-21703/" source="CVE"/>
		<reference ref_id="CVE-2021-21707" ref_url="https://www.suse.com/security/cve/CVE-2021-21707/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010332.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2021-21703: Fixed local privilege escalation via PHP-FPM (bsc#1192050).
- CVE-2021-21707: Fixed special character breaks path in xml parsing (bsc#1193041).
- CVE-2017-8923: Fixed denial of service (application crash) when using .= with a long string (zend_string_extend func in Zend/zend_string.h) (bsc#1038980).
- CVE-2015-9253: Fixed endless loop when the master process restarts a child process using program execution functions (bsc#1081790).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-02"/>
	<updated date="2022-03-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1038980">SUSE bug 1038980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081790">SUSE bug 1081790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192050">SUSE bug 1192050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193041">SUSE bug 1193041</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9253/">CVE-2015-9253</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8923/">CVE-2017-8923</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21703/">CVE-2021-21703</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21707/">CVE-2021-21707</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009668512" comment="apache2-mod_php7-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668513" comment="php7-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668514" comment="php7-bcmath-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668515" comment="php7-bz2-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668516" comment="php7-calendar-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668517" comment="php7-ctype-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668518" comment="php7-curl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668519" comment="php7-dba-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668520" comment="php7-devel-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668521" comment="php7-dom-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668522" comment="php7-enchant-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668523" comment="php7-exif-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668524" comment="php7-fastcgi-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668525" comment="php7-fileinfo-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668526" comment="php7-fpm-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668527" comment="php7-ftp-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668528" comment="php7-gd-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668529" comment="php7-gettext-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668530" comment="php7-gmp-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668531" comment="php7-iconv-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668532" comment="php7-intl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668533" comment="php7-json-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668534" comment="php7-ldap-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668535" comment="php7-mbstring-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668536" comment="php7-mysql-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668537" comment="php7-odbc-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668538" comment="php7-opcache-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668539" comment="php7-openssl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668540" comment="php7-pcntl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668541" comment="php7-pdo-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668542" comment="php7-pear-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668543" comment="php7-pear-Archive_Tar-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668544" comment="php7-pgsql-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668545" comment="php7-phar-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668546" comment="php7-posix-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668547" comment="php7-readline-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668548" comment="php7-shmop-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668549" comment="php7-snmp-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668550" comment="php7-soap-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668551" comment="php7-sockets-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668552" comment="php7-sodium-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668553" comment="php7-sqlite-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668554" comment="php7-sysvmsg-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668555" comment="php7-sysvsem-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668556" comment="php7-sysvshm-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668572" comment="php7-tidy-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668557" comment="php7-tokenizer-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668558" comment="php7-wddx-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668559" comment="php7-xmlreader-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668560" comment="php7-xmlrpc-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668561" comment="php7-xmlwriter-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668562" comment="php7-xsl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668563" comment="php7-zip-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668564" comment="php7-zlib-7.2.5-4.89.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140065" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195255" ref_url="https://bugzilla.suse.com/1195255" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23181" ref_url="https://www.suse.com/security/cve/CVE-2022-23181/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010339.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2022-23181: Fixed time of check, time of use vulnerability that allowed local privilege escalation. (bsc#1195255)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195255">SUSE bug 1195255</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23181/">CVE-2022-23181</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009668573" comment="tomcat-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668574" comment="tomcat-admin-webapps-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668575" comment="tomcat-el-3_0-api-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668576" comment="tomcat-jsp-2_3-api-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668577" comment="tomcat-lib-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668578" comment="tomcat-servlet-4_0-api-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668579" comment="tomcat-webapps-9.0.36-4.70.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140066" version="1" class="patch">
	<metadata>
		<title>Security update for cyrus-sasl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196036" ref_url="https://bugzilla.suse.com/1196036" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24407" ref_url="https://www.suse.com/security/cve/CVE-2022-24407/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010340.html" source="SUSE-SU"/>
		<description>
This update for cyrus-sasl fixes the following issues:

- CVE-2022-24407: Fixed SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196036">SUSE bug 1196036</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24407/">CVE-2022-24407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669200" comment="cyrus-sasl-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669201" comment="cyrus-sasl-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669202" comment="cyrus-sasl-crammd5-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669203" comment="cyrus-sasl-crammd5-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669204" comment="cyrus-sasl-devel-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669205" comment="cyrus-sasl-digestmd5-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669206" comment="cyrus-sasl-digestmd5-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669207" comment="cyrus-sasl-gssapi-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669208" comment="cyrus-sasl-gssapi-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669209" comment="cyrus-sasl-otp-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669210" comment="cyrus-sasl-plain-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669211" comment="cyrus-sasl-plain-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669212" comment="cyrus-sasl-saslauthd-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669213" comment="cyrus-sasl-sqlauxprop-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669214" comment="libsasl2-3-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669215" comment="libsasl2-3-32bit-2.1.26-5.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140067" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195064" ref_url="https://bugzilla.suse.com/1195064" source="BUGZILLA"/>
		<reference ref_id="1195735" ref_url="https://bugzilla.suse.com/1195735" source="BUGZILLA"/>
		<reference ref_id="1196133" ref_url="https://bugzilla.suse.com/1196133" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30934" ref_url="https://www.suse.com/security/cve/CVE-2021-30934/" source="CVE"/>
		<reference ref_id="CVE-2021-30936" ref_url="https://www.suse.com/security/cve/CVE-2021-30936/" source="CVE"/>
		<reference ref_id="CVE-2021-30951" ref_url="https://www.suse.com/security/cve/CVE-2021-30951/" source="CVE"/>
		<reference ref_id="CVE-2021-30952" ref_url="https://www.suse.com/security/cve/CVE-2021-30952/" source="CVE"/>
		<reference ref_id="CVE-2021-30953" ref_url="https://www.suse.com/security/cve/CVE-2021-30953/" source="CVE"/>
		<reference ref_id="CVE-2021-30954" ref_url="https://www.suse.com/security/cve/CVE-2021-30954/" source="CVE"/>
		<reference ref_id="CVE-2021-30984" ref_url="https://www.suse.com/security/cve/CVE-2021-30984/" source="CVE"/>
		<reference ref_id="CVE-2021-45481" ref_url="https://www.suse.com/security/cve/CVE-2021-45481/" source="CVE"/>
		<reference ref_id="CVE-2021-45482" ref_url="https://www.suse.com/security/cve/CVE-2021-45482/" source="CVE"/>
		<reference ref_id="CVE-2021-45483" ref_url="https://www.suse.com/security/cve/CVE-2021-45483/" source="CVE"/>
		<reference ref_id="CVE-2022-22589" ref_url="https://www.suse.com/security/cve/CVE-2022-22589/" source="CVE"/>
		<reference ref_id="CVE-2022-22590" ref_url="https://www.suse.com/security/cve/CVE-2022-22590/" source="CVE"/>
		<reference ref_id="CVE-2022-22592" ref_url="https://www.suse.com/security/cve/CVE-2022-22592/" source="CVE"/>
		<reference ref_id="CVE-2022-22594" ref_url="https://www.suse.com/security/cve/CVE-2022-22594/" source="CVE"/>
		<reference ref_id="CVE-2022-22620" ref_url="https://www.suse.com/security/cve/CVE-2022-22620/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010341.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.34.6 (bsc#1196133):

- CVE-2022-22620: Processing maliciously crafted web content may have lead to arbitrary code execution.

Update to version 2.34.5 (bsc#1195735):

- CVE-2022-22589: A validation issue was addressed with improved input sanitization.
- CVE-2022-22590: A use after free issue was addressed with improved memory management.
- CVE-2022-22592: A logic issue was addressed with improved state management.

Update to version 2.34.4 (bsc#1195064):

- CVE-2021-30934: A buffer overflow issue was addressed with improved memory handling.
- CVE-2021-30936: A use after free issue was addressed with improved memory management.
- CVE-2021-30951: A use after free issue was addressed with improved memory management.
- CVE-2021-30952: An integer overflow was addressed with improved input validation.
- CVE-2021-30953: An out-of-bounds read was addressed with improved bounds checking.
- CVE-2021-30954: A type confusion issue was addressed with improved memory handling.
- CVE-2021-30984: A race condition was addressed with improved state handling.
- CVE-2022-22594: A cross-origin issue in the IndexDB API was addressed with improved input validation.

The following CVEs were addressed in a previous update:

- CVE-2021-45481: Incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create.
- CVE-2021-45482: A use-after-free in WebCore::ContainerNode::firstChild.
- CVE-2021-45483: A use-after-free in WebCore::Frame::page.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195064">SUSE bug 1195064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195735">SUSE bug 1195735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196133">SUSE bug 1196133</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30934/">CVE-2021-30934</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30936/">CVE-2021-30936</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30951/">CVE-2021-30951</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30952/">CVE-2021-30952</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30953/">CVE-2021-30953</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30954/">CVE-2021-30954</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30984/">CVE-2021-30984</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45481/">CVE-2021-45481</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45482/">CVE-2021-45482</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45483/">CVE-2021-45483</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-22589/">CVE-2022-22589</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22590/">CVE-2022-22590</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-22592/">CVE-2022-22592</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22594/">CVE-2022-22594</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22620/">CVE-2022-22620</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670468" comment="libjavascriptcoregtk-4_0-18-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670469" comment="libwebkit2gtk-4_0-37-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670470" comment="libwebkit2gtk3-lang-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670471" comment="typelib-1_0-JavaScriptCore-4_0-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670472" comment="typelib-1_0-WebKit2-4_0-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670473" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670474" comment="webkit2gtk-4_0-injected-bundles-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670475" comment="webkit2gtk3-devel-2.34.6-3.97.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140068" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191962" ref_url="https://bugzilla.suse.com/1191962" source="BUGZILLA"/>
		<reference ref_id="1191963" ref_url="https://bugzilla.suse.com/1191963" source="BUGZILLA"/>
		<reference ref_id="1192153" ref_url="https://bugzilla.suse.com/1192153" source="BUGZILLA"/>
		<reference ref_id="1192154" ref_url="https://bugzilla.suse.com/1192154" source="BUGZILLA"/>
		<reference ref_id="1192696" ref_url="https://bugzilla.suse.com/1192696" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23343" ref_url="https://www.suse.com/security/cve/CVE-2021-23343/" source="CVE"/>
		<reference ref_id="CVE-2021-32803" ref_url="https://www.suse.com/security/cve/CVE-2021-32803/" source="CVE"/>
		<reference ref_id="CVE-2021-32804" ref_url="https://www.suse.com/security/cve/CVE-2021-32804/" source="CVE"/>
		<reference ref_id="CVE-2021-3807" ref_url="https://www.suse.com/security/cve/CVE-2021-3807/" source="CVE"/>
		<reference ref_id="CVE-2021-3918" ref_url="https://www.suse.com/security/cve/CVE-2021-3918/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010344.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).
- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).
- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).
- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).
- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191962">SUSE bug 1191962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191963">SUSE bug 1191963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192153">SUSE bug 1192153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192154">SUSE bug 1192154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192696">SUSE bug 1192696</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23343/">CVE-2021-23343</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32803/">CVE-2021-32803</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32804/">CVE-2021-32804</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3807/">CVE-2021-3807</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3918/">CVE-2021-3918</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669756" comment="nodejs-common-2.0-3.4.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140069" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196025" ref_url="https://bugzilla.suse.com/1196025" source="BUGZILLA"/>
		<reference ref_id="1196026" ref_url="https://bugzilla.suse.com/1196026" source="BUGZILLA"/>
		<reference ref_id="1196168" ref_url="https://bugzilla.suse.com/1196168" source="BUGZILLA"/>
		<reference ref_id="1196169" ref_url="https://bugzilla.suse.com/1196169" source="BUGZILLA"/>
		<reference ref_id="1196171" ref_url="https://bugzilla.suse.com/1196171" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25235" ref_url="https://www.suse.com/security/cve/CVE-2022-25235/" source="CVE"/>
		<reference ref_id="CVE-2022-25236" ref_url="https://www.suse.com/security/cve/CVE-2022-25236/" source="CVE"/>
		<reference ref_id="CVE-2022-25313" ref_url="https://www.suse.com/security/cve/CVE-2022-25313/" source="CVE"/>
		<reference ref_id="CVE-2022-25314" ref_url="https://www.suse.com/security/cve/CVE-2022-25314/" source="CVE"/>
		<reference ref_id="CVE-2022-25315" ref_url="https://www.suse.com/security/cve/CVE-2022-25315/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010357.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:
  
- CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs (bsc#1196025).
- CVE-2022-25235: Fixed UTF-8 character validation in a certain context (bsc#1196026).
- CVE-2022-25313: Fixed stack exhaustion in build_model() via uncontrolled recursion (bsc#1196168).
- CVE-2022-25314: Fixed integer overflow in copyString (bsc#1196169).
- CVE-2022-25315: Fixed integer overflow in storeRawNames (bsc#1196171).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196025">SUSE bug 1196025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196026">SUSE bug 1196026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196168">SUSE bug 1196168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196169">SUSE bug 1196169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196171">SUSE bug 1196171</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25235/">CVE-2022-25235</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25236/">CVE-2022-25236</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-25313/">CVE-2022-25313</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25314/">CVE-2022-25314</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25315/">CVE-2022-25315</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669763" comment="expat-2.2.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669764" comment="libexpat-devel-2.2.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669765" comment="libexpat1-2.2.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669165" comment="libexpat1-32bit-2.2.5-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140070" version="1" class="patch">
	<metadata>
		<title>Security update for wpa_supplicant (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194732" ref_url="https://bugzilla.suse.com/1194732" source="BUGZILLA"/>
		<reference ref_id="1194733" ref_url="https://bugzilla.suse.com/1194733" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23303" ref_url="https://www.suse.com/security/cve/CVE-2022-23303/" source="CVE"/>
		<reference ref_id="CVE-2022-23304" ref_url="https://www.suse.com/security/cve/CVE-2022-23304/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010363.html" source="SUSE-SU"/>
		<description>
This update for wpa_supplicant fixes the following issues:
	  
- CVE-2022-23303: Fixed side-channel attacks in SAE (bsc#1194732).
- CVE-2022-23304: Fixed side-channel attacks in EAP-pwd (bsc#1194733).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194732">SUSE bug 1194732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194733">SUSE bug 1194733</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23303/">CVE-2022-23303</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23304/">CVE-2022-23304</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669199" comment="wpa_supplicant-2.9-4.33.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140071" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195786" ref_url="https://bugzilla.suse.com/1195786" source="BUGZILLA"/>
		<reference ref_id="1196333" ref_url="https://bugzilla.suse.com/1196333" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0066" ref_url="https://www.suse.com/security/cve/CVE-2021-0066/" source="CVE"/>
		<reference ref_id="CVE-2021-0072" ref_url="https://www.suse.com/security/cve/CVE-2021-0072/" source="CVE"/>
		<reference ref_id="CVE-2021-0076" ref_url="https://www.suse.com/security/cve/CVE-2021-0076/" source="CVE"/>
		<reference ref_id="CVE-2021-0161" ref_url="https://www.suse.com/security/cve/CVE-2021-0161/" source="CVE"/>
		<reference ref_id="CVE-2021-0164" ref_url="https://www.suse.com/security/cve/CVE-2021-0164/" source="CVE"/>
		<reference ref_id="CVE-2021-0165" ref_url="https://www.suse.com/security/cve/CVE-2021-0165/" source="CVE"/>
		<reference ref_id="CVE-2021-0166" ref_url="https://www.suse.com/security/cve/CVE-2021-0166/" source="CVE"/>
		<reference ref_id="CVE-2021-0168" ref_url="https://www.suse.com/security/cve/CVE-2021-0168/" source="CVE"/>
		<reference ref_id="CVE-2021-0170" ref_url="https://www.suse.com/security/cve/CVE-2021-0170/" source="CVE"/>
		<reference ref_id="CVE-2021-0172" ref_url="https://www.suse.com/security/cve/CVE-2021-0172/" source="CVE"/>
		<reference ref_id="CVE-2021-0173" ref_url="https://www.suse.com/security/cve/CVE-2021-0173/" source="CVE"/>
		<reference ref_id="CVE-2021-0174" ref_url="https://www.suse.com/security/cve/CVE-2021-0174/" source="CVE"/>
		<reference ref_id="CVE-2021-0175" ref_url="https://www.suse.com/security/cve/CVE-2021-0175/" source="CVE"/>
		<reference ref_id="CVE-2021-0176" ref_url="https://www.suse.com/security/cve/CVE-2021-0176/" source="CVE"/>
		<reference ref_id="CVE-2021-0183" ref_url="https://www.suse.com/security/cve/CVE-2021-0183/" source="CVE"/>
		<reference ref_id="CVE-2021-33139" ref_url="https://www.suse.com/security/cve/CVE-2021-33139/" source="CVE"/>
		<reference ref_id="CVE-2021-33155" ref_url="https://www.suse.com/security/cve/CVE-2021-33155/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

- Update Intel Wireless firmware for 9xxx (CVE-2021-0161,
  CVE-2021-0164,CVE-2021-0165,CVE-2021-0066,CVE-2021-0166,
  CVE-2021-0168,CVE-2021-0170,CVE-2021-0172,CVE-2021-0173,
  CVE-2021-0174,CVE-2021-0175,CVE-2021-0076,CVE-2021-0176,
  CVE-2021-0183,CVE-2021-0072,INTEL-SA-00539,bsc#1196333):
  iwlwifi-9000-pu-b0-jf-b0-46.ucode
  iwlwifi-9000-pu-b0-jf-b0-46.ucode
- Update Intel Bluetooth firmware (CVE-2021-33139,CVE-2021-33155,
  INTEL-SA-00604,bsc#1195786)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195786">SUSE bug 1195786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0066/">CVE-2021-0066</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0072/">CVE-2021-0072</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0076/">CVE-2021-0076</cve>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0161/">CVE-2021-0161</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0164/">CVE-2021-0164</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0165/">CVE-2021-0165</cve>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0166/">CVE-2021-0166</cve>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0168/">CVE-2021-0168</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0170/">CVE-2021-0170</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0172/">CVE-2021-0172</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0173/">CVE-2021-0173</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0174/">CVE-2021-0174</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0175/">CVE-2021-0175</cve>
	<cve impact="important" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0176/">CVE-2021-0176</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0183/">CVE-2021-0183</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33139/">CVE-2021-33139</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33155/">CVE-2021-33155</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669993" comment="kernel-firmware-20200107-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669994" comment="ucode-amd-20200107-3.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140072" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195866" ref_url="https://bugzilla.suse.com/1195866" source="BUGZILLA"/>
		<reference ref_id="1195867" ref_url="https://bugzilla.suse.com/1195867" source="BUGZILLA"/>
		<reference ref_id="1195868" ref_url="https://bugzilla.suse.com/1195868" source="BUGZILLA"/>
		<reference ref_id="1195869" ref_url="https://bugzilla.suse.com/1195869" source="BUGZILLA"/>
		<reference ref_id="1195870" ref_url="https://bugzilla.suse.com/1195870" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0581" ref_url="https://www.suse.com/security/cve/CVE-2022-0581/" source="CVE"/>
		<reference ref_id="CVE-2022-0582" ref_url="https://www.suse.com/security/cve/CVE-2022-0582/" source="CVE"/>
		<reference ref_id="CVE-2022-0583" ref_url="https://www.suse.com/security/cve/CVE-2022-0583/" source="CVE"/>
		<reference ref_id="CVE-2022-0585" ref_url="https://www.suse.com/security/cve/CVE-2022-0585/" source="CVE"/>
		<reference ref_id="CVE-2022-0586" ref_url="https://www.suse.com/security/cve/CVE-2022-0586/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010360.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

Update to Wireshark 3.6.2:

- CVE-2022-0586: RTMPT dissector infinite loop (bsc#1195866)
- CVE-2022-0585: Large loops in multiple dissectors (bsc#1195867)
- CVE-2022-0583: PVFS dissector crash (bsc#1195868)
- CVE-2022-0582: CSN.1 dissector crash (bsc#1195869)
- CVE-2022-0581: CMS dissector crash (bsc#1195870)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195866">SUSE bug 1195866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195867">SUSE bug 1195867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195868">SUSE bug 1195868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195869">SUSE bug 1195869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195870">SUSE bug 1195870</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0581/">CVE-2022-0581</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0582/">CVE-2022-0582</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0583/">CVE-2022-0583</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0585/">CVE-2022-0585</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0586/">CVE-2022-0586</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669985" comment="libwireshark15-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669986" comment="libwiretap12-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669987" comment="libwsutil13-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669988" comment="wireshark-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669989" comment="wireshark-devel-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669990" comment="wireshark-ui-qt-3.6.2-3.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140073" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195325" ref_url="https://bugzilla.suse.com/1195325" source="BUGZILLA"/>
		<reference ref_id="1195334" ref_url="https://bugzilla.suse.com/1195334" source="BUGZILLA"/>
		<reference ref_id="1195339" ref_url="https://bugzilla.suse.com/1195339" source="BUGZILLA"/>
		<reference ref_id="1196016" ref_url="https://bugzilla.suse.com/1196016" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46657" ref_url="https://www.suse.com/security/cve/CVE-2021-46657/" source="CVE"/>
		<reference ref_id="CVE-2021-46658" ref_url="https://www.suse.com/security/cve/CVE-2021-46658/" source="CVE"/>
		<reference ref_id="CVE-2021-46659" ref_url="https://www.suse.com/security/cve/CVE-2021-46659/" source="CVE"/>
		<reference ref_id="CVE-2021-46661" ref_url="https://www.suse.com/security/cve/CVE-2021-46661/" source="CVE"/>
		<reference ref_id="CVE-2021-46663" ref_url="https://www.suse.com/security/cve/CVE-2021-46663/" source="CVE"/>
		<reference ref_id="CVE-2021-46664" ref_url="https://www.suse.com/security/cve/CVE-2021-46664/" source="CVE"/>
		<reference ref_id="CVE-2021-46665" ref_url="https://www.suse.com/security/cve/CVE-2021-46665/" source="CVE"/>
		<reference ref_id="CVE-2021-46668" ref_url="https://www.suse.com/security/cve/CVE-2021-46668/" source="CVE"/>
		<reference ref_id="CVE-2022-24048" ref_url="https://www.suse.com/security/cve/CVE-2022-24048/" source="CVE"/>
		<reference ref_id="CVE-2022-24050" ref_url="https://www.suse.com/security/cve/CVE-2022-24050/" source="CVE"/>
		<reference ref_id="CVE-2022-24051" ref_url="https://www.suse.com/security/cve/CVE-2022-24051/" source="CVE"/>
		<reference ref_id="CVE-2022-24052" ref_url="https://www.suse.com/security/cve/CVE-2022-24052/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010354.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

- Update to 10.2.43 (bsc#1196016):
    10.2.43: CVE-2021-46665
             CVE-2021-46664
             CVE-2021-46661
             CVE-2021-46668
             CVE-2021-46663 
    10.2.42: CVE-2022-24052
             CVE-2022-24051
             CVE-2022-24050
             CVE-2022-24048
             CVE-2021-46659, bsc#1195339
	     
- The following issues have already been fixed in this package but weren't 
previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195325">SUSE bug 1195325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195334">SUSE bug 1195334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195339">SUSE bug 1195339</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196016">SUSE bug 1196016</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46657/">CVE-2021-46657</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46658/">CVE-2021-46658</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46659/">CVE-2021-46659</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46661/">CVE-2021-46661</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46663/">CVE-2021-46663</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46664/">CVE-2021-46664</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46665/">CVE-2021-46665</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46668/">CVE-2021-46668</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24048/">CVE-2022-24048</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24050/">CVE-2022-24050</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24051/">CVE-2022-24051</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24052/">CVE-2022-24052</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669757" comment="libmysqld-devel-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669758" comment="libmysqld19-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669759" comment="mariadb-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669760" comment="mariadb-client-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669761" comment="mariadb-errormessages-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669762" comment="mariadb-tools-10.2.43-3.51.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140074" version="1" class="patch">
	<metadata>
		<title>Security update for zsh (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1163882" ref_url="https://bugzilla.suse.com/1163882" source="BUGZILLA"/>
		<reference ref_id="1196435" ref_url="https://bugzilla.suse.com/1196435" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20044" ref_url="https://www.suse.com/security/cve/CVE-2019-20044/" source="CVE"/>
		<reference ref_id="CVE-2021-45444" ref_url="https://www.suse.com/security/cve/CVE-2021-45444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010365.html" source="SUSE-SU"/>
		<description>
This update for zsh fixes the following issues:

- CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be 
  executed related to prompt expansion (bsc#1196435).
- CVE-2019-20044: Fixed a vulnerability where shell privileges would not be
  properly dropped when unsetting the PRIVILEGED option (bsc#1163882).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1163882">SUSE bug 1163882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196435">SUSE bug 1196435</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-20044/">CVE-2019-20044</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-45444/">CVE-2021-45444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670478" comment="zsh-5.6-7.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140075" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1190533" ref_url="https://bugzilla.suse.com/1190533" source="BUGZILLA"/>
		<reference ref_id="1190570" ref_url="https://bugzilla.suse.com/1190570" source="BUGZILLA"/>
		<reference ref_id="1191893" ref_url="https://bugzilla.suse.com/1191893" source="BUGZILLA"/>
		<reference ref_id="1192478" ref_url="https://bugzilla.suse.com/1192478" source="BUGZILLA"/>
		<reference ref_id="1192481" ref_url="https://bugzilla.suse.com/1192481" source="BUGZILLA"/>
		<reference ref_id="1193294" ref_url="https://bugzilla.suse.com/1193294" source="BUGZILLA"/>
		<reference ref_id="1193298" ref_url="https://bugzilla.suse.com/1193298" source="BUGZILLA"/>
		<reference ref_id="1194216" ref_url="https://bugzilla.suse.com/1194216" source="BUGZILLA"/>
		<reference ref_id="1194556" ref_url="https://bugzilla.suse.com/1194556" source="BUGZILLA"/>
		<reference ref_id="1195004" ref_url="https://bugzilla.suse.com/1195004" source="BUGZILLA"/>
		<reference ref_id="1195066" ref_url="https://bugzilla.suse.com/1195066" source="BUGZILLA"/>
		<reference ref_id="1195126" ref_url="https://bugzilla.suse.com/1195126" source="BUGZILLA"/>
		<reference ref_id="1195202" ref_url="https://bugzilla.suse.com/1195202" source="BUGZILLA"/>
		<reference ref_id="1195356" ref_url="https://bugzilla.suse.com/1195356" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3778" ref_url="https://www.suse.com/security/cve/CVE-2021-3778/" source="CVE"/>
		<reference ref_id="CVE-2021-3796" ref_url="https://www.suse.com/security/cve/CVE-2021-3796/" source="CVE"/>
		<reference ref_id="CVE-2021-3872" ref_url="https://www.suse.com/security/cve/CVE-2021-3872/" source="CVE"/>
		<reference ref_id="CVE-2021-3927" ref_url="https://www.suse.com/security/cve/CVE-2021-3927/" source="CVE"/>
		<reference ref_id="CVE-2021-3928" ref_url="https://www.suse.com/security/cve/CVE-2021-3928/" source="CVE"/>
		<reference ref_id="CVE-2021-3984" ref_url="https://www.suse.com/security/cve/CVE-2021-3984/" source="CVE"/>
		<reference ref_id="CVE-2021-4019" ref_url="https://www.suse.com/security/cve/CVE-2021-4019/" source="CVE"/>
		<reference ref_id="CVE-2021-4193" ref_url="https://www.suse.com/security/cve/CVE-2021-4193/" source="CVE"/>
		<reference ref_id="CVE-2021-46059" ref_url="https://www.suse.com/security/cve/CVE-2021-46059/" source="CVE"/>
		<reference ref_id="CVE-2022-0318" ref_url="https://www.suse.com/security/cve/CVE-2022-0318/" source="CVE"/>
		<reference ref_id="CVE-2022-0319" ref_url="https://www.suse.com/security/cve/CVE-2022-0319/" source="CVE"/>
		<reference ref_id="CVE-2022-0351" ref_url="https://www.suse.com/security/cve/CVE-2022-0351/" source="CVE"/>
		<reference ref_id="CVE-2022-0361" ref_url="https://www.suse.com/security/cve/CVE-2022-0361/" source="CVE"/>
		<reference ref_id="CVE-2022-0413" ref_url="https://www.suse.com/security/cve/CVE-2022-0413/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010366.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).
- CVE-2021-3796: Fixed use-after-free in nv_replace() in normal.c (bsc#1190570).
- CVE-2021-3872: Fixed heap-based buffer overflow in win_redr_status() drawscreen.c (bsc#1191893).
- CVE-2021-3927: Fixed heap-based buffer overflow (bsc#1192481).
- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).
- CVE-2021-4019: Fixed heap-based buffer overflow (bsc#1193294).
- CVE-2021-3984: Fixed illegal memory access when C-indenting could have led to heap buffer overflow (bsc#1193298).
- CVE-2021-3778: Fixed heap-based buffer overflow in regexp_nfa.c (bsc#1190533).
- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).
- CVE-2021-46059: Fixed pointer dereference vulnerability via the vim_regexec_multi function at regexp.c (bsc#1194556).
- CVE-2022-0319: Fixded out-of-bounds read (bsc#1195066).
- CVE-2022-0351: Fixed uncontrolled recursion in eval7() (bsc#1195126).
- CVE-2022-0361: Fixed buffer overflow (bsc#1195126).
- CVE-2022-0413: Fixed use-after-free in src/ex_cmds.c (bsc#1195356).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190533">SUSE bug 1190533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190570">SUSE bug 1190570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191893">SUSE bug 1191893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192478">SUSE bug 1192478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192481">SUSE bug 1192481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193294">SUSE bug 1193294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193298">SUSE bug 1193298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194216">SUSE bug 1194216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194556">SUSE bug 1194556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195004">SUSE bug 1195004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195066">SUSE bug 1195066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195126">SUSE bug 1195126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195202">SUSE bug 1195202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195356">SUSE bug 1195356</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3778/">CVE-2021-3778</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3796/">CVE-2021-3796</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3872/">CVE-2021-3872</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3927/">CVE-2021-3927</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3928/">CVE-2021-3928</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3984/">CVE-2021-3984</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4019/">CVE-2021-4019</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4193/">CVE-2021-4193</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46059/">CVE-2021-46059</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0318/">CVE-2022-0318</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0319/">CVE-2022-0319</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0351/">CVE-2022-0351</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-0361/">CVE-2022-0361</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0413/">CVE-2022-0413</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669991" comment="gvim-8.0.1568-5.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669992" comment="vim-8.0.1568-5.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669882" comment="vim-data-8.0.1568-5.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669883" comment="vim-data-common-8.0.1568-5.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140076" version="1" class="patch">
	<metadata>
		<title>Security update for libcaca (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182731" ref_url="https://bugzilla.suse.com/1182731" source="BUGZILLA"/>
		<reference ref_id="1184751" ref_url="https://bugzilla.suse.com/1184751" source="BUGZILLA"/>
		<reference ref_id="1184752" ref_url="https://bugzilla.suse.com/1184752" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30498" ref_url="https://www.suse.com/security/cve/CVE-2021-30498/" source="CVE"/>
		<reference ref_id="CVE-2021-30499" ref_url="https://www.suse.com/security/cve/CVE-2021-30499/" source="CVE"/>
		<reference ref_id="CVE-2021-3410" ref_url="https://www.suse.com/security/cve/CVE-2021-3410/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0754-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010388.html" source="SUSE-SU"/>
		<description>
This update for libcaca fixes the following issues:

- CVE-2021-30499: Fixed a memory corruption issue when exporting troff sources (bsc#1184751).
- CVE-2021-30498: Fixed a memory corruption issue when exporting TGA images (bsc#1184752).
- CVE-2021-3410: Fixed an illegal WRITE memory access (bsc#1182731).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-08"/>
	<updated date="2022-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182731">SUSE bug 1182731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184751">SUSE bug 1184751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184752">SUSE bug 1184752</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30498/">CVE-2021-30498</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30499/">CVE-2021-30499</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3410/">CVE-2021-3410</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670672" comment="libcaca-devel-0.99.beta19.git20171003-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670673" comment="libcaca0-0.99.beta19.git20171003-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670674" comment="libcaca0-plugins-0.99.beta19.git20171003-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140077" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185973" ref_url="https://bugzilla.suse.com/1185973" source="BUGZILLA"/>
		<reference ref_id="1191580" ref_url="https://bugzilla.suse.com/1191580" source="BUGZILLA"/>
		<reference ref_id="1194516" ref_url="https://bugzilla.suse.com/1194516" source="BUGZILLA"/>
		<reference ref_id="1195536" ref_url="https://bugzilla.suse.com/1195536" source="BUGZILLA"/>
		<reference ref_id="1195543" ref_url="https://bugzilla.suse.com/1195543" source="BUGZILLA"/>
		<reference ref_id="1195612" ref_url="https://bugzilla.suse.com/1195612" source="BUGZILLA"/>
		<reference ref_id="1195840" ref_url="https://bugzilla.suse.com/1195840" source="BUGZILLA"/>
		<reference ref_id="1195897" ref_url="https://bugzilla.suse.com/1195897" source="BUGZILLA"/>
		<reference ref_id="1195908" ref_url="https://bugzilla.suse.com/1195908" source="BUGZILLA"/>
		<reference ref_id="1195949" ref_url="https://bugzilla.suse.com/1195949" source="BUGZILLA"/>
		<reference ref_id="1195987" ref_url="https://bugzilla.suse.com/1195987" source="BUGZILLA"/>
		<reference ref_id="1196079" ref_url="https://bugzilla.suse.com/1196079" source="BUGZILLA"/>
		<reference ref_id="1196155" ref_url="https://bugzilla.suse.com/1196155" source="BUGZILLA"/>
		<reference ref_id="1196584" ref_url="https://bugzilla.suse.com/1196584" source="BUGZILLA"/>
		<reference ref_id="1196612" ref_url="https://bugzilla.suse.com/1196612" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44879" ref_url="https://www.suse.com/security/cve/CVE-2021-44879/" source="CVE"/>
		<reference ref_id="CVE-2022-0001" ref_url="https://www.suse.com/security/cve/CVE-2022-0001/" source="CVE"/>
		<reference ref_id="CVE-2022-0002" ref_url="https://www.suse.com/security/cve/CVE-2022-0002/" source="CVE"/>
		<reference ref_id="CVE-2022-0487" ref_url="https://www.suse.com/security/cve/CVE-2022-0487/" source="CVE"/>
		<reference ref_id="CVE-2022-0492" ref_url="https://www.suse.com/security/cve/CVE-2022-0492/" source="CVE"/>
		<reference ref_id="CVE-2022-0617" ref_url="https://www.suse.com/security/cve/CVE-2022-0617/" source="CVE"/>
		<reference ref_id="CVE-2022-0644" ref_url="https://www.suse.com/security/cve/CVE-2022-0644/" source="CVE"/>
		<reference ref_id="CVE-2022-0847" ref_url="https://www.suse.com/security/cve/CVE-2022-0847/" source="CVE"/>
		<reference ref_id="CVE-2022-24448" ref_url="https://www.suse.com/security/cve/CVE-2022-24448/" source="CVE"/>
		<reference ref_id="CVE-2022-24959" ref_url="https://www.suse.com/security/cve/CVE-2022-24959/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010395.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


Transient execution side-channel attacks attacking the Branch History Buffer (BHB),
named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.

The following security bugs were fixed:

- CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).
- CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).
- CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584).
- CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079)
- CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd() (bsc#1196155).
- CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987).
- CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897).
- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
- CVE-2022-24448: Fixed an issue in fs/nfs/dir.c. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612).


The following non-security bugs were fixed:

- crypto: af_alg - get_page upon reassignment to TX SGL (bsc#1195840).
- lib/iov_iter: initialize 'flags' in new pipe_buffer (bsc#1196584).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185973">SUSE bug 1185973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191580">SUSE bug 1191580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194516">SUSE bug 1194516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195536">SUSE bug 1195536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195543">SUSE bug 1195543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195612">SUSE bug 1195612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195840">SUSE bug 1195840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195897">SUSE bug 1195897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195908">SUSE bug 1195908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195949">SUSE bug 1195949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195987">SUSE bug 1195987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196079">SUSE bug 1196079</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196155">SUSE bug 1196155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196584">SUSE bug 1196584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196612">SUSE bug 1196612</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-44879/">CVE-2021-44879</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0001/">CVE-2022-0001</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0002/">CVE-2022-0002</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0487/">CVE-2022-0487</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0492/">CVE-2022-0492</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0617/">CVE-2022-0617</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0644/">CVE-2022-0644</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0847/">CVE-2022-0847</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-24448/">CVE-2022-24448</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-24959/">CVE-2022-24959</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671488" comment="kernel-default-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671489" comment="kernel-default-base-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671490" comment="kernel-default-devel-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671491" comment="kernel-devel-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671492" comment="kernel-docs-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671493" comment="kernel-macros-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671494" comment="kernel-obs-build-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671495" comment="kernel-source-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671496" comment="kernel-syms-4.12.14-197.108.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140078" version="1" class="patch">
	<metadata>
		<title>Security update for tcpdump (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195825" ref_url="https://bugzilla.suse.com/1195825" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16301" ref_url="https://www.suse.com/security/cve/CVE-2018-16301/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010403.html" source="SUSE-SU"/>
		<description>
This update for tcpdump fixes the following issues:

- CVE-2018-16301: Fixed segfault when handling large files (bsc#1195825).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1195825">SUSE bug 1195825</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16301/">CVE-2018-16301</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668002" comment="tcpdump-4.9.2-3.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140079" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196809" ref_url="https://bugzilla.suse.com/1196809" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26485" ref_url="https://www.suse.com/security/cve/CVE-2022-26485/" source="CVE"/>
		<reference ref_id="CVE-2022-26486" ref_url="https://www.suse.com/security/cve/CVE-2022-26486/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010409.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.6.1 ESR (bsc#1196809):

- CVE-2022-26485: Use-after-free in XSLT parameter processing
- CVE-2022-26486: Use-after-free in WebGPU IPC Framework
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196809">SUSE bug 1196809</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26485/">CVE-2022-26485</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26486/">CVE-2022-26486</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671473" comment="MozillaFirefox-91.6.1-150.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671474" comment="MozillaFirefox-devel-91.6.1-150.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671475" comment="MozillaFirefox-translations-common-91.6.1-150.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671476" comment="MozillaFirefox-translations-other-91.6.1-150.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140080" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196137" ref_url="https://bugzilla.suse.com/1196137" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:0779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010410.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- Remove hard log4j dependency, as it is not required by tomcat itself (bsc#1196137)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196137">SUSE bug 1196137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670690" comment="tomcat-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670691" comment="tomcat-admin-webapps-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670692" comment="tomcat-el-3_0-api-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670693" comment="tomcat-jsp-2_3-api-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670694" comment="tomcat-lib-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670695" comment="tomcat-servlet-4_0-api-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670696" comment="tomcat-webapps-9.0.36-4.73.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140081" version="1" class="patch">
	<metadata>
		<title>Security update for python-libxml2-python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196490" ref_url="https://bugzilla.suse.com/1196490" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23308" ref_url="https://www.suse.com/security/cve/CVE-2022-23308/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010416.html" source="SUSE-SU"/>
		<description>
This update for python-libxml2-python fixes the following issues:

- CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes (bsc#1196490).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-10"/>
	<updated date="2022-03-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196490">SUSE bug 1196490</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-23308/">CVE-2022-23308</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670476" comment="python2-libxml2-python-2.9.7-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670477" comment="python3-libxml2-python-2.9.7-3.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140082" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196900" ref_url="https://bugzilla.suse.com/1196900" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26381" ref_url="https://www.suse.com/security/cve/CVE-2022-26381/" source="CVE"/>
		<reference ref_id="CVE-2022-26383" ref_url="https://www.suse.com/security/cve/CVE-2022-26383/" source="CVE"/>
		<reference ref_id="CVE-2022-26384" ref_url="https://www.suse.com/security/cve/CVE-2022-26384/" source="CVE"/>
		<reference ref_id="CVE-2022-26386" ref_url="https://www.suse.com/security/cve/CVE-2022-26386/" source="CVE"/>
		<reference ref_id="CVE-2022-26387" ref_url="https://www.suse.com/security/cve/CVE-2022-26387/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010426.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.7.0 ESR (bsc#1196900):

- CVE-2022-26383: Browser window spoof using fullscreen mode
- CVE-2022-26384: iframe allow-scripts sandbox bypass
- CVE-2022-26387: Time-of-check time-of-use bug when verifying add-on signatures
- CVE-2022-26381: Use-after-free in text reflows
- CVE-2022-26386: Temporary files downloaded to /tmp and accessible by other local users
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196900">SUSE bug 1196900</bugzilla>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26381/">CVE-2022-26381</cve>
	<cve impact="critical" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-26383/">CVE-2022-26383</cve>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26384/">CVE-2022-26384</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26386/">CVE-2022-26386</cve>
	<cve impact="critical" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26387/">CVE-2022-26387</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009672522" comment="MozillaFirefox-91.7.0-150.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672523" comment="MozillaFirefox-devel-91.7.0-150.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672524" comment="MozillaFirefox-translations-common-91.7.0-150.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672525" comment="MozillaFirefox-translations-other-91.7.0-150.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140083" version="1" class="patch">
	<metadata>
		<title>Security update for SDL2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181201" ref_url="https://bugzilla.suse.com/1181201" source="BUGZILLA"/>
		<reference ref_id="1181202" ref_url="https://bugzilla.suse.com/1181202" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14409" ref_url="https://www.suse.com/security/cve/CVE-2020-14409/" source="CVE"/>
		<reference ref_id="CVE-2020-14410" ref_url="https://www.suse.com/security/cve/CVE-2020-14410/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010429.html" source="SUSE-SU"/>
		<description>
This update for SDL2 fixes the following issues:

- CVE-2020-14409, CVE-2020-14410: Fixed overflow in surface pitch calculation (bsc#1181201, bsc#1181202).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181201">SUSE bug 1181201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181202">SUSE bug 1181202</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14409/">CVE-2020-14409</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14410/">CVE-2020-14410</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670675" comment="libSDL2-2_0-0-2.0.8-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670676" comment="libSDL2-devel-2.0.8-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140084" version="1" class="patch">
	<metadata>
		<title>Security update for sssd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182637" ref_url="https://bugzilla.suse.com/1182637" source="BUGZILLA"/>
		<reference ref_id="1189492" ref_url="https://bugzilla.suse.com/1189492" source="BUGZILLA"/>
		<reference ref_id="1190775" ref_url="https://bugzilla.suse.com/1190775" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3621" ref_url="https://www.suse.com/security/cve/CVE-2021-3621/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010431.html" source="SUSE-SU"/>
		<description>
This update for sssd fixes the following issues:

Security issues fixed:

- CVE-2021-3621: Fixed shell command injection in sssctl via the logs-fetch and cache-expire subcommands (bsc#1189492).

Non-security issues fixed:

- Create timestamp attribute in cache objects if missing. (bsc#1182637)
- Add 'ldap_ignore_unreadable_references' parameter to skip unreadable objects referenced by 'member' attributte (bsc#1190775).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182637">SUSE bug 1182637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189492">SUSE bug 1189492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190775">SUSE bug 1190775</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3621/">CVE-2021-3621</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671450" comment="libipa_hbac-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671451" comment="libipa_hbac0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671452" comment="libsss_certmap-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671453" comment="libsss_certmap0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671454" comment="libsss_idmap-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671455" comment="libsss_idmap0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671456" comment="libsss_nss_idmap-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671457" comment="libsss_nss_idmap0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671458" comment="libsss_simpleifp-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671459" comment="libsss_simpleifp0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671460" comment="python3-sssd-config-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671461" comment="sssd-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671462" comment="sssd-32bit-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671463" comment="sssd-ad-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671464" comment="sssd-dbus-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671465" comment="sssd-ipa-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671466" comment="sssd-krb5-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671467" comment="sssd-krb5-common-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671468" comment="sssd-ldap-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671469" comment="sssd-proxy-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671470" comment="sssd-tools-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671471" comment="sssd-wbclient-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671472" comment="sssd-wbclient-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671487" comment="sssd-winbind-idmap-1.16.1-8.64.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140085" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193625" ref_url="https://bugzilla.suse.com/1193625" source="BUGZILLA"/>
		<reference ref_id="1194640" ref_url="https://bugzilla.suse.com/1194640" source="BUGZILLA"/>
		<reference ref_id="1194768" ref_url="https://bugzilla.suse.com/1194768" source="BUGZILLA"/>
		<reference ref_id="1194770" ref_url="https://bugzilla.suse.com/1194770" source="BUGZILLA"/>
		<reference ref_id="1195560" ref_url="https://bugzilla.suse.com/1195560" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-8985" ref_url="https://www.suse.com/security/cve/CVE-2015-8985/" source="CVE"/>
		<reference ref_id="CVE-2021-3999" ref_url="https://www.suse.com/security/cve/CVE-2021-3999/" source="CVE"/>
		<reference ref_id="CVE-2022-23218" ref_url="https://www.suse.com/security/cve/CVE-2022-23218/" source="CVE"/>
		<reference ref_id="CVE-2022-23219" ref_url="https://www.suse.com/security/cve/CVE-2022-23219/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010437.html" source="SUSE-SU"/>
		<description>

glibc was updated to fix the following issues:

Security issues fixed:

- CVE-2022-23219: Fixed Buffer overflow in sunrpc clnt_create for 'unix' (bsc#1194768)
- CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bsc#1194770)
- CVE-2021-3999: Fixed getcwd to set errno to ERANGE for size == 1 (bsc#1194640)
- CVE-2015-8985: Fixed Assertion failure in pop_fail_stack when executing a malformed regexp (bsc#1193625)

Also the following bug was fixed:

- Fix pthread_rwlock_try*lock stalls (bsc#1195560)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193625">SUSE bug 1193625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194640">SUSE bug 1194640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194768">SUSE bug 1194768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194770">SUSE bug 1194770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195560">SUSE bug 1195560</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8985/">CVE-2015-8985</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3999/">CVE-2021-3999</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-23218/">CVE-2022-23218</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-23219/">CVE-2022-23219</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669024" comment="glibc-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669025" comment="glibc-32bit-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669026" comment="glibc-devel-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669027" comment="glibc-devel-32bit-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669028" comment="glibc-devel-static-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669029" comment="glibc-extra-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669030" comment="glibc-i18ndata-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669031" comment="glibc-info-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669032" comment="glibc-locale-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669033" comment="glibc-locale-base-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669034" comment="glibc-locale-base-32bit-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669035" comment="glibc-profile-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669036" comment="glibc-utils-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669037" comment="nscd-2.26-13.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140086" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196025" ref_url="https://bugzilla.suse.com/1196025" source="BUGZILLA"/>
		<reference ref_id="1196784" ref_url="https://bugzilla.suse.com/1196784" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25236" ref_url="https://www.suse.com/security/cve/CVE-2022-25236/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010445.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

- Fixed a regression caused by the patch for CVE-2022-25236 (bsc#1196784).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-15"/>
	<updated date="2022-03-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196025">SUSE bug 1196025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196784">SUSE bug 1196784</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25236/">CVE-2022-25236</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671236" comment="expat-2.2.5-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671237" comment="libexpat-devel-2.2.5-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671238" comment="libexpat1-2.2.5-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671084" comment="libexpat1-32bit-2.2.5-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140087" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196877" ref_url="https://bugzilla.suse.com/1196877" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0778" ref_url="https://www.suse.com/security/cve/CVE-2022-0778/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010448.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-15"/>
	<updated date="2022-03-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196877">SUSE bug 1196877</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0778/">CVE-2022-0778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009672887" comment="libopenssl-1_1-devel-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672888" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672889" comment="libopenssl1_1-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672890" comment="libopenssl1_1-32bit-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672891" comment="libopenssl1_1-hmac-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672892" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672893" comment="openssl-1_1-1.1.0i-14.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140088" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1  (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182959" ref_url="https://bugzilla.suse.com/1182959" source="BUGZILLA"/>
		<reference ref_id="1195149" ref_url="https://bugzilla.suse.com/1195149" source="BUGZILLA"/>
		<reference ref_id="1195792" ref_url="https://bugzilla.suse.com/1195792" source="BUGZILLA"/>
		<reference ref_id="1195856" ref_url="https://bugzilla.suse.com/1195856" source="BUGZILLA"/>
		<reference ref_id="1196877" ref_url="https://bugzilla.suse.com/1196877" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0778" ref_url="https://www.suse.com/security/cve/CVE-2022-0778/" source="CVE"/>
		<description>
This update for openssl-1_1 fixes the following issues:

openssl-1_1:

- CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
- Fix PAC pointer authentication in ARM (bsc#1195856)
- Pull libopenssl-1_1 when updating openssl-1_1 with the same version (bsc#1195792)
- FIPS: Fix function and reason error codes (bsc#1182959)
- Enable zlib compression support (bsc#1195149)
    
glibc:

- Resolve installation issue of `glibc-devel` in SUSE Linux Enterprise Micro 5.1
    
linux-glibc-devel:

- Resolve installation issue of `linux-kernel-headers` in SUSE Linux Enterprise Micro 5.1

libxcrypt:

- Resolve installation issue of `libxcrypt-devel` in SUSE Linux Enterprise Micro 5.1

zlib:

- Resolve installation issue of `zlib-devel` in SUSE Linux Enterprise Micro 5.1
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-16"/>
	<updated date="2022-03-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182959">SUSE bug 1182959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195149">SUSE bug 1195149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195792">SUSE bug 1195792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195856">SUSE bug 1195856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196877">SUSE bug 1196877</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0778/">CVE-2022-0778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673262" comment="libminizip1-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673263" comment="libz1-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673208" comment="libz1-32bit-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673264" comment="minizip-devel-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673265" comment="zlib-devel-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673222" comment="zlib-devel-32bit-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673266" comment="zlib-devel-static-1.2.11-3.26.10 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140089" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197091" ref_url="https://bugzilla.suse.com/1197091" source="BUGZILLA"/>
		<reference ref_id="1197095" ref_url="https://bugzilla.suse.com/1197095" source="BUGZILLA"/>
		<reference ref_id="1197096" ref_url="https://bugzilla.suse.com/1197096" source="BUGZILLA"/>
		<reference ref_id="1197098" ref_url="https://bugzilla.suse.com/1197098" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22719" ref_url="https://www.suse.com/security/cve/CVE-2022-22719/" source="CVE"/>
		<reference ref_id="CVE-2022-22720" ref_url="https://www.suse.com/security/cve/CVE-2022-22720/" source="CVE"/>
		<reference ref_id="CVE-2022-22721" ref_url="https://www.suse.com/security/cve/CVE-2022-22721/" source="CVE"/>
		<reference ref_id="CVE-2022-23943" ref_url="https://www.suse.com/security/cve/CVE-2022-23943/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010499.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2022-23943: heap out-of-bounds write in mod_sed (bsc#1197098).
- CVE-2022-22720: HTTP request smuggling due to incorrect error handling (bsc#1197095).
- CVE-2022-22719: use of uninitialized value of in r:parsebody in mod_lua (bsc#1197091).
- CVE-2022-22721: possible buffer overflow with very large or unlimited LimitXMLRequestBody (bsc#1197096).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-22"/>
	<updated date="2022-03-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197091">SUSE bug 1197091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197095">SUSE bug 1197095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197096">SUSE bug 1197096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197098">SUSE bug 1197098</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22719/">CVE-2022-22719</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22720/">CVE-2022-22720</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22721/">CVE-2022-22721</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23943/">CVE-2022-23943</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673677" comment="apache2-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673678" comment="apache2-devel-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673679" comment="apache2-doc-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673680" comment="apache2-prefork-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673681" comment="apache2-utils-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673682" comment="apache2-worker-2.4.33-150000.3.66.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140090" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196915" ref_url="https://bugzilla.suse.com/1196915" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26401" ref_url="https://www.suse.com/security/cve/CVE-2021-26401/" source="CVE"/>
		<reference ref_id="CVE-2022-0001" ref_url="https://www.suse.com/security/cve/CVE-2022-0001/" source="CVE"/>
		<reference ref_id="CVE-2022-0002" ref_url="https://www.suse.com/security/cve/CVE-2022-0002/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010501.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

Transient execution side-channel attacks attacking the Branch History Buffer (BHB),
named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.

- CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: BHB speculation issues (bsc#1196915).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-22"/>
	<updated date="2022-03-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196915">SUSE bug 1196915</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-26401/">CVE-2021-26401</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0001/">CVE-2022-0001</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0002/">CVE-2022-0002</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673267" comment="xen-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673268" comment="xen-devel-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673269" comment="xen-libs-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673270" comment="xen-tools-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673271" comment="xen-tools-domU-4.12.4_20-3.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140091" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197135" ref_url="https://bugzilla.suse.com/1197135" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25220" ref_url="https://www.suse.com/security/cve/CVE-2021-25220/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0946-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010510.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- CVE-2021-25220: Fixed a DNS cache poisoning vulnerability due to loose
  caching rules (bsc#1197135).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-24"/>
	<updated date="2022-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197135">SUSE bug 1197135</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-25220/">CVE-2021-25220</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673904" comment="bind-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673905" comment="bind-chrootenv-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673906" comment="bind-devel-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673907" comment="bind-doc-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673908" comment="bind-utils-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673909" comment="libbind9-1600-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673910" comment="libdns1605-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673911" comment="libirs-devel-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673912" comment="libirs1601-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673913" comment="libisc1606-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673914" comment="libisccc1600-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673915" comment="libisccfg1600-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673916" comment="libns1604-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673917" comment="python3-bind-9.16.6-150000.12.60.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140092" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207032" ref_url="https://bugzilla.suse.com/1207032" source="BUGZILLA"/>
		<reference ref_id="1207033" ref_url="https://bugzilla.suse.com/1207033" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23521" ref_url="https://www.suse.com/security/cve/CVE-2022-23521/" source="CVE"/>
		<reference ref_id="CVE-2022-41903" ref_url="https://www.suse.com/security/cve/CVE-2022-41903/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013489.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- CVE-2022-41903: Fixed a heap overflow in the 'git archive' and
  'git log --format' commands (bsc#1207033).
- CVE-2022-23521: Fixed an integer overflow that could be triggered
  when parsing a gitattributes file (bsc#1207032).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-20"/>
	<updated date="2023-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207032">SUSE bug 1207032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207033">SUSE bug 1207033</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23521/">CVE-2022-23521</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41903/">CVE-2022-41903</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009734232" comment="git-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734233" comment="git-arch-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734234" comment="git-core-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734235" comment="git-cvs-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734236" comment="git-daemon-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734237" comment="git-doc-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734238" comment="git-email-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734239" comment="git-gui-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734240" comment="git-svn-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734241" comment="git-web-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734242" comment="gitk-2.26.2-150000.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140093" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207119" ref_url="https://bugzilla.suse.com/1207119" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-46871" ref_url="https://www.suse.com/security/cve/CVE-2022-46871/" source="CVE"/>
		<reference ref_id="CVE-2022-46877" ref_url="https://www.suse.com/security/cve/CVE-2022-46877/" source="CVE"/>
		<reference ref_id="CVE-2023-23598" ref_url="https://www.suse.com/security/cve/CVE-2023-23598/" source="CVE"/>
		<reference ref_id="CVE-2023-23601" ref_url="https://www.suse.com/security/cve/CVE-2023-23601/" source="CVE"/>
		<reference ref_id="CVE-2023-23602" ref_url="https://www.suse.com/security/cve/CVE-2023-23602/" source="CVE"/>
		<reference ref_id="CVE-2023-23603" ref_url="https://www.suse.com/security/cve/CVE-2023-23603/" source="CVE"/>
		<reference ref_id="CVE-2023-23605" ref_url="https://www.suse.com/security/cve/CVE-2023-23605/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013488.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Updated to version 102.7.0 ESR (bsc#1207119):
  - CVE-2022-46871: Updated an out of date library (libusrsctp) which
    contained several vulnerabilities.
  - CVE-2023-23598: Fixed an arbitrary file read from GTK drag and
    drop on Linux.
  - CVE-2023-23601: Fixed a potential spoofing attack when dragging a
    URL from a cross-origin iframe into the same tab.
  - CVE-2023-23602: Fixed a mishandled security check, which caused
    the Content Security Policy header to be ignored for WebSockets
    in WebWorkers.
  - CVE-2022-46877: Fixed a fullscreen notification bypass which
    could be leveraged in spoofing attacks.
  - CVE-2023-23603: Fixed a Content Security Policy bypass via format
    directives.
  - CVE-2023-23605: Fixed several memory safety bugs.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-20"/>
	<updated date="2023-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207119">SUSE bug 1207119</bugzilla>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46871/">CVE-2022-46871</cve>
	<cve impact="critical" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-46877/">CVE-2022-46877</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23598/">CVE-2023-23598</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-23601/">CVE-2023-23601</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-23602/">CVE-2023-23602</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-23603/">CVE-2023-23603</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23605/">CVE-2023-23605</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009732575" comment="MozillaFirefox-102.7.0-150000.150.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732576" comment="MozillaFirefox-devel-102.7.0-150000.150.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732577" comment="MozillaFirefox-translations-common-102.7.0-150000.150.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732578" comment="MozillaFirefox-translations-other-102.7.0-150000.150.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140094" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206170" ref_url="https://bugzilla.suse.com/1206170" source="BUGZILLA"/>
		<reference ref_id="1207082" ref_url="https://bugzilla.suse.com/1207082" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-22809" ref_url="https://www.suse.com/security/cve/CVE-2023-22809/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013490.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:

- CVE-2023-22809: Fixed an arbitrary file write issue that could be
  exploited by users with sudoedit permissions (bsc#1207082).

Other fixes:

- Fixed a potential crash while using the sssd plugin (bsc#1206170).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-20"/>
	<updated date="2023-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206170">SUSE bug 1206170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207082">SUSE bug 1207082</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-22809/">CVE-2023-22809</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009733883" comment="sudo-1.8.27-150000.4.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009733884" comment="sudo-devel-1.8.27-150000.4.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140095" version="1" class="patch">
	<metadata>
		<title>Security update for xrdp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206300" ref_url="https://bugzilla.suse.com/1206300" source="BUGZILLA"/>
		<reference ref_id="1206303" ref_url="https://bugzilla.suse.com/1206303" source="BUGZILLA"/>
		<reference ref_id="1206306" ref_url="https://bugzilla.suse.com/1206306" source="BUGZILLA"/>
		<reference ref_id="1206307" ref_url="https://bugzilla.suse.com/1206307" source="BUGZILLA"/>
		<reference ref_id="1206310" ref_url="https://bugzilla.suse.com/1206310" source="BUGZILLA"/>
		<reference ref_id="1206311" ref_url="https://bugzilla.suse.com/1206311" source="BUGZILLA"/>
		<reference ref_id="1206312" ref_url="https://bugzilla.suse.com/1206312" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23468" ref_url="https://www.suse.com/security/cve/CVE-2022-23468/" source="CVE"/>
		<reference ref_id="CVE-2022-23479" ref_url="https://www.suse.com/security/cve/CVE-2022-23479/" source="CVE"/>
		<reference ref_id="CVE-2022-23480" ref_url="https://www.suse.com/security/cve/CVE-2022-23480/" source="CVE"/>
		<reference ref_id="CVE-2022-23481" ref_url="https://www.suse.com/security/cve/CVE-2022-23481/" source="CVE"/>
		<reference ref_id="CVE-2022-23482" ref_url="https://www.suse.com/security/cve/CVE-2022-23482/" source="CVE"/>
		<reference ref_id="CVE-2022-23483" ref_url="https://www.suse.com/security/cve/CVE-2022-23483/" source="CVE"/>
		<reference ref_id="CVE-2022-23484" ref_url="https://www.suse.com/security/cve/CVE-2022-23484/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013412.html" source="SUSE-SU"/>
		<description>
This update for xrdp fixes the following issues:

- CVE-2022-23468: Fixed a buffer overflow in xrdp_login_wnd_create() (bsc#1206300).
- CVE-2022-23479: Fixed a buffer overflow in xrdp_mm_chan_data_in() (bsc#1206303).
- CVE-2022-23480: Fixed a buffer overflow in devredir_proc_client_devlist_announce_req() (bsc#1206306).
- CVE-2022-23481: Fixed an out of bound read in xrdp_caps_process_confirm_active() (bsc#1206307).
- CVE-2022-23482: Fixed an out of bound read in xrdp_sec_process_mcs_data_CS_CORE() (bsc#1206310).
- CVE-2022-23483: Fixed an out of bound read in libxrdp_send_to_channel() (bsc#1206311).
- CVE-2022-23484: Fixed a integer overflow in xrdp_mm_process_rail_update_window_text() (bsc#1206312).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-02"/>
	<updated date="2023-01-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206300">SUSE bug 1206300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206303">SUSE bug 1206303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206306">SUSE bug 1206306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206307">SUSE bug 1206307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206310">SUSE bug 1206310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206311">SUSE bug 1206311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206312">SUSE bug 1206312</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-23468/">CVE-2022-23468</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23479/">CVE-2022-23479</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23480/">CVE-2022-23480</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23481/">CVE-2022-23481</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23482/">CVE-2022-23482</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23483/">CVE-2022-23483</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23484/">CVE-2022-23484</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009730732" comment="libpainter0-0.9.6-150000.4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730733" comment="librfxencode0-0.9.6-150000.4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730734" comment="xrdp-0.9.6-150000.4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730735" comment="xrdp-devel-0.9.6-150000.4.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140096" version="1" class="patch">
	<metadata>
		<title>Security update for sqlite3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206337" ref_url="https://bugzilla.suse.com/1206337" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-46908" ref_url="https://www.suse.com/security/cve/CVE-2022-46908/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1295-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030149.html" source="SUSE-SU"/>
		<description>
This update for sqlite3 fixes the following issues:

- CVE-2022-46908: Properly implement the azProhibitedFunctions protection mechanism, 
  when relying on --safe for execution of an untrusted CLI script (bsc#1206337).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-29"/>
	<updated date="2023-06-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206337">SUSE bug 1206337</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-46908/">CVE-2022-46908</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009729752" comment="libsqlite3-0-3.39.3-150000.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729557" comment="libsqlite3-0-32bit-3.39.3-150000.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769568" comment="sqlite3-3.39.3-150000.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769569" comment="sqlite3-devel-3.39.3-150000.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729753" comment="sqlite3-tcl-3.39.3-150000.3.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140097" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204272" ref_url="https://bugzilla.suse.com/1204272" source="BUGZILLA"/>
		<reference ref_id="1207038" ref_url="https://bugzilla.suse.com/1207038" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23491" ref_url="https://www.suse.com/security/cve/CVE-2022-23491/" source="CVE"/>
		<reference ref_id="CVE-2022-3479" ref_url="https://www.suse.com/security/cve/CVE-2022-3479/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0130-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013518.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

- CVE-2022-3479: Fixed a potential crash that could be triggered when
  a server requested a client authentication certificate, but the
  client had no certificates stored (bsc#1204272).
- Updated to version 3.79.3 (bsc#1207038):
  - CVE-2022-23491: Removed trust for 3 root certificates from TrustCor.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-24"/>
	<updated date="2023-01-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204272">SUSE bug 1204272</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207038">SUSE bug 1207038</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23491/">CVE-2022-23491</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3479/">CVE-2022-3479</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009732313" comment="libfreebl3-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732314" comment="libfreebl3-32bit-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732315" comment="libfreebl3-hmac-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732316" comment="libfreebl3-hmac-32bit-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732317" comment="libsoftokn3-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732318" comment="libsoftokn3-32bit-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732319" comment="libsoftokn3-hmac-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732320" comment="libsoftokn3-hmac-32bit-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732321" comment="mozilla-nss-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732322" comment="mozilla-nss-32bit-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732323" comment="mozilla-nss-certs-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732324" comment="mozilla-nss-certs-32bit-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732325" comment="mozilla-nss-devel-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732326" comment="mozilla-nss-sysinit-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732328" comment="mozilla-nss-tools-3.79.3-150000.3.90.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140098" version="1" class="patch">
	<metadata>
		<title>Security update for python-certifi (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206212" ref_url="https://bugzilla.suse.com/1206212" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23491" ref_url="https://www.suse.com/security/cve/CVE-2022-23491/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013525.html" source="SUSE-SU"/>
		<description>
This update for python-certifi fixes the following issues:

- remove all TrustCor CAs, as TrustCor issued multiple man-in-the-middle
  certs (bsc#1206212 CVE-2022-23491)
     - TrustCor RootCert CA-1
     - TrustCor RootCert CA-2
     - TrustCor ECA-1
- Add removeTrustCor.patch
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-25"/>
	<updated date="2023-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206212">SUSE bug 1206212</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23491/">CVE-2022-23491</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009731160" comment="python2-certifi-2018.1.18-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731091" comment="python3-certifi-2018.1.18-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140099" version="1" class="patch">
	<metadata>
		<title>Security update for libzypp-plugin-appdata (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181400" ref_url="https://bugzilla.suse.com/1181400" source="BUGZILLA"/>
		<reference ref_id="1206836" ref_url="https://bugzilla.suse.com/1206836" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-22643" ref_url="https://www.suse.com/security/cve/CVE-2023-22643/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013524.html" source="SUSE-SU"/>
		<description>
This update for libzypp-plugin-appdata fixes the following issues:

- CVE-2023-22643: Fixed potential shell injection related to malicious repo names (bsc#1206836).
- Added hardening to systemd service (bsc#1181400). 
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-25"/>
	<updated date="2023-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181400">SUSE bug 1181400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206836">SUSE bug 1206836</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-22643/">CVE-2023-22643</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732683" comment="libzypp-plugin-appdata-1.0.1+git.20180426-150100.8.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140100" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205209" ref_url="https://bugzilla.suse.com/1205209" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23824" ref_url="https://www.suse.com/security/cve/CVE-2022-23824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0154-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013550.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-23824: Fixed multiple speculative execution issues (bnc#1205209).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-26"/>
	<updated date="2023-01-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205209">SUSE bug 1205209</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23824/">CVE-2022-23824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009733885" comment="xen-4.12.4_32-150100.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009733886" comment="xen-devel-4.12.4_32-150100.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009733887" comment="xen-libs-4.12.4_32-150100.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009733888" comment="xen-tools-4.12.4_32-150100.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009733889" comment="xen-tools-domU-4.12.4_32-150100.3.83.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140101" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203120" ref_url="https://bugzilla.suse.com/1203120" source="BUGZILLA"/>
		<reference ref_id="1203121" ref_url="https://bugzilla.suse.com/1203121" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-39176" ref_url="https://www.suse.com/security/cve/CVE-2022-39176/" source="CVE"/>
		<reference ref_id="CVE-2022-39177" ref_url="https://www.suse.com/security/cve/CVE-2022-39177/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013548.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2022-39176: Fixed a memory safety issue that could allow
  physically proximate attackers to obtain sensitive information
  (bsc#1203121).
- CVE-2022-39177: Fixed a memory safety issue that could allow
  physically proximate attackers to cause a denial of service
  (bsc#1203120).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-26"/>
	<updated date="2023-01-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203120">SUSE bug 1203120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203121">SUSE bug 1203121</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-39176/">CVE-2022-39176</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-39177/">CVE-2022-39177</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009733616" comment="bluez-5.48-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009733617" comment="bluez-devel-5.48-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009733618" comment="libbluetooth3-5.48-150000.5.46.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140102" version="1" class="patch">
	<metadata>
		<title>Security update for containerd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206235" ref_url="https://bugzilla.suse.com/1206235" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23471" ref_url="https://www.suse.com/security/cve/CVE-2022-23471/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1628-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028424.html" source="SUSE-SU"/>
		<description>
This update for containerd fixes the following issues:

- CVE-2022-23471: Fixed host memory exhaustion through Terminal resize goroutine leak (bsc#1206235).

- Re-build containerd to use updated golang-packaging (jsc#1342).
- Update to containerd v1.6.16 for Docker v23.0.0-ce.
  * https://github.com/containerd/containerd/releases/tag/v1.6.16

		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-28"/>
	<updated date="2023-03-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206235">SUSE bug 1206235</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23471/">CVE-2022-23471</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009744976" comment="containerd-1.6.16-150000.82.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744977" comment="containerd-ctr-1.6.16-150000.82.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140103" version="1" class="patch">
	<metadata>
		<title>Security update for python-Werkzeug (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208283" ref_url="https://bugzilla.suse.com/1208283" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-25577" ref_url="https://www.suse.com/security/cve/CVE-2023-25577/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1664-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028456.html" source="SUSE-SU"/>
		<description>
This update for python-Werkzeug fixes the following issues:

- CVE-2023-25577: Fixed high resource usage when parsing multipart form data with many fields (bsc#1208283)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-29"/>
	<updated date="2023-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208283">SUSE bug 1208283</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25577/">CVE-2023-25577</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750521" comment="python3-Werkzeug-0.14.1-150100.6.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140104" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209622" ref_url="https://bugzilla.suse.com/1209622" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28708" ref_url="https://www.suse.com/security/cve/CVE-2023-28708/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014225.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2023-28708: Fixed information disclosure by not including the secure attribute (bsc#1209622).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-29"/>
	<updated date="2023-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209622">SUSE bug 1209622</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-28708/">CVE-2023-28708</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009750522" comment="tomcat-9.0.36-150100.4.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750523" comment="tomcat-admin-webapps-9.0.36-150100.4.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750524" comment="tomcat-el-3_0-api-9.0.36-150100.4.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750525" comment="tomcat-jsp-2_3-api-9.0.36-150100.4.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750526" comment="tomcat-lib-9.0.36-150100.4.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750527" comment="tomcat-servlet-4_0-api-9.0.36-150100.4.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750528" comment="tomcat-webapps-9.0.36-150100.4.90.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140105" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209543" ref_url="https://bugzilla.suse.com/1209543" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1393" ref_url="https://www.suse.com/security/cve/CVE-2023-1393/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1679-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028470.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2023-1393: Fixed use-after-free overlay window (ZDI-CAN-19866) (bsc#1209543).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-29"/>
	<updated date="2023-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209543">SUSE bug 1209543</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1393/">CVE-2023-1393</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009751709" comment="xorg-x11-server-1.20.3-150100.14.5.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751710" comment="xorg-x11-server-extra-1.20.3-150100.14.5.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751711" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140106" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209481" ref_url="https://bugzilla.suse.com/1209481" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0922" ref_url="https://www.suse.com/security/cve/CVE-2023-0922/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1683-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028466.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:


- CVE-2023-0922: Fixed Samba AD DC admin tool samba-tool sending passwords in cleartext (bso#15315) (bsc#1209481).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-29"/>
	<updated date="2023-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209481">SUSE bug 1209481</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-0922/">CVE-2023-0922</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009751712" comment="libdcerpc-binding0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751713" comment="libdcerpc-binding0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751714" comment="libdcerpc-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751715" comment="libdcerpc-samr-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751716" comment="libdcerpc-samr0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751717" comment="libdcerpc0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751718" comment="libdcerpc0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751719" comment="libndr-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751720" comment="libndr-krb5pac-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751721" comment="libndr-krb5pac0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751722" comment="libndr-krb5pac0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751723" comment="libndr-nbt-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751724" comment="libndr-nbt0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751725" comment="libndr-nbt0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751726" comment="libndr-standard-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751727" comment="libndr-standard0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751728" comment="libndr-standard0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751729" comment="libndr0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751730" comment="libndr0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751731" comment="libnetapi-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751732" comment="libnetapi0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751733" comment="libnetapi0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751734" comment="libsamba-credentials-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751735" comment="libsamba-credentials0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751736" comment="libsamba-credentials0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751737" comment="libsamba-errors-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751738" comment="libsamba-errors0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751739" comment="libsamba-errors0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751740" comment="libsamba-hostconfig-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751741" comment="libsamba-hostconfig0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751742" comment="libsamba-hostconfig0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751743" comment="libsamba-passdb-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751744" comment="libsamba-passdb0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751745" comment="libsamba-passdb0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751746" comment="libsamba-policy-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751747" comment="libsamba-policy-python3-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751748" comment="libsamba-policy0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751749" comment="libsamba-policy0-python3-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751750" comment="libsamba-util-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751751" comment="libsamba-util0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751752" comment="libsamba-util0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751753" comment="libsamdb-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751754" comment="libsamdb0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751755" comment="libsamdb0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751756" comment="libsmbclient-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751757" comment="libsmbclient0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751758" comment="libsmbconf-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751759" comment="libsmbconf0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751760" comment="libsmbconf0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751761" comment="libsmbldap-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751762" comment="libsmbldap2-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751763" comment="libsmbldap2-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751764" comment="libtevent-util-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751765" comment="libtevent-util0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751766" comment="libtevent-util0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751767" comment="libwbclient-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751768" comment="libwbclient0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751769" comment="libwbclient0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751770" comment="samba-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751771" comment="samba-ad-dc-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751772" comment="samba-client-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751773" comment="samba-core-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751774" comment="samba-dsdb-modules-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751775" comment="samba-libs-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751776" comment="samba-libs-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751777" comment="samba-libs-python-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751778" comment="samba-libs-python3-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751779" comment="samba-python-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751780" comment="samba-python3-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751781" comment="samba-winbind-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751782" comment="samba-winbind-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140107" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203201" ref_url="https://bugzilla.suse.com/1203201" source="BUGZILLA"/>
		<reference ref_id="1206483" ref_url="https://bugzilla.suse.com/1206483" source="BUGZILLA"/>
		<reference ref_id="1209361" ref_url="https://bugzilla.suse.com/1209361" source="BUGZILLA"/>
		<reference ref_id="1209362" ref_url="https://bugzilla.suse.com/1209362" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28486" ref_url="https://www.suse.com/security/cve/CVE-2023-28486/" source="CVE"/>
		<reference ref_id="CVE-2023-28487" ref_url="https://www.suse.com/security/cve/CVE-2023-28487/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1699-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028500.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issue:

Security fixes:

- CVE-2023-28486: Fixed missing control characters escaping in log messages (bsc#1209362).
- CVE-2023-28487: Fixed missing control characters escaping in sudoreplay output (bsc#1209361).

Other fixes:

- Fix a situation where 'sudo -U otheruser -l' would dereference a NULL pointer (bsc#1206483).
- Do not re-enable the reader when flushing the buffers as part of pty_finish() (bsc#1203201).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-30"/>
	<updated date="2023-03-30"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1203201">SUSE bug 1203201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206483">SUSE bug 1206483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209361">SUSE bug 1209361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209362">SUSE bug 1209362</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-28486/">CVE-2023-28486</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-28487/">CVE-2023-28487</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009750845" comment="sudo-1.8.27-150000.4.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750846" comment="sudo-devel-1.8.27-150000.4.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140108" version="1" class="patch">
	<metadata>
		<title>Security update for libXpm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207029" ref_url="https://bugzilla.suse.com/1207029" source="BUGZILLA"/>
		<reference ref_id="1207030" ref_url="https://bugzilla.suse.com/1207030" source="BUGZILLA"/>
		<reference ref_id="1207031" ref_url="https://bugzilla.suse.com/1207031" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-44617" ref_url="https://www.suse.com/security/cve/CVE-2022-44617/" source="CVE"/>
		<reference ref_id="CVE-2022-46285" ref_url="https://www.suse.com/security/cve/CVE-2022-46285/" source="CVE"/>
		<reference ref_id="CVE-2022-4883" ref_url="https://www.suse.com/security/cve/CVE-2022-4883/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0171-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013549.html" source="SUSE-SU"/>
		<description>
This update for libXpm fixes the following issues:

- CVE-2022-46285: Fixed an infinite loop that could be triggered
  when reading a XPM image with a C-style comment that is never
  closed (bsc#1207029).
- CVE-2022-44617: Fixed an excessive resource consumption that could
  be triggered when reading small crafted XPM image (bsc#1207030).
- CVE-2022-4883: Fixed an issue that made decompression commands
  susceptible to PATH environment variable manipulation attacks
  (bsc#1207031).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-26"/>
	<updated date="2023-01-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207029">SUSE bug 1207029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207030">SUSE bug 1207030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207031">SUSE bug 1207031</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-44617/">CVE-2022-44617</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-46285/">CVE-2022-46285</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4883/">CVE-2022-4883</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009735618" comment="libXpm-devel-3.5.12-150000.3.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009735619" comment="libXpm4-3.5.12-150000.3.7.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140109" version="1" class="patch">
	<metadata>
		<title>Security update for flatpak (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209410" ref_url="https://bugzilla.suse.com/1209410" source="BUGZILLA"/>
		<reference ref_id="1209411" ref_url="https://bugzilla.suse.com/1209411" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28100" ref_url="https://www.suse.com/security/cve/CVE-2023-28100/" source="CVE"/>
		<reference ref_id="CVE-2023-28101" ref_url="https://www.suse.com/security/cve/CVE-2023-28101/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1713-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028539.html" source="SUSE-SU"/>
		<description>
This update for flatpak fixes the following issues:

- CVE-2023-28101: Fixed misleading terminal output with metadata with ANSI control codes (bsc#1209410).
- CVE-2023-28100: Fixed unsandboxed TIOCLINUX commands (bsc#1209411).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-31"/>
	<updated date="2023-03-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209410">SUSE bug 1209410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209411">SUSE bug 1209411</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28100/">CVE-2023-28100</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-28101/">CVE-2023-28101</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009748370" comment="flatpak-1.2.3-150100.4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009748371" comment="flatpak-devel-1.2.3-150100.4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009748372" comment="flatpak-zsh-completion-1.2.3-150100.4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009748373" comment="libflatpak0-1.2.3-150100.4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009748374" comment="typelib-1_0-Flatpak-1_0-1.2.3-150100.4.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140110" version="1" class="patch">
	<metadata>
		<title>Security update for xterm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205305" ref_url="https://bugzilla.suse.com/1205305" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45063" ref_url="https://www.suse.com/security/cve/CVE-2022-45063/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013541.html" source="SUSE-SU"/>
		<description>
This update for xterm fixes the following issues:

- CVE-2022-45063: Fixed an arbitrary code execution issue under
  configurations using vi and zsh (bsc#1205305).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-26"/>
	<updated date="2023-01-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205305">SUSE bug 1205305</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45063/">CVE-2022-45063</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009734724" comment="xterm-330-150000.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734725" comment="xterm-bin-330-150000.4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140111" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209624" ref_url="https://bugzilla.suse.com/1209624" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0464" ref_url="https://www.suse.com/security/cve/CVE-2023-0464/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014352.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-04"/>
	<updated date="2023-04-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1209624">SUSE bug 1209624</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-0464/">CVE-2023-0464</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009751325" comment="libopenssl-1_1-devel-1.1.0i-150100.14.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751326" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751327" comment="libopenssl1_1-1.1.0i-150100.14.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751328" comment="libopenssl1_1-32bit-1.1.0i-150100.14.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751329" comment="libopenssl1_1-hmac-1.1.0i-150100.14.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751330" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751331" comment="openssl-1_1-1.1.0i-150100.14.45.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140112" version="1" class="patch">
	<metadata>
		<title>Security update for liblouis (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209429" ref_url="https://bugzilla.suse.com/1209429" source="BUGZILLA"/>
		<reference ref_id="1209432" ref_url="https://bugzilla.suse.com/1209432" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-26767" ref_url="https://www.suse.com/security/cve/CVE-2023-26767/" source="CVE"/>
		<reference ref_id="CVE-2023-26769" ref_url="https://www.suse.com/security/cve/CVE-2023-26769/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1772-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028649.html" source="SUSE-SU"/>
		<description>
This update for liblouis fixes the following issues:
  
- CVE-2023-26767: Fixed buffer overflow vulnerability in lou_logFile function (bsc#1209429).
- CVE-2023-26769: Fixed buffer Overflow vulnerability in resolveSubtable function (bsc#1209432).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-05"/>
	<updated date="2023-04-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209429">SUSE bug 1209429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209432">SUSE bug 1209432</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26767/">CVE-2023-26767</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26769/">CVE-2023-26769</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009752800" comment="liblouis-data-3.3.0-150000.4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752801" comment="liblouis-devel-3.3.0-150000.4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752802" comment="liblouis14-3.3.0-150000.4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752803" comment="python3-louis-3.3.0-150000.4.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140113" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210062" ref_url="https://bugzilla.suse.com/1210062" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28879" ref_url="https://www.suse.com/security/cve/CVE-2023-28879/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014432.html" source="SUSE-SU"/>
		<description>
This update for ghostscript fixes the following issues:

- CVE-2023-28879: Fixed buffer Overflow in s_xBCPE_process (bsc#1210062).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-07"/>
	<updated date="2023-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210062">SUSE bug 1210062</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28879/">CVE-2023-28879</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009753259" comment="ghostscript-9.52-150000.164.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753260" comment="ghostscript-devel-9.52-150000.164.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753261" comment="ghostscript-x11-9.52-150000.164.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140114" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210212" ref_url="https://bugzilla.suse.com/1210212" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1945" ref_url="https://www.suse.com/security/cve/CVE-2023-1945/" source="CVE"/>
		<reference ref_id="CVE-2023-29531" ref_url="https://www.suse.com/security/cve/CVE-2023-29531/" source="CVE"/>
		<reference ref_id="CVE-2023-29532" ref_url="https://www.suse.com/security/cve/CVE-2023-29532/" source="CVE"/>
		<reference ref_id="CVE-2023-29533" ref_url="https://www.suse.com/security/cve/CVE-2023-29533/" source="CVE"/>
		<reference ref_id="CVE-2023-29535" ref_url="https://www.suse.com/security/cve/CVE-2023-29535/" source="CVE"/>
		<reference ref_id="CVE-2023-29536" ref_url="https://www.suse.com/security/cve/CVE-2023-29536/" source="CVE"/>
		<reference ref_id="CVE-2023-29539" ref_url="https://www.suse.com/security/cve/CVE-2023-29539/" source="CVE"/>
		<reference ref_id="CVE-2023-29541" ref_url="https://www.suse.com/security/cve/CVE-2023-29541/" source="CVE"/>
		<reference ref_id="CVE-2023-29542" ref_url="https://www.suse.com/security/cve/CVE-2023-29542/" source="CVE"/>
		<reference ref_id="CVE-2023-29545" ref_url="https://www.suse.com/security/cve/CVE-2023-29545/" source="CVE"/>
		<reference ref_id="CVE-2023-29548" ref_url="https://www.suse.com/security/cve/CVE-2023-29548/" source="CVE"/>
		<reference ref_id="CVE-2023-29550" ref_url="https://www.suse.com/security/cve/CVE-2023-29550/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014444.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 102.10.0 ESR (bsc#1210212)
- CVE-2023-29531: Out-of-bound memory access in WebGL on macOS
- CVE-2023-29532: Mozilla Maintenance Service Write-lock bypass
- CVE-2023-29533: Fullscreen notification obscured
- MFSA-TMP-2023-0001: Double-free in libwebp
- CVE-2023-29535: Potential Memory Corruption following Garbage Collector compaction
- CVE-2023-29536: Invalid free from JavaScript code
- CVE-2023-29539: Content-Disposition filename truncation leads to Reflected File Download
- CVE-2023-29541: Files with malicious extensions could have been downloaded unsafely on Linux
- CVE-2023-29542: Bypass of file download extension restrictions
- CVE-2023-29545: Windows Save As dialog resolved environment variables
- CVE-2023-1945: Memory Corruption in Safe Browsing Code
- CVE-2023-29548: Incorrect optimization result on ARM64
- CVE-2023-29550: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-11"/>
	<updated date="2023-04-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210212">SUSE bug 1210212</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-1945/">CVE-2023-1945</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-29531/">CVE-2023-29531</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-29532/">CVE-2023-29532</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-29533/">CVE-2023-29533</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-29535/">CVE-2023-29535</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-29536/">CVE-2023-29536</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-29539/">CVE-2023-29539</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-29541/">CVE-2023-29541</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-29542/">CVE-2023-29542</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-29545/">CVE-2023-29545</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-29548/">CVE-2023-29548</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-29550/">CVE-2023-29550</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009753364" comment="MozillaFirefox-102.10.0-150000.150.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753365" comment="MozillaFirefox-devel-102.10.0-150000.150.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753366" comment="MozillaFirefox-translations-common-102.10.0-150000.150.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753367" comment="MozillaFirefox-translations-other-102.10.0-150000.150.82.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140115" version="1" class="patch">
	<metadata>
		<title>Security update for harfbuzz (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207922" ref_url="https://bugzilla.suse.com/1207922" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-25193" ref_url="https://www.suse.com/security/cve/CVE-2023-25193/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014733.html" source="SUSE-SU"/>
		<description>
This update for harfbuzz fixes the following issues:

- CVE-2023-25193: Fixed vulnerability that allowed attackers to trigger O(n^2) growth via consecutive marks (bsc#1207922).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-12"/>
	<updated date="2023-04-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207922">SUSE bug 1207922</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25193/">CVE-2023-25193</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009753372" comment="harfbuzz-devel-1.7.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753373" comment="libharfbuzz-icu0-1.7.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753374" comment="libharfbuzz0-1.7.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753375" comment="libharfbuzz0-32bit-1.7.5-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140116" version="1" class="patch">
	<metadata>
		<title>Security update for liblouis (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209431" ref_url="https://bugzilla.suse.com/1209431" source="BUGZILLA"/>
		<reference ref_id="1209855" ref_url="https://bugzilla.suse.com/1209855" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-26768" ref_url="https://www.suse.com/security/cve/CVE-2023-26768/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014725.html" source="SUSE-SU"/>
		<description>
This update for liblouis fixes the following issues:
  
- CVE-2023-26768: Fixed buffer overflow in lou_logFile() (bsc#1209431).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-13"/>
	<updated date="2023-04-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209431">SUSE bug 1209431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209855">SUSE bug 1209855</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26768/">CVE-2023-26768</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009753368" comment="liblouis-data-3.3.0-150000.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753369" comment="liblouis-devel-3.3.0-150000.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753370" comment="liblouis14-3.3.0-150000.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753371" comment="python3-louis-3.3.0-150000.4.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140117" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1076830" ref_url="https://bugzilla.suse.com/1076830" source="BUGZILLA"/>
		<reference ref_id="1192273" ref_url="https://bugzilla.suse.com/1192273" source="BUGZILLA"/>
		<reference ref_id="1194535" ref_url="https://bugzilla.suse.com/1194535" source="BUGZILLA"/>
		<reference ref_id="1207036" ref_url="https://bugzilla.suse.com/1207036" source="BUGZILLA"/>
		<reference ref_id="1207125" ref_url="https://bugzilla.suse.com/1207125" source="BUGZILLA"/>
		<reference ref_id="1207168" ref_url="https://bugzilla.suse.com/1207168" source="BUGZILLA"/>
		<reference ref_id="1207795" ref_url="https://bugzilla.suse.com/1207795" source="BUGZILLA"/>
		<reference ref_id="1208179" ref_url="https://bugzilla.suse.com/1208179" source="BUGZILLA"/>
		<reference ref_id="1208599" ref_url="https://bugzilla.suse.com/1208599" source="BUGZILLA"/>
		<reference ref_id="1208777" ref_url="https://bugzilla.suse.com/1208777" source="BUGZILLA"/>
		<reference ref_id="1208811" ref_url="https://bugzilla.suse.com/1208811" source="BUGZILLA"/>
		<reference ref_id="1208850" ref_url="https://bugzilla.suse.com/1208850" source="BUGZILLA"/>
		<reference ref_id="1209008" ref_url="https://bugzilla.suse.com/1209008" source="BUGZILLA"/>
		<reference ref_id="1209052" ref_url="https://bugzilla.suse.com/1209052" source="BUGZILLA"/>
		<reference ref_id="1209256" ref_url="https://bugzilla.suse.com/1209256" source="BUGZILLA"/>
		<reference ref_id="1209289" ref_url="https://bugzilla.suse.com/1209289" source="BUGZILLA"/>
		<reference ref_id="1209291" ref_url="https://bugzilla.suse.com/1209291" source="BUGZILLA"/>
		<reference ref_id="1209532" ref_url="https://bugzilla.suse.com/1209532" source="BUGZILLA"/>
		<reference ref_id="1209547" ref_url="https://bugzilla.suse.com/1209547" source="BUGZILLA"/>
		<reference ref_id="1209549" ref_url="https://bugzilla.suse.com/1209549" source="BUGZILLA"/>
		<reference ref_id="1209634" ref_url="https://bugzilla.suse.com/1209634" source="BUGZILLA"/>
		<reference ref_id="1209778" ref_url="https://bugzilla.suse.com/1209778" source="BUGZILLA"/>
		<reference ref_id="1209845" ref_url="https://bugzilla.suse.com/1209845" source="BUGZILLA"/>
		<reference ref_id="1209887" ref_url="https://bugzilla.suse.com/1209887" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2021-3923" ref_url="https://www.suse.com/security/cve/CVE-2021-3923/" source="CVE"/>
		<reference ref_id="CVE-2021-4203" ref_url="https://www.suse.com/security/cve/CVE-2021-4203/" source="CVE"/>
		<reference ref_id="CVE-2022-20567" ref_url="https://www.suse.com/security/cve/CVE-2022-20567/" source="CVE"/>
		<reference ref_id="CVE-2023-0394" ref_url="https://www.suse.com/security/cve/CVE-2023-0394/" source="CVE"/>
		<reference ref_id="CVE-2023-0590" ref_url="https://www.suse.com/security/cve/CVE-2023-0590/" source="CVE"/>
		<reference ref_id="CVE-2023-1076" ref_url="https://www.suse.com/security/cve/CVE-2023-1076/" source="CVE"/>
		<reference ref_id="CVE-2023-1095" ref_url="https://www.suse.com/security/cve/CVE-2023-1095/" source="CVE"/>
		<reference ref_id="CVE-2023-1281" ref_url="https://www.suse.com/security/cve/CVE-2023-1281/" source="CVE"/>
		<reference ref_id="CVE-2023-1390" ref_url="https://www.suse.com/security/cve/CVE-2023-1390/" source="CVE"/>
		<reference ref_id="CVE-2023-1513" ref_url="https://www.suse.com/security/cve/CVE-2023-1513/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="CVE-2023-23455" ref_url="https://www.suse.com/security/cve/CVE-2023-23455/" source="CVE"/>
		<reference ref_id="CVE-2023-28328" ref_url="https://www.suse.com/security/cve/CVE-2023-28328/" source="CVE"/>
		<reference ref_id="CVE-2023-28464" ref_url="https://www.suse.com/security/cve/CVE-2023-28464/" source="CVE"/>
		<reference ref_id="CVE-2023-28772" ref_url="https://www.suse.com/security/cve/CVE-2023-28772/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1848-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028819.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).
- CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).
- CVE-2021-3923: Fixed stack information leak vulnerability that could lead to kernel protection bypass in infiniband RDMA (bsc#1209778).
- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bsc#1194535).
- CVE-2022-20567: Fixed use after free that could lead to a local privilege escalation in pppol2tp_create of l2tp_ppp.c (bsc#1208850).
- CVE-2023-0394: Fixed a null pointer dereference flaw in the network subcomponent in the Linux kernel which could lead to system crash (bsc#1207168).
- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599).
- CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634).
- CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1209289).
- CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532).
- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207036).
- CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207125).
- CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291).
- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052).
- CVE-2023-28772: Fixed buffer overflow in seq_buf_putmem_hex in lib/seq_buf.c (bsc#1209549).

The following non-security bugs were fixed:

- Do not sign the vanilla kernel (bsc#1209008).
- PCI: hv: Add a per-bus mutex state_lock (bsc#1208811).
- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1208811).
- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1208811).
- PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1208811).
- Revert 'PCI: hv: Fix a timing issue which causes kdump to fail occasionally' (bsc#1208811).
- cifs: fix double free in dfs mounts (bsc#1209845).
- cifs: fix nodfs mount option (bsc#1209845).
- cifs: handle reconnect of tcon when there is no cached dfs referral (bsc#1209845).
- cifs: missing null pointer check in cifs_mount (bsc#1209845).
- cifs: serialize all mount attempts (bsc#1209845).
- cred: allow get_cred() and put_cred() to be given NULL (bsc#1209887).
- ibmvnic: Process crqs after enabling interrupts (bsc#1192273 ltc#194629).
- ibmvnic: do not stop queue in xmit (bsc#1192273 ltc#194629).
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (bsc#1207168).
- kernel-module-subpackage: Fix expansion with -b parameter (bsc#1208179).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-06"/>
	<updated date="2023-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076830">SUSE bug 1076830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192273">SUSE bug 1192273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194535">SUSE bug 1194535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207036">SUSE bug 1207036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207125">SUSE bug 1207125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207168">SUSE bug 1207168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207795">SUSE bug 1207795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208179">SUSE bug 1208179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208599">SUSE bug 1208599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208777">SUSE bug 1208777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208811">SUSE bug 1208811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208850">SUSE bug 1208850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209008">SUSE bug 1209008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209052">SUSE bug 1209052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209256">SUSE bug 1209256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209289">SUSE bug 1209289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209291">SUSE bug 1209291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209532">SUSE bug 1209532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209547">SUSE bug 1209547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209549">SUSE bug 1209549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209634">SUSE bug 1209634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209778">SUSE bug 1209778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209845">SUSE bug 1209845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209887">SUSE bug 1209887</bugzilla>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3923/">CVE-2021-3923</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4203/">CVE-2021-4203</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20567/">CVE-2022-20567</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0394/">CVE-2023-0394</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0590/">CVE-2023-0590</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-1076/">CVE-2023-1076</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1095/">CVE-2023-1095</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1281/">CVE-2023-1281</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1390/">CVE-2023-1390</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-1513/">CVE-2023-1513</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23455/">CVE-2023-23455</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-28328/">CVE-2023-28328</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28464/">CVE-2023-28464</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28772/">CVE-2023-28772</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009753710" comment="kernel-default-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753711" comment="kernel-default-base-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753712" comment="kernel-default-devel-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753713" comment="kernel-devel-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753714" comment="kernel-docs-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753715" comment="kernel-macros-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753716" comment="kernel-obs-build-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753717" comment="kernel-source-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753718" comment="kernel-syms-4.12.14-150100.197.142.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140118" version="1" class="patch">
	<metadata>
		<title>Security update for apache2-mod_auth_openidc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210073" ref_url="https://bugzilla.suse.com/1210073" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28625" ref_url="https://www.suse.com/security/cve/CVE-2023-28625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1849-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028818.html" source="SUSE-SU"/>
		<description>
This update for apache2-mod_auth_openidc fixes the following issues:

- CVE-2023-28625: Fixed NULL pointer dereference when OIDCStripCookies was set and a crafted Cookie header was supplied (bsc#1210073).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-14"/>
	<updated date="2023-04-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210073">SUSE bug 1210073</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-28625/">CVE-2023-28625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752991" comment="apache2-mod_auth_openidc-2.3.8-150100.3.25.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140119" version="1" class="patch">
	<metadata>
		<title>Security update for container-suseconnect (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="SUSE-SU-2023:1851-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028816.html" source="SUSE-SU"/>
		<description>

This update for container-suseconnect fixes the following issue:

- rebuilt against current go version.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-14"/>
	<updated date="2023-04-14"/>
	<severity>Important</severity>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753262" comment="container-suseconnect-2.4.0-150000.4.26.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140120" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208744" ref_url="https://bugzilla.suse.com/1208744" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25881" ref_url="https://www.suse.com/security/cve/CVE-2022-25881/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014476.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- CVE-2022-25881: Fixed regular expression denial of service vulnerability (bsc#1208744).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-17"/>
	<updated date="2023-04-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208744">SUSE bug 1208744</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-25881/">CVE-2022-25881</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009754507" comment="nodejs10-10.24.1-150000.1.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754508" comment="nodejs10-devel-10.24.1-150000.1.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754350" comment="nodejs10-docs-10.24.1-150000.1.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754509" comment="npm10-10.24.1-150000.1.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140121" version="1" class="patch">
	<metadata>
		<title>Security update for wayland (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1190486" ref_url="https://bugzilla.suse.com/1190486" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3782" ref_url="https://www.suse.com/security/cve/CVE-2021-3782/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1874-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028840.html" source="SUSE-SU"/>
		<description>
This update for wayland fixes the following issues:

- CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. (bsc#1190486)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-18"/>
	<updated date="2023-04-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190486">SUSE bug 1190486</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-3782/">CVE-2021-3782</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009754500" comment="libwayland-client0-1.16.0-150100.7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754501" comment="libwayland-client0-32bit-1.16.0-150100.7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754502" comment="libwayland-cursor0-1.16.0-150100.7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754503" comment="libwayland-egl1-99~1.16.0-150100.7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754504" comment="libwayland-server0-1.16.0-150100.7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754505" comment="libwayland-server0-32bit-1.16.0-150100.7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754506" comment="wayland-devel-1.16.0-150100.7.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140122" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209873" ref_url="https://bugzilla.suse.com/1209873" source="BUGZILLA"/>
		<reference ref_id="1209878" ref_url="https://bugzilla.suse.com/1209878" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0465" ref_url="https://www.suse.com/security/cve/CVE-2023-0465/" source="CVE"/>
		<reference ref_id="CVE-2023-0466" ref_url="https://www.suse.com/security/cve/CVE-2023-0466/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1908-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014492.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2023-0465: Fixed ignored invalid certificate policies in leaf certificates (bsc#1209878).
- CVE-2023-0466: Fixed disabled certificate policy check (bsc#1209873).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-19"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1209873">SUSE bug 1209873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209878">SUSE bug 1209878</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-0465/">CVE-2023-0465</cve>
	<cve impact="low" cvss3="2/CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-0466/">CVE-2023-0466</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009754102" comment="libopenssl-1_1-devel-1.1.0i-150100.14.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754103" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754104" comment="libopenssl1_1-1.1.0i-150100.14.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754105" comment="libopenssl1_1-32bit-1.1.0i-150100.14.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754106" comment="libopenssl1_1-hmac-1.1.0i-150100.14.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754107" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754108" comment="openssl-1_1-1.1.0i-150100.14.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140123" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210403" ref_url="https://bugzilla.suse.com/1210403" source="BUGZILLA"/>
		<reference ref_id="1210404" ref_url="https://bugzilla.suse.com/1210404" source="BUGZILLA"/>
		<reference ref_id="1210405" ref_url="https://bugzilla.suse.com/1210405" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1992" ref_url="https://www.suse.com/security/cve/CVE-2023-1992/" source="CVE"/>
		<reference ref_id="CVE-2023-1993" ref_url="https://www.suse.com/security/cve/CVE-2023-1993/" source="CVE"/>
		<reference ref_id="CVE-2023-1994" ref_url="https://www.suse.com/security/cve/CVE-2023-1994/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014538.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:
 
- CVE-2023-1992: Fixed RPCoRDMA dissector crash (bsc#1210405).
- CVE-2023-1993: Fixed LISP dissector large loop (bsc#1210404).
- CVE-2023-1994: Fixed GQUIC dissector crash (bsc#1210403).
  
Update to 3.6.13:

- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-20"/>
	<updated date="2023-04-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210403">SUSE bug 1210403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210404">SUSE bug 1210404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210405">SUSE bug 1210405</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1992/">CVE-2023-1992</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-1993/">CVE-2023-1993</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1994/">CVE-2023-1994</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009754375" comment="libwireshark15-3.6.13-150000.3.89.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754376" comment="libwiretap12-3.6.13-150000.3.89.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754377" comment="libwsutil13-3.6.13-150000.3.89.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754378" comment="wireshark-3.6.13-150000.3.89.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754379" comment="wireshark-devel-3.6.13-150000.3.89.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754380" comment="wireshark-ui-qt-3.6.13-150000.3.89.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140124" version="1" class="patch">
	<metadata>
		<title>Security update for ovmf (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1174246" ref_url="https://bugzilla.suse.com/1174246" source="BUGZILLA"/>
		<reference ref_id="1196741" ref_url="https://bugzilla.suse.com/1196741" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14560" ref_url="https://www.suse.com/security/cve/CVE-2019-14560/" source="CVE"/>
		<reference ref_id="CVE-2021-38578" ref_url="https://www.suse.com/security/cve/CVE-2021-38578/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1940-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028931.html" source="SUSE-SU"/>
		<description>
This update for ovmf fixes the following issues:

- CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 (bsc#1174246). 
- CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd (bsc#1196741).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-21"/>
	<updated date="2023-04-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174246">SUSE bug 1174246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196741">SUSE bug 1196741</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-14560/">CVE-2019-14560</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-38578/">CVE-2021-38578</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009754804" comment="ovmf-2017+git1510945757.b2662641d5-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754805" comment="ovmf-tools-2017+git1510945757.b2662641d5-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754806" comment="qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754807" comment="qemu-uefi-aarch64-2017+git1510945757.b2662641d5-150000.5.46.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140125" version="1" class="patch">
	<metadata>
		<title>Security update for indent (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209718" ref_url="https://bugzilla.suse.com/1209718" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:1962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014778.html" source="SUSE-SU"/>
		<description>
This update for indent fixes the following issues:

- Fixed multiple memory safety issues (bsc#1209718).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-24"/>
	<updated date="2023-04-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209718">SUSE bug 1209718</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754373" comment="indent-2.2.11-150000.3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140126" version="1" class="patch">
	<metadata>
		<title>Security update for giflib (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1094832" ref_url="https://bugzilla.suse.com/1094832" source="BUGZILLA"/>
		<reference ref_id="1146299" ref_url="https://bugzilla.suse.com/1146299" source="BUGZILLA"/>
		<reference ref_id="1184123" ref_url="https://bugzilla.suse.com/1184123" source="BUGZILLA"/>
		<reference ref_id="974847" ref_url="https://bugzilla.suse.com/974847" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-3977" ref_url="https://www.suse.com/security/cve/CVE-2016-3977/" source="CVE"/>
		<reference ref_id="CVE-2018-11490" ref_url="https://www.suse.com/security/cve/CVE-2018-11490/" source="CVE"/>
		<reference ref_id="CVE-2019-15133" ref_url="https://www.suse.com/security/cve/CVE-2019-15133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1970-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014565.html" source="SUSE-SU"/>
		<description>
This update for giflib fixes the following issues:

- CVE-2019-15133: Fixed a divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c if the height field of the ImageSize data structure is equal to zero (bsc#1146299).
- CVE-2018-11490: Fixed a heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c (bsc#1094832).
- CVE-2016-3977: Fixed a heap buffer overflow in gif2rgb (bsc#974847). 
     
Update to version 5.2.1

  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
   
Changes in version 5.2.0

  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
   
Changes in version 5.1.9

  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
   
Changes in version 5.1.8

  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no 
   
Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
   
Changes in version 5.1.6
  * Fix library installation in the Makefile.
   
Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice. 
    You now build this simply by running 'make' from the top-level directory.

The following non-security bugs were fixed:

- build path independent objects and inherit CFLAGS from the build system (bsc#1184123)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-24"/>
	<updated date="2023-04-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1094832">SUSE bug 1094832</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146299">SUSE bug 1146299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184123">SUSE bug 1184123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/974847">SUSE bug 974847</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3977/">CVE-2016-3977</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11490/">CVE-2018-11490</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15133/">CVE-2019-15133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009754758" comment="giflib-devel-5.2.1-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754759" comment="libgif7-5.2.1-150000.4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140127" version="1" class="patch">
	<metadata>
		<title>Security update for protobuf-c (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210323" ref_url="https://bugzilla.suse.com/1210323" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-48468" ref_url="https://www.suse.com/security/cve/CVE-2022-48468/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1979-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028973.html" source="SUSE-SU"/>
		<description>
This update for protobuf-c fixes the following issues:

- CVE-2022-48468: Fixed an unsigned integer overflow. (bsc#1210323)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-25"/>
	<updated date="2023-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210323">SUSE bug 1210323</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-48468/">CVE-2022-48468</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009755069" comment="libprotobuf-c-devel-1.3.0-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755070" comment="libprotobuf-c1-1.3.0-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140128" version="1" class="patch">
	<metadata>
		<title>Security update for runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1168481" ref_url="https://bugzilla.suse.com/1168481" source="BUGZILLA"/>
		<reference ref_id="1208962" ref_url="https://bugzilla.suse.com/1208962" source="BUGZILLA"/>
		<reference ref_id="1209884" ref_url="https://bugzilla.suse.com/1209884" source="BUGZILLA"/>
		<reference ref_id="1209888" ref_url="https://bugzilla.suse.com/1209888" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-25809" ref_url="https://www.suse.com/security/cve/CVE-2023-25809/" source="CVE"/>
		<reference ref_id="CVE-2023-27561" ref_url="https://www.suse.com/security/cve/CVE-2023-27561/" source="CVE"/>
		<reference ref_id="CVE-2023-28642" ref_url="https://www.suse.com/security/cve/CVE-2023-28642/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2003-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028987.html" source="SUSE-SU"/>
		<description>
This update for runc fixes the following issues:

Update to runc v1.1.5:

Security fixes:

- CVE-2023-25809: Fixed rootless `/sys/fs/cgroup` is writable when cgroupns isn't unshared (bnc#1209884).
- CVE-2023-27561: Fixed regression that reintroduced CVE-2019-19921 vulnerability (bnc#1208962).
- CVE-2023-28642: Fixed AppArmor/SELinux bypass with symlinked /proc (bnc#1209888).

Other fixes:

 - Fix the inability to use `/dev/null` when inside a container.
 - Fix changing the ownership of host's `/dev/null` caused by fd redirection (bsc#1168481).
 - Fix rare runc exec/enter unshare error on older kernels.
 - nsexec: Check for errors in `write_log()`.
 - Drop version-specific Go requirement.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-25"/>
	<updated date="2023-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168481">SUSE bug 1168481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208962">SUSE bug 1208962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209884">SUSE bug 1209884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209888">SUSE bug 1209888</bugzilla>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-25809/">CVE-2023-25809</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-27561/">CVE-2023-27561</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2023-28642/">CVE-2023-28642</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752713" comment="runc-1.1.5-150000.41.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140129" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1065270" ref_url="https://bugzilla.suse.com/1065270" source="BUGZILLA"/>
		<reference ref_id="1199132" ref_url="https://bugzilla.suse.com/1199132" source="BUGZILLA"/>
		<reference ref_id="1204585" ref_url="https://bugzilla.suse.com/1204585" source="BUGZILLA"/>
		<reference ref_id="1210411" ref_url="https://bugzilla.suse.com/1210411" source="BUGZILLA"/>
		<reference ref_id="1210412" ref_url="https://bugzilla.suse.com/1210412" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3541" ref_url="https://www.suse.com/security/cve/CVE-2021-3541/" source="CVE"/>
		<reference ref_id="CVE-2022-29824" ref_url="https://www.suse.com/security/cve/CVE-2022-29824/" source="CVE"/>
		<reference ref_id="CVE-2023-28484" ref_url="https://www.suse.com/security/cve/CVE-2023-28484/" source="CVE"/>
		<reference ref_id="CVE-2023-29469" ref_url="https://www.suse.com/security/cve/CVE-2023-29469/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014596.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

- CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412).
- CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411).
- CVE-2022-29824: Fixed integer overflow leading to out-of-bounds write in buf.c (bsc#1199132). 
  
  The following non-security bugs were fixed:

- Added W3C conformance tests to the testsuite (bsc#1204585).
- Fixed NULL pointer dereference when parsing invalid data (glgo#libxml2!15) (bsc#1065270) . 
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-26"/>
	<updated date="2023-04-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1065270">SUSE bug 1065270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199132">SUSE bug 1199132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204585">SUSE bug 1204585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210411">SUSE bug 1210411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210412">SUSE bug 1210412</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3541/">CVE-2021-3541</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29824/">CVE-2022-29824</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-28484/">CVE-2023-28484</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-29469/">CVE-2023-29469</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009755256" comment="libxml2-2-2.9.7-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755257" comment="libxml2-2-32bit-2.9.7-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755258" comment="libxml2-devel-2.9.7-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755259" comment="libxml2-tools-2.9.7-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755290" comment="python2-libxml2-python-2.9.7-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755260" comment="python3-libxml2-python-2.9.7-150000.3.57.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140130" version="1" class="patch">
	<metadata>
		<title>Security update for shadow (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210507" ref_url="https://bugzilla.suse.com/1210507" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-29383" ref_url="https://www.suse.com/security/cve/CVE-2023-29383/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014668.html" source="SUSE-SU"/>
		<description>
This update for shadow fixes the following issues:

- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-28"/>
	<updated date="2023-04-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1210507">SUSE bug 1210507</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-29383/">CVE-2023-29383</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754905" comment="shadow-4.6-150100.3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140131" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210295" ref_url="https://bugzilla.suse.com/1210295" source="BUGZILLA"/>
		<reference ref_id="1210731" ref_url="https://bugzilla.suse.com/1210731" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0108" ref_url="https://www.suse.com/security/cve/CVE-2022-0108/" source="CVE"/>
		<reference ref_id="CVE-2022-32885" ref_url="https://www.suse.com/security/cve/CVE-2022-32885/" source="CVE"/>
		<reference ref_id="CVE-2022-32886" ref_url="https://www.suse.com/security/cve/CVE-2022-32886/" source="CVE"/>
		<reference ref_id="CVE-2022-32912" ref_url="https://www.suse.com/security/cve/CVE-2022-32912/" source="CVE"/>
		<reference ref_id="CVE-2023-25358" ref_url="https://www.suse.com/security/cve/CVE-2023-25358/" source="CVE"/>
		<reference ref_id="CVE-2023-25360" ref_url="https://www.suse.com/security/cve/CVE-2023-25360/" source="CVE"/>
		<reference ref_id="CVE-2023-25361" ref_url="https://www.suse.com/security/cve/CVE-2023-25361/" source="CVE"/>
		<reference ref_id="CVE-2023-25362" ref_url="https://www.suse.com/security/cve/CVE-2023-25362/" source="CVE"/>
		<reference ref_id="CVE-2023-25363" ref_url="https://www.suse.com/security/cve/CVE-2023-25363/" source="CVE"/>
		<reference ref_id="CVE-2023-27932" ref_url="https://www.suse.com/security/cve/CVE-2023-27932/" source="CVE"/>
		<reference ref_id="CVE-2023-27954" ref_url="https://www.suse.com/security/cve/CVE-2023-27954/" source="CVE"/>
		<reference ref_id="CVE-2023-28205" ref_url="https://www.suse.com/security/cve/CVE-2023-28205/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014714.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.38.6 (bsc#1210731):

- CVE-2022-0108: Fixed information leak.
- CVE-2022-32885: Fixed arbitrary code execution.
- CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderLayer.
- CVE-2023-27932: Fixed Same Origin Policy bypass.
- CVE-2023-27954: Fixed  sensitive user information tracking.
- CVE-2023-28205: Fixed arbitrary code execution (bsc#1210295). 

Already fixed in version 2.38.5:

- CVE-2022-32886, CVE-2022-32912, CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-29"/>
	<updated date="2023-04-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210295">SUSE bug 1210295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210731">SUSE bug 1210731</bugzilla>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0108/">CVE-2022-0108</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32885/">CVE-2022-32885</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32886/">CVE-2022-32886</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32912/">CVE-2022-32912</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25358/">CVE-2023-25358</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25360/">CVE-2023-25360</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25361/">CVE-2023-25361</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25362/">CVE-2023-25362</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25363/">CVE-2023-25363</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-27932/">CVE-2023-27932</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-27954/">CVE-2023-27954</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28205/">CVE-2023-28205</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009755479" comment="libjavascriptcoregtk-4_0-18-2.38.6-150000.3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755480" comment="libwebkit2gtk-4_0-37-2.38.6-150000.3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755481" comment="libwebkit2gtk3-lang-2.38.6-150000.3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755482" comment="typelib-1_0-JavaScriptCore-4_0-2.38.6-150000.3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755483" comment="typelib-1_0-WebKit2-4_0-2.38.6-150000.3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755484" comment="typelib-1_0-WebKit2WebExtension-4_0-2.38.6-150000.3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755485" comment="webkit2gtk-4_0-injected-bundles-2.38.6-150000.3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755486" comment="webkit2gtk3-devel-2.38.6-150000.3.139.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140132" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210686" ref_url="https://bugzilla.suse.com/1210686" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-25652" ref_url="https://www.suse.com/security/cve/CVE-2023-25652/" source="CVE"/>
		<reference ref_id="CVE-2023-25815" ref_url="https://www.suse.com/security/cve/CVE-2023-25815/" source="CVE"/>
		<reference ref_id="CVE-2023-29007" ref_url="https://www.suse.com/security/cve/CVE-2023-29007/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014775.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- CVE-2023-25652: Fixed partial overwrite of paths outside the working tree (bsc#1210686).
- CVE-2023-25815: Fixed malicious placemtn of crafted message (bsc#1210686).
- CVE-2023-29007: Fixed arbitrary configuration injection (bsc#1210686).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-02"/>
	<updated date="2023-05-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210686">SUSE bug 1210686</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-25652/">CVE-2023-25652</cve>
	<cve impact="important" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-25815/">CVE-2023-25815</cve>
	<cve impact="important" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2023-29007/">CVE-2023-29007</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009755751" comment="git-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755752" comment="git-arch-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755753" comment="git-core-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755754" comment="git-cvs-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755755" comment="git-daemon-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755756" comment="git-doc-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755757" comment="git-email-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755758" comment="git-gui-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755759" comment="git-svn-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755760" comment="git-web-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755761" comment="gitk-2.26.2-150000.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140133" version="1" class="patch">
	<metadata>
		<title>Security update for shim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185232" ref_url="https://bugzilla.suse.com/1185232" source="BUGZILLA"/>
		<reference ref_id="1185261" ref_url="https://bugzilla.suse.com/1185261" source="BUGZILLA"/>
		<reference ref_id="1185441" ref_url="https://bugzilla.suse.com/1185441" source="BUGZILLA"/>
		<reference ref_id="1185621" ref_url="https://bugzilla.suse.com/1185621" source="BUGZILLA"/>
		<reference ref_id="1187071" ref_url="https://bugzilla.suse.com/1187071" source="BUGZILLA"/>
		<reference ref_id="1187260" ref_url="https://bugzilla.suse.com/1187260" source="BUGZILLA"/>
		<reference ref_id="1193282" ref_url="https://bugzilla.suse.com/1193282" source="BUGZILLA"/>
		<reference ref_id="1193315" ref_url="https://bugzilla.suse.com/1193315" source="BUGZILLA"/>
		<reference ref_id="1198101" ref_url="https://bugzilla.suse.com/1198101" source="BUGZILLA"/>
		<reference ref_id="1198458" ref_url="https://bugzilla.suse.com/1198458" source="BUGZILLA"/>
		<reference ref_id="1201066" ref_url="https://bugzilla.suse.com/1201066" source="BUGZILLA"/>
		<reference ref_id="1202120" ref_url="https://bugzilla.suse.com/1202120" source="BUGZILLA"/>
		<reference ref_id="1205588" ref_url="https://bugzilla.suse.com/1205588" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-28737" ref_url="https://www.suse.com/security/cve/CVE-2022-28737/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014771.html" source="SUSE-SU"/>
		<description>
This update for shim fixes the following issues:

- Updated shim signature after shim 15.7 be signed back:
  signature-sles.x86_64.asc, signature-sles.aarch64.asc (bsc#1198458)

- Add POST_PROCESS_PE_FLAGS=-N to the build command in shim.spec to
  disable the NX compatibility flag when using post-process-pe because
  grub2 is not ready. (bsc#1205588)

- Enable the NX compatibility flag by default. (jsc#PED-127) 

Update to 15.7 (bsc#1198458) (jsc#PED-127):

- Make SBAT variable payload introspectable
- Reference MokListRT instead of MokList
- Add a link to the test plan in the readme.
- [V3] Enable TDX measurement to RTMR register
- Discard load-options that start with a NUL
- Fixed load_cert_file bugs
- Add -malign-double to IA32 compiler flags
- pe: Fix image section entry-point validation
- make-archive: Build reproducible tarball
- mok: remove MokListTrusted from PCR 7

Other fixes:

- Support enhance shim measurement to TD RTMR. (jsc#PED-1273) 

- shim-install: ensure grub.cfg created is not overwritten after installing grub related files
- Add logic to shim.spec to only set sbat policy when efivarfs is writeable.  (bsc#1201066)
- Add logic to shim.spec for detecting --set-sbat-policy option before using mokutil to set sbat policy. (bsc#1202120)
- Change the URL in SBAT section to mail:security@suse.de. (bsc#1193282)

Update to 15.6 (bsc#1198458):

- MokManager: removed Locate graphic output protocol fail error message
- shim: implement SBAT verification for the shim_lock protocol
- post-process-pe: Fix a missing return code check
- Update github actions matrix to be more useful
- post-process-pe: Fix format string warnings on 32-bit platforms
- Allow MokListTrusted to be enabled by default
- Re-add ARM AArch64 support
- Use ASCII as fallback if Unicode Box Drawing characters fail
- make: don't treat cert.S specially
- shim: use SHIM_DEVEL_VERBOSE when built in devel mode
- Break out of the inner sbat loop if we find the entry.
- Support loading additional certificates
- Add support for NX (W^X) mitigations.
- Fix preserve_sbat_uefi_variable() logic
- SBAT Policy latest should be a one-shot
- pe: Fix a buffer overflow when SizeOfRawData &gt; VirtualSize
- pe: Perform image verification earlier when loading grub
- Update advertised sbat generation number for shim
- Update SBAT generation requirements for 05/24/22
- Also avoid CVE-2022-28737 in verify_image() by @vathpela

Update to 15.5 (bsc#1198458):

- Broken ia32 relocs and an unimportant submodule change.
- mok: allocate MOK config table as BootServicesData
- Don't call QueryVariableInfo() on EFI 1.10 machines (bsc#1187260)
- Relax the check for import_mok_state()  (bsc#1185261)
- SBAT.md: trivial changes
- shim: another attempt to fix load options handling
- Add tests for our load options parsing.
- arm/aa64: fix the size of .rela* sections
- mok: fix potential buffer overrun in import_mok_state
- mok: relax the maximum variable size check
- Don't unhook ExitBootServices when EBS protection is disabled
- fallback: find_boot_option() needs to return the index for the boot entry in optnum
- httpboot: Ignore case when checking HTTP headers
- Fallback allocation errors
- shim: avoid BOOTx64.EFI in message on other architectures
- str: remove duplicate parameter check
- fallback: add compile option FALLBACK_NONINTERACTIVE
- Test mok mirror
- Modify sbat.md to help with readability.
- csv: detect end of csv file correctly
- Specify that the .sbat section is ASCII not UTF-8
- tests: add 'include-fixed' GCC directory to include directories
- pe: simplify generate_hash()
- Don't make shim abort when TPM log event fails (RHBZ #2002265)
- Fallback to default loader if parsed one does not exist
- fallback: Fix for BootOrder crash when index returned
- Better console checks
- docs: update SBAT UEFI variable name
- Don't parse load options if invoked from removable media path
- fallback: fix fallback not passing arguments of the first boot option
- shim: Don't stop forever at 'Secure Boot not enabled' notification
- Allocate mokvar table in runtime memory.
- Remove post-process-pe on 'make clean'
- pe: missing perror argument


- CVE-2022-28737: Fixed a buffer overflow when SizeOfRawData &gt; VirtualSize (bsc#1198458)

- Add mokutil command to post script for setting sbat policy to latest mode
  when the SbatPolicy-605dab50-e046-4300-abb6-3dd810dd8b23 is not created.
  (bsc#1198458)

- Updated vendor dbx binary and script (bsc#1198458)

  - Updated dbx-cert.tar.xz and vendor-dbx-sles.bin for adding
    SLES-UEFI-SIGN-Certificate-2021-05.crt to vendor dbx list.
  - Updated dbx-cert.tar.xz and vendor-dbx-opensuse.bin for adding
    openSUSE-UEFI-SIGN-Certificate-2021-05.crt to vendor dbx list.
  - Updated vendor-dbx.bin for adding SLES-UEFI-SIGN-Certificate-2021-05.crt
    and openSUSE-UEFI-SIGN-Certificate-2021-05.crt for testing environment.
  - Updated generate-vendor-dbx.sh script for generating a vendor-dbx.bin
    file which includes all .der for testing environment.

- avoid buffer overflow when copying data to the MOK config table (bsc#1185232)
- Disable exporting vendor-dbx to MokListXRT since writing a large RT variable could crash some machines (bsc#1185261)
- ignore the odd LoadOptions length (bsc#1185232)
- shim-install: reset def_shim_efi to 'shim.efi' if the given file doesn't exist
- relax the maximum variable size check for u-boot (bsc#1185621)
- handle ignore_db and user_insecure_mode correctly (bsc#1185441, bsc#1187071)

- Split the keys in vendor-dbx.bin to vendor-dbx-sles and
  vendor-dbx-opensuse for shim-sles and shim-opensuse to reduce
  the size of MokListXRT (bsc#1185261) 
  + Also update generate-vendor-dbx.sh in dbx-cert.tar.xz
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-02"/>
	<updated date="2023-05-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185232">SUSE bug 1185232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185261">SUSE bug 1185261</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185441">SUSE bug 1185441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185621">SUSE bug 1185621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187071">SUSE bug 1187071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187260">SUSE bug 1187260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193282">SUSE bug 1193282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193315">SUSE bug 1193315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198101">SUSE bug 1198101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198458">SUSE bug 1198458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201066">SUSE bug 1201066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202120">SUSE bug 1202120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205588">SUSE bug 1205588</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28737/">CVE-2022-28737</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755762" comment="shim-15.7-150100.3.35.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140134" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1140754" ref_url="https://bugzilla.suse.com/1140754" source="BUGZILLA"/>
		<reference ref_id="1206778" ref_url="https://bugzilla.suse.com/1206778" source="BUGZILLA"/>
		<reference ref_id="1209934" ref_url="https://bugzilla.suse.com/1209934" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13390" ref_url="https://www.suse.com/security/cve/CVE-2019-13390/" source="CVE"/>
		<reference ref_id="CVE-2022-3341" ref_url="https://www.suse.com/security/cve/CVE-2022-3341/" source="CVE"/>
		<reference ref_id="CVE-2022-48434" ref_url="https://www.suse.com/security/cve/CVE-2022-48434/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014741.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

- CVE-2019-13390: Fixed a potential crash when processing a crafted AVI stream (bsc#1140754).
- CVE-2022-3341: Fixed a potential crash when processing a crafted NUT stream (bsc#1206778).
- CVE-2022-48434: Fixed use after free in libavcodec/pthread_frame.c (bsc#1209934). 
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-05"/>
	<updated date="2023-05-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140754">SUSE bug 1140754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206778">SUSE bug 1206778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209934">SUSE bug 1209934</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13390/">CVE-2019-13390</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3341/">CVE-2022-3341</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-48434/">CVE-2022-48434</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009756234" comment="libavcodec-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756235" comment="libavcodec57-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756236" comment="libavcodec57-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756237" comment="libavdevice-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756238" comment="libavdevice57-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756239" comment="libavdevice57-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756240" comment="libavfilter-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756241" comment="libavfilter6-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756242" comment="libavfilter6-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756243" comment="libavformat-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756244" comment="libavformat57-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756245" comment="libavformat57-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756246" comment="libavresample-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756247" comment="libavresample3-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756248" comment="libavresample3-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756249" comment="libavutil-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756250" comment="libavutil55-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756251" comment="libavutil55-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756252" comment="libpostproc-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756253" comment="libpostproc54-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756254" comment="libpostproc54-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756255" comment="libswresample-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756256" comment="libswresample2-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756257" comment="libswresample2-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756258" comment="libswscale-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756259" comment="libswscale4-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756260" comment="libswscale4-32bit-3.4.2-150000.4.53.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140135" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202353" ref_url="https://bugzilla.suse.com/1202353" source="BUGZILLA"/>
		<reference ref_id="1205128" ref_url="https://bugzilla.suse.com/1205128" source="BUGZILLA"/>
		<reference ref_id="1209613" ref_url="https://bugzilla.suse.com/1209613" source="BUGZILLA"/>
		<reference ref_id="1209687" ref_url="https://bugzilla.suse.com/1209687" source="BUGZILLA"/>
		<reference ref_id="1209777" ref_url="https://bugzilla.suse.com/1209777" source="BUGZILLA"/>
		<reference ref_id="1209871" ref_url="https://bugzilla.suse.com/1209871" source="BUGZILLA"/>
		<reference ref_id="1209887" ref_url="https://bugzilla.suse.com/1209887" source="BUGZILLA"/>
		<reference ref_id="1210202" ref_url="https://bugzilla.suse.com/1210202" source="BUGZILLA"/>
		<reference ref_id="1210301" ref_url="https://bugzilla.suse.com/1210301" source="BUGZILLA"/>
		<reference ref_id="1210329" ref_url="https://bugzilla.suse.com/1210329" source="BUGZILLA"/>
		<reference ref_id="1210336" ref_url="https://bugzilla.suse.com/1210336" source="BUGZILLA"/>
		<reference ref_id="1210337" ref_url="https://bugzilla.suse.com/1210337" source="BUGZILLA"/>
		<reference ref_id="1210469" ref_url="https://bugzilla.suse.com/1210469" source="BUGZILLA"/>
		<reference ref_id="1210498" ref_url="https://bugzilla.suse.com/1210498" source="BUGZILLA"/>
		<reference ref_id="1210506" ref_url="https://bugzilla.suse.com/1210506" source="BUGZILLA"/>
		<reference ref_id="1210647" ref_url="https://bugzilla.suse.com/1210647" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36691" ref_url="https://www.suse.com/security/cve/CVE-2020-36691/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="CVE-2023-1611" ref_url="https://www.suse.com/security/cve/CVE-2023-1611/" source="CVE"/>
		<reference ref_id="CVE-2023-1670" ref_url="https://www.suse.com/security/cve/CVE-2023-1670/" source="CVE"/>
		<reference ref_id="CVE-2023-1855" ref_url="https://www.suse.com/security/cve/CVE-2023-1855/" source="CVE"/>
		<reference ref_id="CVE-2023-1989" ref_url="https://www.suse.com/security/cve/CVE-2023-1989/" source="CVE"/>
		<reference ref_id="CVE-2023-1990" ref_url="https://www.suse.com/security/cve/CVE-2023-1990/" source="CVE"/>
		<reference ref_id="CVE-2023-1998" ref_url="https://www.suse.com/security/cve/CVE-2023-1998/" source="CVE"/>
		<reference ref_id="CVE-2023-2124" ref_url="https://www.suse.com/security/cve/CVE-2023-2124/" source="CVE"/>
		<reference ref_id="CVE-2023-2162" ref_url="https://www.suse.com/security/cve/CVE-2023-2162/" source="CVE"/>
		<reference ref_id="CVE-2023-30772" ref_url="https://www.suse.com/security/cve/CVE-2023-30772/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2151-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029294.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-2124: Fixed an out of bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498).
- CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647).
- CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).
- CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329).
- CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).
- CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687).
- CVE-2020-36691: Fixed a denial of service vulnerability via a nested Netlink policy with a back reference (bsc#1209777).

The following non-security bugs were fixed:

- cifs: fix negotiate context parsing (bsc#1210301).
- cred: allow get_cred() and put_cred() to be given NULL (bsc#1209887).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-09"/>
	<updated date="2023-05-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202353">SUSE bug 1202353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205128">SUSE bug 1205128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209613">SUSE bug 1209613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209687">SUSE bug 1209687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209777">SUSE bug 1209777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209871">SUSE bug 1209871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209887">SUSE bug 1209887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210202">SUSE bug 1210202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210301">SUSE bug 1210301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210329">SUSE bug 1210329</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210336">SUSE bug 1210336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210337">SUSE bug 1210337</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210469">SUSE bug 1210469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210498">SUSE bug 1210498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210506">SUSE bug 1210506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210647">SUSE bug 1210647</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36691/">CVE-2020-36691</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1611/">CVE-2023-1611</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1670/">CVE-2023-1670</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1855/">CVE-2023-1855</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1989/">CVE-2023-1989</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1990/">CVE-2023-1990</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-1998/">CVE-2023-1998</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2124/">CVE-2023-2124</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2162/">CVE-2023-2162</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-30772/">CVE-2023-30772</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009756958" comment="kernel-default-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756959" comment="kernel-default-base-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756960" comment="kernel-default-devel-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756961" comment="kernel-devel-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756962" comment="kernel-docs-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756963" comment="kernel-macros-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756964" comment="kernel-obs-build-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756965" comment="kernel-source-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756966" comment="kernel-syms-4.12.14-150100.197.145.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140136" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194303" ref_url="https://bugzilla.suse.com/1194303" source="BUGZILLA"/>
		<reference ref_id="1194304" ref_url="https://bugzilla.suse.com/1194304" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-45944" ref_url="https://www.suse.com/security/cve/CVE-2021-45944/" source="CVE"/>
		<reference ref_id="CVE-2021-45949" ref_url="https://www.suse.com/security/cve/CVE-2021-45949/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0088-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013607.html" source="SUSE-SU"/>
		<description>
This update for ghostscript fixes the following issues:

- CVE-2021-45944: Fixed use-after-free in sampled_data_sample (bsc#1194303)
- CVE-2021-45949: Fixed heap-based buffer overflow in sampled_data_finish (bsc#1194304)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-31"/>
	<updated date="2023-01-31"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1194303">SUSE bug 1194303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194304">SUSE bug 1194304</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45944/">CVE-2021-45944</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45949/">CVE-2021-45949</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009734844" comment="ghostscript-9.52-161.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734845" comment="ghostscript-devel-9.52-161.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734846" comment="ghostscript-x11-9.52-161.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140137" version="1" class="patch">
	<metadata>
		<title>Security update for container-suseconnect (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2174-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029363.html" source="SUSE-SU"/>
		<description>

This update of container-suseconnect fixes the following issues:

- rebuild the package with the go 19.9 secure release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-11"/>
	<updated date="2023-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756733" comment="container-suseconnect-2.4.0-150000.4.28.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140138" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211175" ref_url="https://bugzilla.suse.com/1211175" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-32205" ref_url="https://www.suse.com/security/cve/CVE-2023-32205/" source="CVE"/>
		<reference ref_id="CVE-2023-32206" ref_url="https://www.suse.com/security/cve/CVE-2023-32206/" source="CVE"/>
		<reference ref_id="CVE-2023-32207" ref_url="https://www.suse.com/security/cve/CVE-2023-32207/" source="CVE"/>
		<reference ref_id="CVE-2023-32211" ref_url="https://www.suse.com/security/cve/CVE-2023-32211/" source="CVE"/>
		<reference ref_id="CVE-2023-32212" ref_url="https://www.suse.com/security/cve/CVE-2023-32212/" source="CVE"/>
		<reference ref_id="CVE-2023-32213" ref_url="https://www.suse.com/security/cve/CVE-2023-32213/" source="CVE"/>
		<reference ref_id="CVE-2023-32214" ref_url="https://www.suse.com/security/cve/CVE-2023-32214/" source="CVE"/>
		<reference ref_id="CVE-2023-32215" ref_url="https://www.suse.com/security/cve/CVE-2023-32215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2175-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029362.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Extended Support Release 102.11.0 ESR (bsc#1211175):

- CVE-2023-32205: Browser prompts could have been obscured by popups
- CVE-2023-32206: Crash in RLBox Expat driver
- CVE-2023-32207: Potential permissions request bypass via clickjacking
- CVE-2023-32211: Content process crash due to invalid wasm code
- CVE-2023-32212: Potential spoof due to obscured address bar
- CVE-2023-32213: Potential memory corruption in FileReader::DoReadData()
- CVE-2023-32214: Potential DoS via exposed protocol handlers
- CVE-2023-32215: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-11"/>
	<updated date="2023-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211175">SUSE bug 1211175</bugzilla>
	<cve impact="critical" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-32205/">CVE-2023-32205</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32206/">CVE-2023-32206</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-32207/">CVE-2023-32207</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32211/">CVE-2023-32211</cve>
	<cve impact="critical" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-32212/">CVE-2023-32212</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-32213/">CVE-2023-32213</cve>
	<cve impact="critical" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32214/">CVE-2023-32214</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-32215/">CVE-2023-32215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009756967" comment="MozillaFirefox-102.11.0-150000.150.85.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756968" comment="MozillaFirefox-devel-102.11.0-150000.150.85.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756969" comment="MozillaFirefox-translations-common-102.11.0-150000.150.85.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756970" comment="MozillaFirefox-translations-other-102.11.0-150000.150.85.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140139" version="1" class="patch">
	<metadata>
		<title>Security update for buildah (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014857.html" source="SUSE-SU"/>
		<description>

This update of buildah fixes the following issues:

- rebuild the package with the go 19.9 secure release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-11"/>
	<updated date="2023-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756774" comment="buildah-1.25.1-150100.3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140140" version="1" class="patch">
	<metadata>
		<title>Security update for skopeo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014863.html" source="SUSE-SU"/>
		<description>

This update of skopeo fixes the following issues:

- rebuild the package with the go 19.9 secure release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-11"/>
	<updated date="2023-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756737" comment="skopeo-0.1.41-150000.4.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140141" version="1" class="patch">
	<metadata>
		<title>Security update for Prometheus Golang clients (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197284" ref_url="https://bugzilla.suse.com/1197284" source="BUGZILLA"/>
		<reference ref_id="1203185" ref_url="https://bugzilla.suse.com/1203185" source="BUGZILLA"/>
		<reference ref_id="1208051" ref_url="https://bugzilla.suse.com/1208051" source="BUGZILLA"/>
		<reference ref_id="1208064" ref_url="https://bugzilla.suse.com/1208064" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-27191" ref_url="https://www.suse.com/security/cve/CVE-2022-27191/" source="CVE"/>
		<reference ref_id="CVE-2022-27664" ref_url="https://www.suse.com/security/cve/CVE-2022-27664/" source="CVE"/>
		<reference ref_id="CVE-2022-46146" ref_url="https://www.suse.com/security/cve/CVE-2022-46146/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014865.html" source="SUSE-SU"/>
		<description>
This update for golang-github-prometheus-alertmanager and golang-github-prometheus-node_exporter fixes the following issues:

golang-github-prometheus-alertmanager:

- Security issues fixed:
  * CVE-2022-46146: Fix authentication bypass via cache poisoning (bsc#1208051)   
    
golang-github-prometheus-node_exporter:

- Security issues fixed in this version update to version 1.5.0 (jsc#PED-3578):
  * CVE-2022-27191: Update go/x/crypto (bsc#1197284)
  * CVE-2022-27664: Update go/x/net (bsc#1203185)
  * CVE-2022-46146: Update exporter-toolkit (bsc#1208064)
- Other non-security bug fixes and changes in this version update to 1.5.0 (jsc#PED-3578):
  * NOTE: This changes the Go runtime 'GOMAXPROCS' to 1. This is done to limit the concurrency of the exporter to 1 CPU
    thread at a time in order to avoid a race condition problem in the Linux kernel and parallel IO issues on nodes with
    high numbers of CPUs/CPU threads.
  * [BUGFIX] Fix hwmon label sanitizer
  * [BUGFIX] Use native endianness when encoding InetDiagMsg
  * [BUGFIX] Fix btrfs device stats always being zero
  * [BUGFIX] Fix diskstats exclude flags
  * [BUGFIX] [node-mixin] Fix fsSpaceAvailableCriticalThreshold and fsSpaceAvailableWarning
  * [BUGFIX] Fix concurrency issue in ethtool collector
  * [BUGFIX] Fix concurrency issue in netdev collector
  * [BUGFIX] Fix diskstat reads and write metrics for disks with different sector sizes
  * [BUGFIX] Fix iostat on macos broken by deprecation warning
  * [BUGFIX] Fix NodeFileDescriptorLimit alerts
  * [BUGFIX] Sanitize rapl zone names
  * [BUGFIX] Add file descriptor close safely in test
  * [BUGFIX] Fix race condition in os_release.go
  * [BUGFIX] Skip ZFS IO metrics if their paths are missing
  * [BUGFIX] Handle nil CPU thermal power status on M1
  * [BUGFIX] bsd: Ignore filesystems flagged as MNT_IGNORE
  * [BUGFIX] Sanitize UTF-8 in dmi collector
  * [CHANGE] Merge metrics descriptions in textfile collector
  * [FEATURE] Add multiple listeners and systemd socket listener activation
  * [FEATURE] [node-mixin] Add darwin dashboard to mixin
  * [FEATURE] Add 'isolated' metric on cpu collector on linux
  * [FEATURE] Add cgroup summary collector
  * [FEATURE] Add selinux collector
  * [FEATURE] Add slab info collector
  * [FEATURE] Add sysctl collector
  * [FEATURE] Also track the CPU Spin time for OpenBSD systems
  * [FEATURE] Add support for MacOS version
  * [ENHANCEMENT] Add RTNL version of netclass collector
  * [ENHANCEMENT] [node-mixin] Add missing selectors
  * [ENHANCEMENT] [node-mixin] Change current datasource to grafana's default
  * [ENHANCEMENT] [node-mixin] Change disk graph to disk table
  * [ENHANCEMENT] [node-mixin] Change io time units to %util
  * [ENHANCEMENT] Ad user_wired_bytes and laundry_bytes on *bsd
  * [ENHANCEMENT] Add additional vm_stat memory metrics for darwin
  * [ENHANCEMENT] Add device filter flags to arp collector
  * [ENHANCEMENT] Add diskstats include and exclude device flags
  * [ENHANCEMENT] Add node_softirqs_total metric
  * [ENHANCEMENT] Add rapl zone name label option
  * [ENHANCEMENT] Add slabinfo collector
  * [ENHANCEMENT] Allow user to select port on NTP server to query
  * [ENHANCEMENT] collector/diskstats: Add labels and metrics from udev
  * [ENHANCEMENT] Enable builds against older macOS SDK
  * [ENHANCEMENT] qdisk-linux: Add exclude and include flags for interface name
  * [ENHANCEMENT] systemd: Expose systemd minor version
  * [ENHANCEMENT] Use netlink for tcpstat collector
  * [ENHANCEMENT] Use netlink to get netdev stats
  * [ENHANCEMENT] Add additional perf counters for stalled frontend/backend cycles
  * [ENHANCEMENT] Add btrfs device error stats
- Change build requirement to go1.18 or higher (previously this was fixed to version 1.14)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-11"/>
	<updated date="2023-05-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1197284">SUSE bug 1197284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203185">SUSE bug 1203185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208051">SUSE bug 1208051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208064">SUSE bug 1208064</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27191/">CVE-2022-27191</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27664/">CVE-2022-27664</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46146/">CVE-2022-46146</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756640" comment="golang-github-prometheus-node_exporter-1.5.0-150100.3.23.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140142" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210303" ref_url="https://bugzilla.suse.com/1210303" source="BUGZILLA"/>
		<reference ref_id="1211228" ref_url="https://bugzilla.suse.com/1211228" source="BUGZILLA"/>
		<reference ref_id="1211229" ref_url="https://bugzilla.suse.com/1211229" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2454" ref_url="https://www.suse.com/security/cve/CVE-2023-2454/" source="CVE"/>
		<reference ref_id="CVE-2023-2455" ref_url="https://www.suse.com/security/cve/CVE-2023-2455/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2198-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029404.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

Updated to version 12.15:
  - CVE-2023-2454: Fixed an issue where a user having permission to
    create a schema could hijack the privileges of a security definer
    function or extension script (bsc#1211228).
  - CVE-2023-2455: Fixed an issue that could allow a user to see or
    modify rows that should have been invisible (bsc#1211229).
  - Internal fixes (bsc#1210303).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-15"/>
	<updated date="2023-05-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210303">SUSE bug 1210303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211228">SUSE bug 1211228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211229">SUSE bug 1211229</bugzilla>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-2454/">CVE-2023-2454</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-2455/">CVE-2023-2455</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009758121" comment="libecpg6-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758122" comment="libpq5-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758123" comment="libpq5-32bit-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758124" comment="postgresql12-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758125" comment="postgresql12-contrib-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758126" comment="postgresql12-devel-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758127" comment="postgresql12-docs-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758128" comment="postgresql12-plperl-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758129" comment="postgresql12-plpython-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758130" comment="postgresql12-pltcl-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758131" comment="postgresql12-server-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758132" comment="postgresql12-server-devel-12.15-150100.3.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140143" version="1" class="patch">
	<metadata>
		<title>Security update for rmt-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204285" ref_url="https://bugzilla.suse.com/1204285" source="BUGZILLA"/>
		<reference ref_id="1204769" ref_url="https://bugzilla.suse.com/1204769" source="BUGZILLA"/>
		<reference ref_id="1205089" ref_url="https://bugzilla.suse.com/1205089" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31254" ref_url="https://www.suse.com/security/cve/CVE-2022-31254/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0022-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013422.html" source="SUSE-SU"/>
		<description>
This update for rmt-server fixes the following issues:

Update to version 2.10:

- Add option to turn off system token support (bsc#1205089)
- Update the `last_seen_at` column on zypper service refresh
- Do not retry to import non-existing files in air-gapped mode (bsc#1204769)
- CVE-2022-31254: Fixed a local privilege escalation related to the packaging of rmt-server (bsc#1204285).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-03"/>
	<updated date="2023-01-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204285">SUSE bug 1204285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204769">SUSE bug 1204769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205089">SUSE bug 1205089</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31254/">CVE-2022-31254</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009730926" comment="rmt-server-2.10-150100.3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730927" comment="rmt-server-config-2.10-150100.3.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140144" version="1" class="patch">
	<metadata>
		<title>Security update for dmidecode (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210418" ref_url="https://bugzilla.suse.com/1210418" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-30630" ref_url="https://www.suse.com/security/cve/CVE-2023-30630/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2215-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029418.html" source="SUSE-SU"/>
		<description>
This update for dmidecode fixes the following issues:

- CVE-2023-30630: Fixed potential privilege escalation vulnerability via file overwrite (bsc#1210418).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1210418">SUSE bug 1210418</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-30630/">CVE-2023-30630</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754961" comment="dmidecode-3.2-150100.9.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140145" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205385" ref_url="https://bugzilla.suse.com/1205385" source="BUGZILLA"/>
		<reference ref_id="1206504" ref_url="https://bugzilla.suse.com/1206504" source="BUGZILLA"/>
		<reference ref_id="1206546" ref_url="https://bugzilla.suse.com/1206546" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20251" ref_url="https://www.suse.com/security/cve/CVE-2021-20251/" source="CVE"/>
		<reference ref_id="CVE-2022-37966" ref_url="https://www.suse.com/security/cve/CVE-2022-37966/" source="CVE"/>
		<reference ref_id="CVE-2022-38023" ref_url="https://www.suse.com/security/cve/CVE-2022-38023/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0222-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3YTRBE2CLOHDFXSGJQCTU4DTNHNRTBU/" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2021-20251: Fixed an issue where the bad password count would
  not be properly incremented, which could allow attackers to brute
  force a user's password (bsc#1206546).
- CVE-2022-38023: Disabled weak ciphers by default in the Netlogon
  Secure channel (bsc#1206504).
- CVE-2022-37966: Fixed an issue where a weak cipher would be
  selected to encrypt session keys, which could lead to privilege
  escalation (bsc#1205385).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-01"/>
	<updated date="2023-02-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205385">SUSE bug 1205385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206504">SUSE bug 1206504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206546">SUSE bug 1206546</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20251/">CVE-2021-20251</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-37966/">CVE-2022-37966</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38023/">CVE-2022-38023</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009732803" comment="libdcerpc-binding0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732804" comment="libdcerpc-binding0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732805" comment="libdcerpc-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732806" comment="libdcerpc-samr-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732807" comment="libdcerpc-samr0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732808" comment="libdcerpc0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732809" comment="libdcerpc0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732810" comment="libndr-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732811" comment="libndr-krb5pac-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732812" comment="libndr-krb5pac0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732813" comment="libndr-krb5pac0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732814" comment="libndr-nbt-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732815" comment="libndr-nbt0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732816" comment="libndr-nbt0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732817" comment="libndr-standard-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732818" comment="libndr-standard0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732819" comment="libndr-standard0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732820" comment="libndr0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732821" comment="libndr0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732822" comment="libnetapi-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732823" comment="libnetapi0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732824" comment="libnetapi0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732825" comment="libsamba-credentials-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732826" comment="libsamba-credentials0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732827" comment="libsamba-credentials0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732828" comment="libsamba-errors-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732829" comment="libsamba-errors0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732830" comment="libsamba-errors0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732831" comment="libsamba-hostconfig-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732832" comment="libsamba-hostconfig0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732833" comment="libsamba-hostconfig0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732834" comment="libsamba-passdb-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732835" comment="libsamba-passdb0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732836" comment="libsamba-passdb0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732837" comment="libsamba-policy-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732838" comment="libsamba-policy-python3-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732839" comment="libsamba-policy0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732840" comment="libsamba-policy0-python3-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732841" comment="libsamba-util-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732842" comment="libsamba-util0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732843" comment="libsamba-util0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732844" comment="libsamdb-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732845" comment="libsamdb0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732846" comment="libsamdb0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732847" comment="libsmbclient-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732848" comment="libsmbclient0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732849" comment="libsmbconf-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732850" comment="libsmbconf0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732851" comment="libsmbconf0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732852" comment="libsmbldap-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732853" comment="libsmbldap2-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732854" comment="libsmbldap2-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732855" comment="libtevent-util-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732856" comment="libtevent-util0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732857" comment="libtevent-util0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732858" comment="libwbclient-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732859" comment="libwbclient0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732860" comment="libwbclient0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732861" comment="samba-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732862" comment="samba-ad-dc-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732863" comment="samba-client-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732864" comment="samba-core-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732865" comment="samba-dsdb-modules-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732866" comment="samba-libs-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732867" comment="samba-libs-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732868" comment="samba-libs-python-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732869" comment="samba-libs-python3-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732870" comment="samba-python-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732871" comment="samba-python3-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732872" comment="samba-winbind-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732873" comment="samba-winbind-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140146" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210628" ref_url="https://bugzilla.suse.com/1210628" source="BUGZILLA"/>
		<reference ref_id="1210631" ref_url="https://bugzilla.suse.com/1210631" source="BUGZILLA"/>
		<reference ref_id="1210632" ref_url="https://bugzilla.suse.com/1210632" source="BUGZILLA"/>
		<reference ref_id="1210634" ref_url="https://bugzilla.suse.com/1210634" source="BUGZILLA"/>
		<reference ref_id="1210635" ref_url="https://bugzilla.suse.com/1210635" source="BUGZILLA"/>
		<reference ref_id="1210636" ref_url="https://bugzilla.suse.com/1210636" source="BUGZILLA"/>
		<reference ref_id="1210637" ref_url="https://bugzilla.suse.com/1210637" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-21930" ref_url="https://www.suse.com/security/cve/CVE-2023-21930/" source="CVE"/>
		<reference ref_id="CVE-2023-21937" ref_url="https://www.suse.com/security/cve/CVE-2023-21937/" source="CVE"/>
		<reference ref_id="CVE-2023-21938" ref_url="https://www.suse.com/security/cve/CVE-2023-21938/" source="CVE"/>
		<reference ref_id="CVE-2023-21939" ref_url="https://www.suse.com/security/cve/CVE-2023-21939/" source="CVE"/>
		<reference ref_id="CVE-2023-21954" ref_url="https://www.suse.com/security/cve/CVE-2023-21954/" source="CVE"/>
		<reference ref_id="CVE-2023-21967" ref_url="https://www.suse.com/security/cve/CVE-2023-21967/" source="CVE"/>
		<reference ref_id="CVE-2023-21968" ref_url="https://www.suse.com/security/cve/CVE-2023-21968/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014907.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU):

- CVE-2023-21930: Fixed AES support (bsc#1210628).
- CVE-2023-21937: Fixed String platform support (bsc#1210631).
- CVE-2023-21938: Fixed runtime support (bsc#1210632).
- CVE-2023-21939: Fixed Swing platform support (bsc#1210634). 
- CVE-2023-21954: Fixed object reclamation process (bsc#1210635).
- CVE-2023-21967: Fixed TLS session negotiation (bsc#1210636).
- CVE-2023-21968: Fixed path handling (bsc#1210637). 
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210628">SUSE bug 1210628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210631">SUSE bug 1210631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210632">SUSE bug 1210632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210634">SUSE bug 1210634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210635">SUSE bug 1210635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210636">SUSE bug 1210636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210637">SUSE bug 1210637</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-21930/">CVE-2023-21930</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21937/">CVE-2023-21937</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21938/">CVE-2023-21938</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21939/">CVE-2023-21939</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-21954/">CVE-2023-21954</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-21967/">CVE-2023-21967</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21968/">CVE-2023-21968</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009755660" comment="java-11-openjdk-11.0.19.0-150000.3.96.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755661" comment="java-11-openjdk-demo-11.0.19.0-150000.3.96.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755662" comment="java-11-openjdk-devel-11.0.19.0-150000.3.96.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755663" comment="java-11-openjdk-headless-11.0.19.0-150000.3.96.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140147" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206309" ref_url="https://bugzilla.suse.com/1206309" source="BUGZILLA"/>
		<reference ref_id="1207992" ref_url="https://bugzilla.suse.com/1207992" source="BUGZILLA"/>
		<reference ref_id="1209209" ref_url="https://bugzilla.suse.com/1209209" source="BUGZILLA"/>
		<reference ref_id="1209210" ref_url="https://bugzilla.suse.com/1209210" source="BUGZILLA"/>
		<reference ref_id="1209211" ref_url="https://bugzilla.suse.com/1209211" source="BUGZILLA"/>
		<reference ref_id="1209212" ref_url="https://bugzilla.suse.com/1209212" source="BUGZILLA"/>
		<reference ref_id="1209214" ref_url="https://bugzilla.suse.com/1209214" source="BUGZILLA"/>
		<reference ref_id="1211231" ref_url="https://bugzilla.suse.com/1211231" source="BUGZILLA"/>
		<reference ref_id="1211232" ref_url="https://bugzilla.suse.com/1211232" source="BUGZILLA"/>
		<reference ref_id="1211233" ref_url="https://bugzilla.suse.com/1211233" source="BUGZILLA"/>
		<reference ref_id="1211339" ref_url="https://bugzilla.suse.com/1211339" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-43552" ref_url="https://www.suse.com/security/cve/CVE-2022-43552/" source="CVE"/>
		<reference ref_id="CVE-2023-23916" ref_url="https://www.suse.com/security/cve/CVE-2023-23916/" source="CVE"/>
		<reference ref_id="CVE-2023-27533" ref_url="https://www.suse.com/security/cve/CVE-2023-27533/" source="CVE"/>
		<reference ref_id="CVE-2023-27534" ref_url="https://www.suse.com/security/cve/CVE-2023-27534/" source="CVE"/>
		<reference ref_id="CVE-2023-27535" ref_url="https://www.suse.com/security/cve/CVE-2023-27535/" source="CVE"/>
		<reference ref_id="CVE-2023-27536" ref_url="https://www.suse.com/security/cve/CVE-2023-27536/" source="CVE"/>
		<reference ref_id="CVE-2023-27538" ref_url="https://www.suse.com/security/cve/CVE-2023-27538/" source="CVE"/>
		<reference ref_id="CVE-2023-28320" ref_url="https://www.suse.com/security/cve/CVE-2023-28320/" source="CVE"/>
		<reference ref_id="CVE-2023-28321" ref_url="https://www.suse.com/security/cve/CVE-2023-28321/" source="CVE"/>
		<reference ref_id="CVE-2023-28322" ref_url="https://www.suse.com/security/cve/CVE-2023-28322/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2226-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029432.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2023-28320: Fixed siglongjmp race condition (bsc#1211231).
- CVE-2023-28321: Fixed IDN wildcard matching (bsc#1211232).
- CVE-2023-28322: Fixed POST-after-PUT confusion (bsc#1211233).
- CVE-2023-27533: Fixed TELNET option IAC injection (bsc#1209209).
- CVE-2023-27534: Fixed SFTP path ~ resolving discrepancy (bsc#1209210).
- CVE-2023-27535: Fixed FTP too eager connection reuse (bsc#1209211).
- CVE-2023-27536: Fixed GSS delegation too eager connection reuse (bsc#1209212).
- CVE-2023-27538: Fixed SSH connection too eager reuse still (bsc#1209214).
- CVE-2022-43552: HTTP Proxy deny use-after-free (bsc#1206309).
- CVE-2023-23916: Fixed HTTP multi-header compression denial of service (bsc#1207992).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-17"/>
	<updated date="2023-05-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206309">SUSE bug 1206309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207992">SUSE bug 1207992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209209">SUSE bug 1209209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209210">SUSE bug 1209210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209211">SUSE bug 1209211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209212">SUSE bug 1209212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209214">SUSE bug 1209214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211231">SUSE bug 1211231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211232">SUSE bug 1211232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211233">SUSE bug 1211233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211339">SUSE bug 1211339</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-43552/">CVE-2022-43552</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-23916/">CVE-2023-23916</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2023-27533/">CVE-2023-27533</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2023-27534/">CVE-2023-27534</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-27535/">CVE-2023-27535</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-27536/">CVE-2023-27536</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-27538/">CVE-2023-27538</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-28320/">CVE-2023-28320</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-28321/">CVE-2023-28321</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-28322/">CVE-2023-28322</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009759904" comment="curl-7.60.0-150000.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009759905" comment="libcurl-devel-7.60.0-150000.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009759906" comment="libcurl4-7.60.0-150000.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009759907" comment="libcurl4-32bit-7.60.0-150000.51.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140148" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208479" ref_url="https://bugzilla.suse.com/1208479" source="BUGZILLA"/>
		<reference ref_id="1211382" ref_url="https://bugzilla.suse.com/1211382" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-33972" ref_url="https://www.suse.com/security/cve/CVE-2022-33972/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2244-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029456.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20230512 release. (bsc#1211382)
- New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/01 |          | 00000010 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
- Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | L0       | 06-9a-03/80 | 00000429 | 0000042a | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000429 | 0000042a | Core Gen12
  | AML-Y22        | H0       | 06-8e-09/10 |          | 000000f2 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f4 | 000000f8 | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f0 | 000000f2 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f0 | 000000f2 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f0 | 000000f2 | Core Gen8
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f0 | 000000f2 | Core Gen8 Mobile
  | CLX-SP         | B0       | 06-55-06/bf | 04003303 | 04003501 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003303 | 05003501 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002503 | 07002601 | Xeon Scalable Gen3
  | ICL-D          | B0       | 06-6c-01/10 | 01000211 | 01000230 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b8 | 000000ba | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000389 | 0d000390 | Xeon Scalable Gen3
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000f0 | 000000f2 | Core Gen7; Xeon E3 v6
  | KBL-U/Y        | H0       | 06-8e-09/c0 |          | 000000f2 | Core Gen7 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000032 | 00000033 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000057 | 00000058 | Core Gen11
  | RPL-H 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-P 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-S          | S0       | 06-b7-01/32 | 00000112 | 00000113 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/07 | 0000410e | 00004112 | Core Gen13
  | SKX-D          | H0       | 06-55-04/b7 |          | 02006f05 | Xeon D-21xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000161 | 01000171 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 |          | 02006f05 | Xeon Scalable
  | SPR-HBM        | B3       | 06-8f-08/10 | 2c000170 | 2c0001d1 | Xeon Max
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S2       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S3       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | TGL            | B1       | 06-8c-01/80 | 000000a6 | 000000aa | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000042 | 00000044 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000028 | 0000002a | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 |          | 000000f2 | Core Gen8 Mobile
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-18"/>
	<updated date="2023-05-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208479">SUSE bug 1208479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211382">SUSE bug 1211382</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-33972/">CVE-2022-33972</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009759923" comment="ucode-intel-20230512-150100.3.220.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140149" version="1" class="patch">
	<metadata>
		<title>Security update for ctags (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206543" ref_url="https://bugzilla.suse.com/1206543" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4515" ref_url="https://www.suse.com/security/cve/CVE-2022-4515/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0225-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013611.html" source="SUSE-SU"/>
		<description>
This update for ctags fixes the following issues:

- CVE-2022-4515: Fixed a command injection issue via a tag file wih a
  crafted filename (bsc#1206543).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-01"/>
	<updated date="2023-02-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206543">SUSE bug 1206543</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4515/">CVE-2022-4515</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009733704" comment="ctags-5.8-150000.3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140150" version="1" class="patch">
	<metadata>
		<title>Security update for containerd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210298" ref_url="https://bugzilla.suse.com/1210298" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2254-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029463.html" source="SUSE-SU"/>
		<description>
This update for containerd fixes the following issues:

- Rebuild containerd with a current version of go to catch up on bugfixes and security fixes (bsc#1210298)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-19"/>
	<updated date="2023-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210298">SUSE bug 1210298</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009756868" comment="containerd-1.6.19-150000.90.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756869" comment="containerd-ctr-1.6.19-150000.90.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140151" version="1" class="patch">
	<metadata>
		<title>Security update for runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2256-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014929.html" source="SUSE-SU"/>
		<description>

This update of runc fixes the following issues:

- rebuild the package with the go 19.9 secure release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-19"/>
	<updated date="2023-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756736" comment="runc-1.1.5-150000.43.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140152" version="1" class="patch">
	<metadata>
		<title>Security update for python-Flask (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211246" ref_url="https://bugzilla.suse.com/1211246" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-30861" ref_url="https://www.suse.com/security/cve/CVE-2023-30861/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014934.html" source="SUSE-SU"/>
		<description>
This update for python-Flask fixes the following issues:

- CVE-2023-30861: Fixed a potential cookie confusion due to incorrect
  caching (bsc#1211246).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-22"/>
	<updated date="2023-05-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211246">SUSE bug 1211246</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-30861/">CVE-2023-30861</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757456" comment="python3-Flask-1.0.2-150100.6.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140153" version="1" class="patch">
	<metadata>
		<title>Security update for geoipupdate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="1209658" ref_url="https://bugzilla.suse.com/1209658" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2273-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029477.html" source="SUSE-SU"/>
		<description>

This update of geoipupdate fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441 bsc#1209658).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-23"/>
	<updated date="2023-05-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209658">SUSE bug 1209658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009757076" comment="geoipupdate-4.2.2-150000.1.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757077" comment="geoipupdate-legacy-4.2.2-150000.1.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140154" version="1" class="patch">
	<metadata>
		<title>Security update for cups-filters, poppler, texlive (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211340" ref_url="https://bugzilla.suse.com/1211340" source="BUGZILLA"/>
		<reference ref_id="1211389" ref_url="https://bugzilla.suse.com/1211389" source="BUGZILLA"/>
		<reference ref_id="1211450" ref_url="https://bugzilla.suse.com/1211450" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-24805" ref_url="https://www.suse.com/security/cve/CVE-2023-24805/" source="CVE"/>
		<reference ref_id="CVE-2023-32700" ref_url="https://www.suse.com/security/cve/CVE-2023-32700/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2287-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029509.html" source="SUSE-SU"/>
		<description>
This update for cups-filters, poppler, texlive fixes the following issues:

cups-filters:

- CVE-2023-24805: Fixed a remote code execution in the beh backend (bsc#1211340).

texlive:

- CVE-2023-32700: Fixed arbitrary code execution in LuaTeX (bsc#1211389).

poppler:

- Added missing header file goo/GooCheckedOps.h. Without it, other packages
  using poppler as a library might fail to compile since our public headers now
  depend on it. (bsc#1211450)

		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-24"/>
	<updated date="2023-05-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211340">SUSE bug 1211340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211389">SUSE bug 1211389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211450">SUSE bug 1211450</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-24805/">CVE-2023-24805</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-32700/">CVE-2023-32700</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009761939" comment="cups-filters-1.20.3-150000.3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761940" comment="cups-filters-devel-1.20.3-150000.3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761941" comment="libkpathsea6-6.2.3-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761942" comment="libpoppler-cpp0-0.62.0-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761943" comment="libpoppler-devel-0.62.0-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761944" comment="libpoppler-glib-devel-0.62.0-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761945" comment="libpoppler-glib8-0.62.0-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761946" comment="libpoppler73-0.62.0-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761947" comment="libptexenc1-1.3.5-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761948" comment="libsynctex1-1.18-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761949" comment="libtexlua52-5-5.2.4-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761950" comment="libtexluajit2-2.1.0beta2-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761951" comment="perl-biber-2017.20170520.svn30357-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761952" comment="poppler-tools-0.62.0-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761953" comment="texlive-2017.20170520-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761954" comment="texlive-a2ping-bin-2017.20170520.svn27321-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761955" comment="texlive-accfonts-bin-2017.20170520.svn12688-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761956" comment="texlive-adhocfilelist-bin-2017.20170520.svn28038-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761957" comment="texlive-afm2pl-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761958" comment="texlive-aleph-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761959" comment="texlive-amstex-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761960" comment="texlive-arara-bin-2017.20170520.svn29036-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761961" comment="texlive-asymptote-bin-2017.20170520.svn43843-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761962" comment="texlive-authorindex-bin-2017.20170520.svn18790-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761963" comment="texlive-autosp-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761964" comment="texlive-biber-bin-2017.20170520.svn42679-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761965" comment="texlive-bibexport-bin-2017.20170520.svn16219-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761966" comment="texlive-bibtex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761967" comment="texlive-bibtex8-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761968" comment="texlive-bibtexu-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761969" comment="texlive-bin-devel-2017.20170520-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761970" comment="texlive-bundledoc-bin-2017.20170520.svn17794-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761971" comment="texlive-cachepic-bin-2017.20170520.svn15543-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761972" comment="texlive-checkcites-bin-2017.20170520.svn25623-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761973" comment="texlive-checklistings-bin-2017.20170520.svn38300-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761974" comment="texlive-chktex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761975" comment="texlive-cjk-gs-integrate-bin-2017.20170520.svn37223-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761976" comment="texlive-cjkutils-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761977" comment="texlive-context-bin-2017.20170520.svn34112-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761978" comment="texlive-convbkmk-bin-2017.20170520.svn30408-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761979" comment="texlive-crossrefware-bin-2017.20170520.svn43866-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761980" comment="texlive-cslatex-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761981" comment="texlive-csplain-bin-2017.20170520.svn33902-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761982" comment="texlive-ctanify-bin-2017.20170520.svn24061-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761983" comment="texlive-ctanupload-bin-2017.20170520.svn23866-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761984" comment="texlive-ctie-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761985" comment="texlive-cweb-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761986" comment="texlive-cyrillic-bin-bin-2017.20170520.svn29741-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761987" comment="texlive-de-macro-bin-2017.20170520.svn17399-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761988" comment="texlive-detex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761989" comment="texlive-diadia-bin-2017.20170520.svn37645-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761990" comment="texlive-dosepsbin-bin-2017.20170520.svn24759-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761991" comment="texlive-dtl-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761992" comment="texlive-dtxgen-bin-2017.20170520.svn29031-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761993" comment="texlive-dviasm-bin-2017.20170520.svn8329-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761994" comment="texlive-dvicopy-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761995" comment="texlive-dvidvi-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761996" comment="texlive-dviinfox-bin-2017.20170520.svn44515-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761997" comment="texlive-dviljk-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761998" comment="texlive-dvipdfmx-bin-2017.20170520.svn40273-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761999" comment="texlive-dvipng-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762000" comment="texlive-dvipos-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762001" comment="texlive-dvips-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762002" comment="texlive-dvisvgm-bin-2017.20170520.svn40987-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762003" comment="texlive-ebong-bin-2017.20170520.svn21000-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762004" comment="texlive-eplain-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762005" comment="texlive-epspdf-bin-2017.20170520.svn29050-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762006" comment="texlive-epstopdf-bin-2017.20170520.svn18336-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762007" comment="texlive-exceltex-bin-2017.20170520.svn25860-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762008" comment="texlive-fig4latex-bin-2017.20170520.svn14752-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762009" comment="texlive-findhyph-bin-2017.20170520.svn14758-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762010" comment="texlive-fontinst-bin-2017.20170520.svn29741-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762011" comment="texlive-fontools-bin-2017.20170520.svn25997-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762012" comment="texlive-fontware-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762013" comment="texlive-fragmaster-bin-2017.20170520.svn13663-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762014" comment="texlive-getmap-bin-2017.20170520.svn34971-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762015" comment="texlive-glossaries-bin-2017.20170520.svn37813-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762016" comment="texlive-gregoriotex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762017" comment="texlive-gsftopk-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762018" comment="texlive-jadetex-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762019" comment="texlive-kotex-utils-bin-2017.20170520.svn32101-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762020" comment="texlive-kpathsea-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762021" comment="texlive-kpathsea-devel-6.2.3-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762022" comment="texlive-lacheck-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762023" comment="texlive-latex-bin-bin-2017.20170520.svn14050-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762024" comment="texlive-latex-git-log-bin-2017.20170520.svn30983-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762025" comment="texlive-latex-papersize-bin-2017.20170520.svn42296-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762026" comment="texlive-latex2man-bin-2017.20170520.svn13663-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762027" comment="texlive-latex2nemeth-bin-2017.20170520.svn42300-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762028" comment="texlive-latexdiff-bin-2017.20170520.svn16420-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762029" comment="texlive-latexfileversion-bin-2017.20170520.svn25012-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762030" comment="texlive-latexindent-bin-2017.20170520.svn32150-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762031" comment="texlive-latexmk-bin-2017.20170520.svn10937-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762032" comment="texlive-latexpand-bin-2017.20170520.svn27025-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762033" comment="texlive-lcdftypetools-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762034" comment="texlive-lilyglyphs-bin-2017.20170520.svn31696-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762035" comment="texlive-listbib-bin-2017.20170520.svn26126-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762036" comment="texlive-listings-ext-bin-2017.20170520.svn15093-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762037" comment="texlive-lollipop-bin-2017.20170520.svn41465-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762038" comment="texlive-ltxfileinfo-bin-2017.20170520.svn29005-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762039" comment="texlive-ltximg-bin-2017.20170520.svn32346-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762040" comment="texlive-lua2dox-bin-2017.20170520.svn29053-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762041" comment="texlive-luaotfload-bin-2017.20170520.svn34647-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762042" comment="texlive-luatex-bin-2017.20170520.svn44549-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762043" comment="texlive-lwarp-bin-2017.20170520.svn43292-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762044" comment="texlive-m-tx-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762045" comment="texlive-make4ht-bin-2017.20170520.svn37750-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762046" comment="texlive-makedtx-bin-2017.20170520.svn38769-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762047" comment="texlive-makeindex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762048" comment="texlive-match_parens-bin-2017.20170520.svn23500-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762049" comment="texlive-mathspic-bin-2017.20170520.svn23661-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762050" comment="texlive-metafont-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762051" comment="texlive-metapost-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762052" comment="texlive-mex-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762053" comment="texlive-mf2pt1-bin-2017.20170520.svn23406-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762054" comment="texlive-mflua-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762055" comment="texlive-mfware-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762056" comment="texlive-mkgrkindex-bin-2017.20170520.svn14428-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762057" comment="texlive-mkjobtexmf-bin-2017.20170520.svn8457-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762058" comment="texlive-mkpic-bin-2017.20170520.svn33688-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762059" comment="texlive-mltex-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762060" comment="texlive-mptopdf-bin-2017.20170520.svn18674-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762061" comment="texlive-multibibliography-bin-2017.20170520.svn30534-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762062" comment="texlive-musixtex-bin-2017.20170520.svn37026-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762063" comment="texlive-musixtnt-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762064" comment="texlive-omegaware-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762065" comment="texlive-patgen-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762066" comment="texlive-pax-bin-2017.20170520.svn10843-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762067" comment="texlive-pdfbook2-bin-2017.20170520.svn37537-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762068" comment="texlive-pdfcrop-bin-2017.20170520.svn14387-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762069" comment="texlive-pdfjam-bin-2017.20170520.svn17868-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762070" comment="texlive-pdflatexpicscale-bin-2017.20170520.svn41779-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762071" comment="texlive-pdftex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762072" comment="texlive-pdftools-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762073" comment="texlive-pdfxup-bin-2017.20170520.svn40690-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762074" comment="texlive-pedigree-perl-bin-2017.20170520.svn25962-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762075" comment="texlive-perltex-bin-2017.20170520.svn16181-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762076" comment="texlive-petri-nets-bin-2017.20170520.svn39165-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762077" comment="texlive-pfarrei-bin-2017.20170520.svn29348-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762078" comment="texlive-pkfix-bin-2017.20170520.svn13364-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762079" comment="texlive-pkfix-helper-bin-2017.20170520.svn13663-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762080" comment="texlive-platex-bin-2017.20170520.svn22859-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762081" comment="texlive-pmx-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762082" comment="texlive-pmxchords-bin-2017.20170520.svn32405-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762083" comment="texlive-ps2pk-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762084" comment="texlive-pst-pdf-bin-2017.20170520.svn7838-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762085" comment="texlive-pst2pdf-bin-2017.20170520.svn29333-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762086" comment="texlive-pstools-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762087" comment="texlive-ptex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762088" comment="texlive-ptex-fontmaps-bin-2017.20170520.svn44206-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762089" comment="texlive-ptex2pdf-bin-2017.20170520.svn29335-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762090" comment="texlive-ptexenc-devel-1.3.5-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762091" comment="texlive-purifyeps-bin-2017.20170520.svn13663-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762092" comment="texlive-pygmentex-bin-2017.20170520.svn34996-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762093" comment="texlive-pythontex-bin-2017.20170520.svn31638-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762094" comment="texlive-rubik-bin-2017.20170520.svn32919-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762095" comment="texlive-seetexk-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762096" comment="texlive-splitindex-bin-2017.20170520.svn29688-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762097" comment="texlive-srcredact-bin-2017.20170520.svn38710-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762098" comment="texlive-sty2dtx-bin-2017.20170520.svn21215-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762099" comment="texlive-svn-multi-bin-2017.20170520.svn13663-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762100" comment="texlive-synctex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762101" comment="texlive-synctex-devel-1.18-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762102" comment="texlive-tetex-bin-2017.20170520.svn43957-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762103" comment="texlive-tex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762104" comment="texlive-tex4ebook-bin-2017.20170520.svn37771-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762105" comment="texlive-tex4ht-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762106" comment="texlive-texconfig-bin-2017.20170520.svn29741-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762107" comment="texlive-texcount-bin-2017.20170520.svn13013-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762108" comment="texlive-texdef-bin-2017.20170520.svn21802-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762109" comment="texlive-texdiff-bin-2017.20170520.svn15506-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762110" comment="texlive-texdirflatten-bin-2017.20170520.svn12782-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762111" comment="texlive-texdoc-bin-2017.20170520.svn29741-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762112" comment="texlive-texfot-bin-2017.20170520.svn33155-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762113" comment="texlive-texliveonfly-bin-2017.20170520.svn24062-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762114" comment="texlive-texloganalyser-bin-2017.20170520.svn13663-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762115" comment="texlive-texlua-devel-5.2.4-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762116" comment="texlive-texluajit-devel-2.1.0beta2-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762117" comment="texlive-texosquery-bin-2017.20170520.svn43596-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762118" comment="texlive-texsis-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762119" comment="texlive-texware-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762120" comment="texlive-thumbpdf-bin-2017.20170520.svn6898-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762121" comment="texlive-tie-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762122" comment="texlive-tpic2pdftex-bin-2017.20170520.svn29741-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762123" comment="texlive-ttfutils-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762124" comment="texlive-typeoutfileinfo-bin-2017.20170520.svn25648-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762125" comment="texlive-ulqda-bin-2017.20170520.svn13663-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762126" comment="texlive-uplatex-bin-2017.20170520.svn26326-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762127" comment="texlive-uptex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762128" comment="texlive-urlbst-bin-2017.20170520.svn23262-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762129" comment="texlive-velthuis-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762130" comment="texlive-vlna-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762131" comment="texlive-vpe-bin-2017.20170520.svn6897-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762132" comment="texlive-web-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762133" comment="texlive-xdvi-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762134" comment="texlive-xetex-bin-2017.20170520.svn44361-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762135" comment="texlive-xmltex-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762136" comment="texlive-yplan-bin-2017.20170520.svn34398-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762137" comment="typelib-1_0-Poppler-0_18-0.62.0-150000.4.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140155" version="1" class="patch">
	<metadata>
		<title>Security update for rmt-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202053" ref_url="https://bugzilla.suse.com/1202053" source="BUGZILLA"/>
		<reference ref_id="1203171" ref_url="https://bugzilla.suse.com/1203171" source="BUGZILLA"/>
		<reference ref_id="1206593" ref_url="https://bugzilla.suse.com/1206593" source="BUGZILLA"/>
		<reference ref_id="1207670" ref_url="https://bugzilla.suse.com/1207670" source="BUGZILLA"/>
		<reference ref_id="1209096" ref_url="https://bugzilla.suse.com/1209096" source="BUGZILLA"/>
		<reference ref_id="1209507" ref_url="https://bugzilla.suse.com/1209507" source="BUGZILLA"/>
		<reference ref_id="1209825" ref_url="https://bugzilla.suse.com/1209825" source="BUGZILLA"/>
		<reference ref_id="1211398" ref_url="https://bugzilla.suse.com/1211398" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-27530" ref_url="https://www.suse.com/security/cve/CVE-2023-27530/" source="CVE"/>
		<reference ref_id="CVE-2023-28120" ref_url="https://www.suse.com/security/cve/CVE-2023-28120/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2304-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/015002.html" source="SUSE-SU"/>
		<description>
This update for rmt-server fixes the following issues:

Updated to version 2.13:

- CVE-2023-28120: Fixed a potential XSS issue in an embedded
  dependency (bsc#1209507).
- CVE-2023-27530: Fixed a denial of service issue in multipart request
  parsing (bsc#1209096).

Non-security fixes:

- Fixed transactional update on GCE (bsc#1211398).
- Use HTTPS in rmt-client-setup-res (bsc#1209825).
- Various build fixes (bsc#1207670, bsc#1203171, bsc#1206593,
  bsc#1202053).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-25"/>
	<updated date="2023-05-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202053">SUSE bug 1202053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203171">SUSE bug 1203171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206593">SUSE bug 1206593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207670">SUSE bug 1207670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209096">SUSE bug 1209096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209507">SUSE bug 1209507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209825">SUSE bug 1209825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211398">SUSE bug 1211398</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-27530/">CVE-2023-27530</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-28120/">CVE-2023-28120</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009762138" comment="rmt-server-2.13-150100.3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762139" comment="rmt-server-config-2.13-150100.3.45.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140156" version="1" class="patch">
	<metadata>
		<title>Security update for c-ares (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211604" ref_url="https://bugzilla.suse.com/1211604" source="BUGZILLA"/>
		<reference ref_id="1211605" ref_url="https://bugzilla.suse.com/1211605" source="BUGZILLA"/>
		<reference ref_id="1211606" ref_url="https://bugzilla.suse.com/1211606" source="BUGZILLA"/>
		<reference ref_id="1211607" ref_url="https://bugzilla.suse.com/1211607" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-31124" ref_url="https://www.suse.com/security/cve/CVE-2023-31124/" source="CVE"/>
		<reference ref_id="CVE-2023-31130" ref_url="https://www.suse.com/security/cve/CVE-2023-31130/" source="CVE"/>
		<reference ref_id="CVE-2023-31147" ref_url="https://www.suse.com/security/cve/CVE-2023-31147/" source="CVE"/>
		<reference ref_id="CVE-2023-32067" ref_url="https://www.suse.com/security/cve/CVE-2023-32067/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/015004.html" source="SUSE-SU"/>
		<description>
This update for c-ares fixes the following issues:

Update to version 1.19.1:

- CVE-2023-32067: 0-byte UDP payload causes Denial of Service (bsc#1211604)
- CVE-2023-31147: Insufficient randomness in generation of DNS query IDs (bsc#1211605)
- CVE-2023-31130: Buffer Underwrite in ares_inet_net_pton() (bsc#1211606)
- CVE-2023-31124: AutoTools does not set CARES_RANDOM_FILE during cross compilation (bsc#1211607)
- Fix uninitialized memory warning in test
- ares_getaddrinfo() should allow a port of 0
- Fix memory leak in ares_send() on error
- Fix comment style in ares_data.h
- Fix typo in ares_init_options.3
- Sync ax_pthread.m4 with upstream
- Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support 
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-30"/>
	<updated date="2023-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211604">SUSE bug 1211604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211605">SUSE bug 1211605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211606">SUSE bug 1211606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211607">SUSE bug 1211607</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-31124/">CVE-2023-31124</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-31130/">CVE-2023-31130</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-31147/">CVE-2023-31147</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32067/">CVE-2023-32067</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009761868" comment="c-ares-devel-1.19.1-150000.3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761869" comment="libcares2-1.19.1-150000.3.23.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140157" version="1" class="patch">
	<metadata>
		<title>Security update for cni-plugins (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2324-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029575.html" source="SUSE-SU"/>
		<description>

This update of cni-plugins fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-30"/>
	<updated date="2023-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756871" comment="cni-plugins-0.8.6-150100.3.13.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140158" version="1" class="patch">
	<metadata>
		<title>Security update for cni (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2325-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029574.html" source="SUSE-SU"/>
		<description>

This update of cni fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-30"/>
	<updated date="2023-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756870" comment="cni-0.7.1-150100.3.10.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140159" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211430" ref_url="https://bugzilla.suse.com/1211430" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2650" ref_url="https://www.suse.com/security/cve/CVE-2023-2650/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2327-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029572.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-30"/>
	<updated date="2023-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211430">SUSE bug 1211430</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-2650/">CVE-2023-2650</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009763917" comment="libopenssl-1_1-devel-1.1.0i-150100.14.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763918" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763919" comment="libopenssl1_1-1.1.0i-150100.14.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763920" comment="libopenssl1_1-32bit-1.1.0i-150100.14.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763921" comment="libopenssl1_1-hmac-1.1.0i-150100.14.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763922" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763923" comment="openssl-1_1-1.1.0i-150100.14.51.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140160" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211643" ref_url="https://bugzilla.suse.com/1211643" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-32324" ref_url="https://www.suse.com/security/cve/CVE-2023-32324/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2347-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029664.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:

- CVE-2023-32324: Fixed a buffer overflow in format_log_line() which could cause a denial-of-service (bsc#1211643).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-01"/>
	<updated date="2023-06-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211643">SUSE bug 1211643</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32324/">CVE-2023-32324</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009764099" comment="cups-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764100" comment="cups-client-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764101" comment="cups-config-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764102" comment="cups-ddk-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764103" comment="cups-devel-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764104" comment="libcups2-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764090" comment="libcups2-32bit-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764105" comment="libcupscgi1-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764106" comment="libcupsimage2-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764107" comment="libcupsmime1-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764108" comment="libcupsppdc1-2.2.7-150000.3.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140161" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211922" ref_url="https://bugzilla.suse.com/1211922" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-34414" ref_url="https://www.suse.com/security/cve/CVE-2023-34414/" source="CVE"/>
		<reference ref_id="CVE-2023-34416" ref_url="https://www.suse.com/security/cve/CVE-2023-34416/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2440-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029768.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Extended Support Release 102.12.0 ESR (bsc#1211922):

- CVE-2023-34414: Click-jacking certificate exceptions through rendering lag
- CVE-2023-34416: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-07"/>
	<updated date="2023-06-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211922">SUSE bug 1211922</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-34414/">CVE-2023-34414</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-34416/">CVE-2023-34416</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009764832" comment="MozillaFirefox-102.12.0-150000.150.88.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764833" comment="MozillaFirefox-devel-102.12.0-150000.150.88.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764834" comment="MozillaFirefox-translations-common-102.12.0-150000.150.88.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764835" comment="MozillaFirefox-translations-other-102.12.0-150000.150.88.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140162" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211608" ref_url="https://bugzilla.suse.com/1211608" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28709" ref_url="https://www.suse.com/security/cve/CVE-2023-28709/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2504-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015175.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2023-28709: Mended an incomplete fix for CVE-2023-24998 (bsc#1211608).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-13"/>
	<updated date="2023-06-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211608">SUSE bug 1211608</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-28709/">CVE-2023-28709</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009763673" comment="tomcat-9.0.36-150100.4.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763674" comment="tomcat-admin-webapps-9.0.36-150100.4.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763675" comment="tomcat-el-3_0-api-9.0.36-150100.4.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763676" comment="tomcat-jsp-2_3-api-9.0.36-150100.4.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763677" comment="tomcat-lib-9.0.36-150100.4.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763678" comment="tomcat-servlet-4_0-api-9.0.36-150100.4.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763679" comment="tomcat-webapps-9.0.36-150100.4.93.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140163" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210398" ref_url="https://bugzilla.suse.com/1210398" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-27349" ref_url="https://www.suse.com/security/cve/CVE-2023-27349/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2533-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029922.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2023-27349: Fixed crash while handling unsupported events (bsc#1210398).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-19"/>
	<updated date="2023-06-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210398">SUSE bug 1210398</bugzilla>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-27349/">CVE-2023-27349</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009766974" comment="bluez-5.48-150000.5.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009766975" comment="bluez-devel-5.48-150000.5.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009766976" comment="libbluetooth3-5.48-150000.5.49.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140164" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1191731" ref_url="https://bugzilla.suse.com/1191731" source="BUGZILLA"/>
		<reference ref_id="1199046" ref_url="https://bugzilla.suse.com/1199046" source="BUGZILLA"/>
		<reference ref_id="1204405" ref_url="https://bugzilla.suse.com/1204405" source="BUGZILLA"/>
		<reference ref_id="1205756" ref_url="https://bugzilla.suse.com/1205756" source="BUGZILLA"/>
		<reference ref_id="1205758" ref_url="https://bugzilla.suse.com/1205758" source="BUGZILLA"/>
		<reference ref_id="1205760" ref_url="https://bugzilla.suse.com/1205760" source="BUGZILLA"/>
		<reference ref_id="1205762" ref_url="https://bugzilla.suse.com/1205762" source="BUGZILLA"/>
		<reference ref_id="1205803" ref_url="https://bugzilla.suse.com/1205803" source="BUGZILLA"/>
		<reference ref_id="1206878" ref_url="https://bugzilla.suse.com/1206878" source="BUGZILLA"/>
		<reference ref_id="1208600" ref_url="https://bugzilla.suse.com/1208600" source="BUGZILLA"/>
		<reference ref_id="1209287" ref_url="https://bugzilla.suse.com/1209287" source="BUGZILLA"/>
		<reference ref_id="1209366" ref_url="https://bugzilla.suse.com/1209366" source="BUGZILLA"/>
		<reference ref_id="1210629" ref_url="https://bugzilla.suse.com/1210629" source="BUGZILLA"/>
		<reference ref_id="1210715" ref_url="https://bugzilla.suse.com/1210715" source="BUGZILLA"/>
		<reference ref_id="1210783" ref_url="https://bugzilla.suse.com/1210783" source="BUGZILLA"/>
		<reference ref_id="1210791" ref_url="https://bugzilla.suse.com/1210791" source="BUGZILLA"/>
		<reference ref_id="1210940" ref_url="https://bugzilla.suse.com/1210940" source="BUGZILLA"/>
		<reference ref_id="1211037" ref_url="https://bugzilla.suse.com/1211037" source="BUGZILLA"/>
		<reference ref_id="1211089" ref_url="https://bugzilla.suse.com/1211089" source="BUGZILLA"/>
		<reference ref_id="1211105" ref_url="https://bugzilla.suse.com/1211105" source="BUGZILLA"/>
		<reference ref_id="1211186" ref_url="https://bugzilla.suse.com/1211186" source="BUGZILLA"/>
		<reference ref_id="1211519" ref_url="https://bugzilla.suse.com/1211519" source="BUGZILLA"/>
		<reference ref_id="1211592" ref_url="https://bugzilla.suse.com/1211592" source="BUGZILLA"/>
		<reference ref_id="1211622" ref_url="https://bugzilla.suse.com/1211622" source="BUGZILLA"/>
		<reference ref_id="1211796" ref_url="https://bugzilla.suse.com/1211796" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3566" ref_url="https://www.suse.com/security/cve/CVE-2022-3566/" source="CVE"/>
		<reference ref_id="CVE-2022-45884" ref_url="https://www.suse.com/security/cve/CVE-2022-45884/" source="CVE"/>
		<reference ref_id="CVE-2022-45885" ref_url="https://www.suse.com/security/cve/CVE-2022-45885/" source="CVE"/>
		<reference ref_id="CVE-2022-45886" ref_url="https://www.suse.com/security/cve/CVE-2022-45886/" source="CVE"/>
		<reference ref_id="CVE-2022-45887" ref_url="https://www.suse.com/security/cve/CVE-2022-45887/" source="CVE"/>
		<reference ref_id="CVE-2022-45919" ref_url="https://www.suse.com/security/cve/CVE-2022-45919/" source="CVE"/>
		<reference ref_id="CVE-2023-1077" ref_url="https://www.suse.com/security/cve/CVE-2023-1077/" source="CVE"/>
		<reference ref_id="CVE-2023-1380" ref_url="https://www.suse.com/security/cve/CVE-2023-1380/" source="CVE"/>
		<reference ref_id="CVE-2023-2176" ref_url="https://www.suse.com/security/cve/CVE-2023-2176/" source="CVE"/>
		<reference ref_id="CVE-2023-2194" ref_url="https://www.suse.com/security/cve/CVE-2023-2194/" source="CVE"/>
		<reference ref_id="CVE-2023-2483" ref_url="https://www.suse.com/security/cve/CVE-2023-2483/" source="CVE"/>
		<reference ref_id="CVE-2023-2513" ref_url="https://www.suse.com/security/cve/CVE-2023-2513/" source="CVE"/>
		<reference ref_id="CVE-2023-28466" ref_url="https://www.suse.com/security/cve/CVE-2023-28466/" source="CVE"/>
		<reference ref_id="CVE-2023-31084" ref_url="https://www.suse.com/security/cve/CVE-2023-31084/" source="CVE"/>
		<reference ref_id="CVE-2023-31436" ref_url="https://www.suse.com/security/cve/CVE-2023-31436/" source="CVE"/>
		<reference ref_id="CVE-2023-32269" ref_url="https://www.suse.com/security/cve/CVE-2023-32269/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2534-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029918.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).
- CVE-2022-3566: Fixed race condition in the TCP Handler (bsc#1204405).
- CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760).
- CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758).
- CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762).
- CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803).
- CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756).
- CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783).
- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940).
- CVE-2023-2194: Fixed an out-of-bounds write vulnerability in the SLIMpro I2C device driver (bsc#1210715).
- CVE-2023-32269: Fixed a use-after-free in af_netrom.c, related to the fact that accept() was also allowed for a successfully connected AF_NETROM socket (bsc#1211186).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366).
- CVE-2023-1380: Fixed a slab-out-of-bound read problem in brcmf_get_assoc_ies() (bsc#1209287).
- CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105).
- CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037).
- CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629).

The following non-security bugs were fixed:

- ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519).
- gve: Fix spelling mistake 'droping' -&gt; 'dropping' (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519).
- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592).
- kernel-binary: install expoline.o (boo#1210791 bsc#1211089)
- scsi: storvsc: Parameterize number hardware queues (bsc#1211622).
- usrmerge: Compatibility with earlier rpm (boo#1211796)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-19"/>
	<updated date="2023-06-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191731">SUSE bug 1191731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199046">SUSE bug 1199046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204405">SUSE bug 1204405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205756">SUSE bug 1205756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205758">SUSE bug 1205758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205760">SUSE bug 1205760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205762">SUSE bug 1205762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205803">SUSE bug 1205803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206878">SUSE bug 1206878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208600">SUSE bug 1208600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209287">SUSE bug 1209287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209366">SUSE bug 1209366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210629">SUSE bug 1210629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210715">SUSE bug 1210715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210783">SUSE bug 1210783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210791">SUSE bug 1210791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210940">SUSE bug 1210940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211037">SUSE bug 1211037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211089">SUSE bug 1211089</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211105">SUSE bug 1211105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211186">SUSE bug 1211186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211519">SUSE bug 1211519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211592">SUSE bug 1211592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211622">SUSE bug 1211622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211796">SUSE bug 1211796</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3566/">CVE-2022-3566</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45884/">CVE-2022-45884</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45885/">CVE-2022-45885</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45886/">CVE-2022-45886</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45887/">CVE-2022-45887</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45919/">CVE-2022-45919</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1077/">CVE-2023-1077</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-1380/">CVE-2023-1380</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2176/">CVE-2023-2176</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2023-2194/">CVE-2023-2194</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2483/">CVE-2023-2483</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2513/">CVE-2023-2513</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28466/">CVE-2023-28466</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-31084/">CVE-2023-31084</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-31436/">CVE-2023-31436</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32269/">CVE-2023-32269</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009765133" comment="kernel-default-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765134" comment="kernel-default-base-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765135" comment="kernel-default-devel-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765136" comment="kernel-devel-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765137" comment="kernel-docs-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765138" comment="kernel-macros-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765139" comment="kernel-obs-build-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765140" comment="kernel-source-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765141" comment="kernel-syms-4.12.14-150100.197.148.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140165" version="1" class="patch">
	<metadata>
		<title>Security update for Salt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207071" ref_url="https://bugzilla.suse.com/1207071" source="BUGZILLA"/>
		<reference ref_id="1209233" ref_url="https://bugzilla.suse.com/1209233" source="BUGZILLA"/>
		<reference ref_id="1211612" ref_url="https://bugzilla.suse.com/1211612" source="BUGZILLA"/>
		<reference ref_id="1211754" ref_url="https://bugzilla.suse.com/1211754" source="BUGZILLA"/>
		<reference ref_id="1212516" ref_url="https://bugzilla.suse.com/1212516" source="BUGZILLA"/>
		<reference ref_id="1212517" ref_url="https://bugzilla.suse.com/1212517" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2571-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029957.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

salt:

- Update to Salt release version 3006.0 (jsc#PED-4361)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for 'importlib-metadata&gt;=5.0.0' (bsc#1207071)
- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix package build with old setuptools versions
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517)
    
python-jmespath:
    
- Deliver python3-jmespath to SUSE Linux Enterprise Micro on s390x architecture as it is now required by Salt
  (no source changes)
    
python-ply:
    
- Deliver python3-ply to SUSE Linux Enterprise Micro on s390x architecture as it is a requirement for python-jmespath
  (no source changes)
 		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-21"/>
	<updated date="2023-06-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1207071">SUSE bug 1207071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209233">SUSE bug 1209233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211612">SUSE bug 1211612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211754">SUSE bug 1211754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212516">SUSE bug 1212516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212517">SUSE bug 1212517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009767953" comment="python2-ply-3.10-150000.3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767684" comment="python3-jmespath-0.9.3-150000.3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767685" comment="python3-ply-3.10-150000.3.3.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140166" version="1" class="patch">
	<metadata>
		<title>Security update for SUSE Manager Client Tools (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192154" ref_url="https://bugzilla.suse.com/1192154" source="BUGZILLA"/>
		<reference ref_id="1192696" ref_url="https://bugzilla.suse.com/1192696" source="BUGZILLA"/>
		<reference ref_id="1200480" ref_url="https://bugzilla.suse.com/1200480" source="BUGZILLA"/>
		<reference ref_id="1201535" ref_url="https://bugzilla.suse.com/1201535" source="BUGZILLA"/>
		<reference ref_id="1201539" ref_url="https://bugzilla.suse.com/1201539" source="BUGZILLA"/>
		<reference ref_id="1203185" ref_url="https://bugzilla.suse.com/1203185" source="BUGZILLA"/>
		<reference ref_id="1203596" ref_url="https://bugzilla.suse.com/1203596" source="BUGZILLA"/>
		<reference ref_id="1203597" ref_url="https://bugzilla.suse.com/1203597" source="BUGZILLA"/>
		<reference ref_id="1203599" ref_url="https://bugzilla.suse.com/1203599" source="BUGZILLA"/>
		<reference ref_id="1204501" ref_url="https://bugzilla.suse.com/1204501" source="BUGZILLA"/>
		<reference ref_id="1207830" ref_url="https://bugzilla.suse.com/1207830" source="BUGZILLA"/>
		<reference ref_id="1208719" ref_url="https://bugzilla.suse.com/1208719" source="BUGZILLA"/>
		<reference ref_id="1209645" ref_url="https://bugzilla.suse.com/1209645" source="BUGZILLA"/>
		<reference ref_id="1210458" ref_url="https://bugzilla.suse.com/1210458" source="BUGZILLA"/>
		<reference ref_id="1210640" ref_url="https://bugzilla.suse.com/1210640" source="BUGZILLA"/>
		<reference ref_id="1210907" ref_url="https://bugzilla.suse.com/1210907" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7753" ref_url="https://www.suse.com/security/cve/CVE-2020-7753/" source="CVE"/>
		<reference ref_id="CVE-2021-3807" ref_url="https://www.suse.com/security/cve/CVE-2021-3807/" source="CVE"/>
		<reference ref_id="CVE-2021-3918" ref_url="https://www.suse.com/security/cve/CVE-2021-3918/" source="CVE"/>
		<reference ref_id="CVE-2021-43138" ref_url="https://www.suse.com/security/cve/CVE-2021-43138/" source="CVE"/>
		<reference ref_id="CVE-2022-0155" ref_url="https://www.suse.com/security/cve/CVE-2022-0155/" source="CVE"/>
		<reference ref_id="CVE-2022-27664" ref_url="https://www.suse.com/security/cve/CVE-2022-27664/" source="CVE"/>
		<reference ref_id="CVE-2022-31097" ref_url="https://www.suse.com/security/cve/CVE-2022-31097/" source="CVE"/>
		<reference ref_id="CVE-2022-31107" ref_url="https://www.suse.com/security/cve/CVE-2022-31107/" source="CVE"/>
		<reference ref_id="CVE-2022-32149" ref_url="https://www.suse.com/security/cve/CVE-2022-32149/" source="CVE"/>
		<reference ref_id="CVE-2022-35957" ref_url="https://www.suse.com/security/cve/CVE-2022-35957/" source="CVE"/>
		<reference ref_id="CVE-2022-36062" ref_url="https://www.suse.com/security/cve/CVE-2022-36062/" source="CVE"/>
		<reference ref_id="CVE-2022-41715" ref_url="https://www.suse.com/security/cve/CVE-2022-41715/" source="CVE"/>
		<reference ref_id="CVE-2022-46146" ref_url="https://www.suse.com/security/cve/CVE-2022-46146/" source="CVE"/>
		<reference ref_id="CVE-2023-1387" ref_url="https://www.suse.com/security/cve/CVE-2023-1387/" source="CVE"/>
		<reference ref_id="CVE-2023-1410" ref_url="https://www.suse.com/security/cve/CVE-2023-1410/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2578-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029951.html" source="SUSE-SU"/>
		<description>
This update fixes the following issues:

bind:

- Provide bind dependencies and solve installation issues on SUSE Linux Enterprise Micro
- There are no source changes    
    
dracut-saltboot:

- Update to version 0.1.1681904360.84ef141 
  * Load network configuration even when missing protocol version (bsc#1210640)

grafana:
    
- Version update from 8.5.22 to 9.5.1 (jsc#PED-3694):
  * Security fixes:
    - CVE-2023-1410: grafana: Stored XSS in Graphite FunctionDescription tooltip (bsc#1209645)
    - CVE-2023-1387: grafana: JWT URL-login flow leaks token to data sources through request parameter in proxy requests
      (bnc#1210907)
    - CVE-2022-36062: grafana: Fix RBAC folders/dashboards privilege escalation (bsc#1203596)
    - CVE-2022-35957: grafana: Escalation from admin to server admin when auth proxy is used (bsc#1203597)
    - CVE-2022-32149: Upgrade x/text to version unaffected by CVE-2022-32149 (bsc#1204501)
    - CVE-2022-31107: grafana: OAuth account takeover (bsc#1201539)
    - CVE-2022-31097: grafana: stored XSS vulnerability (bsc#1201535)
    - CVE-2022-27664: go1.18,go1.19: net/http: handle server errors after sending GOAWAY (bsc#1203185)
    - CVE-2022-0155: follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor
    - CVE-2021-43138: spacewalk-web: a malicious user can obtain privileges via the mapValues() method(bsc#1200480)
    - CVE-2021-3918: json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes
      ('Prototype Pollution') (bsc#1192696)
    - CVE-2021-3807: node-ansi-regex: Inefficient Regular Expression Complexity in chalk/ansi-regex (bsc#1192154)
    - CVE-2020-7753: nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function 
  * Important changes:
    - Default named retention policies won't be used to query.
      Users who have a default named retention policy in their influxdb database, have to rename it to something else.
      To change the hardcoded retention policy in the dashboard.json, users must then select the right retention policy
      from dropdown and save the panel/dashboard.
    - Grafana Alerting rules with NoDataState configuration set to Alerting will now respect 'For' duration.
    - Users who use LDAP role sync to only sync Viewer, Editor and Admin roles, but grant Grafana Server Admin role
      manually will not be able to do that anymore. After this change, LDAP role sync will override any manual changes
      to Grafana Server Admin role assignments. If grafana_admin is left unset in LDAP role mapping configuration, it
      will default to false.
    - The InfluxDB backend migration feature toggle (influxdbBackendMigration) has been reintroduced in this version
      as issues were discovered with backend processing of InfluxDB data. Unless this feature toggle is enabled, all
      InfluxDB data will be parsed in the frontend. This frontend processing is the default behavior. 
      In Grafana 9.4.4, InfluxDB data parsing started to be handled in the backend. If you have upgraded to 9.4.4
      and then added new transformations on InfluxDB data, those panels will fail to render. To resolve this either:
      Remove the affected panel and re-create it or edit the `time` field as `Time` in `panel.json` 
      or `dashboard.json`
    - The `@grafana/ui` package helper function `selectOptionInTest` used in frontend tests has been removed as it
      caused testing libraries to be bundled in the production code of Grafana. If you were using this helper function
      in your tests please update your code accordingly.
    - Removed deprecated `checkHealth` prop from the `@grafana/e2e` `addDataSource` configuration. Previously this
      value defaulted to `false`, and has not been used in end-to-end tests since Grafana 8.0.3.
    - Removed the deprecated `LegacyBaseMap`, `LegacyValueMapping`, `LegacyValueMap`, and `LegacyRangeMap` types, and
      `getMappedValue` function from grafana-data. See the documentation for the migration.
      This change fixes a bug in Grafana where intermittent failure of database, network between Grafana and the
      database, or error in querying the database would cause all alert rules to be unscheduled in Grafana. 
      Following this change scheduled alert rules are not updated unless the query is successful.
    - The `get_alert_rules_duration_seconds` metric has been renamed to `schedule_query_alert_rules_duration_seconds`
    - Any secret (data sources credential, alert manager credential, etc, etc) created or modified with Grafana v9.0
      won't be decryptable from any previous version (by default) because the way encrypted secrets are stored into the
      database has changed. Although secrets created or modified with previous versions will still be decryptable by
      Grafana v9.0.
    - If required, although generally discouraged, the `disableEnvelopeEncryption` feature toggle can be enabled to
      keep envelope encryption disabled once updating to Grafana
    - In case of need to rollback to an earlier version of Grafana (i.e. Grafana v8.x) for any reason, after being
      created or modified any secret with Grafana v9.0, the `envelopeEncryption` feature toggle will need to be enabled
      to keep backwards compatibility (only from `v8.3.x` a bit unstable, from `8.5.x` stable).
    - As a final attempt to deal with issues related with the aforementioned situations, the 
      `grafana-cli admin secrets-migration rollback` command has been designed to move back all the Grafana secrets
      encrypted with envelope encryption to legacy encryption. So, after running that command it should be safe to
      disable envelope encryption and/or roll back to a previous version of Grafana.
      Alternatively or complementarily to all the points above, backing up the Grafana database before updating could
      be a good idea to prevent disasters (although the risk of getting some secrets corrupted only applies to those 
      updates/created with after updating to Grafana v9.0).
    - In Elasticsearch, browser access mode was deprecated in grafana 7.4.0 and removed in 9.0.0. If you used this mode
      please switch to server access mode on the datasource configuration page.
    - Environment variables passed from Grafana to external Azure plugins have been renamed:
      `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`,
      `AZURE_MANAGED_IDENTITY_ENABLED` renamed to `GFAZPL_MANAGED_IDENTITY_ENABLED`,
      `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`.
      There are no known plugins which were relying on these variables. Moving forward plugins should read Azure
      settings only via Grafana Azure SDK which properly handles old and new environment variables.
    - Removes support for for ElasticSearch versions after their end-of-life, currently versions &lt; 7.10.0.
      To continue to use ElasticSearch data source, upgrade ElasticSearch to version 7.10.0+.
    - Application Insights and Insight Analytics queries in Azure Monitor were deprecated in Grafana 8.0 and finally
      removed in 9.0. Deprecated queries will no longer be executed.
    - grafana/ui: Button now specifies a default type='button'.
      The `Button` component provided by @grafana/ui now specifies a default `type='button'` when no type is provided.
      In previous versions, if the attribute was not specified for buttons associated with a `&lt;form&gt;` the
      default value was `submit` per the specification. You can preserve the old behavior by explicitly setting the
      type attribute: `&lt;Button type='submit' /&gt;`
    - The `Rename by regex` transformation has been improved to allow global patterns of the form 
      `/&lt;stringToReplace&gt;/g`.
      Depending on the regex match used, this may cause some transformations to behave slightly differently. You can
      guarantee the same behaviour as before by wrapping the `match` string in forward slashes (`/`), e.g. `(.*)` would
      become `/(.*)/`
    - `&lt;Select /&gt;` menus will now portal to the document body by default. This is to give more consistent
      behaviour when positioning and overlaying. If you were setting`menuShouldPortal={true}` before you can safely 
      remove that prop and behaviour will be the same. If you weren't explicitly setting that prop, there should be no
      visible changes in behaviour but your tests may need updating. If you were setting `menuShouldPortal={false}`
      this will continue to prevent the menu from portalling.
    - Grafana alerting endpoint prefixed with `api/v1/rule/test` that tests a rule against a Corte/Loki data source now
      expects the data source UID as a path parameter instead of the data source numeric identifier.
    - Grafana alerting endpoints prefixed with `api/prometheus/` that proxy requests to a Cortex/Loki data source now
      expect the data source UID as a path parameter instead of the data source numeric identifier.
    - Grafana alerting endpoints prefixed with `api/ruler/` that proxy requests to a Cortex/Loki data source now expect
      the data source UID as a path parameter instead of the data
    - Grafana alerting endpoints prefixed with `api/alertmanager/` that proxy requests to an Alertmanager now expect
      the data source UID as a path parameter instead of the data source numeric identifier.
    - The format of log messages have been updated, `lvl` is now `level` and `eror`and `dbug` has been replaced with
      `error` and `debug`. The precision of timestamps has been increased.
      To smooth the transition, it is possible to opt-out of the new log format by enabling the feature toggle
      `oldlog`.
      This option will be removed in a future minor release.
    - In the Loki data source, the dataframe format used to represent Loki logs-data has been changed to a more
      efficient format. The query-result is represented by a single dataframe with a 'labels' column, instead of the
      separate dataframes for every labels-value. When displaying such data in explore, or in a logs-panel in the
      dashboard will continue to work without changes, but if the data was loaded into a different dashboard-panel, or
      Transforms were used, adjustments may be necessary. For example, if you used the 'labels to fields' 
      transformation with the logs data, please switch to the 'extract fields' transformation.
  * Deprecations:
    - The `grafana_database_conn_*` metrics are deprecated, and will be removed in a future version of Grafana. Use 
      the `go_sql_stats_*` metrics instead.
    - Support for compact Explore URLs is deprecated and will be removed in a future release. Until then, when
      navigating to Explore using the deprecated format the URLs are automatically converted. If you have
      existing links pointing to Explore update them using the format generated by Explore upon navigation.
      You can identify a compact URL by its format. Compact URLs have the left (and optionally right) url parameter as
      an array of strings, for example `&amp;left=['now-1h','now'...]`. The standard explore URLs follow a key/value
      pattern, for example `&amp;left={'datasource':'test'...}`. Please be sure to check your dashboards for any
      hardcoded links to Explore and update them to the standard URL pattern.
    - Chore: Remove deprecated DataSourceAPI methods.
    - Data: Remove deprecated types and functions from valueMappings.
    - Elasticsearch: Remove browser access mode.
    - Elasticsearch: Remove support for versions after their end of the life (&lt;7.10.0).
    - Explore: Remove support for legacy, compact format URLs.
    - Graph: Deprecate Graph (old) and make it no longer a visualization option for new panels.
    - `setExploreQueryField`, `setExploreMetricsQueryField` and `setExploreLogsQueryField` are now deprecated and will
      be removed in a future release. If you need to set a different query editor for Explore, conditionally render
      based on `props.app` in your regular query editor.
  * Changes:
    - User: Fix externalUserId not being populated.
      If you used any of these components please use them from grafana/experimental from now on:
       - AccessoryButton
       - EditorFieldGroup
       - EditorHeader
       - EditorField
       - EditorRow
       - EditorList
       - EditorRows
       - EditorSwitch
       - FlexItem
       - Stack
       - InlineSelect
       - InputGroup
       - Space
    - Starting with 9.1.0, existing heatmap panels will start using a new implementation. This can be disabled by
      setting the `useLegacyHeatmapPanel` feature flag to true. It can be tested on a single dashbobard by adding
      `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    - Logger: Enable new logging format by default.
    - Loki: Enable new visual query builder by default.
    - Plugins: Remove plugin list panel.
    - Install wrapper scripts under /usr/sbin
    - Install actual binaries under /usr/libexec/grafana (or /usr/lib under older distributions) and create a simlink 
      for wrapper scripts and the service (which expect the binary to be under /usr/share/grafana/bin)
    - Chore: Upgrade typescript to 4.6.4.

mgr-daemon:

- Version 4.3.7-1
  * Update translation strings

spacecmd:

- Version 4.3.21-1
  * fix argument parsing of distribution_update (bsc#1210458)
- Version 4.3.20-1
  * Display activation key details after executing the corresponding command (bsc#1208719)
  * Show targetted packages before actually removing them (bsc#1207830)

uyuni-common-libs:

- Version 4.3.8-1
  * Allow default component for context manager

zypp-plugin-spacewalk:

- 1.0.14
  * SPEC cleanup
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-21"/>
	<updated date="2023-06-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192154">SUSE bug 1192154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192696">SUSE bug 1192696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200480">SUSE bug 1200480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201535">SUSE bug 1201535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201539">SUSE bug 1201539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203185">SUSE bug 1203185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203596">SUSE bug 1203596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203597">SUSE bug 1203597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203599">SUSE bug 1203599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204501">SUSE bug 1204501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207830">SUSE bug 1207830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208719">SUSE bug 1208719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209645">SUSE bug 1209645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210458">SUSE bug 1210458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210640">SUSE bug 1210640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210907">SUSE bug 1210907</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-7753/">CVE-2020-7753</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3807/">CVE-2021-3807</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3918/">CVE-2021-3918</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43138/">CVE-2021-43138</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0155/">CVE-2022-0155</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27664/">CVE-2022-27664</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-31097/">CVE-2022-31097</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-31107/">CVE-2022-31107</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-32149/">CVE-2022-32149</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-35957/">CVE-2022-35957</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-36062/">CVE-2022-36062</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41715/">CVE-2022-41715</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46146/">CVE-2022-46146</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-1387/">CVE-2023-1387</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-1410/">CVE-2023-1410</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009767341" comment="bind-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767342" comment="bind-chrootenv-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767343" comment="bind-devel-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767344" comment="bind-doc-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767345" comment="bind-utils-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767346" comment="libbind9-1600-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767347" comment="libdns1605-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767348" comment="libirs-devel-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767349" comment="libirs1601-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767350" comment="libisc1606-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767351" comment="libisccc1600-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767352" comment="libisccfg1600-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767353" comment="libns1604-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767354" comment="python3-bind-9.16.6-150000.12.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140167" version="1" class="patch">
	<metadata>
		<title>Security update for salt and python-pyzmq (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186945" ref_url="https://bugzilla.suse.com/1186945" source="BUGZILLA"/>
		<reference ref_id="1207071" ref_url="https://bugzilla.suse.com/1207071" source="BUGZILLA"/>
		<reference ref_id="1209233" ref_url="https://bugzilla.suse.com/1209233" source="BUGZILLA"/>
		<reference ref_id="1211612" ref_url="https://bugzilla.suse.com/1211612" source="BUGZILLA"/>
		<reference ref_id="1211754" ref_url="https://bugzilla.suse.com/1211754" source="BUGZILLA"/>
		<reference ref_id="1212516" ref_url="https://bugzilla.suse.com/1212516" source="BUGZILLA"/>
		<reference ref_id="1212517" ref_url="https://bugzilla.suse.com/1212517" source="BUGZILLA"/>
		<description>
This update for salt and python-pyzmq fixes the following issues:

salt:

- Update to Salt release version 3006.0 (jsc#PED-4361)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for 'importlib-metadata&gt;=5.0.0' (bsc#1207071)
- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix package build with old setuptools versions
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517)

python-pyzmq:

- Update python-pyzmq to version 17.1.2 in LTSS products (bsc#1186945)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-21"/>
	<updated date="2023-06-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1186945">SUSE bug 1186945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207071">SUSE bug 1207071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209233">SUSE bug 1209233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211612">SUSE bug 1211612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211754">SUSE bug 1211754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212516">SUSE bug 1212516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212517">SUSE bug 1212517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009767937" comment="python2-pyzmq-17.1.2-150000.3.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767768" comment="python3-pyzmq-17.1.2-150000.3.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767938" comment="python3-salt-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767939" comment="salt-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767940" comment="salt-api-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767941" comment="salt-bash-completion-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767942" comment="salt-cloud-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767943" comment="salt-doc-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767944" comment="salt-fish-completion-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767945" comment="salt-master-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767946" comment="salt-minion-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767947" comment="salt-proxy-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767948" comment="salt-ssh-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767949" comment="salt-standalone-formulas-configuration-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767950" comment="salt-syndic-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767951" comment="salt-transactional-update-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767952" comment="salt-zsh-completion-3006.0-150000.97.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140168" version="1" class="patch">
	<metadata>
		<title>Security update for container-suseconnect (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<description>

This update of container-suseconnect fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-21"/>
	<updated date="2023-06-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767787" comment="container-suseconnect-2.4.0-150000.4.30.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140169" version="1" class="patch">
	<metadata>
		<title>Security update for libX11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212102" ref_url="https://bugzilla.suse.com/1212102" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-3138" ref_url="https://www.suse.com/security/cve/CVE-2023-3138/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2614-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030001.html" source="SUSE-SU"/>
		<description>
This update for libX11 fixes the following issues:

- CVE-2023-3138: Fixed buffer overflows in InitExt.c (bsc#1212102).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-22"/>
	<updated date="2023-06-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212102">SUSE bug 1212102</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3138/">CVE-2023-3138</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009767784" comment="libX11-6-1.6.5-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767703" comment="libX11-6-32bit-1.6.5-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767704" comment="libX11-data-1.6.5-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767785" comment="libX11-devel-1.6.5-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767786" comment="libX11-xcb1-1.6.5-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767708" comment="libX11-xcb1-32bit-1.6.5-150000.3.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140170" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212230" ref_url="https://bugzilla.suse.com/1212230" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-34241" ref_url="https://www.suse.com/security/cve/CVE-2023-34241/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2616-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030000.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:

- CVE-2023-34241: Fixed a use-after-free problem in cupsdAcceptClient() (bsc#1212230).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-22"/>
	<updated date="2023-06-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212230">SUSE bug 1212230</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-34241/">CVE-2023-34241</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009769171" comment="cups-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769172" comment="cups-client-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769173" comment="cups-config-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769174" comment="cups-ddk-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769175" comment="cups-devel-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769176" comment="libcups2-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769110" comment="libcups2-32bit-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769177" comment="libcupscgi1-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769178" comment="libcupsimage2-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769179" comment="libcupsmime1-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769180" comment="libcupsppdc1-2.2.7-150000.3.46.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140171" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201627" ref_url="https://bugzilla.suse.com/1201627" source="BUGZILLA"/>
		<reference ref_id="1207534" ref_url="https://bugzilla.suse.com/1207534" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4304" ref_url="https://www.suse.com/security/cve/CVE-2022-4304/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2622-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030012.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption.
  The previous fix for this timing side channel turned out to cause a
  severe 2-3x performance regression in the typical use case (bsc#1207534).

- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-23"/>
	<updated date="2023-06-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1201627">SUSE bug 1201627</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207534">SUSE bug 1207534</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-4304/">CVE-2022-4304</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009768339" comment="libopenssl-1_1-devel-1.1.0i-150100.14.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768340" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768341" comment="libopenssl1_1-1.1.0i-150100.14.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768342" comment="libopenssl1_1-32bit-1.1.0i-150100.14.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768343" comment="libopenssl1_1-hmac-1.1.0i-150100.14.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768344" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768345" comment="openssl-1_1-1.1.0i-150100.14.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140172" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210996" ref_url="https://bugzilla.suse.com/1210996" source="BUGZILLA"/>
		<reference ref_id="1211256" ref_url="https://bugzilla.suse.com/1211256" source="BUGZILLA"/>
		<reference ref_id="1211257" ref_url="https://bugzilla.suse.com/1211257" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2426" ref_url="https://www.suse.com/security/cve/CVE-2023-2426/" source="CVE"/>
		<reference ref_id="CVE-2023-2609" ref_url="https://www.suse.com/security/cve/CVE-2023-2609/" source="CVE"/>
		<reference ref_id="CVE-2023-2610" ref_url="https://www.suse.com/security/cve/CVE-2023-2610/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015866.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

- CVE-2023-2426: Fixed out-of-range pointer offset (bsc#1210996).
- CVE-2023-2609: Fixed NULL pointer dereference (bsc#1211256).
- CVE-2023-2610: Fixed integer overflow or wraparound (bsc#1211257).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-10"/>
	<updated date="2023-08-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210996">SUSE bug 1210996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211256">SUSE bug 1211256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211257">SUSE bug 1211257</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-2426/">CVE-2023-2426</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-2609/">CVE-2023-2609</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2610/">CVE-2023-2610</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009777077" comment="gvim-9.0.1572-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009777078" comment="vim-9.0.1572-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764655" comment="vim-data-9.0.1572-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764656" comment="vim-data-common-9.0.1572-150000.5.46.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140173" version="1" class="patch">
	<metadata>
		<title>Security update for buildah (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2716-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030136.html" source="SUSE-SU"/>
		<description>

This update of buildah fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-29"/>
	<updated date="2023-06-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768346" comment="buildah-1.25.1-150100.3.17.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140174" version="1" class="patch">
	<metadata>
		<title>Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1099269" ref_url="https://bugzilla.suse.com/1099269" source="BUGZILLA"/>
		<reference ref_id="1133277" ref_url="https://bugzilla.suse.com/1133277" source="BUGZILLA"/>
		<reference ref_id="1144068" ref_url="https://bugzilla.suse.com/1144068" source="BUGZILLA"/>
		<reference ref_id="1162343" ref_url="https://bugzilla.suse.com/1162343" source="BUGZILLA"/>
		<reference ref_id="1177127" ref_url="https://bugzilla.suse.com/1177127" source="BUGZILLA"/>
		<reference ref_id="1178168" ref_url="https://bugzilla.suse.com/1178168" source="BUGZILLA"/>
		<reference ref_id="1182066" ref_url="https://bugzilla.suse.com/1182066" source="BUGZILLA"/>
		<reference ref_id="1184753" ref_url="https://bugzilla.suse.com/1184753" source="BUGZILLA"/>
		<reference ref_id="1194530" ref_url="https://bugzilla.suse.com/1194530" source="BUGZILLA"/>
		<reference ref_id="1197726" ref_url="https://bugzilla.suse.com/1197726" source="BUGZILLA"/>
		<reference ref_id="1198331" ref_url="https://bugzilla.suse.com/1198331" source="BUGZILLA"/>
		<reference ref_id="1199282" ref_url="https://bugzilla.suse.com/1199282" source="BUGZILLA"/>
		<reference ref_id="1203681" ref_url="https://bugzilla.suse.com/1203681" source="BUGZILLA"/>
		<reference ref_id="1204256" ref_url="https://bugzilla.suse.com/1204256" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000518" ref_url="https://www.suse.com/security/cve/CVE-2018-1000518/" source="CVE"/>
		<reference ref_id="CVE-2020-25659" ref_url="https://www.suse.com/security/cve/CVE-2020-25659/" source="CVE"/>
		<reference ref_id="CVE-2020-36242" ref_url="https://www.suse.com/security/cve/CVE-2020-36242/" source="CVE"/>
		<reference ref_id="CVE-2021-22569" ref_url="https://www.suse.com/security/cve/CVE-2021-22569/" source="CVE"/>
		<reference ref_id="CVE-2021-22570" ref_url="https://www.suse.com/security/cve/CVE-2021-22570/" source="CVE"/>
		<reference ref_id="CVE-2022-1941" ref_url="https://www.suse.com/security/cve/CVE-2022-1941/" source="CVE"/>
		<reference ref_id="CVE-2022-3171" ref_url="https://www.suse.com/security/cve/CVE-2022-3171/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2783-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016228.html" source="SUSE-SU"/>
		<description>
This update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets fixes the following issues:

grpc:
- Update in SLE-15 (bsc#1197726, bsc#1144068)
  
protobuf:
- Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941, bsc#1203681
- Fix a potential DoS issue when parsing with binary data in  protobuf-java, CVE-2022-3171, bsc#1204256
- Fix potential Denial of Service in protobuf-java in the parsing procedure for binary data, CVE-2021-22569, bsc#1194530
- Add missing dependency of python subpackages on python-six (bsc#1177127)
- Updated to version 3.9.2 (bsc#1162343)
  * Remove OSReadLittle* due to alignment requirements.
  * Don't use unions and instead use memcpy for the type swaps.
- Disable LTO (bsc#1133277)

python-aiocontextvars:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-avro:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-cryptography:  
- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331)
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
  CVE-2020-36242

python-cryptography-vectors:
- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- update to 3.3.2 (bsc#1198331)

python-Deprecated:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- update to 1.2.13:

python-google-api-core:
- Update to 1.14.2

python-googleapis-common-protos:
- Update to 1.6.0
  
python-grpcio-gcp:
- Initial spec for v0.2.2

python-humanfriendly:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to 10.0

python-jsondiff:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to version 1.3.0

python-knack:  
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to version 0.9.0

python-opencensus:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Disable Python2 build
- Update to 0.8.0

python-opencensus-context:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-opencensus-ext-threading:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Initial build version 0.1.2

python-opentelemetry-api:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Version update to 1.5.0

python-psutil:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- update to 5.9.1
- remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on MicroOS. (bsc#1184753)
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-PyGithub:
- Update to 1.43.5:

python-pytest-asyncio:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Initial release of python-pytest-asyncio 0.8.0 
  
python-requests:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
  
python-websocket-client:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to version 1.3.2

python-websockets:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- update to 9.1:
 		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-19"/>
	<updated date="2023-09-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1099269">SUSE bug 1099269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133277">SUSE bug 1133277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144068">SUSE bug 1144068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162343">SUSE bug 1162343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177127">SUSE bug 1177127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178168">SUSE bug 1178168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182066">SUSE bug 1182066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184753">SUSE bug 1184753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194530">SUSE bug 1194530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197726">SUSE bug 1197726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198331">SUSE bug 1198331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199282">SUSE bug 1199282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203681">SUSE bug 1203681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204256">SUSE bug 1204256</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000518/">CVE-2018-1000518</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25659/">CVE-2020-25659</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36242/">CVE-2020-36242</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-22569/">CVE-2021-22569</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-22570/">CVE-2021-22570</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1941/">CVE-2022-1941</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3171/">CVE-2022-3171</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009796715" comment="libprotobuf-lite20-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755745" comment="python2-cryptography-3.3.2-150100.7.15.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755746" comment="python2-psutil-5.9.1-150100.6.6.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755747" comment="python2-requests-2.25.1-150100.6.13.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755748" comment="python3-cryptography-3.3.2-150100.7.15.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755749" comment="python3-psutil-5.9.1-150100.6.6.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755750" comment="python3-requests-2.25.1-150100.6.13.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755589" comment="python3-websocket-client-1.3.2-150100.6.7.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140175" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212544" ref_url="https://bugzilla.suse.com/1212544" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2828" ref_url="https://www.suse.com/security/cve/CVE-2023-2828/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015458.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- CVE-2023-2828: Fixed denial-of-service against recursive resolvers related to cache-cleaning algorithm (bsc#1212544).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-07"/>
	<updated date="2023-07-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212544">SUSE bug 1212544</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-2828/">CVE-2023-2828</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009770077" comment="bind-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770078" comment="bind-chrootenv-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770079" comment="bind-devel-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770080" comment="bind-doc-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770081" comment="bind-utils-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770082" comment="libbind9-1600-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770083" comment="libdns1605-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770084" comment="libirs-devel-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770085" comment="libirs1601-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770086" comment="libisc1606-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770087" comment="libisccc1600-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770088" comment="libisccfg1600-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770089" comment="libns1604-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770090" comment="python3-bind-9.16.6-150000.12.68.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140176" version="1" class="patch">
	<metadata>
		<title>Security update for geoipupdate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015474.html" source="SUSE-SU"/>
		<description>

This update of geoipupdate fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-12"/>
	<updated date="2023-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009769181" comment="geoipupdate-4.2.2-150000.1.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769182" comment="geoipupdate-legacy-4.2.2-150000.1.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140177" version="1" class="patch">
	<metadata>
		<title>Security update for skopeo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015473.html" source="SUSE-SU"/>
		<description>

This update of skopeo fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-12"/>
	<updated date="2023-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769183" comment="skopeo-0.1.41-150000.4.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140178" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212711" ref_url="https://bugzilla.suse.com/1212711" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-36664" ref_url="https://www.suse.com/security/cve/CVE-2023-36664/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015493.html" source="SUSE-SU"/>
		<description>
This update for ghostscript fixes the following issues:

  - CVE-2023-36664: Fixed permission validation mishandling for pipe devices with the %pipe% prefix or the | pipe character prefix (bsc#1212711).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-14"/>
	<updated date="2023-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212711">SUSE bug 1212711</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-36664/">CVE-2023-36664</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009770575" comment="ghostscript-9.52-150000.167.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770576" comment="ghostscript-devel-9.52-150000.167.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770577" comment="ghostscript-x11-9.52-150000.167.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140179" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1160435" ref_url="https://bugzilla.suse.com/1160435" source="BUGZILLA"/>
		<reference ref_id="1198400" ref_url="https://bugzilla.suse.com/1198400" source="BUGZILLA"/>
		<reference ref_id="1208604" ref_url="https://bugzilla.suse.com/1208604" source="BUGZILLA"/>
		<reference ref_id="1209039" ref_url="https://bugzilla.suse.com/1209039" source="BUGZILLA"/>
		<reference ref_id="1209779" ref_url="https://bugzilla.suse.com/1209779" source="BUGZILLA"/>
		<reference ref_id="1210533" ref_url="https://bugzilla.suse.com/1210533" source="BUGZILLA"/>
		<reference ref_id="1211449" ref_url="https://bugzilla.suse.com/1211449" source="BUGZILLA"/>
		<reference ref_id="1212051" ref_url="https://bugzilla.suse.com/1212051" source="BUGZILLA"/>
		<reference ref_id="1212128" ref_url="https://bugzilla.suse.com/1212128" source="BUGZILLA"/>
		<reference ref_id="1212129" ref_url="https://bugzilla.suse.com/1212129" source="BUGZILLA"/>
		<reference ref_id="1212154" ref_url="https://bugzilla.suse.com/1212154" source="BUGZILLA"/>
		<reference ref_id="1212158" ref_url="https://bugzilla.suse.com/1212158" source="BUGZILLA"/>
		<reference ref_id="1212501" ref_url="https://bugzilla.suse.com/1212501" source="BUGZILLA"/>
		<reference ref_id="1212502" ref_url="https://bugzilla.suse.com/1212502" source="BUGZILLA"/>
		<reference ref_id="1212606" ref_url="https://bugzilla.suse.com/1212606" source="BUGZILLA"/>
		<reference ref_id="1212842" ref_url="https://bugzilla.suse.com/1212842" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1079" ref_url="https://www.suse.com/security/cve/CVE-2023-1079/" source="CVE"/>
		<reference ref_id="CVE-2023-1249" ref_url="https://www.suse.com/security/cve/CVE-2023-1249/" source="CVE"/>
		<reference ref_id="CVE-2023-1637" ref_url="https://www.suse.com/security/cve/CVE-2023-1637/" source="CVE"/>
		<reference ref_id="CVE-2023-2002" ref_url="https://www.suse.com/security/cve/CVE-2023-2002/" source="CVE"/>
		<reference ref_id="CVE-2023-3090" ref_url="https://www.suse.com/security/cve/CVE-2023-3090/" source="CVE"/>
		<reference ref_id="CVE-2023-3111" ref_url="https://www.suse.com/security/cve/CVE-2023-3111/" source="CVE"/>
		<reference ref_id="CVE-2023-3141" ref_url="https://www.suse.com/security/cve/CVE-2023-3141/" source="CVE"/>
		<reference ref_id="CVE-2023-3159" ref_url="https://www.suse.com/security/cve/CVE-2023-3159/" source="CVE"/>
		<reference ref_id="CVE-2023-3161" ref_url="https://www.suse.com/security/cve/CVE-2023-3161/" source="CVE"/>
		<reference ref_id="CVE-2023-3268" ref_url="https://www.suse.com/security/cve/CVE-2023-3268/" source="CVE"/>
		<reference ref_id="CVE-2023-3358" ref_url="https://www.suse.com/security/cve/CVE-2023-3358/" source="CVE"/>
		<reference ref_id="CVE-2023-35824" ref_url="https://www.suse.com/security/cve/CVE-2023-35824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015491.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604).
- CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).
- CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
- CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).
- CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
- CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).
- CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
- CVE-2023-3268: Fixed an out of bounds flaw in relay_file_read_start_pos in kernel/relay.c that allowed a local attacker to crash the system or leak kernel internal information (bsc#1212502).
- CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
- CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).

The following non-security bugs were fixed:

- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- Move setting %%build_html to config.sh
- Move setting %%split_optional to config.sh
- Move setting %%supported_modules_check to config.sh
- rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm
- rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-14"/>
	<updated date="2023-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160435">SUSE bug 1160435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198400">SUSE bug 1198400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208604">SUSE bug 1208604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209039">SUSE bug 1209039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209779">SUSE bug 1209779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210533">SUSE bug 1210533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211449">SUSE bug 1211449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212051">SUSE bug 1212051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212128">SUSE bug 1212128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212129">SUSE bug 1212129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212154">SUSE bug 1212154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212158">SUSE bug 1212158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212501">SUSE bug 1212501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212502">SUSE bug 1212502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212606">SUSE bug 1212606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212842">SUSE bug 1212842</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1079/">CVE-2023-1079</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-1249/">CVE-2023-1249</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2023-1637/">CVE-2023-1637</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2002/">CVE-2023-2002</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3090/">CVE-2023-3090</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3111/">CVE-2023-3111</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-3141/">CVE-2023-3141</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3159/">CVE-2023-3159</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-3161/">CVE-2023-3161</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-3268/">CVE-2023-3268</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-3358/">CVE-2023-3358</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-35824/">CVE-2023-35824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009771171" comment="kernel-default-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771172" comment="kernel-default-base-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771173" comment="kernel-default-devel-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771174" comment="kernel-devel-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771175" comment="kernel-docs-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771176" comment="kernel-macros-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771177" comment="kernel-obs-build-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771178" comment="kernel-source-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771179" comment="kernel-syms-4.12.14-150100.197.151.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140180" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201164" ref_url="https://bugzilla.suse.com/1201164" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32084" ref_url="https://www.suse.com/security/cve/CVE-2022-32084/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015500.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

- CVE-2022-32084: Fixed segmentation fault via the component sub_select (bsc#1201164).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-14"/>
	<updated date="2023-07-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1201164">SUSE bug 1201164</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-32084/">CVE-2022-32084</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009771804" comment="libmysqld-devel-10.2.44-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771805" comment="libmysqld19-10.2.44-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771806" comment="mariadb-10.2.44-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771807" comment="mariadb-client-10.2.44-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771808" comment="mariadb-errormessages-10.2.44-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771809" comment="mariadb-tools-10.2.44-150000.3.57.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140181" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox, MozillaFirefox-branding-SLE (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212101" ref_url="https://bugzilla.suse.com/1212101" source="BUGZILLA"/>
		<reference ref_id="1212438" ref_url="https://bugzilla.suse.com/1212438" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-3482" ref_url="https://www.suse.com/security/cve/CVE-2023-3482/" source="CVE"/>
		<reference ref_id="CVE-2023-37201" ref_url="https://www.suse.com/security/cve/CVE-2023-37201/" source="CVE"/>
		<reference ref_id="CVE-2023-37202" ref_url="https://www.suse.com/security/cve/CVE-2023-37202/" source="CVE"/>
		<reference ref_id="CVE-2023-37203" ref_url="https://www.suse.com/security/cve/CVE-2023-37203/" source="CVE"/>
		<reference ref_id="CVE-2023-37204" ref_url="https://www.suse.com/security/cve/CVE-2023-37204/" source="CVE"/>
		<reference ref_id="CVE-2023-37205" ref_url="https://www.suse.com/security/cve/CVE-2023-37205/" source="CVE"/>
		<reference ref_id="CVE-2023-37206" ref_url="https://www.suse.com/security/cve/CVE-2023-37206/" source="CVE"/>
		<reference ref_id="CVE-2023-37207" ref_url="https://www.suse.com/security/cve/CVE-2023-37207/" source="CVE"/>
		<reference ref_id="CVE-2023-37208" ref_url="https://www.suse.com/security/cve/CVE-2023-37208/" source="CVE"/>
		<reference ref_id="CVE-2023-37209" ref_url="https://www.suse.com/security/cve/CVE-2023-37209/" source="CVE"/>
		<reference ref_id="CVE-2023-37210" ref_url="https://www.suse.com/security/cve/CVE-2023-37210/" source="CVE"/>
		<reference ref_id="CVE-2023-37211" ref_url="https://www.suse.com/security/cve/CVE-2023-37211/" source="CVE"/>
		<reference ref_id="CVE-2023-37212" ref_url="https://www.suse.com/security/cve/CVE-2023-37212/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015502.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues:

Changes in MozillaFirefox and MozillaFirefox-branding-SLE:

This update provides Firefox Extended Support Release 115.0 ESR

* New: 

  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' 'Make text bigger' accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default 'Only show on New Tab'
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:

    - Screen readers, as well as certain other accessibility
      software;
    - East Asian input methods;
    - Enterprise single sign-on software; and
    - Other applications which use accessibility frameworks to
      access information.

  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
    *_ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-accessibility-performance/

* Fixed: Various security fixes. MFSA 2023-22 (bsc#1212438)

  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Fixed potential SIGILL on older CPUs (bsc#1212101)

* Fixed: Various  security  fixes and other quality
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-17"/>
	<updated date="2023-07-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212101">SUSE bug 1212101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212438">SUSE bug 1212438</bugzilla>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-3482/">CVE-2023-3482</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37201/">CVE-2023-37201</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37202/">CVE-2023-37202</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37203/">CVE-2023-37203</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-37204/">CVE-2023-37204</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-37205/">CVE-2023-37205</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-37206/">CVE-2023-37206</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-37207/">CVE-2023-37207</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37208/">CVE-2023-37208</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37209/">CVE-2023-37209</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-37210/">CVE-2023-37210</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37211/">CVE-2023-37211</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37212/">CVE-2023-37212</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009771583" comment="MozillaFirefox-115.0-150000.150.91.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771584" comment="MozillaFirefox-branding-SLE-115-150000.4.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771585" comment="MozillaFirefox-devel-115.0-150000.150.91.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771586" comment="MozillaFirefox-translations-common-115.0-150000.150.91.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771587" comment="MozillaFirefox-translations-other-115.0-150000.150.91.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140182" version="1" class="patch">
	<metadata>
		<title>Security update for cni (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015521.html" source="SUSE-SU"/>
		<description>

This update of cni fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-18"/>
	<updated date="2023-07-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768141" comment="cni-0.7.1-150100.3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140183" version="1" class="patch">
	<metadata>
		<title>Security update for cni-plugins (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015520.html" source="SUSE-SU"/>
		<description>

This update of cni-plugins fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-18"/>
	<updated date="2023-07-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768744" comment="cni-plugins-0.8.6-150100.3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140184" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207783" ref_url="https://bugzilla.suse.com/1207783" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0494" ref_url="https://www.suse.com/security/cve/CVE-2023-0494/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013647.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2023-0494: Fixed a use-after-free in DeepCopyPointerClasses (bsc#1207783).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207783">SUSE bug 1207783</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0494/">CVE-2023-0494</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009737858" comment="xorg-x11-server-1.20.3-150100.14.5.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737859" comment="xorg-x11-server-extra-1.20.3-150100.14.5.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737860" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140185" version="1" class="patch">
	<metadata>
		<title>Security update for sssd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207474" ref_url="https://bugzilla.suse.com/1207474" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4254" ref_url="https://www.suse.com/security/cve/CVE-2022-4254/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013642.html" source="SUSE-SU"/>
		<description>
This update for sssd fixes the following issues:

- CVE-2022-4254: Fixed a bug in libsss_certmap which could allow an attacker to gain control of the admin account and perform a full domain takeover. (bsc#1207474)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207474">SUSE bug 1207474</bugzilla>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4254/">CVE-2022-4254</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009736329" comment="libipa_hbac-devel-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736330" comment="libipa_hbac0-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736331" comment="libsss_certmap-devel-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736332" comment="libsss_certmap0-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736333" comment="libsss_idmap-devel-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736334" comment="libsss_idmap0-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736335" comment="libsss_nss_idmap-devel-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736336" comment="libsss_nss_idmap0-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736337" comment="libsss_simpleifp-devel-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736338" comment="libsss_simpleifp0-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736339" comment="python3-sssd-config-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736340" comment="sssd-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736341" comment="sssd-32bit-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736342" comment="sssd-ad-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736343" comment="sssd-dbus-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736344" comment="sssd-ipa-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736345" comment="sssd-krb5-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736346" comment="sssd-krb5-common-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736347" comment="sssd-ldap-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736348" comment="sssd-proxy-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736349" comment="sssd-tools-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736350" comment="sssd-wbclient-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736351" comment="sssd-wbclient-devel-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736352" comment="sssd-winbind-idmap-1.16.1-150000.8.70.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140186" version="1" class="patch">
	<metadata>
		<title>Security update for container-suseconnect (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2923-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015553.html" source="SUSE-SU"/>
		<description>

This update of container-suseconnect fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-20"/>
	<updated date="2023-07-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772074" comment="container-suseconnect-2.4.0-150000.4.32.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140187" version="1" class="patch">
	<metadata>
		<title>Security update for nginx (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204526" ref_url="https://bugzilla.suse.com/1204526" source="BUGZILLA"/>
		<reference ref_id="1204527" ref_url="https://bugzilla.suse.com/1204527" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41741" ref_url="https://www.suse.com/security/cve/CVE-2022-41741/" source="CVE"/>
		<reference ref_id="CVE-2022-41742" ref_url="https://www.suse.com/security/cve/CVE-2022-41742/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013644.html" source="SUSE-SU"/>
		<description>
This update for nginx fixes the following issues:

- CVE-2022-41741: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204526)
- CVE-2022-41742: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204527)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204526">SUSE bug 1204526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204527">SUSE bug 1204527</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-41741/">CVE-2022-41741</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-41742/">CVE-2022-41742</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009736353" comment="nginx-1.16.1-150100.6.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736354" comment="nginx-source-1.16.1-150100.6.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140188" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207247" ref_url="https://bugzilla.suse.com/1207247" source="BUGZILLA"/>
		<reference ref_id="1207250" ref_url="https://bugzilla.suse.com/1207250" source="BUGZILLA"/>
		<reference ref_id="1207251" ref_url="https://bugzilla.suse.com/1207251" source="BUGZILLA"/>
		<reference ref_id="CVE-2006-20001" ref_url="https://www.suse.com/security/cve/CVE-2006-20001/" source="CVE"/>
		<reference ref_id="CVE-2022-36760" ref_url="https://www.suse.com/security/cve/CVE-2022-36760/" source="CVE"/>
		<reference ref_id="CVE-2022-37436" ref_url="https://www.suse.com/security/cve/CVE-2022-37436/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013648.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2022-37436: Fixed an issue in mod_proxy where a malicious
  backend could cause the response headers to be truncated early,
  resulting in some headers being incorporated into the response body
  (bsc#1207251).
- CVE-2022-36760: Fixed an issue in mod_proxy_ajp that could allow
  request smuggling attacks (bsc#1207250).
- CVE-2006-20001: Fixed an issue in mod_proxy_ajp where a request
  header could cause memory corruption (bsc#1207247).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207247">SUSE bug 1207247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207250">SUSE bug 1207250</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207251">SUSE bug 1207251</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2006-20001/">CVE-2006-20001</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-36760/">CVE-2022-36760</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-37436/">CVE-2022-37436</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009736323" comment="apache2-2.4.33-150000.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736324" comment="apache2-devel-2.4.33-150000.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736325" comment="apache2-doc-2.4.33-150000.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736326" comment="apache2-prefork-2.4.33-150000.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736327" comment="apache2-utils-2.4.33-150000.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736328" comment="apache2-worker-2.4.33-150000.3.72.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140189" version="1" class="patch">
	<metadata>
		<title>Security update for openssh (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213504" ref_url="https://bugzilla.suse.com/1213504" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-38408" ref_url="https://www.suse.com/security/cve/CVE-2023-38408/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015604.html" source="SUSE-SU"/>
		<description>
This update for openssh fixes the following issues:

- CVE-2023-38408: Fixed a condition where specific libaries loaded via
  ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code
  execution via a forwarded agent socket if those libraries were present on the
  victim's system and if the agent was forwarded to an attacker-controlled
  system. [bsc#1213504, CVE-2023-38408]
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-24"/>
	<updated date="2023-07-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213504">SUSE bug 1213504</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-38408/">CVE-2023-38408</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009773253" comment="openssh-7.9p1-150100.6.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773254" comment="openssh-askpass-gnome-7.9p1-150100.6.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773255" comment="openssh-fips-7.9p1-150100.6.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773256" comment="openssh-helpers-7.9p1-150100.6.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140190" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213230" ref_url="https://bugzilla.suse.com/1213230" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-3600" ref_url="https://www.suse.com/security/cve/CVE-2023-3600/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2960-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015618.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 115.0.2 ESR (MFSA 2023-26, bsc#1213230)

Security fixes:

 - CVE-2023-3600: Fixed use-after-free in workers (bmo#1839703)
  
Other fixes:

 - Fixed a startup crash experienced by some Windows
   users by blocking instances of a malicious injected DLL
   (bmo#1841751)
 - Fixed a bug with displaying a caret in the text editor
   on some websites (bmo#1840804)
 - Fixed a bug with broken audio rendering on some
   websites (bmo#1841982)
 - Fixed a bug with patternTransform translate using the
   wrong units (bmo#1840746)
 - Fixed a crash affecting Windows 7 users related to the
   DLL blocklist.

Firefox Extended Support Release 115.0.1 ESR

 - Fixed a startup crash for Windows users with Kingsoft
   Antivirus software installed (bmo#1837242)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-25"/>
	<updated date="2023-07-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213230">SUSE bug 1213230</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3600/">CVE-2023-3600</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009772677" comment="MozillaFirefox-115.0.2-150000.150.94.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772678" comment="MozillaFirefox-devel-115.0.2-150000.150.94.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772679" comment="MozillaFirefox-translations-common-115.0.2-150000.150.94.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772680" comment="MozillaFirefox-translations-other-115.0.2-150000.150.94.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140191" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213487" ref_url="https://bugzilla.suse.com/1213487" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-3446" ref_url="https://www.suse.com/security/cve/CVE-2023-3446/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015617.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-25"/>
	<updated date="2023-07-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1213487">SUSE bug 1213487</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-3446/">CVE-2023-3446</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009772681" comment="libopenssl-1_1-devel-1.1.0i-150100.14.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772682" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772683" comment="libopenssl1_1-1.1.0i-150100.14.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772684" comment="libopenssl1_1-32bit-1.1.0i-150100.14.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772685" comment="libopenssl1_1-hmac-1.1.0i-150100.14.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772686" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772687" comment="openssl-1_1-1.1.0i-150100.14.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140192" version="1" class="patch">
	<metadata>
		<title>Security update for ca-certificates-mozilla (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206212" ref_url="https://bugzilla.suse.com/1206212" source="BUGZILLA"/>
		<reference ref_id="1206622" ref_url="https://bugzilla.suse.com/1206622" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013409.html" source="SUSE-SU"/>
		<description>
This update for ca-certificates-mozilla fixes the following issues:

- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
  Removed CAs:
  - Global Chambersign Root
  - EC-ACC
  - Network Solutions Certificate Authority
  - Staat der Nederlanden EV Root CA
  - SwissSign Platinum CA - G2
  Added CAs:
  - DIGITALSIGN GLOBAL ROOT ECDSA CA
  - DIGITALSIGN GLOBAL ROOT RSA CA
  - Security Communication ECC RootCA1
  - Security Communication RootCA3
  Changed trust:
  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)

- Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022'
  and it is not clear how many certs were issued for SSL middleware by TrustCor:
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - TrustCor ECA-1
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-02"/>
	<updated date="2023-01-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206212">SUSE bug 1206212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206622">SUSE bug 1206622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730143" comment="ca-certificates-mozilla-2.60-150000.4.38.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140193" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213853" ref_url="https://bugzilla.suse.com/1213853" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-3817" ref_url="https://www.suse.com/security/cve/CVE-2023-3817/" source="CVE"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1213853">SUSE bug 1213853</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-3817/">CVE-2023-3817</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009799102" comment="libopenssl-1_1-devel-1.1.0i-150100.14.65.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009799103" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.65.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009799104" comment="libopenssl1_1-1.1.0i-150100.14.65.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009799105" comment="libopenssl1_1-32bit-1.1.0i-150100.14.65.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009799106" comment="libopenssl1_1-hmac-1.1.0i-150100.14.65.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009799107" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.65.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009799108" comment="openssl-1_1-1.1.0i-150100.14.65.6 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140194" version="1" class="patch">
	<metadata>
		<title>Security update for jtidy (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212404" ref_url="https://bugzilla.suse.com/1212404" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-34623" ref_url="https://www.suse.com/security/cve/CVE-2023-34623/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3016-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-July/030626.html" source="SUSE-SU"/>
		<description>
This update for jtidy fixes the following issues:

- CVE-2023-34623: Prevent crash when parsing documents with excessive nesting (bsc#1212404).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-28"/>
	<updated date="2023-07-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212404">SUSE bug 1212404</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-34623/">CVE-2023-34623</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773257" comment="jtidy-8.0-150000.4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140195" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213174" ref_url="https://bugzilla.suse.com/1213174" source="BUGZILLA"/>
		<reference ref_id="1213384" ref_url="https://bugzilla.suse.com/1213384" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2127" ref_url="https://www.suse.com/security/cve/CVE-2022-2127/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3017-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-July/030625.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

  - CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174).

  Bugfixes:

  - Fixed trust relationship failure (bsc#1213384).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-28"/>
	<updated date="2023-07-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1213174">SUSE bug 1213174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213384">SUSE bug 1213384</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2127/">CVE-2022-2127</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009773182" comment="libdcerpc-binding0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773183" comment="libdcerpc-binding0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773184" comment="libdcerpc-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773185" comment="libdcerpc-samr-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773186" comment="libdcerpc-samr0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773187" comment="libdcerpc0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773188" comment="libdcerpc0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773189" comment="libndr-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773190" comment="libndr-krb5pac-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773191" comment="libndr-krb5pac0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773192" comment="libndr-krb5pac0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773193" comment="libndr-nbt-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773194" comment="libndr-nbt0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773195" comment="libndr-nbt0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773196" comment="libndr-standard-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773197" comment="libndr-standard0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773198" comment="libndr-standard0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773199" comment="libndr0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773200" comment="libndr0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773201" comment="libnetapi-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773202" comment="libnetapi0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773203" comment="libnetapi0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773204" comment="libsamba-credentials-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773205" comment="libsamba-credentials0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773206" comment="libsamba-credentials0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773207" comment="libsamba-errors-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773208" comment="libsamba-errors0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773209" comment="libsamba-errors0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773210" comment="libsamba-hostconfig-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773211" comment="libsamba-hostconfig0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773212" comment="libsamba-hostconfig0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773213" comment="libsamba-passdb-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773214" comment="libsamba-passdb0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773215" comment="libsamba-passdb0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773216" comment="libsamba-policy-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773217" comment="libsamba-policy-python3-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773218" comment="libsamba-policy0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773219" comment="libsamba-policy0-python3-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773220" comment="libsamba-util-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773221" comment="libsamba-util0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773222" comment="libsamba-util0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773223" comment="libsamdb-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773224" comment="libsamdb0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773225" comment="libsamdb0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773226" comment="libsmbclient-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773227" comment="libsmbclient0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773228" comment="libsmbconf-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773229" comment="libsmbconf0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773230" comment="libsmbconf0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773231" comment="libsmbldap-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773232" comment="libsmbldap2-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773233" comment="libsmbldap2-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773234" comment="libtevent-util-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773235" comment="libtevent-util0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773236" comment="libtevent-util0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773237" comment="libwbclient-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773238" comment="libwbclient0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773239" comment="libwbclient0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773240" comment="samba-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773241" comment="samba-ad-dc-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773242" comment="samba-client-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773243" comment="samba-core-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773244" comment="samba-dsdb-modules-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773245" comment="samba-libs-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773246" comment="samba-libs-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773247" comment="samba-libs-python-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773248" comment="samba-libs-python3-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773249" comment="samba-python-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773250" comment="samba-python3-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773251" comment="samba-winbind-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773252" comment="samba-winbind-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140196" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213286" ref_url="https://bugzilla.suse.com/1213286" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-20593" ref_url="https://www.suse.com/security/cve/CVE-2023-20593/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3020-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-July/030622.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

  - CVE-2023-20593: Fixed AMD ucode for ZenBleed vulnerability (bsc#1213286).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-28"/>
	<updated date="2023-07-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1213286">SUSE bug 1213286</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20593/">CVE-2023-20593</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009775188" comment="kernel-firmware-20200107-150100.3.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775189" comment="ucode-amd-20200107-150100.3.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140197" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214922" ref_url="https://bugzilla.suse.com/1214922" source="BUGZILLA"/>
		<reference ref_id="1214924" ref_url="https://bugzilla.suse.com/1214924" source="BUGZILLA"/>
		<reference ref_id="1214925" ref_url="https://bugzilla.suse.com/1214925" source="BUGZILLA"/>
		<reference ref_id="1215004" ref_url="https://bugzilla.suse.com/1215004" source="BUGZILLA"/>
		<reference ref_id="1215006" ref_url="https://bugzilla.suse.com/1215006" source="BUGZILLA"/>
		<reference ref_id="1215033" ref_url="https://bugzilla.suse.com/1215033" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-4733" ref_url="https://www.suse.com/security/cve/CVE-2023-4733/" source="CVE"/>
		<reference ref_id="CVE-2023-4734" ref_url="https://www.suse.com/security/cve/CVE-2023-4734/" source="CVE"/>
		<reference ref_id="CVE-2023-4735" ref_url="https://www.suse.com/security/cve/CVE-2023-4735/" source="CVE"/>
		<reference ref_id="CVE-2023-4738" ref_url="https://www.suse.com/security/cve/CVE-2023-4738/" source="CVE"/>
		<reference ref_id="CVE-2023-4752" ref_url="https://www.suse.com/security/cve/CVE-2023-4752/" source="CVE"/>
		<reference ref_id="CVE-2023-4781" ref_url="https://www.suse.com/security/cve/CVE-2023-4781/" source="CVE"/>
		<description>
This update for vim fixes the following issues:

Security fixes:

- CVE-2023-4733: Fixed use-after-free in function buflist_altfpos (bsc#1215004). 
- CVE-2023-4734: Fixed segmentation fault in function f_fullcommand (bsc#1214925). 
- CVE-2023-4735: Fixed out of bounds write in ops.c (bsc#1214924). 
- CVE-2023-4738: Fixed heap buffer overflow in vim_regsub_both (bsc#1214922). 
- CVE-2023-4752: Fixed heap use-after-free in function ins_compl_get_exp (bsc#1215006). 
- CVE-2023-4781: Fixed heap buffer overflow in function vim_regsub_both (bsc#1215033).

Other fixes:

- Update to version 9.0 with patch level 1894,
  for the complete list of changes see https://github.com/vim/vim/compare/v9.0.1443...v9.0.1894
- Use app icons generated from vimlogo.eps in the source tarball;
  add higher resolution icons of sizes 128x128, 256x256, and 512x512 as png sources

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-20"/>
	<updated date="2023-09-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214922">SUSE bug 1214922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214924">SUSE bug 1214924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214925">SUSE bug 1214925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215004">SUSE bug 1215004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215006">SUSE bug 1215006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215033">SUSE bug 1215033</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4733/">CVE-2023-4733</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-4734/">CVE-2023-4734</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-4735/">CVE-2023-4735</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4738/">CVE-2023-4738</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4752/">CVE-2023-4752</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4781/">CVE-2023-4781</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009796875" comment="gvim-9.0.1894-150000.5.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796876" comment="vim-9.0.1894-150000.5.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796767" comment="vim-data-9.0.1894-150000.5.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796768" comment="vim-data-common-9.0.1894-150000.5.54.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140198" version="1" class="patch">
	<metadata>
		<title>Security update for runc (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212475" ref_url="https://bugzilla.suse.com/1212475" source="BUGZILLA"/>
		<description>

This update of runc fixes the following issues:

- Update to runc v1.1.8.

  Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.

- rebuild the package with the go 1.21 security release (bsc#1212475).

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-02"/>
	<updated date="2023-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212475">SUSE bug 1212475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781390" comment="runc-1.1.8-150000.49.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140199" version="1" class="patch">
	<metadata>
		<title>Security update for Golang Prometheus (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213880" ref_url="https://bugzilla.suse.com/1213880" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-29409" ref_url="https://www.suse.com/security/cve/CVE-2023-29409/" source="CVE"/>
		<description>
This update for Golang Prometheus fixes the following issues:

golang-github-prometheus-alertmanager:

- CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server
  while validating signatures for extremely large RSA keys. (bsc#1213880)
  There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version.

golang-github-prometheus-node_exporter:

- CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server
  while validating signatures for extremely large RSA keys. (bsc#1213880)
  There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version.

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-20"/>
	<updated date="2023-09-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213880">SUSE bug 1213880</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-29409/">CVE-2023-29409</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796878" comment="golang-github-prometheus-node_exporter-1.5.0-150100.3.26.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140200" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Moderate) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193948" ref_url="https://bugzilla.suse.com/1193948" source="BUGZILLA"/>
		<reference ref_id="1210994" ref_url="https://bugzilla.suse.com/1210994" source="BUGZILLA"/>
		<reference ref_id="1212794" ref_url="https://bugzilla.suse.com/1212794" source="BUGZILLA"/>
		<reference ref_id="1212844" ref_url="https://bugzilla.suse.com/1212844" source="BUGZILLA"/>
		<reference ref_id="1212855" ref_url="https://bugzilla.suse.com/1212855" source="BUGZILLA"/>
		<reference ref_id="1213257" ref_url="https://bugzilla.suse.com/1213257" source="BUGZILLA"/>
		<reference ref_id="1213441" ref_url="https://bugzilla.suse.com/1213441" source="BUGZILLA"/>
		<reference ref_id="1213630" ref_url="https://bugzilla.suse.com/1213630" source="BUGZILLA"/>
		<reference ref_id="1213960" ref_url="https://bugzilla.suse.com/1213960" source="BUGZILLA"/>
		<reference ref_id="1214796" ref_url="https://bugzilla.suse.com/1214796" source="BUGZILLA"/>
		<reference ref_id="1214797" ref_url="https://bugzilla.suse.com/1214797" source="BUGZILLA"/>
		<reference ref_id="1215489" ref_url="https://bugzilla.suse.com/1215489" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-20897" ref_url="https://www.suse.com/security/cve/CVE-2023-20897/" source="CVE"/>
		<reference ref_id="CVE-2023-20898" ref_url="https://www.suse.com/security/cve/CVE-2023-20898/" source="CVE"/>
		<description>
This update for salt fixes the following issues:

Security issues fixed:

- CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441)
- CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base
  name. (bsc#1214797, bsc#1193948)

Bugs fixed:

- Create minion_id with reproducible mtime
- Fix broken tests to make them running in the testsuite
- Fix detection of Salt codename by 'salt_version' execution module
- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix utf8 handling in 'pass' renderer and make it more robust
- Fix zypper repositories always being reconfigured
- Make sure configured user is properly set by Salt (bsc#1210994)
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-21"/>
	<updated date="2023-09-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1193948">SUSE bug 1193948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210994">SUSE bug 1210994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212794">SUSE bug 1212794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212844">SUSE bug 1212844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212855">SUSE bug 1212855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213257">SUSE bug 1213257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213441">SUSE bug 1213441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213630">SUSE bug 1213630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213960">SUSE bug 1213960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214796">SUSE bug 1214796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214797">SUSE bug 1214797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215489">SUSE bug 1215489</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-20897/">CVE-2023-20897</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-20898/">CVE-2023-20898</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009797566" comment="python3-salt-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797567" comment="salt-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797568" comment="salt-api-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797569" comment="salt-bash-completion-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797570" comment="salt-cloud-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797571" comment="salt-doc-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797572" comment="salt-fish-completion-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797573" comment="salt-master-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797574" comment="salt-minion-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797575" comment="salt-proxy-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797576" comment="salt-ssh-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797577" comment="salt-standalone-formulas-configuration-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797578" comment="salt-syndic-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797579" comment="salt-transactional-update-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797580" comment="salt-zsh-completion-3006.0-150100.107.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140201" version="1" class="patch">
	<metadata>
		<title>Security update for shadow (Low) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214806" ref_url="https://bugzilla.suse.com/1214806" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-4641" ref_url="https://www.suse.com/security/cve/CVE-2023-4641/" source="CVE"/>
		<description>
This update for shadow fixes the following issues:

- CVE-2023-4641: Fixed potential password leak (bsc#1214806).

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-08"/>
	<updated date="2023-09-08"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1214806">SUSE bug 1214806</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-4641/">CVE-2023-4641</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790266" comment="shadow-4.6-150100.3.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140202" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214692" ref_url="https://bugzilla.suse.com/1214692" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-40217" ref_url="https://www.suse.com/security/cve/CVE-2023-40217/" source="CVE"/>
		<description>
This update for python fixes the following issues:

- CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692).

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-13"/>
	<updated date="2023-09-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214692">SUSE bug 1214692</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-40217/">CVE-2023-40217</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009795265" comment="libpython2_7-1_0-2.7.18-150000.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795266" comment="python-2.7.18-150000.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795267" comment="python-base-2.7.18-150000.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795454" comment="python-curses-2.7.18-150000.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795268" comment="python-devel-2.7.18-150000.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795455" comment="python-gdbm-2.7.18-150000.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795269" comment="python-tk-2.7.18-150000.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795270" comment="python-xml-2.7.18-150000.54.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140203" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1215466" ref_url="https://bugzilla.suse.com/1215466" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-43115" ref_url="https://www.suse.com/security/cve/CVE-2023-43115/" source="CVE"/>
		<description>
This update for ghostscript fixes the following issues:

- CVE-2023-43115: Fixed remote code execution via crafted PostScript documents in gdevijs.c (bsc#1215466).

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-19"/>
	<updated date="2023-09-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1215466">SUSE bug 1215466</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-43115/">CVE-2023-43115</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009796890" comment="ghostscript-9.52-150000.173.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796891" comment="ghostscript-devel-9.52-150000.173.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796892" comment="ghostscript-x11-9.52-150000.173.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140204" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1215309" ref_url="https://bugzilla.suse.com/1215309" source="BUGZILLA"/>
		<reference ref_id="1215575" ref_url="https://bugzilla.suse.com/1215575" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-5168" ref_url="https://www.suse.com/security/cve/CVE-2023-5168/" source="CVE"/>
		<reference ref_id="CVE-2023-5169" ref_url="https://www.suse.com/security/cve/CVE-2023-5169/" source="CVE"/>
		<reference ref_id="CVE-2023-5171" ref_url="https://www.suse.com/security/cve/CVE-2023-5171/" source="CVE"/>
		<reference ref_id="CVE-2023-5174" ref_url="https://www.suse.com/security/cve/CVE-2023-5174/" source="CVE"/>
		<reference ref_id="CVE-2023-5176" ref_url="https://www.suse.com/security/cve/CVE-2023-5176/" source="CVE"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 115.3.0 ESR (MFSA 2023-42, bsc#1215575):

Security fixes:

- CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1 (bmo#1846683).
- CVE-2023-5169: Out-of-bounds write in PathOps (bmo#1846685).
- CVE-2023-5171: Use-after-free in Ion Compiler (bmo#1851599).
- CVE-2023-5174: Double-free in process spawning on Windows (bmo#1848454).
- CVE-2023-5176: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (bmo#1836353, bmo#1842674, bmo#1843824, bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983, bmo#1851195).

Other fixes:

  - Fix broken build with newer binutils (bsc#1215309)

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-26"/>
	<updated date="2023-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1215309">SUSE bug 1215309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215575">SUSE bug 1215575</bugzilla>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2023-5168/">CVE-2023-5168</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2023-5169/">CVE-2023-5169</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2023-5171/">CVE-2023-5171</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2023-5174/">CVE-2023-5174</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2023-5176/">CVE-2023-5176</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009798813" comment="MozillaFirefox-115.3.0-150000.150.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798814" comment="MozillaFirefox-devel-115.3.0-150000.150.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798815" comment="MozillaFirefox-translations-common-115.3.0-150000.150.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798816" comment="MozillaFirefox-translations-other-115.3.0-150000.150.107.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140205" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207533" ref_url="https://bugzilla.suse.com/1207533" source="BUGZILLA"/>
		<reference ref_id="1207534" ref_url="https://bugzilla.suse.com/1207534" source="BUGZILLA"/>
		<reference ref_id="1207536" ref_url="https://bugzilla.suse.com/1207536" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4304" ref_url="https://www.suse.com/security/cve/CVE-2022-4304/" source="CVE"/>
		<reference ref_id="CVE-2023-0215" ref_url="https://www.suse.com/security/cve/CVE-2023-0215/" source="CVE"/>
		<reference ref_id="CVE-2023-0286" ref_url="https://www.suse.com/security/cve/CVE-2023-0286/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0308-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013655.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address (bsc#1207533).
- CVE-2023-0215: Fixed use-after-free following BIO_new_NDEF() (bsc#1207536).
- CVE-2022-4304: Fixed timing Oracle in RSA Decryption (bsc#1207534).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207533">SUSE bug 1207533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207534">SUSE bug 1207534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207536">SUSE bug 1207536</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-4304/">CVE-2022-4304</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0215/">CVE-2023-0215</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0286/">CVE-2023-0286</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009737861" comment="libopenssl-1_1-devel-1.1.0i-150100.14.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737862" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737863" comment="libopenssl1_1-1.1.0i-150100.14.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737864" comment="libopenssl1_1-32bit-1.1.0i-150100.14.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737865" comment="libopenssl1_1-hmac-1.1.0i-150100.14.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737866" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737867" comment="openssl-1_1-1.1.0i-150100.14.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140206" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213616" ref_url="https://bugzilla.suse.com/1213616" source="BUGZILLA"/>
		<reference ref_id="1214083" ref_url="https://bugzilla.suse.com/1214083" source="BUGZILLA"/>
		<reference ref_id="1215145" ref_url="https://bugzilla.suse.com/1215145" source="BUGZILLA"/>
		<reference ref_id="1215474" ref_url="https://bugzilla.suse.com/1215474" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40982" ref_url="https://www.suse.com/security/cve/CVE-2022-40982/" source="CVE"/>
		<reference ref_id="CVE-2023-20588" ref_url="https://www.suse.com/security/cve/CVE-2023-20588/" source="CVE"/>
		<reference ref_id="CVE-2023-20593" ref_url="https://www.suse.com/security/cve/CVE-2023-20593/" source="CVE"/>
		<reference ref_id="CVE-2023-34322" ref_url="https://www.suse.com/security/cve/CVE-2023-34322/" source="CVE"/>
		<description>
This update for xen fixes the following issues:

- CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474).
- CVE-2023-34322: Fixed top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145).
- CVE-2023-20593: Fixed AMD Zenbleed (XSA-433) (bsc#1213616).
- CVE-2022-40982: Fixed Intel Gather Data Sampling (XSA-435) (bsc#1214083).

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-25"/>
	<updated date="2023-09-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213616">SUSE bug 1213616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214083">SUSE bug 1214083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215145">SUSE bug 1215145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215474">SUSE bug 1215474</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40982/">CVE-2022-40982</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20588/">CVE-2023-20588</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20593/">CVE-2023-20593</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-34322/">CVE-2023-34322</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009798817" comment="xen-4.12.4_38-150100.3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798818" comment="xen-devel-4.12.4_38-150100.3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798819" comment="xen-libs-4.12.4_38-150100.3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798820" comment="xen-tools-4.12.4_38-150100.3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798821" comment="xen-tools-domU-4.12.4_38-150100.3.92.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140207" version="1" class="patch">
	<metadata>
		<title>Security update for nghttp2 (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1215713" ref_url="https://bugzilla.suse.com/1215713" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-35945" ref_url="https://www.suse.com/security/cve/CVE-2023-35945/" source="CVE"/>
		<description>
This update for nghttp2 fixes the following issues:

- CVE-2023-35945: Fixed memory leak when PUSH_PROMISE or HEADERS frame cannot be sent (bsc#1215713).

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-26"/>
	<updated date="2023-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1215713">SUSE bug 1215713</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-35945/">CVE-2023-35945</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009798951" comment="libnghttp2-14-1.40.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798952" comment="libnghttp2-14-32bit-1.40.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798953" comment="libnghttp2-devel-1.40.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798954" comment="libnghttp2_asio-devel-1.40.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798955" comment="libnghttp2_asio1-1.40.0-150000.3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140208" version="1" class="patch">
	<metadata>
		<title>Security update for python-requests (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211674" ref_url="https://bugzilla.suse.com/1211674" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-32681" ref_url="https://www.suse.com/security/cve/CVE-2023-32681/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3094-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-August/030673.html" source="SUSE-SU"/>
		<description>
This update for python-requests fixes the following issues:

- CVE-2023-32681: fixed unintended leak of Proxy-Authorization header (bsc#1211674).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-01"/>
	<updated date="2023-08-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1211674">SUSE bug 1211674</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-32681/">CVE-2023-32681</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009771165" comment="python2-requests-2.25.1-150100.6.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771166" comment="python3-requests-2.25.1-150100.6.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140209" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210994" ref_url="https://bugzilla.suse.com/1210994" source="BUGZILLA"/>
		<reference ref_id="1211591" ref_url="https://bugzilla.suse.com/1211591" source="BUGZILLA"/>
		<reference ref_id="1211741" ref_url="https://bugzilla.suse.com/1211741" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28370" ref_url="https://www.suse.com/security/cve/CVE-2023-28370/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015750.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

Security fixes:

- CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741)

Bug fixes:

- Prevent error loading 'known_hosts' when '$HOME' is not set. (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module. (bsc#1211591)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-02"/>
	<updated date="2023-08-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1210994">SUSE bug 1210994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211591">SUSE bug 1211591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211741">SUSE bug 1211741</bugzilla>
	<cve impact="low" cvss3="3.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-28370/">CVE-2023-28370</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009774023" comment="python3-salt-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774024" comment="salt-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774025" comment="salt-api-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774026" comment="salt-bash-completion-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774027" comment="salt-cloud-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774028" comment="salt-doc-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774029" comment="salt-fish-completion-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774030" comment="salt-master-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774031" comment="salt-minion-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774032" comment="salt-proxy-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774033" comment="salt-ssh-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774034" comment="salt-standalone-formulas-configuration-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774035" comment="salt-syndic-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774036" comment="salt-transactional-update-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774037" comment="salt-zsh-completion-3006.0-150100.100.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140210" version="1" class="patch">
	<metadata>
		<title>Security update for SUSE Manager Client Tools (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208612" ref_url="https://bugzilla.suse.com/1208612" source="BUGZILLA"/>
		<reference ref_id="1211741" ref_url="https://bugzilla.suse.com/1211741" source="BUGZILLA"/>
		<reference ref_id="1212279" ref_url="https://bugzilla.suse.com/1212279" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28370" ref_url="https://www.suse.com/security/cve/CVE-2023-28370/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3144-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015736.html" source="SUSE-SU"/>
		<description>
This update fixes the following issues:

python-tornado:
    
- Security fixes:
  * CVE-2023-28370: Fixed an open redirect issue in the static file handler (bsc#1211741)

prometheus-blackbox_exporter:

- Use obscpio for go modules service
- Set version number
- Set build date from SOURCE_DATE_EPOCH
- Update to 0.24.0 (bsc#1212279, jsc#PED-4556)
  * Requires go1.19
- Avoid empty validation script
- Add rc symlink for backwards compatibility

spacecmd:

- Version 4.3.22-1
  * Bypass traditional systems check on older SUMA instances (bsc#1208612)

		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-02"/>
	<updated date="2023-08-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1208612">SUSE bug 1208612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211741">SUSE bug 1211741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212279">SUSE bug 1212279</bugzilla>
	<cve impact="low" cvss3="3.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-28370/">CVE-2023-28370</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009774038" comment="python2-tornado-4.5.3-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773832" comment="python3-tornado-4.5.3-150000.3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140211" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213657" ref_url="https://bugzilla.suse.com/1213657" source="BUGZILLA"/>
		<reference ref_id="1213746" ref_url="https://bugzilla.suse.com/1213746" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-4045" ref_url="https://www.suse.com/security/cve/CVE-2023-4045/" source="CVE"/>
		<reference ref_id="CVE-2023-4046" ref_url="https://www.suse.com/security/cve/CVE-2023-4046/" source="CVE"/>
		<reference ref_id="CVE-2023-4047" ref_url="https://www.suse.com/security/cve/CVE-2023-4047/" source="CVE"/>
		<reference ref_id="CVE-2023-4048" ref_url="https://www.suse.com/security/cve/CVE-2023-4048/" source="CVE"/>
		<reference ref_id="CVE-2023-4049" ref_url="https://www.suse.com/security/cve/CVE-2023-4049/" source="CVE"/>
		<reference ref_id="CVE-2023-4050" ref_url="https://www.suse.com/security/cve/CVE-2023-4050/" source="CVE"/>
		<reference ref_id="CVE-2023-4052" ref_url="https://www.suse.com/security/cve/CVE-2023-4052/" source="CVE"/>
		<reference ref_id="CVE-2023-4054" ref_url="https://www.suse.com/security/cve/CVE-2023-4054/" source="CVE"/>
		<reference ref_id="CVE-2023-4055" ref_url="https://www.suse.com/security/cve/CVE-2023-4055/" source="CVE"/>
		<reference ref_id="CVE-2023-4056" ref_url="https://www.suse.com/security/cve/CVE-2023-4056/" source="CVE"/>
		<reference ref_id="CVE-2023-4057" ref_url="https://www.suse.com/security/cve/CVE-2023-4057/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015758.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following security issues:

  Firefox was updated to Extended Support Release 115.1.0 ESR (bsc#1213746).

  - CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas (bmo#1833876).
  - CVE-2023-4046: Fixed incorrect value used during WASM compilation (bmo#1837686).
  - CVE-2023-4047: Fixed potential permissions request bypass via clickjacking (bmo#1839073).
  - CVE-2023-4048: Fixed crash in DOMParser due to out-of-memory conditions (bmo#1841368).
  - CVE-2023-4049: Fixed potential race conditions when releasing platform objects (bmo#1842658).
  - CVE-2023-4050: Fixed stack buffer overflow in StorageManager (bmo#1843038).
  - CVE-2023-4052: Fixed file deletion and privilege escalation through Firefox uninstaller (bmo#1824420).
  - CVE-2023-4054: Fixed lack of warning when opening appref-ms files (bmo#1840777).
  - CVE-2023-4055: Fixed cookie jar overflow caused unexpected cookie jar state (bmo#1782561).
  - CVE-2023-4056: Fixed memory safety bugs (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847).
  - CVE-2023-4057: Fixed memory safety bugs (bmo#1841682).
    
  Bugfixes:

  - Remove bashisms from startup-script (bsc#1213657).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-02"/>
	<updated date="2023-08-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213657">SUSE bug 1213657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213746">SUSE bug 1213746</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-4045/">CVE-2023-4045</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-4046/">CVE-2023-4046</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4047/">CVE-2023-4047</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4048/">CVE-2023-4048</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4049/">CVE-2023-4049</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4050/">CVE-2023-4050</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-4052/">CVE-2023-4052</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-4054/">CVE-2023-4054</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-4055/">CVE-2023-4055</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4056/">CVE-2023-4056</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4057/">CVE-2023-4057</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009775995" comment="MozillaFirefox-115.1.0-150000.150.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775996" comment="MozillaFirefox-devel-115.1.0-150000.150.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775997" comment="MozillaFirefox-translations-common-115.1.0-150000.150.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775998" comment="MozillaFirefox-translations-other-115.1.0-150000.150.97.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140212" version="1" class="patch">
	<metadata>
		<title>Security update for apache2-mod_security2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207378" ref_url="https://bugzilla.suse.com/1207378" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-48279" ref_url="https://www.suse.com/security/cve/CVE-2022-48279/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013701.html" source="SUSE-SU"/>
		<description>
This update for apache2-mod_security2 fixes the following issues:

- CVE-2022-48279: Fixed a potential firewall bypass due to an
  incorrect parsing of HTTP multipart requests (bsc#1207378).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-08"/>
	<updated date="2023-02-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207378">SUSE bug 1207378</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-48279/">CVE-2022-48279</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009735645" comment="apache2-mod_security2-2.9.2-150000.3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140213" version="1" class="patch">
	<metadata>
		<title>Security update for cjose (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213385" ref_url="https://bugzilla.suse.com/1213385" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-37464" ref_url="https://www.suse.com/security/cve/CVE-2023-37464/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015807.html" source="SUSE-SU"/>
		<description>
This update for cjose fixes the following issues:

- CVE-2023-37464: Fixed AES GCM decryption uses the Tag length from the actual Authentication Tag (bsc#1213385).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-08"/>
	<updated date="2023-08-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213385">SUSE bug 1213385</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-37464/">CVE-2023-37464</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009773003" comment="libcjose-devel-0.6.1-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773004" comment="libcjose0-0.6.1-150100.4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140214" version="1" class="patch">
	<metadata>
		<title>Security update for apr-util (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207866" ref_url="https://bugzilla.suse.com/1207866" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25147" ref_url="https://www.suse.com/security/cve/CVE-2022-25147/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013704.html" source="SUSE-SU"/>
		<description>
This update for apr-util fixes the following issues:

- CVE-2022-25147: Fixed a buffer overflow possible with specially crafted input during base64 encoding (bsc#1207866)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-08"/>
	<updated date="2023-02-08"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1207866">SUSE bug 1207866</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25147/">CVE-2022-25147</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009737334" comment="apr-util-devel-1.6.1-150000.4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737335" comment="libapr-util1-1.6.1-150000.4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737336" comment="libapr-util1-dbd-mysql-1.6.1-150000.4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737337" comment="libapr-util1-dbd-pgsql-1.6.1-150000.4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737338" comment="libapr-util1-dbd-sqlite3-1.6.1-150000.4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140215" version="1" class="patch">
	<metadata>
		<title>Security update for container-suseconnect (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:3264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015867.html" source="SUSE-SU"/>
		<description>

This update of container-suseconnect fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-10"/>
	<updated date="2023-08-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009776704" comment="container-suseconnect-2.4.0-150000.4.34.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140216" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207922" ref_url="https://bugzilla.suse.com/1207922" source="BUGZILLA"/>
		<reference ref_id="1213473" ref_url="https://bugzilla.suse.com/1213473" source="BUGZILLA"/>
		<reference ref_id="1213474" ref_url="https://bugzilla.suse.com/1213474" source="BUGZILLA"/>
		<reference ref_id="1213475" ref_url="https://bugzilla.suse.com/1213475" source="BUGZILLA"/>
		<reference ref_id="1213479" ref_url="https://bugzilla.suse.com/1213479" source="BUGZILLA"/>
		<reference ref_id="1213481" ref_url="https://bugzilla.suse.com/1213481" source="BUGZILLA"/>
		<reference ref_id="1213482" ref_url="https://bugzilla.suse.com/1213482" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-22006" ref_url="https://www.suse.com/security/cve/CVE-2023-22006/" source="CVE"/>
		<reference ref_id="CVE-2023-22036" ref_url="https://www.suse.com/security/cve/CVE-2023-22036/" source="CVE"/>
		<reference ref_id="CVE-2023-22041" ref_url="https://www.suse.com/security/cve/CVE-2023-22041/" source="CVE"/>
		<reference ref_id="CVE-2023-22044" ref_url="https://www.suse.com/security/cve/CVE-2023-22044/" source="CVE"/>
		<reference ref_id="CVE-2023-22045" ref_url="https://www.suse.com/security/cve/CVE-2023-22045/" source="CVE"/>
		<reference ref_id="CVE-2023-22049" ref_url="https://www.suse.com/security/cve/CVE-2023-22049/" source="CVE"/>
		<reference ref_id="CVE-2023-25193" ref_url="https://www.suse.com/security/cve/CVE-2023-25193/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015880.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

  Updated to jdk-11.0.20+8 (July 2023 CPU):

  - CVE-2023-22006: Fixed vulnerability in the network component (bsc#1213473).
  - CVE-2023-22036: Fixed vulnerability in the utility component (bsc#1213474).
  - CVE-2023-22041: Fixed vulnerability in the hotspot component (bsc#1213475).
  - CVE-2023-22044: Fixed vulnerability in the hotspot component (bsc#1213479).
  - CVE-2023-22045: Fixed vulnerability in the hotspot component (bsc#1213481).
  - CVE-2023-22049: Fixed vulnerability in the libraries component (bsc#1213482).
  - CVE-2023-25193: Fixed vulnerability in the embedded harfbuzz module (bsc#1207922).

  - JDK-8298676: Enhanced Look and Feel
  - JDK-8300285: Enhance TLS data handling
  - JDK-8300596: Enhance Jar Signature validation
  - JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
  - JDK-8302475: Enhance HTTP client file downloading
  - JDK-8302483: Enhance ZIP performance
  - JDK-8303376: Better launching of JDI
  - JDK-8304468: Better array usages
  - JDK-8305312: Enhanced path handling
  - JDK-8308682: Enhance AES performance

  Bugfixes:

  - JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
    Stream closed
  - JDK-8178806: Better exception logging in crypto code
  - JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
    out
  - JDK-8209167: Use CLDR's time zone mappings for Windows
  - JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
    support macosx
  - JDK-8209880: tzdb.dat is not reproducibly built
  - JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
  - JDK-8214459: NSS source should be removed
  - JDK-8214807: Improve handling of very old class files
  - JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
    tests
  - JDK-8215575: C2 crash: assert(get_instanceKlass()-&gt;is_loaded())
    failed: must be at least loaded
  - JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
  - JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
  - JDK-8232853: AuthenticationFilter.Cache::remove may throw
    ConcurrentModificationException
  - JDK-8243936: NonWriteable system properties are actually
    writeable
  - JDK-8246383: NullPointerException in
    JceSecurity.getVerificationResult when using Entrust provider
  - JDK-8248701: On Windows generated modules-deps.gmk can
    contain backslash-r (CR) characters
  - JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
  - JDK-8259530: Generated docs contain MIT/GPL-licenced works
    without reproducing the licence
  - JDK-8263420: Incorrect function name in
    NSAccessibilityStaticText native peer implementation
  - JDK-8264290: Create implementation for
    NSAccessibilityComponentGroup protocol peer
  - JDK-8264304: Create implementation for NSAccessibilityToolbar
    protocol peer
  - JDK-8265486: ProblemList javax/sound/midi/Sequencer/
    /Recording.java on macosx-aarch64
  - JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
  - JDK-8269746: C2: assert(!in-&gt;is_CFG()) failed: CFG Node with
    no controlling input?
  - JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
  - JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
  - JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
  - JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
  - JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
  - JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
  - JDK-8278434: timeouts in test java/time/test/java/time/format/
    /TestZoneTextPrinterParser.java
  - JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
  - JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
  - JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
  - JDK-8282467: add extra diagnostics for JDK-8268184
  - JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
  - JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
  - JDK-8285497: Add system property for Java SE specification
    maintenance version
  - JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
  - JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
  - JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
  - JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
  - JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
  - JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
  - JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
  - JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
  - JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
  - JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
  - JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
  - JDK-8293232: Fix race condition in pkcs11 SessionManager
  - JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
  - JDK-8294548: Problem list SA core file tests on macosx-x64
    due to JDK-8294316
  - JDK-8294906: Memory leak in PKCS11 NSS TLS server
  - JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
  - JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
  - JDK-8297000: [jib] Add more friendly warning for proxy issues
  - JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
  - JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
  - JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
  - JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
  - JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
  - JDK-8300490: Spaces in name of MacOS Code Signing Identity
    are not correctly handled after JDK-8293550
  - JDK-8301119: Support for GB18030-2022
  - JDK-8301170: perfMemory_windows.cpp add free_security_attr to
    early returns
  - JDK-8301401: Allow additional characters for GB18030-2022
    support
  - JDK-8302151: BMPImageReader throws an exception reading BMP
    images
  - JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
  - JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
  - JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
  - JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
  - JDK-8303440: The 'ZonedDateTime.parse' may not accept the
    'UTC+XX' zone id
  - JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
  - JDK-8303476: Add the runtime version in the release file of a
    JDK image
  - JDK-8303482: Update LCMS to 2.15
  - JDK-8303564: C2: 'Bad graph detected in build_loop_late'
    after a CMove is wrongly split thru phi
  - JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
  - JDK-8303822: gtestMain should give more helpful output
  - JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
  - JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
  - JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
  - JDK-8304291: [AIX] Broken build after JDK-8301998
  - JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
  - JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
  - JDK-8304760: Add 2 Microsoft TLS roots
  - JDK-8305113: (tz) Update Timezone Data to 2023c
  - JDK-8305400: ISO 4217 Amendment 175 Update
  - JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
    JDK10 bootstrap VM
  - JDK-8305682: Update the javadoc in the Character class to
    state support for GB 18030-2022 Implementation Level 2
  - JDK-8305711: Arm: C2 always enters slowpath for monitorexit
  - JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
  - JDK-8305975: Add TWCA Global Root CA
  - JDK-8306543: GHA: MSVC installation is failing
  - JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
  - JDK-8306664: GHA: Update MSVC version to latest stepping
  - JDK-8306768: CodeCache Analytics reports wrong threshold
  - JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
  - JDK-8307134: Add GTS root CAs
  - JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
    fails after backport of JDK-8303861
  - JDK-8308006: Missing NMT memory tagging in CMS
  - JDK-8308884: [17u/11u] Backout JDK-8297951
  - JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
    fails intermittently
  - JDK-8311465: [11u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-11"/>
	<updated date="2023-08-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207922">SUSE bug 1207922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213473">SUSE bug 1213473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213474">SUSE bug 1213474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213475">SUSE bug 1213475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213479">SUSE bug 1213479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213481">SUSE bug 1213481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213482">SUSE bug 1213482</bugzilla>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-22006/">CVE-2023-22006</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-22036/">CVE-2023-22036</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-22041/">CVE-2023-22041</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-22044/">CVE-2023-22044</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-22045/">CVE-2023-22045</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-22049/">CVE-2023-22049</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25193/">CVE-2023-25193</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009774485" comment="java-11-openjdk-11.0.20.0-150000.3.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774486" comment="java-11-openjdk-demo-11.0.20.0-150000.3.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774487" comment="java-11-openjdk-devel-11.0.20.0-150000.3.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774488" comment="java-11-openjdk-headless-11.0.20.0-150000.3.99.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140217" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211658" ref_url="https://bugzilla.suse.com/1211658" source="BUGZILLA"/>
		<reference ref_id="1211659" ref_url="https://bugzilla.suse.com/1211659" source="BUGZILLA"/>
		<reference ref_id="1211846" ref_url="https://bugzilla.suse.com/1211846" source="BUGZILLA"/>
		<reference ref_id="1212863" ref_url="https://bugzilla.suse.com/1212863" source="BUGZILLA"/>
		<reference ref_id="1213905" ref_url="https://bugzilla.suse.com/1213905" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-48503" ref_url="https://www.suse.com/security/cve/CVE-2022-48503/" source="CVE"/>
		<reference ref_id="CVE-2023-28204" ref_url="https://www.suse.com/security/cve/CVE-2023-28204/" source="CVE"/>
		<reference ref_id="CVE-2023-32373" ref_url="https://www.suse.com/security/cve/CVE-2023-32373/" source="CVE"/>
		<reference ref_id="CVE-2023-32435" ref_url="https://www.suse.com/security/cve/CVE-2023-32435/" source="CVE"/>
		<reference ref_id="CVE-2023-32439" ref_url="https://www.suse.com/security/cve/CVE-2023-32439/" source="CVE"/>
		<reference ref_id="CVE-2023-38133" ref_url="https://www.suse.com/security/cve/CVE-2023-38133/" source="CVE"/>
		<reference ref_id="CVE-2023-38572" ref_url="https://www.suse.com/security/cve/CVE-2023-38572/" source="CVE"/>
		<reference ref_id="CVE-2023-38592" ref_url="https://www.suse.com/security/cve/CVE-2023-38592/" source="CVE"/>
		<reference ref_id="CVE-2023-38594" ref_url="https://www.suse.com/security/cve/CVE-2023-38594/" source="CVE"/>
		<reference ref_id="CVE-2023-38595" ref_url="https://www.suse.com/security/cve/CVE-2023-38595/" source="CVE"/>
		<reference ref_id="CVE-2023-38597" ref_url="https://www.suse.com/security/cve/CVE-2023-38597/" source="CVE"/>
		<reference ref_id="CVE-2023-38599" ref_url="https://www.suse.com/security/cve/CVE-2023-38599/" source="CVE"/>
		<reference ref_id="CVE-2023-38600" ref_url="https://www.suse.com/security/cve/CVE-2023-38600/" source="CVE"/>
		<reference ref_id="CVE-2023-38611" ref_url="https://www.suse.com/security/cve/CVE-2023-38611/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3300-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-August/030997.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:        

Update to version 2.40.5 (bsc#1213905):

- CVE-2023-38133: Fixed information disclosure.
- CVE-2023-38572: Fixed Same-Origin-Policy bypass.
- CVE-2023-38592: Fixed arbitrary code execution.
- CVE-2023-38594: Fixed arbitrary code execution.
- CVE-2023-38595: Fixed arbitrary code execution.
- CVE-2023-38597: Fixed arbitrary code execution.
- CVE-2023-38599: Fixed sensitive user information tracking.
- CVE-2023-38600: Fixed arbitrary code execution.
- CVE-2023-38611: Fixed arbitrary code execution.
- CVE-2022-48503: Fixed arbitrary code execution.
- CVE-2023-32439: Fixed arbitrary code execution.
- CVE-2023-32435: Fixed arbitrary code execution.
                                                                                               
Add security patches (bsc#1211846):                                                            
                                                                                               
- CVE-2023-28204: Fixed processing of web content that may disclose sensitive information (bsc#1211659).
- CVE-2023-32373: Fixed processing of maliciously crafted web content that may lead to arbitrary code execution (bsc#1211658).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-14"/>
	<updated date="2023-08-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211658">SUSE bug 1211658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211659">SUSE bug 1211659</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211846">SUSE bug 1211846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212863">SUSE bug 1212863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213905">SUSE bug 1213905</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-48503/">CVE-2022-48503</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-28204/">CVE-2023-28204</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-32373/">CVE-2023-32373</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-32435/">CVE-2023-32435</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-32439/">CVE-2023-32439</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-38133/">CVE-2023-38133</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-38572/">CVE-2023-38572</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-38592/">CVE-2023-38592</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-38594/">CVE-2023-38594</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-38595/">CVE-2023-38595</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-38597/">CVE-2023-38597</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-38599/">CVE-2023-38599</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-38600/">CVE-2023-38600</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-38611/">CVE-2023-38611</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009777543" comment="libjavascriptcoregtk-4_0-18-2.40.5-150000.3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009777544" comment="libwebkit2gtk-4_0-37-2.40.5-150000.3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009777545" comment="libwebkit2gtk3-lang-2.40.5-150000.3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009777546" comment="typelib-1_0-JavaScriptCore-4_0-2.40.5-150000.3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009777547" comment="typelib-1_0-WebKit2-4_0-2.40.5-150000.3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009777548" comment="typelib-1_0-WebKit2WebExtension-4_0-2.40.5-150000.3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009777549" comment="webkit2gtk-4_0-injected-bundles-2.40.5-150000.3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009777550" comment="webkit2gtk3-devel-2.40.5-150000.3.144.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140218" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214059" ref_url="https://bugzilla.suse.com/1214059" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-39417" ref_url="https://www.suse.com/security/cve/CVE-2023-39417/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3346-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-August/031067.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

This update for postgresql12 fixes the following issues:

- CVE-2023-39417: Fixed potential SQL injection for trusted extensions (bsc#1214059).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-17"/>
	<updated date="2023-08-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1214059">SUSE bug 1214059</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-39417/">CVE-2023-39417</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009779115" comment="libecpg6-12.16-150100.3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779116" comment="libpq5-12.16-150100.3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779117" comment="libpq5-32bit-12.16-150100.3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779118" comment="postgresql12-12.16-150100.3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779119" comment="postgresql12-contrib-12.16-150100.3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779120" comment="postgresql12-devel-12.16-150100.3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779121" comment="postgresql12-docs-12.16-150100.3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779122" comment="postgresql12-plperl-12.16-150100.3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779123" comment="postgresql12-plpython-12.16-150100.3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779124" comment="postgresql12-pltcl-12.16-150100.3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779125" comment="postgresql12-server-12.16-150100.3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779126" comment="postgresql12-server-devel-12.16-150100.3.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140219" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206418" ref_url="https://bugzilla.suse.com/1206418" source="BUGZILLA"/>
		<reference ref_id="1214099" ref_url="https://bugzilla.suse.com/1214099" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40982" ref_url="https://www.suse.com/security/cve/CVE-2022-40982/" source="CVE"/>
		<reference ref_id="CVE-2022-41804" ref_url="https://www.suse.com/security/cve/CVE-2022-41804/" source="CVE"/>
		<reference ref_id="CVE-2023-23908" ref_url="https://www.suse.com/security/cve/CVE-2023-23908/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3359-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-August/031089.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20230808 release. (bsc#1214099)
- CVE-2022-40982: Fixed a potential security vulnerability in some Intel? Processors which may allow information disclosure.
- CVE-2023-23908: Fixed a potential security vulnerability in some 3rd Generation Intel? Xeon? Scalable processors which may allow information disclosure.
- CVE-2022-41804: Fixed a potential security vulnerability in some Intel? Xeon? Processors with Intel? Software Guard Extensions (SGX) which may allow escalation of privilege.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-18"/>
	<updated date="2023-08-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206418">SUSE bug 1206418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214099">SUSE bug 1214099</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40982/">CVE-2022-40982</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41804/">CVE-2022-41804</cve>
	<cve impact="important" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-23908/">CVE-2023-23908</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009778372" comment="ucode-intel-20230808-150100.3.223.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140220" version="1" class="patch">
	<metadata>
		<title>Security update for jasper (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188437" ref_url="https://bugzilla.suse.com/1188437" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27845" ref_url="https://www.suse.com/security/cve/CVE-2021-27845/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0562-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013716.html" source="SUSE-SU"/>
		<description>
This update for jasper fixes the following issues:

- CVE-2021-27845: Fixed divide-by-zery issue in cp_create() (bsc#1188437).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-09"/>
	<updated date="2023-02-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1188437">SUSE bug 1188437</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-27845/">CVE-2021-27845</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009737056" comment="libjasper-devel-2.0.14-3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737057" comment="libjasper4-2.0.14-3.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140221" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213287" ref_url="https://bugzilla.suse.com/1213287" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-20569" ref_url="https://www.suse.com/security/cve/CVE-2023-20569/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3389-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-August/031136.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

- CVE-2023-20569: Fixed AMD 19h ucode to mitigate a side channel vulnerability in some of the AMD CPUs. (bsc#1213287)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-23"/>
	<updated date="2023-08-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1213287">SUSE bug 1213287</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20569/">CVE-2023-20569</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009777988" comment="kernel-firmware-20200107-150100.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009777989" comment="ucode-amd-20200107-150100.3.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140222" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206418" ref_url="https://bugzilla.suse.com/1206418" source="BUGZILLA"/>
		<reference ref_id="1207088" ref_url="https://bugzilla.suse.com/1207088" source="BUGZILLA"/>
		<reference ref_id="1210584" ref_url="https://bugzilla.suse.com/1210584" source="BUGZILLA"/>
		<reference ref_id="1211738" ref_url="https://bugzilla.suse.com/1211738" source="BUGZILLA"/>
		<reference ref_id="1211867" ref_url="https://bugzilla.suse.com/1211867" source="BUGZILLA"/>
		<reference ref_id="1212301" ref_url="https://bugzilla.suse.com/1212301" source="BUGZILLA"/>
		<reference ref_id="1212741" ref_url="https://bugzilla.suse.com/1212741" source="BUGZILLA"/>
		<reference ref_id="1212835" ref_url="https://bugzilla.suse.com/1212835" source="BUGZILLA"/>
		<reference ref_id="1213059" ref_url="https://bugzilla.suse.com/1213059" source="BUGZILLA"/>
		<reference ref_id="1213167" ref_url="https://bugzilla.suse.com/1213167" source="BUGZILLA"/>
		<reference ref_id="1213286" ref_url="https://bugzilla.suse.com/1213286" source="BUGZILLA"/>
		<reference ref_id="1213287" ref_url="https://bugzilla.suse.com/1213287" source="BUGZILLA"/>
		<reference ref_id="1213546" ref_url="https://bugzilla.suse.com/1213546" source="BUGZILLA"/>
		<reference ref_id="1213585" ref_url="https://bugzilla.suse.com/1213585" source="BUGZILLA"/>
		<reference ref_id="1213586" ref_url="https://bugzilla.suse.com/1213586" source="BUGZILLA"/>
		<reference ref_id="1213588" ref_url="https://bugzilla.suse.com/1213588" source="BUGZILLA"/>
		<reference ref_id="1213970" ref_url="https://bugzilla.suse.com/1213970" source="BUGZILLA"/>
		<reference ref_id="1214019" ref_url="https://bugzilla.suse.com/1214019" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40982" ref_url="https://www.suse.com/security/cve/CVE-2022-40982/" source="CVE"/>
		<reference ref_id="CVE-2023-0459" ref_url="https://www.suse.com/security/cve/CVE-2023-0459/" source="CVE"/>
		<reference ref_id="CVE-2023-20569" ref_url="https://www.suse.com/security/cve/CVE-2023-20569/" source="CVE"/>
		<reference ref_id="CVE-2023-20593" ref_url="https://www.suse.com/security/cve/CVE-2023-20593/" source="CVE"/>
		<reference ref_id="CVE-2023-2985" ref_url="https://www.suse.com/security/cve/CVE-2023-2985/" source="CVE"/>
		<reference ref_id="CVE-2023-34319" ref_url="https://www.suse.com/security/cve/CVE-2023-34319/" source="CVE"/>
		<reference ref_id="CVE-2023-35001" ref_url="https://www.suse.com/security/cve/CVE-2023-35001/" source="CVE"/>
		<reference ref_id="CVE-2023-3567" ref_url="https://www.suse.com/security/cve/CVE-2023-3567/" source="CVE"/>
		<reference ref_id="CVE-2023-3609" ref_url="https://www.suse.com/security/cve/CVE-2023-3609/" source="CVE"/>
		<reference ref_id="CVE-2023-3611" ref_url="https://www.suse.com/security/cve/CVE-2023-3611/" source="CVE"/>
		<reference ref_id="CVE-2023-3776" ref_url="https://www.suse.com/security/cve/CVE-2023-3776/" source="CVE"/>
		<reference ref_id="CVE-2023-4133" ref_url="https://www.suse.com/security/cve/CVE-2023-4133/" source="CVE"/>
		<reference ref_id="CVE-2023-4194" ref_url="https://www.suse.com/security/cve/CVE-2023-4194/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3392-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015997.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).
- CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
- CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
- CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).
- CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).
- CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
- CVE-2023-3609: Fixed reference counter leak leading to  overflow in net/sched (bsc#1213586).
- CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
- CVE-2023-3776: Fixed improper refcount update in  cls_fw leads to use-after-free (bsc#1213588).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open()  bsc#1214019).

The following non-security bugs were fixed:

- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- cpufeatures: allow adding more cpuid words
- get module prefix from kmod (bsc#1212835).
- kernel-binary.spec.in: remove superfluous %% in supplements fixes: 02b7735e0caf ('rpm/kernel-binary.spec.in: add enhances and supplements tags to in-tree kmps')
- kernel-docs: add buildrequires on python3-base when using python3 the python3 binary is provided by python3-base.
- kernel-docs: use python3 together with python3-sphinx (bsc#1212741).
- keys: change keyring_serialise_link_sem to a mutex (bsc#1207088).
- keys: fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).
- keys: hoist locking out of __key_link_begin() (bsc#1207088).
- net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).
- net: mana: add support for vlan tagging (bsc#1212301).
- readme.branch: add myself as co-maintainer
- remove more packaging cruft for sle &amp;lt; 12 sp3
- rpm/check-for-config-changes: ignore also pahole_has_* we now also have options like config_pahole_has_lang_exclude.
- rpm/check-for-config-changes: ignore also riscv_isa_* and dynamic_sigframe they depend on config_toolchain_has_*.
- timers: add shutdown mechanism to the internal functions (bsc#1213970).
- timers: provide timer_shutdown[_sync]() (bsc#1213970).
- timers: rename del_timer() to timer_delete() (bsc#1213970).
- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: replace bug_on()s (bsc#1213970).
- timers: silently ignore timers with a null function (bsc#1213970).
- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: update kernel-doc for various functions (bsc#1213970).
- timers: use del_timer_sync() even on up (bsc#1213970).
- ubi: ensure that vid header offset + vid header size &amp;lt;= alloc, size (bsc#1210584).
- ubi: fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).
- usrmerge: Adjust module path in the kernel sources (bsc#1212835).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-23"/>
	<updated date="2023-08-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206418">SUSE bug 1206418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207088">SUSE bug 1207088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210584">SUSE bug 1210584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211738">SUSE bug 1211738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211867">SUSE bug 1211867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212301">SUSE bug 1212301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212741">SUSE bug 1212741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212835">SUSE bug 1212835</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213059">SUSE bug 1213059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213167">SUSE bug 1213167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213286">SUSE bug 1213286</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213287">SUSE bug 1213287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213546">SUSE bug 1213546</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213585">SUSE bug 1213585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213586">SUSE bug 1213586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213588">SUSE bug 1213588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213970">SUSE bug 1213970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214019">SUSE bug 1214019</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40982/">CVE-2022-40982</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-0459/">CVE-2023-0459</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20569/">CVE-2023-20569</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20593/">CVE-2023-20593</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2985/">CVE-2023-2985</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-34319/">CVE-2023-34319</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-35001/">CVE-2023-35001</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3567/">CVE-2023-3567</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3609/">CVE-2023-3609</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3611/">CVE-2023-3611</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3776/">CVE-2023-3776</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4133/">CVE-2023-4133</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-4194/">CVE-2023-4194</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009779651" comment="kernel-default-4.12.14-150100.197.154.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779652" comment="kernel-default-base-4.12.14-150100.197.154.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779653" comment="kernel-default-devel-4.12.14-150100.197.154.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779654" comment="kernel-devel-4.12.14-150100.197.154.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779655" comment="kernel-docs-4.12.14-150100.197.154.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779656" comment="kernel-macros-4.12.14-150100.197.154.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779657" comment="kernel-obs-build-4.12.14-150100.197.154.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779658" comment="kernel-source-4.12.14-150100.197.154.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779659" comment="kernel-syms-4.12.14-150100.197.154.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140223" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207413" ref_url="https://bugzilla.suse.com/1207413" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-48281" ref_url="https://www.suse.com/security/cve/CVE-2022-48281/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0342-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013719.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-48281: Fixed a buffer overflow that could be triggered via
  a crafted image (bsc#1207413).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-10"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207413">SUSE bug 1207413</bugzilla>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-48281/">CVE-2022-48281</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009735646" comment="libtiff-devel-4.0.9-150000.45.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009735647" comment="libtiff5-4.0.9-150000.45.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009735258" comment="libtiff5-32bit-4.0.9-150000.45.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140224" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206189" ref_url="https://bugzilla.suse.com/1206189" source="BUGZILLA"/>
		<reference ref_id="1207447" ref_url="https://bugzilla.suse.com/1207447" source="BUGZILLA"/>
		<reference ref_id="1207663" ref_url="https://bugzilla.suse.com/1207663" source="BUGZILLA"/>
		<reference ref_id="1207664" ref_url="https://bugzilla.suse.com/1207664" source="BUGZILLA"/>
		<reference ref_id="1207665" ref_url="https://bugzilla.suse.com/1207665" source="BUGZILLA"/>
		<reference ref_id="1207667" ref_url="https://bugzilla.suse.com/1207667" source="BUGZILLA"/>
		<reference ref_id="1207668" ref_url="https://bugzilla.suse.com/1207668" source="BUGZILLA"/>
		<reference ref_id="1207669" ref_url="https://bugzilla.suse.com/1207669" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4345" ref_url="https://www.suse.com/security/cve/CVE-2022-4345/" source="CVE"/>
		<reference ref_id="CVE-2023-0411" ref_url="https://www.suse.com/security/cve/CVE-2023-0411/" source="CVE"/>
		<reference ref_id="CVE-2023-0412" ref_url="https://www.suse.com/security/cve/CVE-2023-0412/" source="CVE"/>
		<reference ref_id="CVE-2023-0413" ref_url="https://www.suse.com/security/cve/CVE-2023-0413/" source="CVE"/>
		<reference ref_id="CVE-2023-0415" ref_url="https://www.suse.com/security/cve/CVE-2023-0415/" source="CVE"/>
		<reference ref_id="CVE-2023-0416" ref_url="https://www.suse.com/security/cve/CVE-2023-0416/" source="CVE"/>
		<reference ref_id="CVE-2023-0417" ref_url="https://www.suse.com/security/cve/CVE-2023-0417/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0343-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013723.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

- Updated to version 3.6.11 (bsc#1207447):
  - CVE-2023-0417: Fixed a memory leak in the NFS dissector (bsc#1207669).
  - CVE-2023-0413: Fixed a crash in the dissection engine (bsc#1207665).
  - CVE-2023-0416: Fixed a crash in the GNW dissector (bsc#1207668).
  - CVE-2023-0415: Fixed a crash in the iSCSI dissector (bsc#1207667).
  - CVE-2023-0411: Fixed several issues where an excessive CPU
    consumption could be triggered in multiple dissectors (bsc#1207663).
  - CVE-2023-0412: Fixed a crash in the TIPC dissector (bsc#1207664).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-10"/>
	<updated date="2023-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206189">SUSE bug 1206189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207447">SUSE bug 1207447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207663">SUSE bug 1207663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207664">SUSE bug 1207664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207665">SUSE bug 1207665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207667">SUSE bug 1207667</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207668">SUSE bug 1207668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207669">SUSE bug 1207669</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-4345/">CVE-2022-4345</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0411/">CVE-2023-0411</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0412/">CVE-2023-0412</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0413/">CVE-2023-0413</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0415/">CVE-2023-0415</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0416/">CVE-2023-0416</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0417/">CVE-2023-0417</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009736936" comment="libwireshark15-3.6.11-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736937" comment="libwiretap12-3.6.11-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736938" comment="libwsutil13-3.6.11-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736939" comment="wireshark-3.6.11-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736940" comment="wireshark-devel-3.6.11-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736941" comment="wireshark-ui-qt-3.6.11-150000.3.83.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140225" version="1" class="patch">
	<metadata>
		<title>Security update for krb5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214054" ref_url="https://bugzilla.suse.com/1214054" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-36054" ref_url="https://www.suse.com/security/cve/CVE-2023-36054/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3434-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/016024.html" source="SUSE-SU"/>
		<description>
This update for krb5 fixes the following issues:

- CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-24"/>
	<updated date="2023-08-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214054">SUSE bug 1214054</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-36054/">CVE-2023-36054</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009778733" comment="krb5-1.16.3-150100.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009778734" comment="krb5-32bit-1.16.3-150100.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009778735" comment="krb5-client-1.16.3-150100.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009778736" comment="krb5-devel-1.16.3-150100.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009778737" comment="krb5-plugin-kdb-ldap-1.16.3-150100.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009778738" comment="krb5-plugin-preauth-otp-1.16.3-150100.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009778739" comment="krb5-plugin-preauth-pkinit-1.16.3-150100.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009778740" comment="krb5-server-1.16.3-150100.3.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140226" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214342" ref_url="https://bugzilla.suse.com/1214342" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-20197" ref_url="https://www.suse.com/security/cve/CVE-2023-20197/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3456-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/016037.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

- Update to 0.103.9
- CVE-2023-20197: Fixed a possible denial of service vulnerability in the HFS+ file parser. (bsc#1214342)  
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-28"/>
	<updated date="2023-08-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214342">SUSE bug 1214342</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-20197/">CVE-2023-20197</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009779408" comment="clamav-0.103.9-150000.3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779409" comment="clamav-devel-0.103.9-150000.3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779410" comment="libclamav9-0.103.9-150000.3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779411" comment="libfreshclam2-0.103.9-150000.3.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140227" version="1" class="patch">
	<metadata>
		<title>Security update for ca-certificates-mozilla (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214248" ref_url="https://bugzilla.suse.com/1214248" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:3462-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/016040.html" source="SUSE-SU"/>
		<description>
This update for ca-certificates-mozilla fixes the following issues:

- Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248)
  Added:
  - Atos TrustedRoot Root CA ECC G2 2020
  - Atos TrustedRoot Root CA ECC TLS 2021
  - Atos TrustedRoot Root CA RSA G2 2020
  - Atos TrustedRoot Root CA RSA TLS 2021
  - BJCA Global Root CA1
  - BJCA Global Root CA2
  - LAWtrust Root CA2 (4096)
  - Sectigo Public Email Protection Root E46
  - Sectigo Public Email Protection Root R46
  - Sectigo Public Server Authentication Root E46
  - Sectigo Public Server Authentication Root R46
  - SSL.com Client ECC Root CA 2022
  - SSL.com Client RSA Root CA 2022
  - SSL.com TLS ECC Root CA 2022
  - SSL.com TLS RSA Root CA 2022
  Removed CAs:
  - Chambers of Commerce Root
  - E-Tugra Certification Authority
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  - Hongkong Post Root CA 1
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-28"/>
	<updated date="2023-08-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214248">SUSE bug 1214248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009778741" comment="ca-certificates-mozilla-2.62-150000.4.41.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140228" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213616" ref_url="https://bugzilla.suse.com/1213616" source="BUGZILLA"/>
		<reference ref_id="1214082" ref_url="https://bugzilla.suse.com/1214082" source="BUGZILLA"/>
		<reference ref_id="1214083" ref_url="https://bugzilla.suse.com/1214083" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40982" ref_url="https://www.suse.com/security/cve/CVE-2022-40982/" source="CVE"/>
		<reference ref_id="CVE-2023-20569" ref_url="https://www.suse.com/security/cve/CVE-2023-20569/" source="CVE"/>
		<reference ref_id="CVE-2023-20593" ref_url="https://www.suse.com/security/cve/CVE-2023-20593/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3494-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/016051.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2023-20569: Fixed x86/AMD Speculative  Return Stack Overflow (XSA-434) (bsc#1214082).
- CVE-2022-40982: Fixed x86/Intel Gather Data Sampling (XSA-435) (bsc#1214083).
- CVE-2023-20593: Fixed x86/AMD Zenbleed (XSA-433) (bsc#1213616).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-30"/>
	<updated date="2023-08-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213616">SUSE bug 1213616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214082">SUSE bug 1214082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214083">SUSE bug 1214083</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40982/">CVE-2022-40982</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20569/">CVE-2023-20569</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20593/">CVE-2023-20593</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009780502" comment="xen-4.12.4_36-150100.3.89.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009780503" comment="xen-devel-4.12.4_36-150100.3.89.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009780504" comment="xen-libs-4.12.4_36-150100.3.89.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009780505" comment="xen-tools-4.12.4_36-150100.3.89.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009780506" comment="xen-tools-domU-4.12.4_36-150100.3.89.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140229" version="1" class="patch">
	<metadata>
		<title>Security update for open-vm-tools (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212143" ref_url="https://bugzilla.suse.com/1212143" source="BUGZILLA"/>
		<reference ref_id="1214566" ref_url="https://bugzilla.suse.com/1214566" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-20867" ref_url="https://www.suse.com/security/cve/CVE-2023-20867/" source="CVE"/>
		<reference ref_id="CVE-2023-20900" ref_url="https://www.suse.com/security/cve/CVE-2023-20900/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3504-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-August/031291.html" source="SUSE-SU"/>
		<description>
This update for open-vm-tools fixes the following issues:

- CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143).
- CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-31"/>
	<updated date="2023-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212143">SUSE bug 1212143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214566">SUSE bug 1214566</bugzilla>
	<cve impact="low" cvss3="3.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-20867/">CVE-2023-20867</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-20900/">CVE-2023-20900</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009781184" comment="libvmtools-devel-11.3.5-150100.4.37.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781185" comment="libvmtools0-11.3.5-150100.4.37.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781186" comment="open-vm-tools-11.3.5-150100.4.37.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781187" comment="open-vm-tools-desktop-11.3.5-150100.4.37.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781188" comment="open-vm-tools-sdmp-11.3.5-150100.4.37.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140230" version="1" class="patch">
	<metadata>
		<title>Security update for glib2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183533" ref_url="https://bugzilla.suse.com/1183533" source="BUGZILLA"/>
		<reference ref_id="1211945" ref_url="https://bugzilla.suse.com/1211945" source="BUGZILLA"/>
		<reference ref_id="1211946" ref_url="https://bugzilla.suse.com/1211946" source="BUGZILLA"/>
		<reference ref_id="1211947" ref_url="https://bugzilla.suse.com/1211947" source="BUGZILLA"/>
		<reference ref_id="1211948" ref_url="https://bugzilla.suse.com/1211948" source="BUGZILLA"/>
		<reference ref_id="1211951" ref_url="https://bugzilla.suse.com/1211951" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28153" ref_url="https://www.suse.com/security/cve/CVE-2021-28153/" source="CVE"/>
		<reference ref_id="CVE-2023-29499" ref_url="https://www.suse.com/security/cve/CVE-2023-29499/" source="CVE"/>
		<reference ref_id="CVE-2023-32611" ref_url="https://www.suse.com/security/cve/CVE-2023-32611/" source="CVE"/>
		<reference ref_id="CVE-2023-32636" ref_url="https://www.suse.com/security/cve/CVE-2023-32636/" source="CVE"/>
		<reference ref_id="CVE-2023-32643" ref_url="https://www.suse.com/security/cve/CVE-2023-32643/" source="CVE"/>
		<reference ref_id="CVE-2023-32665" ref_url="https://www.suse.com/security/cve/CVE-2023-32665/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016101.html" source="SUSE-SU"/>
		<description>
This update for glib2 fixes the following issues:

- CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files. (bsc#1183533)
- CVE-2023-32665: Fixed GVariant deserialisation which does not match spec for non-normal data. (bsc#1211945)
- CVE-2023-32643: Fixed a heap-buffer-overflow in g_variant_serialised_get_child(). (bsc#1211946)
- CVE-2023-29499: Fixed GVariant offset table entry size which is not checked in is_normal(). (bsc#1211947)
- CVE-2023-32636: Fixed a wrong timeout in fuzz_variant_text(). (bsc#1211948)
- CVE-2023-32611: Fixed an issue where g_variant_byteswap() can take a long time with some non-normal inputs. (bsc#1211951)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-05"/>
	<updated date="2023-09-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183533">SUSE bug 1183533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211945">SUSE bug 1211945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211946">SUSE bug 1211946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211947">SUSE bug 1211947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211948">SUSE bug 1211948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211951">SUSE bug 1211951</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-28153/">CVE-2021-28153</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-29499/">CVE-2023-29499</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32611/">CVE-2023-32611</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32636/">CVE-2023-32636</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-32643/">CVE-2023-32643</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32665/">CVE-2023-32665</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009779256" comment="glib2-devel-2.54.3-150000.4.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779257" comment="glib2-lang-2.54.3-150000.4.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779258" comment="glib2-tools-2.54.3-150000.4.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779259" comment="libgio-2_0-0-2.54.3-150000.4.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779260" comment="libgio-2_0-0-32bit-2.54.3-150000.4.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779261" comment="libglib-2_0-0-2.54.3-150000.4.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779262" comment="libglib-2_0-0-32bit-2.54.3-150000.4.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779263" comment="libgmodule-2_0-0-2.54.3-150000.4.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779264" comment="libgmodule-2_0-0-32bit-2.54.3-150000.4.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779265" comment="libgobject-2_0-0-2.54.3-150000.4.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779266" comment="libgobject-2_0-0-32bit-2.54.3-150000.4.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779267" comment="libgthread-2_0-0-2.54.3-150000.4.29.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140231" version="1" class="patch">
	<metadata>
		<title>Security update for docker (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210797" ref_url="https://bugzilla.suse.com/1210797" source="BUGZILLA"/>
		<reference ref_id="1212368" ref_url="https://bugzilla.suse.com/1212368" source="BUGZILLA"/>
		<reference ref_id="1213120" ref_url="https://bugzilla.suse.com/1213120" source="BUGZILLA"/>
		<reference ref_id="1213229" ref_url="https://bugzilla.suse.com/1213229" source="BUGZILLA"/>
		<reference ref_id="1213500" ref_url="https://bugzilla.suse.com/1213500" source="BUGZILLA"/>
		<reference ref_id="1214107" ref_url="https://bugzilla.suse.com/1214107" source="BUGZILLA"/>
		<reference ref_id="1214108" ref_url="https://bugzilla.suse.com/1214108" source="BUGZILLA"/>
		<reference ref_id="1214109" ref_url="https://bugzilla.suse.com/1214109" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28840" ref_url="https://www.suse.com/security/cve/CVE-2023-28840/" source="CVE"/>
		<reference ref_id="CVE-2023-28841" ref_url="https://www.suse.com/security/cve/CVE-2023-28841/" source="CVE"/>
		<reference ref_id="CVE-2023-28842" ref_url="https://www.suse.com/security/cve/CVE-2023-28842/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3536-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016100.html" source="SUSE-SU"/>
		<description>
This update for docker fixes the following issues:

- Update to Docker 24.0.5-ce.

  See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt; bsc#1213229 

- Update to Docker 24.0.4-ce.

  See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500

- Update to Docker 24.0.3-ce.

  See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120

- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.

- Add docker-rootless-extras subpackage (https://docs.docker.com/engine/security/rootless)

- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368

  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797

- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.

- was rebuilt against current GO compiler.

		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-05"/>
	<updated date="2023-09-05"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1210797">SUSE bug 1210797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212368">SUSE bug 1212368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213120">SUSE bug 1213120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213229">SUSE bug 1213229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213500">SUSE bug 1213500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214107">SUSE bug 1214107</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214108">SUSE bug 1214108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214109">SUSE bug 1214109</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-28840/">CVE-2023-28840</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-28841/">CVE-2023-28841</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-28842/">CVE-2023-28842</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009781409" comment="docker-24.0.5_ce-150000.185.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781406" comment="docker-bash-completion-24.0.5_ce-150000.185.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140232" version="1" class="patch">
	<metadata>
		<title>Security update for container-suseconnect (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212475" ref_url="https://bugzilla.suse.com/1212475" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:3539-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016098.html" source="SUSE-SU"/>
		<description>

This update of container-suseconnect fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-05"/>
	<updated date="2023-09-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212475">SUSE bug 1212475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781033" comment="container-suseconnect-2.4.0-150000.4.36.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140233" version="1" class="patch">
	<metadata>
		<title>Security update for libssh2_org (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214527" ref_url="https://bugzilla.suse.com/1214527" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-22218" ref_url="https://www.suse.com/security/cve/CVE-2020-22218/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3555-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031382.html" source="SUSE-SU"/>
		<description>
This update for libssh2_org fixes the following issues:

- CVE-2020-22218: Fixed a bug in _libssh2_packet_add() which allows to access out of bounds memory. (bsc#1214527)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-08"/>
	<updated date="2023-09-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214527">SUSE bug 1214527</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22218/">CVE-2020-22218</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009780148" comment="libssh2-1-1.9.0-150000.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009779886" comment="libssh2-1-32bit-1.9.0-150000.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009780149" comment="libssh2-devel-1.9.0-150000.4.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140234" version="1" class="patch">
	<metadata>
		<title>Security update for geoipupdate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212475" ref_url="https://bugzilla.suse.com/1212475" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:3560-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031377.html" source="SUSE-SU"/>
		<description>

This update of geoipupdate fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-08"/>
	<updated date="2023-09-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212475">SUSE bug 1212475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009781321" comment="geoipupdate-4.2.2-150000.1.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781322" comment="geoipupdate-legacy-4.2.2-150000.1.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140235" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213746" ref_url="https://bugzilla.suse.com/1213746" source="BUGZILLA"/>
		<reference ref_id="1214606" ref_url="https://bugzilla.suse.com/1214606" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-4051" ref_url="https://www.suse.com/security/cve/CVE-2023-4051/" source="CVE"/>
		<reference ref_id="CVE-2023-4053" ref_url="https://www.suse.com/security/cve/CVE-2023-4053/" source="CVE"/>
		<reference ref_id="CVE-2023-4574" ref_url="https://www.suse.com/security/cve/CVE-2023-4574/" source="CVE"/>
		<reference ref_id="CVE-2023-4575" ref_url="https://www.suse.com/security/cve/CVE-2023-4575/" source="CVE"/>
		<reference ref_id="CVE-2023-4576" ref_url="https://www.suse.com/security/cve/CVE-2023-4576/" source="CVE"/>
		<reference ref_id="CVE-2023-4577" ref_url="https://www.suse.com/security/cve/CVE-2023-4577/" source="CVE"/>
		<reference ref_id="CVE-2023-4578" ref_url="https://www.suse.com/security/cve/CVE-2023-4578/" source="CVE"/>
		<reference ref_id="CVE-2023-4580" ref_url="https://www.suse.com/security/cve/CVE-2023-4580/" source="CVE"/>
		<reference ref_id="CVE-2023-4581" ref_url="https://www.suse.com/security/cve/CVE-2023-4581/" source="CVE"/>
		<reference ref_id="CVE-2023-4582" ref_url="https://www.suse.com/security/cve/CVE-2023-4582/" source="CVE"/>
		<reference ref_id="CVE-2023-4583" ref_url="https://www.suse.com/security/cve/CVE-2023-4583/" source="CVE"/>
		<reference ref_id="CVE-2023-4584" ref_url="https://www.suse.com/security/cve/CVE-2023-4584/" source="CVE"/>
		<reference ref_id="CVE-2023-4585" ref_url="https://www.suse.com/security/cve/CVE-2023-4585/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3562-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016118.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox was updated to Extended Support Release 115.2.0 ESR (MFSA 2023-36) (bsc#1214606).

- CVE-2023-4574: Fixed memory corruption in IPC ColorPickerShownCallback (bmo#1846688)
- CVE-2023-4575: Fixed memory corruption in IPC FilePickerShownCallback  (bmo#1846689)
- CVE-2023-4576: Fixed integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694)
- CVE-2023-4577: Fixed memory corruption in JIT UpdateRegExpStatics (bmo#1847397)
- CVE-2023-4051: Fixed full screen notification obscured by file open dialog (bmo#1821884)
- CVE-2023-4578: Fixed Out of Memory Exception in SpiderMonkey could have triggered an (bmo#1839007)
- CVE-2023-4053: Fixed full screen notification obscured by external program (bmo#1839079)
- CVE-2023-4580: Fixed push notifications saved to disk unencrypted (bmo#1843046)
- CVE-2023-4581: Fixed XLL file extensions downloadable without warnings (bmo#1843758)
- CVE-2023-4582: Fixed buffer Overflow in WebGL glGetProgramiv (bmo#1773874)
- CVE-2023-4583: Fixed browsing Context potentially not cleared when closing Private Window (bmo#1842030)
- CVE-2023-4584: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2  (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529)
- CVE-2023-4585: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2(bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-08"/>
	<updated date="2023-09-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213746">SUSE bug 1213746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214606">SUSE bug 1214606</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-4051/">CVE-2023-4051</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-4053/">CVE-2023-4053</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4574/">CVE-2023-4574</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4575/">CVE-2023-4575</cve>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-4576/">CVE-2023-4576</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4577/">CVE-2023-4577</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4578/">CVE-2023-4578</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-4580/">CVE-2023-4580</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-4581/">CVE-2023-4581</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4582/">CVE-2023-4582</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-4583/">CVE-2023-4583</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4584/">CVE-2023-4584</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4585/">CVE-2023-4585</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009780954" comment="MozillaFirefox-115.2.0-150000.150.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009780955" comment="MozillaFirefox-devel-115.2.0-150000.150.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009780956" comment="MozillaFirefox-translations-common-115.2.0-150000.150.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009780957" comment="MozillaFirefox-translations-other-115.2.0-150000.150.100.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140236" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210168" ref_url="https://bugzilla.suse.com/1210168" source="BUGZILLA"/>
		<reference ref_id="1215231" ref_url="https://bugzilla.suse.com/1215231" source="BUGZILLA"/>
		<reference ref_id="1215245" ref_url="https://bugzilla.suse.com/1215245" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-4863" ref_url="https://www.suse.com/security/cve/CVE-2023-4863/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3609-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016158.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 115.2.1 ESR (bsc#1215245).

- CVE-2023-4863: Fixed heap buffer overflow in libwebp (MFSA 2023-40) (bsc#1215231).

The following non-security bug was fixed:

- Fix i586 build by reducing debug info to -g1 (bsc#1210168).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-15"/>
	<updated date="2023-09-15"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1210168">SUSE bug 1210168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215231">SUSE bug 1215231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215245">SUSE bug 1215245</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4863/">CVE-2023-4863</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009794844" comment="MozillaFirefox-115.2.1-150000.150.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009794845" comment="MozillaFirefox-devel-115.2.1-150000.150.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009794846" comment="MozillaFirefox-translations-common-115.2.1-150000.150.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009794847" comment="MozillaFirefox-translations-other-115.2.1-150000.150.103.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140237" version="1" class="patch">
	<metadata>
		<title>Security update for gcc12 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214052" ref_url="https://bugzilla.suse.com/1214052" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-4039" ref_url="https://www.suse.com/security/cve/CVE-2023-4039/" source="CVE"/>
		<description>
This update for gcc12 fixes the following issues:

- CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-18"/>
	<updated date="2023-09-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214052">SUSE bug 1214052</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4039/">CVE-2023-4039</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009796184" comment="cpp12-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795934" comment="cross-nvptx-gcc12-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795935" comment="cross-nvptx-newlib12-devel-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796185" comment="gcc12-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795937" comment="gcc12-32bit-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796186" comment="gcc12-PIE-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796187" comment="gcc12-c++-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795942" comment="gcc12-c++-32bit-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796188" comment="gcc12-fortran-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795946" comment="gcc12-fortran-32bit-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795949" comment="gcc12-info-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796189" comment="gcc12-locale-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796385" comment="gcc12-testresults-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796190" comment="libasan8-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795959" comment="libasan8-32bit-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796191" comment="libatomic1-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796192" comment="libatomic1-32bit-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796193" comment="libgcc_s1-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796194" comment="libgcc_s1-32bit-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796195" comment="libgfortran5-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796196" comment="libgfortran5-32bit-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796197" comment="libgomp1-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796198" comment="libgomp1-32bit-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795974" comment="libhwasan0-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796199" comment="libitm1-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796200" comment="libitm1-32bit-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796201" comment="liblsan0-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796202" comment="libobjc4-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796203" comment="libobjc4-32bit-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796204" comment="libquadmath0-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795981" comment="libquadmath0-32bit-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796205" comment="libstdc++6-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796206" comment="libstdc++6-32bit-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796207" comment="libstdc++6-devel-gcc12-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795985" comment="libstdc++6-devel-gcc12-32bit-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796208" comment="libstdc++6-locale-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796209" comment="libstdc++6-pp-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795988" comment="libstdc++6-pp-32bit-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796210" comment="libtsan2-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796211" comment="libubsan1-12.3.0+git1204-150000.1.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796212" comment="libubsan1-32bit-12.3.0+git1204-150000.1.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140238" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203517" ref_url="https://bugzilla.suse.com/1203517" source="BUGZILLA"/>
		<reference ref_id="1210448" ref_url="https://bugzilla.suse.com/1210448" source="BUGZILLA"/>
		<reference ref_id="1213543" ref_url="https://bugzilla.suse.com/1213543" source="BUGZILLA"/>
		<reference ref_id="1213601" ref_url="https://bugzilla.suse.com/1213601" source="BUGZILLA"/>
		<reference ref_id="1213666" ref_url="https://bugzilla.suse.com/1213666" source="BUGZILLA"/>
		<reference ref_id="1213927" ref_url="https://bugzilla.suse.com/1213927" source="BUGZILLA"/>
		<reference ref_id="1213969" ref_url="https://bugzilla.suse.com/1213969" source="BUGZILLA"/>
		<reference ref_id="1213971" ref_url="https://bugzilla.suse.com/1213971" source="BUGZILLA"/>
		<reference ref_id="1214149" ref_url="https://bugzilla.suse.com/1214149" source="BUGZILLA"/>
		<reference ref_id="1214348" ref_url="https://bugzilla.suse.com/1214348" source="BUGZILLA"/>
		<reference ref_id="1214350" ref_url="https://bugzilla.suse.com/1214350" source="BUGZILLA"/>
		<reference ref_id="1214451" ref_url="https://bugzilla.suse.com/1214451" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-36402" ref_url="https://www.suse.com/security/cve/CVE-2022-36402/" source="CVE"/>
		<reference ref_id="CVE-2023-2007" ref_url="https://www.suse.com/security/cve/CVE-2023-2007/" source="CVE"/>
		<reference ref_id="CVE-2023-20588" ref_url="https://www.suse.com/security/cve/CVE-2023-20588/" source="CVE"/>
		<reference ref_id="CVE-2023-3772" ref_url="https://www.suse.com/security/cve/CVE-2023-3772/" source="CVE"/>
		<reference ref_id="CVE-2023-3812" ref_url="https://www.suse.com/security/cve/CVE-2023-3812/" source="CVE"/>
		<reference ref_id="CVE-2023-3863" ref_url="https://www.suse.com/security/cve/CVE-2023-3863/" source="CVE"/>
		<reference ref_id="CVE-2023-4128" ref_url="https://www.suse.com/security/cve/CVE-2023-4128/" source="CVE"/>
		<reference ref_id="CVE-2023-4132" ref_url="https://www.suse.com/security/cve/CVE-2023-4132/" source="CVE"/>
		<reference ref_id="CVE-2023-4134" ref_url="https://www.suse.com/security/cve/CVE-2023-4134/" source="CVE"/>
		<reference ref_id="CVE-2023-4385" ref_url="https://www.suse.com/security/cve/CVE-2023-4385/" source="CVE"/>
		<reference ref_id="CVE-2023-4387" ref_url="https://www.suse.com/security/cve/CVE-2023-4387/" source="CVE"/>
		<reference ref_id="CVE-2023-4459" ref_url="https://www.suse.com/security/cve/CVE-2023-4459/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3680-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016208.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local attacker with a user account on the system to gain privilege, causing a denial of service (bsc#1203517).
- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4132: Fixed use-after-free vulnerability was found in the siano smsusb module that allowed a local user to crash the system, causing a denial of service condition (bsc#1213969).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to crash the system due to a missing sanity check (bsc#1214348).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).

The following non-security bugs were fixed:

- kabi/severities: Ignore newly added SRSO mitigation functions
- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
- x86/cpu: Cleanup the untrain mess (git-fixes).
- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: Rename original retbleed methods (git-fixes).
- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).
- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).
- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: Explain the untraining sequences a bit more (git-fixes).
- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
- x86: Move gds_ucode_mitigated() declaration to header (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-19"/>
	<updated date="2023-09-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203517">SUSE bug 1203517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210448">SUSE bug 1210448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213543">SUSE bug 1213543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213601">SUSE bug 1213601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213666">SUSE bug 1213666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213927">SUSE bug 1213927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213969">SUSE bug 1213969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213971">SUSE bug 1213971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214149">SUSE bug 1214149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214348">SUSE bug 1214348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214350">SUSE bug 1214350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214451">SUSE bug 1214451</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36402/">CVE-2022-36402</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-2007/">CVE-2023-2007</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20588/">CVE-2023-20588</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-3772/">CVE-2023-3772</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3812/">CVE-2023-3812</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3863/">CVE-2023-3863</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4128/">CVE-2023-4128</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4132/">CVE-2023-4132</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4134/">CVE-2023-4134</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4385/">CVE-2023-4385</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4387/">CVE-2023-4387</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4459/">CVE-2023-4459</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009795445" comment="kernel-default-4.12.14-150100.197.157.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795446" comment="kernel-default-base-4.12.14-150100.197.157.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795447" comment="kernel-default-devel-4.12.14-150100.197.157.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795448" comment="kernel-devel-4.12.14-150100.197.157.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795449" comment="kernel-docs-4.12.14-150100.197.157.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795450" comment="kernel-macros-4.12.14-150100.197.157.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795451" comment="kernel-obs-build-4.12.14-150100.197.157.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795452" comment="kernel-source-4.12.14-150100.197.157.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795453" comment="kernel-syms-4.12.14-150100.197.157.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140239" version="1" class="patch">
	<metadata>
		<title>Security update for gcc7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195517" ref_url="https://bugzilla.suse.com/1195517" source="BUGZILLA"/>
		<reference ref_id="1196861" ref_url="https://bugzilla.suse.com/1196861" source="BUGZILLA"/>
		<reference ref_id="1204505" ref_url="https://bugzilla.suse.com/1204505" source="BUGZILLA"/>
		<reference ref_id="1205145" ref_url="https://bugzilla.suse.com/1205145" source="BUGZILLA"/>
		<reference ref_id="1214052" ref_url="https://bugzilla.suse.com/1214052" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-4039" ref_url="https://www.suse.com/security/cve/CVE-2023-4039/" source="CVE"/>
		<description>
This update for gcc7 fixes the following issues:

Security issue fixed:

- CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).

Other fixes:

- Fixed KASAN kernel compile.  [bsc#1205145]
- Fixed ICE with C++17 code as reported in [bsc#1204505]
- Fixed altivec.h redefining bool in C++ which makes bool unusable (bsc#1195517):
- Adjust gnats idea of the target, fixing the build of gprbuild.  [bsc#1196861]
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-19"/>
	<updated date="2023-09-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195517">SUSE bug 1195517</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196861">SUSE bug 1196861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204505">SUSE bug 1204505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205145">SUSE bug 1205145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214052">SUSE bug 1214052</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4039/">CVE-2023-4039</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009796150" comment="cpp7-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795847" comment="cross-nvptx-gcc7-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795848" comment="cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796151" comment="gcc7-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796152" comment="gcc7-32bit-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796153" comment="gcc7-ada-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796154" comment="gcc7-c++-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796155" comment="gcc7-c++-32bit-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796156" comment="gcc7-fortran-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796157" comment="gcc7-fortran-32bit-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795872" comment="gcc7-info-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796158" comment="gcc7-locale-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796159" comment="gcc7-objc-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796160" comment="libada7-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796161" comment="libasan4-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796162" comment="libasan4-32bit-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795885" comment="libcilkrts5-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795886" comment="libcilkrts5-32bit-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796163" comment="libgfortran4-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796164" comment="libgfortran4-32bit-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796165" comment="libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796166" comment="libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796167" comment="libubsan0-7.5.0+r278197-150000.4.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796168" comment="libubsan0-32bit-7.5.0+r278197-150000.4.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140240" version="1" class="patch">
	<metadata>
		<title>Security update for gstreamer-plugins-good (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184739" ref_url="https://bugzilla.suse.com/1184739" source="BUGZILLA"/>
		<reference ref_id="1201688" ref_url="https://bugzilla.suse.com/1201688" source="BUGZILLA"/>
		<reference ref_id="1201693" ref_url="https://bugzilla.suse.com/1201693" source="BUGZILLA"/>
		<reference ref_id="1201702" ref_url="https://bugzilla.suse.com/1201702" source="BUGZILLA"/>
		<reference ref_id="1201704" ref_url="https://bugzilla.suse.com/1201704" source="BUGZILLA"/>
		<reference ref_id="1201706" ref_url="https://bugzilla.suse.com/1201706" source="BUGZILLA"/>
		<reference ref_id="1201707" ref_url="https://bugzilla.suse.com/1201707" source="BUGZILLA"/>
		<reference ref_id="1201708" ref_url="https://bugzilla.suse.com/1201708" source="BUGZILLA"/>
		<reference ref_id="1213128" ref_url="https://bugzilla.suse.com/1213128" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3497" ref_url="https://www.suse.com/security/cve/CVE-2021-3497/" source="CVE"/>
		<reference ref_id="CVE-2022-1920" ref_url="https://www.suse.com/security/cve/CVE-2022-1920/" source="CVE"/>
		<reference ref_id="CVE-2022-1921" ref_url="https://www.suse.com/security/cve/CVE-2022-1921/" source="CVE"/>
		<reference ref_id="CVE-2022-1922" ref_url="https://www.suse.com/security/cve/CVE-2022-1922/" source="CVE"/>
		<reference ref_id="CVE-2022-1923" ref_url="https://www.suse.com/security/cve/CVE-2022-1923/" source="CVE"/>
		<reference ref_id="CVE-2022-1924" ref_url="https://www.suse.com/security/cve/CVE-2022-1924/" source="CVE"/>
		<reference ref_id="CVE-2022-1925" ref_url="https://www.suse.com/security/cve/CVE-2022-1925/" source="CVE"/>
		<reference ref_id="CVE-2022-2122" ref_url="https://www.suse.com/security/cve/CVE-2022-2122/" source="CVE"/>
		<reference ref_id="CVE-2023-37327" ref_url="https://www.suse.com/security/cve/CVE-2023-37327/" source="CVE"/>
		<description>
This update for gstreamer-plugins-good fixes the following issues:

- CVE-2021-3497: Matroskademux: Fix extraction of multichannel WavPack (bsc#1184739).
- CVE-2022-1920: Fixed integer overflow in WavPack header handling code (bsc#1201688).
- CVE-2022-1921: Fixed integer overflow resulting in heap corruption in avidemux element (bsc#1201693).
- CVE-2022-1922: Fixed integer overflows in mkv demuxing (bsc#1201702).
- CVE-2022-1923: Fixed integer overflows in mkv demuxing using bzip (bsc#1201704).
- CVE-2022-1924: Fixed integer overflows in mkv demuxing using lzo (bsc#1201706).
- CVE-2022-1925: Fixed integer overflows in mkv demuxing using HEADERSTRIP (bsc#1201707).
- CVE-2022-2122: Fixed integer overflows in qtdemux using zlib (bsc#1201708).
- CVE-2023-37327: Fixed GStreamer FLAC File Parsing Integer Overflow (bsc#1213128).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-19"/>
	<updated date="2023-09-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184739">SUSE bug 1184739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201688">SUSE bug 1201688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201693">SUSE bug 1201693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201702">SUSE bug 1201702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201704">SUSE bug 1201704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201706">SUSE bug 1201706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201707">SUSE bug 1201707</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201708">SUSE bug 1201708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213128">SUSE bug 1213128</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3497/">CVE-2021-3497</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-1920/">CVE-2022-1920</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-1921/">CVE-2022-1921</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-1922/">CVE-2022-1922</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-1923/">CVE-2022-1923</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-1924/">CVE-2022-1924</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-1925/">CVE-2022-1925</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-2122/">CVE-2022-2122</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37327/">CVE-2023-37327</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009782199" comment="gstreamer-plugins-good-1.12.5-150000.3.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782200" comment="gstreamer-plugins-good-lang-1.12.5-150000.3.7.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140241" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214768" ref_url="https://bugzilla.suse.com/1214768" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-39615" ref_url="https://www.suse.com/security/cve/CVE-2023-39615/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3698-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031570.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

- CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-20"/>
	<updated date="2023-09-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214768">SUSE bug 1214768</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-39615/">CVE-2023-39615</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009781755" comment="libxml2-2-2.9.7-150000.3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781756" comment="libxml2-2-32bit-2.9.7-150000.3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781757" comment="libxml2-devel-2.9.7-150000.3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781758" comment="libxml2-tools-2.9.7-150000.3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782017" comment="python2-libxml2-python-2.9.7-150000.3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781759" comment="python3-libxml2-python-2.9.7-150000.3.60.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140242" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214254" ref_url="https://bugzilla.suse.com/1214254" source="BUGZILLA"/>
		<reference ref_id="1215204" ref_url="https://bugzilla.suse.com/1215204" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-32360" ref_url="https://www.suse.com/security/cve/CVE-2023-32360/" source="CVE"/>
		<reference ref_id="CVE-2023-4504" ref_url="https://www.suse.com/security/cve/CVE-2023-4504/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016253.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:

- CVE-2023-4504: Fixed heap overflow in OpenPrinting CUPS Postscript Parsing (bsc#1215204).
- CVE-2023-32360: Fixed Information leak through Cups-Get-Document operation (bsc#1214254).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-20"/>
	<updated date="2023-09-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214254">SUSE bug 1214254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215204">SUSE bug 1215204</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-32360/">CVE-2023-32360</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4504/">CVE-2023-4504</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009796901" comment="cups-2.2.7-150000.3.51.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796902" comment="cups-client-2.2.7-150000.3.51.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796903" comment="cups-config-2.2.7-150000.3.51.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796904" comment="cups-ddk-2.2.7-150000.3.51.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796905" comment="cups-devel-2.2.7-150000.3.51.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796906" comment="libcups2-2.2.7-150000.3.51.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796845" comment="libcups2-32bit-2.2.7-150000.3.51.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796907" comment="libcupscgi1-2.2.7-150000.3.51.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796908" comment="libcupsimage2-2.2.7-150000.3.51.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796909" comment="libcupsmime1-2.2.7-150000.3.51.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796910" comment="libcupsppdc1-2.2.7-150000.3.51.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140243" version="1" class="patch">
	<metadata>
		<title>Security update for skopeo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212475" ref_url="https://bugzilla.suse.com/1212475" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:3713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016256.html" source="SUSE-SU"/>
		<description>

This update of skopeo fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-20"/>
	<updated date="2023-09-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212475">SUSE bug 1212475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781333" comment="skopeo-0.1.41-150000.4.20.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140244" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1172382" ref_url="https://bugzilla.suse.com/1172382" source="BUGZILLA"/>
		<reference ref_id="1190011" ref_url="https://bugzilla.suse.com/1190011" source="BUGZILLA"/>
		<reference ref_id="1193880" ref_url="https://bugzilla.suse.com/1193880" source="BUGZILLA"/>
		<reference ref_id="1197653" ref_url="https://bugzilla.suse.com/1197653" source="BUGZILLA"/>
		<reference ref_id="1198712" ref_url="https://bugzilla.suse.com/1198712" source="BUGZILLA"/>
		<reference ref_id="1207205" ref_url="https://bugzilla.suse.com/1207205" source="BUGZILLA"/>
		<reference ref_id="1212850" ref_url="https://bugzilla.suse.com/1212850" source="BUGZILLA"/>
		<reference ref_id="1212968" ref_url="https://bugzilla.suse.com/1212968" source="BUGZILLA"/>
		<reference ref_id="1213925" ref_url="https://bugzilla.suse.com/1213925" source="BUGZILLA"/>
		<reference ref_id="1215311" ref_url="https://bugzilla.suse.com/1215311" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13754" ref_url="https://www.suse.com/security/cve/CVE-2019-13754/" source="CVE"/>
		<reference ref_id="CVE-2021-3750" ref_url="https://www.suse.com/security/cve/CVE-2021-3750/" source="CVE"/>
		<reference ref_id="CVE-2021-3929" ref_url="https://www.suse.com/security/cve/CVE-2021-3929/" source="CVE"/>
		<reference ref_id="CVE-2022-1050" ref_url="https://www.suse.com/security/cve/CVE-2022-1050/" source="CVE"/>
		<reference ref_id="CVE-2022-26354" ref_url="https://www.suse.com/security/cve/CVE-2022-26354/" source="CVE"/>
		<reference ref_id="CVE-2023-0330" ref_url="https://www.suse.com/security/cve/CVE-2023-0330/" source="CVE"/>
		<reference ref_id="CVE-2023-2861" ref_url="https://www.suse.com/security/cve/CVE-2023-2861/" source="CVE"/>
		<reference ref_id="CVE-2023-3180" ref_url="https://www.suse.com/security/cve/CVE-2023-3180/" source="CVE"/>
		<reference ref_id="CVE-2023-3354" ref_url="https://www.suse.com/security/cve/CVE-2023-3354/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016339.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

- CVE-2022-26354: Fixed a memory leak due to a missing virtqueue detach on error. (bsc#1198712)
- CVE-2021-3929: Fixed an use-after-free in nvme DMA reentrancy issue. (bsc#1193880)
- CVE-2023-0330: Fixed a stack overflow due to a DMA reentrancy issue. (bsc#1207205)
- CVE-2020-13754: Fixed a DoS due to an OOB access during mmio operations. (bsc#1172382)
- CVE-2023-3354: Fixed a remote unauthenticated DoS due to an improper I/O watch removal in VNC TLS handshake. (bsc#1212850)
- CVE-2023-3180: Fixed a heap buffer overflow in virtio_crypto_sym_op_helper(). (bsc#1213925)
- CVE-2023-2861: Fixed improper access control on special files in 9pfs (bsc#1212968).
- CVE-2022-1050: Fixed use-after-free issue in pvrdma_exec_cmd() (bsc#1197653).
- CVE-2021-3750: Fixed DMA reentrancy issue leads to use-after-free in hcd-ehci (bsc#1190011).

The following non-security bug was fixed:

- Prepare for binutils update to 2.41 update (bsc#1215311).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172382">SUSE bug 1172382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190011">SUSE bug 1190011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193880">SUSE bug 1193880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197653">SUSE bug 1197653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198712">SUSE bug 1198712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207205">SUSE bug 1207205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212850">SUSE bug 1212850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212968">SUSE bug 1212968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213925">SUSE bug 1213925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215311">SUSE bug 1215311</bugzilla>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-13754/">CVE-2019-13754</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3750/">CVE-2021-3750</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3929/">CVE-2021-3929</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1050/">CVE-2022-1050</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-26354/">CVE-2022-26354</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0330/">CVE-2023-0330</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2861/">CVE-2023-2861</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3180/">CVE-2023-3180</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-3354/">CVE-2023-3354</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009797176" comment="qemu-3.1.1.1-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797177" comment="qemu-arm-3.1.1.1-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797178" comment="qemu-audio-alsa-3.1.1.1-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797179" comment="qemu-audio-oss-3.1.1.1-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797180" comment="qemu-audio-pa-3.1.1.1-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797181" comment="qemu-block-curl-3.1.1.1-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797182" comment="qemu-block-iscsi-3.1.1.1-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797183" comment="qemu-block-rbd-3.1.1.1-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797184" comment="qemu-block-ssh-3.1.1.1-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797185" comment="qemu-guest-agent-3.1.1.1-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797186" comment="qemu-ipxe-1.0.0+-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797187" comment="qemu-kvm-3.1.1.1-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797188" comment="qemu-lang-3.1.1.1-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797189" comment="qemu-seabios-1.12.0_0_ga698c89-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797190" comment="qemu-sgabios-8-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797191" comment="qemu-tools-3.1.1.1-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797192" comment="qemu-ui-curses-3.1.1.1-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797193" comment="qemu-ui-gtk-3.1.1.1-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797194" comment="qemu-vgabios-1.12.0_0_ga698c89-150100.80.51.5 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797195" comment="qemu-x86-3.1.1.1-150100.80.51.5 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140245" version="1" class="patch">
	<metadata>
		<title>Security update for gstreamer-plugins-base (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185448" ref_url="https://bugzilla.suse.com/1185448" source="BUGZILLA"/>
		<reference ref_id="1213128" ref_url="https://bugzilla.suse.com/1213128" source="BUGZILLA"/>
		<reference ref_id="1213131" ref_url="https://bugzilla.suse.com/1213131" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3522" ref_url="https://www.suse.com/security/cve/CVE-2021-3522/" source="CVE"/>
		<reference ref_id="CVE-2023-37327" ref_url="https://www.suse.com/security/cve/CVE-2023-37327/" source="CVE"/>
		<reference ref_id="CVE-2023-37328" ref_url="https://www.suse.com/security/cve/CVE-2023-37328/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3801-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016338.html" source="SUSE-SU"/>
		<description>
This update for gstreamer-plugins-base fixes the following issues:

- CVE-2023-37327: Fixed FLAC file parsing integer overflow (bsc#1213128).
- CVE-2023-37328: Fixed PGS file parsing heap-based buffer overflow (bsc#1213131).
- CVE-2021-3522: Fixed frame size check and potential invalid reads (bsc#1185448).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185448">SUSE bug 1185448</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213128">SUSE bug 1213128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213131">SUSE bug 1213131</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3522/">CVE-2021-3522</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37327/">CVE-2023-37327</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37328/">CVE-2023-37328</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009781138" comment="gstreamer-plugins-base-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781139" comment="gstreamer-plugins-base-devel-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781140" comment="gstreamer-plugins-base-lang-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781141" comment="libgstallocators-1_0-0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781142" comment="libgstapp-1_0-0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781143" comment="libgstaudio-1_0-0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781144" comment="libgstfft-1_0-0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781145" comment="libgstpbutils-1_0-0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781146" comment="libgstriff-1_0-0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781147" comment="libgstrtp-1_0-0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781148" comment="libgstrtsp-1_0-0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781149" comment="libgstsdp-1_0-0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781150" comment="libgsttag-1_0-0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781151" comment="libgstvideo-1_0-0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781152" comment="typelib-1_0-GstAllocators-1_0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781153" comment="typelib-1_0-GstApp-1_0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781154" comment="typelib-1_0-GstAudio-1_0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781155" comment="typelib-1_0-GstFft-1_0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781156" comment="typelib-1_0-GstPbutils-1_0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781157" comment="typelib-1_0-GstRtp-1_0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781158" comment="typelib-1_0-GstRtsp-1_0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781159" comment="typelib-1_0-GstSdp-1_0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781160" comment="typelib-1_0-GstTag-1_0-1.12.5-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781161" comment="typelib-1_0-GstVideo-1_0-1.12.5-150000.3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140246" version="1" class="patch">
	<metadata>
		<title>Security update for gstreamer-plugins-bad (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213126" ref_url="https://bugzilla.suse.com/1213126" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-37329" ref_url="https://www.suse.com/security/cve/CVE-2023-37329/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016337.html" source="SUSE-SU"/>
		<description>
This update for gstreamer-plugins-bad fixes the following issues:

- CVE-2023-37329: Fixed a heap overwrite in PGS subtitle overlay decoder (bsc#1213126).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213126">SUSE bug 1213126</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37329/">CVE-2023-37329</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009781162" comment="gstreamer-plugins-bad-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781163" comment="gstreamer-plugins-bad-devel-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781164" comment="gstreamer-plugins-bad-lang-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781165" comment="libgstadaptivedemux-1_0-0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781166" comment="libgstbadallocators-1_0-0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781167" comment="libgstbadaudio-1_0-0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781168" comment="libgstbadbase-1_0-0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781169" comment="libgstbadvideo-1_0-0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781170" comment="libgstbasecamerabinsrc-1_0-0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781171" comment="libgstcodecparsers-1_0-0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781172" comment="libgstgl-1_0-0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781173" comment="libgstinsertbin-1_0-0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781174" comment="libgstmpegts-1_0-0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781175" comment="libgstphotography-1_0-0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781176" comment="libgstplayer-1_0-0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781177" comment="libgsturidownloader-1_0-0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781178" comment="libgstwayland-1_0-0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781179" comment="typelib-1_0-GstBadAllocators-1_0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781180" comment="typelib-1_0-GstGL-1_0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781181" comment="typelib-1_0-GstInsertBin-1_0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781182" comment="typelib-1_0-GstMpegts-1_0-1.12.5-150000.3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781183" comment="typelib-1_0-GstPlayer-1_0-1.12.5-150000.3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140247" version="1" class="patch">
	<metadata>
		<title>Security update for supportutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181477" ref_url="https://bugzilla.suse.com/1181477" source="BUGZILLA"/>
		<reference ref_id="1196933" ref_url="https://bugzilla.suse.com/1196933" source="BUGZILLA"/>
		<reference ref_id="1204942" ref_url="https://bugzilla.suse.com/1204942" source="BUGZILLA"/>
		<reference ref_id="1205533" ref_url="https://bugzilla.suse.com/1205533" source="BUGZILLA"/>
		<reference ref_id="1206402" ref_url="https://bugzilla.suse.com/1206402" source="BUGZILLA"/>
		<reference ref_id="1206608" ref_url="https://bugzilla.suse.com/1206608" source="BUGZILLA"/>
		<reference ref_id="1207543" ref_url="https://bugzilla.suse.com/1207543" source="BUGZILLA"/>
		<reference ref_id="1207598" ref_url="https://bugzilla.suse.com/1207598" source="BUGZILLA"/>
		<reference ref_id="1208928" ref_url="https://bugzilla.suse.com/1208928" source="BUGZILLA"/>
		<reference ref_id="1209979" ref_url="https://bugzilla.suse.com/1209979" source="BUGZILLA"/>
		<reference ref_id="1210015" ref_url="https://bugzilla.suse.com/1210015" source="BUGZILLA"/>
		<reference ref_id="1210950" ref_url="https://bugzilla.suse.com/1210950" source="BUGZILLA"/>
		<reference ref_id="1211598" ref_url="https://bugzilla.suse.com/1211598" source="BUGZILLA"/>
		<reference ref_id="1211599" ref_url="https://bugzilla.suse.com/1211599" source="BUGZILLA"/>
		<reference ref_id="1213127" ref_url="https://bugzilla.suse.com/1213127" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45154" ref_url="https://www.suse.com/security/cve/CVE-2022-45154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3803-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031719.html" source="SUSE-SU"/>
		<description>
This update for supportutils fixes the following issues:

Security Fixes:

- CVE-2022-45154: Removed iSCSI passwords (bsc#1207598).

Other fixes:

- Changes in version 3.1.26
  + powerpc plugin to collect the slots and active memory (bsc#1210950)
  + A Cleartext Storage of Sensitive Information vulnerability CVE-2022-45154
  + supportconfig: collect BPF information (pr#154)
  + Added additional iscsi information (pr#155)

- Added run time detection (bsc#1213127)

- Changes for supportutils version 3.1.25
  + Removed iSCSI passwords CVE-2022-45154 (bsc#1207598)
  + powerpc: Collect lsslot,amsstat, and opal elogs (pr#149)
  + powerpc: collect invscout logs (pr#150)
  + powerpc: collect RMC status logs (pr#151)
  + Added missing nvme nbft commands (bsc#1211599)
  + Fixed invalid nvme commands (bsc#1211598)
  + Added missing podman information (PED-1703, bsc#1181477)
  + Removed dependency on sysfstools
  + Check for systool use (bsc#1210015)
  + Added selinux checking (bsc#1209979)
  + Updated SLES_VER matrix

- Fixed missing status detail for apparmor (bsc#1196933)
- Corrected invalid argument list in docker.txt (bsc#1206608)
- Applies limit equally to sar data and text files (bsc#1207543)
- Collects hwinfo hardware logs (bsc#1208928)
- Collects lparnumascore logs (issue#148)

- Add dependency to `numactl` on ppc64le and `s390x`, this enforces
  that `numactl --hardware` data is provided in supportconfigs

- Changes to supportconfig.rc version 3.1.11-35
  + Corrected _sanitize_file to include iscsi.conf and others (bsc#1206402)

- Changes to supportconfig version 3.1.11-46.4
  + Added plymouth_info 

- Changes to getappcore version 1.53.02
  + The location of chkbin was updated earlier. This documents that
    change (bsc#1205533, bsc#1204942)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1181477">SUSE bug 1181477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196933">SUSE bug 1196933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204942">SUSE bug 1204942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205533">SUSE bug 1205533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206402">SUSE bug 1206402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206608">SUSE bug 1206608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207543">SUSE bug 1207543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207598">SUSE bug 1207598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208928">SUSE bug 1208928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209979">SUSE bug 1209979</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210015">SUSE bug 1210015</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210950">SUSE bug 1210950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211598">SUSE bug 1211598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211599">SUSE bug 1211599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213127">SUSE bug 1213127</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-45154/">CVE-2022-45154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009782018" comment="supportutils-3.1.26-150000.5.50.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140248" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214692" ref_url="https://bugzilla.suse.com/1214692" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-40217" ref_url="https://www.suse.com/security/cve/CVE-2023-40217/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3804-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031718.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214692">SUSE bug 1214692</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-40217/">CVE-2023-40217</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009794848" comment="libpython3_6m1_0-3.6.15-150000.3.135.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009794849" comment="python3-3.6.15-150000.3.135.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009794850" comment="python3-base-3.6.15-150000.3.135.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009794851" comment="python3-curses-3.6.15-150000.3.135.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009794852" comment="python3-dbm-3.6.15-150000.3.135.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009794853" comment="python3-devel-3.6.15-150000.3.135.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009794854" comment="python3-idle-3.6.15-150000.3.135.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009794855" comment="python3-testsuite-3.6.15-150000.3.135.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009794856" comment="python3-tk-3.6.15-150000.3.135.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009794857" comment="python3-tools-3.6.15-150000.3.135.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140249" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1215472" ref_url="https://bugzilla.suse.com/1215472" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-3341" ref_url="https://www.suse.com/security/cve/CVE-2023-3341/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-September/016346.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:
  
- CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly (bsc#1215472).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1215472">SUSE bug 1215472</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-3341/">CVE-2023-3341</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009798051" comment="bind-9.16.6-150000.12.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798052" comment="bind-chrootenv-9.16.6-150000.12.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798053" comment="bind-devel-9.16.6-150000.12.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798054" comment="bind-doc-9.16.6-150000.12.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798055" comment="bind-utils-9.16.6-150000.12.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798056" comment="libbind9-1600-9.16.6-150000.12.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798057" comment="libdns1605-9.16.6-150000.12.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798058" comment="libirs-devel-9.16.6-150000.12.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798059" comment="libirs1601-9.16.6-150000.12.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798060" comment="libisc1606-9.16.6-150000.12.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798061" comment="libisccc1600-9.16.6-150000.12.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798062" comment="libisccfg1600-9.16.6-150000.12.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798063" comment="libns1604-9.16.6-150000.12.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798064" comment="python3-bind-9.16.6-150000.12.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140250" version="1" class="patch">
	<metadata>
		<title>Security update for cni (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212475" ref_url="https://bugzilla.suse.com/1212475" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:3815-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031750.html" source="SUSE-SU"/>
		<description>

This update of cni fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212475">SUSE bug 1212475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009780906" comment="cni-0.7.1-150100.3.14.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140251" version="1" class="patch">
	<metadata>
		<title>Security update for cni-plugins (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212475" ref_url="https://bugzilla.suse.com/1212475" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:3816-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031749.html" source="SUSE-SU"/>
		<description>

This update of cni-plugins fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212475">SUSE bug 1212475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009780907" comment="cni-plugins-0.8.6-150100.3.17.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140252" version="1" class="patch">
	<metadata>
		<title>Security update for containerd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212475" ref_url="https://bugzilla.suse.com/1212475" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:3817-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031748.html" source="SUSE-SU"/>
		<description>

This update of containerd fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212475">SUSE bug 1212475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009781034" comment="containerd-1.6.21-150000.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781035" comment="containerd-ctr-1.6.21-150000.95.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140253" version="1" class="patch">
	<metadata>
		<title>Security update for busybox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214538" ref_url="https://bugzilla.suse.com/1214538" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-48174" ref_url="https://www.suse.com/security/cve/CVE-2022-48174/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3819-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031746.html" source="SUSE-SU"/>
		<description>
This update for busybox fixes the following issues:

- CVE-2022-48174: Fixed stack overflow vulnerability. (bsc#1214538)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214538">SUSE bug 1214538</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-48174/">CVE-2022-48174</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009781529" comment="busybox-1.35.0-150000.4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781530" comment="busybox-static-1.35.0-150000.4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140254" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200962" ref_url="https://bugzilla.suse.com/1200962" source="BUGZILLA"/>
		<reference ref_id="1206080" ref_url="https://bugzilla.suse.com/1206080" source="BUGZILLA"/>
		<reference ref_id="1206556" ref_url="https://bugzilla.suse.com/1206556" source="BUGZILLA"/>
		<reference ref_id="1208037" ref_url="https://bugzilla.suse.com/1208037" source="BUGZILLA"/>
		<reference ref_id="1208038" ref_url="https://bugzilla.suse.com/1208038" source="BUGZILLA"/>
		<reference ref_id="1208040" ref_url="https://bugzilla.suse.com/1208040" source="BUGZILLA"/>
		<reference ref_id="1208409" ref_url="https://bugzilla.suse.com/1208409" source="BUGZILLA"/>
		<reference ref_id="1209642" ref_url="https://bugzilla.suse.com/1209642" source="BUGZILLA"/>
		<reference ref_id="1210297" ref_url="https://bugzilla.suse.com/1210297" source="BUGZILLA"/>
		<reference ref_id="1210733" ref_url="https://bugzilla.suse.com/1210733" source="BUGZILLA"/>
		<reference ref_id="1213458" ref_url="https://bugzilla.suse.com/1213458" source="BUGZILLA"/>
		<reference ref_id="1214565" ref_url="https://bugzilla.suse.com/1214565" source="BUGZILLA"/>
		<reference ref_id="1214567" ref_url="https://bugzilla.suse.com/1214567" source="BUGZILLA"/>
		<reference ref_id="1214579" ref_url="https://bugzilla.suse.com/1214579" source="BUGZILLA"/>
		<reference ref_id="1214580" ref_url="https://bugzilla.suse.com/1214580" source="BUGZILLA"/>
		<reference ref_id="1214604" ref_url="https://bugzilla.suse.com/1214604" source="BUGZILLA"/>
		<reference ref_id="1214611" ref_url="https://bugzilla.suse.com/1214611" source="BUGZILLA"/>
		<reference ref_id="1214619" ref_url="https://bugzilla.suse.com/1214619" source="BUGZILLA"/>
		<reference ref_id="1214620" ref_url="https://bugzilla.suse.com/1214620" source="BUGZILLA"/>
		<reference ref_id="1214623" ref_url="https://bugzilla.suse.com/1214623" source="BUGZILLA"/>
		<reference ref_id="1214624" ref_url="https://bugzilla.suse.com/1214624" source="BUGZILLA"/>
		<reference ref_id="1214625" ref_url="https://bugzilla.suse.com/1214625" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-19726" ref_url="https://www.suse.com/security/cve/CVE-2020-19726/" source="CVE"/>
		<reference ref_id="CVE-2021-32256" ref_url="https://www.suse.com/security/cve/CVE-2021-32256/" source="CVE"/>
		<reference ref_id="CVE-2022-35205" ref_url="https://www.suse.com/security/cve/CVE-2022-35205/" source="CVE"/>
		<reference ref_id="CVE-2022-35206" ref_url="https://www.suse.com/security/cve/CVE-2022-35206/" source="CVE"/>
		<reference ref_id="CVE-2022-4285" ref_url="https://www.suse.com/security/cve/CVE-2022-4285/" source="CVE"/>
		<reference ref_id="CVE-2022-44840" ref_url="https://www.suse.com/security/cve/CVE-2022-44840/" source="CVE"/>
		<reference ref_id="CVE-2022-45703" ref_url="https://www.suse.com/security/cve/CVE-2022-45703/" source="CVE"/>
		<reference ref_id="CVE-2022-47673" ref_url="https://www.suse.com/security/cve/CVE-2022-47673/" source="CVE"/>
		<reference ref_id="CVE-2022-47695" ref_url="https://www.suse.com/security/cve/CVE-2022-47695/" source="CVE"/>
		<reference ref_id="CVE-2022-47696" ref_url="https://www.suse.com/security/cve/CVE-2022-47696/" source="CVE"/>
		<reference ref_id="CVE-2022-48063" ref_url="https://www.suse.com/security/cve/CVE-2022-48063/" source="CVE"/>
		<reference ref_id="CVE-2022-48064" ref_url="https://www.suse.com/security/cve/CVE-2022-48064/" source="CVE"/>
		<reference ref_id="CVE-2022-48065" ref_url="https://www.suse.com/security/cve/CVE-2022-48065/" source="CVE"/>
		<reference ref_id="CVE-2023-0687" ref_url="https://www.suse.com/security/cve/CVE-2023-0687/" source="CVE"/>
		<reference ref_id="CVE-2023-1579" ref_url="https://www.suse.com/security/cve/CVE-2023-1579/" source="CVE"/>
		<reference ref_id="CVE-2023-1972" ref_url="https://www.suse.com/security/cve/CVE-2023-1972/" source="CVE"/>
		<reference ref_id="CVE-2023-2222" ref_url="https://www.suse.com/security/cve/CVE-2023-2222/" source="CVE"/>
		<reference ref_id="CVE-2023-25585" ref_url="https://www.suse.com/security/cve/CVE-2023-25585/" source="CVE"/>
		<reference ref_id="CVE-2023-25587" ref_url="https://www.suse.com/security/cve/CVE-2023-25587/" source="CVE"/>
		<reference ref_id="CVE-2023-25588" ref_url="https://www.suse.com/security/cve/CVE-2023-25588/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3825-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031740.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

Update to version 2.41 [jsc#PED-5778]:

* The MIPS port now supports the Sony Interactive Entertainment Allegrex
  processor, used with the PlayStation Portable, which implements the MIPS
  II ISA along with a single-precision FPU and a few implementation-specific
  integer instructions.
* Objdump's --private option can now be used on PE format files to display the
  fields in the file header and section headers.
* New versioned release of libsframe: libsframe.so.1.  This release introduces
  versioned symbols with version node name LIBSFRAME_1.0.  This release also
  updates the ABI in an incompatible way: this includes removal of
  sframe_get_funcdesc_with_addr API, change in the behavior of
  sframe_fre_get_ra_offset and sframe_fre_get_fp_offset APIs.
* SFrame Version 2 is now the default (and only) format version supported by
  gas, ld, readelf and objdump.
* Add command-line option, --strip-section-headers, to objcopy and strip to
  remove ELF section header from ELF file.
* The RISC-V port now supports the following new standard extensions:

  - Zicond (conditional zero instructions)
  - Zfa (additional floating-point instructions)
  - Zvbb, Zvbc, Zvkg, Zvkned, Zvknh[ab], Zvksed, Zvksh, Zvkn, Zvknc, Zvkng,
    Zvks, Zvksc, Zvkg, Zvkt (vector crypto instructions)

* The RISC-V port now supports the following vendor-defined extensions:
  - XVentanaCondOps
* Add support for Intel FRED, LKGS and AMX-COMPLEX instructions.
* A new .insn directive is recognized by x86 gas.
* Add SME2 support to the AArch64 port.
* The linker now accepts a command line option of --remap-inputs
  &lt;PATTERN&gt;=&lt;FILE&gt; to relace any input file that matches &lt;PATTERN&gt; with
  &lt;FILE&gt;.  In addition the option --remap-inputs-file=&lt;FILE&gt; can be used to
  specify a file containing any number of these remapping directives.
* The linker command line option --print-map-locals can be used to include
  local symbols in a linker map.  (ELF targets only).
* For most ELF based targets, if the --enable-linker-version option is used
  then the version of the linker will be inserted as a string into the .comment
  section.
* The linker script syntax has a new command for output sections: ASCIZ 'string'
  This will insert a zero-terminated string at the current location.
* Add command-line option, -z nosectionheader, to omit ELF section
  header.

- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1209642 aka CVE-2023-1579 aka PR29988
  * bsc#1210297 aka CVE-2023-1972 aka PR30285
  * bsc#1210733 aka CVE-2023-2222 aka PR29936
  * bsc#1213458 aka CVE-2021-32256 aka PR105039 (gcc)
  * bsc#1214565 aka CVE-2020-19726 aka PR26240
  * bsc#1214567 aka CVE-2022-35206 aka PR29290
  * bsc#1214579 aka CVE-2022-35205 aka PR29289
  * bsc#1214580 aka CVE-2022-44840 aka PR29732
  * bsc#1214604 aka CVE-2022-45703 aka PR29799
  * bsc#1214611 aka CVE-2022-48065 aka PR29925
  * bsc#1214619 aka CVE-2022-48064 aka PR29922
  * bsc#1214620 aka CVE-2022-48063 aka PR29924
  * bsc#1214623 aka CVE-2022-47696 aka PR29677
  * bsc#1214624 aka CVE-2022-47695 aka PR29846
  * bsc#1214625 aka CVE-2022-47673 aka PR29876

- This only existed only for a very short while in SLE-15, as the main
  variant in devel:gcc subsumed this in binutils-revert-rela.diff.
  Hence:

- Document fixed CVEs:

  * bsc#1208037 aka CVE-2023-25588 aka PR29677
  * bsc#1208038 aka CVE-2023-25587 aka PR29846
  * bsc#1208040 aka CVE-2023-25585 aka PR29892
  * bsc#1208409 aka CVE-2023-0687 aka PR29444

- Enable bpf-none cross target and add bpf-none to the multitarget
  set of supported targets.
- Disable packed-relative-relocs for old codestreams.  They generate
  buggy relocations when binutils-revert-rela.diff is active.
  [bsc#1206556]
- Disable ZSTD debug section compress by default.
- Enable zstd compression algorithm (instead of zlib)
  for debug info sections by default.
- Pack libgprofng only for supported platforms.
- Move libgprofng-related libraries to the proper locations (packages).
- Add --without=bootstrap for skipping of bootstrap (faster testing
  of the package).

- Remove broken arm32-avoid-copyreloc.patch to fix [gcc#108515]

Update to version 2.40:

* Objdump has a new command line option --show-all-symbols which will make it
  display all symbols that match a given address when disassembling.  (Normally
  only the first symbol that matches an address is shown).
* Add --enable-colored-disassembly configure time option to enable colored
  disassembly output by default, if the output device is a terminal.  Note,
  this configure option is disabled by default.
* DCO signed contributions are now accepted.
* objcopy --decompress-debug-sections now supports zstd compressed debug
  sections.  The new option --compress-debug-sections=zstd compresses debug
  sections with zstd.
* addr2line and objdump --dwarf now support zstd compressed debug sections.
* The dlltool program now accepts --deterministic-libraries and
  --non-deterministic-libraries as command line options to control whether or
  not it generates deterministic output libraries.  If neither of these options
  are used the default is whatever was set when the binutils were configured.
* readelf and objdump now have a newly added option --sframe which dumps the
  SFrame section.
* Add support for Intel RAO-INT instructions.
* Add support for Intel AVX-NE-CONVERT instructions.
* Add support for Intel MSRLIST instructions.
* Add support for Intel WRMSRNS instructions.
* Add support for Intel CMPccXADD instructions.
* Add support for Intel AVX-VNNI-INT8 instructions.
* Add support for Intel AVX-IFMA instructions.
* Add support for Intel PREFETCHI instructions.
* Add support for Intel AMX-FP16 instructions.
* gas now supports --compress-debug-sections=zstd to compress
  debug sections with zstd.
* Add --enable-default-compressed-debug-sections-algorithm={zlib,zstd}
  that selects the default compression algorithm
  for --enable-compressed-debug-sections.
* Add support for various T-Head extensions (XTheadBa, XTheadBb, XTheadBs,
  XTheadCmo, XTheadCondMov, XTheadFMemIdx, XTheadFmv, XTheadInt, XTheadMemIdx,
  XTheadMemPair, XTheadMac, and XTheadSync) from version 2.0 of the T-Head
  ISA manual, which are implemented in the Allwinner D1.
* Add support for the RISC-V Zawrs extension, version 1.0-rc4.
* Add support for Cortex-X1C for Arm.
* New command line option --gsframe to generate SFrame unwind information
  on x86_64 and aarch64 targets.
* The linker has a new command line option to suppress the generation of any
  warning or error messages.  This can be useful when there is a need to create
  a known non-working binary.  The option is -w or --no-warnings.
* ld now supports zstd compressed debug sections.  The new option
  --compress-debug-sections=zstd compresses debug sections with zstd.
* Add --enable-default-compressed-debug-sections-algorithm={zlib,zstd}
  that selects the default compression algorithm
  for --enable-compressed-debug-sections.
* Remove support for -z bndplt (MPX prefix instructions).

- Includes fixes for these CVEs:

  * bsc#1206080 aka CVE-2022-4285 aka PR29699

- Enable by default: --enable-colored-disassembly.
- fix build on x86_64_vX platforms 
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200962">SUSE bug 1200962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206080">SUSE bug 1206080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206556">SUSE bug 1206556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208037">SUSE bug 1208037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208038">SUSE bug 1208038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208040">SUSE bug 1208040</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208409">SUSE bug 1208409</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209642">SUSE bug 1209642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210297">SUSE bug 1210297</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210733">SUSE bug 1210733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213458">SUSE bug 1213458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214565">SUSE bug 1214565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214567">SUSE bug 1214567</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214579">SUSE bug 1214579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214580">SUSE bug 1214580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214604">SUSE bug 1214604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214611">SUSE bug 1214611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214619">SUSE bug 1214619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214620">SUSE bug 1214620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214623">SUSE bug 1214623</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214624">SUSE bug 1214624</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214625">SUSE bug 1214625</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-19726/">CVE-2020-19726</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-32256/">CVE-2021-32256</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-35205/">CVE-2022-35205</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-35206/">CVE-2022-35206</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-4285/">CVE-2022-4285</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-44840/">CVE-2022-44840</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45703/">CVE-2022-45703</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-47673/">CVE-2022-47673</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-47695/">CVE-2022-47695</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-47696/">CVE-2022-47696</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-48063/">CVE-2022-48063</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-48064/">CVE-2022-48064</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-48065/">CVE-2022-48065</cve>
	<cve impact="low" cvss3="0/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-0687/">CVE-2023-0687</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-1579/">CVE-2023-1579</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-1972/">CVE-2023-1972</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-2222/">CVE-2023-2222</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-25585/">CVE-2023-25585</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-25587/">CVE-2023-25587</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-25588/">CVE-2023-25588</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009791624" comment="binutils-2.41-150100.7.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009791625" comment="binutils-devel-2.41-150100.7.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009791592" comment="binutils-devel-32bit-2.41-150100.7.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009791626" comment="libctf-nobfd0-2.41-150100.7.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009791627" comment="libctf0-2.41-150100.7.46.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140255" version="1" class="patch">
	<metadata>
		<title>Security update for libwebp (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1215231" ref_url="https://bugzilla.suse.com/1215231" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-4863" ref_url="https://www.suse.com/security/cve/CVE-2023-4863/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3829-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031736.html" source="SUSE-SU"/>
		<description>
This update for libwebp fixes the following issues:

- CVE-2023-4863: Fixed heap buffer overflow (bsc#1215231).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1215231">SUSE bug 1215231</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4863/">CVE-2023-4863</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009796716" comment="libwebp-devel-0.5.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796717" comment="libwebp6-0.5.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796647" comment="libwebp6-32bit-0.5.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796718" comment="libwebpdecoder2-0.5.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796649" comment="libwebpdecoder2-32bit-0.5.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796719" comment="libwebpdemux2-0.5.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796720" comment="libwebpdemux2-32bit-0.5.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796721" comment="libwebpextras0-0.5.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796651" comment="libwebpextras0-32bit-0.5.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796722" comment="libwebpmux2-0.5.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796653" comment="libwebpmux2-32bit-0.5.0-150000.3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140256" version="1" class="patch">
	<metadata>
		<title>Security update for container-suseconnect (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212475" ref_url="https://bugzilla.suse.com/1212475" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:3834-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031731.html" source="SUSE-SU"/>
		<description>

This update of container-suseconnect fixes the following issues:

- rebuild the package with the go 1.21 security release (bsc#1212475).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212475">SUSE bug 1212475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796900" comment="container-suseconnect-2.4.0-150000.4.38.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140257" version="1" class="patch">
	<metadata>
		<title>Security update for quagga (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213284" ref_url="https://bugzilla.suse.com/1213284" source="BUGZILLA"/>
		<reference ref_id="1214735" ref_url="https://bugzilla.suse.com/1214735" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-38802" ref_url="https://www.suse.com/security/cve/CVE-2023-38802/" source="CVE"/>
		<reference ref_id="CVE-2023-41358" ref_url="https://www.suse.com/security/cve/CVE-2023-41358/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3836-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-September/031729.html" source="SUSE-SU"/>
		<description>
This update for quagga fixes the following issues:

  - CVE-2023-38802: Fixed bad length handling in BGP attribute handling (bsc#1213284).
  - CVE-2023-41358: Fixed possible crash when processing NLRIs if the attribute length is zero (bsc#1214735).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213284">SUSE bug 1213284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214735">SUSE bug 1214735</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-38802/">CVE-2023-38802</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-41358/">CVE-2023-41358</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009797458" comment="libfpm_pb0-1.1.1-150000.4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797459" comment="libospf0-1.1.1-150000.4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797460" comment="libospfapiclient0-1.1.1-150000.4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797461" comment="libquagga_pb0-1.1.1-150000.4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797462" comment="libzebra1-1.1.1-150000.4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797463" comment="quagga-1.1.1-150000.4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797464" comment="quagga-devel-1.1.1-150000.4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140258" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203693" ref_url="https://bugzilla.suse.com/1203693" source="BUGZILLA"/>
		<reference ref_id="1205149" ref_url="https://bugzilla.suse.com/1205149" source="BUGZILLA"/>
		<reference ref_id="1206073" ref_url="https://bugzilla.suse.com/1206073" source="BUGZILLA"/>
		<reference ref_id="1206389" ref_url="https://bugzilla.suse.com/1206389" source="BUGZILLA"/>
		<reference ref_id="1206395" ref_url="https://bugzilla.suse.com/1206395" source="BUGZILLA"/>
		<reference ref_id="1206664" ref_url="https://bugzilla.suse.com/1206664" source="BUGZILLA"/>
		<reference ref_id="1206677" ref_url="https://bugzilla.suse.com/1206677" source="BUGZILLA"/>
		<reference ref_id="1206784" ref_url="https://bugzilla.suse.com/1206784" source="BUGZILLA"/>
		<reference ref_id="1207036" ref_url="https://bugzilla.suse.com/1207036" source="BUGZILLA"/>
		<reference ref_id="1207186" ref_url="https://bugzilla.suse.com/1207186" source="BUGZILLA"/>
		<reference ref_id="1207237" ref_url="https://bugzilla.suse.com/1207237" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3107" ref_url="https://www.suse.com/security/cve/CVE-2022-3107/" source="CVE"/>
		<reference ref_id="CVE-2022-3108" ref_url="https://www.suse.com/security/cve/CVE-2022-3108/" source="CVE"/>
		<reference ref_id="CVE-2022-3564" ref_url="https://www.suse.com/security/cve/CVE-2022-3564/" source="CVE"/>
		<reference ref_id="CVE-2022-4662" ref_url="https://www.suse.com/security/cve/CVE-2022-4662/" source="CVE"/>
		<reference ref_id="CVE-2022-47929" ref_url="https://www.suse.com/security/cve/CVE-2022-47929/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013764.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-3107: Fixed missing check of return value of kvmalloc_array() (bnc#1206395).
- CVE-2022-3108: Fixed missing check of return value of kmemdup() (bnc#1206389).
- CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bnc#1206073).
- CVE-2022-4662: Fixed incorrect access control in the USB core subsystem that could lead a local user to crash the system (bnc#1206664).
- CVE-2022-47929: Fixed NULL pointer dereference bug in the traffic control subsystem (bnc#1207237).
- CVE-2023-23454: Fixed denial or service in cbq_classify in net/sched/sch_cbq.c (bnc#1207036).

The following non-security bugs were fixed:

- Added support for enabling livepatching related packages on -RT (jsc#PED-1706).
- Added suse-kernel-rpm-scriptlets to kmp buildreqs (boo#1205149).
- HID: betop: check shape of output reports (git-fixes, bsc#1207186).
- HID: betop: fix slab-out-of-bounds Write in betop_probe (git-fixes, bsc#1207186).
- HID: check empty report_list in hid_validate_values() (git-fixes, bsc#1206784).
- Reverted 'constraints: increase disk space for all architectures' (bsc#1203693)
- net: sched: atm: dont intepret cls results when asked to drop (bsc#1207036).
- net: sched: cbq: dont intepret cls results when asked to drop (bsc#1207036).
- sctp: fail if no bound addresses can be used for a given scope (bsc#1206677).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-14"/>
	<updated date="2023-02-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203693">SUSE bug 1203693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205149">SUSE bug 1205149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206073">SUSE bug 1206073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206389">SUSE bug 1206389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206395">SUSE bug 1206395</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206664">SUSE bug 1206664</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206677">SUSE bug 1206677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206784">SUSE bug 1206784</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207036">SUSE bug 1207036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207186">SUSE bug 1207186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207237">SUSE bug 1207237</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3107/">CVE-2022-3107</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3108/">CVE-2022-3108</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3564/">CVE-2022-3564</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-4662/">CVE-2022-4662</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-47929/">CVE-2022-47929</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009738385" comment="kernel-default-4.12.14-150100.197.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738386" comment="kernel-default-base-4.12.14-150100.197.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738387" comment="kernel-default-devel-4.12.14-150100.197.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738388" comment="kernel-devel-4.12.14-150100.197.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738389" comment="kernel-docs-4.12.14-150100.197.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738390" comment="kernel-macros-4.12.14-150100.197.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738391" comment="kernel-obs-build-4.12.14-150100.197.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738392" comment="kernel-source-4.12.14-150100.197.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738393" comment="kernel-syms-4.12.14-150100.197.134.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140259" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204455" ref_url="https://bugzilla.suse.com/1204455" source="BUGZILLA"/>
		<reference ref_id="1204456" ref_url="https://bugzilla.suse.com/1204456" source="BUGZILLA"/>
		<reference ref_id="1208027" ref_url="https://bugzilla.suse.com/1208027" source="BUGZILLA"/>
		<reference ref_id="1208028" ref_url="https://bugzilla.suse.com/1208028" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-39253" ref_url="https://www.suse.com/security/cve/CVE-2022-39253/" source="CVE"/>
		<reference ref_id="CVE-2022-39260" ref_url="https://www.suse.com/security/cve/CVE-2022-39260/" source="CVE"/>
		<reference ref_id="CVE-2023-22490" ref_url="https://www.suse.com/security/cve/CVE-2023-22490/" source="CVE"/>
		<reference ref_id="CVE-2023-23946" ref_url="https://www.suse.com/security/cve/CVE-2023-23946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0418-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013768.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

  - CVE-2023-22490: Fixed incorrectly usable local clone optimization even when using a non-local transport (bsc#1208027).
  - CVE-2023-23946: Fixed issue where a path outside the working tree can be overwritten as the user who is running 'git apply' (bsc#1208028).
  - CVE-2022-39260: Fixed overflow in `split_cmdline()`, leading to arbitrary heap writes and remote code execution (bsc#1204456).
  - CVE-2022-39253: Fixed dereference issue with symbolic links via the `--local` clone mechanism (bsc#1204455).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204455">SUSE bug 1204455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204456">SUSE bug 1204456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208027">SUSE bug 1208027</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208028">SUSE bug 1208028</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-39253/">CVE-2022-39253</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-39260/">CVE-2022-39260</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-22490/">CVE-2023-22490</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-23946/">CVE-2023-23946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009740058" comment="git-2.26.2-150000.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740059" comment="git-arch-2.26.2-150000.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740060" comment="git-core-2.26.2-150000.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740061" comment="git-cvs-2.26.2-150000.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740062" comment="git-daemon-2.26.2-150000.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740063" comment="git-doc-2.26.2-150000.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740064" comment="git-email-2.26.2-150000.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740065" comment="git-gui-2.26.2-150000.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740066" comment="git-svn-2.26.2-150000.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740067" comment="git-web-2.26.2-150000.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740068" comment="gitk-2.26.2-150000.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140260" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208138" ref_url="https://bugzilla.suse.com/1208138" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0767" ref_url="https://www.suse.com/security/cve/CVE-2023-0767/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013833.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

  Updated to NSS 3.79.4 (bsc#1208138):

  - CVE-2023-0767: Fixed handling of unknown PKCS#12 safe bag types.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208138">SUSE bug 1208138</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0767/">CVE-2023-0767</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009739389" comment="libfreebl3-3.79.4-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739390" comment="libfreebl3-32bit-3.79.4-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739391" comment="libfreebl3-hmac-3.79.4-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739392" comment="libfreebl3-hmac-32bit-3.79.4-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739393" comment="libsoftokn3-3.79.4-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739394" comment="libsoftokn3-32bit-3.79.4-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739395" comment="libsoftokn3-hmac-3.79.4-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739396" comment="libsoftokn3-hmac-32bit-3.79.4-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739397" comment="mozilla-nss-3.79.4-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739398" comment="mozilla-nss-32bit-3.79.4-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739399" comment="mozilla-nss-certs-3.79.4-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739400" comment="mozilla-nss-certs-32bit-3.79.4-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739401" comment="mozilla-nss-devel-3.79.4-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739402" comment="mozilla-nss-sysinit-3.79.4-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739404" comment="mozilla-nss-tools-3.79.4-150000.3.93.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140261" version="1" class="patch">
	<metadata>
		<title>Security update for apache2-mod_security2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207379" ref_url="https://bugzilla.suse.com/1207379" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-24021" ref_url="https://www.suse.com/security/cve/CVE-2023-24021/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0447-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013836.html" source="SUSE-SU"/>
		<description>
This update for apache2-mod_security2 fixes the following issues:

  - CVE-2023-24021: Fixed FILES_TMP_CONTENT missing complete content (bsc#1207379).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-17"/>
	<updated date="2023-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207379">SUSE bug 1207379</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-24021/">CVE-2023-24021</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739405" comment="apache2-mod_security2-2.9.2-150000.3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140262" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208275" ref_url="https://bugzilla.suse.com/1208275" source="BUGZILLA"/>
		<reference ref_id="1208276" ref_url="https://bugzilla.suse.com/1208276" source="BUGZILLA"/>
		<reference ref_id="1208277" ref_url="https://bugzilla.suse.com/1208277" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21216" ref_url="https://www.suse.com/security/cve/CVE-2022-21216/" source="CVE"/>
		<reference ref_id="CVE-2022-33196" ref_url="https://www.suse.com/security/cve/CVE-2022-33196/" source="CVE"/>
		<reference ref_id="CVE-2022-38090" ref_url="https://www.suse.com/security/cve/CVE-2022-38090/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013842.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20230214 release.
  
Security issues fixed:

- CVE-2022-38090: Security updates for [INTEL-SA-00767](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html) (bsc#1208275)
- CVE-2022-33196: Security updates for [INTEL-SA-00738](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html) (bsc#1208276)
- CVE-2022-21216: Security updates for [INTEL-SA-00700](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html) (bsc#1208277)

- New Platforms:
  
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SPR-SP         | E2       | 06-8f-05/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 |          | 2b000181 | Xeon Scalable Gen4
  | SPR-HBM        | B3       | 06-8f-08/10 |          | 2c000170 | Xeon Max
  | RPL-P 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-H 6+8      | J0       | 06-ba-02/07 |          | 0000410e | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-02/07 |          | 0000410e | Core Gen13

- Updated Platforms:
  
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-97-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-02/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | C0       | 06-bf-05/07 | 00000026 | 0000002c | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000424 | 00000429 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000424 | 00000429 | Core Gen12
  | CLX-SP         | B0       | 06-55-06/bf | 04003302 | 04003303 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003302 | 05003303 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 07002501 | 07002503 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003c | 0000003e | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 00000020 | 00000022 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-D          | B0       | 06-6c-01/10 | 01000201 | 01000211 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b6 | 000000b8 | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000375 | 0d000389 | Xeon Scalable Gen3
  | JSL            | A0/A1    | 06-9c-00/01 | 24000023 | 24000024 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | LKF            | B2/B3    | 06-8a-01/10 | 00000031 | 00000032 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000056 | 00000057 | Core Gen11
  | RPL-S          | S0       | 06-b7-01/32 | 0000010e | 00000112 | Core Gen13
  | SKX-SP         | B1       | 06-55-03/97 | 0100015e | 01000161 | Xeon Scalable
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-20"/>
	<updated date="2023-02-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208275">SUSE bug 1208275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208276">SUSE bug 1208276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208277">SUSE bug 1208277</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-21216/">CVE-2022-21216</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-33196/">CVE-2022-33196</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-38090/">CVE-2022-38090</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740057" comment="ucode-intel-20230214-150100.3.217.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140263" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208138" ref_url="https://bugzilla.suse.com/1208138" source="BUGZILLA"/>
		<reference ref_id="1208144" ref_url="https://bugzilla.suse.com/1208144" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0767" ref_url="https://www.suse.com/security/cve/CVE-2023-0767/" source="CVE"/>
		<reference ref_id="CVE-2023-25728" ref_url="https://www.suse.com/security/cve/CVE-2023-25728/" source="CVE"/>
		<reference ref_id="CVE-2023-25729" ref_url="https://www.suse.com/security/cve/CVE-2023-25729/" source="CVE"/>
		<reference ref_id="CVE-2023-25730" ref_url="https://www.suse.com/security/cve/CVE-2023-25730/" source="CVE"/>
		<reference ref_id="CVE-2023-25732" ref_url="https://www.suse.com/security/cve/CVE-2023-25732/" source="CVE"/>
		<reference ref_id="CVE-2023-25734" ref_url="https://www.suse.com/security/cve/CVE-2023-25734/" source="CVE"/>
		<reference ref_id="CVE-2023-25735" ref_url="https://www.suse.com/security/cve/CVE-2023-25735/" source="CVE"/>
		<reference ref_id="CVE-2023-25737" ref_url="https://www.suse.com/security/cve/CVE-2023-25737/" source="CVE"/>
		<reference ref_id="CVE-2023-25738" ref_url="https://www.suse.com/security/cve/CVE-2023-25738/" source="CVE"/>
		<reference ref_id="CVE-2023-25739" ref_url="https://www.suse.com/security/cve/CVE-2023-25739/" source="CVE"/>
		<reference ref_id="CVE-2023-25742" ref_url="https://www.suse.com/security/cve/CVE-2023-25742/" source="CVE"/>
		<reference ref_id="CVE-2023-25743" ref_url="https://www.suse.com/security/cve/CVE-2023-25743/" source="CVE"/>
		<reference ref_id="CVE-2023-25744" ref_url="https://www.suse.com/security/cve/CVE-2023-25744/" source="CVE"/>
		<reference ref_id="CVE-2023-25746" ref_url="https://www.suse.com/security/cve/CVE-2023-25746/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013850.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

  Updated to version 102.8.0 ESR (bsc#1208144):

  - CVE-2023-25728: Fixed content security policy leak in violation reports using iframes.
  - CVE-2023-25730: Fixed screen hijack via browser fullscreen mode.
  - CVE-2023-25743: Fixed Fullscreen notification not being shown in Firefox Focus.
  - CVE-2023-0767: Fixed arbitrary memory write via PKCS 12 in NSS.
  - CVE-2023-25735: Fixed potential use-after-free from compartment mismatch in SpiderMonkey.
  - CVE-2023-25737: Fixed invalid downcast in SVGUtils::SetupStrokeGeometry.
  - CVE-2023-25738: Fixed printing on Windows which could potentially crash Firefox with some device drivers.
  - CVE-2023-25739: Fixed use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext.
  - CVE-2023-25729: Fixed extensions opening external schemes without user knowledge.
  - CVE-2023-25732: Fixed out of bounds memory write from EncodeInputStream.
  - CVE-2023-25734: Fixed opening local .url files that causes unexpected network loads.
  - CVE-2023-25742: Fixed tab crash by Web Crypto ImportKey.
  - CVE-2023-25744: Fixed Memory safety bugs.
  - CVE-2023-25746: Fixed Memory safety bugs.

		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-21"/>
	<updated date="2023-02-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208138">SUSE bug 1208138</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208144">SUSE bug 1208144</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0767/">CVE-2023-0767</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-25728/">CVE-2023-25728</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-25729/">CVE-2023-25729</cve>
	<cve impact="critical" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-25730/">CVE-2023-25730</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-25732/">CVE-2023-25732</cve>
	<cve impact="critical" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-25734/">CVE-2023-25734</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-25735/">CVE-2023-25735</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-25737/">CVE-2023-25737</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25738/">CVE-2023-25738</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-25739/">CVE-2023-25739</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25742/">CVE-2023-25742</cve>
	<cve impact="critical" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-25743/">CVE-2023-25743</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-25744/">CVE-2023-25744</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-25746/">CVE-2023-25746</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009740053" comment="MozillaFirefox-102.8.0-150000.150.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740054" comment="MozillaFirefox-devel-102.8.0-150000.150.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740055" comment="MozillaFirefox-translations-common-102.8.0-150000.150.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740056" comment="MozillaFirefox-translations-other-102.8.0-150000.150.76.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140264" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208363" ref_url="https://bugzilla.suse.com/1208363" source="BUGZILLA"/>
		<reference ref_id="1208365" ref_url="https://bugzilla.suse.com/1208365" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-20032" ref_url="https://www.suse.com/security/cve/CVE-2023-20032/" source="CVE"/>
		<reference ref_id="CVE-2023-20052" ref_url="https://www.suse.com/security/cve/CVE-2023-20052/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0470-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013849.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

- CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser (bsc#1208363).
- CVE-2023-20052: Fixed a possible remote information leak vulnerability in the DMG file parser (bsc#1208365).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-21"/>
	<updated date="2023-02-21"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1208363">SUSE bug 1208363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208365">SUSE bug 1208365</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-20032/">CVE-2023-20032</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20052/">CVE-2023-20052</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009740618" comment="clamav-0.103.8-150000.3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740619" comment="clamav-devel-0.103.8-150000.3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740620" comment="libclamav9-0.103.8-150000.3.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009740621" comment="libfreshclam2-0.103.8-150000.3.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140265" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205300" ref_url="https://bugzilla.suse.com/1205300" source="BUGZILLA"/>
		<reference ref_id="1208102" ref_url="https://bugzilla.suse.com/1208102" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41862" ref_url="https://www.suse.com/security/cve/CVE-2022-41862/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013870.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

Update to 12.14:
                                                                                               
- CVE-2022-41862: Fixed memory leak in libpq (bsc#1208102).

- Update to 12.13 (bsc#1205300).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-22"/>
	<updated date="2023-02-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205300">SUSE bug 1205300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208102">SUSE bug 1208102</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41862/">CVE-2022-41862</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009739620" comment="libecpg6-12.14-150100.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739621" comment="libpq5-12.14-150100.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739622" comment="libpq5-32bit-12.14-150100.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739623" comment="postgresql12-12.14-150100.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739624" comment="postgresql12-contrib-12.14-150100.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739625" comment="postgresql12-devel-12.14-150100.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739626" comment="postgresql12-docs-12.14-150100.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739627" comment="postgresql12-plperl-12.14-150100.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739628" comment="postgresql12-plpython-12.14-150100.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739629" comment="postgresql12-pltcl-12.14-150100.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739630" comment="postgresql12-server-12.14-150100.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739631" comment="postgresql12-server-devel-12.14-150100.3.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140266" version="1" class="patch">
	<metadata>
		<title>Security update for poppler (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1140877" ref_url="https://bugzilla.suse.com/1140877" source="BUGZILLA"/>
		<reference ref_id="1202692" ref_url="https://bugzilla.suse.com/1202692" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13283" ref_url="https://www.suse.com/security/cve/CVE-2019-13283/" source="CVE"/>
		<reference ref_id="CVE-2022-38784" ref_url="https://www.suse.com/security/cve/CVE-2022-38784/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013869.html" source="SUSE-SU"/>
		<description>
This update for poppler fixes the following issues:

  - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder (bsc#1202692).
  - CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool (bsc#1140877).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-22"/>
	<updated date="2023-02-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140877">SUSE bug 1140877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202692">SUSE bug 1202692</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13283/">CVE-2019-13283</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38784/">CVE-2022-38784</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009741267" comment="libpoppler-cpp0-0.62.0-150000.4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741268" comment="libpoppler-devel-0.62.0-150000.4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741269" comment="libpoppler-glib-devel-0.62.0-150000.4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741270" comment="libpoppler-glib8-0.62.0-150000.4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741271" comment="libpoppler73-0.62.0-150000.4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741272" comment="poppler-tools-0.62.0-150000.4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741273" comment="typelib-1_0-Poppler-0_18-0.62.0-150000.4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140267" version="1" class="patch">
	<metadata>
		<title>Security update for pesign (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202933" ref_url="https://bugzilla.suse.com/1202933" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3560" ref_url="https://www.suse.com/security/cve/CVE-2022-3560/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0484-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013879.html" source="SUSE-SU"/>
		<description>
This update for pesign fixes the following issues:

  - CVE-2022-3560: Fixed pesign-authorize ExecStartPost script allowing privilege escalation from pesign to root (bsc#1202933).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-23"/>
	<updated date="2023-02-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202933">SUSE bug 1202933</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3560/">CVE-2022-3560</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742103" comment="pesign-0.112-150000.4.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140268" version="1" class="patch">
	<metadata>
		<title>Security update for c-ares (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208067" ref_url="https://bugzilla.suse.com/1208067" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4904" ref_url="https://www.suse.com/security/cve/CVE-2022-4904/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0486-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013877.html" source="SUSE-SU"/>
		<description>
This update for c-ares fixes the following issues:

  Updated to version 1.19.0:

  - CVE-2022-4904: Fixed missing string length check in config_sortlist() (bsc#1208067).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-23"/>
	<updated date="2023-02-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208067">SUSE bug 1208067</bugzilla>
	<cve impact="moderate" cvss3="6.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-4904/">CVE-2022-4904</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009739387" comment="c-ares-devel-1.19.0-150000.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009739388" comment="libcares2-1.19.0-150000.3.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140269" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186756" ref_url="https://bugzilla.suse.com/1186756" source="BUGZILLA"/>
		<reference ref_id="1186761" ref_url="https://bugzilla.suse.com/1186761" source="BUGZILLA"/>
		<reference ref_id="1187852" ref_url="https://bugzilla.suse.com/1187852" source="BUGZILLA"/>
		<reference ref_id="1189166" ref_url="https://bugzilla.suse.com/1189166" source="BUGZILLA"/>
		<reference ref_id="1190718" ref_url="https://bugzilla.suse.com/1190718" source="BUGZILLA"/>
		<reference ref_id="1190719" ref_url="https://bugzilla.suse.com/1190719" source="BUGZILLA"/>
		<reference ref_id="1190722" ref_url="https://bugzilla.suse.com/1190722" source="BUGZILLA"/>
		<reference ref_id="1190723" ref_url="https://bugzilla.suse.com/1190723" source="BUGZILLA"/>
		<reference ref_id="1190726" ref_url="https://bugzilla.suse.com/1190726" source="BUGZILLA"/>
		<reference ref_id="1190729" ref_url="https://bugzilla.suse.com/1190729" source="BUGZILLA"/>
		<reference ref_id="1190733" ref_url="https://bugzilla.suse.com/1190733" source="BUGZILLA"/>
		<reference ref_id="1190734" ref_url="https://bugzilla.suse.com/1190734" source="BUGZILLA"/>
		<reference ref_id="1190735" ref_url="https://bugzilla.suse.com/1190735" source="BUGZILLA"/>
		<reference ref_id="1206442" ref_url="https://bugzilla.suse.com/1206442" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-20891" ref_url="https://www.suse.com/security/cve/CVE-2020-20891/" source="CVE"/>
		<reference ref_id="CVE-2020-20892" ref_url="https://www.suse.com/security/cve/CVE-2020-20892/" source="CVE"/>
		<reference ref_id="CVE-2020-20895" ref_url="https://www.suse.com/security/cve/CVE-2020-20895/" source="CVE"/>
		<reference ref_id="CVE-2020-20896" ref_url="https://www.suse.com/security/cve/CVE-2020-20896/" source="CVE"/>
		<reference ref_id="CVE-2020-20899" ref_url="https://www.suse.com/security/cve/CVE-2020-20899/" source="CVE"/>
		<reference ref_id="CVE-2020-20902" ref_url="https://www.suse.com/security/cve/CVE-2020-20902/" source="CVE"/>
		<reference ref_id="CVE-2020-22037" ref_url="https://www.suse.com/security/cve/CVE-2020-22037/" source="CVE"/>
		<reference ref_id="CVE-2020-22042" ref_url="https://www.suse.com/security/cve/CVE-2020-22042/" source="CVE"/>
		<reference ref_id="CVE-2020-35965" ref_url="https://www.suse.com/security/cve/CVE-2020-35965/" source="CVE"/>
		<reference ref_id="CVE-2021-3566" ref_url="https://www.suse.com/security/cve/CVE-2021-3566/" source="CVE"/>
		<reference ref_id="CVE-2021-38092" ref_url="https://www.suse.com/security/cve/CVE-2021-38092/" source="CVE"/>
		<reference ref_id="CVE-2021-38093" ref_url="https://www.suse.com/security/cve/CVE-2021-38093/" source="CVE"/>
		<reference ref_id="CVE-2021-38094" ref_url="https://www.suse.com/security/cve/CVE-2021-38094/" source="CVE"/>
		<reference ref_id="CVE-2022-3109" ref_url="https://www.suse.com/security/cve/CVE-2022-3109/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013405.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

- CVE-2022-3109: Fixed null pointer dereference in vp3_decode_frame() (bsc#1206442).
- CVE-2020-22042: Fixed a denial of service vulnerability led by a memory leak in the link_filter_inouts function in libavfilter/graphparser.c. (bsc#1186761)
- CVE-2021-38094: Fixed an integer overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c (bsc#1190735).
- CVE-2021-38093: Fixed an integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c (bsc#1190734).
- CVE-2021-38092: Fixed an Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c (bsc#1190733).
- CVE-2020-22037: Fixed a denial of service vulnerability due to a memory leak in avcodec_alloc_context3 at options.c (bsc#1186756).
- CVE-2021-3566: Fixed an exposure of sensitive information on ffmpeg version prior to 4.3 (bsc#1189166).
- CVE-2020-35965: Fixed an out-of-bounds write in decode_frame in libavcodec/exr.c (bsc#1187852).
- CVE-2020-20892: Fixed a division by zero in function filter_frame in libavfilter/vf_lenscorrection.c (bsc#1190719).
- CVE-2020-20891: Fixed a buffer overflow vulnerability in function config_input in libavfilter/vf_gblur.c (bsc#1190718).
- CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name in libavfilter/vf_avgblur.c (bsc#1190722).
- CVE-2020-20896: Fixed a NULL pointer dereference in function latm_write_packet in libavformat/latmenc.c (bsc#1190723).
- CVE-2020-20899: Fixed a buffer overflow vulnerability in function config_props in libavfilter/vf_bwdif.c (bsc#1190726).
- CVE-2020-20902: Fixed an out-of-bounds read vulnerability in long_term_filter function in g729postfilter.c (bsc#1190729).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-02"/>
	<updated date="2023-01-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186756">SUSE bug 1186756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186761">SUSE bug 1186761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187852">SUSE bug 1187852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189166">SUSE bug 1189166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190718">SUSE bug 1190718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190719">SUSE bug 1190719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190722">SUSE bug 1190722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190723">SUSE bug 1190723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190726">SUSE bug 1190726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190729">SUSE bug 1190729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190733">SUSE bug 1190733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190734">SUSE bug 1190734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190735">SUSE bug 1190735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206442">SUSE bug 1206442</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20891/">CVE-2020-20891</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20892/">CVE-2020-20892</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20895/">CVE-2020-20895</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20896/">CVE-2020-20896</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20899/">CVE-2020-20899</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20902/">CVE-2020-20902</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22037/">CVE-2020-22037</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22042/">CVE-2020-22042</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35965/">CVE-2020-35965</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3566/">CVE-2021-3566</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38092/">CVE-2021-38092</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38093/">CVE-2021-38093</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38094/">CVE-2021-38094</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3109/">CVE-2022-3109</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009730500" comment="libavcodec-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730501" comment="libavcodec57-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730502" comment="libavcodec57-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730503" comment="libavdevice-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730504" comment="libavdevice57-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730505" comment="libavdevice57-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730506" comment="libavfilter-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730507" comment="libavfilter6-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730508" comment="libavfilter6-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730509" comment="libavformat-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730510" comment="libavformat57-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730511" comment="libavformat57-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730512" comment="libavresample-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730513" comment="libavresample3-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730514" comment="libavresample3-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730515" comment="libavutil-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730516" comment="libavutil55-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730517" comment="libavutil55-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730518" comment="libpostproc-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730519" comment="libpostproc54-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730520" comment="libpostproc54-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730521" comment="libswresample-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730522" comment="libswresample2-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730523" comment="libswresample2-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730524" comment="libswscale-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730525" comment="libswscale4-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730526" comment="libswscale4-32bit-3.4.2-150000.4.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140270" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208366" ref_url="https://bugzilla.suse.com/1208366" source="BUGZILLA"/>
		<reference ref_id="1208367" ref_url="https://bugzilla.suse.com/1208367" source="BUGZILLA"/>
		<reference ref_id="1208388" ref_url="https://bugzilla.suse.com/1208388" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0567" ref_url="https://www.suse.com/security/cve/CVE-2023-0567/" source="CVE"/>
		<reference ref_id="CVE-2023-0568" ref_url="https://www.suse.com/security/cve/CVE-2023-0568/" source="CVE"/>
		<reference ref_id="CVE-2023-0662" ref_url="https://www.suse.com/security/cve/CVE-2023-0662/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0514-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013884.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

  - CVE-2023-0568: Fixed NULL byte off-by-one in php_check_specific_open_basedir (bnc#1208366).
  - CVE-2023-0662: Fixed DoS vulnerability when parsing multipart request body (bnc#1208367).
  - CVE-2023-0567: Fixed vulnerability where BCrypt hashes erroneously validate if the salt is cut short by `$` (bsc#1208388).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-24"/>
	<updated date="2023-02-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208366">SUSE bug 1208366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208367">SUSE bug 1208367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208388">SUSE bug 1208388</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-0567/">CVE-2023-0567</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0568/">CVE-2023-0568</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0662/">CVE-2023-0662</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009741213" comment="apache2-mod_php7-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741214" comment="php7-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741215" comment="php7-bcmath-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741216" comment="php7-bz2-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741217" comment="php7-calendar-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741218" comment="php7-ctype-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741219" comment="php7-curl-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741220" comment="php7-dba-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741221" comment="php7-devel-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741222" comment="php7-dom-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741223" comment="php7-enchant-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741224" comment="php7-exif-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741225" comment="php7-fastcgi-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741226" comment="php7-fileinfo-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741227" comment="php7-fpm-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741228" comment="php7-ftp-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741229" comment="php7-gd-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741230" comment="php7-gettext-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741231" comment="php7-gmp-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741232" comment="php7-iconv-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741233" comment="php7-intl-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741234" comment="php7-json-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741235" comment="php7-ldap-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741236" comment="php7-mbstring-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741237" comment="php7-mysql-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741238" comment="php7-odbc-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741239" comment="php7-opcache-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741240" comment="php7-openssl-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741241" comment="php7-pcntl-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741242" comment="php7-pdo-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741243" comment="php7-pear-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741244" comment="php7-pear-Archive_Tar-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741245" comment="php7-pgsql-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741246" comment="php7-phar-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741247" comment="php7-posix-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741248" comment="php7-readline-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741249" comment="php7-shmop-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741250" comment="php7-snmp-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741251" comment="php7-soap-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741252" comment="php7-sockets-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741253" comment="php7-sodium-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741254" comment="php7-sqlite-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741255" comment="php7-sysvmsg-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741256" comment="php7-sysvsem-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741257" comment="php7-sysvshm-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741258" comment="php7-tidy-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741259" comment="php7-tokenizer-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741260" comment="php7-wddx-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741261" comment="php7-xmlreader-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741262" comment="php7-xmlrpc-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741263" comment="php7-xmlwriter-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741264" comment="php7-xsl-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741265" comment="php7-zip-7.2.34-150000.4.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741266" comment="php7-zlib-7.2.34-150000.4.109.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140271" version="1" class="patch">
	<metadata>
		<title>Security update for python-pip (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="1195831" ref_url="https://bugzilla.suse.com/1195831" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0516-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013882.html" source="SUSE-SU"/>
		<description>
This update for python-pip fixes the following issues:

- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).

- Make wheel a separate build run to avoid the setuptools/wheel build
  cycle.

- Switch this package to use update-alternatives for all files
  in %{_bindir} so it doesn't collide with the versions on
  'the latest' versions of Python interpreter (jsc#SLE-18038,
  bsc#1195831).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-24"/>
	<updated date="2023-02-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195831">SUSE bug 1195831</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680247" comment="python2-pip-20.0.2-150100.6.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680168" comment="python3-pip-20.0.2-150100.6.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742336" comment="python3-pip-wheel-20.0.2-150100.6.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140272" version="1" class="patch">
	<metadata>
		<title>Security update for libksba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206579" ref_url="https://bugzilla.suse.com/1206579" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-47629" ref_url="https://www.suse.com/security/cve/CVE-2022-47629/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0056-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013779.html" source="SUSE-SU"/>
		<description>
This update for libksba fixes the following issues:

- CVE-2022-47629: Fixed an integer overflow vulnerability in the CRL
  signature parser (bsc#1206579).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-15"/>
	<updated date="2023-02-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206579">SUSE bug 1206579</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-47629/">CVE-2022-47629</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009738277" comment="libksba-devel-1.3.5-150000.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730954" comment="libksba8-1.3.5-150000.4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140273" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206750" ref_url="https://bugzilla.suse.com/1206750" source="BUGZILLA"/>
		<reference ref_id="1207997" ref_url="https://bugzilla.suse.com/1207997" source="BUGZILLA"/>
		<reference ref_id="1208328" ref_url="https://bugzilla.suse.com/1208328" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42826" ref_url="https://www.suse.com/security/cve/CVE-2022-42826/" source="CVE"/>
		<reference ref_id="CVE-2022-42852" ref_url="https://www.suse.com/security/cve/CVE-2022-42852/" source="CVE"/>
		<reference ref_id="CVE-2022-42863" ref_url="https://www.suse.com/security/cve/CVE-2022-42863/" source="CVE"/>
		<reference ref_id="CVE-2022-42867" ref_url="https://www.suse.com/security/cve/CVE-2022-42867/" source="CVE"/>
		<reference ref_id="CVE-2022-46691" ref_url="https://www.suse.com/security/cve/CVE-2022-46691/" source="CVE"/>
		<reference ref_id="CVE-2022-46692" ref_url="https://www.suse.com/security/cve/CVE-2022-46692/" source="CVE"/>
		<reference ref_id="CVE-2022-46698" ref_url="https://www.suse.com/security/cve/CVE-2022-46698/" source="CVE"/>
		<reference ref_id="CVE-2022-46699" ref_url="https://www.suse.com/security/cve/CVE-2022-46699/" source="CVE"/>
		<reference ref_id="CVE-2022-46700" ref_url="https://www.suse.com/security/cve/CVE-2022-46700/" source="CVE"/>
		<reference ref_id="CVE-2023-23517" ref_url="https://www.suse.com/security/cve/CVE-2023-23517/" source="CVE"/>
		<reference ref_id="CVE-2023-23518" ref_url="https://www.suse.com/security/cve/CVE-2023-23518/" source="CVE"/>
		<reference ref_id="CVE-2023-23529" ref_url="https://www.suse.com/security/cve/CVE-2023-23529/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0573-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013931.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.38.5 (boo#1208328):

- CVE-2023-23529: Fixed possible arbitrary code execution via maliciously crafted web content.

Update to version 2.38.4 (boo#1207997):

- CVE-2023-23517: Fixed web content processing that could have led to arbitrary code execution.
- CVE-2023-23518: Fixed web content processing that could have led to arbitrary code execution.
- CVE-2022-42826: Fixed a use-after-free issue that was caused by improper memory management.


New CVE and bug references where added for already released updates:

Update to version 2.38.3 (boo#1206750):

- CVE-2022-42852: Fixed disclosure of process memory by improved memory handling.
- CVE-2022-42867: Fixed a use after free issue was addressed with improved memory management.
- CVE-2022-46692: Fixed bypass of Same Origin Policy through improved state management.
- CVE-2022-46698: Fixed disclosure of sensitive user information with improved checks.
- CVE-2022-46699: Fixed an arbitrary code execution caused by memory corruption.
- CVE-2022-46700: Fixed a potential arbitrary code execution when processing maliciously crafted web content.

Update to version 2.38.1:

- CVE-2022-46691: Fixed a potential arbitrary code execution when processing maliciously crafted web content.

Update to version 2.38.0:

- CVE-2022-42863: Fixed a potential arbitrary code execution when processing maliciously crafted web content.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-28"/>
	<updated date="2023-02-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206750">SUSE bug 1206750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207997">SUSE bug 1207997</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208328">SUSE bug 1208328</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42826/">CVE-2022-42826</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-42852/">CVE-2022-42852</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42863/">CVE-2022-42863</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42867/">CVE-2022-42867</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46691/">CVE-2022-46691</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-46692/">CVE-2022-46692</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-46698/">CVE-2022-46698</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46699/">CVE-2022-46699</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46700/">CVE-2022-46700</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23517/">CVE-2023-23517</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23518/">CVE-2023-23518</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23529/">CVE-2023-23529</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009742598" comment="libjavascriptcoregtk-4_0-18-2.38.5-150000.3.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742599" comment="libwebkit2gtk-4_0-37-2.38.5-150000.3.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742600" comment="libwebkit2gtk3-lang-2.38.5-150000.3.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742601" comment="typelib-1_0-JavaScriptCore-4_0-2.38.5-150000.3.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742602" comment="typelib-1_0-WebKit2-4_0-2.38.5-150000.3.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742603" comment="typelib-1_0-WebKit2WebExtension-4_0-2.38.5-150000.3.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742604" comment="webkit2gtk-4_0-injected-bundles-2.38.5-150000.3.134.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742605" comment="webkit2gtk3-devel-2.38.5-150000.3.134.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140274" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208487" ref_url="https://bugzilla.suse.com/1208487" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-23920" ref_url="https://www.suse.com/security/cve/CVE-2023-23920/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0606-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013973.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- CVE-2023-23920: Fixed insecure loading of ICU data through ICU_DATA environment (bsc#1208487).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-03"/>
	<updated date="2023-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208487">SUSE bug 1208487</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23920/">CVE-2023-23920</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009742606" comment="nodejs10-10.24.1-150000.1.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742607" comment="nodejs10-devel-10.24.1-150000.1.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742474" comment="nodejs10-docs-10.24.1-150000.1.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742608" comment="npm10-10.24.1-150000.1.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140275" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205874" ref_url="https://bugzilla.suse.com/1205874" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-46340" ref_url="https://www.suse.com/security/cve/CVE-2022-46340/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0657-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013990.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- Fixed a regression introduced with security update for CVE-2022-46340 (bsc#1205874).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-08"/>
	<updated date="2023-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205874">SUSE bug 1205874</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46340/">CVE-2022-46340</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009743421" comment="xorg-x11-server-1.20.3-150100.14.5.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743422" comment="xorg-x11-server-extra-1.20.3-150100.14.5.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743423" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.39.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140276" version="1" class="patch">
	<metadata>
		<title>Security update for emacs (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208512" ref_url="https://bugzilla.suse.com/1208512" source="BUGZILLA"/>
		<reference ref_id="1208515" ref_url="https://bugzilla.suse.com/1208515" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-48337" ref_url="https://www.suse.com/security/cve/CVE-2022-48337/" source="CVE"/>
		<reference ref_id="CVE-2022-48339" ref_url="https://www.suse.com/security/cve/CVE-2022-48339/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0675-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/013997.html" source="SUSE-SU"/>
		<description>
This update for emacs fixes the following issues:

  - CVE-2022-48337: Fixed etags local command injection vulnerability (bsc#1208515).
  - CVE-2022-48339: Fixed htmlfontify.el command injection vulnerability (bsc#1208512).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-08"/>
	<updated date="2023-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208512">SUSE bug 1208512</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208515">SUSE bug 1208515</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-48337/">CVE-2022-48337</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-48339/">CVE-2022-48339</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009741704" comment="emacs-25.3-150000.3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741705" comment="emacs-el-25.3-150000.3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741706" comment="emacs-info-25.3-150000.3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741707" comment="emacs-nox-25.3-150000.3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741708" comment="emacs-x11-25.3-150000.3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009741709" comment="etags-25.3-150000.3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140277" version="1" class="patch">
	<metadata>
		<title>Security update for libxslt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208574" ref_url="https://bugzilla.suse.com/1208574" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30560" ref_url="https://www.suse.com/security/cve/CVE-2021-30560/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0680-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014003.html" source="SUSE-SU"/>
		<description>
This update for libxslt fixes the following issues:

- CVE-2021-30560: Fixing a use after free vulnerability in Blink XSLT (bsc#1208574).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-08"/>
	<updated date="2023-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208574">SUSE bug 1208574</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30560/">CVE-2021-30560</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009742109" comment="libxslt-devel-1.1.32-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742110" comment="libxslt-tools-1.1.32-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742111" comment="libxslt1-1.1.32-150000.3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140278" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208513" ref_url="https://bugzilla.suse.com/1208513" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-24998" ref_url="https://www.suse.com/security/cve/CVE-2023-24998/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0697-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014017.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2023-24998: Fixed FileUpload DoS with excessive parts (bsc#1208513).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-10"/>
	<updated date="2023-03-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208513">SUSE bug 1208513</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-24998/">CVE-2023-24998</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009742889" comment="tomcat-9.0.36-150100.4.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742890" comment="tomcat-admin-webapps-9.0.36-150100.4.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742891" comment="tomcat-el-3_0-api-9.0.36-150100.4.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742892" comment="tomcat-jsp-2_3-api-9.0.36-150100.4.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742893" comment="tomcat-lib-9.0.36-150100.4.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742894" comment="tomcat-servlet-4_0-api-9.0.36-150100.4.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742895" comment="tomcat-webapps-9.0.36-150100.4.87.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140279" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202666" ref_url="https://bugzilla.suse.com/1202666" source="BUGZILLA"/>
		<reference ref_id="1205244" ref_url="https://bugzilla.suse.com/1205244" source="BUGZILLA"/>
		<reference ref_id="1208471" ref_url="https://bugzilla.suse.com/1208471" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45061" ref_url="https://www.suse.com/security/cve/CVE-2022-45061/" source="CVE"/>
		<reference ref_id="CVE-2023-24329" ref_url="https://www.suse.com/security/cve/CVE-2023-24329/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0724-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014033.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).
- CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domain names (bsc#1205244).

The following non-security bug was fixed:

- Making compileall.py compliant with year 2038 (bsc#1202666, gh#python/cpython#79171).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-14"/>
	<updated date="2023-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202666">SUSE bug 1202666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205244">SUSE bug 1205244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208471">SUSE bug 1208471</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45061/">CVE-2022-45061</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2023-24329/">CVE-2023-24329</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009743644" comment="libpython2_7-1_0-2.7.18-150000.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743645" comment="python-2.7.18-150000.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743646" comment="python-base-2.7.18-150000.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743741" comment="python-curses-2.7.18-150000.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743742" comment="python-devel-2.7.18-150000.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743743" comment="python-gdbm-2.7.18-150000.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743647" comment="python-tk-2.7.18-150000.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743744" comment="python-xml-2.7.18-150000.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140280" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209173" ref_url="https://bugzilla.suse.com/1209173" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-25748" ref_url="https://www.suse.com/security/cve/CVE-2023-25748/" source="CVE"/>
		<reference ref_id="CVE-2023-25749" ref_url="https://www.suse.com/security/cve/CVE-2023-25749/" source="CVE"/>
		<reference ref_id="CVE-2023-25750" ref_url="https://www.suse.com/security/cve/CVE-2023-25750/" source="CVE"/>
		<reference ref_id="CVE-2023-25751" ref_url="https://www.suse.com/security/cve/CVE-2023-25751/" source="CVE"/>
		<reference ref_id="CVE-2023-25752" ref_url="https://www.suse.com/security/cve/CVE-2023-25752/" source="CVE"/>
		<reference ref_id="CVE-2023-28159" ref_url="https://www.suse.com/security/cve/CVE-2023-28159/" source="CVE"/>
		<reference ref_id="CVE-2023-28160" ref_url="https://www.suse.com/security/cve/CVE-2023-28160/" source="CVE"/>
		<reference ref_id="CVE-2023-28161" ref_url="https://www.suse.com/security/cve/CVE-2023-28161/" source="CVE"/>
		<reference ref_id="CVE-2023-28162" ref_url="https://www.suse.com/security/cve/CVE-2023-28162/" source="CVE"/>
		<reference ref_id="CVE-2023-28163" ref_url="https://www.suse.com/security/cve/CVE-2023-28163/" source="CVE"/>
		<reference ref_id="CVE-2023-28164" ref_url="https://www.suse.com/security/cve/CVE-2023-28164/" source="CVE"/>
		<reference ref_id="CVE-2023-28176" ref_url="https://www.suse.com/security/cve/CVE-2023-28176/" source="CVE"/>
		<reference ref_id="CVE-2023-28177" ref_url="https://www.suse.com/security/cve/CVE-2023-28177/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014031.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Update to version 102.9.0 ESR (bsc#1209173):
    
- CVE-2023-28159: Fullscreen Notification could have been hidden by download popups on Android
- CVE-2023-25748: Fullscreen Notification could have been hidden by window prompts on Android
- CVE-2023-25749: Firefox for Android may have opened third-party apps without a prompt
- CVE-2023-25750: Potential ServiceWorker cache leak during private browsing mode
- CVE-2023-25751: Incorrect code generation during JIT compilation
- CVE-2023-28160: Redirect to Web Extension files may have leaked local path
- CVE-2023-28164: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation
- CVE-2023-28161: One-time permissions granted to a local file were extended to other local files loaded in the same tab
- CVE-2023-28162: Invalid downcast in Worklets
- CVE-2023-25752: Potential out-of-bounds when accessing throttled streams
- CVE-2023-28163: Windows Save As dialog resolved environment variables
- CVE-2023-28176: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9
- CVE-2023-28177: Memory safety bugs fixed in Firefox 111
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-14"/>
	<updated date="2023-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209173">SUSE bug 1209173</bugzilla>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-25748/">CVE-2023-25748</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-25749/">CVE-2023-25749</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-25750/">CVE-2023-25750</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25751/">CVE-2023-25751</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-25752/">CVE-2023-25752</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-28159/">CVE-2023-28159</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-28160/">CVE-2023-28160</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28161/">CVE-2023-28161</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28162/">CVE-2023-28162</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-28163/">CVE-2023-28163</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-28164/">CVE-2023-28164</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28176/">CVE-2023-28176</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28177/">CVE-2023-28177</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009744614" comment="MozillaFirefox-102.9.0-150000.150.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744615" comment="MozillaFirefox-devel-102.9.0-150000.150.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744616" comment="MozillaFirefox-translations-common-102.9.0-150000.150.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744617" comment="MozillaFirefox-translations-other-102.9.0-150000.150.79.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140281" version="1" class="patch">
	<metadata>
		<title>Security update for jakarta-commons-fileupload (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208513" ref_url="https://bugzilla.suse.com/1208513" source="BUGZILLA"/>
		<reference ref_id="986359" ref_url="https://bugzilla.suse.com/986359" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-3092" ref_url="https://www.suse.com/security/cve/CVE-2016-3092/" source="CVE"/>
		<reference ref_id="CVE-2023-24998" ref_url="https://www.suse.com/security/cve/CVE-2023-24998/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014040.html" source="SUSE-SU"/>
		<description>
This update for jakarta-commons-fileupload fixes the following issues:

- CVE-2016-3092: Fixed a usage of vulnerable FileUpload package can result in denial of service (bsc#986359). 
- CVE-2023-24998: Fixed a FileUpload deny of service with excessive parts (bsc#1208513).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-14"/>
	<updated date="2023-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208513">SUSE bug 1208513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/986359">SUSE bug 986359</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3092/">CVE-2016-3092</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-24998/">CVE-2023-24998</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743820" comment="jakarta-commons-fileupload-1.1.1-150000.4.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140282" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188607" ref_url="https://bugzilla.suse.com/1188607" source="BUGZILLA"/>
		<reference ref_id="1208443" ref_url="https://bugzilla.suse.com/1208443" source="BUGZILLA"/>
		<reference ref_id="1208471" ref_url="https://bugzilla.suse.com/1208471" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-24329" ref_url="https://www.suse.com/security/cve/CVE-2023-24329/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014036.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).  

The following non-security bugs were fixed:

- Fixed a crash in the garbage collection (bsc#1188607)
- Fixed email.generator.py to not replace a non-existent header (bsc#1208443, gh#python/cpython#71508).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-14"/>
	<updated date="2023-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188607">SUSE bug 1188607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208443">SUSE bug 1208443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208471">SUSE bug 1208471</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2023-24329/">CVE-2023-24329</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009743411" comment="libpython3_6m1_0-3.6.15-150000.3.124.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743412" comment="python3-3.6.15-150000.3.124.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743413" comment="python3-base-3.6.15-150000.3.124.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743414" comment="python3-curses-3.6.15-150000.3.124.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743415" comment="python3-dbm-3.6.15-150000.3.124.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743416" comment="python3-devel-3.6.15-150000.3.124.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743417" comment="python3-idle-3.6.15-150000.3.124.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743418" comment="python3-testsuite-3.6.15-150000.3.124.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743419" comment="python3-tk-3.6.15-150000.3.124.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743420" comment="python3-tools-3.6.15-150000.3.124.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140283" version="1" class="patch">
	<metadata>
		<title>Security update for python-cryptography (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208036" ref_url="https://bugzilla.suse.com/1208036" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-23931" ref_url="https://www.suse.com/security/cve/CVE-2023-23931/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014042.html" source="SUSE-SU"/>
		<description>
This update for python-cryptography fixes the following issues:

- CVE-2023-23931: Fixed a memory corruption inside Cipher.update_into via immutable objects (bsc#1208036).  
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-15"/>
	<updated date="2023-03-15"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1208036">SUSE bug 1208036</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-23931/">CVE-2023-23931</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009742162" comment="python2-cryptography-2.9.2-150100.7.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742163" comment="python3-cryptography-2.9.2-150100.7.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140284" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206549" ref_url="https://bugzilla.suse.com/1206549" source="BUGZILLA"/>
		<reference ref_id="1207246" ref_url="https://bugzilla.suse.com/1207246" source="BUGZILLA"/>
		<reference ref_id="1207248" ref_url="https://bugzilla.suse.com/1207248" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-21835" ref_url="https://www.suse.com/security/cve/CVE-2023-21835/" source="CVE"/>
		<reference ref_id="CVE-2023-21843" ref_url="https://www.suse.com/security/cve/CVE-2023-21843/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0752-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014063.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248).
- CVE-2023-21835: Fixed handshake DoS attack against DTLS connections (bsc#1207246).

Bugfixes:

- Remove broken accessibility sub-package (bsc#1206549).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-16"/>
	<updated date="2023-03-16"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1206549">SUSE bug 1206549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207246">SUSE bug 1207246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207248">SUSE bug 1207248</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-21835/">CVE-2023-21835</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21843/">CVE-2023-21843</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009742797" comment="java-11-openjdk-11.0.18.0-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742798" comment="java-11-openjdk-demo-11.0.18.0-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742799" comment="java-11-openjdk-devel-11.0.18.0-150000.3.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742800" comment="java-11-openjdk-headless-11.0.18.0-150000.3.93.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140285" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186449" ref_url="https://bugzilla.suse.com/1186449" source="BUGZILLA"/>
		<reference ref_id="1194535" ref_url="https://bugzilla.suse.com/1194535" source="BUGZILLA"/>
		<reference ref_id="1201420" ref_url="https://bugzilla.suse.com/1201420" source="BUGZILLA"/>
		<reference ref_id="1203331" ref_url="https://bugzilla.suse.com/1203331" source="BUGZILLA"/>
		<reference ref_id="1203332" ref_url="https://bugzilla.suse.com/1203332" source="BUGZILLA"/>
		<reference ref_id="1204356" ref_url="https://bugzilla.suse.com/1204356" source="BUGZILLA"/>
		<reference ref_id="1204662" ref_url="https://bugzilla.suse.com/1204662" source="BUGZILLA"/>
		<reference ref_id="1205711" ref_url="https://bugzilla.suse.com/1205711" source="BUGZILLA"/>
		<reference ref_id="1207051" ref_url="https://bugzilla.suse.com/1207051" source="BUGZILLA"/>
		<reference ref_id="1207773" ref_url="https://bugzilla.suse.com/1207773" source="BUGZILLA"/>
		<reference ref_id="1207795" ref_url="https://bugzilla.suse.com/1207795" source="BUGZILLA"/>
		<reference ref_id="1207845" ref_url="https://bugzilla.suse.com/1207845" source="BUGZILLA"/>
		<reference ref_id="1207875" ref_url="https://bugzilla.suse.com/1207875" source="BUGZILLA"/>
		<reference ref_id="1208700" ref_url="https://bugzilla.suse.com/1208700" source="BUGZILLA"/>
		<reference ref_id="1208837" ref_url="https://bugzilla.suse.com/1208837" source="BUGZILLA"/>
		<reference ref_id="1209188" ref_url="https://bugzilla.suse.com/1209188" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4203" ref_url="https://www.suse.com/security/cve/CVE-2021-4203/" source="CVE"/>
		<reference ref_id="CVE-2022-2991" ref_url="https://www.suse.com/security/cve/CVE-2022-2991/" source="CVE"/>
		<reference ref_id="CVE-2022-36280" ref_url="https://www.suse.com/security/cve/CVE-2022-36280/" source="CVE"/>
		<reference ref_id="CVE-2022-38096" ref_url="https://www.suse.com/security/cve/CVE-2022-38096/" source="CVE"/>
		<reference ref_id="CVE-2022-4129" ref_url="https://www.suse.com/security/cve/CVE-2022-4129/" source="CVE"/>
		<reference ref_id="CVE-2023-0045" ref_url="https://www.suse.com/security/cve/CVE-2023-0045/" source="CVE"/>
		<reference ref_id="CVE-2023-0590" ref_url="https://www.suse.com/security/cve/CVE-2023-0590/" source="CVE"/>
		<reference ref_id="CVE-2023-0597" ref_url="https://www.suse.com/security/cve/CVE-2023-0597/" source="CVE"/>
		<reference ref_id="CVE-2023-1118" ref_url="https://www.suse.com/security/cve/CVE-2023-1118/" source="CVE"/>
		<reference ref_id="CVE-2023-23559" ref_url="https://www.suse.com/security/cve/CVE-2023-23559/" source="CVE"/>
		<reference ref_id="CVE-2023-26545" ref_url="https://www.suse.com/security/cve/CVE-2023-26545/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014072.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bsc#1194535).
- CVE-2022-2991: Fixed an heap-based overflow in the lightnvm implemenation (bsc#1201420).
- CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332).
- CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331).
- CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. (bsc#1205711)
- CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773).
- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-0597: Fixed a lack of randomization of per-cpu entry area in x86/mm (bsc#1207845).
- CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
- CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051).
- CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700).

The following non-security bugs were fixed:

- kabi/severities: add l2tp local symbols
- module: Do not wait for GOING modules (bsc#1196058, bsc#1186449, bsc#1204356, bsc#1204662).
- net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-16"/>
	<updated date="2023-03-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186449">SUSE bug 1186449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194535">SUSE bug 1194535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201420">SUSE bug 1201420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203331">SUSE bug 1203331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203332">SUSE bug 1203332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204356">SUSE bug 1204356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204662">SUSE bug 1204662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205711">SUSE bug 1205711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207051">SUSE bug 1207051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207773">SUSE bug 1207773</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207795">SUSE bug 1207795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207845">SUSE bug 1207845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207875">SUSE bug 1207875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208700">SUSE bug 1208700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208837">SUSE bug 1208837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209188">SUSE bug 1209188</bugzilla>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4203/">CVE-2021-4203</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2991/">CVE-2022-2991</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36280/">CVE-2022-36280</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38096/">CVE-2022-38096</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-4129/">CVE-2022-4129</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-0045/">CVE-2023-0045</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0590/">CVE-2023-0590</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-0597/">CVE-2023-0597</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1118/">CVE-2023-1118</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2023-23559/">CVE-2023-23559</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26545/">CVE-2023-26545</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009744377" comment="kernel-default-4.12.14-150100.197.137.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744378" comment="kernel-default-base-4.12.14-150100.197.137.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744379" comment="kernel-default-devel-4.12.14-150100.197.137.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744380" comment="kernel-devel-4.12.14-150100.197.137.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744381" comment="kernel-docs-4.12.14-150100.197.137.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744382" comment="kernel-macros-4.12.14-150100.197.137.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744383" comment="kernel-obs-build-4.12.14-150100.197.137.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744384" comment="kernel-source-4.12.14-150100.197.137.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744385" comment="kernel-syms-4.12.14-150100.197.137.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140286" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207780" ref_url="https://bugzilla.suse.com/1207780" source="BUGZILLA"/>
		<reference ref_id="1208828" ref_url="https://bugzilla.suse.com/1208828" source="BUGZILLA"/>
		<reference ref_id="1208957" ref_url="https://bugzilla.suse.com/1208957" source="BUGZILLA"/>
		<reference ref_id="1208959" ref_url="https://bugzilla.suse.com/1208959" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0512" ref_url="https://www.suse.com/security/cve/CVE-2023-0512/" source="CVE"/>
		<reference ref_id="CVE-2023-1127" ref_url="https://www.suse.com/security/cve/CVE-2023-1127/" source="CVE"/>
		<reference ref_id="CVE-2023-1170" ref_url="https://www.suse.com/security/cve/CVE-2023-1170/" source="CVE"/>
		<reference ref_id="CVE-2023-1175" ref_url="https://www.suse.com/security/cve/CVE-2023-1175/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0781-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014074.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

- CVE-2023-0512: Fixed a divide By Zero (bsc#1207780).
- CVE-2023-1175: vim: an incorrect calculation of buffer size (bsc#1208957).
- CVE-2023-1170: Fixed a heap-based Buffer Overflow (bsc#1208959).
- CVE-2023-1127: Fixed divide by zero in scrolldown() (bsc#1208828).

Updated to version 9.0 with patch level 1386.

- https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-16"/>
	<updated date="2023-03-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207780">SUSE bug 1207780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208828">SUSE bug 1208828</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208957">SUSE bug 1208957</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208959">SUSE bug 1208959</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0512/">CVE-2023-0512</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-1127/">CVE-2023-1127</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2023-1170/">CVE-2023-1170</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2023-1175/">CVE-2023-1175</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009743851" comment="gvim-9.0.1386-150000.5.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743852" comment="vim-9.0.1386-150000.5.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743830" comment="vim-data-9.0.1386-150000.5.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743831" comment="vim-data-common-9.0.1386-150000.5.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140287" version="1" class="patch">
	<metadata>
		<title>Security update for docker (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205375" ref_url="https://bugzilla.suse.com/1205375" source="BUGZILLA"/>
		<reference ref_id="1206065" ref_url="https://bugzilla.suse.com/1206065" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-36109" ref_url="https://www.suse.com/security/cve/CVE-2022-36109/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014082.html" source="SUSE-SU"/>
		<description>

This update for docker fixes the following issues:

Docker was updated to 20.10.23-ce.

See upstream changelog at https://docs.docker.com/engine/release-notes/#201023

Docker was updated to 20.10.21-ce (bsc#1206065)

See upstream changelog at https://docs.docker.com/engine/release-notes/#201021 

Security issues fixed:

- CVE-2022-36109: Fixed supplementary group permissions bypass (bsc#1205375)

- Fix wrong After: in docker.service, fixes bsc#1188447
- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.
- Allow to install container-selinux instead of apparmor-parser.
- Change to using systemd-sysusers
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-17"/>
	<updated date="2023-03-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1205375">SUSE bug 1205375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206065">SUSE bug 1206065</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-36109/">CVE-2022-36109</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009743848" comment="docker-20.10.23_ce-150000.175.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743808" comment="docker-bash-completion-20.10.23_ce-150000.175.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140288" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208708" ref_url="https://bugzilla.suse.com/1208708" source="BUGZILLA"/>
		<reference ref_id="1209047" ref_url="https://bugzilla.suse.com/1209047" source="BUGZILLA"/>
		<reference ref_id="1209049" ref_url="https://bugzilla.suse.com/1209049" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-25690" ref_url="https://www.suse.com/security/cve/CVE-2023-25690/" source="CVE"/>
		<reference ref_id="CVE-2023-27522" ref_url="https://www.suse.com/security/cve/CVE-2023-27522/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014090.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2023-27522: Fixed HTTP response splitting in mod_proxy_uwsgi (bsc#1209049).
- CVE-2023-25690: Fixed HTTP request splitting with mod_rewrite and mod_proxy (bsc#1209047).

The following non-security bugs were fixed:

- Fixed passing health check does not recover worker from its error state (bsc#1208708).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-17"/>
	<updated date="2023-03-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208708">SUSE bug 1208708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209047">SUSE bug 1209047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209049">SUSE bug 1209049</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-25690/">CVE-2023-25690</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-27522/">CVE-2023-27522</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009744828" comment="apache2-2.4.33-150000.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744829" comment="apache2-devel-2.4.33-150000.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744830" comment="apache2-doc-2.4.33-150000.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744831" comment="apache2-prefork-2.4.33-150000.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744832" comment="apache2-utils-2.4.33-150000.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744833" comment="apache2-worker-2.4.33-150000.3.75.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140289" version="1" class="patch">
	<metadata>
		<title>Security update for SUSE Manager Client Tools (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201059" ref_url="https://bugzilla.suse.com/1201059" source="BUGZILLA"/>
		<reference ref_id="1205599" ref_url="https://bugzilla.suse.com/1205599" source="BUGZILLA"/>
		<reference ref_id="1205759" ref_url="https://bugzilla.suse.com/1205759" source="BUGZILLA"/>
		<reference ref_id="1207352" ref_url="https://bugzilla.suse.com/1207352" source="BUGZILLA"/>
		<reference ref_id="1207749" ref_url="https://bugzilla.suse.com/1207749" source="BUGZILLA"/>
		<reference ref_id="1207750" ref_url="https://bugzilla.suse.com/1207750" source="BUGZILLA"/>
		<reference ref_id="1208065" ref_url="https://bugzilla.suse.com/1208065" source="BUGZILLA"/>
		<reference ref_id="1208293" ref_url="https://bugzilla.suse.com/1208293" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23552" ref_url="https://www.suse.com/security/cve/CVE-2022-23552/" source="CVE"/>
		<reference ref_id="CVE-2022-39324" ref_url="https://www.suse.com/security/cve/CVE-2022-39324/" source="CVE"/>
		<reference ref_id="CVE-2022-41723" ref_url="https://www.suse.com/security/cve/CVE-2022-41723/" source="CVE"/>
		<reference ref_id="CVE-2022-46146" ref_url="https://www.suse.com/security/cve/CVE-2022-46146/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014098.html" source="SUSE-SU"/>
		<description>

This update fixes the following issues:

dracut-saltboot:

- Update to verion 0.1.1674034019.a93ff61
  * Install copied wicked config as client.xml (bsc#1205599)
- Update to version 0.1.1673279145.e7616bd

grafana:

- CVE-2022-46146: Fix basic authentication bypass by updating the exporter
  toolkit to version 0.7.3 (bsc#1208065,)
- CVE-2022-41723: Require Go 1.19 or newer (bsc#1208293)
- Update to version 8.5.20:
  * CVE-2022-23552: Security: SVG: Add dompurify preprocessor step (bsc#1207749)
  * CVE-2022-39324: Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750)
  * Security: Omit error from http response 
  * Bug fix: Email and username trimming and invitation validation

spacecmd:

- Version 4.3.19-1
  * Fix spacecmd not showing any output for softwarechannel_diff
    and softwarechannel_errata_diff (bsc#1207352)
  * Prevent string api parameters to be parsed as dates if not in
    ISO-8601 format (bsc#1205759)

spacewalk-client-tools:

- Version 4.3.15-1
  * Update translation strings

supportutils-plugin-salt:

- Update to version 1.2.2
  * Remove possible passwords from Salt configuration files (bsc#1201059)

uyuni-proxy-systemd-services:

- Version 4.3.8-1
  * Allow using container images from different registry paths

		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-20"/>
	<updated date="2023-03-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201059">SUSE bug 1201059</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205599">SUSE bug 1205599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205759">SUSE bug 1205759</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207352">SUSE bug 1207352</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207749">SUSE bug 1207749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207750">SUSE bug 1207750</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208065">SUSE bug 1208065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208293">SUSE bug 1208293</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-23552/">CVE-2022-23552</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-39324/">CVE-2022-39324</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41723/">CVE-2022-41723</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46146/">CVE-2022-46146</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009742845" comment="supportutils-plugin-salt-1.2.2-150000.3.13.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140290" version="1" class="patch">
	<metadata>
		<title>Security update for dpdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209188" ref_url="https://bugzilla.suse.com/1209188" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:0836-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014106.html" source="SUSE-SU"/>
		<description>

This update of dpdk fixes the following issues:

- rebuild the package with the new secure boot key (bsc#1209188).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-21"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1209188">SUSE bug 1209188</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009744823" comment="dpdk-18.11.9-150100.4.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744824" comment="dpdk-devel-18.11.9-150100.4.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744825" comment="dpdk-kmp-default-18.11.9_k4.12.14_150100.197.134-150100.4.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744826" comment="dpdk-tools-18.11.9-150100.4.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744827" comment="libdpdk-18_11-18.11.9-150100.4.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140291" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206958" ref_url="https://bugzilla.suse.com/1206958" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31631" ref_url="https://www.suse.com/security/cve/CVE-2022-31631/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0084-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013466.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2022-31631: Fixed an issue where PDO::quote would return an
  unquoted string (bsc#1206958).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-12"/>
	<updated date="2023-01-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206958">SUSE bug 1206958</bugzilla>
	<cve impact="moderate" cvss3="6.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-31631/">CVE-2022-31631</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009731787" comment="apache2-mod_php7-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731788" comment="php7-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731789" comment="php7-bcmath-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731790" comment="php7-bz2-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731791" comment="php7-calendar-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731792" comment="php7-ctype-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731793" comment="php7-curl-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731794" comment="php7-dba-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731795" comment="php7-devel-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731796" comment="php7-dom-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731797" comment="php7-enchant-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731798" comment="php7-exif-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731799" comment="php7-fastcgi-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731800" comment="php7-fileinfo-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731801" comment="php7-fpm-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731802" comment="php7-ftp-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731803" comment="php7-gd-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731804" comment="php7-gettext-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731805" comment="php7-gmp-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731806" comment="php7-iconv-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731807" comment="php7-intl-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731808" comment="php7-json-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731809" comment="php7-ldap-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731810" comment="php7-mbstring-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731811" comment="php7-mysql-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731812" comment="php7-odbc-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731813" comment="php7-opcache-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731814" comment="php7-openssl-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731815" comment="php7-pcntl-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731816" comment="php7-pdo-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731817" comment="php7-pear-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731818" comment="php7-pear-Archive_Tar-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731819" comment="php7-pgsql-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731820" comment="php7-phar-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731821" comment="php7-posix-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731822" comment="php7-readline-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731823" comment="php7-shmop-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731824" comment="php7-snmp-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731825" comment="php7-soap-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731826" comment="php7-sockets-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731827" comment="php7-sodium-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731828" comment="php7-sqlite-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731829" comment="php7-sysvmsg-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731830" comment="php7-sysvsem-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731831" comment="php7-sysvshm-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731832" comment="php7-tidy-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731833" comment="php7-tokenizer-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731834" comment="php7-wddx-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731835" comment="php7-xmlreader-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731836" comment="php7-xmlrpc-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731837" comment="php7-xmlwriter-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731838" comment="php7-xsl-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731839" comment="php7-zip-7.2.34-150000.4.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731840" comment="php7-zlib-7.2.34-150000.4.106.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140292" version="1" class="patch">
	<metadata>
		<title>Security update for oracleasm (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209188" ref_url="https://bugzilla.suse.com/1209188" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:0843-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014108.html" source="SUSE-SU"/>
		<description>

This update of oracleasm fixes the following issues:

- rebuild the package with the new secure boot key (bsc#1209188).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-21"/>
	<updated date="2023-03-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1209188">SUSE bug 1209188</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009747124" comment="oracleasm-kmp-default-2.0.8_k4.12.14_150100.197.137-150100.7.17.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140293" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209017" ref_url="https://bugzilla.suse.com/1209017" source="BUGZILLA"/>
		<reference ref_id="1209018" ref_url="https://bugzilla.suse.com/1209018" source="BUGZILLA"/>
		<reference ref_id="1209019" ref_url="https://bugzilla.suse.com/1209019" source="BUGZILLA"/>
		<reference ref_id="1209188" ref_url="https://bugzilla.suse.com/1209188" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42331" ref_url="https://www.suse.com/security/cve/CVE-2022-42331/" source="CVE"/>
		<reference ref_id="CVE-2022-42332" ref_url="https://www.suse.com/security/cve/CVE-2022-42332/" source="CVE"/>
		<reference ref_id="CVE-2022-42333" ref_url="https://www.suse.com/security/cve/CVE-2022-42333/" source="CVE"/>
		<reference ref_id="CVE-2022-42334" ref_url="https://www.suse.com/security/cve/CVE-2022-42334/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0858-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014119.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-42332: Fixed use-after-free in x86 shadow plus log-dirty mode (bsc#1209017).
- CVE-2022-42333,CVE-2022-42334: Fixed x86/HVM pinned cache attributes mis-handling (bsc#1209018).
- CVE-2022-42331: Fixed speculative vulnerability in 32bit SYSCALL path on x86 (bsc#1209019).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-21"/>
	<updated date="2023-03-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209017">SUSE bug 1209017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209018">SUSE bug 1209018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209019">SUSE bug 1209019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209188">SUSE bug 1209188</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-42331/">CVE-2022-42331</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42332/">CVE-2022-42332</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-42333/">CVE-2022-42333</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-42334/">CVE-2022-42334</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009747914" comment="xen-4.12.4_34-150100.3.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009747915" comment="xen-devel-4.12.4_34-150100.3.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009747916" comment="xen-libs-4.12.4_34-150100.3.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009747917" comment="xen-tools-4.12.4_34-150100.3.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009747918" comment="xen-tools-domU-4.12.4_34-150100.3.86.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140294" version="1" class="patch">
	<metadata>
		<title>Security update for container-suseconnect (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="1206134" ref_url="https://bugzilla.suse.com/1206134" source="BUGZILLA"/>
		<reference ref_id="1208270" ref_url="https://bugzilla.suse.com/1208270" source="BUGZILLA"/>
		<reference ref_id="1208271" ref_url="https://bugzilla.suse.com/1208271" source="BUGZILLA"/>
		<reference ref_id="1208272" ref_url="https://bugzilla.suse.com/1208272" source="BUGZILLA"/>
		<reference ref_id="1209030" ref_url="https://bugzilla.suse.com/1209030" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41720" ref_url="https://www.suse.com/security/cve/CVE-2022-41720/" source="CVE"/>
		<reference ref_id="CVE-2022-41723" ref_url="https://www.suse.com/security/cve/CVE-2022-41723/" source="CVE"/>
		<reference ref_id="CVE-2022-41724" ref_url="https://www.suse.com/security/cve/CVE-2022-41724/" source="CVE"/>
		<reference ref_id="CVE-2022-41725" ref_url="https://www.suse.com/security/cve/CVE-2022-41725/" source="CVE"/>
		<reference ref_id="CVE-2023-24532" ref_url="https://www.suse.com/security/cve/CVE-2023-24532/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014139.html" source="SUSE-SU"/>
		<description>

This update of container-suseconnect fixes the following issue:

- container-suseconnect was rebuilt against the current go1.19 release, fixing security issues and other bugs fixed in go1.19.7.

- CVE-2022-41723: Fixed quadratic complexity in HPACK decoding (bsc#1208270).
- CVE-2022-41724: Fixed panic with arge handshake records in crypto/tls (bsc#1208271).
- CVE-2022-41725: Fixed denial of service from excessive resource consumption in net/http and mime/multipart (bsc#1208272).
- CVE-2023-24532: Fixed incorrect P-256 ScalarMult and ScalarBaseMult results (bsc#1209030).

- CVE-2022-41720: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows (bsc#1206134).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-22"/>
	<updated date="2023-03-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206134">SUSE bug 1206134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208270">SUSE bug 1208270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208271">SUSE bug 1208271</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208272">SUSE bug 1208272</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209030">SUSE bug 1209030</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-41720/">CVE-2022-41720</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41723/">CVE-2022-41723</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41724/">CVE-2022-41724</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41725/">CVE-2022-41725</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-24532/">CVE-2023-24532</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744978" comment="container-suseconnect-2.4.0-150000.4.24.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140295" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205808" ref_url="https://bugzilla.suse.com/1205808" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4144" ref_url="https://www.suse.com/security/cve/CVE-2022-4144/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0877-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014147.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

- CVE-2022-4144: Fixed unsafe address translation that can lead to out-of-bounds read in qxl_phys2virt (bsc#1205808).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-23"/>
	<updated date="2023-03-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205808">SUSE bug 1205808</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-4144/">CVE-2022-4144</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009743934" comment="qemu-3.1.1.1-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743935" comment="qemu-arm-3.1.1.1-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743936" comment="qemu-audio-alsa-3.1.1.1-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743937" comment="qemu-audio-oss-3.1.1.1-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743938" comment="qemu-audio-pa-3.1.1.1-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743939" comment="qemu-block-curl-3.1.1.1-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743940" comment="qemu-block-iscsi-3.1.1.1-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743941" comment="qemu-block-rbd-3.1.1.1-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743942" comment="qemu-block-ssh-3.1.1.1-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743943" comment="qemu-guest-agent-3.1.1.1-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743944" comment="qemu-ipxe-1.0.0+-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743945" comment="qemu-kvm-3.1.1.1-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743946" comment="qemu-lang-3.1.1.1-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743947" comment="qemu-seabios-1.12.0_0_ga698c89-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743948" comment="qemu-sgabios-8-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743949" comment="qemu-tools-3.1.1.1-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743950" comment="qemu-ui-curses-3.1.1.1-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743951" comment="qemu-ui-gtk-3.1.1.1-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743952" comment="qemu-vgabios-1.12.0_0_ga698c89-150100.80.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009743953" comment="qemu-x86-3.1.1.1-150100.80.46.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140296" version="1" class="patch">
	<metadata>
		<title>Security update for python-wheel (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206670" ref_url="https://bugzilla.suse.com/1206670" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40898" ref_url="https://www.suse.com/security/cve/CVE-2022-40898/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0088-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014008.html" source="SUSE-SU"/>
		<description>
This update for python-wheel fixes the following issues:

- CVE-2022-40898: Fixed an excessive use of CPU that could be triggered
  via a crafted regular expression (bsc#1206670).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-09"/>
	<updated date="2023-03-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1206670">SUSE bug 1206670</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-40898/">CVE-2022-40898</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731290" comment="python3-wheel-0.32.3-150100.6.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140297" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209188" ref_url="https://bugzilla.suse.com/1209188" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:0881-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014150.html" source="SUSE-SU"/>
		<description>

This update of grub2 fixes the following issues:

- rebuild the package with the new secure boot key (bsc#1209188).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-23"/>
	<updated date="2023-03-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1209188">SUSE bug 1209188</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sle_hpc-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341507" comment="SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009747380" comment="grub2-2.02-150100.123.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009747381" comment="grub2-arm64-efi-2.02-150100.123.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009747382" comment="grub2-i386-pc-2.02-150100.123.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009747383" comment="grub2-snapper-plugin-2.02-150100.123.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009747384" comment="grub2-systemd-sleep-plugin-2.02-150100.123.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009747385" comment="grub2-x86_64-efi-2.02-150100.123.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009747386" comment="grub2-x86_64-xen-2.02-150100.123.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140298" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1183942" ref_url="https://bugzilla.suse.com/1183942" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23981" ref_url="https://www.suse.com/security/cve/CVE-2021-23981/" source="CVE"/>
		<reference ref_id="CVE-2021-23982" ref_url="https://www.suse.com/security/cve/CVE-2021-23982/" source="CVE"/>
		<reference ref_id="CVE-2021-23984" ref_url="https://www.suse.com/security/cve/CVE-2021-23984/" source="CVE"/>
		<reference ref_id="CVE-2021-23987" ref_url="https://www.suse.com/security/cve/CVE-2021-23987/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008579.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox was updated to 78.9.0 ESR  (MFSA 2021-11, bsc#1183942)
  * CVE-2021-23981: Texture upload into an unbound backing buffer resulted in an out-of-bound read
  * CVE-2021-23982: Internal network hosts could have been probed by a malicious webpage
  * CVE-2021-23984: Malicious extensions could have spoofed popup information
  * CVE-2021-23987: Memory safety bugs 	  
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-01"/>
	<updated date="2021-04-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183942">SUSE bug 1183942</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23981/">CVE-2021-23981</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23982/">CVE-2021-23982</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23984/">CVE-2021-23984</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23987/">CVE-2021-23987</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505114" comment="MozillaFirefox-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505115" comment="MozillaFirefox-branding-SLE-78-4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505116" comment="MozillaFirefox-devel-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505117" comment="MozillaFirefox-translations-common-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505118" comment="MozillaFirefox-translations-other-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505119" comment="mozilla-nspr-4.25.1-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493661" comment="mozilla-nspr-32bit-4.25.1-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505120" comment="mozilla-nspr-devel-4.25.1-3.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140299" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1180947" ref_url="https://bugzilla.suse.com/1180947" source="BUGZILLA"/>
		<reference ref_id="1182909" ref_url="https://bugzilla.suse.com/1182909" source="BUGZILLA"/>
		<reference ref_id="1182912" ref_url="https://bugzilla.suse.com/1182912" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-24122" ref_url="https://www.suse.com/security/cve/CVE-2021-24122/" source="CVE"/>
		<reference ref_id="CVE-2021-25122" ref_url="https://www.suse.com/security/cve/CVE-2021-25122/" source="CVE"/>
		<reference ref_id="CVE-2021-25329" ref_url="https://www.suse.com/security/cve/CVE-2021-25329/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1009-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008578.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2021-24122: Fixed an information disclosure if resources are served from the NTFS file system (bsc#1180947).
- CVE-2021-25122: Apache Tomcat h2c request mix-up (bsc#1182912)
- CVE-2021-25329: Complete fix for CVE-2020-9484 (bsc#1182909)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-01"/>
	<updated date="2021-04-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180947">SUSE bug 1180947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182909">SUSE bug 1182909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182912">SUSE bug 1182912</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-24122/">CVE-2021-24122</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-25122/">CVE-2021-25122</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25329/">CVE-2021-25329</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503831" comment="tomcat-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503832" comment="tomcat-admin-webapps-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503833" comment="tomcat-el-3_0-api-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503834" comment="tomcat-jsp-2_3-api-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503835" comment="tomcat-lib-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503836" comment="tomcat-servlet-4_0-api-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503837" comment="tomcat-webapps-9.0.36-4.58.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140300" version="1" class="patch">
	<metadata>
		<title>Security update for OpenIPMI (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1183178" ref_url="https://bugzilla.suse.com/1183178" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:1010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008580.html" source="SUSE-SU"/>
		<description>
This update for OpenIPMI fixes the following issues:

- Fixed an issue where OpenIPMI was creating non-position independent binaries (bsc#1183178).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-01"/>
	<updated date="2021-04-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1183178">SUSE bug 1183178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505121" comment="OpenIPMI-2.0.25-7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505122" comment="OpenIPMI-devel-2.0.25-7.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140301" version="1" class="patch">
	<metadata>
		<title>Security update for fwupdate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182057" ref_url="https://bugzilla.suse.com/1182057" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008599.html" source="SUSE-SU"/>
		<description>
This update for fwupdate fixes the following issues:

- Add SBAT section to EFI images (bsc#1182057)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-08"/>
	<updated date="2021-04-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182057">SUSE bug 1182057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505123" comment="fwupdate-12-11.8.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505124" comment="fwupdate-devel-12-11.8.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505125" comment="fwupdate-efi-12-11.8.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505126" comment="libfwup1-12-11.8.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140302" version="1" class="patch">
	<metadata>
		<title>Security update for umoci (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1184147" ref_url="https://bugzilla.suse.com/1184147" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29136" ref_url="https://www.suse.com/security/cve/CVE-2021-29136/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008608.html" source="SUSE-SU"/>
		<description>
This update for umoci fixes the following issues:

- Update to umoci v0.4.6.
- CVE-2021-29136: malicious layer allows overwriting of host files (bsc#1184147)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-09"/>
	<updated date="2021-04-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184147">SUSE bug 1184147</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29136/">CVE-2021-29136</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505127" comment="umoci-0.4.6-3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140303" version="1" class="patch">
	<metadata>
		<title>Security update for spamassassin (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1159133" ref_url="https://bugzilla.suse.com/1159133" source="BUGZILLA"/>
		<reference ref_id="1184221" ref_url="https://bugzilla.suse.com/1184221" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12420" ref_url="https://www.suse.com/security/cve/CVE-2019-12420/" source="CVE"/>
		<reference ref_id="CVE-2020-1946" ref_url="https://www.suse.com/security/cve/CVE-2020-1946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008622.html" source="SUSE-SU"/>
		<description>
This update for spamassassin fixes the following issues:

- CVE-2019-12420: memory leak via crafted messages (bsc#1159133)
- CVE-2020-1946: security update (bsc#1184221)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-13"/>
	<updated date="2021-04-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159133">SUSE bug 1159133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184221">SUSE bug 1184221</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12420/">CVE-2019-12420</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1946/">CVE-2020-1946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505128" comment="perl-Mail-SpamAssassin-3.4.5-12.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505129" comment="perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505130" comment="spamassassin-3.4.5-12.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140304" version="1" class="patch">
	<metadata>
		<title>Security update for open-iscsi (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1173886" ref_url="https://bugzilla.suse.com/1173886" source="BUGZILLA"/>
		<reference ref_id="1179908" ref_url="https://bugzilla.suse.com/1179908" source="BUGZILLA"/>
		<reference ref_id="1183421" ref_url="https://bugzilla.suse.com/1183421" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13987" ref_url="https://www.suse.com/security/cve/CVE-2020-13987/" source="CVE"/>
		<reference ref_id="CVE-2020-13988" ref_url="https://www.suse.com/security/cve/CVE-2020-13988/" source="CVE"/>
		<reference ref_id="CVE-2020-17437" ref_url="https://www.suse.com/security/cve/CVE-2020-17437/" source="CVE"/>
		<reference ref_id="CVE-2020-17438" ref_url="https://www.suse.com/security/cve/CVE-2020-17438/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008619.html" source="SUSE-SU"/>
		<description>
This update for open-iscsi fixes the following issues:

- CVE-2020-17437: uIP Out-of-Bounds Write (bsc#1179908)
- CVE-2020-17438: uIP Out-of-Bounds Write (bsc#1179908)
- CVE-2020-13987: uIP Out-of-Bounds Read (bsc#1179908)
- CVE-2020-13988: uIP Integer Overflow (bsc#1179908)
- Enabled no-wait ('-W') iscsiadm option for iscsi login service (bsc#1173886, bsc#1183421)
- Added the ability to perform async logins (bsc#1173886)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-13"/>
	<updated date="2021-04-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173886">SUSE bug 1173886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179908">SUSE bug 1179908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183421">SUSE bug 1183421</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-13987/">CVE-2020-13987</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13988/">CVE-2020-13988</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-17437/">CVE-2020-17437</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-17438/">CVE-2020-17438</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505131" comment="iscsiuio-0.7.8.2-13.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505132" comment="libopeniscsiusr0_2_0-2.0.876-13.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505133" comment="open-iscsi-2.0.876-13.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505134" comment="open-iscsi-devel-2.0.876-13.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140305" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1180128" ref_url="https://bugzilla.suse.com/1180128" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3472" ref_url="https://www.suse.com/security/cve/CVE-2021-3472/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008637.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation (bsc#1180128)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-14"/>
	<updated date="2021-04-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180128">SUSE bug 1180128</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3472/">CVE-2021-3472</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505135" comment="xorg-x11-server-1.20.3-14.5.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505136" comment="xorg-x11-server-extra-1.20.3-14.5.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505137" comment="xorg-x11-server-sdk-1.20.3-14.5.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140306" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181256" ref_url="https://bugzilla.suse.com/1181256" source="BUGZILLA"/>
		<reference ref_id="1184532" ref_url="https://bugzilla.suse.com/1184532" source="BUGZILLA"/>
		<reference ref_id="1184533" ref_url="https://bugzilla.suse.com/1184533" source="BUGZILLA"/>
		<reference ref_id="1184534" ref_url="https://bugzilla.suse.com/1184534" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-1252" ref_url="https://www.suse.com/security/cve/CVE-2021-1252/" source="CVE"/>
		<reference ref_id="CVE-2021-1404" ref_url="https://www.suse.com/security/cve/CVE-2021-1404/" source="CVE"/>
		<reference ref_id="CVE-2021-1405" ref_url="https://www.suse.com/security/cve/CVE-2021-1405/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008636.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

- CVE-2021-1252: Fix for Excel XLM parser infinite loop. (bsc#1184532)
- CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. (bsc#1184533)
- CVE-2021-1405: Fix for mail parser NULL-dereference crash. (bsc#1184534)
- Fix errors when scanning files &gt; 4G (bsc#1181256)
- Update clamav.keyring
- Update to 0.103.2
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-14"/>
	<updated date="2021-04-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181256">SUSE bug 1181256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184532">SUSE bug 1184532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184533">SUSE bug 1184533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184534">SUSE bug 1184534</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-1252/">CVE-2021-1252</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-1404/">CVE-2021-1404</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-1405/">CVE-2021-1405</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505138" comment="clamav-0.103.2-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505139" comment="clamav-devel-0.103.2-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505140" comment="libclamav9-0.103.2-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505141" comment="libfreshclam2-0.103.2-3.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140307" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1172383" ref_url="https://bugzilla.suse.com/1172383" source="BUGZILLA"/>
		<reference ref_id="1172384" ref_url="https://bugzilla.suse.com/1172384" source="BUGZILLA"/>
		<reference ref_id="1172385" ref_url="https://bugzilla.suse.com/1172385" source="BUGZILLA"/>
		<reference ref_id="1172386" ref_url="https://bugzilla.suse.com/1172386" source="BUGZILLA"/>
		<reference ref_id="1172478" ref_url="https://bugzilla.suse.com/1172478" source="BUGZILLA"/>
		<reference ref_id="1173612" ref_url="https://bugzilla.suse.com/1173612" source="BUGZILLA"/>
		<reference ref_id="1174386" ref_url="https://bugzilla.suse.com/1174386" source="BUGZILLA"/>
		<reference ref_id="1174641" ref_url="https://bugzilla.suse.com/1174641" source="BUGZILLA"/>
		<reference ref_id="1175441" ref_url="https://bugzilla.suse.com/1175441" source="BUGZILLA"/>
		<reference ref_id="1176673" ref_url="https://bugzilla.suse.com/1176673" source="BUGZILLA"/>
		<reference ref_id="1176682" ref_url="https://bugzilla.suse.com/1176682" source="BUGZILLA"/>
		<reference ref_id="1176684" ref_url="https://bugzilla.suse.com/1176684" source="BUGZILLA"/>
		<reference ref_id="1178049" ref_url="https://bugzilla.suse.com/1178049" source="BUGZILLA"/>
		<reference ref_id="1178174" ref_url="https://bugzilla.suse.com/1178174" source="BUGZILLA"/>
		<reference ref_id="1178565" ref_url="https://bugzilla.suse.com/1178565" source="BUGZILLA"/>
		<reference ref_id="1178934" ref_url="https://bugzilla.suse.com/1178934" source="BUGZILLA"/>
		<reference ref_id="1179466" ref_url="https://bugzilla.suse.com/1179466" source="BUGZILLA"/>
		<reference ref_id="1179467" ref_url="https://bugzilla.suse.com/1179467" source="BUGZILLA"/>
		<reference ref_id="1179468" ref_url="https://bugzilla.suse.com/1179468" source="BUGZILLA"/>
		<reference ref_id="1179686" ref_url="https://bugzilla.suse.com/1179686" source="BUGZILLA"/>
		<reference ref_id="1180523" ref_url="https://bugzilla.suse.com/1180523" source="BUGZILLA"/>
		<reference ref_id="1181108" ref_url="https://bugzilla.suse.com/1181108" source="BUGZILLA"/>
		<reference ref_id="1181639" ref_url="https://bugzilla.suse.com/1181639" source="BUGZILLA"/>
		<reference ref_id="1181933" ref_url="https://bugzilla.suse.com/1181933" source="BUGZILLA"/>
		<reference ref_id="1182137" ref_url="https://bugzilla.suse.com/1182137" source="BUGZILLA"/>
		<reference ref_id="1182425" ref_url="https://bugzilla.suse.com/1182425" source="BUGZILLA"/>
		<reference ref_id="1182577" ref_url="https://bugzilla.suse.com/1182577" source="BUGZILLA"/>
		<reference ref_id="1182968" ref_url="https://bugzilla.suse.com/1182968" source="BUGZILLA"/>
		<reference ref_id="1183979" ref_url="https://bugzilla.suse.com/1183979" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11947" ref_url="https://www.suse.com/security/cve/CVE-2020-11947/" source="CVE"/>
		<reference ref_id="CVE-2020-12829" ref_url="https://www.suse.com/security/cve/CVE-2020-12829/" source="CVE"/>
		<reference ref_id="CVE-2020-13361" ref_url="https://www.suse.com/security/cve/CVE-2020-13361/" source="CVE"/>
		<reference ref_id="CVE-2020-13362" ref_url="https://www.suse.com/security/cve/CVE-2020-13362/" source="CVE"/>
		<reference ref_id="CVE-2020-13659" ref_url="https://www.suse.com/security/cve/CVE-2020-13659/" source="CVE"/>
		<reference ref_id="CVE-2020-13765" ref_url="https://www.suse.com/security/cve/CVE-2020-13765/" source="CVE"/>
		<reference ref_id="CVE-2020-14364" ref_url="https://www.suse.com/security/cve/CVE-2020-14364/" source="CVE"/>
		<reference ref_id="CVE-2020-15469" ref_url="https://www.suse.com/security/cve/CVE-2020-15469/" source="CVE"/>
		<reference ref_id="CVE-2020-15863" ref_url="https://www.suse.com/security/cve/CVE-2020-15863/" source="CVE"/>
		<reference ref_id="CVE-2020-16092" ref_url="https://www.suse.com/security/cve/CVE-2020-16092/" source="CVE"/>
		<reference ref_id="CVE-2020-25084" ref_url="https://www.suse.com/security/cve/CVE-2020-25084/" source="CVE"/>
		<reference ref_id="CVE-2020-25624" ref_url="https://www.suse.com/security/cve/CVE-2020-25624/" source="CVE"/>
		<reference ref_id="CVE-2020-25625" ref_url="https://www.suse.com/security/cve/CVE-2020-25625/" source="CVE"/>
		<reference ref_id="CVE-2020-25723" ref_url="https://www.suse.com/security/cve/CVE-2020-25723/" source="CVE"/>
		<reference ref_id="CVE-2020-27617" ref_url="https://www.suse.com/security/cve/CVE-2020-27617/" source="CVE"/>
		<reference ref_id="CVE-2020-27821" ref_url="https://www.suse.com/security/cve/CVE-2020-27821/" source="CVE"/>
		<reference ref_id="CVE-2020-28916" ref_url="https://www.suse.com/security/cve/CVE-2020-28916/" source="CVE"/>
		<reference ref_id="CVE-2020-29129" ref_url="https://www.suse.com/security/cve/CVE-2020-29129/" source="CVE"/>
		<reference ref_id="CVE-2020-29130" ref_url="https://www.suse.com/security/cve/CVE-2020-29130/" source="CVE"/>
		<reference ref_id="CVE-2020-29443" ref_url="https://www.suse.com/security/cve/CVE-2020-29443/" source="CVE"/>
		<reference ref_id="CVE-2021-20181" ref_url="https://www.suse.com/security/cve/CVE-2021-20181/" source="CVE"/>
		<reference ref_id="CVE-2021-20203" ref_url="https://www.suse.com/security/cve/CVE-2021-20203/" source="CVE"/>
		<reference ref_id="CVE-2021-20221" ref_url="https://www.suse.com/security/cve/CVE-2021-20221/" source="CVE"/>
		<reference ref_id="CVE-2021-20257" ref_url="https://www.suse.com/security/cve/CVE-2021-20257/" source="CVE"/>
		<reference ref_id="CVE-2021-3416" ref_url="https://www.suse.com/security/cve/CVE-2021-3416/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:


- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383)
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)
- Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)
- Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174)
- Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468)
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612)
- Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577)
- Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)
- Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416)
- Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659 bsc#1172386)
- Fix issue where s390 guest fails to find zipl boot menu index (bsc#1183979)
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
- Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)
- Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137)
- Apply fixes to qemu scsi passthrough with respect to timeout and error conditions, including using more correct status codes. (bsc#1178049)
- Fix OOB access in ARM interrupt handling (CVE-2021-20221 bsc#1181933)
- Tweaks to spec file for better formatting, and remove not needed BuildRequires for e2fsprogs-devel and libpcap-devel
- Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384)
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
- Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441)
- Fix DoS in packet processing of various emulated NICs (CVE-2020-16092 bsc#1174641)
- Fix buffer overflow in the XGMAC device (CVE-2020-15863 bsc#1174386)
- Use '%service_del_postun_without_restart' instead of '%service_del_postun' to avoid 'Failed to try-restart qemu-ga@.service' error while updating the qemu-guest-agent. (bsc#1178565)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-16"/>
	<updated date="2021-04-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172383">SUSE bug 1172383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172384">SUSE bug 1172384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172385">SUSE bug 1172385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172386">SUSE bug 1172386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172478">SUSE bug 1172478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173612">SUSE bug 1173612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174386">SUSE bug 1174386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174641">SUSE bug 1174641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175441">SUSE bug 1175441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176673">SUSE bug 1176673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176682">SUSE bug 1176682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176684">SUSE bug 1176684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178049">SUSE bug 1178049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178174">SUSE bug 1178174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178565">SUSE bug 1178565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178934">SUSE bug 1178934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179466">SUSE bug 1179466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179467">SUSE bug 1179467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179468">SUSE bug 1179468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179686">SUSE bug 1179686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180523">SUSE bug 1180523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181108">SUSE bug 1181108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181639">SUSE bug 1181639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181933">SUSE bug 1181933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182137">SUSE bug 1182137</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182425">SUSE bug 1182425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182577">SUSE bug 1182577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182968">SUSE bug 1182968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183979">SUSE bug 1183979</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11947/">CVE-2020-11947</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12829/">CVE-2020-12829</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13361/">CVE-2020-13361</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13362/">CVE-2020-13362</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13659/">CVE-2020-13659</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13765/">CVE-2020-13765</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14364/">CVE-2020-14364</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15469/">CVE-2020-15469</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15863/">CVE-2020-15863</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16092/">CVE-2020-16092</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-25084/">CVE-2020-25084</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-25624/">CVE-2020-25624</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25625/">CVE-2020-25625</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25723/">CVE-2020-25723</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27617/">CVE-2020-27617</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-27821/">CVE-2020-27821</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28916/">CVE-2020-28916</cve>
	<cve impact="low" cvss3="2.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29129/">CVE-2020-29129</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29130/">CVE-2020-29130</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-29443/">CVE-2020-29443</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20181/">CVE-2021-20181</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20203/">CVE-2021-20203</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-20221/">CVE-2021-20221</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20257/">CVE-2021-20257</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3416/">CVE-2021-3416</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505142" comment="qemu-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503849" comment="qemu-audio-alsa-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503850" comment="qemu-audio-oss-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503851" comment="qemu-audio-pa-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505143" comment="qemu-block-curl-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505144" comment="qemu-block-iscsi-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505145" comment="qemu-block-rbd-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505146" comment="qemu-block-ssh-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505147" comment="qemu-guest-agent-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503857" comment="qemu-ipxe-1.0.0+-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503858" comment="qemu-kvm-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505148" comment="qemu-lang-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503860" comment="qemu-seabios-1.12.0_0_ga698c89-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503861" comment="qemu-sgabios-8-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505149" comment="qemu-tools-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503863" comment="qemu-ui-curses-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503864" comment="qemu-ui-gtk-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503865" comment="qemu-vgabios-1.12.0_0_ga698c89-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503866" comment="qemu-x86-3.1.1.1-9.24.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140308" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1183936" ref_url="https://bugzilla.suse.com/1183936" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3156" ref_url="https://www.suse.com/security/cve/CVE-2021-3156/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008661.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:

- L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-20"/>
	<updated date="2021-04-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183936">SUSE bug 1183936</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3156/">CVE-2021-3156</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505150" comment="sudo-1.8.22-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505151" comment="sudo-devel-1.8.22-4.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140309" version="1" class="patch">
	<metadata>
		<title>Security update for libnettle (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1184401" ref_url="https://bugzilla.suse.com/1184401" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20305" ref_url="https://www.suse.com/security/cve/CVE-2021-20305/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008693.html" source="SUSE-SU"/>
		<description>
This update for libnettle fixes the following issues:

- CVE-2021-20305: Fixed the multiply function which was being called with out-of-range scalars (bsc#1184401).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184401">SUSE bug 1184401</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20305/">CVE-2021-20305</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505152" comment="libhogweed4-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493746" comment="libhogweed4-32bit-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505153" comment="libnettle-devel-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505154" comment="libnettle6-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493749" comment="libnettle6-32bit-3.4.1-4.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140310" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1184960" ref_url="https://bugzilla.suse.com/1184960" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23961" ref_url="https://www.suse.com/security/cve/CVE-2021-23961/" source="CVE"/>
		<reference ref_id="CVE-2021-23994" ref_url="https://www.suse.com/security/cve/CVE-2021-23994/" source="CVE"/>
		<reference ref_id="CVE-2021-23995" ref_url="https://www.suse.com/security/cve/CVE-2021-23995/" source="CVE"/>
		<reference ref_id="CVE-2021-23998" ref_url="https://www.suse.com/security/cve/CVE-2021-23998/" source="CVE"/>
		<reference ref_id="CVE-2021-23999" ref_url="https://www.suse.com/security/cve/CVE-2021-23999/" source="CVE"/>
		<reference ref_id="CVE-2021-24002" ref_url="https://www.suse.com/security/cve/CVE-2021-24002/" source="CVE"/>
		<reference ref_id="CVE-2021-29945" ref_url="https://www.suse.com/security/cve/CVE-2021-29945/" source="CVE"/>
		<reference ref_id="CVE-2021-29946" ref_url="https://www.suse.com/security/cve/CVE-2021-29946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008700.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- MozillaFirefox was updated to 78.10.0 ESR (bsc#1184960)
  * CVE-2021-23994: Out of bound write due to lazy initialization
  * CVE-2021-23995: Use-after-free in Responsive Design Mode
  * CVE-2021-23998: Secure Lock icon could have been spoofed
  * CVE-2021-23961: More internal network hosts could have been probed by a malicious webpage
  * CVE-2021-23999: Blob URLs may have been granted additional privileges
  * CVE-2021-24002: Arbitrary FTP command execution on FTP servers using an encoded URL
  * CVE-2021-29945: Incorrect size computation in WebAssembly JIT could lead to null-reads
  * CVE-2021-29946: Port blocking could be bypassed
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-29"/>
	<updated date="2021-04-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184960">SUSE bug 1184960</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23961/">CVE-2021-23961</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23994/">CVE-2021-23994</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23995/">CVE-2021-23995</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23998/">CVE-2021-23998</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23999/">CVE-2021-23999</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-24002/">CVE-2021-24002</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29945/">CVE-2021-29945</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29946/">CVE-2021-29946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505155" comment="MozillaFirefox-78.10.0-3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505156" comment="MozillaFirefox-devel-78.10.0-3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505157" comment="MozillaFirefox-translations-common-78.10.0-3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505158" comment="MozillaFirefox-translations-other-78.10.0-3.139.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140311" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1184161" ref_url="https://bugzilla.suse.com/1184161" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25317" ref_url="https://www.suse.com/security/cve/CVE-2021-25317/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008715.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:

- CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks (bsc#1184161)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-30"/>
	<updated date="2021-04-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184161">SUSE bug 1184161</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-25317/">CVE-2021-25317</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505159" comment="cups-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505160" comment="cups-client-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505161" comment="cups-config-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505162" comment="cups-ddk-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505163" comment="cups-devel-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505164" comment="libcups2-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493827" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505165" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505166" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505167" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505168" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140312" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1177204" ref_url="https://bugzilla.suse.com/1177204" source="BUGZILLA"/>
		<reference ref_id="1178591" ref_url="https://bugzilla.suse.com/1178591" source="BUGZILLA"/>
		<reference ref_id="1179148" ref_url="https://bugzilla.suse.com/1179148" source="BUGZILLA"/>
		<reference ref_id="1181254" ref_url="https://bugzilla.suse.com/1181254" source="BUGZILLA"/>
		<reference ref_id="1181989" ref_url="https://bugzilla.suse.com/1181989" source="BUGZILLA"/>
		<reference ref_id="1183072" ref_url="https://bugzilla.suse.com/1183072" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28368" ref_url="https://www.suse.com/security/cve/CVE-2020-28368/" source="CVE"/>
		<reference ref_id="CVE-2021-28687" ref_url="https://www.suse.com/security/cve/CVE-2021-28687/" source="CVE"/>
		<reference ref_id="CVE-2021-3308" ref_url="https://www.suse.com/security/cve/CVE-2021-3308/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008718.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2020-28368: Intel RAPL sidechannel attack aka PLATYPUS attack (bsc#1178591, XSA-351) 
- CVE-2021-3308: IRQ vector leak on x86 (bsc#1181254, XSA-360)
- CVE-2021-28687: HVM soft-reset crashes toolstack (bsc#1183072, XSA-368) 
- L3: conring size for XEN HV's with huge memory to small (bsc#1177204).
- kdump of HVM fails, soft-reset not handled by libxl (bsc#1179148)
- openQA job causes libvirtd to dump core when running kdump inside domain (bsc#1181989).
- Upstream bug fixes (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-30"/>
	<updated date="2021-04-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177204">SUSE bug 1177204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178591">SUSE bug 1178591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179148">SUSE bug 1179148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181254">SUSE bug 1181254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181989">SUSE bug 1181989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183072">SUSE bug 1183072</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-28368/">CVE-2020-28368</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28687/">CVE-2021-28687</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3308/">CVE-2021-3308</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503867" comment="xen-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503868" comment="xen-devel-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503869" comment="xen-libs-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503870" comment="xen-tools-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503871" comment="xen-tools-domU-4.12.4_08-3.43.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140313" version="1" class="patch">
	<metadata>
		<title>Security update for stunnel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1177580" ref_url="https://bugzilla.suse.com/1177580" source="BUGZILLA"/>
		<reference ref_id="1182529" ref_url="https://bugzilla.suse.com/1182529" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20230" ref_url="https://www.suse.com/security/cve/CVE-2021-20230/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008719.html" source="SUSE-SU"/>
		<description>
This update for stunnel fixes the following issues:

- Security fix: [bsc#1177580, bsc#1182529, CVE-2021-20230]
  * 'redirect' option does not properly handle 'verifyChain = yes'
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-03"/>
	<updated date="2021-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177580">SUSE bug 1177580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182529">SUSE bug 1182529</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-20230/">CVE-2021-20230</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505169" comment="stunnel-5.44-3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140314" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1183453" ref_url="https://bugzilla.suse.com/1183453" source="BUGZILLA"/>
		<reference ref_id="1185345" ref_url="https://bugzilla.suse.com/1185345" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25214" ref_url="https://www.suse.com/security/cve/CVE-2021-25214/" source="CVE"/>
		<reference ref_id="CVE-2021-25215" ref_url="https://www.suse.com/security/cve/CVE-2021-25215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1471-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008724.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- CVE-2021-25214: Fixed a broken inbound incremental zone update (IXFR) which could have caused named to terminate unexpectedly (bsc#1185345).
- CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that required the DNAME to be processed to resolve itself (bsc#1185345).
- make /usr/bin/delv in bind-tools position independent (bsc#1183453).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183453">SUSE bug 1183453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185345">SUSE bug 1185345</bugzilla>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-25214/">CVE-2021-25214</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-25215/">CVE-2021-25215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505170" comment="bind-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505171" comment="bind-chrootenv-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505172" comment="bind-devel-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499852" comment="bind-doc-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505173" comment="bind-utils-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505174" comment="libbind9-1600-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505175" comment="libdns1605-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505176" comment="libirs-devel-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505177" comment="libirs1601-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505178" comment="libisc1606-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505179" comment="libisccc1600-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505180" comment="libisccfg1600-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505181" comment="libns1604-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493844" comment="python3-bind-9.16.6-12.49.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140315" version="1" class="patch">
	<metadata>
		<title>Security update for ceph (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1145463" ref_url="https://bugzilla.suse.com/1145463" source="BUGZILLA"/>
		<reference ref_id="1174466" ref_url="https://bugzilla.suse.com/1174466" source="BUGZILLA"/>
		<reference ref_id="1177200" ref_url="https://bugzilla.suse.com/1177200" source="BUGZILLA"/>
		<reference ref_id="1178235" ref_url="https://bugzilla.suse.com/1178235" source="BUGZILLA"/>
		<reference ref_id="1178837" ref_url="https://bugzilla.suse.com/1178837" source="BUGZILLA"/>
		<reference ref_id="1178860" ref_url="https://bugzilla.suse.com/1178860" source="BUGZILLA"/>
		<reference ref_id="1178905" ref_url="https://bugzilla.suse.com/1178905" source="BUGZILLA"/>
		<reference ref_id="1179997" ref_url="https://bugzilla.suse.com/1179997" source="BUGZILLA"/>
		<reference ref_id="1180118" ref_url="https://bugzilla.suse.com/1180118" source="BUGZILLA"/>
		<reference ref_id="1180594" ref_url="https://bugzilla.suse.com/1180594" source="BUGZILLA"/>
		<reference ref_id="1181378" ref_url="https://bugzilla.suse.com/1181378" source="BUGZILLA"/>
		<reference ref_id="1183074" ref_url="https://bugzilla.suse.com/1183074" source="BUGZILLA"/>
		<reference ref_id="1183487" ref_url="https://bugzilla.suse.com/1183487" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25678" ref_url="https://www.suse.com/security/cve/CVE-2020-25678/" source="CVE"/>
		<reference ref_id="CVE-2020-27839" ref_url="https://www.suse.com/security/cve/CVE-2020-27839/" source="CVE"/>
		<reference ref_id="CVE-2021-20288" ref_url="https://www.suse.com/security/cve/CVE-2021-20288/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008721.html" source="SUSE-SU"/>
		<description>
This update for ceph fixes the following issues:

- ceph was updated to 14.2.20-402-g6aa76c6815:
    * CVE-2021-20288: Fixed unauthorized global_id reuse (bsc#1183074).
    * CVE-2020-25678: Do not add sensitive information in Ceph log files (bsc#1178905).
    * CVE-2020-27839: Use secure cookies to store JWT Token (bsc#1179997). 
    * mgr/dashboard: prometheus alerting: add some leeway for package drops and errors (bsc#1145463) 
    * mon: have 'mon stat' output json as well (bsc#1174466) 
    * rpm: ceph-mgr-dashboard recommends python3-saml on SUSE (bsc#1177200) 
    * mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled (bsc#1178235) 
    * rgw: cls/user: set from_index for reset stats calls (bsc#1178837) 
    * mgr/dashboard: Disable TLS 1.0 and 1.1 (bsc#1178860)
    * bluestore: provide a different name for fallback allocator (bsc#1180118) 
    * test/run-cli-tests: use cram from github (bsc#1181378) 
    * mgr/dashboard: fix 'Python2 Cookie module import fails on Python3' (bsc#1183487) 
    * common: make ms_bind_msgr2 default to 'false' (bsc#1180594) 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1145463">SUSE bug 1145463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174466">SUSE bug 1174466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177200">SUSE bug 1177200</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178235">SUSE bug 1178235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178837">SUSE bug 1178837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178860">SUSE bug 1178860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178905">SUSE bug 1178905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179997">SUSE bug 1179997</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180118">SUSE bug 1180118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180594">SUSE bug 1180594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181378">SUSE bug 1181378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183074">SUSE bug 1183074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183487">SUSE bug 1183487</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25678/">CVE-2020-25678</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27839/">CVE-2020-27839</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20288/">CVE-2021-20288</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505182" comment="ceph-common-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505183" comment="libcephfs-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505184" comment="libcephfs2-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505185" comment="librados-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505186" comment="librados2-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505187" comment="libradospp-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505188" comment="librbd-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505189" comment="librbd1-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505190" comment="librgw-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505191" comment="librgw2-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505192" comment="python3-ceph-argparse-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505193" comment="python3-cephfs-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505194" comment="python3-rados-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505195" comment="python3-rbd-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505196" comment="python3-rgw-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505197" comment="rados-objclass-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140316" version="1" class="patch">
	<metadata>
		<title>Security update for avahi (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1184521" ref_url="https://bugzilla.suse.com/1184521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3468" ref_url="https://www.suse.com/security/cve/CVE-2021-3468/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1493-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008937.html" source="SUSE-SU"/>
		<description>
This update for avahi fixes the following issues:

- CVE-2021-3468: avoid infinite loop by handling  HUP event in client_work (bsc#1184521).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1184521">SUSE bug 1184521</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3468/">CVE-2021-3468</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505198" comment="avahi-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505199" comment="avahi-autoipd-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505200" comment="avahi-compat-howl-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505201" comment="avahi-compat-mDNSResponder-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493868" comment="avahi-lang-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505202" comment="avahi-utils-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505203" comment="avahi-utils-gtk-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505204" comment="libavahi-client3-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493871" comment="libavahi-client3-32bit-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505205" comment="libavahi-common3-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493873" comment="libavahi-common3-32bit-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505206" comment="libavahi-core7-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505207" comment="libavahi-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505208" comment="libavahi-glib-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505209" comment="libavahi-glib1-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505210" comment="libavahi-gobject-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505211" comment="libavahi-gobject0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505212" comment="libavahi-ui-gtk3-0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505213" comment="libavahi-ui0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505214" comment="libdns_sd-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505215" comment="libhowl0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505216" comment="typelib-1_0-Avahi-0_6-0.7-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140317" version="1" class="patch">
	<metadata>
		<title>Security update for sca-patterns-sle11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1154824" ref_url="https://bugzilla.suse.com/1154824" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008731.html" source="SUSE-SU"/>
		<description>
This update for sca-patterns-sle11 fixes the following issues:

- New regular patterns (1) for version 1.3.1
   * Special Register Buffer Data Sampling aka CrossTalk (CVE-2020-0543) (bsc#1154824)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1154824">SUSE bug 1154824</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499853" comment="sca-patterns-sle11-1.3.1-7.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140318" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1178469" ref_url="https://bugzilla.suse.com/1178469" source="BUGZILLA"/>
		<reference ref_id="1179156" ref_url="https://bugzilla.suse.com/1179156" source="BUGZILLA"/>
		<reference ref_id="1183572" ref_url="https://bugzilla.suse.com/1183572" source="BUGZILLA"/>
		<reference ref_id="1183574" ref_url="https://bugzilla.suse.com/1183574" source="BUGZILLA"/>
		<reference ref_id="1184310" ref_url="https://bugzilla.suse.com/1184310" source="BUGZILLA"/>
		<reference ref_id="1184677" ref_url="https://bugzilla.suse.com/1184677" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27840" ref_url="https://www.suse.com/security/cve/CVE-2020-27840/" source="CVE"/>
		<reference ref_id="CVE-2021-20254" ref_url="https://www.suse.com/security/cve/CVE-2021-20254/" source="CVE"/>
		<reference ref_id="CVE-2021-20277" ref_url="https://www.suse.com/security/cve/CVE-2021-20277/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008730.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574).
- CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677).
- CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572).
- Avoid free'ing our own pointer in memcache when memcache_trim attempts to reduce cache size (bsc#1179156).
- s3-libads: use dns name to open a ldap session (bsc#1184310).
- Adjust smbcacls '--propagate-inheritance' feature to align with upstream (bsc#1178469).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178469">SUSE bug 1178469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179156">SUSE bug 1179156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183572">SUSE bug 1183572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183574">SUSE bug 1183574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184310">SUSE bug 1184310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184677">SUSE bug 1184677</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27840/">CVE-2020-27840</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-20254/">CVE-2021-20254</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20277/">CVE-2021-20277</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505217" comment="libdcerpc-binding0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503908" comment="libdcerpc-binding0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505218" comment="libdcerpc-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505219" comment="libdcerpc-samr-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505220" comment="libdcerpc-samr0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505221" comment="libdcerpc0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503913" comment="libdcerpc0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505222" comment="libndr-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505223" comment="libndr-krb5pac-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505224" comment="libndr-krb5pac0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503917" comment="libndr-krb5pac0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505225" comment="libndr-nbt-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505226" comment="libndr-nbt0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503920" comment="libndr-nbt0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505227" comment="libndr-standard-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505228" comment="libndr-standard0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503923" comment="libndr-standard0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505229" comment="libndr0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503925" comment="libndr0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505230" comment="libnetapi-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505231" comment="libnetapi0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503928" comment="libnetapi0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505232" comment="libsamba-credentials-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505233" comment="libsamba-credentials0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503931" comment="libsamba-credentials0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505234" comment="libsamba-errors-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505235" comment="libsamba-errors0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503934" comment="libsamba-errors0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505236" comment="libsamba-hostconfig-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505237" comment="libsamba-hostconfig0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503937" comment="libsamba-hostconfig0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505238" comment="libsamba-passdb-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505239" comment="libsamba-passdb0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503940" comment="libsamba-passdb0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505240" comment="libsamba-policy-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505241" comment="libsamba-policy-python3-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505242" comment="libsamba-policy0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505243" comment="libsamba-policy0-python3-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505244" comment="libsamba-util-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505245" comment="libsamba-util0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503947" comment="libsamba-util0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505246" comment="libsamdb-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505247" comment="libsamdb0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503950" comment="libsamdb0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505248" comment="libsmbclient-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505249" comment="libsmbclient0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505250" comment="libsmbconf-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505251" comment="libsmbconf0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503955" comment="libsmbconf0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505252" comment="libsmbldap-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505253" comment="libsmbldap2-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503958" comment="libsmbldap2-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505254" comment="libtevent-util-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505255" comment="libtevent-util0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503961" comment="libtevent-util0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505256" comment="libwbclient-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505257" comment="libwbclient0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503964" comment="libwbclient0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505258" comment="samba-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505259" comment="samba-ad-dc-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505260" comment="samba-client-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505261" comment="samba-core-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505262" comment="samba-dsdb-modules-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505263" comment="samba-libs-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503971" comment="samba-libs-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505264" comment="samba-libs-python-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505265" comment="samba-libs-python3-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505266" comment="samba-python-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505267" comment="samba-python3-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505268" comment="samba-winbind-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503977" comment="samba-winbind-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140319" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182719" ref_url="https://bugzilla.suse.com/1182719" source="BUGZILLA"/>
		<reference ref_id="1184155" ref_url="https://bugzilla.suse.com/1184155" source="BUGZILLA"/>
		<reference ref_id="1184262" ref_url="https://bugzilla.suse.com/1184262" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27918" ref_url="https://www.suse.com/security/cve/CVE-2020-27918/" source="CVE"/>
		<reference ref_id="CVE-2020-29623" ref_url="https://www.suse.com/security/cve/CVE-2020-29623/" source="CVE"/>
		<reference ref_id="CVE-2021-1765" ref_url="https://www.suse.com/security/cve/CVE-2021-1765/" source="CVE"/>
		<reference ref_id="CVE-2021-1788" ref_url="https://www.suse.com/security/cve/CVE-2021-1788/" source="CVE"/>
		<reference ref_id="CVE-2021-1789" ref_url="https://www.suse.com/security/cve/CVE-2021-1789/" source="CVE"/>
		<reference ref_id="CVE-2021-1799" ref_url="https://www.suse.com/security/cve/CVE-2021-1799/" source="CVE"/>
		<reference ref_id="CVE-2021-1801" ref_url="https://www.suse.com/security/cve/CVE-2021-1801/" source="CVE"/>
		<reference ref_id="CVE-2021-1844" ref_url="https://www.suse.com/security/cve/CVE-2021-1844/" source="CVE"/>
		<reference ref_id="CVE-2021-1870" ref_url="https://www.suse.com/security/cve/CVE-2021-1870/" source="CVE"/>
		<reference ref_id="CVE-2021-1871" ref_url="https://www.suse.com/security/cve/CVE-2021-1871/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008734.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.32.0 (bsc#1184155):
  * Fix the authentication request port when URL omits the port.
  * Fix iframe scrolling when main frame is scrolled in async
  * scrolling mode.
  * Stop using g_memdup.
  * Show a warning message when overriding signal handler for
  * threading suspension.
  * Fix the build on RISC-V with GCC 11.
  * Fix several crashes and rendering issues.
  * Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
- Update in version 2.30.6 (bsc#1184262):
  * Update user agent quirks again for Google Docs and Google Drive.
  * Fix several crashes and rendering issues.
  * Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
    CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Update _constraints for armv6/armv7 (bsc#1182719)
- restore NPAPI plugin support which was removed in 2.32.0
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182719">SUSE bug 1182719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184155">SUSE bug 1184155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184262">SUSE bug 1184262</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27918/">CVE-2020-27918</cve>
	<cve impact="important" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29623/">CVE-2020-29623</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1765/">CVE-2021-1765</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1788/">CVE-2021-1788</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1789/">CVE-2021-1789</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1799/">CVE-2021-1799</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1801/">CVE-2021-1801</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1844/">CVE-2021-1844</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1870/">CVE-2021-1870</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1871/">CVE-2021-1871</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505269" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505270" comment="libwebkit2gtk-4_0-37-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503284" comment="libwebkit2gtk3-lang-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505271" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505272" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505273" comment="typelib-1_0-WebKit2WebExtension-4_0-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505274" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505275" comment="webkit2gtk3-devel-2.32.0-3.74.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140320" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1184606" ref_url="https://bugzilla.suse.com/1184606" source="BUGZILLA"/>
		<reference ref_id="1185055" ref_url="https://bugzilla.suse.com/1185055" source="BUGZILLA"/>
		<reference ref_id="1185056" ref_url="https://bugzilla.suse.com/1185056" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2161" ref_url="https://www.suse.com/security/cve/CVE-2021-2161/" source="CVE"/>
		<reference ref_id="CVE-2021-2163" ref_url="https://www.suse.com/security/cve/CVE-2021-2163/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008756.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to upstream tag jdk-11.0.11+9 (April 2021 CPU)
  * CVE-2021-2163: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055)
  * CVE-2021-2161: Fixed incorrect handling of partially quoted arguments in ProcessBuilder (bsc#1185056)
- moved mozilla-nss dependency to java-11-openjdk-headless package, this is necessary to be able to do crypto 
  with just java-11-openjdk-headless installed (bsc#1184606).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-11"/>
	<updated date="2021-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184606">SUSE bug 1184606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185055">SUSE bug 1185055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185056">SUSE bug 1185056</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2161/">CVE-2021-2161</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2163/">CVE-2021-2163</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505276" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505277" comment="java-11-openjdk-demo-11.0.11.0-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505278" comment="java-11-openjdk-devel-11.0.11.0-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505279" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140321" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1179103" ref_url="https://bugzilla.suse.com/1179103" source="BUGZILLA"/>
		<reference ref_id="1179202" ref_url="https://bugzilla.suse.com/1179202" source="BUGZILLA"/>
		<reference ref_id="1179208" ref_url="https://bugzilla.suse.com/1179208" source="BUGZILLA"/>
		<reference ref_id="1179212" ref_url="https://bugzilla.suse.com/1179212" source="BUGZILLA"/>
		<reference ref_id="1179221" ref_url="https://bugzilla.suse.com/1179221" source="BUGZILLA"/>
		<reference ref_id="1179223" ref_url="https://bugzilla.suse.com/1179223" source="BUGZILLA"/>
		<reference ref_id="1179240" ref_url="https://bugzilla.suse.com/1179240" source="BUGZILLA"/>
		<reference ref_id="1179244" ref_url="https://bugzilla.suse.com/1179244" source="BUGZILLA"/>
		<reference ref_id="1179260" ref_url="https://bugzilla.suse.com/1179260" source="BUGZILLA"/>
		<reference ref_id="1179268" ref_url="https://bugzilla.suse.com/1179268" source="BUGZILLA"/>
		<reference ref_id="1179269" ref_url="https://bugzilla.suse.com/1179269" source="BUGZILLA"/>
		<reference ref_id="1179276" ref_url="https://bugzilla.suse.com/1179276" source="BUGZILLA"/>
		<reference ref_id="1179278" ref_url="https://bugzilla.suse.com/1179278" source="BUGZILLA"/>
		<reference ref_id="1179281" ref_url="https://bugzilla.suse.com/1179281" source="BUGZILLA"/>
		<reference ref_id="1179285" ref_url="https://bugzilla.suse.com/1179285" source="BUGZILLA"/>
		<reference ref_id="1179311" ref_url="https://bugzilla.suse.com/1179311" source="BUGZILLA"/>
		<reference ref_id="1179312" ref_url="https://bugzilla.suse.com/1179312" source="BUGZILLA"/>
		<reference ref_id="1179313" ref_url="https://bugzilla.suse.com/1179313" source="BUGZILLA"/>
		<reference ref_id="1179315" ref_url="https://bugzilla.suse.com/1179315" source="BUGZILLA"/>
		<reference ref_id="1179317" ref_url="https://bugzilla.suse.com/1179317" source="BUGZILLA"/>
		<reference ref_id="1179321" ref_url="https://bugzilla.suse.com/1179321" source="BUGZILLA"/>
		<reference ref_id="1179322" ref_url="https://bugzilla.suse.com/1179322" source="BUGZILLA"/>
		<reference ref_id="1179327" ref_url="https://bugzilla.suse.com/1179327" source="BUGZILLA"/>
		<reference ref_id="1179333" ref_url="https://bugzilla.suse.com/1179333" source="BUGZILLA"/>
		<reference ref_id="1179336" ref_url="https://bugzilla.suse.com/1179336" source="BUGZILLA"/>
		<reference ref_id="1179338" ref_url="https://bugzilla.suse.com/1179338" source="BUGZILLA"/>
		<reference ref_id="1179339" ref_url="https://bugzilla.suse.com/1179339" source="BUGZILLA"/>
		<reference ref_id="1179343" ref_url="https://bugzilla.suse.com/1179343" source="BUGZILLA"/>
		<reference ref_id="1179345" ref_url="https://bugzilla.suse.com/1179345" source="BUGZILLA"/>
		<reference ref_id="1179346" ref_url="https://bugzilla.suse.com/1179346" source="BUGZILLA"/>
		<reference ref_id="1179347" ref_url="https://bugzilla.suse.com/1179347" source="BUGZILLA"/>
		<reference ref_id="1179361" ref_url="https://bugzilla.suse.com/1179361" source="BUGZILLA"/>
		<reference ref_id="1179362" ref_url="https://bugzilla.suse.com/1179362" source="BUGZILLA"/>
		<reference ref_id="1179397" ref_url="https://bugzilla.suse.com/1179397" source="BUGZILLA"/>
		<reference ref_id="1179753" ref_url="https://bugzilla.suse.com/1179753" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-19667" ref_url="https://www.suse.com/security/cve/CVE-2020-19667/" source="CVE"/>
		<reference ref_id="CVE-2020-25664" ref_url="https://www.suse.com/security/cve/CVE-2020-25664/" source="CVE"/>
		<reference ref_id="CVE-2020-25665" ref_url="https://www.suse.com/security/cve/CVE-2020-25665/" source="CVE"/>
		<reference ref_id="CVE-2020-25666" ref_url="https://www.suse.com/security/cve/CVE-2020-25666/" source="CVE"/>
		<reference ref_id="CVE-2020-25674" ref_url="https://www.suse.com/security/cve/CVE-2020-25674/" source="CVE"/>
		<reference ref_id="CVE-2020-25675" ref_url="https://www.suse.com/security/cve/CVE-2020-25675/" source="CVE"/>
		<reference ref_id="CVE-2020-25676" ref_url="https://www.suse.com/security/cve/CVE-2020-25676/" source="CVE"/>
		<reference ref_id="CVE-2020-27750" ref_url="https://www.suse.com/security/cve/CVE-2020-27750/" source="CVE"/>
		<reference ref_id="CVE-2020-27751" ref_url="https://www.suse.com/security/cve/CVE-2020-27751/" source="CVE"/>
		<reference ref_id="CVE-2020-27752" ref_url="https://www.suse.com/security/cve/CVE-2020-27752/" source="CVE"/>
		<reference ref_id="CVE-2020-27753" ref_url="https://www.suse.com/security/cve/CVE-2020-27753/" source="CVE"/>
		<reference ref_id="CVE-2020-27754" ref_url="https://www.suse.com/security/cve/CVE-2020-27754/" source="CVE"/>
		<reference ref_id="CVE-2020-27755" ref_url="https://www.suse.com/security/cve/CVE-2020-27755/" source="CVE"/>
		<reference ref_id="CVE-2020-27756" ref_url="https://www.suse.com/security/cve/CVE-2020-27756/" source="CVE"/>
		<reference ref_id="CVE-2020-27757" ref_url="https://www.suse.com/security/cve/CVE-2020-27757/" source="CVE"/>
		<reference ref_id="CVE-2020-27758" ref_url="https://www.suse.com/security/cve/CVE-2020-27758/" source="CVE"/>
		<reference ref_id="CVE-2020-27759" ref_url="https://www.suse.com/security/cve/CVE-2020-27759/" source="CVE"/>
		<reference ref_id="CVE-2020-27760" ref_url="https://www.suse.com/security/cve/CVE-2020-27760/" source="CVE"/>
		<reference ref_id="CVE-2020-27761" ref_url="https://www.suse.com/security/cve/CVE-2020-27761/" source="CVE"/>
		<reference ref_id="CVE-2020-27762" ref_url="https://www.suse.com/security/cve/CVE-2020-27762/" source="CVE"/>
		<reference ref_id="CVE-2020-27763" ref_url="https://www.suse.com/security/cve/CVE-2020-27763/" source="CVE"/>
		<reference ref_id="CVE-2020-27764" ref_url="https://www.suse.com/security/cve/CVE-2020-27764/" source="CVE"/>
		<reference ref_id="CVE-2020-27765" ref_url="https://www.suse.com/security/cve/CVE-2020-27765/" source="CVE"/>
		<reference ref_id="CVE-2020-27766" ref_url="https://www.suse.com/security/cve/CVE-2020-27766/" source="CVE"/>
		<reference ref_id="CVE-2020-27767" ref_url="https://www.suse.com/security/cve/CVE-2020-27767/" source="CVE"/>
		<reference ref_id="CVE-2020-27768" ref_url="https://www.suse.com/security/cve/CVE-2020-27768/" source="CVE"/>
		<reference ref_id="CVE-2020-27769" ref_url="https://www.suse.com/security/cve/CVE-2020-27769/" source="CVE"/>
		<reference ref_id="CVE-2020-27770" ref_url="https://www.suse.com/security/cve/CVE-2020-27770/" source="CVE"/>
		<reference ref_id="CVE-2020-27771" ref_url="https://www.suse.com/security/cve/CVE-2020-27771/" source="CVE"/>
		<reference ref_id="CVE-2020-27772" ref_url="https://www.suse.com/security/cve/CVE-2020-27772/" source="CVE"/>
		<reference ref_id="CVE-2020-27773" ref_url="https://www.suse.com/security/cve/CVE-2020-27773/" source="CVE"/>
		<reference ref_id="CVE-2020-27774" ref_url="https://www.suse.com/security/cve/CVE-2020-27774/" source="CVE"/>
		<reference ref_id="CVE-2020-27775" ref_url="https://www.suse.com/security/cve/CVE-2020-27775/" source="CVE"/>
		<reference ref_id="CVE-2020-27776" ref_url="https://www.suse.com/security/cve/CVE-2020-27776/" source="CVE"/>
		<reference ref_id="CVE-2020-29599" ref_url="https://www.suse.com/security/cve/CVE-2020-29599/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).
- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).
- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).
- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).
- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).
- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).
- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).
- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).
- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).
- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).
- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).
- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).
- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).
- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).
- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).
- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).
- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).
- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).
- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).
- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).
- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).
- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).
- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).
- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).
- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).
- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).
- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).
- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).
- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).
- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).
- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).
- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).
- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).
- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).
- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-18"/>
	<updated date="2021-01-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179103">SUSE bug 1179103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179202">SUSE bug 1179202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179208">SUSE bug 1179208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179212">SUSE bug 1179212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179221">SUSE bug 1179221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179223">SUSE bug 1179223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179240">SUSE bug 1179240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179244">SUSE bug 1179244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179260">SUSE bug 1179260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179268">SUSE bug 1179268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179269">SUSE bug 1179269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179276">SUSE bug 1179276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179278">SUSE bug 1179278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179281">SUSE bug 1179281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179285">SUSE bug 1179285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179311">SUSE bug 1179311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179312">SUSE bug 1179312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179313">SUSE bug 1179313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179315">SUSE bug 1179315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179317">SUSE bug 1179317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179321">SUSE bug 1179321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179322">SUSE bug 1179322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179327">SUSE bug 1179327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179333">SUSE bug 1179333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179336">SUSE bug 1179336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179338">SUSE bug 1179338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179339">SUSE bug 1179339</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179343">SUSE bug 1179343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179345">SUSE bug 1179345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179346">SUSE bug 1179346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179347">SUSE bug 1179347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179361">SUSE bug 1179361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179362">SUSE bug 1179362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179397">SUSE bug 1179397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179753">SUSE bug 1179753</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-19667/">CVE-2020-19667</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-25664/">CVE-2020-25664</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25665/">CVE-2020-25665</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25666/">CVE-2020-25666</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25674/">CVE-2020-25674</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25675/">CVE-2020-25675</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25676/">CVE-2020-25676</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27750/">CVE-2020-27750</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27751/">CVE-2020-27751</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27752/">CVE-2020-27752</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27753/">CVE-2020-27753</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27754/">CVE-2020-27754</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27755/">CVE-2020-27755</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27756/">CVE-2020-27756</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27757/">CVE-2020-27757</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27758/">CVE-2020-27758</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27759/">CVE-2020-27759</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27760/">CVE-2020-27760</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27761/">CVE-2020-27761</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27762/">CVE-2020-27762</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27763/">CVE-2020-27763</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27764/">CVE-2020-27764</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27765/">CVE-2020-27765</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27766/">CVE-2020-27766</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27767/">CVE-2020-27767</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27768/">CVE-2020-27768</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27769/">CVE-2020-27769</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27770/">CVE-2020-27770</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27771/">CVE-2020-27771</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27772/">CVE-2020-27772</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27773/">CVE-2020-27773</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27774/">CVE-2020-27774</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27775/">CVE-2020-27775</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27776/">CVE-2020-27776</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29599/">CVE-2020-29599</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505280" comment="ImageMagick-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505281" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505282" comment="ImageMagick-config-7-upstream-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505283" comment="ImageMagick-devel-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505284" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505285" comment="libMagick++-devel-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505286" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505287" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505288" comment="perl-PerlMagick-7.0.7.34-3.90.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140322" version="1" class="patch">
	<metadata>
		<title>Security update for shim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1177315" ref_url="https://bugzilla.suse.com/1177315" source="BUGZILLA"/>
		<reference ref_id="1182057" ref_url="https://bugzilla.suse.com/1182057" source="BUGZILLA"/>
		<reference ref_id="1185464" ref_url="https://bugzilla.suse.com/1185464" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:1564-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008758.html" source="SUSE-SU"/>
		<description>
This update for shim fixes the following issues:

- Update to the unified shim binary for SBAT support (bsc#1182057)
  + Merged EKU codesign check (bsc#1177315)
- shim-install: Always assume 'removable' for Azure to avoid the endless reset loop (bsc#1185464).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-11"/>
	<updated date="2021-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177315">SUSE bug 1177315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182057">SUSE bug 1182057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185464">SUSE bug 1185464</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493901" comment="shim-15.4-3.20.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140323" version="1" class="patch">
	<metadata>
		<title>Security update for tcmu-runner (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1180676" ref_url="https://bugzilla.suse.com/1180676" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3139" ref_url="https://www.suse.com/security/cve/CVE-2021-3139/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008219.html" source="SUSE-SU"/>
		<description>
This update for tcmu-runner fixes the following issue:

- CVE-2021-3139: Fixed a LIO security issue (bsc#1180676).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-18"/>
	<updated date="2021-01-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180676">SUSE bug 1180676</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3139/">CVE-2021-3139</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505289" comment="libtcmu2-1.4.0-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505290" comment="tcmu-runner-1.4.0-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140324" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1047233" ref_url="https://bugzilla.suse.com/1047233" source="BUGZILLA"/>
		<reference ref_id="1172455" ref_url="https://bugzilla.suse.com/1172455" source="BUGZILLA"/>
		<reference ref_id="1173485" ref_url="https://bugzilla.suse.com/1173485" source="BUGZILLA"/>
		<reference ref_id="1176720" ref_url="https://bugzilla.suse.com/1176720" source="BUGZILLA"/>
		<reference ref_id="1177411" ref_url="https://bugzilla.suse.com/1177411" source="BUGZILLA"/>
		<reference ref_id="1178181" ref_url="https://bugzilla.suse.com/1178181" source="BUGZILLA"/>
		<reference ref_id="1179454" ref_url="https://bugzilla.suse.com/1179454" source="BUGZILLA"/>
		<reference ref_id="1180197" ref_url="https://bugzilla.suse.com/1180197" source="BUGZILLA"/>
		<reference ref_id="1181960" ref_url="https://bugzilla.suse.com/1181960" source="BUGZILLA"/>
		<reference ref_id="1182011" ref_url="https://bugzilla.suse.com/1182011" source="BUGZILLA"/>
		<reference ref_id="1182672" ref_url="https://bugzilla.suse.com/1182672" source="BUGZILLA"/>
		<reference ref_id="1182715" ref_url="https://bugzilla.suse.com/1182715" source="BUGZILLA"/>
		<reference ref_id="1182716" ref_url="https://bugzilla.suse.com/1182716" source="BUGZILLA"/>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183022" ref_url="https://bugzilla.suse.com/1183022" source="BUGZILLA"/>
		<reference ref_id="1183063" ref_url="https://bugzilla.suse.com/1183063" source="BUGZILLA"/>
		<reference ref_id="1183069" ref_url="https://bugzilla.suse.com/1183069" source="BUGZILLA"/>
		<reference ref_id="1183509" ref_url="https://bugzilla.suse.com/1183509" source="BUGZILLA"/>
		<reference ref_id="1183593" ref_url="https://bugzilla.suse.com/1183593" source="BUGZILLA"/>
		<reference ref_id="1183646" ref_url="https://bugzilla.suse.com/1183646" source="BUGZILLA"/>
		<reference ref_id="1183686" ref_url="https://bugzilla.suse.com/1183686" source="BUGZILLA"/>
		<reference ref_id="1183696" ref_url="https://bugzilla.suse.com/1183696" source="BUGZILLA"/>
		<reference ref_id="1183775" ref_url="https://bugzilla.suse.com/1183775" source="BUGZILLA"/>
		<reference ref_id="1184120" ref_url="https://bugzilla.suse.com/1184120" source="BUGZILLA"/>
		<reference ref_id="1184167" ref_url="https://bugzilla.suse.com/1184167" source="BUGZILLA"/>
		<reference ref_id="1184168" ref_url="https://bugzilla.suse.com/1184168" source="BUGZILLA"/>
		<reference ref_id="1184170" ref_url="https://bugzilla.suse.com/1184170" source="BUGZILLA"/>
		<reference ref_id="1184192" ref_url="https://bugzilla.suse.com/1184192" source="BUGZILLA"/>
		<reference ref_id="1184193" ref_url="https://bugzilla.suse.com/1184193" source="BUGZILLA"/>
		<reference ref_id="1184194" ref_url="https://bugzilla.suse.com/1184194" source="BUGZILLA"/>
		<reference ref_id="1184196" ref_url="https://bugzilla.suse.com/1184196" source="BUGZILLA"/>
		<reference ref_id="1184198" ref_url="https://bugzilla.suse.com/1184198" source="BUGZILLA"/>
		<reference ref_id="1184208" ref_url="https://bugzilla.suse.com/1184208" source="BUGZILLA"/>
		<reference ref_id="1184211" ref_url="https://bugzilla.suse.com/1184211" source="BUGZILLA"/>
		<reference ref_id="1184388" ref_url="https://bugzilla.suse.com/1184388" source="BUGZILLA"/>
		<reference ref_id="1184391" ref_url="https://bugzilla.suse.com/1184391" source="BUGZILLA"/>
		<reference ref_id="1184393" ref_url="https://bugzilla.suse.com/1184393" source="BUGZILLA"/>
		<reference ref_id="1184397" ref_url="https://bugzilla.suse.com/1184397" source="BUGZILLA"/>
		<reference ref_id="1184509" ref_url="https://bugzilla.suse.com/1184509" source="BUGZILLA"/>
		<reference ref_id="1184511" ref_url="https://bugzilla.suse.com/1184511" source="BUGZILLA"/>
		<reference ref_id="1184512" ref_url="https://bugzilla.suse.com/1184512" source="BUGZILLA"/>
		<reference ref_id="1184514" ref_url="https://bugzilla.suse.com/1184514" source="BUGZILLA"/>
		<reference ref_id="1184583" ref_url="https://bugzilla.suse.com/1184583" source="BUGZILLA"/>
		<reference ref_id="1184650" ref_url="https://bugzilla.suse.com/1184650" source="BUGZILLA"/>
		<reference ref_id="1184942" ref_url="https://bugzilla.suse.com/1184942" source="BUGZILLA"/>
		<reference ref_id="1185113" ref_url="https://bugzilla.suse.com/1185113" source="BUGZILLA"/>
		<reference ref_id="1185244" ref_url="https://bugzilla.suse.com/1185244" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0433" ref_url="https://www.suse.com/security/cve/CVE-2020-0433/" source="CVE"/>
		<reference ref_id="CVE-2020-25670" ref_url="https://www.suse.com/security/cve/CVE-2020-25670/" source="CVE"/>
		<reference ref_id="CVE-2020-25671" ref_url="https://www.suse.com/security/cve/CVE-2020-25671/" source="CVE"/>
		<reference ref_id="CVE-2020-25672" ref_url="https://www.suse.com/security/cve/CVE-2020-25672/" source="CVE"/>
		<reference ref_id="CVE-2020-25673" ref_url="https://www.suse.com/security/cve/CVE-2020-25673/" source="CVE"/>
		<reference ref_id="CVE-2020-27170" ref_url="https://www.suse.com/security/cve/CVE-2020-27170/" source="CVE"/>
		<reference ref_id="CVE-2020-27171" ref_url="https://www.suse.com/security/cve/CVE-2020-27171/" source="CVE"/>
		<reference ref_id="CVE-2020-27673" ref_url="https://www.suse.com/security/cve/CVE-2020-27673/" source="CVE"/>
		<reference ref_id="CVE-2020-27815" ref_url="https://www.suse.com/security/cve/CVE-2020-27815/" source="CVE"/>
		<reference ref_id="CVE-2020-35519" ref_url="https://www.suse.com/security/cve/CVE-2020-35519/" source="CVE"/>
		<reference ref_id="CVE-2020-36310" ref_url="https://www.suse.com/security/cve/CVE-2020-36310/" source="CVE"/>
		<reference ref_id="CVE-2020-36311" ref_url="https://www.suse.com/security/cve/CVE-2020-36311/" source="CVE"/>
		<reference ref_id="CVE-2020-36312" ref_url="https://www.suse.com/security/cve/CVE-2020-36312/" source="CVE"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-20219" ref_url="https://www.suse.com/security/cve/CVE-2021-20219/" source="CVE"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="CVE-2021-28038" ref_url="https://www.suse.com/security/cve/CVE-2021-28038/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-28950" ref_url="https://www.suse.com/security/cve/CVE-2021-28950/" source="CVE"/>
		<reference ref_id="CVE-2021-28964" ref_url="https://www.suse.com/security/cve/CVE-2021-28964/" source="CVE"/>
		<reference ref_id="CVE-2021-28971" ref_url="https://www.suse.com/security/cve/CVE-2021-28971/" source="CVE"/>
		<reference ref_id="CVE-2021-28972" ref_url="https://www.suse.com/security/cve/CVE-2021-28972/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="CVE-2021-29155" ref_url="https://www.suse.com/security/cve/CVE-2021-29155/" source="CVE"/>
		<reference ref_id="CVE-2021-29264" ref_url="https://www.suse.com/security/cve/CVE-2021-29264/" source="CVE"/>
		<reference ref_id="CVE-2021-29265" ref_url="https://www.suse.com/security/cve/CVE-2021-29265/" source="CVE"/>
		<reference ref_id="CVE-2021-29647" ref_url="https://www.suse.com/security/cve/CVE-2021-29647/" source="CVE"/>
		<reference ref_id="CVE-2021-29650" ref_url="https://www.suse.com/security/cve/CVE-2021-29650/" source="CVE"/>
		<reference ref_id="CVE-2021-30002" ref_url="https://www.suse.com/security/cve/CVE-2021-30002/" source="CVE"/>
		<reference ref_id="CVE-2021-3428" ref_url="https://www.suse.com/security/cve/CVE-2021-3428/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="CVE-2021-3483" ref_url="https://www.suse.com/security/cve/CVE-2021-3483/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bnc#1184509).
- CVE-2021-29650: Fixed an issue inside the netfilter subsystem that allowed attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value (bnc#1184208).
- CVE-2021-29155: Fixed an issue within kernel/bpf/verifier.c that performed undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations (bnc#1184942).
- CVE-2020-36310: Fixed an issue in arch/x86/kvm/svm/svm.c that allowed a set_memory_region_test infinite loop for certain nested page faults (bnc#1184512).
- CVE-2020-27673: Fixed an issue in Xen where a guest OS users could have caused a denial of service (host OS hang) via a high rate of events to dom0 (bnc#1177411, bnc#1184583).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bnc#1184391).
- CVE-2020-25673: Fixed NFC endless loops caused by repeated llcp_sock_connect() (bsc#1178181).
- CVE-2020-25672: Fixed NFC memory leak in llcp_sock_connect() (bsc#1178181).
- CVE-2020-25671: Fixed NFC refcount leak in llcp_sock_connect() (bsc#1178181).
- CVE-2020-25670: Fixed NFC refcount leak in llcp_sock_bind() (bsc#1178181).
- CVE-2020-36311: Fixed an issue in arch/x86/kvm/svm/sev.c that allowed attackers to cause a denial of service (soft lockup) by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions) (bnc#1184511).
- CVE-2021-28950: Fixed an issue in fs/fuse/fuse_i.h where a 'stall on CPU' could have occured because a retry loop continually finds the same bad inode (bnc#1184194, bnc#1184211).
- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bnc#1184211).
- CVE-2021-30002: Fixed a memory leak issue when a webcam device exists (bnc#1184120).
- CVE-2021-3483: Fixed a use-after-free bug in nosy_ioctl() (bsc#1184393).
- CVE-2021-20219: Fixed a denial of service vulnerability in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could have delayed the loop and cause a threat to the system availability (bnc#1184397).
- CVE-2021-28964: Fixed a race condition in fs/btrfs/ctree.c that could have caused a denial of service because of a lack of locking on an extent buffer before a cloning operation (bnc#1184193).
- CVE-2021-3444: Fixed the bpf verifier as it did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution (bnc#1184170).
- CVE-2021-28971: Fixed a potential local denial of service in intel_pmu_drain_pebs_nhm where userspace applications can cause a system crash because the PEBS status in a PEBS record is mishandled (bnc#1184196).
- CVE-2021-28688: Fixed XSA-365 that includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in leaking persistent grants. The leak in turn would prevent fully cleaning up after a respective guest has died, leaving around zombie domains (bnc#1183646).
- CVE-2021-29265: Fixed an issue in usbip_sockfd_store in drivers/usb/usbip/stub_dev.c that allowed attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status (bnc#1184167).
- CVE-2021-29264: Fixed an issue in drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver that allowed attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is enabled (bnc#1184168).
- CVE-2021-28972: Fixed an issue in drivers/pci/hotplug/rpadlpar_sysfs.c where the RPA PCI Hotplug driver had a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination (bnc#1184198).
- CVE-2021-29647: Fixed an issue in kernel qrtr_recvmsg in net/qrtr/qrtr.c that allowed attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure (bnc#1184192).
- CVE-2020-27171: Fixed an issue in kernel/bpf/verifier.c that had an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory (bnc#1183686, bnc#1183775).
- CVE-2020-27170: Fixed an issue in kernel/bpf/verifier.c that performed undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. This affects pointer types that do not define a ptr_limit (bnc#1183686 bnc#1183775).
- CVE-2021-28660: Fixed rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c that allowed writing beyond the end of the ssid array (bnc#1183593).
- CVE-2020-35519: Update patch reference for x25 fix (bsc#1183696).
- CVE-2021-3428: Fixed ext4 integer overflow in ext4_es_cache_extent (bsc#1173485, bsc#1183509).
- CVE-2020-0433: Fixed blk_mq_queue_tag_busy_iter of blk-mq-tag.c, where a possible use after free due to improper locking could have happened. This could have led to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1176720).
- CVE-2021-28038: Fixed an issue with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931 (bnc#1183022, bnc#1183069).
- CVE-2020-27815: Fixed jfs array index bounds check in dbAdjTree (bsc#1179454).
- CVE-2021-27365: Fixed an issue inside the iSCSI data structures that does not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message (bnc#1182715).
- CVE-2021-27363: Fixed an issue with a kernel pointer leak that could have been used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables (bnc#1182716).
- CVE-2021-27364: Fixed an issue in drivers/scsi/scsi_transport_iscsi.c where an unprivileged user can craft Netlink messages (bnc#1182717).

The following non-security bugs were fixed:

- Revert 'rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)' This turned out to be a bad idea: the kernel-$flavor-devel package must be usable without kernel-$flavor, e.g. at the build of a KMP. And this change brought superfluous installation of kernel-preempt when a system had kernel-syms (bsc#1185113).
- Xen/gnttab: handle p2m update errors on a per-slot basis (bsc#1183022 XSA-367).
- bfq: Fix kABI for update internal depth state when queue depth changes (bsc#1172455).
- bfq: update internal depth state when queue depth changes (bsc#1172455).
- bpf: Add sanity check for upper ptr_limit (bsc#1183686 bsc#1183775).
- bpf: Simplify alu_limit masking for pointer arithmetic (bsc#1183686 bsc#1183775).
- handle also the opposite type of race condition
- ibmvnic: Clear failover_pending if unable to schedule (bsc#1181960 ltc#190997).
- ibmvnic: always store valid MAC address (bsc#1182011 ltc#191844).
- ibmvnic: store valid MAC address (bsc#1182011).
- macros.kernel-source: Use spec_install_pre for certificate installation (boo#1182672).
- nvme: return an error if nvme_set_queue_count() fails (bsc#1180197).
- post.sh: Return an error when module update fails (bsc#1047233 bsc#1184388).
- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- rpm/mkspec: Use tilde instead of dot for version string with rc (bsc#1184650)
- xen-netback: respect gnttab_map_refs()'s return value (bsc#1183022, XSA-367).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-18"/>
	<updated date="2021-05-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1047233">SUSE bug 1047233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172455">SUSE bug 1172455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173485">SUSE bug 1173485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176720">SUSE bug 1176720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177411">SUSE bug 1177411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178181">SUSE bug 1178181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179454">SUSE bug 1179454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180197">SUSE bug 1180197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181960">SUSE bug 1181960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182011">SUSE bug 1182011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182672">SUSE bug 1182672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182715">SUSE bug 1182715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182716">SUSE bug 1182716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183022">SUSE bug 1183022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183063">SUSE bug 1183063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183069">SUSE bug 1183069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183509">SUSE bug 1183509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183593">SUSE bug 1183593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183646">SUSE bug 1183646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183686">SUSE bug 1183686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183696">SUSE bug 1183696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183775">SUSE bug 1183775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184120">SUSE bug 1184120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184167">SUSE bug 1184167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184168">SUSE bug 1184168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184170">SUSE bug 1184170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184192">SUSE bug 1184192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184193">SUSE bug 1184193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184194">SUSE bug 1184194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184196">SUSE bug 1184196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184198">SUSE bug 1184198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184208">SUSE bug 1184208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184211">SUSE bug 1184211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184388">SUSE bug 1184388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184391">SUSE bug 1184391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184393">SUSE bug 1184393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184397">SUSE bug 1184397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184509">SUSE bug 1184509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184511">SUSE bug 1184511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184512">SUSE bug 1184512</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184514">SUSE bug 1184514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184583">SUSE bug 1184583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184650">SUSE bug 1184650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184942">SUSE bug 1184942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185113">SUSE bug 1185113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185244">SUSE bug 1185244</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0433/">CVE-2020-0433</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25670/">CVE-2020-25670</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25671/">CVE-2020-25671</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25672/">CVE-2020-25672</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25673/">CVE-2020-25673</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27170/">CVE-2020-27170</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27171/">CVE-2020-27171</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27673/">CVE-2020-27673</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27815/">CVE-2020-27815</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35519/">CVE-2020-35519</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36310/">CVE-2020-36310</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36311/">CVE-2020-36311</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36312/">CVE-2020-36312</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20219/">CVE-2021-20219</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28038/">CVE-2021-28038</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28950/">CVE-2021-28950</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28964/">CVE-2021-28964</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28971/">CVE-2021-28971</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28972/">CVE-2021-28972</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29155/">CVE-2021-29155</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29264/">CVE-2021-29264</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29265/">CVE-2021-29265</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29647/">CVE-2021-29647</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29650/">CVE-2021-29650</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-30002/">CVE-2021-30002</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3428/">CVE-2021-3428</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3483/">CVE-2021-3483</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505291" comment="kernel-default-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505292" comment="kernel-default-base-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505293" comment="kernel-default-devel-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503989" comment="kernel-devel-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503990" comment="kernel-docs-4.12.14-197.89.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503991" comment="kernel-macros-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505294" comment="kernel-obs-build-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503993" comment="kernel-source-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505295" comment="kernel-syms-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505296" comment="reiserfs-kmp-default-4.12.14-197.89.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140325" version="1" class="patch">
	<metadata>
		<title>Security update for lz4 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1185438" ref_url="https://bugzilla.suse.com/1185438" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3520" ref_url="https://www.suse.com/security/cve/CVE-2021-3520/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1647-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/018981.html" source="SUSE-SU"/>
		<description>
This update for lz4 fixes the following issues:

- CVE-2021-3520: Fixed memory corruption due to an integer overflow bug caused by memmove argument (bsc#1185438).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-19"/>
	<updated date="2021-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185438">SUSE bug 1185438</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-3520/">CVE-2021-3520</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505297" comment="liblz4-1-1.8.0-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493923" comment="liblz4-1-32bit-1.8.0-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505298" comment="liblz4-devel-1.8.0-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505299" comment="lz4-1.8.0-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140326" version="1" class="patch">
	<metadata>
		<title>Security update for djvulibre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1185895" ref_url="https://bugzilla.suse.com/1185895" source="BUGZILLA"/>
		<reference ref_id="1185900" ref_url="https://bugzilla.suse.com/1185900" source="BUGZILLA"/>
		<reference ref_id="1185904" ref_url="https://bugzilla.suse.com/1185904" source="BUGZILLA"/>
		<reference ref_id="1185905" ref_url="https://bugzilla.suse.com/1185905" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-32490" ref_url="https://www.suse.com/security/cve/CVE-2021-32490/" source="CVE"/>
		<reference ref_id="CVE-2021-32491" ref_url="https://www.suse.com/security/cve/CVE-2021-32491/" source="CVE"/>
		<reference ref_id="CVE-2021-32492" ref_url="https://www.suse.com/security/cve/CVE-2021-32492/" source="CVE"/>
		<reference ref_id="CVE-2021-32493" ref_url="https://www.suse.com/security/cve/CVE-2021-32493/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008784.html" source="SUSE-SU"/>
		<description>
This update for djvulibre fixes the following issues:

Security issues fixed:

- CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
- CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
- CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
- CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-19"/>
	<updated date="2021-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185895">SUSE bug 1185895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185900">SUSE bug 1185900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185904">SUSE bug 1185904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185905">SUSE bug 1185905</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32490/">CVE-2021-32490</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32491/">CVE-2021-32491</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32492/">CVE-2021-32492</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32493/">CVE-2021-32493</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505300" comment="libdjvulibre-devel-3.5.27-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505301" comment="libdjvulibre21-3.5.27-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140327" version="1" class="patch">
	<metadata>
		<title>Security update for graphviz (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1185833" ref_url="https://bugzilla.suse.com/1185833" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-18032" ref_url="https://www.suse.com/security/cve/CVE-2020-18032/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1651-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/018980.html" source="SUSE-SU"/>
		<description>
This update for graphviz fixes the following issues:

- CVE-2020-18032: Fixed possible remote code execution via buffer overflow (bsc#1185833).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-19"/>
	<updated date="2021-05-19"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1185833">SUSE bug 1185833</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-18032/">CVE-2020-18032</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505302" comment="graphviz-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505303" comment="graphviz-devel-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505304" comment="graphviz-perl-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505305" comment="graphviz-plugins-core-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505306" comment="graphviz-tcl-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505307" comment="libgraphviz6-2.40.1-6.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140328" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1177976" ref_url="https://bugzilla.suse.com/1177976" source="BUGZILLA"/>
		<reference ref_id="1183933" ref_url="https://bugzilla.suse.com/1183933" source="BUGZILLA"/>
		<reference ref_id="1186114" ref_url="https://bugzilla.suse.com/1186114" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22876" ref_url="https://www.suse.com/security/cve/CVE-2021-22876/" source="CVE"/>
		<reference ref_id="CVE-2021-22898" ref_url="https://www.suse.com/security/cve/CVE-2021-22898/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008887.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2021-22876: Fixed an issue where the automatic referer was leaking credentials (bsc#1183933).
- CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114).
- Fix for SFTP uploads when it results in empty uploaded files (bsc#1177976).
- Allow partial chain verification (jsc#SLE-17956).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-31"/>
	<updated date="2021-05-31"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177976">SUSE bug 1177976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183933">SUSE bug 1183933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186114">SUSE bug 1186114</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22876/">CVE-2021-22876</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22898/">CVE-2021-22898</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505308" comment="curl-7.60.0-3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505309" comment="libcurl-devel-7.60.0-3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505310" comment="libcurl4-7.60.0-3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503324" comment="libcurl4-32bit-7.60.0-3.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140329" version="1" class="patch">
	<metadata>
		<title>Security update for ceph (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1185619" ref_url="https://bugzilla.suse.com/1185619" source="BUGZILLA"/>
		<reference ref_id="1186020" ref_url="https://bugzilla.suse.com/1186020" source="BUGZILLA"/>
		<reference ref_id="1186021" ref_url="https://bugzilla.suse.com/1186021" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3509" ref_url="https://www.suse.com/security/cve/CVE-2021-3509/" source="CVE"/>
		<reference ref_id="CVE-2021-3524" ref_url="https://www.suse.com/security/cve/CVE-2021-3524/" source="CVE"/>
		<reference ref_id="CVE-2021-3531" ref_url="https://www.suse.com/security/cve/CVE-2021-3531/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008918.html" source="SUSE-SU"/>
		<description>
This update for ceph fixes the following issues:

- Update to 15.2.12-83-g528da226523:
- (CVE-2021-3509) fix cookie injection issue (bsc#1186021)
- (CVE-2021-3531) RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (bsc#1186020)
- (CVE-2021-3524) sanitize \r in s3 CORSConfiguration’s ExposeHeader (bsc#1185619)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-02"/>
	<updated date="2021-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185619">SUSE bug 1185619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186020">SUSE bug 1186020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186021">SUSE bug 1186021</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3509/">CVE-2021-3509</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3524/">CVE-2021-3524</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3531/">CVE-2021-3531</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505311" comment="ceph-common-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505312" comment="libcephfs-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505313" comment="libcephfs2-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505314" comment="librados-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505315" comment="librados2-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505316" comment="libradospp-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505317" comment="librbd-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505318" comment="librbd1-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505319" comment="librgw-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505320" comment="librgw2-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505321" comment="python3-ceph-argparse-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505322" comment="python3-cephfs-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505323" comment="python3-rados-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505324" comment="python3-rbd-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505325" comment="python3-rgw-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505326" comment="rados-objclass-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140330" version="1" class="patch">
	<metadata>
		<title>Security update for nginx (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1186126" ref_url="https://bugzilla.suse.com/1186126" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23017" ref_url="https://www.suse.com/security/cve/CVE-2021-23017/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008913.html" source="SUSE-SU"/>
		<description>
This update for nginx fixes the following issues:

- CVE-2021-23017: nginx DNS resolver off-by-one heap write (bsc#1186126)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-02"/>
	<updated date="2021-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186126">SUSE bug 1186126</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23017/">CVE-2021-23017</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505327" comment="nginx-1.16.1-6.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504070" comment="nginx-source-1.16.1-6.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140331" version="1" class="patch">
	<metadata>
		<title>Security update for dhcp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1186382" ref_url="https://bugzilla.suse.com/1186382" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25217" ref_url="https://www.suse.com/security/cve/CVE-2021-25217/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008914.html" source="SUSE-SU"/>
		<description>
This update for dhcp fixes the following issues:

- CVE-2021-25217: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient (bsc#1186382)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-02"/>
	<updated date="2021-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186382">SUSE bug 1186382</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-25217/">CVE-2021-25217</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505328" comment="dhcp-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505329" comment="dhcp-client-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505330" comment="dhcp-devel-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505331" comment="dhcp-relay-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505332" comment="dhcp-server-4.3.6.P1-6.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140332" version="1" class="patch">
	<metadata>
		<title>Security update for polkit (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1186497" ref_url="https://bugzilla.suse.com/1186497" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3560" ref_url="https://www.suse.com/security/cve/CVE-2021-3560/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008926.html" source="SUSE-SU"/>
		<description>
This update for polkit fixes the following issues:

- CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-03"/>
	<updated date="2021-06-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186497">SUSE bug 1186497</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3560/">CVE-2021-3560</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505333" comment="libpolkit0-0.114-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505334" comment="polkit-0.114-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505335" comment="polkit-devel-0.114-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505336" comment="typelib-1_0-Polkit-1_0-0.114-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140333" version="1" class="patch">
	<metadata>
		<title>Security update for djvulibre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1186253" ref_url="https://bugzilla.suse.com/1186253" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3500" ref_url="https://www.suse.com/security/cve/CVE-2021-3500/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1857-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008932.html" source="SUSE-SU"/>
		<description>
This update for djvulibre fixes the following issues:

- CVE-2021-3500: Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file (bsc#1186253)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186253">SUSE bug 1186253</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3500/">CVE-2021-3500</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505337" comment="libdjvulibre-devel-3.5.27-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505338" comment="libdjvulibre21-3.5.27-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140334" version="1" class="patch">
	<metadata>
		<title>Security update for wavpack (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1091340" ref_url="https://bugzilla.suse.com/1091340" source="BUGZILLA"/>
		<reference ref_id="1091341" ref_url="https://bugzilla.suse.com/1091341" source="BUGZILLA"/>
		<reference ref_id="1091342" ref_url="https://bugzilla.suse.com/1091342" source="BUGZILLA"/>
		<reference ref_id="1091343" ref_url="https://bugzilla.suse.com/1091343" source="BUGZILLA"/>
		<reference ref_id="1091344" ref_url="https://bugzilla.suse.com/1091344" source="BUGZILLA"/>
		<reference ref_id="1180414" ref_url="https://bugzilla.suse.com/1180414" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10536" ref_url="https://www.suse.com/security/cve/CVE-2018-10536/" source="CVE"/>
		<reference ref_id="CVE-2018-10537" ref_url="https://www.suse.com/security/cve/CVE-2018-10537/" source="CVE"/>
		<reference ref_id="CVE-2018-10538" ref_url="https://www.suse.com/security/cve/CVE-2018-10538/" source="CVE"/>
		<reference ref_id="CVE-2018-10539" ref_url="https://www.suse.com/security/cve/CVE-2018-10539/" source="CVE"/>
		<reference ref_id="CVE-2018-10540" ref_url="https://www.suse.com/security/cve/CVE-2018-10540/" source="CVE"/>
		<reference ref_id="CVE-2018-19840" ref_url="https://www.suse.com/security/cve/CVE-2018-19840/" source="CVE"/>
		<reference ref_id="CVE-2018-19841" ref_url="https://www.suse.com/security/cve/CVE-2018-19841/" source="CVE"/>
		<reference ref_id="CVE-2018-6767" ref_url="https://www.suse.com/security/cve/CVE-2018-6767/" source="CVE"/>
		<reference ref_id="CVE-2018-7253" ref_url="https://www.suse.com/security/cve/CVE-2018-7253/" source="CVE"/>
		<reference ref_id="CVE-2018-7254" ref_url="https://www.suse.com/security/cve/CVE-2018-7254/" source="CVE"/>
		<reference ref_id="CVE-2019-1010319" ref_url="https://www.suse.com/security/cve/CVE-2019-1010319/" source="CVE"/>
		<reference ref_id="CVE-2019-11498" ref_url="https://www.suse.com/security/cve/CVE-2019-11498/" source="CVE"/>
		<reference ref_id="CVE-2020-35738" ref_url="https://www.suse.com/security/cve/CVE-2020-35738/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<description>
This update for wavpack fixes the following issues:

- Update to version 5.4.0
  * CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples (bsc#1180414) 
  * fixed: disable A32 asm code when building for Apple silicon
  * fixed: issues with Adobe-style floating-point WAV files
  * added: --normalize-floats option to wvunpack for correctly
             exporting un-normalized floating-point files
- Update to version 5.3.0 
  * fixed: OSS-Fuzz issues 19925, 19928, 20060, 20448
  * fixed: trailing garbage characters on imported ID3v2 TXXX tags
  * fixed: various minor undefined behavior and memory access issues
  * fixed: sanitize tag extraction names for length and path inclusion
  * improved: reformat wvunpack 'help' and split into long + short versions
  * added: regression testing to Travis CI for OSS-Fuzz crashers
- Updated to version 5.2.0 
  *fixed: potential security issues including the following CVEs:
         CVE-2018-19840, CVE-2018-19841, CVE-2018-10536 (bsc#1091344),
         CVE-2018-10537 (bsc#1091343) CVE-2018-10538 (bsc#1091342),  
         CVE-2018-10539 (bsc#1091341), CVE-2018-10540 (bsc#1091340), 
         CVE-2018-7254,  CVE-2018-7253, CVE-2018-6767, CVE-2019-11498 
         and CVE-2019-1010319
  * added: support for CMake, Travis CI, and Google's OSS-fuzz
  * fixed: use correction file for encode verify (pipe input, Windows)
  * fixed: correct WAV header with actual length (pipe input, -i option)
  * fixed: thumb interworking and not needing v6 architecture (ARM asm)
  * added: handle more ID3v2.3 tag items and from all file types
  * fixed: coredump on Sparc64 (changed MD5 implementation)
  * fixed: handle invalid ID3v2.3 tags from sacd-ripper
  * fixed: several corner-case memory leaks
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-21"/>
	<updated date="2021-01-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1091340">SUSE bug 1091340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091341">SUSE bug 1091341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091342">SUSE bug 1091342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091343">SUSE bug 1091343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091344">SUSE bug 1091344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180414">SUSE bug 1180414</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10536/">CVE-2018-10536</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10537/">CVE-2018-10537</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10538/">CVE-2018-10538</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10539/">CVE-2018-10539</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10540/">CVE-2018-10540</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19840/">CVE-2018-19840</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19841/">CVE-2018-19841</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6767/">CVE-2018-6767</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7253/">CVE-2018-7253</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7254/">CVE-2018-7254</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-1010319/">CVE-2019-1010319</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11498/">CVE-2019-11498</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35738/">CVE-2020-35738</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505339" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505340" comment="wavpack-5.4.0-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505341" comment="wavpack-devel-5.4.0-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140335" version="1" class="patch">
	<metadata>
		<title>Security update for libwebp (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1185652" ref_url="https://bugzilla.suse.com/1185652" source="BUGZILLA"/>
		<reference ref_id="1185654" ref_url="https://bugzilla.suse.com/1185654" source="BUGZILLA"/>
		<reference ref_id="1185673" ref_url="https://bugzilla.suse.com/1185673" source="BUGZILLA"/>
		<reference ref_id="1185674" ref_url="https://bugzilla.suse.com/1185674" source="BUGZILLA"/>
		<reference ref_id="1185685" ref_url="https://bugzilla.suse.com/1185685" source="BUGZILLA"/>
		<reference ref_id="1185686" ref_url="https://bugzilla.suse.com/1185686" source="BUGZILLA"/>
		<reference ref_id="1185688" ref_url="https://bugzilla.suse.com/1185688" source="BUGZILLA"/>
		<reference ref_id="1185690" ref_url="https://bugzilla.suse.com/1185690" source="BUGZILLA"/>
		<reference ref_id="1185691" ref_url="https://bugzilla.suse.com/1185691" source="BUGZILLA"/>
		<reference ref_id="1186247" ref_url="https://bugzilla.suse.com/1186247" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-25009" ref_url="https://www.suse.com/security/cve/CVE-2018-25009/" source="CVE"/>
		<reference ref_id="CVE-2018-25010" ref_url="https://www.suse.com/security/cve/CVE-2018-25010/" source="CVE"/>
		<reference ref_id="CVE-2018-25011" ref_url="https://www.suse.com/security/cve/CVE-2018-25011/" source="CVE"/>
		<reference ref_id="CVE-2018-25012" ref_url="https://www.suse.com/security/cve/CVE-2018-25012/" source="CVE"/>
		<reference ref_id="CVE-2018-25013" ref_url="https://www.suse.com/security/cve/CVE-2018-25013/" source="CVE"/>
		<reference ref_id="CVE-2020-36328" ref_url="https://www.suse.com/security/cve/CVE-2020-36328/" source="CVE"/>
		<reference ref_id="CVE-2020-36329" ref_url="https://www.suse.com/security/cve/CVE-2020-36329/" source="CVE"/>
		<reference ref_id="CVE-2020-36330" ref_url="https://www.suse.com/security/cve/CVE-2020-36330/" source="CVE"/>
		<reference ref_id="CVE-2020-36331" ref_url="https://www.suse.com/security/cve/CVE-2020-36331/" source="CVE"/>
		<reference ref_id="CVE-2020-36332" ref_url="https://www.suse.com/security/cve/CVE-2020-36332/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008936.html" source="SUSE-SU"/>
		<description>
This update for libwebp fixes the following issues:

- CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter() (bsc#1185685).
- CVE-2020-36330: Fixed heap-based buffer overflow in ChunkVerifyAndAssign() (bsc#1185691).
- CVE-2020-36332: Fixed extreme memory allocation when reading a file (bsc#1185674).
- CVE-2020-36329: Fixed use-after-free in EmitFancyRGB() (bsc#1185652).
- CVE-2018-25012: Fixed heap-based buffer overflow in GetLE24() (bsc#1185690).
- CVE-2020-36328: Fixed heap-based buffer overflow in WebPDecode*Into functions (bsc#1185688).
- CVE-2018-25013: Fixed heap-based buffer overflow in ShiftBytes() (bsc#1185654).
- CVE-2020-36331: Fixed heap-based buffer overflow in ChunkAssignData() (bsc#1185686).
- CVE-2018-25009: Fixed heap-based buffer overflow in GetLE16() (bsc#1185673).
- CVE-2018-25011: Fixed fail on multiple image chunks (bsc#1186247).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1185652">SUSE bug 1185652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185654">SUSE bug 1185654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185673">SUSE bug 1185673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185674">SUSE bug 1185674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185685">SUSE bug 1185685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185686">SUSE bug 1185686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185688">SUSE bug 1185688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185690">SUSE bug 1185690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185691">SUSE bug 1185691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186247">SUSE bug 1186247</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25009/">CVE-2018-25009</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25010/">CVE-2018-25010</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25011/">CVE-2018-25011</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25012/">CVE-2018-25012</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25013/">CVE-2018-25013</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36328/">CVE-2020-36328</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36329/">CVE-2020-36329</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36330/">CVE-2020-36330</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36331/">CVE-2020-36331</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36332/">CVE-2020-36332</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505342" comment="libwebp-devel-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505343" comment="libwebp6-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505344" comment="libwebpdecoder2-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505345" comment="libwebpdemux2-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505346" comment="libwebpextras0-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505347" comment="libwebpmux2-0.5.0-3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140336" version="1" class="patch">
	<metadata>
		<title>Security update for umoci (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1184147" ref_url="https://bugzilla.suse.com/1184147" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29136" ref_url="https://www.suse.com/security/cve/CVE-2021-29136/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1863-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008938.html" source="SUSE-SU"/>
		<description>
This update for umoci fixes the following issues:

Update to v0.4.7 (bsc#1184147).

- CVE-2021-29136: Fixed overwriting of host files via malicious layer (bsc#1184147).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184147">SUSE bug 1184147</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29136/">CVE-2021-29136</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505348" comment="umoci-0.4.7-3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140337" version="1" class="patch">
	<metadata>
		<title>Security update for pam_radius (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1163933" ref_url="https://bugzilla.suse.com/1163933" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-9542" ref_url="https://www.suse.com/security/cve/CVE-2015-9542/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008958.html" source="SUSE-SU"/>
		<description>
This update for pam_radius fixes the following issues:

- CVE-2015-9542: pam_radius: buffer overflow in password field (bsc#1163933)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-08"/>
	<updated date="2021-06-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1163933">SUSE bug 1163933</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9542/">CVE-2015-9542</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505349" comment="pam_radius-1.4.0-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140338" version="1" class="patch">
	<metadata>
		<title>Security update for libX11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1186643" ref_url="https://bugzilla.suse.com/1186643" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31535" ref_url="https://www.suse.com/security/cve/CVE-2021-31535/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1897-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008960.html" source="SUSE-SU"/>
		<description>
This update for libX11 fixes the following issues:

- Regression in the fix for CVE-2021-31535, causing segfaults for xforms applications like fdesign (bsc#1186643)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-08"/>
	<updated date="2021-06-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186643">SUSE bug 1186643</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31535/">CVE-2021-31535</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505350" comment="libX11-6-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494025" comment="libX11-6-32bit-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494026" comment="libX11-data-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505351" comment="libX11-devel-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505352" comment="libX11-xcb1-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494029" comment="libX11-xcb1-32bit-1.6.5-3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140339" version="1" class="patch">
	<metadata>
		<title>Security update for gstreamer-plugins-bad (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181255" ref_url="https://bugzilla.suse.com/1181255" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3185" ref_url="https://www.suse.com/security/cve/CVE-2021-3185/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008961.html" source="SUSE-SU"/>
		<description>
This update for gstreamer-plugins-bad fixes the following issues:

- CVE-2021-3185: h264parser: guard against ref_pic_markings overflow (bsc#1181255 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-08"/>
	<updated date="2021-06-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181255">SUSE bug 1181255</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3185/">CVE-2021-3185</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505353" comment="gstreamer-plugins-bad-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505354" comment="gstreamer-plugins-bad-devel-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503421" comment="gstreamer-plugins-bad-lang-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505355" comment="libgstadaptivedemux-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505356" comment="libgstbadallocators-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505357" comment="libgstbadaudio-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505358" comment="libgstbadbase-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505359" comment="libgstbadvideo-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505360" comment="libgstbasecamerabinsrc-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505361" comment="libgstcodecparsers-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505362" comment="libgstgl-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505363" comment="libgstinsertbin-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505364" comment="libgstmpegts-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505365" comment="libgstphotography-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505366" comment="libgstplayer-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505367" comment="libgsturidownloader-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505368" comment="libgstwayland-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505369" comment="typelib-1_0-GstBadAllocators-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505370" comment="typelib-1_0-GstGL-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505371" comment="typelib-1_0-GstInsertBin-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505372" comment="typelib-1_0-GstMpegts-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505373" comment="typelib-1_0-GstPlayer-1_0-1.12.5-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140340" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181161" ref_url="https://bugzilla.suse.com/1181161" source="BUGZILLA"/>
		<reference ref_id="1183405" ref_url="https://bugzilla.suse.com/1183405" source="BUGZILLA"/>
		<reference ref_id="1183738" ref_url="https://bugzilla.suse.com/1183738" source="BUGZILLA"/>
		<reference ref_id="1183947" ref_url="https://bugzilla.suse.com/1183947" source="BUGZILLA"/>
		<reference ref_id="1184611" ref_url="https://bugzilla.suse.com/1184611" source="BUGZILLA"/>
		<reference ref_id="1184675" ref_url="https://bugzilla.suse.com/1184675" source="BUGZILLA"/>
		<reference ref_id="1185642" ref_url="https://bugzilla.suse.com/1185642" source="BUGZILLA"/>
		<reference ref_id="1185680" ref_url="https://bugzilla.suse.com/1185680" source="BUGZILLA"/>
		<reference ref_id="1185725" ref_url="https://bugzilla.suse.com/1185725" source="BUGZILLA"/>
		<reference ref_id="1185859" ref_url="https://bugzilla.suse.com/1185859" source="BUGZILLA"/>
		<reference ref_id="1185860" ref_url="https://bugzilla.suse.com/1185860" source="BUGZILLA"/>
		<reference ref_id="1185862" ref_url="https://bugzilla.suse.com/1185862" source="BUGZILLA"/>
		<reference ref_id="1185863" ref_url="https://bugzilla.suse.com/1185863" source="BUGZILLA"/>
		<reference ref_id="1185898" ref_url="https://bugzilla.suse.com/1185898" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1185938" ref_url="https://bugzilla.suse.com/1185938" source="BUGZILLA"/>
		<reference ref_id="1185950" ref_url="https://bugzilla.suse.com/1185950" source="BUGZILLA"/>
		<reference ref_id="1185987" ref_url="https://bugzilla.suse.com/1185987" source="BUGZILLA"/>
		<reference ref_id="1186060" ref_url="https://bugzilla.suse.com/1186060" source="BUGZILLA"/>
		<reference ref_id="1186061" ref_url="https://bugzilla.suse.com/1186061" source="BUGZILLA"/>
		<reference ref_id="1186062" ref_url="https://bugzilla.suse.com/1186062" source="BUGZILLA"/>
		<reference ref_id="1186111" ref_url="https://bugzilla.suse.com/1186111" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="1186390" ref_url="https://bugzilla.suse.com/1186390" source="BUGZILLA"/>
		<reference ref_id="1186484" ref_url="https://bugzilla.suse.com/1186484" source="BUGZILLA"/>
		<reference ref_id="1186498" ref_url="https://bugzilla.suse.com/1186498" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24586" ref_url="https://www.suse.com/security/cve/CVE-2020-24586/" source="CVE"/>
		<reference ref_id="CVE-2020-24587" ref_url="https://www.suse.com/security/cve/CVE-2020-24587/" source="CVE"/>
		<reference ref_id="CVE-2020-26139" ref_url="https://www.suse.com/security/cve/CVE-2020-26139/" source="CVE"/>
		<reference ref_id="CVE-2020-26141" ref_url="https://www.suse.com/security/cve/CVE-2020-26141/" source="CVE"/>
		<reference ref_id="CVE-2020-26145" ref_url="https://www.suse.com/security/cve/CVE-2020-26145/" source="CVE"/>
		<reference ref_id="CVE-2020-26147" ref_url="https://www.suse.com/security/cve/CVE-2020-26147/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="CVE-2021-23134" ref_url="https://www.suse.com/security/cve/CVE-2021-23134/" source="CVE"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="CVE-2021-33200" ref_url="https://www.suse.com/security/cve/CVE-2021-33200/" source="CVE"/>
		<reference ref_id="CVE-2021-3491" ref_url="https://www.suse.com/security/cve/CVE-2021-3491/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008974.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in kernel memory (bsc#1186484).
- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values. (bsc#1186111)
- CVE-2020-26139: Fixed a denial-of-service when an Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. (bnc#1186062)
- CVE-2021-23134: A Use After Free vulnerability in nfc sockets allowed local attackers to elevate their privileges. (bnc#1186060)
- CVE-2021-23133: Fixed a race condition in SCTP sockets, which could lead to privilege escalation from the context of a network service or an unprivileged process. (bnc#1184675)
- CVE-2021-3491: Fixed a potential heap overflow in mem_rw(). This vulnerability is related to the PROVIDE_BUFFERS operation, which allowed the MAX_RW_COUNT limit to be bypassed (bsc#1185642).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- CVE-2020-24586: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances this can be abused to inject arbitrary network packets and/or exfiltrate user data (bnc#1185859).
- CVE-2020-24587: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed (bnc#1185859 bnc#1185862).
- CVE-2020-26147: The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments, even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used (bnc#1185859).
- CVE-2020-26145: An issue was discovered with Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration. (bnc#1185860)
- CVE-2020-26141: An issue was discovered in the ALFA driver for AWUS036H, where the Message Integrity Check (authenticity) of fragmented TKIP frames was not verified. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol. (bnc#1185987)


The following non-security bugs were fixed:

- Drivers: hv: vmbus: Increase wait time for VMbus unload (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically (bsc#1185725).
- dm: fix redundant IO accounting for bios that need splitting (bsc#1183738).
- ibmvfc: Avoid move login if fast fail is enabled (bsc#1185938 ltc#192043).
- ibmvfc: Handle move login failure (bsc#1185938 ltc#192043).
- ibmvfc: Reinit target retries (bsc#1185938 ltc#192043).
- kabi: Fix breakage in NVMe driver (bsc#1181161).
- kabi: Fix nvmet error log definitions (bsc#1181161).
- kabi: nvme: fix fast_io_fail_tmo (bsc#1181161).
- md/raid1: properly indicate failure when ending a failed write request (bsc#1185680).
- net: sched: disable TCQ_F_NOLOCK for pfifo_fast (bsc#1183405)
- netfilter: conntrack: add new sysctl to disable RST check (bsc#1183947 bsc#1185950).
- netfilter: conntrack: avoid misleading 'invalid' in log message (bsc#1183947 bsc#1185950).
- netfilter: conntrack: improve RST handling when tuple is re-used (bsc#1183947 bsc#1185950).
- netfilter: conntrack: tcp: only close if RST matches exact sequence (bsc#1183947 bsc#1185950).
- nvme-fabrics: allow to queue requests for live queues (bsc#1181161).
- nvme-fabrics: do not check state NVME_CTRL_NEW for request acceptance (bsc#1181161).
- nvme-fabrics: reject I/O to offline device (bsc#1181161).
- nvme-pci: Sync queues on reset (bsc#1181161).
- nvme-rdma: avoid race between time out and tear down (bsc#1181161).
- nvme-rdma: avoid repeated request completion (bsc#1181161).
- nvme-rdma: avoid request double completion for concurrent nvme_rdma_timeout (bsc#1181161).
- nvme-rdma: fix controller reset hang during traffic (bsc#1181161).
- nvme-rdma: fix possible hang when failing to set io queues (bsc#1181161).
- nvme-rdma: fix timeout handler (bsc#1181161).
- nvme-rdma: serialize controller teardown sequences (bsc#1181161).
- nvme-tcp: avoid race between time out and tear down (bsc#1181161).
- nvme-tcp: avoid repeated request completion (bsc#1181161).
- nvme-tcp: avoid request double completion for concurrent nvme_tcp_timeout (bsc#1181161).
- nvme-tcp: fix controller reset hang during traffic (bsc#1181161).
- nvme-tcp: fix possible hang when failing to set io queues (bsc#1181161).
- nvme-tcp: fix timeout handler (bsc#1181161).
- nvme-tcp: serialize controller teardown sequences (bsc#1181161).
- nvme: Restart request timers in resetting state (bsc#1181161).
- nvme: add error log page slot definition (bsc#1181161).
- nvme: include admin_q sync with nvme_sync_queues (bsc#1181161).
- nvme: introduce 'Command Aborted By host' status code (bsc#1181161).
- nvme: introduce nvme_is_fabrics to check fabrics cmd (bsc#1181161).
- nvme: introduce nvme_sync_io_queues (bsc#1181161).
- nvme: make fabrics command run on a separate request queue (bsc#1181161).
- nvme: prevent warning triggered by nvme_stop_keep_alive (bsc#1181161).
- nvme: unlink head after removing last namespace (bsc#1181161).
- nvmet: add error log support for fabrics-cmd (bsc#1181161).
- nvmet: add error-log definitions (bsc#1181161).
- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-09"/>
	<updated date="2021-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181161">SUSE bug 1181161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183405">SUSE bug 1183405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183738">SUSE bug 1183738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183947">SUSE bug 1183947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184611">SUSE bug 1184611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184675">SUSE bug 1184675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185642">SUSE bug 1185642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185680">SUSE bug 1185680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185725">SUSE bug 1185725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185859">SUSE bug 1185859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185860">SUSE bug 1185860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185862">SUSE bug 1185862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185863">SUSE bug 1185863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185898">SUSE bug 1185898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185938">SUSE bug 1185938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185950">SUSE bug 1185950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185987">SUSE bug 1185987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186060">SUSE bug 1186060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186061">SUSE bug 1186061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186062">SUSE bug 1186062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186111">SUSE bug 1186111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186390">SUSE bug 1186390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186484">SUSE bug 1186484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186498">SUSE bug 1186498</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24586/">CVE-2020-24586</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24587/">CVE-2020-24587</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-26139/">CVE-2020-26139</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26141/">CVE-2020-26141</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26145/">CVE-2020-26145</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26147/">CVE-2020-26147</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23134/">CVE-2021-23134</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33200/">CVE-2021-33200</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3491/">CVE-2021-3491</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505374" comment="kernel-default-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505375" comment="kernel-default-base-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505376" comment="kernel-default-devel-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504077" comment="kernel-devel-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504078" comment="kernel-docs-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504079" comment="kernel-macros-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505377" comment="kernel-obs-build-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504081" comment="kernel-source-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505378" comment="kernel-syms-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505379" comment="reiserfs-kmp-default-4.12.14-197.92.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140341" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1149813" ref_url="https://bugzilla.suse.com/1149813" source="BUGZILLA"/>
		<reference ref_id="1163019" ref_url="https://bugzilla.suse.com/1163019" source="BUGZILLA"/>
		<reference ref_id="1172380" ref_url="https://bugzilla.suse.com/1172380" source="BUGZILLA"/>
		<reference ref_id="1175534" ref_url="https://bugzilla.suse.com/1175534" source="BUGZILLA"/>
		<reference ref_id="1178683" ref_url="https://bugzilla.suse.com/1178683" source="BUGZILLA"/>
		<reference ref_id="1178935" ref_url="https://bugzilla.suse.com/1178935" source="BUGZILLA"/>
		<reference ref_id="1179477" ref_url="https://bugzilla.suse.com/1179477" source="BUGZILLA"/>
		<reference ref_id="1179484" ref_url="https://bugzilla.suse.com/1179484" source="BUGZILLA"/>
		<reference ref_id="1182846" ref_url="https://bugzilla.suse.com/1182846" source="BUGZILLA"/>
		<reference ref_id="1182975" ref_url="https://bugzilla.suse.com/1182975" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15890" ref_url="https://www.suse.com/security/cve/CVE-2019-15890/" source="CVE"/>
		<reference ref_id="CVE-2020-10756" ref_url="https://www.suse.com/security/cve/CVE-2020-10756/" source="CVE"/>
		<reference ref_id="CVE-2020-14364" ref_url="https://www.suse.com/security/cve/CVE-2020-14364/" source="CVE"/>
		<reference ref_id="CVE-2020-25707" ref_url="https://www.suse.com/security/cve/CVE-2020-25707/" source="CVE"/>
		<reference ref_id="CVE-2020-25723" ref_url="https://www.suse.com/security/cve/CVE-2020-25723/" source="CVE"/>
		<reference ref_id="CVE-2020-29129" ref_url="https://www.suse.com/security/cve/CVE-2020-29129/" source="CVE"/>
		<reference ref_id="CVE-2020-29130" ref_url="https://www.suse.com/security/cve/CVE-2020-29130/" source="CVE"/>
		<reference ref_id="CVE-2020-8608" ref_url="https://www.suse.com/security/cve/CVE-2020-8608/" source="CVE"/>
		<reference ref_id="CVE-2021-20257" ref_url="https://www.suse.com/security/cve/CVE-2021-20257/" source="CVE"/>
		<reference ref_id="CVE-2021-3419" ref_url="https://www.suse.com/security/cve/CVE-2021-3419/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008972.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

- CVE-2020-10756: Fix out-of-bounds read information disclosure in icmp6_send_echoreply (bsc#1172380)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-09"/>
	<updated date="2021-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1149813">SUSE bug 1149813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163019">SUSE bug 1163019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172380">SUSE bug 1172380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175534">SUSE bug 1175534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178683">SUSE bug 1178683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178935">SUSE bug 1178935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179477">SUSE bug 1179477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179484">SUSE bug 1179484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182846">SUSE bug 1182846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182975">SUSE bug 1182975</bugzilla>
	<cve impact="moderate" cvss3="5.8/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15890/">CVE-2019-15890</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10756/">CVE-2020-10756</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14364/">CVE-2020-14364</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25707/">CVE-2020-25707</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25723/">CVE-2020-25723</cve>
	<cve impact="low" cvss3="2.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29129/">CVE-2020-29129</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29130/">CVE-2020-29130</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-8608/">CVE-2020-8608</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20257/">CVE-2021-20257</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3419/">CVE-2021-3419</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505380" comment="qemu-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504085" comment="qemu-audio-alsa-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499919" comment="qemu-audio-oss-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504086" comment="qemu-audio-pa-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505381" comment="qemu-block-curl-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505382" comment="qemu-block-iscsi-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505383" comment="qemu-block-rbd-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505384" comment="qemu-block-ssh-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505385" comment="qemu-guest-agent-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504092" comment="qemu-ipxe-1.0.0+-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504093" comment="qemu-kvm-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505386" comment="qemu-lang-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504095" comment="qemu-seabios-1.12.0_0_ga698c89-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504096" comment="qemu-sgabios-8-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505387" comment="qemu-tools-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504098" comment="qemu-ui-curses-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504099" comment="qemu-ui-gtk-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504100" comment="qemu-vgabios-1.12.0_0_ga698c89-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504101" comment="qemu-x86-3.1.1.1-9.27.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140342" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1185633" ref_url="https://bugzilla.suse.com/1185633" source="BUGZILLA"/>
		<reference ref_id="1186696" ref_url="https://bugzilla.suse.com/1186696" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29951" ref_url="https://www.suse.com/security/cve/CVE-2021-29951/" source="CVE"/>
		<reference ref_id="CVE-2021-29964" ref_url="https://www.suse.com/security/cve/CVE-2021-29964/" source="CVE"/>
		<reference ref_id="CVE-2021-29967" ref_url="https://www.suse.com/security/cve/CVE-2021-29967/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008975.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 78.11.0 ESR (bsc#1186696)

  * CVE-2021-29964: Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967: Memory safety bugs fixed in Firefox
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-09"/>
	<updated date="2021-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185633">SUSE bug 1185633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186696">SUSE bug 1186696</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-29951/">CVE-2021-29951</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29964/">CVE-2021-29964</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29967/">CVE-2021-29967</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505388" comment="MozillaFirefox-78.11.0-3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505389" comment="MozillaFirefox-devel-78.11.0-3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505390" comment="MozillaFirefox-translations-common-78.11.0-3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505391" comment="MozillaFirefox-translations-other-78.11.0-3.144.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140343" version="1" class="patch">
	<metadata>
		<title>Security update for spice-gtk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1177158" ref_url="https://bugzilla.suse.com/1177158" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14355" ref_url="https://www.suse.com/security/cve/CVE-2020-14355/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008978.html" source="SUSE-SU"/>
		<description>
This update for spice-gtk fixes the following issues:

- CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC decoding code (bsc#1177158)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-10"/>
	<updated date="2021-06-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177158">SUSE bug 1177158</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14355/">CVE-2020-14355</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505392" comment="libspice-client-glib-2_0-8-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505393" comment="libspice-client-glib-helper-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505394" comment="libspice-client-gtk-3_0-5-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505395" comment="spice-gtk-devel-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505396" comment="typelib-1_0-SpiceClientGlib-2_0-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505397" comment="typelib-1_0-SpiceClientGtk-3_0-0.35-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140344" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1179833" ref_url="https://bugzilla.suse.com/1179833" source="BUGZILLA"/>
		<reference ref_id="1179836" ref_url="https://bugzilla.suse.com/1179836" source="BUGZILLA"/>
		<reference ref_id="1179837" ref_url="https://bugzilla.suse.com/1179837" source="BUGZILLA"/>
		<reference ref_id="1179839" ref_url="https://bugzilla.suse.com/1179839" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24489" ref_url="https://www.suse.com/security/cve/CVE-2020-24489/" source="CVE"/>
		<reference ref_id="CVE-2020-24511" ref_url="https://www.suse.com/security/cve/CVE-2020-24511/" source="CVE"/>
		<reference ref_id="CVE-2020-24512" ref_url="https://www.suse.com/security/cve/CVE-2020-24512/" source="CVE"/>
		<reference ref_id="CVE-2020-24513" ref_url="https://www.suse.com/security/cve/CVE-2020-24513/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008980.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20210525 release.

  - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)

    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html

  - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)

    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)

  - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)

    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)

  - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)

    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html

Other fixes:

- Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
- Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
- Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
- Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
- Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
- Update for functional issues. Refer to [6th Gen Intel Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
- Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.

- New platforms:

| Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2
| ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3
| ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3
| SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB
| SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB
| TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile
| TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile
| TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile
| EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
| JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
| RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11

- Updated platforms:

| Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3
| HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3
| SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
| SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
| BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx
| SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable
| SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable
| SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx
| CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2
| CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2
| CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3
| BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
| BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87
| BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53
| APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
| APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx
| SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5
| DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series
| GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx
| GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
| ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile
| LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology
| AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile
| KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile
| CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile
| WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile
| AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
| CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
| WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile
| KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6
| CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E
| CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8
| CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9
| CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile
| CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile
| CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10
| CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10
| CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile
| CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-10"/>
	<updated date="2021-06-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179833">SUSE bug 1179833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179836">SUSE bug 1179836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179837">SUSE bug 1179837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179839">SUSE bug 1179839</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24489/">CVE-2020-24489</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24511/">CVE-2020-24511</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24512/">CVE-2020-24512</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24513/">CVE-2020-24513</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504108" comment="ucode-intel-20210525-3.203.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140345" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1168481" ref_url="https://bugzilla.suse.com/1168481" source="BUGZILLA"/>
		<reference ref_id="1175081" ref_url="https://bugzilla.suse.com/1175081" source="BUGZILLA"/>
		<reference ref_id="1175821" ref_url="https://bugzilla.suse.com/1175821" source="BUGZILLA"/>
		<reference ref_id="1181594" ref_url="https://bugzilla.suse.com/1181594" source="BUGZILLA"/>
		<reference ref_id="1181641" ref_url="https://bugzilla.suse.com/1181641" source="BUGZILLA"/>
		<reference ref_id="1181677" ref_url="https://bugzilla.suse.com/1181677" source="BUGZILLA"/>
		<reference ref_id="1181730" ref_url="https://bugzilla.suse.com/1181730" source="BUGZILLA"/>
		<reference ref_id="1181732" ref_url="https://bugzilla.suse.com/1181732" source="BUGZILLA"/>
		<reference ref_id="1181749" ref_url="https://bugzilla.suse.com/1181749" source="BUGZILLA"/>
		<reference ref_id="1182451" ref_url="https://bugzilla.suse.com/1182451" source="BUGZILLA"/>
		<reference ref_id="1182476" ref_url="https://bugzilla.suse.com/1182476" source="BUGZILLA"/>
		<reference ref_id="1182947" ref_url="https://bugzilla.suse.com/1182947" source="BUGZILLA"/>
		<reference ref_id="1183024" ref_url="https://bugzilla.suse.com/1183024" source="BUGZILLA"/>
		<reference ref_id="1183855" ref_url="https://bugzilla.suse.com/1183855" source="BUGZILLA"/>
		<reference ref_id="1184768" ref_url="https://bugzilla.suse.com/1184768" source="BUGZILLA"/>
		<reference ref_id="1184962" ref_url="https://bugzilla.suse.com/1184962" source="BUGZILLA"/>
		<reference ref_id="1185405" ref_url="https://bugzilla.suse.com/1185405" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21284" ref_url="https://www.suse.com/security/cve/CVE-2021-21284/" source="CVE"/>
		<reference ref_id="CVE-2021-21285" ref_url="https://www.suse.com/security/cve/CVE-2021-21285/" source="CVE"/>
		<reference ref_id="CVE-2021-21334" ref_url="https://www.suse.com/security/cve/CVE-2021-21334/" source="CVE"/>
		<reference ref_id="CVE-2021-30465" ref_url="https://www.suse.com/security/cve/CVE-2021-30465/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008994.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, runc fixes the following issues:

Docker was updated to 20.10.6-ce (bsc#1184768, bsc#1182947, bsc#1181594)

* Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools (bsc#1182476).
* CVE-2021-21284: Fixed a potential privilege escalation when the root user in 
  the remapped namespace has access to the host filesystem (bsc#1181732)
* CVE-2021-21285: Fixed an issue where pulling a malformed Docker image manifest 
  crashes the dockerd daemon (bsc#1181730). 
* btrfs quotas being removed by Docker regularly (bsc#1183855, bsc#1175081)

runc was updated to v1.0.0~rc93 (bsc#1182451, bsc#1175821 bsc#1184962).

* Use the upstream runc package (bsc#1181641, bsc#1181677, bsc#1175821).
* Fixed /dev/null is not available (bsc#1168481).
* CVE-2021-30465: Fixed a symlink-exchange attack vulnarability (bsc#1185405).

containerd was updated to v1.4.4

* CVE-2021-21334: Fixed a potential information leak through environment variables (bsc#1183397).
* Handle a requirement from docker (bsc#1181594).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-11"/>
	<updated date="2021-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168481">SUSE bug 1168481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175081">SUSE bug 1175081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175821">SUSE bug 1175821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181594">SUSE bug 1181594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181641">SUSE bug 1181641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181677">SUSE bug 1181677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181730">SUSE bug 1181730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181732">SUSE bug 1181732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181749">SUSE bug 1181749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182451">SUSE bug 1182451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182476">SUSE bug 1182476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182947">SUSE bug 1182947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183024">SUSE bug 1183024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183855">SUSE bug 1183855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184768">SUSE bug 1184768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184962">SUSE bug 1184962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185405">SUSE bug 1185405</bugzilla>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21284/">CVE-2021-21284</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21285/">CVE-2021-21285</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21334/">CVE-2021-21334</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30465/">CVE-2021-30465</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503453" comment="containerd-1.4.4-5.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503454" comment="docker-20.10.6_ce-6.49.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494424" comment="docker-bash-completion-20.10.6_ce-6.49.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503455" comment="runc-1.0.0~rc93-1.14.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140346" version="1" class="patch">
	<metadata>
		<title>Security update for spice (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1177158" ref_url="https://bugzilla.suse.com/1177158" source="BUGZILLA"/>
		<reference ref_id="1181686" ref_url="https://bugzilla.suse.com/1181686" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14355" ref_url="https://www.suse.com/security/cve/CVE-2020-14355/" source="CVE"/>
		<reference ref_id="CVE-2021-20201" ref_url="https://www.suse.com/security/cve/CVE-2021-20201/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008998.html" source="SUSE-SU"/>
		<description>
This update for spice fixes the following issues:

- CVE-2021-20201: client initiated renegotiation causing denial of service (bsc#1181686)
- CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC decoding code (bsc#1177158)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-11"/>
	<updated date="2021-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177158">SUSE bug 1177158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181686">SUSE bug 1181686</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14355/">CVE-2020-14355</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20201/">CVE-2021-20201</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505398" comment="libspice-server-devel-0.14.1-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505399" comment="libspice-server1-0.14.1-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140347" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1171164" ref_url="https://bugzilla.suse.com/1171164" source="BUGZILLA"/>
		<reference ref_id="1171569" ref_url="https://bugzilla.suse.com/1171569" source="BUGZILLA"/>
		<reference ref_id="1183436" ref_url="https://bugzilla.suse.com/1183436" source="BUGZILLA"/>
		<reference ref_id="1185916" ref_url="https://bugzilla.suse.com/1185916" source="BUGZILLA"/>
		<reference ref_id="1185918" ref_url="https://bugzilla.suse.com/1185918" source="BUGZILLA"/>
		<reference ref_id="1185919" ref_url="https://bugzilla.suse.com/1185919" source="BUGZILLA"/>
		<reference ref_id="1185921" ref_url="https://bugzilla.suse.com/1185921" source="BUGZILLA"/>
		<reference ref_id="1185923" ref_url="https://bugzilla.suse.com/1185923" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25097" ref_url="https://www.suse.com/security/cve/CVE-2020-25097/" source="CVE"/>
		<reference ref_id="CVE-2021-28651" ref_url="https://www.suse.com/security/cve/CVE-2021-28651/" source="CVE"/>
		<reference ref_id="CVE-2021-28652" ref_url="https://www.suse.com/security/cve/CVE-2021-28652/" source="CVE"/>
		<reference ref_id="CVE-2021-28662" ref_url="https://www.suse.com/security/cve/CVE-2021-28662/" source="CVE"/>
		<reference ref_id="CVE-2021-31806" ref_url="https://www.suse.com/security/cve/CVE-2021-31806/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009003.html" source="SUSE-SU"/>
		<description>
This update for squid fixes the following issues:

- update to 4.15:
- CVE-2021-28652: Broken cache manager URL parsing (bsc#1185918)
- CVE-2021-28651: Memory leak in RFC 2169 response parsing (bsc#1185921)
- CVE-2021-28662: Limit HeaderLookupTable_t::lookup() to BadHdr and specific IDs (bsc#1185919)
- CVE-2021-31806: Handle more Range requests (bsc#1185916)
- CVE-2020-25097: HTTP Request Smuggling vulnerability (bsc#1183436)
- Handle more partial responses (bsc#1185923)
- fix previous change to reinstante permissions macros, because the wrong path has been used (bsc#1171569).
- use libexecdir instead of libdir to conform to recent changes in Factory (bsc#1171164).
- Reinstate permissions macros for pinger binary, because the permissions
  package is also responsible for setting up the cap_net_raw capability,
  currently a fresh squid install doesn't get a capability bit at all (bsc#1171569).
- Change pinger and basic_pam_auth helper to use standard permissions. pinger uses cap_net_raw=ep instead (bsc#1171569)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-11"/>
	<updated date="2021-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171164">SUSE bug 1171164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171569">SUSE bug 1171569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183436">SUSE bug 1183436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185916">SUSE bug 1185916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185918">SUSE bug 1185918</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185919">SUSE bug 1185919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185921">SUSE bug 1185921</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185923">SUSE bug 1185923</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25097/">CVE-2020-25097</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28651/">CVE-2021-28651</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28652/">CVE-2021-28652</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28662/">CVE-2021-28662</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31806/">CVE-2021-31806</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505400" comment="squid-4.15-5.26.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140348" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1185055" ref_url="https://bugzilla.suse.com/1185055" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2163" ref_url="https://www.suse.com/security/cve/CVE-2021-2163/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1989-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009025.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

- Update to version jdk8u292 (icedtea 3.19.0).
- CVE-2021-2161: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-17"/>
	<updated date="2021-06-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1185055">SUSE bug 1185055</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2163/">CVE-2021-2163</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505401" comment="java-1_8_0-openjdk-1.8.0.292-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505402" comment="java-1_8_0-openjdk-demo-1.8.0.292-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505403" comment="java-1_8_0-openjdk-devel-1.8.0.292-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505404" comment="java-1_8_0-openjdk-headless-1.8.0.292-3.52.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140349" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1145740" ref_url="https://bugzilla.suse.com/1145740" source="BUGZILLA"/>
		<reference ref_id="1180530" ref_url="https://bugzilla.suse.com/1180530" source="BUGZILLA"/>
		<reference ref_id="1182703" ref_url="https://bugzilla.suse.com/1182703" source="BUGZILLA"/>
		<reference ref_id="1186922" ref_url="https://bugzilla.suse.com/1186922" source="BUGZILLA"/>
		<reference ref_id="1186923" ref_url="https://bugzilla.suse.com/1186923" source="BUGZILLA"/>
		<reference ref_id="1186924" ref_url="https://bugzilla.suse.com/1186924" source="BUGZILLA"/>
		<reference ref_id="1187017" ref_url="https://bugzilla.suse.com/1187017" source="BUGZILLA"/>
		<reference ref_id="1187174" ref_url="https://bugzilla.suse.com/1187174" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10092" ref_url="https://www.suse.com/security/cve/CVE-2019-10092/" source="CVE"/>
		<reference ref_id="CVE-2020-35452" ref_url="https://www.suse.com/security/cve/CVE-2020-35452/" source="CVE"/>
		<reference ref_id="CVE-2021-26690" ref_url="https://www.suse.com/security/cve/CVE-2021-26690/" source="CVE"/>
		<reference ref_id="CVE-2021-26691" ref_url="https://www.suse.com/security/cve/CVE-2021-26691/" source="CVE"/>
		<reference ref_id="CVE-2021-30641" ref_url="https://www.suse.com/security/cve/CVE-2021-30641/" source="CVE"/>
		<reference ref_id="CVE-2021-31618" ref_url="https://www.suse.com/security/cve/CVE-2021-31618/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009030.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2021-30641: Fixed MergeSlashes regression (bsc#1187174)
- CVE-2021-31618: Fixed NULL pointer dereference on specially crafted HTTP/2 request (bsc#1186924)
- CVE-2020-35452: Fixed Single zero byte stack overflow in mod_auth_digest (bsc#1186922)
- CVE-2021-26690: Fixed mod_session NULL pointer dereference in parser (bsc#1186923)
- CVE-2021-26691: Fixed Heap overflow in mod_session (bsc#1187017)
- Fixed potential content spoofing with default error pages (bsc#1182703)
- Fixed for an issue when 'gensslcert' does not set CA:True. (bsc#1180530)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-17"/>
	<updated date="2021-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1145740">SUSE bug 1145740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180530">SUSE bug 1180530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182703">SUSE bug 1182703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186922">SUSE bug 1186922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186923">SUSE bug 1186923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186924">SUSE bug 1186924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187017">SUSE bug 1187017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187174">SUSE bug 1187174</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-10092/">CVE-2019-10092</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35452/">CVE-2020-35452</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26690/">CVE-2021-26690</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26691/">CVE-2021-26691</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30641/">CVE-2021-30641</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31618/">CVE-2021-31618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505414" comment="apache2-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505415" comment="apache2-devel-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503468" comment="apache2-doc-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505416" comment="apache2-prefork-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505417" comment="apache2-utils-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505418" comment="apache2-worker-2.4.33-3.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140350" version="1" class="patch">
	<metadata>
		<title>Security update for caribou (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1186617" ref_url="https://bugzilla.suse.com/1186617" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3567" ref_url="https://www.suse.com/security/cve/CVE-2021-3567/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009035.html" source="SUSE-SU"/>
		<description>
This update for caribou fixes the following issues:

Security issue fixed:

- CVE-2021-3567: Fixed a segfault when attempting to use shifted characters (bsc#1186617).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-17"/>
	<updated date="2021-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186617">SUSE bug 1186617</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3567/">CVE-2021-3567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505419" comment="caribou-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505420" comment="caribou-common-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505421" comment="caribou-devel-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505422" comment="caribou-gtk-module-common-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505423" comment="caribou-gtk2-module-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505424" comment="caribou-gtk3-module-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503478" comment="caribou-lang-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505425" comment="libcaribou0-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505426" comment="typelib-1_0-Caribou-1_0-0.4.21-5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140351" version="1" class="patch">
	<metadata>
		<title>Security update for python-rsa (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1172389" ref_url="https://bugzilla.suse.com/1172389" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13757" ref_url="https://www.suse.com/security/cve/CVE-2020-13757/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009029.html" source="SUSE-SU"/>
		<description>
This update for python-rsa fixes the following issues:

- CVE-2020-13757: Proper handling of leading '\0' bytes during decryption of ciphertext (bsc#1172389)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-17"/>
	<updated date="2021-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172389">SUSE bug 1172389</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-13757/">CVE-2020-13757</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494053" comment="python3-rsa-3.4.2-3.4.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140352" version="1" class="patch">
	<metadata>
		<title>Security update for xterm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1169444" ref_url="https://bugzilla.suse.com/1169444" source="BUGZILLA"/>
		<reference ref_id="1182091" ref_url="https://bugzilla.suse.com/1182091" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27135" ref_url="https://www.suse.com/security/cve/CVE-2021-27135/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009040.html" source="SUSE-SU"/>
		<description>
This update for xterm fixes the following issues:

- CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. (bsc#1182091)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1169444">SUSE bug 1169444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182091">SUSE bug 1182091</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27135/">CVE-2021-27135</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505427" comment="xterm-330-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505428" comment="xterm-bin-330-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140353" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1171257" ref_url="https://bugzilla.suse.com/1171257" source="BUGZILLA"/>
		<reference ref_id="1176293" ref_url="https://bugzilla.suse.com/1176293" source="BUGZILLA"/>
		<reference ref_id="1179831" ref_url="https://bugzilla.suse.com/1179831" source="BUGZILLA"/>
		<reference ref_id="1181368" ref_url="https://bugzilla.suse.com/1181368" source="BUGZILLA"/>
		<reference ref_id="1182281" ref_url="https://bugzilla.suse.com/1182281" source="BUGZILLA"/>
		<reference ref_id="1182293" ref_url="https://bugzilla.suse.com/1182293" source="BUGZILLA"/>
		<reference ref_id="1182382" ref_url="https://bugzilla.suse.com/1182382" source="BUGZILLA"/>
		<reference ref_id="1185092" ref_url="https://bugzilla.suse.com/1185092" source="BUGZILLA"/>
		<reference ref_id="1185281" ref_url="https://bugzilla.suse.com/1185281" source="BUGZILLA"/>
		<reference ref_id="1186674" ref_url="https://bugzilla.suse.com/1186674" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-15750" ref_url="https://www.suse.com/security/cve/CVE-2018-15750/" source="CVE"/>
		<reference ref_id="CVE-2018-15751" ref_url="https://www.suse.com/security/cve/CVE-2018-15751/" source="CVE"/>
		<reference ref_id="CVE-2020-11651" ref_url="https://www.suse.com/security/cve/CVE-2020-11651/" source="CVE"/>
		<reference ref_id="CVE-2020-11652" ref_url="https://www.suse.com/security/cve/CVE-2020-11652/" source="CVE"/>
		<reference ref_id="CVE-2020-25592" ref_url="https://www.suse.com/security/cve/CVE-2020-25592/" source="CVE"/>
		<reference ref_id="CVE-2021-25315" ref_url="https://www.suse.com/security/cve/CVE-2021-25315/" source="CVE"/>
		<reference ref_id="CVE-2021-31607" ref_url="https://www.suse.com/security/cve/CVE-2021-31607/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009057.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

Update to Salt release version 3002.2 (jsc#ECO-3212, jsc#SLE-18033, jsc#SLE-18028)

- Check if dpkgnotify is executable (bsc#1186674)
- Drop support for Python2. Obsoletes `python2-salt` package (jsc#SLE-18028)
- virt module updates
  * network: handle missing ipv4 netmask attribute
  * more network support
  * PCI/USB host devices passthrough support
- Set distro requirement to oldest supported version in requirements/base.txt
- Bring missing part of async batch implementation back (bsc#1182382, CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Remove deprecated warning that breaks minion execution when 'server_id_use_crc' opts is missing
- Fix pkg states when DEB package has 'all' arch
- Do not force beacons configuration to be a list.
- Remove msgpack &lt; 1.0.0 from base requirements (bsc#1176293)
- msgpack support for version &gt;= 1.0.0 (bsc#1171257)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281, CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18033)
- Remove duplicate directories from specfile
- Improvements on 'ansiblegate' module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Regression fix of salt-ssh on processing targets
- Update target fix for salt-ssh and avoiding race condition on salt-ssh event processing (bsc#1179831, bsc#1182281)
- Add notify beacon for Debian/Ubuntu systems
- Fix zmq bug that causes salt-call to freeze (bsc#1181368)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-21"/>
	<updated date="2021-06-21"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1171257">SUSE bug 1171257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176293">SUSE bug 1176293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179831">SUSE bug 1179831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181368">SUSE bug 1181368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182281">SUSE bug 1182281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182293">SUSE bug 1182293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182382">SUSE bug 1182382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185092">SUSE bug 1185092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185281">SUSE bug 1185281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186674">SUSE bug 1186674</bugzilla>
	<cve impact="important" cvss3="8.7/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-15750/">CVE-2018-15750</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15751/">CVE-2018-15751</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11651/">CVE-2020-11651</cve>
	<cve impact="critical" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11652/">CVE-2020-11652</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25592/">CVE-2020-25592</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25315/">CVE-2021-25315</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31607/">CVE-2021-31607</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505429" comment="python3-salt-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505430" comment="salt-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505431" comment="salt-api-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494060" comment="salt-bash-completion-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505432" comment="salt-cloud-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505433" comment="salt-doc-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499949" comment="salt-fish-completion-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505434" comment="salt-master-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505435" comment="salt-minion-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505436" comment="salt-proxy-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505437" comment="salt-ssh-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505438" comment="salt-standalone-formulas-configuration-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505439" comment="salt-syndic-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505440" comment="salt-transactional-update-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494063" comment="salt-zsh-completion-3002.2-37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140354" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1187418" ref_url="https://bugzilla.suse.com/1187418" source="BUGZILLA"/>
		<reference ref_id="1187419" ref_url="https://bugzilla.suse.com/1187419" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29157" ref_url="https://www.suse.com/security/cve/CVE-2021-29157/" source="CVE"/>
		<reference ref_id="CVE-2021-33515" ref_url="https://www.suse.com/security/cve/CVE-2021-33515/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2124-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019410.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 fixes the following issues:

- CVE-2021-29157: Local attacker can login as any user and access their emails (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails (bsc#1187419)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-22"/>
	<updated date="2021-06-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187418">SUSE bug 1187418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187419">SUSE bug 1187419</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29157/">CVE-2021-29157</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-33515/">CVE-2021-33515</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505441" comment="dovecot23-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505442" comment="dovecot23-backend-mysql-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505443" comment="dovecot23-backend-pgsql-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505444" comment="dovecot23-backend-sqlite-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505445" comment="dovecot23-devel-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505446" comment="dovecot23-fts-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505447" comment="dovecot23-fts-lucene-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505448" comment="dovecot23-fts-solr-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505449" comment="dovecot23-fts-squat-2.3.11.3-24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140355" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1179930" ref_url="https://bugzilla.suse.com/1179930" source="BUGZILLA"/>
		<reference ref_id="1179931" ref_url="https://bugzilla.suse.com/1179931" source="BUGZILLA"/>
		<reference ref_id="1179932" ref_url="https://bugzilla.suse.com/1179932" source="BUGZILLA"/>
		<reference ref_id="1179933" ref_url="https://bugzilla.suse.com/1179933" source="BUGZILLA"/>
		<reference ref_id="1180102" ref_url="https://bugzilla.suse.com/1180102" source="BUGZILLA"/>
		<reference ref_id="1180232" ref_url="https://bugzilla.suse.com/1180232" source="BUGZILLA"/>
		<reference ref_id="1181598" ref_url="https://bugzilla.suse.com/1181598" source="BUGZILLA"/>
		<reference ref_id="1181599" ref_url="https://bugzilla.suse.com/1181599" source="BUGZILLA"/>
		<reference ref_id="1183353" ref_url="https://bugzilla.suse.com/1183353" source="BUGZILLA"/>
		<reference ref_id="1184110" ref_url="https://bugzilla.suse.com/1184110" source="BUGZILLA"/>
		<reference ref_id="1185128" ref_url="https://bugzilla.suse.com/1185128" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26418" ref_url="https://www.suse.com/security/cve/CVE-2020-26418/" source="CVE"/>
		<reference ref_id="CVE-2020-26419" ref_url="https://www.suse.com/security/cve/CVE-2020-26419/" source="CVE"/>
		<reference ref_id="CVE-2020-26420" ref_url="https://www.suse.com/security/cve/CVE-2020-26420/" source="CVE"/>
		<reference ref_id="CVE-2020-26421" ref_url="https://www.suse.com/security/cve/CVE-2020-26421/" source="CVE"/>
		<reference ref_id="CVE-2020-26422" ref_url="https://www.suse.com/security/cve/CVE-2020-26422/" source="CVE"/>
		<reference ref_id="CVE-2021-22173" ref_url="https://www.suse.com/security/cve/CVE-2021-22173/" source="CVE"/>
		<reference ref_id="CVE-2021-22174" ref_url="https://www.suse.com/security/cve/CVE-2021-22174/" source="CVE"/>
		<reference ref_id="CVE-2021-22191" ref_url="https://www.suse.com/security/cve/CVE-2021-22191/" source="CVE"/>
		<reference ref_id="CVE-2021-22207" ref_url="https://www.suse.com/security/cve/CVE-2021-22207/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009067.html" source="SUSE-SU"/>
		<description>
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:

Update wireshark to version 3.4.5

- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements

Including security fixes for:

- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932) 
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)

libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-22"/>
	<updated date="2021-06-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179930">SUSE bug 1179930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179931">SUSE bug 1179931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179932">SUSE bug 1179932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179933">SUSE bug 1179933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180102">SUSE bug 1180102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180232">SUSE bug 1180232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181598">SUSE bug 1181598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181599">SUSE bug 1181599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183353">SUSE bug 1183353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184110">SUSE bug 1184110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185128">SUSE bug 1185128</bugzilla>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26418/">CVE-2020-26418</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26419/">CVE-2020-26419</cve>
	<cve impact="low" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26420/">CVE-2020-26420</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-26421/">CVE-2020-26421</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26422/">CVE-2020-26422</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-22173/">CVE-2021-22173</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-22174/">CVE-2021-22174</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22191/">CVE-2021-22191</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-22207/">CVE-2021-22207</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505450" comment="libQt5Multimedia5-5.9.7-7.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505451" comment="libqt5-qtmultimedia-devel-5.9.7-7.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504137" comment="libqt5-qtmultimedia-private-headers-devel-5.9.7-7.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505452" comment="libsbc1-1.3-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505453" comment="libwireshark14-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505454" comment="libwiretap11-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505455" comment="libwsutil12-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505456" comment="sbc-devel-1.3-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505457" comment="wireshark-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505458" comment="wireshark-devel-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505459" comment="wireshark-ui-qt-3.4.5-3.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140356" version="1" class="patch">
	<metadata>
		<title>Security update for cryptctl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1186226" ref_url="https://bugzilla.suse.com/1186226" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18906" ref_url="https://www.suse.com/security/cve/CVE-2019-18906/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2136-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009076.html" source="SUSE-SU"/>
		<description>
This update for cryptctl fixes the following issues:

Update to version 2.4:

- CVE-2019-18906: Client side password hashing was equivalent to clear text password storage (bsc#1186226)
- First step to use plain text password instead of hashed password.
- Move repository into the SUSE github organization
- in RPC server, if client comes from localhost, remember its ipv4 localhost address instead of ipv6 address
- tell a record to clear expired pending commands upon saving a command result; introduce pending commands RPC test case
- avoid hard coding 127.0.0.1 in host ID of alive message test; let system administrator mount and unmount disks by issuing these two commands on key server.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-23"/>
	<updated date="2021-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186226">SUSE bug 1186226</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18906/">CVE-2019-18906</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504138" comment="cryptctl-2.4-4.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140357" version="1" class="patch">
	<metadata>
		<title>Security update for libnettle (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1187060" ref_url="https://bugzilla.suse.com/1187060" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3580" ref_url="https://www.suse.com/security/cve/CVE-2021-3580/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009079.html" source="SUSE-SU"/>
		<description>
This update for libnettle fixes the following issues:

- CVE-2021-3580: Fixed a remote denial of service in the RSA decryption via manipulated ciphertext (bsc#1187060).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-23"/>
	<updated date="2021-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187060">SUSE bug 1187060</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3580/">CVE-2021-3580</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505460" comment="libhogweed4-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494074" comment="libhogweed4-32bit-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505461" comment="libnettle-devel-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505462" comment="libnettle6-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494077" comment="libnettle6-32bit-3.4.1-4.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140358" version="1" class="patch">
	<metadata>
		<title>Security update for libgcrypt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1187212" ref_url="https://bugzilla.suse.com/1187212" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33560" ref_url="https://www.suse.com/security/cve/CVE-2021-33560/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2157-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009085.html" source="SUSE-SU"/>
		<description>
This update for libgcrypt fixes the following issues:

- CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-24"/>
	<updated date="2021-06-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187212">SUSE bug 1187212</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-33560/">CVE-2021-33560</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505463" comment="libgcrypt-devel-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505464" comment="libgcrypt20-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494080" comment="libgcrypt20-32bit-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505465" comment="libgcrypt20-hmac-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494082" comment="libgcrypt20-hmac-32bit-1.8.2-8.39.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140359" version="1" class="patch">
	<metadata>
		<title>Security update for openexr (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1187310" ref_url="https://bugzilla.suse.com/1187310" source="BUGZILLA"/>
		<reference ref_id="1187395" ref_url="https://bugzilla.suse.com/1187395" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3598" ref_url="https://www.suse.com/security/cve/CVE-2021-3598/" source="CVE"/>
		<reference ref_id="CVE-2021-3605" ref_url="https://www.suse.com/security/cve/CVE-2021-3605/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009086.html" source="SUSE-SU"/>
		<description>
This update for openexr fixes the following issues:

- Fixed CVE-2021-3605 [bsc#1187395]: Heap buffer overflow in the rleUncompress function
- Fixed CVE-2021-3598 [bsc#1187310]: Heap buffer overflow in Imf_3_1:CharPtrIO:readChars
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-24"/>
	<updated date="2021-06-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187310">SUSE bug 1187310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187395">SUSE bug 1187395</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3598/">CVE-2021-3598</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3605/">CVE-2021-3605</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505466" comment="libIlmImf-2_2-23-2.2.1-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505467" comment="libIlmImfUtil-2_2-23-2.2.1-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505468" comment="openexr-devel-2.2.1-3.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140360" version="1" class="patch">
	<metadata>
		<title>Security update for ovmf (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1183578" ref_url="https://bugzilla.suse.com/1183578" source="BUGZILLA"/>
		<reference ref_id="1183579" ref_url="https://bugzilla.suse.com/1183579" source="BUGZILLA"/>
		<reference ref_id="1186151" ref_url="https://bugzilla.suse.com/1186151" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28210" ref_url="https://www.suse.com/security/cve/CVE-2021-28210/" source="CVE"/>
		<reference ref_id="CVE-2021-28211" ref_url="https://www.suse.com/security/cve/CVE-2021-28211/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009089.html" source="SUSE-SU"/>
		<description>
This update for ovmf fixes the following issues:

- Fixed a possible buffer overflow in IScsiDxe (bsc#1186151)
- CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo (bsc#1183578)
- CVE-2021-28210: ovmf: unlimited FV recursion, round 2 (bsc#1183579)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-25"/>
	<updated date="2021-06-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183578">SUSE bug 1183578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183579">SUSE bug 1183579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186151">SUSE bug 1186151</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-28210/">CVE-2021-28210</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28211/">CVE-2021-28211</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505469" comment="ovmf-2017+git1510945757.b2662641d5-5.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505470" comment="ovmf-tools-2017+git1510945757.b2662641d5-5.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503556" comment="qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140361" version="1" class="patch">
	<metadata>
		<title>Security update for arpwatch (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1186240" ref_url="https://bugzilla.suse.com/1186240" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25321" ref_url="https://www.suse.com/security/cve/CVE-2021-25321/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009098.html" source="SUSE-SU"/>
		<description>
This update for arpwatch fixes the following issues:

- CVE-2021-25321: Fixed local privilege escalation from runtime user to root (bsc#1186240).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-28"/>
	<updated date="2021-06-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186240">SUSE bug 1186240</bugzilla>
	<cve impact="moderate" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-25321/">CVE-2021-25321</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615919" comment="arpwatch-2.1a15-5.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140362" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1186622" ref_url="https://bugzilla.suse.com/1186622" source="BUGZILLA"/>
		<reference ref_id="1187443" ref_url="https://bugzilla.suse.com/1187443" source="BUGZILLA"/>
		<reference ref_id="1187444" ref_url="https://bugzilla.suse.com/1187444" source="BUGZILLA"/>
		<reference ref_id="1187445" ref_url="https://bugzilla.suse.com/1187445" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33195" ref_url="https://www.suse.com/security/cve/CVE-2021-33195/" source="CVE"/>
		<reference ref_id="CVE-2021-33196" ref_url="https://www.suse.com/security/cve/CVE-2021-33196/" source="CVE"/>
		<reference ref_id="CVE-2021-33197" ref_url="https://www.suse.com/security/cve/CVE-2021-33197/" source="CVE"/>
		<reference ref_id="CVE-2021-33198" ref_url="https://www.suse.com/security/cve/CVE-2021-33198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009104.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

Update to 1.15.13.
    
Includes these security fixes 

- CVE-2021-33195: net: Lookup functions may return invalid host names (bsc#1187443).
- CVE-2021-33196: archive/zip: malformed archive may cause panic or memory exhaustion (bsc#1186622).
- CVE-2021-33197: net/http/httputil: ReverseProxy forwards Connection headers if first one is empty (bsc#1187444)
- CVE-2021-33198: math/big: (*Rat).SetString with '1.770p02041010010011001001' crashes with 'makeslice: len out of range' (bsc#1187445).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-30"/>
	<updated date="2021-06-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186622">SUSE bug 1186622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187443">SUSE bug 1187443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187444">SUSE bug 1187444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187445">SUSE bug 1187445</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-33195/">CVE-2021-33195</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33196/">CVE-2021-33196</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-33197/">CVE-2021-33197</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33198/">CVE-2021-33198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009615817" comment="go1.15-1.15.13-1.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615818" comment="go1.15-doc-1.15.13-1.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615819" comment="go1.15-race-1.15.13-1.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140363" version="1" class="patch">
	<metadata>
		<title>Security update for go1.14 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1164903" ref_url="https://bugzilla.suse.com/1164903" source="BUGZILLA"/>
		<reference ref_id="1181145" ref_url="https://bugzilla.suse.com/1181145" source="BUGZILLA"/>
		<reference ref_id="1181146" ref_url="https://bugzilla.suse.com/1181146" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3114" ref_url="https://www.suse.com/security/cve/CVE-2021-3114/" source="CVE"/>
		<reference ref_id="CVE-2021-3115" ref_url="https://www.suse.com/security/cve/CVE-2021-3115/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008248.html" source="SUSE-SU"/>
		<description>
This update for go1.14 fixes the following issues:

Go was updated to version 1.14.14 (bsc#1164903).

Security issues fixed:

- CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic (bsc#1181145).
- CVE-2021-3115: Fixed a potential arbitrary code execution in the build process (bsc#1181146).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-26"/>
	<updated date="2021-01-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1164903">SUSE bug 1164903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181145">SUSE bug 1181145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181146">SUSE bug 1181146</bugzilla>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3114/">CVE-2021-3114</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3115/">CVE-2021-3115</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505471" comment="go1.14-1.14.14-1.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505472" comment="go1.14-doc-1.14.14-1.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140364" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1181145" ref_url="https://bugzilla.suse.com/1181145" source="BUGZILLA"/>
		<reference ref_id="1181146" ref_url="https://bugzilla.suse.com/1181146" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3114" ref_url="https://www.suse.com/security/cve/CVE-2021-3114/" source="CVE"/>
		<reference ref_id="CVE-2021-3115" ref_url="https://www.suse.com/security/cve/CVE-2021-3115/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008246.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

Go was updated to version 1.15.7 (bsc#1175132).

Security issues fixed:

- CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic (bsc#1181145).
- CVE-2021-3115: Fixed a potential arbitrary code execution in the build process (bsc#1181146).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-28"/>
	<updated date="2021-01-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181145">SUSE bug 1181145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181146">SUSE bug 1181146</bugzilla>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3114/">CVE-2021-3114</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3115/">CVE-2021-3115</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505473" comment="go1.15-1.15.7-1.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505474" comment="go1.15-doc-1.15.7-1.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505475" comment="go1.15-race-1.15.7-1.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140365" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1180554" ref_url="https://bugzilla.suse.com/1180554" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8287" ref_url="https://www.suse.com/security/cve/CVE-2020-8287/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0224-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008247.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issue:

- CVE-2020-8287: Fixed an HTTP request smuggling vulnerability (bsc#1180554).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-26"/>
	<updated date="2021-01-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1180554">SUSE bug 1180554</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8287/">CVE-2020-8287</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505476" comment="nodejs8-8.17.0-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505477" comment="nodejs8-devel-8.17.0-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503560" comment="nodejs8-docs-8.17.0-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505478" comment="npm8-8.17.0-3.42.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140366" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1180684" ref_url="https://bugzilla.suse.com/1180684" source="BUGZILLA"/>
		<reference ref_id="1180685" ref_url="https://bugzilla.suse.com/1180685" source="BUGZILLA"/>
		<reference ref_id="1180687" ref_url="https://bugzilla.suse.com/1180687" source="BUGZILLA"/>
		<reference ref_id="1181090" ref_url="https://bugzilla.suse.com/1181090" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23239" ref_url="https://www.suse.com/security/cve/CVE-2021-23239/" source="CVE"/>
		<reference ref_id="CVE-2021-23240" ref_url="https://www.suse.com/security/cve/CVE-2021-23240/" source="CVE"/>
		<reference ref_id="CVE-2021-3156" ref_url="https://www.suse.com/security/cve/CVE-2021-3156/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0227-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008250.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:

- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges 
  [bsc#1181090,CVE-2021-3156]
- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`
  [bsc#1180684,CVE-2021-23239]
- A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685,
  CVE-2021-23240]
- It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-26"/>
	<updated date="2021-01-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180684">SUSE bug 1180684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180685">SUSE bug 1180685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180687">SUSE bug 1180687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181090">SUSE bug 1181090</bugzilla>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23239/">CVE-2021-23239</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23240/">CVE-2021-23240</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3156/">CVE-2021-3156</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505479" comment="sudo-1.8.22-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505480" comment="sudo-devel-1.8.22-4.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140367" version="1" class="patch">
	<metadata>
		<title>Security update for dbus-1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1187105" ref_url="https://bugzilla.suse.com/1187105" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35512" ref_url="https://www.suse.com/security/cve/CVE-2020-35512/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009121.html" source="SUSE-SU"/>
		<description>
This update for dbus-1 fixes the following issues:

- CVE-2020-35512: Fixed a use-after-free or potential undefined behaviour caused by shared UID's (bsc#1187105)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-12"/>
	<updated date="2021-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187105">SUSE bug 1187105</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35512/">CVE-2020-35512</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009615820" comment="dbus-1-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615821" comment="dbus-1-devel-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615822" comment="dbus-1-x11-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615823" comment="libdbus-1-3-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615795" comment="libdbus-1-3-32bit-1.12.2-8.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140368" version="1" class="patch">
	<metadata>
		<title>Security update for sqlite3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1157818" ref_url="https://bugzilla.suse.com/1157818" source="BUGZILLA"/>
		<reference ref_id="1158812" ref_url="https://bugzilla.suse.com/1158812" source="BUGZILLA"/>
		<reference ref_id="1158958" ref_url="https://bugzilla.suse.com/1158958" source="BUGZILLA"/>
		<reference ref_id="1158959" ref_url="https://bugzilla.suse.com/1158959" source="BUGZILLA"/>
		<reference ref_id="1158960" ref_url="https://bugzilla.suse.com/1158960" source="BUGZILLA"/>
		<reference ref_id="1159491" ref_url="https://bugzilla.suse.com/1159491" source="BUGZILLA"/>
		<reference ref_id="1159715" ref_url="https://bugzilla.suse.com/1159715" source="BUGZILLA"/>
		<reference ref_id="1159847" ref_url="https://bugzilla.suse.com/1159847" source="BUGZILLA"/>
		<reference ref_id="1159850" ref_url="https://bugzilla.suse.com/1159850" source="BUGZILLA"/>
		<reference ref_id="1160309" ref_url="https://bugzilla.suse.com/1160309" source="BUGZILLA"/>
		<reference ref_id="1160438" ref_url="https://bugzilla.suse.com/1160438" source="BUGZILLA"/>
		<reference ref_id="1160439" ref_url="https://bugzilla.suse.com/1160439" source="BUGZILLA"/>
		<reference ref_id="1164719" ref_url="https://bugzilla.suse.com/1164719" source="BUGZILLA"/>
		<reference ref_id="1172091" ref_url="https://bugzilla.suse.com/1172091" source="BUGZILLA"/>
		<reference ref_id="1172115" ref_url="https://bugzilla.suse.com/1172115" source="BUGZILLA"/>
		<reference ref_id="1172234" ref_url="https://bugzilla.suse.com/1172234" source="BUGZILLA"/>
		<reference ref_id="1172236" ref_url="https://bugzilla.suse.com/1172236" source="BUGZILLA"/>
		<reference ref_id="1172240" ref_url="https://bugzilla.suse.com/1172240" source="BUGZILLA"/>
		<reference ref_id="1173641" ref_url="https://bugzilla.suse.com/1173641" source="BUGZILLA"/>
		<reference ref_id="928700" ref_url="https://bugzilla.suse.com/928700" source="BUGZILLA"/>
		<reference ref_id="928701" ref_url="https://bugzilla.suse.com/928701" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-3414" ref_url="https://www.suse.com/security/cve/CVE-2015-3414/" source="CVE"/>
		<reference ref_id="CVE-2015-3415" ref_url="https://www.suse.com/security/cve/CVE-2015-3415/" source="CVE"/>
		<reference ref_id="CVE-2019-19244" ref_url="https://www.suse.com/security/cve/CVE-2019-19244/" source="CVE"/>
		<reference ref_id="CVE-2019-19317" ref_url="https://www.suse.com/security/cve/CVE-2019-19317/" source="CVE"/>
		<reference ref_id="CVE-2019-19603" ref_url="https://www.suse.com/security/cve/CVE-2019-19603/" source="CVE"/>
		<reference ref_id="CVE-2019-19645" ref_url="https://www.suse.com/security/cve/CVE-2019-19645/" source="CVE"/>
		<reference ref_id="CVE-2019-19646" ref_url="https://www.suse.com/security/cve/CVE-2019-19646/" source="CVE"/>
		<reference ref_id="CVE-2019-19880" ref_url="https://www.suse.com/security/cve/CVE-2019-19880/" source="CVE"/>
		<reference ref_id="CVE-2019-19923" ref_url="https://www.suse.com/security/cve/CVE-2019-19923/" source="CVE"/>
		<reference ref_id="CVE-2019-19924" ref_url="https://www.suse.com/security/cve/CVE-2019-19924/" source="CVE"/>
		<reference ref_id="CVE-2019-19925" ref_url="https://www.suse.com/security/cve/CVE-2019-19925/" source="CVE"/>
		<reference ref_id="CVE-2019-19926" ref_url="https://www.suse.com/security/cve/CVE-2019-19926/" source="CVE"/>
		<reference ref_id="CVE-2019-19959" ref_url="https://www.suse.com/security/cve/CVE-2019-19959/" source="CVE"/>
		<reference ref_id="CVE-2019-20218" ref_url="https://www.suse.com/security/cve/CVE-2019-20218/" source="CVE"/>
		<reference ref_id="CVE-2020-13434" ref_url="https://www.suse.com/security/cve/CVE-2020-13434/" source="CVE"/>
		<reference ref_id="CVE-2020-13435" ref_url="https://www.suse.com/security/cve/CVE-2020-13435/" source="CVE"/>
		<reference ref_id="CVE-2020-13630" ref_url="https://www.suse.com/security/cve/CVE-2020-13630/" source="CVE"/>
		<reference ref_id="CVE-2020-13631" ref_url="https://www.suse.com/security/cve/CVE-2020-13631/" source="CVE"/>
		<reference ref_id="CVE-2020-13632" ref_url="https://www.suse.com/security/cve/CVE-2020-13632/" source="CVE"/>
		<reference ref_id="CVE-2020-15358" ref_url="https://www.suse.com/security/cve/CVE-2020-15358/" source="CVE"/>
		<reference ref_id="CVE-2020-9327" ref_url="https://www.suse.com/security/cve/CVE-2020-9327/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<description>
This update for sqlite3 fixes the following issues:

- Update to version 3.36.0
- CVE-2020-15358: heap-based buffer overflow in multiSelectOrderBy due to mishandling of query-flattener
  optimization (bsc#1173641)
- CVE-2020-9327: NULL pointer dereference and segmentation fault because of generated column optimizations in
  isAuxiliaryVtabOperator (bsc#1164719)
- CVE-2019-20218: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error (bsc#1160439)
- CVE-2019-19959: memory-management error via ext/misc/zipfile.c involving embedded '\0' input (bsc#1160438)
- CVE-2019-19923: improper handling  of  certain uses of SELECT DISTINCT in flattenSubquery may lead to null pointer
  dereference (bsc#1160309)
- CVE-2019-19924: improper error handling in sqlite3WindowRewrite() (bsc#1159850)
- CVE-2019-19925: improper handling of NULL pathname during an update of a ZIP archive (bsc#1159847)
- CVE-2019-19926: improper handling  of certain errors during parsing  multiSelect in select.c (bsc#1159715)
- CVE-2019-19880: exprListAppendList in window.c allows attackers to trigger an invalid pointer dereference
  (bsc#1159491)
- CVE-2019-19603: during handling of CREATE TABLE and CREATE VIEW statements, does not consider confusion with
  a shadow table name (bsc#1158960)
- CVE-2019-19646: pragma.c mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated
  columns (bsc#1158959)
- CVE-2019-19645: alter.c allows attackers to trigger infinite recursion via certain types of self-referential views
  in conjunction with ALTER TABLE statements (bsc#1158958)
- CVE-2019-19317: lookupName in resolve.c omits bits from the colUsed bitmask in the case of a generated column,
  which allows attackers to cause a denial of service (bsc#1158812)
- CVE-2019-19244: sqlite3,sqlite2,sqlite: The function sqlite3Select in select.c allows a crash if a
  sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage (bsc#1157818)
- CVE-2015-3415: sqlite3VdbeExec comparison operator vulnerability (bsc#928701)
- CVE-2015-3414: sqlite3,sqlite2: dequoting of collation-sequence names (bsc#928700)
- CVE-2020-13434: integer overflow in sqlite3_str_vappendf (bsc#1172115)
- CVE-2020-13630: (bsc#1172234: use-after-free in fts3EvalNextRow
- CVE-2020-13631: virtual table allowed to be renamed to one of its shadow tables (bsc#1172236)
- CVE-2020-13632: NULL pointer dereference via crafted matchinfo() query (bsc#1172240)
- CVE-2020-13435: Malicious SQL statements could have crashed the process that is running SQLite (bsc#1172091)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-14"/>
	<updated date="2021-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1157818">SUSE bug 1157818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158812">SUSE bug 1158812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158958">SUSE bug 1158958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158959">SUSE bug 1158959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158960">SUSE bug 1158960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159491">SUSE bug 1159491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159715">SUSE bug 1159715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159847">SUSE bug 1159847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159850">SUSE bug 1159850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160309">SUSE bug 1160309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160438">SUSE bug 1160438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160439">SUSE bug 1160439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164719">SUSE bug 1164719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172091">SUSE bug 1172091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172115">SUSE bug 1172115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172234">SUSE bug 1172234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172236">SUSE bug 1172236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172240">SUSE bug 1172240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173641">SUSE bug 1173641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928700">SUSE bug 928700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928701">SUSE bug 928701</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-3414/">CVE-2015-3414</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-3415/">CVE-2015-3415</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19244/">CVE-2019-19244</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-19317/">CVE-2019-19317</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19603/">CVE-2019-19603</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19645/">CVE-2019-19645</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19646/">CVE-2019-19646</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19880/">CVE-2019-19880</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19923/">CVE-2019-19923</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-19924/">CVE-2019-19924</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19925/">CVE-2019-19925</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19926/">CVE-2019-19926</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19959/">CVE-2019-19959</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20218/">CVE-2019-20218</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13434/">CVE-2020-13434</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13435/">CVE-2020-13435</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13630/">CVE-2020-13630</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-13631/">CVE-2020-13631</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13632/">CVE-2020-13632</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-15358/">CVE-2020-15358</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-9327/">CVE-2020-9327</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009624170" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624171" comment="sqlite3-3.36.0-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624172" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140369" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1183155" ref_url="https://bugzilla.suse.com/1183155" source="BUGZILLA"/>
		<reference ref_id="1183851" ref_url="https://bugzilla.suse.com/1183851" source="BUGZILLA"/>
		<reference ref_id="1183852" ref_url="https://bugzilla.suse.com/1183852" source="BUGZILLA"/>
		<reference ref_id="1184450" ref_url="https://bugzilla.suse.com/1184450" source="BUGZILLA"/>
		<reference ref_id="1187973" ref_url="https://bugzilla.suse.com/1187973" source="BUGZILLA"/>
		<reference ref_id="1187976" ref_url="https://bugzilla.suse.com/1187976" source="BUGZILLA"/>
		<reference ref_id="1187977" ref_url="https://bugzilla.suse.com/1187977" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7774" ref_url="https://www.suse.com/security/cve/CVE-2020-7774/" source="CVE"/>
		<reference ref_id="CVE-2021-22918" ref_url="https://www.suse.com/security/cve/CVE-2021-22918/" source="CVE"/>
		<reference ref_id="CVE-2021-23362" ref_url="https://www.suse.com/security/cve/CVE-2021-23362/" source="CVE"/>
		<reference ref_id="CVE-2021-27290" ref_url="https://www.suse.com/security/cve/CVE-2021-27290/" source="CVE"/>
		<reference ref_id="CVE-2021-3449" ref_url="https://www.suse.com/security/cve/CVE-2021-3449/" source="CVE"/>
		<reference ref_id="CVE-2021-3450" ref_url="https://www.suse.com/security/cve/CVE-2021-3450/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009145.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

Update nodejs10 to 10.24.1.

Including fixes for 

- CVE-2021-22918: libuv upgrade - Out of bounds read (bsc#1187973)
- CVE-2021-27290: ssri Regular Expression Denial of Service (bsc#1187976)
- CVE-2021-23362: hosted-git-info Regular Expression Denial of Service (bsc#1187977)
- CVE-2020-7774: y18n Prototype Pollution (bsc#1184450)
- CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (bsc#1183851)
- CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing (bsc#1183852)
- reduce memory footprint of test-worker-stdio (bsc#1183155)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-15"/>
	<updated date="2021-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183155">SUSE bug 1183155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183851">SUSE bug 1183851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183852">SUSE bug 1183852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184450">SUSE bug 1184450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187973">SUSE bug 1187973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187976">SUSE bug 1187976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187977">SUSE bug 1187977</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-7774/">CVE-2020-7774</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22918/">CVE-2021-22918</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23362/">CVE-2021-23362</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27290/">CVE-2021-27290</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3449/">CVE-2021-3449</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3450/">CVE-2021-3450</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009624570" comment="nodejs10-10.24.1-1.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624571" comment="nodejs10-devel-10.24.1-1.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624546" comment="nodejs10-docs-10.24.1-1.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624572" comment="npm10-10.24.1-1.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140370" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1153720" ref_url="https://bugzilla.suse.com/1153720" source="BUGZILLA"/>
		<reference ref_id="1174978" ref_url="https://bugzilla.suse.com/1174978" source="BUGZILLA"/>
		<reference ref_id="1179610" ref_url="https://bugzilla.suse.com/1179610" source="BUGZILLA"/>
		<reference ref_id="1181193" ref_url="https://bugzilla.suse.com/1181193" source="BUGZILLA"/>
		<reference ref_id="1185428" ref_url="https://bugzilla.suse.com/1185428" source="BUGZILLA"/>
		<reference ref_id="1185701" ref_url="https://bugzilla.suse.com/1185701" source="BUGZILLA"/>
		<reference ref_id="1185861" ref_url="https://bugzilla.suse.com/1185861" source="BUGZILLA"/>
		<reference ref_id="1186463" ref_url="https://bugzilla.suse.com/1186463" source="BUGZILLA"/>
		<reference ref_id="1186484" ref_url="https://bugzilla.suse.com/1186484" source="BUGZILLA"/>
		<reference ref_id="1187038" ref_url="https://bugzilla.suse.com/1187038" source="BUGZILLA"/>
		<reference ref_id="1187050" ref_url="https://bugzilla.suse.com/1187050" source="BUGZILLA"/>
		<reference ref_id="1187215" ref_url="https://bugzilla.suse.com/1187215" source="BUGZILLA"/>
		<reference ref_id="1187452" ref_url="https://bugzilla.suse.com/1187452" source="BUGZILLA"/>
		<reference ref_id="1187554" ref_url="https://bugzilla.suse.com/1187554" source="BUGZILLA"/>
		<reference ref_id="1187595" ref_url="https://bugzilla.suse.com/1187595" source="BUGZILLA"/>
		<reference ref_id="1187601" ref_url="https://bugzilla.suse.com/1187601" source="BUGZILLA"/>
		<reference ref_id="1188062" ref_url="https://bugzilla.suse.com/1188062" source="BUGZILLA"/>
		<reference ref_id="1188116" ref_url="https://bugzilla.suse.com/1188116" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24588" ref_url="https://www.suse.com/security/cve/CVE-2020-24588/" source="CVE"/>
		<reference ref_id="CVE-2020-26558" ref_url="https://www.suse.com/security/cve/CVE-2020-26558/" source="CVE"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2020-36386" ref_url="https://www.suse.com/security/cve/CVE-2020-36386/" source="CVE"/>
		<reference ref_id="CVE-2021-0129" ref_url="https://www.suse.com/security/cve/CVE-2021-0129/" source="CVE"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-0605" ref_url="https://www.suse.com/security/cve/CVE-2021-0605/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33200" ref_url="https://www.suse.com/security/cve/CVE-2021-33200/" source="CVE"/>
		<reference ref_id="CVE-2021-33624" ref_url="https://www.suse.com/security/cve/CVE-2021-33624/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="CVE-2021-34693" ref_url="https://www.suse.com/security/cve/CVE-2021-34693/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009190.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2021-33624: Fixed a bug which allows unprivileged BPF program to leak the contents of arbitrary kernel memory (and therefore, of all physical memory) via a side-channel. (bsc#1187554)
- CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. (bsc#1187601)
- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187595)
- CVE-2020-26558: Fixed a flaw in the Bluetooth LE and BR/EDR secure pairing that could permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing. (bnc#1179610)
- CVE-2021-34693: Fixed a bug in net/can/bcm.c which could allow local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized. (bsc#1187452)
- CVE-2021-0129: Fixed an improper access control in BlueZ that may have allowed an authenticated user to potentially enable information disclosure via adjacent access. (bnc#1186463)
- CVE-2020-36386: Fixed an out-of-bounds read in hci_extended_inquiry_result_evt. (bsc#1187038)
- CVE-2020-24588: Fixed a bug that could allow an adversary to abuse devices that support receiving non-SSP A-MSDU frames to inject arbitrary network packets. (bsc#1185861 bsc#1185863)
- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-3609: Fixed a race condition in the CAN BCM networking protocol which allows for local privilege escalation. (bsc#1187215)
- CVE-2020-36385: Fixed a use-after-free flaw in ucma.c which allows for local privilege escalation. (bsc#1187050)
- CVE-2021-33200: Fix leakage of uninitialized bpf stack under speculation. (bsc#1186484)

The following non-security bugs were fixed:

- af_packet: fix the tx skb protocol in raw sockets with ETH_P_ALL (bsc#1176081).
- kabi: preserve struct header_ops after bsc#1176081 fix (bsc#1176081).
- net: Do not set transport offset to invalid value (bsc#1176081).
- net: Introduce parse_protocol header_ops callback (bsc#1176081).
- net/ethernet: Add parse_protocol header_ops support (bsc#1176081).
- net/mlx5e: Remove the wrong assumption about transport offset (bsc#1176081).
- net/mlx5e: Trust kernel regarding transport offset (bsc#1176081).
- net/packet: Ask driver for protocol if not provided by user (bsc#1176081).
- net/packet: Remove redundant skb-&gt;protocol set (bsc#1176081).
- resource: Fix find_next_iomem_res() iteration issue (bsc#1181193).
- scsi: scsi_dh_alua: Retry RTPG on a different path after failure (bsc#1174978 bsc#1185701).
- SUNRPC in case of backlog, hand free slots directly to waiting task (bsc#1185428).
- SUNRPC: More fixes for backlog congestion (bsc#1185428).
- x86/crash: Add e820 reserved ranges to kdump kernel's e820 table (bsc#1181193).
- x86/debug: Extend the lower bound of crash kernel low reservations (bsc#1153720).
- x86/e820, ioport: Add a new I/O resource descriptor IORES_DESC_RESERVED (bsc#1181193).
- x86/mm: Rework ioremap resource mapping determination (bsc#1181193).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-21"/>
	<updated date="2021-07-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153720">SUSE bug 1153720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174978">SUSE bug 1174978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179610">SUSE bug 1179610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181193">SUSE bug 1181193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185428">SUSE bug 1185428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185701">SUSE bug 1185701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185861">SUSE bug 1185861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186463">SUSE bug 1186463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186484">SUSE bug 1186484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187038">SUSE bug 1187038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187050">SUSE bug 1187050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187215">SUSE bug 1187215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187452">SUSE bug 1187452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187554">SUSE bug 1187554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187595">SUSE bug 1187595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187601">SUSE bug 1187601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188062">SUSE bug 1188062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188116">SUSE bug 1188116</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-24588/">CVE-2020-24588</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26558/">CVE-2020-26558</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36386/">CVE-2020-36386</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-0129/">CVE-2021-0129</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0605/">CVE-2021-0605</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33200/">CVE-2021-33200</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-33624/">CVE-2021-33624</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-34693/">CVE-2021-34693</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009625687" comment="kernel-default-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625688" comment="kernel-default-base-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625689" comment="kernel-default-devel-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625669" comment="kernel-devel-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625670" comment="kernel-docs-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625671" comment="kernel-macros-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625690" comment="kernel-obs-build-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625673" comment="kernel-source-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625691" comment="kernel-syms-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625692" comment="reiserfs-kmp-default-4.12.14-197.99.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140371" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188217" ref_url="https://bugzilla.suse.com/1188217" source="BUGZILLA"/>
		<reference ref_id="1188218" ref_url="https://bugzilla.suse.com/1188218" source="BUGZILLA"/>
		<reference ref_id="1188219" ref_url="https://bugzilla.suse.com/1188219" source="BUGZILLA"/>
		<reference ref_id="1188220" ref_url="https://bugzilla.suse.com/1188220" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22922" ref_url="https://www.suse.com/security/cve/CVE-2021-22922/" source="CVE"/>
		<reference ref_id="CVE-2021-22923" ref_url="https://www.suse.com/security/cve/CVE-2021-22923/" source="CVE"/>
		<reference ref_id="CVE-2021-22924" ref_url="https://www.suse.com/security/cve/CVE-2021-22924/" source="CVE"/>
		<reference ref_id="CVE-2021-22925" ref_url="https://www.suse.com/security/cve/CVE-2021-22925/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009199.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2021-22925: TELNET stack contents disclosure again. (bsc#1188220)
- CVE-2021-22924: Bad connection reuse due to flawed path name checks. (bsc#1188219)
- CVE-2021-22923: Insufficiently Protected Credentials. (bsc#1188218)
- CVE-2021-22922: Wrong content via metalink not discarded. (bsc#1188217)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-21"/>
	<updated date="2021-07-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1188217">SUSE bug 1188217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188218">SUSE bug 1188218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188219">SUSE bug 1188219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188220">SUSE bug 1188220</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22922/">CVE-2021-22922</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22923/">CVE-2021-22923</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-22924/">CVE-2021-22924</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22925/">CVE-2021-22925</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626015" comment="curl-7.60.0-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626016" comment="libcurl-devel-7.60.0-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626017" comment="libcurl4-7.60.0-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626008" comment="libcurl4-32bit-7.60.0-3.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140372" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181414" ref_url="https://bugzilla.suse.com/1181414" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26976" ref_url="https://www.suse.com/security/cve/CVE-2020-26976/" source="CVE"/>
		<reference ref_id="CVE-2021-23953" ref_url="https://www.suse.com/security/cve/CVE-2021-23953/" source="CVE"/>
		<reference ref_id="CVE-2021-23954" ref_url="https://www.suse.com/security/cve/CVE-2021-23954/" source="CVE"/>
		<reference ref_id="CVE-2021-23960" ref_url="https://www.suse.com/security/cve/CVE-2021-23960/" source="CVE"/>
		<reference ref_id="CVE-2021-23964" ref_url="https://www.suse.com/security/cve/CVE-2021-23964/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008257.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.7.0 ESR  (MFSA 2021-04, bsc#1181414)
  * CVE-2021-23953: Fixed a Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954: Fixed a type confusion when using logical assignment operators in JavaScript switch statements
  * CVE-2020-26976: Fixed an issue where HTTPS pages could have been intercepted by a registered service worker when they should not have been
  * CVE-2021-23960: Fixed a use-after-poison for incorrectly redeclared JavaScript variables during GC
  * CVE-2021-23964: Fixed Memory safety bugs 	
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-29"/>
	<updated date="2021-01-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181414">SUSE bug 1181414</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26976/">CVE-2020-26976</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23953/">CVE-2021-23953</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23954/">CVE-2021-23954</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23960/">CVE-2021-23960</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23964/">CVE-2021-23964</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505481" comment="MozillaFirefox-78.7.0-3.128.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505482" comment="MozillaFirefox-devel-78.7.0-3.128.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505483" comment="MozillaFirefox-translations-common-78.7.0-3.128.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505484" comment="MozillaFirefox-translations-other-78.7.0-3.128.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140373" version="1" class="patch">
	<metadata>
		<title>Security update for linuxptp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1187646" ref_url="https://bugzilla.suse.com/1187646" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3570" ref_url="https://www.suse.com/security/cve/CVE-2021-3570/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009215.html" source="SUSE-SU"/>
		<description>
This update for linuxptp fixes the following issues:

- CVE-2021-3570: Validate the messageLength field of incoming messages. (bsc#1187646)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187646">SUSE bug 1187646</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3570/">CVE-2021-3570</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626013" comment="linuxptp-1.8+git65.g303b08c-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140374" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188275" ref_url="https://bugzilla.suse.com/1188275" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29970" ref_url="https://www.suse.com/security/cve/CVE-2021-29970/" source="CVE"/>
		<reference ref_id="CVE-2021-29976" ref_url="https://www.suse.com/security/cve/CVE-2021-29976/" source="CVE"/>
		<reference ref_id="CVE-2021-30547" ref_url="https://www.suse.com/security/cve/CVE-2021-30547/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009220.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 78.12.0 ESR

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-29 (bsc#1188275)

* CVE-2021-29970: Use-after-free in accessibility features of a document
* CVE-2021-30547: Out of bounds write in ANGLE
* CVE-2021-29976: Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188275">SUSE bug 1188275</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29970/">CVE-2021-29970</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29976/">CVE-2021-29976</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30547/">CVE-2021-30547</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009625207" comment="MozillaFirefox-78.12.0-3.147.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625208" comment="MozillaFirefox-devel-78.12.0-3.147.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625209" comment="MozillaFirefox-translations-common-78.12.0-3.147.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625210" comment="MozillaFirefox-translations-other-78.12.0-3.147.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140375" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1176681" ref_url="https://bugzilla.suse.com/1176681" source="BUGZILLA"/>
		<reference ref_id="1185591" ref_url="https://bugzilla.suse.com/1185591" source="BUGZILLA"/>
		<reference ref_id="1186290" ref_url="https://bugzilla.suse.com/1186290" source="BUGZILLA"/>
		<reference ref_id="1187364" ref_url="https://bugzilla.suse.com/1187364" source="BUGZILLA"/>
		<reference ref_id="1187365" ref_url="https://bugzilla.suse.com/1187365" source="BUGZILLA"/>
		<reference ref_id="1187366" ref_url="https://bugzilla.suse.com/1187366" source="BUGZILLA"/>
		<reference ref_id="1187367" ref_url="https://bugzilla.suse.com/1187367" source="BUGZILLA"/>
		<reference ref_id="1187499" ref_url="https://bugzilla.suse.com/1187499" source="BUGZILLA"/>
		<reference ref_id="1187529" ref_url="https://bugzilla.suse.com/1187529" source="BUGZILLA"/>
		<reference ref_id="1187538" ref_url="https://bugzilla.suse.com/1187538" source="BUGZILLA"/>
		<reference ref_id="1187539" ref_url="https://bugzilla.suse.com/1187539" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25085" ref_url="https://www.suse.com/security/cve/CVE-2020-25085/" source="CVE"/>
		<reference ref_id="CVE-2021-3582" ref_url="https://www.suse.com/security/cve/CVE-2021-3582/" source="CVE"/>
		<reference ref_id="CVE-2021-3592" ref_url="https://www.suse.com/security/cve/CVE-2021-3592/" source="CVE"/>
		<reference ref_id="CVE-2021-3593" ref_url="https://www.suse.com/security/cve/CVE-2021-3593/" source="CVE"/>
		<reference ref_id="CVE-2021-3594" ref_url="https://www.suse.com/security/cve/CVE-2021-3594/" source="CVE"/>
		<reference ref_id="CVE-2021-3595" ref_url="https://www.suse.com/security/cve/CVE-2021-3595/" source="CVE"/>
		<reference ref_id="CVE-2021-3607" ref_url="https://www.suse.com/security/cve/CVE-2021-3607/" source="CVE"/>
		<reference ref_id="CVE-2021-3608" ref_url="https://www.suse.com/security/cve/CVE-2021-3608/" source="CVE"/>
		<reference ref_id="CVE-2021-3611" ref_url="https://www.suse.com/security/cve/CVE-2021-3611/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009241.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

Security issues fixed:

- CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)
- CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)
- CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)
- CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)
- CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)
- CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
- CVE-2021-3608: Fix the ring init error flow (bsc#1187538)
- CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)
- CVE-2020-25085: Fix out-of-bounds access issue while doing multi block SDMA (bsc#1176681)

Other issues fixed:

- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
- Fix qemu hang while cancelling migrating hugepage vm (bsc#1185591)

		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-02"/>
	<updated date="2021-08-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176681">SUSE bug 1176681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185591">SUSE bug 1185591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186290">SUSE bug 1186290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187364">SUSE bug 1187364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187365">SUSE bug 1187365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187366">SUSE bug 1187366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187367">SUSE bug 1187367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187499">SUSE bug 1187499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187529">SUSE bug 1187529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187538">SUSE bug 1187538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187539">SUSE bug 1187539</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-25085/">CVE-2020-25085</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3582/">CVE-2021-3582</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3592/">CVE-2021-3592</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3593/">CVE-2021-3593</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3594/">CVE-2021-3594</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3595/">CVE-2021-3595</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3607/">CVE-2021-3607</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3608/">CVE-2021-3608</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3611/">CVE-2021-3611</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009625418" comment="qemu-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625400" comment="qemu-audio-alsa-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625401" comment="qemu-audio-oss-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625402" comment="qemu-audio-pa-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625419" comment="qemu-block-curl-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625420" comment="qemu-block-iscsi-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625421" comment="qemu-block-rbd-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625422" comment="qemu-block-ssh-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625423" comment="qemu-guest-agent-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625408" comment="qemu-ipxe-1.0.0+-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625409" comment="qemu-kvm-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625424" comment="qemu-lang-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625411" comment="qemu-seabios-1.12.0_0_ga698c89-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625412" comment="qemu-sgabios-8-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625425" comment="qemu-tools-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625414" comment="qemu-ui-curses-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625415" comment="qemu-ui-gtk-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625416" comment="qemu-vgabios-1.12.0_0_ga698c89-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625417" comment="qemu-x86-3.1.1.1-9.30.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140376" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182739" ref_url="https://bugzilla.suse.com/1182739" source="BUGZILLA"/>
		<reference ref_id="1183770" ref_url="https://bugzilla.suse.com/1183770" source="BUGZILLA"/>
		<reference ref_id="1185868" ref_url="https://bugzilla.suse.com/1185868" source="BUGZILLA"/>
		<reference ref_id="1185870" ref_url="https://bugzilla.suse.com/1185870" source="BUGZILLA"/>
		<reference ref_id="1185872" ref_url="https://bugzilla.suse.com/1185872" source="BUGZILLA"/>
		<reference ref_id="1188300" ref_url="https://bugzilla.suse.com/1188300" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2154" ref_url="https://www.suse.com/security/cve/CVE-2021-2154/" source="CVE"/>
		<reference ref_id="CVE-2021-2166" ref_url="https://www.suse.com/security/cve/CVE-2021-2166/" source="CVE"/>
		<reference ref_id="CVE-2021-2180" ref_url="https://www.suse.com/security/cve/CVE-2021-2180/" source="CVE"/>
		<reference ref_id="CVE-2021-27928" ref_url="https://www.suse.com/security/cve/CVE-2021-27928/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009251.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

- Update to 10.2.39 (bsc#1182739)
- CVE-2021-2166: DML unspecified vulnerability lead to complete DOS. (bsc#1185870)
- CVE-2021-2154: DML unspecified vulnerability can lead to complete DOS. (bsc#1185872)
- CVE-2021-2180: InnoDB unspecified vulnerability lead to complete DOS. (bsc#1185868)
- CVE-2021-27928: Fixed a remote code execution issue. (bsc#1183770)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-05"/>
	<updated date="2021-08-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182739">SUSE bug 1182739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183770">SUSE bug 1183770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185868">SUSE bug 1185868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185870">SUSE bug 1185870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185872">SUSE bug 1185872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188300">SUSE bug 1188300</bugzilla>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2154/">CVE-2021-2154</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2166/">CVE-2021-2166</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2180/">CVE-2021-2180</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27928/">CVE-2021-27928</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626468" comment="libmysqld-devel-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626469" comment="libmysqld19-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626470" comment="mariadb-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626471" comment="mariadb-client-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626451" comment="mariadb-errormessages-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626472" comment="mariadb-tools-10.2.39-3.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140377" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182620" ref_url="https://bugzilla.suse.com/1182620" source="BUGZILLA"/>
		<reference ref_id="1184450" ref_url="https://bugzilla.suse.com/1184450" source="BUGZILLA"/>
		<reference ref_id="1187976" ref_url="https://bugzilla.suse.com/1187976" source="BUGZILLA"/>
		<reference ref_id="1187977" ref_url="https://bugzilla.suse.com/1187977" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7774" ref_url="https://www.suse.com/security/cve/CVE-2020-7774/" source="CVE"/>
		<reference ref_id="CVE-2021-22884" ref_url="https://www.suse.com/security/cve/CVE-2021-22884/" source="CVE"/>
		<reference ref_id="CVE-2021-23362" ref_url="https://www.suse.com/security/cve/CVE-2021-23362/" source="CVE"/>
		<reference ref_id="CVE-2021-27290" ref_url="https://www.suse.com/security/cve/CVE-2021-27290/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009256.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

- update to npm 6.14.13
- CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. (bsc#1187976)
- CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service (bsc#1187977)
- CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-05"/>
	<updated date="2021-08-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182620">SUSE bug 1182620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184450">SUSE bug 1184450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187976">SUSE bug 1187976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187977">SUSE bug 1187977</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-7774/">CVE-2020-7774</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-22884/">CVE-2021-22884</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23362/">CVE-2021-23362</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27290/">CVE-2021-27290</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626438" comment="nodejs-common-2.0-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626461" comment="nodejs8-8.17.0-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626462" comment="nodejs8-devel-8.17.0-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626441" comment="nodejs8-docs-8.17.0-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626463" comment="npm8-8.17.0-3.47.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140378" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188891" ref_url="https://bugzilla.suse.com/1188891" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29980" ref_url="https://www.suse.com/security/cve/CVE-2021-29980/" source="CVE"/>
		<reference ref_id="CVE-2021-29984" ref_url="https://www.suse.com/security/cve/CVE-2021-29984/" source="CVE"/>
		<reference ref_id="CVE-2021-29985" ref_url="https://www.suse.com/security/cve/CVE-2021-29985/" source="CVE"/>
		<reference ref_id="CVE-2021-29986" ref_url="https://www.suse.com/security/cve/CVE-2021-29986/" source="CVE"/>
		<reference ref_id="CVE-2021-29988" ref_url="https://www.suse.com/security/cve/CVE-2021-29988/" source="CVE"/>
		<reference ref_id="CVE-2021-29989" ref_url="https://www.suse.com/security/cve/CVE-2021-29989/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009297.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 78.13.0 ESR (MFSA 2021-34, bsc#1188891):

- CVE-2021-29986: Race condition when resolving DNS names could have led to memory corruption
- CVE-2021-29988: Memory corruption as a result of incorrect style treatment
- CVE-2021-29984: Incorrect instruction reordering during JIT optimization
- CVE-2021-29980: Uninitialized memory in a canvas object could have led to memory corruption
- CVE-2021-29985: Use-after-free media channels
- CVE-2021-29989: Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188891">SUSE bug 1188891</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29980/">CVE-2021-29980</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29984/">CVE-2021-29984</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29985/">CVE-2021-29985</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29986/">CVE-2021-29986</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29988/">CVE-2021-29988</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29989/">CVE-2021-29989</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009630588" comment="MozillaFirefox-78.13.0-3.150.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630589" comment="MozillaFirefox-devel-78.13.0-3.150.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630590" comment="MozillaFirefox-translations-common-78.13.0-3.150.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630591" comment="MozillaFirefox-translations-other-78.13.0-3.150.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140379" version="1" class="patch">
	<metadata>
		<title>Security update for c-ares (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188881" ref_url="https://bugzilla.suse.com/1188881" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3672" ref_url="https://www.suse.com/security/cve/CVE-2021-3672/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2760-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-August/019883.html" source="SUSE-SU"/>
		<description>
This update for c-ares fixes the following issues:

Version update to git snapshot 1.17.1+20200724:

- CVE-2021-3672: fixed missing input validation on hostnames returned by DNS servers (bsc#1188881)
- If ares_getaddrinfo() was terminated by an ares_destroy(), it would cause crash
- Crash in sortaddrinfo() if the list size equals 0 due to an unexpected DNS response
- Expand number of escaped characters in DNS replies as per RFC1035 5.1 to prevent spoofing
- Use unbuffered /dev/urandom for random data to prevent early startup performance issues
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188881">SUSE bug 1188881</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3672/">CVE-2021-3672</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009630368" comment="c-ares-devel-1.17.1+20200724-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630369" comment="libcares2-1.17.1+20200724-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140380" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188697" ref_url="https://bugzilla.suse.com/1188697" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21775" ref_url="https://www.suse.com/security/cve/CVE-2021-21775/" source="CVE"/>
		<reference ref_id="CVE-2021-21779" ref_url="https://www.suse.com/security/cve/CVE-2021-21779/" source="CVE"/>
		<reference ref_id="CVE-2021-30663" ref_url="https://www.suse.com/security/cve/CVE-2021-30663/" source="CVE"/>
		<reference ref_id="CVE-2021-30665" ref_url="https://www.suse.com/security/cve/CVE-2021-30665/" source="CVE"/>
		<reference ref_id="CVE-2021-30689" ref_url="https://www.suse.com/security/cve/CVE-2021-30689/" source="CVE"/>
		<reference ref_id="CVE-2021-30720" ref_url="https://www.suse.com/security/cve/CVE-2021-30720/" source="CVE"/>
		<reference ref_id="CVE-2021-30734" ref_url="https://www.suse.com/security/cve/CVE-2021-30734/" source="CVE"/>
		<reference ref_id="CVE-2021-30744" ref_url="https://www.suse.com/security/cve/CVE-2021-30744/" source="CVE"/>
		<reference ref_id="CVE-2021-30749" ref_url="https://www.suse.com/security/cve/CVE-2021-30749/" source="CVE"/>
		<reference ref_id="CVE-2021-30758" ref_url="https://www.suse.com/security/cve/CVE-2021-30758/" source="CVE"/>
		<reference ref_id="CVE-2021-30795" ref_url="https://www.suse.com/security/cve/CVE-2021-30795/" source="CVE"/>
		<reference ref_id="CVE-2021-30797" ref_url="https://www.suse.com/security/cve/CVE-2021-30797/" source="CVE"/>
		<reference ref_id="CVE-2021-30799" ref_url="https://www.suse.com/security/cve/CVE-2021-30799/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2762-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009300.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.32.3:
- CVE-2021-21775: Fixed a use-after-free vulnerability in the way certain events are processed for ImageLoader objects. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger this vulnerability. (bsc#1188697)
- CVE-2021-21779: Fixed a use-after-free vulnerability in the way that WebKit GraphicsContext handles certain events. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger this vulnerability. (bsc#1188697)
- CVE-2021-30663: An integer overflow was addressed with improved input validation. (bsc#1188697)
- CVE-2021-30665: A memory corruption issue was addressed with improved state management. (bsc#1188697)
- CVE-2021-30689: A logic issue was addressed with improved state management. (bsc#1188697)
- CVE-2021-30720: A logic issue was addressed with improved restrictions. (bsc#1188697)
- CVE-2021-30734: Multiple memory corruption issues were addressed with improved memory handling. (bsc#1188697)
- CVE-2021-30744: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. (bsc#1188697)
- CVE-2021-30749: Multiple memory corruption issues were addressed with improved memory handling. (bsc#1188697)
- CVE-2021-30758: A type confusion issue was addressed with improved state handling. (bsc#1188697)
- CVE-2021-30795: A use after free issue was addressed with improved memory management. (bsc#1188697)
- CVE-2021-30797: This issue was addressed with improved checks. (bsc#1188697)
- CVE-2021-30799: Multiple memory corruption issues were addressed with improved memory handling. (bsc#1188697)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188697">SUSE bug 1188697</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21775/">CVE-2021-21775</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21779/">CVE-2021-21779</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30663/">CVE-2021-30663</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30665/">CVE-2021-30665</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30689/">CVE-2021-30689</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30720/">CVE-2021-30720</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30734/">CVE-2021-30734</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30744/">CVE-2021-30744</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30749/">CVE-2021-30749</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30758/">CVE-2021-30758</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30795/">CVE-2021-30795</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30797/">CVE-2021-30797</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30799/">CVE-2021-30799</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627256" comment="libjavascriptcoregtk-4_0-18-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627257" comment="libsoup-2_4-1-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627258" comment="libsoup-devel-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627237" comment="libsoup-lang-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627259" comment="libwebkit2gtk-4_0-37-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627239" comment="libwebkit2gtk3-lang-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627260" comment="typelib-1_0-JavaScriptCore-4_0-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627261" comment="typelib-1_0-Soup-2_4-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627262" comment="typelib-1_0-WebKit2-4_0-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627263" comment="typelib-1_0-WebKit2WebExtension-4_0-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627264" comment="webkit2gtk-4_0-injected-bundles-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627265" comment="webkit2gtk3-devel-2.32.3-3.77.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140381" version="1" class="patch">
	<metadata>
		<title>Security update for libsndfile (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1100167" ref_url="https://bugzilla.suse.com/1100167" source="BUGZILLA"/>
		<reference ref_id="1116993" ref_url="https://bugzilla.suse.com/1116993" source="BUGZILLA"/>
		<reference ref_id="1117954" ref_url="https://bugzilla.suse.com/1117954" source="BUGZILLA"/>
		<reference ref_id="1188540" ref_url="https://bugzilla.suse.com/1188540" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13139" ref_url="https://www.suse.com/security/cve/CVE-2018-13139/" source="CVE"/>
		<reference ref_id="CVE-2018-19432" ref_url="https://www.suse.com/security/cve/CVE-2018-19432/" source="CVE"/>
		<reference ref_id="CVE-2018-19758" ref_url="https://www.suse.com/security/cve/CVE-2018-19758/" source="CVE"/>
		<reference ref_id="CVE-2021-3246" ref_url="https://www.suse.com/security/cve/CVE-2021-3246/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009301.html" source="SUSE-SU"/>
		<description>
This update for libsndfile fixes the following issues:

- CVE-2018-13139: Fixed a stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. (bsc#1100167)
- CVE-2018-19432: Fixed a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a denial of service. (bsc#1116993)
- CVE-2021-3246: Fixed a heap buffer overflow vulnerability in msadpcm_decode_block. (bsc#1188540)
- CVE-2018-19758: Fixed a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service. (bsc#1117954)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1100167">SUSE bug 1100167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116993">SUSE bug 1116993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117954">SUSE bug 1117954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188540">SUSE bug 1188540</bugzilla>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-13139/">CVE-2018-13139</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-19432/">CVE-2018-19432</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19758/">CVE-2018-19758</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3246/">CVE-2021-3246</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626851" comment="libsndfile-devel-1.0.28-5.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626852" comment="libsndfile1-1.0.28-5.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140382" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1188906" ref_url="https://bugzilla.suse.com/1188906" source="BUGZILLA"/>
		<reference ref_id="1189162" ref_url="https://bugzilla.suse.com/1189162" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36221" ref_url="https://www.suse.com/security/cve/CVE-2021-36221/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009321.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

Update to go1.15.15:

- go#47473 net/http: panic due to racy read of persistConn after handler panic (CVE-2021-36221 bsc#1189162)
- go#47347 cmd/go: 'go list -f '{{.Stale}}'' stack overflow with cyclic imports
- go#47014 cmd/go: go mod vendor: open C:\Users\LICENSE: Access is denied.
- go#46927 cmd/compile: register conflict between external linker and duffzero on arm64
- go#46857 runtime: ppc64x binaries randomly segfault on linux 5.13rc6
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188906">SUSE bug 1188906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189162">SUSE bug 1189162</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36221/">CVE-2021-36221</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009630583" comment="go1.15-1.15.15-1.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630584" comment="go1.15-doc-1.15.15-1.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630585" comment="go1.15-race-1.15.15-1.39.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140383" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188917" ref_url="https://bugzilla.suse.com/1188917" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22930" ref_url="https://www.suse.com/security/cve/CVE-2021-22930/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009320.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

- CVE-2021-22930: http2: fixes use after free on close in stream canceling (bsc#1188917).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188917">SUSE bug 1188917</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22930/">CVE-2021-22930</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009629464" comment="nodejs8-8.17.0-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629465" comment="nodejs8-devel-8.17.0-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629439" comment="nodejs8-docs-8.17.0-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629466" comment="npm8-8.17.0-3.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140384" version="1" class="patch">
	<metadata>
		<title>Security update for fetchmail (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188034" ref_url="https://bugzilla.suse.com/1188034" source="BUGZILLA"/>
		<reference ref_id="1188875" ref_url="https://bugzilla.suse.com/1188875" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36386" ref_url="https://www.suse.com/security/cve/CVE-2021-36386/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009317.html" source="SUSE-SU"/>
		<description>
This update for fetchmail fixes the following issues:

- CVE-2021-36386: Fixed a missing variable initialization that can cause read from bad memory locations. (bsc#1188875)
- Change PASSWORDLEN from 64 to 256 (bsc#1188034)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1188034">SUSE bug 1188034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188875">SUSE bug 1188875</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-36386/">CVE-2021-36386</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009628205" comment="fetchmail-6.3.26-20.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009628206" comment="fetchmailconf-6.3.26-20.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140385" version="1" class="patch">
	<metadata>
		<title>Security update for libass (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188539" ref_url="https://bugzilla.suse.com/1188539" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36430" ref_url="https://www.suse.com/security/cve/CVE-2020-36430/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009325.html" source="SUSE-SU"/>
		<description>
This update for libass fixes the following issues:

- CVE-2020-36430: Fixed heap-based buffer overflow in decode_chars (bsc#1188539).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188539">SUSE bug 1188539</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36430/">CVE-2020-36430</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009628087" comment="libass-devel-0.14.0-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009628088" comment="libass9-0.14.0-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140386" version="1" class="patch">
	<metadata>
		<title>Security update for openexr (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188457" ref_url="https://bugzilla.suse.com/1188457" source="BUGZILLA"/>
		<reference ref_id="1188458" ref_url="https://bugzilla.suse.com/1188458" source="BUGZILLA"/>
		<reference ref_id="1188459" ref_url="https://bugzilla.suse.com/1188459" source="BUGZILLA"/>
		<reference ref_id="1188460" ref_url="https://bugzilla.suse.com/1188460" source="BUGZILLA"/>
		<reference ref_id="1188461" ref_url="https://bugzilla.suse.com/1188461" source="BUGZILLA"/>
		<reference ref_id="1188462" ref_url="https://bugzilla.suse.com/1188462" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20298" ref_url="https://www.suse.com/security/cve/CVE-2021-20298/" source="CVE"/>
		<reference ref_id="CVE-2021-20299" ref_url="https://www.suse.com/security/cve/CVE-2021-20299/" source="CVE"/>
		<reference ref_id="CVE-2021-20300" ref_url="https://www.suse.com/security/cve/CVE-2021-20300/" source="CVE"/>
		<reference ref_id="CVE-2021-20302" ref_url="https://www.suse.com/security/cve/CVE-2021-20302/" source="CVE"/>
		<reference ref_id="CVE-2021-20303" ref_url="https://www.suse.com/security/cve/CVE-2021-20303/" source="CVE"/>
		<reference ref_id="CVE-2021-20304" ref_url="https://www.suse.com/security/cve/CVE-2021-20304/" source="CVE"/>
		<reference ref_id="CVE-2021-3476" ref_url="https://www.suse.com/security/cve/CVE-2021-3476/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009313.html" source="SUSE-SU"/>
		<description>
This update for openexr fixes the following issues:

- CVE-2021-20298 [bsc#1188460]: Fixed Out-of-memory in B44Compressor
- CVE-2021-20299 [bsc#1188459]: Fixed Null-dereference READ in Imf_2_5:Header:operator
- CVE-2021-20300 [bsc#1188458]: Fixed Integer-overflow in Imf_2_5:hufUncompress
- CVE-2021-20302 [bsc#1188462]: Fixed Floating-point-exception in Imf_2_5:precalculateTileInfot
- CVE-2021-20303 [bsc#1188457]: Fixed Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer
- CVE-2021-20304 [bsc#1188461]: Fixed Undefined-shift in Imf_2_5:hufDecode
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188457">SUSE bug 1188457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188458">SUSE bug 1188458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188459">SUSE bug 1188459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188460">SUSE bug 1188460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188461">SUSE bug 1188461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188462">SUSE bug 1188462</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20298/">CVE-2021-20298</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20299/">CVE-2021-20299</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20300/">CVE-2021-20300</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20302/">CVE-2021-20302</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-20303/">CVE-2021-20303</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20304/">CVE-2021-20304</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3476/">CVE-2021-3476</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627907" comment="libIlmImf-2_2-23-2.2.1-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627908" comment="libIlmImfUtil-2_2-23-2.2.1-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627909" comment="openexr-devel-2.2.1-3.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140387" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188035" ref_url="https://bugzilla.suse.com/1188035" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21704" ref_url="https://www.suse.com/security/cve/CVE-2021-21704/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009327.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2021-21704: Fixed security issues in pdo_firebase module (bsc#1188035).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188035">SUSE bug 1188035</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21704/">CVE-2021-21704</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627517" comment="apache2-mod_php7-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627518" comment="php7-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627519" comment="php7-bcmath-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627520" comment="php7-bz2-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627521" comment="php7-calendar-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627522" comment="php7-ctype-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627523" comment="php7-curl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627524" comment="php7-dba-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627525" comment="php7-devel-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627526" comment="php7-dom-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627527" comment="php7-enchant-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627528" comment="php7-exif-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627529" comment="php7-fastcgi-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627530" comment="php7-fileinfo-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627531" comment="php7-fpm-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627532" comment="php7-ftp-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627533" comment="php7-gd-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627534" comment="php7-gettext-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627535" comment="php7-gmp-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627536" comment="php7-iconv-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627537" comment="php7-intl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627538" comment="php7-json-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627539" comment="php7-ldap-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627540" comment="php7-mbstring-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627541" comment="php7-mysql-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627542" comment="php7-odbc-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627543" comment="php7-opcache-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627544" comment="php7-openssl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627545" comment="php7-pcntl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627546" comment="php7-pdo-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627438" comment="php7-pear-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627439" comment="php7-pear-Archive_Tar-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627547" comment="php7-pgsql-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627548" comment="php7-phar-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627549" comment="php7-posix-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627550" comment="php7-readline-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627551" comment="php7-shmop-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627552" comment="php7-snmp-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627553" comment="php7-soap-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627554" comment="php7-sockets-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627555" comment="php7-sodium-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627556" comment="php7-sqlite-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627557" comment="php7-sysvmsg-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627558" comment="php7-sysvsem-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627559" comment="php7-sysvshm-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627560" comment="php7-tidy-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627561" comment="php7-tokenizer-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627562" comment="php7-wddx-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627563" comment="php7-xmlreader-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627564" comment="php7-xmlrpc-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627565" comment="php7-xmlwriter-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627566" comment="php7-xsl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627567" comment="php7-zip-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627568" comment="php7-zlib-7.2.5-4.79.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140388" version="1" class="patch">
	<metadata>
		<title>Security update for djvulibre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1187869" ref_url="https://bugzilla.suse.com/1187869" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3630" ref_url="https://www.suse.com/security/cve/CVE-2021-3630/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009319.html" source="SUSE-SU"/>
		<description>
This update for djvulibre fixes the following issues:

- CVE-2021-3630: out-of-bounds write in DJVU:DjVuTXT:decode() in DjVuText.cpp (bsc#1187869)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187869">SUSE bug 1187869</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3630/">CVE-2021-3630</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627515" comment="libdjvulibre-devel-3.5.27-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627516" comment="libdjvulibre21-3.5.27-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140389" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1185056" ref_url="https://bugzilla.suse.com/1185056" source="BUGZILLA"/>
		<reference ref_id="1188564" ref_url="https://bugzilla.suse.com/1188564" source="BUGZILLA"/>
		<reference ref_id="1188565" ref_url="https://bugzilla.suse.com/1188565" source="BUGZILLA"/>
		<reference ref_id="1188566" ref_url="https://bugzilla.suse.com/1188566" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2161" ref_url="https://www.suse.com/security/cve/CVE-2021-2161/" source="CVE"/>
		<reference ref_id="CVE-2021-2341" ref_url="https://www.suse.com/security/cve/CVE-2021-2341/" source="CVE"/>
		<reference ref_id="CVE-2021-2369" ref_url="https://www.suse.com/security/cve/CVE-2021-2369/" source="CVE"/>
		<reference ref_id="CVE-2021-2388" ref_url="https://www.suse.com/security/cve/CVE-2021-2388/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009324.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

- Update to version jdk8u302 (icedtea 3.20.0)
- CVE-2021-2341: Improve file transfers. (bsc#1188564)
- CVE-2021-2369: Better jar file validation. (bsc#1188565)
- CVE-2021-2388: Enhance compiler validation. (bsc#1188566)
- CVE-2021-2161: Less ambiguous processing. (bsc#1185056)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185056">SUSE bug 1185056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188564">SUSE bug 1188564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188565">SUSE bug 1188565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188566">SUSE bug 1188566</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2161/">CVE-2021-2161</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-2341/">CVE-2021-2341</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-2369/">CVE-2021-2369</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-2388/">CVE-2021-2388</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627148" comment="java-1_8_0-openjdk-1.8.0.302-3.55.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627149" comment="java-1_8_0-openjdk-demo-1.8.0.302-3.55.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627150" comment="java-1_8_0-openjdk-devel-1.8.0.302-3.55.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627151" comment="java-1_8_0-openjdk-headless-1.8.0.302-3.55.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140390" version="1" class="patch">
	<metadata>
		<title>Security update for krb5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188571" ref_url="https://bugzilla.suse.com/1188571" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36222" ref_url="https://www.suse.com/security/cve/CVE-2021-36222/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009316.html" source="SUSE-SU"/>
		<description>
This update for krb5 fixes the following issues:

- CVE-2021-36222: Fixed KDC null deref on bad encrypted challenge. (bsc#1188571)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188571">SUSE bug 1188571</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36222/">CVE-2021-36222</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626725" comment="krb5-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626700" comment="krb5-32bit-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626726" comment="krb5-client-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626727" comment="krb5-devel-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626728" comment="krb5-plugin-kdb-ldap-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626729" comment="krb5-plugin-preauth-otp-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626730" comment="krb5-plugin-preauth-pkinit-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626731" comment="krb5-server-1.16.3-3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140391" version="1" class="patch">
	<metadata>
		<title>Security update for spice-vdagent (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1177780" ref_url="https://bugzilla.suse.com/1177780" source="BUGZILLA"/>
		<reference ref_id="1177781" ref_url="https://bugzilla.suse.com/1177781" source="BUGZILLA"/>
		<reference ref_id="1177782" ref_url="https://bugzilla.suse.com/1177782" source="BUGZILLA"/>
		<reference ref_id="1177783" ref_url="https://bugzilla.suse.com/1177783" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25650" ref_url="https://www.suse.com/security/cve/CVE-2020-25650/" source="CVE"/>
		<reference ref_id="CVE-2020-25651" ref_url="https://www.suse.com/security/cve/CVE-2020-25651/" source="CVE"/>
		<reference ref_id="CVE-2020-25652" ref_url="https://www.suse.com/security/cve/CVE-2020-25652/" source="CVE"/>
		<reference ref_id="CVE-2020-25653" ref_url="https://www.suse.com/security/cve/CVE-2020-25653/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009312.html" source="SUSE-SU"/>
		<description>
This update for spice-vdagent fixes the following issues:

- CVE-2020-25650: memory DoS via arbitrary entries in `active_xfers` hash table (bsc#1177780)
- CVE-2020-25651: possible file transfer DoS and information leak via `active_xfers` hash map (bsc#1177781)
- CVE-2020-25652: possibility to exhaust file descriptors in `vdagentd` (bsc#1177782) 
- CVE-2020-25653: UNIX domain socket peer PID retrieved via `SO_PEERCRED` is subject to race condition (bsc#1177783) 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177780">SUSE bug 1177780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177781">SUSE bug 1177781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177782">SUSE bug 1177782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177783">SUSE bug 1177783</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25650/">CVE-2020-25650</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25651/">CVE-2020-25651</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25652/">CVE-2020-25652</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25653/">CVE-2020-25653</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626014" comment="spice-vdagent-0.17.0-4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140392" version="1" class="patch">
	<metadata>
		<title>Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1102408" ref_url="https://bugzilla.suse.com/1102408" source="BUGZILLA"/>
		<reference ref_id="1138715" ref_url="https://bugzilla.suse.com/1138715" source="BUGZILLA"/>
		<reference ref_id="1138746" ref_url="https://bugzilla.suse.com/1138746" source="BUGZILLA"/>
		<reference ref_id="1176389" ref_url="https://bugzilla.suse.com/1176389" source="BUGZILLA"/>
		<reference ref_id="1177120" ref_url="https://bugzilla.suse.com/1177120" source="BUGZILLA"/>
		<reference ref_id="1182421" ref_url="https://bugzilla.suse.com/1182421" source="BUGZILLA"/>
		<reference ref_id="1182422" ref_url="https://bugzilla.suse.com/1182422" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26137" ref_url="https://www.suse.com/security/cve/CVE-2020-26137/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009334.html" source="SUSE-SU"/>
		<description>
This patch updates the Python AWS SDK stack in SLE 15:

General:

# aws-cli

- Version updated to upstream release v1.19.9
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-boto3

- Version updated to upstream release 1.17.9
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-botocore

- Version updated to upstream release 1.20.9
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-urllib3

- Version updated to upstream release 1.25.10
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-service_identity

- Added this new package to resolve runtime dependencies for other packages.
  Version: 18.1.0

# python-trustme

- Added this new package to resolve runtime dependencies for other packages.
  Version: 0.6.0

Security fixes:

# python-urllib3:
  
- CVE-2020-26137: urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated
  by inserting CR and LF control characters in the first argument of putrequest() (bsc#1177120)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-23"/>
	<updated date="2021-08-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1102408">SUSE bug 1102408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138715">SUSE bug 1138715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138746">SUSE bug 1138746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176389">SUSE bug 1176389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177120">SUSE bug 1177120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182421">SUSE bug 1182421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182422">SUSE bug 1182422</bugzilla>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26137/">CVE-2020-26137</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626960" comment="python2-asn1crypto-0.24.0-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626964" comment="python2-pyasn1-0.4.2-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626965" comment="python2-pycparser-2.17-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626966" comment="python2-urllib3-1.25.10-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626945" comment="python3-asn1crypto-0.24.0-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626946" comment="python3-boto3-1.17.9-19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626947" comment="python3-botocore-1.20.9-33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626951" comment="python3-pyasn1-0.4.2-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626952" comment="python3-pycparser-2.17-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626953" comment="python3-urllib3-1.25.10-9.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140393" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1189521" ref_url="https://bugzilla.suse.com/1189521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3712" ref_url="https://www.suse.com/security/cve/CVE-2021-3712/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009344.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

- CVE-2021-3712: a bug in the code for printing certificate details could lead
  to a buffer overrun that a malicious actor could exploit to crash the
  application, causing a denial-of-service attack. [bsc#1189521]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-24"/>
	<updated date="2021-08-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189521">SUSE bug 1189521</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3712/">CVE-2021-3712</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631649" comment="libopenssl-1_0_0-devel-1.0.2p-3.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631650" comment="libopenssl1_0_0-1.0.2p-3.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631651" comment="openssl-1_0_0-1.0.2p-3.40.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140394" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1189521" ref_url="https://bugzilla.suse.com/1189521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3712" ref_url="https://www.suse.com/security/cve/CVE-2021-3712/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009340.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following security issue:

- CVE-2021-3712: a bug in the code for printing certificate details could
  lead to a buffer overrun that a malicious actor could exploit to crash
  the application, causing a denial-of-service attack. [bsc#1189521]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-24"/>
	<updated date="2021-08-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189521">SUSE bug 1189521</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3712/">CVE-2021-3712</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631652" comment="libopenssl-1_1-devel-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631639" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631653" comment="libopenssl1_1-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631641" comment="libopenssl1_1-32bit-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631654" comment="libopenssl1_1-hmac-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631643" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631655" comment="openssl-1_1-1.1.0i-14.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140395" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1189320" ref_url="https://bugzilla.suse.com/1189320" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2372" ref_url="https://www.suse.com/security/cve/CVE-2021-2372/" source="CVE"/>
		<reference ref_id="CVE-2021-2389" ref_url="https://www.suse.com/security/cve/CVE-2021-2389/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009352.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

Update to version 10.2.40 [bsc#1189320]:

- fixes for the following security vulnerabilities: CVE-2021-2372 and CVE-2021-2389
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-25"/>
	<updated date="2021-08-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1189320">SUSE bug 1189320</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2372/">CVE-2021-2372</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2389/">CVE-2021-2389</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631014" comment="libmysqld-devel-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631015" comment="libmysqld19-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631016" comment="mariadb-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631017" comment="mariadb-client-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630980" comment="mariadb-errormessages-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631018" comment="mariadb-tools-10.2.40-3.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140396" version="1" class="patch">
	<metadata>
		<title>Security update for spectre-meltdown-checker (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1189477" ref_url="https://bugzilla.suse.com/1189477" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009366.html" source="SUSE-SU"/>
		<description>
This update for spectre-meltdown-checker fixes the following issues:

spectre-meltdown-checker was updated to version 0.44 (bsc#1189477)

- feat: add support for SRBDS related vulnerabilities
- feat: add zstd kernel decompression (#370)
- enh: arm: add experimental support for binary arm images
- enh: rsb filling: no longer need the 'strings' tool to check for kernel support in live mode
- fix: fwdb: remove Intel extract tempdir on exit
- fix: has_vmm: ignore kernel threads when looking for a hypervisor (fixes #278)
- fix: fwdb: use the commit date as the intel fwdb version
- fix: fwdb: update Intel's repository URL
- fix: arm64: CVE-2017-5753: kernels 4.19+ use a different nospec macro
- fix: on CPU parse info under FreeBSD
- chore: github: add check run on pull requests
- chore: fwdb: update to v165.20201021+i20200616
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-27"/>
	<updated date="2021-08-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1189477">SUSE bug 1189477</bugzilla>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631131" comment="spectre-meltdown-checker-0.44-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140397" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1187418" ref_url="https://bugzilla.suse.com/1187418" source="BUGZILLA"/>
		<reference ref_id="1187419" ref_url="https://bugzilla.suse.com/1187419" source="BUGZILLA"/>
		<reference ref_id="1187420" ref_url="https://bugzilla.suse.com/1187420" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28200" ref_url="https://www.suse.com/security/cve/CVE-2020-28200/" source="CVE"/>
		<reference ref_id="CVE-2021-29157" ref_url="https://www.suse.com/security/cve/CVE-2021-29157/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009375.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 fixes the following issues:

Update dovecot to version 2.3.15 (jsc#SLE-19970):

Security issues fixed:

- CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
  JWT tokens. This may be used to supply attacker controlled keys to
  validate tokens, if attacker has local access. (bsc#1187418)
  Local attacker can login as any user and access their emails
- CVE-2021-33515:  On-path attacker could have injected plaintext commands
  before STARTTLS negotiation that would be executed after STARTTLS
  finished with the client. (bsc#1187419)
  Attacker can potentially steal user credentials and mails

* Disconnection log messages are now more standardized across services.
  They also always now start with 'Disconnected' prefix.
* Dovecot now depends on libsystemd for systemd integration.
* Removed support for Lua 5.2. Use version 5.1 or 5.3 instead.
* config: Some settings are now marked as 'hidden'. It's discouraged to
  change these settings. They will no longer be visible in doveconf
  output, except if they have been changed or if doveconf -s parameter
  is used. See https://doc.dovecot.org/settings/advanced/ for details.
* imap-compress: Compression level is now algorithm specific.
  See https://doc.dovecot.org/settings/plugin/compress-plugin/
* indexer-worker: Convert 'Indexed' info logs to an event named
  'indexer_worker_indexing_finished'. See
  https://doc.dovecot.org/admin_manual/list_of_events/#indexer-worker-indexing-finished
+ Add TSLv1.3 support to min_protocols.
+ Allow configuring ssl_cipher_suites. (for TLSv1.3+)
+ acl: Add acl_ignore_namespace setting which allows to entirely ignore
  ACLs for the listed namespaces.
+ imap: Support official RFC8970 preview/snippet syntax. Old methods of
  retrieving preview information via IMAP commands ('SNIPPET and PREVIEW
  with explicit algorithm selection') have been deprecated.
+ imapc: Support INDEXPVT for imapc storage to enable private
  message flags for cluster wide shared mailboxes.
+ lib-storage: Add new events: mail_opened, mail_expunge_requested,
  mail_expunged, mail_cache_lookup_finished. See
  https://doc.dovecot.org/admin_manual/list_of_events/#mail
+ zlib, imap-compression, fs-compress: Support compression levels that
  the algorithm supports. Before, we would allow hardcoded value between
  1 to 9 and would default to 6. Now we allow using per-algorithm value
  range and default to whatever default the algorithm specifies.
- *-login: Commands pipelined together with and just after the authenticate
  command cause these commands to be executed twice. This applies to all
  protocols that involve user login, which currently comprises of imap,
  pop3, submisision and managesieve.
- *-login: Processes are supposed to disconnect the oldest non-logged in
  connection when process_limit was reached. This didn't actually happen
  with the default 'high-security mode' (with service_count=1) where each
  connection is handled by a separate process.
- *-login: When login process reaches client/process limits, oldest
  client connections are disconnected. If one of these was still doing
  anvil lookup, this caused a crash. This could happen only if the login
  process limits were very low or if the server was overloaded.
- Fixed building with link time optimizations (-flto).
- auth: Userdb iteration with passwd driver does not always return all
  users with some nss drivers.
- dsync: Shared INBOX not synced when 'mail_shared_explicit_inbox' was
  disabled. If a user has a shared mailbox which is another user's INBOX,
  dsync didn't include the mailbox in syncing unless explicit naming is
  enabled with 'mail_shared_explicit_inbox' set to 'yes'.
- dsync: Shared namespaces were not synced with '-n' flag.
- dsync: Syncing shared INBOX failed if mail_attribute_dict was not set.
  If a user has a shared mailbox that is another user's INBOX, dsync
  failed to export the mailbox if mail attributes are disabled.
- fts-solr, fts-tika: Using both Solr FTS and Tika may have caused HTTP
  requests to assert-crash: Panic: file http-client-request.c: line 1232
  (http_client_request_send_more): assertion failed: (req-&gt;payload_input != NULL)
- fts-tika: 5xx errors returned by Tika server as indexing failures.
  However, Tika can return 5xx for some attachments every time.
  So the 5xx error should be retried once, but treated as success if it
  happens on the retry as well. v2.3 regression.
- fts-tika: v2.3.11 regression: Indexing messages with fts-tika may have
  resulted in Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts):
  assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
- imap: SETMETADATA could not be used to unset metadata values.
  Instead NIL was handled as a 'NIL' string. v2.3.14 regression.
- imap: IMAP BINARY FETCH crashes at least on empty base64 body:
  Panic: file index-mail-binary.c: line 358 (blocks_count_lines):
  assertion failed: (block_count == 0 || block_idx+1 == block_count)
- imap: If IMAP client using the NOTIFY command was disconnected while
  sending FETCH notifications to the client, imap could crash with
  Panic: Trying to close mailbox INBOX with open transactions.
- imap: Using IMAP COMPRESS extension can cause IMAP connection to hang
  when IMAP commands are &gt;8 kB long.
- imapc: If remote server sent BYE but didn't immediately disconnect, it
  could cause infinite busy-loop.
- lib-index: Corrupted cache record size in dovecot.index.cache file
  could have caused a crash (segfault) when accessing it.
- lib-oauth2: JWT token time validation now works correctly with
  32-bit systems.
- lib-ssl-iostream: Checking hostnames against an SSL certificate was
  case-sensitive.
- lib-storage: Corrupted mime.parts in dovecot.index.cache may have
  resulted in Panic: file imap-bodystructure.c: line 206 (part_write_body):
  assertion failed: (text == ((part-&gt;flags &amp; MESSAGE_PART_FLAG_TEXT) != 0))
- lib-storage: Index rebuilding (e.g. via doveadm force-resync) didn't
  preserve the 'hdr-pop3-uidl' header. Because of this, the next pop3
  session could have accessed all of the emails' metadata to read their
  POP3 UIDL (opening dbox files).
- listescape: When using the listescape plugin and a shared namespace
  the plugin didn't work properly anymore resulting in errors like:
  'Invalid mailbox name: Name must not have '/' character.'
- lmtp: Connection crashes if connection gets disconnected due to
  multiple bad commands and the last bad command is BDAT.
- lmtp: The Dovecot-specific LMTP parameter XRCPTFORWARD was blindly
  forwarded by LMTP proxy without checking that the backend has support.
  This caused a command parameter error from the backend if it was
  running an older Dovecot release. This could only occur in more complex
  setups where the message was proxied twice; when the proxy generated
  the XRCPTFORWARD parameter itself the problem did not occur, so this
  only happened when it was forwarded.
- lmtp: The LMTP proxy crashes with a panic when the remote server
  replies with an error while the mail is still being forwarded through
  a DATA/BDAT command.
- lmtp: Username may have been missing from lmtp log line prefixes when
  it was performing autoexpunging.
- master: Dovecot would incorrectly fail with haproxy 2.0.14 service
  checks.
- master: Systemd service: Dovecot announces readiness for accepting
  connections earlier than it should. The following environment variables
  are now imported automatically and can be omitted from
  import_environment setting: NOTIFY_SOCKET LISTEN_FDS LISTEN_PID.
- master: service { process_min_avail } was launching processes too
  slowly when master was forking a lot of processes.
- util: Make the health-check.sh example script POSIX shell compatible.
* Added new aliases for some variables. Usage of the old ones is possible,
  but discouraged. (These were partially added already to v2.3.13.)
  See https://doc.dovecot.org/configuration_manual/config_file/config_variables/
  for more information.
* Optimize imap/pop3/submission/managesieve proxies to use less CPU at
  the cost of extra memory usage.
* Remove autocreate, expire, snarf and mail-filter plugins.
* Remove cydir storage driver.
* Remove XZ/LZMA write support. Read support will be removed in future release.
* doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP
  environment variable is not set. Timestamp format is taken from
  log_timestamp setting.
* If BROKENCHAR or listescape plugin is used, the escaped folder names
  may be slightly different from before in some situations. This is
  unlikely to cause issues, although caching clients may redownload the
  folders.
* imapc: It now enables BROKENCHAR=~ by default to escape remote folder
  names if necessary. This also means that if there are any '~'
  characters in the remote folder names, they will be visible as '~7e'.
* imapc: When using local index files folder names were escaped on
  filesystem a bit differently. This affects only if there are folder
  names that actually require escaping, which isn't so common. The old
  style folders will be automatically deleted from filesystem.
* stats: Update exported metrics to be compliant with OpenMetrics standard.
+ doveadm: Add an optional '-p' parameter to metadata list command. If
  enabled, '/private', and '/shared' metadata prefixes will be prepended
  to the keys in the list output.
+ doveconf: Support environment variables in config files. See
  https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables
  for more details.
+ indexer-worker: Change indexer to disconnect from indexer-worker
  after each request. This allows service indexer-worker's service_count &amp;
  idle_kill settings to work. These can be used to restart indexer-worker
  processes once in a while to reduce their memory usage.
- auth: 'nodelay' with various authentication mechanisms such as apop
  and digest-md5 crashed AUTH process if authentication failed.
- auth: Auth lua script generating an error triggered an assertion
  failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify):
  assertion failed: (lua_gettop(script-&gt;L) == 0).
- configure: Fix libunwind detection to work on other than x86_64 systems.
- doveadm-server: Process could crash if logging was done outside command
  handling. For example http-client could have done debug logging
  afterwards, resulting in either segfault or Panic:
  file http-client.c: line 642 (http_client_context_close):
  assertion failed: (cctx-&gt;clients_list == NULL).
- dsync: Folder name escaping with BROKENCHAR didn't work completely
  correctly. This especially caused problems with dsync-migrations using
  imapc where some of the remote folder names may not have been accessible.
- dsync: doveadm sync + imapc doesn't always sync all mails when doing
  an incremental sync (-1), which could lead to mail loss when it's used
  for migration. This happens only when GUIDs aren't used (i.e.
  imapc without imapc_features=guid-forced).
- fts-tika: When tika server returns error, some mails cause Panic:
  file message-parser.c: line 802 (message_parser_deinit_from_parts):
  assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
- lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have
  resulted in crashes. This exposed that Dovecot was wrongly accepting
  atoms in 'nstring' handling. Changed the IMAP parsing to be more
  strict about this now.
- lib-index: If dovecot.index.cache has corrupted message size, fetching
  BODY/BODYSTRUCTURE may cause assert-crash:
  Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish):
  assertion failed: (mail-&gt;data.parts != NULL).
- lib-index: Minor error handling and race condition fixes related to
  rotating dovecot.index.log. These didn't usually cause problems,
  unless the log files were rotated rapidly.
- lib-lua: Lua scripts using coroutines or lua libraries using coroutines
  (e.g., cqueues) panicked.
- Message PREVIEW handled whitespace wrong so first space would get
  eaten from between words.
- FTS and message PREVIEW (snippet) parsed HTML &amp;entities case-sensitively.
- lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
  was written in a way that may have caused confusion for IMAP clients
  and also Dovecot itself when parsing it. The truncated part is now
  written out using application/octet-stream MIME type.
- lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to
  use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed:
  (meth-&gt;context_size &lt;= MAC_MAX_CONTEXT_SIZE).
- event filters: NOT keyword did not have the correct associativity.
- Ignore ECONNRESET when closing socket. This avoids logging useless
  errors on systems like FreeBSD.
- event filters: event filter syntax error may lead to Panic:
  file event-filter.c: line 137 (event_filter_parse): assertion failed:
  (state.output == NULL)
- lib: timeval_cmp_margin() was broken on 32-bit systems. This could
  potentially have caused HTTP timeouts to be handled incorrectly.
- log: instance_name wasn't used as syslog ident by the log process.
- master: After a service reached process_limit and client_limit, it
  could have taken up to 1 second to realize that more client connections
  became available. During this time client connections could have been
  unnecessarily rejected and a warning logged:
  Warning: service(...): process_limit (...) reached, client connections are being dropped
- stats: Crash would occur when generating openmetrics data for metrics
  using aggregating functions.
- stats: Event filters comparing against empty strings crash the stats
  process.
* CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
  allow logged in user to access other people's emails and filesystem
  information.
* Metric filter and global event filter variable syntax changed to a
  SQL-like format. See https://doc.dovecot.org/configuration_manual/event_filter/
* auth: Added new aliases for %{variables}. Usage of the old ones is
  possible, but discouraged.
* auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
  mechanism and related password schemes.
* auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
* auth: Removed postfix postmap socket
+ auth: Added new fields for auth server events. These fields are now
  also available for all auth events. See
  https://doc.dovecot.org/admin_manual/list_of_events/#authentication-server
  for details.
+ imap-hibernate: Added imap_client_hibernated, imap_client_unhibernated
  and imap_client_unhibernate_retried events. See
  https://doc.dovecot.org/admin_manual/list_of_events/ for details.
+ lib-index: Added new mail_index_recreated event. See
  https://doc.dovecot.org/admin_manual/list_of_events/#mail-index-recreated
+ lib-sql: Support TLS options for cassandra driver. This requires
  cpp-driver v2.15 (or later) to work reliably.
+ lib-storage: Missing $HasAttachment / $HasNoAttachment flags are now
  added to existing mails if mail_attachment_detection_option=add-flags
  and it can be done inexpensively.
+ login proxy: Added login_proxy_max_reconnects setting (default 3) to
  control how many reconnections are attempted.
+ login proxy: imap/pop3/submission/managesieve proxying now supports
  reconnection retrying on more than just connect() failure. Any error
  except a non-temporary authentication failure will result in reconnect
  attempts.
- auth: Lua passdb/userdb leaks stack elements per call, eventually
  causing the stack to become too deep and crashing the auth or
  auth-worker process.
- auth: SASL authentication PLAIN mechanism could be used to trigger
  read buffer overflow. However, this doesn't seem to be exploitable in
  any way.
- auth: v2.3.11 regression: GSSAPI authentication fails because dovecot
  disallows NUL bytes for it.
- dict: Process used too much CPU when iterating keys, because each key
  used a separate write() syscall.
- doveadm-server: Crash could occur if logging was done outside command
  handling. For example http-client could have done debug logging
  afterwards, resulting in either segfault or
  Panic: file http-client.c: line 642 (http_client_context_close):
  assertion failed: (cctx-&gt;clients_list == NULL).
- doveadm-server: v2.3.11 regression: Trying to connect to doveadm server
  process via starttls assert-crashed if there were no ssl=yes listeners:
  Panic: file master-service-ssl.c: line 22 (master_service_ssl_init):
  assertion failed: (service-&gt;ssl_ctx_initialized).
- fts-solr: HTTP requests may have assert-crashed:
  Panic: file http-client-request.c: line 1232 (http_client_request_send_more):
  assertion failed: (req-&gt;payload_input != NULL)
- imap: IMAP NOTIFY could crash with a segmentation fault due to a bad
  configuration that causes errors. Sending the error responses to the
  client can cause the segmentation fault. This can for example happen
  when several namespaces use the same mail storage location.
- imap: IMAP NOTIFY used on a shared namespace that doesn't actually
  exist (e.g. public namespace for a nonexistent user) can crash with a panic:
  Panic: Leaked view for index /tmp/home/asdf/mdbox/dovecot.list.index: Opened in (null):0
- imap: IMAP session can crash with QRESYNC extension if many changes
  are done before asking for expunged mails since last sync.
- imap: Process might hang indefinitely if client disconnects after
  sending some long-running commands pipelined, for example FETCH+LOGOUT.
- lib-compress: Mitigate crashes when configuring a not compiled in
  compression. Errors with compression configuration now distinguish
  between not supported and unknown.
- lib-compression: Using xz/lzma compression in v2.3.11 could have
  written truncated output in some situations. This would result in
  'Broken pipe' read errors when trying to read it back.
- lib-compression: zstd compression could have crashed in some situations:
  Panic: file ostream.c: line 287 (o_stream_sendv_int): assertion failed: (!stream-&gt;blocking)
- lib-dict: dict client could have crashed in some rare situations when
  iterating keys.
- lib-http: Fix several assert-crashes in HTTP client.
- lib-index: v2.3.11 regression: When mails were expunged at the same
  time as lots of new content was being saved to the cache (e.g. cache
  file was lost and is being re-filled) a deadlock could occur with
  dovecot.index.cache / dovecot.index.log.
- lib-index: v2.3.11 regression: dovecot.index.cache file was being
  purged (rewritten) too often when it had a field that hadn't been
  accessed for over 1 month, but less than 2 months. Every cache file
  change caused a purging in this situation.
- lib-mail: MIME parts were not returned correctly by Dovecot MIME parser.
  Regression caused by fixing CVE-2020-12100.
- lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
  was written in a way that may have caused confusion for both IMAP
  clients and Dovecot itself when parsing it. The truncated part is now
  written out using application/octet-stream MIME type.
- lib-mail: v2.3.11 regression: Mail delivery / parsing crashed when the
  10000th MIME part was message/rfc822 (or if parent was multipart/digest):
  Panic: file message-parser.c: line 167 (message_part_append):
  assertion failed: (ctx-&gt;total_parts_count &lt;= ctx-&gt;max_total_mime_parts).
- lib-oauth2: Dovecot incorrectly required oauth2 server introspection
  reply to contain username with invalid token.
- lib-ssl-iostream, lib-dcrypt: Fix building with OpenSSL that has
  deprecated APIs disabled.
- lib-storage: When mail's size is different from the cached one (in
  dovecot.index.cache or Maildir S=size in the filename), this is
  handled by logging 'Cached message size smaller/larger than expected'
  error. However, in some situations this also ended up crashing with:
  Panic: file istream.c: line 315 (i_stream_read_memarea):
  assertion failed: (old_size &lt;= _stream-&gt;pos - _stream-&gt;skip).
- lib-storage: v2.3 regression: Copying/moving mails was taking much more
  memory than before. This was mainly visible when copying/moving
  thousands of mails in a single transaction.
- lib-storage: v2.3.11 regression: Searching messages assert-crashed
  (without FTS): Panic: file message-parser.c: line 174 (message_part_finish):
  assertion failed: (ctx-&gt;nested_parts_count &gt; 0).
- lib: Dovecot v2.3 moved signal handlers around in ioloops,
  causing more CPU usage than in v2.2.
- lib: Fixed JSON parsing: '\' escape sequence may have wrongly resulted
  in error if it happened to be at read boundary. Any NUL characters and
  '\u0000' will now result in parsing error instead of silently
  truncating the data.
- lmtp, submission: Server may hang if SSL client connection disconnects
  during the delivery. If this happened repeated, it could have ended
  up reaching process_limit and preventing any further lmtp/submission
  deliveries.
- lmtp: Proxy does not always properly log TLS connection problems as
  errors; in some cases, only a debug message is logged if enabled.
- lmtp: The LMTP service can hang when commands are pipelined. This can
  particularly occur when one command in the middle of the pipeline fails.
  One example of this occurs for proxied LMTP transactions in which the
  final DATA or BDAT command is pipelined after a failing RCPT command.
- login-proxy: The login_source_ips setting has no effect, and therefore
  the proxy source IPs are not cycled through as they should be.
- master: Process was using 100% CPU in some situations when a broken
  service was being throttled.
- pop3-login: POP3 login would fail with 'Input buffer full' if the
  initial response for SASL was too long.
- stats: Crash would occur when generating openmetrics data for metrics
  using aggregating functions.

Update pigeonhole to version 0.5.15

* CVE-2020-28200: Sieve interpreter is not protected against abusive
  scripts that claim excessive resource usage. Fixed by limiting the
  user CPU time per single script execution and cumulatively over
  several script runs within a configurable timeout period. Sufficiently
  large CPU time usage is summed in the Sieve script binary and execution
  is blocked when the sum exceeds the limit within that time. The block
  is lifted when the script is updated after the resource usage times out.
  (bsc#1187420) Attacker can DoS the mail delivery system
  (jsc#PM-2746) ECO: Dovecot 2.3.15 version upgrade
* Disconnection log messages are now more standardized across services.
  They also always now start with 'Disconnected' prefix.
* managesieve: Commands pipelined together with and just after the
  authenticate command cause these commands to be executed twice.
* duplicate: The test was handled badly in a multiscript (sieve_before,
  sieve_after) scenario in which an earlier script in the sequence with
  a duplicate test succeeded, while a later script caused a runtime
  failure. In that case, the message is recorded for duplicate tracking,
  while the message may not actually have been delivered in the end.
* editheader: Sieve interpreter entered infinite loop at startup when
  the 'editheader' configuration listed an invalid header name. This
  problem can only be triggered by the administrator.
* relational: The Sieve relational extension can cause a segfault at
  compile time. This is triggered by invalid script syntax. The segfault
  happens when this match type is the last argument of the test command.
  This situation is not possible in a valid script; positional arguments
  are normally present after that, which would prevent the segfault.
* sieve: For some Sieve commands the provided mailbox name is not
  properly checked for UTF-8 validity, which can cause assert crashes at
  runtime when an invalid mailbox name is encountered. This can be
  caused by the user by writing a bad Sieve script involving the
  affected commands ('mailboxexists', 'specialuse_exists').
  This can be triggered by the remote sender only when the user has
  written a Sieve script that passes message content to one of the
  affected commands.
* sieve: Large sequences of 8-bit octets passed to certain Sieve
  commands that create or modify message headers that allow UTF-8 text
  (vacation, notify and addheader) can cause the delivery or IMAP
  process (when IMAPSieve is used) to enter a memory-consuming
  semi-infinite loop that ends when the process exceeds its memory
  limits. Logged in users can cause these hangs only for their own
  processes.

		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-31"/>
	<updated date="2021-08-31"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1187418">SUSE bug 1187418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187419">SUSE bug 1187419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187420">SUSE bug 1187420</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28200/">CVE-2020-28200</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29157/">CVE-2021-29157</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632177" comment="dovecot23-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632178" comment="dovecot23-backend-mysql-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632179" comment="dovecot23-backend-pgsql-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632180" comment="dovecot23-backend-sqlite-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632181" comment="dovecot23-devel-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632182" comment="dovecot23-fts-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632183" comment="dovecot23-fts-lucene-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632184" comment="dovecot23-fts-solr-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632185" comment="dovecot23-fts-squat-2.3.15-27.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140398" version="1" class="patch">
	<metadata>
		<title>Security update for xerces-c (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1159552" ref_url="https://bugzilla.suse.com/1159552" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1311" ref_url="https://www.suse.com/security/cve/CVE-2018-1311/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009385.html" source="SUSE-SU"/>
		<description>
This update for xerces-c fixes the following issues:

- CVE-2018-1311: Fixed use-after-free inside XML parser during the scanning of external DTDs (bsc#1159552).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-02"/>
	<updated date="2021-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159552">SUSE bug 1159552</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1311/">CVE-2018-1311</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631972" comment="libxerces-c-3_1-3.1.4-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631973" comment="libxerces-c-devel-3.1.4-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140399" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1179148" ref_url="https://bugzilla.suse.com/1179148" source="BUGZILLA"/>
		<reference ref_id="1179246" ref_url="https://bugzilla.suse.com/1179246" source="BUGZILLA"/>
		<reference ref_id="1180491" ref_url="https://bugzilla.suse.com/1180491" source="BUGZILLA"/>
		<reference ref_id="1180846" ref_url="https://bugzilla.suse.com/1180846" source="BUGZILLA"/>
		<reference ref_id="1181989" ref_url="https://bugzilla.suse.com/1181989" source="BUGZILLA"/>
		<reference ref_id="1183243" ref_url="https://bugzilla.suse.com/1183243" source="BUGZILLA"/>
		<reference ref_id="1186428" ref_url="https://bugzilla.suse.com/1186428" source="BUGZILLA"/>
		<reference ref_id="1186429" ref_url="https://bugzilla.suse.com/1186429" source="BUGZILLA"/>
		<reference ref_id="1186433" ref_url="https://bugzilla.suse.com/1186433" source="BUGZILLA"/>
		<reference ref_id="1186434" ref_url="https://bugzilla.suse.com/1186434" source="BUGZILLA"/>
		<reference ref_id="1188050" ref_url="https://bugzilla.suse.com/1188050" source="BUGZILLA"/>
		<reference ref_id="1189373" ref_url="https://bugzilla.suse.com/1189373" source="BUGZILLA"/>
		<reference ref_id="1189376" ref_url="https://bugzilla.suse.com/1189376" source="BUGZILLA"/>
		<reference ref_id="1189378" ref_url="https://bugzilla.suse.com/1189378" source="BUGZILLA"/>
		<reference ref_id="1189380" ref_url="https://bugzilla.suse.com/1189380" source="BUGZILLA"/>
		<reference ref_id="1189381" ref_url="https://bugzilla.suse.com/1189381" source="BUGZILLA"/>
		<reference ref_id="1189882" ref_url="https://bugzilla.suse.com/1189882" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0089" ref_url="https://www.suse.com/security/cve/CVE-2021-0089/" source="CVE"/>
		<reference ref_id="CVE-2021-28690" ref_url="https://www.suse.com/security/cve/CVE-2021-28690/" source="CVE"/>
		<reference ref_id="CVE-2021-28692" ref_url="https://www.suse.com/security/cve/CVE-2021-28692/" source="CVE"/>
		<reference ref_id="CVE-2021-28693" ref_url="https://www.suse.com/security/cve/CVE-2021-28693/" source="CVE"/>
		<reference ref_id="CVE-2021-28694" ref_url="https://www.suse.com/security/cve/CVE-2021-28694/" source="CVE"/>
		<reference ref_id="CVE-2021-28695" ref_url="https://www.suse.com/security/cve/CVE-2021-28695/" source="CVE"/>
		<reference ref_id="CVE-2021-28696" ref_url="https://www.suse.com/security/cve/CVE-2021-28696/" source="CVE"/>
		<reference ref_id="CVE-2021-28697" ref_url="https://www.suse.com/security/cve/CVE-2021-28697/" source="CVE"/>
		<reference ref_id="CVE-2021-28698" ref_url="https://www.suse.com/security/cve/CVE-2021-28698/" source="CVE"/>
		<reference ref_id="CVE-2021-28699" ref_url="https://www.suse.com/security/cve/CVE-2021-28699/" source="CVE"/>
		<reference ref_id="CVE-2021-28700" ref_url="https://www.suse.com/security/cve/CVE-2021-28700/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009395.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

Security issues fixed:

- CVE-2021-28693: xen/arm: Boot modules are not scrubbed (bsc#1186428)
- CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (bsc#1186429)
- CVE-2021-0089: xen: Speculative Code Store Bypass (bsc#1186433)
- CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (bsc#1186434)

- CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)(bsc#1189373).
- CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation (XSA-379)(bsc#1189376).
- CVE-2021-28698: long running loops in grant table handling (XSA-380)(bsc#1189378).
- CVE-2021-28699: inadequate grant-v2 status frames array bounds check (XSA-382)(bsc#1189380).
- CVE-2021-28700: No memory limit for dom0less domUs (XSA-383)(bsc#1189381).

Other issues fixed:

- Fixed 'Panic on CPU 0: IO-APIC + timer doesn't work!' (bsc#1180491)
- Upstream bug fixes (bsc#1027519)
- Dom0 hangs when pinning CPUs for dom0 with HVM guest (bsc#1179246).
- Fixed Xen SLES11SP4 guest hangs on cluster (bsc#1188050).
- Fixed PVHVM SLES12 SP5 - NMI Watchdog CPU Stuck (bsc#1180846).
- Core cannot be opened when using xl dump-core of VM with PTF (bsc#1183243).
- Prevent superpage allocation in the LAPIC and ACPI_INFO range (bsc#1189882).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-02"/>
	<updated date="2021-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179148">SUSE bug 1179148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179246">SUSE bug 1179246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180491">SUSE bug 1180491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180846">SUSE bug 1180846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181989">SUSE bug 1181989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183243">SUSE bug 1183243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186428">SUSE bug 1186428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186429">SUSE bug 1186429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186433">SUSE bug 1186433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186434">SUSE bug 1186434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188050">SUSE bug 1188050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189373">SUSE bug 1189373</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189376">SUSE bug 1189376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189378">SUSE bug 1189378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189380">SUSE bug 1189380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189381">SUSE bug 1189381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189882">SUSE bug 1189882</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0089/">CVE-2021-0089</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28690/">CVE-2021-28690</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-28692/">CVE-2021-28692</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28693/">CVE-2021-28693</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28694/">CVE-2021-28694</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28695/">CVE-2021-28695</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28696/">CVE-2021-28696</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28697/">CVE-2021-28697</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28698/">CVE-2021-28698</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28699/">CVE-2021-28699</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28700/">CVE-2021-28700</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632260" comment="xen-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632261" comment="xen-devel-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632262" comment="xen-libs-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632263" comment="xen-tools-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632264" comment="xen-tools-domU-4.12.4_12-3.52.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140400" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1129714" ref_url="https://bugzilla.suse.com/1129714" source="BUGZILLA"/>
		<reference ref_id="1172640" ref_url="https://bugzilla.suse.com/1172640" source="BUGZILLA"/>
		<reference ref_id="1186406" ref_url="https://bugzilla.suse.com/1186406" source="BUGZILLA"/>
		<reference ref_id="1186583" ref_url="https://bugzilla.suse.com/1186583" source="BUGZILLA"/>
		<reference ref_id="1186586" ref_url="https://bugzilla.suse.com/1186586" source="BUGZILLA"/>
		<reference ref_id="1186587" ref_url="https://bugzilla.suse.com/1186587" source="BUGZILLA"/>
		<reference ref_id="1186596" ref_url="https://bugzilla.suse.com/1186596" source="BUGZILLA"/>
		<reference ref_id="1186597" ref_url="https://bugzilla.suse.com/1186597" source="BUGZILLA"/>
		<reference ref_id="1186598" ref_url="https://bugzilla.suse.com/1186598" source="BUGZILLA"/>
		<reference ref_id="1186600" ref_url="https://bugzilla.suse.com/1186600" source="BUGZILLA"/>
		<reference ref_id="1186603" ref_url="https://bugzilla.suse.com/1186603" source="BUGZILLA"/>
		<reference ref_id="1186604" ref_url="https://bugzilla.suse.com/1186604" source="BUGZILLA"/>
		<reference ref_id="1186605" ref_url="https://bugzilla.suse.com/1186605" source="BUGZILLA"/>
		<reference ref_id="1186613" ref_url="https://bugzilla.suse.com/1186613" source="BUGZILLA"/>
		<reference ref_id="1186614" ref_url="https://bugzilla.suse.com/1186614" source="BUGZILLA"/>
		<reference ref_id="1186615" ref_url="https://bugzilla.suse.com/1186615" source="BUGZILLA"/>
		<reference ref_id="1186616" ref_url="https://bugzilla.suse.com/1186616" source="BUGZILLA"/>
		<reference ref_id="1186658" ref_url="https://bugzilla.suse.com/1186658" source="BUGZILLA"/>
		<reference ref_id="1186660" ref_url="https://bugzilla.suse.com/1186660" source="BUGZILLA"/>
		<reference ref_id="1186757" ref_url="https://bugzilla.suse.com/1186757" source="BUGZILLA"/>
		<reference ref_id="1186758" ref_url="https://bugzilla.suse.com/1186758" source="BUGZILLA"/>
		<reference ref_id="1186762" ref_url="https://bugzilla.suse.com/1186762" source="BUGZILLA"/>
		<reference ref_id="1186763" ref_url="https://bugzilla.suse.com/1186763" source="BUGZILLA"/>
		<reference ref_id="1186849" ref_url="https://bugzilla.suse.com/1186849" source="BUGZILLA"/>
		<reference ref_id="1186859" ref_url="https://bugzilla.suse.com/1186859" source="BUGZILLA"/>
		<reference ref_id="1186861" ref_url="https://bugzilla.suse.com/1186861" source="BUGZILLA"/>
		<reference ref_id="1186863" ref_url="https://bugzilla.suse.com/1186863" source="BUGZILLA"/>
		<reference ref_id="1189142" ref_url="https://bugzilla.suse.com/1189142" source="BUGZILLA"/>
		<reference ref_id="1189348" ref_url="https://bugzilla.suse.com/1189348" source="BUGZILLA"/>
		<reference ref_id="1189350" ref_url="https://bugzilla.suse.com/1189350" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17539" ref_url="https://www.suse.com/security/cve/CVE-2019-17539/" source="CVE"/>
		<reference ref_id="CVE-2019-9721" ref_url="https://www.suse.com/security/cve/CVE-2019-9721/" source="CVE"/>
		<reference ref_id="CVE-2020-13904" ref_url="https://www.suse.com/security/cve/CVE-2020-13904/" source="CVE"/>
		<reference ref_id="CVE-2020-20448" ref_url="https://www.suse.com/security/cve/CVE-2020-20448/" source="CVE"/>
		<reference ref_id="CVE-2020-20451" ref_url="https://www.suse.com/security/cve/CVE-2020-20451/" source="CVE"/>
		<reference ref_id="CVE-2020-21041" ref_url="https://www.suse.com/security/cve/CVE-2020-21041/" source="CVE"/>
		<reference ref_id="CVE-2020-21688" ref_url="https://www.suse.com/security/cve/CVE-2020-21688/" source="CVE"/>
		<reference ref_id="CVE-2020-21697" ref_url="https://www.suse.com/security/cve/CVE-2020-21697/" source="CVE"/>
		<reference ref_id="CVE-2020-22015" ref_url="https://www.suse.com/security/cve/CVE-2020-22015/" source="CVE"/>
		<reference ref_id="CVE-2020-22016" ref_url="https://www.suse.com/security/cve/CVE-2020-22016/" source="CVE"/>
		<reference ref_id="CVE-2020-22017" ref_url="https://www.suse.com/security/cve/CVE-2020-22017/" source="CVE"/>
		<reference ref_id="CVE-2020-22019" ref_url="https://www.suse.com/security/cve/CVE-2020-22019/" source="CVE"/>
		<reference ref_id="CVE-2020-22020" ref_url="https://www.suse.com/security/cve/CVE-2020-22020/" source="CVE"/>
		<reference ref_id="CVE-2020-22021" ref_url="https://www.suse.com/security/cve/CVE-2020-22021/" source="CVE"/>
		<reference ref_id="CVE-2020-22022" ref_url="https://www.suse.com/security/cve/CVE-2020-22022/" source="CVE"/>
		<reference ref_id="CVE-2020-22023" ref_url="https://www.suse.com/security/cve/CVE-2020-22023/" source="CVE"/>
		<reference ref_id="CVE-2020-22025" ref_url="https://www.suse.com/security/cve/CVE-2020-22025/" source="CVE"/>
		<reference ref_id="CVE-2020-22026" ref_url="https://www.suse.com/security/cve/CVE-2020-22026/" source="CVE"/>
		<reference ref_id="CVE-2020-22031" ref_url="https://www.suse.com/security/cve/CVE-2020-22031/" source="CVE"/>
		<reference ref_id="CVE-2020-22032" ref_url="https://www.suse.com/security/cve/CVE-2020-22032/" source="CVE"/>
		<reference ref_id="CVE-2020-22033" ref_url="https://www.suse.com/security/cve/CVE-2020-22033/" source="CVE"/>
		<reference ref_id="CVE-2020-22034" ref_url="https://www.suse.com/security/cve/CVE-2020-22034/" source="CVE"/>
		<reference ref_id="CVE-2020-22038" ref_url="https://www.suse.com/security/cve/CVE-2020-22038/" source="CVE"/>
		<reference ref_id="CVE-2020-22039" ref_url="https://www.suse.com/security/cve/CVE-2020-22039/" source="CVE"/>
		<reference ref_id="CVE-2020-22043" ref_url="https://www.suse.com/security/cve/CVE-2020-22043/" source="CVE"/>
		<reference ref_id="CVE-2020-22044" ref_url="https://www.suse.com/security/cve/CVE-2020-22044/" source="CVE"/>
		<reference ref_id="CVE-2020-22046" ref_url="https://www.suse.com/security/cve/CVE-2020-22046/" source="CVE"/>
		<reference ref_id="CVE-2020-22048" ref_url="https://www.suse.com/security/cve/CVE-2020-22048/" source="CVE"/>
		<reference ref_id="CVE-2020-22049" ref_url="https://www.suse.com/security/cve/CVE-2020-22049/" source="CVE"/>
		<reference ref_id="CVE-2020-22054" ref_url="https://www.suse.com/security/cve/CVE-2020-22054/" source="CVE"/>
		<reference ref_id="CVE-2021-38114" ref_url="https://www.suse.com/security/cve/CVE-2021-38114/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

- CVE-2019-9721: Fixed a denial of service in the subtitle decoder in handle_open_brace from libavcodec/htmlsubtitles.c (bsc#1129714).
- CVE-2020-22046: Fixed a denial of service vulnerability due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c (bsc#1186849).
- CVE-2020-22048: Fixed a denial of service vulnerability due to a memory leak in the ff_frame_pool_get function in framepool.c (bsc#1186859).
- CVE-2020-22049: Fixed a denial of service vulnerability caused by a memory leak in the wtvfile_open_sector function in wtvdec.c (bsc#1186861).
- CVE-2020-22054: Fixed a denial of service vulnerability due to a memory leak in the av_dict_set function in dict.c (bsc#1186863).
- CVE-2020-13904: Fixed use-after-free via a crafted EXTINF duration in an m3u8 file (bsc#1172640).
- CVE-2020-21041: Fixed buffer overflow vulnerability via apng_do_inverse_blend in libavcodec/pngenc.c  (bsc#1186406).
- CVE-2019-17539: Fixed NULL pointer dereference in avcodec_open2 in libavcodec/utils.c (bsc# 1154065).
- CVE-2020-22026: Fixed buffer overflow vulnerability in config_input() at libavfilter/af_tremolo.c (bsc#1186583).
- CVE-2020-22021: Fixed buffer overflow vulnerability in filter_edges function in libavfilter/vf_yadif.c (bsc#1186586).
- CVE-2020-22020: Fixed buffer overflow vulnerability in build_diff_map() in libavfilter/vf_fieldmatch.c (bsc#1186587).
- CVE-2020-22015: Fixed buffer overflow vulnerability in mov_write_video_tag() due to the out of bounds in libavformat/movenc.c (bsc#1186596).
- CVE-2020-22016: Fixed a heap-based Buffer Overflow vulnerability at libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- CVE-2020-22017: Fixed a heap-based Buffer Overflow vulnerability in ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- CVE-2020-22022: Fixed a heap-based Buffer Overflow vulnerability in filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- CVE-2020-22023: Fixed a heap-based Buffer Overflow vulnerability in filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- CVE-2020-22025: Fixed a heap-based Buffer Overflow vulnerability in gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- CVE-2020-22031: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_w3fdif.c in filter16_complex_low() (bsc#1186613).
- CVE-2020-22032: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- CVE-2020-22034: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_floodfill.c (bsc#1186616).
- CVE-2020-20451: Fixed denial of service issue due to resource management errors via fftools/cmdutils.c (bsc#1186658).
- CVE-2020-20448: Fixed divide by zero issue via libavcodec/ratecontrol.c (bsc#1186660).
- CVE-2020-22038: Fixed denial of service vulnerability due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c (bsc#1186757).
- CVE-2020-22039: Fixed denial of service vulnerability due to a memory leak in the inavi_add_ientry function (bsc#1186758).
- CVE-2020-22043: Fixed denial of service vulnerability due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c (bsc#1186762).
- CVE-2020-22044: Fixed denial of service vulnerability due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c (bsc#1186763).
- CVE-2020-22033,CVE-2020-22019: Fixed a heap-based Buffer Overflow Vulnerability at libavfilter/vf_vmafmotion.c in convolution_y_8bit() and in convolution_y_10bit() in libavfilter/vf_vmafmotion.c (bsc#1186615, bsc#1186597).
- CVE-2020-21688: Fixed a heap-use-after-free in the av_freep function in libavutil/mem.c (bsc#1189348).
- CVE-2020-21697: Fixed a heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c (bsc#1189350).
- CVE-2021-38114: Fixed a not checked return value of the init_vlc function (bsc#1189142).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-02"/>
	<updated date="2021-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1129714">SUSE bug 1129714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172640">SUSE bug 1172640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186406">SUSE bug 1186406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186583">SUSE bug 1186583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186586">SUSE bug 1186586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186587">SUSE bug 1186587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186596">SUSE bug 1186596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186597">SUSE bug 1186597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186598">SUSE bug 1186598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186600">SUSE bug 1186600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186603">SUSE bug 1186603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186604">SUSE bug 1186604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186605">SUSE bug 1186605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186613">SUSE bug 1186613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186614">SUSE bug 1186614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186615">SUSE bug 1186615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186616">SUSE bug 1186616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186658">SUSE bug 1186658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186660">SUSE bug 1186660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186757">SUSE bug 1186757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186758">SUSE bug 1186758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186762">SUSE bug 1186762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186763">SUSE bug 1186763</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186849">SUSE bug 1186849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186859">SUSE bug 1186859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186861">SUSE bug 1186861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186863">SUSE bug 1186863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189142">SUSE bug 1189142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189348">SUSE bug 1189348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189350">SUSE bug 1189350</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17539/">CVE-2019-17539</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9721/">CVE-2019-9721</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13904/">CVE-2020-13904</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20448/">CVE-2020-20448</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20451/">CVE-2020-20451</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-21041/">CVE-2020-21041</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-21688/">CVE-2020-21688</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-21697/">CVE-2020-21697</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22015/">CVE-2020-22015</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-22016/">CVE-2020-22016</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22017/">CVE-2020-22017</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22019/">CVE-2020-22019</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22020/">CVE-2020-22020</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22021/">CVE-2020-22021</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22022/">CVE-2020-22022</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22023/">CVE-2020-22023</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22025/">CVE-2020-22025</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22026/">CVE-2020-22026</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22031/">CVE-2020-22031</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22032/">CVE-2020-22032</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22033/">CVE-2020-22033</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22034/">CVE-2020-22034</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22038/">CVE-2020-22038</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22039/">CVE-2020-22039</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22043/">CVE-2020-22043</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22044/">CVE-2020-22044</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22046/">CVE-2020-22046</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22048/">CVE-2020-22048</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22049/">CVE-2020-22049</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22054/">CVE-2020-22054</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-38114/">CVE-2021-38114</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631204" comment="libavcodec-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631205" comment="libavcodec57-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631161" comment="libavcodec57-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631206" comment="libavdevice-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631207" comment="libavdevice57-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631164" comment="libavdevice57-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631208" comment="libavfilter-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631209" comment="libavfilter6-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631167" comment="libavfilter6-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631210" comment="libavformat-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631211" comment="libavformat57-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631170" comment="libavformat57-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631212" comment="libavresample-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631213" comment="libavresample3-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631173" comment="libavresample3-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631214" comment="libavutil-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631215" comment="libavutil55-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631176" comment="libavutil55-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631216" comment="libpostproc-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631217" comment="libpostproc54-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631179" comment="libpostproc54-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631218" comment="libswresample-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631219" comment="libswresample2-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631182" comment="libswresample2-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631220" comment="libswscale-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631221" comment="libswscale4-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631185" comment="libswscale4-32bit-3.4.2-4.34.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140401" version="1" class="patch">
	<metadata>
		<title>Security update for libesmtp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1160462" ref_url="https://bugzilla.suse.com/1160462" source="BUGZILLA"/>
		<reference ref_id="1189097" ref_url="https://bugzilla.suse.com/1189097" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19977" ref_url="https://www.suse.com/security/cve/CVE-2019-19977/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2937-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009397.html" source="SUSE-SU"/>
		<description>
This update for libesmtp fixes the following issues:

- CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c (bsc#1160462).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-03"/>
	<updated date="2021-09-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160462">SUSE bug 1160462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189097">SUSE bug 1189097</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19977/">CVE-2019-19977</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009629467" comment="libesmtp-1.0.6-150.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629468" comment="libesmtp-devel-1.0.6-150.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140402" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1185476" ref_url="https://bugzilla.suse.com/1185476" source="BUGZILLA"/>
		<reference ref_id="1188564" ref_url="https://bugzilla.suse.com/1188564" source="BUGZILLA"/>
		<reference ref_id="1188565" ref_url="https://bugzilla.suse.com/1188565" source="BUGZILLA"/>
		<reference ref_id="1188566" ref_url="https://bugzilla.suse.com/1188566" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2341" ref_url="https://www.suse.com/security/cve/CVE-2021-2341/" source="CVE"/>
		<reference ref_id="CVE-2021-2369" ref_url="https://www.suse.com/security/cve/CVE-2021-2369/" source="CVE"/>
		<reference ref_id="CVE-2021-2388" ref_url="https://www.suse.com/security/cve/CVE-2021-2388/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009404.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to jdk-11.0.12+7
- CVE-2021-2369: Fixed JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565)
- CVE-2021-2388: Fixed a flaw inside the Hotspot component performed range check elimination. (bsc#1188566)
- CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-03"/>
	<updated date="2021-09-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185476">SUSE bug 1185476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188564">SUSE bug 1188564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188565">SUSE bug 1188565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188566">SUSE bug 1188566</bugzilla>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-2341/">CVE-2021-2341</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-2369/">CVE-2021-2369</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-2388/">CVE-2021-2388</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626464" comment="java-11-openjdk-11.0.12.0-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626465" comment="java-11-openjdk-demo-11.0.12.0-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626466" comment="java-11-openjdk-devel-11.0.12.0-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626467" comment="java-11-openjdk-headless-11.0.12.0-3.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140403" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Low)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1189521" ref_url="https://bugzilla.suse.com/1189521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3712" ref_url="https://www.suse.com/security/cve/CVE-2021-3712/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2968-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009417.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. 
  Read buffer overruns processing ASN.1 strings (bsc#1189521).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-07"/>
	<updated date="2021-09-07"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1189521">SUSE bug 1189521</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3712/">CVE-2021-3712</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632365" comment="libopenssl-1_1-devel-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632355" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632366" comment="libopenssl1_1-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632357" comment="libopenssl1_1-32bit-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632367" comment="libopenssl1_1-hmac-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632359" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632368" comment="openssl-1_1-1.1.0i-14.21.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140404" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Low)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1189521" ref_url="https://bugzilla.suse.com/1189521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3712" ref_url="https://www.suse.com/security/cve/CVE-2021-3712/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2994-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009429.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

- CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. 
  Read buffer overruns processing ASN.1 strings (bsc#1189521).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-09"/>
	<updated date="2021-09-09"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1189521">SUSE bug 1189521</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3712/">CVE-2021-3712</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632369" comment="libopenssl-1_0_0-devel-1.0.2p-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632370" comment="libopenssl1_0_0-1.0.2p-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632371" comment="openssl-1_0_0-1.0.2p-3.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140405" version="1" class="patch">
	<metadata>
		<title>Security update for openvswitch (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1117483" ref_url="https://bugzilla.suse.com/1117483" source="BUGZILLA"/>
		<reference ref_id="1181345" ref_url="https://bugzilla.suse.com/1181345" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27827" ref_url="https://www.suse.com/security/cve/CVE-2020-27827/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008270.html" source="SUSE-SU"/>
		<description>
This update for openvswitch fixes the following issues:
	  
- openvswitch was updated to 2.11.5 
- CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345)	  
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-03"/>
	<updated date="2021-02-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1117483">SUSE bug 1117483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181345">SUSE bug 1181345</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27827/">CVE-2020-27827</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505485" comment="libopenvswitch-2_11-0-2.11.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505486" comment="openvswitch-2.11.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505487" comment="openvswitch-devel-2.11.5-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140406" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1184123" ref_url="https://bugzilla.suse.com/1184123" source="BUGZILLA"/>
		<reference ref_id="1190381" ref_url="https://bugzilla.suse.com/1190381" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3781" ref_url="https://www.suse.com/security/cve/CVE-2021-3781/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009444.html" source="SUSE-SU"/>
		<description>
This update for ghostscript fixes the following issues:

Security issue fixed:

- CVE-2021-3781: Fixed a trivial -dSAFER bypass command injection (bsc#1190381)

Also a hardening fix was added:

- Link as position independent executable (bsc#1184123)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-15"/>
	<updated date="2021-09-15"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1184123">SUSE bug 1184123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190381">SUSE bug 1190381</bugzilla>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3781/">CVE-2021-3781</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632751" comment="ghostscript-9.52-155.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632752" comment="ghostscript-devel-9.52-155.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632753" comment="ghostscript-x11-9.52-155.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632754" comment="libspectre-devel-0.2.8-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632755" comment="libspectre1-0.2.8-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140407" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1189724" ref_url="https://bugzilla.suse.com/1189724" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-38171" ref_url="https://www.suse.com/security/cve/CVE-2021-38171/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009506.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

- CVE-2021-38171: Fixed adts_decode_extradata in libavformat/adtsenc.c to check the init_get_bits return value (bsc#1189724).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-23"/>
	<updated date="2021-09-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189724">SUSE bug 1189724</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38171/">CVE-2021-38171</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009633524" comment="libavcodec-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633525" comment="libavcodec57-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633481" comment="libavcodec57-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633526" comment="libavdevice-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633527" comment="libavdevice57-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633484" comment="libavdevice57-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633528" comment="libavfilter-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633529" comment="libavfilter6-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633487" comment="libavfilter6-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633530" comment="libavformat-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633531" comment="libavformat57-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633490" comment="libavformat57-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633532" comment="libavresample-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633533" comment="libavresample3-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633493" comment="libavresample3-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633534" comment="libavutil-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633535" comment="libavutil55-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633496" comment="libavutil55-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633536" comment="libpostproc-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633537" comment="libpostproc54-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633499" comment="libpostproc54-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633538" comment="libswresample-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633539" comment="libswresample2-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633502" comment="libswresample2-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633540" comment="libswscale-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633541" comment="libswscale4-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633505" comment="libswscale4-32bit-3.4.2-4.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140408" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188697" ref_url="https://bugzilla.suse.com/1188697" source="BUGZILLA"/>
		<reference ref_id="1190701" ref_url="https://bugzilla.suse.com/1190701" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21806" ref_url="https://www.suse.com/security/cve/CVE-2021-21806/" source="CVE"/>
		<reference ref_id="CVE-2021-30858" ref_url="https://www.suse.com/security/cve/CVE-2021-30858/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009531.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.32.4
- CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve arbitrary code execution. (bsc#1190701)
- CVE-2021-21806: Fixed an exploitable use-after-free vulnerability via specially crafted HTML web page. (bsc#1188697)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-04"/>
	<updated date="2021-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188697">SUSE bug 1188697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190701">SUSE bug 1190701</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21806/">CVE-2021-21806</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30858/">CVE-2021-30858</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009634235" comment="libjavascriptcoregtk-4_0-18-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634236" comment="libwebkit2gtk-4_0-37-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634111" comment="libwebkit2gtk3-lang-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634237" comment="typelib-1_0-JavaScriptCore-4_0-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634238" comment="typelib-1_0-WebKit2-4_0-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634239" comment="typelib-1_0-WebKit2WebExtension-4_0-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634240" comment="webkit2gtk-4_0-injected-bundles-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634241" comment="webkit2gtk3-devel-2.32.4-3.82.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140409" version="1" class="patch">
	<metadata>
		<title>Security update for grilo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1189839" ref_url="https://bugzilla.suse.com/1189839" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-39365" ref_url="https://www.suse.com/security/cve/CVE-2021-39365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009536.html" source="SUSE-SU"/>
		<description>
This update for grilo fixes the following issues:

- CVE-2021-39365: Fixed missing TLS certificate verification (bsc#1189839).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-06"/>
	<updated date="2021-10-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189839">SUSE bug 1189839</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39365/">CVE-2021-39365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009634455" comment="grilo-devel-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634456" comment="libgrilo-0_3-0-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634457" comment="libgrlnet-0_3-0-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634458" comment="libgrlpls-0_3-0-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634459" comment="typelib-1_0-Grl-0_3-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634460" comment="typelib-1_0-GrlNet-0_3-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634461" comment="typelib-1_0-GrlPls-0_3-0.3.4-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140410" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1190373" ref_url="https://bugzilla.suse.com/1190373" source="BUGZILLA"/>
		<reference ref_id="1190374" ref_url="https://bugzilla.suse.com/1190374" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22946" ref_url="https://www.suse.com/security/cve/CVE-2021-22946/" source="CVE"/>
		<reference ref_id="CVE-2021-22947" ref_url="https://www.suse.com/security/cve/CVE-2021-22947/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3297-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009542.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2021-22947: Fixed STARTTLS protocol injection via MITM (bsc#1190374).
- CVE-2021-22946: Fixed protocol downgrade required TLS bypassed (bsc#1190373).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-06"/>
	<updated date="2021-10-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1190373">SUSE bug 1190373</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190374">SUSE bug 1190374</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22946/">CVE-2021-22946</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22947/">CVE-2021-22947</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009634000" comment="curl-7.60.0-25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634001" comment="libcurl-devel-7.60.0-25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634002" comment="libcurl4-7.60.0-25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633986" comment="libcurl4-32bit-7.60.0-25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140411" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188891" ref_url="https://bugzilla.suse.com/1188891" source="BUGZILLA"/>
		<reference ref_id="1189547" ref_url="https://bugzilla.suse.com/1189547" source="BUGZILLA"/>
		<reference ref_id="1190269" ref_url="https://bugzilla.suse.com/1190269" source="BUGZILLA"/>
		<reference ref_id="1190274" ref_url="https://bugzilla.suse.com/1190274" source="BUGZILLA"/>
		<reference ref_id="1190710" ref_url="https://bugzilla.suse.com/1190710" source="BUGZILLA"/>
		<reference ref_id="1191332" ref_url="https://bugzilla.suse.com/1191332" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29980" ref_url="https://www.suse.com/security/cve/CVE-2021-29980/" source="CVE"/>
		<reference ref_id="CVE-2021-29981" ref_url="https://www.suse.com/security/cve/CVE-2021-29981/" source="CVE"/>
		<reference ref_id="CVE-2021-29982" ref_url="https://www.suse.com/security/cve/CVE-2021-29982/" source="CVE"/>
		<reference ref_id="CVE-2021-29983" ref_url="https://www.suse.com/security/cve/CVE-2021-29983/" source="CVE"/>
		<reference ref_id="CVE-2021-29984" ref_url="https://www.suse.com/security/cve/CVE-2021-29984/" source="CVE"/>
		<reference ref_id="CVE-2021-29985" ref_url="https://www.suse.com/security/cve/CVE-2021-29985/" source="CVE"/>
		<reference ref_id="CVE-2021-29986" ref_url="https://www.suse.com/security/cve/CVE-2021-29986/" source="CVE"/>
		<reference ref_id="CVE-2021-29987" ref_url="https://www.suse.com/security/cve/CVE-2021-29987/" source="CVE"/>
		<reference ref_id="CVE-2021-29988" ref_url="https://www.suse.com/security/cve/CVE-2021-29988/" source="CVE"/>
		<reference ref_id="CVE-2021-29989" ref_url="https://www.suse.com/security/cve/CVE-2021-29989/" source="CVE"/>
		<reference ref_id="CVE-2021-29990" ref_url="https://www.suse.com/security/cve/CVE-2021-29990/" source="CVE"/>
		<reference ref_id="CVE-2021-29991" ref_url="https://www.suse.com/security/cve/CVE-2021-29991/" source="CVE"/>
		<reference ref_id="CVE-2021-32810" ref_url="https://www.suse.com/security/cve/CVE-2021-32810/" source="CVE"/>
		<reference ref_id="CVE-2021-38492" ref_url="https://www.suse.com/security/cve/CVE-2021-38492/" source="CVE"/>
		<reference ref_id="CVE-2021-38495" ref_url="https://www.suse.com/security/cve/CVE-2021-38495/" source="CVE"/>
		<reference ref_id="CVE-2021-38496" ref_url="https://www.suse.com/security/cve/CVE-2021-38496/" source="CVE"/>
		<reference ref_id="CVE-2021-38497" ref_url="https://www.suse.com/security/cve/CVE-2021-38497/" source="CVE"/>
		<reference ref_id="CVE-2021-38498" ref_url="https://www.suse.com/security/cve/CVE-2021-38498/" source="CVE"/>
		<reference ref_id="CVE-2021-38500" ref_url="https://www.suse.com/security/cve/CVE-2021-38500/" source="CVE"/>
		<reference ref_id="CVE-2021-38501" ref_url="https://www.suse.com/security/cve/CVE-2021-38501/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009561.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

This update contains the Firefox Extended Support Release 91.2.0 ESR.

Firefox Extended Support Release 91.2.0 ESR

* Fixed: Various stability, functionality, and security fixes
 MFSA 2021-45 (bsc#1191332)
* CVE-2021-38496: Use-after-free in MessageTask
* CVE-2021-38497: Validation message could have been overlaid on another origin
* CVE-2021-38498: Use-after-free of nsLanguageAtomService object
* CVE-2021-32810: Data race in crossbeam-deque

  https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
   
* CVE-2021-38500 (bmo#1725854, bmo#1728321)
  Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
  and Firefox ESR 91.2
* CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
  Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2

- Fixed crash in FIPS mode (bsc#1190710)

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-40 (bsc#1190269, bsc#1190274):

* CVE-2021-38492: Navigating to `mk:` URL scheme could load Internet Explorer
* CVE-2021-38495: Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1

Firefox Extended Support Release 91.0.1 ESR

* Fixed: Fixed an issue causing buttons on the tab bar to be
  resized when loading certain websites (bug 1704404)
* Fixed: Fixed an issue which caused tabs from private windows
  to be visible in non-private windows when viewing switch-to-
  tab results in the address bar panel (bug 1720369)
* Fixed: Various stability fixes
* Fixed: Security fix MFSA 2021-37 (bsc#1189547)
* CVE-2021-29991 (bmo#1724896)
  Header Splitting possible with HTTP/3 Responses

Firefox Extended Support Release 91.0 ESR

* New: Some of the highlights of the new Extended Support Release are:

  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded 'just in time' if you decide to 'Log in with Facebook'
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We’ve improved functionality and design for a number of
    Firefox search features:
    * Selecting a search engine at the bottom of the search
      panel now enters search mode for that engine, allowing you to
      see suggestions (if available) for your search terms. The old
      behavior (immediately performing a search) is available with
      a shift-click.
    * When Firefox autocompletes the URL of one of your search
      engines, you can now search with that engine directly in the
      address bar by selecting the shortcut in the address bar
      results.
    * We’ve added buttons at the bottom of the search panel to
      allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
* Changed: Firefox no longer supports Adobe Flash. There is no
  setting available to re-enable Flash support.
* Enterprise: Various bug fixes and new policies have been
  implemented in the latest version of Firefox. See more
  details in the Firefox for Enterprise 91 Release Notes.

  MFSA 2021-33 (bsc#1188891):

* CVE-2021-29986: Race condition when resolving DNS names could have led to
  memory corruption
* CVE-2021-29981: Live range splitting could have led to conflicting
  assignments in the JIT
* CVE-2021-29988: Memory corruption as a result of incorrect style treatment
* CVE-2021-29983: Firefox for Android could get stuck in fullscreen mode
* CVE-2021-29984: Incorrect instruction reordering during JIT optimization
* CVE-2021-29980: Uninitialized memory in a canvas object could have led to
  memory corruption
* CVE-2021-29987: Users could have been tricked into accepting unwanted
  permissions on Linux
* CVE-2021-29985: Use-after-free media channels
* CVE-2021-29982: Single bit data leak due to incorrect JIT optimization and
  type confusion
* CVE-2021-29989: Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
* CVE-2021-29990: Memory safety bugs fixed in Firefox 91
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-11"/>
	<updated date="2021-10-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188891">SUSE bug 1188891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189547">SUSE bug 1189547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190269">SUSE bug 1190269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190274">SUSE bug 1190274</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190710">SUSE bug 1190710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191332">SUSE bug 1191332</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29980/">CVE-2021-29980</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29981/">CVE-2021-29981</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29982/">CVE-2021-29982</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29983/">CVE-2021-29983</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29984/">CVE-2021-29984</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29985/">CVE-2021-29985</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29986/">CVE-2021-29986</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29987/">CVE-2021-29987</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29988/">CVE-2021-29988</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29989/">CVE-2021-29989</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29990/">CVE-2021-29990</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29991/">CVE-2021-29991</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32810/">CVE-2021-32810</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38492/">CVE-2021-38492</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38495/">CVE-2021-38495</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38496/">CVE-2021-38496</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38497/">CVE-2021-38497</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38498/">CVE-2021-38498</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38500/">CVE-2021-38500</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38501/">CVE-2021-38501</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009651323" comment="MozillaFirefox-91.2.0-3.155.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633347" comment="MozillaFirefox-branding-SLE-91-4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651324" comment="MozillaFirefox-devel-91.2.0-3.155.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651325" comment="MozillaFirefox-translations-common-91.2.0-3.155.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651326" comment="MozillaFirefox-translations-other-91.2.0-3.155.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140412" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1189387" ref_url="https://bugzilla.suse.com/1189387" source="BUGZILLA"/>
		<reference ref_id="1190666" ref_url="https://bugzilla.suse.com/1190666" source="BUGZILLA"/>
		<reference ref_id="1190669" ref_url="https://bugzilla.suse.com/1190669" source="BUGZILLA"/>
		<reference ref_id="1190702" ref_url="https://bugzilla.suse.com/1190702" source="BUGZILLA"/>
		<reference ref_id="1190703" ref_url="https://bugzilla.suse.com/1190703" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33193" ref_url="https://www.suse.com/security/cve/CVE-2021-33193/" source="CVE"/>
		<reference ref_id="CVE-2021-34798" ref_url="https://www.suse.com/security/cve/CVE-2021-34798/" source="CVE"/>
		<reference ref_id="CVE-2021-36160" ref_url="https://www.suse.com/security/cve/CVE-2021-36160/" source="CVE"/>
		<reference ref_id="CVE-2021-39275" ref_url="https://www.suse.com/security/cve/CVE-2021-39275/" source="CVE"/>
		<reference ref_id="CVE-2021-40438" ref_url="https://www.suse.com/security/cve/CVE-2021-40438/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009564.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703)
- CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702)
- CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)
- CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)
- CVE-2021-33193: Fixed request splitting via HTTP/2 method injection and mod_proxy. (bsc#1189387)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-12"/>
	<updated date="2021-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189387">SUSE bug 1189387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190666">SUSE bug 1190666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190669">SUSE bug 1190669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190702">SUSE bug 1190702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190703">SUSE bug 1190703</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-33193/">CVE-2021-33193</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-34798/">CVE-2021-34798</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36160/">CVE-2021-36160</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-39275/">CVE-2021-39275</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-40438/">CVE-2021-40438</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009633995" comment="apache2-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633996" comment="apache2-devel-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633979" comment="apache2-doc-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633997" comment="apache2-prefork-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633998" comment="apache2-utils-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633999" comment="apache2-worker-2.4.33-3.55.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140413" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1186489" ref_url="https://bugzilla.suse.com/1186489" source="BUGZILLA"/>
		<reference ref_id="1187911" ref_url="https://bugzilla.suse.com/1187911" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33574" ref_url="https://www.suse.com/security/cve/CVE-2021-33574/" source="CVE"/>
		<reference ref_id="CVE-2021-35942" ref_url="https://www.suse.com/security/cve/CVE-2021-35942/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009579.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

- CVE-2021-35942: wordexp: handle overflow in positional parameter number (bsc#1187911)
- CVE-2021-33574: Use __pthread_attr_copy in mq_notify (bsc#1186489)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-12"/>
	<updated date="2021-10-12"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1186489">SUSE bug 1186489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187911">SUSE bug 1187911</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33574/">CVE-2021-33574</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35942/">CVE-2021-35942</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009634587" comment="glibc-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634544" comment="glibc-32bit-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634588" comment="glibc-devel-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634569" comment="glibc-devel-32bit-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634589" comment="glibc-devel-static-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634590" comment="glibc-extra-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634547" comment="glibc-i18ndata-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634548" comment="glibc-info-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634591" comment="glibc-locale-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634592" comment="glibc-locale-base-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634551" comment="glibc-locale-base-32bit-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634593" comment="glibc-profile-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634594" comment="glibc-utils-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634595" comment="nscd-2.26-13.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140414" version="1" class="patch">
	<metadata>
		<title>Security update for strongswan (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1167880" ref_url="https://bugzilla.suse.com/1167880" source="BUGZILLA"/>
		<reference ref_id="1191367" ref_url="https://bugzilla.suse.com/1191367" source="BUGZILLA"/>
		<reference ref_id="1191435" ref_url="https://bugzilla.suse.com/1191435" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-41990" ref_url="https://www.suse.com/security/cve/CVE-2021-41990/" source="CVE"/>
		<reference ref_id="CVE-2021-41991" ref_url="https://www.suse.com/security/cve/CVE-2021-41991/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009614.html" source="SUSE-SU"/>
		<description>
This update for strongswan fixes the following issues:

- Fix trailing quotation mark missing from example in README. (bsc#1167880)
- CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. (bsc#1191435)
- CVE-2021-41990: Fixed an integer Overflow in the gmp Plugin. (bsc#1191367)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-19"/>
	<updated date="2021-10-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1167880">SUSE bug 1167880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191367">SUSE bug 1191367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191435">SUSE bug 1191435</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41990/">CVE-2021-41990</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41991/">CVE-2021-41991</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009652781" comment="strongswan-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652770" comment="strongswan-doc-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652782" comment="strongswan-hmac-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652783" comment="strongswan-ipsec-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652784" comment="strongswan-libs0-5.8.2-4.14.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140415" version="1" class="patch">
	<metadata>
		<title>Security update for python-Pygments (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1183169" ref_url="https://bugzilla.suse.com/1183169" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20270" ref_url="https://www.suse.com/security/cve/CVE-2021-20270/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009616.html" source="SUSE-SU"/>
		<description>
This update for python-Pygments fixes the following issues:

- CVE-2021-20270: Fixed an infinite loop in the SML lexer (bsc#1183169).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-20"/>
	<updated date="2021-10-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183169">SUSE bug 1183169</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20270/">CVE-2021-20270</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652625" comment="python3-Pygments-2.6.1-7.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140416" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1102408" ref_url="https://bugzilla.suse.com/1102408" source="BUGZILLA"/>
		<reference ref_id="1185405" ref_url="https://bugzilla.suse.com/1185405" source="BUGZILLA"/>
		<reference ref_id="1187704" ref_url="https://bugzilla.suse.com/1187704" source="BUGZILLA"/>
		<reference ref_id="1188282" ref_url="https://bugzilla.suse.com/1188282" source="BUGZILLA"/>
		<reference ref_id="1190826" ref_url="https://bugzilla.suse.com/1190826" source="BUGZILLA"/>
		<reference ref_id="1191015" ref_url="https://bugzilla.suse.com/1191015" source="BUGZILLA"/>
		<reference ref_id="1191121" ref_url="https://bugzilla.suse.com/1191121" source="BUGZILLA"/>
		<reference ref_id="1191334" ref_url="https://bugzilla.suse.com/1191334" source="BUGZILLA"/>
		<reference ref_id="1191355" ref_url="https://bugzilla.suse.com/1191355" source="BUGZILLA"/>
		<reference ref_id="1191434" ref_url="https://bugzilla.suse.com/1191434" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30465" ref_url="https://www.suse.com/security/cve/CVE-2021-30465/" source="CVE"/>
		<reference ref_id="CVE-2021-32760" ref_url="https://www.suse.com/security/cve/CVE-2021-32760/" source="CVE"/>
		<reference ref_id="CVE-2021-41089" ref_url="https://www.suse.com/security/cve/CVE-2021-41089/" source="CVE"/>
		<reference ref_id="CVE-2021-41091" ref_url="https://www.suse.com/security/cve/CVE-2021-41091/" source="CVE"/>
		<reference ref_id="CVE-2021-41092" ref_url="https://www.suse.com/security/cve/CVE-2021-41092/" source="CVE"/>
		<reference ref_id="CVE-2021-41103" ref_url="https://www.suse.com/security/cve/CVE-2021-41103/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009645.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, runc fixes the following issues:

Docker was updated to 20.10.9-ce. (bsc#1191355)

See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. 

  CVE-2021-41092 CVE-2021-41089 CVE-2021-41091 CVE-2021-41103

container was updated to v1.4.11, to fix CVE-2021-41103. bsc#1191355

- CVE-2021-32760: Fixed that a archive package allows chmod of file outside of unpack target directory (bsc#1188282)

- Install systemd service file as well (bsc#1190826)

Update to runc v1.0.2. Upstream changelog is available from

  https://github.com/opencontainers/runc/releases/tag/v1.0.2

* Fixed a failure to set CPU quota period in some cases on cgroup v1.
* Fixed the inability to start a container with the 'adding seccomp filter
  rule for syscall ...' error, caused by redundant seccomp rules (i.e. those
  that has action equal to the default one). Such redundant rules are now
  skipped.
* Made release builds reproducible from now on.
* Fixed a rare debug log race in runc init, which can result in occasional
  harmful 'failed to decode ...' errors from runc run or exec.
* Fixed the check in cgroup v1 systemd manager if a container needs to be
  frozen before Set, and add a setting to skip such freeze unconditionally.
  The previous fix for that issue, done in runc 1.0.1, was not working.

Update to runc v1.0.1. Upstream changelog is available from

https://github.com/opencontainers/runc/releases/tag/v1.0.1

* Fixed occasional runc exec/run failure ('interrupted system call') on an
  Azure volume.
* Fixed 'unable to find groups ... token too long' error with /etc/group
  containing lines longer than 64K characters.
* cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
  frozen. This is a regression in 1.0.0, not affecting runc itself but some
  of libcontainer users (e.g Kubernetes).
* cgroupv2: bpf: Ignore inaccessible existing programs in case of
  permission error when handling replacement of existing bpf cgroup
  programs. This fixes a regression in 1.0.0, where some SELinux
  policies would block runc from being able to run entirely.
* cgroup/systemd/v2: don't freeze cgroup on Set.
* cgroup/systemd/v1: avoid unnecessary freeze on Set.
- fix issues with runc under openSUSE MicroOS's SELinux policy. bsc#1187704

Update to runc v1.0.0. Upstream changelog is available from

https://github.com/opencontainers/runc/releases/tag/v1.0.0

! The usage of relative paths for mountpoints will now produce a warning
  (such configurations are outside of the spec, and in future runc will
  produce an error when given such configurations).
* cgroupv2: devices: rework the filter generation to produce consistent
  results with cgroupv1, and always clobber any existing eBPF
  program(s) to fix runc update and avoid leaking eBPF programs
  (resulting in errors when managing containers).
* cgroupv2: correctly convert 'number of IOs' statistics in a
  cgroupv1-compatible way.
* cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
* cgroupv2: wait for freeze to finish before returning from the freezing
  code, optimize the method for checking whether a cgroup is frozen.
* cgroups/systemd: fixed 'retry on dbus disconnect' logic introduced in rc94
* cgroups/systemd: fixed returning 'unit already exists' error from a systemd
  cgroup manager (regression in rc94)
+ cgroupv2: support SkipDevices with systemd driver
+ cgroup/systemd: return, not ignore, stop unit error from Destroy
+ Make 'runc --version' output sane even when built with go get or
  otherwise outside of our build scripts.
+ cgroups: set SkipDevices during runc update (so we don't modify
  cgroups at all during runc update).
+ cgroup1: blkio: support BFQ weights.
+ cgroupv2: set per-device io weights if BFQ IO scheduler is available.

Update to runc v1.0.0~rc95. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95

This release of runc contains a fix for CVE-2021-30465, and users are
strongly recommended to update (especially if you are providing
semi-limited access to spawn containers to untrusted users). (bsc#1185405)

Update to runc v1.0.0~rc94. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94

Breaking Changes:
* cgroupv1: kernel memory limits are now always ignored, as kmemcg has
  been effectively deprecated by the kernel. Users should make use of regular
  memory cgroup controls.

Regression Fixes:

* seccomp: fix 32-bit compilation errors
* runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
* runc start: fix 'chdir to cwd: permission denied' for some setups
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-25"/>
	<updated date="2021-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1102408">SUSE bug 1102408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185405">SUSE bug 1185405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187704">SUSE bug 1187704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188282">SUSE bug 1188282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190826">SUSE bug 1190826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191015">SUSE bug 1191015</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191121">SUSE bug 1191121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191334">SUSE bug 1191334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191355">SUSE bug 1191355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191434">SUSE bug 1191434</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30465/">CVE-2021-30465</cve>
	<cve impact="low" cvss3="3/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-32760/">CVE-2021-32760</cve>
	<cve impact="moderate" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-41089/">CVE-2021-41089</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-41091/">CVE-2021-41091</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-41092/">CVE-2021-41092</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-41103/">CVE-2021-41103</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009651719" comment="containerd-1.4.11-56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651720" comment="docker-20.10.9_ce-156.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651639" comment="docker-bash-completion-20.10.9_ce-156.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651721" comment="runc-1.0.2-23.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140417" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181239" ref_url="https://bugzilla.suse.com/1181239" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008289.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

java-11-openjdk was upgraded to include January 2021 CPU  (bsc#1181239)
- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-09"/>
	<updated date="2021-02-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181239">SUSE bug 1181239</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505488" comment="java-11-openjdk-11.0.10.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505489" comment="java-11-openjdk-demo-11.0.10.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505490" comment="java-11-openjdk-devel-11.0.10.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505491" comment="java-11-openjdk-headless-11.0.10.0-3.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140418" version="1" class="patch">
	<metadata>
		<title>Security update for dnsmasq (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1173646" ref_url="https://bugzilla.suse.com/1173646" source="BUGZILLA"/>
		<reference ref_id="1180914" ref_url="https://bugzilla.suse.com/1180914" source="BUGZILLA"/>
		<reference ref_id="1183709" ref_url="https://bugzilla.suse.com/1183709" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14312" ref_url="https://www.suse.com/security/cve/CVE-2020-14312/" source="CVE"/>
		<reference ref_id="CVE-2021-3448" ref_url="https://www.suse.com/security/cve/CVE-2021-3448/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009660.html" source="SUSE-SU"/>
		<description>
This update for dnsmasq fixes the following issues:

Update to version 2.86

- CVE-2021-3448: fixed outgoing port used when --server is used with an interface name. (bsc#1183709)
- CVE-2020-14312: Set --local-service by default (bsc#1173646).
- Open inotify socket only when used (bsc#1180914).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173646">SUSE bug 1173646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180914">SUSE bug 1180914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183709">SUSE bug 1183709</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14312/">CVE-2020-14312</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3448/">CVE-2021-3448</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653321" comment="dnsmasq-2.86-7.14.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140419" version="1" class="patch">
	<metadata>
		<title>Security update for busybox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1099260" ref_url="https://bugzilla.suse.com/1099260" source="BUGZILLA"/>
		<reference ref_id="1099263" ref_url="https://bugzilla.suse.com/1099263" source="BUGZILLA"/>
		<reference ref_id="1121426" ref_url="https://bugzilla.suse.com/1121426" source="BUGZILLA"/>
		<reference ref_id="1184522" ref_url="https://bugzilla.suse.com/1184522" source="BUGZILLA"/>
		<reference ref_id="951562" ref_url="https://bugzilla.suse.com/951562" source="BUGZILLA"/>
		<reference ref_id="CVE-2011-5325" ref_url="https://www.suse.com/security/cve/CVE-2011-5325/" source="CVE"/>
		<reference ref_id="CVE-2018-1000500" ref_url="https://www.suse.com/security/cve/CVE-2018-1000500/" source="CVE"/>
		<reference ref_id="CVE-2018-1000517" ref_url="https://www.suse.com/security/cve/CVE-2018-1000517/" source="CVE"/>
		<reference ref_id="CVE-2018-20679" ref_url="https://www.suse.com/security/cve/CVE-2018-20679/" source="CVE"/>
		<reference ref_id="CVE-2021-28831" ref_url="https://www.suse.com/security/cve/CVE-2021-28831/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009658.html" source="SUSE-SU"/>
		<description>
This update for busybox fixes the following issues:

- CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522).
- CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426).
- CVE-2018-1000517: Fixed buffer overflow in the retrieve_file_data() (bsc#1099260).
- CVE-2011-5325: Fixed a directory traversal related to 'tar' command (bsc#951562).
- CVE-2018-1000500: Fixed missing SSL certificate validation related to the 'wget' command (bsc#1099263).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1099260">SUSE bug 1099260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099263">SUSE bug 1099263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121426">SUSE bug 1121426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184522">SUSE bug 1184522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951562">SUSE bug 951562</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2011-5325/">CVE-2011-5325</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000500/">CVE-2018-1000500</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000517/">CVE-2018-1000517</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20679/">CVE-2018-20679</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28831/">CVE-2021-28831</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009652779" comment="busybox-1.26.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652780" comment="busybox-static-1.26.2-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140420" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182783" ref_url="https://bugzilla.suse.com/1182783" source="BUGZILLA"/>
		<reference ref_id="1184152" ref_url="https://bugzilla.suse.com/1184152" source="BUGZILLA"/>
		<reference ref_id="1184772" ref_url="https://bugzilla.suse.com/1184772" source="BUGZILLA"/>
		<reference ref_id="1185081" ref_url="https://bugzilla.suse.com/1185081" source="BUGZILLA"/>
		<reference ref_id="1188843" ref_url="https://bugzilla.suse.com/1188843" source="BUGZILLA"/>
		<reference ref_id="1190420" ref_url="https://bugzilla.suse.com/1190420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3667" ref_url="https://www.suse.com/security/cve/CVE-2021-3667/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009661.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:

Security issue fixed:

- CVE-2021-3667: Fixed a DoS vulnerability in the libvirt virStoragePoolLookupByTargetPath API. (bsc#1188843)

Non-security issues fixed:

- resolved hangs/crashes on libvirtd shutdown (bsc#1182783)
- qemu: Normalize MAC address in device conf on netdev hotplug (bsc#1184772)
- libxl: Fix driver reload (bsc#1190420)
- libxl: Add support for 'e820_host' settings (bsc#1185081)
- libxl: Fix domain shutdown (bsc#1184152)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182783">SUSE bug 1182783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184152">SUSE bug 1184152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184772">SUSE bug 1184772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185081">SUSE bug 1185081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188843">SUSE bug 1188843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190420">SUSE bug 1190420</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3667/">CVE-2021-3667</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009652369" comment="libvirt-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652370" comment="libvirt-admin-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652339" comment="libvirt-bash-completion-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652371" comment="libvirt-client-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652372" comment="libvirt-daemon-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652373" comment="libvirt-daemon-config-network-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652374" comment="libvirt-daemon-config-nwfilter-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652375" comment="libvirt-daemon-driver-interface-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652345" comment="libvirt-daemon-driver-libxl-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652376" comment="libvirt-daemon-driver-lxc-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652377" comment="libvirt-daemon-driver-network-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652378" comment="libvirt-daemon-driver-nodedev-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652379" comment="libvirt-daemon-driver-nwfilter-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652380" comment="libvirt-daemon-driver-qemu-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652381" comment="libvirt-daemon-driver-secret-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652382" comment="libvirt-daemon-driver-storage-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652383" comment="libvirt-daemon-driver-storage-core-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652384" comment="libvirt-daemon-driver-storage-disk-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652385" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652386" comment="libvirt-daemon-driver-storage-logical-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652387" comment="libvirt-daemon-driver-storage-mpath-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652388" comment="libvirt-daemon-driver-storage-rbd-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652389" comment="libvirt-daemon-driver-storage-scsi-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652390" comment="libvirt-daemon-hooks-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652391" comment="libvirt-daemon-lxc-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652392" comment="libvirt-daemon-qemu-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652363" comment="libvirt-daemon-xen-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652393" comment="libvirt-devel-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652365" comment="libvirt-doc-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652394" comment="libvirt-libs-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652395" comment="libvirt-lock-sanlock-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652396" comment="libvirt-nss-5.1.0-8.29.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140421" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="1180686" ref_url="https://bugzilla.suse.com/1180686" source="BUGZILLA"/>
		<reference ref_id="1181126" ref_url="https://bugzilla.suse.com/1181126" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="CVE-2021-3177" ref_url="https://www.suse.com/security/cve/CVE-2021-3177/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008291.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- buffer overflow in PyCArg_repr in _ctypes/callproc.c,
  which may lead to remote code execution (bsc#1181126, CVE-2021-3177).
- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-09"/>
	<updated date="2021-02-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180686">SUSE bug 1180686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181126">SUSE bug 1181126</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3177/">CVE-2021-3177</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505492" comment="libpython2_7-1_0-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505493" comment="python-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505494" comment="python-base-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505495" comment="python-curses-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505496" comment="python-devel-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505497" comment="python-gdbm-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505498" comment="python-tk-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505499" comment="python-xml-2.7.17-7.52.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140422" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1190265" ref_url="https://bugzilla.suse.com/1190265" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21996" ref_url="https://www.suse.com/security/cve/CVE-2021-21996/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009662.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Support querying for JSON data in external sql pillar.
- Exclude the full path of a download URL to prevent injection of malicious code.
  (bsc#1190265, CVE-2021-21996)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1190265">SUSE bug 1190265</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-21996/">CVE-2021-21996</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009652219" comment="python3-salt-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652220" comment="salt-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652221" comment="salt-api-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652207" comment="salt-bash-completion-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652222" comment="salt-cloud-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652223" comment="salt-doc-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652210" comment="salt-fish-completion-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652224" comment="salt-master-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652225" comment="salt-minion-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652226" comment="salt-proxy-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652227" comment="salt-ssh-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652228" comment="salt-standalone-formulas-configuration-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652229" comment="salt-syndic-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652230" comment="salt-transactional-update-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652218" comment="salt-zsh-completion-3002.2-48.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140423" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1180432" ref_url="https://bugzilla.suse.com/1180432" source="BUGZILLA"/>
		<reference ref_id="1180433" ref_url="https://bugzilla.suse.com/1180433" source="BUGZILLA"/>
		<reference ref_id="1180434" ref_url="https://bugzilla.suse.com/1180434" source="BUGZILLA"/>
		<reference ref_id="1180435" ref_url="https://bugzilla.suse.com/1180435" source="BUGZILLA"/>
		<reference ref_id="1182651" ref_url="https://bugzilla.suse.com/1182651" source="BUGZILLA"/>
		<reference ref_id="1186012" ref_url="https://bugzilla.suse.com/1186012" source="BUGZILLA"/>
		<reference ref_id="1189145" ref_url="https://bugzilla.suse.com/1189145" source="BUGZILLA"/>
		<reference ref_id="1189702" ref_url="https://bugzilla.suse.com/1189702" source="BUGZILLA"/>
		<reference ref_id="1189938" ref_url="https://bugzilla.suse.com/1189938" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35503" ref_url="https://www.suse.com/security/cve/CVE-2020-35503/" source="CVE"/>
		<reference ref_id="CVE-2020-35504" ref_url="https://www.suse.com/security/cve/CVE-2020-35504/" source="CVE"/>
		<reference ref_id="CVE-2020-35505" ref_url="https://www.suse.com/security/cve/CVE-2020-35505/" source="CVE"/>
		<reference ref_id="CVE-2020-35506" ref_url="https://www.suse.com/security/cve/CVE-2020-35506/" source="CVE"/>
		<reference ref_id="CVE-2021-20255" ref_url="https://www.suse.com/security/cve/CVE-2021-20255/" source="CVE"/>
		<reference ref_id="CVE-2021-3527" ref_url="https://www.suse.com/security/cve/CVE-2021-3527/" source="CVE"/>
		<reference ref_id="CVE-2021-3682" ref_url="https://www.suse.com/security/cve/CVE-2021-3682/" source="CVE"/>
		<reference ref_id="CVE-2021-3713" ref_url="https://www.suse.com/security/cve/CVE-2021-3713/" source="CVE"/>
		<reference ref_id="CVE-2021-3748" ref_url="https://www.suse.com/security/cve/CVE-2021-3748/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009697.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

Security issues fixed:

- Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702, CVE-2021-3713)
- Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938, CVE-2021-3748)
- usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)
- NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)
- NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)
- eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)
- usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)

Non-security issues fixed:

- Use max host physical address if -cpu max is used (bsc#1188299)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-04"/>
	<updated date="2021-11-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180432">SUSE bug 1180432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180433">SUSE bug 1180433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180434">SUSE bug 1180434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180435">SUSE bug 1180435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182651">SUSE bug 1182651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186012">SUSE bug 1186012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189145">SUSE bug 1189145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189702">SUSE bug 1189702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189938">SUSE bug 1189938</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35503/">CVE-2020-35503</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35504/">CVE-2020-35504</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35505/">CVE-2020-35505</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-35506/">CVE-2020-35506</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20255/">CVE-2021-20255</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3527/">CVE-2021-3527</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3682/">CVE-2021-3682</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3713/">CVE-2021-3713</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3748/">CVE-2021-3748</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653117" comment="qemu-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653099" comment="qemu-audio-alsa-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653100" comment="qemu-audio-oss-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653101" comment="qemu-audio-pa-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653118" comment="qemu-block-curl-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653119" comment="qemu-block-iscsi-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653120" comment="qemu-block-rbd-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653121" comment="qemu-block-ssh-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653122" comment="qemu-guest-agent-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653107" comment="qemu-ipxe-1.0.0+-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653108" comment="qemu-kvm-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653123" comment="qemu-lang-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653110" comment="qemu-seabios-1.12.0_0_ga698c89-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653111" comment="qemu-sgabios-8-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653124" comment="qemu-tools-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653113" comment="qemu-ui-curses-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653114" comment="qemu-ui-gtk-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653115" comment="qemu-vgabios-1.12.0_0_ga698c89-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653116" comment="qemu-x86-3.1.1.1-80.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140424" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1179898" ref_url="https://bugzilla.suse.com/1179898" source="BUGZILLA"/>
		<reference ref_id="1179899" ref_url="https://bugzilla.suse.com/1179899" source="BUGZILLA"/>
		<reference ref_id="1179900" ref_url="https://bugzilla.suse.com/1179900" source="BUGZILLA"/>
		<reference ref_id="1179901" ref_url="https://bugzilla.suse.com/1179901" source="BUGZILLA"/>
		<reference ref_id="1179902" ref_url="https://bugzilla.suse.com/1179902" source="BUGZILLA"/>
		<reference ref_id="1179903" ref_url="https://bugzilla.suse.com/1179903" source="BUGZILLA"/>
		<reference ref_id="1180451" ref_url="https://bugzilla.suse.com/1180451" source="BUGZILLA"/>
		<reference ref_id="1180454" ref_url="https://bugzilla.suse.com/1180454" source="BUGZILLA"/>
		<reference ref_id="1180461" ref_url="https://bugzilla.suse.com/1180461" source="BUGZILLA"/>
		<reference ref_id="1181452" ref_url="https://bugzilla.suse.com/1181452" source="BUGZILLA"/>
		<reference ref_id="1182252" ref_url="https://bugzilla.suse.com/1182252" source="BUGZILLA"/>
		<reference ref_id="1183511" ref_url="https://bugzilla.suse.com/1183511" source="BUGZILLA"/>
		<reference ref_id="1184620" ref_url="https://bugzilla.suse.com/1184620" source="BUGZILLA"/>
		<reference ref_id="1184794" ref_url="https://bugzilla.suse.com/1184794" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-16590" ref_url="https://www.suse.com/security/cve/CVE-2020-16590/" source="CVE"/>
		<reference ref_id="CVE-2020-16591" ref_url="https://www.suse.com/security/cve/CVE-2020-16591/" source="CVE"/>
		<reference ref_id="CVE-2020-16592" ref_url="https://www.suse.com/security/cve/CVE-2020-16592/" source="CVE"/>
		<reference ref_id="CVE-2020-16593" ref_url="https://www.suse.com/security/cve/CVE-2020-16593/" source="CVE"/>
		<reference ref_id="CVE-2020-16598" ref_url="https://www.suse.com/security/cve/CVE-2020-16598/" source="CVE"/>
		<reference ref_id="CVE-2020-16599" ref_url="https://www.suse.com/security/cve/CVE-2020-16599/" source="CVE"/>
		<reference ref_id="CVE-2020-35448" ref_url="https://www.suse.com/security/cve/CVE-2020-35448/" source="CVE"/>
		<reference ref_id="CVE-2020-35493" ref_url="https://www.suse.com/security/cve/CVE-2020-35493/" source="CVE"/>
		<reference ref_id="CVE-2020-35496" ref_url="https://www.suse.com/security/cve/CVE-2020-35496/" source="CVE"/>
		<reference ref_id="CVE-2020-35507" ref_url="https://www.suse.com/security/cve/CVE-2020-35507/" source="CVE"/>
		<reference ref_id="CVE-2021-20197" ref_url="https://www.suse.com/security/cve/CVE-2021-20197/" source="CVE"/>
		<reference ref_id="CVE-2021-20284" ref_url="https://www.suse.com/security/cve/CVE-2021-20284/" source="CVE"/>
		<reference ref_id="CVE-2021-3487" ref_url="https://www.suse.com/security/cve/CVE-2021-3487/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

Update to binutils 2.37:

* The GNU Binutils sources now requires a C99 compiler and library to
  build.
* Support for Realm Management Extension (RME) for AArch64 has been
  added.
* A new linker option '-z report-relative-reloc' for x86 ELF targets
  has been added to report dynamic relative relocations.
* A new linker option '-z start-stop-gc' has been added to disable
  special treatment of __start_*/__stop_* references when
  --gc-sections.
* A new linker options '-Bno-symbolic' has been added which will
  cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
* The readelf tool has a new command line option which can be used to
  specify how the numeric values of symbols are reported.
  --sym-base=0|8|10|16 tells readelf to display the values in base 8,
  base 10 or base 16.  A sym base of 0 represents the default action
  of displaying values under 10000 in base 10 and values above that in
  base 16.
* A new format has been added to the nm program.  Specifying
  '--format=just-symbols' (or just using -j) will tell the program to
  only display symbol names and nothing else.
* A new command line option '--keep-section-symbols' has been added to
  objcopy and strip.  This stops the removal of unused section symbols
  when the file is copied.  Removing these symbols saves space, but
  sometimes they are needed by other tools.
* The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
  supported by objcopy now make undefined symbols weak on targets that
  support weak symbols. 
* Readelf and objdump can now display and use the contents of .debug_sup
  sections.
* Readelf and objdump will now follow links to separate debug info
  files by default.  This behaviour can be stopped via the use of the
  new '-wN' or '--debug-dump=no-follow-links' options for readelf and
  the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
  the old behaviour can be restored by the use of the
  '--enable-follow-debug-links=no' configure time option.

  The semantics of the =follow-links option have also been slightly
  changed.  When enabled, the option allows for the loading of symbol
  tables and string tables from the separate files which can be used
  to enhance the information displayed when dumping other sections,
  but it does not automatically imply that information from the
  separate files should be displayed.

  If other debug section display options are also enabled (eg
  '--debug-dump=info') then the contents of matching sections in both
  the main file and the separate debuginfo file *will* be displayed.
  This is because in most cases the debug section will only be present
  in one of the files.

  If however non-debug section display options are enabled (eg
  '--sections') then the contents of matching parts of the separate
  debuginfo file will *not* be displayed.  This is because in most
  cases the user probably only wanted to load the symbol information
  from the separate debuginfo file.  In order to change this behaviour
  a new command line option --process-links can be used.  This will
  allow di0pslay options to applied to both the main file and any
  separate debuginfo files.

* Nm has a new command line option: '--quiet'.  This suppresses 'no
  symbols' diagnostic.

Update to binutils 2.36:

New features in the Assembler:

- General:

   * When setting the link order attribute of ELF sections, it is now
     possible to use a numeric section index instead of symbol name.
   * Added a .nop directive to generate a single no-op instruction in
     a target neutral manner.  This instruction does have an effect on
     DWARF line number generation, if that is active.
   * Removed --reduce-memory-overheads and --hash-size as gas now
     uses hash tables that can be expand and shrink automatically.

- X86/x86_64:

   * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
     Locker instructions. 
   * Support non-absolute segment values for lcall and ljmp.
   * Add {disp16} pseudo prefix to x86 assembler.
   * Configure with --enable-x86-used-note by default for Linux/x86.

-  ARM/AArch64:

   * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
     Cortex-R82, Neoverse V1, and Neoverse N2 cores.
   * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
     Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
     Stack Recorder Extension) and BRBE (Branch Record Buffer
     Extension) system registers.
   * Add support for Armv8-R and Armv8.7-A ISA extensions.
   * Add support for DSB memory nXS barrier, WFET and WFIT
     instruction for Armv8.7.
   * Add support for +csre feature for -march. Add CSR PDEC
     instruction for CSRE feature in AArch64.
   * Add support for +flagm feature for -march in Armv8.4 AArch64.
   * Add support for +ls64 feature for -march in Armv8.7
     AArch64. Add atomic 64-byte load/store instructions for this
     feature. 
   * Add support for +pauth (Pointer Authentication) feature for
     -march in AArch64.

New features in the Linker:

  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new 
     command-line option --ctf-share-types describes how to do this:
     its default value, share-unconflicted, produces the most compact
     output.
  * The linker now omits the 'variable section' from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.

New features in other binary tools:

  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
    --no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.

The following security fixes are addressed by the update:

- CVE-2021-20197: Fixed a race condition which allows users to own arbitrary files (bsc#1181452).
- CVE-2021-20284: Fixed a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c (bsc#1183511).
- CVE-2021-3487: Fixed a denial of service via excessive debug section size causing excessive memory consumption in bfd's dwarf2.c read_section() (bsc#1184620).
- CVE-2020-35448: Fixed a heap-based buffer over-read in bfd_getl_signed_32() in libbfd.c (bsc#1184794).
- CVE-2020-16590: Fixed a double free vulnerability in process_symbol_table() (bsc#1179898).
- CVE-2020-16591: Fixed an invalid read in process_symbol_table() (bsc#1179899).
- CVE-2020-16592: Fixed an use-after-free in bfd_hash_lookup() (bsc#1179900).
- CVE-2020-16593: Fixed a null pointer dereference in scan_unit_for_symbols() (bsc#1179901).
- CVE-2020-16598: Fixed a null pointer dereference in debug_get_real_type() (bsc#1179902).
- CVE-2020-16599: Fixed a null pointer dereference in _bfd_elf_get_symbol_version_string() (bsc#1179903)
- CVE-2020-35493: Fixed heap-based buffer overflow in bfd_pef_parse_function_stubs function in bfd/pef.c via crafted PEF file (bsc#1180451).
- CVE-2020-35496: Fixed multiple null pointer dereferences in bfd module due to not checking return value of bfd_malloc (bsc#1180454).
- CVE-2020-35507: Fixed a null pointer dereference in bfd_pef_parse_function_stubs() (bsc#1180461).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-04"/>
	<updated date="2021-11-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179898">SUSE bug 1179898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179899">SUSE bug 1179899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179900">SUSE bug 1179900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179901">SUSE bug 1179901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179902">SUSE bug 1179902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179903">SUSE bug 1179903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180451">SUSE bug 1180451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180454">SUSE bug 1180454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180461">SUSE bug 1180461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181452">SUSE bug 1181452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182252">SUSE bug 1182252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183511">SUSE bug 1183511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184620">SUSE bug 1184620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184794">SUSE bug 1184794</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16590/">CVE-2020-16590</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16591/">CVE-2020-16591</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16592/">CVE-2020-16592</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16593/">CVE-2020-16593</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16598/">CVE-2020-16598</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16599/">CVE-2020-16599</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-35448/">CVE-2020-35448</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35493/">CVE-2020-35493</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35496/">CVE-2020-35496</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35507/">CVE-2020-35507</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20197/">CVE-2021-20197</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20284/">CVE-2021-20284</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3487/">CVE-2021-3487</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653463" comment="binutils-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653464" comment="binutils-devel-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653465" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653466" comment="libctf0-2.37-7.21.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140425" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1183909" ref_url="https://bugzilla.suse.com/1183909" source="BUGZILLA"/>
		<reference ref_id="1184519" ref_url="https://bugzilla.suse.com/1184519" source="BUGZILLA"/>
		<reference ref_id="1188941" ref_url="https://bugzilla.suse.com/1188941" source="BUGZILLA"/>
		<reference ref_id="1191473" ref_url="https://bugzilla.suse.com/1191473" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20294" ref_url="https://www.suse.com/security/cve/CVE-2021-20294/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009711.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

- For compatibility on old code stream that expect 'brcl 0,label' to
  not be disassembled as 'jgnop label' on s390x.  (bsc#1192267)
  This reverts IBM zSeries HLASM support for now.
- Fixed that ppc64 optflags did not enable LTO (bsc#1188941).
- Fix empty man-pages from broken release tarball
- Fixed a memory corruption with rpath option (bsc#1191473).
- Fixed slow performance of stripping some binaries (bsc#1183909).

Security issue fixed:

- CVE-2021-20294: Fixed out-of-bounds write in print_dynamic_symbol in readelf (bnc#1184519)

		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-09"/>
	<updated date="2021-11-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1183909">SUSE bug 1183909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184519">SUSE bug 1184519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188941">SUSE bug 1188941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191473">SUSE bug 1191473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20294/">CVE-2021-20294</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009654368" comment="binutils-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654369" comment="binutils-devel-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654320" comment="binutils-devel-32bit-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654370" comment="libctf-nobfd0-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654371" comment="libctf0-2.37-7.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140426" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1192250" ref_url="https://bugzilla.suse.com/1192250" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-38503" ref_url="https://www.suse.com/security/cve/CVE-2021-38503/" source="CVE"/>
		<reference ref_id="CVE-2021-38504" ref_url="https://www.suse.com/security/cve/CVE-2021-38504/" source="CVE"/>
		<reference ref_id="CVE-2021-38505" ref_url="https://www.suse.com/security/cve/CVE-2021-38505/" source="CVE"/>
		<reference ref_id="CVE-2021-38506" ref_url="https://www.suse.com/security/cve/CVE-2021-38506/" source="CVE"/>
		<reference ref_id="CVE-2021-38507" ref_url="https://www.suse.com/security/cve/CVE-2021-38507/" source="CVE"/>
		<reference ref_id="CVE-2021-38508" ref_url="https://www.suse.com/security/cve/CVE-2021-38508/" source="CVE"/>
		<reference ref_id="CVE-2021-38509" ref_url="https://www.suse.com/security/cve/CVE-2021-38509/" source="CVE"/>
		<reference ref_id="CVE-2021-38510" ref_url="https://www.suse.com/security/cve/CVE-2021-38510/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3651-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009712.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

MozillaFirefox was updated to Extended Support Release 91.3.0 ESR

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-49 (bsc#1192250)

  * CVE-2021-38503: iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504: Use-after-free in file picker dialog
  * CVE-2021-38505: Windows 10 Cloud Clipboard may have recorded sensitive user data
  * CVE-2021-38506: Firefox could be coaxed into going into fullscreen mode without notification or warning
  * CVE-2021-38507: Opportunistic Encryption in HTTP2 could be used to bypass the Same-Origin-Policy on services hosted on other ports
  * CVE-2021-38508: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing
  * CVE-2021-38509: Javascript alert box could have been spoofed onto an arbitrary domain
  * CVE-2021-38510: Download Protections were bypassed by .inetloc files on Mac OS
  * MOZ-2021-0008: Use-after-free in HTTP2 Session object
  * MOZ-2021-0007: Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-10"/>
	<updated date="2021-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192250">SUSE bug 1192250</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38503/">CVE-2021-38503</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38504/">CVE-2021-38504</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38505/">CVE-2021-38505</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38506/">CVE-2021-38506</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38507/">CVE-2021-38507</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38508/">CVE-2021-38508</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38509/">CVE-2021-38509</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38510/">CVE-2021-38510</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009654106" comment="MozillaFirefox-91.3.0-150.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654107" comment="MozillaFirefox-devel-91.3.0-150.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654108" comment="MozillaFirefox-translations-common-91.3.0-150.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654109" comment="MozillaFirefox-translations-other-91.3.0-150.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140427" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188278" ref_url="https://bugzilla.suse.com/1188278" source="BUGZILLA"/>
		<reference ref_id="1188279" ref_url="https://bugzilla.suse.com/1188279" source="BUGZILLA"/>
		<reference ref_id="1190558" ref_url="https://bugzilla.suse.com/1190558" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30640" ref_url="https://www.suse.com/security/cve/CVE-2021-30640/" source="CVE"/>
		<reference ref_id="CVE-2021-33037" ref_url="https://www.suse.com/security/cve/CVE-2021-33037/" source="CVE"/>
		<reference ref_id="CVE-2021-41079" ref_url="https://www.suse.com/security/cve/CVE-2021-41079/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009733.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279).
- CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278).
- CVE-2021-41079: Fixed a denial of service caused by an unexpected TLS packet (bsc#1190558).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-16"/>
	<updated date="2021-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188278">SUSE bug 1188278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188279">SUSE bug 1188279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190558">SUSE bug 1190558</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30640/">CVE-2021-30640</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-33037/">CVE-2021-33037</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41079/">CVE-2021-41079</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653671" comment="tomcat-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653672" comment="tomcat-admin-webapps-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653673" comment="tomcat-el-3_0-api-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653674" comment="tomcat-jsp-2_3-api-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653675" comment="tomcat-lib-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653676" comment="tomcat-servlet-4_0-api-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653677" comment="tomcat-webapps-9.0.36-4.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140428" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1191901" ref_url="https://bugzilla.suse.com/1191901" source="BUGZILLA"/>
		<reference ref_id="1191903" ref_url="https://bugzilla.suse.com/1191903" source="BUGZILLA"/>
		<reference ref_id="1191904" ref_url="https://bugzilla.suse.com/1191904" source="BUGZILLA"/>
		<reference ref_id="1191906" ref_url="https://bugzilla.suse.com/1191906" source="BUGZILLA"/>
		<reference ref_id="1191909" ref_url="https://bugzilla.suse.com/1191909" source="BUGZILLA"/>
		<reference ref_id="1191910" ref_url="https://bugzilla.suse.com/1191910" source="BUGZILLA"/>
		<reference ref_id="1191911" ref_url="https://bugzilla.suse.com/1191911" source="BUGZILLA"/>
		<reference ref_id="1191912" ref_url="https://bugzilla.suse.com/1191912" source="BUGZILLA"/>
		<reference ref_id="1191913" ref_url="https://bugzilla.suse.com/1191913" source="BUGZILLA"/>
		<reference ref_id="1191914" ref_url="https://bugzilla.suse.com/1191914" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-35550" ref_url="https://www.suse.com/security/cve/CVE-2021-35550/" source="CVE"/>
		<reference ref_id="CVE-2021-35556" ref_url="https://www.suse.com/security/cve/CVE-2021-35556/" source="CVE"/>
		<reference ref_id="CVE-2021-35559" ref_url="https://www.suse.com/security/cve/CVE-2021-35559/" source="CVE"/>
		<reference ref_id="CVE-2021-35561" ref_url="https://www.suse.com/security/cve/CVE-2021-35561/" source="CVE"/>
		<reference ref_id="CVE-2021-35564" ref_url="https://www.suse.com/security/cve/CVE-2021-35564/" source="CVE"/>
		<reference ref_id="CVE-2021-35565" ref_url="https://www.suse.com/security/cve/CVE-2021-35565/" source="CVE"/>
		<reference ref_id="CVE-2021-35567" ref_url="https://www.suse.com/security/cve/CVE-2021-35567/" source="CVE"/>
		<reference ref_id="CVE-2021-35578" ref_url="https://www.suse.com/security/cve/CVE-2021-35578/" source="CVE"/>
		<reference ref_id="CVE-2021-35586" ref_url="https://www.suse.com/security/cve/CVE-2021-35586/" source="CVE"/>
		<reference ref_id="CVE-2021-35603" ref_url="https://www.suse.com/security/cve/CVE-2021-35603/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009728.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

Update to 11.0.13+8 (October 2021 CPU)

- CVE-2021-35550, bsc#1191901: Update the default enabled cipher suites preference
- CVE-2021-35565, bsc#1191909: com.sun.net.HttpsServer spins on TLS session close
- CVE-2021-35556, bsc#1191910: Richer Text Editors
- CVE-2021-35559, bsc#1191911: Enhanced style for RTF kit
- CVE-2021-35561, bsc#1191912: Better hashing support
- CVE-2021-35564, bsc#1191913: Improve Keystore integrity
- CVE-2021-35567, bsc#1191903: More Constrained Delegation
- CVE-2021-35578, bsc#1191904: Improve TLS client handshaking
- CVE-2021-35586, bsc#1191914: Better BMP support
- CVE-2021-35603, bsc#1191906: Better session identification
- Improve Stream handling for SSL
- Improve requests of certificates
- Correct certificate requests
- Enhance DTLS client handshake
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-16"/>
	<updated date="2021-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191901">SUSE bug 1191901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191903">SUSE bug 1191903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191904">SUSE bug 1191904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191906">SUSE bug 1191906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191909">SUSE bug 1191909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191910">SUSE bug 1191910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191911">SUSE bug 1191911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191912">SUSE bug 1191912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191913">SUSE bug 1191913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191914">SUSE bug 1191914</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35550/">CVE-2021-35550</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35556/">CVE-2021-35556</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35559/">CVE-2021-35559</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35561/">CVE-2021-35561</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-35564/">CVE-2021-35564</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35565/">CVE-2021-35565</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35567/">CVE-2021-35567</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35578/">CVE-2021-35578</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35586/">CVE-2021-35586</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35603/">CVE-2021-35603</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653322" comment="java-11-openjdk-11.0.13.0-3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653323" comment="java-11-openjdk-demo-11.0.13.0-3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653324" comment="java-11-openjdk-devel-11.0.13.0-3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653325" comment="java-11-openjdk-headless-11.0.13.0-3.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140429" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1014440" ref_url="https://bugzilla.suse.com/1014440" source="BUGZILLA"/>
		<reference ref_id="1192284" ref_url="https://bugzilla.suse.com/1192284" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-2124" ref_url="https://www.suse.com/security/cve/CVE-2016-2124/" source="CVE"/>
		<reference ref_id="CVE-2020-25717" ref_url="https://www.suse.com/security/cve/CVE-2020-25717/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009729.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos (bsc#1014440).
- CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members (bsc#1192284).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-16"/>
	<updated date="2021-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1014440">SUSE bug 1014440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192284">SUSE bug 1192284</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2124/">CVE-2016-2124</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25717/">CVE-2020-25717</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009654998" comment="libdcerpc-binding0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654914" comment="libdcerpc-binding0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654999" comment="libdcerpc-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655000" comment="libdcerpc-samr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655001" comment="libdcerpc-samr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655002" comment="libdcerpc0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654919" comment="libdcerpc0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655003" comment="libndr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655004" comment="libndr-krb5pac-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655005" comment="libndr-krb5pac0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654923" comment="libndr-krb5pac0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655006" comment="libndr-nbt-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655007" comment="libndr-nbt0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654926" comment="libndr-nbt0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655008" comment="libndr-standard-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655009" comment="libndr-standard0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654929" comment="libndr-standard0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655010" comment="libndr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654931" comment="libndr0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655011" comment="libnetapi-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655012" comment="libnetapi0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654934" comment="libnetapi0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655013" comment="libsamba-credentials-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655014" comment="libsamba-credentials0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654937" comment="libsamba-credentials0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655015" comment="libsamba-errors-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655016" comment="libsamba-errors0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654940" comment="libsamba-errors0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655017" comment="libsamba-hostconfig-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655018" comment="libsamba-hostconfig0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654943" comment="libsamba-hostconfig0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655019" comment="libsamba-passdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655020" comment="libsamba-passdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654946" comment="libsamba-passdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655021" comment="libsamba-policy-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655022" comment="libsamba-policy-python3-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655023" comment="libsamba-policy0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655024" comment="libsamba-policy0-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655025" comment="libsamba-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655026" comment="libsamba-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654953" comment="libsamba-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655027" comment="libsamdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655028" comment="libsamdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654956" comment="libsamdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655029" comment="libsmbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655030" comment="libsmbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655031" comment="libsmbconf-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655032" comment="libsmbconf0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654961" comment="libsmbconf0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655033" comment="libsmbldap-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655034" comment="libsmbldap2-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654964" comment="libsmbldap2-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655035" comment="libtevent-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655036" comment="libtevent-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654967" comment="libtevent-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655037" comment="libwbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655038" comment="libwbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654970" comment="libwbclient0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655039" comment="samba-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655040" comment="samba-ad-dc-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655041" comment="samba-client-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655042" comment="samba-core-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655043" comment="samba-dsdb-modules-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655044" comment="samba-libs-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654977" comment="samba-libs-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655045" comment="samba-libs-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655046" comment="samba-libs-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655047" comment="samba-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655048" comment="samba-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655049" comment="samba-winbind-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654983" comment="samba-winbind-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140430" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1191937" ref_url="https://bugzilla.suse.com/1191937" source="BUGZILLA"/>
		<reference ref_id="1192063" ref_url="https://bugzilla.suse.com/1192063" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30846" ref_url="https://www.suse.com/security/cve/CVE-2021-30846/" source="CVE"/>
		<reference ref_id="CVE-2021-30851" ref_url="https://www.suse.com/security/cve/CVE-2021-30851/" source="CVE"/>
		<reference ref_id="CVE-2021-42762" ref_url="https://www.suse.com/security/cve/CVE-2021-42762/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009770.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- CVE-2021-30846: Fixed memory corruption issue that could lead to arbitrary code execution when processing maliciously crafted web content (bsc#1192063).
- CVE-2021-30851: Fixed memory corruption vulnerability that could lead to arbitrary code execution when processing maliciously crafted web content (bsc#1192063).   
- CVE-2021-42762: Updated seccomp rules with latest changes from flatpak (bsc#1191937).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-23"/>
	<updated date="2021-11-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191937">SUSE bug 1191937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192063">SUSE bug 1192063</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30846/">CVE-2021-30846</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30851/">CVE-2021-30851</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42762/">CVE-2021-42762</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657295" comment="libjavascriptcoregtk-4_0-18-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657296" comment="libwebkit2gtk-4_0-37-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657282" comment="libwebkit2gtk3-lang-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657297" comment="typelib-1_0-JavaScriptCore-4_0-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657298" comment="typelib-1_0-WebKit2-4_0-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657299" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657300" comment="webkit2gtk-4_0-injected-bundles-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657301" comment="webkit2gtk3-devel-2.34.1-3.87.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140431" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1191901" ref_url="https://bugzilla.suse.com/1191901" source="BUGZILLA"/>
		<reference ref_id="1191903" ref_url="https://bugzilla.suse.com/1191903" source="BUGZILLA"/>
		<reference ref_id="1191904" ref_url="https://bugzilla.suse.com/1191904" source="BUGZILLA"/>
		<reference ref_id="1191905" ref_url="https://bugzilla.suse.com/1191905" source="BUGZILLA"/>
		<reference ref_id="1191906" ref_url="https://bugzilla.suse.com/1191906" source="BUGZILLA"/>
		<reference ref_id="1191909" ref_url="https://bugzilla.suse.com/1191909" source="BUGZILLA"/>
		<reference ref_id="1191910" ref_url="https://bugzilla.suse.com/1191910" source="BUGZILLA"/>
		<reference ref_id="1191911" ref_url="https://bugzilla.suse.com/1191911" source="BUGZILLA"/>
		<reference ref_id="1191912" ref_url="https://bugzilla.suse.com/1191912" source="BUGZILLA"/>
		<reference ref_id="1191913" ref_url="https://bugzilla.suse.com/1191913" source="BUGZILLA"/>
		<reference ref_id="1191914" ref_url="https://bugzilla.suse.com/1191914" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-35550" ref_url="https://www.suse.com/security/cve/CVE-2021-35550/" source="CVE"/>
		<reference ref_id="CVE-2021-35556" ref_url="https://www.suse.com/security/cve/CVE-2021-35556/" source="CVE"/>
		<reference ref_id="CVE-2021-35559" ref_url="https://www.suse.com/security/cve/CVE-2021-35559/" source="CVE"/>
		<reference ref_id="CVE-2021-35561" ref_url="https://www.suse.com/security/cve/CVE-2021-35561/" source="CVE"/>
		<reference ref_id="CVE-2021-35564" ref_url="https://www.suse.com/security/cve/CVE-2021-35564/" source="CVE"/>
		<reference ref_id="CVE-2021-35565" ref_url="https://www.suse.com/security/cve/CVE-2021-35565/" source="CVE"/>
		<reference ref_id="CVE-2021-35567" ref_url="https://www.suse.com/security/cve/CVE-2021-35567/" source="CVE"/>
		<reference ref_id="CVE-2021-35578" ref_url="https://www.suse.com/security/cve/CVE-2021-35578/" source="CVE"/>
		<reference ref_id="CVE-2021-35586" ref_url="https://www.suse.com/security/cve/CVE-2021-35586/" source="CVE"/>
		<reference ref_id="CVE-2021-35588" ref_url="https://www.suse.com/security/cve/CVE-2021-35588/" source="CVE"/>
		<reference ref_id="CVE-2021-35603" ref_url="https://www.suse.com/security/cve/CVE-2021-35603/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009768.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

Update to version OpenJDK 8u312 (October 2021 CPU):
  
- CVE-2021-35550: Fixed weak ciphers preferred over stronger ones for TLS (bsc#1191901).
- CVE-2021-35556: Fixed excessive memory allocation in RTFParser (bsc#1191910).
- CVE-2021-35559: Fixed excessive memory allocation in RTFReader (bsc#1191911).
- CVE-2021-35561: Fixed excessive memory allocation in HashMap and HashSet (bsc#1191912).
- CVE-2021-35564: Fixed certificates with end dates too far in the future can corrupt keystore (bsc#1191913).
- CVE-2021-35565: Fixed loop in HttpsServer triggered during TLS session close (bsc#1191909).
- CVE-2021-35567: Fixed incorrect principal selection when using Kerberos Constrained Delegation (bsc#1191903).
- CVE-2021-35578: Fixed unexpected exception raised during TLS handshake (bsc#1191904).
- CVE-2021-35586: Fixed excessive memory allocation in BMPImageReader (bsc#1191914).
- CVE-2021-35588: Fixed incomplete validation of inner class references in ClassFileParser (bsc#1191905)
- CVE-2021-35603: Fixed non-constant comparison during TLS handshakes (bsc#1191906).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-23"/>
	<updated date="2021-11-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191901">SUSE bug 1191901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191903">SUSE bug 1191903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191904">SUSE bug 1191904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191905">SUSE bug 1191905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191906">SUSE bug 1191906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191909">SUSE bug 1191909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191910">SUSE bug 1191910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191911">SUSE bug 1191911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191912">SUSE bug 1191912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191913">SUSE bug 1191913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191914">SUSE bug 1191914</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35550/">CVE-2021-35550</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35556/">CVE-2021-35556</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35559/">CVE-2021-35559</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35561/">CVE-2021-35561</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-35564/">CVE-2021-35564</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35565/">CVE-2021-35565</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35567/">CVE-2021-35567</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35578/">CVE-2021-35578</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35586/">CVE-2021-35586</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35588/">CVE-2021-35588</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35603/">CVE-2021-35603</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009656980" comment="java-1_8_0-openjdk-1.8.0.312-3.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656981" comment="java-1_8_0-openjdk-demo-1.8.0.312-3.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656982" comment="java-1_8_0-openjdk-devel-1.8.0.312-3.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656983" comment="java-1_8_0-openjdk-headless-1.8.0.312-3.58.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140432" version="1" class="patch">
	<metadata>
		<title>Security update for ruby2.5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188160" ref_url="https://bugzilla.suse.com/1188160" source="BUGZILLA"/>
		<reference ref_id="1188161" ref_url="https://bugzilla.suse.com/1188161" source="BUGZILLA"/>
		<reference ref_id="1190375" ref_url="https://bugzilla.suse.com/1190375" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31799" ref_url="https://www.suse.com/security/cve/CVE-2021-31799/" source="CVE"/>
		<reference ref_id="CVE-2021-31810" ref_url="https://www.suse.com/security/cve/CVE-2021-31810/" source="CVE"/>
		<reference ref_id="CVE-2021-32066" ref_url="https://www.suse.com/security/cve/CVE-2021-32066/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009795.html" source="SUSE-SU"/>
		<description>
This update for ruby2.5 fixes the following issues:

- CVE-2021-31799: Fixed Command injection vulnerability in RDoc (bsc#1190375).
- CVE-2021-31810: Fixed trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161).
- CVE-2021-32066: Fixed StartTLS stripping vulnerability in Net:IMAP (bsc#1188160).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-01"/>
	<updated date="2021-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188160">SUSE bug 1188160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188161">SUSE bug 1188161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190375">SUSE bug 1190375</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31799/">CVE-2021-31799</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-31810/">CVE-2021-31810</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-32066/">CVE-2021-32066</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657512" comment="libruby2_5-2_5-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657513" comment="ruby2.5-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657514" comment="ruby2.5-devel-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657515" comment="ruby2.5-devel-extra-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657516" comment="ruby2.5-stdlib-2.5.9-4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140433" version="1" class="patch">
	<metadata>
		<title>Security update for python-Pygments (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1184812" ref_url="https://bugzilla.suse.com/1184812" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27291" ref_url="https://www.suse.com/security/cve/CVE-2021-27291/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009782.html" source="SUSE-SU"/>
		<description>
This update for python-Pygments fixes the following issues:

- CVE-2021-27291: Fixed ReDoS via crafted malicious input (bsc#1184812).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-01"/>
	<updated date="2021-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184812">SUSE bug 1184812</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27291/">CVE-2021-27291</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657672" comment="python3-Pygments-2.6.1-7.10.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140434" version="1" class="patch">
	<metadata>
		<title>Security update for poppler (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1092945" ref_url="https://bugzilla.suse.com/1092945" source="BUGZILLA"/>
		<reference ref_id="1102531" ref_url="https://bugzilla.suse.com/1102531" source="BUGZILLA"/>
		<reference ref_id="1107597" ref_url="https://bugzilla.suse.com/1107597" source="BUGZILLA"/>
		<reference ref_id="1114966" ref_url="https://bugzilla.suse.com/1114966" source="BUGZILLA"/>
		<reference ref_id="1115185" ref_url="https://bugzilla.suse.com/1115185" source="BUGZILLA"/>
		<reference ref_id="1115186" ref_url="https://bugzilla.suse.com/1115186" source="BUGZILLA"/>
		<reference ref_id="1115187" ref_url="https://bugzilla.suse.com/1115187" source="BUGZILLA"/>
		<reference ref_id="1115626" ref_url="https://bugzilla.suse.com/1115626" source="BUGZILLA"/>
		<reference ref_id="1120495" ref_url="https://bugzilla.suse.com/1120495" source="BUGZILLA"/>
		<reference ref_id="1120496" ref_url="https://bugzilla.suse.com/1120496" source="BUGZILLA"/>
		<reference ref_id="1120939" ref_url="https://bugzilla.suse.com/1120939" source="BUGZILLA"/>
		<reference ref_id="1120956" ref_url="https://bugzilla.suse.com/1120956" source="BUGZILLA"/>
		<reference ref_id="1124150" ref_url="https://bugzilla.suse.com/1124150" source="BUGZILLA"/>
		<reference ref_id="1127329" ref_url="https://bugzilla.suse.com/1127329" source="BUGZILLA"/>
		<reference ref_id="1129202" ref_url="https://bugzilla.suse.com/1129202" source="BUGZILLA"/>
		<reference ref_id="1130229" ref_url="https://bugzilla.suse.com/1130229" source="BUGZILLA"/>
		<reference ref_id="1131696" ref_url="https://bugzilla.suse.com/1131696" source="BUGZILLA"/>
		<reference ref_id="1131722" ref_url="https://bugzilla.suse.com/1131722" source="BUGZILLA"/>
		<reference ref_id="1142465" ref_url="https://bugzilla.suse.com/1142465" source="BUGZILLA"/>
		<reference ref_id="1143950" ref_url="https://bugzilla.suse.com/1143950" source="BUGZILLA"/>
		<reference ref_id="1179163" ref_url="https://bugzilla.suse.com/1179163" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18267" ref_url="https://www.suse.com/security/cve/CVE-2017-18267/" source="CVE"/>
		<reference ref_id="CVE-2018-13988" ref_url="https://www.suse.com/security/cve/CVE-2018-13988/" source="CVE"/>
		<reference ref_id="CVE-2018-16646" ref_url="https://www.suse.com/security/cve/CVE-2018-16646/" source="CVE"/>
		<reference ref_id="CVE-2018-18897" ref_url="https://www.suse.com/security/cve/CVE-2018-18897/" source="CVE"/>
		<reference ref_id="CVE-2018-19058" ref_url="https://www.suse.com/security/cve/CVE-2018-19058/" source="CVE"/>
		<reference ref_id="CVE-2018-19059" ref_url="https://www.suse.com/security/cve/CVE-2018-19059/" source="CVE"/>
		<reference ref_id="CVE-2018-19060" ref_url="https://www.suse.com/security/cve/CVE-2018-19060/" source="CVE"/>
		<reference ref_id="CVE-2018-19149" ref_url="https://www.suse.com/security/cve/CVE-2018-19149/" source="CVE"/>
		<reference ref_id="CVE-2018-20481" ref_url="https://www.suse.com/security/cve/CVE-2018-20481/" source="CVE"/>
		<reference ref_id="CVE-2018-20551" ref_url="https://www.suse.com/security/cve/CVE-2018-20551/" source="CVE"/>
		<reference ref_id="CVE-2018-20650" ref_url="https://www.suse.com/security/cve/CVE-2018-20650/" source="CVE"/>
		<reference ref_id="CVE-2018-20662" ref_url="https://www.suse.com/security/cve/CVE-2018-20662/" source="CVE"/>
		<reference ref_id="CVE-2019-10871" ref_url="https://www.suse.com/security/cve/CVE-2019-10871/" source="CVE"/>
		<reference ref_id="CVE-2019-10872" ref_url="https://www.suse.com/security/cve/CVE-2019-10872/" source="CVE"/>
		<reference ref_id="CVE-2019-14494" ref_url="https://www.suse.com/security/cve/CVE-2019-14494/" source="CVE"/>
		<reference ref_id="CVE-2019-7310" ref_url="https://www.suse.com/security/cve/CVE-2019-7310/" source="CVE"/>
		<reference ref_id="CVE-2019-9200" ref_url="https://www.suse.com/security/cve/CVE-2019-9200/" source="CVE"/>
		<reference ref_id="CVE-2019-9631" ref_url="https://www.suse.com/security/cve/CVE-2019-9631/" source="CVE"/>
		<reference ref_id="CVE-2019-9903" ref_url="https://www.suse.com/security/cve/CVE-2019-9903/" source="CVE"/>
		<reference ref_id="CVE-2019-9959" ref_url="https://www.suse.com/security/cve/CVE-2019-9959/" source="CVE"/>
		<reference ref_id="CVE-2020-27778" ref_url="https://www.suse.com/security/cve/CVE-2020-27778/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<description>
This update for poppler fixes the following issues:

- CVE-2017-18267: Fixed an infinite recursion that would allow remote attackers to cause a denial of service (bsc#1092945).
- CVE-2018-13988: Added an improper implementation check which otherwise could allow buffer overflows, memory corruption, and denial of service (bsc#1102531).
- CVE-2018-16646: Fixed an infinite recursion which could allow a denial-of-service attack via a specially crafted PDF file (bsc#1107597).
- CVE-2018-18897: Fixed a memory leak (bsc#1114966).
- CVE-2018-19058: Fixed a bug which could allow a denial-of-service attack via a specially crafted PDF file (bsc#1115187).
- CVE-2018-19059: Fixed an out-of-bounds read access which could allow a denial-of-service attack (bsc#1115186).
- CVE-2018-19060: Fixed a NULL pointer dereference which could allow a denial-of-service attack (bsc#1115185).
- CVE-2018-19149: Fixed a NULL pointer dereference which could allow a denial-of-service attack (bsc#1115626).
- CVE-2018-20481: Fixed a NULL pointer dereference while handling unallocated XRef entries which could allow a denial-of-service attack (bsc#1120495).
- CVE-2018-20551: Fixed a reachable assertion which could allow a denial-of-service attack through specially crafted PDF files (bsc#1120496).
- CVE-2018-20650: Fixed a reachable assertion which could allow denial-of-service through specially crafted PDF files (bsc#1120939).
- CVE-2018-20662: Fixed a bug which could potentially crash the running process by SIGABRT resulting in a denial-of-service attack through a specially crafted PDF file (bsc#1120956).
- CVE-2019-10871: Fixed a heap-based buffer  over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc (bsc#1131696).
- CVE-2019-10872: Fixed a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc (bsc#1131722).
- CVE-2019-14494: Fixed a divide-by-zero error in the function SplashOutputDev::tilingPatternFill (bsc#1143950).
- CVE-2019-7310: Fixed a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) that allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document (bsc#1124150).
- CVE-2019-9200: Fixed a heap-based buffer underwrite which could allow denial-of-service attack through a specially crafted PDF file (bsc#1127329)
- CVE-2019-9631: Fixed a heap-based buffer over-read  in the CairoRescaleBox.cc downsample_row_box_filter function (bsc#1129202).
- CVE-2019-9903: Fixed excessive stack consumption in the Dict::find() method, which can be triggered by passing a crafted pdf file to the pdfunite binary (bsc#1130229).
- CVE-2019-9959: Fixed integer overflow that made it possible to allocate a large memory chunk on the heap with a size controlled by an attacker (bsc#1142465).
- CVE-2020-27778: Fixed buffer overflow vulnerability in pdftohtml (bsc#1179163).
  		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-01"/>
	<updated date="2021-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1092945">SUSE bug 1092945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102531">SUSE bug 1102531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107597">SUSE bug 1107597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114966">SUSE bug 1114966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115185">SUSE bug 1115185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115186">SUSE bug 1115186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115187">SUSE bug 1115187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115626">SUSE bug 1115626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120495">SUSE bug 1120495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120496">SUSE bug 1120496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120939">SUSE bug 1120939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120956">SUSE bug 1120956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124150">SUSE bug 1124150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127329">SUSE bug 1127329</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129202">SUSE bug 1129202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130229">SUSE bug 1130229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131696">SUSE bug 1131696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131722">SUSE bug 1131722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142465">SUSE bug 1142465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143950">SUSE bug 1143950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179163">SUSE bug 1179163</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18267/">CVE-2017-18267</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13988/">CVE-2018-13988</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16646/">CVE-2018-16646</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18897/">CVE-2018-18897</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19058/">CVE-2018-19058</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19059/">CVE-2018-19059</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19060/">CVE-2018-19060</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19149/">CVE-2018-19149</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20481/">CVE-2018-20481</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20551/">CVE-2018-20551</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20650/">CVE-2018-20650</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20662/">CVE-2018-20662</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10871/">CVE-2019-10871</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10872/">CVE-2019-10872</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14494/">CVE-2019-14494</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7310/">CVE-2019-7310</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9200/">CVE-2019-9200</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9631/">CVE-2019-9631</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9903/">CVE-2019-9903</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9959/">CVE-2019-9959</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27778/">CVE-2020-27778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658132" comment="libpoppler-cpp0-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658133" comment="libpoppler-devel-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658134" comment="libpoppler-glib-devel-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658135" comment="libpoppler-glib8-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658136" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658137" comment="poppler-tools-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658138" comment="typelib-1_0-Poppler-0_18-0.62.0-4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140435" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1100416" ref_url="https://bugzilla.suse.com/1100416" source="BUGZILLA"/>
		<reference ref_id="1108488" ref_url="https://bugzilla.suse.com/1108488" source="BUGZILLA"/>
		<reference ref_id="1129735" ref_url="https://bugzilla.suse.com/1129735" source="BUGZILLA"/>
		<reference ref_id="1129898" ref_url="https://bugzilla.suse.com/1129898" source="BUGZILLA"/>
		<reference ref_id="1133374" ref_url="https://bugzilla.suse.com/1133374" source="BUGZILLA"/>
		<reference ref_id="1136513" ref_url="https://bugzilla.suse.com/1136513" source="BUGZILLA"/>
		<reference ref_id="1171420" ref_url="https://bugzilla.suse.com/1171420" source="BUGZILLA"/>
		<reference ref_id="1176724" ref_url="https://bugzilla.suse.com/1176724" source="BUGZILLA"/>
		<reference ref_id="1177666" ref_url="https://bugzilla.suse.com/1177666" source="BUGZILLA"/>
		<reference ref_id="1181158" ref_url="https://bugzilla.suse.com/1181158" source="BUGZILLA"/>
		<reference ref_id="1184673" ref_url="https://bugzilla.suse.com/1184673" source="BUGZILLA"/>
		<reference ref_id="1184804" ref_url="https://bugzilla.suse.com/1184804" source="BUGZILLA"/>
		<reference ref_id="1185377" ref_url="https://bugzilla.suse.com/1185377" source="BUGZILLA"/>
		<reference ref_id="1185726" ref_url="https://bugzilla.suse.com/1185726" source="BUGZILLA"/>
		<reference ref_id="1185758" ref_url="https://bugzilla.suse.com/1185758" source="BUGZILLA"/>
		<reference ref_id="1185973" ref_url="https://bugzilla.suse.com/1185973" source="BUGZILLA"/>
		<reference ref_id="1186078" ref_url="https://bugzilla.suse.com/1186078" source="BUGZILLA"/>
		<reference ref_id="1186109" ref_url="https://bugzilla.suse.com/1186109" source="BUGZILLA"/>
		<reference ref_id="1186390" ref_url="https://bugzilla.suse.com/1186390" source="BUGZILLA"/>
		<reference ref_id="1186482" ref_url="https://bugzilla.suse.com/1186482" source="BUGZILLA"/>
		<reference ref_id="1186672" ref_url="https://bugzilla.suse.com/1186672" source="BUGZILLA"/>
		<reference ref_id="1188062" ref_url="https://bugzilla.suse.com/1188062" source="BUGZILLA"/>
		<reference ref_id="1188063" ref_url="https://bugzilla.suse.com/1188063" source="BUGZILLA"/>
		<reference ref_id="1188172" ref_url="https://bugzilla.suse.com/1188172" source="BUGZILLA"/>
		<reference ref_id="1188563" ref_url="https://bugzilla.suse.com/1188563" source="BUGZILLA"/>
		<reference ref_id="1188601" ref_url="https://bugzilla.suse.com/1188601" source="BUGZILLA"/>
		<reference ref_id="1188616" ref_url="https://bugzilla.suse.com/1188616" source="BUGZILLA"/>
		<reference ref_id="1188838" ref_url="https://bugzilla.suse.com/1188838" source="BUGZILLA"/>
		<reference ref_id="1188876" ref_url="https://bugzilla.suse.com/1188876" source="BUGZILLA"/>
		<reference ref_id="1188983" ref_url="https://bugzilla.suse.com/1188983" source="BUGZILLA"/>
		<reference ref_id="1188985" ref_url="https://bugzilla.suse.com/1188985" source="BUGZILLA"/>
		<reference ref_id="1189057" ref_url="https://bugzilla.suse.com/1189057" source="BUGZILLA"/>
		<reference ref_id="1189262" ref_url="https://bugzilla.suse.com/1189262" source="BUGZILLA"/>
		<reference ref_id="1189291" ref_url="https://bugzilla.suse.com/1189291" source="BUGZILLA"/>
		<reference ref_id="1189399" ref_url="https://bugzilla.suse.com/1189399" source="BUGZILLA"/>
		<reference ref_id="1189400" ref_url="https://bugzilla.suse.com/1189400" source="BUGZILLA"/>
		<reference ref_id="1189706" ref_url="https://bugzilla.suse.com/1189706" source="BUGZILLA"/>
		<reference ref_id="1189846" ref_url="https://bugzilla.suse.com/1189846" source="BUGZILLA"/>
		<reference ref_id="1189884" ref_url="https://bugzilla.suse.com/1189884" source="BUGZILLA"/>
		<reference ref_id="1190023" ref_url="https://bugzilla.suse.com/1190023" source="BUGZILLA"/>
		<reference ref_id="1190025" ref_url="https://bugzilla.suse.com/1190025" source="BUGZILLA"/>
		<reference ref_id="1190067" ref_url="https://bugzilla.suse.com/1190067" source="BUGZILLA"/>
		<reference ref_id="1190115" ref_url="https://bugzilla.suse.com/1190115" source="BUGZILLA"/>
		<reference ref_id="1190117" ref_url="https://bugzilla.suse.com/1190117" source="BUGZILLA"/>
		<reference ref_id="1190159" ref_url="https://bugzilla.suse.com/1190159" source="BUGZILLA"/>
		<reference ref_id="1190276" ref_url="https://bugzilla.suse.com/1190276" source="BUGZILLA"/>
		<reference ref_id="1190349" ref_url="https://bugzilla.suse.com/1190349" source="BUGZILLA"/>
		<reference ref_id="1190351" ref_url="https://bugzilla.suse.com/1190351" source="BUGZILLA"/>
		<reference ref_id="1190479" ref_url="https://bugzilla.suse.com/1190479" source="BUGZILLA"/>
		<reference ref_id="1190534" ref_url="https://bugzilla.suse.com/1190534" source="BUGZILLA"/>
		<reference ref_id="1190601" ref_url="https://bugzilla.suse.com/1190601" source="BUGZILLA"/>
		<reference ref_id="1190717" ref_url="https://bugzilla.suse.com/1190717" source="BUGZILLA"/>
		<reference ref_id="1191193" ref_url="https://bugzilla.suse.com/1191193" source="BUGZILLA"/>
		<reference ref_id="1191315" ref_url="https://bugzilla.suse.com/1191315" source="BUGZILLA"/>
		<reference ref_id="1191317" ref_url="https://bugzilla.suse.com/1191317" source="BUGZILLA"/>
		<reference ref_id="1191349" ref_url="https://bugzilla.suse.com/1191349" source="BUGZILLA"/>
		<reference ref_id="1191457" ref_url="https://bugzilla.suse.com/1191457" source="BUGZILLA"/>
		<reference ref_id="1191628" ref_url="https://bugzilla.suse.com/1191628" source="BUGZILLA"/>
		<reference ref_id="1191790" ref_url="https://bugzilla.suse.com/1191790" source="BUGZILLA"/>
		<reference ref_id="1191800" ref_url="https://bugzilla.suse.com/1191800" source="BUGZILLA"/>
		<reference ref_id="1191888" ref_url="https://bugzilla.suse.com/1191888" source="BUGZILLA"/>
		<reference ref_id="1191961" ref_url="https://bugzilla.suse.com/1191961" source="BUGZILLA"/>
		<reference ref_id="1192045" ref_url="https://bugzilla.suse.com/1192045" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="1192379" ref_url="https://bugzilla.suse.com/1192379" source="BUGZILLA"/>
		<reference ref_id="1192400" ref_url="https://bugzilla.suse.com/1192400" source="BUGZILLA"/>
		<reference ref_id="1192775" ref_url="https://bugzilla.suse.com/1192775" source="BUGZILLA"/>
		<reference ref_id="1192781" ref_url="https://bugzilla.suse.com/1192781" source="BUGZILLA"/>
		<reference ref_id="1192802" ref_url="https://bugzilla.suse.com/1192802" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13405" ref_url="https://www.suse.com/security/cve/CVE-2018-13405/" source="CVE"/>
		<reference ref_id="CVE-2018-9517" ref_url="https://www.suse.com/security/cve/CVE-2018-9517/" source="CVE"/>
		<reference ref_id="CVE-2019-3874" ref_url="https://www.suse.com/security/cve/CVE-2019-3874/" source="CVE"/>
		<reference ref_id="CVE-2019-3900" ref_url="https://www.suse.com/security/cve/CVE-2019-3900/" source="CVE"/>
		<reference ref_id="CVE-2020-0429" ref_url="https://www.suse.com/security/cve/CVE-2020-0429/" source="CVE"/>
		<reference ref_id="CVE-2020-12770" ref_url="https://www.suse.com/security/cve/CVE-2020-12770/" source="CVE"/>
		<reference ref_id="CVE-2020-3702" ref_url="https://www.suse.com/security/cve/CVE-2020-3702/" source="CVE"/>
		<reference ref_id="CVE-2020-4788" ref_url="https://www.suse.com/security/cve/CVE-2020-4788/" source="CVE"/>
		<reference ref_id="CVE-2021-0941" ref_url="https://www.suse.com/security/cve/CVE-2021-0941/" source="CVE"/>
		<reference ref_id="CVE-2021-20322" ref_url="https://www.suse.com/security/cve/CVE-2021-20322/" source="CVE"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-31916" ref_url="https://www.suse.com/security/cve/CVE-2021-31916/" source="CVE"/>
		<reference ref_id="CVE-2021-33033" ref_url="https://www.suse.com/security/cve/CVE-2021-33033/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="CVE-2021-34556" ref_url="https://www.suse.com/security/cve/CVE-2021-34556/" source="CVE"/>
		<reference ref_id="CVE-2021-34981" ref_url="https://www.suse.com/security/cve/CVE-2021-34981/" source="CVE"/>
		<reference ref_id="CVE-2021-3542" ref_url="https://www.suse.com/security/cve/CVE-2021-3542/" source="CVE"/>
		<reference ref_id="CVE-2021-35477" ref_url="https://www.suse.com/security/cve/CVE-2021-35477/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3655" ref_url="https://www.suse.com/security/cve/CVE-2021-3655/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-3659" ref_url="https://www.suse.com/security/cve/CVE-2021-3659/" source="CVE"/>
		<reference ref_id="CVE-2021-3679" ref_url="https://www.suse.com/security/cve/CVE-2021-3679/" source="CVE"/>
		<reference ref_id="CVE-2021-3715" ref_url="https://www.suse.com/security/cve/CVE-2021-3715/" source="CVE"/>
		<reference ref_id="CVE-2021-37159" ref_url="https://www.suse.com/security/cve/CVE-2021-37159/" source="CVE"/>
		<reference ref_id="CVE-2021-3732" ref_url="https://www.suse.com/security/cve/CVE-2021-3732/" source="CVE"/>
		<reference ref_id="CVE-2021-3744" ref_url="https://www.suse.com/security/cve/CVE-2021-3744/" source="CVE"/>
		<reference ref_id="CVE-2021-3752" ref_url="https://www.suse.com/security/cve/CVE-2021-3752/" source="CVE"/>
		<reference ref_id="CVE-2021-3753" ref_url="https://www.suse.com/security/cve/CVE-2021-3753/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="CVE-2021-3759" ref_url="https://www.suse.com/security/cve/CVE-2021-3759/" source="CVE"/>
		<reference ref_id="CVE-2021-3760" ref_url="https://www.suse.com/security/cve/CVE-2021-3760/" source="CVE"/>
		<reference ref_id="CVE-2021-3764" ref_url="https://www.suse.com/security/cve/CVE-2021-3764/" source="CVE"/>
		<reference ref_id="CVE-2021-3772" ref_url="https://www.suse.com/security/cve/CVE-2021-3772/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="CVE-2021-38204" ref_url="https://www.suse.com/security/cve/CVE-2021-38204/" source="CVE"/>
		<reference ref_id="CVE-2021-40490" ref_url="https://www.suse.com/security/cve/CVE-2021-40490/" source="CVE"/>
		<reference ref_id="CVE-2021-41864" ref_url="https://www.suse.com/security/cve/CVE-2021-41864/" source="CVE"/>
		<reference ref_id="CVE-2021-42008" ref_url="https://www.suse.com/security/cve/CVE-2021-42008/" source="CVE"/>
		<reference ref_id="CVE-2021-42252" ref_url="https://www.suse.com/security/cve/CVE-2021-42252/" source="CVE"/>
		<reference ref_id="CVE-2021-42739" ref_url="https://www.suse.com/security/cve/CVE-2021-42739/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

  You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

- CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).
- CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).
- CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
- CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails  (bsc#1191961).
- CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).
- CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).
- CVE-2021-3655: Missing size validations on inbound SCTP packets may have allowed the kernel to read uninitialized memory (bnc#1188563).
- CVE-2021-33033: The Linux kernel has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value (bnc#1186109 bnc#1186390 bnc#1188876).
- CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev-&gt;rf_conn_info object (bsc#1190067).
- CVE-2021-42739: The firewire subsystem in the Linux kernel has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bnc#1184673).
- CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).
- CVE-2018-13405: The inode_init_owner function in fs/inode.c in the Linux kernel allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID (bnc#1100416 bnc#1129735).
- CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349).
- CVE-2021-34556: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack (bnc#1188983).
- CVE-2021-35477: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation did not necessarily occur before a store operation that has an attacker-controlled value (bnc#1188985).
- CVE-2021-42252: An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a certain comparison uses values that are not memory sizes (bnc#1190479).
- CVE-2021-41864: prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317).
- CVE-2021-42008: The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access (bnc#1191315).
- CVE-2021-3759: Unaccounted ipc objects could have lead to breaking memcg limits and DoS attacks (bsc#1190115).
- CVE-2020-3702: Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic (bnc#1191193).
- CVE-2021-3752: Fixed a use after free vulnerability in the bluetooth module. (bsc#1190023)
- CVE-2021-40490: A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel (bnc#1190159 bnc#1192775)
- CVE-2021-3744: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1189884)
- CVE-2021-3764: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1190534)
- CVE-2020-12770: An issue was discovered in the Linux kernel sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040 (bnc#1171420).
- CVE-2021-3640: Fixed a Use-After-Free vulnerability in function sco_sock_sendmsg() in the bluetooth stack (bsc#1188172).
- CVE-2019-3900: An infinite loop issue was found in the vhost_net kernel module, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario (bnc#1133374).
- CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. (bnc#1129898).
- CVE-2018-9517: In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. (bnc#1108488).
- CVE-2021-38160: Data corruption or loss could be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190117)
- CVE-2021-3753: Fixed race out-of-bounds in virtual terminal handling (bsc#1190025).
- CVE-2021-3732: Mounting overlayfs inside an unprivileged user namespace can reveal files (bsc#1189706).
- CVE-2021-3653: A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the 'int_ctl' field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7 (bnc#1189399).
- CVE-2021-3656: Missing validation of the the `virt_ext` VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS for the L2 guest (bsc#1189400).
- CVE-2021-38204: drivers/usb/host/max3421-hcd.c allowed physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations (bnc#1189291).
- CVE-2021-3679: A lack of CPU resource in the tracing module functionality was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service (bnc#1189057).
- CVE-2020-4788: IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296 (bnc#0 bnc#1177666 bnc#1181158).
- CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (bsc#1188876).
- CVE-2020-0429: In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1176724).
- CVE-2021-37576: arch/powerpc/kvm/book3s_rtas.c on the powerpc platform allowed KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e (bnc#1188838 bnc#1190276).
- CVE-2021-22543: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allowed users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation (bnc#1186482 bnc#1190276).
- CVE-2021-33909: fs/seq_file.c did not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05 (bnc#1188062 bnc#1188063).

The following non-security bugs were fixed:

- Add arch-dependent support markers in supported.conf (bsc#1186672) 
- Add the support for kernel-FLAVOR-optional subpackage (jsc#SLE-11796)
- bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22913)
- bpf: Disallow unprivileged bpf by default (jsc#SLE-22913).
- ceph: take snap_empty_lock atomically with snaprealm refcount change (bsc#1191888).
- config: disable unprivileged BPF by default (jsc#SLE-22913)
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (bsc#1185758,bsc#1192400).
- drm: fix spectre issue in vmw_execbuf_ioctl (bsc#1192802).
- ftrace: Fix scripts/recordmcount.pl due to new binutils (bsc#1192267).
- gigaset: fix spectre issue in do_data_b3_req (bsc#1192802).
- hisax: fix spectre issues (bsc#1192802).
- hv: mana: adjust mana_select_queue to old API (jsc#SLE-18779, bsc#1185726).
- hv: mana: remove netdev_lockdep_set_classes usage (jsc#SLE-18779, bsc#1185726).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number (jsc#SLE-18779, bsc#1185726).
- hysdn: fix spectre issue in hycapi_send_message (bsc#1192802).
- infiniband: fix spectre issue in ib_uverbs_write (bsc#1192802).
- infiniband: fix spectre issue in ib_uverbs_write (bsc#1192802).
- ipc: remove memcg accounting for sops objects in do_semtimedop() (bsc#1190115).
- iwlwifi: fix spectre issue in iwl_dbgfs_update_pm (bsc#1192802).
- kernel-binary.spec: Exctract s390 decompression code (jsc#SLE-17042).
- kernel-binary.spec: Fix up usrmerge for non-modular kernels.
- kernel-binary.spec.in: build-id check requires elfutils.
- kernel-binary.spec.in: Regenerate makefile when not using mkmakefile.
- kernel-binary.spec: Only use mkmakefile when it exists Linux 5.13 no longer had a mkmakefile script
- kernel-binary.spec: Remove obsolete and wrong comment mkmakefile is repleced by echo on newer kernel
- kernel-docs.spec.in: Build using an utf-8 locale. Sphinx cannot handle UTF-8 input in non-UTF-8 locale.
- media: dvb_ca_en50221: prevent using slot_info for Spectre attacs (bsc#1192802).
- media: dvb_ca_en50221: sanity check slot number from userspace (bsc#1192802).
- media: wl128x: get rid of a potential spectre issue (bsc#1192802).
- memcg: enable accounting for file lock caches (bsc#1190115).
- mm/memory.c: do_fault: avoid usage of stale vm_area_struct (bsc#1136513).
- mpt3sas: fix spectre issues (bsc#1192802).
- net: mana: Add a driver for Microsoft Azure Network Adapter (MANA) (jsc#SLE-18779, bsc#1185726).
- net: mana: Add support for EQ sharing (jsc#SLE-18779, bsc#1185726).
- net: mana: Add WARN_ON_ONCE in case of CQE read overflow (jsc#SLE-18779, bsc#1185726).
- net: mana: Fix a memory leak in an error handling path in (jsc#SLE-18779, bsc#1185726).
- net: mana: Fix error handling in mana_create_rxq() (git-fixes, bsc#1191800).
- net: mana: fix PCI_HYPERV dependency (jsc#SLE-18779, bsc#1185726).
- net: mana: Move NAPI from EQ to CQ (jsc#SLE-18779, bsc#1185726).
- net: mana: Prefer struct_size over open coded arithmetic (jsc#SLE-18779, bsc#1185726).
- net: mana: remove redundant initialization of variable err (jsc#SLE-18779, bsc#1185726).
- net: mana: Use int to check the return value of mana_gd_poll_cq() (jsc#SLE-18779, bsc#1185726).
- net: mana: Use struct_size() in kzalloc() (jsc#SLE-18779, bsc#1185726).
- net_sched: cls_route: remove the right filter from hashtable (networking-stable-20_03_28).
- net: sched: sch_teql: fix null-pointer dereference (bsc#1190717).
- net: sock_diag: Fix spectre v1 gadget in __sock_diag_cmd() (bsc#1192802).
- NFS: Do uncached readdir when we're seeking a cookie in an empty page cache (bsc#1191628).
- objtool: Do not fail on missing symbol table (bsc#1192379).
- osst: fix spectre issue in osst_verify_frame (bsc#1192802).
- ovl: check whiteout in ovl_create_over_whiteout() (bsc#1189846).
- ovl: filter of trusted xattr results in audit (bsc#1189846).
- ovl: fix dentry leak in ovl_get_redirect (bsc#1189846).
- ovl: initialize error in ovl_copy_xattr (bsc#1189846).
- ovl: relax WARN_ON() on rename to self (bsc#1189846).
- PCI: hv: Use expected affinity when unmasking IRQ (bsc#1185973).
- Revert 'memcg: enable accounting for file lock caches (bsc#1190115).' This reverts commit 912b4421a3e9bb9f0ef1aadc64a436666259bd4d. It's effectively upstream commit 3754707bcc3e190e5dadc978d172b61e809cb3bd applied to kernel-source (to avoid proliferation of patches). Make a note in blacklist.conf too.
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (bsc#1190601).
- s390/bpf: Fix branch shortening during codegen pass (bsc#1190601).
- s390/bpf: Fix optimizing out zero-extensions (bsc#1190601).
- s390: bpf: implement jitting of BPF_ALU | BPF_ARSH | BPF_* (bsc#1190601).
- s390/bpf: Wrap JIT macro parameter usages in parentheses (bsc#1190601).
- scripts/git_sort/git_sort.py: add bpf git repo
- scripts/git_sort/git_sort.py: Update nvme repositories
- scsi: libfc: Fix array index out of bound exception (bsc#1188616).
- scsi: lpfc: Fix FLOGI failure due to accessing a freed node (bsc#1191349).
- scsi: lpfc: Fix memory overwrite during FC-GS I/O abort handling (bsc#1191349 bsc#1191457).
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (bsc#1191349 bsc#1191457).
- scsi: target: avoid using lun_tg_pt_gp after unlock (bsc#1186078).
- sctp: check asoc peer.asconf_capable before processing asconf (bsc#1190351).
- sctp: fully initialize v4 addr in some functions (bsc#1188563).
- sysvipc/sem: mitigate semnum index against spectre v1 (bsc#1192802).
- target: core: Fix sense key for invalid XCOPY request (bsc#1186078).
- Update config files: Add CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
- Use /usr/lib/modules as module dir when usermerge is active in the target distro.
- UsrMerge the kernel (boo#1184804)
- x86/CPU: Add more Icelake model numbers (bsc#1185758,bsc#1192400).
- xfrm: xfrm_state_mtu should return at least 1280 for ipv6 (bsc#1185377).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-02"/>
	<updated date="2021-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1100416">SUSE bug 1100416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108488">SUSE bug 1108488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129735">SUSE bug 1129735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129898">SUSE bug 1129898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133374">SUSE bug 1133374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136513">SUSE bug 1136513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171420">SUSE bug 1171420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176724">SUSE bug 1176724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177666">SUSE bug 1177666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181158">SUSE bug 1181158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184673">SUSE bug 1184673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184804">SUSE bug 1184804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185377">SUSE bug 1185377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185726">SUSE bug 1185726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185758">SUSE bug 1185758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185973">SUSE bug 1185973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186078">SUSE bug 1186078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186109">SUSE bug 1186109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186390">SUSE bug 1186390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186482">SUSE bug 1186482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186672">SUSE bug 1186672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188062">SUSE bug 1188062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188063">SUSE bug 1188063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188172">SUSE bug 1188172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188563">SUSE bug 1188563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188601">SUSE bug 1188601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188616">SUSE bug 1188616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188838">SUSE bug 1188838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188876">SUSE bug 1188876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188983">SUSE bug 1188983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188985">SUSE bug 1188985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189057">SUSE bug 1189057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189262">SUSE bug 1189262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189291">SUSE bug 1189291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189399">SUSE bug 1189399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189400">SUSE bug 1189400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189706">SUSE bug 1189706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189846">SUSE bug 1189846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189884">SUSE bug 1189884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190023">SUSE bug 1190023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190025">SUSE bug 1190025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190067">SUSE bug 1190067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190115">SUSE bug 1190115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190117">SUSE bug 1190117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190159">SUSE bug 1190159</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190276">SUSE bug 1190276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190349">SUSE bug 1190349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190351">SUSE bug 1190351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190479">SUSE bug 1190479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190534">SUSE bug 1190534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190601">SUSE bug 1190601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190717">SUSE bug 1190717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191193">SUSE bug 1191193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191315">SUSE bug 1191315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191317">SUSE bug 1191317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191349">SUSE bug 1191349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191457">SUSE bug 1191457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191628">SUSE bug 1191628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191790">SUSE bug 1191790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191800">SUSE bug 1191800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191888">SUSE bug 1191888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191961">SUSE bug 1191961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192045">SUSE bug 1192045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192379">SUSE bug 1192379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192400">SUSE bug 1192400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192775">SUSE bug 1192775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192781">SUSE bug 1192781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192802">SUSE bug 1192802</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-13405/">CVE-2018-13405</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-9517/">CVE-2018-9517</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3874/">CVE-2019-3874</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3900/">CVE-2019-3900</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0429/">CVE-2020-0429</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12770/">CVE-2020-12770</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3702/">CVE-2020-3702</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-4788/">CVE-2020-4788</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0941/">CVE-2021-0941</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20322/">CVE-2021-20322</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31916/">CVE-2021-31916</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33033/">CVE-2021-33033</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-34556/">CVE-2021-34556</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-34981/">CVE-2021-34981</cve>
	<cve impact="important" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3542/">CVE-2021-3542</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35477/">CVE-2021-35477</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3655/">CVE-2021-3655</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3659/">CVE-2021-3659</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3679/">CVE-2021-3679</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3715/">CVE-2021-3715</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-37159/">CVE-2021-37159</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3732/">CVE-2021-3732</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3744/">CVE-2021-3744</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3752/">CVE-2021-3752</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3753/">CVE-2021-3753</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3759/">CVE-2021-3759</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3760/">CVE-2021-3760</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3764/">CVE-2021-3764</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3772/">CVE-2021-3772</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38204/">CVE-2021-38204</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-40490/">CVE-2021-40490</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41864/">CVE-2021-41864</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42008/">CVE-2021-42008</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42252/">CVE-2021-42252</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42739/">CVE-2021-42739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658139" comment="kernel-default-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658140" comment="kernel-default-base-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658141" comment="kernel-default-devel-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658119" comment="kernel-devel-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658120" comment="kernel-docs-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658121" comment="kernel-macros-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658142" comment="kernel-obs-build-4.12.14-197.102.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658123" comment="kernel-source-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658143" comment="kernel-syms-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658144" comment="reiserfs-kmp-default-4.12.14-197.102.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140436" version="1" class="patch">
	<metadata>
		<title>Security update for aaa_base (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1162581" ref_url="https://bugzilla.suse.com/1162581" source="BUGZILLA"/>
		<reference ref_id="1174504" ref_url="https://bugzilla.suse.com/1174504" source="BUGZILLA"/>
		<reference ref_id="1191563" ref_url="https://bugzilla.suse.com/1191563" source="BUGZILLA"/>
		<reference ref_id="1192248" ref_url="https://bugzilla.suse.com/1192248" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:3899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009830.html" source="SUSE-SU"/>
		<description>
This update for aaa_base fixes the following issues:

- Allowed ping and ICMP commands without CAP_NET_RAW (bsc#1174504).
- Add $HOME/.local/bin to PATH, if it exists (bsc#1192248).
- Fixed get_kernel_version.c to work also for recent kernels on the s390/X platform (bsc#1191563).
- Support xz compressed kernel (bsc#1162581)   
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-03"/>
	<updated date="2021-12-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162581">SUSE bug 1162581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174504">SUSE bug 1174504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191563">SUSE bug 1191563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192248">SUSE bug 1192248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658798" comment="aaa_base-84.87+git20180409.04c9dae-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658799" comment="aaa_base-extras-84.87+git20180409.04c9dae-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658800" comment="aaa_base-malloccheck-84.87+git20180409.04c9dae-3.52.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140437" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1193170" ref_url="https://bugzilla.suse.com/1193170" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43527" ref_url="https://www.suse.com/security/cve/CVE-2021-43527/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3934-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/020999.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

Update to version 3.68.1:

- CVE-2021-43527: Fixed a Heap overflow in NSS when verifying DER-encoded DSA or RSA-PSS signatures (bsc#1193170).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193170">SUSE bug 1193170</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43527/">CVE-2021-43527</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659055" comment="libfreebl3-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659027" comment="libfreebl3-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659056" comment="libfreebl3-hmac-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659029" comment="libfreebl3-hmac-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659057" comment="libsoftokn3-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659031" comment="libsoftokn3-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659058" comment="libsoftokn3-hmac-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659033" comment="libsoftokn3-hmac-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659059" comment="mozilla-nss-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659035" comment="mozilla-nss-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659060" comment="mozilla-nss-certs-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659037" comment="mozilla-nss-certs-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659061" comment="mozilla-nss-devel-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659062" comment="mozilla-nss-sysinit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659063" comment="mozilla-nss-tools-3.68.1-3.61.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140438" version="1" class="patch">
	<metadata>
		<title>Security update for openssh (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1190975" ref_url="https://bugzilla.suse.com/1190975" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-41617" ref_url="https://www.suse.com/security/cve/CVE-2021-41617/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009854.html" source="SUSE-SU"/>
		<description>
This update for openssh fixes the following issues:

- CVE-2021-41617: Fixed privilege escalation when AuthorizedKeysCommand/AuthorizedPrincipalsCommand are configured (bsc#1190975).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190975">SUSE bug 1190975</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41617/">CVE-2021-41617</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658320" comment="openssh-7.9p1-6.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658321" comment="openssh-askpass-gnome-7.9p1-6.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658322" comment="openssh-fips-7.9p1-6.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658323" comment="openssh-helpers-7.9p1-6.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140439" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1173028" ref_url="https://bugzilla.suse.com/1173028" source="BUGZILLA"/>
		<reference ref_id="1186031" ref_url="https://bugzilla.suse.com/1186031" source="BUGZILLA"/>
		<reference ref_id="1192497" ref_url="https://bugzilla.suse.com/1192497" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-35604" ref_url="https://www.suse.com/security/cve/CVE-2021-35604/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009852.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issue:
    
- Update to 10.2.41:
- CVE-2021-35604: Fixed InnoDB vulnerability that allowed an high privileged attacker with network access via multiple protocols to compromise MySQL (bsc#1192497).
    
- Add missing dependency to liblz4 to enable lz4 compression for INNODB (bsc#1186031). 
- Add a 'mysql-user.conf' file to let 'systemd' generate mysql user in containers. (bsc#1173028)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173028">SUSE bug 1173028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186031">SUSE bug 1186031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192497">SUSE bug 1192497</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-35604/">CVE-2021-35604</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657828" comment="libmysqld-devel-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657829" comment="libmysqld19-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657830" comment="mariadb-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657831" comment="mariadb-client-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657765" comment="mariadb-errormessages-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657832" comment="mariadb-tools-10.2.41-3.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140440" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188284" ref_url="https://bugzilla.suse.com/1188284" source="BUGZILLA"/>
		<reference ref_id="1192346" ref_url="https://bugzilla.suse.com/1192346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:3949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009859.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

- Update to 0.103.4 (bsc#1192346).
- Update to 0.103.3 (bsc#1188284).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1188284">SUSE bug 1188284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192346">SUSE bug 1192346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009656948" comment="clamav-0.103.4-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656949" comment="clamav-devel-0.103.4-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656950" comment="libclamav9-0.103.4-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656951" comment="libfreshclam2-0.103.4-3.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140441" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1189632" ref_url="https://bugzilla.suse.com/1189632" source="BUGZILLA"/>
		<reference ref_id="1191363" ref_url="https://bugzilla.suse.com/1191363" source="BUGZILLA"/>
		<reference ref_id="1192554" ref_url="https://bugzilla.suse.com/1192554" source="BUGZILLA"/>
		<reference ref_id="1192557" ref_url="https://bugzilla.suse.com/1192557" source="BUGZILLA"/>
		<reference ref_id="1192559" ref_url="https://bugzilla.suse.com/1192559" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28701" ref_url="https://www.suse.com/security/cve/CVE-2021-28701/" source="CVE"/>
		<reference ref_id="CVE-2021-28702" ref_url="https://www.suse.com/security/cve/CVE-2021-28702/" source="CVE"/>
		<reference ref_id="CVE-2021-28704" ref_url="https://www.suse.com/security/cve/CVE-2021-28704/" source="CVE"/>
		<reference ref_id="CVE-2021-28705" ref_url="https://www.suse.com/security/cve/CVE-2021-28705/" source="CVE"/>
		<reference ref_id="CVE-2021-28706" ref_url="https://www.suse.com/security/cve/CVE-2021-28706/" source="CVE"/>
		<reference ref_id="CVE-2021-28707" ref_url="https://www.suse.com/security/cve/CVE-2021-28707/" source="CVE"/>
		<reference ref_id="CVE-2021-28708" ref_url="https://www.suse.com/security/cve/CVE-2021-28708/" source="CVE"/>
		<reference ref_id="CVE-2021-28709" ref_url="https://www.suse.com/security/cve/CVE-2021-28709/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009874.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2021-28701: Fixed race condition in XENMAPSPACE_grant_table handling (XSA-384) (bsc#1189632).
- CVE-2021-28702: Fixed PCI devices with RMRRs not deassigned correctly (XSA-386) (bsc#1191363).
- CVE-2021-28704, CVE-2021-28707, CVE-2021-28708: Fixed PoD operations on misaligned GFNs (XSA-388) (bsc#1192557).
- CVE-2021-28705, CVE-2021-28709: Fixed issues with partially successful P2M updates on x86 (XSA-389) (bsc#1192559).
- CVE-2021-28706: Fixed guests may exceed their designated memory limit (XSA-385) (bsc#1192554).

- Upstream bug fixes (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-09"/>
	<updated date="2021-12-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189632">SUSE bug 1189632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191363">SUSE bug 1191363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192554">SUSE bug 1192554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192557">SUSE bug 1192557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192559">SUSE bug 1192559</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28701/">CVE-2021-28701</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28702/">CVE-2021-28702</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28704/">CVE-2021-28704</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28705/">CVE-2021-28705</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28706/">CVE-2021-28706</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28707/">CVE-2021-28707</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28708/">CVE-2021-28708</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28709/">CVE-2021-28709</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658607" comment="xen-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658608" comment="xen-devel-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658609" comment="xen-libs-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658610" comment="xen-tools-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658611" comment="xen-tools-domU-4.12.4_16-3.57.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140442" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1193321" ref_url="https://bugzilla.suse.com/1193321" source="BUGZILLA"/>
		<reference ref_id="1193485" ref_url="https://bugzilla.suse.com/1193485" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43536" ref_url="https://www.suse.com/security/cve/CVE-2021-43536/" source="CVE"/>
		<reference ref_id="CVE-2021-43537" ref_url="https://www.suse.com/security/cve/CVE-2021-43537/" source="CVE"/>
		<reference ref_id="CVE-2021-43538" ref_url="https://www.suse.com/security/cve/CVE-2021-43538/" source="CVE"/>
		<reference ref_id="CVE-2021-43539" ref_url="https://www.suse.com/security/cve/CVE-2021-43539/" source="CVE"/>
		<reference ref_id="CVE-2021-43541" ref_url="https://www.suse.com/security/cve/CVE-2021-43541/" source="CVE"/>
		<reference ref_id="CVE-2021-43542" ref_url="https://www.suse.com/security/cve/CVE-2021-43542/" source="CVE"/>
		<reference ref_id="CVE-2021-43543" ref_url="https://www.suse.com/security/cve/CVE-2021-43543/" source="CVE"/>
		<reference ref_id="CVE-2021-43545" ref_url="https://www.suse.com/security/cve/CVE-2021-43545/" source="CVE"/>
		<reference ref_id="CVE-2021-43546" ref_url="https://www.suse.com/security/cve/CVE-2021-43546/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3995-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/021069.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:


Update to Extended Support Release 91.4.0 (bsc#1193485):

- CVE-2021-43536: URL leakage when navigating while executing asynchronous function
- CVE-2021-43537: Heap buffer overflow when using structured clone
- CVE-2021-43538: Missing fullscreen and pointer lock notification when requesting both
- CVE-2021-43539: GC rooting failure when calling wasm instance methods
- CVE-2021-43541: External protocol handler parameters were unescaped
- CVE-2021-43542: XMLHttpRequest error codes could have leaked the existence of an external protocol handler
- CVE-2021-43543: Bypass of CSP sandbox directive when embedding
- CVE-2021-43545: Denial of Service when using the Location API in a loop
- CVE-2021-43546: Cursor spoofing could overlay user interface when native cursor is zoomed
- Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4
- Removed x-scheme-handler/ftp from MozillaFirefox.desktop (bsc#1193321)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-10"/>
	<updated date="2021-12-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193321">SUSE bug 1193321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193485">SUSE bug 1193485</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43536/">CVE-2021-43536</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43537/">CVE-2021-43537</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43538/">CVE-2021-43538</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43539/">CVE-2021-43539</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43541/">CVE-2021-43541</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43542/">CVE-2021-43542</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43543/">CVE-2021-43543</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-43545/">CVE-2021-43545</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-43546/">CVE-2021-43546</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659342" comment="MozillaFirefox-91.4.0-150.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659343" comment="MozillaFirefox-devel-91.4.0-150.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659344" comment="MozillaFirefox-translations-common-91.4.0-150.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659345" comment="MozillaFirefox-translations-other-91.4.0-150.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140443" version="1" class="patch">
	<metadata>
		<title>Security update for glib-networking (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1172460" ref_url="https://bugzilla.suse.com/1172460" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13645" ref_url="https://www.suse.com/security/cve/CVE-2020-13645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009879.html" source="SUSE-SU"/>
		<description>
This update for glib-networking fixes the following issues:

- CVE-2020-13645: Fixed a connection failure when the server identity is unset (bsc#1172460).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-10"/>
	<updated date="2021-12-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172460">SUSE bug 1172460</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-13645/">CVE-2020-13645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659054" comment="glib-networking-2.54.1-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659043" comment="glib-networking-lang-2.54.1-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140444" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1180125" ref_url="https://bugzilla.suse.com/1180125" source="BUGZILLA"/>
		<reference ref_id="1183374" ref_url="https://bugzilla.suse.com/1183374" source="BUGZILLA"/>
		<reference ref_id="1183858" ref_url="https://bugzilla.suse.com/1183858" source="BUGZILLA"/>
		<reference ref_id="1185588" ref_url="https://bugzilla.suse.com/1185588" source="BUGZILLA"/>
		<reference ref_id="1187338" ref_url="https://bugzilla.suse.com/1187338" source="BUGZILLA"/>
		<reference ref_id="1187668" ref_url="https://bugzilla.suse.com/1187668" source="BUGZILLA"/>
		<reference ref_id="1189241" ref_url="https://bugzilla.suse.com/1189241" source="BUGZILLA"/>
		<reference ref_id="1189287" ref_url="https://bugzilla.suse.com/1189287" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3426" ref_url="https://www.suse.com/security/cve/CVE-2021-3426/" source="CVE"/>
		<reference ref_id="CVE-2021-3733" ref_url="https://www.suse.com/security/cve/CVE-2021-3733/" source="CVE"/>
		<reference ref_id="CVE-2021-3737" ref_url="https://www.suse.com/security/cve/CVE-2021-3737/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4015-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009941.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:


- CVE-2021-3737: Fixed http client infinite line reading (DoS) after a http 100. (bsc#1189241)
- CVE-2021-3733: Fixed ReDoS in urllib.request. (bsc#1189287)
- CVE-2021-3426: Fixed an information disclosure via pydoc. (bsc#1183374)

- Rebuild to get new headers, avoid building in support for stropts.h (bsc#1187338).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-23"/>
	<updated date="2021-12-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1180125">SUSE bug 1180125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183374">SUSE bug 1183374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183858">SUSE bug 1183858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185588">SUSE bug 1185588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187338">SUSE bug 1187338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187668">SUSE bug 1187668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189241">SUSE bug 1189241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189287">SUSE bug 1189287</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3426/">CVE-2021-3426</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3733/">CVE-2021-3733</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3737/">CVE-2021-3737</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009660103" comment="libpython3_6m1_0-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660104" comment="python3-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660105" comment="python3-base-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660106" comment="python3-curses-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660107" comment="python3-dbm-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660108" comment="python3-devel-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660109" comment="python3-idle-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660110" comment="python3-testsuite-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660111" comment="python3-tk-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660088" comment="python3-tools-3.6.15-3.91.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140445" version="1" class="patch">
	<metadata>
		<title>Security update for fetchmail (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1152964" ref_url="https://bugzilla.suse.com/1152964" source="BUGZILLA"/>
		<reference ref_id="1174075" ref_url="https://bugzilla.suse.com/1174075" source="BUGZILLA"/>
		<reference ref_id="1181400" ref_url="https://bugzilla.suse.com/1181400" source="BUGZILLA"/>
		<reference ref_id="1188875" ref_url="https://bugzilla.suse.com/1188875" source="BUGZILLA"/>
		<reference ref_id="1190069" ref_url="https://bugzilla.suse.com/1190069" source="BUGZILLA"/>
		<reference ref_id="1190896" ref_url="https://bugzilla.suse.com/1190896" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36386" ref_url="https://www.suse.com/security/cve/CVE-2021-36386/" source="CVE"/>
		<reference ref_id="CVE-2021-39272" ref_url="https://www.suse.com/security/cve/CVE-2021-39272/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009892.html" source="SUSE-SU"/>
		<description>
This update for fetchmail fixes the following issues:

- CVE-2021-36386: Fixed DoS or information disclosure in some configurations (bsc#1188875).
- CVE-2021-39272: Fixed STARTTLS session encryption bypassing (fetchmail-SA-2021-02) (bsc#1190069).

- Update to 6.4.22 (bsc#1152964, jsc#SLE-18159, jsc#SLE-17903, jsc#SLE-18059)
- Remove all python2 dependencies (bsc#1190896).
- De-hardcode /usr/lib path for launch executable (bsc#1174075).
- Added hardening to systemd service(s) (bsc#1181400).
  		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1152964">SUSE bug 1152964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174075">SUSE bug 1174075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181400">SUSE bug 1181400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188875">SUSE bug 1188875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190069">SUSE bug 1190069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190896">SUSE bug 1190896</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-36386/">CVE-2021-36386</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39272/">CVE-2021-39272</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657510" comment="fetchmail-6.4.22-20.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657511" comment="fetchmailconf-6.4.22-20.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140446" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1192516" ref_url="https://bugzilla.suse.com/1192516" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23214" ref_url="https://www.suse.com/security/cve/CVE-2021-23214/" source="CVE"/>
		<reference ref_id="CVE-2021-23222" ref_url="https://www.suse.com/security/cve/CVE-2021-23222/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009898.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:
          
- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).
- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192516">SUSE bug 1192516</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23214/">CVE-2021-23214</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23222/">CVE-2021-23222</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009656482" comment="postgresql10-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656483" comment="postgresql10-contrib-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656484" comment="postgresql10-devel-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656465" comment="postgresql10-docs-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656485" comment="postgresql10-plperl-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656486" comment="postgresql10-plpython-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656487" comment="postgresql10-pltcl-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656488" comment="postgresql10-server-10.19-8.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140447" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1193030" ref_url="https://bugzilla.suse.com/1193030" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4008" ref_url="https://www.suse.com/security/cve/CVE-2021-4008/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4071-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009900.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2021-4008: Fixed Privilege Escalation Vulnerability via Out-Of-Bounds Access in SProcRenderCompositeGlyphs (bsc#1193030).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193030">SUSE bug 1193030</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4008/">CVE-2021-4008</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659828" comment="xorg-x11-server-1.20.3-14.5.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659829" comment="xorg-x11-server-extra-1.20.3-14.5.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659830" comment="xorg-x11-server-sdk-1.20.3-14.5.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140448" version="1" class="patch">
	<metadata>
		<title>Security update for log4j (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1193662" ref_url="https://bugzilla.suse.com/1193662" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4104" ref_url="https://www.suse.com/security/cve/CVE-2021-4104/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009917.html" source="SUSE-SU"/>
		<description>
This update for log4j fixes the following issue:

- CVE-2021-4104: Disable the JMSAppender class from log4j to protect against
  the log4jshell vulnerability. [bsc#1193662]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-17"/>
	<updated date="2021-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193662">SUSE bug 1193662</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4104/">CVE-2021-4104</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009660100" comment="log4j-1.2.17-5.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660101" comment="log4j-manual-1.2.17-5.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140449" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1190487" ref_url="https://bugzilla.suse.com/1190487" source="BUGZILLA"/>
		<reference ref_id="1190488" ref_url="https://bugzilla.suse.com/1190488" source="BUGZILLA"/>
		<reference ref_id="1190489" ref_url="https://bugzilla.suse.com/1190489" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4009" ref_url="https://www.suse.com/security/cve/CVE-2021-4009/" source="CVE"/>
		<reference ref_id="CVE-2021-4010" ref_url="https://www.suse.com/security/cve/CVE-2021-4010/" source="CVE"/>
		<reference ref_id="CVE-2021-4011" ref_url="https://www.suse.com/security/cve/CVE-2021-4011/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009921.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes 
  extension does not properly validate the request length leading to out of 
  bounds memory write. (bsc#1190487)
- CVE-2021-4010: The handler for the Suspend request of the Screen Saver extension
  does not properly validate the request length leading to out of
  bounds memory write. (bsc#1190488)
- CVE-2021-4011: The handlers for the RecordCreateContext and RecordRegisterClients
  requests of the Record extension do not properly validate the request
  length leading to out of bounds memory write. (bsc#1190489)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-20"/>
	<updated date="2021-12-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190487">SUSE bug 1190487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190488">SUSE bug 1190488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190489">SUSE bug 1190489</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4009/">CVE-2021-4009</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4010/">CVE-2021-4010</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4011/">CVE-2021-4011</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009660293" comment="xorg-x11-server-1.20.3-14.5.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660294" comment="xorg-x11-server-extra-1.20.3-14.5.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660295" comment="xorg-x11-server-sdk-1.20.3-14.5.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140450" version="1" class="patch">
	<metadata>
		<title>Security update for p11-kit (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1180064" ref_url="https://bugzilla.suse.com/1180064" source="BUGZILLA"/>
		<reference ref_id="1187993" ref_url="https://bugzilla.suse.com/1187993" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-29361" ref_url="https://www.suse.com/security/cve/CVE-2020-29361/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4154-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009932.html" source="SUSE-SU"/>
		<description>
This update for p11-kit fixes the following issues:

- CVE-2020-29361: Fixed multiple integer overflows in rpc code (bsc#1180064)
- Add support for CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER (bsc#1187993).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-22"/>
	<updated date="2021-12-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180064">SUSE bug 1180064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187993">SUSE bug 1187993</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29361/">CVE-2020-29361</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659823" comment="libp11-kit0-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659794" comment="libp11-kit0-32bit-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659824" comment="p11-kit-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659825" comment="p11-kit-devel-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659826" comment="p11-kit-nss-trust-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659827" comment="p11-kit-tools-0.23.2-4.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140451" version="1" class="patch">
	<metadata>
		<title>Security update for subversion (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181687" ref_url="https://bugzilla.suse.com/1181687" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-17525" ref_url="https://www.suse.com/security/cve/CVE-2020-17525/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0425-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008302.html" source="SUSE-SU"/>
		<description>
This update for subversion fixes the following issues:

- CVE-2020-17525: A null-pointer-dereference has been found in mod_authz_svn that results in
    a remote unauthenticated Denial-of-Service in some server configurations (bsc#1181687).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181687">SUSE bug 1181687</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-17525/">CVE-2020-17525</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505500" comment="subversion-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496589" comment="subversion-bash-completion-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505501" comment="subversion-devel-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505502" comment="subversion-perl-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505503" comment="subversion-python-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505504" comment="subversion-server-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505505" comment="subversion-tools-1.10.6-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140452" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1174075" ref_url="https://bugzilla.suse.com/1174075" source="BUGZILLA"/>
		<reference ref_id="1176708" ref_url="https://bugzilla.suse.com/1176708" source="BUGZILLA"/>
		<reference ref_id="1178801" ref_url="https://bugzilla.suse.com/1178801" source="BUGZILLA"/>
		<reference ref_id="1178969" ref_url="https://bugzilla.suse.com/1178969" source="BUGZILLA"/>
		<reference ref_id="1180243" ref_url="https://bugzilla.suse.com/1180243" source="BUGZILLA"/>
		<reference ref_id="1180401" ref_url="https://bugzilla.suse.com/1180401" source="BUGZILLA"/>
		<reference ref_id="1181730" ref_url="https://bugzilla.suse.com/1181730" source="BUGZILLA"/>
		<reference ref_id="1181732" ref_url="https://bugzilla.suse.com/1181732" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15257" ref_url="https://www.suse.com/security/cve/CVE-2020-15257/" source="CVE"/>
		<reference ref_id="CVE-2021-21284" ref_url="https://www.suse.com/security/cve/CVE-2021-21284/" source="CVE"/>
		<reference ref_id="CVE-2021-21285" ref_url="https://www.suse.com/security/cve/CVE-2021-21285/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008311.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues:

Security issues fixed:

- CVE-2020-15257: Fixed a privilege escalation in containerd (bsc#1178969).
- CVE-2021-21284: potential privilege escalation when the root user in the remapped namespace has access to the host filesystem (bsc#1181732)
- CVE-2021-21285: pulling a malformed Docker image manifest crashes the dockerd daemon (bsc#1181730)

Non-security issues fixed:

- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).

- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. (bsc#1180401)

- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1180243

- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  bsc#1176708

- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14

- Enable fish-completion

- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (bsc#1178801, SLE-16460)

- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708

- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)

- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.

- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.

- Update to libnetwork 55e924b8a842, which is required for Docker 19.03.14-ce.
  bsc#1180243

- Add patch which makes libnetwork compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (bsc#1178801, SLE-16460)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-11"/>
	<updated date="2021-02-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174075">SUSE bug 1174075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176708">SUSE bug 1176708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178801">SUSE bug 1178801</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178969">SUSE bug 1178969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180243">SUSE bug 1180243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180401">SUSE bug 1180401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181730">SUSE bug 1181730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181732">SUSE bug 1181732</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15257/">CVE-2020-15257</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21284/">CVE-2021-21284</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21285/">CVE-2021-21285</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505506" comment="containerd-1.3.9-5.29.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505507" comment="docker-19.03.15_ce-6.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494429" comment="docker-bash-completion-19.03.15_ce-6.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505508" comment="docker-libnetwork-0.7.0.1+gitr2908_55e924b8a842-4.28.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505509" comment="docker-runc-1.0.0rc10+gitr3981_dc9208a3303f-6.45.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140453" version="1" class="patch">
	<metadata>
		<title>Security update for openvswitch (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181742" ref_url="https://bugzilla.suse.com/1181742" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35498" ref_url="https://www.suse.com/security/cve/CVE-2020-35498/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008313.html" source="SUSE-SU"/>
		<description>
This update for openvswitch fixes the following issues:

- CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-11"/>
	<updated date="2021-02-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181742">SUSE bug 1181742</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35498/">CVE-2020-35498</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505510" comment="libopenvswitch-2_11-0-2.11.5-3.15.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505511" comment="openvswitch-2.11.5-3.15.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505512" comment="openvswitch-devel-2.11.5-3.15.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140454" version="1" class="patch">
	<metadata>
		<title>Security update for wpa_supplicant (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181777" ref_url="https://bugzilla.suse.com/1181777" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0326" ref_url="https://www.suse.com/security/cve/CVE-2021-0326/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008316.html" source="SUSE-SU"/>
		<description>
This update for wpa_supplicant fixes the following issues:

- CVE-2021-0326: P2P group information processing vulnerability (bsc#1181777).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-11"/>
	<updated date="2021-02-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181777">SUSE bug 1181777</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0326/">CVE-2021-0326</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505513" comment="wpa_supplicant-2.9-4.23.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140455" version="1" class="patch">
	<metadata>
		<title>Security update for jasper (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1179748" ref_url="https://bugzilla.suse.com/1179748" source="BUGZILLA"/>
		<reference ref_id="1181483" ref_url="https://bugzilla.suse.com/1181483" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27828" ref_url="https://www.suse.com/security/cve/CVE-2020-27828/" source="CVE"/>
		<reference ref_id="CVE-2021-3272" ref_url="https://www.suse.com/security/cve/CVE-2021-3272/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0488-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008334.html" source="SUSE-SU"/>
		<description>
This update for jasper fixes the following issues:

- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
- bsc#1181483 CVE-2021-3272: Fix buffer over-read in jp2_decode
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-16"/>
	<updated date="2021-02-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179748">SUSE bug 1179748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181483">SUSE bug 1181483</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27828/">CVE-2020-27828</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3272/">CVE-2021-3272</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505514" comment="libjasper-devel-2.0.14-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505515" comment="libjasper4-2.0.14-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140456" version="1" class="patch">
	<metadata>
		<title>Security update for screen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182092" ref_url="https://bugzilla.suse.com/1182092" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26937" ref_url="https://www.suse.com/security/cve/CVE-2021-26937/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008337.html" source="SUSE-SU"/>
		<description>
This update for screen fixes the following issues:

- CVE-2021-26937: Fixed double width combining char handling that could lead to a denial of service or code execution (bsc#1182092).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-17"/>
	<updated date="2021-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182092">SUSE bug 1182092</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26937/">CVE-2021-26937</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505516" comment="screen-4.6.2-5.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140457" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182246" ref_url="https://bugzilla.suse.com/1182246" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8625" ref_url="https://www.suse.com/security/cve/CVE-2020-8625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008340.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack [bsc#1182246]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-18"/>
	<updated date="2021-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182246">SUSE bug 1182246</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8625/">CVE-2020-8625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505517" comment="bind-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505518" comment="bind-chrootenv-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505519" comment="bind-devel-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500020" comment="bind-doc-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505520" comment="bind-utils-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505521" comment="libbind9-1600-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505522" comment="libdns1605-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505523" comment="libirs-devel-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505524" comment="libirs1601-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505525" comment="libisc1606-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505526" comment="libisccc1600-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505527" comment="libisccfg1600-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505528" comment="libns1604-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494121" comment="python3-bind-9.16.6-12.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140458" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1046305" ref_url="https://bugzilla.suse.com/1046305" source="BUGZILLA"/>
		<reference ref_id="1046306" ref_url="https://bugzilla.suse.com/1046306" source="BUGZILLA"/>
		<reference ref_id="1046540" ref_url="https://bugzilla.suse.com/1046540" source="BUGZILLA"/>
		<reference ref_id="1046542" ref_url="https://bugzilla.suse.com/1046542" source="BUGZILLA"/>
		<reference ref_id="1046648" ref_url="https://bugzilla.suse.com/1046648" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050538" ref_url="https://bugzilla.suse.com/1050538" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1056653" ref_url="https://bugzilla.suse.com/1056653" source="BUGZILLA"/>
		<reference ref_id="1056657" ref_url="https://bugzilla.suse.com/1056657" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1073513" ref_url="https://bugzilla.suse.com/1073513" source="BUGZILLA"/>
		<reference ref_id="1074220" ref_url="https://bugzilla.suse.com/1074220" source="BUGZILLA"/>
		<reference ref_id="1075020" ref_url="https://bugzilla.suse.com/1075020" source="BUGZILLA"/>
		<reference ref_id="1086282" ref_url="https://bugzilla.suse.com/1086282" source="BUGZILLA"/>
		<reference ref_id="1086301" ref_url="https://bugzilla.suse.com/1086301" source="BUGZILLA"/>
		<reference ref_id="1086313" ref_url="https://bugzilla.suse.com/1086313" source="BUGZILLA"/>
		<reference ref_id="1086314" ref_url="https://bugzilla.suse.com/1086314" source="BUGZILLA"/>
		<reference ref_id="1098633" ref_url="https://bugzilla.suse.com/1098633" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104270" ref_url="https://bugzilla.suse.com/1104270" source="BUGZILLA"/>
		<reference ref_id="1104277" ref_url="https://bugzilla.suse.com/1104277" source="BUGZILLA"/>
		<reference ref_id="1104279" ref_url="https://bugzilla.suse.com/1104279" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104742" ref_url="https://bugzilla.suse.com/1104742" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111981" ref_url="https://bugzilla.suse.com/1111981" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1126390" ref_url="https://bugzilla.suse.com/1126390" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1136348" ref_url="https://bugzilla.suse.com/1136348" source="BUGZILLA"/>
		<reference ref_id="1149032" ref_url="https://bugzilla.suse.com/1149032" source="BUGZILLA"/>
		<reference ref_id="1174206" ref_url="https://bugzilla.suse.com/1174206" source="BUGZILLA"/>
		<reference ref_id="1176831" ref_url="https://bugzilla.suse.com/1176831" source="BUGZILLA"/>
		<reference ref_id="1176846" ref_url="https://bugzilla.suse.com/1176846" source="BUGZILLA"/>
		<reference ref_id="1178036" ref_url="https://bugzilla.suse.com/1178036" source="BUGZILLA"/>
		<reference ref_id="1178049" ref_url="https://bugzilla.suse.com/1178049" source="BUGZILLA"/>
		<reference ref_id="1178900" ref_url="https://bugzilla.suse.com/1178900" source="BUGZILLA"/>
		<reference ref_id="1179093" ref_url="https://bugzilla.suse.com/1179093" source="BUGZILLA"/>
		<reference ref_id="1179142" ref_url="https://bugzilla.suse.com/1179142" source="BUGZILLA"/>
		<reference ref_id="1179508" ref_url="https://bugzilla.suse.com/1179508" source="BUGZILLA"/>
		<reference ref_id="1179509" ref_url="https://bugzilla.suse.com/1179509" source="BUGZILLA"/>
		<reference ref_id="1179563" ref_url="https://bugzilla.suse.com/1179563" source="BUGZILLA"/>
		<reference ref_id="1179573" ref_url="https://bugzilla.suse.com/1179573" source="BUGZILLA"/>
		<reference ref_id="1179575" ref_url="https://bugzilla.suse.com/1179575" source="BUGZILLA"/>
		<reference ref_id="1179878" ref_url="https://bugzilla.suse.com/1179878" source="BUGZILLA"/>
		<reference ref_id="1180130" ref_url="https://bugzilla.suse.com/1180130" source="BUGZILLA"/>
		<reference ref_id="1180765" ref_url="https://bugzilla.suse.com/1180765" source="BUGZILLA"/>
		<reference ref_id="1180812" ref_url="https://bugzilla.suse.com/1180812" source="BUGZILLA"/>
		<reference ref_id="1180891" ref_url="https://bugzilla.suse.com/1180891" source="BUGZILLA"/>
		<reference ref_id="1180912" ref_url="https://bugzilla.suse.com/1180912" source="BUGZILLA"/>
		<reference ref_id="1181018" ref_url="https://bugzilla.suse.com/1181018" source="BUGZILLA"/>
		<reference ref_id="1181170" ref_url="https://bugzilla.suse.com/1181170" source="BUGZILLA"/>
		<reference ref_id="1181230" ref_url="https://bugzilla.suse.com/1181230" source="BUGZILLA"/>
		<reference ref_id="1181231" ref_url="https://bugzilla.suse.com/1181231" source="BUGZILLA"/>
		<reference ref_id="1181260" ref_url="https://bugzilla.suse.com/1181260" source="BUGZILLA"/>
		<reference ref_id="1181349" ref_url="https://bugzilla.suse.com/1181349" source="BUGZILLA"/>
		<reference ref_id="1181425" ref_url="https://bugzilla.suse.com/1181425" source="BUGZILLA"/>
		<reference ref_id="1181504" ref_url="https://bugzilla.suse.com/1181504" source="BUGZILLA"/>
		<reference ref_id="1181809" ref_url="https://bugzilla.suse.com/1181809" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25639" ref_url="https://www.suse.com/security/cve/CVE-2020-25639/" source="CVE"/>
		<reference ref_id="CVE-2020-27835" ref_url="https://www.suse.com/security/cve/CVE-2020-27835/" source="CVE"/>
		<reference ref_id="CVE-2020-29568" ref_url="https://www.suse.com/security/cve/CVE-2020-29568/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-20177" ref_url="https://www.suse.com/security/cve/CVE-2021-20177/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="CVE-2021-3348" ref_url="https://www.suse.com/security/cve/CVE-2021-3348/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008354.html" source="SUSE-SU"/>
		<description>
 The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349).
- CVE-2021-3348: Fixed a use-after-free in nbd_add_socket that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup (bnc#1181504).
- CVE-2021-20177: Fixed a kernel panic related to iptables string matching rules. A privileged user could insert a rule which could lead to denial of service (bnc#1180765).
- CVE-2021-0342: In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. (bnc#1180812)
- CVE-2020-27835: A use-after-free in the infiniband hfi1 driver was found, specifically in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).
- CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).
- CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509).
- CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508).

The following non-security bugs were fixed:

- ACPI: scan: Harden acpi_device_add() against device ID overflows (git-fixes).
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (git-fixes).
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (git-fixes).
- ALSA: doc: Fix reference to mixart.rst (git-fixes).
- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (git-fixes).
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (git-fixes).
- ALSA: hda/via: Add minimum mute flag (git-fixes).
- ALSA: hda/via: Fix runtime PM for Clevo W35xSS (git-fixes).
- ALSA: pcm: Clear the full allocated memory at hw_params (git-fixes).
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (git-fixes).
- ASoC: Intel: haswell: Add missing pm_ops (git-fixes).
- ASoC: dapm: remove widget from dirty list on free (git-fixes).
- EDAC/amd64: Fix PCI component registration (bsc#1112178).
- IB/mlx5: Fix DEVX support for MLX5_CMD_OP_INIT2INIT_QP command (bsc#1103991).
- KVM: SVM: Initialize prev_ga_tag before use (bsc#1180912).
- KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages (bsc#1181230).
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (git-fixes).
- NFS: nfs_igrab_and_active must first reference the superblock (git-fixes).
- NFS: switch nfsiod to be an UNBOUND workqueue (git-fixes).
- NFSv4.2: condition READDIR's mask for security label based on LSM state (git-fixes).
- RDMA/addr: Fix race with netevent_callback()/rdma_addr_cancel() (bsc#1103992).
- RDMA/bnxt_re: Do not add user qps to flushlist (bsc#1050244 ).
- RDMA/bnxt_re: Do not report transparent vlan from QP1 (bsc#1104742).
- RDMA/cma: Do not overwrite sgid_attr after device is released (bsc#1103992).
- RDMA/core: Ensure security pkey modify is not lost (bsc#1046306 ).
- RDMA/core: Fix pkey and port assignment in get_new_pps (bsc#1046306).
- RDMA/core: Fix protection fault in get_pkey_idx_qp_list (bsc#1046306).
- RDMA/core: Fix reported speed and width (bsc#1046306 ).
- RDMA/core: Fix return error value in _ib_modify_qp() to negative (bsc#1103992).
- RDMA/core: Fix use of logical OR in get_new_pps (bsc#1046306 ).
- RDMA/hns: Bugfix for memory window mtpt configuration (bsc#1104427).
- RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver (bsc#1104427).
- RDMA/hns: Fix cmdq parameter of querying pf timer resource (bsc#1104427 bsc#1126206).
- RDMA/hns: Fix missing sq_sig_type when querying QP (bsc#1104427 ).
- RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver (bsc#1104427).
- RDMA/iw_cxgb4: Fix incorrect function parameters (bsc#1136348 jsc#SLE-4684).
- RDMA/iw_cxgb4: initiate CLOSE when entering TERM (bsc#1136348 jsc#SLE-4684).
- RDMA/mlx5: Add init2init as a modify command (bsc#1103991 ).
- RDMA/mlx5: Fix typo in enum name (bsc#1103991).
- RDMA/mlx5: Fix wrong free of blue flame register on error (bsc#1103991).
- RDMA/qedr: Fix inline size returned for iWARP (bsc#1050545 ).
- SUNRPC: cache: ignore timestamp written to 'flush' file (bsc#1178036).
- USB: ehci: fix an interrupt calltrace error (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind() (git-fixes).
- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- __netif_receive_skb_core: pass skb by reference (bsc#1109837).
- arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() (bsc#1180130).
- arm64: pgtable: Fix pte_accessible() (bsc#1180130).
- bnxt_en: Do not query FW when netif_running() is false (bsc#1086282).
- bnxt_en: Fix accumulation of bp-&gt;net_stats_prev (bsc#1104745 ).
- bnxt_en: Improve stats context resource accounting with RDMA driver loaded (bsc#1104745).
- bnxt_en: Release PCI regions when DMA mask setup fails during probe (git-fixes).
- bnxt_en: Reset rings if ring reservation fails during open() (bsc#1086282).
- bnxt_en: fix HWRM error when querying VF temperature (bsc#1104745).
- bnxt_en: fix error return code in bnxt_init_board() (git-fixes).
- bnxt_en: fix error return code in bnxt_init_one() (bsc#1050242 ).
- bnxt_en: read EEPROM A2h address using page 0 (git-fixes).
- bnxt_en: return proper error codes in bnxt_show_temp (bsc#1104745).
- bonding: set dev-&gt;needed_headroom in bond_setup_by_slave() (git-fixes).
- btrfs: add a flag to iterate_inodes_from_logical to find all extent refs for uncompressed extents (bsc#1174206).
- btrfs: add a flags argument to LOGICAL_INO and call it LOGICAL_INO_V2 (bsc#1174206).
- btrfs: increase output size for LOGICAL_INO_V2 ioctl (bsc#1174206).
- btrfs: qgroup: do not try to wait flushing if we're already holding a transaction (bsc#1179575).
- caif: no need to check return value of debugfs_create functions (git-fixes).
- can: c_can: c_can_power_up(): fix error handling (git-fixes).
- can: dev: prevent potential information leak in can_fill_info() (git-fixes).
- can: vxcan: vxcan_xmit: fix use after free bug (git-fixes).
- chelsio/chtls: correct function return and return type (bsc#1104270).
- chelsio/chtls: correct netdevice for vlan interface (bsc#1104270 ).
- chelsio/chtls: fix a double free in chtls_setkey() (bsc#1104270 ).
- chelsio/chtls: fix always leaking ctrl_skb (bsc#1104270 ).
- chelsio/chtls: fix deadlock issue (bsc#1104270).
- chelsio/chtls: fix memory leaks caused by a race (bsc#1104270 ).
- chelsio/chtls: fix memory leaks in CPL handlers (bsc#1104270 ).
- chelsio/chtls: fix panic during unload reload chtls (bsc#1104270 ).
- chelsio/chtls: fix socket lock (bsc#1104270).
- chelsio/chtls: fix tls record info to user (bsc#1104270 ).
- chtls: Added a check to avoid NULL pointer dereference (bsc#1104270).
- chtls: Fix chtls resources release sequence (bsc#1104270 ).
- chtls: Fix hardware tid leak (bsc#1104270).
- chtls: Remove invalid set_tcb call (bsc#1104270).
- chtls: Replace skb_dequeue with skb_peek (bsc#1104270 ).
- cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled (bsc#1109837).
- cxgb3: fix error return code in t3_sge_alloc_qset() (git-fixes).
- cxgb4/cxgb4vf: fix flow control display for auto negotiation (bsc#1046540 bsc#1046542).
- cxgb4: fix SGE queue dump destination buffer context (bsc#1073513).
- cxgb4: fix adapter crash due to wrong MC size (bsc#1073513).
- cxgb4: fix all-mask IP address comparison (bsc#1064802 bsc#1066129).
- cxgb4: fix large delays in PTP synchronization (bsc#1046540 bsc#1046648).
- cxgb4: fix the panic caused by non smac rewrite (bsc#1064802 bsc#1066129).
- cxgb4: fix thermal zone device registration (bsc#1104279 bsc#1104277).
- cxgb4: fix throughput drop during Tx backpressure (bsc#1127354 bsc#1127371).
- cxgb4: move DCB version extern to header file (bsc#1104279 ).
- cxgb4: remove cast when saving IPv4 partial checksum (bsc#1074220).
- cxgb4: set up filter action after rewrites (bsc#1064802 bsc#1066129).
- cxgb4: use correct type for all-mask IP address comparison (bsc#1064802 bsc#1066129).
- cxgb4: use unaligned conversion for fetching timestamp (bsc#1046540 bsc#1046648).
- dm: avoid filesystem lookup in dm_get_dev_t() (bsc#1178049).
- dmaengine: xilinx_dma: check dma_async_device_register return value (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (git-fixes).
- docs: Fix reST markup when linking to sections (git-fixes).
- drivers: net: xgene: Fix the order of the arguments of 'alloc_etherdev_mqs()' (git-fixes).
- drm/amd/powerplay: fix a crash when overclocking Vega M (bsc#1113956)
- drm/amdkfd: Put ACPI table after using it (bsc#1129770) Backporting changes: 	* context changes
- drm/atomic: put state on error path (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/i915: Clear the repeater bit on HDCP disable (bsc#1112178)
- drm/i915: Fix sha_text population code (bsc#1112178)
- drm/msm: Avoid div-by-zero in dpu_crtc_atomic_check() (bsc#1129770)
- drm/msm: Fix WARN_ON() splat in _free_object() (bsc#1129770)
- drm/msm: Fix use-after-free in msm_gem with carveout (bsc#1129770)
- drm/nouveau/bios: fix issue shadowing expansion ROMs (git-fixes).
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (git-fixes).
- drm/nouveau/privring: ack interrupts the same way as RM (git-fixes).
- drm/tve200: Fix handling of platform_get_irq() error (bsc#1129770)
- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1112178)
- drm: sun4i: hdmi: Fix inverted HPD result (bsc#1112178)
- drm: sun4i: hdmi: Remove extra HPD polling (bsc#1112178)
- ehci: fix EHCI host controller initialization sequence (git-fixes).
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (git-fixes).
- floppy: reintroduce O_NDELAY fix (boo#1181018).
- futex: Do not enable IRQs unconditionally in put_pi_state() (bsc#1149032).
- futex: Ensure the correct return value from futex_lock_pi() (bsc#1181349 bsc#1149032).
- futex: Fix incorrect should_fail_futex() handling (bsc#1181349).
- futex: Handle faults correctly for PI futexes (bsc#1181349 bsc#1149032).
- futex: Provide and use pi_state_update_owner() (bsc#1181349 bsc#1149032).
- futex: Replace pointless printk in fixup_owner() (bsc#1181349 bsc#1149032).
- futex: Simplify fixup_pi_state_owner() (bsc#1181349 bsc#1149032).
- futex: Use pi_state_update_owner() in put_pi_state() (bsc#1181349 bsc#1149032).
- i2c: octeon: check correct size of maximum RECV_LEN packet (git-fixes).
- i40e: Fix removing driver while bare-metal VFs pass traffic (git-fixes).
- i40e: avoid premature Rx buffer reuse (bsc#1111981).
- igb: Report speed and duplex as unknown when device is runtime suspended (git-fixes).
- igc: fix link speed advertising (jsc#SLE-4799).
- iio: ad5504: Fix setting power-down state (git-fixes).
- iommu/vt-d: Do not dereference iommu_device if IOMMU_API is not built (bsc#1181260, jsc#ECO-3191).
- iommu/vt-d: Gracefully handle DMAR units with no supported address widths (bsc#1181260, jsc#ECO-3191).
- ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K (bsc#1109837).
- ixgbe: avoid premature Rx buffer reuse (bsc#1109837 ).
- kABI: Fix kABI for extended APIC-ID support (bsc#1181260, jsc#ECO-3191).
- kernfs: deal with kernfs_fill_super() failures (bsc#1181809).
- lockd: do not use interval-based rebinding over TCP (git-fixes).
- locking/futex: Allow low-level atomic operations to return -EAGAIN (bsc#1149032).
- md/raid10: initialize r10_bio-&gt;read_slot before use (git-fixes).
- md: fix a warning caused by a race between concurrent md_ioctl()s (git-fixes).
- media: gp8psk: initialize stats at power control logic (git-fixes).
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (git-fixes).
- misdn: dsp: select CONFIG_BITREVERSE (git-fixes).
- mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() (git-fixes).
- mlxsw: destroy workqueue when trap_register in mlxsw_emad_init (bsc#1112374).
- mlxsw: spectrum: Do not modify cloned SKBs during xmit (git-fixes).
- mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails (bsc#1112374).
- mlxsw: switchx2: Do not modify cloned SKBs during xmit (git-fixes).
- mm, page_alloc: fix core hung in free_pcppages_bulk() (git fixes (mm/hotplug)).
- mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous() (git fixes (mm/pgalloc)).
- mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly (git fixes (mm/hmm)).
- mm/slab: use memzero_explicit() in kzfree() (git fixes (mm/slab)).
- mm: do not wake kswapd prematurely when watermark boosting is disabled (git fixes (mm/vmscan)).
- mm: hwpoison: disable memory error handling on 1GB hugepage (git fixes (mm/hwpoison)).
- mmc: sdhci-xenon: fix 1.8v regulator stabilization (git-fixes).
- nbd: Fix memory leak in nbd_add_socket (bsc#1181504).
- net/af_iucv: always register net_device notifier (git-fixes).
- net/af_iucv: fix null pointer dereference on shutdown (bsc#1179563 LTC#190108).
- net/af_iucv: set correct sk_protocol for child sockets (git-fixes).
- net/filter: Permit reading NET in load_bytes_relative when MAC not set (bsc#1109837).
- net/liquidio: Delete driver version assignment (git-fixes).
- net/liquidio: Delete non-working LIQUIDIO_PACKAGE check (git-fixes).
- net/mlx4_en: Avoid scheduling restart task if it is already running (git-fixes).
- net/mlx5: Add handling of port type in rule deletion (bsc#1103991).
- net/mlx5: Fix memory leak on flow table creation error flow (bsc#1046305).
- net/mlx5e: Fix VLAN cleanup flow (git-fixes).
- net/mlx5e: Fix VLAN create flow (git-fixes).
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (git-fixes).
- net/mlx5e: Fix two double free cases (bsc#1046305).
- net/mlx5e: IPoIB, Drop multicast packets that this interface sent (bsc#1075020).
- net/mlx5e: TX, Fix consumer index of error cqe dump (bsc#1103990 ).
- net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq (bsc#1103990).
- net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels (bsc#1109837).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource() (git-fixes).
- net/smc: receive pending data after RCV_SHUTDOWN (git-fixes).
- net/smc: receive returns without data (git-fixes).
- net/sonic: Add mutual exclusion for accessing shared state (git-fixes).
- net: atlantic: fix potential error handling (git-fixes).
- net: atlantic: fix use after free kasan warn (git-fixes).
- net: bcmgenet: keep MAC in reset until PHY is up (git-fixes).
- net: bcmgenet: reapply manual settings to the PHY (git-fixes).
- net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe() (git-fixes).
- net: cbs: Fix software cbs to consider packet sending time (bsc#1109837).
- net: dsa: LAN9303: select REGMAP when LAN9303 enable (git-fixes).
- net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL (git-fixes).
- net: ena: set initial DMA width to avoid intel iommu issue (git-fixes).
- net: ethernet: mlx4: Avoid assigning a value to ring_cons but not used it anymore in mlx4_en_xmit() (git-fixes).
- net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse() (git-fixes).
- net: freescale: fec: Fix ethtool -d runtime PM (git-fixes).
- net: hns3: add a missing uninit debugfs when unload driver (bsc#1104353).
- net: hns3: add compatible handling for command HCLGE_OPC_PF_RST_DONE (git-fixes).
- net: hns3: add management table after IMP reset (bsc#1104353 ).
- net: hns3: check reset interrupt status when reset fails (git-fixes).
- net: hns3: clear reset interrupt status in hclge_irq_handle() (git-fixes).
- net: hns3: fix a TX timeout issue (bsc#1104353).
- net: hns3: fix a wrong reset interrupt status mask (git-fixes).
- net: hns3: fix error VF index when setting VLAN offload (bsc#1104353).
- net: hns3: fix error handling for desc filling (bsc#1104353 ).
- net: hns3: fix for not calculating TX BD send size correctly (bsc#1126390).
- net: hns3: fix interrupt clearing error for VF (bsc#1104353 ).
- net: hns3: fix mis-counting IRQ vector numbers issue (bsc#1104353).
- net: hns3: fix shaper parameter algorithm (bsc#1104353 ).
- net: hns3: fix the number of queues actually used by ARQ (bsc#1104353).
- net: hns3: fix use-after-free when doing self test (bsc#1104353 ).
- net: hns3: reallocate SSU' buffer size when pfc_en changes (bsc#1104353).
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (bsc#1098633).
- net: mvpp2: Fix error return code in mvpp2_open() (bsc#1119113 ).
- net: mvpp2: fix pkt coalescing int-threshold configuration (bsc#1098633).
- net: phy: Allow BCM54616S PHY to setup internal TX/RX clock delay (git-fixes).
- net: phy: broadcom: Fix RGMII delays configuration for BCM54210E (git-fixes).
- net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs (git-fixes).
- net: phy: micrel: make sure the factory test bit is cleared (git-fixes).
- net: qca_spi: Move reset_count to struct qcaspi (git-fixes).
- net: smc911x: Adjust indentation in smc911x_phy_configure (git-fixes).
- net: stmmac: 16KB buffer must be 16 byte aligned (git-fixes).
- net: stmmac: Do not accept invalid MTU values (git-fixes).
- net: stmmac: Enable 16KB buffer size (git-fixes).
- net: stmmac: RX buffer size must be 16 byte aligned (git-fixes).
- net: stmmac: dwmac-meson8b: Fix signedness bug in probe (git-fixes).
- net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes (git-fixes).
- net: stmmac: fix length of PTP clock's name string (git-fixes).
- net: stmmac: gmac4+: Not all Unicast addresses may be available (git-fixes).
- net: sunrpc: interpret the return value of kstrtou32 correctly (git-fixes).
- net: team: fix memory leak in __team_options_register (git-fixes).
- net: tulip: Adjust indentation in {dmfe, uli526x}_init_module (git-fixes).
- net: usb: lan78xx: Fix error message format specifier (git-fixes).
- net: vlan: avoid leaks on register_vlan_dev() failures (git-fixes).
- net_failover: fixed rollback in net_failover_open() (bsc#1109837).
- net_sched: let qdisc_put() accept NULL pointer (bsc#1056657 bsc#1056653 bsc#1056787).
- nfp: validate the return code from dev_queue_xmit() (git-fixes).
- nfs_common: need lock during iterate through the list (git-fixes).
- nfsd4: readdirplus shouldn't return parent of export (git-fixes).
- nfsd: Fix message level for normal termination (git-fixes).
- pNFS: Mark layout for return if return-on-close was not sent (git-fixes).
- page_frag: Recover from memory pressure (git fixes (mm/pgalloc)).
- powerpc/perf: Add generic compat mode pmu driver (bsc#1178900 ltc#189284).
- powerpc/perf: Fix crashes with generic_compat_pmu &amp; BHRB (bsc#1178900 ltc#189284 git-fixes).
- powerpc/perf: init pmu from core-book3s (bsc#1178900 ltc#189284).
- qed: Fix race condition between scheduling and destroying the slowpath workqueue (bsc#1086314 bsc#1086313 bsc#1086301).
- qed: Fix use after free in qed_chain_free (bsc#1050536 bsc#1050538).
- r8152: Add Lenovo Powered USB-C Travel Hub (git-fixes).
- rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (bsc#1181349 bsc#1149032).
- s390/cio: fix use-after-free in ccw_device_destroy_console (git-fixes).
- s390/dasd: fix list corruption of lcu list (bsc#1181170 LTC#190915).
- s390/dasd: fix list corruption of pavgroup group list (bsc#1181170 LTC#190915).
- s390/dasd: prevent inconsistent LCU device data (bsc#1181170 LTC#190915).
- s390/qeth: delay draining the TX buffers (git-fixes).
- s390/qeth: fix L2 header access in qeth_l3_osa_features_check() (git-fixes).
- s390/qeth: fix deadlock during recovery (git-fixes).
- s390/qeth: fix locking for discipline setup / removal (git-fixes).
- s390/smp: perform initial CPU reset also for SMT siblings (git-fixes).
- sched/fair: Fix enqueue_task_fair warning (bsc#1179093).
- sched/fair: Fix enqueue_task_fair() warning some more (bsc#1179093).
- sched/fair: Fix reordering of enqueue/dequeue_task_fair() (bsc#1179093).
- sched/fair: Fix unthrottle_cfs_rq() for leaf_cfs_rq list (bsc#1179093).
- sched/fair: Reorder enqueue/dequeue_task_fair path (bsc#1179093).
- scsi: core: Fix VPD LUN ID designator priorities (bsc#1178049, git-fixes).
- scsi: ibmvfc: Set default timeout to avoid crash during migration (bsc#1181425 ltc#188252).
- scsi: lpfc: Enhancements to LOG_TRACE_EVENT for better readability (bsc#1180891).
- scsi: lpfc: Fix FW reset action if I/Os are outstanding (bsc#1180891).
- scsi: lpfc: Fix NVMe recovery after mailbox timeout (bsc#1180891).
- scsi: lpfc: Fix PLOGI S_ID of 0 on pt2pt config (bsc#1180891).
- scsi: lpfc: Fix auto sli_mode and its effect on CONFIG_PORT for SLI3 (bsc#1180891).
- scsi: lpfc: Fix crash when a fabric node is released prematurely (bsc#1180891).
- scsi: lpfc: Fix error log messages being logged following SCSI task mgnt (bsc#1180891).
- scsi: lpfc: Fix target reset failing (bsc#1180891).
- scsi: lpfc: Fix vport create logging (bsc#1180891).
- scsi: lpfc: Implement health checking when aborting I/O (bsc#1180891).
- scsi: lpfc: Prevent duplicate requests to unregister with cpuhp framework (bsc#1180891).
- scsi: lpfc: Refresh ndlp when a new PRLI is received in the PRLI issue state (bsc#1180891).
- scsi: lpfc: Simplify bool comparison (bsc#1180891).
- scsi: lpfc: Update lpfc version to 12.8.0.7 (bsc#1180891).
- scsi: lpfc: Use the nvme-fc transport supplied timeout for LS requests (bsc#1180891).
- scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit (bsc#1179142).
- serial: mvebu-uart: fix tx lost characters at power off (git-fixes).
- spi: cadence: cache reference clock rate during probe (git-fixes).
- team: set dev-&gt;needed_headroom in team_setup_by_port() (git-fixes).
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (bsc#1109837).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind failure (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: udc: core: Use lock when write to soft_connect (git-fixes).
- veth: Adjust hard_start offset on redirect XDP frames (bsc#1109837).
- vfio iommu: Add dma available capability (bsc#1179573 LTC#190106).
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (bsc#1181231).
- vhost/vsock: fix vhost vsock cid hashing inconsistent (git-fixes).
- virtio_net: Keep vnet header zeroed if XDP is loaded for small buffer (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- x86/apic: Fix x2apic enablement without interrupt remapping (bsc#1181260, jsc#ECO-3191).
- x86/apic: Support 15 bits of APIC ID in IOAPIC/MSI where available (bsc#1181260, jsc#ECO-3191).
- x86/hyperv: Fix kexec panic/hang issues (bsc#1176831).
- x86/i8259: Use printk_deferred() to prevent deadlock (bsc#1112178).
- x86/ioapic: Handle Extended Destination ID field in RTE (bsc#1181260, jsc#ECO-3191).
- x86/kvm: Add KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181260, jsc#ECO-3191).
- x86/kvm: Reserve KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181260, jsc#ECO-3191).
- x86/mm/numa: Remove uninitialized_var() usage (bsc#1112178).
- x86/mm: Fix leak of pmd ptlock (bsc#1112178).
- x86/msi: Only use high bits of MSI address for DMAR unit (bsc#1181260, jsc#ECO-3191).
- x86/mtrr: Correct the range check before performing MTRR type lookups (bsc#1112178).
- x86/resctrl: Do not move a task to the same resource group (bsc#1112178).
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (bsc#1112178).
- xdp: Fix xsk_generic_xmit errno (bsc#1109837).
- xhci: make sure TRB is fully written before giving it to the controller (git-fixes).
- xhci: tegra: Delay for disabling LFPS detector (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-19"/>
	<updated date="2021-02-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046305">SUSE bug 1046305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046306">SUSE bug 1046306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046540">SUSE bug 1046540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046542">SUSE bug 1046542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046648">SUSE bug 1046648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050538">SUSE bug 1050538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056653">SUSE bug 1056653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056657">SUSE bug 1056657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073513">SUSE bug 1073513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074220">SUSE bug 1074220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075020">SUSE bug 1075020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086282">SUSE bug 1086282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086301">SUSE bug 1086301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086313">SUSE bug 1086313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086314">SUSE bug 1086314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098633">SUSE bug 1098633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104270">SUSE bug 1104270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104277">SUSE bug 1104277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104279">SUSE bug 1104279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104742">SUSE bug 1104742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111981">SUSE bug 1111981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126390">SUSE bug 1126390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136348">SUSE bug 1136348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149032">SUSE bug 1149032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174206">SUSE bug 1174206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176831">SUSE bug 1176831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176846">SUSE bug 1176846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178036">SUSE bug 1178036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178049">SUSE bug 1178049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178900">SUSE bug 1178900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179093">SUSE bug 1179093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179142">SUSE bug 1179142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179508">SUSE bug 1179508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179509">SUSE bug 1179509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179563">SUSE bug 1179563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179573">SUSE bug 1179573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179575">SUSE bug 1179575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179878">SUSE bug 1179878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180130">SUSE bug 1180130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180765">SUSE bug 1180765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180812">SUSE bug 1180812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180891">SUSE bug 1180891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180912">SUSE bug 1180912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181018">SUSE bug 1181018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181170">SUSE bug 1181170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181230">SUSE bug 1181230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181231">SUSE bug 1181231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181260">SUSE bug 1181260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181349">SUSE bug 1181349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181425">SUSE bug 1181425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181504">SUSE bug 1181504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181809">SUSE bug 1181809</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25639/">CVE-2020-25639</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27835/">CVE-2020-27835</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29568/">CVE-2020-29568</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20177/">CVE-2021-20177</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3348/">CVE-2021-3348</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505529" comment="kernel-default-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505530" comment="kernel-default-base-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505531" comment="kernel-default-devel-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504165" comment="kernel-devel-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504166" comment="kernel-docs-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504167" comment="kernel-macros-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505532" comment="kernel-obs-build-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504169" comment="kernel-source-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505533" comment="kernel-syms-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505534" comment="reiserfs-kmp-default-4.12.14-197.83.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140459" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182286" ref_url="https://bugzilla.suse.com/1182286" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13558" ref_url="https://www.suse.com/security/cve/CVE-2020-13558/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0583-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008365.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.30.5 (bsc#1182286):

  + Bring back the WebKitPluginProcess installation that was removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-24"/>
	<updated date="2021-02-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182286">SUSE bug 1182286</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13558/">CVE-2020-13558</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505535" comment="libjavascriptcoregtk-4_0-18-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505536" comment="libwebkit2gtk-4_0-37-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503632" comment="libwebkit2gtk3-lang-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505537" comment="typelib-1_0-JavaScriptCore-4_0-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505538" comment="typelib-1_0-WebKit2-4_0-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505539" comment="typelib-1_0-WebKit2WebExtension-4_0-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505540" comment="webkit2gtk-4_0-injected-bundles-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505541" comment="webkit2gtk3-devel-2.30.5-3.66.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140460" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182049" ref_url="https://bugzilla.suse.com/1182049" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21702" ref_url="https://www.suse.com/security/cve/CVE-2021-21702/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008366.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2021-21702 [bsc#1182049]: NULL pointer dereference in SoapClient
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-24"/>
	<updated date="2021-02-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182049">SUSE bug 1182049</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21702/">CVE-2021-21702</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505542" comment="apache2-mod_php7-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505543" comment="php7-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505544" comment="php7-bcmath-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505545" comment="php7-bz2-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505546" comment="php7-calendar-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505547" comment="php7-ctype-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505548" comment="php7-curl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505549" comment="php7-dba-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505550" comment="php7-devel-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505551" comment="php7-dom-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505552" comment="php7-enchant-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505553" comment="php7-exif-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505554" comment="php7-fastcgi-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505555" comment="php7-fileinfo-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505556" comment="php7-fpm-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505557" comment="php7-ftp-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505558" comment="php7-gd-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505559" comment="php7-gettext-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505560" comment="php7-gmp-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505561" comment="php7-iconv-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505562" comment="php7-intl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505563" comment="php7-json-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505564" comment="php7-ldap-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505565" comment="php7-mbstring-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505566" comment="php7-mysql-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505567" comment="php7-odbc-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505568" comment="php7-opcache-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505569" comment="php7-openssl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505570" comment="php7-pcntl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505571" comment="php7-pdo-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503668" comment="php7-pear-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503669" comment="php7-pear-Archive_Tar-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505572" comment="php7-pgsql-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505573" comment="php7-phar-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505574" comment="php7-posix-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505575" comment="php7-readline-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505576" comment="php7-shmop-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505577" comment="php7-snmp-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505578" comment="php7-soap-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505579" comment="php7-sockets-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505580" comment="php7-sodium-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505581" comment="php7-sqlite-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505582" comment="php7-sysvmsg-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505583" comment="php7-sysvsem-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505584" comment="php7-sysvshm-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505585" comment="php7-tidy-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505586" comment="php7-tokenizer-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505587" comment="php7-wddx-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505588" comment="php7-xmlreader-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505589" comment="php7-xmlrpc-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505590" comment="php7-xmlwriter-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505591" comment="php7-xsl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505592" comment="php7-zip-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505593" comment="php7-zlib-7.2.5-4.73.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140461" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181550" ref_url="https://bugzilla.suse.com/1181550" source="BUGZILLA"/>
		<reference ref_id="1181556" ref_url="https://bugzilla.suse.com/1181556" source="BUGZILLA"/>
		<reference ref_id="1181557" ref_url="https://bugzilla.suse.com/1181557" source="BUGZILLA"/>
		<reference ref_id="1181558" ref_url="https://bugzilla.suse.com/1181558" source="BUGZILLA"/>
		<reference ref_id="1181559" ref_url="https://bugzilla.suse.com/1181559" source="BUGZILLA"/>
		<reference ref_id="1181560" ref_url="https://bugzilla.suse.com/1181560" source="BUGZILLA"/>
		<reference ref_id="1181561" ref_url="https://bugzilla.suse.com/1181561" source="BUGZILLA"/>
		<reference ref_id="1181562" ref_url="https://bugzilla.suse.com/1181562" source="BUGZILLA"/>
		<reference ref_id="1181563" ref_url="https://bugzilla.suse.com/1181563" source="BUGZILLA"/>
		<reference ref_id="1181564" ref_url="https://bugzilla.suse.com/1181564" source="BUGZILLA"/>
		<reference ref_id="1181565" ref_url="https://bugzilla.suse.com/1181565" source="BUGZILLA"/>
		<reference ref_id="1182740" ref_url="https://bugzilla.suse.com/1182740" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28243" ref_url="https://www.suse.com/security/cve/CVE-2020-28243/" source="CVE"/>
		<reference ref_id="CVE-2020-28972" ref_url="https://www.suse.com/security/cve/CVE-2020-28972/" source="CVE"/>
		<reference ref_id="CVE-2020-35662" ref_url="https://www.suse.com/security/cve/CVE-2020-35662/" source="CVE"/>
		<reference ref_id="CVE-2021-25281" ref_url="https://www.suse.com/security/cve/CVE-2021-25281/" source="CVE"/>
		<reference ref_id="CVE-2021-25282" ref_url="https://www.suse.com/security/cve/CVE-2021-25282/" source="CVE"/>
		<reference ref_id="CVE-2021-25283" ref_url="https://www.suse.com/security/cve/CVE-2021-25283/" source="CVE"/>
		<reference ref_id="CVE-2021-25284" ref_url="https://www.suse.com/security/cve/CVE-2021-25284/" source="CVE"/>
		<reference ref_id="CVE-2021-3144" ref_url="https://www.suse.com/security/cve/CVE-2021-3144/" source="CVE"/>
		<reference ref_id="CVE-2021-3148" ref_url="https://www.suse.com/security/cve/CVE-2021-3148/" source="CVE"/>
		<reference ref_id="CVE-2021-3197" ref_url="https://www.suse.com/security/cve/CVE-2021-3197/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008388.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix errors with virt.update
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-26"/>
	<updated date="2021-02-26"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1181550">SUSE bug 1181550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181556">SUSE bug 1181556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181557">SUSE bug 1181557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181558">SUSE bug 1181558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181559">SUSE bug 1181559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181560">SUSE bug 1181560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181561">SUSE bug 1181561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181562">SUSE bug 1181562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181563">SUSE bug 1181563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181564">SUSE bug 1181564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181565">SUSE bug 1181565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182740">SUSE bug 1182740</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-28243/">CVE-2020-28243</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28972/">CVE-2020-28972</cve>
	<cve impact="important" cvss3="9.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2020-35662/">CVE-2020-35662</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25281/">CVE-2021-25281</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25282/">CVE-2021-25282</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25283/">CVE-2021-25283</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-25284/">CVE-2021-25284</cve>
	<cve impact="important" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3144/">CVE-2021-3144</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3148/">CVE-2021-3148</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3197/">CVE-2021-3197</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505594" comment="python2-salt-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505595" comment="python3-salt-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505596" comment="salt-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505597" comment="salt-api-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494161" comment="salt-bash-completion-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505598" comment="salt-cloud-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505599" comment="salt-doc-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500064" comment="salt-fish-completion-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505600" comment="salt-master-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505601" comment="salt-minion-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505602" comment="salt-proxy-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505603" comment="salt-ssh-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505604" comment="salt-standalone-formulas-configuration-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505605" comment="salt-syndic-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494164" comment="salt-zsh-completion-3000-24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140462" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1178386" ref_url="https://bugzilla.suse.com/1178386" source="BUGZILLA"/>
		<reference ref_id="1179694" ref_url="https://bugzilla.suse.com/1179694" source="BUGZILLA"/>
		<reference ref_id="1179721" ref_url="https://bugzilla.suse.com/1179721" source="BUGZILLA"/>
		<reference ref_id="1180038" ref_url="https://bugzilla.suse.com/1180038" source="BUGZILLA"/>
		<reference ref_id="1181505" ref_url="https://bugzilla.suse.com/1181505" source="BUGZILLA"/>
		<reference ref_id="1182117" ref_url="https://bugzilla.suse.com/1182117" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-25013" ref_url="https://www.suse.com/security/cve/CVE-2019-25013/" source="CVE"/>
		<reference ref_id="CVE-2020-27618" ref_url="https://www.suse.com/security/cve/CVE-2020-27618/" source="CVE"/>
		<reference ref_id="CVE-2020-29562" ref_url="https://www.suse.com/security/cve/CVE-2020-29562/" source="CVE"/>
		<reference ref_id="CVE-2020-29573" ref_url="https://www.suse.com/security/cve/CVE-2020-29573/" source="CVE"/>
		<reference ref_id="CVE-2021-3326" ref_url="https://www.suse.com/security/cve/CVE-2021-3326/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008397.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

- Fix buffer overrun in EUC-KR conversion module (CVE-2019-25013, bsc#1182117, BZ #24973)
- x86: Harden printf against non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- gconv: Fix assertion failure in ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)
- iconv: Accept redundant shift sequences in IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv: Fix incorrect UCS4 inner loop bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- Fix parsing of /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-26"/>
	<updated date="2021-02-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178386">SUSE bug 1178386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179694">SUSE bug 1179694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179721">SUSE bug 1179721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180038">SUSE bug 1180038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181505">SUSE bug 1181505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182117">SUSE bug 1182117</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-25013/">CVE-2019-25013</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27618/">CVE-2020-27618</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29562/">CVE-2020-29562</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29573/">CVE-2020-29573</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3326/">CVE-2021-3326</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505606" comment="glibc-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494166" comment="glibc-32bit-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505607" comment="glibc-devel-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496617" comment="glibc-devel-32bit-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505608" comment="glibc-devel-static-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505609" comment="glibc-extra-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494169" comment="glibc-i18ndata-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494170" comment="glibc-info-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505610" comment="glibc-locale-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505611" comment="glibc-locale-base-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494173" comment="glibc-locale-base-32bit-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505612" comment="glibc-profile-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505613" comment="glibc-utils-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505614" comment="nscd-2.26-13.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140463" version="1" class="patch">
	<metadata>
		<title>Security update for python-Jinja2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181944" ref_url="https://bugzilla.suse.com/1181944" source="BUGZILLA"/>
		<reference ref_id="1182244" ref_url="https://bugzilla.suse.com/1182244" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28493" ref_url="https://www.suse.com/security/cve/CVE-2020-28493/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0654-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008398.html" source="SUSE-SU"/>
		<description>
This update for python-Jinja2 fixes the following issues:

- CVE-2020-28493: Fixed a ReDOS vulnerability where urlize could have 
  been called with untrusted user data (bsc#1181944).  
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-26"/>
	<updated date="2021-02-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181944">SUSE bug 1181944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182244">SUSE bug 1182244</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28493/">CVE-2020-28493</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498309" comment="python2-Jinja2-2.10.1-3.10.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494176" comment="python3-Jinja2-2.10.1-3.10.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140464" version="1" class="patch">
	<metadata>
		<title>Security update for rpmlint (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1169614" ref_url="https://bugzilla.suse.com/1169614" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:0658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008401.html" source="SUSE-SU"/>
		<description>
This update for rpmlint fixes the following issues:

- Whitelist PAM modules and DBUS rules for cockpit (bsc#1169614)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-01"/>
	<updated date="2021-03-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1169614">SUSE bug 1169614</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505615" comment="rpmlint-mini-1.10-7.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140465" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181239" ref_url="https://bugzilla.suse.com/1181239" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14803" ref_url="https://www.suse.com/security/cve/CVE-2020-14803/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008405.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters (CVE-2020-14803)
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
      /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
      dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
      /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
      URI('x/').resolve('..').getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
      /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
      /InitializationHang.java as headful
    + JDK-8148854: Class names 'SomeClass' and 'LSomeClass;'
      treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
      fails
    + JDK-8165808: Add release barriers when allocating objects
      with concurrent collection
    + JDK-8185003: JMX: Add a version of
      ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
      windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
      JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
      previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
      fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
      can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
      implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
      numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
      using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
      compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
      false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
      ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
      test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
      should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
      rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
      doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
      inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
      is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
      --with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
      STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
      /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
      /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
      warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
       zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
      /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-01"/>
	<updated date="2021-03-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1181239">SUSE bug 1181239</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14803/">CVE-2020-14803</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505616" comment="java-1_8_0-openjdk-1.8.0.282-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505617" comment="java-1_8_0-openjdk-demo-1.8.0.282-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505618" comment="java-1_8_0-openjdk-devel-1.8.0.282-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505619" comment="java-1_8_0-openjdk-headless-1.8.0.282-3.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140466" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181239" ref_url="https://bugzilla.suse.com/1181239" source="BUGZILLA"/>
		<reference ref_id="1182186" ref_url="https://bugzilla.suse.com/1182186" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14803" ref_url="https://www.suse.com/security/cve/CVE-2020-14803/" source="CVE"/>
		<reference ref_id="CVE-2020-27221" ref_url="https://www.suse.com/security/cve/CVE-2020-27221/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008406.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-01"/>
	<updated date="2021-03-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181239">SUSE bug 1181239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182186">SUSE bug 1182186</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14803/">CVE-2020-14803</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27221/">CVE-2020-27221</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505620" comment="java-1_8_0-ibm-1.8.0_sr6.25-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497135" comment="java-1_8_0-ibm-alsa-1.8.0_sr6.25-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505621" comment="java-1_8_0-ibm-devel-1.8.0_sr6.25-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497137" comment="java-1_8_0-ibm-plugin-1.8.0_sr6.25-3.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140467" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182333" ref_url="https://bugzilla.suse.com/1182333" source="BUGZILLA"/>
		<reference ref_id="1182619" ref_url="https://bugzilla.suse.com/1182619" source="BUGZILLA"/>
		<reference ref_id="1182620" ref_url="https://bugzilla.suse.com/1182620" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22883" ref_url="https://www.suse.com/security/cve/CVE-2021-22883/" source="CVE"/>
		<reference ref_id="CVE-2021-22884" ref_url="https://www.suse.com/security/cve/CVE-2021-22884/" source="CVE"/>
		<reference ref_id="CVE-2021-23840" ref_url="https://www.suse.com/security/cve/CVE-2021-23840/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008416.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

New upstream LTS version 10.24.0:

- CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (bsc#1182619)
- CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
- CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate (bsc#1182333)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182333">SUSE bug 1182333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182619">SUSE bug 1182619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182620">SUSE bug 1182620</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-22883/">CVE-2021-22883</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-22884/">CVE-2021-22884</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-23840/">CVE-2021-23840</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505622" comment="nodejs10-10.24.0-1.33.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505623" comment="nodejs10-devel-10.24.0-1.33.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501363" comment="nodejs10-docs-10.24.0-1.33.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505624" comment="npm10-10.24.0-1.33.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140468" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181848" ref_url="https://bugzilla.suse.com/1181848" source="BUGZILLA"/>
		<reference ref_id="1182357" ref_url="https://bugzilla.suse.com/1182357" source="BUGZILLA"/>
		<reference ref_id="1182614" ref_url="https://bugzilla.suse.com/1182614" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23968" ref_url="https://www.suse.com/security/cve/CVE-2021-23968/" source="CVE"/>
		<reference ref_id="CVE-2021-23969" ref_url="https://www.suse.com/security/cve/CVE-2021-23969/" source="CVE"/>
		<reference ref_id="CVE-2021-23973" ref_url="https://www.suse.com/security/cve/CVE-2021-23973/" source="CVE"/>
		<reference ref_id="CVE-2021-23978" ref_url="https://www.suse.com/security/cve/CVE-2021-23978/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008414.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969: Content Security Policy violation report could have contained the destination of a redirect
  * CVE-2021-23968: Content Security Policy violation report could have contained the destination of a redirect
  * CVE-2021-23973: MediaError message property could have leaked information about cross-origin resources
  * CVE-2021-23978: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
  * Fixed: Prevent access to NTFS special paths that could lead to filesystem corruption. 
  * Buffer overflow in depth pitch calculations for compressed textures 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181848">SUSE bug 1181848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182357">SUSE bug 1182357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182614">SUSE bug 1182614</bugzilla>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23968/">CVE-2021-23968</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23969/">CVE-2021-23969</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23973/">CVE-2021-23973</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23978/">CVE-2021-23978</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505625" comment="MozillaFirefox-78.8.0-3.133.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505626" comment="MozillaFirefox-devel-78.8.0-3.133.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505627" comment="MozillaFirefox-translations-common-78.8.0-3.133.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505628" comment="MozillaFirefox-translations-other-78.8.0-3.133.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140469" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1175970" ref_url="https://bugzilla.suse.com/1175970" source="BUGZILLA"/>
		<reference ref_id="1176711" ref_url="https://bugzilla.suse.com/1176711" source="BUGZILLA"/>
		<reference ref_id="1177883" ref_url="https://bugzilla.suse.com/1177883" source="BUGZILLA"/>
		<reference ref_id="1179264" ref_url="https://bugzilla.suse.com/1179264" source="BUGZILLA"/>
		<reference ref_id="1179265" ref_url="https://bugzilla.suse.com/1179265" source="BUGZILLA"/>
		<reference ref_id="1182057" ref_url="https://bugzilla.suse.com/1182057" source="BUGZILLA"/>
		<reference ref_id="1182262" ref_url="https://bugzilla.suse.com/1182262" source="BUGZILLA"/>
		<reference ref_id="1182263" ref_url="https://bugzilla.suse.com/1182263" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14372" ref_url="https://www.suse.com/security/cve/CVE-2020-14372/" source="CVE"/>
		<reference ref_id="CVE-2020-25632" ref_url="https://www.suse.com/security/cve/CVE-2020-25632/" source="CVE"/>
		<reference ref_id="CVE-2020-25647" ref_url="https://www.suse.com/security/cve/CVE-2020-25647/" source="CVE"/>
		<reference ref_id="CVE-2020-27749" ref_url="https://www.suse.com/security/cve/CVE-2020-27749/" source="CVE"/>
		<reference ref_id="CVE-2020-27779" ref_url="https://www.suse.com/security/cve/CVE-2020-27779/" source="CVE"/>
		<reference ref_id="CVE-2021-20225" ref_url="https://www.suse.com/security/cve/CVE-2021-20225/" source="CVE"/>
		<reference ref_id="CVE-2021-20233" ref_url="https://www.suse.com/security/cve/CVE-2021-20233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008427.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

grub2 now implements the new 'SBAT' method for SHIM based secure boot revocation. (bsc#1182057)

Following security issues are fixed that can violate secure boot constraints:

- CVE-2020-25632: Fixed a use-after-free in rmmod command (bsc#1176711)
- CVE-2020-25647: Fixed an out-of-bound write in grub_usb_device_initialize() (bsc#1177883)
- CVE-2020-27749: Fixed a stack buffer overflow in grub_parser_split_cmdline (bsc#1179264)
- CVE-2020-27779, CVE-2020-14372: Disallow cutmem and acpi commands in secure boot mode (bsc#1179265 bsc#1175970)
- CVE-2021-20225: Fixed a heap out-of-bounds write in short form option parser (bsc#1182262)
- CVE-2021-20233: Fixed a heap out-of-bound write due to mis-calculation of space required for quoting (bsc#1182263)

		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175970">SUSE bug 1175970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176711">SUSE bug 1176711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177883">SUSE bug 1177883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179264">SUSE bug 1179264</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179265">SUSE bug 1179265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182057">SUSE bug 1182057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182262">SUSE bug 1182262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182263">SUSE bug 1182263</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14372/">CVE-2020-14372</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25632/">CVE-2020-25632</cve>
	<cve impact="important" cvss3="7.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25647/">CVE-2020-25647</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27749/">CVE-2020-27749</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27779/">CVE-2020-27779</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20225/">CVE-2021-20225</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20233/">CVE-2021-20233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505629" comment="grub2-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504191" comment="grub2-i386-pc-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504192" comment="grub2-snapper-plugin-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504193" comment="grub2-systemd-sleep-plugin-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504194" comment="grub2-x86_64-efi-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504195" comment="grub2-x86_64-xen-2.02-26.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140470" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1180933" ref_url="https://bugzilla.suse.com/1180933" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:0689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008421.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- dnssec-keygen can no longer generate HMAC keys. Use tsig-keygen instead. [bsc#1180933]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180933">SUSE bug 1180933</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505630" comment="bind-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505631" comment="bind-chrootenv-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505632" comment="bind-devel-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500073" comment="bind-doc-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505633" comment="bind-utils-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505634" comment="libbind9-1600-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505635" comment="libdns1605-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505636" comment="libirs-devel-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505637" comment="libirs1601-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505638" comment="libisc1606-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505639" comment="libisccc1600-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505640" comment="libisccfg1600-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505641" comment="libns1604-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494195" comment="python3-bind-9.16.6-12.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140471" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181720" ref_url="https://bugzilla.suse.com/1181720" source="BUGZILLA"/>
		<reference ref_id="1181735" ref_url="https://bugzilla.suse.com/1181735" source="BUGZILLA"/>
		<reference ref_id="1181736" ref_url="https://bugzilla.suse.com/1181736" source="BUGZILLA"/>
		<reference ref_id="1181738" ref_url="https://bugzilla.suse.com/1181738" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12362" ref_url="https://www.suse.com/security/cve/CVE-2020-12362/" source="CVE"/>
		<reference ref_id="CVE-2020-12363" ref_url="https://www.suse.com/security/cve/CVE-2020-12363/" source="CVE"/>
		<reference ref_id="CVE-2020-12364" ref_url="https://www.suse.com/security/cve/CVE-2020-12364/" source="CVE"/>
		<reference ref_id="CVE-2020-12373" ref_url="https://www.suse.com/security/cve/CVE-2020-12373/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008432.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

- CVE-2020-12373: Fixed an expired pointer dereference may lead to DOS (bsc#1181738).
- CVE-2020-12364: Fixed a null pointer reference may lead to DOS (bsc#1181736). 
- CVE-2020-12362: Fixed an integer overflow which could have led to privilege escalation (bsc#1181720).
- CVE-2020-12363: Fixed an improper input validation which may have led to DOS (bsc#1181735).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-03"/>
	<updated date="2021-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181720">SUSE bug 1181720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181735">SUSE bug 1181735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181736">SUSE bug 1181736</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181738">SUSE bug 1181738</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12362/">CVE-2020-12362</cve>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12363/">CVE-2020-12363</cve>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12364/">CVE-2020-12364</cve>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12373/">CVE-2020-12373</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494196" comment="kernel-firmware-20200107-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494197" comment="ucode-amd-20200107-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140472" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1179765" ref_url="https://bugzilla.suse.com/1179765" source="BUGZILLA"/>
		<reference ref_id="1182040" ref_url="https://bugzilla.suse.com/1182040" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3393" ref_url="https://www.suse.com/security/cve/CVE-2021-3393/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008430.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

Upgrade to version 12.6:

- Reindexing might be needed after applying this update.
- CVE-2021-3393, bsc#1182040: Fix information leakage in constraint-violation error messages.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-03"/>
	<updated date="2021-03-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179765">SUSE bug 1179765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182040">SUSE bug 1182040</bugzilla>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3393/">CVE-2021-3393</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505642" comment="libecpg6-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505643" comment="libpq5-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504198" comment="libpq5-32bit-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505644" comment="postgresql12-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505645" comment="postgresql12-contrib-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505646" comment="postgresql12-devel-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504202" comment="postgresql12-docs-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505647" comment="postgresql12-plperl-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505648" comment="postgresql12-plpython-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505649" comment="postgresql12-pltcl-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505650" comment="postgresql12-server-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505651" comment="postgresql12-server-devel-12.6-3.21.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140473" version="1" class="patch">
	<metadata>
		<title>Security update for python-cryptography (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182066" ref_url="https://bugzilla.suse.com/1182066" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36242" ref_url="https://www.suse.com/security/cve/CVE-2020-36242/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008429.html" source="SUSE-SU"/>
		<description>
This update for python-cryptography fixes the following issues:

- CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte
  values could result in an integer overflow and buffer overflow (bsc#1182066).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-03"/>
	<updated date="2021-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182066">SUSE bug 1182066</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36242/">CVE-2020-36242</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505652" comment="python2-cryptography-2.1.4-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505653" comment="python3-cryptography-2.1.4-4.9.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140474" version="1" class="patch">
	<metadata>
		<title>Security update for wpa_supplicant (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182805" ref_url="https://bugzilla.suse.com/1182805" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27803" ref_url="https://www.suse.com/security/cve/CVE-2021-27803/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008439.html" source="SUSE-SU"/>
		<description>
This update for wpa_supplicant fixes the following issues:

- CVE-2021-27803: Fixed a P2P provision discovery processing vulnerability (bsc#1182805).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-08"/>
	<updated date="2021-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182805">SUSE bug 1182805</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27803/">CVE-2021-27803</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505654" comment="wpa_supplicant-2.9-4.26.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140475" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182279" ref_url="https://bugzilla.suse.com/1182279" source="BUGZILLA"/>
		<reference ref_id="1182408" ref_url="https://bugzilla.suse.com/1182408" source="BUGZILLA"/>
		<reference ref_id="1182411" ref_url="https://bugzilla.suse.com/1182411" source="BUGZILLA"/>
		<reference ref_id="1182412" ref_url="https://bugzilla.suse.com/1182412" source="BUGZILLA"/>
		<reference ref_id="1182413" ref_url="https://bugzilla.suse.com/1182413" source="BUGZILLA"/>
		<reference ref_id="1182415" ref_url="https://bugzilla.suse.com/1182415" source="BUGZILLA"/>
		<reference ref_id="1182416" ref_url="https://bugzilla.suse.com/1182416" source="BUGZILLA"/>
		<reference ref_id="1182417" ref_url="https://bugzilla.suse.com/1182417" source="BUGZILLA"/>
		<reference ref_id="1182418" ref_url="https://bugzilla.suse.com/1182418" source="BUGZILLA"/>
		<reference ref_id="1182419" ref_url="https://bugzilla.suse.com/1182419" source="BUGZILLA"/>
		<reference ref_id="1182420" ref_url="https://bugzilla.suse.com/1182420" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36221" ref_url="https://www.suse.com/security/cve/CVE-2020-36221/" source="CVE"/>
		<reference ref_id="CVE-2020-36222" ref_url="https://www.suse.com/security/cve/CVE-2020-36222/" source="CVE"/>
		<reference ref_id="CVE-2020-36223" ref_url="https://www.suse.com/security/cve/CVE-2020-36223/" source="CVE"/>
		<reference ref_id="CVE-2020-36224" ref_url="https://www.suse.com/security/cve/CVE-2020-36224/" source="CVE"/>
		<reference ref_id="CVE-2020-36225" ref_url="https://www.suse.com/security/cve/CVE-2020-36225/" source="CVE"/>
		<reference ref_id="CVE-2020-36226" ref_url="https://www.suse.com/security/cve/CVE-2020-36226/" source="CVE"/>
		<reference ref_id="CVE-2020-36227" ref_url="https://www.suse.com/security/cve/CVE-2020-36227/" source="CVE"/>
		<reference ref_id="CVE-2020-36228" ref_url="https://www.suse.com/security/cve/CVE-2020-36228/" source="CVE"/>
		<reference ref_id="CVE-2020-36229" ref_url="https://www.suse.com/security/cve/CVE-2020-36229/" source="CVE"/>
		<reference ref_id="CVE-2020-36230" ref_url="https://www.suse.com/security/cve/CVE-2020-36230/" source="CVE"/>
		<reference ref_id="CVE-2021-27212" ref_url="https://www.suse.com/security/cve/CVE-2021-27212/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008438.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-08"/>
	<updated date="2021-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182279">SUSE bug 1182279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182408">SUSE bug 1182408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182411">SUSE bug 1182411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182412">SUSE bug 1182412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182413">SUSE bug 1182413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182415">SUSE bug 1182415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182416">SUSE bug 1182416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182417">SUSE bug 1182417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182418">SUSE bug 1182418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182419">SUSE bug 1182419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182420">SUSE bug 1182420</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36221/">CVE-2020-36221</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36222/">CVE-2020-36222</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36223/">CVE-2020-36223</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36224/">CVE-2020-36224</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36225/">CVE-2020-36225</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36226/">CVE-2020-36226</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36227/">CVE-2020-36227</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36228/">CVE-2020-36228</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36229/">CVE-2020-36229</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36230/">CVE-2020-36230</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27212/">CVE-2021-27212</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505655" comment="libldap-2_4-2-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494200" comment="libldap-2_4-2-32bit-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494201" comment="libldap-data-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505656" comment="openldap2-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505657" comment="openldap2-back-meta-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505658" comment="openldap2-back-perl-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505659" comment="openldap2-client-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505660" comment="openldap2-devel-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496620" comment="openldap2-devel-32bit-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505661" comment="openldap2-devel-static-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505662" comment="openldap2-ppolicy-check-password-1.2-9.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140476" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1163617" ref_url="https://bugzilla.suse.com/1163617" source="BUGZILLA"/>
		<reference ref_id="1170442" ref_url="https://bugzilla.suse.com/1170442" source="BUGZILLA"/>
		<reference ref_id="1176855" ref_url="https://bugzilla.suse.com/1176855" source="BUGZILLA"/>
		<reference ref_id="1179082" ref_url="https://bugzilla.suse.com/1179082" source="BUGZILLA"/>
		<reference ref_id="1179428" ref_url="https://bugzilla.suse.com/1179428" source="BUGZILLA"/>
		<reference ref_id="1179660" ref_url="https://bugzilla.suse.com/1179660" source="BUGZILLA"/>
		<reference ref_id="1180058" ref_url="https://bugzilla.suse.com/1180058" source="BUGZILLA"/>
		<reference ref_id="1180262" ref_url="https://bugzilla.suse.com/1180262" source="BUGZILLA"/>
		<reference ref_id="1180964" ref_url="https://bugzilla.suse.com/1180964" source="BUGZILLA"/>
		<reference ref_id="1181671" ref_url="https://bugzilla.suse.com/1181671" source="BUGZILLA"/>
		<reference ref_id="1181747" ref_url="https://bugzilla.suse.com/1181747" source="BUGZILLA"/>
		<reference ref_id="1181753" ref_url="https://bugzilla.suse.com/1181753" source="BUGZILLA"/>
		<reference ref_id="1181843" ref_url="https://bugzilla.suse.com/1181843" source="BUGZILLA"/>
		<reference ref_id="1181854" ref_url="https://bugzilla.suse.com/1181854" source="BUGZILLA"/>
		<reference ref_id="1182047" ref_url="https://bugzilla.suse.com/1182047" source="BUGZILLA"/>
		<reference ref_id="1182130" ref_url="https://bugzilla.suse.com/1182130" source="BUGZILLA"/>
		<reference ref_id="1182140" ref_url="https://bugzilla.suse.com/1182140" source="BUGZILLA"/>
		<reference ref_id="1182175" ref_url="https://bugzilla.suse.com/1182175" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29374" ref_url="https://www.suse.com/security/cve/CVE-2020-29374/" source="CVE"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-26932" ref_url="https://www.suse.com/security/cve/CVE-2021-26932/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008455.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1181843).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1181753).
- CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping (XSA-361 bsc#1181747).
  by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#178372).
- CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write implementation which could have granted unintended write access
  because of a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).

The following non-security bugs were fixed:

- btrfs: Cleanup try_flush_qgroup (bsc#1182047).
- btrfs: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: fix data bytes_may_use underflow with fallocate due to failed quota reserve (bsc#1182130)
- btrfs: Free correct amount of space in btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Simplify code flow in btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Unlock extents in btrfs_zero_range in case of errors (bsc#1182047).
- Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (git-fixes).
- ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293).
- kernel-binary.spec: Add back initrd and image symlink ghosts to filelist (bsc#1182140). Fixes: 76a9256314c3 ('rpm/kernel-{source,binary}.spec: do not include ghost symlinks (boo#1179082).')
- libnvdimm/dimm: Avoid race between probe and available_slots_show() (bsc#1170442).
- net: bcmgenet: add support for ethtool rxnfc flows (git-fixes).
- net: bcmgenet: code movement (git-fixes).
- net: bcmgenet: fix mask check in bcmgenet_validate_flow() (git-fixes).
- net: bcmgenet: Fix WoL with password after deep sleep (git-fixes).
- net: bcmgenet: re-remove bcmgenet_hfb_add_filter (git-fixes).
- net: bcmgenet: set Rx mode before starting netif (git-fixes).
- net: bcmgenet: use __be16 for htons(ETH_P_IP) (git-fixes).
- net: bcmgenet: Use correct I/O accessors (git-fixes).
- net: lpc-enet: fix error return code in lpc_mii_init() (git-fixes).
- net/mlx4_en: Handle TX error CQE (bsc#1181854).
- net: moxa: Fix a potential double 'free_irq()' (git-fixes).
- net: sun: fix missing release regions in cas_init_one() (git-fixes).
- nvme-multipath: Early exit if no path is available (bsc#1180964).
- rpm/post.sh: Avoid purge-kernel for the first installed kernel (bsc#1180058)
- scsi: target: fix unmap_zeroes_data boolean initialisation (bsc#1163617).
- usb: dwc2: Abort transaction after errors with unknown reason (bsc#1180262).
- usb: dwc2: Do not update data length if it is 0 on inbound transfers (bsc#1180262).
- usb: dwc2: Make 'trimming xfer length' a debug message (bsc#1180262).
- vmxnet3: Remove buf_info from device accessible structures (bsc#1181671).
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).
- xen/netback: fix spurious event detection for common event case (bsc#1182175).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-09"/>
	<updated date="2021-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163617">SUSE bug 1163617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170442">SUSE bug 1170442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176855">SUSE bug 1176855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179082">SUSE bug 1179082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179428">SUSE bug 1179428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179660">SUSE bug 1179660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180058">SUSE bug 1180058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180262">SUSE bug 1180262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180964">SUSE bug 1180964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181671">SUSE bug 1181671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181747">SUSE bug 1181747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181753">SUSE bug 1181753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181843">SUSE bug 1181843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181854">SUSE bug 1181854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182047">SUSE bug 1182047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182130">SUSE bug 1182130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182140">SUSE bug 1182140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182175">SUSE bug 1182175</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29374/">CVE-2020-29374</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26932/">CVE-2021-26932</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505663" comment="kernel-default-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505664" comment="kernel-default-base-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505665" comment="kernel-default-devel-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504211" comment="kernel-devel-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504212" comment="kernel-docs-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504213" comment="kernel-macros-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505666" comment="kernel-obs-build-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504215" comment="kernel-source-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505667" comment="kernel-syms-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505668" comment="reiserfs-kmp-default-4.12.14-197.86.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140477" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182331" ref_url="https://bugzilla.suse.com/1182331" source="BUGZILLA"/>
		<reference ref_id="1182333" ref_url="https://bugzilla.suse.com/1182333" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23840" ref_url="https://www.suse.com/security/cve/CVE-2021-23840/" source="CVE"/>
		<reference ref_id="CVE-2021-23841" ref_url="https://www.suse.com/security/cve/CVE-2021-23841/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008447.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333)
- CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-09"/>
	<updated date="2021-03-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1182331">SUSE bug 1182331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182333">SUSE bug 1182333</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-23840/">CVE-2021-23840</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-23841/">CVE-2021-23841</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505669" comment="libopenssl-1_1-devel-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504218" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505670" comment="libopenssl1_1-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504220" comment="libopenssl1_1-32bit-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505671" comment="libopenssl1_1-hmac-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504222" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505672" comment="openssl-1_1-1.1.0i-14.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140478" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1183026" ref_url="https://bugzilla.suse.com/1183026" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21300" ref_url="https://www.suse.com/security/cve/CVE-2021-21300/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0757-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008461.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-09"/>
	<updated date="2021-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183026">SUSE bug 1183026</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21300/">CVE-2021-21300</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505673" comment="git-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505674" comment="git-arch-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505675" comment="git-core-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505676" comment="git-cvs-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505677" comment="git-daemon-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496630" comment="git-doc-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505678" comment="git-email-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505679" comment="git-gui-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505680" comment="git-svn-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505681" comment="git-web-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505682" comment="gitk-2.26.2-3.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140479" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182379" ref_url="https://bugzilla.suse.com/1182379" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23336" ref_url="https://www.suse.com/security/cve/CVE-2021-23336/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0768-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018251.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- python27 was upgraded to 2.7.18
- CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-11"/>
	<updated date="2021-03-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1182379">SUSE bug 1182379</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-23336/">CVE-2021-23336</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505683" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505684" comment="python-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505685" comment="python-base-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505686" comment="python-curses-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505687" comment="python-devel-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505688" comment="python-gdbm-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505689" comment="python-tk-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505690" comment="python-xml-2.7.18-7.55.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140480" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182331" ref_url="https://bugzilla.suse.com/1182331" source="BUGZILLA"/>
		<reference ref_id="1182333" ref_url="https://bugzilla.suse.com/1182333" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23840" ref_url="https://www.suse.com/security/cve/CVE-2021-23840/" source="CVE"/>
		<reference ref_id="CVE-2021-23841" ref_url="https://www.suse.com/security/cve/CVE-2021-23841/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008473.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

- CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333)
- CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-11"/>
	<updated date="2021-03-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1182331">SUSE bug 1182331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182333">SUSE bug 1182333</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-23840/">CVE-2021-23840</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-23841/">CVE-2021-23841</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505691" comment="libopenssl-1_0_0-devel-1.0.2p-3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505692" comment="libopenssl1_0_0-1.0.2p-3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505693" comment="openssl-1_0_0-1.0.2p-3.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140481" version="1" class="patch">
	<metadata>
		<title>Security update for glib2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182328" ref_url="https://bugzilla.suse.com/1182328" source="BUGZILLA"/>
		<reference ref_id="1182362" ref_url="https://bugzilla.suse.com/1182362" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27218" ref_url="https://www.suse.com/security/cve/CVE-2021-27218/" source="CVE"/>
		<reference ref_id="CVE-2021-27219" ref_url="https://www.suse.com/security/cve/CVE-2021-27219/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008532.html" source="SUSE-SU"/>
		<description>
This update for glib2 fixes the following issues:

- CVE-2021-27218: g_byte_array_new_take takes a gsize as length but stores in a guint, this patch will refuse if the length is larger than guint. (bsc#1182328)

- CVE-2021-27219: g_memdup takes a guint as parameter and sometimes leads into an integer overflow, so add a g_memdup2 function which uses gsize to replace it. (bsc#1182362)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-19"/>
	<updated date="2021-03-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182328">SUSE bug 1182328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182362">SUSE bug 1182362</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-27218/">CVE-2021-27218</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-27219/">CVE-2021-27219</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505694" comment="glib2-devel-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503793" comment="glib2-lang-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505695" comment="glib2-tools-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505696" comment="libgio-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503796" comment="libgio-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505697" comment="libglib-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503798" comment="libglib-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505698" comment="libgmodule-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503800" comment="libgmodule-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505699" comment="libgobject-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503802" comment="libgobject-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505700" comment="libgthread-2_0-0-2.54.3-4.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140482" version="1" class="patch">
	<metadata>
		<title>Security update for nghttp2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1172442" ref_url="https://bugzilla.suse.com/1172442" source="BUGZILLA"/>
		<reference ref_id="1181358" ref_url="https://bugzilla.suse.com/1181358" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11080" ref_url="https://www.suse.com/security/cve/CVE-2020-11080/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008539.html" source="SUSE-SU"/>
		<description>
This update for nghttp2 fixes the following issues:

- CVE-2020-11080: HTTP/2 Large Settings Frame DoS (bsc#1181358)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172442">SUSE bug 1172442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181358">SUSE bug 1181358</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11080/">CVE-2020-11080</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505701" comment="libnghttp2-14-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503805" comment="libnghttp2-14-32bit-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505702" comment="libnghttp2-devel-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505703" comment="libnghttp2_asio-devel-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505704" comment="libnghttp2_asio1-1.40.0-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140483" version="1" class="patch">
	<metadata>
		<title>Security update for ruby2.5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1177125" ref_url="https://bugzilla.suse.com/1177125" source="BUGZILLA"/>
		<reference ref_id="1177222" ref_url="https://bugzilla.suse.com/1177222" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25613" ref_url="https://www.suse.com/security/cve/CVE-2020-25613/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008549.html" source="SUSE-SU"/>
		<description>
This update for ruby2.5 fixes the following issues:

- CVE-2020-25613: Fixed a potential HTTP Request Smuggling  in WEBrick (bsc#1177125).
- Enable optimizations also on ARM64 (bsc#1177222)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177125">SUSE bug 1177125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177222">SUSE bug 1177222</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25613/">CVE-2020-25613</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505705" comment="libruby2_5-2_5-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505706" comment="ruby2.5-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505707" comment="ruby2.5-devel-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505708" comment="ruby2.5-devel-extra-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505709" comment="ruby2.5-stdlib-2.5.8-4.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140484" version="1" class="patch">
	<metadata>
		<title>Security update for gnutls (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1183456" ref_url="https://bugzilla.suse.com/1183456" source="BUGZILLA"/>
		<reference ref_id="1183457" ref_url="https://bugzilla.suse.com/1183457" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20231" ref_url="https://www.suse.com/security/cve/CVE-2021-20231/" source="CVE"/>
		<reference ref_id="CVE-2021-20232" ref_url="https://www.suse.com/security/cve/CVE-2021-20232/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008545.html" source="SUSE-SU"/>
		<description>
This update for gnutls fixes the following issues:

- CVE-2021-20232: Fixed a use after free issue which could have led to memory corruption and other potential consequences (bsc#1183456).
- CVE-2021-20231: Fixed a use after free issue which could have led to memory corruption and other potential consequences (bsc#1183457).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183456">SUSE bug 1183456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183457">SUSE bug 1183457</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20231/">CVE-2021-20231</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20232/">CVE-2021-20232</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505710" comment="gnutls-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505711" comment="libgnutls-devel-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505712" comment="libgnutls30-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503817" comment="libgnutls30-32bit-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505713" comment="libgnutls30-hmac-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503819" comment="libgnutls30-hmac-32bit-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505714" comment="libgnutlsxx-devel-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505715" comment="libgnutlsxx28-3.6.7-6.40.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140485" version="1" class="patch">
	<metadata>
		<title>Security update for libass (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1177862" ref_url="https://bugzilla.suse.com/1177862" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26682" ref_url="https://www.suse.com/security/cve/CVE-2020-26682/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0936-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008546.html" source="SUSE-SU"/>
		<description>
This update for libass fixes the following issues:

- CVE-2020-26682: Fixed a signed integer overflow in the call to outline_stroke() (bsc#1177862).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177862">SUSE bug 1177862</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26682/">CVE-2020-26682</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505716" comment="libass-devel-0.14.0-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505717" comment="libass9-0.14.0-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140486" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1183333" ref_url="https://bugzilla.suse.com/1183333" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27918" ref_url="https://www.suse.com/security/cve/CVE-2021-27918/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008542.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

- go1.15.10 (released 2021-03-11) (bsc#1175132)
- go1.15.9 (released 2021-03-10) (bsc#1175132)
  - CVE-2021-27918: Fixed an infinite loop when using xml.NewTokenDecoder with a custom TokenReader (bsc#1183333).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183333">SUSE bug 1183333</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27918/">CVE-2021-27918</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505718" comment="go1.15-1.15.10-1.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505719" comment="go1.15-doc-1.15.10-1.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505720" comment="go1.15-race-1.15.10-1.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140487" version="1" class="patch">
	<metadata>
		<title>Security update for ldb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1183572" ref_url="https://bugzilla.suse.com/1183572" source="BUGZILLA"/>
		<reference ref_id="1183574" ref_url="https://bugzilla.suse.com/1183574" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27840" ref_url="https://www.suse.com/security/cve/CVE-2020-27840/" source="CVE"/>
		<reference ref_id="CVE-2021-20277" ref_url="https://www.suse.com/security/cve/CVE-2021-20277/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0944-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008557.html" source="SUSE-SU"/>
		<description>
This update for ldb fixes the following issues:

- CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572).
- CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183572">SUSE bug 1183572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183574">SUSE bug 1183574</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27840/">CVE-2020-27840</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20277/">CVE-2021-20277</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505721" comment="ldb-tools-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505722" comment="libldb-devel-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505723" comment="libldb1-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504229" comment="libldb1-32bit-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505724" comment="python-ldb-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505725" comment="python-ldb-devel-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505726" comment="python3-ldb-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505727" comment="python3-ldb-devel-1.4.6-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140488" version="1" class="patch">
	<metadata>
		<title>Security update for libzypp, zypper (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1050625" ref_url="https://bugzilla.suse.com/1050625" source="BUGZILLA"/>
		<reference ref_id="1174016" ref_url="https://bugzilla.suse.com/1174016" source="BUGZILLA"/>
		<reference ref_id="1177238" ref_url="https://bugzilla.suse.com/1177238" source="BUGZILLA"/>
		<reference ref_id="1177275" ref_url="https://bugzilla.suse.com/1177275" source="BUGZILLA"/>
		<reference ref_id="1177427" ref_url="https://bugzilla.suse.com/1177427" source="BUGZILLA"/>
		<reference ref_id="1177583" ref_url="https://bugzilla.suse.com/1177583" source="BUGZILLA"/>
		<reference ref_id="1178910" ref_url="https://bugzilla.suse.com/1178910" source="BUGZILLA"/>
		<reference ref_id="1178966" ref_url="https://bugzilla.suse.com/1178966" source="BUGZILLA"/>
		<reference ref_id="1179083" ref_url="https://bugzilla.suse.com/1179083" source="BUGZILLA"/>
		<reference ref_id="1179222" ref_url="https://bugzilla.suse.com/1179222" source="BUGZILLA"/>
		<reference ref_id="1179816" ref_url="https://bugzilla.suse.com/1179816" source="BUGZILLA"/>
		<reference ref_id="1179847" ref_url="https://bugzilla.suse.com/1179847" source="BUGZILLA"/>
		<reference ref_id="1179909" ref_url="https://bugzilla.suse.com/1179909" source="BUGZILLA"/>
		<reference ref_id="1180077" ref_url="https://bugzilla.suse.com/1180077" source="BUGZILLA"/>
		<reference ref_id="1180663" ref_url="https://bugzilla.suse.com/1180663" source="BUGZILLA"/>
		<reference ref_id="1180721" ref_url="https://bugzilla.suse.com/1180721" source="BUGZILLA"/>
		<reference ref_id="1181328" ref_url="https://bugzilla.suse.com/1181328" source="BUGZILLA"/>
		<reference ref_id="1181622" ref_url="https://bugzilla.suse.com/1181622" source="BUGZILLA"/>
		<reference ref_id="1182629" ref_url="https://bugzilla.suse.com/1182629" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-9271" ref_url="https://www.suse.com/security/cve/CVE-2017-9271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008560.html" source="SUSE-SU"/>
		<description>
This update for libzypp, zypper fixes the following issues:

Update zypper to version 1.14.43:

- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- Fix source-download commands help (bsc#1180663)
- man: Recommend to use the --non-interactive global option rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quiet: Fix install summary to write nothing if there's nothing todo (bsc#1180077)
- Prefer /run over /var/run.

Update libzypp to 17.25.8:

- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommended = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility.
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- CVE-2017-9271: Fixed information leak in the log file (bsc#1050625 bsc#1177583)
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoManager: Carefully tidy up the caches. Remove non-directory entries. (bsc#1178966)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager probe (bsc#1177427).
- RpmDb: If no database exists use the _dbpath configured in rpm.  Still makes sure a compat
  symlink at /var/lib/rpm exists in case the configures _dbpath is elsewhere. (bsc#1178910)
- Fixed update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Fix lsof monitoring (bsc#1179909)
- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-25"/>
	<updated date="2021-03-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1050625">SUSE bug 1050625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174016">SUSE bug 1174016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177238">SUSE bug 1177238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177275">SUSE bug 1177275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177427">SUSE bug 1177427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177583">SUSE bug 1177583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178910">SUSE bug 1178910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178966">SUSE bug 1178966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179083">SUSE bug 1179083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179222">SUSE bug 1179222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179816">SUSE bug 1179816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179847">SUSE bug 1179847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179909">SUSE bug 1179909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180077">SUSE bug 1180077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180663">SUSE bug 1180663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180721">SUSE bug 1180721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181328">SUSE bug 1181328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181622">SUSE bug 1181622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182629">SUSE bug 1182629</bugzilla>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-9271/">CVE-2017-9271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505728" comment="libsigc++2-devel-2.10.0-3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505729" comment="libsigc-2_0-0-2.10.0-3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505730" comment="libsolv-devel-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505731" comment="libsolv-tools-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505732" comment="libyui-ncurses-pkg-devel-2.48.9-7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504239" comment="libyui-ncurses-pkg-doc-2.48.9-7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505733" comment="libyui-ncurses-pkg9-2.48.9-7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505734" comment="libyui-qt-pkg-devel-2.45.28-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504242" comment="libyui-qt-pkg-doc-2.45.28-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505735" comment="libyui-qt-pkg9-2.45.28-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505736" comment="libzypp-17.25.8-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505737" comment="libzypp-devel-17.25.8-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505738" comment="perl-solv-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505739" comment="python3-solv-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505740" comment="ruby-solv-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505741" comment="yast2-pkg-bindings-4.1.3-3.10.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505742" comment="zypper-1.14.43-3.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504251" comment="zypper-log-1.14.43-3.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504252" comment="zypper-needs-restarting-1.14.43-3.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140489" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194925" ref_url="https://bugzilla.suse.com/1194925" source="BUGZILLA"/>
		<reference ref_id="1194926" ref_url="https://bugzilla.suse.com/1194926" source="BUGZILLA"/>
		<reference ref_id="1194927" ref_url="https://bugzilla.suse.com/1194927" source="BUGZILLA"/>
		<reference ref_id="1194928" ref_url="https://bugzilla.suse.com/1194928" source="BUGZILLA"/>
		<reference ref_id="1194929" ref_url="https://bugzilla.suse.com/1194929" source="BUGZILLA"/>
		<reference ref_id="1194930" ref_url="https://bugzilla.suse.com/1194930" source="BUGZILLA"/>
		<reference ref_id="1194931" ref_url="https://bugzilla.suse.com/1194931" source="BUGZILLA"/>
		<reference ref_id="1194932" ref_url="https://bugzilla.suse.com/1194932" source="BUGZILLA"/>
		<reference ref_id="1194933" ref_url="https://bugzilla.suse.com/1194933" source="BUGZILLA"/>
		<reference ref_id="1194934" ref_url="https://bugzilla.suse.com/1194934" source="BUGZILLA"/>
		<reference ref_id="1194935" ref_url="https://bugzilla.suse.com/1194935" source="BUGZILLA"/>
		<reference ref_id="1194937" ref_url="https://bugzilla.suse.com/1194937" source="BUGZILLA"/>
		<reference ref_id="1194939" ref_url="https://bugzilla.suse.com/1194939" source="BUGZILLA"/>
		<reference ref_id="1194940" ref_url="https://bugzilla.suse.com/1194940" source="BUGZILLA"/>
		<reference ref_id="1194941" ref_url="https://bugzilla.suse.com/1194941" source="BUGZILLA"/>
		<reference ref_id="1195146" ref_url="https://bugzilla.suse.com/1195146" source="BUGZILLA"/>
		<reference ref_id="1196500" ref_url="https://bugzilla.suse.com/1196500" source="BUGZILLA"/>
		<reference ref_id="1197126" ref_url="https://bugzilla.suse.com/1197126" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21248" ref_url="https://www.suse.com/security/cve/CVE-2022-21248/" source="CVE"/>
		<reference ref_id="CVE-2022-21271" ref_url="https://www.suse.com/security/cve/CVE-2022-21271/" source="CVE"/>
		<reference ref_id="CVE-2022-21277" ref_url="https://www.suse.com/security/cve/CVE-2022-21277/" source="CVE"/>
		<reference ref_id="CVE-2022-21282" ref_url="https://www.suse.com/security/cve/CVE-2022-21282/" source="CVE"/>
		<reference ref_id="CVE-2022-21283" ref_url="https://www.suse.com/security/cve/CVE-2022-21283/" source="CVE"/>
		<reference ref_id="CVE-2022-21291" ref_url="https://www.suse.com/security/cve/CVE-2022-21291/" source="CVE"/>
		<reference ref_id="CVE-2022-21293" ref_url="https://www.suse.com/security/cve/CVE-2022-21293/" source="CVE"/>
		<reference ref_id="CVE-2022-21294" ref_url="https://www.suse.com/security/cve/CVE-2022-21294/" source="CVE"/>
		<reference ref_id="CVE-2022-21296" ref_url="https://www.suse.com/security/cve/CVE-2022-21296/" source="CVE"/>
		<reference ref_id="CVE-2022-21299" ref_url="https://www.suse.com/security/cve/CVE-2022-21299/" source="CVE"/>
		<reference ref_id="CVE-2022-21305" ref_url="https://www.suse.com/security/cve/CVE-2022-21305/" source="CVE"/>
		<reference ref_id="CVE-2022-21340" ref_url="https://www.suse.com/security/cve/CVE-2022-21340/" source="CVE"/>
		<reference ref_id="CVE-2022-21341" ref_url="https://www.suse.com/security/cve/CVE-2022-21341/" source="CVE"/>
		<reference ref_id="CVE-2022-21349" ref_url="https://www.suse.com/security/cve/CVE-2022-21349/" source="CVE"/>
		<reference ref_id="CVE-2022-21360" ref_url="https://www.suse.com/security/cve/CVE-2022-21360/" source="CVE"/>
		<reference ref_id="CVE-2022-21365" ref_url="https://www.suse.com/security/cve/CVE-2022-21365/" source="CVE"/>
		<reference ref_id="CVE-2022-21366" ref_url="https://www.suse.com/security/cve/CVE-2022-21366/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010559.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

Update Java 8.0 to Service Refresh 7 Fix Pack 5 (bsc#1197126).

Including fixes for the following vulnerabilities: 

  CVE-2022-21366, CVE-2022-21365, CVE-2022-21360, CVE-2022-21349,
  CVE-2022-21341, CVE-2022-21340, CVE-2022-21305, CVE-2022-21277,
  CVE-2022-21299, CVE-2022-21296, CVE-2022-21282, CVE-2022-21294,
  CVE-2022-21293, CVE-2022-21291, CVE-2022-21283, CVE-2022-21248,
  CVE-2022-21271.

Non-securtiy fix:

- Fixed a broken symlink for javaws (bsc#1195146).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-29"/>
	<updated date="2022-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194925">SUSE bug 1194925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194926">SUSE bug 1194926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194927">SUSE bug 1194927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194928">SUSE bug 1194928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194929">SUSE bug 1194929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194930">SUSE bug 1194930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194931">SUSE bug 1194931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194932">SUSE bug 1194932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194933">SUSE bug 1194933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194934">SUSE bug 1194934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194935">SUSE bug 1194935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194937">SUSE bug 1194937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194939">SUSE bug 1194939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194940">SUSE bug 1194940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194941">SUSE bug 1194941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195146">SUSE bug 1195146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196500">SUSE bug 1196500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197126">SUSE bug 1197126</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21248/">CVE-2022-21248</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21271/">CVE-2022-21271</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21277/">CVE-2022-21277</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21282/">CVE-2022-21282</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21283/">CVE-2022-21283</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21291/">CVE-2022-21291</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21293/">CVE-2022-21293</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21294/">CVE-2022-21294</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21296/">CVE-2022-21296</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21299/">CVE-2022-21299</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21305/">CVE-2022-21305</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21340/">CVE-2022-21340</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21341/">CVE-2022-21341</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21349/">CVE-2022-21349</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21360/">CVE-2022-21360</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21365/">CVE-2022-21365</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21366/">CVE-2022-21366</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673942" comment="java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673898" comment="java-1_8_0-ibm-alsa-1.8.0_sr7.5-150000.3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673943" comment="java-1_8_0-ibm-devel-1.8.0_sr7.5-150000.3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673900" comment="java-1_8_0-ibm-plugin-1.8.0_sr7.5-150000.3.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140490" version="1" class="patch">
	<metadata>
		<title>Security update for openvpn (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1197341" ref_url="https://bugzilla.suse.com/1197341" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0547" ref_url="https://www.suse.com/security/cve/CVE-2022-0547/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1029-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010558.html" source="SUSE-SU"/>
		<description>
This update for openvpn fixes the following issues:

- CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-29"/>
	<updated date="2022-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197341">SUSE bug 1197341</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-0547/">CVE-2022-0547</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009676863" comment="openvpn-2.4.3-150000.5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676864" comment="openvpn-auth-pam-plugin-2.4.3-150000.5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676865" comment="openvpn-devel-2.4.3-150000.5.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140491" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1197417" ref_url="https://bugzilla.suse.com/1197417" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22934" ref_url="https://www.suse.com/security/cve/CVE-2022-22934/" source="CVE"/>
		<reference ref_id="CVE-2022-22935" ref_url="https://www.suse.com/security/cve/CVE-2022-22935/" source="CVE"/>
		<reference ref_id="CVE-2022-22936" ref_url="https://www.suse.com/security/cve/CVE-2022-22936/" source="CVE"/>
		<reference ref_id="CVE-2022-22941" ref_url="https://www.suse.com/security/cve/CVE-2022-22941/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010577.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- CVE-2022-22935: Sign authentication replies to prevent MiTM (bsc#1197417)
- CVE-2022-22934: Sign pillar data to prevent MiTM attacks. (bsc#1197417)
- CVE-2022-22936: Prevent job and fileserver replays (bsc#1197417)
- CVE-2022-22941: Fixed targeting bug, especially visible when using syndic and user auth. (bsc#1197417)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-30"/>
	<updated date="2022-03-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197417">SUSE bug 1197417</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22934/">CVE-2022-22934</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22935/">CVE-2022-22935</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22936/">CVE-2022-22936</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22941/">CVE-2022-22941</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677398" comment="python3-salt-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677399" comment="salt-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677400" comment="salt-api-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677300" comment="salt-bash-completion-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677401" comment="salt-cloud-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677402" comment="salt-doc-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677303" comment="salt-fish-completion-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677403" comment="salt-master-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677404" comment="salt-minion-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677405" comment="salt-proxy-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677406" comment="salt-ssh-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677407" comment="salt-standalone-formulas-configuration-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677408" comment="salt-syndic-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677409" comment="salt-transactional-update-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677311" comment="salt-zsh-completion-3002.2-150100.57.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140492" version="1" class="patch">
	<metadata>
		<title>Security update for zlib (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1197459" ref_url="https://bugzilla.suse.com/1197459" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-25032" ref_url="https://www.suse.com/security/cve/CVE-2018-25032/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010582.html" source="SUSE-SU"/>
		<description>
This update for zlib fixes the following issues:

- CVE-2018-25032: Fixed memory corruption on deflate (bsc#1197459).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-30"/>
	<updated date="2022-03-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197459">SUSE bug 1197459</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25032/">CVE-2018-25032</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677002" comment="libminizip1-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677003" comment="libz1-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676992" comment="libz1-32bit-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677004" comment="minizip-devel-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677005" comment="zlib-devel-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676996" comment="zlib-devel-32bit-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677006" comment="zlib-devel-static-1.2.11-150000.3.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140493" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1185055" ref_url="https://bugzilla.suse.com/1185055" source="BUGZILLA"/>
		<reference ref_id="1188564" ref_url="https://bugzilla.suse.com/1188564" source="BUGZILLA"/>
		<reference ref_id="1188565" ref_url="https://bugzilla.suse.com/1188565" source="BUGZILLA"/>
		<reference ref_id="1191902" ref_url="https://bugzilla.suse.com/1191902" source="BUGZILLA"/>
		<reference ref_id="1191904" ref_url="https://bugzilla.suse.com/1191904" source="BUGZILLA"/>
		<reference ref_id="1191905" ref_url="https://bugzilla.suse.com/1191905" source="BUGZILLA"/>
		<reference ref_id="1191909" ref_url="https://bugzilla.suse.com/1191909" source="BUGZILLA"/>
		<reference ref_id="1191910" ref_url="https://bugzilla.suse.com/1191910" source="BUGZILLA"/>
		<reference ref_id="1191911" ref_url="https://bugzilla.suse.com/1191911" source="BUGZILLA"/>
		<reference ref_id="1191913" ref_url="https://bugzilla.suse.com/1191913" source="BUGZILLA"/>
		<reference ref_id="1191914" ref_url="https://bugzilla.suse.com/1191914" source="BUGZILLA"/>
		<reference ref_id="1192052" ref_url="https://bugzilla.suse.com/1192052" source="BUGZILLA"/>
		<reference ref_id="1194198" ref_url="https://bugzilla.suse.com/1194198" source="BUGZILLA"/>
		<reference ref_id="1194232" ref_url="https://bugzilla.suse.com/1194232" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2163" ref_url="https://www.suse.com/security/cve/CVE-2021-2163/" source="CVE"/>
		<reference ref_id="CVE-2021-2341" ref_url="https://www.suse.com/security/cve/CVE-2021-2341/" source="CVE"/>
		<reference ref_id="CVE-2021-2369" ref_url="https://www.suse.com/security/cve/CVE-2021-2369/" source="CVE"/>
		<reference ref_id="CVE-2021-35556" ref_url="https://www.suse.com/security/cve/CVE-2021-35556/" source="CVE"/>
		<reference ref_id="CVE-2021-35559" ref_url="https://www.suse.com/security/cve/CVE-2021-35559/" source="CVE"/>
		<reference ref_id="CVE-2021-35560" ref_url="https://www.suse.com/security/cve/CVE-2021-35560/" source="CVE"/>
		<reference ref_id="CVE-2021-35564" ref_url="https://www.suse.com/security/cve/CVE-2021-35564/" source="CVE"/>
		<reference ref_id="CVE-2021-35565" ref_url="https://www.suse.com/security/cve/CVE-2021-35565/" source="CVE"/>
		<reference ref_id="CVE-2021-35578" ref_url="https://www.suse.com/security/cve/CVE-2021-35578/" source="CVE"/>
		<reference ref_id="CVE-2021-35586" ref_url="https://www.suse.com/security/cve/CVE-2021-35586/" source="CVE"/>
		<reference ref_id="CVE-2021-35588" ref_url="https://www.suse.com/security/cve/CVE-2021-35588/" source="CVE"/>
		<reference ref_id="CVE-2021-41035" ref_url="https://www.suse.com/security/cve/CVE-2021-41035/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010012.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

- Update to Java 8.0 Service Refresh 7 Fix Pack 0
- CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods. (bsc#1194198, bsc#1192052)
- CVE-2021-35586: Excessive memory allocation in BMPImageReader. (bsc#1191914)
- CVE-2021-35564: Certificates with end dates too far in the future can corrupt keystore. (bsc#1191913)
- CVE-2021-35559: Excessive memory allocation in RTFReader. (bsc#1191911)
- CVE-2021-35556: Excessive memory allocation in RTFParser. (bsc#1191910)
- CVE-2021-35565: Loop in HttpsServer triggered during TLS session close. (bsc#1191909) 
- CVE-2021-35588: Incomplete validation of inner class references in ClassFileParser. (bsc#1191905)
- CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564)
- CVE-2021-2369: JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565)
- CVE-2021-2163: Incomplete enforcement of JAR signing disabled algorithms. (bsc#1185055)
- CVE-2021-35560: Fixed a vulnerability in the component Deployment. (bsc#1191902)
- CVE-2021-35578: Fixed unexpected exception raised during TLS handshake. (bsc#1191904)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-18"/>
	<updated date="2022-01-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185055">SUSE bug 1185055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188564">SUSE bug 1188564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188565">SUSE bug 1188565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191902">SUSE bug 1191902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191904">SUSE bug 1191904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191905">SUSE bug 1191905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191909">SUSE bug 1191909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191910">SUSE bug 1191910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191911">SUSE bug 1191911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191913">SUSE bug 1191913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191914">SUSE bug 1191914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192052">SUSE bug 1192052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194198">SUSE bug 1194198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194232">SUSE bug 1194232</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2163/">CVE-2021-2163</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-2341/">CVE-2021-2341</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-2369/">CVE-2021-2369</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35556/">CVE-2021-35556</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35559/">CVE-2021-35559</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-35560/">CVE-2021-35560</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-35564/">CVE-2021-35564</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35565/">CVE-2021-35565</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35578/">CVE-2021-35578</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35586/">CVE-2021-35586</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35588/">CVE-2021-35588</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-41035/">CVE-2021-41035</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009662468" comment="java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662460" comment="java-1_8_0-ibm-alsa-1.8.0_sr7.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662469" comment="java-1_8_0-ibm-devel-1.8.0_sr7.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662462" comment="java-1_8_0-ibm-plugin-1.8.0_sr7.0-3.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140494" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1197698" ref_url="https://bugzilla.suse.com/1197698" source="BUGZILLA"/>
		<reference ref_id="1197903" ref_url="https://bugzilla.suse.com/1197903" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1097" ref_url="https://www.suse.com/security/cve/CVE-2022-1097/" source="CVE"/>
		<reference ref_id="CVE-2022-1196" ref_url="https://www.suse.com/security/cve/CVE-2022-1196/" source="CVE"/>
		<reference ref_id="CVE-2022-24713" ref_url="https://www.suse.com/security/cve/CVE-2022-24713/" source="CVE"/>
		<reference ref_id="CVE-2022-28281" ref_url="https://www.suse.com/security/cve/CVE-2022-28281/" source="CVE"/>
		<reference ref_id="CVE-2022-28282" ref_url="https://www.suse.com/security/cve/CVE-2022-28282/" source="CVE"/>
		<reference ref_id="CVE-2022-28285" ref_url="https://www.suse.com/security/cve/CVE-2022-28285/" source="CVE"/>
		<reference ref_id="CVE-2022-28286" ref_url="https://www.suse.com/security/cve/CVE-2022-28286/" source="CVE"/>
		<reference ref_id="CVE-2022-28289" ref_url="https://www.suse.com/security/cve/CVE-2022-28289/" source="CVE"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.8.0 ESR (bsc#1197903):

MFSA 2022-14 (bsc#1197903)

* CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11 tokens are removed while in use
* CVE-2022-28281: Fixed an out of bounds write due to unexpected WebAuthN Extensions
* CVE-2022-1196: Fixed a use-after-free after VR Process destruction
* CVE-2022-28282: Fixed a use-after-free in DocumentL10n::TranslateDocument
* CVE-2022-28285: Fixed incorrect AliasSet used in JIT Codegen
* CVE-2022-28286: Fixed that iframe contents could be rendered outside the border
* CVE-2022-24713: Fixed a denial of service via complex regular expressions
* CVE-2022-28289: Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8

The following non-security bugs were fixed:
- Adjust rust dependency for SP3 and later. TW uses always the 
  newest version of rust, but we don't, so we can't use the 
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-07"/>
	<updated date="2022-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197698">SUSE bug 1197698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197903">SUSE bug 1197903</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1097/">CVE-2022-1097</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-1196/">CVE-2022-1196</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-24713/">CVE-2022-24713</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28281/">CVE-2022-28281</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-28282/">CVE-2022-28282</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-28285/">CVE-2022-28285</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28286/">CVE-2022-28286</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28289/">CVE-2022-28289</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009678584" comment="MozillaFirefox-91.8.0-150000.150.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678585" comment="MozillaFirefox-devel-91.8.0-150000.150.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678586" comment="MozillaFirefox-translations-common-91.8.0-150000.150.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678587" comment="MozillaFirefox-translations-other-91.8.0-150000.150.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140495" version="1" class="patch">
	<metadata>
		<title>Security update for libsolv, libzypp, zypper (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1184501" ref_url="https://bugzilla.suse.com/1184501" source="BUGZILLA"/>
		<reference ref_id="1194848" ref_url="https://bugzilla.suse.com/1194848" source="BUGZILLA"/>
		<reference ref_id="1195999" ref_url="https://bugzilla.suse.com/1195999" source="BUGZILLA"/>
		<reference ref_id="1196061" ref_url="https://bugzilla.suse.com/1196061" source="BUGZILLA"/>
		<reference ref_id="1196317" ref_url="https://bugzilla.suse.com/1196317" source="BUGZILLA"/>
		<reference ref_id="1196368" ref_url="https://bugzilla.suse.com/1196368" source="BUGZILLA"/>
		<reference ref_id="1196514" ref_url="https://bugzilla.suse.com/1196514" source="BUGZILLA"/>
		<reference ref_id="1196925" ref_url="https://bugzilla.suse.com/1196925" source="BUGZILLA"/>
		<reference ref_id="1197134" ref_url="https://bugzilla.suse.com/1197134" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:1131-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010670.html" source="SUSE-SU"/>
		<description>
This update for libsolv, libzypp, zypper fixes the following issues:

Security relevant fix:

- Harden package signature checks (bsc#1184501).

libsolv to 0.7.22:

- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code (bsc#1196514)
- support parsing of Debian's Multi-Arch indicator
- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ('requires' is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime

libzypp to 17.30.0:

- ZConfig: Update solver settings if target changes (bsc#1196368)
- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)

zypper to 1.14.52:

- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-08"/>
	<updated date="2022-04-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184501">SUSE bug 1184501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194848">SUSE bug 1194848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195999">SUSE bug 1195999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196061">SUSE bug 1196061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196317">SUSE bug 1196317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196368">SUSE bug 1196368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196514">SUSE bug 1196514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196925">SUSE bug 1196925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197134">SUSE bug 1197134</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677410" comment="libsolv-devel-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677411" comment="libsolv-tools-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677412" comment="libzypp-17.30.0-150100.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677413" comment="libzypp-devel-17.30.0-150100.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677414" comment="perl-solv-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677415" comment="python3-solv-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677416" comment="ruby-solv-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677417" comment="zypper-1.14.52-150100.3.55.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677320" comment="zypper-log-1.14.52-150100.3.55.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677321" comment="zypper-needs-restarting-1.14.52-150100.3.55.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140496" version="1" class="patch">
	<metadata>
		<title>Security update for libexif (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1172768" ref_url="https://bugzilla.suse.com/1172768" source="BUGZILLA"/>
		<reference ref_id="1172802" ref_url="https://bugzilla.suse.com/1172802" source="BUGZILLA"/>
		<reference ref_id="1178479" ref_url="https://bugzilla.suse.com/1178479" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0181" ref_url="https://www.suse.com/security/cve/CVE-2020-0181/" source="CVE"/>
		<reference ref_id="CVE-2020-0198" ref_url="https://www.suse.com/security/cve/CVE-2020-0198/" source="CVE"/>
		<reference ref_id="CVE-2020-0452" ref_url="https://www.suse.com/security/cve/CVE-2020-0452/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010678.html" source="SUSE-SU"/>
		<description>
This update for libexif fixes the following issues:

- CVE-2020-0181: Fixed an integer overflow that could lead to denial of service
  (bsc#1172802).
- CVE-2020-0198: Fixed and unsigned integer overflow that could lead to denial
  of service (bsc#1172768).
- CVE-2020-0452: Fixed a buffer overflow check that could be optimized away
  by the compiler (bsc#1178479).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-11"/>
	<updated date="2022-04-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172768">SUSE bug 1172768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172802">SUSE bug 1172802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178479">SUSE bug 1178479</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-0181/">CVE-2020-0181</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-0198/">CVE-2020-0198</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0452/">CVE-2020-0452</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677371" comment="libexif-devel-0.6.22-150000.5.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677372" comment="libexif12-0.6.22-150000.5.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140497" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1197903" ref_url="https://bugzilla.suse.com/1197903" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1097" ref_url="https://www.suse.com/security/cve/CVE-2022-1097/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010677.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

Mozilla NSS 3.68.3 (bsc#1197903):
  - CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11
    tokens are removed while in use.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-11"/>
	<updated date="2022-04-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197903">SUSE bug 1197903</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1097/">CVE-2022-1097</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009678098" comment="libfreebl3-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678030" comment="libfreebl3-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678099" comment="libfreebl3-hmac-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678032" comment="libfreebl3-hmac-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678100" comment="libsoftokn3-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678034" comment="libsoftokn3-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678101" comment="libsoftokn3-hmac-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678036" comment="libsoftokn3-hmac-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678102" comment="mozilla-nss-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678038" comment="mozilla-nss-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678103" comment="mozilla-nss-certs-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678040" comment="mozilla-nss-certs-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678104" comment="mozilla-nss-devel-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678105" comment="mozilla-nss-sysinit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678106" comment="mozilla-nss-tools-3.68.3-150000.3.67.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140498" version="1" class="patch">
	<metadata>
		<title>Security update for opensc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1114649" ref_url="https://bugzilla.suse.com/1114649" source="BUGZILLA"/>
		<reference ref_id="1191957" ref_url="https://bugzilla.suse.com/1191957" source="BUGZILLA"/>
		<reference ref_id="1191992" ref_url="https://bugzilla.suse.com/1191992" source="BUGZILLA"/>
		<reference ref_id="1192000" ref_url="https://bugzilla.suse.com/1192000" source="BUGZILLA"/>
		<reference ref_id="1192005" ref_url="https://bugzilla.suse.com/1192005" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-42779" ref_url="https://www.suse.com/security/cve/CVE-2021-42779/" source="CVE"/>
		<reference ref_id="CVE-2021-42780" ref_url="https://www.suse.com/security/cve/CVE-2021-42780/" source="CVE"/>
		<reference ref_id="CVE-2021-42781" ref_url="https://www.suse.com/security/cve/CVE-2021-42781/" source="CVE"/>
		<reference ref_id="CVE-2021-42782" ref_url="https://www.suse.com/security/cve/CVE-2021-42782/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010682.html" source="SUSE-SU"/>
		<description>
This update for opensc fixes the following issues:

Security issues fixed:

- CVE-2021-42782: Stack buffer overflow issues in various places (bsc#1191957).
- CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c (bsc#1192000).
- CVE-2021-42780: Fixed use after return in insert_pin() (bsc#1192005).
- CVE-2021-42779: Fixed use after free in sc_file_valid() (bsc#1191992).

Non-security issues fixed: 

- Fixes segmentation fault in 'pkcs11-tool.c'. (bsc#1114649)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-12"/>
	<updated date="2022-04-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1114649">SUSE bug 1114649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191957">SUSE bug 1191957</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191992">SUSE bug 1191992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192000">SUSE bug 1192000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192005">SUSE bug 1192005</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42779/">CVE-2021-42779</cve>
	<cve impact="low" cvss3="2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-42780/">CVE-2021-42780</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42781/">CVE-2021-42781</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42782/">CVE-2021-42782</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677093" comment="opensc-0.19.0-150100.3.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140499" version="1" class="patch">
	<metadata>
		<title>Security update for xz (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198062" ref_url="https://bugzilla.suse.com/1198062" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1271" ref_url="https://www.suse.com/security/cve/CVE-2022-1271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010686.html" source="SUSE-SU"/>
		<description>
This update for xz fixes the following issues:

- CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-12"/>
	<updated date="2022-04-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198062">SUSE bug 1198062</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1271/">CVE-2022-1271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679203" comment="liblzma5-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679124" comment="liblzma5-32bit-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679204" comment="xz-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679205" comment="xz-devel-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679127" comment="xz-lang-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679206" comment="xz-static-devel-5.2.3-150000.4.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140500" version="1" class="patch">
	<metadata>
		<title>Security update for subversion (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1197939" ref_url="https://bugzilla.suse.com/1197939" source="BUGZILLA"/>
		<reference ref_id="1197940" ref_url="https://bugzilla.suse.com/1197940" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28544" ref_url="https://www.suse.com/security/cve/CVE-2021-28544/" source="CVE"/>
		<reference ref_id="CVE-2022-24070" ref_url="https://www.suse.com/security/cve/CVE-2022-24070/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010683.html" source="SUSE-SU"/>
		<description>
This update for subversion fixes the following issues:

- CVE-2022-24070: Fixed a memory corruption issue in mod_dav_svn as used by Apache
  HTTP server. This could be exploited by a remote attacker to cause a denegation
  of service (bsc#1197940).
- CVE-2021-28544: Fixed an information leak issue where Subversion servers may
  reveal the original path of files protected by path-based authorization
  (bsc#1197939).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-12"/>
	<updated date="2022-04-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197939">SUSE bug 1197939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197940">SUSE bug 1197940</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28544/">CVE-2021-28544</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-24070/">CVE-2022-24070</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679207" comment="subversion-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679186" comment="subversion-bash-completion-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679208" comment="subversion-devel-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679209" comment="subversion-perl-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679210" comment="subversion-python-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679211" comment="subversion-server-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679212" comment="subversion-tools-1.10.6-150000.3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140501" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1193942" ref_url="https://bugzilla.suse.com/1193942" source="BUGZILLA"/>
		<reference ref_id="1193943" ref_url="https://bugzilla.suse.com/1193943" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44224" ref_url="https://www.suse.com/security/cve/CVE-2021-44224/" source="CVE"/>
		<reference ref_id="CVE-2021-44790" ref_url="https://www.suse.com/security/cve/CVE-2021-44790/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010025.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations. (bsc#1193943)
- CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua. (bsc#1193942)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-18"/>
	<updated date="2022-01-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193942">SUSE bug 1193942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193943">SUSE bug 1193943</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-44224/">CVE-2021-44224</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-44790/">CVE-2021-44790</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009662971" comment="apache2-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662972" comment="apache2-devel-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662962" comment="apache2-doc-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662973" comment="apache2-prefork-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662974" comment="apache2-utils-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662975" comment="apache2-worker-2.4.33-3.61.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140502" version="1" class="patch">
	<metadata>
		<title>Security update for gzip (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1177047" ref_url="https://bugzilla.suse.com/1177047" source="BUGZILLA"/>
		<reference ref_id="1180713" ref_url="https://bugzilla.suse.com/1180713" source="BUGZILLA"/>
		<reference ref_id="1198062" ref_url="https://bugzilla.suse.com/1198062" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1271" ref_url="https://www.suse.com/security/cve/CVE-2022-1271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1250-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010742.html" source="SUSE-SU"/>
		<description>
This update for gzip fixes the following issues:

- CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)

The following non-security bugs were fixed:

- Fixed an issue when 'gzexe' counts the lines to skip wrong. (bsc#1180713)
- Fixed a potential segfault when zlib acceleration is enabled (bsc#1177047)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-17"/>
	<updated date="2022-04-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177047">SUSE bug 1177047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180713">SUSE bug 1180713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198062">SUSE bug 1198062</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1271/">CVE-2022-1271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679498" comment="gzip-1.10-150000.4.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140503" version="1" class="patch">
	<metadata>
		<title>Security update for openjpeg2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1076314" ref_url="https://bugzilla.suse.com/1076314" source="BUGZILLA"/>
		<reference ref_id="1076967" ref_url="https://bugzilla.suse.com/1076967" source="BUGZILLA"/>
		<reference ref_id="1079845" ref_url="https://bugzilla.suse.com/1079845" source="BUGZILLA"/>
		<reference ref_id="1102016" ref_url="https://bugzilla.suse.com/1102016" source="BUGZILLA"/>
		<reference ref_id="1106881" ref_url="https://bugzilla.suse.com/1106881" source="BUGZILLA"/>
		<reference ref_id="1106882" ref_url="https://bugzilla.suse.com/1106882" source="BUGZILLA"/>
		<reference ref_id="1140130" ref_url="https://bugzilla.suse.com/1140130" source="BUGZILLA"/>
		<reference ref_id="1160782" ref_url="https://bugzilla.suse.com/1160782" source="BUGZILLA"/>
		<reference ref_id="1162090" ref_url="https://bugzilla.suse.com/1162090" source="BUGZILLA"/>
		<reference ref_id="1173578" ref_url="https://bugzilla.suse.com/1173578" source="BUGZILLA"/>
		<reference ref_id="1180457" ref_url="https://bugzilla.suse.com/1180457" source="BUGZILLA"/>
		<reference ref_id="1184774" ref_url="https://bugzilla.suse.com/1184774" source="BUGZILLA"/>
		<reference ref_id="1197738" ref_url="https://bugzilla.suse.com/1197738" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14423" ref_url="https://www.suse.com/security/cve/CVE-2018-14423/" source="CVE"/>
		<reference ref_id="CVE-2018-16375" ref_url="https://www.suse.com/security/cve/CVE-2018-16375/" source="CVE"/>
		<reference ref_id="CVE-2018-16376" ref_url="https://www.suse.com/security/cve/CVE-2018-16376/" source="CVE"/>
		<reference ref_id="CVE-2018-20845" ref_url="https://www.suse.com/security/cve/CVE-2018-20845/" source="CVE"/>
		<reference ref_id="CVE-2018-5727" ref_url="https://www.suse.com/security/cve/CVE-2018-5727/" source="CVE"/>
		<reference ref_id="CVE-2018-5785" ref_url="https://www.suse.com/security/cve/CVE-2018-5785/" source="CVE"/>
		<reference ref_id="CVE-2018-6616" ref_url="https://www.suse.com/security/cve/CVE-2018-6616/" source="CVE"/>
		<reference ref_id="CVE-2020-15389" ref_url="https://www.suse.com/security/cve/CVE-2020-15389/" source="CVE"/>
		<reference ref_id="CVE-2020-27823" ref_url="https://www.suse.com/security/cve/CVE-2020-27823/" source="CVE"/>
		<reference ref_id="CVE-2020-6851" ref_url="https://www.suse.com/security/cve/CVE-2020-6851/" source="CVE"/>
		<reference ref_id="CVE-2020-8112" ref_url="https://www.suse.com/security/cve/CVE-2020-8112/" source="CVE"/>
		<reference ref_id="CVE-2021-29338" ref_url="https://www.suse.com/security/cve/CVE-2021-29338/" source="CVE"/>
		<reference ref_id="CVE-2022-1122" ref_url="https://www.suse.com/security/cve/CVE-2022-1122/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html" source="SUSE-SU"/>
		<description>
This update for openjpeg2 fixes the following issues:

- CVE-2018-5727: Fixed integer overflow vulnerability in theopj_t1_encode_cblks function (bsc#1076314).
- CVE-2018-5785: Fixed integer overflow caused by an out-of-bounds leftshift in the opj_j2k_setup_encoder function (bsc#1076967).
- CVE-2018-6616: Fixed excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c (bsc#1079845).
- CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016).
- CVE-2018-16375: Fixed missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c (bsc#1106882).
- CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881).
- CVE-2018-20845: Fixed division-by-zero in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.ci (bsc#1140130).
- CVE-2020-6851: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor (bsc#1160782).
- CVE-2020-8112: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090).
- CVE-2020-15389: Fixed use-after-free if t a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578).
- CVE-2020-27823: Fixed heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457).
- CVE-2021-29338: Fixed integer overflow that allows remote attackers to crash the application (bsc#1184774).
- CVE-2022-1122: Fixed segmentation fault in opj2_decompress due to uninitialized pointer (bsc#1197738).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-19"/>
	<updated date="2022-04-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076314">SUSE bug 1076314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076967">SUSE bug 1076967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1079845">SUSE bug 1079845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102016">SUSE bug 1102016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106881">SUSE bug 1106881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106882">SUSE bug 1106882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140130">SUSE bug 1140130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160782">SUSE bug 1160782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162090">SUSE bug 1162090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173578">SUSE bug 1173578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180457">SUSE bug 1180457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184774">SUSE bug 1184774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197738">SUSE bug 1197738</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14423/">CVE-2018-14423</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16375/">CVE-2018-16375</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16376/">CVE-2018-16376</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20845/">CVE-2018-20845</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5727/">CVE-2018-5727</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-5785/">CVE-2018-5785</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6616/">CVE-2018-6616</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-15389/">CVE-2020-15389</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27823/">CVE-2020-27823</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6851/">CVE-2020-6851</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-8112/">CVE-2020-8112</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-29338/">CVE-2021-29338</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1122/">CVE-2022-1122</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677924" comment="libopenjp2-7-2.3.0-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677925" comment="openjpeg2-2.3.0-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677926" comment="openjpeg2-devel-2.3.0-150000.3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140504" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1189562" ref_url="https://bugzilla.suse.com/1189562" source="BUGZILLA"/>
		<reference ref_id="1193738" ref_url="https://bugzilla.suse.com/1193738" source="BUGZILLA"/>
		<reference ref_id="1194943" ref_url="https://bugzilla.suse.com/1194943" source="BUGZILLA"/>
		<reference ref_id="1195051" ref_url="https://bugzilla.suse.com/1195051" source="BUGZILLA"/>
		<reference ref_id="1195254" ref_url="https://bugzilla.suse.com/1195254" source="BUGZILLA"/>
		<reference ref_id="1195353" ref_url="https://bugzilla.suse.com/1195353" source="BUGZILLA"/>
		<reference ref_id="1196018" ref_url="https://bugzilla.suse.com/1196018" source="BUGZILLA"/>
		<reference ref_id="1196114" ref_url="https://bugzilla.suse.com/1196114" source="BUGZILLA"/>
		<reference ref_id="1196433" ref_url="https://bugzilla.suse.com/1196433" source="BUGZILLA"/>
		<reference ref_id="1196468" ref_url="https://bugzilla.suse.com/1196468" source="BUGZILLA"/>
		<reference ref_id="1196488" ref_url="https://bugzilla.suse.com/1196488" source="BUGZILLA"/>
		<reference ref_id="1196514" ref_url="https://bugzilla.suse.com/1196514" source="BUGZILLA"/>
		<reference ref_id="1196639" ref_url="https://bugzilla.suse.com/1196639" source="BUGZILLA"/>
		<reference ref_id="1196761" ref_url="https://bugzilla.suse.com/1196761" source="BUGZILLA"/>
		<reference ref_id="1196830" ref_url="https://bugzilla.suse.com/1196830" source="BUGZILLA"/>
		<reference ref_id="1196836" ref_url="https://bugzilla.suse.com/1196836" source="BUGZILLA"/>
		<reference ref_id="1196942" ref_url="https://bugzilla.suse.com/1196942" source="BUGZILLA"/>
		<reference ref_id="1196973" ref_url="https://bugzilla.suse.com/1196973" source="BUGZILLA"/>
		<reference ref_id="1197227" ref_url="https://bugzilla.suse.com/1197227" source="BUGZILLA"/>
		<reference ref_id="1197331" ref_url="https://bugzilla.suse.com/1197331" source="BUGZILLA"/>
		<reference ref_id="1197366" ref_url="https://bugzilla.suse.com/1197366" source="BUGZILLA"/>
		<reference ref_id="1197391" ref_url="https://bugzilla.suse.com/1197391" source="BUGZILLA"/>
		<reference ref_id="1198031" ref_url="https://bugzilla.suse.com/1198031" source="BUGZILLA"/>
		<reference ref_id="1198032" ref_url="https://bugzilla.suse.com/1198032" source="BUGZILLA"/>
		<reference ref_id="1198033" ref_url="https://bugzilla.suse.com/1198033" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-39713" ref_url="https://www.suse.com/security/cve/CVE-2021-39713/" source="CVE"/>
		<reference ref_id="CVE-2021-45868" ref_url="https://www.suse.com/security/cve/CVE-2021-45868/" source="CVE"/>
		<reference ref_id="CVE-2022-0812" ref_url="https://www.suse.com/security/cve/CVE-2022-0812/" source="CVE"/>
		<reference ref_id="CVE-2022-0850" ref_url="https://www.suse.com/security/cve/CVE-2022-0850/" source="CVE"/>
		<reference ref_id="CVE-2022-1016" ref_url="https://www.suse.com/security/cve/CVE-2022-1016/" source="CVE"/>
		<reference ref_id="CVE-2022-1048" ref_url="https://www.suse.com/security/cve/CVE-2022-1048/" source="CVE"/>
		<reference ref_id="CVE-2022-23036" ref_url="https://www.suse.com/security/cve/CVE-2022-23036/" source="CVE"/>
		<reference ref_id="CVE-2022-23037" ref_url="https://www.suse.com/security/cve/CVE-2022-23037/" source="CVE"/>
		<reference ref_id="CVE-2022-23038" ref_url="https://www.suse.com/security/cve/CVE-2022-23038/" source="CVE"/>
		<reference ref_id="CVE-2022-23039" ref_url="https://www.suse.com/security/cve/CVE-2022-23039/" source="CVE"/>
		<reference ref_id="CVE-2022-23040" ref_url="https://www.suse.com/security/cve/CVE-2022-23040/" source="CVE"/>
		<reference ref_id="CVE-2022-23041" ref_url="https://www.suse.com/security/cve/CVE-2022-23041/" source="CVE"/>
		<reference ref_id="CVE-2022-23042" ref_url="https://www.suse.com/security/cve/CVE-2022-23042/" source="CVE"/>
		<reference ref_id="CVE-2022-26490" ref_url="https://www.suse.com/security/cve/CVE-2022-26490/" source="CVE"/>
		<reference ref_id="CVE-2022-26966" ref_url="https://www.suse.com/security/cve/CVE-2022-26966/" source="CVE"/>
		<reference ref_id="CVE-2022-28356" ref_url="https://www.suse.com/security/cve/CVE-2022-28356/" source="CVE"/>
		<reference ref_id="CVE-2022-28388" ref_url="https://www.suse.com/security/cve/CVE-2022-28388/" source="CVE"/>
		<reference ref_id="CVE-2022-28389" ref_url="https://www.suse.com/security/cve/CVE-2022-28389/" source="CVE"/>
		<reference ref_id="CVE-2022-28390" ref_url="https://www.suse.com/security/cve/CVE-2022-28390/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1256-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010751.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-28356: Fixed a refcount leak bug in net/llc/af_llc.c (bnc#1197391).
- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution (bsc#1197227).
- CVE-2022-28388: Fixed a double free in drivers/net/can/usb/usb_8dev.c vulnerability in the Linux kernel (bnc#1198032).
- CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel (bnc#1198033).
- CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel (bnc#1198031).
- CVE-2022-0812: Fixed an incorrect header size calculations in xprtrdma (bsc#1196639).
- CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock (bsc#1197331).
- CVE-2022-0850: Fixed a kernel information leak vulnerability in iov_iter.c (bsc#1196761).
- CVE-2022-26966: Fixed an issue in drivers/net/usb/sr9700.c, which allowed attackers to obtain sensitive information from the memory via crafted frame lengths from a USB device (bsc#1196836).
- CVE-2021-45868: Fixed a wrong validation check in fs/quota/quota_tree.c which could lead to an use-after-free if there is a corrupted quota file (bnc#1197366).
- CVE-2021-39713: Fixed a race condition in the network scheduling subsystem which could lead to a use-after-free (bsc#1196973).
- CVE-2022-23036,CVE-2022-23037,CVE-2022-23038,CVE-2022-23039,CVE-2022-23040,CVE-2022-23041,CVE-2022-23042: Fixed multiple issues which could have lead to read/write access to memory pages or denial of service. These issues are related to the Xen PV device frontend drivers (bsc#1196488).
- CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could trigger crash the system or corrupt system memory (bsc#1196830).

The following non-security bugs were fixed:

- ax88179_178a: Fixed memory issues that could be triggered by malicious USB devices (bsc#1196018).
- genirq: Use rcu in kstat_irqs_usr() (bsc#1193738).
- gve/net: Fixed multiple bugfixes (jsc#SLE-23652).
- net/mlx5e: Fix page DMA map/unmap attributes (bsc#1196468).
- net: tipc: validate domain record count on input (bsc#1195254).
- powerpc: Fixed issues related to slow I/O on PowerPC (bsc#1196433).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-19"/>
	<updated date="2022-04-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189562">SUSE bug 1189562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193738">SUSE bug 1193738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194943">SUSE bug 1194943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195051">SUSE bug 1195051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195254">SUSE bug 1195254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195353">SUSE bug 1195353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196018">SUSE bug 1196018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196114">SUSE bug 1196114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196433">SUSE bug 1196433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196468">SUSE bug 1196468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196488">SUSE bug 1196488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196514">SUSE bug 1196514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196639">SUSE bug 1196639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196761">SUSE bug 1196761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196830">SUSE bug 1196830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196836">SUSE bug 1196836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196942">SUSE bug 1196942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196973">SUSE bug 1196973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197227">SUSE bug 1197227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197331">SUSE bug 1197331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197366">SUSE bug 1197366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197391">SUSE bug 1197391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198031">SUSE bug 1198031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198032">SUSE bug 1198032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198033">SUSE bug 1198033</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-39713/">CVE-2021-39713</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45868/">CVE-2021-45868</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0812/">CVE-2022-0812</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0850/">CVE-2022-0850</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1016/">CVE-2022-1016</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1048/">CVE-2022-1048</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23036/">CVE-2022-23036</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23037/">CVE-2022-23037</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23038/">CVE-2022-23038</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23039/">CVE-2022-23039</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23040/">CVE-2022-23040</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23041/">CVE-2022-23041</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23042/">CVE-2022-23042</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26490/">CVE-2022-26490</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26966/">CVE-2022-26966</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-28356/">CVE-2022-28356</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-28388/">CVE-2022-28388</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28389/">CVE-2022-28389</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28390/">CVE-2022-28390</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679910" comment="kernel-default-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679911" comment="kernel-default-base-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679912" comment="kernel-default-devel-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679864" comment="kernel-devel-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679865" comment="kernel-docs-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679866" comment="kernel-macros-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679913" comment="kernel-obs-build-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679868" comment="kernel-source-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679914" comment="kernel-syms-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679915" comment="reiserfs-kmp-default-4.12.14-150100.197.111.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140505" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198234" ref_url="https://bugzilla.suse.com/1198234" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24765" ref_url="https://www.suse.com/security/cve/CVE-2022-24765/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010750.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- CVE-2022-24765: Fixed a potential command injection via git worktree (bsc#1198234).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-19"/>
	<updated date="2022-04-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198234">SUSE bug 1198234</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24765/">CVE-2022-24765</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679873" comment="git-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679874" comment="git-arch-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679875" comment="git-core-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679876" comment="git-cvs-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679877" comment="git-daemon-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679855" comment="git-doc-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679878" comment="git-email-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679879" comment="git-gui-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679880" comment="git-svn-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679881" comment="git-web-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679882" comment="gitk-2.26.2-150000.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140506" version="1" class="patch">
	<metadata>
		<title>Security update for SDL (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181201" ref_url="https://bugzilla.suse.com/1181201" source="BUGZILLA"/>
		<reference ref_id="1181202" ref_url="https://bugzilla.suse.com/1181202" source="BUGZILLA"/>
		<reference ref_id="1198001" ref_url="https://bugzilla.suse.com/1198001" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14409" ref_url="https://www.suse.com/security/cve/CVE-2020-14409/" source="CVE"/>
		<reference ref_id="CVE-2020-14410" ref_url="https://www.suse.com/security/cve/CVE-2020-14410/" source="CVE"/>
		<reference ref_id="CVE-2021-33657" ref_url="https://www.suse.com/security/cve/CVE-2021-33657/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010769.html" source="SUSE-SU"/>
		<description>
This update for SDL fixes the following issues:

- CVE-2020-14409: Fixed an integer overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c. (bsc#1181202)
- CVE-2020-14410: Fixed a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c. (bsc#1181201)
- CVE-2021-33657: Fixed a Heap overflow problem in video/SDL_pixels.c. (bsc#1198001)
  		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-20"/>
	<updated date="2022-04-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181201">SUSE bug 1181201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181202">SUSE bug 1181202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198001">SUSE bug 1198001</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14409/">CVE-2020-14409</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14410/">CVE-2020-14410</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33657/">CVE-2021-33657</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679489" comment="libSDL-1_2-0-1.2.15-150000.3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679490" comment="libSDL-devel-1.2.15-150000.3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140507" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1191668" ref_url="https://bugzilla.suse.com/1191668" source="BUGZILLA"/>
		<reference ref_id="1192017" ref_url="https://bugzilla.suse.com/1192017" source="BUGZILLA"/>
		<reference ref_id="1192876" ref_url="https://bugzilla.suse.com/1192876" source="BUGZILLA"/>
		<reference ref_id="1193981" ref_url="https://bugzilla.suse.com/1193981" source="BUGZILLA"/>
		<reference ref_id="1194041" ref_url="https://bugzilla.suse.com/1194041" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3975" ref_url="https://www.suse.com/security/cve/CVE-2021-3975/" source="CVE"/>
		<reference ref_id="CVE-2021-4147" ref_url="https://www.suse.com/security/cve/CVE-2021-4147/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0128-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010027.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:

- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)
- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-19"/>
	<updated date="2022-01-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191668">SUSE bug 1191668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192017">SUSE bug 1192017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192876">SUSE bug 1192876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193981">SUSE bug 1193981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194041">SUSE bug 1194041</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3975/">CVE-2021-3975</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4147/">CVE-2021-4147</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663322" comment="libvirt-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663323" comment="libvirt-admin-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663290" comment="libvirt-bash-completion-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663324" comment="libvirt-client-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663325" comment="libvirt-daemon-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663326" comment="libvirt-daemon-config-network-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663327" comment="libvirt-daemon-config-nwfilter-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663328" comment="libvirt-daemon-driver-interface-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663296" comment="libvirt-daemon-driver-libxl-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663329" comment="libvirt-daemon-driver-lxc-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663330" comment="libvirt-daemon-driver-network-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663331" comment="libvirt-daemon-driver-nodedev-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663332" comment="libvirt-daemon-driver-nwfilter-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663333" comment="libvirt-daemon-driver-qemu-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663334" comment="libvirt-daemon-driver-secret-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663335" comment="libvirt-daemon-driver-storage-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663336" comment="libvirt-daemon-driver-storage-core-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663337" comment="libvirt-daemon-driver-storage-disk-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663338" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663339" comment="libvirt-daemon-driver-storage-logical-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663340" comment="libvirt-daemon-driver-storage-mpath-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663341" comment="libvirt-daemon-driver-storage-rbd-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663342" comment="libvirt-daemon-driver-storage-scsi-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663343" comment="libvirt-daemon-hooks-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663344" comment="libvirt-daemon-lxc-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663345" comment="libvirt-daemon-qemu-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663314" comment="libvirt-daemon-xen-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663346" comment="libvirt-devel-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663316" comment="libvirt-doc-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663347" comment="libvirt-libs-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663348" comment="libvirt-lock-sanlock-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663349" comment="libvirt-nss-5.1.0-17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140508" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198136" ref_url="https://bugzilla.suse.com/1198136" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:1293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010785.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

Security hardening, related to Spring Framework vulnerabilities:
    
- Deprecate getResources() and always return null (bsc#1198136).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-21"/>
	<updated date="2022-04-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198136">SUSE bug 1198136</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679648" comment="tomcat-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679649" comment="tomcat-admin-webapps-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679650" comment="tomcat-el-3_0-api-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679651" comment="tomcat-jsp-2_3-api-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679652" comment="tomcat-lib-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679653" comment="tomcat-servlet-4_0-api-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679654" comment="tomcat-webapps-9.0.36-150100.4.76.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140509" version="1" class="patch">
	<metadata>
		<title>Security update for openjpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1102016" ref_url="https://bugzilla.suse.com/1102016" source="BUGZILLA"/>
		<reference ref_id="1106881" ref_url="https://bugzilla.suse.com/1106881" source="BUGZILLA"/>
		<reference ref_id="1162090" ref_url="https://bugzilla.suse.com/1162090" source="BUGZILLA"/>
		<reference ref_id="1173578" ref_url="https://bugzilla.suse.com/1173578" source="BUGZILLA"/>
		<reference ref_id="1180457" ref_url="https://bugzilla.suse.com/1180457" source="BUGZILLA"/>
		<reference ref_id="1184774" ref_url="https://bugzilla.suse.com/1184774" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14423" ref_url="https://www.suse.com/security/cve/CVE-2018-14423/" source="CVE"/>
		<reference ref_id="CVE-2018-16376" ref_url="https://www.suse.com/security/cve/CVE-2018-16376/" source="CVE"/>
		<reference ref_id="CVE-2020-15389" ref_url="https://www.suse.com/security/cve/CVE-2020-15389/" source="CVE"/>
		<reference ref_id="CVE-2020-27823" ref_url="https://www.suse.com/security/cve/CVE-2020-27823/" source="CVE"/>
		<reference ref_id="CVE-2020-8112" ref_url="https://www.suse.com/security/cve/CVE-2020-8112/" source="CVE"/>
		<reference ref_id="CVE-2021-29338" ref_url="https://www.suse.com/security/cve/CVE-2021-29338/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010791.html" source="SUSE-SU"/>
		<description>
This update for openjpeg fixes the following issues:

- CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016).
- CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881).
- CVE-2020-8112: Fixed a heap buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090).
- CVE-2020-15389: Fixed a use-after-free if a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578).
- CVE-2020-27823: Fixed a heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457),
- CVE-2021-29338: Fixed an integer Overflow allows remote attackers to crash the application (bsc#1184774).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-21"/>
	<updated date="2022-04-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1102016">SUSE bug 1102016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106881">SUSE bug 1106881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162090">SUSE bug 1162090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173578">SUSE bug 1173578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180457">SUSE bug 1180457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184774">SUSE bug 1184774</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14423/">CVE-2018-14423</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16376/">CVE-2018-16376</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-15389/">CVE-2020-15389</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27823/">CVE-2020-27823</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-8112/">CVE-2020-8112</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-29338/">CVE-2021-29338</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679725" comment="libopenjpeg1-1.5.2-150000.4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679726" comment="openjpeg-devel-1.5.2-150000.4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140510" version="1" class="patch">
	<metadata>
		<title>Security update for libinput (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198111" ref_url="https://bugzilla.suse.com/1198111" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1215" ref_url="https://www.suse.com/security/cve/CVE-2022-1215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010797.html" source="SUSE-SU"/>
		<description>
This update for libinput fixes the following issues:

- CVE-2022-1215: Fixed a format string vulnerability (bsc#1198111).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-22"/>
	<updated date="2022-04-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198111">SUSE bug 1198111</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1215/">CVE-2022-1215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680353" comment="libinput-devel-1.10.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680354" comment="libinput-tools-1.10.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680355" comment="libinput-udev-1.10.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680356" comment="libinput10-1.10.5-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140511" version="1" class="patch">
	<metadata>
		<title>Security update for dnsmasq (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1197872" ref_url="https://bugzilla.suse.com/1197872" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0934" ref_url="https://www.suse.com/security/cve/CVE-2022-0934/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010803.html" source="SUSE-SU"/>
		<description>
This update for dnsmasq fixes the following issues:

- CVE-2022-0934: Fixed an invalid memory access that could lead to remote denial
  of service via crafted packet (bsc#1197872).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-22"/>
	<updated date="2022-04-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197872">SUSE bug 1197872</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-0934/">CVE-2022-0934</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679493" comment="dnsmasq-2.86-150100.7.20.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140512" version="1" class="patch">
	<metadata>
		<title>Security update for SDL2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198001" ref_url="https://bugzilla.suse.com/1198001" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33657" ref_url="https://www.suse.com/security/cve/CVE-2021-33657/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010801.html" source="SUSE-SU"/>
		<description>
This update for SDL2 fixes the following issues:

- CVE-2021-33657: Fixed a heap overflow problem in video/SDL_pixels.c (bsc#1198001).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-22"/>
	<updated date="2022-04-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198001">SUSE bug 1198001</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33657/">CVE-2021-33657</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679499" comment="libSDL2-2_0-0-2.0.8-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679500" comment="libSDL2-devel-2.0.8-150000.3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140513" version="1" class="patch">
	<metadata>
		<title>Security update for python-numpy (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1193907" ref_url="https://bugzilla.suse.com/1193907" source="BUGZILLA"/>
		<reference ref_id="1193913" ref_url="https://bugzilla.suse.com/1193913" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33430" ref_url="https://www.suse.com/security/cve/CVE-2021-33430/" source="CVE"/>
		<reference ref_id="CVE-2021-41496" ref_url="https://www.suse.com/security/cve/CVE-2021-41496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0134-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012546.html" source="SUSE-SU"/>
		<description>
This update for python-numpy fixes the following issues:

- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193907">SUSE bug 1193907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193913">SUSE bug 1193913</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33430/">CVE-2021-33430</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41496/">CVE-2021-41496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667519" comment="python3-numpy-1.17.3-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667520" comment="python3-numpy-devel-1.17.3-10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140514" version="1" class="patch">
	<metadata>
		<title>Security update for busybox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1064976" ref_url="https://bugzilla.suse.com/1064976" source="BUGZILLA"/>
		<reference ref_id="1064978" ref_url="https://bugzilla.suse.com/1064978" source="BUGZILLA"/>
		<reference ref_id="1069412" ref_url="https://bugzilla.suse.com/1069412" source="BUGZILLA"/>
		<reference ref_id="1099260" ref_url="https://bugzilla.suse.com/1099260" source="BUGZILLA"/>
		<reference ref_id="1099263" ref_url="https://bugzilla.suse.com/1099263" source="BUGZILLA"/>
		<reference ref_id="1102912" ref_url="https://bugzilla.suse.com/1102912" source="BUGZILLA"/>
		<reference ref_id="1121426" ref_url="https://bugzilla.suse.com/1121426" source="BUGZILLA"/>
		<reference ref_id="1121428" ref_url="https://bugzilla.suse.com/1121428" source="BUGZILLA"/>
		<reference ref_id="1184522" ref_url="https://bugzilla.suse.com/1184522" source="BUGZILLA"/>
		<reference ref_id="1192869" ref_url="https://bugzilla.suse.com/1192869" source="BUGZILLA"/>
		<reference ref_id="951562" ref_url="https://bugzilla.suse.com/951562" source="BUGZILLA"/>
		<reference ref_id="970662" ref_url="https://bugzilla.suse.com/970662" source="BUGZILLA"/>
		<reference ref_id="970663" ref_url="https://bugzilla.suse.com/970663" source="BUGZILLA"/>
		<reference ref_id="991940" ref_url="https://bugzilla.suse.com/991940" source="BUGZILLA"/>
		<reference ref_id="CVE-2011-5325" ref_url="https://www.suse.com/security/cve/CVE-2011-5325/" source="CVE"/>
		<reference ref_id="CVE-2015-9261" ref_url="https://www.suse.com/security/cve/CVE-2015-9261/" source="CVE"/>
		<reference ref_id="CVE-2016-2147" ref_url="https://www.suse.com/security/cve/CVE-2016-2147/" source="CVE"/>
		<reference ref_id="CVE-2016-2148" ref_url="https://www.suse.com/security/cve/CVE-2016-2148/" source="CVE"/>
		<reference ref_id="CVE-2016-6301" ref_url="https://www.suse.com/security/cve/CVE-2016-6301/" source="CVE"/>
		<reference ref_id="CVE-2017-15873" ref_url="https://www.suse.com/security/cve/CVE-2017-15873/" source="CVE"/>
		<reference ref_id="CVE-2017-15874" ref_url="https://www.suse.com/security/cve/CVE-2017-15874/" source="CVE"/>
		<reference ref_id="CVE-2017-16544" ref_url="https://www.suse.com/security/cve/CVE-2017-16544/" source="CVE"/>
		<reference ref_id="CVE-2018-1000500" ref_url="https://www.suse.com/security/cve/CVE-2018-1000500/" source="CVE"/>
		<reference ref_id="CVE-2018-1000517" ref_url="https://www.suse.com/security/cve/CVE-2018-1000517/" source="CVE"/>
		<reference ref_id="CVE-2018-20679" ref_url="https://www.suse.com/security/cve/CVE-2018-20679/" source="CVE"/>
		<reference ref_id="CVE-2019-5747" ref_url="https://www.suse.com/security/cve/CVE-2019-5747/" source="CVE"/>
		<reference ref_id="CVE-2021-28831" ref_url="https://www.suse.com/security/cve/CVE-2021-28831/" source="CVE"/>
		<reference ref_id="CVE-2021-42373" ref_url="https://www.suse.com/security/cve/CVE-2021-42373/" source="CVE"/>
		<reference ref_id="CVE-2021-42374" ref_url="https://www.suse.com/security/cve/CVE-2021-42374/" source="CVE"/>
		<reference ref_id="CVE-2021-42375" ref_url="https://www.suse.com/security/cve/CVE-2021-42375/" source="CVE"/>
		<reference ref_id="CVE-2021-42376" ref_url="https://www.suse.com/security/cve/CVE-2021-42376/" source="CVE"/>
		<reference ref_id="CVE-2021-42377" ref_url="https://www.suse.com/security/cve/CVE-2021-42377/" source="CVE"/>
		<reference ref_id="CVE-2021-42378" ref_url="https://www.suse.com/security/cve/CVE-2021-42378/" source="CVE"/>
		<reference ref_id="CVE-2021-42379" ref_url="https://www.suse.com/security/cve/CVE-2021-42379/" source="CVE"/>
		<reference ref_id="CVE-2021-42380" ref_url="https://www.suse.com/security/cve/CVE-2021-42380/" source="CVE"/>
		<reference ref_id="CVE-2021-42381" ref_url="https://www.suse.com/security/cve/CVE-2021-42381/" source="CVE"/>
		<reference ref_id="CVE-2021-42382" ref_url="https://www.suse.com/security/cve/CVE-2021-42382/" source="CVE"/>
		<reference ref_id="CVE-2021-42383" ref_url="https://www.suse.com/security/cve/CVE-2021-42383/" source="CVE"/>
		<reference ref_id="CVE-2021-42384" ref_url="https://www.suse.com/security/cve/CVE-2021-42384/" source="CVE"/>
		<reference ref_id="CVE-2021-42385" ref_url="https://www.suse.com/security/cve/CVE-2021-42385/" source="CVE"/>
		<reference ref_id="CVE-2021-42386" ref_url="https://www.suse.com/security/cve/CVE-2021-42386/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<description>
This update for busybox fixes the following issues:

- CVE-2011-5325: Fixed tar directory traversal (bsc#951562).
- CVE-2015-9261: Fixed segfalts and application crashes in huft_build (bsc#1102912).
- CVE-2016-2147: Fixed out of bounds write (heap) due to integer underflow in udhcpc (bsc#970663).
- CVE-2016-2148: Fixed heap-based buffer overflow in OPTION_6RD parsing (bsc#970662).
- CVE-2016-6301: Fixed NTP server denial of service flaw (bsc#991940).
- CVE-2017-15873: Fixed integer overflow in get_next_block function in archival/libarchive/decompress_bunzip2.c (bsc#1064976).
- CVE-2017-15874: Fixed integer underflow in archival/libarchive/decompress_unlzma.c (bsc#1064978).
- CVE-2017-16544: Fixed Insufficient sanitization of filenames when autocompleting (bsc#1069412).
- CVE-2018-1000500 : Fixed missing SSL certificate validation in wget (bsc#1099263).
- CVE-2018-1000517: Fixed heap-based buffer overflow in the retrieve_file_data() (bsc#1099260).
- CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426).
- CVE-2019-5747: Fixed out of bounds read in udhcp components (bsc#1121428).
- CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522).
- CVE-2021-42373: Fixed NULL pointer dereference in man leading to DoS when a section name is supplied but no page argument is given (bsc#1192869).
- CVE-2021-42374: Fixed out-of-bounds heap read in unlzma leading to information leak and DoS when crafted LZMA-compressed input is decompressed (bsc#1192869).
- CVE-2021-42375: Fixed incorrect handling of a special element in ash leading to DoS when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters (bsc#1192869).
- CVE-2021-42376: Fixed NULL pointer dereference in hush leading to DoS when processing a crafted shell command (bsc#1192869).
- CVE-2021-42377: Fixed attacker-controlled pointer free in hush leading to DoS and possible code execution when processing a crafted shell command (bsc#1192869).
- CVE-2021-42378: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the getvar_i function (bsc#1192869).
- CVE-2021-42379: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the next_input_file function (bsc#1192869).
- CVE-2021-42380: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the clrvar function (bsc#1192869).
- CVE-2021-42381: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the hash_init function (bsc#1192869).
- CVE-2021-42382: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the getvar_s function (bsc#1192869).
- CVE-2021-42383: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the evaluate function (bsc#1192869).
- CVE-2021-42384: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the handle_special function (bsc#1192869).
- CVE-2021-42385: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the evaluate function (bsc#1192869).
- CVE-2021-42386: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the nvalloc function (bsc#1192869).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-20"/>
	<updated date="2022-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1064976">SUSE bug 1064976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064978">SUSE bug 1064978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069412">SUSE bug 1069412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099260">SUSE bug 1099260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099263">SUSE bug 1099263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102912">SUSE bug 1102912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121426">SUSE bug 1121426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121428">SUSE bug 1121428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184522">SUSE bug 1184522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192869">SUSE bug 1192869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951562">SUSE bug 951562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970662">SUSE bug 970662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970663">SUSE bug 970663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991940">SUSE bug 991940</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2011-5325/">CVE-2011-5325</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9261/">CVE-2015-9261</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2147/">CVE-2016-2147</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2148/">CVE-2016-2148</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6301/">CVE-2016-6301</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15873/">CVE-2017-15873</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15874/">CVE-2017-15874</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16544/">CVE-2017-16544</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000500/">CVE-2018-1000500</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000517/">CVE-2018-1000517</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20679/">CVE-2018-20679</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5747/">CVE-2019-5747</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28831/">CVE-2021-28831</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42373/">CVE-2021-42373</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42374/">CVE-2021-42374</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42375/">CVE-2021-42375</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42376/">CVE-2021-42376</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42377/">CVE-2021-42377</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42378/">CVE-2021-42378</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42379/">CVE-2021-42379</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42380/">CVE-2021-42380</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42381/">CVE-2021-42381</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42382/">CVE-2021-42382</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42383/">CVE-2021-42383</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42384/">CVE-2021-42384</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42385/">CVE-2021-42385</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42386/">CVE-2021-42386</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663750" comment="busybox-1.34.1-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663751" comment="busybox-static-1.34.1-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140515" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194547" ref_url="https://bugzilla.suse.com/1194547" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4140" ref_url="https://www.suse.com/security/cve/CVE-2021-4140/" source="CVE"/>
		<reference ref_id="CVE-2022-22737" ref_url="https://www.suse.com/security/cve/CVE-2022-22737/" source="CVE"/>
		<reference ref_id="CVE-2022-22738" ref_url="https://www.suse.com/security/cve/CVE-2022-22738/" source="CVE"/>
		<reference ref_id="CVE-2022-22739" ref_url="https://www.suse.com/security/cve/CVE-2022-22739/" source="CVE"/>
		<reference ref_id="CVE-2022-22740" ref_url="https://www.suse.com/security/cve/CVE-2022-22740/" source="CVE"/>
		<reference ref_id="CVE-2022-22741" ref_url="https://www.suse.com/security/cve/CVE-2022-22741/" source="CVE"/>
		<reference ref_id="CVE-2022-22742" ref_url="https://www.suse.com/security/cve/CVE-2022-22742/" source="CVE"/>
		<reference ref_id="CVE-2022-22743" ref_url="https://www.suse.com/security/cve/CVE-2022-22743/" source="CVE"/>
		<reference ref_id="CVE-2022-22744" ref_url="https://www.suse.com/security/cve/CVE-2022-22744/" source="CVE"/>
		<reference ref_id="CVE-2022-22745" ref_url="https://www.suse.com/security/cve/CVE-2022-22745/" source="CVE"/>
		<reference ref_id="CVE-2022-22746" ref_url="https://www.suse.com/security/cve/CVE-2022-22746/" source="CVE"/>
		<reference ref_id="CVE-2022-22747" ref_url="https://www.suse.com/security/cve/CVE-2022-22747/" source="CVE"/>
		<reference ref_id="CVE-2022-22748" ref_url="https://www.suse.com/security/cve/CVE-2022-22748/" source="CVE"/>
		<reference ref_id="CVE-2022-22751" ref_url="https://www.suse.com/security/cve/CVE-2022-22751/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0137-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021405.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- CVE-2021-4140: Fixed iframe sandbox bypass with XSLT (bsc#1194547).
- CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547).
- CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur (bsc#1194547).
- CVE-2022-22739: Fixed missing throttling on external protocol launch dialog (bsc#1194547).
- CVE-2022-22740: Fixed use-after-free of ChannelEventQueue::mOwner (bsc#1194547).
- CVE-2022-22741: Fixed browser window spoof using fullscreen mode (bsc#1194547).
- CVE-2022-22742: Fixed out-of-bounds memory access when inserting text in edit mode (bsc#1194547).
- CVE-2022-22743: Fixed browser window spoof using fullscreen mode (bsc#1194547).
- CVE-2022-22744: Fixed possible command injection via the 'Copy as curl' feature in DevTools (bsc#1194547).
- CVE-2022-22745: Fixed leaking cross-origin URLs through securitypolicyviolation event (bsc#1194547).
- CVE-2022-22746: Fixed calling into reportValidity could have lead to fullscreen window spoof (bsc#1194547).
- CVE-2022-22747: Fixed crash when handling empty pkcs7 sequence(bsc#1194547).
- CVE-2022-22748: Fixed spoofed origin on external protocol launch dialog (bsc#1194547).
- CVE-2022-22751: Fixed memory safety bugs (bsc#1194547).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-20"/>
	<updated date="2022-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194547">SUSE bug 1194547</bugzilla>
	<cve impact="moderate" cvss3="10/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4140/">CVE-2021-4140</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22737/">CVE-2022-22737</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22738/">CVE-2022-22738</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22739/">CVE-2022-22739</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22740/">CVE-2022-22740</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22741/">CVE-2022-22741</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22742/">CVE-2022-22742</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-22743/">CVE-2022-22743</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22744/">CVE-2022-22744</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22745/">CVE-2022-22745</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22746/">CVE-2022-22746</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-22747/">CVE-2022-22747</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22748/">CVE-2022-22748</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22751/">CVE-2022-22751</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663752" comment="MozillaFirefox-91.5.0-150.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663753" comment="MozillaFirefox-devel-91.5.0-150.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663754" comment="MozillaFirefox-translations-common-91.5.0-150.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663755" comment="MozillaFirefox-translations-other-91.5.0-150.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140516" version="1" class="patch">
	<metadata>
		<title>Security update for cifs-utils (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1197216" ref_url="https://bugzilla.suse.com/1197216" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-27239" ref_url="https://www.suse.com/security/cve/CVE-2022-27239/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010845.html" source="SUSE-SU"/>
		<description>
This update for cifs-utils fixes the following issues:

- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-27"/>
	<updated date="2022-04-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197216">SUSE bug 1197216</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-27239/">CVE-2022-27239</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009681186" comment="cifs-utils-6.9-150100.5.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009681187" comment="cifs-utils-devel-6.9-150100.5.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140517" version="1" class="patch">
	<metadata>
		<title>Security update for aide (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194735" ref_url="https://bugzilla.suse.com/1194735" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-45417" ref_url="https://www.suse.com/security/cve/CVE-2021-45417/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010046.html" source="SUSE-SU"/>
		<description>
This update for aide fixes the following issues:

- CVE-2021-45417: Fix a bufferoverflow in base64 functions (bsc#1194735)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-21"/>
	<updated date="2022-01-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194735">SUSE bug 1194735</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-45417/">CVE-2021-45417</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664186" comment="aide-0.16-24.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140518" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196133" ref_url="https://bugzilla.suse.com/1196133" source="BUGZILLA"/>
		<reference ref_id="1198290" ref_url="https://bugzilla.suse.com/1198290" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22594" ref_url="https://www.suse.com/security/cve/CVE-2022-22594/" source="CVE"/>
		<reference ref_id="CVE-2022-22624" ref_url="https://www.suse.com/security/cve/CVE-2022-22624/" source="CVE"/>
		<reference ref_id="CVE-2022-22628" ref_url="https://www.suse.com/security/cve/CVE-2022-22628/" source="CVE"/>
		<reference ref_id="CVE-2022-22629" ref_url="https://www.suse.com/security/cve/CVE-2022-22629/" source="CVE"/>
		<reference ref_id="CVE-2022-22637" ref_url="https://www.suse.com/security/cve/CVE-2022-22637/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010915.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.36.0 (bsc#1198290):

- CVE-2022-22624: Fixed use after free that may lead to arbitrary code execution.
- CVE-2022-22628: Fixed use after free that may lead to arbitrary code execution.
- CVE-2022-22629: Fixed a buffer overflow that may lead to arbitrary code execution.
- CVE-2022-22637: Fixed an unexpected cross-origin behavior due to a logic error.

Missing CVE reference for the update to 2.34.6 (bsc#1196133):

- CVE-2022-22594: Fixed a cross-origin issue in the IndexDB API.   
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-03"/>
	<updated date="2022-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196133">SUSE bug 1196133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198290">SUSE bug 1198290</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22594/">CVE-2022-22594</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22624/">CVE-2022-22624</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22628/">CVE-2022-22628</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22629/">CVE-2022-22629</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22637/">CVE-2022-22637</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680418" comment="libjavascriptcoregtk-4_0-18-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680419" comment="libwebkit2gtk-4_0-37-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680323" comment="libwebkit2gtk3-lang-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680420" comment="typelib-1_0-JavaScriptCore-4_0-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680421" comment="typelib-1_0-WebKit2-4_0-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680422" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680423" comment="webkit2gtk-4_0-injected-bundles-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680424" comment="webkit2gtk3-devel-2.36.0-150000.3.100.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140519" version="1" class="patch">
	<metadata>
		<title>Security update for ruby2.5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188160" ref_url="https://bugzilla.suse.com/1188160" source="BUGZILLA"/>
		<reference ref_id="1188161" ref_url="https://bugzilla.suse.com/1188161" source="BUGZILLA"/>
		<reference ref_id="1190375" ref_url="https://bugzilla.suse.com/1190375" source="BUGZILLA"/>
		<reference ref_id="1193035" ref_url="https://bugzilla.suse.com/1193035" source="BUGZILLA"/>
		<reference ref_id="1198441" ref_url="https://bugzilla.suse.com/1198441" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31799" ref_url="https://www.suse.com/security/cve/CVE-2021-31799/" source="CVE"/>
		<reference ref_id="CVE-2021-31810" ref_url="https://www.suse.com/security/cve/CVE-2021-31810/" source="CVE"/>
		<reference ref_id="CVE-2021-32066" ref_url="https://www.suse.com/security/cve/CVE-2021-32066/" source="CVE"/>
		<reference ref_id="CVE-2021-41817" ref_url="https://www.suse.com/security/cve/CVE-2021-41817/" source="CVE"/>
		<reference ref_id="CVE-2022-28739" ref_url="https://www.suse.com/security/cve/CVE-2022-28739/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010920.html" source="SUSE-SU"/>
		<description>
This update for ruby2.5 fixes the following issues:

- CVE-2022-28739: Fixed a buffer overrun in String-to-Float conversion (bsc#1198441).
- CVE-2021-41817: Fixed a regular expression denial of service in Date Parsing Methods (bsc#1193035).
- CVE-2021-32066: Fixed a StartTLS stripping vulnerability in Net:IMAP (bsc#1188160).
- CVE-2021-31810: Fixed a trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161).
- CVE-2021-31799: Fixed a command injection vulnerability in RDoc (bsc#1190375). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-03"/>
	<updated date="2022-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188160">SUSE bug 1188160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188161">SUSE bug 1188161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190375">SUSE bug 1190375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193035">SUSE bug 1193035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198441">SUSE bug 1198441</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31799/">CVE-2021-31799</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-31810/">CVE-2021-31810</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-32066/">CVE-2021-32066</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-41817/">CVE-2021-41817</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-28739/">CVE-2022-28739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680364" comment="libruby2_5-2_5-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680365" comment="ruby2.5-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680366" comment="ruby2.5-devel-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680367" comment="ruby2.5-devel-extra-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680368" comment="ruby2.5-stdlib-2.5.9-150000.4.23.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140520" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198671" ref_url="https://bugzilla.suse.com/1198671" source="BUGZILLA"/>
		<reference ref_id="1198672" ref_url="https://bugzilla.suse.com/1198672" source="BUGZILLA"/>
		<reference ref_id="1198673" ref_url="https://bugzilla.suse.com/1198673" source="BUGZILLA"/>
		<reference ref_id="1198674" ref_url="https://bugzilla.suse.com/1198674" source="BUGZILLA"/>
		<reference ref_id="1198675" ref_url="https://bugzilla.suse.com/1198675" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21426" ref_url="https://www.suse.com/security/cve/CVE-2022-21426/" source="CVE"/>
		<reference ref_id="CVE-2022-21434" ref_url="https://www.suse.com/security/cve/CVE-2022-21434/" source="CVE"/>
		<reference ref_id="CVE-2022-21443" ref_url="https://www.suse.com/security/cve/CVE-2022-21443/" source="CVE"/>
		<reference ref_id="CVE-2022-21476" ref_url="https://www.suse.com/security/cve/CVE-2022-21476/" source="CVE"/>
		<reference ref_id="CVE-2022-21496" ref_url="https://www.suse.com/security/cve/CVE-2022-21496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010919.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- CVE-2022-21426: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198672).
- CVE-2022-21434: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198674).
- CVE-2022-21496: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198673).
- CVE-2022-21443: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198675).
- CVE-2022-21476: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198671).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-03"/>
	<updated date="2022-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198671">SUSE bug 1198671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198672">SUSE bug 1198672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198673">SUSE bug 1198673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198674">SUSE bug 1198674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198675">SUSE bug 1198675</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21426/">CVE-2022-21426</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21434/">CVE-2022-21434</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21443/">CVE-2022-21443</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21476/">CVE-2022-21476</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21496/">CVE-2022-21496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680369" comment="java-11-openjdk-11.0.15.0-150000.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680370" comment="java-11-openjdk-demo-11.0.15.0-150000.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680371" comment="java-11-openjdk-devel-11.0.15.0-150000.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680372" comment="java-11-openjdk-headless-11.0.15.0-150000.3.80.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140521" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188891" ref_url="https://bugzilla.suse.com/1188891" source="BUGZILLA"/>
		<reference ref_id="1189547" ref_url="https://bugzilla.suse.com/1189547" source="BUGZILLA"/>
		<reference ref_id="1190269" ref_url="https://bugzilla.suse.com/1190269" source="BUGZILLA"/>
		<reference ref_id="1190274" ref_url="https://bugzilla.suse.com/1190274" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29980" ref_url="https://www.suse.com/security/cve/CVE-2021-29980/" source="CVE"/>
		<reference ref_id="CVE-2021-29981" ref_url="https://www.suse.com/security/cve/CVE-2021-29981/" source="CVE"/>
		<reference ref_id="CVE-2021-29982" ref_url="https://www.suse.com/security/cve/CVE-2021-29982/" source="CVE"/>
		<reference ref_id="CVE-2021-29983" ref_url="https://www.suse.com/security/cve/CVE-2021-29983/" source="CVE"/>
		<reference ref_id="CVE-2021-29984" ref_url="https://www.suse.com/security/cve/CVE-2021-29984/" source="CVE"/>
		<reference ref_id="CVE-2021-29985" ref_url="https://www.suse.com/security/cve/CVE-2021-29985/" source="CVE"/>
		<reference ref_id="CVE-2021-29986" ref_url="https://www.suse.com/security/cve/CVE-2021-29986/" source="CVE"/>
		<reference ref_id="CVE-2021-29987" ref_url="https://www.suse.com/security/cve/CVE-2021-29987/" source="CVE"/>
		<reference ref_id="CVE-2021-29988" ref_url="https://www.suse.com/security/cve/CVE-2021-29988/" source="CVE"/>
		<reference ref_id="CVE-2021-29989" ref_url="https://www.suse.com/security/cve/CVE-2021-29989/" source="CVE"/>
		<reference ref_id="CVE-2021-29990" ref_url="https://www.suse.com/security/cve/CVE-2021-29990/" source="CVE"/>
		<reference ref_id="CVE-2021-29991" ref_url="https://www.suse.com/security/cve/CVE-2021-29991/" source="CVE"/>
		<reference ref_id="CVE-2021-38492" ref_url="https://www.suse.com/security/cve/CVE-2021-38492/" source="CVE"/>
		<reference ref_id="CVE-2021-38495" ref_url="https://www.suse.com/security/cve/CVE-2021-38495/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010973.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

This update contains the Firefox Extended Support Release 91.1.0 ESR.

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-40 (bsc#1190269, bsc#1190274):

* CVE-2021-38492: Navigating to `mk:` URL scheme could load Internet Explorer
* CVE-2021-38495: Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1

Firefox 91.0.1esr ESR

* Fixed: Fixed an issue causing buttons on the tab bar to be
  resized when loading certain websites (bug 1704404)
* Fixed: Fixed an issue which caused tabs from private windows
  to be visible in non-private windows when viewing switch-to-
  tab results in the address bar panel (bug 1720369)
* Fixed: Various stability fixes
* Fixed: Security fix MFSA 2021-37 (bsc#1189547)
* CVE-2021-29991 (bmo#1724896)
  Header Splitting possible with HTTP/3 Responses

Firefox Extended Support Release 91.0 ESR

* New: Some of the highlights of the new Extended Support Release are:

  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded 'just in time' if you decide to 'Log in with Facebook'
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We’ve improved functionality and design for a number of
    Firefox search features:
    * Selecting a search engine at the bottom of the search
      panel now enters search mode for that engine, allowing you to
      see suggestions (if available) for your search terms. The old
      behavior (immediately performing a search) is available with
      a shift-click.
    * When Firefox autocompletes the URL of one of your search
      engines, you can now search with that engine directly in the
      address bar by selecting the shortcut in the address bar
      results.
    * We’ve added buttons at the bottom of the search panel to
      allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
* Changed: Firefox no longer supports Adobe Flash. There is no
  setting available to re-enable Flash support.
* Enterprise: Various bug fixes and new policies have been
  implemented in the latest version of Firefox. See more
  details in the Firefox for Enterprise 91 Release Notes.

  MFSA 2021-33 (bsc#1188891):

* CVE-2021-29986: Race condition when resolving DNS names could have led to
  memory corruption
* CVE-2021-29981: Live range splitting could have led to conflicting
  assignments in the JIT
* CVE-2021-29988: Memory corruption as a result of incorrect style treatment
* CVE-2021-29983: Firefox for Android could get stuck in fullscreen mode
* CVE-2021-29984: Incorrect instruction reordering during JIT optimization
* CVE-2021-29980: Uninitialized memory in a canvas object could have led to
  memory corruption
* CVE-2021-29987: Users could have been tricked into accepting unwanted
  permissions on Linux
* CVE-2021-29985: Use-after-free media channels
* CVE-2021-29982: Single bit data leak due to incorrect JIT optimization and
  type confusion
* CVE-2021-29989: Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
* CVE-2021-29990: Memory safety bugs fixed in Firefox 91
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-09"/>
	<updated date="2022-05-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188891">SUSE bug 1188891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189547">SUSE bug 1189547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190269">SUSE bug 1190269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190274">SUSE bug 1190274</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29980/">CVE-2021-29980</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29981/">CVE-2021-29981</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29982/">CVE-2021-29982</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29983/">CVE-2021-29983</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29984/">CVE-2021-29984</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29985/">CVE-2021-29985</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29986/">CVE-2021-29986</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29987/">CVE-2021-29987</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29988/">CVE-2021-29988</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29989/">CVE-2021-29989</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29990/">CVE-2021-29990</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29991/">CVE-2021-29991</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38492/">CVE-2021-38492</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38495/">CVE-2021-38495</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009682480" comment="MozillaFirefox-91.9.0-150000.150.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682481" comment="MozillaFirefox-devel-91.9.0-150000.150.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682482" comment="MozillaFirefox-translations-common-91.9.0-150000.150.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682483" comment="MozillaFirefox-translations-other-91.9.0-150000.150.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140522" version="1" class="patch">
	<metadata>
		<title>Security update for gzip (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="CVE-2022-1271" ref_url="https://www.suse.com/security/cve/CVE-2022-1271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011021.html" source="SUSE-SU"/>
		<description>
This update for gzip fixes the following issues:

- CVE-2022-1271: Add hardening for zgrep. (bsc#1198062)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-16"/>
	<updated date="2022-05-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1271/">CVE-2022-1271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682493" comment="gzip-1.10-150000.4.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140523" version="1" class="patch">
	<metadata>
		<title>Security update for e2fsprogs (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198446" ref_url="https://bugzilla.suse.com/1198446" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1304" ref_url="https://www.suse.com/security/cve/CVE-2022-1304/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1688-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011031.html" source="SUSE-SU"/>
		<description>
This update for e2fsprogs fixes the following issues:

- CVE-2022-1304: Fixed out-of-bounds read/write leading to segmentation fault
  and possibly arbitrary code execution. (bsc#1198446)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-16"/>
	<updated date="2022-05-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198446">SUSE bug 1198446</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-1304/">CVE-2022-1304</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009682239" comment="e2fsprogs-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682240" comment="e2fsprogs-devel-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682241" comment="libcom_err-devel-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682242" comment="libcom_err-devel-static-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682243" comment="libcom_err2-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682218" comment="libcom_err2-32bit-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682244" comment="libext2fs-devel-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682245" comment="libext2fs-devel-static-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682246" comment="libext2fs2-1.43.8-150000.4.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140524" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1193930" ref_url="https://bugzilla.suse.com/1193930" source="BUGZILLA"/>
		<reference ref_id="1196441" ref_url="https://bugzilla.suse.com/1196441" source="BUGZILLA"/>
		<reference ref_id="1197284" ref_url="https://bugzilla.suse.com/1197284" source="BUGZILLA"/>
		<reference ref_id="1197517" ref_url="https://bugzilla.suse.com/1197517" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43565" ref_url="https://www.suse.com/security/cve/CVE-2021-43565/" source="CVE"/>
		<reference ref_id="CVE-2022-23648" ref_url="https://www.suse.com/security/cve/CVE-2022-23648/" source="CVE"/>
		<reference ref_id="CVE-2022-24769" ref_url="https://www.suse.com/security/cve/CVE-2022-24769/" source="CVE"/>
		<reference ref_id="CVE-2022-27191" ref_url="https://www.suse.com/security/cve/CVE-2022-27191/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011030.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker fixes the following issues:

- CVE-2022-24769: Fixed incorrect default inheritable capabilities (bsc#1197517).
- CVE-2022-23648: Fixed directory traversal issue (bsc#1196441).
- CVE-2022-27191: Fixed a crash in a golang.org/x/crypto/ssh server (bsc#1197284).
- CVE-2021-43565: Fixed a panic in golang.org/x/crypto by empty plaintext packet (bsc#1193930).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-16"/>
	<updated date="2022-05-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193930">SUSE bug 1193930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196441">SUSE bug 1196441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197284">SUSE bug 1197284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197517">SUSE bug 1197517</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43565/">CVE-2021-43565</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23648/">CVE-2022-23648</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-24769/">CVE-2022-24769</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27191/">CVE-2022-27191</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009681374" comment="containerd-1.5.11-150000.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682423" comment="containerd-ctr-1.5.11-150000.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009681375" comment="docker-20.10.14_ce-150000.163.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009681370" comment="docker-bash-completion-20.10.14_ce-150000.163.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140525" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1191962" ref_url="https://bugzilla.suse.com/1191962" source="BUGZILLA"/>
		<reference ref_id="1191963" ref_url="https://bugzilla.suse.com/1191963" source="BUGZILLA"/>
		<reference ref_id="1192153" ref_url="https://bugzilla.suse.com/1192153" source="BUGZILLA"/>
		<reference ref_id="1192154" ref_url="https://bugzilla.suse.com/1192154" source="BUGZILLA"/>
		<reference ref_id="1192696" ref_url="https://bugzilla.suse.com/1192696" source="BUGZILLA"/>
		<reference ref_id="1194514" ref_url="https://bugzilla.suse.com/1194514" source="BUGZILLA"/>
		<reference ref_id="1194819" ref_url="https://bugzilla.suse.com/1194819" source="BUGZILLA"/>
		<reference ref_id="1197283" ref_url="https://bugzilla.suse.com/1197283" source="BUGZILLA"/>
		<reference ref_id="1198247" ref_url="https://bugzilla.suse.com/1198247" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23343" ref_url="https://www.suse.com/security/cve/CVE-2021-23343/" source="CVE"/>
		<reference ref_id="CVE-2021-32803" ref_url="https://www.suse.com/security/cve/CVE-2021-32803/" source="CVE"/>
		<reference ref_id="CVE-2021-32804" ref_url="https://www.suse.com/security/cve/CVE-2021-32804/" source="CVE"/>
		<reference ref_id="CVE-2021-3807" ref_url="https://www.suse.com/security/cve/CVE-2021-3807/" source="CVE"/>
		<reference ref_id="CVE-2021-3918" ref_url="https://www.suse.com/security/cve/CVE-2021-3918/" source="CVE"/>
		<reference ref_id="CVE-2021-44906" ref_url="https://www.suse.com/security/cve/CVE-2021-44906/" source="CVE"/>
		<reference ref_id="CVE-2021-44907" ref_url="https://www.suse.com/security/cve/CVE-2021-44907/" source="CVE"/>
		<reference ref_id="CVE-2022-0235" ref_url="https://www.suse.com/security/cve/CVE-2022-0235/" source="CVE"/>
		<reference ref_id="CVE-2022-21824" ref_url="https://www.suse.com/security/cve/CVE-2022-21824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011058.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).
- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).
- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).
- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).
- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).
- CVE-2022-21824: Fixed prototype pollution via console.table (bsc#1194514).
- CVE-2021-44906: Fixed prototype pollution in npm dependency (bsc#1198247).
- CVE-2021-44907: Fixed insuficient sanitation in npm dependency (bsc#1197283).
- CVE-2022-0235: Fixed passing of cookie data and sensitive headers to different hostnames in node-fetch-npm (bsc#1194819).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-17"/>
	<updated date="2022-05-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191962">SUSE bug 1191962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191963">SUSE bug 1191963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192153">SUSE bug 1192153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192154">SUSE bug 1192154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192696">SUSE bug 1192696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194514">SUSE bug 1194514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194819">SUSE bug 1194819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197283">SUSE bug 1197283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198247">SUSE bug 1198247</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23343/">CVE-2021-23343</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32803/">CVE-2021-32803</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32804/">CVE-2021-32804</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3807/">CVE-2021-3807</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3918/">CVE-2021-3918</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-44906/">CVE-2021-44906</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-44907/">CVE-2021-44907</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0235/">CVE-2022-0235</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-21824/">CVE-2022-21824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009683579" comment="nodejs10-10.24.1-150000.1.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683580" comment="nodejs10-devel-10.24.1-150000.1.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683551" comment="nodejs10-docs-10.24.1-150000.1.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683581" comment="npm10-10.24.1-150000.1.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140526" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198717" ref_url="https://bugzilla.suse.com/1198717" source="BUGZILLA"/>
		<reference ref_id="1199423" ref_url="https://bugzilla.suse.com/1199423" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21151" ref_url="https://www.suse.com/security/cve/CVE-2022-21151/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011081.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20220510 release. (bsc#1199423)
Updated to Intel CPU Microcode 20220419 release. (bsc#1198717)

- CVE-2022-21151: Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access (bsc#1199423).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-18"/>
	<updated date="2022-05-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1198717">SUSE bug 1198717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199423">SUSE bug 1199423</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21151/">CVE-2022-21151</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683567" comment="ucode-intel-20220510-150100.3.210.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140527" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198970" ref_url="https://bugzilla.suse.com/1198970" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29909" ref_url="https://www.suse.com/security/cve/CVE-2022-29909/" source="CVE"/>
		<reference ref_id="CVE-2022-29911" ref_url="https://www.suse.com/security/cve/CVE-2022-29911/" source="CVE"/>
		<reference ref_id="CVE-2022-29912" ref_url="https://www.suse.com/security/cve/CVE-2022-29912/" source="CVE"/>
		<reference ref_id="CVE-2022-29914" ref_url="https://www.suse.com/security/cve/CVE-2022-29914/" source="CVE"/>
		<reference ref_id="CVE-2022-29916" ref_url="https://www.suse.com/security/cve/CVE-2022-29916/" source="CVE"/>
		<reference ref_id="CVE-2022-29917" ref_url="https://www.suse.com/security/cve/CVE-2022-29917/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011084.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.9.0 ESR (MFSA 2022-17)(bsc#1198970):

- CVE-2022-29914: Fullscreen notification bypass using popups
- CVE-2022-29909: Bypassing permission prompt in nested browsing contexts
- CVE-2022-29916: Leaking browser history with CSS variables
- CVE-2022-29911: iframe Sandbox bypass
- CVE-2022-29912: Reader mode bypassed SameSite cookies
- CVE-2022-29917: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-18"/>
	<updated date="2022-05-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198970">SUSE bug 1198970</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29909/">CVE-2022-29909</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29911/">CVE-2022-29911</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-29912/">CVE-2022-29912</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29914/">CVE-2022-29914</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29916/">CVE-2022-29916</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29917/">CVE-2022-29917</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684034" comment="MozillaFirefox-91.9.0-150000.150.38.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684035" comment="MozillaFirefox-devel-91.9.0-150000.150.38.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684036" comment="MozillaFirefox-translations-common-91.9.0-150000.150.38.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684037" comment="MozillaFirefox-translations-other-91.9.0-150000.150.38.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140528" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196490" ref_url="https://bugzilla.suse.com/1196490" source="BUGZILLA"/>
		<reference ref_id="1199132" ref_url="https://bugzilla.suse.com/1199132" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23308" ref_url="https://www.suse.com/security/cve/CVE-2022-23308/" source="CVE"/>
		<reference ref_id="CVE-2022-29824" ref_url="https://www.suse.com/security/cve/CVE-2022-29824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1750-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011098.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

- CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes (bsc#1196490).
- CVE-2022-29824: Fixed integer overflow that could have led to an out-of-bounds write in buf.c (xmlBuf*) and tree.c (xmlBuffer*) (bsc#1199132).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-19"/>
	<updated date="2022-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196490">SUSE bug 1196490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199132">SUSE bug 1199132</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-23308/">CVE-2022-23308</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29824/">CVE-2022-29824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009683590" comment="libxml2-2-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683446" comment="libxml2-2-32bit-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683591" comment="libxml2-devel-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683592" comment="libxml2-tools-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683593" comment="python2-libxml2-python-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683594" comment="python3-libxml2-python-2.9.7-150000.3.46.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140529" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1192953" ref_url="https://bugzilla.suse.com/1192953" source="BUGZILLA"/>
		<reference ref_id="1195786" ref_url="https://bugzilla.suse.com/1195786" source="BUGZILLA"/>
		<reference ref_id="1199459" ref_url="https://bugzilla.suse.com/1199459" source="BUGZILLA"/>
		<reference ref_id="1199470" ref_url="https://bugzilla.suse.com/1199470" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0071" ref_url="https://www.suse.com/security/cve/CVE-2021-0071/" source="CVE"/>
		<reference ref_id="CVE-2021-26312" ref_url="https://www.suse.com/security/cve/CVE-2021-26312/" source="CVE"/>
		<reference ref_id="CVE-2021-26339" ref_url="https://www.suse.com/security/cve/CVE-2021-26339/" source="CVE"/>
		<reference ref_id="CVE-2021-26342" ref_url="https://www.suse.com/security/cve/CVE-2021-26342/" source="CVE"/>
		<reference ref_id="CVE-2021-26347" ref_url="https://www.suse.com/security/cve/CVE-2021-26347/" source="CVE"/>
		<reference ref_id="CVE-2021-26348" ref_url="https://www.suse.com/security/cve/CVE-2021-26348/" source="CVE"/>
		<reference ref_id="CVE-2021-26349" ref_url="https://www.suse.com/security/cve/CVE-2021-26349/" source="CVE"/>
		<reference ref_id="CVE-2021-26350" ref_url="https://www.suse.com/security/cve/CVE-2021-26350/" source="CVE"/>
		<reference ref_id="CVE-2021-26364" ref_url="https://www.suse.com/security/cve/CVE-2021-26364/" source="CVE"/>
		<reference ref_id="CVE-2021-26372" ref_url="https://www.suse.com/security/cve/CVE-2021-26372/" source="CVE"/>
		<reference ref_id="CVE-2021-26373" ref_url="https://www.suse.com/security/cve/CVE-2021-26373/" source="CVE"/>
		<reference ref_id="CVE-2021-26375" ref_url="https://www.suse.com/security/cve/CVE-2021-26375/" source="CVE"/>
		<reference ref_id="CVE-2021-26376" ref_url="https://www.suse.com/security/cve/CVE-2021-26376/" source="CVE"/>
		<reference ref_id="CVE-2021-26378" ref_url="https://www.suse.com/security/cve/CVE-2021-26378/" source="CVE"/>
		<reference ref_id="CVE-2021-26388" ref_url="https://www.suse.com/security/cve/CVE-2021-26388/" source="CVE"/>
		<reference ref_id="CVE-2021-33139" ref_url="https://www.suse.com/security/cve/CVE-2021-33139/" source="CVE"/>
		<reference ref_id="CVE-2021-33155" ref_url="https://www.suse.com/security/cve/CVE-2021-33155/" source="CVE"/>
		<reference ref_id="CVE-2021-46744" ref_url="https://www.suse.com/security/cve/CVE-2021-46744/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011100.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

Update AMD ucode and SEV firmware

- CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
  CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
  CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
  CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, CVE-2021-46744,
  bsc#1199459, bsc#1199470)

Update Intel Bluetooth firmware (INTEL-SA-00604, bsc#1195786):

- CVE-2021-33139, CVE-2021-33155: Improper conditions check in the firmware for some Intel Wireless Bluetooth and Killer Bluetooth products may allow an authenticated user to potentially cause denial of service via adjacent access.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-19"/>
	<updated date="2022-05-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1192953">SUSE bug 1192953</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195786">SUSE bug 1195786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199459">SUSE bug 1199459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199470">SUSE bug 1199470</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0071/">CVE-2021-0071</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-26312/">CVE-2021-26312</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26339/">CVE-2021-26339</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-26342/">CVE-2021-26342</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26347/">CVE-2021-26347</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-26348/">CVE-2021-26348</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-26349/">CVE-2021-26349</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26350/">CVE-2021-26350</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26364/">CVE-2021-26364</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26372/">CVE-2021-26372</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26373/">CVE-2021-26373</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26375/">CVE-2021-26375</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26376/">CVE-2021-26376</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26378/">CVE-2021-26378</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26388/">CVE-2021-26388</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33139/">CVE-2021-33139</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33155/">CVE-2021-33155</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-46744/">CVE-2021-46744</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684024" comment="kernel-firmware-20200107-150100.3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684025" comment="ucode-amd-20200107-150100.3.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140530" version="1" class="patch">
	<metadata>
		<title>Security update for unbound (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1076963" ref_url="https://bugzilla.suse.com/1076963" source="BUGZILLA"/>
		<reference ref_id="1112009" ref_url="https://bugzilla.suse.com/1112009" source="BUGZILLA"/>
		<reference ref_id="1112033" ref_url="https://bugzilla.suse.com/1112033" source="BUGZILLA"/>
		<reference ref_id="1179191" ref_url="https://bugzilla.suse.com/1179191" source="BUGZILLA"/>
		<reference ref_id="1185382" ref_url="https://bugzilla.suse.com/1185382" source="BUGZILLA"/>
		<reference ref_id="1185383" ref_url="https://bugzilla.suse.com/1185383" source="BUGZILLA"/>
		<reference ref_id="1185384" ref_url="https://bugzilla.suse.com/1185384" source="BUGZILLA"/>
		<reference ref_id="1185385" ref_url="https://bugzilla.suse.com/1185385" source="BUGZILLA"/>
		<reference ref_id="1185386" ref_url="https://bugzilla.suse.com/1185386" source="BUGZILLA"/>
		<reference ref_id="1185387" ref_url="https://bugzilla.suse.com/1185387" source="BUGZILLA"/>
		<reference ref_id="1185388" ref_url="https://bugzilla.suse.com/1185388" source="BUGZILLA"/>
		<reference ref_id="1185389" ref_url="https://bugzilla.suse.com/1185389" source="BUGZILLA"/>
		<reference ref_id="1185390" ref_url="https://bugzilla.suse.com/1185390" source="BUGZILLA"/>
		<reference ref_id="1185391" ref_url="https://bugzilla.suse.com/1185391" source="BUGZILLA"/>
		<reference ref_id="1185392" ref_url="https://bugzilla.suse.com/1185392" source="BUGZILLA"/>
		<reference ref_id="1185393" ref_url="https://bugzilla.suse.com/1185393" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-25031" ref_url="https://www.suse.com/security/cve/CVE-2019-25031/" source="CVE"/>
		<reference ref_id="CVE-2019-25032" ref_url="https://www.suse.com/security/cve/CVE-2019-25032/" source="CVE"/>
		<reference ref_id="CVE-2019-25033" ref_url="https://www.suse.com/security/cve/CVE-2019-25033/" source="CVE"/>
		<reference ref_id="CVE-2019-25034" ref_url="https://www.suse.com/security/cve/CVE-2019-25034/" source="CVE"/>
		<reference ref_id="CVE-2019-25035" ref_url="https://www.suse.com/security/cve/CVE-2019-25035/" source="CVE"/>
		<reference ref_id="CVE-2019-25036" ref_url="https://www.suse.com/security/cve/CVE-2019-25036/" source="CVE"/>
		<reference ref_id="CVE-2019-25037" ref_url="https://www.suse.com/security/cve/CVE-2019-25037/" source="CVE"/>
		<reference ref_id="CVE-2019-25038" ref_url="https://www.suse.com/security/cve/CVE-2019-25038/" source="CVE"/>
		<reference ref_id="CVE-2019-25039" ref_url="https://www.suse.com/security/cve/CVE-2019-25039/" source="CVE"/>
		<reference ref_id="CVE-2019-25040" ref_url="https://www.suse.com/security/cve/CVE-2019-25040/" source="CVE"/>
		<reference ref_id="CVE-2019-25041" ref_url="https://www.suse.com/security/cve/CVE-2019-25041/" source="CVE"/>
		<reference ref_id="CVE-2019-25042" ref_url="https://www.suse.com/security/cve/CVE-2019-25042/" source="CVE"/>
		<reference ref_id="CVE-2020-28935" ref_url="https://www.suse.com/security/cve/CVE-2020-28935/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<description>
This update for unbound fixes the following issues:

- CVE-2019-25031: Fixed configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack (bsc#1185382).
- CVE-2019-25032: Fixed integer overflow in the regional allocator via regional_alloc (bsc#1185383).
- CVE-2019-25033: Fixed integer overflow in the regional allocator via the ALIGN_UP macro (bsc#1185384).
- CVE-2019-25034: Fixed integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write (bsc#1185385).
- CVE-2019-25035: Fixed out-of-bounds write in sldns_bget_token_par (bsc#1185386).
- CVE-2019-25036: Fixed assertion failure and denial of service in synth_cname (bsc#1185387).
- CVE-2019-25037: Fixed assertion failure and denial of service in dname_pkt_copy via an invalid packet (bsc#1185388).
- CVE-2019-25038: Fixed integer overflow in a size calculation in dnscrypt/dnscrypt.c (bsc#1185389).
- CVE-2019-25039: Fixed integer overflow in a size calculation in respip/respip.c (bsc#1185390).
- CVE-2019-25040: Fixed infinite loop via a compressed name in dname_pkt_copy (bsc#1185391).
- CVE-2019-25041: Fixed assertion failure via a compressed name in dname_pkt_copy (bsc#1185392).
- CVE-2019-25042: Fixed out-of-bounds write via a compressed name in rdata_copy (bsc#1185393).
- CVE-2020-28935: Fixed symbolic link traversal when writing PID file (bsc#1179191).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076963">SUSE bug 1076963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112009">SUSE bug 1112009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112033">SUSE bug 1112033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179191">SUSE bug 1179191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185382">SUSE bug 1185382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185383">SUSE bug 1185383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185384">SUSE bug 1185384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185385">SUSE bug 1185385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185386">SUSE bug 1185386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185387">SUSE bug 1185387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185388">SUSE bug 1185388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185389">SUSE bug 1185389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185390">SUSE bug 1185390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185391">SUSE bug 1185391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185392">SUSE bug 1185392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185393">SUSE bug 1185393</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-25031/">CVE-2019-25031</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25032/">CVE-2019-25032</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25033/">CVE-2019-25033</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-25034/">CVE-2019-25034</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-25035/">CVE-2019-25035</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25036/">CVE-2019-25036</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25037/">CVE-2019-25037</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25038/">CVE-2019-25038</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25039/">CVE-2019-25039</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25040/">CVE-2019-25040</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25041/">CVE-2019-25041</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-25042/">CVE-2019-25042</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28935/">CVE-2020-28935</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664318" comment="libunbound2-1.6.8-10.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664319" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664320" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140531" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194251" ref_url="https://bugzilla.suse.com/1194251" source="BUGZILLA"/>
		<reference ref_id="1194362" ref_url="https://bugzilla.suse.com/1194362" source="BUGZILLA"/>
		<reference ref_id="1194474" ref_url="https://bugzilla.suse.com/1194474" source="BUGZILLA"/>
		<reference ref_id="1194476" ref_url="https://bugzilla.suse.com/1194476" source="BUGZILLA"/>
		<reference ref_id="1194477" ref_url="https://bugzilla.suse.com/1194477" source="BUGZILLA"/>
		<reference ref_id="1194478" ref_url="https://bugzilla.suse.com/1194478" source="BUGZILLA"/>
		<reference ref_id="1194479" ref_url="https://bugzilla.suse.com/1194479" source="BUGZILLA"/>
		<reference ref_id="1194480" ref_url="https://bugzilla.suse.com/1194480" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-45960" ref_url="https://www.suse.com/security/cve/CVE-2021-45960/" source="CVE"/>
		<reference ref_id="CVE-2021-46143" ref_url="https://www.suse.com/security/cve/CVE-2021-46143/" source="CVE"/>
		<reference ref_id="CVE-2022-22822" ref_url="https://www.suse.com/security/cve/CVE-2022-22822/" source="CVE"/>
		<reference ref_id="CVE-2022-22823" ref_url="https://www.suse.com/security/cve/CVE-2022-22823/" source="CVE"/>
		<reference ref_id="CVE-2022-22824" ref_url="https://www.suse.com/security/cve/CVE-2022-22824/" source="CVE"/>
		<reference ref_id="CVE-2022-22825" ref_url="https://www.suse.com/security/cve/CVE-2022-22825/" source="CVE"/>
		<reference ref_id="CVE-2022-22826" ref_url="https://www.suse.com/security/cve/CVE-2022-22826/" source="CVE"/>
		<reference ref_id="CVE-2022-22827" ref_url="https://www.suse.com/security/cve/CVE-2022-22827/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010063.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:
  
- CVE-2021-45960: Fixed left shift in the storeAtts function in xmlparse.c that can lead to realloc misbehavior (bsc#1194251).
- CVE-2021-46143: Fixed integer overflow in m_groupSize in doProlog (bsc#1194362).
- CVE-2022-22822: Fixed integer overflow in addBinding in xmlparse.c (bsc#1194474).
- CVE-2022-22823: Fixed integer overflow in build_model in xmlparse.c (bsc#1194476).
- CVE-2022-22824: Fixed integer overflow in defineAttribute in xmlparse.c (bsc#1194477).
- CVE-2022-22825: Fixed integer overflow in lookup in xmlparse.c (bsc#1194478).
- CVE-2022-22826: Fixed integer overflow in nextScaffoldPart in xmlparse.c (bsc#1194479).
- CVE-2022-22827: Fixed integer overflow in storeAtts in xmlparse.c (bsc#1194480).  
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194251">SUSE bug 1194251</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194362">SUSE bug 1194362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194474">SUSE bug 1194474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194476">SUSE bug 1194476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194477">SUSE bug 1194477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194478">SUSE bug 1194478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194479">SUSE bug 1194479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194480">SUSE bug 1194480</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-45960/">CVE-2021-45960</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-46143/">CVE-2021-46143</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22822/">CVE-2022-22822</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22823/">CVE-2022-22823</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22824/">CVE-2022-22824</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22825/">CVE-2022-22825</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22826/">CVE-2022-22826</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22827/">CVE-2022-22827</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664091" comment="expat-2.2.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664092" comment="libexpat-devel-2.2.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664093" comment="libexpat1-2.2.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664063" comment="libexpat1-32bit-2.2.5-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140532" version="1" class="patch">
	<metadata>
		<title>Security update for rsyslog (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1199061" ref_url="https://bugzilla.suse.com/1199061" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24903" ref_url="https://www.suse.com/security/cve/CVE-2022-24903/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011136.html" source="SUSE-SU"/>
		<description>
This update for rsyslog fixes the following issues:

- CVE-2022-24903: Fixed potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-23"/>
	<updated date="2022-05-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199061">SUSE bug 1199061</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24903/">CVE-2022-24903</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009682484" comment="rsyslog-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682485" comment="rsyslog-module-gssapi-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682486" comment="rsyslog-module-gtls-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682487" comment="rsyslog-module-mmnormalize-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682488" comment="rsyslog-module-mysql-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682489" comment="rsyslog-module-pgsql-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682490" comment="rsyslog-module-relp-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682491" comment="rsyslog-module-snmp-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682492" comment="rsyslog-module-udpspoof-8.33.1-150000.3.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140533" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1199768" ref_url="https://bugzilla.suse.com/1199768" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1529" ref_url="https://www.suse.com/security/cve/CVE-2022-1529/" source="CVE"/>
		<reference ref_id="CVE-2022-1802" ref_url="https://www.suse.com/security/cve/CVE-2022-1802/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011133.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.9.1 ESR - MFSA 2022-19 (bsc#1199768):

- CVE-2022-1802: Prototype pollution in Top-Level Await implementation
- CVE-2022-1529: Untrusted input used in JavaScript object indexing, leading to prototype pollution
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-23"/>
	<updated date="2022-05-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199768">SUSE bug 1199768</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1529/">CVE-2022-1529</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1802/">CVE-2022-1802</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693216" comment="MozillaFirefox-91.9.1-150000.150.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693217" comment="MozillaFirefox-devel-91.9.1-150000.150.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693218" comment="MozillaFirefox-translations-common-91.9.1-150000.150.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693219" comment="MozillaFirefox-translations-other-91.9.1-150000.150.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140534" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194019" ref_url="https://bugzilla.suse.com/1194019" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-8518" ref_url="https://www.suse.com/security/cve/CVE-2018-8518/" source="CVE"/>
		<reference ref_id="CVE-2018-8523" ref_url="https://www.suse.com/security/cve/CVE-2018-8523/" source="CVE"/>
		<reference ref_id="CVE-2019-8766" ref_url="https://www.suse.com/security/cve/CVE-2019-8766/" source="CVE"/>
		<reference ref_id="CVE-2019-8768" ref_url="https://www.suse.com/security/cve/CVE-2019-8768/" source="CVE"/>
		<reference ref_id="CVE-2019-8782" ref_url="https://www.suse.com/security/cve/CVE-2019-8782/" source="CVE"/>
		<reference ref_id="CVE-2019-8808" ref_url="https://www.suse.com/security/cve/CVE-2019-8808/" source="CVE"/>
		<reference ref_id="CVE-2019-8815" ref_url="https://www.suse.com/security/cve/CVE-2019-8815/" source="CVE"/>
		<reference ref_id="CVE-2020-10018" ref_url="https://www.suse.com/security/cve/CVE-2020-10018/" source="CVE"/>
		<reference ref_id="CVE-2020-13753" ref_url="https://www.suse.com/security/cve/CVE-2020-13753/" source="CVE"/>
		<reference ref_id="CVE-2020-27918" ref_url="https://www.suse.com/security/cve/CVE-2020-27918/" source="CVE"/>
		<reference ref_id="CVE-2020-29623" ref_url="https://www.suse.com/security/cve/CVE-2020-29623/" source="CVE"/>
		<reference ref_id="CVE-2020-3885" ref_url="https://www.suse.com/security/cve/CVE-2020-3885/" source="CVE"/>
		<reference ref_id="CVE-2020-3894" ref_url="https://www.suse.com/security/cve/CVE-2020-3894/" source="CVE"/>
		<reference ref_id="CVE-2020-3895" ref_url="https://www.suse.com/security/cve/CVE-2020-3895/" source="CVE"/>
		<reference ref_id="CVE-2020-3897" ref_url="https://www.suse.com/security/cve/CVE-2020-3897/" source="CVE"/>
		<reference ref_id="CVE-2020-3900" ref_url="https://www.suse.com/security/cve/CVE-2020-3900/" source="CVE"/>
		<reference ref_id="CVE-2020-3901" ref_url="https://www.suse.com/security/cve/CVE-2020-3901/" source="CVE"/>
		<reference ref_id="CVE-2020-3902" ref_url="https://www.suse.com/security/cve/CVE-2020-3902/" source="CVE"/>
		<reference ref_id="CVE-2020-9802" ref_url="https://www.suse.com/security/cve/CVE-2020-9802/" source="CVE"/>
		<reference ref_id="CVE-2020-9803" ref_url="https://www.suse.com/security/cve/CVE-2020-9803/" source="CVE"/>
		<reference ref_id="CVE-2020-9805" ref_url="https://www.suse.com/security/cve/CVE-2020-9805/" source="CVE"/>
		<reference ref_id="CVE-2020-9947" ref_url="https://www.suse.com/security/cve/CVE-2020-9947/" source="CVE"/>
		<reference ref_id="CVE-2020-9948" ref_url="https://www.suse.com/security/cve/CVE-2020-9948/" source="CVE"/>
		<reference ref_id="CVE-2020-9951" ref_url="https://www.suse.com/security/cve/CVE-2020-9951/" source="CVE"/>
		<reference ref_id="CVE-2020-9952" ref_url="https://www.suse.com/security/cve/CVE-2020-9952/" source="CVE"/>
		<reference ref_id="CVE-2021-1765" ref_url="https://www.suse.com/security/cve/CVE-2021-1765/" source="CVE"/>
		<reference ref_id="CVE-2021-1788" ref_url="https://www.suse.com/security/cve/CVE-2021-1788/" source="CVE"/>
		<reference ref_id="CVE-2021-1817" ref_url="https://www.suse.com/security/cve/CVE-2021-1817/" source="CVE"/>
		<reference ref_id="CVE-2021-1820" ref_url="https://www.suse.com/security/cve/CVE-2021-1820/" source="CVE"/>
		<reference ref_id="CVE-2021-1825" ref_url="https://www.suse.com/security/cve/CVE-2021-1825/" source="CVE"/>
		<reference ref_id="CVE-2021-1826" ref_url="https://www.suse.com/security/cve/CVE-2021-1826/" source="CVE"/>
		<reference ref_id="CVE-2021-1844" ref_url="https://www.suse.com/security/cve/CVE-2021-1844/" source="CVE"/>
		<reference ref_id="CVE-2021-1871" ref_url="https://www.suse.com/security/cve/CVE-2021-1871/" source="CVE"/>
		<reference ref_id="CVE-2021-30661" ref_url="https://www.suse.com/security/cve/CVE-2021-30661/" source="CVE"/>
		<reference ref_id="CVE-2021-30666" ref_url="https://www.suse.com/security/cve/CVE-2021-30666/" source="CVE"/>
		<reference ref_id="CVE-2021-30682" ref_url="https://www.suse.com/security/cve/CVE-2021-30682/" source="CVE"/>
		<reference ref_id="CVE-2021-30761" ref_url="https://www.suse.com/security/cve/CVE-2021-30761/" source="CVE"/>
		<reference ref_id="CVE-2021-30762" ref_url="https://www.suse.com/security/cve/CVE-2021-30762/" source="CVE"/>
		<reference ref_id="CVE-2021-30809" ref_url="https://www.suse.com/security/cve/CVE-2021-30809/" source="CVE"/>
		<reference ref_id="CVE-2021-30818" ref_url="https://www.suse.com/security/cve/CVE-2021-30818/" source="CVE"/>
		<reference ref_id="CVE-2021-30823" ref_url="https://www.suse.com/security/cve/CVE-2021-30823/" source="CVE"/>
		<reference ref_id="CVE-2021-30836" ref_url="https://www.suse.com/security/cve/CVE-2021-30836/" source="CVE"/>
		<reference ref_id="CVE-2021-30846" ref_url="https://www.suse.com/security/cve/CVE-2021-30846/" source="CVE"/>
		<reference ref_id="CVE-2021-30848" ref_url="https://www.suse.com/security/cve/CVE-2021-30848/" source="CVE"/>
		<reference ref_id="CVE-2021-30849" ref_url="https://www.suse.com/security/cve/CVE-2021-30849/" source="CVE"/>
		<reference ref_id="CVE-2021-30851" ref_url="https://www.suse.com/security/cve/CVE-2021-30851/" source="CVE"/>
		<reference ref_id="CVE-2021-30858" ref_url="https://www.suse.com/security/cve/CVE-2021-30858/" source="CVE"/>
		<reference ref_id="CVE-2021-30884" ref_url="https://www.suse.com/security/cve/CVE-2021-30884/" source="CVE"/>
		<reference ref_id="CVE-2021-30887" ref_url="https://www.suse.com/security/cve/CVE-2021-30887/" source="CVE"/>
		<reference ref_id="CVE-2021-30888" ref_url="https://www.suse.com/security/cve/CVE-2021-30888/" source="CVE"/>
		<reference ref_id="CVE-2021-30889" ref_url="https://www.suse.com/security/cve/CVE-2021-30889/" source="CVE"/>
		<reference ref_id="CVE-2021-30890" ref_url="https://www.suse.com/security/cve/CVE-2021-30890/" source="CVE"/>
		<reference ref_id="CVE-2021-30897" ref_url="https://www.suse.com/security/cve/CVE-2021-30897/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.34.3 (bsc#1194019).
- CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content.
- CVE-2021-30890: Fixed logic issue allowing universal cross site scripting when processing maliciously crafted web content.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194019">SUSE bug 1194019</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-8518/">CVE-2018-8518</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2018-8523/">CVE-2018-8523</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8766/">CVE-2019-8766</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8768/">CVE-2019-8768</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8782/">CVE-2019-8782</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8808/">CVE-2019-8808</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8815/">CVE-2019-8815</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10018/">CVE-2020-10018</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13753/">CVE-2020-13753</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27918/">CVE-2020-27918</cve>
	<cve impact="important" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29623/">CVE-2020-29623</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-3885/">CVE-2020-3885</cve>
	<cve impact="important" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3894/">CVE-2020-3894</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3895/">CVE-2020-3895</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3897/">CVE-2020-3897</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3900/">CVE-2020-3900</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3901/">CVE-2020-3901</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-3902/">CVE-2020-3902</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9802/">CVE-2020-9802</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9803/">CVE-2020-9803</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9805/">CVE-2020-9805</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9947/">CVE-2020-9947</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9948/">CVE-2020-9948</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9951/">CVE-2020-9951</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-9952/">CVE-2020-9952</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1765/">CVE-2021-1765</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1788/">CVE-2021-1788</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1817/">CVE-2021-1817</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-1820/">CVE-2021-1820</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-1825/">CVE-2021-1825</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-1826/">CVE-2021-1826</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1844/">CVE-2021-1844</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1871/">CVE-2021-1871</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30661/">CVE-2021-30661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30666/">CVE-2021-30666</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30682/">CVE-2021-30682</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30761/">CVE-2021-30761</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30762/">CVE-2021-30762</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30809/">CVE-2021-30809</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30818/">CVE-2021-30818</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30823/">CVE-2021-30823</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30836/">CVE-2021-30836</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30846/">CVE-2021-30846</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30848/">CVE-2021-30848</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30849/">CVE-2021-30849</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30851/">CVE-2021-30851</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30858/">CVE-2021-30858</cve>
	<cve impact="important" cvss3="4.7/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30884/">CVE-2021-30884</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30887/">CVE-2021-30887</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30888/">CVE-2021-30888</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30889/">CVE-2021-30889</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30890/">CVE-2021-30890</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30897/">CVE-2021-30897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664177" comment="libjavascriptcoregtk-4_0-18-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664178" comment="libwebkit2gtk-4_0-37-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664160" comment="libwebkit2gtk3-lang-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664179" comment="typelib-1_0-JavaScriptCore-4_0-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664180" comment="typelib-1_0-WebKit2-4_0-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664181" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664182" comment="webkit2gtk-4_0-injected-bundles-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664183" comment="webkit2gtk3-devel-2.34.3-3.92.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140535" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1191157" ref_url="https://bugzilla.suse.com/1191157" source="BUGZILLA"/>
		<reference ref_id="1197004" ref_url="https://bugzilla.suse.com/1197004" source="BUGZILLA"/>
		<reference ref_id="1199240" ref_url="https://bugzilla.suse.com/1199240" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29155" ref_url="https://www.suse.com/security/cve/CVE-2022-29155/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011147.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

Security:
- CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).

Bugfixes:
- allow specification of max/min TLS version with TLS1.3 (bsc#1191157)
- libldap was able to be out of step with openldap in some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their related release versions. (bsc#1197004)
- restore CLDAP functionality in CLI tools (jsc#PM-3288)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-24"/>
	<updated date="2022-05-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191157">SUSE bug 1191157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197004">SUSE bug 1197004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199240">SUSE bug 1199240</bugzilla>
	<cve impact="critical" cvss3="9.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29155/">CVE-2022-29155</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009683582" comment="libldap-2_4-2-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683554" comment="libldap-2_4-2-32bit-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683555" comment="libldap-data-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683583" comment="openldap2-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683584" comment="openldap2-back-meta-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683585" comment="openldap2-back-perl-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683586" comment="openldap2-client-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683587" comment="openldap2-devel-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683558" comment="openldap2-devel-32bit-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683588" comment="openldap2-devel-static-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683589" comment="openldap2-ppolicy-check-password-1.2-150000.9.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140536" version="1" class="patch">
	<metadata>
		<title>Security update for json-c (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1171479" ref_url="https://bugzilla.suse.com/1171479" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12762" ref_url="https://www.suse.com/security/cve/CVE-2020-12762/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010072.html" source="SUSE-SU"/>
		<description>
This update for json-c fixes the following issues:

- CVE-2020-12762: Fixed integer overflow and out-of-bounds write. (bsc#1171479)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171479">SUSE bug 1171479</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12762/">CVE-2020-12762</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664184" comment="libjson-c-devel-0.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664185" comment="libjson-c3-0.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664150" comment="libjson-c3-32bit-0.13-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140537" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1199474" ref_url="https://bugzilla.suse.com/1199474" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26691" ref_url="https://www.suse.com/security/cve/CVE-2022-26691/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011166.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:

- CVE-2022-26691: Fixed an authentication bypass and code execution vulnerability (bsc#1199474)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-26"/>
	<updated date="2022-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199474">SUSE bug 1199474</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26691/">CVE-2022-26691</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693220" comment="cups-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693221" comment="cups-client-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693222" comment="cups-config-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693223" comment="cups-ddk-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693224" comment="cups-devel-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693225" comment="libcups2-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684254" comment="libcups2-32bit-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693226" comment="libcupscgi1-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693227" comment="libcupsimage2-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693228" comment="libcupsmime1-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693229" comment="libcupsppdc1-2.2.7-150000.3.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140538" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1195964" ref_url="https://bugzilla.suse.com/1195964" source="BUGZILLA"/>
		<reference ref_id="1195965" ref_url="https://bugzilla.suse.com/1195965" source="BUGZILLA"/>
		<reference ref_id="1197066" ref_url="https://bugzilla.suse.com/1197066" source="BUGZILLA"/>
		<reference ref_id="1197068" ref_url="https://bugzilla.suse.com/1197068" source="BUGZILLA"/>
		<reference ref_id="1197072" ref_url="https://bugzilla.suse.com/1197072" source="BUGZILLA"/>
		<reference ref_id="1197073" ref_url="https://bugzilla.suse.com/1197073" source="BUGZILLA"/>
		<reference ref_id="1197074" ref_url="https://bugzilla.suse.com/1197074" source="BUGZILLA"/>
		<reference ref_id="1197631" ref_url="https://bugzilla.suse.com/1197631" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0561" ref_url="https://www.suse.com/security/cve/CVE-2022-0561/" source="CVE"/>
		<reference ref_id="CVE-2022-0562" ref_url="https://www.suse.com/security/cve/CVE-2022-0562/" source="CVE"/>
		<reference ref_id="CVE-2022-0865" ref_url="https://www.suse.com/security/cve/CVE-2022-0865/" source="CVE"/>
		<reference ref_id="CVE-2022-0891" ref_url="https://www.suse.com/security/cve/CVE-2022-0891/" source="CVE"/>
		<reference ref_id="CVE-2022-0908" ref_url="https://www.suse.com/security/cve/CVE-2022-0908/" source="CVE"/>
		<reference ref_id="CVE-2022-0909" ref_url="https://www.suse.com/security/cve/CVE-2022-0909/" source="CVE"/>
		<reference ref_id="CVE-2022-0924" ref_url="https://www.suse.com/security/cve/CVE-2022-0924/" source="CVE"/>
		<reference ref_id="CVE-2022-1056" ref_url="https://www.suse.com/security/cve/CVE-2022-1056/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011182.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-0561: Fixed null source pointer passed as an argument to memcpy() within TIFFFetchStripThing() in tif_dirread.c (bsc#1195964).
- CVE-2022-0562: Fixed null source pointer passed as an argument to memcpy() within TIFFReadDirectory() in tif_dirread.c (bsc#1195965).
- CVE-2022-0865: Fixed assertion failure in TIFFReadAndRealloc (bsc#1197066).
- CVE-2022-0909: Fixed divide by zero error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197072).
- CVE-2022-0924: Fixed out-of-bounds read error in tiffcp that could have led to a denial-of-service via a crafted tiff file (bsc#1197073).
- CVE-2022-0908: Fixed null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() (bsc#1197074).
- CVE-2022-1056: Fixed out-of-bounds read error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197631).
- CVE-2022-0891: Fixed heap buffer overflow in extractImageSection (bsc#1197068).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-30"/>
	<updated date="2022-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195964">SUSE bug 1195964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195965">SUSE bug 1195965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197066">SUSE bug 1197066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197068">SUSE bug 1197068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197072">SUSE bug 1197072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197073">SUSE bug 1197073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197074">SUSE bug 1197074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197631">SUSE bug 1197631</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0561/">CVE-2022-0561</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0562/">CVE-2022-0562</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0865/">CVE-2022-0865</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0891/">CVE-2022-0891</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0908/">CVE-2022-0908</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0909/">CVE-2022-0909</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0924/">CVE-2022-0924</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1056/">CVE-2022-1056</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693230" comment="libtiff-devel-4.0.9-150000.45.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693231" comment="libtiff5-4.0.9-150000.45.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684380" comment="libtiff5-32bit-4.0.9-150000.45.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140539" version="1" class="patch">
	<metadata>
		<title>Security update for pcre2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1199232" ref_url="https://bugzilla.suse.com/1199232" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1586" ref_url="https://www.suse.com/security/cve/CVE-2022-1586/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011183.html" source="SUSE-SU"/>
		<description>
This update for pcre2 fixes the following issues:

- CVE-2022-1586: Fixed out-of-bounds read via missing Unicode property matching issue in JIT compiled regular expressions (bsc#1199232).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-30"/>
	<updated date="2022-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199232">SUSE bug 1199232</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1586/">CVE-2022-1586</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693232" comment="libpcre2-16-0-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693233" comment="libpcre2-32-0-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693234" comment="libpcre2-8-0-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693235" comment="libpcre2-posix2-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693236" comment="pcre2-devel-10.31-150000.3.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140540" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1199475" ref_url="https://bugzilla.suse.com/1199475" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1552" ref_url="https://www.suse.com/security/cve/CVE-2022-1552/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011202.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:
 
- CVE-2022-1552: Confine additional operations within 'security restricted operation' sandboxes (bsc#1199475).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-31"/>
	<updated date="2022-05-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199475">SUSE bug 1199475</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1552/">CVE-2022-1552</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693237" comment="postgresql10-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693238" comment="postgresql10-contrib-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693239" comment="postgresql10-devel-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692663" comment="postgresql10-docs-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693240" comment="postgresql10-plperl-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693241" comment="postgresql10-plpython-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693242" comment="postgresql10-pltcl-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693243" comment="postgresql10-server-10.21-150100.8.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140541" version="1" class="patch">
	<metadata>
		<title>Security update for polkit (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194568" ref_url="https://bugzilla.suse.com/1194568" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4034" ref_url="https://www.suse.com/security/cve/CVE-2021-4034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010075.html" source="SUSE-SU"/>
		<description>
This update for polkit fixes the following issues:

- CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194568">SUSE bug 1194568</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4034/">CVE-2021-4034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664593" comment="libpolkit0-0.114-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664594" comment="polkit-0.114-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664595" comment="polkit-devel-0.114-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664596" comment="typelib-1_0-Polkit-1_0-0.114-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140542" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1200027" ref_url="https://bugzilla.suse.com/1200027" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31736" ref_url="https://www.suse.com/security/cve/CVE-2022-31736/" source="CVE"/>
		<reference ref_id="CVE-2022-31737" ref_url="https://www.suse.com/security/cve/CVE-2022-31737/" source="CVE"/>
		<reference ref_id="CVE-2022-31738" ref_url="https://www.suse.com/security/cve/CVE-2022-31738/" source="CVE"/>
		<reference ref_id="CVE-2022-31739" ref_url="https://www.suse.com/security/cve/CVE-2022-31739/" source="CVE"/>
		<reference ref_id="CVE-2022-31740" ref_url="https://www.suse.com/security/cve/CVE-2022-31740/" source="CVE"/>
		<reference ref_id="CVE-2022-31741" ref_url="https://www.suse.com/security/cve/CVE-2022-31741/" source="CVE"/>
		<reference ref_id="CVE-2022-31742" ref_url="https://www.suse.com/security/cve/CVE-2022-31742/" source="CVE"/>
		<reference ref_id="CVE-2022-31747" ref_url="https://www.suse.com/security/cve/CVE-2022-31747/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011229.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.10.0 ESR (MFSA 2022-21)(bsc#1200027)

- CVE-2022-31736: Cross-Origin resource's length leaked
- CVE-2022-31737: Heap buffer overflow in WebGL
- CVE-2022-31738: Browser window spoof using fullscreen mode
- CVE-2022-31739: Attacker-influenced path traversal when saving downloaded files
- CVE-2022-31740: Register allocation problem in WASM on arm64
- CVE-2022-31741: Uninitialized variable leads to invalid memory read
- CVE-2022-31742: Querying a WebAuthn token with a large number of allowCredential entries may have leaked cross-origin information
- CVE-2022-31747: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-02"/>
	<updated date="2022-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200027">SUSE bug 1200027</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31736/">CVE-2022-31736</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31737/">CVE-2022-31737</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31738/">CVE-2022-31738</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31739/">CVE-2022-31739</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31740/">CVE-2022-31740</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31741/">CVE-2022-31741</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-31742/">CVE-2022-31742</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31747/">CVE-2022-31747</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693244" comment="MozillaFirefox-91.10.0-150000.150.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693245" comment="MozillaFirefox-devel-91.10.0-150000.150.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693246" comment="MozillaFirefox-translations-common-91.10.0-150000.150.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693247" comment="MozillaFirefox-translations-other-91.10.0-150000.150.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140543" version="1" class="patch">
	<metadata>
		<title>Security update for fribidi (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196147" ref_url="https://bugzilla.suse.com/1196147" source="BUGZILLA"/>
		<reference ref_id="1196148" ref_url="https://bugzilla.suse.com/1196148" source="BUGZILLA"/>
		<reference ref_id="1196150" ref_url="https://bugzilla.suse.com/1196150" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25308" ref_url="https://www.suse.com/security/cve/CVE-2022-25308/" source="CVE"/>
		<reference ref_id="CVE-2022-25309" ref_url="https://www.suse.com/security/cve/CVE-2022-25309/" source="CVE"/>
		<reference ref_id="CVE-2022-25310" ref_url="https://www.suse.com/security/cve/CVE-2022-25310/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2029-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011256.html" source="SUSE-SU"/>
		<description>
This update for fribidi fixes the following issues:

- CVE-2022-25308: Fixed stack out of bounds read (bsc#1196147).
- CVE-2022-25309: Fixed heap-buffer-overflow in fribidi_cap_rtl_to_unicode (bsc#1196148).
- CVE-2022-25310: Fixed NULL pointer dereference in fribidi_remove_bidi_marks (bsc#1196150).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-09"/>
	<updated date="2022-06-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196147">SUSE bug 1196147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196148">SUSE bug 1196148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196150">SUSE bug 1196150</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-25308/">CVE-2022-25308</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-25309/">CVE-2022-25309</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-25310/">CVE-2022-25310</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693248" comment="fribidi-0.19.6-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693249" comment="fribidi-devel-0.19.6-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693250" comment="libfribidi0-0.19.6-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692738" comment="libfribidi0-32bit-0.19.6-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140544" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1199287" ref_url="https://bugzilla.suse.com/1199287" source="BUGZILLA"/>
		<reference ref_id="1200106" ref_url="https://bugzilla.suse.com/1200106" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26700" ref_url="https://www.suse.com/security/cve/CVE-2022-26700/" source="CVE"/>
		<reference ref_id="CVE-2022-26709" ref_url="https://www.suse.com/security/cve/CVE-2022-26709/" source="CVE"/>
		<reference ref_id="CVE-2022-26716" ref_url="https://www.suse.com/security/cve/CVE-2022-26716/" source="CVE"/>
		<reference ref_id="CVE-2022-26717" ref_url="https://www.suse.com/security/cve/CVE-2022-26717/" source="CVE"/>
		<reference ref_id="CVE-2022-26719" ref_url="https://www.suse.com/security/cve/CVE-2022-26719/" source="CVE"/>
		<reference ref_id="CVE-2022-30293" ref_url="https://www.suse.com/security/cve/CVE-2022-30293/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011254.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.36.3 (bsc#1200106)

- CVE-2022-30293: Fixed heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer (bsc#1199287).
- CVE-2022-26700: Fixed memory corruption issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26709: Fixed use after free issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26716: Fixed use after free issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26717: Fixed memory corruption issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26719: Fixed memory corruption issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-09"/>
	<updated date="2022-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199287">SUSE bug 1199287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200106">SUSE bug 1200106</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26700/">CVE-2022-26700</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26709/">CVE-2022-26709</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26716/">CVE-2022-26716</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26717/">CVE-2022-26717</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26719/">CVE-2022-26719</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-30293/">CVE-2022-30293</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693251" comment="libjavascriptcoregtk-4_0-18-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693252" comment="libwebkit2gtk-4_0-37-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692495" comment="libwebkit2gtk3-lang-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693253" comment="typelib-1_0-JavaScriptCore-4_0-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693254" comment="typelib-1_0-WebKit2-4_0-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693255" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693256" comment="webkit2gtk-4_0-injected-bundles-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693257" comment="webkit2gtk3-devel-2.36.3-150000.3.103.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140545" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1191184" ref_url="https://bugzilla.suse.com/1191184" source="BUGZILLA"/>
		<reference ref_id="1191185" ref_url="https://bugzilla.suse.com/1191185" source="BUGZILLA"/>
		<reference ref_id="1191186" ref_url="https://bugzilla.suse.com/1191186" source="BUGZILLA"/>
		<reference ref_id="1193282" ref_url="https://bugzilla.suse.com/1193282" source="BUGZILLA"/>
		<reference ref_id="1198460" ref_url="https://bugzilla.suse.com/1198460" source="BUGZILLA"/>
		<reference ref_id="1198493" ref_url="https://bugzilla.suse.com/1198493" source="BUGZILLA"/>
		<reference ref_id="1198496" ref_url="https://bugzilla.suse.com/1198496" source="BUGZILLA"/>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3695" ref_url="https://www.suse.com/security/cve/CVE-2021-3695/" source="CVE"/>
		<reference ref_id="CVE-2021-3696" ref_url="https://www.suse.com/security/cve/CVE-2021-3696/" source="CVE"/>
		<reference ref_id="CVE-2021-3697" ref_url="https://www.suse.com/security/cve/CVE-2021-3697/" source="CVE"/>
		<reference ref_id="CVE-2022-28733" ref_url="https://www.suse.com/security/cve/CVE-2022-28733/" source="CVE"/>
		<reference ref_id="CVE-2022-28734" ref_url="https://www.suse.com/security/cve/CVE-2022-28734/" source="CVE"/>
		<reference ref_id="CVE-2022-28736" ref_url="https://www.suse.com/security/cve/CVE-2022-28736/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011260.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

Security fixes and hardenings for Boothole 3 / Boothole 2022 (bsc#1198581)

- CVE-2021-3695: Fixed that a crafted PNG grayscale image could lead to out-of-bounds write in heap (bsc#1191184)
- CVE-2021-3696: Fixed that a crafted PNG image could lead to out-of-bound write during huffman table handling (bsc#1191185)
- CVE-2021-3697: Fixed that a crafted JPEG image could lead to buffer underflow write in the heap (bsc#1191186)
- CVE-2022-28733: Fixed fragmentation math in net/ip (bsc#1198460)
- CVE-2022-28734: Fixed an out-of-bound write for split http headers (bsc#1198493)
- CVE-2022-28736: Fixed a use-after-free in chainloader command (bsc#1198496)
- Update SBAT security contact (bsc#1193282)
- Bump grub's SBAT generation to 2
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-10"/>
	<updated date="2022-06-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191184">SUSE bug 1191184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191185">SUSE bug 1191185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191186">SUSE bug 1191186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193282">SUSE bug 1193282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198460">SUSE bug 1198460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198493">SUSE bug 1198493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198496">SUSE bug 1198496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3695/">CVE-2021-3695</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3696/">CVE-2021-3696</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3697/">CVE-2021-3697</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28733/">CVE-2022-28733</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-28734/">CVE-2022-28734</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28736/">CVE-2022-28736</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693258" comment="grub2-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692741" comment="grub2-i386-pc-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692742" comment="grub2-snapper-plugin-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692743" comment="grub2-systemd-sleep-plugin-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692744" comment="grub2-x86_64-efi-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692745" comment="grub2-x86_64-xen-2.02-150100.123.12.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140546" version="1" class="patch">
	<metadata>
		<title>Security update for u-boot (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1200363" ref_url="https://bugzilla.suse.com/1200363" source="BUGZILLA"/>
		<reference ref_id="1200364" ref_url="https://bugzilla.suse.com/1200364" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-30552" ref_url="https://www.suse.com/security/cve/CVE-2022-30552/" source="CVE"/>
		<reference ref_id="CVE-2022-30790" ref_url="https://www.suse.com/security/cve/CVE-2022-30790/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2057-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011271.html" source="SUSE-SU"/>
		<description>
This update for u-boot fixes the following issues:

- A large buffer overflow could have lead to a denial of service in the IP Packet deframentation code.
(CVE-2022-30552, bsc#1200363)
- A Hole Descriptor Overwrite could have lead to an arbitrary out of bounds write primitive.
(CVE-2022-30790, bsc#1200364)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-13"/>
	<updated date="2022-06-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200363">SUSE bug 1200363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200364">SUSE bug 1200364</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-30552/">CVE-2022-30552</cve>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30790/">CVE-2022-30790</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693259" comment="u-boot-tools-2019.01-150100.7.13.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140547" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1185637" ref_url="https://bugzilla.suse.com/1185637" source="BUGZILLA"/>
		<reference ref_id="1199166" ref_url="https://bugzilla.suse.com/1199166" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1292" ref_url="https://www.suse.com/security/cve/CVE-2022-1292/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011281.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-14"/>
	<updated date="2022-06-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185637">SUSE bug 1185637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199166">SUSE bug 1199166</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1292/">CVE-2022-1292</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693260" comment="libopenssl-1_1-devel-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692749" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693261" comment="libopenssl1_1-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692751" comment="libopenssl1_1-32bit-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693262" comment="libopenssl1_1-hmac-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692753" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693263" comment="openssl-1_1-1.1.0i-150100.14.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140548" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1070955" ref_url="https://bugzilla.suse.com/1070955" source="BUGZILLA"/>
		<reference ref_id="1191770" ref_url="https://bugzilla.suse.com/1191770" source="BUGZILLA"/>
		<reference ref_id="1192167" ref_url="https://bugzilla.suse.com/1192167" source="BUGZILLA"/>
		<reference ref_id="1192902" ref_url="https://bugzilla.suse.com/1192902" source="BUGZILLA"/>
		<reference ref_id="1192903" ref_url="https://bugzilla.suse.com/1192903" source="BUGZILLA"/>
		<reference ref_id="1192904" ref_url="https://bugzilla.suse.com/1192904" source="BUGZILLA"/>
		<reference ref_id="1193466" ref_url="https://bugzilla.suse.com/1193466" source="BUGZILLA"/>
		<reference ref_id="1193905" ref_url="https://bugzilla.suse.com/1193905" source="BUGZILLA"/>
		<reference ref_id="1194093" ref_url="https://bugzilla.suse.com/1194093" source="BUGZILLA"/>
		<reference ref_id="1194216" ref_url="https://bugzilla.suse.com/1194216" source="BUGZILLA"/>
		<reference ref_id="1194217" ref_url="https://bugzilla.suse.com/1194217" source="BUGZILLA"/>
		<reference ref_id="1194388" ref_url="https://bugzilla.suse.com/1194388" source="BUGZILLA"/>
		<reference ref_id="1194872" ref_url="https://bugzilla.suse.com/1194872" source="BUGZILLA"/>
		<reference ref_id="1194885" ref_url="https://bugzilla.suse.com/1194885" source="BUGZILLA"/>
		<reference ref_id="1195004" ref_url="https://bugzilla.suse.com/1195004" source="BUGZILLA"/>
		<reference ref_id="1195203" ref_url="https://bugzilla.suse.com/1195203" source="BUGZILLA"/>
		<reference ref_id="1195332" ref_url="https://bugzilla.suse.com/1195332" source="BUGZILLA"/>
		<reference ref_id="1195354" ref_url="https://bugzilla.suse.com/1195354" source="BUGZILLA"/>
		<reference ref_id="1196361" ref_url="https://bugzilla.suse.com/1196361" source="BUGZILLA"/>
		<reference ref_id="1198596" ref_url="https://bugzilla.suse.com/1198596" source="BUGZILLA"/>
		<reference ref_id="1198748" ref_url="https://bugzilla.suse.com/1198748" source="BUGZILLA"/>
		<reference ref_id="1199331" ref_url="https://bugzilla.suse.com/1199331" source="BUGZILLA"/>
		<reference ref_id="1199333" ref_url="https://bugzilla.suse.com/1199333" source="BUGZILLA"/>
		<reference ref_id="1199334" ref_url="https://bugzilla.suse.com/1199334" source="BUGZILLA"/>
		<reference ref_id="1199651" ref_url="https://bugzilla.suse.com/1199651" source="BUGZILLA"/>
		<reference ref_id="1199655" ref_url="https://bugzilla.suse.com/1199655" source="BUGZILLA"/>
		<reference ref_id="1199693" ref_url="https://bugzilla.suse.com/1199693" source="BUGZILLA"/>
		<reference ref_id="1199745" ref_url="https://bugzilla.suse.com/1199745" source="BUGZILLA"/>
		<reference ref_id="1199747" ref_url="https://bugzilla.suse.com/1199747" source="BUGZILLA"/>
		<reference ref_id="1199936" ref_url="https://bugzilla.suse.com/1199936" source="BUGZILLA"/>
		<reference ref_id="1200010" ref_url="https://bugzilla.suse.com/1200010" source="BUGZILLA"/>
		<reference ref_id="1200011" ref_url="https://bugzilla.suse.com/1200011" source="BUGZILLA"/>
		<reference ref_id="1200012" ref_url="https://bugzilla.suse.com/1200012" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17087" ref_url="https://www.suse.com/security/cve/CVE-2017-17087/" source="CVE"/>
		<reference ref_id="CVE-2021-3778" ref_url="https://www.suse.com/security/cve/CVE-2021-3778/" source="CVE"/>
		<reference ref_id="CVE-2021-3796" ref_url="https://www.suse.com/security/cve/CVE-2021-3796/" source="CVE"/>
		<reference ref_id="CVE-2021-3872" ref_url="https://www.suse.com/security/cve/CVE-2021-3872/" source="CVE"/>
		<reference ref_id="CVE-2021-3875" ref_url="https://www.suse.com/security/cve/CVE-2021-3875/" source="CVE"/>
		<reference ref_id="CVE-2021-3903" ref_url="https://www.suse.com/security/cve/CVE-2021-3903/" source="CVE"/>
		<reference ref_id="CVE-2021-3927" ref_url="https://www.suse.com/security/cve/CVE-2021-3927/" source="CVE"/>
		<reference ref_id="CVE-2021-3928" ref_url="https://www.suse.com/security/cve/CVE-2021-3928/" source="CVE"/>
		<reference ref_id="CVE-2021-3968" ref_url="https://www.suse.com/security/cve/CVE-2021-3968/" source="CVE"/>
		<reference ref_id="CVE-2021-3973" ref_url="https://www.suse.com/security/cve/CVE-2021-3973/" source="CVE"/>
		<reference ref_id="CVE-2021-3974" ref_url="https://www.suse.com/security/cve/CVE-2021-3974/" source="CVE"/>
		<reference ref_id="CVE-2021-3984" ref_url="https://www.suse.com/security/cve/CVE-2021-3984/" source="CVE"/>
		<reference ref_id="CVE-2021-4019" ref_url="https://www.suse.com/security/cve/CVE-2021-4019/" source="CVE"/>
		<reference ref_id="CVE-2021-4069" ref_url="https://www.suse.com/security/cve/CVE-2021-4069/" source="CVE"/>
		<reference ref_id="CVE-2021-4136" ref_url="https://www.suse.com/security/cve/CVE-2021-4136/" source="CVE"/>
		<reference ref_id="CVE-2021-4166" ref_url="https://www.suse.com/security/cve/CVE-2021-4166/" source="CVE"/>
		<reference ref_id="CVE-2021-4192" ref_url="https://www.suse.com/security/cve/CVE-2021-4192/" source="CVE"/>
		<reference ref_id="CVE-2021-4193" ref_url="https://www.suse.com/security/cve/CVE-2021-4193/" source="CVE"/>
		<reference ref_id="CVE-2021-46059" ref_url="https://www.suse.com/security/cve/CVE-2021-46059/" source="CVE"/>
		<reference ref_id="CVE-2022-0128" ref_url="https://www.suse.com/security/cve/CVE-2022-0128/" source="CVE"/>
		<reference ref_id="CVE-2022-0213" ref_url="https://www.suse.com/security/cve/CVE-2022-0213/" source="CVE"/>
		<reference ref_id="CVE-2022-0261" ref_url="https://www.suse.com/security/cve/CVE-2022-0261/" source="CVE"/>
		<reference ref_id="CVE-2022-0318" ref_url="https://www.suse.com/security/cve/CVE-2022-0318/" source="CVE"/>
		<reference ref_id="CVE-2022-0319" ref_url="https://www.suse.com/security/cve/CVE-2022-0319/" source="CVE"/>
		<reference ref_id="CVE-2022-0351" ref_url="https://www.suse.com/security/cve/CVE-2022-0351/" source="CVE"/>
		<reference ref_id="CVE-2022-0359" ref_url="https://www.suse.com/security/cve/CVE-2022-0359/" source="CVE"/>
		<reference ref_id="CVE-2022-0361" ref_url="https://www.suse.com/security/cve/CVE-2022-0361/" source="CVE"/>
		<reference ref_id="CVE-2022-0392" ref_url="https://www.suse.com/security/cve/CVE-2022-0392/" source="CVE"/>
		<reference ref_id="CVE-2022-0407" ref_url="https://www.suse.com/security/cve/CVE-2022-0407/" source="CVE"/>
		<reference ref_id="CVE-2022-0413" ref_url="https://www.suse.com/security/cve/CVE-2022-0413/" source="CVE"/>
		<reference ref_id="CVE-2022-0696" ref_url="https://www.suse.com/security/cve/CVE-2022-0696/" source="CVE"/>
		<reference ref_id="CVE-2022-1381" ref_url="https://www.suse.com/security/cve/CVE-2022-1381/" source="CVE"/>
		<reference ref_id="CVE-2022-1420" ref_url="https://www.suse.com/security/cve/CVE-2022-1420/" source="CVE"/>
		<reference ref_id="CVE-2022-1616" ref_url="https://www.suse.com/security/cve/CVE-2022-1616/" source="CVE"/>
		<reference ref_id="CVE-2022-1619" ref_url="https://www.suse.com/security/cve/CVE-2022-1619/" source="CVE"/>
		<reference ref_id="CVE-2022-1620" ref_url="https://www.suse.com/security/cve/CVE-2022-1620/" source="CVE"/>
		<reference ref_id="CVE-2022-1733" ref_url="https://www.suse.com/security/cve/CVE-2022-1733/" source="CVE"/>
		<reference ref_id="CVE-2022-1735" ref_url="https://www.suse.com/security/cve/CVE-2022-1735/" source="CVE"/>
		<reference ref_id="CVE-2022-1771" ref_url="https://www.suse.com/security/cve/CVE-2022-1771/" source="CVE"/>
		<reference ref_id="CVE-2022-1785" ref_url="https://www.suse.com/security/cve/CVE-2022-1785/" source="CVE"/>
		<reference ref_id="CVE-2022-1796" ref_url="https://www.suse.com/security/cve/CVE-2022-1796/" source="CVE"/>
		<reference ref_id="CVE-2022-1851" ref_url="https://www.suse.com/security/cve/CVE-2022-1851/" source="CVE"/>
		<reference ref_id="CVE-2022-1897" ref_url="https://www.suse.com/security/cve/CVE-2022-1897/" source="CVE"/>
		<reference ref_id="CVE-2022-1898" ref_url="https://www.suse.com/security/cve/CVE-2022-1898/" source="CVE"/>
		<reference ref_id="CVE-2022-1927" ref_url="https://www.suse.com/security/cve/CVE-2022-1927/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011301.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

- CVE-2017-17087: Fixed information leak via .swp files (bsc#1070955).
- CVE-2021-3875: Fixed heap-based buffer overflow (bsc#1191770).
- CVE-2021-3903: Fixed heap-based buffer overflow (bsc#1192167).
- CVE-2021-3968: Fixed heap-based buffer overflow (bsc#1192902).
- CVE-2021-3973: Fixed heap-based buffer overflow (bsc#1192903).
- CVE-2021-3974: Fixed use-after-free (bsc#1192904).
- CVE-2021-4069: Fixed use-after-free in ex_open()in src/ex_docmd.c (bsc#1193466).
- CVE-2021-4136: Fixed heap-based buffer overflow (bsc#1193905).
- CVE-2021-4166: Fixed out-of-bounds read (bsc#1194093).
- CVE-2021-4192: Fixed use-after-free (bsc#1194217).
- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).
- CVE-2022-0128: Fixed out-of-bounds read (bsc#1194388).
- CVE-2022-0213: Fixed heap-based buffer overflow (bsc#1194885).
- CVE-2022-0261: Fixed heap-based buffer overflow (bsc#1194872).
- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).
- CVE-2022-0359: Fixed heap-based buffer overflow in init_ccline() in ex_getln.c (bsc#1195203).
- CVE-2022-0392: Fixed heap-based buffer overflow (bsc#1195332).
- CVE-2022-0407: Fixed heap-based buffer overflow (bsc#1195354).
- CVE-2022-0696: Fixed NULL pointer dereference (bsc#1196361).
- CVE-2022-1381: Fixed global heap buffer overflow in skip_range (bsc#1198596).
- CVE-2022-1420: Fixed out-of-range pointer offset (bsc#1198748).
- CVE-2022-1616: Fixed use-after-free in append_command (bsc#1199331).
- CVE-2022-1619: Fixed heap-based Buffer Overflow in function cmdline_erase_chars (bsc#1199333).
- CVE-2022-1620: Fixed NULL pointer dereference in function vim_regexec_string (bsc#1199334).
- CVE-2022-1733: Fixed heap-based buffer overflow in cindent.c (bsc#1199655).
- CVE-2022-1735: Fixed heap-based buffer overflow (bsc#1199651).
- CVE-2022-1771: Fixed stack exhaustion (bsc#1199693).
- CVE-2022-1785: Fixed out-of-bounds write (bsc#1199745).
- CVE-2022-1796: Fixed use-after-free in find_pattern_in_path (bsc#1199747).
- CVE-2022-1851: Fixed out-of-bounds read (bsc#1199936).
- CVE-2022-1897: Fixed out-of-bounds write (bsc#1200010).
- CVE-2022-1898: Fixed use-after-free (bsc#1200011).
- CVE-2022-1927: Fixed buffer over-read (bsc#1200012).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-16"/>
	<updated date="2022-06-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1070955">SUSE bug 1070955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191770">SUSE bug 1191770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192167">SUSE bug 1192167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192902">SUSE bug 1192902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192903">SUSE bug 1192903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192904">SUSE bug 1192904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193466">SUSE bug 1193466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193905">SUSE bug 1193905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194093">SUSE bug 1194093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194216">SUSE bug 1194216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194217">SUSE bug 1194217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194388">SUSE bug 1194388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194872">SUSE bug 1194872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194885">SUSE bug 1194885</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195004">SUSE bug 1195004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195203">SUSE bug 1195203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195332">SUSE bug 1195332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195354">SUSE bug 1195354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196361">SUSE bug 1196361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198596">SUSE bug 1198596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198748">SUSE bug 1198748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199331">SUSE bug 1199331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199333">SUSE bug 1199333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199334">SUSE bug 1199334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199651">SUSE bug 1199651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199655">SUSE bug 1199655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199693">SUSE bug 1199693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199745">SUSE bug 1199745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199747">SUSE bug 1199747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199936">SUSE bug 1199936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200010">SUSE bug 1200010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200011">SUSE bug 1200011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200012">SUSE bug 1200012</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17087/">CVE-2017-17087</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3778/">CVE-2021-3778</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3796/">CVE-2021-3796</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3872/">CVE-2021-3872</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3875/">CVE-2021-3875</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3903/">CVE-2021-3903</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3927/">CVE-2021-3927</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3928/">CVE-2021-3928</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3968/">CVE-2021-3968</cve>
	<cve impact="critical" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3973/">CVE-2021-3973</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3974/">CVE-2021-3974</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3984/">CVE-2021-3984</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4019/">CVE-2021-4019</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4069/">CVE-2021-4069</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4136/">CVE-2021-4136</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4166/">CVE-2021-4166</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4192/">CVE-2021-4192</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4193/">CVE-2021-4193</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46059/">CVE-2021-46059</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0128/">CVE-2022-0128</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0213/">CVE-2022-0213</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0261/">CVE-2022-0261</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0318/">CVE-2022-0318</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0319/">CVE-2022-0319</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0351/">CVE-2022-0351</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-0359/">CVE-2022-0359</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-0361/">CVE-2022-0361</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-0392/">CVE-2022-0392</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0407/">CVE-2022-0407</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0413/">CVE-2022-0413</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0696/">CVE-2022-0696</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1381/">CVE-2022-1381</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1420/">CVE-2022-1420</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1616/">CVE-2022-1616</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1619/">CVE-2022-1619</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1620/">CVE-2022-1620</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1733/">CVE-2022-1733</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1735/">CVE-2022-1735</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1771/">CVE-2022-1771</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1785/">CVE-2022-1785</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1796/">CVE-2022-1796</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1851/">CVE-2022-1851</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1897/">CVE-2022-1897</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1898/">CVE-2022-1898</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-1927/">CVE-2022-1927</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693264" comment="gvim-8.2.5038-150000.5.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693265" comment="vim-8.2.5038-150000.5.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684301" comment="vim-data-8.2.5038-150000.5.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684302" comment="vim-data-common-8.2.5038-150000.5.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140549" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198603" ref_url="https://bugzilla.suse.com/1198603" source="BUGZILLA"/>
		<reference ref_id="1198604" ref_url="https://bugzilla.suse.com/1198604" source="BUGZILLA"/>
		<reference ref_id="1198606" ref_url="https://bugzilla.suse.com/1198606" source="BUGZILLA"/>
		<reference ref_id="1198607" ref_url="https://bugzilla.suse.com/1198607" source="BUGZILLA"/>
		<reference ref_id="1198610" ref_url="https://bugzilla.suse.com/1198610" source="BUGZILLA"/>
		<reference ref_id="1198611" ref_url="https://bugzilla.suse.com/1198611" source="BUGZILLA"/>
		<reference ref_id="1198612" ref_url="https://bugzilla.suse.com/1198612" source="BUGZILLA"/>
		<reference ref_id="1198613" ref_url="https://bugzilla.suse.com/1198613" source="BUGZILLA"/>
		<reference ref_id="1198629" ref_url="https://bugzilla.suse.com/1198629" source="BUGZILLA"/>
		<reference ref_id="1199928" ref_url="https://bugzilla.suse.com/1199928" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46669" ref_url="https://www.suse.com/security/cve/CVE-2021-46669/" source="CVE"/>
		<reference ref_id="CVE-2022-21427" ref_url="https://www.suse.com/security/cve/CVE-2022-21427/" source="CVE"/>
		<reference ref_id="CVE-2022-27377" ref_url="https://www.suse.com/security/cve/CVE-2022-27377/" source="CVE"/>
		<reference ref_id="CVE-2022-27378" ref_url="https://www.suse.com/security/cve/CVE-2022-27378/" source="CVE"/>
		<reference ref_id="CVE-2022-27380" ref_url="https://www.suse.com/security/cve/CVE-2022-27380/" source="CVE"/>
		<reference ref_id="CVE-2022-27381" ref_url="https://www.suse.com/security/cve/CVE-2022-27381/" source="CVE"/>
		<reference ref_id="CVE-2022-27383" ref_url="https://www.suse.com/security/cve/CVE-2022-27383/" source="CVE"/>
		<reference ref_id="CVE-2022-27384" ref_url="https://www.suse.com/security/cve/CVE-2022-27384/" source="CVE"/>
		<reference ref_id="CVE-2022-27386" ref_url="https://www.suse.com/security/cve/CVE-2022-27386/" source="CVE"/>
		<reference ref_id="CVE-2022-27387" ref_url="https://www.suse.com/security/cve/CVE-2022-27387/" source="CVE"/>
		<reference ref_id="CVE-2022-27445" ref_url="https://www.suse.com/security/cve/CVE-2022-27445/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011306.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

- CVE-2021-46669 (bsc#1199928)
- CVE-2022-21427 (bsc#1199928)
- CVE-2022-27377 (bsc#1198603)
- CVE-2022-27378 (bsc#1198604)
- CVE-2022-27380 (bsc#1198606)
- CVE-2022-27381 (bsc#1198607)
- CVE-2022-27383 (bsc#1198610)
- CVE-2022-27384 (bsc#1198611)
- CVE-2022-27386 (bsc#1198612)
- CVE-2022-27387 (bsc#1198613)
- CVE-2022-27445 (bsc#1198629)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-16"/>
	<updated date="2022-06-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198603">SUSE bug 1198603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198604">SUSE bug 1198604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198606">SUSE bug 1198606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198607">SUSE bug 1198607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198610">SUSE bug 1198610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198611">SUSE bug 1198611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198612">SUSE bug 1198612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198613">SUSE bug 1198613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198629">SUSE bug 1198629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199928">SUSE bug 1199928</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46669/">CVE-2021-46669</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21427/">CVE-2022-21427</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27377/">CVE-2022-27377</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27378/">CVE-2022-27378</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27380/">CVE-2022-27380</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27381/">CVE-2022-27381</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27383/">CVE-2022-27383</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27384/">CVE-2022-27384</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27386/">CVE-2022-27386</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-27387/">CVE-2022-27387</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27445/">CVE-2022-27445</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693266" comment="libmysqld-devel-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693267" comment="libmysqld19-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693268" comment="mariadb-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693269" comment="mariadb-client-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692530" comment="mariadb-errormessages-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693270" comment="mariadb-tools-10.2.44-150000.3.54.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140550" version="1" class="patch">
	<metadata>
		<title>Security update for strongswan (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194471" ref_url="https://bugzilla.suse.com/1194471" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-45079" ref_url="https://www.suse.com/security/cve/CVE-2021-45079/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010126.html" source="SUSE-SU"/>
		<description>
This update for strongswan fixes the following issues:

- CVE-2021-45079: Fixed authentication bypass in EAP authentication. (bsc#1194471)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-27"/>
	<updated date="2022-01-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194471">SUSE bug 1194471</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-45079/">CVE-2021-45079</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664876" comment="strongswan-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664860" comment="strongswan-doc-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664877" comment="strongswan-hmac-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664878" comment="strongswan-ipsec-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664879" comment="strongswan-libs0-5.8.2-4.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140551" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1028340" ref_url="https://bugzilla.suse.com/1028340" source="BUGZILLA"/>
		<reference ref_id="1055710" ref_url="https://bugzilla.suse.com/1055710" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1084513" ref_url="https://bugzilla.suse.com/1084513" source="BUGZILLA"/>
		<reference ref_id="1087082" ref_url="https://bugzilla.suse.com/1087082" source="BUGZILLA"/>
		<reference ref_id="1114648" ref_url="https://bugzilla.suse.com/1114648" source="BUGZILLA"/>
		<reference ref_id="1158266" ref_url="https://bugzilla.suse.com/1158266" source="BUGZILLA"/>
		<reference ref_id="1172456" ref_url="https://bugzilla.suse.com/1172456" source="BUGZILLA"/>
		<reference ref_id="1177282" ref_url="https://bugzilla.suse.com/1177282" source="BUGZILLA"/>
		<reference ref_id="1182171" ref_url="https://bugzilla.suse.com/1182171" source="BUGZILLA"/>
		<reference ref_id="1183723" ref_url="https://bugzilla.suse.com/1183723" source="BUGZILLA"/>
		<reference ref_id="1187055" ref_url="https://bugzilla.suse.com/1187055" source="BUGZILLA"/>
		<reference ref_id="1191647" ref_url="https://bugzilla.suse.com/1191647" source="BUGZILLA"/>
		<reference ref_id="1191958" ref_url="https://bugzilla.suse.com/1191958" source="BUGZILLA"/>
		<reference ref_id="1195065" ref_url="https://bugzilla.suse.com/1195065" source="BUGZILLA"/>
		<reference ref_id="1195651" ref_url="https://bugzilla.suse.com/1195651" source="BUGZILLA"/>
		<reference ref_id="1196018" ref_url="https://bugzilla.suse.com/1196018" source="BUGZILLA"/>
		<reference ref_id="1196367" ref_url="https://bugzilla.suse.com/1196367" source="BUGZILLA"/>
		<reference ref_id="1196426" ref_url="https://bugzilla.suse.com/1196426" source="BUGZILLA"/>
		<reference ref_id="1196999" ref_url="https://bugzilla.suse.com/1196999" source="BUGZILLA"/>
		<reference ref_id="1197219" ref_url="https://bugzilla.suse.com/1197219" source="BUGZILLA"/>
		<reference ref_id="1197343" ref_url="https://bugzilla.suse.com/1197343" source="BUGZILLA"/>
		<reference ref_id="1197663" ref_url="https://bugzilla.suse.com/1197663" source="BUGZILLA"/>
		<reference ref_id="1198400" ref_url="https://bugzilla.suse.com/1198400" source="BUGZILLA"/>
		<reference ref_id="1198516" ref_url="https://bugzilla.suse.com/1198516" source="BUGZILLA"/>
		<reference ref_id="1198577" ref_url="https://bugzilla.suse.com/1198577" source="BUGZILLA"/>
		<reference ref_id="1198660" ref_url="https://bugzilla.suse.com/1198660" source="BUGZILLA"/>
		<reference ref_id="1198687" ref_url="https://bugzilla.suse.com/1198687" source="BUGZILLA"/>
		<reference ref_id="1198742" ref_url="https://bugzilla.suse.com/1198742" source="BUGZILLA"/>
		<reference ref_id="1198777" ref_url="https://bugzilla.suse.com/1198777" source="BUGZILLA"/>
		<reference ref_id="1198825" ref_url="https://bugzilla.suse.com/1198825" source="BUGZILLA"/>
		<reference ref_id="1199012" ref_url="https://bugzilla.suse.com/1199012" source="BUGZILLA"/>
		<reference ref_id="1199063" ref_url="https://bugzilla.suse.com/1199063" source="BUGZILLA"/>
		<reference ref_id="1199314" ref_url="https://bugzilla.suse.com/1199314" source="BUGZILLA"/>
		<reference ref_id="1199399" ref_url="https://bugzilla.suse.com/1199399" source="BUGZILLA"/>
		<reference ref_id="1199426" ref_url="https://bugzilla.suse.com/1199426" source="BUGZILLA"/>
		<reference ref_id="1199505" ref_url="https://bugzilla.suse.com/1199505" source="BUGZILLA"/>
		<reference ref_id="1199507" ref_url="https://bugzilla.suse.com/1199507" source="BUGZILLA"/>
		<reference ref_id="1199605" ref_url="https://bugzilla.suse.com/1199605" source="BUGZILLA"/>
		<reference ref_id="1199650" ref_url="https://bugzilla.suse.com/1199650" source="BUGZILLA"/>
		<reference ref_id="1200143" ref_url="https://bugzilla.suse.com/1200143" source="BUGZILLA"/>
		<reference ref_id="1200144" ref_url="https://bugzilla.suse.com/1200144" source="BUGZILLA"/>
		<reference ref_id="1200249" ref_url="https://bugzilla.suse.com/1200249" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-13695" ref_url="https://www.suse.com/security/cve/CVE-2017-13695/" source="CVE"/>
		<reference ref_id="CVE-2018-7755" ref_url="https://www.suse.com/security/cve/CVE-2018-7755/" source="CVE"/>
		<reference ref_id="CVE-2019-19377" ref_url="https://www.suse.com/security/cve/CVE-2019-19377/" source="CVE"/>
		<reference ref_id="CVE-2019-20811" ref_url="https://www.suse.com/security/cve/CVE-2019-20811/" source="CVE"/>
		<reference ref_id="CVE-2020-26541" ref_url="https://www.suse.com/security/cve/CVE-2020-26541/" source="CVE"/>
		<reference ref_id="CVE-2021-20292" ref_url="https://www.suse.com/security/cve/CVE-2021-20292/" source="CVE"/>
		<reference ref_id="CVE-2021-20321" ref_url="https://www.suse.com/security/cve/CVE-2021-20321/" source="CVE"/>
		<reference ref_id="CVE-2021-33061" ref_url="https://www.suse.com/security/cve/CVE-2021-33061/" source="CVE"/>
		<reference ref_id="CVE-2021-38208" ref_url="https://www.suse.com/security/cve/CVE-2021-38208/" source="CVE"/>
		<reference ref_id="CVE-2021-39711" ref_url="https://www.suse.com/security/cve/CVE-2021-39711/" source="CVE"/>
		<reference ref_id="CVE-2021-43389" ref_url="https://www.suse.com/security/cve/CVE-2021-43389/" source="CVE"/>
		<reference ref_id="CVE-2022-1011" ref_url="https://www.suse.com/security/cve/CVE-2022-1011/" source="CVE"/>
		<reference ref_id="CVE-2022-1184" ref_url="https://www.suse.com/security/cve/CVE-2022-1184/" source="CVE"/>
		<reference ref_id="CVE-2022-1353" ref_url="https://www.suse.com/security/cve/CVE-2022-1353/" source="CVE"/>
		<reference ref_id="CVE-2022-1419" ref_url="https://www.suse.com/security/cve/CVE-2022-1419/" source="CVE"/>
		<reference ref_id="CVE-2022-1516" ref_url="https://www.suse.com/security/cve/CVE-2022-1516/" source="CVE"/>
		<reference ref_id="CVE-2022-1652" ref_url="https://www.suse.com/security/cve/CVE-2022-1652/" source="CVE"/>
		<reference ref_id="CVE-2022-1729" ref_url="https://www.suse.com/security/cve/CVE-2022-1729/" source="CVE"/>
		<reference ref_id="CVE-2022-1734" ref_url="https://www.suse.com/security/cve/CVE-2022-1734/" source="CVE"/>
		<reference ref_id="CVE-2022-1974" ref_url="https://www.suse.com/security/cve/CVE-2022-1974/" source="CVE"/>
		<reference ref_id="CVE-2022-1975" ref_url="https://www.suse.com/security/cve/CVE-2022-1975/" source="CVE"/>
		<reference ref_id="CVE-2022-21123" ref_url="https://www.suse.com/security/cve/CVE-2022-21123/" source="CVE"/>
		<reference ref_id="CVE-2022-21125" ref_url="https://www.suse.com/security/cve/CVE-2022-21125/" source="CVE"/>
		<reference ref_id="CVE-2022-21127" ref_url="https://www.suse.com/security/cve/CVE-2022-21127/" source="CVE"/>
		<reference ref_id="CVE-2022-21166" ref_url="https://www.suse.com/security/cve/CVE-2022-21166/" source="CVE"/>
		<reference ref_id="CVE-2022-21180" ref_url="https://www.suse.com/security/cve/CVE-2022-21180/" source="CVE"/>
		<reference ref_id="CVE-2022-21499" ref_url="https://www.suse.com/security/cve/CVE-2022-21499/" source="CVE"/>
		<reference ref_id="CVE-2022-22942" ref_url="https://www.suse.com/security/cve/CVE-2022-22942/" source="CVE"/>
		<reference ref_id="CVE-2022-28748" ref_url="https://www.suse.com/security/cve/CVE-2022-28748/" source="CVE"/>
		<reference ref_id="CVE-2022-30594" ref_url="https://www.suse.com/security/cve/CVE-2022-30594/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011310.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated.

The following security bugs were fixed:

- CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image. (bnc#1158266)
- CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a corrupted image. (bsc#1198577)
- CVE-2017-13695: Fixed a bug that caused a stack dump allowing local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted ACPI table. (bnc#1055710)
- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
- CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063).
- CVE-2021-39711: In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1197219).
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505).
- CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters that may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1196426).
- CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012).
- CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system (bnc#1191647).
- CVE-2019-20811: Fixed issue in rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, where a reference count is mishandled (bnc#1172456).
- CVE-2022-28748: Fixed memory lead over the network by ax88179_178a devices (bsc#1196018).
- CVE-2018-7755: Fixed an issue in the fd_locked_ioctl function in drivers/block/floppy.c. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR (bnc#1084513).
- CVE-2022-22942: Fixed stale file descriptors on failed usercopy (bsc#1195065).
- CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
- CVE-2021-43389: Fixed an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).
- CVE-2021-38208: Fixed a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call (bnc#1187055).
- CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c (bnc#1198516).
- CVE-2021-20292: Fixed object validation prior to performing operations on the object in nouveau_sgdma_create_ttm in Nouveau DRM subsystem (bnc#1183723).
- CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bnc#1197343)
- CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space. (bsc#1200144).
- CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism. (bnc#1177282)
- CVE-2022-1975: Fixed a bug that allows an attacker to crash the linux kernel by simulating nfc device from user-space. (bsc#1200143)
- CVE-2022-21499: Reinforce the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb. (bsc#1199426)
- CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605).

The following non-security bugs were fixed:

- btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (bsc#1199399).
- btrfs: tree-checker: fix incorrect printk format (bsc#1200249).
- net: ena: A typo fix in the file ena_com.h (bsc#1198777).
- net: ena: Add capabilities field with support for ENI stats capability (bsc#1198777).
- net: ena: Add debug prints for invalid req_id resets (bsc#1198777).
- net: ena: add device distinct log prefix to files (bsc#1198777).
- net: ena: add jiffies of last napi call to stats (bsc#1198777).
- net: ena: aggregate doorbell common operations into a function (bsc#1198777).
- net: ena: aggregate stats increase into a function (bsc#1198777).
- net: ena: Change ENI stats support check to use capabilities field (bsc#1198777).
- net: ena: Change return value of ena_calc_io_queue_size() to void (bsc#1198777).
- net: ena: Change the name of bad_csum variable (bsc#1198777).
- net: ena: Extract recurring driver reset code into a function (bsc#1198777).
- net: ena: fix coding style nits (bsc#1198777).
- net: ena: fix DMA mapping function issues in XDP (bsc#1198777).
- net: ena: Fix error handling when calculating max IO queues number (bsc#1198777).
- net: ena: fix inaccurate print type (bsc#1198777).
- net: ena: Fix undefined state when tx request id is out of bounds (bsc#1198777).
- net: ena: Fix wrong rx request id by resetting device (bsc#1198777).
- net: ena: Improve error logging in driver (bsc#1198777).
- net: ena: introduce ndo_xdp_xmit() function for XDP_REDIRECT (bsc#1198777).
- net: ena: introduce XDP redirect implementation (bsc#1198777).
- net: ena: make symbol 'ena_alloc_map_page' static (bsc#1198777).
- net: ena: Move reset completion print to the reset function (bsc#1198777).
- net: ena: optimize data access in fast-path code (bsc#1198777).
- net: ena: re-organize code to improve readability (bsc#1198777).
- net: ena: Remove ena_calc_queue_size_ctx struct (bsc#1198777).
- net: ena: remove extra words from comments (bsc#1198777).
- net: ena: Remove module param and change message severity (bsc#1198777).
- net: ena: Remove rcu_read_lock() around XDP program invocation (bsc#1198777).
- net: ena: Remove redundant return code check (bsc#1198777).
- net: ena: Remove unused code (bsc#1198777).
- net: ena: store values in their appropriate variables types (bsc#1198777).
- net: ena: Update XDP verdict upon failure (bsc#1198777).
- net: ena: use build_skb() in RX path (bsc#1198777).
- net: ena: use constant value for net_device allocation (bsc#1198777).
- net: ena: Use dev_alloc() in RX buffer allocation (bsc#1198777).
- net: ena: Use pci_sriov_configure_simple() to enable VFs (bsc#1198777).
- net: ena: use xdp_frame in XDP TX flow (bsc#1198777).
- net: ena: use xdp_return_frame() to free xdp frames (bsc#1198777).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Remove unnecessary check of cqe_type in mana_process_rx_cqe() (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Use struct_size() helper in mana_gd_create_dma_region() (bsc#1195651).
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (bsc#1199314).
- powerpc/64: Fix kernel stack 16-byte alignment (bsc#1196999 ltc#196609S git-fixes).
- powerpc/64: Interrupts save PPR on stack rather than thread_struct (bsc#1196999 ltc#196609).
- powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc#1182171 ltc#190900 bsc#1198660 ltc#197803).
- powerpc/pseries: Fix use after free in remove_phb_dynamic() (bsc#1065729 bsc#1198660 ltc#197803).
- scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() (bsc#1028340 bsc#1198825).
- SUNRPC: change locking for xs_swap_enable/disable (bsc#1196367).
- x86/pm: Save the MSR validity status at context setup (bsc#1114648).
- x86/speculation: Restore speculation related MSRs during S3 resume (bsc#1114648).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-17"/>
	<updated date="2022-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1028340">SUSE bug 1028340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055710">SUSE bug 1055710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084513">SUSE bug 1084513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114648">SUSE bug 1114648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158266">SUSE bug 1158266</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172456">SUSE bug 1172456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177282">SUSE bug 1177282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182171">SUSE bug 1182171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183723">SUSE bug 1183723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187055">SUSE bug 1187055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191647">SUSE bug 1191647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191958">SUSE bug 1191958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195065">SUSE bug 1195065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195651">SUSE bug 1195651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196018">SUSE bug 1196018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196367">SUSE bug 1196367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196426">SUSE bug 1196426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196999">SUSE bug 1196999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197219">SUSE bug 1197219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197343">SUSE bug 1197343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197663">SUSE bug 1197663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198400">SUSE bug 1198400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198516">SUSE bug 1198516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198577">SUSE bug 1198577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198660">SUSE bug 1198660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198687">SUSE bug 1198687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198742">SUSE bug 1198742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198777">SUSE bug 1198777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198825">SUSE bug 1198825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199012">SUSE bug 1199012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199063">SUSE bug 1199063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199314">SUSE bug 1199314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199399">SUSE bug 1199399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199426">SUSE bug 1199426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199505">SUSE bug 1199505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199507">SUSE bug 1199507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199605">SUSE bug 1199605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199650">SUSE bug 1199650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200143">SUSE bug 1200143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200144">SUSE bug 1200144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200249">SUSE bug 1200249</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-13695/">CVE-2017-13695</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-7755/">CVE-2018-7755</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19377/">CVE-2019-19377</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20811/">CVE-2019-20811</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26541/">CVE-2020-26541</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20292/">CVE-2021-20292</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20321/">CVE-2021-20321</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33061/">CVE-2021-33061</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38208/">CVE-2021-38208</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39711/">CVE-2021-39711</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43389/">CVE-2021-43389</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1011/">CVE-2022-1011</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1184/">CVE-2022-1184</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1353/">CVE-2022-1353</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1419/">CVE-2022-1419</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1516/">CVE-2022-1516</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1652/">CVE-2022-1652</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1729/">CVE-2022-1729</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1734/">CVE-2022-1734</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1974/">CVE-2022-1974</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1975/">CVE-2022-1975</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21123/">CVE-2022-21123</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21125/">CVE-2022-21125</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21127/">CVE-2022-21127</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21166/">CVE-2022-21166</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21180/">CVE-2022-21180</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-21499/">CVE-2022-21499</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22942/">CVE-2022-22942</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28748/">CVE-2022-28748</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30594/">CVE-2022-30594</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693271" comment="kernel-default-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693272" comment="kernel-default-base-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693273" comment="kernel-default-devel-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692758" comment="kernel-devel-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692759" comment="kernel-docs-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692760" comment="kernel-macros-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693274" comment="kernel-obs-build-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692762" comment="kernel-source-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693275" comment="kernel-syms-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693276" comment="reiserfs-kmp-default-4.12.14-150100.197.114.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140552" version="1" class="patch">
	<metadata>
		<title>Security update for log4j (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194842" ref_url="https://bugzilla.suse.com/1194842" source="BUGZILLA"/>
		<reference ref_id="1194843" ref_url="https://bugzilla.suse.com/1194843" source="BUGZILLA"/>
		<reference ref_id="1194844" ref_url="https://bugzilla.suse.com/1194844" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23302" ref_url="https://www.suse.com/security/cve/CVE-2022-23302/" source="CVE"/>
		<reference ref_id="CVE-2022-23305" ref_url="https://www.suse.com/security/cve/CVE-2022-23305/" source="CVE"/>
		<reference ref_id="CVE-2022-23307" ref_url="https://www.suse.com/security/cve/CVE-2022-23307/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010127.html" source="SUSE-SU"/>
		<description>
This update for log4j fixes the following issues:

- CVE-2022-23307: Fixed deserialization flaw in the chainsaw component of log4j leading to malicious code execution. (bsc#1194844)
- CVE-2022-23305: Fixed SQL injection when application is configured to use JDBCAppender. (bsc#1194843)
- CVE-2022-23302: Fixed remote code execution when application is configured to use JMSSink. (bsc#1194842)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-27"/>
	<updated date="2022-01-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194842">SUSE bug 1194842</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194843">SUSE bug 1194843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194844">SUSE bug 1194844</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23302/">CVE-2022-23302</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23305/">CVE-2022-23305</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23307/">CVE-2022-23307</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664552" comment="log4j-1.2.17-5.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664553" comment="log4j-manual-1.2.17-5.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140553" version="1" class="patch">
	<metadata>
		<title>Security update for node_exporter (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1190535" ref_url="https://bugzilla.suse.com/1190535" source="BUGZILLA"/>
		<reference ref_id="1196338" ref_url="https://bugzilla.suse.com/1196338" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21698" ref_url="https://www.suse.com/security/cve/CVE-2022-21698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011315.html" source="SUSE-SU"/>
		<description>
This security update for golang-github-prometheus-node_exporter provides:

Update golang-github-prometheus-node_exporter from version 1.1.2 to version 1.3.0 (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239)

- CVE-2022-21698: Denial of service using InstrumentHandlerCounter
- Update vendor tarball with prometheus/client_golang 1.11.1
- Update to 1.3.0
  * [CHANGE] Add path label to rapl collector #2146
  * [CHANGE] Exclude filesystems under /run/credentials #2157
  * [CHANGE] Add TCPTimeouts to netstat default filter #2189
  * [FEATURE] Add lnstat collector for metrics from /proc/net/stat/ #1771
  * [FEATURE] Add darwin powersupply collector #1777
  * [FEATURE] Add support for monitoring GPUs on Linux #1998
  * [FEATURE] Add Darwin thermal collector #2032
  * [FEATURE] Add os release collector #2094
  * [FEATURE] Add netdev.address-info collector #2105
  * [FEATURE] Add clocksource metrics to time collector #2197
  * [ENHANCEMENT] Support glob textfile collector directories #1985
  * [ENHANCEMENT] ethtool: Expose node_ethtool_info metric #2080
  * [ENHANCEMENT] Use include/exclude flags for ethtool filtering #2165
  * [ENHANCEMENT] Add flag to disable guest CPU metrics #2123
  * [ENHANCEMENT] Add DMI collector #2131
  * [ENHANCEMENT] Add threads metrics to processes collector #2164
  * [ENHANCMMENT] Reduce timer GC delays in the Linux filesystem collector #2169
  * [ENHANCMMENT] Add TCPTimeouts to netstat default filter #2189
  * [ENHANCMMENT] Use SysctlTimeval for boottime collector on BSD #2208
  * [BUGFIX] ethtool: Sanitize metric names #2093
  * [BUGFIX] Fix ethtool collector for multiple interfaces #2126
  * [BUGFIX] Fix possible panic on macOS #2133
  * [BUGFIX] Collect flag_info and bug_info only for one core #2156
  * [BUGFIX] Prevent duplicate ethtool metric names #2187
- Update to 1.2.2
  * Bug fixes
     Fix processes collector long int parsing #2112
- Update to 1.2.1
  * Removed
     Remove obsolete capture permission denied error fix already included upstream
  * Bug fixes
     Fix zoneinfo parsing prometheus/procfs#386
     Fix nvme collector log noise #2091
     Fix rapl collector log noise #2092
- Update to 1.2.0
  * Changes
     Rename filesystem collector flags to match other collectors #2012
     Make node_exporter print usage to STDOUT #203
  * Features
     Add conntrack statistics metrics #1155
     Add ethtool stats collector #1832
     Add flag to ignore network speed if it is unknown #1989
     Add tapestats collector for Linux #2044
     Add nvme collector #2062
  * Enhancements
     Add ErrorLog plumbing to promhttp #1887
     Add more Infiniband counters #2019
     netclass: retrieve interface names and filter before parsing #2033
     Add time zone offset metric #2060
  * Bug fixes
     Handle errors from disabled PSI subsystem #1983
     Fix panic when using backwards compatible flags #2000
     Fix wrong value for OpenBSD memory buffer cache #2015
     Only initiate collectors once #2048
     Handle small backwards jumps in CPU idle #2067
- Capture permission denied error for 'energy_uj' file (bsc#1190535)
  		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-20"/>
	<updated date="2022-06-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190535">SUSE bug 1190535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196338">SUSE bug 1196338</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21698/">CVE-2022-21698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683052" comment="golang-github-prometheus-node_exporter-1.3.0-150100.3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140554" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1197423" ref_url="https://bugzilla.suse.com/1197423" source="BUGZILLA"/>
		<reference ref_id="1197425" ref_url="https://bugzilla.suse.com/1197425" source="BUGZILLA"/>
		<reference ref_id="1197426" ref_url="https://bugzilla.suse.com/1197426" source="BUGZILLA"/>
		<reference ref_id="1199965" ref_url="https://bugzilla.suse.com/1199965" source="BUGZILLA"/>
		<reference ref_id="1199966" ref_url="https://bugzilla.suse.com/1199966" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26356" ref_url="https://www.suse.com/security/cve/CVE-2022-26356/" source="CVE"/>
		<reference ref_id="CVE-2022-26357" ref_url="https://www.suse.com/security/cve/CVE-2022-26357/" source="CVE"/>
		<reference ref_id="CVE-2022-26358" ref_url="https://www.suse.com/security/cve/CVE-2022-26358/" source="CVE"/>
		<reference ref_id="CVE-2022-26359" ref_url="https://www.suse.com/security/cve/CVE-2022-26359/" source="CVE"/>
		<reference ref_id="CVE-2022-26360" ref_url="https://www.suse.com/security/cve/CVE-2022-26360/" source="CVE"/>
		<reference ref_id="CVE-2022-26361" ref_url="https://www.suse.com/security/cve/CVE-2022-26361/" source="CVE"/>
		<reference ref_id="CVE-2022-26362" ref_url="https://www.suse.com/security/cve/CVE-2022-26362/" source="CVE"/>
		<reference ref_id="CVE-2022-26363" ref_url="https://www.suse.com/security/cve/CVE-2022-26363/" source="CVE"/>
		<reference ref_id="CVE-2022-26364" ref_url="https://www.suse.com/security/cve/CVE-2022-26364/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011336.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that
  could cause a denial of service in the host (bsc#1197423).
- CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts
  using VT-d IOMMU hardware, which could lead to a denial of service in the host
  (bsc#1197425).
- CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory
  corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be
  leveraged by an attacker to cause a denial of service in the host (bsc#1197426).
- CVE-2022-26362: Fixed race condition in typeref acquisition (bsc#1199965)
- CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (bsc#1199966)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-23"/>
	<updated date="2022-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197423">SUSE bug 1197423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197425">SUSE bug 1197425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197426">SUSE bug 1197426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199965">SUSE bug 1199965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199966">SUSE bug 1199966</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26356/">CVE-2022-26356</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26357/">CVE-2022-26357</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26358/">CVE-2022-26358</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26359/">CVE-2022-26359</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26360/">CVE-2022-26360</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26361/">CVE-2022-26361</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26362/">CVE-2022-26362</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26363/">CVE-2022-26363</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26364/">CVE-2022-26364</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692764" comment="xen-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692765" comment="xen-devel-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692766" comment="xen-libs-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692767" comment="xen-tools-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692768" comment="xen-tools-domU-4.12.4_24-150100.3.72.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140555" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1200566" ref_url="https://bugzilla.suse.com/1200566" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22967" ref_url="https://www.suse.com/security/cve/CVE-2022-22967/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011334.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could be used to bypass authentication when using PAM (bsc#1200566)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-23"/>
	<updated date="2022-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200566">SUSE bug 1200566</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22967/">CVE-2022-22967</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693277" comment="python3-salt-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693278" comment="salt-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693279" comment="salt-api-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692772" comment="salt-bash-completion-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693280" comment="salt-cloud-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693281" comment="salt-doc-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692775" comment="salt-fish-completion-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693282" comment="salt-master-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693283" comment="salt-minion-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693284" comment="salt-proxy-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693285" comment="salt-ssh-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693286" comment="salt-standalone-formulas-configuration-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693287" comment="salt-syndic-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693288" comment="salt-transactional-update-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692783" comment="salt-zsh-completion-3004-150100.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140556" version="1" class="patch">
	<metadata>
		<title>Security update for 389-ds (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188455" ref_url="https://bugzilla.suse.com/1188455" source="BUGZILLA"/>
		<reference ref_id="1195324" ref_url="https://bugzilla.suse.com/1195324" source="BUGZILLA"/>
		<reference ref_id="1197275" ref_url="https://bugzilla.suse.com/1197275" source="BUGZILLA"/>
		<reference ref_id="1197345" ref_url="https://bugzilla.suse.com/1197345" source="BUGZILLA"/>
		<reference ref_id="1199889" ref_url="https://bugzilla.suse.com/1199889" source="BUGZILLA"/>
		<reference ref_id="1200175" ref_url="https://bugzilla.suse.com/1200175" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3652" ref_url="https://www.suse.com/security/cve/CVE-2021-3652/" source="CVE"/>
		<reference ref_id="CVE-2021-4091" ref_url="https://www.suse.com/security/cve/CVE-2021-4091/" source="CVE"/>
		<reference ref_id="CVE-2022-0918" ref_url="https://www.suse.com/security/cve/CVE-2022-0918/" source="CVE"/>
		<reference ref_id="CVE-2022-0996" ref_url="https://www.suse.com/security/cve/CVE-2022-0996/" source="CVE"/>
		<reference ref_id="CVE-2022-1949" ref_url="https://www.suse.com/security/cve/CVE-2022-1949/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011338.html" source="SUSE-SU"/>
		<description>
This update for 389-ds fixes the following issues:

- CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).
- CVE-2022-0918: Fixed denial of service issue via crafted messages (bsc#1197275).
- CVE-2022-0996: Fixed mishandling of password expiry (bsc#1197345).
- CVE-2021-4091: Fixed double free in psearch (bsc#1195324).
- CVE-2021-3652: Fixed disabled accounts may be able to bind with crypt passwords (bsc#1188455). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-23"/>
	<updated date="2022-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188455">SUSE bug 1188455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195324">SUSE bug 1195324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197275">SUSE bug 1197275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197345">SUSE bug 1197345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199889">SUSE bug 1199889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200175">SUSE bug 1200175</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3652/">CVE-2021-3652</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4091/">CVE-2021-4091</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0918/">CVE-2022-0918</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0996/">CVE-2022-0996</cve>
	<cve impact="important" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-1949/">CVE-2022-1949</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693289" comment="389-ds-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693290" comment="389-ds-devel-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693291" comment="389-ds-snmp-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693292" comment="lib389-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693293" comment="libsvrcore0-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140557" version="1" class="patch">
	<metadata>
		<title>Security update for openssl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1200550" ref_url="https://bugzilla.suse.com/1200550" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2068" ref_url="https://www.suse.com/security/cve/CVE-2022-2068/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011349.html" source="SUSE-SU"/>
		<description>
This update for openssl fixes the following issues:

- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-24"/>
	<updated date="2022-06-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1200550">SUSE bug 1200550</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2068/">CVE-2022-2068</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693294" comment="libopenssl-1_1-devel-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692790" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693295" comment="libopenssl1_1-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692792" comment="libopenssl1_1-32bit-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693296" comment="libopenssl1_1-hmac-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692794" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693297" comment="openssl-1_1-1.1.0i-150100.14.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140558" version="1" class="patch">
	<metadata>
		<title>Security update for liblouis (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1130813" ref_url="https://bugzilla.suse.com/1130813" source="BUGZILLA"/>
		<reference ref_id="1197085" ref_url="https://bugzilla.suse.com/1197085" source="BUGZILLA"/>
		<reference ref_id="1200120" ref_url="https://bugzilla.suse.com/1200120" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26981" ref_url="https://www.suse.com/security/cve/CVE-2022-26981/" source="CVE"/>
		<reference ref_id="CVE-2022-31783" ref_url="https://www.suse.com/security/cve/CVE-2022-31783/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011386.html" source="SUSE-SU"/>
		<description>
This update for liblouis fixes the following issues:

- CVE-2022-26981: fix buffer overrun in compilePassOpcode (bsc#1197085).
- CVE-2022-31783: prevent an invalid memory write in compileRule (bsc#1200120).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-04"/>
	<updated date="2022-07-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1130813">SUSE bug 1130813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197085">SUSE bug 1197085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200120">SUSE bug 1200120</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26981/">CVE-2022-26981</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-31783/">CVE-2022-31783</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693311" comment="liblouis-data-3.3.0-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693312" comment="liblouis-devel-3.3.0-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693313" comment="liblouis14-3.3.0-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693314" comment="python3-louis-3.3.0-150000.4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140559" version="1" class="patch">
	<metadata>
		<title>Security update for dpdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011405.html" source="SUSE-SU"/>
		<description>

This update of dpdk fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-05"/>
	<updated date="2022-07-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693332" comment="dpdk-18.11.9-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693333" comment="dpdk-devel-18.11.9-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693334" comment="dpdk-kmp-default-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693335" comment="dpdk-tools-18.11.9-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693336" comment="libdpdk-18_11-18.11.9-150100.4.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140560" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1200628" ref_url="https://bugzilla.suse.com/1200628" source="BUGZILLA"/>
		<reference ref_id="1200645" ref_url="https://bugzilla.suse.com/1200645" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31625" ref_url="https://www.suse.com/security/cve/CVE-2022-31625/" source="CVE"/>
		<reference ref_id="CVE-2022-31626" ref_url="https://www.suse.com/security/cve/CVE-2022-31626/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011408.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2022-31625: Fixed uninitialized pointers free in Postgres extension. (bsc#1200645)
- CVE-2022-31626: Fixed buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver. (bsc#1200628).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-05"/>
	<updated date="2022-07-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200628">SUSE bug 1200628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200645">SUSE bug 1200645</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31625/">CVE-2022-31625</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31626/">CVE-2022-31626</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693338" comment="apache2-mod_php7-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693339" comment="php7-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693340" comment="php7-bcmath-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693341" comment="php7-bz2-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693342" comment="php7-calendar-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693343" comment="php7-ctype-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693344" comment="php7-curl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693345" comment="php7-dba-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693346" comment="php7-devel-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693347" comment="php7-dom-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693348" comment="php7-enchant-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693349" comment="php7-exif-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693350" comment="php7-fastcgi-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693351" comment="php7-fileinfo-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693352" comment="php7-fpm-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693353" comment="php7-ftp-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693354" comment="php7-gd-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693355" comment="php7-gettext-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693356" comment="php7-gmp-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693357" comment="php7-iconv-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693358" comment="php7-intl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693359" comment="php7-json-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693360" comment="php7-ldap-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693361" comment="php7-mbstring-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693362" comment="php7-mysql-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693363" comment="php7-odbc-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693364" comment="php7-opcache-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693365" comment="php7-openssl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693366" comment="php7-pcntl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693367" comment="php7-pdo-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692631" comment="php7-pear-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692632" comment="php7-pear-Archive_Tar-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693368" comment="php7-pgsql-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693369" comment="php7-phar-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693370" comment="php7-posix-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693371" comment="php7-readline-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693372" comment="php7-shmop-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693373" comment="php7-snmp-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693374" comment="php7-soap-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693375" comment="php7-sockets-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693376" comment="php7-sodium-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693377" comment="php7-sqlite-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693378" comment="php7-sysvmsg-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693379" comment="php7-sysvsem-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693380" comment="php7-sysvshm-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693381" comment="php7-tidy-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693382" comment="php7-tokenizer-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693383" comment="php7-wddx-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693384" comment="php7-xmlreader-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693385" comment="php7-xmlrpc-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693386" comment="php7-xmlwriter-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693387" comment="php7-xsl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693388" comment="php7-zip-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693389" comment="php7-zlib-7.2.5-150000.4.95.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140561" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1200793" ref_url="https://bugzilla.suse.com/1200793" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2200" ref_url="https://www.suse.com/security/cve/CVE-2022-2200/" source="CVE"/>
		<reference ref_id="CVE-2022-31744" ref_url="https://www.suse.com/security/cve/CVE-2022-31744/" source="CVE"/>
		<reference ref_id="CVE-2022-34468" ref_url="https://www.suse.com/security/cve/CVE-2022-34468/" source="CVE"/>
		<reference ref_id="CVE-2022-34470" ref_url="https://www.suse.com/security/cve/CVE-2022-34470/" source="CVE"/>
		<reference ref_id="CVE-2022-34472" ref_url="https://www.suse.com/security/cve/CVE-2022-34472/" source="CVE"/>
		<reference ref_id="CVE-2022-34478" ref_url="https://www.suse.com/security/cve/CVE-2022-34478/" source="CVE"/>
		<reference ref_id="CVE-2022-34479" ref_url="https://www.suse.com/security/cve/CVE-2022-34479/" source="CVE"/>
		<reference ref_id="CVE-2022-34481" ref_url="https://www.suse.com/security/cve/CVE-2022-34481/" source="CVE"/>
		<reference ref_id="CVE-2022-34484" ref_url="https://www.suse.com/security/cve/CVE-2022-34484/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011411.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 91.11.0 ESR (MFSA 2022-25) (bsc#1200793):

- CVE-2022-2200: Undesired attributes could be set as part of prototype pollution (bmo#1771381)
- CVE-2022-31744: CSP bypass enabling stylesheet injection (bmo#1757604)
- CVE-2022-34468: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI (bmo#1768537)
- CVE-2022-34470: Use-after-free in nsSHistory (bmo#1765951)
- CVE-2022-34472: Unavailable PAC file resulted in OCSP requests being blocked (bmo#1770123)
- CVE-2022-34478: Microsoft protocols can be attacked if a user accepts a prompt (bmo#1773717)
- CVE-2022-34479: A popup window could be resized in a way to overlay the address bar with web content (bmo#1745595)
- CVE-2022-34481: Potential integer overflow in ReplaceElementsAt (bmo#1497246)
- CVE-2022-34484: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11 (bmo#1763634, bmo#1772651)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-06"/>
	<updated date="2022-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200793">SUSE bug 1200793</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2200/">CVE-2022-2200</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-31744/">CVE-2022-31744</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34468/">CVE-2022-34468</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34470/">CVE-2022-34470</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34472/">CVE-2022-34472</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34478/">CVE-2022-34478</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34479/">CVE-2022-34479</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34481/">CVE-2022-34481</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34484/">CVE-2022-34484</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699237" comment="MozillaFirefox-91.11.0-150000.150.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699238" comment="MozillaFirefox-devel-91.11.0-150000.150.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699239" comment="MozillaFirefox-translations-common-91.11.0-150000.150.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699240" comment="MozillaFirefox-translations-other-91.11.0-150000.150.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140562" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201099" ref_url="https://bugzilla.suse.com/1201099" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2097" ref_url="https://www.suse.com/security/cve/CVE-2022-2097/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011422.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2022-2097: Fixed partial missing encryption in AES OCB mode (bsc#1201099).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-06"/>
	<updated date="2022-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201099">SUSE bug 1201099</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-2097/">CVE-2022-2097</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699241" comment="libopenssl-1_1-devel-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699103" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699242" comment="libopenssl1_1-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699105" comment="libopenssl1_1-32bit-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699243" comment="libopenssl1_1-hmac-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699107" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699244" comment="openssl-1_1-1.1.0i-150100.14.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140563" version="1" class="patch">
	<metadata>
		<title>Security update for oracleasm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011438.html" source="SUSE-SU"/>
		<description>

This update of oracleasm fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-06"/>
	<updated date="2022-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693337" comment="oracleasm-kmp-default-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140564" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1199166" ref_url="https://bugzilla.suse.com/1199166" source="BUGZILLA"/>
		<reference ref_id="1200550" ref_url="https://bugzilla.suse.com/1200550" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1292" ref_url="https://www.suse.com/security/cve/CVE-2022-1292/" source="CVE"/>
		<reference ref_id="CVE-2022-2068" ref_url="https://www.suse.com/security/cve/CVE-2022-2068/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011468.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

- CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-07"/>
	<updated date="2022-07-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1199166">SUSE bug 1199166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200550">SUSE bug 1200550</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1292/">CVE-2022-1292</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2068/">CVE-2022-2068</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693308" comment="libopenssl-1_0_0-devel-1.0.2p-150000.3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693309" comment="libopenssl1_0_0-1.0.2p-150000.3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693310" comment="openssl-1_0_0-1.0.2p-150000.3.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140565" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1200338" ref_url="https://bugzilla.suse.com/1200338" source="BUGZILLA"/>
		<reference ref_id="1200340" ref_url="https://bugzilla.suse.com/1200340" source="BUGZILLA"/>
		<reference ref_id="1200341" ref_url="https://bugzilla.suse.com/1200341" source="BUGZILLA"/>
		<reference ref_id="1200345" ref_url="https://bugzilla.suse.com/1200345" source="BUGZILLA"/>
		<reference ref_id="1200348" ref_url="https://bugzilla.suse.com/1200348" source="BUGZILLA"/>
		<reference ref_id="1200350" ref_url="https://bugzilla.suse.com/1200350" source="BUGZILLA"/>
		<reference ref_id="1200352" ref_url="https://bugzilla.suse.com/1200352" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26377" ref_url="https://www.suse.com/security/cve/CVE-2022-26377/" source="CVE"/>
		<reference ref_id="CVE-2022-28614" ref_url="https://www.suse.com/security/cve/CVE-2022-28614/" source="CVE"/>
		<reference ref_id="CVE-2022-28615" ref_url="https://www.suse.com/security/cve/CVE-2022-28615/" source="CVE"/>
		<reference ref_id="CVE-2022-29404" ref_url="https://www.suse.com/security/cve/CVE-2022-29404/" source="CVE"/>
		<reference ref_id="CVE-2022-30522" ref_url="https://www.suse.com/security/cve/CVE-2022-30522/" source="CVE"/>
		<reference ref_id="CVE-2022-30556" ref_url="https://www.suse.com/security/cve/CVE-2022-30556/" source="CVE"/>
		<reference ref_id="CVE-2022-31813" ref_url="https://www.suse.com/security/cve/CVE-2022-31813/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011487.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2022-26377: Fixed possible request smuggling in mod_proxy_ajp (bsc#1200338)
- CVE-2022-28614: Fixed read beyond bounds via ap_rwrite() (bsc#1200340)
- CVE-2022-28615: Fixed read beyond bounds in ap_strcmp_match() (bsc#1200341)
- CVE-2022-29404: Fixed denial of service in mod_lua r:parsebody (bsc#1200345)
- CVE-2022-30556: Fixed information disclosure in mod_lua with websockets (bsc#1200350)
- CVE-2022-30522: Fixed mod_sed denial of service (bsc#1200352)
- CVE-2022-31813: Fixed mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism (bsc#1200348)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200338">SUSE bug 1200338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200340">SUSE bug 1200340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200341">SUSE bug 1200341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200345">SUSE bug 1200345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200348">SUSE bug 1200348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200350">SUSE bug 1200350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200352">SUSE bug 1200352</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-26377/">CVE-2022-26377</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28614/">CVE-2022-28614</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-28615/">CVE-2022-28615</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-29404/">CVE-2022-29404</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-30522/">CVE-2022-30522</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-30556/">CVE-2022-30556</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-31813/">CVE-2022-31813</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693323" comment="apache2-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693324" comment="apache2-devel-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692563" comment="apache2-doc-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693325" comment="apache2-prefork-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693326" comment="apache2-utils-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693327" comment="apache2-worker-2.4.33-150000.3.69.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140566" version="1" class="patch">
	<metadata>
		<title>Security update for fwupdate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011486.html" source="SUSE-SU"/>
		<description>

This update of fwupdate fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693328" comment="fwupdate-12-150100.11.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693329" comment="fwupdate-devel-12-150100.11.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693330" comment="fwupdate-efi-12-150100.11.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693331" comment="libfwup1-12-150100.11.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140567" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker and runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1192051" ref_url="https://bugzilla.suse.com/1192051" source="BUGZILLA"/>
		<reference ref_id="1199460" ref_url="https://bugzilla.suse.com/1199460" source="BUGZILLA"/>
		<reference ref_id="1199565" ref_url="https://bugzilla.suse.com/1199565" source="BUGZILLA"/>
		<reference ref_id="1200088" ref_url="https://bugzilla.suse.com/1200088" source="BUGZILLA"/>
		<reference ref_id="1200145" ref_url="https://bugzilla.suse.com/1200145" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29162" ref_url="https://www.suse.com/security/cve/CVE-2022-29162/" source="CVE"/>
		<reference ref_id="CVE-2022-31030" ref_url="https://www.suse.com/security/cve/CVE-2022-31030/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2341-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011489.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker and runc fixes the following issues:

containerd:

- CVE-2022-31030: Fixed denial of service via invocation of the ExecSync API (bsc#1200145)

docker:

- Update to Docker 20.10.17-ce. See upstream changelog online at
  https://docs.docker.com/engine/release-notes/#201017. (bsc#1200145)

runc:

Update to runc v1.1.3.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.3.

* Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
  s390 and s390x. This solves the issue where syscalls the host kernel did not
  support would return `-EPERM` despite the existence of the `-ENOSYS` stub
  code (this was due to how s390x does syscall multiplexing).
* Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
  intended; this fix does not affect runc binary itself but is important for
  libcontainer users such as Kubernetes.
* Inability to compile with recent clang due to an issue with duplicate
  constants in libseccomp-golang.
* When using systemd cgroup driver, skip adding device paths that don't exist,
  to stop systemd from emitting warnings about those paths.
* Socket activation was failing when more than 3 sockets were used.
* Various CI fixes.
* Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
- Fixed issues with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. (bsc#1192051 bsc#1199565)

Update to runc v1.1.2.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.2.

Security issue fixed:

- CVE-2022-29162: A bug was found in runc where runc exec --cap executed processes with
  non-empty inheritable Linux process capabilities, creating an atypical Linux
  environment. (bsc#1199460)

- `runc spec` no longer sets any inheritable capabilities in the created
  example OCI spec (`config.json`) file.

Update to runc v1.1.1.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.1.

* runc run/start can now run a container with read-only /dev in OCI spec,
  rather than error out. (#3355)
* runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
  libcontainer systemd v2 manager no longer errors out if one of the files
  listed in /sys/kernel/cgroup/delegate do not exist in container's
  cgroup. (#3387, #3404)
* Loosen OCI spec validation to avoid bogus 'Intel RDT is not supported'
  error. (#3406)
* libcontainer/cgroups no longer panics in cgroup v1 managers if stat
  of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)

Update to runc v1.1.0.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.0.

- libcontainer will now refuse to build without the nsenter package being
  correctly compiled (specifically this requires CGO to be enabled). This
  should avoid folks accidentally creating broken runc binaries (and
  incorrectly importing our internal libraries into their projects). (#3331)

Update to runc v1.1.0~rc1.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.

+ Add support for RDMA cgroup added in Linux 4.11.
* runc exec now produces exit code of 255 when the exec failed.
  This may help in distinguishing between runc exec failures
  (such as invalid options, non-running container or non-existent
  binary etc.) and failures of the command being executed.
+ runc run: new --keep option to skip removal exited containers artefacts.
  This might be useful to check the state (e.g. of cgroup controllers) after
  the container has￼exited.
+ seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
  (the latter is just an alias for SCMP_ACT_KILL).
+ seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
  users to create sophisticated seccomp filters where syscalls can be
  efficiently emulated by privileged processes on the host.
+ checkpoint/restore: add an option (--lsm-mount-context) to set
  a different LSM mount context on restore.
+ intelrdt: support ClosID parameter.
+ runc exec --cgroup: an option to specify a (non-top) in-container cgroup
  to use for the process being executed.
+ cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
  machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
  run/exec now adds the container to the appropriate cgroup under it).
+ sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
  behaviour.
+ mounts: add support for bind-mounts which are inaccessible after switching
  the user namespace. Note that this does not permit the container any
  additional access to the host filesystem, it simply allows containers to
  have bind-mounts configured for paths the user can access but have
  restrictive access control settings for other users.
+ Add support for recursive mount attributes using mount_setattr(2). These
  have the same names as the proposed mount(8) options -- just prepend r
  to the option name (such as rro).
+ Add runc features subcommand to allow runc users to detect what features
  runc has been built with. This includes critical information such as
  supported mount flags, hook names, and so on. Note that the output of this
  command is subject to change and will not be considered stable until runc
  1.2 at the earliest. The runtime-spec specification for this feature is
  being developed in opencontainers/runtime-spec#1130.
* system: improve performance of /proc/$pid/stat parsing.
* cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
  the ownership of certain cgroup control files (as per
  /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
  process.
* runc checkpoint/restore: fixed for containers with an external bind mount
  which destination is a symlink.
* cgroup: improve openat2 handling for cgroup directory handle hardening.
  runc delete -f now succeeds (rather than timing out) on a paused
  container.
* runc run/start/exec now refuses a frozen cgroup (paused container in case of
  exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of the release.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192051">SUSE bug 1192051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199460">SUSE bug 1199460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199565">SUSE bug 1199565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200088">SUSE bug 1200088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200145">SUSE bug 1200145</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-29162/">CVE-2022-29162</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-31030/">CVE-2022-31030</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692544" comment="containerd-1.6.6-150000.73.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692545" comment="containerd-ctr-1.6.6-150000.73.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692546" comment="docker-20.10.17_ce-150000.166.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684372" comment="docker-bash-completion-20.10.17_ce-150000.166.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692547" comment="runc-1.1.3-150000.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140568" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198511" ref_url="https://bugzilla.suse.com/1198511" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-20107" ref_url="https://www.suse.com/security/cve/CVE-2015-20107/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011485.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198511">SUSE bug 1198511</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2015-20107/">CVE-2015-20107</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693315" comment="libpython2_7-1_0-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693316" comment="python-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693317" comment="python-base-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693318" comment="python-curses-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693319" comment="python-devel-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693320" comment="python-gdbm-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693321" comment="python-tk-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693322" comment="python-xml-2.7.18-150000.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140569" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1186819" ref_url="https://bugzilla.suse.com/1186819" source="BUGZILLA"/>
		<reference ref_id="1190566" ref_url="https://bugzilla.suse.com/1190566" source="BUGZILLA"/>
		<reference ref_id="1192249" ref_url="https://bugzilla.suse.com/1192249" source="BUGZILLA"/>
		<reference ref_id="1193179" ref_url="https://bugzilla.suse.com/1193179" source="BUGZILLA"/>
		<reference ref_id="1198511" ref_url="https://bugzilla.suse.com/1198511" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-20107" ref_url="https://www.suse.com/security/cve/CVE-2015-20107/" source="CVE"/>
		<reference ref_id="CVE-2021-3572" ref_url="https://www.suse.com/security/cve/CVE-2021-3572/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011496.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

Security issues fixed:

- CVE-2021-3572: Update bundled pip wheel to the latest SLE version (bsc#1186819)
- CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).

Other bugs fixed:

- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-11"/>
	<updated date="2022-07-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186819">SUSE bug 1186819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190566">SUSE bug 1190566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192249">SUSE bug 1192249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193179">SUSE bug 1193179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198511">SUSE bug 1198511</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2015-20107/">CVE-2015-20107</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3572/">CVE-2021-3572</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693298" comment="libpython3_6m1_0-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693299" comment="python3-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693300" comment="python3-base-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693301" comment="python3-curses-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693302" comment="python3-dbm-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693303" comment="python3-devel-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693304" comment="python3-idle-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693305" comment="python3-testsuite-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693306" comment="python3-tk-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693307" comment="python3-tools-3.6.15-150000.3.106.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140570" version="1" class="patch">
	<metadata>
		<title>Security update for pcre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1199232" ref_url="https://bugzilla.suse.com/1199232" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1586" ref_url="https://www.suse.com/security/cve/CVE-2022-1586/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011510.html" source="SUSE-SU"/>
		<description>
This update for pcre fixes the following issues:

- CVE-2022-1586: Fixed unicode property matching issue. (bsc#1199232)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-12"/>
	<updated date="2022-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199232">SUSE bug 1199232</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1586/">CVE-2022-1586</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693390" comment="libpcre1-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684362" comment="libpcre1-32bit-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693391" comment="libpcre16-0-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693392" comment="libpcrecpp0-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684365" comment="libpcrecpp0-32bit-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693393" comment="libpcreposix0-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693394" comment="pcre-devel-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693395" comment="pcre-tools-8.45-150000.20.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140571" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194179" ref_url="https://bugzilla.suse.com/1194179" source="BUGZILLA"/>
		<reference ref_id="1194181" ref_url="https://bugzilla.suse.com/1194181" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2319" ref_url="https://www.suse.com/security/cve/CVE-2022-2319/" source="CVE"/>
		<reference ref_id="CVE-2022-2320" ref_url="https://www.suse.com/security/cve/CVE-2022-2320/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011518.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2022-2319: Fixed out-of-bounds access in _CheckSetSections() (ZDI-CAN-16062) (bsc#1194179).
- CVE-2022-2320: Fixed out-of-bounds access in CheckSetDeviceIndicators() (ZDI-CAN-16070) (bsc#1194181). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-12"/>
	<updated date="2022-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194179">SUSE bug 1194179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194181">SUSE bug 1194181</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2319/">CVE-2022-2319</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2320/">CVE-2022-2320</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699245" comment="xorg-x11-server-1.20.3-150100.14.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699246" comment="xorg-x11-server-extra-1.20.3-150100.14.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699247" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140572" version="1" class="patch">
	<metadata>
		<title>Security update for python-PyJWT (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1199756" ref_url="https://bugzilla.suse.com/1199756" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29217" ref_url="https://www.suse.com/security/cve/CVE-2022-29217/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2403-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011549.html" source="SUSE-SU"/>
		<description>
This update for python-PyJWT fixes the following issues:

- CVE-2022-29217: Fixed key confusion through non-blocklisted public key format (bsc#1199756).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-14"/>
	<updated date="2022-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199756">SUSE bug 1199756</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29217/">CVE-2022-29217</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692808" comment="python3-PyJWT-1.7.1-150100.6.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140573" version="1" class="patch">
	<metadata>
		<title>Security update for crash (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011559.html" source="SUSE-SU"/>
		<description>

This update of crash fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-15"/>
	<updated date="2022-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699248" comment="crash-7.2.1-150100.9.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699249" comment="crash-devel-7.2.1-150100.9.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699114" comment="crash-gcore-7.2.1-150100.9.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699250" comment="crash-kmp-default-7.2.1_k4.12.14_150100.197.114-150100.9.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140574" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194013" ref_url="https://bugzilla.suse.com/1194013" source="BUGZILLA"/>
		<reference ref_id="1196901" ref_url="https://bugzilla.suse.com/1196901" source="BUGZILLA"/>
		<reference ref_id="1199487" ref_url="https://bugzilla.suse.com/1199487" source="BUGZILLA"/>
		<reference ref_id="1199657" ref_url="https://bugzilla.suse.com/1199657" source="BUGZILLA"/>
		<reference ref_id="1200571" ref_url="https://bugzilla.suse.com/1200571" source="BUGZILLA"/>
		<reference ref_id="1200599" ref_url="https://bugzilla.suse.com/1200599" source="BUGZILLA"/>
		<reference ref_id="1200604" ref_url="https://bugzilla.suse.com/1200604" source="BUGZILLA"/>
		<reference ref_id="1200605" ref_url="https://bugzilla.suse.com/1200605" source="BUGZILLA"/>
		<reference ref_id="1200608" ref_url="https://bugzilla.suse.com/1200608" source="BUGZILLA"/>
		<reference ref_id="1200619" ref_url="https://bugzilla.suse.com/1200619" source="BUGZILLA"/>
		<reference ref_id="1200692" ref_url="https://bugzilla.suse.com/1200692" source="BUGZILLA"/>
		<reference ref_id="1200762" ref_url="https://bugzilla.suse.com/1200762" source="BUGZILLA"/>
		<reference ref_id="1201050" ref_url="https://bugzilla.suse.com/1201050" source="BUGZILLA"/>
		<reference ref_id="1201080" ref_url="https://bugzilla.suse.com/1201080" source="BUGZILLA"/>
		<reference ref_id="1201251" ref_url="https://bugzilla.suse.com/1201251" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26341" ref_url="https://www.suse.com/security/cve/CVE-2021-26341/" source="CVE"/>
		<reference ref_id="CVE-2021-4157" ref_url="https://www.suse.com/security/cve/CVE-2021-4157/" source="CVE"/>
		<reference ref_id="CVE-2022-1679" ref_url="https://www.suse.com/security/cve/CVE-2022-1679/" source="CVE"/>
		<reference ref_id="CVE-2022-20132" ref_url="https://www.suse.com/security/cve/CVE-2022-20132/" source="CVE"/>
		<reference ref_id="CVE-2022-20141" ref_url="https://www.suse.com/security/cve/CVE-2022-20141/" source="CVE"/>
		<reference ref_id="CVE-2022-20154" ref_url="https://www.suse.com/security/cve/CVE-2022-20154/" source="CVE"/>
		<reference ref_id="CVE-2022-2318" ref_url="https://www.suse.com/security/cve/CVE-2022-2318/" source="CVE"/>
		<reference ref_id="CVE-2022-26365" ref_url="https://www.suse.com/security/cve/CVE-2022-26365/" source="CVE"/>
		<reference ref_id="CVE-2022-29900" ref_url="https://www.suse.com/security/cve/CVE-2022-29900/" source="CVE"/>
		<reference ref_id="CVE-2022-29901" ref_url="https://www.suse.com/security/cve/CVE-2022-29901/" source="CVE"/>
		<reference ref_id="CVE-2022-33740" ref_url="https://www.suse.com/security/cve/CVE-2022-33740/" source="CVE"/>
		<reference ref_id="CVE-2022-33741" ref_url="https://www.suse.com/security/cve/CVE-2022-33741/" source="CVE"/>
		<reference ref_id="CVE-2022-33742" ref_url="https://www.suse.com/security/cve/CVE-2022-33742/" source="CVE"/>
		<reference ref_id="CVE-2022-33981" ref_url="https://www.suse.com/security/cve/CVE-2022-33981/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011558.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).
- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).
- CVE-2022-20132: Fixed out of bounds read due to improper input validation in lg_probe and related functions of hid-lg.c (bsc#1200619).
- CVE-2022-33981: Fixed use-after-free in floppy driver (bsc#1200692)
- CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604).
- CVE-2021-4157: Fixed an out of memory bounds write flaw in the NFS subsystem, related to the replication of files with NFS. A user could potentially crash the system or escalate privileges on the system (bsc#1194013).
- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).
- CVE-2022-2318: Fixed a use-after-free vulnerabilities in the timer handler in net/rose/rose_timer.c that allow attackers to crash the system without any privileges (bsc#1201251).
- CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762).
- CVE-2021-26341: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bsc#1201050).

The following non-security bugs were fixed:

- exec: Force single empty string when argv is empty (bsc#1200571).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-15"/>
	<updated date="2022-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194013">SUSE bug 1194013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196901">SUSE bug 1196901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199487">SUSE bug 1199487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199657">SUSE bug 1199657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200571">SUSE bug 1200571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200599">SUSE bug 1200599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200604">SUSE bug 1200604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200605">SUSE bug 1200605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200608">SUSE bug 1200608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200619">SUSE bug 1200619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200692">SUSE bug 1200692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200762">SUSE bug 1200762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201050">SUSE bug 1201050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201080">SUSE bug 1201080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201251">SUSE bug 1201251</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-26341/">CVE-2021-26341</cve>
	<cve impact="low" cvss3="3.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4157/">CVE-2021-4157</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1679/">CVE-2022-1679</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-20132/">CVE-2022-20132</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20141/">CVE-2022-20141</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20154/">CVE-2022-20154</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2318/">CVE-2022-2318</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-26365/">CVE-2022-26365</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29900/">CVE-2022-29900</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29901/">CVE-2022-29901</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33740/">CVE-2022-33740</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33741/">CVE-2022-33741</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33742/">CVE-2022-33742</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-33981/">CVE-2022-33981</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699251" comment="kernel-default-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699252" comment="kernel-default-base-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699253" comment="kernel-default-devel-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699119" comment="kernel-devel-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699120" comment="kernel-docs-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699121" comment="kernel-macros-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699254" comment="kernel-obs-build-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699123" comment="kernel-source-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699255" comment="kernel-syms-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699256" comment="reiserfs-kmp-default-4.12.14-150100.197.117.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140575" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201267" ref_url="https://bugzilla.suse.com/1201267" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-30550" ref_url="https://www.suse.com/security/cve/CVE-2022-30550/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2432-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011581.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 fixes the following issues:

- CVE-2022-30550: Fixed privilege escalation in dovecot when similar master and non-master passdbs are used (bsc#1201267).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-18"/>
	<updated date="2022-07-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201267">SUSE bug 1201267</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-30550/">CVE-2022-30550</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699291" comment="dovecot23-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699292" comment="dovecot23-backend-mysql-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699293" comment="dovecot23-backend-pgsql-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699294" comment="dovecot23-backend-sqlite-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699295" comment="dovecot23-devel-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699296" comment="dovecot23-fts-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699297" comment="dovecot23-fts-lucene-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699298" comment="dovecot23-fts-solr-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699299" comment="dovecot23-fts-squat-2.3.15-150100.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140576" version="1" class="patch">
	<metadata>
		<title>Security update for python2-numpy (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1193907" ref_url="https://bugzilla.suse.com/1193907" source="BUGZILLA"/>
		<reference ref_id="1193911" ref_url="https://bugzilla.suse.com/1193911" source="BUGZILLA"/>
		<reference ref_id="1193913" ref_url="https://bugzilla.suse.com/1193913" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33430" ref_url="https://www.suse.com/security/cve/CVE-2021-33430/" source="CVE"/>
		<reference ref_id="CVE-2021-41495" ref_url="https://www.suse.com/security/cve/CVE-2021-41495/" source="CVE"/>
		<reference ref_id="CVE-2021-41496" ref_url="https://www.suse.com/security/cve/CVE-2021-41496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011595.html" source="SUSE-SU"/>
		<description>
This update for python2-numpy fixes the following issues:

- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort (bsc#1193911).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-19"/>
	<updated date="2022-07-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193907">SUSE bug 1193907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193911">SUSE bug 1193911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193913">SUSE bug 1193913</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33430/">CVE-2021-33430</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41495/">CVE-2021-41495</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41496/">CVE-2021-41496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699235" comment="python2-numpy-1.16.5-150000.1.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699236" comment="python2-numpy-devel-1.16.5-150000.1.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140577" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201221" ref_url="https://bugzilla.suse.com/1201221" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22662" ref_url="https://www.suse.com/security/cve/CVE-2022-22662/" source="CVE"/>
		<reference ref_id="CVE-2022-22677" ref_url="https://www.suse.com/security/cve/CVE-2022-22677/" source="CVE"/>
		<reference ref_id="CVE-2022-26710" ref_url="https://www.suse.com/security/cve/CVE-2022-26710/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011629.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.36.4 (bsc#1201221):

- CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information.
- CVE-2022-22677: The video in a webRTC call may be interrupted if the audio capture gets interrupted.
- CVE-2022-26710: Processing maliciously crafted web content may lead to arbitrary code execution.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201221">SUSE bug 1201221</bugzilla>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22662/">CVE-2022-22662</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-22677/">CVE-2022-22677</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26710/">CVE-2022-26710</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699284" comment="libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699285" comment="libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699085" comment="libwebkit2gtk3-lang-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699286" comment="typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699287" comment="typelib-1_0-WebKit2-4_0-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699288" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699289" comment="webkit2gtk-4_0-injected-bundles-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699290" comment="webkit2gtk3-devel-2.36.4-150000.3.106.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140578" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198671" ref_url="https://bugzilla.suse.com/1198671" source="BUGZILLA"/>
		<reference ref_id="1198672" ref_url="https://bugzilla.suse.com/1198672" source="BUGZILLA"/>
		<reference ref_id="1198673" ref_url="https://bugzilla.suse.com/1198673" source="BUGZILLA"/>
		<reference ref_id="1198674" ref_url="https://bugzilla.suse.com/1198674" source="BUGZILLA"/>
		<reference ref_id="1198675" ref_url="https://bugzilla.suse.com/1198675" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21426" ref_url="https://www.suse.com/security/cve/CVE-2022-21426/" source="CVE"/>
		<reference ref_id="CVE-2022-21434" ref_url="https://www.suse.com/security/cve/CVE-2022-21434/" source="CVE"/>
		<reference ref_id="CVE-2022-21443" ref_url="https://www.suse.com/security/cve/CVE-2022-21443/" source="CVE"/>
		<reference ref_id="CVE-2022-21476" ref_url="https://www.suse.com/security/cve/CVE-2022-21476/" source="CVE"/>
		<reference ref_id="CVE-2022-21496" ref_url="https://www.suse.com/security/cve/CVE-2022-21496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011636.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

Update to version jdk8u332 - April 2022 CPU (icedtea-3.23.0)

- CVE-2022-21426: Better XPath expression handling (bsc#1198672)
- CVE-2022-21443: Improved Object Identification (bsc#1198675)
- CVE-2022-21434: Better invocation handler handling (bsc#1198674)
- CVE-2022-21476: Improve Santuario processing (bsc#1198671)
- CVE-2022-21496: Improve URL supports (bsc#1198673)

And further Security fixes, Import of OpenJDK 8 u332, Backports and Bug fixes.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198671">SUSE bug 1198671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198672">SUSE bug 1198672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198673">SUSE bug 1198673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198674">SUSE bug 1198674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198675">SUSE bug 1198675</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21426/">CVE-2022-21426</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21434/">CVE-2022-21434</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21443/">CVE-2022-21443</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21476/">CVE-2022-21476</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21496/">CVE-2022-21496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699269" comment="java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699270" comment="java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699271" comment="java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699272" comment="java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140579" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1192079" ref_url="https://bugzilla.suse.com/1192079" source="BUGZILLA"/>
		<reference ref_id="1192080" ref_url="https://bugzilla.suse.com/1192080" source="BUGZILLA"/>
		<reference ref_id="1192086" ref_url="https://bugzilla.suse.com/1192086" source="BUGZILLA"/>
		<reference ref_id="1192087" ref_url="https://bugzilla.suse.com/1192087" source="BUGZILLA"/>
		<reference ref_id="1192228" ref_url="https://bugzilla.suse.com/1192228" source="BUGZILLA"/>
		<reference ref_id="1198486" ref_url="https://bugzilla.suse.com/1198486" source="BUGZILLA"/>
		<reference ref_id="1200027" ref_url="https://bugzilla.suse.com/1200027" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31741" ref_url="https://www.suse.com/security/cve/CVE-2022-31741/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2533-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011637.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

Various FIPS 140-3 related fixes were backported from SUSE Linux Enterprise 15 SP4:

- Makes the PBKDF known answer test compliant with NIST SP800-132. (bsc#1192079). 
- FIPS: Add on-demand integrity tests through sftk_FIPSRepeatIntegrityCheck()
  (bsc#1198980).
- FIPS: mark algorithms as approved/non-approved according to security policy
  (bsc#1191546, bsc#1201298).
- FIPS: remove hard disabling of unapproved algorithms. This requirement is now
  fulfilled by the service level indicator (bsc#1200325).
- Run test suite at build time, and make it pass (bsc#1198486).
- FIPS: skip algorithms that are hard disabled in FIPS mode.
- Prevent expired PayPalEE cert from failing the tests.
- Allow checksumming to be disabled, but only if we entered FIPS mode
  due to NSS_FIPS being set, not if it came from /proc.
- FIPS: Make the PBKDF known answer test compliant with NIST SP800-132.
- Update FIPS validation string to version-release format.
- FIPS: remove XCBC MAC from list of FIPS approved algorithms.
- Enable NSS_ENABLE_FIPS_INDICATORS and set NSS_FIPS_MODULE_ID
  for build.
- FIPS: claim 3DES unapproved in FIPS mode (bsc#1192080).
- FIPS: allow testing of unapproved algorithms (bsc#1192228).
- FIPS: add version indicators. (bmo#1729550, bsc#1192086).
- FIPS: fix some secret clearing (bmo#1697303, bsc#1192087).

Version update to NSS 3.79:

- Use PK11_GetSlotInfo instead of raw C_GetSlotInfo calls.
- Update mercurial in clang-format docker image.
- Use of uninitialized pointer in lg_init after alloc fail.
- selfserv and tstclnt should use PR_GetPrefLoopbackAddrInfo.
- Add SECMOD_LockedModuleHasRemovableSlots.
- Fix secasn1d parsing of indefinite SEQUENCE inside indefinite GROUP.
- Added RFC8422 compliant TLS &lt;= 1.2 undefined/compressed ECPointFormat extension alerts.
- TLS 1.3 Server: Send protocol_version alert on unsupported ClientHello.legacy_version.
- Correct invalid record inner and outer content type alerts.
- NSS does not properly import or export pkcs12 files with large passwords and pkcs5v2 encoding.
- improve error handling after nssCKFWInstance_CreateObjectHandle.
- Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple.
- NSS 3.79 should depend on NSPR 4.34   

Version update to NSS 3.78.1:

- Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple

Version update to NSS 3.78:

- Added TLS 1.3 zero-length inner plaintext checks and tests, zero-length record/fragment handling tests.
- Reworked overlong record size checks and added TLS1.3 specific boundaries.
- Add ECH Grease Support to tstclnt
- Add a strict variant of moz::pkix::CheckCertHostname.
- Change SSL_REUSE_SERVER_ECDHE_KEY default to false.
- Make SEC_PKCS12EnableCipher succeed
- Update zlib in NSS to 1.2.12.

Version update to NSS 3.77:

- Fix link to TLS page on wireshark wiki
- Add two D-TRUST 2020 root certificates.
- Add Telia Root CA v2 root certificate.
- Remove expired explicitly distrusted certificates from certdata.txt.
- support specific RSA-PSS parameters in mozilla::pkix
- Remove obsolete stateEnd check in SEC_ASN1DecoderUpdate.
- Remove token member from NSSSlot struct.
- Provide secure variants of mpp_pprime and mpp_make_prime.
- Support UTF-8 library path in the module spec string.
- Update nssUTF8_Length to RFC 3629 and fix buffer overrun.
- Update googletest to 1.11.0
- Add SetTls13GreaseEchSize to experimental API.
- TLS 1.3 Illegal legacy_version handling/alerts.
- Fix calculation of ECH HRR Transcript.
- Allow ld path to be set as environment variable.
- Ensure we don't read uninitialized memory in ssl gtests.
- Fix DataBuffer Move Assignment.
- internal_error alert on Certificate Request with sha1+ecdsa in TLS 1.3
- rework signature verification in mozilla::pkix

Version update to NSS 3.76.1

- Remove token member from NSSSlot struct.
- Hold tokensLock through nssToken_GetSlot calls in nssTrustDomain_GetActiveSlots.
- Check return value of PK11Slot_GetNSSToken.
- Use Wycheproof JSON for RSASSA-PSS
- Add SHA256 fingerprint comments to old certdata.txt entries.
- Avoid truncating files in nss-release-helper.py.
- Throw illegal_parameter alert for illegal extensions in handshake message.

Version update to NSS 3.75

- Make DottedOIDToCode.py compatible with python3.
- Avoid undefined shift in SSL_CERT_IS while fuzzing.
- Remove redundant key type check.
- Update ABI expectations to match ECH changes.
- Enable CKM_CHACHA20.
- check return on NSS_NoDB_Init and NSS_Shutdown.
- Run ECDSA test vectors from bltest as part of the CI tests.
- Add ECDSA test vectors to the bltest command line tool.
- Allow to build using clang's integrated assembler.
- Allow to override python for the build.
- test HKDF output rather than input.
- Use ASSERT macros to end failed tests early.
- move assignment operator for DataBuffer.
- Add test cases for ECH compression and unexpected extensions in SH.
- Update tests for ECH-13.
- Tidy up error handling.
- Add tests for ECH HRR Changes.
- Server only sends GREASE HRR extension if enabled by preference.
- Update generation of the Associated Data for ECH-13.
- When ECH is accepted, reject extensions which were only advertised in the Outer Client Hello.
- Allow for compressed, non-contiguous, extensions.
- Scramble the PSK extension in CHOuter.
- Split custom extension handling for ECH.
- Add ECH-13 HRR Handling.
- Client side ECH padding.
- Stricter ClientHelloInner Decompression.
- Remove ECH_inner extension, use new enum format.
- Update the version number for ECH-13 and adjust the ECHConfig size.

Version update to NSS 3.74

- mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses
- Ensure clients offer consistent ciphersuites after HRR
- NSS does not properly restrict server keys based on policy
- Set nssckbi version number to 2.54
- Replace Google Trust Services LLC (GTS) R4 root certificate
- Replace Google Trust Services LLC (GTS) R3 root certificate
- Replace Google Trust Services LLC (GTS) R2 root certificate
- Replace Google Trust Services LLC (GTS) R1 root certificate
- Replace GlobalSign ECC Root CA R4
- Remove Expired Root Certificates - DST Root CA X3
- Remove Expiring Cybertrust Global Root and GlobalSign root certificates
- Add renewed Autoridad de Certificacion Firmaprofesional CIF A62634068 root certificate
- Add iTrusChina ECC root certificate
- Add iTrusChina RSA root certificate
- Add ISRG Root X2 root certificate
- Add Chunghwa Telecom's HiPKI Root CA - G1 root certificate
- Avoid a clang 13 unused variable warning in opt build
- Check for missing signedData field
- Ensure DER encoded signatures are within size limits

- enable key logging option (boo#1195040)

Version update to NSS 3.73.1:

- Add SHA-2 support to mozilla::pkix's OSCP implementation

Version update to NSS 3.73

- check for missing signedData field.
- Ensure DER encoded signatures are within size limits.
- NSS needs FiPS 140-3 version indicators.
- pkix_CacheCert_Lookup doesn't return cached certs
- sunset Coverity from NSS

Fixed MFSA 2021-51 (bsc#1193170) CVE-2021-43527: Memory corruption via DER-encoded DSA and RSA-PSS signatures

Version update to NSS 3.72

- Fix nsinstall parallel failure.
- Increase KDF cache size to mitigate perf regression in about:logins

Version update to NSS 3.71

- Set nssckbi version number to 2.52.
- Respect server requirements of tlsfuzzer/test-tls13-signature-algorithms.py
- Import of PKCS#12 files with Camellia encryption is not supported
- Add HARICA Client ECC Root CA 2021.
- Add HARICA Client RSA Root CA 2021.
- Add HARICA TLS ECC Root CA 2021.
- Add HARICA TLS RSA Root CA 2021.
- Add TunTrust Root CA certificate to NSS.

Version update to NSS 3.70

- Update test case to verify fix.
- Explicitly disable downgrade check in TlsConnectStreamTls13.EchOuterWith12Max
- Explicitly disable downgrade check in TlsConnectTest.DisableFalseStartOnFallback
- Avoid using a lookup table in nssb64d.
- Use HW accelerated SHA2 on AArch64 Big Endian.
- Change default value of enableHelloDowngradeCheck to true.
- Cache additional PBE entries.
- Read HPKE vectors from official JSON.

Version update to NSS 3.69.1:

- Disable DTLS 1.0 and 1.1 by default
- integrity checks in key4.db not happening on private components with AES_CBC

NSS 3.69:

- Disable DTLS 1.0 and 1.1 by default (backed out again)
- integrity checks in key4.db not happening on private components with AES_CBC (backed out again)
- SSL handling of signature algorithms ignores environmental invalid algorithms.
- sqlite 3.34 changed it's open semantics, causing nss failures.
- Gtest update changed the gtest reports, losing gtest details in all.sh reports.
- NSS incorrectly accepting 1536 bit DH primes in FIPS mode
- SQLite calls could timeout in starvation situations.
- Coverity/cpp scanner errors found in nss 3.67
- Import the NSS documentation from MDN in nss/doc.
- NSS using a tempdir to measure sql performance not active

Version Update to 3.68.4 (bsc#1200027)

- CVE-2022-31741: Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple.  (bmo#1767590)


Mozilla NSPR was updated to version 4.34:

* add an API that returns a preferred loopback IP on hosts that have two IP stacks available.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192079">SUSE bug 1192079</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192080">SUSE bug 1192080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192086">SUSE bug 1192086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192087">SUSE bug 1192087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192228">SUSE bug 1192228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198486">SUSE bug 1198486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200027">SUSE bug 1200027</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31741/">CVE-2022-31741</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699257" comment="libfreebl3-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698490" comment="libfreebl3-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699258" comment="libfreebl3-hmac-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698492" comment="libfreebl3-hmac-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699259" comment="libsoftokn3-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698494" comment="libsoftokn3-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699260" comment="libsoftokn3-hmac-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698496" comment="libsoftokn3-hmac-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699261" comment="mozilla-nspr-4.34-150000.3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698498" comment="mozilla-nspr-32bit-4.34-150000.3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699262" comment="mozilla-nspr-devel-4.34-150000.3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699263" comment="mozilla-nss-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698501" comment="mozilla-nss-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699264" comment="mozilla-nss-certs-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698503" comment="mozilla-nss-certs-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699265" comment="mozilla-nss-devel-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699266" comment="mozilla-nss-sysinit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699267" comment="mozilla-nss-tools-3.79-150000.3.74.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140580" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1200119" ref_url="https://bugzilla.suse.com/1200119" source="BUGZILLA"/>
		<reference ref_id="1201431" ref_url="https://bugzilla.suse.com/1201431" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29187" ref_url="https://www.suse.com/security/cve/CVE-2022-29187/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011633.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- CVE-2022-29187: Incomplete fix for CVE-2022-24765: potential command injection via git worktree (bsc#1201431).
- Allow to opt-out from the check added in the security fix for CVE-2022-24765 (bsc#1200119)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200119">SUSE bug 1200119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201431">SUSE bug 1201431</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29187/">CVE-2022-29187</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699273" comment="git-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699274" comment="git-arch-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699275" comment="git-core-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699276" comment="git-cvs-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699277" comment="git-daemon-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699076" comment="git-doc-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699278" comment="git-email-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699279" comment="git-gui-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699280" comment="git-svn-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699281" comment="git-web-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699282" comment="gitk-2.26.2-150000.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140581" version="1" class="patch">
	<metadata>
		<title>Security update for logrotate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1192449" ref_url="https://bugzilla.suse.com/1192449" source="BUGZILLA"/>
		<reference ref_id="1200278" ref_url="https://bugzilla.suse.com/1200278" source="BUGZILLA"/>
		<reference ref_id="1200802" ref_url="https://bugzilla.suse.com/1200802" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011649.html" source="SUSE-SU"/>
		<description>
This update for logrotate fixes the following issues:

Security issues fixed:

- Improved coredump handing for SUID binaries (bsc#1192449).

Non-security issues fixed:

- Fixed 'logrotate emits unintended warning: keyword size not properly separated, found 0x3d' (bsc#1200278, bsc#1200802).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-25"/>
	<updated date="2022-07-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192449">SUSE bug 1192449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200278">SUSE bug 1200278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200802">SUSE bug 1200802</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699283" comment="logrotate-3.13.0-150000.4.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140582" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1185923" ref_url="https://bugzilla.suse.com/1185923" source="BUGZILLA"/>
		<reference ref_id="1186654" ref_url="https://bugzilla.suse.com/1186654" source="BUGZILLA"/>
		<reference ref_id="1200907" ref_url="https://bugzilla.suse.com/1200907" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33620" ref_url="https://www.suse.com/security/cve/CVE-2021-33620/" source="CVE"/>
		<reference ref_id="CVE-2021-46784" ref_url="https://www.suse.com/security/cve/CVE-2021-46784/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011655.html" source="SUSE-SU"/>
		<description>
This update for squid fixes the following issues:

- CVE-2021-46784: Fixed DoS when processing gopher server responses. (bsc#1200907)
- CVE-2021-33620: Fixed DoS in HTTP Response processing (bsc#1185923, bsc#1186654)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-26"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185923">SUSE bug 1185923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186654">SUSE bug 1186654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200907">SUSE bug 1200907</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33620/">CVE-2021-33620</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46784/">CVE-2021-46784</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699268" comment="squid-4.17-150000.5.32.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140583" version="1" class="patch">
	<metadata>
		<title>Security update for python-M2Crypto (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1178829" ref_url="https://bugzilla.suse.com/1178829" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25657" ref_url="https://www.suse.com/security/cve/CVE-2020-25657/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2562-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011682.html" source="SUSE-SU"/>
		<description>
This update for python-M2Crypto fixes the following issues:

- CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-27"/>
	<updated date="2022-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178829">SUSE bug 1178829</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25657/">CVE-2020-25657</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699300" comment="python2-M2Crypto-0.35.2-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699301" comment="python3-M2Crypto-0.35.2-150000.3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140584" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201758" ref_url="https://bugzilla.suse.com/1201758" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-36318" ref_url="https://www.suse.com/security/cve/CVE-2022-36318/" source="CVE"/>
		<reference ref_id="CVE-2022-36319" ref_url="https://www.suse.com/security/cve/CVE-2022-36319/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011719.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.12.0 ESR (bsc#1201758):

- CVE-2022-36319: Mouse Position spoofing with CSS transforms
- CVE-2022-36318: Directory indexes for bundled resources reflected URL parameters
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-29"/>
	<updated date="2022-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201758">SUSE bug 1201758</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36318/">CVE-2022-36318</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36319/">CVE-2022-36319</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702531" comment="MozillaFirefox-91.12.0-150000.150.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702532" comment="MozillaFirefox-devel-91.12.0-150000.150.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702533" comment="MozillaFirefox-translations-common-91.12.0-150000.150.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702534" comment="MozillaFirefox-translations-other-91.12.0-150000.150.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140585" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1199965" ref_url="https://bugzilla.suse.com/1199965" source="BUGZILLA"/>
		<reference ref_id="1199966" ref_url="https://bugzilla.suse.com/1199966" source="BUGZILLA"/>
		<reference ref_id="1200549" ref_url="https://bugzilla.suse.com/1200549" source="BUGZILLA"/>
		<reference ref_id="1201394" ref_url="https://bugzilla.suse.com/1201394" source="BUGZILLA"/>
		<reference ref_id="1201469" ref_url="https://bugzilla.suse.com/1201469" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21123" ref_url="https://www.suse.com/security/cve/CVE-2022-21123/" source="CVE"/>
		<reference ref_id="CVE-2022-21125" ref_url="https://www.suse.com/security/cve/CVE-2022-21125/" source="CVE"/>
		<reference ref_id="CVE-2022-21166" ref_url="https://www.suse.com/security/cve/CVE-2022-21166/" source="CVE"/>
		<reference ref_id="CVE-2022-23816" ref_url="https://www.suse.com/security/cve/CVE-2022-23816/" source="CVE"/>
		<reference ref_id="CVE-2022-23825" ref_url="https://www.suse.com/security/cve/CVE-2022-23825/" source="CVE"/>
		<reference ref_id="CVE-2022-26362" ref_url="https://www.suse.com/security/cve/CVE-2022-26362/" source="CVE"/>
		<reference ref_id="CVE-2022-26363" ref_url="https://www.suse.com/security/cve/CVE-2022-26363/" source="CVE"/>
		<reference ref_id="CVE-2022-26364" ref_url="https://www.suse.com/security/cve/CVE-2022-26364/" source="CVE"/>
		<reference ref_id="CVE-2022-29900" ref_url="https://www.suse.com/security/cve/CVE-2022-29900/" source="CVE"/>
		<reference ref_id="CVE-2022-33745" ref_url="https://www.suse.com/security/cve/CVE-2022-33745/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011720.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966).
- CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549).
- CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965).
- CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394).
- CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-29"/>
	<updated date="2022-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199965">SUSE bug 1199965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199966">SUSE bug 1199966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200549">SUSE bug 1200549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201394">SUSE bug 1201394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201469">SUSE bug 1201469</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21123/">CVE-2022-21123</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21125/">CVE-2022-21125</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21166/">CVE-2022-21166</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23816/">CVE-2022-23816</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23825/">CVE-2022-23825</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26362/">CVE-2022-26362</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26363/">CVE-2022-26363</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26364/">CVE-2022-26364</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29900/">CVE-2022-29900</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-33745/">CVE-2022-33745</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702512" comment="xen-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702513" comment="xen-devel-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702514" comment="xen-libs-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702515" comment="xen-tools-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702516" comment="xen-tools-domU-4.12.4_26-150100.3.75.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140586" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201496" ref_url="https://bugzilla.suse.com/1201496" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32742" ref_url="https://www.suse.com/security/cve/CVE-2022-32742/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2621-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011742.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1write_and_close, SMB1write_and_unlock (bso#15085) (bsc#1201496).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-02"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1201496">SUSE bug 1201496</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32742/">CVE-2022-32742</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702975" comment="libdcerpc-binding0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702789" comment="libdcerpc-binding0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702976" comment="libdcerpc-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702977" comment="libdcerpc-samr-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702978" comment="libdcerpc-samr0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702979" comment="libdcerpc0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702794" comment="libdcerpc0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702980" comment="libndr-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702981" comment="libndr-krb5pac-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702982" comment="libndr-krb5pac0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702798" comment="libndr-krb5pac0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702983" comment="libndr-nbt-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702984" comment="libndr-nbt0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702801" comment="libndr-nbt0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702985" comment="libndr-standard-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702986" comment="libndr-standard0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702804" comment="libndr-standard0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702987" comment="libndr0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702806" comment="libndr0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702988" comment="libnetapi-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702989" comment="libnetapi0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702809" comment="libnetapi0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702990" comment="libsamba-credentials-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702991" comment="libsamba-credentials0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702812" comment="libsamba-credentials0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702992" comment="libsamba-errors-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702993" comment="libsamba-errors0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702815" comment="libsamba-errors0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702994" comment="libsamba-hostconfig-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702995" comment="libsamba-hostconfig0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702818" comment="libsamba-hostconfig0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702996" comment="libsamba-passdb-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702997" comment="libsamba-passdb0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702821" comment="libsamba-passdb0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702998" comment="libsamba-policy-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702999" comment="libsamba-policy-python3-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703000" comment="libsamba-policy0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703001" comment="libsamba-policy0-python3-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703002" comment="libsamba-util-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703003" comment="libsamba-util0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702828" comment="libsamba-util0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703004" comment="libsamdb-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703005" comment="libsamdb0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702831" comment="libsamdb0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703006" comment="libsmbclient-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703007" comment="libsmbclient0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703008" comment="libsmbconf-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703009" comment="libsmbconf0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702836" comment="libsmbconf0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703010" comment="libsmbldap-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703011" comment="libsmbldap2-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702839" comment="libsmbldap2-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703012" comment="libtevent-util-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703013" comment="libtevent-util0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702842" comment="libtevent-util0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703014" comment="libwbclient-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703015" comment="libwbclient0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702845" comment="libwbclient0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703016" comment="samba-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703017" comment="samba-ad-dc-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703018" comment="samba-client-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703019" comment="samba-core-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703020" comment="samba-dsdb-modules-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703021" comment="samba-libs-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702852" comment="samba-libs-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703022" comment="samba-libs-python-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703023" comment="samba-libs-python3-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703024" comment="samba-python-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703025" comment="samba-python3-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703026" comment="samba-winbind-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702858" comment="samba-winbind-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140587" version="1" class="patch">
	<metadata>
		<title>Security update for mokutil (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198458" ref_url="https://bugzilla.suse.com/1198458" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2636-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011750.html" source="SUSE-SU"/>
		<description>
This update for mokutil fixes the following issues:

- Adds SBAT revocation support to mokutil. (bsc#1198458)

New options added (see manpage):

- mokutil --sbat

  List all entries in SBAT.

- mokutil --set-sbat-policy  (latest | previous | delete)
  To set the SBAT acceptance policy.

- mokutil --list-sbat-revocations

  To list the current SBAT revocations.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-03"/>
	<updated date="2022-08-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1198458">SUSE bug 1198458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692801" comment="mokutil-0.3.0-150100.8.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140588" version="1" class="patch">
	<metadata>
		<title>Security update for pcre2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1164384" ref_url="https://bugzilla.suse.com/1164384" source="BUGZILLA"/>
		<reference ref_id="1199235" ref_url="https://bugzilla.suse.com/1199235" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20454" ref_url="https://www.suse.com/security/cve/CVE-2019-20454/" source="CVE"/>
		<reference ref_id="CVE-2022-1587" ref_url="https://www.suse.com/security/cve/CVE-2022-1587/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011755.html" source="SUSE-SU"/>
		<description>
This update for pcre2 fixes the following issues:

- CVE-2019-20454: Fixed out-of-bounds read in JIT mode when \X is used in non-UTF mode (bsc#1164384).
- CVE-2022-1587: Fixed out-of-bounds read due to bug in recursions (bsc#1199235).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-03"/>
	<updated date="2022-08-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1164384">SUSE bug 1164384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199235">SUSE bug 1199235</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20454/">CVE-2019-20454</cve>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1587/">CVE-2022-1587</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009701292" comment="libpcre2-16-0-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701293" comment="libpcre2-32-0-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701294" comment="libpcre2-8-0-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701295" comment="libpcre2-posix2-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701296" comment="pcre2-devel-10.31-150000.3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140589" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1191912" ref_url="https://bugzilla.suse.com/1191912" source="BUGZILLA"/>
		<reference ref_id="1194931" ref_url="https://bugzilla.suse.com/1194931" source="BUGZILLA"/>
		<reference ref_id="1198670" ref_url="https://bugzilla.suse.com/1198670" source="BUGZILLA"/>
		<reference ref_id="1198671" ref_url="https://bugzilla.suse.com/1198671" source="BUGZILLA"/>
		<reference ref_id="1198672" ref_url="https://bugzilla.suse.com/1198672" source="BUGZILLA"/>
		<reference ref_id="1198673" ref_url="https://bugzilla.suse.com/1198673" source="BUGZILLA"/>
		<reference ref_id="1198674" ref_url="https://bugzilla.suse.com/1198674" source="BUGZILLA"/>
		<reference ref_id="1198675" ref_url="https://bugzilla.suse.com/1198675" source="BUGZILLA"/>
		<reference ref_id="1201643" ref_url="https://bugzilla.suse.com/1201643" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-35561" ref_url="https://www.suse.com/security/cve/CVE-2021-35561/" source="CVE"/>
		<reference ref_id="CVE-2022-21299" ref_url="https://www.suse.com/security/cve/CVE-2022-21299/" source="CVE"/>
		<reference ref_id="CVE-2022-21426" ref_url="https://www.suse.com/security/cve/CVE-2022-21426/" source="CVE"/>
		<reference ref_id="CVE-2022-21434" ref_url="https://www.suse.com/security/cve/CVE-2022-21434/" source="CVE"/>
		<reference ref_id="CVE-2022-21443" ref_url="https://www.suse.com/security/cve/CVE-2022-21443/" source="CVE"/>
		<reference ref_id="CVE-2022-21449" ref_url="https://www.suse.com/security/cve/CVE-2022-21449/" source="CVE"/>
		<reference ref_id="CVE-2022-21476" ref_url="https://www.suse.com/security/cve/CVE-2022-21476/" source="CVE"/>
		<reference ref_id="CVE-2022-21496" ref_url="https://www.suse.com/security/cve/CVE-2022-21496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011760.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]

- CVE-2022-21476 (bsc#1198671), CVE-2022-21449 (bsc#1198670),
  CVE-2022-21496 (bsc#1198673), CVE-2022-21434 (bsc#1198674),
  CVE-2022-21426 (bsc#1198672), CVE-2022-21443 (bsc#1198675),
  CVE-2021-35561 (bsc#1191912), CVE-2022-21299 (bsc#1194931).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-03"/>
	<updated date="2022-08-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191912">SUSE bug 1191912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194931">SUSE bug 1194931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198670">SUSE bug 1198670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198671">SUSE bug 1198671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198672">SUSE bug 1198672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198673">SUSE bug 1198673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198674">SUSE bug 1198674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198675">SUSE bug 1198675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201643">SUSE bug 1201643</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35561/">CVE-2021-35561</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21299/">CVE-2022-21299</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21426/">CVE-2022-21426</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21434/">CVE-2022-21434</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21443/">CVE-2022-21443</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21449/">CVE-2022-21449</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21476/">CVE-2022-21476</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21496/">CVE-2022-21496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009701297" comment="java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701257" comment="java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701298" comment="java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701259" comment="java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140590" version="1" class="patch">
	<metadata>
		<title>Security update for u-boot (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201214" ref_url="https://bugzilla.suse.com/1201214" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-34835" ref_url="https://www.suse.com/security/cve/CVE-2022-34835/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011796.html" source="SUSE-SU"/>
		<description>
This update for u-boot fixes the following issues:

- CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-04"/>
	<updated date="2022-08-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201214">SUSE bug 1201214</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34835/">CVE-2022-34835</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702172" comment="u-boot-tools-2019.01-150100.7.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140591" version="1" class="patch">
	<metadata>
		<title>Security update for qpdf (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188514" ref_url="https://bugzilla.suse.com/1188514" source="BUGZILLA"/>
		<reference ref_id="1201830" ref_url="https://bugzilla.suse.com/1201830" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36978" ref_url="https://www.suse.com/security/cve/CVE-2021-36978/" source="CVE"/>
		<reference ref_id="CVE-2022-34503" ref_url="https://www.suse.com/security/cve/CVE-2022-34503/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011797.html" source="SUSE-SU"/>
		<description>
This update for qpdf fixes the following issues:

- CVE-2022-34503: Fixed a heap buffer overflow via the function QPDF:processXRefStream (bsc#1201830).
- CVE-2021-36978: Fixed heap-based buffer overflow in Pl_ASCII85Decoder::write (bsc#1188514).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-04"/>
	<updated date="2022-08-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188514">SUSE bug 1188514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201830">SUSE bug 1201830</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36978/">CVE-2021-36978</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-34503/">CVE-2022-34503</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703027" comment="libqpdf21-8.0.2-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703028" comment="qpdf-8.0.2-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703029" comment="qpdf-devel-8.0.2-150000.3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140592" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201684" ref_url="https://bugzilla.suse.com/1201684" source="BUGZILLA"/>
		<reference ref_id="1201692" ref_url="https://bugzilla.suse.com/1201692" source="BUGZILLA"/>
		<reference ref_id="1201694" ref_url="https://bugzilla.suse.com/1201694" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21540" ref_url="https://www.suse.com/security/cve/CVE-2022-21540/" source="CVE"/>
		<reference ref_id="CVE-2022-21541" ref_url="https://www.suse.com/security/cve/CVE-2022-21541/" source="CVE"/>
		<reference ref_id="CVE-2022-34169" ref_url="https://www.suse.com/security/cve/CVE-2022-34169/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011827.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)

- CVE-2022-21540: Improve class compilation (bsc#1201694)
- CVE-2022-21541: Enhance MethodHandle invocations (bsc#1201692)
- CVE-2022-34169: Improve Xalan supports (bsc#1201684)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-09"/>
	<updated date="2022-08-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201684">SUSE bug 1201684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201692">SUSE bug 1201692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201694">SUSE bug 1201694</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21540/">CVE-2022-21540</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21541/">CVE-2022-21541</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34169/">CVE-2022-34169</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009701872" comment="java-11-openjdk-11.0.16.0-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701873" comment="java-11-openjdk-demo-11.0.16.0-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701874" comment="java-11-openjdk-devel-11.0.16.0-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701875" comment="java-11-openjdk-headless-11.0.16.0-150000.3.83.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140593" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201980" ref_url="https://bugzilla.suse.com/1201980" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32792" ref_url="https://www.suse.com/security/cve/CVE-2022-32792/" source="CVE"/>
		<reference ref_id="CVE-2022-32816" ref_url="https://www.suse.com/security/cve/CVE-2022-32816/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011919.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.36.5 (bsc#1201980):
  - Add support for PAC proxy in the WebDriver implementation.
  - Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.

- Security fixes: 
  - CVE-2022-32792: Fixed processing maliciously crafted web content may lead to
    arbitrary code execution.
  - CVE-2022-32816: Fixed visiting a website that frames malicious content may lead to
    UI spoofing.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-16"/>
	<updated date="2022-08-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201980">SUSE bug 1201980</bugzilla>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32792/">CVE-2022-32792</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32816/">CVE-2022-32816</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009704423" comment="libjavascriptcoregtk-4_0-18-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704424" comment="libwebkit2gtk-4_0-37-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704386" comment="libwebkit2gtk3-lang-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704425" comment="typelib-1_0-JavaScriptCore-4_0-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704426" comment="typelib-1_0-WebKit2-4_0-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704427" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704428" comment="webkit2gtk-4_0-injected-bundles-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704429" comment="webkit2gtk3-devel-2.36.5-150000.3.109.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140594" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1195775" ref_url="https://bugzilla.suse.com/1195775" source="BUGZILLA"/>
		<reference ref_id="1195926" ref_url="https://bugzilla.suse.com/1195926" source="BUGZILLA"/>
		<reference ref_id="1198484" ref_url="https://bugzilla.suse.com/1198484" source="BUGZILLA"/>
		<reference ref_id="1198829" ref_url="https://bugzilla.suse.com/1198829" source="BUGZILLA"/>
		<reference ref_id="1200442" ref_url="https://bugzilla.suse.com/1200442" source="BUGZILLA"/>
		<reference ref_id="1200598" ref_url="https://bugzilla.suse.com/1200598" source="BUGZILLA"/>
		<reference ref_id="1200910" ref_url="https://bugzilla.suse.com/1200910" source="BUGZILLA"/>
		<reference ref_id="1201429" ref_url="https://bugzilla.suse.com/1201429" source="BUGZILLA"/>
		<reference ref_id="1201635" ref_url="https://bugzilla.suse.com/1201635" source="BUGZILLA"/>
		<reference ref_id="1201636" ref_url="https://bugzilla.suse.com/1201636" source="BUGZILLA"/>
		<reference ref_id="1201644" ref_url="https://bugzilla.suse.com/1201644" source="BUGZILLA"/>
		<reference ref_id="1201926" ref_url="https://bugzilla.suse.com/1201926" source="BUGZILLA"/>
		<reference ref_id="1201930" ref_url="https://bugzilla.suse.com/1201930" source="BUGZILLA"/>
		<reference ref_id="1201940" ref_url="https://bugzilla.suse.com/1201940" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36557" ref_url="https://www.suse.com/security/cve/CVE-2020-36557/" source="CVE"/>
		<reference ref_id="CVE-2020-36558" ref_url="https://www.suse.com/security/cve/CVE-2020-36558/" source="CVE"/>
		<reference ref_id="CVE-2021-33655" ref_url="https://www.suse.com/security/cve/CVE-2021-33655/" source="CVE"/>
		<reference ref_id="CVE-2021-33656" ref_url="https://www.suse.com/security/cve/CVE-2021-33656/" source="CVE"/>
		<reference ref_id="CVE-2022-1462" ref_url="https://www.suse.com/security/cve/CVE-2022-1462/" source="CVE"/>
		<reference ref_id="CVE-2022-20166" ref_url="https://www.suse.com/security/cve/CVE-2022-20166/" source="CVE"/>
		<reference ref_id="CVE-2022-36946" ref_url="https://www.suse.com/security/cve/CVE-2022-36946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011923.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-36557: Fixed race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys that could lead to a use-after-free (bnc#1201429).
- CVE-2020-36558: Fixed race condition involving VT_RESIZEX that could lead to a NULL pointer dereference and general protection fault (bnc#1200910).
- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2021-33656: Fixed out of bounds write with ioctl PIO_FONT (bnc#1201636).
- CVE-2022-1462: Fixed an out-of-bounds read flaw in the TeleTYpe subsystem (bnc#1198829).
- CVE-2022-20166: Fixed possible out of bounds write due to sprintf unsafety that could cause local escalation of privilege (bnc#1200598).
- CVE-2022-36946: Fixed incorrect packet truncation in nfqnl_mangle() that could lead to remote DoS (bnc#1201940).

The following non-security bugs were fixed:

- cifs: On cifs_reconnect, resolve the hostname again (bsc#1201926).
- cifs: Simplify reconnect code when dfs upcall is enabled (bsc#1201926).
- cifs: To match file servers, make sure the server hostname matches (bsc#1201926).
- cifs: fix memory leak of smb3_fs_context_dup::server_hostname (bsc#1201926).
- cifs: set a minimum of 120s for next dns resolution (bsc#1201926).
- cifs: use the expiry output of dns_query to schedule next resolution (bsc#1201926).
- kvm: emulate: Fix SETcc emulation function offsets with SLS (bsc#1201930).
- kvm: emulate: do not adjust size of fastop and setcc subroutines (bsc#1201930).
- rpm/*.spec.in: remove backtick usage
- rpm/constraints.in: skip SLOW_DISK workers for kernel-source
- rpm/kernel-obs-build.spec.in: Also depend on dracut-systemd (bsc#1195775)
- rpm/kernel-obs-build.spec.in: add systemd-initrd and terminfo dracut module (bsc#1195775)
- rpm/kernel-obs-build.spec.in: use default dracut modules (bsc#1195926, bsc#1198484)
- x86/entry: Remove skip_r11rcx (bsc#1201644).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-16"/>
	<updated date="2022-08-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195775">SUSE bug 1195775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195926">SUSE bug 1195926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198484">SUSE bug 1198484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198829">SUSE bug 1198829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200442">SUSE bug 1200442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200598">SUSE bug 1200598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200910">SUSE bug 1200910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201429">SUSE bug 1201429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201635">SUSE bug 1201635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201636">SUSE bug 1201636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201644">SUSE bug 1201644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201926">SUSE bug 1201926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201930">SUSE bug 1201930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201940">SUSE bug 1201940</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36557/">CVE-2020-36557</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36558/">CVE-2020-36558</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33655/">CVE-2021-33655</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33656/">CVE-2021-33656</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1462/">CVE-2022-1462</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-20166/">CVE-2022-20166</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36946/">CVE-2022-36946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009704417" comment="kernel-default-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704418" comment="kernel-default-base-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704419" comment="kernel-default-devel-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704395" comment="kernel-devel-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704396" comment="kernel-docs-4.12.14-150100.197.120.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704397" comment="kernel-macros-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704420" comment="kernel-obs-build-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704399" comment="kernel-source-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704421" comment="kernel-syms-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704422" comment="reiserfs-kmp-default-4.12.14-150100.197.120.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140595" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1199223" ref_url="https://bugzilla.suse.com/1199223" source="BUGZILLA"/>
		<reference ref_id="1199224" ref_url="https://bugzilla.suse.com/1199224" source="BUGZILLA"/>
		<reference ref_id="1200735" ref_url="https://bugzilla.suse.com/1200735" source="BUGZILLA"/>
		<reference ref_id="1200737" ref_url="https://bugzilla.suse.com/1200737" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-27781" ref_url="https://www.suse.com/security/cve/CVE-2022-27781/" source="CVE"/>
		<reference ref_id="CVE-2022-27782" ref_url="https://www.suse.com/security/cve/CVE-2022-27782/" source="CVE"/>
		<reference ref_id="CVE-2022-32206" ref_url="https://www.suse.com/security/cve/CVE-2022-32206/" source="CVE"/>
		<reference ref_id="CVE-2022-32208" ref_url="https://www.suse.com/security/cve/CVE-2022-32208/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011931.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2022-27781: Fixed an issue where curl will get stuck in an infinite
  loop when trying to retrieve details about a TLS server's certificate chain (bnc#1199223).
- CVE-2022-27782: Fixed an issue where TLS and SSH connections would
  be reused even when a related option had been changed (bsc#1199224).
- CVE-2022-32206: Fixed an uncontrolled memory consumption issue caused
  by an unbounded number of compression layers (bsc#1200735).
- CVE-2022-32208: Fixed an incorrect message verification issue when
  performing FTP transfers using krb5 (bsc#1200737).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-17"/>
	<updated date="2022-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199223">SUSE bug 1199223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199224">SUSE bug 1199224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200735">SUSE bug 1200735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200737">SUSE bug 1200737</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-27781/">CVE-2022-27781</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-27782/">CVE-2022-27782</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-32206/">CVE-2022-32206</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32208/">CVE-2022-32208</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706302" comment="curl-7.60.0-150000.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706303" comment="libcurl-devel-7.60.0-150000.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706304" comment="libcurl4-7.60.0-150000.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706286" comment="libcurl4-32bit-7.60.0-150000.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140596" version="1" class="patch">
	<metadata>
		<title>Security update for gnutls (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196167" ref_url="https://bugzilla.suse.com/1196167" source="BUGZILLA"/>
		<reference ref_id="1202020" ref_url="https://bugzilla.suse.com/1202020" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4209" ref_url="https://www.suse.com/security/cve/CVE-2021-4209/" source="CVE"/>
		<reference ref_id="CVE-2022-2509" ref_url="https://www.suse.com/security/cve/CVE-2022-2509/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011930.html" source="SUSE-SU"/>
		<description>
This update for gnutls fixes the following issues:

- CVE-2022-2509: Fixed a double free issue during PKCS7 verification (bsc#1202020).
- CVE-2021-4209: Fixed null pointer dereference in MD_UPDATE (bsc#1196167). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-17"/>
	<updated date="2022-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196167">SUSE bug 1196167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202020">SUSE bug 1202020</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4209/">CVE-2021-4209</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2509/">CVE-2022-2509</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009705721" comment="gnutls-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705722" comment="libgnutls-devel-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705723" comment="libgnutls30-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705684" comment="libgnutls30-32bit-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705724" comment="libgnutls30-hmac-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705686" comment="libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705725" comment="libgnutlsxx-devel-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705726" comment="libgnutlsxx28-3.6.7-150000.6.45.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140597" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201727" ref_url="https://bugzilla.suse.com/1201727" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21233" ref_url="https://www.suse.com/security/cve/CVE-2022-21233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011932.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20220809 release (bsc#1201727):

- CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave (INTEL-SA-00657).
    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html

Other fixes:

- Update for functional issues.
    See also: https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update

- Updated Platforms:

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | B1       | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11
  | ADL            | C0       | 06-97-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-97-05/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | C0       | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12
  ------------------------------------------------------------------
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-17"/>
	<updated date="2022-08-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1201727">SUSE bug 1201727</bugzilla>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21233/">CVE-2022-21233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706922" comment="ucode-intel-20220809-150100.3.214.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140598" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194704" ref_url="https://bugzilla.suse.com/1194704" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0204" ref_url="https://www.suse.com/security/cve/CVE-2022-0204/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011940.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2022-0204: Fixed a buffer overflow in the implementation of the
  gatt protocol (bsc#1194704).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-18"/>
	<updated date="2022-08-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194704">SUSE bug 1194704</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-0204/">CVE-2022-0204</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706701" comment="bluez-5.48-150000.5.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706702" comment="bluez-devel-5.48-150000.5.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706703" comment="libbluetooth3-5.48-150000.5.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140599" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194859" ref_url="https://bugzilla.suse.com/1194859" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44142" ref_url="https://www.suse.com/security/cve/CVE-2021-44142/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010165.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:
	  
- CVE-2021-44142: Fixed out-of-Bound Read/Write on Samba vfs_fruit module. (bsc#1194859)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-01"/>
	<updated date="2022-02-01"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1194859">SUSE bug 1194859</bugzilla>
	<cve impact="critical" cvss3="9.9/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-44142/">CVE-2021-44142</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009665777" comment="libdcerpc-binding0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665534" comment="libdcerpc-binding0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665778" comment="libdcerpc-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665779" comment="libdcerpc-samr-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665780" comment="libdcerpc-samr0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665781" comment="libdcerpc0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665539" comment="libdcerpc0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665782" comment="libndr-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665783" comment="libndr-krb5pac-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665784" comment="libndr-krb5pac0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665543" comment="libndr-krb5pac0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665785" comment="libndr-nbt-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665786" comment="libndr-nbt0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665546" comment="libndr-nbt0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665787" comment="libndr-standard-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665788" comment="libndr-standard0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665549" comment="libndr-standard0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665789" comment="libndr0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665551" comment="libndr0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665790" comment="libnetapi-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665791" comment="libnetapi0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665554" comment="libnetapi0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665792" comment="libsamba-credentials-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665793" comment="libsamba-credentials0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665557" comment="libsamba-credentials0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665794" comment="libsamba-errors-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665795" comment="libsamba-errors0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665560" comment="libsamba-errors0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665796" comment="libsamba-hostconfig-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665797" comment="libsamba-hostconfig0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665563" comment="libsamba-hostconfig0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665798" comment="libsamba-passdb-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665799" comment="libsamba-passdb0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665566" comment="libsamba-passdb0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665800" comment="libsamba-policy-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665801" comment="libsamba-policy-python3-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665802" comment="libsamba-policy0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665803" comment="libsamba-policy0-python3-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665804" comment="libsamba-util-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665805" comment="libsamba-util0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665573" comment="libsamba-util0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665806" comment="libsamdb-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665807" comment="libsamdb0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665576" comment="libsamdb0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665808" comment="libsmbclient-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665809" comment="libsmbclient0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665810" comment="libsmbconf-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665811" comment="libsmbconf0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665581" comment="libsmbconf0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665812" comment="libsmbldap-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665813" comment="libsmbldap2-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665584" comment="libsmbldap2-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665814" comment="libtevent-util-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665815" comment="libtevent-util0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665587" comment="libtevent-util0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665816" comment="libwbclient-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665817" comment="libwbclient0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665590" comment="libwbclient0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665818" comment="samba-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665819" comment="samba-ad-dc-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665820" comment="samba-client-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665821" comment="samba-core-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665822" comment="samba-dsdb-modules-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665823" comment="samba-libs-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665597" comment="samba-libs-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665824" comment="samba-libs-python-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665825" comment="samba-libs-python3-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665826" comment="samba-python-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665827" comment="samba-python3-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665828" comment="samba-winbind-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665603" comment="samba-winbind-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140600" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1188917" ref_url="https://bugzilla.suse.com/1188917" source="BUGZILLA"/>
		<reference ref_id="1189368" ref_url="https://bugzilla.suse.com/1189368" source="BUGZILLA"/>
		<reference ref_id="1191601" ref_url="https://bugzilla.suse.com/1191601" source="BUGZILLA"/>
		<reference ref_id="1191602" ref_url="https://bugzilla.suse.com/1191602" source="BUGZILLA"/>
		<reference ref_id="1201325" ref_url="https://bugzilla.suse.com/1201325" source="BUGZILLA"/>
		<reference ref_id="1201326" ref_url="https://bugzilla.suse.com/1201326" source="BUGZILLA"/>
		<reference ref_id="1201327" ref_url="https://bugzilla.suse.com/1201327" source="BUGZILLA"/>
		<reference ref_id="1201328" ref_url="https://bugzilla.suse.com/1201328" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22930" ref_url="https://www.suse.com/security/cve/CVE-2021-22930/" source="CVE"/>
		<reference ref_id="CVE-2021-22940" ref_url="https://www.suse.com/security/cve/CVE-2021-22940/" source="CVE"/>
		<reference ref_id="CVE-2021-22959" ref_url="https://www.suse.com/security/cve/CVE-2021-22959/" source="CVE"/>
		<reference ref_id="CVE-2021-22960" ref_url="https://www.suse.com/security/cve/CVE-2021-22960/" source="CVE"/>
		<reference ref_id="CVE-2022-32212" ref_url="https://www.suse.com/security/cve/CVE-2022-32212/" source="CVE"/>
		<reference ref_id="CVE-2022-32213" ref_url="https://www.suse.com/security/cve/CVE-2022-32213/" source="CVE"/>
		<reference ref_id="CVE-2022-32214" ref_url="https://www.suse.com/security/cve/CVE-2022-32214/" source="CVE"/>
		<reference ref_id="CVE-2022-32215" ref_url="https://www.suse.com/security/cve/CVE-2022-32215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011954.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- CVE-2021-22930, CVE-2021-22940: Fixed two memory corruption issues
  during HTTP/2 stream cancellation (bsc#1188917, bsc#1189368).
- CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2021-22960,
  CVE-2021-22959: Fixed multiple HTTP request smuggling issues in
  the underlying HTTP parser (bsc#1201325, bsc#1201326, bsc#1201327, 
  bsc#1191602, bsc#1191601).
- CVE-2022-32212: Fixed a DNS rebinding issue caused by improper IPv4
  validation (bsc#1201328).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-19"/>
	<updated date="2022-08-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188917">SUSE bug 1188917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189368">SUSE bug 1189368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191601">SUSE bug 1191601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191602">SUSE bug 1191602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201325">SUSE bug 1201325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201326">SUSE bug 1201326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201327">SUSE bug 1201327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201328">SUSE bug 1201328</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22930/">CVE-2021-22930</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22940/">CVE-2021-22940</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-22959/">CVE-2021-22959</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-22960/">CVE-2021-22960</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32212/">CVE-2022-32212</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32213/">CVE-2022-32213</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-32214/">CVE-2022-32214</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-32215/">CVE-2022-32215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706160" comment="nodejs10-10.24.1-150000.1.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706161" comment="nodejs10-devel-10.24.1-150000.1.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706130" comment="nodejs10-docs-10.24.1-150000.1.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706162" comment="npm10-10.24.1-150000.1.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140601" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1195163" ref_url="https://bugzilla.suse.com/1195163" source="BUGZILLA"/>
		<reference ref_id="1201684" ref_url="https://bugzilla.suse.com/1201684" source="BUGZILLA"/>
		<reference ref_id="1201692" ref_url="https://bugzilla.suse.com/1201692" source="BUGZILLA"/>
		<reference ref_id="1201694" ref_url="https://bugzilla.suse.com/1201694" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21540" ref_url="https://www.suse.com/security/cve/CVE-2022-21540/" source="CVE"/>
		<reference ref_id="CVE-2022-21541" ref_url="https://www.suse.com/security/cve/CVE-2022-21541/" source="CVE"/>
		<reference ref_id="CVE-2022-34169" ref_url="https://www.suse.com/security/cve/CVE-2022-34169/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2856-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011952.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

- Updated to version jdk8u345 (icedtea-3.24.0)
    - CVE-2022-21540: Fixed a potential Java sandbox bypass (bsc#1201694).
    - CVE-2022-21541: Fixed a potential Java sandbox bypass (bsc#1201692).
    - CVE-2022-34169: Fixed an issue where arbitrary bytecode could
      be executed via a malicious stylesheet (bsc#1201684).

- Non-security fixes:
    - Allowed for customization of PKCS12 keystores (bsc#1195163).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-19"/>
	<updated date="2022-08-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195163">SUSE bug 1195163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201684">SUSE bug 1201684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201692">SUSE bug 1201692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201694">SUSE bug 1201694</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21540/">CVE-2022-21540</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21541/">CVE-2022-21541</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34169/">CVE-2022-34169</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009704749" comment="java-1_8_0-openjdk-1.8.0.345-150000.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704750" comment="java-1_8_0-openjdk-demo-1.8.0.345-150000.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704751" comment="java-1_8_0-openjdk-devel-1.8.0.345-150000.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704752" comment="java-1_8_0-openjdk-headless-1.8.0.345-150000.3.70.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140602" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1193227" ref_url="https://bugzilla.suse.com/1193227" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8922" ref_url="https://www.suse.com/security/cve/CVE-2019-8922/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011959.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2019-8922: Fixed a buffer overflow in the implementation of the
  Service Discovery Protocol (bsc#1193227).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-22"/>
	<updated date="2022-08-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193227">SUSE bug 1193227</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-8922/">CVE-2019-8922</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707161" comment="bluez-5.48-150000.5.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707162" comment="bluez-devel-5.48-150000.5.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707163" comment="libbluetooth3-5.48-150000.5.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140603" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1179945" ref_url="https://bugzilla.suse.com/1179945" source="BUGZILLA"/>
		<reference ref_id="1183168" ref_url="https://bugzilla.suse.com/1183168" source="BUGZILLA"/>
		<reference ref_id="1185952" ref_url="https://bugzilla.suse.com/1185952" source="BUGZILLA"/>
		<reference ref_id="1187751" ref_url="https://bugzilla.suse.com/1187751" source="BUGZILLA"/>
		<reference ref_id="1190177" ref_url="https://bugzilla.suse.com/1190177" source="BUGZILLA"/>
		<reference ref_id="1190740" ref_url="https://bugzilla.suse.com/1190740" source="BUGZILLA"/>
		<reference ref_id="1192516" ref_url="https://bugzilla.suse.com/1192516" source="BUGZILLA"/>
		<reference ref_id="1195680" ref_url="https://bugzilla.suse.com/1195680" source="BUGZILLA"/>
		<reference ref_id="1199475" ref_url="https://bugzilla.suse.com/1199475" source="BUGZILLA"/>
		<reference ref_id="1202368" ref_url="https://bugzilla.suse.com/1202368" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23214" ref_url="https://www.suse.com/security/cve/CVE-2021-23214/" source="CVE"/>
		<reference ref_id="CVE-2021-23222" ref_url="https://www.suse.com/security/cve/CVE-2021-23222/" source="CVE"/>
		<reference ref_id="CVE-2022-1552" ref_url="https://www.suse.com/security/cve/CVE-2022-1552/" source="CVE"/>
		<reference ref_id="CVE-2022-2625" ref_url="https://www.suse.com/security/cve/CVE-2022-2625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011992.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

- Upgrade to 10.22:
- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).

- Upgrade to 10.21:
- CVE-2022-1552: Confined additional operations within 'security restricted operation' sandboxes (bsc#1199475).

- Upgrade to 10.20 (bsc#1195680)
- Add constraints file with 12GB of memory for s390x as a workaround (boo#1190740)

- Upgrade to version 10.19 (bsc#1192516):
- CVE-2021-23214: Made the server reject extraneous data after an SSL or GSS encryption handshake
- CVE-2021-23222: Made libpq reject extraneous data after an SSL or GSS encryption handshake

- Fix for build with llvm12 on s390x. (bsc#1185952)
- Re-enable 'icu' for PostgreSQL 10. (bsc#1179945)
- Add postgresqlXX-server-devel as a dependency for postgresql13-server-devel. (bsc#1187751)
- Upgrade to version 10.18. (bsc#1190177)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-25"/>
	<updated date="2022-08-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179945">SUSE bug 1179945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183168">SUSE bug 1183168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185952">SUSE bug 1185952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187751">SUSE bug 1187751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190177">SUSE bug 1190177</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190740">SUSE bug 1190740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192516">SUSE bug 1192516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195680">SUSE bug 1195680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199475">SUSE bug 1199475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202368">SUSE bug 1202368</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23214/">CVE-2021-23214</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23222/">CVE-2021-23222</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1552/">CVE-2022-1552</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2625/">CVE-2022-2625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707103" comment="postgresql-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707104" comment="postgresql-contrib-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707105" comment="postgresql-devel-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707106" comment="postgresql-docs-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707107" comment="postgresql-plperl-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707108" comment="postgresql-plpython-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707109" comment="postgresql-pltcl-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707110" comment="postgresql-server-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707111" comment="postgresql-server-devel-12.0.1-150000.8.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140604" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1202368" ref_url="https://bugzilla.suse.com/1202368" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2625" ref_url="https://www.suse.com/security/cve/CVE-2022-2625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2946-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012011.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

- Upgrade to 10.22:
- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202368">SUSE bug 1202368</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2625/">CVE-2022-2625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706943" comment="postgresql10-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706944" comment="postgresql10-contrib-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706945" comment="postgresql10-devel-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706917" comment="postgresql10-docs-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706946" comment="postgresql10-plperl-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706947" comment="postgresql10-plpython-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706948" comment="postgresql10-pltcl-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706949" comment="postgresql10-server-10.22-150100.8.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140605" version="1" class="patch">
	<metadata>
		<title>Security update for zlib (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1202175" ref_url="https://bugzilla.suse.com/1202175" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-37434" ref_url="https://www.suse.com/security/cve/CVE-2022-37434/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012012.html" source="SUSE-SU"/>
		<description>
This update for zlib fixes the following issues:

- CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field (bsc#1202175).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202175">SUSE bug 1202175</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-37434/">CVE-2022-37434</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706305" comment="libminizip1-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706306" comment="libz1-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706232" comment="libz1-32bit-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706307" comment="minizip-devel-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706308" comment="zlib-devel-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706240" comment="zlib-devel-32bit-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706309" comment="zlib-devel-static-1.2.11-150000.3.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140606" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201684" ref_url="https://bugzilla.suse.com/1201684" source="BUGZILLA"/>
		<reference ref_id="1201685" ref_url="https://bugzilla.suse.com/1201685" source="BUGZILLA"/>
		<reference ref_id="1201692" ref_url="https://bugzilla.suse.com/1201692" source="BUGZILLA"/>
		<reference ref_id="1201694" ref_url="https://bugzilla.suse.com/1201694" source="BUGZILLA"/>
		<reference ref_id="1202427" ref_url="https://bugzilla.suse.com/1202427" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21540" ref_url="https://www.suse.com/security/cve/CVE-2022-21540/" source="CVE"/>
		<reference ref_id="CVE-2022-21541" ref_url="https://www.suse.com/security/cve/CVE-2022-21541/" source="CVE"/>
		<reference ref_id="CVE-2022-21549" ref_url="https://www.suse.com/security/cve/CVE-2022-21549/" source="CVE"/>
		<reference ref_id="CVE-2022-34169" ref_url="https://www.suse.com/security/cve/CVE-2022-34169/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012014.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

- Updated to Java 8.0 Service Refresh 7 Fix Pack 11 (bsc#1202427):
  - CVE-2022-34169: Fixed an integer truncation issue in the Xalan
    Java XSLT library that occurred when processing malicious
    stylesheets (bsc#1201684).
  - CVE-2022-21549: Fixed an issue that could lead to computing
    negative random exponentials (bsc#1201685).
  - CVE-2022-21541: Fixed a potential bypass of sandbox restrictions
    in the Hotspot component (bsc#1201692).
  - CVE-2022-21540: Fixed a potential bypass of sandbox restrictions
    in the Hotspot component (bsc#1201694).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201684">SUSE bug 1201684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201685">SUSE bug 1201685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201692">SUSE bug 1201692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201694">SUSE bug 1201694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202427">SUSE bug 1202427</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21540/">CVE-2022-21540</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21541/">CVE-2022-21541</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21549/">CVE-2022-21549</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34169/">CVE-2022-34169</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707159" comment="java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707071" comment="java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707160" comment="java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707073" comment="java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140607" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1179945" ref_url="https://bugzilla.suse.com/1179945" source="BUGZILLA"/>
		<reference ref_id="1183168" ref_url="https://bugzilla.suse.com/1183168" source="BUGZILLA"/>
		<reference ref_id="1185924" ref_url="https://bugzilla.suse.com/1185924" source="BUGZILLA"/>
		<reference ref_id="1185925" ref_url="https://bugzilla.suse.com/1185925" source="BUGZILLA"/>
		<reference ref_id="1185926" ref_url="https://bugzilla.suse.com/1185926" source="BUGZILLA"/>
		<reference ref_id="1185952" ref_url="https://bugzilla.suse.com/1185952" source="BUGZILLA"/>
		<reference ref_id="1187751" ref_url="https://bugzilla.suse.com/1187751" source="BUGZILLA"/>
		<reference ref_id="1189748" ref_url="https://bugzilla.suse.com/1189748" source="BUGZILLA"/>
		<reference ref_id="1190740" ref_url="https://bugzilla.suse.com/1190740" source="BUGZILLA"/>
		<reference ref_id="1192516" ref_url="https://bugzilla.suse.com/1192516" source="BUGZILLA"/>
		<reference ref_id="1195680" ref_url="https://bugzilla.suse.com/1195680" source="BUGZILLA"/>
		<reference ref_id="1198166" ref_url="https://bugzilla.suse.com/1198166" source="BUGZILLA"/>
		<reference ref_id="1199475" ref_url="https://bugzilla.suse.com/1199475" source="BUGZILLA"/>
		<reference ref_id="1202368" ref_url="https://bugzilla.suse.com/1202368" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23214" ref_url="https://www.suse.com/security/cve/CVE-2021-23214/" source="CVE"/>
		<reference ref_id="CVE-2021-23222" ref_url="https://www.suse.com/security/cve/CVE-2021-23222/" source="CVE"/>
		<reference ref_id="CVE-2021-32027" ref_url="https://www.suse.com/security/cve/CVE-2021-32027/" source="CVE"/>
		<reference ref_id="CVE-2021-32028" ref_url="https://www.suse.com/security/cve/CVE-2021-32028/" source="CVE"/>
		<reference ref_id="CVE-2021-32029" ref_url="https://www.suse.com/security/cve/CVE-2021-32029/" source="CVE"/>
		<reference ref_id="CVE-2021-3677" ref_url="https://www.suse.com/security/cve/CVE-2021-3677/" source="CVE"/>
		<reference ref_id="CVE-2022-1552" ref_url="https://www.suse.com/security/cve/CVE-2022-1552/" source="CVE"/>
		<reference ref_id="CVE-2022-2625" ref_url="https://www.suse.com/security/cve/CVE-2022-2625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2958-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012016.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

- Upgrade to 12.12:
- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).

- Upgrade to 12.11:
- CVE-2022-1552: Confined additional operations within 'security restricted operation' sandboxes (bsc#1199475).

- Upgrade to 12.10 (bsc#1195680)
- Add constraints file with 12GB of memory for s390x as a workaround (boo#1190740)

- Upgrade to version 12.9 (bsc#1192516):
- CVE-2021-23214: Made the server reject extraneous data after an SSL or GSS encryption handshake
- CVE-2021-23222: Made libpq reject extraneous data after an SSL or GSS encryption handshake
    
- Upgrade to version 12.8:
- CVE-2021-3677: Fixed memory disclosure in certain queries (bsc#1189748).

- Upgrade to version 12.7:
- CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924).
- CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925).
- CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING 'pg_psql_temporary_savepoint' does not exist (bsc#1185926).

- Fixed build with llvm12 on s390x (bsc#1185952).
- Re-enabled icu for PostgreSQL 10 (bsc#1179945).
- Made the dependency of postgresqlXX-server-devel on llvm and clang optional (bsc#1187751).
- llvm12 breaks PostgreSQL 11 and 12 on s390x. Use llvm11 as a workaround (bsc#1185952).
- Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179945">SUSE bug 1179945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183168">SUSE bug 1183168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185924">SUSE bug 1185924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185925">SUSE bug 1185925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185926">SUSE bug 1185926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185952">SUSE bug 1185952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187751">SUSE bug 1187751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189748">SUSE bug 1189748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190740">SUSE bug 1190740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192516">SUSE bug 1192516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195680">SUSE bug 1195680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198166">SUSE bug 1198166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199475">SUSE bug 1199475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202368">SUSE bug 1202368</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23214/">CVE-2021-23214</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23222/">CVE-2021-23222</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32027/">CVE-2021-32027</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-32028/">CVE-2021-32028</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-32029/">CVE-2021-32029</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3677/">CVE-2021-3677</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1552/">CVE-2022-1552</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2625/">CVE-2022-2625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707149" comment="libecpg6-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707150" comment="libpq5-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707117" comment="libpq5-32bit-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707151" comment="postgresql12-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707152" comment="postgresql12-contrib-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707153" comment="postgresql12-devel-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707121" comment="postgresql12-docs-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707154" comment="postgresql12-plperl-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707155" comment="postgresql12-plpython-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707156" comment="postgresql12-pltcl-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707157" comment="postgresql12-server-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707158" comment="postgresql12-server-devel-12.12-150100.3.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140608" version="1" class="patch">
	<metadata>
		<title>Security update for rsync (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201840" ref_url="https://bugzilla.suse.com/1201840" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29154" ref_url="https://www.suse.com/security/cve/CVE-2022-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012015.html" source="SUSE-SU"/>
		<description>
This update for rsync fixes the following issues:

- CVE-2022-29154: Fixed an arbitrary file write issue that could be
  triggered by a malicious remote server (bsc#1201840).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201840">SUSE bug 1201840</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29154/">CVE-2022-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706950" comment="rsync-3.1.3-150000.4.13.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140609" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1202645" ref_url="https://bugzilla.suse.com/1202645" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-38472" ref_url="https://www.suse.com/security/cve/CVE-2022-38472/" source="CVE"/>
		<reference ref_id="CVE-2022-38473" ref_url="https://www.suse.com/security/cve/CVE-2022-38473/" source="CVE"/>
		<reference ref_id="CVE-2022-38478" ref_url="https://www.suse.com/security/cve/CVE-2022-38478/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012051.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.13.0 ESR (bsc#1202645):

- CVE-2022-38472: Fixed a potential address bar spoofing via XSLT error handling.
- CVE-2022-38473: Fixed an issue where cross-origin XSLT documents could inherit the parent's permissions.
- CVE-2022-38478: Fixed various memory safety issues.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202645">SUSE bug 1202645</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38472/">CVE-2022-38472</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38473/">CVE-2022-38473</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38478/">CVE-2022-38478</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707800" comment="MozillaFirefox-91.13.0-150000.150.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707801" comment="MozillaFirefox-devel-91.13.0-150000.150.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707802" comment="MozillaFirefox-translations-common-91.13.0-150000.150.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707803" comment="MozillaFirefox-translations-other-91.13.0-150000.150.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140610" version="1" class="patch">
	<metadata>
		<title>Security update for open-vm-tools (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1202657" ref_url="https://bugzilla.suse.com/1202657" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31676" ref_url="https://www.suse.com/security/cve/CVE-2022-31676/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2986-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012049.html" source="SUSE-SU"/>
		<description>
This update for open-vm-tools fixes the following issues:

- CVE-2022-31676: Fixed an issue that could allow unprivileged users
  inside a virtual machine to escalate privileges (bsc#1202657).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202657">SUSE bug 1202657</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31676/">CVE-2022-31676</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707877" comment="libvmtools-devel-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707878" comment="libvmtools0-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707879" comment="open-vm-tools-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707880" comment="open-vm-tools-desktop-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707881" comment="open-vm-tools-sdmp-11.3.5-150100.4.37.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140611" version="1" class="patch">
	<metadata>
		<title>Security update for flatpak (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1155688" ref_url="https://bugzilla.suse.com/1155688" source="BUGZILLA"/>
		<reference ref_id="1180996" ref_url="https://bugzilla.suse.com/1180996" source="BUGZILLA"/>
		<reference ref_id="1183459" ref_url="https://bugzilla.suse.com/1183459" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21261" ref_url="https://www.suse.com/security/cve/CVE-2021-21261/" source="CVE"/>
		<reference ref_id="CVE-2021-21381" ref_url="https://www.suse.com/security/cve/CVE-2021-21381/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012061.html" source="SUSE-SU"/>
		<description>
This update for flatpak fixes the following issues:

- CVE-2021-21381: Fixed an issue where a sandboxed application could
  read and write arbitrary host files via special tokens in the
  .desktop file (bsc#1183459).
- CVE-2021-21261: Fixed a sandbox escape issue via the flatpak-portal
  service (bsc#1180996).

Non-security fixes:

- openh264 extension needs to use 'extra_data'. (bsc#1155688)
  The update will provide the support for extra_data' in extensions
  and will provide a list of versions that are supported. This will
  be useful for the extra_data for extensions because that will require
  it to say that it is supported for version &gt; 1.2.5 in the 1.2 series 
  and &gt; 1.4.2 otherwise.
  The update  will includes fixes for a segfault in the function that 
  lists the installed references (flatpak_installation_list_installed_refs).
  When an appstream update is cancelled while downloading icons, the update
  will show a proper fail. Before this fix the next update attempt will see
  an up-to-date timestamp, think everyhing is ok and not download the missing icons.
  The update will introduce checks in the OCI (Open Container Initiative format)
  updates for validating if it is gpg verified.
  The update will install the required runtime for the installed extension.
  The update will prevent a crash if the 'FlatpakDir' can't ensure it has a repo configured.
  The update will prevent the removal of local extensions considered remote and not locally related.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1155688">SUSE bug 1155688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180996">SUSE bug 1180996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183459">SUSE bug 1183459</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21261/">CVE-2021-21261</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21381/">CVE-2021-21381</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708042" comment="flatpak-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708043" comment="flatpak-devel-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708044" comment="flatpak-zsh-completion-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708045" comment="libflatpak0-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708046" comment="typelib-1_0-Flatpak-1_0-1.2.3-150100.4.5.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140612" version="1" class="patch">
	<metadata>
		<title>Security update for libtirpc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198752" ref_url="https://bugzilla.suse.com/1198752" source="BUGZILLA"/>
		<reference ref_id="1200800" ref_url="https://bugzilla.suse.com/1200800" source="BUGZILLA"/>
		<reference ref_id="1201680" ref_url="https://bugzilla.suse.com/1201680" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46828" ref_url="https://www.suse.com/security/cve/CVE-2021-46828/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2991-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012060.html" source="SUSE-SU"/>
		<description>
This update for libtirpc fixes the following issues:

- CVE-2021-46828: Fixed an uncontrolled file descriptor consumption,
  which could be exploited by remote attackers to prevent applications
  using the library from accepting new connections (bsc#1201680).

Non-security fixes:

- Exclude ipv6 addresses in client protocol version 2 code (bsc#1200800)
- Fix memory leak in params.r_addr assignement (bsc#1198752)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198752">SUSE bug 1198752</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200800">SUSE bug 1200800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201680">SUSE bug 1201680</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46828/">CVE-2021-46828</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707730" comment="libtirpc-devel-1.0.2-150000.3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707731" comment="libtirpc-netconfig-1.0.2-150000.3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707732" comment="libtirpc3-1.0.2-150000.3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707725" comment="libtirpc3-32bit-1.0.2-150000.3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140613" version="1" class="patch">
	<metadata>
		<title>Security update for python-pyxdg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1137627" ref_url="https://bugzilla.suse.com/1137627" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12761" ref_url="https://www.suse.com/security/cve/CVE-2019-12761/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012064.html" source="SUSE-SU"/>
		<description>
This update for python-pyxdg fixes the following issues:

- CVE-2019-12761: Fixed a code injection issue in Category elements of
  a Menu XML (bsc#1137627).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-02"/>
	<updated date="2022-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1137627">SUSE bug 1137627</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12761/">CVE-2019-12761</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708033" comment="python2-pyxdg-0.25-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708041" comment="python3-pyxdg-0.25-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140614" version="1" class="patch">
	<metadata>
		<title>Security update for python-bottle (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1200286" ref_url="https://bugzilla.suse.com/1200286" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31799" ref_url="https://www.suse.com/security/cve/CVE-2022-31799/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012109.html" source="SUSE-SU"/>
		<description>
This update for python-bottle fixes the following issues:

- CVE-2022-31799: Fixed an error mishandling issue that could lead to
  remote denial of service (bsc#1200286).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-06"/>
	<updated date="2022-09-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200286">SUSE bug 1200286</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-31799/">CVE-2022-31799</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707087" comment="python2-bottle-0.12.13-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707069" comment="python3-bottle-0.12.13-150000.3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140615" version="1" class="patch">
	<metadata>
		<title>Security update for gpg2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201225" ref_url="https://bugzilla.suse.com/1201225" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-34903" ref_url="https://www.suse.com/security/cve/CVE-2022-34903/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3144-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012160.html" source="SUSE-SU"/>
		<description>
This update for gpg2 fixes the following issues:

- CVE-2022-34903: Fixed a potential signature forgery via injection
  into the status line when certain unusual conditions are met (bsc#1201225).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-07"/>
	<updated date="2022-09-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201225">SUSE bug 1201225</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34903/">CVE-2022-34903</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707804" comment="gpg2-2.2.5-150000.4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707794" comment="gpg2-lang-2.2.5-150000.4.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140616" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1200270" ref_url="https://bugzilla.suse.com/1200270" source="BUGZILLA"/>
		<reference ref_id="1200697" ref_url="https://bugzilla.suse.com/1200697" source="BUGZILLA"/>
		<reference ref_id="1200698" ref_url="https://bugzilla.suse.com/1200698" source="BUGZILLA"/>
		<reference ref_id="1200700" ref_url="https://bugzilla.suse.com/1200700" source="BUGZILLA"/>
		<reference ref_id="1200701" ref_url="https://bugzilla.suse.com/1200701" source="BUGZILLA"/>
		<reference ref_id="1200732" ref_url="https://bugzilla.suse.com/1200732" source="BUGZILLA"/>
		<reference ref_id="1200884" ref_url="https://bugzilla.suse.com/1200884" source="BUGZILLA"/>
		<reference ref_id="1200902" ref_url="https://bugzilla.suse.com/1200902" source="BUGZILLA"/>
		<reference ref_id="1200903" ref_url="https://bugzilla.suse.com/1200903" source="BUGZILLA"/>
		<reference ref_id="1200904" ref_url="https://bugzilla.suse.com/1200904" source="BUGZILLA"/>
		<reference ref_id="1201132" ref_url="https://bugzilla.suse.com/1201132" source="BUGZILLA"/>
		<reference ref_id="1201133" ref_url="https://bugzilla.suse.com/1201133" source="BUGZILLA"/>
		<reference ref_id="1201134" ref_url="https://bugzilla.suse.com/1201134" source="BUGZILLA"/>
		<reference ref_id="1201135" ref_url="https://bugzilla.suse.com/1201135" source="BUGZILLA"/>
		<reference ref_id="1201136" ref_url="https://bugzilla.suse.com/1201136" source="BUGZILLA"/>
		<reference ref_id="1201150" ref_url="https://bugzilla.suse.com/1201150" source="BUGZILLA"/>
		<reference ref_id="1201151" ref_url="https://bugzilla.suse.com/1201151" source="BUGZILLA"/>
		<reference ref_id="1201152" ref_url="https://bugzilla.suse.com/1201152" source="BUGZILLA"/>
		<reference ref_id="1201153" ref_url="https://bugzilla.suse.com/1201153" source="BUGZILLA"/>
		<reference ref_id="1201154" ref_url="https://bugzilla.suse.com/1201154" source="BUGZILLA"/>
		<reference ref_id="1201155" ref_url="https://bugzilla.suse.com/1201155" source="BUGZILLA"/>
		<reference ref_id="1201249" ref_url="https://bugzilla.suse.com/1201249" source="BUGZILLA"/>
		<reference ref_id="1201356" ref_url="https://bugzilla.suse.com/1201356" source="BUGZILLA"/>
		<reference ref_id="1201359" ref_url="https://bugzilla.suse.com/1201359" source="BUGZILLA"/>
		<reference ref_id="1201363" ref_url="https://bugzilla.suse.com/1201363" source="BUGZILLA"/>
		<reference ref_id="1201620" ref_url="https://bugzilla.suse.com/1201620" source="BUGZILLA"/>
		<reference ref_id="1201863" ref_url="https://bugzilla.suse.com/1201863" source="BUGZILLA"/>
		<reference ref_id="1202046" ref_url="https://bugzilla.suse.com/1202046" source="BUGZILLA"/>
		<reference ref_id="1202049" ref_url="https://bugzilla.suse.com/1202049" source="BUGZILLA"/>
		<reference ref_id="1202050" ref_url="https://bugzilla.suse.com/1202050" source="BUGZILLA"/>
		<reference ref_id="1202051" ref_url="https://bugzilla.suse.com/1202051" source="BUGZILLA"/>
		<reference ref_id="1202414" ref_url="https://bugzilla.suse.com/1202414" source="BUGZILLA"/>
		<reference ref_id="1202420" ref_url="https://bugzilla.suse.com/1202420" source="BUGZILLA"/>
		<reference ref_id="1202421" ref_url="https://bugzilla.suse.com/1202421" source="BUGZILLA"/>
		<reference ref_id="1202511" ref_url="https://bugzilla.suse.com/1202511" source="BUGZILLA"/>
		<reference ref_id="1202512" ref_url="https://bugzilla.suse.com/1202512" source="BUGZILLA"/>
		<reference ref_id="1202515" ref_url="https://bugzilla.suse.com/1202515" source="BUGZILLA"/>
		<reference ref_id="1202552" ref_url="https://bugzilla.suse.com/1202552" source="BUGZILLA"/>
		<reference ref_id="1202599" ref_url="https://bugzilla.suse.com/1202599" source="BUGZILLA"/>
		<reference ref_id="1202687" ref_url="https://bugzilla.suse.com/1202687" source="BUGZILLA"/>
		<reference ref_id="1202689" ref_url="https://bugzilla.suse.com/1202689" source="BUGZILLA"/>
		<reference ref_id="1202862" ref_url="https://bugzilla.suse.com/1202862" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1720" ref_url="https://www.suse.com/security/cve/CVE-2022-1720/" source="CVE"/>
		<reference ref_id="CVE-2022-1968" ref_url="https://www.suse.com/security/cve/CVE-2022-1968/" source="CVE"/>
		<reference ref_id="CVE-2022-2124" ref_url="https://www.suse.com/security/cve/CVE-2022-2124/" source="CVE"/>
		<reference ref_id="CVE-2022-2125" ref_url="https://www.suse.com/security/cve/CVE-2022-2125/" source="CVE"/>
		<reference ref_id="CVE-2022-2126" ref_url="https://www.suse.com/security/cve/CVE-2022-2126/" source="CVE"/>
		<reference ref_id="CVE-2022-2129" ref_url="https://www.suse.com/security/cve/CVE-2022-2129/" source="CVE"/>
		<reference ref_id="CVE-2022-2175" ref_url="https://www.suse.com/security/cve/CVE-2022-2175/" source="CVE"/>
		<reference ref_id="CVE-2022-2182" ref_url="https://www.suse.com/security/cve/CVE-2022-2182/" source="CVE"/>
		<reference ref_id="CVE-2022-2183" ref_url="https://www.suse.com/security/cve/CVE-2022-2183/" source="CVE"/>
		<reference ref_id="CVE-2022-2206" ref_url="https://www.suse.com/security/cve/CVE-2022-2206/" source="CVE"/>
		<reference ref_id="CVE-2022-2207" ref_url="https://www.suse.com/security/cve/CVE-2022-2207/" source="CVE"/>
		<reference ref_id="CVE-2022-2208" ref_url="https://www.suse.com/security/cve/CVE-2022-2208/" source="CVE"/>
		<reference ref_id="CVE-2022-2210" ref_url="https://www.suse.com/security/cve/CVE-2022-2210/" source="CVE"/>
		<reference ref_id="CVE-2022-2231" ref_url="https://www.suse.com/security/cve/CVE-2022-2231/" source="CVE"/>
		<reference ref_id="CVE-2022-2257" ref_url="https://www.suse.com/security/cve/CVE-2022-2257/" source="CVE"/>
		<reference ref_id="CVE-2022-2264" ref_url="https://www.suse.com/security/cve/CVE-2022-2264/" source="CVE"/>
		<reference ref_id="CVE-2022-2284" ref_url="https://www.suse.com/security/cve/CVE-2022-2284/" source="CVE"/>
		<reference ref_id="CVE-2022-2285" ref_url="https://www.suse.com/security/cve/CVE-2022-2285/" source="CVE"/>
		<reference ref_id="CVE-2022-2286" ref_url="https://www.suse.com/security/cve/CVE-2022-2286/" source="CVE"/>
		<reference ref_id="CVE-2022-2287" ref_url="https://www.suse.com/security/cve/CVE-2022-2287/" source="CVE"/>
		<reference ref_id="CVE-2022-2304" ref_url="https://www.suse.com/security/cve/CVE-2022-2304/" source="CVE"/>
		<reference ref_id="CVE-2022-2343" ref_url="https://www.suse.com/security/cve/CVE-2022-2343/" source="CVE"/>
		<reference ref_id="CVE-2022-2344" ref_url="https://www.suse.com/security/cve/CVE-2022-2344/" source="CVE"/>
		<reference ref_id="CVE-2022-2345" ref_url="https://www.suse.com/security/cve/CVE-2022-2345/" source="CVE"/>
		<reference ref_id="CVE-2022-2522" ref_url="https://www.suse.com/security/cve/CVE-2022-2522/" source="CVE"/>
		<reference ref_id="CVE-2022-2571" ref_url="https://www.suse.com/security/cve/CVE-2022-2571/" source="CVE"/>
		<reference ref_id="CVE-2022-2580" ref_url="https://www.suse.com/security/cve/CVE-2022-2580/" source="CVE"/>
		<reference ref_id="CVE-2022-2581" ref_url="https://www.suse.com/security/cve/CVE-2022-2581/" source="CVE"/>
		<reference ref_id="CVE-2022-2598" ref_url="https://www.suse.com/security/cve/CVE-2022-2598/" source="CVE"/>
		<reference ref_id="CVE-2022-2816" ref_url="https://www.suse.com/security/cve/CVE-2022-2816/" source="CVE"/>
		<reference ref_id="CVE-2022-2817" ref_url="https://www.suse.com/security/cve/CVE-2022-2817/" source="CVE"/>
		<reference ref_id="CVE-2022-2819" ref_url="https://www.suse.com/security/cve/CVE-2022-2819/" source="CVE"/>
		<reference ref_id="CVE-2022-2845" ref_url="https://www.suse.com/security/cve/CVE-2022-2845/" source="CVE"/>
		<reference ref_id="CVE-2022-2849" ref_url="https://www.suse.com/security/cve/CVE-2022-2849/" source="CVE"/>
		<reference ref_id="CVE-2022-2862" ref_url="https://www.suse.com/security/cve/CVE-2022-2862/" source="CVE"/>
		<reference ref_id="CVE-2022-2874" ref_url="https://www.suse.com/security/cve/CVE-2022-2874/" source="CVE"/>
		<reference ref_id="CVE-2022-2889" ref_url="https://www.suse.com/security/cve/CVE-2022-2889/" source="CVE"/>
		<reference ref_id="CVE-2022-2923" ref_url="https://www.suse.com/security/cve/CVE-2022-2923/" source="CVE"/>
		<reference ref_id="CVE-2022-2946" ref_url="https://www.suse.com/security/cve/CVE-2022-2946/" source="CVE"/>
		<reference ref_id="CVE-2022-3016" ref_url="https://www.suse.com/security/cve/CVE-2022-3016/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3229-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012199.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

Updated to version 9.0 with patch level 0313:

- CVE-2022-2183: Fixed out-of-bounds read through get_lisp_indent() (bsc#1200902).
- CVE-2022-2182: Fixed heap-based buffer overflow through parse_cmd_address() (bsc#1200903).
- CVE-2022-2175: Fixed buffer over-read through cmdline_insert_reg() (bsc#1200904).
- CVE-2022-2304: Fixed stack buffer overflow in spell_dump_compl() (bsc#1201249).
- CVE-2022-2343: Fixed heap-based buffer overflow in GitHub repository vim prior to 9.0.0044 (bsc#1201356).
- CVE-2022-2344: Fixed another heap-based buffer overflow vim prior to 9.0.0045 (bsc#1201359).
- CVE-2022-2345: Fixed use after free in GitHub repository vim prior to 9.0.0046. (bsc#1201363).
- CVE-2022-2819: Fixed heap-based Buffer Overflow in compile_lock_unlock() (bsc#1202414).
- CVE-2022-2874: Fixed NULL Pointer Dereference in generate_loadvar() (bsc#1202552).
- CVE-2022-1968: Fixed use after free in utf_ptr2char (bsc#1200270).
- CVE-2022-2124: Fixed out of bounds read in current_quote() (bsc#1200697).
- CVE-2022-2125: Fixed out of bounds read in get_lisp_indent() (bsc#1200698).
- CVE-2022-2126: Fixed out of bounds read in suggest_trie_walk() (bsc#1200700).
- CVE-2022-2129: Fixed out of bounds write in vim_regsub_both() (bsc#1200701).
- CVE-2022-1720: Fixed out of bounds read in grab_file_name() (bsc#1200732).
- CVE-2022-2264: Fixed out of bounds read in inc() (bsc#1201132).
- CVE-2022-2284: Fixed out of bounds read in utfc_ptr2len() (bsc#1201133).
- CVE-2022-2285: Fixed negative size passed to memmove() due to integer overflow (bsc#1201134).
- CVE-2022-2286: Fixed out of bounds read in ins_bytes() (bsc#1201135).
- CVE-2022-2287: Fixed out of bounds read in suggest_trie_walk() (bsc#1201136).
- CVE-2022-2231: Fixed null pointer dereference skipwhite() (bsc#1201150).
- CVE-2022-2210: Fixed out of bounds read in ml_append_int() (bsc#1201151).
- CVE-2022-2208: Fixed null pointer dereference in diff_check() (bsc#1201152).
- CVE-2022-2207: Fixed out of bounds read in ins_bs() (bsc#1201153).
- CVE-2022-2257: Fixed out of bounds read in msg_outtrans_special() (bsc#1201154).
- CVE-2022-2206: Fixed out of bounds read in msg_outtrans_attr() (bsc#1201155).
- CVE-2022-2522: Fixed out of bounds read via nested autocommand (bsc#1201863).
- CVE-2022-2571: Fixed heap-based buffer overflow related to ins_comp_get_next_word_or_line() (bsc#1202046).
- CVE-2022-2580: Fixed heap-based buffer overflow related to eval_string() (bsc#1202049).
- CVE-2022-2581: Fixed out-of-bounds read related to cstrchr() (bsc#1202050).
- CVE-2022-2598: Fixed undefined behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput() (bsc#1202051).
- CVE-2022-2817: Fixed use after gree in f_assert_fails() (bsc#1202420).
- CVE-2022-2816: Fixed out-of-bounds Read in check_vim9_unlet() (bsc#1202421).
- CVE-2022-2862: Fixed use-after-free in compile_nested_function() (bsc#1202511).
- CVE-2022-2849: Fixed invalid memory access related to mb_ptr2len() (bsc#1202512).
- CVE-2022-2845: Fixed buffer Over-read related to display_dollar() (bsc#1202515).
- CVE-2022-2889: Fixed use-after-free in find_var_also_in_script() in evalvars.c (bsc#1202599).
- CVE-2022-2923: Fixed NULL pointer dereference in GitHub repository vim/vim prior to 9.0.0240 (bsc#1202687).
- CVE-2022-2946: Fixed use after free in function vim_vsnprintf_typval (bsc#1202689).
- CVE-2022-3016: Fixed use after free in vim prior to 9.0.0285 (bsc#1202862).
  
Bugfixes:

- Fixing vim error on startup (bsc#1200884).
- Fixing vim SUSE Linux Enterprise Server 15 SP4 Basesystem plugin-tlib issue (bsc#1201620).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-09"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200270">SUSE bug 1200270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200697">SUSE bug 1200697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200698">SUSE bug 1200698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200700">SUSE bug 1200700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200701">SUSE bug 1200701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200732">SUSE bug 1200732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200884">SUSE bug 1200884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200902">SUSE bug 1200902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200903">SUSE bug 1200903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200904">SUSE bug 1200904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201132">SUSE bug 1201132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201133">SUSE bug 1201133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201134">SUSE bug 1201134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201135">SUSE bug 1201135</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201136">SUSE bug 1201136</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201150">SUSE bug 1201150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201151">SUSE bug 1201151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201152">SUSE bug 1201152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201153">SUSE bug 1201153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201154">SUSE bug 1201154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201155">SUSE bug 1201155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201249">SUSE bug 1201249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201356">SUSE bug 1201356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201359">SUSE bug 1201359</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201363">SUSE bug 1201363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201620">SUSE bug 1201620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201863">SUSE bug 1201863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202046">SUSE bug 1202046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202049">SUSE bug 1202049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202050">SUSE bug 1202050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202051">SUSE bug 1202051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202414">SUSE bug 1202414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202420">SUSE bug 1202420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202421">SUSE bug 1202421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202511">SUSE bug 1202511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202512">SUSE bug 1202512</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202515">SUSE bug 1202515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202552">SUSE bug 1202552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202599">SUSE bug 1202599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202687">SUSE bug 1202687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202689">SUSE bug 1202689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202862">SUSE bug 1202862</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1720/">CVE-2022-1720</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1968/">CVE-2022-1968</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2124/">CVE-2022-2124</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2125/">CVE-2022-2125</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2126/">CVE-2022-2126</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2129/">CVE-2022-2129</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2175/">CVE-2022-2175</cve>
	<cve impact="moderate" cvss3="3.9/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2182/">CVE-2022-2182</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2183/">CVE-2022-2183</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2206/">CVE-2022-2206</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2207/">CVE-2022-2207</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2208/">CVE-2022-2208</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2210/">CVE-2022-2210</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2231/">CVE-2022-2231</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2257/">CVE-2022-2257</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2264/">CVE-2022-2264</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2284/">CVE-2022-2284</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2285/">CVE-2022-2285</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2286/">CVE-2022-2286</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2287/">CVE-2022-2287</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2304/">CVE-2022-2304</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2343/">CVE-2022-2343</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2344/">CVE-2022-2344</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2345/">CVE-2022-2345</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2522/">CVE-2022-2522</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2571/">CVE-2022-2571</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2580/">CVE-2022-2580</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-2581/">CVE-2022-2581</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2598/">CVE-2022-2598</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2816/">CVE-2022-2816</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2817/">CVE-2022-2817</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2819/">CVE-2022-2819</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2845/">CVE-2022-2845</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2849/">CVE-2022-2849</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2862/">CVE-2022-2862</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2874/">CVE-2022-2874</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2889/">CVE-2022-2889</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2923/">CVE-2022-2923</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2946/">CVE-2022-2946</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3016/">CVE-2022-3016</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709761" comment="gvim-9.0.0313-150000.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709762" comment="vim-9.0.0313-150000.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709662" comment="vim-data-9.0.0313-150000.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709663" comment="vim-data-common-9.0.0313-150000.5.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140617" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1202986" ref_url="https://bugzilla.suse.com/1202986" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:3249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012211.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

clamav was updated to 0.103.7 (bsc#1202986)

* Upgrade the vendored UnRAR library to version 6.1.7.
* Fix logical signature 'Intermediates' feature.
* Relax constraints on slightly malformed zip archives that
  contain overlapping file entries.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-12"/>
	<updated date="2022-09-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202986">SUSE bug 1202986</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709582" comment="clamav-0.103.7-150000.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709583" comment="clamav-devel-0.103.7-150000.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709584" comment="libclamav9-0.103.7-150000.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709585" comment="libfreshclam2-0.103.7-150000.3.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140618" version="1" class="patch">
	<metadata>
		<title>Security update for freetype2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198823" ref_url="https://bugzilla.suse.com/1198823" source="BUGZILLA"/>
		<reference ref_id="1198830" ref_url="https://bugzilla.suse.com/1198830" source="BUGZILLA"/>
		<reference ref_id="1198832" ref_url="https://bugzilla.suse.com/1198832" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-27404" ref_url="https://www.suse.com/security/cve/CVE-2022-27404/" source="CVE"/>
		<reference ref_id="CVE-2022-27405" ref_url="https://www.suse.com/security/cve/CVE-2022-27405/" source="CVE"/>
		<reference ref_id="CVE-2022-27406" ref_url="https://www.suse.com/security/cve/CVE-2022-27406/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3252-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012330.html" source="SUSE-SU"/>
		<description>
This update for freetype2 fixes the following issues:

- CVE-2022-27404 Fixed a segmentation fault via a crafted typeface (bsc#1198830).
- CVE-2022-27405 Fixed a buffer overflow via a crafted typeface (bsc#1198832).
- CVE-2022-27406 Fixed a segmentation fault via a crafted typeface (bsc#1198823).

Non-security fixes:

- Updated to version 2.10.4
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-22"/>
	<updated date="2022-09-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1198823">SUSE bug 1198823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198830">SUSE bug 1198830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198832">SUSE bug 1198832</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27404/">CVE-2022-27404</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27405/">CVE-2022-27405</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27406/">CVE-2022-27406</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710706" comment="freetype2-devel-2.10.4-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710707" comment="libfreetype6-2.10.4-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708194" comment="libfreetype6-32bit-2.10.4-150000.4.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140619" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1200793" ref_url="https://bugzilla.suse.com/1200793" source="BUGZILLA"/>
		<reference ref_id="1201758" ref_url="https://bugzilla.suse.com/1201758" source="BUGZILLA"/>
		<reference ref_id="1202645" ref_url="https://bugzilla.suse.com/1202645" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2200" ref_url="https://www.suse.com/security/cve/CVE-2022-2200/" source="CVE"/>
		<reference ref_id="CVE-2022-2505" ref_url="https://www.suse.com/security/cve/CVE-2022-2505/" source="CVE"/>
		<reference ref_id="CVE-2022-34468" ref_url="https://www.suse.com/security/cve/CVE-2022-34468/" source="CVE"/>
		<reference ref_id="CVE-2022-34469" ref_url="https://www.suse.com/security/cve/CVE-2022-34469/" source="CVE"/>
		<reference ref_id="CVE-2022-34470" ref_url="https://www.suse.com/security/cve/CVE-2022-34470/" source="CVE"/>
		<reference ref_id="CVE-2022-34471" ref_url="https://www.suse.com/security/cve/CVE-2022-34471/" source="CVE"/>
		<reference ref_id="CVE-2022-34472" ref_url="https://www.suse.com/security/cve/CVE-2022-34472/" source="CVE"/>
		<reference ref_id="CVE-2022-34473" ref_url="https://www.suse.com/security/cve/CVE-2022-34473/" source="CVE"/>
		<reference ref_id="CVE-2022-34474" ref_url="https://www.suse.com/security/cve/CVE-2022-34474/" source="CVE"/>
		<reference ref_id="CVE-2022-34475" ref_url="https://www.suse.com/security/cve/CVE-2022-34475/" source="CVE"/>
		<reference ref_id="CVE-2022-34476" ref_url="https://www.suse.com/security/cve/CVE-2022-34476/" source="CVE"/>
		<reference ref_id="CVE-2022-34477" ref_url="https://www.suse.com/security/cve/CVE-2022-34477/" source="CVE"/>
		<reference ref_id="CVE-2022-34478" ref_url="https://www.suse.com/security/cve/CVE-2022-34478/" source="CVE"/>
		<reference ref_id="CVE-2022-34479" ref_url="https://www.suse.com/security/cve/CVE-2022-34479/" source="CVE"/>
		<reference ref_id="CVE-2022-34480" ref_url="https://www.suse.com/security/cve/CVE-2022-34480/" source="CVE"/>
		<reference ref_id="CVE-2022-34481" ref_url="https://www.suse.com/security/cve/CVE-2022-34481/" source="CVE"/>
		<reference ref_id="CVE-2022-34482" ref_url="https://www.suse.com/security/cve/CVE-2022-34482/" source="CVE"/>
		<reference ref_id="CVE-2022-34483" ref_url="https://www.suse.com/security/cve/CVE-2022-34483/" source="CVE"/>
		<reference ref_id="CVE-2022-34484" ref_url="https://www.suse.com/security/cve/CVE-2022-34484/" source="CVE"/>
		<reference ref_id="CVE-2022-34485" ref_url="https://www.suse.com/security/cve/CVE-2022-34485/" source="CVE"/>
		<reference ref_id="CVE-2022-36314" ref_url="https://www.suse.com/security/cve/CVE-2022-36314/" source="CVE"/>
		<reference ref_id="CVE-2022-36318" ref_url="https://www.suse.com/security/cve/CVE-2022-36318/" source="CVE"/>
		<reference ref_id="CVE-2022-36319" ref_url="https://www.suse.com/security/cve/CVE-2022-36319/" source="CVE"/>
		<reference ref_id="CVE-2022-38472" ref_url="https://www.suse.com/security/cve/CVE-2022-38472/" source="CVE"/>
		<reference ref_id="CVE-2022-38473" ref_url="https://www.suse.com/security/cve/CVE-2022-38473/" source="CVE"/>
		<reference ref_id="CVE-2022-38476" ref_url="https://www.suse.com/security/cve/CVE-2022-38476/" source="CVE"/>
		<reference ref_id="CVE-2022-38477" ref_url="https://www.suse.com/security/cve/CVE-2022-38477/" source="CVE"/>
		<reference ref_id="CVE-2022-38478" ref_url="https://www.suse.com/security/cve/CVE-2022-38478/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012227.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Mozilla Firefox was updated to 102.2.0esr ESR:

* Fixed: Various stability, functionality, and security fixes.

- MFSA 2022-34 (bsc#1202645)

  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13

Firefox Extended Support Release 102.1 ESR

  * Fixed: Various stability, functionality, and security fixes.

- MFSA 2022-30 (bsc#1201758)

  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1

- Firefox Extended Support Release 102.0.1 ESR

  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes

Firefox 102.0 ESR:

* New: 

  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voil?! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
 -  Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut 'n.'
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.

  * Fixed: Various security fixes.

- MFSA 2022-24 (bsc#1200793)

  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-14"/>
	<updated date="2022-09-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200793">SUSE bug 1200793</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201758">SUSE bug 1201758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202645">SUSE bug 1202645</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2200/">CVE-2022-2200</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2505/">CVE-2022-2505</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34468/">CVE-2022-34468</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34469/">CVE-2022-34469</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34470/">CVE-2022-34470</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34471/">CVE-2022-34471</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34472/">CVE-2022-34472</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34473/">CVE-2022-34473</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34474/">CVE-2022-34474</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34475/">CVE-2022-34475</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34476/">CVE-2022-34476</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-34477/">CVE-2022-34477</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34478/">CVE-2022-34478</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34479/">CVE-2022-34479</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34480/">CVE-2022-34480</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34481/">CVE-2022-34481</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34482/">CVE-2022-34482</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34483/">CVE-2022-34483</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34484/">CVE-2022-34484</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34485/">CVE-2022-34485</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36314/">CVE-2022-36314</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36318/">CVE-2022-36318</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36319/">CVE-2022-36319</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38472/">CVE-2022-38472</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38473/">CVE-2022-38473</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38476/">CVE-2022-38476</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38477/">CVE-2022-38477</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38478/">CVE-2022-38478</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710313" comment="MozillaFirefox-102.2.0-150000.150.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710314" comment="MozillaFirefox-branding-SLE-102-150000.4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710315" comment="MozillaFirefox-devel-102.2.0-150000.150.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710316" comment="MozillaFirefox-translations-common-102.2.0-150000.150.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710317" comment="MozillaFirefox-translations-other-102.2.0-150000.150.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140620" version="1" class="patch">
	<metadata>
		<title>Security update for flatpak (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1191507" ref_url="https://bugzilla.suse.com/1191507" source="BUGZILLA"/>
		<reference ref_id="1194610" ref_url="https://bugzilla.suse.com/1194610" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21261" ref_url="https://www.suse.com/security/cve/CVE-2021-21261/" source="CVE"/>
		<reference ref_id="CVE-2021-41133" ref_url="https://www.suse.com/security/cve/CVE-2021-41133/" source="CVE"/>
		<reference ref_id="CVE-2021-43860" ref_url="https://www.suse.com/security/cve/CVE-2021-43860/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012249.html" source="SUSE-SU"/>
		<description>
This update for flatpak fixes the following issues:

- CVE-2021-41133: Fixed sandbox bypass via recent syscalls (bsc#1191507).
- CVE-2021-43860: Fixed metadata validation (bsc#1194610).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-15"/>
	<updated date="2022-09-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191507">SUSE bug 1191507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194610">SUSE bug 1194610</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21261/">CVE-2021-21261</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41133/">CVE-2021-41133</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-43860/">CVE-2021-43860</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709975" comment="flatpak-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709976" comment="flatpak-devel-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709977" comment="flatpak-zsh-completion-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709978" comment="libflatpak0-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709979" comment="typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140621" version="1" class="patch">
	<metadata>
		<title>Security update for sqlite3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1189802" ref_url="https://bugzilla.suse.com/1189802" source="BUGZILLA"/>
		<reference ref_id="1195773" ref_url="https://bugzilla.suse.com/1195773" source="BUGZILLA"/>
		<reference ref_id="1201783" ref_url="https://bugzilla.suse.com/1201783" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36690" ref_url="https://www.suse.com/security/cve/CVE-2021-36690/" source="CVE"/>
		<reference ref_id="CVE-2022-35737" ref_url="https://www.suse.com/security/cve/CVE-2022-35737/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3307-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012802.html" source="SUSE-SU"/>
		<description>
This update for sqlite3 fixes the following issues:

Security issues fixed:

- CVE-2022-35737: Fixed an array-bounds overflow if billions of bytes are used in a string argument to a C API (bnc#1201783).
- CVE-2021-36690: Fixed an issue with the SQLite Expert extension when a column has no collating sequence (bsc#1189802).
  
- Package the Tcl bindings here again so that we only ship one copy of SQLite (bsc#1195773).

sqlite was updated to 3.39.3:

* Use a statement journal on DML statement affecting two or more
  database rows if the statement makes use of a SQL functions
  that might abort.
* Use a mutex to protect the PRAGMA temp_store_directory and
  PRAGMA data_store_directory statements, even though they are
  decremented and documented as not being threadsafe.

Update to 3.39.2:

* Fix a performance regression in the query planner associated
  with rearranging the order of FROM clause terms in the
  presences of a LEFT JOIN.
* Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
  1345947, forum post 3607259d3c, and other minor problems
  discovered by internal testing. [boo#1201783]

Update to 3.39.1:

* Fix an incorrect result from a query that uses a view that
  contains a compound SELECT in which only one arm contains a
  RIGHT JOIN and where the view is not the first FROM clause term
  of the query that contains the view
* Fix a long-standing problem with ALTER TABLE RENAME that can
  only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
  to a very small value.
* Fix a long-standing problem in FTS3 that can only arise when
  compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
  option.
* Fix the initial-prefix optimization for the REGEXP extension so
  that it works correctly even if the prefix contains characters
  that require a 3-byte UTF8 encoding.
* Enhance the sqlite_stmt virtual table so that it buffers all of
  its output. 

Update to 3.39.0:

* Add (long overdue) support for RIGHT and FULL OUTER JOIN
* Add new binary comparison operators IS NOT DISTINCT FROM and 
  IS DISTINCT FROM that are equivalent to IS and IS NOT, 
  respective, for compatibility with PostgreSQL and SQL standards
* Add a new return code (value '3') from the sqlite3_vtab_distinct()
  interface that indicates a query that has both DISTINCT and 
  ORDER BY clauses
* Added the sqlite3_db_name() interface
* The unix os interface resolves all symbolic links in database
  filenames to create a canonical name for the database before
  the file is opened
* Defer materializing views until the materialization is actually
  needed, thus avoiding unnecessary work if the materialization
  turns out to never be used
* The HAVING clause of a SELECT statement is now allowed on any
  aggregate query, even queries that do not have a GROUP BY
  clause
* Many microoptimizations collectively reduce CPU cycles by about
  2.3%. 

Update to 3.38.5:

* Fix a blunder in the CLI of the 3.38.4 release

Update to 3.38.4:

* fix a byte-code problem in the Bloom filter pull-down
  optimization added by release 3.38.0 in which an error in the
  byte code causes the byte code engine to enter an infinite loop
  when the pull-down optimization encounters a NULL key   

Update to 3.38.3:

* Fix a case of the query planner be overly aggressive with
  optimizing automatic-index and Bloom-filter construction,
  using inappropriate ON clause terms to restrict the size of the
  automatic-index or Bloom filter, and resulting in missing rows
  in the output.
* Other minor patches. See the timeline for details. 

Update to 3.38.2:

* Fix a problem with the Bloom filter optimization that might
  cause an incorrect answer when doing a LEFT JOIN with a WHERE
  clause constraint that says that one of the columns on the
  right table of the LEFT JOIN is NULL.
* Other minor patches.

- Package the Tcl bindings here again so that we only ship one copy
of SQLite (bsc#1195773).

Update to 3.38.1:

* Fix problems with the new Bloom filter optimization that might
  cause some obscure queries to get an incorrect answer.
* Fix the localtime modifier of the date and time functions so
  that it preserves fractional seconds.
* Fix the sqlite_offset SQL function so that it works correctly
  even in corner cases such as when the argument is a virtual
  column or the column of a view.
* Fix row value IN operator constraints on virtual tables so that
  they work correctly even if the virtual table implementation
  relies on bytecode to filter rows that do not satisfy the
  constraint.
* Other minor fixes to assert() statements, test cases, and
  documentation. See the source code timeline for details.

Update to 3.38.0

* Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
* The JSON functions are now built-ins
* Enhancements to date and time functions
* Rename the printf() SQL function to format() for better
  compatibility, with alias for backwards compatibility.
* Add the sqlite3_error_offset() interface for helping localize
  an SQL error to a specific character in the input SQL text 
* Enhance the interface to virtual tables 
* CLI columnar output modes are enhanced to correctly handle tabs
  and newlines embedded in text, and add options like '--wrap N',
  '--wordwrap on', and '--quote' to the columnar output modes.
* Query planner enhancements using a Bloom filter to speed up 
  large analytic queries, and a balanced merge tree to evaluate
  UNION or UNION ALL compound SELECT statements that have an
  ORDER BY clause.
* The ALTER TABLE statement is changed to silently ignores
  entries in the sqlite_schema table that do not parse when
  PRAGMA writable_schema=ON

Update to 3.37.2:

* Fix a bug introduced in version 3.35.0 (2021-03-12) that can
  cause database corruption if a SAVEPOINT is rolled back while
  in PRAGMA temp_store=MEMORY mode, and other changes are made,
  and then the outer transaction commits
* Fix a long-standing problem with ON DELETE CASCADE and ON 
  UPDATE CASCADE in which a cache of the bytecode used to
  implement the cascading change was not being reset following a
  local DDL change

Update to 3.37.1:

* Fix a bug introduced by the UPSERT enhancements of version
  3.35.0 that can cause incorrect byte-code to be generated for
  some obscure but valid SQL, possibly resulting in a NULL-
  pointer dereference.
* Fix an OOB read that can occur in FTS5 when reading corrupt
  database files.
* Improved robustness of the --safe option in the CLI.
* Other minor fixes to assert() statements and test cases. 

Updated to 3.37.0:

* STRICT tables provide a prescriptive style of data type
  management, for developers who prefer that kind of thing.
* When adding columns that contain a CHECK constraint or a
  generated column containing a NOT NULL constraint, the
  ALTER TABLE ADD COLUMN now checks new constraints against
  preexisting rows in the database and will only proceed if no
  constraints are violated.
* Added the PRAGMA table_list statement.
* Add the .connection command, allowing the CLI to keep multiple
  database connections open at the same time.
* Add the --safe command-line option that disables dot-commands
  and SQL statements that might cause side-effects that extend
  beyond the single database file named on the command-line.
* CLI: Performance improvements when reading SQL statements that
  span many lines.
* Added the sqlite3_autovacuum_pages() interface.
* The sqlite3_deserialize() does not and has never worked
  for the TEMP database. That limitation is now noted in the
  documentation.
* The query planner now omits ORDER BY clauses on subqueries and
  views if removing those clauses does not change the semantics
  of the query.
* The generate_series table-valued function extension is modified
  so that the first parameter ('START') is now required. This is
  done as a way to demonstrate how to write table-valued
  functions with required parameters. The legacy behavior is
  available using the -DZERO_ARGUMENT_GENERATE_SERIES
  compile-time option.
* Added new sqlite3_changes64() and sqlite3_total_changes64()
  interfaces.
* Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
* Use less memory to hold the database schema.
* bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
  extension when a column has no collating sequence.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1189802">SUSE bug 1189802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195773">SUSE bug 1195773</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201783">SUSE bug 1201783</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36690/">CVE-2021-36690</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-35737/">CVE-2022-35737</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009714913" comment="libsqlite3-0-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710768" comment="libsqlite3-0-32bit-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714914" comment="sqlite3-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714915" comment="sqlite3-devel-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714916" comment="sqlite3-tcl-3.39.3-150000.3.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140622" version="1" class="patch">
	<metadata>
		<title>Security update for libcontainers-common (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1176804" ref_url="https://bugzilla.suse.com/1176804" source="BUGZILLA"/>
		<reference ref_id="1177598" ref_url="https://bugzilla.suse.com/1177598" source="BUGZILLA"/>
		<reference ref_id="1181640" ref_url="https://bugzilla.suse.com/1181640" source="BUGZILLA"/>
		<reference ref_id="1182998" ref_url="https://bugzilla.suse.com/1182998" source="BUGZILLA"/>
		<reference ref_id="1188520" ref_url="https://bugzilla.suse.com/1188520" source="BUGZILLA"/>
		<reference ref_id="1189893" ref_url="https://bugzilla.suse.com/1189893" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14370" ref_url="https://www.suse.com/security/cve/CVE-2020-14370/" source="CVE"/>
		<reference ref_id="CVE-2020-15157" ref_url="https://www.suse.com/security/cve/CVE-2020-15157/" source="CVE"/>
		<reference ref_id="CVE-2021-20199" ref_url="https://www.suse.com/security/cve/CVE-2021-20199/" source="CVE"/>
		<reference ref_id="CVE-2021-20291" ref_url="https://www.suse.com/security/cve/CVE-2021-20291/" source="CVE"/>
		<reference ref_id="CVE-2021-3602" ref_url="https://www.suse.com/security/cve/CVE-2021-3602/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012287.html" source="SUSE-SU"/>
		<description>
This update for libcontainers-common fixes the following issues:

libcontainers-common was updated:

- common component was updated to 0.44.0.
- storage component was updated to 1.36.0.
- image component was updated to 5.16.0.
- podman component was updated to 3.3.1.

3.3.1:

Bugfixes:

- Fixed a bug where unit files created by `podman generate systemd` could not cleanup shut down containers when stopped by `systemctl stop` .
- Fixed a bug where `podman machine` commands would not properly locate the `gvproxy` binary in some circumstances.
- Fixed a bug where containers created as part of a pod using the `--pod-id-file` option would not join the pod's network namespace .
- Fixed a bug where Podman, when using the systemd cgroups driver, could sometimes leak dbus sessions.
- Fixed a bug where the `until` filter to `podman logs` and `podman events` was improperly handled, requiring input to be negated .
- Fixed a bug where rootless containers using CNI networking run on systems using `systemd-resolved` for DNS would fail to start if resolved symlinked `/etc/resolv.conf` to an absolute path .

API:

- A large number of potential file descriptor leaks from improperly closing client connections have been fixed.

3.3.0:

Features:

- Containers inside VMs created by `podman machine` will now automatically handle port forwarding - containers in `podman machine` VMs that publish ports via `--publish` or `--publish-all` will have these ports not just forwarded on the VM, but also on the host system.
- The `podman play kube` command's `--network` option now accepts advanced network options (e.g. `--network slirp4netns:port_handler=slirp4netns`) .
- The `podman play kube` commmand now supports Kubernetes liveness probes, which will be created as Podman healthchecks.
- Podman now provides a systemd unit, `podman-restart.service`, which, when enabled, will restart all containers that were started with `--restart=always` after the system reboots.
- Rootless Podman can now be configured to use CNI networking by default by using the `rootless_networking` option in `containers.conf`.
- Images can now be pulled using `image:tag@digest` syntax (e.g. `podman pull fedora:34@sha256:1b0d4ddd99b1a8c8a80e885aafe6034c95f266da44ead992aab388e6aa91611a`) .
- The `podman container checkpoint` and `podman container restore` commands can now be used to checkpoint containers that are in pods, and restore those containers into pods.
- The `podman container restore` command now features a new option, `--publish`, to change the ports that are forwarded to a container that is being restored from an exported checkpoint.
- The `podman container checkpoint` command now features a new option, `--compress`, to specify the compression algorithm that will be used on the generated checkpoint.
- The `podman pull` command can now pull multiple images at once (e.g. `podman pull fedora:34 ubi8:latest` will pull both specified images).
- THe `podman cp` command can now copy files from one container into another directly (e.g. `podman cp containera:/etc/hosts containerb:/etc/`) .
- The `podman cp` command now supports a new option, `--archive`, which controls whether copied files will be chown'd to the UID and GID of the user of the destination container.
- The `podman stats` command now provides two additional metrics: Average CPU, and CPU time.
- The `podman pod create` command supports a new flag, `--pid`, to specify the PID namespace of the pod. If specified, containers that join the pod will automatically share its PID namespace.
- The `podman pod create` command supports a new flag, `--infra-name`, which allows the name of the pod's infra container to be set .
- The `podman auto-update` command has had its output reformatted - it is now much clearer what images were pulled and what containers were updated.
- The `podman auto-update` command now supports a new option, `--dry-run`, which reports what would be updated but does not actually perform the update .
- The `podman build` command now supports a new option, `--secret`, to mount secrets into build containers.
- The `podman manifest remove` command now has a new alias, `podman manifest rm`.
- The `podman login` command now supports a new option, `--verbose`, to print detailed information about where the credentials entered were stored.
- The `podman events` command now supports a new event, `exec_died`, which is produced when an exec session exits, and includes the exit code of the exec session.
- The `podman system connection add` command now supports adding connections that connect using the `tcp://` and `unix://` URL schemes.
- The `podman system connection list` command now supports a new flag, `--format`, to determine how the output is printed.
- The `podman volume prune` and `podman volume ls` commands' `--filter` option now support a new filter, `until`, that matches volumes created before a certain time .
- The `podman ps --filter` option's `network` filter now accepts a new value: `container:`, which matches containers that share a network namespace with a specific container .
- The `podman diff` command can now accept two arguments, allowing two images or two containers to be specified; the diff between the two will be printed .
- Podman can now optionally copy-up content from containers into volumes mounted into those containers earlier (at creation time, instead of at runtime) via the `prepare_on_create` option in `containers.conf` .
- A new option, `--gpus`, has been added to `podman create` and `podman run` as a no-op for better compatibility with Docker. If the nvidia-container-runtime package is installed, GPUs should be automatically added to containers without using the flag.
- If an invalid subcommand is provided, similar commands to try will now be suggested in the error message.
### Changes
- The `podman system reset` command now removes non-Podman (e.g. Buildah and CRI-O) containers as well.
- The new port forwarding offered by `podman machine` requires [gvproxy] in order to function.
- Podman will now automatically create the default CNI network if it does not exist, for both root and rootless users. This will only be done once per user - if the network is subsequently removed, it will not be recreated.
- The `install.cni` makefile option has been removed. It is no longer required to distribute the default `87-podman.conflist` CNI configuration file, as Podman will now automatically create it.
- The `--root` option to Podman will not automatically clear all default storage options when set. Storage options can be set manually using `--storage-opt` .
- The output of `podman system connection list` is now deterministic, with connections being sorted alpabetically by their name.
- The auto-update service (`podman-auto-update.service`) has had its default timer adjusted so it now starts at a random time up to 15 minutes after midnight, to help prevent system congestion from numerous daily services run at once.
- Systemd unit files generated by `podman generate systemd` now depend on `network-online.target` by default .
- Systemd unit files generated by `podman generate systemd` now use `Type=notify` by default, instead of using PID files.
- The `podman info` command's logic for detecting package versions on Gentoo has been improved, and should be significantly faster.

Bugfixes:

- Fixed a bug where the `podman play kube` command did not perform SELinux relabelling of volumes specified with a `mountPath` that included the `:z` or `:Z` options .
- Fixed a bug where the `podman play kube` command would ignore the `USER` and `EXPOSE` directives in images .
- Fixed a bug where the `podman play kube` command would only accept lowercase pull policies.
- Fixed a bug where named volumes mounted into containers with the `:z` or `:Z` options were not appropriately relabelled for access from the container .
- Fixed a bug where the `podman logs -f` command, with the `journald` log driver, could sometimes fail to pick up the last line of output from a container .
- Fixed a bug where running `podman rm` on a container created with the `--rm` option would occasionally emit an error message saying the container failed to be removed, when it was successfully removed.
- Fixed a bug where starting a Podman container would segfault if the `LISTEN_PID` and `LISTEN_FDS` environment variables were set, but `LISTEN_FDNAMES` was not .
- Fixed a bug where exec sessions in containers were sometimes not cleaned up when run without `-d` and when the associated `podman exec` process was killed before completion.
- Fixed a bug where `podman system service` could, when run in a systemd unit file with sdnotify in use, drop some connections when it was starting up.
- Fixed a bug where containers run using the REST API using the `slirp4netns` network mode would leave zombie processes that were not cleaned up until `podman system service` exited .
- Fixed a bug where the `podman system service` command would leave zombie processes after its initial launch that were not cleaned up until it exited .
- Fixed a bug where VMs created by `podman machine` could not be started after the host system restarted .
- Fixed a bug where the `podman pod ps` command would not show headers for optional information (e.g. container names when the `--ctr-names` option was given).
- Fixed a bug where the remote Podman client's `podman create` and `podman run` commands would ignore timezone configuration from the server's `containers.conf` file .
- Fixed a bug where the remote Podman client's `podman build` command would only respect `.containerignore` and not `.dockerignore` files (when both are present, `.containerignore` will be preferred) .
- Fixed a bug where the remote Podman client's `podman build` command would fail to send the Dockerfile being built to the server when it was excluded by the `.dockerignore` file, resulting in an error .
- Fixed a bug where the remote Podman client's `podman build` command could unexpectedly stop streaming the output of the build .
- Fixed a bug where the remote Podman client's `podman build` command would fail to build when run on Windows .
- Fixed a bug where the `podman manifest create` command accepted at most two arguments (an arbitrary number of images are allowed as arguments, which will be added to the manifest).
- Fixed a bug where named volumes would not be properly chowned to the UID and GID of the directory they were mounted over when first mounted into a container .
- Fixed a bug where named volumes created using a volume plugin would be removed from Podman, even if the plugin reported a failure to remove the volume .
- Fixed a bug where the remote Podman client's `podman exec -i` command would hang when input was provided via shell redirection (e.g. `podman --remote exec -i foo cat &lt;&lt;&lt;'hello'`) .
- Fixed a bug where containers created with `--rm` were not immediately removed after being started by `podman start` if they failed to start .
- Fixed a bug where the `--storage-opt` flag to `podman create` and `podman run` was nonfunctional .
- Fixed a bug where the `--device-cgroup-rule` option to `podman create` and `podman run` was nonfunctional .
- Fixed a bug where the `--tls-verify` option to `podman manifest push` was nonfunctional.
- Fixed a bug where the `podman import` command could, in some circumstances, produce empty images .
- Fixed a bug where images pulled using the `docker-daemon:` transport had the wrong registry (`localhost` instead of `docker.io/library`) .
- Fixed a bug where operations that pruned images (`podman image prune` and `podman system prune`) would prune untagged images with children .
- Fixed a bug where dual-stack networks created by `podman network create` did not properly auto-assign an IPv4 subnet when one was not explicitly specified .
- Fixed a bug where port forwarding using the `rootlessport` port forwarder would break when a network was disconnected and then reconnected .
- Fixed a bug where Podman would ignore user-specified SELinux policies for containers using the Kata OCI runtime, or containers using systemd as PID 1 .
- Fixed a bug where Podman containers created using `--net=host` would add an entry to `/etc/hosts` for the container's hostname pointing to `127.0.1.1` .
- Fixed a bug where the `podman unpause --all` command would throw an error for every container that was not paused .
- Fixed a bug where timestamps for the `since` and `until` filters using Unix timestamps with a nanoseconds portion could not be parsed .
- Fixed a bug where the `podman info` command would sometimes print the wrong path for the `slirp4netns` binary.
- Fixed a bug where rootless Podman containers joined to a CNI network would not have functional DNS when the host used systemd-resolved without the resolved stub resolver being enabled .
- Fixed a bug where `podman network connect` and `podman network disconnect` of rootless containers could sometimes break port forwarding to the container .
- Fixed a bug where joining a container to a CNI network by ID and adding network aliases to this network would cause the container to fail to start .
### API
- Fixed a bug where the Compat List endpoint for Containers included healthcheck information for all containers, even those that did not have a configured healthcheck.
- Fixed a bug where the Compat Create endpoint for Containers would fail to create containers with the `NetworkMode` parameter set to `default` .
- Fixed a bug where the Compat Create endpoint for Containers did not properly handle healthcheck commands .
- Fixed a bug where the Compat Wait endpoint for Containers would always send an empty string error message when no error occurred.
- Fixed a bug where the Libpod Stats endpoint for Containers would not error when run on rootless containers on cgroups v1 systems (nonsensical results would be returned, as this configuration cannot be supportable).
- Fixed a bug where the Compat List endpoint for Images omitted the `ContainerConfig` field .
- Fixed a bug where the Compat Build endpoint for Images was too strict when validating the `Content-Type` header, rejecting content that Docker would have accepted .
- Fixed a bug where the Compat Pull endpoint for Images could fail, but return a 200 status code, if an image name that could not be parsed was provided.
- Fixed a bug where the Compat Pull endpoint for Images would continue to pull images after the client disconnected.
- Fixed a bug where the Compat List endpoint for Networks would fail for non-bridge (e.g. macvlan) networks .
- Fixed a bug where the Libpod List endpoint for Networks would return nil, instead of an empty list, when no networks were present .
- The Compat and Libpod Logs endpoints for Containers now support the `until` query parameter .
- The Compat Import endpoint for Images now supports the `platform`, `message`, and `repo` query parameters.
- The Compat Pull endpoint for Images now supports the `platform` query parameter.

Misc:

- Updated Buildah to v1.22.3
- Updated the containers/storage library to v1.34.1
- Updated the containers/image library to v5.15.2
- Updated the containers/common library to v0.42.1

storage was updated to 1.36.0.

Updated image to 5.16.0.

Update podman to 3.2.3:

Security:

- This release addresses CVE-2021-3602, an issue with the `podman build` command with the `--isolation chroot` flag that results in environment variables from the host leaking into build containers. (bsc#1188520)

Bugfixes:

- Fixed a bug where events related to images could occur before the relevant operation had completed (e.g. an image pull event could be written before the pull was finished) .
- Fixed a bug where `podman save` would refuse to save images with an architecture different from that of the host .
- Fixed a bug where the `podman import` command did not correctly handle images without tags .
- Fixed a bug where Podman's journald events backend would fail and prevent Podman from running when run on a host with systemd as PID1 but in an environment (e.g. a container) without systemd .
- Fixed a bug where containers using rootless CNI networking would fail to start when the `dnsname` CNI plugin was in use and the host system's `/etc/resolv.conf` was a symlink ([#10855] and [#10929](https://github.com/containers/podman/issues/10929)).
- Fixed a bug where containers using rootless CNI networking could fail to start due to a race in rootless CNI initialization .

Update podman to 3.2.2

3.2.2:

- Podman's handling of the Architecture field of images has been relaxed. Since 3.2.0, Podman required that the architecture of the image match the architecture of the system to run containers based on an image, but images often incorrectly report architecture, causing Podman to reject valid images ([#10648] and [#10682](https://github.com/containers/podman/issues/10682)).
- Podman no longer uses inotify to monitor for changes to CNI configurations. This removes potential issues where Podman cannot be run because a user has exhausted their available inotify sessions .

Bugfixes

- Fixed a bug where the `podman cp` would, when given a directory as its source and a target that existed and was a file, copy the contents of the directory into the parent directory of the file; this now results in an error.
- Fixed a bug where the `podman logs` command would, when following a running container's logs, not include the last line of output from the container when it exited when the `k8s-file` driver was in use .
- Fixed a bug where Podman would fail to run containers if `systemd-resolved` was incorrectly detected as the system's DNS server .
- Fixed a bug where the `podman exec -t` command would only resize the exec session's TTY after the session started, leading to a race condition where the terminal would initially not have a size set .
- Fixed a bug where Podman containers using the `slirp4netns` network mode would add an incorrect entry to `/etc/hosts` pointing the container's hostname to the wrong IP address.
- Fixed a bug where Podman would create volumes specified by images with incorrect permissions ([#10188] and [#10606](https://github.com/containers/podman/issues/10606)).
- Fixed a bug where Podman would not respect the `uid` and `gid` options to `podman volume create -o` .
- Fixed a bug where the `podman run` command could panic when parsing the system's cgroup configuration .
- Fixed a bug where the remote Podman client's `podman build -f - ...` command did not read a Containerfile from STDIN .
- Fixed a bug where the `podman container restore --import` command would fail to restore checkpoints created from privileged containers .
- Fixed a bug where Podman was not respecting the `TMPDIR` environment variable when pulling images .
- Fixed a bug where a number of Podman commands did not properly support using Go templates as an argument to the `--format` option.

API:

- Fixed a bug where the Compat Inspect endpoint for Containers did not include information on container healthchecks .
- Fixed a bug where the Libpod and Compat Build endpoints for Images did not properly handle the `devices` query parameter .

Misc:

- Fixed a bug where the Makefile's `make podman-remote-static` target to build a statically-linked `podman-remote` binary was instead producing dynamic binaries .
- Updated the containers/common library to v0.38.11

3.2.1:

Changes:
- Podman now allows corrupt images (e.g. from restarting the system during an image pull) to be replaced by a `podman pull` of the same image (instead of requiring they be removed first, then re-pulled).

Bugfixes:

- Fixed a bug where Podman would fail to start containers if a Seccomp profile was not available at `/usr/share/containers/seccomp.json` .
- Fixed a bug where the `podman machine start` command failed on OS X machines with the AMD64 architecture and certain QEMU versions .
- Fixed a bug where Podman would always use the slow path for joining the rootless user namespace.
- Fixed a bug where the `podman stats` command would fail on Cgroups v1 systems when run on a container running systemd .
- Fixed a bug where pre-checkpoint support for `podman container checkpoint` did not function correctly.
- Fixed a bug where the remote Podman client's `podman build` command did not properly handle the `-f` option .
- Fixed a bug where the remote Podman client's `podman run` command would sometimes not resize the container's terminal before execution began .
- Fixed a bug where the `--filter` option to the `podman image prune` command was nonfunctional.
- Fixed a bug where the `podman logs -f` command would exit before all output for a container was printed when the `k8s-file` log driver was in use .
- Fixed a bug where Podman would not correctly detect that systemd-resolved was in use on the host and adjust DNS servers in the container appropriately under some circumstances .
- Fixed a bug where the `podman network connect` and `podman network disconnect` commands acted improperly when containers were in the Created state, marking the changes as done but not actually performing them.

API:

- Fixed a bug where the Compat and Libpod Prune endpoints for Networks returned null, instead of an empty array, when nothing was pruned.
- Fixed a bug where the Create API for Images would continue to pull images even if a client closed the connection mid-pull .
- Fixed a bug where the Events API did not include some information (including labels) when sending events.
- Fixed a bug where the Events API would, when streaming was not requested, send at most one event .

3.2.0:

Features:

- Docker Compose is now supported with rootless Podman .
- The `podman network connect`, `podman network disconnect`, and `podman network reload` commands have been enabled for rootless Podman.
- An experimental new set of commands, `podman machine`, was added to assist in managing virtual machines containing a Podman server. These are intended for easing the use of Podman on OS X by handling the creation of a Linux VM for running Podman.
- The `podman generate kube` command can now be run on Podman named volumes (generating `PersistentVolumeClaim` YAML), in addition to pods and containers.
- The `podman play kube` command now supports two new options, `--ip` and `--mac`, to set static IPs and MAC addresses for created pods ([#8442] and [#9731](https://github.com/containers/podman/issues/9731)).
- The `podman play kube` command's support for `PersistentVolumeClaim` YAML has been greatly improved.
- The `podman generate kube` command now preserves the label used by `podman auto-update` to identify containers to update as a Kubernetes annotation, and the `podman play kube` command will convert this annotation back into a label. This allows `podman auto-update` to be used with containers created by `podman play kube`.
- The `podman play kube` command now supports Kubernetes `secretRef` YAML (using the secrets support from `podman secret`) for environment variables.
- Secrets can now be added to containers as environment variables using the `type=env` option to the `--secret` flag to `podman create` and `podman run`.
- The `podman start` command now supports the `--all` option, allowing all containers to be started simultaneously with a single command. The `--filter` option has also been added to filter which containers to start when `--all` is used.
- Filtering containers with the `--filter` option to `podman ps` and `podman start` now supports a new filter, `restart-policy`, to filter containers based on their restart policy.
- The `--group-add` option to rootless `podman run` and `podman create` now accepts a new value, `keep-groups`, which instructs Podman to retain the supplemental groups of the user running Podman in the created container. This is only supported with the `crun` OCI runtime.
- The `podman run` and `podman create` commands now support a new option, `--timeout`. This sets a maximum time the container is allowed to run, after which it is killed .
- The `podman run` and `podman create` commands now support a new option, `--pidfile`. This will create a file when the container is started containing the PID of the first process in the container.
- The `podman run` and `podman create` commands now support a new option, `--requires`. The `--requires` option adds dependency containers - containers that must be running before the current container. Commands like `podman start` will automatically start the requirements of a container before starting the container itself.
- Auto-updating containers can now be done with locally-built images, not just images hosted on a registry, by creating containers with the `io.containers.autoupdate` label set to `local`.
- Podman now supports the [Container Device Interface] (CDI) standard.
- Podman now adds an entry to `/etc/hosts`, `host.containers.internal`, pointing to the current gateway (which, for root containers, is usually a bridge interface on the host system) .
- The `podman ps`, `podman pod ps`, `podman network list`, `podman secret list`, and `podman volume list` commands now support a `--noheading` option, which will cause Podman to omit the heading line including column names.
- The `podman unshare` command now supports a new flag, `--rootless-cni`, to join the rootless network namespace. This allows commands to be run in the same network environment as rootless containers with CNI networking.
- The `--security-opt unmask=` option to `podman run` and `podman create` now supports glob operations to unmask a group of paths at once (e.g. `podman run --security-opt unmask=/proc/* ...` will unmask all paths in `/proc` in the container).
- The `podman network prune` command now supports a `--filter` option to filter which networks will be pruned.
### Changes
- The change in Podman 3.1.2 where the `:z` and `:Z` mount options for volumes were ignored for privileged containers has been reverted after discussion in [#10209].
- Podman's rootless CNI functionality no longer requires a sidecar container! The removal of the requirement for the `rootless-cni-infra` container means that rootless CNI is now usable on all architectures, not just AMD64, and no longer requires pulling an image .
- The Image handling code used by Podman has seen a major rewrite to improve code sharing with our other projects, Buildah and CRI-O. This should result in fewer bugs and performance gains in the long term. Work on this is still ongoing.
- The `podman auto-update` command now prunes previous versions of images after updating if they are unused, to prevent disk exhaustion after repeated updates .
- The `podman play kube` now treats environment variables configured as references to a `ConfigMap` as mandatory unless the `optional` parameter was set; this better matches the behavior of Kubernetes.
- Podman now supports the `--context=default` flag from Docker as a no-op for compatibility purposes.
- When Podman is run as root, but without `CAP_SYS_ADMIN` being available, it will run in a user namespace using the same code as rootless Podman (instead of failing outright).
- The `podman info` command now includes the path of the Seccomp profile Podman is using, available cgroup controllers, and whether Podman is connected to a remote service or running containers locally.
- Containers created with the `--rm` option now automatically use the `volatile` storage flag when available for their root filesystems, causing them not to write changes to disk as often as they will be removed at completion anyways. This should result in improved performance.
- The `podman generate systemd --new` command will now include environment variables referenced by the container in generated unit files if the value would be looked up from the system environment.
- Podman now requires that Conmon v2.0.24 be available.

Bugfixes:

- Fixed a bug where the remote Podman client's `podman build` command did not support the `--arch`, `--platform`, and `--os`, options.
- Fixed a bug where the remote Podman client's `podman build` command ignored the `--rm=false` option .
- Fixed a bug where the remote Podman client's `podman build --iidfile` command could include extra output (in addition to just the image ID) in the image ID file written .
- Fixed a bug where the remote Podman client's `podman build` command did not preserve hardlinks when moving files into the container via `COPY` instructions .
- Fixed a bug where the `podman generate systemd --new` command could generate extra `--iidfile` arguments if the container was already created with one.
- Fixed a bug where the `podman generate systemd --new` command would generate unit files that did not include `RequiresMountsFor` lines .
- Fixed a bug where the `podman generate kube` command produced incorrect YAML for containers which bind-mounted both `/` and `/root` from the host system into the container .
- Fixed a bug where pods created by `podman play kube` from YAML that specified `ShareProcessNamespace` would only share the PID namespace (and not also the UTS, Network, and IPC namespaces) .
- Fixed a bug where the `podman network reload` command could generate spurious error messages when `iptables-nft` was in use.
- Fixed a bug where rootless Podman could fail to attach to containers when the user running Podman had a large UID.
- Fixed a bug where the `podman ps` command could fail with a `no such container` error due to a race condition with container removal .
- Fixed a bug where containers using the `slirp4netns` network mode and setting a custom `slirp4netns` subnet while using the `rootlesskit` port forwarder would not be able to forward ports .
- Fixed a bug where the `--filter ancestor=` option to `podman ps` did not require an exact match of the image name/ID to include a container in its results.
- Fixed a bug where the `--filter until=` option to `podman image prune` would prune images created after the specified time (instead of before).
- Fixed a bug where setting a custom Seccomp profile via the `seccomp_profile` option in `containers.conf` had no effect, and the default profile was used instead.
- Fixed a bug where the `--cgroup-parent` option to `podman create` and `podman run` was ignored in rootless Podman on cgroups v2 systems with the `cgroupfs` cgroup manager .
- Fixed a bug where the `IMAGE` and `NAME` variables in `podman container runlabel` were not being correctly substituted .
- Fixed a bug where Podman could freeze when creating containers with a specific combination of volumes and working directory .
- Fixed a bug where rootless Podman containers restarted by restart policy (e.g. containers created with `--restart=always`) would lose networking after being restarted .
- Fixed a bug where the `podman cp` command could not copy files into containers created with the `--pid=host` flag .
- Fixed a bug where filters to the `podman events` command could not be specified twice (if a filter is specified more than once, it will match if any of the given values match - logical or) .
- Fixed a bug where Podman would include IPv6 nameservers in `resolv.conf` in containers without IPv6 connectivity .
- Fixed a bug where containers could not be created with static IP addresses when connecting to a network using the `macvlan` driver .
### API
- Fixed a bug where the Compat Create endpoint for Containers did not allow advanced network options to be set .
- Fixed a bug where the Compat Create endpoint for Containers ignored static IP information provided in the `IPAMConfig` block .
- Fixed a bug where the Compat Inspect endpoint for Containers returned null (instead of an empty list) for Networks when the container was not joined to a CNI network .
- Fixed a bug where the Compat Wait endpoint for Containers could miss containers exiting if they were immediately restarted.
- Fixed a bug where the Compat Create endpoint for Volumes required that the user provide a name for the new volume .
- Fixed a bug where the Libpod Info handler would sometimes not return the correct path to the Podman API socket.
- Fixed a bug where the Compat Events handler used the wrong name for container exited events (`died` instead of `die`) .
- Fixed a bug where the Compat Push endpoint for Images could leak goroutines if the remote end closed the connection prematurely.


Update storage to 1.32.5

Update podman to 3.1.2

3.1.2:

Bugfixes:

- Fixed a bug where images with empty layers were stored incorrectly, causing them to be unable to be pushed or saved.
- Fixed a bug where the `podman rmi` command could fail to remove corrupt images from storage.
- Fixed a bug where the remote Podman client's `podman save` command did not support the `oci-dir` and `docker-dir` formats .
- Fixed a bug where volume mounts from `podman play kube` created with a trailing `/` in the container path were were not properly superceding named volumes from the image .
- Fixed a bug where Podman could fail to build on 32-bit architectures.

Update podman to 3.1.1

- Podman now recognizes `trace` as a valid argument to the `--log-level` command. Trace logging is now the most verbose level of logging available.
- The `:z` and `:Z` options for volume mounts are now ignored when the container is privileged or is run with SELinux isolation disabled (`--security-opt label=disable`). This matches better matches Docker's behavior in this case.

Bugfixes

- Fixed a bug where pruning images with the `podman image prune` or `podman system prune` commands could cause Podman to panic.
- Fixed a bug where the `podman save` command did not properly error when the `--compress` flag was used with incompatible format types.
- Fixed a bug where the `--security-opt` and `--ulimit` options to the remote Podman client's `podman build` command were nonfunctional.
- Fixed a bug where the `--log-rusage` option to the remote Podman client's `podman build` command was nonfunctional .
- Fixed a bug where the `podman build` command could, in some circumstances, use the wrong OCI runtime .
- Fixed a bug where the remote Podman client's `podman build` command could return 0 despite failing .
- Fixed a bug where the `podman container runlabel` command did not properly expand the `IMAGE` and `NAME` variables in the label .
- Fixed a bug where poststop OCI hooks would be executed twice on containers started with the `--rm` argument .
- Fixed a bug where rootless Podman could fail to launch containers on cgroups v2 systems when the `cgroupfs` cgroup manager was in use.
- Fixed a bug where the `podman stats` command could error when statistics tracked exceeded the maximum size of a 32-bit signed integer .
- Fixed a bug where rootless Podman containers run with `--userns=keepid` (without a `--user` flag in addition) would grant exec sessions run in them too many capabilities .
- Fixed a bug where the `--authfile` option to `podman build` did not validate that the path given existed .
- Fixed a bug where the `--storage-opt` option to Podman was appending to, instead of overriding (as is documented), the default storage options.
- Fixed a bug where the `podman system service` connection did not function properly when run in a socket-activated systemd unit file as a non-root user.
- Fixed a bug where the `--network` option to the `podman play kube` command of the remote Podman client was being ignored .
- Fixed a bug where the `--log-driver` option to the `podman play kube` command was nonfunctional .

API

- Fixed a bug where the Libpod Create endpoint for Manifests did not properly validate the image the manifest was being created with.
- Fixed a bug where the Libpod DF endpoint could, in error cases, append an extra null to the JSON response, causing decode errors.
- Fixed a bug where the Libpod and Compat Top endpoint for Containers would return process names that included extra whitespace.
- Fixed a bug where the Compat Prune endpoint for Containers accepted too many types of filter.

Update podman to 3.1.0

Features:

- A set of new commands has been added to manage secrets! The `podman secret create`, `podman secret inspect`, `podman secret ls` and `podman secret rm` commands have been added to handle secrets, along with the `--secret` option to `podman run` and `podman create` to add secrets to containers. The initial driver for secrets does not support encryption - this will be added in a future release.
- A new command to prune networks, `podman network prune`, has been added .
- The `-v` option to `podman run` and `podman create` now supports a new volume option, `:U`, to chown the volume's source directory on the host to match the UID and GID of the container and prevent permissions issues .
- Three new commands, `podman network exists`, `podman volume exists`, and `podman manifest exists`, have been added to check for the existence of networks, volumes, and manifest lists.
- The `podman cp` command can now copy files into directories mounted as `tmpfs` in a running container.
- The `podman volume prune` command will now list volumes that will be pruned when prompting the user whether to continue and perform the prune .
- The Podman remote client's `podman build` command now supports the `--disable-compression`, `--excludes`, and `--jobs` options.
- The Podman remote client's `podman push` command now supports the `--format` option.
- The Podman remote client's `podman rm` command now supports the `--all` and `--ignore` options.
- The Podman remote client's `podman search` command now supports the `--no-trunc` and `--list-tags` options.
- The `podman play kube` command can now read in Kubernetes YAML from `STDIN` when `-` is specified as file name (`podman play kube -`), allowing input to be piped into the command for scripting .
- The `podman generate systemd` command now supports a `--no-header` option, which disables creation of the header comment automatically added by Podman to generated unit files.
- The `podman generate kube` command can now generate `PersistentVolumeClaim` YAML for Podman named volumes .
- The `podman generate kube` command can now generate YAML files containing multiple resources (pods or deployments) .

Security:

- This release resolves CVE-2021-20291, a deadlock vulnerability in the storage library caused by pulling a specially-crafted container image. (bsc#1196497)

Changes:

- The Podman remote client's `podman build` command no longer allows the `-v` flag to be used. Volumes are not yet supported with remote Podman when the client and service are on different machines.
- The `podman kill` and `podman stop` commands now print the name given by the user for each container, instead of the full ID.
- When the `--security-opt unmask=ALL` or `--security-opt unmask=/sys/fs/cgroup` options to `podman create` or `podman run` are given, Podman will mount cgroups into the container as read-write, instead of read-only .
- The `podman rmi` command has been changed to better handle cases where an image is incomplete or corrupted, which can be caused by interrupted image pulls.
- The `podman rename` command has been improved to be more atomic, eliminating many race conditions that could potentially render a renamed container unusable.
- Detection of which OCI runtimes run using virtual machines and thus require custom SELinux labelling has been improved .
- The hidden `--trace` option to `podman` has been turned into a no-op. It was used in very early versions for performance tracing, but has not been supported for some time.
- The `podman generate systemd` command now generates `RequiresMountsFor` lines to ensure necessary storage directories are mounted before systemd starts Podman.
- Podman will now emit a warning when `--tty` and `--interactive` are both passed, but `STDIN` is not a TTY. This will be made into an error in the next major Podman release some time next year.
### Bugfixes
- Fixed a bug where rootless Podman containers joined to CNI networks could not receive traffic from forwarded ports .
- Fixed a bug where `podman network create` with the `--macvlan` flag did not honor the `--gateway`, `--subnet`, and `--opt` options .
- Fixed a bug where the `podman generate kube` command generated invalid YAML for privileged containers .
- Fixed a bug where the `podman generate kube` command could not be used with containers that were not running.
- Fixed a bug where the `podman generate systemd` command could duplicate some parameters to Podman in generated unit files .
- Fixed a bug where Podman did not add annotations specified in `containers.conf` to containers.
- Foxed a bug where Podman did not respect the `no_hosts` default in `containers.conf` when creating containers.
- Fixed a bug where the `--tail=0`, `--since`, and `--follow` options to the `podman logs` command did not function properly when using the `journald` log backend.
- Fixed a bug where specifying more than one container to `podman logs` when the `journald` log backend was in use did not function correctly.
- Fixed a bug where the `podman run` and `podman create` commands would panic if a memory limit was set, but the swap limit was set to unlimited .
- Fixed a bug where the `--network` option to `podman run`, `podman create`, and `podman pod create` would error if the user attempted to specify CNI networks by ID, instead of name .
- Fixed a bug where Podman's cgroup handling for cgroups v1 systems did not properly handle cases where a cgroup existed on some, but not all, controllers, resulting in errors from the `podman stats` command .
- Fixed a bug where the `podman cp` did not properly handle cases where `/dev/stdout` was specified as the destination (it was treated identically to `-`) .
- Fixed a bug where the `podman cp` command would create files with incorrect ownership .
- Fixed a bug where the `podman cp` command did not properly handle cases where the destination directory did not exist.
- Fixed a bug where the `podman cp` command did not properly evaluate symlinks when copying out of containers.
- Fixed a bug where the `podman rm -fa` command would error when attempting to remove containers created with `--rm` .
- Fixed a bug where the ordering of capabilities was nondeterministic in the `CapDrop` field of the output of `podman inspect` on a container .
- Fixed a bug where the `podman network connect` command could be used with containers that were not initially connected to a CNI bridge network (e.g. containers created with `--net=host`) .
- Fixed a bug where DNS search domains required by the `dnsname` CNI plugin were not being added to container's `resolv.conf` under some circumstances.
- Fixed a bug where the `--ignorefile` option to `podman build` was nonfunctional .
- Fixed a bug where the `--timestamp` option to `podman build` was nonfunctional .
- Fixed a bug where the `--iidfile` option to `podman build` could cause Podman to panic if an error occurred during the build.
- Fixed a bug where the `--dns-search` option to `podman build` was nonfunctional .
- Fixed a bug where the `--pull-never` option to `podman build` was nonfunctional .
- Fixed a bug where the `--build-arg` option to `podman build` would, when given a key but not a value, error (instead of attempting to look up the key as an environment variable) .
- Fixed a bug where the `--isolation` option to `podman build` in the remote Podman client was nonfunctional.
- Fixed a bug where the `podman network disconnect` command could cause errors when the container that had a network removed was stopped and its network was cleaned up .
- Fixed a bug where the `podman network rm` command did not properly check what networks a container was present in, resulting in unexpected behavior if `podman network connect` or `podman network disconnect` had been used with the network .
- Fixed a bug where some errors with stopping a container could cause Podman to panic, and the container to be stuck in an unusable `stopping` state .
- Fixed a bug where the `podman load` command could return 0 even in cases where an error occurred .
- Fixed a bug where specifying storage options to Podman using the `--storage-opt` option would override all storage options. Instead, storage options are now overridden only when the `--storage-driver` option is used to override the current graph driver .
- Fixed a bug where containers created with `--privileged` could request more capabilities than were available to Podman.
- Fixed a bug where `podman commit` did not use the `TMPDIR` environment variable to place temporary files created during the commit .
- Fixed a bug where remote Podman could error when attempting to resize short-lived containers .
- Fixed a bug where Podman was unusable on kernels built without `CONFIG_USER_NS`.
- Fixed a bug where the ownership of volumes created by `podman volume create` and then mounted into a container could be incorrect .
- Fixed a bug where Podman volumes using a volume plugin could not pass certain options, and could not be used as non-root users.
- Fixed a bug where the `--tz` option to `podman create` and `podman run` did not properly validate its input.
### API
- Fixed a bug where the `X-Registry-Auth` header did not accept `null` as a valid value.
- A new compat endpoint, `/auth`, has been added. This endpoint validates credentials against a registry .
- Fixed a bug where the compat Build endpoint for Images specified labels using the wrong type (array vs map). Both formats will be accepted now.
- Fixed a bug where the compat Build endpoint for Images did not report that it successfully tagged the built image in its response.
- Fixed a bug where the compat Create endpoint for Images did not provide progress information on pulling the image in its response.
- Fixed a bug where the compat Push endpoint for Images did not properly handle the destination (used a query parameter, instead of a path parameter).
- Fixed a bug where the compat Push endpoint for Images did not send the progress of the push and the digest of the pushed image in the response body.
- Fixed a bug where the compat List endpoint for Networks returned null, instead of an empty array (`[]`), when no networks were present .
- Fixed a bug where the compat List endpoint for Networks returned nulls, instead of empty maps, for networks that do not have Labels and/or Options.
- The Libpod Inspect endpoint for networks (`/libpod/network/$ID/json`) now has an alias at `/libpod/network/$ID` .
- Fixed a bug where the libpod Inspect endpoint for Networks returned a 1-size array of results, instead of a single result .
- The Compat List endpoint for Networks now supports the legacy format for filters in parallel with the current filter format .
- Fixed a bug where the compat Create endpoint for Containers did not properly handle tmpfs filesystems specified with options .
- Fixed a bug where the compat Create endpoint for Containers did not create bind-mount source directories .
- Fixed a bug where the compat Create endpoint for Containers did not properly handle the `NanoCpus` option .
- Fixed a bug where the Libpod create endpoint for Containers has a misnamed field in its JSON.
- Fixed a bug where the compat List endpoint for Containers did not populate information on forwarded ports 
- Fixed a bug where the compat List endpoint for Containers did not populate information on container CNI networks .
- Fixed a bug where the compat and libpod Stop endpoints for Containers would ignore a timeout of 0.
- Fixed a bug where the compat and libpod Resize endpoints for Containers did not set the correct terminal sizes (dimensions were reversed) .
- Fixed a bug where the compat Remove endpoint for Containers would not return 404 when attempting to remove a container that does not exist .
- Fixed a bug where the compat Prune endpoint for Volumes would still prune even if an invalid filter was specified.
- Numerous bugs related to filters have been addressed.

Update podman to 3.0.1

3.0.1:

Changes:

- Several frequently-occurring `WARN` level log messages have been downgraded to `INFO` or `DEBUG` to not clutter terminal output.

Bugfixes:

- Fixed a bug where the `Created` field of `podman ps --format=json` was formatted as a string instead of an Unix timestamp (integer) .
- Fixed a bug where failing lookups of individual layers during the `podman images` command would cause the whole command to fail without printing output.
- Fixed a bug where `--cgroups=split` did not function properly on cgroups v1 systems.
- Fixed a bug where mounting a volume over an directory in the container that existed, but was empty, could fail .
- Fixed a bug where mounting a volume over a directory in the container that existed could copy the entirety of the container's rootfs, instead of just the directory mounted over, into the volume .
- Fixed a bug where Podman would treat the `--entrypoint=['']` option to `podman run` and `podman create` as a literal empty string in the entrypoint, when instead it should have been ignored .
- Fixed a bug where Podman would set the `HOME` environment variable to `''` when the container ran as a user without an assigned home directory .
- Fixed a bug where specifying a pod infra image that had no tags (by using its ID) would cause `podman pod create` to panic .
- Fixed a bug where the `--runtime` option was not properly handled by the `podman build` command .
- Fixed a bug where Podman would incorrectly print an error message related to the remote API when the remote API was not in use and starting Podman failed.
- Fixed a bug where Podman would change ownership of a container's working directory, even if it already existed .
- Fixed a bug where the `podman generate systemd --new` command would incorrectly escape `%t` when generating the path for the PID file .
- Fixed a bug where Podman could, when run inside a Podman container with the host's containers/storage directory mounted into the container, erroneously detect a reboot and reset container state if the temporary directory was not also mounted in .
- Fixed a bug where some options of the `podman build` command (including but not limited to `--jobs`) were nonfunctional .
### API
- Fixed a breaking change to the Libpod Wait API for Containers where the Conditions parameter changed type in Podman v3.0 .
- Fixed a bug where the Compat Create endpoint for Containers did not properly handle forwarded ports that did not specify a host port.
- Fixed a bug where the Libpod Wait endpoint for Containers could write duplicate headers after an error occurred.
- Fixed a bug where the Compat Create endpoint for Images would not pull images that already had a matching tag present locally, even if a more recent version was available at the registry .
- The Compat Create endpoint for Images has had its compatibility with Docker improved, allowing its use with the `docker-java` library.
### Misc
- Updated Buildah to v1.19.4
- Updated the containers/storage library to v1.24.6

3.0.0:

Features:

- Podman now features initial support for Docker Compose.
- Added the `podman rename` command, which allows containers to be renamed after they are created .
- The Podman remote client now supports the `podman copy` command.
- A new command, `podman network reload`, has been added. This command will re-configure the network of all running containers, and can be used to recreate firewall rules lost when the system firewall was reloaded (e.g. via `firewall-cmd --reload`).
- Podman networks now have IDs. They can be seen in `podman network ls` and can be used when removing and inspecting networks. Existing networks receive IDs automatically.
- Podman networks now also support labels. They can be added via the `--label` option to `network create`, and `podman network ls` can filter labels based on them.
- The `podman network create` command now supports setting bridge MTU and VLAN through the `--opt` option .
- The `podman container checkpoint` and `podman container restore` commands can now checkpoint and restore containers that include volumes.
- The `podman container checkpoint` command now supports the `--with-previous` and `--pre-checkpoint` options, and the `podman container restore` command now support the `--import-previous` option. These add support for two-step checkpointing with lowered dump times.
- The `podman push` command can now push manifest lists. Podman will first attempt to push as an image, then fall back to pushing as a manifest list if that fails.
- The `podman generate kube` command can now be run on multiple containers at once, and will generate a single pod containing all of them.
- The `podman generate kube` and `podman play kube` commands now support Kubernetes DNS configuration, and will preserve custom DNS configuration when exporting or importing YAML .
- The `podman generate kube` command now properly supports generating YAML for containers and pods creating using host networking (`--net=host`) .
- The `podman kill` command now supports a `--cidfile` option to kill containers given a file containing the container's ID .
- The `podman pod create` command now supports the `--net=none` option .
- The `podman volume create` command can now specify volume UID and GID as options with the `UID` and `GID` fields passed to the the `--opt` option.
- Initial support has been added for Docker Volume Plugins. Podman can now define available plugins in `containers.conf` and use them to create volumes with `podman volume create --driver`.
- The `podman run` and `podman create` commands now support a new option, `--platform`, to specify the platform of the image to be used when creating the container.
- The `--security-opt` option to `podman run` and `podman create` now supports the `systempaths=unconfined` option to unrestrict access to all paths in the container, as well as `mask` and `unmask` options to allow more granular restriction of container paths.
- The `podman stats --format` command now supports a new format specified, `MemUsageBytes`, which prints the raw bytes of memory consumed by a container without human-readable formatting [#8945].
- The `podman ps` command can now filter containers based on what pod they are joined to via the `pod` filter .
- The `podman pod ps` command can now filter pods based on what networks they are joined to via the `network` filter.
- The `podman pod ps` command can now print information on what networks a pod is joined to via the `.Networks` specifier to the `--format` option.
- The `podman system prune` command now supports filtering what containers, pods, images, and volumes will be pruned.
- The `podman volume prune` commands now supports filtering what volumes will be pruned.
- The `podman system prune` command now includes information on space reclaimed .
- The `podman info` command will now properly print information about packages in use on Gentoo and Arch systems.
- The `containers.conf` file now contains an option for disabling creation of a new kernel keyring on container creation .
- The `podman image sign` command can now sign multi-arch images by producing a signature for each image in a given manifest list.
- The `podman image sign` command, when run as rootless, now supports per-user registry configuration files in `$HOME/.config/containers/registries.d`.
- Configuration options for `slirp4netns` can now be set system-wide via the `NetworkCmdOptions` configuration option in `containers.conf`.
- The MTU of `slirp4netns` can now be configured via the `mtu=` network command option (e.g. `podman run --net slirp4netns:mtu=9000`).

Security:

- A fix for CVE-2021-20199 is included. Podman between v1.8.0 and v2.2.1 used `127.0.0.1` as the source address for all traffic forwarded into rootless containers by a forwarded port; this has been changed to address the issue. (bsc#1181640)

Changes:

- Shortname aliasing support has now been turned on by default. All Podman commands that must pull an image will, if a TTY is available, prompt the user about what image to pull.
- The `podman load` command no longer accepts a `NAME[:TAG]` argument. The presence of this argument broke CLI compatibility with Docker by making `docker load` commands unusable with Podman .
- The Go bindings for the HTTP API have been rewritten with a focus on limiting dependency footprint and improving extensibility. Read more [here].
- The legacy Varlink API has been completely removed from Podman.
- The default log level for Podman has been changed from Error to Warn.
- The `podman network create` command can now create `macvlan` networks using the `--driver macvlan` option for Docker compatibility. The existing `--macvlan` flag has been deprecated and will be removed in Podman 4.0 some time next year.
- The `podman inspect` command has had the `LogPath` and `LogTag` fields moved into the `LogConfig` structure (from the root of the Inspect structure). The maximum size of the log file is also included.
- The `podman generate systemd` command no longer generates unit files using the deprecated `KillMode=none` option .
- The `podman stop` command now releases the container lock while waiting for it to stop - as such, commands like `podman ps` will no longer block until `podman stop` completes .
- Networks created with `podman network create --internal` no longer use the `dnsname` plugin. This configuration never functioned as expected.
- Error messages for the remote Podman client have been improved when it cannot connect to a Podman service.
- Error messages for `podman run` when an invalid SELinux is specified have been improved.
- Rootless Podman features improved support for containers with a single user mapped into the rootless user namespace.
- Pod infra containers now respect default sysctls specified in `containers.conf` allowing for advanced configuration of the namespaces they will share.
- SSH public key handling for remote Podman has been improved.
### Bugfixes
- Fixed a bug where the `podman history --no-trunc` command would truncate the `Created By` field .
- Fixed a bug where root containers that did not explicitly specify a CNI network to join did not generate an entry for the network in use in the `Networks` field of the output of `podman inspect` .
- Fixed a bug where, under some circumstances, container working directories specified by the image (via the `WORKDIR` instruction) but not present in the image, would not be created .
- Fixed a bug where the `podman generate systemd` command would generate invalid unit files if the container was creating using a command line that included doubled braces (`{{` and `}}`), e.g. `--log-opt-tag={{.Name}}` .
- Fixed a bug where the `podman generate systemd --new` command could generate unit files including invalid Podman commands if the container was created using merged short options (e.g. `podman run -dt`) .
- Fixed a bug where the `podman generate systemd --new` command could generate unit files that did not handle Podman commands including some special characters (e.g. `$`) ([#9176]
- Fixed a bug where rootless containers joining CNI networks could not set a static IP address .
- Fixed a bug where rootless containers joining CNI networks could not set network aliases .
- Fixed a bug where the remote client could, under some circumstances, not include the `Containerfile` when sending build context to the server .
- Fixed a bug where rootless Podman did not mount `/sys` as a new `sysfs` in some circumstances where it was acceptable.
- Fixed a bug where rootless containers that both joined a user namespace and a CNI networks would cause a segfault. These options are incompatible and now return an error.
- Fixed a bug where the `podman play kube` command did not properly handle `CMD` and `ARGS` from images .
- Fixed a bug where the `podman play kube` command did not properly handle environment variables from images .
- Fixed a bug where the `podman play kube` command did not properly print errors that occurred when starting containers.
- Fixed a bug where the `podman play kube` command errored when `hostNetwork` was used .
- Fixed a bug where the `podman play kube` command would always pull images when the `:latest` tag was specified, even if the image was available locally .
- Fixed a bug where the `podman play kube` command did not properly handle SELinux configuration, rending YAML with custom SELinux configuration unusable .
- Fixed a bug where the `podman generate kube` command incorrectly populated the `args` and `command` fields of generated YAML .
- Fixed a bug where containers in a pod would create a duplicate entry in the pod's shared `/etc/hosts` file every time the container restarted .
- Fixed a bug where the `podman search --list-tags` command did not support the `--format` option .
- Fixed a bug where the `http_proxy` option in `containers.conf` was not being respected, and instead was set unconditionally to true .
- Fixed a bug where rootless Podman could, on systems with a recent Conmon and users with a long username, fail to attach to containers .
- Fixed a bug where the `podman images` command would break and fail to display any images if an empty manifest list was present in storage .
- Fixed a bug where locale environment variables were not properly passed on to Conmon.
- Fixed a bug where Podman would not build on the MIPS architecture .
- Fixed a bug where rootless Podman could fail to properly configure user namespaces for rootless containers when the user specified a `--uidmap` option that included a mapping beginning with UID `0`.
- Fixed a bug where the `podman logs` command using the `k8s-file` backend did not properly handle partial log lines with a length of 1 .
- Fixed a bug where the `podman logs` command with the `--follow` option did not properly handle log rotation .
- Fixed a bug where user-specified `HOSTNAME` environment variables were overwritten by Podman .
- Fixed a bug where Podman would applied default sysctls from `containers.conf` in too many situations (e.g. applying network sysctls when the container shared its network with a pod).
- Fixed a bug where Podman did not properly handle cases where a secondary image store was in use and an image was present in both the secondary and primary stores .
- Fixed a bug where systemd-managed rootless Podman containers where the user in the container was not root could fail as the container's PID file was not accessible to systemd on the host .
- Fixed a bug where the `--privileged` option to `podman run` and `podman create` would, under some circumstances, not disable Seccomp .
- Fixed a bug where the `podman exec` command did not properly add capabilities when the container or exec session were run with `--privileged`.
- Fixed a bug where rootless Podman would use the `--enable-sandbox` option to `slirp4netns` unconditionally, even when `pivot_root` was disabled, rendering `slirp4netns` unusable when `pivot_root` was disabled .
- Fixed a bug where `podman build --logfile` did not actually write the build's log to the logfile.
- Fixed a bug where the `podman system service` command did not close STDIN, and could display user-interactive prompts .
- Fixed a bug where the `podman system reset` command could, under some circumstances, remove all the contents of the `XDG_RUNTIME_DIR` directory .
- Fixed a bug where the `podman network create` command created CNI configurations that did not include a default gateway .
- Fixed a bug where the `podman.service` systemd unit provided by default used the wrong service type, and would cause systemd to not correctly register the service as started .
- Fixed a bug where, if the `TMPDIR` environment variable was set for the container engine in `containers.conf`, it was being ignored.
- Fixed a bug where the `podman events` command did not properly handle future times given to the `--until` option .
- Fixed a bug where the `podman logs` command wrote container `STDERR` logs to `STDOUT` instead of `STDERR` .
- Fixed a bug where containers created from an image with multiple tags would report that they were created from the wrong tag .
- Fixed a bug where container capabilities were not set properly when the `--cap-add=all` and `--user` options to `podman create` and `podman run` were combined.
- Fixed a bug where the `--layers` option to `podman build` was nonfunctional .
- Fixed a bug where the `podman system prune` command did not act recursively, and thus would leave images, containers, pods, and volumes present that would be removed by a subsequent call to `podman system prune` .
- Fixed a bug where the `--publish` option to `podman run` and `podman create` did not properly handle ports specified as a range of ports with no host port specified .
- Fixed a bug where `--format` did not support JSON output for individual fields .
- Fixed a bug where the `podman stats` command would fail when run on root containers using the `slirp4netns` network mode .
- Fixed a bug where the Podman remote client would ask for a password even if the server's SSH daemon did not support password authentication .
- Fixed a bug where the `podman stats` command would fail if the system did not support one or more of the cgroup controllers Podman supports .
- Fixed a bug where the `--mount` option to `podman create` and `podman run` did not ignore the `consistency` mount option.
- Fixed a bug where failures during the resizing of a container's TTY would print the wrong error.
- Fixed a bug where the `podman network disconnect` command could cause the `podman inspect` command to fail for a container until it was restarted .
- Fixed a bug where containers created from a read-only rootfs (using the `--rootfs` option to `podman create` and `podman run`) would fail .
- Fixed a bug where specifying Go templates to the `--format` option to multiple Podman commands did not support the `join` function .
- Fixed a bug where the `podman rmi` command could, when run in parallel on multiple images, return `layer not known` errors .
- Fixed a bug where the `podman inspect` command on containers displayed unlimited ulimits incorrectly .
- Fixed a bug where Podman would fail to start when a volume was mounted over a directory in a container that contained symlinks that terminated outside the directory and its subdirectories .
### API
- All Libpod Pod APIs have been modified to properly report errors with individual containers. Cases where the operation as a whole succeeded but individual containers failed now report an HTTP 409 error .
- The Compat API for Containers now supports the Rename and Copy APIs.
- Fixed a bug where the Compat Prune APIs (for volumes, containers, and images) did not return the amount of space reclaimed in their responses.
- Fixed a bug where the Compat and Libpod Exec APIs for Containers would drop errors that occurred prior to the exec session successfully starting (e.g. a 'no such file' error if an invalid executable was passed) 
- Fixed a bug where the Volumes field in the Compat Create API for Containers was being ignored .
- Fixed a bug where the NetworkMode field in the Compat Create API for Containers was not handling some values, e.g. `container:`, correctly.
- Fixed a bug where the Compat Create API for Containers did not set container name properly.
- Fixed a bug where containers created using the Compat Create API unconditionally used Kubernetes file logging (the default specified in `containers.conf` is now used).
- Fixed a bug where the Compat Inspect API for Containers could include container states not recognized by Docker.
- Fixed a bug where Podman did not properly clean up after calls to the Events API when the `journald` backend was in use, resulting in a leak of file descriptors .
- Fixed a bug where the Libpod Pull endpoint for Images could fail with an `index out of range` error under certain circumstances .
- Fixed a bug where the Libpod Exists endpoint for Images could panic.
- Fixed a bug where the Compat List API for Containers did not support all filters .
- Fixed a bug where the Compat List API for Containers did not properly populate the Status field.
- Fixed a bug where the Compat and Libpod Resize APIs for Containers ignored the height and width parameters .
- Fixed a bug where the Compat Search API for Images returned an incorrectly-formatted JSON response .
- Fixed a bug where the Compat Load API for Images did not properly clean up temporary files.
- Fixed a bug where the Compat Create API for Networks could panic when an empty IPAM configuration was specified.
- Fixed a bug where the Compat Inspect and List APIs for Networks did not include Scope.
- Fixed a bug where the Compat Wait endpoint for Containers did not support the same wait conditions that Docker did.

		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-19"/>
	<updated date="2022-09-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1176804">SUSE bug 1176804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177598">SUSE bug 1177598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181640">SUSE bug 1181640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182998">SUSE bug 1182998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188520">SUSE bug 1188520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189893">SUSE bug 1189893</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14370/">CVE-2020-14370</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-15157/">CVE-2020-15157</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-20199/">CVE-2021-20199</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20291/">CVE-2021-20291</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3602/">CVE-2021-3602</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708252" comment="libcontainers-common-20210626-150100.3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140623" version="1" class="patch">
	<metadata>
		<title>Security update for oniguruma (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1142847" ref_url="https://bugzilla.suse.com/1142847" source="BUGZILLA"/>
		<reference ref_id="1150130" ref_url="https://bugzilla.suse.com/1150130" source="BUGZILLA"/>
		<reference ref_id="1157805" ref_url="https://bugzilla.suse.com/1157805" source="BUGZILLA"/>
		<reference ref_id="1164550" ref_url="https://bugzilla.suse.com/1164550" source="BUGZILLA"/>
		<reference ref_id="1164569" ref_url="https://bugzilla.suse.com/1164569" source="BUGZILLA"/>
		<reference ref_id="1177179" ref_url="https://bugzilla.suse.com/1177179" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13224" ref_url="https://www.suse.com/security/cve/CVE-2019-13224/" source="CVE"/>
		<reference ref_id="CVE-2019-16163" ref_url="https://www.suse.com/security/cve/CVE-2019-16163/" source="CVE"/>
		<reference ref_id="CVE-2019-19203" ref_url="https://www.suse.com/security/cve/CVE-2019-19203/" source="CVE"/>
		<reference ref_id="CVE-2019-19204" ref_url="https://www.suse.com/security/cve/CVE-2019-19204/" source="CVE"/>
		<reference ref_id="CVE-2019-19246" ref_url="https://www.suse.com/security/cve/CVE-2019-19246/" source="CVE"/>
		<reference ref_id="CVE-2020-26159" ref_url="https://www.suse.com/security/cve/CVE-2020-26159/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012320.html" source="SUSE-SU"/>
		<description>
This update for oniguruma fixes the following issues:

- CVE-2019-19246: Fixed an out of bounds access during regular
  expression matching (bsc#1157805).
- CVE-2019-19204: Fixed an out of bounds access when compiling a
  crafted regular expression (bsc#1164569).
- CVE-2019-19203: Fixed an out of bounds access when performing a
  string search (bsc#1164550).
- CVE-2019-16163: Fixed an uncontrolled recursion issue when compiling
  a crafted regular expression, which could lead to denial of service (bsc#1150130).
- CVE-2020-26159: Fixed an off-by-one buffer overflow (bsc#1177179).
- CVE-2019-13224: Fixed a potential use-after-free when handling
  multiple different encodings (bsc#1142847).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-21"/>
	<updated date="2022-09-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1142847">SUSE bug 1142847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150130">SUSE bug 1150130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157805">SUSE bug 1157805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164550">SUSE bug 1164550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164569">SUSE bug 1164569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177179">SUSE bug 1177179</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-13224/">CVE-2019-13224</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16163/">CVE-2019-16163</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19203/">CVE-2019-19203</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19204/">CVE-2019-19204</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19246/">CVE-2019-19246</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26159/">CVE-2020-26159</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708047" comment="libonig4-6.7.0-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708048" comment="oniguruma-devel-6.7.0-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140624" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1202169" ref_url="https://bugzilla.suse.com/1202169" source="BUGZILLA"/>
		<reference ref_id="1202807" ref_url="https://bugzilla.suse.com/1202807" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32893" ref_url="https://www.suse.com/security/cve/CVE-2022-32893/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012351.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- CVE-2022-32893: Fixed processing maliciously crafted web content may lead to arbitrary code execution (bsc#1202807).

Bugfixes:
- Fixed WebKitGTK not allowing to be used from non-main threads (bsc#1202169).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-23"/>
	<updated date="2022-09-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202169">SUSE bug 1202169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202807">SUSE bug 1202807</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32893/">CVE-2022-32893</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009714246" comment="libjavascriptcoregtk-4_0-18-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714247" comment="libwebkit2gtk-4_0-37-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714220" comment="libwebkit2gtk3-lang-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714248" comment="typelib-1_0-JavaScriptCore-4_0-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714249" comment="typelib-1_0-WebKit2-4_0-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714250" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714251" comment="webkit2gtk-4_0-injected-bundles-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714252" comment="webkit2gtk3-devel-2.36.7-150000.3.112.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140625" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1177440" ref_url="https://bugzilla.suse.com/1177440" source="BUGZILLA"/>
		<reference ref_id="1180153" ref_url="https://bugzilla.suse.com/1180153" source="BUGZILLA"/>
		<reference ref_id="1188944" ref_url="https://bugzilla.suse.com/1188944" source="BUGZILLA"/>
		<reference ref_id="1191881" ref_url="https://bugzilla.suse.com/1191881" source="BUGZILLA"/>
		<reference ref_id="1194535" ref_url="https://bugzilla.suse.com/1194535" source="BUGZILLA"/>
		<reference ref_id="1196616" ref_url="https://bugzilla.suse.com/1196616" source="BUGZILLA"/>
		<reference ref_id="1197158" ref_url="https://bugzilla.suse.com/1197158" source="BUGZILLA"/>
		<reference ref_id="1199482" ref_url="https://bugzilla.suse.com/1199482" source="BUGZILLA"/>
		<reference ref_id="1199665" ref_url="https://bugzilla.suse.com/1199665" source="BUGZILLA"/>
		<reference ref_id="1201019" ref_url="https://bugzilla.suse.com/1201019" source="BUGZILLA"/>
		<reference ref_id="1201420" ref_url="https://bugzilla.suse.com/1201420" source="BUGZILLA"/>
		<reference ref_id="1201705" ref_url="https://bugzilla.suse.com/1201705" source="BUGZILLA"/>
		<reference ref_id="1201726" ref_url="https://bugzilla.suse.com/1201726" source="BUGZILLA"/>
		<reference ref_id="1201948" ref_url="https://bugzilla.suse.com/1201948" source="BUGZILLA"/>
		<reference ref_id="1202096" ref_url="https://bugzilla.suse.com/1202096" source="BUGZILLA"/>
		<reference ref_id="1202097" ref_url="https://bugzilla.suse.com/1202097" source="BUGZILLA"/>
		<reference ref_id="1202154" ref_url="https://bugzilla.suse.com/1202154" source="BUGZILLA"/>
		<reference ref_id="1202335" ref_url="https://bugzilla.suse.com/1202335" source="BUGZILLA"/>
		<reference ref_id="1202346" ref_url="https://bugzilla.suse.com/1202346" source="BUGZILLA"/>
		<reference ref_id="1202347" ref_url="https://bugzilla.suse.com/1202347" source="BUGZILLA"/>
		<reference ref_id="1202393" ref_url="https://bugzilla.suse.com/1202393" source="BUGZILLA"/>
		<reference ref_id="1202396" ref_url="https://bugzilla.suse.com/1202396" source="BUGZILLA"/>
		<reference ref_id="1202672" ref_url="https://bugzilla.suse.com/1202672" source="BUGZILLA"/>
		<reference ref_id="1202897" ref_url="https://bugzilla.suse.com/1202897" source="BUGZILLA"/>
		<reference ref_id="1202898" ref_url="https://bugzilla.suse.com/1202898" source="BUGZILLA"/>
		<reference ref_id="1203098" ref_url="https://bugzilla.suse.com/1203098" source="BUGZILLA"/>
		<reference ref_id="1203107" ref_url="https://bugzilla.suse.com/1203107" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36516" ref_url="https://www.suse.com/security/cve/CVE-2020-36516/" source="CVE"/>
		<reference ref_id="CVE-2021-4203" ref_url="https://www.suse.com/security/cve/CVE-2021-4203/" source="CVE"/>
		<reference ref_id="CVE-2022-1012" ref_url="https://www.suse.com/security/cve/CVE-2022-1012/" source="CVE"/>
		<reference ref_id="CVE-2022-20368" ref_url="https://www.suse.com/security/cve/CVE-2022-20368/" source="CVE"/>
		<reference ref_id="CVE-2022-20369" ref_url="https://www.suse.com/security/cve/CVE-2022-20369/" source="CVE"/>
		<reference ref_id="CVE-2022-21385" ref_url="https://www.suse.com/security/cve/CVE-2022-21385/" source="CVE"/>
		<reference ref_id="CVE-2022-2588" ref_url="https://www.suse.com/security/cve/CVE-2022-2588/" source="CVE"/>
		<reference ref_id="CVE-2022-26373" ref_url="https://www.suse.com/security/cve/CVE-2022-26373/" source="CVE"/>
		<reference ref_id="CVE-2022-2639" ref_url="https://www.suse.com/security/cve/CVE-2022-2639/" source="CVE"/>
		<reference ref_id="CVE-2022-2663" ref_url="https://www.suse.com/security/cve/CVE-2022-2663/" source="CVE"/>
		<reference ref_id="CVE-2022-29581" ref_url="https://www.suse.com/security/cve/CVE-2022-29581/" source="CVE"/>
		<reference ref_id="CVE-2022-2977" ref_url="https://www.suse.com/security/cve/CVE-2022-2977/" source="CVE"/>
		<reference ref_id="CVE-2022-3028" ref_url="https://www.suse.com/security/cve/CVE-2022-3028/" source="CVE"/>
		<reference ref_id="CVE-2022-36879" ref_url="https://www.suse.com/security/cve/CVE-2022-36879/" source="CVE"/>
		<reference ref_id="CVE-2022-39188" ref_url="https://www.suse.com/security/cve/CVE-2022-39188/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012386.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-36516: Fixed an issue in the mixed IPID assignment method where an attacker was able to inject data into or terminate a victim's TCP session (bnc#1196616).
- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bnc#1194535).
- CVE-2022-1012: Fixed a memory leak problem that was found in the TCP source port generation algorithm in net/ipv4/tcp.c (bnc#1199482).
- CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bsc#1202346).
- CVE-2022-20369: Fixed out of bounds write in v4l2_m2m_querybuf of v4l2-mem2mem.c (bnc#1202347).
- CVE-2022-21385: Fixed a flaw in net_rds_alloc_sgs() that allowed unprivileged local users to crash the machine (bnc#1202897).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-26373: Fixed non-transparent sharing of return predictor targets between contexts in some Intel Processors (bnc#1201726).
- CVE-2022-2639: Fixed an integer coercion error that was found in the openvswitch kernel module (bnc#1202154).
- CVE-2022-2663: Fixed an issue that was found in nf_conntrack_irc where the message handling could be confused and incorrectly matches the message (bnc#1202097).
- CVE-2022-29581: Fixed improper update of reference count vulnerability in net/sched that allowed a local attacker to cause privilege escalation to root (bnc#1199665).
- CVE-2022-2977: Fixed reference counting for struct tpm_chip (bsc#1202672).
- CVE-2022-3028: Fixed race condition that was found in the IP framework for transforming packets (XFRM subsystem) (bnc#1202898).
- CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bnc#1201948).
- CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has stale TLB entries (bnc#1203107).

The following non-security bugs were fixed:

- rpm: Fix parsing of rpm/macros.kernel-source on SLE12 (bsc#1201019).
- cifs: fix error paths in cifs_tree_connect() (bsc#1177440).
- cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (bsc#1188944).
- cifs: report error instead of invalid when revalidating a dentry fails (bsc#1177440).
- cifs: skip trailing separators of prefix paths (bsc#1188944).
- kernel-obs-build: include qemu_fw_cfg (boo#1201705)
- lightnvm: Remove lightnvm implemenation (bsc#1191881 bsc#1201420 ZDI-CAN-17325).
- md/bitmap: do not set sb values if can't pass sanity check (bsc#1197158).
- mm/rmap.c: do not reuse anon_vma if we just want a copy (git-fixes, bsc#1203098).
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (git-fixes, bsc#1203098). 
- net_sched: cls_route: disallow handle of 0 (bsc#1202393).
- net_sched: cls_route: disallow handle of 0 (bsc#1202393).
- objtool: Add --backtrace support (bsc#1202396).
- objtool: Add support for intra-function calls (bsc#1202396).
- objtool: Allow no-op CFI ops in alternatives (bsc#1202396).
- objtool: Convert insn type to enum (bsc#1202396).
- objtool: Do not use ignore flag for fake jumps (bsc#1202396).
- objtool: Fix !CFI insn_state propagation (bsc#1202396).
- objtool: Fix ORC vs alternatives (bsc#1202396).
- objtool: Fix sibling call detection (bsc#1202396).
- objtool: Make handle_insn_ops() unconditional (bsc#1202396).
- objtool: Remove INSN_STACK (bsc#1202396).
- objtool: Remove check preventing branches within alternative (bsc#1202396).
- objtool: Rename elf_open() to prevent conflict with libelf from elftoolchain (bsc#1202396).
- objtool: Rename struct cfi_state (bsc#1202396).
- objtool: Rework allocating stack_ops on decode (bsc#1202396).
- objtool: Rewrite alt-&gt;skip_orig (bsc#1202396).
- objtool: Set insn-&gt;func for alternatives (bsc#1202396).
- objtool: Support conditional retpolines (bsc#1202396).
- objtool: Support multiple stack_op per instruction (bsc#1202396).
- objtool: Track original function across branches (bsc#1202396).
- objtool: Uniquely identify alternative instruction groups (bsc#1202396).
- objtool: Use Elf_Scn typedef instead of assuming struct name (bsc#1202396).
- tcp: add some entropy in __inet_hash_connect() (bsc#1180153 bsc#1202335).
- tcp: change source port randomizarion at connect() time (bsc#1180153 bsc#1202335).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-26"/>
	<updated date="2022-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177440">SUSE bug 1177440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180153">SUSE bug 1180153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188944">SUSE bug 1188944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191881">SUSE bug 1191881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194535">SUSE bug 1194535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196616">SUSE bug 1196616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197158">SUSE bug 1197158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199482">SUSE bug 1199482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199665">SUSE bug 1199665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201019">SUSE bug 1201019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201420">SUSE bug 1201420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201705">SUSE bug 1201705</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201726">SUSE bug 1201726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201948">SUSE bug 1201948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202096">SUSE bug 1202096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202097">SUSE bug 1202097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202154">SUSE bug 1202154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202335">SUSE bug 1202335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202346">SUSE bug 1202346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202347">SUSE bug 1202347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202393">SUSE bug 1202393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202396">SUSE bug 1202396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202672">SUSE bug 1202672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202897">SUSE bug 1202897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202898">SUSE bug 1202898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203098">SUSE bug 1203098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203107">SUSE bug 1203107</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36516/">CVE-2020-36516</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4203/">CVE-2021-4203</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1012/">CVE-2022-1012</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20368/">CVE-2022-20368</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20369/">CVE-2022-20369</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21385/">CVE-2022-21385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2588/">CVE-2022-2588</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26373/">CVE-2022-26373</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-2639/">CVE-2022-2639</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-2663/">CVE-2022-2663</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29581/">CVE-2022-29581</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2977/">CVE-2022-2977</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3028/">CVE-2022-3028</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36879/">CVE-2022-36879</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-39188/">CVE-2022-39188</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710964" comment="kernel-default-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710965" comment="kernel-default-base-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710966" comment="kernel-default-devel-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710924" comment="kernel-devel-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710925" comment="kernel-docs-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710926" comment="kernel-macros-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710967" comment="kernel-obs-build-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710928" comment="kernel-source-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710968" comment="kernel-syms-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710969" comment="reiserfs-kmp-default-4.12.14-150100.197.123.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140626" version="1" class="patch">
	<metadata>
		<title>Security update for dpdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1202903" ref_url="https://bugzilla.suse.com/1202903" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2132" ref_url="https://www.suse.com/security/cve/CVE-2022-2132/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012404.html" source="SUSE-SU"/>
		<description>
This update for dpdk fixes the following issues:

- CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs (bsc#1202903).    
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-27"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202903">SUSE bug 1202903</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2132/">CVE-2022-2132</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710708" comment="dpdk-18.11.9-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710709" comment="dpdk-devel-18.11.9-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710710" comment="dpdk-kmp-default-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710711" comment="dpdk-tools-18.11.9-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710712" comment="libdpdk-18_11-18.11.9-150100.4.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140627" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1203477" ref_url="https://bugzilla.suse.com/1203477" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40956" ref_url="https://www.suse.com/security/cve/CVE-2022-40956/" source="CVE"/>
		<reference ref_id="CVE-2022-40957" ref_url="https://www.suse.com/security/cve/CVE-2022-40957/" source="CVE"/>
		<reference ref_id="CVE-2022-40958" ref_url="https://www.suse.com/security/cve/CVE-2022-40958/" source="CVE"/>
		<reference ref_id="CVE-2022-40959" ref_url="https://www.suse.com/security/cve/CVE-2022-40959/" source="CVE"/>
		<reference ref_id="CVE-2022-40960" ref_url="https://www.suse.com/security/cve/CVE-2022-40960/" source="CVE"/>
		<reference ref_id="CVE-2022-40962" ref_url="https://www.suse.com/security/cve/CVE-2022-40962/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012407.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

  Mozilla Firefox was updated from 102.2.0esr to 102.3.0esr (bsc#1203477):

  - CVE-2022-40959: Fixed bypassing FeaturePolicy restrictions on transient pages.
  - CVE-2022-40960: Fixed data-race when parsing non-UTF-8 URLs in threads.
  - CVE-2022-40958: Fixed bypassing secure context restriction for cookies with __Host and __Secure prefix.
  - CVE-2022-40956: Fixed content-security-policy base-uri bypass.
  - CVE-2022-40957: Fixed incoherent instruction cache when building WASM on ARM64.
  - CVE-2022-40962: Fixed memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-27"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203477">SUSE bug 1203477</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-40956/">CVE-2022-40956</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-40957/">CVE-2022-40957</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-40958/">CVE-2022-40958</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40959/">CVE-2022-40959</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-40960/">CVE-2022-40960</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40962/">CVE-2022-40962</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009714242" comment="MozillaFirefox-102.3.0-150000.150.59.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714243" comment="MozillaFirefox-devel-102.3.0-150000.150.59.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714244" comment="MozillaFirefox-translations-common-102.3.0-150000.150.59.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714245" comment="MozillaFirefox-translations-other-102.3.0-150000.150.59.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140628" version="1" class="patch">
	<metadata>
		<title>Security update for libostree (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201770" ref_url="https://bugzilla.suse.com/1201770" source="BUGZILLA"/>
		<reference ref_id="CVE-2014-9862" ref_url="https://www.suse.com/security/cve/CVE-2014-9862/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012442.html" source="SUSE-SU"/>
		<description>
This update for libostree fixes the following issues:

- CVE-2014-9862: Fixed arbitrary write on heap vulnerability (bsc#1201770).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-28"/>
	<updated date="2022-09-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201770">SUSE bug 1201770</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9862/">CVE-2014-9862</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709757" comment="libostree-2018.9-150100.7.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709758" comment="libostree-1-1-2018.9-150100.7.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709759" comment="libostree-devel-2018.9-150100.7.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709760" comment="typelib-1_0-OSTree-1_0-2018.9-150100.7.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140629" version="1" class="patch">
	<metadata>
		<title>Security update for vsftpd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1021387" ref_url="https://bugzilla.suse.com/1021387" source="BUGZILLA"/>
		<reference ref_id="1052900" ref_url="https://bugzilla.suse.com/1052900" source="BUGZILLA"/>
		<reference ref_id="1181400" ref_url="https://bugzilla.suse.com/1181400" source="BUGZILLA"/>
		<reference ref_id="1187678" ref_url="https://bugzilla.suse.com/1187678" source="BUGZILLA"/>
		<reference ref_id="1187686" ref_url="https://bugzilla.suse.com/1187686" source="BUGZILLA"/>
		<reference ref_id="786024" ref_url="https://bugzilla.suse.com/786024" source="BUGZILLA"/>
		<reference ref_id="971784" ref_url="https://bugzilla.suse.com/971784" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3618" ref_url="https://www.suse.com/security/cve/CVE-2021-3618/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012444.html" source="SUSE-SU"/>
		<description>
This update for vsftpd fixes the following issues:

- CVE-2021-3618: Enforced security checks against ALPACA attack (PM-3322, jsc#SLE-23895, bsc#1187686, bsc#1187678).
- Added hardening to systemd services (bsc#1181400).

Bugfixes:
- Fixed a seccomp failure in FIPS mode when SSL was enabled (bsc#1052900).
- Allowed wait4() to be called so that the broker can wait for its child processes (bsc#1021387).
- Fixed hang when using seccomp and syslog (bsc#971784).
- Allowed sendto() syscall when /dev/log support is enabled (bsc#786024).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-28"/>
	<updated date="2022-09-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1021387">SUSE bug 1021387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052900">SUSE bug 1052900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181400">SUSE bug 1181400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187678">SUSE bug 1187678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187686">SUSE bug 1187686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786024">SUSE bug 786024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/971784">SUSE bug 971784</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3618/">CVE-2021-3618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009713850" comment="vsftpd-3.0.5-150000.7.19.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140630" version="1" class="patch">
	<metadata>
		<title>Security update for buildah (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1167864" ref_url="https://bugzilla.suse.com/1167864" source="BUGZILLA"/>
		<reference ref_id="1181961" ref_url="https://bugzilla.suse.com/1181961" source="BUGZILLA"/>
		<reference ref_id="1183043" ref_url="https://bugzilla.suse.com/1183043" source="BUGZILLA"/>
		<reference ref_id="1192999" ref_url="https://bugzilla.suse.com/1192999" source="BUGZILLA"/>
		<reference ref_id="1197870" ref_url="https://bugzilla.suse.com/1197870" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10696" ref_url="https://www.suse.com/security/cve/CVE-2020-10696/" source="CVE"/>
		<reference ref_id="CVE-2021-20206" ref_url="https://www.suse.com/security/cve/CVE-2021-20206/" source="CVE"/>
		<reference ref_id="CVE-2022-27651" ref_url="https://www.suse.com/security/cve/CVE-2022-27651/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012462.html" source="SUSE-SU"/>
		<description>
This update for buildah fixes the following issues:

- Updated to version 1.26.0:
  - CVE-2022-27651: Fixed an issue where containers were incorrectly started with non-empty inheritable Linux process capabilities (bsc#1197870).
  - CVE-2021-20206: Fixed an issue in libcni that could allow an attacker to execute arbitrary binaries on the host (bsc#1181961).
  - CVE-2020-10696: Fixed an issue that could lead to files being overwritten during the image building process (bsc#1167864).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-30"/>
	<updated date="2022-09-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1167864">SUSE bug 1167864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181961">SUSE bug 1181961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183043">SUSE bug 1183043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192999">SUSE bug 1192999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197870">SUSE bug 1197870</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10696/">CVE-2020-10696</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20206/">CVE-2021-20206</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-27651/">CVE-2022-27651</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714364" comment="buildah-1.25.1-150100.3.13.12 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140631" version="1" class="patch">
	<metadata>
		<title>Security update for libcroco (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1171685" ref_url="https://bugzilla.suse.com/1171685" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12825" ref_url="https://www.suse.com/security/cve/CVE-2020-12825/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012482.html" source="SUSE-SU"/>
		<description>
This update for libcroco fixes the following issues:

- CVE-2020-12825: Fixed recursion issue in block and any productions (bsc#1171685).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-04"/>
	<updated date="2022-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171685">SUSE bug 1171685</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12825/">CVE-2020-12825</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715680" comment="libcroco-0.6.12-150000.4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715681" comment="libcroco-0_6-3-0.6.12-150000.4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715653" comment="libcroco-0_6-3-32bit-0.6.12-150000.4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715682" comment="libcroco-devel-0.6.12-150000.4.6.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140632" version="1" class="patch">
	<metadata>
		<title>Security update for libgit2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1158790" ref_url="https://bugzilla.suse.com/1158790" source="BUGZILLA"/>
		<reference ref_id="1158981" ref_url="https://bugzilla.suse.com/1158981" source="BUGZILLA"/>
		<reference ref_id="1198234" ref_url="https://bugzilla.suse.com/1198234" source="BUGZILLA"/>
		<reference ref_id="1201431" ref_url="https://bugzilla.suse.com/1201431" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1352" ref_url="https://www.suse.com/security/cve/CVE-2019-1352/" source="CVE"/>
		<reference ref_id="CVE-2022-24765" ref_url="https://www.suse.com/security/cve/CVE-2022-24765/" source="CVE"/>
		<reference ref_id="CVE-2022-29187" ref_url="https://www.suse.com/security/cve/CVE-2022-29187/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012490.html" source="SUSE-SU"/>
		<description>
This update for libgit2 fixes the following issues:

- Fixed DoS by oob write in constructed commit object with a very large number of parents (bsc#1158981).
- CVE-2019-1352: Fixed git on Windows being unaware of NTFS Alternate Data Streams (bnc#1158790). 
- CVE-2022-24765: Fixed potential command injection via git worktree (bsc#1198234).
- CVE-2022-29187: Fixed incomplete fix for CVE-2022-24765 (bsc#1201431).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-04"/>
	<updated date="2022-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1158790">SUSE bug 1158790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158981">SUSE bug 1158981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198234">SUSE bug 1198234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201431">SUSE bug 1201431</bugzilla>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1352/">CVE-2019-1352</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24765/">CVE-2022-24765</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29187/">CVE-2022-29187</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710980" comment="libgit2-26-0.26.8-150000.3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710981" comment="libgit2-devel-0.26.8-150000.3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140633" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1203530" ref_url="https://bugzilla.suse.com/1203530" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32886" ref_url="https://www.suse.com/security/cve/CVE-2022-32886/" source="CVE"/>
		<reference ref_id="CVE-2022-32912" ref_url="https://www.suse.com/security/cve/CVE-2022-32912/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012491.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Updated to version 2.36.8 (bsc#1203530):
  - CVE-2022-32886: Fixed a buffer overflow issue that could potentially lead to code execution.
  - CVE-2022-32912: Fixed an out-of-bounds read that could potentially lead to code execution.

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-04"/>
	<updated date="2022-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203530">SUSE bug 1203530</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32886/">CVE-2022-32886</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32912/">CVE-2022-32912</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715683" comment="libjavascriptcoregtk-4_0-18-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715684" comment="libwebkit2gtk-4_0-37-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715657" comment="libwebkit2gtk3-lang-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715685" comment="typelib-1_0-JavaScriptCore-4_0-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715686" comment="typelib-1_0-WebKit2-4_0-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715687" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715688" comment="webkit2gtk-4_0-injected-bundles-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715689" comment="webkit2gtk3-devel-2.36.8-150000.3.115.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140634" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1202624" ref_url="https://bugzilla.suse.com/1202624" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28861" ref_url="https://www.suse.com/security/cve/CVE-2021-28861/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3512-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012543.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:
                                                                                                                                                                                               
- CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).                                                                    
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202624">SUSE bug 1202624</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28861/">CVE-2021-28861</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716519" comment="libpython2_7-1_0-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716520" comment="python-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716521" comment="python-base-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716522" comment="python-curses-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716523" comment="python-devel-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716524" comment="python-gdbm-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716525" comment="python-tk-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716526" comment="python-xml-2.7.18-150000.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140635" version="1" class="patch">
	<metadata>
		<title>Security update for jdom (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1187446" ref_url="https://bugzilla.suse.com/1187446" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33813" ref_url="https://www.suse.com/security/cve/CVE-2021-33813/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012660.html" source="SUSE-SU"/>
		<description>
This update for jdom fixes the following issues:

  - CVE-2021-33813: Fixed XXE issue in SAXBuilder can cause a denial of service via a crafted HTTP request (bsc#1187446).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187446">SUSE bug 1187446</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33813/">CVE-2021-33813</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009717154" comment="jaxen-1.1.1-150000.5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717155" comment="jdom-1.1-150000.5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140636" version="1" class="patch">
	<metadata>
		<title>Security update for cyrus-sasl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1159635" ref_url="https://bugzilla.suse.com/1159635" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19906" ref_url="https://www.suse.com/security/cve/CVE-2019-19906/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012519.html" source="SUSE-SU"/>
		<description>
This update for cyrus-sasl fixes the following issues:

- CVE-2019-19906: Fixed an out-of-bounds write that could lead to unauthenticated remote denial of service in OpenLDAP via a malformed LDAP packet (bsc#1159635).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-07"/>
	<updated date="2022-10-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159635">SUSE bug 1159635</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19906/">CVE-2019-19906</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710970" comment="cyrus-sasl-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710904" comment="cyrus-sasl-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710971" comment="cyrus-sasl-crammd5-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710906" comment="cyrus-sasl-crammd5-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710972" comment="cyrus-sasl-devel-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710973" comment="cyrus-sasl-digestmd5-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710909" comment="cyrus-sasl-digestmd5-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710974" comment="cyrus-sasl-gssapi-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710911" comment="cyrus-sasl-gssapi-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710975" comment="cyrus-sasl-otp-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710976" comment="cyrus-sasl-plain-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710914" comment="cyrus-sasl-plain-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710977" comment="cyrus-sasl-saslauthd-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710978" comment="cyrus-sasl-sqlauxprop-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710979" comment="libsasl2-3-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710918" comment="libsasl2-3-32bit-2.1.26-150000.5.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140637" version="1" class="patch">
	<metadata>
		<title>Security update for python-Babel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1185768" ref_url="https://bugzilla.suse.com/1185768" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-42771" ref_url="https://www.suse.com/security/cve/CVE-2021-42771/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012537.html" source="SUSE-SU"/>
		<description>
This update for python-Babel fixes the following issues:

- CVE-2021-42771: Fixed relative path traversal (bsc#1185768).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-14"/>
	<updated date="2022-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185768">SUSE bug 1185768</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42771/">CVE-2021-42771</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715848" comment="python2-Babel-2.5.1-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715849" comment="python3-Babel-2.5.1-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140638" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1202624" ref_url="https://bugzilla.suse.com/1202624" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28861" ref_url="https://www.suse.com/security/cve/CVE-2021-28861/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012541.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-14"/>
	<updated date="2022-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202624">SUSE bug 1202624</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28861/">CVE-2021-28861</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716434" comment="libpython3_6m1_0-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716435" comment="python3-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716436" comment="python3-base-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716437" comment="python3-curses-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716438" comment="python3-dbm-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716439" comment="python3-devel-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716440" comment="python3-idle-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716441" comment="python3-testsuite-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716442" comment="python3-tk-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716443" comment="python3-tools-3.6.15-150000.3.109.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140639" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1203677" ref_url="https://bugzilla.suse.com/1203677" source="BUGZILLA"/>
		<reference ref_id="1203680" ref_url="https://bugzilla.suse.com/1203680" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41317" ref_url="https://www.suse.com/security/cve/CVE-2022-41317/" source="CVE"/>
		<reference ref_id="CVE-2022-41318" ref_url="https://www.suse.com/security/cve/CVE-2022-41318/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012545.html" source="SUSE-SU"/>
		<description>
This update for squid fixes the following issues:

  - CVE-2022-41317: Fixed exposure of sensitive information in cache manager (bsc#1203677).
  - CVE-2022-41318: Fixed buffer overread in SSPI and SMB Authentication (bsc#1203680).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203677">SUSE bug 1203677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203680">SUSE bug 1203680</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-41317/">CVE-2022-41317</cve>
	<cve impact="important" cvss3="8.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-41318/">CVE-2022-41318</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715852" comment="squid-4.17-150000.5.35.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140640" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1203438" ref_url="https://bugzilla.suse.com/1203438" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40674" ref_url="https://www.suse.com/security/cve/CVE-2022-40674/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012544.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

- CVE-2022-40674: Fixed use-after-free in the doContent function in xmlparse.c (bsc#1203438).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203438">SUSE bug 1203438</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40674/">CVE-2022-40674</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715853" comment="expat-2.2.5-150000.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715854" comment="libexpat-devel-2.2.5-150000.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715855" comment="libexpat1-2.2.5-150000.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715806" comment="libexpat1-32bit-2.2.5-150000.3.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140641" version="1" class="patch">
	<metadata>
		<title>Security update for exiv2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1076579" ref_url="https://bugzilla.suse.com/1076579" source="BUGZILLA"/>
		<reference ref_id="1086798" ref_url="https://bugzilla.suse.com/1086798" source="BUGZILLA"/>
		<reference ref_id="1086810" ref_url="https://bugzilla.suse.com/1086810" source="BUGZILLA"/>
		<reference ref_id="1092096" ref_url="https://bugzilla.suse.com/1092096" source="BUGZILLA"/>
		<reference ref_id="1114690" ref_url="https://bugzilla.suse.com/1114690" source="BUGZILLA"/>
		<reference ref_id="1185447" ref_url="https://bugzilla.suse.com/1185447" source="BUGZILLA"/>
		<reference ref_id="1186192" ref_url="https://bugzilla.suse.com/1186192" source="BUGZILLA"/>
		<reference ref_id="1188733" ref_url="https://bugzilla.suse.com/1188733" source="BUGZILLA"/>
		<reference ref_id="1188756" ref_url="https://bugzilla.suse.com/1188756" source="BUGZILLA"/>
		<reference ref_id="1189330" ref_url="https://bugzilla.suse.com/1189330" source="BUGZILLA"/>
		<reference ref_id="1189331" ref_url="https://bugzilla.suse.com/1189331" source="BUGZILLA"/>
		<reference ref_id="1189332" ref_url="https://bugzilla.suse.com/1189332" source="BUGZILLA"/>
		<reference ref_id="1189333" ref_url="https://bugzilla.suse.com/1189333" source="BUGZILLA"/>
		<reference ref_id="1189636" ref_url="https://bugzilla.suse.com/1189636" source="BUGZILLA"/>
		<reference ref_id="1189780" ref_url="https://bugzilla.suse.com/1189780" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10772" ref_url="https://www.suse.com/security/cve/CVE-2018-10772/" source="CVE"/>
		<reference ref_id="CVE-2018-18915" ref_url="https://www.suse.com/security/cve/CVE-2018-18915/" source="CVE"/>
		<reference ref_id="CVE-2018-5772" ref_url="https://www.suse.com/security/cve/CVE-2018-5772/" source="CVE"/>
		<reference ref_id="CVE-2018-8976" ref_url="https://www.suse.com/security/cve/CVE-2018-8976/" source="CVE"/>
		<reference ref_id="CVE-2018-8977" ref_url="https://www.suse.com/security/cve/CVE-2018-8977/" source="CVE"/>
		<reference ref_id="CVE-2020-18898" ref_url="https://www.suse.com/security/cve/CVE-2020-18898/" source="CVE"/>
		<reference ref_id="CVE-2020-18899" ref_url="https://www.suse.com/security/cve/CVE-2020-18899/" source="CVE"/>
		<reference ref_id="CVE-2021-29470" ref_url="https://www.suse.com/security/cve/CVE-2021-29470/" source="CVE"/>
		<reference ref_id="CVE-2021-31291" ref_url="https://www.suse.com/security/cve/CVE-2021-31291/" source="CVE"/>
		<reference ref_id="CVE-2021-31292" ref_url="https://www.suse.com/security/cve/CVE-2021-31292/" source="CVE"/>
		<reference ref_id="CVE-2021-32617" ref_url="https://www.suse.com/security/cve/CVE-2021-32617/" source="CVE"/>
		<reference ref_id="CVE-2021-37618" ref_url="https://www.suse.com/security/cve/CVE-2021-37618/" source="CVE"/>
		<reference ref_id="CVE-2021-37619" ref_url="https://www.suse.com/security/cve/CVE-2021-37619/" source="CVE"/>
		<reference ref_id="CVE-2021-37620" ref_url="https://www.suse.com/security/cve/CVE-2021-37620/" source="CVE"/>
		<reference ref_id="CVE-2021-37621" ref_url="https://www.suse.com/security/cve/CVE-2021-37621/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3598-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-October/025597.html" source="SUSE-SU"/>
		<description>
This update for exiv2 fixes the following issues:

- CVE-2021-37621: Fixed denial of service due to infinite loop in Image:printIFDStructure (bsc#1189333).
- CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read() (bsc#1189332).
- CVE-2021-37619: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1189331).
- CVE-2021-37618: Fixed out-of-bounds read in Exiv2:Jp2Image:printStructure (bsc#1189330).
- CVE-2021-32617: Fixed denial of service inside inefficient algorithm (quadratic complexity) (bsc#1186192).
- CVE-2021-31292: Fixed integer overflow in CrwMap:encode0x1810 (bsc#1188756).
- CVE-2021-31291: Fixed heap-based buffer overflow vulnerability in jp2image.cpp may lead to a denial of service (bsc#1188733).
- CVE-2021-29470: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1185447).
- CVE-2020-18899: Fixed uncontrolled memory allocation (bsc#1189636).
- CVE-2020-18898: Fixed remote denial of service in printIFDStructure function (bsc#1189780).
- CVE-2018-8977: Fixed remote denial of service in Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp (bsc#1086798).
- CVE-2018-8976: Fixed remote denial of service in image.cpp Exiv2::Internal::stringFormat via out-of-bounds read (bsc#1086810).
- CVE-2018-5772: Fixed segmentation fault caused by uncontrolled recursion inthe Exiv2::Image::printIFDStructure (bsc#1076579).
- CVE-2018-18915: Fixed an infinite loop in the Exiv2:Image:printIFDStructure function (bsc#1114690).
- CVE-2018-10772: Fixed segmentation fault when the function Exiv2::tEXtToDataBuf() is finished (bsc#1092096).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076579">SUSE bug 1076579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086798">SUSE bug 1086798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086810">SUSE bug 1086810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092096">SUSE bug 1092096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114690">SUSE bug 1114690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185447">SUSE bug 1185447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186192">SUSE bug 1186192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188733">SUSE bug 1188733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188756">SUSE bug 1188756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189330">SUSE bug 1189330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189331">SUSE bug 1189331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189332">SUSE bug 1189332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189333">SUSE bug 1189333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189636">SUSE bug 1189636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189780">SUSE bug 1189780</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10772/">CVE-2018-10772</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18915/">CVE-2018-18915</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5772/">CVE-2018-5772</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8976/">CVE-2018-8976</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8977/">CVE-2018-8977</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-18898/">CVE-2020-18898</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-18899/">CVE-2020-18899</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29470/">CVE-2021-29470</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31291/">CVE-2021-31291</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31292/">CVE-2021-31292</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32617/">CVE-2021-32617</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-37618/">CVE-2021-37618</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-37619/">CVE-2021-37619</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-37620/">CVE-2021-37620</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-37621/">CVE-2021-37621</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716337" comment="libexiv2-26-0.26-150000.6.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716338" comment="libexiv2-devel-0.26-150000.6.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140642" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1124431" ref_url="https://bugzilla.suse.com/1124431" source="BUGZILLA"/>
		<reference ref_id="1167162" ref_url="https://bugzilla.suse.com/1167162" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1179599" ref_url="https://bugzilla.suse.com/1179599" source="BUGZILLA"/>
		<reference ref_id="1184804" ref_url="https://bugzilla.suse.com/1184804" source="BUGZILLA"/>
		<reference ref_id="1185377" ref_url="https://bugzilla.suse.com/1185377" source="BUGZILLA"/>
		<reference ref_id="1186207" ref_url="https://bugzilla.suse.com/1186207" source="BUGZILLA"/>
		<reference ref_id="1186222" ref_url="https://bugzilla.suse.com/1186222" source="BUGZILLA"/>
		<reference ref_id="1187167" ref_url="https://bugzilla.suse.com/1187167" source="BUGZILLA"/>
		<reference ref_id="1189305" ref_url="https://bugzilla.suse.com/1189305" source="BUGZILLA"/>
		<reference ref_id="1189841" ref_url="https://bugzilla.suse.com/1189841" source="BUGZILLA"/>
		<reference ref_id="1190358" ref_url="https://bugzilla.suse.com/1190358" source="BUGZILLA"/>
		<reference ref_id="1190428" ref_url="https://bugzilla.suse.com/1190428" source="BUGZILLA"/>
		<reference ref_id="1191229" ref_url="https://bugzilla.suse.com/1191229" source="BUGZILLA"/>
		<reference ref_id="1191241" ref_url="https://bugzilla.suse.com/1191241" source="BUGZILLA"/>
		<reference ref_id="1191384" ref_url="https://bugzilla.suse.com/1191384" source="BUGZILLA"/>
		<reference ref_id="1191731" ref_url="https://bugzilla.suse.com/1191731" source="BUGZILLA"/>
		<reference ref_id="1192032" ref_url="https://bugzilla.suse.com/1192032" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="1192740" ref_url="https://bugzilla.suse.com/1192740" source="BUGZILLA"/>
		<reference ref_id="1192845" ref_url="https://bugzilla.suse.com/1192845" source="BUGZILLA"/>
		<reference ref_id="1192847" ref_url="https://bugzilla.suse.com/1192847" source="BUGZILLA"/>
		<reference ref_id="1192877" ref_url="https://bugzilla.suse.com/1192877" source="BUGZILLA"/>
		<reference ref_id="1192946" ref_url="https://bugzilla.suse.com/1192946" source="BUGZILLA"/>
		<reference ref_id="1193306" ref_url="https://bugzilla.suse.com/1193306" source="BUGZILLA"/>
		<reference ref_id="1193440" ref_url="https://bugzilla.suse.com/1193440" source="BUGZILLA"/>
		<reference ref_id="1193442" ref_url="https://bugzilla.suse.com/1193442" source="BUGZILLA"/>
		<reference ref_id="1193575" ref_url="https://bugzilla.suse.com/1193575" source="BUGZILLA"/>
		<reference ref_id="1193669" ref_url="https://bugzilla.suse.com/1193669" source="BUGZILLA"/>
		<reference ref_id="1193727" ref_url="https://bugzilla.suse.com/1193727" source="BUGZILLA"/>
		<reference ref_id="1193731" ref_url="https://bugzilla.suse.com/1193731" source="BUGZILLA"/>
		<reference ref_id="1193767" ref_url="https://bugzilla.suse.com/1193767" source="BUGZILLA"/>
		<reference ref_id="1193861" ref_url="https://bugzilla.suse.com/1193861" source="BUGZILLA"/>
		<reference ref_id="1193864" ref_url="https://bugzilla.suse.com/1193864" source="BUGZILLA"/>
		<reference ref_id="1193867" ref_url="https://bugzilla.suse.com/1193867" source="BUGZILLA"/>
		<reference ref_id="1193927" ref_url="https://bugzilla.suse.com/1193927" source="BUGZILLA"/>
		<reference ref_id="1194001" ref_url="https://bugzilla.suse.com/1194001" source="BUGZILLA"/>
		<reference ref_id="1194048" ref_url="https://bugzilla.suse.com/1194048" source="BUGZILLA"/>
		<reference ref_id="1194087" ref_url="https://bugzilla.suse.com/1194087" source="BUGZILLA"/>
		<reference ref_id="1194227" ref_url="https://bugzilla.suse.com/1194227" source="BUGZILLA"/>
		<reference ref_id="1194302" ref_url="https://bugzilla.suse.com/1194302" source="BUGZILLA"/>
		<reference ref_id="1194516" ref_url="https://bugzilla.suse.com/1194516" source="BUGZILLA"/>
		<reference ref_id="1194529" ref_url="https://bugzilla.suse.com/1194529" source="BUGZILLA"/>
		<reference ref_id="1194880" ref_url="https://bugzilla.suse.com/1194880" source="BUGZILLA"/>
		<reference ref_id="1194888" ref_url="https://bugzilla.suse.com/1194888" source="BUGZILLA"/>
		<reference ref_id="1194985" ref_url="https://bugzilla.suse.com/1194985" source="BUGZILLA"/>
		<reference ref_id="1195166" ref_url="https://bugzilla.suse.com/1195166" source="BUGZILLA"/>
		<reference ref_id="1195254" ref_url="https://bugzilla.suse.com/1195254" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-25020" ref_url="https://www.suse.com/security/cve/CVE-2018-25020/" source="CVE"/>
		<reference ref_id="CVE-2019-15126" ref_url="https://www.suse.com/security/cve/CVE-2019-15126/" source="CVE"/>
		<reference ref_id="CVE-2020-27820" ref_url="https://www.suse.com/security/cve/CVE-2020-27820/" source="CVE"/>
		<reference ref_id="CVE-2021-0920" ref_url="https://www.suse.com/security/cve/CVE-2021-0920/" source="CVE"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="CVE-2021-28711" ref_url="https://www.suse.com/security/cve/CVE-2021-28711/" source="CVE"/>
		<reference ref_id="CVE-2021-28712" ref_url="https://www.suse.com/security/cve/CVE-2021-28712/" source="CVE"/>
		<reference ref_id="CVE-2021-28713" ref_url="https://www.suse.com/security/cve/CVE-2021-28713/" source="CVE"/>
		<reference ref_id="CVE-2021-28714" ref_url="https://www.suse.com/security/cve/CVE-2021-28714/" source="CVE"/>
		<reference ref_id="CVE-2021-28715" ref_url="https://www.suse.com/security/cve/CVE-2021-28715/" source="CVE"/>
		<reference ref_id="CVE-2021-33098" ref_url="https://www.suse.com/security/cve/CVE-2021-33098/" source="CVE"/>
		<reference ref_id="CVE-2021-3564" ref_url="https://www.suse.com/security/cve/CVE-2021-3564/" source="CVE"/>
		<reference ref_id="CVE-2021-39648" ref_url="https://www.suse.com/security/cve/CVE-2021-39648/" source="CVE"/>
		<reference ref_id="CVE-2021-39657" ref_url="https://www.suse.com/security/cve/CVE-2021-39657/" source="CVE"/>
		<reference ref_id="CVE-2021-4002" ref_url="https://www.suse.com/security/cve/CVE-2021-4002/" source="CVE"/>
		<reference ref_id="CVE-2021-4083" ref_url="https://www.suse.com/security/cve/CVE-2021-4083/" source="CVE"/>
		<reference ref_id="CVE-2021-4135" ref_url="https://www.suse.com/security/cve/CVE-2021-4135/" source="CVE"/>
		<reference ref_id="CVE-2021-4149" ref_url="https://www.suse.com/security/cve/CVE-2021-4149/" source="CVE"/>
		<reference ref_id="CVE-2021-4197" ref_url="https://www.suse.com/security/cve/CVE-2021-4197/" source="CVE"/>
		<reference ref_id="CVE-2021-4202" ref_url="https://www.suse.com/security/cve/CVE-2021-4202/" source="CVE"/>
		<reference ref_id="CVE-2021-43975" ref_url="https://www.suse.com/security/cve/CVE-2021-43975/" source="CVE"/>
		<reference ref_id="CVE-2021-43976" ref_url="https://www.suse.com/security/cve/CVE-2021-43976/" source="CVE"/>
		<reference ref_id="CVE-2021-44733" ref_url="https://www.suse.com/security/cve/CVE-2021-44733/" source="CVE"/>
		<reference ref_id="CVE-2021-45095" ref_url="https://www.suse.com/security/cve/CVE-2021-45095/" source="CVE"/>
		<reference ref_id="CVE-2021-45486" ref_url="https://www.suse.com/security/cve/CVE-2021-45486/" source="CVE"/>
		<reference ref_id="CVE-2022-0322" ref_url="https://www.suse.com/security/cve/CVE-2022-0322/" source="CVE"/>
		<reference ref_id="CVE-2022-0330" ref_url="https://www.suse.com/security/cve/CVE-2022-0330/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010214.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254).
- CVE-2022-0330: Fixed flush TLBs before releasing backing store (bsc#1194880).
- CVE-2021-45486: Fixed an information leak because the hash table is very small in net/ipv4/route.c (bnc#1194087).
- CVE-2021-45095: Fixed refcount leak in pep_sock_accept in net/phonet/pep.c (bnc#1193867).
- CVE-2021-44733: Fixed a use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem, that could have occured because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object (bnc#1193767).
- CVE-2021-43976: Fixed a flaw that could allow an attacker (who can connect a crafted USB device) to cause a denial of service. (bnc#1192847)
- CVE-2021-43975: Fixed a flaw in hw_atl_utils_fw_rpc_wait that could allow an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. (bsc#1192845)
- CVE-2021-4202: Fixed NFC race condition by adding NCI_UNREG flag (bsc#1194529).
- CVE-2021-4197: Use cgroup open-time credentials for process migraton perm checks (bsc#1194302).
- CVE-2021-4159: Fixed kernel ptr leak vulnerability via BPF in coerce_reg_to_size (bsc#1194227).
- CVE-2021-4149: Fixed btrfs unlock newly allocated extent buffer after error (bsc#1194001).
- CVE-2021-4135: Fixed zero-initialize memory inside netdevsim for new map's value in function nsim_bpf_map_alloc (bsc#1193927).
- CVE-2021-4083: Fixed a read-after-free memory flaw inside the garbage collection for Unix domain socket file handlers when users call close() and fget() simultaneouslyand can potentially trigger a race condition (bnc#1193727).
- CVE-2021-4002: Fixed incorrect TLBs flush in hugetlbfs after huge_pmd_unshare (bsc#1192946).
- CVE-2021-39657: Fixed out of bounds read due to a missing bounds check in ufshcd_eh_device_reset_handler of ufshcd.c. This could lead to local information disclosure with System execution privileges needed (bnc#1193864).
- CVE-2021-39648: Fixed possible disclosure of kernel heap memory due to a race condition in gadget_dev_desc_UDC_show of configfs.c. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1193861). 
- CVE-2021-3564: Fixed double-free memory corruption in the Linux kernel HCI device initialization subsystem that could have been used by attaching malicious HCI TTY Bluetooth devices. A local user could use this flaw to crash the system (bnc#1186207).
- CVE-2021-33098: Fixed a potential denial of service in Intel(R) Ethernet ixgbe driver due to improper input validation. (bsc#1192877)
- CVE-2021-28715: Fixed issue with xen/netback to do not queue unlimited number of packages (XSA-392) (bsc#1193442).
- CVE-2021-28714: Fixed issue with xen/netback to handle rx queue stall detection (XSA-392) (bsc#1193442).
- CVE-2021-28713: Fixed issue with xen/console to harden hvc_xen against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-28712: Fixed issue with xen/netfront to harden netfront against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-28711: Fixed issue with xen/blkfront to harden blkfront against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-0935: Fixed possible out of bounds write in ip6_xmit of ip6_output.c due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192032).
- CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1193731).
- CVE-2020-27820: Fixed a vulnerability where a use-after-frees in nouveau's postclose() handler could happen if removing device (bsc#1179599).
- CVE-2019-15126: Fixed a vulnerability in Broadcom and Cypress Wi-Fi chips, used in RPi family of devices aka 'Kr00k'. (bsc#1167162)
- CVE-2018-25020: Fixed an overflow in the BPF subsystem due to a mishandling of a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions. This affects kernel/bpf/core.c and net/core/filter.c (bnc#1193575).

The following non-security bugs were fixed:

- Bluetooth: fix the erroneous flush_work() order (git-fixes).
- Build: Add obsolete_rebuilds_subpackage (boo#1172073 bsc#1191731).
- ICMPv6: Add ICMPv6 Parameter Problem, code 3 definition (bsc#1191241 bsc#1195166).
- IPv6: reply ICMP error if the first fragment do not include all headers (bsc#1191241).
- elfcore: fix building with clang (bsc#1169514).
- hv_netvsc: Set needed_headroom according to VF (bsc#1193506).
- ipv6/netfilter: Discard first fragment not including all headers (bsc#1191241 bsc#1195166).
- kernel-*-subpackage: Add dependency on kernel scriptlets (bsc#1192740).
- kernel-binary.spec.in Stop templating the scriptlets for subpackages (bsc#1190358).
- kernel-binary.spec.in: add zstd to BuildRequires if used
- kernel-binary.spec.in: make sure zstd is supported by kmod if used
- kernel-binary.spec: Check for no kernel signing certificates. Also remove unused variable.
- kernel-binary.spec: Define $image as rpm macro (bsc#1189841).
- kernel-binary.spec: Do not fail silently when KMP is empty (bsc#1190358). Copy the code from kernel-module-subpackage that deals with empty KMPs.
- kernel-binary.spec: Do not sign kernel when no key provided (bsc#1187167).
- kernel-binary.spec: Fix kernel-default-base scriptlets after packaging merge.
- kernel-binary.spec: Require dwarves for kernel-binary-devel when BTF is enabled (jsc#SLE-17288).
- kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as well.
- kernel-cert-subpackage: Fix certificate location in scriptlets (bsc#1189841). 
- kernel-source.spec: install-kernel-tools also required on 15.4
- kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229). The semantic changed in an incompatible way so invoking the macro now causes a build failure.
- kprobes: Limit max data_size of the kretprobe instances (bsc#1193669).
- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- memstick: rtsx_usb_ms: fix UAF (bsc#1194516).
- moxart: fix potential use-after-free on remove path (bsc#1194516).
- net, xdp: Introduce xdp_init_buff utility routine (bsc#1193506).
- net, xdp: Introduce xdp_prepare_buff utility routine (bsc#1193506).
- net: Using proper atomic helper (bsc#1186222).
- net: ipv6: Discard next-hop MTU less than minimum link MTU (bsc#1191241).
- net: mana: Add RX fencing (bsc#1193506).
- net: mana: Add XDP support (bsc#1193506).
- net: mana: Allow setting the number of queues while the NIC is down (bsc#1193506).
- net: mana: Fix spelling mistake 'calledd' -&gt; 'called' (bsc#1193506).
- net: mana: Fix the netdev_err()'s vPort argument in mana_init_port() (bsc#1193506).
- net: mana: Improve the HWC error handling (bsc#1193506).
- net: mana: Support hibernation and kexec (bsc#1193506).
- net: mana: Use kcalloc() instead of kzalloc() (bsc#1193506).
- objtool: Support Clang non-section symbols in ORC generation (bsc#1169514).
- post.sh: detect /usr mountpoint too
- recordmcount.pl: fix typo in s390 mcount regex (bsc#1192267).
- recordmcount.pl: look for jgnop instruction as well as bcrl on s390 (bsc#1192267).
- rpm/kernel-binary.spec.in: Use kmod-zstd provide. This makes it possible to use kmod with ZSTD support on non-Tumbleweed.
- rpm/kernel-binary.spec.in: avoid conflicting suse-release suse-release had arbitrary values in staging, we can't use it for dependencies. The filesystem one has to be enough (boo#1184804).
- rpm/kernel-binary.spec.in: do not strip vmlinux again (bsc#1193306). 
- rpm/kernel-binary.spec: Use only non-empty certificates.
- rpm/kernel-obs-build.spec.in: make builds reproducible (bsc#1189305).
- rpm/kernel-source.rpmlintrc: ignore new include/config files. 
- rpm/kernel-source.spec.in: do some more for vanilla_only.
- rpm: Abolish image suffix (bsc#1189841).
- rpm: Abolish scritplet templating (bsc#1189841). Outsource kernel-binary and KMP scriptlets to suse-module-tools. 
- rpm: Define $certs as rpm macro (bsc#1189841). 
- rpm: Fold kernel-devel and kernel-source scriptlets into spec files (bsc#1189841). 
- rpm: fix kmp install path
- rpm: use _rpmmacrodir (boo#1191384)
- tty: hvc: replace BUG_ON() with negative return value.
- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- x86/xen: Mark cpu_bringup_and_idle() as dead_end_function (bsc#1169514).
- xen/blkfront: do not take local copy of a request from the ring page (git-fixes).
- xen/blkfront: do not trust the backend response data blindly (git-fixes).
- xen/blkfront: read response from backend only once (git-fixes).
- xen/netfront: disentangle tx_skb_freelist (git-fixes).
- xen/netfront: do not read data from request on the ring page (git-fixes).
- xen/netfront: do not trust the backend response data blindly (git-fixes).
- xen/netfront: read response from backend only once (git-fixes).
- xen: sync include/xen/interface/io/ring.h with Xen's newest version (git-fixes).
- xfrm: fix MTU regression (bsc#1185377, bsc#1194048).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-10"/>
	<updated date="2022-02-10"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124431">SUSE bug 1124431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167162">SUSE bug 1167162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179599">SUSE bug 1179599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184804">SUSE bug 1184804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185377">SUSE bug 1185377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186207">SUSE bug 1186207</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186222">SUSE bug 1186222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187167">SUSE bug 1187167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189305">SUSE bug 1189305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189841">SUSE bug 1189841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190358">SUSE bug 1190358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190428">SUSE bug 1190428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191229">SUSE bug 1191229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191241">SUSE bug 1191241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191384">SUSE bug 1191384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191731">SUSE bug 1191731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192032">SUSE bug 1192032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192740">SUSE bug 1192740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192845">SUSE bug 1192845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192847">SUSE bug 1192847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192877">SUSE bug 1192877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192946">SUSE bug 1192946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193306">SUSE bug 1193306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193440">SUSE bug 1193440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193442">SUSE bug 1193442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193575">SUSE bug 1193575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193669">SUSE bug 1193669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193727">SUSE bug 1193727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193731">SUSE bug 1193731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193767">SUSE bug 1193767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193861">SUSE bug 1193861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193864">SUSE bug 1193864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193867">SUSE bug 1193867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193927">SUSE bug 1193927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194001">SUSE bug 1194001</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194048">SUSE bug 1194048</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194087">SUSE bug 1194087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194227">SUSE bug 1194227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194302">SUSE bug 1194302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194516">SUSE bug 1194516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194529">SUSE bug 1194529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194880">SUSE bug 1194880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194888">SUSE bug 1194888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194985">SUSE bug 1194985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195166">SUSE bug 1195166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195254">SUSE bug 1195254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25020/">CVE-2018-25020</cve>
	<cve impact="important" cvss3="3.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15126/">CVE-2019-15126</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-27820/">CVE-2020-27820</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0920/">CVE-2021-0920</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28711/">CVE-2021-28711</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28712/">CVE-2021-28712</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28713/">CVE-2021-28713</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28714/">CVE-2021-28714</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28715/">CVE-2021-28715</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33098/">CVE-2021-33098</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3564/">CVE-2021-3564</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39648/">CVE-2021-39648</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-39657/">CVE-2021-39657</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4002/">CVE-2021-4002</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4083/">CVE-2021-4083</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-4135/">CVE-2021-4135</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4149/">CVE-2021-4149</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-4197/">CVE-2021-4197</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4202/">CVE-2021-4202</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43975/">CVE-2021-43975</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43976/">CVE-2021-43976</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-44733/">CVE-2021-44733</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-45095/">CVE-2021-45095</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-45486/">CVE-2021-45486</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0322/">CVE-2022-0322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0330/">CVE-2022-0330</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667061" comment="kernel-default-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667062" comment="kernel-default-base-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667063" comment="kernel-default-devel-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667055" comment="kernel-devel-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667056" comment="kernel-docs-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667057" comment="kernel-macros-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667064" comment="kernel-obs-build-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667059" comment="kernel-source-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667065" comment="kernel-syms-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667066" comment="reiserfs-kmp-default-4.12.14-197.105.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140643" version="1" class="patch">
	<metadata>
		<title>Security update for libksba (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1204357" ref_url="https://bugzilla.suse.com/1204357" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3515" ref_url="https://www.suse.com/security/cve/CVE-2022-3515/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012597.html" source="SUSE-SU"/>
		<description>
This update for libksba fixes the following issues:

  - CVE-2022-3515: Fixed a possible overflow in the TLV parser (bsc#1204357).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-21"/>
	<updated date="2022-10-21"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1204357">SUSE bug 1204357</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3515/">CVE-2022-3515</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718575" comment="libksba-devel-1.3.5-150000.4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718576" comment="libksba8-1.3.5-150000.4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140644" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1186463" ref_url="https://bugzilla.suse.com/1186463" source="BUGZILLA"/>
		<reference ref_id="1188859" ref_url="https://bugzilla.suse.com/1188859" source="BUGZILLA"/>
		<reference ref_id="1192394" ref_url="https://bugzilla.suse.com/1192394" source="BUGZILLA"/>
		<reference ref_id="1193227" ref_url="https://bugzilla.suse.com/1193227" source="BUGZILLA"/>
		<reference ref_id="1193237" ref_url="https://bugzilla.suse.com/1193237" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8921" ref_url="https://www.suse.com/security/cve/CVE-2019-8921/" source="CVE"/>
		<reference ref_id="CVE-2019-8922" ref_url="https://www.suse.com/security/cve/CVE-2019-8922/" source="CVE"/>
		<reference ref_id="CVE-2020-26558" ref_url="https://www.suse.com/security/cve/CVE-2020-26558/" source="CVE"/>
		<reference ref_id="CVE-2021-0129" ref_url="https://www.suse.com/security/cve/CVE-2021-0129/" source="CVE"/>
		<reference ref_id="CVE-2021-3658" ref_url="https://www.suse.com/security/cve/CVE-2021-3658/" source="CVE"/>
		<reference ref_id="CVE-2021-43400" ref_url="https://www.suse.com/security/cve/CVE-2021-43400/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012600.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2021-0129: Fixed improper access control (bsc#1186463).
- CVE-2020-26558: Fixed vulnerability that may permit a nearby man-in-the-middle attacker to identify the Passkey (bsc#1186463).
- CVE-2019-8921: Fixed heap-based buffer overflow via crafted request (bsc#1193237).
- CVE-2019-8922: Fixed heap-based buffer overflow via crafted request (bsc#1193227).
- CVE-2021-3658: Fixed adapter incorrectly restoring discoverable state after powered down (bsc#1188859).
- CVE-2021-43400: Fixed use-after-free in gatt-database.c (bsc#1192394).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-21"/>
	<updated date="2022-10-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186463">SUSE bug 1186463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188859">SUSE bug 1188859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192394">SUSE bug 1192394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193227">SUSE bug 1193227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193237">SUSE bug 1193237</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8921/">CVE-2019-8921</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-8922/">CVE-2019-8922</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26558/">CVE-2020-26558</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-0129/">CVE-2021-0129</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3658/">CVE-2021-3658</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43400/">CVE-2021-43400</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718947" comment="bluez-5.48-150000.5.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718948" comment="bluez-devel-5.48-150000.5.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718949" comment="libbluetooth3-5.48-150000.5.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140645" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201723" ref_url="https://bugzilla.suse.com/1201723" source="BUGZILLA"/>
		<reference ref_id="1201971" ref_url="https://bugzilla.suse.com/1201971" source="BUGZILLA"/>
		<reference ref_id="1202026" ref_url="https://bugzilla.suse.com/1202026" source="BUGZILLA"/>
		<reference ref_id="1202466" ref_url="https://bugzilla.suse.com/1202466" source="BUGZILLA"/>
		<reference ref_id="1202467" ref_url="https://bugzilla.suse.com/1202467" source="BUGZILLA"/>
		<reference ref_id="1202468" ref_url="https://bugzilla.suse.com/1202468" source="BUGZILLA"/>
		<reference ref_id="1202968" ref_url="https://bugzilla.suse.com/1202968" source="BUGZILLA"/>
		<reference ref_id="1202971" ref_url="https://bugzilla.suse.com/1202971" source="BUGZILLA"/>
		<reference ref_id="1202973" ref_url="https://bugzilla.suse.com/1202973" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0561" ref_url="https://www.suse.com/security/cve/CVE-2022-0561/" source="CVE"/>
		<reference ref_id="CVE-2022-2519" ref_url="https://www.suse.com/security/cve/CVE-2022-2519/" source="CVE"/>
		<reference ref_id="CVE-2022-2520" ref_url="https://www.suse.com/security/cve/CVE-2022-2520/" source="CVE"/>
		<reference ref_id="CVE-2022-2521" ref_url="https://www.suse.com/security/cve/CVE-2022-2521/" source="CVE"/>
		<reference ref_id="CVE-2022-2867" ref_url="https://www.suse.com/security/cve/CVE-2022-2867/" source="CVE"/>
		<reference ref_id="CVE-2022-2868" ref_url="https://www.suse.com/security/cve/CVE-2022-2868/" source="CVE"/>
		<reference ref_id="CVE-2022-2869" ref_url="https://www.suse.com/security/cve/CVE-2022-2869/" source="CVE"/>
		<reference ref_id="CVE-2022-34266" ref_url="https://www.suse.com/security/cve/CVE-2022-34266/" source="CVE"/>
		<reference ref_id="CVE-2022-34526" ref_url="https://www.suse.com/security/cve/CVE-2022-34526/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012599.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-2519: Fixed a double free in rotateImage() (bsc#1202968).
- CVE-2022-2520: Fixed a assertion failure in rotateImage() (bsc#1202973).
- CVE-2022-2521: Fixed invalid free in TIFFClose() (bsc#1202971).
- CVE-2022-2867: Fixed out of bounds read and write in tiffcrop.c (bsc#1202466).
- CVE-2022-2868: Fixed out of bounds read in reverseSamples16bits() (bsc#1202467).
- CVE-2022-2869: Fixed out of bounds read and write in extractContigSamples8bits() (bsc#1202468).
- CVE-2022-34526: Fixed stack overflow in the _TIFFVGetField function of Tiffsplit (bsc#1202026).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-21"/>
	<updated date="2022-10-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201723">SUSE bug 1201723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201971">SUSE bug 1201971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202026">SUSE bug 1202026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202466">SUSE bug 1202466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202467">SUSE bug 1202467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202468">SUSE bug 1202468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202968">SUSE bug 1202968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202971">SUSE bug 1202971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202973">SUSE bug 1202973</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0561/">CVE-2022-0561</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-2519/">CVE-2022-2519</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2520/">CVE-2022-2520</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2521/">CVE-2022-2521</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2867/">CVE-2022-2867</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2868/">CVE-2022-2868</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2869/">CVE-2022-2869</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-34266/">CVE-2022-34266</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34526/">CVE-2022-34526</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718769" comment="libtiff-devel-4.0.9-150000.45.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718770" comment="libtiff5-4.0.9-150000.45.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718725" comment="libtiff5-32bit-4.0.9-150000.45.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140646" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1199564" ref_url="https://bugzilla.suse.com/1199564" source="BUGZILLA"/>
		<reference ref_id="1200288" ref_url="https://bugzilla.suse.com/1200288" source="BUGZILLA"/>
		<reference ref_id="1201309" ref_url="https://bugzilla.suse.com/1201309" source="BUGZILLA"/>
		<reference ref_id="1202677" ref_url="https://bugzilla.suse.com/1202677" source="BUGZILLA"/>
		<reference ref_id="1202960" ref_url="https://bugzilla.suse.com/1202960" source="BUGZILLA"/>
		<reference ref_id="1203552" ref_url="https://bugzilla.suse.com/1203552" source="BUGZILLA"/>
		<reference ref_id="1203769" ref_url="https://bugzilla.suse.com/1203769" source="BUGZILLA"/>
		<reference ref_id="1203987" ref_url="https://bugzilla.suse.com/1203987" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-20008" ref_url="https://www.suse.com/security/cve/CVE-2022-20008/" source="CVE"/>
		<reference ref_id="CVE-2022-2503" ref_url="https://www.suse.com/security/cve/CVE-2022-2503/" source="CVE"/>
		<reference ref_id="CVE-2022-32296" ref_url="https://www.suse.com/security/cve/CVE-2022-32296/" source="CVE"/>
		<reference ref_id="CVE-2022-3239" ref_url="https://www.suse.com/security/cve/CVE-2022-3239/" source="CVE"/>
		<reference ref_id="CVE-2022-3303" ref_url="https://www.suse.com/security/cve/CVE-2022-3303/" source="CVE"/>
		<reference ref_id="CVE-2022-41218" ref_url="https://www.suse.com/security/cve/CVE-2022-41218/" source="CVE"/>
		<reference ref_id="CVE-2022-41848" ref_url="https://www.suse.com/security/cve/CVE-2022-41848/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012617.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-20008: Fixed local information disclosure due to possibility to read kernel heap memory via mmc_blk_read_single of block.c (bnc#1199564).
- CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677).
- CVE-2022-32296: Fixed vulnerability where TCP servers were allowed to identify clients by observing what source ports are used (bnc#1200288).
- CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
- CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
- CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
- CVE-2022-41848: Fixed a race condition in drivers/char/pcmcia/synclink_cs.c mgslpc_ioctl and mgslpc_detach (bnc#1203987).

The following non-security bugs were fixed:

- dtb: Do not include sources in src.rpm - refer to kernel-source Same as other kernel binary packages there is no need to carry duplicate sources in dtb packages.
- mkspec: eliminate @NOSOURCE@ macro This should be alsways used with @SOURCES@, just include the content there.
- net: mana: Add rmb after checking owner bits (git-fixes).
- net: mana: Add the Linux MANA PF driver (bnc#1201309, jsc#PED-529).
- x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still be possible to do so that the mitigation can still be disabled on Intel who do not use the return thunks but IBRS.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-22"/>
	<updated date="2022-10-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199564">SUSE bug 1199564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200288">SUSE bug 1200288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201309">SUSE bug 1201309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202677">SUSE bug 1202677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202960">SUSE bug 1202960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203552">SUSE bug 1203552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203769">SUSE bug 1203769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203987">SUSE bug 1203987</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-20008/">CVE-2022-20008</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2503/">CVE-2022-2503</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32296/">CVE-2022-32296</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3239/">CVE-2022-3239</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3303/">CVE-2022-3303</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41218/">CVE-2022-41218</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41848/">CVE-2022-41848</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716981" comment="kernel-default-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716982" comment="kernel-default-base-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716983" comment="kernel-default-devel-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716970" comment="kernel-devel-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716971" comment="kernel-docs-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716972" comment="kernel-macros-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716984" comment="kernel-obs-build-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716974" comment="kernel-source-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716985" comment="kernel-syms-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716986" comment="reiserfs-kmp-default-4.12.14-150100.197.126.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140647" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1204421" ref_url="https://bugzilla.suse.com/1204421" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42927" ref_url="https://www.suse.com/security/cve/CVE-2022-42927/" source="CVE"/>
		<reference ref_id="CVE-2022-42928" ref_url="https://www.suse.com/security/cve/CVE-2022-42928/" source="CVE"/>
		<reference ref_id="CVE-2022-42929" ref_url="https://www.suse.com/security/cve/CVE-2022-42929/" source="CVE"/>
		<reference ref_id="CVE-2022-42932" ref_url="https://www.suse.com/security/cve/CVE-2022-42932/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3698-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012635.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Updated to version 102.4.0 ESR (bsc#1204421)
- CVE-2022-42927: Fixed same-origin policy violation that could have leaked cross-origin URLs.
- CVE-2022-42928: Fixed memory Corruption in JS Engine.
- CVE-2022-42929: Fixed denial of Service via window.print.
- CVE-2022-42932: Fixed memory safety bugs.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-24"/>
	<updated date="2022-10-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204421">SUSE bug 1204421</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42927/">CVE-2022-42927</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42928/">CVE-2022-42928</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-42929/">CVE-2022-42929</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-42932/">CVE-2022-42932</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718950" comment="MozillaFirefox-102.4.0-150000.150.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718951" comment="MozillaFirefox-devel-102.4.0-150000.150.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718952" comment="MozillaFirefox-translations-common-102.4.0-150000.150.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718953" comment="MozillaFirefox-translations-other-102.4.0-150000.150.62.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140648" version="1" class="patch">
	<metadata>
		<title>Security update for multipath-tools (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1187534" ref_url="https://bugzilla.suse.com/1187534" source="BUGZILLA"/>
		<reference ref_id="1202616" ref_url="https://bugzilla.suse.com/1202616" source="BUGZILLA"/>
		<reference ref_id="1202739" ref_url="https://bugzilla.suse.com/1202739" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41973" ref_url="https://www.suse.com/security/cve/CVE-2022-41973/" source="CVE"/>
		<reference ref_id="CVE-2022-41974" ref_url="https://www.suse.com/security/cve/CVE-2022-41974/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012647.html" source="SUSE-SU"/>
		<description>
This update for multipath-tools fixes the following issues:

- CVE-2022-41973: Fixed a symlink attack in multipathd. (bsc#1202739)
- CVE-2022-41974: Fixed an authorization bypass issue in multipathd. (bsc#1202739)
- Avoid linking to libreadline to avoid licensing issue (bsc#1202616)
- Fix that some zfcp devices have large/negative LUN IDs (bsc#1187534)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-24"/>
	<updated date="2022-10-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187534">SUSE bug 1187534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202616">SUSE bug 1202616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202739">SUSE bug 1202739</bugzilla>
	<cve impact="important" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-41973/">CVE-2022-41973</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41974/">CVE-2022-41974</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009720655" comment="kpartx-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720656" comment="libdmmp-devel-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720657" comment="libdmmp0_2_0-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720658" comment="multipath-tools-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720659" comment="multipath-tools-devel-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140649" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1203614" ref_url="https://bugzilla.suse.com/1203614" source="BUGZILLA"/>
		<reference ref_id="1203619" ref_url="https://bugzilla.suse.com/1203619" source="BUGZILLA"/>
		<reference ref_id="1203620" ref_url="https://bugzilla.suse.com/1203620" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2795" ref_url="https://www.suse.com/security/cve/CVE-2022-2795/" source="CVE"/>
		<reference ref_id="CVE-2022-38177" ref_url="https://www.suse.com/security/cve/CVE-2022-38177/" source="CVE"/>
		<reference ref_id="CVE-2022-38178" ref_url="https://www.suse.com/security/cve/CVE-2022-38178/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012671.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

  - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations (bsc#1203614).
  - CVE-2022-38177: Fixed a memory leak that could be externally triggered in the DNSSEC verification code for the ECDSA algorithm (bsc#1203619).
  - CVE-2022-38178: Fixed memory leaks that could be externally triggered in the DNSSEC verification code for the EdDSA algorithm (bsc#1203620).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203614">SUSE bug 1203614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203619">SUSE bug 1203619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203620">SUSE bug 1203620</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2795/">CVE-2022-2795</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38177/">CVE-2022-38177</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38178/">CVE-2022-38178</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009714591" comment="bind-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714592" comment="bind-chrootenv-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714593" comment="bind-devel-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714568" comment="bind-doc-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714594" comment="bind-utils-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714595" comment="libbind9-1600-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714596" comment="libdns1605-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714597" comment="libirs-devel-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714598" comment="libirs1601-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714599" comment="libisc1606-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714600" comment="libisccc1600-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714601" comment="libisccfg1600-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714602" comment="libns1604-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714578" comment="python3-bind-9.16.6-150000.12.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140650" version="1" class="patch">
	<metadata>
		<title>Security update for python-paramiko (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1111151" ref_url="https://bugzilla.suse.com/1111151" source="BUGZILLA"/>
		<reference ref_id="1200603" ref_url="https://bugzilla.suse.com/1200603" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000805" ref_url="https://www.suse.com/security/cve/CVE-2018-1000805/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012669.html" source="SUSE-SU"/>
		<description>
This update for python-paramiko fixes the following issues:

Updated to version 2.4.3:

- CVE-2018-1000805: Fixed authentication bypass (bsc#1111151).

Bugfixes:

- Fixed Ed25519 key handling for certain key comment lengths (bsc#1200603).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1111151">SUSE bug 1111151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200603">SUSE bug 1200603</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000805/">CVE-2018-1000805</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716215" comment="python2-paramiko-2.4.3-150100.6.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716204" comment="python3-paramiko-2.4.3-150100.6.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140651" version="1" class="patch">
	<metadata>
		<title>Security update for python-waitress (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1197255" ref_url="https://bugzilla.suse.com/1197255" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24761" ref_url="https://www.suse.com/security/cve/CVE-2022-24761/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012668.html" source="SUSE-SU"/>
		<description>
This update for python-waitress fixes the following issues:

- CVE-2022-24761: Fixed a bug to avoid inconsistent interpretation of HTTP requests leading to request smuggling. (bsc#1197255)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197255">SUSE bug 1197255</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-24761/">CVE-2022-24761</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716743" comment="python3-waitress-1.4.3-150000.3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140652" version="1" class="patch">
	<metadata>
		<title>Security update for golang-github-prometheus-node_exporter (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196338" ref_url="https://bugzilla.suse.com/1196338" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21698" ref_url="https://www.suse.com/security/cve/CVE-2022-21698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3745-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012700.html" source="SUSE-SU"/>
		<description>
This update for golang-github-prometheus-node_exporter fixes the following issues:

  (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239, jsc#SUMA-114,
  CVE-2022-21698)		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196338">SUSE bug 1196338</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21698/">CVE-2022-21698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716980" comment="golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140653" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194166" ref_url="https://bugzilla.suse.com/1194166" source="BUGZILLA"/>
		<reference ref_id="1194167" ref_url="https://bugzilla.suse.com/1194167" source="BUGZILLA"/>
		<reference ref_id="1194168" ref_url="https://bugzilla.suse.com/1194168" source="BUGZILLA"/>
		<reference ref_id="1194169" ref_url="https://bugzilla.suse.com/1194169" source="BUGZILLA"/>
		<reference ref_id="1194170" ref_url="https://bugzilla.suse.com/1194170" source="BUGZILLA"/>
		<reference ref_id="1194171" ref_url="https://bugzilla.suse.com/1194171" source="BUGZILLA"/>
		<reference ref_id="1194780" ref_url="https://bugzilla.suse.com/1194780" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4181" ref_url="https://www.suse.com/security/cve/CVE-2021-4181/" source="CVE"/>
		<reference ref_id="CVE-2021-4182" ref_url="https://www.suse.com/security/cve/CVE-2021-4182/" source="CVE"/>
		<reference ref_id="CVE-2021-4183" ref_url="https://www.suse.com/security/cve/CVE-2021-4183/" source="CVE"/>
		<reference ref_id="CVE-2021-4184" ref_url="https://www.suse.com/security/cve/CVE-2021-4184/" source="CVE"/>
		<reference ref_id="CVE-2021-4185" ref_url="https://www.suse.com/security/cve/CVE-2021-4185/" source="CVE"/>
		<reference ref_id="CVE-2021-4190" ref_url="https://www.suse.com/security/cve/CVE-2021-4190/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0375-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010221.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

Update to version 3.6.1: 

- CVE-2021-4185: RTMPT dissector infinite loop (bsc#1194166)
- CVE-2021-4184: BitTorrent DHT dissector infinite loop (bsc#1194167)
- CVE-2021-4183: pcapng file parser crash (bsc#1194168)
- CVE-2021-4182: RFC 7468 file parser infinite loop (bsc#1194169)
- CVE-2021-4181: Sysdig Event dissector crash (bsc#1194170)
- CVE-2021-4190: Kafka dissector infinite loop (bsc#1194171)
- Support for Shared Memory Communications (SMC) (jsc#SLE-18727)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-14"/>
	<updated date="2022-02-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1194166">SUSE bug 1194166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194167">SUSE bug 1194167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194168">SUSE bug 1194168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194169">SUSE bug 1194169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194170">SUSE bug 1194170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194171">SUSE bug 1194171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194780">SUSE bug 1194780</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4181/">CVE-2021-4181</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4182/">CVE-2021-4182</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4183/">CVE-2021-4183</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4184/">CVE-2021-4184</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4185/">CVE-2021-4185</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4190/">CVE-2021-4190</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663938" comment="libwireshark15-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663939" comment="libwiretap12-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663940" comment="libwsutil13-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663941" comment="wireshark-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663942" comment="wireshark-devel-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663943" comment="wireshark-ui-qt-3.6.1-3.68.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140654" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1175144" ref_url="https://bugzilla.suse.com/1175144" source="BUGZILLA"/>
		<reference ref_id="1182282" ref_url="https://bugzilla.suse.com/1182282" source="BUGZILLA"/>
		<reference ref_id="1185000" ref_url="https://bugzilla.suse.com/1185000" source="BUGZILLA"/>
		<reference ref_id="1192463" ref_url="https://bugzilla.suse.com/1192463" source="BUGZILLA"/>
		<reference ref_id="1198035" ref_url="https://bugzilla.suse.com/1198035" source="BUGZILLA"/>
		<reference ref_id="1198037" ref_url="https://bugzilla.suse.com/1198037" source="BUGZILLA"/>
		<reference ref_id="1198038" ref_url="https://bugzilla.suse.com/1198038" source="BUGZILLA"/>
		<reference ref_id="1201367" ref_url="https://bugzilla.suse.com/1201367" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-17380" ref_url="https://www.suse.com/security/cve/CVE-2020-17380/" source="CVE"/>
		<reference ref_id="CVE-2021-3409" ref_url="https://www.suse.com/security/cve/CVE-2021-3409/" source="CVE"/>
		<reference ref_id="CVE-2021-3507" ref_url="https://www.suse.com/security/cve/CVE-2021-3507/" source="CVE"/>
		<reference ref_id="CVE-2021-4206" ref_url="https://www.suse.com/security/cve/CVE-2021-4206/" source="CVE"/>
		<reference ref_id="CVE-2021-4207" ref_url="https://www.suse.com/security/cve/CVE-2021-4207/" source="CVE"/>
		<reference ref_id="CVE-2022-0216" ref_url="https://www.suse.com/security/cve/CVE-2022-0216/" source="CVE"/>
		<reference ref_id="CVE-2022-35414" ref_url="https://www.suse.com/security/cve/CVE-2022-35414/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012710.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

- CVE-2021-3409: Fixed an incomplete fix for CVE-2020-17380 and CVE-2020-25085 in sdhi controller. (bsc#1182282)
- CVE-2021-4206: Fixed an integer overflow in cursor_alloc which can lead to heap buffer overflow. (bsc#1198035)
- CVE-2021-4207: Fixed a double fetch in qxl_cursor ehich can lead to heap buffer overflow. (bsc#1198037)
- CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038)
- CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)
- CVE-2021-3507: Fixed a heap buffer overflow in DMA read data transfers. (bsc#1185000)
- CVE-2020-17380: Fixed a heap buffer overflow in sdhci_sdma_transfer_multi_blocks. (bsc#1175144)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175144">SUSE bug 1175144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182282">SUSE bug 1182282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185000">SUSE bug 1185000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192463">SUSE bug 1192463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198035">SUSE bug 1198035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198037">SUSE bug 1198037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198038">SUSE bug 1198038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201367">SUSE bug 1201367</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-17380/">CVE-2020-17380</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3409/">CVE-2021-3409</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3507/">CVE-2021-3507</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4206/">CVE-2021-4206</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4207/">CVE-2021-4207</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0216/">CVE-2022-0216</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-35414/">CVE-2022-35414</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009717381" comment="qemu-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717363" comment="qemu-audio-alsa-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717364" comment="qemu-audio-oss-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717365" comment="qemu-audio-pa-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717382" comment="qemu-block-curl-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717383" comment="qemu-block-iscsi-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717384" comment="qemu-block-rbd-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717385" comment="qemu-block-ssh-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717386" comment="qemu-guest-agent-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717371" comment="qemu-ipxe-1.0.0+-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717372" comment="qemu-kvm-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717387" comment="qemu-lang-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717374" comment="qemu-seabios-1.12.0_0_ga698c89-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717375" comment="qemu-sgabios-8-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717388" comment="qemu-tools-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717377" comment="qemu-ui-curses-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717378" comment="qemu-ui-gtk-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717379" comment="qemu-vgabios-1.12.0_0_ga698c89-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717380" comment="qemu-x86-3.1.1.1-150100.80.43.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140655" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1202593" ref_url="https://bugzilla.suse.com/1202593" source="BUGZILLA"/>
		<reference ref_id="1204383" ref_url="https://bugzilla.suse.com/1204383" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32221" ref_url="https://www.suse.com/security/cve/CVE-2022-32221/" source="CVE"/>
		<reference ref_id="CVE-2022-35252" ref_url="https://www.suse.com/security/cve/CVE-2022-35252/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012702.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

  - CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).
  - CVE-2022-35252: Fixed a potential injection of control characters into cookies (bsc#1202593).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202593">SUSE bug 1202593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204383">SUSE bug 1204383</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-32221/">CVE-2022-32221</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-35252/">CVE-2022-35252</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721624" comment="curl-7.60.0-150000.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721625" comment="libcurl-devel-7.60.0-150000.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721626" comment="libcurl4-7.60.0-150000.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721617" comment="libcurl4-32bit-7.60.0-150000.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140656" version="1" class="patch">
	<metadata>
		<title>Security update for libmad (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1036968" ref_url="https://bugzilla.suse.com/1036968" source="BUGZILLA"/>
		<reference ref_id="1036969" ref_url="https://bugzilla.suse.com/1036969" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-8372" ref_url="https://www.suse.com/security/cve/CVE-2017-8372/" source="CVE"/>
		<reference ref_id="CVE-2017-8373" ref_url="https://www.suse.com/security/cve/CVE-2017-8373/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012717.html" source="SUSE-SU"/>
		<description>
This update for libmad fixes the following issues:

  - CVE-2017-8373: Fixed heap-based buffer overflow in mad_layer_III (bsc#1036968).
  - CVE-2017-8372: Fixed assertion failure in layer3.c (bsc#1036969).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1036968">SUSE bug 1036968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036969">SUSE bug 1036969</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8372/">CVE-2017-8372</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8373/">CVE-2017-8373</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009719718" comment="libmad-devel-0.15.1b-150000.5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009719719" comment="libmad0-0.15.1b-150000.5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140657" version="1" class="patch">
	<metadata>
		<title>Security update for telnet (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1203759" ref_url="https://bugzilla.suse.com/1203759" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-39028" ref_url="https://www.suse.com/security/cve/CVE-2022-39028/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012714.html" source="SUSE-SU"/>
		<description>
This update for telnet fixes the following issues:

  - CVE-2022-39028: Fixed NULL pointer dereference in telnetd (bsc#1203759).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203759">SUSE bug 1203759</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-39028/">CVE-2022-39028</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009720653" comment="telnet-1.2-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720654" comment="telnet-server-1.2-150000.3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140658" version="1" class="patch">
	<metadata>
		<title>Security update for libtasn1 (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1204690" ref_url="https://bugzilla.suse.com/1204690" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46848" ref_url="https://www.suse.com/security/cve/CVE-2021-46848/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012715.html" source="SUSE-SU"/>
		<description>
This update for libtasn1 fixes the following issues:

- CVE-2021-46848: Fixed off-by-one array size check that affects asn1_encode_simple_der (bsc#1204690)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1204690">SUSE bug 1204690</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46848/">CVE-2021-46848</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721374" comment="libtasn1-4.13-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721375" comment="libtasn1-6-4.13-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721362" comment="libtasn1-6-32bit-4.13-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721376" comment="libtasn1-devel-4.13-150000.4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140659" version="1" class="patch">
	<metadata>
		<title>Security update for openjpeg2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1140205" ref_url="https://bugzilla.suse.com/1140205" source="BUGZILLA"/>
		<reference ref_id="1149789" ref_url="https://bugzilla.suse.com/1149789" source="BUGZILLA"/>
		<reference ref_id="1179594" ref_url="https://bugzilla.suse.com/1179594" source="BUGZILLA"/>
		<reference ref_id="1179821" ref_url="https://bugzilla.suse.com/1179821" source="BUGZILLA"/>
		<reference ref_id="1180042" ref_url="https://bugzilla.suse.com/1180042" source="BUGZILLA"/>
		<reference ref_id="1180043" ref_url="https://bugzilla.suse.com/1180043" source="BUGZILLA"/>
		<reference ref_id="1180044" ref_url="https://bugzilla.suse.com/1180044" source="BUGZILLA"/>
		<reference ref_id="1180046" ref_url="https://bugzilla.suse.com/1180046" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20846" ref_url="https://www.suse.com/security/cve/CVE-2018-20846/" source="CVE"/>
		<reference ref_id="CVE-2018-21010" ref_url="https://www.suse.com/security/cve/CVE-2018-21010/" source="CVE"/>
		<reference ref_id="CVE-2020-27814" ref_url="https://www.suse.com/security/cve/CVE-2020-27814/" source="CVE"/>
		<reference ref_id="CVE-2020-27824" ref_url="https://www.suse.com/security/cve/CVE-2020-27824/" source="CVE"/>
		<reference ref_id="CVE-2020-27841" ref_url="https://www.suse.com/security/cve/CVE-2020-27841/" source="CVE"/>
		<reference ref_id="CVE-2020-27842" ref_url="https://www.suse.com/security/cve/CVE-2020-27842/" source="CVE"/>
		<reference ref_id="CVE-2020-27843" ref_url="https://www.suse.com/security/cve/CVE-2020-27843/" source="CVE"/>
		<reference ref_id="CVE-2020-27845" ref_url="https://www.suse.com/security/cve/CVE-2020-27845/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012731.html" source="SUSE-SU"/>
		<description>
This update for openjpeg2 fixes the following issues:

  - CVE-2018-20846: Fixed OOB read in pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c (bsc#1140205).
  - CVE-2018-21010: Fixed heap buffer overflow in color_apply_icc_profile in bin/common/color.c (bsc#1149789).
  - CVE-2020-27814: Fixed heap buffer overflow in lib/openjp2/mqc.c (bsc#1179594),
  - CVE-2020-27824: Fixed OOB read in opj_dwt_calc_explicit_stepsizes() (bsc#1179821).
  - CVE-2020-27841: Fixed buffer over-read in lib/openjp2/pi.c (bsc#1180042).
  - CVE-2020-27842: Fixed null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (bsc#1180043).
  - CVE-2020-27843: Fixed OOB read in opj_t2_encode_packet function in openjp2/t2.c (bsc#1180044).
  - CVE-2020-27845: Fixed heap-based buffer over-read in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (bsc#1180046).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-27"/>
	<updated date="2022-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140205">SUSE bug 1140205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149789">SUSE bug 1149789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179594">SUSE bug 1179594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179821">SUSE bug 1179821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180042">SUSE bug 1180042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180043">SUSE bug 1180043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180044">SUSE bug 1180044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180046">SUSE bug 1180046</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20846/">CVE-2018-20846</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-21010/">CVE-2018-21010</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27814/">CVE-2020-27814</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27824/">CVE-2020-27824</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27841/">CVE-2020-27841</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27842/">CVE-2020-27842</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27843/">CVE-2020-27843</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27845/">CVE-2020-27845</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721371" comment="libopenjp2-7-2.3.0-150000.3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721340" comment="libopenjp2-7-32bit-2.3.0-150000.3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721372" comment="openjpeg2-2.3.0-150000.3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721373" comment="openjpeg2-devel-2.3.0-150000.3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140660" version="1" class="patch">
	<metadata>
		<title>Security update for dbus-1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1087072" ref_url="https://bugzilla.suse.com/1087072" source="BUGZILLA"/>
		<reference ref_id="1204111" ref_url="https://bugzilla.suse.com/1204111" source="BUGZILLA"/>
		<reference ref_id="1204112" ref_url="https://bugzilla.suse.com/1204112" source="BUGZILLA"/>
		<reference ref_id="1204113" ref_url="https://bugzilla.suse.com/1204113" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42010" ref_url="https://www.suse.com/security/cve/CVE-2022-42010/" source="CVE"/>
		<reference ref_id="CVE-2022-42011" ref_url="https://www.suse.com/security/cve/CVE-2022-42011/" source="CVE"/>
		<reference ref_id="CVE-2022-42012" ref_url="https://www.suse.com/security/cve/CVE-2022-42012/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012727.html" source="SUSE-SU"/>
		<description>
This update for dbus-1 fixes the following issues:

  - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111).
  - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112).
  - CVE-2022-42012: Fixed a use-after-free that could be trigged by a message in non-native endianness with out-of-band Unix file descriptor (bsc#1204113).

  Bugfixes:

  - Disable asserts (bsc#1087072).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-27"/>
	<updated date="2022-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1087072">SUSE bug 1087072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204111">SUSE bug 1204111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204112">SUSE bug 1204112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204113">SUSE bug 1204113</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-42010/">CVE-2022-42010</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-42011/">CVE-2022-42011</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-42012/">CVE-2022-42012</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009717560" comment="dbus-1-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717561" comment="dbus-1-devel-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717562" comment="dbus-1-x11-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717563" comment="libdbus-1-3-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717541" comment="libdbus-1-3-32bit-1.12.2-150100.8.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140661" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1204412" ref_url="https://bugzilla.suse.com/1204412" source="BUGZILLA"/>
		<reference ref_id="1204416" ref_url="https://bugzilla.suse.com/1204416" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3550" ref_url="https://www.suse.com/security/cve/CVE-2022-3550/" source="CVE"/>
		<reference ref_id="CVE-2022-3551" ref_url="https://www.suse.com/security/cve/CVE-2022-3551/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3856-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012800.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

  - CVE-2022-3550: Fixed out of bounds read/write in _GetCountedString() (bsc#1204412).
  - CVE-2022-3551: Fixed various leaks of the return value of GetComponentSpec() (bsc#1204416).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204412">SUSE bug 1204412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204416">SUSE bug 1204416</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3550/">CVE-2022-3550</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3551/">CVE-2022-3551</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718954" comment="xorg-x11-server-1.20.3-150100.14.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718955" comment="xorg-x11-server-extra-1.20.3-150100.14.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718956" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140662" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201978" ref_url="https://bugzilla.suse.com/1201978" source="BUGZILLA"/>
		<reference ref_id="1204366" ref_url="https://bugzilla.suse.com/1204366" source="BUGZILLA"/>
		<reference ref_id="1204367" ref_url="https://bugzilla.suse.com/1204367" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-3709" ref_url="https://www.suse.com/security/cve/CVE-2016-3709/" source="CVE"/>
		<reference ref_id="CVE-2022-40303" ref_url="https://www.suse.com/security/cve/CVE-2022-40303/" source="CVE"/>
		<reference ref_id="CVE-2022-40304" ref_url="https://www.suse.com/security/cve/CVE-2022-40304/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012813.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

  - CVE-2016-3709: Fixed possible XSS vulnerability (bsc#1201978).
  - CVE-2022-40303: Fixed integer overflows with XML_PARSE_HUGE (bsc#1204366).
  - CVE-2022-40304: Fixed dict corruption caused by entity reference cycles (bsc#1204367).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-04"/>
	<updated date="2022-11-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201978">SUSE bug 1201978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204366">SUSE bug 1204366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204367">SUSE bug 1204367</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-3709/">CVE-2016-3709</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-40303/">CVE-2022-40303</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40304/">CVE-2022-40304</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718942" comment="libxml2-2-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718903" comment="libxml2-2-32bit-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718943" comment="libxml2-devel-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718944" comment="libxml2-tools-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718945" comment="python2-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718946" comment="python3-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140663" version="1" class="patch">
	<metadata>
		<title>Security update for conmon (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1200285" ref_url="https://bugzilla.suse.com/1200285" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1708" ref_url="https://www.suse.com/security/cve/CVE-2022-1708/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012837.html" source="SUSE-SU"/>
		<description>
This update for conmon fixes the following issues:

conmon was updated to 2.1.3:

* Stop using g_unix_signal_add() to avoid threads
* Rename CLI optionlog-size-global-max to log-global-size-max 

Update to version 2.1.2:

* add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 bsc#1200285)
* journald: print tag and name if both are specified
* drop some logs to debug level

Update to version 2.1.0

* logging: buffer partial messages to journald
* exit: close all fds &gt;= 3
* fix: cgroup: Free memory_cgroup_file_path if open fails.
  Call g_free instead of free.

Update to version 2.0.32

* Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
* exit_command: Fix: unset subreaper attribute before running exit command

Update to version 2.0.31
 
* logging: new mode -l passthrough
* ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
* conmon: Fix: free userdata files before exec cleanup

Update to version 2.0.30:

* Remove unreachable code path
* exit: report if the exit command was killed
* exit: fix race zombie reaper
* conn_sock: allow watchdog messages through the notify socket proxy
* seccomp: add support for seccomp notify

Update to version 2.0.29:

* Reset OOM score back to 0 for container runtime
* call functions registered with atexit on SIGTERM
* conn_sock: fix potential segfault

Update to version 2.0.27:

* Add CRI-O integration test GitHub action
* exec: don't fail on EBADFD
* close_fds: fix close of external fds
* Add arm64 static build binary

Update to version 2.0.26:

* conn_sock: do not fail on EAGAIN
* fix segfault from a double freed pointer
* Fix a bug where conmon could never spawn a container, because
  a disagreement between the caller and itself on where the attach
  socket was.
* improve --full-attach to ignore the socket-dir directly. that
  means callers don't need to specify a socket dir at all (and
  can remove it)
* add full-attach option to allow callers to not truncate a very
  long path for the attach socket
* close only opened FDs
* set locale to inherit environment

Update to version 2.0.22:

* added man page
* attach: always chdir
* conn_sock: Explicitly free a heap-allocated string
* refactor I/O and add SD_NOTIFY proxy support

Update to version 2.0.21:

* protect against kill(-1)
* Makefile: enable debuginfo generation
* Remove go.sum file and add go.mod
* Fail if conmon config could not be written
* nix: remove double definition for e2fsprogs
* Speedup static build by utilizing CI cache on `/nix` folder
* Fix nix build for failing e2fsprogs tests
* test: fix CI
* Use Podman for building
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1200285">SUSE bug 1200285</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1708/">CVE-2022-1708</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715851" comment="conmon-2.1.3-150100.3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140664" version="1" class="patch">
	<metadata>
		<title>Security update for sendmail (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1202937" ref_url="https://bugzilla.suse.com/1202937" source="BUGZILLA"/>
		<reference ref_id="1204696" ref_url="https://bugzilla.suse.com/1204696" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31256" ref_url="https://www.suse.com/security/cve/CVE-2022-31256/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012839.html" source="SUSE-SU"/>
		<description>
This update for sendmail fixes the following issues:

  - CVE-2022-31256: Fixed mail to root privilege escalation via sm-client.pre script (bsc#1204696, bsc#1202937).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202937">SUSE bug 1202937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204696">SUSE bug 1204696</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31256/">CVE-2022-31256</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721904" comment="libmilter1_0-8.15.2-150000.8.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140665" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1204708" ref_url="https://bugzilla.suse.com/1204708" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-43680" ref_url="https://www.suse.com/security/cve/CVE-2022-43680/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012847.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

  - CVE-2022-43680: Fixed use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate (bsc#1204708).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204708">SUSE bug 1204708</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43680/">CVE-2022-43680</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721905" comment="expat-2.2.5-150000.3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721906" comment="libexpat-devel-2.2.5-150000.3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721907" comment="libexpat1-2.2.5-150000.3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721891" comment="libexpat1-32bit-2.2.5-150000.3.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140666" version="1" class="patch">
	<metadata>
		<title>Security update for vsftpd (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196918" ref_url="https://bugzilla.suse.com/1196918" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:3914-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/026042.html" source="SUSE-SU"/>
		<description>
This update for vsftpd fixes the following issues:

  Bugfixes:

  - Removed unsupported systemd hardening options (bsc#1196918).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196918">SUSE bug 1196918</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717515" comment="vsftpd-3.0.5-150000.7.22.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140667" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1203125" ref_url="https://bugzilla.suse.com/1203125" source="BUGZILLA"/>
		<reference ref_id="1204577" ref_url="https://bugzilla.suse.com/1204577" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10735" ref_url="https://www.suse.com/security/cve/CVE-2020-10735/" source="CVE"/>
		<reference ref_id="CVE-2022-37454" ref_url="https://www.suse.com/security/cve/CVE-2022-37454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3924-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012858.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2022-37454: Fixed a buffer overflow in hashlib.sha3_* implementations. (bsc#1204577)
- CVE-2020-10735: Fixed a bug to limit amount of digits converting text to int and vice vera. (bsc#1203125)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-09"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203125">SUSE bug 1203125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204577">SUSE bug 1204577</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10735/">CVE-2020-10735</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-37454/">CVE-2022-37454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723183" comment="libpython3_6m1_0-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723184" comment="python3-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723185" comment="python3-base-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723186" comment="python3-curses-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723187" comment="python3-dbm-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723188" comment="python3-devel-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723189" comment="python3-idle-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723190" comment="python3-testsuite-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723191" comment="python3-tk-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723192" comment="python3-tools-3.6.15-150000.3.116.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140668" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1185104" ref_url="https://bugzilla.suse.com/1185104" source="BUGZILLA"/>
		<reference ref_id="1193923" ref_url="https://bugzilla.suse.com/1193923" source="BUGZILLA"/>
		<reference ref_id="1199966" ref_url="https://bugzilla.suse.com/1199966" source="BUGZILLA"/>
		<reference ref_id="1200762" ref_url="https://bugzilla.suse.com/1200762" source="BUGZILLA"/>
		<reference ref_id="1203806" ref_url="https://bugzilla.suse.com/1203806" source="BUGZILLA"/>
		<reference ref_id="1203807" ref_url="https://bugzilla.suse.com/1203807" source="BUGZILLA"/>
		<reference ref_id="1204482" ref_url="https://bugzilla.suse.com/1204482" source="BUGZILLA"/>
		<reference ref_id="1204485" ref_url="https://bugzilla.suse.com/1204485" source="BUGZILLA"/>
		<reference ref_id="1204487" ref_url="https://bugzilla.suse.com/1204487" source="BUGZILLA"/>
		<reference ref_id="1204488" ref_url="https://bugzilla.suse.com/1204488" source="BUGZILLA"/>
		<reference ref_id="1204489" ref_url="https://bugzilla.suse.com/1204489" source="BUGZILLA"/>
		<reference ref_id="1204490" ref_url="https://bugzilla.suse.com/1204490" source="BUGZILLA"/>
		<reference ref_id="1204494" ref_url="https://bugzilla.suse.com/1204494" source="BUGZILLA"/>
		<reference ref_id="1204496" ref_url="https://bugzilla.suse.com/1204496" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28689" ref_url="https://www.suse.com/security/cve/CVE-2021-28689/" source="CVE"/>
		<reference ref_id="CVE-2022-26365" ref_url="https://www.suse.com/security/cve/CVE-2022-26365/" source="CVE"/>
		<reference ref_id="CVE-2022-33740" ref_url="https://www.suse.com/security/cve/CVE-2022-33740/" source="CVE"/>
		<reference ref_id="CVE-2022-33741" ref_url="https://www.suse.com/security/cve/CVE-2022-33741/" source="CVE"/>
		<reference ref_id="CVE-2022-33742" ref_url="https://www.suse.com/security/cve/CVE-2022-33742/" source="CVE"/>
		<reference ref_id="CVE-2022-33746" ref_url="https://www.suse.com/security/cve/CVE-2022-33746/" source="CVE"/>
		<reference ref_id="CVE-2022-33748" ref_url="https://www.suse.com/security/cve/CVE-2022-33748/" source="CVE"/>
		<reference ref_id="CVE-2022-42309" ref_url="https://www.suse.com/security/cve/CVE-2022-42309/" source="CVE"/>
		<reference ref_id="CVE-2022-42310" ref_url="https://www.suse.com/security/cve/CVE-2022-42310/" source="CVE"/>
		<reference ref_id="CVE-2022-42311" ref_url="https://www.suse.com/security/cve/CVE-2022-42311/" source="CVE"/>
		<reference ref_id="CVE-2022-42312" ref_url="https://www.suse.com/security/cve/CVE-2022-42312/" source="CVE"/>
		<reference ref_id="CVE-2022-42313" ref_url="https://www.suse.com/security/cve/CVE-2022-42313/" source="CVE"/>
		<reference ref_id="CVE-2022-42314" ref_url="https://www.suse.com/security/cve/CVE-2022-42314/" source="CVE"/>
		<reference ref_id="CVE-2022-42315" ref_url="https://www.suse.com/security/cve/CVE-2022-42315/" source="CVE"/>
		<reference ref_id="CVE-2022-42316" ref_url="https://www.suse.com/security/cve/CVE-2022-42316/" source="CVE"/>
		<reference ref_id="CVE-2022-42317" ref_url="https://www.suse.com/security/cve/CVE-2022-42317/" source="CVE"/>
		<reference ref_id="CVE-2022-42318" ref_url="https://www.suse.com/security/cve/CVE-2022-42318/" source="CVE"/>
		<reference ref_id="CVE-2022-42319" ref_url="https://www.suse.com/security/cve/CVE-2022-42319/" source="CVE"/>
		<reference ref_id="CVE-2022-42320" ref_url="https://www.suse.com/security/cve/CVE-2022-42320/" source="CVE"/>
		<reference ref_id="CVE-2022-42321" ref_url="https://www.suse.com/security/cve/CVE-2022-42321/" source="CVE"/>
		<reference ref_id="CVE-2022-42322" ref_url="https://www.suse.com/security/cve/CVE-2022-42322/" source="CVE"/>
		<reference ref_id="CVE-2022-42323" ref_url="https://www.suse.com/security/cve/CVE-2022-42323/" source="CVE"/>
		<reference ref_id="CVE-2022-42325" ref_url="https://www.suse.com/security/cve/CVE-2022-42325/" source="CVE"/>
		<reference ref_id="CVE-2022-42326" ref_url="https://www.suse.com/security/cve/CVE-2022-42326/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012866.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806).
- CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807).
- CVE-2021-28689: Fixed speculative vulnerabilities with bare (non-shim) 32-bit PV guests (bsc#1185104).
- CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let xenstored run out of memory (bsc#1204482)
- CVE-2022-42309: xen: Xenstore: Guests can crash xenstored (bsc#1204485)
- CVE-2022-42310: xen: Xenstore: Guests can create orphaned Xenstore nodes (bsc#1204487)
- CVE-2022-42319: xen: Xenstore: Guests can cause Xenstore to not free temporary memory (bsc#1204488)
- CVE-2022-42320: xen: Xenstore: Guests can get access to Xenstore nodes of deleted domains (bsc#1204489)
- CVE-2022-42321: xen: Xenstore: Guests can crash xenstored via exhausting the stack (bsc#1204490)
- CVE-2022-42322,CVE-2022-42323: xen: Xenstore: cooperating guests can create arbitrary numbers of nodes (bsc#1204494)
- CVE-2022-42325,CVE-2022-42326: xen: Xenstore: Guests can create arbitray number of nodes via transactions (bsc#1204496)
- CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings (bsc#1199966).
- CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742: xen: Linux disk/nic frontends data leaks (bsc#1200762).
- xen: Frontends vulnerable to backends (bsc#1193923).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-10"/>
	<updated date="2022-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185104">SUSE bug 1185104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193923">SUSE bug 1193923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199966">SUSE bug 1199966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200762">SUSE bug 1200762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203806">SUSE bug 1203806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203807">SUSE bug 1203807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204482">SUSE bug 1204482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204485">SUSE bug 1204485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204487">SUSE bug 1204487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204488">SUSE bug 1204488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204489">SUSE bug 1204489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204490">SUSE bug 1204490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204494">SUSE bug 1204494</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204496">SUSE bug 1204496</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28689/">CVE-2021-28689</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-26365/">CVE-2022-26365</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33740/">CVE-2022-33740</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33741/">CVE-2022-33741</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33742/">CVE-2022-33742</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-33746/">CVE-2022-33746</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-33748/">CVE-2022-33748</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42309/">CVE-2022-42309</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42310/">CVE-2022-42310</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42311/">CVE-2022-42311</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42312/">CVE-2022-42312</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42313/">CVE-2022-42313</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42314/">CVE-2022-42314</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42315/">CVE-2022-42315</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42316/">CVE-2022-42316</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42317/">CVE-2022-42317</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42318/">CVE-2022-42318</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42319/">CVE-2022-42319</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42320/">CVE-2022-42320</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42321/">CVE-2022-42321</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42322/">CVE-2022-42322</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42323/">CVE-2022-42323</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42325/">CVE-2022-42325</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42326/">CVE-2022-42326</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724683" comment="xen-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724684" comment="xen-devel-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724685" comment="xen-libs-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724686" comment="xen-tools-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724687" comment="xen-tools-domU-4.12.4_30-150100.3.80.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140669" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1204986" ref_url="https://bugzilla.suse.com/1204986" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-43995" ref_url="https://www.suse.com/security/cve/CVE-2022-43995/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012873.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:
  
- CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt() password backend (bsc#1204986).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-10"/>
	<updated date="2022-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204986">SUSE bug 1204986</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-43995/">CVE-2022-43995</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723197" comment="sudo-1.8.27-150000.4.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723198" comment="sudo-devel-1.8.27-150000.4.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140670" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1204577" ref_url="https://bugzilla.suse.com/1204577" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-9253" ref_url="https://www.suse.com/security/cve/CVE-2015-9253/" source="CVE"/>
		<reference ref_id="CVE-2017-8923" ref_url="https://www.suse.com/security/cve/CVE-2017-8923/" source="CVE"/>
		<reference ref_id="CVE-2017-9120" ref_url="https://www.suse.com/security/cve/CVE-2017-9120/" source="CVE"/>
		<reference ref_id="CVE-2018-1000222" ref_url="https://www.suse.com/security/cve/CVE-2018-1000222/" source="CVE"/>
		<reference ref_id="CVE-2018-12882" ref_url="https://www.suse.com/security/cve/CVE-2018-12882/" source="CVE"/>
		<reference ref_id="CVE-2018-14851" ref_url="https://www.suse.com/security/cve/CVE-2018-14851/" source="CVE"/>
		<reference ref_id="CVE-2018-17082" ref_url="https://www.suse.com/security/cve/CVE-2018-17082/" source="CVE"/>
		<reference ref_id="CVE-2018-19935" ref_url="https://www.suse.com/security/cve/CVE-2018-19935/" source="CVE"/>
		<reference ref_id="CVE-2018-20783" ref_url="https://www.suse.com/security/cve/CVE-2018-20783/" source="CVE"/>
		<reference ref_id="CVE-2019-11034" ref_url="https://www.suse.com/security/cve/CVE-2019-11034/" source="CVE"/>
		<reference ref_id="CVE-2019-11035" ref_url="https://www.suse.com/security/cve/CVE-2019-11035/" source="CVE"/>
		<reference ref_id="CVE-2019-11036" ref_url="https://www.suse.com/security/cve/CVE-2019-11036/" source="CVE"/>
		<reference ref_id="CVE-2019-11039" ref_url="https://www.suse.com/security/cve/CVE-2019-11039/" source="CVE"/>
		<reference ref_id="CVE-2019-11040" ref_url="https://www.suse.com/security/cve/CVE-2019-11040/" source="CVE"/>
		<reference ref_id="CVE-2019-11041" ref_url="https://www.suse.com/security/cve/CVE-2019-11041/" source="CVE"/>
		<reference ref_id="CVE-2019-11042" ref_url="https://www.suse.com/security/cve/CVE-2019-11042/" source="CVE"/>
		<reference ref_id="CVE-2019-11043" ref_url="https://www.suse.com/security/cve/CVE-2019-11043/" source="CVE"/>
		<reference ref_id="CVE-2019-11045" ref_url="https://www.suse.com/security/cve/CVE-2019-11045/" source="CVE"/>
		<reference ref_id="CVE-2019-11046" ref_url="https://www.suse.com/security/cve/CVE-2019-11046/" source="CVE"/>
		<reference ref_id="CVE-2019-11047" ref_url="https://www.suse.com/security/cve/CVE-2019-11047/" source="CVE"/>
		<reference ref_id="CVE-2019-11048" ref_url="https://www.suse.com/security/cve/CVE-2019-11048/" source="CVE"/>
		<reference ref_id="CVE-2019-11050" ref_url="https://www.suse.com/security/cve/CVE-2019-11050/" source="CVE"/>
		<reference ref_id="CVE-2019-9020" ref_url="https://www.suse.com/security/cve/CVE-2019-9020/" source="CVE"/>
		<reference ref_id="CVE-2019-9021" ref_url="https://www.suse.com/security/cve/CVE-2019-9021/" source="CVE"/>
		<reference ref_id="CVE-2019-9022" ref_url="https://www.suse.com/security/cve/CVE-2019-9022/" source="CVE"/>
		<reference ref_id="CVE-2019-9023" ref_url="https://www.suse.com/security/cve/CVE-2019-9023/" source="CVE"/>
		<reference ref_id="CVE-2019-9024" ref_url="https://www.suse.com/security/cve/CVE-2019-9024/" source="CVE"/>
		<reference ref_id="CVE-2019-9637" ref_url="https://www.suse.com/security/cve/CVE-2019-9637/" source="CVE"/>
		<reference ref_id="CVE-2019-9638" ref_url="https://www.suse.com/security/cve/CVE-2019-9638/" source="CVE"/>
		<reference ref_id="CVE-2019-9640" ref_url="https://www.suse.com/security/cve/CVE-2019-9640/" source="CVE"/>
		<reference ref_id="CVE-2019-9641" ref_url="https://www.suse.com/security/cve/CVE-2019-9641/" source="CVE"/>
		<reference ref_id="CVE-2019-9675" ref_url="https://www.suse.com/security/cve/CVE-2019-9675/" source="CVE"/>
		<reference ref_id="CVE-2020-7059" ref_url="https://www.suse.com/security/cve/CVE-2020-7059/" source="CVE"/>
		<reference ref_id="CVE-2020-7060" ref_url="https://www.suse.com/security/cve/CVE-2020-7060/" source="CVE"/>
		<reference ref_id="CVE-2020-7062" ref_url="https://www.suse.com/security/cve/CVE-2020-7062/" source="CVE"/>
		<reference ref_id="CVE-2020-7063" ref_url="https://www.suse.com/security/cve/CVE-2020-7063/" source="CVE"/>
		<reference ref_id="CVE-2020-7064" ref_url="https://www.suse.com/security/cve/CVE-2020-7064/" source="CVE"/>
		<reference ref_id="CVE-2020-7066" ref_url="https://www.suse.com/security/cve/CVE-2020-7066/" source="CVE"/>
		<reference ref_id="CVE-2020-7068" ref_url="https://www.suse.com/security/cve/CVE-2020-7068/" source="CVE"/>
		<reference ref_id="CVE-2020-7069" ref_url="https://www.suse.com/security/cve/CVE-2020-7069/" source="CVE"/>
		<reference ref_id="CVE-2020-7070" ref_url="https://www.suse.com/security/cve/CVE-2020-7070/" source="CVE"/>
		<reference ref_id="CVE-2020-7071" ref_url="https://www.suse.com/security/cve/CVE-2020-7071/" source="CVE"/>
		<reference ref_id="CVE-2021-21702" ref_url="https://www.suse.com/security/cve/CVE-2021-21702/" source="CVE"/>
		<reference ref_id="CVE-2021-21703" ref_url="https://www.suse.com/security/cve/CVE-2021-21703/" source="CVE"/>
		<reference ref_id="CVE-2021-21704" ref_url="https://www.suse.com/security/cve/CVE-2021-21704/" source="CVE"/>
		<reference ref_id="CVE-2021-21705" ref_url="https://www.suse.com/security/cve/CVE-2021-21705/" source="CVE"/>
		<reference ref_id="CVE-2021-21707" ref_url="https://www.suse.com/security/cve/CVE-2021-21707/" source="CVE"/>
		<reference ref_id="CVE-2022-31625" ref_url="https://www.suse.com/security/cve/CVE-2022-31625/" source="CVE"/>
		<reference ref_id="CVE-2022-31626" ref_url="https://www.suse.com/security/cve/CVE-2022-31626/" source="CVE"/>
		<reference ref_id="CVE-2022-31628" ref_url="https://www.suse.com/security/cve/CVE-2022-31628/" source="CVE"/>
		<reference ref_id="CVE-2022-31629" ref_url="https://www.suse.com/security/cve/CVE-2022-31629/" source="CVE"/>
		<reference ref_id="CVE-2022-37454" ref_url="https://www.suse.com/security/cve/CVE-2022-37454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- Version update to 7.2.34 [jsc#SLE-23639]

- CVE-2022-37454: Fixed SHA-3 buffer overflow (bsc#1204577).
- Fix integer overflow in PHP_SHA3##bits (bsc#1204577#c26).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204577">SUSE bug 1204577</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9253/">CVE-2015-9253</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8923/">CVE-2017-8923</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9120/">CVE-2017-9120</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000222/">CVE-2018-1000222</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12882/">CVE-2018-12882</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14851/">CVE-2018-14851</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-17082/">CVE-2018-17082</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19935/">CVE-2018-19935</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20783/">CVE-2018-20783</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11034/">CVE-2019-11034</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11035/">CVE-2019-11035</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11036/">CVE-2019-11036</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11039/">CVE-2019-11039</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11040/">CVE-2019-11040</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11041/">CVE-2019-11041</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11042/">CVE-2019-11042</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11043/">CVE-2019-11043</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11045/">CVE-2019-11045</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11046/">CVE-2019-11046</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11047/">CVE-2019-11047</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11048/">CVE-2019-11048</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11050/">CVE-2019-11050</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9020/">CVE-2019-9020</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9021/">CVE-2019-9021</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9022/">CVE-2019-9022</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9023/">CVE-2019-9023</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9024/">CVE-2019-9024</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9637/">CVE-2019-9637</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9638/">CVE-2019-9638</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9640/">CVE-2019-9640</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9641/">CVE-2019-9641</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9675/">CVE-2019-9675</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7059/">CVE-2020-7059</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-7060/">CVE-2020-7060</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7062/">CVE-2020-7062</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7063/">CVE-2020-7063</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7064/">CVE-2020-7064</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7066/">CVE-2020-7066</cve>
	<cve impact="moderate" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7068/">CVE-2020-7068</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-7069/">CVE-2020-7069</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-7070/">CVE-2020-7070</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-7071/">CVE-2020-7071</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21702/">CVE-2021-21702</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21703/">CVE-2021-21703</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21704/">CVE-2021-21704</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21705/">CVE-2021-21705</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21707/">CVE-2021-21707</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31625/">CVE-2022-31625</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31626/">CVE-2022-31626</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-31628/">CVE-2022-31628</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-31629/">CVE-2022-31629</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-37454/">CVE-2022-37454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723893" comment="apache2-mod_php7-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723894" comment="php7-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723895" comment="php7-bcmath-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723896" comment="php7-bz2-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723897" comment="php7-calendar-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723898" comment="php7-ctype-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723899" comment="php7-curl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723900" comment="php7-dba-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723901" comment="php7-devel-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723902" comment="php7-dom-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723903" comment="php7-enchant-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723904" comment="php7-exif-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723905" comment="php7-fastcgi-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723906" comment="php7-fileinfo-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723907" comment="php7-fpm-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723908" comment="php7-ftp-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723909" comment="php7-gd-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723910" comment="php7-gettext-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723911" comment="php7-gmp-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723912" comment="php7-iconv-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723913" comment="php7-intl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723914" comment="php7-json-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723915" comment="php7-ldap-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723916" comment="php7-mbstring-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723917" comment="php7-mysql-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723918" comment="php7-odbc-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723919" comment="php7-opcache-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723920" comment="php7-openssl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723921" comment="php7-pcntl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723922" comment="php7-pdo-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723768" comment="php7-pear-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723769" comment="php7-pear-Archive_Tar-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723923" comment="php7-pgsql-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723924" comment="php7-phar-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723925" comment="php7-posix-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723926" comment="php7-readline-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723927" comment="php7-shmop-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723928" comment="php7-snmp-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723929" comment="php7-soap-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723930" comment="php7-sockets-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723931" comment="php7-sodium-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723932" comment="php7-sqlite-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723933" comment="php7-sysvmsg-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723934" comment="php7-sysvsem-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723935" comment="php7-sysvshm-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723936" comment="php7-tidy-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723937" comment="php7-tokenizer-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723938" comment="php7-wddx-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723939" comment="php7-xmlreader-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723940" comment="php7-xmlrpc-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723941" comment="php7-xmlwriter-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723942" comment="php7-xsl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723943" comment="php7-zip-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723944" comment="php7-zlib-7.2.34-150000.4.103.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140671" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1203476" ref_url="https://bugzilla.suse.com/1203476" source="BUGZILLA"/>
		<reference ref_id="1204468" ref_url="https://bugzilla.suse.com/1204468" source="BUGZILLA"/>
		<reference ref_id="1204471" ref_url="https://bugzilla.suse.com/1204471" source="BUGZILLA"/>
		<reference ref_id="1204472" ref_url="https://bugzilla.suse.com/1204472" source="BUGZILLA"/>
		<reference ref_id="1204473" ref_url="https://bugzilla.suse.com/1204473" source="BUGZILLA"/>
		<reference ref_id="1204475" ref_url="https://bugzilla.suse.com/1204475" source="BUGZILLA"/>
		<reference ref_id="1204480" ref_url="https://bugzilla.suse.com/1204480" source="BUGZILLA"/>
		<reference ref_id="1204523" ref_url="https://bugzilla.suse.com/1204523" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21618" ref_url="https://www.suse.com/security/cve/CVE-2022-21618/" source="CVE"/>
		<reference ref_id="CVE-2022-21619" ref_url="https://www.suse.com/security/cve/CVE-2022-21619/" source="CVE"/>
		<reference ref_id="CVE-2022-21624" ref_url="https://www.suse.com/security/cve/CVE-2022-21624/" source="CVE"/>
		<reference ref_id="CVE-2022-21626" ref_url="https://www.suse.com/security/cve/CVE-2022-21626/" source="CVE"/>
		<reference ref_id="CVE-2022-21628" ref_url="https://www.suse.com/security/cve/CVE-2022-21628/" source="CVE"/>
		<reference ref_id="CVE-2022-39399" ref_url="https://www.suse.com/security/cve/CVE-2022-39399/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012996.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to jdk-11.0.17+8 (October 2022 CPU)
- CVE-2022-39399: Improve HTTP/2 client usage(bsc#1204480)
- CVE-2022-21628: Better HttpServer service (bsc#1204472)
- CVE-2022-21624: Enhance icon presentations (bsc#1204475)
- CVE-2022-21619: Improve NTLM support (bsc#1204473)
- CVE-2022-21626: Key X509 usages (bsc#1204471)
- CVE-2022-21618: Wider MultiByte (bsc#1204468)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1203476">SUSE bug 1203476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204468">SUSE bug 1204468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204471">SUSE bug 1204471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204472">SUSE bug 1204472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204473">SUSE bug 1204473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204475">SUSE bug 1204475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204480">SUSE bug 1204480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204523">SUSE bug 1204523</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21618/">CVE-2022-21618</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21619/">CVE-2022-21619</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21624/">CVE-2022-21624</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21626/">CVE-2022-21626</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21628/">CVE-2022-21628</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-39399/">CVE-2022-39399</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721033" comment="java-11-openjdk-11.0.17.0-150000.3.86.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721034" comment="java-11-openjdk-demo-11.0.17.0-150000.3.86.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721035" comment="java-11-openjdk-devel-11.0.17.0-150000.3.86.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721036" comment="java-11-openjdk-headless-11.0.17.0-150000.3.86.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140672" version="1" class="patch">
	<metadata>
		<title>Security update for dpkg (Low)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1199944" ref_url="https://bugzilla.suse.com/1199944" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1664" ref_url="https://www.suse.com/security/cve/CVE-2022-1664/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012992.html" source="SUSE-SU"/>
		<description>
This update for dpkg fixes the following issues:

- CVE-2022-1664: Fixed a directory traversal vulnerability in Dpkg::Source::Archive (bsc#1199944).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1199944">SUSE bug 1199944</bugzilla>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1664/">CVE-2022-1664</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723180" comment="dpkg-1.19.0.4-150000.4.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723181" comment="dpkg-devel-1.19.0.4-150000.4.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723182" comment="update-alternatives-1.19.0.4-150000.4.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140673" version="1" class="patch">
	<metadata>
		<title>Security update for openjpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1140205" ref_url="https://bugzilla.suse.com/1140205" source="BUGZILLA"/>
		<reference ref_id="1149789" ref_url="https://bugzilla.suse.com/1149789" source="BUGZILLA"/>
		<reference ref_id="1179821" ref_url="https://bugzilla.suse.com/1179821" source="BUGZILLA"/>
		<reference ref_id="1180043" ref_url="https://bugzilla.suse.com/1180043" source="BUGZILLA"/>
		<reference ref_id="1180044" ref_url="https://bugzilla.suse.com/1180044" source="BUGZILLA"/>
		<reference ref_id="1180046" ref_url="https://bugzilla.suse.com/1180046" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20846" ref_url="https://www.suse.com/security/cve/CVE-2018-20846/" source="CVE"/>
		<reference ref_id="CVE-2018-21010" ref_url="https://www.suse.com/security/cve/CVE-2018-21010/" source="CVE"/>
		<reference ref_id="CVE-2020-27824" ref_url="https://www.suse.com/security/cve/CVE-2020-27824/" source="CVE"/>
		<reference ref_id="CVE-2020-27842" ref_url="https://www.suse.com/security/cve/CVE-2020-27842/" source="CVE"/>
		<reference ref_id="CVE-2020-27843" ref_url="https://www.suse.com/security/cve/CVE-2020-27843/" source="CVE"/>
		<reference ref_id="CVE-2020-27845" ref_url="https://www.suse.com/security/cve/CVE-2020-27845/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4082-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012995.html" source="SUSE-SU"/>
		<description>
This update for openjpeg fixes the following issues:

-  CVE-2018-20846: Fixed an Out-of-bounds accesses in pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.  (bsc#1140205)
-  CVE-2018-21010: Fixed a heap buffer overflow in color_apply_icc_profile in bin/common/color.c  (bsc#1149789)
-  CVE-2020-27824: Fixed an OOB read in opj_dwt_calc_explicit_stepsizes() (bsc#1179821)
-  CVE-2020-27842: Fixed null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (bsc#1180043)
-  CVE-2020-27843: Fixed an out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (bsc#1180044)
-  CVE-2020-27845: Fixed a heap-based buffer over-read in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (bsc#1180046)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140205">SUSE bug 1140205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149789">SUSE bug 1149789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179821">SUSE bug 1179821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180043">SUSE bug 1180043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180044">SUSE bug 1180044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180046">SUSE bug 1180046</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20846/">CVE-2018-20846</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-21010/">CVE-2018-21010</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27824/">CVE-2020-27824</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27842/">CVE-2020-27842</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27843/">CVE-2020-27843</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27845/">CVE-2020-27845</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722481" comment="libopenjpeg1-1.5.2-150000.4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009722398" comment="libopenjpeg1-32bit-1.5.2-150000.4.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009722482" comment="openjpeg-devel-1.5.2-150000.4.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140674" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1205270" ref_url="https://bugzilla.suse.com/1205270" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45403" ref_url="https://www.suse.com/security/cve/CVE-2022-45403/" source="CVE"/>
		<reference ref_id="CVE-2022-45404" ref_url="https://www.suse.com/security/cve/CVE-2022-45404/" source="CVE"/>
		<reference ref_id="CVE-2022-45405" ref_url="https://www.suse.com/security/cve/CVE-2022-45405/" source="CVE"/>
		<reference ref_id="CVE-2022-45406" ref_url="https://www.suse.com/security/cve/CVE-2022-45406/" source="CVE"/>
		<reference ref_id="CVE-2022-45408" ref_url="https://www.suse.com/security/cve/CVE-2022-45408/" source="CVE"/>
		<reference ref_id="CVE-2022-45409" ref_url="https://www.suse.com/security/cve/CVE-2022-45409/" source="CVE"/>
		<reference ref_id="CVE-2022-45410" ref_url="https://www.suse.com/security/cve/CVE-2022-45410/" source="CVE"/>
		<reference ref_id="CVE-2022-45411" ref_url="https://www.suse.com/security/cve/CVE-2022-45411/" source="CVE"/>
		<reference ref_id="CVE-2022-45412" ref_url="https://www.suse.com/security/cve/CVE-2022-45412/" source="CVE"/>
		<reference ref_id="CVE-2022-45416" ref_url="https://www.suse.com/security/cve/CVE-2022-45416/" source="CVE"/>
		<reference ref_id="CVE-2022-45418" ref_url="https://www.suse.com/security/cve/CVE-2022-45418/" source="CVE"/>
		<reference ref_id="CVE-2022-45420" ref_url="https://www.suse.com/security/cve/CVE-2022-45420/" source="CVE"/>
		<reference ref_id="CVE-2022-45421" ref_url="https://www.suse.com/security/cve/CVE-2022-45421/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012997.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 102.5.0 ESR (MFSA 2022-48, bsc#1205270):

- CVE-2022-45403: Service Workers might have learned size of cross-origin media files
- CVE-2022-45404: Fullscreen notification bypass
- CVE-2022-45405: Use-after-free in InputStream implementation
- CVE-2022-45406: Use-after-free of a JavaScript Realm
- CVE-2022-45408: Fullscreen notification bypass via windowName
- CVE-2022-45409: Use-after-free in Garbage Collection
- CVE-2022-45410: ServiceWorker-intercepted requests bypassed SameSite cookie policy
- CVE-2022-45411: Cross-Site Tracing was possible via non-standard override headers
- CVE-2022-45412: Symlinks may resolve to partially uninitialized buffers
- CVE-2022-45416: Keystroke Side-Channel Leakage
- CVE-2022-45418: Custom mouse cursor could have been drawn over browser UI
- CVE-2022-45420: Iframe contents could be rendered outside the iframe
- CVE-2022-45421: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205270">SUSE bug 1205270</bugzilla>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-45403/">CVE-2022-45403</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45404/">CVE-2022-45404</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45405/">CVE-2022-45405</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45406/">CVE-2022-45406</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45408/">CVE-2022-45408</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45409/">CVE-2022-45409</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45410/">CVE-2022-45410</cve>
	<cve impact="critical" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-45411/">CVE-2022-45411</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45412/">CVE-2022-45412</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-45416/">CVE-2022-45416</cve>
	<cve impact="critical" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-45418/">CVE-2022-45418</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45420/">CVE-2022-45420</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45421/">CVE-2022-45421</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724997" comment="MozillaFirefox-102.5.0-150000.150.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724998" comment="MozillaFirefox-devel-102.5.0-150000.150.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724999" comment="MozillaFirefox-translations-common-102.5.0-150000.150.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725000" comment="MozillaFirefox-translations-other-102.5.0-150000.150.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140675" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1205178" ref_url="https://bugzilla.suse.com/1205178" source="BUGZILLA"/>
		<reference ref_id="1205182" ref_url="https://bugzilla.suse.com/1205182" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2601" ref_url="https://www.suse.com/security/cve/CVE-2022-2601/" source="CVE"/>
		<reference ref_id="CVE-2022-3775" ref_url="https://www.suse.com/security/cve/CVE-2022-3775/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013044.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

Security Fixes:
    
- CVE-2022-2601: Fixed buffer overflow in grub_font_construct_glyph (bsc#1205178).
- CVE-2022-3775: Fixed integer underflow in blit_comb() (bsc#1205182).
    
Other:

- Bump upstream SBAT generation to 3
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205178">SUSE bug 1205178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205182">SUSE bug 1205182</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2601/">CVE-2022-2601</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3775/">CVE-2022-3775</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726291" comment="grub2-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726259" comment="grub2-i386-pc-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726260" comment="grub2-snapper-plugin-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726261" comment="grub2-systemd-sleep-plugin-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726262" comment="grub2-x86_64-efi-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726263" comment="grub2-x86_64-xen-2.02-150100.123.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140676" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1142579" ref_url="https://bugzilla.suse.com/1142579" source="BUGZILLA"/>
		<reference ref_id="1185597" ref_url="https://bugzilla.suse.com/1185597" source="BUGZILLA"/>
		<reference ref_id="1185712" ref_url="https://bugzilla.suse.com/1185712" source="BUGZILLA"/>
		<reference ref_id="1188374" ref_url="https://bugzilla.suse.com/1188374" source="BUGZILLA"/>
		<reference ref_id="1191473" ref_url="https://bugzilla.suse.com/1191473" source="BUGZILLA"/>
		<reference ref_id="1193929" ref_url="https://bugzilla.suse.com/1193929" source="BUGZILLA"/>
		<reference ref_id="1194783" ref_url="https://bugzilla.suse.com/1194783" source="BUGZILLA"/>
		<reference ref_id="1197592" ref_url="https://bugzilla.suse.com/1197592" source="BUGZILLA"/>
		<reference ref_id="1198237" ref_url="https://bugzilla.suse.com/1198237" source="BUGZILLA"/>
		<reference ref_id="1202816" ref_url="https://bugzilla.suse.com/1202816" source="BUGZILLA"/>
		<reference ref_id="1202966" ref_url="https://bugzilla.suse.com/1202966" source="BUGZILLA"/>
		<reference ref_id="1202967" ref_url="https://bugzilla.suse.com/1202967" source="BUGZILLA"/>
		<reference ref_id="1202969" ref_url="https://bugzilla.suse.com/1202969" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1010204" ref_url="https://www.suse.com/security/cve/CVE-2019-1010204/" source="CVE"/>
		<reference ref_id="CVE-2021-3530" ref_url="https://www.suse.com/security/cve/CVE-2021-3530/" source="CVE"/>
		<reference ref_id="CVE-2021-3648" ref_url="https://www.suse.com/security/cve/CVE-2021-3648/" source="CVE"/>
		<reference ref_id="CVE-2021-3826" ref_url="https://www.suse.com/security/cve/CVE-2021-3826/" source="CVE"/>
		<reference ref_id="CVE-2021-45078" ref_url="https://www.suse.com/security/cve/CVE-2021-45078/" source="CVE"/>
		<reference ref_id="CVE-2021-46195" ref_url="https://www.suse.com/security/cve/CVE-2021-46195/" source="CVE"/>
		<reference ref_id="CVE-2022-27943" ref_url="https://www.suse.com/security/cve/CVE-2022-27943/" source="CVE"/>
		<reference ref_id="CVE-2022-38126" ref_url="https://www.suse.com/security/cve/CVE-2022-38126/" source="CVE"/>
		<reference ref_id="CVE-2022-38127" ref_url="https://www.suse.com/security/cve/CVE-2022-38127/" source="CVE"/>
		<reference ref_id="CVE-2022-38533" ref_url="https://www.suse.com/security/cve/CVE-2022-38533/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013047.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

The following security bugs were fixed:

- CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579).
- CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-demangle.c (bsc#1185597).
- CVE-2021-3648: Fixed infinite loop while demangling rust symbols (bsc#1188374).
- CVE-2021-3826: Fixed heap/stack buffer overflow in the dlang_lname function in d-demangle.c (bsc#1202969).
- CVE-2021-45078: Fixed out-of-bounds write in stab_xcoff_builtin_type() in stabs.c (bsc#1193929).
- CVE-2021-46195: Fixed uncontrolled recursion in libiberty/rust-demangle.c (bsc#1194783).
- CVE-2022-27943: Fixed stack exhaustion in demangle_const in (bsc#1197592).
- CVE-2022-38126: Fixed assertion fail in the display_debug_names() function in binutils/dwarf.c (bsc#1202966).
- CVE-2022-38127: Fixed NULL pointer dereference in the read_and_display_attr_value() function in binutils/dwarf.c (bsc#1202967).
- CVE-2022-38533: Fixed heap out-of-bounds read in bfd_getl32 (bsc#1202816).


The following non-security bugs were fixed:
  
- SLE toolchain update of binutils, update to 2.39 from 2.37.
- Update to 2.39:  
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification. 
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
    --weaken-symbols options now works with unique symbols as well.

- Update to 2.38:
  * elfedit: Add --output-abiversion option to update ABIVERSION.
  * Add support for the LoongArch instruction set.
  * Tools which display symbols or strings (readelf, strings, nm, objdump)
    have a new command line option which controls how unicode characters are
    handled.  By default they are treated as normal for the tool.  Using
    --unicode=locale will display them according to the current locale.
    Using --unicode=hex will display them as hex byte values, whilst
    --unicode=escape will display them as escape sequences.  In addition
    using --unicode=highlight will display them as unicode escape sequences
    highlighted in red (if supported by the output device).
  * readelf -r dumps RELR relative relocations now.
  * Support for efi-app-aarch64, efi-rtdrv-aarch64 and efi-bsdrv-aarch64 has been
    added to objcopy in order to enable UEFI development using binutils.
  * ar: Add --thin for creating thin archives. -T is a deprecated alias without
    diagnostics. In many ar implementations -T has a different meaning, as
    specified by X/Open System Interface.
  * Add support for AArch64 system registers that were missing in previous
    releases.
  * Add support for the LoongArch instruction set.
  * Add a command-line option, -muse-unaligned-vector-move, for x86 target
    to encode aligned vector move as unaligned vector move.
  * Add support for Cortex-R52+ for Arm.
  * Add support for Cortex-A510, Cortex-A710, Cortex-X2 for AArch64.
  * Add support for Cortex-A710 for Arm.
  * Add support for Scalable Matrix Extension (SME) for AArch64.
  * The --multibyte-handling=[allow|warn|warn-sym-only] option tells the
    assembler what to when it encoutners multibyte characters in the input.  The
    default is to allow them.  Setting the option to 'warn' will generate a
    warning message whenever any multibyte character is encountered.  Using the
    option to 'warn-sym-only' will make the assembler generate a warning whenever a
    symbol is defined containing multibyte characters.  (References to undefined
    symbols will not generate warnings).
  * Outputs of .ds.x directive and .tfloat directive with hex input from
    x86 assembler have been reduced from 12 bytes to 10 bytes to match the
    output of .tfloat directive.
  * Add support for 'armv8.8-a', 'armv9-a', 'armv9.1-a', 'armv9.2-a' and
    'armv9.3-a' for -march in AArch64 GAS.
  * Add support for 'armv8.7-a', 'armv8.8-a', 'armv9-a', 'armv9.1-a',
    'armv9.2-a' and 'armv9.3-a' for -march in Arm GAS.
  * Add support for Intel AVX512_FP16 instructions.
  * Add -z pack-relative-relocs/-z no pack-relative-relocs to x86 ELF
    linker to pack relative relocations in the DT_RELR section.
  * Add support for the LoongArch architecture.
  * Add -z indirect-extern-access/-z noindirect-extern-access to x86 ELF
    linker to control canonical function pointers and copy relocation.
  * Add --max-cache-size=SIZE to set the the maximum cache size to SIZE
    bytes.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.
- Include recognition of 'z16' name for 'arch14' on s390. (bsc#1198237).
- Add back fix for bsc#1191473, which got lost in the update to 2.38.
- Install symlinks for all target specific tools on arm-eabi-none (bsc#1185712).
- Enable PRU architecture for AM335x CPU (Beagle Bone Black board)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1142579">SUSE bug 1142579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185597">SUSE bug 1185597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185712">SUSE bug 1185712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188374">SUSE bug 1188374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191473">SUSE bug 1191473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193929">SUSE bug 1193929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194783">SUSE bug 1194783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197592">SUSE bug 1197592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198237">SUSE bug 1198237</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202816">SUSE bug 1202816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202966">SUSE bug 1202966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202967">SUSE bug 1202967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202969">SUSE bug 1202969</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1010204/">CVE-2019-1010204</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3530/">CVE-2021-3530</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3648/">CVE-2021-3648</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-3826/">CVE-2021-3826</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-45078/">CVE-2021-45078</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46195/">CVE-2021-46195</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27943/">CVE-2022-27943</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38126/">CVE-2022-38126</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38127/">CVE-2022-38127</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-38533/">CVE-2022-38533</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723193" comment="binutils-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723194" comment="binutils-devel-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723073" comment="binutils-devel-32bit-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723195" comment="libctf-nobfd0-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723196" comment="libctf0-2.39-150100.7.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140677" version="1" class="patch">
	<metadata>
		<title>Security update for pixman (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1205033" ref_url="https://bugzilla.suse.com/1205033" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-44638" ref_url="https://www.suse.com/security/cve/CVE-2022-44638/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013043.html" source="SUSE-SU"/>
		<description>
This update for pixman fixes the following issues:

- CVE-2022-44638: Fixed an integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (bsc#1205033).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205033">SUSE bug 1205033</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-44638/">CVE-2022-44638</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724995" comment="libpixman-1-0-0.34.0-150000.7.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724872" comment="libpixman-1-0-32bit-0.34.0-150000.7.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724996" comment="libpixman-1-0-devel-0.34.0-150000.7.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140678" version="1" class="patch">
	<metadata>
		<title>Security update for krb5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1205126" ref_url="https://bugzilla.suse.com/1205126" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42898" ref_url="https://www.suse.com/security/cve/CVE-2022-42898/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013049.html" source="SUSE-SU"/>
		<description>
This update for krb5 fixes the following issues:

- CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205126">SUSE bug 1205126</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-42898/">CVE-2022-42898</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726292" comment="krb5-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726265" comment="krb5-32bit-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726293" comment="krb5-client-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726294" comment="krb5-devel-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726295" comment="krb5-plugin-kdb-ldap-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726296" comment="krb5-plugin-preauth-otp-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726297" comment="krb5-plugin-preauth-pkinit-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726298" comment="krb5-server-1.16.3-150100.3.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140679" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1201684" ref_url="https://bugzilla.suse.com/1201684" source="BUGZILLA"/>
		<reference ref_id="1201685" ref_url="https://bugzilla.suse.com/1201685" source="BUGZILLA"/>
		<reference ref_id="1201692" ref_url="https://bugzilla.suse.com/1201692" source="BUGZILLA"/>
		<reference ref_id="1201694" ref_url="https://bugzilla.suse.com/1201694" source="BUGZILLA"/>
		<reference ref_id="1202427" ref_url="https://bugzilla.suse.com/1202427" source="BUGZILLA"/>
		<reference ref_id="1204468" ref_url="https://bugzilla.suse.com/1204468" source="BUGZILLA"/>
		<reference ref_id="1204471" ref_url="https://bugzilla.suse.com/1204471" source="BUGZILLA"/>
		<reference ref_id="1204472" ref_url="https://bugzilla.suse.com/1204472" source="BUGZILLA"/>
		<reference ref_id="1204473" ref_url="https://bugzilla.suse.com/1204473" source="BUGZILLA"/>
		<reference ref_id="1204475" ref_url="https://bugzilla.suse.com/1204475" source="BUGZILLA"/>
		<reference ref_id="1204480" ref_url="https://bugzilla.suse.com/1204480" source="BUGZILLA"/>
		<reference ref_id="1205302" ref_url="https://bugzilla.suse.com/1205302" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21540" ref_url="https://www.suse.com/security/cve/CVE-2022-21540/" source="CVE"/>
		<reference ref_id="CVE-2022-21541" ref_url="https://www.suse.com/security/cve/CVE-2022-21541/" source="CVE"/>
		<reference ref_id="CVE-2022-21549" ref_url="https://www.suse.com/security/cve/CVE-2022-21549/" source="CVE"/>
		<reference ref_id="CVE-2022-21618" ref_url="https://www.suse.com/security/cve/CVE-2022-21618/" source="CVE"/>
		<reference ref_id="CVE-2022-21619" ref_url="https://www.suse.com/security/cve/CVE-2022-21619/" source="CVE"/>
		<reference ref_id="CVE-2022-21624" ref_url="https://www.suse.com/security/cve/CVE-2022-21624/" source="CVE"/>
		<reference ref_id="CVE-2022-21626" ref_url="https://www.suse.com/security/cve/CVE-2022-21626/" source="CVE"/>
		<reference ref_id="CVE-2022-21628" ref_url="https://www.suse.com/security/cve/CVE-2022-21628/" source="CVE"/>
		<reference ref_id="CVE-2022-34169" ref_url="https://www.suse.com/security/cve/CVE-2022-34169/" source="CVE"/>
		<reference ref_id="CVE-2022-39399" ref_url="https://www.suse.com/security/cve/CVE-2022-39399/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013066.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

- CVE-2022-21626: An unauthenticated attacker with network access via HTTPS can compromise Oracle Java SE, Oracle GraalVM Enterprise Edition (bsc#1204471).
- CVE-2022-21618: An unauthenticated attacker with network access via Kerberos can compromise Oracle Java SE, Oracle GraalVM Enterprise Edition (bsc#1204468).
- CVE-2022-21619: An unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE (bsc#1204473).
- CVE-2022-21628: An unauthenticated attacker with network access via HTTP can compromise Oracle Java SE, Oracle GraalVM Enterprise Edition (bsc#1204472).
- CVE-2022-21624: An unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise (bsc#1204475).
- CVE-2022-39399: An unauthenticated attacker with network access via HTTP can compromise Oracle Java SE, Oracle GraalVM Enterprise Edition (bsc#1204480).
- CVE-2022-21549: Fixed exponentials issue (bsc#1201685).
- CVE-2022-21541: Fixed an improper restriction of MethodHandle.invokeBasic() (bsc#1201692).
- CVE-2022-34169; Fixed an integer truncation issue in Xalan (bsc#1201684).
- CVE-2022-21540: Fixed a class compilation issue (bsc#1201694).


- Update to Java 8.0 Service Refresh 7 Fix Pack 20.
  * Security:
    - The IBM ORB Does Not Support Object-Serialisation Data Filtering
    - Large Allocation In CipherSuite
    - Avoid Evaluating Sslalgorithmconstraints Twice
    - Cache The Results Of Constraint Checks
    - An incorrect ShortBufferException is thrown by IBMJCEPlus,
      IBMJCEPlusFIPS during cipher update operation
    - Disable SHA-1 Signed Jars For Ea
    - JSSE Performance Improvement
    - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
    - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
    - Crash In Libjsor.So During An Rdma Failover
    - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
    - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
    - Crash During JIT Compilation
    - Incorrect JIT Optimization Of Java Code
    - Incorrect Return From Class.isArray()
    - Unexpected ClassCastException
    - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
    - Add RSA-OAEP Cipher Function To IBMJCECCA

- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
    - Assertion failure at ClassLoaderRememberedSet.cpp
	- Assertion failure at StandardAccessBarrier.cpp when
	  -Xgc:concurrentScavenge is set.
    - GC can have unflushed ownable synchronizer objects which
	  can eventually lead to heap corruption and failure when
	  -Xgc:concurrentScavenge is set.
  *	JIT Compiler:
    - Incorrect JIT optimization of Java code
    - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  *	Reliability and Serviceability:
    - javacore with 'kill -3' SIGQUIT signal freezes Java process
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-22"/>
	<updated date="2022-11-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201684">SUSE bug 1201684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201685">SUSE bug 1201685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201692">SUSE bug 1201692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201694">SUSE bug 1201694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202427">SUSE bug 1202427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204468">SUSE bug 1204468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204471">SUSE bug 1204471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204472">SUSE bug 1204472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204473">SUSE bug 1204473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204475">SUSE bug 1204475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204480">SUSE bug 1204480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205302">SUSE bug 1205302</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21540/">CVE-2022-21540</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21541/">CVE-2022-21541</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21549/">CVE-2022-21549</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21618/">CVE-2022-21618</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21619/">CVE-2022-21619</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21624/">CVE-2022-21624</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21626/">CVE-2022-21626</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21628/">CVE-2022-21628</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34169/">CVE-2022-34169</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-39399/">CVE-2022-39399</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725742" comment="java-1_8_0-ibm-1.8.0_sr7.20-150000.3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725716" comment="java-1_8_0-ibm-alsa-1.8.0_sr7.20-150000.3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725743" comment="java-1_8_0-ibm-devel-1.8.0_sr7.20-150000.3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725720" comment="java-1_8_0-ibm-plugin-1.8.0_sr7.20-150000.3.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140680" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1203868" ref_url="https://bugzilla.suse.com/1203868" source="BUGZILLA"/>
		<reference ref_id="1204918" ref_url="https://bugzilla.suse.com/1204918" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43980" ref_url="https://www.suse.com/security/cve/CVE-2021-43980/" source="CVE"/>
		<reference ref_id="CVE-2022-42252" ref_url="https://www.suse.com/security/cve/CVE-2022-42252/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4257-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013132.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2021-43980: Fixed information disclosure due to concurrency issues in Http11Processor (bsc#1203868).
- CVE-2022-42252: Fixed a request smuggling (bsc#1204918).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203868">SUSE bug 1203868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204918">SUSE bug 1204918</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-43980/">CVE-2021-43980</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42252/">CVE-2022-42252</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726519" comment="tomcat-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726520" comment="tomcat-admin-webapps-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726521" comment="tomcat-el-3_0-api-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726522" comment="tomcat-jsp-2_3-api-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726523" comment="tomcat-lib-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726524" comment="tomcat-servlet-4_0-api-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726525" comment="tomcat-webapps-9.0.36-150100.4.81.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140681" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1205244" ref_url="https://bugzilla.suse.com/1205244" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45061" ref_url="https://www.suse.com/security/cve/CVE-2022-45061/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4258-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013134.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2022-45061: Fixed possible DoS when IDNA decoding extremely long domain names (bsc#1205244).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205244">SUSE bug 1205244</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45061/">CVE-2022-45061</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724985" comment="libpython3_6m1_0-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724986" comment="python3-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724987" comment="python3-base-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724988" comment="python3-curses-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724989" comment="python3-dbm-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724990" comment="python3-devel-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724991" comment="python3-idle-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724992" comment="python3-testsuite-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724993" comment="python3-tk-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724994" comment="python3-tools-3.6.15-150000.3.119.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140682" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1204641" ref_url="https://bugzilla.suse.com/1204641" source="BUGZILLA"/>
		<reference ref_id="1204643" ref_url="https://bugzilla.suse.com/1204643" source="BUGZILLA"/>
		<reference ref_id="1204644" ref_url="https://bugzilla.suse.com/1204644" source="BUGZILLA"/>
		<reference ref_id="1204645" ref_url="https://bugzilla.suse.com/1204645" source="BUGZILLA"/>
		<reference ref_id="1205392" ref_url="https://bugzilla.suse.com/1205392" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3597" ref_url="https://www.suse.com/security/cve/CVE-2022-3597/" source="CVE"/>
		<reference ref_id="CVE-2022-3599" ref_url="https://www.suse.com/security/cve/CVE-2022-3599/" source="CVE"/>
		<reference ref_id="CVE-2022-3626" ref_url="https://www.suse.com/security/cve/CVE-2022-3626/" source="CVE"/>
		<reference ref_id="CVE-2022-3627" ref_url="https://www.suse.com/security/cve/CVE-2022-3627/" source="CVE"/>
		<reference ref_id="CVE-2022-3970" ref_url="https://www.suse.com/security/cve/CVE-2022-3970/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013135.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-3597: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204641).
- CVE-2022-3599: Fixed out-of-bounds read in writeSingleSection in tools/tiffcrop.c (bnc#1204643).
- CVE-2022-3626: Fixed out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (bnc#1204644)
- CVE-2022-3627: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204645).
- CVE-2022-3970: Fixed unsigned integer overflow in TIFFReadRGBATileExt() (bnc#1205392).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204641">SUSE bug 1204641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204643">SUSE bug 1204643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204644">SUSE bug 1204644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204645">SUSE bug 1204645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205392">SUSE bug 1205392</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3597/">CVE-2022-3597</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3599/">CVE-2022-3599</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3626/">CVE-2022-3626</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3627/">CVE-2022-3627</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3970/">CVE-2022-3970</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725557" comment="libtiff-devel-4.0.9-150000.45.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725558" comment="libtiff5-4.0.9-150000.45.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725458" comment="libtiff5-32bit-4.0.9-150000.45.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140683" version="1" class="patch">
	<metadata>
		<title>Security update for busybox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1099260" ref_url="https://bugzilla.suse.com/1099260" source="BUGZILLA"/>
		<reference ref_id="914660" ref_url="https://bugzilla.suse.com/914660" source="BUGZILLA"/>
		<reference ref_id="CVE-2014-9645" ref_url="https://www.suse.com/security/cve/CVE-2014-9645/" source="CVE"/>
		<reference ref_id="CVE-2018-1000517" ref_url="https://www.suse.com/security/cve/CVE-2018-1000517/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013133.html" source="SUSE-SU"/>
		<description>
This update for busybox fixes the following issues:

- CVE-2014-9645: Fixed loading of unwanted module with / in module names (bsc#914660).

- Enable switch_root
  With this change virtme --force-initramfs works as expected.

- Enable udhcpc

Update to 1.35.0:
    
- awk: fix printf %%, fix read beyond end of buffer
- Adjust busybox.config for new features in find, date and cpio 
- chrt: silence analyzer warning
- libarchive: remove duplicate forward declaration
- mount: 'mount -o rw ....' should not fall back to RO mount
- ps: fix -o pid=PID,args interpreting entire 'PID,args' as header
- tar: prevent malicious archives with long name sizes causing OOM
- udhcpc6: fix udhcp_find_option to actually find DHCP6 options
- xxd: fix -p -r
- support for new optoins added to basename, cpio, date, find, 
  mktemp, wget and others

- Adjust busybox.config for new features in find, date and cpio 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1099260">SUSE bug 1099260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914660">SUSE bug 914660</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-9645/">CVE-2014-9645</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000517/">CVE-2018-1000517</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725918" comment="busybox-1.35.0-150000.4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725919" comment="busybox-static-1.35.0-150000.4.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140684" version="1" class="patch">
	<metadata>
		<title>Security update for nginx (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1187685" ref_url="https://bugzilla.suse.com/1187685" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3618" ref_url="https://www.suse.com/security/cve/CVE-2021-3618/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013137.html" source="SUSE-SU"/>
		<description>
This update for nginx fixes the following issues:

- CVE-2021-3618: Fixed the ALPACA attack limiting the number of errors after which the connection is closed (bsc#1187685).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187685">SUSE bug 1187685</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3618/">CVE-2021-3618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725922" comment="nginx-1.16.1-150100.6.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725916" comment="nginx-source-1.16.1-150100.6.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140685" version="1" class="patch">
	<metadata>
		<title>Security update for exiv2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1050257" ref_url="https://bugzilla.suse.com/1050257" source="BUGZILLA"/>
		<reference ref_id="1095070" ref_url="https://bugzilla.suse.com/1095070" source="BUGZILLA"/>
		<reference ref_id="1110282" ref_url="https://bugzilla.suse.com/1110282" source="BUGZILLA"/>
		<reference ref_id="1119559" ref_url="https://bugzilla.suse.com/1119559" source="BUGZILLA"/>
		<reference ref_id="1119560" ref_url="https://bugzilla.suse.com/1119560" source="BUGZILLA"/>
		<reference ref_id="1119562" ref_url="https://bugzilla.suse.com/1119562" source="BUGZILLA"/>
		<reference ref_id="1142677" ref_url="https://bugzilla.suse.com/1142677" source="BUGZILLA"/>
		<reference ref_id="1142678" ref_url="https://bugzilla.suse.com/1142678" source="BUGZILLA"/>
		<reference ref_id="1153577" ref_url="https://bugzilla.suse.com/1153577" source="BUGZILLA"/>
		<reference ref_id="1186231" ref_url="https://bugzilla.suse.com/1186231" source="BUGZILLA"/>
		<reference ref_id="1189337" ref_url="https://bugzilla.suse.com/1189337" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-11591" ref_url="https://www.suse.com/security/cve/CVE-2017-11591/" source="CVE"/>
		<reference ref_id="CVE-2018-11531" ref_url="https://www.suse.com/security/cve/CVE-2018-11531/" source="CVE"/>
		<reference ref_id="CVE-2018-17581" ref_url="https://www.suse.com/security/cve/CVE-2018-17581/" source="CVE"/>
		<reference ref_id="CVE-2018-20097" ref_url="https://www.suse.com/security/cve/CVE-2018-20097/" source="CVE"/>
		<reference ref_id="CVE-2018-20098" ref_url="https://www.suse.com/security/cve/CVE-2018-20098/" source="CVE"/>
		<reference ref_id="CVE-2018-20099" ref_url="https://www.suse.com/security/cve/CVE-2018-20099/" source="CVE"/>
		<reference ref_id="CVE-2019-13109" ref_url="https://www.suse.com/security/cve/CVE-2019-13109/" source="CVE"/>
		<reference ref_id="CVE-2019-13110" ref_url="https://www.suse.com/security/cve/CVE-2019-13110/" source="CVE"/>
		<reference ref_id="CVE-2019-17402" ref_url="https://www.suse.com/security/cve/CVE-2019-17402/" source="CVE"/>
		<reference ref_id="CVE-2021-29473" ref_url="https://www.suse.com/security/cve/CVE-2021-29473/" source="CVE"/>
		<reference ref_id="CVE-2021-32815" ref_url="https://www.suse.com/security/cve/CVE-2021-32815/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013143.html" source="SUSE-SU"/>
		<description>
This update for exiv2 fixes the following issues:

- CVE-2019-13110: Fixed an integer-overflow and out-of-bounds read in CiffDirectory:readDirectory leads to denail of service (bsc#1142678).
- CVE-2019-13109: Fixed a denial of service in PngImage:readMetadata (bsc#1142677).
- CVE-2018-17581: Fixed an excessive stack consumption CiffDirectory:readDirectory() at crwimage_int.cpp (bsc#1110282).
- CVE-2017-11591: Fixed a floating point exception in Exiv2::ValueType (bsc#1050257).
- CVE-2019-17402: Fixed an improper validation of the total size to the offset and size leads to a crash in Exiv2::getULong in types.cpp (bsc#1153577).
- CVE-2021-32815: Fixed a deny-of-service due to assertion failure in crwimage_int.cpp (bsc#1189337).
- CVE-2018-20097: Fixed SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroupsu (bsc#1119562).
- CVE-2021-29473: Fixed out-of-bounds read in Exiv2::Jp2Image:doWriteMetadata (bsc#1186231).
- CVE-2018-20098: Fixed a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header (bsc#1119560).
- CVE-2018-11531: Fixed a heap-based buffer overflow in getData in preview.cpp (bsc#1095070).
- CVE-2018-20099: exiv2: infinite loop in Exiv2::Jp2Image::encodeJp2Header (bsc#1119559).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1050257">SUSE bug 1050257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095070">SUSE bug 1095070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110282">SUSE bug 1110282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119559">SUSE bug 1119559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119560">SUSE bug 1119560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119562">SUSE bug 1119562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142677">SUSE bug 1142677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142678">SUSE bug 1142678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153577">SUSE bug 1153577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186231">SUSE bug 1186231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189337">SUSE bug 1189337</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11591/">CVE-2017-11591</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11531/">CVE-2018-11531</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17581/">CVE-2018-17581</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20097/">CVE-2018-20097</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20098/">CVE-2018-20098</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20099/">CVE-2018-20099</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13109/">CVE-2019-13109</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13110/">CVE-2019-13110</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17402/">CVE-2019-17402</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29473/">CVE-2021-29473</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-32815/">CVE-2021-32815</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725392" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725393" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140686" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1192478" ref_url="https://bugzilla.suse.com/1192478" source="BUGZILLA"/>
		<reference ref_id="1202962" ref_url="https://bugzilla.suse.com/1202962" source="BUGZILLA"/>
		<reference ref_id="1203110" ref_url="https://bugzilla.suse.com/1203110" source="BUGZILLA"/>
		<reference ref_id="1203152" ref_url="https://bugzilla.suse.com/1203152" source="BUGZILLA"/>
		<reference ref_id="1203155" ref_url="https://bugzilla.suse.com/1203155" source="BUGZILLA"/>
		<reference ref_id="1203194" ref_url="https://bugzilla.suse.com/1203194" source="BUGZILLA"/>
		<reference ref_id="1203272" ref_url="https://bugzilla.suse.com/1203272" source="BUGZILLA"/>
		<reference ref_id="1203508" ref_url="https://bugzilla.suse.com/1203508" source="BUGZILLA"/>
		<reference ref_id="1203509" ref_url="https://bugzilla.suse.com/1203509" source="BUGZILLA"/>
		<reference ref_id="1203796" ref_url="https://bugzilla.suse.com/1203796" source="BUGZILLA"/>
		<reference ref_id="1203797" ref_url="https://bugzilla.suse.com/1203797" source="BUGZILLA"/>
		<reference ref_id="1203799" ref_url="https://bugzilla.suse.com/1203799" source="BUGZILLA"/>
		<reference ref_id="1203820" ref_url="https://bugzilla.suse.com/1203820" source="BUGZILLA"/>
		<reference ref_id="1203924" ref_url="https://bugzilla.suse.com/1203924" source="BUGZILLA"/>
		<reference ref_id="1204779" ref_url="https://bugzilla.suse.com/1204779" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3928" ref_url="https://www.suse.com/security/cve/CVE-2021-3928/" source="CVE"/>
		<reference ref_id="CVE-2022-2980" ref_url="https://www.suse.com/security/cve/CVE-2022-2980/" source="CVE"/>
		<reference ref_id="CVE-2022-2982" ref_url="https://www.suse.com/security/cve/CVE-2022-2982/" source="CVE"/>
		<reference ref_id="CVE-2022-3037" ref_url="https://www.suse.com/security/cve/CVE-2022-3037/" source="CVE"/>
		<reference ref_id="CVE-2022-3099" ref_url="https://www.suse.com/security/cve/CVE-2022-3099/" source="CVE"/>
		<reference ref_id="CVE-2022-3134" ref_url="https://www.suse.com/security/cve/CVE-2022-3134/" source="CVE"/>
		<reference ref_id="CVE-2022-3153" ref_url="https://www.suse.com/security/cve/CVE-2022-3153/" source="CVE"/>
		<reference ref_id="CVE-2022-3234" ref_url="https://www.suse.com/security/cve/CVE-2022-3234/" source="CVE"/>
		<reference ref_id="CVE-2022-3235" ref_url="https://www.suse.com/security/cve/CVE-2022-3235/" source="CVE"/>
		<reference ref_id="CVE-2022-3278" ref_url="https://www.suse.com/security/cve/CVE-2022-3278/" source="CVE"/>
		<reference ref_id="CVE-2022-3296" ref_url="https://www.suse.com/security/cve/CVE-2022-3296/" source="CVE"/>
		<reference ref_id="CVE-2022-3297" ref_url="https://www.suse.com/security/cve/CVE-2022-3297/" source="CVE"/>
		<reference ref_id="CVE-2022-3324" ref_url="https://www.suse.com/security/cve/CVE-2022-3324/" source="CVE"/>
		<reference ref_id="CVE-2022-3352" ref_url="https://www.suse.com/security/cve/CVE-2022-3352/" source="CVE"/>
		<reference ref_id="CVE-2022-3705" ref_url="https://www.suse.com/security/cve/CVE-2022-3705/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013152.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

Updated to version 9.0 with patch level 0814:

- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).
- CVE-2022-3234: Fixed heap-based buffer overflow (bsc#1203508).
- CVE-2022-3235: Fixed use-after-free (bsc#1203509).
- CVE-2022-3324: Fixed stack-based buffer overflow (bsc#1203820).
- CVE-2022-3705: Fixed use-after-free in function qf_update_buffer of the file quickfix.c (bsc#1204779).
- CVE-2022-2982: Fixed use-after-free in qf_fill_buffer() (bsc#1203152).
- CVE-2022-3296: Fixed stack out of bounds read in ex_finally() in ex_eval.c (bsc#1203796).
- CVE-2022-3297: Fixed use-after-free in process_next_cpt_value() at insexpand.c (bsc#1203797).
- CVE-2022-3099: Fixed use-after-free in ex_docmd.c (bsc#1203110).
- CVE-2022-3134: Fixed use-after-free in do_tag() (bsc#1203194).
- CVE-2022-3153: Fixed NULL pointer dereference (bsc#1203272).
- CVE-2022-3278: Fixed NULL pointer dereference in eval_next_non_blank() in eval.c (bsc#1203799).
- CVE-2022-3352: Fixed use-after-free (bsc#1203924).
- CVE-2022-2980: Fixed NULL pointer dereference in do_mouse() (bsc#1203155).
- CVE-2022-3037: Fixed use-after-free (bsc#1202962).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192478">SUSE bug 1192478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202962">SUSE bug 1202962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203110">SUSE bug 1203110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203152">SUSE bug 1203152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203155">SUSE bug 1203155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203194">SUSE bug 1203194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203272">SUSE bug 1203272</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203508">SUSE bug 1203508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203509">SUSE bug 1203509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203796">SUSE bug 1203796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203797">SUSE bug 1203797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203799">SUSE bug 1203799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203820">SUSE bug 1203820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203924">SUSE bug 1203924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204779">SUSE bug 1204779</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3928/">CVE-2021-3928</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2980/">CVE-2022-2980</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2982/">CVE-2022-2982</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3037/">CVE-2022-3037</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-3099/">CVE-2022-3099</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3134/">CVE-2022-3134</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3153/">CVE-2022-3153</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3234/">CVE-2022-3234</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3235/">CVE-2022-3235</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3278/">CVE-2022-3278</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-3296/">CVE-2022-3296</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3297/">CVE-2022-3297</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3324/">CVE-2022-3324</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-3352/">CVE-2022-3352</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-3705/">CVE-2022-3705</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726826" comment="gvim-9.0.0814-150000.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726827" comment="vim-9.0.0814-150000.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726769" comment="vim-data-9.0.0814-150000.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726770" comment="vim-data-common-9.0.0814-150000.5.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140687" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1205120" ref_url="https://bugzilla.suse.com/1205120" source="BUGZILLA"/>
		<reference ref_id="1205121" ref_url="https://bugzilla.suse.com/1205121" source="BUGZILLA"/>
		<reference ref_id="1205122" ref_url="https://bugzilla.suse.com/1205122" source="BUGZILLA"/>
		<reference ref_id="1205123" ref_url="https://bugzilla.suse.com/1205123" source="BUGZILLA"/>
		<reference ref_id="1205124" ref_url="https://bugzilla.suse.com/1205124" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32888" ref_url="https://www.suse.com/security/cve/CVE-2022-32888/" source="CVE"/>
		<reference ref_id="CVE-2022-32923" ref_url="https://www.suse.com/security/cve/CVE-2022-32923/" source="CVE"/>
		<reference ref_id="CVE-2022-42799" ref_url="https://www.suse.com/security/cve/CVE-2022-42799/" source="CVE"/>
		<reference ref_id="CVE-2022-42823" ref_url="https://www.suse.com/security/cve/CVE-2022-42823/" source="CVE"/>
		<reference ref_id="CVE-2022-42824" ref_url="https://www.suse.com/security/cve/CVE-2022-42824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013159.html" source="SUSE-SU"/>
		<description>

Security fixes:

- CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205121).
- CVE-2022-32923: Fixed possible information leak via maliciously crafted web content (bsc#1205122).
- CVE-2022-42799: Fixed user interface spoofing when visiting a malicious website (bsc#1205123).
- CVE-2022-42823: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205120).
- CVE-2022-42824: Fixed possible sensitive user information leak via maliciously crafted web content (bsc#1205124).

Update to version 2.38.2:

  - Fix scrolling issues in some sites having fixed background.
  - Fix prolonged buffering during progressive live playback.
  - Fix the build with accessibility disabled.
  - Fix several crashes and rendering issues.
    
Update to version 2.38.1:

  - Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  - Use a single xdg-dbus-proxy process when sandbox is enabled.
  - Fix high resolution video playback due to unimplemented
    changeType operation.
  - Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  - Fix player stucking in buffering (paused) state for progressive
    streaming.
  - Do not try to preconnect on link click when link preconnect
    setting is disabled.
  - Fix close status code returned when the client closes a
    WebSocket in some cases.
  - Fix media player duration calculation.
  - Fix several crashes and rendering issues.

Update to version 2.38.0:

  - New media controls UI style.
  - Add new API to set WebView's Content-Security-Policy for web
    extensions support.
  - Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  - MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  - Add support for PDF documents using PDF.js.
  		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205120">SUSE bug 1205120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205121">SUSE bug 1205121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205122">SUSE bug 1205122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205123">SUSE bug 1205123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205124">SUSE bug 1205124</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32888/">CVE-2022-32888</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32923/">CVE-2022-32923</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-42799/">CVE-2022-42799</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42823/">CVE-2022-42823</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-42824/">CVE-2022-42824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726533" comment="libjavascriptcoregtk-4_0-18-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726534" comment="libwebkit2gtk-4_0-37-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726513" comment="libwebkit2gtk3-lang-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726535" comment="typelib-1_0-JavaScriptCore-4_0-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726536" comment="typelib-1_0-WebKit2-4_0-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726537" comment="typelib-1_0-WebKit2WebExtension-4_0-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726538" comment="webkit2gtk-4_0-injected-bundles-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726539" comment="webkit2gtk3-devel-2.38.2-150000.3.122.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140688" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1205119" ref_url="https://bugzilla.suse.com/1205119" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-43548" ref_url="https://www.suse.com/security/cve/CVE-2022-43548/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013181.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- CVE-2022-43548: Fixed DNS rebinding in --inspect via invalid octal IP address (bsc#1205119).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-01"/>
	<updated date="2022-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205119">SUSE bug 1205119</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-43548/">CVE-2022-43548</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724700" comment="nodejs10-10.24.1-150000.1.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724701" comment="nodejs10-devel-10.24.1-150000.1.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724645" comment="nodejs10-docs-10.24.1-150000.1.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724702" comment="npm10-10.24.1-150000.1.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140689" version="1" class="patch">
	<metadata>
		<title>Security update for emacs (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1205822" ref_url="https://bugzilla.suse.com/1205822" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45939" ref_url="https://www.suse.com/security/cve/CVE-2022-45939/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013190.html" source="SUSE-SU"/>
		<description>
This update for emacs fixes the following issues:

- CVE-2022-45939: Fixed shell command injection via source code files when using ctags (bsc#1205822).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-02"/>
	<updated date="2022-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205822">SUSE bug 1205822</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45939/">CVE-2022-45939</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009727427" comment="emacs-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727405" comment="emacs-el-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727406" comment="emacs-info-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727428" comment="emacs-nox-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727429" comment="emacs-x11-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727430" comment="etags-25.3-150000.3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140690" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1204642" ref_url="https://bugzilla.suse.com/1204642" source="BUGZILLA"/>
		<reference ref_id="1205422" ref_url="https://bugzilla.suse.com/1205422" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3570" ref_url="https://www.suse.com/security/cve/CVE-2022-3570/" source="CVE"/>
		<reference ref_id="CVE-2022-3598" ref_url="https://www.suse.com/security/cve/CVE-2022-3598/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013217.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-3570: Fixed heap buffer overflows in tiffcrop.c (bsc#1205422).
- CVE-2022-3598: Fixed out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c [bsc#1204642]
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204642">SUSE bug 1204642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205422">SUSE bug 1205422</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3570/">CVE-2022-3570</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3598/">CVE-2022-3598</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009727261" comment="libtiff-devel-4.0.9-150000.45.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727262" comment="libtiff5-4.0.9-150000.45.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727227" comment="libtiff5-32bit-4.0.9-150000.45.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140691" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1204471" ref_url="https://bugzilla.suse.com/1204471" source="BUGZILLA"/>
		<reference ref_id="1204472" ref_url="https://bugzilla.suse.com/1204472" source="BUGZILLA"/>
		<reference ref_id="1204473" ref_url="https://bugzilla.suse.com/1204473" source="BUGZILLA"/>
		<reference ref_id="1204475" ref_url="https://bugzilla.suse.com/1204475" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21619" ref_url="https://www.suse.com/security/cve/CVE-2022-21619/" source="CVE"/>
		<reference ref_id="CVE-2022-21624" ref_url="https://www.suse.com/security/cve/CVE-2022-21624/" source="CVE"/>
		<reference ref_id="CVE-2022-21626" ref_url="https://www.suse.com/security/cve/CVE-2022-21626/" source="CVE"/>
		<reference ref_id="CVE-2022-21628" ref_url="https://www.suse.com/security/cve/CVE-2022-21628/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013224.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

Update to version jdk8u352 (icedtea-3.25.0):

- CVE-2022-21619,CVE-2022-21624: Fixed difficult to exploit vulnerability allows unauthenticated attacker with network access and can cause unauthorized update, insert or delete access via multiple protocols (bsc#1204473,bsc#1204475).
- CVE-2022-21626: Fixed easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to cause partial denial of service (bsc#1204471).
- CVE-2022-21628: Fixed easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to cause partial denial of service (bsc#1204472).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1204471">SUSE bug 1204471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204472">SUSE bug 1204472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204473">SUSE bug 1204473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204475">SUSE bug 1204475</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21619/">CVE-2022-21619</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21624/">CVE-2022-21624</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21626/">CVE-2022-21626</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21628/">CVE-2022-21628</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009727599" comment="java-1_8_0-openjdk-1.8.0.352-150000.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727600" comment="java-1_8_0-openjdk-demo-1.8.0.352-150000.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727601" comment="java-1_8_0-openjdk-devel-1.8.0.352-150000.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727602" comment="java-1_8_0-openjdk-headless-1.8.0.352-150000.3.73.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140692" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1204822" ref_url="https://bugzilla.suse.com/1204822" source="BUGZILLA"/>
		<reference ref_id="1206189" ref_url="https://bugzilla.suse.com/1206189" source="BUGZILLA"/>
		<reference ref_id="1206190" ref_url="https://bugzilla.suse.com/1206190" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3725" ref_url="https://www.suse.com/security/cve/CVE-2022-3725/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013223.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

Update to version 3.6.10:

- CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Multiple dissector infinite loops (bsc#1206189).
- Kafka dissector memory exhaustion (bsc#1206190).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204822">SUSE bug 1204822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206189">SUSE bug 1206189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206190">SUSE bug 1206190</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3725/">CVE-2022-3725</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009727990" comment="libwireshark15-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727991" comment="libwiretap12-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727992" comment="libwsutil13-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727993" comment="wireshark-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727994" comment="wireshark-devel-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727995" comment="wireshark-ui-qt-3.6.10-150000.3.78.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140693" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1206242" ref_url="https://bugzilla.suse.com/1206242" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-46872" ref_url="https://www.suse.com/security/cve/CVE-2022-46872/" source="CVE"/>
		<reference ref_id="CVE-2022-46874" ref_url="https://www.suse.com/security/cve/CVE-2022-46874/" source="CVE"/>
		<reference ref_id="CVE-2022-46875" ref_url="https://www.suse.com/security/cve/CVE-2022-46875/" source="CVE"/>
		<reference ref_id="CVE-2022-46878" ref_url="https://www.suse.com/security/cve/CVE-2022-46878/" source="CVE"/>
		<reference ref_id="CVE-2022-46880" ref_url="https://www.suse.com/security/cve/CVE-2022-46880/" source="CVE"/>
		<reference ref_id="CVE-2022-46881" ref_url="https://www.suse.com/security/cve/CVE-2022-46881/" source="CVE"/>
		<reference ref_id="CVE-2022-46882" ref_url="https://www.suse.com/security/cve/CVE-2022-46882/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013227.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 102.6.0 ESR (bsc#1206242):

- CVE-2022-46880: Use-after-free in WebGL
- CVE-2022-46872: Arbitrary file read from a compromised content process
- CVE-2022-46881: Memory corruption in WebGL
- CVE-2022-46874: Drag and Dropped Filenames could have been truncated to malicious extensions
- CVE-2022-46875: Download Protections were bypassed by .atloc and .ftploc files on Mac OS
- CVE-2022-46882: Use-after-free in WebGL
- CVE-2022-46878: Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206242">SUSE bug 1206242</bugzilla>
	<cve impact="critical" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-46872/">CVE-2022-46872</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46874/">CVE-2022-46874</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-46875/">CVE-2022-46875</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46878/">CVE-2022-46878</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-46880/">CVE-2022-46880</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46881/">CVE-2022-46881</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46882/">CVE-2022-46882</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728150" comment="MozillaFirefox-102.6.0-150000.150.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728151" comment="MozillaFirefox-devel-102.6.0-150000.150.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728152" comment="MozillaFirefox-translations-common-102.6.0-150000.150.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728153" comment="MozillaFirefox-translations-other-102.6.0-150000.150.68.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140694" version="1" class="patch">
	<metadata>
		<title>Security update for containerd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1197284" ref_url="https://bugzilla.suse.com/1197284" source="BUGZILLA"/>
		<reference ref_id="1206065" ref_url="https://bugzilla.suse.com/1206065" source="BUGZILLA"/>
		<reference ref_id="1206235" ref_url="https://bugzilla.suse.com/1206235" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23471" ref_url="https://www.suse.com/security/cve/CVE-2022-23471/" source="CVE"/>
		<reference ref_id="CVE-2022-27191" ref_url="https://www.suse.com/security/cve/CVE-2022-27191/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013228.html" source="SUSE-SU"/>
		<description>
This update for containerd fixes the following issues:

Update to containerd v1.6.12 including Docker v20.10.21-ce (bsc#1206065). 

Also includes the following fix:

- CVE-2022-23471: host memory exhaustion through Terminal resize goroutine leak (bsc#1206235).
- CVE-2022-27191: crash in a golang.org/x/crypto/ssh server (bsc#1197284).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197284">SUSE bug 1197284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206065">SUSE bug 1206065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206235">SUSE bug 1206235</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23471/">CVE-2022-23471</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27191/">CVE-2022-27191</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728132" comment="containerd-1.6.12-150000.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728133" comment="containerd-ctr-1.6.12-150000.79.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140695" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1205874" ref_url="https://bugzilla.suse.com/1205874" source="BUGZILLA"/>
		<reference ref_id="1205875" ref_url="https://bugzilla.suse.com/1205875" source="BUGZILLA"/>
		<reference ref_id="1205876" ref_url="https://bugzilla.suse.com/1205876" source="BUGZILLA"/>
		<reference ref_id="1205877" ref_url="https://bugzilla.suse.com/1205877" source="BUGZILLA"/>
		<reference ref_id="1205878" ref_url="https://bugzilla.suse.com/1205878" source="BUGZILLA"/>
		<reference ref_id="1205879" ref_url="https://bugzilla.suse.com/1205879" source="BUGZILLA"/>
		<reference ref_id="1206017" ref_url="https://bugzilla.suse.com/1206017" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4283" ref_url="https://www.suse.com/security/cve/CVE-2022-4283/" source="CVE"/>
		<reference ref_id="CVE-2022-46340" ref_url="https://www.suse.com/security/cve/CVE-2022-46340/" source="CVE"/>
		<reference ref_id="CVE-2022-46341" ref_url="https://www.suse.com/security/cve/CVE-2022-46341/" source="CVE"/>
		<reference ref_id="CVE-2022-46342" ref_url="https://www.suse.com/security/cve/CVE-2022-46342/" source="CVE"/>
		<reference ref_id="CVE-2022-46343" ref_url="https://www.suse.com/security/cve/CVE-2022-46343/" source="CVE"/>
		<reference ref_id="CVE-2022-46344" ref_url="https://www.suse.com/security/cve/CVE-2022-46344/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013246.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2022-46340: Server XTestSwapFakeInput stack overflow (bsc#1205874)
- CVE-2022-46341: Server XIPassiveUngrabDevice out-of-bounds access (bsc#1205877)
- CVE-2022-46342: Server XvdiSelectVideoNotify use-after-free (bsc#1205879)
- CVE-2022-46343: Server ScreenSaverSetAttributes use-after-free (bsc#1205878)
- CVE-2022-46344: Server XIChangeProperty out-of-bounds access (bsc#1205876)
- CVE-2022-4283: Reset the radio_groups pointer to NULL after freeing it (bsc#1206017)
- Xi: return an error from XI property changes if verification failed (bsc#1205875)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-14"/>
	<updated date="2022-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205874">SUSE bug 1205874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205875">SUSE bug 1205875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205876">SUSE bug 1205876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205877">SUSE bug 1205877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205878">SUSE bug 1205878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205879">SUSE bug 1205879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206017">SUSE bug 1206017</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4283/">CVE-2022-4283</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46340/">CVE-2022-46340</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46341/">CVE-2022-46341</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-46342/">CVE-2022-46342</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-46343/">CVE-2022-46343</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-46344/">CVE-2022-46344</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728969" comment="xorg-x11-server-1.20.3-150100.14.5.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728970" comment="xorg-x11-server-extra-1.20.3-150100.14.5.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728971" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140696" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1198702" ref_url="https://bugzilla.suse.com/1198702" source="BUGZILLA"/>
		<reference ref_id="1199365" ref_url="https://bugzilla.suse.com/1199365" source="BUGZILLA"/>
		<reference ref_id="1200788" ref_url="https://bugzilla.suse.com/1200788" source="BUGZILLA"/>
		<reference ref_id="1200845" ref_url="https://bugzilla.suse.com/1200845" source="BUGZILLA"/>
		<reference ref_id="1201455" ref_url="https://bugzilla.suse.com/1201455" source="BUGZILLA"/>
		<reference ref_id="1202686" ref_url="https://bugzilla.suse.com/1202686" source="BUGZILLA"/>
		<reference ref_id="1203008" ref_url="https://bugzilla.suse.com/1203008" source="BUGZILLA"/>
		<reference ref_id="1203183" ref_url="https://bugzilla.suse.com/1203183" source="BUGZILLA"/>
		<reference ref_id="1203290" ref_url="https://bugzilla.suse.com/1203290" source="BUGZILLA"/>
		<reference ref_id="1203322" ref_url="https://bugzilla.suse.com/1203322" source="BUGZILLA"/>
		<reference ref_id="1203514" ref_url="https://bugzilla.suse.com/1203514" source="BUGZILLA"/>
		<reference ref_id="1203860" ref_url="https://bugzilla.suse.com/1203860" source="BUGZILLA"/>
		<reference ref_id="1203960" ref_url="https://bugzilla.suse.com/1203960" source="BUGZILLA"/>
		<reference ref_id="1204017" ref_url="https://bugzilla.suse.com/1204017" source="BUGZILLA"/>
		<reference ref_id="1204166" ref_url="https://bugzilla.suse.com/1204166" source="BUGZILLA"/>
		<reference ref_id="1204170" ref_url="https://bugzilla.suse.com/1204170" source="BUGZILLA"/>
		<reference ref_id="1204354" ref_url="https://bugzilla.suse.com/1204354" source="BUGZILLA"/>
		<reference ref_id="1204355" ref_url="https://bugzilla.suse.com/1204355" source="BUGZILLA"/>
		<reference ref_id="1204402" ref_url="https://bugzilla.suse.com/1204402" source="BUGZILLA"/>
		<reference ref_id="1204414" ref_url="https://bugzilla.suse.com/1204414" source="BUGZILLA"/>
		<reference ref_id="1204415" ref_url="https://bugzilla.suse.com/1204415" source="BUGZILLA"/>
		<reference ref_id="1204424" ref_url="https://bugzilla.suse.com/1204424" source="BUGZILLA"/>
		<reference ref_id="1204431" ref_url="https://bugzilla.suse.com/1204431" source="BUGZILLA"/>
		<reference ref_id="1204432" ref_url="https://bugzilla.suse.com/1204432" source="BUGZILLA"/>
		<reference ref_id="1204439" ref_url="https://bugzilla.suse.com/1204439" source="BUGZILLA"/>
		<reference ref_id="1204446" ref_url="https://bugzilla.suse.com/1204446" source="BUGZILLA"/>
		<reference ref_id="1204479" ref_url="https://bugzilla.suse.com/1204479" source="BUGZILLA"/>
		<reference ref_id="1204574" ref_url="https://bugzilla.suse.com/1204574" source="BUGZILLA"/>
		<reference ref_id="1204576" ref_url="https://bugzilla.suse.com/1204576" source="BUGZILLA"/>
		<reference ref_id="1204631" ref_url="https://bugzilla.suse.com/1204631" source="BUGZILLA"/>
		<reference ref_id="1204635" ref_url="https://bugzilla.suse.com/1204635" source="BUGZILLA"/>
		<reference ref_id="1204636" ref_url="https://bugzilla.suse.com/1204636" source="BUGZILLA"/>
		<reference ref_id="1204646" ref_url="https://bugzilla.suse.com/1204646" source="BUGZILLA"/>
		<reference ref_id="1204647" ref_url="https://bugzilla.suse.com/1204647" source="BUGZILLA"/>
		<reference ref_id="1204653" ref_url="https://bugzilla.suse.com/1204653" source="BUGZILLA"/>
		<reference ref_id="1204850" ref_url="https://bugzilla.suse.com/1204850" source="BUGZILLA"/>
		<reference ref_id="1204868" ref_url="https://bugzilla.suse.com/1204868" source="BUGZILLA"/>
		<reference ref_id="1205006" ref_url="https://bugzilla.suse.com/1205006" source="BUGZILLA"/>
		<reference ref_id="1205128" ref_url="https://bugzilla.suse.com/1205128" source="BUGZILLA"/>
		<reference ref_id="1205220" ref_url="https://bugzilla.suse.com/1205220" source="BUGZILLA"/>
		<reference ref_id="1205473" ref_url="https://bugzilla.suse.com/1205473" source="BUGZILLA"/>
		<reference ref_id="1205514" ref_url="https://bugzilla.suse.com/1205514" source="BUGZILLA"/>
		<reference ref_id="1205617" ref_url="https://bugzilla.suse.com/1205617" source="BUGZILLA"/>
		<reference ref_id="1205671" ref_url="https://bugzilla.suse.com/1205671" source="BUGZILLA"/>
		<reference ref_id="1205796" ref_url="https://bugzilla.suse.com/1205796" source="BUGZILLA"/>
		<reference ref_id="1206113" ref_url="https://bugzilla.suse.com/1206113" source="BUGZILLA"/>
		<reference ref_id="1206114" ref_url="https://bugzilla.suse.com/1206114" source="BUGZILLA"/>
		<reference ref_id="1206207" ref_url="https://bugzilla.suse.com/1206207" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4037" ref_url="https://www.suse.com/security/cve/CVE-2021-4037/" source="CVE"/>
		<reference ref_id="CVE-2022-2153" ref_url="https://www.suse.com/security/cve/CVE-2022-2153/" source="CVE"/>
		<reference ref_id="CVE-2022-28693" ref_url="https://www.suse.com/security/cve/CVE-2022-28693/" source="CVE"/>
		<reference ref_id="CVE-2022-2964" ref_url="https://www.suse.com/security/cve/CVE-2022-2964/" source="CVE"/>
		<reference ref_id="CVE-2022-3169" ref_url="https://www.suse.com/security/cve/CVE-2022-3169/" source="CVE"/>
		<reference ref_id="CVE-2022-3424" ref_url="https://www.suse.com/security/cve/CVE-2022-3424/" source="CVE"/>
		<reference ref_id="CVE-2022-3521" ref_url="https://www.suse.com/security/cve/CVE-2022-3521/" source="CVE"/>
		<reference ref_id="CVE-2022-3524" ref_url="https://www.suse.com/security/cve/CVE-2022-3524/" source="CVE"/>
		<reference ref_id="CVE-2022-3542" ref_url="https://www.suse.com/security/cve/CVE-2022-3542/" source="CVE"/>
		<reference ref_id="CVE-2022-3545" ref_url="https://www.suse.com/security/cve/CVE-2022-3545/" source="CVE"/>
		<reference ref_id="CVE-2022-3565" ref_url="https://www.suse.com/security/cve/CVE-2022-3565/" source="CVE"/>
		<reference ref_id="CVE-2022-3567" ref_url="https://www.suse.com/security/cve/CVE-2022-3567/" source="CVE"/>
		<reference ref_id="CVE-2022-3586" ref_url="https://www.suse.com/security/cve/CVE-2022-3586/" source="CVE"/>
		<reference ref_id="CVE-2022-3594" ref_url="https://www.suse.com/security/cve/CVE-2022-3594/" source="CVE"/>
		<reference ref_id="CVE-2022-3621" ref_url="https://www.suse.com/security/cve/CVE-2022-3621/" source="CVE"/>
		<reference ref_id="CVE-2022-3628" ref_url="https://www.suse.com/security/cve/CVE-2022-3628/" source="CVE"/>
		<reference ref_id="CVE-2022-3629" ref_url="https://www.suse.com/security/cve/CVE-2022-3629/" source="CVE"/>
		<reference ref_id="CVE-2022-3635" ref_url="https://www.suse.com/security/cve/CVE-2022-3635/" source="CVE"/>
		<reference ref_id="CVE-2022-3643" ref_url="https://www.suse.com/security/cve/CVE-2022-3643/" source="CVE"/>
		<reference ref_id="CVE-2022-3646" ref_url="https://www.suse.com/security/cve/CVE-2022-3646/" source="CVE"/>
		<reference ref_id="CVE-2022-3649" ref_url="https://www.suse.com/security/cve/CVE-2022-3649/" source="CVE"/>
		<reference ref_id="CVE-2022-3903" ref_url="https://www.suse.com/security/cve/CVE-2022-3903/" source="CVE"/>
		<reference ref_id="CVE-2022-40307" ref_url="https://www.suse.com/security/cve/CVE-2022-40307/" source="CVE"/>
		<reference ref_id="CVE-2022-40768" ref_url="https://www.suse.com/security/cve/CVE-2022-40768/" source="CVE"/>
		<reference ref_id="CVE-2022-4095" ref_url="https://www.suse.com/security/cve/CVE-2022-4095/" source="CVE"/>
		<reference ref_id="CVE-2022-41850" ref_url="https://www.suse.com/security/cve/CVE-2022-41850/" source="CVE"/>
		<reference ref_id="CVE-2022-41858" ref_url="https://www.suse.com/security/cve/CVE-2022-41858/" source="CVE"/>
		<reference ref_id="CVE-2022-42328" ref_url="https://www.suse.com/security/cve/CVE-2022-42328/" source="CVE"/>
		<reference ref_id="CVE-2022-42329" ref_url="https://www.suse.com/security/cve/CVE-2022-42329/" source="CVE"/>
		<reference ref_id="CVE-2022-42703" ref_url="https://www.suse.com/security/cve/CVE-2022-42703/" source="CVE"/>
		<reference ref_id="CVE-2022-42895" ref_url="https://www.suse.com/security/cve/CVE-2022-42895/" source="CVE"/>
		<reference ref_id="CVE-2022-42896" ref_url="https://www.suse.com/security/cve/CVE-2022-42896/" source="CVE"/>
		<reference ref_id="CVE-2022-43750" ref_url="https://www.suse.com/security/cve/CVE-2022-43750/" source="CVE"/>
		<reference ref_id="CVE-2022-4378" ref_url="https://www.suse.com/security/cve/CVE-2022-4378/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="CVE-2022-45934" ref_url="https://www.suse.com/security/cve/CVE-2022-45934/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013279.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-42328: Guests could trigger denial of service via the netback driver (bsc#1206114).
- CVE-2022-42329: Guests could trigger denial of service via the netback driver (bsc#1206113).
- CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver (bsc#1206113).
- CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631).
- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1204166).
- CVE-2022-41850: Fixed a race condition in roccat_report_event() in drivers/hid/hid-roccat.c (bsc#1203960).
- CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in net/bluetooth/l2cap_core.c (bsc#1205796).
- CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wifi/brcmfmac (bsc#1204868).
- CVE-2022-3567: Fixed a to race condition in inet6_stream_ops()/inet6_dgram_ops() (bsc#1204414).
- CVE-2022-41858: Fixed a denial of service in sl_tx_timeout() in drivers/net/slip (bsc#1205671).
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).
- CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).
- CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).
- CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set (bsc#1198702).
- CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's internal memory (bsc#1204653).
- CVE-2022-3542: Fixed memory leak in bnx2x_tpa_stop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c (bsc#1204402).
- CVE-2022-3629: Fixed memory leak in vsock_connect() in net/vmw_vsock/af_vsock.c (bsc#1204635).
- CVE-2022-3646: Fixed memory leak in nilfs_attach_log_writer() in fs/nilfs2/segment.c (bsc#1204646).
- CVE-2022-3649: Fixed use-after-free in nilfs_new_inode() in fs/nilfs2/inode.c (bsc#1204647).
- CVE-2022-3621: Fixed null pointer dereference in nilfs_bmap_lookup_at_level() in fs/nilfs2/inode.c (bsc#1204574).
- CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bsc#1204479).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3565: Fixed use-after-free in del_timer() in drivers/isdn/mISDN/l1oip_core.c (bsc#1204431).
- CVE-2022-3524: Fixed memory leak in ipv6_renew_options() in the IPv6 handler (bsc#1204354).
- CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory (bsc#1203514).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bsc#1204168).
- CVE-2022-3169: Fixed an denial of service though request to NVME_IOCTL_RESET and NVME_IOCTL_SUBSYS_RESET (bsc#1203290).
- CVE-2022-40307: Fixed a race condition that could had been exploited to trigger a use-after-free in the efi firmware capsule-loader.c (bsc#1203322).
- CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2cap_core.c's l2cap_parse_conf_req() which can be used to leak kernel pointers remotely (bsc#1205705).
- CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2cap_core.c's l2cap_connect() and l2cap_le_connect_req() which may have allowed code execution and leaking kernel memory (respectively) remotely via Bluetooth (bsc#1205709).
- CVE-2022-3545: Fixed a use-after-free vulnerability is area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-3521: Fixed a race condition in kcm_tx_work() of the file net/kcm/kcmsock.c (bsc#1204355).
- CVE-2022-2153: Fixed a NULL pointer dereference in KVM when attempting to set a SynIC IRQ (bsc#1200788).

The following non-security bugs were fixed:

- Drivers: hv: vmbus: Add VMbus IMC device to unsupported list (git-fixes).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Drop error message when 'No request id available' (bsc#1204017).
- Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (git-fixes).
- Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero (bsc#1204017).
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (git-fixes).
- Drivers: hv: vmbus: Fix potential crash on module unload (git-fixes).
- Drivers: hv: vmbus: Introduce {lock,unlock}_requestor() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Introduce vmbus_request_addr_match() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Introduce vmbus_sendpacket_getid() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Move __vmbus_open() (bsc#1204017).
- Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (git-fixes).
- hv_netvsc: Add check for kvmalloc_array (git-fixes).
- hv_netvsc: Add error handling while switching data path (bsc#1204850).
- hv_netvsc: Add validation for untrusted Hyper-V values (bsc#1204017).
- hv_netvsc: Cache the current data path to avoid duplicate call and message (bsc#1204017).
- hv_netvsc: Check VF datapath when sending traffic to VF (bsc#1204017).
- hv_netvsc: Fix error handling in netvsc_set_features() (git-fixes).
- hv_netvsc: Fix race between VF offering and VF association message from host (bsc#1204850).
- hv_netvsc: Print value of invalid ID in netvsc_send_{completion,tx_complete}() (bsc#1204017).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove (bsc#1204850).
- hv_netvsc: Remove unnecessary round_up for recv_completion_cnt (bsc#1204017).
- hv_netvsc: Reset the RSC count if NVSP_STAT_FAIL in netvsc_receive() (bsc#1204017).
- hv_netvsc: Sync offloading features to VF NIC (git-fixes).
- hv_netvsc: use netif_is_bond_master() instead of open code (git-fixes).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening (bsc#1204017).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH (bsc#1204017).
- ipv6: ping: fix wrong checksum for large frames (bsc#1203183).
- net: hyperv: remove use of bpf_op_t (git-fixes).
- net: netvsc: remove break after return (git-fixes).
- PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv() (bsc#1204446).
- PCI: hv: Add validation for untrusted Hyper-V values (bsc#1204017).
- PCI: hv: Drop msi_controller structure (bsc#1204446).
- PCI: hv: Fix a race condition when removing the device (bsc#1204446).
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (bsc#1200845).
- PCI: hv: Fix interrupt mapping for multi-MSI (bsc#1200845).
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (bsc#1200845).
- PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology (bsc#1199365).
- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (bsc#1204446).
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (bsc#1204017, bsc#1203860, bsc#1205617).
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (bsc#1204017, bsc#1205617).
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (bsc#1200845).
- PCI: hv: Make the code arch neutral by adding arch specific interfaces (bsc#1200845).
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (bsc#1200845).
- PCI: hv: Remove bus device removal unused refcount/functions (bsc#1204446).
- PCI: hv: Remove unnecessary use of %hx (bsc#1204446).
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (bsc#1200845).
- PCI: hv: Support for create interrupt v3 (git-fixes).
- PCI: hv: Use struct_size() helper (bsc#1204446).
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (bsc#1204017).
- Revert 'scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback()' (bsc#1204017).
- scsi: storvsc: Drop DID_TARGET_FAILURE use (git-fixes).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8 and newer (bsc#1204017).
- scsi: storvsc: Fix validation for unsolicited incoming packets (bsc#1204017).
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (git-fixes).
- scsi: storvsc: Resolve data race in storvsc_probe() (bsc#1204017).
- scsi: storvsc: Use blk_mq_unique_tag() to generate requestIDs (bsc#1204017).
- scsi: storvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening (bsc#1204017).
- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1204017).
- sunrpc: Re-purpose trace_svc_process (bsc#1205006).
- x86/cpu: Restore AMD's DE_CFG MSR after resume (bsc#1205473).
- x86/hyperv: Output host build info as normal Windows version number (git-fixes).
- x86/hyperv: Set pv_info.name to 'Hyper-V' (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-19"/>
	<updated date="2022-12-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198702">SUSE bug 1198702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199365">SUSE bug 1199365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200788">SUSE bug 1200788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200845">SUSE bug 1200845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201455">SUSE bug 1201455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202686">SUSE bug 1202686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203008">SUSE bug 1203008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203183">SUSE bug 1203183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203290">SUSE bug 1203290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203322">SUSE bug 1203322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203514">SUSE bug 1203514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203860">SUSE bug 1203860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203960">SUSE bug 1203960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204017">SUSE bug 1204017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204166">SUSE bug 1204166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204170">SUSE bug 1204170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204354">SUSE bug 1204354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204355">SUSE bug 1204355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204402">SUSE bug 1204402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204414">SUSE bug 1204414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204415">SUSE bug 1204415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204424">SUSE bug 1204424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204431">SUSE bug 1204431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204432">SUSE bug 1204432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204439">SUSE bug 1204439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204446">SUSE bug 1204446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204479">SUSE bug 1204479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204574">SUSE bug 1204574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204576">SUSE bug 1204576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204631">SUSE bug 1204631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204635">SUSE bug 1204635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204636">SUSE bug 1204636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204646">SUSE bug 1204646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204647">SUSE bug 1204647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204653">SUSE bug 1204653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204850">SUSE bug 1204850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204868">SUSE bug 1204868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205006">SUSE bug 1205006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205128">SUSE bug 1205128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205220">SUSE bug 1205220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205473">SUSE bug 1205473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205514">SUSE bug 1205514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205617">SUSE bug 1205617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205671">SUSE bug 1205671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205796">SUSE bug 1205796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206113">SUSE bug 1206113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206114">SUSE bug 1206114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206207">SUSE bug 1206207</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4037/">CVE-2021-4037</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2153/">CVE-2022-2153</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28693/">CVE-2022-28693</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2964/">CVE-2022-2964</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3169/">CVE-2022-3169</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3424/">CVE-2022-3424</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3521/">CVE-2022-3521</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3524/">CVE-2022-3524</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3542/">CVE-2022-3542</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3545/">CVE-2022-3545</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3565/">CVE-2022-3565</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3567/">CVE-2022-3567</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3586/">CVE-2022-3586</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3594/">CVE-2022-3594</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3621/">CVE-2022-3621</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3628/">CVE-2022-3628</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3629/">CVE-2022-3629</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3635/">CVE-2022-3635</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-3643/">CVE-2022-3643</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3646/">CVE-2022-3646</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3649/">CVE-2022-3649</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3903/">CVE-2022-3903</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40307/">CVE-2022-40307</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40768/">CVE-2022-40768</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4095/">CVE-2022-4095</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-41850/">CVE-2022-41850</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41858/">CVE-2022-41858</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42328/">CVE-2022-42328</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42329/">CVE-2022-42329</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42703/">CVE-2022-42703</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42895/">CVE-2022-42895</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-42896/">CVE-2022-42896</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43750/">CVE-2022-43750</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4378/">CVE-2022-4378</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-45934/">CVE-2022-45934</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728755" comment="kernel-default-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728756" comment="kernel-default-base-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728757" comment="kernel-default-devel-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728741" comment="kernel-devel-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728742" comment="kernel-docs-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728743" comment="kernel-macros-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728758" comment="kernel-obs-build-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728745" comment="kernel-source-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728759" comment="kernel-syms-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728760" comment="reiserfs-kmp-default-4.12.14-150100.197.131.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140697" version="1" class="patch">
	<metadata>
		<title>Security update for cni (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181961" ref_url="https://bugzilla.suse.com/1181961" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20206" ref_url="https://www.suse.com/security/cve/CVE-2021-20206/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4592-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013299.html" source="SUSE-SU"/>
		<description>
This update for cni fixes the following issues:

- CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-20"/>
	<updated date="2022-12-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181961">SUSE bug 1181961</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20206/">CVE-2021-20206</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725920" comment="cni-0.7.1-150100.3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140698" version="1" class="patch">
	<metadata>
		<title>Security update for cni-plugins (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181961" ref_url="https://bugzilla.suse.com/1181961" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20206" ref_url="https://www.suse.com/security/cve/CVE-2021-20206/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013297.html" source="SUSE-SU"/>
		<description>
This update for cni-plugins fixes the following issues:

- CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-20"/>
	<updated date="2022-12-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181961">SUSE bug 1181961</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20206/">CVE-2021-20206</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725921" comment="cni-plugins-0.8.6-150100.3.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140699" version="1" class="patch">
	<metadata>
		<title>Security update for supportutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1184689" ref_url="https://bugzilla.suse.com/1184689" source="BUGZILLA"/>
		<reference ref_id="1188086" ref_url="https://bugzilla.suse.com/1188086" source="BUGZILLA"/>
		<reference ref_id="1192252" ref_url="https://bugzilla.suse.com/1192252" source="BUGZILLA"/>
		<reference ref_id="1192648" ref_url="https://bugzilla.suse.com/1192648" source="BUGZILLA"/>
		<reference ref_id="1197428" ref_url="https://bugzilla.suse.com/1197428" source="BUGZILLA"/>
		<reference ref_id="1200330" ref_url="https://bugzilla.suse.com/1200330" source="BUGZILLA"/>
		<reference ref_id="1202269" ref_url="https://bugzilla.suse.com/1202269" source="BUGZILLA"/>
		<reference ref_id="1202337" ref_url="https://bugzilla.suse.com/1202337" source="BUGZILLA"/>
		<reference ref_id="1202417" ref_url="https://bugzilla.suse.com/1202417" source="BUGZILLA"/>
		<reference ref_id="1203818" ref_url="https://bugzilla.suse.com/1203818" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:4594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013300.html" source="SUSE-SU"/>
		<description>
This update for supportutils fixes the following issues:

Security issues fixed:

- Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818)

Bug fixes:

- Added lifecycle information
- Fixed KVM virtualization detection on bare metal (bsc#1184689)
- Added logging using journalctl (bsc#1200330)
- Get current sar data before collecting files (bsc#1192648)
- Collects everything in /etc/multipath/ (bsc#1192252)
- Collects power management information in hardware.txt (bsc#1197428)
- Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337)
- Fixed conf_files and conf_text_files so y2log is gathered (bsc#1202269)
- Update to nvme_info and block_info (bsc#1202417)
- Added includedir directories from /etc/sudoers (bsc#1188086)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-20"/>
	<updated date="2022-12-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1184689">SUSE bug 1184689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188086">SUSE bug 1188086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192252">SUSE bug 1192252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192648">SUSE bug 1192648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197428">SUSE bug 1197428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200330">SUSE bug 1200330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202269">SUSE bug 1202269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202337">SUSE bug 1202337</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202417">SUSE bug 1202417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203818">SUSE bug 1203818</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726711" comment="supportutils-3.1.21-150000.5.44.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140700" version="1" class="patch">
	<metadata>
		<title>Security update for freeradius-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1180525" ref_url="https://bugzilla.suse.com/1180525" source="BUGZILLA"/>
		<reference ref_id="1184016" ref_url="https://bugzilla.suse.com/1184016" source="BUGZILLA"/>
		<reference ref_id="1206204" ref_url="https://bugzilla.suse.com/1206204" source="BUGZILLA"/>
		<reference ref_id="1206205" ref_url="https://bugzilla.suse.com/1206205" source="BUGZILLA"/>
		<reference ref_id="1206206" ref_url="https://bugzilla.suse.com/1206206" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41859" ref_url="https://www.suse.com/security/cve/CVE-2022-41859/" source="CVE"/>
		<reference ref_id="CVE-2022-41860" ref_url="https://www.suse.com/security/cve/CVE-2022-41860/" source="CVE"/>
		<reference ref_id="CVE-2022-41861" ref_url="https://www.suse.com/security/cve/CVE-2022-41861/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013344.html" source="SUSE-SU"/>
		<description>
This update for freeradius-server fixes the following issues:

- CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204).
- CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205).
- CVE-2022-41861: Fixes a crash on invalid abinary data (bsc#1206206).
- move logrotate options into specific parts for each log as 'global' options
  will persist past and clobber global options in the main logrotate config (bsc#1180525)
- Fixed plaintext password entries in logfiles (bsc#1184016).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-27"/>
	<updated date="2022-12-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180525">SUSE bug 1180525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184016">SUSE bug 1184016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206204">SUSE bug 1206204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206205">SUSE bug 1206205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206206">SUSE bug 1206206</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-41859/">CVE-2022-41859</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41860/">CVE-2022-41860</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41861/">CVE-2022-41861</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728345" comment="freeradius-server-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728346" comment="freeradius-server-devel-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728347" comment="freeradius-server-krb5-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728348" comment="freeradius-server-ldap-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728349" comment="freeradius-server-libs-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728350" comment="freeradius-server-mysql-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728351" comment="freeradius-server-perl-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728352" comment="freeradius-server-postgresql-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728353" comment="freeradius-server-python-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728354" comment="freeradius-server-sqlite-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728355" comment="freeradius-server-utils-3.0.16-150000.3.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140701" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194576" ref_url="https://bugzilla.suse.com/1194576" source="BUGZILLA"/>
		<reference ref_id="1194581" ref_url="https://bugzilla.suse.com/1194581" source="BUGZILLA"/>
		<reference ref_id="1194588" ref_url="https://bugzilla.suse.com/1194588" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23033" ref_url="https://www.suse.com/security/cve/CVE-2022-23033/" source="CVE"/>
		<reference ref_id="CVE-2022-23034" ref_url="https://www.suse.com/security/cve/CVE-2022-23034/" source="CVE"/>
		<reference ref_id="CVE-2022-23035" ref_url="https://www.suse.com/security/cve/CVE-2022-23035/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010242.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-23033: Fixed guest_physmap_remove_page not removing the p2m mappings. (XSA-393) (bsc#1194576)
- CVE-2022-23034: Fixed possible DoS by a PV guest Xen while unmapping a grant. (XSA-394) (bsc#1194581)
- CVE-2022-23035: Fixed insufficient cleanup of passed-through device IRQs. (XSA-395) (bsc#1194588)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-17"/>
	<updated date="2022-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194576">SUSE bug 1194576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194581">SUSE bug 1194581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194588">SUSE bug 1194588</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23033/">CVE-2022-23033</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23034/">CVE-2022-23034</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23035/">CVE-2022-23035</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009665528" comment="xen-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665529" comment="xen-devel-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665530" comment="xen-libs-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665531" comment="xen-tools-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665532" comment="xen-tools-domU-4.12.4_18-3.60.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140702" version="1" class="patch">
	<metadata>
		<title>Security update for virglrenderer (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1195389" ref_url="https://bugzilla.suse.com/1195389" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0135" ref_url="https://www.suse.com/security/cve/CVE-2022-0135/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010243.html" source="SUSE-SU"/>
		<description>
This update for virglrenderer fixes the following issues:
	  
- CVE-2022-0135: Fixed out-of-bonds write in read_transfer_data() (bsc#1195389).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-17"/>
	<updated date="2022-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195389">SUSE bug 1195389</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0135/">CVE-2022-0135</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667316" comment="libvirglrenderer0-0.6.0-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667317" comment="virglrenderer-devel-0.6.0-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140703" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1071031" ref_url="https://bugzilla.suse.com/1071031" source="BUGZILLA"/>
		<reference ref_id="1154365" ref_url="https://bugzilla.suse.com/1154365" source="BUGZILLA"/>
		<reference ref_id="1182808" ref_url="https://bugzilla.suse.com/1182808" source="BUGZILLA"/>
		<reference ref_id="1182809" ref_url="https://bugzilla.suse.com/1182809" source="BUGZILLA"/>
		<reference ref_id="1182811" ref_url="https://bugzilla.suse.com/1182811" source="BUGZILLA"/>
		<reference ref_id="1182812" ref_url="https://bugzilla.suse.com/1182812" source="BUGZILLA"/>
		<reference ref_id="1190312" ref_url="https://bugzilla.suse.com/1190312" source="BUGZILLA"/>
		<reference ref_id="1194539" ref_url="https://bugzilla.suse.com/1194539" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17095" ref_url="https://www.suse.com/security/cve/CVE-2017-17095/" source="CVE"/>
		<reference ref_id="CVE-2019-17546" ref_url="https://www.suse.com/security/cve/CVE-2019-17546/" source="CVE"/>
		<reference ref_id="CVE-2020-19131" ref_url="https://www.suse.com/security/cve/CVE-2020-19131/" source="CVE"/>
		<reference ref_id="CVE-2020-35521" ref_url="https://www.suse.com/security/cve/CVE-2020-35521/" source="CVE"/>
		<reference ref_id="CVE-2020-35522" ref_url="https://www.suse.com/security/cve/CVE-2020-35522/" source="CVE"/>
		<reference ref_id="CVE-2020-35523" ref_url="https://www.suse.com/security/cve/CVE-2020-35523/" source="CVE"/>
		<reference ref_id="CVE-2020-35524" ref_url="https://www.suse.com/security/cve/CVE-2020-35524/" source="CVE"/>
		<reference ref_id="CVE-2022-22844" ref_url="https://www.suse.com/security/cve/CVE-2022-22844/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010245.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2017-17095: Fixed DoS in tools/pal2rgb.c in pal2rgb (bsc#1071031).
- CVE-2019-17546: Fixed integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image (bsc#1154365).
- CVE-2020-19131: Fixed buffer overflow in tiffcrop that may cause DoS via the invertImage() function (bsc#1190312).
- CVE-2020-35521: Fixed memory allocation failure in tif_read.c (bsc#1182808).
- CVE-2020-35522: Fixed memory allocation failure in tif_pixarlog.c (bsc#1182809).
- CVE-2020-35523: Fixed integer overflow in tif_getimage.c (bsc#1182811).
- CVE-2020-35524: Fixed heap-based buffer overflow in TIFF2PDF tool (bsc#1182812).
- CVE-2022-22844: Fixed out-of-bounds read in _TIFFmemcpy in tif_unix.c (bsc#1194539).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-17"/>
	<updated date="2022-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1071031">SUSE bug 1071031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154365">SUSE bug 1154365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182808">SUSE bug 1182808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182809">SUSE bug 1182809</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182811">SUSE bug 1182811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182812">SUSE bug 1182812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190312">SUSE bug 1190312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194539">SUSE bug 1194539</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17095/">CVE-2017-17095</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17546/">CVE-2019-17546</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-19131/">CVE-2020-19131</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35521/">CVE-2020-35521</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35522/">CVE-2020-35522</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35523/">CVE-2020-35523</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35524/">CVE-2020-35524</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22844/">CVE-2022-22844</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009665728" comment="libtiff-devel-4.0.9-45.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665729" comment="libtiff5-4.0.9-45.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665439" comment="libtiff5-32bit-4.0.9-45.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140704" version="1" class="patch">
	<metadata>
		<title>Security update for rust (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194767" ref_url="https://bugzilla.suse.com/1194767" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21658" ref_url="https://www.suse.com/security/cve/CVE-2022-21658/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010252.html" source="SUSE-SU"/>
		<description>
This update for rust fixes the following issues:

- CVE-2022-21658: Fixed race condition in std::fs::remove_dir_all (bsc#1194767).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1194767">SUSE bug 1194767</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21658/">CVE-2022-21658</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664579" comment="cargo-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664580" comment="rls-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664581" comment="rust-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664582" comment="rust-analysis-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664558" comment="rust-src-1.53.0-22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140705" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194731" ref_url="https://bugzilla.suse.com/1194731" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-20698" ref_url="https://www.suse.com/security/cve/CVE-2022-20698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010270.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

- CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194731">SUSE bug 1194731</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20698/">CVE-2022-20698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664574" comment="clamav-0.103.5-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664575" comment="clamav-devel-0.103.5-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664576" comment="libclamav9-0.103.5-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664577" comment="libfreshclam2-0.103.5-3.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140706" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1195054" ref_url="https://bugzilla.suse.com/1195054" source="BUGZILLA"/>
		<reference ref_id="1195217" ref_url="https://bugzilla.suse.com/1195217" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23852" ref_url="https://www.suse.com/security/cve/CVE-2022-23852/" source="CVE"/>
		<reference ref_id="CVE-2022-23990" ref_url="https://www.suse.com/security/cve/CVE-2022-23990/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010268.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

- CVE-2022-23852: Fixed signed integer overflow in XML_GetBuffer (bsc#1195054).
- CVE-2022-23990: Fixed integer overflow in the doProlog function (bsc#1195217).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195054">SUSE bug 1195054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195217">SUSE bug 1195217</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23852/">CVE-2022-23852</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23990/">CVE-2022-23990</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009665730" comment="expat-2.2.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665731" comment="libexpat-devel-2.2.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665732" comment="libexpat1-2.2.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665436" comment="libexpat1-32bit-2.2.5-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140707" version="1" class="patch">
	<metadata>
		<title>Security update for net-snmp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1027353" ref_url="https://bugzilla.suse.com/1027353" source="BUGZILLA"/>
		<reference ref_id="1081164" ref_url="https://bugzilla.suse.com/1081164" source="BUGZILLA"/>
		<reference ref_id="1102775" ref_url="https://bugzilla.suse.com/1102775" source="BUGZILLA"/>
		<reference ref_id="1108471" ref_url="https://bugzilla.suse.com/1108471" source="BUGZILLA"/>
		<reference ref_id="1111122" ref_url="https://bugzilla.suse.com/1111122" source="BUGZILLA"/>
		<reference ref_id="1116807" ref_url="https://bugzilla.suse.com/1116807" source="BUGZILLA"/>
		<reference ref_id="1140341" ref_url="https://bugzilla.suse.com/1140341" source="BUGZILLA"/>
		<reference ref_id="1145864" ref_url="https://bugzilla.suse.com/1145864" source="BUGZILLA"/>
		<reference ref_id="1152968" ref_url="https://bugzilla.suse.com/1152968" source="BUGZILLA"/>
		<reference ref_id="1174961" ref_url="https://bugzilla.suse.com/1174961" source="BUGZILLA"/>
		<reference ref_id="1178021" ref_url="https://bugzilla.suse.com/1178021" source="BUGZILLA"/>
		<reference ref_id="1178351" ref_url="https://bugzilla.suse.com/1178351" source="BUGZILLA"/>
		<reference ref_id="1179009" ref_url="https://bugzilla.suse.com/1179009" source="BUGZILLA"/>
		<reference ref_id="1179699" ref_url="https://bugzilla.suse.com/1179699" source="BUGZILLA"/>
		<reference ref_id="1181591" ref_url="https://bugzilla.suse.com/1181591" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-18065" ref_url="https://www.suse.com/security/cve/CVE-2018-18065/" source="CVE"/>
		<reference ref_id="CVE-2020-15862" ref_url="https://www.suse.com/security/cve/CVE-2020-15862/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009993.html" source="SUSE-SU"/>
		<description>
This update for net-snmp fixes the following issues:

- CVE-2020-15862: Make extended MIB read-only (bsc#1174961)
- CVE-2018-18065: Fix remote DoS in agent/helpers/table.c (bsc#1111122)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-11"/>
	<updated date="2022-01-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027353">SUSE bug 1027353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081164">SUSE bug 1081164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102775">SUSE bug 1102775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108471">SUSE bug 1108471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111122">SUSE bug 1111122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116807">SUSE bug 1116807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140341">SUSE bug 1140341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145864">SUSE bug 1145864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152968">SUSE bug 1152968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174961">SUSE bug 1174961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178021">SUSE bug 1178021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178351">SUSE bug 1178351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179009">SUSE bug 1179009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179699">SUSE bug 1179699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181591">SUSE bug 1181591</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18065/">CVE-2018-18065</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15862/">CVE-2020-15862</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009661279" comment="libsnmp30-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661280" comment="net-snmp-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661281" comment="net-snmp-devel-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661282" comment="perl-SNMP-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661283" comment="snmp-mibs-5.7.3-10.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140708" version="1" class="patch">
	<metadata>
		<title>Security update for xerces-j2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1195108" ref_url="https://bugzilla.suse.com/1195108" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23437" ref_url="https://www.suse.com/security/cve/CVE-2022-23437/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010265.html" source="SUSE-SU"/>
		<description>
This update for xerces-j2 fixes the following issues:
	  
- CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser (bsc#1195108).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195108">SUSE bug 1195108</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23437/">CVE-2022-23437</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667902" comment="xerces-j2-2.11.0-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667903" comment="xerces-j2-xml-apis-2.11.0-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667904" comment="xerces-j2-xml-resolver-2.11.0-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140709" version="1" class="patch">
	<metadata>
		<title>Security update for libsndfile (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194006" ref_url="https://bugzilla.suse.com/1194006" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4156" ref_url="https://www.suse.com/security/cve/CVE-2021-4156/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009992.html" source="SUSE-SU"/>
		<description>
This update for libsndfile fixes the following issues:

- CVE-2021-4156: Fixed heap buffer overflow in flac_buffer_copy that 
could potentially lead to heap exploitation (bsc#1194006).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-11"/>
	<updated date="2022-01-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194006">SUSE bug 1194006</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4156/">CVE-2021-4156</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009662466" comment="libsndfile-devel-1.0.28-5.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662467" comment="libsndfile1-1.0.28-5.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140710" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1192615" ref_url="https://bugzilla.suse.com/1192615" source="BUGZILLA"/>
		<reference ref_id="1195779" ref_url="https://bugzilla.suse.com/1195779" source="BUGZILLA"/>
		<reference ref_id="1195780" ref_url="https://bugzilla.suse.com/1195780" source="BUGZILLA"/>
		<reference ref_id="1195781" ref_url="https://bugzilla.suse.com/1195781" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0127" ref_url="https://www.suse.com/security/cve/CVE-2021-0127/" source="CVE"/>
		<reference ref_id="CVE-2021-0145" ref_url="https://www.suse.com/security/cve/CVE-2021-0145/" source="CVE"/>
		<reference ref_id="CVE-2021-0146" ref_url="https://www.suse.com/security/cve/CVE-2021-0146/" source="CVE"/>
		<reference ref_id="CVE-2021-33120" ref_url="https://www.suse.com/security/cve/CVE-2021-33120/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010285.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20220207 release.

- CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)
- CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)
- CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)
- CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)

- Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)
- Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-21"/>
	<updated date="2022-02-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192615">SUSE bug 1192615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195779">SUSE bug 1195779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195780">SUSE bug 1195780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195781">SUSE bug 1195781</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0127/">CVE-2021-0127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0145/">CVE-2021-0145</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0146/">CVE-2021-0146</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-33120/">CVE-2021-33120</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667906" comment="ucode-intel-20220207-3.206.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140711" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1191962" ref_url="https://bugzilla.suse.com/1191962" source="BUGZILLA"/>
		<reference ref_id="1191963" ref_url="https://bugzilla.suse.com/1191963" source="BUGZILLA"/>
		<reference ref_id="1192153" ref_url="https://bugzilla.suse.com/1192153" source="BUGZILLA"/>
		<reference ref_id="1192154" ref_url="https://bugzilla.suse.com/1192154" source="BUGZILLA"/>
		<reference ref_id="1192696" ref_url="https://bugzilla.suse.com/1192696" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23343" ref_url="https://www.suse.com/security/cve/CVE-2021-23343/" source="CVE"/>
		<reference ref_id="CVE-2021-32803" ref_url="https://www.suse.com/security/cve/CVE-2021-32803/" source="CVE"/>
		<reference ref_id="CVE-2021-32804" ref_url="https://www.suse.com/security/cve/CVE-2021-32804/" source="CVE"/>
		<reference ref_id="CVE-2021-3807" ref_url="https://www.suse.com/security/cve/CVE-2021-3807/" source="CVE"/>
		<reference ref_id="CVE-2021-3918" ref_url="https://www.suse.com/security/cve/CVE-2021-3918/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010304.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:
	  
- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).
- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).
- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).
- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).
- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-24"/>
	<updated date="2022-02-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191962">SUSE bug 1191962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191963">SUSE bug 1191963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192153">SUSE bug 1192153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192154">SUSE bug 1192154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192696">SUSE bug 1192696</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23343/">CVE-2021-23343</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32803/">CVE-2021-32803</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32804/">CVE-2021-32804</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3807/">CVE-2021-3807</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3918/">CVE-2021-3918</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009668316" comment="nodejs8-8.17.0-3.54.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668317" comment="nodejs8-devel-8.17.0-3.54.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668305" comment="nodejs8-docs-8.17.0-3.54.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668318" comment="npm8-8.17.0-3.54.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140712" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1195230" ref_url="https://bugzilla.suse.com/1195230" source="BUGZILLA"/>
		<reference ref_id="1195682" ref_url="https://bugzilla.suse.com/1195682" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22753" ref_url="https://www.suse.com/security/cve/CVE-2022-22753/" source="CVE"/>
		<reference ref_id="CVE-2022-22754" ref_url="https://www.suse.com/security/cve/CVE-2022-22754/" source="CVE"/>
		<reference ref_id="CVE-2022-22756" ref_url="https://www.suse.com/security/cve/CVE-2022-22756/" source="CVE"/>
		<reference ref_id="CVE-2022-22759" ref_url="https://www.suse.com/security/cve/CVE-2022-22759/" source="CVE"/>
		<reference ref_id="CVE-2022-22760" ref_url="https://www.suse.com/security/cve/CVE-2022-22760/" source="CVE"/>
		<reference ref_id="CVE-2022-22761" ref_url="https://www.suse.com/security/cve/CVE-2022-22761/" source="CVE"/>
		<reference ref_id="CVE-2022-22763" ref_url="https://www.suse.com/security/cve/CVE-2022-22763/" source="CVE"/>
		<reference ref_id="CVE-2022-22764" ref_url="https://www.suse.com/security/cve/CVE-2022-22764/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010331.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682)

- CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service
- CVE-2022-22754: Extensions could have bypassed permission confirmation during update
- CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable
- CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements
- CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types
- CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages
- CVE-2022-22763: Script Execution during invalid object state
- CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6


Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)

- Fixed an issue that allowed unexpected data to be submitted in some of our search telemetry
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-02"/>
	<updated date="2022-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195230">SUSE bug 1195230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195682">SUSE bug 1195682</bugzilla>
	<cve impact="critical" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22753/">CVE-2022-22753</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22754/">CVE-2022-22754</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22756/">CVE-2022-22756</cve>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22759/">CVE-2022-22759</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22760/">CVE-2022-22760</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22761/">CVE-2022-22761</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22763/">CVE-2022-22763</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22764/">CVE-2022-22764</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667825" comment="MozillaFirefox-91.6.0-150.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667826" comment="MozillaFirefox-devel-91.6.0-150.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667827" comment="MozillaFirefox-translations-common-91.6.0-150.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667828" comment="MozillaFirefox-translations-other-91.6.0-150.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140713" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1038980" ref_url="https://bugzilla.suse.com/1038980" source="BUGZILLA"/>
		<reference ref_id="1081790" ref_url="https://bugzilla.suse.com/1081790" source="BUGZILLA"/>
		<reference ref_id="1192050" ref_url="https://bugzilla.suse.com/1192050" source="BUGZILLA"/>
		<reference ref_id="1193041" ref_url="https://bugzilla.suse.com/1193041" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-9253" ref_url="https://www.suse.com/security/cve/CVE-2015-9253/" source="CVE"/>
		<reference ref_id="CVE-2017-8923" ref_url="https://www.suse.com/security/cve/CVE-2017-8923/" source="CVE"/>
		<reference ref_id="CVE-2021-21703" ref_url="https://www.suse.com/security/cve/CVE-2021-21703/" source="CVE"/>
		<reference ref_id="CVE-2021-21707" ref_url="https://www.suse.com/security/cve/CVE-2021-21707/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010332.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2021-21703: Fixed local privilege escalation via PHP-FPM (bsc#1192050).
- CVE-2021-21707: Fixed special character breaks path in xml parsing (bsc#1193041).
- CVE-2017-8923: Fixed denial of service (application crash) when using .= with a long string (zend_string_extend func in Zend/zend_string.h) (bsc#1038980).
- CVE-2015-9253: Fixed endless loop when the master process restarts a child process using program execution functions (bsc#1081790).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-02"/>
	<updated date="2022-03-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1038980">SUSE bug 1038980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081790">SUSE bug 1081790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192050">SUSE bug 1192050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193041">SUSE bug 1193041</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9253/">CVE-2015-9253</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8923/">CVE-2017-8923</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21703/">CVE-2021-21703</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21707/">CVE-2021-21707</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009668648" comment="apache2-mod_php7-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668649" comment="php7-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668650" comment="php7-bcmath-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668651" comment="php7-bz2-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668652" comment="php7-calendar-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668653" comment="php7-ctype-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668654" comment="php7-curl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668655" comment="php7-dba-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668656" comment="php7-devel-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668657" comment="php7-dom-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668658" comment="php7-enchant-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668659" comment="php7-exif-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668660" comment="php7-fastcgi-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668661" comment="php7-fileinfo-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668662" comment="php7-fpm-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668663" comment="php7-ftp-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668664" comment="php7-gd-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668665" comment="php7-gettext-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668666" comment="php7-gmp-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668667" comment="php7-iconv-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668668" comment="php7-intl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668669" comment="php7-json-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668670" comment="php7-ldap-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668671" comment="php7-mbstring-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668672" comment="php7-mysql-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668673" comment="php7-odbc-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668674" comment="php7-opcache-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668675" comment="php7-openssl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668676" comment="php7-pcntl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668677" comment="php7-pdo-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668542" comment="php7-pear-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668543" comment="php7-pear-Archive_Tar-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668678" comment="php7-pgsql-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668679" comment="php7-phar-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668680" comment="php7-posix-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668681" comment="php7-readline-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668682" comment="php7-shmop-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668683" comment="php7-snmp-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668684" comment="php7-soap-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668685" comment="php7-sockets-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668686" comment="php7-sodium-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668687" comment="php7-sqlite-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668688" comment="php7-sysvmsg-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668689" comment="php7-sysvsem-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668690" comment="php7-sysvshm-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668691" comment="php7-tidy-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668692" comment="php7-tokenizer-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668693" comment="php7-wddx-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668694" comment="php7-xmlreader-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668695" comment="php7-xmlrpc-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668696" comment="php7-xmlwriter-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668697" comment="php7-xsl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668698" comment="php7-zip-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668699" comment="php7-zlib-7.2.5-4.89.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140714" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1195255" ref_url="https://bugzilla.suse.com/1195255" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23181" ref_url="https://www.suse.com/security/cve/CVE-2022-23181/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010339.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2022-23181: Fixed time of check, time of use vulnerability that allowed local privilege escalation. (bsc#1195255)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195255">SUSE bug 1195255</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23181/">CVE-2022-23181</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009668573" comment="tomcat-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668574" comment="tomcat-admin-webapps-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668575" comment="tomcat-el-3_0-api-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668576" comment="tomcat-jsp-2_3-api-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668577" comment="tomcat-lib-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668578" comment="tomcat-servlet-4_0-api-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668579" comment="tomcat-webapps-9.0.36-4.70.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140715" version="1" class="patch">
	<metadata>
		<title>Security update for cyrus-sasl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196036" ref_url="https://bugzilla.suse.com/1196036" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24407" ref_url="https://www.suse.com/security/cve/CVE-2022-24407/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010340.html" source="SUSE-SU"/>
		<description>
This update for cyrus-sasl fixes the following issues:

- CVE-2022-24407: Fixed SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196036">SUSE bug 1196036</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24407/">CVE-2022-24407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669223" comment="cyrus-sasl-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669201" comment="cyrus-sasl-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669224" comment="cyrus-sasl-crammd5-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669203" comment="cyrus-sasl-crammd5-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669225" comment="cyrus-sasl-devel-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669226" comment="cyrus-sasl-digestmd5-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669206" comment="cyrus-sasl-digestmd5-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669227" comment="cyrus-sasl-gssapi-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669208" comment="cyrus-sasl-gssapi-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669228" comment="cyrus-sasl-otp-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669229" comment="cyrus-sasl-plain-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669211" comment="cyrus-sasl-plain-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669230" comment="cyrus-sasl-saslauthd-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669231" comment="cyrus-sasl-sqlauxprop-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669232" comment="libsasl2-3-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669215" comment="libsasl2-3-32bit-2.1.26-5.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140716" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1195064" ref_url="https://bugzilla.suse.com/1195064" source="BUGZILLA"/>
		<reference ref_id="1195735" ref_url="https://bugzilla.suse.com/1195735" source="BUGZILLA"/>
		<reference ref_id="1196133" ref_url="https://bugzilla.suse.com/1196133" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30934" ref_url="https://www.suse.com/security/cve/CVE-2021-30934/" source="CVE"/>
		<reference ref_id="CVE-2021-30936" ref_url="https://www.suse.com/security/cve/CVE-2021-30936/" source="CVE"/>
		<reference ref_id="CVE-2021-30951" ref_url="https://www.suse.com/security/cve/CVE-2021-30951/" source="CVE"/>
		<reference ref_id="CVE-2021-30952" ref_url="https://www.suse.com/security/cve/CVE-2021-30952/" source="CVE"/>
		<reference ref_id="CVE-2021-30953" ref_url="https://www.suse.com/security/cve/CVE-2021-30953/" source="CVE"/>
		<reference ref_id="CVE-2021-30954" ref_url="https://www.suse.com/security/cve/CVE-2021-30954/" source="CVE"/>
		<reference ref_id="CVE-2021-30984" ref_url="https://www.suse.com/security/cve/CVE-2021-30984/" source="CVE"/>
		<reference ref_id="CVE-2021-45481" ref_url="https://www.suse.com/security/cve/CVE-2021-45481/" source="CVE"/>
		<reference ref_id="CVE-2021-45482" ref_url="https://www.suse.com/security/cve/CVE-2021-45482/" source="CVE"/>
		<reference ref_id="CVE-2021-45483" ref_url="https://www.suse.com/security/cve/CVE-2021-45483/" source="CVE"/>
		<reference ref_id="CVE-2022-22589" ref_url="https://www.suse.com/security/cve/CVE-2022-22589/" source="CVE"/>
		<reference ref_id="CVE-2022-22590" ref_url="https://www.suse.com/security/cve/CVE-2022-22590/" source="CVE"/>
		<reference ref_id="CVE-2022-22592" ref_url="https://www.suse.com/security/cve/CVE-2022-22592/" source="CVE"/>
		<reference ref_id="CVE-2022-22594" ref_url="https://www.suse.com/security/cve/CVE-2022-22594/" source="CVE"/>
		<reference ref_id="CVE-2022-22620" ref_url="https://www.suse.com/security/cve/CVE-2022-22620/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010341.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.34.6 (bsc#1196133):

- CVE-2022-22620: Processing maliciously crafted web content may have lead to arbitrary code execution.

Update to version 2.34.5 (bsc#1195735):

- CVE-2022-22589: A validation issue was addressed with improved input sanitization.
- CVE-2022-22590: A use after free issue was addressed with improved memory management.
- CVE-2022-22592: A logic issue was addressed with improved state management.

Update to version 2.34.4 (bsc#1195064):

- CVE-2021-30934: A buffer overflow issue was addressed with improved memory handling.
- CVE-2021-30936: A use after free issue was addressed with improved memory management.
- CVE-2021-30951: A use after free issue was addressed with improved memory management.
- CVE-2021-30952: An integer overflow was addressed with improved input validation.
- CVE-2021-30953: An out-of-bounds read was addressed with improved bounds checking.
- CVE-2021-30954: A type confusion issue was addressed with improved memory handling.
- CVE-2021-30984: A race condition was addressed with improved state handling.
- CVE-2022-22594: A cross-origin issue in the IndexDB API was addressed with improved input validation.

The following CVEs were addressed in a previous update:

- CVE-2021-45481: Incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create.
- CVE-2021-45482: A use-after-free in WebCore::ContainerNode::firstChild.
- CVE-2021-45483: A use-after-free in WebCore::Frame::page.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195064">SUSE bug 1195064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195735">SUSE bug 1195735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196133">SUSE bug 1196133</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30934/">CVE-2021-30934</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30936/">CVE-2021-30936</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30951/">CVE-2021-30951</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30952/">CVE-2021-30952</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30953/">CVE-2021-30953</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30954/">CVE-2021-30954</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30984/">CVE-2021-30984</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45481/">CVE-2021-45481</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45482/">CVE-2021-45482</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45483/">CVE-2021-45483</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-22589/">CVE-2022-22589</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22590/">CVE-2022-22590</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-22592/">CVE-2022-22592</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22594/">CVE-2022-22594</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22620/">CVE-2022-22620</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670497" comment="libjavascriptcoregtk-4_0-18-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670498" comment="libwebkit2gtk-4_0-37-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670470" comment="libwebkit2gtk3-lang-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670499" comment="typelib-1_0-JavaScriptCore-4_0-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670500" comment="typelib-1_0-WebKit2-4_0-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670501" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670502" comment="webkit2gtk-4_0-injected-bundles-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670503" comment="webkit2gtk3-devel-2.34.6-3.97.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140717" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1191962" ref_url="https://bugzilla.suse.com/1191962" source="BUGZILLA"/>
		<reference ref_id="1191963" ref_url="https://bugzilla.suse.com/1191963" source="BUGZILLA"/>
		<reference ref_id="1192153" ref_url="https://bugzilla.suse.com/1192153" source="BUGZILLA"/>
		<reference ref_id="1192154" ref_url="https://bugzilla.suse.com/1192154" source="BUGZILLA"/>
		<reference ref_id="1192696" ref_url="https://bugzilla.suse.com/1192696" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23343" ref_url="https://www.suse.com/security/cve/CVE-2021-23343/" source="CVE"/>
		<reference ref_id="CVE-2021-32803" ref_url="https://www.suse.com/security/cve/CVE-2021-32803/" source="CVE"/>
		<reference ref_id="CVE-2021-32804" ref_url="https://www.suse.com/security/cve/CVE-2021-32804/" source="CVE"/>
		<reference ref_id="CVE-2021-3807" ref_url="https://www.suse.com/security/cve/CVE-2021-3807/" source="CVE"/>
		<reference ref_id="CVE-2021-3918" ref_url="https://www.suse.com/security/cve/CVE-2021-3918/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010344.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).
- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).
- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).
- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).
- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191962">SUSE bug 1191962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191963">SUSE bug 1191963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192153">SUSE bug 1192153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192154">SUSE bug 1192154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192696">SUSE bug 1192696</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23343/">CVE-2021-23343</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32803/">CVE-2021-32803</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32804/">CVE-2021-32804</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3807/">CVE-2021-3807</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3918/">CVE-2021-3918</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669756" comment="nodejs-common-2.0-3.4.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140718" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196025" ref_url="https://bugzilla.suse.com/1196025" source="BUGZILLA"/>
		<reference ref_id="1196026" ref_url="https://bugzilla.suse.com/1196026" source="BUGZILLA"/>
		<reference ref_id="1196168" ref_url="https://bugzilla.suse.com/1196168" source="BUGZILLA"/>
		<reference ref_id="1196169" ref_url="https://bugzilla.suse.com/1196169" source="BUGZILLA"/>
		<reference ref_id="1196171" ref_url="https://bugzilla.suse.com/1196171" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25235" ref_url="https://www.suse.com/security/cve/CVE-2022-25235/" source="CVE"/>
		<reference ref_id="CVE-2022-25236" ref_url="https://www.suse.com/security/cve/CVE-2022-25236/" source="CVE"/>
		<reference ref_id="CVE-2022-25313" ref_url="https://www.suse.com/security/cve/CVE-2022-25313/" source="CVE"/>
		<reference ref_id="CVE-2022-25314" ref_url="https://www.suse.com/security/cve/CVE-2022-25314/" source="CVE"/>
		<reference ref_id="CVE-2022-25315" ref_url="https://www.suse.com/security/cve/CVE-2022-25315/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010357.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:
  
- CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs (bsc#1196025).
- CVE-2022-25235: Fixed UTF-8 character validation in a certain context (bsc#1196026).
- CVE-2022-25313: Fixed stack exhaustion in build_model() via uncontrolled recursion (bsc#1196168).
- CVE-2022-25314: Fixed integer overflow in copyString (bsc#1196169).
- CVE-2022-25315: Fixed integer overflow in storeRawNames (bsc#1196171).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196025">SUSE bug 1196025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196026">SUSE bug 1196026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196168">SUSE bug 1196168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196169">SUSE bug 1196169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196171">SUSE bug 1196171</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25235/">CVE-2022-25235</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25236/">CVE-2022-25236</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-25313/">CVE-2022-25313</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25314/">CVE-2022-25314</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25315/">CVE-2022-25315</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669220" comment="expat-2.2.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669221" comment="libexpat-devel-2.2.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669222" comment="libexpat1-2.2.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669165" comment="libexpat1-32bit-2.2.5-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140719" version="1" class="patch">
	<metadata>
		<title>Security update for wpa_supplicant (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1194732" ref_url="https://bugzilla.suse.com/1194732" source="BUGZILLA"/>
		<reference ref_id="1194733" ref_url="https://bugzilla.suse.com/1194733" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23303" ref_url="https://www.suse.com/security/cve/CVE-2022-23303/" source="CVE"/>
		<reference ref_id="CVE-2022-23304" ref_url="https://www.suse.com/security/cve/CVE-2022-23304/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010363.html" source="SUSE-SU"/>
		<description>
This update for wpa_supplicant fixes the following issues:
	  
- CVE-2022-23303: Fixed side-channel attacks in SAE (bsc#1194732).
- CVE-2022-23304: Fixed side-channel attacks in EAP-pwd (bsc#1194733).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194732">SUSE bug 1194732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194733">SUSE bug 1194733</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23303/">CVE-2022-23303</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23304/">CVE-2022-23304</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669219" comment="wpa_supplicant-2.9-4.33.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140720" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1195786" ref_url="https://bugzilla.suse.com/1195786" source="BUGZILLA"/>
		<reference ref_id="1196333" ref_url="https://bugzilla.suse.com/1196333" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0066" ref_url="https://www.suse.com/security/cve/CVE-2021-0066/" source="CVE"/>
		<reference ref_id="CVE-2021-0072" ref_url="https://www.suse.com/security/cve/CVE-2021-0072/" source="CVE"/>
		<reference ref_id="CVE-2021-0076" ref_url="https://www.suse.com/security/cve/CVE-2021-0076/" source="CVE"/>
		<reference ref_id="CVE-2021-0161" ref_url="https://www.suse.com/security/cve/CVE-2021-0161/" source="CVE"/>
		<reference ref_id="CVE-2021-0164" ref_url="https://www.suse.com/security/cve/CVE-2021-0164/" source="CVE"/>
		<reference ref_id="CVE-2021-0165" ref_url="https://www.suse.com/security/cve/CVE-2021-0165/" source="CVE"/>
		<reference ref_id="CVE-2021-0166" ref_url="https://www.suse.com/security/cve/CVE-2021-0166/" source="CVE"/>
		<reference ref_id="CVE-2021-0168" ref_url="https://www.suse.com/security/cve/CVE-2021-0168/" source="CVE"/>
		<reference ref_id="CVE-2021-0170" ref_url="https://www.suse.com/security/cve/CVE-2021-0170/" source="CVE"/>
		<reference ref_id="CVE-2021-0172" ref_url="https://www.suse.com/security/cve/CVE-2021-0172/" source="CVE"/>
		<reference ref_id="CVE-2021-0173" ref_url="https://www.suse.com/security/cve/CVE-2021-0173/" source="CVE"/>
		<reference ref_id="CVE-2021-0174" ref_url="https://www.suse.com/security/cve/CVE-2021-0174/" source="CVE"/>
		<reference ref_id="CVE-2021-0175" ref_url="https://www.suse.com/security/cve/CVE-2021-0175/" source="CVE"/>
		<reference ref_id="CVE-2021-0176" ref_url="https://www.suse.com/security/cve/CVE-2021-0176/" source="CVE"/>
		<reference ref_id="CVE-2021-0183" ref_url="https://www.suse.com/security/cve/CVE-2021-0183/" source="CVE"/>
		<reference ref_id="CVE-2021-33139" ref_url="https://www.suse.com/security/cve/CVE-2021-33139/" source="CVE"/>
		<reference ref_id="CVE-2021-33155" ref_url="https://www.suse.com/security/cve/CVE-2021-33155/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

- Update Intel Wireless firmware for 9xxx (CVE-2021-0161,
  CVE-2021-0164,CVE-2021-0165,CVE-2021-0066,CVE-2021-0166,
  CVE-2021-0168,CVE-2021-0170,CVE-2021-0172,CVE-2021-0173,
  CVE-2021-0174,CVE-2021-0175,CVE-2021-0076,CVE-2021-0176,
  CVE-2021-0183,CVE-2021-0072,INTEL-SA-00539,bsc#1196333):
  iwlwifi-9000-pu-b0-jf-b0-46.ucode
  iwlwifi-9000-pu-b0-jf-b0-46.ucode
- Update Intel Bluetooth firmware (CVE-2021-33139,CVE-2021-33155,
  INTEL-SA-00604,bsc#1195786)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195786">SUSE bug 1195786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0066/">CVE-2021-0066</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0072/">CVE-2021-0072</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0076/">CVE-2021-0076</cve>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0161/">CVE-2021-0161</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0164/">CVE-2021-0164</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0165/">CVE-2021-0165</cve>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0166/">CVE-2021-0166</cve>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0168/">CVE-2021-0168</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0170/">CVE-2021-0170</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0172/">CVE-2021-0172</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0173/">CVE-2021-0173</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0174/">CVE-2021-0174</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0175/">CVE-2021-0175</cve>
	<cve impact="important" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0176/">CVE-2021-0176</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0183/">CVE-2021-0183</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33139/">CVE-2021-33139</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33155/">CVE-2021-33155</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669993" comment="kernel-firmware-20200107-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669994" comment="ucode-amd-20200107-3.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140721" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1195866" ref_url="https://bugzilla.suse.com/1195866" source="BUGZILLA"/>
		<reference ref_id="1195867" ref_url="https://bugzilla.suse.com/1195867" source="BUGZILLA"/>
		<reference ref_id="1195868" ref_url="https://bugzilla.suse.com/1195868" source="BUGZILLA"/>
		<reference ref_id="1195869" ref_url="https://bugzilla.suse.com/1195869" source="BUGZILLA"/>
		<reference ref_id="1195870" ref_url="https://bugzilla.suse.com/1195870" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0581" ref_url="https://www.suse.com/security/cve/CVE-2022-0581/" source="CVE"/>
		<reference ref_id="CVE-2022-0582" ref_url="https://www.suse.com/security/cve/CVE-2022-0582/" source="CVE"/>
		<reference ref_id="CVE-2022-0583" ref_url="https://www.suse.com/security/cve/CVE-2022-0583/" source="CVE"/>
		<reference ref_id="CVE-2022-0585" ref_url="https://www.suse.com/security/cve/CVE-2022-0585/" source="CVE"/>
		<reference ref_id="CVE-2022-0586" ref_url="https://www.suse.com/security/cve/CVE-2022-0586/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010360.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

Update to Wireshark 3.6.2:

- CVE-2022-0586: RTMPT dissector infinite loop (bsc#1195866)
- CVE-2022-0585: Large loops in multiple dissectors (bsc#1195867)
- CVE-2022-0583: PVFS dissector crash (bsc#1195868)
- CVE-2022-0582: CSN.1 dissector crash (bsc#1195869)
- CVE-2022-0581: CMS dissector crash (bsc#1195870)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195866">SUSE bug 1195866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195867">SUSE bug 1195867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195868">SUSE bug 1195868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195869">SUSE bug 1195869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195870">SUSE bug 1195870</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0581/">CVE-2022-0581</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0582/">CVE-2022-0582</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0583/">CVE-2022-0583</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0585/">CVE-2022-0585</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0586/">CVE-2022-0586</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670075" comment="libwireshark15-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670076" comment="libwiretap12-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670077" comment="libwsutil13-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669038" comment="wireshark-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669039" comment="wireshark-devel-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669040" comment="wireshark-ui-qt-3.6.2-3.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140722" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1195325" ref_url="https://bugzilla.suse.com/1195325" source="BUGZILLA"/>
		<reference ref_id="1195334" ref_url="https://bugzilla.suse.com/1195334" source="BUGZILLA"/>
		<reference ref_id="1195339" ref_url="https://bugzilla.suse.com/1195339" source="BUGZILLA"/>
		<reference ref_id="1196016" ref_url="https://bugzilla.suse.com/1196016" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46657" ref_url="https://www.suse.com/security/cve/CVE-2021-46657/" source="CVE"/>
		<reference ref_id="CVE-2021-46658" ref_url="https://www.suse.com/security/cve/CVE-2021-46658/" source="CVE"/>
		<reference ref_id="CVE-2021-46659" ref_url="https://www.suse.com/security/cve/CVE-2021-46659/" source="CVE"/>
		<reference ref_id="CVE-2021-46661" ref_url="https://www.suse.com/security/cve/CVE-2021-46661/" source="CVE"/>
		<reference ref_id="CVE-2021-46663" ref_url="https://www.suse.com/security/cve/CVE-2021-46663/" source="CVE"/>
		<reference ref_id="CVE-2021-46664" ref_url="https://www.suse.com/security/cve/CVE-2021-46664/" source="CVE"/>
		<reference ref_id="CVE-2021-46665" ref_url="https://www.suse.com/security/cve/CVE-2021-46665/" source="CVE"/>
		<reference ref_id="CVE-2021-46668" ref_url="https://www.suse.com/security/cve/CVE-2021-46668/" source="CVE"/>
		<reference ref_id="CVE-2022-24048" ref_url="https://www.suse.com/security/cve/CVE-2022-24048/" source="CVE"/>
		<reference ref_id="CVE-2022-24050" ref_url="https://www.suse.com/security/cve/CVE-2022-24050/" source="CVE"/>
		<reference ref_id="CVE-2022-24051" ref_url="https://www.suse.com/security/cve/CVE-2022-24051/" source="CVE"/>
		<reference ref_id="CVE-2022-24052" ref_url="https://www.suse.com/security/cve/CVE-2022-24052/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010354.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

- Update to 10.2.43 (bsc#1196016):
    10.2.43: CVE-2021-46665
             CVE-2021-46664
             CVE-2021-46661
             CVE-2021-46668
             CVE-2021-46663 
    10.2.42: CVE-2022-24052
             CVE-2022-24051
             CVE-2022-24050
             CVE-2022-24048
             CVE-2021-46659, bsc#1195339
	     
- The following issues have already been fixed in this package but weren't 
previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195325">SUSE bug 1195325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195334">SUSE bug 1195334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195339">SUSE bug 1195339</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196016">SUSE bug 1196016</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46657/">CVE-2021-46657</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46658/">CVE-2021-46658</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46659/">CVE-2021-46659</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46661/">CVE-2021-46661</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46663/">CVE-2021-46663</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46664/">CVE-2021-46664</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46665/">CVE-2021-46665</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46668/">CVE-2021-46668</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24048/">CVE-2022-24048</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24050/">CVE-2022-24050</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24051/">CVE-2022-24051</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24052/">CVE-2022-24052</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669786" comment="libmysqld-devel-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669787" comment="libmysqld19-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669788" comment="mariadb-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669789" comment="mariadb-client-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669761" comment="mariadb-errormessages-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669790" comment="mariadb-tools-10.2.43-3.51.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140723" version="1" class="patch">
	<metadata>
		<title>Security update for zsh (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1163882" ref_url="https://bugzilla.suse.com/1163882" source="BUGZILLA"/>
		<reference ref_id="1196435" ref_url="https://bugzilla.suse.com/1196435" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20044" ref_url="https://www.suse.com/security/cve/CVE-2019-20044/" source="CVE"/>
		<reference ref_id="CVE-2021-45444" ref_url="https://www.suse.com/security/cve/CVE-2021-45444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010365.html" source="SUSE-SU"/>
		<description>
This update for zsh fixes the following issues:

- CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be 
  executed related to prompt expansion (bsc#1196435).
- CVE-2019-20044: Fixed a vulnerability where shell privileges would not be
  properly dropped when unsetting the PRIVILEGED option (bsc#1163882).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1163882">SUSE bug 1163882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196435">SUSE bug 1196435</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-20044/">CVE-2019-20044</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-45444/">CVE-2021-45444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670479" comment="zsh-5.6-7.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140724" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1190533" ref_url="https://bugzilla.suse.com/1190533" source="BUGZILLA"/>
		<reference ref_id="1190570" ref_url="https://bugzilla.suse.com/1190570" source="BUGZILLA"/>
		<reference ref_id="1191893" ref_url="https://bugzilla.suse.com/1191893" source="BUGZILLA"/>
		<reference ref_id="1192478" ref_url="https://bugzilla.suse.com/1192478" source="BUGZILLA"/>
		<reference ref_id="1192481" ref_url="https://bugzilla.suse.com/1192481" source="BUGZILLA"/>
		<reference ref_id="1193294" ref_url="https://bugzilla.suse.com/1193294" source="BUGZILLA"/>
		<reference ref_id="1193298" ref_url="https://bugzilla.suse.com/1193298" source="BUGZILLA"/>
		<reference ref_id="1194216" ref_url="https://bugzilla.suse.com/1194216" source="BUGZILLA"/>
		<reference ref_id="1194556" ref_url="https://bugzilla.suse.com/1194556" source="BUGZILLA"/>
		<reference ref_id="1195004" ref_url="https://bugzilla.suse.com/1195004" source="BUGZILLA"/>
		<reference ref_id="1195066" ref_url="https://bugzilla.suse.com/1195066" source="BUGZILLA"/>
		<reference ref_id="1195126" ref_url="https://bugzilla.suse.com/1195126" source="BUGZILLA"/>
		<reference ref_id="1195202" ref_url="https://bugzilla.suse.com/1195202" source="BUGZILLA"/>
		<reference ref_id="1195356" ref_url="https://bugzilla.suse.com/1195356" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3778" ref_url="https://www.suse.com/security/cve/CVE-2021-3778/" source="CVE"/>
		<reference ref_id="CVE-2021-3796" ref_url="https://www.suse.com/security/cve/CVE-2021-3796/" source="CVE"/>
		<reference ref_id="CVE-2021-3872" ref_url="https://www.suse.com/security/cve/CVE-2021-3872/" source="CVE"/>
		<reference ref_id="CVE-2021-3927" ref_url="https://www.suse.com/security/cve/CVE-2021-3927/" source="CVE"/>
		<reference ref_id="CVE-2021-3928" ref_url="https://www.suse.com/security/cve/CVE-2021-3928/" source="CVE"/>
		<reference ref_id="CVE-2021-3984" ref_url="https://www.suse.com/security/cve/CVE-2021-3984/" source="CVE"/>
		<reference ref_id="CVE-2021-4019" ref_url="https://www.suse.com/security/cve/CVE-2021-4019/" source="CVE"/>
		<reference ref_id="CVE-2021-4193" ref_url="https://www.suse.com/security/cve/CVE-2021-4193/" source="CVE"/>
		<reference ref_id="CVE-2021-46059" ref_url="https://www.suse.com/security/cve/CVE-2021-46059/" source="CVE"/>
		<reference ref_id="CVE-2022-0318" ref_url="https://www.suse.com/security/cve/CVE-2022-0318/" source="CVE"/>
		<reference ref_id="CVE-2022-0319" ref_url="https://www.suse.com/security/cve/CVE-2022-0319/" source="CVE"/>
		<reference ref_id="CVE-2022-0351" ref_url="https://www.suse.com/security/cve/CVE-2022-0351/" source="CVE"/>
		<reference ref_id="CVE-2022-0361" ref_url="https://www.suse.com/security/cve/CVE-2022-0361/" source="CVE"/>
		<reference ref_id="CVE-2022-0413" ref_url="https://www.suse.com/security/cve/CVE-2022-0413/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010366.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).
- CVE-2021-3796: Fixed use-after-free in nv_replace() in normal.c (bsc#1190570).
- CVE-2021-3872: Fixed heap-based buffer overflow in win_redr_status() drawscreen.c (bsc#1191893).
- CVE-2021-3927: Fixed heap-based buffer overflow (bsc#1192481).
- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).
- CVE-2021-4019: Fixed heap-based buffer overflow (bsc#1193294).
- CVE-2021-3984: Fixed illegal memory access when C-indenting could have led to heap buffer overflow (bsc#1193298).
- CVE-2021-3778: Fixed heap-based buffer overflow in regexp_nfa.c (bsc#1190533).
- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).
- CVE-2021-46059: Fixed pointer dereference vulnerability via the vim_regexec_multi function at regexp.c (bsc#1194556).
- CVE-2022-0319: Fixded out-of-bounds read (bsc#1195066).
- CVE-2022-0351: Fixed uncontrolled recursion in eval7() (bsc#1195126).
- CVE-2022-0361: Fixed buffer overflow (bsc#1195126).
- CVE-2022-0413: Fixed use-after-free in src/ex_cmds.c (bsc#1195356).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190533">SUSE bug 1190533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190570">SUSE bug 1190570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191893">SUSE bug 1191893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192478">SUSE bug 1192478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192481">SUSE bug 1192481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193294">SUSE bug 1193294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193298">SUSE bug 1193298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194216">SUSE bug 1194216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194556">SUSE bug 1194556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195004">SUSE bug 1195004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195066">SUSE bug 1195066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195126">SUSE bug 1195126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195202">SUSE bug 1195202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195356">SUSE bug 1195356</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3778/">CVE-2021-3778</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3796/">CVE-2021-3796</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3872/">CVE-2021-3872</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3927/">CVE-2021-3927</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3928/">CVE-2021-3928</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3984/">CVE-2021-3984</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4019/">CVE-2021-4019</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4193/">CVE-2021-4193</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46059/">CVE-2021-46059</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0318/">CVE-2022-0318</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0319/">CVE-2022-0319</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0351/">CVE-2022-0351</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-0361/">CVE-2022-0361</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0413/">CVE-2022-0413</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670034" comment="gvim-8.0.1568-5.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670035" comment="vim-8.0.1568-5.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669882" comment="vim-data-8.0.1568-5.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669883" comment="vim-data-common-8.0.1568-5.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140725" version="1" class="patch">
	<metadata>
		<title>Security update for libcaca (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182731" ref_url="https://bugzilla.suse.com/1182731" source="BUGZILLA"/>
		<reference ref_id="1184751" ref_url="https://bugzilla.suse.com/1184751" source="BUGZILLA"/>
		<reference ref_id="1184752" ref_url="https://bugzilla.suse.com/1184752" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30498" ref_url="https://www.suse.com/security/cve/CVE-2021-30498/" source="CVE"/>
		<reference ref_id="CVE-2021-30499" ref_url="https://www.suse.com/security/cve/CVE-2021-30499/" source="CVE"/>
		<reference ref_id="CVE-2021-3410" ref_url="https://www.suse.com/security/cve/CVE-2021-3410/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0754-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010388.html" source="SUSE-SU"/>
		<description>
This update for libcaca fixes the following issues:

- CVE-2021-30499: Fixed a memory corruption issue when exporting troff sources (bsc#1184751).
- CVE-2021-30498: Fixed a memory corruption issue when exporting TGA images (bsc#1184752).
- CVE-2021-3410: Fixed an illegal WRITE memory access (bsc#1182731).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-08"/>
	<updated date="2022-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182731">SUSE bug 1182731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184751">SUSE bug 1184751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184752">SUSE bug 1184752</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30498/">CVE-2021-30498</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30499/">CVE-2021-30499</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3410/">CVE-2021-3410</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670727" comment="libcaca-devel-0.99.beta19.git20171003-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670728" comment="libcaca0-0.99.beta19.git20171003-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670729" comment="libcaca0-plugins-0.99.beta19.git20171003-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140726" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1185973" ref_url="https://bugzilla.suse.com/1185973" source="BUGZILLA"/>
		<reference ref_id="1191580" ref_url="https://bugzilla.suse.com/1191580" source="BUGZILLA"/>
		<reference ref_id="1194516" ref_url="https://bugzilla.suse.com/1194516" source="BUGZILLA"/>
		<reference ref_id="1195536" ref_url="https://bugzilla.suse.com/1195536" source="BUGZILLA"/>
		<reference ref_id="1195543" ref_url="https://bugzilla.suse.com/1195543" source="BUGZILLA"/>
		<reference ref_id="1195612" ref_url="https://bugzilla.suse.com/1195612" source="BUGZILLA"/>
		<reference ref_id="1195840" ref_url="https://bugzilla.suse.com/1195840" source="BUGZILLA"/>
		<reference ref_id="1195897" ref_url="https://bugzilla.suse.com/1195897" source="BUGZILLA"/>
		<reference ref_id="1195908" ref_url="https://bugzilla.suse.com/1195908" source="BUGZILLA"/>
		<reference ref_id="1195949" ref_url="https://bugzilla.suse.com/1195949" source="BUGZILLA"/>
		<reference ref_id="1195987" ref_url="https://bugzilla.suse.com/1195987" source="BUGZILLA"/>
		<reference ref_id="1196079" ref_url="https://bugzilla.suse.com/1196079" source="BUGZILLA"/>
		<reference ref_id="1196155" ref_url="https://bugzilla.suse.com/1196155" source="BUGZILLA"/>
		<reference ref_id="1196584" ref_url="https://bugzilla.suse.com/1196584" source="BUGZILLA"/>
		<reference ref_id="1196612" ref_url="https://bugzilla.suse.com/1196612" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44879" ref_url="https://www.suse.com/security/cve/CVE-2021-44879/" source="CVE"/>
		<reference ref_id="CVE-2022-0001" ref_url="https://www.suse.com/security/cve/CVE-2022-0001/" source="CVE"/>
		<reference ref_id="CVE-2022-0002" ref_url="https://www.suse.com/security/cve/CVE-2022-0002/" source="CVE"/>
		<reference ref_id="CVE-2022-0487" ref_url="https://www.suse.com/security/cve/CVE-2022-0487/" source="CVE"/>
		<reference ref_id="CVE-2022-0492" ref_url="https://www.suse.com/security/cve/CVE-2022-0492/" source="CVE"/>
		<reference ref_id="CVE-2022-0617" ref_url="https://www.suse.com/security/cve/CVE-2022-0617/" source="CVE"/>
		<reference ref_id="CVE-2022-0644" ref_url="https://www.suse.com/security/cve/CVE-2022-0644/" source="CVE"/>
		<reference ref_id="CVE-2022-0847" ref_url="https://www.suse.com/security/cve/CVE-2022-0847/" source="CVE"/>
		<reference ref_id="CVE-2022-24448" ref_url="https://www.suse.com/security/cve/CVE-2022-24448/" source="CVE"/>
		<reference ref_id="CVE-2022-24959" ref_url="https://www.suse.com/security/cve/CVE-2022-24959/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010395.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


Transient execution side-channel attacks attacking the Branch History Buffer (BHB),
named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.

The following security bugs were fixed:

- CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).
- CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).
- CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584).
- CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079)
- CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd() (bsc#1196155).
- CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987).
- CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897).
- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
- CVE-2022-24448: Fixed an issue in fs/nfs/dir.c. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612).


The following non-security bugs were fixed:

- crypto: af_alg - get_page upon reassignment to TX SGL (bsc#1195840).
- lib/iov_iter: initialize 'flags' in new pipe_buffer (bsc#1196584).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185973">SUSE bug 1185973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191580">SUSE bug 1191580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194516">SUSE bug 1194516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195536">SUSE bug 1195536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195543">SUSE bug 1195543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195612">SUSE bug 1195612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195840">SUSE bug 1195840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195897">SUSE bug 1195897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195908">SUSE bug 1195908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195949">SUSE bug 1195949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195987">SUSE bug 1195987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196079">SUSE bug 1196079</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196155">SUSE bug 1196155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196584">SUSE bug 1196584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196612">SUSE bug 1196612</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-44879/">CVE-2021-44879</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0001/">CVE-2022-0001</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0002/">CVE-2022-0002</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0487/">CVE-2022-0487</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0492/">CVE-2022-0492</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0617/">CVE-2022-0617</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0644/">CVE-2022-0644</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0847/">CVE-2022-0847</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-24448/">CVE-2022-24448</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-24959/">CVE-2022-24959</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671594" comment="kernel-default-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671595" comment="kernel-default-base-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671596" comment="kernel-default-devel-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671491" comment="kernel-devel-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671492" comment="kernel-docs-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671493" comment="kernel-macros-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671597" comment="kernel-obs-build-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671495" comment="kernel-source-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671598" comment="kernel-syms-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671599" comment="reiserfs-kmp-default-4.12.14-197.108.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140727" version="1" class="patch">
	<metadata>
		<title>Security update for tcpdump (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1195825" ref_url="https://bugzilla.suse.com/1195825" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16301" ref_url="https://www.suse.com/security/cve/CVE-2018-16301/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010403.html" source="SUSE-SU"/>
		<description>
This update for tcpdump fixes the following issues:

- CVE-2018-16301: Fixed segfault when handling large files (bsc#1195825).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1195825">SUSE bug 1195825</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16301/">CVE-2018-16301</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668003" comment="tcpdump-4.9.2-3.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140728" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196809" ref_url="https://bugzilla.suse.com/1196809" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26485" ref_url="https://www.suse.com/security/cve/CVE-2022-26485/" source="CVE"/>
		<reference ref_id="CVE-2022-26486" ref_url="https://www.suse.com/security/cve/CVE-2022-26486/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010409.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.6.1 ESR (bsc#1196809):

- CVE-2022-26485: Use-after-free in XSLT parameter processing
- CVE-2022-26486: Use-after-free in WebGPU IPC Framework
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196809">SUSE bug 1196809</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26485/">CVE-2022-26485</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26486/">CVE-2022-26486</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671590" comment="MozillaFirefox-91.6.1-150.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671591" comment="MozillaFirefox-devel-91.6.1-150.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671592" comment="MozillaFirefox-translations-common-91.6.1-150.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671593" comment="MozillaFirefox-translations-other-91.6.1-150.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140729" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196137" ref_url="https://bugzilla.suse.com/1196137" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:0779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010410.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- Remove hard log4j dependency, as it is not required by tomcat itself (bsc#1196137)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196137">SUSE bug 1196137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670690" comment="tomcat-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670691" comment="tomcat-admin-webapps-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670692" comment="tomcat-el-3_0-api-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670693" comment="tomcat-jsp-2_3-api-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670694" comment="tomcat-lib-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670695" comment="tomcat-servlet-4_0-api-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670696" comment="tomcat-webapps-9.0.36-4.73.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140730" version="1" class="patch">
	<metadata>
		<title>Security update for python-libxml2-python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196490" ref_url="https://bugzilla.suse.com/1196490" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23308" ref_url="https://www.suse.com/security/cve/CVE-2022-23308/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010416.html" source="SUSE-SU"/>
		<description>
This update for python-libxml2-python fixes the following issues:

- CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes (bsc#1196490).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-10"/>
	<updated date="2022-03-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196490">SUSE bug 1196490</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-23308/">CVE-2022-23308</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670504" comment="python2-libxml2-python-2.9.7-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670489" comment="python3-libxml2-python-2.9.7-3.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140731" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196900" ref_url="https://bugzilla.suse.com/1196900" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26381" ref_url="https://www.suse.com/security/cve/CVE-2022-26381/" source="CVE"/>
		<reference ref_id="CVE-2022-26383" ref_url="https://www.suse.com/security/cve/CVE-2022-26383/" source="CVE"/>
		<reference ref_id="CVE-2022-26384" ref_url="https://www.suse.com/security/cve/CVE-2022-26384/" source="CVE"/>
		<reference ref_id="CVE-2022-26386" ref_url="https://www.suse.com/security/cve/CVE-2022-26386/" source="CVE"/>
		<reference ref_id="CVE-2022-26387" ref_url="https://www.suse.com/security/cve/CVE-2022-26387/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010426.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.7.0 ESR (bsc#1196900):

- CVE-2022-26383: Browser window spoof using fullscreen mode
- CVE-2022-26384: iframe allow-scripts sandbox bypass
- CVE-2022-26387: Time-of-check time-of-use bug when verifying add-on signatures
- CVE-2022-26381: Use-after-free in text reflows
- CVE-2022-26386: Temporary files downloaded to /tmp and accessible by other local users
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196900">SUSE bug 1196900</bugzilla>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26381/">CVE-2022-26381</cve>
	<cve impact="critical" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-26383/">CVE-2022-26383</cve>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26384/">CVE-2022-26384</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26386/">CVE-2022-26386</cve>
	<cve impact="critical" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26387/">CVE-2022-26387</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009672530" comment="MozillaFirefox-91.7.0-150.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672531" comment="MozillaFirefox-devel-91.7.0-150.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672532" comment="MozillaFirefox-translations-common-91.7.0-150.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672533" comment="MozillaFirefox-translations-other-91.7.0-150.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140732" version="1" class="patch">
	<metadata>
		<title>Security update for SDL2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1181201" ref_url="https://bugzilla.suse.com/1181201" source="BUGZILLA"/>
		<reference ref_id="1181202" ref_url="https://bugzilla.suse.com/1181202" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14409" ref_url="https://www.suse.com/security/cve/CVE-2020-14409/" source="CVE"/>
		<reference ref_id="CVE-2020-14410" ref_url="https://www.suse.com/security/cve/CVE-2020-14410/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010429.html" source="SUSE-SU"/>
		<description>
This update for SDL2 fixes the following issues:

- CVE-2020-14409, CVE-2020-14410: Fixed overflow in surface pitch calculation (bsc#1181201, bsc#1181202).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181201">SUSE bug 1181201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181202">SUSE bug 1181202</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14409/">CVE-2020-14409</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14410/">CVE-2020-14410</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670730" comment="libSDL2-2_0-0-2.0.8-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670731" comment="libSDL2-devel-2.0.8-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140733" version="1" class="patch">
	<metadata>
		<title>Security update for sssd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182637" ref_url="https://bugzilla.suse.com/1182637" source="BUGZILLA"/>
		<reference ref_id="1189492" ref_url="https://bugzilla.suse.com/1189492" source="BUGZILLA"/>
		<reference ref_id="1190775" ref_url="https://bugzilla.suse.com/1190775" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3621" ref_url="https://www.suse.com/security/cve/CVE-2021-3621/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010431.html" source="SUSE-SU"/>
		<description>
This update for sssd fixes the following issues:

Security issues fixed:

- CVE-2021-3621: Fixed shell command injection in sssctl via the logs-fetch and cache-expire subcommands (bsc#1189492).

Non-security issues fixed:

- Create timestamp attribute in cache objects if missing. (bsc#1182637)
- Add 'ldap_ignore_unreadable_references' parameter to skip unreadable objects referenced by 'member' attributte (bsc#1190775).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182637">SUSE bug 1182637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189492">SUSE bug 1189492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190775">SUSE bug 1190775</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3621/">CVE-2021-3621</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671567" comment="libipa_hbac-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671568" comment="libipa_hbac0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671569" comment="libsss_certmap-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671570" comment="libsss_certmap0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671571" comment="libsss_idmap-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671572" comment="libsss_idmap0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671573" comment="libsss_nss_idmap-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671574" comment="libsss_nss_idmap0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671575" comment="libsss_simpleifp-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671576" comment="libsss_simpleifp0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671577" comment="python3-sssd-config-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671578" comment="sssd-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671462" comment="sssd-32bit-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671579" comment="sssd-ad-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671580" comment="sssd-dbus-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671581" comment="sssd-ipa-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671582" comment="sssd-krb5-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671583" comment="sssd-krb5-common-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671584" comment="sssd-ldap-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671585" comment="sssd-proxy-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671586" comment="sssd-tools-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671587" comment="sssd-wbclient-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671588" comment="sssd-wbclient-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671589" comment="sssd-winbind-idmap-1.16.1-8.64.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140734" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1193625" ref_url="https://bugzilla.suse.com/1193625" source="BUGZILLA"/>
		<reference ref_id="1194640" ref_url="https://bugzilla.suse.com/1194640" source="BUGZILLA"/>
		<reference ref_id="1194768" ref_url="https://bugzilla.suse.com/1194768" source="BUGZILLA"/>
		<reference ref_id="1194770" ref_url="https://bugzilla.suse.com/1194770" source="BUGZILLA"/>
		<reference ref_id="1195560" ref_url="https://bugzilla.suse.com/1195560" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-8985" ref_url="https://www.suse.com/security/cve/CVE-2015-8985/" source="CVE"/>
		<reference ref_id="CVE-2021-3999" ref_url="https://www.suse.com/security/cve/CVE-2021-3999/" source="CVE"/>
		<reference ref_id="CVE-2022-23218" ref_url="https://www.suse.com/security/cve/CVE-2022-23218/" source="CVE"/>
		<reference ref_id="CVE-2022-23219" ref_url="https://www.suse.com/security/cve/CVE-2022-23219/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010437.html" source="SUSE-SU"/>
		<description>

glibc was updated to fix the following issues:

Security issues fixed:

- CVE-2022-23219: Fixed Buffer overflow in sunrpc clnt_create for 'unix' (bsc#1194768)
- CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bsc#1194770)
- CVE-2021-3999: Fixed getcwd to set errno to ERANGE for size == 1 (bsc#1194640)
- CVE-2015-8985: Fixed Assertion failure in pop_fail_stack when executing a malformed regexp (bsc#1193625)

Also the following bug was fixed:

- Fix pthread_rwlock_try*lock stalls (bsc#1195560)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193625">SUSE bug 1193625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194640">SUSE bug 1194640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194768">SUSE bug 1194768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194770">SUSE bug 1194770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195560">SUSE bug 1195560</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8985/">CVE-2015-8985</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3999/">CVE-2021-3999</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-23218/">CVE-2022-23218</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-23219/">CVE-2022-23219</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669047" comment="glibc-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669025" comment="glibc-32bit-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669048" comment="glibc-devel-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669027" comment="glibc-devel-32bit-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669049" comment="glibc-devel-static-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669050" comment="glibc-extra-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669030" comment="glibc-i18ndata-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669031" comment="glibc-info-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669051" comment="glibc-locale-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669052" comment="glibc-locale-base-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669034" comment="glibc-locale-base-32bit-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669053" comment="glibc-profile-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669054" comment="glibc-utils-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669055" comment="nscd-2.26-13.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140735" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196025" ref_url="https://bugzilla.suse.com/1196025" source="BUGZILLA"/>
		<reference ref_id="1196784" ref_url="https://bugzilla.suse.com/1196784" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25236" ref_url="https://www.suse.com/security/cve/CVE-2022-25236/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010445.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

- Fixed a regression caused by the patch for CVE-2022-25236 (bsc#1196784).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-15"/>
	<updated date="2022-03-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196025">SUSE bug 1196025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196784">SUSE bug 1196784</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25236/">CVE-2022-25236</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671239" comment="expat-2.2.5-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671240" comment="libexpat-devel-2.2.5-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671241" comment="libexpat1-2.2.5-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671084" comment="libexpat1-32bit-2.2.5-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140736" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196877" ref_url="https://bugzilla.suse.com/1196877" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0778" ref_url="https://www.suse.com/security/cve/CVE-2022-0778/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010448.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-15"/>
	<updated date="2022-03-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196877">SUSE bug 1196877</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0778/">CVE-2022-0778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009672898" comment="libopenssl-1_1-devel-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672888" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672899" comment="libopenssl1_1-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672890" comment="libopenssl1_1-32bit-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672900" comment="libopenssl1_1-hmac-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672892" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672901" comment="openssl-1_1-1.1.0i-14.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140737" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196877" ref_url="https://bugzilla.suse.com/1196877" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0778" ref_url="https://www.suse.com/security/cve/CVE-2022-0778/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0856-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010450.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

- CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-15"/>
	<updated date="2022-03-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196877">SUSE bug 1196877</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0778/">CVE-2022-0778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009672902" comment="libopenssl-1_0_0-devel-1.0.2p-3.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672903" comment="libopenssl1_0_0-1.0.2p-3.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672904" comment="openssl-1_0_0-1.0.2p-3.49.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140738" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1  (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1182959" ref_url="https://bugzilla.suse.com/1182959" source="BUGZILLA"/>
		<reference ref_id="1195149" ref_url="https://bugzilla.suse.com/1195149" source="BUGZILLA"/>
		<reference ref_id="1195792" ref_url="https://bugzilla.suse.com/1195792" source="BUGZILLA"/>
		<reference ref_id="1195856" ref_url="https://bugzilla.suse.com/1195856" source="BUGZILLA"/>
		<reference ref_id="1196877" ref_url="https://bugzilla.suse.com/1196877" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0778" ref_url="https://www.suse.com/security/cve/CVE-2022-0778/" source="CVE"/>
		<description>
This update for openssl-1_1 fixes the following issues:

openssl-1_1:

- CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
- Fix PAC pointer authentication in ARM (bsc#1195856)
- Pull libopenssl-1_1 when updating openssl-1_1 with the same version (bsc#1195792)
- FIPS: Fix function and reason error codes (bsc#1182959)
- Enable zlib compression support (bsc#1195149)
    
glibc:

- Resolve installation issue of `glibc-devel` in SUSE Linux Enterprise Micro 5.1
    
linux-glibc-devel:

- Resolve installation issue of `linux-kernel-headers` in SUSE Linux Enterprise Micro 5.1

libxcrypt:

- Resolve installation issue of `libxcrypt-devel` in SUSE Linux Enterprise Micro 5.1

zlib:

- Resolve installation issue of `zlib-devel` in SUSE Linux Enterprise Micro 5.1
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-16"/>
	<updated date="2022-03-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182959">SUSE bug 1182959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195149">SUSE bug 1195149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195792">SUSE bug 1195792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195856">SUSE bug 1195856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196877">SUSE bug 1196877</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0778/">CVE-2022-0778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673286" comment="libminizip1-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673290" comment="libz1-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673208" comment="libz1-32bit-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673292" comment="minizip-devel-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673294" comment="zlib-devel-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673222" comment="zlib-devel-32bit-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673295" comment="zlib-devel-static-1.2.11-3.26.10 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140739" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1193314" ref_url="https://bugzilla.suse.com/1193314" source="BUGZILLA"/>
		<reference ref_id="1193444" ref_url="https://bugzilla.suse.com/1193444" source="BUGZILLA"/>
		<reference ref_id="1193491" ref_url="https://bugzilla.suse.com/1193491" source="BUGZILLA"/>
		<reference ref_id="1194926" ref_url="https://bugzilla.suse.com/1194926" source="BUGZILLA"/>
		<reference ref_id="1194928" ref_url="https://bugzilla.suse.com/1194928" source="BUGZILLA"/>
		<reference ref_id="1194929" ref_url="https://bugzilla.suse.com/1194929" source="BUGZILLA"/>
		<reference ref_id="1194931" ref_url="https://bugzilla.suse.com/1194931" source="BUGZILLA"/>
		<reference ref_id="1194932" ref_url="https://bugzilla.suse.com/1194932" source="BUGZILLA"/>
		<reference ref_id="1194933" ref_url="https://bugzilla.suse.com/1194933" source="BUGZILLA"/>
		<reference ref_id="1194934" ref_url="https://bugzilla.suse.com/1194934" source="BUGZILLA"/>
		<reference ref_id="1194935" ref_url="https://bugzilla.suse.com/1194935" source="BUGZILLA"/>
		<reference ref_id="1194937" ref_url="https://bugzilla.suse.com/1194937" source="BUGZILLA"/>
		<reference ref_id="1194939" ref_url="https://bugzilla.suse.com/1194939" source="BUGZILLA"/>
		<reference ref_id="1194940" ref_url="https://bugzilla.suse.com/1194940" source="BUGZILLA"/>
		<reference ref_id="1194941" ref_url="https://bugzilla.suse.com/1194941" source="BUGZILLA"/>
		<reference ref_id="1195163" ref_url="https://bugzilla.suse.com/1195163" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21248" ref_url="https://www.suse.com/security/cve/CVE-2022-21248/" source="CVE"/>
		<reference ref_id="CVE-2022-21282" ref_url="https://www.suse.com/security/cve/CVE-2022-21282/" source="CVE"/>
		<reference ref_id="CVE-2022-21283" ref_url="https://www.suse.com/security/cve/CVE-2022-21283/" source="CVE"/>
		<reference ref_id="CVE-2022-21293" ref_url="https://www.suse.com/security/cve/CVE-2022-21293/" source="CVE"/>
		<reference ref_id="CVE-2022-21294" ref_url="https://www.suse.com/security/cve/CVE-2022-21294/" source="CVE"/>
		<reference ref_id="CVE-2022-21296" ref_url="https://www.suse.com/security/cve/CVE-2022-21296/" source="CVE"/>
		<reference ref_id="CVE-2022-21299" ref_url="https://www.suse.com/security/cve/CVE-2022-21299/" source="CVE"/>
		<reference ref_id="CVE-2022-21305" ref_url="https://www.suse.com/security/cve/CVE-2022-21305/" source="CVE"/>
		<reference ref_id="CVE-2022-21340" ref_url="https://www.suse.com/security/cve/CVE-2022-21340/" source="CVE"/>
		<reference ref_id="CVE-2022-21341" ref_url="https://www.suse.com/security/cve/CVE-2022-21341/" source="CVE"/>
		<reference ref_id="CVE-2022-21349" ref_url="https://www.suse.com/security/cve/CVE-2022-21349/" source="CVE"/>
		<reference ref_id="CVE-2022-21360" ref_url="https://www.suse.com/security/cve/CVE-2022-21360/" source="CVE"/>
		<reference ref_id="CVE-2022-21365" ref_url="https://www.suse.com/security/cve/CVE-2022-21365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010457.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

Update to version jdk8u322 (icedtea-3.22.0)

Including the following security fixes:

- CVE-2022-21248, bsc#1194926: Enhance cross VM serialization
- CVE-2022-21283, bsc#1194937: Better String matching
- CVE-2022-21293, bsc#1194935: Improve String constructions
- CVE-2022-21294, bsc#1194934: Enhance construction of Identity maps
- CVE-2022-21282, bsc#1194933: Better resolution of URIs
- CVE-2022-21296, bsc#1194932: Improve SAX Parser configuration management
- CVE-2022-21299, bsc#1194931: Improved scanning of XML entities
- CVE-2022-21305, bsc#1194939: Better array indexing
- CVE-2022-21340, bsc#1194940: Verify Jar Verification
- CVE-2022-21341, bsc#1194941: Improve serial forms for transport
- CVE-2022-21349: Improve Solaris font rendering
- CVE-2022-21360, bsc#1194929: Enhance BMP image support
- CVE-2022-21365, bsc#1194928: Enhanced BMP processing
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-16"/>
	<updated date="2022-03-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193314">SUSE bug 1193314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193444">SUSE bug 1193444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193491">SUSE bug 1193491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194926">SUSE bug 1194926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194928">SUSE bug 1194928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194929">SUSE bug 1194929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194931">SUSE bug 1194931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194932">SUSE bug 1194932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194933">SUSE bug 1194933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194934">SUSE bug 1194934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194935">SUSE bug 1194935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194937">SUSE bug 1194937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194939">SUSE bug 1194939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194940">SUSE bug 1194940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194941">SUSE bug 1194941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195163">SUSE bug 1195163</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21248/">CVE-2022-21248</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21282/">CVE-2022-21282</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21283/">CVE-2022-21283</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21293/">CVE-2022-21293</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21294/">CVE-2022-21294</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21296/">CVE-2022-21296</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21299/">CVE-2022-21299</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21305/">CVE-2022-21305</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21340/">CVE-2022-21340</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21341/">CVE-2022-21341</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21349/">CVE-2022-21349</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21360/">CVE-2022-21360</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21365/">CVE-2022-21365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009672637" comment="java-1_8_0-openjdk-1.8.0.322-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672638" comment="java-1_8_0-openjdk-demo-1.8.0.322-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672639" comment="java-1_8_0-openjdk-devel-1.8.0.322-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672640" comment="java-1_8_0-openjdk-headless-1.8.0.322-3.64.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140740" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1197091" ref_url="https://bugzilla.suse.com/1197091" source="BUGZILLA"/>
		<reference ref_id="1197095" ref_url="https://bugzilla.suse.com/1197095" source="BUGZILLA"/>
		<reference ref_id="1197096" ref_url="https://bugzilla.suse.com/1197096" source="BUGZILLA"/>
		<reference ref_id="1197098" ref_url="https://bugzilla.suse.com/1197098" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22719" ref_url="https://www.suse.com/security/cve/CVE-2022-22719/" source="CVE"/>
		<reference ref_id="CVE-2022-22720" ref_url="https://www.suse.com/security/cve/CVE-2022-22720/" source="CVE"/>
		<reference ref_id="CVE-2022-22721" ref_url="https://www.suse.com/security/cve/CVE-2022-22721/" source="CVE"/>
		<reference ref_id="CVE-2022-23943" ref_url="https://www.suse.com/security/cve/CVE-2022-23943/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010499.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2022-23943: heap out-of-bounds write in mod_sed (bsc#1197098).
- CVE-2022-22720: HTTP request smuggling due to incorrect error handling (bsc#1197095).
- CVE-2022-22719: use of uninitialized value of in r:parsebody in mod_lua (bsc#1197091).
- CVE-2022-22721: possible buffer overflow with very large or unlimited LimitXMLRequestBody (bsc#1197096).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-22"/>
	<updated date="2022-03-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197091">SUSE bug 1197091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197095">SUSE bug 1197095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197096">SUSE bug 1197096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197098">SUSE bug 1197098</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22719/">CVE-2022-22719</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22720/">CVE-2022-22720</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22721/">CVE-2022-22721</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23943/">CVE-2022-23943</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673693" comment="apache2-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673694" comment="apache2-devel-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673679" comment="apache2-doc-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673695" comment="apache2-prefork-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673696" comment="apache2-utils-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673697" comment="apache2-worker-2.4.33-150000.3.66.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140741" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1196915" ref_url="https://bugzilla.suse.com/1196915" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26401" ref_url="https://www.suse.com/security/cve/CVE-2021-26401/" source="CVE"/>
		<reference ref_id="CVE-2022-0001" ref_url="https://www.suse.com/security/cve/CVE-2022-0001/" source="CVE"/>
		<reference ref_id="CVE-2022-0002" ref_url="https://www.suse.com/security/cve/CVE-2022-0002/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010501.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

Transient execution side-channel attacks attacking the Branch History Buffer (BHB),
named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.

- CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: BHB speculation issues (bsc#1196915).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-22"/>
	<updated date="2022-03-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196915">SUSE bug 1196915</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-26401/">CVE-2021-26401</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0001/">CVE-2022-0001</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0002/">CVE-2022-0002</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673267" comment="xen-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673268" comment="xen-devel-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673269" comment="xen-libs-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673270" comment="xen-tools-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673271" comment="xen-tools-domU-4.12.4_20-3.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140742" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1197135" ref_url="https://bugzilla.suse.com/1197135" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25220" ref_url="https://www.suse.com/security/cve/CVE-2021-25220/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0946-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010510.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- CVE-2021-25220: Fixed a DNS cache poisoning vulnerability due to loose
  caching rules (bsc#1197135).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-24"/>
	<updated date="2022-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197135">SUSE bug 1197135</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-25220/">CVE-2021-25220</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673918" comment="bind-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673919" comment="bind-chrootenv-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673920" comment="bind-devel-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673907" comment="bind-doc-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673921" comment="bind-utils-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673922" comment="libbind9-1600-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673923" comment="libdns1605-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673924" comment="libirs-devel-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673925" comment="libirs1601-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673926" comment="libisc1606-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673927" comment="libisccc1600-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673928" comment="libisccfg1600-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673929" comment="libns1604-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673917" comment="python3-bind-9.16.6-150000.12.60.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140743" version="1" class="patch">
	<metadata>
		<title>Security update for rmt-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1204285" ref_url="https://bugzilla.suse.com/1204285" source="BUGZILLA"/>
		<reference ref_id="1204769" ref_url="https://bugzilla.suse.com/1204769" source="BUGZILLA"/>
		<reference ref_id="1205089" ref_url="https://bugzilla.suse.com/1205089" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31254" ref_url="https://www.suse.com/security/cve/CVE-2022-31254/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0022-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013422.html" source="SUSE-SU"/>
		<description>
This update for rmt-server fixes the following issues:

Update to version 2.10:

- Add option to turn off system token support (bsc#1205089)
- Update the `last_seen_at` column on zypper service refresh
- Do not retry to import non-existing files in air-gapped mode (bsc#1204769)
- CVE-2022-31254: Fixed a local privilege escalation related to the packaging of rmt-server (bsc#1204285).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-03"/>
	<updated date="2023-01-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204285">SUSE bug 1204285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204769">SUSE bug 1204769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205089">SUSE bug 1205089</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31254/">CVE-2022-31254</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009730932" comment="rmt-server-2.10-150100.3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730933" comment="rmt-server-config-2.10-150100.3.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140744" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-BCL</platform>
		</affected>
		<reference ref_id="1186756" ref_url="https://bugzilla.suse.com/1186756" source="BUGZILLA"/>
		<reference ref_id="1186761" ref_url="https://bugzilla.suse.com/1186761" source="BUGZILLA"/>
		<reference ref_id="1187852" ref_url="https://bugzilla.suse.com/1187852" source="BUGZILLA"/>
		<reference ref_id="1189166" ref_url="https://bugzilla.suse.com/1189166" source="BUGZILLA"/>
		<reference ref_id="1190718" ref_url="https://bugzilla.suse.com/1190718" source="BUGZILLA"/>
		<reference ref_id="1190719" ref_url="https://bugzilla.suse.com/1190719" source="BUGZILLA"/>
		<reference ref_id="1190722" ref_url="https://bugzilla.suse.com/1190722" source="BUGZILLA"/>
		<reference ref_id="1190723" ref_url="https://bugzilla.suse.com/1190723" source="BUGZILLA"/>
		<reference ref_id="1190726" ref_url="https://bugzilla.suse.com/1190726" source="BUGZILLA"/>
		<reference ref_id="1190729" ref_url="https://bugzilla.suse.com/1190729" source="BUGZILLA"/>
		<reference ref_id="1190733" ref_url="https://bugzilla.suse.com/1190733" source="BUGZILLA"/>
		<reference ref_id="1190734" ref_url="https://bugzilla.suse.com/1190734" source="BUGZILLA"/>
		<reference ref_id="1190735" ref_url="https://bugzilla.suse.com/1190735" source="BUGZILLA"/>
		<reference ref_id="1206442" ref_url="https://bugzilla.suse.com/1206442" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-20891" ref_url="https://www.suse.com/security/cve/CVE-2020-20891/" source="CVE"/>
		<reference ref_id="CVE-2020-20892" ref_url="https://www.suse.com/security/cve/CVE-2020-20892/" source="CVE"/>
		<reference ref_id="CVE-2020-20895" ref_url="https://www.suse.com/security/cve/CVE-2020-20895/" source="CVE"/>
		<reference ref_id="CVE-2020-20896" ref_url="https://www.suse.com/security/cve/CVE-2020-20896/" source="CVE"/>
		<reference ref_id="CVE-2020-20899" ref_url="https://www.suse.com/security/cve/CVE-2020-20899/" source="CVE"/>
		<reference ref_id="CVE-2020-20902" ref_url="https://www.suse.com/security/cve/CVE-2020-20902/" source="CVE"/>
		<reference ref_id="CVE-2020-22037" ref_url="https://www.suse.com/security/cve/CVE-2020-22037/" source="CVE"/>
		<reference ref_id="CVE-2020-22042" ref_url="https://www.suse.com/security/cve/CVE-2020-22042/" source="CVE"/>
		<reference ref_id="CVE-2020-35965" ref_url="https://www.suse.com/security/cve/CVE-2020-35965/" source="CVE"/>
		<reference ref_id="CVE-2021-3566" ref_url="https://www.suse.com/security/cve/CVE-2021-3566/" source="CVE"/>
		<reference ref_id="CVE-2021-38092" ref_url="https://www.suse.com/security/cve/CVE-2021-38092/" source="CVE"/>
		<reference ref_id="CVE-2021-38093" ref_url="https://www.suse.com/security/cve/CVE-2021-38093/" source="CVE"/>
		<reference ref_id="CVE-2021-38094" ref_url="https://www.suse.com/security/cve/CVE-2021-38094/" source="CVE"/>
		<reference ref_id="CVE-2022-3109" ref_url="https://www.suse.com/security/cve/CVE-2022-3109/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0005-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013405.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

- CVE-2022-3109: Fixed null pointer dereference in vp3_decode_frame() (bsc#1206442).
- CVE-2020-22042: Fixed a denial of service vulnerability led by a memory leak in the link_filter_inouts function in libavfilter/graphparser.c. (bsc#1186761)
- CVE-2021-38094: Fixed an integer overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c (bsc#1190735).
- CVE-2021-38093: Fixed an integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c (bsc#1190734).
- CVE-2021-38092: Fixed an Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c (bsc#1190733).
- CVE-2020-22037: Fixed a denial of service vulnerability due to a memory leak in avcodec_alloc_context3 at options.c (bsc#1186756).
- CVE-2021-3566: Fixed an exposure of sensitive information on ffmpeg version prior to 4.3 (bsc#1189166).
- CVE-2020-35965: Fixed an out-of-bounds write in decode_frame in libavcodec/exr.c (bsc#1187852).
- CVE-2020-20892: Fixed a division by zero in function filter_frame in libavfilter/vf_lenscorrection.c (bsc#1190719).
- CVE-2020-20891: Fixed a buffer overflow vulnerability in function config_input in libavfilter/vf_gblur.c (bsc#1190718).
- CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name in libavfilter/vf_avgblur.c (bsc#1190722).
- CVE-2020-20896: Fixed a NULL pointer dereference in function latm_write_packet in libavformat/latmenc.c (bsc#1190723).
- CVE-2020-20899: Fixed a buffer overflow vulnerability in function config_props in libavfilter/vf_bwdif.c (bsc#1190726).
- CVE-2020-20902: Fixed an out-of-bounds read vulnerability in long_term_filter function in g729postfilter.c (bsc#1190729).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-02"/>
	<updated date="2023-01-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186756">SUSE bug 1186756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186761">SUSE bug 1186761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187852">SUSE bug 1187852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189166">SUSE bug 1189166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190718">SUSE bug 1190718</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190719">SUSE bug 1190719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190722">SUSE bug 1190722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190723">SUSE bug 1190723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190726">SUSE bug 1190726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190729">SUSE bug 1190729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190733">SUSE bug 1190733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190734">SUSE bug 1190734</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190735">SUSE bug 1190735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206442">SUSE bug 1206442</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20891/">CVE-2020-20891</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20892/">CVE-2020-20892</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20895/">CVE-2020-20895</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20896/">CVE-2020-20896</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20899/">CVE-2020-20899</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20902/">CVE-2020-20902</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22037/">CVE-2020-22037</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22042/">CVE-2020-22042</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35965/">CVE-2020-35965</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3566/">CVE-2021-3566</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38092/">CVE-2021-38092</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38093/">CVE-2021-38093</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38094/">CVE-2021-38094</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3109/">CVE-2022-3109</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles_bcl:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009722233" comment="SUSE Linux Enterprise Server 15 SP1-BCL is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009730557" comment="libavcodec-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730558" comment="libavcodec57-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730502" comment="libavcodec57-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730559" comment="libavdevice-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730560" comment="libavdevice57-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730505" comment="libavdevice57-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730561" comment="libavfilter-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730562" comment="libavfilter6-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730508" comment="libavfilter6-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730563" comment="libavformat-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730564" comment="libavformat57-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730511" comment="libavformat57-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730565" comment="libavresample-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730566" comment="libavresample3-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730514" comment="libavresample3-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730567" comment="libavutil-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730568" comment="libavutil55-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730517" comment="libavutil55-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730569" comment="libpostproc-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730570" comment="libpostproc54-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730520" comment="libpostproc54-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730571" comment="libswresample-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730572" comment="libswresample2-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730523" comment="libswresample2-32bit-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730573" comment="libswscale-devel-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730574" comment="libswscale4-3.4.2-150000.4.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730526" comment="libswscale4-32bit-3.4.2-150000.4.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140745" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183942" ref_url="https://bugzilla.suse.com/1183942" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23981" ref_url="https://www.suse.com/security/cve/CVE-2021-23981/" source="CVE"/>
		<reference ref_id="CVE-2021-23982" ref_url="https://www.suse.com/security/cve/CVE-2021-23982/" source="CVE"/>
		<reference ref_id="CVE-2021-23984" ref_url="https://www.suse.com/security/cve/CVE-2021-23984/" source="CVE"/>
		<reference ref_id="CVE-2021-23987" ref_url="https://www.suse.com/security/cve/CVE-2021-23987/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008579.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox was updated to 78.9.0 ESR  (MFSA 2021-11, bsc#1183942)
  * CVE-2021-23981: Texture upload into an unbound backing buffer resulted in an out-of-bound read
  * CVE-2021-23982: Internal network hosts could have been probed by a malicious webpage
  * CVE-2021-23984: Malicious extensions could have spoofed popup information
  * CVE-2021-23987: Memory safety bugs 	  
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-01"/>
	<updated date="2021-04-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183942">SUSE bug 1183942</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23981/">CVE-2021-23981</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23982/">CVE-2021-23982</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23984/">CVE-2021-23984</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23987/">CVE-2021-23987</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504716" comment="MozillaFirefox-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504717" comment="MozillaFirefox-branding-SLE-78-4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504718" comment="MozillaFirefox-devel-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504719" comment="MozillaFirefox-translations-common-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504720" comment="MozillaFirefox-translations-other-78.9.0-3.136.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493660" comment="mozilla-nspr-4.25.1-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493661" comment="mozilla-nspr-32bit-4.25.1-3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493662" comment="mozilla-nspr-devel-4.25.1-3.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140746" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180947" ref_url="https://bugzilla.suse.com/1180947" source="BUGZILLA"/>
		<reference ref_id="1182909" ref_url="https://bugzilla.suse.com/1182909" source="BUGZILLA"/>
		<reference ref_id="1182912" ref_url="https://bugzilla.suse.com/1182912" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-24122" ref_url="https://www.suse.com/security/cve/CVE-2021-24122/" source="CVE"/>
		<reference ref_id="CVE-2021-25122" ref_url="https://www.suse.com/security/cve/CVE-2021-25122/" source="CVE"/>
		<reference ref_id="CVE-2021-25329" ref_url="https://www.suse.com/security/cve/CVE-2021-25329/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1009-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008578.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2021-24122: Fixed an information disclosure if resources are served from the NTFS file system (bsc#1180947).
- CVE-2021-25122: Apache Tomcat h2c request mix-up (bsc#1182912)
- CVE-2021-25329: Complete fix for CVE-2020-9484 (bsc#1182909)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-01"/>
	<updated date="2021-04-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180947">SUSE bug 1180947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182909">SUSE bug 1182909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182912">SUSE bug 1182912</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-24122/">CVE-2021-24122</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-25122/">CVE-2021-25122</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25329/">CVE-2021-25329</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503831" comment="tomcat-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503832" comment="tomcat-admin-webapps-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503833" comment="tomcat-el-3_0-api-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503834" comment="tomcat-jsp-2_3-api-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503835" comment="tomcat-lib-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503836" comment="tomcat-servlet-4_0-api-9.0.36-4.58.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503837" comment="tomcat-webapps-9.0.36-4.58.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140747" version="1" class="patch">
	<metadata>
		<title>Security update for OpenIPMI (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183178" ref_url="https://bugzilla.suse.com/1183178" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:1010-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008580.html" source="SUSE-SU"/>
		<description>
This update for OpenIPMI fixes the following issues:

- Fixed an issue where OpenIPMI was creating non-position independent binaries (bsc#1183178).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-01"/>
	<updated date="2021-04-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1183178">SUSE bug 1183178</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493663" comment="OpenIPMI-2.0.25-7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493664" comment="OpenIPMI-devel-2.0.25-7.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140748" version="1" class="patch">
	<metadata>
		<title>Security update for fwupdate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182057" ref_url="https://bugzilla.suse.com/1182057" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:1104-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008599.html" source="SUSE-SU"/>
		<description>
This update for fwupdate fixes the following issues:

- Add SBAT section to EFI images (bsc#1182057)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-08"/>
	<updated date="2021-04-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182057">SUSE bug 1182057</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493673" comment="fwupdate-12-11.8.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493674" comment="fwupdate-devel-12-11.8.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493675" comment="fwupdate-efi-12-11.8.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493676" comment="libfwup1-12-11.8.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140749" version="1" class="patch">
	<metadata>
		<title>Security update for umoci (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184147" ref_url="https://bugzilla.suse.com/1184147" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29136" ref_url="https://www.suse.com/security/cve/CVE-2021-29136/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008608.html" source="SUSE-SU"/>
		<description>
This update for umoci fixes the following issues:

- Update to umoci v0.4.6.
- CVE-2021-29136: malicious layer allows overwriting of host files (bsc#1184147)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-09"/>
	<updated date="2021-04-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184147">SUSE bug 1184147</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29136/">CVE-2021-29136</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494420" comment="umoci-0.4.6-3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140750" version="1" class="patch">
	<metadata>
		<title>Security update for spamassassin (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1159133" ref_url="https://bugzilla.suse.com/1159133" source="BUGZILLA"/>
		<reference ref_id="1184221" ref_url="https://bugzilla.suse.com/1184221" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12420" ref_url="https://www.suse.com/security/cve/CVE-2019-12420/" source="CVE"/>
		<reference ref_id="CVE-2020-1946" ref_url="https://www.suse.com/security/cve/CVE-2020-1946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008622.html" source="SUSE-SU"/>
		<description>
This update for spamassassin fixes the following issues:

- CVE-2019-12420: memory leak via crafted messages (bsc#1159133)
- CVE-2020-1946: security update (bsc#1184221)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-13"/>
	<updated date="2021-04-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159133">SUSE bug 1159133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184221">SUSE bug 1184221</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-12420/">CVE-2019-12420</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-1946/">CVE-2020-1946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493700" comment="perl-Mail-SpamAssassin-3.4.5-12.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496527" comment="perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493701" comment="spamassassin-3.4.5-12.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140751" version="1" class="patch">
	<metadata>
		<title>Security update for open-iscsi (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1173886" ref_url="https://bugzilla.suse.com/1173886" source="BUGZILLA"/>
		<reference ref_id="1179908" ref_url="https://bugzilla.suse.com/1179908" source="BUGZILLA"/>
		<reference ref_id="1183421" ref_url="https://bugzilla.suse.com/1183421" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13987" ref_url="https://www.suse.com/security/cve/CVE-2020-13987/" source="CVE"/>
		<reference ref_id="CVE-2020-13988" ref_url="https://www.suse.com/security/cve/CVE-2020-13988/" source="CVE"/>
		<reference ref_id="CVE-2020-17437" ref_url="https://www.suse.com/security/cve/CVE-2020-17437/" source="CVE"/>
		<reference ref_id="CVE-2020-17438" ref_url="https://www.suse.com/security/cve/CVE-2020-17438/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1164-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008619.html" source="SUSE-SU"/>
		<description>
This update for open-iscsi fixes the following issues:

- CVE-2020-17437: uIP Out-of-Bounds Write (bsc#1179908)
- CVE-2020-17438: uIP Out-of-Bounds Write (bsc#1179908)
- CVE-2020-13987: uIP Out-of-Bounds Read (bsc#1179908)
- CVE-2020-13988: uIP Integer Overflow (bsc#1179908)
- Enabled no-wait ('-W') iscsiadm option for iscsi login service (bsc#1173886, bsc#1183421)
- Added the ability to perform async logins (bsc#1173886)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-13"/>
	<updated date="2021-04-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1173886">SUSE bug 1173886</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179908">SUSE bug 1179908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183421">SUSE bug 1183421</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-13987/">CVE-2020-13987</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13988/">CVE-2020-13988</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-17437/">CVE-2020-17437</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-17438/">CVE-2020-17438</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504724" comment="iscsiuio-0.7.8.2-13.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504725" comment="libopeniscsiusr0_2_0-2.0.876-13.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504726" comment="open-iscsi-2.0.876-13.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504727" comment="open-iscsi-devel-2.0.876-13.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140752" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180128" ref_url="https://bugzilla.suse.com/1180128" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3472" ref_url="https://www.suse.com/security/cve/CVE-2021-3472/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1188-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008637.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2021-3472: XChangeFeedbackControl Integer Underflow Privilege Escalation (bsc#1180128)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-14"/>
	<updated date="2021-04-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180128">SUSE bug 1180128</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3472/">CVE-2021-3472</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505743" comment="xorg-x11-server-1.20.3-14.5.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505744" comment="xorg-x11-server-extra-1.20.3-14.5.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505745" comment="xorg-x11-server-sdk-1.20.3-14.5.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140753" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181256" ref_url="https://bugzilla.suse.com/1181256" source="BUGZILLA"/>
		<reference ref_id="1184532" ref_url="https://bugzilla.suse.com/1184532" source="BUGZILLA"/>
		<reference ref_id="1184533" ref_url="https://bugzilla.suse.com/1184533" source="BUGZILLA"/>
		<reference ref_id="1184534" ref_url="https://bugzilla.suse.com/1184534" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-1252" ref_url="https://www.suse.com/security/cve/CVE-2021-1252/" source="CVE"/>
		<reference ref_id="CVE-2021-1404" ref_url="https://www.suse.com/security/cve/CVE-2021-1404/" source="CVE"/>
		<reference ref_id="CVE-2021-1405" ref_url="https://www.suse.com/security/cve/CVE-2021-1405/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1190-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008636.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

- CVE-2021-1252: Fix for Excel XLM parser infinite loop. (bsc#1184532)
- CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. (bsc#1184533)
- CVE-2021-1405: Fix for mail parser NULL-dereference crash. (bsc#1184534)
- Fix errors when scanning files &gt; 4G (bsc#1181256)
- Update clamav.keyring
- Update to 0.103.2
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-14"/>
	<updated date="2021-04-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181256">SUSE bug 1181256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184532">SUSE bug 1184532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184533">SUSE bug 1184533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184534">SUSE bug 1184534</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-1252/">CVE-2021-1252</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-1404/">CVE-2021-1404</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-1405/">CVE-2021-1405</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493712" comment="clamav-0.103.2-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493713" comment="clamav-devel-0.103.2-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493714" comment="libclamav9-0.103.2-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493715" comment="libfreshclam2-0.103.2-3.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140754" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1172383" ref_url="https://bugzilla.suse.com/1172383" source="BUGZILLA"/>
		<reference ref_id="1172384" ref_url="https://bugzilla.suse.com/1172384" source="BUGZILLA"/>
		<reference ref_id="1172385" ref_url="https://bugzilla.suse.com/1172385" source="BUGZILLA"/>
		<reference ref_id="1172386" ref_url="https://bugzilla.suse.com/1172386" source="BUGZILLA"/>
		<reference ref_id="1172478" ref_url="https://bugzilla.suse.com/1172478" source="BUGZILLA"/>
		<reference ref_id="1173612" ref_url="https://bugzilla.suse.com/1173612" source="BUGZILLA"/>
		<reference ref_id="1174386" ref_url="https://bugzilla.suse.com/1174386" source="BUGZILLA"/>
		<reference ref_id="1174641" ref_url="https://bugzilla.suse.com/1174641" source="BUGZILLA"/>
		<reference ref_id="1175441" ref_url="https://bugzilla.suse.com/1175441" source="BUGZILLA"/>
		<reference ref_id="1176673" ref_url="https://bugzilla.suse.com/1176673" source="BUGZILLA"/>
		<reference ref_id="1176682" ref_url="https://bugzilla.suse.com/1176682" source="BUGZILLA"/>
		<reference ref_id="1176684" ref_url="https://bugzilla.suse.com/1176684" source="BUGZILLA"/>
		<reference ref_id="1178049" ref_url="https://bugzilla.suse.com/1178049" source="BUGZILLA"/>
		<reference ref_id="1178174" ref_url="https://bugzilla.suse.com/1178174" source="BUGZILLA"/>
		<reference ref_id="1178565" ref_url="https://bugzilla.suse.com/1178565" source="BUGZILLA"/>
		<reference ref_id="1178934" ref_url="https://bugzilla.suse.com/1178934" source="BUGZILLA"/>
		<reference ref_id="1179466" ref_url="https://bugzilla.suse.com/1179466" source="BUGZILLA"/>
		<reference ref_id="1179467" ref_url="https://bugzilla.suse.com/1179467" source="BUGZILLA"/>
		<reference ref_id="1179468" ref_url="https://bugzilla.suse.com/1179468" source="BUGZILLA"/>
		<reference ref_id="1179686" ref_url="https://bugzilla.suse.com/1179686" source="BUGZILLA"/>
		<reference ref_id="1180523" ref_url="https://bugzilla.suse.com/1180523" source="BUGZILLA"/>
		<reference ref_id="1181108" ref_url="https://bugzilla.suse.com/1181108" source="BUGZILLA"/>
		<reference ref_id="1181639" ref_url="https://bugzilla.suse.com/1181639" source="BUGZILLA"/>
		<reference ref_id="1181933" ref_url="https://bugzilla.suse.com/1181933" source="BUGZILLA"/>
		<reference ref_id="1182137" ref_url="https://bugzilla.suse.com/1182137" source="BUGZILLA"/>
		<reference ref_id="1182425" ref_url="https://bugzilla.suse.com/1182425" source="BUGZILLA"/>
		<reference ref_id="1182577" ref_url="https://bugzilla.suse.com/1182577" source="BUGZILLA"/>
		<reference ref_id="1182968" ref_url="https://bugzilla.suse.com/1182968" source="BUGZILLA"/>
		<reference ref_id="1183979" ref_url="https://bugzilla.suse.com/1183979" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11947" ref_url="https://www.suse.com/security/cve/CVE-2020-11947/" source="CVE"/>
		<reference ref_id="CVE-2020-12829" ref_url="https://www.suse.com/security/cve/CVE-2020-12829/" source="CVE"/>
		<reference ref_id="CVE-2020-13361" ref_url="https://www.suse.com/security/cve/CVE-2020-13361/" source="CVE"/>
		<reference ref_id="CVE-2020-13362" ref_url="https://www.suse.com/security/cve/CVE-2020-13362/" source="CVE"/>
		<reference ref_id="CVE-2020-13659" ref_url="https://www.suse.com/security/cve/CVE-2020-13659/" source="CVE"/>
		<reference ref_id="CVE-2020-13765" ref_url="https://www.suse.com/security/cve/CVE-2020-13765/" source="CVE"/>
		<reference ref_id="CVE-2020-14364" ref_url="https://www.suse.com/security/cve/CVE-2020-14364/" source="CVE"/>
		<reference ref_id="CVE-2020-15469" ref_url="https://www.suse.com/security/cve/CVE-2020-15469/" source="CVE"/>
		<reference ref_id="CVE-2020-15863" ref_url="https://www.suse.com/security/cve/CVE-2020-15863/" source="CVE"/>
		<reference ref_id="CVE-2020-16092" ref_url="https://www.suse.com/security/cve/CVE-2020-16092/" source="CVE"/>
		<reference ref_id="CVE-2020-25084" ref_url="https://www.suse.com/security/cve/CVE-2020-25084/" source="CVE"/>
		<reference ref_id="CVE-2020-25624" ref_url="https://www.suse.com/security/cve/CVE-2020-25624/" source="CVE"/>
		<reference ref_id="CVE-2020-25625" ref_url="https://www.suse.com/security/cve/CVE-2020-25625/" source="CVE"/>
		<reference ref_id="CVE-2020-25723" ref_url="https://www.suse.com/security/cve/CVE-2020-25723/" source="CVE"/>
		<reference ref_id="CVE-2020-27617" ref_url="https://www.suse.com/security/cve/CVE-2020-27617/" source="CVE"/>
		<reference ref_id="CVE-2020-27821" ref_url="https://www.suse.com/security/cve/CVE-2020-27821/" source="CVE"/>
		<reference ref_id="CVE-2020-28916" ref_url="https://www.suse.com/security/cve/CVE-2020-28916/" source="CVE"/>
		<reference ref_id="CVE-2020-29129" ref_url="https://www.suse.com/security/cve/CVE-2020-29129/" source="CVE"/>
		<reference ref_id="CVE-2020-29130" ref_url="https://www.suse.com/security/cve/CVE-2020-29130/" source="CVE"/>
		<reference ref_id="CVE-2020-29443" ref_url="https://www.suse.com/security/cve/CVE-2020-29443/" source="CVE"/>
		<reference ref_id="CVE-2021-20181" ref_url="https://www.suse.com/security/cve/CVE-2021-20181/" source="CVE"/>
		<reference ref_id="CVE-2021-20203" ref_url="https://www.suse.com/security/cve/CVE-2021-20203/" source="CVE"/>
		<reference ref_id="CVE-2021-20221" ref_url="https://www.suse.com/security/cve/CVE-2021-20221/" source="CVE"/>
		<reference ref_id="CVE-2021-20257" ref_url="https://www.suse.com/security/cve/CVE-2021-20257/" source="CVE"/>
		<reference ref_id="CVE-2021-3416" ref_url="https://www.suse.com/security/cve/CVE-2021-3416/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1245-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008647.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:


- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383)
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)
- Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)
- Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174)
- Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468)
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612)
- Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577)
- Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)
- Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416)
- Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659 bsc#1172386)
- Fix issue where s390 guest fails to find zipl boot menu index (bsc#1183979)
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
- Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)
- Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137)
- Apply fixes to qemu scsi passthrough with respect to timeout and error conditions, including using more correct status codes. (bsc#1178049)
- Fix OOB access in ARM interrupt handling (CVE-2021-20221 bsc#1181933)
- Tweaks to spec file for better formatting, and remove not needed BuildRequires for e2fsprogs-devel and libpcap-devel
- Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384)
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
- Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441)
- Fix DoS in packet processing of various emulated NICs (CVE-2020-16092 bsc#1174641)
- Fix buffer overflow in the XGMAC device (CVE-2020-15863 bsc#1174386)
- Use '%service_del_postun_without_restart' instead of '%service_del_postun' to avoid 'Failed to try-restart qemu-ga@.service' error while updating the qemu-guest-agent. (bsc#1178565)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-16"/>
	<updated date="2021-04-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172383">SUSE bug 1172383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172384">SUSE bug 1172384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172385">SUSE bug 1172385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172386">SUSE bug 1172386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172478">SUSE bug 1172478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173612">SUSE bug 1173612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174386">SUSE bug 1174386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174641">SUSE bug 1174641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175441">SUSE bug 1175441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176673">SUSE bug 1176673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176682">SUSE bug 1176682</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176684">SUSE bug 1176684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178049">SUSE bug 1178049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178174">SUSE bug 1178174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178565">SUSE bug 1178565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178934">SUSE bug 1178934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179466">SUSE bug 1179466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179467">SUSE bug 1179467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179468">SUSE bug 1179468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179686">SUSE bug 1179686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180523">SUSE bug 1180523</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181108">SUSE bug 1181108</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181639">SUSE bug 1181639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181933">SUSE bug 1181933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182137">SUSE bug 1182137</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182425">SUSE bug 1182425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182577">SUSE bug 1182577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182968">SUSE bug 1182968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183979">SUSE bug 1183979</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-11947/">CVE-2020-11947</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-12829/">CVE-2020-12829</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13361/">CVE-2020-13361</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13362/">CVE-2020-13362</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13659/">CVE-2020-13659</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13765/">CVE-2020-13765</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14364/">CVE-2020-14364</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-15469/">CVE-2020-15469</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15863/">CVE-2020-15863</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16092/">CVE-2020-16092</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-25084/">CVE-2020-25084</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-25624/">CVE-2020-25624</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25625/">CVE-2020-25625</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25723/">CVE-2020-25723</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27617/">CVE-2020-27617</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-27821/">CVE-2020-27821</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28916/">CVE-2020-28916</cve>
	<cve impact="low" cvss3="2.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29129/">CVE-2020-29129</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29130/">CVE-2020-29130</cve>
	<cve impact="low" cvss3="3.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-29443/">CVE-2020-29443</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20181/">CVE-2021-20181</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20203/">CVE-2021-20203</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-20221/">CVE-2021-20221</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20257/">CVE-2021-20257</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3416/">CVE-2021-3416</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505746" comment="qemu-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503848" comment="qemu-arm-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503849" comment="qemu-audio-alsa-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503850" comment="qemu-audio-oss-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503851" comment="qemu-audio-pa-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505747" comment="qemu-block-curl-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505748" comment="qemu-block-iscsi-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505749" comment="qemu-block-rbd-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505750" comment="qemu-block-ssh-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505751" comment="qemu-guest-agent-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503857" comment="qemu-ipxe-1.0.0+-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505752" comment="qemu-kvm-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505753" comment="qemu-lang-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505754" comment="qemu-ppc-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505755" comment="qemu-s390-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503860" comment="qemu-seabios-1.12.0_0_ga698c89-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503861" comment="qemu-sgabios-8-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505756" comment="qemu-tools-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503863" comment="qemu-ui-curses-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503864" comment="qemu-ui-gtk-3.1.1.1-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503865" comment="qemu-vgabios-1.12.0_0_ga698c89-9.24.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503866" comment="qemu-x86-3.1.1.1-9.24.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140755" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183936" ref_url="https://bugzilla.suse.com/1183936" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3156" ref_url="https://www.suse.com/security/cve/CVE-2021-3156/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008661.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:

- L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-20"/>
	<updated date="2021-04-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183936">SUSE bug 1183936</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3156/">CVE-2021-3156</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493727" comment="sudo-1.8.22-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493728" comment="sudo-devel-1.8.22-4.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140756" version="1" class="patch">
	<metadata>
		<title>Security update for libnettle (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184401" ref_url="https://bugzilla.suse.com/1184401" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20305" ref_url="https://www.suse.com/security/cve/CVE-2021-20305/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1412-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008693.html" source="SUSE-SU"/>
		<description>
This update for libnettle fixes the following issues:

- CVE-2021-20305: Fixed the multiply function which was being called with out-of-range scalars (bsc#1184401).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-28"/>
	<updated date="2021-04-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184401">SUSE bug 1184401</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20305/">CVE-2021-20305</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493745" comment="libhogweed4-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493746" comment="libhogweed4-32bit-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493747" comment="libnettle-devel-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493748" comment="libnettle6-3.4.1-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493749" comment="libnettle6-32bit-3.4.1-4.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140757" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184960" ref_url="https://bugzilla.suse.com/1184960" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23961" ref_url="https://www.suse.com/security/cve/CVE-2021-23961/" source="CVE"/>
		<reference ref_id="CVE-2021-23994" ref_url="https://www.suse.com/security/cve/CVE-2021-23994/" source="CVE"/>
		<reference ref_id="CVE-2021-23995" ref_url="https://www.suse.com/security/cve/CVE-2021-23995/" source="CVE"/>
		<reference ref_id="CVE-2021-23998" ref_url="https://www.suse.com/security/cve/CVE-2021-23998/" source="CVE"/>
		<reference ref_id="CVE-2021-23999" ref_url="https://www.suse.com/security/cve/CVE-2021-23999/" source="CVE"/>
		<reference ref_id="CVE-2021-24002" ref_url="https://www.suse.com/security/cve/CVE-2021-24002/" source="CVE"/>
		<reference ref_id="CVE-2021-29945" ref_url="https://www.suse.com/security/cve/CVE-2021-29945/" source="CVE"/>
		<reference ref_id="CVE-2021-29946" ref_url="https://www.suse.com/security/cve/CVE-2021-29946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1433-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008700.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- MozillaFirefox was updated to 78.10.0 ESR (bsc#1184960)
  * CVE-2021-23994: Out of bound write due to lazy initialization
  * CVE-2021-23995: Use-after-free in Responsive Design Mode
  * CVE-2021-23998: Secure Lock icon could have been spoofed
  * CVE-2021-23961: More internal network hosts could have been probed by a malicious webpage
  * CVE-2021-23999: Blob URLs may have been granted additional privileges
  * CVE-2021-24002: Arbitrary FTP command execution on FTP servers using an encoded URL
  * CVE-2021-29945: Incorrect size computation in WebAssembly JIT could lead to null-reads
  * CVE-2021-29946: Port blocking could be bypassed
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-29"/>
	<updated date="2021-04-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184960">SUSE bug 1184960</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23961/">CVE-2021-23961</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23994/">CVE-2021-23994</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23995/">CVE-2021-23995</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23998/">CVE-2021-23998</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23999/">CVE-2021-23999</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-24002/">CVE-2021-24002</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29945/">CVE-2021-29945</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29946/">CVE-2021-29946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504760" comment="MozillaFirefox-78.10.0-3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504761" comment="MozillaFirefox-devel-78.10.0-3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504762" comment="MozillaFirefox-translations-common-78.10.0-3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504763" comment="MozillaFirefox-translations-other-78.10.0-3.139.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140758" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184161" ref_url="https://bugzilla.suse.com/1184161" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25317" ref_url="https://www.suse.com/security/cve/CVE-2021-25317/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1454-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008715.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:

- CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks (bsc#1184161)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-30"/>
	<updated date="2021-04-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184161">SUSE bug 1184161</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-25317/">CVE-2021-25317</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493822" comment="cups-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493823" comment="cups-client-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493824" comment="cups-config-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496541" comment="cups-ddk-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493825" comment="cups-devel-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493826" comment="libcups2-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493827" comment="libcups2-32bit-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493828" comment="libcupscgi1-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493829" comment="libcupsimage2-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493830" comment="libcupsmime1-2.2.7-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493831" comment="libcupsppdc1-2.2.7-3.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140759" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1177204" ref_url="https://bugzilla.suse.com/1177204" source="BUGZILLA"/>
		<reference ref_id="1178591" ref_url="https://bugzilla.suse.com/1178591" source="BUGZILLA"/>
		<reference ref_id="1179148" ref_url="https://bugzilla.suse.com/1179148" source="BUGZILLA"/>
		<reference ref_id="1181254" ref_url="https://bugzilla.suse.com/1181254" source="BUGZILLA"/>
		<reference ref_id="1181989" ref_url="https://bugzilla.suse.com/1181989" source="BUGZILLA"/>
		<reference ref_id="1183072" ref_url="https://bugzilla.suse.com/1183072" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28368" ref_url="https://www.suse.com/security/cve/CVE-2020-28368/" source="CVE"/>
		<reference ref_id="CVE-2021-28687" ref_url="https://www.suse.com/security/cve/CVE-2021-28687/" source="CVE"/>
		<reference ref_id="CVE-2021-3308" ref_url="https://www.suse.com/security/cve/CVE-2021-3308/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1460-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-April/008718.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2020-28368: Intel RAPL sidechannel attack aka PLATYPUS attack (bsc#1178591, XSA-351) 
- CVE-2021-3308: IRQ vector leak on x86 (bsc#1181254, XSA-360)
- CVE-2021-28687: HVM soft-reset crashes toolstack (bsc#1183072, XSA-368) 
- L3: conring size for XEN HV's with huge memory to small (bsc#1177204).
- kdump of HVM fails, soft-reset not handled by libxl (bsc#1179148)
- openQA job causes libvirtd to dump core when running kdump inside domain (bsc#1181989).
- Upstream bug fixes (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-04-30"/>
	<updated date="2021-04-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177204">SUSE bug 1177204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178591">SUSE bug 1178591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179148">SUSE bug 1179148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181254">SUSE bug 1181254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181989">SUSE bug 1181989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183072">SUSE bug 1183072</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-28368/">CVE-2020-28368</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28687/">CVE-2021-28687</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3308/">CVE-2021-3308</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503867" comment="xen-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503868" comment="xen-devel-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503869" comment="xen-libs-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503870" comment="xen-tools-4.12.4_08-3.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503871" comment="xen-tools-domU-4.12.4_08-3.43.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140760" version="1" class="patch">
	<metadata>
		<title>Security update for stunnel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177580" ref_url="https://bugzilla.suse.com/1177580" source="BUGZILLA"/>
		<reference ref_id="1182529" ref_url="https://bugzilla.suse.com/1182529" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20230" ref_url="https://www.suse.com/security/cve/CVE-2021-20230/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1465-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008719.html" source="SUSE-SU"/>
		<description>
This update for stunnel fixes the following issues:

- Security fix: [bsc#1177580, bsc#1182529, CVE-2021-20230]
  * 'redirect' option does not properly handle 'verifyChain = yes'
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-03"/>
	<updated date="2021-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177580">SUSE bug 1177580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182529">SUSE bug 1182529</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-20230/">CVE-2021-20230</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504810" comment="stunnel-5.44-3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140761" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183453" ref_url="https://bugzilla.suse.com/1183453" source="BUGZILLA"/>
		<reference ref_id="1185345" ref_url="https://bugzilla.suse.com/1185345" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25214" ref_url="https://www.suse.com/security/cve/CVE-2021-25214/" source="CVE"/>
		<reference ref_id="CVE-2021-25215" ref_url="https://www.suse.com/security/cve/CVE-2021-25215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1471-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008724.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- CVE-2021-25214: Fixed a broken inbound incremental zone update (IXFR) which could have caused named to terminate unexpectedly (bsc#1185345).
- CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that required the DNAME to be processed to resolve itself (bsc#1185345).
- make /usr/bin/delv in bind-tools position independent (bsc#1183453).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183453">SUSE bug 1183453</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185345">SUSE bug 1185345</bugzilla>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-25214/">CVE-2021-25214</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-25215/">CVE-2021-25215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009499850" comment="bind-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499851" comment="bind-chrootenv-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493834" comment="bind-devel-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499852" comment="bind-doc-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493835" comment="bind-utils-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493836" comment="libbind9-1600-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493837" comment="libdns1605-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493838" comment="libirs-devel-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493839" comment="libirs1601-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493840" comment="libisc1606-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493841" comment="libisccc1600-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493842" comment="libisccfg1600-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493843" comment="libns1604-9.16.6-12.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493844" comment="python3-bind-9.16.6-12.49.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140762" version="1" class="patch">
	<metadata>
		<title>Security update for ceph (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1145463" ref_url="https://bugzilla.suse.com/1145463" source="BUGZILLA"/>
		<reference ref_id="1174466" ref_url="https://bugzilla.suse.com/1174466" source="BUGZILLA"/>
		<reference ref_id="1177200" ref_url="https://bugzilla.suse.com/1177200" source="BUGZILLA"/>
		<reference ref_id="1178235" ref_url="https://bugzilla.suse.com/1178235" source="BUGZILLA"/>
		<reference ref_id="1178837" ref_url="https://bugzilla.suse.com/1178837" source="BUGZILLA"/>
		<reference ref_id="1178860" ref_url="https://bugzilla.suse.com/1178860" source="BUGZILLA"/>
		<reference ref_id="1178905" ref_url="https://bugzilla.suse.com/1178905" source="BUGZILLA"/>
		<reference ref_id="1179997" ref_url="https://bugzilla.suse.com/1179997" source="BUGZILLA"/>
		<reference ref_id="1180118" ref_url="https://bugzilla.suse.com/1180118" source="BUGZILLA"/>
		<reference ref_id="1180594" ref_url="https://bugzilla.suse.com/1180594" source="BUGZILLA"/>
		<reference ref_id="1181378" ref_url="https://bugzilla.suse.com/1181378" source="BUGZILLA"/>
		<reference ref_id="1183074" ref_url="https://bugzilla.suse.com/1183074" source="BUGZILLA"/>
		<reference ref_id="1183487" ref_url="https://bugzilla.suse.com/1183487" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25678" ref_url="https://www.suse.com/security/cve/CVE-2020-25678/" source="CVE"/>
		<reference ref_id="CVE-2020-27839" ref_url="https://www.suse.com/security/cve/CVE-2020-27839/" source="CVE"/>
		<reference ref_id="CVE-2021-20288" ref_url="https://www.suse.com/security/cve/CVE-2021-20288/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008721.html" source="SUSE-SU"/>
		<description>
This update for ceph fixes the following issues:

- ceph was updated to 14.2.20-402-g6aa76c6815:
    * CVE-2021-20288: Fixed unauthorized global_id reuse (bsc#1183074).
    * CVE-2020-25678: Do not add sensitive information in Ceph log files (bsc#1178905).
    * CVE-2020-27839: Use secure cookies to store JWT Token (bsc#1179997). 
    * mgr/dashboard: prometheus alerting: add some leeway for package drops and errors (bsc#1145463) 
    * mon: have 'mon stat' output json as well (bsc#1174466) 
    * rpm: ceph-mgr-dashboard recommends python3-saml on SUSE (bsc#1177200) 
    * mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled (bsc#1178235) 
    * rgw: cls/user: set from_index for reset stats calls (bsc#1178837) 
    * mgr/dashboard: Disable TLS 1.0 and 1.1 (bsc#1178860)
    * bluestore: provide a different name for fallback allocator (bsc#1180118) 
    * test/run-cli-tests: use cram from github (bsc#1181378) 
    * mgr/dashboard: fix 'Python2 Cookie module import fails on Python3' (bsc#1183487) 
    * common: make ms_bind_msgr2 default to 'false' (bsc#1180594) 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1145463">SUSE bug 1145463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174466">SUSE bug 1174466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177200">SUSE bug 1177200</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178235">SUSE bug 1178235</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178837">SUSE bug 1178837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178860">SUSE bug 1178860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178905">SUSE bug 1178905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179997">SUSE bug 1179997</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180118">SUSE bug 1180118</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180594">SUSE bug 1180594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181378">SUSE bug 1181378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183074">SUSE bug 1183074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183487">SUSE bug 1183487</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25678/">CVE-2020-25678</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27839/">CVE-2020-27839</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20288/">CVE-2021-20288</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505757" comment="ceph-common-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505758" comment="libcephfs-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505759" comment="libcephfs2-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505760" comment="librados-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505761" comment="librados2-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505762" comment="libradospp-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505763" comment="librbd-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505764" comment="librbd1-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505765" comment="librgw-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505766" comment="librgw2-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505767" comment="python3-ceph-argparse-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505768" comment="python3-cephfs-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505769" comment="python3-rados-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505770" comment="python3-rbd-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505771" comment="python3-rgw-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505772" comment="rados-objclass-devel-14.2.20.402+g6aa76c6815-3.60.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140763" version="1" class="patch">
	<metadata>
		<title>Security update for avahi (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184521" ref_url="https://bugzilla.suse.com/1184521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3468" ref_url="https://www.suse.com/security/cve/CVE-2021-3468/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1493-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008937.html" source="SUSE-SU"/>
		<description>
This update for avahi fixes the following issues:

- CVE-2021-3468: avoid infinite loop by handling  HUP event in client_work (bsc#1184521).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1184521">SUSE bug 1184521</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3468/">CVE-2021-3468</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493865" comment="avahi-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495770" comment="avahi-autoipd-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493866" comment="avahi-compat-howl-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493867" comment="avahi-compat-mDNSResponder-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493868" comment="avahi-lang-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493869" comment="avahi-utils-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495771" comment="avahi-utils-gtk-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493870" comment="libavahi-client3-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493871" comment="libavahi-client3-32bit-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493872" comment="libavahi-common3-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493873" comment="libavahi-common3-32bit-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493874" comment="libavahi-core7-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493875" comment="libavahi-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493876" comment="libavahi-glib-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493877" comment="libavahi-glib1-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495772" comment="libavahi-gobject-devel-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493878" comment="libavahi-gobject0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493879" comment="libavahi-ui-gtk3-0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493880" comment="libavahi-ui0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493881" comment="libdns_sd-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493882" comment="libhowl0-0.7-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493883" comment="typelib-1_0-Avahi-0_6-0.7-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140764" version="1" class="patch">
	<metadata>
		<title>Security update for sca-patterns-sle11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1154824" ref_url="https://bugzilla.suse.com/1154824" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0543" ref_url="https://www.suse.com/security/cve/CVE-2020-0543/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1497-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008731.html" source="SUSE-SU"/>
		<description>
This update for sca-patterns-sle11 fixes the following issues:

- New regular patterns (1) for version 1.3.1
   * Special Register Buffer Data Sampling aka CrossTalk (CVE-2020-0543) (bsc#1154824)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1154824">SUSE bug 1154824</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-0543/">CVE-2020-0543</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499853" comment="sca-patterns-sle11-1.3.1-7.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140765" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1178469" ref_url="https://bugzilla.suse.com/1178469" source="BUGZILLA"/>
		<reference ref_id="1179156" ref_url="https://bugzilla.suse.com/1179156" source="BUGZILLA"/>
		<reference ref_id="1183572" ref_url="https://bugzilla.suse.com/1183572" source="BUGZILLA"/>
		<reference ref_id="1183574" ref_url="https://bugzilla.suse.com/1183574" source="BUGZILLA"/>
		<reference ref_id="1184310" ref_url="https://bugzilla.suse.com/1184310" source="BUGZILLA"/>
		<reference ref_id="1184677" ref_url="https://bugzilla.suse.com/1184677" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27840" ref_url="https://www.suse.com/security/cve/CVE-2020-27840/" source="CVE"/>
		<reference ref_id="CVE-2021-20254" ref_url="https://www.suse.com/security/cve/CVE-2021-20254/" source="CVE"/>
		<reference ref_id="CVE-2021-20277" ref_url="https://www.suse.com/security/cve/CVE-2021-20277/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008730.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574).
- CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677).
- CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572).
- Avoid free'ing our own pointer in memcache when memcache_trim attempts to reduce cache size (bsc#1179156).
- s3-libads: use dns name to open a ldap session (bsc#1184310).
- Adjust smbcacls '--propagate-inheritance' feature to align with upstream (bsc#1178469).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178469">SUSE bug 1178469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179156">SUSE bug 1179156</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183572">SUSE bug 1183572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183574">SUSE bug 1183574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184310">SUSE bug 1184310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184677">SUSE bug 1184677</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27840/">CVE-2020-27840</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-20254/">CVE-2021-20254</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20277/">CVE-2021-20277</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505773" comment="libdcerpc-binding0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503908" comment="libdcerpc-binding0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505774" comment="libdcerpc-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505775" comment="libdcerpc-samr-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505776" comment="libdcerpc-samr0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505777" comment="libdcerpc0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503913" comment="libdcerpc0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505778" comment="libndr-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505779" comment="libndr-krb5pac-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505780" comment="libndr-krb5pac0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503917" comment="libndr-krb5pac0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505781" comment="libndr-nbt-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505782" comment="libndr-nbt0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503920" comment="libndr-nbt0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505783" comment="libndr-standard-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505784" comment="libndr-standard0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503923" comment="libndr-standard0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505785" comment="libndr0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503925" comment="libndr0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505786" comment="libnetapi-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505787" comment="libnetapi0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503928" comment="libnetapi0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505788" comment="libsamba-credentials-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505789" comment="libsamba-credentials0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503931" comment="libsamba-credentials0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505790" comment="libsamba-errors-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505791" comment="libsamba-errors0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503934" comment="libsamba-errors0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505792" comment="libsamba-hostconfig-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505793" comment="libsamba-hostconfig0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503937" comment="libsamba-hostconfig0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505794" comment="libsamba-passdb-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505795" comment="libsamba-passdb0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503940" comment="libsamba-passdb0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505796" comment="libsamba-policy-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505797" comment="libsamba-policy-python3-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505798" comment="libsamba-policy0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505799" comment="libsamba-policy0-python3-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505800" comment="libsamba-util-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505801" comment="libsamba-util0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503947" comment="libsamba-util0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505802" comment="libsamdb-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505803" comment="libsamdb0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503950" comment="libsamdb0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505804" comment="libsmbclient-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505805" comment="libsmbclient0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505806" comment="libsmbconf-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505807" comment="libsmbconf0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503955" comment="libsmbconf0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505808" comment="libsmbldap-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505809" comment="libsmbldap2-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503958" comment="libsmbldap2-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505810" comment="libtevent-util-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505811" comment="libtevent-util0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503961" comment="libtevent-util0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505812" comment="libwbclient-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505813" comment="libwbclient0-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503964" comment="libwbclient0-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505814" comment="samba-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505815" comment="samba-ad-dc-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505816" comment="samba-client-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505817" comment="samba-core-devel-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505818" comment="samba-dsdb-modules-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505819" comment="samba-libs-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503971" comment="samba-libs-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505820" comment="samba-libs-python-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505821" comment="samba-libs-python3-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505822" comment="samba-python-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505823" comment="samba-python3-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505824" comment="samba-winbind-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503977" comment="samba-winbind-32bit-4.9.5+git.432.d9b18c4f390-3.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140766" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182719" ref_url="https://bugzilla.suse.com/1182719" source="BUGZILLA"/>
		<reference ref_id="1184155" ref_url="https://bugzilla.suse.com/1184155" source="BUGZILLA"/>
		<reference ref_id="1184262" ref_url="https://bugzilla.suse.com/1184262" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27918" ref_url="https://www.suse.com/security/cve/CVE-2020-27918/" source="CVE"/>
		<reference ref_id="CVE-2020-29623" ref_url="https://www.suse.com/security/cve/CVE-2020-29623/" source="CVE"/>
		<reference ref_id="CVE-2021-1765" ref_url="https://www.suse.com/security/cve/CVE-2021-1765/" source="CVE"/>
		<reference ref_id="CVE-2021-1788" ref_url="https://www.suse.com/security/cve/CVE-2021-1788/" source="CVE"/>
		<reference ref_id="CVE-2021-1789" ref_url="https://www.suse.com/security/cve/CVE-2021-1789/" source="CVE"/>
		<reference ref_id="CVE-2021-1799" ref_url="https://www.suse.com/security/cve/CVE-2021-1799/" source="CVE"/>
		<reference ref_id="CVE-2021-1801" ref_url="https://www.suse.com/security/cve/CVE-2021-1801/" source="CVE"/>
		<reference ref_id="CVE-2021-1844" ref_url="https://www.suse.com/security/cve/CVE-2021-1844/" source="CVE"/>
		<reference ref_id="CVE-2021-1870" ref_url="https://www.suse.com/security/cve/CVE-2021-1870/" source="CVE"/>
		<reference ref_id="CVE-2021-1871" ref_url="https://www.suse.com/security/cve/CVE-2021-1871/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1499-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008734.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.32.0 (bsc#1184155):
  * Fix the authentication request port when URL omits the port.
  * Fix iframe scrolling when main frame is scrolled in async
  * scrolling mode.
  * Stop using g_memdup.
  * Show a warning message when overriding signal handler for
  * threading suspension.
  * Fix the build on RISC-V with GCC 11.
  * Fix several crashes and rendering issues.
  * Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
- Update in version 2.30.6 (bsc#1184262):
  * Update user agent quirks again for Google Docs and Google Drive.
  * Fix several crashes and rendering issues.
  * Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
    CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Update _constraints for armv6/armv7 (bsc#1182719)
- restore NPAPI plugin support which was removed in 2.32.0
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-04"/>
	<updated date="2021-05-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182719">SUSE bug 1182719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184155">SUSE bug 1184155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184262">SUSE bug 1184262</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27918/">CVE-2020-27918</cve>
	<cve impact="important" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29623/">CVE-2020-29623</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1765/">CVE-2021-1765</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1788/">CVE-2021-1788</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1789/">CVE-2021-1789</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1799/">CVE-2021-1799</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1801/">CVE-2021-1801</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1844/">CVE-2021-1844</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1870/">CVE-2021-1870</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1871/">CVE-2021-1871</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504811" comment="libjavascriptcoregtk-4_0-18-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504812" comment="libwebkit2gtk-4_0-37-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503284" comment="libwebkit2gtk3-lang-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504813" comment="typelib-1_0-JavaScriptCore-4_0-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504814" comment="typelib-1_0-WebKit2-4_0-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504815" comment="typelib-1_0-WebKit2WebExtension-4_0-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504816" comment="webkit2gtk-4_0-injected-bundles-2.32.0-3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504817" comment="webkit2gtk3-devel-2.32.0-3.74.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140767" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184606" ref_url="https://bugzilla.suse.com/1184606" source="BUGZILLA"/>
		<reference ref_id="1185055" ref_url="https://bugzilla.suse.com/1185055" source="BUGZILLA"/>
		<reference ref_id="1185056" ref_url="https://bugzilla.suse.com/1185056" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2161" ref_url="https://www.suse.com/security/cve/CVE-2021-2161/" source="CVE"/>
		<reference ref_id="CVE-2021-2163" ref_url="https://www.suse.com/security/cve/CVE-2021-2163/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1554-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008756.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to upstream tag jdk-11.0.11+9 (April 2021 CPU)
  * CVE-2021-2163: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055)
  * CVE-2021-2161: Fixed incorrect handling of partially quoted arguments in ProcessBuilder (bsc#1185056)
- moved mozilla-nss dependency to java-11-openjdk-headless package, this is necessary to be able to do crypto 
  with just java-11-openjdk-headless installed (bsc#1184606).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-11"/>
	<updated date="2021-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184606">SUSE bug 1184606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185055">SUSE bug 1185055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185056">SUSE bug 1185056</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2161/">CVE-2021-2161</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2163/">CVE-2021-2163</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493889" comment="java-11-openjdk-11.0.11.0-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493890" comment="java-11-openjdk-demo-11.0.11.0-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493891" comment="java-11-openjdk-devel-11.0.11.0-3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493892" comment="java-11-openjdk-headless-11.0.11.0-3.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140768" version="1" class="patch">
	<metadata>
		<title>Security update for ImageMagick (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179103" ref_url="https://bugzilla.suse.com/1179103" source="BUGZILLA"/>
		<reference ref_id="1179202" ref_url="https://bugzilla.suse.com/1179202" source="BUGZILLA"/>
		<reference ref_id="1179208" ref_url="https://bugzilla.suse.com/1179208" source="BUGZILLA"/>
		<reference ref_id="1179212" ref_url="https://bugzilla.suse.com/1179212" source="BUGZILLA"/>
		<reference ref_id="1179221" ref_url="https://bugzilla.suse.com/1179221" source="BUGZILLA"/>
		<reference ref_id="1179223" ref_url="https://bugzilla.suse.com/1179223" source="BUGZILLA"/>
		<reference ref_id="1179240" ref_url="https://bugzilla.suse.com/1179240" source="BUGZILLA"/>
		<reference ref_id="1179244" ref_url="https://bugzilla.suse.com/1179244" source="BUGZILLA"/>
		<reference ref_id="1179260" ref_url="https://bugzilla.suse.com/1179260" source="BUGZILLA"/>
		<reference ref_id="1179268" ref_url="https://bugzilla.suse.com/1179268" source="BUGZILLA"/>
		<reference ref_id="1179269" ref_url="https://bugzilla.suse.com/1179269" source="BUGZILLA"/>
		<reference ref_id="1179276" ref_url="https://bugzilla.suse.com/1179276" source="BUGZILLA"/>
		<reference ref_id="1179278" ref_url="https://bugzilla.suse.com/1179278" source="BUGZILLA"/>
		<reference ref_id="1179281" ref_url="https://bugzilla.suse.com/1179281" source="BUGZILLA"/>
		<reference ref_id="1179285" ref_url="https://bugzilla.suse.com/1179285" source="BUGZILLA"/>
		<reference ref_id="1179311" ref_url="https://bugzilla.suse.com/1179311" source="BUGZILLA"/>
		<reference ref_id="1179312" ref_url="https://bugzilla.suse.com/1179312" source="BUGZILLA"/>
		<reference ref_id="1179313" ref_url="https://bugzilla.suse.com/1179313" source="BUGZILLA"/>
		<reference ref_id="1179315" ref_url="https://bugzilla.suse.com/1179315" source="BUGZILLA"/>
		<reference ref_id="1179317" ref_url="https://bugzilla.suse.com/1179317" source="BUGZILLA"/>
		<reference ref_id="1179321" ref_url="https://bugzilla.suse.com/1179321" source="BUGZILLA"/>
		<reference ref_id="1179322" ref_url="https://bugzilla.suse.com/1179322" source="BUGZILLA"/>
		<reference ref_id="1179327" ref_url="https://bugzilla.suse.com/1179327" source="BUGZILLA"/>
		<reference ref_id="1179333" ref_url="https://bugzilla.suse.com/1179333" source="BUGZILLA"/>
		<reference ref_id="1179336" ref_url="https://bugzilla.suse.com/1179336" source="BUGZILLA"/>
		<reference ref_id="1179338" ref_url="https://bugzilla.suse.com/1179338" source="BUGZILLA"/>
		<reference ref_id="1179339" ref_url="https://bugzilla.suse.com/1179339" source="BUGZILLA"/>
		<reference ref_id="1179343" ref_url="https://bugzilla.suse.com/1179343" source="BUGZILLA"/>
		<reference ref_id="1179345" ref_url="https://bugzilla.suse.com/1179345" source="BUGZILLA"/>
		<reference ref_id="1179346" ref_url="https://bugzilla.suse.com/1179346" source="BUGZILLA"/>
		<reference ref_id="1179347" ref_url="https://bugzilla.suse.com/1179347" source="BUGZILLA"/>
		<reference ref_id="1179361" ref_url="https://bugzilla.suse.com/1179361" source="BUGZILLA"/>
		<reference ref_id="1179362" ref_url="https://bugzilla.suse.com/1179362" source="BUGZILLA"/>
		<reference ref_id="1179397" ref_url="https://bugzilla.suse.com/1179397" source="BUGZILLA"/>
		<reference ref_id="1179753" ref_url="https://bugzilla.suse.com/1179753" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-19667" ref_url="https://www.suse.com/security/cve/CVE-2020-19667/" source="CVE"/>
		<reference ref_id="CVE-2020-25664" ref_url="https://www.suse.com/security/cve/CVE-2020-25664/" source="CVE"/>
		<reference ref_id="CVE-2020-25665" ref_url="https://www.suse.com/security/cve/CVE-2020-25665/" source="CVE"/>
		<reference ref_id="CVE-2020-25666" ref_url="https://www.suse.com/security/cve/CVE-2020-25666/" source="CVE"/>
		<reference ref_id="CVE-2020-25674" ref_url="https://www.suse.com/security/cve/CVE-2020-25674/" source="CVE"/>
		<reference ref_id="CVE-2020-25675" ref_url="https://www.suse.com/security/cve/CVE-2020-25675/" source="CVE"/>
		<reference ref_id="CVE-2020-25676" ref_url="https://www.suse.com/security/cve/CVE-2020-25676/" source="CVE"/>
		<reference ref_id="CVE-2020-27750" ref_url="https://www.suse.com/security/cve/CVE-2020-27750/" source="CVE"/>
		<reference ref_id="CVE-2020-27751" ref_url="https://www.suse.com/security/cve/CVE-2020-27751/" source="CVE"/>
		<reference ref_id="CVE-2020-27752" ref_url="https://www.suse.com/security/cve/CVE-2020-27752/" source="CVE"/>
		<reference ref_id="CVE-2020-27753" ref_url="https://www.suse.com/security/cve/CVE-2020-27753/" source="CVE"/>
		<reference ref_id="CVE-2020-27754" ref_url="https://www.suse.com/security/cve/CVE-2020-27754/" source="CVE"/>
		<reference ref_id="CVE-2020-27755" ref_url="https://www.suse.com/security/cve/CVE-2020-27755/" source="CVE"/>
		<reference ref_id="CVE-2020-27756" ref_url="https://www.suse.com/security/cve/CVE-2020-27756/" source="CVE"/>
		<reference ref_id="CVE-2020-27757" ref_url="https://www.suse.com/security/cve/CVE-2020-27757/" source="CVE"/>
		<reference ref_id="CVE-2020-27758" ref_url="https://www.suse.com/security/cve/CVE-2020-27758/" source="CVE"/>
		<reference ref_id="CVE-2020-27759" ref_url="https://www.suse.com/security/cve/CVE-2020-27759/" source="CVE"/>
		<reference ref_id="CVE-2020-27760" ref_url="https://www.suse.com/security/cve/CVE-2020-27760/" source="CVE"/>
		<reference ref_id="CVE-2020-27761" ref_url="https://www.suse.com/security/cve/CVE-2020-27761/" source="CVE"/>
		<reference ref_id="CVE-2020-27762" ref_url="https://www.suse.com/security/cve/CVE-2020-27762/" source="CVE"/>
		<reference ref_id="CVE-2020-27763" ref_url="https://www.suse.com/security/cve/CVE-2020-27763/" source="CVE"/>
		<reference ref_id="CVE-2020-27764" ref_url="https://www.suse.com/security/cve/CVE-2020-27764/" source="CVE"/>
		<reference ref_id="CVE-2020-27765" ref_url="https://www.suse.com/security/cve/CVE-2020-27765/" source="CVE"/>
		<reference ref_id="CVE-2020-27766" ref_url="https://www.suse.com/security/cve/CVE-2020-27766/" source="CVE"/>
		<reference ref_id="CVE-2020-27767" ref_url="https://www.suse.com/security/cve/CVE-2020-27767/" source="CVE"/>
		<reference ref_id="CVE-2020-27768" ref_url="https://www.suse.com/security/cve/CVE-2020-27768/" source="CVE"/>
		<reference ref_id="CVE-2020-27769" ref_url="https://www.suse.com/security/cve/CVE-2020-27769/" source="CVE"/>
		<reference ref_id="CVE-2020-27770" ref_url="https://www.suse.com/security/cve/CVE-2020-27770/" source="CVE"/>
		<reference ref_id="CVE-2020-27771" ref_url="https://www.suse.com/security/cve/CVE-2020-27771/" source="CVE"/>
		<reference ref_id="CVE-2020-27772" ref_url="https://www.suse.com/security/cve/CVE-2020-27772/" source="CVE"/>
		<reference ref_id="CVE-2020-27773" ref_url="https://www.suse.com/security/cve/CVE-2020-27773/" source="CVE"/>
		<reference ref_id="CVE-2020-27774" ref_url="https://www.suse.com/security/cve/CVE-2020-27774/" source="CVE"/>
		<reference ref_id="CVE-2020-27775" ref_url="https://www.suse.com/security/cve/CVE-2020-27775/" source="CVE"/>
		<reference ref_id="CVE-2020-27776" ref_url="https://www.suse.com/security/cve/CVE-2020-27776/" source="CVE"/>
		<reference ref_id="CVE-2020-29599" ref_url="https://www.suse.com/security/cve/CVE-2020-29599/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008220.html" source="SUSE-SU"/>
		<description>
This update for ImageMagick fixes the following issues:

- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).
- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).
- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).
- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).
- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).
- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).
- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).
- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).
- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).
- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).
- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).
- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).
- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).
- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).
- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).
- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).
- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).
- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).
- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).
- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).
- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).
- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).
- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).
- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).
- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).
- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).
- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).
- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).
- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).
- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).
- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).
- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).
- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).
- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).
- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-18"/>
	<updated date="2021-01-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179103">SUSE bug 1179103</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179202">SUSE bug 1179202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179208">SUSE bug 1179208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179212">SUSE bug 1179212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179221">SUSE bug 1179221</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179223">SUSE bug 1179223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179240">SUSE bug 1179240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179244">SUSE bug 1179244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179260">SUSE bug 1179260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179268">SUSE bug 1179268</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179269">SUSE bug 1179269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179276">SUSE bug 1179276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179278">SUSE bug 1179278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179281">SUSE bug 1179281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179285">SUSE bug 1179285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179311">SUSE bug 1179311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179312">SUSE bug 1179312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179313">SUSE bug 1179313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179315">SUSE bug 1179315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179317">SUSE bug 1179317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179321">SUSE bug 1179321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179322">SUSE bug 1179322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179327">SUSE bug 1179327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179333">SUSE bug 1179333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179336">SUSE bug 1179336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179338">SUSE bug 1179338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179339">SUSE bug 1179339</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179343">SUSE bug 1179343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179345">SUSE bug 1179345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179346">SUSE bug 1179346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179347">SUSE bug 1179347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179361">SUSE bug 1179361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179362">SUSE bug 1179362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179397">SUSE bug 1179397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179753">SUSE bug 1179753</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-19667/">CVE-2020-19667</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-25664/">CVE-2020-25664</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25665/">CVE-2020-25665</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25666/">CVE-2020-25666</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25674/">CVE-2020-25674</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25675/">CVE-2020-25675</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25676/">CVE-2020-25676</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27750/">CVE-2020-27750</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27751/">CVE-2020-27751</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27752/">CVE-2020-27752</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27753/">CVE-2020-27753</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27754/">CVE-2020-27754</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27755/">CVE-2020-27755</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27756/">CVE-2020-27756</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27757/">CVE-2020-27757</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27758/">CVE-2020-27758</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27759/">CVE-2020-27759</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27760/">CVE-2020-27760</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27761/">CVE-2020-27761</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27762/">CVE-2020-27762</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27763/">CVE-2020-27763</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27764/">CVE-2020-27764</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27765/">CVE-2020-27765</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27766/">CVE-2020-27766</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27767/">CVE-2020-27767</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27768/">CVE-2020-27768</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27769/">CVE-2020-27769</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27770/">CVE-2020-27770</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27771/">CVE-2020-27771</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27772/">CVE-2020-27772</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27773/">CVE-2020-27773</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27774/">CVE-2020-27774</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27775/">CVE-2020-27775</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27776/">CVE-2020-27776</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29599/">CVE-2020-29599</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495619" comment="ImageMagick-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495620" comment="ImageMagick-config-7-SUSE-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495621" comment="ImageMagick-config-7-upstream-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495622" comment="ImageMagick-devel-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495623" comment="libMagick++-7_Q16HDRI4-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495624" comment="libMagick++-devel-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495625" comment="libMagickCore-7_Q16HDRI6-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495626" comment="libMagickWand-7_Q16HDRI6-7.0.7.34-3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496449" comment="perl-PerlMagick-7.0.7.34-3.90.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140769" version="1" class="patch">
	<metadata>
		<title>Security update for shim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177315" ref_url="https://bugzilla.suse.com/1177315" source="BUGZILLA"/>
		<reference ref_id="1182057" ref_url="https://bugzilla.suse.com/1182057" source="BUGZILLA"/>
		<reference ref_id="1185464" ref_url="https://bugzilla.suse.com/1185464" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:1564-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008758.html" source="SUSE-SU"/>
		<description>
This update for shim fixes the following issues:

- Update to the unified shim binary for SBAT support (bsc#1182057)
  + Merged EKU codesign check (bsc#1177315)
- shim-install: Always assume 'removable' for Azure to avoid the endless reset loop (bsc#1185464).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-11"/>
	<updated date="2021-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177315">SUSE bug 1177315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182057">SUSE bug 1182057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185464">SUSE bug 1185464</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493901" comment="shim-15.4-3.20.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140770" version="1" class="patch">
	<metadata>
		<title>Security update for tcmu-runner (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180676" ref_url="https://bugzilla.suse.com/1180676" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3139" ref_url="https://www.suse.com/security/cve/CVE-2021-3139/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008219.html" source="SUSE-SU"/>
		<description>
This update for tcmu-runner fixes the following issue:

- CVE-2021-3139: Fixed a LIO security issue (bsc#1180676).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-18"/>
	<updated date="2021-01-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180676">SUSE bug 1180676</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3139/">CVE-2021-3139</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504826" comment="libtcmu2-1.4.0-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504827" comment="tcmu-runner-1.4.0-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140771" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1047233" ref_url="https://bugzilla.suse.com/1047233" source="BUGZILLA"/>
		<reference ref_id="1172455" ref_url="https://bugzilla.suse.com/1172455" source="BUGZILLA"/>
		<reference ref_id="1173485" ref_url="https://bugzilla.suse.com/1173485" source="BUGZILLA"/>
		<reference ref_id="1176720" ref_url="https://bugzilla.suse.com/1176720" source="BUGZILLA"/>
		<reference ref_id="1177411" ref_url="https://bugzilla.suse.com/1177411" source="BUGZILLA"/>
		<reference ref_id="1178181" ref_url="https://bugzilla.suse.com/1178181" source="BUGZILLA"/>
		<reference ref_id="1179454" ref_url="https://bugzilla.suse.com/1179454" source="BUGZILLA"/>
		<reference ref_id="1180197" ref_url="https://bugzilla.suse.com/1180197" source="BUGZILLA"/>
		<reference ref_id="1181960" ref_url="https://bugzilla.suse.com/1181960" source="BUGZILLA"/>
		<reference ref_id="1182011" ref_url="https://bugzilla.suse.com/1182011" source="BUGZILLA"/>
		<reference ref_id="1182672" ref_url="https://bugzilla.suse.com/1182672" source="BUGZILLA"/>
		<reference ref_id="1182715" ref_url="https://bugzilla.suse.com/1182715" source="BUGZILLA"/>
		<reference ref_id="1182716" ref_url="https://bugzilla.suse.com/1182716" source="BUGZILLA"/>
		<reference ref_id="1182717" ref_url="https://bugzilla.suse.com/1182717" source="BUGZILLA"/>
		<reference ref_id="1183022" ref_url="https://bugzilla.suse.com/1183022" source="BUGZILLA"/>
		<reference ref_id="1183063" ref_url="https://bugzilla.suse.com/1183063" source="BUGZILLA"/>
		<reference ref_id="1183069" ref_url="https://bugzilla.suse.com/1183069" source="BUGZILLA"/>
		<reference ref_id="1183509" ref_url="https://bugzilla.suse.com/1183509" source="BUGZILLA"/>
		<reference ref_id="1183593" ref_url="https://bugzilla.suse.com/1183593" source="BUGZILLA"/>
		<reference ref_id="1183646" ref_url="https://bugzilla.suse.com/1183646" source="BUGZILLA"/>
		<reference ref_id="1183686" ref_url="https://bugzilla.suse.com/1183686" source="BUGZILLA"/>
		<reference ref_id="1183696" ref_url="https://bugzilla.suse.com/1183696" source="BUGZILLA"/>
		<reference ref_id="1183775" ref_url="https://bugzilla.suse.com/1183775" source="BUGZILLA"/>
		<reference ref_id="1184120" ref_url="https://bugzilla.suse.com/1184120" source="BUGZILLA"/>
		<reference ref_id="1184167" ref_url="https://bugzilla.suse.com/1184167" source="BUGZILLA"/>
		<reference ref_id="1184168" ref_url="https://bugzilla.suse.com/1184168" source="BUGZILLA"/>
		<reference ref_id="1184170" ref_url="https://bugzilla.suse.com/1184170" source="BUGZILLA"/>
		<reference ref_id="1184192" ref_url="https://bugzilla.suse.com/1184192" source="BUGZILLA"/>
		<reference ref_id="1184193" ref_url="https://bugzilla.suse.com/1184193" source="BUGZILLA"/>
		<reference ref_id="1184194" ref_url="https://bugzilla.suse.com/1184194" source="BUGZILLA"/>
		<reference ref_id="1184196" ref_url="https://bugzilla.suse.com/1184196" source="BUGZILLA"/>
		<reference ref_id="1184198" ref_url="https://bugzilla.suse.com/1184198" source="BUGZILLA"/>
		<reference ref_id="1184208" ref_url="https://bugzilla.suse.com/1184208" source="BUGZILLA"/>
		<reference ref_id="1184211" ref_url="https://bugzilla.suse.com/1184211" source="BUGZILLA"/>
		<reference ref_id="1184388" ref_url="https://bugzilla.suse.com/1184388" source="BUGZILLA"/>
		<reference ref_id="1184391" ref_url="https://bugzilla.suse.com/1184391" source="BUGZILLA"/>
		<reference ref_id="1184393" ref_url="https://bugzilla.suse.com/1184393" source="BUGZILLA"/>
		<reference ref_id="1184397" ref_url="https://bugzilla.suse.com/1184397" source="BUGZILLA"/>
		<reference ref_id="1184509" ref_url="https://bugzilla.suse.com/1184509" source="BUGZILLA"/>
		<reference ref_id="1184511" ref_url="https://bugzilla.suse.com/1184511" source="BUGZILLA"/>
		<reference ref_id="1184512" ref_url="https://bugzilla.suse.com/1184512" source="BUGZILLA"/>
		<reference ref_id="1184514" ref_url="https://bugzilla.suse.com/1184514" source="BUGZILLA"/>
		<reference ref_id="1184583" ref_url="https://bugzilla.suse.com/1184583" source="BUGZILLA"/>
		<reference ref_id="1184650" ref_url="https://bugzilla.suse.com/1184650" source="BUGZILLA"/>
		<reference ref_id="1184942" ref_url="https://bugzilla.suse.com/1184942" source="BUGZILLA"/>
		<reference ref_id="1185113" ref_url="https://bugzilla.suse.com/1185113" source="BUGZILLA"/>
		<reference ref_id="1185244" ref_url="https://bugzilla.suse.com/1185244" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0433" ref_url="https://www.suse.com/security/cve/CVE-2020-0433/" source="CVE"/>
		<reference ref_id="CVE-2020-25670" ref_url="https://www.suse.com/security/cve/CVE-2020-25670/" source="CVE"/>
		<reference ref_id="CVE-2020-25671" ref_url="https://www.suse.com/security/cve/CVE-2020-25671/" source="CVE"/>
		<reference ref_id="CVE-2020-25672" ref_url="https://www.suse.com/security/cve/CVE-2020-25672/" source="CVE"/>
		<reference ref_id="CVE-2020-25673" ref_url="https://www.suse.com/security/cve/CVE-2020-25673/" source="CVE"/>
		<reference ref_id="CVE-2020-27170" ref_url="https://www.suse.com/security/cve/CVE-2020-27170/" source="CVE"/>
		<reference ref_id="CVE-2020-27171" ref_url="https://www.suse.com/security/cve/CVE-2020-27171/" source="CVE"/>
		<reference ref_id="CVE-2020-27673" ref_url="https://www.suse.com/security/cve/CVE-2020-27673/" source="CVE"/>
		<reference ref_id="CVE-2020-27815" ref_url="https://www.suse.com/security/cve/CVE-2020-27815/" source="CVE"/>
		<reference ref_id="CVE-2020-35519" ref_url="https://www.suse.com/security/cve/CVE-2020-35519/" source="CVE"/>
		<reference ref_id="CVE-2020-36310" ref_url="https://www.suse.com/security/cve/CVE-2020-36310/" source="CVE"/>
		<reference ref_id="CVE-2020-36311" ref_url="https://www.suse.com/security/cve/CVE-2020-36311/" source="CVE"/>
		<reference ref_id="CVE-2020-36312" ref_url="https://www.suse.com/security/cve/CVE-2020-36312/" source="CVE"/>
		<reference ref_id="CVE-2020-36322" ref_url="https://www.suse.com/security/cve/CVE-2020-36322/" source="CVE"/>
		<reference ref_id="CVE-2021-20219" ref_url="https://www.suse.com/security/cve/CVE-2021-20219/" source="CVE"/>
		<reference ref_id="CVE-2021-27363" ref_url="https://www.suse.com/security/cve/CVE-2021-27363/" source="CVE"/>
		<reference ref_id="CVE-2021-27364" ref_url="https://www.suse.com/security/cve/CVE-2021-27364/" source="CVE"/>
		<reference ref_id="CVE-2021-27365" ref_url="https://www.suse.com/security/cve/CVE-2021-27365/" source="CVE"/>
		<reference ref_id="CVE-2021-28038" ref_url="https://www.suse.com/security/cve/CVE-2021-28038/" source="CVE"/>
		<reference ref_id="CVE-2021-28660" ref_url="https://www.suse.com/security/cve/CVE-2021-28660/" source="CVE"/>
		<reference ref_id="CVE-2021-28688" ref_url="https://www.suse.com/security/cve/CVE-2021-28688/" source="CVE"/>
		<reference ref_id="CVE-2021-28950" ref_url="https://www.suse.com/security/cve/CVE-2021-28950/" source="CVE"/>
		<reference ref_id="CVE-2021-28964" ref_url="https://www.suse.com/security/cve/CVE-2021-28964/" source="CVE"/>
		<reference ref_id="CVE-2021-28971" ref_url="https://www.suse.com/security/cve/CVE-2021-28971/" source="CVE"/>
		<reference ref_id="CVE-2021-28972" ref_url="https://www.suse.com/security/cve/CVE-2021-28972/" source="CVE"/>
		<reference ref_id="CVE-2021-29154" ref_url="https://www.suse.com/security/cve/CVE-2021-29154/" source="CVE"/>
		<reference ref_id="CVE-2021-29155" ref_url="https://www.suse.com/security/cve/CVE-2021-29155/" source="CVE"/>
		<reference ref_id="CVE-2021-29264" ref_url="https://www.suse.com/security/cve/CVE-2021-29264/" source="CVE"/>
		<reference ref_id="CVE-2021-29265" ref_url="https://www.suse.com/security/cve/CVE-2021-29265/" source="CVE"/>
		<reference ref_id="CVE-2021-29647" ref_url="https://www.suse.com/security/cve/CVE-2021-29647/" source="CVE"/>
		<reference ref_id="CVE-2021-29650" ref_url="https://www.suse.com/security/cve/CVE-2021-29650/" source="CVE"/>
		<reference ref_id="CVE-2021-30002" ref_url="https://www.suse.com/security/cve/CVE-2021-30002/" source="CVE"/>
		<reference ref_id="CVE-2021-3428" ref_url="https://www.suse.com/security/cve/CVE-2021-3428/" source="CVE"/>
		<reference ref_id="CVE-2021-3444" ref_url="https://www.suse.com/security/cve/CVE-2021-3444/" source="CVE"/>
		<reference ref_id="CVE-2021-3483" ref_url="https://www.suse.com/security/cve/CVE-2021-3483/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1624-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008781.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bnc#1184509).
- CVE-2021-29650: Fixed an issue inside the netfilter subsystem that allowed attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value (bnc#1184208).
- CVE-2021-29155: Fixed an issue within kernel/bpf/verifier.c that performed undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations (bnc#1184942).
- CVE-2020-36310: Fixed an issue in arch/x86/kvm/svm/svm.c that allowed a set_memory_region_test infinite loop for certain nested page faults (bnc#1184512).
- CVE-2020-27673: Fixed an issue in Xen where a guest OS users could have caused a denial of service (host OS hang) via a high rate of events to dom0 (bnc#1177411, bnc#1184583).
- CVE-2021-29154: Fixed BPF JIT compilers that allowed to execute arbitrary code within the kernel context (bnc#1184391).
- CVE-2020-25673: Fixed NFC endless loops caused by repeated llcp_sock_connect() (bsc#1178181).
- CVE-2020-25672: Fixed NFC memory leak in llcp_sock_connect() (bsc#1178181).
- CVE-2020-25671: Fixed NFC refcount leak in llcp_sock_connect() (bsc#1178181).
- CVE-2020-25670: Fixed NFC refcount leak in llcp_sock_bind() (bsc#1178181).
- CVE-2020-36311: Fixed an issue in arch/x86/kvm/svm/sev.c that allowed attackers to cause a denial of service (soft lockup) by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions) (bnc#1184511).
- CVE-2021-28950: Fixed an issue in fs/fuse/fuse_i.h where a 'stall on CPU' could have occured because a retry loop continually finds the same bad inode (bnc#1184194, bnc#1184211).
- CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bnc#1184211).
- CVE-2021-30002: Fixed a memory leak issue when a webcam device exists (bnc#1184120).
- CVE-2021-3483: Fixed a use-after-free bug in nosy_ioctl() (bsc#1184393).
- CVE-2021-20219: Fixed a denial of service vulnerability in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could have delayed the loop and cause a threat to the system availability (bnc#1184397).
- CVE-2021-28964: Fixed a race condition in fs/btrfs/ctree.c that could have caused a denial of service because of a lack of locking on an extent buffer before a cloning operation (bnc#1184193).
- CVE-2021-3444: Fixed the bpf verifier as it did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution (bnc#1184170).
- CVE-2021-28971: Fixed a potential local denial of service in intel_pmu_drain_pebs_nhm where userspace applications can cause a system crash because the PEBS status in a PEBS record is mishandled (bnc#1184196).
- CVE-2021-28688: Fixed XSA-365 that includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in leaking persistent grants. The leak in turn would prevent fully cleaning up after a respective guest has died, leaving around zombie domains (bnc#1183646).
- CVE-2021-29265: Fixed an issue in usbip_sockfd_store in drivers/usb/usbip/stub_dev.c that allowed attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status (bnc#1184167).
- CVE-2021-29264: Fixed an issue in drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver that allowed attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is enabled (bnc#1184168).
- CVE-2021-28972: Fixed an issue in drivers/pci/hotplug/rpadlpar_sysfs.c where the RPA PCI Hotplug driver had a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination (bnc#1184198).
- CVE-2021-29647: Fixed an issue in kernel qrtr_recvmsg in net/qrtr/qrtr.c that allowed attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure (bnc#1184192).
- CVE-2020-27171: Fixed an issue in kernel/bpf/verifier.c that had an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory (bnc#1183686, bnc#1183775).
- CVE-2020-27170: Fixed an issue in kernel/bpf/verifier.c that performed undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. This affects pointer types that do not define a ptr_limit (bnc#1183686 bnc#1183775).
- CVE-2021-28660: Fixed rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c that allowed writing beyond the end of the ssid array (bnc#1183593).
- CVE-2020-35519: Update patch reference for x25 fix (bsc#1183696).
- CVE-2021-3428: Fixed ext4 integer overflow in ext4_es_cache_extent (bsc#1173485, bsc#1183509).
- CVE-2020-0433: Fixed blk_mq_queue_tag_busy_iter of blk-mq-tag.c, where a possible use after free due to improper locking could have happened. This could have led to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (bnc#1176720).
- CVE-2021-28038: Fixed an issue with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931 (bnc#1183022, bnc#1183069).
- CVE-2020-27815: Fixed jfs array index bounds check in dbAdjTree (bsc#1179454).
- CVE-2021-27365: Fixed an issue inside the iSCSI data structures that does not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message (bnc#1182715).
- CVE-2021-27363: Fixed an issue with a kernel pointer leak that could have been used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables (bnc#1182716).
- CVE-2021-27364: Fixed an issue in drivers/scsi/scsi_transport_iscsi.c where an unprivileged user can craft Netlink messages (bnc#1182717).

The following non-security bugs were fixed:

- Revert 'rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)' This turned out to be a bad idea: the kernel-$flavor-devel package must be usable without kernel-$flavor, e.g. at the build of a KMP. And this change brought superfluous installation of kernel-preempt when a system had kernel-syms (bsc#1185113).
- Xen/gnttab: handle p2m update errors on a per-slot basis (bsc#1183022 XSA-367).
- bfq: Fix kABI for update internal depth state when queue depth changes (bsc#1172455).
- bfq: update internal depth state when queue depth changes (bsc#1172455).
- bpf: Add sanity check for upper ptr_limit (bsc#1183686 bsc#1183775).
- bpf: Simplify alu_limit masking for pointer arithmetic (bsc#1183686 bsc#1183775).
- handle also the opposite type of race condition
- ibmvnic: Clear failover_pending if unable to schedule (bsc#1181960 ltc#190997).
- ibmvnic: always store valid MAC address (bsc#1182011 ltc#191844).
- ibmvnic: store valid MAC address (bsc#1182011).
- macros.kernel-source: Use spec_install_pre for certificate installation (boo#1182672).
- nvme: return an error if nvme_set_queue_count() fails (bsc#1180197).
- post.sh: Return an error when module update fails (bsc#1047233 bsc#1184388).
- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- rpm/mkspec: Use tilde instead of dot for version string with rc (bsc#1184650)
- xen-netback: respect gnttab_map_refs()'s return value (bsc#1183022, XSA-367).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-18"/>
	<updated date="2021-05-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1047233">SUSE bug 1047233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172455">SUSE bug 1172455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173485">SUSE bug 1173485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176720">SUSE bug 1176720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177411">SUSE bug 1177411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178181">SUSE bug 1178181</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179454">SUSE bug 1179454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180197">SUSE bug 1180197</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181960">SUSE bug 1181960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182011">SUSE bug 1182011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182672">SUSE bug 1182672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182715">SUSE bug 1182715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182716">SUSE bug 1182716</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182717">SUSE bug 1182717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183022">SUSE bug 1183022</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183063">SUSE bug 1183063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183069">SUSE bug 1183069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183509">SUSE bug 1183509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183593">SUSE bug 1183593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183646">SUSE bug 1183646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183686">SUSE bug 1183686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183696">SUSE bug 1183696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183775">SUSE bug 1183775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184120">SUSE bug 1184120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184167">SUSE bug 1184167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184168">SUSE bug 1184168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184170">SUSE bug 1184170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184192">SUSE bug 1184192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184193">SUSE bug 1184193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184194">SUSE bug 1184194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184196">SUSE bug 1184196</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184198">SUSE bug 1184198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184208">SUSE bug 1184208</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184211">SUSE bug 1184211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184388">SUSE bug 1184388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184391">SUSE bug 1184391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184393">SUSE bug 1184393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184397">SUSE bug 1184397</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184509">SUSE bug 1184509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184511">SUSE bug 1184511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184512">SUSE bug 1184512</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184514">SUSE bug 1184514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184583">SUSE bug 1184583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184650">SUSE bug 1184650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184942">SUSE bug 1184942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185113">SUSE bug 1185113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185244">SUSE bug 1185244</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0433/">CVE-2020-0433</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25670/">CVE-2020-25670</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25671/">CVE-2020-25671</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25672/">CVE-2020-25672</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25673/">CVE-2020-25673</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-27170/">CVE-2020-27170</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27171/">CVE-2020-27171</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27673/">CVE-2020-27673</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27815/">CVE-2020-27815</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35519/">CVE-2020-35519</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36310/">CVE-2020-36310</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36311/">CVE-2020-36311</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36312/">CVE-2020-36312</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36322/">CVE-2020-36322</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20219/">CVE-2021-20219</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27363/">CVE-2021-27363</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27364/">CVE-2021-27364</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27365/">CVE-2021-27365</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28038/">CVE-2021-28038</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28660/">CVE-2021-28660</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28688/">CVE-2021-28688</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28950/">CVE-2021-28950</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28964/">CVE-2021-28964</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28971/">CVE-2021-28971</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28972/">CVE-2021-28972</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29154/">CVE-2021-29154</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29155/">CVE-2021-29155</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29264/">CVE-2021-29264</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29265/">CVE-2021-29265</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29647/">CVE-2021-29647</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29650/">CVE-2021-29650</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-30002/">CVE-2021-30002</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3428/">CVE-2021-3428</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3444/">CVE-2021-3444</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3483/">CVE-2021-3483</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505825" comment="kernel-default-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505826" comment="kernel-default-base-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505827" comment="kernel-default-devel-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505828" comment="kernel-default-man-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503989" comment="kernel-devel-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503990" comment="kernel-docs-4.12.14-197.89.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503991" comment="kernel-macros-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505829" comment="kernel-obs-build-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503993" comment="kernel-source-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505830" comment="kernel-syms-4.12.14-197.89.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505831" comment="reiserfs-kmp-default-4.12.14-197.89.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140772" version="1" class="patch">
	<metadata>
		<title>Security update for lz4 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185438" ref_url="https://bugzilla.suse.com/1185438" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3520" ref_url="https://www.suse.com/security/cve/CVE-2021-3520/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1647-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/018981.html" source="SUSE-SU"/>
		<description>
This update for lz4 fixes the following issues:

- CVE-2021-3520: Fixed memory corruption due to an integer overflow bug caused by memmove argument (bsc#1185438).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-19"/>
	<updated date="2021-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185438">SUSE bug 1185438</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-3520/">CVE-2021-3520</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493922" comment="liblz4-1-1.8.0-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493923" comment="liblz4-1-32bit-1.8.0-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493924" comment="liblz4-devel-1.8.0-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493925" comment="lz4-1.8.0-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140773" version="1" class="patch">
	<metadata>
		<title>Security update for djvulibre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185895" ref_url="https://bugzilla.suse.com/1185895" source="BUGZILLA"/>
		<reference ref_id="1185900" ref_url="https://bugzilla.suse.com/1185900" source="BUGZILLA"/>
		<reference ref_id="1185904" ref_url="https://bugzilla.suse.com/1185904" source="BUGZILLA"/>
		<reference ref_id="1185905" ref_url="https://bugzilla.suse.com/1185905" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-32490" ref_url="https://www.suse.com/security/cve/CVE-2021-32490/" source="CVE"/>
		<reference ref_id="CVE-2021-32491" ref_url="https://www.suse.com/security/cve/CVE-2021-32491/" source="CVE"/>
		<reference ref_id="CVE-2021-32492" ref_url="https://www.suse.com/security/cve/CVE-2021-32492/" source="CVE"/>
		<reference ref_id="CVE-2021-32493" ref_url="https://www.suse.com/security/cve/CVE-2021-32493/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008784.html" source="SUSE-SU"/>
		<description>
This update for djvulibre fixes the following issues:

Security issues fixed:

- CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
- CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
- CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
- CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-19"/>
	<updated date="2021-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185895">SUSE bug 1185895</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185900">SUSE bug 1185900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185904">SUSE bug 1185904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185905">SUSE bug 1185905</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32490/">CVE-2021-32490</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32491/">CVE-2021-32491</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32492/">CVE-2021-32492</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32493/">CVE-2021-32493</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504829" comment="libdjvulibre-devel-3.5.27-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504830" comment="libdjvulibre21-3.5.27-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140774" version="1" class="patch">
	<metadata>
		<title>Security update for graphviz (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185833" ref_url="https://bugzilla.suse.com/1185833" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-18032" ref_url="https://www.suse.com/security/cve/CVE-2020-18032/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1651-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-May/018980.html" source="SUSE-SU"/>
		<description>
This update for graphviz fixes the following issues:

- CVE-2020-18032: Fixed possible remote code execution via buffer overflow (bsc#1185833).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-19"/>
	<updated date="2021-05-19"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1185833">SUSE bug 1185833</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-18032/">CVE-2020-18032</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493926" comment="graphviz-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493927" comment="graphviz-devel-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496550" comment="graphviz-perl-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493928" comment="graphviz-plugins-core-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499860" comment="graphviz-tcl-2.40.1-6.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493929" comment="libgraphviz6-2.40.1-6.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140775" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177976" ref_url="https://bugzilla.suse.com/1177976" source="BUGZILLA"/>
		<reference ref_id="1183933" ref_url="https://bugzilla.suse.com/1183933" source="BUGZILLA"/>
		<reference ref_id="1186114" ref_url="https://bugzilla.suse.com/1186114" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22876" ref_url="https://www.suse.com/security/cve/CVE-2021-22876/" source="CVE"/>
		<reference ref_id="CVE-2021-22898" ref_url="https://www.suse.com/security/cve/CVE-2021-22898/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1809-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-May/008887.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2021-22876: Fixed an issue where the automatic referer was leaking credentials (bsc#1183933).
- CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114).
- Fix for SFTP uploads when it results in empty uploaded files (bsc#1177976).
- Allow partial chain verification (jsc#SLE-17956).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-05-31"/>
	<updated date="2021-05-31"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177976">SUSE bug 1177976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183933">SUSE bug 1183933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186114">SUSE bug 1186114</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22876/">CVE-2021-22876</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22898/">CVE-2021-22898</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504832" comment="curl-7.60.0-3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504833" comment="libcurl-devel-7.60.0-3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504834" comment="libcurl4-7.60.0-3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503324" comment="libcurl4-32bit-7.60.0-3.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140776" version="1" class="patch">
	<metadata>
		<title>Security update for ceph (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185619" ref_url="https://bugzilla.suse.com/1185619" source="BUGZILLA"/>
		<reference ref_id="1186020" ref_url="https://bugzilla.suse.com/1186020" source="BUGZILLA"/>
		<reference ref_id="1186021" ref_url="https://bugzilla.suse.com/1186021" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3509" ref_url="https://www.suse.com/security/cve/CVE-2021-3509/" source="CVE"/>
		<reference ref_id="CVE-2021-3524" ref_url="https://www.suse.com/security/cve/CVE-2021-3524/" source="CVE"/>
		<reference ref_id="CVE-2021-3531" ref_url="https://www.suse.com/security/cve/CVE-2021-3531/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008918.html" source="SUSE-SU"/>
		<description>
This update for ceph fixes the following issues:

- Update to 15.2.12-83-g528da226523:
- (CVE-2021-3509) fix cookie injection issue (bsc#1186021)
- (CVE-2021-3531) RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (bsc#1186020)
- (CVE-2021-3524) sanitize \r in s3 CORSConfiguration’s ExposeHeader (bsc#1185619)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-02"/>
	<updated date="2021-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185619">SUSE bug 1185619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186020">SUSE bug 1186020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186021">SUSE bug 1186021</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3509/">CVE-2021-3509</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3524/">CVE-2021-3524</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3531/">CVE-2021-3531</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505832" comment="ceph-common-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505833" comment="libcephfs-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505834" comment="libcephfs2-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505835" comment="librados-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505836" comment="librados2-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505837" comment="libradospp-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505838" comment="librbd-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505839" comment="librbd1-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505840" comment="librgw-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505841" comment="librgw2-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505842" comment="python3-ceph-argparse-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505843" comment="python3-cephfs-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505844" comment="python3-rados-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505845" comment="python3-rbd-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505846" comment="python3-rgw-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505847" comment="rados-objclass-devel-14.2.21.403+g69ab6ea274d-3.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140777" version="1" class="patch">
	<metadata>
		<title>Security update for nginx (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186126" ref_url="https://bugzilla.suse.com/1186126" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23017" ref_url="https://www.suse.com/security/cve/CVE-2021-23017/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1839-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008913.html" source="SUSE-SU"/>
		<description>
This update for nginx fixes the following issues:

- CVE-2021-23017: nginx DNS resolver off-by-one heap write (bsc#1186126)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-02"/>
	<updated date="2021-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186126">SUSE bug 1186126</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23017/">CVE-2021-23017</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505848" comment="nginx-1.16.1-6.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504070" comment="nginx-source-1.16.1-6.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140778" version="1" class="patch">
	<metadata>
		<title>Security update for dhcp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186382" ref_url="https://bugzilla.suse.com/1186382" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25217" ref_url="https://www.suse.com/security/cve/CVE-2021-25217/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1841-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008914.html" source="SUSE-SU"/>
		<description>
This update for dhcp fixes the following issues:

- CVE-2021-25217: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient (bsc#1186382)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-02"/>
	<updated date="2021-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186382">SUSE bug 1186382</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-25217/">CVE-2021-25217</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494008" comment="dhcp-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494009" comment="dhcp-client-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494010" comment="dhcp-devel-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499890" comment="dhcp-relay-4.3.6.P1-6.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499891" comment="dhcp-server-4.3.6.P1-6.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140779" version="1" class="patch">
	<metadata>
		<title>Security update for polkit (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186497" ref_url="https://bugzilla.suse.com/1186497" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3560" ref_url="https://www.suse.com/security/cve/CVE-2021-3560/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008926.html" source="SUSE-SU"/>
		<description>
This update for polkit fixes the following issues:

- CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-03"/>
	<updated date="2021-06-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186497">SUSE bug 1186497</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3560/">CVE-2021-3560</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504835" comment="libpolkit0-0.114-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504836" comment="polkit-0.114-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504837" comment="polkit-devel-0.114-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504838" comment="typelib-1_0-Polkit-1_0-0.114-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140780" version="1" class="patch">
	<metadata>
		<title>Security update for djvulibre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186253" ref_url="https://bugzilla.suse.com/1186253" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3500" ref_url="https://www.suse.com/security/cve/CVE-2021-3500/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1857-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008932.html" source="SUSE-SU"/>
		<description>
This update for djvulibre fixes the following issues:

- CVE-2021-3500: Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file (bsc#1186253)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186253">SUSE bug 1186253</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3500/">CVE-2021-3500</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504858" comment="libdjvulibre-devel-3.5.27-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504859" comment="libdjvulibre21-3.5.27-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140781" version="1" class="patch">
	<metadata>
		<title>Security update for wavpack (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1091340" ref_url="https://bugzilla.suse.com/1091340" source="BUGZILLA"/>
		<reference ref_id="1091341" ref_url="https://bugzilla.suse.com/1091341" source="BUGZILLA"/>
		<reference ref_id="1091342" ref_url="https://bugzilla.suse.com/1091342" source="BUGZILLA"/>
		<reference ref_id="1091343" ref_url="https://bugzilla.suse.com/1091343" source="BUGZILLA"/>
		<reference ref_id="1091344" ref_url="https://bugzilla.suse.com/1091344" source="BUGZILLA"/>
		<reference ref_id="1180414" ref_url="https://bugzilla.suse.com/1180414" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10536" ref_url="https://www.suse.com/security/cve/CVE-2018-10536/" source="CVE"/>
		<reference ref_id="CVE-2018-10537" ref_url="https://www.suse.com/security/cve/CVE-2018-10537/" source="CVE"/>
		<reference ref_id="CVE-2018-10538" ref_url="https://www.suse.com/security/cve/CVE-2018-10538/" source="CVE"/>
		<reference ref_id="CVE-2018-10539" ref_url="https://www.suse.com/security/cve/CVE-2018-10539/" source="CVE"/>
		<reference ref_id="CVE-2018-10540" ref_url="https://www.suse.com/security/cve/CVE-2018-10540/" source="CVE"/>
		<reference ref_id="CVE-2018-19840" ref_url="https://www.suse.com/security/cve/CVE-2018-19840/" source="CVE"/>
		<reference ref_id="CVE-2018-19841" ref_url="https://www.suse.com/security/cve/CVE-2018-19841/" source="CVE"/>
		<reference ref_id="CVE-2018-6767" ref_url="https://www.suse.com/security/cve/CVE-2018-6767/" source="CVE"/>
		<reference ref_id="CVE-2018-7253" ref_url="https://www.suse.com/security/cve/CVE-2018-7253/" source="CVE"/>
		<reference ref_id="CVE-2018-7254" ref_url="https://www.suse.com/security/cve/CVE-2018-7254/" source="CVE"/>
		<reference ref_id="CVE-2019-1010319" ref_url="https://www.suse.com/security/cve/CVE-2019-1010319/" source="CVE"/>
		<reference ref_id="CVE-2019-11498" ref_url="https://www.suse.com/security/cve/CVE-2019-11498/" source="CVE"/>
		<reference ref_id="CVE-2020-35738" ref_url="https://www.suse.com/security/cve/CVE-2020-35738/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0186-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008234.html" source="SUSE-SU"/>
		<description>
This update for wavpack fixes the following issues:

- Update to version 5.4.0
  * CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples (bsc#1180414) 
  * fixed: disable A32 asm code when building for Apple silicon
  * fixed: issues with Adobe-style floating-point WAV files
  * added: --normalize-floats option to wvunpack for correctly
             exporting un-normalized floating-point files
- Update to version 5.3.0 
  * fixed: OSS-Fuzz issues 19925, 19928, 20060, 20448
  * fixed: trailing garbage characters on imported ID3v2 TXXX tags
  * fixed: various minor undefined behavior and memory access issues
  * fixed: sanitize tag extraction names for length and path inclusion
  * improved: reformat wvunpack 'help' and split into long + short versions
  * added: regression testing to Travis CI for OSS-Fuzz crashers
- Updated to version 5.2.0 
  *fixed: potential security issues including the following CVEs:
         CVE-2018-19840, CVE-2018-19841, CVE-2018-10536 (bsc#1091344),
         CVE-2018-10537 (bsc#1091343) CVE-2018-10538 (bsc#1091342),  
         CVE-2018-10539 (bsc#1091341), CVE-2018-10540 (bsc#1091340), 
         CVE-2018-7254,  CVE-2018-7253, CVE-2018-6767, CVE-2019-11498 
         and CVE-2019-1010319
  * added: support for CMake, Travis CI, and Google's OSS-fuzz
  * fixed: use correction file for encode verify (pipe input, Windows)
  * fixed: correct WAV header with actual length (pipe input, -i option)
  * fixed: thumb interworking and not needing v6 architecture (ARM asm)
  * added: handle more ID3v2.3 tag items and from all file types
  * fixed: coredump on Sparc64 (changed MD5 implementation)
  * fixed: handle invalid ID3v2.3 tags from sacd-ripper
  * fixed: several corner-case memory leaks
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-21"/>
	<updated date="2021-01-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1091340">SUSE bug 1091340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091341">SUSE bug 1091341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091342">SUSE bug 1091342</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091343">SUSE bug 1091343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1091344">SUSE bug 1091344</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180414">SUSE bug 1180414</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10536/">CVE-2018-10536</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-10537/">CVE-2018-10537</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10538/">CVE-2018-10538</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10539/">CVE-2018-10539</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-10540/">CVE-2018-10540</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19840/">CVE-2018-19840</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19841/">CVE-2018-19841</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-6767/">CVE-2018-6767</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7253/">CVE-2018-7253</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-7254/">CVE-2018-7254</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-1010319/">CVE-2019-1010319</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11498/">CVE-2019-11498</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35738/">CVE-2020-35738</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494016" comment="libwavpack1-5.4.0-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495808" comment="wavpack-5.4.0-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495809" comment="wavpack-devel-5.4.0-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140782" version="1" class="patch">
	<metadata>
		<title>Security update for libwebp (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185652" ref_url="https://bugzilla.suse.com/1185652" source="BUGZILLA"/>
		<reference ref_id="1185654" ref_url="https://bugzilla.suse.com/1185654" source="BUGZILLA"/>
		<reference ref_id="1185673" ref_url="https://bugzilla.suse.com/1185673" source="BUGZILLA"/>
		<reference ref_id="1185674" ref_url="https://bugzilla.suse.com/1185674" source="BUGZILLA"/>
		<reference ref_id="1185685" ref_url="https://bugzilla.suse.com/1185685" source="BUGZILLA"/>
		<reference ref_id="1185686" ref_url="https://bugzilla.suse.com/1185686" source="BUGZILLA"/>
		<reference ref_id="1185688" ref_url="https://bugzilla.suse.com/1185688" source="BUGZILLA"/>
		<reference ref_id="1185690" ref_url="https://bugzilla.suse.com/1185690" source="BUGZILLA"/>
		<reference ref_id="1185691" ref_url="https://bugzilla.suse.com/1185691" source="BUGZILLA"/>
		<reference ref_id="1186247" ref_url="https://bugzilla.suse.com/1186247" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-25009" ref_url="https://www.suse.com/security/cve/CVE-2018-25009/" source="CVE"/>
		<reference ref_id="CVE-2018-25010" ref_url="https://www.suse.com/security/cve/CVE-2018-25010/" source="CVE"/>
		<reference ref_id="CVE-2018-25011" ref_url="https://www.suse.com/security/cve/CVE-2018-25011/" source="CVE"/>
		<reference ref_id="CVE-2018-25012" ref_url="https://www.suse.com/security/cve/CVE-2018-25012/" source="CVE"/>
		<reference ref_id="CVE-2018-25013" ref_url="https://www.suse.com/security/cve/CVE-2018-25013/" source="CVE"/>
		<reference ref_id="CVE-2020-36328" ref_url="https://www.suse.com/security/cve/CVE-2020-36328/" source="CVE"/>
		<reference ref_id="CVE-2020-36329" ref_url="https://www.suse.com/security/cve/CVE-2020-36329/" source="CVE"/>
		<reference ref_id="CVE-2020-36330" ref_url="https://www.suse.com/security/cve/CVE-2020-36330/" source="CVE"/>
		<reference ref_id="CVE-2020-36331" ref_url="https://www.suse.com/security/cve/CVE-2020-36331/" source="CVE"/>
		<reference ref_id="CVE-2020-36332" ref_url="https://www.suse.com/security/cve/CVE-2020-36332/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1860-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008936.html" source="SUSE-SU"/>
		<description>
This update for libwebp fixes the following issues:

- CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter() (bsc#1185685).
- CVE-2020-36330: Fixed heap-based buffer overflow in ChunkVerifyAndAssign() (bsc#1185691).
- CVE-2020-36332: Fixed extreme memory allocation when reading a file (bsc#1185674).
- CVE-2020-36329: Fixed use-after-free in EmitFancyRGB() (bsc#1185652).
- CVE-2018-25012: Fixed heap-based buffer overflow in GetLE24() (bsc#1185690).
- CVE-2020-36328: Fixed heap-based buffer overflow in WebPDecode*Into functions (bsc#1185688).
- CVE-2018-25013: Fixed heap-based buffer overflow in ShiftBytes() (bsc#1185654).
- CVE-2020-36331: Fixed heap-based buffer overflow in ChunkAssignData() (bsc#1185686).
- CVE-2018-25009: Fixed heap-based buffer overflow in GetLE16() (bsc#1185673).
- CVE-2018-25011: Fixed fail on multiple image chunks (bsc#1186247).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1185652">SUSE bug 1185652</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185654">SUSE bug 1185654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185673">SUSE bug 1185673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185674">SUSE bug 1185674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185685">SUSE bug 1185685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185686">SUSE bug 1185686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185688">SUSE bug 1185688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185690">SUSE bug 1185690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185691">SUSE bug 1185691</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186247">SUSE bug 1186247</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25009/">CVE-2018-25009</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25010/">CVE-2018-25010</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25011/">CVE-2018-25011</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25012/">CVE-2018-25012</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-25013/">CVE-2018-25013</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36328/">CVE-2020-36328</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36329/">CVE-2020-36329</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36330/">CVE-2020-36330</cve>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36331/">CVE-2020-36331</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36332/">CVE-2020-36332</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504860" comment="libwebp-devel-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504861" comment="libwebp6-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504862" comment="libwebpdecoder2-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504863" comment="libwebpdemux2-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504864" comment="libwebpextras0-0.5.0-3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504865" comment="libwebpmux2-0.5.0-3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140783" version="1" class="patch">
	<metadata>
		<title>Security update for umoci (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184147" ref_url="https://bugzilla.suse.com/1184147" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29136" ref_url="https://www.suse.com/security/cve/CVE-2021-29136/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1863-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008938.html" source="SUSE-SU"/>
		<description>
This update for umoci fixes the following issues:

Update to v0.4.7 (bsc#1184147).

- CVE-2021-29136: Fixed overwriting of host files via malicious layer (bsc#1184147).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-04"/>
	<updated date="2021-06-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184147">SUSE bug 1184147</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29136/">CVE-2021-29136</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494421" comment="umoci-0.4.7-3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140784" version="1" class="patch">
	<metadata>
		<title>Security update for pam_radius (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1163933" ref_url="https://bugzilla.suse.com/1163933" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-9542" ref_url="https://www.suse.com/security/cve/CVE-2015-9542/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008958.html" source="SUSE-SU"/>
		<description>
This update for pam_radius fixes the following issues:

- CVE-2015-9542: pam_radius: buffer overflow in password field (bsc#1163933)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-08"/>
	<updated date="2021-06-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1163933">SUSE bug 1163933</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9542/">CVE-2015-9542</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499918" comment="pam_radius-1.4.0-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140785" version="1" class="patch">
	<metadata>
		<title>Security update for libX11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186643" ref_url="https://bugzilla.suse.com/1186643" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31535" ref_url="https://www.suse.com/security/cve/CVE-2021-31535/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1897-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008960.html" source="SUSE-SU"/>
		<description>
This update for libX11 fixes the following issues:

- Regression in the fix for CVE-2021-31535, causing segfaults for xforms applications like fdesign (bsc#1186643)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-08"/>
	<updated date="2021-06-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186643">SUSE bug 1186643</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31535/">CVE-2021-31535</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494024" comment="libX11-6-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494025" comment="libX11-6-32bit-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494026" comment="libX11-data-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494027" comment="libX11-devel-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494028" comment="libX11-xcb1-1.6.5-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494029" comment="libX11-xcb1-32bit-1.6.5-3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140786" version="1" class="patch">
	<metadata>
		<title>Security update for gstreamer-plugins-bad (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181255" ref_url="https://bugzilla.suse.com/1181255" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3185" ref_url="https://www.suse.com/security/cve/CVE-2021-3185/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1904-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008961.html" source="SUSE-SU"/>
		<description>
This update for gstreamer-plugins-bad fixes the following issues:

- CVE-2021-3185: h264parser: guard against ref_pic_markings overflow (bsc#1181255 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-08"/>
	<updated date="2021-06-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181255">SUSE bug 1181255</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3185/">CVE-2021-3185</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504879" comment="gstreamer-plugins-bad-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504880" comment="gstreamer-plugins-bad-devel-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503421" comment="gstreamer-plugins-bad-lang-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504881" comment="libgstadaptivedemux-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504882" comment="libgstbadallocators-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504883" comment="libgstbadaudio-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504884" comment="libgstbadbase-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504885" comment="libgstbadvideo-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504886" comment="libgstbasecamerabinsrc-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504887" comment="libgstcodecparsers-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504888" comment="libgstgl-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504889" comment="libgstinsertbin-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504890" comment="libgstmpegts-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504891" comment="libgstphotography-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504892" comment="libgstplayer-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504893" comment="libgsturidownloader-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504894" comment="libgstwayland-1_0-0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504895" comment="typelib-1_0-GstBadAllocators-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504896" comment="typelib-1_0-GstGL-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504897" comment="typelib-1_0-GstInsertBin-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504898" comment="typelib-1_0-GstMpegts-1_0-1.12.5-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504899" comment="typelib-1_0-GstPlayer-1_0-1.12.5-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140787" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181161" ref_url="https://bugzilla.suse.com/1181161" source="BUGZILLA"/>
		<reference ref_id="1183405" ref_url="https://bugzilla.suse.com/1183405" source="BUGZILLA"/>
		<reference ref_id="1183738" ref_url="https://bugzilla.suse.com/1183738" source="BUGZILLA"/>
		<reference ref_id="1183947" ref_url="https://bugzilla.suse.com/1183947" source="BUGZILLA"/>
		<reference ref_id="1184611" ref_url="https://bugzilla.suse.com/1184611" source="BUGZILLA"/>
		<reference ref_id="1184675" ref_url="https://bugzilla.suse.com/1184675" source="BUGZILLA"/>
		<reference ref_id="1185642" ref_url="https://bugzilla.suse.com/1185642" source="BUGZILLA"/>
		<reference ref_id="1185680" ref_url="https://bugzilla.suse.com/1185680" source="BUGZILLA"/>
		<reference ref_id="1185725" ref_url="https://bugzilla.suse.com/1185725" source="BUGZILLA"/>
		<reference ref_id="1185859" ref_url="https://bugzilla.suse.com/1185859" source="BUGZILLA"/>
		<reference ref_id="1185860" ref_url="https://bugzilla.suse.com/1185860" source="BUGZILLA"/>
		<reference ref_id="1185862" ref_url="https://bugzilla.suse.com/1185862" source="BUGZILLA"/>
		<reference ref_id="1185863" ref_url="https://bugzilla.suse.com/1185863" source="BUGZILLA"/>
		<reference ref_id="1185898" ref_url="https://bugzilla.suse.com/1185898" source="BUGZILLA"/>
		<reference ref_id="1185899" ref_url="https://bugzilla.suse.com/1185899" source="BUGZILLA"/>
		<reference ref_id="1185901" ref_url="https://bugzilla.suse.com/1185901" source="BUGZILLA"/>
		<reference ref_id="1185938" ref_url="https://bugzilla.suse.com/1185938" source="BUGZILLA"/>
		<reference ref_id="1185950" ref_url="https://bugzilla.suse.com/1185950" source="BUGZILLA"/>
		<reference ref_id="1185987" ref_url="https://bugzilla.suse.com/1185987" source="BUGZILLA"/>
		<reference ref_id="1186060" ref_url="https://bugzilla.suse.com/1186060" source="BUGZILLA"/>
		<reference ref_id="1186061" ref_url="https://bugzilla.suse.com/1186061" source="BUGZILLA"/>
		<reference ref_id="1186062" ref_url="https://bugzilla.suse.com/1186062" source="BUGZILLA"/>
		<reference ref_id="1186111" ref_url="https://bugzilla.suse.com/1186111" source="BUGZILLA"/>
		<reference ref_id="1186285" ref_url="https://bugzilla.suse.com/1186285" source="BUGZILLA"/>
		<reference ref_id="1186390" ref_url="https://bugzilla.suse.com/1186390" source="BUGZILLA"/>
		<reference ref_id="1186484" ref_url="https://bugzilla.suse.com/1186484" source="BUGZILLA"/>
		<reference ref_id="1186498" ref_url="https://bugzilla.suse.com/1186498" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24586" ref_url="https://www.suse.com/security/cve/CVE-2020-24586/" source="CVE"/>
		<reference ref_id="CVE-2020-24587" ref_url="https://www.suse.com/security/cve/CVE-2020-24587/" source="CVE"/>
		<reference ref_id="CVE-2020-26139" ref_url="https://www.suse.com/security/cve/CVE-2020-26139/" source="CVE"/>
		<reference ref_id="CVE-2020-26141" ref_url="https://www.suse.com/security/cve/CVE-2020-26141/" source="CVE"/>
		<reference ref_id="CVE-2020-26145" ref_url="https://www.suse.com/security/cve/CVE-2020-26145/" source="CVE"/>
		<reference ref_id="CVE-2020-26147" ref_url="https://www.suse.com/security/cve/CVE-2020-26147/" source="CVE"/>
		<reference ref_id="CVE-2021-23133" ref_url="https://www.suse.com/security/cve/CVE-2021-23133/" source="CVE"/>
		<reference ref_id="CVE-2021-23134" ref_url="https://www.suse.com/security/cve/CVE-2021-23134/" source="CVE"/>
		<reference ref_id="CVE-2021-32399" ref_url="https://www.suse.com/security/cve/CVE-2021-32399/" source="CVE"/>
		<reference ref_id="CVE-2021-33034" ref_url="https://www.suse.com/security/cve/CVE-2021-33034/" source="CVE"/>
		<reference ref_id="CVE-2021-33200" ref_url="https://www.suse.com/security/cve/CVE-2021-33200/" source="CVE"/>
		<reference ref_id="CVE-2021-3491" ref_url="https://www.suse.com/security/cve/CVE-2021-3491/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008974.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in kernel memory (bsc#1186484).
- CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values. (bsc#1186111)
- CVE-2020-26139: Fixed a denial-of-service when an Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. (bnc#1186062)
- CVE-2021-23134: A Use After Free vulnerability in nfc sockets allowed local attackers to elevate their privileges. (bnc#1186060)
- CVE-2021-23133: Fixed a race condition in SCTP sockets, which could lead to privilege escalation from the context of a network service or an unprivileged process. (bnc#1184675)
- CVE-2021-3491: Fixed a potential heap overflow in mem_rw(). This vulnerability is related to the PROVIDE_BUFFERS operation, which allowed the MAX_RW_COUNT limit to be bypassed (bsc#1185642).
- CVE-2021-32399: Fixed a race condition when removing the HCI controller (bnc#1184611).
- CVE-2020-24586: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances this can be abused to inject arbitrary network packets and/or exfiltrate user data (bnc#1185859).
- CVE-2020-24587: The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP encryption key is periodically renewed (bnc#1185859 bnc#1185862).
- CVE-2020-26147: The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments, even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used (bnc#1185859).
- CVE-2020-26145: An issue was discovered with Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration. (bnc#1185860)
- CVE-2020-26141: An issue was discovered in the ALFA driver for AWUS036H, where the Message Integrity Check (authenticity) of fragmented TKIP frames was not verified. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol. (bnc#1185987)


The following non-security bugs were fixed:

- Drivers: hv: vmbus: Increase wait time for VMbus unload (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically (bsc#1185725).
- dm: fix redundant IO accounting for bios that need splitting (bsc#1183738).
- ibmvfc: Avoid move login if fast fail is enabled (bsc#1185938 ltc#192043).
- ibmvfc: Handle move login failure (bsc#1185938 ltc#192043).
- ibmvfc: Reinit target retries (bsc#1185938 ltc#192043).
- kabi: Fix breakage in NVMe driver (bsc#1181161).
- kabi: Fix nvmet error log definitions (bsc#1181161).
- kabi: nvme: fix fast_io_fail_tmo (bsc#1181161).
- md/raid1: properly indicate failure when ending a failed write request (bsc#1185680).
- net: sched: disable TCQ_F_NOLOCK for pfifo_fast (bsc#1183405)
- netfilter: conntrack: add new sysctl to disable RST check (bsc#1183947 bsc#1185950).
- netfilter: conntrack: avoid misleading 'invalid' in log message (bsc#1183947 bsc#1185950).
- netfilter: conntrack: improve RST handling when tuple is re-used (bsc#1183947 bsc#1185950).
- netfilter: conntrack: tcp: only close if RST matches exact sequence (bsc#1183947 bsc#1185950).
- nvme-fabrics: allow to queue requests for live queues (bsc#1181161).
- nvme-fabrics: do not check state NVME_CTRL_NEW for request acceptance (bsc#1181161).
- nvme-fabrics: reject I/O to offline device (bsc#1181161).
- nvme-pci: Sync queues on reset (bsc#1181161).
- nvme-rdma: avoid race between time out and tear down (bsc#1181161).
- nvme-rdma: avoid repeated request completion (bsc#1181161).
- nvme-rdma: avoid request double completion for concurrent nvme_rdma_timeout (bsc#1181161).
- nvme-rdma: fix controller reset hang during traffic (bsc#1181161).
- nvme-rdma: fix possible hang when failing to set io queues (bsc#1181161).
- nvme-rdma: fix timeout handler (bsc#1181161).
- nvme-rdma: serialize controller teardown sequences (bsc#1181161).
- nvme-tcp: avoid race between time out and tear down (bsc#1181161).
- nvme-tcp: avoid repeated request completion (bsc#1181161).
- nvme-tcp: avoid request double completion for concurrent nvme_tcp_timeout (bsc#1181161).
- nvme-tcp: fix controller reset hang during traffic (bsc#1181161).
- nvme-tcp: fix possible hang when failing to set io queues (bsc#1181161).
- nvme-tcp: fix timeout handler (bsc#1181161).
- nvme-tcp: serialize controller teardown sequences (bsc#1181161).
- nvme: Restart request timers in resetting state (bsc#1181161).
- nvme: add error log page slot definition (bsc#1181161).
- nvme: include admin_q sync with nvme_sync_queues (bsc#1181161).
- nvme: introduce 'Command Aborted By host' status code (bsc#1181161).
- nvme: introduce nvme_is_fabrics to check fabrics cmd (bsc#1181161).
- nvme: introduce nvme_sync_io_queues (bsc#1181161).
- nvme: make fabrics command run on a separate request queue (bsc#1181161).
- nvme: prevent warning triggered by nvme_stop_keep_alive (bsc#1181161).
- nvme: unlink head after removing last namespace (bsc#1181161).
- nvmet: add error log support for fabrics-cmd (bsc#1181161).
- nvmet: add error-log definitions (bsc#1181161).
- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-09"/>
	<updated date="2021-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181161">SUSE bug 1181161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183405">SUSE bug 1183405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183738">SUSE bug 1183738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183947">SUSE bug 1183947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184611">SUSE bug 1184611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184675">SUSE bug 1184675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185642">SUSE bug 1185642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185680">SUSE bug 1185680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185725">SUSE bug 1185725</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185859">SUSE bug 1185859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185860">SUSE bug 1185860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185862">SUSE bug 1185862</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185863">SUSE bug 1185863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185898">SUSE bug 1185898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185899">SUSE bug 1185899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185901">SUSE bug 1185901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185938">SUSE bug 1185938</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185950">SUSE bug 1185950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185987">SUSE bug 1185987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186060">SUSE bug 1186060</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186061">SUSE bug 1186061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186062">SUSE bug 1186062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186111">SUSE bug 1186111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186285">SUSE bug 1186285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186390">SUSE bug 1186390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186484">SUSE bug 1186484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186498">SUSE bug 1186498</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24586/">CVE-2020-24586</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-24587/">CVE-2020-24587</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-26139/">CVE-2020-26139</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26141/">CVE-2020-26141</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26145/">CVE-2020-26145</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26147/">CVE-2020-26147</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23133/">CVE-2021-23133</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23134/">CVE-2021-23134</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32399/">CVE-2021-32399</cve>
	<cve impact="important" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33034/">CVE-2021-33034</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33200/">CVE-2021-33200</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3491/">CVE-2021-3491</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505849" comment="kernel-default-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505850" comment="kernel-default-base-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505851" comment="kernel-default-devel-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505852" comment="kernel-default-man-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504077" comment="kernel-devel-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504078" comment="kernel-docs-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504079" comment="kernel-macros-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505853" comment="kernel-obs-build-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504081" comment="kernel-source-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505854" comment="kernel-syms-4.12.14-197.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505855" comment="reiserfs-kmp-default-4.12.14-197.92.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140788" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1149813" ref_url="https://bugzilla.suse.com/1149813" source="BUGZILLA"/>
		<reference ref_id="1163019" ref_url="https://bugzilla.suse.com/1163019" source="BUGZILLA"/>
		<reference ref_id="1172380" ref_url="https://bugzilla.suse.com/1172380" source="BUGZILLA"/>
		<reference ref_id="1175534" ref_url="https://bugzilla.suse.com/1175534" source="BUGZILLA"/>
		<reference ref_id="1178683" ref_url="https://bugzilla.suse.com/1178683" source="BUGZILLA"/>
		<reference ref_id="1178935" ref_url="https://bugzilla.suse.com/1178935" source="BUGZILLA"/>
		<reference ref_id="1179477" ref_url="https://bugzilla.suse.com/1179477" source="BUGZILLA"/>
		<reference ref_id="1179484" ref_url="https://bugzilla.suse.com/1179484" source="BUGZILLA"/>
		<reference ref_id="1182846" ref_url="https://bugzilla.suse.com/1182846" source="BUGZILLA"/>
		<reference ref_id="1182975" ref_url="https://bugzilla.suse.com/1182975" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-15890" ref_url="https://www.suse.com/security/cve/CVE-2019-15890/" source="CVE"/>
		<reference ref_id="CVE-2020-10756" ref_url="https://www.suse.com/security/cve/CVE-2020-10756/" source="CVE"/>
		<reference ref_id="CVE-2020-14364" ref_url="https://www.suse.com/security/cve/CVE-2020-14364/" source="CVE"/>
		<reference ref_id="CVE-2020-25707" ref_url="https://www.suse.com/security/cve/CVE-2020-25707/" source="CVE"/>
		<reference ref_id="CVE-2020-25723" ref_url="https://www.suse.com/security/cve/CVE-2020-25723/" source="CVE"/>
		<reference ref_id="CVE-2020-29129" ref_url="https://www.suse.com/security/cve/CVE-2020-29129/" source="CVE"/>
		<reference ref_id="CVE-2020-29130" ref_url="https://www.suse.com/security/cve/CVE-2020-29130/" source="CVE"/>
		<reference ref_id="CVE-2020-8608" ref_url="https://www.suse.com/security/cve/CVE-2020-8608/" source="CVE"/>
		<reference ref_id="CVE-2021-20257" ref_url="https://www.suse.com/security/cve/CVE-2021-20257/" source="CVE"/>
		<reference ref_id="CVE-2021-3419" ref_url="https://www.suse.com/security/cve/CVE-2021-3419/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1918-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008972.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

- CVE-2020-10756: Fix out-of-bounds read information disclosure in icmp6_send_echoreply (bsc#1172380)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-09"/>
	<updated date="2021-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1149813">SUSE bug 1149813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163019">SUSE bug 1163019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172380">SUSE bug 1172380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175534">SUSE bug 1175534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178683">SUSE bug 1178683</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178935">SUSE bug 1178935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179477">SUSE bug 1179477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179484">SUSE bug 1179484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182846">SUSE bug 1182846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182975">SUSE bug 1182975</bugzilla>
	<cve impact="moderate" cvss3="5.8/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15890/">CVE-2019-15890</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-10756/">CVE-2020-10756</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14364/">CVE-2020-14364</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25707/">CVE-2020-25707</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-25723/">CVE-2020-25723</cve>
	<cve impact="low" cvss3="2.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29129/">CVE-2020-29129</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-29130/">CVE-2020-29130</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-8608/">CVE-2020-8608</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20257/">CVE-2021-20257</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3419/">CVE-2021-3419</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505856" comment="qemu-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504084" comment="qemu-arm-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504085" comment="qemu-audio-alsa-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499919" comment="qemu-audio-oss-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504086" comment="qemu-audio-pa-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505857" comment="qemu-block-curl-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505858" comment="qemu-block-iscsi-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505859" comment="qemu-block-rbd-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505860" comment="qemu-block-ssh-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505861" comment="qemu-guest-agent-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504092" comment="qemu-ipxe-1.0.0+-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505862" comment="qemu-kvm-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505863" comment="qemu-lang-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505864" comment="qemu-ppc-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505865" comment="qemu-s390-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504095" comment="qemu-seabios-1.12.0_0_ga698c89-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504096" comment="qemu-sgabios-8-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505866" comment="qemu-tools-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504098" comment="qemu-ui-curses-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504099" comment="qemu-ui-gtk-3.1.1.1-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504100" comment="qemu-vgabios-1.12.0_0_ga698c89-9.27.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504101" comment="qemu-x86-3.1.1.1-9.27.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140789" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185633" ref_url="https://bugzilla.suse.com/1185633" source="BUGZILLA"/>
		<reference ref_id="1186696" ref_url="https://bugzilla.suse.com/1186696" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29951" ref_url="https://www.suse.com/security/cve/CVE-2021-29951/" source="CVE"/>
		<reference ref_id="CVE-2021-29964" ref_url="https://www.suse.com/security/cve/CVE-2021-29964/" source="CVE"/>
		<reference ref_id="CVE-2021-29967" ref_url="https://www.suse.com/security/cve/CVE-2021-29967/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1919-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008975.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 78.11.0 ESR (bsc#1186696)

  * CVE-2021-29964: Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967: Memory safety bugs fixed in Firefox
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-09"/>
	<updated date="2021-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185633">SUSE bug 1185633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186696">SUSE bug 1186696</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-29951/">CVE-2021-29951</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29964/">CVE-2021-29964</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29967/">CVE-2021-29967</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504907" comment="MozillaFirefox-78.11.0-3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504908" comment="MozillaFirefox-devel-78.11.0-3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504909" comment="MozillaFirefox-translations-common-78.11.0-3.144.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504910" comment="MozillaFirefox-translations-other-78.11.0-3.144.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140790" version="1" class="patch">
	<metadata>
		<title>Security update for spice-gtk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177158" ref_url="https://bugzilla.suse.com/1177158" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14355" ref_url="https://www.suse.com/security/cve/CVE-2020-14355/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008978.html" source="SUSE-SU"/>
		<description>
This update for spice-gtk fixes the following issues:

- CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC decoding code (bsc#1177158)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-10"/>
	<updated date="2021-06-10"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177158">SUSE bug 1177158</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14355/">CVE-2020-14355</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505867" comment="libspice-client-glib-2_0-8-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505868" comment="libspice-client-glib-helper-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505869" comment="libspice-client-gtk-3_0-5-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505870" comment="spice-gtk-devel-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505871" comment="typelib-1_0-SpiceClientGlib-2_0-0.35-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505872" comment="typelib-1_0-SpiceClientGtk-3_0-0.35-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140791" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179833" ref_url="https://bugzilla.suse.com/1179833" source="BUGZILLA"/>
		<reference ref_id="1179836" ref_url="https://bugzilla.suse.com/1179836" source="BUGZILLA"/>
		<reference ref_id="1179837" ref_url="https://bugzilla.suse.com/1179837" source="BUGZILLA"/>
		<reference ref_id="1179839" ref_url="https://bugzilla.suse.com/1179839" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24489" ref_url="https://www.suse.com/security/cve/CVE-2020-24489/" source="CVE"/>
		<reference ref_id="CVE-2020-24511" ref_url="https://www.suse.com/security/cve/CVE-2020-24511/" source="CVE"/>
		<reference ref_id="CVE-2020-24512" ref_url="https://www.suse.com/security/cve/CVE-2020-24512/" source="CVE"/>
		<reference ref_id="CVE-2020-24513" ref_url="https://www.suse.com/security/cve/CVE-2020-24513/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1932-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008980.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20210525 release.

  - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)

    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html

  - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)

    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)

  - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)

    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)

  - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)

    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html

Other fixes:

- Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
- Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
- Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
- Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
- Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
- Update for functional issues. Refer to [6th Gen Intel Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
- Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.

- New platforms:

| Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2
| ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3
| ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3
| SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB
| SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB
| TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile
| TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile
| TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile
| EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
| JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
| RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11

- Updated platforms:

| Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3
| HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3
| SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
| SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
| BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx
| SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable
| SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable
| SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx
| CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2
| CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2
| CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3
| BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
| BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87
| BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53
| APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
| APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx
| SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5
| DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series
| GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx
| GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
| ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile
| LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology
| AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile
| KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile
| CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile
| WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile
| AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
| CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
| WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile
| KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6
| CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E
| CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8
| CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9
| CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile
| CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile
| CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10
| CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10
| CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile
| CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-10"/>
	<updated date="2021-06-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179833">SUSE bug 1179833</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179836">SUSE bug 1179836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179837">SUSE bug 1179837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179839">SUSE bug 1179839</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-24489/">CVE-2020-24489</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24511/">CVE-2020-24511</cve>
	<cve impact="low" cvss3="2.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24512/">CVE-2020-24512</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-24513/">CVE-2020-24513</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504108" comment="ucode-intel-20210525-3.203.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140792" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1168481" ref_url="https://bugzilla.suse.com/1168481" source="BUGZILLA"/>
		<reference ref_id="1175081" ref_url="https://bugzilla.suse.com/1175081" source="BUGZILLA"/>
		<reference ref_id="1175821" ref_url="https://bugzilla.suse.com/1175821" source="BUGZILLA"/>
		<reference ref_id="1181594" ref_url="https://bugzilla.suse.com/1181594" source="BUGZILLA"/>
		<reference ref_id="1181641" ref_url="https://bugzilla.suse.com/1181641" source="BUGZILLA"/>
		<reference ref_id="1181677" ref_url="https://bugzilla.suse.com/1181677" source="BUGZILLA"/>
		<reference ref_id="1181730" ref_url="https://bugzilla.suse.com/1181730" source="BUGZILLA"/>
		<reference ref_id="1181732" ref_url="https://bugzilla.suse.com/1181732" source="BUGZILLA"/>
		<reference ref_id="1181749" ref_url="https://bugzilla.suse.com/1181749" source="BUGZILLA"/>
		<reference ref_id="1182451" ref_url="https://bugzilla.suse.com/1182451" source="BUGZILLA"/>
		<reference ref_id="1182476" ref_url="https://bugzilla.suse.com/1182476" source="BUGZILLA"/>
		<reference ref_id="1182947" ref_url="https://bugzilla.suse.com/1182947" source="BUGZILLA"/>
		<reference ref_id="1183024" ref_url="https://bugzilla.suse.com/1183024" source="BUGZILLA"/>
		<reference ref_id="1183855" ref_url="https://bugzilla.suse.com/1183855" source="BUGZILLA"/>
		<reference ref_id="1184768" ref_url="https://bugzilla.suse.com/1184768" source="BUGZILLA"/>
		<reference ref_id="1184962" ref_url="https://bugzilla.suse.com/1184962" source="BUGZILLA"/>
		<reference ref_id="1185405" ref_url="https://bugzilla.suse.com/1185405" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21284" ref_url="https://www.suse.com/security/cve/CVE-2021-21284/" source="CVE"/>
		<reference ref_id="CVE-2021-21285" ref_url="https://www.suse.com/security/cve/CVE-2021-21285/" source="CVE"/>
		<reference ref_id="CVE-2021-21334" ref_url="https://www.suse.com/security/cve/CVE-2021-21334/" source="CVE"/>
		<reference ref_id="CVE-2021-30465" ref_url="https://www.suse.com/security/cve/CVE-2021-30465/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1954-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008994.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, runc fixes the following issues:

Docker was updated to 20.10.6-ce (bsc#1184768, bsc#1182947, bsc#1181594)

* Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools (bsc#1182476).
* CVE-2021-21284: Fixed a potential privilege escalation when the root user in 
  the remapped namespace has access to the host filesystem (bsc#1181732)
* CVE-2021-21285: Fixed an issue where pulling a malformed Docker image manifest 
  crashes the dockerd daemon (bsc#1181730). 
* btrfs quotas being removed by Docker regularly (bsc#1183855, bsc#1175081)

runc was updated to v1.0.0~rc93 (bsc#1182451, bsc#1175821 bsc#1184962).

* Use the upstream runc package (bsc#1181641, bsc#1181677, bsc#1175821).
* Fixed /dev/null is not available (bsc#1168481).
* CVE-2021-30465: Fixed a symlink-exchange attack vulnarability (bsc#1185405).

containerd was updated to v1.4.4

* CVE-2021-21334: Fixed a potential information leak through environment variables (bsc#1183397).
* Handle a requirement from docker (bsc#1181594).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-11"/>
	<updated date="2021-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168481">SUSE bug 1168481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175081">SUSE bug 1175081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1175821">SUSE bug 1175821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181594">SUSE bug 1181594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181641">SUSE bug 1181641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181677">SUSE bug 1181677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181730">SUSE bug 1181730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181732">SUSE bug 1181732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181749">SUSE bug 1181749</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182451">SUSE bug 1182451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182476">SUSE bug 1182476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182947">SUSE bug 1182947</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183024">SUSE bug 1183024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183855">SUSE bug 1183855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184768">SUSE bug 1184768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184962">SUSE bug 1184962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185405">SUSE bug 1185405</bugzilla>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21284/">CVE-2021-21284</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21285/">CVE-2021-21285</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-21334/">CVE-2021-21334</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30465/">CVE-2021-30465</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494422" comment="containerd-1.4.4-5.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494423" comment="docker-20.10.6_ce-6.49.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494424" comment="docker-bash-completion-20.10.6_ce-6.49.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494425" comment="runc-1.0.0~rc93-1.14.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140793" version="1" class="patch">
	<metadata>
		<title>Security update for spice (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177158" ref_url="https://bugzilla.suse.com/1177158" source="BUGZILLA"/>
		<reference ref_id="1181686" ref_url="https://bugzilla.suse.com/1181686" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14355" ref_url="https://www.suse.com/security/cve/CVE-2020-14355/" source="CVE"/>
		<reference ref_id="CVE-2021-20201" ref_url="https://www.suse.com/security/cve/CVE-2021-20201/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/008998.html" source="SUSE-SU"/>
		<description>
This update for spice fixes the following issues:

- CVE-2021-20201: client initiated renegotiation causing denial of service (bsc#1181686)
- CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC decoding code (bsc#1177158)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-11"/>
	<updated date="2021-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177158">SUSE bug 1177158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181686">SUSE bug 1181686</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-14355/">CVE-2020-14355</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20201/">CVE-2021-20201</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505873" comment="libspice-server-devel-0.14.1-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505874" comment="libspice-server1-0.14.1-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140794" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1171164" ref_url="https://bugzilla.suse.com/1171164" source="BUGZILLA"/>
		<reference ref_id="1171569" ref_url="https://bugzilla.suse.com/1171569" source="BUGZILLA"/>
		<reference ref_id="1183436" ref_url="https://bugzilla.suse.com/1183436" source="BUGZILLA"/>
		<reference ref_id="1185916" ref_url="https://bugzilla.suse.com/1185916" source="BUGZILLA"/>
		<reference ref_id="1185918" ref_url="https://bugzilla.suse.com/1185918" source="BUGZILLA"/>
		<reference ref_id="1185919" ref_url="https://bugzilla.suse.com/1185919" source="BUGZILLA"/>
		<reference ref_id="1185921" ref_url="https://bugzilla.suse.com/1185921" source="BUGZILLA"/>
		<reference ref_id="1185923" ref_url="https://bugzilla.suse.com/1185923" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25097" ref_url="https://www.suse.com/security/cve/CVE-2020-25097/" source="CVE"/>
		<reference ref_id="CVE-2021-28651" ref_url="https://www.suse.com/security/cve/CVE-2021-28651/" source="CVE"/>
		<reference ref_id="CVE-2021-28652" ref_url="https://www.suse.com/security/cve/CVE-2021-28652/" source="CVE"/>
		<reference ref_id="CVE-2021-28662" ref_url="https://www.suse.com/security/cve/CVE-2021-28662/" source="CVE"/>
		<reference ref_id="CVE-2021-31806" ref_url="https://www.suse.com/security/cve/CVE-2021-31806/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009003.html" source="SUSE-SU"/>
		<description>
This update for squid fixes the following issues:

- update to 4.15:
- CVE-2021-28652: Broken cache manager URL parsing (bsc#1185918)
- CVE-2021-28651: Memory leak in RFC 2169 response parsing (bsc#1185921)
- CVE-2021-28662: Limit HeaderLookupTable_t::lookup() to BadHdr and specific IDs (bsc#1185919)
- CVE-2021-31806: Handle more Range requests (bsc#1185916)
- CVE-2020-25097: HTTP Request Smuggling vulnerability (bsc#1183436)
- Handle more partial responses (bsc#1185923)
- fix previous change to reinstante permissions macros, because the wrong path has been used (bsc#1171569).
- use libexecdir instead of libdir to conform to recent changes in Factory (bsc#1171164).
- Reinstate permissions macros for pinger binary, because the permissions
  package is also responsible for setting up the cap_net_raw capability,
  currently a fresh squid install doesn't get a capability bit at all (bsc#1171569).
- Change pinger and basic_pam_auth helper to use standard permissions. pinger uses cap_net_raw=ep instead (bsc#1171569)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-11"/>
	<updated date="2021-06-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171164">SUSE bug 1171164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171569">SUSE bug 1171569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183436">SUSE bug 1183436</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185916">SUSE bug 1185916</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185918">SUSE bug 1185918</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185919">SUSE bug 1185919</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185921">SUSE bug 1185921</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185923">SUSE bug 1185923</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25097/">CVE-2020-25097</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28651/">CVE-2021-28651</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28652/">CVE-2021-28652</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28662/">CVE-2021-28662</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31806/">CVE-2021-31806</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499923" comment="squid-4.15-5.26.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140795" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185055" ref_url="https://bugzilla.suse.com/1185055" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2163" ref_url="https://www.suse.com/security/cve/CVE-2021-2163/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:1989-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009025.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

- Update to version jdk8u292 (icedtea 3.19.0).
- CVE-2021-2161: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-17"/>
	<updated date="2021-06-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1185055">SUSE bug 1185055</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2163/">CVE-2021-2163</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497125" comment="java-1_8_0-openjdk-1.8.0.292-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497126" comment="java-1_8_0-openjdk-demo-1.8.0.292-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497127" comment="java-1_8_0-openjdk-devel-1.8.0.292-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497128" comment="java-1_8_0-openjdk-headless-1.8.0.292-3.52.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140796" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1145740" ref_url="https://bugzilla.suse.com/1145740" source="BUGZILLA"/>
		<reference ref_id="1180530" ref_url="https://bugzilla.suse.com/1180530" source="BUGZILLA"/>
		<reference ref_id="1182703" ref_url="https://bugzilla.suse.com/1182703" source="BUGZILLA"/>
		<reference ref_id="1186922" ref_url="https://bugzilla.suse.com/1186922" source="BUGZILLA"/>
		<reference ref_id="1186923" ref_url="https://bugzilla.suse.com/1186923" source="BUGZILLA"/>
		<reference ref_id="1186924" ref_url="https://bugzilla.suse.com/1186924" source="BUGZILLA"/>
		<reference ref_id="1187017" ref_url="https://bugzilla.suse.com/1187017" source="BUGZILLA"/>
		<reference ref_id="1187174" ref_url="https://bugzilla.suse.com/1187174" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-10092" ref_url="https://www.suse.com/security/cve/CVE-2019-10092/" source="CVE"/>
		<reference ref_id="CVE-2020-35452" ref_url="https://www.suse.com/security/cve/CVE-2020-35452/" source="CVE"/>
		<reference ref_id="CVE-2021-26690" ref_url="https://www.suse.com/security/cve/CVE-2021-26690/" source="CVE"/>
		<reference ref_id="CVE-2021-26691" ref_url="https://www.suse.com/security/cve/CVE-2021-26691/" source="CVE"/>
		<reference ref_id="CVE-2021-30641" ref_url="https://www.suse.com/security/cve/CVE-2021-30641/" source="CVE"/>
		<reference ref_id="CVE-2021-31618" ref_url="https://www.suse.com/security/cve/CVE-2021-31618/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2004-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009030.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2021-30641: Fixed MergeSlashes regression (bsc#1187174)
- CVE-2021-31618: Fixed NULL pointer dereference on specially crafted HTTP/2 request (bsc#1186924)
- CVE-2020-35452: Fixed Single zero byte stack overflow in mod_auth_digest (bsc#1186922)
- CVE-2021-26690: Fixed mod_session NULL pointer dereference in parser (bsc#1186923)
- CVE-2021-26691: Fixed Heap overflow in mod_session (bsc#1187017)
- Fixed potential content spoofing with default error pages (bsc#1182703)
- Fixed for an issue when 'gensslcert' does not set CA:True. (bsc#1180530)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-17"/>
	<updated date="2021-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1145740">SUSE bug 1145740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180530">SUSE bug 1180530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182703">SUSE bug 1182703</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186922">SUSE bug 1186922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186923">SUSE bug 1186923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186924">SUSE bug 1186924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187017">SUSE bug 1187017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187174">SUSE bug 1187174</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-10092/">CVE-2019-10092</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35452/">CVE-2020-35452</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26690/">CVE-2021-26690</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26691/">CVE-2021-26691</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30641/">CVE-2021-30641</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31618/">CVE-2021-31618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504923" comment="apache2-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504924" comment="apache2-devel-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503468" comment="apache2-doc-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504925" comment="apache2-prefork-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504926" comment="apache2-utils-2.4.33-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504927" comment="apache2-worker-2.4.33-3.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140797" version="1" class="patch">
	<metadata>
		<title>Security update for caribou (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186617" ref_url="https://bugzilla.suse.com/1186617" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3567" ref_url="https://www.suse.com/security/cve/CVE-2021-3567/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2007-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009035.html" source="SUSE-SU"/>
		<description>
This update for caribou fixes the following issues:

Security issue fixed:

- CVE-2021-3567: Fixed a segfault when attempting to use shifted characters (bsc#1186617).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-17"/>
	<updated date="2021-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186617">SUSE bug 1186617</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3567/">CVE-2021-3567</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504928" comment="caribou-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504929" comment="caribou-common-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504930" comment="caribou-devel-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504931" comment="caribou-gtk-module-common-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504932" comment="caribou-gtk2-module-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504933" comment="caribou-gtk3-module-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503478" comment="caribou-lang-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504934" comment="libcaribou0-0.4.21-5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504935" comment="typelib-1_0-Caribou-1_0-0.4.21-5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140798" version="1" class="patch">
	<metadata>
		<title>Security update for python-rsa (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1172389" ref_url="https://bugzilla.suse.com/1172389" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13757" ref_url="https://www.suse.com/security/cve/CVE-2020-13757/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2008-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009029.html" source="SUSE-SU"/>
		<description>
This update for python-rsa fixes the following issues:

- CVE-2020-13757: Proper handling of leading '\0' bytes during decryption of ciphertext (bsc#1172389)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-17"/>
	<updated date="2021-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172389">SUSE bug 1172389</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-13757/">CVE-2020-13757</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494053" comment="python3-rsa-3.4.2-3.4.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140799" version="1" class="patch">
	<metadata>
		<title>Security update for xterm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1169444" ref_url="https://bugzilla.suse.com/1169444" source="BUGZILLA"/>
		<reference ref_id="1182091" ref_url="https://bugzilla.suse.com/1182091" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27135" ref_url="https://www.suse.com/security/cve/CVE-2021-27135/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2013-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009040.html" source="SUSE-SU"/>
		<description>
This update for xterm fixes the following issues:

- CVE-2021-27135: Fixed buffer-overflow when clicking on selected utf8 text. (bsc#1182091)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-18"/>
	<updated date="2021-06-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1169444">SUSE bug 1169444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182091">SUSE bug 1182091</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27135/">CVE-2021-27135</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504936" comment="xterm-330-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504937" comment="xterm-bin-330-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140800" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1171257" ref_url="https://bugzilla.suse.com/1171257" source="BUGZILLA"/>
		<reference ref_id="1176293" ref_url="https://bugzilla.suse.com/1176293" source="BUGZILLA"/>
		<reference ref_id="1179831" ref_url="https://bugzilla.suse.com/1179831" source="BUGZILLA"/>
		<reference ref_id="1181368" ref_url="https://bugzilla.suse.com/1181368" source="BUGZILLA"/>
		<reference ref_id="1182281" ref_url="https://bugzilla.suse.com/1182281" source="BUGZILLA"/>
		<reference ref_id="1182293" ref_url="https://bugzilla.suse.com/1182293" source="BUGZILLA"/>
		<reference ref_id="1182382" ref_url="https://bugzilla.suse.com/1182382" source="BUGZILLA"/>
		<reference ref_id="1185092" ref_url="https://bugzilla.suse.com/1185092" source="BUGZILLA"/>
		<reference ref_id="1185281" ref_url="https://bugzilla.suse.com/1185281" source="BUGZILLA"/>
		<reference ref_id="1186674" ref_url="https://bugzilla.suse.com/1186674" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-15750" ref_url="https://www.suse.com/security/cve/CVE-2018-15750/" source="CVE"/>
		<reference ref_id="CVE-2018-15751" ref_url="https://www.suse.com/security/cve/CVE-2018-15751/" source="CVE"/>
		<reference ref_id="CVE-2020-11651" ref_url="https://www.suse.com/security/cve/CVE-2020-11651/" source="CVE"/>
		<reference ref_id="CVE-2020-11652" ref_url="https://www.suse.com/security/cve/CVE-2020-11652/" source="CVE"/>
		<reference ref_id="CVE-2020-25592" ref_url="https://www.suse.com/security/cve/CVE-2020-25592/" source="CVE"/>
		<reference ref_id="CVE-2021-25315" ref_url="https://www.suse.com/security/cve/CVE-2021-25315/" source="CVE"/>
		<reference ref_id="CVE-2021-31607" ref_url="https://www.suse.com/security/cve/CVE-2021-31607/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2105-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009057.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

Update to Salt release version 3002.2 (jsc#ECO-3212, jsc#SLE-18033, jsc#SLE-18028)

- Check if dpkgnotify is executable (bsc#1186674)
- Drop support for Python2. Obsoletes `python2-salt` package (jsc#SLE-18028)
- virt module updates
  * network: handle missing ipv4 netmask attribute
  * more network support
  * PCI/USB host devices passthrough support
- Set distro requirement to oldest supported version in requirements/base.txt
- Bring missing part of async batch implementation back (bsc#1182382, CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Remove deprecated warning that breaks minion execution when 'server_id_use_crc' opts is missing
- Fix pkg states when DEB package has 'all' arch
- Do not force beacons configuration to be a list.
- Remove msgpack &lt; 1.0.0 from base requirements (bsc#1176293)
- msgpack support for version &gt;= 1.0.0 (bsc#1171257)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281, CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18033)
- Remove duplicate directories from specfile
- Improvements on 'ansiblegate' module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Regression fix of salt-ssh on processing targets
- Update target fix for salt-ssh and avoiding race condition on salt-ssh event processing (bsc#1179831, bsc#1182281)
- Add notify beacon for Debian/Ubuntu systems
- Fix zmq bug that causes salt-call to freeze (bsc#1181368)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-21"/>
	<updated date="2021-06-21"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1171257">SUSE bug 1171257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176293">SUSE bug 1176293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179831">SUSE bug 1179831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181368">SUSE bug 1181368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182281">SUSE bug 1182281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182293">SUSE bug 1182293</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182382">SUSE bug 1182382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185092">SUSE bug 1185092</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185281">SUSE bug 1185281</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186674">SUSE bug 1186674</bugzilla>
	<cve impact="important" cvss3="8.7/CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-15750/">CVE-2018-15750</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-15751/">CVE-2018-15751</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11651/">CVE-2020-11651</cve>
	<cve impact="critical" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-11652/">CVE-2020-11652</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25592/">CVE-2020-25592</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25315/">CVE-2021-25315</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31607/">CVE-2021-31607</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494058" comment="python3-salt-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494059" comment="salt-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499947" comment="salt-api-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494060" comment="salt-bash-completion-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499948" comment="salt-cloud-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494061" comment="salt-doc-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499949" comment="salt-fish-completion-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499950" comment="salt-master-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494062" comment="salt-minion-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499951" comment="salt-proxy-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499952" comment="salt-ssh-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499953" comment="salt-standalone-formulas-configuration-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009499954" comment="salt-syndic-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500181" comment="salt-transactional-update-3002.2-37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494063" comment="salt-zsh-completion-3002.2-37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140801" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187418" ref_url="https://bugzilla.suse.com/1187418" source="BUGZILLA"/>
		<reference ref_id="1187419" ref_url="https://bugzilla.suse.com/1187419" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29157" ref_url="https://www.suse.com/security/cve/CVE-2021-29157/" source="CVE"/>
		<reference ref_id="CVE-2021-33515" ref_url="https://www.suse.com/security/cve/CVE-2021-33515/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2124-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-June/019410.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 fixes the following issues:

- CVE-2021-29157: Local attacker can login as any user and access their emails (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails (bsc#1187419)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-22"/>
	<updated date="2021-06-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187418">SUSE bug 1187418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187419">SUSE bug 1187419</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29157/">CVE-2021-29157</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-33515/">CVE-2021-33515</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505875" comment="dovecot23-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505876" comment="dovecot23-backend-mysql-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505877" comment="dovecot23-backend-pgsql-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505878" comment="dovecot23-backend-sqlite-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505879" comment="dovecot23-devel-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505880" comment="dovecot23-fts-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505881" comment="dovecot23-fts-lucene-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505882" comment="dovecot23-fts-solr-2.3.11.3-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505883" comment="dovecot23-fts-squat-2.3.11.3-24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140802" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179930" ref_url="https://bugzilla.suse.com/1179930" source="BUGZILLA"/>
		<reference ref_id="1179931" ref_url="https://bugzilla.suse.com/1179931" source="BUGZILLA"/>
		<reference ref_id="1179932" ref_url="https://bugzilla.suse.com/1179932" source="BUGZILLA"/>
		<reference ref_id="1179933" ref_url="https://bugzilla.suse.com/1179933" source="BUGZILLA"/>
		<reference ref_id="1180102" ref_url="https://bugzilla.suse.com/1180102" source="BUGZILLA"/>
		<reference ref_id="1180232" ref_url="https://bugzilla.suse.com/1180232" source="BUGZILLA"/>
		<reference ref_id="1181598" ref_url="https://bugzilla.suse.com/1181598" source="BUGZILLA"/>
		<reference ref_id="1181599" ref_url="https://bugzilla.suse.com/1181599" source="BUGZILLA"/>
		<reference ref_id="1183353" ref_url="https://bugzilla.suse.com/1183353" source="BUGZILLA"/>
		<reference ref_id="1184110" ref_url="https://bugzilla.suse.com/1184110" source="BUGZILLA"/>
		<reference ref_id="1185128" ref_url="https://bugzilla.suse.com/1185128" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26418" ref_url="https://www.suse.com/security/cve/CVE-2020-26418/" source="CVE"/>
		<reference ref_id="CVE-2020-26419" ref_url="https://www.suse.com/security/cve/CVE-2020-26419/" source="CVE"/>
		<reference ref_id="CVE-2020-26420" ref_url="https://www.suse.com/security/cve/CVE-2020-26420/" source="CVE"/>
		<reference ref_id="CVE-2020-26421" ref_url="https://www.suse.com/security/cve/CVE-2020-26421/" source="CVE"/>
		<reference ref_id="CVE-2020-26422" ref_url="https://www.suse.com/security/cve/CVE-2020-26422/" source="CVE"/>
		<reference ref_id="CVE-2021-22173" ref_url="https://www.suse.com/security/cve/CVE-2021-22173/" source="CVE"/>
		<reference ref_id="CVE-2021-22174" ref_url="https://www.suse.com/security/cve/CVE-2021-22174/" source="CVE"/>
		<reference ref_id="CVE-2021-22191" ref_url="https://www.suse.com/security/cve/CVE-2021-22191/" source="CVE"/>
		<reference ref_id="CVE-2021-22207" ref_url="https://www.suse.com/security/cve/CVE-2021-22207/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2125-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009067.html" source="SUSE-SU"/>
		<description>
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues:

Update wireshark to version 3.4.5

- New and updated support and bug fixes for multiple protocols
- Asynchronous DNS resolution is always enabled
- Protobuf fields can be dissected as Wireshark (header) fields
- UI improvements

Including security fixes for:

- CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353).
- CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128)
- CVE-2020-26422: QUIC dissector crash (bsc#1180232)
- CVE-2020-26418: Kafka dissector memory leak (bsc#1179930)
- CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931)
- CVE-2020-26420: RTPS dissector memory leak (bsc#1179932) 
- CVE-2020-26421: USB HID dissector crash (bsc#1179933)
- CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598)
- CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599)

libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-22"/>
	<updated date="2021-06-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179930">SUSE bug 1179930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179931">SUSE bug 1179931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179932">SUSE bug 1179932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179933">SUSE bug 1179933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180102">SUSE bug 1180102</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180232">SUSE bug 1180232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181598">SUSE bug 1181598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181599">SUSE bug 1181599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183353">SUSE bug 1183353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184110">SUSE bug 1184110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185128">SUSE bug 1185128</bugzilla>
	<cve impact="low" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26418/">CVE-2020-26418</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26419/">CVE-2020-26419</cve>
	<cve impact="low" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26420/">CVE-2020-26420</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-26421/">CVE-2020-26421</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26422/">CVE-2020-26422</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-22173/">CVE-2021-22173</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-22174/">CVE-2021-22174</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22191/">CVE-2021-22191</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-22207/">CVE-2021-22207</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505884" comment="libQt5Multimedia5-5.9.7-7.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505885" comment="libqt5-qtmultimedia-devel-5.9.7-7.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504137" comment="libqt5-qtmultimedia-private-headers-devel-5.9.7-7.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494064" comment="libsbc1-1.3-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494065" comment="libwireshark14-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494066" comment="libwiretap11-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494067" comment="libwsutil12-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495822" comment="sbc-devel-1.3-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494068" comment="wireshark-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495823" comment="wireshark-devel-3.4.5-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495824" comment="wireshark-ui-qt-3.4.5-3.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140803" version="1" class="patch">
	<metadata>
		<title>Security update for cryptctl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186226" ref_url="https://bugzilla.suse.com/1186226" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-18906" ref_url="https://www.suse.com/security/cve/CVE-2019-18906/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2136-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009076.html" source="SUSE-SU"/>
		<description>
This update for cryptctl fixes the following issues:

Update to version 2.4:

- CVE-2019-18906: Client side password hashing was equivalent to clear text password storage (bsc#1186226)
- First step to use plain text password instead of hashed password.
- Move repository into the SUSE github organization
- in RPC server, if client comes from localhost, remember its ipv4 localhost address instead of ipv6 address
- tell a record to clear expired pending commands upon saving a command result; introduce pending commands RPC test case
- avoid hard coding 127.0.0.1 in host ID of alive message test; let system administrator mount and unmount disks by issuing these two commands on key server.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-23"/>
	<updated date="2021-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186226">SUSE bug 1186226</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-18906/">CVE-2019-18906</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494072" comment="cryptctl-2.4-4.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140804" version="1" class="patch">
	<metadata>
		<title>Security update for libnettle (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187060" ref_url="https://bugzilla.suse.com/1187060" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3580" ref_url="https://www.suse.com/security/cve/CVE-2021-3580/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2143-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009079.html" source="SUSE-SU"/>
		<description>
This update for libnettle fixes the following issues:

- CVE-2021-3580: Fixed a remote denial of service in the RSA decryption via manipulated ciphertext (bsc#1187060).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-23"/>
	<updated date="2021-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187060">SUSE bug 1187060</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3580/">CVE-2021-3580</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494073" comment="libhogweed4-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494074" comment="libhogweed4-32bit-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494075" comment="libnettle-devel-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494076" comment="libnettle6-3.4.1-4.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494077" comment="libnettle6-32bit-3.4.1-4.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140805" version="1" class="patch">
	<metadata>
		<title>Security update for libgcrypt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187212" ref_url="https://bugzilla.suse.com/1187212" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33560" ref_url="https://www.suse.com/security/cve/CVE-2021-33560/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2157-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009085.html" source="SUSE-SU"/>
		<description>
This update for libgcrypt fixes the following issues:

- CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-24"/>
	<updated date="2021-06-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187212">SUSE bug 1187212</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-33560/">CVE-2021-33560</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494078" comment="libgcrypt-devel-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494079" comment="libgcrypt20-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494080" comment="libgcrypt20-32bit-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494081" comment="libgcrypt20-hmac-1.8.2-8.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494082" comment="libgcrypt20-hmac-32bit-1.8.2-8.39.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140806" version="1" class="patch">
	<metadata>
		<title>Security update for openexr (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187310" ref_url="https://bugzilla.suse.com/1187310" source="BUGZILLA"/>
		<reference ref_id="1187395" ref_url="https://bugzilla.suse.com/1187395" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3598" ref_url="https://www.suse.com/security/cve/CVE-2021-3598/" source="CVE"/>
		<reference ref_id="CVE-2021-3605" ref_url="https://www.suse.com/security/cve/CVE-2021-3605/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009086.html" source="SUSE-SU"/>
		<description>
This update for openexr fixes the following issues:

- Fixed CVE-2021-3605 [bsc#1187395]: Heap buffer overflow in the rleUncompress function
- Fixed CVE-2021-3598 [bsc#1187310]: Heap buffer overflow in Imf_3_1:CharPtrIO:readChars
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-24"/>
	<updated date="2021-06-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187310">SUSE bug 1187310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187395">SUSE bug 1187395</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3598/">CVE-2021-3598</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3605/">CVE-2021-3605</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495826" comment="libIlmImf-2_2-23-2.2.1-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495827" comment="libIlmImfUtil-2_2-23-2.2.1-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495828" comment="openexr-devel-2.2.1-3.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140807" version="1" class="patch">
	<metadata>
		<title>Security update for ovmf (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183578" ref_url="https://bugzilla.suse.com/1183578" source="BUGZILLA"/>
		<reference ref_id="1183579" ref_url="https://bugzilla.suse.com/1183579" source="BUGZILLA"/>
		<reference ref_id="1186151" ref_url="https://bugzilla.suse.com/1186151" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28210" ref_url="https://www.suse.com/security/cve/CVE-2021-28210/" source="CVE"/>
		<reference ref_id="CVE-2021-28211" ref_url="https://www.suse.com/security/cve/CVE-2021-28211/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009089.html" source="SUSE-SU"/>
		<description>
This update for ovmf fixes the following issues:

- Fixed a possible buffer overflow in IScsiDxe (bsc#1186151)
- CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo (bsc#1183578)
- CVE-2021-28210: ovmf: unlimited FV recursion, round 2 (bsc#1183579)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-25"/>
	<updated date="2021-06-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183578">SUSE bug 1183578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183579">SUSE bug 1183579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186151">SUSE bug 1186151</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-28210/">CVE-2021-28210</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28211/">CVE-2021-28211</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009503554" comment="ovmf-2017+git1510945757.b2662641d5-5.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503555" comment="ovmf-tools-2017+git1510945757.b2662641d5-5.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503556" comment="qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-5.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503557" comment="qemu-uefi-aarch64-2017+git1510945757.b2662641d5-5.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140808" version="1" class="patch">
	<metadata>
		<title>Security update for arpwatch (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186240" ref_url="https://bugzilla.suse.com/1186240" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25321" ref_url="https://www.suse.com/security/cve/CVE-2021-25321/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009098.html" source="SUSE-SU"/>
		<description>
This update for arpwatch fixes the following issues:

- CVE-2021-25321: Fixed local privilege escalation from runtime user to root (bsc#1186240).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-28"/>
	<updated date="2021-06-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186240">SUSE bug 1186240</bugzilla>
	<cve impact="moderate" cvss3="7.7/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-25321/">CVE-2021-25321</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615873" comment="arpwatch-2.1a15-5.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140809" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1186622" ref_url="https://bugzilla.suse.com/1186622" source="BUGZILLA"/>
		<reference ref_id="1187443" ref_url="https://bugzilla.suse.com/1187443" source="BUGZILLA"/>
		<reference ref_id="1187444" ref_url="https://bugzilla.suse.com/1187444" source="BUGZILLA"/>
		<reference ref_id="1187445" ref_url="https://bugzilla.suse.com/1187445" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33195" ref_url="https://www.suse.com/security/cve/CVE-2021-33195/" source="CVE"/>
		<reference ref_id="CVE-2021-33196" ref_url="https://www.suse.com/security/cve/CVE-2021-33196/" source="CVE"/>
		<reference ref_id="CVE-2021-33197" ref_url="https://www.suse.com/security/cve/CVE-2021-33197/" source="CVE"/>
		<reference ref_id="CVE-2021-33198" ref_url="https://www.suse.com/security/cve/CVE-2021-33198/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-June/009104.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

Update to 1.15.13.
    
Includes these security fixes 

- CVE-2021-33195: net: Lookup functions may return invalid host names (bsc#1187443).
- CVE-2021-33196: archive/zip: malformed archive may cause panic or memory exhaustion (bsc#1186622).
- CVE-2021-33197: net/http/httputil: ReverseProxy forwards Connection headers if first one is empty (bsc#1187444)
- CVE-2021-33198: math/big: (*Rat).SetString with '1.770p02041010010011001001' crashes with 'makeslice: len out of range' (bsc#1187445).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-06-30"/>
	<updated date="2021-06-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186622">SUSE bug 1186622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187443">SUSE bug 1187443</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187444">SUSE bug 1187444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187445">SUSE bug 1187445</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-33195/">CVE-2021-33195</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33196/">CVE-2021-33196</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-33197/">CVE-2021-33197</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33198/">CVE-2021-33198</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009615796" comment="go1.15-1.15.13-1.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615797" comment="go1.15-doc-1.15.13-1.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615798" comment="go1.15-race-1.15.13-1.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140810" version="1" class="patch">
	<metadata>
		<title>Security update for go1.14 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1164903" ref_url="https://bugzilla.suse.com/1164903" source="BUGZILLA"/>
		<reference ref_id="1181145" ref_url="https://bugzilla.suse.com/1181145" source="BUGZILLA"/>
		<reference ref_id="1181146" ref_url="https://bugzilla.suse.com/1181146" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3114" ref_url="https://www.suse.com/security/cve/CVE-2021-3114/" source="CVE"/>
		<reference ref_id="CVE-2021-3115" ref_url="https://www.suse.com/security/cve/CVE-2021-3115/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008248.html" source="SUSE-SU"/>
		<description>
This update for go1.14 fixes the following issues:

Go was updated to version 1.14.14 (bsc#1164903).

Security issues fixed:

- CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic (bsc#1181145).
- CVE-2021-3115: Fixed a potential arbitrary code execution in the build process (bsc#1181146).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-26"/>
	<updated date="2021-01-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1164903">SUSE bug 1164903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181145">SUSE bug 1181145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181146">SUSE bug 1181146</bugzilla>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3114/">CVE-2021-3114</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3115/">CVE-2021-3115</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496577" comment="go1.14-1.14.14-1.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496578" comment="go1.14-doc-1.14.14-1.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140811" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1181145" ref_url="https://bugzilla.suse.com/1181145" source="BUGZILLA"/>
		<reference ref_id="1181146" ref_url="https://bugzilla.suse.com/1181146" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3114" ref_url="https://www.suse.com/security/cve/CVE-2021-3114/" source="CVE"/>
		<reference ref_id="CVE-2021-3115" ref_url="https://www.suse.com/security/cve/CVE-2021-3115/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0223-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008246.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

Go was updated to version 1.15.7 (bsc#1175132).

Security issues fixed:

- CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic (bsc#1181145).
- CVE-2021-3115: Fixed a potential arbitrary code execution in the build process (bsc#1181146).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-28"/>
	<updated date="2021-01-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181145">SUSE bug 1181145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181146">SUSE bug 1181146</bugzilla>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3114/">CVE-2021-3114</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3115/">CVE-2021-3115</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496579" comment="go1.15-1.15.7-1.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496580" comment="go1.15-doc-1.15.7-1.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496581" comment="go1.15-race-1.15.7-1.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140812" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180554" ref_url="https://bugzilla.suse.com/1180554" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8287" ref_url="https://www.suse.com/security/cve/CVE-2020-8287/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0224-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008247.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issue:

- CVE-2020-8287: Fixed an HTTP request smuggling vulnerability (bsc#1180554).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-26"/>
	<updated date="2021-01-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1180554">SUSE bug 1180554</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-8287/">CVE-2020-8287</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009504978" comment="nodejs8-8.17.0-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504979" comment="nodejs8-devel-8.17.0-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503560" comment="nodejs8-docs-8.17.0-3.42.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504980" comment="npm8-8.17.0-3.42.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140813" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180684" ref_url="https://bugzilla.suse.com/1180684" source="BUGZILLA"/>
		<reference ref_id="1180685" ref_url="https://bugzilla.suse.com/1180685" source="BUGZILLA"/>
		<reference ref_id="1180687" ref_url="https://bugzilla.suse.com/1180687" source="BUGZILLA"/>
		<reference ref_id="1181090" ref_url="https://bugzilla.suse.com/1181090" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23239" ref_url="https://www.suse.com/security/cve/CVE-2021-23239/" source="CVE"/>
		<reference ref_id="CVE-2021-23240" ref_url="https://www.suse.com/security/cve/CVE-2021-23240/" source="CVE"/>
		<reference ref_id="CVE-2021-3156" ref_url="https://www.suse.com/security/cve/CVE-2021-3156/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0227-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008250.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:

- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges 
  [bsc#1181090,CVE-2021-3156]
- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`
  [bsc#1180684,CVE-2021-23239]
- A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685,
  CVE-2021-23240]
- It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-26"/>
	<updated date="2021-01-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180684">SUSE bug 1180684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180685">SUSE bug 1180685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180687">SUSE bug 1180687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181090">SUSE bug 1181090</bugzilla>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23239/">CVE-2021-23239</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23240/">CVE-2021-23240</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3156/">CVE-2021-3156</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009493148" comment="sudo-1.8.22-4.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009493149" comment="sudo-devel-1.8.22-4.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140814" version="1" class="patch">
	<metadata>
		<title>Security update for dbus-1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187105" ref_url="https://bugzilla.suse.com/1187105" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35512" ref_url="https://www.suse.com/security/cve/CVE-2020-35512/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009121.html" source="SUSE-SU"/>
		<description>
This update for dbus-1 fixes the following issues:

- CVE-2020-35512: Fixed a use-after-free or potential undefined behaviour caused by shared UID's (bsc#1187105)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-12"/>
	<updated date="2021-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187105">SUSE bug 1187105</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35512/">CVE-2020-35512</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009615791" comment="dbus-1-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615792" comment="dbus-1-devel-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615793" comment="dbus-1-x11-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615794" comment="libdbus-1-3-1.12.2-8.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009615795" comment="libdbus-1-3-32bit-1.12.2-8.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140815" version="1" class="patch">
	<metadata>
		<title>Security update for sqlite3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1157818" ref_url="https://bugzilla.suse.com/1157818" source="BUGZILLA"/>
		<reference ref_id="1158812" ref_url="https://bugzilla.suse.com/1158812" source="BUGZILLA"/>
		<reference ref_id="1158958" ref_url="https://bugzilla.suse.com/1158958" source="BUGZILLA"/>
		<reference ref_id="1158959" ref_url="https://bugzilla.suse.com/1158959" source="BUGZILLA"/>
		<reference ref_id="1158960" ref_url="https://bugzilla.suse.com/1158960" source="BUGZILLA"/>
		<reference ref_id="1159491" ref_url="https://bugzilla.suse.com/1159491" source="BUGZILLA"/>
		<reference ref_id="1159715" ref_url="https://bugzilla.suse.com/1159715" source="BUGZILLA"/>
		<reference ref_id="1159847" ref_url="https://bugzilla.suse.com/1159847" source="BUGZILLA"/>
		<reference ref_id="1159850" ref_url="https://bugzilla.suse.com/1159850" source="BUGZILLA"/>
		<reference ref_id="1160309" ref_url="https://bugzilla.suse.com/1160309" source="BUGZILLA"/>
		<reference ref_id="1160438" ref_url="https://bugzilla.suse.com/1160438" source="BUGZILLA"/>
		<reference ref_id="1160439" ref_url="https://bugzilla.suse.com/1160439" source="BUGZILLA"/>
		<reference ref_id="1164719" ref_url="https://bugzilla.suse.com/1164719" source="BUGZILLA"/>
		<reference ref_id="1172091" ref_url="https://bugzilla.suse.com/1172091" source="BUGZILLA"/>
		<reference ref_id="1172115" ref_url="https://bugzilla.suse.com/1172115" source="BUGZILLA"/>
		<reference ref_id="1172234" ref_url="https://bugzilla.suse.com/1172234" source="BUGZILLA"/>
		<reference ref_id="1172236" ref_url="https://bugzilla.suse.com/1172236" source="BUGZILLA"/>
		<reference ref_id="1172240" ref_url="https://bugzilla.suse.com/1172240" source="BUGZILLA"/>
		<reference ref_id="1173641" ref_url="https://bugzilla.suse.com/1173641" source="BUGZILLA"/>
		<reference ref_id="928700" ref_url="https://bugzilla.suse.com/928700" source="BUGZILLA"/>
		<reference ref_id="928701" ref_url="https://bugzilla.suse.com/928701" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-3414" ref_url="https://www.suse.com/security/cve/CVE-2015-3414/" source="CVE"/>
		<reference ref_id="CVE-2015-3415" ref_url="https://www.suse.com/security/cve/CVE-2015-3415/" source="CVE"/>
		<reference ref_id="CVE-2019-19244" ref_url="https://www.suse.com/security/cve/CVE-2019-19244/" source="CVE"/>
		<reference ref_id="CVE-2019-19317" ref_url="https://www.suse.com/security/cve/CVE-2019-19317/" source="CVE"/>
		<reference ref_id="CVE-2019-19603" ref_url="https://www.suse.com/security/cve/CVE-2019-19603/" source="CVE"/>
		<reference ref_id="CVE-2019-19645" ref_url="https://www.suse.com/security/cve/CVE-2019-19645/" source="CVE"/>
		<reference ref_id="CVE-2019-19646" ref_url="https://www.suse.com/security/cve/CVE-2019-19646/" source="CVE"/>
		<reference ref_id="CVE-2019-19880" ref_url="https://www.suse.com/security/cve/CVE-2019-19880/" source="CVE"/>
		<reference ref_id="CVE-2019-19923" ref_url="https://www.suse.com/security/cve/CVE-2019-19923/" source="CVE"/>
		<reference ref_id="CVE-2019-19924" ref_url="https://www.suse.com/security/cve/CVE-2019-19924/" source="CVE"/>
		<reference ref_id="CVE-2019-19925" ref_url="https://www.suse.com/security/cve/CVE-2019-19925/" source="CVE"/>
		<reference ref_id="CVE-2019-19926" ref_url="https://www.suse.com/security/cve/CVE-2019-19926/" source="CVE"/>
		<reference ref_id="CVE-2019-19959" ref_url="https://www.suse.com/security/cve/CVE-2019-19959/" source="CVE"/>
		<reference ref_id="CVE-2019-20218" ref_url="https://www.suse.com/security/cve/CVE-2019-20218/" source="CVE"/>
		<reference ref_id="CVE-2020-13434" ref_url="https://www.suse.com/security/cve/CVE-2020-13434/" source="CVE"/>
		<reference ref_id="CVE-2020-13435" ref_url="https://www.suse.com/security/cve/CVE-2020-13435/" source="CVE"/>
		<reference ref_id="CVE-2020-13630" ref_url="https://www.suse.com/security/cve/CVE-2020-13630/" source="CVE"/>
		<reference ref_id="CVE-2020-13631" ref_url="https://www.suse.com/security/cve/CVE-2020-13631/" source="CVE"/>
		<reference ref_id="CVE-2020-13632" ref_url="https://www.suse.com/security/cve/CVE-2020-13632/" source="CVE"/>
		<reference ref_id="CVE-2020-15358" ref_url="https://www.suse.com/security/cve/CVE-2020-15358/" source="CVE"/>
		<reference ref_id="CVE-2020-9327" ref_url="https://www.suse.com/security/cve/CVE-2020-9327/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2320-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009137.html" source="SUSE-SU"/>
		<description>
This update for sqlite3 fixes the following issues:

- Update to version 3.36.0
- CVE-2020-15358: heap-based buffer overflow in multiSelectOrderBy due to mishandling of query-flattener
  optimization (bsc#1173641)
- CVE-2020-9327: NULL pointer dereference and segmentation fault because of generated column optimizations in
  isAuxiliaryVtabOperator (bsc#1164719)
- CVE-2019-20218: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error (bsc#1160439)
- CVE-2019-19959: memory-management error via ext/misc/zipfile.c involving embedded '\0' input (bsc#1160438)
- CVE-2019-19923: improper handling  of  certain uses of SELECT DISTINCT in flattenSubquery may lead to null pointer
  dereference (bsc#1160309)
- CVE-2019-19924: improper error handling in sqlite3WindowRewrite() (bsc#1159850)
- CVE-2019-19925: improper handling of NULL pathname during an update of a ZIP archive (bsc#1159847)
- CVE-2019-19926: improper handling  of certain errors during parsing  multiSelect in select.c (bsc#1159715)
- CVE-2019-19880: exprListAppendList in window.c allows attackers to trigger an invalid pointer dereference
  (bsc#1159491)
- CVE-2019-19603: during handling of CREATE TABLE and CREATE VIEW statements, does not consider confusion with
  a shadow table name (bsc#1158960)
- CVE-2019-19646: pragma.c mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated
  columns (bsc#1158959)
- CVE-2019-19645: alter.c allows attackers to trigger infinite recursion via certain types of self-referential views
  in conjunction with ALTER TABLE statements (bsc#1158958)
- CVE-2019-19317: lookupName in resolve.c omits bits from the colUsed bitmask in the case of a generated column,
  which allows attackers to cause a denial of service (bsc#1158812)
- CVE-2019-19244: sqlite3,sqlite2,sqlite: The function sqlite3Select in select.c allows a crash if a
  sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage (bsc#1157818)
- CVE-2015-3415: sqlite3VdbeExec comparison operator vulnerability (bsc#928701)
- CVE-2015-3414: sqlite3,sqlite2: dequoting of collation-sequence names (bsc#928700)
- CVE-2020-13434: integer overflow in sqlite3_str_vappendf (bsc#1172115)
- CVE-2020-13630: (bsc#1172234: use-after-free in fts3EvalNextRow
- CVE-2020-13631: virtual table allowed to be renamed to one of its shadow tables (bsc#1172236)
- CVE-2020-13632: NULL pointer dereference via crafted matchinfo() query (bsc#1172240)
- CVE-2020-13435: Malicious SQL statements could have crashed the process that is running SQLite (bsc#1172091)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-14"/>
	<updated date="2021-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1157818">SUSE bug 1157818</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158812">SUSE bug 1158812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158958">SUSE bug 1158958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158959">SUSE bug 1158959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158960">SUSE bug 1158960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159491">SUSE bug 1159491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159715">SUSE bug 1159715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159847">SUSE bug 1159847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1159850">SUSE bug 1159850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160309">SUSE bug 1160309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160438">SUSE bug 1160438</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160439">SUSE bug 1160439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164719">SUSE bug 1164719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172091">SUSE bug 1172091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172115">SUSE bug 1172115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172234">SUSE bug 1172234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172236">SUSE bug 1172236</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172240">SUSE bug 1172240</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173641">SUSE bug 1173641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928700">SUSE bug 928700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/928701">SUSE bug 928701</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-3414/">CVE-2015-3414</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2015-3415/">CVE-2015-3415</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19244/">CVE-2019-19244</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-19317/">CVE-2019-19317</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19603/">CVE-2019-19603</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19645/">CVE-2019-19645</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19646/">CVE-2019-19646</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19880/">CVE-2019-19880</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-19923/">CVE-2019-19923</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2019-19924/">CVE-2019-19924</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19925/">CVE-2019-19925</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19926/">CVE-2019-19926</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19959/">CVE-2019-19959</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20218/">CVE-2019-20218</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13434/">CVE-2020-13434</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-13435/">CVE-2020-13435</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13630/">CVE-2020-13630</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-13631/">CVE-2020-13631</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-13632/">CVE-2020-13632</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-15358/">CVE-2020-15358</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-9327/">CVE-2020-9327</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009624163" comment="libsqlite3-0-3.36.0-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624164" comment="libsqlite3-0-32bit-3.36.0-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624165" comment="sqlite3-3.36.0-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624166" comment="sqlite3-devel-3.36.0-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140816" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183155" ref_url="https://bugzilla.suse.com/1183155" source="BUGZILLA"/>
		<reference ref_id="1183851" ref_url="https://bugzilla.suse.com/1183851" source="BUGZILLA"/>
		<reference ref_id="1183852" ref_url="https://bugzilla.suse.com/1183852" source="BUGZILLA"/>
		<reference ref_id="1184450" ref_url="https://bugzilla.suse.com/1184450" source="BUGZILLA"/>
		<reference ref_id="1187973" ref_url="https://bugzilla.suse.com/1187973" source="BUGZILLA"/>
		<reference ref_id="1187976" ref_url="https://bugzilla.suse.com/1187976" source="BUGZILLA"/>
		<reference ref_id="1187977" ref_url="https://bugzilla.suse.com/1187977" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7774" ref_url="https://www.suse.com/security/cve/CVE-2020-7774/" source="CVE"/>
		<reference ref_id="CVE-2021-22918" ref_url="https://www.suse.com/security/cve/CVE-2021-22918/" source="CVE"/>
		<reference ref_id="CVE-2021-23362" ref_url="https://www.suse.com/security/cve/CVE-2021-23362/" source="CVE"/>
		<reference ref_id="CVE-2021-27290" ref_url="https://www.suse.com/security/cve/CVE-2021-27290/" source="CVE"/>
		<reference ref_id="CVE-2021-3449" ref_url="https://www.suse.com/security/cve/CVE-2021-3449/" source="CVE"/>
		<reference ref_id="CVE-2021-3450" ref_url="https://www.suse.com/security/cve/CVE-2021-3450/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2353-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009145.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

Update nodejs10 to 10.24.1.

Including fixes for 

- CVE-2021-22918: libuv upgrade - Out of bounds read (bsc#1187973)
- CVE-2021-27290: ssri Regular Expression Denial of Service (bsc#1187976)
- CVE-2021-23362: hosted-git-info Regular Expression Denial of Service (bsc#1187977)
- CVE-2020-7774: y18n Prototype Pollution (bsc#1184450)
- CVE-2021-3450: OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT (bsc#1183851)
- CVE-2021-3449: OpenSSL - NULL pointer deref in signature_algorithms processing (bsc#1183852)
- reduce memory footprint of test-worker-stdio (bsc#1183155)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-15"/>
	<updated date="2021-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183155">SUSE bug 1183155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183851">SUSE bug 1183851</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183852">SUSE bug 1183852</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184450">SUSE bug 1184450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187973">SUSE bug 1187973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187976">SUSE bug 1187976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187977">SUSE bug 1187977</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-7774/">CVE-2020-7774</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22918/">CVE-2021-22918</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23362/">CVE-2021-23362</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27290/">CVE-2021-27290</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3449/">CVE-2021-3449</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3450/">CVE-2021-3450</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009624544" comment="nodejs10-10.24.1-1.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624545" comment="nodejs10-devel-10.24.1-1.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624546" comment="nodejs10-docs-10.24.1-1.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009624547" comment="npm10-10.24.1-1.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140817" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1153720" ref_url="https://bugzilla.suse.com/1153720" source="BUGZILLA"/>
		<reference ref_id="1174978" ref_url="https://bugzilla.suse.com/1174978" source="BUGZILLA"/>
		<reference ref_id="1179610" ref_url="https://bugzilla.suse.com/1179610" source="BUGZILLA"/>
		<reference ref_id="1181193" ref_url="https://bugzilla.suse.com/1181193" source="BUGZILLA"/>
		<reference ref_id="1185428" ref_url="https://bugzilla.suse.com/1185428" source="BUGZILLA"/>
		<reference ref_id="1185701" ref_url="https://bugzilla.suse.com/1185701" source="BUGZILLA"/>
		<reference ref_id="1185861" ref_url="https://bugzilla.suse.com/1185861" source="BUGZILLA"/>
		<reference ref_id="1186463" ref_url="https://bugzilla.suse.com/1186463" source="BUGZILLA"/>
		<reference ref_id="1186484" ref_url="https://bugzilla.suse.com/1186484" source="BUGZILLA"/>
		<reference ref_id="1187038" ref_url="https://bugzilla.suse.com/1187038" source="BUGZILLA"/>
		<reference ref_id="1187050" ref_url="https://bugzilla.suse.com/1187050" source="BUGZILLA"/>
		<reference ref_id="1187215" ref_url="https://bugzilla.suse.com/1187215" source="BUGZILLA"/>
		<reference ref_id="1187452" ref_url="https://bugzilla.suse.com/1187452" source="BUGZILLA"/>
		<reference ref_id="1187554" ref_url="https://bugzilla.suse.com/1187554" source="BUGZILLA"/>
		<reference ref_id="1187595" ref_url="https://bugzilla.suse.com/1187595" source="BUGZILLA"/>
		<reference ref_id="1187601" ref_url="https://bugzilla.suse.com/1187601" source="BUGZILLA"/>
		<reference ref_id="1188062" ref_url="https://bugzilla.suse.com/1188062" source="BUGZILLA"/>
		<reference ref_id="1188116" ref_url="https://bugzilla.suse.com/1188116" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-24588" ref_url="https://www.suse.com/security/cve/CVE-2020-24588/" source="CVE"/>
		<reference ref_id="CVE-2020-26558" ref_url="https://www.suse.com/security/cve/CVE-2020-26558/" source="CVE"/>
		<reference ref_id="CVE-2020-36385" ref_url="https://www.suse.com/security/cve/CVE-2020-36385/" source="CVE"/>
		<reference ref_id="CVE-2020-36386" ref_url="https://www.suse.com/security/cve/CVE-2020-36386/" source="CVE"/>
		<reference ref_id="CVE-2021-0129" ref_url="https://www.suse.com/security/cve/CVE-2021-0129/" source="CVE"/>
		<reference ref_id="CVE-2021-0512" ref_url="https://www.suse.com/security/cve/CVE-2021-0512/" source="CVE"/>
		<reference ref_id="CVE-2021-0605" ref_url="https://www.suse.com/security/cve/CVE-2021-0605/" source="CVE"/>
		<reference ref_id="CVE-2021-22555" ref_url="https://www.suse.com/security/cve/CVE-2021-22555/" source="CVE"/>
		<reference ref_id="CVE-2021-33200" ref_url="https://www.suse.com/security/cve/CVE-2021-33200/" source="CVE"/>
		<reference ref_id="CVE-2021-33624" ref_url="https://www.suse.com/security/cve/CVE-2021-33624/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="CVE-2021-34693" ref_url="https://www.suse.com/security/cve/CVE-2021-34693/" source="CVE"/>
		<reference ref_id="CVE-2021-3609" ref_url="https://www.suse.com/security/cve/CVE-2021-3609/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2427-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009190.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116)
- CVE-2021-33624: Fixed a bug which allows unprivileged BPF program to leak the contents of arbitrary kernel memory (and therefore, of all physical memory) via a side-channel. (bsc#1187554)
- CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. (bsc#1187601)
- CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187595)
- CVE-2020-26558: Fixed a flaw in the Bluetooth LE and BR/EDR secure pairing that could permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing. (bnc#1179610)
- CVE-2021-34693: Fixed a bug in net/can/bcm.c which could allow local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized. (bsc#1187452)
- CVE-2021-0129: Fixed an improper access control in BlueZ that may have allowed an authenticated user to potentially enable information disclosure via adjacent access. (bnc#1186463)
- CVE-2020-36386: Fixed an out-of-bounds read in hci_extended_inquiry_result_evt. (bsc#1187038)
- CVE-2020-24588: Fixed a bug that could allow an adversary to abuse devices that support receiving non-SSP A-MSDU frames to inject arbitrary network packets. (bsc#1185861 bsc#1185863)
- CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062)
- CVE-2021-3609: Fixed a race condition in the CAN BCM networking protocol which allows for local privilege escalation. (bsc#1187215)
- CVE-2020-36385: Fixed a use-after-free flaw in ucma.c which allows for local privilege escalation. (bsc#1187050)
- CVE-2021-33200: Fix leakage of uninitialized bpf stack under speculation. (bsc#1186484)

The following non-security bugs were fixed:

- af_packet: fix the tx skb protocol in raw sockets with ETH_P_ALL (bsc#1176081).
- kabi: preserve struct header_ops after bsc#1176081 fix (bsc#1176081).
- net: Do not set transport offset to invalid value (bsc#1176081).
- net: Introduce parse_protocol header_ops callback (bsc#1176081).
- net/ethernet: Add parse_protocol header_ops support (bsc#1176081).
- net/mlx5e: Remove the wrong assumption about transport offset (bsc#1176081).
- net/mlx5e: Trust kernel regarding transport offset (bsc#1176081).
- net/packet: Ask driver for protocol if not provided by user (bsc#1176081).
- net/packet: Remove redundant skb-&gt;protocol set (bsc#1176081).
- resource: Fix find_next_iomem_res() iteration issue (bsc#1181193).
- scsi: scsi_dh_alua: Retry RTPG on a different path after failure (bsc#1174978 bsc#1185701).
- SUNRPC in case of backlog, hand free slots directly to waiting task (bsc#1185428).
- SUNRPC: More fixes for backlog congestion (bsc#1185428).
- x86/crash: Add e820 reserved ranges to kdump kernel's e820 table (bsc#1181193).
- x86/debug: Extend the lower bound of crash kernel low reservations (bsc#1153720).
- x86/e820, ioport: Add a new I/O resource descriptor IORES_DESC_RESERVED (bsc#1181193).
- x86/mm: Rework ioremap resource mapping determination (bsc#1181193).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-21"/>
	<updated date="2021-07-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1153720">SUSE bug 1153720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174978">SUSE bug 1174978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179610">SUSE bug 1179610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181193">SUSE bug 1181193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185428">SUSE bug 1185428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185701">SUSE bug 1185701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185861">SUSE bug 1185861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186463">SUSE bug 1186463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186484">SUSE bug 1186484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187038">SUSE bug 1187038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187050">SUSE bug 1187050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187215">SUSE bug 1187215</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187452">SUSE bug 1187452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187554">SUSE bug 1187554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187595">SUSE bug 1187595</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187601">SUSE bug 1187601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188062">SUSE bug 1188062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188116">SUSE bug 1188116</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-24588/">CVE-2020-24588</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26558/">CVE-2020-26558</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36385/">CVE-2020-36385</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-36386/">CVE-2020-36386</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-0129/">CVE-2021-0129</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0512/">CVE-2021-0512</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0605/">CVE-2021-0605</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22555/">CVE-2021-22555</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33200/">CVE-2021-33200</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-33624/">CVE-2021-33624</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-34693/">CVE-2021-34693</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3609/">CVE-2021-3609</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626018" comment="kernel-default-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626019" comment="kernel-default-base-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626020" comment="kernel-default-devel-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625696" comment="kernel-default-man-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625669" comment="kernel-devel-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625670" comment="kernel-docs-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625671" comment="kernel-macros-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626021" comment="kernel-obs-build-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625673" comment="kernel-source-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626022" comment="kernel-syms-4.12.14-197.99.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626023" comment="reiserfs-kmp-default-4.12.14-197.99.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140818" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188217" ref_url="https://bugzilla.suse.com/1188217" source="BUGZILLA"/>
		<reference ref_id="1188218" ref_url="https://bugzilla.suse.com/1188218" source="BUGZILLA"/>
		<reference ref_id="1188219" ref_url="https://bugzilla.suse.com/1188219" source="BUGZILLA"/>
		<reference ref_id="1188220" ref_url="https://bugzilla.suse.com/1188220" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22922" ref_url="https://www.suse.com/security/cve/CVE-2021-22922/" source="CVE"/>
		<reference ref_id="CVE-2021-22923" ref_url="https://www.suse.com/security/cve/CVE-2021-22923/" source="CVE"/>
		<reference ref_id="CVE-2021-22924" ref_url="https://www.suse.com/security/cve/CVE-2021-22924/" source="CVE"/>
		<reference ref_id="CVE-2021-22925" ref_url="https://www.suse.com/security/cve/CVE-2021-22925/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2440-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009199.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2021-22925: TELNET stack contents disclosure again. (bsc#1188220)
- CVE-2021-22924: Bad connection reuse due to flawed path name checks. (bsc#1188219)
- CVE-2021-22923: Insufficiently Protected Credentials. (bsc#1188218)
- CVE-2021-22922: Wrong content via metalink not discarded. (bsc#1188217)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-21"/>
	<updated date="2021-07-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1188217">SUSE bug 1188217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188218">SUSE bug 1188218</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188219">SUSE bug 1188219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188220">SUSE bug 1188220</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22922/">CVE-2021-22922</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22923/">CVE-2021-22923</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-22924/">CVE-2021-22924</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22925/">CVE-2021-22925</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626010" comment="curl-7.60.0-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626011" comment="libcurl-devel-7.60.0-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626012" comment="libcurl4-7.60.0-3.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626008" comment="libcurl4-32bit-7.60.0-3.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140819" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181414" ref_url="https://bugzilla.suse.com/1181414" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26976" ref_url="https://www.suse.com/security/cve/CVE-2020-26976/" source="CVE"/>
		<reference ref_id="CVE-2021-23953" ref_url="https://www.suse.com/security/cve/CVE-2021-23953/" source="CVE"/>
		<reference ref_id="CVE-2021-23954" ref_url="https://www.suse.com/security/cve/CVE-2021-23954/" source="CVE"/>
		<reference ref_id="CVE-2021-23960" ref_url="https://www.suse.com/security/cve/CVE-2021-23960/" source="CVE"/>
		<reference ref_id="CVE-2021-23964" ref_url="https://www.suse.com/security/cve/CVE-2021-23964/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0246-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-January/008257.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.7.0 ESR  (MFSA 2021-04, bsc#1181414)
  * CVE-2021-23953: Fixed a Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954: Fixed a type confusion when using logical assignment operators in JavaScript switch statements
  * CVE-2020-26976: Fixed an issue where HTTPS pages could have been intercepted by a registered service worker when they should not have been
  * CVE-2021-23960: Fixed a use-after-poison for incorrectly redeclared JavaScript variables during GC
  * CVE-2021-23964: Fixed Memory safety bugs 	
		</description>
<advisory from="security@suse.de">
	<issued date="2021-01-29"/>
	<updated date="2021-01-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181414">SUSE bug 1181414</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26976/">CVE-2020-26976</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23953/">CVE-2021-23953</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23954/">CVE-2021-23954</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-23960/">CVE-2021-23960</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23964/">CVE-2021-23964</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495627" comment="MozillaFirefox-78.7.0-3.128.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495628" comment="MozillaFirefox-devel-78.7.0-3.128.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495629" comment="MozillaFirefox-translations-common-78.7.0-3.128.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495630" comment="MozillaFirefox-translations-other-78.7.0-3.128.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140820" version="1" class="patch">
	<metadata>
		<title>Security update for linuxptp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187646" ref_url="https://bugzilla.suse.com/1187646" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3570" ref_url="https://www.suse.com/security/cve/CVE-2021-3570/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2472-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009215.html" source="SUSE-SU"/>
		<description>
This update for linuxptp fixes the following issues:

- CVE-2021-3570: Validate the messageLength field of incoming messages. (bsc#1187646)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187646">SUSE bug 1187646</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3570/">CVE-2021-3570</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625994" comment="linuxptp-1.8+git65.g303b08c-3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140821" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188275" ref_url="https://bugzilla.suse.com/1188275" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29970" ref_url="https://www.suse.com/security/cve/CVE-2021-29970/" source="CVE"/>
		<reference ref_id="CVE-2021-29976" ref_url="https://www.suse.com/security/cve/CVE-2021-29976/" source="CVE"/>
		<reference ref_id="CVE-2021-30547" ref_url="https://www.suse.com/security/cve/CVE-2021-30547/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2478-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-July/009220.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 78.12.0 ESR

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-29 (bsc#1188275)

* CVE-2021-29970: Use-after-free in accessibility features of a document
* CVE-2021-30547: Out of bounds write in ANGLE
* CVE-2021-29976: Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.12
		</description>
<advisory from="security@suse.de">
	<issued date="2021-07-27"/>
	<updated date="2021-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188275">SUSE bug 1188275</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29970/">CVE-2021-29970</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29976/">CVE-2021-29976</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30547/">CVE-2021-30547</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009625203" comment="MozillaFirefox-78.12.0-3.147.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625204" comment="MozillaFirefox-devel-78.12.0-3.147.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625205" comment="MozillaFirefox-translations-common-78.12.0-3.147.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625206" comment="MozillaFirefox-translations-other-78.12.0-3.147.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140822" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1176681" ref_url="https://bugzilla.suse.com/1176681" source="BUGZILLA"/>
		<reference ref_id="1185591" ref_url="https://bugzilla.suse.com/1185591" source="BUGZILLA"/>
		<reference ref_id="1186290" ref_url="https://bugzilla.suse.com/1186290" source="BUGZILLA"/>
		<reference ref_id="1187364" ref_url="https://bugzilla.suse.com/1187364" source="BUGZILLA"/>
		<reference ref_id="1187365" ref_url="https://bugzilla.suse.com/1187365" source="BUGZILLA"/>
		<reference ref_id="1187366" ref_url="https://bugzilla.suse.com/1187366" source="BUGZILLA"/>
		<reference ref_id="1187367" ref_url="https://bugzilla.suse.com/1187367" source="BUGZILLA"/>
		<reference ref_id="1187499" ref_url="https://bugzilla.suse.com/1187499" source="BUGZILLA"/>
		<reference ref_id="1187529" ref_url="https://bugzilla.suse.com/1187529" source="BUGZILLA"/>
		<reference ref_id="1187538" ref_url="https://bugzilla.suse.com/1187538" source="BUGZILLA"/>
		<reference ref_id="1187539" ref_url="https://bugzilla.suse.com/1187539" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25085" ref_url="https://www.suse.com/security/cve/CVE-2020-25085/" source="CVE"/>
		<reference ref_id="CVE-2021-3582" ref_url="https://www.suse.com/security/cve/CVE-2021-3582/" source="CVE"/>
		<reference ref_id="CVE-2021-3592" ref_url="https://www.suse.com/security/cve/CVE-2021-3592/" source="CVE"/>
		<reference ref_id="CVE-2021-3593" ref_url="https://www.suse.com/security/cve/CVE-2021-3593/" source="CVE"/>
		<reference ref_id="CVE-2021-3594" ref_url="https://www.suse.com/security/cve/CVE-2021-3594/" source="CVE"/>
		<reference ref_id="CVE-2021-3595" ref_url="https://www.suse.com/security/cve/CVE-2021-3595/" source="CVE"/>
		<reference ref_id="CVE-2021-3607" ref_url="https://www.suse.com/security/cve/CVE-2021-3607/" source="CVE"/>
		<reference ref_id="CVE-2021-3608" ref_url="https://www.suse.com/security/cve/CVE-2021-3608/" source="CVE"/>
		<reference ref_id="CVE-2021-3611" ref_url="https://www.suse.com/security/cve/CVE-2021-3611/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2591-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009241.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

Security issues fixed:

- CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)
- CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)
- CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)
- CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)
- CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)
- CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
- CVE-2021-3608: Fix the ring init error flow (bsc#1187538)
- CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)
- CVE-2020-25085: Fix out-of-bounds access issue while doing multi block SDMA (bsc#1176681)

Other issues fixed:

- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
- Fix qemu hang while cancelling migrating hugepage vm (bsc#1185591)

		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-02"/>
	<updated date="2021-08-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176681">SUSE bug 1176681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185591">SUSE bug 1185591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186290">SUSE bug 1186290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187364">SUSE bug 1187364</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187365">SUSE bug 1187365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187366">SUSE bug 1187366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187367">SUSE bug 1187367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187499">SUSE bug 1187499</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187529">SUSE bug 1187529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187538">SUSE bug 1187538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187539">SUSE bug 1187539</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-25085/">CVE-2020-25085</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3582/">CVE-2021-3582</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3592/">CVE-2021-3592</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3593/">CVE-2021-3593</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3594/">CVE-2021-3594</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3595/">CVE-2021-3595</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3607/">CVE-2021-3607</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3608/">CVE-2021-3608</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3611/">CVE-2021-3611</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627266" comment="qemu-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625399" comment="qemu-arm-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625400" comment="qemu-audio-alsa-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625401" comment="qemu-audio-oss-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625402" comment="qemu-audio-pa-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627267" comment="qemu-block-curl-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627268" comment="qemu-block-iscsi-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627269" comment="qemu-block-rbd-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627270" comment="qemu-block-ssh-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627271" comment="qemu-guest-agent-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625408" comment="qemu-ipxe-1.0.0+-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627272" comment="qemu-kvm-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627273" comment="qemu-lang-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625434" comment="qemu-ppc-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625435" comment="qemu-s390-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625411" comment="qemu-seabios-1.12.0_0_ga698c89-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625412" comment="qemu-sgabios-8-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627274" comment="qemu-tools-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625414" comment="qemu-ui-curses-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625415" comment="qemu-ui-gtk-3.1.1.1-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625416" comment="qemu-vgabios-1.12.0_0_ga698c89-9.30.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009625417" comment="qemu-x86-3.1.1.1-9.30.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140823" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182739" ref_url="https://bugzilla.suse.com/1182739" source="BUGZILLA"/>
		<reference ref_id="1183770" ref_url="https://bugzilla.suse.com/1183770" source="BUGZILLA"/>
		<reference ref_id="1185868" ref_url="https://bugzilla.suse.com/1185868" source="BUGZILLA"/>
		<reference ref_id="1185870" ref_url="https://bugzilla.suse.com/1185870" source="BUGZILLA"/>
		<reference ref_id="1185872" ref_url="https://bugzilla.suse.com/1185872" source="BUGZILLA"/>
		<reference ref_id="1188300" ref_url="https://bugzilla.suse.com/1188300" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2154" ref_url="https://www.suse.com/security/cve/CVE-2021-2154/" source="CVE"/>
		<reference ref_id="CVE-2021-2166" ref_url="https://www.suse.com/security/cve/CVE-2021-2166/" source="CVE"/>
		<reference ref_id="CVE-2021-2180" ref_url="https://www.suse.com/security/cve/CVE-2021-2180/" source="CVE"/>
		<reference ref_id="CVE-2021-27928" ref_url="https://www.suse.com/security/cve/CVE-2021-27928/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2617-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009251.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

- Update to 10.2.39 (bsc#1182739)
- CVE-2021-2166: DML unspecified vulnerability lead to complete DOS. (bsc#1185870)
- CVE-2021-2154: DML unspecified vulnerability can lead to complete DOS. (bsc#1185872)
- CVE-2021-2180: InnoDB unspecified vulnerability lead to complete DOS. (bsc#1185868)
- CVE-2021-27928: Fixed a remote code execution issue. (bsc#1183770)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-05"/>
	<updated date="2021-08-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182739">SUSE bug 1182739</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183770">SUSE bug 1183770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185868">SUSE bug 1185868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185870">SUSE bug 1185870</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185872">SUSE bug 1185872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188300">SUSE bug 1188300</bugzilla>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2154/">CVE-2021-2154</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2166/">CVE-2021-2166</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2180/">CVE-2021-2180</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27928/">CVE-2021-27928</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626456" comment="libmysqld-devel-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626457" comment="libmysqld19-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626458" comment="mariadb-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626459" comment="mariadb-client-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626451" comment="mariadb-errormessages-10.2.39-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626460" comment="mariadb-tools-10.2.39-3.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140824" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182620" ref_url="https://bugzilla.suse.com/1182620" source="BUGZILLA"/>
		<reference ref_id="1184450" ref_url="https://bugzilla.suse.com/1184450" source="BUGZILLA"/>
		<reference ref_id="1187976" ref_url="https://bugzilla.suse.com/1187976" source="BUGZILLA"/>
		<reference ref_id="1187977" ref_url="https://bugzilla.suse.com/1187977" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7774" ref_url="https://www.suse.com/security/cve/CVE-2020-7774/" source="CVE"/>
		<reference ref_id="CVE-2021-22884" ref_url="https://www.suse.com/security/cve/CVE-2021-22884/" source="CVE"/>
		<reference ref_id="CVE-2021-23362" ref_url="https://www.suse.com/security/cve/CVE-2021-23362/" source="CVE"/>
		<reference ref_id="CVE-2021-27290" ref_url="https://www.suse.com/security/cve/CVE-2021-27290/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009256.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

- update to npm 6.14.13
- CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. (bsc#1187976)
- CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service (bsc#1187977)
- CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-05"/>
	<updated date="2021-08-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182620">SUSE bug 1182620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184450">SUSE bug 1184450</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187976">SUSE bug 1187976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187977">SUSE bug 1187977</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-7774/">CVE-2020-7774</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-22884/">CVE-2021-22884</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23362/">CVE-2021-23362</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27290/">CVE-2021-27290</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626438" comment="nodejs-common-2.0-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626453" comment="nodejs8-8.17.0-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626454" comment="nodejs8-devel-8.17.0-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626441" comment="nodejs8-docs-8.17.0-3.47.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626455" comment="npm8-8.17.0-3.47.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140825" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188891" ref_url="https://bugzilla.suse.com/1188891" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29980" ref_url="https://www.suse.com/security/cve/CVE-2021-29980/" source="CVE"/>
		<reference ref_id="CVE-2021-29984" ref_url="https://www.suse.com/security/cve/CVE-2021-29984/" source="CVE"/>
		<reference ref_id="CVE-2021-29985" ref_url="https://www.suse.com/security/cve/CVE-2021-29985/" source="CVE"/>
		<reference ref_id="CVE-2021-29986" ref_url="https://www.suse.com/security/cve/CVE-2021-29986/" source="CVE"/>
		<reference ref_id="CVE-2021-29988" ref_url="https://www.suse.com/security/cve/CVE-2021-29988/" source="CVE"/>
		<reference ref_id="CVE-2021-29989" ref_url="https://www.suse.com/security/cve/CVE-2021-29989/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009297.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 78.13.0 ESR (MFSA 2021-34, bsc#1188891):

- CVE-2021-29986: Race condition when resolving DNS names could have led to memory corruption
- CVE-2021-29988: Memory corruption as a result of incorrect style treatment
- CVE-2021-29984: Incorrect instruction reordering during JIT optimization
- CVE-2021-29980: Uninitialized memory in a canvas object could have led to memory corruption
- CVE-2021-29985: Use-after-free media channels
- CVE-2021-29989: Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188891">SUSE bug 1188891</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29980/">CVE-2021-29980</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29984/">CVE-2021-29984</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29985/">CVE-2021-29985</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29986/">CVE-2021-29986</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29988/">CVE-2021-29988</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29989/">CVE-2021-29989</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009630579" comment="MozillaFirefox-78.13.0-3.150.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630580" comment="MozillaFirefox-devel-78.13.0-3.150.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630581" comment="MozillaFirefox-translations-common-78.13.0-3.150.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630582" comment="MozillaFirefox-translations-other-78.13.0-3.150.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140826" version="1" class="patch">
	<metadata>
		<title>Security update for c-ares (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188881" ref_url="https://bugzilla.suse.com/1188881" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3672" ref_url="https://www.suse.com/security/cve/CVE-2021-3672/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2760-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-August/019883.html" source="SUSE-SU"/>
		<description>
This update for c-ares fixes the following issues:

Version update to git snapshot 1.17.1+20200724:

- CVE-2021-3672: fixed missing input validation on hostnames returned by DNS servers (bsc#1188881)
- If ares_getaddrinfo() was terminated by an ares_destroy(), it would cause crash
- Crash in sortaddrinfo() if the list size equals 0 due to an unexpected DNS response
- Expand number of escaped characters in DNS replies as per RFC1035 5.1 to prevent spoofing
- Use unbuffered /dev/urandom for random data to prevent early startup performance issues
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188881">SUSE bug 1188881</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3672/">CVE-2021-3672</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009630341" comment="c-ares-devel-1.17.1+20200724-3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630342" comment="libcares2-1.17.1+20200724-3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140827" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188697" ref_url="https://bugzilla.suse.com/1188697" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21775" ref_url="https://www.suse.com/security/cve/CVE-2021-21775/" source="CVE"/>
		<reference ref_id="CVE-2021-21779" ref_url="https://www.suse.com/security/cve/CVE-2021-21779/" source="CVE"/>
		<reference ref_id="CVE-2021-30663" ref_url="https://www.suse.com/security/cve/CVE-2021-30663/" source="CVE"/>
		<reference ref_id="CVE-2021-30665" ref_url="https://www.suse.com/security/cve/CVE-2021-30665/" source="CVE"/>
		<reference ref_id="CVE-2021-30689" ref_url="https://www.suse.com/security/cve/CVE-2021-30689/" source="CVE"/>
		<reference ref_id="CVE-2021-30720" ref_url="https://www.suse.com/security/cve/CVE-2021-30720/" source="CVE"/>
		<reference ref_id="CVE-2021-30734" ref_url="https://www.suse.com/security/cve/CVE-2021-30734/" source="CVE"/>
		<reference ref_id="CVE-2021-30744" ref_url="https://www.suse.com/security/cve/CVE-2021-30744/" source="CVE"/>
		<reference ref_id="CVE-2021-30749" ref_url="https://www.suse.com/security/cve/CVE-2021-30749/" source="CVE"/>
		<reference ref_id="CVE-2021-30758" ref_url="https://www.suse.com/security/cve/CVE-2021-30758/" source="CVE"/>
		<reference ref_id="CVE-2021-30795" ref_url="https://www.suse.com/security/cve/CVE-2021-30795/" source="CVE"/>
		<reference ref_id="CVE-2021-30797" ref_url="https://www.suse.com/security/cve/CVE-2021-30797/" source="CVE"/>
		<reference ref_id="CVE-2021-30799" ref_url="https://www.suse.com/security/cve/CVE-2021-30799/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2762-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009300.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.32.3:
- CVE-2021-21775: Fixed a use-after-free vulnerability in the way certain events are processed for ImageLoader objects. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger this vulnerability. (bsc#1188697)
- CVE-2021-21779: Fixed a use-after-free vulnerability in the way that WebKit GraphicsContext handles certain events. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger this vulnerability. (bsc#1188697)
- CVE-2021-30663: An integer overflow was addressed with improved input validation. (bsc#1188697)
- CVE-2021-30665: A memory corruption issue was addressed with improved state management. (bsc#1188697)
- CVE-2021-30689: A logic issue was addressed with improved state management. (bsc#1188697)
- CVE-2021-30720: A logic issue was addressed with improved restrictions. (bsc#1188697)
- CVE-2021-30734: Multiple memory corruption issues were addressed with improved memory handling. (bsc#1188697)
- CVE-2021-30744: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. (bsc#1188697)
- CVE-2021-30749: Multiple memory corruption issues were addressed with improved memory handling. (bsc#1188697)
- CVE-2021-30758: A type confusion issue was addressed with improved state handling. (bsc#1188697)
- CVE-2021-30795: A use after free issue was addressed with improved memory management. (bsc#1188697)
- CVE-2021-30797: This issue was addressed with improved checks. (bsc#1188697)
- CVE-2021-30799: Multiple memory corruption issues were addressed with improved memory handling. (bsc#1188697)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188697">SUSE bug 1188697</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21775/">CVE-2021-21775</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21779/">CVE-2021-21779</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30663/">CVE-2021-30663</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30665/">CVE-2021-30665</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30689/">CVE-2021-30689</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30720/">CVE-2021-30720</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30734/">CVE-2021-30734</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30744/">CVE-2021-30744</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30749/">CVE-2021-30749</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30758/">CVE-2021-30758</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30795/">CVE-2021-30795</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30797/">CVE-2021-30797</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30799/">CVE-2021-30799</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627246" comment="libjavascriptcoregtk-4_0-18-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627247" comment="libsoup-2_4-1-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627248" comment="libsoup-devel-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627237" comment="libsoup-lang-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627249" comment="libwebkit2gtk-4_0-37-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627239" comment="libwebkit2gtk3-lang-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627250" comment="typelib-1_0-JavaScriptCore-4_0-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627251" comment="typelib-1_0-Soup-2_4-2.62.2-17.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627252" comment="typelib-1_0-WebKit2-4_0-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627253" comment="typelib-1_0-WebKit2WebExtension-4_0-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627254" comment="webkit2gtk-4_0-injected-bundles-2.32.3-3.77.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627255" comment="webkit2gtk3-devel-2.32.3-3.77.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140828" version="1" class="patch">
	<metadata>
		<title>Security update for libsndfile (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1100167" ref_url="https://bugzilla.suse.com/1100167" source="BUGZILLA"/>
		<reference ref_id="1116993" ref_url="https://bugzilla.suse.com/1116993" source="BUGZILLA"/>
		<reference ref_id="1117954" ref_url="https://bugzilla.suse.com/1117954" source="BUGZILLA"/>
		<reference ref_id="1188540" ref_url="https://bugzilla.suse.com/1188540" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13139" ref_url="https://www.suse.com/security/cve/CVE-2018-13139/" source="CVE"/>
		<reference ref_id="CVE-2018-19432" ref_url="https://www.suse.com/security/cve/CVE-2018-19432/" source="CVE"/>
		<reference ref_id="CVE-2018-19758" ref_url="https://www.suse.com/security/cve/CVE-2018-19758/" source="CVE"/>
		<reference ref_id="CVE-2021-3246" ref_url="https://www.suse.com/security/cve/CVE-2021-3246/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2764-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009301.html" source="SUSE-SU"/>
		<description>
This update for libsndfile fixes the following issues:

- CVE-2018-13139: Fixed a stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. (bsc#1100167)
- CVE-2018-19432: Fixed a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a denial of service. (bsc#1116993)
- CVE-2021-3246: Fixed a heap buffer overflow vulnerability in msadpcm_decode_block. (bsc#1188540)
- CVE-2018-19758: Fixed a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service. (bsc#1117954)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-17"/>
	<updated date="2021-08-17"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1100167">SUSE bug 1100167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116993">SUSE bug 1116993</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1117954">SUSE bug 1117954</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188540">SUSE bug 1188540</bugzilla>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-13139/">CVE-2018-13139</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-19432/">CVE-2018-19432</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-19758/">CVE-2018-19758</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3246/">CVE-2021-3246</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626824" comment="libsndfile-devel-1.0.28-5.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626825" comment="libsndfile1-1.0.28-5.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140829" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1188906" ref_url="https://bugzilla.suse.com/1188906" source="BUGZILLA"/>
		<reference ref_id="1189162" ref_url="https://bugzilla.suse.com/1189162" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36221" ref_url="https://www.suse.com/security/cve/CVE-2021-36221/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2787-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009321.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

Update to go1.15.15:

- go#47473 net/http: panic due to racy read of persistConn after handler panic (CVE-2021-36221 bsc#1189162)
- go#47347 cmd/go: 'go list -f '{{.Stale}}'' stack overflow with cyclic imports
- go#47014 cmd/go: go mod vendor: open C:\Users\LICENSE: Access is denied.
- go#46927 cmd/compile: register conflict between external linker and duffzero on arm64
- go#46857 runtime: ppc64x binaries randomly segfault on linux 5.13rc6
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188906">SUSE bug 1188906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189162">SUSE bug 1189162</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36221/">CVE-2021-36221</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009630565" comment="go1.15-1.15.15-1.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630566" comment="go1.15-doc-1.15.15-1.39.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630567" comment="go1.15-race-1.15.15-1.39.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140830" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188917" ref_url="https://bugzilla.suse.com/1188917" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22930" ref_url="https://www.suse.com/security/cve/CVE-2021-22930/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2790-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009320.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

- CVE-2021-22930: http2: fixes use after free on close in stream canceling (bsc#1188917).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188917">SUSE bug 1188917</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22930/">CVE-2021-22930</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009629452" comment="nodejs8-8.17.0-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629453" comment="nodejs8-devel-8.17.0-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629439" comment="nodejs8-docs-8.17.0-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629454" comment="npm8-8.17.0-3.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140831" version="1" class="patch">
	<metadata>
		<title>Security update for fetchmail (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188034" ref_url="https://bugzilla.suse.com/1188034" source="BUGZILLA"/>
		<reference ref_id="1188875" ref_url="https://bugzilla.suse.com/1188875" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36386" ref_url="https://www.suse.com/security/cve/CVE-2021-36386/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2791-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009317.html" source="SUSE-SU"/>
		<description>
This update for fetchmail fixes the following issues:

- CVE-2021-36386: Fixed a missing variable initialization that can cause read from bad memory locations. (bsc#1188875)
- Change PASSWORDLEN from 64 to 256 (bsc#1188034)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1188034">SUSE bug 1188034</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188875">SUSE bug 1188875</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-36386/">CVE-2021-36386</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009628201" comment="fetchmail-6.3.26-20.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009628202" comment="fetchmailconf-6.3.26-20.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140832" version="1" class="patch">
	<metadata>
		<title>Security update for libass (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188539" ref_url="https://bugzilla.suse.com/1188539" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36430" ref_url="https://www.suse.com/security/cve/CVE-2020-36430/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2792-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009325.html" source="SUSE-SU"/>
		<description>
This update for libass fixes the following issues:

- CVE-2020-36430: Fixed heap-based buffer overflow in decode_chars (bsc#1188539).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188539">SUSE bug 1188539</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36430/">CVE-2020-36430</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009628040" comment="libass-devel-0.14.0-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009628041" comment="libass9-0.14.0-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140833" version="1" class="patch">
	<metadata>
		<title>Security update for openexr (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188457" ref_url="https://bugzilla.suse.com/1188457" source="BUGZILLA"/>
		<reference ref_id="1188458" ref_url="https://bugzilla.suse.com/1188458" source="BUGZILLA"/>
		<reference ref_id="1188459" ref_url="https://bugzilla.suse.com/1188459" source="BUGZILLA"/>
		<reference ref_id="1188460" ref_url="https://bugzilla.suse.com/1188460" source="BUGZILLA"/>
		<reference ref_id="1188461" ref_url="https://bugzilla.suse.com/1188461" source="BUGZILLA"/>
		<reference ref_id="1188462" ref_url="https://bugzilla.suse.com/1188462" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20298" ref_url="https://www.suse.com/security/cve/CVE-2021-20298/" source="CVE"/>
		<reference ref_id="CVE-2021-20299" ref_url="https://www.suse.com/security/cve/CVE-2021-20299/" source="CVE"/>
		<reference ref_id="CVE-2021-20300" ref_url="https://www.suse.com/security/cve/CVE-2021-20300/" source="CVE"/>
		<reference ref_id="CVE-2021-20302" ref_url="https://www.suse.com/security/cve/CVE-2021-20302/" source="CVE"/>
		<reference ref_id="CVE-2021-20303" ref_url="https://www.suse.com/security/cve/CVE-2021-20303/" source="CVE"/>
		<reference ref_id="CVE-2021-20304" ref_url="https://www.suse.com/security/cve/CVE-2021-20304/" source="CVE"/>
		<reference ref_id="CVE-2021-3476" ref_url="https://www.suse.com/security/cve/CVE-2021-3476/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2793-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009313.html" source="SUSE-SU"/>
		<description>
This update for openexr fixes the following issues:

- CVE-2021-20298 [bsc#1188460]: Fixed Out-of-memory in B44Compressor
- CVE-2021-20299 [bsc#1188459]: Fixed Null-dereference READ in Imf_2_5:Header:operator
- CVE-2021-20300 [bsc#1188458]: Fixed Integer-overflow in Imf_2_5:hufUncompress
- CVE-2021-20302 [bsc#1188462]: Fixed Floating-point-exception in Imf_2_5:precalculateTileInfot
- CVE-2021-20303 [bsc#1188457]: Fixed Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer
- CVE-2021-20304 [bsc#1188461]: Fixed Undefined-shift in Imf_2_5:hufDecode
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188457">SUSE bug 1188457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188458">SUSE bug 1188458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188459">SUSE bug 1188459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188460">SUSE bug 1188460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188461">SUSE bug 1188461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188462">SUSE bug 1188462</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20298/">CVE-2021-20298</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20299/">CVE-2021-20299</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20300/">CVE-2021-20300</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20302/">CVE-2021-20302</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-20303/">CVE-2021-20303</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20304/">CVE-2021-20304</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3476/">CVE-2021-3476</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627865" comment="libIlmImf-2_2-23-2.2.1-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627866" comment="libIlmImfUtil-2_2-23-2.2.1-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627867" comment="openexr-devel-2.2.1-3.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140834" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188035" ref_url="https://bugzilla.suse.com/1188035" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21704" ref_url="https://www.suse.com/security/cve/CVE-2021-21704/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2795-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009327.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2021-21704: Fixed security issues in pdo_firebase module (bsc#1188035).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188035">SUSE bug 1188035</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21704/">CVE-2021-21704</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627464" comment="apache2-mod_php7-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627465" comment="php7-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627466" comment="php7-bcmath-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627467" comment="php7-bz2-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627468" comment="php7-calendar-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627469" comment="php7-ctype-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627470" comment="php7-curl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627471" comment="php7-dba-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627472" comment="php7-devel-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627473" comment="php7-dom-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627474" comment="php7-enchant-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627475" comment="php7-exif-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627476" comment="php7-fastcgi-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627477" comment="php7-fileinfo-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627478" comment="php7-fpm-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627479" comment="php7-ftp-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627480" comment="php7-gd-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627481" comment="php7-gettext-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627482" comment="php7-gmp-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627483" comment="php7-iconv-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627484" comment="php7-intl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627485" comment="php7-json-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627486" comment="php7-ldap-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627487" comment="php7-mbstring-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627488" comment="php7-mysql-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627489" comment="php7-odbc-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627490" comment="php7-opcache-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627491" comment="php7-openssl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627492" comment="php7-pcntl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627493" comment="php7-pdo-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627438" comment="php7-pear-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627439" comment="php7-pear-Archive_Tar-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627494" comment="php7-pgsql-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627495" comment="php7-phar-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627496" comment="php7-posix-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627497" comment="php7-readline-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627498" comment="php7-shmop-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627499" comment="php7-snmp-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627500" comment="php7-soap-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627501" comment="php7-sockets-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627502" comment="php7-sodium-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627503" comment="php7-sqlite-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627504" comment="php7-sysvmsg-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627505" comment="php7-sysvsem-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627506" comment="php7-sysvshm-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631337" comment="php7-tidy-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627507" comment="php7-tokenizer-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627508" comment="php7-wddx-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627509" comment="php7-xmlreader-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627510" comment="php7-xmlrpc-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627511" comment="php7-xmlwriter-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627512" comment="php7-xsl-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627513" comment="php7-zip-7.2.5-4.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627514" comment="php7-zlib-7.2.5-4.79.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140835" version="1" class="patch">
	<metadata>
		<title>Security update for djvulibre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187869" ref_url="https://bugzilla.suse.com/1187869" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3630" ref_url="https://www.suse.com/security/cve/CVE-2021-3630/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2796-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009319.html" source="SUSE-SU"/>
		<description>
This update for djvulibre fixes the following issues:

- CVE-2021-3630: out-of-bounds write in DJVU:DjVuTXT:decode() in DjVuText.cpp (bsc#1187869)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187869">SUSE bug 1187869</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3630/">CVE-2021-3630</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627462" comment="libdjvulibre-devel-3.5.27-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627463" comment="libdjvulibre21-3.5.27-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140836" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185056" ref_url="https://bugzilla.suse.com/1185056" source="BUGZILLA"/>
		<reference ref_id="1188564" ref_url="https://bugzilla.suse.com/1188564" source="BUGZILLA"/>
		<reference ref_id="1188565" ref_url="https://bugzilla.suse.com/1188565" source="BUGZILLA"/>
		<reference ref_id="1188566" ref_url="https://bugzilla.suse.com/1188566" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2161" ref_url="https://www.suse.com/security/cve/CVE-2021-2161/" source="CVE"/>
		<reference ref_id="CVE-2021-2341" ref_url="https://www.suse.com/security/cve/CVE-2021-2341/" source="CVE"/>
		<reference ref_id="CVE-2021-2369" ref_url="https://www.suse.com/security/cve/CVE-2021-2369/" source="CVE"/>
		<reference ref_id="CVE-2021-2388" ref_url="https://www.suse.com/security/cve/CVE-2021-2388/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2798-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009324.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

- Update to version jdk8u302 (icedtea 3.20.0)
- CVE-2021-2341: Improve file transfers. (bsc#1188564)
- CVE-2021-2369: Better jar file validation. (bsc#1188565)
- CVE-2021-2388: Enhance compiler validation. (bsc#1188566)
- CVE-2021-2161: Less ambiguous processing. (bsc#1185056)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185056">SUSE bug 1185056</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188564">SUSE bug 1188564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188565">SUSE bug 1188565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188566">SUSE bug 1188566</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2161/">CVE-2021-2161</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-2341/">CVE-2021-2341</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-2369/">CVE-2021-2369</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-2388/">CVE-2021-2388</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009627144" comment="java-1_8_0-openjdk-1.8.0.302-3.55.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627145" comment="java-1_8_0-openjdk-demo-1.8.0.302-3.55.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627146" comment="java-1_8_0-openjdk-devel-1.8.0.302-3.55.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009627147" comment="java-1_8_0-openjdk-headless-1.8.0.302-3.55.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140837" version="1" class="patch">
	<metadata>
		<title>Security update for krb5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188571" ref_url="https://bugzilla.suse.com/1188571" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36222" ref_url="https://www.suse.com/security/cve/CVE-2021-36222/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2800-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009316.html" source="SUSE-SU"/>
		<description>
This update for krb5 fixes the following issues:

- CVE-2021-36222: Fixed KDC null deref on bad encrypted challenge. (bsc#1188571)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188571">SUSE bug 1188571</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36222/">CVE-2021-36222</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626699" comment="krb5-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626700" comment="krb5-32bit-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626701" comment="krb5-client-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626702" comment="krb5-devel-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626716" comment="krb5-plugin-kdb-ldap-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626703" comment="krb5-plugin-preauth-otp-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626704" comment="krb5-plugin-preauth-pkinit-1.16.3-3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626717" comment="krb5-server-1.16.3-3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140838" version="1" class="patch">
	<metadata>
		<title>Security update for spice-vdagent (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177780" ref_url="https://bugzilla.suse.com/1177780" source="BUGZILLA"/>
		<reference ref_id="1177781" ref_url="https://bugzilla.suse.com/1177781" source="BUGZILLA"/>
		<reference ref_id="1177782" ref_url="https://bugzilla.suse.com/1177782" source="BUGZILLA"/>
		<reference ref_id="1177783" ref_url="https://bugzilla.suse.com/1177783" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25650" ref_url="https://www.suse.com/security/cve/CVE-2020-25650/" source="CVE"/>
		<reference ref_id="CVE-2020-25651" ref_url="https://www.suse.com/security/cve/CVE-2020-25651/" source="CVE"/>
		<reference ref_id="CVE-2020-25652" ref_url="https://www.suse.com/security/cve/CVE-2020-25652/" source="CVE"/>
		<reference ref_id="CVE-2020-25653" ref_url="https://www.suse.com/security/cve/CVE-2020-25653/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2803-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009312.html" source="SUSE-SU"/>
		<description>
This update for spice-vdagent fixes the following issues:

- CVE-2020-25650: memory DoS via arbitrary entries in `active_xfers` hash table (bsc#1177780)
- CVE-2020-25651: possible file transfer DoS and information leak via `active_xfers` hash map (bsc#1177781)
- CVE-2020-25652: possibility to exhaust file descriptors in `vdagentd` (bsc#1177782) 
- CVE-2020-25653: UNIX domain socket peer PID retrieved via `SO_PEERCRED` is subject to race condition (bsc#1177783) 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-20"/>
	<updated date="2021-08-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1177780">SUSE bug 1177780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177781">SUSE bug 1177781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177782">SUSE bug 1177782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177783">SUSE bug 1177783</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25650/">CVE-2020-25650</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25651/">CVE-2020-25651</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25652/">CVE-2020-25652</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25653/">CVE-2020-25653</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626009" comment="spice-vdagent-0.17.0-4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140839" version="1" class="patch">
	<metadata>
		<title>Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1102408" ref_url="https://bugzilla.suse.com/1102408" source="BUGZILLA"/>
		<reference ref_id="1138715" ref_url="https://bugzilla.suse.com/1138715" source="BUGZILLA"/>
		<reference ref_id="1138746" ref_url="https://bugzilla.suse.com/1138746" source="BUGZILLA"/>
		<reference ref_id="1176389" ref_url="https://bugzilla.suse.com/1176389" source="BUGZILLA"/>
		<reference ref_id="1177120" ref_url="https://bugzilla.suse.com/1177120" source="BUGZILLA"/>
		<reference ref_id="1182421" ref_url="https://bugzilla.suse.com/1182421" source="BUGZILLA"/>
		<reference ref_id="1182422" ref_url="https://bugzilla.suse.com/1182422" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26137" ref_url="https://www.suse.com/security/cve/CVE-2020-26137/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009334.html" source="SUSE-SU"/>
		<description>
This patch updates the Python AWS SDK stack in SLE 15:

General:

# aws-cli

- Version updated to upstream release v1.19.9
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-boto3

- Version updated to upstream release 1.17.9
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-botocore

- Version updated to upstream release 1.20.9
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-urllib3

- Version updated to upstream release 1.25.10
  For a detailed list of all changes, please refer to the changelog file of this package.

# python-service_identity

- Added this new package to resolve runtime dependencies for other packages.
  Version: 18.1.0

# python-trustme

- Added this new package to resolve runtime dependencies for other packages.
  Version: 0.6.0

Security fixes:

# python-urllib3:
  
- CVE-2020-26137: urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated
  by inserting CR and LF control characters in the first argument of putrequest() (bsc#1177120)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-23"/>
	<updated date="2021-08-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1102408">SUSE bug 1102408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138715">SUSE bug 1138715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1138746">SUSE bug 1138746</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176389">SUSE bug 1176389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177120">SUSE bug 1177120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182421">SUSE bug 1182421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182422">SUSE bug 1182422</bugzilla>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26137/">CVE-2020-26137</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626960" comment="python2-asn1crypto-0.24.0-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626964" comment="python2-pyasn1-0.4.2-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626965" comment="python2-pycparser-2.17-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626966" comment="python2-urllib3-1.25.10-9.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626945" comment="python3-asn1crypto-0.24.0-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626946" comment="python3-boto3-1.17.9-19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626947" comment="python3-botocore-1.20.9-33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626951" comment="python3-pyasn1-0.4.2-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626952" comment="python3-pycparser-2.17-3.2.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626953" comment="python3-urllib3-1.25.10-9.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140840" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189521" ref_url="https://bugzilla.suse.com/1189521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3712" ref_url="https://www.suse.com/security/cve/CVE-2021-3712/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009344.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

- CVE-2021-3712: a bug in the code for printing certificate details could lead
  to a buffer overrun that a malicious actor could exploit to crash the
  application, causing a denial-of-service attack. [bsc#1189521]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-24"/>
	<updated date="2021-08-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189521">SUSE bug 1189521</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3712/">CVE-2021-3712</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631628" comment="libopenssl-1_0_0-devel-1.0.2p-3.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631629" comment="libopenssl1_0_0-1.0.2p-3.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631630" comment="openssl-1_0_0-1.0.2p-3.40.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140841" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189521" ref_url="https://bugzilla.suse.com/1189521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3712" ref_url="https://www.suse.com/security/cve/CVE-2021-3712/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2831-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009340.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following security issue:

- CVE-2021-3712: a bug in the code for printing certificate details could
  lead to a buffer overrun that a malicious actor could exploit to crash
  the application, causing a denial-of-service attack. [bsc#1189521]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-24"/>
	<updated date="2021-08-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189521">SUSE bug 1189521</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3712/">CVE-2021-3712</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631656" comment="libopenssl-1_1-devel-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631639" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631657" comment="libopenssl1_1-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631641" comment="libopenssl1_1-32bit-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631658" comment="libopenssl1_1-hmac-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631643" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631659" comment="openssl-1_1-1.1.0i-14.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140842" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189320" ref_url="https://bugzilla.suse.com/1189320" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2372" ref_url="https://www.suse.com/security/cve/CVE-2021-2372/" source="CVE"/>
		<reference ref_id="CVE-2021-2389" ref_url="https://www.suse.com/security/cve/CVE-2021-2389/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009352.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

Update to version 10.2.40 [bsc#1189320]:

- fixes for the following security vulnerabilities: CVE-2021-2372 and CVE-2021-2389
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-25"/>
	<updated date="2021-08-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1189320">SUSE bug 1189320</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2372/">CVE-2021-2372</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-2389/">CVE-2021-2389</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631000" comment="libmysqld-devel-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631001" comment="libmysqld19-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631002" comment="mariadb-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631003" comment="mariadb-client-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009630980" comment="mariadb-errormessages-10.2.40-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631004" comment="mariadb-tools-10.2.40-3.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140843" version="1" class="patch">
	<metadata>
		<title>Security update for spectre-meltdown-checker (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189477" ref_url="https://bugzilla.suse.com/1189477" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009366.html" source="SUSE-SU"/>
		<description>
This update for spectre-meltdown-checker fixes the following issues:

spectre-meltdown-checker was updated to version 0.44 (bsc#1189477)

- feat: add support for SRBDS related vulnerabilities
- feat: add zstd kernel decompression (#370)
- enh: arm: add experimental support for binary arm images
- enh: rsb filling: no longer need the 'strings' tool to check for kernel support in live mode
- fix: fwdb: remove Intel extract tempdir on exit
- fix: has_vmm: ignore kernel threads when looking for a hypervisor (fixes #278)
- fix: fwdb: use the commit date as the intel fwdb version
- fix: fwdb: update Intel's repository URL
- fix: arm64: CVE-2017-5753: kernels 4.19+ use a different nospec macro
- fix: on CPU parse info under FreeBSD
- chore: github: add check run on pull requests
- chore: fwdb: update to v165.20201021+i20200616
		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-27"/>
	<updated date="2021-08-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1189477">SUSE bug 1189477</bugzilla>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631131" comment="spectre-meltdown-checker-0.44-3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140844" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187418" ref_url="https://bugzilla.suse.com/1187418" source="BUGZILLA"/>
		<reference ref_id="1187419" ref_url="https://bugzilla.suse.com/1187419" source="BUGZILLA"/>
		<reference ref_id="1187420" ref_url="https://bugzilla.suse.com/1187420" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28200" ref_url="https://www.suse.com/security/cve/CVE-2020-28200/" source="CVE"/>
		<reference ref_id="CVE-2021-29157" ref_url="https://www.suse.com/security/cve/CVE-2021-29157/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2891-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-August/009375.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 fixes the following issues:

Update dovecot to version 2.3.15 (jsc#SLE-19970):

Security issues fixed:

- CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
  JWT tokens. This may be used to supply attacker controlled keys to
  validate tokens, if attacker has local access. (bsc#1187418)
  Local attacker can login as any user and access their emails
- CVE-2021-33515:  On-path attacker could have injected plaintext commands
  before STARTTLS negotiation that would be executed after STARTTLS
  finished with the client. (bsc#1187419)
  Attacker can potentially steal user credentials and mails

* Disconnection log messages are now more standardized across services.
  They also always now start with 'Disconnected' prefix.
* Dovecot now depends on libsystemd for systemd integration.
* Removed support for Lua 5.2. Use version 5.1 or 5.3 instead.
* config: Some settings are now marked as 'hidden'. It's discouraged to
  change these settings. They will no longer be visible in doveconf
  output, except if they have been changed or if doveconf -s parameter
  is used. See https://doc.dovecot.org/settings/advanced/ for details.
* imap-compress: Compression level is now algorithm specific.
  See https://doc.dovecot.org/settings/plugin/compress-plugin/
* indexer-worker: Convert 'Indexed' info logs to an event named
  'indexer_worker_indexing_finished'. See
  https://doc.dovecot.org/admin_manual/list_of_events/#indexer-worker-indexing-finished
+ Add TSLv1.3 support to min_protocols.
+ Allow configuring ssl_cipher_suites. (for TLSv1.3+)
+ acl: Add acl_ignore_namespace setting which allows to entirely ignore
  ACLs for the listed namespaces.
+ imap: Support official RFC8970 preview/snippet syntax. Old methods of
  retrieving preview information via IMAP commands ('SNIPPET and PREVIEW
  with explicit algorithm selection') have been deprecated.
+ imapc: Support INDEXPVT for imapc storage to enable private
  message flags for cluster wide shared mailboxes.
+ lib-storage: Add new events: mail_opened, mail_expunge_requested,
  mail_expunged, mail_cache_lookup_finished. See
  https://doc.dovecot.org/admin_manual/list_of_events/#mail
+ zlib, imap-compression, fs-compress: Support compression levels that
  the algorithm supports. Before, we would allow hardcoded value between
  1 to 9 and would default to 6. Now we allow using per-algorithm value
  range and default to whatever default the algorithm specifies.
- *-login: Commands pipelined together with and just after the authenticate
  command cause these commands to be executed twice. This applies to all
  protocols that involve user login, which currently comprises of imap,
  pop3, submisision and managesieve.
- *-login: Processes are supposed to disconnect the oldest non-logged in
  connection when process_limit was reached. This didn't actually happen
  with the default 'high-security mode' (with service_count=1) where each
  connection is handled by a separate process.
- *-login: When login process reaches client/process limits, oldest
  client connections are disconnected. If one of these was still doing
  anvil lookup, this caused a crash. This could happen only if the login
  process limits were very low or if the server was overloaded.
- Fixed building with link time optimizations (-flto).
- auth: Userdb iteration with passwd driver does not always return all
  users with some nss drivers.
- dsync: Shared INBOX not synced when 'mail_shared_explicit_inbox' was
  disabled. If a user has a shared mailbox which is another user's INBOX,
  dsync didn't include the mailbox in syncing unless explicit naming is
  enabled with 'mail_shared_explicit_inbox' set to 'yes'.
- dsync: Shared namespaces were not synced with '-n' flag.
- dsync: Syncing shared INBOX failed if mail_attribute_dict was not set.
  If a user has a shared mailbox that is another user's INBOX, dsync
  failed to export the mailbox if mail attributes are disabled.
- fts-solr, fts-tika: Using both Solr FTS and Tika may have caused HTTP
  requests to assert-crash: Panic: file http-client-request.c: line 1232
  (http_client_request_send_more): assertion failed: (req-&gt;payload_input != NULL)
- fts-tika: 5xx errors returned by Tika server as indexing failures.
  However, Tika can return 5xx for some attachments every time.
  So the 5xx error should be retried once, but treated as success if it
  happens on the retry as well. v2.3 regression.
- fts-tika: v2.3.11 regression: Indexing messages with fts-tika may have
  resulted in Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts):
  assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
- imap: SETMETADATA could not be used to unset metadata values.
  Instead NIL was handled as a 'NIL' string. v2.3.14 regression.
- imap: IMAP BINARY FETCH crashes at least on empty base64 body:
  Panic: file index-mail-binary.c: line 358 (blocks_count_lines):
  assertion failed: (block_count == 0 || block_idx+1 == block_count)
- imap: If IMAP client using the NOTIFY command was disconnected while
  sending FETCH notifications to the client, imap could crash with
  Panic: Trying to close mailbox INBOX with open transactions.
- imap: Using IMAP COMPRESS extension can cause IMAP connection to hang
  when IMAP commands are &gt;8 kB long.
- imapc: If remote server sent BYE but didn't immediately disconnect, it
  could cause infinite busy-loop.
- lib-index: Corrupted cache record size in dovecot.index.cache file
  could have caused a crash (segfault) when accessing it.
- lib-oauth2: JWT token time validation now works correctly with
  32-bit systems.
- lib-ssl-iostream: Checking hostnames against an SSL certificate was
  case-sensitive.
- lib-storage: Corrupted mime.parts in dovecot.index.cache may have
  resulted in Panic: file imap-bodystructure.c: line 206 (part_write_body):
  assertion failed: (text == ((part-&gt;flags &amp; MESSAGE_PART_FLAG_TEXT) != 0))
- lib-storage: Index rebuilding (e.g. via doveadm force-resync) didn't
  preserve the 'hdr-pop3-uidl' header. Because of this, the next pop3
  session could have accessed all of the emails' metadata to read their
  POP3 UIDL (opening dbox files).
- listescape: When using the listescape plugin and a shared namespace
  the plugin didn't work properly anymore resulting in errors like:
  'Invalid mailbox name: Name must not have '/' character.'
- lmtp: Connection crashes if connection gets disconnected due to
  multiple bad commands and the last bad command is BDAT.
- lmtp: The Dovecot-specific LMTP parameter XRCPTFORWARD was blindly
  forwarded by LMTP proxy without checking that the backend has support.
  This caused a command parameter error from the backend if it was
  running an older Dovecot release. This could only occur in more complex
  setups where the message was proxied twice; when the proxy generated
  the XRCPTFORWARD parameter itself the problem did not occur, so this
  only happened when it was forwarded.
- lmtp: The LMTP proxy crashes with a panic when the remote server
  replies with an error while the mail is still being forwarded through
  a DATA/BDAT command.
- lmtp: Username may have been missing from lmtp log line prefixes when
  it was performing autoexpunging.
- master: Dovecot would incorrectly fail with haproxy 2.0.14 service
  checks.
- master: Systemd service: Dovecot announces readiness for accepting
  connections earlier than it should. The following environment variables
  are now imported automatically and can be omitted from
  import_environment setting: NOTIFY_SOCKET LISTEN_FDS LISTEN_PID.
- master: service { process_min_avail } was launching processes too
  slowly when master was forking a lot of processes.
- util: Make the health-check.sh example script POSIX shell compatible.
* Added new aliases for some variables. Usage of the old ones is possible,
  but discouraged. (These were partially added already to v2.3.13.)
  See https://doc.dovecot.org/configuration_manual/config_file/config_variables/
  for more information.
* Optimize imap/pop3/submission/managesieve proxies to use less CPU at
  the cost of extra memory usage.
* Remove autocreate, expire, snarf and mail-filter plugins.
* Remove cydir storage driver.
* Remove XZ/LZMA write support. Read support will be removed in future release.
* doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP
  environment variable is not set. Timestamp format is taken from
  log_timestamp setting.
* If BROKENCHAR or listescape plugin is used, the escaped folder names
  may be slightly different from before in some situations. This is
  unlikely to cause issues, although caching clients may redownload the
  folders.
* imapc: It now enables BROKENCHAR=~ by default to escape remote folder
  names if necessary. This also means that if there are any '~'
  characters in the remote folder names, they will be visible as '~7e'.
* imapc: When using local index files folder names were escaped on
  filesystem a bit differently. This affects only if there are folder
  names that actually require escaping, which isn't so common. The old
  style folders will be automatically deleted from filesystem.
* stats: Update exported metrics to be compliant with OpenMetrics standard.
+ doveadm: Add an optional '-p' parameter to metadata list command. If
  enabled, '/private', and '/shared' metadata prefixes will be prepended
  to the keys in the list output.
+ doveconf: Support environment variables in config files. See
  https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables
  for more details.
+ indexer-worker: Change indexer to disconnect from indexer-worker
  after each request. This allows service indexer-worker's service_count &amp;
  idle_kill settings to work. These can be used to restart indexer-worker
  processes once in a while to reduce their memory usage.
- auth: 'nodelay' with various authentication mechanisms such as apop
  and digest-md5 crashed AUTH process if authentication failed.
- auth: Auth lua script generating an error triggered an assertion
  failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify):
  assertion failed: (lua_gettop(script-&gt;L) == 0).
- configure: Fix libunwind detection to work on other than x86_64 systems.
- doveadm-server: Process could crash if logging was done outside command
  handling. For example http-client could have done debug logging
  afterwards, resulting in either segfault or Panic:
  file http-client.c: line 642 (http_client_context_close):
  assertion failed: (cctx-&gt;clients_list == NULL).
- dsync: Folder name escaping with BROKENCHAR didn't work completely
  correctly. This especially caused problems with dsync-migrations using
  imapc where some of the remote folder names may not have been accessible.
- dsync: doveadm sync + imapc doesn't always sync all mails when doing
  an incremental sync (-1), which could lead to mail loss when it's used
  for migration. This happens only when GUIDs aren't used (i.e.
  imapc without imapc_features=guid-forced).
- fts-tika: When tika server returns error, some mails cause Panic:
  file message-parser.c: line 802 (message_parser_deinit_from_parts):
  assertion failed: (ctx-&gt;nested_parts_count == 0 || i_stream_have_bytes_left(ctx-&gt;input))
- lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have
  resulted in crashes. This exposed that Dovecot was wrongly accepting
  atoms in 'nstring' handling. Changed the IMAP parsing to be more
  strict about this now.
- lib-index: If dovecot.index.cache has corrupted message size, fetching
  BODY/BODYSTRUCTURE may cause assert-crash:
  Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish):
  assertion failed: (mail-&gt;data.parts != NULL).
- lib-index: Minor error handling and race condition fixes related to
  rotating dovecot.index.log. These didn't usually cause problems,
  unless the log files were rotated rapidly.
- lib-lua: Lua scripts using coroutines or lua libraries using coroutines
  (e.g., cqueues) panicked.
- Message PREVIEW handled whitespace wrong so first space would get
  eaten from between words.
- FTS and message PREVIEW (snippet) parsed HTML &amp;entities case-sensitively.
- lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
  was written in a way that may have caused confusion for IMAP clients
  and also Dovecot itself when parsing it. The truncated part is now
  written out using application/octet-stream MIME type.
- lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to
  use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed:
  (meth-&gt;context_size &lt;= MAC_MAX_CONTEXT_SIZE).
- event filters: NOT keyword did not have the correct associativity.
- Ignore ECONNRESET when closing socket. This avoids logging useless
  errors on systems like FreeBSD.
- event filters: event filter syntax error may lead to Panic:
  file event-filter.c: line 137 (event_filter_parse): assertion failed:
  (state.output == NULL)
- lib: timeval_cmp_margin() was broken on 32-bit systems. This could
  potentially have caused HTTP timeouts to be handled incorrectly.
- log: instance_name wasn't used as syslog ident by the log process.
- master: After a service reached process_limit and client_limit, it
  could have taken up to 1 second to realize that more client connections
  became available. During this time client connections could have been
  unnecessarily rejected and a warning logged:
  Warning: service(...): process_limit (...) reached, client connections are being dropped
- stats: Crash would occur when generating openmetrics data for metrics
  using aggregating functions.
- stats: Event filters comparing against empty strings crash the stats
  process.
* CVE-2020-24386: Specially crafted command can cause IMAP hibernate to
  allow logged in user to access other people's emails and filesystem
  information.
* Metric filter and global event filter variable syntax changed to a
  SQL-like format. See https://doc.dovecot.org/configuration_manual/event_filter/
* auth: Added new aliases for %{variables}. Usage of the old ones is
  possible, but discouraged.
* auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth
  mechanism and related password schemes.
* auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail.
* auth: Removed postfix postmap socket
+ auth: Added new fields for auth server events. These fields are now
  also available for all auth events. See
  https://doc.dovecot.org/admin_manual/list_of_events/#authentication-server
  for details.
+ imap-hibernate: Added imap_client_hibernated, imap_client_unhibernated
  and imap_client_unhibernate_retried events. See
  https://doc.dovecot.org/admin_manual/list_of_events/ for details.
+ lib-index: Added new mail_index_recreated event. See
  https://doc.dovecot.org/admin_manual/list_of_events/#mail-index-recreated
+ lib-sql: Support TLS options for cassandra driver. This requires
  cpp-driver v2.15 (or later) to work reliably.
+ lib-storage: Missing $HasAttachment / $HasNoAttachment flags are now
  added to existing mails if mail_attachment_detection_option=add-flags
  and it can be done inexpensively.
+ login proxy: Added login_proxy_max_reconnects setting (default 3) to
  control how many reconnections are attempted.
+ login proxy: imap/pop3/submission/managesieve proxying now supports
  reconnection retrying on more than just connect() failure. Any error
  except a non-temporary authentication failure will result in reconnect
  attempts.
- auth: Lua passdb/userdb leaks stack elements per call, eventually
  causing the stack to become too deep and crashing the auth or
  auth-worker process.
- auth: SASL authentication PLAIN mechanism could be used to trigger
  read buffer overflow. However, this doesn't seem to be exploitable in
  any way.
- auth: v2.3.11 regression: GSSAPI authentication fails because dovecot
  disallows NUL bytes for it.
- dict: Process used too much CPU when iterating keys, because each key
  used a separate write() syscall.
- doveadm-server: Crash could occur if logging was done outside command
  handling. For example http-client could have done debug logging
  afterwards, resulting in either segfault or
  Panic: file http-client.c: line 642 (http_client_context_close):
  assertion failed: (cctx-&gt;clients_list == NULL).
- doveadm-server: v2.3.11 regression: Trying to connect to doveadm server
  process via starttls assert-crashed if there were no ssl=yes listeners:
  Panic: file master-service-ssl.c: line 22 (master_service_ssl_init):
  assertion failed: (service-&gt;ssl_ctx_initialized).
- fts-solr: HTTP requests may have assert-crashed:
  Panic: file http-client-request.c: line 1232 (http_client_request_send_more):
  assertion failed: (req-&gt;payload_input != NULL)
- imap: IMAP NOTIFY could crash with a segmentation fault due to a bad
  configuration that causes errors. Sending the error responses to the
  client can cause the segmentation fault. This can for example happen
  when several namespaces use the same mail storage location.
- imap: IMAP NOTIFY used on a shared namespace that doesn't actually
  exist (e.g. public namespace for a nonexistent user) can crash with a panic:
  Panic: Leaked view for index /tmp/home/asdf/mdbox/dovecot.list.index: Opened in (null):0
- imap: IMAP session can crash with QRESYNC extension if many changes
  are done before asking for expunged mails since last sync.
- imap: Process might hang indefinitely if client disconnects after
  sending some long-running commands pipelined, for example FETCH+LOGOUT.
- lib-compress: Mitigate crashes when configuring a not compiled in
  compression. Errors with compression configuration now distinguish
  between not supported and unknown.
- lib-compression: Using xz/lzma compression in v2.3.11 could have
  written truncated output in some situations. This would result in
  'Broken pipe' read errors when trying to read it back.
- lib-compression: zstd compression could have crashed in some situations:
  Panic: file ostream.c: line 287 (o_stream_sendv_int): assertion failed: (!stream-&gt;blocking)
- lib-dict: dict client could have crashed in some rare situations when
  iterating keys.
- lib-http: Fix several assert-crashes in HTTP client.
- lib-index: v2.3.11 regression: When mails were expunged at the same
  time as lots of new content was being saved to the cache (e.g. cache
  file was lost and is being re-filled) a deadlock could occur with
  dovecot.index.cache / dovecot.index.log.
- lib-index: v2.3.11 regression: dovecot.index.cache file was being
  purged (rewritten) too often when it had a field that hadn't been
  accessed for over 1 month, but less than 2 months. Every cache file
  change caused a purging in this situation.
- lib-mail: MIME parts were not returned correctly by Dovecot MIME parser.
  Regression caused by fixing CVE-2020-12100.
- lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE
  was written in a way that may have caused confusion for both IMAP
  clients and Dovecot itself when parsing it. The truncated part is now
  written out using application/octet-stream MIME type.
- lib-mail: v2.3.11 regression: Mail delivery / parsing crashed when the
  10000th MIME part was message/rfc822 (or if parent was multipart/digest):
  Panic: file message-parser.c: line 167 (message_part_append):
  assertion failed: (ctx-&gt;total_parts_count &lt;= ctx-&gt;max_total_mime_parts).
- lib-oauth2: Dovecot incorrectly required oauth2 server introspection
  reply to contain username with invalid token.
- lib-ssl-iostream, lib-dcrypt: Fix building with OpenSSL that has
  deprecated APIs disabled.
- lib-storage: When mail's size is different from the cached one (in
  dovecot.index.cache or Maildir S=size in the filename), this is
  handled by logging 'Cached message size smaller/larger than expected'
  error. However, in some situations this also ended up crashing with:
  Panic: file istream.c: line 315 (i_stream_read_memarea):
  assertion failed: (old_size &lt;= _stream-&gt;pos - _stream-&gt;skip).
- lib-storage: v2.3 regression: Copying/moving mails was taking much more
  memory than before. This was mainly visible when copying/moving
  thousands of mails in a single transaction.
- lib-storage: v2.3.11 regression: Searching messages assert-crashed
  (without FTS): Panic: file message-parser.c: line 174 (message_part_finish):
  assertion failed: (ctx-&gt;nested_parts_count &gt; 0).
- lib: Dovecot v2.3 moved signal handlers around in ioloops,
  causing more CPU usage than in v2.2.
- lib: Fixed JSON parsing: '\' escape sequence may have wrongly resulted
  in error if it happened to be at read boundary. Any NUL characters and
  '\u0000' will now result in parsing error instead of silently
  truncating the data.
- lmtp, submission: Server may hang if SSL client connection disconnects
  during the delivery. If this happened repeated, it could have ended
  up reaching process_limit and preventing any further lmtp/submission
  deliveries.
- lmtp: Proxy does not always properly log TLS connection problems as
  errors; in some cases, only a debug message is logged if enabled.
- lmtp: The LMTP service can hang when commands are pipelined. This can
  particularly occur when one command in the middle of the pipeline fails.
  One example of this occurs for proxied LMTP transactions in which the
  final DATA or BDAT command is pipelined after a failing RCPT command.
- login-proxy: The login_source_ips setting has no effect, and therefore
  the proxy source IPs are not cycled through as they should be.
- master: Process was using 100% CPU in some situations when a broken
  service was being throttled.
- pop3-login: POP3 login would fail with 'Input buffer full' if the
  initial response for SASL was too long.
- stats: Crash would occur when generating openmetrics data for metrics
  using aggregating functions.

Update pigeonhole to version 0.5.15

* CVE-2020-28200: Sieve interpreter is not protected against abusive
  scripts that claim excessive resource usage. Fixed by limiting the
  user CPU time per single script execution and cumulatively over
  several script runs within a configurable timeout period. Sufficiently
  large CPU time usage is summed in the Sieve script binary and execution
  is blocked when the sum exceeds the limit within that time. The block
  is lifted when the script is updated after the resource usage times out.
  (bsc#1187420) Attacker can DoS the mail delivery system
  (jsc#PM-2746) ECO: Dovecot 2.3.15 version upgrade
* Disconnection log messages are now more standardized across services.
  They also always now start with 'Disconnected' prefix.
* managesieve: Commands pipelined together with and just after the
  authenticate command cause these commands to be executed twice.
* duplicate: The test was handled badly in a multiscript (sieve_before,
  sieve_after) scenario in which an earlier script in the sequence with
  a duplicate test succeeded, while a later script caused a runtime
  failure. In that case, the message is recorded for duplicate tracking,
  while the message may not actually have been delivered in the end.
* editheader: Sieve interpreter entered infinite loop at startup when
  the 'editheader' configuration listed an invalid header name. This
  problem can only be triggered by the administrator.
* relational: The Sieve relational extension can cause a segfault at
  compile time. This is triggered by invalid script syntax. The segfault
  happens when this match type is the last argument of the test command.
  This situation is not possible in a valid script; positional arguments
  are normally present after that, which would prevent the segfault.
* sieve: For some Sieve commands the provided mailbox name is not
  properly checked for UTF-8 validity, which can cause assert crashes at
  runtime when an invalid mailbox name is encountered. This can be
  caused by the user by writing a bad Sieve script involving the
  affected commands ('mailboxexists', 'specialuse_exists').
  This can be triggered by the remote sender only when the user has
  written a Sieve script that passes message content to one of the
  affected commands.
* sieve: Large sequences of 8-bit octets passed to certain Sieve
  commands that create or modify message headers that allow UTF-8 text
  (vacation, notify and addheader) can cause the delivery or IMAP
  process (when IMAPSieve is used) to enter a memory-consuming
  semi-infinite loop that ends when the process exceeds its memory
  limits. Logged in users can cause these hangs only for their own
  processes.

		</description>
<advisory from="security@suse.de">
	<issued date="2021-08-31"/>
	<updated date="2021-08-31"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1187418">SUSE bug 1187418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187419">SUSE bug 1187419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187420">SUSE bug 1187420</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-28200/">CVE-2020-28200</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29157/">CVE-2021-29157</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632186" comment="dovecot23-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632187" comment="dovecot23-backend-mysql-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632188" comment="dovecot23-backend-pgsql-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632189" comment="dovecot23-backend-sqlite-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632190" comment="dovecot23-devel-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632191" comment="dovecot23-fts-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632192" comment="dovecot23-fts-lucene-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632193" comment="dovecot23-fts-solr-2.3.15-27.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632194" comment="dovecot23-fts-squat-2.3.15-27.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140845" version="1" class="patch">
	<metadata>
		<title>Security update for xerces-c (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1159552" ref_url="https://bugzilla.suse.com/1159552" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1311" ref_url="https://www.suse.com/security/cve/CVE-2018-1311/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2920-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009385.html" source="SUSE-SU"/>
		<description>
This update for xerces-c fixes the following issues:

- CVE-2018-1311: Fixed use-after-free inside XML parser during the scanning of external DTDs (bsc#1159552).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-02"/>
	<updated date="2021-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159552">SUSE bug 1159552</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1311/">CVE-2018-1311</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631970" comment="libxerces-c-3_1-3.1.4-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631971" comment="libxerces-c-devel-3.1.4-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140846" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1179148" ref_url="https://bugzilla.suse.com/1179148" source="BUGZILLA"/>
		<reference ref_id="1179246" ref_url="https://bugzilla.suse.com/1179246" source="BUGZILLA"/>
		<reference ref_id="1180491" ref_url="https://bugzilla.suse.com/1180491" source="BUGZILLA"/>
		<reference ref_id="1180846" ref_url="https://bugzilla.suse.com/1180846" source="BUGZILLA"/>
		<reference ref_id="1181989" ref_url="https://bugzilla.suse.com/1181989" source="BUGZILLA"/>
		<reference ref_id="1183243" ref_url="https://bugzilla.suse.com/1183243" source="BUGZILLA"/>
		<reference ref_id="1186428" ref_url="https://bugzilla.suse.com/1186428" source="BUGZILLA"/>
		<reference ref_id="1186429" ref_url="https://bugzilla.suse.com/1186429" source="BUGZILLA"/>
		<reference ref_id="1186433" ref_url="https://bugzilla.suse.com/1186433" source="BUGZILLA"/>
		<reference ref_id="1186434" ref_url="https://bugzilla.suse.com/1186434" source="BUGZILLA"/>
		<reference ref_id="1188050" ref_url="https://bugzilla.suse.com/1188050" source="BUGZILLA"/>
		<reference ref_id="1189373" ref_url="https://bugzilla.suse.com/1189373" source="BUGZILLA"/>
		<reference ref_id="1189376" ref_url="https://bugzilla.suse.com/1189376" source="BUGZILLA"/>
		<reference ref_id="1189378" ref_url="https://bugzilla.suse.com/1189378" source="BUGZILLA"/>
		<reference ref_id="1189380" ref_url="https://bugzilla.suse.com/1189380" source="BUGZILLA"/>
		<reference ref_id="1189381" ref_url="https://bugzilla.suse.com/1189381" source="BUGZILLA"/>
		<reference ref_id="1189882" ref_url="https://bugzilla.suse.com/1189882" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0089" ref_url="https://www.suse.com/security/cve/CVE-2021-0089/" source="CVE"/>
		<reference ref_id="CVE-2021-28690" ref_url="https://www.suse.com/security/cve/CVE-2021-28690/" source="CVE"/>
		<reference ref_id="CVE-2021-28692" ref_url="https://www.suse.com/security/cve/CVE-2021-28692/" source="CVE"/>
		<reference ref_id="CVE-2021-28693" ref_url="https://www.suse.com/security/cve/CVE-2021-28693/" source="CVE"/>
		<reference ref_id="CVE-2021-28694" ref_url="https://www.suse.com/security/cve/CVE-2021-28694/" source="CVE"/>
		<reference ref_id="CVE-2021-28695" ref_url="https://www.suse.com/security/cve/CVE-2021-28695/" source="CVE"/>
		<reference ref_id="CVE-2021-28696" ref_url="https://www.suse.com/security/cve/CVE-2021-28696/" source="CVE"/>
		<reference ref_id="CVE-2021-28697" ref_url="https://www.suse.com/security/cve/CVE-2021-28697/" source="CVE"/>
		<reference ref_id="CVE-2021-28698" ref_url="https://www.suse.com/security/cve/CVE-2021-28698/" source="CVE"/>
		<reference ref_id="CVE-2021-28699" ref_url="https://www.suse.com/security/cve/CVE-2021-28699/" source="CVE"/>
		<reference ref_id="CVE-2021-28700" ref_url="https://www.suse.com/security/cve/CVE-2021-28700/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2925-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009395.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

Security issues fixed:

- CVE-2021-28693: xen/arm: Boot modules are not scrubbed (bsc#1186428)
- CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (bsc#1186429)
- CVE-2021-0089: xen: Speculative Code Store Bypass (bsc#1186433)
- CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (bsc#1186434)

- CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)(bsc#1189373).
- CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation (XSA-379)(bsc#1189376).
- CVE-2021-28698: long running loops in grant table handling (XSA-380)(bsc#1189378).
- CVE-2021-28699: inadequate grant-v2 status frames array bounds check (XSA-382)(bsc#1189380).
- CVE-2021-28700: No memory limit for dom0less domUs (XSA-383)(bsc#1189381).

Other issues fixed:

- Fixed 'Panic on CPU 0: IO-APIC + timer doesn't work!' (bsc#1180491)
- Upstream bug fixes (bsc#1027519)
- Dom0 hangs when pinning CPUs for dom0 with HVM guest (bsc#1179246).
- Fixed Xen SLES11SP4 guest hangs on cluster (bsc#1188050).
- Fixed PVHVM SLES12 SP5 - NMI Watchdog CPU Stuck (bsc#1180846).
- Core cannot be opened when using xl dump-core of VM with PTF (bsc#1183243).
- Prevent superpage allocation in the LAPIC and ACPI_INFO range (bsc#1189882).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-02"/>
	<updated date="2021-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179148">SUSE bug 1179148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179246">SUSE bug 1179246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180491">SUSE bug 1180491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180846">SUSE bug 1180846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181989">SUSE bug 1181989</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183243">SUSE bug 1183243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186428">SUSE bug 1186428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186429">SUSE bug 1186429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186433">SUSE bug 1186433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186434">SUSE bug 1186434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188050">SUSE bug 1188050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189373">SUSE bug 1189373</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189376">SUSE bug 1189376</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189378">SUSE bug 1189378</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189380">SUSE bug 1189380</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189381">SUSE bug 1189381</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189882">SUSE bug 1189882</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0089/">CVE-2021-0089</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28690/">CVE-2021-28690</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-28692/">CVE-2021-28692</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28693/">CVE-2021-28693</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28694/">CVE-2021-28694</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28695/">CVE-2021-28695</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28696/">CVE-2021-28696</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28697/">CVE-2021-28697</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28698/">CVE-2021-28698</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28699/">CVE-2021-28699</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28700/">CVE-2021-28700</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632260" comment="xen-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632261" comment="xen-devel-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632262" comment="xen-libs-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632263" comment="xen-tools-4.12.4_12-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632264" comment="xen-tools-domU-4.12.4_12-3.52.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140847" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1129714" ref_url="https://bugzilla.suse.com/1129714" source="BUGZILLA"/>
		<reference ref_id="1172640" ref_url="https://bugzilla.suse.com/1172640" source="BUGZILLA"/>
		<reference ref_id="1186406" ref_url="https://bugzilla.suse.com/1186406" source="BUGZILLA"/>
		<reference ref_id="1186583" ref_url="https://bugzilla.suse.com/1186583" source="BUGZILLA"/>
		<reference ref_id="1186586" ref_url="https://bugzilla.suse.com/1186586" source="BUGZILLA"/>
		<reference ref_id="1186587" ref_url="https://bugzilla.suse.com/1186587" source="BUGZILLA"/>
		<reference ref_id="1186596" ref_url="https://bugzilla.suse.com/1186596" source="BUGZILLA"/>
		<reference ref_id="1186597" ref_url="https://bugzilla.suse.com/1186597" source="BUGZILLA"/>
		<reference ref_id="1186598" ref_url="https://bugzilla.suse.com/1186598" source="BUGZILLA"/>
		<reference ref_id="1186600" ref_url="https://bugzilla.suse.com/1186600" source="BUGZILLA"/>
		<reference ref_id="1186603" ref_url="https://bugzilla.suse.com/1186603" source="BUGZILLA"/>
		<reference ref_id="1186604" ref_url="https://bugzilla.suse.com/1186604" source="BUGZILLA"/>
		<reference ref_id="1186605" ref_url="https://bugzilla.suse.com/1186605" source="BUGZILLA"/>
		<reference ref_id="1186613" ref_url="https://bugzilla.suse.com/1186613" source="BUGZILLA"/>
		<reference ref_id="1186614" ref_url="https://bugzilla.suse.com/1186614" source="BUGZILLA"/>
		<reference ref_id="1186615" ref_url="https://bugzilla.suse.com/1186615" source="BUGZILLA"/>
		<reference ref_id="1186616" ref_url="https://bugzilla.suse.com/1186616" source="BUGZILLA"/>
		<reference ref_id="1186658" ref_url="https://bugzilla.suse.com/1186658" source="BUGZILLA"/>
		<reference ref_id="1186660" ref_url="https://bugzilla.suse.com/1186660" source="BUGZILLA"/>
		<reference ref_id="1186757" ref_url="https://bugzilla.suse.com/1186757" source="BUGZILLA"/>
		<reference ref_id="1186758" ref_url="https://bugzilla.suse.com/1186758" source="BUGZILLA"/>
		<reference ref_id="1186762" ref_url="https://bugzilla.suse.com/1186762" source="BUGZILLA"/>
		<reference ref_id="1186763" ref_url="https://bugzilla.suse.com/1186763" source="BUGZILLA"/>
		<reference ref_id="1186849" ref_url="https://bugzilla.suse.com/1186849" source="BUGZILLA"/>
		<reference ref_id="1186859" ref_url="https://bugzilla.suse.com/1186859" source="BUGZILLA"/>
		<reference ref_id="1186861" ref_url="https://bugzilla.suse.com/1186861" source="BUGZILLA"/>
		<reference ref_id="1186863" ref_url="https://bugzilla.suse.com/1186863" source="BUGZILLA"/>
		<reference ref_id="1189142" ref_url="https://bugzilla.suse.com/1189142" source="BUGZILLA"/>
		<reference ref_id="1189348" ref_url="https://bugzilla.suse.com/1189348" source="BUGZILLA"/>
		<reference ref_id="1189350" ref_url="https://bugzilla.suse.com/1189350" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-17539" ref_url="https://www.suse.com/security/cve/CVE-2019-17539/" source="CVE"/>
		<reference ref_id="CVE-2019-9721" ref_url="https://www.suse.com/security/cve/CVE-2019-9721/" source="CVE"/>
		<reference ref_id="CVE-2020-13904" ref_url="https://www.suse.com/security/cve/CVE-2020-13904/" source="CVE"/>
		<reference ref_id="CVE-2020-20448" ref_url="https://www.suse.com/security/cve/CVE-2020-20448/" source="CVE"/>
		<reference ref_id="CVE-2020-20451" ref_url="https://www.suse.com/security/cve/CVE-2020-20451/" source="CVE"/>
		<reference ref_id="CVE-2020-21041" ref_url="https://www.suse.com/security/cve/CVE-2020-21041/" source="CVE"/>
		<reference ref_id="CVE-2020-21688" ref_url="https://www.suse.com/security/cve/CVE-2020-21688/" source="CVE"/>
		<reference ref_id="CVE-2020-21697" ref_url="https://www.suse.com/security/cve/CVE-2020-21697/" source="CVE"/>
		<reference ref_id="CVE-2020-22015" ref_url="https://www.suse.com/security/cve/CVE-2020-22015/" source="CVE"/>
		<reference ref_id="CVE-2020-22016" ref_url="https://www.suse.com/security/cve/CVE-2020-22016/" source="CVE"/>
		<reference ref_id="CVE-2020-22017" ref_url="https://www.suse.com/security/cve/CVE-2020-22017/" source="CVE"/>
		<reference ref_id="CVE-2020-22019" ref_url="https://www.suse.com/security/cve/CVE-2020-22019/" source="CVE"/>
		<reference ref_id="CVE-2020-22020" ref_url="https://www.suse.com/security/cve/CVE-2020-22020/" source="CVE"/>
		<reference ref_id="CVE-2020-22021" ref_url="https://www.suse.com/security/cve/CVE-2020-22021/" source="CVE"/>
		<reference ref_id="CVE-2020-22022" ref_url="https://www.suse.com/security/cve/CVE-2020-22022/" source="CVE"/>
		<reference ref_id="CVE-2020-22023" ref_url="https://www.suse.com/security/cve/CVE-2020-22023/" source="CVE"/>
		<reference ref_id="CVE-2020-22025" ref_url="https://www.suse.com/security/cve/CVE-2020-22025/" source="CVE"/>
		<reference ref_id="CVE-2020-22026" ref_url="https://www.suse.com/security/cve/CVE-2020-22026/" source="CVE"/>
		<reference ref_id="CVE-2020-22031" ref_url="https://www.suse.com/security/cve/CVE-2020-22031/" source="CVE"/>
		<reference ref_id="CVE-2020-22032" ref_url="https://www.suse.com/security/cve/CVE-2020-22032/" source="CVE"/>
		<reference ref_id="CVE-2020-22033" ref_url="https://www.suse.com/security/cve/CVE-2020-22033/" source="CVE"/>
		<reference ref_id="CVE-2020-22034" ref_url="https://www.suse.com/security/cve/CVE-2020-22034/" source="CVE"/>
		<reference ref_id="CVE-2020-22038" ref_url="https://www.suse.com/security/cve/CVE-2020-22038/" source="CVE"/>
		<reference ref_id="CVE-2020-22039" ref_url="https://www.suse.com/security/cve/CVE-2020-22039/" source="CVE"/>
		<reference ref_id="CVE-2020-22043" ref_url="https://www.suse.com/security/cve/CVE-2020-22043/" source="CVE"/>
		<reference ref_id="CVE-2020-22044" ref_url="https://www.suse.com/security/cve/CVE-2020-22044/" source="CVE"/>
		<reference ref_id="CVE-2020-22046" ref_url="https://www.suse.com/security/cve/CVE-2020-22046/" source="CVE"/>
		<reference ref_id="CVE-2020-22048" ref_url="https://www.suse.com/security/cve/CVE-2020-22048/" source="CVE"/>
		<reference ref_id="CVE-2020-22049" ref_url="https://www.suse.com/security/cve/CVE-2020-22049/" source="CVE"/>
		<reference ref_id="CVE-2020-22054" ref_url="https://www.suse.com/security/cve/CVE-2020-22054/" source="CVE"/>
		<reference ref_id="CVE-2021-38114" ref_url="https://www.suse.com/security/cve/CVE-2021-38114/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

- CVE-2019-9721: Fixed a denial of service in the subtitle decoder in handle_open_brace from libavcodec/htmlsubtitles.c (bsc#1129714).
- CVE-2020-22046: Fixed a denial of service vulnerability due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c (bsc#1186849).
- CVE-2020-22048: Fixed a denial of service vulnerability due to a memory leak in the ff_frame_pool_get function in framepool.c (bsc#1186859).
- CVE-2020-22049: Fixed a denial of service vulnerability caused by a memory leak in the wtvfile_open_sector function in wtvdec.c (bsc#1186861).
- CVE-2020-22054: Fixed a denial of service vulnerability due to a memory leak in the av_dict_set function in dict.c (bsc#1186863).
- CVE-2020-13904: Fixed use-after-free via a crafted EXTINF duration in an m3u8 file (bsc#1172640).
- CVE-2020-21041: Fixed buffer overflow vulnerability via apng_do_inverse_blend in libavcodec/pngenc.c  (bsc#1186406).
- CVE-2019-17539: Fixed NULL pointer dereference in avcodec_open2 in libavcodec/utils.c (bsc# 1154065).
- CVE-2020-22026: Fixed buffer overflow vulnerability in config_input() at libavfilter/af_tremolo.c (bsc#1186583).
- CVE-2020-22021: Fixed buffer overflow vulnerability in filter_edges function in libavfilter/vf_yadif.c (bsc#1186586).
- CVE-2020-22020: Fixed buffer overflow vulnerability in build_diff_map() in libavfilter/vf_fieldmatch.c (bsc#1186587).
- CVE-2020-22015: Fixed buffer overflow vulnerability in mov_write_video_tag() due to the out of bounds in libavformat/movenc.c (bsc#1186596).
- CVE-2020-22016: Fixed a heap-based Buffer Overflow vulnerability at libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- CVE-2020-22017: Fixed a heap-based Buffer Overflow vulnerability in ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- CVE-2020-22022: Fixed a heap-based Buffer Overflow vulnerability in filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- CVE-2020-22023: Fixed a heap-based Buffer Overflow vulnerability in filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- CVE-2020-22025: Fixed a heap-based Buffer Overflow vulnerability in gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- CVE-2020-22031: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_w3fdif.c in filter16_complex_low() (bsc#1186613).
- CVE-2020-22032: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- CVE-2020-22034: Fixed a heap-based Buffer Overflow vulnerability at libavfilter/vf_floodfill.c (bsc#1186616).
- CVE-2020-20451: Fixed denial of service issue due to resource management errors via fftools/cmdutils.c (bsc#1186658).
- CVE-2020-20448: Fixed divide by zero issue via libavcodec/ratecontrol.c (bsc#1186660).
- CVE-2020-22038: Fixed denial of service vulnerability due to a memory leak in the ff_v4l2_m2m_create_context function in v4l2_m2m.c (bsc#1186757).
- CVE-2020-22039: Fixed denial of service vulnerability due to a memory leak in the inavi_add_ientry function (bsc#1186758).
- CVE-2020-22043: Fixed denial of service vulnerability due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c (bsc#1186762).
- CVE-2020-22044: Fixed denial of service vulnerability due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c (bsc#1186763).
- CVE-2020-22033,CVE-2020-22019: Fixed a heap-based Buffer Overflow Vulnerability at libavfilter/vf_vmafmotion.c in convolution_y_8bit() and in convolution_y_10bit() in libavfilter/vf_vmafmotion.c (bsc#1186615, bsc#1186597).
- CVE-2020-21688: Fixed a heap-use-after-free in the av_freep function in libavutil/mem.c (bsc#1189348).
- CVE-2020-21697: Fixed a heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c (bsc#1189350).
- CVE-2021-38114: Fixed a not checked return value of the init_vlc function (bsc#1189142).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-02"/>
	<updated date="2021-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1129714">SUSE bug 1129714</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172640">SUSE bug 1172640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186406">SUSE bug 1186406</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186583">SUSE bug 1186583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186586">SUSE bug 1186586</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186587">SUSE bug 1186587</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186596">SUSE bug 1186596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186597">SUSE bug 1186597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186598">SUSE bug 1186598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186600">SUSE bug 1186600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186603">SUSE bug 1186603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186604">SUSE bug 1186604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186605">SUSE bug 1186605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186613">SUSE bug 1186613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186614">SUSE bug 1186614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186615">SUSE bug 1186615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186616">SUSE bug 1186616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186658">SUSE bug 1186658</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186660">SUSE bug 1186660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186757">SUSE bug 1186757</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186758">SUSE bug 1186758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186762">SUSE bug 1186762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186763">SUSE bug 1186763</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186849">SUSE bug 1186849</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186859">SUSE bug 1186859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186861">SUSE bug 1186861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186863">SUSE bug 1186863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189142">SUSE bug 1189142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189348">SUSE bug 1189348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189350">SUSE bug 1189350</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17539/">CVE-2019-17539</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9721/">CVE-2019-9721</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13904/">CVE-2020-13904</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20448/">CVE-2020-20448</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-20451/">CVE-2020-20451</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-21041/">CVE-2020-21041</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-21688/">CVE-2020-21688</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-21697/">CVE-2020-21697</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22015/">CVE-2020-22015</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-22016/">CVE-2020-22016</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22017/">CVE-2020-22017</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22019/">CVE-2020-22019</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22020/">CVE-2020-22020</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22021/">CVE-2020-22021</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22022/">CVE-2020-22022</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22023/">CVE-2020-22023</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22025/">CVE-2020-22025</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22026/">CVE-2020-22026</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22031/">CVE-2020-22031</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22032/">CVE-2020-22032</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22033/">CVE-2020-22033</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22034/">CVE-2020-22034</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22038/">CVE-2020-22038</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22039/">CVE-2020-22039</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22043/">CVE-2020-22043</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22044/">CVE-2020-22044</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22046/">CVE-2020-22046</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22048/">CVE-2020-22048</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22049/">CVE-2020-22049</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-22054/">CVE-2020-22054</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-38114/">CVE-2021-38114</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009631186" comment="libavcodec-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631187" comment="libavcodec57-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631161" comment="libavcodec57-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631188" comment="libavdevice-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631189" comment="libavdevice57-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631164" comment="libavdevice57-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631190" comment="libavfilter-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631191" comment="libavfilter6-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631167" comment="libavfilter6-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631192" comment="libavformat-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631193" comment="libavformat57-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631170" comment="libavformat57-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631194" comment="libavresample-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631195" comment="libavresample3-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631173" comment="libavresample3-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631196" comment="libavutil-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631197" comment="libavutil55-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631176" comment="libavutil55-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631198" comment="libpostproc-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631199" comment="libpostproc54-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631179" comment="libpostproc54-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631200" comment="libswresample-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631201" comment="libswresample2-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631182" comment="libswresample2-32bit-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631202" comment="libswscale-devel-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631203" comment="libswscale4-3.4.2-4.34.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009631185" comment="libswscale4-32bit-3.4.2-4.34.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140848" version="1" class="patch">
	<metadata>
		<title>Security update for libesmtp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1160462" ref_url="https://bugzilla.suse.com/1160462" source="BUGZILLA"/>
		<reference ref_id="1189097" ref_url="https://bugzilla.suse.com/1189097" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19977" ref_url="https://www.suse.com/security/cve/CVE-2019-19977/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2937-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009397.html" source="SUSE-SU"/>
		<description>
This update for libesmtp fixes the following issues:

- CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c (bsc#1160462).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-03"/>
	<updated date="2021-09-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160462">SUSE bug 1160462</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189097">SUSE bug 1189097</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-19977/">CVE-2019-19977</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009629426" comment="libesmtp-1.0.6-150.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009629427" comment="libesmtp-devel-1.0.6-150.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140849" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185476" ref_url="https://bugzilla.suse.com/1185476" source="BUGZILLA"/>
		<reference ref_id="1188564" ref_url="https://bugzilla.suse.com/1188564" source="BUGZILLA"/>
		<reference ref_id="1188565" ref_url="https://bugzilla.suse.com/1188565" source="BUGZILLA"/>
		<reference ref_id="1188566" ref_url="https://bugzilla.suse.com/1188566" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2341" ref_url="https://www.suse.com/security/cve/CVE-2021-2341/" source="CVE"/>
		<reference ref_id="CVE-2021-2369" ref_url="https://www.suse.com/security/cve/CVE-2021-2369/" source="CVE"/>
		<reference ref_id="CVE-2021-2388" ref_url="https://www.suse.com/security/cve/CVE-2021-2388/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2952-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009404.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to jdk-11.0.12+7
- CVE-2021-2369: Fixed JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565)
- CVE-2021-2388: Fixed a flaw inside the Hotspot component performed range check elimination. (bsc#1188566)
- CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-03"/>
	<updated date="2021-09-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185476">SUSE bug 1185476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188564">SUSE bug 1188564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188565">SUSE bug 1188565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188566">SUSE bug 1188566</bugzilla>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-2341/">CVE-2021-2341</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-2369/">CVE-2021-2369</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-2388/">CVE-2021-2388</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009626380" comment="java-11-openjdk-11.0.12.0-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626381" comment="java-11-openjdk-demo-11.0.12.0-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626382" comment="java-11-openjdk-devel-11.0.12.0-3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009626383" comment="java-11-openjdk-headless-11.0.12.0-3.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140850" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Low)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189521" ref_url="https://bugzilla.suse.com/1189521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3712" ref_url="https://www.suse.com/security/cve/CVE-2021-3712/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2968-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009417.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. 
  Read buffer overruns processing ASN.1 strings (bsc#1189521).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-07"/>
	<updated date="2021-09-07"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1189521">SUSE bug 1189521</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3712/">CVE-2021-3712</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632572" comment="libopenssl-1_1-devel-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632355" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632573" comment="libopenssl1_1-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632357" comment="libopenssl1_1-32bit-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632574" comment="libopenssl1_1-hmac-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632359" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632575" comment="openssl-1_1-1.1.0i-14.21.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140851" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Low)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189521" ref_url="https://bugzilla.suse.com/1189521" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3712" ref_url="https://www.suse.com/security/cve/CVE-2021-3712/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:2994-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009429.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

- CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. 
  Read buffer overruns processing ASN.1 strings (bsc#1189521).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-09"/>
	<updated date="2021-09-09"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1189521">SUSE bug 1189521</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3712/">CVE-2021-3712</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632344" comment="libopenssl-1_0_0-devel-1.0.2p-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632345" comment="libopenssl1_0_0-1.0.2p-3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632346" comment="openssl-1_0_0-1.0.2p-3.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140852" version="1" class="patch">
	<metadata>
		<title>Security update for openvswitch (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1117483" ref_url="https://bugzilla.suse.com/1117483" source="BUGZILLA"/>
		<reference ref_id="1181345" ref_url="https://bugzilla.suse.com/1181345" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27827" ref_url="https://www.suse.com/security/cve/CVE-2020-27827/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0300-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008270.html" source="SUSE-SU"/>
		<description>
This update for openvswitch fixes the following issues:
	  
- openvswitch was updated to 2.11.5 
- CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345)	  
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-03"/>
	<updated date="2021-02-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1117483">SUSE bug 1117483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181345">SUSE bug 1181345</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27827/">CVE-2020-27827</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505886" comment="libopenvswitch-2_11-0-2.11.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505887" comment="openvswitch-2.11.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505888" comment="openvswitch-devel-2.11.5-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140853" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184123" ref_url="https://bugzilla.suse.com/1184123" source="BUGZILLA"/>
		<reference ref_id="1190381" ref_url="https://bugzilla.suse.com/1190381" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3781" ref_url="https://www.suse.com/security/cve/CVE-2021-3781/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3044-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009444.html" source="SUSE-SU"/>
		<description>
This update for ghostscript fixes the following issues:

Security issue fixed:

- CVE-2021-3781: Fixed a trivial -dSAFER bypass command injection (bsc#1190381)

Also a hardening fix was added:

- Link as position independent executable (bsc#1184123)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-15"/>
	<updated date="2021-09-15"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1184123">SUSE bug 1184123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190381">SUSE bug 1190381</bugzilla>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3781/">CVE-2021-3781</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009632741" comment="ghostscript-9.52-155.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632742" comment="ghostscript-devel-9.52-155.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632743" comment="ghostscript-x11-9.52-155.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632744" comment="libspectre-devel-0.2.8-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009632745" comment="libspectre1-0.2.8-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140854" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189724" ref_url="https://bugzilla.suse.com/1189724" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-38171" ref_url="https://www.suse.com/security/cve/CVE-2021-38171/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3212-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-September/009506.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

- CVE-2021-38171: Fixed adts_decode_extradata in libavformat/adtsenc.c to check the init_get_bits return value (bsc#1189724).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-09-23"/>
	<updated date="2021-09-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189724">SUSE bug 1189724</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38171/">CVE-2021-38171</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009633506" comment="libavcodec-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633507" comment="libavcodec57-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633481" comment="libavcodec57-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633508" comment="libavdevice-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633509" comment="libavdevice57-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633484" comment="libavdevice57-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633510" comment="libavfilter-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633511" comment="libavfilter6-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633487" comment="libavfilter6-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633512" comment="libavformat-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633513" comment="libavformat57-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633490" comment="libavformat57-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633514" comment="libavresample-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633515" comment="libavresample3-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633493" comment="libavresample3-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633516" comment="libavutil-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633517" comment="libavutil55-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633496" comment="libavutil55-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633518" comment="libpostproc-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633519" comment="libpostproc54-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633499" comment="libpostproc54-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633520" comment="libswresample-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633521" comment="libswresample2-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633502" comment="libswresample2-32bit-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633522" comment="libswscale-devel-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633523" comment="libswscale4-3.4.2-4.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633505" comment="libswscale4-32bit-3.4.2-4.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140855" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188697" ref_url="https://bugzilla.suse.com/1188697" source="BUGZILLA"/>
		<reference ref_id="1190701" ref_url="https://bugzilla.suse.com/1190701" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21806" ref_url="https://www.suse.com/security/cve/CVE-2021-21806/" source="CVE"/>
		<reference ref_id="CVE-2021-30858" ref_url="https://www.suse.com/security/cve/CVE-2021-30858/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009531.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.32.4
- CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve arbitrary code execution. (bsc#1190701)
- CVE-2021-21806: Fixed an exploitable use-after-free vulnerability via specially crafted HTML web page. (bsc#1188697)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-04"/>
	<updated date="2021-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188697">SUSE bug 1188697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190701">SUSE bug 1190701</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21806/">CVE-2021-21806</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30858/">CVE-2021-30858</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009634195" comment="libjavascriptcoregtk-4_0-18-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634196" comment="libwebkit2gtk-4_0-37-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634111" comment="libwebkit2gtk3-lang-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634197" comment="typelib-1_0-JavaScriptCore-4_0-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634198" comment="typelib-1_0-WebKit2-4_0-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634199" comment="typelib-1_0-WebKit2WebExtension-4_0-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634200" comment="webkit2gtk-4_0-injected-bundles-2.32.4-3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634201" comment="webkit2gtk3-devel-2.32.4-3.82.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140856" version="1" class="patch">
	<metadata>
		<title>Security update for grilo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189839" ref_url="https://bugzilla.suse.com/1189839" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-39365" ref_url="https://www.suse.com/security/cve/CVE-2021-39365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3295-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009536.html" source="SUSE-SU"/>
		<description>
This update for grilo fixes the following issues:

- CVE-2021-39365: Fixed missing TLS certificate verification (bsc#1189839).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-06"/>
	<updated date="2021-10-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189839">SUSE bug 1189839</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39365/">CVE-2021-39365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009634448" comment="grilo-devel-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634449" comment="libgrilo-0_3-0-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634450" comment="libgrlnet-0_3-0-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634451" comment="libgrlpls-0_3-0-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634452" comment="typelib-1_0-Grl-0_3-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634453" comment="typelib-1_0-GrlNet-0_3-0.3.4-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634454" comment="typelib-1_0-GrlPls-0_3-0.3.4-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140857" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1190373" ref_url="https://bugzilla.suse.com/1190373" source="BUGZILLA"/>
		<reference ref_id="1190374" ref_url="https://bugzilla.suse.com/1190374" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22946" ref_url="https://www.suse.com/security/cve/CVE-2021-22946/" source="CVE"/>
		<reference ref_id="CVE-2021-22947" ref_url="https://www.suse.com/security/cve/CVE-2021-22947/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3297-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009542.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2021-22947: Fixed STARTTLS protocol injection via MITM (bsc#1190374).
- CVE-2021-22946: Fixed protocol downgrade required TLS bypassed (bsc#1190373).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-06"/>
	<updated date="2021-10-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1190373">SUSE bug 1190373</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190374">SUSE bug 1190374</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-22946/">CVE-2021-22946</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22947/">CVE-2021-22947</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009633992" comment="curl-7.60.0-25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633993" comment="libcurl-devel-7.60.0-25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633994" comment="libcurl4-7.60.0-25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633986" comment="libcurl4-32bit-7.60.0-25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140858" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188891" ref_url="https://bugzilla.suse.com/1188891" source="BUGZILLA"/>
		<reference ref_id="1189547" ref_url="https://bugzilla.suse.com/1189547" source="BUGZILLA"/>
		<reference ref_id="1190269" ref_url="https://bugzilla.suse.com/1190269" source="BUGZILLA"/>
		<reference ref_id="1190274" ref_url="https://bugzilla.suse.com/1190274" source="BUGZILLA"/>
		<reference ref_id="1190710" ref_url="https://bugzilla.suse.com/1190710" source="BUGZILLA"/>
		<reference ref_id="1191332" ref_url="https://bugzilla.suse.com/1191332" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29980" ref_url="https://www.suse.com/security/cve/CVE-2021-29980/" source="CVE"/>
		<reference ref_id="CVE-2021-29981" ref_url="https://www.suse.com/security/cve/CVE-2021-29981/" source="CVE"/>
		<reference ref_id="CVE-2021-29982" ref_url="https://www.suse.com/security/cve/CVE-2021-29982/" source="CVE"/>
		<reference ref_id="CVE-2021-29983" ref_url="https://www.suse.com/security/cve/CVE-2021-29983/" source="CVE"/>
		<reference ref_id="CVE-2021-29984" ref_url="https://www.suse.com/security/cve/CVE-2021-29984/" source="CVE"/>
		<reference ref_id="CVE-2021-29985" ref_url="https://www.suse.com/security/cve/CVE-2021-29985/" source="CVE"/>
		<reference ref_id="CVE-2021-29986" ref_url="https://www.suse.com/security/cve/CVE-2021-29986/" source="CVE"/>
		<reference ref_id="CVE-2021-29987" ref_url="https://www.suse.com/security/cve/CVE-2021-29987/" source="CVE"/>
		<reference ref_id="CVE-2021-29988" ref_url="https://www.suse.com/security/cve/CVE-2021-29988/" source="CVE"/>
		<reference ref_id="CVE-2021-29989" ref_url="https://www.suse.com/security/cve/CVE-2021-29989/" source="CVE"/>
		<reference ref_id="CVE-2021-29990" ref_url="https://www.suse.com/security/cve/CVE-2021-29990/" source="CVE"/>
		<reference ref_id="CVE-2021-29991" ref_url="https://www.suse.com/security/cve/CVE-2021-29991/" source="CVE"/>
		<reference ref_id="CVE-2021-32810" ref_url="https://www.suse.com/security/cve/CVE-2021-32810/" source="CVE"/>
		<reference ref_id="CVE-2021-38492" ref_url="https://www.suse.com/security/cve/CVE-2021-38492/" source="CVE"/>
		<reference ref_id="CVE-2021-38495" ref_url="https://www.suse.com/security/cve/CVE-2021-38495/" source="CVE"/>
		<reference ref_id="CVE-2021-38496" ref_url="https://www.suse.com/security/cve/CVE-2021-38496/" source="CVE"/>
		<reference ref_id="CVE-2021-38497" ref_url="https://www.suse.com/security/cve/CVE-2021-38497/" source="CVE"/>
		<reference ref_id="CVE-2021-38498" ref_url="https://www.suse.com/security/cve/CVE-2021-38498/" source="CVE"/>
		<reference ref_id="CVE-2021-38500" ref_url="https://www.suse.com/security/cve/CVE-2021-38500/" source="CVE"/>
		<reference ref_id="CVE-2021-38501" ref_url="https://www.suse.com/security/cve/CVE-2021-38501/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009561.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

This update contains the Firefox Extended Support Release 91.2.0 ESR.

Firefox Extended Support Release 91.2.0 ESR

* Fixed: Various stability, functionality, and security fixes
 MFSA 2021-45 (bsc#1191332)
* CVE-2021-38496: Use-after-free in MessageTask
* CVE-2021-38497: Validation message could have been overlaid on another origin
* CVE-2021-38498: Use-after-free of nsLanguageAtomService object
* CVE-2021-32810: Data race in crossbeam-deque

  https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
   
* CVE-2021-38500 (bmo#1725854, bmo#1728321)
  Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
  and Firefox ESR 91.2
* CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
  Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2

- Fixed crash in FIPS mode (bsc#1190710)

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-40 (bsc#1190269, bsc#1190274):

* CVE-2021-38492: Navigating to `mk:` URL scheme could load Internet Explorer
* CVE-2021-38495: Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1

Firefox Extended Support Release 91.0.1 ESR

* Fixed: Fixed an issue causing buttons on the tab bar to be
  resized when loading certain websites (bug 1704404)
* Fixed: Fixed an issue which caused tabs from private windows
  to be visible in non-private windows when viewing switch-to-
  tab results in the address bar panel (bug 1720369)
* Fixed: Various stability fixes
* Fixed: Security fix MFSA 2021-37 (bsc#1189547)
* CVE-2021-29991 (bmo#1724896)
  Header Splitting possible with HTTP/3 Responses

Firefox Extended Support Release 91.0 ESR

* New: Some of the highlights of the new Extended Support Release are:

  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded 'just in time' if you decide to 'Log in with Facebook'
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We’ve improved functionality and design for a number of
    Firefox search features:
    * Selecting a search engine at the bottom of the search
      panel now enters search mode for that engine, allowing you to
      see suggestions (if available) for your search terms. The old
      behavior (immediately performing a search) is available with
      a shift-click.
    * When Firefox autocompletes the URL of one of your search
      engines, you can now search with that engine directly in the
      address bar by selecting the shortcut in the address bar
      results.
    * We’ve added buttons at the bottom of the search panel to
      allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
* Changed: Firefox no longer supports Adobe Flash. There is no
  setting available to re-enable Flash support.
* Enterprise: Various bug fixes and new policies have been
  implemented in the latest version of Firefox. See more
  details in the Firefox for Enterprise 91 Release Notes.

  MFSA 2021-33 (bsc#1188891):

* CVE-2021-29986: Race condition when resolving DNS names could have led to
  memory corruption
* CVE-2021-29981: Live range splitting could have led to conflicting
  assignments in the JIT
* CVE-2021-29988: Memory corruption as a result of incorrect style treatment
* CVE-2021-29983: Firefox for Android could get stuck in fullscreen mode
* CVE-2021-29984: Incorrect instruction reordering during JIT optimization
* CVE-2021-29980: Uninitialized memory in a canvas object could have led to
  memory corruption
* CVE-2021-29987: Users could have been tricked into accepting unwanted
  permissions on Linux
* CVE-2021-29985: Use-after-free media channels
* CVE-2021-29982: Single bit data leak due to incorrect JIT optimization and
  type confusion
* CVE-2021-29989: Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
* CVE-2021-29990: Memory safety bugs fixed in Firefox 91
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-11"/>
	<updated date="2021-10-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188891">SUSE bug 1188891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189547">SUSE bug 1189547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190269">SUSE bug 1190269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190274">SUSE bug 1190274</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190710">SUSE bug 1190710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191332">SUSE bug 1191332</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29980/">CVE-2021-29980</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29981/">CVE-2021-29981</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29982/">CVE-2021-29982</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29983/">CVE-2021-29983</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29984/">CVE-2021-29984</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29985/">CVE-2021-29985</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29986/">CVE-2021-29986</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29987/">CVE-2021-29987</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29988/">CVE-2021-29988</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29989/">CVE-2021-29989</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29990/">CVE-2021-29990</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29991/">CVE-2021-29991</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32810/">CVE-2021-32810</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38492/">CVE-2021-38492</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38495/">CVE-2021-38495</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38496/">CVE-2021-38496</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38497/">CVE-2021-38497</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38498/">CVE-2021-38498</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38500/">CVE-2021-38500</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38501/">CVE-2021-38501</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009651319" comment="MozillaFirefox-91.2.0-3.155.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633342" comment="MozillaFirefox-branding-SLE-91-4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651320" comment="MozillaFirefox-devel-91.2.0-3.155.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651321" comment="MozillaFirefox-translations-common-91.2.0-3.155.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651322" comment="MozillaFirefox-translations-other-91.2.0-3.155.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140859" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189387" ref_url="https://bugzilla.suse.com/1189387" source="BUGZILLA"/>
		<reference ref_id="1190666" ref_url="https://bugzilla.suse.com/1190666" source="BUGZILLA"/>
		<reference ref_id="1190669" ref_url="https://bugzilla.suse.com/1190669" source="BUGZILLA"/>
		<reference ref_id="1190702" ref_url="https://bugzilla.suse.com/1190702" source="BUGZILLA"/>
		<reference ref_id="1190703" ref_url="https://bugzilla.suse.com/1190703" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33193" ref_url="https://www.suse.com/security/cve/CVE-2021-33193/" source="CVE"/>
		<reference ref_id="CVE-2021-34798" ref_url="https://www.suse.com/security/cve/CVE-2021-34798/" source="CVE"/>
		<reference ref_id="CVE-2021-36160" ref_url="https://www.suse.com/security/cve/CVE-2021-36160/" source="CVE"/>
		<reference ref_id="CVE-2021-39275" ref_url="https://www.suse.com/security/cve/CVE-2021-39275/" source="CVE"/>
		<reference ref_id="CVE-2021-40438" ref_url="https://www.suse.com/security/cve/CVE-2021-40438/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3335-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009564.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703)
- CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702)
- CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)
- CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)
- CVE-2021-33193: Fixed request splitting via HTTP/2 method injection and mod_proxy. (bsc#1189387)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-12"/>
	<updated date="2021-10-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189387">SUSE bug 1189387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190666">SUSE bug 1190666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190669">SUSE bug 1190669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190702">SUSE bug 1190702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190703">SUSE bug 1190703</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-33193/">CVE-2021-33193</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-34798/">CVE-2021-34798</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36160/">CVE-2021-36160</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-39275/">CVE-2021-39275</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-40438/">CVE-2021-40438</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009633987" comment="apache2-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633988" comment="apache2-devel-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633979" comment="apache2-doc-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633989" comment="apache2-prefork-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633990" comment="apache2-utils-2.4.33-3.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009633991" comment="apache2-worker-2.4.33-3.55.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140860" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186489" ref_url="https://bugzilla.suse.com/1186489" source="BUGZILLA"/>
		<reference ref_id="1187911" ref_url="https://bugzilla.suse.com/1187911" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33574" ref_url="https://www.suse.com/security/cve/CVE-2021-33574/" source="CVE"/>
		<reference ref_id="CVE-2021-35942" ref_url="https://www.suse.com/security/cve/CVE-2021-35942/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3385-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009579.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

- CVE-2021-35942: wordexp: handle overflow in positional parameter number (bsc#1187911)
- CVE-2021-33574: Use __pthread_attr_copy in mq_notify (bsc#1186489)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-12"/>
	<updated date="2021-10-12"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1186489">SUSE bug 1186489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187911">SUSE bug 1187911</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33574/">CVE-2021-33574</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35942/">CVE-2021-35942</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009634543" comment="glibc-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634544" comment="glibc-32bit-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634545" comment="glibc-devel-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634569" comment="glibc-devel-32bit-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634570" comment="glibc-devel-static-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634546" comment="glibc-extra-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634547" comment="glibc-i18ndata-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634548" comment="glibc-info-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634549" comment="glibc-locale-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634550" comment="glibc-locale-base-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634551" comment="glibc-locale-base-32bit-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634552" comment="glibc-profile-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634571" comment="glibc-utils-2.26-13.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009634553" comment="nscd-2.26-13.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140861" version="1" class="patch">
	<metadata>
		<title>Security update for strongswan (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1167880" ref_url="https://bugzilla.suse.com/1167880" source="BUGZILLA"/>
		<reference ref_id="1191367" ref_url="https://bugzilla.suse.com/1191367" source="BUGZILLA"/>
		<reference ref_id="1191435" ref_url="https://bugzilla.suse.com/1191435" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-41990" ref_url="https://www.suse.com/security/cve/CVE-2021-41990/" source="CVE"/>
		<reference ref_id="CVE-2021-41991" ref_url="https://www.suse.com/security/cve/CVE-2021-41991/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3469-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009614.html" source="SUSE-SU"/>
		<description>
This update for strongswan fixes the following issues:

- Fix trailing quotation mark missing from example in README. (bsc#1167880)
- CVE-2021-41991: Fixed an integer overflow when replacing certificates in cache. (bsc#1191435)
- CVE-2021-41990: Fixed an integer Overflow in the gmp Plugin. (bsc#1191367)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-19"/>
	<updated date="2021-10-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1167880">SUSE bug 1167880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191367">SUSE bug 1191367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191435">SUSE bug 1191435</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41990/">CVE-2021-41990</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41991/">CVE-2021-41991</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009652775" comment="strongswan-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652770" comment="strongswan-doc-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652776" comment="strongswan-hmac-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652777" comment="strongswan-ipsec-5.8.2-4.14.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652778" comment="strongswan-libs0-5.8.2-4.14.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140862" version="1" class="patch">
	<metadata>
		<title>Security update for python-Pygments (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183169" ref_url="https://bugzilla.suse.com/1183169" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20270" ref_url="https://www.suse.com/security/cve/CVE-2021-20270/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3473-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009616.html" source="SUSE-SU"/>
		<description>
This update for python-Pygments fixes the following issues:

- CVE-2021-20270: Fixed an infinite loop in the SML lexer (bsc#1183169).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-20"/>
	<updated date="2021-10-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183169">SUSE bug 1183169</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20270/">CVE-2021-20270</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652625" comment="python3-Pygments-2.6.1-7.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140863" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1102408" ref_url="https://bugzilla.suse.com/1102408" source="BUGZILLA"/>
		<reference ref_id="1185405" ref_url="https://bugzilla.suse.com/1185405" source="BUGZILLA"/>
		<reference ref_id="1187704" ref_url="https://bugzilla.suse.com/1187704" source="BUGZILLA"/>
		<reference ref_id="1188282" ref_url="https://bugzilla.suse.com/1188282" source="BUGZILLA"/>
		<reference ref_id="1190826" ref_url="https://bugzilla.suse.com/1190826" source="BUGZILLA"/>
		<reference ref_id="1191015" ref_url="https://bugzilla.suse.com/1191015" source="BUGZILLA"/>
		<reference ref_id="1191121" ref_url="https://bugzilla.suse.com/1191121" source="BUGZILLA"/>
		<reference ref_id="1191334" ref_url="https://bugzilla.suse.com/1191334" source="BUGZILLA"/>
		<reference ref_id="1191355" ref_url="https://bugzilla.suse.com/1191355" source="BUGZILLA"/>
		<reference ref_id="1191434" ref_url="https://bugzilla.suse.com/1191434" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30465" ref_url="https://www.suse.com/security/cve/CVE-2021-30465/" source="CVE"/>
		<reference ref_id="CVE-2021-32760" ref_url="https://www.suse.com/security/cve/CVE-2021-32760/" source="CVE"/>
		<reference ref_id="CVE-2021-41089" ref_url="https://www.suse.com/security/cve/CVE-2021-41089/" source="CVE"/>
		<reference ref_id="CVE-2021-41091" ref_url="https://www.suse.com/security/cve/CVE-2021-41091/" source="CVE"/>
		<reference ref_id="CVE-2021-41092" ref_url="https://www.suse.com/security/cve/CVE-2021-41092/" source="CVE"/>
		<reference ref_id="CVE-2021-41103" ref_url="https://www.suse.com/security/cve/CVE-2021-41103/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3506-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009645.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, runc fixes the following issues:

Docker was updated to 20.10.9-ce. (bsc#1191355)

See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. 

  CVE-2021-41092 CVE-2021-41089 CVE-2021-41091 CVE-2021-41103

container was updated to v1.4.11, to fix CVE-2021-41103. bsc#1191355

- CVE-2021-32760: Fixed that a archive package allows chmod of file outside of unpack target directory (bsc#1188282)

- Install systemd service file as well (bsc#1190826)

Update to runc v1.0.2. Upstream changelog is available from

  https://github.com/opencontainers/runc/releases/tag/v1.0.2

* Fixed a failure to set CPU quota period in some cases on cgroup v1.
* Fixed the inability to start a container with the 'adding seccomp filter
  rule for syscall ...' error, caused by redundant seccomp rules (i.e. those
  that has action equal to the default one). Such redundant rules are now
  skipped.
* Made release builds reproducible from now on.
* Fixed a rare debug log race in runc init, which can result in occasional
  harmful 'failed to decode ...' errors from runc run or exec.
* Fixed the check in cgroup v1 systemd manager if a container needs to be
  frozen before Set, and add a setting to skip such freeze unconditionally.
  The previous fix for that issue, done in runc 1.0.1, was not working.

Update to runc v1.0.1. Upstream changelog is available from

https://github.com/opencontainers/runc/releases/tag/v1.0.1

* Fixed occasional runc exec/run failure ('interrupted system call') on an
  Azure volume.
* Fixed 'unable to find groups ... token too long' error with /etc/group
  containing lines longer than 64K characters.
* cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
  frozen. This is a regression in 1.0.0, not affecting runc itself but some
  of libcontainer users (e.g Kubernetes).
* cgroupv2: bpf: Ignore inaccessible existing programs in case of
  permission error when handling replacement of existing bpf cgroup
  programs. This fixes a regression in 1.0.0, where some SELinux
  policies would block runc from being able to run entirely.
* cgroup/systemd/v2: don't freeze cgroup on Set.
* cgroup/systemd/v1: avoid unnecessary freeze on Set.
- fix issues with runc under openSUSE MicroOS's SELinux policy. bsc#1187704

Update to runc v1.0.0. Upstream changelog is available from

https://github.com/opencontainers/runc/releases/tag/v1.0.0

! The usage of relative paths for mountpoints will now produce a warning
  (such configurations are outside of the spec, and in future runc will
  produce an error when given such configurations).
* cgroupv2: devices: rework the filter generation to produce consistent
  results with cgroupv1, and always clobber any existing eBPF
  program(s) to fix runc update and avoid leaking eBPF programs
  (resulting in errors when managing containers).
* cgroupv2: correctly convert 'number of IOs' statistics in a
  cgroupv1-compatible way.
* cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
* cgroupv2: wait for freeze to finish before returning from the freezing
  code, optimize the method for checking whether a cgroup is frozen.
* cgroups/systemd: fixed 'retry on dbus disconnect' logic introduced in rc94
* cgroups/systemd: fixed returning 'unit already exists' error from a systemd
  cgroup manager (regression in rc94)
+ cgroupv2: support SkipDevices with systemd driver
+ cgroup/systemd: return, not ignore, stop unit error from Destroy
+ Make 'runc --version' output sane even when built with go get or
  otherwise outside of our build scripts.
+ cgroups: set SkipDevices during runc update (so we don't modify
  cgroups at all during runc update).
+ cgroup1: blkio: support BFQ weights.
+ cgroupv2: set per-device io weights if BFQ IO scheduler is available.

Update to runc v1.0.0~rc95. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95

This release of runc contains a fix for CVE-2021-30465, and users are
strongly recommended to update (especially if you are providing
semi-limited access to spawn containers to untrusted users). (bsc#1185405)

Update to runc v1.0.0~rc94. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94

Breaking Changes:
* cgroupv1: kernel memory limits are now always ignored, as kmemcg has
  been effectively deprecated by the kernel. Users should make use of regular
  memory cgroup controls.

Regression Fixes:

* seccomp: fix 32-bit compilation errors
* runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
* runc start: fix 'chdir to cwd: permission denied' for some setups
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-25"/>
	<updated date="2021-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1102408">SUSE bug 1102408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185405">SUSE bug 1185405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187704">SUSE bug 1187704</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188282">SUSE bug 1188282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190826">SUSE bug 1190826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191015">SUSE bug 1191015</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191121">SUSE bug 1191121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191334">SUSE bug 1191334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191355">SUSE bug 1191355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191434">SUSE bug 1191434</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30465/">CVE-2021-30465</cve>
	<cve impact="low" cvss3="3/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-32760/">CVE-2021-32760</cve>
	<cve impact="moderate" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-41089/">CVE-2021-41089</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-41091/">CVE-2021-41091</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-41092/">CVE-2021-41092</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-41103/">CVE-2021-41103</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009651637" comment="containerd-1.4.11-56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651638" comment="docker-20.10.9_ce-156.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651639" comment="docker-bash-completion-20.10.9_ce-156.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009651640" comment="runc-1.0.2-23.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140864" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181239" ref_url="https://bugzilla.suse.com/1181239" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:0352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008289.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

java-11-openjdk was upgraded to include January 2021 CPU  (bsc#1181239)
- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-09"/>
	<updated date="2021-02-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181239">SUSE bug 1181239</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494093" comment="java-11-openjdk-11.0.10.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494094" comment="java-11-openjdk-demo-11.0.10.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494095" comment="java-11-openjdk-devel-11.0.10.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494096" comment="java-11-openjdk-headless-11.0.10.0-3.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140865" version="1" class="patch">
	<metadata>
		<title>Security update for dnsmasq (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1173646" ref_url="https://bugzilla.suse.com/1173646" source="BUGZILLA"/>
		<reference ref_id="1180914" ref_url="https://bugzilla.suse.com/1180914" source="BUGZILLA"/>
		<reference ref_id="1183709" ref_url="https://bugzilla.suse.com/1183709" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14312" ref_url="https://www.suse.com/security/cve/CVE-2020-14312/" source="CVE"/>
		<reference ref_id="CVE-2021-3448" ref_url="https://www.suse.com/security/cve/CVE-2021-3448/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009660.html" source="SUSE-SU"/>
		<description>
This update for dnsmasq fixes the following issues:

Update to version 2.86

- CVE-2021-3448: fixed outgoing port used when --server is used with an interface name. (bsc#1183709)
- CVE-2020-14312: Set --local-service by default (bsc#1173646).
- Open inotify socket only when used (bsc#1180914).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173646">SUSE bug 1173646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180914">SUSE bug 1180914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183709">SUSE bug 1183709</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-14312/">CVE-2020-14312</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3448/">CVE-2021-3448</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653308" comment="dnsmasq-2.86-7.14.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140866" version="1" class="patch">
	<metadata>
		<title>Security update for busybox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1099260" ref_url="https://bugzilla.suse.com/1099260" source="BUGZILLA"/>
		<reference ref_id="1099263" ref_url="https://bugzilla.suse.com/1099263" source="BUGZILLA"/>
		<reference ref_id="1121426" ref_url="https://bugzilla.suse.com/1121426" source="BUGZILLA"/>
		<reference ref_id="1184522" ref_url="https://bugzilla.suse.com/1184522" source="BUGZILLA"/>
		<reference ref_id="951562" ref_url="https://bugzilla.suse.com/951562" source="BUGZILLA"/>
		<reference ref_id="CVE-2011-5325" ref_url="https://www.suse.com/security/cve/CVE-2011-5325/" source="CVE"/>
		<reference ref_id="CVE-2018-1000500" ref_url="https://www.suse.com/security/cve/CVE-2018-1000500/" source="CVE"/>
		<reference ref_id="CVE-2018-1000517" ref_url="https://www.suse.com/security/cve/CVE-2018-1000517/" source="CVE"/>
		<reference ref_id="CVE-2018-20679" ref_url="https://www.suse.com/security/cve/CVE-2018-20679/" source="CVE"/>
		<reference ref_id="CVE-2021-28831" ref_url="https://www.suse.com/security/cve/CVE-2021-28831/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3531-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009658.html" source="SUSE-SU"/>
		<description>
This update for busybox fixes the following issues:

- CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522).
- CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426).
- CVE-2018-1000517: Fixed buffer overflow in the retrieve_file_data() (bsc#1099260).
- CVE-2011-5325: Fixed a directory traversal related to 'tar' command (bsc#951562).
- CVE-2018-1000500: Fixed missing SSL certificate validation related to the 'wget' command (bsc#1099263).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1099260">SUSE bug 1099260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099263">SUSE bug 1099263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121426">SUSE bug 1121426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184522">SUSE bug 1184522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951562">SUSE bug 951562</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2011-5325/">CVE-2011-5325</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000500/">CVE-2018-1000500</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000517/">CVE-2018-1000517</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20679/">CVE-2018-20679</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28831/">CVE-2021-28831</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009652734" comment="busybox-1.26.2-4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652735" comment="busybox-static-1.26.2-4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140867" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182783" ref_url="https://bugzilla.suse.com/1182783" source="BUGZILLA"/>
		<reference ref_id="1184152" ref_url="https://bugzilla.suse.com/1184152" source="BUGZILLA"/>
		<reference ref_id="1184772" ref_url="https://bugzilla.suse.com/1184772" source="BUGZILLA"/>
		<reference ref_id="1185081" ref_url="https://bugzilla.suse.com/1185081" source="BUGZILLA"/>
		<reference ref_id="1188843" ref_url="https://bugzilla.suse.com/1188843" source="BUGZILLA"/>
		<reference ref_id="1190420" ref_url="https://bugzilla.suse.com/1190420" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3667" ref_url="https://www.suse.com/security/cve/CVE-2021-3667/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3540-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009661.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:

Security issue fixed:

- CVE-2021-3667: Fixed a DoS vulnerability in the libvirt virStoragePoolLookupByTargetPath API. (bsc#1188843)

Non-security issues fixed:

- resolved hangs/crashes on libvirtd shutdown (bsc#1182783)
- qemu: Normalize MAC address in device conf on netdev hotplug (bsc#1184772)
- libxl: Fix driver reload (bsc#1190420)
- libxl: Add support for 'e820_host' settings (bsc#1185081)
- libxl: Fix domain shutdown (bsc#1184152)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182783">SUSE bug 1182783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184152">SUSE bug 1184152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184772">SUSE bug 1184772</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185081">SUSE bug 1185081</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188843">SUSE bug 1188843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190420">SUSE bug 1190420</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3667/">CVE-2021-3667</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653471" comment="libvirt-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653472" comment="libvirt-admin-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652339" comment="libvirt-bash-completion-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653473" comment="libvirt-client-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653474" comment="libvirt-daemon-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653475" comment="libvirt-daemon-config-network-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653476" comment="libvirt-daemon-config-nwfilter-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653477" comment="libvirt-daemon-driver-interface-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652345" comment="libvirt-daemon-driver-libxl-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653478" comment="libvirt-daemon-driver-lxc-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653479" comment="libvirt-daemon-driver-network-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653480" comment="libvirt-daemon-driver-nodedev-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653481" comment="libvirt-daemon-driver-nwfilter-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653482" comment="libvirt-daemon-driver-qemu-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653483" comment="libvirt-daemon-driver-secret-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653484" comment="libvirt-daemon-driver-storage-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653485" comment="libvirt-daemon-driver-storage-core-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653486" comment="libvirt-daemon-driver-storage-disk-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653487" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653488" comment="libvirt-daemon-driver-storage-logical-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653489" comment="libvirt-daemon-driver-storage-mpath-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652358" comment="libvirt-daemon-driver-storage-rbd-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653490" comment="libvirt-daemon-driver-storage-scsi-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653491" comment="libvirt-daemon-hooks-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653492" comment="libvirt-daemon-lxc-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653493" comment="libvirt-daemon-qemu-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652363" comment="libvirt-daemon-xen-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653494" comment="libvirt-devel-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652365" comment="libvirt-doc-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653495" comment="libvirt-libs-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653496" comment="libvirt-lock-sanlock-5.1.0-8.29.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653497" comment="libvirt-nss-5.1.0-8.29.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140868" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1176262" ref_url="https://bugzilla.suse.com/1176262" source="BUGZILLA"/>
		<reference ref_id="1180686" ref_url="https://bugzilla.suse.com/1180686" source="BUGZILLA"/>
		<reference ref_id="1181126" ref_url="https://bugzilla.suse.com/1181126" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20916" ref_url="https://www.suse.com/security/cve/CVE-2019-20916/" source="CVE"/>
		<reference ref_id="CVE-2021-3177" ref_url="https://www.suse.com/security/cve/CVE-2021-3177/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0355-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008291.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- buffer overflow in PyCArg_repr in _ctypes/callproc.c,
  which may lead to remote code execution (bsc#1181126, CVE-2021-3177).
- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-09"/>
	<updated date="2021-02-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1176262">SUSE bug 1176262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180686">SUSE bug 1180686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181126">SUSE bug 1181126</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20916/">CVE-2019-20916</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3177/">CVE-2021-3177</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494103" comment="libpython2_7-1_0-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494104" comment="python-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494105" comment="python-base-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498302" comment="python-curses-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498303" comment="python-devel-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498304" comment="python-gdbm-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495833" comment="python-tk-2.7.17-7.52.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498305" comment="python-xml-2.7.17-7.52.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140869" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1190265" ref_url="https://bugzilla.suse.com/1190265" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21996" ref_url="https://www.suse.com/security/cve/CVE-2021-21996/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3555-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-October/009662.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Support querying for JSON data in external sql pillar.
- Exclude the full path of a download URL to prevent injection of malicious code.
  (bsc#1190265, CVE-2021-21996)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-10-27"/>
	<updated date="2021-10-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1190265">SUSE bug 1190265</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-21996/">CVE-2021-21996</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653498" comment="python3-salt-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653499" comment="salt-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653500" comment="salt-api-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652207" comment="salt-bash-completion-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653501" comment="salt-cloud-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653502" comment="salt-doc-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652210" comment="salt-fish-completion-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653503" comment="salt-master-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653504" comment="salt-minion-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653505" comment="salt-proxy-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653506" comment="salt-ssh-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653507" comment="salt-standalone-formulas-configuration-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653508" comment="salt-syndic-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653509" comment="salt-transactional-update-3002.2-48.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009652218" comment="salt-zsh-completion-3002.2-48.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140870" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180432" ref_url="https://bugzilla.suse.com/1180432" source="BUGZILLA"/>
		<reference ref_id="1180433" ref_url="https://bugzilla.suse.com/1180433" source="BUGZILLA"/>
		<reference ref_id="1180434" ref_url="https://bugzilla.suse.com/1180434" source="BUGZILLA"/>
		<reference ref_id="1180435" ref_url="https://bugzilla.suse.com/1180435" source="BUGZILLA"/>
		<reference ref_id="1182651" ref_url="https://bugzilla.suse.com/1182651" source="BUGZILLA"/>
		<reference ref_id="1186012" ref_url="https://bugzilla.suse.com/1186012" source="BUGZILLA"/>
		<reference ref_id="1189145" ref_url="https://bugzilla.suse.com/1189145" source="BUGZILLA"/>
		<reference ref_id="1189702" ref_url="https://bugzilla.suse.com/1189702" source="BUGZILLA"/>
		<reference ref_id="1189938" ref_url="https://bugzilla.suse.com/1189938" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35503" ref_url="https://www.suse.com/security/cve/CVE-2020-35503/" source="CVE"/>
		<reference ref_id="CVE-2020-35504" ref_url="https://www.suse.com/security/cve/CVE-2020-35504/" source="CVE"/>
		<reference ref_id="CVE-2020-35505" ref_url="https://www.suse.com/security/cve/CVE-2020-35505/" source="CVE"/>
		<reference ref_id="CVE-2020-35506" ref_url="https://www.suse.com/security/cve/CVE-2020-35506/" source="CVE"/>
		<reference ref_id="CVE-2021-20255" ref_url="https://www.suse.com/security/cve/CVE-2021-20255/" source="CVE"/>
		<reference ref_id="CVE-2021-3527" ref_url="https://www.suse.com/security/cve/CVE-2021-3527/" source="CVE"/>
		<reference ref_id="CVE-2021-3682" ref_url="https://www.suse.com/security/cve/CVE-2021-3682/" source="CVE"/>
		<reference ref_id="CVE-2021-3713" ref_url="https://www.suse.com/security/cve/CVE-2021-3713/" source="CVE"/>
		<reference ref_id="CVE-2021-3748" ref_url="https://www.suse.com/security/cve/CVE-2021-3748/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3614-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009697.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

Security issues fixed:

- Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702, CVE-2021-3713)
- Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938, CVE-2021-3748)
- usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)
- NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)
- NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)
- eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)
- usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)

Non-security issues fixed:

- Use max host physical address if -cpu max is used (bsc#1188299)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-04"/>
	<updated date="2021-11-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180432">SUSE bug 1180432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180433">SUSE bug 1180433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180434">SUSE bug 1180434</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180435">SUSE bug 1180435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182651">SUSE bug 1182651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186012">SUSE bug 1186012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189145">SUSE bug 1189145</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189702">SUSE bug 1189702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189938">SUSE bug 1189938</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35503/">CVE-2020-35503</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35504/">CVE-2020-35504</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35505/">CVE-2020-35505</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-35506/">CVE-2020-35506</cve>
	<cve impact="low" cvss3="3.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-20255/">CVE-2021-20255</cve>
	<cve impact="low" cvss3="3.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3527/">CVE-2021-3527</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3682/">CVE-2021-3682</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3713/">CVE-2021-3713</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3748/">CVE-2021-3748</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653997" comment="qemu-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653098" comment="qemu-arm-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653099" comment="qemu-audio-alsa-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653100" comment="qemu-audio-oss-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653101" comment="qemu-audio-pa-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653998" comment="qemu-block-curl-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653999" comment="qemu-block-iscsi-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654000" comment="qemu-block-rbd-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654001" comment="qemu-block-ssh-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654002" comment="qemu-guest-agent-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653107" comment="qemu-ipxe-1.0.0+-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654003" comment="qemu-kvm-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654004" comment="qemu-lang-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653142" comment="qemu-ppc-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653133" comment="qemu-s390-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653110" comment="qemu-seabios-1.12.0_0_ga698c89-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653111" comment="qemu-sgabios-8-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654005" comment="qemu-tools-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653113" comment="qemu-ui-curses-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653114" comment="qemu-ui-gtk-3.1.1.1-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653115" comment="qemu-vgabios-1.12.0_0_ga698c89-80.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653116" comment="qemu-x86-3.1.1.1-80.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140871" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179898" ref_url="https://bugzilla.suse.com/1179898" source="BUGZILLA"/>
		<reference ref_id="1179899" ref_url="https://bugzilla.suse.com/1179899" source="BUGZILLA"/>
		<reference ref_id="1179900" ref_url="https://bugzilla.suse.com/1179900" source="BUGZILLA"/>
		<reference ref_id="1179901" ref_url="https://bugzilla.suse.com/1179901" source="BUGZILLA"/>
		<reference ref_id="1179902" ref_url="https://bugzilla.suse.com/1179902" source="BUGZILLA"/>
		<reference ref_id="1179903" ref_url="https://bugzilla.suse.com/1179903" source="BUGZILLA"/>
		<reference ref_id="1180451" ref_url="https://bugzilla.suse.com/1180451" source="BUGZILLA"/>
		<reference ref_id="1180454" ref_url="https://bugzilla.suse.com/1180454" source="BUGZILLA"/>
		<reference ref_id="1180461" ref_url="https://bugzilla.suse.com/1180461" source="BUGZILLA"/>
		<reference ref_id="1181452" ref_url="https://bugzilla.suse.com/1181452" source="BUGZILLA"/>
		<reference ref_id="1182252" ref_url="https://bugzilla.suse.com/1182252" source="BUGZILLA"/>
		<reference ref_id="1183511" ref_url="https://bugzilla.suse.com/1183511" source="BUGZILLA"/>
		<reference ref_id="1184620" ref_url="https://bugzilla.suse.com/1184620" source="BUGZILLA"/>
		<reference ref_id="1184794" ref_url="https://bugzilla.suse.com/1184794" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-16590" ref_url="https://www.suse.com/security/cve/CVE-2020-16590/" source="CVE"/>
		<reference ref_id="CVE-2020-16591" ref_url="https://www.suse.com/security/cve/CVE-2020-16591/" source="CVE"/>
		<reference ref_id="CVE-2020-16592" ref_url="https://www.suse.com/security/cve/CVE-2020-16592/" source="CVE"/>
		<reference ref_id="CVE-2020-16593" ref_url="https://www.suse.com/security/cve/CVE-2020-16593/" source="CVE"/>
		<reference ref_id="CVE-2020-16598" ref_url="https://www.suse.com/security/cve/CVE-2020-16598/" source="CVE"/>
		<reference ref_id="CVE-2020-16599" ref_url="https://www.suse.com/security/cve/CVE-2020-16599/" source="CVE"/>
		<reference ref_id="CVE-2020-35448" ref_url="https://www.suse.com/security/cve/CVE-2020-35448/" source="CVE"/>
		<reference ref_id="CVE-2020-35493" ref_url="https://www.suse.com/security/cve/CVE-2020-35493/" source="CVE"/>
		<reference ref_id="CVE-2020-35496" ref_url="https://www.suse.com/security/cve/CVE-2020-35496/" source="CVE"/>
		<reference ref_id="CVE-2020-35507" ref_url="https://www.suse.com/security/cve/CVE-2020-35507/" source="CVE"/>
		<reference ref_id="CVE-2021-20197" ref_url="https://www.suse.com/security/cve/CVE-2021-20197/" source="CVE"/>
		<reference ref_id="CVE-2021-20284" ref_url="https://www.suse.com/security/cve/CVE-2021-20284/" source="CVE"/>
		<reference ref_id="CVE-2021-3487" ref_url="https://www.suse.com/security/cve/CVE-2021-3487/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3616-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009696.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

Update to binutils 2.37:

* The GNU Binutils sources now requires a C99 compiler and library to
  build.
* Support for Realm Management Extension (RME) for AArch64 has been
  added.
* A new linker option '-z report-relative-reloc' for x86 ELF targets
  has been added to report dynamic relative relocations.
* A new linker option '-z start-stop-gc' has been added to disable
  special treatment of __start_*/__stop_* references when
  --gc-sections.
* A new linker options '-Bno-symbolic' has been added which will
  cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
* The readelf tool has a new command line option which can be used to
  specify how the numeric values of symbols are reported.
  --sym-base=0|8|10|16 tells readelf to display the values in base 8,
  base 10 or base 16.  A sym base of 0 represents the default action
  of displaying values under 10000 in base 10 and values above that in
  base 16.
* A new format has been added to the nm program.  Specifying
  '--format=just-symbols' (or just using -j) will tell the program to
  only display symbol names and nothing else.
* A new command line option '--keep-section-symbols' has been added to
  objcopy and strip.  This stops the removal of unused section symbols
  when the file is copied.  Removing these symbols saves space, but
  sometimes they are needed by other tools.
* The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
  supported by objcopy now make undefined symbols weak on targets that
  support weak symbols. 
* Readelf and objdump can now display and use the contents of .debug_sup
  sections.
* Readelf and objdump will now follow links to separate debug info
  files by default.  This behaviour can be stopped via the use of the
  new '-wN' or '--debug-dump=no-follow-links' options for readelf and
  the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
  the old behaviour can be restored by the use of the
  '--enable-follow-debug-links=no' configure time option.

  The semantics of the =follow-links option have also been slightly
  changed.  When enabled, the option allows for the loading of symbol
  tables and string tables from the separate files which can be used
  to enhance the information displayed when dumping other sections,
  but it does not automatically imply that information from the
  separate files should be displayed.

  If other debug section display options are also enabled (eg
  '--debug-dump=info') then the contents of matching sections in both
  the main file and the separate debuginfo file *will* be displayed.
  This is because in most cases the debug section will only be present
  in one of the files.

  If however non-debug section display options are enabled (eg
  '--sections') then the contents of matching parts of the separate
  debuginfo file will *not* be displayed.  This is because in most
  cases the user probably only wanted to load the symbol information
  from the separate debuginfo file.  In order to change this behaviour
  a new command line option --process-links can be used.  This will
  allow di0pslay options to applied to both the main file and any
  separate debuginfo files.

* Nm has a new command line option: '--quiet'.  This suppresses 'no
  symbols' diagnostic.

Update to binutils 2.36:

New features in the Assembler:

- General:

   * When setting the link order attribute of ELF sections, it is now
     possible to use a numeric section index instead of symbol name.
   * Added a .nop directive to generate a single no-op instruction in
     a target neutral manner.  This instruction does have an effect on
     DWARF line number generation, if that is active.
   * Removed --reduce-memory-overheads and --hash-size as gas now
     uses hash tables that can be expand and shrink automatically.

- X86/x86_64:

   * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
     Locker instructions. 
   * Support non-absolute segment values for lcall and ljmp.
   * Add {disp16} pseudo prefix to x86 assembler.
   * Configure with --enable-x86-used-note by default for Linux/x86.

-  ARM/AArch64:

   * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
     Cortex-R82, Neoverse V1, and Neoverse N2 cores.
   * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
     Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
     Stack Recorder Extension) and BRBE (Branch Record Buffer
     Extension) system registers.
   * Add support for Armv8-R and Armv8.7-A ISA extensions.
   * Add support for DSB memory nXS barrier, WFET and WFIT
     instruction for Armv8.7.
   * Add support for +csre feature for -march. Add CSR PDEC
     instruction for CSRE feature in AArch64.
   * Add support for +flagm feature for -march in Armv8.4 AArch64.
   * Add support for +ls64 feature for -march in Armv8.7
     AArch64. Add atomic 64-byte load/store instructions for this
     feature. 
   * Add support for +pauth (Pointer Authentication) feature for
     -march in AArch64.

New features in the Linker:

  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new 
     command-line option --ctf-share-types describes how to do this:
     its default value, share-unconflicted, produces the most compact
     output.
  * The linker now omits the 'variable section' from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.

New features in other binary tools:

  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
    --no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.

The following security fixes are addressed by the update:

- CVE-2021-20197: Fixed a race condition which allows users to own arbitrary files (bsc#1181452).
- CVE-2021-20284: Fixed a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c (bsc#1183511).
- CVE-2021-3487: Fixed a denial of service via excessive debug section size causing excessive memory consumption in bfd's dwarf2.c read_section() (bsc#1184620).
- CVE-2020-35448: Fixed a heap-based buffer over-read in bfd_getl_signed_32() in libbfd.c (bsc#1184794).
- CVE-2020-16590: Fixed a double free vulnerability in process_symbol_table() (bsc#1179898).
- CVE-2020-16591: Fixed an invalid read in process_symbol_table() (bsc#1179899).
- CVE-2020-16592: Fixed an use-after-free in bfd_hash_lookup() (bsc#1179900).
- CVE-2020-16593: Fixed a null pointer dereference in scan_unit_for_symbols() (bsc#1179901).
- CVE-2020-16598: Fixed a null pointer dereference in debug_get_real_type() (bsc#1179902).
- CVE-2020-16599: Fixed a null pointer dereference in _bfd_elf_get_symbol_version_string() (bsc#1179903)
- CVE-2020-35493: Fixed heap-based buffer overflow in bfd_pef_parse_function_stubs function in bfd/pef.c via crafted PEF file (bsc#1180451).
- CVE-2020-35496: Fixed multiple null pointer dereferences in bfd module due to not checking return value of bfd_malloc (bsc#1180454).
- CVE-2020-35507: Fixed a null pointer dereference in bfd_pef_parse_function_stubs() (bsc#1180461).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-04"/>
	<updated date="2021-11-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179898">SUSE bug 1179898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179899">SUSE bug 1179899</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179900">SUSE bug 1179900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179901">SUSE bug 1179901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179902">SUSE bug 1179902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179903">SUSE bug 1179903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180451">SUSE bug 1180451</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180454">SUSE bug 1180454</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180461">SUSE bug 1180461</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181452">SUSE bug 1181452</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182252">SUSE bug 1182252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183511">SUSE bug 1183511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184620">SUSE bug 1184620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184794">SUSE bug 1184794</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16590/">CVE-2020-16590</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16591/">CVE-2020-16591</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16592/">CVE-2020-16592</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16593/">CVE-2020-16593</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-16598/">CVE-2020-16598</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-16599/">CVE-2020-16599</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-35448/">CVE-2020-35448</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35493/">CVE-2020-35493</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35496/">CVE-2020-35496</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35507/">CVE-2020-35507</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20197/">CVE-2021-20197</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20284/">CVE-2021-20284</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3487/">CVE-2021-3487</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653451" comment="binutils-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653452" comment="binutils-devel-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653455" comment="binutils-devel-32bit-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653453" comment="libctf-nobfd0-2.37-7.21.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653454" comment="libctf0-2.37-7.21.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140872" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183909" ref_url="https://bugzilla.suse.com/1183909" source="BUGZILLA"/>
		<reference ref_id="1184519" ref_url="https://bugzilla.suse.com/1184519" source="BUGZILLA"/>
		<reference ref_id="1188941" ref_url="https://bugzilla.suse.com/1188941" source="BUGZILLA"/>
		<reference ref_id="1191473" ref_url="https://bugzilla.suse.com/1191473" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20294" ref_url="https://www.suse.com/security/cve/CVE-2021-20294/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3643-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009711.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

- For compatibility on old code stream that expect 'brcl 0,label' to
  not be disassembled as 'jgnop label' on s390x.  (bsc#1192267)
  This reverts IBM zSeries HLASM support for now.
- Fixed that ppc64 optflags did not enable LTO (bsc#1188941).
- Fix empty man-pages from broken release tarball
- Fixed a memory corruption with rpath option (bsc#1191473).
- Fixed slow performance of stripping some binaries (bsc#1183909).

Security issue fixed:

- CVE-2021-20294: Fixed out-of-bounds write in print_dynamic_symbol in readelf (bnc#1184519)

		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-09"/>
	<updated date="2021-11-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1183909">SUSE bug 1183909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184519">SUSE bug 1184519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188941">SUSE bug 1188941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191473">SUSE bug 1191473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20294/">CVE-2021-20294</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009654299" comment="binutils-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654300" comment="binutils-devel-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654320" comment="binutils-devel-32bit-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654301" comment="libctf-nobfd0-2.37-7.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654302" comment="libctf0-2.37-7.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140873" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192250" ref_url="https://bugzilla.suse.com/1192250" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-38503" ref_url="https://www.suse.com/security/cve/CVE-2021-38503/" source="CVE"/>
		<reference ref_id="CVE-2021-38504" ref_url="https://www.suse.com/security/cve/CVE-2021-38504/" source="CVE"/>
		<reference ref_id="CVE-2021-38505" ref_url="https://www.suse.com/security/cve/CVE-2021-38505/" source="CVE"/>
		<reference ref_id="CVE-2021-38506" ref_url="https://www.suse.com/security/cve/CVE-2021-38506/" source="CVE"/>
		<reference ref_id="CVE-2021-38507" ref_url="https://www.suse.com/security/cve/CVE-2021-38507/" source="CVE"/>
		<reference ref_id="CVE-2021-38508" ref_url="https://www.suse.com/security/cve/CVE-2021-38508/" source="CVE"/>
		<reference ref_id="CVE-2021-38509" ref_url="https://www.suse.com/security/cve/CVE-2021-38509/" source="CVE"/>
		<reference ref_id="CVE-2021-38510" ref_url="https://www.suse.com/security/cve/CVE-2021-38510/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3651-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009712.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

MozillaFirefox was updated to Extended Support Release 91.3.0 ESR

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-49 (bsc#1192250)

  * CVE-2021-38503: iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504: Use-after-free in file picker dialog
  * CVE-2021-38505: Windows 10 Cloud Clipboard may have recorded sensitive user data
  * CVE-2021-38506: Firefox could be coaxed into going into fullscreen mode without notification or warning
  * CVE-2021-38507: Opportunistic Encryption in HTTP2 could be used to bypass the Same-Origin-Policy on services hosted on other ports
  * CVE-2021-38508: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing
  * CVE-2021-38509: Javascript alert box could have been spoofed onto an arbitrary domain
  * CVE-2021-38510: Download Protections were bypassed by .inetloc files on Mac OS
  * MOZ-2021-0008: Use-after-free in HTTP2 Session object
  * MOZ-2021-0007: Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-10"/>
	<updated date="2021-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192250">SUSE bug 1192250</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38503/">CVE-2021-38503</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38504/">CVE-2021-38504</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38505/">CVE-2021-38505</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38506/">CVE-2021-38506</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38507/">CVE-2021-38507</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38508/">CVE-2021-38508</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38509/">CVE-2021-38509</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38510/">CVE-2021-38510</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009654102" comment="MozillaFirefox-91.3.0-150.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654103" comment="MozillaFirefox-devel-91.3.0-150.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654104" comment="MozillaFirefox-translations-common-91.3.0-150.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654105" comment="MozillaFirefox-translations-other-91.3.0-150.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140874" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188278" ref_url="https://bugzilla.suse.com/1188278" source="BUGZILLA"/>
		<reference ref_id="1188279" ref_url="https://bugzilla.suse.com/1188279" source="BUGZILLA"/>
		<reference ref_id="1190558" ref_url="https://bugzilla.suse.com/1190558" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30640" ref_url="https://www.suse.com/security/cve/CVE-2021-30640/" source="CVE"/>
		<reference ref_id="CVE-2021-33037" ref_url="https://www.suse.com/security/cve/CVE-2021-33037/" source="CVE"/>
		<reference ref_id="CVE-2021-41079" ref_url="https://www.suse.com/security/cve/CVE-2021-41079/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009733.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279).
- CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278).
- CVE-2021-41079: Fixed a denial of service caused by an unexpected TLS packet (bsc#1190558).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-16"/>
	<updated date="2021-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188278">SUSE bug 1188278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188279">SUSE bug 1188279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190558">SUSE bug 1190558</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30640/">CVE-2021-30640</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-33037/">CVE-2021-33037</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41079/">CVE-2021-41079</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653671" comment="tomcat-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653672" comment="tomcat-admin-webapps-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653673" comment="tomcat-el-3_0-api-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653674" comment="tomcat-jsp-2_3-api-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653675" comment="tomcat-lib-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653676" comment="tomcat-servlet-4_0-api-9.0.36-4.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653677" comment="tomcat-webapps-9.0.36-4.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140875" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191901" ref_url="https://bugzilla.suse.com/1191901" source="BUGZILLA"/>
		<reference ref_id="1191903" ref_url="https://bugzilla.suse.com/1191903" source="BUGZILLA"/>
		<reference ref_id="1191904" ref_url="https://bugzilla.suse.com/1191904" source="BUGZILLA"/>
		<reference ref_id="1191906" ref_url="https://bugzilla.suse.com/1191906" source="BUGZILLA"/>
		<reference ref_id="1191909" ref_url="https://bugzilla.suse.com/1191909" source="BUGZILLA"/>
		<reference ref_id="1191910" ref_url="https://bugzilla.suse.com/1191910" source="BUGZILLA"/>
		<reference ref_id="1191911" ref_url="https://bugzilla.suse.com/1191911" source="BUGZILLA"/>
		<reference ref_id="1191912" ref_url="https://bugzilla.suse.com/1191912" source="BUGZILLA"/>
		<reference ref_id="1191913" ref_url="https://bugzilla.suse.com/1191913" source="BUGZILLA"/>
		<reference ref_id="1191914" ref_url="https://bugzilla.suse.com/1191914" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-35550" ref_url="https://www.suse.com/security/cve/CVE-2021-35550/" source="CVE"/>
		<reference ref_id="CVE-2021-35556" ref_url="https://www.suse.com/security/cve/CVE-2021-35556/" source="CVE"/>
		<reference ref_id="CVE-2021-35559" ref_url="https://www.suse.com/security/cve/CVE-2021-35559/" source="CVE"/>
		<reference ref_id="CVE-2021-35561" ref_url="https://www.suse.com/security/cve/CVE-2021-35561/" source="CVE"/>
		<reference ref_id="CVE-2021-35564" ref_url="https://www.suse.com/security/cve/CVE-2021-35564/" source="CVE"/>
		<reference ref_id="CVE-2021-35565" ref_url="https://www.suse.com/security/cve/CVE-2021-35565/" source="CVE"/>
		<reference ref_id="CVE-2021-35567" ref_url="https://www.suse.com/security/cve/CVE-2021-35567/" source="CVE"/>
		<reference ref_id="CVE-2021-35578" ref_url="https://www.suse.com/security/cve/CVE-2021-35578/" source="CVE"/>
		<reference ref_id="CVE-2021-35586" ref_url="https://www.suse.com/security/cve/CVE-2021-35586/" source="CVE"/>
		<reference ref_id="CVE-2021-35603" ref_url="https://www.suse.com/security/cve/CVE-2021-35603/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3671-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009728.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

Update to 11.0.13+8 (October 2021 CPU)

- CVE-2021-35550, bsc#1191901: Update the default enabled cipher suites preference
- CVE-2021-35565, bsc#1191909: com.sun.net.HttpsServer spins on TLS session close
- CVE-2021-35556, bsc#1191910: Richer Text Editors
- CVE-2021-35559, bsc#1191911: Enhanced style for RTF kit
- CVE-2021-35561, bsc#1191912: Better hashing support
- CVE-2021-35564, bsc#1191913: Improve Keystore integrity
- CVE-2021-35567, bsc#1191903: More Constrained Delegation
- CVE-2021-35578, bsc#1191904: Improve TLS client handshaking
- CVE-2021-35586, bsc#1191914: Better BMP support
- CVE-2021-35603, bsc#1191906: Better session identification
- Improve Stream handling for SSL
- Improve requests of certificates
- Correct certificate requests
- Enhance DTLS client handshake
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-16"/>
	<updated date="2021-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191901">SUSE bug 1191901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191903">SUSE bug 1191903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191904">SUSE bug 1191904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191906">SUSE bug 1191906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191909">SUSE bug 1191909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191910">SUSE bug 1191910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191911">SUSE bug 1191911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191912">SUSE bug 1191912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191913">SUSE bug 1191913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191914">SUSE bug 1191914</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35550/">CVE-2021-35550</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35556/">CVE-2021-35556</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35559/">CVE-2021-35559</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35561/">CVE-2021-35561</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-35564/">CVE-2021-35564</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35565/">CVE-2021-35565</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35567/">CVE-2021-35567</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35578/">CVE-2021-35578</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35586/">CVE-2021-35586</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35603/">CVE-2021-35603</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009653309" comment="java-11-openjdk-11.0.13.0-3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653310" comment="java-11-openjdk-demo-11.0.13.0-3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653311" comment="java-11-openjdk-devel-11.0.13.0-3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009653312" comment="java-11-openjdk-headless-11.0.13.0-3.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140876" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1014440" ref_url="https://bugzilla.suse.com/1014440" source="BUGZILLA"/>
		<reference ref_id="1192284" ref_url="https://bugzilla.suse.com/1192284" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-2124" ref_url="https://www.suse.com/security/cve/CVE-2016-2124/" source="CVE"/>
		<reference ref_id="CVE-2020-25717" ref_url="https://www.suse.com/security/cve/CVE-2020-25717/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009729.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos (bsc#1014440).
- CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members (bsc#1192284).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-16"/>
	<updated date="2021-11-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1014440">SUSE bug 1014440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192284">SUSE bug 1192284</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-2124/">CVE-2016-2124</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25717/">CVE-2020-25717</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009656803" comment="libdcerpc-binding0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654914" comment="libdcerpc-binding0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656804" comment="libdcerpc-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656805" comment="libdcerpc-samr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656806" comment="libdcerpc-samr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656807" comment="libdcerpc0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654919" comment="libdcerpc0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656808" comment="libndr-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656809" comment="libndr-krb5pac-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656810" comment="libndr-krb5pac0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654923" comment="libndr-krb5pac0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656811" comment="libndr-nbt-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656812" comment="libndr-nbt0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654926" comment="libndr-nbt0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656813" comment="libndr-standard-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656814" comment="libndr-standard0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654929" comment="libndr-standard0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656815" comment="libndr0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654931" comment="libndr0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656816" comment="libnetapi-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656817" comment="libnetapi0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654934" comment="libnetapi0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656818" comment="libsamba-credentials-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656819" comment="libsamba-credentials0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654937" comment="libsamba-credentials0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656820" comment="libsamba-errors-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656821" comment="libsamba-errors0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654940" comment="libsamba-errors0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656822" comment="libsamba-hostconfig-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656823" comment="libsamba-hostconfig0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654943" comment="libsamba-hostconfig0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656824" comment="libsamba-passdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656825" comment="libsamba-passdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654946" comment="libsamba-passdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656826" comment="libsamba-policy-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656827" comment="libsamba-policy-python3-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655341" comment="libsamba-policy0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656828" comment="libsamba-policy0-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656829" comment="libsamba-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656830" comment="libsamba-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654953" comment="libsamba-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656831" comment="libsamdb-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656832" comment="libsamdb0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654956" comment="libsamdb0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656833" comment="libsmbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656834" comment="libsmbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656835" comment="libsmbconf-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656836" comment="libsmbconf0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654961" comment="libsmbconf0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656837" comment="libsmbldap-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656838" comment="libsmbldap2-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654964" comment="libsmbldap2-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656839" comment="libtevent-util-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656840" comment="libtevent-util0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654967" comment="libtevent-util0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656841" comment="libwbclient-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656842" comment="libwbclient0-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654970" comment="libwbclient0-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656843" comment="samba-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656844" comment="samba-ad-dc-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656845" comment="samba-client-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656846" comment="samba-core-devel-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656847" comment="samba-dsdb-modules-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656848" comment="samba-libs-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654977" comment="samba-libs-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655343" comment="samba-libs-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656849" comment="samba-libs-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009655345" comment="samba-python-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656850" comment="samba-python3-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656851" comment="samba-winbind-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009654983" comment="samba-winbind-32bit-4.9.5+git.471.5edbe3dcae7-3.57.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140877" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191937" ref_url="https://bugzilla.suse.com/1191937" source="BUGZILLA"/>
		<reference ref_id="1192063" ref_url="https://bugzilla.suse.com/1192063" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30846" ref_url="https://www.suse.com/security/cve/CVE-2021-30846/" source="CVE"/>
		<reference ref_id="CVE-2021-30851" ref_url="https://www.suse.com/security/cve/CVE-2021-30851/" source="CVE"/>
		<reference ref_id="CVE-2021-42762" ref_url="https://www.suse.com/security/cve/CVE-2021-42762/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009770.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- CVE-2021-30846: Fixed memory corruption issue that could lead to arbitrary code execution when processing maliciously crafted web content (bsc#1192063).
- CVE-2021-30851: Fixed memory corruption vulnerability that could lead to arbitrary code execution when processing maliciously crafted web content (bsc#1192063).   
- CVE-2021-42762: Updated seccomp rules with latest changes from flatpak (bsc#1191937).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-23"/>
	<updated date="2021-11-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191937">SUSE bug 1191937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192063">SUSE bug 1192063</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30846/">CVE-2021-30846</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30851/">CVE-2021-30851</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42762/">CVE-2021-42762</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657288" comment="libjavascriptcoregtk-4_0-18-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657289" comment="libwebkit2gtk-4_0-37-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657282" comment="libwebkit2gtk3-lang-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657290" comment="typelib-1_0-JavaScriptCore-4_0-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657291" comment="typelib-1_0-WebKit2-4_0-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657292" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657293" comment="webkit2gtk-4_0-injected-bundles-2.34.1-3.87.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657294" comment="webkit2gtk3-devel-2.34.1-3.87.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140878" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191901" ref_url="https://bugzilla.suse.com/1191901" source="BUGZILLA"/>
		<reference ref_id="1191903" ref_url="https://bugzilla.suse.com/1191903" source="BUGZILLA"/>
		<reference ref_id="1191904" ref_url="https://bugzilla.suse.com/1191904" source="BUGZILLA"/>
		<reference ref_id="1191905" ref_url="https://bugzilla.suse.com/1191905" source="BUGZILLA"/>
		<reference ref_id="1191906" ref_url="https://bugzilla.suse.com/1191906" source="BUGZILLA"/>
		<reference ref_id="1191909" ref_url="https://bugzilla.suse.com/1191909" source="BUGZILLA"/>
		<reference ref_id="1191910" ref_url="https://bugzilla.suse.com/1191910" source="BUGZILLA"/>
		<reference ref_id="1191911" ref_url="https://bugzilla.suse.com/1191911" source="BUGZILLA"/>
		<reference ref_id="1191912" ref_url="https://bugzilla.suse.com/1191912" source="BUGZILLA"/>
		<reference ref_id="1191913" ref_url="https://bugzilla.suse.com/1191913" source="BUGZILLA"/>
		<reference ref_id="1191914" ref_url="https://bugzilla.suse.com/1191914" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-35550" ref_url="https://www.suse.com/security/cve/CVE-2021-35550/" source="CVE"/>
		<reference ref_id="CVE-2021-35556" ref_url="https://www.suse.com/security/cve/CVE-2021-35556/" source="CVE"/>
		<reference ref_id="CVE-2021-35559" ref_url="https://www.suse.com/security/cve/CVE-2021-35559/" source="CVE"/>
		<reference ref_id="CVE-2021-35561" ref_url="https://www.suse.com/security/cve/CVE-2021-35561/" source="CVE"/>
		<reference ref_id="CVE-2021-35564" ref_url="https://www.suse.com/security/cve/CVE-2021-35564/" source="CVE"/>
		<reference ref_id="CVE-2021-35565" ref_url="https://www.suse.com/security/cve/CVE-2021-35565/" source="CVE"/>
		<reference ref_id="CVE-2021-35567" ref_url="https://www.suse.com/security/cve/CVE-2021-35567/" source="CVE"/>
		<reference ref_id="CVE-2021-35578" ref_url="https://www.suse.com/security/cve/CVE-2021-35578/" source="CVE"/>
		<reference ref_id="CVE-2021-35586" ref_url="https://www.suse.com/security/cve/CVE-2021-35586/" source="CVE"/>
		<reference ref_id="CVE-2021-35588" ref_url="https://www.suse.com/security/cve/CVE-2021-35588/" source="CVE"/>
		<reference ref_id="CVE-2021-35603" ref_url="https://www.suse.com/security/cve/CVE-2021-35603/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3770-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-November/009768.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

Update to version OpenJDK 8u312 (October 2021 CPU):
  
- CVE-2021-35550: Fixed weak ciphers preferred over stronger ones for TLS (bsc#1191901).
- CVE-2021-35556: Fixed excessive memory allocation in RTFParser (bsc#1191910).
- CVE-2021-35559: Fixed excessive memory allocation in RTFReader (bsc#1191911).
- CVE-2021-35561: Fixed excessive memory allocation in HashMap and HashSet (bsc#1191912).
- CVE-2021-35564: Fixed certificates with end dates too far in the future can corrupt keystore (bsc#1191913).
- CVE-2021-35565: Fixed loop in HttpsServer triggered during TLS session close (bsc#1191909).
- CVE-2021-35567: Fixed incorrect principal selection when using Kerberos Constrained Delegation (bsc#1191903).
- CVE-2021-35578: Fixed unexpected exception raised during TLS handshake (bsc#1191904).
- CVE-2021-35586: Fixed excessive memory allocation in BMPImageReader (bsc#1191914).
- CVE-2021-35588: Fixed incomplete validation of inner class references in ClassFileParser (bsc#1191905)
- CVE-2021-35603: Fixed non-constant comparison during TLS handshakes (bsc#1191906).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-11-23"/>
	<updated date="2021-11-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191901">SUSE bug 1191901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191903">SUSE bug 1191903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191904">SUSE bug 1191904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191905">SUSE bug 1191905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191906">SUSE bug 1191906</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191909">SUSE bug 1191909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191910">SUSE bug 1191910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191911">SUSE bug 1191911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191912">SUSE bug 1191912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191913">SUSE bug 1191913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191914">SUSE bug 1191914</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35550/">CVE-2021-35550</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35556/">CVE-2021-35556</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35559/">CVE-2021-35559</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35561/">CVE-2021-35561</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-35564/">CVE-2021-35564</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35565/">CVE-2021-35565</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35567/">CVE-2021-35567</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35578/">CVE-2021-35578</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35586/">CVE-2021-35586</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35588/">CVE-2021-35588</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35603/">CVE-2021-35603</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009656976" comment="java-1_8_0-openjdk-1.8.0.312-3.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656977" comment="java-1_8_0-openjdk-demo-1.8.0.312-3.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656978" comment="java-1_8_0-openjdk-devel-1.8.0.312-3.58.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656979" comment="java-1_8_0-openjdk-headless-1.8.0.312-3.58.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140879" version="1" class="patch">
	<metadata>
		<title>Security update for ruby2.5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188160" ref_url="https://bugzilla.suse.com/1188160" source="BUGZILLA"/>
		<reference ref_id="1188161" ref_url="https://bugzilla.suse.com/1188161" source="BUGZILLA"/>
		<reference ref_id="1190375" ref_url="https://bugzilla.suse.com/1190375" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31799" ref_url="https://www.suse.com/security/cve/CVE-2021-31799/" source="CVE"/>
		<reference ref_id="CVE-2021-31810" ref_url="https://www.suse.com/security/cve/CVE-2021-31810/" source="CVE"/>
		<reference ref_id="CVE-2021-32066" ref_url="https://www.suse.com/security/cve/CVE-2021-32066/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3838-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009795.html" source="SUSE-SU"/>
		<description>
This update for ruby2.5 fixes the following issues:

- CVE-2021-31799: Fixed Command injection vulnerability in RDoc (bsc#1190375).
- CVE-2021-31810: Fixed trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161).
- CVE-2021-32066: Fixed StartTLS stripping vulnerability in Net:IMAP (bsc#1188160).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-01"/>
	<updated date="2021-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188160">SUSE bug 1188160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188161">SUSE bug 1188161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190375">SUSE bug 1190375</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31799/">CVE-2021-31799</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-31810/">CVE-2021-31810</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-32066/">CVE-2021-32066</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657430" comment="libruby2_5-2_5-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657431" comment="ruby2.5-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657432" comment="ruby2.5-devel-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657433" comment="ruby2.5-devel-extra-2.5.9-4.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657434" comment="ruby2.5-stdlib-2.5.9-4.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140880" version="1" class="patch">
	<metadata>
		<title>Security update for python-Pygments (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184812" ref_url="https://bugzilla.suse.com/1184812" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27291" ref_url="https://www.suse.com/security/cve/CVE-2021-27291/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3840-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009782.html" source="SUSE-SU"/>
		<description>
This update for python-Pygments fixes the following issues:

- CVE-2021-27291: Fixed ReDoS via crafted malicious input (bsc#1184812).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-01"/>
	<updated date="2021-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184812">SUSE bug 1184812</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27291/">CVE-2021-27291</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657672" comment="python3-Pygments-2.6.1-7.10.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140881" version="1" class="patch">
	<metadata>
		<title>Security update for poppler (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1092945" ref_url="https://bugzilla.suse.com/1092945" source="BUGZILLA"/>
		<reference ref_id="1102531" ref_url="https://bugzilla.suse.com/1102531" source="BUGZILLA"/>
		<reference ref_id="1107597" ref_url="https://bugzilla.suse.com/1107597" source="BUGZILLA"/>
		<reference ref_id="1114966" ref_url="https://bugzilla.suse.com/1114966" source="BUGZILLA"/>
		<reference ref_id="1115185" ref_url="https://bugzilla.suse.com/1115185" source="BUGZILLA"/>
		<reference ref_id="1115186" ref_url="https://bugzilla.suse.com/1115186" source="BUGZILLA"/>
		<reference ref_id="1115187" ref_url="https://bugzilla.suse.com/1115187" source="BUGZILLA"/>
		<reference ref_id="1115626" ref_url="https://bugzilla.suse.com/1115626" source="BUGZILLA"/>
		<reference ref_id="1120495" ref_url="https://bugzilla.suse.com/1120495" source="BUGZILLA"/>
		<reference ref_id="1120496" ref_url="https://bugzilla.suse.com/1120496" source="BUGZILLA"/>
		<reference ref_id="1120939" ref_url="https://bugzilla.suse.com/1120939" source="BUGZILLA"/>
		<reference ref_id="1120956" ref_url="https://bugzilla.suse.com/1120956" source="BUGZILLA"/>
		<reference ref_id="1124150" ref_url="https://bugzilla.suse.com/1124150" source="BUGZILLA"/>
		<reference ref_id="1127329" ref_url="https://bugzilla.suse.com/1127329" source="BUGZILLA"/>
		<reference ref_id="1129202" ref_url="https://bugzilla.suse.com/1129202" source="BUGZILLA"/>
		<reference ref_id="1130229" ref_url="https://bugzilla.suse.com/1130229" source="BUGZILLA"/>
		<reference ref_id="1131696" ref_url="https://bugzilla.suse.com/1131696" source="BUGZILLA"/>
		<reference ref_id="1131722" ref_url="https://bugzilla.suse.com/1131722" source="BUGZILLA"/>
		<reference ref_id="1142465" ref_url="https://bugzilla.suse.com/1142465" source="BUGZILLA"/>
		<reference ref_id="1143950" ref_url="https://bugzilla.suse.com/1143950" source="BUGZILLA"/>
		<reference ref_id="1179163" ref_url="https://bugzilla.suse.com/1179163" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-18267" ref_url="https://www.suse.com/security/cve/CVE-2017-18267/" source="CVE"/>
		<reference ref_id="CVE-2018-13988" ref_url="https://www.suse.com/security/cve/CVE-2018-13988/" source="CVE"/>
		<reference ref_id="CVE-2018-16646" ref_url="https://www.suse.com/security/cve/CVE-2018-16646/" source="CVE"/>
		<reference ref_id="CVE-2018-18897" ref_url="https://www.suse.com/security/cve/CVE-2018-18897/" source="CVE"/>
		<reference ref_id="CVE-2018-19058" ref_url="https://www.suse.com/security/cve/CVE-2018-19058/" source="CVE"/>
		<reference ref_id="CVE-2018-19059" ref_url="https://www.suse.com/security/cve/CVE-2018-19059/" source="CVE"/>
		<reference ref_id="CVE-2018-19060" ref_url="https://www.suse.com/security/cve/CVE-2018-19060/" source="CVE"/>
		<reference ref_id="CVE-2018-19149" ref_url="https://www.suse.com/security/cve/CVE-2018-19149/" source="CVE"/>
		<reference ref_id="CVE-2018-20481" ref_url="https://www.suse.com/security/cve/CVE-2018-20481/" source="CVE"/>
		<reference ref_id="CVE-2018-20551" ref_url="https://www.suse.com/security/cve/CVE-2018-20551/" source="CVE"/>
		<reference ref_id="CVE-2018-20650" ref_url="https://www.suse.com/security/cve/CVE-2018-20650/" source="CVE"/>
		<reference ref_id="CVE-2018-20662" ref_url="https://www.suse.com/security/cve/CVE-2018-20662/" source="CVE"/>
		<reference ref_id="CVE-2019-10871" ref_url="https://www.suse.com/security/cve/CVE-2019-10871/" source="CVE"/>
		<reference ref_id="CVE-2019-10872" ref_url="https://www.suse.com/security/cve/CVE-2019-10872/" source="CVE"/>
		<reference ref_id="CVE-2019-14494" ref_url="https://www.suse.com/security/cve/CVE-2019-14494/" source="CVE"/>
		<reference ref_id="CVE-2019-7310" ref_url="https://www.suse.com/security/cve/CVE-2019-7310/" source="CVE"/>
		<reference ref_id="CVE-2019-9200" ref_url="https://www.suse.com/security/cve/CVE-2019-9200/" source="CVE"/>
		<reference ref_id="CVE-2019-9631" ref_url="https://www.suse.com/security/cve/CVE-2019-9631/" source="CVE"/>
		<reference ref_id="CVE-2019-9903" ref_url="https://www.suse.com/security/cve/CVE-2019-9903/" source="CVE"/>
		<reference ref_id="CVE-2019-9959" ref_url="https://www.suse.com/security/cve/CVE-2019-9959/" source="CVE"/>
		<reference ref_id="CVE-2020-27778" ref_url="https://www.suse.com/security/cve/CVE-2020-27778/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3854-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html" source="SUSE-SU"/>
		<description>
This update for poppler fixes the following issues:

- CVE-2017-18267: Fixed an infinite recursion that would allow remote attackers to cause a denial of service (bsc#1092945).
- CVE-2018-13988: Added an improper implementation check which otherwise could allow buffer overflows, memory corruption, and denial of service (bsc#1102531).
- CVE-2018-16646: Fixed an infinite recursion which could allow a denial-of-service attack via a specially crafted PDF file (bsc#1107597).
- CVE-2018-18897: Fixed a memory leak (bsc#1114966).
- CVE-2018-19058: Fixed a bug which could allow a denial-of-service attack via a specially crafted PDF file (bsc#1115187).
- CVE-2018-19059: Fixed an out-of-bounds read access which could allow a denial-of-service attack (bsc#1115186).
- CVE-2018-19060: Fixed a NULL pointer dereference which could allow a denial-of-service attack (bsc#1115185).
- CVE-2018-19149: Fixed a NULL pointer dereference which could allow a denial-of-service attack (bsc#1115626).
- CVE-2018-20481: Fixed a NULL pointer dereference while handling unallocated XRef entries which could allow a denial-of-service attack (bsc#1120495).
- CVE-2018-20551: Fixed a reachable assertion which could allow a denial-of-service attack through specially crafted PDF files (bsc#1120496).
- CVE-2018-20650: Fixed a reachable assertion which could allow denial-of-service through specially crafted PDF files (bsc#1120939).
- CVE-2018-20662: Fixed a bug which could potentially crash the running process by SIGABRT resulting in a denial-of-service attack through a specially crafted PDF file (bsc#1120956).
- CVE-2019-10871: Fixed a heap-based buffer  over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc (bsc#1131696).
- CVE-2019-10872: Fixed a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc (bsc#1131722).
- CVE-2019-14494: Fixed a divide-by-zero error in the function SplashOutputDev::tilingPatternFill (bsc#1143950).
- CVE-2019-7310: Fixed a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) that allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document (bsc#1124150).
- CVE-2019-9200: Fixed a heap-based buffer underwrite which could allow denial-of-service attack through a specially crafted PDF file (bsc#1127329)
- CVE-2019-9631: Fixed a heap-based buffer over-read  in the CairoRescaleBox.cc downsample_row_box_filter function (bsc#1129202).
- CVE-2019-9903: Fixed excessive stack consumption in the Dict::find() method, which can be triggered by passing a crafted pdf file to the pdfunite binary (bsc#1130229).
- CVE-2019-9959: Fixed integer overflow that made it possible to allocate a large memory chunk on the heap with a size controlled by an attacker (bsc#1142465).
- CVE-2020-27778: Fixed buffer overflow vulnerability in pdftohtml (bsc#1179163).
  		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-01"/>
	<updated date="2021-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1092945">SUSE bug 1092945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102531">SUSE bug 1102531</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1107597">SUSE bug 1107597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114966">SUSE bug 1114966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115185">SUSE bug 1115185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115186">SUSE bug 1115186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115187">SUSE bug 1115187</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1115626">SUSE bug 1115626</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120495">SUSE bug 1120495</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120496">SUSE bug 1120496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120939">SUSE bug 1120939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1120956">SUSE bug 1120956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124150">SUSE bug 1124150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127329">SUSE bug 1127329</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129202">SUSE bug 1129202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1130229">SUSE bug 1130229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131696">SUSE bug 1131696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1131722">SUSE bug 1131722</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142465">SUSE bug 1142465</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1143950">SUSE bug 1143950</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179163">SUSE bug 1179163</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-18267/">CVE-2017-18267</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-13988/">CVE-2018-13988</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16646/">CVE-2018-16646</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18897/">CVE-2018-18897</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19058/">CVE-2018-19058</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19059/">CVE-2018-19059</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19060/">CVE-2018-19060</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19149/">CVE-2018-19149</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20481/">CVE-2018-20481</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20551/">CVE-2018-20551</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20650/">CVE-2018-20650</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20662/">CVE-2018-20662</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-10871/">CVE-2019-10871</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-10872/">CVE-2019-10872</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-14494/">CVE-2019-14494</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-7310/">CVE-2019-7310</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-9200/">CVE-2019-9200</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9631/">CVE-2019-9631</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9903/">CVE-2019-9903</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9959/">CVE-2019-9959</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27778/">CVE-2020-27778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658125" comment="libpoppler-cpp0-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658126" comment="libpoppler-devel-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658127" comment="libpoppler-glib-devel-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658128" comment="libpoppler-glib8-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658129" comment="libpoppler73-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658130" comment="poppler-tools-0.62.0-4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658131" comment="typelib-1_0-Poppler-0_18-0.62.0-4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140882" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1100416" ref_url="https://bugzilla.suse.com/1100416" source="BUGZILLA"/>
		<reference ref_id="1108488" ref_url="https://bugzilla.suse.com/1108488" source="BUGZILLA"/>
		<reference ref_id="1129735" ref_url="https://bugzilla.suse.com/1129735" source="BUGZILLA"/>
		<reference ref_id="1129898" ref_url="https://bugzilla.suse.com/1129898" source="BUGZILLA"/>
		<reference ref_id="1133374" ref_url="https://bugzilla.suse.com/1133374" source="BUGZILLA"/>
		<reference ref_id="1136513" ref_url="https://bugzilla.suse.com/1136513" source="BUGZILLA"/>
		<reference ref_id="1171420" ref_url="https://bugzilla.suse.com/1171420" source="BUGZILLA"/>
		<reference ref_id="1176724" ref_url="https://bugzilla.suse.com/1176724" source="BUGZILLA"/>
		<reference ref_id="1177666" ref_url="https://bugzilla.suse.com/1177666" source="BUGZILLA"/>
		<reference ref_id="1181158" ref_url="https://bugzilla.suse.com/1181158" source="BUGZILLA"/>
		<reference ref_id="1184673" ref_url="https://bugzilla.suse.com/1184673" source="BUGZILLA"/>
		<reference ref_id="1184804" ref_url="https://bugzilla.suse.com/1184804" source="BUGZILLA"/>
		<reference ref_id="1185377" ref_url="https://bugzilla.suse.com/1185377" source="BUGZILLA"/>
		<reference ref_id="1185726" ref_url="https://bugzilla.suse.com/1185726" source="BUGZILLA"/>
		<reference ref_id="1185758" ref_url="https://bugzilla.suse.com/1185758" source="BUGZILLA"/>
		<reference ref_id="1185973" ref_url="https://bugzilla.suse.com/1185973" source="BUGZILLA"/>
		<reference ref_id="1186078" ref_url="https://bugzilla.suse.com/1186078" source="BUGZILLA"/>
		<reference ref_id="1186109" ref_url="https://bugzilla.suse.com/1186109" source="BUGZILLA"/>
		<reference ref_id="1186390" ref_url="https://bugzilla.suse.com/1186390" source="BUGZILLA"/>
		<reference ref_id="1186482" ref_url="https://bugzilla.suse.com/1186482" source="BUGZILLA"/>
		<reference ref_id="1186672" ref_url="https://bugzilla.suse.com/1186672" source="BUGZILLA"/>
		<reference ref_id="1188062" ref_url="https://bugzilla.suse.com/1188062" source="BUGZILLA"/>
		<reference ref_id="1188063" ref_url="https://bugzilla.suse.com/1188063" source="BUGZILLA"/>
		<reference ref_id="1188172" ref_url="https://bugzilla.suse.com/1188172" source="BUGZILLA"/>
		<reference ref_id="1188563" ref_url="https://bugzilla.suse.com/1188563" source="BUGZILLA"/>
		<reference ref_id="1188601" ref_url="https://bugzilla.suse.com/1188601" source="BUGZILLA"/>
		<reference ref_id="1188616" ref_url="https://bugzilla.suse.com/1188616" source="BUGZILLA"/>
		<reference ref_id="1188838" ref_url="https://bugzilla.suse.com/1188838" source="BUGZILLA"/>
		<reference ref_id="1188876" ref_url="https://bugzilla.suse.com/1188876" source="BUGZILLA"/>
		<reference ref_id="1188983" ref_url="https://bugzilla.suse.com/1188983" source="BUGZILLA"/>
		<reference ref_id="1188985" ref_url="https://bugzilla.suse.com/1188985" source="BUGZILLA"/>
		<reference ref_id="1189057" ref_url="https://bugzilla.suse.com/1189057" source="BUGZILLA"/>
		<reference ref_id="1189262" ref_url="https://bugzilla.suse.com/1189262" source="BUGZILLA"/>
		<reference ref_id="1189291" ref_url="https://bugzilla.suse.com/1189291" source="BUGZILLA"/>
		<reference ref_id="1189399" ref_url="https://bugzilla.suse.com/1189399" source="BUGZILLA"/>
		<reference ref_id="1189400" ref_url="https://bugzilla.suse.com/1189400" source="BUGZILLA"/>
		<reference ref_id="1189706" ref_url="https://bugzilla.suse.com/1189706" source="BUGZILLA"/>
		<reference ref_id="1189846" ref_url="https://bugzilla.suse.com/1189846" source="BUGZILLA"/>
		<reference ref_id="1189884" ref_url="https://bugzilla.suse.com/1189884" source="BUGZILLA"/>
		<reference ref_id="1190023" ref_url="https://bugzilla.suse.com/1190023" source="BUGZILLA"/>
		<reference ref_id="1190025" ref_url="https://bugzilla.suse.com/1190025" source="BUGZILLA"/>
		<reference ref_id="1190067" ref_url="https://bugzilla.suse.com/1190067" source="BUGZILLA"/>
		<reference ref_id="1190115" ref_url="https://bugzilla.suse.com/1190115" source="BUGZILLA"/>
		<reference ref_id="1190117" ref_url="https://bugzilla.suse.com/1190117" source="BUGZILLA"/>
		<reference ref_id="1190159" ref_url="https://bugzilla.suse.com/1190159" source="BUGZILLA"/>
		<reference ref_id="1190276" ref_url="https://bugzilla.suse.com/1190276" source="BUGZILLA"/>
		<reference ref_id="1190349" ref_url="https://bugzilla.suse.com/1190349" source="BUGZILLA"/>
		<reference ref_id="1190351" ref_url="https://bugzilla.suse.com/1190351" source="BUGZILLA"/>
		<reference ref_id="1190479" ref_url="https://bugzilla.suse.com/1190479" source="BUGZILLA"/>
		<reference ref_id="1190534" ref_url="https://bugzilla.suse.com/1190534" source="BUGZILLA"/>
		<reference ref_id="1190601" ref_url="https://bugzilla.suse.com/1190601" source="BUGZILLA"/>
		<reference ref_id="1190717" ref_url="https://bugzilla.suse.com/1190717" source="BUGZILLA"/>
		<reference ref_id="1191193" ref_url="https://bugzilla.suse.com/1191193" source="BUGZILLA"/>
		<reference ref_id="1191315" ref_url="https://bugzilla.suse.com/1191315" source="BUGZILLA"/>
		<reference ref_id="1191317" ref_url="https://bugzilla.suse.com/1191317" source="BUGZILLA"/>
		<reference ref_id="1191349" ref_url="https://bugzilla.suse.com/1191349" source="BUGZILLA"/>
		<reference ref_id="1191457" ref_url="https://bugzilla.suse.com/1191457" source="BUGZILLA"/>
		<reference ref_id="1191628" ref_url="https://bugzilla.suse.com/1191628" source="BUGZILLA"/>
		<reference ref_id="1191790" ref_url="https://bugzilla.suse.com/1191790" source="BUGZILLA"/>
		<reference ref_id="1191800" ref_url="https://bugzilla.suse.com/1191800" source="BUGZILLA"/>
		<reference ref_id="1191888" ref_url="https://bugzilla.suse.com/1191888" source="BUGZILLA"/>
		<reference ref_id="1191961" ref_url="https://bugzilla.suse.com/1191961" source="BUGZILLA"/>
		<reference ref_id="1192045" ref_url="https://bugzilla.suse.com/1192045" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="1192379" ref_url="https://bugzilla.suse.com/1192379" source="BUGZILLA"/>
		<reference ref_id="1192400" ref_url="https://bugzilla.suse.com/1192400" source="BUGZILLA"/>
		<reference ref_id="1192775" ref_url="https://bugzilla.suse.com/1192775" source="BUGZILLA"/>
		<reference ref_id="1192781" ref_url="https://bugzilla.suse.com/1192781" source="BUGZILLA"/>
		<reference ref_id="1192802" ref_url="https://bugzilla.suse.com/1192802" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-13405" ref_url="https://www.suse.com/security/cve/CVE-2018-13405/" source="CVE"/>
		<reference ref_id="CVE-2018-9517" ref_url="https://www.suse.com/security/cve/CVE-2018-9517/" source="CVE"/>
		<reference ref_id="CVE-2019-3874" ref_url="https://www.suse.com/security/cve/CVE-2019-3874/" source="CVE"/>
		<reference ref_id="CVE-2019-3900" ref_url="https://www.suse.com/security/cve/CVE-2019-3900/" source="CVE"/>
		<reference ref_id="CVE-2020-0429" ref_url="https://www.suse.com/security/cve/CVE-2020-0429/" source="CVE"/>
		<reference ref_id="CVE-2020-12770" ref_url="https://www.suse.com/security/cve/CVE-2020-12770/" source="CVE"/>
		<reference ref_id="CVE-2020-3702" ref_url="https://www.suse.com/security/cve/CVE-2020-3702/" source="CVE"/>
		<reference ref_id="CVE-2020-4788" ref_url="https://www.suse.com/security/cve/CVE-2020-4788/" source="CVE"/>
		<reference ref_id="CVE-2021-0941" ref_url="https://www.suse.com/security/cve/CVE-2021-0941/" source="CVE"/>
		<reference ref_id="CVE-2021-20322" ref_url="https://www.suse.com/security/cve/CVE-2021-20322/" source="CVE"/>
		<reference ref_id="CVE-2021-22543" ref_url="https://www.suse.com/security/cve/CVE-2021-22543/" source="CVE"/>
		<reference ref_id="CVE-2021-31916" ref_url="https://www.suse.com/security/cve/CVE-2021-31916/" source="CVE"/>
		<reference ref_id="CVE-2021-33033" ref_url="https://www.suse.com/security/cve/CVE-2021-33033/" source="CVE"/>
		<reference ref_id="CVE-2021-33909" ref_url="https://www.suse.com/security/cve/CVE-2021-33909/" source="CVE"/>
		<reference ref_id="CVE-2021-34556" ref_url="https://www.suse.com/security/cve/CVE-2021-34556/" source="CVE"/>
		<reference ref_id="CVE-2021-34981" ref_url="https://www.suse.com/security/cve/CVE-2021-34981/" source="CVE"/>
		<reference ref_id="CVE-2021-3542" ref_url="https://www.suse.com/security/cve/CVE-2021-3542/" source="CVE"/>
		<reference ref_id="CVE-2021-35477" ref_url="https://www.suse.com/security/cve/CVE-2021-35477/" source="CVE"/>
		<reference ref_id="CVE-2021-3640" ref_url="https://www.suse.com/security/cve/CVE-2021-3640/" source="CVE"/>
		<reference ref_id="CVE-2021-3653" ref_url="https://www.suse.com/security/cve/CVE-2021-3653/" source="CVE"/>
		<reference ref_id="CVE-2021-3655" ref_url="https://www.suse.com/security/cve/CVE-2021-3655/" source="CVE"/>
		<reference ref_id="CVE-2021-3656" ref_url="https://www.suse.com/security/cve/CVE-2021-3656/" source="CVE"/>
		<reference ref_id="CVE-2021-3659" ref_url="https://www.suse.com/security/cve/CVE-2021-3659/" source="CVE"/>
		<reference ref_id="CVE-2021-3679" ref_url="https://www.suse.com/security/cve/CVE-2021-3679/" source="CVE"/>
		<reference ref_id="CVE-2021-3715" ref_url="https://www.suse.com/security/cve/CVE-2021-3715/" source="CVE"/>
		<reference ref_id="CVE-2021-37159" ref_url="https://www.suse.com/security/cve/CVE-2021-37159/" source="CVE"/>
		<reference ref_id="CVE-2021-3732" ref_url="https://www.suse.com/security/cve/CVE-2021-3732/" source="CVE"/>
		<reference ref_id="CVE-2021-3744" ref_url="https://www.suse.com/security/cve/CVE-2021-3744/" source="CVE"/>
		<reference ref_id="CVE-2021-3752" ref_url="https://www.suse.com/security/cve/CVE-2021-3752/" source="CVE"/>
		<reference ref_id="CVE-2021-3753" ref_url="https://www.suse.com/security/cve/CVE-2021-3753/" source="CVE"/>
		<reference ref_id="CVE-2021-37576" ref_url="https://www.suse.com/security/cve/CVE-2021-37576/" source="CVE"/>
		<reference ref_id="CVE-2021-3759" ref_url="https://www.suse.com/security/cve/CVE-2021-3759/" source="CVE"/>
		<reference ref_id="CVE-2021-3760" ref_url="https://www.suse.com/security/cve/CVE-2021-3760/" source="CVE"/>
		<reference ref_id="CVE-2021-3764" ref_url="https://www.suse.com/security/cve/CVE-2021-3764/" source="CVE"/>
		<reference ref_id="CVE-2021-3772" ref_url="https://www.suse.com/security/cve/CVE-2021-3772/" source="CVE"/>
		<reference ref_id="CVE-2021-38160" ref_url="https://www.suse.com/security/cve/CVE-2021-38160/" source="CVE"/>
		<reference ref_id="CVE-2021-38198" ref_url="https://www.suse.com/security/cve/CVE-2021-38198/" source="CVE"/>
		<reference ref_id="CVE-2021-38204" ref_url="https://www.suse.com/security/cve/CVE-2021-38204/" source="CVE"/>
		<reference ref_id="CVE-2021-40490" ref_url="https://www.suse.com/security/cve/CVE-2021-40490/" source="CVE"/>
		<reference ref_id="CVE-2021-41864" ref_url="https://www.suse.com/security/cve/CVE-2021-41864/" source="CVE"/>
		<reference ref_id="CVE-2021-42008" ref_url="https://www.suse.com/security/cve/CVE-2021-42008/" source="CVE"/>
		<reference ref_id="CVE-2021-42252" ref_url="https://www.suse.com/security/cve/CVE-2021-42252/" source="CVE"/>
		<reference ref_id="CVE-2021-42739" ref_url="https://www.suse.com/security/cve/CVE-2021-42739/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3876-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009810.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

  You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

- CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).
- CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).
- CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
- CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails  (bsc#1191961).
- CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).
- CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).
- CVE-2021-3655: Missing size validations on inbound SCTP packets may have allowed the kernel to read uninitialized memory (bnc#1188563).
- CVE-2021-33033: The Linux kernel has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value (bnc#1186109 bnc#1186390 bnc#1188876).
- CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev-&gt;rf_conn_info object (bsc#1190067).
- CVE-2021-42739: The firewire subsystem in the Linux kernel has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bnc#1184673).
- CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).
- CVE-2018-13405: The inode_init_owner function in fs/inode.c in the Linux kernel allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID (bnc#1100416 bnc#1129735).
- CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349).
- CVE-2021-34556: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack (bnc#1188983).
- CVE-2021-35477: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation did not necessarily occur before a store operation that has an attacker-controlled value (bnc#1188985).
- CVE-2021-42252: An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a certain comparison uses values that are not memory sizes (bnc#1190479).
- CVE-2021-41864: prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317).
- CVE-2021-42008: The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access (bnc#1191315).
- CVE-2021-3759: Unaccounted ipc objects could have lead to breaking memcg limits and DoS attacks (bsc#1190115).
- CVE-2020-3702: Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic (bnc#1191193).
- CVE-2021-3752: Fixed a use after free vulnerability in the bluetooth module. (bsc#1190023)
- CVE-2021-40490: A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel (bnc#1190159 bnc#1192775)
- CVE-2021-3744: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1189884)
- CVE-2021-3764: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1190534)
- CVE-2020-12770: An issue was discovered in the Linux kernel sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040 (bnc#1171420).
- CVE-2021-3640: Fixed a Use-After-Free vulnerability in function sco_sock_sendmsg() in the bluetooth stack (bsc#1188172).
- CVE-2019-3900: An infinite loop issue was found in the vhost_net kernel module, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario (bnc#1133374).
- CVE-2019-3874: The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. (bnc#1129898).
- CVE-2018-9517: In pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. (bnc#1108488).
- CVE-2021-38160: Data corruption or loss could be triggered by an untrusted device that supplies a buf-&gt;len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190117)
- CVE-2021-3753: Fixed race out-of-bounds in virtual terminal handling (bsc#1190025).
- CVE-2021-3732: Mounting overlayfs inside an unprivileged user namespace can reveal files (bsc#1189706).
- CVE-2021-3653: A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the 'int_ctl' field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7 (bnc#1189399).
- CVE-2021-3656: Missing validation of the the `virt_ext` VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS for the L2 guest (bsc#1189400).
- CVE-2021-38204: drivers/usb/host/max3421-hcd.c allowed physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations (bnc#1189291).
- CVE-2021-3679: A lack of CPU resource in the tracing module functionality was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service (bnc#1189057).
- CVE-2020-4788: IBM Power9 (AIX 7.1, 7.2, and VIOS 3.1) processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating circumstances. IBM X-Force ID: 189296 (bnc#0 bnc#1177666 bnc#1181158).
- CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (bsc#1188876).
- CVE-2020-0429: In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1176724).
- CVE-2021-37576: arch/powerpc/kvm/book3s_rtas.c on the powerpc platform allowed KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e (bnc#1188838 bnc#1190276).
- CVE-2021-22543: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allowed users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation (bnc#1186482 bnc#1190276).
- CVE-2021-33909: fs/seq_file.c did not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05 (bnc#1188062 bnc#1188063).

The following non-security bugs were fixed:

- Add arch-dependent support markers in supported.conf (bsc#1186672) 
- Add the support for kernel-FLAVOR-optional subpackage (jsc#SLE-11796)
- bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22913)
- bpf: Disallow unprivileged bpf by default (jsc#SLE-22913).
- ceph: take snap_empty_lock atomically with snaprealm refcount change (bsc#1191888).
- config: disable unprivileged BPF by default (jsc#SLE-22913)
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (bsc#1185758,bsc#1192400).
- drm: fix spectre issue in vmw_execbuf_ioctl (bsc#1192802).
- ftrace: Fix scripts/recordmcount.pl due to new binutils (bsc#1192267).
- gigaset: fix spectre issue in do_data_b3_req (bsc#1192802).
- hisax: fix spectre issues (bsc#1192802).
- hv: mana: adjust mana_select_queue to old API (jsc#SLE-18779, bsc#1185726).
- hv: mana: remove netdev_lockdep_set_classes usage (jsc#SLE-18779, bsc#1185726).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial number (jsc#SLE-18779, bsc#1185726).
- hysdn: fix spectre issue in hycapi_send_message (bsc#1192802).
- infiniband: fix spectre issue in ib_uverbs_write (bsc#1192802).
- infiniband: fix spectre issue in ib_uverbs_write (bsc#1192802).
- ipc: remove memcg accounting for sops objects in do_semtimedop() (bsc#1190115).
- iwlwifi: fix spectre issue in iwl_dbgfs_update_pm (bsc#1192802).
- kernel-binary.spec: Exctract s390 decompression code (jsc#SLE-17042).
- kernel-binary.spec: Fix up usrmerge for non-modular kernels.
- kernel-binary.spec.in: build-id check requires elfutils.
- kernel-binary.spec.in: Regenerate makefile when not using mkmakefile.
- kernel-binary.spec: Only use mkmakefile when it exists Linux 5.13 no longer had a mkmakefile script
- kernel-binary.spec: Remove obsolete and wrong comment mkmakefile is repleced by echo on newer kernel
- kernel-docs.spec.in: Build using an utf-8 locale. Sphinx cannot handle UTF-8 input in non-UTF-8 locale.
- media: dvb_ca_en50221: prevent using slot_info for Spectre attacs (bsc#1192802).
- media: dvb_ca_en50221: sanity check slot number from userspace (bsc#1192802).
- media: wl128x: get rid of a potential spectre issue (bsc#1192802).
- memcg: enable accounting for file lock caches (bsc#1190115).
- mm/memory.c: do_fault: avoid usage of stale vm_area_struct (bsc#1136513).
- mpt3sas: fix spectre issues (bsc#1192802).
- net: mana: Add a driver for Microsoft Azure Network Adapter (MANA) (jsc#SLE-18779, bsc#1185726).
- net: mana: Add support for EQ sharing (jsc#SLE-18779, bsc#1185726).
- net: mana: Add WARN_ON_ONCE in case of CQE read overflow (jsc#SLE-18779, bsc#1185726).
- net: mana: Fix a memory leak in an error handling path in (jsc#SLE-18779, bsc#1185726).
- net: mana: Fix error handling in mana_create_rxq() (git-fixes, bsc#1191800).
- net: mana: fix PCI_HYPERV dependency (jsc#SLE-18779, bsc#1185726).
- net: mana: Move NAPI from EQ to CQ (jsc#SLE-18779, bsc#1185726).
- net: mana: Prefer struct_size over open coded arithmetic (jsc#SLE-18779, bsc#1185726).
- net: mana: remove redundant initialization of variable err (jsc#SLE-18779, bsc#1185726).
- net: mana: Use int to check the return value of mana_gd_poll_cq() (jsc#SLE-18779, bsc#1185726).
- net: mana: Use struct_size() in kzalloc() (jsc#SLE-18779, bsc#1185726).
- net_sched: cls_route: remove the right filter from hashtable (networking-stable-20_03_28).
- net: sched: sch_teql: fix null-pointer dereference (bsc#1190717).
- net: sock_diag: Fix spectre v1 gadget in __sock_diag_cmd() (bsc#1192802).
- NFS: Do uncached readdir when we're seeking a cookie in an empty page cache (bsc#1191628).
- objtool: Do not fail on missing symbol table (bsc#1192379).
- osst: fix spectre issue in osst_verify_frame (bsc#1192802).
- ovl: check whiteout in ovl_create_over_whiteout() (bsc#1189846).
- ovl: filter of trusted xattr results in audit (bsc#1189846).
- ovl: fix dentry leak in ovl_get_redirect (bsc#1189846).
- ovl: initialize error in ovl_copy_xattr (bsc#1189846).
- ovl: relax WARN_ON() on rename to self (bsc#1189846).
- PCI: hv: Use expected affinity when unmasking IRQ (bsc#1185973).
- Revert 'memcg: enable accounting for file lock caches (bsc#1190115).' This reverts commit 912b4421a3e9bb9f0ef1aadc64a436666259bd4d. It's effectively upstream commit 3754707bcc3e190e5dadc978d172b61e809cb3bd applied to kernel-source (to avoid proliferation of patches). Make a note in blacklist.conf too.
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (bsc#1190601).
- s390/bpf: Fix branch shortening during codegen pass (bsc#1190601).
- s390/bpf: Fix optimizing out zero-extensions (bsc#1190601).
- s390: bpf: implement jitting of BPF_ALU | BPF_ARSH | BPF_* (bsc#1190601).
- s390/bpf: Wrap JIT macro parameter usages in parentheses (bsc#1190601).
- scripts/git_sort/git_sort.py: add bpf git repo
- scripts/git_sort/git_sort.py: Update nvme repositories
- scsi: libfc: Fix array index out of bound exception (bsc#1188616).
- scsi: lpfc: Fix FLOGI failure due to accessing a freed node (bsc#1191349).
- scsi: lpfc: Fix memory overwrite during FC-GS I/O abort handling (bsc#1191349 bsc#1191457).
- scsi: lpfc: Keep NDLP reference until after freeing the IOCB after ELS handling (bsc#1191349 bsc#1191457).
- scsi: target: avoid using lun_tg_pt_gp after unlock (bsc#1186078).
- sctp: check asoc peer.asconf_capable before processing asconf (bsc#1190351).
- sctp: fully initialize v4 addr in some functions (bsc#1188563).
- sysvipc/sem: mitigate semnum index against spectre v1 (bsc#1192802).
- target: core: Fix sense key for invalid XCOPY request (bsc#1186078).
- Update config files: Add CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
- Use /usr/lib/modules as module dir when usermerge is active in the target distro.
- UsrMerge the kernel (boo#1184804)
- x86/CPU: Add more Icelake model numbers (bsc#1185758,bsc#1192400).
- xfrm: xfrm_state_mtu should return at least 1280 for ipv6 (bsc#1185377).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-02"/>
	<updated date="2021-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1100416">SUSE bug 1100416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108488">SUSE bug 1108488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129735">SUSE bug 1129735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129898">SUSE bug 1129898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133374">SUSE bug 1133374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136513">SUSE bug 1136513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1171420">SUSE bug 1171420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176724">SUSE bug 1176724</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177666">SUSE bug 1177666</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181158">SUSE bug 1181158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184673">SUSE bug 1184673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184804">SUSE bug 1184804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185377">SUSE bug 1185377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185726">SUSE bug 1185726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185758">SUSE bug 1185758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185973">SUSE bug 1185973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186078">SUSE bug 1186078</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186109">SUSE bug 1186109</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186390">SUSE bug 1186390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186482">SUSE bug 1186482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186672">SUSE bug 1186672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188062">SUSE bug 1188062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188063">SUSE bug 1188063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188172">SUSE bug 1188172</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188563">SUSE bug 1188563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188601">SUSE bug 1188601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188616">SUSE bug 1188616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188838">SUSE bug 1188838</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188876">SUSE bug 1188876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188983">SUSE bug 1188983</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188985">SUSE bug 1188985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189057">SUSE bug 1189057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189262">SUSE bug 1189262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189291">SUSE bug 1189291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189399">SUSE bug 1189399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189400">SUSE bug 1189400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189706">SUSE bug 1189706</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189846">SUSE bug 1189846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189884">SUSE bug 1189884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190023">SUSE bug 1190023</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190025">SUSE bug 1190025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190067">SUSE bug 1190067</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190115">SUSE bug 1190115</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190117">SUSE bug 1190117</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190159">SUSE bug 1190159</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190276">SUSE bug 1190276</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190349">SUSE bug 1190349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190351">SUSE bug 1190351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190479">SUSE bug 1190479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190534">SUSE bug 1190534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190601">SUSE bug 1190601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190717">SUSE bug 1190717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191193">SUSE bug 1191193</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191315">SUSE bug 1191315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191317">SUSE bug 1191317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191349">SUSE bug 1191349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191457">SUSE bug 1191457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191628">SUSE bug 1191628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191790">SUSE bug 1191790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191800">SUSE bug 1191800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191888">SUSE bug 1191888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191961">SUSE bug 1191961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192045">SUSE bug 1192045</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192379">SUSE bug 1192379</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192400">SUSE bug 1192400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192775">SUSE bug 1192775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192781">SUSE bug 1192781</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192802">SUSE bug 1192802</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-13405/">CVE-2018-13405</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-9517/">CVE-2018-9517</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3874/">CVE-2019-3874</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-3900/">CVE-2019-3900</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0429/">CVE-2020-0429</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12770/">CVE-2020-12770</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3702/">CVE-2020-3702</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-4788/">CVE-2020-4788</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0941/">CVE-2021-0941</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-20322/">CVE-2021-20322</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22543/">CVE-2021-22543</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31916/">CVE-2021-31916</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33033/">CVE-2021-33033</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33909/">CVE-2021-33909</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-34556/">CVE-2021-34556</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-34981/">CVE-2021-34981</cve>
	<cve impact="important" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3542/">CVE-2021-3542</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-35477/">CVE-2021-35477</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3640/">CVE-2021-3640</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3653/">CVE-2021-3653</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3655/">CVE-2021-3655</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3656/">CVE-2021-3656</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3659/">CVE-2021-3659</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3679/">CVE-2021-3679</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3715/">CVE-2021-3715</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-37159/">CVE-2021-37159</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3732/">CVE-2021-3732</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3744/">CVE-2021-3744</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3752/">CVE-2021-3752</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3753/">CVE-2021-3753</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-37576/">CVE-2021-37576</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3759/">CVE-2021-3759</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3760/">CVE-2021-3760</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3764/">CVE-2021-3764</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3772/">CVE-2021-3772</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38160/">CVE-2021-38160</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38198/">CVE-2021-38198</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38204/">CVE-2021-38204</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-40490/">CVE-2021-40490</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41864/">CVE-2021-41864</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42008/">CVE-2021-42008</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42252/">CVE-2021-42252</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42739/">CVE-2021-42739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658880" comment="kernel-default-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658881" comment="kernel-default-base-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658882" comment="kernel-default-devel-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658155" comment="kernel-default-man-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658119" comment="kernel-devel-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658120" comment="kernel-docs-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658121" comment="kernel-macros-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658883" comment="kernel-obs-build-4.12.14-197.102.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658123" comment="kernel-source-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658884" comment="kernel-syms-4.12.14-197.102.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658885" comment="reiserfs-kmp-default-4.12.14-197.102.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140883" version="1" class="patch">
	<metadata>
		<title>Security update for aaa_base (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1162581" ref_url="https://bugzilla.suse.com/1162581" source="BUGZILLA"/>
		<reference ref_id="1174504" ref_url="https://bugzilla.suse.com/1174504" source="BUGZILLA"/>
		<reference ref_id="1191563" ref_url="https://bugzilla.suse.com/1191563" source="BUGZILLA"/>
		<reference ref_id="1192248" ref_url="https://bugzilla.suse.com/1192248" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:3899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009830.html" source="SUSE-SU"/>
		<description>
This update for aaa_base fixes the following issues:

- Allowed ping and ICMP commands without CAP_NET_RAW (bsc#1174504).
- Add $HOME/.local/bin to PATH, if it exists (bsc#1192248).
- Fixed get_kernel_version.c to work also for recent kernels on the s390/X platform (bsc#1191563).
- Support xz compressed kernel (bsc#1162581)   
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-03"/>
	<updated date="2021-12-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1162581">SUSE bug 1162581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174504">SUSE bug 1174504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191563">SUSE bug 1191563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192248">SUSE bug 1192248</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658779" comment="aaa_base-84.87+git20180409.04c9dae-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658780" comment="aaa_base-extras-84.87+git20180409.04c9dae-3.52.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658789" comment="aaa_base-malloccheck-84.87+git20180409.04c9dae-3.52.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140884" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193170" ref_url="https://bugzilla.suse.com/1193170" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43527" ref_url="https://www.suse.com/security/cve/CVE-2021-43527/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3934-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/020999.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

Update to version 3.68.1:

- CVE-2021-43527: Fixed a Heap overflow in NSS when verifying DER-encoded DSA or RSA-PSS signatures (bsc#1193170).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193170">SUSE bug 1193170</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43527/">CVE-2021-43527</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659026" comment="libfreebl3-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659027" comment="libfreebl3-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659028" comment="libfreebl3-hmac-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659029" comment="libfreebl3-hmac-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659030" comment="libsoftokn3-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659031" comment="libsoftokn3-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659032" comment="libsoftokn3-hmac-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659033" comment="libsoftokn3-hmac-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659034" comment="mozilla-nss-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659035" comment="mozilla-nss-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659036" comment="mozilla-nss-certs-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659037" comment="mozilla-nss-certs-32bit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659038" comment="mozilla-nss-devel-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659039" comment="mozilla-nss-sysinit-3.68.1-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659040" comment="mozilla-nss-tools-3.68.1-3.61.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140885" version="1" class="patch">
	<metadata>
		<title>Security update for openssh (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1190975" ref_url="https://bugzilla.suse.com/1190975" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-41617" ref_url="https://www.suse.com/security/cve/CVE-2021-41617/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009854.html" source="SUSE-SU"/>
		<description>
This update for openssh fixes the following issues:

- CVE-2021-41617: Fixed privilege escalation when AuthorizedKeysCommand/AuthorizedPrincipalsCommand are configured (bsc#1190975).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190975">SUSE bug 1190975</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41617/">CVE-2021-41617</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659065" comment="openssh-7.9p1-6.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659066" comment="openssh-askpass-gnome-7.9p1-6.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659067" comment="openssh-fips-7.9p1-6.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659068" comment="openssh-helpers-7.9p1-6.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140886" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1173028" ref_url="https://bugzilla.suse.com/1173028" source="BUGZILLA"/>
		<reference ref_id="1186031" ref_url="https://bugzilla.suse.com/1186031" source="BUGZILLA"/>
		<reference ref_id="1192497" ref_url="https://bugzilla.suse.com/1192497" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-35604" ref_url="https://www.suse.com/security/cve/CVE-2021-35604/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3948-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009852.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issue:
    
- Update to 10.2.41:
- CVE-2021-35604: Fixed InnoDB vulnerability that allowed an high privileged attacker with network access via multiple protocols to compromise MySQL (bsc#1192497).
    
- Add missing dependency to liblz4 to enable lz4 compression for INNODB (bsc#1186031). 
- Add a 'mysql-user.conf' file to let 'systemd' generate mysql user in containers. (bsc#1173028)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1173028">SUSE bug 1173028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186031">SUSE bug 1186031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192497">SUSE bug 1192497</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-35604/">CVE-2021-35604</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657823" comment="libmysqld-devel-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657824" comment="libmysqld19-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657825" comment="mariadb-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657826" comment="mariadb-client-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657765" comment="mariadb-errormessages-10.2.41-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657827" comment="mariadb-tools-10.2.41-3.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140887" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188284" ref_url="https://bugzilla.suse.com/1188284" source="BUGZILLA"/>
		<reference ref_id="1192346" ref_url="https://bugzilla.suse.com/1192346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:3949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009859.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

- Update to 0.103.4 (bsc#1192346).
- Update to 0.103.3 (bsc#1188284).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-06"/>
	<updated date="2021-12-06"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1188284">SUSE bug 1188284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192346">SUSE bug 1192346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009656934" comment="clamav-0.103.4-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656935" comment="clamav-devel-0.103.4-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656936" comment="libclamav9-0.103.4-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656937" comment="libfreshclam2-0.103.4-3.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140888" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1027519" ref_url="https://bugzilla.suse.com/1027519" source="BUGZILLA"/>
		<reference ref_id="1189632" ref_url="https://bugzilla.suse.com/1189632" source="BUGZILLA"/>
		<reference ref_id="1191363" ref_url="https://bugzilla.suse.com/1191363" source="BUGZILLA"/>
		<reference ref_id="1192554" ref_url="https://bugzilla.suse.com/1192554" source="BUGZILLA"/>
		<reference ref_id="1192557" ref_url="https://bugzilla.suse.com/1192557" source="BUGZILLA"/>
		<reference ref_id="1192559" ref_url="https://bugzilla.suse.com/1192559" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28701" ref_url="https://www.suse.com/security/cve/CVE-2021-28701/" source="CVE"/>
		<reference ref_id="CVE-2021-28702" ref_url="https://www.suse.com/security/cve/CVE-2021-28702/" source="CVE"/>
		<reference ref_id="CVE-2021-28704" ref_url="https://www.suse.com/security/cve/CVE-2021-28704/" source="CVE"/>
		<reference ref_id="CVE-2021-28705" ref_url="https://www.suse.com/security/cve/CVE-2021-28705/" source="CVE"/>
		<reference ref_id="CVE-2021-28706" ref_url="https://www.suse.com/security/cve/CVE-2021-28706/" source="CVE"/>
		<reference ref_id="CVE-2021-28707" ref_url="https://www.suse.com/security/cve/CVE-2021-28707/" source="CVE"/>
		<reference ref_id="CVE-2021-28708" ref_url="https://www.suse.com/security/cve/CVE-2021-28708/" source="CVE"/>
		<reference ref_id="CVE-2021-28709" ref_url="https://www.suse.com/security/cve/CVE-2021-28709/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3977-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009874.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2021-28701: Fixed race condition in XENMAPSPACE_grant_table handling (XSA-384) (bsc#1189632).
- CVE-2021-28702: Fixed PCI devices with RMRRs not deassigned correctly (XSA-386) (bsc#1191363).
- CVE-2021-28704, CVE-2021-28707, CVE-2021-28708: Fixed PoD operations on misaligned GFNs (XSA-388) (bsc#1192557).
- CVE-2021-28705, CVE-2021-28709: Fixed issues with partially successful P2M updates on x86 (XSA-389) (bsc#1192559).
- CVE-2021-28706: Fixed guests may exceed their designated memory limit (XSA-385) (bsc#1192554).

- Upstream bug fixes (bsc#1027519)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-09"/>
	<updated date="2021-12-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1027519">SUSE bug 1027519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189632">SUSE bug 1189632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191363">SUSE bug 1191363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192554">SUSE bug 1192554</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192557">SUSE bug 1192557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192559">SUSE bug 1192559</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-28701/">CVE-2021-28701</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28702/">CVE-2021-28702</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28704/">CVE-2021-28704</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28705/">CVE-2021-28705</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28706/">CVE-2021-28706</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28707/">CVE-2021-28707</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28708/">CVE-2021-28708</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28709/">CVE-2021-28709</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009658607" comment="xen-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658608" comment="xen-devel-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658609" comment="xen-libs-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658610" comment="xen-tools-4.12.4_16-3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009658611" comment="xen-tools-domU-4.12.4_16-3.57.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140889" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193321" ref_url="https://bugzilla.suse.com/1193321" source="BUGZILLA"/>
		<reference ref_id="1193485" ref_url="https://bugzilla.suse.com/1193485" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43536" ref_url="https://www.suse.com/security/cve/CVE-2021-43536/" source="CVE"/>
		<reference ref_id="CVE-2021-43537" ref_url="https://www.suse.com/security/cve/CVE-2021-43537/" source="CVE"/>
		<reference ref_id="CVE-2021-43538" ref_url="https://www.suse.com/security/cve/CVE-2021-43538/" source="CVE"/>
		<reference ref_id="CVE-2021-43539" ref_url="https://www.suse.com/security/cve/CVE-2021-43539/" source="CVE"/>
		<reference ref_id="CVE-2021-43541" ref_url="https://www.suse.com/security/cve/CVE-2021-43541/" source="CVE"/>
		<reference ref_id="CVE-2021-43542" ref_url="https://www.suse.com/security/cve/CVE-2021-43542/" source="CVE"/>
		<reference ref_id="CVE-2021-43543" ref_url="https://www.suse.com/security/cve/CVE-2021-43543/" source="CVE"/>
		<reference ref_id="CVE-2021-43545" ref_url="https://www.suse.com/security/cve/CVE-2021-43545/" source="CVE"/>
		<reference ref_id="CVE-2021-43546" ref_url="https://www.suse.com/security/cve/CVE-2021-43546/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3995-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-December/021069.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:


Update to Extended Support Release 91.4.0 (bsc#1193485):

- CVE-2021-43536: URL leakage when navigating while executing asynchronous function
- CVE-2021-43537: Heap buffer overflow when using structured clone
- CVE-2021-43538: Missing fullscreen and pointer lock notification when requesting both
- CVE-2021-43539: GC rooting failure when calling wasm instance methods
- CVE-2021-43541: External protocol handler parameters were unescaped
- CVE-2021-43542: XMLHttpRequest error codes could have leaked the existence of an external protocol handler
- CVE-2021-43543: Bypass of CSP sandbox directive when embedding
- CVE-2021-43545: Denial of Service when using the Location API in a loop
- CVE-2021-43546: Cursor spoofing could overlay user interface when native cursor is zoomed
- Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4
- Removed x-scheme-handler/ftp from MozillaFirefox.desktop (bsc#1193321)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-10"/>
	<updated date="2021-12-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193321">SUSE bug 1193321</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193485">SUSE bug 1193485</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43536/">CVE-2021-43536</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43537/">CVE-2021-43537</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43538/">CVE-2021-43538</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43539/">CVE-2021-43539</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43541/">CVE-2021-43541</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43542/">CVE-2021-43542</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43543/">CVE-2021-43543</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-43545/">CVE-2021-43545</cve>
	<cve impact="important" cvss3="5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-43546/">CVE-2021-43546</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659338" comment="MozillaFirefox-91.4.0-150.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659339" comment="MozillaFirefox-devel-91.4.0-150.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659340" comment="MozillaFirefox-translations-common-91.4.0-150.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659341" comment="MozillaFirefox-translations-other-91.4.0-150.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140890" version="1" class="patch">
	<metadata>
		<title>Security update for glib-networking (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1172460" ref_url="https://bugzilla.suse.com/1172460" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13645" ref_url="https://www.suse.com/security/cve/CVE-2020-13645/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:3997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009879.html" source="SUSE-SU"/>
		<description>
This update for glib-networking fixes the following issues:

- CVE-2020-13645: Fixed a connection failure when the server identity is unset (bsc#1172460).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-10"/>
	<updated date="2021-12-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172460">SUSE bug 1172460</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-13645/">CVE-2020-13645</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659053" comment="glib-networking-2.54.1-3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659043" comment="glib-networking-lang-2.54.1-3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140891" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180125" ref_url="https://bugzilla.suse.com/1180125" source="BUGZILLA"/>
		<reference ref_id="1183374" ref_url="https://bugzilla.suse.com/1183374" source="BUGZILLA"/>
		<reference ref_id="1183858" ref_url="https://bugzilla.suse.com/1183858" source="BUGZILLA"/>
		<reference ref_id="1185588" ref_url="https://bugzilla.suse.com/1185588" source="BUGZILLA"/>
		<reference ref_id="1187338" ref_url="https://bugzilla.suse.com/1187338" source="BUGZILLA"/>
		<reference ref_id="1187668" ref_url="https://bugzilla.suse.com/1187668" source="BUGZILLA"/>
		<reference ref_id="1189241" ref_url="https://bugzilla.suse.com/1189241" source="BUGZILLA"/>
		<reference ref_id="1189287" ref_url="https://bugzilla.suse.com/1189287" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3426" ref_url="https://www.suse.com/security/cve/CVE-2021-3426/" source="CVE"/>
		<reference ref_id="CVE-2021-3733" ref_url="https://www.suse.com/security/cve/CVE-2021-3733/" source="CVE"/>
		<reference ref_id="CVE-2021-3737" ref_url="https://www.suse.com/security/cve/CVE-2021-3737/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4015-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009941.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:


- CVE-2021-3737: Fixed http client infinite line reading (DoS) after a http 100. (bsc#1189241)
- CVE-2021-3733: Fixed ReDoS in urllib.request. (bsc#1189287)
- CVE-2021-3426: Fixed an information disclosure via pydoc. (bsc#1183374)

- Rebuild to get new headers, avoid building in support for stropts.h (bsc#1187338).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-23"/>
	<updated date="2021-12-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1180125">SUSE bug 1180125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183374">SUSE bug 1183374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183858">SUSE bug 1183858</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185588">SUSE bug 1185588</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187338">SUSE bug 1187338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187668">SUSE bug 1187668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189241">SUSE bug 1189241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189287">SUSE bug 1189287</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3426/">CVE-2021-3426</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3733/">CVE-2021-3733</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3737/">CVE-2021-3737</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659016" comment="libpython3_6m1_0-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659017" comment="python3-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659018" comment="python3-base-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659019" comment="python3-curses-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659020" comment="python3-dbm-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659021" comment="python3-devel-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659022" comment="python3-idle-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661291" comment="python3-testsuite-3.6.15-3.91.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659023" comment="python3-tk-3.6.15-3.91.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659024" comment="python3-tools-3.6.15-3.91.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140892" version="1" class="patch">
	<metadata>
		<title>Security update for fetchmail (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1152964" ref_url="https://bugzilla.suse.com/1152964" source="BUGZILLA"/>
		<reference ref_id="1174075" ref_url="https://bugzilla.suse.com/1174075" source="BUGZILLA"/>
		<reference ref_id="1181400" ref_url="https://bugzilla.suse.com/1181400" source="BUGZILLA"/>
		<reference ref_id="1188875" ref_url="https://bugzilla.suse.com/1188875" source="BUGZILLA"/>
		<reference ref_id="1190069" ref_url="https://bugzilla.suse.com/1190069" source="BUGZILLA"/>
		<reference ref_id="1190896" ref_url="https://bugzilla.suse.com/1190896" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36386" ref_url="https://www.suse.com/security/cve/CVE-2021-36386/" source="CVE"/>
		<reference ref_id="CVE-2021-39272" ref_url="https://www.suse.com/security/cve/CVE-2021-39272/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4018-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009892.html" source="SUSE-SU"/>
		<description>
This update for fetchmail fixes the following issues:

- CVE-2021-36386: Fixed DoS or information disclosure in some configurations (bsc#1188875).
- CVE-2021-39272: Fixed STARTTLS session encryption bypassing (fetchmail-SA-2021-02) (bsc#1190069).

- Update to 6.4.22 (bsc#1152964, jsc#SLE-18159, jsc#SLE-17903, jsc#SLE-18059)
- Remove all python2 dependencies (bsc#1190896).
- De-hardcode /usr/lib path for launch executable (bsc#1174075).
- Added hardening to systemd service(s) (bsc#1181400).
  		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1152964">SUSE bug 1152964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174075">SUSE bug 1174075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181400">SUSE bug 1181400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188875">SUSE bug 1188875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190069">SUSE bug 1190069</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190896">SUSE bug 1190896</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-36386/">CVE-2021-36386</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39272/">CVE-2021-39272</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009657429" comment="fetchmail-6.4.22-20.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009657445" comment="fetchmailconf-6.4.22-20.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140893" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192516" ref_url="https://bugzilla.suse.com/1192516" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23214" ref_url="https://www.suse.com/security/cve/CVE-2021-23214/" source="CVE"/>
		<reference ref_id="CVE-2021-23222" ref_url="https://www.suse.com/security/cve/CVE-2021-23222/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009898.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:
          
- CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).
- CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake (bsc#1192516).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192516">SUSE bug 1192516</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23214/">CVE-2021-23214</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23222/">CVE-2021-23222</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009656416" comment="postgresql10-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656420" comment="postgresql10-contrib-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656421" comment="postgresql10-devel-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656465" comment="postgresql10-docs-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656422" comment="postgresql10-plperl-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656423" comment="postgresql10-plpython-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656424" comment="postgresql10-pltcl-10.19-8.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009656425" comment="postgresql10-server-10.19-8.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140894" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193030" ref_url="https://bugzilla.suse.com/1193030" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4008" ref_url="https://www.suse.com/security/cve/CVE-2021-4008/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4071-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009900.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2021-4008: Fixed Privilege Escalation Vulnerability via Out-Of-Bounds Access in SProcRenderCompositeGlyphs (bsc#1193030).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-14"/>
	<updated date="2021-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193030">SUSE bug 1193030</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4008/">CVE-2021-4008</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659836" comment="xorg-x11-server-1.20.3-14.5.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659837" comment="xorg-x11-server-extra-1.20.3-14.5.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659838" comment="xorg-x11-server-sdk-1.20.3-14.5.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140895" version="1" class="patch">
	<metadata>
		<title>Security update for log4j (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193662" ref_url="https://bugzilla.suse.com/1193662" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4104" ref_url="https://www.suse.com/security/cve/CVE-2021-4104/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009917.html" source="SUSE-SU"/>
		<description>
This update for log4j fixes the following issue:

- CVE-2021-4104: Disable the JMSAppender class from log4j to protect against
  the log4jshell vulnerability. [bsc#1193662]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-17"/>
	<updated date="2021-12-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193662">SUSE bug 1193662</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4104/">CVE-2021-4104</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009660100" comment="log4j-1.2.17-5.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660101" comment="log4j-manual-1.2.17-5.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140896" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1190487" ref_url="https://bugzilla.suse.com/1190487" source="BUGZILLA"/>
		<reference ref_id="1190488" ref_url="https://bugzilla.suse.com/1190488" source="BUGZILLA"/>
		<reference ref_id="1190489" ref_url="https://bugzilla.suse.com/1190489" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4009" ref_url="https://www.suse.com/security/cve/CVE-2021-4009/" source="CVE"/>
		<reference ref_id="CVE-2021-4010" ref_url="https://www.suse.com/security/cve/CVE-2021-4010/" source="CVE"/>
		<reference ref_id="CVE-2021-4011" ref_url="https://www.suse.com/security/cve/CVE-2021-4011/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4122-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009921.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes 
  extension does not properly validate the request length leading to out of 
  bounds memory write. (bsc#1190487)
- CVE-2021-4010: The handler for the Suspend request of the Screen Saver extension
  does not properly validate the request length leading to out of
  bounds memory write. (bsc#1190488)
- CVE-2021-4011: The handlers for the RecordCreateContext and RecordRegisterClients
  requests of the Record extension do not properly validate the request
  length leading to out of bounds memory write. (bsc#1190489)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-20"/>
	<updated date="2021-12-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190487">SUSE bug 1190487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190488">SUSE bug 1190488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190489">SUSE bug 1190489</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4009/">CVE-2021-4009</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4010/">CVE-2021-4010</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4011/">CVE-2021-4011</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009660296" comment="xorg-x11-server-1.20.3-14.5.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660297" comment="xorg-x11-server-extra-1.20.3-14.5.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009660298" comment="xorg-x11-server-sdk-1.20.3-14.5.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140897" version="1" class="patch">
	<metadata>
		<title>Security update for p11-kit (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180064" ref_url="https://bugzilla.suse.com/1180064" source="BUGZILLA"/>
		<reference ref_id="1187993" ref_url="https://bugzilla.suse.com/1187993" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-29361" ref_url="https://www.suse.com/security/cve/CVE-2020-29361/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:4154-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-December/009932.html" source="SUSE-SU"/>
		<description>
This update for p11-kit fixes the following issues:

- CVE-2020-29361: Fixed multiple integer overflows in rpc code (bsc#1180064)
- Add support for CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER (bsc#1187993).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-12-22"/>
	<updated date="2021-12-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180064">SUSE bug 1180064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187993">SUSE bug 1187993</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29361/">CVE-2020-29361</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009659793" comment="libp11-kit0-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659794" comment="libp11-kit0-32bit-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659795" comment="p11-kit-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659796" comment="p11-kit-devel-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659797" comment="p11-kit-nss-trust-0.23.2-4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009659798" comment="p11-kit-tools-0.23.2-4.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140898" version="1" class="patch">
	<metadata>
		<title>Security update for subversion (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181687" ref_url="https://bugzilla.suse.com/1181687" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-17525" ref_url="https://www.suse.com/security/cve/CVE-2020-17525/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0425-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008302.html" source="SUSE-SU"/>
		<description>
This update for subversion fixes the following issues:

- CVE-2020-17525: A null-pointer-dereference has been found in mod_authz_svn that results in
    a remote unauthenticated Denial-of-Service in some server configurations (bsc#1181687).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-10"/>
	<updated date="2021-02-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181687">SUSE bug 1181687</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-17525/">CVE-2020-17525</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494106" comment="subversion-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496589" comment="subversion-bash-completion-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494107" comment="subversion-devel-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496590" comment="subversion-perl-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496591" comment="subversion-python-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500004" comment="subversion-server-1.10.6-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496592" comment="subversion-tools-1.10.6-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140899" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1174075" ref_url="https://bugzilla.suse.com/1174075" source="BUGZILLA"/>
		<reference ref_id="1176708" ref_url="https://bugzilla.suse.com/1176708" source="BUGZILLA"/>
		<reference ref_id="1178801" ref_url="https://bugzilla.suse.com/1178801" source="BUGZILLA"/>
		<reference ref_id="1178969" ref_url="https://bugzilla.suse.com/1178969" source="BUGZILLA"/>
		<reference ref_id="1180243" ref_url="https://bugzilla.suse.com/1180243" source="BUGZILLA"/>
		<reference ref_id="1180401" ref_url="https://bugzilla.suse.com/1180401" source="BUGZILLA"/>
		<reference ref_id="1181730" ref_url="https://bugzilla.suse.com/1181730" source="BUGZILLA"/>
		<reference ref_id="1181732" ref_url="https://bugzilla.suse.com/1181732" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-15257" ref_url="https://www.suse.com/security/cve/CVE-2020-15257/" source="CVE"/>
		<reference ref_id="CVE-2021-21284" ref_url="https://www.suse.com/security/cve/CVE-2021-21284/" source="CVE"/>
		<reference ref_id="CVE-2021-21285" ref_url="https://www.suse.com/security/cve/CVE-2021-21285/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0435-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008311.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues:

Security issues fixed:

- CVE-2020-15257: Fixed a privilege escalation in containerd (bsc#1178969).
- CVE-2021-21284: potential privilege escalation when the root user in the remapped namespace has access to the host filesystem (bsc#1181732)
- CVE-2021-21285: pulling a malformed Docker image manifest crashes the dockerd daemon (bsc#1181730)

Non-security issues fixed:

- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).

- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. (bsc#1180401)

- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1180243

- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  bsc#1176708

- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14

- Enable fish-completion

- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (bsc#1178801, SLE-16460)

- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708

- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)

- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.

- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.

- Update to libnetwork 55e924b8a842, which is required for Docker 19.03.14-ce.
  bsc#1180243

- Add patch which makes libnetwork compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (bsc#1178801, SLE-16460)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-11"/>
	<updated date="2021-02-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174075">SUSE bug 1174075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176708">SUSE bug 1176708</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178801">SUSE bug 1178801</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178969">SUSE bug 1178969</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180243">SUSE bug 1180243</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180401">SUSE bug 1180401</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181730">SUSE bug 1181730</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181732">SUSE bug 1181732</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15257/">CVE-2020-15257</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21284/">CVE-2021-21284</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21285/">CVE-2021-21285</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494427" comment="containerd-1.3.9-5.29.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494428" comment="docker-19.03.15_ce-6.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494429" comment="docker-bash-completion-19.03.15_ce-6.43.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494430" comment="docker-libnetwork-0.7.0.1+gitr2908_55e924b8a842-4.28.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494431" comment="docker-runc-1.0.0rc10+gitr3981_dc9208a3303f-6.45.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140900" version="1" class="patch">
	<metadata>
		<title>Security update for openvswitch (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181742" ref_url="https://bugzilla.suse.com/1181742" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-35498" ref_url="https://www.suse.com/security/cve/CVE-2020-35498/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0439-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008313.html" source="SUSE-SU"/>
		<description>
This update for openvswitch fixes the following issues:

- CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-11"/>
	<updated date="2021-02-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181742">SUSE bug 1181742</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35498/">CVE-2020-35498</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505889" comment="libopenvswitch-2_11-0-2.11.5-3.15.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505890" comment="openvswitch-2.11.5-3.15.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505891" comment="openvswitch-devel-2.11.5-3.15.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140901" version="1" class="patch">
	<metadata>
		<title>Security update for wpa_supplicant (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181777" ref_url="https://bugzilla.suse.com/1181777" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0326" ref_url="https://www.suse.com/security/cve/CVE-2021-0326/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0443-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008316.html" source="SUSE-SU"/>
		<description>
This update for wpa_supplicant fixes the following issues:

- CVE-2021-0326: P2P group information processing vulnerability (bsc#1181777).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-11"/>
	<updated date="2021-02-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181777">SUSE bug 1181777</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0326/">CVE-2021-0326</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494108" comment="wpa_supplicant-2.9-4.23.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140902" version="1" class="patch">
	<metadata>
		<title>Security update for jasper (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179748" ref_url="https://bugzilla.suse.com/1179748" source="BUGZILLA"/>
		<reference ref_id="1181483" ref_url="https://bugzilla.suse.com/1181483" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27828" ref_url="https://www.suse.com/security/cve/CVE-2020-27828/" source="CVE"/>
		<reference ref_id="CVE-2021-3272" ref_url="https://www.suse.com/security/cve/CVE-2021-3272/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0488-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008334.html" source="SUSE-SU"/>
		<description>
This update for jasper fixes the following issues:

- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
- bsc#1181483 CVE-2021-3272: Fix buffer over-read in jp2_decode
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-16"/>
	<updated date="2021-02-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179748">SUSE bug 1179748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181483">SUSE bug 1181483</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27828/">CVE-2020-27828</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3272/">CVE-2021-3272</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495839" comment="libjasper-devel-2.0.14-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494109" comment="libjasper4-2.0.14-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140903" version="1" class="patch">
	<metadata>
		<title>Security update for screen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182092" ref_url="https://bugzilla.suse.com/1182092" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26937" ref_url="https://www.suse.com/security/cve/CVE-2021-26937/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0492-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008337.html" source="SUSE-SU"/>
		<description>
This update for screen fixes the following issues:

- CVE-2021-26937: Fixed double width combining char handling that could lead to a denial of service or code execution (bsc#1182092).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-17"/>
	<updated date="2021-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182092">SUSE bug 1182092</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26937/">CVE-2021-26937</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494110" comment="screen-4.6.2-5.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140904" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182246" ref_url="https://bugzilla.suse.com/1182246" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-8625" ref_url="https://www.suse.com/security/cve/CVE-2020-8625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0507-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008340.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack [bsc#1182246]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-18"/>
	<updated date="2021-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182246">SUSE bug 1182246</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-8625/">CVE-2020-8625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500018" comment="bind-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500019" comment="bind-chrootenv-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494111" comment="bind-devel-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500020" comment="bind-doc-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494112" comment="bind-utils-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494113" comment="libbind9-1600-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494114" comment="libdns1605-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494115" comment="libirs-devel-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494116" comment="libirs1601-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494117" comment="libisc1606-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494118" comment="libisccc1600-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494119" comment="libisccfg1600-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494120" comment="libns1604-9.16.6-12.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494121" comment="python3-bind-9.16.6-12.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140905" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1046305" ref_url="https://bugzilla.suse.com/1046305" source="BUGZILLA"/>
		<reference ref_id="1046306" ref_url="https://bugzilla.suse.com/1046306" source="BUGZILLA"/>
		<reference ref_id="1046540" ref_url="https://bugzilla.suse.com/1046540" source="BUGZILLA"/>
		<reference ref_id="1046542" ref_url="https://bugzilla.suse.com/1046542" source="BUGZILLA"/>
		<reference ref_id="1046648" ref_url="https://bugzilla.suse.com/1046648" source="BUGZILLA"/>
		<reference ref_id="1050242" ref_url="https://bugzilla.suse.com/1050242" source="BUGZILLA"/>
		<reference ref_id="1050244" ref_url="https://bugzilla.suse.com/1050244" source="BUGZILLA"/>
		<reference ref_id="1050536" ref_url="https://bugzilla.suse.com/1050536" source="BUGZILLA"/>
		<reference ref_id="1050538" ref_url="https://bugzilla.suse.com/1050538" source="BUGZILLA"/>
		<reference ref_id="1050545" ref_url="https://bugzilla.suse.com/1050545" source="BUGZILLA"/>
		<reference ref_id="1056653" ref_url="https://bugzilla.suse.com/1056653" source="BUGZILLA"/>
		<reference ref_id="1056657" ref_url="https://bugzilla.suse.com/1056657" source="BUGZILLA"/>
		<reference ref_id="1056787" ref_url="https://bugzilla.suse.com/1056787" source="BUGZILLA"/>
		<reference ref_id="1064802" ref_url="https://bugzilla.suse.com/1064802" source="BUGZILLA"/>
		<reference ref_id="1066129" ref_url="https://bugzilla.suse.com/1066129" source="BUGZILLA"/>
		<reference ref_id="1073513" ref_url="https://bugzilla.suse.com/1073513" source="BUGZILLA"/>
		<reference ref_id="1074220" ref_url="https://bugzilla.suse.com/1074220" source="BUGZILLA"/>
		<reference ref_id="1075020" ref_url="https://bugzilla.suse.com/1075020" source="BUGZILLA"/>
		<reference ref_id="1086282" ref_url="https://bugzilla.suse.com/1086282" source="BUGZILLA"/>
		<reference ref_id="1086301" ref_url="https://bugzilla.suse.com/1086301" source="BUGZILLA"/>
		<reference ref_id="1086313" ref_url="https://bugzilla.suse.com/1086313" source="BUGZILLA"/>
		<reference ref_id="1086314" ref_url="https://bugzilla.suse.com/1086314" source="BUGZILLA"/>
		<reference ref_id="1098633" ref_url="https://bugzilla.suse.com/1098633" source="BUGZILLA"/>
		<reference ref_id="1103990" ref_url="https://bugzilla.suse.com/1103990" source="BUGZILLA"/>
		<reference ref_id="1103991" ref_url="https://bugzilla.suse.com/1103991" source="BUGZILLA"/>
		<reference ref_id="1103992" ref_url="https://bugzilla.suse.com/1103992" source="BUGZILLA"/>
		<reference ref_id="1104270" ref_url="https://bugzilla.suse.com/1104270" source="BUGZILLA"/>
		<reference ref_id="1104277" ref_url="https://bugzilla.suse.com/1104277" source="BUGZILLA"/>
		<reference ref_id="1104279" ref_url="https://bugzilla.suse.com/1104279" source="BUGZILLA"/>
		<reference ref_id="1104353" ref_url="https://bugzilla.suse.com/1104353" source="BUGZILLA"/>
		<reference ref_id="1104427" ref_url="https://bugzilla.suse.com/1104427" source="BUGZILLA"/>
		<reference ref_id="1104742" ref_url="https://bugzilla.suse.com/1104742" source="BUGZILLA"/>
		<reference ref_id="1104745" ref_url="https://bugzilla.suse.com/1104745" source="BUGZILLA"/>
		<reference ref_id="1109837" ref_url="https://bugzilla.suse.com/1109837" source="BUGZILLA"/>
		<reference ref_id="1111981" ref_url="https://bugzilla.suse.com/1111981" source="BUGZILLA"/>
		<reference ref_id="1112178" ref_url="https://bugzilla.suse.com/1112178" source="BUGZILLA"/>
		<reference ref_id="1112374" ref_url="https://bugzilla.suse.com/1112374" source="BUGZILLA"/>
		<reference ref_id="1113956" ref_url="https://bugzilla.suse.com/1113956" source="BUGZILLA"/>
		<reference ref_id="1119113" ref_url="https://bugzilla.suse.com/1119113" source="BUGZILLA"/>
		<reference ref_id="1126206" ref_url="https://bugzilla.suse.com/1126206" source="BUGZILLA"/>
		<reference ref_id="1126390" ref_url="https://bugzilla.suse.com/1126390" source="BUGZILLA"/>
		<reference ref_id="1127354" ref_url="https://bugzilla.suse.com/1127354" source="BUGZILLA"/>
		<reference ref_id="1127371" ref_url="https://bugzilla.suse.com/1127371" source="BUGZILLA"/>
		<reference ref_id="1129770" ref_url="https://bugzilla.suse.com/1129770" source="BUGZILLA"/>
		<reference ref_id="1136348" ref_url="https://bugzilla.suse.com/1136348" source="BUGZILLA"/>
		<reference ref_id="1149032" ref_url="https://bugzilla.suse.com/1149032" source="BUGZILLA"/>
		<reference ref_id="1174206" ref_url="https://bugzilla.suse.com/1174206" source="BUGZILLA"/>
		<reference ref_id="1176831" ref_url="https://bugzilla.suse.com/1176831" source="BUGZILLA"/>
		<reference ref_id="1176846" ref_url="https://bugzilla.suse.com/1176846" source="BUGZILLA"/>
		<reference ref_id="1178036" ref_url="https://bugzilla.suse.com/1178036" source="BUGZILLA"/>
		<reference ref_id="1178049" ref_url="https://bugzilla.suse.com/1178049" source="BUGZILLA"/>
		<reference ref_id="1178900" ref_url="https://bugzilla.suse.com/1178900" source="BUGZILLA"/>
		<reference ref_id="1179093" ref_url="https://bugzilla.suse.com/1179093" source="BUGZILLA"/>
		<reference ref_id="1179142" ref_url="https://bugzilla.suse.com/1179142" source="BUGZILLA"/>
		<reference ref_id="1179508" ref_url="https://bugzilla.suse.com/1179508" source="BUGZILLA"/>
		<reference ref_id="1179509" ref_url="https://bugzilla.suse.com/1179509" source="BUGZILLA"/>
		<reference ref_id="1179563" ref_url="https://bugzilla.suse.com/1179563" source="BUGZILLA"/>
		<reference ref_id="1179573" ref_url="https://bugzilla.suse.com/1179573" source="BUGZILLA"/>
		<reference ref_id="1179575" ref_url="https://bugzilla.suse.com/1179575" source="BUGZILLA"/>
		<reference ref_id="1179878" ref_url="https://bugzilla.suse.com/1179878" source="BUGZILLA"/>
		<reference ref_id="1180130" ref_url="https://bugzilla.suse.com/1180130" source="BUGZILLA"/>
		<reference ref_id="1180765" ref_url="https://bugzilla.suse.com/1180765" source="BUGZILLA"/>
		<reference ref_id="1180812" ref_url="https://bugzilla.suse.com/1180812" source="BUGZILLA"/>
		<reference ref_id="1180891" ref_url="https://bugzilla.suse.com/1180891" source="BUGZILLA"/>
		<reference ref_id="1180912" ref_url="https://bugzilla.suse.com/1180912" source="BUGZILLA"/>
		<reference ref_id="1181018" ref_url="https://bugzilla.suse.com/1181018" source="BUGZILLA"/>
		<reference ref_id="1181170" ref_url="https://bugzilla.suse.com/1181170" source="BUGZILLA"/>
		<reference ref_id="1181230" ref_url="https://bugzilla.suse.com/1181230" source="BUGZILLA"/>
		<reference ref_id="1181231" ref_url="https://bugzilla.suse.com/1181231" source="BUGZILLA"/>
		<reference ref_id="1181260" ref_url="https://bugzilla.suse.com/1181260" source="BUGZILLA"/>
		<reference ref_id="1181349" ref_url="https://bugzilla.suse.com/1181349" source="BUGZILLA"/>
		<reference ref_id="1181425" ref_url="https://bugzilla.suse.com/1181425" source="BUGZILLA"/>
		<reference ref_id="1181504" ref_url="https://bugzilla.suse.com/1181504" source="BUGZILLA"/>
		<reference ref_id="1181809" ref_url="https://bugzilla.suse.com/1181809" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25639" ref_url="https://www.suse.com/security/cve/CVE-2020-25639/" source="CVE"/>
		<reference ref_id="CVE-2020-27835" ref_url="https://www.suse.com/security/cve/CVE-2020-27835/" source="CVE"/>
		<reference ref_id="CVE-2020-29568" ref_url="https://www.suse.com/security/cve/CVE-2020-29568/" source="CVE"/>
		<reference ref_id="CVE-2020-29569" ref_url="https://www.suse.com/security/cve/CVE-2020-29569/" source="CVE"/>
		<reference ref_id="CVE-2021-0342" ref_url="https://www.suse.com/security/cve/CVE-2021-0342/" source="CVE"/>
		<reference ref_id="CVE-2021-20177" ref_url="https://www.suse.com/security/cve/CVE-2021-20177/" source="CVE"/>
		<reference ref_id="CVE-2021-3347" ref_url="https://www.suse.com/security/cve/CVE-2021-3347/" source="CVE"/>
		<reference ref_id="CVE-2021-3348" ref_url="https://www.suse.com/security/cve/CVE-2021-3348/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0532-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008354.html" source="SUSE-SU"/>
		<description>
 The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel (bnc#1181349).
- CVE-2021-3348: Fixed a use-after-free in nbd_add_socket that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup (bnc#1181504).
- CVE-2021-20177: Fixed a kernel panic related to iptables string matching rules. A privileged user could insert a rule which could lead to denial of service (bnc#1180765).
- CVE-2021-0342: In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. (bnc#1180812)
- CVE-2020-27835: A use-after-free in the infiniband hfi1 driver was found, specifically in the way user calls Ioctl after open dev file and fork. A local user could use this flaw to crash the system (bnc#1179878).
- CVE-2020-25639: Fixed a NULL pointer dereference via nouveau ioctl (bnc#1176846).
- CVE-2020-29569: Fixed a potential privilege escalation and information leaks related to the PV block backend, as used by Xen (bnc#1179509).
- CVE-2020-29568: Fixed a denial of service issue, related to processing watch events (bnc#1179508).

The following non-security bugs were fixed:

- ACPI: scan: Harden acpi_device_add() against device ID overflows (git-fixes).
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (git-fixes).
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (git-fixes).
- ALSA: doc: Fix reference to mixart.rst (git-fixes).
- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (git-fixes).
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (git-fixes).
- ALSA: hda/via: Add minimum mute flag (git-fixes).
- ALSA: hda/via: Fix runtime PM for Clevo W35xSS (git-fixes).
- ALSA: pcm: Clear the full allocated memory at hw_params (git-fixes).
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (git-fixes).
- ASoC: Intel: haswell: Add missing pm_ops (git-fixes).
- ASoC: dapm: remove widget from dirty list on free (git-fixes).
- EDAC/amd64: Fix PCI component registration (bsc#1112178).
- IB/mlx5: Fix DEVX support for MLX5_CMD_OP_INIT2INIT_QP command (bsc#1103991).
- KVM: SVM: Initialize prev_ga_tag before use (bsc#1180912).
- KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages (bsc#1181230).
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (git-fixes).
- NFS: nfs_igrab_and_active must first reference the superblock (git-fixes).
- NFS: switch nfsiod to be an UNBOUND workqueue (git-fixes).
- NFSv4.2: condition READDIR's mask for security label based on LSM state (git-fixes).
- RDMA/addr: Fix race with netevent_callback()/rdma_addr_cancel() (bsc#1103992).
- RDMA/bnxt_re: Do not add user qps to flushlist (bsc#1050244 ).
- RDMA/bnxt_re: Do not report transparent vlan from QP1 (bsc#1104742).
- RDMA/cma: Do not overwrite sgid_attr after device is released (bsc#1103992).
- RDMA/core: Ensure security pkey modify is not lost (bsc#1046306 ).
- RDMA/core: Fix pkey and port assignment in get_new_pps (bsc#1046306).
- RDMA/core: Fix protection fault in get_pkey_idx_qp_list (bsc#1046306).
- RDMA/core: Fix reported speed and width (bsc#1046306 ).
- RDMA/core: Fix return error value in _ib_modify_qp() to negative (bsc#1103992).
- RDMA/core: Fix use of logical OR in get_new_pps (bsc#1046306 ).
- RDMA/hns: Bugfix for memory window mtpt configuration (bsc#1104427).
- RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver (bsc#1104427).
- RDMA/hns: Fix cmdq parameter of querying pf timer resource (bsc#1104427 bsc#1126206).
- RDMA/hns: Fix missing sq_sig_type when querying QP (bsc#1104427 ).
- RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver (bsc#1104427).
- RDMA/iw_cxgb4: Fix incorrect function parameters (bsc#1136348 jsc#SLE-4684).
- RDMA/iw_cxgb4: initiate CLOSE when entering TERM (bsc#1136348 jsc#SLE-4684).
- RDMA/mlx5: Add init2init as a modify command (bsc#1103991 ).
- RDMA/mlx5: Fix typo in enum name (bsc#1103991).
- RDMA/mlx5: Fix wrong free of blue flame register on error (bsc#1103991).
- RDMA/qedr: Fix inline size returned for iWARP (bsc#1050545 ).
- SUNRPC: cache: ignore timestamp written to 'flush' file (bsc#1178036).
- USB: ehci: fix an interrupt calltrace error (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind() (git-fixes).
- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- __netif_receive_skb_core: pass skb by reference (bsc#1109837).
- arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() (bsc#1180130).
- arm64: pgtable: Fix pte_accessible() (bsc#1180130).
- bnxt_en: Do not query FW when netif_running() is false (bsc#1086282).
- bnxt_en: Fix accumulation of bp-&gt;net_stats_prev (bsc#1104745 ).
- bnxt_en: Improve stats context resource accounting with RDMA driver loaded (bsc#1104745).
- bnxt_en: Release PCI regions when DMA mask setup fails during probe (git-fixes).
- bnxt_en: Reset rings if ring reservation fails during open() (bsc#1086282).
- bnxt_en: fix HWRM error when querying VF temperature (bsc#1104745).
- bnxt_en: fix error return code in bnxt_init_board() (git-fixes).
- bnxt_en: fix error return code in bnxt_init_one() (bsc#1050242 ).
- bnxt_en: read EEPROM A2h address using page 0 (git-fixes).
- bnxt_en: return proper error codes in bnxt_show_temp (bsc#1104745).
- bonding: set dev-&gt;needed_headroom in bond_setup_by_slave() (git-fixes).
- btrfs: add a flag to iterate_inodes_from_logical to find all extent refs for uncompressed extents (bsc#1174206).
- btrfs: add a flags argument to LOGICAL_INO and call it LOGICAL_INO_V2 (bsc#1174206).
- btrfs: increase output size for LOGICAL_INO_V2 ioctl (bsc#1174206).
- btrfs: qgroup: do not try to wait flushing if we're already holding a transaction (bsc#1179575).
- caif: no need to check return value of debugfs_create functions (git-fixes).
- can: c_can: c_can_power_up(): fix error handling (git-fixes).
- can: dev: prevent potential information leak in can_fill_info() (git-fixes).
- can: vxcan: vxcan_xmit: fix use after free bug (git-fixes).
- chelsio/chtls: correct function return and return type (bsc#1104270).
- chelsio/chtls: correct netdevice for vlan interface (bsc#1104270 ).
- chelsio/chtls: fix a double free in chtls_setkey() (bsc#1104270 ).
- chelsio/chtls: fix always leaking ctrl_skb (bsc#1104270 ).
- chelsio/chtls: fix deadlock issue (bsc#1104270).
- chelsio/chtls: fix memory leaks caused by a race (bsc#1104270 ).
- chelsio/chtls: fix memory leaks in CPL handlers (bsc#1104270 ).
- chelsio/chtls: fix panic during unload reload chtls (bsc#1104270 ).
- chelsio/chtls: fix socket lock (bsc#1104270).
- chelsio/chtls: fix tls record info to user (bsc#1104270 ).
- chtls: Added a check to avoid NULL pointer dereference (bsc#1104270).
- chtls: Fix chtls resources release sequence (bsc#1104270 ).
- chtls: Fix hardware tid leak (bsc#1104270).
- chtls: Remove invalid set_tcb call (bsc#1104270).
- chtls: Replace skb_dequeue with skb_peek (bsc#1104270 ).
- cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled (bsc#1109837).
- cxgb3: fix error return code in t3_sge_alloc_qset() (git-fixes).
- cxgb4/cxgb4vf: fix flow control display for auto negotiation (bsc#1046540 bsc#1046542).
- cxgb4: fix SGE queue dump destination buffer context (bsc#1073513).
- cxgb4: fix adapter crash due to wrong MC size (bsc#1073513).
- cxgb4: fix all-mask IP address comparison (bsc#1064802 bsc#1066129).
- cxgb4: fix large delays in PTP synchronization (bsc#1046540 bsc#1046648).
- cxgb4: fix the panic caused by non smac rewrite (bsc#1064802 bsc#1066129).
- cxgb4: fix thermal zone device registration (bsc#1104279 bsc#1104277).
- cxgb4: fix throughput drop during Tx backpressure (bsc#1127354 bsc#1127371).
- cxgb4: move DCB version extern to header file (bsc#1104279 ).
- cxgb4: remove cast when saving IPv4 partial checksum (bsc#1074220).
- cxgb4: set up filter action after rewrites (bsc#1064802 bsc#1066129).
- cxgb4: use correct type for all-mask IP address comparison (bsc#1064802 bsc#1066129).
- cxgb4: use unaligned conversion for fetching timestamp (bsc#1046540 bsc#1046648).
- dm: avoid filesystem lookup in dm_get_dev_t() (bsc#1178049).
- dmaengine: xilinx_dma: check dma_async_device_register return value (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (git-fixes).
- docs: Fix reST markup when linking to sections (git-fixes).
- drivers: net: xgene: Fix the order of the arguments of 'alloc_etherdev_mqs()' (git-fixes).
- drm/amd/powerplay: fix a crash when overclocking Vega M (bsc#1113956)
- drm/amdkfd: Put ACPI table after using it (bsc#1129770) Backporting changes: 	* context changes
- drm/atomic: put state on error path (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/i915: Clear the repeater bit on HDCP disable (bsc#1112178)
- drm/i915: Fix sha_text population code (bsc#1112178)
- drm/msm: Avoid div-by-zero in dpu_crtc_atomic_check() (bsc#1129770)
- drm/msm: Fix WARN_ON() splat in _free_object() (bsc#1129770)
- drm/msm: Fix use-after-free in msm_gem with carveout (bsc#1129770)
- drm/nouveau/bios: fix issue shadowing expansion ROMs (git-fixes).
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (git-fixes).
- drm/nouveau/privring: ack interrupts the same way as RM (git-fixes).
- drm/tve200: Fix handling of platform_get_irq() error (bsc#1129770)
- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1112178)
- drm: sun4i: hdmi: Fix inverted HPD result (bsc#1112178)
- drm: sun4i: hdmi: Remove extra HPD polling (bsc#1112178)
- ehci: fix EHCI host controller initialization sequence (git-fixes).
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (git-fixes).
- floppy: reintroduce O_NDELAY fix (boo#1181018).
- futex: Do not enable IRQs unconditionally in put_pi_state() (bsc#1149032).
- futex: Ensure the correct return value from futex_lock_pi() (bsc#1181349 bsc#1149032).
- futex: Fix incorrect should_fail_futex() handling (bsc#1181349).
- futex: Handle faults correctly for PI futexes (bsc#1181349 bsc#1149032).
- futex: Provide and use pi_state_update_owner() (bsc#1181349 bsc#1149032).
- futex: Replace pointless printk in fixup_owner() (bsc#1181349 bsc#1149032).
- futex: Simplify fixup_pi_state_owner() (bsc#1181349 bsc#1149032).
- futex: Use pi_state_update_owner() in put_pi_state() (bsc#1181349 bsc#1149032).
- i2c: octeon: check correct size of maximum RECV_LEN packet (git-fixes).
- i40e: Fix removing driver while bare-metal VFs pass traffic (git-fixes).
- i40e: avoid premature Rx buffer reuse (bsc#1111981).
- igb: Report speed and duplex as unknown when device is runtime suspended (git-fixes).
- igc: fix link speed advertising (jsc#SLE-4799).
- iio: ad5504: Fix setting power-down state (git-fixes).
- iommu/vt-d: Do not dereference iommu_device if IOMMU_API is not built (bsc#1181260, jsc#ECO-3191).
- iommu/vt-d: Gracefully handle DMAR units with no supported address widths (bsc#1181260, jsc#ECO-3191).
- ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K (bsc#1109837).
- ixgbe: avoid premature Rx buffer reuse (bsc#1109837 ).
- kABI: Fix kABI for extended APIC-ID support (bsc#1181260, jsc#ECO-3191).
- kernfs: deal with kernfs_fill_super() failures (bsc#1181809).
- lockd: do not use interval-based rebinding over TCP (git-fixes).
- locking/futex: Allow low-level atomic operations to return -EAGAIN (bsc#1149032).
- md/raid10: initialize r10_bio-&gt;read_slot before use (git-fixes).
- md: fix a warning caused by a race between concurrent md_ioctl()s (git-fixes).
- media: gp8psk: initialize stats at power control logic (git-fixes).
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (git-fixes).
- misdn: dsp: select CONFIG_BITREVERSE (git-fixes).
- mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() (git-fixes).
- mlxsw: destroy workqueue when trap_register in mlxsw_emad_init (bsc#1112374).
- mlxsw: spectrum: Do not modify cloned SKBs during xmit (git-fixes).
- mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails (bsc#1112374).
- mlxsw: switchx2: Do not modify cloned SKBs during xmit (git-fixes).
- mm, page_alloc: fix core hung in free_pcppages_bulk() (git fixes (mm/hotplug)).
- mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous() (git fixes (mm/pgalloc)).
- mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly (git fixes (mm/hmm)).
- mm/slab: use memzero_explicit() in kzfree() (git fixes (mm/slab)).
- mm: do not wake kswapd prematurely when watermark boosting is disabled (git fixes (mm/vmscan)).
- mm: hwpoison: disable memory error handling on 1GB hugepage (git fixes (mm/hwpoison)).
- mmc: sdhci-xenon: fix 1.8v regulator stabilization (git-fixes).
- nbd: Fix memory leak in nbd_add_socket (bsc#1181504).
- net/af_iucv: always register net_device notifier (git-fixes).
- net/af_iucv: fix null pointer dereference on shutdown (bsc#1179563 LTC#190108).
- net/af_iucv: set correct sk_protocol for child sockets (git-fixes).
- net/filter: Permit reading NET in load_bytes_relative when MAC not set (bsc#1109837).
- net/liquidio: Delete driver version assignment (git-fixes).
- net/liquidio: Delete non-working LIQUIDIO_PACKAGE check (git-fixes).
- net/mlx4_en: Avoid scheduling restart task if it is already running (git-fixes).
- net/mlx5: Add handling of port type in rule deletion (bsc#1103991).
- net/mlx5: Fix memory leak on flow table creation error flow (bsc#1046305).
- net/mlx5e: Fix VLAN cleanup flow (git-fixes).
- net/mlx5e: Fix VLAN create flow (git-fixes).
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (git-fixes).
- net/mlx5e: Fix two double free cases (bsc#1046305).
- net/mlx5e: IPoIB, Drop multicast packets that this interface sent (bsc#1075020).
- net/mlx5e: TX, Fix consumer index of error cqe dump (bsc#1103990 ).
- net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq (bsc#1103990).
- net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels (bsc#1109837).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource() (git-fixes).
- net/smc: receive pending data after RCV_SHUTDOWN (git-fixes).
- net/smc: receive returns without data (git-fixes).
- net/sonic: Add mutual exclusion for accessing shared state (git-fixes).
- net: atlantic: fix potential error handling (git-fixes).
- net: atlantic: fix use after free kasan warn (git-fixes).
- net: bcmgenet: keep MAC in reset until PHY is up (git-fixes).
- net: bcmgenet: reapply manual settings to the PHY (git-fixes).
- net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe() (git-fixes).
- net: cbs: Fix software cbs to consider packet sending time (bsc#1109837).
- net: dsa: LAN9303: select REGMAP when LAN9303 enable (git-fixes).
- net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL (git-fixes).
- net: ena: set initial DMA width to avoid intel iommu issue (git-fixes).
- net: ethernet: mlx4: Avoid assigning a value to ring_cons but not used it anymore in mlx4_en_xmit() (git-fixes).
- net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse() (git-fixes).
- net: freescale: fec: Fix ethtool -d runtime PM (git-fixes).
- net: hns3: add a missing uninit debugfs when unload driver (bsc#1104353).
- net: hns3: add compatible handling for command HCLGE_OPC_PF_RST_DONE (git-fixes).
- net: hns3: add management table after IMP reset (bsc#1104353 ).
- net: hns3: check reset interrupt status when reset fails (git-fixes).
- net: hns3: clear reset interrupt status in hclge_irq_handle() (git-fixes).
- net: hns3: fix a TX timeout issue (bsc#1104353).
- net: hns3: fix a wrong reset interrupt status mask (git-fixes).
- net: hns3: fix error VF index when setting VLAN offload (bsc#1104353).
- net: hns3: fix error handling for desc filling (bsc#1104353 ).
- net: hns3: fix for not calculating TX BD send size correctly (bsc#1126390).
- net: hns3: fix interrupt clearing error for VF (bsc#1104353 ).
- net: hns3: fix mis-counting IRQ vector numbers issue (bsc#1104353).
- net: hns3: fix shaper parameter algorithm (bsc#1104353 ).
- net: hns3: fix the number of queues actually used by ARQ (bsc#1104353).
- net: hns3: fix use-after-free when doing self test (bsc#1104353 ).
- net: hns3: reallocate SSU' buffer size when pfc_en changes (bsc#1104353).
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (bsc#1098633).
- net: mvpp2: Fix error return code in mvpp2_open() (bsc#1119113 ).
- net: mvpp2: fix pkt coalescing int-threshold configuration (bsc#1098633).
- net: phy: Allow BCM54616S PHY to setup internal TX/RX clock delay (git-fixes).
- net: phy: broadcom: Fix RGMII delays configuration for BCM54210E (git-fixes).
- net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs (git-fixes).
- net: phy: micrel: make sure the factory test bit is cleared (git-fixes).
- net: qca_spi: Move reset_count to struct qcaspi (git-fixes).
- net: smc911x: Adjust indentation in smc911x_phy_configure (git-fixes).
- net: stmmac: 16KB buffer must be 16 byte aligned (git-fixes).
- net: stmmac: Do not accept invalid MTU values (git-fixes).
- net: stmmac: Enable 16KB buffer size (git-fixes).
- net: stmmac: RX buffer size must be 16 byte aligned (git-fixes).
- net: stmmac: dwmac-meson8b: Fix signedness bug in probe (git-fixes).
- net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes (git-fixes).
- net: stmmac: fix length of PTP clock's name string (git-fixes).
- net: stmmac: gmac4+: Not all Unicast addresses may be available (git-fixes).
- net: sunrpc: interpret the return value of kstrtou32 correctly (git-fixes).
- net: team: fix memory leak in __team_options_register (git-fixes).
- net: tulip: Adjust indentation in {dmfe, uli526x}_init_module (git-fixes).
- net: usb: lan78xx: Fix error message format specifier (git-fixes).
- net: vlan: avoid leaks on register_vlan_dev() failures (git-fixes).
- net_failover: fixed rollback in net_failover_open() (bsc#1109837).
- net_sched: let qdisc_put() accept NULL pointer (bsc#1056657 bsc#1056653 bsc#1056787).
- nfp: validate the return code from dev_queue_xmit() (git-fixes).
- nfs_common: need lock during iterate through the list (git-fixes).
- nfsd4: readdirplus shouldn't return parent of export (git-fixes).
- nfsd: Fix message level for normal termination (git-fixes).
- pNFS: Mark layout for return if return-on-close was not sent (git-fixes).
- page_frag: Recover from memory pressure (git fixes (mm/pgalloc)).
- powerpc/perf: Add generic compat mode pmu driver (bsc#1178900 ltc#189284).
- powerpc/perf: Fix crashes with generic_compat_pmu &amp; BHRB (bsc#1178900 ltc#189284 git-fixes).
- powerpc/perf: init pmu from core-book3s (bsc#1178900 ltc#189284).
- qed: Fix race condition between scheduling and destroying the slowpath workqueue (bsc#1086314 bsc#1086313 bsc#1086301).
- qed: Fix use after free in qed_chain_free (bsc#1050536 bsc#1050538).
- r8152: Add Lenovo Powered USB-C Travel Hub (git-fixes).
- rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (bsc#1181349 bsc#1149032).
- s390/cio: fix use-after-free in ccw_device_destroy_console (git-fixes).
- s390/dasd: fix list corruption of lcu list (bsc#1181170 LTC#190915).
- s390/dasd: fix list corruption of pavgroup group list (bsc#1181170 LTC#190915).
- s390/dasd: prevent inconsistent LCU device data (bsc#1181170 LTC#190915).
- s390/qeth: delay draining the TX buffers (git-fixes).
- s390/qeth: fix L2 header access in qeth_l3_osa_features_check() (git-fixes).
- s390/qeth: fix deadlock during recovery (git-fixes).
- s390/qeth: fix locking for discipline setup / removal (git-fixes).
- s390/smp: perform initial CPU reset also for SMT siblings (git-fixes).
- sched/fair: Fix enqueue_task_fair warning (bsc#1179093).
- sched/fair: Fix enqueue_task_fair() warning some more (bsc#1179093).
- sched/fair: Fix reordering of enqueue/dequeue_task_fair() (bsc#1179093).
- sched/fair: Fix unthrottle_cfs_rq() for leaf_cfs_rq list (bsc#1179093).
- sched/fair: Reorder enqueue/dequeue_task_fair path (bsc#1179093).
- scsi: core: Fix VPD LUN ID designator priorities (bsc#1178049, git-fixes).
- scsi: ibmvfc: Set default timeout to avoid crash during migration (bsc#1181425 ltc#188252).
- scsi: lpfc: Enhancements to LOG_TRACE_EVENT for better readability (bsc#1180891).
- scsi: lpfc: Fix FW reset action if I/Os are outstanding (bsc#1180891).
- scsi: lpfc: Fix NVMe recovery after mailbox timeout (bsc#1180891).
- scsi: lpfc: Fix PLOGI S_ID of 0 on pt2pt config (bsc#1180891).
- scsi: lpfc: Fix auto sli_mode and its effect on CONFIG_PORT for SLI3 (bsc#1180891).
- scsi: lpfc: Fix crash when a fabric node is released prematurely (bsc#1180891).
- scsi: lpfc: Fix error log messages being logged following SCSI task mgnt (bsc#1180891).
- scsi: lpfc: Fix target reset failing (bsc#1180891).
- scsi: lpfc: Fix vport create logging (bsc#1180891).
- scsi: lpfc: Implement health checking when aborting I/O (bsc#1180891).
- scsi: lpfc: Prevent duplicate requests to unregister with cpuhp framework (bsc#1180891).
- scsi: lpfc: Refresh ndlp when a new PRLI is received in the PRLI issue state (bsc#1180891).
- scsi: lpfc: Simplify bool comparison (bsc#1180891).
- scsi: lpfc: Update lpfc version to 12.8.0.7 (bsc#1180891).
- scsi: lpfc: Use the nvme-fc transport supplied timeout for LS requests (bsc#1180891).
- scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit (bsc#1179142).
- serial: mvebu-uart: fix tx lost characters at power off (git-fixes).
- spi: cadence: cache reference clock rate during probe (git-fixes).
- team: set dev-&gt;needed_headroom in team_setup_by_port() (git-fixes).
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (bsc#1109837).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind failure (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: udc: core: Use lock when write to soft_connect (git-fixes).
- veth: Adjust hard_start offset on redirect XDP frames (bsc#1109837).
- vfio iommu: Add dma available capability (bsc#1179573 LTC#190106).
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (bsc#1181231).
- vhost/vsock: fix vhost vsock cid hashing inconsistent (git-fixes).
- virtio_net: Keep vnet header zeroed if XDP is loaded for small buffer (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- x86/apic: Fix x2apic enablement without interrupt remapping (bsc#1181260, jsc#ECO-3191).
- x86/apic: Support 15 bits of APIC ID in IOAPIC/MSI where available (bsc#1181260, jsc#ECO-3191).
- x86/hyperv: Fix kexec panic/hang issues (bsc#1176831).
- x86/i8259: Use printk_deferred() to prevent deadlock (bsc#1112178).
- x86/ioapic: Handle Extended Destination ID field in RTE (bsc#1181260, jsc#ECO-3191).
- x86/kvm: Add KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181260, jsc#ECO-3191).
- x86/kvm: Reserve KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181260, jsc#ECO-3191).
- x86/mm/numa: Remove uninitialized_var() usage (bsc#1112178).
- x86/mm: Fix leak of pmd ptlock (bsc#1112178).
- x86/msi: Only use high bits of MSI address for DMAR unit (bsc#1181260, jsc#ECO-3191).
- x86/mtrr: Correct the range check before performing MTRR type lookups (bsc#1112178).
- x86/resctrl: Do not move a task to the same resource group (bsc#1112178).
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (bsc#1112178).
- xdp: Fix xsk_generic_xmit errno (bsc#1109837).
- xhci: make sure TRB is fully written before giving it to the controller (git-fixes).
- xhci: tegra: Delay for disabling LFPS detector (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-19"/>
	<updated date="2021-02-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1046305">SUSE bug 1046305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046306">SUSE bug 1046306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046540">SUSE bug 1046540</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046542">SUSE bug 1046542</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1046648">SUSE bug 1046648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050242">SUSE bug 1050242</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050244">SUSE bug 1050244</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050536">SUSE bug 1050536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050538">SUSE bug 1050538</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1050545">SUSE bug 1050545</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056653">SUSE bug 1056653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056657">SUSE bug 1056657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1056787">SUSE bug 1056787</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064802">SUSE bug 1064802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1066129">SUSE bug 1066129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1073513">SUSE bug 1073513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1074220">SUSE bug 1074220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1075020">SUSE bug 1075020</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086282">SUSE bug 1086282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086301">SUSE bug 1086301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086313">SUSE bug 1086313</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086314">SUSE bug 1086314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1098633">SUSE bug 1098633</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103990">SUSE bug 1103990</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103991">SUSE bug 1103991</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1103992">SUSE bug 1103992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104270">SUSE bug 1104270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104277">SUSE bug 1104277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104279">SUSE bug 1104279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104353">SUSE bug 1104353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104427">SUSE bug 1104427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104742">SUSE bug 1104742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1104745">SUSE bug 1104745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1109837">SUSE bug 1109837</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111981">SUSE bug 1111981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112178">SUSE bug 1112178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112374">SUSE bug 1112374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1113956">SUSE bug 1113956</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119113">SUSE bug 1119113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126206">SUSE bug 1126206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1126390">SUSE bug 1126390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127354">SUSE bug 1127354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1127371">SUSE bug 1127371</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1129770">SUSE bug 1129770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1136348">SUSE bug 1136348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149032">SUSE bug 1149032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174206">SUSE bug 1174206</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176831">SUSE bug 1176831</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176846">SUSE bug 1176846</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178036">SUSE bug 1178036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178049">SUSE bug 1178049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178900">SUSE bug 1178900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179093">SUSE bug 1179093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179142">SUSE bug 1179142</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179508">SUSE bug 1179508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179509">SUSE bug 1179509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179563">SUSE bug 1179563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179573">SUSE bug 1179573</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179575">SUSE bug 1179575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179878">SUSE bug 1179878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180130">SUSE bug 1180130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180765">SUSE bug 1180765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180812">SUSE bug 1180812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180891">SUSE bug 1180891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180912">SUSE bug 1180912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181018">SUSE bug 1181018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181170">SUSE bug 1181170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181230">SUSE bug 1181230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181231">SUSE bug 1181231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181260">SUSE bug 1181260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181349">SUSE bug 1181349</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181425">SUSE bug 1181425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181504">SUSE bug 1181504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181809">SUSE bug 1181809</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-25639/">CVE-2020-25639</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27835/">CVE-2020-27835</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29568/">CVE-2020-29568</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29569/">CVE-2020-29569</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0342/">CVE-2021-0342</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20177/">CVE-2021-20177</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3347/">CVE-2021-3347</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3348/">CVE-2021-3348</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505892" comment="kernel-default-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505893" comment="kernel-default-base-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505894" comment="kernel-default-devel-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505895" comment="kernel-default-man-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504165" comment="kernel-devel-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504166" comment="kernel-docs-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504167" comment="kernel-macros-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505896" comment="kernel-obs-build-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504169" comment="kernel-source-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505897" comment="kernel-syms-4.12.14-197.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505898" comment="reiserfs-kmp-default-4.12.14-197.83.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140906" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182286" ref_url="https://bugzilla.suse.com/1182286" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-13558" ref_url="https://www.suse.com/security/cve/CVE-2020-13558/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0583-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008365.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.30.5 (bsc#1182286):

  + Bring back the WebKitPluginProcess installation that was removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-24"/>
	<updated date="2021-02-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182286">SUSE bug 1182286</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-13558/">CVE-2020-13558</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505004" comment="libjavascriptcoregtk-4_0-18-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505005" comment="libwebkit2gtk-4_0-37-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503632" comment="libwebkit2gtk3-lang-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505006" comment="typelib-1_0-JavaScriptCore-4_0-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505007" comment="typelib-1_0-WebKit2-4_0-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505008" comment="typelib-1_0-WebKit2WebExtension-4_0-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505009" comment="webkit2gtk-4_0-injected-bundles-2.30.5-3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505010" comment="webkit2gtk3-devel-2.30.5-3.66.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140907" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182049" ref_url="https://bugzilla.suse.com/1182049" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21702" ref_url="https://www.suse.com/security/cve/CVE-2021-21702/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0584-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008366.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2021-21702 [bsc#1182049]: NULL pointer dereference in SoapClient
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-24"/>
	<updated date="2021-02-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182049">SUSE bug 1182049</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21702/">CVE-2021-21702</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505011" comment="apache2-mod_php7-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505012" comment="php7-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505013" comment="php7-bcmath-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505014" comment="php7-bz2-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505015" comment="php7-calendar-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505016" comment="php7-ctype-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505017" comment="php7-curl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505018" comment="php7-dba-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505019" comment="php7-devel-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505020" comment="php7-dom-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505021" comment="php7-enchant-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505022" comment="php7-exif-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505023" comment="php7-fastcgi-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505024" comment="php7-fileinfo-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505025" comment="php7-fpm-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505026" comment="php7-ftp-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505027" comment="php7-gd-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505028" comment="php7-gettext-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505029" comment="php7-gmp-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505030" comment="php7-iconv-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505031" comment="php7-intl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505032" comment="php7-json-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505033" comment="php7-ldap-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505034" comment="php7-mbstring-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505035" comment="php7-mysql-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505036" comment="php7-odbc-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505037" comment="php7-opcache-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505038" comment="php7-openssl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505039" comment="php7-pcntl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505040" comment="php7-pdo-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503668" comment="php7-pear-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503669" comment="php7-pear-Archive_Tar-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505041" comment="php7-pgsql-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505042" comment="php7-phar-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505043" comment="php7-posix-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505044" comment="php7-readline-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505045" comment="php7-shmop-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505046" comment="php7-snmp-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505047" comment="php7-soap-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505048" comment="php7-sockets-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505049" comment="php7-sodium-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505050" comment="php7-sqlite-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505051" comment="php7-sysvmsg-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505052" comment="php7-sysvsem-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505053" comment="php7-sysvshm-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505899" comment="php7-tidy-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505054" comment="php7-tokenizer-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505055" comment="php7-wddx-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505056" comment="php7-xmlreader-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505057" comment="php7-xmlrpc-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505058" comment="php7-xmlwriter-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505059" comment="php7-xsl-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505060" comment="php7-zip-7.2.5-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505061" comment="php7-zlib-7.2.5-4.73.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140908" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181550" ref_url="https://bugzilla.suse.com/1181550" source="BUGZILLA"/>
		<reference ref_id="1181556" ref_url="https://bugzilla.suse.com/1181556" source="BUGZILLA"/>
		<reference ref_id="1181557" ref_url="https://bugzilla.suse.com/1181557" source="BUGZILLA"/>
		<reference ref_id="1181558" ref_url="https://bugzilla.suse.com/1181558" source="BUGZILLA"/>
		<reference ref_id="1181559" ref_url="https://bugzilla.suse.com/1181559" source="BUGZILLA"/>
		<reference ref_id="1181560" ref_url="https://bugzilla.suse.com/1181560" source="BUGZILLA"/>
		<reference ref_id="1181561" ref_url="https://bugzilla.suse.com/1181561" source="BUGZILLA"/>
		<reference ref_id="1181562" ref_url="https://bugzilla.suse.com/1181562" source="BUGZILLA"/>
		<reference ref_id="1181563" ref_url="https://bugzilla.suse.com/1181563" source="BUGZILLA"/>
		<reference ref_id="1181564" ref_url="https://bugzilla.suse.com/1181564" source="BUGZILLA"/>
		<reference ref_id="1181565" ref_url="https://bugzilla.suse.com/1181565" source="BUGZILLA"/>
		<reference ref_id="1182740" ref_url="https://bugzilla.suse.com/1182740" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28243" ref_url="https://www.suse.com/security/cve/CVE-2020-28243/" source="CVE"/>
		<reference ref_id="CVE-2020-28972" ref_url="https://www.suse.com/security/cve/CVE-2020-28972/" source="CVE"/>
		<reference ref_id="CVE-2020-35662" ref_url="https://www.suse.com/security/cve/CVE-2020-35662/" source="CVE"/>
		<reference ref_id="CVE-2021-25281" ref_url="https://www.suse.com/security/cve/CVE-2021-25281/" source="CVE"/>
		<reference ref_id="CVE-2021-25282" ref_url="https://www.suse.com/security/cve/CVE-2021-25282/" source="CVE"/>
		<reference ref_id="CVE-2021-25283" ref_url="https://www.suse.com/security/cve/CVE-2021-25283/" source="CVE"/>
		<reference ref_id="CVE-2021-25284" ref_url="https://www.suse.com/security/cve/CVE-2021-25284/" source="CVE"/>
		<reference ref_id="CVE-2021-3144" ref_url="https://www.suse.com/security/cve/CVE-2021-3144/" source="CVE"/>
		<reference ref_id="CVE-2021-3148" ref_url="https://www.suse.com/security/cve/CVE-2021-3148/" source="CVE"/>
		<reference ref_id="CVE-2021-3197" ref_url="https://www.suse.com/security/cve/CVE-2021-3197/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008388.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix errors with virt.update
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-26"/>
	<updated date="2021-02-26"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1181550">SUSE bug 1181550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181556">SUSE bug 1181556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181557">SUSE bug 1181557</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181558">SUSE bug 1181558</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181559">SUSE bug 1181559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181560">SUSE bug 1181560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181561">SUSE bug 1181561</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181562">SUSE bug 1181562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181563">SUSE bug 1181563</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181564">SUSE bug 1181564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181565">SUSE bug 1181565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182740">SUSE bug 1182740</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-28243/">CVE-2020-28243</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28972/">CVE-2020-28972</cve>
	<cve impact="important" cvss3="9.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2020-35662/">CVE-2020-35662</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25281/">CVE-2021-25281</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25282/">CVE-2021-25282</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-25283/">CVE-2021-25283</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-25284/">CVE-2021-25284</cve>
	<cve impact="important" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3144/">CVE-2021-3144</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3148/">CVE-2021-3148</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3197/">CVE-2021-3197</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498308" comment="python2-salt-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494159" comment="python3-salt-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494160" comment="salt-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500062" comment="salt-api-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494161" comment="salt-bash-completion-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500063" comment="salt-cloud-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494162" comment="salt-doc-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500064" comment="salt-fish-completion-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500065" comment="salt-master-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494163" comment="salt-minion-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500066" comment="salt-proxy-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500067" comment="salt-ssh-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500068" comment="salt-standalone-formulas-configuration-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500069" comment="salt-syndic-3000-24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494164" comment="salt-zsh-completion-3000-24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140909" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1178386" ref_url="https://bugzilla.suse.com/1178386" source="BUGZILLA"/>
		<reference ref_id="1179694" ref_url="https://bugzilla.suse.com/1179694" source="BUGZILLA"/>
		<reference ref_id="1179721" ref_url="https://bugzilla.suse.com/1179721" source="BUGZILLA"/>
		<reference ref_id="1180038" ref_url="https://bugzilla.suse.com/1180038" source="BUGZILLA"/>
		<reference ref_id="1181505" ref_url="https://bugzilla.suse.com/1181505" source="BUGZILLA"/>
		<reference ref_id="1182117" ref_url="https://bugzilla.suse.com/1182117" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-25013" ref_url="https://www.suse.com/security/cve/CVE-2019-25013/" source="CVE"/>
		<reference ref_id="CVE-2020-27618" ref_url="https://www.suse.com/security/cve/CVE-2020-27618/" source="CVE"/>
		<reference ref_id="CVE-2020-29562" ref_url="https://www.suse.com/security/cve/CVE-2020-29562/" source="CVE"/>
		<reference ref_id="CVE-2020-29573" ref_url="https://www.suse.com/security/cve/CVE-2020-29573/" source="CVE"/>
		<reference ref_id="CVE-2021-3326" ref_url="https://www.suse.com/security/cve/CVE-2021-3326/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0653-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008397.html" source="SUSE-SU"/>
		<description>
This update for glibc fixes the following issues:

- Fix buffer overrun in EUC-KR conversion module (CVE-2019-25013, bsc#1182117, BZ #24973)
- x86: Harden printf against non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- gconv: Fix assertion failure in ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)
- iconv: Accept redundant shift sequences in IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv: Fix incorrect UCS4 inner loop bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- Fix parsing of /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-26"/>
	<updated date="2021-02-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178386">SUSE bug 1178386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179694">SUSE bug 1179694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179721">SUSE bug 1179721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180038">SUSE bug 1180038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181505">SUSE bug 1181505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182117">SUSE bug 1182117</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-25013/">CVE-2019-25013</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27618/">CVE-2020-27618</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29562/">CVE-2020-29562</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-29573/">CVE-2020-29573</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3326/">CVE-2021-3326</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494165" comment="glibc-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494166" comment="glibc-32bit-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494167" comment="glibc-devel-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496617" comment="glibc-devel-32bit-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496618" comment="glibc-devel-static-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494168" comment="glibc-extra-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494169" comment="glibc-i18ndata-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494170" comment="glibc-info-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494171" comment="glibc-locale-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494172" comment="glibc-locale-base-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494173" comment="glibc-locale-base-32bit-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494174" comment="glibc-profile-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496619" comment="glibc-utils-2.26-13.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494175" comment="nscd-2.26-13.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140910" version="1" class="patch">
	<metadata>
		<title>Security update for python-Jinja2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181944" ref_url="https://bugzilla.suse.com/1181944" source="BUGZILLA"/>
		<reference ref_id="1182244" ref_url="https://bugzilla.suse.com/1182244" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-28493" ref_url="https://www.suse.com/security/cve/CVE-2020-28493/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0654-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-February/008398.html" source="SUSE-SU"/>
		<description>
This update for python-Jinja2 fixes the following issues:

- CVE-2020-28493: Fixed a ReDOS vulnerability where urlize could have 
  been called with untrusted user data (bsc#1181944).  
		</description>
<advisory from="security@suse.de">
	<issued date="2021-02-26"/>
	<updated date="2021-02-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181944">SUSE bug 1181944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182244">SUSE bug 1182244</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-28493/">CVE-2020-28493</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009498309" comment="python2-Jinja2-2.10.1-3.10.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494176" comment="python3-Jinja2-2.10.1-3.10.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140911" version="1" class="patch">
	<metadata>
		<title>Security update for rpmlint (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1169614" ref_url="https://bugzilla.suse.com/1169614" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:0658-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008401.html" source="SUSE-SU"/>
		<description>
This update for rpmlint fixes the following issues:

- Whitelist PAM modules and DBUS rules for cockpit (bsc#1169614)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-01"/>
	<updated date="2021-03-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1169614">SUSE bug 1169614</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505900" comment="rpmlint-mini-1.10-7.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140912" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181239" ref_url="https://bugzilla.suse.com/1181239" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14803" ref_url="https://www.suse.com/security/cve/CVE-2020-14803/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0665-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008405.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters (CVE-2020-14803)
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
      /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
      dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
      /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
      URI('x/').resolve('..').getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
      /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
      /InitializationHang.java as headful
    + JDK-8148854: Class names 'SomeClass' and 'LSomeClass;'
      treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
      fails
    + JDK-8165808: Add release barriers when allocating objects
      with concurrent collection
    + JDK-8185003: JMX: Add a version of
      ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
      windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
      JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
      previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
      fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
      can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
      implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
      numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
      using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
      compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
      false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
      ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
      test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
      should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
      rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
      doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
      inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
      is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
      --with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
      STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
      /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
      /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
      warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
       zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
      /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-01"/>
	<updated date="2021-03-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1181239">SUSE bug 1181239</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14803/">CVE-2020-14803</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497130" comment="java-1_8_0-openjdk-1.8.0.282-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497131" comment="java-1_8_0-openjdk-demo-1.8.0.282-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497132" comment="java-1_8_0-openjdk-devel-1.8.0.282-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497133" comment="java-1_8_0-openjdk-headless-1.8.0.282-3.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140913" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181239" ref_url="https://bugzilla.suse.com/1181239" source="BUGZILLA"/>
		<reference ref_id="1182186" ref_url="https://bugzilla.suse.com/1182186" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14803" ref_url="https://www.suse.com/security/cve/CVE-2020-14803/" source="CVE"/>
		<reference ref_id="CVE-2020-27221" ref_url="https://www.suse.com/security/cve/CVE-2020-27221/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008406.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-01"/>
	<updated date="2021-03-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181239">SUSE bug 1181239</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182186">SUSE bug 1182186</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14803/">CVE-2020-14803</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27221/">CVE-2020-27221</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497134" comment="java-1_8_0-ibm-1.8.0_sr6.25-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497135" comment="java-1_8_0-ibm-alsa-1.8.0_sr6.25-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497136" comment="java-1_8_0-ibm-devel-1.8.0_sr6.25-3.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497137" comment="java-1_8_0-ibm-plugin-1.8.0_sr6.25-3.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140914" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182333" ref_url="https://bugzilla.suse.com/1182333" source="BUGZILLA"/>
		<reference ref_id="1182619" ref_url="https://bugzilla.suse.com/1182619" source="BUGZILLA"/>
		<reference ref_id="1182620" ref_url="https://bugzilla.suse.com/1182620" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22883" ref_url="https://www.suse.com/security/cve/CVE-2021-22883/" source="CVE"/>
		<reference ref_id="CVE-2021-22884" ref_url="https://www.suse.com/security/cve/CVE-2021-22884/" source="CVE"/>
		<reference ref_id="CVE-2021-23840" ref_url="https://www.suse.com/security/cve/CVE-2021-23840/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008416.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

New upstream LTS version 10.24.0:

- CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (bsc#1182619)
- CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
- CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate (bsc#1182333)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182333">SUSE bug 1182333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182619">SUSE bug 1182619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182620">SUSE bug 1182620</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-22883/">CVE-2021-22883</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-22884/">CVE-2021-22884</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-23840/">CVE-2021-23840</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009501361" comment="nodejs10-10.24.0-1.33.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501362" comment="nodejs10-devel-10.24.0-1.33.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501363" comment="nodejs10-docs-10.24.0-1.33.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009501364" comment="npm10-10.24.0-1.33.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140915" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181848" ref_url="https://bugzilla.suse.com/1181848" source="BUGZILLA"/>
		<reference ref_id="1182357" ref_url="https://bugzilla.suse.com/1182357" source="BUGZILLA"/>
		<reference ref_id="1182614" ref_url="https://bugzilla.suse.com/1182614" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23968" ref_url="https://www.suse.com/security/cve/CVE-2021-23968/" source="CVE"/>
		<reference ref_id="CVE-2021-23969" ref_url="https://www.suse.com/security/cve/CVE-2021-23969/" source="CVE"/>
		<reference ref_id="CVE-2021-23973" ref_url="https://www.suse.com/security/cve/CVE-2021-23973/" source="CVE"/>
		<reference ref_id="CVE-2021-23978" ref_url="https://www.suse.com/security/cve/CVE-2021-23978/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008414.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969: Content Security Policy violation report could have contained the destination of a redirect
  * CVE-2021-23968: Content Security Policy violation report could have contained the destination of a redirect
  * CVE-2021-23973: MediaError message property could have leaked information about cross-origin resources
  * CVE-2021-23978: Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
  * Fixed: Prevent access to NTFS special paths that could lead to filesystem corruption. 
  * Buffer overflow in depth pitch calculations for compressed textures 
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181848">SUSE bug 1181848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182357">SUSE bug 1182357</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182614">SUSE bug 1182614</bugzilla>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23968/">CVE-2021-23968</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23969/">CVE-2021-23969</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23973/">CVE-2021-23973</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23978/">CVE-2021-23978</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505901" comment="MozillaFirefox-78.8.0-3.133.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505902" comment="MozillaFirefox-devel-78.8.0-3.133.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505903" comment="MozillaFirefox-translations-common-78.8.0-3.133.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505904" comment="MozillaFirefox-translations-other-78.8.0-3.133.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140916" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1175970" ref_url="https://bugzilla.suse.com/1175970" source="BUGZILLA"/>
		<reference ref_id="1176711" ref_url="https://bugzilla.suse.com/1176711" source="BUGZILLA"/>
		<reference ref_id="1177883" ref_url="https://bugzilla.suse.com/1177883" source="BUGZILLA"/>
		<reference ref_id="1179264" ref_url="https://bugzilla.suse.com/1179264" source="BUGZILLA"/>
		<reference ref_id="1179265" ref_url="https://bugzilla.suse.com/1179265" source="BUGZILLA"/>
		<reference ref_id="1182057" ref_url="https://bugzilla.suse.com/1182057" source="BUGZILLA"/>
		<reference ref_id="1182262" ref_url="https://bugzilla.suse.com/1182262" source="BUGZILLA"/>
		<reference ref_id="1182263" ref_url="https://bugzilla.suse.com/1182263" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14372" ref_url="https://www.suse.com/security/cve/CVE-2020-14372/" source="CVE"/>
		<reference ref_id="CVE-2020-25632" ref_url="https://www.suse.com/security/cve/CVE-2020-25632/" source="CVE"/>
		<reference ref_id="CVE-2020-25647" ref_url="https://www.suse.com/security/cve/CVE-2020-25647/" source="CVE"/>
		<reference ref_id="CVE-2020-27749" ref_url="https://www.suse.com/security/cve/CVE-2020-27749/" source="CVE"/>
		<reference ref_id="CVE-2020-27779" ref_url="https://www.suse.com/security/cve/CVE-2020-27779/" source="CVE"/>
		<reference ref_id="CVE-2021-20225" ref_url="https://www.suse.com/security/cve/CVE-2021-20225/" source="CVE"/>
		<reference ref_id="CVE-2021-20233" ref_url="https://www.suse.com/security/cve/CVE-2021-20233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0684-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008427.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

grub2 now implements the new 'SBAT' method for SHIM based secure boot revocation. (bsc#1182057)

Following security issues are fixed that can violate secure boot constraints:

- CVE-2020-25632: Fixed a use-after-free in rmmod command (bsc#1176711)
- CVE-2020-25647: Fixed an out-of-bound write in grub_usb_device_initialize() (bsc#1177883)
- CVE-2020-27749: Fixed a stack buffer overflow in grub_parser_split_cmdline (bsc#1179264)
- CVE-2020-27779, CVE-2020-14372: Disallow cutmem and acpi commands in secure boot mode (bsc#1179265 bsc#1175970)
- CVE-2021-20225: Fixed a heap out-of-bounds write in short form option parser (bsc#1182262)
- CVE-2021-20233: Fixed a heap out-of-bound write due to mis-calculation of space required for quoting (bsc#1182263)

		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175970">SUSE bug 1175970</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176711">SUSE bug 1176711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177883">SUSE bug 1177883</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179264">SUSE bug 1179264</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179265">SUSE bug 1179265</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182057">SUSE bug 1182057</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182262">SUSE bug 1182262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182263">SUSE bug 1182263</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14372/">CVE-2020-14372</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25632/">CVE-2020-25632</cve>
	<cve impact="important" cvss3="7.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-25647/">CVE-2020-25647</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27749/">CVE-2020-27749</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27779/">CVE-2020-27779</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20225/">CVE-2021-20225</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20233/">CVE-2021-20233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505905" comment="grub2-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504190" comment="grub2-arm64-efi-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504191" comment="grub2-i386-pc-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505906" comment="grub2-powerpc-ieee1275-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505907" comment="grub2-s390x-emu-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504192" comment="grub2-snapper-plugin-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504193" comment="grub2-systemd-sleep-plugin-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504194" comment="grub2-x86_64-efi-2.02-26.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504195" comment="grub2-x86_64-xen-2.02-26.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140917" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180933" ref_url="https://bugzilla.suse.com/1180933" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2021:0689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008421.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- dnssec-keygen can no longer generate HMAC keys. Use tsig-keygen instead. [bsc#1180933]
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-02"/>
	<updated date="2021-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180933">SUSE bug 1180933</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009500071" comment="bind-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500072" comment="bind-chrootenv-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494185" comment="bind-devel-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009500073" comment="bind-doc-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494186" comment="bind-utils-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494187" comment="libbind9-1600-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494188" comment="libdns1605-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494189" comment="libirs-devel-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494190" comment="libirs1601-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494191" comment="libisc1606-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494192" comment="libisccc1600-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494193" comment="libisccfg1600-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494194" comment="libns1604-9.16.6-12.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494195" comment="python3-bind-9.16.6-12.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140918" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181720" ref_url="https://bugzilla.suse.com/1181720" source="BUGZILLA"/>
		<reference ref_id="1181735" ref_url="https://bugzilla.suse.com/1181735" source="BUGZILLA"/>
		<reference ref_id="1181736" ref_url="https://bugzilla.suse.com/1181736" source="BUGZILLA"/>
		<reference ref_id="1181738" ref_url="https://bugzilla.suse.com/1181738" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12362" ref_url="https://www.suse.com/security/cve/CVE-2020-12362/" source="CVE"/>
		<reference ref_id="CVE-2020-12363" ref_url="https://www.suse.com/security/cve/CVE-2020-12363/" source="CVE"/>
		<reference ref_id="CVE-2020-12364" ref_url="https://www.suse.com/security/cve/CVE-2020-12364/" source="CVE"/>
		<reference ref_id="CVE-2020-12373" ref_url="https://www.suse.com/security/cve/CVE-2020-12373/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0694-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008432.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

- CVE-2020-12373: Fixed an expired pointer dereference may lead to DOS (bsc#1181738).
- CVE-2020-12364: Fixed a null pointer reference may lead to DOS (bsc#1181736). 
- CVE-2020-12362: Fixed an integer overflow which could have led to privilege escalation (bsc#1181720).
- CVE-2020-12363: Fixed an improper input validation which may have led to DOS (bsc#1181735).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-03"/>
	<updated date="2021-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181720">SUSE bug 1181720</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181735">SUSE bug 1181735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181736">SUSE bug 1181736</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181738">SUSE bug 1181738</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12362/">CVE-2020-12362</cve>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12363/">CVE-2020-12363</cve>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12364/">CVE-2020-12364</cve>
	<cve impact="low" cvss3="1.9/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-12373/">CVE-2020-12373</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494196" comment="kernel-firmware-20200107-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494197" comment="ucode-amd-20200107-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140919" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179765" ref_url="https://bugzilla.suse.com/1179765" source="BUGZILLA"/>
		<reference ref_id="1182040" ref_url="https://bugzilla.suse.com/1182040" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3393" ref_url="https://www.suse.com/security/cve/CVE-2021-3393/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008430.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

Upgrade to version 12.6:

- Reindexing might be needed after applying this update.
- CVE-2021-3393, bsc#1182040: Fix information leakage in constraint-violation error messages.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-03"/>
	<updated date="2021-03-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1179765">SUSE bug 1179765</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182040">SUSE bug 1182040</bugzilla>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3393/">CVE-2021-3393</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505908" comment="libecpg6-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505909" comment="libpq5-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504198" comment="libpq5-32bit-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505910" comment="postgresql12-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505911" comment="postgresql12-contrib-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505912" comment="postgresql12-devel-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504202" comment="postgresql12-docs-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505913" comment="postgresql12-plperl-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505914" comment="postgresql12-plpython-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505915" comment="postgresql12-pltcl-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505916" comment="postgresql12-server-12.6-3.21.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505917" comment="postgresql12-server-devel-12.6-3.21.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140920" version="1" class="patch">
	<metadata>
		<title>Security update for python-cryptography (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182066" ref_url="https://bugzilla.suse.com/1182066" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36242" ref_url="https://www.suse.com/security/cve/CVE-2020-36242/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0696-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008429.html" source="SUSE-SU"/>
		<description>
This update for python-cryptography fixes the following issues:

- CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte
  values could result in an integer overflow and buffer overflow (bsc#1182066).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-03"/>
	<updated date="2021-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182066">SUSE bug 1182066</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36242/">CVE-2020-36242</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505077" comment="python2-cryptography-2.1.4-4.9.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505078" comment="python3-cryptography-2.1.4-4.9.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140921" version="1" class="patch">
	<metadata>
		<title>Security update for wpa_supplicant (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182805" ref_url="https://bugzilla.suse.com/1182805" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27803" ref_url="https://www.suse.com/security/cve/CVE-2021-27803/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008439.html" source="SUSE-SU"/>
		<description>
This update for wpa_supplicant fixes the following issues:

- CVE-2021-27803: Fixed a P2P provision discovery processing vulnerability (bsc#1182805).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-08"/>
	<updated date="2021-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182805">SUSE bug 1182805</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-27803/">CVE-2021-27803</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494198" comment="wpa_supplicant-2.9-4.26.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140922" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182279" ref_url="https://bugzilla.suse.com/1182279" source="BUGZILLA"/>
		<reference ref_id="1182408" ref_url="https://bugzilla.suse.com/1182408" source="BUGZILLA"/>
		<reference ref_id="1182411" ref_url="https://bugzilla.suse.com/1182411" source="BUGZILLA"/>
		<reference ref_id="1182412" ref_url="https://bugzilla.suse.com/1182412" source="BUGZILLA"/>
		<reference ref_id="1182413" ref_url="https://bugzilla.suse.com/1182413" source="BUGZILLA"/>
		<reference ref_id="1182415" ref_url="https://bugzilla.suse.com/1182415" source="BUGZILLA"/>
		<reference ref_id="1182416" ref_url="https://bugzilla.suse.com/1182416" source="BUGZILLA"/>
		<reference ref_id="1182417" ref_url="https://bugzilla.suse.com/1182417" source="BUGZILLA"/>
		<reference ref_id="1182418" ref_url="https://bugzilla.suse.com/1182418" source="BUGZILLA"/>
		<reference ref_id="1182419" ref_url="https://bugzilla.suse.com/1182419" source="BUGZILLA"/>
		<reference ref_id="1182420" ref_url="https://bugzilla.suse.com/1182420" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36221" ref_url="https://www.suse.com/security/cve/CVE-2020-36221/" source="CVE"/>
		<reference ref_id="CVE-2020-36222" ref_url="https://www.suse.com/security/cve/CVE-2020-36222/" source="CVE"/>
		<reference ref_id="CVE-2020-36223" ref_url="https://www.suse.com/security/cve/CVE-2020-36223/" source="CVE"/>
		<reference ref_id="CVE-2020-36224" ref_url="https://www.suse.com/security/cve/CVE-2020-36224/" source="CVE"/>
		<reference ref_id="CVE-2020-36225" ref_url="https://www.suse.com/security/cve/CVE-2020-36225/" source="CVE"/>
		<reference ref_id="CVE-2020-36226" ref_url="https://www.suse.com/security/cve/CVE-2020-36226/" source="CVE"/>
		<reference ref_id="CVE-2020-36227" ref_url="https://www.suse.com/security/cve/CVE-2020-36227/" source="CVE"/>
		<reference ref_id="CVE-2020-36228" ref_url="https://www.suse.com/security/cve/CVE-2020-36228/" source="CVE"/>
		<reference ref_id="CVE-2020-36229" ref_url="https://www.suse.com/security/cve/CVE-2020-36229/" source="CVE"/>
		<reference ref_id="CVE-2020-36230" ref_url="https://www.suse.com/security/cve/CVE-2020-36230/" source="CVE"/>
		<reference ref_id="CVE-2021-27212" ref_url="https://www.suse.com/security/cve/CVE-2021-27212/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0723-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008438.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-08"/>
	<updated date="2021-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182279">SUSE bug 1182279</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182408">SUSE bug 1182408</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182411">SUSE bug 1182411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182412">SUSE bug 1182412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182413">SUSE bug 1182413</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182415">SUSE bug 1182415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182416">SUSE bug 1182416</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182417">SUSE bug 1182417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182418">SUSE bug 1182418</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182419">SUSE bug 1182419</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182420">SUSE bug 1182420</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36221/">CVE-2020-36221</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36222/">CVE-2020-36222</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36223/">CVE-2020-36223</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36224/">CVE-2020-36224</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36225/">CVE-2020-36225</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36226/">CVE-2020-36226</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36227/">CVE-2020-36227</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36228/">CVE-2020-36228</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36229/">CVE-2020-36229</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36230/">CVE-2020-36230</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27212/">CVE-2021-27212</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494199" comment="libldap-2_4-2-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494200" comment="libldap-2_4-2-32bit-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494201" comment="libldap-data-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497138" comment="openldap2-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497139" comment="openldap2-back-meta-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497140" comment="openldap2-back-perl-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494202" comment="openldap2-client-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494203" comment="openldap2-devel-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496620" comment="openldap2-devel-32bit-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494204" comment="openldap2-devel-static-2.4.46-9.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497141" comment="openldap2-ppolicy-check-password-1.2-9.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140923" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1065600" ref_url="https://bugzilla.suse.com/1065600" source="BUGZILLA"/>
		<reference ref_id="1163617" ref_url="https://bugzilla.suse.com/1163617" source="BUGZILLA"/>
		<reference ref_id="1170442" ref_url="https://bugzilla.suse.com/1170442" source="BUGZILLA"/>
		<reference ref_id="1176855" ref_url="https://bugzilla.suse.com/1176855" source="BUGZILLA"/>
		<reference ref_id="1179082" ref_url="https://bugzilla.suse.com/1179082" source="BUGZILLA"/>
		<reference ref_id="1179428" ref_url="https://bugzilla.suse.com/1179428" source="BUGZILLA"/>
		<reference ref_id="1179660" ref_url="https://bugzilla.suse.com/1179660" source="BUGZILLA"/>
		<reference ref_id="1180058" ref_url="https://bugzilla.suse.com/1180058" source="BUGZILLA"/>
		<reference ref_id="1180262" ref_url="https://bugzilla.suse.com/1180262" source="BUGZILLA"/>
		<reference ref_id="1180964" ref_url="https://bugzilla.suse.com/1180964" source="BUGZILLA"/>
		<reference ref_id="1181671" ref_url="https://bugzilla.suse.com/1181671" source="BUGZILLA"/>
		<reference ref_id="1181747" ref_url="https://bugzilla.suse.com/1181747" source="BUGZILLA"/>
		<reference ref_id="1181753" ref_url="https://bugzilla.suse.com/1181753" source="BUGZILLA"/>
		<reference ref_id="1181843" ref_url="https://bugzilla.suse.com/1181843" source="BUGZILLA"/>
		<reference ref_id="1181854" ref_url="https://bugzilla.suse.com/1181854" source="BUGZILLA"/>
		<reference ref_id="1182047" ref_url="https://bugzilla.suse.com/1182047" source="BUGZILLA"/>
		<reference ref_id="1182130" ref_url="https://bugzilla.suse.com/1182130" source="BUGZILLA"/>
		<reference ref_id="1182140" ref_url="https://bugzilla.suse.com/1182140" source="BUGZILLA"/>
		<reference ref_id="1182175" ref_url="https://bugzilla.suse.com/1182175" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-29368" ref_url="https://www.suse.com/security/cve/CVE-2020-29368/" source="CVE"/>
		<reference ref_id="CVE-2020-29374" ref_url="https://www.suse.com/security/cve/CVE-2020-29374/" source="CVE"/>
		<reference ref_id="CVE-2021-26930" ref_url="https://www.suse.com/security/cve/CVE-2021-26930/" source="CVE"/>
		<reference ref_id="CVE-2021-26931" ref_url="https://www.suse.com/security/cve/CVE-2021-26931/" source="CVE"/>
		<reference ref_id="CVE-2021-26932" ref_url="https://www.suse.com/security/cve/CVE-2021-26932/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0737-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008455.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1181843).
- CVE-2021-26931: Fixed an issue where Linux  kernel was treating grant mapping errors as bugs (XSA-362 bsc#1181753).
- CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping (XSA-361 bsc#1181747).
  by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#178372).
- CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write implementation which could have granted unintended write access
  because of a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).

The following non-security bugs were fixed:

- btrfs: Cleanup try_flush_qgroup (bsc#1182047).
- btrfs: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: fix data bytes_may_use underflow with fallocate due to failed quota reserve (bsc#1182130)
- btrfs: Free correct amount of space in btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Simplify code flow in btrfs_delayed_inode_reserve_metadata (bsc#1182047).
- btrfs: Unlock extents in btrfs_zero_range in case of errors (bsc#1182047).
- Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (git-fixes).
- ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293).
- kernel-binary.spec: Add back initrd and image symlink ghosts to filelist (bsc#1182140). Fixes: 76a9256314c3 ('rpm/kernel-{source,binary}.spec: do not include ghost symlinks (boo#1179082).')
- libnvdimm/dimm: Avoid race between probe and available_slots_show() (bsc#1170442).
- net: bcmgenet: add support for ethtool rxnfc flows (git-fixes).
- net: bcmgenet: code movement (git-fixes).
- net: bcmgenet: fix mask check in bcmgenet_validate_flow() (git-fixes).
- net: bcmgenet: Fix WoL with password after deep sleep (git-fixes).
- net: bcmgenet: re-remove bcmgenet_hfb_add_filter (git-fixes).
- net: bcmgenet: set Rx mode before starting netif (git-fixes).
- net: bcmgenet: use __be16 for htons(ETH_P_IP) (git-fixes).
- net: bcmgenet: Use correct I/O accessors (git-fixes).
- net: lpc-enet: fix error return code in lpc_mii_init() (git-fixes).
- net/mlx4_en: Handle TX error CQE (bsc#1181854).
- net: moxa: Fix a potential double 'free_irq()' (git-fixes).
- net: sun: fix missing release regions in cas_init_one() (git-fixes).
- nvme-multipath: Early exit if no path is available (bsc#1180964).
- rpm/post.sh: Avoid purge-kernel for the first installed kernel (bsc#1180058)
- scsi: target: fix unmap_zeroes_data boolean initialisation (bsc#1163617).
- usb: dwc2: Abort transaction after errors with unknown reason (bsc#1180262).
- usb: dwc2: Do not update data length if it is 0 on inbound transfers (bsc#1180262).
- usb: dwc2: Make 'trimming xfer length' a debug message (bsc#1180262).
- vmxnet3: Remove buf_info from device accessible structures (bsc#1181671).
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).
- xen/netback: fix spurious event detection for common event case (bsc#1182175).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-09"/>
	<updated date="2021-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1065600">SUSE bug 1065600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1163617">SUSE bug 1163617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1170442">SUSE bug 1170442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1176855">SUSE bug 1176855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179082">SUSE bug 1179082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179428">SUSE bug 1179428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179660">SUSE bug 1179660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180058">SUSE bug 1180058</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180262">SUSE bug 1180262</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180964">SUSE bug 1180964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181671">SUSE bug 1181671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181747">SUSE bug 1181747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181753">SUSE bug 1181753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181843">SUSE bug 1181843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181854">SUSE bug 1181854</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182047">SUSE bug 1182047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182130">SUSE bug 1182130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182140">SUSE bug 1182140</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182175">SUSE bug 1182175</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-29368/">CVE-2020-29368</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29374/">CVE-2020-29374</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-26930/">CVE-2021-26930</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26931/">CVE-2021-26931</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26932/">CVE-2021-26932</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505918" comment="kernel-default-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505919" comment="kernel-default-base-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505920" comment="kernel-default-devel-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505921" comment="kernel-default-man-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504211" comment="kernel-devel-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504212" comment="kernel-docs-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504213" comment="kernel-macros-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505922" comment="kernel-obs-build-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504215" comment="kernel-source-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505923" comment="kernel-syms-4.12.14-197.86.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505924" comment="reiserfs-kmp-default-4.12.14-197.86.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140924" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182331" ref_url="https://bugzilla.suse.com/1182331" source="BUGZILLA"/>
		<reference ref_id="1182333" ref_url="https://bugzilla.suse.com/1182333" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23840" ref_url="https://www.suse.com/security/cve/CVE-2021-23840/" source="CVE"/>
		<reference ref_id="CVE-2021-23841" ref_url="https://www.suse.com/security/cve/CVE-2021-23841/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0753-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008447.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333)
- CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-09"/>
	<updated date="2021-03-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1182331">SUSE bug 1182331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182333">SUSE bug 1182333</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-23840/">CVE-2021-23840</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-23841/">CVE-2021-23841</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505925" comment="libopenssl-1_1-devel-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504218" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505926" comment="libopenssl1_1-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504220" comment="libopenssl1_1-32bit-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505927" comment="libopenssl1_1-hmac-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504222" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505928" comment="openssl-1_1-1.1.0i-14.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140925" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183026" ref_url="https://bugzilla.suse.com/1183026" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21300" ref_url="https://www.suse.com/security/cve/CVE-2021-21300/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0757-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008461.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-09"/>
	<updated date="2021-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183026">SUSE bug 1183026</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21300/">CVE-2021-21300</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496626" comment="git-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496627" comment="git-arch-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494217" comment="git-core-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496628" comment="git-cvs-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496629" comment="git-daemon-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496630" comment="git-doc-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496631" comment="git-email-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496632" comment="git-gui-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496633" comment="git-svn-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496634" comment="git-web-2.26.2-3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496635" comment="gitk-2.26.2-3.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140926" version="1" class="patch">
	<metadata>
		<title>Security update for python (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182379" ref_url="https://bugzilla.suse.com/1182379" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23336" ref_url="https://www.suse.com/security/cve/CVE-2021-23336/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0768-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2021-March/018251.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- python27 was upgraded to 2.7.18
- CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-11"/>
	<updated date="2021-03-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1182379">SUSE bug 1182379</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-23336/">CVE-2021-23336</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494218" comment="libpython2_7-1_0-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494219" comment="python-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494220" comment="python-base-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498310" comment="python-curses-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498311" comment="python-devel-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498312" comment="python-gdbm-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495868" comment="python-tk-2.7.18-7.55.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498313" comment="python-xml-2.7.18-7.55.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140927" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182331" ref_url="https://bugzilla.suse.com/1182331" source="BUGZILLA"/>
		<reference ref_id="1182333" ref_url="https://bugzilla.suse.com/1182333" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23840" ref_url="https://www.suse.com/security/cve/CVE-2021-23840/" source="CVE"/>
		<reference ref_id="CVE-2021-23841" ref_url="https://www.suse.com/security/cve/CVE-2021-23841/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0769-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008473.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

- CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333)
- CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-11"/>
	<updated date="2021-03-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1182331">SUSE bug 1182331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182333">SUSE bug 1182333</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-23840/">CVE-2021-23840</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-23841/">CVE-2021-23841</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009497143" comment="libopenssl-1_0_0-devel-1.0.2p-3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497144" comment="libopenssl1_0_0-1.0.2p-3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009497145" comment="openssl-1_0_0-1.0.2p-3.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140928" version="1" class="patch">
	<metadata>
		<title>Security update for glib2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182328" ref_url="https://bugzilla.suse.com/1182328" source="BUGZILLA"/>
		<reference ref_id="1182362" ref_url="https://bugzilla.suse.com/1182362" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27218" ref_url="https://www.suse.com/security/cve/CVE-2021-27218/" source="CVE"/>
		<reference ref_id="CVE-2021-27219" ref_url="https://www.suse.com/security/cve/CVE-2021-27219/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008532.html" source="SUSE-SU"/>
		<description>
This update for glib2 fixes the following issues:

- CVE-2021-27218: g_byte_array_new_take takes a gsize as length but stores in a guint, this patch will refuse if the length is larger than guint. (bsc#1182328)

- CVE-2021-27219: g_memdup takes a guint as parameter and sometimes leads into an integer overflow, so add a g_memdup2 function which uses gsize to replace it. (bsc#1182362)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-19"/>
	<updated date="2021-03-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182328">SUSE bug 1182328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182362">SUSE bug 1182362</bugzilla>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-27218/">CVE-2021-27218</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-27219/">CVE-2021-27219</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505097" comment="glib2-devel-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503793" comment="glib2-lang-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505098" comment="glib2-tools-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505099" comment="libgio-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503796" comment="libgio-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505100" comment="libglib-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503798" comment="libglib-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505101" comment="libgmodule-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503800" comment="libgmodule-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505102" comment="libgobject-2_0-0-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503802" comment="libgobject-2_0-0-32bit-2.54.3-4.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505103" comment="libgthread-2_0-0-2.54.3-4.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140929" version="1" class="patch">
	<metadata>
		<title>Security update for nghttp2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1172442" ref_url="https://bugzilla.suse.com/1172442" source="BUGZILLA"/>
		<reference ref_id="1181358" ref_url="https://bugzilla.suse.com/1181358" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-11080" ref_url="https://www.suse.com/security/cve/CVE-2020-11080/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008539.html" source="SUSE-SU"/>
		<description>
This update for nghttp2 fixes the following issues:

- CVE-2020-11080: HTTP/2 Large Settings Frame DoS (bsc#1181358)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172442">SUSE bug 1172442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181358">SUSE bug 1181358</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-11080/">CVE-2020-11080</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505104" comment="libnghttp2-14-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503805" comment="libnghttp2-14-32bit-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505105" comment="libnghttp2-devel-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505106" comment="libnghttp2_asio-devel-1.40.0-3.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505107" comment="libnghttp2_asio1-1.40.0-3.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140930" version="1" class="patch">
	<metadata>
		<title>Security update for ruby2.5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177125" ref_url="https://bugzilla.suse.com/1177125" source="BUGZILLA"/>
		<reference ref_id="1177222" ref_url="https://bugzilla.suse.com/1177222" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25613" ref_url="https://www.suse.com/security/cve/CVE-2020-25613/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0933-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008549.html" source="SUSE-SU"/>
		<description>
This update for ruby2.5 fixes the following issues:

- CVE-2020-25613: Fixed a potential HTTP Request Smuggling  in WEBrick (bsc#1177125).
- Enable optimizations also on ARM64 (bsc#1177222)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177125">SUSE bug 1177125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177222">SUSE bug 1177222</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-25613/">CVE-2020-25613</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009494242" comment="libruby2_5-2_5-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494243" comment="ruby2.5-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494244" comment="ruby2.5-devel-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494245" comment="ruby2.5-devel-extra-2.5.8-4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009494246" comment="ruby2.5-stdlib-2.5.8-4.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140931" version="1" class="patch">
	<metadata>
		<title>Security update for gnutls (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183456" ref_url="https://bugzilla.suse.com/1183456" source="BUGZILLA"/>
		<reference ref_id="1183457" ref_url="https://bugzilla.suse.com/1183457" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20231" ref_url="https://www.suse.com/security/cve/CVE-2021-20231/" source="CVE"/>
		<reference ref_id="CVE-2021-20232" ref_url="https://www.suse.com/security/cve/CVE-2021-20232/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0934-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008545.html" source="SUSE-SU"/>
		<description>
This update for gnutls fixes the following issues:

- CVE-2021-20232: Fixed a use after free issue which could have led to memory corruption and other potential consequences (bsc#1183456).
- CVE-2021-20231: Fixed a use after free issue which could have led to memory corruption and other potential consequences (bsc#1183457).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183456">SUSE bug 1183456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183457">SUSE bug 1183457</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20231/">CVE-2021-20231</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20232/">CVE-2021-20232</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505108" comment="gnutls-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505109" comment="libgnutls-devel-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505110" comment="libgnutls30-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503817" comment="libgnutls30-32bit-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505111" comment="libgnutls30-hmac-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009503819" comment="libgnutls30-hmac-32bit-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505112" comment="libgnutlsxx-devel-3.6.7-6.40.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505113" comment="libgnutlsxx28-3.6.7-6.40.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140932" version="1" class="patch">
	<metadata>
		<title>Security update for libass (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177862" ref_url="https://bugzilla.suse.com/1177862" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-26682" ref_url="https://www.suse.com/security/cve/CVE-2020-26682/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0936-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008546.html" source="SUSE-SU"/>
		<description>
This update for libass fixes the following issues:

- CVE-2020-26682: Fixed a signed integer overflow in the call to outline_stroke() (bsc#1177862).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177862">SUSE bug 1177862</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-26682/">CVE-2020-26682</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009495877" comment="libass-devel-0.14.0-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009495878" comment="libass9-0.14.0-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140933" version="1" class="patch">
	<metadata>
		<title>Security update for go1.15 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1175132" ref_url="https://bugzilla.suse.com/1175132" source="BUGZILLA"/>
		<reference ref_id="1183333" ref_url="https://bugzilla.suse.com/1183333" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-27918" ref_url="https://www.suse.com/security/cve/CVE-2021-27918/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008542.html" source="SUSE-SU"/>
		<description>
This update for go1.15 fixes the following issues:

- go1.15.10 (released 2021-03-11) (bsc#1175132)
- go1.15.9 (released 2021-03-10) (bsc#1175132)
  - CVE-2021-27918: Fixed an infinite loop when using xml.NewTokenDecoder with a custom TokenReader (bsc#1183333).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1175132">SUSE bug 1175132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183333">SUSE bug 1183333</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-27918/">CVE-2021-27918</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009496641" comment="go1.15-1.15.10-1.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496642" comment="go1.15-doc-1.15.10-1.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009496643" comment="go1.15-race-1.15.10-1.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140934" version="1" class="patch">
	<metadata>
		<title>Security update for ldb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1183572" ref_url="https://bugzilla.suse.com/1183572" source="BUGZILLA"/>
		<reference ref_id="1183574" ref_url="https://bugzilla.suse.com/1183574" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-27840" ref_url="https://www.suse.com/security/cve/CVE-2020-27840/" source="CVE"/>
		<reference ref_id="CVE-2021-20277" ref_url="https://www.suse.com/security/cve/CVE-2021-20277/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0944-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008557.html" source="SUSE-SU"/>
		<description>
This update for ldb fixes the following issues:

- CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572).
- CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574).
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-24"/>
	<updated date="2021-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1183572">SUSE bug 1183572</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183574">SUSE bug 1183574</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27840/">CVE-2020-27840</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20277/">CVE-2021-20277</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505929" comment="ldb-tools-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505930" comment="libldb-devel-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009498314" comment="libldb1-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504229" comment="libldb1-32bit-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505931" comment="python-ldb-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505932" comment="python-ldb-devel-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505933" comment="python3-ldb-1.4.6-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505934" comment="python3-ldb-devel-1.4.6-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140935" version="1" class="patch">
	<metadata>
		<title>Security update for libzypp, zypper (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1050625" ref_url="https://bugzilla.suse.com/1050625" source="BUGZILLA"/>
		<reference ref_id="1174016" ref_url="https://bugzilla.suse.com/1174016" source="BUGZILLA"/>
		<reference ref_id="1177238" ref_url="https://bugzilla.suse.com/1177238" source="BUGZILLA"/>
		<reference ref_id="1177275" ref_url="https://bugzilla.suse.com/1177275" source="BUGZILLA"/>
		<reference ref_id="1177427" ref_url="https://bugzilla.suse.com/1177427" source="BUGZILLA"/>
		<reference ref_id="1177583" ref_url="https://bugzilla.suse.com/1177583" source="BUGZILLA"/>
		<reference ref_id="1178910" ref_url="https://bugzilla.suse.com/1178910" source="BUGZILLA"/>
		<reference ref_id="1178966" ref_url="https://bugzilla.suse.com/1178966" source="BUGZILLA"/>
		<reference ref_id="1179083" ref_url="https://bugzilla.suse.com/1179083" source="BUGZILLA"/>
		<reference ref_id="1179222" ref_url="https://bugzilla.suse.com/1179222" source="BUGZILLA"/>
		<reference ref_id="1179816" ref_url="https://bugzilla.suse.com/1179816" source="BUGZILLA"/>
		<reference ref_id="1179847" ref_url="https://bugzilla.suse.com/1179847" source="BUGZILLA"/>
		<reference ref_id="1179909" ref_url="https://bugzilla.suse.com/1179909" source="BUGZILLA"/>
		<reference ref_id="1180077" ref_url="https://bugzilla.suse.com/1180077" source="BUGZILLA"/>
		<reference ref_id="1180663" ref_url="https://bugzilla.suse.com/1180663" source="BUGZILLA"/>
		<reference ref_id="1180721" ref_url="https://bugzilla.suse.com/1180721" source="BUGZILLA"/>
		<reference ref_id="1181328" ref_url="https://bugzilla.suse.com/1181328" source="BUGZILLA"/>
		<reference ref_id="1181622" ref_url="https://bugzilla.suse.com/1181622" source="BUGZILLA"/>
		<reference ref_id="1182629" ref_url="https://bugzilla.suse.com/1182629" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-9271" ref_url="https://www.suse.com/security/cve/CVE-2017-9271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2021:0956-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2021-March/008560.html" source="SUSE-SU"/>
		<description>
This update for libzypp, zypper fixes the following issues:

Update zypper to version 1.14.43:

- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- Fix source-download commands help (bsc#1180663)
- man: Recommend to use the --non-interactive global option rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quiet: Fix install summary to write nothing if there's nothing todo (bsc#1180077)
- Prefer /run over /var/run.

Update libzypp to 17.25.8:

- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommended = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility.
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- CVE-2017-9271: Fixed information leak in the log file (bsc#1050625 bsc#1177583)
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoManager: Carefully tidy up the caches. Remove non-directory entries. (bsc#1178966)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager probe (bsc#1177427).
- RpmDb: If no database exists use the _dbpath configured in rpm.  Still makes sure a compat
  symlink at /var/lib/rpm exists in case the configures _dbpath is elsewhere. (bsc#1178910)
- Fixed update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Fix lsof monitoring (bsc#1179909)
- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
		</description>
<advisory from="security@suse.de">
	<issued date="2021-03-25"/>
	<updated date="2021-03-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1050625">SUSE bug 1050625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174016">SUSE bug 1174016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177238">SUSE bug 1177238</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177275">SUSE bug 1177275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177427">SUSE bug 1177427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177583">SUSE bug 1177583</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178910">SUSE bug 1178910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178966">SUSE bug 1178966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179083">SUSE bug 1179083</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179222">SUSE bug 1179222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179816">SUSE bug 1179816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179847">SUSE bug 1179847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179909">SUSE bug 1179909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180077">SUSE bug 1180077</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180663">SUSE bug 1180663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180721">SUSE bug 1180721</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181328">SUSE bug 1181328</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181622">SUSE bug 1181622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182629">SUSE bug 1182629</bugzilla>
	<cve impact="moderate" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-9271/">CVE-2017-9271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009505935" comment="libsigc++2-devel-2.10.0-3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489342" comment="libsigc-2_0-0-2.10.0-3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505936" comment="libsolv-devel-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489343" comment="libsolv-tools-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505937" comment="libyui-ncurses-pkg-devel-2.48.9-7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504239" comment="libyui-ncurses-pkg-doc-2.48.9-7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489344" comment="libyui-ncurses-pkg9-2.48.9-7.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505938" comment="libyui-qt-pkg-devel-2.45.28-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504242" comment="libyui-qt-pkg-doc-2.45.28-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489345" comment="libyui-qt-pkg9-2.45.28-3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489346" comment="libzypp-17.25.8-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505939" comment="libzypp-devel-17.25.8-3.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505940" comment="perl-solv-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505941" comment="python3-solv-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505942" comment="ruby-solv-0.7.17-3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009489347" comment="yast2-pkg-bindings-4.1.3-3.10.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009505943" comment="zypper-1.14.43-3.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504251" comment="zypper-log-1.14.43-3.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009504252" comment="zypper-needs-restarting-1.14.43-3.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140936" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194925" ref_url="https://bugzilla.suse.com/1194925" source="BUGZILLA"/>
		<reference ref_id="1194926" ref_url="https://bugzilla.suse.com/1194926" source="BUGZILLA"/>
		<reference ref_id="1194927" ref_url="https://bugzilla.suse.com/1194927" source="BUGZILLA"/>
		<reference ref_id="1194928" ref_url="https://bugzilla.suse.com/1194928" source="BUGZILLA"/>
		<reference ref_id="1194929" ref_url="https://bugzilla.suse.com/1194929" source="BUGZILLA"/>
		<reference ref_id="1194930" ref_url="https://bugzilla.suse.com/1194930" source="BUGZILLA"/>
		<reference ref_id="1194931" ref_url="https://bugzilla.suse.com/1194931" source="BUGZILLA"/>
		<reference ref_id="1194932" ref_url="https://bugzilla.suse.com/1194932" source="BUGZILLA"/>
		<reference ref_id="1194933" ref_url="https://bugzilla.suse.com/1194933" source="BUGZILLA"/>
		<reference ref_id="1194934" ref_url="https://bugzilla.suse.com/1194934" source="BUGZILLA"/>
		<reference ref_id="1194935" ref_url="https://bugzilla.suse.com/1194935" source="BUGZILLA"/>
		<reference ref_id="1194937" ref_url="https://bugzilla.suse.com/1194937" source="BUGZILLA"/>
		<reference ref_id="1194939" ref_url="https://bugzilla.suse.com/1194939" source="BUGZILLA"/>
		<reference ref_id="1194940" ref_url="https://bugzilla.suse.com/1194940" source="BUGZILLA"/>
		<reference ref_id="1194941" ref_url="https://bugzilla.suse.com/1194941" source="BUGZILLA"/>
		<reference ref_id="1195146" ref_url="https://bugzilla.suse.com/1195146" source="BUGZILLA"/>
		<reference ref_id="1196500" ref_url="https://bugzilla.suse.com/1196500" source="BUGZILLA"/>
		<reference ref_id="1197126" ref_url="https://bugzilla.suse.com/1197126" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21248" ref_url="https://www.suse.com/security/cve/CVE-2022-21248/" source="CVE"/>
		<reference ref_id="CVE-2022-21271" ref_url="https://www.suse.com/security/cve/CVE-2022-21271/" source="CVE"/>
		<reference ref_id="CVE-2022-21277" ref_url="https://www.suse.com/security/cve/CVE-2022-21277/" source="CVE"/>
		<reference ref_id="CVE-2022-21282" ref_url="https://www.suse.com/security/cve/CVE-2022-21282/" source="CVE"/>
		<reference ref_id="CVE-2022-21283" ref_url="https://www.suse.com/security/cve/CVE-2022-21283/" source="CVE"/>
		<reference ref_id="CVE-2022-21291" ref_url="https://www.suse.com/security/cve/CVE-2022-21291/" source="CVE"/>
		<reference ref_id="CVE-2022-21293" ref_url="https://www.suse.com/security/cve/CVE-2022-21293/" source="CVE"/>
		<reference ref_id="CVE-2022-21294" ref_url="https://www.suse.com/security/cve/CVE-2022-21294/" source="CVE"/>
		<reference ref_id="CVE-2022-21296" ref_url="https://www.suse.com/security/cve/CVE-2022-21296/" source="CVE"/>
		<reference ref_id="CVE-2022-21299" ref_url="https://www.suse.com/security/cve/CVE-2022-21299/" source="CVE"/>
		<reference ref_id="CVE-2022-21305" ref_url="https://www.suse.com/security/cve/CVE-2022-21305/" source="CVE"/>
		<reference ref_id="CVE-2022-21340" ref_url="https://www.suse.com/security/cve/CVE-2022-21340/" source="CVE"/>
		<reference ref_id="CVE-2022-21341" ref_url="https://www.suse.com/security/cve/CVE-2022-21341/" source="CVE"/>
		<reference ref_id="CVE-2022-21349" ref_url="https://www.suse.com/security/cve/CVE-2022-21349/" source="CVE"/>
		<reference ref_id="CVE-2022-21360" ref_url="https://www.suse.com/security/cve/CVE-2022-21360/" source="CVE"/>
		<reference ref_id="CVE-2022-21365" ref_url="https://www.suse.com/security/cve/CVE-2022-21365/" source="CVE"/>
		<reference ref_id="CVE-2022-21366" ref_url="https://www.suse.com/security/cve/CVE-2022-21366/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1027-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010559.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

Update Java 8.0 to Service Refresh 7 Fix Pack 5 (bsc#1197126).

Including fixes for the following vulnerabilities: 

  CVE-2022-21366, CVE-2022-21365, CVE-2022-21360, CVE-2022-21349,
  CVE-2022-21341, CVE-2022-21340, CVE-2022-21305, CVE-2022-21277,
  CVE-2022-21299, CVE-2022-21296, CVE-2022-21282, CVE-2022-21294,
  CVE-2022-21293, CVE-2022-21291, CVE-2022-21283, CVE-2022-21248,
  CVE-2022-21271.

Non-securtiy fix:

- Fixed a broken symlink for javaws (bsc#1195146).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-29"/>
	<updated date="2022-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194925">SUSE bug 1194925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194926">SUSE bug 1194926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194927">SUSE bug 1194927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194928">SUSE bug 1194928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194929">SUSE bug 1194929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194930">SUSE bug 1194930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194931">SUSE bug 1194931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194932">SUSE bug 1194932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194933">SUSE bug 1194933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194934">SUSE bug 1194934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194935">SUSE bug 1194935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194937">SUSE bug 1194937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194939">SUSE bug 1194939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194940">SUSE bug 1194940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194941">SUSE bug 1194941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195146">SUSE bug 1195146</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196500">SUSE bug 1196500</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197126">SUSE bug 1197126</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21248/">CVE-2022-21248</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21271/">CVE-2022-21271</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21277/">CVE-2022-21277</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21282/">CVE-2022-21282</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21283/">CVE-2022-21283</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21291/">CVE-2022-21291</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21293/">CVE-2022-21293</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21294/">CVE-2022-21294</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21296/">CVE-2022-21296</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21299/">CVE-2022-21299</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21305/">CVE-2022-21305</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21340/">CVE-2022-21340</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21341/">CVE-2022-21341</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21349/">CVE-2022-21349</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21360/">CVE-2022-21360</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21365/">CVE-2022-21365</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21366/">CVE-2022-21366</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673897" comment="java-1_8_0-ibm-1.8.0_sr7.5-150000.3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673898" comment="java-1_8_0-ibm-alsa-1.8.0_sr7.5-150000.3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673899" comment="java-1_8_0-ibm-devel-1.8.0_sr7.5-150000.3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673900" comment="java-1_8_0-ibm-plugin-1.8.0_sr7.5-150000.3.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140937" version="1" class="patch">
	<metadata>
		<title>Security update for openvpn (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197341" ref_url="https://bugzilla.suse.com/1197341" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0547" ref_url="https://www.suse.com/security/cve/CVE-2022-0547/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1029-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010558.html" source="SUSE-SU"/>
		<description>
This update for openvpn fixes the following issues:

- CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-29"/>
	<updated date="2022-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197341">SUSE bug 1197341</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-0547/">CVE-2022-0547</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009676844" comment="openvpn-2.4.3-150000.5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676845" comment="openvpn-auth-pam-plugin-2.4.3-150000.5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676846" comment="openvpn-devel-2.4.3-150000.5.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140938" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197417" ref_url="https://bugzilla.suse.com/1197417" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22934" ref_url="https://www.suse.com/security/cve/CVE-2022-22934/" source="CVE"/>
		<reference ref_id="CVE-2022-22935" ref_url="https://www.suse.com/security/cve/CVE-2022-22935/" source="CVE"/>
		<reference ref_id="CVE-2022-22936" ref_url="https://www.suse.com/security/cve/CVE-2022-22936/" source="CVE"/>
		<reference ref_id="CVE-2022-22941" ref_url="https://www.suse.com/security/cve/CVE-2022-22941/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1058-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010577.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- CVE-2022-22935: Sign authentication replies to prevent MiTM (bsc#1197417)
- CVE-2022-22934: Sign pillar data to prevent MiTM attacks. (bsc#1197417)
- CVE-2022-22936: Prevent job and fileserver replays (bsc#1197417)
- CVE-2022-22941: Fixed targeting bug, especially visible when using syndic and user auth. (bsc#1197417)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-30"/>
	<updated date="2022-03-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197417">SUSE bug 1197417</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22934/">CVE-2022-22934</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22935/">CVE-2022-22935</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22936/">CVE-2022-22936</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22941/">CVE-2022-22941</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677418" comment="python3-salt-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677419" comment="salt-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677420" comment="salt-api-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677300" comment="salt-bash-completion-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677421" comment="salt-cloud-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677422" comment="salt-doc-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677303" comment="salt-fish-completion-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677423" comment="salt-master-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677424" comment="salt-minion-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677425" comment="salt-proxy-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677426" comment="salt-ssh-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677427" comment="salt-standalone-formulas-configuration-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677428" comment="salt-syndic-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677429" comment="salt-transactional-update-3002.2-150100.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677311" comment="salt-zsh-completion-3002.2-150100.57.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140939" version="1" class="patch">
	<metadata>
		<title>Security update for zlib (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197459" ref_url="https://bugzilla.suse.com/1197459" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-25032" ref_url="https://www.suse.com/security/cve/CVE-2018-25032/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1061-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010582.html" source="SUSE-SU"/>
		<description>
This update for zlib fixes the following issues:

- CVE-2018-25032: Fixed memory corruption on deflate (bsc#1197459).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-30"/>
	<updated date="2022-03-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197459">SUSE bug 1197459</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25032/">CVE-2018-25032</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009676990" comment="libminizip1-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676991" comment="libz1-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676992" comment="libz1-32bit-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676993" comment="minizip-devel-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676994" comment="zlib-devel-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676996" comment="zlib-devel-32bit-1.2.11-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009676995" comment="zlib-devel-static-1.2.11-150000.3.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140940" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185055" ref_url="https://bugzilla.suse.com/1185055" source="BUGZILLA"/>
		<reference ref_id="1188564" ref_url="https://bugzilla.suse.com/1188564" source="BUGZILLA"/>
		<reference ref_id="1188565" ref_url="https://bugzilla.suse.com/1188565" source="BUGZILLA"/>
		<reference ref_id="1191902" ref_url="https://bugzilla.suse.com/1191902" source="BUGZILLA"/>
		<reference ref_id="1191904" ref_url="https://bugzilla.suse.com/1191904" source="BUGZILLA"/>
		<reference ref_id="1191905" ref_url="https://bugzilla.suse.com/1191905" source="BUGZILLA"/>
		<reference ref_id="1191909" ref_url="https://bugzilla.suse.com/1191909" source="BUGZILLA"/>
		<reference ref_id="1191910" ref_url="https://bugzilla.suse.com/1191910" source="BUGZILLA"/>
		<reference ref_id="1191911" ref_url="https://bugzilla.suse.com/1191911" source="BUGZILLA"/>
		<reference ref_id="1191913" ref_url="https://bugzilla.suse.com/1191913" source="BUGZILLA"/>
		<reference ref_id="1191914" ref_url="https://bugzilla.suse.com/1191914" source="BUGZILLA"/>
		<reference ref_id="1192052" ref_url="https://bugzilla.suse.com/1192052" source="BUGZILLA"/>
		<reference ref_id="1194198" ref_url="https://bugzilla.suse.com/1194198" source="BUGZILLA"/>
		<reference ref_id="1194232" ref_url="https://bugzilla.suse.com/1194232" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-2163" ref_url="https://www.suse.com/security/cve/CVE-2021-2163/" source="CVE"/>
		<reference ref_id="CVE-2021-2341" ref_url="https://www.suse.com/security/cve/CVE-2021-2341/" source="CVE"/>
		<reference ref_id="CVE-2021-2369" ref_url="https://www.suse.com/security/cve/CVE-2021-2369/" source="CVE"/>
		<reference ref_id="CVE-2021-35556" ref_url="https://www.suse.com/security/cve/CVE-2021-35556/" source="CVE"/>
		<reference ref_id="CVE-2021-35559" ref_url="https://www.suse.com/security/cve/CVE-2021-35559/" source="CVE"/>
		<reference ref_id="CVE-2021-35560" ref_url="https://www.suse.com/security/cve/CVE-2021-35560/" source="CVE"/>
		<reference ref_id="CVE-2021-35564" ref_url="https://www.suse.com/security/cve/CVE-2021-35564/" source="CVE"/>
		<reference ref_id="CVE-2021-35565" ref_url="https://www.suse.com/security/cve/CVE-2021-35565/" source="CVE"/>
		<reference ref_id="CVE-2021-35578" ref_url="https://www.suse.com/security/cve/CVE-2021-35578/" source="CVE"/>
		<reference ref_id="CVE-2021-35586" ref_url="https://www.suse.com/security/cve/CVE-2021-35586/" source="CVE"/>
		<reference ref_id="CVE-2021-35588" ref_url="https://www.suse.com/security/cve/CVE-2021-35588/" source="CVE"/>
		<reference ref_id="CVE-2021-41035" ref_url="https://www.suse.com/security/cve/CVE-2021-41035/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010012.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

- Update to Java 8.0 Service Refresh 7 Fix Pack 0
- CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods. (bsc#1194198, bsc#1192052)
- CVE-2021-35586: Excessive memory allocation in BMPImageReader. (bsc#1191914)
- CVE-2021-35564: Certificates with end dates too far in the future can corrupt keystore. (bsc#1191913)
- CVE-2021-35559: Excessive memory allocation in RTFReader. (bsc#1191911)
- CVE-2021-35556: Excessive memory allocation in RTFParser. (bsc#1191910)
- CVE-2021-35565: Loop in HttpsServer triggered during TLS session close. (bsc#1191909) 
- CVE-2021-35588: Incomplete validation of inner class references in ClassFileParser. (bsc#1191905)
- CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564)
- CVE-2021-2369: JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565)
- CVE-2021-2163: Incomplete enforcement of JAR signing disabled algorithms. (bsc#1185055)
- CVE-2021-35560: Fixed a vulnerability in the component Deployment. (bsc#1191902)
- CVE-2021-35578: Fixed unexpected exception raised during TLS handshake. (bsc#1191904)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-18"/>
	<updated date="2022-01-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185055">SUSE bug 1185055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188564">SUSE bug 1188564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188565">SUSE bug 1188565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191902">SUSE bug 1191902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191904">SUSE bug 1191904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191905">SUSE bug 1191905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191909">SUSE bug 1191909</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191910">SUSE bug 1191910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191911">SUSE bug 1191911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191913">SUSE bug 1191913</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191914">SUSE bug 1191914</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192052">SUSE bug 1192052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194198">SUSE bug 1194198</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194232">SUSE bug 1194232</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-2163/">CVE-2021-2163</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-2341/">CVE-2021-2341</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-2369/">CVE-2021-2369</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35556/">CVE-2021-35556</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35559/">CVE-2021-35559</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-35560/">CVE-2021-35560</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-35564/">CVE-2021-35564</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35565/">CVE-2021-35565</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35578/">CVE-2021-35578</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35586/">CVE-2021-35586</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35588/">CVE-2021-35588</cve>
	<cve impact="low" cvss3="2.9/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-41035/">CVE-2021-41035</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009662459" comment="java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662460" comment="java-1_8_0-ibm-alsa-1.8.0_sr7.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662461" comment="java-1_8_0-ibm-devel-1.8.0_sr7.0-3.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662462" comment="java-1_8_0-ibm-plugin-1.8.0_sr7.0-3.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140941" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197698" ref_url="https://bugzilla.suse.com/1197698" source="BUGZILLA"/>
		<reference ref_id="1197903" ref_url="https://bugzilla.suse.com/1197903" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1097" ref_url="https://www.suse.com/security/cve/CVE-2022-1097/" source="CVE"/>
		<reference ref_id="CVE-2022-1196" ref_url="https://www.suse.com/security/cve/CVE-2022-1196/" source="CVE"/>
		<reference ref_id="CVE-2022-24713" ref_url="https://www.suse.com/security/cve/CVE-2022-24713/" source="CVE"/>
		<reference ref_id="CVE-2022-28281" ref_url="https://www.suse.com/security/cve/CVE-2022-28281/" source="CVE"/>
		<reference ref_id="CVE-2022-28282" ref_url="https://www.suse.com/security/cve/CVE-2022-28282/" source="CVE"/>
		<reference ref_id="CVE-2022-28285" ref_url="https://www.suse.com/security/cve/CVE-2022-28285/" source="CVE"/>
		<reference ref_id="CVE-2022-28286" ref_url="https://www.suse.com/security/cve/CVE-2022-28286/" source="CVE"/>
		<reference ref_id="CVE-2022-28289" ref_url="https://www.suse.com/security/cve/CVE-2022-28289/" source="CVE"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.8.0 ESR (bsc#1197903):

MFSA 2022-14 (bsc#1197903)

* CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11 tokens are removed while in use
* CVE-2022-28281: Fixed an out of bounds write due to unexpected WebAuthN Extensions
* CVE-2022-1196: Fixed a use-after-free after VR Process destruction
* CVE-2022-28282: Fixed a use-after-free in DocumentL10n::TranslateDocument
* CVE-2022-28285: Fixed incorrect AliasSet used in JIT Codegen
* CVE-2022-28286: Fixed that iframe contents could be rendered outside the border
* CVE-2022-24713: Fixed a denial of service via complex regular expressions
* CVE-2022-28289: Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8

The following non-security bugs were fixed:
- Adjust rust dependency for SP3 and later. TW uses always the 
  newest version of rust, but we don't, so we can't use the 
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-07"/>
	<updated date="2022-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197698">SUSE bug 1197698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197903">SUSE bug 1197903</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1097/">CVE-2022-1097</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-1196/">CVE-2022-1196</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-24713/">CVE-2022-24713</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28281/">CVE-2022-28281</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-28282/">CVE-2022-28282</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-28285/">CVE-2022-28285</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28286/">CVE-2022-28286</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28289/">CVE-2022-28289</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009678580" comment="MozillaFirefox-91.8.0-150000.150.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678581" comment="MozillaFirefox-devel-91.8.0-150000.150.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678582" comment="MozillaFirefox-translations-common-91.8.0-150000.150.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678583" comment="MozillaFirefox-translations-other-91.8.0-150000.150.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140942" version="1" class="patch">
	<metadata>
		<title>Security update for libsolv, libzypp, zypper (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184501" ref_url="https://bugzilla.suse.com/1184501" source="BUGZILLA"/>
		<reference ref_id="1194848" ref_url="https://bugzilla.suse.com/1194848" source="BUGZILLA"/>
		<reference ref_id="1195999" ref_url="https://bugzilla.suse.com/1195999" source="BUGZILLA"/>
		<reference ref_id="1196061" ref_url="https://bugzilla.suse.com/1196061" source="BUGZILLA"/>
		<reference ref_id="1196317" ref_url="https://bugzilla.suse.com/1196317" source="BUGZILLA"/>
		<reference ref_id="1196368" ref_url="https://bugzilla.suse.com/1196368" source="BUGZILLA"/>
		<reference ref_id="1196514" ref_url="https://bugzilla.suse.com/1196514" source="BUGZILLA"/>
		<reference ref_id="1196925" ref_url="https://bugzilla.suse.com/1196925" source="BUGZILLA"/>
		<reference ref_id="1197134" ref_url="https://bugzilla.suse.com/1197134" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:1131-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010670.html" source="SUSE-SU"/>
		<description>
This update for libsolv, libzypp, zypper fixes the following issues:

Security relevant fix:

- Harden package signature checks (bsc#1184501).

libsolv to 0.7.22:

- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code (bsc#1196514)
- support parsing of Debian's Multi-Arch indicator
- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ('requires' is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime

libzypp to 17.30.0:

- ZConfig: Update solver settings if target changes (bsc#1196368)
- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)

zypper to 1.14.52:

- info: print the packages upstream URL if available (fixes #426)
- info: Fix SEGV with not installed PTFs (bsc#1196317)
- Don't prevent less restrictive umasks (bsc#1195999)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-08"/>
	<updated date="2022-04-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1184501">SUSE bug 1184501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194848">SUSE bug 1194848</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195999">SUSE bug 1195999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196061">SUSE bug 1196061</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196317">SUSE bug 1196317</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196368">SUSE bug 1196368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196514">SUSE bug 1196514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196925">SUSE bug 1196925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197134">SUSE bug 1197134</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009678676" comment="libsolv-devel-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678677" comment="libsolv-tools-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678678" comment="libzypp-17.30.0-150100.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678679" comment="libzypp-devel-17.30.0-150100.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678680" comment="perl-solv-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678681" comment="python3-solv-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678682" comment="ruby-solv-0.7.22-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678683" comment="zypper-1.14.52-150100.3.55.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677320" comment="zypper-log-1.14.52-150100.3.55.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677321" comment="zypper-needs-restarting-1.14.52-150100.3.55.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140943" version="1" class="patch">
	<metadata>
		<title>Security update for libexif (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1172768" ref_url="https://bugzilla.suse.com/1172768" source="BUGZILLA"/>
		<reference ref_id="1172802" ref_url="https://bugzilla.suse.com/1172802" source="BUGZILLA"/>
		<reference ref_id="1178479" ref_url="https://bugzilla.suse.com/1178479" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-0181" ref_url="https://www.suse.com/security/cve/CVE-2020-0181/" source="CVE"/>
		<reference ref_id="CVE-2020-0198" ref_url="https://www.suse.com/security/cve/CVE-2020-0198/" source="CVE"/>
		<reference ref_id="CVE-2020-0452" ref_url="https://www.suse.com/security/cve/CVE-2020-0452/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010678.html" source="SUSE-SU"/>
		<description>
This update for libexif fixes the following issues:

- CVE-2020-0181: Fixed an integer overflow that could lead to denial of service
  (bsc#1172802).
- CVE-2020-0198: Fixed and unsigned integer overflow that could lead to denial
  of service (bsc#1172768).
- CVE-2020-0452: Fixed a buffer overflow check that could be optimized away
  by the compiler (bsc#1178479).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-11"/>
	<updated date="2022-04-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172768">SUSE bug 1172768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172802">SUSE bug 1172802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178479">SUSE bug 1178479</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-0181/">CVE-2020-0181</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-0198/">CVE-2020-0198</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-0452/">CVE-2020-0452</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677226" comment="libexif-devel-0.6.22-150000.5.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677227" comment="libexif12-0.6.22-150000.5.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140944" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197903" ref_url="https://bugzilla.suse.com/1197903" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1097" ref_url="https://www.suse.com/security/cve/CVE-2022-1097/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1149-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010677.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

Mozilla NSS 3.68.3 (bsc#1197903):
  - CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11
    tokens are removed while in use.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-11"/>
	<updated date="2022-04-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197903">SUSE bug 1197903</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1097/">CVE-2022-1097</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009678029" comment="libfreebl3-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678030" comment="libfreebl3-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678031" comment="libfreebl3-hmac-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678032" comment="libfreebl3-hmac-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678033" comment="libsoftokn3-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678034" comment="libsoftokn3-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678035" comment="libsoftokn3-hmac-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678036" comment="libsoftokn3-hmac-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678037" comment="mozilla-nss-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678038" comment="mozilla-nss-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678039" comment="mozilla-nss-certs-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678040" comment="mozilla-nss-certs-32bit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678041" comment="mozilla-nss-devel-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678042" comment="mozilla-nss-sysinit-3.68.3-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009678043" comment="mozilla-nss-tools-3.68.3-150000.3.67.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140945" version="1" class="patch">
	<metadata>
		<title>Security update for opensc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1114649" ref_url="https://bugzilla.suse.com/1114649" source="BUGZILLA"/>
		<reference ref_id="1191957" ref_url="https://bugzilla.suse.com/1191957" source="BUGZILLA"/>
		<reference ref_id="1191992" ref_url="https://bugzilla.suse.com/1191992" source="BUGZILLA"/>
		<reference ref_id="1192000" ref_url="https://bugzilla.suse.com/1192000" source="BUGZILLA"/>
		<reference ref_id="1192005" ref_url="https://bugzilla.suse.com/1192005" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-42779" ref_url="https://www.suse.com/security/cve/CVE-2021-42779/" source="CVE"/>
		<reference ref_id="CVE-2021-42780" ref_url="https://www.suse.com/security/cve/CVE-2021-42780/" source="CVE"/>
		<reference ref_id="CVE-2021-42781" ref_url="https://www.suse.com/security/cve/CVE-2021-42781/" source="CVE"/>
		<reference ref_id="CVE-2021-42782" ref_url="https://www.suse.com/security/cve/CVE-2021-42782/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1156-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010682.html" source="SUSE-SU"/>
		<description>
This update for opensc fixes the following issues:

Security issues fixed:

- CVE-2021-42782: Stack buffer overflow issues in various places (bsc#1191957).
- CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c (bsc#1192000).
- CVE-2021-42780: Fixed use after return in insert_pin() (bsc#1192005).
- CVE-2021-42779: Fixed use after free in sc_file_valid() (bsc#1191992).

Non-security issues fixed: 

- Fixes segmentation fault in 'pkcs11-tool.c'. (bsc#1114649)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-12"/>
	<updated date="2022-04-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1114649">SUSE bug 1114649</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191957">SUSE bug 1191957</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191992">SUSE bug 1191992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192000">SUSE bug 1192000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192005">SUSE bug 1192005</bugzilla>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42779/">CVE-2021-42779</cve>
	<cve impact="low" cvss3="2/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-42780/">CVE-2021-42780</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42781/">CVE-2021-42781</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42782/">CVE-2021-42782</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677072" comment="opensc-0.19.0-150100.3.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140946" version="1" class="patch">
	<metadata>
		<title>Security update for xz (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198062" ref_url="https://bugzilla.suse.com/1198062" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1271" ref_url="https://www.suse.com/security/cve/CVE-2022-1271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010686.html" source="SUSE-SU"/>
		<description>
This update for xz fixes the following issues:

- CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-12"/>
	<updated date="2022-04-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198062">SUSE bug 1198062</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1271/">CVE-2022-1271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679123" comment="liblzma5-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679124" comment="liblzma5-32bit-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679125" comment="xz-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679126" comment="xz-devel-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679127" comment="xz-lang-5.2.3-150000.4.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679128" comment="xz-static-devel-5.2.3-150000.4.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140947" version="1" class="patch">
	<metadata>
		<title>Security update for subversion (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197939" ref_url="https://bugzilla.suse.com/1197939" source="BUGZILLA"/>
		<reference ref_id="1197940" ref_url="https://bugzilla.suse.com/1197940" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28544" ref_url="https://www.suse.com/security/cve/CVE-2021-28544/" source="CVE"/>
		<reference ref_id="CVE-2022-24070" ref_url="https://www.suse.com/security/cve/CVE-2022-24070/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1161-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010683.html" source="SUSE-SU"/>
		<description>
This update for subversion fixes the following issues:

- CVE-2022-24070: Fixed a memory corruption issue in mod_dav_svn as used by Apache
  HTTP server. This could be exploited by a remote attacker to cause a denegation
  of service (bsc#1197940).
- CVE-2021-28544: Fixed an information leak issue where Subversion servers may
  reveal the original path of files protected by path-based authorization
  (bsc#1197939).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-12"/>
	<updated date="2022-04-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197939">SUSE bug 1197939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197940">SUSE bug 1197940</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28544/">CVE-2021-28544</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-24070/">CVE-2022-24070</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679220" comment="subversion-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679186" comment="subversion-bash-completion-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679221" comment="subversion-devel-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679222" comment="subversion-perl-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679223" comment="subversion-python-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679224" comment="subversion-server-1.10.6-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679225" comment="subversion-tools-1.10.6-150000.3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140948" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193942" ref_url="https://bugzilla.suse.com/1193942" source="BUGZILLA"/>
		<reference ref_id="1193943" ref_url="https://bugzilla.suse.com/1193943" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44224" ref_url="https://www.suse.com/security/cve/CVE-2021-44224/" source="CVE"/>
		<reference ref_id="CVE-2021-44790" ref_url="https://www.suse.com/security/cve/CVE-2021-44790/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0119-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010025.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations. (bsc#1193943)
- CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua. (bsc#1193942)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-18"/>
	<updated date="2022-01-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193942">SUSE bug 1193942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193943">SUSE bug 1193943</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-44224/">CVE-2021-44224</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-44790/">CVE-2021-44790</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009662966" comment="apache2-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662967" comment="apache2-devel-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662962" comment="apache2-doc-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662968" comment="apache2-prefork-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662969" comment="apache2-utils-2.4.33-3.61.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662970" comment="apache2-worker-2.4.33-3.61.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140949" version="1" class="patch">
	<metadata>
		<title>Security update for gzip (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177047" ref_url="https://bugzilla.suse.com/1177047" source="BUGZILLA"/>
		<reference ref_id="1180713" ref_url="https://bugzilla.suse.com/1180713" source="BUGZILLA"/>
		<reference ref_id="1198062" ref_url="https://bugzilla.suse.com/1198062" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1271" ref_url="https://www.suse.com/security/cve/CVE-2022-1271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1250-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010742.html" source="SUSE-SU"/>
		<description>
This update for gzip fixes the following issues:

- CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)

The following non-security bugs were fixed:

- Fixed an issue when 'gzexe' counts the lines to skip wrong. (bsc#1180713)
- Fixed a potential segfault when zlib acceleration is enabled (bsc#1177047)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-17"/>
	<updated date="2022-04-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177047">SUSE bug 1177047</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180713">SUSE bug 1180713</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198062">SUSE bug 1198062</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1271/">CVE-2022-1271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679494" comment="gzip-1.10-150000.4.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140950" version="1" class="patch">
	<metadata>
		<title>Security update for openjpeg2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1076314" ref_url="https://bugzilla.suse.com/1076314" source="BUGZILLA"/>
		<reference ref_id="1076967" ref_url="https://bugzilla.suse.com/1076967" source="BUGZILLA"/>
		<reference ref_id="1079845" ref_url="https://bugzilla.suse.com/1079845" source="BUGZILLA"/>
		<reference ref_id="1102016" ref_url="https://bugzilla.suse.com/1102016" source="BUGZILLA"/>
		<reference ref_id="1106881" ref_url="https://bugzilla.suse.com/1106881" source="BUGZILLA"/>
		<reference ref_id="1106882" ref_url="https://bugzilla.suse.com/1106882" source="BUGZILLA"/>
		<reference ref_id="1140130" ref_url="https://bugzilla.suse.com/1140130" source="BUGZILLA"/>
		<reference ref_id="1160782" ref_url="https://bugzilla.suse.com/1160782" source="BUGZILLA"/>
		<reference ref_id="1162090" ref_url="https://bugzilla.suse.com/1162090" source="BUGZILLA"/>
		<reference ref_id="1173578" ref_url="https://bugzilla.suse.com/1173578" source="BUGZILLA"/>
		<reference ref_id="1180457" ref_url="https://bugzilla.suse.com/1180457" source="BUGZILLA"/>
		<reference ref_id="1184774" ref_url="https://bugzilla.suse.com/1184774" source="BUGZILLA"/>
		<reference ref_id="1197738" ref_url="https://bugzilla.suse.com/1197738" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14423" ref_url="https://www.suse.com/security/cve/CVE-2018-14423/" source="CVE"/>
		<reference ref_id="CVE-2018-16375" ref_url="https://www.suse.com/security/cve/CVE-2018-16375/" source="CVE"/>
		<reference ref_id="CVE-2018-16376" ref_url="https://www.suse.com/security/cve/CVE-2018-16376/" source="CVE"/>
		<reference ref_id="CVE-2018-20845" ref_url="https://www.suse.com/security/cve/CVE-2018-20845/" source="CVE"/>
		<reference ref_id="CVE-2018-5727" ref_url="https://www.suse.com/security/cve/CVE-2018-5727/" source="CVE"/>
		<reference ref_id="CVE-2018-5785" ref_url="https://www.suse.com/security/cve/CVE-2018-5785/" source="CVE"/>
		<reference ref_id="CVE-2018-6616" ref_url="https://www.suse.com/security/cve/CVE-2018-6616/" source="CVE"/>
		<reference ref_id="CVE-2020-15389" ref_url="https://www.suse.com/security/cve/CVE-2020-15389/" source="CVE"/>
		<reference ref_id="CVE-2020-27823" ref_url="https://www.suse.com/security/cve/CVE-2020-27823/" source="CVE"/>
		<reference ref_id="CVE-2020-6851" ref_url="https://www.suse.com/security/cve/CVE-2020-6851/" source="CVE"/>
		<reference ref_id="CVE-2020-8112" ref_url="https://www.suse.com/security/cve/CVE-2020-8112/" source="CVE"/>
		<reference ref_id="CVE-2021-29338" ref_url="https://www.suse.com/security/cve/CVE-2021-29338/" source="CVE"/>
		<reference ref_id="CVE-2022-1122" ref_url="https://www.suse.com/security/cve/CVE-2022-1122/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html" source="SUSE-SU"/>
		<description>
This update for openjpeg2 fixes the following issues:

- CVE-2018-5727: Fixed integer overflow vulnerability in theopj_t1_encode_cblks function (bsc#1076314).
- CVE-2018-5785: Fixed integer overflow caused by an out-of-bounds leftshift in the opj_j2k_setup_encoder function (bsc#1076967).
- CVE-2018-6616: Fixed excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c (bsc#1079845).
- CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016).
- CVE-2018-16375: Fixed missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c (bsc#1106882).
- CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881).
- CVE-2018-20845: Fixed division-by-zero in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.ci (bsc#1140130).
- CVE-2020-6851: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor (bsc#1160782).
- CVE-2020-8112: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090).
- CVE-2020-15389: Fixed use-after-free if t a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578).
- CVE-2020-27823: Fixed heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457).
- CVE-2021-29338: Fixed integer overflow that allows remote attackers to crash the application (bsc#1184774).
- CVE-2022-1122: Fixed segmentation fault in opj2_decompress due to uninitialized pointer (bsc#1197738).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-19"/>
	<updated date="2022-04-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076314">SUSE bug 1076314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1076967">SUSE bug 1076967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1079845">SUSE bug 1079845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102016">SUSE bug 1102016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106881">SUSE bug 1106881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106882">SUSE bug 1106882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140130">SUSE bug 1140130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1160782">SUSE bug 1160782</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162090">SUSE bug 1162090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173578">SUSE bug 1173578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180457">SUSE bug 1180457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184774">SUSE bug 1184774</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197738">SUSE bug 1197738</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14423/">CVE-2018-14423</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-16375/">CVE-2018-16375</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16376/">CVE-2018-16376</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20845/">CVE-2018-20845</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5727/">CVE-2018-5727</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-5785/">CVE-2018-5785</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-6616/">CVE-2018-6616</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-15389/">CVE-2020-15389</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27823/">CVE-2020-27823</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-6851/">CVE-2020-6851</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-8112/">CVE-2020-8112</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-29338/">CVE-2021-29338</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1122/">CVE-2022-1122</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009677917" comment="libopenjp2-7-2.3.0-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677918" comment="openjpeg2-2.3.0-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009677919" comment="openjpeg2-devel-2.3.0-150000.3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140951" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189562" ref_url="https://bugzilla.suse.com/1189562" source="BUGZILLA"/>
		<reference ref_id="1193738" ref_url="https://bugzilla.suse.com/1193738" source="BUGZILLA"/>
		<reference ref_id="1194943" ref_url="https://bugzilla.suse.com/1194943" source="BUGZILLA"/>
		<reference ref_id="1195051" ref_url="https://bugzilla.suse.com/1195051" source="BUGZILLA"/>
		<reference ref_id="1195254" ref_url="https://bugzilla.suse.com/1195254" source="BUGZILLA"/>
		<reference ref_id="1195353" ref_url="https://bugzilla.suse.com/1195353" source="BUGZILLA"/>
		<reference ref_id="1196018" ref_url="https://bugzilla.suse.com/1196018" source="BUGZILLA"/>
		<reference ref_id="1196114" ref_url="https://bugzilla.suse.com/1196114" source="BUGZILLA"/>
		<reference ref_id="1196433" ref_url="https://bugzilla.suse.com/1196433" source="BUGZILLA"/>
		<reference ref_id="1196468" ref_url="https://bugzilla.suse.com/1196468" source="BUGZILLA"/>
		<reference ref_id="1196488" ref_url="https://bugzilla.suse.com/1196488" source="BUGZILLA"/>
		<reference ref_id="1196514" ref_url="https://bugzilla.suse.com/1196514" source="BUGZILLA"/>
		<reference ref_id="1196639" ref_url="https://bugzilla.suse.com/1196639" source="BUGZILLA"/>
		<reference ref_id="1196761" ref_url="https://bugzilla.suse.com/1196761" source="BUGZILLA"/>
		<reference ref_id="1196830" ref_url="https://bugzilla.suse.com/1196830" source="BUGZILLA"/>
		<reference ref_id="1196836" ref_url="https://bugzilla.suse.com/1196836" source="BUGZILLA"/>
		<reference ref_id="1196942" ref_url="https://bugzilla.suse.com/1196942" source="BUGZILLA"/>
		<reference ref_id="1196973" ref_url="https://bugzilla.suse.com/1196973" source="BUGZILLA"/>
		<reference ref_id="1197227" ref_url="https://bugzilla.suse.com/1197227" source="BUGZILLA"/>
		<reference ref_id="1197331" ref_url="https://bugzilla.suse.com/1197331" source="BUGZILLA"/>
		<reference ref_id="1197366" ref_url="https://bugzilla.suse.com/1197366" source="BUGZILLA"/>
		<reference ref_id="1197391" ref_url="https://bugzilla.suse.com/1197391" source="BUGZILLA"/>
		<reference ref_id="1198031" ref_url="https://bugzilla.suse.com/1198031" source="BUGZILLA"/>
		<reference ref_id="1198032" ref_url="https://bugzilla.suse.com/1198032" source="BUGZILLA"/>
		<reference ref_id="1198033" ref_url="https://bugzilla.suse.com/1198033" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-39713" ref_url="https://www.suse.com/security/cve/CVE-2021-39713/" source="CVE"/>
		<reference ref_id="CVE-2021-45868" ref_url="https://www.suse.com/security/cve/CVE-2021-45868/" source="CVE"/>
		<reference ref_id="CVE-2022-0812" ref_url="https://www.suse.com/security/cve/CVE-2022-0812/" source="CVE"/>
		<reference ref_id="CVE-2022-0850" ref_url="https://www.suse.com/security/cve/CVE-2022-0850/" source="CVE"/>
		<reference ref_id="CVE-2022-1016" ref_url="https://www.suse.com/security/cve/CVE-2022-1016/" source="CVE"/>
		<reference ref_id="CVE-2022-1048" ref_url="https://www.suse.com/security/cve/CVE-2022-1048/" source="CVE"/>
		<reference ref_id="CVE-2022-23036" ref_url="https://www.suse.com/security/cve/CVE-2022-23036/" source="CVE"/>
		<reference ref_id="CVE-2022-23037" ref_url="https://www.suse.com/security/cve/CVE-2022-23037/" source="CVE"/>
		<reference ref_id="CVE-2022-23038" ref_url="https://www.suse.com/security/cve/CVE-2022-23038/" source="CVE"/>
		<reference ref_id="CVE-2022-23039" ref_url="https://www.suse.com/security/cve/CVE-2022-23039/" source="CVE"/>
		<reference ref_id="CVE-2022-23040" ref_url="https://www.suse.com/security/cve/CVE-2022-23040/" source="CVE"/>
		<reference ref_id="CVE-2022-23041" ref_url="https://www.suse.com/security/cve/CVE-2022-23041/" source="CVE"/>
		<reference ref_id="CVE-2022-23042" ref_url="https://www.suse.com/security/cve/CVE-2022-23042/" source="CVE"/>
		<reference ref_id="CVE-2022-26490" ref_url="https://www.suse.com/security/cve/CVE-2022-26490/" source="CVE"/>
		<reference ref_id="CVE-2022-26966" ref_url="https://www.suse.com/security/cve/CVE-2022-26966/" source="CVE"/>
		<reference ref_id="CVE-2022-28356" ref_url="https://www.suse.com/security/cve/CVE-2022-28356/" source="CVE"/>
		<reference ref_id="CVE-2022-28388" ref_url="https://www.suse.com/security/cve/CVE-2022-28388/" source="CVE"/>
		<reference ref_id="CVE-2022-28389" ref_url="https://www.suse.com/security/cve/CVE-2022-28389/" source="CVE"/>
		<reference ref_id="CVE-2022-28390" ref_url="https://www.suse.com/security/cve/CVE-2022-28390/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1256-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010751.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-28356: Fixed a refcount leak bug in net/llc/af_llc.c (bnc#1197391).
- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution (bsc#1197227).
- CVE-2022-28388: Fixed a double free in drivers/net/can/usb/usb_8dev.c vulnerability in the Linux kernel (bnc#1198032).
- CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel (bnc#1198033).
- CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel (bnc#1198031).
- CVE-2022-0812: Fixed an incorrect header size calculations in xprtrdma (bsc#1196639).
- CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock (bsc#1197331).
- CVE-2022-0850: Fixed a kernel information leak vulnerability in iov_iter.c (bsc#1196761).
- CVE-2022-26966: Fixed an issue in drivers/net/usb/sr9700.c, which allowed attackers to obtain sensitive information from the memory via crafted frame lengths from a USB device (bsc#1196836).
- CVE-2021-45868: Fixed a wrong validation check in fs/quota/quota_tree.c which could lead to an use-after-free if there is a corrupted quota file (bnc#1197366).
- CVE-2021-39713: Fixed a race condition in the network scheduling subsystem which could lead to a use-after-free (bsc#1196973).
- CVE-2022-23036,CVE-2022-23037,CVE-2022-23038,CVE-2022-23039,CVE-2022-23040,CVE-2022-23041,CVE-2022-23042: Fixed multiple issues which could have lead to read/write access to memory pages or denial of service. These issues are related to the Xen PV device frontend drivers (bsc#1196488).
- CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could trigger crash the system or corrupt system memory (bsc#1196830).

The following non-security bugs were fixed:

- ax88179_178a: Fixed memory issues that could be triggered by malicious USB devices (bsc#1196018).
- genirq: Use rcu in kstat_irqs_usr() (bsc#1193738).
- gve/net: Fixed multiple bugfixes (jsc#SLE-23652).
- net/mlx5e: Fix page DMA map/unmap attributes (bsc#1196468).
- net: tipc: validate domain record count on input (bsc#1195254).
- powerpc: Fixed issues related to slow I/O on PowerPC (bsc#1196433).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-19"/>
	<updated date="2022-04-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1189562">SUSE bug 1189562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193738">SUSE bug 1193738</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194943">SUSE bug 1194943</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195051">SUSE bug 1195051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195254">SUSE bug 1195254</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195353">SUSE bug 1195353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196018">SUSE bug 1196018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196114">SUSE bug 1196114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196433">SUSE bug 1196433</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196468">SUSE bug 1196468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196488">SUSE bug 1196488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196514">SUSE bug 1196514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196639">SUSE bug 1196639</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196761">SUSE bug 1196761</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196830">SUSE bug 1196830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196836">SUSE bug 1196836</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196942">SUSE bug 1196942</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196973">SUSE bug 1196973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197227">SUSE bug 1197227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197331">SUSE bug 1197331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197366">SUSE bug 1197366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197391">SUSE bug 1197391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198031">SUSE bug 1198031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198032">SUSE bug 1198032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198033">SUSE bug 1198033</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-39713/">CVE-2021-39713</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45868/">CVE-2021-45868</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0812/">CVE-2022-0812</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0850/">CVE-2022-0850</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1016/">CVE-2022-1016</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1048/">CVE-2022-1048</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23036/">CVE-2022-23036</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23037/">CVE-2022-23037</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23038/">CVE-2022-23038</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23039/">CVE-2022-23039</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23040/">CVE-2022-23040</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23041/">CVE-2022-23041</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23042/">CVE-2022-23042</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26490/">CVE-2022-26490</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26966/">CVE-2022-26966</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-28356/">CVE-2022-28356</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-28388/">CVE-2022-28388</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28389/">CVE-2022-28389</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28390/">CVE-2022-28390</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679916" comment="kernel-default-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679917" comment="kernel-default-base-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679918" comment="kernel-default-devel-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679919" comment="kernel-default-man-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679864" comment="kernel-devel-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679865" comment="kernel-docs-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679866" comment="kernel-macros-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679920" comment="kernel-obs-build-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679868" comment="kernel-source-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679921" comment="kernel-syms-4.12.14-150100.197.111.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679922" comment="reiserfs-kmp-default-4.12.14-150100.197.111.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140952" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198234" ref_url="https://bugzilla.suse.com/1198234" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24765" ref_url="https://www.suse.com/security/cve/CVE-2022-24765/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010750.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- CVE-2022-24765: Fixed a potential command injection via git worktree (bsc#1198234).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-19"/>
	<updated date="2022-04-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198234">SUSE bug 1198234</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24765/">CVE-2022-24765</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679900" comment="git-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679901" comment="git-arch-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679902" comment="git-core-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679903" comment="git-cvs-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679904" comment="git-daemon-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679855" comment="git-doc-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679905" comment="git-email-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679906" comment="git-gui-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679907" comment="git-svn-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679908" comment="git-web-2.26.2-150000.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679909" comment="gitk-2.26.2-150000.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140953" version="1" class="patch">
	<metadata>
		<title>Security update for SDL (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181201" ref_url="https://bugzilla.suse.com/1181201" source="BUGZILLA"/>
		<reference ref_id="1181202" ref_url="https://bugzilla.suse.com/1181202" source="BUGZILLA"/>
		<reference ref_id="1198001" ref_url="https://bugzilla.suse.com/1198001" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14409" ref_url="https://www.suse.com/security/cve/CVE-2020-14409/" source="CVE"/>
		<reference ref_id="CVE-2020-14410" ref_url="https://www.suse.com/security/cve/CVE-2020-14410/" source="CVE"/>
		<reference ref_id="CVE-2021-33657" ref_url="https://www.suse.com/security/cve/CVE-2021-33657/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1273-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010769.html" source="SUSE-SU"/>
		<description>
This update for SDL fixes the following issues:

- CVE-2020-14409: Fixed an integer overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c. (bsc#1181202)
- CVE-2020-14410: Fixed a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c. (bsc#1181201)
- CVE-2021-33657: Fixed a Heap overflow problem in video/SDL_pixels.c. (bsc#1198001)
  		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-20"/>
	<updated date="2022-04-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181201">SUSE bug 1181201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181202">SUSE bug 1181202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198001">SUSE bug 1198001</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14409/">CVE-2020-14409</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14410/">CVE-2020-14410</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33657/">CVE-2021-33657</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679467" comment="libSDL-1_2-0-1.2.15-150000.3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679468" comment="libSDL-devel-1.2.15-150000.3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140954" version="1" class="patch">
	<metadata>
		<title>Security update for libvirt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191668" ref_url="https://bugzilla.suse.com/1191668" source="BUGZILLA"/>
		<reference ref_id="1192017" ref_url="https://bugzilla.suse.com/1192017" source="BUGZILLA"/>
		<reference ref_id="1192876" ref_url="https://bugzilla.suse.com/1192876" source="BUGZILLA"/>
		<reference ref_id="1193981" ref_url="https://bugzilla.suse.com/1193981" source="BUGZILLA"/>
		<reference ref_id="1194041" ref_url="https://bugzilla.suse.com/1194041" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3975" ref_url="https://www.suse.com/security/cve/CVE-2021-3975/" source="CVE"/>
		<reference ref_id="CVE-2021-4147" ref_url="https://www.suse.com/security/cve/CVE-2021-4147/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0128-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010027.html" source="SUSE-SU"/>
		<description>
This update for libvirt fixes the following issues:

- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)
- CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-19"/>
	<updated date="2022-01-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191668">SUSE bug 1191668</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192017">SUSE bug 1192017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192876">SUSE bug 1192876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193981">SUSE bug 1193981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194041">SUSE bug 1194041</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3975/">CVE-2021-3975</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4147/">CVE-2021-4147</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664064" comment="libvirt-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664065" comment="libvirt-admin-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663290" comment="libvirt-bash-completion-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664066" comment="libvirt-client-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664067" comment="libvirt-daemon-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664068" comment="libvirt-daemon-config-network-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664069" comment="libvirt-daemon-config-nwfilter-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664070" comment="libvirt-daemon-driver-interface-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663296" comment="libvirt-daemon-driver-libxl-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664071" comment="libvirt-daemon-driver-lxc-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664072" comment="libvirt-daemon-driver-network-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664073" comment="libvirt-daemon-driver-nodedev-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664074" comment="libvirt-daemon-driver-nwfilter-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664075" comment="libvirt-daemon-driver-qemu-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664076" comment="libvirt-daemon-driver-secret-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664077" comment="libvirt-daemon-driver-storage-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664078" comment="libvirt-daemon-driver-storage-core-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664079" comment="libvirt-daemon-driver-storage-disk-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664080" comment="libvirt-daemon-driver-storage-iscsi-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664081" comment="libvirt-daemon-driver-storage-logical-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664082" comment="libvirt-daemon-driver-storage-mpath-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663309" comment="libvirt-daemon-driver-storage-rbd-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664083" comment="libvirt-daemon-driver-storage-scsi-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664084" comment="libvirt-daemon-hooks-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664085" comment="libvirt-daemon-lxc-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664086" comment="libvirt-daemon-qemu-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663314" comment="libvirt-daemon-xen-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664087" comment="libvirt-devel-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663316" comment="libvirt-doc-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664088" comment="libvirt-libs-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664089" comment="libvirt-lock-sanlock-5.1.0-17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664090" comment="libvirt-nss-5.1.0-17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140955" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198136" ref_url="https://bugzilla.suse.com/1198136" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:1293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010785.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

Security hardening, related to Spring Framework vulnerabilities:
    
- Deprecate getResources() and always return null (bsc#1198136).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-21"/>
	<updated date="2022-04-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198136">SUSE bug 1198136</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679648" comment="tomcat-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679649" comment="tomcat-admin-webapps-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679650" comment="tomcat-el-3_0-api-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679651" comment="tomcat-jsp-2_3-api-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679652" comment="tomcat-lib-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679653" comment="tomcat-servlet-4_0-api-9.0.36-150100.4.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679654" comment="tomcat-webapps-9.0.36-150100.4.76.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140956" version="1" class="patch">
	<metadata>
		<title>Security update for openjpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1102016" ref_url="https://bugzilla.suse.com/1102016" source="BUGZILLA"/>
		<reference ref_id="1106881" ref_url="https://bugzilla.suse.com/1106881" source="BUGZILLA"/>
		<reference ref_id="1162090" ref_url="https://bugzilla.suse.com/1162090" source="BUGZILLA"/>
		<reference ref_id="1173578" ref_url="https://bugzilla.suse.com/1173578" source="BUGZILLA"/>
		<reference ref_id="1180457" ref_url="https://bugzilla.suse.com/1180457" source="BUGZILLA"/>
		<reference ref_id="1184774" ref_url="https://bugzilla.suse.com/1184774" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-14423" ref_url="https://www.suse.com/security/cve/CVE-2018-14423/" source="CVE"/>
		<reference ref_id="CVE-2018-16376" ref_url="https://www.suse.com/security/cve/CVE-2018-16376/" source="CVE"/>
		<reference ref_id="CVE-2020-15389" ref_url="https://www.suse.com/security/cve/CVE-2020-15389/" source="CVE"/>
		<reference ref_id="CVE-2020-27823" ref_url="https://www.suse.com/security/cve/CVE-2020-27823/" source="CVE"/>
		<reference ref_id="CVE-2020-8112" ref_url="https://www.suse.com/security/cve/CVE-2020-8112/" source="CVE"/>
		<reference ref_id="CVE-2021-29338" ref_url="https://www.suse.com/security/cve/CVE-2021-29338/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1296-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010791.html" source="SUSE-SU"/>
		<description>
This update for openjpeg fixes the following issues:

- CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016).
- CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881).
- CVE-2020-8112: Fixed a heap buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090).
- CVE-2020-15389: Fixed a use-after-free if a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578).
- CVE-2020-27823: Fixed a heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457),
- CVE-2021-29338: Fixed an integer Overflow allows remote attackers to crash the application (bsc#1184774).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-21"/>
	<updated date="2022-04-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1102016">SUSE bug 1102016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1106881">SUSE bug 1106881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162090">SUSE bug 1162090</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1173578">SUSE bug 1173578</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180457">SUSE bug 1180457</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184774">SUSE bug 1184774</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14423/">CVE-2018-14423</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-16376/">CVE-2018-16376</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-15389/">CVE-2020-15389</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27823/">CVE-2020-27823</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-8112/">CVE-2020-8112</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-29338/">CVE-2021-29338</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679714" comment="libopenjpeg1-1.5.2-150000.4.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679715" comment="openjpeg-devel-1.5.2-150000.4.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140957" version="1" class="patch">
	<metadata>
		<title>Security update for libinput (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198111" ref_url="https://bugzilla.suse.com/1198111" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1215" ref_url="https://www.suse.com/security/cve/CVE-2022-1215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1305-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010797.html" source="SUSE-SU"/>
		<description>
This update for libinput fixes the following issues:

- CVE-2022-1215: Fixed a format string vulnerability (bsc#1198111).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-22"/>
	<updated date="2022-04-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198111">SUSE bug 1198111</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1215/">CVE-2022-1215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680157" comment="libinput-devel-1.10.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680158" comment="libinput-tools-1.10.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680159" comment="libinput-udev-1.10.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680160" comment="libinput10-1.10.5-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140958" version="1" class="patch">
	<metadata>
		<title>Security update for dnsmasq (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197872" ref_url="https://bugzilla.suse.com/1197872" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0934" ref_url="https://www.suse.com/security/cve/CVE-2022-0934/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1307-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010803.html" source="SUSE-SU"/>
		<description>
This update for dnsmasq fixes the following issues:

- CVE-2022-0934: Fixed an invalid memory access that could lead to remote denial
  of service via crafted packet (bsc#1197872).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-22"/>
	<updated date="2022-04-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197872">SUSE bug 1197872</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-0934/">CVE-2022-0934</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679466" comment="dnsmasq-2.86-150100.7.20.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140959" version="1" class="patch">
	<metadata>
		<title>Security update for SDL2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198001" ref_url="https://bugzilla.suse.com/1198001" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33657" ref_url="https://www.suse.com/security/cve/CVE-2021-33657/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010801.html" source="SUSE-SU"/>
		<description>
This update for SDL2 fixes the following issues:

- CVE-2021-33657: Fixed a heap overflow problem in video/SDL_pixels.c (bsc#1198001).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-22"/>
	<updated date="2022-04-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198001">SUSE bug 1198001</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33657/">CVE-2021-33657</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679495" comment="libSDL2-2_0-0-2.0.8-150000.3.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679496" comment="libSDL2-devel-2.0.8-150000.3.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140960" version="1" class="patch">
	<metadata>
		<title>Security update for python-numpy (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193907" ref_url="https://bugzilla.suse.com/1193907" source="BUGZILLA"/>
		<reference ref_id="1193913" ref_url="https://bugzilla.suse.com/1193913" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33430" ref_url="https://www.suse.com/security/cve/CVE-2021-33430/" source="CVE"/>
		<reference ref_id="CVE-2021-41496" ref_url="https://www.suse.com/security/cve/CVE-2021-41496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0134-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012546.html" source="SUSE-SU"/>
		<description>
This update for python-numpy fixes the following issues:

- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193907">SUSE bug 1193907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193913">SUSE bug 1193913</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33430/">CVE-2021-33430</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41496/">CVE-2021-41496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663843" comment="python3-numpy-1.17.3-10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663844" comment="python3-numpy-devel-1.17.3-10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140961" version="1" class="patch">
	<metadata>
		<title>Security update for busybox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1064976" ref_url="https://bugzilla.suse.com/1064976" source="BUGZILLA"/>
		<reference ref_id="1064978" ref_url="https://bugzilla.suse.com/1064978" source="BUGZILLA"/>
		<reference ref_id="1069412" ref_url="https://bugzilla.suse.com/1069412" source="BUGZILLA"/>
		<reference ref_id="1099260" ref_url="https://bugzilla.suse.com/1099260" source="BUGZILLA"/>
		<reference ref_id="1099263" ref_url="https://bugzilla.suse.com/1099263" source="BUGZILLA"/>
		<reference ref_id="1102912" ref_url="https://bugzilla.suse.com/1102912" source="BUGZILLA"/>
		<reference ref_id="1121426" ref_url="https://bugzilla.suse.com/1121426" source="BUGZILLA"/>
		<reference ref_id="1121428" ref_url="https://bugzilla.suse.com/1121428" source="BUGZILLA"/>
		<reference ref_id="1184522" ref_url="https://bugzilla.suse.com/1184522" source="BUGZILLA"/>
		<reference ref_id="1192869" ref_url="https://bugzilla.suse.com/1192869" source="BUGZILLA"/>
		<reference ref_id="951562" ref_url="https://bugzilla.suse.com/951562" source="BUGZILLA"/>
		<reference ref_id="970662" ref_url="https://bugzilla.suse.com/970662" source="BUGZILLA"/>
		<reference ref_id="970663" ref_url="https://bugzilla.suse.com/970663" source="BUGZILLA"/>
		<reference ref_id="991940" ref_url="https://bugzilla.suse.com/991940" source="BUGZILLA"/>
		<reference ref_id="CVE-2011-5325" ref_url="https://www.suse.com/security/cve/CVE-2011-5325/" source="CVE"/>
		<reference ref_id="CVE-2015-9261" ref_url="https://www.suse.com/security/cve/CVE-2015-9261/" source="CVE"/>
		<reference ref_id="CVE-2016-2147" ref_url="https://www.suse.com/security/cve/CVE-2016-2147/" source="CVE"/>
		<reference ref_id="CVE-2016-2148" ref_url="https://www.suse.com/security/cve/CVE-2016-2148/" source="CVE"/>
		<reference ref_id="CVE-2016-6301" ref_url="https://www.suse.com/security/cve/CVE-2016-6301/" source="CVE"/>
		<reference ref_id="CVE-2017-15873" ref_url="https://www.suse.com/security/cve/CVE-2017-15873/" source="CVE"/>
		<reference ref_id="CVE-2017-15874" ref_url="https://www.suse.com/security/cve/CVE-2017-15874/" source="CVE"/>
		<reference ref_id="CVE-2017-16544" ref_url="https://www.suse.com/security/cve/CVE-2017-16544/" source="CVE"/>
		<reference ref_id="CVE-2018-1000500" ref_url="https://www.suse.com/security/cve/CVE-2018-1000500/" source="CVE"/>
		<reference ref_id="CVE-2018-1000517" ref_url="https://www.suse.com/security/cve/CVE-2018-1000517/" source="CVE"/>
		<reference ref_id="CVE-2018-20679" ref_url="https://www.suse.com/security/cve/CVE-2018-20679/" source="CVE"/>
		<reference ref_id="CVE-2019-5747" ref_url="https://www.suse.com/security/cve/CVE-2019-5747/" source="CVE"/>
		<reference ref_id="CVE-2021-28831" ref_url="https://www.suse.com/security/cve/CVE-2021-28831/" source="CVE"/>
		<reference ref_id="CVE-2021-42373" ref_url="https://www.suse.com/security/cve/CVE-2021-42373/" source="CVE"/>
		<reference ref_id="CVE-2021-42374" ref_url="https://www.suse.com/security/cve/CVE-2021-42374/" source="CVE"/>
		<reference ref_id="CVE-2021-42375" ref_url="https://www.suse.com/security/cve/CVE-2021-42375/" source="CVE"/>
		<reference ref_id="CVE-2021-42376" ref_url="https://www.suse.com/security/cve/CVE-2021-42376/" source="CVE"/>
		<reference ref_id="CVE-2021-42377" ref_url="https://www.suse.com/security/cve/CVE-2021-42377/" source="CVE"/>
		<reference ref_id="CVE-2021-42378" ref_url="https://www.suse.com/security/cve/CVE-2021-42378/" source="CVE"/>
		<reference ref_id="CVE-2021-42379" ref_url="https://www.suse.com/security/cve/CVE-2021-42379/" source="CVE"/>
		<reference ref_id="CVE-2021-42380" ref_url="https://www.suse.com/security/cve/CVE-2021-42380/" source="CVE"/>
		<reference ref_id="CVE-2021-42381" ref_url="https://www.suse.com/security/cve/CVE-2021-42381/" source="CVE"/>
		<reference ref_id="CVE-2021-42382" ref_url="https://www.suse.com/security/cve/CVE-2021-42382/" source="CVE"/>
		<reference ref_id="CVE-2021-42383" ref_url="https://www.suse.com/security/cve/CVE-2021-42383/" source="CVE"/>
		<reference ref_id="CVE-2021-42384" ref_url="https://www.suse.com/security/cve/CVE-2021-42384/" source="CVE"/>
		<reference ref_id="CVE-2021-42385" ref_url="https://www.suse.com/security/cve/CVE-2021-42385/" source="CVE"/>
		<reference ref_id="CVE-2021-42386" ref_url="https://www.suse.com/security/cve/CVE-2021-42386/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0135-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010031.html" source="SUSE-SU"/>
		<description>
This update for busybox fixes the following issues:

- CVE-2011-5325: Fixed tar directory traversal (bsc#951562).
- CVE-2015-9261: Fixed segfalts and application crashes in huft_build (bsc#1102912).
- CVE-2016-2147: Fixed out of bounds write (heap) due to integer underflow in udhcpc (bsc#970663).
- CVE-2016-2148: Fixed heap-based buffer overflow in OPTION_6RD parsing (bsc#970662).
- CVE-2016-6301: Fixed NTP server denial of service flaw (bsc#991940).
- CVE-2017-15873: Fixed integer overflow in get_next_block function in archival/libarchive/decompress_bunzip2.c (bsc#1064976).
- CVE-2017-15874: Fixed integer underflow in archival/libarchive/decompress_unlzma.c (bsc#1064978).
- CVE-2017-16544: Fixed Insufficient sanitization of filenames when autocompleting (bsc#1069412).
- CVE-2018-1000500 : Fixed missing SSL certificate validation in wget (bsc#1099263).
- CVE-2018-1000517: Fixed heap-based buffer overflow in the retrieve_file_data() (bsc#1099260).
- CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426).
- CVE-2019-5747: Fixed out of bounds read in udhcp components (bsc#1121428).
- CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522).
- CVE-2021-42373: Fixed NULL pointer dereference in man leading to DoS when a section name is supplied but no page argument is given (bsc#1192869).
- CVE-2021-42374: Fixed out-of-bounds heap read in unlzma leading to information leak and DoS when crafted LZMA-compressed input is decompressed (bsc#1192869).
- CVE-2021-42375: Fixed incorrect handling of a special element in ash leading to DoS when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters (bsc#1192869).
- CVE-2021-42376: Fixed NULL pointer dereference in hush leading to DoS when processing a crafted shell command (bsc#1192869).
- CVE-2021-42377: Fixed attacker-controlled pointer free in hush leading to DoS and possible code execution when processing a crafted shell command (bsc#1192869).
- CVE-2021-42378: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the getvar_i function (bsc#1192869).
- CVE-2021-42379: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the next_input_file function (bsc#1192869).
- CVE-2021-42380: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the clrvar function (bsc#1192869).
- CVE-2021-42381: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the hash_init function (bsc#1192869).
- CVE-2021-42382: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the getvar_s function (bsc#1192869).
- CVE-2021-42383: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the evaluate function (bsc#1192869).
- CVE-2021-42384: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the handle_special function (bsc#1192869).
- CVE-2021-42385: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the evaluate function (bsc#1192869).
- CVE-2021-42386: Fixed use-after-free in awk leading to DoS and possibly code execution when processing a crafted awk pattern in the nvalloc function (bsc#1192869).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-20"/>
	<updated date="2022-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1064976">SUSE bug 1064976</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1064978">SUSE bug 1064978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1069412">SUSE bug 1069412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099260">SUSE bug 1099260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1099263">SUSE bug 1099263</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102912">SUSE bug 1102912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121426">SUSE bug 1121426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1121428">SUSE bug 1121428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184522">SUSE bug 1184522</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192869">SUSE bug 1192869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/951562">SUSE bug 951562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970662">SUSE bug 970662</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/970663">SUSE bug 970663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/991940">SUSE bug 991940</bugzilla>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2011-5325/">CVE-2011-5325</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9261/">CVE-2015-9261</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-2147/">CVE-2016-2147</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2016-2148/">CVE-2016-2148</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-6301/">CVE-2016-6301</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-15873/">CVE-2017-15873</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-15874/">CVE-2017-15874</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-16544/">CVE-2017-16544</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-1000500/">CVE-2018-1000500</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000517/">CVE-2018-1000517</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20679/">CVE-2018-20679</cve>
	<cve impact="low" cvss3="3.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-5747/">CVE-2019-5747</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28831/">CVE-2021-28831</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42373/">CVE-2021-42373</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42374/">CVE-2021-42374</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42375/">CVE-2021-42375</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-42376/">CVE-2021-42376</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42377/">CVE-2021-42377</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42378/">CVE-2021-42378</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42379/">CVE-2021-42379</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42380/">CVE-2021-42380</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42381/">CVE-2021-42381</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42382/">CVE-2021-42382</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42383/">CVE-2021-42383</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42384/">CVE-2021-42384</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42385/">CVE-2021-42385</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42386/">CVE-2021-42386</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663720" comment="busybox-1.34.1-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663721" comment="busybox-static-1.34.1-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140962" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194547" ref_url="https://bugzilla.suse.com/1194547" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4140" ref_url="https://www.suse.com/security/cve/CVE-2021-4140/" source="CVE"/>
		<reference ref_id="CVE-2022-22737" ref_url="https://www.suse.com/security/cve/CVE-2022-22737/" source="CVE"/>
		<reference ref_id="CVE-2022-22738" ref_url="https://www.suse.com/security/cve/CVE-2022-22738/" source="CVE"/>
		<reference ref_id="CVE-2022-22739" ref_url="https://www.suse.com/security/cve/CVE-2022-22739/" source="CVE"/>
		<reference ref_id="CVE-2022-22740" ref_url="https://www.suse.com/security/cve/CVE-2022-22740/" source="CVE"/>
		<reference ref_id="CVE-2022-22741" ref_url="https://www.suse.com/security/cve/CVE-2022-22741/" source="CVE"/>
		<reference ref_id="CVE-2022-22742" ref_url="https://www.suse.com/security/cve/CVE-2022-22742/" source="CVE"/>
		<reference ref_id="CVE-2022-22743" ref_url="https://www.suse.com/security/cve/CVE-2022-22743/" source="CVE"/>
		<reference ref_id="CVE-2022-22744" ref_url="https://www.suse.com/security/cve/CVE-2022-22744/" source="CVE"/>
		<reference ref_id="CVE-2022-22745" ref_url="https://www.suse.com/security/cve/CVE-2022-22745/" source="CVE"/>
		<reference ref_id="CVE-2022-22746" ref_url="https://www.suse.com/security/cve/CVE-2022-22746/" source="CVE"/>
		<reference ref_id="CVE-2022-22747" ref_url="https://www.suse.com/security/cve/CVE-2022-22747/" source="CVE"/>
		<reference ref_id="CVE-2022-22748" ref_url="https://www.suse.com/security/cve/CVE-2022-22748/" source="CVE"/>
		<reference ref_id="CVE-2022-22751" ref_url="https://www.suse.com/security/cve/CVE-2022-22751/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0137-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-January/021405.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- CVE-2021-4140: Fixed iframe sandbox bypass with XSLT (bsc#1194547).
- CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547).
- CVE-2022-22738: Fixed heap-buffer-overflow in blendGaussianBlur (bsc#1194547).
- CVE-2022-22739: Fixed missing throttling on external protocol launch dialog (bsc#1194547).
- CVE-2022-22740: Fixed use-after-free of ChannelEventQueue::mOwner (bsc#1194547).
- CVE-2022-22741: Fixed browser window spoof using fullscreen mode (bsc#1194547).
- CVE-2022-22742: Fixed out-of-bounds memory access when inserting text in edit mode (bsc#1194547).
- CVE-2022-22743: Fixed browser window spoof using fullscreen mode (bsc#1194547).
- CVE-2022-22744: Fixed possible command injection via the 'Copy as curl' feature in DevTools (bsc#1194547).
- CVE-2022-22745: Fixed leaking cross-origin URLs through securitypolicyviolation event (bsc#1194547).
- CVE-2022-22746: Fixed calling into reportValidity could have lead to fullscreen window spoof (bsc#1194547).
- CVE-2022-22747: Fixed crash when handling empty pkcs7 sequence(bsc#1194547).
- CVE-2022-22748: Fixed spoofed origin on external protocol launch dialog (bsc#1194547).
- CVE-2022-22751: Fixed memory safety bugs (bsc#1194547).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-20"/>
	<updated date="2022-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194547">SUSE bug 1194547</bugzilla>
	<cve impact="moderate" cvss3="10/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4140/">CVE-2021-4140</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22737/">CVE-2022-22737</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22738/">CVE-2022-22738</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22739/">CVE-2022-22739</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22740/">CVE-2022-22740</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22741/">CVE-2022-22741</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22742/">CVE-2022-22742</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-22743/">CVE-2022-22743</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22744/">CVE-2022-22744</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22745/">CVE-2022-22745</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22746/">CVE-2022-22746</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-22747/">CVE-2022-22747</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22748/">CVE-2022-22748</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22751/">CVE-2022-22751</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663746" comment="MozillaFirefox-91.5.0-150.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663747" comment="MozillaFirefox-devel-91.5.0-150.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663748" comment="MozillaFirefox-translations-common-91.5.0-150.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663749" comment="MozillaFirefox-translations-other-91.5.0-150.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140963" version="1" class="patch">
	<metadata>
		<title>Security update for cifs-utils (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197216" ref_url="https://bugzilla.suse.com/1197216" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-27239" ref_url="https://www.suse.com/security/cve/CVE-2022-27239/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-April/010845.html" source="SUSE-SU"/>
		<description>
This update for cifs-utils fixes the following issues:

- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-04-27"/>
	<updated date="2022-04-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197216">SUSE bug 1197216</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-27239/">CVE-2022-27239</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009681162" comment="cifs-utils-6.9-150100.5.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009681163" comment="cifs-utils-devel-6.9-150100.5.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140964" version="1" class="patch">
	<metadata>
		<title>Security update for aide (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194735" ref_url="https://bugzilla.suse.com/1194735" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-45417" ref_url="https://www.suse.com/security/cve/CVE-2021-45417/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0150-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010046.html" source="SUSE-SU"/>
		<description>
This update for aide fixes the following issues:

- CVE-2021-45417: Fix a bufferoverflow in base64 functions (bsc#1194735)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-21"/>
	<updated date="2022-01-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194735">SUSE bug 1194735</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-45417/">CVE-2021-45417</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664151" comment="aide-0.16-24.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140965" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196133" ref_url="https://bugzilla.suse.com/1196133" source="BUGZILLA"/>
		<reference ref_id="1198290" ref_url="https://bugzilla.suse.com/1198290" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22594" ref_url="https://www.suse.com/security/cve/CVE-2022-22594/" source="CVE"/>
		<reference ref_id="CVE-2022-22624" ref_url="https://www.suse.com/security/cve/CVE-2022-22624/" source="CVE"/>
		<reference ref_id="CVE-2022-22628" ref_url="https://www.suse.com/security/cve/CVE-2022-22628/" source="CVE"/>
		<reference ref_id="CVE-2022-22629" ref_url="https://www.suse.com/security/cve/CVE-2022-22629/" source="CVE"/>
		<reference ref_id="CVE-2022-22637" ref_url="https://www.suse.com/security/cve/CVE-2022-22637/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1511-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010915.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.36.0 (bsc#1198290):

- CVE-2022-22624: Fixed use after free that may lead to arbitrary code execution.
- CVE-2022-22628: Fixed use after free that may lead to arbitrary code execution.
- CVE-2022-22629: Fixed a buffer overflow that may lead to arbitrary code execution.
- CVE-2022-22637: Fixed an unexpected cross-origin behavior due to a logic error.

Missing CVE reference for the update to 2.34.6 (bsc#1196133):

- CVE-2022-22594: Fixed a cross-origin issue in the IndexDB API.   
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-03"/>
	<updated date="2022-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196133">SUSE bug 1196133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198290">SUSE bug 1198290</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22594/">CVE-2022-22594</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22624/">CVE-2022-22624</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22628/">CVE-2022-22628</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22629/">CVE-2022-22629</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22637/">CVE-2022-22637</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680393" comment="libjavascriptcoregtk-4_0-18-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680394" comment="libwebkit2gtk-4_0-37-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680323" comment="libwebkit2gtk3-lang-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680395" comment="typelib-1_0-JavaScriptCore-4_0-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680396" comment="typelib-1_0-WebKit2-4_0-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680397" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680398" comment="webkit2gtk-4_0-injected-bundles-2.36.0-150000.3.100.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680399" comment="webkit2gtk3-devel-2.36.0-150000.3.100.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140966" version="1" class="patch">
	<metadata>
		<title>Security update for ruby2.5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188160" ref_url="https://bugzilla.suse.com/1188160" source="BUGZILLA"/>
		<reference ref_id="1188161" ref_url="https://bugzilla.suse.com/1188161" source="BUGZILLA"/>
		<reference ref_id="1190375" ref_url="https://bugzilla.suse.com/1190375" source="BUGZILLA"/>
		<reference ref_id="1193035" ref_url="https://bugzilla.suse.com/1193035" source="BUGZILLA"/>
		<reference ref_id="1198441" ref_url="https://bugzilla.suse.com/1198441" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-31799" ref_url="https://www.suse.com/security/cve/CVE-2021-31799/" source="CVE"/>
		<reference ref_id="CVE-2021-31810" ref_url="https://www.suse.com/security/cve/CVE-2021-31810/" source="CVE"/>
		<reference ref_id="CVE-2021-32066" ref_url="https://www.suse.com/security/cve/CVE-2021-32066/" source="CVE"/>
		<reference ref_id="CVE-2021-41817" ref_url="https://www.suse.com/security/cve/CVE-2021-41817/" source="CVE"/>
		<reference ref_id="CVE-2022-28739" ref_url="https://www.suse.com/security/cve/CVE-2022-28739/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1512-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010920.html" source="SUSE-SU"/>
		<description>
This update for ruby2.5 fixes the following issues:

- CVE-2022-28739: Fixed a buffer overrun in String-to-Float conversion (bsc#1198441).
- CVE-2021-41817: Fixed a regular expression denial of service in Date Parsing Methods (bsc#1193035).
- CVE-2021-32066: Fixed a StartTLS stripping vulnerability in Net:IMAP (bsc#1188160).
- CVE-2021-31810: Fixed a trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161).
- CVE-2021-31799: Fixed a command injection vulnerability in RDoc (bsc#1190375). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-03"/>
	<updated date="2022-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188160">SUSE bug 1188160</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188161">SUSE bug 1188161</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190375">SUSE bug 1190375</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193035">SUSE bug 1193035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198441">SUSE bug 1198441</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-31799/">CVE-2021-31799</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-31810/">CVE-2021-31810</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-32066/">CVE-2021-32066</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-41817/">CVE-2021-41817</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-28739/">CVE-2022-28739</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680171" comment="libruby2_5-2_5-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680172" comment="ruby2.5-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680173" comment="ruby2.5-devel-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680174" comment="ruby2.5-devel-extra-2.5.9-150000.4.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680175" comment="ruby2.5-stdlib-2.5.9-150000.4.23.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140967" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198671" ref_url="https://bugzilla.suse.com/1198671" source="BUGZILLA"/>
		<reference ref_id="1198672" ref_url="https://bugzilla.suse.com/1198672" source="BUGZILLA"/>
		<reference ref_id="1198673" ref_url="https://bugzilla.suse.com/1198673" source="BUGZILLA"/>
		<reference ref_id="1198674" ref_url="https://bugzilla.suse.com/1198674" source="BUGZILLA"/>
		<reference ref_id="1198675" ref_url="https://bugzilla.suse.com/1198675" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21426" ref_url="https://www.suse.com/security/cve/CVE-2022-21426/" source="CVE"/>
		<reference ref_id="CVE-2022-21434" ref_url="https://www.suse.com/security/cve/CVE-2022-21434/" source="CVE"/>
		<reference ref_id="CVE-2022-21443" ref_url="https://www.suse.com/security/cve/CVE-2022-21443/" source="CVE"/>
		<reference ref_id="CVE-2022-21476" ref_url="https://www.suse.com/security/cve/CVE-2022-21476/" source="CVE"/>
		<reference ref_id="CVE-2022-21496" ref_url="https://www.suse.com/security/cve/CVE-2022-21496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1513-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010919.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- CVE-2022-21426: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198672).
- CVE-2022-21434: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198674).
- CVE-2022-21496: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198673).
- CVE-2022-21443: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198675).
- CVE-2022-21476: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198671).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-03"/>
	<updated date="2022-05-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198671">SUSE bug 1198671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198672">SUSE bug 1198672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198673">SUSE bug 1198673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198674">SUSE bug 1198674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198675">SUSE bug 1198675</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21426/">CVE-2022-21426</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21434/">CVE-2022-21434</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21443/">CVE-2022-21443</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21476/">CVE-2022-21476</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21496/">CVE-2022-21496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009680176" comment="java-11-openjdk-11.0.15.0-150000.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680177" comment="java-11-openjdk-demo-11.0.15.0-150000.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680178" comment="java-11-openjdk-devel-11.0.15.0-150000.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009680179" comment="java-11-openjdk-headless-11.0.15.0-150000.3.80.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140968" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188891" ref_url="https://bugzilla.suse.com/1188891" source="BUGZILLA"/>
		<reference ref_id="1189547" ref_url="https://bugzilla.suse.com/1189547" source="BUGZILLA"/>
		<reference ref_id="1190269" ref_url="https://bugzilla.suse.com/1190269" source="BUGZILLA"/>
		<reference ref_id="1190274" ref_url="https://bugzilla.suse.com/1190274" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-29980" ref_url="https://www.suse.com/security/cve/CVE-2021-29980/" source="CVE"/>
		<reference ref_id="CVE-2021-29981" ref_url="https://www.suse.com/security/cve/CVE-2021-29981/" source="CVE"/>
		<reference ref_id="CVE-2021-29982" ref_url="https://www.suse.com/security/cve/CVE-2021-29982/" source="CVE"/>
		<reference ref_id="CVE-2021-29983" ref_url="https://www.suse.com/security/cve/CVE-2021-29983/" source="CVE"/>
		<reference ref_id="CVE-2021-29984" ref_url="https://www.suse.com/security/cve/CVE-2021-29984/" source="CVE"/>
		<reference ref_id="CVE-2021-29985" ref_url="https://www.suse.com/security/cve/CVE-2021-29985/" source="CVE"/>
		<reference ref_id="CVE-2021-29986" ref_url="https://www.suse.com/security/cve/CVE-2021-29986/" source="CVE"/>
		<reference ref_id="CVE-2021-29987" ref_url="https://www.suse.com/security/cve/CVE-2021-29987/" source="CVE"/>
		<reference ref_id="CVE-2021-29988" ref_url="https://www.suse.com/security/cve/CVE-2021-29988/" source="CVE"/>
		<reference ref_id="CVE-2021-29989" ref_url="https://www.suse.com/security/cve/CVE-2021-29989/" source="CVE"/>
		<reference ref_id="CVE-2021-29990" ref_url="https://www.suse.com/security/cve/CVE-2021-29990/" source="CVE"/>
		<reference ref_id="CVE-2021-29991" ref_url="https://www.suse.com/security/cve/CVE-2021-29991/" source="CVE"/>
		<reference ref_id="CVE-2021-38492" ref_url="https://www.suse.com/security/cve/CVE-2021-38492/" source="CVE"/>
		<reference ref_id="CVE-2021-38495" ref_url="https://www.suse.com/security/cve/CVE-2021-38495/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1577-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/010973.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

This update contains the Firefox Extended Support Release 91.1.0 ESR.

* Fixed: Various stability, functionality, and security fixes

MFSA 2021-40 (bsc#1190269, bsc#1190274):

* CVE-2021-38492: Navigating to `mk:` URL scheme could load Internet Explorer
* CVE-2021-38495: Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1

Firefox 91.0.1esr ESR

* Fixed: Fixed an issue causing buttons on the tab bar to be
  resized when loading certain websites (bug 1704404)
* Fixed: Fixed an issue which caused tabs from private windows
  to be visible in non-private windows when viewing switch-to-
  tab results in the address bar panel (bug 1720369)
* Fixed: Various stability fixes
* Fixed: Security fix MFSA 2021-37 (bsc#1189547)
* CVE-2021-29991 (bmo#1724896)
  Header Splitting possible with HTTP/3 Responses

Firefox Extended Support Release 91.0 ESR

* New: Some of the highlights of the new Extended Support Release are:

  - A number of user interface changes. For more information,
    see the Firefox 89 release notes.
  - Firefox now supports logging into Microsoft, work, and
    school accounts using Windows single sign-on. Learn more
  - On Windows, updates can now be applied in the background
    while Firefox is not running.
  - Firefox for Windows now offers a new page about:third-party
    to help identify compatibility issues caused by third-party
    applications
  - Version 2 of Firefox's SmartBlock feature further improves
    private browsing. Third party Facebook scripts are blocked to
    prevent you from being tracked, but are now automatically
    loaded 'just in time' if you decide to 'Log in with Facebook'
    on any website.
  - Enhanced the privacy of the Firefox Browser's Private
    Browsing mode with Total Cookie Protection, which confines
    cookies to the site where they were created, preventing
    companis from using cookies to track your browsing across
    sites. This feature was originally launched in Firefox's ETP
    Strict mode.
  - PDF forms now support JavaScript embedded in PDF files.
    Some PDF forms use JavaScript for validation and other
    interactive features.
  - You'll encounter less website breakage in Private Browsing
    and Strict Enhanced Tracking Protection with SmartBlock,
    which provides stand-in scripts so that websites load
    properly.
  - Improved Print functionality with a cleaner design and
    better integration with your computer's printer settings.
  - Firefox now protects you from supercookies, a type of
    tracker that can stay hidden in your browser and track you
    online, even after you clear cookies. By isolating
    supercookies, Firefox prevents them from tracking your web
    browsing from one site to the next.
  - Firefox now remembers your preferred location for saved
    bookmarks, displays the bookmarks toolbar by default on new
    tabs, and gives you easy access to all of your bookmarks via
    a toolbar folder.
  - Native support for macOS devices built with Apple Silicon
    CPUs brings dramatic performance improvements over the non-
    native build that was shipped in Firefox 83: Firefox launches
    over 2.5 times faster and web apps are now twice as
    responsive (per the SpeedoMeter 2.0 test). If you are on a
    new Apple device, follow these steps to upgrade to the latest
    Firefox.
  - Pinch zooming will now be supported for our users with
    Windows touchscreen devices and touchpads on Mac devices.
    Firefox users may now use pinch to zoom on touch-capable
    devices to zoom in and out of webpages.
  - We’ve improved functionality and design for a number of
    Firefox search features:
    * Selecting a search engine at the bottom of the search
      panel now enters search mode for that engine, allowing you to
      see suggestions (if available) for your search terms. The old
      behavior (immediately performing a search) is available with
      a shift-click.
    * When Firefox autocompletes the URL of one of your search
      engines, you can now search with that engine directly in the
      address bar by selecting the shortcut in the address bar
      results.
    * We’ve added buttons at the bottom of the search panel to
      allow you to search your bookmarks, open tabs, and history.
  - Firefox supports AcroForm, which will allow you to fill in,
    print, and save supported PDF forms and the PDF viewer also
    has a new fresh look.
  - For our users in the US and Canada, Firefox can now save,
    manage, and auto-fill credit card information for you, making
    shopping on Firefox ever more convenient.
  - In addition to our default, dark and light themes, with
    this release, Firefox introduces the Alpenglow theme: a
    colorful appearance for buttons, menus, and windows. You can
    update your Firefox themes under settings or preferences.
* Changed: Firefox no longer supports Adobe Flash. There is no
  setting available to re-enable Flash support.
* Enterprise: Various bug fixes and new policies have been
  implemented in the latest version of Firefox. See more
  details in the Firefox for Enterprise 91 Release Notes.

  MFSA 2021-33 (bsc#1188891):

* CVE-2021-29986: Race condition when resolving DNS names could have led to
  memory corruption
* CVE-2021-29981: Live range splitting could have led to conflicting
  assignments in the JIT
* CVE-2021-29988: Memory corruption as a result of incorrect style treatment
* CVE-2021-29983: Firefox for Android could get stuck in fullscreen mode
* CVE-2021-29984: Incorrect instruction reordering during JIT optimization
* CVE-2021-29980: Uninitialized memory in a canvas object could have led to
  memory corruption
* CVE-2021-29987: Users could have been tricked into accepting unwanted
  permissions on Linux
* CVE-2021-29985: Use-after-free media channels
* CVE-2021-29982: Single bit data leak due to incorrect JIT optimization and
  type confusion
* CVE-2021-29989: Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13
* CVE-2021-29990: Memory safety bugs fixed in Firefox 91
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-09"/>
	<updated date="2022-05-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188891">SUSE bug 1188891</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189547">SUSE bug 1189547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190269">SUSE bug 1190269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190274">SUSE bug 1190274</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29980/">CVE-2021-29980</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29981/">CVE-2021-29981</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29982/">CVE-2021-29982</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29983/">CVE-2021-29983</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29984/">CVE-2021-29984</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-29985/">CVE-2021-29985</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29986/">CVE-2021-29986</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-29987/">CVE-2021-29987</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29988/">CVE-2021-29988</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29989/">CVE-2021-29989</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-29990/">CVE-2021-29990</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-29991/">CVE-2021-29991</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-38492/">CVE-2021-38492</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-38495/">CVE-2021-38495</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009682464" comment="MozillaFirefox-91.9.0-150000.150.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682465" comment="MozillaFirefox-devel-91.9.0-150000.150.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682466" comment="MozillaFirefox-translations-common-91.9.0-150000.150.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682467" comment="MozillaFirefox-translations-other-91.9.0-150000.150.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140969" version="1" class="patch">
	<metadata>
		<title>Security update for gzip (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="CVE-2022-1271" ref_url="https://www.suse.com/security/cve/CVE-2022-1271/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1674-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011021.html" source="SUSE-SU"/>
		<description>
This update for gzip fixes the following issues:

- CVE-2022-1271: Add hardening for zgrep. (bsc#1198062)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-16"/>
	<updated date="2022-05-16"/>
	<severity>Important</severity>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1271/">CVE-2022-1271</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682478" comment="gzip-1.10-150000.4.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140970" version="1" class="patch">
	<metadata>
		<title>Security update for e2fsprogs (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198446" ref_url="https://bugzilla.suse.com/1198446" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1304" ref_url="https://www.suse.com/security/cve/CVE-2022-1304/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1688-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011031.html" source="SUSE-SU"/>
		<description>
This update for e2fsprogs fixes the following issues:

- CVE-2022-1304: Fixed out-of-bounds read/write leading to segmentation fault
  and possibly arbitrary code execution. (bsc#1198446)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-16"/>
	<updated date="2022-05-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198446">SUSE bug 1198446</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-1304/">CVE-2022-1304</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009682213" comment="e2fsprogs-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682214" comment="e2fsprogs-devel-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682215" comment="libcom_err-devel-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682216" comment="libcom_err-devel-static-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682217" comment="libcom_err2-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682218" comment="libcom_err2-32bit-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682219" comment="libext2fs-devel-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682220" comment="libext2fs-devel-static-1.43.8-150000.4.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682221" comment="libext2fs2-1.43.8-150000.4.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140971" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193930" ref_url="https://bugzilla.suse.com/1193930" source="BUGZILLA"/>
		<reference ref_id="1196441" ref_url="https://bugzilla.suse.com/1196441" source="BUGZILLA"/>
		<reference ref_id="1197284" ref_url="https://bugzilla.suse.com/1197284" source="BUGZILLA"/>
		<reference ref_id="1197517" ref_url="https://bugzilla.suse.com/1197517" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43565" ref_url="https://www.suse.com/security/cve/CVE-2021-43565/" source="CVE"/>
		<reference ref_id="CVE-2022-23648" ref_url="https://www.suse.com/security/cve/CVE-2022-23648/" source="CVE"/>
		<reference ref_id="CVE-2022-24769" ref_url="https://www.suse.com/security/cve/CVE-2022-24769/" source="CVE"/>
		<reference ref_id="CVE-2022-27191" ref_url="https://www.suse.com/security/cve/CVE-2022-27191/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1689-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011030.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker fixes the following issues:

- CVE-2022-24769: Fixed incorrect default inheritable capabilities (bsc#1197517).
- CVE-2022-23648: Fixed directory traversal issue (bsc#1196441).
- CVE-2022-27191: Fixed a crash in a golang.org/x/crypto/ssh server (bsc#1197284).
- CVE-2021-43565: Fixed a panic in golang.org/x/crypto by empty plaintext packet (bsc#1193930).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-16"/>
	<updated date="2022-05-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193930">SUSE bug 1193930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196441">SUSE bug 1196441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197284">SUSE bug 1197284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197517">SUSE bug 1197517</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43565/">CVE-2021-43565</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23648/">CVE-2022-23648</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-24769/">CVE-2022-24769</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27191/">CVE-2022-27191</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679819" comment="containerd-1.5.11-150000.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679831" comment="containerd-ctr-1.5.11-150000.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009681369" comment="docker-20.10.14_ce-150000.163.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009681370" comment="docker-bash-completion-20.10.14_ce-150000.163.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140972" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191962" ref_url="https://bugzilla.suse.com/1191962" source="BUGZILLA"/>
		<reference ref_id="1191963" ref_url="https://bugzilla.suse.com/1191963" source="BUGZILLA"/>
		<reference ref_id="1192153" ref_url="https://bugzilla.suse.com/1192153" source="BUGZILLA"/>
		<reference ref_id="1192154" ref_url="https://bugzilla.suse.com/1192154" source="BUGZILLA"/>
		<reference ref_id="1192696" ref_url="https://bugzilla.suse.com/1192696" source="BUGZILLA"/>
		<reference ref_id="1194514" ref_url="https://bugzilla.suse.com/1194514" source="BUGZILLA"/>
		<reference ref_id="1194819" ref_url="https://bugzilla.suse.com/1194819" source="BUGZILLA"/>
		<reference ref_id="1197283" ref_url="https://bugzilla.suse.com/1197283" source="BUGZILLA"/>
		<reference ref_id="1198247" ref_url="https://bugzilla.suse.com/1198247" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23343" ref_url="https://www.suse.com/security/cve/CVE-2021-23343/" source="CVE"/>
		<reference ref_id="CVE-2021-32803" ref_url="https://www.suse.com/security/cve/CVE-2021-32803/" source="CVE"/>
		<reference ref_id="CVE-2021-32804" ref_url="https://www.suse.com/security/cve/CVE-2021-32804/" source="CVE"/>
		<reference ref_id="CVE-2021-3807" ref_url="https://www.suse.com/security/cve/CVE-2021-3807/" source="CVE"/>
		<reference ref_id="CVE-2021-3918" ref_url="https://www.suse.com/security/cve/CVE-2021-3918/" source="CVE"/>
		<reference ref_id="CVE-2021-44906" ref_url="https://www.suse.com/security/cve/CVE-2021-44906/" source="CVE"/>
		<reference ref_id="CVE-2021-44907" ref_url="https://www.suse.com/security/cve/CVE-2021-44907/" source="CVE"/>
		<reference ref_id="CVE-2022-0235" ref_url="https://www.suse.com/security/cve/CVE-2022-0235/" source="CVE"/>
		<reference ref_id="CVE-2022-21824" ref_url="https://www.suse.com/security/cve/CVE-2022-21824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1717-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011058.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).
- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).
- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).
- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).
- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).
- CVE-2022-21824: Fixed prototype pollution via console.table (bsc#1194514).
- CVE-2021-44906: Fixed prototype pollution in npm dependency (bsc#1198247).
- CVE-2021-44907: Fixed insuficient sanitation in npm dependency (bsc#1197283).
- CVE-2022-0235: Fixed passing of cookie data and sensitive headers to different hostnames in node-fetch-npm (bsc#1194819).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-17"/>
	<updated date="2022-05-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191962">SUSE bug 1191962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191963">SUSE bug 1191963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192153">SUSE bug 1192153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192154">SUSE bug 1192154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192696">SUSE bug 1192696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194514">SUSE bug 1194514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194819">SUSE bug 1194819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197283">SUSE bug 1197283</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198247">SUSE bug 1198247</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23343/">CVE-2021-23343</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32803/">CVE-2021-32803</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32804/">CVE-2021-32804</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3807/">CVE-2021-3807</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3918/">CVE-2021-3918</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-44906/">CVE-2021-44906</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-44907/">CVE-2021-44907</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0235/">CVE-2022-0235</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-21824/">CVE-2022-21824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009683568" comment="nodejs10-10.24.1-150000.1.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683569" comment="nodejs10-devel-10.24.1-150000.1.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683551" comment="nodejs10-docs-10.24.1-150000.1.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683570" comment="npm10-10.24.1-150000.1.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140973" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198717" ref_url="https://bugzilla.suse.com/1198717" source="BUGZILLA"/>
		<reference ref_id="1199423" ref_url="https://bugzilla.suse.com/1199423" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21151" ref_url="https://www.suse.com/security/cve/CVE-2022-21151/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1728-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011081.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20220510 release. (bsc#1199423)
Updated to Intel CPU Microcode 20220419 release. (bsc#1198717)

- CVE-2022-21151: Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access (bsc#1199423).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-18"/>
	<updated date="2022-05-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1198717">SUSE bug 1198717</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199423">SUSE bug 1199423</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21151/">CVE-2022-21151</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683567" comment="ucode-intel-20220510-150100.3.210.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140974" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198970" ref_url="https://bugzilla.suse.com/1198970" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29909" ref_url="https://www.suse.com/security/cve/CVE-2022-29909/" source="CVE"/>
		<reference ref_id="CVE-2022-29911" ref_url="https://www.suse.com/security/cve/CVE-2022-29911/" source="CVE"/>
		<reference ref_id="CVE-2022-29912" ref_url="https://www.suse.com/security/cve/CVE-2022-29912/" source="CVE"/>
		<reference ref_id="CVE-2022-29914" ref_url="https://www.suse.com/security/cve/CVE-2022-29914/" source="CVE"/>
		<reference ref_id="CVE-2022-29916" ref_url="https://www.suse.com/security/cve/CVE-2022-29916/" source="CVE"/>
		<reference ref_id="CVE-2022-29917" ref_url="https://www.suse.com/security/cve/CVE-2022-29917/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011084.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.9.0 ESR (MFSA 2022-17)(bsc#1198970):

- CVE-2022-29914: Fullscreen notification bypass using popups
- CVE-2022-29909: Bypassing permission prompt in nested browsing contexts
- CVE-2022-29916: Leaking browser history with CSS variables
- CVE-2022-29911: iframe Sandbox bypass
- CVE-2022-29912: Reader mode bypassed SameSite cookies
- CVE-2022-29917: Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-18"/>
	<updated date="2022-05-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198970">SUSE bug 1198970</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29909/">CVE-2022-29909</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29911/">CVE-2022-29911</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-29912/">CVE-2022-29912</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29914/">CVE-2022-29914</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29916/">CVE-2022-29916</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29917/">CVE-2022-29917</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684030" comment="MozillaFirefox-91.9.0-150000.150.38.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684031" comment="MozillaFirefox-devel-91.9.0-150000.150.38.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684032" comment="MozillaFirefox-translations-common-91.9.0-150000.150.38.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684033" comment="MozillaFirefox-translations-other-91.9.0-150000.150.38.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140975" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196490" ref_url="https://bugzilla.suse.com/1196490" source="BUGZILLA"/>
		<reference ref_id="1199132" ref_url="https://bugzilla.suse.com/1199132" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23308" ref_url="https://www.suse.com/security/cve/CVE-2022-23308/" source="CVE"/>
		<reference ref_id="CVE-2022-29824" ref_url="https://www.suse.com/security/cve/CVE-2022-29824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1750-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011098.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

- CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes (bsc#1196490).
- CVE-2022-29824: Fixed integer overflow that could have led to an out-of-bounds write in buf.c (xmlBuf*) and tree.c (xmlBuffer*) (bsc#1199132).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-19"/>
	<updated date="2022-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196490">SUSE bug 1196490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199132">SUSE bug 1199132</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-23308/">CVE-2022-23308</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29824/">CVE-2022-29824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009683445" comment="libxml2-2-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683446" comment="libxml2-2-32bit-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683447" comment="libxml2-devel-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683448" comment="libxml2-tools-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683542" comment="python2-libxml2-python-2.9.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683449" comment="python3-libxml2-python-2.9.7-150000.3.46.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140976" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192953" ref_url="https://bugzilla.suse.com/1192953" source="BUGZILLA"/>
		<reference ref_id="1195786" ref_url="https://bugzilla.suse.com/1195786" source="BUGZILLA"/>
		<reference ref_id="1199459" ref_url="https://bugzilla.suse.com/1199459" source="BUGZILLA"/>
		<reference ref_id="1199470" ref_url="https://bugzilla.suse.com/1199470" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0071" ref_url="https://www.suse.com/security/cve/CVE-2021-0071/" source="CVE"/>
		<reference ref_id="CVE-2021-26312" ref_url="https://www.suse.com/security/cve/CVE-2021-26312/" source="CVE"/>
		<reference ref_id="CVE-2021-26339" ref_url="https://www.suse.com/security/cve/CVE-2021-26339/" source="CVE"/>
		<reference ref_id="CVE-2021-26342" ref_url="https://www.suse.com/security/cve/CVE-2021-26342/" source="CVE"/>
		<reference ref_id="CVE-2021-26347" ref_url="https://www.suse.com/security/cve/CVE-2021-26347/" source="CVE"/>
		<reference ref_id="CVE-2021-26348" ref_url="https://www.suse.com/security/cve/CVE-2021-26348/" source="CVE"/>
		<reference ref_id="CVE-2021-26349" ref_url="https://www.suse.com/security/cve/CVE-2021-26349/" source="CVE"/>
		<reference ref_id="CVE-2021-26350" ref_url="https://www.suse.com/security/cve/CVE-2021-26350/" source="CVE"/>
		<reference ref_id="CVE-2021-26364" ref_url="https://www.suse.com/security/cve/CVE-2021-26364/" source="CVE"/>
		<reference ref_id="CVE-2021-26372" ref_url="https://www.suse.com/security/cve/CVE-2021-26372/" source="CVE"/>
		<reference ref_id="CVE-2021-26373" ref_url="https://www.suse.com/security/cve/CVE-2021-26373/" source="CVE"/>
		<reference ref_id="CVE-2021-26375" ref_url="https://www.suse.com/security/cve/CVE-2021-26375/" source="CVE"/>
		<reference ref_id="CVE-2021-26376" ref_url="https://www.suse.com/security/cve/CVE-2021-26376/" source="CVE"/>
		<reference ref_id="CVE-2021-26378" ref_url="https://www.suse.com/security/cve/CVE-2021-26378/" source="CVE"/>
		<reference ref_id="CVE-2021-26388" ref_url="https://www.suse.com/security/cve/CVE-2021-26388/" source="CVE"/>
		<reference ref_id="CVE-2021-33139" ref_url="https://www.suse.com/security/cve/CVE-2021-33139/" source="CVE"/>
		<reference ref_id="CVE-2021-33155" ref_url="https://www.suse.com/security/cve/CVE-2021-33155/" source="CVE"/>
		<reference ref_id="CVE-2021-46744" ref_url="https://www.suse.com/security/cve/CVE-2021-46744/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1751-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011100.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

Update AMD ucode and SEV firmware

- CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
  CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
  CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
  CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, CVE-2021-46744,
  bsc#1199459, bsc#1199470)

Update Intel Bluetooth firmware (INTEL-SA-00604, bsc#1195786):

- CVE-2021-33139, CVE-2021-33155: Improper conditions check in the firmware for some Intel Wireless Bluetooth and Killer Bluetooth products may allow an authenticated user to potentially cause denial of service via adjacent access.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-19"/>
	<updated date="2022-05-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1192953">SUSE bug 1192953</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195786">SUSE bug 1195786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199459">SUSE bug 1199459</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199470">SUSE bug 1199470</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0071/">CVE-2021-0071</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-26312/">CVE-2021-26312</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26339/">CVE-2021-26339</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-26342/">CVE-2021-26342</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26347/">CVE-2021-26347</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-26348/">CVE-2021-26348</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-26349/">CVE-2021-26349</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26350/">CVE-2021-26350</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26364/">CVE-2021-26364</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26372/">CVE-2021-26372</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26373/">CVE-2021-26373</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26375/">CVE-2021-26375</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26376/">CVE-2021-26376</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26378/">CVE-2021-26378</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-26388/">CVE-2021-26388</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33139/">CVE-2021-33139</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33155/">CVE-2021-33155</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-46744/">CVE-2021-46744</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684024" comment="kernel-firmware-20200107-150100.3.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684025" comment="ucode-amd-20200107-150100.3.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140977" version="1" class="patch">
	<metadata>
		<title>Security update for unbound (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1076963" ref_url="https://bugzilla.suse.com/1076963" source="BUGZILLA"/>
		<reference ref_id="1112009" ref_url="https://bugzilla.suse.com/1112009" source="BUGZILLA"/>
		<reference ref_id="1112033" ref_url="https://bugzilla.suse.com/1112033" source="BUGZILLA"/>
		<reference ref_id="1179191" ref_url="https://bugzilla.suse.com/1179191" source="BUGZILLA"/>
		<reference ref_id="1185382" ref_url="https://bugzilla.suse.com/1185382" source="BUGZILLA"/>
		<reference ref_id="1185383" ref_url="https://bugzilla.suse.com/1185383" source="BUGZILLA"/>
		<reference ref_id="1185384" ref_url="https://bugzilla.suse.com/1185384" source="BUGZILLA"/>
		<reference ref_id="1185385" ref_url="https://bugzilla.suse.com/1185385" source="BUGZILLA"/>
		<reference ref_id="1185386" ref_url="https://bugzilla.suse.com/1185386" source="BUGZILLA"/>
		<reference ref_id="1185387" ref_url="https://bugzilla.suse.com/1185387" source="BUGZILLA"/>
		<reference ref_id="1185388" ref_url="https://bugzilla.suse.com/1185388" source="BUGZILLA"/>
		<reference ref_id="1185389" ref_url="https://bugzilla.suse.com/1185389" source="BUGZILLA"/>
		<reference ref_id="1185390" ref_url="https://bugzilla.suse.com/1185390" source="BUGZILLA"/>
		<reference ref_id="1185391" ref_url="https://bugzilla.suse.com/1185391" source="BUGZILLA"/>
		<reference ref_id="1185392" ref_url="https://bugzilla.suse.com/1185392" source="BUGZILLA"/>
		<reference ref_id="1185393" ref_url="https://bugzilla.suse.com/1185393" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-25031" ref_url="https://www.suse.com/security/cve/CVE-2019-25031/" source="CVE"/>
		<reference ref_id="CVE-2019-25032" ref_url="https://www.suse.com/security/cve/CVE-2019-25032/" source="CVE"/>
		<reference ref_id="CVE-2019-25033" ref_url="https://www.suse.com/security/cve/CVE-2019-25033/" source="CVE"/>
		<reference ref_id="CVE-2019-25034" ref_url="https://www.suse.com/security/cve/CVE-2019-25034/" source="CVE"/>
		<reference ref_id="CVE-2019-25035" ref_url="https://www.suse.com/security/cve/CVE-2019-25035/" source="CVE"/>
		<reference ref_id="CVE-2019-25036" ref_url="https://www.suse.com/security/cve/CVE-2019-25036/" source="CVE"/>
		<reference ref_id="CVE-2019-25037" ref_url="https://www.suse.com/security/cve/CVE-2019-25037/" source="CVE"/>
		<reference ref_id="CVE-2019-25038" ref_url="https://www.suse.com/security/cve/CVE-2019-25038/" source="CVE"/>
		<reference ref_id="CVE-2019-25039" ref_url="https://www.suse.com/security/cve/CVE-2019-25039/" source="CVE"/>
		<reference ref_id="CVE-2019-25040" ref_url="https://www.suse.com/security/cve/CVE-2019-25040/" source="CVE"/>
		<reference ref_id="CVE-2019-25041" ref_url="https://www.suse.com/security/cve/CVE-2019-25041/" source="CVE"/>
		<reference ref_id="CVE-2019-25042" ref_url="https://www.suse.com/security/cve/CVE-2019-25042/" source="CVE"/>
		<reference ref_id="CVE-2020-28935" ref_url="https://www.suse.com/security/cve/CVE-2020-28935/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0176-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010064.html" source="SUSE-SU"/>
		<description>
This update for unbound fixes the following issues:

- CVE-2019-25031: Fixed configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack (bsc#1185382).
- CVE-2019-25032: Fixed integer overflow in the regional allocator via regional_alloc (bsc#1185383).
- CVE-2019-25033: Fixed integer overflow in the regional allocator via the ALIGN_UP macro (bsc#1185384).
- CVE-2019-25034: Fixed integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write (bsc#1185385).
- CVE-2019-25035: Fixed out-of-bounds write in sldns_bget_token_par (bsc#1185386).
- CVE-2019-25036: Fixed assertion failure and denial of service in synth_cname (bsc#1185387).
- CVE-2019-25037: Fixed assertion failure and denial of service in dname_pkt_copy via an invalid packet (bsc#1185388).
- CVE-2019-25038: Fixed integer overflow in a size calculation in dnscrypt/dnscrypt.c (bsc#1185389).
- CVE-2019-25039: Fixed integer overflow in a size calculation in respip/respip.c (bsc#1185390).
- CVE-2019-25040: Fixed infinite loop via a compressed name in dname_pkt_copy (bsc#1185391).
- CVE-2019-25041: Fixed assertion failure via a compressed name in dname_pkt_copy (bsc#1185392).
- CVE-2019-25042: Fixed out-of-bounds write via a compressed name in rdata_copy (bsc#1185393).
- CVE-2020-28935: Fixed symbolic link traversal when writing PID file (bsc#1179191).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076963">SUSE bug 1076963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112009">SUSE bug 1112009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1112033">SUSE bug 1112033</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179191">SUSE bug 1179191</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185382">SUSE bug 1185382</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185383">SUSE bug 1185383</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185384">SUSE bug 1185384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185385">SUSE bug 1185385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185386">SUSE bug 1185386</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185387">SUSE bug 1185387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185388">SUSE bug 1185388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185389">SUSE bug 1185389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185390">SUSE bug 1185390</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185391">SUSE bug 1185391</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185392">SUSE bug 1185392</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185393">SUSE bug 1185393</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-25031/">CVE-2019-25031</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25032/">CVE-2019-25032</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25033/">CVE-2019-25033</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-25034/">CVE-2019-25034</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-25035/">CVE-2019-25035</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25036/">CVE-2019-25036</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25037/">CVE-2019-25037</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25038/">CVE-2019-25038</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25039/">CVE-2019-25039</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25040/">CVE-2019-25040</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-25041/">CVE-2019-25041</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-25042/">CVE-2019-25042</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-28935/">CVE-2020-28935</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664287" comment="libunbound2-1.6.8-10.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664288" comment="unbound-anchor-1.6.8-10.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664289" comment="unbound-devel-1.6.8-10.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140978" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194251" ref_url="https://bugzilla.suse.com/1194251" source="BUGZILLA"/>
		<reference ref_id="1194362" ref_url="https://bugzilla.suse.com/1194362" source="BUGZILLA"/>
		<reference ref_id="1194474" ref_url="https://bugzilla.suse.com/1194474" source="BUGZILLA"/>
		<reference ref_id="1194476" ref_url="https://bugzilla.suse.com/1194476" source="BUGZILLA"/>
		<reference ref_id="1194477" ref_url="https://bugzilla.suse.com/1194477" source="BUGZILLA"/>
		<reference ref_id="1194478" ref_url="https://bugzilla.suse.com/1194478" source="BUGZILLA"/>
		<reference ref_id="1194479" ref_url="https://bugzilla.suse.com/1194479" source="BUGZILLA"/>
		<reference ref_id="1194480" ref_url="https://bugzilla.suse.com/1194480" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-45960" ref_url="https://www.suse.com/security/cve/CVE-2021-45960/" source="CVE"/>
		<reference ref_id="CVE-2021-46143" ref_url="https://www.suse.com/security/cve/CVE-2021-46143/" source="CVE"/>
		<reference ref_id="CVE-2022-22822" ref_url="https://www.suse.com/security/cve/CVE-2022-22822/" source="CVE"/>
		<reference ref_id="CVE-2022-22823" ref_url="https://www.suse.com/security/cve/CVE-2022-22823/" source="CVE"/>
		<reference ref_id="CVE-2022-22824" ref_url="https://www.suse.com/security/cve/CVE-2022-22824/" source="CVE"/>
		<reference ref_id="CVE-2022-22825" ref_url="https://www.suse.com/security/cve/CVE-2022-22825/" source="CVE"/>
		<reference ref_id="CVE-2022-22826" ref_url="https://www.suse.com/security/cve/CVE-2022-22826/" source="CVE"/>
		<reference ref_id="CVE-2022-22827" ref_url="https://www.suse.com/security/cve/CVE-2022-22827/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0178-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010063.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:
  
- CVE-2021-45960: Fixed left shift in the storeAtts function in xmlparse.c that can lead to realloc misbehavior (bsc#1194251).
- CVE-2021-46143: Fixed integer overflow in m_groupSize in doProlog (bsc#1194362).
- CVE-2022-22822: Fixed integer overflow in addBinding in xmlparse.c (bsc#1194474).
- CVE-2022-22823: Fixed integer overflow in build_model in xmlparse.c (bsc#1194476).
- CVE-2022-22824: Fixed integer overflow in defineAttribute in xmlparse.c (bsc#1194477).
- CVE-2022-22825: Fixed integer overflow in lookup in xmlparse.c (bsc#1194478).
- CVE-2022-22826: Fixed integer overflow in nextScaffoldPart in xmlparse.c (bsc#1194479).
- CVE-2022-22827: Fixed integer overflow in storeAtts in xmlparse.c (bsc#1194480).  
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194251">SUSE bug 1194251</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194362">SUSE bug 1194362</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194474">SUSE bug 1194474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194476">SUSE bug 1194476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194477">SUSE bug 1194477</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194478">SUSE bug 1194478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194479">SUSE bug 1194479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194480">SUSE bug 1194480</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-45960/">CVE-2021-45960</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-46143/">CVE-2021-46143</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22822/">CVE-2022-22822</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22823/">CVE-2022-22823</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22824/">CVE-2022-22824</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22825/">CVE-2022-22825</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22826/">CVE-2022-22826</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22827/">CVE-2022-22827</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664152" comment="expat-2.2.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664153" comment="libexpat-devel-2.2.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664154" comment="libexpat1-2.2.5-3.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664063" comment="libexpat1-32bit-2.2.5-3.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140979" version="1" class="patch">
	<metadata>
		<title>Security update for rsyslog (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199061" ref_url="https://bugzilla.suse.com/1199061" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24903" ref_url="https://www.suse.com/security/cve/CVE-2022-24903/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011136.html" source="SUSE-SU"/>
		<description>
This update for rsyslog fixes the following issues:

- CVE-2022-24903: Fixed potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-23"/>
	<updated date="2022-05-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199061">SUSE bug 1199061</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24903/">CVE-2022-24903</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009682469" comment="rsyslog-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682470" comment="rsyslog-module-gssapi-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682471" comment="rsyslog-module-gtls-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682472" comment="rsyslog-module-mmnormalize-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682473" comment="rsyslog-module-mysql-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682474" comment="rsyslog-module-pgsql-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682475" comment="rsyslog-module-relp-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682476" comment="rsyslog-module-snmp-8.33.1-150000.3.37.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682477" comment="rsyslog-module-udpspoof-8.33.1-150000.3.37.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140980" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199768" ref_url="https://bugzilla.suse.com/1199768" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1529" ref_url="https://www.suse.com/security/cve/CVE-2022-1529/" source="CVE"/>
		<reference ref_id="CVE-2022-1802" ref_url="https://www.suse.com/security/cve/CVE-2022-1802/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1818-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011133.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.9.1 ESR - MFSA 2022-19 (bsc#1199768):

- CVE-2022-1802: Prototype pollution in Top-Level Await implementation
- CVE-2022-1529: Untrusted input used in JavaScript object indexing, leading to prototype pollution
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-23"/>
	<updated date="2022-05-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199768">SUSE bug 1199768</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1529/">CVE-2022-1529</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1802/">CVE-2022-1802</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693081" comment="MozillaFirefox-91.9.1-150000.150.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693082" comment="MozillaFirefox-devel-91.9.1-150000.150.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693083" comment="MozillaFirefox-translations-common-91.9.1-150000.150.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693084" comment="MozillaFirefox-translations-other-91.9.1-150000.150.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140981" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194019" ref_url="https://bugzilla.suse.com/1194019" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-8518" ref_url="https://www.suse.com/security/cve/CVE-2018-8518/" source="CVE"/>
		<reference ref_id="CVE-2018-8523" ref_url="https://www.suse.com/security/cve/CVE-2018-8523/" source="CVE"/>
		<reference ref_id="CVE-2019-8766" ref_url="https://www.suse.com/security/cve/CVE-2019-8766/" source="CVE"/>
		<reference ref_id="CVE-2019-8768" ref_url="https://www.suse.com/security/cve/CVE-2019-8768/" source="CVE"/>
		<reference ref_id="CVE-2019-8782" ref_url="https://www.suse.com/security/cve/CVE-2019-8782/" source="CVE"/>
		<reference ref_id="CVE-2019-8808" ref_url="https://www.suse.com/security/cve/CVE-2019-8808/" source="CVE"/>
		<reference ref_id="CVE-2019-8815" ref_url="https://www.suse.com/security/cve/CVE-2019-8815/" source="CVE"/>
		<reference ref_id="CVE-2020-10018" ref_url="https://www.suse.com/security/cve/CVE-2020-10018/" source="CVE"/>
		<reference ref_id="CVE-2020-13753" ref_url="https://www.suse.com/security/cve/CVE-2020-13753/" source="CVE"/>
		<reference ref_id="CVE-2020-27918" ref_url="https://www.suse.com/security/cve/CVE-2020-27918/" source="CVE"/>
		<reference ref_id="CVE-2020-29623" ref_url="https://www.suse.com/security/cve/CVE-2020-29623/" source="CVE"/>
		<reference ref_id="CVE-2020-3885" ref_url="https://www.suse.com/security/cve/CVE-2020-3885/" source="CVE"/>
		<reference ref_id="CVE-2020-3894" ref_url="https://www.suse.com/security/cve/CVE-2020-3894/" source="CVE"/>
		<reference ref_id="CVE-2020-3895" ref_url="https://www.suse.com/security/cve/CVE-2020-3895/" source="CVE"/>
		<reference ref_id="CVE-2020-3897" ref_url="https://www.suse.com/security/cve/CVE-2020-3897/" source="CVE"/>
		<reference ref_id="CVE-2020-3900" ref_url="https://www.suse.com/security/cve/CVE-2020-3900/" source="CVE"/>
		<reference ref_id="CVE-2020-3901" ref_url="https://www.suse.com/security/cve/CVE-2020-3901/" source="CVE"/>
		<reference ref_id="CVE-2020-3902" ref_url="https://www.suse.com/security/cve/CVE-2020-3902/" source="CVE"/>
		<reference ref_id="CVE-2020-9802" ref_url="https://www.suse.com/security/cve/CVE-2020-9802/" source="CVE"/>
		<reference ref_id="CVE-2020-9803" ref_url="https://www.suse.com/security/cve/CVE-2020-9803/" source="CVE"/>
		<reference ref_id="CVE-2020-9805" ref_url="https://www.suse.com/security/cve/CVE-2020-9805/" source="CVE"/>
		<reference ref_id="CVE-2020-9947" ref_url="https://www.suse.com/security/cve/CVE-2020-9947/" source="CVE"/>
		<reference ref_id="CVE-2020-9948" ref_url="https://www.suse.com/security/cve/CVE-2020-9948/" source="CVE"/>
		<reference ref_id="CVE-2020-9951" ref_url="https://www.suse.com/security/cve/CVE-2020-9951/" source="CVE"/>
		<reference ref_id="CVE-2020-9952" ref_url="https://www.suse.com/security/cve/CVE-2020-9952/" source="CVE"/>
		<reference ref_id="CVE-2021-1765" ref_url="https://www.suse.com/security/cve/CVE-2021-1765/" source="CVE"/>
		<reference ref_id="CVE-2021-1788" ref_url="https://www.suse.com/security/cve/CVE-2021-1788/" source="CVE"/>
		<reference ref_id="CVE-2021-1817" ref_url="https://www.suse.com/security/cve/CVE-2021-1817/" source="CVE"/>
		<reference ref_id="CVE-2021-1820" ref_url="https://www.suse.com/security/cve/CVE-2021-1820/" source="CVE"/>
		<reference ref_id="CVE-2021-1825" ref_url="https://www.suse.com/security/cve/CVE-2021-1825/" source="CVE"/>
		<reference ref_id="CVE-2021-1826" ref_url="https://www.suse.com/security/cve/CVE-2021-1826/" source="CVE"/>
		<reference ref_id="CVE-2021-1844" ref_url="https://www.suse.com/security/cve/CVE-2021-1844/" source="CVE"/>
		<reference ref_id="CVE-2021-1871" ref_url="https://www.suse.com/security/cve/CVE-2021-1871/" source="CVE"/>
		<reference ref_id="CVE-2021-30661" ref_url="https://www.suse.com/security/cve/CVE-2021-30661/" source="CVE"/>
		<reference ref_id="CVE-2021-30666" ref_url="https://www.suse.com/security/cve/CVE-2021-30666/" source="CVE"/>
		<reference ref_id="CVE-2021-30682" ref_url="https://www.suse.com/security/cve/CVE-2021-30682/" source="CVE"/>
		<reference ref_id="CVE-2021-30761" ref_url="https://www.suse.com/security/cve/CVE-2021-30761/" source="CVE"/>
		<reference ref_id="CVE-2021-30762" ref_url="https://www.suse.com/security/cve/CVE-2021-30762/" source="CVE"/>
		<reference ref_id="CVE-2021-30809" ref_url="https://www.suse.com/security/cve/CVE-2021-30809/" source="CVE"/>
		<reference ref_id="CVE-2021-30818" ref_url="https://www.suse.com/security/cve/CVE-2021-30818/" source="CVE"/>
		<reference ref_id="CVE-2021-30823" ref_url="https://www.suse.com/security/cve/CVE-2021-30823/" source="CVE"/>
		<reference ref_id="CVE-2021-30836" ref_url="https://www.suse.com/security/cve/CVE-2021-30836/" source="CVE"/>
		<reference ref_id="CVE-2021-30846" ref_url="https://www.suse.com/security/cve/CVE-2021-30846/" source="CVE"/>
		<reference ref_id="CVE-2021-30848" ref_url="https://www.suse.com/security/cve/CVE-2021-30848/" source="CVE"/>
		<reference ref_id="CVE-2021-30849" ref_url="https://www.suse.com/security/cve/CVE-2021-30849/" source="CVE"/>
		<reference ref_id="CVE-2021-30851" ref_url="https://www.suse.com/security/cve/CVE-2021-30851/" source="CVE"/>
		<reference ref_id="CVE-2021-30858" ref_url="https://www.suse.com/security/cve/CVE-2021-30858/" source="CVE"/>
		<reference ref_id="CVE-2021-30884" ref_url="https://www.suse.com/security/cve/CVE-2021-30884/" source="CVE"/>
		<reference ref_id="CVE-2021-30887" ref_url="https://www.suse.com/security/cve/CVE-2021-30887/" source="CVE"/>
		<reference ref_id="CVE-2021-30888" ref_url="https://www.suse.com/security/cve/CVE-2021-30888/" source="CVE"/>
		<reference ref_id="CVE-2021-30889" ref_url="https://www.suse.com/security/cve/CVE-2021-30889/" source="CVE"/>
		<reference ref_id="CVE-2021-30890" ref_url="https://www.suse.com/security/cve/CVE-2021-30890/" source="CVE"/>
		<reference ref_id="CVE-2021-30897" ref_url="https://www.suse.com/security/cve/CVE-2021-30897/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0183-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.34.3 (bsc#1194019).
- CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content.
- CVE-2021-30890: Fixed logic issue allowing universal cross site scripting when processing maliciously crafted web content.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194019">SUSE bug 1194019</bugzilla>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-8518/">CVE-2018-8518</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2018-8523/">CVE-2018-8523</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8766/">CVE-2019-8766</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8768/">CVE-2019-8768</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8782/">CVE-2019-8782</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8808/">CVE-2019-8808</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-8815/">CVE-2019-8815</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-10018/">CVE-2020-10018</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-13753/">CVE-2020-13753</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-27918/">CVE-2020-27918</cve>
	<cve impact="important" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-29623/">CVE-2020-29623</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-3885/">CVE-2020-3885</cve>
	<cve impact="important" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-3894/">CVE-2020-3894</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3895/">CVE-2020-3895</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3897/">CVE-2020-3897</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3900/">CVE-2020-3900</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-3901/">CVE-2020-3901</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-3902/">CVE-2020-3902</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9802/">CVE-2020-9802</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9803/">CVE-2020-9803</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-9805/">CVE-2020-9805</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9947/">CVE-2020-9947</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9948/">CVE-2020-9948</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-9951/">CVE-2020-9951</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-9952/">CVE-2020-9952</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-1765/">CVE-2021-1765</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1788/">CVE-2021-1788</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1817/">CVE-2021-1817</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-1820/">CVE-2021-1820</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-1825/">CVE-2021-1825</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-1826/">CVE-2021-1826</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1844/">CVE-2021-1844</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-1871/">CVE-2021-1871</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30661/">CVE-2021-30661</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30666/">CVE-2021-30666</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30682/">CVE-2021-30682</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30761/">CVE-2021-30761</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30762/">CVE-2021-30762</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30809/">CVE-2021-30809</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30818/">CVE-2021-30818</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30823/">CVE-2021-30823</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30836/">CVE-2021-30836</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30846/">CVE-2021-30846</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30848/">CVE-2021-30848</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30849/">CVE-2021-30849</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30851/">CVE-2021-30851</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30858/">CVE-2021-30858</cve>
	<cve impact="important" cvss3="4.7/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30884/">CVE-2021-30884</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-30887/">CVE-2021-30887</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30888/">CVE-2021-30888</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30889/">CVE-2021-30889</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-30890/">CVE-2021-30890</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-30897/">CVE-2021-30897</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664169" comment="libjavascriptcoregtk-4_0-18-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664170" comment="libwebkit2gtk-4_0-37-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664160" comment="libwebkit2gtk3-lang-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664171" comment="typelib-1_0-JavaScriptCore-4_0-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664172" comment="typelib-1_0-WebKit2-4_0-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664173" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664174" comment="webkit2gtk-4_0-injected-bundles-2.34.3-3.92.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664175" comment="webkit2gtk3-devel-2.34.3-3.92.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140982" version="1" class="patch">
	<metadata>
		<title>Security update for openldap2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191157" ref_url="https://bugzilla.suse.com/1191157" source="BUGZILLA"/>
		<reference ref_id="1197004" ref_url="https://bugzilla.suse.com/1197004" source="BUGZILLA"/>
		<reference ref_id="1199240" ref_url="https://bugzilla.suse.com/1199240" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29155" ref_url="https://www.suse.com/security/cve/CVE-2022-29155/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011147.html" source="SUSE-SU"/>
		<description>
This update for openldap2 fixes the following issues:

Security:
- CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240).

Bugfixes:
- allow specification of max/min TLS version with TLS1.3 (bsc#1191157)
- libldap was able to be out of step with openldap in some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their related release versions. (bsc#1197004)
- restore CLDAP functionality in CLI tools (jsc#PM-3288)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-24"/>
	<updated date="2022-05-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191157">SUSE bug 1191157</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197004">SUSE bug 1197004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199240">SUSE bug 1199240</bugzilla>
	<cve impact="critical" cvss3="9.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29155/">CVE-2022-29155</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009683571" comment="libldap-2_4-2-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683554" comment="libldap-2_4-2-32bit-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683555" comment="libldap-data-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683572" comment="openldap2-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683573" comment="openldap2-back-meta-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683574" comment="openldap2-back-perl-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683575" comment="openldap2-client-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683576" comment="openldap2-devel-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683558" comment="openldap2-devel-32bit-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683577" comment="openldap2-devel-static-2.4.46-150000.9.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009683578" comment="openldap2-ppolicy-check-password-1.2-150000.9.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140983" version="1" class="patch">
	<metadata>
		<title>Security update for json-c (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1171479" ref_url="https://bugzilla.suse.com/1171479" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12762" ref_url="https://www.suse.com/security/cve/CVE-2020-12762/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0184-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010072.html" source="SUSE-SU"/>
		<description>
This update for json-c fixes the following issues:

- CVE-2020-12762: Fixed integer overflow and out-of-bounds write. (bsc#1171479)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171479">SUSE bug 1171479</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-12762/">CVE-2020-12762</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664148" comment="libjson-c-devel-0.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664149" comment="libjson-c3-0.13-3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664150" comment="libjson-c3-32bit-0.13-3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140984" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199474" ref_url="https://bugzilla.suse.com/1199474" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26691" ref_url="https://www.suse.com/security/cve/CVE-2022-26691/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1861-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011166.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:

- CVE-2022-26691: Fixed an authentication bypass and code execution vulnerability (bsc#1199474)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-26"/>
	<updated date="2022-05-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199474">SUSE bug 1199474</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26691/">CVE-2022-26691</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684249" comment="cups-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684250" comment="cups-client-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684251" comment="cups-config-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684418" comment="cups-ddk-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684252" comment="cups-devel-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684253" comment="libcups2-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684254" comment="libcups2-32bit-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684255" comment="libcupscgi1-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684256" comment="libcupsimage2-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684257" comment="libcupsmime1-2.2.7-150000.3.32.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684258" comment="libcupsppdc1-2.2.7-150000.3.32.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140985" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195964" ref_url="https://bugzilla.suse.com/1195964" source="BUGZILLA"/>
		<reference ref_id="1195965" ref_url="https://bugzilla.suse.com/1195965" source="BUGZILLA"/>
		<reference ref_id="1197066" ref_url="https://bugzilla.suse.com/1197066" source="BUGZILLA"/>
		<reference ref_id="1197068" ref_url="https://bugzilla.suse.com/1197068" source="BUGZILLA"/>
		<reference ref_id="1197072" ref_url="https://bugzilla.suse.com/1197072" source="BUGZILLA"/>
		<reference ref_id="1197073" ref_url="https://bugzilla.suse.com/1197073" source="BUGZILLA"/>
		<reference ref_id="1197074" ref_url="https://bugzilla.suse.com/1197074" source="BUGZILLA"/>
		<reference ref_id="1197631" ref_url="https://bugzilla.suse.com/1197631" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0561" ref_url="https://www.suse.com/security/cve/CVE-2022-0561/" source="CVE"/>
		<reference ref_id="CVE-2022-0562" ref_url="https://www.suse.com/security/cve/CVE-2022-0562/" source="CVE"/>
		<reference ref_id="CVE-2022-0865" ref_url="https://www.suse.com/security/cve/CVE-2022-0865/" source="CVE"/>
		<reference ref_id="CVE-2022-0891" ref_url="https://www.suse.com/security/cve/CVE-2022-0891/" source="CVE"/>
		<reference ref_id="CVE-2022-0908" ref_url="https://www.suse.com/security/cve/CVE-2022-0908/" source="CVE"/>
		<reference ref_id="CVE-2022-0909" ref_url="https://www.suse.com/security/cve/CVE-2022-0909/" source="CVE"/>
		<reference ref_id="CVE-2022-0924" ref_url="https://www.suse.com/security/cve/CVE-2022-0924/" source="CVE"/>
		<reference ref_id="CVE-2022-1056" ref_url="https://www.suse.com/security/cve/CVE-2022-1056/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1882-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011182.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-0561: Fixed null source pointer passed as an argument to memcpy() within TIFFFetchStripThing() in tif_dirread.c (bsc#1195964).
- CVE-2022-0562: Fixed null source pointer passed as an argument to memcpy() within TIFFReadDirectory() in tif_dirread.c (bsc#1195965).
- CVE-2022-0865: Fixed assertion failure in TIFFReadAndRealloc (bsc#1197066).
- CVE-2022-0909: Fixed divide by zero error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197072).
- CVE-2022-0924: Fixed out-of-bounds read error in tiffcp that could have led to a denial-of-service via a crafted tiff file (bsc#1197073).
- CVE-2022-0908: Fixed null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() (bsc#1197074).
- CVE-2022-1056: Fixed out-of-bounds read error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197631).
- CVE-2022-0891: Fixed heap buffer overflow in extractImageSection (bsc#1197068).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-30"/>
	<updated date="2022-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195964">SUSE bug 1195964</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195965">SUSE bug 1195965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197066">SUSE bug 1197066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197068">SUSE bug 1197068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197072">SUSE bug 1197072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197073">SUSE bug 1197073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197074">SUSE bug 1197074</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197631">SUSE bug 1197631</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0561/">CVE-2022-0561</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0562/">CVE-2022-0562</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0865/">CVE-2022-0865</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0891/">CVE-2022-0891</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0908/">CVE-2022-0908</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0909/">CVE-2022-0909</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0924/">CVE-2022-0924</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1056/">CVE-2022-1056</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684263" comment="libtiff-devel-4.0.9-150000.45.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684264" comment="libtiff5-4.0.9-150000.45.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684380" comment="libtiff5-32bit-4.0.9-150000.45.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140986" version="1" class="patch">
	<metadata>
		<title>Security update for pcre2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199232" ref_url="https://bugzilla.suse.com/1199232" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1586" ref_url="https://www.suse.com/security/cve/CVE-2022-1586/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1883-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011183.html" source="SUSE-SU"/>
		<description>
This update for pcre2 fixes the following issues:

- CVE-2022-1586: Fixed out-of-bounds read via missing Unicode property matching issue in JIT compiled regular expressions (bsc#1199232).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-30"/>
	<updated date="2022-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199232">SUSE bug 1199232</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1586/">CVE-2022-1586</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684265" comment="libpcre2-16-0-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684266" comment="libpcre2-32-0-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684267" comment="libpcre2-8-0-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684268" comment="libpcre2-posix2-10.31-150000.3.7.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684269" comment="pcre2-devel-10.31-150000.3.7.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140987" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199475" ref_url="https://bugzilla.suse.com/1199475" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1552" ref_url="https://www.suse.com/security/cve/CVE-2022-1552/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1890-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-May/011202.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:
 
- CVE-2022-1552: Confine additional operations within 'security restricted operation' sandboxes (bsc#1199475).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-05-31"/>
	<updated date="2022-05-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199475">SUSE bug 1199475</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1552/">CVE-2022-1552</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684535" comment="postgresql10-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684536" comment="postgresql10-contrib-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684537" comment="postgresql10-devel-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692663" comment="postgresql10-docs-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684538" comment="postgresql10-plperl-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684539" comment="postgresql10-plpython-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684540" comment="postgresql10-pltcl-10.21-150100.8.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684541" comment="postgresql10-server-10.21-150100.8.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140988" version="1" class="patch">
	<metadata>
		<title>Security update for polkit (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194568" ref_url="https://bugzilla.suse.com/1194568" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4034" ref_url="https://www.suse.com/security/cve/CVE-2021-4034/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0191-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010075.html" source="SUSE-SU"/>
		<description>
This update for polkit fixes the following issues:

- CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-25"/>
	<updated date="2022-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194568">SUSE bug 1194568</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4034/">CVE-2021-4034</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664583" comment="libpolkit0-0.114-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664584" comment="polkit-0.114-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664585" comment="polkit-devel-0.114-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664586" comment="typelib-1_0-Polkit-1_0-0.114-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140989" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200027" ref_url="https://bugzilla.suse.com/1200027" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31736" ref_url="https://www.suse.com/security/cve/CVE-2022-31736/" source="CVE"/>
		<reference ref_id="CVE-2022-31737" ref_url="https://www.suse.com/security/cve/CVE-2022-31737/" source="CVE"/>
		<reference ref_id="CVE-2022-31738" ref_url="https://www.suse.com/security/cve/CVE-2022-31738/" source="CVE"/>
		<reference ref_id="CVE-2022-31739" ref_url="https://www.suse.com/security/cve/CVE-2022-31739/" source="CVE"/>
		<reference ref_id="CVE-2022-31740" ref_url="https://www.suse.com/security/cve/CVE-2022-31740/" source="CVE"/>
		<reference ref_id="CVE-2022-31741" ref_url="https://www.suse.com/security/cve/CVE-2022-31741/" source="CVE"/>
		<reference ref_id="CVE-2022-31742" ref_url="https://www.suse.com/security/cve/CVE-2022-31742/" source="CVE"/>
		<reference ref_id="CVE-2022-31747" ref_url="https://www.suse.com/security/cve/CVE-2022-31747/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:1927-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011229.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.10.0 ESR (MFSA 2022-21)(bsc#1200027)

- CVE-2022-31736: Cross-Origin resource's length leaked
- CVE-2022-31737: Heap buffer overflow in WebGL
- CVE-2022-31738: Browser window spoof using fullscreen mode
- CVE-2022-31739: Attacker-influenced path traversal when saving downloaded files
- CVE-2022-31740: Register allocation problem in WASM on arm64
- CVE-2022-31741: Uninitialized variable leads to invalid memory read
- CVE-2022-31742: Querying a WebAuthn token with a large number of allowCredential entries may have leaked cross-origin information
- CVE-2022-31747: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-02"/>
	<updated date="2022-06-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200027">SUSE bug 1200027</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31736/">CVE-2022-31736</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31737/">CVE-2022-31737</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31738/">CVE-2022-31738</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31739/">CVE-2022-31739</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31740/">CVE-2022-31740</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31741/">CVE-2022-31741</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-31742/">CVE-2022-31742</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31747/">CVE-2022-31747</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693085" comment="MozillaFirefox-91.10.0-150000.150.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693086" comment="MozillaFirefox-devel-91.10.0-150000.150.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693087" comment="MozillaFirefox-translations-common-91.10.0-150000.150.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693088" comment="MozillaFirefox-translations-other-91.10.0-150000.150.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140990" version="1" class="patch">
	<metadata>
		<title>Security update for fribidi (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196147" ref_url="https://bugzilla.suse.com/1196147" source="BUGZILLA"/>
		<reference ref_id="1196148" ref_url="https://bugzilla.suse.com/1196148" source="BUGZILLA"/>
		<reference ref_id="1196150" ref_url="https://bugzilla.suse.com/1196150" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25308" ref_url="https://www.suse.com/security/cve/CVE-2022-25308/" source="CVE"/>
		<reference ref_id="CVE-2022-25309" ref_url="https://www.suse.com/security/cve/CVE-2022-25309/" source="CVE"/>
		<reference ref_id="CVE-2022-25310" ref_url="https://www.suse.com/security/cve/CVE-2022-25310/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2029-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011256.html" source="SUSE-SU"/>
		<description>
This update for fribidi fixes the following issues:

- CVE-2022-25308: Fixed stack out of bounds read (bsc#1196147).
- CVE-2022-25309: Fixed heap-buffer-overflow in fribidi_cap_rtl_to_unicode (bsc#1196148).
- CVE-2022-25310: Fixed NULL pointer dereference in fribidi_remove_bidi_marks (bsc#1196150).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-09"/>
	<updated date="2022-06-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196147">SUSE bug 1196147</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196148">SUSE bug 1196148</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196150">SUSE bug 1196150</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-25308/">CVE-2022-25308</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-25309/">CVE-2022-25309</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-25310/">CVE-2022-25310</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693089" comment="fribidi-0.19.6-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693090" comment="fribidi-devel-0.19.6-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693091" comment="libfribidi0-0.19.6-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692738" comment="libfribidi0-32bit-0.19.6-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140991" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199287" ref_url="https://bugzilla.suse.com/1199287" source="BUGZILLA"/>
		<reference ref_id="1200106" ref_url="https://bugzilla.suse.com/1200106" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26700" ref_url="https://www.suse.com/security/cve/CVE-2022-26700/" source="CVE"/>
		<reference ref_id="CVE-2022-26709" ref_url="https://www.suse.com/security/cve/CVE-2022-26709/" source="CVE"/>
		<reference ref_id="CVE-2022-26716" ref_url="https://www.suse.com/security/cve/CVE-2022-26716/" source="CVE"/>
		<reference ref_id="CVE-2022-26717" ref_url="https://www.suse.com/security/cve/CVE-2022-26717/" source="CVE"/>
		<reference ref_id="CVE-2022-26719" ref_url="https://www.suse.com/security/cve/CVE-2022-26719/" source="CVE"/>
		<reference ref_id="CVE-2022-30293" ref_url="https://www.suse.com/security/cve/CVE-2022-30293/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2030-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011254.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.36.3 (bsc#1200106)

- CVE-2022-30293: Fixed heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer (bsc#1199287).
- CVE-2022-26700: Fixed memory corruption issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26709: Fixed use after free issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26716: Fixed use after free issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26717: Fixed memory corruption issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
- CVE-2022-26719: Fixed memory corruption issue that may lead to code execution when processing maliciously crafted web content (bsc#1200106).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-09"/>
	<updated date="2022-06-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199287">SUSE bug 1199287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200106">SUSE bug 1200106</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26700/">CVE-2022-26700</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26709/">CVE-2022-26709</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26716/">CVE-2022-26716</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26717/">CVE-2022-26717</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26719/">CVE-2022-26719</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-30293/">CVE-2022-30293</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693092" comment="libjavascriptcoregtk-4_0-18-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693093" comment="libwebkit2gtk-4_0-37-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692495" comment="libwebkit2gtk3-lang-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693094" comment="typelib-1_0-JavaScriptCore-4_0-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693095" comment="typelib-1_0-WebKit2-4_0-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693096" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693097" comment="webkit2gtk-4_0-injected-bundles-2.36.3-150000.3.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693098" comment="webkit2gtk3-devel-2.36.3-150000.3.103.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140992" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191184" ref_url="https://bugzilla.suse.com/1191184" source="BUGZILLA"/>
		<reference ref_id="1191185" ref_url="https://bugzilla.suse.com/1191185" source="BUGZILLA"/>
		<reference ref_id="1191186" ref_url="https://bugzilla.suse.com/1191186" source="BUGZILLA"/>
		<reference ref_id="1193282" ref_url="https://bugzilla.suse.com/1193282" source="BUGZILLA"/>
		<reference ref_id="1198460" ref_url="https://bugzilla.suse.com/1198460" source="BUGZILLA"/>
		<reference ref_id="1198493" ref_url="https://bugzilla.suse.com/1198493" source="BUGZILLA"/>
		<reference ref_id="1198496" ref_url="https://bugzilla.suse.com/1198496" source="BUGZILLA"/>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3695" ref_url="https://www.suse.com/security/cve/CVE-2021-3695/" source="CVE"/>
		<reference ref_id="CVE-2021-3696" ref_url="https://www.suse.com/security/cve/CVE-2021-3696/" source="CVE"/>
		<reference ref_id="CVE-2021-3697" ref_url="https://www.suse.com/security/cve/CVE-2021-3697/" source="CVE"/>
		<reference ref_id="CVE-2022-28733" ref_url="https://www.suse.com/security/cve/CVE-2022-28733/" source="CVE"/>
		<reference ref_id="CVE-2022-28734" ref_url="https://www.suse.com/security/cve/CVE-2022-28734/" source="CVE"/>
		<reference ref_id="CVE-2022-28736" ref_url="https://www.suse.com/security/cve/CVE-2022-28736/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2041-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011260.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

Security fixes and hardenings for Boothole 3 / Boothole 2022 (bsc#1198581)

- CVE-2021-3695: Fixed that a crafted PNG grayscale image could lead to out-of-bounds write in heap (bsc#1191184)
- CVE-2021-3696: Fixed that a crafted PNG image could lead to out-of-bound write during huffman table handling (bsc#1191185)
- CVE-2021-3697: Fixed that a crafted JPEG image could lead to buffer underflow write in the heap (bsc#1191186)
- CVE-2022-28733: Fixed fragmentation math in net/ip (bsc#1198460)
- CVE-2022-28734: Fixed an out-of-bound write for split http headers (bsc#1198493)
- CVE-2022-28736: Fixed a use-after-free in chainloader command (bsc#1198496)
- Update SBAT security contact (bsc#1193282)
- Bump grub's SBAT generation to 2
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-10"/>
	<updated date="2022-06-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191184">SUSE bug 1191184</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191185">SUSE bug 1191185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191186">SUSE bug 1191186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193282">SUSE bug 1193282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198460">SUSE bug 1198460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198493">SUSE bug 1198493</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198496">SUSE bug 1198496</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3695/">CVE-2021-3695</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3696/">CVE-2021-3696</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3697/">CVE-2021-3697</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28733/">CVE-2022-28733</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-28734/">CVE-2022-28734</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28736/">CVE-2022-28736</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693396" comment="grub2-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692740" comment="grub2-arm64-efi-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692741" comment="grub2-i386-pc-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693397" comment="grub2-powerpc-ieee1275-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693398" comment="grub2-s390x-emu-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692742" comment="grub2-snapper-plugin-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692743" comment="grub2-systemd-sleep-plugin-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692744" comment="grub2-x86_64-efi-2.02-150100.123.12.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692745" comment="grub2-x86_64-xen-2.02-150100.123.12.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140993" version="1" class="patch">
	<metadata>
		<title>Security update for u-boot (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200363" ref_url="https://bugzilla.suse.com/1200363" source="BUGZILLA"/>
		<reference ref_id="1200364" ref_url="https://bugzilla.suse.com/1200364" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-30552" ref_url="https://www.suse.com/security/cve/CVE-2022-30552/" source="CVE"/>
		<reference ref_id="CVE-2022-30790" ref_url="https://www.suse.com/security/cve/CVE-2022-30790/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2057-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011271.html" source="SUSE-SU"/>
		<description>
This update for u-boot fixes the following issues:

- A large buffer overflow could have lead to a denial of service in the IP Packet deframentation code.
(CVE-2022-30552, bsc#1200363)
- A Hole Descriptor Overwrite could have lead to an arbitrary out of bounds write primitive.
(CVE-2022-30790, bsc#1200364)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-13"/>
	<updated date="2022-06-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200363">SUSE bug 1200363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200364">SUSE bug 1200364</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-30552/">CVE-2022-30552</cve>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30790/">CVE-2022-30790</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692746" comment="u-boot-rpi3-2019.01-150100.7.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693399" comment="u-boot-tools-2019.01-150100.7.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140994" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185637" ref_url="https://bugzilla.suse.com/1185637" source="BUGZILLA"/>
		<reference ref_id="1199166" ref_url="https://bugzilla.suse.com/1199166" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1292" ref_url="https://www.suse.com/security/cve/CVE-2022-1292/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011281.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-14"/>
	<updated date="2022-06-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185637">SUSE bug 1185637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199166">SUSE bug 1199166</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1292/">CVE-2022-1292</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693400" comment="libopenssl-1_1-devel-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692749" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693401" comment="libopenssl1_1-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692751" comment="libopenssl1_1-32bit-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693402" comment="libopenssl1_1-hmac-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692753" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693403" comment="openssl-1_1-1.1.0i-150100.14.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140995" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1070955" ref_url="https://bugzilla.suse.com/1070955" source="BUGZILLA"/>
		<reference ref_id="1191770" ref_url="https://bugzilla.suse.com/1191770" source="BUGZILLA"/>
		<reference ref_id="1192167" ref_url="https://bugzilla.suse.com/1192167" source="BUGZILLA"/>
		<reference ref_id="1192902" ref_url="https://bugzilla.suse.com/1192902" source="BUGZILLA"/>
		<reference ref_id="1192903" ref_url="https://bugzilla.suse.com/1192903" source="BUGZILLA"/>
		<reference ref_id="1192904" ref_url="https://bugzilla.suse.com/1192904" source="BUGZILLA"/>
		<reference ref_id="1193466" ref_url="https://bugzilla.suse.com/1193466" source="BUGZILLA"/>
		<reference ref_id="1193905" ref_url="https://bugzilla.suse.com/1193905" source="BUGZILLA"/>
		<reference ref_id="1194093" ref_url="https://bugzilla.suse.com/1194093" source="BUGZILLA"/>
		<reference ref_id="1194216" ref_url="https://bugzilla.suse.com/1194216" source="BUGZILLA"/>
		<reference ref_id="1194217" ref_url="https://bugzilla.suse.com/1194217" source="BUGZILLA"/>
		<reference ref_id="1194388" ref_url="https://bugzilla.suse.com/1194388" source="BUGZILLA"/>
		<reference ref_id="1194872" ref_url="https://bugzilla.suse.com/1194872" source="BUGZILLA"/>
		<reference ref_id="1194885" ref_url="https://bugzilla.suse.com/1194885" source="BUGZILLA"/>
		<reference ref_id="1195004" ref_url="https://bugzilla.suse.com/1195004" source="BUGZILLA"/>
		<reference ref_id="1195203" ref_url="https://bugzilla.suse.com/1195203" source="BUGZILLA"/>
		<reference ref_id="1195332" ref_url="https://bugzilla.suse.com/1195332" source="BUGZILLA"/>
		<reference ref_id="1195354" ref_url="https://bugzilla.suse.com/1195354" source="BUGZILLA"/>
		<reference ref_id="1196361" ref_url="https://bugzilla.suse.com/1196361" source="BUGZILLA"/>
		<reference ref_id="1198596" ref_url="https://bugzilla.suse.com/1198596" source="BUGZILLA"/>
		<reference ref_id="1198748" ref_url="https://bugzilla.suse.com/1198748" source="BUGZILLA"/>
		<reference ref_id="1199331" ref_url="https://bugzilla.suse.com/1199331" source="BUGZILLA"/>
		<reference ref_id="1199333" ref_url="https://bugzilla.suse.com/1199333" source="BUGZILLA"/>
		<reference ref_id="1199334" ref_url="https://bugzilla.suse.com/1199334" source="BUGZILLA"/>
		<reference ref_id="1199651" ref_url="https://bugzilla.suse.com/1199651" source="BUGZILLA"/>
		<reference ref_id="1199655" ref_url="https://bugzilla.suse.com/1199655" source="BUGZILLA"/>
		<reference ref_id="1199693" ref_url="https://bugzilla.suse.com/1199693" source="BUGZILLA"/>
		<reference ref_id="1199745" ref_url="https://bugzilla.suse.com/1199745" source="BUGZILLA"/>
		<reference ref_id="1199747" ref_url="https://bugzilla.suse.com/1199747" source="BUGZILLA"/>
		<reference ref_id="1199936" ref_url="https://bugzilla.suse.com/1199936" source="BUGZILLA"/>
		<reference ref_id="1200010" ref_url="https://bugzilla.suse.com/1200010" source="BUGZILLA"/>
		<reference ref_id="1200011" ref_url="https://bugzilla.suse.com/1200011" source="BUGZILLA"/>
		<reference ref_id="1200012" ref_url="https://bugzilla.suse.com/1200012" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17087" ref_url="https://www.suse.com/security/cve/CVE-2017-17087/" source="CVE"/>
		<reference ref_id="CVE-2021-3778" ref_url="https://www.suse.com/security/cve/CVE-2021-3778/" source="CVE"/>
		<reference ref_id="CVE-2021-3796" ref_url="https://www.suse.com/security/cve/CVE-2021-3796/" source="CVE"/>
		<reference ref_id="CVE-2021-3872" ref_url="https://www.suse.com/security/cve/CVE-2021-3872/" source="CVE"/>
		<reference ref_id="CVE-2021-3875" ref_url="https://www.suse.com/security/cve/CVE-2021-3875/" source="CVE"/>
		<reference ref_id="CVE-2021-3903" ref_url="https://www.suse.com/security/cve/CVE-2021-3903/" source="CVE"/>
		<reference ref_id="CVE-2021-3927" ref_url="https://www.suse.com/security/cve/CVE-2021-3927/" source="CVE"/>
		<reference ref_id="CVE-2021-3928" ref_url="https://www.suse.com/security/cve/CVE-2021-3928/" source="CVE"/>
		<reference ref_id="CVE-2021-3968" ref_url="https://www.suse.com/security/cve/CVE-2021-3968/" source="CVE"/>
		<reference ref_id="CVE-2021-3973" ref_url="https://www.suse.com/security/cve/CVE-2021-3973/" source="CVE"/>
		<reference ref_id="CVE-2021-3974" ref_url="https://www.suse.com/security/cve/CVE-2021-3974/" source="CVE"/>
		<reference ref_id="CVE-2021-3984" ref_url="https://www.suse.com/security/cve/CVE-2021-3984/" source="CVE"/>
		<reference ref_id="CVE-2021-4019" ref_url="https://www.suse.com/security/cve/CVE-2021-4019/" source="CVE"/>
		<reference ref_id="CVE-2021-4069" ref_url="https://www.suse.com/security/cve/CVE-2021-4069/" source="CVE"/>
		<reference ref_id="CVE-2021-4136" ref_url="https://www.suse.com/security/cve/CVE-2021-4136/" source="CVE"/>
		<reference ref_id="CVE-2021-4166" ref_url="https://www.suse.com/security/cve/CVE-2021-4166/" source="CVE"/>
		<reference ref_id="CVE-2021-4192" ref_url="https://www.suse.com/security/cve/CVE-2021-4192/" source="CVE"/>
		<reference ref_id="CVE-2021-4193" ref_url="https://www.suse.com/security/cve/CVE-2021-4193/" source="CVE"/>
		<reference ref_id="CVE-2021-46059" ref_url="https://www.suse.com/security/cve/CVE-2021-46059/" source="CVE"/>
		<reference ref_id="CVE-2022-0128" ref_url="https://www.suse.com/security/cve/CVE-2022-0128/" source="CVE"/>
		<reference ref_id="CVE-2022-0213" ref_url="https://www.suse.com/security/cve/CVE-2022-0213/" source="CVE"/>
		<reference ref_id="CVE-2022-0261" ref_url="https://www.suse.com/security/cve/CVE-2022-0261/" source="CVE"/>
		<reference ref_id="CVE-2022-0318" ref_url="https://www.suse.com/security/cve/CVE-2022-0318/" source="CVE"/>
		<reference ref_id="CVE-2022-0319" ref_url="https://www.suse.com/security/cve/CVE-2022-0319/" source="CVE"/>
		<reference ref_id="CVE-2022-0351" ref_url="https://www.suse.com/security/cve/CVE-2022-0351/" source="CVE"/>
		<reference ref_id="CVE-2022-0359" ref_url="https://www.suse.com/security/cve/CVE-2022-0359/" source="CVE"/>
		<reference ref_id="CVE-2022-0361" ref_url="https://www.suse.com/security/cve/CVE-2022-0361/" source="CVE"/>
		<reference ref_id="CVE-2022-0392" ref_url="https://www.suse.com/security/cve/CVE-2022-0392/" source="CVE"/>
		<reference ref_id="CVE-2022-0407" ref_url="https://www.suse.com/security/cve/CVE-2022-0407/" source="CVE"/>
		<reference ref_id="CVE-2022-0413" ref_url="https://www.suse.com/security/cve/CVE-2022-0413/" source="CVE"/>
		<reference ref_id="CVE-2022-0696" ref_url="https://www.suse.com/security/cve/CVE-2022-0696/" source="CVE"/>
		<reference ref_id="CVE-2022-1381" ref_url="https://www.suse.com/security/cve/CVE-2022-1381/" source="CVE"/>
		<reference ref_id="CVE-2022-1420" ref_url="https://www.suse.com/security/cve/CVE-2022-1420/" source="CVE"/>
		<reference ref_id="CVE-2022-1616" ref_url="https://www.suse.com/security/cve/CVE-2022-1616/" source="CVE"/>
		<reference ref_id="CVE-2022-1619" ref_url="https://www.suse.com/security/cve/CVE-2022-1619/" source="CVE"/>
		<reference ref_id="CVE-2022-1620" ref_url="https://www.suse.com/security/cve/CVE-2022-1620/" source="CVE"/>
		<reference ref_id="CVE-2022-1733" ref_url="https://www.suse.com/security/cve/CVE-2022-1733/" source="CVE"/>
		<reference ref_id="CVE-2022-1735" ref_url="https://www.suse.com/security/cve/CVE-2022-1735/" source="CVE"/>
		<reference ref_id="CVE-2022-1771" ref_url="https://www.suse.com/security/cve/CVE-2022-1771/" source="CVE"/>
		<reference ref_id="CVE-2022-1785" ref_url="https://www.suse.com/security/cve/CVE-2022-1785/" source="CVE"/>
		<reference ref_id="CVE-2022-1796" ref_url="https://www.suse.com/security/cve/CVE-2022-1796/" source="CVE"/>
		<reference ref_id="CVE-2022-1851" ref_url="https://www.suse.com/security/cve/CVE-2022-1851/" source="CVE"/>
		<reference ref_id="CVE-2022-1897" ref_url="https://www.suse.com/security/cve/CVE-2022-1897/" source="CVE"/>
		<reference ref_id="CVE-2022-1898" ref_url="https://www.suse.com/security/cve/CVE-2022-1898/" source="CVE"/>
		<reference ref_id="CVE-2022-1927" ref_url="https://www.suse.com/security/cve/CVE-2022-1927/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2102-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011301.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

- CVE-2017-17087: Fixed information leak via .swp files (bsc#1070955).
- CVE-2021-3875: Fixed heap-based buffer overflow (bsc#1191770).
- CVE-2021-3903: Fixed heap-based buffer overflow (bsc#1192167).
- CVE-2021-3968: Fixed heap-based buffer overflow (bsc#1192902).
- CVE-2021-3973: Fixed heap-based buffer overflow (bsc#1192903).
- CVE-2021-3974: Fixed use-after-free (bsc#1192904).
- CVE-2021-4069: Fixed use-after-free in ex_open()in src/ex_docmd.c (bsc#1193466).
- CVE-2021-4136: Fixed heap-based buffer overflow (bsc#1193905).
- CVE-2021-4166: Fixed out-of-bounds read (bsc#1194093).
- CVE-2021-4192: Fixed use-after-free (bsc#1194217).
- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).
- CVE-2022-0128: Fixed out-of-bounds read (bsc#1194388).
- CVE-2022-0213: Fixed heap-based buffer overflow (bsc#1194885).
- CVE-2022-0261: Fixed heap-based buffer overflow (bsc#1194872).
- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).
- CVE-2022-0359: Fixed heap-based buffer overflow in init_ccline() in ex_getln.c (bsc#1195203).
- CVE-2022-0392: Fixed heap-based buffer overflow (bsc#1195332).
- CVE-2022-0407: Fixed heap-based buffer overflow (bsc#1195354).
- CVE-2022-0696: Fixed NULL pointer dereference (bsc#1196361).
- CVE-2022-1381: Fixed global heap buffer overflow in skip_range (bsc#1198596).
- CVE-2022-1420: Fixed out-of-range pointer offset (bsc#1198748).
- CVE-2022-1616: Fixed use-after-free in append_command (bsc#1199331).
- CVE-2022-1619: Fixed heap-based Buffer Overflow in function cmdline_erase_chars (bsc#1199333).
- CVE-2022-1620: Fixed NULL pointer dereference in function vim_regexec_string (bsc#1199334).
- CVE-2022-1733: Fixed heap-based buffer overflow in cindent.c (bsc#1199655).
- CVE-2022-1735: Fixed heap-based buffer overflow (bsc#1199651).
- CVE-2022-1771: Fixed stack exhaustion (bsc#1199693).
- CVE-2022-1785: Fixed out-of-bounds write (bsc#1199745).
- CVE-2022-1796: Fixed use-after-free in find_pattern_in_path (bsc#1199747).
- CVE-2022-1851: Fixed out-of-bounds read (bsc#1199936).
- CVE-2022-1897: Fixed out-of-bounds write (bsc#1200010).
- CVE-2022-1898: Fixed use-after-free (bsc#1200011).
- CVE-2022-1927: Fixed buffer over-read (bsc#1200012).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-16"/>
	<updated date="2022-06-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1070955">SUSE bug 1070955</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191770">SUSE bug 1191770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192167">SUSE bug 1192167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192902">SUSE bug 1192902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192903">SUSE bug 1192903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192904">SUSE bug 1192904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193466">SUSE bug 1193466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193905">SUSE bug 1193905</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194093">SUSE bug 1194093</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194216">SUSE bug 1194216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194217">SUSE bug 1194217</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194388">SUSE bug 1194388</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194872">SUSE bug 1194872</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194885">SUSE bug 1194885</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195004">SUSE bug 1195004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195203">SUSE bug 1195203</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195332">SUSE bug 1195332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195354">SUSE bug 1195354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196361">SUSE bug 1196361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198596">SUSE bug 1198596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198748">SUSE bug 1198748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199331">SUSE bug 1199331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199333">SUSE bug 1199333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199334">SUSE bug 1199334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199651">SUSE bug 1199651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199655">SUSE bug 1199655</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199693">SUSE bug 1199693</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199745">SUSE bug 1199745</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199747">SUSE bug 1199747</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199936">SUSE bug 1199936</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200010">SUSE bug 1200010</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200011">SUSE bug 1200011</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200012">SUSE bug 1200012</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-17087/">CVE-2017-17087</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3778/">CVE-2021-3778</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3796/">CVE-2021-3796</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3872/">CVE-2021-3872</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3875/">CVE-2021-3875</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3903/">CVE-2021-3903</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3927/">CVE-2021-3927</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3928/">CVE-2021-3928</cve>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3968/">CVE-2021-3968</cve>
	<cve impact="critical" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3973/">CVE-2021-3973</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3974/">CVE-2021-3974</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3984/">CVE-2021-3984</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4019/">CVE-2021-4019</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4069/">CVE-2021-4069</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4136/">CVE-2021-4136</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4166/">CVE-2021-4166</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4192/">CVE-2021-4192</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4193/">CVE-2021-4193</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46059/">CVE-2021-46059</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0128/">CVE-2022-0128</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0213/">CVE-2022-0213</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0261/">CVE-2022-0261</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0318/">CVE-2022-0318</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0319/">CVE-2022-0319</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0351/">CVE-2022-0351</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-0359/">CVE-2022-0359</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-0361/">CVE-2022-0361</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-0392/">CVE-2022-0392</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0407/">CVE-2022-0407</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0413/">CVE-2022-0413</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0696/">CVE-2022-0696</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1381/">CVE-2022-1381</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1420/">CVE-2022-1420</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1616/">CVE-2022-1616</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1619/">CVE-2022-1619</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1620/">CVE-2022-1620</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1733/">CVE-2022-1733</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1735/">CVE-2022-1735</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1771/">CVE-2022-1771</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1785/">CVE-2022-1785</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1796/">CVE-2022-1796</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1851/">CVE-2022-1851</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1897/">CVE-2022-1897</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1898/">CVE-2022-1898</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-1927/">CVE-2022-1927</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684389" comment="gvim-8.2.5038-150000.5.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684300" comment="vim-8.2.5038-150000.5.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684301" comment="vim-data-8.2.5038-150000.5.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684302" comment="vim-data-common-8.2.5038-150000.5.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140996" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198603" ref_url="https://bugzilla.suse.com/1198603" source="BUGZILLA"/>
		<reference ref_id="1198604" ref_url="https://bugzilla.suse.com/1198604" source="BUGZILLA"/>
		<reference ref_id="1198606" ref_url="https://bugzilla.suse.com/1198606" source="BUGZILLA"/>
		<reference ref_id="1198607" ref_url="https://bugzilla.suse.com/1198607" source="BUGZILLA"/>
		<reference ref_id="1198610" ref_url="https://bugzilla.suse.com/1198610" source="BUGZILLA"/>
		<reference ref_id="1198611" ref_url="https://bugzilla.suse.com/1198611" source="BUGZILLA"/>
		<reference ref_id="1198612" ref_url="https://bugzilla.suse.com/1198612" source="BUGZILLA"/>
		<reference ref_id="1198613" ref_url="https://bugzilla.suse.com/1198613" source="BUGZILLA"/>
		<reference ref_id="1198629" ref_url="https://bugzilla.suse.com/1198629" source="BUGZILLA"/>
		<reference ref_id="1199928" ref_url="https://bugzilla.suse.com/1199928" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46669" ref_url="https://www.suse.com/security/cve/CVE-2021-46669/" source="CVE"/>
		<reference ref_id="CVE-2022-21427" ref_url="https://www.suse.com/security/cve/CVE-2022-21427/" source="CVE"/>
		<reference ref_id="CVE-2022-27377" ref_url="https://www.suse.com/security/cve/CVE-2022-27377/" source="CVE"/>
		<reference ref_id="CVE-2022-27378" ref_url="https://www.suse.com/security/cve/CVE-2022-27378/" source="CVE"/>
		<reference ref_id="CVE-2022-27380" ref_url="https://www.suse.com/security/cve/CVE-2022-27380/" source="CVE"/>
		<reference ref_id="CVE-2022-27381" ref_url="https://www.suse.com/security/cve/CVE-2022-27381/" source="CVE"/>
		<reference ref_id="CVE-2022-27383" ref_url="https://www.suse.com/security/cve/CVE-2022-27383/" source="CVE"/>
		<reference ref_id="CVE-2022-27384" ref_url="https://www.suse.com/security/cve/CVE-2022-27384/" source="CVE"/>
		<reference ref_id="CVE-2022-27386" ref_url="https://www.suse.com/security/cve/CVE-2022-27386/" source="CVE"/>
		<reference ref_id="CVE-2022-27387" ref_url="https://www.suse.com/security/cve/CVE-2022-27387/" source="CVE"/>
		<reference ref_id="CVE-2022-27445" ref_url="https://www.suse.com/security/cve/CVE-2022-27445/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2107-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011306.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

- CVE-2021-46669 (bsc#1199928)
- CVE-2022-21427 (bsc#1199928)
- CVE-2022-27377 (bsc#1198603)
- CVE-2022-27378 (bsc#1198604)
- CVE-2022-27380 (bsc#1198606)
- CVE-2022-27381 (bsc#1198607)
- CVE-2022-27383 (bsc#1198610)
- CVE-2022-27384 (bsc#1198611)
- CVE-2022-27386 (bsc#1198612)
- CVE-2022-27387 (bsc#1198613)
- CVE-2022-27445 (bsc#1198629)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-16"/>
	<updated date="2022-06-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198603">SUSE bug 1198603</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198604">SUSE bug 1198604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198606">SUSE bug 1198606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198607">SUSE bug 1198607</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198610">SUSE bug 1198610</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198611">SUSE bug 1198611</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198612">SUSE bug 1198612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198613">SUSE bug 1198613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198629">SUSE bug 1198629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199928">SUSE bug 1199928</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46669/">CVE-2021-46669</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21427/">CVE-2022-21427</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27377/">CVE-2022-27377</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27378/">CVE-2022-27378</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27380/">CVE-2022-27380</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27381/">CVE-2022-27381</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27383/">CVE-2022-27383</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27384/">CVE-2022-27384</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27386/">CVE-2022-27386</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-27387/">CVE-2022-27387</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27445/">CVE-2022-27445</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693114" comment="libmysqld-devel-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693115" comment="libmysqld19-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693116" comment="mariadb-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693117" comment="mariadb-client-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692530" comment="mariadb-errormessages-10.2.44-150000.3.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693118" comment="mariadb-tools-10.2.44-150000.3.54.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140997" version="1" class="patch">
	<metadata>
		<title>Security update for strongswan (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194471" ref_url="https://bugzilla.suse.com/1194471" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-45079" ref_url="https://www.suse.com/security/cve/CVE-2021-45079/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0211-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010126.html" source="SUSE-SU"/>
		<description>
This update for strongswan fixes the following issues:

- CVE-2021-45079: Fixed authentication bypass in EAP authentication. (bsc#1194471)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-27"/>
	<updated date="2022-01-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194471">SUSE bug 1194471</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-45079/">CVE-2021-45079</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664872" comment="strongswan-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664860" comment="strongswan-doc-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664873" comment="strongswan-hmac-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664874" comment="strongswan-ipsec-5.8.2-4.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664875" comment="strongswan-libs0-5.8.2-4.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140998" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1028340" ref_url="https://bugzilla.suse.com/1028340" source="BUGZILLA"/>
		<reference ref_id="1055710" ref_url="https://bugzilla.suse.com/1055710" source="BUGZILLA"/>
		<reference ref_id="1065729" ref_url="https://bugzilla.suse.com/1065729" source="BUGZILLA"/>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1084513" ref_url="https://bugzilla.suse.com/1084513" source="BUGZILLA"/>
		<reference ref_id="1087082" ref_url="https://bugzilla.suse.com/1087082" source="BUGZILLA"/>
		<reference ref_id="1114648" ref_url="https://bugzilla.suse.com/1114648" source="BUGZILLA"/>
		<reference ref_id="1158266" ref_url="https://bugzilla.suse.com/1158266" source="BUGZILLA"/>
		<reference ref_id="1172456" ref_url="https://bugzilla.suse.com/1172456" source="BUGZILLA"/>
		<reference ref_id="1177282" ref_url="https://bugzilla.suse.com/1177282" source="BUGZILLA"/>
		<reference ref_id="1182171" ref_url="https://bugzilla.suse.com/1182171" source="BUGZILLA"/>
		<reference ref_id="1183723" ref_url="https://bugzilla.suse.com/1183723" source="BUGZILLA"/>
		<reference ref_id="1187055" ref_url="https://bugzilla.suse.com/1187055" source="BUGZILLA"/>
		<reference ref_id="1191647" ref_url="https://bugzilla.suse.com/1191647" source="BUGZILLA"/>
		<reference ref_id="1191958" ref_url="https://bugzilla.suse.com/1191958" source="BUGZILLA"/>
		<reference ref_id="1195065" ref_url="https://bugzilla.suse.com/1195065" source="BUGZILLA"/>
		<reference ref_id="1195651" ref_url="https://bugzilla.suse.com/1195651" source="BUGZILLA"/>
		<reference ref_id="1196018" ref_url="https://bugzilla.suse.com/1196018" source="BUGZILLA"/>
		<reference ref_id="1196367" ref_url="https://bugzilla.suse.com/1196367" source="BUGZILLA"/>
		<reference ref_id="1196426" ref_url="https://bugzilla.suse.com/1196426" source="BUGZILLA"/>
		<reference ref_id="1196999" ref_url="https://bugzilla.suse.com/1196999" source="BUGZILLA"/>
		<reference ref_id="1197219" ref_url="https://bugzilla.suse.com/1197219" source="BUGZILLA"/>
		<reference ref_id="1197343" ref_url="https://bugzilla.suse.com/1197343" source="BUGZILLA"/>
		<reference ref_id="1197663" ref_url="https://bugzilla.suse.com/1197663" source="BUGZILLA"/>
		<reference ref_id="1198400" ref_url="https://bugzilla.suse.com/1198400" source="BUGZILLA"/>
		<reference ref_id="1198516" ref_url="https://bugzilla.suse.com/1198516" source="BUGZILLA"/>
		<reference ref_id="1198577" ref_url="https://bugzilla.suse.com/1198577" source="BUGZILLA"/>
		<reference ref_id="1198660" ref_url="https://bugzilla.suse.com/1198660" source="BUGZILLA"/>
		<reference ref_id="1198687" ref_url="https://bugzilla.suse.com/1198687" source="BUGZILLA"/>
		<reference ref_id="1198742" ref_url="https://bugzilla.suse.com/1198742" source="BUGZILLA"/>
		<reference ref_id="1198777" ref_url="https://bugzilla.suse.com/1198777" source="BUGZILLA"/>
		<reference ref_id="1198825" ref_url="https://bugzilla.suse.com/1198825" source="BUGZILLA"/>
		<reference ref_id="1199012" ref_url="https://bugzilla.suse.com/1199012" source="BUGZILLA"/>
		<reference ref_id="1199063" ref_url="https://bugzilla.suse.com/1199063" source="BUGZILLA"/>
		<reference ref_id="1199314" ref_url="https://bugzilla.suse.com/1199314" source="BUGZILLA"/>
		<reference ref_id="1199399" ref_url="https://bugzilla.suse.com/1199399" source="BUGZILLA"/>
		<reference ref_id="1199426" ref_url="https://bugzilla.suse.com/1199426" source="BUGZILLA"/>
		<reference ref_id="1199505" ref_url="https://bugzilla.suse.com/1199505" source="BUGZILLA"/>
		<reference ref_id="1199507" ref_url="https://bugzilla.suse.com/1199507" source="BUGZILLA"/>
		<reference ref_id="1199605" ref_url="https://bugzilla.suse.com/1199605" source="BUGZILLA"/>
		<reference ref_id="1199650" ref_url="https://bugzilla.suse.com/1199650" source="BUGZILLA"/>
		<reference ref_id="1200143" ref_url="https://bugzilla.suse.com/1200143" source="BUGZILLA"/>
		<reference ref_id="1200144" ref_url="https://bugzilla.suse.com/1200144" source="BUGZILLA"/>
		<reference ref_id="1200249" ref_url="https://bugzilla.suse.com/1200249" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-13695" ref_url="https://www.suse.com/security/cve/CVE-2017-13695/" source="CVE"/>
		<reference ref_id="CVE-2018-7755" ref_url="https://www.suse.com/security/cve/CVE-2018-7755/" source="CVE"/>
		<reference ref_id="CVE-2019-19377" ref_url="https://www.suse.com/security/cve/CVE-2019-19377/" source="CVE"/>
		<reference ref_id="CVE-2019-20811" ref_url="https://www.suse.com/security/cve/CVE-2019-20811/" source="CVE"/>
		<reference ref_id="CVE-2020-26541" ref_url="https://www.suse.com/security/cve/CVE-2020-26541/" source="CVE"/>
		<reference ref_id="CVE-2021-20292" ref_url="https://www.suse.com/security/cve/CVE-2021-20292/" source="CVE"/>
		<reference ref_id="CVE-2021-20321" ref_url="https://www.suse.com/security/cve/CVE-2021-20321/" source="CVE"/>
		<reference ref_id="CVE-2021-33061" ref_url="https://www.suse.com/security/cve/CVE-2021-33061/" source="CVE"/>
		<reference ref_id="CVE-2021-38208" ref_url="https://www.suse.com/security/cve/CVE-2021-38208/" source="CVE"/>
		<reference ref_id="CVE-2021-39711" ref_url="https://www.suse.com/security/cve/CVE-2021-39711/" source="CVE"/>
		<reference ref_id="CVE-2021-43389" ref_url="https://www.suse.com/security/cve/CVE-2021-43389/" source="CVE"/>
		<reference ref_id="CVE-2022-1011" ref_url="https://www.suse.com/security/cve/CVE-2022-1011/" source="CVE"/>
		<reference ref_id="CVE-2022-1184" ref_url="https://www.suse.com/security/cve/CVE-2022-1184/" source="CVE"/>
		<reference ref_id="CVE-2022-1353" ref_url="https://www.suse.com/security/cve/CVE-2022-1353/" source="CVE"/>
		<reference ref_id="CVE-2022-1419" ref_url="https://www.suse.com/security/cve/CVE-2022-1419/" source="CVE"/>
		<reference ref_id="CVE-2022-1516" ref_url="https://www.suse.com/security/cve/CVE-2022-1516/" source="CVE"/>
		<reference ref_id="CVE-2022-1652" ref_url="https://www.suse.com/security/cve/CVE-2022-1652/" source="CVE"/>
		<reference ref_id="CVE-2022-1729" ref_url="https://www.suse.com/security/cve/CVE-2022-1729/" source="CVE"/>
		<reference ref_id="CVE-2022-1734" ref_url="https://www.suse.com/security/cve/CVE-2022-1734/" source="CVE"/>
		<reference ref_id="CVE-2022-1974" ref_url="https://www.suse.com/security/cve/CVE-2022-1974/" source="CVE"/>
		<reference ref_id="CVE-2022-1975" ref_url="https://www.suse.com/security/cve/CVE-2022-1975/" source="CVE"/>
		<reference ref_id="CVE-2022-21123" ref_url="https://www.suse.com/security/cve/CVE-2022-21123/" source="CVE"/>
		<reference ref_id="CVE-2022-21125" ref_url="https://www.suse.com/security/cve/CVE-2022-21125/" source="CVE"/>
		<reference ref_id="CVE-2022-21127" ref_url="https://www.suse.com/security/cve/CVE-2022-21127/" source="CVE"/>
		<reference ref_id="CVE-2022-21166" ref_url="https://www.suse.com/security/cve/CVE-2022-21166/" source="CVE"/>
		<reference ref_id="CVE-2022-21180" ref_url="https://www.suse.com/security/cve/CVE-2022-21180/" source="CVE"/>
		<reference ref_id="CVE-2022-21499" ref_url="https://www.suse.com/security/cve/CVE-2022-21499/" source="CVE"/>
		<reference ref_id="CVE-2022-22942" ref_url="https://www.suse.com/security/cve/CVE-2022-22942/" source="CVE"/>
		<reference ref_id="CVE-2022-28748" ref_url="https://www.suse.com/security/cve/CVE-2022-28748/" source="CVE"/>
		<reference ref_id="CVE-2022-30594" ref_url="https://www.suse.com/security/cve/CVE-2022-30594/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2111-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011310.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated.

The following security bugs were fixed:

- CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)
- CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image. (bnc#1158266)
- CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a corrupted image. (bsc#1198577)
- CVE-2017-13695: Fixed a bug that caused a stack dump allowing local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted ACPI table. (bnc#1055710)
- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
- CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063).
- CVE-2021-39711: In bpf_prog_test_run_skb of test_run.c, there is a possible out of bounds read due to Incorrect Size Value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1197219).
- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505).
- CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters that may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1196426).
- CVE-2022-1516: Fixed null-ptr-deref caused by x25_disconnect (bsc#1199012).
- CVE-2021-20321: Fixed a race condition accessing file object in the OverlayFS subsystem in the way users do rename in specific way with OverlayFS. A local user could have used this flaw to crash the system (bnc#1191647).
- CVE-2019-20811: Fixed issue in rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, where a reference count is mishandled (bnc#1172456).
- CVE-2022-28748: Fixed memory lead over the network by ax88179_178a devices (bsc#1196018).
- CVE-2018-7755: Fixed an issue in the fd_locked_ioctl function in drivers/block/floppy.c. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR (bnc#1084513).
- CVE-2022-22942: Fixed stale file descriptors on failed usercopy (bsc#1195065).
- CVE-2022-1419: Fixed a concurrency use-after-free in vgem_gem_dumb_create (bsc#1198742).
- CVE-2021-43389: Fixed an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).
- CVE-2021-38208: Fixed a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call (bnc#1187055).
- CVE-2022-1353: Fixed access controll to kernel memory in the pfkey_register function in net/key/af_key.c (bnc#1198516).
- CVE-2021-20292: Fixed object validation prior to performing operations on the object in nouveau_sgdma_create_ttm in Nouveau DRM subsystem (bnc#1183723).
- CVE-2022-1011: Fixed an use-after-free vulnerability which could allow a local attacker to retireve (partial) /etc/shadow hashes or any other data from filesystem when he can mount a FUSE filesystems. (bnc#1197343)
- CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space. (bsc#1200144).
- CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism. (bnc#1177282)
- CVE-2022-1975: Fixed a bug that allows an attacker to crash the linux kernel by simulating nfc device from user-space. (bsc#1200143)
- CVE-2022-21499: Reinforce the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb. (bsc#1199426)
- CVE-2022-1734: Fixed a r/w use-after-free when non synchronized between cleanup routine and firmware download routine. (bnc#1199605).

The following non-security bugs were fixed:

- btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (bsc#1199399).
- btrfs: tree-checker: fix incorrect printk format (bsc#1200249).
- net: ena: A typo fix in the file ena_com.h (bsc#1198777).
- net: ena: Add capabilities field with support for ENI stats capability (bsc#1198777).
- net: ena: Add debug prints for invalid req_id resets (bsc#1198777).
- net: ena: add device distinct log prefix to files (bsc#1198777).
- net: ena: add jiffies of last napi call to stats (bsc#1198777).
- net: ena: aggregate doorbell common operations into a function (bsc#1198777).
- net: ena: aggregate stats increase into a function (bsc#1198777).
- net: ena: Change ENI stats support check to use capabilities field (bsc#1198777).
- net: ena: Change return value of ena_calc_io_queue_size() to void (bsc#1198777).
- net: ena: Change the name of bad_csum variable (bsc#1198777).
- net: ena: Extract recurring driver reset code into a function (bsc#1198777).
- net: ena: fix coding style nits (bsc#1198777).
- net: ena: fix DMA mapping function issues in XDP (bsc#1198777).
- net: ena: Fix error handling when calculating max IO queues number (bsc#1198777).
- net: ena: fix inaccurate print type (bsc#1198777).
- net: ena: Fix undefined state when tx request id is out of bounds (bsc#1198777).
- net: ena: Fix wrong rx request id by resetting device (bsc#1198777).
- net: ena: Improve error logging in driver (bsc#1198777).
- net: ena: introduce ndo_xdp_xmit() function for XDP_REDIRECT (bsc#1198777).
- net: ena: introduce XDP redirect implementation (bsc#1198777).
- net: ena: make symbol 'ena_alloc_map_page' static (bsc#1198777).
- net: ena: Move reset completion print to the reset function (bsc#1198777).
- net: ena: optimize data access in fast-path code (bsc#1198777).
- net: ena: re-organize code to improve readability (bsc#1198777).
- net: ena: Remove ena_calc_queue_size_ctx struct (bsc#1198777).
- net: ena: remove extra words from comments (bsc#1198777).
- net: ena: Remove module param and change message severity (bsc#1198777).
- net: ena: Remove rcu_read_lock() around XDP program invocation (bsc#1198777).
- net: ena: Remove redundant return code check (bsc#1198777).
- net: ena: Remove unused code (bsc#1198777).
- net: ena: store values in their appropriate variables types (bsc#1198777).
- net: ena: Update XDP verdict upon failure (bsc#1198777).
- net: ena: use build_skb() in RX path (bsc#1198777).
- net: ena: use constant value for net_device allocation (bsc#1198777).
- net: ena: Use dev_alloc() in RX buffer allocation (bsc#1198777).
- net: ena: Use pci_sriov_configure_simple() to enable VFs (bsc#1198777).
- net: ena: use xdp_frame in XDP TX flow (bsc#1198777).
- net: ena: use xdp_return_frame() to free xdp frames (bsc#1198777).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Remove unnecessary check of cqe_type in mana_process_rx_cqe() (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Use struct_size() helper in mana_gd_create_dma_region() (bsc#1195651).
- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (bsc#1199314).
- powerpc/64: Fix kernel stack 16-byte alignment (bsc#1196999 ltc#196609S git-fixes).
- powerpc/64: Interrupts save PPR on stack rather than thread_struct (bsc#1196999 ltc#196609).
- powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc#1182171 ltc#190900 bsc#1198660 ltc#197803).
- powerpc/pseries: Fix use after free in remove_phb_dynamic() (bsc#1065729 bsc#1198660 ltc#197803).
- scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() (bsc#1028340 bsc#1198825).
- SUNRPC: change locking for xs_swap_enable/disable (bsc#1196367).
- x86/pm: Save the MSR validity status at context setup (bsc#1114648).
- x86/speculation: Restore speculation related MSRs during S3 resume (bsc#1114648).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-17"/>
	<updated date="2022-06-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1028340">SUSE bug 1028340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1055710">SUSE bug 1055710</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1065729">SUSE bug 1065729</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1084513">SUSE bug 1084513</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1087082">SUSE bug 1087082</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114648">SUSE bug 1114648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158266">SUSE bug 1158266</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172456">SUSE bug 1172456</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177282">SUSE bug 1177282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182171">SUSE bug 1182171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183723">SUSE bug 1183723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187055">SUSE bug 1187055</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191647">SUSE bug 1191647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191958">SUSE bug 1191958</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195065">SUSE bug 1195065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195651">SUSE bug 1195651</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196018">SUSE bug 1196018</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196367">SUSE bug 1196367</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196426">SUSE bug 1196426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196999">SUSE bug 1196999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197219">SUSE bug 1197219</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197343">SUSE bug 1197343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197663">SUSE bug 1197663</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198400">SUSE bug 1198400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198516">SUSE bug 1198516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198577">SUSE bug 1198577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198660">SUSE bug 1198660</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198687">SUSE bug 1198687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198742">SUSE bug 1198742</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198777">SUSE bug 1198777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198825">SUSE bug 1198825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199012">SUSE bug 1199012</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199063">SUSE bug 1199063</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199314">SUSE bug 1199314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199399">SUSE bug 1199399</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199426">SUSE bug 1199426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199505">SUSE bug 1199505</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199507">SUSE bug 1199507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199605">SUSE bug 1199605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199650">SUSE bug 1199650</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200143">SUSE bug 1200143</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200144">SUSE bug 1200144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200249">SUSE bug 1200249</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-13695/">CVE-2017-13695</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-7755/">CVE-2018-7755</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-19377/">CVE-2019-19377</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2019-20811/">CVE-2019-20811</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-26541/">CVE-2020-26541</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20292/">CVE-2021-20292</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20321/">CVE-2021-20321</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33061/">CVE-2021-33061</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-38208/">CVE-2021-38208</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39711/">CVE-2021-39711</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43389/">CVE-2021-43389</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1011/">CVE-2022-1011</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1184/">CVE-2022-1184</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1353/">CVE-2022-1353</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1419/">CVE-2022-1419</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1516/">CVE-2022-1516</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1652/">CVE-2022-1652</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1729/">CVE-2022-1729</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1734/">CVE-2022-1734</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1974/">CVE-2022-1974</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1975/">CVE-2022-1975</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21123/">CVE-2022-21123</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21125/">CVE-2022-21125</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21127/">CVE-2022-21127</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21166/">CVE-2022-21166</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21180/">CVE-2022-21180</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-21499/">CVE-2022-21499</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22942/">CVE-2022-22942</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28748/">CVE-2022-28748</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-30594/">CVE-2022-30594</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693404" comment="kernel-default-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693405" comment="kernel-default-base-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693406" comment="kernel-default-devel-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693407" comment="kernel-default-man-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692758" comment="kernel-devel-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692759" comment="kernel-docs-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692760" comment="kernel-macros-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693408" comment="kernel-obs-build-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692762" comment="kernel-source-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693409" comment="kernel-syms-4.12.14-150100.197.114.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693410" comment="reiserfs-kmp-default-4.12.14-150100.197.114.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:140999" version="1" class="patch">
	<metadata>
		<title>Security update for log4j (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194842" ref_url="https://bugzilla.suse.com/1194842" source="BUGZILLA"/>
		<reference ref_id="1194843" ref_url="https://bugzilla.suse.com/1194843" source="BUGZILLA"/>
		<reference ref_id="1194844" ref_url="https://bugzilla.suse.com/1194844" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23302" ref_url="https://www.suse.com/security/cve/CVE-2022-23302/" source="CVE"/>
		<reference ref_id="CVE-2022-23305" ref_url="https://www.suse.com/security/cve/CVE-2022-23305/" source="CVE"/>
		<reference ref_id="CVE-2022-23307" ref_url="https://www.suse.com/security/cve/CVE-2022-23307/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0214-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/010127.html" source="SUSE-SU"/>
		<description>
This update for log4j fixes the following issues:

- CVE-2022-23307: Fixed deserialization flaw in the chainsaw component of log4j leading to malicious code execution. (bsc#1194844)
- CVE-2022-23305: Fixed SQL injection when application is configured to use JDBCAppender. (bsc#1194843)
- CVE-2022-23302: Fixed remote code execution when application is configured to use JMSSink. (bsc#1194842)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-27"/>
	<updated date="2022-01-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194842">SUSE bug 1194842</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194843">SUSE bug 1194843</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194844">SUSE bug 1194844</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23302/">CVE-2022-23302</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23305/">CVE-2022-23305</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23307/">CVE-2022-23307</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664552" comment="log4j-1.2.17-5.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664553" comment="log4j-manual-1.2.17-5.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141000" version="1" class="patch">
	<metadata>
		<title>Security update for node_exporter (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1190535" ref_url="https://bugzilla.suse.com/1190535" source="BUGZILLA"/>
		<reference ref_id="1196338" ref_url="https://bugzilla.suse.com/1196338" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21698" ref_url="https://www.suse.com/security/cve/CVE-2022-21698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011315.html" source="SUSE-SU"/>
		<description>
This security update for golang-github-prometheus-node_exporter provides:

Update golang-github-prometheus-node_exporter from version 1.1.2 to version 1.3.0 (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239)

- CVE-2022-21698: Denial of service using InstrumentHandlerCounter
- Update vendor tarball with prometheus/client_golang 1.11.1
- Update to 1.3.0
  * [CHANGE] Add path label to rapl collector #2146
  * [CHANGE] Exclude filesystems under /run/credentials #2157
  * [CHANGE] Add TCPTimeouts to netstat default filter #2189
  * [FEATURE] Add lnstat collector for metrics from /proc/net/stat/ #1771
  * [FEATURE] Add darwin powersupply collector #1777
  * [FEATURE] Add support for monitoring GPUs on Linux #1998
  * [FEATURE] Add Darwin thermal collector #2032
  * [FEATURE] Add os release collector #2094
  * [FEATURE] Add netdev.address-info collector #2105
  * [FEATURE] Add clocksource metrics to time collector #2197
  * [ENHANCEMENT] Support glob textfile collector directories #1985
  * [ENHANCEMENT] ethtool: Expose node_ethtool_info metric #2080
  * [ENHANCEMENT] Use include/exclude flags for ethtool filtering #2165
  * [ENHANCEMENT] Add flag to disable guest CPU metrics #2123
  * [ENHANCEMENT] Add DMI collector #2131
  * [ENHANCEMENT] Add threads metrics to processes collector #2164
  * [ENHANCMMENT] Reduce timer GC delays in the Linux filesystem collector #2169
  * [ENHANCMMENT] Add TCPTimeouts to netstat default filter #2189
  * [ENHANCMMENT] Use SysctlTimeval for boottime collector on BSD #2208
  * [BUGFIX] ethtool: Sanitize metric names #2093
  * [BUGFIX] Fix ethtool collector for multiple interfaces #2126
  * [BUGFIX] Fix possible panic on macOS #2133
  * [BUGFIX] Collect flag_info and bug_info only for one core #2156
  * [BUGFIX] Prevent duplicate ethtool metric names #2187
- Update to 1.2.2
  * Bug fixes
     Fix processes collector long int parsing #2112
- Update to 1.2.1
  * Removed
     Remove obsolete capture permission denied error fix already included upstream
  * Bug fixes
     Fix zoneinfo parsing prometheus/procfs#386
     Fix nvme collector log noise #2091
     Fix rapl collector log noise #2092
- Update to 1.2.0
  * Changes
     Rename filesystem collector flags to match other collectors #2012
     Make node_exporter print usage to STDOUT #203
  * Features
     Add conntrack statistics metrics #1155
     Add ethtool stats collector #1832
     Add flag to ignore network speed if it is unknown #1989
     Add tapestats collector for Linux #2044
     Add nvme collector #2062
  * Enhancements
     Add ErrorLog plumbing to promhttp #1887
     Add more Infiniband counters #2019
     netclass: retrieve interface names and filter before parsing #2033
     Add time zone offset metric #2060
  * Bug fixes
     Handle errors from disabled PSI subsystem #1983
     Fix panic when using backwards compatible flags #2000
     Fix wrong value for OpenBSD memory buffer cache #2015
     Only initiate collectors once #2048
     Handle small backwards jumps in CPU idle #2067
- Capture permission denied error for 'energy_uj' file (bsc#1190535)
  		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-20"/>
	<updated date="2022-06-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190535">SUSE bug 1190535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196338">SUSE bug 1196338</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21698/">CVE-2022-21698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009682887" comment="golang-github-prometheus-node_exporter-1.3.0-150100.3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141001" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197423" ref_url="https://bugzilla.suse.com/1197423" source="BUGZILLA"/>
		<reference ref_id="1197425" ref_url="https://bugzilla.suse.com/1197425" source="BUGZILLA"/>
		<reference ref_id="1197426" ref_url="https://bugzilla.suse.com/1197426" source="BUGZILLA"/>
		<reference ref_id="1199965" ref_url="https://bugzilla.suse.com/1199965" source="BUGZILLA"/>
		<reference ref_id="1199966" ref_url="https://bugzilla.suse.com/1199966" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26356" ref_url="https://www.suse.com/security/cve/CVE-2022-26356/" source="CVE"/>
		<reference ref_id="CVE-2022-26357" ref_url="https://www.suse.com/security/cve/CVE-2022-26357/" source="CVE"/>
		<reference ref_id="CVE-2022-26358" ref_url="https://www.suse.com/security/cve/CVE-2022-26358/" source="CVE"/>
		<reference ref_id="CVE-2022-26359" ref_url="https://www.suse.com/security/cve/CVE-2022-26359/" source="CVE"/>
		<reference ref_id="CVE-2022-26360" ref_url="https://www.suse.com/security/cve/CVE-2022-26360/" source="CVE"/>
		<reference ref_id="CVE-2022-26361" ref_url="https://www.suse.com/security/cve/CVE-2022-26361/" source="CVE"/>
		<reference ref_id="CVE-2022-26362" ref_url="https://www.suse.com/security/cve/CVE-2022-26362/" source="CVE"/>
		<reference ref_id="CVE-2022-26363" ref_url="https://www.suse.com/security/cve/CVE-2022-26363/" source="CVE"/>
		<reference ref_id="CVE-2022-26364" ref_url="https://www.suse.com/security/cve/CVE-2022-26364/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2158-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011336.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that
  could cause a denial of service in the host (bsc#1197423).
- CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts
  using VT-d IOMMU hardware, which could lead to a denial of service in the host
  (bsc#1197425).
- CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory
  corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be
  leveraged by an attacker to cause a denial of service in the host (bsc#1197426).
- CVE-2022-26362: Fixed race condition in typeref acquisition (bsc#1199965)
- CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (bsc#1199966)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-23"/>
	<updated date="2022-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197423">SUSE bug 1197423</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197425">SUSE bug 1197425</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197426">SUSE bug 1197426</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199965">SUSE bug 1199965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199966">SUSE bug 1199966</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26356/">CVE-2022-26356</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26357/">CVE-2022-26357</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26358/">CVE-2022-26358</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26359/">CVE-2022-26359</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26360/">CVE-2022-26360</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-26361/">CVE-2022-26361</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26362/">CVE-2022-26362</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26363/">CVE-2022-26363</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26364/">CVE-2022-26364</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009692764" comment="xen-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692765" comment="xen-devel-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692766" comment="xen-libs-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692767" comment="xen-tools-4.12.4_24-150100.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692768" comment="xen-tools-domU-4.12.4_24-150100.3.72.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141002" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200566" ref_url="https://bugzilla.suse.com/1200566" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22967" ref_url="https://www.suse.com/security/cve/CVE-2022-22967/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2159-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011334.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

- CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could be used to bypass authentication when using PAM (bsc#1200566)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-23"/>
	<updated date="2022-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200566">SUSE bug 1200566</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22967/">CVE-2022-22967</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693411" comment="python3-salt-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693412" comment="salt-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693413" comment="salt-api-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692772" comment="salt-bash-completion-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693414" comment="salt-cloud-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693415" comment="salt-doc-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692775" comment="salt-fish-completion-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693416" comment="salt-master-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693417" comment="salt-minion-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693418" comment="salt-proxy-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693419" comment="salt-ssh-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693420" comment="salt-standalone-formulas-configuration-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693421" comment="salt-syndic-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693422" comment="salt-transactional-update-3004-150100.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692783" comment="salt-zsh-completion-3004-150100.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141003" version="1" class="patch">
	<metadata>
		<title>Security update for 389-ds (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188455" ref_url="https://bugzilla.suse.com/1188455" source="BUGZILLA"/>
		<reference ref_id="1195324" ref_url="https://bugzilla.suse.com/1195324" source="BUGZILLA"/>
		<reference ref_id="1197275" ref_url="https://bugzilla.suse.com/1197275" source="BUGZILLA"/>
		<reference ref_id="1197345" ref_url="https://bugzilla.suse.com/1197345" source="BUGZILLA"/>
		<reference ref_id="1199889" ref_url="https://bugzilla.suse.com/1199889" source="BUGZILLA"/>
		<reference ref_id="1200175" ref_url="https://bugzilla.suse.com/1200175" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3652" ref_url="https://www.suse.com/security/cve/CVE-2021-3652/" source="CVE"/>
		<reference ref_id="CVE-2021-4091" ref_url="https://www.suse.com/security/cve/CVE-2021-4091/" source="CVE"/>
		<reference ref_id="CVE-2022-0918" ref_url="https://www.suse.com/security/cve/CVE-2022-0918/" source="CVE"/>
		<reference ref_id="CVE-2022-0996" ref_url="https://www.suse.com/security/cve/CVE-2022-0996/" source="CVE"/>
		<reference ref_id="CVE-2022-1949" ref_url="https://www.suse.com/security/cve/CVE-2022-1949/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011338.html" source="SUSE-SU"/>
		<description>
This update for 389-ds fixes the following issues:

- CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).
- CVE-2022-0918: Fixed denial of service issue via crafted messages (bsc#1197275).
- CVE-2022-0996: Fixed mishandling of password expiry (bsc#1197345).
- CVE-2021-4091: Fixed double free in psearch (bsc#1195324).
- CVE-2021-3652: Fixed disabled accounts may be able to bind with crypt passwords (bsc#1188455). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-23"/>
	<updated date="2022-06-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188455">SUSE bug 1188455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195324">SUSE bug 1195324</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197275">SUSE bug 1197275</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197345">SUSE bug 1197345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199889">SUSE bug 1199889</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200175">SUSE bug 1200175</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-3652/">CVE-2021-3652</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4091/">CVE-2021-4091</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0918/">CVE-2022-0918</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0996/">CVE-2022-0996</cve>
	<cve impact="important" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-1949/">CVE-2022-1949</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693423" comment="389-ds-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693424" comment="389-ds-devel-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693425" comment="389-ds-snmp-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693426" comment="lib389-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693427" comment="libsvrcore0-1.4.2.16~git68.efa843752-150100.7.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141004" version="1" class="patch">
	<metadata>
		<title>Security update for openssl (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200550" ref_url="https://bugzilla.suse.com/1200550" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2068" ref_url="https://www.suse.com/security/cve/CVE-2022-2068/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2179-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-June/011349.html" source="SUSE-SU"/>
		<description>
This update for openssl fixes the following issues:

- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-06-24"/>
	<updated date="2022-06-24"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1200550">SUSE bug 1200550</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2068/">CVE-2022-2068</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693428" comment="libopenssl-1_1-devel-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692790" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693429" comment="libopenssl1_1-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692792" comment="libopenssl1_1-32bit-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693430" comment="libopenssl1_1-hmac-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692794" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693431" comment="openssl-1_1-1.1.0i-150100.14.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141005" version="1" class="patch">
	<metadata>
		<title>Security update for liblouis (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1130813" ref_url="https://bugzilla.suse.com/1130813" source="BUGZILLA"/>
		<reference ref_id="1197085" ref_url="https://bugzilla.suse.com/1197085" source="BUGZILLA"/>
		<reference ref_id="1200120" ref_url="https://bugzilla.suse.com/1200120" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26981" ref_url="https://www.suse.com/security/cve/CVE-2022-26981/" source="CVE"/>
		<reference ref_id="CVE-2022-31783" ref_url="https://www.suse.com/security/cve/CVE-2022-31783/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2252-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011386.html" source="SUSE-SU"/>
		<description>
This update for liblouis fixes the following issues:

- CVE-2022-26981: fix buffer overrun in compilePassOpcode (bsc#1197085).
- CVE-2022-31783: prevent an invalid memory write in compileRule (bsc#1200120).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-04"/>
	<updated date="2022-07-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1130813">SUSE bug 1130813</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197085">SUSE bug 1197085</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200120">SUSE bug 1200120</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26981/">CVE-2022-26981</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-31783/">CVE-2022-31783</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693134" comment="liblouis-data-3.3.0-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693135" comment="liblouis-devel-3.3.0-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693136" comment="liblouis14-3.3.0-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693137" comment="python3-louis-3.3.0-150000.4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141006" version="1" class="patch">
	<metadata>
		<title>Security update for dpdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011405.html" source="SUSE-SU"/>
		<description>

This update of dpdk fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-05"/>
	<updated date="2022-07-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699304" comment="dpdk-18.11.9-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699305" comment="dpdk-devel-18.11.9-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699306" comment="dpdk-kmp-default-18.11.9_k4.12.14_150100.197.114-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699307" comment="dpdk-tools-18.11.9-150100.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009695496" comment="libdpdk-18_11-18.11.9-150100.4.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141007" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200628" ref_url="https://bugzilla.suse.com/1200628" source="BUGZILLA"/>
		<reference ref_id="1200645" ref_url="https://bugzilla.suse.com/1200645" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31625" ref_url="https://www.suse.com/security/cve/CVE-2022-31625/" source="CVE"/>
		<reference ref_id="CVE-2022-31626" ref_url="https://www.suse.com/security/cve/CVE-2022-31626/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2275-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011408.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2022-31625: Fixed uninitialized pointers free in Postgres extension. (bsc#1200645)
- CVE-2022-31626: Fixed buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver. (bsc#1200628).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-05"/>
	<updated date="2022-07-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200628">SUSE bug 1200628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200645">SUSE bug 1200645</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31625/">CVE-2022-31625</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31626/">CVE-2022-31626</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693165" comment="apache2-mod_php7-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693166" comment="php7-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693167" comment="php7-bcmath-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693168" comment="php7-bz2-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693169" comment="php7-calendar-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693170" comment="php7-ctype-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693171" comment="php7-curl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693172" comment="php7-dba-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693173" comment="php7-devel-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693174" comment="php7-dom-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693175" comment="php7-enchant-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693176" comment="php7-exif-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693177" comment="php7-fastcgi-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693178" comment="php7-fileinfo-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693179" comment="php7-fpm-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693180" comment="php7-ftp-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693181" comment="php7-gd-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693182" comment="php7-gettext-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693183" comment="php7-gmp-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693184" comment="php7-iconv-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693185" comment="php7-intl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693186" comment="php7-json-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693187" comment="php7-ldap-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693188" comment="php7-mbstring-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693189" comment="php7-mysql-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693190" comment="php7-odbc-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693191" comment="php7-opcache-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693192" comment="php7-openssl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693193" comment="php7-pcntl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693194" comment="php7-pdo-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692631" comment="php7-pear-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692632" comment="php7-pear-Archive_Tar-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693195" comment="php7-pgsql-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693196" comment="php7-phar-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693197" comment="php7-posix-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693198" comment="php7-readline-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693199" comment="php7-shmop-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693200" comment="php7-snmp-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693201" comment="php7-soap-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693202" comment="php7-sockets-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693203" comment="php7-sodium-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693204" comment="php7-sqlite-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693205" comment="php7-sysvmsg-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693206" comment="php7-sysvsem-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693207" comment="php7-sysvshm-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699308" comment="php7-tidy-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693208" comment="php7-tokenizer-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693209" comment="php7-wddx-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693210" comment="php7-xmlreader-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693211" comment="php7-xmlrpc-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693212" comment="php7-xmlwriter-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693213" comment="php7-xsl-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693214" comment="php7-zip-7.2.5-150000.4.95.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693215" comment="php7-zlib-7.2.5-150000.4.95.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141008" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200793" ref_url="https://bugzilla.suse.com/1200793" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2200" ref_url="https://www.suse.com/security/cve/CVE-2022-2200/" source="CVE"/>
		<reference ref_id="CVE-2022-31744" ref_url="https://www.suse.com/security/cve/CVE-2022-31744/" source="CVE"/>
		<reference ref_id="CVE-2022-34468" ref_url="https://www.suse.com/security/cve/CVE-2022-34468/" source="CVE"/>
		<reference ref_id="CVE-2022-34470" ref_url="https://www.suse.com/security/cve/CVE-2022-34470/" source="CVE"/>
		<reference ref_id="CVE-2022-34472" ref_url="https://www.suse.com/security/cve/CVE-2022-34472/" source="CVE"/>
		<reference ref_id="CVE-2022-34478" ref_url="https://www.suse.com/security/cve/CVE-2022-34478/" source="CVE"/>
		<reference ref_id="CVE-2022-34479" ref_url="https://www.suse.com/security/cve/CVE-2022-34479/" source="CVE"/>
		<reference ref_id="CVE-2022-34481" ref_url="https://www.suse.com/security/cve/CVE-2022-34481/" source="CVE"/>
		<reference ref_id="CVE-2022-34484" ref_url="https://www.suse.com/security/cve/CVE-2022-34484/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2279-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011411.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 91.11.0 ESR (MFSA 2022-25) (bsc#1200793):

- CVE-2022-2200: Undesired attributes could be set as part of prototype pollution (bmo#1771381)
- CVE-2022-31744: CSP bypass enabling stylesheet injection (bmo#1757604)
- CVE-2022-34468: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI (bmo#1768537)
- CVE-2022-34470: Use-after-free in nsSHistory (bmo#1765951)
- CVE-2022-34472: Unavailable PAC file resulted in OCSP requests being blocked (bmo#1770123)
- CVE-2022-34478: Microsoft protocols can be attacked if a user accepts a prompt (bmo#1773717)
- CVE-2022-34479: A popup window could be resized in a way to overlay the address bar with web content (bmo#1745595)
- CVE-2022-34481: Potential integer overflow in ReplaceElementsAt (bmo#1497246)
- CVE-2022-34484: Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11 (bmo#1763634, bmo#1772651)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-06"/>
	<updated date="2022-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200793">SUSE bug 1200793</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2200/">CVE-2022-2200</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-31744/">CVE-2022-31744</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34468/">CVE-2022-34468</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34470/">CVE-2022-34470</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34472/">CVE-2022-34472</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34478/">CVE-2022-34478</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34479/">CVE-2022-34479</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34481/">CVE-2022-34481</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34484/">CVE-2022-34484</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699187" comment="MozillaFirefox-91.11.0-150000.150.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699188" comment="MozillaFirefox-devel-91.11.0-150000.150.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699189" comment="MozillaFirefox-translations-common-91.11.0-150000.150.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699190" comment="MozillaFirefox-translations-other-91.11.0-150000.150.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141009" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201099" ref_url="https://bugzilla.suse.com/1201099" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2097" ref_url="https://www.suse.com/security/cve/CVE-2022-2097/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2311-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011422.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2022-2097: Fixed partial missing encryption in AES OCB mode (bsc#1201099).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-06"/>
	<updated date="2022-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201099">SUSE bug 1201099</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-2097/">CVE-2022-2097</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699309" comment="libopenssl-1_1-devel-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699103" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699310" comment="libopenssl1_1-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699105" comment="libopenssl1_1-32bit-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699311" comment="libopenssl1_1-hmac-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699107" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699312" comment="openssl-1_1-1.1.0i-150100.14.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141010" version="1" class="patch">
	<metadata>
		<title>Security update for oracleasm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2316-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011438.html" source="SUSE-SU"/>
		<description>

This update of oracleasm fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-06"/>
	<updated date="2022-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699313" comment="oracleasm-kmp-default-2.0.8_k4.12.14_150100.197.114-150100.7.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141011" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199166" ref_url="https://bugzilla.suse.com/1199166" source="BUGZILLA"/>
		<reference ref_id="1200550" ref_url="https://bugzilla.suse.com/1200550" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1292" ref_url="https://www.suse.com/security/cve/CVE-2022-1292/" source="CVE"/>
		<reference ref_id="CVE-2022-2068" ref_url="https://www.suse.com/security/cve/CVE-2022-2068/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2321-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011468.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

- CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
- CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-07"/>
	<updated date="2022-07-07"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1199166">SUSE bug 1199166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200550">SUSE bug 1200550</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1292/">CVE-2022-1292</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2068/">CVE-2022-2068</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684553" comment="libopenssl-1_0_0-devel-1.0.2p-150000.3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684555" comment="libopenssl1_0_0-1.0.2p-150000.3.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684556" comment="openssl-1_0_0-1.0.2p-150000.3.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141012" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200338" ref_url="https://bugzilla.suse.com/1200338" source="BUGZILLA"/>
		<reference ref_id="1200340" ref_url="https://bugzilla.suse.com/1200340" source="BUGZILLA"/>
		<reference ref_id="1200341" ref_url="https://bugzilla.suse.com/1200341" source="BUGZILLA"/>
		<reference ref_id="1200345" ref_url="https://bugzilla.suse.com/1200345" source="BUGZILLA"/>
		<reference ref_id="1200348" ref_url="https://bugzilla.suse.com/1200348" source="BUGZILLA"/>
		<reference ref_id="1200350" ref_url="https://bugzilla.suse.com/1200350" source="BUGZILLA"/>
		<reference ref_id="1200352" ref_url="https://bugzilla.suse.com/1200352" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26377" ref_url="https://www.suse.com/security/cve/CVE-2022-26377/" source="CVE"/>
		<reference ref_id="CVE-2022-28614" ref_url="https://www.suse.com/security/cve/CVE-2022-28614/" source="CVE"/>
		<reference ref_id="CVE-2022-28615" ref_url="https://www.suse.com/security/cve/CVE-2022-28615/" source="CVE"/>
		<reference ref_id="CVE-2022-29404" ref_url="https://www.suse.com/security/cve/CVE-2022-29404/" source="CVE"/>
		<reference ref_id="CVE-2022-30522" ref_url="https://www.suse.com/security/cve/CVE-2022-30522/" source="CVE"/>
		<reference ref_id="CVE-2022-30556" ref_url="https://www.suse.com/security/cve/CVE-2022-30556/" source="CVE"/>
		<reference ref_id="CVE-2022-31813" ref_url="https://www.suse.com/security/cve/CVE-2022-31813/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2338-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011487.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2022-26377: Fixed possible request smuggling in mod_proxy_ajp (bsc#1200338)
- CVE-2022-28614: Fixed read beyond bounds via ap_rwrite() (bsc#1200340)
- CVE-2022-28615: Fixed read beyond bounds in ap_strcmp_match() (bsc#1200341)
- CVE-2022-29404: Fixed denial of service in mod_lua r:parsebody (bsc#1200345)
- CVE-2022-30556: Fixed information disclosure in mod_lua with websockets (bsc#1200350)
- CVE-2022-30522: Fixed mod_sed denial of service (bsc#1200352)
- CVE-2022-31813: Fixed mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism (bsc#1200348)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200338">SUSE bug 1200338</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200340">SUSE bug 1200340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200341">SUSE bug 1200341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200345">SUSE bug 1200345</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200348">SUSE bug 1200348</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200350">SUSE bug 1200350</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200352">SUSE bug 1200352</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-26377/">CVE-2022-26377</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28614/">CVE-2022-28614</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-28615/">CVE-2022-28615</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-29404/">CVE-2022-29404</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-30522/">CVE-2022-30522</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-30556/">CVE-2022-30556</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-31813/">CVE-2022-31813</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693138" comment="apache2-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693139" comment="apache2-devel-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692563" comment="apache2-doc-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693140" comment="apache2-prefork-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693141" comment="apache2-utils-2.4.33-150000.3.69.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693142" comment="apache2-worker-2.4.33-150000.3.69.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141013" version="1" class="patch">
	<metadata>
		<title>Security update for fwupdate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2340-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011486.html" source="SUSE-SU"/>
		<description>

This update of fwupdate fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684356" comment="fwupdate-12-150100.11.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684357" comment="fwupdate-devel-12-150100.11.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684358" comment="fwupdate-efi-12-150100.11.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684359" comment="libfwup1-12-150100.11.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141014" version="1" class="patch">
	<metadata>
		<title>Security update for containerd, docker and runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192051" ref_url="https://bugzilla.suse.com/1192051" source="BUGZILLA"/>
		<reference ref_id="1199460" ref_url="https://bugzilla.suse.com/1199460" source="BUGZILLA"/>
		<reference ref_id="1199565" ref_url="https://bugzilla.suse.com/1199565" source="BUGZILLA"/>
		<reference ref_id="1200088" ref_url="https://bugzilla.suse.com/1200088" source="BUGZILLA"/>
		<reference ref_id="1200145" ref_url="https://bugzilla.suse.com/1200145" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29162" ref_url="https://www.suse.com/security/cve/CVE-2022-29162/" source="CVE"/>
		<reference ref_id="CVE-2022-31030" ref_url="https://www.suse.com/security/cve/CVE-2022-31030/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2341-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011489.html" source="SUSE-SU"/>
		<description>
This update for containerd, docker and runc fixes the following issues:

containerd:

- CVE-2022-31030: Fixed denial of service via invocation of the ExecSync API (bsc#1200145)

docker:

- Update to Docker 20.10.17-ce. See upstream changelog online at
  https://docs.docker.com/engine/release-notes/#201017. (bsc#1200145)

runc:

Update to runc v1.1.3.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.3.

* Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
  s390 and s390x. This solves the issue where syscalls the host kernel did not
  support would return `-EPERM` despite the existence of the `-ENOSYS` stub
  code (this was due to how s390x does syscall multiplexing).
* Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
  intended; this fix does not affect runc binary itself but is important for
  libcontainer users such as Kubernetes.
* Inability to compile with recent clang due to an issue with duplicate
  constants in libseccomp-golang.
* When using systemd cgroup driver, skip adding device paths that don't exist,
  to stop systemd from emitting warnings about those paths.
* Socket activation was failing when more than 3 sockets were used.
* Various CI fixes.
* Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
- Fixed issues with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. (bsc#1192051 bsc#1199565)

Update to runc v1.1.2.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.2.

Security issue fixed:

- CVE-2022-29162: A bug was found in runc where runc exec --cap executed processes with
  non-empty inheritable Linux process capabilities, creating an atypical Linux
  environment. (bsc#1199460)

- `runc spec` no longer sets any inheritable capabilities in the created
  example OCI spec (`config.json`) file.

Update to runc v1.1.1.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.1.

* runc run/start can now run a container with read-only /dev in OCI spec,
  rather than error out. (#3355)
* runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
  libcontainer systemd v2 manager no longer errors out if one of the files
  listed in /sys/kernel/cgroup/delegate do not exist in container's
  cgroup. (#3387, #3404)
* Loosen OCI spec validation to avoid bogus 'Intel RDT is not supported'
  error. (#3406)
* libcontainer/cgroups no longer panics in cgroup v1 managers if stat
  of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)

Update to runc v1.1.0.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.0.

- libcontainer will now refuse to build without the nsenter package being
  correctly compiled (specifically this requires CGO to be enabled). This
  should avoid folks accidentally creating broken runc binaries (and
  incorrectly importing our internal libraries into their projects). (#3331)

Update to runc v1.1.0~rc1.

Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.

+ Add support for RDMA cgroup added in Linux 4.11.
* runc exec now produces exit code of 255 when the exec failed.
  This may help in distinguishing between runc exec failures
  (such as invalid options, non-running container or non-existent
  binary etc.) and failures of the command being executed.
+ runc run: new --keep option to skip removal exited containers artefacts.
  This might be useful to check the state (e.g. of cgroup controllers) after
  the container has￼exited.
+ seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
  (the latter is just an alias for SCMP_ACT_KILL).
+ seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
  users to create sophisticated seccomp filters where syscalls can be
  efficiently emulated by privileged processes on the host.
+ checkpoint/restore: add an option (--lsm-mount-context) to set
  a different LSM mount context on restore.
+ intelrdt: support ClosID parameter.
+ runc exec --cgroup: an option to specify a (non-top) in-container cgroup
  to use for the process being executed.
+ cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
  machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
  run/exec now adds the container to the appropriate cgroup under it).
+ sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
  behaviour.
+ mounts: add support for bind-mounts which are inaccessible after switching
  the user namespace. Note that this does not permit the container any
  additional access to the host filesystem, it simply allows containers to
  have bind-mounts configured for paths the user can access but have
  restrictive access control settings for other users.
+ Add support for recursive mount attributes using mount_setattr(2). These
  have the same names as the proposed mount(8) options -- just prepend r
  to the option name (such as rro).
+ Add runc features subcommand to allow runc users to detect what features
  runc has been built with. This includes critical information such as
  supported mount flags, hook names, and so on. Note that the output of this
  command is subject to change and will not be considered stable until runc
  1.2 at the earliest. The runtime-spec specification for this feature is
  being developed in opencontainers/runtime-spec#1130.
* system: improve performance of /proc/$pid/stat parsing.
* cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
  the ownership of certain cgroup control files (as per
  /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
  process.
* runc checkpoint/restore: fixed for containers with an external bind mount
  which destination is a symlink.
* cgroup: improve openat2 handling for cgroup directory handle hardening.
  runc delete -f now succeeds (rather than timing out) on a paused
  container.
* runc run/start/exec now refuses a frozen cgroup (paused container in case of
  exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of the release.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192051">SUSE bug 1192051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199460">SUSE bug 1199460</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199565">SUSE bug 1199565</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200088">SUSE bug 1200088</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200145">SUSE bug 1200145</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-29162/">CVE-2022-29162</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-31030/">CVE-2022-31030</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684369" comment="containerd-1.6.6-150000.73.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684370" comment="containerd-ctr-1.6.6-150000.73.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684371" comment="docker-20.10.17_ce-150000.166.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684372" comment="docker-bash-completion-20.10.17_ce-150000.166.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684374" comment="runc-1.1.3-150000.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141015" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198511" ref_url="https://bugzilla.suse.com/1198511" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-20107" ref_url="https://www.suse.com/security/cve/CVE-2015-20107/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2344-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011485.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:

- CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-08"/>
	<updated date="2022-07-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198511">SUSE bug 1198511</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2015-20107/">CVE-2015-20107</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684335" comment="libpython2_7-1_0-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684336" comment="python-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684337" comment="python-base-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684728" comment="python-curses-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684729" comment="python-devel-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684730" comment="python-gdbm-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684394" comment="python-tk-2.7.18-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684731" comment="python-xml-2.7.18-150000.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141016" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186819" ref_url="https://bugzilla.suse.com/1186819" source="BUGZILLA"/>
		<reference ref_id="1190566" ref_url="https://bugzilla.suse.com/1190566" source="BUGZILLA"/>
		<reference ref_id="1192249" ref_url="https://bugzilla.suse.com/1192249" source="BUGZILLA"/>
		<reference ref_id="1193179" ref_url="https://bugzilla.suse.com/1193179" source="BUGZILLA"/>
		<reference ref_id="1198511" ref_url="https://bugzilla.suse.com/1198511" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-20107" ref_url="https://www.suse.com/security/cve/CVE-2015-20107/" source="CVE"/>
		<reference ref_id="CVE-2021-3572" ref_url="https://www.suse.com/security/cve/CVE-2021-3572/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2351-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011496.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

Security issues fixed:

- CVE-2021-3572: Update bundled pip wheel to the latest SLE version (bsc#1186819)
- CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).

Other bugs fixed:

- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-11"/>
	<updated date="2022-07-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186819">SUSE bug 1186819</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190566">SUSE bug 1190566</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192249">SUSE bug 1192249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193179">SUSE bug 1193179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198511">SUSE bug 1198511</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2015-20107/">CVE-2015-20107</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3572/">CVE-2021-3572</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009693122" comment="libpython3_6m1_0-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693123" comment="python3-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693124" comment="python3-base-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693125" comment="python3-curses-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693126" comment="python3-dbm-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693127" comment="python3-devel-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693128" comment="python3-idle-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699314" comment="python3-testsuite-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693129" comment="python3-tk-3.6.15-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009693130" comment="python3-tools-3.6.15-150000.3.106.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141017" version="1" class="patch">
	<metadata>
		<title>Security update for pcre (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199232" ref_url="https://bugzilla.suse.com/1199232" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1586" ref_url="https://www.suse.com/security/cve/CVE-2022-1586/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2361-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011510.html" source="SUSE-SU"/>
		<description>
This update for pcre fixes the following issues:

- CVE-2022-1586: Fixed unicode property matching issue. (bsc#1199232)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-12"/>
	<updated date="2022-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199232">SUSE bug 1199232</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1586/">CVE-2022-1586</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009684361" comment="libpcre1-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684362" comment="libpcre1-32bit-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684363" comment="libpcre16-0-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684364" comment="libpcrecpp0-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684365" comment="libpcrecpp0-32bit-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684366" comment="libpcreposix0-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684367" comment="pcre-devel-8.45-150000.20.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009684368" comment="pcre-tools-8.45-150000.20.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141018" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194179" ref_url="https://bugzilla.suse.com/1194179" source="BUGZILLA"/>
		<reference ref_id="1194181" ref_url="https://bugzilla.suse.com/1194181" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2319" ref_url="https://www.suse.com/security/cve/CVE-2022-2319/" source="CVE"/>
		<reference ref_id="CVE-2022-2320" ref_url="https://www.suse.com/security/cve/CVE-2022-2320/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2374-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011518.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2022-2319: Fixed out-of-bounds access in _CheckSetSections() (ZDI-CAN-16062) (bsc#1194179).
- CVE-2022-2320: Fixed out-of-bounds access in CheckSetDeviceIndicators() (ZDI-CAN-16070) (bsc#1194181). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-12"/>
	<updated date="2022-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194179">SUSE bug 1194179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194181">SUSE bug 1194181</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2319/">CVE-2022-2319</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2320/">CVE-2022-2320</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699315" comment="xorg-x11-server-1.20.3-150100.14.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699316" comment="xorg-x11-server-extra-1.20.3-150100.14.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699317" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141019" version="1" class="patch">
	<metadata>
		<title>Security update for python-PyJWT (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199756" ref_url="https://bugzilla.suse.com/1199756" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29217" ref_url="https://www.suse.com/security/cve/CVE-2022-29217/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2403-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011549.html" source="SUSE-SU"/>
		<description>
This update for python-PyJWT fixes the following issues:

- CVE-2022-29217: Fixed key confusion through non-blocklisted public key format (bsc#1199756).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-14"/>
	<updated date="2022-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199756">SUSE bug 1199756</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29217/">CVE-2022-29217</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692808" comment="python3-PyJWT-1.7.1-150100.6.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141020" version="1" class="patch">
	<metadata>
		<title>Security update for crash (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198581" ref_url="https://bugzilla.suse.com/1198581" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2410-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011559.html" source="SUSE-SU"/>
		<description>

This update of crash fixes the following issue:

- rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-15"/>
	<updated date="2022-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198581">SUSE bug 1198581</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699318" comment="crash-7.2.1-150100.9.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699319" comment="crash-devel-7.2.1-150100.9.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699114" comment="crash-gcore-7.2.1-150100.9.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699320" comment="crash-kmp-default-7.2.1_k4.12.14_150100.197.114-150100.9.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141021" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194013" ref_url="https://bugzilla.suse.com/1194013" source="BUGZILLA"/>
		<reference ref_id="1196901" ref_url="https://bugzilla.suse.com/1196901" source="BUGZILLA"/>
		<reference ref_id="1199487" ref_url="https://bugzilla.suse.com/1199487" source="BUGZILLA"/>
		<reference ref_id="1199657" ref_url="https://bugzilla.suse.com/1199657" source="BUGZILLA"/>
		<reference ref_id="1200571" ref_url="https://bugzilla.suse.com/1200571" source="BUGZILLA"/>
		<reference ref_id="1200599" ref_url="https://bugzilla.suse.com/1200599" source="BUGZILLA"/>
		<reference ref_id="1200604" ref_url="https://bugzilla.suse.com/1200604" source="BUGZILLA"/>
		<reference ref_id="1200605" ref_url="https://bugzilla.suse.com/1200605" source="BUGZILLA"/>
		<reference ref_id="1200608" ref_url="https://bugzilla.suse.com/1200608" source="BUGZILLA"/>
		<reference ref_id="1200619" ref_url="https://bugzilla.suse.com/1200619" source="BUGZILLA"/>
		<reference ref_id="1200692" ref_url="https://bugzilla.suse.com/1200692" source="BUGZILLA"/>
		<reference ref_id="1200762" ref_url="https://bugzilla.suse.com/1200762" source="BUGZILLA"/>
		<reference ref_id="1201050" ref_url="https://bugzilla.suse.com/1201050" source="BUGZILLA"/>
		<reference ref_id="1201080" ref_url="https://bugzilla.suse.com/1201080" source="BUGZILLA"/>
		<reference ref_id="1201251" ref_url="https://bugzilla.suse.com/1201251" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26341" ref_url="https://www.suse.com/security/cve/CVE-2021-26341/" source="CVE"/>
		<reference ref_id="CVE-2021-4157" ref_url="https://www.suse.com/security/cve/CVE-2021-4157/" source="CVE"/>
		<reference ref_id="CVE-2022-1679" ref_url="https://www.suse.com/security/cve/CVE-2022-1679/" source="CVE"/>
		<reference ref_id="CVE-2022-20132" ref_url="https://www.suse.com/security/cve/CVE-2022-20132/" source="CVE"/>
		<reference ref_id="CVE-2022-20141" ref_url="https://www.suse.com/security/cve/CVE-2022-20141/" source="CVE"/>
		<reference ref_id="CVE-2022-20154" ref_url="https://www.suse.com/security/cve/CVE-2022-20154/" source="CVE"/>
		<reference ref_id="CVE-2022-2318" ref_url="https://www.suse.com/security/cve/CVE-2022-2318/" source="CVE"/>
		<reference ref_id="CVE-2022-26365" ref_url="https://www.suse.com/security/cve/CVE-2022-26365/" source="CVE"/>
		<reference ref_id="CVE-2022-29900" ref_url="https://www.suse.com/security/cve/CVE-2022-29900/" source="CVE"/>
		<reference ref_id="CVE-2022-29901" ref_url="https://www.suse.com/security/cve/CVE-2022-29901/" source="CVE"/>
		<reference ref_id="CVE-2022-33740" ref_url="https://www.suse.com/security/cve/CVE-2022-33740/" source="CVE"/>
		<reference ref_id="CVE-2022-33741" ref_url="https://www.suse.com/security/cve/CVE-2022-33741/" source="CVE"/>
		<reference ref_id="CVE-2022-33742" ref_url="https://www.suse.com/security/cve/CVE-2022-33742/" source="CVE"/>
		<reference ref_id="CVE-2022-33981" ref_url="https://www.suse.com/security/cve/CVE-2022-33981/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011558.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).
- CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487).
- CVE-2022-20132: Fixed out of bounds read due to improper input validation in lg_probe and related functions of hid-lg.c (bsc#1200619).
- CVE-2022-33981: Fixed use-after-free in floppy driver (bsc#1200692)
- CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604).
- CVE-2021-4157: Fixed an out of memory bounds write flaw in the NFS subsystem, related to the replication of files with NFS. A user could potentially crash the system or escalate privileges on the system (bsc#1194013).
- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599).
- CVE-2022-2318: Fixed a use-after-free vulnerabilities in the timer handler in net/rose/rose_timer.c that allow attackers to crash the system without any privileges (bsc#1201251).
- CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762).
- CVE-2021-26341: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bsc#1201050).

The following non-security bugs were fixed:

- exec: Force single empty string when argv is empty (bsc#1200571).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-15"/>
	<updated date="2022-07-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194013">SUSE bug 1194013</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196901">SUSE bug 1196901</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199487">SUSE bug 1199487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199657">SUSE bug 1199657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200571">SUSE bug 1200571</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200599">SUSE bug 1200599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200604">SUSE bug 1200604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200605">SUSE bug 1200605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200608">SUSE bug 1200608</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200619">SUSE bug 1200619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200692">SUSE bug 1200692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200762">SUSE bug 1200762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201050">SUSE bug 1201050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201080">SUSE bug 1201080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201251">SUSE bug 1201251</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-26341/">CVE-2021-26341</cve>
	<cve impact="low" cvss3="3.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4157/">CVE-2021-4157</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1679/">CVE-2022-1679</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-20132/">CVE-2022-20132</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20141/">CVE-2022-20141</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20154/">CVE-2022-20154</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2318/">CVE-2022-2318</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-26365/">CVE-2022-26365</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29900/">CVE-2022-29900</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29901/">CVE-2022-29901</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33740/">CVE-2022-33740</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33741/">CVE-2022-33741</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33742/">CVE-2022-33742</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-33981/">CVE-2022-33981</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699321" comment="kernel-default-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699322" comment="kernel-default-base-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699323" comment="kernel-default-devel-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699324" comment="kernel-default-man-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699119" comment="kernel-devel-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699120" comment="kernel-docs-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699121" comment="kernel-macros-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699325" comment="kernel-obs-build-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699123" comment="kernel-source-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699326" comment="kernel-syms-4.12.14-150100.197.117.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699327" comment="reiserfs-kmp-default-4.12.14-150100.197.117.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141022" version="1" class="patch">
	<metadata>
		<title>Security update for dovecot23 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201267" ref_url="https://bugzilla.suse.com/1201267" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-30550" ref_url="https://www.suse.com/security/cve/CVE-2022-30550/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2432-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011581.html" source="SUSE-SU"/>
		<description>
This update for dovecot23 fixes the following issues:

- CVE-2022-30550: Fixed privilege escalation in dovecot when similar master and non-master passdbs are used (bsc#1201267).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-18"/>
	<updated date="2022-07-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201267">SUSE bug 1201267</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-30550/">CVE-2022-30550</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009701070" comment="dovecot23-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701071" comment="dovecot23-backend-mysql-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701072" comment="dovecot23-backend-pgsql-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701073" comment="dovecot23-backend-sqlite-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701074" comment="dovecot23-devel-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701075" comment="dovecot23-fts-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701076" comment="dovecot23-fts-lucene-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701077" comment="dovecot23-fts-solr-2.3.15-150100.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701078" comment="dovecot23-fts-squat-2.3.15-150100.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141023" version="1" class="patch">
	<metadata>
		<title>Security update for python2-numpy (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193907" ref_url="https://bugzilla.suse.com/1193907" source="BUGZILLA"/>
		<reference ref_id="1193911" ref_url="https://bugzilla.suse.com/1193911" source="BUGZILLA"/>
		<reference ref_id="1193913" ref_url="https://bugzilla.suse.com/1193913" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33430" ref_url="https://www.suse.com/security/cve/CVE-2021-33430/" source="CVE"/>
		<reference ref_id="CVE-2021-41495" ref_url="https://www.suse.com/security/cve/CVE-2021-41495/" source="CVE"/>
		<reference ref_id="CVE-2021-41496" ref_url="https://www.suse.com/security/cve/CVE-2021-41496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011595.html" source="SUSE-SU"/>
		<description>
This update for python2-numpy fixes the following issues:

- CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
- CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).
- CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort (bsc#1193911).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-19"/>
	<updated date="2022-07-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193907">SUSE bug 1193907</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193911">SUSE bug 1193911</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193913">SUSE bug 1193913</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33430/">CVE-2021-33430</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41495/">CVE-2021-41495</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-41496/">CVE-2021-41496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699185" comment="python2-numpy-1.16.5-150000.1.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699186" comment="python2-numpy-devel-1.16.5-150000.1.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141024" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201221" ref_url="https://bugzilla.suse.com/1201221" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22662" ref_url="https://www.suse.com/security/cve/CVE-2022-22662/" source="CVE"/>
		<reference ref_id="CVE-2022-22677" ref_url="https://www.suse.com/security/cve/CVE-2022-22677/" source="CVE"/>
		<reference ref_id="CVE-2022-26710" ref_url="https://www.suse.com/security/cve/CVE-2022-26710/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2524-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011629.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.36.4 (bsc#1201221):

- CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information.
- CVE-2022-22677: The video in a webRTC call may be interrupted if the audio capture gets interrupted.
- CVE-2022-26710: Processing maliciously crafted web content may lead to arbitrary code execution.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201221">SUSE bug 1201221</bugzilla>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22662/">CVE-2022-22662</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-22677/">CVE-2022-22677</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26710/">CVE-2022-26710</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699219" comment="libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699220" comment="libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699085" comment="libwebkit2gtk3-lang-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699221" comment="typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699222" comment="typelib-1_0-WebKit2-4_0-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699223" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699224" comment="webkit2gtk-4_0-injected-bundles-2.36.4-150000.3.106.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699225" comment="webkit2gtk3-devel-2.36.4-150000.3.106.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141025" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198671" ref_url="https://bugzilla.suse.com/1198671" source="BUGZILLA"/>
		<reference ref_id="1198672" ref_url="https://bugzilla.suse.com/1198672" source="BUGZILLA"/>
		<reference ref_id="1198673" ref_url="https://bugzilla.suse.com/1198673" source="BUGZILLA"/>
		<reference ref_id="1198674" ref_url="https://bugzilla.suse.com/1198674" source="BUGZILLA"/>
		<reference ref_id="1198675" ref_url="https://bugzilla.suse.com/1198675" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21426" ref_url="https://www.suse.com/security/cve/CVE-2022-21426/" source="CVE"/>
		<reference ref_id="CVE-2022-21434" ref_url="https://www.suse.com/security/cve/CVE-2022-21434/" source="CVE"/>
		<reference ref_id="CVE-2022-21443" ref_url="https://www.suse.com/security/cve/CVE-2022-21443/" source="CVE"/>
		<reference ref_id="CVE-2022-21476" ref_url="https://www.suse.com/security/cve/CVE-2022-21476/" source="CVE"/>
		<reference ref_id="CVE-2022-21496" ref_url="https://www.suse.com/security/cve/CVE-2022-21496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2530-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011636.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

Update to version jdk8u332 - April 2022 CPU (icedtea-3.23.0)

- CVE-2022-21426: Better XPath expression handling (bsc#1198672)
- CVE-2022-21443: Improved Object Identification (bsc#1198675)
- CVE-2022-21434: Better invocation handler handling (bsc#1198674)
- CVE-2022-21476: Improve Santuario processing (bsc#1198671)
- CVE-2022-21496: Improve URL supports (bsc#1198673)

And further Security fixes, Import of OpenJDK 8 u332, Backports and Bug fixes.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198671">SUSE bug 1198671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198672">SUSE bug 1198672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198673">SUSE bug 1198673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198674">SUSE bug 1198674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198675">SUSE bug 1198675</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21426/">CVE-2022-21426</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21434/">CVE-2022-21434</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21443/">CVE-2022-21443</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21476/">CVE-2022-21476</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21496/">CVE-2022-21496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009698590" comment="java-1_8_0-openjdk-1.8.0.332-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698591" comment="java-1_8_0-openjdk-demo-1.8.0.332-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698592" comment="java-1_8_0-openjdk-devel-1.8.0.332-150000.3.67.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698593" comment="java-1_8_0-openjdk-headless-1.8.0.332-150000.3.67.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141026" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192079" ref_url="https://bugzilla.suse.com/1192079" source="BUGZILLA"/>
		<reference ref_id="1192080" ref_url="https://bugzilla.suse.com/1192080" source="BUGZILLA"/>
		<reference ref_id="1192086" ref_url="https://bugzilla.suse.com/1192086" source="BUGZILLA"/>
		<reference ref_id="1192087" ref_url="https://bugzilla.suse.com/1192087" source="BUGZILLA"/>
		<reference ref_id="1192228" ref_url="https://bugzilla.suse.com/1192228" source="BUGZILLA"/>
		<reference ref_id="1198486" ref_url="https://bugzilla.suse.com/1198486" source="BUGZILLA"/>
		<reference ref_id="1200027" ref_url="https://bugzilla.suse.com/1200027" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31741" ref_url="https://www.suse.com/security/cve/CVE-2022-31741/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2533-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011637.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

Various FIPS 140-3 related fixes were backported from SUSE Linux Enterprise 15 SP4:

- Makes the PBKDF known answer test compliant with NIST SP800-132. (bsc#1192079). 
- FIPS: Add on-demand integrity tests through sftk_FIPSRepeatIntegrityCheck()
  (bsc#1198980).
- FIPS: mark algorithms as approved/non-approved according to security policy
  (bsc#1191546, bsc#1201298).
- FIPS: remove hard disabling of unapproved algorithms. This requirement is now
  fulfilled by the service level indicator (bsc#1200325).
- Run test suite at build time, and make it pass (bsc#1198486).
- FIPS: skip algorithms that are hard disabled in FIPS mode.
- Prevent expired PayPalEE cert from failing the tests.
- Allow checksumming to be disabled, but only if we entered FIPS mode
  due to NSS_FIPS being set, not if it came from /proc.
- FIPS: Make the PBKDF known answer test compliant with NIST SP800-132.
- Update FIPS validation string to version-release format.
- FIPS: remove XCBC MAC from list of FIPS approved algorithms.
- Enable NSS_ENABLE_FIPS_INDICATORS and set NSS_FIPS_MODULE_ID
  for build.
- FIPS: claim 3DES unapproved in FIPS mode (bsc#1192080).
- FIPS: allow testing of unapproved algorithms (bsc#1192228).
- FIPS: add version indicators. (bmo#1729550, bsc#1192086).
- FIPS: fix some secret clearing (bmo#1697303, bsc#1192087).

Version update to NSS 3.79:

- Use PK11_GetSlotInfo instead of raw C_GetSlotInfo calls.
- Update mercurial in clang-format docker image.
- Use of uninitialized pointer in lg_init after alloc fail.
- selfserv and tstclnt should use PR_GetPrefLoopbackAddrInfo.
- Add SECMOD_LockedModuleHasRemovableSlots.
- Fix secasn1d parsing of indefinite SEQUENCE inside indefinite GROUP.
- Added RFC8422 compliant TLS &lt;= 1.2 undefined/compressed ECPointFormat extension alerts.
- TLS 1.3 Server: Send protocol_version alert on unsupported ClientHello.legacy_version.
- Correct invalid record inner and outer content type alerts.
- NSS does not properly import or export pkcs12 files with large passwords and pkcs5v2 encoding.
- improve error handling after nssCKFWInstance_CreateObjectHandle.
- Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple.
- NSS 3.79 should depend on NSPR 4.34   

Version update to NSS 3.78.1:

- Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple

Version update to NSS 3.78:

- Added TLS 1.3 zero-length inner plaintext checks and tests, zero-length record/fragment handling tests.
- Reworked overlong record size checks and added TLS1.3 specific boundaries.
- Add ECH Grease Support to tstclnt
- Add a strict variant of moz::pkix::CheckCertHostname.
- Change SSL_REUSE_SERVER_ECDHE_KEY default to false.
- Make SEC_PKCS12EnableCipher succeed
- Update zlib in NSS to 1.2.12.

Version update to NSS 3.77:

- Fix link to TLS page on wireshark wiki
- Add two D-TRUST 2020 root certificates.
- Add Telia Root CA v2 root certificate.
- Remove expired explicitly distrusted certificates from certdata.txt.
- support specific RSA-PSS parameters in mozilla::pkix
- Remove obsolete stateEnd check in SEC_ASN1DecoderUpdate.
- Remove token member from NSSSlot struct.
- Provide secure variants of mpp_pprime and mpp_make_prime.
- Support UTF-8 library path in the module spec string.
- Update nssUTF8_Length to RFC 3629 and fix buffer overrun.
- Update googletest to 1.11.0
- Add SetTls13GreaseEchSize to experimental API.
- TLS 1.3 Illegal legacy_version handling/alerts.
- Fix calculation of ECH HRR Transcript.
- Allow ld path to be set as environment variable.
- Ensure we don't read uninitialized memory in ssl gtests.
- Fix DataBuffer Move Assignment.
- internal_error alert on Certificate Request with sha1+ecdsa in TLS 1.3
- rework signature verification in mozilla::pkix

Version update to NSS 3.76.1

- Remove token member from NSSSlot struct.
- Hold tokensLock through nssToken_GetSlot calls in nssTrustDomain_GetActiveSlots.
- Check return value of PK11Slot_GetNSSToken.
- Use Wycheproof JSON for RSASSA-PSS
- Add SHA256 fingerprint comments to old certdata.txt entries.
- Avoid truncating files in nss-release-helper.py.
- Throw illegal_parameter alert for illegal extensions in handshake message.

Version update to NSS 3.75

- Make DottedOIDToCode.py compatible with python3.
- Avoid undefined shift in SSL_CERT_IS while fuzzing.
- Remove redundant key type check.
- Update ABI expectations to match ECH changes.
- Enable CKM_CHACHA20.
- check return on NSS_NoDB_Init and NSS_Shutdown.
- Run ECDSA test vectors from bltest as part of the CI tests.
- Add ECDSA test vectors to the bltest command line tool.
- Allow to build using clang's integrated assembler.
- Allow to override python for the build.
- test HKDF output rather than input.
- Use ASSERT macros to end failed tests early.
- move assignment operator for DataBuffer.
- Add test cases for ECH compression and unexpected extensions in SH.
- Update tests for ECH-13.
- Tidy up error handling.
- Add tests for ECH HRR Changes.
- Server only sends GREASE HRR extension if enabled by preference.
- Update generation of the Associated Data for ECH-13.
- When ECH is accepted, reject extensions which were only advertised in the Outer Client Hello.
- Allow for compressed, non-contiguous, extensions.
- Scramble the PSK extension in CHOuter.
- Split custom extension handling for ECH.
- Add ECH-13 HRR Handling.
- Client side ECH padding.
- Stricter ClientHelloInner Decompression.
- Remove ECH_inner extension, use new enum format.
- Update the version number for ECH-13 and adjust the ECHConfig size.

Version update to NSS 3.74

- mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses
- Ensure clients offer consistent ciphersuites after HRR
- NSS does not properly restrict server keys based on policy
- Set nssckbi version number to 2.54
- Replace Google Trust Services LLC (GTS) R4 root certificate
- Replace Google Trust Services LLC (GTS) R3 root certificate
- Replace Google Trust Services LLC (GTS) R2 root certificate
- Replace Google Trust Services LLC (GTS) R1 root certificate
- Replace GlobalSign ECC Root CA R4
- Remove Expired Root Certificates - DST Root CA X3
- Remove Expiring Cybertrust Global Root and GlobalSign root certificates
- Add renewed Autoridad de Certificacion Firmaprofesional CIF A62634068 root certificate
- Add iTrusChina ECC root certificate
- Add iTrusChina RSA root certificate
- Add ISRG Root X2 root certificate
- Add Chunghwa Telecom's HiPKI Root CA - G1 root certificate
- Avoid a clang 13 unused variable warning in opt build
- Check for missing signedData field
- Ensure DER encoded signatures are within size limits

- enable key logging option (boo#1195040)

Version update to NSS 3.73.1:

- Add SHA-2 support to mozilla::pkix's OSCP implementation

Version update to NSS 3.73

- check for missing signedData field.
- Ensure DER encoded signatures are within size limits.
- NSS needs FiPS 140-3 version indicators.
- pkix_CacheCert_Lookup doesn't return cached certs
- sunset Coverity from NSS

Fixed MFSA 2021-51 (bsc#1193170) CVE-2021-43527: Memory corruption via DER-encoded DSA and RSA-PSS signatures

Version update to NSS 3.72

- Fix nsinstall parallel failure.
- Increase KDF cache size to mitigate perf regression in about:logins

Version update to NSS 3.71

- Set nssckbi version number to 2.52.
- Respect server requirements of tlsfuzzer/test-tls13-signature-algorithms.py
- Import of PKCS#12 files with Camellia encryption is not supported
- Add HARICA Client ECC Root CA 2021.
- Add HARICA Client RSA Root CA 2021.
- Add HARICA TLS ECC Root CA 2021.
- Add HARICA TLS RSA Root CA 2021.
- Add TunTrust Root CA certificate to NSS.

Version update to NSS 3.70

- Update test case to verify fix.
- Explicitly disable downgrade check in TlsConnectStreamTls13.EchOuterWith12Max
- Explicitly disable downgrade check in TlsConnectTest.DisableFalseStartOnFallback
- Avoid using a lookup table in nssb64d.
- Use HW accelerated SHA2 on AArch64 Big Endian.
- Change default value of enableHelloDowngradeCheck to true.
- Cache additional PBE entries.
- Read HPKE vectors from official JSON.

Version update to NSS 3.69.1:

- Disable DTLS 1.0 and 1.1 by default
- integrity checks in key4.db not happening on private components with AES_CBC

NSS 3.69:

- Disable DTLS 1.0 and 1.1 by default (backed out again)
- integrity checks in key4.db not happening on private components with AES_CBC (backed out again)
- SSL handling of signature algorithms ignores environmental invalid algorithms.
- sqlite 3.34 changed it's open semantics, causing nss failures.
- Gtest update changed the gtest reports, losing gtest details in all.sh reports.
- NSS incorrectly accepting 1536 bit DH primes in FIPS mode
- SQLite calls could timeout in starvation situations.
- Coverity/cpp scanner errors found in nss 3.67
- Import the NSS documentation from MDN in nss/doc.
- NSS using a tempdir to measure sql performance not active

Version Update to 3.68.4 (bsc#1200027)

- CVE-2022-31741: Initialize pointers passed to NSS_CMSDigestContext_FinishMultiple.  (bmo#1767590)


Mozilla NSPR was updated to version 4.34:

* add an API that returns a preferred loopback IP on hosts that have two IP stacks available.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192079">SUSE bug 1192079</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192080">SUSE bug 1192080</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192086">SUSE bug 1192086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192087">SUSE bug 1192087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192228">SUSE bug 1192228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198486">SUSE bug 1198486</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200027">SUSE bug 1200027</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31741/">CVE-2022-31741</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009698489" comment="libfreebl3-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698490" comment="libfreebl3-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698491" comment="libfreebl3-hmac-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698492" comment="libfreebl3-hmac-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698493" comment="libsoftokn3-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698494" comment="libsoftokn3-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698495" comment="libsoftokn3-hmac-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698496" comment="libsoftokn3-hmac-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698497" comment="mozilla-nspr-4.34-150000.3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698498" comment="mozilla-nspr-32bit-4.34-150000.3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698499" comment="mozilla-nspr-devel-4.34-150000.3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698500" comment="mozilla-nss-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698501" comment="mozilla-nss-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698502" comment="mozilla-nss-certs-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698503" comment="mozilla-nss-certs-32bit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698504" comment="mozilla-nss-devel-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698505" comment="mozilla-nss-sysinit-3.79-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698506" comment="mozilla-nss-tools-3.79-150000.3.74.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141027" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200119" ref_url="https://bugzilla.suse.com/1200119" source="BUGZILLA"/>
		<reference ref_id="1201431" ref_url="https://bugzilla.suse.com/1201431" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29187" ref_url="https://www.suse.com/security/cve/CVE-2022-29187/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2535-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011633.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- CVE-2022-29187: Incomplete fix for CVE-2022-24765: potential command injection via git worktree (bsc#1201431).
- Allow to opt-out from the check added in the security fix for CVE-2022-24765 (bsc#1200119)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-22"/>
	<updated date="2022-07-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200119">SUSE bug 1200119</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201431">SUSE bug 1201431</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29187/">CVE-2022-29187</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009699209" comment="git-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699210" comment="git-arch-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699211" comment="git-core-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699212" comment="git-cvs-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699213" comment="git-daemon-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699076" comment="git-doc-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699214" comment="git-email-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699215" comment="git-gui-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699216" comment="git-svn-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699217" comment="git-web-2.26.2-150000.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009699218" comment="gitk-2.26.2-150000.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141028" version="1" class="patch">
	<metadata>
		<title>Security update for logrotate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192449" ref_url="https://bugzilla.suse.com/1192449" source="BUGZILLA"/>
		<reference ref_id="1200278" ref_url="https://bugzilla.suse.com/1200278" source="BUGZILLA"/>
		<reference ref_id="1200802" ref_url="https://bugzilla.suse.com/1200802" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011649.html" source="SUSE-SU"/>
		<description>
This update for logrotate fixes the following issues:

Security issues fixed:

- Improved coredump handing for SUID binaries (bsc#1192449).

Non-security issues fixed:

- Fixed 'logrotate emits unintended warning: keyword size not properly separated, found 0x3d' (bsc#1200278, bsc#1200802).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-25"/>
	<updated date="2022-07-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192449">SUSE bug 1192449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200278">SUSE bug 1200278</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200802">SUSE bug 1200802</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698528" comment="logrotate-3.13.0-150000.4.7.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141029" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185923" ref_url="https://bugzilla.suse.com/1185923" source="BUGZILLA"/>
		<reference ref_id="1186654" ref_url="https://bugzilla.suse.com/1186654" source="BUGZILLA"/>
		<reference ref_id="1200907" ref_url="https://bugzilla.suse.com/1200907" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33620" ref_url="https://www.suse.com/security/cve/CVE-2021-33620/" source="CVE"/>
		<reference ref_id="CVE-2021-46784" ref_url="https://www.suse.com/security/cve/CVE-2021-46784/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2553-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011655.html" source="SUSE-SU"/>
		<description>
This update for squid fixes the following issues:

- CVE-2021-46784: Fixed DoS when processing gopher server responses. (bsc#1200907)
- CVE-2021-33620: Fixed DoS in HTTP Response processing (bsc#1185923, bsc#1186654)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-26"/>
	<updated date="2022-07-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185923">SUSE bug 1185923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186654">SUSE bug 1186654</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200907">SUSE bug 1200907</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33620/">CVE-2021-33620</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46784/">CVE-2021-46784</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698649" comment="squid-4.17-150000.5.32.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141030" version="1" class="patch">
	<metadata>
		<title>Security update for python-M2Crypto (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1178829" ref_url="https://bugzilla.suse.com/1178829" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-25657" ref_url="https://www.suse.com/security/cve/CVE-2020-25657/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2562-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011682.html" source="SUSE-SU"/>
		<description>
This update for python-M2Crypto fixes the following issues:

- CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-27"/>
	<updated date="2022-07-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1178829">SUSE bug 1178829</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25657/">CVE-2020-25657</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009698637" comment="python2-M2Crypto-0.35.2-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009698529" comment="python3-M2Crypto-0.35.2-150000.3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141031" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201758" ref_url="https://bugzilla.suse.com/1201758" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-36318" ref_url="https://www.suse.com/security/cve/CVE-2022-36318/" source="CVE"/>
		<reference ref_id="CVE-2022-36319" ref_url="https://www.suse.com/security/cve/CVE-2022-36319/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011719.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.12.0 ESR (bsc#1201758):

- CVE-2022-36319: Mouse Position spoofing with CSS transforms
- CVE-2022-36318: Directory indexes for bundled resources reflected URL parameters
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-29"/>
	<updated date="2022-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201758">SUSE bug 1201758</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36318/">CVE-2022-36318</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36319/">CVE-2022-36319</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702527" comment="MozillaFirefox-91.12.0-150000.150.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702528" comment="MozillaFirefox-devel-91.12.0-150000.150.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702529" comment="MozillaFirefox-translations-common-91.12.0-150000.150.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702530" comment="MozillaFirefox-translations-other-91.12.0-150000.150.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141032" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199965" ref_url="https://bugzilla.suse.com/1199965" source="BUGZILLA"/>
		<reference ref_id="1199966" ref_url="https://bugzilla.suse.com/1199966" source="BUGZILLA"/>
		<reference ref_id="1200549" ref_url="https://bugzilla.suse.com/1200549" source="BUGZILLA"/>
		<reference ref_id="1201394" ref_url="https://bugzilla.suse.com/1201394" source="BUGZILLA"/>
		<reference ref_id="1201469" ref_url="https://bugzilla.suse.com/1201469" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21123" ref_url="https://www.suse.com/security/cve/CVE-2022-21123/" source="CVE"/>
		<reference ref_id="CVE-2022-21125" ref_url="https://www.suse.com/security/cve/CVE-2022-21125/" source="CVE"/>
		<reference ref_id="CVE-2022-21166" ref_url="https://www.suse.com/security/cve/CVE-2022-21166/" source="CVE"/>
		<reference ref_id="CVE-2022-23816" ref_url="https://www.suse.com/security/cve/CVE-2022-23816/" source="CVE"/>
		<reference ref_id="CVE-2022-23825" ref_url="https://www.suse.com/security/cve/CVE-2022-23825/" source="CVE"/>
		<reference ref_id="CVE-2022-26362" ref_url="https://www.suse.com/security/cve/CVE-2022-26362/" source="CVE"/>
		<reference ref_id="CVE-2022-26363" ref_url="https://www.suse.com/security/cve/CVE-2022-26363/" source="CVE"/>
		<reference ref_id="CVE-2022-26364" ref_url="https://www.suse.com/security/cve/CVE-2022-26364/" source="CVE"/>
		<reference ref_id="CVE-2022-29900" ref_url="https://www.suse.com/security/cve/CVE-2022-29900/" source="CVE"/>
		<reference ref_id="CVE-2022-33745" ref_url="https://www.suse.com/security/cve/CVE-2022-33745/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2600-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-July/011720.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966).
- CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549).
- CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965).
- CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394).
- CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-07-29"/>
	<updated date="2022-07-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199965">SUSE bug 1199965</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199966">SUSE bug 1199966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200549">SUSE bug 1200549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201394">SUSE bug 1201394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201469">SUSE bug 1201469</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21123/">CVE-2022-21123</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21125/">CVE-2022-21125</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21166/">CVE-2022-21166</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23816/">CVE-2022-23816</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23825/">CVE-2022-23825</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26362/">CVE-2022-26362</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26363/">CVE-2022-26363</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26364/">CVE-2022-26364</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-29900/">CVE-2022-29900</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-33745/">CVE-2022-33745</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702512" comment="xen-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702513" comment="xen-devel-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702514" comment="xen-libs-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702515" comment="xen-tools-4.12.4_26-150100.3.75.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702516" comment="xen-tools-domU-4.12.4_26-150100.3.75.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141033" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201496" ref_url="https://bugzilla.suse.com/1201496" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32742" ref_url="https://www.suse.com/security/cve/CVE-2022-32742/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2621-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011742.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1write_and_close, SMB1write_and_unlock (bso#15085) (bsc#1201496).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-02"/>
	<updated date="2022-08-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1201496">SUSE bug 1201496</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32742/">CVE-2022-32742</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009703565" comment="libdcerpc-binding0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702789" comment="libdcerpc-binding0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703566" comment="libdcerpc-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703567" comment="libdcerpc-samr-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703568" comment="libdcerpc-samr0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703569" comment="libdcerpc0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702794" comment="libdcerpc0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703570" comment="libndr-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703571" comment="libndr-krb5pac-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703572" comment="libndr-krb5pac0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702798" comment="libndr-krb5pac0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703573" comment="libndr-nbt-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703574" comment="libndr-nbt0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702801" comment="libndr-nbt0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703575" comment="libndr-standard-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703576" comment="libndr-standard0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702804" comment="libndr-standard0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703577" comment="libndr0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702806" comment="libndr0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703578" comment="libnetapi-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703579" comment="libnetapi0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702809" comment="libnetapi0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703580" comment="libsamba-credentials-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703581" comment="libsamba-credentials0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702812" comment="libsamba-credentials0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703582" comment="libsamba-errors-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703583" comment="libsamba-errors0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702815" comment="libsamba-errors0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703584" comment="libsamba-hostconfig-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703585" comment="libsamba-hostconfig0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702818" comment="libsamba-hostconfig0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703586" comment="libsamba-passdb-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703587" comment="libsamba-passdb0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702821" comment="libsamba-passdb0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703588" comment="libsamba-policy-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703589" comment="libsamba-policy-python3-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703590" comment="libsamba-policy0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703591" comment="libsamba-policy0-python3-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703592" comment="libsamba-util-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703593" comment="libsamba-util0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702828" comment="libsamba-util0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703594" comment="libsamdb-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703595" comment="libsamdb0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702831" comment="libsamdb0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703596" comment="libsmbclient-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703597" comment="libsmbclient0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703598" comment="libsmbconf-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703599" comment="libsmbconf0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702836" comment="libsmbconf0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703600" comment="libsmbldap-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703601" comment="libsmbldap2-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702839" comment="libsmbldap2-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703602" comment="libtevent-util-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703603" comment="libtevent-util0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702842" comment="libtevent-util0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703604" comment="libwbclient-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703605" comment="libwbclient0-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702845" comment="libwbclient0-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703606" comment="samba-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703607" comment="samba-ad-dc-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703608" comment="samba-client-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703609" comment="samba-core-devel-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703610" comment="samba-dsdb-modules-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703611" comment="samba-libs-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702852" comment="samba-libs-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703612" comment="samba-libs-python-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703613" comment="samba-libs-python3-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703614" comment="samba-python-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703615" comment="samba-python3-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009703616" comment="samba-winbind-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702858" comment="samba-winbind-32bit-4.9.5+git.490.e80cf669f50-150100.3.70.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141034" version="1" class="patch">
	<metadata>
		<title>Security update for mokutil (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198458" ref_url="https://bugzilla.suse.com/1198458" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:2636-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011750.html" source="SUSE-SU"/>
		<description>
This update for mokutil fixes the following issues:

- Adds SBAT revocation support to mokutil. (bsc#1198458)

New options added (see manpage):

- mokutil --sbat

  List all entries in SBAT.

- mokutil --set-sbat-policy  (latest | previous | delete)
  To set the SBAT acceptance policy.

- mokutil --list-sbat-revocations

  To list the current SBAT revocations.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-03"/>
	<updated date="2022-08-03"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1198458">SUSE bug 1198458</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009692801" comment="mokutil-0.3.0-150100.8.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141035" version="1" class="patch">
	<metadata>
		<title>Security update for pcre2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1164384" ref_url="https://bugzilla.suse.com/1164384" source="BUGZILLA"/>
		<reference ref_id="1199235" ref_url="https://bugzilla.suse.com/1199235" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20454" ref_url="https://www.suse.com/security/cve/CVE-2019-20454/" source="CVE"/>
		<reference ref_id="CVE-2022-1587" ref_url="https://www.suse.com/security/cve/CVE-2022-1587/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2649-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011755.html" source="SUSE-SU"/>
		<description>
This update for pcre2 fixes the following issues:

- CVE-2019-20454: Fixed out-of-bounds read in JIT mode when \X is used in non-UTF mode (bsc#1164384).
- CVE-2022-1587: Fixed out-of-bounds read due to bug in recursions (bsc#1199235).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-03"/>
	<updated date="2022-08-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1164384">SUSE bug 1164384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199235">SUSE bug 1199235</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-20454/">CVE-2019-20454</cve>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1587/">CVE-2022-1587</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009701251" comment="libpcre2-16-0-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701252" comment="libpcre2-32-0-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701253" comment="libpcre2-8-0-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701254" comment="libpcre2-posix2-10.31-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701255" comment="pcre2-devel-10.31-150000.3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141036" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191912" ref_url="https://bugzilla.suse.com/1191912" source="BUGZILLA"/>
		<reference ref_id="1194931" ref_url="https://bugzilla.suse.com/1194931" source="BUGZILLA"/>
		<reference ref_id="1198670" ref_url="https://bugzilla.suse.com/1198670" source="BUGZILLA"/>
		<reference ref_id="1198671" ref_url="https://bugzilla.suse.com/1198671" source="BUGZILLA"/>
		<reference ref_id="1198672" ref_url="https://bugzilla.suse.com/1198672" source="BUGZILLA"/>
		<reference ref_id="1198673" ref_url="https://bugzilla.suse.com/1198673" source="BUGZILLA"/>
		<reference ref_id="1198674" ref_url="https://bugzilla.suse.com/1198674" source="BUGZILLA"/>
		<reference ref_id="1198675" ref_url="https://bugzilla.suse.com/1198675" source="BUGZILLA"/>
		<reference ref_id="1201643" ref_url="https://bugzilla.suse.com/1201643" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-35561" ref_url="https://www.suse.com/security/cve/CVE-2021-35561/" source="CVE"/>
		<reference ref_id="CVE-2022-21299" ref_url="https://www.suse.com/security/cve/CVE-2022-21299/" source="CVE"/>
		<reference ref_id="CVE-2022-21426" ref_url="https://www.suse.com/security/cve/CVE-2022-21426/" source="CVE"/>
		<reference ref_id="CVE-2022-21434" ref_url="https://www.suse.com/security/cve/CVE-2022-21434/" source="CVE"/>
		<reference ref_id="CVE-2022-21443" ref_url="https://www.suse.com/security/cve/CVE-2022-21443/" source="CVE"/>
		<reference ref_id="CVE-2022-21449" ref_url="https://www.suse.com/security/cve/CVE-2022-21449/" source="CVE"/>
		<reference ref_id="CVE-2022-21476" ref_url="https://www.suse.com/security/cve/CVE-2022-21476/" source="CVE"/>
		<reference ref_id="CVE-2022-21496" ref_url="https://www.suse.com/security/cve/CVE-2022-21496/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2650-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011760.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]

- CVE-2022-21476 (bsc#1198671), CVE-2022-21449 (bsc#1198670),
  CVE-2022-21496 (bsc#1198673), CVE-2022-21434 (bsc#1198674),
  CVE-2022-21426 (bsc#1198672), CVE-2022-21443 (bsc#1198675),
  CVE-2021-35561 (bsc#1191912), CVE-2022-21299 (bsc#1194931).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-03"/>
	<updated date="2022-08-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191912">SUSE bug 1191912</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194931">SUSE bug 1194931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198670">SUSE bug 1198670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198671">SUSE bug 1198671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198672">SUSE bug 1198672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198673">SUSE bug 1198673</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198674">SUSE bug 1198674</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198675">SUSE bug 1198675</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201643">SUSE bug 1201643</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-35561/">CVE-2021-35561</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21299/">CVE-2022-21299</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21426/">CVE-2022-21426</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21434/">CVE-2022-21434</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21443/">CVE-2022-21443</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21449/">CVE-2022-21449</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21476/">CVE-2022-21476</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21496/">CVE-2022-21496</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009701256" comment="java-1_8_0-ibm-1.8.0_sr7.10-150000.3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701257" comment="java-1_8_0-ibm-alsa-1.8.0_sr7.10-150000.3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701258" comment="java-1_8_0-ibm-devel-1.8.0_sr7.10-150000.3.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701259" comment="java-1_8_0-ibm-plugin-1.8.0_sr7.10-150000.3.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141037" version="1" class="patch">
	<metadata>
		<title>Security update for u-boot (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201214" ref_url="https://bugzilla.suse.com/1201214" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-34835" ref_url="https://www.suse.com/security/cve/CVE-2022-34835/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2667-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011796.html" source="SUSE-SU"/>
		<description>
This update for u-boot fixes the following issues:

- CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-04"/>
	<updated date="2022-08-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201214">SUSE bug 1201214</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34835/">CVE-2022-34835</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702160" comment="u-boot-rpi3-2019.01-150100.7.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704444" comment="u-boot-tools-2019.01-150100.7.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141038" version="1" class="patch">
	<metadata>
		<title>Security update for qpdf (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188514" ref_url="https://bugzilla.suse.com/1188514" source="BUGZILLA"/>
		<reference ref_id="1201830" ref_url="https://bugzilla.suse.com/1201830" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36978" ref_url="https://www.suse.com/security/cve/CVE-2021-36978/" source="CVE"/>
		<reference ref_id="CVE-2022-34503" ref_url="https://www.suse.com/security/cve/CVE-2022-34503/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2670-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011797.html" source="SUSE-SU"/>
		<description>
This update for qpdf fixes the following issues:

- CVE-2022-34503: Fixed a heap buffer overflow via the function QPDF:processXRefStream (bsc#1201830).
- CVE-2021-36978: Fixed heap-based buffer overflow in Pl_ASCII85Decoder::write (bsc#1188514).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-04"/>
	<updated date="2022-08-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188514">SUSE bug 1188514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201830">SUSE bug 1201830</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36978/">CVE-2021-36978</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-34503/">CVE-2022-34503</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009702972" comment="libqpdf21-8.0.2-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702973" comment="qpdf-8.0.2-150000.3.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009702974" comment="qpdf-devel-8.0.2-150000.3.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141039" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201684" ref_url="https://bugzilla.suse.com/1201684" source="BUGZILLA"/>
		<reference ref_id="1201692" ref_url="https://bugzilla.suse.com/1201692" source="BUGZILLA"/>
		<reference ref_id="1201694" ref_url="https://bugzilla.suse.com/1201694" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21540" ref_url="https://www.suse.com/security/cve/CVE-2022-21540/" source="CVE"/>
		<reference ref_id="CVE-2022-21541" ref_url="https://www.suse.com/security/cve/CVE-2022-21541/" source="CVE"/>
		<reference ref_id="CVE-2022-34169" ref_url="https://www.suse.com/security/cve/CVE-2022-34169/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2707-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011827.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)

- CVE-2022-21540: Improve class compilation (bsc#1201694)
- CVE-2022-21541: Enhance MethodHandle invocations (bsc#1201692)
- CVE-2022-34169: Improve Xalan supports (bsc#1201684)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-09"/>
	<updated date="2022-08-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201684">SUSE bug 1201684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201692">SUSE bug 1201692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201694">SUSE bug 1201694</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21540/">CVE-2022-21540</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21541/">CVE-2022-21541</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34169/">CVE-2022-34169</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009701837" comment="java-11-openjdk-11.0.16.0-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701838" comment="java-11-openjdk-demo-11.0.16.0-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701839" comment="java-11-openjdk-devel-11.0.16.0-150000.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009701840" comment="java-11-openjdk-headless-11.0.16.0-150000.3.83.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141040" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201980" ref_url="https://bugzilla.suse.com/1201980" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32792" ref_url="https://www.suse.com/security/cve/CVE-2022-32792/" source="CVE"/>
		<reference ref_id="CVE-2022-32816" ref_url="https://www.suse.com/security/cve/CVE-2022-32816/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2821-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011919.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- Update to version 2.36.5 (bsc#1201980):
  - Add support for PAC proxy in the WebDriver implementation.
  - Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.

- Security fixes: 
  - CVE-2022-32792: Fixed processing maliciously crafted web content may lead to
    arbitrary code execution.
  - CVE-2022-32816: Fixed visiting a website that frames malicious content may lead to
    UI spoofing.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-16"/>
	<updated date="2022-08-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201980">SUSE bug 1201980</bugzilla>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32792/">CVE-2022-32792</cve>
	<cve impact="important" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32816/">CVE-2022-32816</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009704410" comment="libjavascriptcoregtk-4_0-18-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704411" comment="libwebkit2gtk-4_0-37-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704386" comment="libwebkit2gtk3-lang-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704412" comment="typelib-1_0-JavaScriptCore-4_0-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704413" comment="typelib-1_0-WebKit2-4_0-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704414" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704415" comment="webkit2gtk-4_0-injected-bundles-2.36.5-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704416" comment="webkit2gtk3-devel-2.36.5-150000.3.109.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141041" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195775" ref_url="https://bugzilla.suse.com/1195775" source="BUGZILLA"/>
		<reference ref_id="1195926" ref_url="https://bugzilla.suse.com/1195926" source="BUGZILLA"/>
		<reference ref_id="1198484" ref_url="https://bugzilla.suse.com/1198484" source="BUGZILLA"/>
		<reference ref_id="1198829" ref_url="https://bugzilla.suse.com/1198829" source="BUGZILLA"/>
		<reference ref_id="1200442" ref_url="https://bugzilla.suse.com/1200442" source="BUGZILLA"/>
		<reference ref_id="1200598" ref_url="https://bugzilla.suse.com/1200598" source="BUGZILLA"/>
		<reference ref_id="1200910" ref_url="https://bugzilla.suse.com/1200910" source="BUGZILLA"/>
		<reference ref_id="1201429" ref_url="https://bugzilla.suse.com/1201429" source="BUGZILLA"/>
		<reference ref_id="1201635" ref_url="https://bugzilla.suse.com/1201635" source="BUGZILLA"/>
		<reference ref_id="1201636" ref_url="https://bugzilla.suse.com/1201636" source="BUGZILLA"/>
		<reference ref_id="1201644" ref_url="https://bugzilla.suse.com/1201644" source="BUGZILLA"/>
		<reference ref_id="1201926" ref_url="https://bugzilla.suse.com/1201926" source="BUGZILLA"/>
		<reference ref_id="1201930" ref_url="https://bugzilla.suse.com/1201930" source="BUGZILLA"/>
		<reference ref_id="1201940" ref_url="https://bugzilla.suse.com/1201940" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36557" ref_url="https://www.suse.com/security/cve/CVE-2020-36557/" source="CVE"/>
		<reference ref_id="CVE-2020-36558" ref_url="https://www.suse.com/security/cve/CVE-2020-36558/" source="CVE"/>
		<reference ref_id="CVE-2021-33655" ref_url="https://www.suse.com/security/cve/CVE-2021-33655/" source="CVE"/>
		<reference ref_id="CVE-2021-33656" ref_url="https://www.suse.com/security/cve/CVE-2021-33656/" source="CVE"/>
		<reference ref_id="CVE-2022-1462" ref_url="https://www.suse.com/security/cve/CVE-2022-1462/" source="CVE"/>
		<reference ref_id="CVE-2022-20166" ref_url="https://www.suse.com/security/cve/CVE-2022-20166/" source="CVE"/>
		<reference ref_id="CVE-2022-36946" ref_url="https://www.suse.com/security/cve/CVE-2022-36946/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2827-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011923.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-36557: Fixed race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys that could lead to a use-after-free (bnc#1201429).
- CVE-2020-36558: Fixed race condition involving VT_RESIZEX that could lead to a NULL pointer dereference and general protection fault (bnc#1200910).
- CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635).
- CVE-2021-33656: Fixed out of bounds write with ioctl PIO_FONT (bnc#1201636).
- CVE-2022-1462: Fixed an out-of-bounds read flaw in the TeleTYpe subsystem (bnc#1198829).
- CVE-2022-20166: Fixed possible out of bounds write due to sprintf unsafety that could cause local escalation of privilege (bnc#1200598).
- CVE-2022-36946: Fixed incorrect packet truncation in nfqnl_mangle() that could lead to remote DoS (bnc#1201940).

The following non-security bugs were fixed:

- cifs: On cifs_reconnect, resolve the hostname again (bsc#1201926).
- cifs: Simplify reconnect code when dfs upcall is enabled (bsc#1201926).
- cifs: To match file servers, make sure the server hostname matches (bsc#1201926).
- cifs: fix memory leak of smb3_fs_context_dup::server_hostname (bsc#1201926).
- cifs: set a minimum of 120s for next dns resolution (bsc#1201926).
- cifs: use the expiry output of dns_query to schedule next resolution (bsc#1201926).
- kvm: emulate: Fix SETcc emulation function offsets with SLS (bsc#1201930).
- kvm: emulate: do not adjust size of fastop and setcc subroutines (bsc#1201930).
- rpm/*.spec.in: remove backtick usage
- rpm/constraints.in: skip SLOW_DISK workers for kernel-source
- rpm/kernel-obs-build.spec.in: Also depend on dracut-systemd (bsc#1195775)
- rpm/kernel-obs-build.spec.in: add systemd-initrd and terminfo dracut module (bsc#1195775)
- rpm/kernel-obs-build.spec.in: use default dracut modules (bsc#1195926, bsc#1198484)
- x86/entry: Remove skip_r11rcx (bsc#1201644).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-16"/>
	<updated date="2022-08-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195775">SUSE bug 1195775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195926">SUSE bug 1195926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198484">SUSE bug 1198484</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198829">SUSE bug 1198829</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200442">SUSE bug 1200442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200598">SUSE bug 1200598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200910">SUSE bug 1200910</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201429">SUSE bug 1201429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201635">SUSE bug 1201635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201636">SUSE bug 1201636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201644">SUSE bug 1201644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201926">SUSE bug 1201926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201930">SUSE bug 1201930</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201940">SUSE bug 1201940</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36557/">CVE-2020-36557</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36558/">CVE-2020-36558</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33655/">CVE-2021-33655</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-33656/">CVE-2021-33656</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1462/">CVE-2022-1462</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-20166/">CVE-2022-20166</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36946/">CVE-2022-36946</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706707" comment="kernel-default-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706708" comment="kernel-default-base-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706709" comment="kernel-default-devel-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704433" comment="kernel-default-man-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704395" comment="kernel-devel-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704396" comment="kernel-docs-4.12.14-150100.197.120.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704397" comment="kernel-macros-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706710" comment="kernel-obs-build-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704399" comment="kernel-source-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706711" comment="kernel-syms-4.12.14-150100.197.120.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706712" comment="reiserfs-kmp-default-4.12.14-150100.197.120.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141042" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199223" ref_url="https://bugzilla.suse.com/1199223" source="BUGZILLA"/>
		<reference ref_id="1199224" ref_url="https://bugzilla.suse.com/1199224" source="BUGZILLA"/>
		<reference ref_id="1200735" ref_url="https://bugzilla.suse.com/1200735" source="BUGZILLA"/>
		<reference ref_id="1200737" ref_url="https://bugzilla.suse.com/1200737" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-27781" ref_url="https://www.suse.com/security/cve/CVE-2022-27781/" source="CVE"/>
		<reference ref_id="CVE-2022-27782" ref_url="https://www.suse.com/security/cve/CVE-2022-27782/" source="CVE"/>
		<reference ref_id="CVE-2022-32206" ref_url="https://www.suse.com/security/cve/CVE-2022-32206/" source="CVE"/>
		<reference ref_id="CVE-2022-32208" ref_url="https://www.suse.com/security/cve/CVE-2022-32208/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011931.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2022-27781: Fixed an issue where curl will get stuck in an infinite
  loop when trying to retrieve details about a TLS server's certificate chain (bnc#1199223).
- CVE-2022-27782: Fixed an issue where TLS and SSH connections would
  be reused even when a related option had been changed (bsc#1199224).
- CVE-2022-32206: Fixed an uncontrolled memory consumption issue caused
  by an unbounded number of compression layers (bsc#1200735).
- CVE-2022-32208: Fixed an incorrect message verification issue when
  performing FTP transfers using krb5 (bsc#1200737).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-17"/>
	<updated date="2022-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199223">SUSE bug 1199223</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199224">SUSE bug 1199224</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200735">SUSE bug 1200735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200737">SUSE bug 1200737</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-27781/">CVE-2022-27781</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-27782/">CVE-2022-27782</cve>
	<cve impact="moderate" cvss3="4.9/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-32206/">CVE-2022-32206</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32208/">CVE-2022-32208</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706295" comment="curl-7.60.0-150000.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706296" comment="libcurl-devel-7.60.0-150000.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706297" comment="libcurl4-7.60.0-150000.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706286" comment="libcurl4-32bit-7.60.0-150000.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141043" version="1" class="patch">
	<metadata>
		<title>Security update for gnutls (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196167" ref_url="https://bugzilla.suse.com/1196167" source="BUGZILLA"/>
		<reference ref_id="1202020" ref_url="https://bugzilla.suse.com/1202020" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4209" ref_url="https://www.suse.com/security/cve/CVE-2021-4209/" source="CVE"/>
		<reference ref_id="CVE-2022-2509" ref_url="https://www.suse.com/security/cve/CVE-2022-2509/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011930.html" source="SUSE-SU"/>
		<description>
This update for gnutls fixes the following issues:

- CVE-2022-2509: Fixed a double free issue during PKCS7 verification (bsc#1202020).
- CVE-2021-4209: Fixed null pointer dereference in MD_UPDATE (bsc#1196167). 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-17"/>
	<updated date="2022-08-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196167">SUSE bug 1196167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202020">SUSE bug 1202020</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4209/">CVE-2021-4209</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2509/">CVE-2022-2509</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009705715" comment="gnutls-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705716" comment="libgnutls-devel-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705717" comment="libgnutls30-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705684" comment="libgnutls30-32bit-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705718" comment="libgnutls30-hmac-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705686" comment="libgnutls30-hmac-32bit-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705719" comment="libgnutlsxx-devel-3.6.7-150000.6.45.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009705720" comment="libgnutlsxx28-3.6.7-150000.6.45.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141044" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201727" ref_url="https://bugzilla.suse.com/1201727" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21233" ref_url="https://www.suse.com/security/cve/CVE-2022-21233/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011932.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20220809 release (bsc#1201727):

- CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise an SGX enclave (INTEL-SA-00657).
    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html

Other fixes:

- Update for functional issues.
    See also: https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update

- Updated Platforms:

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | B1       | 06-55-03/97 | 0100015d | 0100015e | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006d05 | 02006e05 | Xeon D-21xx
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000363 | 0d000375 | Xeon Scalable Gen3
  | GLK            | B0       | 06-7a-01/01 | 0000003a | 0000003c | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GLK-R          | R0       | 06-7a-08/01 | 0000001e | 00000020 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b0 | 000000b2 | Core Gen10 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000026 | 00000028 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 0000003e | 00000040 | Core Gen11 Mobile
  | RKL-S          | B0       | 06-a7-01/02 | 00000053 | 00000054 | Core Gen11
  | ADL            | C0       | 06-97-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-97-05/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 0000041c | 00000421 | Core Gen12
  | ADL            | C0       | 06-bf-02/03 | 0000001f | 00000022 | Core Gen12
  | ADL            | C0       | 06-bf-05/03 | 0000001f | 00000022 | Core Gen12
  ------------------------------------------------------------------
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-17"/>
	<updated date="2022-08-17"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1201727">SUSE bug 1201727</bugzilla>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21233/">CVE-2022-21233</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706922" comment="ucode-intel-20220809-150100.3.214.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141045" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194704" ref_url="https://bugzilla.suse.com/1194704" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0204" ref_url="https://www.suse.com/security/cve/CVE-2022-0204/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2837-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011940.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2022-0204: Fixed a buffer overflow in the implementation of the
  gatt protocol (bsc#1194704).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-18"/>
	<updated date="2022-08-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194704">SUSE bug 1194704</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-0204/">CVE-2022-0204</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706698" comment="bluez-5.48-150000.5.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706699" comment="bluez-devel-5.48-150000.5.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706700" comment="libbluetooth3-5.48-150000.5.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141046" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194859" ref_url="https://bugzilla.suse.com/1194859" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44142" ref_url="https://www.suse.com/security/cve/CVE-2021-44142/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010165.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:
	  
- CVE-2021-44142: Fixed out-of-Bound Read/Write on Samba vfs_fruit module. (bsc#1194859)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-01"/>
	<updated date="2022-02-01"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1194859">SUSE bug 1194859</bugzilla>
	<cve impact="critical" cvss3="9.9/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-44142/">CVE-2021-44142</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009666534" comment="libdcerpc-binding0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665534" comment="libdcerpc-binding0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666535" comment="libdcerpc-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666536" comment="libdcerpc-samr-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666537" comment="libdcerpc-samr0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666538" comment="libdcerpc0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665539" comment="libdcerpc0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666539" comment="libndr-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666540" comment="libndr-krb5pac-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666541" comment="libndr-krb5pac0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665543" comment="libndr-krb5pac0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666542" comment="libndr-nbt-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666543" comment="libndr-nbt0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665546" comment="libndr-nbt0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666544" comment="libndr-standard-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666545" comment="libndr-standard0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665549" comment="libndr-standard0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666546" comment="libndr0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665551" comment="libndr0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666547" comment="libnetapi-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666548" comment="libnetapi0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665554" comment="libnetapi0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666549" comment="libsamba-credentials-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666550" comment="libsamba-credentials0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665557" comment="libsamba-credentials0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666551" comment="libsamba-errors-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666552" comment="libsamba-errors0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665560" comment="libsamba-errors0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666553" comment="libsamba-hostconfig-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666554" comment="libsamba-hostconfig0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665563" comment="libsamba-hostconfig0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666555" comment="libsamba-passdb-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666556" comment="libsamba-passdb0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665566" comment="libsamba-passdb0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666557" comment="libsamba-policy-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666558" comment="libsamba-policy-python3-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666559" comment="libsamba-policy0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666560" comment="libsamba-policy0-python3-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666561" comment="libsamba-util-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666562" comment="libsamba-util0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665573" comment="libsamba-util0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666563" comment="libsamdb-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666564" comment="libsamdb0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665576" comment="libsamdb0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666565" comment="libsmbclient-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666566" comment="libsmbclient0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666567" comment="libsmbconf-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666568" comment="libsmbconf0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665581" comment="libsmbconf0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666569" comment="libsmbldap-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666570" comment="libsmbldap2-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665584" comment="libsmbldap2-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666571" comment="libtevent-util-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666572" comment="libtevent-util0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665587" comment="libtevent-util0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666573" comment="libwbclient-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666574" comment="libwbclient0-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665590" comment="libwbclient0-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666575" comment="samba-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666576" comment="samba-ad-dc-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666577" comment="samba-client-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666578" comment="samba-core-devel-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666579" comment="samba-dsdb-modules-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666580" comment="samba-libs-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665597" comment="samba-libs-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666581" comment="samba-libs-python-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666582" comment="samba-libs-python3-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666583" comment="samba-python-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666584" comment="samba-python3-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009666585" comment="samba-winbind-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665603" comment="samba-winbind-32bit-4.9.5+git.483.212a7ebca6b-3.64.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141047" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1188917" ref_url="https://bugzilla.suse.com/1188917" source="BUGZILLA"/>
		<reference ref_id="1189368" ref_url="https://bugzilla.suse.com/1189368" source="BUGZILLA"/>
		<reference ref_id="1191601" ref_url="https://bugzilla.suse.com/1191601" source="BUGZILLA"/>
		<reference ref_id="1191602" ref_url="https://bugzilla.suse.com/1191602" source="BUGZILLA"/>
		<reference ref_id="1201325" ref_url="https://bugzilla.suse.com/1201325" source="BUGZILLA"/>
		<reference ref_id="1201326" ref_url="https://bugzilla.suse.com/1201326" source="BUGZILLA"/>
		<reference ref_id="1201327" ref_url="https://bugzilla.suse.com/1201327" source="BUGZILLA"/>
		<reference ref_id="1201328" ref_url="https://bugzilla.suse.com/1201328" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-22930" ref_url="https://www.suse.com/security/cve/CVE-2021-22930/" source="CVE"/>
		<reference ref_id="CVE-2021-22940" ref_url="https://www.suse.com/security/cve/CVE-2021-22940/" source="CVE"/>
		<reference ref_id="CVE-2021-22959" ref_url="https://www.suse.com/security/cve/CVE-2021-22959/" source="CVE"/>
		<reference ref_id="CVE-2021-22960" ref_url="https://www.suse.com/security/cve/CVE-2021-22960/" source="CVE"/>
		<reference ref_id="CVE-2022-32212" ref_url="https://www.suse.com/security/cve/CVE-2022-32212/" source="CVE"/>
		<reference ref_id="CVE-2022-32213" ref_url="https://www.suse.com/security/cve/CVE-2022-32213/" source="CVE"/>
		<reference ref_id="CVE-2022-32214" ref_url="https://www.suse.com/security/cve/CVE-2022-32214/" source="CVE"/>
		<reference ref_id="CVE-2022-32215" ref_url="https://www.suse.com/security/cve/CVE-2022-32215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2855-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011954.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- CVE-2021-22930, CVE-2021-22940: Fixed two memory corruption issues
  during HTTP/2 stream cancellation (bsc#1188917, bsc#1189368).
- CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2021-22960,
  CVE-2021-22959: Fixed multiple HTTP request smuggling issues in
  the underlying HTTP parser (bsc#1201325, bsc#1201326, bsc#1201327, 
  bsc#1191602, bsc#1191601).
- CVE-2022-32212: Fixed a DNS rebinding issue caused by improper IPv4
  validation (bsc#1201328).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-19"/>
	<updated date="2022-08-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1188917">SUSE bug 1188917</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189368">SUSE bug 1189368</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191601">SUSE bug 1191601</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191602">SUSE bug 1191602</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201325">SUSE bug 1201325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201326">SUSE bug 1201326</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201327">SUSE bug 1201327</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201328">SUSE bug 1201328</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-22930/">CVE-2021-22930</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-22940/">CVE-2021-22940</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-22959/">CVE-2021-22959</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-22960/">CVE-2021-22960</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32212/">CVE-2022-32212</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32213/">CVE-2022-32213</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-32214/">CVE-2022-32214</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-32215/">CVE-2022-32215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706147" comment="nodejs10-10.24.1-150000.1.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706148" comment="nodejs10-devel-10.24.1-150000.1.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706130" comment="nodejs10-docs-10.24.1-150000.1.47.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706149" comment="npm10-10.24.1-150000.1.47.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141048" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195163" ref_url="https://bugzilla.suse.com/1195163" source="BUGZILLA"/>
		<reference ref_id="1201684" ref_url="https://bugzilla.suse.com/1201684" source="BUGZILLA"/>
		<reference ref_id="1201692" ref_url="https://bugzilla.suse.com/1201692" source="BUGZILLA"/>
		<reference ref_id="1201694" ref_url="https://bugzilla.suse.com/1201694" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21540" ref_url="https://www.suse.com/security/cve/CVE-2022-21540/" source="CVE"/>
		<reference ref_id="CVE-2022-21541" ref_url="https://www.suse.com/security/cve/CVE-2022-21541/" source="CVE"/>
		<reference ref_id="CVE-2022-34169" ref_url="https://www.suse.com/security/cve/CVE-2022-34169/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2856-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011952.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

- Updated to version jdk8u345 (icedtea-3.24.0)
    - CVE-2022-21540: Fixed a potential Java sandbox bypass (bsc#1201694).
    - CVE-2022-21541: Fixed a potential Java sandbox bypass (bsc#1201692).
    - CVE-2022-34169: Fixed an issue where arbitrary bytecode could
      be executed via a malicious stylesheet (bsc#1201684).

- Non-security fixes:
    - Allowed for customization of PKCS12 keystores (bsc#1195163).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-19"/>
	<updated date="2022-08-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195163">SUSE bug 1195163</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201684">SUSE bug 1201684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201692">SUSE bug 1201692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201694">SUSE bug 1201694</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21540/">CVE-2022-21540</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21541/">CVE-2022-21541</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34169/">CVE-2022-34169</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009704729" comment="java-1_8_0-openjdk-1.8.0.345-150000.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704730" comment="java-1_8_0-openjdk-demo-1.8.0.345-150000.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704731" comment="java-1_8_0-openjdk-devel-1.8.0.345-150000.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009704732" comment="java-1_8_0-openjdk-headless-1.8.0.345-150000.3.70.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141049" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193227" ref_url="https://bugzilla.suse.com/1193227" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8922" ref_url="https://www.suse.com/security/cve/CVE-2019-8922/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2864-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011959.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2019-8922: Fixed a buffer overflow in the implementation of the
  Service Discovery Protocol (bsc#1193227).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-22"/>
	<updated date="2022-08-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193227">SUSE bug 1193227</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-8922/">CVE-2019-8922</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707146" comment="bluez-5.48-150000.5.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707147" comment="bluez-devel-5.48-150000.5.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707148" comment="libbluetooth3-5.48-150000.5.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141050" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179945" ref_url="https://bugzilla.suse.com/1179945" source="BUGZILLA"/>
		<reference ref_id="1183168" ref_url="https://bugzilla.suse.com/1183168" source="BUGZILLA"/>
		<reference ref_id="1185952" ref_url="https://bugzilla.suse.com/1185952" source="BUGZILLA"/>
		<reference ref_id="1187751" ref_url="https://bugzilla.suse.com/1187751" source="BUGZILLA"/>
		<reference ref_id="1190177" ref_url="https://bugzilla.suse.com/1190177" source="BUGZILLA"/>
		<reference ref_id="1190740" ref_url="https://bugzilla.suse.com/1190740" source="BUGZILLA"/>
		<reference ref_id="1192516" ref_url="https://bugzilla.suse.com/1192516" source="BUGZILLA"/>
		<reference ref_id="1195680" ref_url="https://bugzilla.suse.com/1195680" source="BUGZILLA"/>
		<reference ref_id="1199475" ref_url="https://bugzilla.suse.com/1199475" source="BUGZILLA"/>
		<reference ref_id="1202368" ref_url="https://bugzilla.suse.com/1202368" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23214" ref_url="https://www.suse.com/security/cve/CVE-2021-23214/" source="CVE"/>
		<reference ref_id="CVE-2021-23222" ref_url="https://www.suse.com/security/cve/CVE-2021-23222/" source="CVE"/>
		<reference ref_id="CVE-2022-1552" ref_url="https://www.suse.com/security/cve/CVE-2022-1552/" source="CVE"/>
		<reference ref_id="CVE-2022-2625" ref_url="https://www.suse.com/security/cve/CVE-2022-2625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2893-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/011992.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

- Upgrade to 10.22:
- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).

- Upgrade to 10.21:
- CVE-2022-1552: Confined additional operations within 'security restricted operation' sandboxes (bsc#1199475).

- Upgrade to 10.20 (bsc#1195680)
- Add constraints file with 12GB of memory for s390x as a workaround (boo#1190740)

- Upgrade to version 10.19 (bsc#1192516):
- CVE-2021-23214: Made the server reject extraneous data after an SSL or GSS encryption handshake
- CVE-2021-23222: Made libpq reject extraneous data after an SSL or GSS encryption handshake

- Fix for build with llvm12 on s390x. (bsc#1185952)
- Re-enable 'icu' for PostgreSQL 10. (bsc#1179945)
- Add postgresqlXX-server-devel as a dependency for postgresql13-server-devel. (bsc#1187751)
- Upgrade to version 10.18. (bsc#1190177)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-25"/>
	<updated date="2022-08-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179945">SUSE bug 1179945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183168">SUSE bug 1183168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185952">SUSE bug 1185952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187751">SUSE bug 1187751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190177">SUSE bug 1190177</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190740">SUSE bug 1190740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192516">SUSE bug 1192516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195680">SUSE bug 1195680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199475">SUSE bug 1199475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202368">SUSE bug 1202368</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23214/">CVE-2021-23214</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23222/">CVE-2021-23222</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1552/">CVE-2022-1552</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2625/">CVE-2022-2625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707103" comment="postgresql-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707104" comment="postgresql-contrib-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707105" comment="postgresql-devel-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707106" comment="postgresql-docs-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707107" comment="postgresql-plperl-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707108" comment="postgresql-plpython-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707109" comment="postgresql-pltcl-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707110" comment="postgresql-server-12.0.1-150000.8.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707111" comment="postgresql-server-devel-12.0.1-150000.8.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141051" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202368" ref_url="https://bugzilla.suse.com/1202368" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2625" ref_url="https://www.suse.com/security/cve/CVE-2022-2625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2946-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012011.html" source="SUSE-SU"/>
		<description>
This update for postgresql10 fixes the following issues:

- Upgrade to 10.22:
- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202368">SUSE bug 1202368</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2625/">CVE-2022-2625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706878" comment="postgresql10-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706879" comment="postgresql10-contrib-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706880" comment="postgresql10-devel-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706917" comment="postgresql10-docs-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706881" comment="postgresql10-plperl-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706882" comment="postgresql10-plpython-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706883" comment="postgresql10-pltcl-10.22-150100.8.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706884" comment="postgresql10-server-10.22-150100.8.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141052" version="1" class="patch">
	<metadata>
		<title>Security update for zlib (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202175" ref_url="https://bugzilla.suse.com/1202175" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-37434" ref_url="https://www.suse.com/security/cve/CVE-2022-37434/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012012.html" source="SUSE-SU"/>
		<description>
This update for zlib fixes the following issues:

- CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field (bsc#1202175).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202175">SUSE bug 1202175</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-37434/">CVE-2022-37434</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009706230" comment="libminizip1-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706231" comment="libz1-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706232" comment="libz1-32bit-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706233" comment="minizip-devel-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706234" comment="zlib-devel-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706240" comment="zlib-devel-32bit-1.2.11-150000.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706235" comment="zlib-devel-static-1.2.11-150000.3.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141053" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201684" ref_url="https://bugzilla.suse.com/1201684" source="BUGZILLA"/>
		<reference ref_id="1201685" ref_url="https://bugzilla.suse.com/1201685" source="BUGZILLA"/>
		<reference ref_id="1201692" ref_url="https://bugzilla.suse.com/1201692" source="BUGZILLA"/>
		<reference ref_id="1201694" ref_url="https://bugzilla.suse.com/1201694" source="BUGZILLA"/>
		<reference ref_id="1202427" ref_url="https://bugzilla.suse.com/1202427" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21540" ref_url="https://www.suse.com/security/cve/CVE-2022-21540/" source="CVE"/>
		<reference ref_id="CVE-2022-21541" ref_url="https://www.suse.com/security/cve/CVE-2022-21541/" source="CVE"/>
		<reference ref_id="CVE-2022-21549" ref_url="https://www.suse.com/security/cve/CVE-2022-21549/" source="CVE"/>
		<reference ref_id="CVE-2022-34169" ref_url="https://www.suse.com/security/cve/CVE-2022-34169/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2949-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012014.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

- Updated to Java 8.0 Service Refresh 7 Fix Pack 11 (bsc#1202427):
  - CVE-2022-34169: Fixed an integer truncation issue in the Xalan
    Java XSLT library that occurred when processing malicious
    stylesheets (bsc#1201684).
  - CVE-2022-21549: Fixed an issue that could lead to computing
    negative random exponentials (bsc#1201685).
  - CVE-2022-21541: Fixed a potential bypass of sandbox restrictions
    in the Hotspot component (bsc#1201692).
  - CVE-2022-21540: Fixed a potential bypass of sandbox restrictions
    in the Hotspot component (bsc#1201694).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201684">SUSE bug 1201684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201685">SUSE bug 1201685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201692">SUSE bug 1201692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201694">SUSE bug 1201694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202427">SUSE bug 1202427</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21540/">CVE-2022-21540</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21541/">CVE-2022-21541</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21549/">CVE-2022-21549</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34169/">CVE-2022-34169</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707070" comment="java-1_8_0-ibm-1.8.0_sr7.11-150000.3.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707071" comment="java-1_8_0-ibm-alsa-1.8.0_sr7.11-150000.3.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707072" comment="java-1_8_0-ibm-devel-1.8.0_sr7.11-150000.3.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707073" comment="java-1_8_0-ibm-plugin-1.8.0_sr7.11-150000.3.62.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141054" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1179945" ref_url="https://bugzilla.suse.com/1179945" source="BUGZILLA"/>
		<reference ref_id="1183168" ref_url="https://bugzilla.suse.com/1183168" source="BUGZILLA"/>
		<reference ref_id="1185924" ref_url="https://bugzilla.suse.com/1185924" source="BUGZILLA"/>
		<reference ref_id="1185925" ref_url="https://bugzilla.suse.com/1185925" source="BUGZILLA"/>
		<reference ref_id="1185926" ref_url="https://bugzilla.suse.com/1185926" source="BUGZILLA"/>
		<reference ref_id="1185952" ref_url="https://bugzilla.suse.com/1185952" source="BUGZILLA"/>
		<reference ref_id="1187751" ref_url="https://bugzilla.suse.com/1187751" source="BUGZILLA"/>
		<reference ref_id="1189748" ref_url="https://bugzilla.suse.com/1189748" source="BUGZILLA"/>
		<reference ref_id="1190740" ref_url="https://bugzilla.suse.com/1190740" source="BUGZILLA"/>
		<reference ref_id="1192516" ref_url="https://bugzilla.suse.com/1192516" source="BUGZILLA"/>
		<reference ref_id="1195680" ref_url="https://bugzilla.suse.com/1195680" source="BUGZILLA"/>
		<reference ref_id="1198166" ref_url="https://bugzilla.suse.com/1198166" source="BUGZILLA"/>
		<reference ref_id="1199475" ref_url="https://bugzilla.suse.com/1199475" source="BUGZILLA"/>
		<reference ref_id="1202368" ref_url="https://bugzilla.suse.com/1202368" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23214" ref_url="https://www.suse.com/security/cve/CVE-2021-23214/" source="CVE"/>
		<reference ref_id="CVE-2021-23222" ref_url="https://www.suse.com/security/cve/CVE-2021-23222/" source="CVE"/>
		<reference ref_id="CVE-2021-32027" ref_url="https://www.suse.com/security/cve/CVE-2021-32027/" source="CVE"/>
		<reference ref_id="CVE-2021-32028" ref_url="https://www.suse.com/security/cve/CVE-2021-32028/" source="CVE"/>
		<reference ref_id="CVE-2021-32029" ref_url="https://www.suse.com/security/cve/CVE-2021-32029/" source="CVE"/>
		<reference ref_id="CVE-2021-3677" ref_url="https://www.suse.com/security/cve/CVE-2021-3677/" source="CVE"/>
		<reference ref_id="CVE-2022-1552" ref_url="https://www.suse.com/security/cve/CVE-2022-1552/" source="CVE"/>
		<reference ref_id="CVE-2022-2625" ref_url="https://www.suse.com/security/cve/CVE-2022-2625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2958-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012016.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

- Upgrade to 12.12:
- CVE-2022-2625: Fixed an issue where extension scripts would replace objects not belonging to that extension (bsc#1202368).

- Upgrade to 12.11:
- CVE-2022-1552: Confined additional operations within 'security restricted operation' sandboxes (bsc#1199475).

- Upgrade to 12.10 (bsc#1195680)
- Add constraints file with 12GB of memory for s390x as a workaround (boo#1190740)

- Upgrade to version 12.9 (bsc#1192516):
- CVE-2021-23214: Made the server reject extraneous data after an SSL or GSS encryption handshake
- CVE-2021-23222: Made libpq reject extraneous data after an SSL or GSS encryption handshake
    
- Upgrade to version 12.8:
- CVE-2021-3677: Fixed memory disclosure in certain queries (bsc#1189748).

- Upgrade to version 12.7:
- CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924).
- CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925).
- CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING 'pg_psql_temporary_savepoint' does not exist (bsc#1185926).

- Fixed build with llvm12 on s390x (bsc#1185952).
- Re-enabled icu for PostgreSQL 10 (bsc#1179945).
- Made the dependency of postgresqlXX-server-devel on llvm and clang optional (bsc#1187751).
- llvm12 breaks PostgreSQL 11 and 12 on s390x. Use llvm11 as a workaround (bsc#1185952).
- Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1179945">SUSE bug 1179945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183168">SUSE bug 1183168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185924">SUSE bug 1185924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185925">SUSE bug 1185925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185926">SUSE bug 1185926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185952">SUSE bug 1185952</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187751">SUSE bug 1187751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189748">SUSE bug 1189748</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190740">SUSE bug 1190740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192516">SUSE bug 1192516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195680">SUSE bug 1195680</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198166">SUSE bug 1198166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199475">SUSE bug 1199475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202368">SUSE bug 1202368</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-23214/">CVE-2021-23214</cve>
	<cve impact="important" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-23222/">CVE-2021-23222</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32027/">CVE-2021-32027</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-32028/">CVE-2021-32028</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-32029/">CVE-2021-32029</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3677/">CVE-2021-3677</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-1552/">CVE-2022-1552</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2625/">CVE-2022-2625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708253" comment="libecpg6-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708254" comment="libpq5-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707117" comment="libpq5-32bit-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708255" comment="postgresql12-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708256" comment="postgresql12-contrib-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708257" comment="postgresql12-devel-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707121" comment="postgresql12-docs-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708258" comment="postgresql12-plperl-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708259" comment="postgresql12-plpython-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708260" comment="postgresql12-pltcl-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708261" comment="postgresql12-server-12.12-150100.3.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708262" comment="postgresql12-server-devel-12.12-150100.3.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141055" version="1" class="patch">
	<metadata>
		<title>Security update for rsync (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201840" ref_url="https://bugzilla.suse.com/1201840" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-29154" ref_url="https://www.suse.com/security/cve/CVE-2022-29154/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2959-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-August/012015.html" source="SUSE-SU"/>
		<description>
This update for rsync fixes the following issues:

- CVE-2022-29154: Fixed an arbitrary file write issue that could be
  triggered by a malicious remote server (bsc#1201840).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-08-31"/>
	<updated date="2022-08-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201840">SUSE bug 1201840</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29154/">CVE-2022-29154</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009706877" comment="rsync-3.1.3-150000.4.13.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141056" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202645" ref_url="https://bugzilla.suse.com/1202645" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-38472" ref_url="https://www.suse.com/security/cve/CVE-2022-38472/" source="CVE"/>
		<reference ref_id="CVE-2022-38473" ref_url="https://www.suse.com/security/cve/CVE-2022-38473/" source="CVE"/>
		<reference ref_id="CVE-2022-38478" ref_url="https://www.suse.com/security/cve/CVE-2022-38478/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2984-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012051.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.13.0 ESR (bsc#1202645):

- CVE-2022-38472: Fixed a potential address bar spoofing via XSLT error handling.
- CVE-2022-38473: Fixed an issue where cross-origin XSLT documents could inherit the parent's permissions.
- CVE-2022-38478: Fixed various memory safety issues.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202645">SUSE bug 1202645</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38472/">CVE-2022-38472</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38473/">CVE-2022-38473</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38478/">CVE-2022-38478</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707795" comment="MozillaFirefox-91.13.0-150000.150.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707796" comment="MozillaFirefox-devel-91.13.0-150000.150.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707797" comment="MozillaFirefox-translations-common-91.13.0-150000.150.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707798" comment="MozillaFirefox-translations-other-91.13.0-150000.150.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141057" version="1" class="patch">
	<metadata>
		<title>Security update for open-vm-tools (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202657" ref_url="https://bugzilla.suse.com/1202657" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31676" ref_url="https://www.suse.com/security/cve/CVE-2022-31676/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2986-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012049.html" source="SUSE-SU"/>
		<description>
This update for open-vm-tools fixes the following issues:

- CVE-2022-31676: Fixed an issue that could allow unprivileged users
  inside a virtual machine to escalate privileges (bsc#1202657).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202657">SUSE bug 1202657</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31676/">CVE-2022-31676</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707877" comment="libvmtools-devel-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707878" comment="libvmtools0-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707879" comment="open-vm-tools-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707880" comment="open-vm-tools-desktop-11.3.5-150100.4.37.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707881" comment="open-vm-tools-sdmp-11.3.5-150100.4.37.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141058" version="1" class="patch">
	<metadata>
		<title>Security update for flatpak (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1155688" ref_url="https://bugzilla.suse.com/1155688" source="BUGZILLA"/>
		<reference ref_id="1180996" ref_url="https://bugzilla.suse.com/1180996" source="BUGZILLA"/>
		<reference ref_id="1183459" ref_url="https://bugzilla.suse.com/1183459" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21261" ref_url="https://www.suse.com/security/cve/CVE-2021-21261/" source="CVE"/>
		<reference ref_id="CVE-2021-21381" ref_url="https://www.suse.com/security/cve/CVE-2021-21381/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2990-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012061.html" source="SUSE-SU"/>
		<description>
This update for flatpak fixes the following issues:

- CVE-2021-21381: Fixed an issue where a sandboxed application could
  read and write arbitrary host files via special tokens in the
  .desktop file (bsc#1183459).
- CVE-2021-21261: Fixed a sandbox escape issue via the flatpak-portal
  service (bsc#1180996).

Non-security fixes:

- openh264 extension needs to use 'extra_data'. (bsc#1155688)
  The update will provide the support for extra_data' in extensions
  and will provide a list of versions that are supported. This will
  be useful for the extra_data for extensions because that will require
  it to say that it is supported for version &gt; 1.2.5 in the 1.2 series 
  and &gt; 1.4.2 otherwise.
  The update  will includes fixes for a segfault in the function that 
  lists the installed references (flatpak_installation_list_installed_refs).
  When an appstream update is cancelled while downloading icons, the update
  will show a proper fail. Before this fix the next update attempt will see
  an up-to-date timestamp, think everyhing is ok and not download the missing icons.
  The update will introduce checks in the OCI (Open Container Initiative format)
  updates for validating if it is gpg verified.
  The update will install the required runtime for the installed extension.
  The update will prevent a crash if the 'FlatpakDir' can't ensure it has a repo configured.
  The update will prevent the removal of local extensions considered remote and not locally related.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1155688">SUSE bug 1155688</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180996">SUSE bug 1180996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183459">SUSE bug 1183459</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21261/">CVE-2021-21261</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-21381/">CVE-2021-21381</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709398" comment="flatpak-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709399" comment="flatpak-devel-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709400" comment="flatpak-zsh-completion-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709401" comment="libflatpak0-1.2.3-150100.4.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709402" comment="typelib-1_0-Flatpak-1_0-1.2.3-150100.4.5.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141059" version="1" class="patch">
	<metadata>
		<title>Security update for libtirpc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198752" ref_url="https://bugzilla.suse.com/1198752" source="BUGZILLA"/>
		<reference ref_id="1200800" ref_url="https://bugzilla.suse.com/1200800" source="BUGZILLA"/>
		<reference ref_id="1201680" ref_url="https://bugzilla.suse.com/1201680" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46828" ref_url="https://www.suse.com/security/cve/CVE-2021-46828/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2991-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012060.html" source="SUSE-SU"/>
		<description>
This update for libtirpc fixes the following issues:

- CVE-2021-46828: Fixed an uncontrolled file descriptor consumption,
  which could be exploited by remote attackers to prevent applications
  using the library from accepting new connections (bsc#1201680).

Non-security fixes:

- Exclude ipv6 addresses in client protocol version 2 code (bsc#1200800)
- Fix memory leak in params.r_addr assignement (bsc#1198752)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-01"/>
	<updated date="2022-09-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198752">SUSE bug 1198752</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200800">SUSE bug 1200800</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201680">SUSE bug 1201680</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46828/">CVE-2021-46828</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707727" comment="libtirpc-devel-1.0.2-150000.3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707728" comment="libtirpc-netconfig-1.0.2-150000.3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707729" comment="libtirpc3-1.0.2-150000.3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707725" comment="libtirpc3-32bit-1.0.2-150000.3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141060" version="1" class="patch">
	<metadata>
		<title>Security update for python-pyxdg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1137627" ref_url="https://bugzilla.suse.com/1137627" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-12761" ref_url="https://www.suse.com/security/cve/CVE-2019-12761/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:2997-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012064.html" source="SUSE-SU"/>
		<description>
This update for python-pyxdg fixes the following issues:

- CVE-2019-12761: Fixed a code injection issue in Category elements of
  a Menu XML (bsc#1137627).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-02"/>
	<updated date="2022-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1137627">SUSE bug 1137627</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2019-12761/">CVE-2019-12761</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708033" comment="python2-pyxdg-0.25-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708041" comment="python3-pyxdg-0.25-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141061" version="1" class="patch">
	<metadata>
		<title>Security update for python-bottle (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200286" ref_url="https://bugzilla.suse.com/1200286" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31799" ref_url="https://www.suse.com/security/cve/CVE-2022-31799/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3103-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012109.html" source="SUSE-SU"/>
		<description>
This update for python-bottle fixes the following issues:

- CVE-2022-31799: Fixed an error mishandling issue that could lead to
  remote denial of service (bsc#1200286).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-06"/>
	<updated date="2022-09-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200286">SUSE bug 1200286</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-31799/">CVE-2022-31799</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707087" comment="python2-bottle-0.12.13-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707069" comment="python3-bottle-0.12.13-150000.3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141062" version="1" class="patch">
	<metadata>
		<title>Security update for gpg2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201225" ref_url="https://bugzilla.suse.com/1201225" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-34903" ref_url="https://www.suse.com/security/cve/CVE-2022-34903/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3144-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012160.html" source="SUSE-SU"/>
		<description>
This update for gpg2 fixes the following issues:

- CVE-2022-34903: Fixed a potential signature forgery via injection
  into the status line when certain unusual conditions are met (bsc#1201225).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-07"/>
	<updated date="2022-09-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201225">SUSE bug 1201225</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34903/">CVE-2022-34903</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009707799" comment="gpg2-2.2.5-150000.4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009707794" comment="gpg2-lang-2.2.5-150000.4.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141063" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200270" ref_url="https://bugzilla.suse.com/1200270" source="BUGZILLA"/>
		<reference ref_id="1200697" ref_url="https://bugzilla.suse.com/1200697" source="BUGZILLA"/>
		<reference ref_id="1200698" ref_url="https://bugzilla.suse.com/1200698" source="BUGZILLA"/>
		<reference ref_id="1200700" ref_url="https://bugzilla.suse.com/1200700" source="BUGZILLA"/>
		<reference ref_id="1200701" ref_url="https://bugzilla.suse.com/1200701" source="BUGZILLA"/>
		<reference ref_id="1200732" ref_url="https://bugzilla.suse.com/1200732" source="BUGZILLA"/>
		<reference ref_id="1200884" ref_url="https://bugzilla.suse.com/1200884" source="BUGZILLA"/>
		<reference ref_id="1200902" ref_url="https://bugzilla.suse.com/1200902" source="BUGZILLA"/>
		<reference ref_id="1200903" ref_url="https://bugzilla.suse.com/1200903" source="BUGZILLA"/>
		<reference ref_id="1200904" ref_url="https://bugzilla.suse.com/1200904" source="BUGZILLA"/>
		<reference ref_id="1201132" ref_url="https://bugzilla.suse.com/1201132" source="BUGZILLA"/>
		<reference ref_id="1201133" ref_url="https://bugzilla.suse.com/1201133" source="BUGZILLA"/>
		<reference ref_id="1201134" ref_url="https://bugzilla.suse.com/1201134" source="BUGZILLA"/>
		<reference ref_id="1201135" ref_url="https://bugzilla.suse.com/1201135" source="BUGZILLA"/>
		<reference ref_id="1201136" ref_url="https://bugzilla.suse.com/1201136" source="BUGZILLA"/>
		<reference ref_id="1201150" ref_url="https://bugzilla.suse.com/1201150" source="BUGZILLA"/>
		<reference ref_id="1201151" ref_url="https://bugzilla.suse.com/1201151" source="BUGZILLA"/>
		<reference ref_id="1201152" ref_url="https://bugzilla.suse.com/1201152" source="BUGZILLA"/>
		<reference ref_id="1201153" ref_url="https://bugzilla.suse.com/1201153" source="BUGZILLA"/>
		<reference ref_id="1201154" ref_url="https://bugzilla.suse.com/1201154" source="BUGZILLA"/>
		<reference ref_id="1201155" ref_url="https://bugzilla.suse.com/1201155" source="BUGZILLA"/>
		<reference ref_id="1201249" ref_url="https://bugzilla.suse.com/1201249" source="BUGZILLA"/>
		<reference ref_id="1201356" ref_url="https://bugzilla.suse.com/1201356" source="BUGZILLA"/>
		<reference ref_id="1201359" ref_url="https://bugzilla.suse.com/1201359" source="BUGZILLA"/>
		<reference ref_id="1201363" ref_url="https://bugzilla.suse.com/1201363" source="BUGZILLA"/>
		<reference ref_id="1201620" ref_url="https://bugzilla.suse.com/1201620" source="BUGZILLA"/>
		<reference ref_id="1201863" ref_url="https://bugzilla.suse.com/1201863" source="BUGZILLA"/>
		<reference ref_id="1202046" ref_url="https://bugzilla.suse.com/1202046" source="BUGZILLA"/>
		<reference ref_id="1202049" ref_url="https://bugzilla.suse.com/1202049" source="BUGZILLA"/>
		<reference ref_id="1202050" ref_url="https://bugzilla.suse.com/1202050" source="BUGZILLA"/>
		<reference ref_id="1202051" ref_url="https://bugzilla.suse.com/1202051" source="BUGZILLA"/>
		<reference ref_id="1202414" ref_url="https://bugzilla.suse.com/1202414" source="BUGZILLA"/>
		<reference ref_id="1202420" ref_url="https://bugzilla.suse.com/1202420" source="BUGZILLA"/>
		<reference ref_id="1202421" ref_url="https://bugzilla.suse.com/1202421" source="BUGZILLA"/>
		<reference ref_id="1202511" ref_url="https://bugzilla.suse.com/1202511" source="BUGZILLA"/>
		<reference ref_id="1202512" ref_url="https://bugzilla.suse.com/1202512" source="BUGZILLA"/>
		<reference ref_id="1202515" ref_url="https://bugzilla.suse.com/1202515" source="BUGZILLA"/>
		<reference ref_id="1202552" ref_url="https://bugzilla.suse.com/1202552" source="BUGZILLA"/>
		<reference ref_id="1202599" ref_url="https://bugzilla.suse.com/1202599" source="BUGZILLA"/>
		<reference ref_id="1202687" ref_url="https://bugzilla.suse.com/1202687" source="BUGZILLA"/>
		<reference ref_id="1202689" ref_url="https://bugzilla.suse.com/1202689" source="BUGZILLA"/>
		<reference ref_id="1202862" ref_url="https://bugzilla.suse.com/1202862" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1720" ref_url="https://www.suse.com/security/cve/CVE-2022-1720/" source="CVE"/>
		<reference ref_id="CVE-2022-1968" ref_url="https://www.suse.com/security/cve/CVE-2022-1968/" source="CVE"/>
		<reference ref_id="CVE-2022-2124" ref_url="https://www.suse.com/security/cve/CVE-2022-2124/" source="CVE"/>
		<reference ref_id="CVE-2022-2125" ref_url="https://www.suse.com/security/cve/CVE-2022-2125/" source="CVE"/>
		<reference ref_id="CVE-2022-2126" ref_url="https://www.suse.com/security/cve/CVE-2022-2126/" source="CVE"/>
		<reference ref_id="CVE-2022-2129" ref_url="https://www.suse.com/security/cve/CVE-2022-2129/" source="CVE"/>
		<reference ref_id="CVE-2022-2175" ref_url="https://www.suse.com/security/cve/CVE-2022-2175/" source="CVE"/>
		<reference ref_id="CVE-2022-2182" ref_url="https://www.suse.com/security/cve/CVE-2022-2182/" source="CVE"/>
		<reference ref_id="CVE-2022-2183" ref_url="https://www.suse.com/security/cve/CVE-2022-2183/" source="CVE"/>
		<reference ref_id="CVE-2022-2206" ref_url="https://www.suse.com/security/cve/CVE-2022-2206/" source="CVE"/>
		<reference ref_id="CVE-2022-2207" ref_url="https://www.suse.com/security/cve/CVE-2022-2207/" source="CVE"/>
		<reference ref_id="CVE-2022-2208" ref_url="https://www.suse.com/security/cve/CVE-2022-2208/" source="CVE"/>
		<reference ref_id="CVE-2022-2210" ref_url="https://www.suse.com/security/cve/CVE-2022-2210/" source="CVE"/>
		<reference ref_id="CVE-2022-2231" ref_url="https://www.suse.com/security/cve/CVE-2022-2231/" source="CVE"/>
		<reference ref_id="CVE-2022-2257" ref_url="https://www.suse.com/security/cve/CVE-2022-2257/" source="CVE"/>
		<reference ref_id="CVE-2022-2264" ref_url="https://www.suse.com/security/cve/CVE-2022-2264/" source="CVE"/>
		<reference ref_id="CVE-2022-2284" ref_url="https://www.suse.com/security/cve/CVE-2022-2284/" source="CVE"/>
		<reference ref_id="CVE-2022-2285" ref_url="https://www.suse.com/security/cve/CVE-2022-2285/" source="CVE"/>
		<reference ref_id="CVE-2022-2286" ref_url="https://www.suse.com/security/cve/CVE-2022-2286/" source="CVE"/>
		<reference ref_id="CVE-2022-2287" ref_url="https://www.suse.com/security/cve/CVE-2022-2287/" source="CVE"/>
		<reference ref_id="CVE-2022-2304" ref_url="https://www.suse.com/security/cve/CVE-2022-2304/" source="CVE"/>
		<reference ref_id="CVE-2022-2343" ref_url="https://www.suse.com/security/cve/CVE-2022-2343/" source="CVE"/>
		<reference ref_id="CVE-2022-2344" ref_url="https://www.suse.com/security/cve/CVE-2022-2344/" source="CVE"/>
		<reference ref_id="CVE-2022-2345" ref_url="https://www.suse.com/security/cve/CVE-2022-2345/" source="CVE"/>
		<reference ref_id="CVE-2022-2522" ref_url="https://www.suse.com/security/cve/CVE-2022-2522/" source="CVE"/>
		<reference ref_id="CVE-2022-2571" ref_url="https://www.suse.com/security/cve/CVE-2022-2571/" source="CVE"/>
		<reference ref_id="CVE-2022-2580" ref_url="https://www.suse.com/security/cve/CVE-2022-2580/" source="CVE"/>
		<reference ref_id="CVE-2022-2581" ref_url="https://www.suse.com/security/cve/CVE-2022-2581/" source="CVE"/>
		<reference ref_id="CVE-2022-2598" ref_url="https://www.suse.com/security/cve/CVE-2022-2598/" source="CVE"/>
		<reference ref_id="CVE-2022-2816" ref_url="https://www.suse.com/security/cve/CVE-2022-2816/" source="CVE"/>
		<reference ref_id="CVE-2022-2817" ref_url="https://www.suse.com/security/cve/CVE-2022-2817/" source="CVE"/>
		<reference ref_id="CVE-2022-2819" ref_url="https://www.suse.com/security/cve/CVE-2022-2819/" source="CVE"/>
		<reference ref_id="CVE-2022-2845" ref_url="https://www.suse.com/security/cve/CVE-2022-2845/" source="CVE"/>
		<reference ref_id="CVE-2022-2849" ref_url="https://www.suse.com/security/cve/CVE-2022-2849/" source="CVE"/>
		<reference ref_id="CVE-2022-2862" ref_url="https://www.suse.com/security/cve/CVE-2022-2862/" source="CVE"/>
		<reference ref_id="CVE-2022-2874" ref_url="https://www.suse.com/security/cve/CVE-2022-2874/" source="CVE"/>
		<reference ref_id="CVE-2022-2889" ref_url="https://www.suse.com/security/cve/CVE-2022-2889/" source="CVE"/>
		<reference ref_id="CVE-2022-2923" ref_url="https://www.suse.com/security/cve/CVE-2022-2923/" source="CVE"/>
		<reference ref_id="CVE-2022-2946" ref_url="https://www.suse.com/security/cve/CVE-2022-2946/" source="CVE"/>
		<reference ref_id="CVE-2022-3016" ref_url="https://www.suse.com/security/cve/CVE-2022-3016/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3229-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012199.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

Updated to version 9.0 with patch level 0313:

- CVE-2022-2183: Fixed out-of-bounds read through get_lisp_indent() (bsc#1200902).
- CVE-2022-2182: Fixed heap-based buffer overflow through parse_cmd_address() (bsc#1200903).
- CVE-2022-2175: Fixed buffer over-read through cmdline_insert_reg() (bsc#1200904).
- CVE-2022-2304: Fixed stack buffer overflow in spell_dump_compl() (bsc#1201249).
- CVE-2022-2343: Fixed heap-based buffer overflow in GitHub repository vim prior to 9.0.0044 (bsc#1201356).
- CVE-2022-2344: Fixed another heap-based buffer overflow vim prior to 9.0.0045 (bsc#1201359).
- CVE-2022-2345: Fixed use after free in GitHub repository vim prior to 9.0.0046. (bsc#1201363).
- CVE-2022-2819: Fixed heap-based Buffer Overflow in compile_lock_unlock() (bsc#1202414).
- CVE-2022-2874: Fixed NULL Pointer Dereference in generate_loadvar() (bsc#1202552).
- CVE-2022-1968: Fixed use after free in utf_ptr2char (bsc#1200270).
- CVE-2022-2124: Fixed out of bounds read in current_quote() (bsc#1200697).
- CVE-2022-2125: Fixed out of bounds read in get_lisp_indent() (bsc#1200698).
- CVE-2022-2126: Fixed out of bounds read in suggest_trie_walk() (bsc#1200700).
- CVE-2022-2129: Fixed out of bounds write in vim_regsub_both() (bsc#1200701).
- CVE-2022-1720: Fixed out of bounds read in grab_file_name() (bsc#1200732).
- CVE-2022-2264: Fixed out of bounds read in inc() (bsc#1201132).
- CVE-2022-2284: Fixed out of bounds read in utfc_ptr2len() (bsc#1201133).
- CVE-2022-2285: Fixed negative size passed to memmove() due to integer overflow (bsc#1201134).
- CVE-2022-2286: Fixed out of bounds read in ins_bytes() (bsc#1201135).
- CVE-2022-2287: Fixed out of bounds read in suggest_trie_walk() (bsc#1201136).
- CVE-2022-2231: Fixed null pointer dereference skipwhite() (bsc#1201150).
- CVE-2022-2210: Fixed out of bounds read in ml_append_int() (bsc#1201151).
- CVE-2022-2208: Fixed null pointer dereference in diff_check() (bsc#1201152).
- CVE-2022-2207: Fixed out of bounds read in ins_bs() (bsc#1201153).
- CVE-2022-2257: Fixed out of bounds read in msg_outtrans_special() (bsc#1201154).
- CVE-2022-2206: Fixed out of bounds read in msg_outtrans_attr() (bsc#1201155).
- CVE-2022-2522: Fixed out of bounds read via nested autocommand (bsc#1201863).
- CVE-2022-2571: Fixed heap-based buffer overflow related to ins_comp_get_next_word_or_line() (bsc#1202046).
- CVE-2022-2580: Fixed heap-based buffer overflow related to eval_string() (bsc#1202049).
- CVE-2022-2581: Fixed out-of-bounds read related to cstrchr() (bsc#1202050).
- CVE-2022-2598: Fixed undefined behavior for Input to API related to diff_mark_adjust_tp() and ex_diffgetput() (bsc#1202051).
- CVE-2022-2817: Fixed use after gree in f_assert_fails() (bsc#1202420).
- CVE-2022-2816: Fixed out-of-bounds Read in check_vim9_unlet() (bsc#1202421).
- CVE-2022-2862: Fixed use-after-free in compile_nested_function() (bsc#1202511).
- CVE-2022-2849: Fixed invalid memory access related to mb_ptr2len() (bsc#1202512).
- CVE-2022-2845: Fixed buffer Over-read related to display_dollar() (bsc#1202515).
- CVE-2022-2889: Fixed use-after-free in find_var_also_in_script() in evalvars.c (bsc#1202599).
- CVE-2022-2923: Fixed NULL pointer dereference in GitHub repository vim/vim prior to 9.0.0240 (bsc#1202687).
- CVE-2022-2946: Fixed use after free in function vim_vsnprintf_typval (bsc#1202689).
- CVE-2022-3016: Fixed use after free in vim prior to 9.0.0285 (bsc#1202862).
  
Bugfixes:

- Fixing vim error on startup (bsc#1200884).
- Fixing vim SUSE Linux Enterprise Server 15 SP4 Basesystem plugin-tlib issue (bsc#1201620).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-09"/>
	<updated date="2022-09-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200270">SUSE bug 1200270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200697">SUSE bug 1200697</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200698">SUSE bug 1200698</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200700">SUSE bug 1200700</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200701">SUSE bug 1200701</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200732">SUSE bug 1200732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200884">SUSE bug 1200884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200902">SUSE bug 1200902</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200903">SUSE bug 1200903</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200904">SUSE bug 1200904</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201132">SUSE bug 1201132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201133">SUSE bug 1201133</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201134">SUSE bug 1201134</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201135">SUSE bug 1201135</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201136">SUSE bug 1201136</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201150">SUSE bug 1201150</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201151">SUSE bug 1201151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201152">SUSE bug 1201152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201153">SUSE bug 1201153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201154">SUSE bug 1201154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201155">SUSE bug 1201155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201249">SUSE bug 1201249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201356">SUSE bug 1201356</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201359">SUSE bug 1201359</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201363">SUSE bug 1201363</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201620">SUSE bug 1201620</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201863">SUSE bug 1201863</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202046">SUSE bug 1202046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202049">SUSE bug 1202049</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202050">SUSE bug 1202050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202051">SUSE bug 1202051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202414">SUSE bug 1202414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202420">SUSE bug 1202420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202421">SUSE bug 1202421</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202511">SUSE bug 1202511</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202512">SUSE bug 1202512</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202515">SUSE bug 1202515</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202552">SUSE bug 1202552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202599">SUSE bug 1202599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202687">SUSE bug 1202687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202689">SUSE bug 1202689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202862">SUSE bug 1202862</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-1720/">CVE-2022-1720</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-1968/">CVE-2022-1968</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2124/">CVE-2022-2124</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2125/">CVE-2022-2125</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2126/">CVE-2022-2126</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2129/">CVE-2022-2129</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2175/">CVE-2022-2175</cve>
	<cve impact="moderate" cvss3="3.9/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2182/">CVE-2022-2182</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2183/">CVE-2022-2183</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2206/">CVE-2022-2206</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2207/">CVE-2022-2207</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2208/">CVE-2022-2208</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2210/">CVE-2022-2210</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2231/">CVE-2022-2231</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2257/">CVE-2022-2257</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2264/">CVE-2022-2264</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2284/">CVE-2022-2284</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2285/">CVE-2022-2285</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2286/">CVE-2022-2286</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2287/">CVE-2022-2287</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2304/">CVE-2022-2304</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2343/">CVE-2022-2343</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2344/">CVE-2022-2344</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2345/">CVE-2022-2345</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2522/">CVE-2022-2522</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2571/">CVE-2022-2571</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2580/">CVE-2022-2580</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-2581/">CVE-2022-2581</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2598/">CVE-2022-2598</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2816/">CVE-2022-2816</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2817/">CVE-2022-2817</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2819/">CVE-2022-2819</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2845/">CVE-2022-2845</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2849/">CVE-2022-2849</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2862/">CVE-2022-2862</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2874/">CVE-2022-2874</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2889/">CVE-2022-2889</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2923/">CVE-2022-2923</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-2946/">CVE-2022-2946</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3016/">CVE-2022-3016</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709692" comment="gvim-9.0.0313-150000.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709661" comment="vim-9.0.0313-150000.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709662" comment="vim-data-9.0.0313-150000.5.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709663" comment="vim-data-common-9.0.0313-150000.5.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141064" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202986" ref_url="https://bugzilla.suse.com/1202986" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:3249-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012211.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

clamav was updated to 0.103.7 (bsc#1202986)

* Upgrade the vendored UnRAR library to version 6.1.7.
* Fix logical signature 'Intermediates' feature.
* Relax constraints on slightly malformed zip archives that
  contain overlapping file entries.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-12"/>
	<updated date="2022-09-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202986">SUSE bug 1202986</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009709490" comment="clamav-0.103.7-150000.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709491" comment="clamav-devel-0.103.7-150000.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709492" comment="libclamav9-0.103.7-150000.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009709493" comment="libfreshclam2-0.103.7-150000.3.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141065" version="1" class="patch">
	<metadata>
		<title>Security update for freetype2 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198823" ref_url="https://bugzilla.suse.com/1198823" source="BUGZILLA"/>
		<reference ref_id="1198830" ref_url="https://bugzilla.suse.com/1198830" source="BUGZILLA"/>
		<reference ref_id="1198832" ref_url="https://bugzilla.suse.com/1198832" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-27404" ref_url="https://www.suse.com/security/cve/CVE-2022-27404/" source="CVE"/>
		<reference ref_id="CVE-2022-27405" ref_url="https://www.suse.com/security/cve/CVE-2022-27405/" source="CVE"/>
		<reference ref_id="CVE-2022-27406" ref_url="https://www.suse.com/security/cve/CVE-2022-27406/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3252-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012330.html" source="SUSE-SU"/>
		<description>
This update for freetype2 fixes the following issues:

- CVE-2022-27404 Fixed a segmentation fault via a crafted typeface (bsc#1198830).
- CVE-2022-27405 Fixed a buffer overflow via a crafted typeface (bsc#1198832).
- CVE-2022-27406 Fixed a segmentation fault via a crafted typeface (bsc#1198823).

Non-security fixes:

- Updated to version 2.10.4
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-22"/>
	<updated date="2022-09-22"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1198823">SUSE bug 1198823</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198830">SUSE bug 1198830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198832">SUSE bug 1198832</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-27404/">CVE-2022-27404</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27405/">CVE-2022-27405</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27406/">CVE-2022-27406</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708192" comment="freetype2-devel-2.10.4-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708193" comment="libfreetype6-2.10.4-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708194" comment="libfreetype6-32bit-2.10.4-150000.4.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141066" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200793" ref_url="https://bugzilla.suse.com/1200793" source="BUGZILLA"/>
		<reference ref_id="1201758" ref_url="https://bugzilla.suse.com/1201758" source="BUGZILLA"/>
		<reference ref_id="1202645" ref_url="https://bugzilla.suse.com/1202645" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2200" ref_url="https://www.suse.com/security/cve/CVE-2022-2200/" source="CVE"/>
		<reference ref_id="CVE-2022-2505" ref_url="https://www.suse.com/security/cve/CVE-2022-2505/" source="CVE"/>
		<reference ref_id="CVE-2022-34468" ref_url="https://www.suse.com/security/cve/CVE-2022-34468/" source="CVE"/>
		<reference ref_id="CVE-2022-34469" ref_url="https://www.suse.com/security/cve/CVE-2022-34469/" source="CVE"/>
		<reference ref_id="CVE-2022-34470" ref_url="https://www.suse.com/security/cve/CVE-2022-34470/" source="CVE"/>
		<reference ref_id="CVE-2022-34471" ref_url="https://www.suse.com/security/cve/CVE-2022-34471/" source="CVE"/>
		<reference ref_id="CVE-2022-34472" ref_url="https://www.suse.com/security/cve/CVE-2022-34472/" source="CVE"/>
		<reference ref_id="CVE-2022-34473" ref_url="https://www.suse.com/security/cve/CVE-2022-34473/" source="CVE"/>
		<reference ref_id="CVE-2022-34474" ref_url="https://www.suse.com/security/cve/CVE-2022-34474/" source="CVE"/>
		<reference ref_id="CVE-2022-34475" ref_url="https://www.suse.com/security/cve/CVE-2022-34475/" source="CVE"/>
		<reference ref_id="CVE-2022-34476" ref_url="https://www.suse.com/security/cve/CVE-2022-34476/" source="CVE"/>
		<reference ref_id="CVE-2022-34477" ref_url="https://www.suse.com/security/cve/CVE-2022-34477/" source="CVE"/>
		<reference ref_id="CVE-2022-34478" ref_url="https://www.suse.com/security/cve/CVE-2022-34478/" source="CVE"/>
		<reference ref_id="CVE-2022-34479" ref_url="https://www.suse.com/security/cve/CVE-2022-34479/" source="CVE"/>
		<reference ref_id="CVE-2022-34480" ref_url="https://www.suse.com/security/cve/CVE-2022-34480/" source="CVE"/>
		<reference ref_id="CVE-2022-34481" ref_url="https://www.suse.com/security/cve/CVE-2022-34481/" source="CVE"/>
		<reference ref_id="CVE-2022-34482" ref_url="https://www.suse.com/security/cve/CVE-2022-34482/" source="CVE"/>
		<reference ref_id="CVE-2022-34483" ref_url="https://www.suse.com/security/cve/CVE-2022-34483/" source="CVE"/>
		<reference ref_id="CVE-2022-34484" ref_url="https://www.suse.com/security/cve/CVE-2022-34484/" source="CVE"/>
		<reference ref_id="CVE-2022-34485" ref_url="https://www.suse.com/security/cve/CVE-2022-34485/" source="CVE"/>
		<reference ref_id="CVE-2022-36314" ref_url="https://www.suse.com/security/cve/CVE-2022-36314/" source="CVE"/>
		<reference ref_id="CVE-2022-36318" ref_url="https://www.suse.com/security/cve/CVE-2022-36318/" source="CVE"/>
		<reference ref_id="CVE-2022-36319" ref_url="https://www.suse.com/security/cve/CVE-2022-36319/" source="CVE"/>
		<reference ref_id="CVE-2022-38472" ref_url="https://www.suse.com/security/cve/CVE-2022-38472/" source="CVE"/>
		<reference ref_id="CVE-2022-38473" ref_url="https://www.suse.com/security/cve/CVE-2022-38473/" source="CVE"/>
		<reference ref_id="CVE-2022-38476" ref_url="https://www.suse.com/security/cve/CVE-2022-38476/" source="CVE"/>
		<reference ref_id="CVE-2022-38477" ref_url="https://www.suse.com/security/cve/CVE-2022-38477/" source="CVE"/>
		<reference ref_id="CVE-2022-38478" ref_url="https://www.suse.com/security/cve/CVE-2022-38478/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3272-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012227.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Mozilla Firefox was updated to 102.2.0esr ESR:

* Fixed: Various stability, functionality, and security fixes.

- MFSA 2022-34 (bsc#1202645)

  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13

Firefox Extended Support Release 102.1 ESR

  * Fixed: Various stability, functionality, and security fixes.

- MFSA 2022-30 (bsc#1201758)

  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1

- Firefox Extended Support Release 102.0.1 ESR

  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes

Firefox 102.0 ESR:

* New: 

  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voil?! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
 -  Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut 'n.'
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.

  * Fixed: Various security fixes.

- MFSA 2022-24 (bsc#1200793)

  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-14"/>
	<updated date="2022-09-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200793">SUSE bug 1200793</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201758">SUSE bug 1201758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202645">SUSE bug 1202645</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2200/">CVE-2022-2200</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2505/">CVE-2022-2505</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34468/">CVE-2022-34468</cve>
	<cve impact="moderate" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34469/">CVE-2022-34469</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34470/">CVE-2022-34470</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34471/">CVE-2022-34471</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34472/">CVE-2022-34472</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34473/">CVE-2022-34473</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34474/">CVE-2022-34474</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-34475/">CVE-2022-34475</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34476/">CVE-2022-34476</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-34477/">CVE-2022-34477</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34478/">CVE-2022-34478</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34479/">CVE-2022-34479</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34480/">CVE-2022-34480</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34481/">CVE-2022-34481</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34482/">CVE-2022-34482</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34483/">CVE-2022-34483</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34484/">CVE-2022-34484</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34485/">CVE-2022-34485</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36314/">CVE-2022-36314</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36318/">CVE-2022-36318</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-36319/">CVE-2022-36319</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38472/">CVE-2022-38472</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38473/">CVE-2022-38473</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38476/">CVE-2022-38476</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38477/">CVE-2022-38477</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38478/">CVE-2022-38478</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710308" comment="MozillaFirefox-102.2.0-150000.150.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710309" comment="MozillaFirefox-branding-SLE-102-150000.4.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710310" comment="MozillaFirefox-devel-102.2.0-150000.150.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710311" comment="MozillaFirefox-translations-common-102.2.0-150000.150.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710312" comment="MozillaFirefox-translations-other-102.2.0-150000.150.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141067" version="1" class="patch">
	<metadata>
		<title>Security update for flatpak (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191507" ref_url="https://bugzilla.suse.com/1191507" source="BUGZILLA"/>
		<reference ref_id="1194610" ref_url="https://bugzilla.suse.com/1194610" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-21261" ref_url="https://www.suse.com/security/cve/CVE-2021-21261/" source="CVE"/>
		<reference ref_id="CVE-2021-41133" ref_url="https://www.suse.com/security/cve/CVE-2021-41133/" source="CVE"/>
		<reference ref_id="CVE-2021-43860" ref_url="https://www.suse.com/security/cve/CVE-2021-43860/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012249.html" source="SUSE-SU"/>
		<description>
This update for flatpak fixes the following issues:

- CVE-2021-41133: Fixed sandbox bypass via recent syscalls (bsc#1191507).
- CVE-2021-43860: Fixed metadata validation (bsc#1194610).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-15"/>
	<updated date="2022-09-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191507">SUSE bug 1191507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194610">SUSE bug 1194610</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21261/">CVE-2021-21261</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-41133/">CVE-2021-41133</cve>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-43860/">CVE-2021-43860</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009713852" comment="flatpak-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009713853" comment="flatpak-devel-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009713854" comment="flatpak-zsh-completion-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009713855" comment="libflatpak0-1.2.3-150100.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009713856" comment="typelib-1_0-Flatpak-1_0-1.2.3-150100.4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141068" version="1" class="patch">
	<metadata>
		<title>Security update for sqlite3 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1189802" ref_url="https://bugzilla.suse.com/1189802" source="BUGZILLA"/>
		<reference ref_id="1195773" ref_url="https://bugzilla.suse.com/1195773" source="BUGZILLA"/>
		<reference ref_id="1201783" ref_url="https://bugzilla.suse.com/1201783" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-36690" ref_url="https://www.suse.com/security/cve/CVE-2021-36690/" source="CVE"/>
		<reference ref_id="CVE-2022-35737" ref_url="https://www.suse.com/security/cve/CVE-2022-35737/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3307-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012802.html" source="SUSE-SU"/>
		<description>
This update for sqlite3 fixes the following issues:

Security issues fixed:

- CVE-2022-35737: Fixed an array-bounds overflow if billions of bytes are used in a string argument to a C API (bnc#1201783).
- CVE-2021-36690: Fixed an issue with the SQLite Expert extension when a column has no collating sequence (bsc#1189802).
  
- Package the Tcl bindings here again so that we only ship one copy of SQLite (bsc#1195773).

sqlite was updated to 3.39.3:

* Use a statement journal on DML statement affecting two or more
  database rows if the statement makes use of a SQL functions
  that might abort.
* Use a mutex to protect the PRAGMA temp_store_directory and
  PRAGMA data_store_directory statements, even though they are
  decremented and documented as not being threadsafe.

Update to 3.39.2:

* Fix a performance regression in the query planner associated
  with rearranging the order of FROM clause terms in the
  presences of a LEFT JOIN.
* Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
  1345947, forum post 3607259d3c, and other minor problems
  discovered by internal testing. [boo#1201783]

Update to 3.39.1:

* Fix an incorrect result from a query that uses a view that
  contains a compound SELECT in which only one arm contains a
  RIGHT JOIN and where the view is not the first FROM clause term
  of the query that contains the view
* Fix a long-standing problem with ALTER TABLE RENAME that can
  only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
  to a very small value.
* Fix a long-standing problem in FTS3 that can only arise when
  compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
  option.
* Fix the initial-prefix optimization for the REGEXP extension so
  that it works correctly even if the prefix contains characters
  that require a 3-byte UTF8 encoding.
* Enhance the sqlite_stmt virtual table so that it buffers all of
  its output. 

Update to 3.39.0:

* Add (long overdue) support for RIGHT and FULL OUTER JOIN
* Add new binary comparison operators IS NOT DISTINCT FROM and 
  IS DISTINCT FROM that are equivalent to IS and IS NOT, 
  respective, for compatibility with PostgreSQL and SQL standards
* Add a new return code (value '3') from the sqlite3_vtab_distinct()
  interface that indicates a query that has both DISTINCT and 
  ORDER BY clauses
* Added the sqlite3_db_name() interface
* The unix os interface resolves all symbolic links in database
  filenames to create a canonical name for the database before
  the file is opened
* Defer materializing views until the materialization is actually
  needed, thus avoiding unnecessary work if the materialization
  turns out to never be used
* The HAVING clause of a SELECT statement is now allowed on any
  aggregate query, even queries that do not have a GROUP BY
  clause
* Many microoptimizations collectively reduce CPU cycles by about
  2.3%. 

Update to 3.38.5:

* Fix a blunder in the CLI of the 3.38.4 release

Update to 3.38.4:

* fix a byte-code problem in the Bloom filter pull-down
  optimization added by release 3.38.0 in which an error in the
  byte code causes the byte code engine to enter an infinite loop
  when the pull-down optimization encounters a NULL key   

Update to 3.38.3:

* Fix a case of the query planner be overly aggressive with
  optimizing automatic-index and Bloom-filter construction,
  using inappropriate ON clause terms to restrict the size of the
  automatic-index or Bloom filter, and resulting in missing rows
  in the output.
* Other minor patches. See the timeline for details. 

Update to 3.38.2:

* Fix a problem with the Bloom filter optimization that might
  cause an incorrect answer when doing a LEFT JOIN with a WHERE
  clause constraint that says that one of the columns on the
  right table of the LEFT JOIN is NULL.
* Other minor patches.

- Package the Tcl bindings here again so that we only ship one copy
of SQLite (bsc#1195773).

Update to 3.38.1:

* Fix problems with the new Bloom filter optimization that might
  cause some obscure queries to get an incorrect answer.
* Fix the localtime modifier of the date and time functions so
  that it preserves fractional seconds.
* Fix the sqlite_offset SQL function so that it works correctly
  even in corner cases such as when the argument is a virtual
  column or the column of a view.
* Fix row value IN operator constraints on virtual tables so that
  they work correctly even if the virtual table implementation
  relies on bytecode to filter rows that do not satisfy the
  constraint.
* Other minor fixes to assert() statements, test cases, and
  documentation. See the source code timeline for details.

Update to 3.38.0

* Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
* The JSON functions are now built-ins
* Enhancements to date and time functions
* Rename the printf() SQL function to format() for better
  compatibility, with alias for backwards compatibility.
* Add the sqlite3_error_offset() interface for helping localize
  an SQL error to a specific character in the input SQL text 
* Enhance the interface to virtual tables 
* CLI columnar output modes are enhanced to correctly handle tabs
  and newlines embedded in text, and add options like '--wrap N',
  '--wordwrap on', and '--quote' to the columnar output modes.
* Query planner enhancements using a Bloom filter to speed up 
  large analytic queries, and a balanced merge tree to evaluate
  UNION or UNION ALL compound SELECT statements that have an
  ORDER BY clause.
* The ALTER TABLE statement is changed to silently ignores
  entries in the sqlite_schema table that do not parse when
  PRAGMA writable_schema=ON

Update to 3.37.2:

* Fix a bug introduced in version 3.35.0 (2021-03-12) that can
  cause database corruption if a SAVEPOINT is rolled back while
  in PRAGMA temp_store=MEMORY mode, and other changes are made,
  and then the outer transaction commits
* Fix a long-standing problem with ON DELETE CASCADE and ON 
  UPDATE CASCADE in which a cache of the bytecode used to
  implement the cascading change was not being reset following a
  local DDL change

Update to 3.37.1:

* Fix a bug introduced by the UPSERT enhancements of version
  3.35.0 that can cause incorrect byte-code to be generated for
  some obscure but valid SQL, possibly resulting in a NULL-
  pointer dereference.
* Fix an OOB read that can occur in FTS5 when reading corrupt
  database files.
* Improved robustness of the --safe option in the CLI.
* Other minor fixes to assert() statements and test cases. 

Updated to 3.37.0:

* STRICT tables provide a prescriptive style of data type
  management, for developers who prefer that kind of thing.
* When adding columns that contain a CHECK constraint or a
  generated column containing a NOT NULL constraint, the
  ALTER TABLE ADD COLUMN now checks new constraints against
  preexisting rows in the database and will only proceed if no
  constraints are violated.
* Added the PRAGMA table_list statement.
* Add the .connection command, allowing the CLI to keep multiple
  database connections open at the same time.
* Add the --safe command-line option that disables dot-commands
  and SQL statements that might cause side-effects that extend
  beyond the single database file named on the command-line.
* CLI: Performance improvements when reading SQL statements that
  span many lines.
* Added the sqlite3_autovacuum_pages() interface.
* The sqlite3_deserialize() does not and has never worked
  for the TEMP database. That limitation is now noted in the
  documentation.
* The query planner now omits ORDER BY clauses on subqueries and
  views if removing those clauses does not change the semantics
  of the query.
* The generate_series table-valued function extension is modified
  so that the first parameter ('START') is now required. This is
  done as a way to demonstrate how to write table-valued
  functions with required parameters. The legacy behavior is
  available using the -DZERO_ARGUMENT_GENERATE_SERIES
  compile-time option.
* Added new sqlite3_changes64() and sqlite3_total_changes64()
  interfaces.
* Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
* Use less memory to hold the database schema.
* bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
  extension when a column has no collating sequence.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1189802">SUSE bug 1189802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195773">SUSE bug 1195773</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201783">SUSE bug 1201783</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-36690/">CVE-2021-36690</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-35737/">CVE-2022-35737</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710767" comment="libsqlite3-0-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710768" comment="libsqlite3-0-32bit-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710769" comment="sqlite3-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710770" comment="sqlite3-devel-3.39.3-150000.3.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714912" comment="sqlite3-tcl-3.39.3-150000.3.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141069" version="1" class="patch">
	<metadata>
		<title>Security update for libcontainers-common (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1176804" ref_url="https://bugzilla.suse.com/1176804" source="BUGZILLA"/>
		<reference ref_id="1177598" ref_url="https://bugzilla.suse.com/1177598" source="BUGZILLA"/>
		<reference ref_id="1181640" ref_url="https://bugzilla.suse.com/1181640" source="BUGZILLA"/>
		<reference ref_id="1182998" ref_url="https://bugzilla.suse.com/1182998" source="BUGZILLA"/>
		<reference ref_id="1188520" ref_url="https://bugzilla.suse.com/1188520" source="BUGZILLA"/>
		<reference ref_id="1189893" ref_url="https://bugzilla.suse.com/1189893" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14370" ref_url="https://www.suse.com/security/cve/CVE-2020-14370/" source="CVE"/>
		<reference ref_id="CVE-2020-15157" ref_url="https://www.suse.com/security/cve/CVE-2020-15157/" source="CVE"/>
		<reference ref_id="CVE-2021-20199" ref_url="https://www.suse.com/security/cve/CVE-2021-20199/" source="CVE"/>
		<reference ref_id="CVE-2021-20291" ref_url="https://www.suse.com/security/cve/CVE-2021-20291/" source="CVE"/>
		<reference ref_id="CVE-2021-3602" ref_url="https://www.suse.com/security/cve/CVE-2021-3602/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3312-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012287.html" source="SUSE-SU"/>
		<description>
This update for libcontainers-common fixes the following issues:

libcontainers-common was updated:

- common component was updated to 0.44.0.
- storage component was updated to 1.36.0.
- image component was updated to 5.16.0.
- podman component was updated to 3.3.1.

3.3.1:

Bugfixes:

- Fixed a bug where unit files created by `podman generate systemd` could not cleanup shut down containers when stopped by `systemctl stop` .
- Fixed a bug where `podman machine` commands would not properly locate the `gvproxy` binary in some circumstances.
- Fixed a bug where containers created as part of a pod using the `--pod-id-file` option would not join the pod's network namespace .
- Fixed a bug where Podman, when using the systemd cgroups driver, could sometimes leak dbus sessions.
- Fixed a bug where the `until` filter to `podman logs` and `podman events` was improperly handled, requiring input to be negated .
- Fixed a bug where rootless containers using CNI networking run on systems using `systemd-resolved` for DNS would fail to start if resolved symlinked `/etc/resolv.conf` to an absolute path .

API:

- A large number of potential file descriptor leaks from improperly closing client connections have been fixed.

3.3.0:

Features:

- Containers inside VMs created by `podman machine` will now automatically handle port forwarding - containers in `podman machine` VMs that publish ports via `--publish` or `--publish-all` will have these ports not just forwarded on the VM, but also on the host system.
- The `podman play kube` command's `--network` option now accepts advanced network options (e.g. `--network slirp4netns:port_handler=slirp4netns`) .
- The `podman play kube` commmand now supports Kubernetes liveness probes, which will be created as Podman healthchecks.
- Podman now provides a systemd unit, `podman-restart.service`, which, when enabled, will restart all containers that were started with `--restart=always` after the system reboots.
- Rootless Podman can now be configured to use CNI networking by default by using the `rootless_networking` option in `containers.conf`.
- Images can now be pulled using `image:tag@digest` syntax (e.g. `podman pull fedora:34@sha256:1b0d4ddd99b1a8c8a80e885aafe6034c95f266da44ead992aab388e6aa91611a`) .
- The `podman container checkpoint` and `podman container restore` commands can now be used to checkpoint containers that are in pods, and restore those containers into pods.
- The `podman container restore` command now features a new option, `--publish`, to change the ports that are forwarded to a container that is being restored from an exported checkpoint.
- The `podman container checkpoint` command now features a new option, `--compress`, to specify the compression algorithm that will be used on the generated checkpoint.
- The `podman pull` command can now pull multiple images at once (e.g. `podman pull fedora:34 ubi8:latest` will pull both specified images).
- THe `podman cp` command can now copy files from one container into another directly (e.g. `podman cp containera:/etc/hosts containerb:/etc/`) .
- The `podman cp` command now supports a new option, `--archive`, which controls whether copied files will be chown'd to the UID and GID of the user of the destination container.
- The `podman stats` command now provides two additional metrics: Average CPU, and CPU time.
- The `podman pod create` command supports a new flag, `--pid`, to specify the PID namespace of the pod. If specified, containers that join the pod will automatically share its PID namespace.
- The `podman pod create` command supports a new flag, `--infra-name`, which allows the name of the pod's infra container to be set .
- The `podman auto-update` command has had its output reformatted - it is now much clearer what images were pulled and what containers were updated.
- The `podman auto-update` command now supports a new option, `--dry-run`, which reports what would be updated but does not actually perform the update .
- The `podman build` command now supports a new option, `--secret`, to mount secrets into build containers.
- The `podman manifest remove` command now has a new alias, `podman manifest rm`.
- The `podman login` command now supports a new option, `--verbose`, to print detailed information about where the credentials entered were stored.
- The `podman events` command now supports a new event, `exec_died`, which is produced when an exec session exits, and includes the exit code of the exec session.
- The `podman system connection add` command now supports adding connections that connect using the `tcp://` and `unix://` URL schemes.
- The `podman system connection list` command now supports a new flag, `--format`, to determine how the output is printed.
- The `podman volume prune` and `podman volume ls` commands' `--filter` option now support a new filter, `until`, that matches volumes created before a certain time .
- The `podman ps --filter` option's `network` filter now accepts a new value: `container:`, which matches containers that share a network namespace with a specific container .
- The `podman diff` command can now accept two arguments, allowing two images or two containers to be specified; the diff between the two will be printed .
- Podman can now optionally copy-up content from containers into volumes mounted into those containers earlier (at creation time, instead of at runtime) via the `prepare_on_create` option in `containers.conf` .
- A new option, `--gpus`, has been added to `podman create` and `podman run` as a no-op for better compatibility with Docker. If the nvidia-container-runtime package is installed, GPUs should be automatically added to containers without using the flag.
- If an invalid subcommand is provided, similar commands to try will now be suggested in the error message.
### Changes
- The `podman system reset` command now removes non-Podman (e.g. Buildah and CRI-O) containers as well.
- The new port forwarding offered by `podman machine` requires [gvproxy] in order to function.
- Podman will now automatically create the default CNI network if it does not exist, for both root and rootless users. This will only be done once per user - if the network is subsequently removed, it will not be recreated.
- The `install.cni` makefile option has been removed. It is no longer required to distribute the default `87-podman.conflist` CNI configuration file, as Podman will now automatically create it.
- The `--root` option to Podman will not automatically clear all default storage options when set. Storage options can be set manually using `--storage-opt` .
- The output of `podman system connection list` is now deterministic, with connections being sorted alpabetically by their name.
- The auto-update service (`podman-auto-update.service`) has had its default timer adjusted so it now starts at a random time up to 15 minutes after midnight, to help prevent system congestion from numerous daily services run at once.
- Systemd unit files generated by `podman generate systemd` now depend on `network-online.target` by default .
- Systemd unit files generated by `podman generate systemd` now use `Type=notify` by default, instead of using PID files.
- The `podman info` command's logic for detecting package versions on Gentoo has been improved, and should be significantly faster.

Bugfixes:

- Fixed a bug where the `podman play kube` command did not perform SELinux relabelling of volumes specified with a `mountPath` that included the `:z` or `:Z` options .
- Fixed a bug where the `podman play kube` command would ignore the `USER` and `EXPOSE` directives in images .
- Fixed a bug where the `podman play kube` command would only accept lowercase pull policies.
- Fixed a bug where named volumes mounted into containers with the `:z` or `:Z` options were not appropriately relabelled for access from the container .
- Fixed a bug where the `podman logs -f` command, with the `journald` log driver, could sometimes fail to pick up the last line of output from a container .
- Fixed a bug where running `podman rm` on a container created with the `--rm` option would occasionally emit an error message saying the container failed to be removed, when it was successfully removed.
- Fixed a bug where starting a Podman container would segfault if the `LISTEN_PID` and `LISTEN_FDS` environment variables were set, but `LISTEN_FDNAMES` was not .
- Fixed a bug where exec sessions in containers were sometimes not cleaned up when run without `-d` and when the associated `podman exec` process was killed before completion.
- Fixed a bug where `podman system service` could, when run in a systemd unit file with sdnotify in use, drop some connections when it was starting up.
- Fixed a bug where containers run using the REST API using the `slirp4netns` network mode would leave zombie processes that were not cleaned up until `podman system service` exited .
- Fixed a bug where the `podman system service` command would leave zombie processes after its initial launch that were not cleaned up until it exited .
- Fixed a bug where VMs created by `podman machine` could not be started after the host system restarted .
- Fixed a bug where the `podman pod ps` command would not show headers for optional information (e.g. container names when the `--ctr-names` option was given).
- Fixed a bug where the remote Podman client's `podman create` and `podman run` commands would ignore timezone configuration from the server's `containers.conf` file .
- Fixed a bug where the remote Podman client's `podman build` command would only respect `.containerignore` and not `.dockerignore` files (when both are present, `.containerignore` will be preferred) .
- Fixed a bug where the remote Podman client's `podman build` command would fail to send the Dockerfile being built to the server when it was excluded by the `.dockerignore` file, resulting in an error .
- Fixed a bug where the remote Podman client's `podman build` command could unexpectedly stop streaming the output of the build .
- Fixed a bug where the remote Podman client's `podman build` command would fail to build when run on Windows .
- Fixed a bug where the `podman manifest create` command accepted at most two arguments (an arbitrary number of images are allowed as arguments, which will be added to the manifest).
- Fixed a bug where named volumes would not be properly chowned to the UID and GID of the directory they were mounted over when first mounted into a container .
- Fixed a bug where named volumes created using a volume plugin would be removed from Podman, even if the plugin reported a failure to remove the volume .
- Fixed a bug where the remote Podman client's `podman exec -i` command would hang when input was provided via shell redirection (e.g. `podman --remote exec -i foo cat &lt;&lt;&lt;'hello'`) .
- Fixed a bug where containers created with `--rm` were not immediately removed after being started by `podman start` if they failed to start .
- Fixed a bug where the `--storage-opt` flag to `podman create` and `podman run` was nonfunctional .
- Fixed a bug where the `--device-cgroup-rule` option to `podman create` and `podman run` was nonfunctional .
- Fixed a bug where the `--tls-verify` option to `podman manifest push` was nonfunctional.
- Fixed a bug where the `podman import` command could, in some circumstances, produce empty images .
- Fixed a bug where images pulled using the `docker-daemon:` transport had the wrong registry (`localhost` instead of `docker.io/library`) .
- Fixed a bug where operations that pruned images (`podman image prune` and `podman system prune`) would prune untagged images with children .
- Fixed a bug where dual-stack networks created by `podman network create` did not properly auto-assign an IPv4 subnet when one was not explicitly specified .
- Fixed a bug where port forwarding using the `rootlessport` port forwarder would break when a network was disconnected and then reconnected .
- Fixed a bug where Podman would ignore user-specified SELinux policies for containers using the Kata OCI runtime, or containers using systemd as PID 1 .
- Fixed a bug where Podman containers created using `--net=host` would add an entry to `/etc/hosts` for the container's hostname pointing to `127.0.1.1` .
- Fixed a bug where the `podman unpause --all` command would throw an error for every container that was not paused .
- Fixed a bug where timestamps for the `since` and `until` filters using Unix timestamps with a nanoseconds portion could not be parsed .
- Fixed a bug where the `podman info` command would sometimes print the wrong path for the `slirp4netns` binary.
- Fixed a bug where rootless Podman containers joined to a CNI network would not have functional DNS when the host used systemd-resolved without the resolved stub resolver being enabled .
- Fixed a bug where `podman network connect` and `podman network disconnect` of rootless containers could sometimes break port forwarding to the container .
- Fixed a bug where joining a container to a CNI network by ID and adding network aliases to this network would cause the container to fail to start .
### API
- Fixed a bug where the Compat List endpoint for Containers included healthcheck information for all containers, even those that did not have a configured healthcheck.
- Fixed a bug where the Compat Create endpoint for Containers would fail to create containers with the `NetworkMode` parameter set to `default` .
- Fixed a bug where the Compat Create endpoint for Containers did not properly handle healthcheck commands .
- Fixed a bug where the Compat Wait endpoint for Containers would always send an empty string error message when no error occurred.
- Fixed a bug where the Libpod Stats endpoint for Containers would not error when run on rootless containers on cgroups v1 systems (nonsensical results would be returned, as this configuration cannot be supportable).
- Fixed a bug where the Compat List endpoint for Images omitted the `ContainerConfig` field .
- Fixed a bug where the Compat Build endpoint for Images was too strict when validating the `Content-Type` header, rejecting content that Docker would have accepted .
- Fixed a bug where the Compat Pull endpoint for Images could fail, but return a 200 status code, if an image name that could not be parsed was provided.
- Fixed a bug where the Compat Pull endpoint for Images would continue to pull images after the client disconnected.
- Fixed a bug where the Compat List endpoint for Networks would fail for non-bridge (e.g. macvlan) networks .
- Fixed a bug where the Libpod List endpoint for Networks would return nil, instead of an empty list, when no networks were present .
- The Compat and Libpod Logs endpoints for Containers now support the `until` query parameter .
- The Compat Import endpoint for Images now supports the `platform`, `message`, and `repo` query parameters.
- The Compat Pull endpoint for Images now supports the `platform` query parameter.

Misc:

- Updated Buildah to v1.22.3
- Updated the containers/storage library to v1.34.1
- Updated the containers/image library to v5.15.2
- Updated the containers/common library to v0.42.1

storage was updated to 1.36.0.

Updated image to 5.16.0.

Update podman to 3.2.3:

Security:

- This release addresses CVE-2021-3602, an issue with the `podman build` command with the `--isolation chroot` flag that results in environment variables from the host leaking into build containers. (bsc#1188520)

Bugfixes:

- Fixed a bug where events related to images could occur before the relevant operation had completed (e.g. an image pull event could be written before the pull was finished) .
- Fixed a bug where `podman save` would refuse to save images with an architecture different from that of the host .
- Fixed a bug where the `podman import` command did not correctly handle images without tags .
- Fixed a bug where Podman's journald events backend would fail and prevent Podman from running when run on a host with systemd as PID1 but in an environment (e.g. a container) without systemd .
- Fixed a bug where containers using rootless CNI networking would fail to start when the `dnsname` CNI plugin was in use and the host system's `/etc/resolv.conf` was a symlink ([#10855] and [#10929](https://github.com/containers/podman/issues/10929)).
- Fixed a bug where containers using rootless CNI networking could fail to start due to a race in rootless CNI initialization .

Update podman to 3.2.2

3.2.2:

- Podman's handling of the Architecture field of images has been relaxed. Since 3.2.0, Podman required that the architecture of the image match the architecture of the system to run containers based on an image, but images often incorrectly report architecture, causing Podman to reject valid images ([#10648] and [#10682](https://github.com/containers/podman/issues/10682)).
- Podman no longer uses inotify to monitor for changes to CNI configurations. This removes potential issues where Podman cannot be run because a user has exhausted their available inotify sessions .

Bugfixes

- Fixed a bug where the `podman cp` would, when given a directory as its source and a target that existed and was a file, copy the contents of the directory into the parent directory of the file; this now results in an error.
- Fixed a bug where the `podman logs` command would, when following a running container's logs, not include the last line of output from the container when it exited when the `k8s-file` driver was in use .
- Fixed a bug where Podman would fail to run containers if `systemd-resolved` was incorrectly detected as the system's DNS server .
- Fixed a bug where the `podman exec -t` command would only resize the exec session's TTY after the session started, leading to a race condition where the terminal would initially not have a size set .
- Fixed a bug where Podman containers using the `slirp4netns` network mode would add an incorrect entry to `/etc/hosts` pointing the container's hostname to the wrong IP address.
- Fixed a bug where Podman would create volumes specified by images with incorrect permissions ([#10188] and [#10606](https://github.com/containers/podman/issues/10606)).
- Fixed a bug where Podman would not respect the `uid` and `gid` options to `podman volume create -o` .
- Fixed a bug where the `podman run` command could panic when parsing the system's cgroup configuration .
- Fixed a bug where the remote Podman client's `podman build -f - ...` command did not read a Containerfile from STDIN .
- Fixed a bug where the `podman container restore --import` command would fail to restore checkpoints created from privileged containers .
- Fixed a bug where Podman was not respecting the `TMPDIR` environment variable when pulling images .
- Fixed a bug where a number of Podman commands did not properly support using Go templates as an argument to the `--format` option.

API:

- Fixed a bug where the Compat Inspect endpoint for Containers did not include information on container healthchecks .
- Fixed a bug where the Libpod and Compat Build endpoints for Images did not properly handle the `devices` query parameter .

Misc:

- Fixed a bug where the Makefile's `make podman-remote-static` target to build a statically-linked `podman-remote` binary was instead producing dynamic binaries .
- Updated the containers/common library to v0.38.11

3.2.1:

Changes:
- Podman now allows corrupt images (e.g. from restarting the system during an image pull) to be replaced by a `podman pull` of the same image (instead of requiring they be removed first, then re-pulled).

Bugfixes:

- Fixed a bug where Podman would fail to start containers if a Seccomp profile was not available at `/usr/share/containers/seccomp.json` .
- Fixed a bug where the `podman machine start` command failed on OS X machines with the AMD64 architecture and certain QEMU versions .
- Fixed a bug where Podman would always use the slow path for joining the rootless user namespace.
- Fixed a bug where the `podman stats` command would fail on Cgroups v1 systems when run on a container running systemd .
- Fixed a bug where pre-checkpoint support for `podman container checkpoint` did not function correctly.
- Fixed a bug where the remote Podman client's `podman build` command did not properly handle the `-f` option .
- Fixed a bug where the remote Podman client's `podman run` command would sometimes not resize the container's terminal before execution began .
- Fixed a bug where the `--filter` option to the `podman image prune` command was nonfunctional.
- Fixed a bug where the `podman logs -f` command would exit before all output for a container was printed when the `k8s-file` log driver was in use .
- Fixed a bug where Podman would not correctly detect that systemd-resolved was in use on the host and adjust DNS servers in the container appropriately under some circumstances .
- Fixed a bug where the `podman network connect` and `podman network disconnect` commands acted improperly when containers were in the Created state, marking the changes as done but not actually performing them.

API:

- Fixed a bug where the Compat and Libpod Prune endpoints for Networks returned null, instead of an empty array, when nothing was pruned.
- Fixed a bug where the Create API for Images would continue to pull images even if a client closed the connection mid-pull .
- Fixed a bug where the Events API did not include some information (including labels) when sending events.
- Fixed a bug where the Events API would, when streaming was not requested, send at most one event .

3.2.0:

Features:

- Docker Compose is now supported with rootless Podman .
- The `podman network connect`, `podman network disconnect`, and `podman network reload` commands have been enabled for rootless Podman.
- An experimental new set of commands, `podman machine`, was added to assist in managing virtual machines containing a Podman server. These are intended for easing the use of Podman on OS X by handling the creation of a Linux VM for running Podman.
- The `podman generate kube` command can now be run on Podman named volumes (generating `PersistentVolumeClaim` YAML), in addition to pods and containers.
- The `podman play kube` command now supports two new options, `--ip` and `--mac`, to set static IPs and MAC addresses for created pods ([#8442] and [#9731](https://github.com/containers/podman/issues/9731)).
- The `podman play kube` command's support for `PersistentVolumeClaim` YAML has been greatly improved.
- The `podman generate kube` command now preserves the label used by `podman auto-update` to identify containers to update as a Kubernetes annotation, and the `podman play kube` command will convert this annotation back into a label. This allows `podman auto-update` to be used with containers created by `podman play kube`.
- The `podman play kube` command now supports Kubernetes `secretRef` YAML (using the secrets support from `podman secret`) for environment variables.
- Secrets can now be added to containers as environment variables using the `type=env` option to the `--secret` flag to `podman create` and `podman run`.
- The `podman start` command now supports the `--all` option, allowing all containers to be started simultaneously with a single command. The `--filter` option has also been added to filter which containers to start when `--all` is used.
- Filtering containers with the `--filter` option to `podman ps` and `podman start` now supports a new filter, `restart-policy`, to filter containers based on their restart policy.
- The `--group-add` option to rootless `podman run` and `podman create` now accepts a new value, `keep-groups`, which instructs Podman to retain the supplemental groups of the user running Podman in the created container. This is only supported with the `crun` OCI runtime.
- The `podman run` and `podman create` commands now support a new option, `--timeout`. This sets a maximum time the container is allowed to run, after which it is killed .
- The `podman run` and `podman create` commands now support a new option, `--pidfile`. This will create a file when the container is started containing the PID of the first process in the container.
- The `podman run` and `podman create` commands now support a new option, `--requires`. The `--requires` option adds dependency containers - containers that must be running before the current container. Commands like `podman start` will automatically start the requirements of a container before starting the container itself.
- Auto-updating containers can now be done with locally-built images, not just images hosted on a registry, by creating containers with the `io.containers.autoupdate` label set to `local`.
- Podman now supports the [Container Device Interface] (CDI) standard.
- Podman now adds an entry to `/etc/hosts`, `host.containers.internal`, pointing to the current gateway (which, for root containers, is usually a bridge interface on the host system) .
- The `podman ps`, `podman pod ps`, `podman network list`, `podman secret list`, and `podman volume list` commands now support a `--noheading` option, which will cause Podman to omit the heading line including column names.
- The `podman unshare` command now supports a new flag, `--rootless-cni`, to join the rootless network namespace. This allows commands to be run in the same network environment as rootless containers with CNI networking.
- The `--security-opt unmask=` option to `podman run` and `podman create` now supports glob operations to unmask a group of paths at once (e.g. `podman run --security-opt unmask=/proc/* ...` will unmask all paths in `/proc` in the container).
- The `podman network prune` command now supports a `--filter` option to filter which networks will be pruned.
### Changes
- The change in Podman 3.1.2 where the `:z` and `:Z` mount options for volumes were ignored for privileged containers has been reverted after discussion in [#10209].
- Podman's rootless CNI functionality no longer requires a sidecar container! The removal of the requirement for the `rootless-cni-infra` container means that rootless CNI is now usable on all architectures, not just AMD64, and no longer requires pulling an image .
- The Image handling code used by Podman has seen a major rewrite to improve code sharing with our other projects, Buildah and CRI-O. This should result in fewer bugs and performance gains in the long term. Work on this is still ongoing.
- The `podman auto-update` command now prunes previous versions of images after updating if they are unused, to prevent disk exhaustion after repeated updates .
- The `podman play kube` now treats environment variables configured as references to a `ConfigMap` as mandatory unless the `optional` parameter was set; this better matches the behavior of Kubernetes.
- Podman now supports the `--context=default` flag from Docker as a no-op for compatibility purposes.
- When Podman is run as root, but without `CAP_SYS_ADMIN` being available, it will run in a user namespace using the same code as rootless Podman (instead of failing outright).
- The `podman info` command now includes the path of the Seccomp profile Podman is using, available cgroup controllers, and whether Podman is connected to a remote service or running containers locally.
- Containers created with the `--rm` option now automatically use the `volatile` storage flag when available for their root filesystems, causing them not to write changes to disk as often as they will be removed at completion anyways. This should result in improved performance.
- The `podman generate systemd --new` command will now include environment variables referenced by the container in generated unit files if the value would be looked up from the system environment.
- Podman now requires that Conmon v2.0.24 be available.

Bugfixes:

- Fixed a bug where the remote Podman client's `podman build` command did not support the `--arch`, `--platform`, and `--os`, options.
- Fixed a bug where the remote Podman client's `podman build` command ignored the `--rm=false` option .
- Fixed a bug where the remote Podman client's `podman build --iidfile` command could include extra output (in addition to just the image ID) in the image ID file written .
- Fixed a bug where the remote Podman client's `podman build` command did not preserve hardlinks when moving files into the container via `COPY` instructions .
- Fixed a bug where the `podman generate systemd --new` command could generate extra `--iidfile` arguments if the container was already created with one.
- Fixed a bug where the `podman generate systemd --new` command would generate unit files that did not include `RequiresMountsFor` lines .
- Fixed a bug where the `podman generate kube` command produced incorrect YAML for containers which bind-mounted both `/` and `/root` from the host system into the container .
- Fixed a bug where pods created by `podman play kube` from YAML that specified `ShareProcessNamespace` would only share the PID namespace (and not also the UTS, Network, and IPC namespaces) .
- Fixed a bug where the `podman network reload` command could generate spurious error messages when `iptables-nft` was in use.
- Fixed a bug where rootless Podman could fail to attach to containers when the user running Podman had a large UID.
- Fixed a bug where the `podman ps` command could fail with a `no such container` error due to a race condition with container removal .
- Fixed a bug where containers using the `slirp4netns` network mode and setting a custom `slirp4netns` subnet while using the `rootlesskit` port forwarder would not be able to forward ports .
- Fixed a bug where the `--filter ancestor=` option to `podman ps` did not require an exact match of the image name/ID to include a container in its results.
- Fixed a bug where the `--filter until=` option to `podman image prune` would prune images created after the specified time (instead of before).
- Fixed a bug where setting a custom Seccomp profile via the `seccomp_profile` option in `containers.conf` had no effect, and the default profile was used instead.
- Fixed a bug where the `--cgroup-parent` option to `podman create` and `podman run` was ignored in rootless Podman on cgroups v2 systems with the `cgroupfs` cgroup manager .
- Fixed a bug where the `IMAGE` and `NAME` variables in `podman container runlabel` were not being correctly substituted .
- Fixed a bug where Podman could freeze when creating containers with a specific combination of volumes and working directory .
- Fixed a bug where rootless Podman containers restarted by restart policy (e.g. containers created with `--restart=always`) would lose networking after being restarted .
- Fixed a bug where the `podman cp` command could not copy files into containers created with the `--pid=host` flag .
- Fixed a bug where filters to the `podman events` command could not be specified twice (if a filter is specified more than once, it will match if any of the given values match - logical or) .
- Fixed a bug where Podman would include IPv6 nameservers in `resolv.conf` in containers without IPv6 connectivity .
- Fixed a bug where containers could not be created with static IP addresses when connecting to a network using the `macvlan` driver .
### API
- Fixed a bug where the Compat Create endpoint for Containers did not allow advanced network options to be set .
- Fixed a bug where the Compat Create endpoint for Containers ignored static IP information provided in the `IPAMConfig` block .
- Fixed a bug where the Compat Inspect endpoint for Containers returned null (instead of an empty list) for Networks when the container was not joined to a CNI network .
- Fixed a bug where the Compat Wait endpoint for Containers could miss containers exiting if they were immediately restarted.
- Fixed a bug where the Compat Create endpoint for Volumes required that the user provide a name for the new volume .
- Fixed a bug where the Libpod Info handler would sometimes not return the correct path to the Podman API socket.
- Fixed a bug where the Compat Events handler used the wrong name for container exited events (`died` instead of `die`) .
- Fixed a bug where the Compat Push endpoint for Images could leak goroutines if the remote end closed the connection prematurely.


Update storage to 1.32.5

Update podman to 3.1.2

3.1.2:

Bugfixes:

- Fixed a bug where images with empty layers were stored incorrectly, causing them to be unable to be pushed or saved.
- Fixed a bug where the `podman rmi` command could fail to remove corrupt images from storage.
- Fixed a bug where the remote Podman client's `podman save` command did not support the `oci-dir` and `docker-dir` formats .
- Fixed a bug where volume mounts from `podman play kube` created with a trailing `/` in the container path were were not properly superceding named volumes from the image .
- Fixed a bug where Podman could fail to build on 32-bit architectures.

Update podman to 3.1.1

- Podman now recognizes `trace` as a valid argument to the `--log-level` command. Trace logging is now the most verbose level of logging available.
- The `:z` and `:Z` options for volume mounts are now ignored when the container is privileged or is run with SELinux isolation disabled (`--security-opt label=disable`). This matches better matches Docker's behavior in this case.

Bugfixes

- Fixed a bug where pruning images with the `podman image prune` or `podman system prune` commands could cause Podman to panic.
- Fixed a bug where the `podman save` command did not properly error when the `--compress` flag was used with incompatible format types.
- Fixed a bug where the `--security-opt` and `--ulimit` options to the remote Podman client's `podman build` command were nonfunctional.
- Fixed a bug where the `--log-rusage` option to the remote Podman client's `podman build` command was nonfunctional .
- Fixed a bug where the `podman build` command could, in some circumstances, use the wrong OCI runtime .
- Fixed a bug where the remote Podman client's `podman build` command could return 0 despite failing .
- Fixed a bug where the `podman container runlabel` command did not properly expand the `IMAGE` and `NAME` variables in the label .
- Fixed a bug where poststop OCI hooks would be executed twice on containers started with the `--rm` argument .
- Fixed a bug where rootless Podman could fail to launch containers on cgroups v2 systems when the `cgroupfs` cgroup manager was in use.
- Fixed a bug where the `podman stats` command could error when statistics tracked exceeded the maximum size of a 32-bit signed integer .
- Fixed a bug where rootless Podman containers run with `--userns=keepid` (without a `--user` flag in addition) would grant exec sessions run in them too many capabilities .
- Fixed a bug where the `--authfile` option to `podman build` did not validate that the path given existed .
- Fixed a bug where the `--storage-opt` option to Podman was appending to, instead of overriding (as is documented), the default storage options.
- Fixed a bug where the `podman system service` connection did not function properly when run in a socket-activated systemd unit file as a non-root user.
- Fixed a bug where the `--network` option to the `podman play kube` command of the remote Podman client was being ignored .
- Fixed a bug where the `--log-driver` option to the `podman play kube` command was nonfunctional .

API

- Fixed a bug where the Libpod Create endpoint for Manifests did not properly validate the image the manifest was being created with.
- Fixed a bug where the Libpod DF endpoint could, in error cases, append an extra null to the JSON response, causing decode errors.
- Fixed a bug where the Libpod and Compat Top endpoint for Containers would return process names that included extra whitespace.
- Fixed a bug where the Compat Prune endpoint for Containers accepted too many types of filter.

Update podman to 3.1.0

Features:

- A set of new commands has been added to manage secrets! The `podman secret create`, `podman secret inspect`, `podman secret ls` and `podman secret rm` commands have been added to handle secrets, along with the `--secret` option to `podman run` and `podman create` to add secrets to containers. The initial driver for secrets does not support encryption - this will be added in a future release.
- A new command to prune networks, `podman network prune`, has been added .
- The `-v` option to `podman run` and `podman create` now supports a new volume option, `:U`, to chown the volume's source directory on the host to match the UID and GID of the container and prevent permissions issues .
- Three new commands, `podman network exists`, `podman volume exists`, and `podman manifest exists`, have been added to check for the existence of networks, volumes, and manifest lists.
- The `podman cp` command can now copy files into directories mounted as `tmpfs` in a running container.
- The `podman volume prune` command will now list volumes that will be pruned when prompting the user whether to continue and perform the prune .
- The Podman remote client's `podman build` command now supports the `--disable-compression`, `--excludes`, and `--jobs` options.
- The Podman remote client's `podman push` command now supports the `--format` option.
- The Podman remote client's `podman rm` command now supports the `--all` and `--ignore` options.
- The Podman remote client's `podman search` command now supports the `--no-trunc` and `--list-tags` options.
- The `podman play kube` command can now read in Kubernetes YAML from `STDIN` when `-` is specified as file name (`podman play kube -`), allowing input to be piped into the command for scripting .
- The `podman generate systemd` command now supports a `--no-header` option, which disables creation of the header comment automatically added by Podman to generated unit files.
- The `podman generate kube` command can now generate `PersistentVolumeClaim` YAML for Podman named volumes .
- The `podman generate kube` command can now generate YAML files containing multiple resources (pods or deployments) .

Security:

- This release resolves CVE-2021-20291, a deadlock vulnerability in the storage library caused by pulling a specially-crafted container image. (bsc#1196497)

Changes:

- The Podman remote client's `podman build` command no longer allows the `-v` flag to be used. Volumes are not yet supported with remote Podman when the client and service are on different machines.
- The `podman kill` and `podman stop` commands now print the name given by the user for each container, instead of the full ID.
- When the `--security-opt unmask=ALL` or `--security-opt unmask=/sys/fs/cgroup` options to `podman create` or `podman run` are given, Podman will mount cgroups into the container as read-write, instead of read-only .
- The `podman rmi` command has been changed to better handle cases where an image is incomplete or corrupted, which can be caused by interrupted image pulls.
- The `podman rename` command has been improved to be more atomic, eliminating many race conditions that could potentially render a renamed container unusable.
- Detection of which OCI runtimes run using virtual machines and thus require custom SELinux labelling has been improved .
- The hidden `--trace` option to `podman` has been turned into a no-op. It was used in very early versions for performance tracing, but has not been supported for some time.
- The `podman generate systemd` command now generates `RequiresMountsFor` lines to ensure necessary storage directories are mounted before systemd starts Podman.
- Podman will now emit a warning when `--tty` and `--interactive` are both passed, but `STDIN` is not a TTY. This will be made into an error in the next major Podman release some time next year.
### Bugfixes
- Fixed a bug where rootless Podman containers joined to CNI networks could not receive traffic from forwarded ports .
- Fixed a bug where `podman network create` with the `--macvlan` flag did not honor the `--gateway`, `--subnet`, and `--opt` options .
- Fixed a bug where the `podman generate kube` command generated invalid YAML for privileged containers .
- Fixed a bug where the `podman generate kube` command could not be used with containers that were not running.
- Fixed a bug where the `podman generate systemd` command could duplicate some parameters to Podman in generated unit files .
- Fixed a bug where Podman did not add annotations specified in `containers.conf` to containers.
- Foxed a bug where Podman did not respect the `no_hosts` default in `containers.conf` when creating containers.
- Fixed a bug where the `--tail=0`, `--since`, and `--follow` options to the `podman logs` command did not function properly when using the `journald` log backend.
- Fixed a bug where specifying more than one container to `podman logs` when the `journald` log backend was in use did not function correctly.
- Fixed a bug where the `podman run` and `podman create` commands would panic if a memory limit was set, but the swap limit was set to unlimited .
- Fixed a bug where the `--network` option to `podman run`, `podman create`, and `podman pod create` would error if the user attempted to specify CNI networks by ID, instead of name .
- Fixed a bug where Podman's cgroup handling for cgroups v1 systems did not properly handle cases where a cgroup existed on some, but not all, controllers, resulting in errors from the `podman stats` command .
- Fixed a bug where the `podman cp` did not properly handle cases where `/dev/stdout` was specified as the destination (it was treated identically to `-`) .
- Fixed a bug where the `podman cp` command would create files with incorrect ownership .
- Fixed a bug where the `podman cp` command did not properly handle cases where the destination directory did not exist.
- Fixed a bug where the `podman cp` command did not properly evaluate symlinks when copying out of containers.
- Fixed a bug where the `podman rm -fa` command would error when attempting to remove containers created with `--rm` .
- Fixed a bug where the ordering of capabilities was nondeterministic in the `CapDrop` field of the output of `podman inspect` on a container .
- Fixed a bug where the `podman network connect` command could be used with containers that were not initially connected to a CNI bridge network (e.g. containers created with `--net=host`) .
- Fixed a bug where DNS search domains required by the `dnsname` CNI plugin were not being added to container's `resolv.conf` under some circumstances.
- Fixed a bug where the `--ignorefile` option to `podman build` was nonfunctional .
- Fixed a bug where the `--timestamp` option to `podman build` was nonfunctional .
- Fixed a bug where the `--iidfile` option to `podman build` could cause Podman to panic if an error occurred during the build.
- Fixed a bug where the `--dns-search` option to `podman build` was nonfunctional .
- Fixed a bug where the `--pull-never` option to `podman build` was nonfunctional .
- Fixed a bug where the `--build-arg` option to `podman build` would, when given a key but not a value, error (instead of attempting to look up the key as an environment variable) .
- Fixed a bug where the `--isolation` option to `podman build` in the remote Podman client was nonfunctional.
- Fixed a bug where the `podman network disconnect` command could cause errors when the container that had a network removed was stopped and its network was cleaned up .
- Fixed a bug where the `podman network rm` command did not properly check what networks a container was present in, resulting in unexpected behavior if `podman network connect` or `podman network disconnect` had been used with the network .
- Fixed a bug where some errors with stopping a container could cause Podman to panic, and the container to be stuck in an unusable `stopping` state .
- Fixed a bug where the `podman load` command could return 0 even in cases where an error occurred .
- Fixed a bug where specifying storage options to Podman using the `--storage-opt` option would override all storage options. Instead, storage options are now overridden only when the `--storage-driver` option is used to override the current graph driver .
- Fixed a bug where containers created with `--privileged` could request more capabilities than were available to Podman.
- Fixed a bug where `podman commit` did not use the `TMPDIR` environment variable to place temporary files created during the commit .
- Fixed a bug where remote Podman could error when attempting to resize short-lived containers .
- Fixed a bug where Podman was unusable on kernels built without `CONFIG_USER_NS`.
- Fixed a bug where the ownership of volumes created by `podman volume create` and then mounted into a container could be incorrect .
- Fixed a bug where Podman volumes using a volume plugin could not pass certain options, and could not be used as non-root users.
- Fixed a bug where the `--tz` option to `podman create` and `podman run` did not properly validate its input.
### API
- Fixed a bug where the `X-Registry-Auth` header did not accept `null` as a valid value.
- A new compat endpoint, `/auth`, has been added. This endpoint validates credentials against a registry .
- Fixed a bug where the compat Build endpoint for Images specified labels using the wrong type (array vs map). Both formats will be accepted now.
- Fixed a bug where the compat Build endpoint for Images did not report that it successfully tagged the built image in its response.
- Fixed a bug where the compat Create endpoint for Images did not provide progress information on pulling the image in its response.
- Fixed a bug where the compat Push endpoint for Images did not properly handle the destination (used a query parameter, instead of a path parameter).
- Fixed a bug where the compat Push endpoint for Images did not send the progress of the push and the digest of the pushed image in the response body.
- Fixed a bug where the compat List endpoint for Networks returned null, instead of an empty array (`[]`), when no networks were present .
- Fixed a bug where the compat List endpoint for Networks returned nulls, instead of empty maps, for networks that do not have Labels and/or Options.
- The Libpod Inspect endpoint for networks (`/libpod/network/$ID/json`) now has an alias at `/libpod/network/$ID` .
- Fixed a bug where the libpod Inspect endpoint for Networks returned a 1-size array of results, instead of a single result .
- The Compat List endpoint for Networks now supports the legacy format for filters in parallel with the current filter format .
- Fixed a bug where the compat Create endpoint for Containers did not properly handle tmpfs filesystems specified with options .
- Fixed a bug where the compat Create endpoint for Containers did not create bind-mount source directories .
- Fixed a bug where the compat Create endpoint for Containers did not properly handle the `NanoCpus` option .
- Fixed a bug where the Libpod create endpoint for Containers has a misnamed field in its JSON.
- Fixed a bug where the compat List endpoint for Containers did not populate information on forwarded ports 
- Fixed a bug where the compat List endpoint for Containers did not populate information on container CNI networks .
- Fixed a bug where the compat and libpod Stop endpoints for Containers would ignore a timeout of 0.
- Fixed a bug where the compat and libpod Resize endpoints for Containers did not set the correct terminal sizes (dimensions were reversed) .
- Fixed a bug where the compat Remove endpoint for Containers would not return 404 when attempting to remove a container that does not exist .
- Fixed a bug where the compat Prune endpoint for Volumes would still prune even if an invalid filter was specified.
- Numerous bugs related to filters have been addressed.

Update podman to 3.0.1

3.0.1:

Changes:

- Several frequently-occurring `WARN` level log messages have been downgraded to `INFO` or `DEBUG` to not clutter terminal output.

Bugfixes:

- Fixed a bug where the `Created` field of `podman ps --format=json` was formatted as a string instead of an Unix timestamp (integer) .
- Fixed a bug where failing lookups of individual layers during the `podman images` command would cause the whole command to fail without printing output.
- Fixed a bug where `--cgroups=split` did not function properly on cgroups v1 systems.
- Fixed a bug where mounting a volume over an directory in the container that existed, but was empty, could fail .
- Fixed a bug where mounting a volume over a directory in the container that existed could copy the entirety of the container's rootfs, instead of just the directory mounted over, into the volume .
- Fixed a bug where Podman would treat the `--entrypoint=['']` option to `podman run` and `podman create` as a literal empty string in the entrypoint, when instead it should have been ignored .
- Fixed a bug where Podman would set the `HOME` environment variable to `''` when the container ran as a user without an assigned home directory .
- Fixed a bug where specifying a pod infra image that had no tags (by using its ID) would cause `podman pod create` to panic .
- Fixed a bug where the `--runtime` option was not properly handled by the `podman build` command .
- Fixed a bug where Podman would incorrectly print an error message related to the remote API when the remote API was not in use and starting Podman failed.
- Fixed a bug where Podman would change ownership of a container's working directory, even if it already existed .
- Fixed a bug where the `podman generate systemd --new` command would incorrectly escape `%t` when generating the path for the PID file .
- Fixed a bug where Podman could, when run inside a Podman container with the host's containers/storage directory mounted into the container, erroneously detect a reboot and reset container state if the temporary directory was not also mounted in .
- Fixed a bug where some options of the `podman build` command (including but not limited to `--jobs`) were nonfunctional .
### API
- Fixed a breaking change to the Libpod Wait API for Containers where the Conditions parameter changed type in Podman v3.0 .
- Fixed a bug where the Compat Create endpoint for Containers did not properly handle forwarded ports that did not specify a host port.
- Fixed a bug where the Libpod Wait endpoint for Containers could write duplicate headers after an error occurred.
- Fixed a bug where the Compat Create endpoint for Images would not pull images that already had a matching tag present locally, even if a more recent version was available at the registry .
- The Compat Create endpoint for Images has had its compatibility with Docker improved, allowing its use with the `docker-java` library.
### Misc
- Updated Buildah to v1.19.4
- Updated the containers/storage library to v1.24.6

3.0.0:

Features:

- Podman now features initial support for Docker Compose.
- Added the `podman rename` command, which allows containers to be renamed after they are created .
- The Podman remote client now supports the `podman copy` command.
- A new command, `podman network reload`, has been added. This command will re-configure the network of all running containers, and can be used to recreate firewall rules lost when the system firewall was reloaded (e.g. via `firewall-cmd --reload`).
- Podman networks now have IDs. They can be seen in `podman network ls` and can be used when removing and inspecting networks. Existing networks receive IDs automatically.
- Podman networks now also support labels. They can be added via the `--label` option to `network create`, and `podman network ls` can filter labels based on them.
- The `podman network create` command now supports setting bridge MTU and VLAN through the `--opt` option .
- The `podman container checkpoint` and `podman container restore` commands can now checkpoint and restore containers that include volumes.
- The `podman container checkpoint` command now supports the `--with-previous` and `--pre-checkpoint` options, and the `podman container restore` command now support the `--import-previous` option. These add support for two-step checkpointing with lowered dump times.
- The `podman push` command can now push manifest lists. Podman will first attempt to push as an image, then fall back to pushing as a manifest list if that fails.
- The `podman generate kube` command can now be run on multiple containers at once, and will generate a single pod containing all of them.
- The `podman generate kube` and `podman play kube` commands now support Kubernetes DNS configuration, and will preserve custom DNS configuration when exporting or importing YAML .
- The `podman generate kube` command now properly supports generating YAML for containers and pods creating using host networking (`--net=host`) .
- The `podman kill` command now supports a `--cidfile` option to kill containers given a file containing the container's ID .
- The `podman pod create` command now supports the `--net=none` option .
- The `podman volume create` command can now specify volume UID and GID as options with the `UID` and `GID` fields passed to the the `--opt` option.
- Initial support has been added for Docker Volume Plugins. Podman can now define available plugins in `containers.conf` and use them to create volumes with `podman volume create --driver`.
- The `podman run` and `podman create` commands now support a new option, `--platform`, to specify the platform of the image to be used when creating the container.
- The `--security-opt` option to `podman run` and `podman create` now supports the `systempaths=unconfined` option to unrestrict access to all paths in the container, as well as `mask` and `unmask` options to allow more granular restriction of container paths.
- The `podman stats --format` command now supports a new format specified, `MemUsageBytes`, which prints the raw bytes of memory consumed by a container without human-readable formatting [#8945].
- The `podman ps` command can now filter containers based on what pod they are joined to via the `pod` filter .
- The `podman pod ps` command can now filter pods based on what networks they are joined to via the `network` filter.
- The `podman pod ps` command can now print information on what networks a pod is joined to via the `.Networks` specifier to the `--format` option.
- The `podman system prune` command now supports filtering what containers, pods, images, and volumes will be pruned.
- The `podman volume prune` commands now supports filtering what volumes will be pruned.
- The `podman system prune` command now includes information on space reclaimed .
- The `podman info` command will now properly print information about packages in use on Gentoo and Arch systems.
- The `containers.conf` file now contains an option for disabling creation of a new kernel keyring on container creation .
- The `podman image sign` command can now sign multi-arch images by producing a signature for each image in a given manifest list.
- The `podman image sign` command, when run as rootless, now supports per-user registry configuration files in `$HOME/.config/containers/registries.d`.
- Configuration options for `slirp4netns` can now be set system-wide via the `NetworkCmdOptions` configuration option in `containers.conf`.
- The MTU of `slirp4netns` can now be configured via the `mtu=` network command option (e.g. `podman run --net slirp4netns:mtu=9000`).

Security:

- A fix for CVE-2021-20199 is included. Podman between v1.8.0 and v2.2.1 used `127.0.0.1` as the source address for all traffic forwarded into rootless containers by a forwarded port; this has been changed to address the issue. (bsc#1181640)

Changes:

- Shortname aliasing support has now been turned on by default. All Podman commands that must pull an image will, if a TTY is available, prompt the user about what image to pull.
- The `podman load` command no longer accepts a `NAME[:TAG]` argument. The presence of this argument broke CLI compatibility with Docker by making `docker load` commands unusable with Podman .
- The Go bindings for the HTTP API have been rewritten with a focus on limiting dependency footprint and improving extensibility. Read more [here].
- The legacy Varlink API has been completely removed from Podman.
- The default log level for Podman has been changed from Error to Warn.
- The `podman network create` command can now create `macvlan` networks using the `--driver macvlan` option for Docker compatibility. The existing `--macvlan` flag has been deprecated and will be removed in Podman 4.0 some time next year.
- The `podman inspect` command has had the `LogPath` and `LogTag` fields moved into the `LogConfig` structure (from the root of the Inspect structure). The maximum size of the log file is also included.
- The `podman generate systemd` command no longer generates unit files using the deprecated `KillMode=none` option .
- The `podman stop` command now releases the container lock while waiting for it to stop - as such, commands like `podman ps` will no longer block until `podman stop` completes .
- Networks created with `podman network create --internal` no longer use the `dnsname` plugin. This configuration never functioned as expected.
- Error messages for the remote Podman client have been improved when it cannot connect to a Podman service.
- Error messages for `podman run` when an invalid SELinux is specified have been improved.
- Rootless Podman features improved support for containers with a single user mapped into the rootless user namespace.
- Pod infra containers now respect default sysctls specified in `containers.conf` allowing for advanced configuration of the namespaces they will share.
- SSH public key handling for remote Podman has been improved.
### Bugfixes
- Fixed a bug where the `podman history --no-trunc` command would truncate the `Created By` field .
- Fixed a bug where root containers that did not explicitly specify a CNI network to join did not generate an entry for the network in use in the `Networks` field of the output of `podman inspect` .
- Fixed a bug where, under some circumstances, container working directories specified by the image (via the `WORKDIR` instruction) but not present in the image, would not be created .
- Fixed a bug where the `podman generate systemd` command would generate invalid unit files if the container was creating using a command line that included doubled braces (`{{` and `}}`), e.g. `--log-opt-tag={{.Name}}` .
- Fixed a bug where the `podman generate systemd --new` command could generate unit files including invalid Podman commands if the container was created using merged short options (e.g. `podman run -dt`) .
- Fixed a bug where the `podman generate systemd --new` command could generate unit files that did not handle Podman commands including some special characters (e.g. `$`) ([#9176]
- Fixed a bug where rootless containers joining CNI networks could not set a static IP address .
- Fixed a bug where rootless containers joining CNI networks could not set network aliases .
- Fixed a bug where the remote client could, under some circumstances, not include the `Containerfile` when sending build context to the server .
- Fixed a bug where rootless Podman did not mount `/sys` as a new `sysfs` in some circumstances where it was acceptable.
- Fixed a bug where rootless containers that both joined a user namespace and a CNI networks would cause a segfault. These options are incompatible and now return an error.
- Fixed a bug where the `podman play kube` command did not properly handle `CMD` and `ARGS` from images .
- Fixed a bug where the `podman play kube` command did not properly handle environment variables from images .
- Fixed a bug where the `podman play kube` command did not properly print errors that occurred when starting containers.
- Fixed a bug where the `podman play kube` command errored when `hostNetwork` was used .
- Fixed a bug where the `podman play kube` command would always pull images when the `:latest` tag was specified, even if the image was available locally .
- Fixed a bug where the `podman play kube` command did not properly handle SELinux configuration, rending YAML with custom SELinux configuration unusable .
- Fixed a bug where the `podman generate kube` command incorrectly populated the `args` and `command` fields of generated YAML .
- Fixed a bug where containers in a pod would create a duplicate entry in the pod's shared `/etc/hosts` file every time the container restarted .
- Fixed a bug where the `podman search --list-tags` command did not support the `--format` option .
- Fixed a bug where the `http_proxy` option in `containers.conf` was not being respected, and instead was set unconditionally to true .
- Fixed a bug where rootless Podman could, on systems with a recent Conmon and users with a long username, fail to attach to containers .
- Fixed a bug where the `podman images` command would break and fail to display any images if an empty manifest list was present in storage .
- Fixed a bug where locale environment variables were not properly passed on to Conmon.
- Fixed a bug where Podman would not build on the MIPS architecture .
- Fixed a bug where rootless Podman could fail to properly configure user namespaces for rootless containers when the user specified a `--uidmap` option that included a mapping beginning with UID `0`.
- Fixed a bug where the `podman logs` command using the `k8s-file` backend did not properly handle partial log lines with a length of 1 .
- Fixed a bug where the `podman logs` command with the `--follow` option did not properly handle log rotation .
- Fixed a bug where user-specified `HOSTNAME` environment variables were overwritten by Podman .
- Fixed a bug where Podman would applied default sysctls from `containers.conf` in too many situations (e.g. applying network sysctls when the container shared its network with a pod).
- Fixed a bug where Podman did not properly handle cases where a secondary image store was in use and an image was present in both the secondary and primary stores .
- Fixed a bug where systemd-managed rootless Podman containers where the user in the container was not root could fail as the container's PID file was not accessible to systemd on the host .
- Fixed a bug where the `--privileged` option to `podman run` and `podman create` would, under some circumstances, not disable Seccomp .
- Fixed a bug where the `podman exec` command did not properly add capabilities when the container or exec session were run with `--privileged`.
- Fixed a bug where rootless Podman would use the `--enable-sandbox` option to `slirp4netns` unconditionally, even when `pivot_root` was disabled, rendering `slirp4netns` unusable when `pivot_root` was disabled .
- Fixed a bug where `podman build --logfile` did not actually write the build's log to the logfile.
- Fixed a bug where the `podman system service` command did not close STDIN, and could display user-interactive prompts .
- Fixed a bug where the `podman system reset` command could, under some circumstances, remove all the contents of the `XDG_RUNTIME_DIR` directory .
- Fixed a bug where the `podman network create` command created CNI configurations that did not include a default gateway .
- Fixed a bug where the `podman.service` systemd unit provided by default used the wrong service type, and would cause systemd to not correctly register the service as started .
- Fixed a bug where, if the `TMPDIR` environment variable was set for the container engine in `containers.conf`, it was being ignored.
- Fixed a bug where the `podman events` command did not properly handle future times given to the `--until` option .
- Fixed a bug where the `podman logs` command wrote container `STDERR` logs to `STDOUT` instead of `STDERR` .
- Fixed a bug where containers created from an image with multiple tags would report that they were created from the wrong tag .
- Fixed a bug where container capabilities were not set properly when the `--cap-add=all` and `--user` options to `podman create` and `podman run` were combined.
- Fixed a bug where the `--layers` option to `podman build` was nonfunctional .
- Fixed a bug where the `podman system prune` command did not act recursively, and thus would leave images, containers, pods, and volumes present that would be removed by a subsequent call to `podman system prune` .
- Fixed a bug where the `--publish` option to `podman run` and `podman create` did not properly handle ports specified as a range of ports with no host port specified .
- Fixed a bug where `--format` did not support JSON output for individual fields .
- Fixed a bug where the `podman stats` command would fail when run on root containers using the `slirp4netns` network mode .
- Fixed a bug where the Podman remote client would ask for a password even if the server's SSH daemon did not support password authentication .
- Fixed a bug where the `podman stats` command would fail if the system did not support one or more of the cgroup controllers Podman supports .
- Fixed a bug where the `--mount` option to `podman create` and `podman run` did not ignore the `consistency` mount option.
- Fixed a bug where failures during the resizing of a container's TTY would print the wrong error.
- Fixed a bug where the `podman network disconnect` command could cause the `podman inspect` command to fail for a container until it was restarted .
- Fixed a bug where containers created from a read-only rootfs (using the `--rootfs` option to `podman create` and `podman run`) would fail .
- Fixed a bug where specifying Go templates to the `--format` option to multiple Podman commands did not support the `join` function .
- Fixed a bug where the `podman rmi` command could, when run in parallel on multiple images, return `layer not known` errors .
- Fixed a bug where the `podman inspect` command on containers displayed unlimited ulimits incorrectly .
- Fixed a bug where Podman would fail to start when a volume was mounted over a directory in a container that contained symlinks that terminated outside the directory and its subdirectories .
### API
- All Libpod Pod APIs have been modified to properly report errors with individual containers. Cases where the operation as a whole succeeded but individual containers failed now report an HTTP 409 error .
- The Compat API for Containers now supports the Rename and Copy APIs.
- Fixed a bug where the Compat Prune APIs (for volumes, containers, and images) did not return the amount of space reclaimed in their responses.
- Fixed a bug where the Compat and Libpod Exec APIs for Containers would drop errors that occurred prior to the exec session successfully starting (e.g. a 'no such file' error if an invalid executable was passed) 
- Fixed a bug where the Volumes field in the Compat Create API for Containers was being ignored .
- Fixed a bug where the NetworkMode field in the Compat Create API for Containers was not handling some values, e.g. `container:`, correctly.
- Fixed a bug where the Compat Create API for Containers did not set container name properly.
- Fixed a bug where containers created using the Compat Create API unconditionally used Kubernetes file logging (the default specified in `containers.conf` is now used).
- Fixed a bug where the Compat Inspect API for Containers could include container states not recognized by Docker.
- Fixed a bug where Podman did not properly clean up after calls to the Events API when the `journald` backend was in use, resulting in a leak of file descriptors .
- Fixed a bug where the Libpod Pull endpoint for Images could fail with an `index out of range` error under certain circumstances .
- Fixed a bug where the Libpod Exists endpoint for Images could panic.
- Fixed a bug where the Compat List API for Containers did not support all filters .
- Fixed a bug where the Compat List API for Containers did not properly populate the Status field.
- Fixed a bug where the Compat and Libpod Resize APIs for Containers ignored the height and width parameters .
- Fixed a bug where the Compat Search API for Images returned an incorrectly-formatted JSON response .
- Fixed a bug where the Compat Load API for Images did not properly clean up temporary files.
- Fixed a bug where the Compat Create API for Networks could panic when an empty IPAM configuration was specified.
- Fixed a bug where the Compat Inspect and List APIs for Networks did not include Scope.
- Fixed a bug where the Compat Wait endpoint for Containers did not support the same wait conditions that Docker did.

		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-19"/>
	<updated date="2022-09-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1176804">SUSE bug 1176804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177598">SUSE bug 1177598</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181640">SUSE bug 1181640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182998">SUSE bug 1182998</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188520">SUSE bug 1188520</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189893">SUSE bug 1189893</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-14370/">CVE-2020-14370</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-15157/">CVE-2020-15157</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-20199/">CVE-2021-20199</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-20291/">CVE-2021-20291</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3602/">CVE-2021-3602</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708252" comment="libcontainers-common-20210626-150100.3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141070" version="1" class="patch">
	<metadata>
		<title>Security update for oniguruma (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1142847" ref_url="https://bugzilla.suse.com/1142847" source="BUGZILLA"/>
		<reference ref_id="1150130" ref_url="https://bugzilla.suse.com/1150130" source="BUGZILLA"/>
		<reference ref_id="1157805" ref_url="https://bugzilla.suse.com/1157805" source="BUGZILLA"/>
		<reference ref_id="1164550" ref_url="https://bugzilla.suse.com/1164550" source="BUGZILLA"/>
		<reference ref_id="1164569" ref_url="https://bugzilla.suse.com/1164569" source="BUGZILLA"/>
		<reference ref_id="1177179" ref_url="https://bugzilla.suse.com/1177179" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13224" ref_url="https://www.suse.com/security/cve/CVE-2019-13224/" source="CVE"/>
		<reference ref_id="CVE-2019-16163" ref_url="https://www.suse.com/security/cve/CVE-2019-16163/" source="CVE"/>
		<reference ref_id="CVE-2019-19203" ref_url="https://www.suse.com/security/cve/CVE-2019-19203/" source="CVE"/>
		<reference ref_id="CVE-2019-19204" ref_url="https://www.suse.com/security/cve/CVE-2019-19204/" source="CVE"/>
		<reference ref_id="CVE-2019-19246" ref_url="https://www.suse.com/security/cve/CVE-2019-19246/" source="CVE"/>
		<reference ref_id="CVE-2020-26159" ref_url="https://www.suse.com/security/cve/CVE-2020-26159/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3327-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012320.html" source="SUSE-SU"/>
		<description>
This update for oniguruma fixes the following issues:

- CVE-2019-19246: Fixed an out of bounds access during regular
  expression matching (bsc#1157805).
- CVE-2019-19204: Fixed an out of bounds access when compiling a
  crafted regular expression (bsc#1164569).
- CVE-2019-19203: Fixed an out of bounds access when performing a
  string search (bsc#1164550).
- CVE-2019-16163: Fixed an uncontrolled recursion issue when compiling
  a crafted regular expression, which could lead to denial of service (bsc#1150130).
- CVE-2020-26159: Fixed an off-by-one buffer overflow (bsc#1177179).
- CVE-2019-13224: Fixed a potential use-after-free when handling
  multiple different encodings (bsc#1142847).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-21"/>
	<updated date="2022-09-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1142847">SUSE bug 1142847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1150130">SUSE bug 1150130</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1157805">SUSE bug 1157805</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164550">SUSE bug 1164550</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1164569">SUSE bug 1164569</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177179">SUSE bug 1177179</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2019-13224/">CVE-2019-13224</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-16163/">CVE-2019-16163</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19203/">CVE-2019-19203</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19204/">CVE-2019-19204</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19246/">CVE-2019-19246</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-26159/">CVE-2020-26159</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009708026" comment="libonig4-6.7.0-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009708027" comment="oniguruma-devel-6.7.0-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141071" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202169" ref_url="https://bugzilla.suse.com/1202169" source="BUGZILLA"/>
		<reference ref_id="1202807" ref_url="https://bugzilla.suse.com/1202807" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32893" ref_url="https://www.suse.com/security/cve/CVE-2022-32893/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3352-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012351.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

- CVE-2022-32893: Fixed processing maliciously crafted web content may lead to arbitrary code execution (bsc#1202807).

Bugfixes:
- Fixed WebKitGTK not allowing to be used from non-main threads (bsc#1202169).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-23"/>
	<updated date="2022-09-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202169">SUSE bug 1202169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202807">SUSE bug 1202807</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32893/">CVE-2022-32893</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009714235" comment="libjavascriptcoregtk-4_0-18-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714236" comment="libwebkit2gtk-4_0-37-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714220" comment="libwebkit2gtk3-lang-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714237" comment="typelib-1_0-JavaScriptCore-4_0-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714238" comment="typelib-1_0-WebKit2-4_0-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714239" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714240" comment="webkit2gtk-4_0-injected-bundles-2.36.7-150000.3.112.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714241" comment="webkit2gtk3-devel-2.36.7-150000.3.112.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141072" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1177440" ref_url="https://bugzilla.suse.com/1177440" source="BUGZILLA"/>
		<reference ref_id="1180153" ref_url="https://bugzilla.suse.com/1180153" source="BUGZILLA"/>
		<reference ref_id="1188944" ref_url="https://bugzilla.suse.com/1188944" source="BUGZILLA"/>
		<reference ref_id="1191881" ref_url="https://bugzilla.suse.com/1191881" source="BUGZILLA"/>
		<reference ref_id="1194535" ref_url="https://bugzilla.suse.com/1194535" source="BUGZILLA"/>
		<reference ref_id="1196616" ref_url="https://bugzilla.suse.com/1196616" source="BUGZILLA"/>
		<reference ref_id="1197158" ref_url="https://bugzilla.suse.com/1197158" source="BUGZILLA"/>
		<reference ref_id="1199482" ref_url="https://bugzilla.suse.com/1199482" source="BUGZILLA"/>
		<reference ref_id="1199665" ref_url="https://bugzilla.suse.com/1199665" source="BUGZILLA"/>
		<reference ref_id="1201019" ref_url="https://bugzilla.suse.com/1201019" source="BUGZILLA"/>
		<reference ref_id="1201420" ref_url="https://bugzilla.suse.com/1201420" source="BUGZILLA"/>
		<reference ref_id="1201705" ref_url="https://bugzilla.suse.com/1201705" source="BUGZILLA"/>
		<reference ref_id="1201726" ref_url="https://bugzilla.suse.com/1201726" source="BUGZILLA"/>
		<reference ref_id="1201948" ref_url="https://bugzilla.suse.com/1201948" source="BUGZILLA"/>
		<reference ref_id="1202096" ref_url="https://bugzilla.suse.com/1202096" source="BUGZILLA"/>
		<reference ref_id="1202097" ref_url="https://bugzilla.suse.com/1202097" source="BUGZILLA"/>
		<reference ref_id="1202154" ref_url="https://bugzilla.suse.com/1202154" source="BUGZILLA"/>
		<reference ref_id="1202335" ref_url="https://bugzilla.suse.com/1202335" source="BUGZILLA"/>
		<reference ref_id="1202346" ref_url="https://bugzilla.suse.com/1202346" source="BUGZILLA"/>
		<reference ref_id="1202347" ref_url="https://bugzilla.suse.com/1202347" source="BUGZILLA"/>
		<reference ref_id="1202393" ref_url="https://bugzilla.suse.com/1202393" source="BUGZILLA"/>
		<reference ref_id="1202396" ref_url="https://bugzilla.suse.com/1202396" source="BUGZILLA"/>
		<reference ref_id="1202672" ref_url="https://bugzilla.suse.com/1202672" source="BUGZILLA"/>
		<reference ref_id="1202897" ref_url="https://bugzilla.suse.com/1202897" source="BUGZILLA"/>
		<reference ref_id="1202898" ref_url="https://bugzilla.suse.com/1202898" source="BUGZILLA"/>
		<reference ref_id="1203098" ref_url="https://bugzilla.suse.com/1203098" source="BUGZILLA"/>
		<reference ref_id="1203107" ref_url="https://bugzilla.suse.com/1203107" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36516" ref_url="https://www.suse.com/security/cve/CVE-2020-36516/" source="CVE"/>
		<reference ref_id="CVE-2021-4203" ref_url="https://www.suse.com/security/cve/CVE-2021-4203/" source="CVE"/>
		<reference ref_id="CVE-2022-1012" ref_url="https://www.suse.com/security/cve/CVE-2022-1012/" source="CVE"/>
		<reference ref_id="CVE-2022-20368" ref_url="https://www.suse.com/security/cve/CVE-2022-20368/" source="CVE"/>
		<reference ref_id="CVE-2022-20369" ref_url="https://www.suse.com/security/cve/CVE-2022-20369/" source="CVE"/>
		<reference ref_id="CVE-2022-21385" ref_url="https://www.suse.com/security/cve/CVE-2022-21385/" source="CVE"/>
		<reference ref_id="CVE-2022-2588" ref_url="https://www.suse.com/security/cve/CVE-2022-2588/" source="CVE"/>
		<reference ref_id="CVE-2022-26373" ref_url="https://www.suse.com/security/cve/CVE-2022-26373/" source="CVE"/>
		<reference ref_id="CVE-2022-2639" ref_url="https://www.suse.com/security/cve/CVE-2022-2639/" source="CVE"/>
		<reference ref_id="CVE-2022-2663" ref_url="https://www.suse.com/security/cve/CVE-2022-2663/" source="CVE"/>
		<reference ref_id="CVE-2022-29581" ref_url="https://www.suse.com/security/cve/CVE-2022-29581/" source="CVE"/>
		<reference ref_id="CVE-2022-2977" ref_url="https://www.suse.com/security/cve/CVE-2022-2977/" source="CVE"/>
		<reference ref_id="CVE-2022-3028" ref_url="https://www.suse.com/security/cve/CVE-2022-3028/" source="CVE"/>
		<reference ref_id="CVE-2022-36879" ref_url="https://www.suse.com/security/cve/CVE-2022-36879/" source="CVE"/>
		<reference ref_id="CVE-2022-39188" ref_url="https://www.suse.com/security/cve/CVE-2022-39188/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3408-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012386.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2020-36516: Fixed an issue in the mixed IPID assignment method where an attacker was able to inject data into or terminate a victim's TCP session (bnc#1196616).
- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bnc#1194535).
- CVE-2022-1012: Fixed a memory leak problem that was found in the TCP source port generation algorithm in net/ipv4/tcp.c (bnc#1199482).
- CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bsc#1202346).
- CVE-2022-20369: Fixed out of bounds write in v4l2_m2m_querybuf of v4l2-mem2mem.c (bnc#1202347).
- CVE-2022-21385: Fixed a flaw in net_rds_alloc_sgs() that allowed unprivileged local users to crash the machine (bnc#1202897).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-26373: Fixed non-transparent sharing of return predictor targets between contexts in some Intel Processors (bnc#1201726).
- CVE-2022-2639: Fixed an integer coercion error that was found in the openvswitch kernel module (bnc#1202154).
- CVE-2022-2663: Fixed an issue that was found in nf_conntrack_irc where the message handling could be confused and incorrectly matches the message (bnc#1202097).
- CVE-2022-29581: Fixed improper update of reference count vulnerability in net/sched that allowed a local attacker to cause privilege escalation to root (bnc#1199665).
- CVE-2022-2977: Fixed reference counting for struct tpm_chip (bsc#1202672).
- CVE-2022-3028: Fixed race condition that was found in the IP framework for transforming packets (XFRM subsystem) (bnc#1202898).
- CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bnc#1201948).
- CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has stale TLB entries (bnc#1203107).

The following non-security bugs were fixed:

- rpm: Fix parsing of rpm/macros.kernel-source on SLE12 (bsc#1201019).
- cifs: fix error paths in cifs_tree_connect() (bsc#1177440).
- cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (bsc#1188944).
- cifs: report error instead of invalid when revalidating a dentry fails (bsc#1177440).
- cifs: skip trailing separators of prefix paths (bsc#1188944).
- kernel-obs-build: include qemu_fw_cfg (boo#1201705)
- lightnvm: Remove lightnvm implemenation (bsc#1191881 bsc#1201420 ZDI-CAN-17325).
- md/bitmap: do not set sb values if can't pass sanity check (bsc#1197158).
- mm/rmap.c: do not reuse anon_vma if we just want a copy (git-fixes, bsc#1203098).
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (git-fixes, bsc#1203098). 
- net_sched: cls_route: disallow handle of 0 (bsc#1202393).
- net_sched: cls_route: disallow handle of 0 (bsc#1202393).
- objtool: Add --backtrace support (bsc#1202396).
- objtool: Add support for intra-function calls (bsc#1202396).
- objtool: Allow no-op CFI ops in alternatives (bsc#1202396).
- objtool: Convert insn type to enum (bsc#1202396).
- objtool: Do not use ignore flag for fake jumps (bsc#1202396).
- objtool: Fix !CFI insn_state propagation (bsc#1202396).
- objtool: Fix ORC vs alternatives (bsc#1202396).
- objtool: Fix sibling call detection (bsc#1202396).
- objtool: Make handle_insn_ops() unconditional (bsc#1202396).
- objtool: Remove INSN_STACK (bsc#1202396).
- objtool: Remove check preventing branches within alternative (bsc#1202396).
- objtool: Rename elf_open() to prevent conflict with libelf from elftoolchain (bsc#1202396).
- objtool: Rename struct cfi_state (bsc#1202396).
- objtool: Rework allocating stack_ops on decode (bsc#1202396).
- objtool: Rewrite alt-&gt;skip_orig (bsc#1202396).
- objtool: Set insn-&gt;func for alternatives (bsc#1202396).
- objtool: Support conditional retpolines (bsc#1202396).
- objtool: Support multiple stack_op per instruction (bsc#1202396).
- objtool: Track original function across branches (bsc#1202396).
- objtool: Uniquely identify alternative instruction groups (bsc#1202396).
- objtool: Use Elf_Scn typedef instead of assuming struct name (bsc#1202396).
- tcp: add some entropy in __inet_hash_connect() (bsc#1180153 bsc#1202335).
- tcp: change source port randomizarion at connect() time (bsc#1180153 bsc#1202335).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-26"/>
	<updated date="2022-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1177440">SUSE bug 1177440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180153">SUSE bug 1180153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188944">SUSE bug 1188944</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191881">SUSE bug 1191881</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194535">SUSE bug 1194535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196616">SUSE bug 1196616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197158">SUSE bug 1197158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199482">SUSE bug 1199482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199665">SUSE bug 1199665</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201019">SUSE bug 1201019</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201420">SUSE bug 1201420</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201705">SUSE bug 1201705</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201726">SUSE bug 1201726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201948">SUSE bug 1201948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202096">SUSE bug 1202096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202097">SUSE bug 1202097</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202154">SUSE bug 1202154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202335">SUSE bug 1202335</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202346">SUSE bug 1202346</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202347">SUSE bug 1202347</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202393">SUSE bug 1202393</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202396">SUSE bug 1202396</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202672">SUSE bug 1202672</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202897">SUSE bug 1202897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202898">SUSE bug 1202898</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203098">SUSE bug 1203098</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203107">SUSE bug 1203107</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-36516/">CVE-2020-36516</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4203/">CVE-2021-4203</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1012/">CVE-2022-1012</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20368/">CVE-2022-20368</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20369/">CVE-2022-20369</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21385/">CVE-2022-21385</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2588/">CVE-2022-2588</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26373/">CVE-2022-26373</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-2639/">CVE-2022-2639</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-2663/">CVE-2022-2663</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29581/">CVE-2022-29581</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2977/">CVE-2022-2977</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3028/">CVE-2022-3028</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-36879/">CVE-2022-36879</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-39188/">CVE-2022-39188</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715700" comment="kernel-default-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715701" comment="kernel-default-base-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715702" comment="kernel-default-devel-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710986" comment="kernel-default-man-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710924" comment="kernel-devel-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710925" comment="kernel-docs-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710926" comment="kernel-macros-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715703" comment="kernel-obs-build-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710928" comment="kernel-source-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715704" comment="kernel-syms-4.12.14-150100.197.123.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715705" comment="reiserfs-kmp-default-4.12.14-150100.197.123.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141073" version="1" class="patch">
	<metadata>
		<title>Security update for dpdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202903" ref_url="https://bugzilla.suse.com/1202903" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2132" ref_url="https://www.suse.com/security/cve/CVE-2022-2132/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3430-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012404.html" source="SUSE-SU"/>
		<description>
This update for dpdk fixes the following issues:

- CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs (bsc#1202903).    
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-27"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202903">SUSE bug 1202903</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2132/">CVE-2022-2132</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715861" comment="dpdk-18.11.9-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715862" comment="dpdk-devel-18.11.9-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715863" comment="dpdk-kmp-default-18.11.9_k4.12.14_150100.197.120-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715864" comment="dpdk-tools-18.11.9-150100.4.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710749" comment="libdpdk-18_11-18.11.9-150100.4.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141074" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203477" ref_url="https://bugzilla.suse.com/1203477" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40956" ref_url="https://www.suse.com/security/cve/CVE-2022-40956/" source="CVE"/>
		<reference ref_id="CVE-2022-40957" ref_url="https://www.suse.com/security/cve/CVE-2022-40957/" source="CVE"/>
		<reference ref_id="CVE-2022-40958" ref_url="https://www.suse.com/security/cve/CVE-2022-40958/" source="CVE"/>
		<reference ref_id="CVE-2022-40959" ref_url="https://www.suse.com/security/cve/CVE-2022-40959/" source="CVE"/>
		<reference ref_id="CVE-2022-40960" ref_url="https://www.suse.com/security/cve/CVE-2022-40960/" source="CVE"/>
		<reference ref_id="CVE-2022-40962" ref_url="https://www.suse.com/security/cve/CVE-2022-40962/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3441-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012407.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

  Mozilla Firefox was updated from 102.2.0esr to 102.3.0esr (bsc#1203477):

  - CVE-2022-40959: Fixed bypassing FeaturePolicy restrictions on transient pages.
  - CVE-2022-40960: Fixed data-race when parsing non-UTF-8 URLs in threads.
  - CVE-2022-40958: Fixed bypassing secure context restriction for cookies with __Host and __Secure prefix.
  - CVE-2022-40956: Fixed content-security-policy base-uri bypass.
  - CVE-2022-40957: Fixed incoherent instruction cache when building WASM on ARM64.
  - CVE-2022-40962: Fixed memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-27"/>
	<updated date="2022-09-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203477">SUSE bug 1203477</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-40956/">CVE-2022-40956</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-40957/">CVE-2022-40957</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-40958/">CVE-2022-40958</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40959/">CVE-2022-40959</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-40960/">CVE-2022-40960</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40962/">CVE-2022-40962</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009714231" comment="MozillaFirefox-102.3.0-150000.150.59.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714232" comment="MozillaFirefox-devel-102.3.0-150000.150.59.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714233" comment="MozillaFirefox-translations-common-102.3.0-150000.150.59.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714234" comment="MozillaFirefox-translations-other-102.3.0-150000.150.59.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141075" version="1" class="patch">
	<metadata>
		<title>Security update for libostree (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201770" ref_url="https://bugzilla.suse.com/1201770" source="BUGZILLA"/>
		<reference ref_id="CVE-2014-9862" ref_url="https://www.suse.com/security/cve/CVE-2014-9862/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3455-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012442.html" source="SUSE-SU"/>
		<description>
This update for libostree fixes the following issues:

- CVE-2014-9862: Fixed arbitrary write on heap vulnerability (bsc#1201770).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-28"/>
	<updated date="2022-09-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201770">SUSE bug 1201770</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2014-9862/">CVE-2014-9862</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716009" comment="libostree-2018.9-150100.7.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716010" comment="libostree-1-1-2018.9-150100.7.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716011" comment="libostree-devel-2018.9-150100.7.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716012" comment="typelib-1_0-OSTree-1_0-2018.9-150100.7.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141076" version="1" class="patch">
	<metadata>
		<title>Security update for vsftpd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1021387" ref_url="https://bugzilla.suse.com/1021387" source="BUGZILLA"/>
		<reference ref_id="1052900" ref_url="https://bugzilla.suse.com/1052900" source="BUGZILLA"/>
		<reference ref_id="1181400" ref_url="https://bugzilla.suse.com/1181400" source="BUGZILLA"/>
		<reference ref_id="1187678" ref_url="https://bugzilla.suse.com/1187678" source="BUGZILLA"/>
		<reference ref_id="1187686" ref_url="https://bugzilla.suse.com/1187686" source="BUGZILLA"/>
		<reference ref_id="786024" ref_url="https://bugzilla.suse.com/786024" source="BUGZILLA"/>
		<reference ref_id="971784" ref_url="https://bugzilla.suse.com/971784" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3618" ref_url="https://www.suse.com/security/cve/CVE-2021-3618/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3458-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012444.html" source="SUSE-SU"/>
		<description>
This update for vsftpd fixes the following issues:

- CVE-2021-3618: Enforced security checks against ALPACA attack (PM-3322, jsc#SLE-23895, bsc#1187686, bsc#1187678).
- Added hardening to systemd services (bsc#1181400).

Bugfixes:
- Fixed a seccomp failure in FIPS mode when SSL was enabled (bsc#1052900).
- Allowed wait4() to be called so that the broker can wait for its child processes (bsc#1021387).
- Fixed hang when using seccomp and syslog (bsc#971784).
- Allowed sendto() syscall when /dev/log support is enabled (bsc#786024).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-28"/>
	<updated date="2022-09-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1021387">SUSE bug 1021387</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1052900">SUSE bug 1052900</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181400">SUSE bug 1181400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187678">SUSE bug 1187678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187686">SUSE bug 1187686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/786024">SUSE bug 786024</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/971784">SUSE bug 971784</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3618/">CVE-2021-3618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009713849" comment="vsftpd-3.0.5-150000.7.19.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141077" version="1" class="patch">
	<metadata>
		<title>Security update for buildah (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1167864" ref_url="https://bugzilla.suse.com/1167864" source="BUGZILLA"/>
		<reference ref_id="1181961" ref_url="https://bugzilla.suse.com/1181961" source="BUGZILLA"/>
		<reference ref_id="1183043" ref_url="https://bugzilla.suse.com/1183043" source="BUGZILLA"/>
		<reference ref_id="1192999" ref_url="https://bugzilla.suse.com/1192999" source="BUGZILLA"/>
		<reference ref_id="1197870" ref_url="https://bugzilla.suse.com/1197870" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10696" ref_url="https://www.suse.com/security/cve/CVE-2020-10696/" source="CVE"/>
		<reference ref_id="CVE-2021-20206" ref_url="https://www.suse.com/security/cve/CVE-2021-20206/" source="CVE"/>
		<reference ref_id="CVE-2022-27651" ref_url="https://www.suse.com/security/cve/CVE-2022-27651/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-September/012462.html" source="SUSE-SU"/>
		<description>
This update for buildah fixes the following issues:

- Updated to version 1.26.0:
  - CVE-2022-27651: Fixed an issue where containers were incorrectly started with non-empty inheritable Linux process capabilities (bsc#1197870).
  - CVE-2021-20206: Fixed an issue in libcni that could allow an attacker to execute arbitrary binaries on the host (bsc#1181961).
  - CVE-2020-10696: Fixed an issue that could lead to files being overwritten during the image building process (bsc#1167864).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-09-30"/>
	<updated date="2022-09-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1167864">SUSE bug 1167864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181961">SUSE bug 1181961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1183043">SUSE bug 1183043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192999">SUSE bug 1192999</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197870">SUSE bug 1197870</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-10696/">CVE-2020-10696</cve>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20206/">CVE-2021-20206</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-27651/">CVE-2022-27651</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716274" comment="buildah-1.25.1-150100.3.13.12 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141078" version="1" class="patch">
	<metadata>
		<title>Security update for libcroco (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1171685" ref_url="https://bugzilla.suse.com/1171685" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-12825" ref_url="https://www.suse.com/security/cve/CVE-2020-12825/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012482.html" source="SUSE-SU"/>
		<description>
This update for libcroco fixes the following issues:

- CVE-2020-12825: Fixed recursion issue in block and any productions (bsc#1171685).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-04"/>
	<updated date="2022-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1171685">SUSE bug 1171685</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2020-12825/">CVE-2020-12825</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715670" comment="libcroco-0.6.12-150000.4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715671" comment="libcroco-0_6-3-0.6.12-150000.4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715653" comment="libcroco-0_6-3-32bit-0.6.12-150000.4.6.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715672" comment="libcroco-devel-0.6.12-150000.4.6.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141079" version="1" class="patch">
	<metadata>
		<title>Security update for libgit2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1158790" ref_url="https://bugzilla.suse.com/1158790" source="BUGZILLA"/>
		<reference ref_id="1158981" ref_url="https://bugzilla.suse.com/1158981" source="BUGZILLA"/>
		<reference ref_id="1198234" ref_url="https://bugzilla.suse.com/1198234" source="BUGZILLA"/>
		<reference ref_id="1201431" ref_url="https://bugzilla.suse.com/1201431" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1352" ref_url="https://www.suse.com/security/cve/CVE-2019-1352/" source="CVE"/>
		<reference ref_id="CVE-2022-24765" ref_url="https://www.suse.com/security/cve/CVE-2022-24765/" source="CVE"/>
		<reference ref_id="CVE-2022-29187" ref_url="https://www.suse.com/security/cve/CVE-2022-29187/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3495-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012490.html" source="SUSE-SU"/>
		<description>
This update for libgit2 fixes the following issues:

- Fixed DoS by oob write in constructed commit object with a very large number of parents (bsc#1158981).
- CVE-2019-1352: Fixed git on Windows being unaware of NTFS Alternate Data Streams (bnc#1158790). 
- CVE-2022-24765: Fixed potential command injection via git worktree (bsc#1198234).
- CVE-2022-29187: Fixed incomplete fix for CVE-2022-24765 (bsc#1201431).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-04"/>
	<updated date="2022-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1158790">SUSE bug 1158790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1158981">SUSE bug 1158981</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198234">SUSE bug 1198234</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201431">SUSE bug 1201431</bugzilla>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-1352/">CVE-2019-1352</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24765/">CVE-2022-24765</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29187/">CVE-2022-29187</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710961" comment="libgit2-26-0.26.8-150000.3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710962" comment="libgit2-devel-0.26.8-150000.3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141080" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203530" ref_url="https://bugzilla.suse.com/1203530" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32886" ref_url="https://www.suse.com/security/cve/CVE-2022-32886/" source="CVE"/>
		<reference ref_id="CVE-2022-32912" ref_url="https://www.suse.com/security/cve/CVE-2022-32912/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3502-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012491.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Updated to version 2.36.8 (bsc#1203530):
  - CVE-2022-32886: Fixed a buffer overflow issue that could potentially lead to code execution.
  - CVE-2022-32912: Fixed an out-of-bounds read that could potentially lead to code execution.

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-04"/>
	<updated date="2022-10-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203530">SUSE bug 1203530</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32886/">CVE-2022-32886</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32912/">CVE-2022-32912</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715673" comment="libjavascriptcoregtk-4_0-18-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715674" comment="libwebkit2gtk-4_0-37-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715657" comment="libwebkit2gtk3-lang-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715675" comment="typelib-1_0-JavaScriptCore-4_0-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715676" comment="typelib-1_0-WebKit2-4_0-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715677" comment="typelib-1_0-WebKit2WebExtension-4_0-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715678" comment="webkit2gtk-4_0-injected-bundles-2.36.8-150000.3.115.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715679" comment="webkit2gtk3-devel-2.36.8-150000.3.115.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141081" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202624" ref_url="https://bugzilla.suse.com/1202624" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28861" ref_url="https://www.suse.com/security/cve/CVE-2021-28861/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3512-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012543.html" source="SUSE-SU"/>
		<description>
This update for python fixes the following issues:
                                                                                                                                                                                               
- CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).                                                                    
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202624">SUSE bug 1202624</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28861/">CVE-2021-28861</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009714325" comment="libpython2_7-1_0-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714326" comment="python-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714327" comment="python-base-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714329" comment="python-curses-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714330" comment="python-devel-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714331" comment="python-gdbm-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714328" comment="python-tk-2.7.18-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714332" comment="python-xml-2.7.18-150000.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141082" version="1" class="patch">
	<metadata>
		<title>Security update for jdom (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187446" ref_url="https://bugzilla.suse.com/1187446" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-33813" ref_url="https://www.suse.com/security/cve/CVE-2021-33813/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3547-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012660.html" source="SUSE-SU"/>
		<description>
This update for jdom fixes the following issues:

  - CVE-2021-33813: Fixed XXE issue in SAXBuilder can cause a denial of service via a crafted HTTP request (bsc#1187446).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187446">SUSE bug 1187446</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33813/">CVE-2021-33813</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009717154" comment="jaxen-1.1.1-150000.5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717155" comment="jdom-1.1-150000.5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141083" version="1" class="patch">
	<metadata>
		<title>Security update for cyrus-sasl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1159635" ref_url="https://bugzilla.suse.com/1159635" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-19906" ref_url="https://www.suse.com/security/cve/CVE-2019-19906/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3549-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012519.html" source="SUSE-SU"/>
		<description>
This update for cyrus-sasl fixes the following issues:

- CVE-2019-19906: Fixed an out-of-bounds write that could lead to unauthenticated remote denial of service in OpenLDAP via a malformed LDAP packet (bsc#1159635).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-07"/>
	<updated date="2022-10-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1159635">SUSE bug 1159635</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-19906/">CVE-2019-19906</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009710951" comment="cyrus-sasl-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710904" comment="cyrus-sasl-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710952" comment="cyrus-sasl-crammd5-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710906" comment="cyrus-sasl-crammd5-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710953" comment="cyrus-sasl-devel-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710954" comment="cyrus-sasl-digestmd5-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710909" comment="cyrus-sasl-digestmd5-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710955" comment="cyrus-sasl-gssapi-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710911" comment="cyrus-sasl-gssapi-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710956" comment="cyrus-sasl-otp-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710957" comment="cyrus-sasl-plain-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710914" comment="cyrus-sasl-plain-32bit-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710958" comment="cyrus-sasl-saslauthd-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710959" comment="cyrus-sasl-sqlauxprop-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710960" comment="libsasl2-3-2.1.26-150000.5.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009710918" comment="libsasl2-3-32bit-2.1.26-150000.5.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141084" version="1" class="patch">
	<metadata>
		<title>Security update for python-Babel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185768" ref_url="https://bugzilla.suse.com/1185768" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-42771" ref_url="https://www.suse.com/security/cve/CVE-2021-42771/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3590-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012537.html" source="SUSE-SU"/>
		<description>
This update for python-Babel fixes the following issues:

- CVE-2021-42771: Fixed relative path traversal (bsc#1185768).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-14"/>
	<updated date="2022-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185768">SUSE bug 1185768</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-42771/">CVE-2021-42771</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715848" comment="python2-Babel-2.5.1-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715849" comment="python3-Babel-2.5.1-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141085" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202624" ref_url="https://bugzilla.suse.com/1202624" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28861" ref_url="https://www.suse.com/security/cve/CVE-2021-28861/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012541.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-14"/>
	<updated date="2022-10-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202624">SUSE bug 1202624</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28861/">CVE-2021-28861</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716425" comment="libpython3_6m1_0-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716426" comment="python3-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716427" comment="python3-base-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716428" comment="python3-curses-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716429" comment="python3-dbm-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716430" comment="python3-devel-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716431" comment="python3-idle-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717654" comment="python3-testsuite-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716432" comment="python3-tk-3.6.15-150000.3.109.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716433" comment="python3-tools-3.6.15-150000.3.109.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141086" version="1" class="patch">
	<metadata>
		<title>Security update for squid (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203677" ref_url="https://bugzilla.suse.com/1203677" source="BUGZILLA"/>
		<reference ref_id="1203680" ref_url="https://bugzilla.suse.com/1203680" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41317" ref_url="https://www.suse.com/security/cve/CVE-2022-41317/" source="CVE"/>
		<reference ref_id="CVE-2022-41318" ref_url="https://www.suse.com/security/cve/CVE-2022-41318/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3596-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012545.html" source="SUSE-SU"/>
		<description>
This update for squid fixes the following issues:

  - CVE-2022-41317: Fixed exposure of sensitive information in cache manager (bsc#1203677).
  - CVE-2022-41318: Fixed buffer overread in SSPI and SMB Authentication (bsc#1203680).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203677">SUSE bug 1203677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203680">SUSE bug 1203680</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-41317/">CVE-2022-41317</cve>
	<cve impact="important" cvss3="8.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-41318/">CVE-2022-41318</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715808" comment="squid-4.17-150000.5.35.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141087" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203438" ref_url="https://bugzilla.suse.com/1203438" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-40674" ref_url="https://www.suse.com/security/cve/CVE-2022-40674/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3597-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012544.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

- CVE-2022-40674: Fixed use-after-free in the doContent function in xmlparse.c (bsc#1203438).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203438">SUSE bug 1203438</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40674/">CVE-2022-40674</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009715803" comment="expat-2.2.5-150000.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715804" comment="libexpat-devel-2.2.5-150000.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715805" comment="libexpat1-2.2.5-150000.3.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009715806" comment="libexpat1-32bit-2.2.5-150000.3.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141088" version="1" class="patch">
	<metadata>
		<title>Security update for exiv2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1076579" ref_url="https://bugzilla.suse.com/1076579" source="BUGZILLA"/>
		<reference ref_id="1086798" ref_url="https://bugzilla.suse.com/1086798" source="BUGZILLA"/>
		<reference ref_id="1086810" ref_url="https://bugzilla.suse.com/1086810" source="BUGZILLA"/>
		<reference ref_id="1092096" ref_url="https://bugzilla.suse.com/1092096" source="BUGZILLA"/>
		<reference ref_id="1114690" ref_url="https://bugzilla.suse.com/1114690" source="BUGZILLA"/>
		<reference ref_id="1185447" ref_url="https://bugzilla.suse.com/1185447" source="BUGZILLA"/>
		<reference ref_id="1186192" ref_url="https://bugzilla.suse.com/1186192" source="BUGZILLA"/>
		<reference ref_id="1188733" ref_url="https://bugzilla.suse.com/1188733" source="BUGZILLA"/>
		<reference ref_id="1188756" ref_url="https://bugzilla.suse.com/1188756" source="BUGZILLA"/>
		<reference ref_id="1189330" ref_url="https://bugzilla.suse.com/1189330" source="BUGZILLA"/>
		<reference ref_id="1189331" ref_url="https://bugzilla.suse.com/1189331" source="BUGZILLA"/>
		<reference ref_id="1189332" ref_url="https://bugzilla.suse.com/1189332" source="BUGZILLA"/>
		<reference ref_id="1189333" ref_url="https://bugzilla.suse.com/1189333" source="BUGZILLA"/>
		<reference ref_id="1189636" ref_url="https://bugzilla.suse.com/1189636" source="BUGZILLA"/>
		<reference ref_id="1189780" ref_url="https://bugzilla.suse.com/1189780" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-10772" ref_url="https://www.suse.com/security/cve/CVE-2018-10772/" source="CVE"/>
		<reference ref_id="CVE-2018-18915" ref_url="https://www.suse.com/security/cve/CVE-2018-18915/" source="CVE"/>
		<reference ref_id="CVE-2018-5772" ref_url="https://www.suse.com/security/cve/CVE-2018-5772/" source="CVE"/>
		<reference ref_id="CVE-2018-8976" ref_url="https://www.suse.com/security/cve/CVE-2018-8976/" source="CVE"/>
		<reference ref_id="CVE-2018-8977" ref_url="https://www.suse.com/security/cve/CVE-2018-8977/" source="CVE"/>
		<reference ref_id="CVE-2020-18898" ref_url="https://www.suse.com/security/cve/CVE-2020-18898/" source="CVE"/>
		<reference ref_id="CVE-2020-18899" ref_url="https://www.suse.com/security/cve/CVE-2020-18899/" source="CVE"/>
		<reference ref_id="CVE-2021-29470" ref_url="https://www.suse.com/security/cve/CVE-2021-29470/" source="CVE"/>
		<reference ref_id="CVE-2021-31291" ref_url="https://www.suse.com/security/cve/CVE-2021-31291/" source="CVE"/>
		<reference ref_id="CVE-2021-31292" ref_url="https://www.suse.com/security/cve/CVE-2021-31292/" source="CVE"/>
		<reference ref_id="CVE-2021-32617" ref_url="https://www.suse.com/security/cve/CVE-2021-32617/" source="CVE"/>
		<reference ref_id="CVE-2021-37618" ref_url="https://www.suse.com/security/cve/CVE-2021-37618/" source="CVE"/>
		<reference ref_id="CVE-2021-37619" ref_url="https://www.suse.com/security/cve/CVE-2021-37619/" source="CVE"/>
		<reference ref_id="CVE-2021-37620" ref_url="https://www.suse.com/security/cve/CVE-2021-37620/" source="CVE"/>
		<reference ref_id="CVE-2021-37621" ref_url="https://www.suse.com/security/cve/CVE-2021-37621/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3598-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-October/025597.html" source="SUSE-SU"/>
		<description>
This update for exiv2 fixes the following issues:

- CVE-2021-37621: Fixed denial of service due to infinite loop in Image:printIFDStructure (bsc#1189333).
- CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read() (bsc#1189332).
- CVE-2021-37619: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1189331).
- CVE-2021-37618: Fixed out-of-bounds read in Exiv2:Jp2Image:printStructure (bsc#1189330).
- CVE-2021-32617: Fixed denial of service inside inefficient algorithm (quadratic complexity) (bsc#1186192).
- CVE-2021-31292: Fixed integer overflow in CrwMap:encode0x1810 (bsc#1188756).
- CVE-2021-31291: Fixed heap-based buffer overflow vulnerability in jp2image.cpp may lead to a denial of service (bsc#1188733).
- CVE-2021-29470: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1185447).
- CVE-2020-18899: Fixed uncontrolled memory allocation (bsc#1189636).
- CVE-2020-18898: Fixed remote denial of service in printIFDStructure function (bsc#1189780).
- CVE-2018-8977: Fixed remote denial of service in Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp (bsc#1086798).
- CVE-2018-8976: Fixed remote denial of service in image.cpp Exiv2::Internal::stringFormat via out-of-bounds read (bsc#1086810).
- CVE-2018-5772: Fixed segmentation fault caused by uncontrolled recursion inthe Exiv2::Image::printIFDStructure (bsc#1076579).
- CVE-2018-18915: Fixed an infinite loop in the Exiv2:Image:printIFDStructure function (bsc#1114690).
- CVE-2018-10772: Fixed segmentation fault when the function Exiv2::tEXtToDataBuf() is finished (bsc#1092096).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-17"/>
	<updated date="2022-10-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076579">SUSE bug 1076579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086798">SUSE bug 1086798</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1086810">SUSE bug 1086810</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1092096">SUSE bug 1092096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114690">SUSE bug 1114690</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185447">SUSE bug 1185447</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186192">SUSE bug 1186192</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188733">SUSE bug 1188733</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188756">SUSE bug 1188756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189330">SUSE bug 1189330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189331">SUSE bug 1189331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189332">SUSE bug 1189332</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189333">SUSE bug 1189333</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189636">SUSE bug 1189636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189780">SUSE bug 1189780</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-10772/">CVE-2018-10772</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-18915/">CVE-2018-18915</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-5772/">CVE-2018-5772</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8976/">CVE-2018-8976</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-8977/">CVE-2018-8977</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-18898/">CVE-2020-18898</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-18899/">CVE-2020-18899</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29470/">CVE-2021-29470</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31291/">CVE-2021-31291</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-31292/">CVE-2021-31292</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-32617/">CVE-2021-32617</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-37618/">CVE-2021-37618</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-37619/">CVE-2021-37619</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-37620/">CVE-2021-37620</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-37621/">CVE-2021-37621</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716207" comment="libexiv2-26-0.26-150000.6.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716208" comment="libexiv2-devel-0.26-150000.6.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141089" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1071995" ref_url="https://bugzilla.suse.com/1071995" source="BUGZILLA"/>
		<reference ref_id="1124431" ref_url="https://bugzilla.suse.com/1124431" source="BUGZILLA"/>
		<reference ref_id="1167162" ref_url="https://bugzilla.suse.com/1167162" source="BUGZILLA"/>
		<reference ref_id="1169514" ref_url="https://bugzilla.suse.com/1169514" source="BUGZILLA"/>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1179599" ref_url="https://bugzilla.suse.com/1179599" source="BUGZILLA"/>
		<reference ref_id="1184804" ref_url="https://bugzilla.suse.com/1184804" source="BUGZILLA"/>
		<reference ref_id="1185377" ref_url="https://bugzilla.suse.com/1185377" source="BUGZILLA"/>
		<reference ref_id="1186207" ref_url="https://bugzilla.suse.com/1186207" source="BUGZILLA"/>
		<reference ref_id="1186222" ref_url="https://bugzilla.suse.com/1186222" source="BUGZILLA"/>
		<reference ref_id="1187167" ref_url="https://bugzilla.suse.com/1187167" source="BUGZILLA"/>
		<reference ref_id="1189305" ref_url="https://bugzilla.suse.com/1189305" source="BUGZILLA"/>
		<reference ref_id="1189841" ref_url="https://bugzilla.suse.com/1189841" source="BUGZILLA"/>
		<reference ref_id="1190358" ref_url="https://bugzilla.suse.com/1190358" source="BUGZILLA"/>
		<reference ref_id="1190428" ref_url="https://bugzilla.suse.com/1190428" source="BUGZILLA"/>
		<reference ref_id="1191229" ref_url="https://bugzilla.suse.com/1191229" source="BUGZILLA"/>
		<reference ref_id="1191241" ref_url="https://bugzilla.suse.com/1191241" source="BUGZILLA"/>
		<reference ref_id="1191384" ref_url="https://bugzilla.suse.com/1191384" source="BUGZILLA"/>
		<reference ref_id="1191731" ref_url="https://bugzilla.suse.com/1191731" source="BUGZILLA"/>
		<reference ref_id="1192032" ref_url="https://bugzilla.suse.com/1192032" source="BUGZILLA"/>
		<reference ref_id="1192267" ref_url="https://bugzilla.suse.com/1192267" source="BUGZILLA"/>
		<reference ref_id="1192740" ref_url="https://bugzilla.suse.com/1192740" source="BUGZILLA"/>
		<reference ref_id="1192845" ref_url="https://bugzilla.suse.com/1192845" source="BUGZILLA"/>
		<reference ref_id="1192847" ref_url="https://bugzilla.suse.com/1192847" source="BUGZILLA"/>
		<reference ref_id="1192877" ref_url="https://bugzilla.suse.com/1192877" source="BUGZILLA"/>
		<reference ref_id="1192946" ref_url="https://bugzilla.suse.com/1192946" source="BUGZILLA"/>
		<reference ref_id="1193306" ref_url="https://bugzilla.suse.com/1193306" source="BUGZILLA"/>
		<reference ref_id="1193440" ref_url="https://bugzilla.suse.com/1193440" source="BUGZILLA"/>
		<reference ref_id="1193442" ref_url="https://bugzilla.suse.com/1193442" source="BUGZILLA"/>
		<reference ref_id="1193575" ref_url="https://bugzilla.suse.com/1193575" source="BUGZILLA"/>
		<reference ref_id="1193669" ref_url="https://bugzilla.suse.com/1193669" source="BUGZILLA"/>
		<reference ref_id="1193727" ref_url="https://bugzilla.suse.com/1193727" source="BUGZILLA"/>
		<reference ref_id="1193731" ref_url="https://bugzilla.suse.com/1193731" source="BUGZILLA"/>
		<reference ref_id="1193767" ref_url="https://bugzilla.suse.com/1193767" source="BUGZILLA"/>
		<reference ref_id="1193861" ref_url="https://bugzilla.suse.com/1193861" source="BUGZILLA"/>
		<reference ref_id="1193864" ref_url="https://bugzilla.suse.com/1193864" source="BUGZILLA"/>
		<reference ref_id="1193867" ref_url="https://bugzilla.suse.com/1193867" source="BUGZILLA"/>
		<reference ref_id="1193927" ref_url="https://bugzilla.suse.com/1193927" source="BUGZILLA"/>
		<reference ref_id="1194001" ref_url="https://bugzilla.suse.com/1194001" source="BUGZILLA"/>
		<reference ref_id="1194048" ref_url="https://bugzilla.suse.com/1194048" source="BUGZILLA"/>
		<reference ref_id="1194087" ref_url="https://bugzilla.suse.com/1194087" source="BUGZILLA"/>
		<reference ref_id="1194227" ref_url="https://bugzilla.suse.com/1194227" source="BUGZILLA"/>
		<reference ref_id="1194302" ref_url="https://bugzilla.suse.com/1194302" source="BUGZILLA"/>
		<reference ref_id="1194516" ref_url="https://bugzilla.suse.com/1194516" source="BUGZILLA"/>
		<reference ref_id="1194529" ref_url="https://bugzilla.suse.com/1194529" source="BUGZILLA"/>
		<reference ref_id="1194880" ref_url="https://bugzilla.suse.com/1194880" source="BUGZILLA"/>
		<reference ref_id="1194888" ref_url="https://bugzilla.suse.com/1194888" source="BUGZILLA"/>
		<reference ref_id="1194985" ref_url="https://bugzilla.suse.com/1194985" source="BUGZILLA"/>
		<reference ref_id="1195166" ref_url="https://bugzilla.suse.com/1195166" source="BUGZILLA"/>
		<reference ref_id="1195254" ref_url="https://bugzilla.suse.com/1195254" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-25020" ref_url="https://www.suse.com/security/cve/CVE-2018-25020/" source="CVE"/>
		<reference ref_id="CVE-2019-15126" ref_url="https://www.suse.com/security/cve/CVE-2019-15126/" source="CVE"/>
		<reference ref_id="CVE-2020-27820" ref_url="https://www.suse.com/security/cve/CVE-2020-27820/" source="CVE"/>
		<reference ref_id="CVE-2021-0920" ref_url="https://www.suse.com/security/cve/CVE-2021-0920/" source="CVE"/>
		<reference ref_id="CVE-2021-0935" ref_url="https://www.suse.com/security/cve/CVE-2021-0935/" source="CVE"/>
		<reference ref_id="CVE-2021-28711" ref_url="https://www.suse.com/security/cve/CVE-2021-28711/" source="CVE"/>
		<reference ref_id="CVE-2021-28712" ref_url="https://www.suse.com/security/cve/CVE-2021-28712/" source="CVE"/>
		<reference ref_id="CVE-2021-28713" ref_url="https://www.suse.com/security/cve/CVE-2021-28713/" source="CVE"/>
		<reference ref_id="CVE-2021-28714" ref_url="https://www.suse.com/security/cve/CVE-2021-28714/" source="CVE"/>
		<reference ref_id="CVE-2021-28715" ref_url="https://www.suse.com/security/cve/CVE-2021-28715/" source="CVE"/>
		<reference ref_id="CVE-2021-33098" ref_url="https://www.suse.com/security/cve/CVE-2021-33098/" source="CVE"/>
		<reference ref_id="CVE-2021-3564" ref_url="https://www.suse.com/security/cve/CVE-2021-3564/" source="CVE"/>
		<reference ref_id="CVE-2021-39648" ref_url="https://www.suse.com/security/cve/CVE-2021-39648/" source="CVE"/>
		<reference ref_id="CVE-2021-39657" ref_url="https://www.suse.com/security/cve/CVE-2021-39657/" source="CVE"/>
		<reference ref_id="CVE-2021-4002" ref_url="https://www.suse.com/security/cve/CVE-2021-4002/" source="CVE"/>
		<reference ref_id="CVE-2021-4083" ref_url="https://www.suse.com/security/cve/CVE-2021-4083/" source="CVE"/>
		<reference ref_id="CVE-2021-4135" ref_url="https://www.suse.com/security/cve/CVE-2021-4135/" source="CVE"/>
		<reference ref_id="CVE-2021-4149" ref_url="https://www.suse.com/security/cve/CVE-2021-4149/" source="CVE"/>
		<reference ref_id="CVE-2021-4197" ref_url="https://www.suse.com/security/cve/CVE-2021-4197/" source="CVE"/>
		<reference ref_id="CVE-2021-4202" ref_url="https://www.suse.com/security/cve/CVE-2021-4202/" source="CVE"/>
		<reference ref_id="CVE-2021-43975" ref_url="https://www.suse.com/security/cve/CVE-2021-43975/" source="CVE"/>
		<reference ref_id="CVE-2021-43976" ref_url="https://www.suse.com/security/cve/CVE-2021-43976/" source="CVE"/>
		<reference ref_id="CVE-2021-44733" ref_url="https://www.suse.com/security/cve/CVE-2021-44733/" source="CVE"/>
		<reference ref_id="CVE-2021-45095" ref_url="https://www.suse.com/security/cve/CVE-2021-45095/" source="CVE"/>
		<reference ref_id="CVE-2021-45486" ref_url="https://www.suse.com/security/cve/CVE-2021-45486/" source="CVE"/>
		<reference ref_id="CVE-2022-0322" ref_url="https://www.suse.com/security/cve/CVE-2022-0322/" source="CVE"/>
		<reference ref_id="CVE-2022-0330" ref_url="https://www.suse.com/security/cve/CVE-2022-0330/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0366-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010214.html" source="SUSE-SU"/>
		<description>


The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254).
- CVE-2022-0330: Fixed flush TLBs before releasing backing store (bsc#1194880).
- CVE-2021-45486: Fixed an information leak because the hash table is very small in net/ipv4/route.c (bnc#1194087).
- CVE-2021-45095: Fixed refcount leak in pep_sock_accept in net/phonet/pep.c (bnc#1193867).
- CVE-2021-44733: Fixed a use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem, that could have occured because of a race condition in tee_shm_get_from_id during an attempt to free a shared memory object (bnc#1193767).
- CVE-2021-43976: Fixed a flaw that could allow an attacker (who can connect a crafted USB device) to cause a denial of service. (bnc#1192847)
- CVE-2021-43975: Fixed a flaw in hw_atl_utils_fw_rpc_wait that could allow an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. (bsc#1192845)
- CVE-2021-4202: Fixed NFC race condition by adding NCI_UNREG flag (bsc#1194529).
- CVE-2021-4197: Use cgroup open-time credentials for process migraton perm checks (bsc#1194302).
- CVE-2021-4159: Fixed kernel ptr leak vulnerability via BPF in coerce_reg_to_size (bsc#1194227).
- CVE-2021-4149: Fixed btrfs unlock newly allocated extent buffer after error (bsc#1194001).
- CVE-2021-4135: Fixed zero-initialize memory inside netdevsim for new map's value in function nsim_bpf_map_alloc (bsc#1193927).
- CVE-2021-4083: Fixed a read-after-free memory flaw inside the garbage collection for Unix domain socket file handlers when users call close() and fget() simultaneouslyand can potentially trigger a race condition (bnc#1193727).
- CVE-2021-4002: Fixed incorrect TLBs flush in hugetlbfs after huge_pmd_unshare (bsc#1192946).
- CVE-2021-39657: Fixed out of bounds read due to a missing bounds check in ufshcd_eh_device_reset_handler of ufshcd.c. This could lead to local information disclosure with System execution privileges needed (bnc#1193864).
- CVE-2021-39648: Fixed possible disclosure of kernel heap memory due to a race condition in gadget_dev_desc_UDC_show of configfs.c. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation (bnc#1193861). 
- CVE-2021-3564: Fixed double-free memory corruption in the Linux kernel HCI device initialization subsystem that could have been used by attaching malicious HCI TTY Bluetooth devices. A local user could use this flaw to crash the system (bnc#1186207).
- CVE-2021-33098: Fixed a potential denial of service in Intel(R) Ethernet ixgbe driver due to improper input validation. (bsc#1192877)
- CVE-2021-28715: Fixed issue with xen/netback to do not queue unlimited number of packages (XSA-392) (bsc#1193442).
- CVE-2021-28714: Fixed issue with xen/netback to handle rx queue stall detection (XSA-392) (bsc#1193442).
- CVE-2021-28713: Fixed issue with xen/console to harden hvc_xen against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-28712: Fixed issue with xen/netfront to harden netfront against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-28711: Fixed issue with xen/blkfront to harden blkfront against event channel storms (XSA-391) (bsc#1193440).
- CVE-2021-0935: Fixed possible out of bounds write in ip6_xmit of ip6_output.c due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192032).
- CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1193731).
- CVE-2020-27820: Fixed a vulnerability where a use-after-frees in nouveau's postclose() handler could happen if removing device (bsc#1179599).
- CVE-2019-15126: Fixed a vulnerability in Broadcom and Cypress Wi-Fi chips, used in RPi family of devices aka 'Kr00k'. (bsc#1167162)
- CVE-2018-25020: Fixed an overflow in the BPF subsystem due to a mishandling of a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions. This affects kernel/bpf/core.c and net/core/filter.c (bnc#1193575).

The following non-security bugs were fixed:

- Bluetooth: fix the erroneous flush_work() order (git-fixes).
- Build: Add obsolete_rebuilds_subpackage (boo#1172073 bsc#1191731).
- ICMPv6: Add ICMPv6 Parameter Problem, code 3 definition (bsc#1191241 bsc#1195166).
- IPv6: reply ICMP error if the first fragment do not include all headers (bsc#1191241).
- elfcore: fix building with clang (bsc#1169514).
- hv_netvsc: Set needed_headroom according to VF (bsc#1193506).
- ipv6/netfilter: Discard first fragment not including all headers (bsc#1191241 bsc#1195166).
- kernel-*-subpackage: Add dependency on kernel scriptlets (bsc#1192740).
- kernel-binary.spec.in Stop templating the scriptlets for subpackages (bsc#1190358).
- kernel-binary.spec.in: add zstd to BuildRequires if used
- kernel-binary.spec.in: make sure zstd is supported by kmod if used
- kernel-binary.spec: Check for no kernel signing certificates. Also remove unused variable.
- kernel-binary.spec: Define $image as rpm macro (bsc#1189841).
- kernel-binary.spec: Do not fail silently when KMP is empty (bsc#1190358). Copy the code from kernel-module-subpackage that deals with empty KMPs.
- kernel-binary.spec: Do not sign kernel when no key provided (bsc#1187167).
- kernel-binary.spec: Fix kernel-default-base scriptlets after packaging merge.
- kernel-binary.spec: Require dwarves for kernel-binary-devel when BTF is enabled (jsc#SLE-17288).
- kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as well.
- kernel-cert-subpackage: Fix certificate location in scriptlets (bsc#1189841). 
- kernel-source.spec: install-kernel-tools also required on 15.4
- kernel-spec-macros: Since rpm 4.17 %verbose is unusable (bsc#1191229). The semantic changed in an incompatible way so invoking the macro now causes a build failure.
- kprobes: Limit max data_size of the kretprobe instances (bsc#1193669).
- livepatch: Avoid CPU hogging with cond_resched (bsc#1071995).
- memstick: rtsx_usb_ms: fix UAF (bsc#1194516).
- moxart: fix potential use-after-free on remove path (bsc#1194516).
- net, xdp: Introduce xdp_init_buff utility routine (bsc#1193506).
- net, xdp: Introduce xdp_prepare_buff utility routine (bsc#1193506).
- net: Using proper atomic helper (bsc#1186222).
- net: ipv6: Discard next-hop MTU less than minimum link MTU (bsc#1191241).
- net: mana: Add RX fencing (bsc#1193506).
- net: mana: Add XDP support (bsc#1193506).
- net: mana: Allow setting the number of queues while the NIC is down (bsc#1193506).
- net: mana: Fix spelling mistake 'calledd' -&gt; 'called' (bsc#1193506).
- net: mana: Fix the netdev_err()'s vPort argument in mana_init_port() (bsc#1193506).
- net: mana: Improve the HWC error handling (bsc#1193506).
- net: mana: Support hibernation and kexec (bsc#1193506).
- net: mana: Use kcalloc() instead of kzalloc() (bsc#1193506).
- objtool: Support Clang non-section symbols in ORC generation (bsc#1169514).
- post.sh: detect /usr mountpoint too
- recordmcount.pl: fix typo in s390 mcount regex (bsc#1192267).
- recordmcount.pl: look for jgnop instruction as well as bcrl on s390 (bsc#1192267).
- rpm/kernel-binary.spec.in: Use kmod-zstd provide. This makes it possible to use kmod with ZSTD support on non-Tumbleweed.
- rpm/kernel-binary.spec.in: avoid conflicting suse-release suse-release had arbitrary values in staging, we can't use it for dependencies. The filesystem one has to be enough (boo#1184804).
- rpm/kernel-binary.spec.in: do not strip vmlinux again (bsc#1193306). 
- rpm/kernel-binary.spec: Use only non-empty certificates.
- rpm/kernel-obs-build.spec.in: make builds reproducible (bsc#1189305).
- rpm/kernel-source.rpmlintrc: ignore new include/config files. 
- rpm/kernel-source.spec.in: do some more for vanilla_only.
- rpm: Abolish image suffix (bsc#1189841).
- rpm: Abolish scritplet templating (bsc#1189841). Outsource kernel-binary and KMP scriptlets to suse-module-tools. 
- rpm: Define $certs as rpm macro (bsc#1189841). 
- rpm: Fold kernel-devel and kernel-source scriptlets into spec files (bsc#1189841). 
- rpm: fix kmp install path
- rpm: use _rpmmacrodir (boo#1191384)
- tty: hvc: replace BUG_ON() with negative return value.
- vfs: check fd has read access in kernel_read_file_from_fd() (bsc#1194888).
- x86/xen: Mark cpu_bringup_and_idle() as dead_end_function (bsc#1169514).
- xen/blkfront: do not take local copy of a request from the ring page (git-fixes).
- xen/blkfront: do not trust the backend response data blindly (git-fixes).
- xen/blkfront: read response from backend only once (git-fixes).
- xen/netfront: disentangle tx_skb_freelist (git-fixes).
- xen/netfront: do not read data from request on the ring page (git-fixes).
- xen/netfront: do not trust the backend response data blindly (git-fixes).
- xen/netfront: read response from backend only once (git-fixes).
- xen: sync include/xen/interface/io/ring.h with Xen's newest version (git-fixes).
- xfrm: fix MTU regression (bsc#1185377, bsc#1194048).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-10"/>
	<updated date="2022-02-10"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1071995">SUSE bug 1071995</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1124431">SUSE bug 1124431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1167162">SUSE bug 1167162</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1169514">SUSE bug 1169514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179599">SUSE bug 1179599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184804">SUSE bug 1184804</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185377">SUSE bug 1185377</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186207">SUSE bug 1186207</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186222">SUSE bug 1186222</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187167">SUSE bug 1187167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189305">SUSE bug 1189305</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189841">SUSE bug 1189841</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190358">SUSE bug 1190358</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190428">SUSE bug 1190428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191229">SUSE bug 1191229</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191241">SUSE bug 1191241</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191384">SUSE bug 1191384</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191731">SUSE bug 1191731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192032">SUSE bug 1192032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192267">SUSE bug 1192267</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192740">SUSE bug 1192740</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192845">SUSE bug 1192845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192847">SUSE bug 1192847</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192877">SUSE bug 1192877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192946">SUSE bug 1192946</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193306">SUSE bug 1193306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193440">SUSE bug 1193440</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193442">SUSE bug 1193442</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193575">SUSE bug 1193575</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193669">SUSE bug 1193669</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193727">SUSE bug 1193727</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193731">SUSE bug 1193731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193767">SUSE bug 1193767</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193861">SUSE bug 1193861</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193864">SUSE bug 1193864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193867">SUSE bug 1193867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193927">SUSE bug 1193927</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194001">SUSE bug 1194001</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194048">SUSE bug 1194048</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194087">SUSE bug 1194087</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194227">SUSE bug 1194227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194302">SUSE bug 1194302</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194516">SUSE bug 1194516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194529">SUSE bug 1194529</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194880">SUSE bug 1194880</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194888">SUSE bug 1194888</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194985">SUSE bug 1194985</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195166">SUSE bug 1195166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195254">SUSE bug 1195254</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-25020/">CVE-2018-25020</cve>
	<cve impact="important" cvss3="3.1/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-15126/">CVE-2019-15126</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-27820/">CVE-2020-27820</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0920/">CVE-2021-0920</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0935/">CVE-2021-0935</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28711/">CVE-2021-28711</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28712/">CVE-2021-28712</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28713/">CVE-2021-28713</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28714/">CVE-2021-28714</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-28715/">CVE-2021-28715</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33098/">CVE-2021-33098</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3564/">CVE-2021-3564</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-39648/">CVE-2021-39648</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-39657/">CVE-2021-39657</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4002/">CVE-2021-4002</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4083/">CVE-2021-4083</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-4135/">CVE-2021-4135</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4149/">CVE-2021-4149</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-4197/">CVE-2021-4197</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4202/">CVE-2021-4202</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43975/">CVE-2021-43975</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-43976/">CVE-2021-43976</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-44733/">CVE-2021-44733</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-45095/">CVE-2021-45095</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-45486/">CVE-2021-45486</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0322/">CVE-2022-0322</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0330/">CVE-2022-0330</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667574" comment="kernel-default-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667575" comment="kernel-default-base-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667576" comment="kernel-default-devel-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667070" comment="kernel-default-man-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667055" comment="kernel-devel-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667056" comment="kernel-docs-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667057" comment="kernel-macros-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667577" comment="kernel-obs-build-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667059" comment="kernel-source-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667578" comment="kernel-syms-4.12.14-197.105.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667579" comment="reiserfs-kmp-default-4.12.14-197.105.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141090" version="1" class="patch">
	<metadata>
		<title>Security update for libksba (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204357" ref_url="https://bugzilla.suse.com/1204357" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3515" ref_url="https://www.suse.com/security/cve/CVE-2022-3515/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3683-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012597.html" source="SUSE-SU"/>
		<description>
This update for libksba fixes the following issues:

  - CVE-2022-3515: Fixed a possible overflow in the TLV parser (bsc#1204357).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-21"/>
	<updated date="2022-10-21"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1204357">SUSE bug 1204357</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3515/">CVE-2022-3515</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718374" comment="libksba-devel-1.3.5-150000.4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718375" comment="libksba8-1.3.5-150000.4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141091" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186463" ref_url="https://bugzilla.suse.com/1186463" source="BUGZILLA"/>
		<reference ref_id="1188859" ref_url="https://bugzilla.suse.com/1188859" source="BUGZILLA"/>
		<reference ref_id="1192394" ref_url="https://bugzilla.suse.com/1192394" source="BUGZILLA"/>
		<reference ref_id="1193227" ref_url="https://bugzilla.suse.com/1193227" source="BUGZILLA"/>
		<reference ref_id="1193237" ref_url="https://bugzilla.suse.com/1193237" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-8921" ref_url="https://www.suse.com/security/cve/CVE-2019-8921/" source="CVE"/>
		<reference ref_id="CVE-2019-8922" ref_url="https://www.suse.com/security/cve/CVE-2019-8922/" source="CVE"/>
		<reference ref_id="CVE-2020-26558" ref_url="https://www.suse.com/security/cve/CVE-2020-26558/" source="CVE"/>
		<reference ref_id="CVE-2021-0129" ref_url="https://www.suse.com/security/cve/CVE-2021-0129/" source="CVE"/>
		<reference ref_id="CVE-2021-3658" ref_url="https://www.suse.com/security/cve/CVE-2021-3658/" source="CVE"/>
		<reference ref_id="CVE-2021-43400" ref_url="https://www.suse.com/security/cve/CVE-2021-43400/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3687-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012600.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2021-0129: Fixed improper access control (bsc#1186463).
- CVE-2020-26558: Fixed vulnerability that may permit a nearby man-in-the-middle attacker to identify the Passkey (bsc#1186463).
- CVE-2019-8921: Fixed heap-based buffer overflow via crafted request (bsc#1193237).
- CVE-2019-8922: Fixed heap-based buffer overflow via crafted request (bsc#1193227).
- CVE-2021-3658: Fixed adapter incorrectly restoring discoverable state after powered down (bsc#1188859).
- CVE-2021-43400: Fixed use-after-free in gatt-database.c (bsc#1192394).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-21"/>
	<updated date="2022-10-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1186463">SUSE bug 1186463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188859">SUSE bug 1188859</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192394">SUSE bug 1192394</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193227">SUSE bug 1193227</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193237">SUSE bug 1193237</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-8921/">CVE-2019-8921</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-8922/">CVE-2019-8922</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-26558/">CVE-2020-26558</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-0129/">CVE-2021-0129</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3658/">CVE-2021-3658</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-43400/">CVE-2021-43400</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718932" comment="bluez-5.48-150000.5.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718933" comment="bluez-devel-5.48-150000.5.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718934" comment="libbluetooth3-5.48-150000.5.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141092" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201723" ref_url="https://bugzilla.suse.com/1201723" source="BUGZILLA"/>
		<reference ref_id="1201971" ref_url="https://bugzilla.suse.com/1201971" source="BUGZILLA"/>
		<reference ref_id="1202026" ref_url="https://bugzilla.suse.com/1202026" source="BUGZILLA"/>
		<reference ref_id="1202466" ref_url="https://bugzilla.suse.com/1202466" source="BUGZILLA"/>
		<reference ref_id="1202467" ref_url="https://bugzilla.suse.com/1202467" source="BUGZILLA"/>
		<reference ref_id="1202468" ref_url="https://bugzilla.suse.com/1202468" source="BUGZILLA"/>
		<reference ref_id="1202968" ref_url="https://bugzilla.suse.com/1202968" source="BUGZILLA"/>
		<reference ref_id="1202971" ref_url="https://bugzilla.suse.com/1202971" source="BUGZILLA"/>
		<reference ref_id="1202973" ref_url="https://bugzilla.suse.com/1202973" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0561" ref_url="https://www.suse.com/security/cve/CVE-2022-0561/" source="CVE"/>
		<reference ref_id="CVE-2022-2519" ref_url="https://www.suse.com/security/cve/CVE-2022-2519/" source="CVE"/>
		<reference ref_id="CVE-2022-2520" ref_url="https://www.suse.com/security/cve/CVE-2022-2520/" source="CVE"/>
		<reference ref_id="CVE-2022-2521" ref_url="https://www.suse.com/security/cve/CVE-2022-2521/" source="CVE"/>
		<reference ref_id="CVE-2022-2867" ref_url="https://www.suse.com/security/cve/CVE-2022-2867/" source="CVE"/>
		<reference ref_id="CVE-2022-2868" ref_url="https://www.suse.com/security/cve/CVE-2022-2868/" source="CVE"/>
		<reference ref_id="CVE-2022-2869" ref_url="https://www.suse.com/security/cve/CVE-2022-2869/" source="CVE"/>
		<reference ref_id="CVE-2022-34266" ref_url="https://www.suse.com/security/cve/CVE-2022-34266/" source="CVE"/>
		<reference ref_id="CVE-2022-34526" ref_url="https://www.suse.com/security/cve/CVE-2022-34526/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3690-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012599.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-2519: Fixed a double free in rotateImage() (bsc#1202968).
- CVE-2022-2520: Fixed a assertion failure in rotateImage() (bsc#1202973).
- CVE-2022-2521: Fixed invalid free in TIFFClose() (bsc#1202971).
- CVE-2022-2867: Fixed out of bounds read and write in tiffcrop.c (bsc#1202466).
- CVE-2022-2868: Fixed out of bounds read in reverseSamples16bits() (bsc#1202467).
- CVE-2022-2869: Fixed out of bounds read and write in extractContigSamples8bits() (bsc#1202468).
- CVE-2022-34526: Fixed stack overflow in the _TIFFVGetField function of Tiffsplit (bsc#1202026).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-21"/>
	<updated date="2022-10-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201723">SUSE bug 1201723</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201971">SUSE bug 1201971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202026">SUSE bug 1202026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202466">SUSE bug 1202466</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202467">SUSE bug 1202467</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202468">SUSE bug 1202468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202968">SUSE bug 1202968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202971">SUSE bug 1202971</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202973">SUSE bug 1202973</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0561/">CVE-2022-0561</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-2519/">CVE-2022-2519</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2520/">CVE-2022-2520</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2521/">CVE-2022-2521</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2867/">CVE-2022-2867</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2868/">CVE-2022-2868</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2869/">CVE-2022-2869</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-34266/">CVE-2022-34266</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-34526/">CVE-2022-34526</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718767" comment="libtiff-devel-4.0.9-150000.45.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718768" comment="libtiff5-4.0.9-150000.45.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718725" comment="libtiff5-32bit-4.0.9-150000.45.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141093" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199564" ref_url="https://bugzilla.suse.com/1199564" source="BUGZILLA"/>
		<reference ref_id="1200288" ref_url="https://bugzilla.suse.com/1200288" source="BUGZILLA"/>
		<reference ref_id="1201309" ref_url="https://bugzilla.suse.com/1201309" source="BUGZILLA"/>
		<reference ref_id="1202677" ref_url="https://bugzilla.suse.com/1202677" source="BUGZILLA"/>
		<reference ref_id="1202960" ref_url="https://bugzilla.suse.com/1202960" source="BUGZILLA"/>
		<reference ref_id="1203552" ref_url="https://bugzilla.suse.com/1203552" source="BUGZILLA"/>
		<reference ref_id="1203769" ref_url="https://bugzilla.suse.com/1203769" source="BUGZILLA"/>
		<reference ref_id="1203987" ref_url="https://bugzilla.suse.com/1203987" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-20008" ref_url="https://www.suse.com/security/cve/CVE-2022-20008/" source="CVE"/>
		<reference ref_id="CVE-2022-2503" ref_url="https://www.suse.com/security/cve/CVE-2022-2503/" source="CVE"/>
		<reference ref_id="CVE-2022-32296" ref_url="https://www.suse.com/security/cve/CVE-2022-32296/" source="CVE"/>
		<reference ref_id="CVE-2022-3239" ref_url="https://www.suse.com/security/cve/CVE-2022-3239/" source="CVE"/>
		<reference ref_id="CVE-2022-3303" ref_url="https://www.suse.com/security/cve/CVE-2022-3303/" source="CVE"/>
		<reference ref_id="CVE-2022-41218" ref_url="https://www.suse.com/security/cve/CVE-2022-41218/" source="CVE"/>
		<reference ref_id="CVE-2022-41848" ref_url="https://www.suse.com/security/cve/CVE-2022-41848/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3693-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012617.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-20008: Fixed local information disclosure due to possibility to read kernel heap memory via mmc_blk_read_single of block.c (bnc#1199564).
- CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677).
- CVE-2022-32296: Fixed vulnerability where TCP servers were allowed to identify clients by observing what source ports are used (bnc#1200288).
- CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
- CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
- CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
- CVE-2022-41848: Fixed a race condition in drivers/char/pcmcia/synclink_cs.c mgslpc_ioctl and mgslpc_detach (bnc#1203987).

The following non-security bugs were fixed:

- dtb: Do not include sources in src.rpm - refer to kernel-source Same as other kernel binary packages there is no need to carry duplicate sources in dtb packages.
- mkspec: eliminate @NOSOURCE@ macro This should be alsways used with @SOURCES@, just include the content there.
- net: mana: Add rmb after checking owner bits (git-fixes).
- net: mana: Add the Linux MANA PF driver (bnc#1201309, jsc#PED-529).
- x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still be possible to do so that the mitigation can still be disabled on Intel who do not use the return thunks but IBRS.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-22"/>
	<updated date="2022-10-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1199564">SUSE bug 1199564</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200288">SUSE bug 1200288</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201309">SUSE bug 1201309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202677">SUSE bug 1202677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202960">SUSE bug 1202960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203552">SUSE bug 1203552</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203769">SUSE bug 1203769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203987">SUSE bug 1203987</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-20008/">CVE-2022-20008</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2503/">CVE-2022-2503</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32296/">CVE-2022-32296</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3239/">CVE-2022-3239</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3303/">CVE-2022-3303</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41218/">CVE-2022-41218</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41848/">CVE-2022-41848</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009719966" comment="kernel-default-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009719967" comment="kernel-default-base-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009719968" comment="kernel-default-devel-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716991" comment="kernel-default-man-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716970" comment="kernel-devel-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716971" comment="kernel-docs-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716972" comment="kernel-macros-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009719969" comment="kernel-obs-build-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716974" comment="kernel-source-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009719970" comment="kernel-syms-4.12.14-150100.197.126.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009719971" comment="reiserfs-kmp-default-4.12.14-150100.197.126.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141094" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204421" ref_url="https://bugzilla.suse.com/1204421" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42927" ref_url="https://www.suse.com/security/cve/CVE-2022-42927/" source="CVE"/>
		<reference ref_id="CVE-2022-42928" ref_url="https://www.suse.com/security/cve/CVE-2022-42928/" source="CVE"/>
		<reference ref_id="CVE-2022-42929" ref_url="https://www.suse.com/security/cve/CVE-2022-42929/" source="CVE"/>
		<reference ref_id="CVE-2022-42932" ref_url="https://www.suse.com/security/cve/CVE-2022-42932/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3698-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012635.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Updated to version 102.4.0 ESR (bsc#1204421)
- CVE-2022-42927: Fixed same-origin policy violation that could have leaked cross-origin URLs.
- CVE-2022-42928: Fixed memory Corruption in JS Engine.
- CVE-2022-42929: Fixed denial of Service via window.print.
- CVE-2022-42932: Fixed memory safety bugs.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-24"/>
	<updated date="2022-10-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204421">SUSE bug 1204421</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42927/">CVE-2022-42927</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42928/">CVE-2022-42928</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-42929/">CVE-2022-42929</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-42932/">CVE-2022-42932</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718935" comment="MozillaFirefox-102.4.0-150000.150.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718936" comment="MozillaFirefox-devel-102.4.0-150000.150.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718937" comment="MozillaFirefox-translations-common-102.4.0-150000.150.62.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718938" comment="MozillaFirefox-translations-other-102.4.0-150000.150.62.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141095" version="1" class="patch">
	<metadata>
		<title>Security update for multipath-tools (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187534" ref_url="https://bugzilla.suse.com/1187534" source="BUGZILLA"/>
		<reference ref_id="1202616" ref_url="https://bugzilla.suse.com/1202616" source="BUGZILLA"/>
		<reference ref_id="1202739" ref_url="https://bugzilla.suse.com/1202739" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41973" ref_url="https://www.suse.com/security/cve/CVE-2022-41973/" source="CVE"/>
		<reference ref_id="CVE-2022-41974" ref_url="https://www.suse.com/security/cve/CVE-2022-41974/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3708-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012647.html" source="SUSE-SU"/>
		<description>
This update for multipath-tools fixes the following issues:

- CVE-2022-41973: Fixed a symlink attack in multipathd. (bsc#1202739)
- CVE-2022-41974: Fixed an authorization bypass issue in multipathd. (bsc#1202739)
- Avoid linking to libreadline to avoid licensing issue (bsc#1202616)
- Fix that some zfcp devices have large/negative LUN IDs (bsc#1187534)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-24"/>
	<updated date="2022-10-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187534">SUSE bug 1187534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202616">SUSE bug 1202616</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202739">SUSE bug 1202739</bugzilla>
	<cve impact="important" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-41973/">CVE-2022-41973</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41974/">CVE-2022-41974</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009720662" comment="kpartx-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720663" comment="libdmmp-devel-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720664" comment="libdmmp0_2_0-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720665" comment="multipath-tools-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720666" comment="multipath-tools-devel-0.7.9+232+suse.cbc3754-150100.3.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141096" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203614" ref_url="https://bugzilla.suse.com/1203614" source="BUGZILLA"/>
		<reference ref_id="1203619" ref_url="https://bugzilla.suse.com/1203619" source="BUGZILLA"/>
		<reference ref_id="1203620" ref_url="https://bugzilla.suse.com/1203620" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2795" ref_url="https://www.suse.com/security/cve/CVE-2022-2795/" source="CVE"/>
		<reference ref_id="CVE-2022-38177" ref_url="https://www.suse.com/security/cve/CVE-2022-38177/" source="CVE"/>
		<reference ref_id="CVE-2022-38178" ref_url="https://www.suse.com/security/cve/CVE-2022-38178/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3729-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012671.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

  - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations (bsc#1203614).
  - CVE-2022-38177: Fixed a memory leak that could be externally triggered in the DNSSEC verification code for the ECDSA algorithm (bsc#1203619).
  - CVE-2022-38178: Fixed memory leaks that could be externally triggered in the DNSSEC verification code for the EdDSA algorithm (bsc#1203620).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203614">SUSE bug 1203614</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203619">SUSE bug 1203619</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203620">SUSE bug 1203620</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2795/">CVE-2022-2795</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38177/">CVE-2022-38177</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38178/">CVE-2022-38178</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009714579" comment="bind-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714580" comment="bind-chrootenv-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714581" comment="bind-devel-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714568" comment="bind-doc-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714582" comment="bind-utils-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714583" comment="libbind9-1600-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714584" comment="libdns1605-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714585" comment="libirs-devel-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714586" comment="libirs1601-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714587" comment="libisc1606-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714588" comment="libisccc1600-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714589" comment="libisccfg1600-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714590" comment="libns1604-9.16.6-150000.12.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009714578" comment="python3-bind-9.16.6-150000.12.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141097" version="1" class="patch">
	<metadata>
		<title>Security update for python-paramiko (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1111151" ref_url="https://bugzilla.suse.com/1111151" source="BUGZILLA"/>
		<reference ref_id="1200603" ref_url="https://bugzilla.suse.com/1200603" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000805" ref_url="https://www.suse.com/security/cve/CVE-2018-1000805/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3730-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012669.html" source="SUSE-SU"/>
		<description>
This update for python-paramiko fixes the following issues:

Updated to version 2.4.3:

- CVE-2018-1000805: Fixed authentication bypass (bsc#1111151).

Bugfixes:

- Fixed Ed25519 key handling for certain key comment lengths (bsc#1200603).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1111151">SUSE bug 1111151</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200603">SUSE bug 1200603</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000805/">CVE-2018-1000805</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009716215" comment="python2-paramiko-2.4.3-150100.6.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716204" comment="python3-paramiko-2.4.3-150100.6.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141098" version="1" class="patch">
	<metadata>
		<title>Security update for python-waitress (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197255" ref_url="https://bugzilla.suse.com/1197255" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24761" ref_url="https://www.suse.com/security/cve/CVE-2022-24761/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3731-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012668.html" source="SUSE-SU"/>
		<description>
This update for python-waitress fixes the following issues:

- CVE-2022-24761: Fixed a bug to avoid inconsistent interpretation of HTTP requests leading to request smuggling. (bsc#1197255)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-25"/>
	<updated date="2022-10-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197255">SUSE bug 1197255</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-24761/">CVE-2022-24761</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716743" comment="python3-waitress-1.4.3-150000.3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141099" version="1" class="patch">
	<metadata>
		<title>Security update for golang-github-prometheus-node_exporter (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196338" ref_url="https://bugzilla.suse.com/1196338" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21698" ref_url="https://www.suse.com/security/cve/CVE-2022-21698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3745-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012700.html" source="SUSE-SU"/>
		<description>
This update for golang-github-prometheus-node_exporter fixes the following issues:

  (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239, jsc#SUMA-114,
  CVE-2022-21698)		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196338">SUSE bug 1196338</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-21698/">CVE-2022-21698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009716943" comment="golang-github-prometheus-node_exporter-1.3.0-150100.3.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141100" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194166" ref_url="https://bugzilla.suse.com/1194166" source="BUGZILLA"/>
		<reference ref_id="1194167" ref_url="https://bugzilla.suse.com/1194167" source="BUGZILLA"/>
		<reference ref_id="1194168" ref_url="https://bugzilla.suse.com/1194168" source="BUGZILLA"/>
		<reference ref_id="1194169" ref_url="https://bugzilla.suse.com/1194169" source="BUGZILLA"/>
		<reference ref_id="1194170" ref_url="https://bugzilla.suse.com/1194170" source="BUGZILLA"/>
		<reference ref_id="1194171" ref_url="https://bugzilla.suse.com/1194171" source="BUGZILLA"/>
		<reference ref_id="1194780" ref_url="https://bugzilla.suse.com/1194780" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4181" ref_url="https://www.suse.com/security/cve/CVE-2021-4181/" source="CVE"/>
		<reference ref_id="CVE-2021-4182" ref_url="https://www.suse.com/security/cve/CVE-2021-4182/" source="CVE"/>
		<reference ref_id="CVE-2021-4183" ref_url="https://www.suse.com/security/cve/CVE-2021-4183/" source="CVE"/>
		<reference ref_id="CVE-2021-4184" ref_url="https://www.suse.com/security/cve/CVE-2021-4184/" source="CVE"/>
		<reference ref_id="CVE-2021-4185" ref_url="https://www.suse.com/security/cve/CVE-2021-4185/" source="CVE"/>
		<reference ref_id="CVE-2021-4190" ref_url="https://www.suse.com/security/cve/CVE-2021-4190/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0375-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010221.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

Update to version 3.6.1: 

- CVE-2021-4185: RTMPT dissector infinite loop (bsc#1194166)
- CVE-2021-4184: BitTorrent DHT dissector infinite loop (bsc#1194167)
- CVE-2021-4183: pcapng file parser crash (bsc#1194168)
- CVE-2021-4182: RFC 7468 file parser infinite loop (bsc#1194169)
- CVE-2021-4181: Sysdig Event dissector crash (bsc#1194170)
- CVE-2021-4190: Kafka dissector infinite loop (bsc#1194171)
- Support for Shared Memory Communications (SMC) (jsc#SLE-18727)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-14"/>
	<updated date="2022-02-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1194166">SUSE bug 1194166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194167">SUSE bug 1194167</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194168">SUSE bug 1194168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194169">SUSE bug 1194169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194170">SUSE bug 1194170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194171">SUSE bug 1194171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194780">SUSE bug 1194780</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4181/">CVE-2021-4181</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4182/">CVE-2021-4182</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4183/">CVE-2021-4183</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4184/">CVE-2021-4184</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4185/">CVE-2021-4185</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4190/">CVE-2021-4190</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663839" comment="libwireshark15-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663840" comment="libwiretap12-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663841" comment="libwsutil13-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663842" comment="wireshark-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663857" comment="wireshark-devel-3.6.1-3.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663858" comment="wireshark-ui-qt-3.6.1-3.68.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141101" version="1" class="patch">
	<metadata>
		<title>Security update for qemu (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1175144" ref_url="https://bugzilla.suse.com/1175144" source="BUGZILLA"/>
		<reference ref_id="1182282" ref_url="https://bugzilla.suse.com/1182282" source="BUGZILLA"/>
		<reference ref_id="1185000" ref_url="https://bugzilla.suse.com/1185000" source="BUGZILLA"/>
		<reference ref_id="1192463" ref_url="https://bugzilla.suse.com/1192463" source="BUGZILLA"/>
		<reference ref_id="1198035" ref_url="https://bugzilla.suse.com/1198035" source="BUGZILLA"/>
		<reference ref_id="1198037" ref_url="https://bugzilla.suse.com/1198037" source="BUGZILLA"/>
		<reference ref_id="1198038" ref_url="https://bugzilla.suse.com/1198038" source="BUGZILLA"/>
		<reference ref_id="1201367" ref_url="https://bugzilla.suse.com/1201367" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-17380" ref_url="https://www.suse.com/security/cve/CVE-2020-17380/" source="CVE"/>
		<reference ref_id="CVE-2021-3409" ref_url="https://www.suse.com/security/cve/CVE-2021-3409/" source="CVE"/>
		<reference ref_id="CVE-2021-3507" ref_url="https://www.suse.com/security/cve/CVE-2021-3507/" source="CVE"/>
		<reference ref_id="CVE-2021-4206" ref_url="https://www.suse.com/security/cve/CVE-2021-4206/" source="CVE"/>
		<reference ref_id="CVE-2021-4207" ref_url="https://www.suse.com/security/cve/CVE-2021-4207/" source="CVE"/>
		<reference ref_id="CVE-2022-0216" ref_url="https://www.suse.com/security/cve/CVE-2022-0216/" source="CVE"/>
		<reference ref_id="CVE-2022-35414" ref_url="https://www.suse.com/security/cve/CVE-2022-35414/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012710.html" source="SUSE-SU"/>
		<description>
This update for qemu fixes the following issues:

- CVE-2021-3409: Fixed an incomplete fix for CVE-2020-17380 and CVE-2020-25085 in sdhi controller. (bsc#1182282)
- CVE-2021-4206: Fixed an integer overflow in cursor_alloc which can lead to heap buffer overflow. (bsc#1198035)
- CVE-2021-4207: Fixed a double fetch in qxl_cursor ehich can lead to heap buffer overflow. (bsc#1198037)
- CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038)
- CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)
- CVE-2021-3507: Fixed a heap buffer overflow in DMA read data transfers. (bsc#1185000)
- CVE-2020-17380: Fixed a heap buffer overflow in sdhci_sdma_transfer_multi_blocks. (bsc#1175144)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1175144">SUSE bug 1175144</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182282">SUSE bug 1182282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185000">SUSE bug 1185000</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192463">SUSE bug 1192463</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198035">SUSE bug 1198035</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198037">SUSE bug 1198037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198038">SUSE bug 1198038</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201367">SUSE bug 1201367</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2020-17380/">CVE-2020-17380</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3409/">CVE-2021-3409</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3507/">CVE-2021-3507</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4206/">CVE-2021-4206</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-4207/">CVE-2021-4207</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0216/">CVE-2022-0216</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-35414/">CVE-2022-35414</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721627" comment="qemu-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717362" comment="qemu-arm-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717363" comment="qemu-audio-alsa-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717364" comment="qemu-audio-oss-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717365" comment="qemu-audio-pa-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721628" comment="qemu-block-curl-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721629" comment="qemu-block-iscsi-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721630" comment="qemu-block-rbd-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721631" comment="qemu-block-ssh-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721632" comment="qemu-guest-agent-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717371" comment="qemu-ipxe-1.0.0+-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721633" comment="qemu-kvm-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721634" comment="qemu-lang-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717406" comment="qemu-ppc-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717397" comment="qemu-s390-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717374" comment="qemu-seabios-1.12.0_0_ga698c89-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717375" comment="qemu-sgabios-8-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721635" comment="qemu-tools-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717377" comment="qemu-ui-curses-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717378" comment="qemu-ui-gtk-3.1.1.1-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717379" comment="qemu-vgabios-1.12.0_0_ga698c89-150100.80.43.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717380" comment="qemu-x86-3.1.1.1-150100.80.43.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141102" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202593" ref_url="https://bugzilla.suse.com/1202593" source="BUGZILLA"/>
		<reference ref_id="1204383" ref_url="https://bugzilla.suse.com/1204383" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32221" ref_url="https://www.suse.com/security/cve/CVE-2022-32221/" source="CVE"/>
		<reference ref_id="CVE-2022-35252" ref_url="https://www.suse.com/security/cve/CVE-2022-35252/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012702.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

  - CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).
  - CVE-2022-35252: Fixed a potential injection of control characters into cookies (bsc#1202593).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202593">SUSE bug 1202593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204383">SUSE bug 1204383</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-32221/">CVE-2022-32221</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-35252/">CVE-2022-35252</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721621" comment="curl-7.60.0-150000.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721622" comment="libcurl-devel-7.60.0-150000.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721623" comment="libcurl4-7.60.0-150000.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721617" comment="libcurl4-32bit-7.60.0-150000.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141103" version="1" class="patch">
	<metadata>
		<title>Security update for libmad (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1036968" ref_url="https://bugzilla.suse.com/1036968" source="BUGZILLA"/>
		<reference ref_id="1036969" ref_url="https://bugzilla.suse.com/1036969" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-8372" ref_url="https://www.suse.com/security/cve/CVE-2017-8372/" source="CVE"/>
		<reference ref_id="CVE-2017-8373" ref_url="https://www.suse.com/security/cve/CVE-2017-8373/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3782-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012717.html" source="SUSE-SU"/>
		<description>
This update for libmad fixes the following issues:

  - CVE-2017-8373: Fixed heap-based buffer overflow in mad_layer_III (bsc#1036968).
  - CVE-2017-8372: Fixed assertion failure in layer3.c (bsc#1036969).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1036968">SUSE bug 1036968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1036969">SUSE bug 1036969</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8372/">CVE-2017-8372</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-8373/">CVE-2017-8373</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009719714" comment="libmad-devel-0.15.1b-150000.5.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009719715" comment="libmad0-0.15.1b-150000.5.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141104" version="1" class="patch">
	<metadata>
		<title>Security update for telnet (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203759" ref_url="https://bugzilla.suse.com/1203759" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-39028" ref_url="https://www.suse.com/security/cve/CVE-2022-39028/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012714.html" source="SUSE-SU"/>
		<description>
This update for telnet fixes the following issues:

  - CVE-2022-39028: Fixed NULL pointer dereference in telnetd (bsc#1203759).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203759">SUSE bug 1203759</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-39028/">CVE-2022-39028</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009720651" comment="telnet-1.2-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009720652" comment="telnet-server-1.2-150000.3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141105" version="1" class="patch">
	<metadata>
		<title>Security update for libtasn1 (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204690" ref_url="https://bugzilla.suse.com/1204690" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46848" ref_url="https://www.suse.com/security/cve/CVE-2021-46848/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3784-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012715.html" source="SUSE-SU"/>
		<description>
This update for libtasn1 fixes the following issues:

- CVE-2021-46848: Fixed off-by-one array size check that affects asn1_encode_simple_der (bsc#1204690)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-26"/>
	<updated date="2022-10-26"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1204690">SUSE bug 1204690</bugzilla>
	<cve impact="critical" cvss3="9.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46848/">CVE-2021-46848</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721368" comment="libtasn1-4.13-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721369" comment="libtasn1-6-4.13-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721362" comment="libtasn1-6-32bit-4.13-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721370" comment="libtasn1-devel-4.13-150000.4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141106" version="1" class="patch">
	<metadata>
		<title>Security update for openjpeg2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1140205" ref_url="https://bugzilla.suse.com/1140205" source="BUGZILLA"/>
		<reference ref_id="1149789" ref_url="https://bugzilla.suse.com/1149789" source="BUGZILLA"/>
		<reference ref_id="1179594" ref_url="https://bugzilla.suse.com/1179594" source="BUGZILLA"/>
		<reference ref_id="1179821" ref_url="https://bugzilla.suse.com/1179821" source="BUGZILLA"/>
		<reference ref_id="1180042" ref_url="https://bugzilla.suse.com/1180042" source="BUGZILLA"/>
		<reference ref_id="1180043" ref_url="https://bugzilla.suse.com/1180043" source="BUGZILLA"/>
		<reference ref_id="1180044" ref_url="https://bugzilla.suse.com/1180044" source="BUGZILLA"/>
		<reference ref_id="1180046" ref_url="https://bugzilla.suse.com/1180046" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-20846" ref_url="https://www.suse.com/security/cve/CVE-2018-20846/" source="CVE"/>
		<reference ref_id="CVE-2018-21010" ref_url="https://www.suse.com/security/cve/CVE-2018-21010/" source="CVE"/>
		<reference ref_id="CVE-2020-27814" ref_url="https://www.suse.com/security/cve/CVE-2020-27814/" source="CVE"/>
		<reference ref_id="CVE-2020-27824" ref_url="https://www.suse.com/security/cve/CVE-2020-27824/" source="CVE"/>
		<reference ref_id="CVE-2020-27841" ref_url="https://www.suse.com/security/cve/CVE-2020-27841/" source="CVE"/>
		<reference ref_id="CVE-2020-27842" ref_url="https://www.suse.com/security/cve/CVE-2020-27842/" source="CVE"/>
		<reference ref_id="CVE-2020-27843" ref_url="https://www.suse.com/security/cve/CVE-2020-27843/" source="CVE"/>
		<reference ref_id="CVE-2020-27845" ref_url="https://www.suse.com/security/cve/CVE-2020-27845/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012731.html" source="SUSE-SU"/>
		<description>
This update for openjpeg2 fixes the following issues:

  - CVE-2018-20846: Fixed OOB read in pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c (bsc#1140205).
  - CVE-2018-21010: Fixed heap buffer overflow in color_apply_icc_profile in bin/common/color.c (bsc#1149789).
  - CVE-2020-27814: Fixed heap buffer overflow in lib/openjp2/mqc.c (bsc#1179594),
  - CVE-2020-27824: Fixed OOB read in opj_dwt_calc_explicit_stepsizes() (bsc#1179821).
  - CVE-2020-27841: Fixed buffer over-read in lib/openjp2/pi.c (bsc#1180042).
  - CVE-2020-27842: Fixed null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (bsc#1180043).
  - CVE-2020-27843: Fixed OOB read in opj_t2_encode_packet function in openjp2/t2.c (bsc#1180044).
  - CVE-2020-27845: Fixed heap-based buffer over-read in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (bsc#1180046).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-27"/>
	<updated date="2022-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140205">SUSE bug 1140205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1149789">SUSE bug 1149789</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179594">SUSE bug 1179594</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179821">SUSE bug 1179821</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180042">SUSE bug 1180042</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180043">SUSE bug 1180043</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180044">SUSE bug 1180044</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1180046">SUSE bug 1180046</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-20846/">CVE-2018-20846</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-21010/">CVE-2018-21010</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-27814/">CVE-2020-27814</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27824/">CVE-2020-27824</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27841/">CVE-2020-27841</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27842/">CVE-2020-27842</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27843/">CVE-2020-27843</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-27845/">CVE-2020-27845</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721365" comment="libopenjp2-7-2.3.0-150000.3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721340" comment="libopenjp2-7-32bit-2.3.0-150000.3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721366" comment="openjpeg2-2.3.0-150000.3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721367" comment="openjpeg2-devel-2.3.0-150000.3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141107" version="1" class="patch">
	<metadata>
		<title>Security update for dbus-1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1087072" ref_url="https://bugzilla.suse.com/1087072" source="BUGZILLA"/>
		<reference ref_id="1204111" ref_url="https://bugzilla.suse.com/1204111" source="BUGZILLA"/>
		<reference ref_id="1204112" ref_url="https://bugzilla.suse.com/1204112" source="BUGZILLA"/>
		<reference ref_id="1204113" ref_url="https://bugzilla.suse.com/1204113" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42010" ref_url="https://www.suse.com/security/cve/CVE-2022-42010/" source="CVE"/>
		<reference ref_id="CVE-2022-42011" ref_url="https://www.suse.com/security/cve/CVE-2022-42011/" source="CVE"/>
		<reference ref_id="CVE-2022-42012" ref_url="https://www.suse.com/security/cve/CVE-2022-42012/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3805-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-October/012727.html" source="SUSE-SU"/>
		<description>
This update for dbus-1 fixes the following issues:

  - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111).
  - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112).
  - CVE-2022-42012: Fixed a use-after-free that could be trigged by a message in non-native endianness with out-of-band Unix file descriptor (bsc#1204113).

  Bugfixes:

  - Disable asserts (bsc#1087072).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-10-27"/>
	<updated date="2022-10-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1087072">SUSE bug 1087072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204111">SUSE bug 1204111</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204112">SUSE bug 1204112</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204113">SUSE bug 1204113</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-42010/">CVE-2022-42010</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-42011/">CVE-2022-42011</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-42012/">CVE-2022-42012</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009717537" comment="dbus-1-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717538" comment="dbus-1-devel-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717539" comment="dbus-1-x11-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717540" comment="libdbus-1-3-1.12.2-150100.8.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717541" comment="libdbus-1-3-32bit-1.12.2-150100.8.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141108" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204412" ref_url="https://bugzilla.suse.com/1204412" source="BUGZILLA"/>
		<reference ref_id="1204416" ref_url="https://bugzilla.suse.com/1204416" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3550" ref_url="https://www.suse.com/security/cve/CVE-2022-3550/" source="CVE"/>
		<reference ref_id="CVE-2022-3551" ref_url="https://www.suse.com/security/cve/CVE-2022-3551/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3856-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012800.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

  - CVE-2022-3550: Fixed out of bounds read/write in _GetCountedString() (bsc#1204412).
  - CVE-2022-3551: Fixed various leaks of the return value of GetComponentSpec() (bsc#1204416).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-02"/>
	<updated date="2022-11-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204412">SUSE bug 1204412</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204416">SUSE bug 1204416</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3550/">CVE-2022-3550</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3551/">CVE-2022-3551</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009722665" comment="xorg-x11-server-1.20.3-150100.14.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009722666" comment="xorg-x11-server-extra-1.20.3-150100.14.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009722667" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141109" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201978" ref_url="https://bugzilla.suse.com/1201978" source="BUGZILLA"/>
		<reference ref_id="1204366" ref_url="https://bugzilla.suse.com/1204366" source="BUGZILLA"/>
		<reference ref_id="1204367" ref_url="https://bugzilla.suse.com/1204367" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-3709" ref_url="https://www.suse.com/security/cve/CVE-2016-3709/" source="CVE"/>
		<reference ref_id="CVE-2022-40303" ref_url="https://www.suse.com/security/cve/CVE-2022-40303/" source="CVE"/>
		<reference ref_id="CVE-2022-40304" ref_url="https://www.suse.com/security/cve/CVE-2022-40304/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012813.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

  - CVE-2016-3709: Fixed possible XSS vulnerability (bsc#1201978).
  - CVE-2022-40303: Fixed integer overflows with XML_PARSE_HUGE (bsc#1204366).
  - CVE-2022-40304: Fixed dict corruption caused by entity reference cycles (bsc#1204367).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-04"/>
	<updated date="2022-11-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201978">SUSE bug 1201978</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204366">SUSE bug 1204366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204367">SUSE bug 1204367</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2016-3709/">CVE-2016-3709</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-40303/">CVE-2022-40303</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40304/">CVE-2022-40304</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009718928" comment="libxml2-2-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718903" comment="libxml2-2-32bit-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718929" comment="libxml2-devel-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718930" comment="libxml2-tools-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718867" comment="python2-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009718931" comment="python3-libxml2-python-2.9.7-150000.3.51.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141110" version="1" class="patch">
	<metadata>
		<title>Security update for conmon (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200285" ref_url="https://bugzilla.suse.com/1200285" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1708" ref_url="https://www.suse.com/security/cve/CVE-2022-1708/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3896-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012837.html" source="SUSE-SU"/>
		<description>
This update for conmon fixes the following issues:

conmon was updated to 2.1.3:

* Stop using g_unix_signal_add() to avoid threads
* Rename CLI optionlog-size-global-max to log-global-size-max 

Update to version 2.1.2:

* add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 bsc#1200285)
* journald: print tag and name if both are specified
* drop some logs to debug level

Update to version 2.1.0

* logging: buffer partial messages to journald
* exit: close all fds &gt;= 3
* fix: cgroup: Free memory_cgroup_file_path if open fails.
  Call g_free instead of free.

Update to version 2.0.32

* Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
* exit_command: Fix: unset subreaper attribute before running exit command

Update to version 2.0.31
 
* logging: new mode -l passthrough
* ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
* conmon: Fix: free userdata files before exec cleanup

Update to version 2.0.30:

* Remove unreachable code path
* exit: report if the exit command was killed
* exit: fix race zombie reaper
* conn_sock: allow watchdog messages through the notify socket proxy
* seccomp: add support for seccomp notify

Update to version 2.0.29:

* Reset OOM score back to 0 for container runtime
* call functions registered with atexit on SIGTERM
* conn_sock: fix potential segfault

Update to version 2.0.27:

* Add CRI-O integration test GitHub action
* exec: don't fail on EBADFD
* close_fds: fix close of external fds
* Add arm64 static build binary

Update to version 2.0.26:

* conn_sock: do not fail on EAGAIN
* fix segfault from a double freed pointer
* Fix a bug where conmon could never spawn a container, because
  a disagreement between the caller and itself on where the attach
  socket was.
* improve --full-attach to ignore the socket-dir directly. that
  means callers don't need to specify a socket dir at all (and
  can remove it)
* add full-attach option to allow callers to not truncate a very
  long path for the attach socket
* close only opened FDs
* set locale to inherit environment

Update to version 2.0.22:

* added man page
* attach: always chdir
* conn_sock: Explicitly free a heap-allocated string
* refactor I/O and add SD_NOTIFY proxy support

Update to version 2.0.21:

* protect against kill(-1)
* Makefile: enable debuginfo generation
* Remove go.sum file and add go.mod
* Fail if conmon config could not be written
* nix: remove double definition for e2fsprogs
* Speedup static build by utilizing CI cache on `/nix` folder
* Fix nix build for failing e2fsprogs tests
* test: fix CI
* Use Podman for building
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1200285">SUSE bug 1200285</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1708/">CVE-2022-1708</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724451" comment="conmon-2.1.3-150100.3.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141111" version="1" class="patch">
	<metadata>
		<title>Security update for sendmail (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202937" ref_url="https://bugzilla.suse.com/1202937" source="BUGZILLA"/>
		<reference ref_id="1204696" ref_url="https://bugzilla.suse.com/1204696" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31256" ref_url="https://www.suse.com/security/cve/CVE-2022-31256/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3899-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012839.html" source="SUSE-SU"/>
		<description>
This update for sendmail fixes the following issues:

  - CVE-2022-31256: Fixed mail to root privilege escalation via sm-client.pre script (bsc#1204696, bsc#1202937).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202937">SUSE bug 1202937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204696">SUSE bug 1204696</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31256/">CVE-2022-31256</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721887" comment="libmilter1_0-8.15.2-150000.8.9.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141112" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204708" ref_url="https://bugzilla.suse.com/1204708" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-43680" ref_url="https://www.suse.com/security/cve/CVE-2022-43680/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3912-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012847.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

  - CVE-2022-43680: Fixed use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate (bsc#1204708).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204708">SUSE bug 1204708</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43680/">CVE-2022-43680</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721888" comment="expat-2.2.5-150000.3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721889" comment="libexpat-devel-2.2.5-150000.3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721890" comment="libexpat1-2.2.5-150000.3.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721891" comment="libexpat1-32bit-2.2.5-150000.3.25.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141113" version="1" class="patch">
	<metadata>
		<title>Security update for vsftpd (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196918" ref_url="https://bugzilla.suse.com/1196918" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:3914-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2022-November/026042.html" source="SUSE-SU"/>
		<description>
This update for vsftpd fixes the following issues:

  Bugfixes:

  - Removed unsupported systemd hardening options (bsc#1196918).

		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-08"/>
	<updated date="2022-11-08"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196918">SUSE bug 1196918</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009717514" comment="vsftpd-3.0.5-150000.7.22.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141114" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203125" ref_url="https://bugzilla.suse.com/1203125" source="BUGZILLA"/>
		<reference ref_id="1204577" ref_url="https://bugzilla.suse.com/1204577" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-10735" ref_url="https://www.suse.com/security/cve/CVE-2020-10735/" source="CVE"/>
		<reference ref_id="CVE-2022-37454" ref_url="https://www.suse.com/security/cve/CVE-2022-37454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3924-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012858.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2022-37454: Fixed a buffer overflow in hashlib.sha3_* implementations. (bsc#1204577)
- CVE-2020-10735: Fixed a bug to limit amount of digits converting text to int and vice vera. (bsc#1203125)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-09"/>
	<updated date="2022-11-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203125">SUSE bug 1203125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204577">SUSE bug 1204577</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-10735/">CVE-2020-10735</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-37454/">CVE-2022-37454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723169" comment="libpython3_6m1_0-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723170" comment="python3-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723171" comment="python3-base-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723172" comment="python3-curses-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723173" comment="python3-dbm-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723174" comment="python3-devel-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723175" comment="python3-idle-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724706" comment="python3-testsuite-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723176" comment="python3-tk-3.6.15-150000.3.116.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723177" comment="python3-tools-3.6.15-150000.3.116.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141115" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185104" ref_url="https://bugzilla.suse.com/1185104" source="BUGZILLA"/>
		<reference ref_id="1193923" ref_url="https://bugzilla.suse.com/1193923" source="BUGZILLA"/>
		<reference ref_id="1199966" ref_url="https://bugzilla.suse.com/1199966" source="BUGZILLA"/>
		<reference ref_id="1200762" ref_url="https://bugzilla.suse.com/1200762" source="BUGZILLA"/>
		<reference ref_id="1203806" ref_url="https://bugzilla.suse.com/1203806" source="BUGZILLA"/>
		<reference ref_id="1203807" ref_url="https://bugzilla.suse.com/1203807" source="BUGZILLA"/>
		<reference ref_id="1204482" ref_url="https://bugzilla.suse.com/1204482" source="BUGZILLA"/>
		<reference ref_id="1204485" ref_url="https://bugzilla.suse.com/1204485" source="BUGZILLA"/>
		<reference ref_id="1204487" ref_url="https://bugzilla.suse.com/1204487" source="BUGZILLA"/>
		<reference ref_id="1204488" ref_url="https://bugzilla.suse.com/1204488" source="BUGZILLA"/>
		<reference ref_id="1204489" ref_url="https://bugzilla.suse.com/1204489" source="BUGZILLA"/>
		<reference ref_id="1204490" ref_url="https://bugzilla.suse.com/1204490" source="BUGZILLA"/>
		<reference ref_id="1204494" ref_url="https://bugzilla.suse.com/1204494" source="BUGZILLA"/>
		<reference ref_id="1204496" ref_url="https://bugzilla.suse.com/1204496" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-28689" ref_url="https://www.suse.com/security/cve/CVE-2021-28689/" source="CVE"/>
		<reference ref_id="CVE-2022-26365" ref_url="https://www.suse.com/security/cve/CVE-2022-26365/" source="CVE"/>
		<reference ref_id="CVE-2022-33740" ref_url="https://www.suse.com/security/cve/CVE-2022-33740/" source="CVE"/>
		<reference ref_id="CVE-2022-33741" ref_url="https://www.suse.com/security/cve/CVE-2022-33741/" source="CVE"/>
		<reference ref_id="CVE-2022-33742" ref_url="https://www.suse.com/security/cve/CVE-2022-33742/" source="CVE"/>
		<reference ref_id="CVE-2022-33746" ref_url="https://www.suse.com/security/cve/CVE-2022-33746/" source="CVE"/>
		<reference ref_id="CVE-2022-33748" ref_url="https://www.suse.com/security/cve/CVE-2022-33748/" source="CVE"/>
		<reference ref_id="CVE-2022-42309" ref_url="https://www.suse.com/security/cve/CVE-2022-42309/" source="CVE"/>
		<reference ref_id="CVE-2022-42310" ref_url="https://www.suse.com/security/cve/CVE-2022-42310/" source="CVE"/>
		<reference ref_id="CVE-2022-42311" ref_url="https://www.suse.com/security/cve/CVE-2022-42311/" source="CVE"/>
		<reference ref_id="CVE-2022-42312" ref_url="https://www.suse.com/security/cve/CVE-2022-42312/" source="CVE"/>
		<reference ref_id="CVE-2022-42313" ref_url="https://www.suse.com/security/cve/CVE-2022-42313/" source="CVE"/>
		<reference ref_id="CVE-2022-42314" ref_url="https://www.suse.com/security/cve/CVE-2022-42314/" source="CVE"/>
		<reference ref_id="CVE-2022-42315" ref_url="https://www.suse.com/security/cve/CVE-2022-42315/" source="CVE"/>
		<reference ref_id="CVE-2022-42316" ref_url="https://www.suse.com/security/cve/CVE-2022-42316/" source="CVE"/>
		<reference ref_id="CVE-2022-42317" ref_url="https://www.suse.com/security/cve/CVE-2022-42317/" source="CVE"/>
		<reference ref_id="CVE-2022-42318" ref_url="https://www.suse.com/security/cve/CVE-2022-42318/" source="CVE"/>
		<reference ref_id="CVE-2022-42319" ref_url="https://www.suse.com/security/cve/CVE-2022-42319/" source="CVE"/>
		<reference ref_id="CVE-2022-42320" ref_url="https://www.suse.com/security/cve/CVE-2022-42320/" source="CVE"/>
		<reference ref_id="CVE-2022-42321" ref_url="https://www.suse.com/security/cve/CVE-2022-42321/" source="CVE"/>
		<reference ref_id="CVE-2022-42322" ref_url="https://www.suse.com/security/cve/CVE-2022-42322/" source="CVE"/>
		<reference ref_id="CVE-2022-42323" ref_url="https://www.suse.com/security/cve/CVE-2022-42323/" source="CVE"/>
		<reference ref_id="CVE-2022-42325" ref_url="https://www.suse.com/security/cve/CVE-2022-42325/" source="CVE"/>
		<reference ref_id="CVE-2022-42326" ref_url="https://www.suse.com/security/cve/CVE-2022-42326/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3928-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012866.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806).
- CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807).
- CVE-2021-28689: Fixed speculative vulnerabilities with bare (non-shim) 32-bit PV guests (bsc#1185104).
- CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let xenstored run out of memory (bsc#1204482)
- CVE-2022-42309: xen: Xenstore: Guests can crash xenstored (bsc#1204485)
- CVE-2022-42310: xen: Xenstore: Guests can create orphaned Xenstore nodes (bsc#1204487)
- CVE-2022-42319: xen: Xenstore: Guests can cause Xenstore to not free temporary memory (bsc#1204488)
- CVE-2022-42320: xen: Xenstore: Guests can get access to Xenstore nodes of deleted domains (bsc#1204489)
- CVE-2022-42321: xen: Xenstore: Guests can crash xenstored via exhausting the stack (bsc#1204490)
- CVE-2022-42322,CVE-2022-42323: xen: Xenstore: cooperating guests can create arbitrary numbers of nodes (bsc#1204494)
- CVE-2022-42325,CVE-2022-42326: xen: Xenstore: Guests can create arbitray number of nodes via transactions (bsc#1204496)
- CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings (bsc#1199966).
- CVE-2022-26365,CVE-2022-33740,CVE-2022-33741,CVE-2022-33742: xen: Linux disk/nic frontends data leaks (bsc#1200762).
- xen: Frontends vulnerable to backends (bsc#1193923).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-10"/>
	<updated date="2022-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185104">SUSE bug 1185104</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193923">SUSE bug 1193923</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199966">SUSE bug 1199966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200762">SUSE bug 1200762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203806">SUSE bug 1203806</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203807">SUSE bug 1203807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204482">SUSE bug 1204482</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204485">SUSE bug 1204485</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204487">SUSE bug 1204487</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204488">SUSE bug 1204488</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204489">SUSE bug 1204489</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204490">SUSE bug 1204490</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204494">SUSE bug 1204494</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204496">SUSE bug 1204496</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-28689/">CVE-2021-28689</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-26365/">CVE-2022-26365</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33740/">CVE-2022-33740</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33741/">CVE-2022-33741</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-33742/">CVE-2022-33742</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-33746/">CVE-2022-33746</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-33748/">CVE-2022-33748</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42309/">CVE-2022-42309</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42310/">CVE-2022-42310</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42311/">CVE-2022-42311</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42312/">CVE-2022-42312</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42313/">CVE-2022-42313</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42314/">CVE-2022-42314</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42315/">CVE-2022-42315</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42316/">CVE-2022-42316</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42317/">CVE-2022-42317</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42318/">CVE-2022-42318</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42319/">CVE-2022-42319</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42320/">CVE-2022-42320</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42321/">CVE-2022-42321</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42322/">CVE-2022-42322</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42323/">CVE-2022-42323</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42325/">CVE-2022-42325</cve>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42326/">CVE-2022-42326</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724683" comment="xen-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724684" comment="xen-devel-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724685" comment="xen-libs-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724686" comment="xen-tools-4.12.4_30-150100.3.80.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724687" comment="xen-tools-domU-4.12.4_30-150100.3.80.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141116" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204986" ref_url="https://bugzilla.suse.com/1204986" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-43995" ref_url="https://www.suse.com/security/cve/CVE-2022-43995/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:3938-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012873.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:
  
- CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt() password backend (bsc#1204986).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-10"/>
	<updated date="2022-11-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204986">SUSE bug 1204986</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-43995/">CVE-2022-43995</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723178" comment="sudo-1.8.27-150000.4.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723179" comment="sudo-devel-1.8.27-150000.4.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141117" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204577" ref_url="https://bugzilla.suse.com/1204577" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-9253" ref_url="https://www.suse.com/security/cve/CVE-2015-9253/" source="CVE"/>
		<reference ref_id="CVE-2017-8923" ref_url="https://www.suse.com/security/cve/CVE-2017-8923/" source="CVE"/>
		<reference ref_id="CVE-2017-9120" ref_url="https://www.suse.com/security/cve/CVE-2017-9120/" source="CVE"/>
		<reference ref_id="CVE-2018-1000222" ref_url="https://www.suse.com/security/cve/CVE-2018-1000222/" source="CVE"/>
		<reference ref_id="CVE-2018-12882" ref_url="https://www.suse.com/security/cve/CVE-2018-12882/" source="CVE"/>
		<reference ref_id="CVE-2018-14851" ref_url="https://www.suse.com/security/cve/CVE-2018-14851/" source="CVE"/>
		<reference ref_id="CVE-2018-17082" ref_url="https://www.suse.com/security/cve/CVE-2018-17082/" source="CVE"/>
		<reference ref_id="CVE-2018-19935" ref_url="https://www.suse.com/security/cve/CVE-2018-19935/" source="CVE"/>
		<reference ref_id="CVE-2018-20783" ref_url="https://www.suse.com/security/cve/CVE-2018-20783/" source="CVE"/>
		<reference ref_id="CVE-2019-11034" ref_url="https://www.suse.com/security/cve/CVE-2019-11034/" source="CVE"/>
		<reference ref_id="CVE-2019-11035" ref_url="https://www.suse.com/security/cve/CVE-2019-11035/" source="CVE"/>
		<reference ref_id="CVE-2019-11036" ref_url="https://www.suse.com/security/cve/CVE-2019-11036/" source="CVE"/>
		<reference ref_id="CVE-2019-11039" ref_url="https://www.suse.com/security/cve/CVE-2019-11039/" source="CVE"/>
		<reference ref_id="CVE-2019-11040" ref_url="https://www.suse.com/security/cve/CVE-2019-11040/" source="CVE"/>
		<reference ref_id="CVE-2019-11041" ref_url="https://www.suse.com/security/cve/CVE-2019-11041/" source="CVE"/>
		<reference ref_id="CVE-2019-11042" ref_url="https://www.suse.com/security/cve/CVE-2019-11042/" source="CVE"/>
		<reference ref_id="CVE-2019-11043" ref_url="https://www.suse.com/security/cve/CVE-2019-11043/" source="CVE"/>
		<reference ref_id="CVE-2019-11045" ref_url="https://www.suse.com/security/cve/CVE-2019-11045/" source="CVE"/>
		<reference ref_id="CVE-2019-11046" ref_url="https://www.suse.com/security/cve/CVE-2019-11046/" source="CVE"/>
		<reference ref_id="CVE-2019-11047" ref_url="https://www.suse.com/security/cve/CVE-2019-11047/" source="CVE"/>
		<reference ref_id="CVE-2019-11048" ref_url="https://www.suse.com/security/cve/CVE-2019-11048/" source="CVE"/>
		<reference ref_id="CVE-2019-11050" ref_url="https://www.suse.com/security/cve/CVE-2019-11050/" source="CVE"/>
		<reference ref_id="CVE-2019-9020" ref_url="https://www.suse.com/security/cve/CVE-2019-9020/" source="CVE"/>
		<reference ref_id="CVE-2019-9021" ref_url="https://www.suse.com/security/cve/CVE-2019-9021/" source="CVE"/>
		<reference ref_id="CVE-2019-9022" ref_url="https://www.suse.com/security/cve/CVE-2019-9022/" source="CVE"/>
		<reference ref_id="CVE-2019-9023" ref_url="https://www.suse.com/security/cve/CVE-2019-9023/" source="CVE"/>
		<reference ref_id="CVE-2019-9024" ref_url="https://www.suse.com/security/cve/CVE-2019-9024/" source="CVE"/>
		<reference ref_id="CVE-2019-9637" ref_url="https://www.suse.com/security/cve/CVE-2019-9637/" source="CVE"/>
		<reference ref_id="CVE-2019-9638" ref_url="https://www.suse.com/security/cve/CVE-2019-9638/" source="CVE"/>
		<reference ref_id="CVE-2019-9640" ref_url="https://www.suse.com/security/cve/CVE-2019-9640/" source="CVE"/>
		<reference ref_id="CVE-2019-9641" ref_url="https://www.suse.com/security/cve/CVE-2019-9641/" source="CVE"/>
		<reference ref_id="CVE-2019-9675" ref_url="https://www.suse.com/security/cve/CVE-2019-9675/" source="CVE"/>
		<reference ref_id="CVE-2020-7059" ref_url="https://www.suse.com/security/cve/CVE-2020-7059/" source="CVE"/>
		<reference ref_id="CVE-2020-7060" ref_url="https://www.suse.com/security/cve/CVE-2020-7060/" source="CVE"/>
		<reference ref_id="CVE-2020-7062" ref_url="https://www.suse.com/security/cve/CVE-2020-7062/" source="CVE"/>
		<reference ref_id="CVE-2020-7063" ref_url="https://www.suse.com/security/cve/CVE-2020-7063/" source="CVE"/>
		<reference ref_id="CVE-2020-7064" ref_url="https://www.suse.com/security/cve/CVE-2020-7064/" source="CVE"/>
		<reference ref_id="CVE-2020-7066" ref_url="https://www.suse.com/security/cve/CVE-2020-7066/" source="CVE"/>
		<reference ref_id="CVE-2020-7068" ref_url="https://www.suse.com/security/cve/CVE-2020-7068/" source="CVE"/>
		<reference ref_id="CVE-2020-7069" ref_url="https://www.suse.com/security/cve/CVE-2020-7069/" source="CVE"/>
		<reference ref_id="CVE-2020-7070" ref_url="https://www.suse.com/security/cve/CVE-2020-7070/" source="CVE"/>
		<reference ref_id="CVE-2020-7071" ref_url="https://www.suse.com/security/cve/CVE-2020-7071/" source="CVE"/>
		<reference ref_id="CVE-2021-21702" ref_url="https://www.suse.com/security/cve/CVE-2021-21702/" source="CVE"/>
		<reference ref_id="CVE-2021-21703" ref_url="https://www.suse.com/security/cve/CVE-2021-21703/" source="CVE"/>
		<reference ref_id="CVE-2021-21704" ref_url="https://www.suse.com/security/cve/CVE-2021-21704/" source="CVE"/>
		<reference ref_id="CVE-2021-21705" ref_url="https://www.suse.com/security/cve/CVE-2021-21705/" source="CVE"/>
		<reference ref_id="CVE-2021-21707" ref_url="https://www.suse.com/security/cve/CVE-2021-21707/" source="CVE"/>
		<reference ref_id="CVE-2022-31625" ref_url="https://www.suse.com/security/cve/CVE-2022-31625/" source="CVE"/>
		<reference ref_id="CVE-2022-31626" ref_url="https://www.suse.com/security/cve/CVE-2022-31626/" source="CVE"/>
		<reference ref_id="CVE-2022-31628" ref_url="https://www.suse.com/security/cve/CVE-2022-31628/" source="CVE"/>
		<reference ref_id="CVE-2022-31629" ref_url="https://www.suse.com/security/cve/CVE-2022-31629/" source="CVE"/>
		<reference ref_id="CVE-2022-37454" ref_url="https://www.suse.com/security/cve/CVE-2022-37454/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4067-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012983.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- Version update to 7.2.34 [jsc#SLE-23639]

- CVE-2022-37454: Fixed SHA-3 buffer overflow (bsc#1204577).
- Fix integer overflow in PHP_SHA3##bits (bsc#1204577#c26).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204577">SUSE bug 1204577</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9253/">CVE-2015-9253</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8923/">CVE-2017-8923</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-9120/">CVE-2017-9120</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000222/">CVE-2018-1000222</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-12882/">CVE-2018-12882</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-14851/">CVE-2018-14851</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2018-17082/">CVE-2018-17082</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-19935/">CVE-2018-19935</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2018-20783/">CVE-2018-20783</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11034/">CVE-2019-11034</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11035/">CVE-2019-11035</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11036/">CVE-2019-11036</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11039/">CVE-2019-11039</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11040/">CVE-2019-11040</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11041/">CVE-2019-11041</cve>
	<cve impact="moderate" cvss3="5.4/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11042/">CVE-2019-11042</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-11043/">CVE-2019-11043</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11045/">CVE-2019-11045</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-11046/">CVE-2019-11046</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11047/">CVE-2019-11047</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11048/">CVE-2019-11048</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-11050/">CVE-2019-11050</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9020/">CVE-2019-9020</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9021/">CVE-2019-9021</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-9022/">CVE-2019-9022</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9023/">CVE-2019-9023</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9024/">CVE-2019-9024</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2019-9637/">CVE-2019-9637</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9638/">CVE-2019-9638</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9640/">CVE-2019-9640</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9641/">CVE-2019-9641</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-9675/">CVE-2019-9675</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7059/">CVE-2020-7059</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-7060/">CVE-2020-7060</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7062/">CVE-2020-7062</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7063/">CVE-2020-7063</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7064/">CVE-2020-7064</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-7066/">CVE-2020-7066</cve>
	<cve impact="moderate" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2020-7068/">CVE-2020-7068</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-7069/">CVE-2020-7069</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2020-7070/">CVE-2020-7070</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2020-7071/">CVE-2020-7071</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21702/">CVE-2021-21702</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21703/">CVE-2021-21703</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-21704/">CVE-2021-21704</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21705/">CVE-2021-21705</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21707/">CVE-2021-21707</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31625/">CVE-2022-31625</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31626/">CVE-2022-31626</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-31628/">CVE-2022-31628</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-31629/">CVE-2022-31629</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-37454/">CVE-2022-37454</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723843" comment="apache2-mod_php7-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723844" comment="php7-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723845" comment="php7-bcmath-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723846" comment="php7-bz2-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723847" comment="php7-calendar-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723848" comment="php7-ctype-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723849" comment="php7-curl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723850" comment="php7-dba-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723851" comment="php7-devel-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723852" comment="php7-dom-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723853" comment="php7-enchant-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723854" comment="php7-exif-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723855" comment="php7-fastcgi-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723856" comment="php7-fileinfo-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723857" comment="php7-fpm-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723858" comment="php7-ftp-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723859" comment="php7-gd-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723860" comment="php7-gettext-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723861" comment="php7-gmp-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723862" comment="php7-iconv-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723863" comment="php7-intl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723864" comment="php7-json-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723865" comment="php7-ldap-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723866" comment="php7-mbstring-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723867" comment="php7-mysql-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723868" comment="php7-odbc-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723869" comment="php7-opcache-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723870" comment="php7-openssl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723871" comment="php7-pcntl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723872" comment="php7-pdo-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723768" comment="php7-pear-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723769" comment="php7-pear-Archive_Tar-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723873" comment="php7-pgsql-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723874" comment="php7-phar-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723875" comment="php7-posix-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723876" comment="php7-readline-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723877" comment="php7-shmop-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723878" comment="php7-snmp-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723879" comment="php7-soap-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723880" comment="php7-sockets-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723881" comment="php7-sodium-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723882" comment="php7-sqlite-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723883" comment="php7-sysvmsg-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723884" comment="php7-sysvsem-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723885" comment="php7-sysvshm-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725928" comment="php7-tidy-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723886" comment="php7-tokenizer-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723639" comment="php7-wddx-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723887" comment="php7-xmlreader-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723888" comment="php7-xmlrpc-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723889" comment="php7-xmlwriter-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723890" comment="php7-xsl-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723891" comment="php7-zip-7.2.34-150000.4.103.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723892" comment="php7-zlib-7.2.34-150000.4.103.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141118" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203476" ref_url="https://bugzilla.suse.com/1203476" source="BUGZILLA"/>
		<reference ref_id="1204468" ref_url="https://bugzilla.suse.com/1204468" source="BUGZILLA"/>
		<reference ref_id="1204471" ref_url="https://bugzilla.suse.com/1204471" source="BUGZILLA"/>
		<reference ref_id="1204472" ref_url="https://bugzilla.suse.com/1204472" source="BUGZILLA"/>
		<reference ref_id="1204473" ref_url="https://bugzilla.suse.com/1204473" source="BUGZILLA"/>
		<reference ref_id="1204475" ref_url="https://bugzilla.suse.com/1204475" source="BUGZILLA"/>
		<reference ref_id="1204480" ref_url="https://bugzilla.suse.com/1204480" source="BUGZILLA"/>
		<reference ref_id="1204523" ref_url="https://bugzilla.suse.com/1204523" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21618" ref_url="https://www.suse.com/security/cve/CVE-2022-21618/" source="CVE"/>
		<reference ref_id="CVE-2022-21619" ref_url="https://www.suse.com/security/cve/CVE-2022-21619/" source="CVE"/>
		<reference ref_id="CVE-2022-21624" ref_url="https://www.suse.com/security/cve/CVE-2022-21624/" source="CVE"/>
		<reference ref_id="CVE-2022-21626" ref_url="https://www.suse.com/security/cve/CVE-2022-21626/" source="CVE"/>
		<reference ref_id="CVE-2022-21628" ref_url="https://www.suse.com/security/cve/CVE-2022-21628/" source="CVE"/>
		<reference ref_id="CVE-2022-39399" ref_url="https://www.suse.com/security/cve/CVE-2022-39399/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012996.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

- Update to jdk-11.0.17+8 (October 2022 CPU)
- CVE-2022-39399: Improve HTTP/2 client usage(bsc#1204480)
- CVE-2022-21628: Better HttpServer service (bsc#1204472)
- CVE-2022-21624: Enhance icon presentations (bsc#1204475)
- CVE-2022-21619: Improve NTLM support (bsc#1204473)
- CVE-2022-21626: Key X509 usages (bsc#1204471)
- CVE-2022-21618: Wider MultiByte (bsc#1204468)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1203476">SUSE bug 1203476</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204468">SUSE bug 1204468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204471">SUSE bug 1204471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204472">SUSE bug 1204472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204473">SUSE bug 1204473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204475">SUSE bug 1204475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204480">SUSE bug 1204480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204523">SUSE bug 1204523</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21618/">CVE-2022-21618</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21619/">CVE-2022-21619</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21624/">CVE-2022-21624</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21626/">CVE-2022-21626</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21628/">CVE-2022-21628</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-39399/">CVE-2022-39399</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009721029" comment="java-11-openjdk-11.0.17.0-150000.3.86.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721030" comment="java-11-openjdk-demo-11.0.17.0-150000.3.86.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721031" comment="java-11-openjdk-devel-11.0.17.0-150000.3.86.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009721032" comment="java-11-openjdk-headless-11.0.17.0-150000.3.86.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141119" version="1" class="patch">
	<metadata>
		<title>Security update for dpkg (Low)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1199944" ref_url="https://bugzilla.suse.com/1199944" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-1664" ref_url="https://www.suse.com/security/cve/CVE-2022-1664/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012992.html" source="SUSE-SU"/>
		<description>
This update for dpkg fixes the following issues:

- CVE-2022-1664: Fixed a directory traversal vulnerability in Dpkg::Source::Archive (bsc#1199944).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1199944">SUSE bug 1199944</bugzilla>
	<cve impact="low" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-1664/">CVE-2022-1664</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723000" comment="dpkg-1.19.0.4-150000.4.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723001" comment="dpkg-devel-1.19.0.4-150000.4.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723003" comment="update-alternatives-1.19.0.4-150000.4.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141120" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205270" ref_url="https://bugzilla.suse.com/1205270" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45403" ref_url="https://www.suse.com/security/cve/CVE-2022-45403/" source="CVE"/>
		<reference ref_id="CVE-2022-45404" ref_url="https://www.suse.com/security/cve/CVE-2022-45404/" source="CVE"/>
		<reference ref_id="CVE-2022-45405" ref_url="https://www.suse.com/security/cve/CVE-2022-45405/" source="CVE"/>
		<reference ref_id="CVE-2022-45406" ref_url="https://www.suse.com/security/cve/CVE-2022-45406/" source="CVE"/>
		<reference ref_id="CVE-2022-45408" ref_url="https://www.suse.com/security/cve/CVE-2022-45408/" source="CVE"/>
		<reference ref_id="CVE-2022-45409" ref_url="https://www.suse.com/security/cve/CVE-2022-45409/" source="CVE"/>
		<reference ref_id="CVE-2022-45410" ref_url="https://www.suse.com/security/cve/CVE-2022-45410/" source="CVE"/>
		<reference ref_id="CVE-2022-45411" ref_url="https://www.suse.com/security/cve/CVE-2022-45411/" source="CVE"/>
		<reference ref_id="CVE-2022-45412" ref_url="https://www.suse.com/security/cve/CVE-2022-45412/" source="CVE"/>
		<reference ref_id="CVE-2022-45416" ref_url="https://www.suse.com/security/cve/CVE-2022-45416/" source="CVE"/>
		<reference ref_id="CVE-2022-45418" ref_url="https://www.suse.com/security/cve/CVE-2022-45418/" source="CVE"/>
		<reference ref_id="CVE-2022-45420" ref_url="https://www.suse.com/security/cve/CVE-2022-45420/" source="CVE"/>
		<reference ref_id="CVE-2022-45421" ref_url="https://www.suse.com/security/cve/CVE-2022-45421/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4083-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/012997.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 102.5.0 ESR (MFSA 2022-48, bsc#1205270):

- CVE-2022-45403: Service Workers might have learned size of cross-origin media files
- CVE-2022-45404: Fullscreen notification bypass
- CVE-2022-45405: Use-after-free in InputStream implementation
- CVE-2022-45406: Use-after-free of a JavaScript Realm
- CVE-2022-45408: Fullscreen notification bypass via windowName
- CVE-2022-45409: Use-after-free in Garbage Collection
- CVE-2022-45410: ServiceWorker-intercepted requests bypassed SameSite cookie policy
- CVE-2022-45411: Cross-Site Tracing was possible via non-standard override headers
- CVE-2022-45412: Symlinks may resolve to partially uninitialized buffers
- CVE-2022-45416: Keystroke Side-Channel Leakage
- CVE-2022-45418: Custom mouse cursor could have been drawn over browser UI
- CVE-2022-45420: Iframe contents could be rendered outside the iframe
- CVE-2022-45421: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-18"/>
	<updated date="2022-11-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205270">SUSE bug 1205270</bugzilla>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-45403/">CVE-2022-45403</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45404/">CVE-2022-45404</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45405/">CVE-2022-45405</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45406/">CVE-2022-45406</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45408/">CVE-2022-45408</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45409/">CVE-2022-45409</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45410/">CVE-2022-45410</cve>
	<cve impact="critical" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-45411/">CVE-2022-45411</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45412/">CVE-2022-45412</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-45416/">CVE-2022-45416</cve>
	<cve impact="critical" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-45418/">CVE-2022-45418</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-45420/">CVE-2022-45420</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45421/">CVE-2022-45421</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724981" comment="MozillaFirefox-102.5.0-150000.150.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724982" comment="MozillaFirefox-devel-102.5.0-150000.150.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724983" comment="MozillaFirefox-translations-common-102.5.0-150000.150.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724984" comment="MozillaFirefox-translations-other-102.5.0-150000.150.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141121" version="1" class="patch">
	<metadata>
		<title>Security update for grub2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205178" ref_url="https://bugzilla.suse.com/1205178" source="BUGZILLA"/>
		<reference ref_id="1205182" ref_url="https://bugzilla.suse.com/1205182" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2601" ref_url="https://www.suse.com/security/cve/CVE-2022-2601/" source="CVE"/>
		<reference ref_id="CVE-2022-3775" ref_url="https://www.suse.com/security/cve/CVE-2022-3775/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4142-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013044.html" source="SUSE-SU"/>
		<description>
This update for grub2 fixes the following issues:

Security Fixes:
    
- CVE-2022-2601: Fixed buffer overflow in grub_font_construct_glyph (bsc#1205178).
- CVE-2022-3775: Fixed integer underflow in blit_comb() (bsc#1205182).
    
Other:

- Bump upstream SBAT generation to 3
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205178">SUSE bug 1205178</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205182">SUSE bug 1205182</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2601/">CVE-2022-2601</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3775/">CVE-2022-3775</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726299" comment="grub2-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726258" comment="grub2-arm64-efi-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726259" comment="grub2-i386-pc-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726300" comment="grub2-powerpc-ieee1275-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726301" comment="grub2-s390x-emu-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726260" comment="grub2-snapper-plugin-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726261" comment="grub2-systemd-sleep-plugin-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726262" comment="grub2-x86_64-efi-2.02-150100.123.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726263" comment="grub2-x86_64-xen-2.02-150100.123.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141122" version="1" class="patch">
	<metadata>
		<title>Security update for binutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1142579" ref_url="https://bugzilla.suse.com/1142579" source="BUGZILLA"/>
		<reference ref_id="1185597" ref_url="https://bugzilla.suse.com/1185597" source="BUGZILLA"/>
		<reference ref_id="1185712" ref_url="https://bugzilla.suse.com/1185712" source="BUGZILLA"/>
		<reference ref_id="1188374" ref_url="https://bugzilla.suse.com/1188374" source="BUGZILLA"/>
		<reference ref_id="1191473" ref_url="https://bugzilla.suse.com/1191473" source="BUGZILLA"/>
		<reference ref_id="1193929" ref_url="https://bugzilla.suse.com/1193929" source="BUGZILLA"/>
		<reference ref_id="1194783" ref_url="https://bugzilla.suse.com/1194783" source="BUGZILLA"/>
		<reference ref_id="1197592" ref_url="https://bugzilla.suse.com/1197592" source="BUGZILLA"/>
		<reference ref_id="1198237" ref_url="https://bugzilla.suse.com/1198237" source="BUGZILLA"/>
		<reference ref_id="1202816" ref_url="https://bugzilla.suse.com/1202816" source="BUGZILLA"/>
		<reference ref_id="1202966" ref_url="https://bugzilla.suse.com/1202966" source="BUGZILLA"/>
		<reference ref_id="1202967" ref_url="https://bugzilla.suse.com/1202967" source="BUGZILLA"/>
		<reference ref_id="1202969" ref_url="https://bugzilla.suse.com/1202969" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-1010204" ref_url="https://www.suse.com/security/cve/CVE-2019-1010204/" source="CVE"/>
		<reference ref_id="CVE-2021-3530" ref_url="https://www.suse.com/security/cve/CVE-2021-3530/" source="CVE"/>
		<reference ref_id="CVE-2021-3648" ref_url="https://www.suse.com/security/cve/CVE-2021-3648/" source="CVE"/>
		<reference ref_id="CVE-2021-3826" ref_url="https://www.suse.com/security/cve/CVE-2021-3826/" source="CVE"/>
		<reference ref_id="CVE-2021-45078" ref_url="https://www.suse.com/security/cve/CVE-2021-45078/" source="CVE"/>
		<reference ref_id="CVE-2021-46195" ref_url="https://www.suse.com/security/cve/CVE-2021-46195/" source="CVE"/>
		<reference ref_id="CVE-2022-27943" ref_url="https://www.suse.com/security/cve/CVE-2022-27943/" source="CVE"/>
		<reference ref_id="CVE-2022-38126" ref_url="https://www.suse.com/security/cve/CVE-2022-38126/" source="CVE"/>
		<reference ref_id="CVE-2022-38127" ref_url="https://www.suse.com/security/cve/CVE-2022-38127/" source="CVE"/>
		<reference ref_id="CVE-2022-38533" ref_url="https://www.suse.com/security/cve/CVE-2022-38533/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4146-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013047.html" source="SUSE-SU"/>
		<description>
This update for binutils fixes the following issues:

The following security bugs were fixed:

- CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579).
- CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-demangle.c (bsc#1185597).
- CVE-2021-3648: Fixed infinite loop while demangling rust symbols (bsc#1188374).
- CVE-2021-3826: Fixed heap/stack buffer overflow in the dlang_lname function in d-demangle.c (bsc#1202969).
- CVE-2021-45078: Fixed out-of-bounds write in stab_xcoff_builtin_type() in stabs.c (bsc#1193929).
- CVE-2021-46195: Fixed uncontrolled recursion in libiberty/rust-demangle.c (bsc#1194783).
- CVE-2022-27943: Fixed stack exhaustion in demangle_const in (bsc#1197592).
- CVE-2022-38126: Fixed assertion fail in the display_debug_names() function in binutils/dwarf.c (bsc#1202966).
- CVE-2022-38127: Fixed NULL pointer dereference in the read_and_display_attr_value() function in binutils/dwarf.c (bsc#1202967).
- CVE-2022-38533: Fixed heap out-of-bounds read in bfd_getl32 (bsc#1202816).


The following non-security bugs were fixed:
  
- SLE toolchain update of binutils, update to 2.39 from 2.37.
- Update to 2.39:  
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification. 
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
    --weaken-symbols options now works with unique symbols as well.

- Update to 2.38:
  * elfedit: Add --output-abiversion option to update ABIVERSION.
  * Add support for the LoongArch instruction set.
  * Tools which display symbols or strings (readelf, strings, nm, objdump)
    have a new command line option which controls how unicode characters are
    handled.  By default they are treated as normal for the tool.  Using
    --unicode=locale will display them according to the current locale.
    Using --unicode=hex will display them as hex byte values, whilst
    --unicode=escape will display them as escape sequences.  In addition
    using --unicode=highlight will display them as unicode escape sequences
    highlighted in red (if supported by the output device).
  * readelf -r dumps RELR relative relocations now.
  * Support for efi-app-aarch64, efi-rtdrv-aarch64 and efi-bsdrv-aarch64 has been
    added to objcopy in order to enable UEFI development using binutils.
  * ar: Add --thin for creating thin archives. -T is a deprecated alias without
    diagnostics. In many ar implementations -T has a different meaning, as
    specified by X/Open System Interface.
  * Add support for AArch64 system registers that were missing in previous
    releases.
  * Add support for the LoongArch instruction set.
  * Add a command-line option, -muse-unaligned-vector-move, for x86 target
    to encode aligned vector move as unaligned vector move.
  * Add support for Cortex-R52+ for Arm.
  * Add support for Cortex-A510, Cortex-A710, Cortex-X2 for AArch64.
  * Add support for Cortex-A710 for Arm.
  * Add support for Scalable Matrix Extension (SME) for AArch64.
  * The --multibyte-handling=[allow|warn|warn-sym-only] option tells the
    assembler what to when it encoutners multibyte characters in the input.  The
    default is to allow them.  Setting the option to 'warn' will generate a
    warning message whenever any multibyte character is encountered.  Using the
    option to 'warn-sym-only' will make the assembler generate a warning whenever a
    symbol is defined containing multibyte characters.  (References to undefined
    symbols will not generate warnings).
  * Outputs of .ds.x directive and .tfloat directive with hex input from
    x86 assembler have been reduced from 12 bytes to 10 bytes to match the
    output of .tfloat directive.
  * Add support for 'armv8.8-a', 'armv9-a', 'armv9.1-a', 'armv9.2-a' and
    'armv9.3-a' for -march in AArch64 GAS.
  * Add support for 'armv8.7-a', 'armv8.8-a', 'armv9-a', 'armv9.1-a',
    'armv9.2-a' and 'armv9.3-a' for -march in Arm GAS.
  * Add support for Intel AVX512_FP16 instructions.
  * Add -z pack-relative-relocs/-z no pack-relative-relocs to x86 ELF
    linker to pack relative relocations in the DT_RELR section.
  * Add support for the LoongArch architecture.
  * Add -z indirect-extern-access/-z noindirect-extern-access to x86 ELF
    linker to control canonical function pointers and copy relocation.
  * Add --max-cache-size=SIZE to set the the maximum cache size to SIZE
    bytes.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.
- Include recognition of 'z16' name for 'arch14' on s390. (bsc#1198237).
- Add back fix for bsc#1191473, which got lost in the update to 2.38.
- Install symlinks for all target specific tools on arm-eabi-none (bsc#1185712).
- Enable PRU architecture for AM335x CPU (Beagle Bone Black board)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1142579">SUSE bug 1142579</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185597">SUSE bug 1185597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185712">SUSE bug 1185712</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188374">SUSE bug 1188374</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191473">SUSE bug 1191473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193929">SUSE bug 1193929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194783">SUSE bug 1194783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197592">SUSE bug 1197592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198237">SUSE bug 1198237</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202816">SUSE bug 1202816</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202966">SUSE bug 1202966</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202967">SUSE bug 1202967</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202969">SUSE bug 1202969</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-1010204/">CVE-2019-1010204</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3530/">CVE-2021-3530</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-3648/">CVE-2021-3648</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-3826/">CVE-2021-3826</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-45078/">CVE-2021-45078</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46195/">CVE-2021-46195</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27943/">CVE-2022-27943</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38126/">CVE-2022-38126</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-38127/">CVE-2022-38127</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-38533/">CVE-2022-38533</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009723071" comment="binutils-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723072" comment="binutils-devel-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723073" comment="binutils-devel-32bit-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723096" comment="libctf-nobfd0-2.39-150100.7.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009723097" comment="libctf0-2.39-150100.7.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141123" version="1" class="patch">
	<metadata>
		<title>Security update for pixman (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205033" ref_url="https://bugzilla.suse.com/1205033" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-44638" ref_url="https://www.suse.com/security/cve/CVE-2022-44638/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4148-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013043.html" source="SUSE-SU"/>
		<description>
This update for pixman fixes the following issues:

- CVE-2022-44638: Fixed an integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (bsc#1205033).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205033">SUSE bug 1205033</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-44638/">CVE-2022-44638</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724868" comment="libpixman-1-0-0.34.0-150000.7.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724872" comment="libpixman-1-0-32bit-0.34.0-150000.7.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724869" comment="libpixman-1-0-devel-0.34.0-150000.7.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141124" version="1" class="patch">
	<metadata>
		<title>Security update for krb5 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205126" ref_url="https://bugzilla.suse.com/1205126" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42898" ref_url="https://www.suse.com/security/cve/CVE-2022-42898/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013049.html" source="SUSE-SU"/>
		<description>
This update for krb5 fixes the following issues:

- CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-21"/>
	<updated date="2022-11-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205126">SUSE bug 1205126</bugzilla>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-42898/">CVE-2022-42898</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726302" comment="krb5-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726265" comment="krb5-32bit-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726303" comment="krb5-client-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726304" comment="krb5-devel-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726305" comment="krb5-plugin-kdb-ldap-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726306" comment="krb5-plugin-preauth-otp-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726307" comment="krb5-plugin-preauth-pkinit-1.16.3-150100.3.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726308" comment="krb5-server-1.16.3-150100.3.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141125" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201684" ref_url="https://bugzilla.suse.com/1201684" source="BUGZILLA"/>
		<reference ref_id="1201685" ref_url="https://bugzilla.suse.com/1201685" source="BUGZILLA"/>
		<reference ref_id="1201692" ref_url="https://bugzilla.suse.com/1201692" source="BUGZILLA"/>
		<reference ref_id="1201694" ref_url="https://bugzilla.suse.com/1201694" source="BUGZILLA"/>
		<reference ref_id="1202427" ref_url="https://bugzilla.suse.com/1202427" source="BUGZILLA"/>
		<reference ref_id="1204468" ref_url="https://bugzilla.suse.com/1204468" source="BUGZILLA"/>
		<reference ref_id="1204471" ref_url="https://bugzilla.suse.com/1204471" source="BUGZILLA"/>
		<reference ref_id="1204472" ref_url="https://bugzilla.suse.com/1204472" source="BUGZILLA"/>
		<reference ref_id="1204473" ref_url="https://bugzilla.suse.com/1204473" source="BUGZILLA"/>
		<reference ref_id="1204475" ref_url="https://bugzilla.suse.com/1204475" source="BUGZILLA"/>
		<reference ref_id="1204480" ref_url="https://bugzilla.suse.com/1204480" source="BUGZILLA"/>
		<reference ref_id="1205302" ref_url="https://bugzilla.suse.com/1205302" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21540" ref_url="https://www.suse.com/security/cve/CVE-2022-21540/" source="CVE"/>
		<reference ref_id="CVE-2022-21541" ref_url="https://www.suse.com/security/cve/CVE-2022-21541/" source="CVE"/>
		<reference ref_id="CVE-2022-21549" ref_url="https://www.suse.com/security/cve/CVE-2022-21549/" source="CVE"/>
		<reference ref_id="CVE-2022-21618" ref_url="https://www.suse.com/security/cve/CVE-2022-21618/" source="CVE"/>
		<reference ref_id="CVE-2022-21619" ref_url="https://www.suse.com/security/cve/CVE-2022-21619/" source="CVE"/>
		<reference ref_id="CVE-2022-21624" ref_url="https://www.suse.com/security/cve/CVE-2022-21624/" source="CVE"/>
		<reference ref_id="CVE-2022-21626" ref_url="https://www.suse.com/security/cve/CVE-2022-21626/" source="CVE"/>
		<reference ref_id="CVE-2022-21628" ref_url="https://www.suse.com/security/cve/CVE-2022-21628/" source="CVE"/>
		<reference ref_id="CVE-2022-34169" ref_url="https://www.suse.com/security/cve/CVE-2022-34169/" source="CVE"/>
		<reference ref_id="CVE-2022-39399" ref_url="https://www.suse.com/security/cve/CVE-2022-39399/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4166-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013066.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

- CVE-2022-21626: An unauthenticated attacker with network access via HTTPS can compromise Oracle Java SE, Oracle GraalVM Enterprise Edition (bsc#1204471).
- CVE-2022-21618: An unauthenticated attacker with network access via Kerberos can compromise Oracle Java SE, Oracle GraalVM Enterprise Edition (bsc#1204468).
- CVE-2022-21619: An unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE (bsc#1204473).
- CVE-2022-21628: An unauthenticated attacker with network access via HTTP can compromise Oracle Java SE, Oracle GraalVM Enterprise Edition (bsc#1204472).
- CVE-2022-21624: An unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise (bsc#1204475).
- CVE-2022-39399: An unauthenticated attacker with network access via HTTP can compromise Oracle Java SE, Oracle GraalVM Enterprise Edition (bsc#1204480).
- CVE-2022-21549: Fixed exponentials issue (bsc#1201685).
- CVE-2022-21541: Fixed an improper restriction of MethodHandle.invokeBasic() (bsc#1201692).
- CVE-2022-34169; Fixed an integer truncation issue in Xalan (bsc#1201684).
- CVE-2022-21540: Fixed a class compilation issue (bsc#1201694).


- Update to Java 8.0 Service Refresh 7 Fix Pack 20.
  * Security:
    - The IBM ORB Does Not Support Object-Serialisation Data Filtering
    - Large Allocation In CipherSuite
    - Avoid Evaluating Sslalgorithmconstraints Twice
    - Cache The Results Of Constraint Checks
    - An incorrect ShortBufferException is thrown by IBMJCEPlus,
      IBMJCEPlusFIPS during cipher update operation
    - Disable SHA-1 Signed Jars For Ea
    - JSSE Performance Improvement
    - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
    - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
    - Crash In Libjsor.So During An Rdma Failover
    - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
    - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
    - Crash During JIT Compilation
    - Incorrect JIT Optimization Of Java Code
    - Incorrect Return From Class.isArray()
    - Unexpected ClassCastException
    - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
    - Add RSA-OAEP Cipher Function To IBMJCECCA

- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
    - Assertion failure at ClassLoaderRememberedSet.cpp
	- Assertion failure at StandardAccessBarrier.cpp when
	  -Xgc:concurrentScavenge is set.
    - GC can have unflushed ownable synchronizer objects which
	  can eventually lead to heap corruption and failure when
	  -Xgc:concurrentScavenge is set.
  *	JIT Compiler:
    - Incorrect JIT optimization of Java code
    - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  *	Reliability and Serviceability:
    - javacore with 'kill -3' SIGQUIT signal freezes Java process
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-22"/>
	<updated date="2022-11-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1201684">SUSE bug 1201684</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201685">SUSE bug 1201685</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201692">SUSE bug 1201692</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201694">SUSE bug 1201694</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202427">SUSE bug 1202427</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204468">SUSE bug 1204468</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204471">SUSE bug 1204471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204472">SUSE bug 1204472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204473">SUSE bug 1204473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204475">SUSE bug 1204475</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204480">SUSE bug 1204480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205302">SUSE bug 1205302</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21540/">CVE-2022-21540</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21541/">CVE-2022-21541</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21549/">CVE-2022-21549</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21618/">CVE-2022-21618</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21619/">CVE-2022-21619</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21624/">CVE-2022-21624</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21626/">CVE-2022-21626</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21628/">CVE-2022-21628</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-34169/">CVE-2022-34169</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-39399/">CVE-2022-39399</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725714" comment="java-1_8_0-ibm-1.8.0_sr7.20-150000.3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725716" comment="java-1_8_0-ibm-alsa-1.8.0_sr7.20-150000.3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725718" comment="java-1_8_0-ibm-devel-1.8.0_sr7.20-150000.3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725720" comment="java-1_8_0-ibm-plugin-1.8.0_sr7.20-150000.3.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141126" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203868" ref_url="https://bugzilla.suse.com/1203868" source="BUGZILLA"/>
		<reference ref_id="1204918" ref_url="https://bugzilla.suse.com/1204918" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-43980" ref_url="https://www.suse.com/security/cve/CVE-2021-43980/" source="CVE"/>
		<reference ref_id="CVE-2022-42252" ref_url="https://www.suse.com/security/cve/CVE-2022-42252/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4257-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013132.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2021-43980: Fixed information disclosure due to concurrency issues in Http11Processor (bsc#1203868).
- CVE-2022-42252: Fixed a request smuggling (bsc#1204918).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203868">SUSE bug 1203868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204918">SUSE bug 1204918</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-43980/">CVE-2021-43980</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42252/">CVE-2022-42252</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726519" comment="tomcat-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726520" comment="tomcat-admin-webapps-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726521" comment="tomcat-el-3_0-api-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726522" comment="tomcat-jsp-2_3-api-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726523" comment="tomcat-lib-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726524" comment="tomcat-servlet-4_0-api-9.0.36-150100.4.81.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726525" comment="tomcat-webapps-9.0.36-150100.4.81.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141127" version="1" class="patch">
	<metadata>
		<title>Security update for python3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205244" ref_url="https://bugzilla.suse.com/1205244" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45061" ref_url="https://www.suse.com/security/cve/CVE-2022-45061/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4258-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013134.html" source="SUSE-SU"/>
		<description>
This update for python3 fixes the following issues:

- CVE-2022-45061: Fixed possible DoS when IDNA decoding extremely long domain names (bsc#1205244).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205244">SUSE bug 1205244</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45061/">CVE-2022-45061</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724972" comment="libpython3_6m1_0-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724973" comment="python3-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724974" comment="python3-base-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724975" comment="python3-curses-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724976" comment="python3-dbm-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724977" comment="python3-devel-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724978" comment="python3-idle-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727179" comment="python3-testsuite-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724979" comment="python3-tk-3.6.15-150000.3.119.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724980" comment="python3-tools-3.6.15-150000.3.119.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141128" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204641" ref_url="https://bugzilla.suse.com/1204641" source="BUGZILLA"/>
		<reference ref_id="1204643" ref_url="https://bugzilla.suse.com/1204643" source="BUGZILLA"/>
		<reference ref_id="1204644" ref_url="https://bugzilla.suse.com/1204644" source="BUGZILLA"/>
		<reference ref_id="1204645" ref_url="https://bugzilla.suse.com/1204645" source="BUGZILLA"/>
		<reference ref_id="1205392" ref_url="https://bugzilla.suse.com/1205392" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3597" ref_url="https://www.suse.com/security/cve/CVE-2022-3597/" source="CVE"/>
		<reference ref_id="CVE-2022-3599" ref_url="https://www.suse.com/security/cve/CVE-2022-3599/" source="CVE"/>
		<reference ref_id="CVE-2022-3626" ref_url="https://www.suse.com/security/cve/CVE-2022-3626/" source="CVE"/>
		<reference ref_id="CVE-2022-3627" ref_url="https://www.suse.com/security/cve/CVE-2022-3627/" source="CVE"/>
		<reference ref_id="CVE-2022-3970" ref_url="https://www.suse.com/security/cve/CVE-2022-3970/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4259-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013135.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-3597: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204641).
- CVE-2022-3599: Fixed out-of-bounds read in writeSingleSection in tools/tiffcrop.c (bnc#1204643).
- CVE-2022-3626: Fixed out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (bnc#1204644)
- CVE-2022-3627: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204645).
- CVE-2022-3970: Fixed unsigned integer overflow in TIFFReadRGBATileExt() (bnc#1205392).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204641">SUSE bug 1204641</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204643">SUSE bug 1204643</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204644">SUSE bug 1204644</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204645">SUSE bug 1204645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205392">SUSE bug 1205392</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3597/">CVE-2022-3597</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3599/">CVE-2022-3599</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3626/">CVE-2022-3626</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3627/">CVE-2022-3627</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3970/">CVE-2022-3970</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725455" comment="libtiff-devel-4.0.9-150000.45.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725457" comment="libtiff5-4.0.9-150000.45.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725458" comment="libtiff5-32bit-4.0.9-150000.45.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141129" version="1" class="patch">
	<metadata>
		<title>Security update for busybox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1099260" ref_url="https://bugzilla.suse.com/1099260" source="BUGZILLA"/>
		<reference ref_id="914660" ref_url="https://bugzilla.suse.com/914660" source="BUGZILLA"/>
		<reference ref_id="CVE-2014-9645" ref_url="https://www.suse.com/security/cve/CVE-2014-9645/" source="CVE"/>
		<reference ref_id="CVE-2018-1000517" ref_url="https://www.suse.com/security/cve/CVE-2018-1000517/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4260-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013133.html" source="SUSE-SU"/>
		<description>
This update for busybox fixes the following issues:

- CVE-2014-9645: Fixed loading of unwanted module with / in module names (bsc#914660).

- Enable switch_root
  With this change virtme --force-initramfs works as expected.

- Enable udhcpc

Update to 1.35.0:
    
- awk: fix printf %%, fix read beyond end of buffer
- Adjust busybox.config for new features in find, date and cpio 
- chrt: silence analyzer warning
- libarchive: remove duplicate forward declaration
- mount: 'mount -o rw ....' should not fall back to RO mount
- ps: fix -o pid=PID,args interpreting entire 'PID,args' as header
- tar: prevent malicious archives with long name sizes causing OOM
- udhcpc6: fix udhcp_find_option to actually find DHCP6 options
- xxd: fix -p -r
- support for new optoins added to basename, cpio, date, find, 
  mktemp, wget and others

- Adjust busybox.config for new features in find, date and cpio 
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-28"/>
	<updated date="2022-11-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1099260">SUSE bug 1099260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/914660">SUSE bug 914660</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2014-9645/">CVE-2014-9645</cve>
	<cve impact="important" cvss3="5.6/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-1000517/">CVE-2018-1000517</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725896" comment="busybox-1.35.0-150000.4.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725897" comment="busybox-static-1.35.0-150000.4.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141130" version="1" class="patch">
	<metadata>
		<title>Security update for nginx (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1187685" ref_url="https://bugzilla.suse.com/1187685" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3618" ref_url="https://www.suse.com/security/cve/CVE-2021-3618/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4266-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013137.html" source="SUSE-SU"/>
		<description>
This update for nginx fixes the following issues:

- CVE-2021-3618: Fixed the ALPACA attack limiting the number of errors after which the connection is closed (bsc#1187685).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1187685">SUSE bug 1187685</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-3618/">CVE-2021-3618</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009727265" comment="nginx-1.16.1-150100.6.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725916" comment="nginx-source-1.16.1-150100.6.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141131" version="1" class="patch">
	<metadata>
		<title>Security update for exiv2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1050257" ref_url="https://bugzilla.suse.com/1050257" source="BUGZILLA"/>
		<reference ref_id="1095070" ref_url="https://bugzilla.suse.com/1095070" source="BUGZILLA"/>
		<reference ref_id="1110282" ref_url="https://bugzilla.suse.com/1110282" source="BUGZILLA"/>
		<reference ref_id="1119559" ref_url="https://bugzilla.suse.com/1119559" source="BUGZILLA"/>
		<reference ref_id="1119560" ref_url="https://bugzilla.suse.com/1119560" source="BUGZILLA"/>
		<reference ref_id="1119562" ref_url="https://bugzilla.suse.com/1119562" source="BUGZILLA"/>
		<reference ref_id="1142677" ref_url="https://bugzilla.suse.com/1142677" source="BUGZILLA"/>
		<reference ref_id="1142678" ref_url="https://bugzilla.suse.com/1142678" source="BUGZILLA"/>
		<reference ref_id="1153577" ref_url="https://bugzilla.suse.com/1153577" source="BUGZILLA"/>
		<reference ref_id="1186231" ref_url="https://bugzilla.suse.com/1186231" source="BUGZILLA"/>
		<reference ref_id="1189337" ref_url="https://bugzilla.suse.com/1189337" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-11591" ref_url="https://www.suse.com/security/cve/CVE-2017-11591/" source="CVE"/>
		<reference ref_id="CVE-2018-11531" ref_url="https://www.suse.com/security/cve/CVE-2018-11531/" source="CVE"/>
		<reference ref_id="CVE-2018-17581" ref_url="https://www.suse.com/security/cve/CVE-2018-17581/" source="CVE"/>
		<reference ref_id="CVE-2018-20097" ref_url="https://www.suse.com/security/cve/CVE-2018-20097/" source="CVE"/>
		<reference ref_id="CVE-2018-20098" ref_url="https://www.suse.com/security/cve/CVE-2018-20098/" source="CVE"/>
		<reference ref_id="CVE-2018-20099" ref_url="https://www.suse.com/security/cve/CVE-2018-20099/" source="CVE"/>
		<reference ref_id="CVE-2019-13109" ref_url="https://www.suse.com/security/cve/CVE-2019-13109/" source="CVE"/>
		<reference ref_id="CVE-2019-13110" ref_url="https://www.suse.com/security/cve/CVE-2019-13110/" source="CVE"/>
		<reference ref_id="CVE-2019-17402" ref_url="https://www.suse.com/security/cve/CVE-2019-17402/" source="CVE"/>
		<reference ref_id="CVE-2021-29473" ref_url="https://www.suse.com/security/cve/CVE-2021-29473/" source="CVE"/>
		<reference ref_id="CVE-2021-32815" ref_url="https://www.suse.com/security/cve/CVE-2021-32815/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4276-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013143.html" source="SUSE-SU"/>
		<description>
This update for exiv2 fixes the following issues:

- CVE-2019-13110: Fixed an integer-overflow and out-of-bounds read in CiffDirectory:readDirectory leads to denail of service (bsc#1142678).
- CVE-2019-13109: Fixed a denial of service in PngImage:readMetadata (bsc#1142677).
- CVE-2018-17581: Fixed an excessive stack consumption CiffDirectory:readDirectory() at crwimage_int.cpp (bsc#1110282).
- CVE-2017-11591: Fixed a floating point exception in Exiv2::ValueType (bsc#1050257).
- CVE-2019-17402: Fixed an improper validation of the total size to the offset and size leads to a crash in Exiv2::getULong in types.cpp (bsc#1153577).
- CVE-2021-32815: Fixed a deny-of-service due to assertion failure in crwimage_int.cpp (bsc#1189337).
- CVE-2018-20097: Fixed SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroupsu (bsc#1119562).
- CVE-2021-29473: Fixed out-of-bounds read in Exiv2::Jp2Image:doWriteMetadata (bsc#1186231).
- CVE-2018-20098: Fixed a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header (bsc#1119560).
- CVE-2018-11531: Fixed a heap-based buffer overflow in getData in preview.cpp (bsc#1095070).
- CVE-2018-20099: exiv2: infinite loop in Exiv2::Jp2Image::encodeJp2Header (bsc#1119559).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1050257">SUSE bug 1050257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1095070">SUSE bug 1095070</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1110282">SUSE bug 1110282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119559">SUSE bug 1119559</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119560">SUSE bug 1119560</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1119562">SUSE bug 1119562</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142677">SUSE bug 1142677</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1142678">SUSE bug 1142678</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1153577">SUSE bug 1153577</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1186231">SUSE bug 1186231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189337">SUSE bug 1189337</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-11591/">CVE-2017-11591</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2018-11531/">CVE-2018-11531</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-17581/">CVE-2018-17581</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20097/">CVE-2018-20097</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20098/">CVE-2018-20098</cve>
	<cve impact="low" cvss3="4/CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2018-20099/">CVE-2018-20099</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13109/">CVE-2019-13109</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13110/">CVE-2019-13110</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-17402/">CVE-2019-17402</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-29473/">CVE-2021-29473</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-32815/">CVE-2021-32815</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009725374" comment="libexiv2-26-0.26-150000.6.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725375" comment="libexiv2-devel-0.26-150000.6.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141132" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192478" ref_url="https://bugzilla.suse.com/1192478" source="BUGZILLA"/>
		<reference ref_id="1202962" ref_url="https://bugzilla.suse.com/1202962" source="BUGZILLA"/>
		<reference ref_id="1203110" ref_url="https://bugzilla.suse.com/1203110" source="BUGZILLA"/>
		<reference ref_id="1203152" ref_url="https://bugzilla.suse.com/1203152" source="BUGZILLA"/>
		<reference ref_id="1203155" ref_url="https://bugzilla.suse.com/1203155" source="BUGZILLA"/>
		<reference ref_id="1203194" ref_url="https://bugzilla.suse.com/1203194" source="BUGZILLA"/>
		<reference ref_id="1203272" ref_url="https://bugzilla.suse.com/1203272" source="BUGZILLA"/>
		<reference ref_id="1203508" ref_url="https://bugzilla.suse.com/1203508" source="BUGZILLA"/>
		<reference ref_id="1203509" ref_url="https://bugzilla.suse.com/1203509" source="BUGZILLA"/>
		<reference ref_id="1203796" ref_url="https://bugzilla.suse.com/1203796" source="BUGZILLA"/>
		<reference ref_id="1203797" ref_url="https://bugzilla.suse.com/1203797" source="BUGZILLA"/>
		<reference ref_id="1203799" ref_url="https://bugzilla.suse.com/1203799" source="BUGZILLA"/>
		<reference ref_id="1203820" ref_url="https://bugzilla.suse.com/1203820" source="BUGZILLA"/>
		<reference ref_id="1203924" ref_url="https://bugzilla.suse.com/1203924" source="BUGZILLA"/>
		<reference ref_id="1204779" ref_url="https://bugzilla.suse.com/1204779" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3928" ref_url="https://www.suse.com/security/cve/CVE-2021-3928/" source="CVE"/>
		<reference ref_id="CVE-2022-2980" ref_url="https://www.suse.com/security/cve/CVE-2022-2980/" source="CVE"/>
		<reference ref_id="CVE-2022-2982" ref_url="https://www.suse.com/security/cve/CVE-2022-2982/" source="CVE"/>
		<reference ref_id="CVE-2022-3037" ref_url="https://www.suse.com/security/cve/CVE-2022-3037/" source="CVE"/>
		<reference ref_id="CVE-2022-3099" ref_url="https://www.suse.com/security/cve/CVE-2022-3099/" source="CVE"/>
		<reference ref_id="CVE-2022-3134" ref_url="https://www.suse.com/security/cve/CVE-2022-3134/" source="CVE"/>
		<reference ref_id="CVE-2022-3153" ref_url="https://www.suse.com/security/cve/CVE-2022-3153/" source="CVE"/>
		<reference ref_id="CVE-2022-3234" ref_url="https://www.suse.com/security/cve/CVE-2022-3234/" source="CVE"/>
		<reference ref_id="CVE-2022-3235" ref_url="https://www.suse.com/security/cve/CVE-2022-3235/" source="CVE"/>
		<reference ref_id="CVE-2022-3278" ref_url="https://www.suse.com/security/cve/CVE-2022-3278/" source="CVE"/>
		<reference ref_id="CVE-2022-3296" ref_url="https://www.suse.com/security/cve/CVE-2022-3296/" source="CVE"/>
		<reference ref_id="CVE-2022-3297" ref_url="https://www.suse.com/security/cve/CVE-2022-3297/" source="CVE"/>
		<reference ref_id="CVE-2022-3324" ref_url="https://www.suse.com/security/cve/CVE-2022-3324/" source="CVE"/>
		<reference ref_id="CVE-2022-3352" ref_url="https://www.suse.com/security/cve/CVE-2022-3352/" source="CVE"/>
		<reference ref_id="CVE-2022-3705" ref_url="https://www.suse.com/security/cve/CVE-2022-3705/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4282-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013152.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

Updated to version 9.0 with patch level 0814:

- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).
- CVE-2022-3234: Fixed heap-based buffer overflow (bsc#1203508).
- CVE-2022-3235: Fixed use-after-free (bsc#1203509).
- CVE-2022-3324: Fixed stack-based buffer overflow (bsc#1203820).
- CVE-2022-3705: Fixed use-after-free in function qf_update_buffer of the file quickfix.c (bsc#1204779).
- CVE-2022-2982: Fixed use-after-free in qf_fill_buffer() (bsc#1203152).
- CVE-2022-3296: Fixed stack out of bounds read in ex_finally() in ex_eval.c (bsc#1203796).
- CVE-2022-3297: Fixed use-after-free in process_next_cpt_value() at insexpand.c (bsc#1203797).
- CVE-2022-3099: Fixed use-after-free in ex_docmd.c (bsc#1203110).
- CVE-2022-3134: Fixed use-after-free in do_tag() (bsc#1203194).
- CVE-2022-3153: Fixed NULL pointer dereference (bsc#1203272).
- CVE-2022-3278: Fixed NULL pointer dereference in eval_next_non_blank() in eval.c (bsc#1203799).
- CVE-2022-3352: Fixed use-after-free (bsc#1203924).
- CVE-2022-2980: Fixed NULL pointer dereference in do_mouse() (bsc#1203155).
- CVE-2022-3037: Fixed use-after-free (bsc#1202962).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192478">SUSE bug 1192478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202962">SUSE bug 1202962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203110">SUSE bug 1203110</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203152">SUSE bug 1203152</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203155">SUSE bug 1203155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203194">SUSE bug 1203194</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203272">SUSE bug 1203272</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203508">SUSE bug 1203508</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203509">SUSE bug 1203509</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203796">SUSE bug 1203796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203797">SUSE bug 1203797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203799">SUSE bug 1203799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203820">SUSE bug 1203820</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203924">SUSE bug 1203924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204779">SUSE bug 1204779</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3928/">CVE-2021-3928</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2980/">CVE-2022-2980</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-2982/">CVE-2022-2982</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3037/">CVE-2022-3037</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-3099/">CVE-2022-3099</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3134/">CVE-2022-3134</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3153/">CVE-2022-3153</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3234/">CVE-2022-3234</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3235/">CVE-2022-3235</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3278/">CVE-2022-3278</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-3296/">CVE-2022-3296</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3297/">CVE-2022-3297</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3324/">CVE-2022-3324</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-3352/">CVE-2022-3352</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-3705/">CVE-2022-3705</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726767" comment="gvim-9.0.0814-150000.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726768" comment="vim-9.0.0814-150000.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726769" comment="vim-data-9.0.0814-150000.5.28.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726770" comment="vim-data-common-9.0.0814-150000.5.28.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141133" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205120" ref_url="https://bugzilla.suse.com/1205120" source="BUGZILLA"/>
		<reference ref_id="1205121" ref_url="https://bugzilla.suse.com/1205121" source="BUGZILLA"/>
		<reference ref_id="1205122" ref_url="https://bugzilla.suse.com/1205122" source="BUGZILLA"/>
		<reference ref_id="1205123" ref_url="https://bugzilla.suse.com/1205123" source="BUGZILLA"/>
		<reference ref_id="1205124" ref_url="https://bugzilla.suse.com/1205124" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32888" ref_url="https://www.suse.com/security/cve/CVE-2022-32888/" source="CVE"/>
		<reference ref_id="CVE-2022-32923" ref_url="https://www.suse.com/security/cve/CVE-2022-32923/" source="CVE"/>
		<reference ref_id="CVE-2022-42799" ref_url="https://www.suse.com/security/cve/CVE-2022-42799/" source="CVE"/>
		<reference ref_id="CVE-2022-42823" ref_url="https://www.suse.com/security/cve/CVE-2022-42823/" source="CVE"/>
		<reference ref_id="CVE-2022-42824" ref_url="https://www.suse.com/security/cve/CVE-2022-42824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4284-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-November/013159.html" source="SUSE-SU"/>
		<description>

Security fixes:

- CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205121).
- CVE-2022-32923: Fixed possible information leak via maliciously crafted web content (bsc#1205122).
- CVE-2022-42799: Fixed user interface spoofing when visiting a malicious website (bsc#1205123).
- CVE-2022-42823: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205120).
- CVE-2022-42824: Fixed possible sensitive user information leak via maliciously crafted web content (bsc#1205124).

Update to version 2.38.2:

  - Fix scrolling issues in some sites having fixed background.
  - Fix prolonged buffering during progressive live playback.
  - Fix the build with accessibility disabled.
  - Fix several crashes and rendering issues.
    
Update to version 2.38.1:

  - Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  - Use a single xdg-dbus-proxy process when sandbox is enabled.
  - Fix high resolution video playback due to unimplemented
    changeType operation.
  - Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  - Fix player stucking in buffering (paused) state for progressive
    streaming.
  - Do not try to preconnect on link click when link preconnect
    setting is disabled.
  - Fix close status code returned when the client closes a
    WebSocket in some cases.
  - Fix media player duration calculation.
  - Fix several crashes and rendering issues.

Update to version 2.38.0:

  - New media controls UI style.
  - Add new API to set WebView's Content-Security-Policy for web
    extensions support.
  - Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  - MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  - Add support for PDF documents using PDF.js.
  		</description>
<advisory from="security@suse.de">
	<issued date="2022-11-29"/>
	<updated date="2022-11-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205120">SUSE bug 1205120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205121">SUSE bug 1205121</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205122">SUSE bug 1205122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205123">SUSE bug 1205123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205124">SUSE bug 1205124</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32888/">CVE-2022-32888</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-32923/">CVE-2022-32923</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-42799/">CVE-2022-42799</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42823/">CVE-2022-42823</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-42824/">CVE-2022-42824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009726526" comment="libjavascriptcoregtk-4_0-18-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726527" comment="libwebkit2gtk-4_0-37-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726513" comment="libwebkit2gtk3-lang-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726528" comment="typelib-1_0-JavaScriptCore-4_0-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726529" comment="typelib-1_0-WebKit2-4_0-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726530" comment="typelib-1_0-WebKit2WebExtension-4_0-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726531" comment="webkit2gtk-4_0-injected-bundles-2.38.2-150000.3.122.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726532" comment="webkit2gtk3-devel-2.38.2-150000.3.122.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141134" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205119" ref_url="https://bugzilla.suse.com/1205119" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-43548" ref_url="https://www.suse.com/security/cve/CVE-2022-43548/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4301-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013181.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- CVE-2022-43548: Fixed DNS rebinding in --inspect via invalid octal IP address (bsc#1205119).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-01"/>
	<updated date="2022-12-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205119">SUSE bug 1205119</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-43548/">CVE-2022-43548</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009724643" comment="nodejs10-10.24.1-150000.1.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724644" comment="nodejs10-devel-10.24.1-150000.1.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724645" comment="nodejs10-docs-10.24.1-150000.1.53.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009724646" comment="npm10-10.24.1-150000.1.53.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141135" version="1" class="patch">
	<metadata>
		<title>Security update for emacs (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205822" ref_url="https://bugzilla.suse.com/1205822" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45939" ref_url="https://www.suse.com/security/cve/CVE-2022-45939/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4310-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013190.html" source="SUSE-SU"/>
		<description>
This update for emacs fixes the following issues:

- CVE-2022-45939: Fixed shell command injection via source code files when using ctags (bsc#1205822).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-02"/>
	<updated date="2022-12-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205822">SUSE bug 1205822</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45939/">CVE-2022-45939</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009727404" comment="emacs-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727405" comment="emacs-el-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727406" comment="emacs-info-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727407" comment="emacs-nox-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727409" comment="emacs-x11-25.3-150000.3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727408" comment="etags-25.3-150000.3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141136" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204642" ref_url="https://bugzilla.suse.com/1204642" source="BUGZILLA"/>
		<reference ref_id="1205422" ref_url="https://bugzilla.suse.com/1205422" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3570" ref_url="https://www.suse.com/security/cve/CVE-2022-3570/" source="CVE"/>
		<reference ref_id="CVE-2022-3598" ref_url="https://www.suse.com/security/cve/CVE-2022-3598/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4411-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013217.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2022-3570: Fixed heap buffer overflows in tiffcrop.c (bsc#1205422).
- CVE-2022-3598: Fixed out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c [bsc#1204642]
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204642">SUSE bug 1204642</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205422">SUSE bug 1205422</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3570/">CVE-2022-3570</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3598/">CVE-2022-3598</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009727224" comment="libtiff-devel-4.0.9-150000.45.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727226" comment="libtiff5-4.0.9-150000.45.22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727227" comment="libtiff5-32bit-4.0.9-150000.45.22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141137" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204471" ref_url="https://bugzilla.suse.com/1204471" source="BUGZILLA"/>
		<reference ref_id="1204472" ref_url="https://bugzilla.suse.com/1204472" source="BUGZILLA"/>
		<reference ref_id="1204473" ref_url="https://bugzilla.suse.com/1204473" source="BUGZILLA"/>
		<reference ref_id="1204475" ref_url="https://bugzilla.suse.com/1204475" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21619" ref_url="https://www.suse.com/security/cve/CVE-2022-21619/" source="CVE"/>
		<reference ref_id="CVE-2022-21624" ref_url="https://www.suse.com/security/cve/CVE-2022-21624/" source="CVE"/>
		<reference ref_id="CVE-2022-21626" ref_url="https://www.suse.com/security/cve/CVE-2022-21626/" source="CVE"/>
		<reference ref_id="CVE-2022-21628" ref_url="https://www.suse.com/security/cve/CVE-2022-21628/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4452-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013224.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

Update to version jdk8u352 (icedtea-3.25.0):

- CVE-2022-21619,CVE-2022-21624: Fixed difficult to exploit vulnerability allows unauthenticated attacker with network access and can cause unauthorized update, insert or delete access via multiple protocols (bsc#1204473,bsc#1204475).
- CVE-2022-21626: Fixed easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to cause partial denial of service (bsc#1204471).
- CVE-2022-21628: Fixed easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to cause partial denial of service (bsc#1204472).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1204471">SUSE bug 1204471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204472">SUSE bug 1204472</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204473">SUSE bug 1204473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204475">SUSE bug 1204475</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21619/">CVE-2022-21619</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21624/">CVE-2022-21624</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21626/">CVE-2022-21626</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21628/">CVE-2022-21628</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009727576" comment="java-1_8_0-openjdk-1.8.0.352-150000.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727578" comment="java-1_8_0-openjdk-demo-1.8.0.352-150000.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727579" comment="java-1_8_0-openjdk-devel-1.8.0.352-150000.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727580" comment="java-1_8_0-openjdk-headless-1.8.0.352-150000.3.73.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141138" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204822" ref_url="https://bugzilla.suse.com/1204822" source="BUGZILLA"/>
		<reference ref_id="1206189" ref_url="https://bugzilla.suse.com/1206189" source="BUGZILLA"/>
		<reference ref_id="1206190" ref_url="https://bugzilla.suse.com/1206190" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3725" ref_url="https://www.suse.com/security/cve/CVE-2022-3725/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4453-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013223.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

Update to version 3.6.10:

- CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Multiple dissector infinite loops (bsc#1206189).
- Kafka dissector memory exhaustion (bsc#1206190).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204822">SUSE bug 1204822</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206189">SUSE bug 1206189</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206190">SUSE bug 1206190</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3725/">CVE-2022-3725</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009727811" comment="libwireshark15-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727812" comment="libwiretap12-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727813" comment="libwsutil13-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727814" comment="wireshark-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727815" comment="wireshark-devel-3.6.10-150000.3.78.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009727816" comment="wireshark-ui-qt-3.6.10-150000.3.78.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141139" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206242" ref_url="https://bugzilla.suse.com/1206242" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-46872" ref_url="https://www.suse.com/security/cve/CVE-2022-46872/" source="CVE"/>
		<reference ref_id="CVE-2022-46874" ref_url="https://www.suse.com/security/cve/CVE-2022-46874/" source="CVE"/>
		<reference ref_id="CVE-2022-46875" ref_url="https://www.suse.com/security/cve/CVE-2022-46875/" source="CVE"/>
		<reference ref_id="CVE-2022-46878" ref_url="https://www.suse.com/security/cve/CVE-2022-46878/" source="CVE"/>
		<reference ref_id="CVE-2022-46880" ref_url="https://www.suse.com/security/cve/CVE-2022-46880/" source="CVE"/>
		<reference ref_id="CVE-2022-46881" ref_url="https://www.suse.com/security/cve/CVE-2022-46881/" source="CVE"/>
		<reference ref_id="CVE-2022-46882" ref_url="https://www.suse.com/security/cve/CVE-2022-46882/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4461-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013227.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 102.6.0 ESR (bsc#1206242):

- CVE-2022-46880: Use-after-free in WebGL
- CVE-2022-46872: Arbitrary file read from a compromised content process
- CVE-2022-46881: Memory corruption in WebGL
- CVE-2022-46874: Drag and Dropped Filenames could have been truncated to malicious extensions
- CVE-2022-46875: Download Protections were bypassed by .atloc and .ftploc files on Mac OS
- CVE-2022-46882: Use-after-free in WebGL
- CVE-2022-46878: Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206242">SUSE bug 1206242</bugzilla>
	<cve impact="critical" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-46872/">CVE-2022-46872</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46874/">CVE-2022-46874</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-46875/">CVE-2022-46875</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46878/">CVE-2022-46878</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-46880/">CVE-2022-46880</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46881/">CVE-2022-46881</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46882/">CVE-2022-46882</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728146" comment="MozillaFirefox-102.6.0-150000.150.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728147" comment="MozillaFirefox-devel-102.6.0-150000.150.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728148" comment="MozillaFirefox-translations-common-102.6.0-150000.150.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728149" comment="MozillaFirefox-translations-other-102.6.0-150000.150.68.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141140" version="1" class="patch">
	<metadata>
		<title>Security update for containerd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197284" ref_url="https://bugzilla.suse.com/1197284" source="BUGZILLA"/>
		<reference ref_id="1206065" ref_url="https://bugzilla.suse.com/1206065" source="BUGZILLA"/>
		<reference ref_id="1206235" ref_url="https://bugzilla.suse.com/1206235" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23471" ref_url="https://www.suse.com/security/cve/CVE-2022-23471/" source="CVE"/>
		<reference ref_id="CVE-2022-27191" ref_url="https://www.suse.com/security/cve/CVE-2022-27191/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4463-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013228.html" source="SUSE-SU"/>
		<description>
This update for containerd fixes the following issues:

Update to containerd v1.6.12 including Docker v20.10.21-ce (bsc#1206065). 

Also includes the following fix:

- CVE-2022-23471: host memory exhaustion through Terminal resize goroutine leak (bsc#1206235).
- CVE-2022-27191: crash in a golang.org/x/crypto/ssh server (bsc#1197284).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-13"/>
	<updated date="2022-12-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197284">SUSE bug 1197284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206065">SUSE bug 1206065</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206235">SUSE bug 1206235</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23471/">CVE-2022-23471</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27191/">CVE-2022-27191</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728091" comment="containerd-1.6.12-150000.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728092" comment="containerd-ctr-1.6.12-150000.79.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141141" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205874" ref_url="https://bugzilla.suse.com/1205874" source="BUGZILLA"/>
		<reference ref_id="1205875" ref_url="https://bugzilla.suse.com/1205875" source="BUGZILLA"/>
		<reference ref_id="1205876" ref_url="https://bugzilla.suse.com/1205876" source="BUGZILLA"/>
		<reference ref_id="1205877" ref_url="https://bugzilla.suse.com/1205877" source="BUGZILLA"/>
		<reference ref_id="1205878" ref_url="https://bugzilla.suse.com/1205878" source="BUGZILLA"/>
		<reference ref_id="1205879" ref_url="https://bugzilla.suse.com/1205879" source="BUGZILLA"/>
		<reference ref_id="1206017" ref_url="https://bugzilla.suse.com/1206017" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4283" ref_url="https://www.suse.com/security/cve/CVE-2022-4283/" source="CVE"/>
		<reference ref_id="CVE-2022-46340" ref_url="https://www.suse.com/security/cve/CVE-2022-46340/" source="CVE"/>
		<reference ref_id="CVE-2022-46341" ref_url="https://www.suse.com/security/cve/CVE-2022-46341/" source="CVE"/>
		<reference ref_id="CVE-2022-46342" ref_url="https://www.suse.com/security/cve/CVE-2022-46342/" source="CVE"/>
		<reference ref_id="CVE-2022-46343" ref_url="https://www.suse.com/security/cve/CVE-2022-46343/" source="CVE"/>
		<reference ref_id="CVE-2022-46344" ref_url="https://www.suse.com/security/cve/CVE-2022-46344/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4481-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013246.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2022-46340: Server XTestSwapFakeInput stack overflow (bsc#1205874)
- CVE-2022-46341: Server XIPassiveUngrabDevice out-of-bounds access (bsc#1205877)
- CVE-2022-46342: Server XvdiSelectVideoNotify use-after-free (bsc#1205879)
- CVE-2022-46343: Server ScreenSaverSetAttributes use-after-free (bsc#1205878)
- CVE-2022-46344: Server XIChangeProperty out-of-bounds access (bsc#1205876)
- CVE-2022-4283: Reset the radio_groups pointer to NULL after freeing it (bsc#1206017)
- Xi: return an error from XI property changes if verification failed (bsc#1205875)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-14"/>
	<updated date="2022-12-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205874">SUSE bug 1205874</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205875">SUSE bug 1205875</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205876">SUSE bug 1205876</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205877">SUSE bug 1205877</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205878">SUSE bug 1205878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205879">SUSE bug 1205879</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206017">SUSE bug 1206017</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4283/">CVE-2022-4283</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46340/">CVE-2022-46340</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46341/">CVE-2022-46341</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-46342/">CVE-2022-46342</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-46343/">CVE-2022-46343</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-46344/">CVE-2022-46344</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728972" comment="xorg-x11-server-1.20.3-150100.14.5.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728973" comment="xorg-x11-server-extra-1.20.3-150100.14.5.33.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728974" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.33.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141142" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1198702" ref_url="https://bugzilla.suse.com/1198702" source="BUGZILLA"/>
		<reference ref_id="1199365" ref_url="https://bugzilla.suse.com/1199365" source="BUGZILLA"/>
		<reference ref_id="1200788" ref_url="https://bugzilla.suse.com/1200788" source="BUGZILLA"/>
		<reference ref_id="1200845" ref_url="https://bugzilla.suse.com/1200845" source="BUGZILLA"/>
		<reference ref_id="1201455" ref_url="https://bugzilla.suse.com/1201455" source="BUGZILLA"/>
		<reference ref_id="1202686" ref_url="https://bugzilla.suse.com/1202686" source="BUGZILLA"/>
		<reference ref_id="1203008" ref_url="https://bugzilla.suse.com/1203008" source="BUGZILLA"/>
		<reference ref_id="1203183" ref_url="https://bugzilla.suse.com/1203183" source="BUGZILLA"/>
		<reference ref_id="1203290" ref_url="https://bugzilla.suse.com/1203290" source="BUGZILLA"/>
		<reference ref_id="1203322" ref_url="https://bugzilla.suse.com/1203322" source="BUGZILLA"/>
		<reference ref_id="1203514" ref_url="https://bugzilla.suse.com/1203514" source="BUGZILLA"/>
		<reference ref_id="1203860" ref_url="https://bugzilla.suse.com/1203860" source="BUGZILLA"/>
		<reference ref_id="1203960" ref_url="https://bugzilla.suse.com/1203960" source="BUGZILLA"/>
		<reference ref_id="1204017" ref_url="https://bugzilla.suse.com/1204017" source="BUGZILLA"/>
		<reference ref_id="1204166" ref_url="https://bugzilla.suse.com/1204166" source="BUGZILLA"/>
		<reference ref_id="1204170" ref_url="https://bugzilla.suse.com/1204170" source="BUGZILLA"/>
		<reference ref_id="1204354" ref_url="https://bugzilla.suse.com/1204354" source="BUGZILLA"/>
		<reference ref_id="1204355" ref_url="https://bugzilla.suse.com/1204355" source="BUGZILLA"/>
		<reference ref_id="1204402" ref_url="https://bugzilla.suse.com/1204402" source="BUGZILLA"/>
		<reference ref_id="1204414" ref_url="https://bugzilla.suse.com/1204414" source="BUGZILLA"/>
		<reference ref_id="1204415" ref_url="https://bugzilla.suse.com/1204415" source="BUGZILLA"/>
		<reference ref_id="1204424" ref_url="https://bugzilla.suse.com/1204424" source="BUGZILLA"/>
		<reference ref_id="1204431" ref_url="https://bugzilla.suse.com/1204431" source="BUGZILLA"/>
		<reference ref_id="1204432" ref_url="https://bugzilla.suse.com/1204432" source="BUGZILLA"/>
		<reference ref_id="1204439" ref_url="https://bugzilla.suse.com/1204439" source="BUGZILLA"/>
		<reference ref_id="1204446" ref_url="https://bugzilla.suse.com/1204446" source="BUGZILLA"/>
		<reference ref_id="1204479" ref_url="https://bugzilla.suse.com/1204479" source="BUGZILLA"/>
		<reference ref_id="1204574" ref_url="https://bugzilla.suse.com/1204574" source="BUGZILLA"/>
		<reference ref_id="1204576" ref_url="https://bugzilla.suse.com/1204576" source="BUGZILLA"/>
		<reference ref_id="1204631" ref_url="https://bugzilla.suse.com/1204631" source="BUGZILLA"/>
		<reference ref_id="1204635" ref_url="https://bugzilla.suse.com/1204635" source="BUGZILLA"/>
		<reference ref_id="1204636" ref_url="https://bugzilla.suse.com/1204636" source="BUGZILLA"/>
		<reference ref_id="1204646" ref_url="https://bugzilla.suse.com/1204646" source="BUGZILLA"/>
		<reference ref_id="1204647" ref_url="https://bugzilla.suse.com/1204647" source="BUGZILLA"/>
		<reference ref_id="1204653" ref_url="https://bugzilla.suse.com/1204653" source="BUGZILLA"/>
		<reference ref_id="1204850" ref_url="https://bugzilla.suse.com/1204850" source="BUGZILLA"/>
		<reference ref_id="1204868" ref_url="https://bugzilla.suse.com/1204868" source="BUGZILLA"/>
		<reference ref_id="1205006" ref_url="https://bugzilla.suse.com/1205006" source="BUGZILLA"/>
		<reference ref_id="1205128" ref_url="https://bugzilla.suse.com/1205128" source="BUGZILLA"/>
		<reference ref_id="1205220" ref_url="https://bugzilla.suse.com/1205220" source="BUGZILLA"/>
		<reference ref_id="1205473" ref_url="https://bugzilla.suse.com/1205473" source="BUGZILLA"/>
		<reference ref_id="1205514" ref_url="https://bugzilla.suse.com/1205514" source="BUGZILLA"/>
		<reference ref_id="1205617" ref_url="https://bugzilla.suse.com/1205617" source="BUGZILLA"/>
		<reference ref_id="1205671" ref_url="https://bugzilla.suse.com/1205671" source="BUGZILLA"/>
		<reference ref_id="1205796" ref_url="https://bugzilla.suse.com/1205796" source="BUGZILLA"/>
		<reference ref_id="1206113" ref_url="https://bugzilla.suse.com/1206113" source="BUGZILLA"/>
		<reference ref_id="1206114" ref_url="https://bugzilla.suse.com/1206114" source="BUGZILLA"/>
		<reference ref_id="1206207" ref_url="https://bugzilla.suse.com/1206207" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4037" ref_url="https://www.suse.com/security/cve/CVE-2021-4037/" source="CVE"/>
		<reference ref_id="CVE-2022-2153" ref_url="https://www.suse.com/security/cve/CVE-2022-2153/" source="CVE"/>
		<reference ref_id="CVE-2022-28693" ref_url="https://www.suse.com/security/cve/CVE-2022-28693/" source="CVE"/>
		<reference ref_id="CVE-2022-2964" ref_url="https://www.suse.com/security/cve/CVE-2022-2964/" source="CVE"/>
		<reference ref_id="CVE-2022-3169" ref_url="https://www.suse.com/security/cve/CVE-2022-3169/" source="CVE"/>
		<reference ref_id="CVE-2022-3424" ref_url="https://www.suse.com/security/cve/CVE-2022-3424/" source="CVE"/>
		<reference ref_id="CVE-2022-3521" ref_url="https://www.suse.com/security/cve/CVE-2022-3521/" source="CVE"/>
		<reference ref_id="CVE-2022-3524" ref_url="https://www.suse.com/security/cve/CVE-2022-3524/" source="CVE"/>
		<reference ref_id="CVE-2022-3542" ref_url="https://www.suse.com/security/cve/CVE-2022-3542/" source="CVE"/>
		<reference ref_id="CVE-2022-3545" ref_url="https://www.suse.com/security/cve/CVE-2022-3545/" source="CVE"/>
		<reference ref_id="CVE-2022-3565" ref_url="https://www.suse.com/security/cve/CVE-2022-3565/" source="CVE"/>
		<reference ref_id="CVE-2022-3567" ref_url="https://www.suse.com/security/cve/CVE-2022-3567/" source="CVE"/>
		<reference ref_id="CVE-2022-3586" ref_url="https://www.suse.com/security/cve/CVE-2022-3586/" source="CVE"/>
		<reference ref_id="CVE-2022-3594" ref_url="https://www.suse.com/security/cve/CVE-2022-3594/" source="CVE"/>
		<reference ref_id="CVE-2022-3621" ref_url="https://www.suse.com/security/cve/CVE-2022-3621/" source="CVE"/>
		<reference ref_id="CVE-2022-3628" ref_url="https://www.suse.com/security/cve/CVE-2022-3628/" source="CVE"/>
		<reference ref_id="CVE-2022-3629" ref_url="https://www.suse.com/security/cve/CVE-2022-3629/" source="CVE"/>
		<reference ref_id="CVE-2022-3635" ref_url="https://www.suse.com/security/cve/CVE-2022-3635/" source="CVE"/>
		<reference ref_id="CVE-2022-3643" ref_url="https://www.suse.com/security/cve/CVE-2022-3643/" source="CVE"/>
		<reference ref_id="CVE-2022-3646" ref_url="https://www.suse.com/security/cve/CVE-2022-3646/" source="CVE"/>
		<reference ref_id="CVE-2022-3649" ref_url="https://www.suse.com/security/cve/CVE-2022-3649/" source="CVE"/>
		<reference ref_id="CVE-2022-3903" ref_url="https://www.suse.com/security/cve/CVE-2022-3903/" source="CVE"/>
		<reference ref_id="CVE-2022-40307" ref_url="https://www.suse.com/security/cve/CVE-2022-40307/" source="CVE"/>
		<reference ref_id="CVE-2022-40768" ref_url="https://www.suse.com/security/cve/CVE-2022-40768/" source="CVE"/>
		<reference ref_id="CVE-2022-4095" ref_url="https://www.suse.com/security/cve/CVE-2022-4095/" source="CVE"/>
		<reference ref_id="CVE-2022-41850" ref_url="https://www.suse.com/security/cve/CVE-2022-41850/" source="CVE"/>
		<reference ref_id="CVE-2022-41858" ref_url="https://www.suse.com/security/cve/CVE-2022-41858/" source="CVE"/>
		<reference ref_id="CVE-2022-42328" ref_url="https://www.suse.com/security/cve/CVE-2022-42328/" source="CVE"/>
		<reference ref_id="CVE-2022-42329" ref_url="https://www.suse.com/security/cve/CVE-2022-42329/" source="CVE"/>
		<reference ref_id="CVE-2022-42703" ref_url="https://www.suse.com/security/cve/CVE-2022-42703/" source="CVE"/>
		<reference ref_id="CVE-2022-42895" ref_url="https://www.suse.com/security/cve/CVE-2022-42895/" source="CVE"/>
		<reference ref_id="CVE-2022-42896" ref_url="https://www.suse.com/security/cve/CVE-2022-42896/" source="CVE"/>
		<reference ref_id="CVE-2022-43750" ref_url="https://www.suse.com/security/cve/CVE-2022-43750/" source="CVE"/>
		<reference ref_id="CVE-2022-4378" ref_url="https://www.suse.com/security/cve/CVE-2022-4378/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="CVE-2022-45934" ref_url="https://www.suse.com/security/cve/CVE-2022-45934/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4574-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013279.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-42328: Guests could trigger denial of service via the netback driver (bsc#1206114).
- CVE-2022-42329: Guests could trigger denial of service via the netback driver (bsc#1206113).
- CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver (bsc#1206113).
- CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631).
- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1204166).
- CVE-2022-41850: Fixed a race condition in roccat_report_event() in drivers/hid/hid-roccat.c (bsc#1203960).
- CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in net/bluetooth/l2cap_core.c (bsc#1205796).
- CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wifi/brcmfmac (bsc#1204868).
- CVE-2022-3567: Fixed a to race condition in inet6_stream_ops()/inet6_dgram_ops() (bsc#1204414).
- CVE-2022-41858: Fixed a denial of service in sl_tx_timeout() in drivers/net/slip (bsc#1205671).
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).
- CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).
- CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).
- CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set (bsc#1198702).
- CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's internal memory (bsc#1204653).
- CVE-2022-3542: Fixed memory leak in bnx2x_tpa_stop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c (bsc#1204402).
- CVE-2022-3629: Fixed memory leak in vsock_connect() in net/vmw_vsock/af_vsock.c (bsc#1204635).
- CVE-2022-3646: Fixed memory leak in nilfs_attach_log_writer() in fs/nilfs2/segment.c (bsc#1204646).
- CVE-2022-3649: Fixed use-after-free in nilfs_new_inode() in fs/nilfs2/inode.c (bsc#1204647).
- CVE-2022-3621: Fixed null pointer dereference in nilfs_bmap_lookup_at_level() in fs/nilfs2/inode.c (bsc#1204574).
- CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bsc#1204479).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3565: Fixed use-after-free in del_timer() in drivers/isdn/mISDN/l1oip_core.c (bsc#1204431).
- CVE-2022-3524: Fixed memory leak in ipv6_renew_options() in the IPv6 handler (bsc#1204354).
- CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory (bsc#1203514).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bsc#1204168).
- CVE-2022-3169: Fixed an denial of service though request to NVME_IOCTL_RESET and NVME_IOCTL_SUBSYS_RESET (bsc#1203290).
- CVE-2022-40307: Fixed a race condition that could had been exploited to trigger a use-after-free in the efi firmware capsule-loader.c (bsc#1203322).
- CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2cap_core.c's l2cap_parse_conf_req() which can be used to leak kernel pointers remotely (bsc#1205705).
- CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2cap_core.c's l2cap_connect() and l2cap_le_connect_req() which may have allowed code execution and leaking kernel memory (respectively) remotely via Bluetooth (bsc#1205709).
- CVE-2022-3545: Fixed a use-after-free vulnerability is area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-3521: Fixed a race condition in kcm_tx_work() of the file net/kcm/kcmsock.c (bsc#1204355).
- CVE-2022-2153: Fixed a NULL pointer dereference in KVM when attempting to set a SynIC IRQ (bsc#1200788).

The following non-security bugs were fixed:

- Drivers: hv: vmbus: Add VMbus IMC device to unsupported list (git-fixes).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Drop error message when 'No request id available' (bsc#1204017).
- Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (git-fixes).
- Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero (bsc#1204017).
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (git-fixes).
- Drivers: hv: vmbus: Fix potential crash on module unload (git-fixes).
- Drivers: hv: vmbus: Introduce {lock,unlock}_requestor() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Introduce vmbus_request_addr_match() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Introduce vmbus_sendpacket_getid() (bsc#1204017, bsc#1205617).
- Drivers: hv: vmbus: Move __vmbus_open() (bsc#1204017).
- Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (git-fixes).
- hv_netvsc: Add check for kvmalloc_array (git-fixes).
- hv_netvsc: Add error handling while switching data path (bsc#1204850).
- hv_netvsc: Add validation for untrusted Hyper-V values (bsc#1204017).
- hv_netvsc: Cache the current data path to avoid duplicate call and message (bsc#1204017).
- hv_netvsc: Check VF datapath when sending traffic to VF (bsc#1204017).
- hv_netvsc: Fix error handling in netvsc_set_features() (git-fixes).
- hv_netvsc: Fix race between VF offering and VF association message from host (bsc#1204850).
- hv_netvsc: Print value of invalid ID in netvsc_send_{completion,tx_complete}() (bsc#1204017).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove (bsc#1204850).
- hv_netvsc: Remove unnecessary round_up for recv_completion_cnt (bsc#1204017).
- hv_netvsc: Reset the RSC count if NVSP_STAT_FAIL in netvsc_receive() (bsc#1204017).
- hv_netvsc: Sync offloading features to VF NIC (git-fixes).
- hv_netvsc: use netif_is_bond_master() instead of open code (git-fixes).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening (bsc#1204017).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH (bsc#1204017).
- ipv6: ping: fix wrong checksum for large frames (bsc#1203183).
- net: hyperv: remove use of bpf_op_t (git-fixes).
- net: netvsc: remove break after return (git-fixes).
- PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv() (bsc#1204446).
- PCI: hv: Add validation for untrusted Hyper-V values (bsc#1204017).
- PCI: hv: Drop msi_controller structure (bsc#1204446).
- PCI: hv: Fix a race condition when removing the device (bsc#1204446).
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (bsc#1200845).
- PCI: hv: Fix interrupt mapping for multi-MSI (bsc#1200845).
- PCI: hv: Fix multi-MSI to allow more than one MSI vector (bsc#1200845).
- PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology (bsc#1199365).
- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (bsc#1204446).
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (bsc#1204017, bsc#1203860, bsc#1205617).
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (bsc#1204017, bsc#1205617).
- PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (bsc#1200845).
- PCI: hv: Make the code arch neutral by adding arch specific interfaces (bsc#1200845).
- PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (bsc#1200845).
- PCI: hv: Remove bus device removal unused refcount/functions (bsc#1204446).
- PCI: hv: Remove unnecessary use of %hx (bsc#1204446).
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (bsc#1200845).
- PCI: hv: Support for create interrupt v3 (git-fixes).
- PCI: hv: Use struct_size() helper (bsc#1204446).
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (bsc#1204017).
- Revert 'scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback()' (bsc#1204017).
- scsi: storvsc: Drop DID_TARGET_FAILURE use (git-fixes).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8 and newer (bsc#1204017).
- scsi: storvsc: Fix validation for unsolicited incoming packets (bsc#1204017).
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (git-fixes).
- scsi: storvsc: Resolve data race in storvsc_probe() (bsc#1204017).
- scsi: storvsc: Use blk_mq_unique_tag() to generate requestIDs (bsc#1204017).
- scsi: storvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening (bsc#1204017).
- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1204017).
- sunrpc: Re-purpose trace_svc_process (bsc#1205006).
- x86/cpu: Restore AMD's DE_CFG MSR after resume (bsc#1205473).
- x86/hyperv: Output host build info as normal Windows version number (git-fixes).
- x86/hyperv: Set pv_info.name to 'Hyper-V' (git-fixes).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-19"/>
	<updated date="2022-12-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1198702">SUSE bug 1198702</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199365">SUSE bug 1199365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200788">SUSE bug 1200788</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200845">SUSE bug 1200845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201455">SUSE bug 1201455</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202686">SUSE bug 1202686</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203008">SUSE bug 1203008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203183">SUSE bug 1203183</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203290">SUSE bug 1203290</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203322">SUSE bug 1203322</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203514">SUSE bug 1203514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203860">SUSE bug 1203860</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203960">SUSE bug 1203960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204017">SUSE bug 1204017</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204166">SUSE bug 1204166</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204170">SUSE bug 1204170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204354">SUSE bug 1204354</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204355">SUSE bug 1204355</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204402">SUSE bug 1204402</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204414">SUSE bug 1204414</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204415">SUSE bug 1204415</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204424">SUSE bug 1204424</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204431">SUSE bug 1204431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204432">SUSE bug 1204432</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204439">SUSE bug 1204439</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204446">SUSE bug 1204446</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204479">SUSE bug 1204479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204574">SUSE bug 1204574</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204576">SUSE bug 1204576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204631">SUSE bug 1204631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204635">SUSE bug 1204635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204636">SUSE bug 1204636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204646">SUSE bug 1204646</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204647">SUSE bug 1204647</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204653">SUSE bug 1204653</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204850">SUSE bug 1204850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204868">SUSE bug 1204868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205006">SUSE bug 1205006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205128">SUSE bug 1205128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205220">SUSE bug 1205220</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205473">SUSE bug 1205473</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205514">SUSE bug 1205514</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205617">SUSE bug 1205617</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205671">SUSE bug 1205671</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205796">SUSE bug 1205796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206113">SUSE bug 1206113</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206114">SUSE bug 1206114</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206207">SUSE bug 1206207</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-4037/">CVE-2021-4037</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2153/">CVE-2022-2153</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-28693/">CVE-2022-28693</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-2964/">CVE-2022-2964</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3169/">CVE-2022-3169</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3424/">CVE-2022-3424</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3521/">CVE-2022-3521</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3524/">CVE-2022-3524</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3542/">CVE-2022-3542</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3545/">CVE-2022-3545</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3565/">CVE-2022-3565</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3567/">CVE-2022-3567</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3586/">CVE-2022-3586</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3594/">CVE-2022-3594</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3621/">CVE-2022-3621</cve>
	<cve impact="moderate" cvss3="4.6/CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3628/">CVE-2022-3628</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3629/">CVE-2022-3629</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3635/">CVE-2022-3635</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-3643/">CVE-2022-3643</cve>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3646/">CVE-2022-3646</cve>
	<cve impact="low" cvss3="3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3649/">CVE-2022-3649</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3903/">CVE-2022-3903</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-40307/">CVE-2022-40307</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-40768/">CVE-2022-40768</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4095/">CVE-2022-4095</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-41850/">CVE-2022-41850</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41858/">CVE-2022-41858</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42328/">CVE-2022-42328</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42329/">CVE-2022-42329</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42703/">CVE-2022-42703</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-42895/">CVE-2022-42895</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-42896/">CVE-2022-42896</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43750/">CVE-2022-43750</cve>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4378/">CVE-2022-4378</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-45934/">CVE-2022-45934</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009729663" comment="kernel-default-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729664" comment="kernel-default-base-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729665" comment="kernel-default-devel-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728698" comment="kernel-default-man-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728741" comment="kernel-devel-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728742" comment="kernel-docs-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728743" comment="kernel-macros-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729666" comment="kernel-obs-build-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728745" comment="kernel-source-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729667" comment="kernel-syms-4.12.14-150100.197.131.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729668" comment="reiserfs-kmp-default-4.12.14-150100.197.131.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141143" version="1" class="patch">
	<metadata>
		<title>Security update for cni (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181961" ref_url="https://bugzilla.suse.com/1181961" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20206" ref_url="https://www.suse.com/security/cve/CVE-2021-20206/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4592-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013299.html" source="SUSE-SU"/>
		<description>
This update for cni fixes the following issues:

- CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-20"/>
	<updated date="2022-12-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181961">SUSE bug 1181961</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20206/">CVE-2021-20206</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725840" comment="cni-0.7.1-150100.3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141144" version="1" class="patch">
	<metadata>
		<title>Security update for cni-plugins (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181961" ref_url="https://bugzilla.suse.com/1181961" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20206" ref_url="https://www.suse.com/security/cve/CVE-2021-20206/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4593-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013297.html" source="SUSE-SU"/>
		<description>
This update for cni-plugins fixes the following issues:

- CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-20"/>
	<updated date="2022-12-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181961">SUSE bug 1181961</bugzilla>
	<cve impact="important" cvss3="7.2/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20206/">CVE-2021-20206</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009725841" comment="cni-plugins-0.8.6-150100.3.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141145" version="1" class="patch">
	<metadata>
		<title>Security update for supportutils (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1184689" ref_url="https://bugzilla.suse.com/1184689" source="BUGZILLA"/>
		<reference ref_id="1188086" ref_url="https://bugzilla.suse.com/1188086" source="BUGZILLA"/>
		<reference ref_id="1192252" ref_url="https://bugzilla.suse.com/1192252" source="BUGZILLA"/>
		<reference ref_id="1192648" ref_url="https://bugzilla.suse.com/1192648" source="BUGZILLA"/>
		<reference ref_id="1197428" ref_url="https://bugzilla.suse.com/1197428" source="BUGZILLA"/>
		<reference ref_id="1200330" ref_url="https://bugzilla.suse.com/1200330" source="BUGZILLA"/>
		<reference ref_id="1202269" ref_url="https://bugzilla.suse.com/1202269" source="BUGZILLA"/>
		<reference ref_id="1202337" ref_url="https://bugzilla.suse.com/1202337" source="BUGZILLA"/>
		<reference ref_id="1202417" ref_url="https://bugzilla.suse.com/1202417" source="BUGZILLA"/>
		<reference ref_id="1203818" ref_url="https://bugzilla.suse.com/1203818" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:4594-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013300.html" source="SUSE-SU"/>
		<description>
This update for supportutils fixes the following issues:

Security issues fixed:

- Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818)

Bug fixes:

- Added lifecycle information
- Fixed KVM virtualization detection on bare metal (bsc#1184689)
- Added logging using journalctl (bsc#1200330)
- Get current sar data before collecting files (bsc#1192648)
- Collects everything in /etc/multipath/ (bsc#1192252)
- Collects power management information in hardware.txt (bsc#1197428)
- Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337)
- Fixed conf_files and conf_text_files so y2log is gathered (bsc#1202269)
- Update to nvme_info and block_info (bsc#1202417)
- Added includedir directories from /etc/sudoers (bsc#1188086)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-20"/>
	<updated date="2022-12-20"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1184689">SUSE bug 1184689</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1188086">SUSE bug 1188086</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192252">SUSE bug 1192252</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192648">SUSE bug 1192648</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197428">SUSE bug 1197428</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200330">SUSE bug 1200330</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202269">SUSE bug 1202269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202337">SUSE bug 1202337</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202417">SUSE bug 1202417</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203818">SUSE bug 1203818</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009726711" comment="supportutils-3.1.21-150000.5.44.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141146" version="1" class="patch">
	<metadata>
		<title>Security update for freeradius-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1180525" ref_url="https://bugzilla.suse.com/1180525" source="BUGZILLA"/>
		<reference ref_id="1184016" ref_url="https://bugzilla.suse.com/1184016" source="BUGZILLA"/>
		<reference ref_id="1206204" ref_url="https://bugzilla.suse.com/1206204" source="BUGZILLA"/>
		<reference ref_id="1206205" ref_url="https://bugzilla.suse.com/1206205" source="BUGZILLA"/>
		<reference ref_id="1206206" ref_url="https://bugzilla.suse.com/1206206" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41859" ref_url="https://www.suse.com/security/cve/CVE-2022-41859/" source="CVE"/>
		<reference ref_id="CVE-2022-41860" ref_url="https://www.suse.com/security/cve/CVE-2022-41860/" source="CVE"/>
		<reference ref_id="CVE-2022-41861" ref_url="https://www.suse.com/security/cve/CVE-2022-41861/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4620-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013344.html" source="SUSE-SU"/>
		<description>
This update for freeradius-server fixes the following issues:

- CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204).
- CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205).
- CVE-2022-41861: Fixes a crash on invalid abinary data (bsc#1206206).
- move logrotate options into specific parts for each log as 'global' options
  will persist past and clobber global options in the main logrotate config (bsc#1180525)
- Fixed plaintext password entries in logfiles (bsc#1184016).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-27"/>
	<updated date="2022-12-27"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1180525">SUSE bug 1180525</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184016">SUSE bug 1184016</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206204">SUSE bug 1206204</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206205">SUSE bug 1206205</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206206">SUSE bug 1206206</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-41859/">CVE-2022-41859</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41860/">CVE-2022-41860</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41861/">CVE-2022-41861</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009728334" comment="freeradius-server-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728335" comment="freeradius-server-devel-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728336" comment="freeradius-server-krb5-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728337" comment="freeradius-server-ldap-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728338" comment="freeradius-server-libs-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728339" comment="freeradius-server-mysql-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728340" comment="freeradius-server-perl-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728341" comment="freeradius-server-postgresql-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728342" comment="freeradius-server-python-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728343" comment="freeradius-server-sqlite-3.0.16-150000.3.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009728344" comment="freeradius-server-utils-3.0.16-150000.3.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141147" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204779" ref_url="https://bugzilla.suse.com/1204779" source="BUGZILLA"/>
		<reference ref_id="1205797" ref_url="https://bugzilla.suse.com/1205797" source="BUGZILLA"/>
		<reference ref_id="1206028" ref_url="https://bugzilla.suse.com/1206028" source="BUGZILLA"/>
		<reference ref_id="1206071" ref_url="https://bugzilla.suse.com/1206071" source="BUGZILLA"/>
		<reference ref_id="1206072" ref_url="https://bugzilla.suse.com/1206072" source="BUGZILLA"/>
		<reference ref_id="1206075" ref_url="https://bugzilla.suse.com/1206075" source="BUGZILLA"/>
		<reference ref_id="1206077" ref_url="https://bugzilla.suse.com/1206077" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3491" ref_url="https://www.suse.com/security/cve/CVE-2022-3491/" source="CVE"/>
		<reference ref_id="CVE-2022-3520" ref_url="https://www.suse.com/security/cve/CVE-2022-3520/" source="CVE"/>
		<reference ref_id="CVE-2022-3591" ref_url="https://www.suse.com/security/cve/CVE-2022-3591/" source="CVE"/>
		<reference ref_id="CVE-2022-3705" ref_url="https://www.suse.com/security/cve/CVE-2022-3705/" source="CVE"/>
		<reference ref_id="CVE-2022-4141" ref_url="https://www.suse.com/security/cve/CVE-2022-4141/" source="CVE"/>
		<reference ref_id="CVE-2022-4292" ref_url="https://www.suse.com/security/cve/CVE-2022-4292/" source="CVE"/>
		<reference ref_id="CVE-2022-4293" ref_url="https://www.suse.com/security/cve/CVE-2022-4293/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4631-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013353.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

Updated to version 9.0.1040:

- CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742 (bsc#1206028).
- CVE-2022-3520: vim: Heap-based Buffer Overflow (bsc#1206071).
- CVE-2022-3591: vim: Use After Free (bsc#1206072).
- CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882 (bsc#1206075).
- CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804 (bsc#1206077).
- CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11 (bsc#1205797).
- CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c (bsc#1204779).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-28"/>
	<updated date="2022-12-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204779">SUSE bug 1204779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205797">SUSE bug 1205797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206028">SUSE bug 1206028</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206071">SUSE bug 1206071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206072">SUSE bug 1206072</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206075">SUSE bug 1206075</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206077">SUSE bug 1206077</bugzilla>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3491/">CVE-2022-3491</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3520/">CVE-2022-3520</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-3591/">CVE-2022-3591</cve>
	<cve impact="moderate" cvss3="5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-3705/">CVE-2022-3705</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4141/">CVE-2022-4141</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4292/">CVE-2022-4292</cve>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-4293/">CVE-2022-4293</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009729551" comment="gvim-9.0.1040-150000.5.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729552" comment="vim-9.0.1040-150000.5.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729553" comment="vim-data-9.0.1040-150000.5.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729554" comment="vim-data-common-9.0.1040-150000.5.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141148" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206474" ref_url="https://bugzilla.suse.com/1206474" source="BUGZILLA"/>
		<reference ref_id="1206750" ref_url="https://bugzilla.suse.com/1206750" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-42852" ref_url="https://www.suse.com/security/cve/CVE-2022-42852/" source="CVE"/>
		<reference ref_id="CVE-2022-42856" ref_url="https://www.suse.com/security/cve/CVE-2022-42856/" source="CVE"/>
		<reference ref_id="CVE-2022-42863" ref_url="https://www.suse.com/security/cve/CVE-2022-42863/" source="CVE"/>
		<reference ref_id="CVE-2022-42867" ref_url="https://www.suse.com/security/cve/CVE-2022-42867/" source="CVE"/>
		<reference ref_id="CVE-2022-46691" ref_url="https://www.suse.com/security/cve/CVE-2022-46691/" source="CVE"/>
		<reference ref_id="CVE-2022-46692" ref_url="https://www.suse.com/security/cve/CVE-2022-46692/" source="CVE"/>
		<reference ref_id="CVE-2022-46698" ref_url="https://www.suse.com/security/cve/CVE-2022-46698/" source="CVE"/>
		<reference ref_id="CVE-2022-46699" ref_url="https://www.suse.com/security/cve/CVE-2022-46699/" source="CVE"/>
		<reference ref_id="CVE-2022-46700" ref_url="https://www.suse.com/security/cve/CVE-2022-46700/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:4642-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-December/013402.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.38.3:

- CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously crafted web content (bsc#1206474).
- CVE-2022-42852: Fixed disclosure of process memory by improved memory handling.
- CVE-2022-42867: Fixed a use after free issue was addressed with improved memory management.
- CVE-2022-46692: Fixed bypass of Same Origin Policy through improved state management.
- CVE-2022-46698: Fixed disclosure of sensitive user information with improved checks.
- CVE-2022-46699: Fixed an arbitrary code execution caused by memory corruption.
- CVE-2022-46700: Fixed an arbitrary code execution caused by memory corruption.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-12-30"/>
	<updated date="2022-12-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206474">SUSE bug 1206474</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206750">SUSE bug 1206750</bugzilla>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-42852/">CVE-2022-42852</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42856/">CVE-2022-42856</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42863/">CVE-2022-42863</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-42867/">CVE-2022-42867</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46691/">CVE-2022-46691</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-46692/">CVE-2022-46692</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-46698/">CVE-2022-46698</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46699/">CVE-2022-46699</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46700/">CVE-2022-46700</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009730767" comment="libjavascriptcoregtk-4_0-18-2.38.3-150000.3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730768" comment="libwebkit2gtk-4_0-37-2.38.3-150000.3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730529" comment="libwebkit2gtk3-lang-2.38.3-150000.3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730769" comment="typelib-1_0-JavaScriptCore-4_0-2.38.3-150000.3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730770" comment="typelib-1_0-WebKit2-4_0-2.38.3-150000.3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730771" comment="typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150000.3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730772" comment="webkit2gtk-4_0-injected-bundles-2.38.3-150000.3.125.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730773" comment="webkit2gtk3-devel-2.38.3-150000.3.125.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141149" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194576" ref_url="https://bugzilla.suse.com/1194576" source="BUGZILLA"/>
		<reference ref_id="1194581" ref_url="https://bugzilla.suse.com/1194581" source="BUGZILLA"/>
		<reference ref_id="1194588" ref_url="https://bugzilla.suse.com/1194588" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23033" ref_url="https://www.suse.com/security/cve/CVE-2022-23033/" source="CVE"/>
		<reference ref_id="CVE-2022-23034" ref_url="https://www.suse.com/security/cve/CVE-2022-23034/" source="CVE"/>
		<reference ref_id="CVE-2022-23035" ref_url="https://www.suse.com/security/cve/CVE-2022-23035/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0468-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010242.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-23033: Fixed guest_physmap_remove_page not removing the p2m mappings. (XSA-393) (bsc#1194576)
- CVE-2022-23034: Fixed possible DoS by a PV guest Xen while unmapping a grant. (XSA-394) (bsc#1194581)
- CVE-2022-23035: Fixed insufficient cleanup of passed-through device IRQs. (XSA-395) (bsc#1194588)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-17"/>
	<updated date="2022-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194576">SUSE bug 1194576</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194581">SUSE bug 1194581</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194588">SUSE bug 1194588</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23033/">CVE-2022-23033</cve>
	<cve impact="low" cvss3="4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23034/">CVE-2022-23034</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23035/">CVE-2022-23035</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009665528" comment="xen-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665529" comment="xen-devel-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665530" comment="xen-libs-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665531" comment="xen-tools-4.12.4_18-3.60.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665532" comment="xen-tools-domU-4.12.4_18-3.60.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141150" version="1" class="patch">
	<metadata>
		<title>Security update for virglrenderer (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195389" ref_url="https://bugzilla.suse.com/1195389" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0135" ref_url="https://www.suse.com/security/cve/CVE-2022-0135/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0479-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010243.html" source="SUSE-SU"/>
		<description>
This update for virglrenderer fixes the following issues:
	  
- CVE-2022-0135: Fixed out-of-bonds write in read_transfer_data() (bsc#1195389).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-17"/>
	<updated date="2022-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195389">SUSE bug 1195389</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0135/">CVE-2022-0135</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667312" comment="libvirglrenderer0-0.6.0-4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667313" comment="virglrenderer-devel-0.6.0-4.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141151" version="1" class="patch">
	<metadata>
		<title>Security update for tiff (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1071031" ref_url="https://bugzilla.suse.com/1071031" source="BUGZILLA"/>
		<reference ref_id="1154365" ref_url="https://bugzilla.suse.com/1154365" source="BUGZILLA"/>
		<reference ref_id="1182808" ref_url="https://bugzilla.suse.com/1182808" source="BUGZILLA"/>
		<reference ref_id="1182809" ref_url="https://bugzilla.suse.com/1182809" source="BUGZILLA"/>
		<reference ref_id="1182811" ref_url="https://bugzilla.suse.com/1182811" source="BUGZILLA"/>
		<reference ref_id="1182812" ref_url="https://bugzilla.suse.com/1182812" source="BUGZILLA"/>
		<reference ref_id="1190312" ref_url="https://bugzilla.suse.com/1190312" source="BUGZILLA"/>
		<reference ref_id="1194539" ref_url="https://bugzilla.suse.com/1194539" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-17095" ref_url="https://www.suse.com/security/cve/CVE-2017-17095/" source="CVE"/>
		<reference ref_id="CVE-2019-17546" ref_url="https://www.suse.com/security/cve/CVE-2019-17546/" source="CVE"/>
		<reference ref_id="CVE-2020-19131" ref_url="https://www.suse.com/security/cve/CVE-2020-19131/" source="CVE"/>
		<reference ref_id="CVE-2020-35521" ref_url="https://www.suse.com/security/cve/CVE-2020-35521/" source="CVE"/>
		<reference ref_id="CVE-2020-35522" ref_url="https://www.suse.com/security/cve/CVE-2020-35522/" source="CVE"/>
		<reference ref_id="CVE-2020-35523" ref_url="https://www.suse.com/security/cve/CVE-2020-35523/" source="CVE"/>
		<reference ref_id="CVE-2020-35524" ref_url="https://www.suse.com/security/cve/CVE-2020-35524/" source="CVE"/>
		<reference ref_id="CVE-2022-22844" ref_url="https://www.suse.com/security/cve/CVE-2022-22844/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0480-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010245.html" source="SUSE-SU"/>
		<description>
This update for tiff fixes the following issues:

- CVE-2017-17095: Fixed DoS in tools/pal2rgb.c in pal2rgb (bsc#1071031).
- CVE-2019-17546: Fixed integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image (bsc#1154365).
- CVE-2020-19131: Fixed buffer overflow in tiffcrop that may cause DoS via the invertImage() function (bsc#1190312).
- CVE-2020-35521: Fixed memory allocation failure in tif_read.c (bsc#1182808).
- CVE-2020-35522: Fixed memory allocation failure in tif_pixarlog.c (bsc#1182809).
- CVE-2020-35523: Fixed integer overflow in tif_getimage.c (bsc#1182811).
- CVE-2020-35524: Fixed heap-based buffer overflow in TIFF2PDF tool (bsc#1182812).
- CVE-2022-22844: Fixed out-of-bounds read in _TIFFmemcpy in tif_unix.c (bsc#1194539).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-17"/>
	<updated date="2022-02-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1071031">SUSE bug 1071031</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1154365">SUSE bug 1154365</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182808">SUSE bug 1182808</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182809">SUSE bug 1182809</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182811">SUSE bug 1182811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182812">SUSE bug 1182812</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190312">SUSE bug 1190312</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194539">SUSE bug 1194539</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-17095/">CVE-2017-17095</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-17546/">CVE-2019-17546</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-19131/">CVE-2020-19131</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35521/">CVE-2020-35521</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-35522/">CVE-2020-35522</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35523/">CVE-2020-35523</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-35524/">CVE-2020-35524</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22844/">CVE-2022-22844</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009665431" comment="libtiff-devel-4.0.9-45.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665432" comment="libtiff5-4.0.9-45.5.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665439" comment="libtiff5-32bit-4.0.9-45.5.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141152" version="1" class="patch">
	<metadata>
		<title>Security update for rust (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194767" ref_url="https://bugzilla.suse.com/1194767" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21658" ref_url="https://www.suse.com/security/cve/CVE-2022-21658/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010252.html" source="SUSE-SU"/>
		<description>
This update for rust fixes the following issues:

- CVE-2022-21658: Fixed race condition in std::fs::remove_dir_all (bsc#1194767).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1194767">SUSE bug 1194767</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-21658/">CVE-2022-21658</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009668322" comment="cargo-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664555" comment="rls-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668323" comment="rust-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664557" comment="rust-analysis-1.53.0-22.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664558" comment="rust-src-1.53.0-22.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141153" version="1" class="patch">
	<metadata>
		<title>Security update for clamav (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194731" ref_url="https://bugzilla.suse.com/1194731" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-20698" ref_url="https://www.suse.com/security/cve/CVE-2022-20698/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0493-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010270.html" source="SUSE-SU"/>
		<description>
This update for clamav fixes the following issues:

- CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194731">SUSE bug 1194731</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-20698/">CVE-2022-20698</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009664496" comment="clamav-0.103.5-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664497" comment="clamav-devel-0.103.5-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664498" comment="libclamav9-0.103.5-3.35.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009664499" comment="libfreshclam2-0.103.5-3.35.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141154" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195054" ref_url="https://bugzilla.suse.com/1195054" source="BUGZILLA"/>
		<reference ref_id="1195217" ref_url="https://bugzilla.suse.com/1195217" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23852" ref_url="https://www.suse.com/security/cve/CVE-2022-23852/" source="CVE"/>
		<reference ref_id="CVE-2022-23990" ref_url="https://www.suse.com/security/cve/CVE-2022-23990/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0498-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010268.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

- CVE-2022-23852: Fixed signed integer overflow in XML_GetBuffer (bsc#1195054).
- CVE-2022-23990: Fixed integer overflow in the doProlog function (bsc#1195217).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195054">SUSE bug 1195054</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195217">SUSE bug 1195217</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23852/">CVE-2022-23852</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23990/">CVE-2022-23990</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009665433" comment="expat-2.2.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665434" comment="libexpat-devel-2.2.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665435" comment="libexpat1-2.2.5-3.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009665436" comment="libexpat1-32bit-2.2.5-3.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141155" version="1" class="patch">
	<metadata>
		<title>Security update for net-snmp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1027353" ref_url="https://bugzilla.suse.com/1027353" source="BUGZILLA"/>
		<reference ref_id="1081164" ref_url="https://bugzilla.suse.com/1081164" source="BUGZILLA"/>
		<reference ref_id="1102775" ref_url="https://bugzilla.suse.com/1102775" source="BUGZILLA"/>
		<reference ref_id="1108471" ref_url="https://bugzilla.suse.com/1108471" source="BUGZILLA"/>
		<reference ref_id="1111122" ref_url="https://bugzilla.suse.com/1111122" source="BUGZILLA"/>
		<reference ref_id="1116807" ref_url="https://bugzilla.suse.com/1116807" source="BUGZILLA"/>
		<reference ref_id="1140341" ref_url="https://bugzilla.suse.com/1140341" source="BUGZILLA"/>
		<reference ref_id="1145864" ref_url="https://bugzilla.suse.com/1145864" source="BUGZILLA"/>
		<reference ref_id="1152968" ref_url="https://bugzilla.suse.com/1152968" source="BUGZILLA"/>
		<reference ref_id="1174961" ref_url="https://bugzilla.suse.com/1174961" source="BUGZILLA"/>
		<reference ref_id="1178021" ref_url="https://bugzilla.suse.com/1178021" source="BUGZILLA"/>
		<reference ref_id="1178351" ref_url="https://bugzilla.suse.com/1178351" source="BUGZILLA"/>
		<reference ref_id="1179009" ref_url="https://bugzilla.suse.com/1179009" source="BUGZILLA"/>
		<reference ref_id="1179699" ref_url="https://bugzilla.suse.com/1179699" source="BUGZILLA"/>
		<reference ref_id="1181591" ref_url="https://bugzilla.suse.com/1181591" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-18065" ref_url="https://www.suse.com/security/cve/CVE-2018-18065/" source="CVE"/>
		<reference ref_id="CVE-2020-15862" ref_url="https://www.suse.com/security/cve/CVE-2020-15862/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0050-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009993.html" source="SUSE-SU"/>
		<description>
This update for net-snmp fixes the following issues:

- CVE-2020-15862: Make extended MIB read-only (bsc#1174961)
- CVE-2018-18065: Fix remote DoS in agent/helpers/table.c (bsc#1111122)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-11"/>
	<updated date="2022-01-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1027353">SUSE bug 1027353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081164">SUSE bug 1081164</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1102775">SUSE bug 1102775</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1108471">SUSE bug 1108471</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1111122">SUSE bug 1111122</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1116807">SUSE bug 1116807</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1140341">SUSE bug 1140341</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1145864">SUSE bug 1145864</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1152968">SUSE bug 1152968</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1174961">SUSE bug 1174961</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178021">SUSE bug 1178021</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178351">SUSE bug 1178351</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179009">SUSE bug 1179009</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1179699">SUSE bug 1179699</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181591">SUSE bug 1181591</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-18065/">CVE-2018-18065</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-15862/">CVE-2020-15862</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009661027" comment="libsnmp30-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661028" comment="net-snmp-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661029" comment="net-snmp-devel-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661030" comment="perl-SNMP-5.7.3-10.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009661031" comment="snmp-mibs-5.7.3-10.9.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141156" version="1" class="patch">
	<metadata>
		<title>Security update for xerces-j2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195108" ref_url="https://bugzilla.suse.com/1195108" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23437" ref_url="https://www.suse.com/security/cve/CVE-2022-23437/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0500-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010265.html" source="SUSE-SU"/>
		<description>
This update for xerces-j2 fixes the following issues:
	  
- CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser (bsc#1195108).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-18"/>
	<updated date="2022-02-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195108">SUSE bug 1195108</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23437/">CVE-2022-23437</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667902" comment="xerces-j2-2.11.0-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667903" comment="xerces-j2-xml-apis-2.11.0-4.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667904" comment="xerces-j2-xml-resolver-2.11.0-4.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141157" version="1" class="patch">
	<metadata>
		<title>Security update for libsndfile (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194006" ref_url="https://bugzilla.suse.com/1194006" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-4156" ref_url="https://www.suse.com/security/cve/CVE-2021-4156/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0052-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-January/009992.html" source="SUSE-SU"/>
		<description>
This update for libsndfile fixes the following issues:

- CVE-2021-4156: Fixed heap buffer overflow in flac_buffer_copy that 
could potentially lead to heap exploitation (bsc#1194006).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-01-11"/>
	<updated date="2022-01-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194006">SUSE bug 1194006</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4156/">CVE-2021-4156</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009662457" comment="libsndfile-devel-1.0.28-5.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009662458" comment="libsndfile1-1.0.28-5.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141158" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192615" ref_url="https://bugzilla.suse.com/1192615" source="BUGZILLA"/>
		<reference ref_id="1195779" ref_url="https://bugzilla.suse.com/1195779" source="BUGZILLA"/>
		<reference ref_id="1195780" ref_url="https://bugzilla.suse.com/1195780" source="BUGZILLA"/>
		<reference ref_id="1195781" ref_url="https://bugzilla.suse.com/1195781" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0127" ref_url="https://www.suse.com/security/cve/CVE-2021-0127/" source="CVE"/>
		<reference ref_id="CVE-2021-0145" ref_url="https://www.suse.com/security/cve/CVE-2021-0145/" source="CVE"/>
		<reference ref_id="CVE-2021-0146" ref_url="https://www.suse.com/security/cve/CVE-2021-0146/" source="CVE"/>
		<reference ref_id="CVE-2021-33120" ref_url="https://www.suse.com/security/cve/CVE-2021-33120/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0541-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010285.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

Updated to Intel CPU Microcode 20220207 release.

- CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)
- CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)
- CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)
- CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)

- Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)
- Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-21"/>
	<updated date="2022-02-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192615">SUSE bug 1192615</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195779">SUSE bug 1195779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195780">SUSE bug 1195780</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195781">SUSE bug 1195781</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0127/">CVE-2021-0127</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0145/">CVE-2021-0145</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0146/">CVE-2021-0146</cve>
	<cve impact="low" cvss3="3.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-33120/">CVE-2021-33120</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667906" comment="ucode-intel-20220207-3.206.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141159" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191962" ref_url="https://bugzilla.suse.com/1191962" source="BUGZILLA"/>
		<reference ref_id="1191963" ref_url="https://bugzilla.suse.com/1191963" source="BUGZILLA"/>
		<reference ref_id="1192153" ref_url="https://bugzilla.suse.com/1192153" source="BUGZILLA"/>
		<reference ref_id="1192154" ref_url="https://bugzilla.suse.com/1192154" source="BUGZILLA"/>
		<reference ref_id="1192696" ref_url="https://bugzilla.suse.com/1192696" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23343" ref_url="https://www.suse.com/security/cve/CVE-2021-23343/" source="CVE"/>
		<reference ref_id="CVE-2021-32803" ref_url="https://www.suse.com/security/cve/CVE-2021-32803/" source="CVE"/>
		<reference ref_id="CVE-2021-32804" ref_url="https://www.suse.com/security/cve/CVE-2021-32804/" source="CVE"/>
		<reference ref_id="CVE-2021-3807" ref_url="https://www.suse.com/security/cve/CVE-2021-3807/" source="CVE"/>
		<reference ref_id="CVE-2021-3918" ref_url="https://www.suse.com/security/cve/CVE-2021-3918/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0563-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-February/010304.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:
	  
- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).
- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).
- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).
- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).
- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-02-24"/>
	<updated date="2022-02-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191962">SUSE bug 1191962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191963">SUSE bug 1191963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192153">SUSE bug 1192153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192154">SUSE bug 1192154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192696">SUSE bug 1192696</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23343/">CVE-2021-23343</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32803/">CVE-2021-32803</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32804/">CVE-2021-32804</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3807/">CVE-2021-3807</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3918/">CVE-2021-3918</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009668313" comment="nodejs8-8.17.0-3.54.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668314" comment="nodejs8-devel-8.17.0-3.54.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668305" comment="nodejs8-docs-8.17.0-3.54.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668315" comment="npm8-8.17.0-3.54.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141160" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195230" ref_url="https://bugzilla.suse.com/1195230" source="BUGZILLA"/>
		<reference ref_id="1195682" ref_url="https://bugzilla.suse.com/1195682" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22753" ref_url="https://www.suse.com/security/cve/CVE-2022-22753/" source="CVE"/>
		<reference ref_id="CVE-2022-22754" ref_url="https://www.suse.com/security/cve/CVE-2022-22754/" source="CVE"/>
		<reference ref_id="CVE-2022-22756" ref_url="https://www.suse.com/security/cve/CVE-2022-22756/" source="CVE"/>
		<reference ref_id="CVE-2022-22759" ref_url="https://www.suse.com/security/cve/CVE-2022-22759/" source="CVE"/>
		<reference ref_id="CVE-2022-22760" ref_url="https://www.suse.com/security/cve/CVE-2022-22760/" source="CVE"/>
		<reference ref_id="CVE-2022-22761" ref_url="https://www.suse.com/security/cve/CVE-2022-22761/" source="CVE"/>
		<reference ref_id="CVE-2022-22763" ref_url="https://www.suse.com/security/cve/CVE-2022-22763/" source="CVE"/>
		<reference ref_id="CVE-2022-22764" ref_url="https://www.suse.com/security/cve/CVE-2022-22764/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0676-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010331.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682)

- CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service
- CVE-2022-22754: Extensions could have bypassed permission confirmation during update
- CVE-2022-22756: Drag and dropping an image could have resulted in the dropped object being an executable
- CVE-2022-22759: Sandboxed iframes could have executed script if the parent appended elements
- CVE-2022-22760: Cross-Origin responses could be distinguished between script and non-script content-types
- CVE-2022-22761: frame-ancestors Content Security Policy directive was not enforced for framed extension pages
- CVE-2022-22763: Script Execution during invalid object state
- CVE-2022-22764: Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6


Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)

- Fixed an issue that allowed unexpected data to be submitted in some of our search telemetry
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-02"/>
	<updated date="2022-03-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195230">SUSE bug 1195230</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195682">SUSE bug 1195682</bugzilla>
	<cve impact="critical" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22753/">CVE-2022-22753</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22754/">CVE-2022-22754</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22756/">CVE-2022-22756</cve>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22759/">CVE-2022-22759</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22760/">CVE-2022-22760</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22761/">CVE-2022-22761</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22763/">CVE-2022-22763</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22764/">CVE-2022-22764</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009667821" comment="MozillaFirefox-91.6.0-150.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667822" comment="MozillaFirefox-devel-91.6.0-150.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667823" comment="MozillaFirefox-translations-common-91.6.0-150.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667824" comment="MozillaFirefox-translations-other-91.6.0-150.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141161" version="1" class="patch">
	<metadata>
		<title>Security update for php7 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1038980" ref_url="https://bugzilla.suse.com/1038980" source="BUGZILLA"/>
		<reference ref_id="1081790" ref_url="https://bugzilla.suse.com/1081790" source="BUGZILLA"/>
		<reference ref_id="1192050" ref_url="https://bugzilla.suse.com/1192050" source="BUGZILLA"/>
		<reference ref_id="1193041" ref_url="https://bugzilla.suse.com/1193041" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-9253" ref_url="https://www.suse.com/security/cve/CVE-2015-9253/" source="CVE"/>
		<reference ref_id="CVE-2017-8923" ref_url="https://www.suse.com/security/cve/CVE-2017-8923/" source="CVE"/>
		<reference ref_id="CVE-2021-21703" ref_url="https://www.suse.com/security/cve/CVE-2021-21703/" source="CVE"/>
		<reference ref_id="CVE-2021-21707" ref_url="https://www.suse.com/security/cve/CVE-2021-21707/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0679-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010332.html" source="SUSE-SU"/>
		<description>
This update for php7 fixes the following issues:

- CVE-2021-21703: Fixed local privilege escalation via PHP-FPM (bsc#1192050).
- CVE-2021-21707: Fixed special character breaks path in xml parsing (bsc#1193041).
- CVE-2017-8923: Fixed denial of service (application crash) when using .= with a long string (zend_string_extend func in Zend/zend_string.h) (bsc#1038980).
- CVE-2015-9253: Fixed endless loop when the master process restarts a child process using program execution functions (bsc#1081790).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-02"/>
	<updated date="2022-03-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1038980">SUSE bug 1038980</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1081790">SUSE bug 1081790</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192050">SUSE bug 1192050</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193041">SUSE bug 1193041</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-9253/">CVE-2015-9253</cve>
	<cve impact="low" cvss3="5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2017-8923/">CVE-2017-8923</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-21703/">CVE-2021-21703</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2021-21707/">CVE-2021-21707</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009668597" comment="apache2-mod_php7-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668598" comment="php7-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668599" comment="php7-bcmath-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668600" comment="php7-bz2-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668601" comment="php7-calendar-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668602" comment="php7-ctype-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668603" comment="php7-curl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668604" comment="php7-dba-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668605" comment="php7-devel-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668606" comment="php7-dom-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668607" comment="php7-enchant-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668608" comment="php7-exif-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668609" comment="php7-fastcgi-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668610" comment="php7-fileinfo-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668611" comment="php7-fpm-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668612" comment="php7-ftp-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668613" comment="php7-gd-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668614" comment="php7-gettext-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668615" comment="php7-gmp-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668616" comment="php7-iconv-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668617" comment="php7-intl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668618" comment="php7-json-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668619" comment="php7-ldap-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668620" comment="php7-mbstring-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668621" comment="php7-mysql-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668622" comment="php7-odbc-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668623" comment="php7-opcache-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668624" comment="php7-openssl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668625" comment="php7-pcntl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668626" comment="php7-pdo-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668542" comment="php7-pear-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668543" comment="php7-pear-Archive_Tar-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668627" comment="php7-pgsql-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668628" comment="php7-phar-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668629" comment="php7-posix-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668630" comment="php7-readline-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668631" comment="php7-shmop-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668632" comment="php7-snmp-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668633" comment="php7-soap-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668634" comment="php7-sockets-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668635" comment="php7-sodium-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668636" comment="php7-sqlite-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668637" comment="php7-sysvmsg-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668638" comment="php7-sysvsem-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668639" comment="php7-sysvshm-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670515" comment="php7-tidy-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668640" comment="php7-tokenizer-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668641" comment="php7-wddx-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668642" comment="php7-xmlreader-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668643" comment="php7-xmlrpc-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668644" comment="php7-xmlwriter-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668645" comment="php7-xsl-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668646" comment="php7-zip-7.2.5-4.89.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668647" comment="php7-zlib-7.2.5-4.89.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141162" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195255" ref_url="https://bugzilla.suse.com/1195255" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23181" ref_url="https://www.suse.com/security/cve/CVE-2022-23181/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0695-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010339.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2022-23181: Fixed time of check, time of use vulnerability that allowed local privilege escalation. (bsc#1195255)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195255">SUSE bug 1195255</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23181/">CVE-2022-23181</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009668573" comment="tomcat-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668574" comment="tomcat-admin-webapps-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668575" comment="tomcat-el-3_0-api-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668576" comment="tomcat-jsp-2_3-api-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668577" comment="tomcat-lib-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668578" comment="tomcat-servlet-4_0-api-9.0.36-4.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009668579" comment="tomcat-webapps-9.0.36-4.70.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141163" version="1" class="patch">
	<metadata>
		<title>Security update for cyrus-sasl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196036" ref_url="https://bugzilla.suse.com/1196036" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-24407" ref_url="https://www.suse.com/security/cve/CVE-2022-24407/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0702-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010340.html" source="SUSE-SU"/>
		<description>
This update for cyrus-sasl fixes the following issues:

- CVE-2022-24407: Fixed SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196036">SUSE bug 1196036</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24407/">CVE-2022-24407</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669233" comment="cyrus-sasl-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669201" comment="cyrus-sasl-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669234" comment="cyrus-sasl-crammd5-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669203" comment="cyrus-sasl-crammd5-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669235" comment="cyrus-sasl-devel-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669236" comment="cyrus-sasl-digestmd5-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669206" comment="cyrus-sasl-digestmd5-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669237" comment="cyrus-sasl-gssapi-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669208" comment="cyrus-sasl-gssapi-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669238" comment="cyrus-sasl-otp-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669239" comment="cyrus-sasl-plain-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669211" comment="cyrus-sasl-plain-32bit-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669240" comment="cyrus-sasl-saslauthd-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669241" comment="cyrus-sasl-sqlauxprop-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669242" comment="libsasl2-3-2.1.26-5.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669215" comment="libsasl2-3-32bit-2.1.26-5.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141164" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195064" ref_url="https://bugzilla.suse.com/1195064" source="BUGZILLA"/>
		<reference ref_id="1195735" ref_url="https://bugzilla.suse.com/1195735" source="BUGZILLA"/>
		<reference ref_id="1196133" ref_url="https://bugzilla.suse.com/1196133" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30934" ref_url="https://www.suse.com/security/cve/CVE-2021-30934/" source="CVE"/>
		<reference ref_id="CVE-2021-30936" ref_url="https://www.suse.com/security/cve/CVE-2021-30936/" source="CVE"/>
		<reference ref_id="CVE-2021-30951" ref_url="https://www.suse.com/security/cve/CVE-2021-30951/" source="CVE"/>
		<reference ref_id="CVE-2021-30952" ref_url="https://www.suse.com/security/cve/CVE-2021-30952/" source="CVE"/>
		<reference ref_id="CVE-2021-30953" ref_url="https://www.suse.com/security/cve/CVE-2021-30953/" source="CVE"/>
		<reference ref_id="CVE-2021-30954" ref_url="https://www.suse.com/security/cve/CVE-2021-30954/" source="CVE"/>
		<reference ref_id="CVE-2021-30984" ref_url="https://www.suse.com/security/cve/CVE-2021-30984/" source="CVE"/>
		<reference ref_id="CVE-2021-45481" ref_url="https://www.suse.com/security/cve/CVE-2021-45481/" source="CVE"/>
		<reference ref_id="CVE-2021-45482" ref_url="https://www.suse.com/security/cve/CVE-2021-45482/" source="CVE"/>
		<reference ref_id="CVE-2021-45483" ref_url="https://www.suse.com/security/cve/CVE-2021-45483/" source="CVE"/>
		<reference ref_id="CVE-2022-22589" ref_url="https://www.suse.com/security/cve/CVE-2022-22589/" source="CVE"/>
		<reference ref_id="CVE-2022-22590" ref_url="https://www.suse.com/security/cve/CVE-2022-22590/" source="CVE"/>
		<reference ref_id="CVE-2022-22592" ref_url="https://www.suse.com/security/cve/CVE-2022-22592/" source="CVE"/>
		<reference ref_id="CVE-2022-22594" ref_url="https://www.suse.com/security/cve/CVE-2022-22594/" source="CVE"/>
		<reference ref_id="CVE-2022-22620" ref_url="https://www.suse.com/security/cve/CVE-2022-22620/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0703-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010341.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.34.6 (bsc#1196133):

- CVE-2022-22620: Processing maliciously crafted web content may have lead to arbitrary code execution.

Update to version 2.34.5 (bsc#1195735):

- CVE-2022-22589: A validation issue was addressed with improved input sanitization.
- CVE-2022-22590: A use after free issue was addressed with improved memory management.
- CVE-2022-22592: A logic issue was addressed with improved state management.

Update to version 2.34.4 (bsc#1195064):

- CVE-2021-30934: A buffer overflow issue was addressed with improved memory handling.
- CVE-2021-30936: A use after free issue was addressed with improved memory management.
- CVE-2021-30951: A use after free issue was addressed with improved memory management.
- CVE-2021-30952: An integer overflow was addressed with improved input validation.
- CVE-2021-30953: An out-of-bounds read was addressed with improved bounds checking.
- CVE-2021-30954: A type confusion issue was addressed with improved memory handling.
- CVE-2021-30984: A race condition was addressed with improved state handling.
- CVE-2022-22594: A cross-origin issue in the IndexDB API was addressed with improved input validation.

The following CVEs were addressed in a previous update:

- CVE-2021-45481: Incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create.
- CVE-2021-45482: A use-after-free in WebCore::ContainerNode::firstChild.
- CVE-2021-45483: A use-after-free in WebCore::Frame::page.
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195064">SUSE bug 1195064</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195735">SUSE bug 1195735</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196133">SUSE bug 1196133</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30934/">CVE-2021-30934</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30936/">CVE-2021-30936</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30951/">CVE-2021-30951</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30952/">CVE-2021-30952</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30953/">CVE-2021-30953</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30954/">CVE-2021-30954</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30984/">CVE-2021-30984</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45481/">CVE-2021-45481</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45482/">CVE-2021-45482</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45483/">CVE-2021-45483</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-22589/">CVE-2022-22589</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22590/">CVE-2022-22590</cve>
	<cve impact="important" cvss3="6.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-22592/">CVE-2022-22592</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-22594/">CVE-2022-22594</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22620/">CVE-2022-22620</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670490" comment="libjavascriptcoregtk-4_0-18-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670491" comment="libwebkit2gtk-4_0-37-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670470" comment="libwebkit2gtk3-lang-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670492" comment="typelib-1_0-JavaScriptCore-4_0-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670493" comment="typelib-1_0-WebKit2-4_0-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670494" comment="typelib-1_0-WebKit2WebExtension-4_0-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670495" comment="webkit2gtk-4_0-injected-bundles-2.34.6-3.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670496" comment="webkit2gtk3-devel-2.34.6-3.97.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141165" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs8 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1191962" ref_url="https://bugzilla.suse.com/1191962" source="BUGZILLA"/>
		<reference ref_id="1191963" ref_url="https://bugzilla.suse.com/1191963" source="BUGZILLA"/>
		<reference ref_id="1192153" ref_url="https://bugzilla.suse.com/1192153" source="BUGZILLA"/>
		<reference ref_id="1192154" ref_url="https://bugzilla.suse.com/1192154" source="BUGZILLA"/>
		<reference ref_id="1192696" ref_url="https://bugzilla.suse.com/1192696" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-23343" ref_url="https://www.suse.com/security/cve/CVE-2021-23343/" source="CVE"/>
		<reference ref_id="CVE-2021-32803" ref_url="https://www.suse.com/security/cve/CVE-2021-32803/" source="CVE"/>
		<reference ref_id="CVE-2021-32804" ref_url="https://www.suse.com/security/cve/CVE-2021-32804/" source="CVE"/>
		<reference ref_id="CVE-2021-3807" ref_url="https://www.suse.com/security/cve/CVE-2021-3807/" source="CVE"/>
		<reference ref_id="CVE-2021-3918" ref_url="https://www.suse.com/security/cve/CVE-2021-3918/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0704-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010344.html" source="SUSE-SU"/>
		<description>
This update for nodejs8 fixes the following issues:

- CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153).
- CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite (bsc#1191963).
- CVE-2021-32804: Fixed insufficient absolute path sanitization in node-tar allowing arbitrary file creation and overwrite (bsc#1191962).
- CVE-2021-3918: Fixed improper controlled modification of object prototype attributes in json-schema (bsc#1192696).
- CVE-2021-3807: Fixed regular expression denial of service (ReDoS) matching ANSI escape codes in node-ansi-regex (bsc#1192154).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-03"/>
	<updated date="2022-03-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1191962">SUSE bug 1191962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191963">SUSE bug 1191963</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192153">SUSE bug 1192153</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192154">SUSE bug 1192154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192696">SUSE bug 1192696</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-23343/">CVE-2021-23343</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32803/">CVE-2021-32803</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-32804/">CVE-2021-32804</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3807/">CVE-2021-3807</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3918/">CVE-2021-3918</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669756" comment="nodejs-common-2.0-3.4.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141166" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196025" ref_url="https://bugzilla.suse.com/1196025" source="BUGZILLA"/>
		<reference ref_id="1196026" ref_url="https://bugzilla.suse.com/1196026" source="BUGZILLA"/>
		<reference ref_id="1196168" ref_url="https://bugzilla.suse.com/1196168" source="BUGZILLA"/>
		<reference ref_id="1196169" ref_url="https://bugzilla.suse.com/1196169" source="BUGZILLA"/>
		<reference ref_id="1196171" ref_url="https://bugzilla.suse.com/1196171" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25235" ref_url="https://www.suse.com/security/cve/CVE-2022-25235/" source="CVE"/>
		<reference ref_id="CVE-2022-25236" ref_url="https://www.suse.com/security/cve/CVE-2022-25236/" source="CVE"/>
		<reference ref_id="CVE-2022-25313" ref_url="https://www.suse.com/security/cve/CVE-2022-25313/" source="CVE"/>
		<reference ref_id="CVE-2022-25314" ref_url="https://www.suse.com/security/cve/CVE-2022-25314/" source="CVE"/>
		<reference ref_id="CVE-2022-25315" ref_url="https://www.suse.com/security/cve/CVE-2022-25315/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0713-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010357.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:
  
- CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs (bsc#1196025).
- CVE-2022-25235: Fixed UTF-8 character validation in a certain context (bsc#1196026).
- CVE-2022-25313: Fixed stack exhaustion in build_model() via uncontrolled recursion (bsc#1196168).
- CVE-2022-25314: Fixed integer overflow in copyString (bsc#1196169).
- CVE-2022-25315: Fixed integer overflow in storeRawNames (bsc#1196171).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196025">SUSE bug 1196025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196026">SUSE bug 1196026</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196168">SUSE bug 1196168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196169">SUSE bug 1196169</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196171">SUSE bug 1196171</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25235/">CVE-2022-25235</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25236/">CVE-2022-25236</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-25313/">CVE-2022-25313</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25314/">CVE-2022-25314</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25315/">CVE-2022-25315</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669162" comment="expat-2.2.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669163" comment="libexpat-devel-2.2.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669164" comment="libexpat1-2.2.5-3.15.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669165" comment="libexpat1-32bit-2.2.5-3.15.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141167" version="1" class="patch">
	<metadata>
		<title>Security update for wpa_supplicant (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194732" ref_url="https://bugzilla.suse.com/1194732" source="BUGZILLA"/>
		<reference ref_id="1194733" ref_url="https://bugzilla.suse.com/1194733" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23303" ref_url="https://www.suse.com/security/cve/CVE-2022-23303/" source="CVE"/>
		<reference ref_id="CVE-2022-23304" ref_url="https://www.suse.com/security/cve/CVE-2022-23304/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0716-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010363.html" source="SUSE-SU"/>
		<description>
This update for wpa_supplicant fixes the following issues:
	  
- CVE-2022-23303: Fixed side-channel attacks in SAE (bsc#1194732).
- CVE-2022-23304: Fixed side-channel attacks in EAP-pwd (bsc#1194733).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1194732">SUSE bug 1194732</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194733">SUSE bug 1194733</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23303/">CVE-2022-23303</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23304/">CVE-2022-23304</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669161" comment="wpa_supplicant-2.9-4.33.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141168" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195786" ref_url="https://bugzilla.suse.com/1195786" source="BUGZILLA"/>
		<reference ref_id="1196333" ref_url="https://bugzilla.suse.com/1196333" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-0066" ref_url="https://www.suse.com/security/cve/CVE-2021-0066/" source="CVE"/>
		<reference ref_id="CVE-2021-0072" ref_url="https://www.suse.com/security/cve/CVE-2021-0072/" source="CVE"/>
		<reference ref_id="CVE-2021-0076" ref_url="https://www.suse.com/security/cve/CVE-2021-0076/" source="CVE"/>
		<reference ref_id="CVE-2021-0161" ref_url="https://www.suse.com/security/cve/CVE-2021-0161/" source="CVE"/>
		<reference ref_id="CVE-2021-0164" ref_url="https://www.suse.com/security/cve/CVE-2021-0164/" source="CVE"/>
		<reference ref_id="CVE-2021-0165" ref_url="https://www.suse.com/security/cve/CVE-2021-0165/" source="CVE"/>
		<reference ref_id="CVE-2021-0166" ref_url="https://www.suse.com/security/cve/CVE-2021-0166/" source="CVE"/>
		<reference ref_id="CVE-2021-0168" ref_url="https://www.suse.com/security/cve/CVE-2021-0168/" source="CVE"/>
		<reference ref_id="CVE-2021-0170" ref_url="https://www.suse.com/security/cve/CVE-2021-0170/" source="CVE"/>
		<reference ref_id="CVE-2021-0172" ref_url="https://www.suse.com/security/cve/CVE-2021-0172/" source="CVE"/>
		<reference ref_id="CVE-2021-0173" ref_url="https://www.suse.com/security/cve/CVE-2021-0173/" source="CVE"/>
		<reference ref_id="CVE-2021-0174" ref_url="https://www.suse.com/security/cve/CVE-2021-0174/" source="CVE"/>
		<reference ref_id="CVE-2021-0175" ref_url="https://www.suse.com/security/cve/CVE-2021-0175/" source="CVE"/>
		<reference ref_id="CVE-2021-0176" ref_url="https://www.suse.com/security/cve/CVE-2021-0176/" source="CVE"/>
		<reference ref_id="CVE-2021-0183" ref_url="https://www.suse.com/security/cve/CVE-2021-0183/" source="CVE"/>
		<reference ref_id="CVE-2021-33139" ref_url="https://www.suse.com/security/cve/CVE-2021-33139/" source="CVE"/>
		<reference ref_id="CVE-2021-33155" ref_url="https://www.suse.com/security/cve/CVE-2021-33155/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0721-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010356.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

- Update Intel Wireless firmware for 9xxx (CVE-2021-0161,
  CVE-2021-0164,CVE-2021-0165,CVE-2021-0066,CVE-2021-0166,
  CVE-2021-0168,CVE-2021-0170,CVE-2021-0172,CVE-2021-0173,
  CVE-2021-0174,CVE-2021-0175,CVE-2021-0076,CVE-2021-0176,
  CVE-2021-0183,CVE-2021-0072,INTEL-SA-00539,bsc#1196333):
  iwlwifi-9000-pu-b0-jf-b0-46.ucode
  iwlwifi-9000-pu-b0-jf-b0-46.ucode
- Update Intel Bluetooth firmware (CVE-2021-33139,CVE-2021-33155,
  INTEL-SA-00604,bsc#1195786)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195786">SUSE bug 1195786</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196333">SUSE bug 1196333</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0066/">CVE-2021-0066</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0072/">CVE-2021-0072</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0076/">CVE-2021-0076</cve>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0161/">CVE-2021-0161</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0164/">CVE-2021-0164</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0165/">CVE-2021-0165</cve>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0166/">CVE-2021-0166</cve>
	<cve impact="important" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-0168/">CVE-2021-0168</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-0170/">CVE-2021-0170</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0172/">CVE-2021-0172</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0173/">CVE-2021-0173</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0174/">CVE-2021-0174</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0175/">CVE-2021-0175</cve>
	<cve impact="important" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0176/">CVE-2021-0176</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-0183/">CVE-2021-0183</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33139/">CVE-2021-33139</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-33155/">CVE-2021-33155</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669993" comment="kernel-firmware-20200107-3.26.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669994" comment="ucode-amd-20200107-3.26.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141169" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195866" ref_url="https://bugzilla.suse.com/1195866" source="BUGZILLA"/>
		<reference ref_id="1195867" ref_url="https://bugzilla.suse.com/1195867" source="BUGZILLA"/>
		<reference ref_id="1195868" ref_url="https://bugzilla.suse.com/1195868" source="BUGZILLA"/>
		<reference ref_id="1195869" ref_url="https://bugzilla.suse.com/1195869" source="BUGZILLA"/>
		<reference ref_id="1195870" ref_url="https://bugzilla.suse.com/1195870" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0581" ref_url="https://www.suse.com/security/cve/CVE-2022-0581/" source="CVE"/>
		<reference ref_id="CVE-2022-0582" ref_url="https://www.suse.com/security/cve/CVE-2022-0582/" source="CVE"/>
		<reference ref_id="CVE-2022-0583" ref_url="https://www.suse.com/security/cve/CVE-2022-0583/" source="CVE"/>
		<reference ref_id="CVE-2022-0585" ref_url="https://www.suse.com/security/cve/CVE-2022-0585/" source="CVE"/>
		<reference ref_id="CVE-2022-0586" ref_url="https://www.suse.com/security/cve/CVE-2022-0586/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0722-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010360.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:

Update to Wireshark 3.6.2:

- CVE-2022-0586: RTMPT dissector infinite loop (bsc#1195866)
- CVE-2022-0585: Large loops in multiple dissectors (bsc#1195867)
- CVE-2022-0583: PVFS dissector crash (bsc#1195868)
- CVE-2022-0582: CSN.1 dissector crash (bsc#1195869)
- CVE-2022-0581: CMS dissector crash (bsc#1195870)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195866">SUSE bug 1195866</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195867">SUSE bug 1195867</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195868">SUSE bug 1195868</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195869">SUSE bug 1195869</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195870">SUSE bug 1195870</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0581/">CVE-2022-0581</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0582/">CVE-2022-0582</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0583/">CVE-2022-0583</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0585/">CVE-2022-0585</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0586/">CVE-2022-0586</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669010" comment="libwireshark15-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669011" comment="libwiretap12-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669012" comment="libwsutil13-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669013" comment="wireshark-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669022" comment="wireshark-devel-3.6.2-3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669023" comment="wireshark-ui-qt-3.6.2-3.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141170" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195325" ref_url="https://bugzilla.suse.com/1195325" source="BUGZILLA"/>
		<reference ref_id="1195334" ref_url="https://bugzilla.suse.com/1195334" source="BUGZILLA"/>
		<reference ref_id="1195339" ref_url="https://bugzilla.suse.com/1195339" source="BUGZILLA"/>
		<reference ref_id="1196016" ref_url="https://bugzilla.suse.com/1196016" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-46657" ref_url="https://www.suse.com/security/cve/CVE-2021-46657/" source="CVE"/>
		<reference ref_id="CVE-2021-46658" ref_url="https://www.suse.com/security/cve/CVE-2021-46658/" source="CVE"/>
		<reference ref_id="CVE-2021-46659" ref_url="https://www.suse.com/security/cve/CVE-2021-46659/" source="CVE"/>
		<reference ref_id="CVE-2021-46661" ref_url="https://www.suse.com/security/cve/CVE-2021-46661/" source="CVE"/>
		<reference ref_id="CVE-2021-46663" ref_url="https://www.suse.com/security/cve/CVE-2021-46663/" source="CVE"/>
		<reference ref_id="CVE-2021-46664" ref_url="https://www.suse.com/security/cve/CVE-2021-46664/" source="CVE"/>
		<reference ref_id="CVE-2021-46665" ref_url="https://www.suse.com/security/cve/CVE-2021-46665/" source="CVE"/>
		<reference ref_id="CVE-2021-46668" ref_url="https://www.suse.com/security/cve/CVE-2021-46668/" source="CVE"/>
		<reference ref_id="CVE-2022-24048" ref_url="https://www.suse.com/security/cve/CVE-2022-24048/" source="CVE"/>
		<reference ref_id="CVE-2022-24050" ref_url="https://www.suse.com/security/cve/CVE-2022-24050/" source="CVE"/>
		<reference ref_id="CVE-2022-24051" ref_url="https://www.suse.com/security/cve/CVE-2022-24051/" source="CVE"/>
		<reference ref_id="CVE-2022-24052" ref_url="https://www.suse.com/security/cve/CVE-2022-24052/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0725-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010354.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

- Update to 10.2.43 (bsc#1196016):
    10.2.43: CVE-2021-46665
             CVE-2021-46664
             CVE-2021-46661
             CVE-2021-46668
             CVE-2021-46663 
    10.2.42: CVE-2022-24052
             CVE-2022-24051
             CVE-2022-24050
             CVE-2022-24048
             CVE-2021-46659, bsc#1195339
	     
- The following issues have already been fixed in this package but weren't 
previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1195325">SUSE bug 1195325</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195334">SUSE bug 1195334</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195339">SUSE bug 1195339</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196016">SUSE bug 1196016</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46657/">CVE-2021-46657</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46658/">CVE-2021-46658</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-46659/">CVE-2021-46659</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46661/">CVE-2021-46661</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46663/">CVE-2021-46663</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46664/">CVE-2021-46664</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46665/">CVE-2021-46665</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46668/">CVE-2021-46668</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24048/">CVE-2022-24048</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24050/">CVE-2022-24050</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24051/">CVE-2022-24051</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-24052/">CVE-2022-24052</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669781" comment="libmysqld-devel-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669782" comment="libmysqld19-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669783" comment="mariadb-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669784" comment="mariadb-client-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669761" comment="mariadb-errormessages-10.2.43-3.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669785" comment="mariadb-tools-10.2.43-3.51.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141171" version="1" class="patch">
	<metadata>
		<title>Security update for zsh (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1163882" ref_url="https://bugzilla.suse.com/1163882" source="BUGZILLA"/>
		<reference ref_id="1196435" ref_url="https://bugzilla.suse.com/1196435" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-20044" ref_url="https://www.suse.com/security/cve/CVE-2019-20044/" source="CVE"/>
		<reference ref_id="CVE-2021-45444" ref_url="https://www.suse.com/security/cve/CVE-2021-45444/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0735-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010365.html" source="SUSE-SU"/>
		<description>
This update for zsh fixes the following issues:

- CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be 
  executed related to prompt expansion (bsc#1196435).
- CVE-2019-20044: Fixed a vulnerability where shell privileges would not be
  properly dropped when unsetting the PRIVILEGED option (bsc#1163882).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1163882">SUSE bug 1163882</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196435">SUSE bug 1196435</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2019-20044/">CVE-2019-20044</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-45444/">CVE-2021-45444</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670453" comment="zsh-5.6-7.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141172" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1190533" ref_url="https://bugzilla.suse.com/1190533" source="BUGZILLA"/>
		<reference ref_id="1190570" ref_url="https://bugzilla.suse.com/1190570" source="BUGZILLA"/>
		<reference ref_id="1191893" ref_url="https://bugzilla.suse.com/1191893" source="BUGZILLA"/>
		<reference ref_id="1192478" ref_url="https://bugzilla.suse.com/1192478" source="BUGZILLA"/>
		<reference ref_id="1192481" ref_url="https://bugzilla.suse.com/1192481" source="BUGZILLA"/>
		<reference ref_id="1193294" ref_url="https://bugzilla.suse.com/1193294" source="BUGZILLA"/>
		<reference ref_id="1193298" ref_url="https://bugzilla.suse.com/1193298" source="BUGZILLA"/>
		<reference ref_id="1194216" ref_url="https://bugzilla.suse.com/1194216" source="BUGZILLA"/>
		<reference ref_id="1194556" ref_url="https://bugzilla.suse.com/1194556" source="BUGZILLA"/>
		<reference ref_id="1195004" ref_url="https://bugzilla.suse.com/1195004" source="BUGZILLA"/>
		<reference ref_id="1195066" ref_url="https://bugzilla.suse.com/1195066" source="BUGZILLA"/>
		<reference ref_id="1195126" ref_url="https://bugzilla.suse.com/1195126" source="BUGZILLA"/>
		<reference ref_id="1195202" ref_url="https://bugzilla.suse.com/1195202" source="BUGZILLA"/>
		<reference ref_id="1195356" ref_url="https://bugzilla.suse.com/1195356" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3778" ref_url="https://www.suse.com/security/cve/CVE-2021-3778/" source="CVE"/>
		<reference ref_id="CVE-2021-3796" ref_url="https://www.suse.com/security/cve/CVE-2021-3796/" source="CVE"/>
		<reference ref_id="CVE-2021-3872" ref_url="https://www.suse.com/security/cve/CVE-2021-3872/" source="CVE"/>
		<reference ref_id="CVE-2021-3927" ref_url="https://www.suse.com/security/cve/CVE-2021-3927/" source="CVE"/>
		<reference ref_id="CVE-2021-3928" ref_url="https://www.suse.com/security/cve/CVE-2021-3928/" source="CVE"/>
		<reference ref_id="CVE-2021-3984" ref_url="https://www.suse.com/security/cve/CVE-2021-3984/" source="CVE"/>
		<reference ref_id="CVE-2021-4019" ref_url="https://www.suse.com/security/cve/CVE-2021-4019/" source="CVE"/>
		<reference ref_id="CVE-2021-4193" ref_url="https://www.suse.com/security/cve/CVE-2021-4193/" source="CVE"/>
		<reference ref_id="CVE-2021-46059" ref_url="https://www.suse.com/security/cve/CVE-2021-46059/" source="CVE"/>
		<reference ref_id="CVE-2022-0318" ref_url="https://www.suse.com/security/cve/CVE-2022-0318/" source="CVE"/>
		<reference ref_id="CVE-2022-0319" ref_url="https://www.suse.com/security/cve/CVE-2022-0319/" source="CVE"/>
		<reference ref_id="CVE-2022-0351" ref_url="https://www.suse.com/security/cve/CVE-2022-0351/" source="CVE"/>
		<reference ref_id="CVE-2022-0361" ref_url="https://www.suse.com/security/cve/CVE-2022-0361/" source="CVE"/>
		<reference ref_id="CVE-2022-0413" ref_url="https://www.suse.com/security/cve/CVE-2022-0413/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0736-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010366.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

- CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004).
- CVE-2021-3796: Fixed use-after-free in nv_replace() in normal.c (bsc#1190570).
- CVE-2021-3872: Fixed heap-based buffer overflow in win_redr_status() drawscreen.c (bsc#1191893).
- CVE-2021-3927: Fixed heap-based buffer overflow (bsc#1192481).
- CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478).
- CVE-2021-4019: Fixed heap-based buffer overflow (bsc#1193294).
- CVE-2021-3984: Fixed illegal memory access when C-indenting could have led to heap buffer overflow (bsc#1193298).
- CVE-2021-3778: Fixed heap-based buffer overflow in regexp_nfa.c (bsc#1190533).
- CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216).
- CVE-2021-46059: Fixed pointer dereference vulnerability via the vim_regexec_multi function at regexp.c (bsc#1194556).
- CVE-2022-0319: Fixded out-of-bounds read (bsc#1195066).
- CVE-2022-0351: Fixed uncontrolled recursion in eval7() (bsc#1195126).
- CVE-2022-0361: Fixed buffer overflow (bsc#1195126).
- CVE-2022-0413: Fixed use-after-free in src/ex_cmds.c (bsc#1195356).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-04"/>
	<updated date="2022-03-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190533">SUSE bug 1190533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190570">SUSE bug 1190570</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191893">SUSE bug 1191893</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192478">SUSE bug 1192478</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192481">SUSE bug 1192481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193294">SUSE bug 1193294</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193298">SUSE bug 1193298</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194216">SUSE bug 1194216</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194556">SUSE bug 1194556</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195004">SUSE bug 1195004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195066">SUSE bug 1195066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195126">SUSE bug 1195126</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195202">SUSE bug 1195202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195356">SUSE bug 1195356</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3778/">CVE-2021-3778</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-3796/">CVE-2021-3796</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3872/">CVE-2021-3872</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3927/">CVE-2021-3927</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-3928/">CVE-2021-3928</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3984/">CVE-2021-3984</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-4019/">CVE-2021-4019</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2021-4193/">CVE-2021-4193</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-46059/">CVE-2021-46059</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0318/">CVE-2022-0318</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0319/">CVE-2022-0319</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-0351/">CVE-2022-0351</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-0361/">CVE-2022-0361</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0413/">CVE-2022-0413</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669929" comment="gvim-8.0.1568-5.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669881" comment="vim-8.0.1568-5.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669882" comment="vim-data-8.0.1568-5.17.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669883" comment="vim-data-common-8.0.1568-5.17.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141173" version="1" class="patch">
	<metadata>
		<title>Security update for libcaca (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182731" ref_url="https://bugzilla.suse.com/1182731" source="BUGZILLA"/>
		<reference ref_id="1184751" ref_url="https://bugzilla.suse.com/1184751" source="BUGZILLA"/>
		<reference ref_id="1184752" ref_url="https://bugzilla.suse.com/1184752" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-30498" ref_url="https://www.suse.com/security/cve/CVE-2021-30498/" source="CVE"/>
		<reference ref_id="CVE-2021-30499" ref_url="https://www.suse.com/security/cve/CVE-2021-30499/" source="CVE"/>
		<reference ref_id="CVE-2021-3410" ref_url="https://www.suse.com/security/cve/CVE-2021-3410/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0754-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010388.html" source="SUSE-SU"/>
		<description>
This update for libcaca fixes the following issues:

- CVE-2021-30499: Fixed a memory corruption issue when exporting troff sources (bsc#1184751).
- CVE-2021-30498: Fixed a memory corruption issue when exporting TGA images (bsc#1184752).
- CVE-2021-3410: Fixed an illegal WRITE memory access (bsc#1182731).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-08"/>
	<updated date="2022-03-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182731">SUSE bug 1182731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184751">SUSE bug 1184751</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184752">SUSE bug 1184752</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30498/">CVE-2021-30498</cve>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-30499/">CVE-2021-30499</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3410/">CVE-2021-3410</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670717" comment="libcaca-devel-0.99.beta19.git20171003-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670718" comment="libcaca0-0.99.beta19.git20171003-3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670719" comment="libcaca0-plugins-0.99.beta19.git20171003-3.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141174" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185973" ref_url="https://bugzilla.suse.com/1185973" source="BUGZILLA"/>
		<reference ref_id="1191580" ref_url="https://bugzilla.suse.com/1191580" source="BUGZILLA"/>
		<reference ref_id="1194516" ref_url="https://bugzilla.suse.com/1194516" source="BUGZILLA"/>
		<reference ref_id="1195536" ref_url="https://bugzilla.suse.com/1195536" source="BUGZILLA"/>
		<reference ref_id="1195543" ref_url="https://bugzilla.suse.com/1195543" source="BUGZILLA"/>
		<reference ref_id="1195612" ref_url="https://bugzilla.suse.com/1195612" source="BUGZILLA"/>
		<reference ref_id="1195840" ref_url="https://bugzilla.suse.com/1195840" source="BUGZILLA"/>
		<reference ref_id="1195897" ref_url="https://bugzilla.suse.com/1195897" source="BUGZILLA"/>
		<reference ref_id="1195908" ref_url="https://bugzilla.suse.com/1195908" source="BUGZILLA"/>
		<reference ref_id="1195949" ref_url="https://bugzilla.suse.com/1195949" source="BUGZILLA"/>
		<reference ref_id="1195987" ref_url="https://bugzilla.suse.com/1195987" source="BUGZILLA"/>
		<reference ref_id="1196079" ref_url="https://bugzilla.suse.com/1196079" source="BUGZILLA"/>
		<reference ref_id="1196155" ref_url="https://bugzilla.suse.com/1196155" source="BUGZILLA"/>
		<reference ref_id="1196584" ref_url="https://bugzilla.suse.com/1196584" source="BUGZILLA"/>
		<reference ref_id="1196612" ref_url="https://bugzilla.suse.com/1196612" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-44879" ref_url="https://www.suse.com/security/cve/CVE-2021-44879/" source="CVE"/>
		<reference ref_id="CVE-2022-0001" ref_url="https://www.suse.com/security/cve/CVE-2022-0001/" source="CVE"/>
		<reference ref_id="CVE-2022-0002" ref_url="https://www.suse.com/security/cve/CVE-2022-0002/" source="CVE"/>
		<reference ref_id="CVE-2022-0487" ref_url="https://www.suse.com/security/cve/CVE-2022-0487/" source="CVE"/>
		<reference ref_id="CVE-2022-0492" ref_url="https://www.suse.com/security/cve/CVE-2022-0492/" source="CVE"/>
		<reference ref_id="CVE-2022-0617" ref_url="https://www.suse.com/security/cve/CVE-2022-0617/" source="CVE"/>
		<reference ref_id="CVE-2022-0644" ref_url="https://www.suse.com/security/cve/CVE-2022-0644/" source="CVE"/>
		<reference ref_id="CVE-2022-0847" ref_url="https://www.suse.com/security/cve/CVE-2022-0847/" source="CVE"/>
		<reference ref_id="CVE-2022-24448" ref_url="https://www.suse.com/security/cve/CVE-2022-24448/" source="CVE"/>
		<reference ref_id="CVE-2022-24959" ref_url="https://www.suse.com/security/cve/CVE-2022-24959/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0768-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010395.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


Transient execution side-channel attacks attacking the Branch History Buffer (BHB),
named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.

The following security bugs were fixed:

- CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).
- CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).
- CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584).
- CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079)
- CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd() (bsc#1196155).
- CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987).
- CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897).
- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
- CVE-2022-24448: Fixed an issue in fs/nfs/dir.c. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612).


The following non-security bugs were fixed:

- crypto: af_alg - get_page upon reassignment to TX SGL (bsc#1195840).
- lib/iov_iter: initialize 'flags' in new pipe_buffer (bsc#1196584).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185973">SUSE bug 1185973</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191580">SUSE bug 1191580</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194516">SUSE bug 1194516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195536">SUSE bug 1195536</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195543">SUSE bug 1195543</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195612">SUSE bug 1195612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195840">SUSE bug 1195840</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195897">SUSE bug 1195897</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195908">SUSE bug 1195908</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195949">SUSE bug 1195949</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195987">SUSE bug 1195987</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196079">SUSE bug 1196079</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196155">SUSE bug 1196155</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196584">SUSE bug 1196584</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196612">SUSE bug 1196612</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-44879/">CVE-2021-44879</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0001/">CVE-2022-0001</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0002/">CVE-2022-0002</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0487/">CVE-2022-0487</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0492/">CVE-2022-0492</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0617/">CVE-2022-0617</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0644/">CVE-2022-0644</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-0847/">CVE-2022-0847</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-24448/">CVE-2022-24448</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-24959/">CVE-2022-24959</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671627" comment="kernel-default-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671628" comment="kernel-default-base-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671629" comment="kernel-default-devel-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671630" comment="kernel-default-man-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671491" comment="kernel-devel-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671492" comment="kernel-docs-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671493" comment="kernel-macros-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671631" comment="kernel-obs-build-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671495" comment="kernel-source-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671632" comment="kernel-syms-4.12.14-197.108.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671633" comment="reiserfs-kmp-default-4.12.14-197.108.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141175" version="1" class="patch">
	<metadata>
		<title>Security update for tcpdump (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1195825" ref_url="https://bugzilla.suse.com/1195825" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-16301" ref_url="https://www.suse.com/security/cve/CVE-2018-16301/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0774-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010403.html" source="SUSE-SU"/>
		<description>
This update for tcpdump fixes the following issues:

- CVE-2018-16301: Fixed segfault when handling large files (bsc#1195825).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1195825">SUSE bug 1195825</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-16301/">CVE-2018-16301</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009667949" comment="tcpdump-4.9.2-3.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141176" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196809" ref_url="https://bugzilla.suse.com/1196809" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26485" ref_url="https://www.suse.com/security/cve/CVE-2022-26485/" source="CVE"/>
		<reference ref_id="CVE-2022-26486" ref_url="https://www.suse.com/security/cve/CVE-2022-26486/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0778-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010409.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.6.1 ESR (bsc#1196809):

- CVE-2022-26485: Use-after-free in XSLT parameter processing
- CVE-2022-26486: Use-after-free in WebGPU IPC Framework
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196809">SUSE bug 1196809</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26485/">CVE-2022-26485</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26486/">CVE-2022-26486</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671555" comment="MozillaFirefox-91.6.1-150.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671556" comment="MozillaFirefox-devel-91.6.1-150.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671557" comment="MozillaFirefox-translations-common-91.6.1-150.21.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671558" comment="MozillaFirefox-translations-other-91.6.1-150.21.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141177" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196137" ref_url="https://bugzilla.suse.com/1196137" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2022:0779-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010410.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- Remove hard log4j dependency, as it is not required by tomcat itself (bsc#1196137)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-09"/>
	<updated date="2022-03-09"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1196137">SUSE bug 1196137</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670690" comment="tomcat-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670691" comment="tomcat-admin-webapps-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670692" comment="tomcat-el-3_0-api-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670693" comment="tomcat-jsp-2_3-api-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670694" comment="tomcat-lib-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670695" comment="tomcat-servlet-4_0-api-9.0.36-4.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670696" comment="tomcat-webapps-9.0.36-4.73.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141178" version="1" class="patch">
	<metadata>
		<title>Security update for python-libxml2-python (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196490" ref_url="https://bugzilla.suse.com/1196490" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23308" ref_url="https://www.suse.com/security/cve/CVE-2022-23308/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0802-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010416.html" source="SUSE-SU"/>
		<description>
This update for python-libxml2-python fixes the following issues:

- CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes (bsc#1196490).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-10"/>
	<updated date="2022-03-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196490">SUSE bug 1196490</bugzilla>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2022-23308/">CVE-2022-23308</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670467" comment="python2-libxml2-python-2.9.7-3.40.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670465" comment="python3-libxml2-python-2.9.7-3.40.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141179" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196900" ref_url="https://bugzilla.suse.com/1196900" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-26381" ref_url="https://www.suse.com/security/cve/CVE-2022-26381/" source="CVE"/>
		<reference ref_id="CVE-2022-26383" ref_url="https://www.suse.com/security/cve/CVE-2022-26383/" source="CVE"/>
		<reference ref_id="CVE-2022-26384" ref_url="https://www.suse.com/security/cve/CVE-2022-26384/" source="CVE"/>
		<reference ref_id="CVE-2022-26386" ref_url="https://www.suse.com/security/cve/CVE-2022-26386/" source="CVE"/>
		<reference ref_id="CVE-2022-26387" ref_url="https://www.suse.com/security/cve/CVE-2022-26387/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0819-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010426.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 91.7.0 ESR (bsc#1196900):

- CVE-2022-26383: Browser window spoof using fullscreen mode
- CVE-2022-26384: iframe allow-scripts sandbox bypass
- CVE-2022-26387: Time-of-check time-of-use bug when verifying add-on signatures
- CVE-2022-26381: Use-after-free in text reflows
- CVE-2022-26386: Temporary files downloaded to /tmp and accessible by other local users
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196900">SUSE bug 1196900</bugzilla>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26381/">CVE-2022-26381</cve>
	<cve impact="critical" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-26383/">CVE-2022-26383</cve>
	<cve impact="critical" cvss3="9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26384/">CVE-2022-26384</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-26386/">CVE-2022-26386</cve>
	<cve impact="critical" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-26387/">CVE-2022-26387</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009672526" comment="MozillaFirefox-91.7.0-150.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672527" comment="MozillaFirefox-devel-91.7.0-150.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672528" comment="MozillaFirefox-translations-common-91.7.0-150.24.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672529" comment="MozillaFirefox-translations-other-91.7.0-150.24.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141180" version="1" class="patch">
	<metadata>
		<title>Security update for SDL2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181201" ref_url="https://bugzilla.suse.com/1181201" source="BUGZILLA"/>
		<reference ref_id="1181202" ref_url="https://bugzilla.suse.com/1181202" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-14409" ref_url="https://www.suse.com/security/cve/CVE-2020-14409/" source="CVE"/>
		<reference ref_id="CVE-2020-14410" ref_url="https://www.suse.com/security/cve/CVE-2020-14410/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0825-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010429.html" source="SUSE-SU"/>
		<description>
This update for SDL2 fixes the following issues:

- CVE-2020-14409, CVE-2020-14410: Fixed overflow in surface pitch calculation (bsc#1181201, bsc#1181202).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181201">SUSE bug 1181201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1181202">SUSE bug 1181202</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14409/">CVE-2020-14409</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2020-14410/">CVE-2020-14410</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009670720" comment="libSDL2-2_0-0-2.0.8-3.18.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009670721" comment="libSDL2-devel-2.0.8-3.18.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141181" version="1" class="patch">
	<metadata>
		<title>Security update for sssd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182637" ref_url="https://bugzilla.suse.com/1182637" source="BUGZILLA"/>
		<reference ref_id="1189492" ref_url="https://bugzilla.suse.com/1189492" source="BUGZILLA"/>
		<reference ref_id="1190775" ref_url="https://bugzilla.suse.com/1190775" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3621" ref_url="https://www.suse.com/security/cve/CVE-2021-3621/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0826-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010431.html" source="SUSE-SU"/>
		<description>
This update for sssd fixes the following issues:

Security issues fixed:

- CVE-2021-3621: Fixed shell command injection in sssctl via the logs-fetch and cache-expire subcommands (bsc#1189492).

Non-security issues fixed:

- Create timestamp attribute in cache objects if missing. (bsc#1182637)
- Add 'ldap_ignore_unreadable_references' parameter to skip unreadable objects referenced by 'member' attributte (bsc#1190775).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182637">SUSE bug 1182637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1189492">SUSE bug 1189492</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1190775">SUSE bug 1190775</bugzilla>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3621/">CVE-2021-3621</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671533" comment="libipa_hbac-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671534" comment="libipa_hbac0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671535" comment="libsss_certmap-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671536" comment="libsss_certmap0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671537" comment="libsss_idmap-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671538" comment="libsss_idmap0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671539" comment="libsss_nss_idmap-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671540" comment="libsss_nss_idmap0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671541" comment="libsss_simpleifp-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671542" comment="libsss_simpleifp0-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671543" comment="python3-sssd-config-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671544" comment="sssd-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671462" comment="sssd-32bit-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671545" comment="sssd-ad-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671546" comment="sssd-dbus-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671547" comment="sssd-ipa-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671548" comment="sssd-krb5-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671549" comment="sssd-krb5-common-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671550" comment="sssd-ldap-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671551" comment="sssd-proxy-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671552" comment="sssd-tools-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671553" comment="sssd-wbclient-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671554" comment="sssd-wbclient-devel-1.16.1-8.64.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672756" comment="sssd-winbind-idmap-1.16.1-8.64.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141182" version="1" class="patch">
	<metadata>
		<title>Security update for glibc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193625" ref_url="https://bugzilla.suse.com/1193625" source="BUGZILLA"/>
		<reference ref_id="1194640" ref_url="https://bugzilla.suse.com/1194640" source="BUGZILLA"/>
		<reference ref_id="1194768" ref_url="https://bugzilla.suse.com/1194768" source="BUGZILLA"/>
		<reference ref_id="1194770" ref_url="https://bugzilla.suse.com/1194770" source="BUGZILLA"/>
		<reference ref_id="1195560" ref_url="https://bugzilla.suse.com/1195560" source="BUGZILLA"/>
		<reference ref_id="CVE-2015-8985" ref_url="https://www.suse.com/security/cve/CVE-2015-8985/" source="CVE"/>
		<reference ref_id="CVE-2021-3999" ref_url="https://www.suse.com/security/cve/CVE-2021-3999/" source="CVE"/>
		<reference ref_id="CVE-2022-23218" ref_url="https://www.suse.com/security/cve/CVE-2022-23218/" source="CVE"/>
		<reference ref_id="CVE-2022-23219" ref_url="https://www.suse.com/security/cve/CVE-2022-23219/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0832-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010437.html" source="SUSE-SU"/>
		<description>

glibc was updated to fix the following issues:

Security issues fixed:

- CVE-2022-23219: Fixed Buffer overflow in sunrpc clnt_create for 'unix' (bsc#1194768)
- CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bsc#1194770)
- CVE-2021-3999: Fixed getcwd to set errno to ERANGE for size == 1 (bsc#1194640)
- CVE-2015-8985: Fixed Assertion failure in pop_fail_stack when executing a malformed regexp (bsc#1193625)

Also the following bug was fixed:

- Fix pthread_rwlock_try*lock stalls (bsc#1195560)
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-14"/>
	<updated date="2022-03-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193625">SUSE bug 1193625</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194640">SUSE bug 1194640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194768">SUSE bug 1194768</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194770">SUSE bug 1194770</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195560">SUSE bug 1195560</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2015-8985/">CVE-2015-8985</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3999/">CVE-2021-3999</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-23218/">CVE-2022-23218</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-23219/">CVE-2022-23219</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009669056" comment="glibc-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669025" comment="glibc-32bit-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669057" comment="glibc-devel-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669027" comment="glibc-devel-32bit-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669058" comment="glibc-devel-static-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669059" comment="glibc-extra-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669030" comment="glibc-i18ndata-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669031" comment="glibc-info-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669060" comment="glibc-locale-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669061" comment="glibc-locale-base-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669034" comment="glibc-locale-base-32bit-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669062" comment="glibc-profile-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669063" comment="glibc-utils-2.26-13.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009669064" comment="nscd-2.26-13.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141183" version="1" class="patch">
	<metadata>
		<title>Security update for expat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196025" ref_url="https://bugzilla.suse.com/1196025" source="BUGZILLA"/>
		<reference ref_id="1196784" ref_url="https://bugzilla.suse.com/1196784" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25236" ref_url="https://www.suse.com/security/cve/CVE-2022-25236/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0844-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010445.html" source="SUSE-SU"/>
		<description>
This update for expat fixes the following issues:

- Fixed a regression caused by the patch for CVE-2022-25236 (bsc#1196784).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-15"/>
	<updated date="2022-03-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196025">SUSE bug 1196025</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196784">SUSE bug 1196784</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25236/">CVE-2022-25236</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009671081" comment="expat-2.2.5-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671082" comment="libexpat-devel-2.2.5-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671083" comment="libexpat1-2.2.5-3.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009671084" comment="libexpat1-32bit-2.2.5-3.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141184" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196877" ref_url="https://bugzilla.suse.com/1196877" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0778" ref_url="https://www.suse.com/security/cve/CVE-2022-0778/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0853-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010448.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-15"/>
	<updated date="2022-03-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196877">SUSE bug 1196877</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0778/">CVE-2022-0778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009672905" comment="libopenssl-1_1-devel-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672888" comment="libopenssl-1_1-devel-32bit-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672906" comment="libopenssl1_1-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672890" comment="libopenssl1_1-32bit-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672907" comment="libopenssl1_1-hmac-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672892" comment="libopenssl1_1-hmac-32bit-1.1.0i-14.27.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672908" comment="openssl-1_1-1.1.0i-14.27.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141185" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196877" ref_url="https://bugzilla.suse.com/1196877" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0778" ref_url="https://www.suse.com/security/cve/CVE-2022-0778/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0856-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010450.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

- CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-15"/>
	<updated date="2022-03-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196877">SUSE bug 1196877</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0778/">CVE-2022-0778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009672865" comment="libopenssl-1_0_0-devel-1.0.2p-3.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672867" comment="libopenssl1_0_0-1.0.2p-3.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672868" comment="openssl-1_0_0-1.0.2p-3.49.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141186" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1  (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1182959" ref_url="https://bugzilla.suse.com/1182959" source="BUGZILLA"/>
		<reference ref_id="1195149" ref_url="https://bugzilla.suse.com/1195149" source="BUGZILLA"/>
		<reference ref_id="1195792" ref_url="https://bugzilla.suse.com/1195792" source="BUGZILLA"/>
		<reference ref_id="1195856" ref_url="https://bugzilla.suse.com/1195856" source="BUGZILLA"/>
		<reference ref_id="1196877" ref_url="https://bugzilla.suse.com/1196877" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0778" ref_url="https://www.suse.com/security/cve/CVE-2022-0778/" source="CVE"/>
		<description>
This update for openssl-1_1 fixes the following issues:

openssl-1_1:

- CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
- Fix PAC pointer authentication in ARM (bsc#1195856)
- Pull libopenssl-1_1 when updating openssl-1_1 with the same version (bsc#1195792)
- FIPS: Fix function and reason error codes (bsc#1182959)
- Enable zlib compression support (bsc#1195149)
    
glibc:

- Resolve installation issue of `glibc-devel` in SUSE Linux Enterprise Micro 5.1
    
linux-glibc-devel:

- Resolve installation issue of `linux-kernel-headers` in SUSE Linux Enterprise Micro 5.1

libxcrypt:

- Resolve installation issue of `libxcrypt-devel` in SUSE Linux Enterprise Micro 5.1

zlib:

- Resolve installation issue of `zlib-devel` in SUSE Linux Enterprise Micro 5.1
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-16"/>
	<updated date="2022-03-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1182959">SUSE bug 1182959</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195149">SUSE bug 1195149</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195792">SUSE bug 1195792</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195856">SUSE bug 1195856</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196877">SUSE bug 1196877</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-0778/">CVE-2022-0778</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673200" comment="libminizip1-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673207" comment="libz1-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673208" comment="libz1-32bit-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673210" comment="minizip-devel-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673213" comment="zlib-devel-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673222" comment="zlib-devel-32bit-1.2.11-3.26.10 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673214" comment="zlib-devel-static-1.2.11-3.26.10 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141187" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193314" ref_url="https://bugzilla.suse.com/1193314" source="BUGZILLA"/>
		<reference ref_id="1193444" ref_url="https://bugzilla.suse.com/1193444" source="BUGZILLA"/>
		<reference ref_id="1193491" ref_url="https://bugzilla.suse.com/1193491" source="BUGZILLA"/>
		<reference ref_id="1194926" ref_url="https://bugzilla.suse.com/1194926" source="BUGZILLA"/>
		<reference ref_id="1194928" ref_url="https://bugzilla.suse.com/1194928" source="BUGZILLA"/>
		<reference ref_id="1194929" ref_url="https://bugzilla.suse.com/1194929" source="BUGZILLA"/>
		<reference ref_id="1194931" ref_url="https://bugzilla.suse.com/1194931" source="BUGZILLA"/>
		<reference ref_id="1194932" ref_url="https://bugzilla.suse.com/1194932" source="BUGZILLA"/>
		<reference ref_id="1194933" ref_url="https://bugzilla.suse.com/1194933" source="BUGZILLA"/>
		<reference ref_id="1194934" ref_url="https://bugzilla.suse.com/1194934" source="BUGZILLA"/>
		<reference ref_id="1194935" ref_url="https://bugzilla.suse.com/1194935" source="BUGZILLA"/>
		<reference ref_id="1194937" ref_url="https://bugzilla.suse.com/1194937" source="BUGZILLA"/>
		<reference ref_id="1194939" ref_url="https://bugzilla.suse.com/1194939" source="BUGZILLA"/>
		<reference ref_id="1194940" ref_url="https://bugzilla.suse.com/1194940" source="BUGZILLA"/>
		<reference ref_id="1194941" ref_url="https://bugzilla.suse.com/1194941" source="BUGZILLA"/>
		<reference ref_id="1195163" ref_url="https://bugzilla.suse.com/1195163" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21248" ref_url="https://www.suse.com/security/cve/CVE-2022-21248/" source="CVE"/>
		<reference ref_id="CVE-2022-21282" ref_url="https://www.suse.com/security/cve/CVE-2022-21282/" source="CVE"/>
		<reference ref_id="CVE-2022-21283" ref_url="https://www.suse.com/security/cve/CVE-2022-21283/" source="CVE"/>
		<reference ref_id="CVE-2022-21293" ref_url="https://www.suse.com/security/cve/CVE-2022-21293/" source="CVE"/>
		<reference ref_id="CVE-2022-21294" ref_url="https://www.suse.com/security/cve/CVE-2022-21294/" source="CVE"/>
		<reference ref_id="CVE-2022-21296" ref_url="https://www.suse.com/security/cve/CVE-2022-21296/" source="CVE"/>
		<reference ref_id="CVE-2022-21299" ref_url="https://www.suse.com/security/cve/CVE-2022-21299/" source="CVE"/>
		<reference ref_id="CVE-2022-21305" ref_url="https://www.suse.com/security/cve/CVE-2022-21305/" source="CVE"/>
		<reference ref_id="CVE-2022-21340" ref_url="https://www.suse.com/security/cve/CVE-2022-21340/" source="CVE"/>
		<reference ref_id="CVE-2022-21341" ref_url="https://www.suse.com/security/cve/CVE-2022-21341/" source="CVE"/>
		<reference ref_id="CVE-2022-21349" ref_url="https://www.suse.com/security/cve/CVE-2022-21349/" source="CVE"/>
		<reference ref_id="CVE-2022-21360" ref_url="https://www.suse.com/security/cve/CVE-2022-21360/" source="CVE"/>
		<reference ref_id="CVE-2022-21365" ref_url="https://www.suse.com/security/cve/CVE-2022-21365/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0873-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010457.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

Update to version jdk8u322 (icedtea-3.22.0)

Including the following security fixes:

- CVE-2022-21248, bsc#1194926: Enhance cross VM serialization
- CVE-2022-21283, bsc#1194937: Better String matching
- CVE-2022-21293, bsc#1194935: Improve String constructions
- CVE-2022-21294, bsc#1194934: Enhance construction of Identity maps
- CVE-2022-21282, bsc#1194933: Better resolution of URIs
- CVE-2022-21296, bsc#1194932: Improve SAX Parser configuration management
- CVE-2022-21299, bsc#1194931: Improved scanning of XML entities
- CVE-2022-21305, bsc#1194939: Better array indexing
- CVE-2022-21340, bsc#1194940: Verify Jar Verification
- CVE-2022-21341, bsc#1194941: Improve serial forms for transport
- CVE-2022-21349: Improve Solaris font rendering
- CVE-2022-21360, bsc#1194929: Enhance BMP image support
- CVE-2022-21365, bsc#1194928: Enhanced BMP processing
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-16"/>
	<updated date="2022-03-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1193314">SUSE bug 1193314</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193444">SUSE bug 1193444</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193491">SUSE bug 1193491</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194926">SUSE bug 1194926</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194928">SUSE bug 1194928</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194929">SUSE bug 1194929</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194931">SUSE bug 1194931</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194932">SUSE bug 1194932</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194933">SUSE bug 1194933</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194934">SUSE bug 1194934</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194935">SUSE bug 1194935</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194937">SUSE bug 1194937</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194939">SUSE bug 1194939</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194940">SUSE bug 1194940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194941">SUSE bug 1194941</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1195163">SUSE bug 1195163</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21248/">CVE-2022-21248</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21282/">CVE-2022-21282</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21283/">CVE-2022-21283</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21293/">CVE-2022-21293</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21294/">CVE-2022-21294</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-21296/">CVE-2022-21296</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21299/">CVE-2022-21299</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-21305/">CVE-2022-21305</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21340/">CVE-2022-21340</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21341/">CVE-2022-21341</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21349/">CVE-2022-21349</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21360/">CVE-2022-21360</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21365/">CVE-2022-21365</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009672630" comment="java-1_8_0-openjdk-1.8.0.322-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672631" comment="java-1_8_0-openjdk-demo-1.8.0.322-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672632" comment="java-1_8_0-openjdk-devel-1.8.0.322-3.64.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009672633" comment="java-1_8_0-openjdk-headless-1.8.0.322-3.64.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141188" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197091" ref_url="https://bugzilla.suse.com/1197091" source="BUGZILLA"/>
		<reference ref_id="1197095" ref_url="https://bugzilla.suse.com/1197095" source="BUGZILLA"/>
		<reference ref_id="1197096" ref_url="https://bugzilla.suse.com/1197096" source="BUGZILLA"/>
		<reference ref_id="1197098" ref_url="https://bugzilla.suse.com/1197098" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-22719" ref_url="https://www.suse.com/security/cve/CVE-2022-22719/" source="CVE"/>
		<reference ref_id="CVE-2022-22720" ref_url="https://www.suse.com/security/cve/CVE-2022-22720/" source="CVE"/>
		<reference ref_id="CVE-2022-22721" ref_url="https://www.suse.com/security/cve/CVE-2022-22721/" source="CVE"/>
		<reference ref_id="CVE-2022-23943" ref_url="https://www.suse.com/security/cve/CVE-2022-23943/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0929-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010499.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2022-23943: heap out-of-bounds write in mod_sed (bsc#1197098).
- CVE-2022-22720: HTTP request smuggling due to incorrect error handling (bsc#1197095).
- CVE-2022-22719: use of uninitialized value of in r:parsebody in mod_lua (bsc#1197091).
- CVE-2022-22721: possible buffer overflow with very large or unlimited LimitXMLRequestBody (bsc#1197096).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-22"/>
	<updated date="2022-03-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197091">SUSE bug 1197091</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197095">SUSE bug 1197095</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197096">SUSE bug 1197096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197098">SUSE bug 1197098</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-22719/">CVE-2022-22719</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-22720/">CVE-2022-22720</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-22721/">CVE-2022-22721</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23943/">CVE-2022-23943</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673688" comment="apache2-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673689" comment="apache2-devel-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673679" comment="apache2-doc-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673690" comment="apache2-prefork-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673691" comment="apache2-utils-2.4.33-150000.3.66.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673692" comment="apache2-worker-2.4.33-150000.3.66.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141189" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1196915" ref_url="https://bugzilla.suse.com/1196915" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-26401" ref_url="https://www.suse.com/security/cve/CVE-2021-26401/" source="CVE"/>
		<reference ref_id="CVE-2022-0001" ref_url="https://www.suse.com/security/cve/CVE-2022-0001/" source="CVE"/>
		<reference ref_id="CVE-2022-0002" ref_url="https://www.suse.com/security/cve/CVE-2022-0002/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010501.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

Transient execution side-channel attacks attacking the Branch History Buffer (BHB),
named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.

- CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: BHB speculation issues (bsc#1196915).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-22"/>
	<updated date="2022-03-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1196915">SUSE bug 1196915</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-26401/">CVE-2021-26401</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0001/">CVE-2022-0001</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0002/">CVE-2022-0002</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673267" comment="xen-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673268" comment="xen-devel-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673269" comment="xen-libs-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673270" comment="xen-tools-4.12.4_20-3.63.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673271" comment="xen-tools-domU-4.12.4_20-3.63.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141190" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197135" ref_url="https://bugzilla.suse.com/1197135" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-25220" ref_url="https://www.suse.com/security/cve/CVE-2021-25220/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0946-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2022-March/010510.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- CVE-2021-25220: Fixed a DNS cache poisoning vulnerability due to loose
  caching rules (bsc#1197135).
		</description>
<advisory from="security@suse.de">
	<issued date="2022-03-24"/>
	<updated date="2022-03-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1197135">SUSE bug 1197135</bugzilla>
	<cve impact="moderate" cvss3="6.8/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2021-25220/">CVE-2021-25220</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009673930" comment="bind-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673931" comment="bind-chrootenv-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673932" comment="bind-devel-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673907" comment="bind-doc-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673933" comment="bind-utils-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673934" comment="libbind9-1600-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673935" comment="libdns1605-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673936" comment="libirs-devel-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673937" comment="libirs1601-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673938" comment="libisc1606-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673939" comment="libisccc1600-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673940" comment="libisccfg1600-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673941" comment="libns1604-9.16.6-150000.12.60.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009673917" comment="python3-bind-9.16.6-150000.12.60.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141191" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207032" ref_url="https://bugzilla.suse.com/1207032" source="BUGZILLA"/>
		<reference ref_id="1207033" ref_url="https://bugzilla.suse.com/1207033" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23521" ref_url="https://www.suse.com/security/cve/CVE-2022-23521/" source="CVE"/>
		<reference ref_id="CVE-2022-41903" ref_url="https://www.suse.com/security/cve/CVE-2022-41903/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0108-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013489.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- CVE-2022-41903: Fixed a heap overflow in the 'git archive' and
  'git log --format' commands (bsc#1207033).
- CVE-2022-23521: Fixed an integer overflow that could be triggered
  when parsing a gitattributes file (bsc#1207032).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-20"/>
	<updated date="2023-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207032">SUSE bug 1207032</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207033">SUSE bug 1207033</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23521/">CVE-2022-23521</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-41903/">CVE-2022-41903</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009734243" comment="git-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734244" comment="git-arch-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734245" comment="git-core-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734246" comment="git-cvs-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734247" comment="git-daemon-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734237" comment="git-doc-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734248" comment="git-email-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734249" comment="git-gui-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734250" comment="git-svn-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734251" comment="git-web-2.26.2-150000.44.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734252" comment="gitk-2.26.2-150000.44.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141192" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207119" ref_url="https://bugzilla.suse.com/1207119" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-46871" ref_url="https://www.suse.com/security/cve/CVE-2022-46871/" source="CVE"/>
		<reference ref_id="CVE-2022-46877" ref_url="https://www.suse.com/security/cve/CVE-2022-46877/" source="CVE"/>
		<reference ref_id="CVE-2023-23598" ref_url="https://www.suse.com/security/cve/CVE-2023-23598/" source="CVE"/>
		<reference ref_id="CVE-2023-23601" ref_url="https://www.suse.com/security/cve/CVE-2023-23601/" source="CVE"/>
		<reference ref_id="CVE-2023-23602" ref_url="https://www.suse.com/security/cve/CVE-2023-23602/" source="CVE"/>
		<reference ref_id="CVE-2023-23603" ref_url="https://www.suse.com/security/cve/CVE-2023-23603/" source="CVE"/>
		<reference ref_id="CVE-2023-23605" ref_url="https://www.suse.com/security/cve/CVE-2023-23605/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0112-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013488.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Updated to version 102.7.0 ESR (bsc#1207119):
  - CVE-2022-46871: Updated an out of date library (libusrsctp) which
    contained several vulnerabilities.
  - CVE-2023-23598: Fixed an arbitrary file read from GTK drag and
    drop on Linux.
  - CVE-2023-23601: Fixed a potential spoofing attack when dragging a
    URL from a cross-origin iframe into the same tab.
  - CVE-2023-23602: Fixed a mishandled security check, which caused
    the Content Security Policy header to be ignored for WebSockets
    in WebWorkers.
  - CVE-2022-46877: Fixed a fullscreen notification bypass which
    could be leveraged in spoofing attacks.
  - CVE-2023-23603: Fixed a Content Security Policy bypass via format
    directives.
  - CVE-2023-23605: Fixed several memory safety bugs.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-20"/>
	<updated date="2023-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207119">SUSE bug 1207119</bugzilla>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46871/">CVE-2022-46871</cve>
	<cve impact="critical" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-46877/">CVE-2022-46877</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23598/">CVE-2023-23598</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-23601/">CVE-2023-23601</cve>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-23602/">CVE-2023-23602</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-23603/">CVE-2023-23603</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23605/">CVE-2023-23605</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009734253" comment="MozillaFirefox-102.7.0-150000.150.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734254" comment="MozillaFirefox-devel-102.7.0-150000.150.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734255" comment="MozillaFirefox-translations-common-102.7.0-150000.150.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734256" comment="MozillaFirefox-translations-other-102.7.0-150000.150.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141193" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206170" ref_url="https://bugzilla.suse.com/1206170" source="BUGZILLA"/>
		<reference ref_id="1207082" ref_url="https://bugzilla.suse.com/1207082" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-22809" ref_url="https://www.suse.com/security/cve/CVE-2023-22809/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0116-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013490.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issues:

- CVE-2023-22809: Fixed an arbitrary file write issue that could be
  exploited by users with sudoedit permissions (bsc#1207082).

Other fixes:

- Fixed a potential crash while using the sssd plugin (bsc#1206170).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-20"/>
	<updated date="2023-01-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206170">SUSE bug 1206170</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207082">SUSE bug 1207082</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-22809/">CVE-2023-22809</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009734257" comment="sudo-1.8.27-150000.4.38.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734258" comment="sudo-devel-1.8.27-150000.4.38.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141194" version="1" class="patch">
	<metadata>
		<title>Security update for xrdp (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206300" ref_url="https://bugzilla.suse.com/1206300" source="BUGZILLA"/>
		<reference ref_id="1206303" ref_url="https://bugzilla.suse.com/1206303" source="BUGZILLA"/>
		<reference ref_id="1206306" ref_url="https://bugzilla.suse.com/1206306" source="BUGZILLA"/>
		<reference ref_id="1206307" ref_url="https://bugzilla.suse.com/1206307" source="BUGZILLA"/>
		<reference ref_id="1206310" ref_url="https://bugzilla.suse.com/1206310" source="BUGZILLA"/>
		<reference ref_id="1206311" ref_url="https://bugzilla.suse.com/1206311" source="BUGZILLA"/>
		<reference ref_id="1206312" ref_url="https://bugzilla.suse.com/1206312" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23468" ref_url="https://www.suse.com/security/cve/CVE-2022-23468/" source="CVE"/>
		<reference ref_id="CVE-2022-23479" ref_url="https://www.suse.com/security/cve/CVE-2022-23479/" source="CVE"/>
		<reference ref_id="CVE-2022-23480" ref_url="https://www.suse.com/security/cve/CVE-2022-23480/" source="CVE"/>
		<reference ref_id="CVE-2022-23481" ref_url="https://www.suse.com/security/cve/CVE-2022-23481/" source="CVE"/>
		<reference ref_id="CVE-2022-23482" ref_url="https://www.suse.com/security/cve/CVE-2022-23482/" source="CVE"/>
		<reference ref_id="CVE-2022-23483" ref_url="https://www.suse.com/security/cve/CVE-2022-23483/" source="CVE"/>
		<reference ref_id="CVE-2022-23484" ref_url="https://www.suse.com/security/cve/CVE-2022-23484/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0012-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013412.html" source="SUSE-SU"/>
		<description>
This update for xrdp fixes the following issues:

- CVE-2022-23468: Fixed a buffer overflow in xrdp_login_wnd_create() (bsc#1206300).
- CVE-2022-23479: Fixed a buffer overflow in xrdp_mm_chan_data_in() (bsc#1206303).
- CVE-2022-23480: Fixed a buffer overflow in devredir_proc_client_devlist_announce_req() (bsc#1206306).
- CVE-2022-23481: Fixed an out of bound read in xrdp_caps_process_confirm_active() (bsc#1206307).
- CVE-2022-23482: Fixed an out of bound read in xrdp_sec_process_mcs_data_CS_CORE() (bsc#1206310).
- CVE-2022-23483: Fixed an out of bound read in libxrdp_send_to_channel() (bsc#1206311).
- CVE-2022-23484: Fixed a integer overflow in xrdp_mm_process_rail_update_window_text() (bsc#1206312).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-02"/>
	<updated date="2023-01-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206300">SUSE bug 1206300</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206303">SUSE bug 1206303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206306">SUSE bug 1206306</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206307">SUSE bug 1206307</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206310">SUSE bug 1206310</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206311">SUSE bug 1206311</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206312">SUSE bug 1206312</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-23468/">CVE-2022-23468</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23479/">CVE-2022-23479</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23480/">CVE-2022-23480</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23481/">CVE-2022-23481</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23482/">CVE-2022-23482</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23483/">CVE-2022-23483</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-23484/">CVE-2022-23484</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009730857" comment="libpainter0-0.9.6-150000.4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730858" comment="librfxencode0-0.9.6-150000.4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730859" comment="xrdp-0.9.6-150000.4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730860" comment="xrdp-devel-0.9.6-150000.4.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141195" version="1" class="patch">
	<metadata>
		<title>Security update for sqlite3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206337" ref_url="https://bugzilla.suse.com/1206337" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-46908" ref_url="https://www.suse.com/security/cve/CVE-2022-46908/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1295-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030149.html" source="SUSE-SU"/>
		<description>
This update for sqlite3 fixes the following issues:

- CVE-2022-46908: Properly implement the azProhibitedFunctions protection mechanism, 
  when relying on --safe for execution of an untrusted CLI script (bsc#1206337).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-29"/>
	<updated date="2023-06-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206337">SUSE bug 1206337</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-46908/">CVE-2022-46908</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009729556" comment="libsqlite3-0-3.39.3-150000.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729557" comment="libsqlite3-0-32bit-3.39.3-150000.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729558" comment="sqlite3-3.39.3-150000.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729559" comment="sqlite3-devel-3.39.3-150000.3.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009729561" comment="sqlite3-tcl-3.39.3-150000.3.20.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141196" version="1" class="patch">
	<metadata>
		<title>Security update for mozilla-nss (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204272" ref_url="https://bugzilla.suse.com/1204272" source="BUGZILLA"/>
		<reference ref_id="1207038" ref_url="https://bugzilla.suse.com/1207038" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23491" ref_url="https://www.suse.com/security/cve/CVE-2022-23491/" source="CVE"/>
		<reference ref_id="CVE-2022-3479" ref_url="https://www.suse.com/security/cve/CVE-2022-3479/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0130-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013518.html" source="SUSE-SU"/>
		<description>
This update for mozilla-nss fixes the following issues:

- CVE-2022-3479: Fixed a potential crash that could be triggered when
  a server requested a client authentication certificate, but the
  client had no certificates stored (bsc#1204272).
- Updated to version 3.79.3 (bsc#1207038):
  - CVE-2022-23491: Removed trust for 3 root certificates from TrustCor.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-24"/>
	<updated date="2023-01-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204272">SUSE bug 1204272</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207038">SUSE bug 1207038</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23491/">CVE-2022-23491</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3479/">CVE-2022-3479</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009734830" comment="libfreebl3-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732314" comment="libfreebl3-32bit-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734831" comment="libfreebl3-hmac-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732316" comment="libfreebl3-hmac-32bit-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734832" comment="libsoftokn3-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732318" comment="libsoftokn3-32bit-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734833" comment="libsoftokn3-hmac-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732320" comment="libsoftokn3-hmac-32bit-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734834" comment="mozilla-nss-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732322" comment="mozilla-nss-32bit-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734835" comment="mozilla-nss-certs-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732324" comment="mozilla-nss-certs-32bit-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734836" comment="mozilla-nss-devel-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734837" comment="mozilla-nss-sysinit-3.79.3-150000.3.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009734838" comment="mozilla-nss-tools-3.79.3-150000.3.90.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141197" version="1" class="patch">
	<metadata>
		<title>Security update for python-certifi (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206212" ref_url="https://bugzilla.suse.com/1206212" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23491" ref_url="https://www.suse.com/security/cve/CVE-2022-23491/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0139-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013525.html" source="SUSE-SU"/>
		<description>
This update for python-certifi fixes the following issues:

- remove all TrustCor CAs, as TrustCor issued multiple man-in-the-middle
  certs (bsc#1206212 CVE-2022-23491)
     - TrustCor RootCert CA-1
     - TrustCor RootCert CA-2
     - TrustCor ECA-1
- Add removeTrustCor.patch
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-25"/>
	<updated date="2023-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206212">SUSE bug 1206212</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-23491/">CVE-2022-23491</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009731160" comment="python2-certifi-2018.1.18-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009731091" comment="python3-certifi-2018.1.18-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141198" version="1" class="patch">
	<metadata>
		<title>Security update for libzypp-plugin-appdata (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1181400" ref_url="https://bugzilla.suse.com/1181400" source="BUGZILLA"/>
		<reference ref_id="1206836" ref_url="https://bugzilla.suse.com/1206836" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-22643" ref_url="https://www.suse.com/security/cve/CVE-2023-22643/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0140-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013524.html" source="SUSE-SU"/>
		<description>
This update for libzypp-plugin-appdata fixes the following issues:

- CVE-2023-22643: Fixed potential shell injection related to malicious repo names (bsc#1206836).
- Added hardening to systemd service (bsc#1181400). 
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-25"/>
	<updated date="2023-01-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1181400">SUSE bug 1181400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206836">SUSE bug 1206836</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-22643/">CVE-2023-22643</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732683" comment="libzypp-plugin-appdata-1.0.1+git.20180426-150100.8.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141199" version="1" class="patch">
	<metadata>
		<title>Security update for xen (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205209" ref_url="https://bugzilla.suse.com/1205209" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23824" ref_url="https://www.suse.com/security/cve/CVE-2022-23824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0154-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013550.html" source="SUSE-SU"/>
		<description>
This update for xen fixes the following issues:

- CVE-2022-23824: Fixed multiple speculative execution issues (bnc#1205209).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-26"/>
	<updated date="2023-01-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205209">SUSE bug 1205209</bugzilla>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-23824/">CVE-2022-23824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009733885" comment="xen-4.12.4_32-150100.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009733886" comment="xen-devel-4.12.4_32-150100.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009733887" comment="xen-libs-4.12.4_32-150100.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009733888" comment="xen-tools-4.12.4_32-150100.3.83.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009733889" comment="xen-tools-domU-4.12.4_32-150100.3.83.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141200" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203120" ref_url="https://bugzilla.suse.com/1203120" source="BUGZILLA"/>
		<reference ref_id="1203121" ref_url="https://bugzilla.suse.com/1203121" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-39176" ref_url="https://www.suse.com/security/cve/CVE-2022-39176/" source="CVE"/>
		<reference ref_id="CVE-2022-39177" ref_url="https://www.suse.com/security/cve/CVE-2022-39177/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0155-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013548.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2022-39176: Fixed a memory safety issue that could allow
  physically proximate attackers to obtain sensitive information
  (bsc#1203121).
- CVE-2022-39177: Fixed a memory safety issue that could allow
  physically proximate attackers to cause a denial of service
  (bsc#1203120).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-26"/>
	<updated date="2023-01-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1203120">SUSE bug 1203120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203121">SUSE bug 1203121</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-39176/">CVE-2022-39176</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-39177/">CVE-2022-39177</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009736381" comment="bluez-5.48-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736382" comment="bluez-devel-5.48-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736383" comment="libbluetooth3-5.48-150000.5.46.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141201" version="1" class="patch">
	<metadata>
		<title>Security update for containerd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206235" ref_url="https://bugzilla.suse.com/1206235" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-23471" ref_url="https://www.suse.com/security/cve/CVE-2022-23471/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1628-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028424.html" source="SUSE-SU"/>
		<description>
This update for containerd fixes the following issues:

- CVE-2022-23471: Fixed host memory exhaustion through Terminal resize goroutine leak (bsc#1206235).

- Re-build containerd to use updated golang-packaging (jsc#1342).
- Update to containerd v1.6.16 for Docker v23.0.0-ce.
  * https://github.com/containerd/containerd/releases/tag/v1.6.16

		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-28"/>
	<updated date="2023-03-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206235">SUSE bug 1206235</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-23471/">CVE-2022-23471</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009744967" comment="containerd-1.6.16-150000.82.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009744968" comment="containerd-ctr-1.6.16-150000.82.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141202" version="1" class="patch">
	<metadata>
		<title>Security update for python-Werkzeug (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208283" ref_url="https://bugzilla.suse.com/1208283" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-25577" ref_url="https://www.suse.com/security/cve/CVE-2023-25577/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1664-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028456.html" source="SUSE-SU"/>
		<description>
This update for python-Werkzeug fixes the following issues:

- CVE-2023-25577: Fixed high resource usage when parsing multipart form data with many fields (bsc#1208283)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-29"/>
	<updated date="2023-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208283">SUSE bug 1208283</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25577/">CVE-2023-25577</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750521" comment="python3-Werkzeug-0.14.1-150100.6.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141203" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209622" ref_url="https://bugzilla.suse.com/1209622" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28708" ref_url="https://www.suse.com/security/cve/CVE-2023-28708/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1669-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-March/014225.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2023-28708: Fixed information disclosure by not including the secure attribute (bsc#1209622).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-29"/>
	<updated date="2023-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209622">SUSE bug 1209622</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-28708/">CVE-2023-28708</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009750522" comment="tomcat-9.0.36-150100.4.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750523" comment="tomcat-admin-webapps-9.0.36-150100.4.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750524" comment="tomcat-el-3_0-api-9.0.36-150100.4.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750525" comment="tomcat-jsp-2_3-api-9.0.36-150100.4.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750526" comment="tomcat-lib-9.0.36-150100.4.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750527" comment="tomcat-servlet-4_0-api-9.0.36-150100.4.90.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009750528" comment="tomcat-webapps-9.0.36-150100.4.90.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141204" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209543" ref_url="https://bugzilla.suse.com/1209543" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1393" ref_url="https://www.suse.com/security/cve/CVE-2023-1393/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1679-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028470.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2023-1393: Fixed use-after-free overlay window (ZDI-CAN-19866) (bsc#1209543).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-29"/>
	<updated date="2023-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209543">SUSE bug 1209543</bugzilla>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1393/">CVE-2023-1393</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009751851" comment="xorg-x11-server-1.20.3-150100.14.5.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751852" comment="xorg-x11-server-extra-1.20.3-150100.14.5.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751853" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141205" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209481" ref_url="https://bugzilla.suse.com/1209481" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0922" ref_url="https://www.suse.com/security/cve/CVE-2023-0922/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1683-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028466.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:


- CVE-2023-0922: Fixed Samba AD DC admin tool samba-tool sending passwords in cleartext (bso#15315) (bsc#1209481).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-29"/>
	<updated date="2023-03-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209481">SUSE bug 1209481</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-0922/">CVE-2023-0922</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009751854" comment="libdcerpc-binding0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751713" comment="libdcerpc-binding0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751855" comment="libdcerpc-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751856" comment="libdcerpc-samr-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751857" comment="libdcerpc-samr0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751858" comment="libdcerpc0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751718" comment="libdcerpc0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751859" comment="libndr-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751860" comment="libndr-krb5pac-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751861" comment="libndr-krb5pac0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751722" comment="libndr-krb5pac0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751862" comment="libndr-nbt-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751863" comment="libndr-nbt0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751725" comment="libndr-nbt0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751864" comment="libndr-standard-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751865" comment="libndr-standard0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751728" comment="libndr-standard0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751866" comment="libndr0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751730" comment="libndr0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751867" comment="libnetapi-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751868" comment="libnetapi0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751733" comment="libnetapi0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751869" comment="libsamba-credentials-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751870" comment="libsamba-credentials0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751736" comment="libsamba-credentials0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751871" comment="libsamba-errors-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751872" comment="libsamba-errors0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751739" comment="libsamba-errors0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751873" comment="libsamba-hostconfig-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751874" comment="libsamba-hostconfig0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751742" comment="libsamba-hostconfig0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751875" comment="libsamba-passdb-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751876" comment="libsamba-passdb0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751745" comment="libsamba-passdb0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751877" comment="libsamba-policy-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751878" comment="libsamba-policy-python3-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751482" comment="libsamba-policy0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751879" comment="libsamba-policy0-python3-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751880" comment="libsamba-util-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751881" comment="libsamba-util0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751752" comment="libsamba-util0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751882" comment="libsamdb-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751883" comment="libsamdb0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751755" comment="libsamdb0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751884" comment="libsmbclient-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751885" comment="libsmbclient0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751886" comment="libsmbconf-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751887" comment="libsmbconf0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751760" comment="libsmbconf0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751888" comment="libsmbldap-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751889" comment="libsmbldap2-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751763" comment="libsmbldap2-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751890" comment="libtevent-util-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751891" comment="libtevent-util0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751766" comment="libtevent-util0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751892" comment="libwbclient-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751893" comment="libwbclient0-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751769" comment="libwbclient0-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751894" comment="samba-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751895" comment="samba-ad-dc-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751896" comment="samba-client-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751897" comment="samba-core-devel-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751898" comment="samba-dsdb-modules-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751899" comment="samba-libs-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751776" comment="samba-libs-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751484" comment="samba-libs-python-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751900" comment="samba-libs-python3-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751486" comment="samba-python-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751901" comment="samba-python3-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751902" comment="samba-winbind-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751782" comment="samba-winbind-32bit-4.9.5+git.554.abee30cf06-150100.3.77.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141206" version="1" class="patch">
	<metadata>
		<title>Security update for sudo (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1203201" ref_url="https://bugzilla.suse.com/1203201" source="BUGZILLA"/>
		<reference ref_id="1206483" ref_url="https://bugzilla.suse.com/1206483" source="BUGZILLA"/>
		<reference ref_id="1209361" ref_url="https://bugzilla.suse.com/1209361" source="BUGZILLA"/>
		<reference ref_id="1209362" ref_url="https://bugzilla.suse.com/1209362" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28486" ref_url="https://www.suse.com/security/cve/CVE-2023-28486/" source="CVE"/>
		<reference ref_id="CVE-2023-28487" ref_url="https://www.suse.com/security/cve/CVE-2023-28487/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1699-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028500.html" source="SUSE-SU"/>
		<description>
This update for sudo fixes the following issue:

Security fixes:

- CVE-2023-28486: Fixed missing control characters escaping in log messages (bsc#1209362).
- CVE-2023-28487: Fixed missing control characters escaping in sudoreplay output (bsc#1209361).

Other fixes:

- Fix a situation where 'sudo -U otheruser -l' would dereference a NULL pointer (bsc#1206483).
- Do not re-enable the reader when flushing the buffers as part of pty_finish() (bsc#1203201).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-30"/>
	<updated date="2023-03-30"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1203201">SUSE bug 1203201</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206483">SUSE bug 1206483</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209361">SUSE bug 1209361</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209362">SUSE bug 1209362</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-28486/">CVE-2023-28486</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-28487/">CVE-2023-28487</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009752214" comment="sudo-1.8.27-150000.4.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752215" comment="sudo-devel-1.8.27-150000.4.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141207" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202062" ref_url="https://bugzilla.suse.com/1202062" source="BUGZILLA"/>
		<reference ref_id="1209624" ref_url="https://bugzilla.suse.com/1209624" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0464" ref_url="https://www.suse.com/security/cve/CVE-2023-0464/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1703-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028508.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

Security fixes:

- CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624).

Other fixes:

- Fix DH key generation in FIPS mode, add support for constant BN for DH parameters (bsc#1202062)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-30"/>
	<updated date="2023-03-30"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1202062">SUSE bug 1202062</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209624">SUSE bug 1209624</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-0464/">CVE-2023-0464</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009751087" comment="libopenssl-1_0_0-devel-1.0.2p-150000.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751090" comment="libopenssl1_0_0-1.0.2p-150000.3.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751096" comment="openssl-1_0_0-1.0.2p-150000.3.70.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141208" version="1" class="patch">
	<metadata>
		<title>Security update for libXpm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207029" ref_url="https://bugzilla.suse.com/1207029" source="BUGZILLA"/>
		<reference ref_id="1207030" ref_url="https://bugzilla.suse.com/1207030" source="BUGZILLA"/>
		<reference ref_id="1207031" ref_url="https://bugzilla.suse.com/1207031" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-44617" ref_url="https://www.suse.com/security/cve/CVE-2022-44617/" source="CVE"/>
		<reference ref_id="CVE-2022-46285" ref_url="https://www.suse.com/security/cve/CVE-2022-46285/" source="CVE"/>
		<reference ref_id="CVE-2022-4883" ref_url="https://www.suse.com/security/cve/CVE-2022-4883/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0171-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013549.html" source="SUSE-SU"/>
		<description>
This update for libXpm fixes the following issues:

- CVE-2022-46285: Fixed an infinite loop that could be triggered
  when reading a XPM image with a C-style comment that is never
  closed (bsc#1207029).
- CVE-2022-44617: Fixed an excessive resource consumption that could
  be triggered when reading small crafted XPM image (bsc#1207030).
- CVE-2022-4883: Fixed an issue that made decompression commands
  susceptible to PATH environment variable manipulation attacks
  (bsc#1207031).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-26"/>
	<updated date="2023-01-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207029">SUSE bug 1207029</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207030">SUSE bug 1207030</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207031">SUSE bug 1207031</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-44617/">CVE-2022-44617</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-46285/">CVE-2022-46285</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4883/">CVE-2022-4883</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009735714" comment="libXpm-devel-3.5.12-150000.3.7.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009735715" comment="libXpm4-3.5.12-150000.3.7.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141209" version="1" class="patch">
	<metadata>
		<title>Security update for flatpak (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209410" ref_url="https://bugzilla.suse.com/1209410" source="BUGZILLA"/>
		<reference ref_id="1209411" ref_url="https://bugzilla.suse.com/1209411" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28100" ref_url="https://www.suse.com/security/cve/CVE-2023-28100/" source="CVE"/>
		<reference ref_id="CVE-2023-28101" ref_url="https://www.suse.com/security/cve/CVE-2023-28101/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1713-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-March/028539.html" source="SUSE-SU"/>
		<description>
This update for flatpak fixes the following issues:

- CVE-2023-28101: Fixed misleading terminal output with metadata with ANSI control codes (bsc#1209410).
- CVE-2023-28100: Fixed unsandboxed TIOCLINUX commands (bsc#1209411).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-03-31"/>
	<updated date="2023-03-31"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209410">SUSE bug 1209410</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209411">SUSE bug 1209411</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28100/">CVE-2023-28100</cve>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-28101/">CVE-2023-28101</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009752350" comment="flatpak-1.2.3-150100.4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752351" comment="flatpak-devel-1.2.3-150100.4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752352" comment="flatpak-zsh-completion-1.2.3-150100.4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752353" comment="libflatpak0-1.2.3-150100.4.11.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752354" comment="typelib-1_0-Flatpak-1_0-1.2.3-150100.4.11.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141210" version="1" class="patch">
	<metadata>
		<title>Security update for xterm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205305" ref_url="https://bugzilla.suse.com/1205305" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-45063" ref_url="https://www.suse.com/security/cve/CVE-2022-45063/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0173-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013541.html" source="SUSE-SU"/>
		<description>
This update for xterm fixes the following issues:

- CVE-2022-45063: Fixed an arbitrary code execution issue under
  configurations using vi and zsh (bsc#1205305).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-26"/>
	<updated date="2023-01-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205305">SUSE bug 1205305</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45063/">CVE-2022-45063</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009736384" comment="xterm-330-150000.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736385" comment="xterm-bin-330-150000.4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141211" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209624" ref_url="https://bugzilla.suse.com/1209624" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0464" ref_url="https://www.suse.com/security/cve/CVE-2023-0464/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1748-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014352.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-04"/>
	<updated date="2023-04-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1209624">SUSE bug 1209624</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-0464/">CVE-2023-0464</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009752844" comment="libopenssl-1_1-devel-1.1.0i-150100.14.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751326" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752845" comment="libopenssl1_1-1.1.0i-150100.14.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751328" comment="libopenssl1_1-32bit-1.1.0i-150100.14.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752846" comment="libopenssl1_1-hmac-1.1.0i-150100.14.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009751330" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752847" comment="openssl-1_1-1.1.0i-150100.14.45.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141212" version="1" class="patch">
	<metadata>
		<title>Security update for liblouis (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209429" ref_url="https://bugzilla.suse.com/1209429" source="BUGZILLA"/>
		<reference ref_id="1209432" ref_url="https://bugzilla.suse.com/1209432" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-26767" ref_url="https://www.suse.com/security/cve/CVE-2023-26767/" source="CVE"/>
		<reference ref_id="CVE-2023-26769" ref_url="https://www.suse.com/security/cve/CVE-2023-26769/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1772-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028649.html" source="SUSE-SU"/>
		<description>
This update for liblouis fixes the following issues:
  
- CVE-2023-26767: Fixed buffer overflow vulnerability in lou_logFile function (bsc#1209429).
- CVE-2023-26769: Fixed buffer Overflow vulnerability in resolveSubtable function (bsc#1209432).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-05"/>
	<updated date="2023-04-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209429">SUSE bug 1209429</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209432">SUSE bug 1209432</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26767/">CVE-2023-26767</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26769/">CVE-2023-26769</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009753062" comment="liblouis-data-3.3.0-150000.4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753063" comment="liblouis-devel-3.3.0-150000.4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752651" comment="liblouis14-3.3.0-150000.4.13.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753064" comment="python3-louis-3.3.0-150000.4.13.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141213" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210062" ref_url="https://bugzilla.suse.com/1210062" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28879" ref_url="https://www.suse.com/security/cve/CVE-2023-28879/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1799-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014432.html" source="SUSE-SU"/>
		<description>
This update for ghostscript fixes the following issues:

- CVE-2023-28879: Fixed buffer Overflow in s_xBCPE_process (bsc#1210062).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-07"/>
	<updated date="2023-04-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210062">SUSE bug 1210062</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28879/">CVE-2023-28879</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009753221" comment="ghostscript-9.52-150000.164.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753222" comment="ghostscript-devel-9.52-150000.164.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753223" comment="ghostscript-x11-9.52-150000.164.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141214" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210212" ref_url="https://bugzilla.suse.com/1210212" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1945" ref_url="https://www.suse.com/security/cve/CVE-2023-1945/" source="CVE"/>
		<reference ref_id="CVE-2023-29531" ref_url="https://www.suse.com/security/cve/CVE-2023-29531/" source="CVE"/>
		<reference ref_id="CVE-2023-29532" ref_url="https://www.suse.com/security/cve/CVE-2023-29532/" source="CVE"/>
		<reference ref_id="CVE-2023-29533" ref_url="https://www.suse.com/security/cve/CVE-2023-29533/" source="CVE"/>
		<reference ref_id="CVE-2023-29535" ref_url="https://www.suse.com/security/cve/CVE-2023-29535/" source="CVE"/>
		<reference ref_id="CVE-2023-29536" ref_url="https://www.suse.com/security/cve/CVE-2023-29536/" source="CVE"/>
		<reference ref_id="CVE-2023-29539" ref_url="https://www.suse.com/security/cve/CVE-2023-29539/" source="CVE"/>
		<reference ref_id="CVE-2023-29541" ref_url="https://www.suse.com/security/cve/CVE-2023-29541/" source="CVE"/>
		<reference ref_id="CVE-2023-29542" ref_url="https://www.suse.com/security/cve/CVE-2023-29542/" source="CVE"/>
		<reference ref_id="CVE-2023-29545" ref_url="https://www.suse.com/security/cve/CVE-2023-29545/" source="CVE"/>
		<reference ref_id="CVE-2023-29548" ref_url="https://www.suse.com/security/cve/CVE-2023-29548/" source="CVE"/>
		<reference ref_id="CVE-2023-29550" ref_url="https://www.suse.com/security/cve/CVE-2023-29550/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1817-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014444.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

- Firefox Extended Support Release 102.10.0 ESR (bsc#1210212)
- CVE-2023-29531: Out-of-bound memory access in WebGL on macOS
- CVE-2023-29532: Mozilla Maintenance Service Write-lock bypass
- CVE-2023-29533: Fullscreen notification obscured
- MFSA-TMP-2023-0001: Double-free in libwebp
- CVE-2023-29535: Potential Memory Corruption following Garbage Collector compaction
- CVE-2023-29536: Invalid free from JavaScript code
- CVE-2023-29539: Content-Disposition filename truncation leads to Reflected File Download
- CVE-2023-29541: Files with malicious extensions could have been downloaded unsafely on Linux
- CVE-2023-29542: Bypass of file download extension restrictions
- CVE-2023-29545: Windows Save As dialog resolved environment variables
- CVE-2023-1945: Memory Corruption in Safe Browsing Code
- CVE-2023-29548: Incorrect optimization result on ARM64
- CVE-2023-29550: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-11"/>
	<updated date="2023-04-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210212">SUSE bug 1210212</bugzilla>
	<cve impact="important" cvss3="6.1/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-1945/">CVE-2023-1945</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-29531/">CVE-2023-29531</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-29532/">CVE-2023-29532</cve>
	<cve impact="important" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-29533/">CVE-2023-29533</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-29535/">CVE-2023-29535</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-29536/">CVE-2023-29536</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-29539/">CVE-2023-29539</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-29541/">CVE-2023-29541</cve>
	<cve impact="important" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-29542/">CVE-2023-29542</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-29545/">CVE-2023-29545</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-29548/">CVE-2023-29548</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-29550/">CVE-2023-29550</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009753806" comment="MozillaFirefox-102.10.0-150000.150.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753807" comment="MozillaFirefox-devel-102.10.0-150000.150.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753808" comment="MozillaFirefox-translations-common-102.10.0-150000.150.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753809" comment="MozillaFirefox-translations-other-102.10.0-150000.150.82.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141215" version="1" class="patch">
	<metadata>
		<title>Security update for harfbuzz (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207922" ref_url="https://bugzilla.suse.com/1207922" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-25193" ref_url="https://www.suse.com/security/cve/CVE-2023-25193/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1820-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014733.html" source="SUSE-SU"/>
		<description>
This update for harfbuzz fixes the following issues:

- CVE-2023-25193: Fixed vulnerability that allowed attackers to trigger O(n^2) growth via consecutive marks (bsc#1207922).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-12"/>
	<updated date="2023-04-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207922">SUSE bug 1207922</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25193/">CVE-2023-25193</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009753836" comment="harfbuzz-devel-1.7.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753837" comment="libharfbuzz-icu0-1.7.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753838" comment="libharfbuzz0-1.7.5-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753375" comment="libharfbuzz0-32bit-1.7.5-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141216" version="1" class="patch">
	<metadata>
		<title>Security update for liblouis (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209431" ref_url="https://bugzilla.suse.com/1209431" source="BUGZILLA"/>
		<reference ref_id="1209855" ref_url="https://bugzilla.suse.com/1209855" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-26768" ref_url="https://www.suse.com/security/cve/CVE-2023-26768/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1828-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014725.html" source="SUSE-SU"/>
		<description>
This update for liblouis fixes the following issues:
  
- CVE-2023-26768: Fixed buffer overflow in lou_logFile() (bsc#1209431).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-13"/>
	<updated date="2023-04-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209431">SUSE bug 1209431</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209855">SUSE bug 1209855</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-26768/">CVE-2023-26768</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009754109" comment="liblouis-data-3.3.0-150000.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754110" comment="liblouis-devel-3.3.0-150000.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753236" comment="liblouis14-3.3.0-150000.4.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754111" comment="python3-louis-3.3.0-150000.4.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141217" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1076830" ref_url="https://bugzilla.suse.com/1076830" source="BUGZILLA"/>
		<reference ref_id="1192273" ref_url="https://bugzilla.suse.com/1192273" source="BUGZILLA"/>
		<reference ref_id="1194535" ref_url="https://bugzilla.suse.com/1194535" source="BUGZILLA"/>
		<reference ref_id="1207036" ref_url="https://bugzilla.suse.com/1207036" source="BUGZILLA"/>
		<reference ref_id="1207125" ref_url="https://bugzilla.suse.com/1207125" source="BUGZILLA"/>
		<reference ref_id="1207168" ref_url="https://bugzilla.suse.com/1207168" source="BUGZILLA"/>
		<reference ref_id="1207795" ref_url="https://bugzilla.suse.com/1207795" source="BUGZILLA"/>
		<reference ref_id="1208179" ref_url="https://bugzilla.suse.com/1208179" source="BUGZILLA"/>
		<reference ref_id="1208599" ref_url="https://bugzilla.suse.com/1208599" source="BUGZILLA"/>
		<reference ref_id="1208777" ref_url="https://bugzilla.suse.com/1208777" source="BUGZILLA"/>
		<reference ref_id="1208811" ref_url="https://bugzilla.suse.com/1208811" source="BUGZILLA"/>
		<reference ref_id="1208850" ref_url="https://bugzilla.suse.com/1208850" source="BUGZILLA"/>
		<reference ref_id="1209008" ref_url="https://bugzilla.suse.com/1209008" source="BUGZILLA"/>
		<reference ref_id="1209052" ref_url="https://bugzilla.suse.com/1209052" source="BUGZILLA"/>
		<reference ref_id="1209256" ref_url="https://bugzilla.suse.com/1209256" source="BUGZILLA"/>
		<reference ref_id="1209289" ref_url="https://bugzilla.suse.com/1209289" source="BUGZILLA"/>
		<reference ref_id="1209291" ref_url="https://bugzilla.suse.com/1209291" source="BUGZILLA"/>
		<reference ref_id="1209532" ref_url="https://bugzilla.suse.com/1209532" source="BUGZILLA"/>
		<reference ref_id="1209547" ref_url="https://bugzilla.suse.com/1209547" source="BUGZILLA"/>
		<reference ref_id="1209549" ref_url="https://bugzilla.suse.com/1209549" source="BUGZILLA"/>
		<reference ref_id="1209634" ref_url="https://bugzilla.suse.com/1209634" source="BUGZILLA"/>
		<reference ref_id="1209778" ref_url="https://bugzilla.suse.com/1209778" source="BUGZILLA"/>
		<reference ref_id="1209845" ref_url="https://bugzilla.suse.com/1209845" source="BUGZILLA"/>
		<reference ref_id="1209887" ref_url="https://bugzilla.suse.com/1209887" source="BUGZILLA"/>
		<reference ref_id="CVE-2017-5753" ref_url="https://www.suse.com/security/cve/CVE-2017-5753/" source="CVE"/>
		<reference ref_id="CVE-2021-3923" ref_url="https://www.suse.com/security/cve/CVE-2021-3923/" source="CVE"/>
		<reference ref_id="CVE-2021-4203" ref_url="https://www.suse.com/security/cve/CVE-2021-4203/" source="CVE"/>
		<reference ref_id="CVE-2022-20567" ref_url="https://www.suse.com/security/cve/CVE-2022-20567/" source="CVE"/>
		<reference ref_id="CVE-2023-0394" ref_url="https://www.suse.com/security/cve/CVE-2023-0394/" source="CVE"/>
		<reference ref_id="CVE-2023-0590" ref_url="https://www.suse.com/security/cve/CVE-2023-0590/" source="CVE"/>
		<reference ref_id="CVE-2023-1076" ref_url="https://www.suse.com/security/cve/CVE-2023-1076/" source="CVE"/>
		<reference ref_id="CVE-2023-1095" ref_url="https://www.suse.com/security/cve/CVE-2023-1095/" source="CVE"/>
		<reference ref_id="CVE-2023-1281" ref_url="https://www.suse.com/security/cve/CVE-2023-1281/" source="CVE"/>
		<reference ref_id="CVE-2023-1390" ref_url="https://www.suse.com/security/cve/CVE-2023-1390/" source="CVE"/>
		<reference ref_id="CVE-2023-1513" ref_url="https://www.suse.com/security/cve/CVE-2023-1513/" source="CVE"/>
		<reference ref_id="CVE-2023-23454" ref_url="https://www.suse.com/security/cve/CVE-2023-23454/" source="CVE"/>
		<reference ref_id="CVE-2023-23455" ref_url="https://www.suse.com/security/cve/CVE-2023-23455/" source="CVE"/>
		<reference ref_id="CVE-2023-28328" ref_url="https://www.suse.com/security/cve/CVE-2023-28328/" source="CVE"/>
		<reference ref_id="CVE-2023-28464" ref_url="https://www.suse.com/security/cve/CVE-2023-28464/" source="CVE"/>
		<reference ref_id="CVE-2023-28772" ref_url="https://www.suse.com/security/cve/CVE-2023-28772/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1848-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028819.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).
- CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).
- CVE-2021-3923: Fixed stack information leak vulnerability that could lead to kernel protection bypass in infiniband RDMA (bsc#1209778).
- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bsc#1194535).
- CVE-2022-20567: Fixed use after free that could lead to a local privilege escalation in pppol2tp_create of l2tp_ppp.c (bsc#1208850).
- CVE-2023-0394: Fixed a null pointer dereference flaw in the network subcomponent in the Linux kernel which could lead to system crash (bsc#1207168).
- CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
- CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599).
- CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777).
- CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634).
- CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1209289).
- CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532).
- CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207036).
- CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207125).
- CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291).
- CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052).
- CVE-2023-28772: Fixed buffer overflow in seq_buf_putmem_hex in lib/seq_buf.c (bsc#1209549).

The following non-security bugs were fixed:

- Do not sign the vanilla kernel (bsc#1209008).
- PCI: hv: Add a per-bus mutex state_lock (bsc#1208811).
- PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1208811).
- PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1208811).
- PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1208811).
- Revert 'PCI: hv: Fix a timing issue which causes kdump to fail occasionally' (bsc#1208811).
- cifs: fix double free in dfs mounts (bsc#1209845).
- cifs: fix nodfs mount option (bsc#1209845).
- cifs: handle reconnect of tcon when there is no cached dfs referral (bsc#1209845).
- cifs: missing null pointer check in cifs_mount (bsc#1209845).
- cifs: serialize all mount attempts (bsc#1209845).
- cred: allow get_cred() and put_cred() to be given NULL (bsc#1209887).
- ibmvnic: Process crqs after enabling interrupts (bsc#1192273 ltc#194629).
- ibmvnic: do not stop queue in xmit (bsc#1192273 ltc#194629).
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (bsc#1207168).
- kernel-module-subpackage: Fix expansion with -b parameter (bsc#1208179).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-06"/>
	<updated date="2023-07-06"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1076830">SUSE bug 1076830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192273">SUSE bug 1192273</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194535">SUSE bug 1194535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207036">SUSE bug 1207036</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207125">SUSE bug 1207125</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207168">SUSE bug 1207168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207795">SUSE bug 1207795</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208179">SUSE bug 1208179</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208599">SUSE bug 1208599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208777">SUSE bug 1208777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208811">SUSE bug 1208811</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208850">SUSE bug 1208850</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209008">SUSE bug 1209008</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209052">SUSE bug 1209052</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209256">SUSE bug 1209256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209289">SUSE bug 1209289</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209291">SUSE bug 1209291</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209532">SUSE bug 1209532</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209547">SUSE bug 1209547</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209549">SUSE bug 1209549</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209634">SUSE bug 1209634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209778">SUSE bug 1209778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209845">SUSE bug 1209845</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209887">SUSE bug 1209887</bugzilla>
	<cve impact="important" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2017-5753/">CVE-2017-5753</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2021-3923/">CVE-2021-3923</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2021-4203/">CVE-2021-4203</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-20567/">CVE-2022-20567</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0394/">CVE-2023-0394</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0590/">CVE-2023-0590</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-1076/">CVE-2023-1076</cve>
	<cve impact="moderate" cvss3="5.1/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1095/">CVE-2023-1095</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1281/">CVE-2023-1281</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1390/">CVE-2023-1390</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-1513/">CVE-2023-1513</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23454/">CVE-2023-23454</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-23455/">CVE-2023-23455</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-28328/">CVE-2023-28328</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28464/">CVE-2023-28464</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28772/">CVE-2023-28772</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009754510" comment="kernel-default-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754511" comment="kernel-default-base-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754512" comment="kernel-default-devel-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753620" comment="kernel-default-man-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753713" comment="kernel-devel-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753714" comment="kernel-docs-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753715" comment="kernel-macros-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754513" comment="kernel-obs-build-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753717" comment="kernel-source-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754514" comment="kernel-syms-4.12.14-150100.197.142.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754515" comment="reiserfs-kmp-default-4.12.14-150100.197.142.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141218" version="1" class="patch">
	<metadata>
		<title>Security update for apache2-mod_auth_openidc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210073" ref_url="https://bugzilla.suse.com/1210073" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28625" ref_url="https://www.suse.com/security/cve/CVE-2023-28625/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1849-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028818.html" source="SUSE-SU"/>
		<description>
This update for apache2-mod_auth_openidc fixes the following issues:

- CVE-2023-28625: Fixed NULL pointer dereference when OIDCStripCookies was set and a crafted Cookie header was supplied (bsc#1210073).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-14"/>
	<updated date="2023-04-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210073">SUSE bug 1210073</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-28625/">CVE-2023-28625</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754516" comment="apache2-mod_auth_openidc-2.3.8-150100.3.25.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141219" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207246" ref_url="https://bugzilla.suse.com/1207246" source="BUGZILLA"/>
		<reference ref_id="1207248" ref_url="https://bugzilla.suse.com/1207248" source="BUGZILLA"/>
		<reference ref_id="1207249" ref_url="https://bugzilla.suse.com/1207249" source="BUGZILLA"/>
		<reference ref_id="1208480" ref_url="https://bugzilla.suse.com/1208480" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-21426" ref_url="https://www.suse.com/security/cve/CVE-2022-21426/" source="CVE"/>
		<reference ref_id="CVE-2023-21830" ref_url="https://www.suse.com/security/cve/CVE-2023-21830/" source="CVE"/>
		<reference ref_id="CVE-2023-21835" ref_url="https://www.suse.com/security/cve/CVE-2023-21835/" source="CVE"/>
		<reference ref_id="CVE-2023-21843" ref_url="https://www.suse.com/security/cve/CVE-2023-21843/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1850-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028817.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

- Update to Java 8.0 Service Refresh 8 (bsc#1208480):

  * Security fixes:
    - CVE-2023-21830: Fixed improper restrictions in CORBA deserialization (bsc#1207249).
    - CVE-2023-21835: Fixed handshake DoS attack against DTLS connections (bsc#1207246).
    - CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248).
  
  * New Features/Enhancements:
    - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
    - IJ45437 Service, Build, Packaging and Deliver: Getting
      FIPSRUNTIMEEXCEPTION when calling java code:
      MESSAGEDIGEST.GETINSTANCE('SHA256', 'IBMJCEFIPS'); in MAC
    - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
    - IJ45280 Class Libraries: Update timezone information to the
      latest TZDATA2022F
    - IJ44896 Class Libraries: Update timezone information to the
      latest TZDATA2022G
    - IJ45436 Java Virtual Machine: Stack walking code gets into
      endless loop, hanging the application
    - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
      multiple times on the same command line the first option takes
      precedence instead of the last
    - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
      due to a NULL pointer
    - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
      final field object properties
    - IJ44107 JIT Compiler: JIT publishes new object reference to other
      threads without executing a memory flush
    - IX90193 ORB: Fix security vulnerability CVE-2023-21830
    - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
      similar error of JDK-8253368
    - IJ45148 Security: code changes for tech preview
    - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
      using IBMJCEPLUS, causes a small memory leak
    - IJ44172 Security: Disable SHA-1 signed jars for EA
    - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
      using IBMJCEPLUS, Causes a small memory leak
    - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
      crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
    - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
      during signature operations resulting in Java cores
    - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
    - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
      a SUBJECTKEYIDENTIFIER extension
    - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
      method uses SHA1XXXX signature algorithms to match private and public keys
    - IJ45203 Security: RSAPSS multiple names for KEYTYPE
    - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
    - IJ40002 XML: Fix security vulnerability CVE-2022-21426
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-14"/>
	<updated date="2023-04-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1207246">SUSE bug 1207246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207248">SUSE bug 1207248</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207249">SUSE bug 1207249</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208480">SUSE bug 1208480</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-21426/">CVE-2022-21426</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21830/">CVE-2023-21830</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-21835/">CVE-2023-21835</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21843/">CVE-2023-21843</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009753170" comment="java-1_8_0-ibm-1.8.0_sr8.0-150000.3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753172" comment="java-1_8_0-ibm-alsa-1.8.0_sr8.0-150000.3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753174" comment="java-1_8_0-ibm-devel-1.8.0_sr8.0-150000.3.71.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753176" comment="java-1_8_0-ibm-plugin-1.8.0_sr8.0-150000.3.71.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141220" version="1" class="patch">
	<metadata>
		<title>Security update for container-suseconnect (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="SUSE-SU-2023:1851-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028816.html" source="SUSE-SU"/>
		<description>

This update for container-suseconnect fixes the following issue:

- rebuilt against current go version.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-14"/>
	<updated date="2023-04-14"/>
	<severity>Important</severity>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009753328" comment="container-suseconnect-2.4.0-150000.4.26.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141221" version="1" class="patch">
	<metadata>
		<title>Security update for nodejs10 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208744" ref_url="https://bugzilla.suse.com/1208744" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25881" ref_url="https://www.suse.com/security/cve/CVE-2022-25881/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1871-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014476.html" source="SUSE-SU"/>
		<description>
This update for nodejs10 fixes the following issues:

- CVE-2022-25881: Fixed regular expression denial of service vulnerability (bsc#1208744).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-17"/>
	<updated date="2023-04-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208744">SUSE bug 1208744</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-25881/">CVE-2022-25881</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009754348" comment="nodejs10-10.24.1-150000.1.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754349" comment="nodejs10-devel-10.24.1-150000.1.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754350" comment="nodejs10-docs-10.24.1-150000.1.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754351" comment="npm10-10.24.1-150000.1.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141222" version="1" class="patch">
	<metadata>
		<title>Security update for wayland (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1190486" ref_url="https://bugzilla.suse.com/1190486" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3782" ref_url="https://www.suse.com/security/cve/CVE-2021-3782/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1874-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028840.html" source="SUSE-SU"/>
		<description>
This update for wayland fixes the following issues:

- CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. (bsc#1190486)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-18"/>
	<updated date="2023-04-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1190486">SUSE bug 1190486</bugzilla>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2021-3782/">CVE-2021-3782</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009754812" comment="libwayland-client0-1.16.0-150100.7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754501" comment="libwayland-client0-32bit-1.16.0-150100.7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754813" comment="libwayland-cursor0-1.16.0-150100.7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754814" comment="libwayland-egl1-99~1.16.0-150100.7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754815" comment="libwayland-server0-1.16.0-150100.7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754505" comment="libwayland-server0-32bit-1.16.0-150100.7.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754816" comment="wayland-devel-1.16.0-150100.7.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141223" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209873" ref_url="https://bugzilla.suse.com/1209873" source="BUGZILLA"/>
		<reference ref_id="1209878" ref_url="https://bugzilla.suse.com/1209878" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0465" ref_url="https://www.suse.com/security/cve/CVE-2023-0465/" source="CVE"/>
		<reference ref_id="CVE-2023-0466" ref_url="https://www.suse.com/security/cve/CVE-2023-0466/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1908-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014492.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2023-0465: Fixed ignored invalid certificate policies in leaf certificates (bsc#1209878).
- CVE-2023-0466: Fixed disabled certificate policy check (bsc#1209873).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-19"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1209873">SUSE bug 1209873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209878">SUSE bug 1209878</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-0465/">CVE-2023-0465</cve>
	<cve impact="low" cvss3="2/CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-0466/">CVE-2023-0466</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009754911" comment="libopenssl-1_1-devel-1.1.0i-150100.14.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754103" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754912" comment="libopenssl1_1-1.1.0i-150100.14.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754105" comment="libopenssl1_1-32bit-1.1.0i-150100.14.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754913" comment="libopenssl1_1-hmac-1.1.0i-150100.14.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754107" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.48.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754914" comment="openssl-1_1-1.1.0i-150100.14.48.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141224" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209873" ref_url="https://bugzilla.suse.com/1209873" source="BUGZILLA"/>
		<reference ref_id="1209878" ref_url="https://bugzilla.suse.com/1209878" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0465" ref_url="https://www.suse.com/security/cve/CVE-2023-0465/" source="CVE"/>
		<reference ref_id="CVE-2023-0466" ref_url="https://www.suse.com/security/cve/CVE-2023-0466/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1922-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014501.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

- CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878).
- CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-19"/>
	<updated date="2023-04-19"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1209873">SUSE bug 1209873</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209878">SUSE bug 1209878</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-0465/">CVE-2023-0465</cve>
	<cve impact="low" cvss3="2/CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-0466/">CVE-2023-0466</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009752961" comment="libopenssl-1_0_0-devel-1.0.2p-150000.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752964" comment="libopenssl1_0_0-1.0.2p-150000.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752970" comment="openssl-1_0_0-1.0.2p-150000.3.73.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141225" version="1" class="patch">
	<metadata>
		<title>Security update for wireshark (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210403" ref_url="https://bugzilla.suse.com/1210403" source="BUGZILLA"/>
		<reference ref_id="1210404" ref_url="https://bugzilla.suse.com/1210404" source="BUGZILLA"/>
		<reference ref_id="1210405" ref_url="https://bugzilla.suse.com/1210405" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1992" ref_url="https://www.suse.com/security/cve/CVE-2023-1992/" source="CVE"/>
		<reference ref_id="CVE-2023-1993" ref_url="https://www.suse.com/security/cve/CVE-2023-1993/" source="CVE"/>
		<reference ref_id="CVE-2023-1994" ref_url="https://www.suse.com/security/cve/CVE-2023-1994/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1931-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014538.html" source="SUSE-SU"/>
		<description>
This update for wireshark fixes the following issues:
 
- CVE-2023-1992: Fixed RPCoRDMA dissector crash (bsc#1210405).
- CVE-2023-1993: Fixed LISP dissector large loop (bsc#1210404).
- CVE-2023-1994: Fixed GQUIC dissector crash (bsc#1210403).
  
Update to 3.6.13:

- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-20"/>
	<updated date="2023-04-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210403">SUSE bug 1210403</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210404">SUSE bug 1210404</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210405">SUSE bug 1210405</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1992/">CVE-2023-1992</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-1993/">CVE-2023-1993</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1994/">CVE-2023-1994</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009754318" comment="libwireshark15-3.6.13-150000.3.89.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754319" comment="libwiretap12-3.6.13-150000.3.89.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754320" comment="libwsutil13-3.6.13-150000.3.89.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754321" comment="wireshark-3.6.13-150000.3.89.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754322" comment="wireshark-devel-3.6.13-150000.3.89.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754323" comment="wireshark-ui-qt-3.6.13-150000.3.89.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141226" version="1" class="patch">
	<metadata>
		<title>Security update for ovmf (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1174246" ref_url="https://bugzilla.suse.com/1174246" source="BUGZILLA"/>
		<reference ref_id="1196741" ref_url="https://bugzilla.suse.com/1196741" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-14560" ref_url="https://www.suse.com/security/cve/CVE-2019-14560/" source="CVE"/>
		<reference ref_id="CVE-2021-38578" ref_url="https://www.suse.com/security/cve/CVE-2021-38578/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1940-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028931.html" source="SUSE-SU"/>
		<description>
This update for ovmf fixes the following issues:

- CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 (bsc#1174246). 
- CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd (bsc#1196741).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-21"/>
	<updated date="2023-04-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1174246">SUSE bug 1174246</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1196741">SUSE bug 1196741</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2019-14560/">CVE-2019-14560</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2021-38578/">CVE-2021-38578</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009754804" comment="ovmf-2017+git1510945757.b2662641d5-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754805" comment="ovmf-tools-2017+git1510945757.b2662641d5-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754806" comment="qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754807" comment="qemu-uefi-aarch64-2017+git1510945757.b2662641d5-150000.5.46.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141227" version="1" class="patch">
	<metadata>
		<title>Security update for indent (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1209718" ref_url="https://bugzilla.suse.com/1209718" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:1962-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014778.html" source="SUSE-SU"/>
		<description>
This update for indent fixes the following issues:

- Fixed multiple memory safety issues (bsc#1209718).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-24"/>
	<updated date="2023-04-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1209718">SUSE bug 1209718</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754284" comment="indent-2.2.11-150000.3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141228" version="1" class="patch">
	<metadata>
		<title>Security update for giflib (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1094832" ref_url="https://bugzilla.suse.com/1094832" source="BUGZILLA"/>
		<reference ref_id="1146299" ref_url="https://bugzilla.suse.com/1146299" source="BUGZILLA"/>
		<reference ref_id="1184123" ref_url="https://bugzilla.suse.com/1184123" source="BUGZILLA"/>
		<reference ref_id="974847" ref_url="https://bugzilla.suse.com/974847" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-3977" ref_url="https://www.suse.com/security/cve/CVE-2016-3977/" source="CVE"/>
		<reference ref_id="CVE-2018-11490" ref_url="https://www.suse.com/security/cve/CVE-2018-11490/" source="CVE"/>
		<reference ref_id="CVE-2019-15133" ref_url="https://www.suse.com/security/cve/CVE-2019-15133/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1970-2" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014565.html" source="SUSE-SU"/>
		<description>
This update for giflib fixes the following issues:

- CVE-2019-15133: Fixed a divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c if the height field of the ImageSize data structure is equal to zero (bsc#1146299).
- CVE-2018-11490: Fixed a heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c (bsc#1094832).
- CVE-2016-3977: Fixed a heap buffer overflow in gif2rgb (bsc#974847). 
     
Update to version 5.2.1

  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
   
Changes in version 5.2.0

  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
   
Changes in version 5.1.9

  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
   
Changes in version 5.1.8

  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no 
   
Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
   
Changes in version 5.1.6
  * Fix library installation in the Makefile.
   
Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice. 
    You now build this simply by running 'make' from the top-level directory.

The following non-security bugs were fixed:

- build path independent objects and inherit CFLAGS from the build system (bsc#1184123)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-24"/>
	<updated date="2023-04-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1094832">SUSE bug 1094832</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1146299">SUSE bug 1146299</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184123">SUSE bug 1184123</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/974847">SUSE bug 974847</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-3977/">CVE-2016-3977</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2018-11490/">CVE-2018-11490</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2019-15133/">CVE-2019-15133</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009679712" comment="giflib-devel-5.2.1-150000.4.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009679713" comment="libgif7-5.2.1-150000.4.8.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141229" version="1" class="patch">
	<metadata>
		<title>Security update for protobuf-c (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210323" ref_url="https://bugzilla.suse.com/1210323" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-48468" ref_url="https://www.suse.com/security/cve/CVE-2022-48468/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:1979-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028973.html" source="SUSE-SU"/>
		<description>
This update for protobuf-c fixes the following issues:

- CVE-2022-48468: Fixed an unsigned integer overflow. (bsc#1210323)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-25"/>
	<updated date="2023-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210323">SUSE bug 1210323</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-48468/">CVE-2022-48468</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009755291" comment="libprotobuf-c-devel-1.3.0-150000.3.3.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755292" comment="libprotobuf-c1-1.3.0-150000.3.3.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141230" version="1" class="patch">
	<metadata>
		<title>Security update for runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1168481" ref_url="https://bugzilla.suse.com/1168481" source="BUGZILLA"/>
		<reference ref_id="1208962" ref_url="https://bugzilla.suse.com/1208962" source="BUGZILLA"/>
		<reference ref_id="1209884" ref_url="https://bugzilla.suse.com/1209884" source="BUGZILLA"/>
		<reference ref_id="1209888" ref_url="https://bugzilla.suse.com/1209888" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-25809" ref_url="https://www.suse.com/security/cve/CVE-2023-25809/" source="CVE"/>
		<reference ref_id="CVE-2023-27561" ref_url="https://www.suse.com/security/cve/CVE-2023-27561/" source="CVE"/>
		<reference ref_id="CVE-2023-28642" ref_url="https://www.suse.com/security/cve/CVE-2023-28642/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2003-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-April/028987.html" source="SUSE-SU"/>
		<description>
This update for runc fixes the following issues:

Update to runc v1.1.5:

Security fixes:

- CVE-2023-25809: Fixed rootless `/sys/fs/cgroup` is writable when cgroupns isn't unshared (bnc#1209884).
- CVE-2023-27561: Fixed regression that reintroduced CVE-2019-19921 vulnerability (bnc#1208962).
- CVE-2023-28642: Fixed AppArmor/SELinux bypass with symlinked /proc (bnc#1209888).

Other fixes:

 - Fix the inability to use `/dev/null` when inside a container.
 - Fix changing the ownership of host's `/dev/null` caused by fd redirection (bsc#1168481).
 - Fix rare runc exec/enter unshare error on older kernels.
 - nsexec: Check for errors in `write_log()`.
 - Drop version-specific Go requirement.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-25"/>
	<updated date="2023-04-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1168481">SUSE bug 1168481</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208962">SUSE bug 1208962</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209884">SUSE bug 1209884</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209888">SUSE bug 1209888</bugzilla>
	<cve impact="low" cvss3="2.5/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-25809/">CVE-2023-25809</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-27561/">CVE-2023-27561</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2023-28642/">CVE-2023-28642</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009752643" comment="runc-1.1.5-150000.41.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141231" version="1" class="patch">
	<metadata>
		<title>Security update for libxml2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1065270" ref_url="https://bugzilla.suse.com/1065270" source="BUGZILLA"/>
		<reference ref_id="1199132" ref_url="https://bugzilla.suse.com/1199132" source="BUGZILLA"/>
		<reference ref_id="1204585" ref_url="https://bugzilla.suse.com/1204585" source="BUGZILLA"/>
		<reference ref_id="1210411" ref_url="https://bugzilla.suse.com/1210411" source="BUGZILLA"/>
		<reference ref_id="1210412" ref_url="https://bugzilla.suse.com/1210412" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-3541" ref_url="https://www.suse.com/security/cve/CVE-2021-3541/" source="CVE"/>
		<reference ref_id="CVE-2022-29824" ref_url="https://www.suse.com/security/cve/CVE-2022-29824/" source="CVE"/>
		<reference ref_id="CVE-2023-28484" ref_url="https://www.suse.com/security/cve/CVE-2023-28484/" source="CVE"/>
		<reference ref_id="CVE-2023-29469" ref_url="https://www.suse.com/security/cve/CVE-2023-29469/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2048-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014596.html" source="SUSE-SU"/>
		<description>
This update for libxml2 fixes the following issues:

- CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412).
- CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411).
- CVE-2022-29824: Fixed integer overflow leading to out-of-bounds write in buf.c (bsc#1199132). 
  
  The following non-security bugs were fixed:

- Added W3C conformance tests to the testsuite (bsc#1204585).
- Fixed NULL pointer dereference when parsing invalid data (glgo#libxml2!15) (bsc#1065270) . 
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-26"/>
	<updated date="2023-04-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1065270">SUSE bug 1065270</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199132">SUSE bug 1199132</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204585">SUSE bug 1204585</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210411">SUSE bug 1210411</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210412">SUSE bug 1210412</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3541/">CVE-2021-3541</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-29824/">CVE-2022-29824</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-28484/">CVE-2023-28484</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-29469/">CVE-2023-29469</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009755435" comment="libxml2-2-2.9.7-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755257" comment="libxml2-2-32bit-2.9.7-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755436" comment="libxml2-devel-2.9.7-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755437" comment="libxml2-tools-2.9.7-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755487" comment="python2-libxml2-python-2.9.7-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755207" comment="python3-libxml2-python-2.9.7-150000.3.57.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141232" version="1" class="patch">
	<metadata>
		<title>Security update for shadow (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210507" ref_url="https://bugzilla.suse.com/1210507" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-29383" ref_url="https://www.suse.com/security/cve/CVE-2023-29383/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2068-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-April/014668.html" source="SUSE-SU"/>
		<description>
This update for shadow fixes the following issues:

- CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-28"/>
	<updated date="2023-04-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1210507">SUSE bug 1210507</bugzilla>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-29383/">CVE-2023-29383</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756005" comment="shadow-4.6-150100.3.8.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141233" version="1" class="patch">
	<metadata>
		<title>Security update for webkit2gtk3 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210295" ref_url="https://bugzilla.suse.com/1210295" source="BUGZILLA"/>
		<reference ref_id="1210731" ref_url="https://bugzilla.suse.com/1210731" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-0108" ref_url="https://www.suse.com/security/cve/CVE-2022-0108/" source="CVE"/>
		<reference ref_id="CVE-2022-32885" ref_url="https://www.suse.com/security/cve/CVE-2022-32885/" source="CVE"/>
		<reference ref_id="CVE-2022-32886" ref_url="https://www.suse.com/security/cve/CVE-2022-32886/" source="CVE"/>
		<reference ref_id="CVE-2022-32912" ref_url="https://www.suse.com/security/cve/CVE-2022-32912/" source="CVE"/>
		<reference ref_id="CVE-2023-25358" ref_url="https://www.suse.com/security/cve/CVE-2023-25358/" source="CVE"/>
		<reference ref_id="CVE-2023-25360" ref_url="https://www.suse.com/security/cve/CVE-2023-25360/" source="CVE"/>
		<reference ref_id="CVE-2023-25361" ref_url="https://www.suse.com/security/cve/CVE-2023-25361/" source="CVE"/>
		<reference ref_id="CVE-2023-25362" ref_url="https://www.suse.com/security/cve/CVE-2023-25362/" source="CVE"/>
		<reference ref_id="CVE-2023-25363" ref_url="https://www.suse.com/security/cve/CVE-2023-25363/" source="CVE"/>
		<reference ref_id="CVE-2023-27932" ref_url="https://www.suse.com/security/cve/CVE-2023-27932/" source="CVE"/>
		<reference ref_id="CVE-2023-27954" ref_url="https://www.suse.com/security/cve/CVE-2023-27954/" source="CVE"/>
		<reference ref_id="CVE-2023-28205" ref_url="https://www.suse.com/security/cve/CVE-2023-28205/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2078-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014714.html" source="SUSE-SU"/>
		<description>
This update for webkit2gtk3 fixes the following issues:

Update to version 2.38.6 (bsc#1210731):

- CVE-2022-0108: Fixed information leak.
- CVE-2022-32885: Fixed arbitrary code execution.
- CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderLayer.
- CVE-2023-27932: Fixed Same Origin Policy bypass.
- CVE-2023-27954: Fixed  sensitive user information tracking.
- CVE-2023-28205: Fixed arbitrary code execution (bsc#1210295). 

Already fixed in version 2.38.5:

- CVE-2022-32886, CVE-2022-32912, CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-04-29"/>
	<updated date="2023-04-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210295">SUSE bug 1210295</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210731">SUSE bug 1210731</bugzilla>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0108/">CVE-2022-0108</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32885/">CVE-2022-32885</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32886/">CVE-2022-32886</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-32912/">CVE-2022-32912</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25358/">CVE-2023-25358</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25360/">CVE-2023-25360</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25361/">CVE-2023-25361</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25362/">CVE-2023-25362</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-25363/">CVE-2023-25363</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-27932/">CVE-2023-27932</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-27954/">CVE-2023-27954</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28205/">CVE-2023-28205</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009756167" comment="libjavascriptcoregtk-4_0-18-2.38.6-150000.3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756168" comment="libwebkit2gtk-4_0-37-2.38.6-150000.3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755481" comment="libwebkit2gtk3-lang-2.38.6-150000.3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756169" comment="typelib-1_0-JavaScriptCore-4_0-2.38.6-150000.3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756170" comment="typelib-1_0-WebKit2-4_0-2.38.6-150000.3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756171" comment="typelib-1_0-WebKit2WebExtension-4_0-2.38.6-150000.3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756172" comment="webkit2gtk-4_0-injected-bundles-2.38.6-150000.3.139.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756173" comment="webkit2gtk3-devel-2.38.6-150000.3.139.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141234" version="1" class="patch">
	<metadata>
		<title>Security update for git (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210686" ref_url="https://bugzilla.suse.com/1210686" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-25652" ref_url="https://www.suse.com/security/cve/CVE-2023-25652/" source="CVE"/>
		<reference ref_id="CVE-2023-25815" ref_url="https://www.suse.com/security/cve/CVE-2023-25815/" source="CVE"/>
		<reference ref_id="CVE-2023-29007" ref_url="https://www.suse.com/security/cve/CVE-2023-29007/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2081-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014775.html" source="SUSE-SU"/>
		<description>
This update for git fixes the following issues:

- CVE-2023-25652: Fixed partial overwrite of paths outside the working tree (bsc#1210686).
- CVE-2023-25815: Fixed malicious placemtn of crafted message (bsc#1210686).
- CVE-2023-29007: Fixed arbitrary configuration injection (bsc#1210686).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-02"/>
	<updated date="2023-05-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210686">SUSE bug 1210686</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-25652/">CVE-2023-25652</cve>
	<cve impact="important" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-25815/">CVE-2023-25815</cve>
	<cve impact="important" cvss3="6.6/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2023-29007/">CVE-2023-29007</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009756261" comment="git-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756262" comment="git-arch-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756263" comment="git-core-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756264" comment="git-cvs-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756265" comment="git-daemon-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755756" comment="git-doc-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756266" comment="git-email-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756267" comment="git-gui-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756268" comment="git-svn-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756269" comment="git-web-2.26.2-150000.50.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756270" comment="gitk-2.26.2-150000.50.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141235" version="1" class="patch">
	<metadata>
		<title>Security update for shim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1185232" ref_url="https://bugzilla.suse.com/1185232" source="BUGZILLA"/>
		<reference ref_id="1185261" ref_url="https://bugzilla.suse.com/1185261" source="BUGZILLA"/>
		<reference ref_id="1185441" ref_url="https://bugzilla.suse.com/1185441" source="BUGZILLA"/>
		<reference ref_id="1185621" ref_url="https://bugzilla.suse.com/1185621" source="BUGZILLA"/>
		<reference ref_id="1187071" ref_url="https://bugzilla.suse.com/1187071" source="BUGZILLA"/>
		<reference ref_id="1187260" ref_url="https://bugzilla.suse.com/1187260" source="BUGZILLA"/>
		<reference ref_id="1193282" ref_url="https://bugzilla.suse.com/1193282" source="BUGZILLA"/>
		<reference ref_id="1193315" ref_url="https://bugzilla.suse.com/1193315" source="BUGZILLA"/>
		<reference ref_id="1198101" ref_url="https://bugzilla.suse.com/1198101" source="BUGZILLA"/>
		<reference ref_id="1198458" ref_url="https://bugzilla.suse.com/1198458" source="BUGZILLA"/>
		<reference ref_id="1201066" ref_url="https://bugzilla.suse.com/1201066" source="BUGZILLA"/>
		<reference ref_id="1202120" ref_url="https://bugzilla.suse.com/1202120" source="BUGZILLA"/>
		<reference ref_id="1205588" ref_url="https://bugzilla.suse.com/1205588" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-28737" ref_url="https://www.suse.com/security/cve/CVE-2022-28737/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2086-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014771.html" source="SUSE-SU"/>
		<description>
This update for shim fixes the following issues:

- Updated shim signature after shim 15.7 be signed back:
  signature-sles.x86_64.asc, signature-sles.aarch64.asc (bsc#1198458)

- Add POST_PROCESS_PE_FLAGS=-N to the build command in shim.spec to
  disable the NX compatibility flag when using post-process-pe because
  grub2 is not ready. (bsc#1205588)

- Enable the NX compatibility flag by default. (jsc#PED-127) 

Update to 15.7 (bsc#1198458) (jsc#PED-127):

- Make SBAT variable payload introspectable
- Reference MokListRT instead of MokList
- Add a link to the test plan in the readme.
- [V3] Enable TDX measurement to RTMR register
- Discard load-options that start with a NUL
- Fixed load_cert_file bugs
- Add -malign-double to IA32 compiler flags
- pe: Fix image section entry-point validation
- make-archive: Build reproducible tarball
- mok: remove MokListTrusted from PCR 7

Other fixes:

- Support enhance shim measurement to TD RTMR. (jsc#PED-1273) 

- shim-install: ensure grub.cfg created is not overwritten after installing grub related files
- Add logic to shim.spec to only set sbat policy when efivarfs is writeable.  (bsc#1201066)
- Add logic to shim.spec for detecting --set-sbat-policy option before using mokutil to set sbat policy. (bsc#1202120)
- Change the URL in SBAT section to mail:security@suse.de. (bsc#1193282)

Update to 15.6 (bsc#1198458):

- MokManager: removed Locate graphic output protocol fail error message
- shim: implement SBAT verification for the shim_lock protocol
- post-process-pe: Fix a missing return code check
- Update github actions matrix to be more useful
- post-process-pe: Fix format string warnings on 32-bit platforms
- Allow MokListTrusted to be enabled by default
- Re-add ARM AArch64 support
- Use ASCII as fallback if Unicode Box Drawing characters fail
- make: don't treat cert.S specially
- shim: use SHIM_DEVEL_VERBOSE when built in devel mode
- Break out of the inner sbat loop if we find the entry.
- Support loading additional certificates
- Add support for NX (W^X) mitigations.
- Fix preserve_sbat_uefi_variable() logic
- SBAT Policy latest should be a one-shot
- pe: Fix a buffer overflow when SizeOfRawData &gt; VirtualSize
- pe: Perform image verification earlier when loading grub
- Update advertised sbat generation number for shim
- Update SBAT generation requirements for 05/24/22
- Also avoid CVE-2022-28737 in verify_image() by @vathpela

Update to 15.5 (bsc#1198458):

- Broken ia32 relocs and an unimportant submodule change.
- mok: allocate MOK config table as BootServicesData
- Don't call QueryVariableInfo() on EFI 1.10 machines (bsc#1187260)
- Relax the check for import_mok_state()  (bsc#1185261)
- SBAT.md: trivial changes
- shim: another attempt to fix load options handling
- Add tests for our load options parsing.
- arm/aa64: fix the size of .rela* sections
- mok: fix potential buffer overrun in import_mok_state
- mok: relax the maximum variable size check
- Don't unhook ExitBootServices when EBS protection is disabled
- fallback: find_boot_option() needs to return the index for the boot entry in optnum
- httpboot: Ignore case when checking HTTP headers
- Fallback allocation errors
- shim: avoid BOOTx64.EFI in message on other architectures
- str: remove duplicate parameter check
- fallback: add compile option FALLBACK_NONINTERACTIVE
- Test mok mirror
- Modify sbat.md to help with readability.
- csv: detect end of csv file correctly
- Specify that the .sbat section is ASCII not UTF-8
- tests: add 'include-fixed' GCC directory to include directories
- pe: simplify generate_hash()
- Don't make shim abort when TPM log event fails (RHBZ #2002265)
- Fallback to default loader if parsed one does not exist
- fallback: Fix for BootOrder crash when index returned
- Better console checks
- docs: update SBAT UEFI variable name
- Don't parse load options if invoked from removable media path
- fallback: fix fallback not passing arguments of the first boot option
- shim: Don't stop forever at 'Secure Boot not enabled' notification
- Allocate mokvar table in runtime memory.
- Remove post-process-pe on 'make clean'
- pe: missing perror argument


- CVE-2022-28737: Fixed a buffer overflow when SizeOfRawData &gt; VirtualSize (bsc#1198458)

- Add mokutil command to post script for setting sbat policy to latest mode
  when the SbatPolicy-605dab50-e046-4300-abb6-3dd810dd8b23 is not created.
  (bsc#1198458)

- Updated vendor dbx binary and script (bsc#1198458)

  - Updated dbx-cert.tar.xz and vendor-dbx-sles.bin for adding
    SLES-UEFI-SIGN-Certificate-2021-05.crt to vendor dbx list.
  - Updated dbx-cert.tar.xz and vendor-dbx-opensuse.bin for adding
    openSUSE-UEFI-SIGN-Certificate-2021-05.crt to vendor dbx list.
  - Updated vendor-dbx.bin for adding SLES-UEFI-SIGN-Certificate-2021-05.crt
    and openSUSE-UEFI-SIGN-Certificate-2021-05.crt for testing environment.
  - Updated generate-vendor-dbx.sh script for generating a vendor-dbx.bin
    file which includes all .der for testing environment.

- avoid buffer overflow when copying data to the MOK config table (bsc#1185232)
- Disable exporting vendor-dbx to MokListXRT since writing a large RT variable could crash some machines (bsc#1185261)
- ignore the odd LoadOptions length (bsc#1185232)
- shim-install: reset def_shim_efi to 'shim.efi' if the given file doesn't exist
- relax the maximum variable size check for u-boot (bsc#1185621)
- handle ignore_db and user_insecure_mode correctly (bsc#1185441, bsc#1187071)

- Split the keys in vendor-dbx.bin to vendor-dbx-sles and
  vendor-dbx-opensuse for shim-sles and shim-opensuse to reduce
  the size of MokListXRT (bsc#1185261) 
  + Also update generate-vendor-dbx.sh in dbx-cert.tar.xz
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-02"/>
	<updated date="2023-05-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1185232">SUSE bug 1185232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185261">SUSE bug 1185261</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185441">SUSE bug 1185441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1185621">SUSE bug 1185621</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187071">SUSE bug 1187071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1187260">SUSE bug 1187260</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193282">SUSE bug 1193282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1193315">SUSE bug 1193315</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198101">SUSE bug 1198101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198458">SUSE bug 1198458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201066">SUSE bug 1201066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1202120">SUSE bug 1202120</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205588">SUSE bug 1205588</bugzilla>
	<cve impact="important" cvss3="8.4/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-28737/">CVE-2022-28737</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755762" comment="shim-15.7-150100.3.35.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141236" version="1" class="patch">
	<metadata>
		<title>Security update for ffmpeg (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1140754" ref_url="https://bugzilla.suse.com/1140754" source="BUGZILLA"/>
		<reference ref_id="1206778" ref_url="https://bugzilla.suse.com/1206778" source="BUGZILLA"/>
		<reference ref_id="1209934" ref_url="https://bugzilla.suse.com/1209934" source="BUGZILLA"/>
		<reference ref_id="CVE-2019-13390" ref_url="https://www.suse.com/security/cve/CVE-2019-13390/" source="CVE"/>
		<reference ref_id="CVE-2022-3341" ref_url="https://www.suse.com/security/cve/CVE-2022-3341/" source="CVE"/>
		<reference ref_id="CVE-2022-48434" ref_url="https://www.suse.com/security/cve/CVE-2022-48434/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2115-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014741.html" source="SUSE-SU"/>
		<description>
This update for ffmpeg fixes the following issues:

- CVE-2019-13390: Fixed a potential crash when processing a crafted AVI stream (bsc#1140754).
- CVE-2022-3341: Fixed a potential crash when processing a crafted NUT stream (bsc#1206778).
- CVE-2022-48434: Fixed use after free in libavcodec/pthread_frame.c (bsc#1209934). 
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-05"/>
	<updated date="2023-05-05"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1140754">SUSE bug 1140754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206778">SUSE bug 1206778</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209934">SUSE bug 1209934</bugzilla>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2019-13390/">CVE-2019-13390</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2022-3341/">CVE-2022-3341</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-48434/">CVE-2022-48434</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009756648" comment="libavcodec-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756649" comment="libavcodec57-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756236" comment="libavcodec57-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756650" comment="libavdevice-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756651" comment="libavdevice57-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756239" comment="libavdevice57-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756652" comment="libavfilter-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756653" comment="libavfilter6-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756242" comment="libavfilter6-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756654" comment="libavformat-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756655" comment="libavformat57-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756245" comment="libavformat57-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756656" comment="libavresample-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756657" comment="libavresample3-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756248" comment="libavresample3-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756658" comment="libavutil-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756659" comment="libavutil55-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756251" comment="libavutil55-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756660" comment="libpostproc-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756661" comment="libpostproc54-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756254" comment="libpostproc54-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756662" comment="libswresample-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756663" comment="libswresample2-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756257" comment="libswresample2-32bit-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756664" comment="libswscale-devel-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756665" comment="libswscale4-3.4.2-150000.4.53.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756260" comment="libswscale4-32bit-3.4.2-150000.4.53.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141237" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202353" ref_url="https://bugzilla.suse.com/1202353" source="BUGZILLA"/>
		<reference ref_id="1205128" ref_url="https://bugzilla.suse.com/1205128" source="BUGZILLA"/>
		<reference ref_id="1209613" ref_url="https://bugzilla.suse.com/1209613" source="BUGZILLA"/>
		<reference ref_id="1209687" ref_url="https://bugzilla.suse.com/1209687" source="BUGZILLA"/>
		<reference ref_id="1209777" ref_url="https://bugzilla.suse.com/1209777" source="BUGZILLA"/>
		<reference ref_id="1209871" ref_url="https://bugzilla.suse.com/1209871" source="BUGZILLA"/>
		<reference ref_id="1209887" ref_url="https://bugzilla.suse.com/1209887" source="BUGZILLA"/>
		<reference ref_id="1210202" ref_url="https://bugzilla.suse.com/1210202" source="BUGZILLA"/>
		<reference ref_id="1210301" ref_url="https://bugzilla.suse.com/1210301" source="BUGZILLA"/>
		<reference ref_id="1210329" ref_url="https://bugzilla.suse.com/1210329" source="BUGZILLA"/>
		<reference ref_id="1210336" ref_url="https://bugzilla.suse.com/1210336" source="BUGZILLA"/>
		<reference ref_id="1210337" ref_url="https://bugzilla.suse.com/1210337" source="BUGZILLA"/>
		<reference ref_id="1210469" ref_url="https://bugzilla.suse.com/1210469" source="BUGZILLA"/>
		<reference ref_id="1210498" ref_url="https://bugzilla.suse.com/1210498" source="BUGZILLA"/>
		<reference ref_id="1210506" ref_url="https://bugzilla.suse.com/1210506" source="BUGZILLA"/>
		<reference ref_id="1210647" ref_url="https://bugzilla.suse.com/1210647" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-36691" ref_url="https://www.suse.com/security/cve/CVE-2020-36691/" source="CVE"/>
		<reference ref_id="CVE-2022-43945" ref_url="https://www.suse.com/security/cve/CVE-2022-43945/" source="CVE"/>
		<reference ref_id="CVE-2023-1611" ref_url="https://www.suse.com/security/cve/CVE-2023-1611/" source="CVE"/>
		<reference ref_id="CVE-2023-1670" ref_url="https://www.suse.com/security/cve/CVE-2023-1670/" source="CVE"/>
		<reference ref_id="CVE-2023-1855" ref_url="https://www.suse.com/security/cve/CVE-2023-1855/" source="CVE"/>
		<reference ref_id="CVE-2023-1989" ref_url="https://www.suse.com/security/cve/CVE-2023-1989/" source="CVE"/>
		<reference ref_id="CVE-2023-1990" ref_url="https://www.suse.com/security/cve/CVE-2023-1990/" source="CVE"/>
		<reference ref_id="CVE-2023-1998" ref_url="https://www.suse.com/security/cve/CVE-2023-1998/" source="CVE"/>
		<reference ref_id="CVE-2023-2124" ref_url="https://www.suse.com/security/cve/CVE-2023-2124/" source="CVE"/>
		<reference ref_id="CVE-2023-2162" ref_url="https://www.suse.com/security/cve/CVE-2023-2162/" source="CVE"/>
		<reference ref_id="CVE-2023-30772" ref_url="https://www.suse.com/security/cve/CVE-2023-30772/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2151-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029294.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-2124: Fixed an out of bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498).
- CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).
- CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647).
- CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).
- CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329).
- CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).
- CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).
- CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687).
- CVE-2020-36691: Fixed a denial of service vulnerability via a nested Netlink policy with a back reference (bsc#1209777).

The following non-security bugs were fixed:

- cifs: fix negotiate context parsing (bsc#1210301).
- cred: allow get_cred() and put_cred() to be given NULL (bsc#1209887).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-09"/>
	<updated date="2023-05-09"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202353">SUSE bug 1202353</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205128">SUSE bug 1205128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209613">SUSE bug 1209613</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209687">SUSE bug 1209687</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209777">SUSE bug 1209777</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209871">SUSE bug 1209871</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209887">SUSE bug 1209887</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210202">SUSE bug 1210202</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210301">SUSE bug 1210301</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210329">SUSE bug 1210329</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210336">SUSE bug 1210336</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210337">SUSE bug 1210337</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210469">SUSE bug 1210469</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210498">SUSE bug 1210498</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210506">SUSE bug 1210506</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210647">SUSE bug 1210647</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36691/">CVE-2020-36691</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-43945/">CVE-2022-43945</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1611/">CVE-2023-1611</cve>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-1670/">CVE-2023-1670</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1855/">CVE-2023-1855</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1989/">CVE-2023-1989</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1990/">CVE-2023-1990</cve>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-1998/">CVE-2023-1998</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2124/">CVE-2023-2124</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2162/">CVE-2023-2162</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-30772/">CVE-2023-30772</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009756971" comment="kernel-default-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756972" comment="kernel-default-base-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756973" comment="kernel-default-devel-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756815" comment="kernel-default-man-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756961" comment="kernel-devel-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756962" comment="kernel-docs-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756963" comment="kernel-macros-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756974" comment="kernel-obs-build-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756965" comment="kernel-source-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756975" comment="kernel-syms-4.12.14-150100.197.145.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756976" comment="reiserfs-kmp-default-4.12.14-150100.197.145.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141238" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1194303" ref_url="https://bugzilla.suse.com/1194303" source="BUGZILLA"/>
		<reference ref_id="1194304" ref_url="https://bugzilla.suse.com/1194304" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-45944" ref_url="https://www.suse.com/security/cve/CVE-2021-45944/" source="CVE"/>
		<reference ref_id="CVE-2021-45949" ref_url="https://www.suse.com/security/cve/CVE-2021-45949/" source="CVE"/>
		<reference ref_id="SUSE-SU-2022:0088-3" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013607.html" source="SUSE-SU"/>
		<description>
This update for ghostscript fixes the following issues:

- CVE-2021-45944: Fixed use-after-free in sampled_data_sample (bsc#1194303)
- CVE-2021-45949: Fixed heap-based buffer overflow in sampled_data_finish (bsc#1194304)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-31"/>
	<updated date="2023-01-31"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1194303">SUSE bug 1194303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194304">SUSE bug 1194304</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45944/">CVE-2021-45944</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-45949/">CVE-2021-45949</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009663282" comment="ghostscript-9.52-161.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663283" comment="ghostscript-devel-9.52-161.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009663284" comment="ghostscript-x11-9.52-161.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141239" version="1" class="patch">
	<metadata>
		<title>Security update for container-suseconnect (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2174-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029363.html" source="SUSE-SU"/>
		<description>

This update of container-suseconnect fixes the following issues:

- rebuild the package with the go 19.9 secure release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-11"/>
	<updated date="2023-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756761" comment="container-suseconnect-2.4.0-150000.4.28.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141240" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211175" ref_url="https://bugzilla.suse.com/1211175" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-32205" ref_url="https://www.suse.com/security/cve/CVE-2023-32205/" source="CVE"/>
		<reference ref_id="CVE-2023-32206" ref_url="https://www.suse.com/security/cve/CVE-2023-32206/" source="CVE"/>
		<reference ref_id="CVE-2023-32207" ref_url="https://www.suse.com/security/cve/CVE-2023-32207/" source="CVE"/>
		<reference ref_id="CVE-2023-32211" ref_url="https://www.suse.com/security/cve/CVE-2023-32211/" source="CVE"/>
		<reference ref_id="CVE-2023-32212" ref_url="https://www.suse.com/security/cve/CVE-2023-32212/" source="CVE"/>
		<reference ref_id="CVE-2023-32213" ref_url="https://www.suse.com/security/cve/CVE-2023-32213/" source="CVE"/>
		<reference ref_id="CVE-2023-32214" ref_url="https://www.suse.com/security/cve/CVE-2023-32214/" source="CVE"/>
		<reference ref_id="CVE-2023-32215" ref_url="https://www.suse.com/security/cve/CVE-2023-32215/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2175-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029362.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Extended Support Release 102.11.0 ESR (bsc#1211175):

- CVE-2023-32205: Browser prompts could have been obscured by popups
- CVE-2023-32206: Crash in RLBox Expat driver
- CVE-2023-32207: Potential permissions request bypass via clickjacking
- CVE-2023-32211: Content process crash due to invalid wasm code
- CVE-2023-32212: Potential spoof due to obscured address bar
- CVE-2023-32213: Potential memory corruption in FileReader::DoReadData()
- CVE-2023-32214: Potential DoS via exposed protocol handlers
- CVE-2023-32215: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-11"/>
	<updated date="2023-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211175">SUSE bug 1211175</bugzilla>
	<cve impact="critical" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-32205/">CVE-2023-32205</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32206/">CVE-2023-32206</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-32207/">CVE-2023-32207</cve>
	<cve impact="critical" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32211/">CVE-2023-32211</cve>
	<cve impact="critical" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-32212/">CVE-2023-32212</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-32213/">CVE-2023-32213</cve>
	<cve impact="critical" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32214/">CVE-2023-32214</cve>
	<cve impact="critical" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-32215/">CVE-2023-32215</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009757170" comment="MozillaFirefox-102.11.0-150000.150.85.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757171" comment="MozillaFirefox-devel-102.11.0-150000.150.85.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757172" comment="MozillaFirefox-translations-common-102.11.0-150000.150.85.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757173" comment="MozillaFirefox-translations-other-102.11.0-150000.150.85.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141241" version="1" class="patch">
	<metadata>
		<title>Security update for buildah (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2177-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014857.html" source="SUSE-SU"/>
		<description>

This update of buildah fixes the following issues:

- rebuild the package with the go 19.9 secure release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-11"/>
	<updated date="2023-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757174" comment="buildah-1.25.1-150100.3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141242" version="1" class="patch">
	<metadata>
		<title>Security update for skopeo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2180-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014863.html" source="SUSE-SU"/>
		<description>

This update of skopeo fixes the following issues:

- rebuild the package with the go 19.9 secure release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-11"/>
	<updated date="2023-05-11"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756728" comment="skopeo-0.1.41-150000.4.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141243" version="1" class="patch">
	<metadata>
		<title>Security update for Prometheus Golang clients (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1197284" ref_url="https://bugzilla.suse.com/1197284" source="BUGZILLA"/>
		<reference ref_id="1203185" ref_url="https://bugzilla.suse.com/1203185" source="BUGZILLA"/>
		<reference ref_id="1208051" ref_url="https://bugzilla.suse.com/1208051" source="BUGZILLA"/>
		<reference ref_id="1208064" ref_url="https://bugzilla.suse.com/1208064" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-27191" ref_url="https://www.suse.com/security/cve/CVE-2022-27191/" source="CVE"/>
		<reference ref_id="CVE-2022-27664" ref_url="https://www.suse.com/security/cve/CVE-2022-27664/" source="CVE"/>
		<reference ref_id="CVE-2022-46146" ref_url="https://www.suse.com/security/cve/CVE-2022-46146/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2187-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014865.html" source="SUSE-SU"/>
		<description>
This update for golang-github-prometheus-alertmanager and golang-github-prometheus-node_exporter fixes the following issues:

golang-github-prometheus-alertmanager:

- Security issues fixed:
  * CVE-2022-46146: Fix authentication bypass via cache poisoning (bsc#1208051)   
    
golang-github-prometheus-node_exporter:

- Security issues fixed in this version update to version 1.5.0 (jsc#PED-3578):
  * CVE-2022-27191: Update go/x/crypto (bsc#1197284)
  * CVE-2022-27664: Update go/x/net (bsc#1203185)
  * CVE-2022-46146: Update exporter-toolkit (bsc#1208064)
- Other non-security bug fixes and changes in this version update to 1.5.0 (jsc#PED-3578):
  * NOTE: This changes the Go runtime 'GOMAXPROCS' to 1. This is done to limit the concurrency of the exporter to 1 CPU
    thread at a time in order to avoid a race condition problem in the Linux kernel and parallel IO issues on nodes with
    high numbers of CPUs/CPU threads.
  * [BUGFIX] Fix hwmon label sanitizer
  * [BUGFIX] Use native endianness when encoding InetDiagMsg
  * [BUGFIX] Fix btrfs device stats always being zero
  * [BUGFIX] Fix diskstats exclude flags
  * [BUGFIX] [node-mixin] Fix fsSpaceAvailableCriticalThreshold and fsSpaceAvailableWarning
  * [BUGFIX] Fix concurrency issue in ethtool collector
  * [BUGFIX] Fix concurrency issue in netdev collector
  * [BUGFIX] Fix diskstat reads and write metrics for disks with different sector sizes
  * [BUGFIX] Fix iostat on macos broken by deprecation warning
  * [BUGFIX] Fix NodeFileDescriptorLimit alerts
  * [BUGFIX] Sanitize rapl zone names
  * [BUGFIX] Add file descriptor close safely in test
  * [BUGFIX] Fix race condition in os_release.go
  * [BUGFIX] Skip ZFS IO metrics if their paths are missing
  * [BUGFIX] Handle nil CPU thermal power status on M1
  * [BUGFIX] bsd: Ignore filesystems flagged as MNT_IGNORE
  * [BUGFIX] Sanitize UTF-8 in dmi collector
  * [CHANGE] Merge metrics descriptions in textfile collector
  * [FEATURE] Add multiple listeners and systemd socket listener activation
  * [FEATURE] [node-mixin] Add darwin dashboard to mixin
  * [FEATURE] Add 'isolated' metric on cpu collector on linux
  * [FEATURE] Add cgroup summary collector
  * [FEATURE] Add selinux collector
  * [FEATURE] Add slab info collector
  * [FEATURE] Add sysctl collector
  * [FEATURE] Also track the CPU Spin time for OpenBSD systems
  * [FEATURE] Add support for MacOS version
  * [ENHANCEMENT] Add RTNL version of netclass collector
  * [ENHANCEMENT] [node-mixin] Add missing selectors
  * [ENHANCEMENT] [node-mixin] Change current datasource to grafana's default
  * [ENHANCEMENT] [node-mixin] Change disk graph to disk table
  * [ENHANCEMENT] [node-mixin] Change io time units to %util
  * [ENHANCEMENT] Ad user_wired_bytes and laundry_bytes on *bsd
  * [ENHANCEMENT] Add additional vm_stat memory metrics for darwin
  * [ENHANCEMENT] Add device filter flags to arp collector
  * [ENHANCEMENT] Add diskstats include and exclude device flags
  * [ENHANCEMENT] Add node_softirqs_total metric
  * [ENHANCEMENT] Add rapl zone name label option
  * [ENHANCEMENT] Add slabinfo collector
  * [ENHANCEMENT] Allow user to select port on NTP server to query
  * [ENHANCEMENT] collector/diskstats: Add labels and metrics from udev
  * [ENHANCEMENT] Enable builds against older macOS SDK
  * [ENHANCEMENT] qdisk-linux: Add exclude and include flags for interface name
  * [ENHANCEMENT] systemd: Expose systemd minor version
  * [ENHANCEMENT] Use netlink for tcpstat collector
  * [ENHANCEMENT] Use netlink to get netdev stats
  * [ENHANCEMENT] Add additional perf counters for stalled frontend/backend cycles
  * [ENHANCEMENT] Add btrfs device error stats
- Change build requirement to go1.18 or higher (previously this was fixed to version 1.14)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-11"/>
	<updated date="2023-05-11"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1197284">SUSE bug 1197284</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203185">SUSE bug 1203185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208051">SUSE bug 1208051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208064">SUSE bug 1208064</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27191/">CVE-2022-27191</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27664/">CVE-2022-27664</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46146/">CVE-2022-46146</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756626" comment="golang-github-prometheus-node_exporter-1.5.0-150100.3.23.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141244" version="1" class="patch">
	<metadata>
		<title>Security update for postgresql12 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210303" ref_url="https://bugzilla.suse.com/1210303" source="BUGZILLA"/>
		<reference ref_id="1211228" ref_url="https://bugzilla.suse.com/1211228" source="BUGZILLA"/>
		<reference ref_id="1211229" ref_url="https://bugzilla.suse.com/1211229" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2454" ref_url="https://www.suse.com/security/cve/CVE-2023-2454/" source="CVE"/>
		<reference ref_id="CVE-2023-2455" ref_url="https://www.suse.com/security/cve/CVE-2023-2455/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2198-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029404.html" source="SUSE-SU"/>
		<description>
This update for postgresql12 fixes the following issues:

Updated to version 12.15:
  - CVE-2023-2454: Fixed an issue where a user having permission to
    create a schema could hijack the privileges of a security definer
    function or extension script (bsc#1211228).
  - CVE-2023-2455: Fixed an issue that could allow a user to see or
    modify rows that should have been invisible (bsc#1211229).
  - Internal fixes (bsc#1210303).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-15"/>
	<updated date="2023-05-15"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210303">SUSE bug 1210303</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211228">SUSE bug 1211228</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211229">SUSE bug 1211229</bugzilla>
	<cve impact="moderate" cvss3="6/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-2454/">CVE-2023-2454</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-2455/">CVE-2023-2455</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009758133" comment="libecpg6-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758134" comment="libpq5-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758123" comment="libpq5-32bit-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758135" comment="postgresql12-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758136" comment="postgresql12-contrib-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758137" comment="postgresql12-devel-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758127" comment="postgresql12-docs-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758138" comment="postgresql12-plperl-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758139" comment="postgresql12-plpython-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758140" comment="postgresql12-pltcl-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758141" comment="postgresql12-server-12.15-150100.3.41.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009758142" comment="postgresql12-server-devel-12.15-150100.3.41.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141245" version="1" class="patch">
	<metadata>
		<title>Security update for rmt-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204285" ref_url="https://bugzilla.suse.com/1204285" source="BUGZILLA"/>
		<reference ref_id="1204769" ref_url="https://bugzilla.suse.com/1204769" source="BUGZILLA"/>
		<reference ref_id="1205089" ref_url="https://bugzilla.suse.com/1205089" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-31254" ref_url="https://www.suse.com/security/cve/CVE-2022-31254/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0022-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013422.html" source="SUSE-SU"/>
		<description>
This update for rmt-server fixes the following issues:

Update to version 2.10:

- Add option to turn off system token support (bsc#1205089)
- Update the `last_seen_at` column on zypper service refresh
- Do not retry to import non-existing files in air-gapped mode (bsc#1204769)
- CVE-2022-31254: Fixed a local privilege escalation related to the packaging of rmt-server (bsc#1204285).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-03"/>
	<updated date="2023-01-03"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204285">SUSE bug 1204285</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204769">SUSE bug 1204769</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205089">SUSE bug 1205089</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-31254/">CVE-2022-31254</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009730934" comment="rmt-server-2.10-150100.3.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730935" comment="rmt-server-config-2.10-150100.3.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141246" version="1" class="patch">
	<metadata>
		<title>Security update for dmidecode (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210418" ref_url="https://bugzilla.suse.com/1210418" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-30630" ref_url="https://www.suse.com/security/cve/CVE-2023-30630/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2215-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029418.html" source="SUSE-SU"/>
		<description>
This update for dmidecode fixes the following issues:

- CVE-2023-30630: Fixed potential privilege escalation vulnerability via file overwrite (bsc#1210418).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1210418">SUSE bug 1210418</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-30630/">CVE-2023-30630</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009754961" comment="dmidecode-3.2-150100.9.16.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141247" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1205385" ref_url="https://bugzilla.suse.com/1205385" source="BUGZILLA"/>
		<reference ref_id="1206504" ref_url="https://bugzilla.suse.com/1206504" source="BUGZILLA"/>
		<reference ref_id="1206546" ref_url="https://bugzilla.suse.com/1206546" source="BUGZILLA"/>
		<reference ref_id="CVE-2021-20251" ref_url="https://www.suse.com/security/cve/CVE-2021-20251/" source="CVE"/>
		<reference ref_id="CVE-2022-37966" ref_url="https://www.suse.com/security/cve/CVE-2022-37966/" source="CVE"/>
		<reference ref_id="CVE-2022-38023" ref_url="https://www.suse.com/security/cve/CVE-2022-38023/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0222-1" ref_url="https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/V3YTRBE2CLOHDFXSGJQCTU4DTNHNRTBU/" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

- CVE-2021-20251: Fixed an issue where the bad password count would
  not be properly incremented, which could allow attackers to brute
  force a user's password (bsc#1206546).
- CVE-2022-38023: Disabled weak ciphers by default in the Netlogon
  Secure channel (bsc#1206504).
- CVE-2022-37966: Fixed an issue where a weak cipher would be
  selected to encrypt session keys, which could lead to privilege
  escalation (bsc#1205385).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-01"/>
	<updated date="2023-02-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1205385">SUSE bug 1205385</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206504">SUSE bug 1206504</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206546">SUSE bug 1206546</bugzilla>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-20251/">CVE-2021-20251</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-37966/">CVE-2022-37966</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-38023/">CVE-2022-38023</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009737058" comment="libdcerpc-binding0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732804" comment="libdcerpc-binding0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737059" comment="libdcerpc-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737060" comment="libdcerpc-samr-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737061" comment="libdcerpc-samr0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737062" comment="libdcerpc0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732809" comment="libdcerpc0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737063" comment="libndr-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737064" comment="libndr-krb5pac-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737065" comment="libndr-krb5pac0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732813" comment="libndr-krb5pac0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737066" comment="libndr-nbt-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737067" comment="libndr-nbt0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732816" comment="libndr-nbt0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737068" comment="libndr-standard-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737069" comment="libndr-standard0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732819" comment="libndr-standard0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737070" comment="libndr0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732821" comment="libndr0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737071" comment="libnetapi-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737072" comment="libnetapi0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732824" comment="libnetapi0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737073" comment="libsamba-credentials-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737074" comment="libsamba-credentials0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732827" comment="libsamba-credentials0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737075" comment="libsamba-errors-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737076" comment="libsamba-errors0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732830" comment="libsamba-errors0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737077" comment="libsamba-hostconfig-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737078" comment="libsamba-hostconfig0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732833" comment="libsamba-hostconfig0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737079" comment="libsamba-passdb-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737080" comment="libsamba-passdb0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732836" comment="libsamba-passdb0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737081" comment="libsamba-policy-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737082" comment="libsamba-policy-python3-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732672" comment="libsamba-policy0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737083" comment="libsamba-policy0-python3-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737084" comment="libsamba-util-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737085" comment="libsamba-util0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732843" comment="libsamba-util0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737086" comment="libsamdb-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737087" comment="libsamdb0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732846" comment="libsamdb0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737088" comment="libsmbclient-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737089" comment="libsmbclient0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737090" comment="libsmbconf-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737091" comment="libsmbconf0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732851" comment="libsmbconf0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737092" comment="libsmbldap-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737093" comment="libsmbldap2-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732854" comment="libsmbldap2-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737094" comment="libtevent-util-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737095" comment="libtevent-util0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732857" comment="libtevent-util0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737096" comment="libwbclient-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737097" comment="libwbclient0-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732860" comment="libwbclient0-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737098" comment="samba-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737099" comment="samba-ad-dc-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737100" comment="samba-client-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737101" comment="samba-core-devel-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737102" comment="samba-dsdb-modules-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737103" comment="samba-libs-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732867" comment="samba-libs-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732674" comment="samba-libs-python-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737104" comment="samba-libs-python3-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732676" comment="samba-python-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737105" comment="samba-python3-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737106" comment="samba-winbind-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009732873" comment="samba-winbind-32bit-4.9.5+git.552.fec1a5e57a-150100.3.73.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141248" version="1" class="patch">
	<metadata>
		<title>Security update for java-11-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210628" ref_url="https://bugzilla.suse.com/1210628" source="BUGZILLA"/>
		<reference ref_id="1210631" ref_url="https://bugzilla.suse.com/1210631" source="BUGZILLA"/>
		<reference ref_id="1210632" ref_url="https://bugzilla.suse.com/1210632" source="BUGZILLA"/>
		<reference ref_id="1210634" ref_url="https://bugzilla.suse.com/1210634" source="BUGZILLA"/>
		<reference ref_id="1210635" ref_url="https://bugzilla.suse.com/1210635" source="BUGZILLA"/>
		<reference ref_id="1210636" ref_url="https://bugzilla.suse.com/1210636" source="BUGZILLA"/>
		<reference ref_id="1210637" ref_url="https://bugzilla.suse.com/1210637" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-21930" ref_url="https://www.suse.com/security/cve/CVE-2023-21930/" source="CVE"/>
		<reference ref_id="CVE-2023-21937" ref_url="https://www.suse.com/security/cve/CVE-2023-21937/" source="CVE"/>
		<reference ref_id="CVE-2023-21938" ref_url="https://www.suse.com/security/cve/CVE-2023-21938/" source="CVE"/>
		<reference ref_id="CVE-2023-21939" ref_url="https://www.suse.com/security/cve/CVE-2023-21939/" source="CVE"/>
		<reference ref_id="CVE-2023-21954" ref_url="https://www.suse.com/security/cve/CVE-2023-21954/" source="CVE"/>
		<reference ref_id="CVE-2023-21967" ref_url="https://www.suse.com/security/cve/CVE-2023-21967/" source="CVE"/>
		<reference ref_id="CVE-2023-21968" ref_url="https://www.suse.com/security/cve/CVE-2023-21968/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2222-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014907.html" source="SUSE-SU"/>
		<description>
This update for java-11-openjdk fixes the following issues:

Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU):

- CVE-2023-21930: Fixed AES support (bsc#1210628).
- CVE-2023-21937: Fixed String platform support (bsc#1210631).
- CVE-2023-21938: Fixed runtime support (bsc#1210632).
- CVE-2023-21939: Fixed Swing platform support (bsc#1210634). 
- CVE-2023-21954: Fixed object reclamation process (bsc#1210635).
- CVE-2023-21967: Fixed TLS session negotiation (bsc#1210636).
- CVE-2023-21968: Fixed path handling (bsc#1210637). 
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-16"/>
	<updated date="2023-05-16"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210628">SUSE bug 1210628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210631">SUSE bug 1210631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210632">SUSE bug 1210632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210634">SUSE bug 1210634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210635">SUSE bug 1210635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210636">SUSE bug 1210636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210637">SUSE bug 1210637</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-21930/">CVE-2023-21930</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21937/">CVE-2023-21937</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21938/">CVE-2023-21938</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21939/">CVE-2023-21939</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-21954/">CVE-2023-21954</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-21967/">CVE-2023-21967</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21968/">CVE-2023-21968</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009755627" comment="java-11-openjdk-11.0.19.0-150000.3.96.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755628" comment="java-11-openjdk-demo-11.0.19.0-150000.3.96.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755629" comment="java-11-openjdk-devel-11.0.19.0-150000.3.96.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755630" comment="java-11-openjdk-headless-11.0.19.0-150000.3.96.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141249" version="1" class="patch">
	<metadata>
		<title>Security update for curl (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206309" ref_url="https://bugzilla.suse.com/1206309" source="BUGZILLA"/>
		<reference ref_id="1207992" ref_url="https://bugzilla.suse.com/1207992" source="BUGZILLA"/>
		<reference ref_id="1209209" ref_url="https://bugzilla.suse.com/1209209" source="BUGZILLA"/>
		<reference ref_id="1209210" ref_url="https://bugzilla.suse.com/1209210" source="BUGZILLA"/>
		<reference ref_id="1209211" ref_url="https://bugzilla.suse.com/1209211" source="BUGZILLA"/>
		<reference ref_id="1209212" ref_url="https://bugzilla.suse.com/1209212" source="BUGZILLA"/>
		<reference ref_id="1209214" ref_url="https://bugzilla.suse.com/1209214" source="BUGZILLA"/>
		<reference ref_id="1211231" ref_url="https://bugzilla.suse.com/1211231" source="BUGZILLA"/>
		<reference ref_id="1211232" ref_url="https://bugzilla.suse.com/1211232" source="BUGZILLA"/>
		<reference ref_id="1211233" ref_url="https://bugzilla.suse.com/1211233" source="BUGZILLA"/>
		<reference ref_id="1211339" ref_url="https://bugzilla.suse.com/1211339" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-43552" ref_url="https://www.suse.com/security/cve/CVE-2022-43552/" source="CVE"/>
		<reference ref_id="CVE-2023-23916" ref_url="https://www.suse.com/security/cve/CVE-2023-23916/" source="CVE"/>
		<reference ref_id="CVE-2023-27533" ref_url="https://www.suse.com/security/cve/CVE-2023-27533/" source="CVE"/>
		<reference ref_id="CVE-2023-27534" ref_url="https://www.suse.com/security/cve/CVE-2023-27534/" source="CVE"/>
		<reference ref_id="CVE-2023-27535" ref_url="https://www.suse.com/security/cve/CVE-2023-27535/" source="CVE"/>
		<reference ref_id="CVE-2023-27536" ref_url="https://www.suse.com/security/cve/CVE-2023-27536/" source="CVE"/>
		<reference ref_id="CVE-2023-27538" ref_url="https://www.suse.com/security/cve/CVE-2023-27538/" source="CVE"/>
		<reference ref_id="CVE-2023-28320" ref_url="https://www.suse.com/security/cve/CVE-2023-28320/" source="CVE"/>
		<reference ref_id="CVE-2023-28321" ref_url="https://www.suse.com/security/cve/CVE-2023-28321/" source="CVE"/>
		<reference ref_id="CVE-2023-28322" ref_url="https://www.suse.com/security/cve/CVE-2023-28322/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2226-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029432.html" source="SUSE-SU"/>
		<description>
This update for curl fixes the following issues:

- CVE-2023-28320: Fixed siglongjmp race condition (bsc#1211231).
- CVE-2023-28321: Fixed IDN wildcard matching (bsc#1211232).
- CVE-2023-28322: Fixed POST-after-PUT confusion (bsc#1211233).
- CVE-2023-27533: Fixed TELNET option IAC injection (bsc#1209209).
- CVE-2023-27534: Fixed SFTP path ~ resolving discrepancy (bsc#1209210).
- CVE-2023-27535: Fixed FTP too eager connection reuse (bsc#1209211).
- CVE-2023-27536: Fixed GSS delegation too eager connection reuse (bsc#1209212).
- CVE-2023-27538: Fixed SSH connection too eager reuse still (bsc#1209214).
- CVE-2022-43552: HTTP Proxy deny use-after-free (bsc#1206309).
- CVE-2023-23916: Fixed HTTP multi-header compression denial of service (bsc#1207992).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-17"/>
	<updated date="2023-05-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206309">SUSE bug 1206309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207992">SUSE bug 1207992</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209209">SUSE bug 1209209</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209210">SUSE bug 1209210</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209211">SUSE bug 1209211</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209212">SUSE bug 1209212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209214">SUSE bug 1209214</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211231">SUSE bug 1211231</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211232">SUSE bug 1211232</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211233">SUSE bug 1211233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211339">SUSE bug 1211339</bugzilla>
	<cve impact="moderate" cvss3="5.6/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-43552/">CVE-2022-43552</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-23916/">CVE-2023-23916</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2023-27533/">CVE-2023-27533</cve>
	<cve impact="moderate" cvss3="4.5/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2023-27534/">CVE-2023-27534</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-27535/">CVE-2023-27535</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-27536/">CVE-2023-27536</cve>
	<cve impact="moderate" cvss3="5.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-27538/">CVE-2023-27538</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-28320/">CVE-2023-28320</cve>
	<cve impact="moderate" cvss3="4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-28321/">CVE-2023-28321</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-28322/">CVE-2023-28322</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009759956" comment="curl-7.60.0-150000.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009759957" comment="libcurl-devel-7.60.0-150000.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009759958" comment="libcurl4-7.60.0-150000.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009759907" comment="libcurl4-32bit-7.60.0-150000.51.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141250" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-openjdk (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210628" ref_url="https://bugzilla.suse.com/1210628" source="BUGZILLA"/>
		<reference ref_id="1210631" ref_url="https://bugzilla.suse.com/1210631" source="BUGZILLA"/>
		<reference ref_id="1210632" ref_url="https://bugzilla.suse.com/1210632" source="BUGZILLA"/>
		<reference ref_id="1210634" ref_url="https://bugzilla.suse.com/1210634" source="BUGZILLA"/>
		<reference ref_id="1210635" ref_url="https://bugzilla.suse.com/1210635" source="BUGZILLA"/>
		<reference ref_id="1210636" ref_url="https://bugzilla.suse.com/1210636" source="BUGZILLA"/>
		<reference ref_id="1210637" ref_url="https://bugzilla.suse.com/1210637" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-21930" ref_url="https://www.suse.com/security/cve/CVE-2023-21930/" source="CVE"/>
		<reference ref_id="CVE-2023-21937" ref_url="https://www.suse.com/security/cve/CVE-2023-21937/" source="CVE"/>
		<reference ref_id="CVE-2023-21938" ref_url="https://www.suse.com/security/cve/CVE-2023-21938/" source="CVE"/>
		<reference ref_id="CVE-2023-21939" ref_url="https://www.suse.com/security/cve/CVE-2023-21939/" source="CVE"/>
		<reference ref_id="CVE-2023-21954" ref_url="https://www.suse.com/security/cve/CVE-2023-21954/" source="CVE"/>
		<reference ref_id="CVE-2023-21967" ref_url="https://www.suse.com/security/cve/CVE-2023-21967/" source="CVE"/>
		<reference ref_id="CVE-2023-21968" ref_url="https://www.suse.com/security/cve/CVE-2023-21968/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2242-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029449.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-openjdk fixes the following issues:

- Updated to version jdk8u372 (icedtea-3.27.0):
    - CVE-2023-21930: Fixed an issue in the JSSE component that could
      allow an attacker to access critical data without authorization
      (bsc#1210628).
    - CVE-2023-21937: Fixed an issue in the Networking component that
      could allow an attacker to update, insert or delete some data
      without authorization (bsc#1210631).
    - CVE-2023-21938: Fixed an issue in the Libraries component that
      could allow an attacker to update, insert or delete some data
      without authorization (bsc#1210632).
    - CVE-2023-21939: Fixed an issue in the Swing component that could
      allow an attacker to update, insert or delete some data without
      authorization (bsc#1210634).
    - CVE-2023-21954: Fixed an issue in the Hotspot component that
      could allow an attacker to access critical data without
      authorization (bsc#1210635).
    - CVE-2023-21967: Fixed an issue in the JSSE component that could
      allow an attacker to cause a hang or frequently repeatable
      crash without authorization (bsc#1210636).
    - CVE-2023-21968: Fixed an issue in the Libraries component that
      could allow an attacker to update, insert or delete some data
      without authorization (bsc#1210637).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-18"/>
	<updated date="2023-05-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210628">SUSE bug 1210628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210631">SUSE bug 1210631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210632">SUSE bug 1210632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210634">SUSE bug 1210634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210635">SUSE bug 1210635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210636">SUSE bug 1210636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210637">SUSE bug 1210637</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-21930/">CVE-2023-21930</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21937/">CVE-2023-21937</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21938/">CVE-2023-21938</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21939/">CVE-2023-21939</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-21954/">CVE-2023-21954</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-21967/">CVE-2023-21967</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21968/">CVE-2023-21968</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009756453" comment="java-1_8_0-openjdk-1.8.0.372-150000.3.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756455" comment="java-1_8_0-openjdk-demo-1.8.0.372-150000.3.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756456" comment="java-1_8_0-openjdk-devel-1.8.0.372-150000.3.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756457" comment="java-1_8_0-openjdk-headless-1.8.0.372-150000.3.79.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141251" version="1" class="patch">
	<metadata>
		<title>Security update for ucode-intel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208479" ref_url="https://bugzilla.suse.com/1208479" source="BUGZILLA"/>
		<reference ref_id="1211382" ref_url="https://bugzilla.suse.com/1211382" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-33972" ref_url="https://www.suse.com/security/cve/CVE-2022-33972/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2244-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029456.html" source="SUSE-SU"/>
		<description>
This update for ucode-intel fixes the following issues:

- Updated to Intel CPU Microcode 20230512 release. (bsc#1211382)
- New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL-N          | A0       | 06-be-00/01 |          | 00000010 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
  | AZB            | R0       | 06-9a-04/40 |          | 00000004 | Intel(R) Atom(R) C1100
- Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | L0       | 06-9a-03/80 | 00000429 | 0000042a | Core Gen12
  | ADL            | L0       | 06-9a-04/80 | 00000429 | 0000042a | Core Gen12
  | AML-Y22        | H0       | 06-8e-09/10 |          | 000000f2 | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CFL-H          | R0       | 06-9e-0d/22 | 000000f4 | 000000f8 | Core Gen9 Mobile
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f0 | 000000f2 | Core Gen9
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f0 | 000000f2 | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000f0 | 000000f2 | Core Gen8
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000f0 | 000000f2 | Core Gen8 Mobile
  | CLX-SP         | B0       | 06-55-06/bf | 04003303 | 04003501 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003303 | 05003501 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000f4 | 000000f6 | Core Gen10
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002503 | 07002601 | Xeon Scalable Gen3
  | ICL-D          | B0       | 06-6c-01/10 | 01000211 | 01000230 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000b8 | 000000ba | Core Gen10 Mobile
  | ICX-SP         | D0       | 06-6a-06/87 | 0d000389 | 0d000390 | Xeon Scalable Gen3
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000f0 | 000000f2 | Core Gen7; Xeon E3 v6
  | KBL-U/Y        | H0       | 06-8e-09/c0 |          | 000000f2 | Core Gen7 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000032 | 00000033 | Core w/Hybrid Technology
  | RKL-S          | B0       | 06-a7-01/02 | 00000057 | 00000058 | Core Gen11
  | RPL-H 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-P 6+8      | J0       | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13
  | RPL-S          | S0       | 06-b7-01/32 | 00000112 | 00000113 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/07 | 0000410e | 00004112 | Core Gen13
  | SKX-D          | H0       | 06-55-04/b7 |          | 02006f05 | Xeon D-21xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000161 | 01000171 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 |          | 02006f05 | Xeon Scalable
  | SPR-HBM        | B3       | 06-8f-08/10 | 2c000170 | 2c0001d1 | Xeon Max
  | SPR-SP         | E0       | 06-8f-04/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E2       | 06-8f-05/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E3       | 06-8f-06/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E4       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | E5       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S2       | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | SPR-SP         | S3       | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4
  | TGL            | B1       | 06-8c-01/80 | 000000a6 | 000000aa | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000042 | 00000044 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000028 | 0000002a | Core Gen11 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 |          | 000000f2 | Core Gen8 Mobile
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-18"/>
	<updated date="2023-05-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1208479">SUSE bug 1208479</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211382">SUSE bug 1211382</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2022-33972/">CVE-2022-33972</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009759923" comment="ucode-intel-20230512-150100.3.220.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141252" version="1" class="patch">
	<metadata>
		<title>Security update for ctags (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206543" ref_url="https://bugzilla.suse.com/1206543" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4515" ref_url="https://www.suse.com/security/cve/CVE-2022-4515/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0225-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013611.html" source="SUSE-SU"/>
		<description>
This update for ctags fixes the following issues:

- CVE-2022-4515: Fixed a command injection issue via a tag file wih a
  crafted filename (bsc#1206543).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-01"/>
	<updated date="2023-02-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206543">SUSE bug 1206543</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4515/">CVE-2022-4515</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009733686" comment="ctags-5.8-150000.3.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141253" version="1" class="patch">
	<metadata>
		<title>Security update for containerd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210298" ref_url="https://bugzilla.suse.com/1210298" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2254-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029463.html" source="SUSE-SU"/>
		<description>
This update for containerd fixes the following issues:

- Rebuild containerd with a current version of go to catch up on bugfixes and security fixes (bsc#1210298)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-19"/>
	<updated date="2023-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210298">SUSE bug 1210298</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009756834" comment="containerd-1.6.19-150000.90.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756835" comment="containerd-ctr-1.6.19-150000.90.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141254" version="1" class="patch">
	<metadata>
		<title>Security update for runc (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2256-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014929.html" source="SUSE-SU"/>
		<description>

This update of runc fixes the following issues:

- rebuild the package with the go 19.9 secure release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-19"/>
	<updated date="2023-05-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756727" comment="runc-1.1.5-150000.43.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141255" version="1" class="patch">
	<metadata>
		<title>Security update for python-Flask (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211246" ref_url="https://bugzilla.suse.com/1211246" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-30861" ref_url="https://www.suse.com/security/cve/CVE-2023-30861/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2264-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/014934.html" source="SUSE-SU"/>
		<description>
This update for python-Flask fixes the following issues:

- CVE-2023-30861: Fixed a potential cookie confusion due to incorrect
  caching (bsc#1211246).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-22"/>
	<updated date="2023-05-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211246">SUSE bug 1211246</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-30861/">CVE-2023-30861</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757456" comment="python3-Flask-1.0.2-150100.6.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141256" version="1" class="patch">
	<metadata>
		<title>Security update for geoipupdate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="1209658" ref_url="https://bugzilla.suse.com/1209658" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2273-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029477.html" source="SUSE-SU"/>
		<description>

This update of geoipupdate fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441 bsc#1209658).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-23"/>
	<updated date="2023-05-23"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209658">SUSE bug 1209658</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009757060" comment="geoipupdate-4.2.2-150000.1.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757061" comment="geoipupdate-legacy-4.2.2-150000.1.10.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141257" version="1" class="patch">
	<metadata>
		<title>Security update for cups-filters, poppler, texlive (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211340" ref_url="https://bugzilla.suse.com/1211340" source="BUGZILLA"/>
		<reference ref_id="1211389" ref_url="https://bugzilla.suse.com/1211389" source="BUGZILLA"/>
		<reference ref_id="1211450" ref_url="https://bugzilla.suse.com/1211450" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-24805" ref_url="https://www.suse.com/security/cve/CVE-2023-24805/" source="CVE"/>
		<reference ref_id="CVE-2023-32700" ref_url="https://www.suse.com/security/cve/CVE-2023-32700/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2287-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029509.html" source="SUSE-SU"/>
		<description>
This update for cups-filters, poppler, texlive fixes the following issues:

cups-filters:

- CVE-2023-24805: Fixed a remote code execution in the beh backend (bsc#1211340).

texlive:

- CVE-2023-32700: Fixed arbitrary code execution in LuaTeX (bsc#1211389).

poppler:

- Added missing header file goo/GooCheckedOps.h. Without it, other packages
  using poppler as a library might fail to compile since our public headers now
  depend on it. (bsc#1211450)

		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-24"/>
	<updated date="2023-05-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211340">SUSE bug 1211340</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211389">SUSE bug 1211389</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211450">SUSE bug 1211450</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-24805/">CVE-2023-24805</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-32700/">CVE-2023-32700</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009762869" comment="cups-filters-1.20.3-150000.3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762870" comment="cups-filters-devel-1.20.3-150000.3.10.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762871" comment="libkpathsea6-6.2.3-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762872" comment="libpoppler-cpp0-0.62.0-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762873" comment="libpoppler-devel-0.62.0-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762874" comment="libpoppler-glib-devel-0.62.0-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762875" comment="libpoppler-glib8-0.62.0-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761832" comment="libpoppler73-0.62.0-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762876" comment="libptexenc1-1.3.5-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762877" comment="libsynctex1-1.18-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762878" comment="libtexlua52-5-5.2.4-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761950" comment="libtexluajit2-2.1.0beta2-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761951" comment="perl-biber-2017.20170520.svn30357-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762879" comment="poppler-tools-0.62.0-150000.4.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762880" comment="texlive-2017.20170520-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762881" comment="texlive-a2ping-bin-2017.20170520.svn27321-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762882" comment="texlive-accfonts-bin-2017.20170520.svn12688-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762883" comment="texlive-adhocfilelist-bin-2017.20170520.svn28038-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762884" comment="texlive-afm2pl-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762885" comment="texlive-aleph-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762886" comment="texlive-amstex-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762887" comment="texlive-arara-bin-2017.20170520.svn29036-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762888" comment="texlive-asymptote-bin-2017.20170520.svn43843-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762889" comment="texlive-authorindex-bin-2017.20170520.svn18790-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762890" comment="texlive-autosp-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761964" comment="texlive-biber-bin-2017.20170520.svn42679-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762891" comment="texlive-bibexport-bin-2017.20170520.svn16219-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762892" comment="texlive-bibtex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762893" comment="texlive-bibtex8-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762894" comment="texlive-bibtexu-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762895" comment="texlive-bin-devel-2017.20170520-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762896" comment="texlive-bundledoc-bin-2017.20170520.svn17794-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762897" comment="texlive-cachepic-bin-2017.20170520.svn15543-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762898" comment="texlive-checkcites-bin-2017.20170520.svn25623-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762899" comment="texlive-checklistings-bin-2017.20170520.svn38300-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762900" comment="texlive-chktex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762901" comment="texlive-cjk-gs-integrate-bin-2017.20170520.svn37223-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762902" comment="texlive-cjkutils-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762903" comment="texlive-context-bin-2017.20170520.svn34112-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762904" comment="texlive-convbkmk-bin-2017.20170520.svn30408-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762905" comment="texlive-crossrefware-bin-2017.20170520.svn43866-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762906" comment="texlive-cslatex-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762907" comment="texlive-csplain-bin-2017.20170520.svn33902-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762908" comment="texlive-ctanify-bin-2017.20170520.svn24061-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762909" comment="texlive-ctanupload-bin-2017.20170520.svn23866-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762910" comment="texlive-ctie-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762911" comment="texlive-cweb-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762912" comment="texlive-cyrillic-bin-bin-2017.20170520.svn29741-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762913" comment="texlive-de-macro-bin-2017.20170520.svn17399-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762914" comment="texlive-detex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761989" comment="texlive-diadia-bin-2017.20170520.svn37645-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762915" comment="texlive-dosepsbin-bin-2017.20170520.svn24759-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762916" comment="texlive-dtl-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762917" comment="texlive-dtxgen-bin-2017.20170520.svn29031-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762918" comment="texlive-dviasm-bin-2017.20170520.svn8329-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762919" comment="texlive-dvicopy-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762920" comment="texlive-dvidvi-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762921" comment="texlive-dviinfox-bin-2017.20170520.svn44515-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762922" comment="texlive-dviljk-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762923" comment="texlive-dvipdfmx-bin-2017.20170520.svn40273-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762924" comment="texlive-dvipng-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762925" comment="texlive-dvipos-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762926" comment="texlive-dvips-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762927" comment="texlive-dvisvgm-bin-2017.20170520.svn40987-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762928" comment="texlive-ebong-bin-2017.20170520.svn21000-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762929" comment="texlive-eplain-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762930" comment="texlive-epspdf-bin-2017.20170520.svn29050-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762931" comment="texlive-epstopdf-bin-2017.20170520.svn18336-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762932" comment="texlive-exceltex-bin-2017.20170520.svn25860-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762933" comment="texlive-fig4latex-bin-2017.20170520.svn14752-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762934" comment="texlive-findhyph-bin-2017.20170520.svn14758-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762935" comment="texlive-fontinst-bin-2017.20170520.svn29741-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762936" comment="texlive-fontools-bin-2017.20170520.svn25997-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762937" comment="texlive-fontware-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762938" comment="texlive-fragmaster-bin-2017.20170520.svn13663-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762939" comment="texlive-getmap-bin-2017.20170520.svn34971-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762940" comment="texlive-glossaries-bin-2017.20170520.svn37813-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762941" comment="texlive-gregoriotex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762942" comment="texlive-gsftopk-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762943" comment="texlive-jadetex-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762944" comment="texlive-kotex-utils-bin-2017.20170520.svn32101-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762945" comment="texlive-kpathsea-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762946" comment="texlive-kpathsea-devel-6.2.3-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762947" comment="texlive-lacheck-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762948" comment="texlive-latex-bin-bin-2017.20170520.svn14050-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762949" comment="texlive-latex-git-log-bin-2017.20170520.svn30983-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762950" comment="texlive-latex-papersize-bin-2017.20170520.svn42296-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762951" comment="texlive-latex2man-bin-2017.20170520.svn13663-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762952" comment="texlive-latex2nemeth-bin-2017.20170520.svn42300-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762953" comment="texlive-latexdiff-bin-2017.20170520.svn16420-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762954" comment="texlive-latexfileversion-bin-2017.20170520.svn25012-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762955" comment="texlive-latexindent-bin-2017.20170520.svn32150-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762956" comment="texlive-latexmk-bin-2017.20170520.svn10937-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762957" comment="texlive-latexpand-bin-2017.20170520.svn27025-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762958" comment="texlive-lcdftypetools-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762959" comment="texlive-lilyglyphs-bin-2017.20170520.svn31696-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762960" comment="texlive-listbib-bin-2017.20170520.svn26126-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762961" comment="texlive-listings-ext-bin-2017.20170520.svn15093-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762962" comment="texlive-lollipop-bin-2017.20170520.svn41465-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762963" comment="texlive-ltxfileinfo-bin-2017.20170520.svn29005-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762964" comment="texlive-ltximg-bin-2017.20170520.svn32346-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762965" comment="texlive-lua2dox-bin-2017.20170520.svn29053-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762966" comment="texlive-luaotfload-bin-2017.20170520.svn34647-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762967" comment="texlive-luatex-bin-2017.20170520.svn44549-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762968" comment="texlive-lwarp-bin-2017.20170520.svn43292-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762969" comment="texlive-m-tx-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762970" comment="texlive-make4ht-bin-2017.20170520.svn37750-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762971" comment="texlive-makedtx-bin-2017.20170520.svn38769-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762972" comment="texlive-makeindex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762973" comment="texlive-match_parens-bin-2017.20170520.svn23500-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762974" comment="texlive-mathspic-bin-2017.20170520.svn23661-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762975" comment="texlive-metafont-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762976" comment="texlive-metapost-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762977" comment="texlive-mex-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762978" comment="texlive-mf2pt1-bin-2017.20170520.svn23406-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762979" comment="texlive-mflua-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762980" comment="texlive-mfware-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762981" comment="texlive-mkgrkindex-bin-2017.20170520.svn14428-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762982" comment="texlive-mkjobtexmf-bin-2017.20170520.svn8457-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762983" comment="texlive-mkpic-bin-2017.20170520.svn33688-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762984" comment="texlive-mltex-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762985" comment="texlive-mptopdf-bin-2017.20170520.svn18674-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762986" comment="texlive-multibibliography-bin-2017.20170520.svn30534-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762987" comment="texlive-musixtex-bin-2017.20170520.svn37026-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762988" comment="texlive-musixtnt-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762989" comment="texlive-omegaware-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762990" comment="texlive-patgen-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762991" comment="texlive-pax-bin-2017.20170520.svn10843-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762992" comment="texlive-pdfbook2-bin-2017.20170520.svn37537-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762993" comment="texlive-pdfcrop-bin-2017.20170520.svn14387-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762994" comment="texlive-pdfjam-bin-2017.20170520.svn17868-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762995" comment="texlive-pdflatexpicscale-bin-2017.20170520.svn41779-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762996" comment="texlive-pdftex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762997" comment="texlive-pdftools-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762998" comment="texlive-pdfxup-bin-2017.20170520.svn40690-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762999" comment="texlive-pedigree-perl-bin-2017.20170520.svn25962-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763000" comment="texlive-perltex-bin-2017.20170520.svn16181-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763001" comment="texlive-petri-nets-bin-2017.20170520.svn39165-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763002" comment="texlive-pfarrei-bin-2017.20170520.svn29348-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763003" comment="texlive-pkfix-bin-2017.20170520.svn13364-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763004" comment="texlive-pkfix-helper-bin-2017.20170520.svn13663-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763005" comment="texlive-platex-bin-2017.20170520.svn22859-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763006" comment="texlive-pmx-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763007" comment="texlive-pmxchords-bin-2017.20170520.svn32405-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763008" comment="texlive-ps2pk-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763009" comment="texlive-pst-pdf-bin-2017.20170520.svn7838-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763010" comment="texlive-pst2pdf-bin-2017.20170520.svn29333-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763011" comment="texlive-pstools-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763012" comment="texlive-ptex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763013" comment="texlive-ptex-fontmaps-bin-2017.20170520.svn44206-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763014" comment="texlive-ptex2pdf-bin-2017.20170520.svn29335-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763015" comment="texlive-ptexenc-devel-1.3.5-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763016" comment="texlive-purifyeps-bin-2017.20170520.svn13663-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763017" comment="texlive-pygmentex-bin-2017.20170520.svn34996-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763018" comment="texlive-pythontex-bin-2017.20170520.svn31638-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763019" comment="texlive-rubik-bin-2017.20170520.svn32919-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763020" comment="texlive-seetexk-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763021" comment="texlive-splitindex-bin-2017.20170520.svn29688-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763022" comment="texlive-srcredact-bin-2017.20170520.svn38710-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763023" comment="texlive-sty2dtx-bin-2017.20170520.svn21215-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763024" comment="texlive-svn-multi-bin-2017.20170520.svn13663-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763025" comment="texlive-synctex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763026" comment="texlive-synctex-devel-1.18-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763027" comment="texlive-tetex-bin-2017.20170520.svn43957-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763028" comment="texlive-tex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763029" comment="texlive-tex4ebook-bin-2017.20170520.svn37771-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763030" comment="texlive-tex4ht-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763031" comment="texlive-texconfig-bin-2017.20170520.svn29741-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763032" comment="texlive-texcount-bin-2017.20170520.svn13013-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763033" comment="texlive-texdef-bin-2017.20170520.svn21802-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763034" comment="texlive-texdiff-bin-2017.20170520.svn15506-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763035" comment="texlive-texdirflatten-bin-2017.20170520.svn12782-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763036" comment="texlive-texdoc-bin-2017.20170520.svn29741-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763037" comment="texlive-texfot-bin-2017.20170520.svn33155-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763038" comment="texlive-texliveonfly-bin-2017.20170520.svn24062-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763039" comment="texlive-texloganalyser-bin-2017.20170520.svn13663-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763040" comment="texlive-texlua-devel-5.2.4-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009762116" comment="texlive-texluajit-devel-2.1.0beta2-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763041" comment="texlive-texosquery-bin-2017.20170520.svn43596-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763042" comment="texlive-texsis-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763043" comment="texlive-texware-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763044" comment="texlive-thumbpdf-bin-2017.20170520.svn6898-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763045" comment="texlive-tie-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763046" comment="texlive-tpic2pdftex-bin-2017.20170520.svn29741-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763047" comment="texlive-ttfutils-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763048" comment="texlive-typeoutfileinfo-bin-2017.20170520.svn25648-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763049" comment="texlive-ulqda-bin-2017.20170520.svn13663-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763050" comment="texlive-uplatex-bin-2017.20170520.svn26326-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763051" comment="texlive-uptex-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763052" comment="texlive-urlbst-bin-2017.20170520.svn23262-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763053" comment="texlive-velthuis-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763054" comment="texlive-vlna-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763055" comment="texlive-vpe-bin-2017.20170520.svn6897-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763056" comment="texlive-web-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763057" comment="texlive-xdvi-bin-2017.20170520.svn44143-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763058" comment="texlive-xetex-bin-2017.20170520.svn44361-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763059" comment="texlive-xmltex-bin-2017.20170520.svn3006-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763060" comment="texlive-yplan-bin-2017.20170520.svn34398-150000.11.20.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763061" comment="typelib-1_0-Poppler-0_18-0.62.0-150000.4.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141258" version="1" class="patch">
	<metadata>
		<title>Security update for rmt-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1202053" ref_url="https://bugzilla.suse.com/1202053" source="BUGZILLA"/>
		<reference ref_id="1203171" ref_url="https://bugzilla.suse.com/1203171" source="BUGZILLA"/>
		<reference ref_id="1206593" ref_url="https://bugzilla.suse.com/1206593" source="BUGZILLA"/>
		<reference ref_id="1207670" ref_url="https://bugzilla.suse.com/1207670" source="BUGZILLA"/>
		<reference ref_id="1209096" ref_url="https://bugzilla.suse.com/1209096" source="BUGZILLA"/>
		<reference ref_id="1209507" ref_url="https://bugzilla.suse.com/1209507" source="BUGZILLA"/>
		<reference ref_id="1209825" ref_url="https://bugzilla.suse.com/1209825" source="BUGZILLA"/>
		<reference ref_id="1211398" ref_url="https://bugzilla.suse.com/1211398" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-27530" ref_url="https://www.suse.com/security/cve/CVE-2023-27530/" source="CVE"/>
		<reference ref_id="CVE-2023-28120" ref_url="https://www.suse.com/security/cve/CVE-2023-28120/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2304-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/015002.html" source="SUSE-SU"/>
		<description>
This update for rmt-server fixes the following issues:

Updated to version 2.13:

- CVE-2023-28120: Fixed a potential XSS issue in an embedded
  dependency (bsc#1209507).
- CVE-2023-27530: Fixed a denial of service issue in multipart request
  parsing (bsc#1209096).

Non-security fixes:

- Fixed transactional update on GCE (bsc#1211398).
- Use HTTPS in rmt-client-setup-res (bsc#1209825).
- Various build fixes (bsc#1207670, bsc#1203171, bsc#1206593,
  bsc#1202053).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-25"/>
	<updated date="2023-05-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1202053">SUSE bug 1202053</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203171">SUSE bug 1203171</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206593">SUSE bug 1206593</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207670">SUSE bug 1207670</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209096">SUSE bug 1209096</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209507">SUSE bug 1209507</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209825">SUSE bug 1209825</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211398">SUSE bug 1211398</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-27530/">CVE-2023-27530</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-28120/">CVE-2023-28120</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009763411" comment="rmt-server-2.13-150100.3.45.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763412" comment="rmt-server-config-2.13-150100.3.45.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141259" version="1" class="patch">
	<metadata>
		<title>Security update for c-ares (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211604" ref_url="https://bugzilla.suse.com/1211604" source="BUGZILLA"/>
		<reference ref_id="1211605" ref_url="https://bugzilla.suse.com/1211605" source="BUGZILLA"/>
		<reference ref_id="1211606" ref_url="https://bugzilla.suse.com/1211606" source="BUGZILLA"/>
		<reference ref_id="1211607" ref_url="https://bugzilla.suse.com/1211607" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-31124" ref_url="https://www.suse.com/security/cve/CVE-2023-31124/" source="CVE"/>
		<reference ref_id="CVE-2023-31130" ref_url="https://www.suse.com/security/cve/CVE-2023-31130/" source="CVE"/>
		<reference ref_id="CVE-2023-31147" ref_url="https://www.suse.com/security/cve/CVE-2023-31147/" source="CVE"/>
		<reference ref_id="CVE-2023-32067" ref_url="https://www.suse.com/security/cve/CVE-2023-32067/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2313-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/015004.html" source="SUSE-SU"/>
		<description>
This update for c-ares fixes the following issues:

Update to version 1.19.1:

- CVE-2023-32067: 0-byte UDP payload causes Denial of Service (bsc#1211604)
- CVE-2023-31147: Insufficient randomness in generation of DNS query IDs (bsc#1211605)
- CVE-2023-31130: Buffer Underwrite in ares_inet_net_pton() (bsc#1211606)
- CVE-2023-31124: AutoTools does not set CARES_RANDOM_FILE during cross compilation (bsc#1211607)
- Fix uninitialized memory warning in test
- ares_getaddrinfo() should allow a port of 0
- Fix memory leak in ares_send() on error
- Fix comment style in ares_data.h
- Fix typo in ares_init_options.3
- Sync ax_pthread.m4 with upstream
- Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support 
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-30"/>
	<updated date="2023-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211604">SUSE bug 1211604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211605">SUSE bug 1211605</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211606">SUSE bug 1211606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211607">SUSE bug 1211607</bugzilla>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-31124/">CVE-2023-31124</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-31130/">CVE-2023-31130</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-31147/">CVE-2023-31147</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32067/">CVE-2023-32067</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009761834" comment="c-ares-devel-1.19.1-150000.3.23.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009761836" comment="libcares2-1.19.1-150000.3.23.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141260" version="1" class="patch">
	<metadata>
		<title>Security update for cni-plugins (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2324-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029575.html" source="SUSE-SU"/>
		<description>

This update of cni-plugins fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-30"/>
	<updated date="2023-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756837" comment="cni-plugins-0.8.6-150100.3.13.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141261" version="1" class="patch">
	<metadata>
		<title>Security update for cni (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1200441" ref_url="https://bugzilla.suse.com/1200441" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2325-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029574.html" source="SUSE-SU"/>
		<description>

This update of cni fixes the following issues:

- rebuild the package with the go 1.19 security release (bsc#1200441).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-30"/>
	<updated date="2023-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1200441">SUSE bug 1200441</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009756836" comment="cni-0.7.1-150100.3.10.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141262" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211430" ref_url="https://bugzilla.suse.com/1211430" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2650" ref_url="https://www.suse.com/security/cve/CVE-2023-2650/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2327-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-May/029572.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-30"/>
	<updated date="2023-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211430">SUSE bug 1211430</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-2650/">CVE-2023-2650</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009763924" comment="libopenssl-1_1-devel-1.1.0i-150100.14.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763918" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763925" comment="libopenssl1_1-1.1.0i-150100.14.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763920" comment="libopenssl1_1-32bit-1.1.0i-150100.14.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763926" comment="libopenssl1_1-hmac-1.1.0i-150100.14.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763922" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.51.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763927" comment="openssl-1_1-1.1.0i-150100.14.51.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141263" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211430" ref_url="https://bugzilla.suse.com/1211430" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2650" ref_url="https://www.suse.com/security/cve/CVE-2023-2650/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2331-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-May/015007.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

- CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-05-30"/>
	<updated date="2023-05-30"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211430">SUSE bug 1211430</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-2650/">CVE-2023-2650</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009763699" comment="libopenssl-1_0_0-devel-1.0.2p-150000.3.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763702" comment="libopenssl1_0_0-1.0.2p-150000.3.76.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763708" comment="openssl-1_0_0-1.0.2p-150000.3.76.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141264" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211643" ref_url="https://bugzilla.suse.com/1211643" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-32324" ref_url="https://www.suse.com/security/cve/CVE-2023-32324/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2347-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029664.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:

- CVE-2023-32324: Fixed a buffer overflow in format_log_line() which could cause a denial-of-service (bsc#1211643).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-01"/>
	<updated date="2023-06-01"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211643">SUSE bug 1211643</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32324/">CVE-2023-32324</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009764083" comment="cups-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764084" comment="cups-client-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764085" comment="cups-config-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764086" comment="cups-ddk-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764087" comment="cups-devel-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764089" comment="libcups2-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764090" comment="libcups2-32bit-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764091" comment="libcupscgi1-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764093" comment="libcupsimage2-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764095" comment="libcupsmime1-2.2.7-150000.3.43.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764097" comment="libcupsppdc1-2.2.7-150000.3.43.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141265" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211922" ref_url="https://bugzilla.suse.com/1211922" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-34414" ref_url="https://www.suse.com/security/cve/CVE-2023-34414/" source="CVE"/>
		<reference ref_id="CVE-2023-34416" ref_url="https://www.suse.com/security/cve/CVE-2023-34416/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2440-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029768.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Extended Support Release 102.12.0 ESR (bsc#1211922):

- CVE-2023-34414: Click-jacking certificate exceptions through rendering lag
- CVE-2023-34416: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-07"/>
	<updated date="2023-06-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211922">SUSE bug 1211922</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-34414/">CVE-2023-34414</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-34416/">CVE-2023-34416</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009764837" comment="MozillaFirefox-102.12.0-150000.150.88.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764838" comment="MozillaFirefox-devel-102.12.0-150000.150.88.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764839" comment="MozillaFirefox-translations-common-102.12.0-150000.150.88.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764840" comment="MozillaFirefox-translations-other-102.12.0-150000.150.88.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141266" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210628" ref_url="https://bugzilla.suse.com/1210628" source="BUGZILLA"/>
		<reference ref_id="1210631" ref_url="https://bugzilla.suse.com/1210631" source="BUGZILLA"/>
		<reference ref_id="1210632" ref_url="https://bugzilla.suse.com/1210632" source="BUGZILLA"/>
		<reference ref_id="1210634" ref_url="https://bugzilla.suse.com/1210634" source="BUGZILLA"/>
		<reference ref_id="1210635" ref_url="https://bugzilla.suse.com/1210635" source="BUGZILLA"/>
		<reference ref_id="1210636" ref_url="https://bugzilla.suse.com/1210636" source="BUGZILLA"/>
		<reference ref_id="1210637" ref_url="https://bugzilla.suse.com/1210637" source="BUGZILLA"/>
		<reference ref_id="1210711" ref_url="https://bugzilla.suse.com/1210711" source="BUGZILLA"/>
		<reference ref_id="1210826" ref_url="https://bugzilla.suse.com/1210826" source="BUGZILLA"/>
		<reference ref_id="1211615" ref_url="https://bugzilla.suse.com/1211615" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-21930" ref_url="https://www.suse.com/security/cve/CVE-2023-21930/" source="CVE"/>
		<reference ref_id="CVE-2023-21937" ref_url="https://www.suse.com/security/cve/CVE-2023-21937/" source="CVE"/>
		<reference ref_id="CVE-2023-21938" ref_url="https://www.suse.com/security/cve/CVE-2023-21938/" source="CVE"/>
		<reference ref_id="CVE-2023-21939" ref_url="https://www.suse.com/security/cve/CVE-2023-21939/" source="CVE"/>
		<reference ref_id="CVE-2023-21954" ref_url="https://www.suse.com/security/cve/CVE-2023-21954/" source="CVE"/>
		<reference ref_id="CVE-2023-21967" ref_url="https://www.suse.com/security/cve/CVE-2023-21967/" source="CVE"/>
		<reference ref_id="CVE-2023-21968" ref_url="https://www.suse.com/security/cve/CVE-2023-21968/" source="CVE"/>
		<reference ref_id="CVE-2023-2597" ref_url="https://www.suse.com/security/cve/CVE-2023-2597/" source="CVE"/>
		<reference ref_id="CVE-2023-30441" ref_url="https://www.suse.com/security/cve/CVE-2023-30441/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2491-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015172.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

- CVE-2023-21930: Fixed possible compromise from unauthenticated attacker with network access via TLS (bsc#1210628).
- CVE-2023-21937: Fixed vulnerability inside the networking component (bsc#1210631).
- CVE-2023-21938: Fixed vulnerability inside the library component (bsc#1210632).
- CVE-2023-21939: Fixed vulnerability inside the swing component (bsc#1210634).
- CVE-2023-21968: Fixed vulnerability inside the library component (bsc#1210637).
- CVE-2023-2597: Fixed buffer overflow in shared cache implementation (bsc#1211615).
- CVE-2023-21967: Fixed vulnerability inside the JSSE component (bsc#1210636).
- CVE-2023-21954: Fixed vulnerability inside the hotspot component (bsc#1210635).

Additional reference fixed already in 8.0.7.15:

- CVE-2023-30441: Fixed components that could have exposed sensitive information using a combination of flaws and configurations (bsc#1210711).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-13"/>
	<updated date="2023-06-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210628">SUSE bug 1210628</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210631">SUSE bug 1210631</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210632">SUSE bug 1210632</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210634">SUSE bug 1210634</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210635">SUSE bug 1210635</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210636">SUSE bug 1210636</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210637">SUSE bug 1210637</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210711">SUSE bug 1210711</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210826">SUSE bug 1210826</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211615">SUSE bug 1211615</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-21930/">CVE-2023-21930</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21937/">CVE-2023-21937</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21938/">CVE-2023-21938</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21939/">CVE-2023-21939</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-21954/">CVE-2023-21954</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-21967/">CVE-2023-21967</cve>
	<cve impact="low" cvss3="3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-21968/">CVE-2023-21968</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2597/">CVE-2023-2597</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-30441/">CVE-2023-30441</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009765043" comment="java-1_8_0-ibm-1.8.0_sr8.5-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765045" comment="java-1_8_0-ibm-alsa-1.8.0_sr8.5-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765047" comment="java-1_8_0-ibm-devel-1.8.0_sr8.5-150000.3.74.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765049" comment="java-1_8_0-ibm-plugin-1.8.0_sr8.5-150000.3.74.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141267" version="1" class="patch">
	<metadata>
		<title>Security update for tomcat (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211608" ref_url="https://bugzilla.suse.com/1211608" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28709" ref_url="https://www.suse.com/security/cve/CVE-2023-28709/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2504-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-June/015175.html" source="SUSE-SU"/>
		<description>
This update for tomcat fixes the following issues:

- CVE-2023-28709: Mended an incomplete fix for CVE-2023-24998 (bsc#1211608).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-13"/>
	<updated date="2023-06-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1211608">SUSE bug 1211608</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-28709/">CVE-2023-28709</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009763673" comment="tomcat-9.0.36-150100.4.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763674" comment="tomcat-admin-webapps-9.0.36-150100.4.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763675" comment="tomcat-el-3_0-api-9.0.36-150100.4.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763676" comment="tomcat-jsp-2_3-api-9.0.36-150100.4.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763677" comment="tomcat-lib-9.0.36-150100.4.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763678" comment="tomcat-servlet-4_0-api-9.0.36-150100.4.93.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009763679" comment="tomcat-webapps-9.0.36-150100.4.93.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141268" version="1" class="patch">
	<metadata>
		<title>Security update for bluez (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210398" ref_url="https://bugzilla.suse.com/1210398" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-27349" ref_url="https://www.suse.com/security/cve/CVE-2023-27349/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2533-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029922.html" source="SUSE-SU"/>
		<description>
This update for bluez fixes the following issues:

- CVE-2023-27349: Fixed crash while handling unsupported events (bsc#1210398).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-19"/>
	<updated date="2023-06-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210398">SUSE bug 1210398</bugzilla>
	<cve impact="important" cvss3="8/CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-27349/">CVE-2023-27349</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009767968" comment="bluez-5.48-150000.5.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767969" comment="bluez-devel-5.48-150000.5.49.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767970" comment="libbluetooth3-5.48-150000.5.49.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141269" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1172073" ref_url="https://bugzilla.suse.com/1172073" source="BUGZILLA"/>
		<reference ref_id="1191731" ref_url="https://bugzilla.suse.com/1191731" source="BUGZILLA"/>
		<reference ref_id="1199046" ref_url="https://bugzilla.suse.com/1199046" source="BUGZILLA"/>
		<reference ref_id="1204405" ref_url="https://bugzilla.suse.com/1204405" source="BUGZILLA"/>
		<reference ref_id="1205756" ref_url="https://bugzilla.suse.com/1205756" source="BUGZILLA"/>
		<reference ref_id="1205758" ref_url="https://bugzilla.suse.com/1205758" source="BUGZILLA"/>
		<reference ref_id="1205760" ref_url="https://bugzilla.suse.com/1205760" source="BUGZILLA"/>
		<reference ref_id="1205762" ref_url="https://bugzilla.suse.com/1205762" source="BUGZILLA"/>
		<reference ref_id="1205803" ref_url="https://bugzilla.suse.com/1205803" source="BUGZILLA"/>
		<reference ref_id="1206878" ref_url="https://bugzilla.suse.com/1206878" source="BUGZILLA"/>
		<reference ref_id="1208600" ref_url="https://bugzilla.suse.com/1208600" source="BUGZILLA"/>
		<reference ref_id="1209287" ref_url="https://bugzilla.suse.com/1209287" source="BUGZILLA"/>
		<reference ref_id="1209366" ref_url="https://bugzilla.suse.com/1209366" source="BUGZILLA"/>
		<reference ref_id="1210629" ref_url="https://bugzilla.suse.com/1210629" source="BUGZILLA"/>
		<reference ref_id="1210715" ref_url="https://bugzilla.suse.com/1210715" source="BUGZILLA"/>
		<reference ref_id="1210783" ref_url="https://bugzilla.suse.com/1210783" source="BUGZILLA"/>
		<reference ref_id="1210791" ref_url="https://bugzilla.suse.com/1210791" source="BUGZILLA"/>
		<reference ref_id="1210940" ref_url="https://bugzilla.suse.com/1210940" source="BUGZILLA"/>
		<reference ref_id="1211037" ref_url="https://bugzilla.suse.com/1211037" source="BUGZILLA"/>
		<reference ref_id="1211089" ref_url="https://bugzilla.suse.com/1211089" source="BUGZILLA"/>
		<reference ref_id="1211105" ref_url="https://bugzilla.suse.com/1211105" source="BUGZILLA"/>
		<reference ref_id="1211186" ref_url="https://bugzilla.suse.com/1211186" source="BUGZILLA"/>
		<reference ref_id="1211519" ref_url="https://bugzilla.suse.com/1211519" source="BUGZILLA"/>
		<reference ref_id="1211592" ref_url="https://bugzilla.suse.com/1211592" source="BUGZILLA"/>
		<reference ref_id="1211622" ref_url="https://bugzilla.suse.com/1211622" source="BUGZILLA"/>
		<reference ref_id="1211796" ref_url="https://bugzilla.suse.com/1211796" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-3566" ref_url="https://www.suse.com/security/cve/CVE-2022-3566/" source="CVE"/>
		<reference ref_id="CVE-2022-45884" ref_url="https://www.suse.com/security/cve/CVE-2022-45884/" source="CVE"/>
		<reference ref_id="CVE-2022-45885" ref_url="https://www.suse.com/security/cve/CVE-2022-45885/" source="CVE"/>
		<reference ref_id="CVE-2022-45886" ref_url="https://www.suse.com/security/cve/CVE-2022-45886/" source="CVE"/>
		<reference ref_id="CVE-2022-45887" ref_url="https://www.suse.com/security/cve/CVE-2022-45887/" source="CVE"/>
		<reference ref_id="CVE-2022-45919" ref_url="https://www.suse.com/security/cve/CVE-2022-45919/" source="CVE"/>
		<reference ref_id="CVE-2023-1077" ref_url="https://www.suse.com/security/cve/CVE-2023-1077/" source="CVE"/>
		<reference ref_id="CVE-2023-1380" ref_url="https://www.suse.com/security/cve/CVE-2023-1380/" source="CVE"/>
		<reference ref_id="CVE-2023-2176" ref_url="https://www.suse.com/security/cve/CVE-2023-2176/" source="CVE"/>
		<reference ref_id="CVE-2023-2194" ref_url="https://www.suse.com/security/cve/CVE-2023-2194/" source="CVE"/>
		<reference ref_id="CVE-2023-2483" ref_url="https://www.suse.com/security/cve/CVE-2023-2483/" source="CVE"/>
		<reference ref_id="CVE-2023-2513" ref_url="https://www.suse.com/security/cve/CVE-2023-2513/" source="CVE"/>
		<reference ref_id="CVE-2023-28466" ref_url="https://www.suse.com/security/cve/CVE-2023-28466/" source="CVE"/>
		<reference ref_id="CVE-2023-31084" ref_url="https://www.suse.com/security/cve/CVE-2023-31084/" source="CVE"/>
		<reference ref_id="CVE-2023-31436" ref_url="https://www.suse.com/security/cve/CVE-2023-31436/" source="CVE"/>
		<reference ref_id="CVE-2023-32269" ref_url="https://www.suse.com/security/cve/CVE-2023-32269/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2534-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029918.html" source="SUSE-SU"/>
		<description>
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).
- CVE-2022-3566: Fixed race condition in the TCP Handler (bsc#1204405).
- CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760).
- CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758).
- CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762).
- CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803).
- CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756).
- CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783).
- CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940).
- CVE-2023-2194: Fixed an out-of-bounds write vulnerability in the SLIMpro I2C device driver (bsc#1210715).
- CVE-2023-32269: Fixed a use-after-free in af_netrom.c, related to the fact that accept() was also allowed for a successfully connected AF_NETROM socket (bsc#1211186).
- CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366).
- CVE-2023-1380: Fixed a slab-out-of-bound read problem in brcmf_get_assoc_ies() (bsc#1209287).
- CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105).
- CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037).
- CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629).

The following non-security bugs were fixed:

- ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519).
- gve: Fix spelling mistake 'droping' -&gt; 'dropping' (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519).
- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592).
- kernel-binary: install expoline.o (boo#1210791 bsc#1211089)
- scsi: storvsc: Parameterize number hardware queues (bsc#1211622).
- usrmerge: Compatibility with earlier rpm (boo#1211796)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-19"/>
	<updated date="2023-06-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1172073">SUSE bug 1172073</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1191731">SUSE bug 1191731</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199046">SUSE bug 1199046</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204405">SUSE bug 1204405</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205756">SUSE bug 1205756</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205758">SUSE bug 1205758</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205760">SUSE bug 1205760</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205762">SUSE bug 1205762</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1205803">SUSE bug 1205803</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206878">SUSE bug 1206878</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208600">SUSE bug 1208600</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209287">SUSE bug 1209287</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209366">SUSE bug 1209366</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210629">SUSE bug 1210629</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210715">SUSE bug 1210715</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210783">SUSE bug 1210783</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210791">SUSE bug 1210791</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210940">SUSE bug 1210940</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211037">SUSE bug 1211037</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211089">SUSE bug 1211089</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211105">SUSE bug 1211105</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211186">SUSE bug 1211186</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211519">SUSE bug 1211519</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211592">SUSE bug 1211592</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211622">SUSE bug 1211622</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211796">SUSE bug 1211796</bugzilla>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3566/">CVE-2022-3566</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45884/">CVE-2022-45884</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45885/">CVE-2022-45885</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45886/">CVE-2022-45886</cve>
	<cve impact="moderate" cvss3="4.1/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-45887/">CVE-2022-45887</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-45919/">CVE-2022-45919</cve>
	<cve impact="important" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1077/">CVE-2023-1077</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-1380/">CVE-2023-1380</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2176/">CVE-2023-2176</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2023-2194/">CVE-2023-2194</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2483/">CVE-2023-2483</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2513/">CVE-2023-2513</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-28466/">CVE-2023-28466</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-31084/">CVE-2023-31084</cve>
	<cve impact="moderate" cvss3="7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-31436/">CVE-2023-31436</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-32269/">CVE-2023-32269</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009767971" comment="kernel-default-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767972" comment="kernel-default-base-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767973" comment="kernel-default-devel-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765058" comment="kernel-default-man-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765136" comment="kernel-devel-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765137" comment="kernel-docs-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765138" comment="kernel-macros-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767974" comment="kernel-obs-build-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009765140" comment="kernel-source-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767975" comment="kernel-syms-4.12.14-150100.197.148.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767976" comment="reiserfs-kmp-default-4.12.14-150100.197.148.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141270" version="1" class="patch">
	<metadata>
		<title>Security update for Salt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207071" ref_url="https://bugzilla.suse.com/1207071" source="BUGZILLA"/>
		<reference ref_id="1209233" ref_url="https://bugzilla.suse.com/1209233" source="BUGZILLA"/>
		<reference ref_id="1211612" ref_url="https://bugzilla.suse.com/1211612" source="BUGZILLA"/>
		<reference ref_id="1211754" ref_url="https://bugzilla.suse.com/1211754" source="BUGZILLA"/>
		<reference ref_id="1212516" ref_url="https://bugzilla.suse.com/1212516" source="BUGZILLA"/>
		<reference ref_id="1212517" ref_url="https://bugzilla.suse.com/1212517" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2571-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029957.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

salt:

- Update to Salt release version 3006.0 (jsc#PED-4361)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for 'importlib-metadata&gt;=5.0.0' (bsc#1207071)
- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix package build with old setuptools versions
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517)
    
python-jmespath:
    
- Deliver python3-jmespath to SUSE Linux Enterprise Micro on s390x architecture as it is now required by Salt
  (no source changes)
    
python-ply:
    
- Deliver python3-ply to SUSE Linux Enterprise Micro on s390x architecture as it is a requirement for python-jmespath
  (no source changes)
 		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-21"/>
	<updated date="2023-06-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1207071">SUSE bug 1207071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209233">SUSE bug 1209233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211612">SUSE bug 1211612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211754">SUSE bug 1211754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212516">SUSE bug 1212516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212517">SUSE bug 1212517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009767953" comment="python2-ply-3.10-150000.3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767684" comment="python3-jmespath-0.9.3-150000.3.3.4 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767685" comment="python3-ply-3.10-150000.3.3.4 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141271" version="1" class="patch">
	<metadata>
		<title>Security update for SUSE Manager Client Tools (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1192154" ref_url="https://bugzilla.suse.com/1192154" source="BUGZILLA"/>
		<reference ref_id="1192696" ref_url="https://bugzilla.suse.com/1192696" source="BUGZILLA"/>
		<reference ref_id="1200480" ref_url="https://bugzilla.suse.com/1200480" source="BUGZILLA"/>
		<reference ref_id="1201535" ref_url="https://bugzilla.suse.com/1201535" source="BUGZILLA"/>
		<reference ref_id="1201539" ref_url="https://bugzilla.suse.com/1201539" source="BUGZILLA"/>
		<reference ref_id="1203185" ref_url="https://bugzilla.suse.com/1203185" source="BUGZILLA"/>
		<reference ref_id="1203596" ref_url="https://bugzilla.suse.com/1203596" source="BUGZILLA"/>
		<reference ref_id="1203597" ref_url="https://bugzilla.suse.com/1203597" source="BUGZILLA"/>
		<reference ref_id="1203599" ref_url="https://bugzilla.suse.com/1203599" source="BUGZILLA"/>
		<reference ref_id="1204501" ref_url="https://bugzilla.suse.com/1204501" source="BUGZILLA"/>
		<reference ref_id="1207830" ref_url="https://bugzilla.suse.com/1207830" source="BUGZILLA"/>
		<reference ref_id="1208719" ref_url="https://bugzilla.suse.com/1208719" source="BUGZILLA"/>
		<reference ref_id="1209645" ref_url="https://bugzilla.suse.com/1209645" source="BUGZILLA"/>
		<reference ref_id="1210458" ref_url="https://bugzilla.suse.com/1210458" source="BUGZILLA"/>
		<reference ref_id="1210640" ref_url="https://bugzilla.suse.com/1210640" source="BUGZILLA"/>
		<reference ref_id="1210907" ref_url="https://bugzilla.suse.com/1210907" source="BUGZILLA"/>
		<reference ref_id="CVE-2020-7753" ref_url="https://www.suse.com/security/cve/CVE-2020-7753/" source="CVE"/>
		<reference ref_id="CVE-2021-3807" ref_url="https://www.suse.com/security/cve/CVE-2021-3807/" source="CVE"/>
		<reference ref_id="CVE-2021-3918" ref_url="https://www.suse.com/security/cve/CVE-2021-3918/" source="CVE"/>
		<reference ref_id="CVE-2021-43138" ref_url="https://www.suse.com/security/cve/CVE-2021-43138/" source="CVE"/>
		<reference ref_id="CVE-2022-0155" ref_url="https://www.suse.com/security/cve/CVE-2022-0155/" source="CVE"/>
		<reference ref_id="CVE-2022-27664" ref_url="https://www.suse.com/security/cve/CVE-2022-27664/" source="CVE"/>
		<reference ref_id="CVE-2022-31097" ref_url="https://www.suse.com/security/cve/CVE-2022-31097/" source="CVE"/>
		<reference ref_id="CVE-2022-31107" ref_url="https://www.suse.com/security/cve/CVE-2022-31107/" source="CVE"/>
		<reference ref_id="CVE-2022-32149" ref_url="https://www.suse.com/security/cve/CVE-2022-32149/" source="CVE"/>
		<reference ref_id="CVE-2022-35957" ref_url="https://www.suse.com/security/cve/CVE-2022-35957/" source="CVE"/>
		<reference ref_id="CVE-2022-36062" ref_url="https://www.suse.com/security/cve/CVE-2022-36062/" source="CVE"/>
		<reference ref_id="CVE-2022-41715" ref_url="https://www.suse.com/security/cve/CVE-2022-41715/" source="CVE"/>
		<reference ref_id="CVE-2022-46146" ref_url="https://www.suse.com/security/cve/CVE-2022-46146/" source="CVE"/>
		<reference ref_id="CVE-2023-1387" ref_url="https://www.suse.com/security/cve/CVE-2023-1387/" source="CVE"/>
		<reference ref_id="CVE-2023-1410" ref_url="https://www.suse.com/security/cve/CVE-2023-1410/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2578-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029951.html" source="SUSE-SU"/>
		<description>
This update fixes the following issues:

bind:

- Provide bind dependencies and solve installation issues on SUSE Linux Enterprise Micro
- There are no source changes    
    
dracut-saltboot:

- Update to version 0.1.1681904360.84ef141 
  * Load network configuration even when missing protocol version (bsc#1210640)

grafana:
    
- Version update from 8.5.22 to 9.5.1 (jsc#PED-3694):
  * Security fixes:
    - CVE-2023-1410: grafana: Stored XSS in Graphite FunctionDescription tooltip (bsc#1209645)
    - CVE-2023-1387: grafana: JWT URL-login flow leaks token to data sources through request parameter in proxy requests
      (bnc#1210907)
    - CVE-2022-36062: grafana: Fix RBAC folders/dashboards privilege escalation (bsc#1203596)
    - CVE-2022-35957: grafana: Escalation from admin to server admin when auth proxy is used (bsc#1203597)
    - CVE-2022-32149: Upgrade x/text to version unaffected by CVE-2022-32149 (bsc#1204501)
    - CVE-2022-31107: grafana: OAuth account takeover (bsc#1201539)
    - CVE-2022-31097: grafana: stored XSS vulnerability (bsc#1201535)
    - CVE-2022-27664: go1.18,go1.19: net/http: handle server errors after sending GOAWAY (bsc#1203185)
    - CVE-2022-0155: follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor
    - CVE-2021-43138: spacewalk-web: a malicious user can obtain privileges via the mapValues() method(bsc#1200480)
    - CVE-2021-3918: json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes
      ('Prototype Pollution') (bsc#1192696)
    - CVE-2021-3807: node-ansi-regex: Inefficient Regular Expression Complexity in chalk/ansi-regex (bsc#1192154)
    - CVE-2020-7753: nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function 
  * Important changes:
    - Default named retention policies won't be used to query.
      Users who have a default named retention policy in their influxdb database, have to rename it to something else.
      To change the hardcoded retention policy in the dashboard.json, users must then select the right retention policy
      from dropdown and save the panel/dashboard.
    - Grafana Alerting rules with NoDataState configuration set to Alerting will now respect 'For' duration.
    - Users who use LDAP role sync to only sync Viewer, Editor and Admin roles, but grant Grafana Server Admin role
      manually will not be able to do that anymore. After this change, LDAP role sync will override any manual changes
      to Grafana Server Admin role assignments. If grafana_admin is left unset in LDAP role mapping configuration, it
      will default to false.
    - The InfluxDB backend migration feature toggle (influxdbBackendMigration) has been reintroduced in this version
      as issues were discovered with backend processing of InfluxDB data. Unless this feature toggle is enabled, all
      InfluxDB data will be parsed in the frontend. This frontend processing is the default behavior. 
      In Grafana 9.4.4, InfluxDB data parsing started to be handled in the backend. If you have upgraded to 9.4.4
      and then added new transformations on InfluxDB data, those panels will fail to render. To resolve this either:
      Remove the affected panel and re-create it or edit the `time` field as `Time` in `panel.json` 
      or `dashboard.json`
    - The `@grafana/ui` package helper function `selectOptionInTest` used in frontend tests has been removed as it
      caused testing libraries to be bundled in the production code of Grafana. If you were using this helper function
      in your tests please update your code accordingly.
    - Removed deprecated `checkHealth` prop from the `@grafana/e2e` `addDataSource` configuration. Previously this
      value defaulted to `false`, and has not been used in end-to-end tests since Grafana 8.0.3.
    - Removed the deprecated `LegacyBaseMap`, `LegacyValueMapping`, `LegacyValueMap`, and `LegacyRangeMap` types, and
      `getMappedValue` function from grafana-data. See the documentation for the migration.
      This change fixes a bug in Grafana where intermittent failure of database, network between Grafana and the
      database, or error in querying the database would cause all alert rules to be unscheduled in Grafana. 
      Following this change scheduled alert rules are not updated unless the query is successful.
    - The `get_alert_rules_duration_seconds` metric has been renamed to `schedule_query_alert_rules_duration_seconds`
    - Any secret (data sources credential, alert manager credential, etc, etc) created or modified with Grafana v9.0
      won't be decryptable from any previous version (by default) because the way encrypted secrets are stored into the
      database has changed. Although secrets created or modified with previous versions will still be decryptable by
      Grafana v9.0.
    - If required, although generally discouraged, the `disableEnvelopeEncryption` feature toggle can be enabled to
      keep envelope encryption disabled once updating to Grafana
    - In case of need to rollback to an earlier version of Grafana (i.e. Grafana v8.x) for any reason, after being
      created or modified any secret with Grafana v9.0, the `envelopeEncryption` feature toggle will need to be enabled
      to keep backwards compatibility (only from `v8.3.x` a bit unstable, from `8.5.x` stable).
    - As a final attempt to deal with issues related with the aforementioned situations, the 
      `grafana-cli admin secrets-migration rollback` command has been designed to move back all the Grafana secrets
      encrypted with envelope encryption to legacy encryption. So, after running that command it should be safe to
      disable envelope encryption and/or roll back to a previous version of Grafana.
      Alternatively or complementarily to all the points above, backing up the Grafana database before updating could
      be a good idea to prevent disasters (although the risk of getting some secrets corrupted only applies to those 
      updates/created with after updating to Grafana v9.0).
    - In Elasticsearch, browser access mode was deprecated in grafana 7.4.0 and removed in 9.0.0. If you used this mode
      please switch to server access mode on the datasource configuration page.
    - Environment variables passed from Grafana to external Azure plugins have been renamed:
      `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`,
      `AZURE_MANAGED_IDENTITY_ENABLED` renamed to `GFAZPL_MANAGED_IDENTITY_ENABLED`,
      `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`.
      There are no known plugins which were relying on these variables. Moving forward plugins should read Azure
      settings only via Grafana Azure SDK which properly handles old and new environment variables.
    - Removes support for for ElasticSearch versions after their end-of-life, currently versions &lt; 7.10.0.
      To continue to use ElasticSearch data source, upgrade ElasticSearch to version 7.10.0+.
    - Application Insights and Insight Analytics queries in Azure Monitor were deprecated in Grafana 8.0 and finally
      removed in 9.0. Deprecated queries will no longer be executed.
    - grafana/ui: Button now specifies a default type='button'.
      The `Button` component provided by @grafana/ui now specifies a default `type='button'` when no type is provided.
      In previous versions, if the attribute was not specified for buttons associated with a `&lt;form&gt;` the
      default value was `submit` per the specification. You can preserve the old behavior by explicitly setting the
      type attribute: `&lt;Button type='submit' /&gt;`
    - The `Rename by regex` transformation has been improved to allow global patterns of the form 
      `/&lt;stringToReplace&gt;/g`.
      Depending on the regex match used, this may cause some transformations to behave slightly differently. You can
      guarantee the same behaviour as before by wrapping the `match` string in forward slashes (`/`), e.g. `(.*)` would
      become `/(.*)/`
    - `&lt;Select /&gt;` menus will now portal to the document body by default. This is to give more consistent
      behaviour when positioning and overlaying. If you were setting`menuShouldPortal={true}` before you can safely 
      remove that prop and behaviour will be the same. If you weren't explicitly setting that prop, there should be no
      visible changes in behaviour but your tests may need updating. If you were setting `menuShouldPortal={false}`
      this will continue to prevent the menu from portalling.
    - Grafana alerting endpoint prefixed with `api/v1/rule/test` that tests a rule against a Corte/Loki data source now
      expects the data source UID as a path parameter instead of the data source numeric identifier.
    - Grafana alerting endpoints prefixed with `api/prometheus/` that proxy requests to a Cortex/Loki data source now
      expect the data source UID as a path parameter instead of the data source numeric identifier.
    - Grafana alerting endpoints prefixed with `api/ruler/` that proxy requests to a Cortex/Loki data source now expect
      the data source UID as a path parameter instead of the data
    - Grafana alerting endpoints prefixed with `api/alertmanager/` that proxy requests to an Alertmanager now expect
      the data source UID as a path parameter instead of the data source numeric identifier.
    - The format of log messages have been updated, `lvl` is now `level` and `eror`and `dbug` has been replaced with
      `error` and `debug`. The precision of timestamps has been increased.
      To smooth the transition, it is possible to opt-out of the new log format by enabling the feature toggle
      `oldlog`.
      This option will be removed in a future minor release.
    - In the Loki data source, the dataframe format used to represent Loki logs-data has been changed to a more
      efficient format. The query-result is represented by a single dataframe with a 'labels' column, instead of the
      separate dataframes for every labels-value. When displaying such data in explore, or in a logs-panel in the
      dashboard will continue to work without changes, but if the data was loaded into a different dashboard-panel, or
      Transforms were used, adjustments may be necessary. For example, if you used the 'labels to fields' 
      transformation with the logs data, please switch to the 'extract fields' transformation.
  * Deprecations:
    - The `grafana_database_conn_*` metrics are deprecated, and will be removed in a future version of Grafana. Use 
      the `go_sql_stats_*` metrics instead.
    - Support for compact Explore URLs is deprecated and will be removed in a future release. Until then, when
      navigating to Explore using the deprecated format the URLs are automatically converted. If you have
      existing links pointing to Explore update them using the format generated by Explore upon navigation.
      You can identify a compact URL by its format. Compact URLs have the left (and optionally right) url parameter as
      an array of strings, for example `&amp;left=['now-1h','now'...]`. The standard explore URLs follow a key/value
      pattern, for example `&amp;left={'datasource':'test'...}`. Please be sure to check your dashboards for any
      hardcoded links to Explore and update them to the standard URL pattern.
    - Chore: Remove deprecated DataSourceAPI methods.
    - Data: Remove deprecated types and functions from valueMappings.
    - Elasticsearch: Remove browser access mode.
    - Elasticsearch: Remove support for versions after their end of the life (&lt;7.10.0).
    - Explore: Remove support for legacy, compact format URLs.
    - Graph: Deprecate Graph (old) and make it no longer a visualization option for new panels.
    - `setExploreQueryField`, `setExploreMetricsQueryField` and `setExploreLogsQueryField` are now deprecated and will
      be removed in a future release. If you need to set a different query editor for Explore, conditionally render
      based on `props.app` in your regular query editor.
  * Changes:
    - User: Fix externalUserId not being populated.
      If you used any of these components please use them from grafana/experimental from now on:
       - AccessoryButton
       - EditorFieldGroup
       - EditorHeader
       - EditorField
       - EditorRow
       - EditorList
       - EditorRows
       - EditorSwitch
       - FlexItem
       - Stack
       - InlineSelect
       - InputGroup
       - Space
    - Starting with 9.1.0, existing heatmap panels will start using a new implementation. This can be disabled by
      setting the `useLegacyHeatmapPanel` feature flag to true. It can be tested on a single dashbobard by adding
      `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    - Logger: Enable new logging format by default.
    - Loki: Enable new visual query builder by default.
    - Plugins: Remove plugin list panel.
    - Install wrapper scripts under /usr/sbin
    - Install actual binaries under /usr/libexec/grafana (or /usr/lib under older distributions) and create a simlink 
      for wrapper scripts and the service (which expect the binary to be under /usr/share/grafana/bin)
    - Chore: Upgrade typescript to 4.6.4.

mgr-daemon:

- Version 4.3.7-1
  * Update translation strings

spacecmd:

- Version 4.3.21-1
  * fix argument parsing of distribution_update (bsc#1210458)
- Version 4.3.20-1
  * Display activation key details after executing the corresponding command (bsc#1208719)
  * Show targetted packages before actually removing them (bsc#1207830)

uyuni-common-libs:

- Version 4.3.8-1
  * Allow default component for context manager

zypp-plugin-spacewalk:

- 1.0.14
  * SPEC cleanup
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-21"/>
	<updated date="2023-06-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1192154">SUSE bug 1192154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1192696">SUSE bug 1192696</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1200480">SUSE bug 1200480</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201535">SUSE bug 1201535</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1201539">SUSE bug 1201539</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203185">SUSE bug 1203185</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203596">SUSE bug 1203596</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203597">SUSE bug 1203597</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203599">SUSE bug 1203599</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204501">SUSE bug 1204501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207830">SUSE bug 1207830</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208719">SUSE bug 1208719</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209645">SUSE bug 1209645</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210458">SUSE bug 1210458</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210640">SUSE bug 1210640</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210907">SUSE bug 1210907</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-7753/">CVE-2020-7753</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-3807/">CVE-2021-3807</cve>
	<cve impact="important" cvss3="8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-3918/">CVE-2021-3918</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2021-43138/">CVE-2021-43138</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-0155/">CVE-2022-0155</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-27664/">CVE-2022-27664</cve>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-31097/">CVE-2022-31097</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L" href="https://www.suse.com/security/cve/CVE-2022-31107/">CVE-2022-31107</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-32149/">CVE-2022-32149</cve>
	<cve impact="moderate" cvss3="6.6/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-35957/">CVE-2022-35957</cve>
	<cve impact="moderate" cvss3="6.4/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-36062/">CVE-2022-36062</cve>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-41715/">CVE-2022-41715</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-46146/">CVE-2022-46146</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-1387/">CVE-2023-1387</cve>
	<cve impact="moderate" cvss3="5.7/CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-1410/">CVE-2023-1410</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009768800" comment="bind-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768801" comment="bind-chrootenv-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768802" comment="bind-devel-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767344" comment="bind-doc-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768803" comment="bind-utils-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768804" comment="libbind9-1600-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768805" comment="libdns1605-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768806" comment="libirs-devel-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768807" comment="libirs1601-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768808" comment="libisc1606-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768809" comment="libisccc1600-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768810" comment="libisccfg1600-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768811" comment="libns1604-9.16.6-150000.12.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767354" comment="python3-bind-9.16.6-150000.12.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141272" version="1" class="patch">
	<metadata>
		<title>Security update for salt and python-pyzmq (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1186945" ref_url="https://bugzilla.suse.com/1186945" source="BUGZILLA"/>
		<reference ref_id="1207071" ref_url="https://bugzilla.suse.com/1207071" source="BUGZILLA"/>
		<reference ref_id="1209233" ref_url="https://bugzilla.suse.com/1209233" source="BUGZILLA"/>
		<reference ref_id="1211612" ref_url="https://bugzilla.suse.com/1211612" source="BUGZILLA"/>
		<reference ref_id="1211754" ref_url="https://bugzilla.suse.com/1211754" source="BUGZILLA"/>
		<reference ref_id="1212516" ref_url="https://bugzilla.suse.com/1212516" source="BUGZILLA"/>
		<reference ref_id="1212517" ref_url="https://bugzilla.suse.com/1212517" source="BUGZILLA"/>
		<description>
This update for salt and python-pyzmq fixes the following issues:

salt:

- Update to Salt release version 3006.0 (jsc#PED-4361)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for 'importlib-metadata&gt;=5.0.0' (bsc#1207071)
- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix package build with old setuptools versions
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517)

python-pyzmq:

- Update python-pyzmq to version 17.1.2 in LTSS products (bsc#1186945)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-21"/>
	<updated date="2023-06-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1186945">SUSE bug 1186945</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207071">SUSE bug 1207071</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209233">SUSE bug 1209233</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211612">SUSE bug 1211612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211754">SUSE bug 1211754</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212516">SUSE bug 1212516</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212517">SUSE bug 1212517</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009768812" comment="python2-pyzmq-17.1.2-150000.3.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767681" comment="python3-pyzmq-17.1.2-150000.3.5.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768813" comment="python3-salt-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768814" comment="salt-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768815" comment="salt-api-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767941" comment="salt-bash-completion-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768816" comment="salt-cloud-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768817" comment="salt-doc-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767944" comment="salt-fish-completion-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768818" comment="salt-master-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768819" comment="salt-minion-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768820" comment="salt-proxy-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768821" comment="salt-ssh-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768822" comment="salt-standalone-formulas-configuration-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768823" comment="salt-syndic-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768824" comment="salt-transactional-update-3006.0-150000.97.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767952" comment="salt-zsh-completion-3006.0-150000.97.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141273" version="1" class="patch">
	<metadata>
		<title>Security update for container-suseconnect (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<description>

This update of container-suseconnect fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-21"/>
	<updated date="2023-06-21"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767849" comment="container-suseconnect-2.4.0-150000.4.30.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141274" version="1" class="patch">
	<metadata>
		<title>Security update for libX11 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212102" ref_url="https://bugzilla.suse.com/1212102" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-3138" ref_url="https://www.suse.com/security/cve/CVE-2023-3138/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2614-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030001.html" source="SUSE-SU"/>
		<description>
This update for libX11 fixes the following issues:

- CVE-2023-3138: Fixed buffer overflows in InitExt.c (bsc#1212102).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-22"/>
	<updated date="2023-06-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212102">SUSE bug 1212102</bugzilla>
	<cve impact="important" cvss3="7.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3138/">CVE-2023-3138</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009767702" comment="libX11-6-1.6.5-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767703" comment="libX11-6-32bit-1.6.5-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767704" comment="libX11-data-1.6.5-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767705" comment="libX11-devel-1.6.5-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767707" comment="libX11-xcb1-1.6.5-150000.3.30.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009767708" comment="libX11-xcb1-32bit-1.6.5-150000.3.30.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141275" version="1" class="patch">
	<metadata>
		<title>Security update for cups (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212230" ref_url="https://bugzilla.suse.com/1212230" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-34241" ref_url="https://www.suse.com/security/cve/CVE-2023-34241/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2616-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030000.html" source="SUSE-SU"/>
		<description>
This update for cups fixes the following issues:

- CVE-2023-34241: Fixed a use-after-free problem in cupsdAcceptClient() (bsc#1212230).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-22"/>
	<updated date="2023-06-22"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212230">SUSE bug 1212230</bugzilla>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-34241/">CVE-2023-34241</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009769103" comment="cups-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769104" comment="cups-client-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769105" comment="cups-config-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769106" comment="cups-ddk-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769107" comment="cups-devel-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769109" comment="libcups2-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769110" comment="libcups2-32bit-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769111" comment="libcupscgi1-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769113" comment="libcupsimage2-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769115" comment="libcupsmime1-2.2.7-150000.3.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769117" comment="libcupsppdc1-2.2.7-150000.3.46.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141276" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201627" ref_url="https://bugzilla.suse.com/1201627" source="BUGZILLA"/>
		<reference ref_id="1207534" ref_url="https://bugzilla.suse.com/1207534" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4304" ref_url="https://www.suse.com/security/cve/CVE-2022-4304/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2622-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030012.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption.
  The previous fix for this timing side channel turned out to cause a
  severe 2-3x performance regression in the typical use case (bsc#1207534).

- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-23"/>
	<updated date="2023-06-23"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1201627">SUSE bug 1201627</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207534">SUSE bug 1207534</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-4304/">CVE-2022-4304</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009769391" comment="libopenssl-1_1-devel-1.1.0i-150100.14.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768340" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769392" comment="libopenssl1_1-1.1.0i-150100.14.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768342" comment="libopenssl1_1-32bit-1.1.0i-150100.14.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769393" comment="libopenssl1_1-hmac-1.1.0i-150100.14.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768344" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.56.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769394" comment="openssl-1_1-1.1.0i-150100.14.56.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141277" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207534" ref_url="https://bugzilla.suse.com/1207534" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4304" ref_url="https://www.suse.com/security/cve/CVE-2022-4304/" source="CVE"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

- CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption.
  The previous fix for this timing side channel turned out to cause a
  severe 2-3x performance regression in the typical use case (bsc#1207534).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-26"/>
	<updated date="2023-06-26"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1207534">SUSE bug 1207534</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-4304/">CVE-2022-4304</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009768621" comment="libopenssl-1_0_0-devel-1.0.2p-150000.3.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768624" comment="libopenssl1_0_0-1.0.2p-150000.3.79.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768630" comment="openssl-1_0_0-1.0.2p-150000.3.79.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141278" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210996" ref_url="https://bugzilla.suse.com/1210996" source="BUGZILLA"/>
		<reference ref_id="1211256" ref_url="https://bugzilla.suse.com/1211256" source="BUGZILLA"/>
		<reference ref_id="1211257" ref_url="https://bugzilla.suse.com/1211257" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2426" ref_url="https://www.suse.com/security/cve/CVE-2023-2426/" source="CVE"/>
		<reference ref_id="CVE-2023-2609" ref_url="https://www.suse.com/security/cve/CVE-2023-2609/" source="CVE"/>
		<reference ref_id="CVE-2023-2610" ref_url="https://www.suse.com/security/cve/CVE-2023-2610/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2640-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015866.html" source="SUSE-SU"/>
		<description>
This update for vim fixes the following issues:

- CVE-2023-2426: Fixed out-of-range pointer offset (bsc#1210996).
- CVE-2023-2609: Fixed NULL pointer dereference (bsc#1211256).
- CVE-2023-2610: Fixed integer overflow or wraparound (bsc#1211257).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-10"/>
	<updated date="2023-08-10"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1210996">SUSE bug 1210996</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211256">SUSE bug 1211256</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211257">SUSE bug 1211257</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-2426/">CVE-2023-2426</cve>
	<cve impact="important" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-2609/">CVE-2023-2609</cve>
	<cve impact="important" cvss3="7.1/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2610/">CVE-2023-2610</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009764653" comment="gvim-9.0.1572-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764654" comment="vim-9.0.1572-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764655" comment="vim-data-9.0.1572-150000.5.46.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009764656" comment="vim-data-common-9.0.1572-150000.5.46.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141279" version="1" class="patch">
	<metadata>
		<title>Security update for buildah (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2716-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/030136.html" source="SUSE-SU"/>
		<description>

This update of buildah fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-06-29"/>
	<updated date="2023-06-29"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770243" comment="buildah-1.25.1-150100.3.17.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141280" version="1" class="patch">
	<metadata>
		<title>Security update for dnsdist (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1054799" ref_url="https://bugzilla.suse.com/1054799" source="BUGZILLA"/>
		<reference ref_id="1054802" ref_url="https://bugzilla.suse.com/1054802" source="BUGZILLA"/>
		<reference ref_id="1114511" ref_url="https://bugzilla.suse.com/1114511" source="BUGZILLA"/>
		<reference ref_id="CVE-2016-7069" ref_url="https://www.suse.com/security/cve/CVE-2016-7069/" source="CVE"/>
		<reference ref_id="CVE-2017-7557" ref_url="https://www.suse.com/security/cve/CVE-2017-7557/" source="CVE"/>
		<reference ref_id="CVE-2018-14663" ref_url="https://www.suse.com/security/cve/CVE-2018-14663/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2777-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-July/030190.html" source="SUSE-SU"/>
		<description>
This update for dnsdist fixes the following issues:

- Implements package 'dnsdist' with version 1.8.0 in SLE15. (jsc#PED-3402)
- Downstream DNS resolver configuration should be chosen by the admin
- Security fix: fixes a possible record smugging with a crafted DNS query with trailing data (CVE-2018-14663, bsc#1114511)
- Security fix: There is an issue that can lead to a denial of service on 32-bit if a backend sends crafted answers. (CVE-2016-7069, bsc#1054799)
- Security fix: Alteration of dnsdist's ACL if the API is enabled, writable and an authenticated user is tricked into visiting a crafted website. (CVE-2017-7557, bsc#1054799)
- SNMP support, exporting statistics and sending traps
- Preventing the packet cache from ageing responses when deployed in
- Various DNSCrypt-related fixes and improvements, including automatic key rotation
  		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1054799">SUSE bug 1054799</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1054802">SUSE bug 1054802</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1114511">SUSE bug 1114511</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2016-7069/">CVE-2016-7069</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2017-7557/">CVE-2017-7557</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2018-14663/">CVE-2018-14663</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770587" comment="dnsdist-1.8.0-150100.3.5.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141281" version="1" class="patch">
	<metadata>
		<title>Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1099269" ref_url="https://bugzilla.suse.com/1099269" source="BUGZILLA"/>
		<reference ref_id="1133277" ref_url="https://bugzilla.suse.com/1133277" source="BUGZILLA"/>
		<reference ref_id="1144068" ref_url="https://bugzilla.suse.com/1144068" source="BUGZILLA"/>
		<reference ref_id="1162343" ref_url="https://bugzilla.suse.com/1162343" source="BUGZILLA"/>
		<reference ref_id="1177127" ref_url="https://bugzilla.suse.com/1177127" source="BUGZILLA"/>
		<reference ref_id="1178168" ref_url="https://bugzilla.suse.com/1178168" source="BUGZILLA"/>
		<reference ref_id="1182066" ref_url="https://bugzilla.suse.com/1182066" source="BUGZILLA"/>
		<reference ref_id="1184753" ref_url="https://bugzilla.suse.com/1184753" source="BUGZILLA"/>
		<reference ref_id="1194530" ref_url="https://bugzilla.suse.com/1194530" source="BUGZILLA"/>
		<reference ref_id="1197726" ref_url="https://bugzilla.suse.com/1197726" source="BUGZILLA"/>
		<reference ref_id="1198331" ref_url="https://bugzilla.suse.com/1198331" source="BUGZILLA"/>
		<reference ref_id="1199282" ref_url="https://bugzilla.suse.com/1199282" source="BUGZILLA"/>
		<reference ref_id="1203681" ref_url="https://bugzilla.suse.com/1203681" source="BUGZILLA"/>
		<reference ref_id="1204256" ref_url="https://bugzilla.suse.com/1204256" source="BUGZILLA"/>
		<reference ref_id="CVE-2018-1000518" ref_url="https://www.suse.com/security/cve/CVE-2018-1000518/" source="CVE"/>
		<reference ref_id="CVE-2020-25659" ref_url="https://www.suse.com/security/cve/CVE-2020-25659/" source="CVE"/>
		<reference ref_id="CVE-2020-36242" ref_url="https://www.suse.com/security/cve/CVE-2020-36242/" source="CVE"/>
		<reference ref_id="CVE-2021-22569" ref_url="https://www.suse.com/security/cve/CVE-2021-22569/" source="CVE"/>
		<reference ref_id="CVE-2021-22570" ref_url="https://www.suse.com/security/cve/CVE-2021-22570/" source="CVE"/>
		<reference ref_id="CVE-2022-1941" ref_url="https://www.suse.com/security/cve/CVE-2022-1941/" source="CVE"/>
		<reference ref_id="CVE-2022-3171" ref_url="https://www.suse.com/security/cve/CVE-2022-3171/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2783-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015451.html" source="SUSE-SU"/>
		<description>
This update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets fixes the following issues:

grpc:
- Update in SLE-15 (bsc#1197726, bsc#1144068)
  
protobuf:
- Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941, bsc#1203681
- Fix a potential DoS issue when parsing with binary data in  protobuf-java, CVE-2022-3171, bsc#1204256
- Fix potential Denial of Service in protobuf-java in the parsing procedure for binary data, CVE-2021-22569, bsc#1194530
- Add missing dependency of python subpackages on python-six (bsc#1177127)
- Updated to version 3.9.2 (bsc#1162343)
  * Remove OSReadLittle* due to alignment requirements.
  * Don't use unions and instead use memcpy for the type swaps.
- Disable LTO (bsc#1133277)

python-aiocontextvars:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-avro:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-cryptography:  
- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331)
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
  CVE-2020-36242

python-cryptography-vectors:
- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- update to 3.3.2 (bsc#1198331)

python-Deprecated:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- update to 1.2.13:

python-google-api-core:
- Update to 1.14.2

python-googleapis-common-protos:
- Update to 1.6.0
  
python-grpcio-gcp:
- Initial spec for v0.2.2

python-humanfriendly:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to 10.0

python-jsondiff:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to version 1.3.0

python-knack:  
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to version 0.9.0

python-opencensus:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Disable Python2 build
- Update to 0.8.0

python-opencensus-context:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-opencensus-ext-threading:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Initial build version 0.1.2

python-opentelemetry-api:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Version update to 1.5.0

python-psutil:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- update to 5.9.1
- remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on MicroOS. (bsc#1184753)
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

python-PyGithub:
- Update to 1.43.5:

python-pytest-asyncio:  
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Initial release of python-pytest-asyncio 0.8.0 
  
python-requests:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
  
python-websocket-client:
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Update to version 1.3.2

python-websockets:
- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- update to 9.1:
 		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-04"/>
	<updated date="2023-07-04"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1099269">SUSE bug 1099269</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1133277">SUSE bug 1133277</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1144068">SUSE bug 1144068</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1162343">SUSE bug 1162343</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1177127">SUSE bug 1177127</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1178168">SUSE bug 1178168</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1182066">SUSE bug 1182066</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1184753">SUSE bug 1184753</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1194530">SUSE bug 1194530</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1197726">SUSE bug 1197726</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198331">SUSE bug 1198331</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1199282">SUSE bug 1199282</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1203681">SUSE bug 1203681</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204256">SUSE bug 1204256</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2018-1000518/">CVE-2018-1000518</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2020-25659/">CVE-2020-25659</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2020-36242/">CVE-2020-36242</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-22569/">CVE-2021-22569</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2021-22570/">CVE-2021-22570</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-1941/">CVE-2022-1941</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-3171/">CVE-2022-3171</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009755743" comment="libprotobuf-lite20-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757127" comment="libprotobuf20-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757130" comment="libprotoc20-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009760570" comment="protobuf-devel-3.9.2-150100.8.3.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009760576" comment="python2-cryptography-3.3.2-150100.7.15.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009760581" comment="python2-psutil-5.9.1-150100.6.6.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755747" comment="python2-requests-2.25.1-150100.6.13.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757071" comment="python3-Automat-0.6.0-150000.3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009760568" comment="python3-Twisted-17.9.0-150000.3.8.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757052" comment="python3-constantly-15.1.0-150000.3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757151" comment="python3-cryptography-3.3.2-150100.7.15.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757053" comment="python3-hyperlink-17.2.1-150000.3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757072" comment="python3-incremental-17.5.0-150000.3.4.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757161" comment="python3-psutil-5.9.1-150100.6.6.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755750" comment="python3-requests-2.25.1-150100.6.13.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009755589" comment="python3-websocket-client-1.3.2-150100.6.7.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009757054" comment="python3-zope.interface-4.4.2-150000.3.4.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141282" version="1" class="patch">
	<metadata>
		<title>Security update for bind (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212544" ref_url="https://bugzilla.suse.com/1212544" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-2828" ref_url="https://www.suse.com/security/cve/CVE-2023-2828/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2794-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015458.html" source="SUSE-SU"/>
		<description>
This update for bind fixes the following issues:

- CVE-2023-2828: Fixed denial-of-service against recursive resolvers related to cache-cleaning algorithm (bsc#1212544).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-07"/>
	<updated date="2023-07-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212544">SUSE bug 1212544</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-2828/">CVE-2023-2828</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009771527" comment="bind-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771528" comment="bind-chrootenv-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771529" comment="bind-devel-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770080" comment="bind-doc-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771530" comment="bind-utils-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771531" comment="libbind9-1600-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771532" comment="libdns1605-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771533" comment="libirs-devel-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771534" comment="libirs1601-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771535" comment="libisc1606-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771536" comment="libisccc1600-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771537" comment="libisccfg1600-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771538" comment="libns1604-9.16.6-150000.12.68.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770090" comment="python3-bind-9.16.6-150000.12.68.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141283" version="1" class="patch">
	<metadata>
		<title>Security update for geoipupdate (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2812-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015474.html" source="SUSE-SU"/>
		<description>

This update of geoipupdate fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-12"/>
	<updated date="2023-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009769137" comment="geoipupdate-4.2.2-150000.1.12.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769138" comment="geoipupdate-legacy-4.2.2-150000.1.12.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141284" version="1" class="patch">
	<metadata>
		<title>Security update for skopeo (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2813-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015473.html" source="SUSE-SU"/>
		<description>

This update of skopeo fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-12"/>
	<updated date="2023-07-12"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009769139" comment="skopeo-0.1.41-150000.4.18.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141285" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212711" ref_url="https://bugzilla.suse.com/1212711" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-36664" ref_url="https://www.suse.com/security/cve/CVE-2023-36664/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2829-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015493.html" source="SUSE-SU"/>
		<description>
This update for ghostscript fixes the following issues:

  - CVE-2023-36664: Fixed permission validation mishandling for pipe devices with the %pipe% prefix or the | pipe character prefix (bsc#1212711).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-14"/>
	<updated date="2023-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212711">SUSE bug 1212711</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-36664/">CVE-2023-36664</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009770405" comment="ghostscript-9.52-150000.167.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770406" comment="ghostscript-devel-9.52-150000.167.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770407" comment="ghostscript-x11-9.52-150000.167.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141286" version="1" class="patch">
	<metadata>
		<title>Security update for the Linux Kernel (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1160435" ref_url="https://bugzilla.suse.com/1160435" source="BUGZILLA"/>
		<reference ref_id="1198400" ref_url="https://bugzilla.suse.com/1198400" source="BUGZILLA"/>
		<reference ref_id="1208604" ref_url="https://bugzilla.suse.com/1208604" source="BUGZILLA"/>
		<reference ref_id="1209039" ref_url="https://bugzilla.suse.com/1209039" source="BUGZILLA"/>
		<reference ref_id="1209779" ref_url="https://bugzilla.suse.com/1209779" source="BUGZILLA"/>
		<reference ref_id="1210533" ref_url="https://bugzilla.suse.com/1210533" source="BUGZILLA"/>
		<reference ref_id="1211449" ref_url="https://bugzilla.suse.com/1211449" source="BUGZILLA"/>
		<reference ref_id="1212051" ref_url="https://bugzilla.suse.com/1212051" source="BUGZILLA"/>
		<reference ref_id="1212128" ref_url="https://bugzilla.suse.com/1212128" source="BUGZILLA"/>
		<reference ref_id="1212129" ref_url="https://bugzilla.suse.com/1212129" source="BUGZILLA"/>
		<reference ref_id="1212154" ref_url="https://bugzilla.suse.com/1212154" source="BUGZILLA"/>
		<reference ref_id="1212158" ref_url="https://bugzilla.suse.com/1212158" source="BUGZILLA"/>
		<reference ref_id="1212501" ref_url="https://bugzilla.suse.com/1212501" source="BUGZILLA"/>
		<reference ref_id="1212502" ref_url="https://bugzilla.suse.com/1212502" source="BUGZILLA"/>
		<reference ref_id="1212606" ref_url="https://bugzilla.suse.com/1212606" source="BUGZILLA"/>
		<reference ref_id="1212842" ref_url="https://bugzilla.suse.com/1212842" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-1079" ref_url="https://www.suse.com/security/cve/CVE-2023-1079/" source="CVE"/>
		<reference ref_id="CVE-2023-1249" ref_url="https://www.suse.com/security/cve/CVE-2023-1249/" source="CVE"/>
		<reference ref_id="CVE-2023-1637" ref_url="https://www.suse.com/security/cve/CVE-2023-1637/" source="CVE"/>
		<reference ref_id="CVE-2023-2002" ref_url="https://www.suse.com/security/cve/CVE-2023-2002/" source="CVE"/>
		<reference ref_id="CVE-2023-3090" ref_url="https://www.suse.com/security/cve/CVE-2023-3090/" source="CVE"/>
		<reference ref_id="CVE-2023-3111" ref_url="https://www.suse.com/security/cve/CVE-2023-3111/" source="CVE"/>
		<reference ref_id="CVE-2023-3141" ref_url="https://www.suse.com/security/cve/CVE-2023-3141/" source="CVE"/>
		<reference ref_id="CVE-2023-3159" ref_url="https://www.suse.com/security/cve/CVE-2023-3159/" source="CVE"/>
		<reference ref_id="CVE-2023-3161" ref_url="https://www.suse.com/security/cve/CVE-2023-3161/" source="CVE"/>
		<reference ref_id="CVE-2023-3268" ref_url="https://www.suse.com/security/cve/CVE-2023-3268/" source="CVE"/>
		<reference ref_id="CVE-2023-3358" ref_url="https://www.suse.com/security/cve/CVE-2023-3358/" source="CVE"/>
		<reference ref_id="CVE-2023-35824" ref_url="https://www.suse.com/security/cve/CVE-2023-35824/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2830-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015491.html" source="SUSE-SU"/>
		<description>

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604).
- CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).
- CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779).
- CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
- CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
- CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).
- CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
- CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).
- CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
- CVE-2023-3268: Fixed an out of bounds flaw in relay_file_read_start_pos in kernel/relay.c that allowed a local attacker to crash the system or leak kernel internal information (bsc#1212502).
- CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
- CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).

The following non-security bugs were fixed:

- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- Move setting %%build_html to config.sh
- Move setting %%split_optional to config.sh
- Move setting %%supported_modules_check to config.sh
- rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm
- rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-14"/>
	<updated date="2023-07-14"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1160435">SUSE bug 1160435</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1198400">SUSE bug 1198400</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1208604">SUSE bug 1208604</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209039">SUSE bug 1209039</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1209779">SUSE bug 1209779</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210533">SUSE bug 1210533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211449">SUSE bug 1211449</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212051">SUSE bug 1212051</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212128">SUSE bug 1212128</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212129">SUSE bug 1212129</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212154">SUSE bug 1212154</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212158">SUSE bug 1212158</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212501">SUSE bug 1212501</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212502">SUSE bug 1212502</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212606">SUSE bug 1212606</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212842">SUSE bug 1212842</bugzilla>
	<cve impact="moderate" cvss3="6.3/CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-1079/">CVE-2023-1079</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-1249/">CVE-2023-1249</cve>
	<cve impact="moderate" cvss3="4.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2023-1637/">CVE-2023-1637</cve>
	<cve impact="moderate" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-2002/">CVE-2023-2002</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3090/">CVE-2023-3090</cve>
	<cve impact="moderate" cvss3="6.7/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3111/">CVE-2023-3111</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" href="https://www.suse.com/security/cve/CVE-2023-3141/">CVE-2023-3141</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3159/">CVE-2023-3159</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-3161/">CVE-2023-3161</cve>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-3268/">CVE-2023-3268</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-3358/">CVE-2023-3358</cve>
	<cve impact="moderate" cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-35824/">CVE-2023-35824</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009772007" comment="kernel-default-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772008" comment="kernel-default-base-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772009" comment="kernel-default-devel-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770844" comment="kernel-default-man-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771174" comment="kernel-devel-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771175" comment="kernel-docs-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771176" comment="kernel-macros-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772010" comment="kernel-obs-build-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771178" comment="kernel-source-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772011" comment="kernel-syms-4.12.14-150100.197.151.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772012" comment="reiserfs-kmp-default-4.12.14-150100.197.151.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141287" version="1" class="patch">
	<metadata>
		<title>Security update for mariadb (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1201164" ref_url="https://bugzilla.suse.com/1201164" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-32084" ref_url="https://www.suse.com/security/cve/CVE-2022-32084/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2835-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015500.html" source="SUSE-SU"/>
		<description>
This update for mariadb fixes the following issues:

- CVE-2022-32084: Fixed segmentation fault via the component sub_select (bsc#1201164).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-14"/>
	<updated date="2023-07-14"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1201164">SUSE bug 1201164</bugzilla>
	<cve impact="moderate" cvss3="4.4/CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-32084/">CVE-2022-32084</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009771766" comment="libmysqld-devel-10.2.44-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771767" comment="libmysqld19-10.2.44-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772013" comment="mariadb-10.2.44-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772014" comment="mariadb-client-10.2.44-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771808" comment="mariadb-errormessages-10.2.44-150000.3.57.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772015" comment="mariadb-tools-10.2.44-150000.3.57.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141288" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox, MozillaFirefox-branding-SLE (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212101" ref_url="https://bugzilla.suse.com/1212101" source="BUGZILLA"/>
		<reference ref_id="1212438" ref_url="https://bugzilla.suse.com/1212438" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-3482" ref_url="https://www.suse.com/security/cve/CVE-2023-3482/" source="CVE"/>
		<reference ref_id="CVE-2023-37201" ref_url="https://www.suse.com/security/cve/CVE-2023-37201/" source="CVE"/>
		<reference ref_id="CVE-2023-37202" ref_url="https://www.suse.com/security/cve/CVE-2023-37202/" source="CVE"/>
		<reference ref_id="CVE-2023-37203" ref_url="https://www.suse.com/security/cve/CVE-2023-37203/" source="CVE"/>
		<reference ref_id="CVE-2023-37204" ref_url="https://www.suse.com/security/cve/CVE-2023-37204/" source="CVE"/>
		<reference ref_id="CVE-2023-37205" ref_url="https://www.suse.com/security/cve/CVE-2023-37205/" source="CVE"/>
		<reference ref_id="CVE-2023-37206" ref_url="https://www.suse.com/security/cve/CVE-2023-37206/" source="CVE"/>
		<reference ref_id="CVE-2023-37207" ref_url="https://www.suse.com/security/cve/CVE-2023-37207/" source="CVE"/>
		<reference ref_id="CVE-2023-37208" ref_url="https://www.suse.com/security/cve/CVE-2023-37208/" source="CVE"/>
		<reference ref_id="CVE-2023-37209" ref_url="https://www.suse.com/security/cve/CVE-2023-37209/" source="CVE"/>
		<reference ref_id="CVE-2023-37210" ref_url="https://www.suse.com/security/cve/CVE-2023-37210/" source="CVE"/>
		<reference ref_id="CVE-2023-37211" ref_url="https://www.suse.com/security/cve/CVE-2023-37211/" source="CVE"/>
		<reference ref_id="CVE-2023-37212" ref_url="https://www.suse.com/security/cve/CVE-2023-37212/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2849-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015502.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues:

Changes in MozillaFirefox and MozillaFirefox-branding-SLE:

This update provides Firefox Extended Support Release 115.0 ESR

* New: 

  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' 'Make text bigger' accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default 'Only show on New Tab'
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:

    - Screen readers, as well as certain other accessibility
      software;
    - East Asian input methods;
    - Enterprise single sign-on software; and
    - Other applications which use accessibility frameworks to
      access information.

  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
    *_ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-accessibility-performance/

* Fixed: Various security fixes. MFSA 2023-22 (bsc#1212438)

  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Fixed potential SIGILL on older CPUs (bsc#1212101)

* Fixed: Various  security  fixes and other quality
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-17"/>
	<updated date="2023-07-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212101">SUSE bug 1212101</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212438">SUSE bug 1212438</bugzilla>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-3482/">CVE-2023-3482</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37201/">CVE-2023-37201</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37202/">CVE-2023-37202</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37203/">CVE-2023-37203</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-37204/">CVE-2023-37204</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-37205/">CVE-2023-37205</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-37206/">CVE-2023-37206</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-37207/">CVE-2023-37207</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37208/">CVE-2023-37208</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37209/">CVE-2023-37209</cve>
	<cve impact="important" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-37210/">CVE-2023-37210</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37211/">CVE-2023-37211</cve>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-37212/">CVE-2023-37212</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009772135" comment="MozillaFirefox-115.0-150000.150.91.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772136" comment="MozillaFirefox-branding-SLE-115-150000.4.25.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771585" comment="MozillaFirefox-devel-115.0-150000.150.91.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772137" comment="MozillaFirefox-translations-common-115.0-150000.150.91.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772138" comment="MozillaFirefox-translations-other-115.0-150000.150.91.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141289" version="1" class="patch">
	<metadata>
		<title>Security update for java-1_8_0-ibm (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213000" ref_url="https://bugzilla.suse.com/1213000" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2862-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015509.html" source="SUSE-SU"/>
		<description>
This update for java-1_8_0-ibm fixes the following issues:

  Updated to Java 8.0 Service Refresh 8 Fix Pack 6 (bsc#1213000):

  - Fixed issue in Java Virtual Machine where outofmemory (OOM) killer terminates the jvm due to failure in control groups detection.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-17"/>
	<updated date="2023-07-17"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213000">SUSE bug 1213000</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009770929" comment="java-1_8_0-ibm-1.8.0_sr8.6-150000.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770931" comment="java-1_8_0-ibm-alsa-1.8.0_sr8.6-150000.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770933" comment="java-1_8_0-ibm-devel-1.8.0_sr8.6-150000.3.77.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009770935" comment="java-1_8_0-ibm-plugin-1.8.0_sr8.6-150000.3.77.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141290" version="1" class="patch">
	<metadata>
		<title>Security update for cni (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2868-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015521.html" source="SUSE-SU"/>
		<description>

This update of cni fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-18"/>
	<updated date="2023-07-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768139" comment="cni-0.7.1-150100.3.12.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141291" version="1" class="patch">
	<metadata>
		<title>Security update for cni-plugins (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2869-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015520.html" source="SUSE-SU"/>
		<description>

This update of cni-plugins fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-18"/>
	<updated date="2023-07-18"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009768633" comment="cni-plugins-0.8.6-150100.3.15.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141292" version="1" class="patch">
	<metadata>
		<title>Security update for xorg-x11-server (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207783" ref_url="https://bugzilla.suse.com/1207783" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-0494" ref_url="https://www.suse.com/security/cve/CVE-2023-0494/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0287-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013647.html" source="SUSE-SU"/>
		<description>
This update for xorg-x11-server fixes the following issues:

- CVE-2023-0494: Fixed a use-after-free in DeepCopyPointerClasses (bsc#1207783).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207783">SUSE bug 1207783</bugzilla>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-0494/">CVE-2023-0494</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009737868" comment="xorg-x11-server-1.20.3-150100.14.5.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737869" comment="xorg-x11-server-extra-1.20.3-150100.14.5.36.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737870" comment="xorg-x11-server-sdk-1.20.3-150100.14.5.36.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141293" version="1" class="patch">
	<metadata>
		<title>Security update for sssd (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207474" ref_url="https://bugzilla.suse.com/1207474" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4254" ref_url="https://www.suse.com/security/cve/CVE-2022-4254/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0292-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013642.html" source="SUSE-SU"/>
		<description>
This update for sssd fixes the following issues:

- CVE-2022-4254: Fixed a bug in libsss_certmap which could allow an attacker to gain control of the admin account and perform a full domain takeover. (bsc#1207474)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207474">SUSE bug 1207474</bugzilla>
	<cve impact="important" cvss3="8.3/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-4254/">CVE-2022-4254</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009737871" comment="libipa_hbac-devel-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737872" comment="libipa_hbac0-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737873" comment="libsss_certmap-devel-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737874" comment="libsss_certmap0-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737875" comment="libsss_idmap-devel-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737876" comment="libsss_idmap0-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737877" comment="libsss_nss_idmap-devel-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737878" comment="libsss_nss_idmap0-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737879" comment="libsss_simpleifp-devel-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737880" comment="libsss_simpleifp0-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737881" comment="python3-sssd-config-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737882" comment="sssd-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736341" comment="sssd-32bit-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737883" comment="sssd-ad-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737884" comment="sssd-dbus-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737885" comment="sssd-ipa-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737886" comment="sssd-krb5-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737887" comment="sssd-krb5-common-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737888" comment="sssd-ldap-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737889" comment="sssd-proxy-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737890" comment="sssd-tools-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737891" comment="sssd-wbclient-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737892" comment="sssd-wbclient-devel-1.16.1-150000.8.70.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737893" comment="sssd-winbind-idmap-1.16.1-150000.8.70.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141294" version="1" class="patch">
	<metadata>
		<title>Security update for container-suseconnect (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206346" ref_url="https://bugzilla.suse.com/1206346" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:2923-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015553.html" source="SUSE-SU"/>
		<description>

This update of container-suseconnect fixes the following issues:

- rebuild the package with the go 1.20 security release (bsc#1206346).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-20"/>
	<updated date="2023-07-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206346">SUSE bug 1206346</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772122" comment="container-suseconnect-2.4.0-150000.4.32.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141295" version="1" class="patch">
	<metadata>
		<title>Security update for nginx (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1204526" ref_url="https://bugzilla.suse.com/1204526" source="BUGZILLA"/>
		<reference ref_id="1204527" ref_url="https://bugzilla.suse.com/1204527" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-41741" ref_url="https://www.suse.com/security/cve/CVE-2022-41741/" source="CVE"/>
		<reference ref_id="CVE-2022-41742" ref_url="https://www.suse.com/security/cve/CVE-2022-41742/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0293-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013644.html" source="SUSE-SU"/>
		<description>
This update for nginx fixes the following issues:

- CVE-2022-41741: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204526)
- CVE-2022-41742: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204527)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1204526">SUSE bug 1204526</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1204527">SUSE bug 1204527</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-41741/">CVE-2022-41741</cve>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-41742/">CVE-2022-41742</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009737894" comment="nginx-1.16.1-150100.6.19.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736354" comment="nginx-source-1.16.1-150100.6.19.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141296" version="1" class="patch">
	<metadata>
		<title>Security update for apache2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207247" ref_url="https://bugzilla.suse.com/1207247" source="BUGZILLA"/>
		<reference ref_id="1207250" ref_url="https://bugzilla.suse.com/1207250" source="BUGZILLA"/>
		<reference ref_id="1207251" ref_url="https://bugzilla.suse.com/1207251" source="BUGZILLA"/>
		<reference ref_id="CVE-2006-20001" ref_url="https://www.suse.com/security/cve/CVE-2006-20001/" source="CVE"/>
		<reference ref_id="CVE-2022-36760" ref_url="https://www.suse.com/security/cve/CVE-2022-36760/" source="CVE"/>
		<reference ref_id="CVE-2022-37436" ref_url="https://www.suse.com/security/cve/CVE-2022-37436/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0294-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013648.html" source="SUSE-SU"/>
		<description>
This update for apache2 fixes the following issues:

- CVE-2022-37436: Fixed an issue in mod_proxy where a malicious
  backend could cause the response headers to be truncated early,
  resulting in some headers being incorporated into the response body
  (bsc#1207251).
- CVE-2022-36760: Fixed an issue in mod_proxy_ajp that could allow
  request smuggling attacks (bsc#1207250).
- CVE-2006-20001: Fixed an issue in mod_proxy_ajp where a request
  header could cause memory corruption (bsc#1207247).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207247">SUSE bug 1207247</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207250">SUSE bug 1207250</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207251">SUSE bug 1207251</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2006-20001/">CVE-2006-20001</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L" href="https://www.suse.com/security/cve/CVE-2022-36760/">CVE-2022-36760</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-37436/">CVE-2022-37436</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009737895" comment="apache2-2.4.33-150000.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737896" comment="apache2-devel-2.4.33-150000.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009736325" comment="apache2-doc-2.4.33-150000.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737897" comment="apache2-prefork-2.4.33-150000.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737898" comment="apache2-utils-2.4.33-150000.3.72.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737899" comment="apache2-worker-2.4.33-150000.3.72.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141297" version="1" class="patch">
	<metadata>
		<title>Security update for openssh (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213504" ref_url="https://bugzilla.suse.com/1213504" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-38408" ref_url="https://www.suse.com/security/cve/CVE-2023-38408/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2947-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015604.html" source="SUSE-SU"/>
		<description>
This update for openssh fixes the following issues:

- CVE-2023-38408: Fixed a condition where specific libaries loaded via
  ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code
  execution via a forwarded agent socket if those libraries were present on the
  victim's system and if the agent was forwarded to an attacker-controlled
  system. [bsc#1213504, CVE-2023-38408]
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-24"/>
	<updated date="2023-07-24"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213504">SUSE bug 1213504</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-38408/">CVE-2023-38408</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009774053" comment="openssh-7.9p1-150100.6.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774054" comment="openssh-askpass-gnome-7.9p1-150100.6.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774055" comment="openssh-fips-7.9p1-150100.6.31.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774056" comment="openssh-helpers-7.9p1-150100.6.31.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141298" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213230" ref_url="https://bugzilla.suse.com/1213230" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-3600" ref_url="https://www.suse.com/security/cve/CVE-2023-3600/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2960-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015618.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Firefox Extended Support Release 115.0.2 ESR (MFSA 2023-26, bsc#1213230)

Security fixes:

 - CVE-2023-3600: Fixed use-after-free in workers (bmo#1839703)
  
Other fixes:

 - Fixed a startup crash experienced by some Windows
   users by blocking instances of a malicious injected DLL
   (bmo#1841751)
 - Fixed a bug with displaying a caret in the text editor
   on some websites (bmo#1840804)
 - Fixed a bug with broken audio rendering on some
   websites (bmo#1841982)
 - Fixed a bug with patternTransform translate using the
   wrong units (bmo#1840746)
 - Fixed a crash affecting Windows 7 users related to the
   DLL blocklist.

Firefox Extended Support Release 115.0.1 ESR

 - Fixed a startup crash for Windows users with Kingsoft
   Antivirus software installed (bmo#1837242)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-25"/>
	<updated date="2023-07-25"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213230">SUSE bug 1213230</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-3600/">CVE-2023-3600</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009774591" comment="MozillaFirefox-115.0.2-150000.150.94.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772678" comment="MozillaFirefox-devel-115.0.2-150000.150.94.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774592" comment="MozillaFirefox-translations-common-115.0.2-150000.150.94.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774593" comment="MozillaFirefox-translations-other-115.0.2-150000.150.94.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141299" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213487" ref_url="https://bugzilla.suse.com/1213487" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-3446" ref_url="https://www.suse.com/security/cve/CVE-2023-3446/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:2961-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-July/015617.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-25"/>
	<updated date="2023-07-25"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1213487">SUSE bug 1213487</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-3446/">CVE-2023-3446</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009774594" comment="libopenssl-1_1-devel-1.1.0i-150100.14.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772682" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774595" comment="libopenssl1_1-1.1.0i-150100.14.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772684" comment="libopenssl1_1-32bit-1.1.0i-150100.14.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774596" comment="libopenssl1_1-hmac-1.1.0i-150100.14.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772686" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.59.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774597" comment="openssl-1_1-1.1.0i-150100.14.59.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141300" version="1" class="patch">
	<metadata>
		<title>Security update for ca-certificates-mozilla (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1206212" ref_url="https://bugzilla.suse.com/1206212" source="BUGZILLA"/>
		<reference ref_id="1206622" ref_url="https://bugzilla.suse.com/1206622" source="BUGZILLA"/>
		<reference ref_id="SUSE-SU-2023:0003-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-January/013409.html" source="SUSE-SU"/>
		<description>
This update for ca-certificates-mozilla fixes the following issues:

- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
  Removed CAs:
  - Global Chambersign Root
  - EC-ACC
  - Network Solutions Certificate Authority
  - Staat der Nederlanden EV Root CA
  - SwissSign Platinum CA - G2
  Added CAs:
  - DIGITALSIGN GLOBAL ROOT ECDSA CA
  - DIGITALSIGN GLOBAL ROOT RSA CA
  - Security Communication ECC RootCA1
  - Security Communication RootCA3
  Changed trust:
  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)

- Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022'
  and it is not clear how many certs were issued for SSL middleware by TrustCor:
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - TrustCor ECA-1
		</description>
<advisory from="security@suse.de">
	<issued date="2023-01-02"/>
	<updated date="2023-01-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1206212">SUSE bug 1206212</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1206622">SUSE bug 1206622</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009730143" comment="ca-certificates-mozilla-2.60-150000.4.38.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141301" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Moderate) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213853" ref_url="https://bugzilla.suse.com/1213853" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-3817" ref_url="https://www.suse.com/security/cve/CVE-2023-3817/" source="CVE"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-27"/>
	<updated date="2023-09-27"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1213853">SUSE bug 1213853</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-3817/">CVE-2023-3817</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009799109" comment="libopenssl-1_1-devel-1.1.0i-150100.14.65.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009799110" comment="libopenssl1_1-1.1.0i-150100.14.65.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009799111" comment="libopenssl1_1-hmac-1.1.0i-150100.14.65.6 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009799112" comment="openssl-1_1-1.1.0i-150100.14.65.6 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141302" version="1" class="patch">
	<metadata>
		<title>Security update for jtidy (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212404" ref_url="https://bugzilla.suse.com/1212404" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-34623" ref_url="https://www.suse.com/security/cve/CVE-2023-34623/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3016-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-July/030626.html" source="SUSE-SU"/>
		<description>
This update for jtidy fixes the following issues:

- CVE-2023-34623: Prevent crash when parsing documents with excessive nesting (bsc#1212404).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-28"/>
	<updated date="2023-07-28"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212404">SUSE bug 1212404</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-34623/">CVE-2023-34623</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773257" comment="jtidy-8.0-150000.4.3.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141303" version="1" class="patch">
	<metadata>
		<title>Security update for samba (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213174" ref_url="https://bugzilla.suse.com/1213174" source="BUGZILLA"/>
		<reference ref_id="1213384" ref_url="https://bugzilla.suse.com/1213384" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-2127" ref_url="https://www.suse.com/security/cve/CVE-2022-2127/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3017-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-July/030625.html" source="SUSE-SU"/>
		<description>
This update for samba fixes the following issues:

  - CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174).

  Bugfixes:

  - Fixed trust relationship failure (bsc#1213384).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-28"/>
	<updated date="2023-07-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1213174">SUSE bug 1213174</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213384">SUSE bug 1213384</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2022-2127/">CVE-2022-2127</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009775507" comment="libdcerpc-binding0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773183" comment="libdcerpc-binding0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775508" comment="libdcerpc-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775509" comment="libdcerpc-samr-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775510" comment="libdcerpc-samr0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775511" comment="libdcerpc0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773188" comment="libdcerpc0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775512" comment="libndr-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775513" comment="libndr-krb5pac-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775514" comment="libndr-krb5pac0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773192" comment="libndr-krb5pac0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775515" comment="libndr-nbt-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775516" comment="libndr-nbt0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773195" comment="libndr-nbt0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775517" comment="libndr-standard-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775518" comment="libndr-standard0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773198" comment="libndr-standard0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775519" comment="libndr0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773200" comment="libndr0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775520" comment="libnetapi-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775521" comment="libnetapi0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773203" comment="libnetapi0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775522" comment="libsamba-credentials-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775523" comment="libsamba-credentials0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773206" comment="libsamba-credentials0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775524" comment="libsamba-errors-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775525" comment="libsamba-errors0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773209" comment="libsamba-errors0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775526" comment="libsamba-hostconfig-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775527" comment="libsamba-hostconfig0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773212" comment="libsamba-hostconfig0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775528" comment="libsamba-passdb-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775529" comment="libsamba-passdb0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773215" comment="libsamba-passdb0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775530" comment="libsamba-policy-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775531" comment="libsamba-policy-python3-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772763" comment="libsamba-policy0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775532" comment="libsamba-policy0-python3-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775533" comment="libsamba-util-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775534" comment="libsamba-util0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773222" comment="libsamba-util0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775535" comment="libsamdb-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775536" comment="libsamdb0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773225" comment="libsamdb0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775537" comment="libsmbclient-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775538" comment="libsmbclient0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775539" comment="libsmbconf-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775540" comment="libsmbconf0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773230" comment="libsmbconf0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775541" comment="libsmbldap-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775542" comment="libsmbldap2-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773233" comment="libsmbldap2-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775543" comment="libtevent-util-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775544" comment="libtevent-util0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773236" comment="libtevent-util0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775545" comment="libwbclient-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775546" comment="libwbclient0-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773239" comment="libwbclient0-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775547" comment="samba-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775548" comment="samba-ad-dc-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775549" comment="samba-client-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775550" comment="samba-core-devel-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775551" comment="samba-dsdb-modules-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775552" comment="samba-libs-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773246" comment="samba-libs-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772765" comment="samba-libs-python-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775553" comment="samba-libs-python3-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772767" comment="samba-python-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775554" comment="samba-python3-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775555" comment="samba-winbind-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773252" comment="samba-winbind-32bit-4.9.5+git.564.996810ca1e3-150100.3.82.3 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141304" version="1" class="patch">
	<metadata>
		<title>Security update for kernel-firmware (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213286" ref_url="https://bugzilla.suse.com/1213286" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-20593" ref_url="https://www.suse.com/security/cve/CVE-2023-20593/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3020-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-July/030622.html" source="SUSE-SU"/>
		<description>
This update for kernel-firmware fixes the following issues:

  - CVE-2023-20593: Fixed AMD ucode for ZenBleed vulnerability (bsc#1213286).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-07-28"/>
	<updated date="2023-07-28"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1213286">SUSE bug 1213286</bugzilla>
	<cve impact="moderate" cvss3="6.2/CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-20593/">CVE-2023-20593</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009775188" comment="kernel-firmware-20200107-150100.3.34.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775189" comment="ucode-amd-20200107-150100.3.34.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141305" version="1" class="patch">
	<metadata>
		<title>Security update for vim (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214922" ref_url="https://bugzilla.suse.com/1214922" source="BUGZILLA"/>
		<reference ref_id="1214924" ref_url="https://bugzilla.suse.com/1214924" source="BUGZILLA"/>
		<reference ref_id="1214925" ref_url="https://bugzilla.suse.com/1214925" source="BUGZILLA"/>
		<reference ref_id="1215004" ref_url="https://bugzilla.suse.com/1215004" source="BUGZILLA"/>
		<reference ref_id="1215006" ref_url="https://bugzilla.suse.com/1215006" source="BUGZILLA"/>
		<reference ref_id="1215033" ref_url="https://bugzilla.suse.com/1215033" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-4733" ref_url="https://www.suse.com/security/cve/CVE-2023-4733/" source="CVE"/>
		<reference ref_id="CVE-2023-4734" ref_url="https://www.suse.com/security/cve/CVE-2023-4734/" source="CVE"/>
		<reference ref_id="CVE-2023-4735" ref_url="https://www.suse.com/security/cve/CVE-2023-4735/" source="CVE"/>
		<reference ref_id="CVE-2023-4738" ref_url="https://www.suse.com/security/cve/CVE-2023-4738/" source="CVE"/>
		<reference ref_id="CVE-2023-4752" ref_url="https://www.suse.com/security/cve/CVE-2023-4752/" source="CVE"/>
		<reference ref_id="CVE-2023-4781" ref_url="https://www.suse.com/security/cve/CVE-2023-4781/" source="CVE"/>
		<description>
This update for vim fixes the following issues:

Security fixes:

- CVE-2023-4733: Fixed use-after-free in function buflist_altfpos (bsc#1215004). 
- CVE-2023-4734: Fixed segmentation fault in function f_fullcommand (bsc#1214925). 
- CVE-2023-4735: Fixed out of bounds write in ops.c (bsc#1214924). 
- CVE-2023-4738: Fixed heap buffer overflow in vim_regsub_both (bsc#1214922). 
- CVE-2023-4752: Fixed heap use-after-free in function ins_compl_get_exp (bsc#1215006). 
- CVE-2023-4781: Fixed heap buffer overflow in function vim_regsub_both (bsc#1215033).

Other fixes:

- Update to version 9.0 with patch level 1894,
  for the complete list of changes see https://github.com/vim/vim/compare/v9.0.1443...v9.0.1894
- Use app icons generated from vimlogo.eps in the source tarball;
  add higher resolution icons of sizes 128x128, 256x256, and 512x512 as png sources

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-20"/>
	<updated date="2023-09-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214922">SUSE bug 1214922</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214924">SUSE bug 1214924</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214925">SUSE bug 1214925</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215004">SUSE bug 1215004</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215006">SUSE bug 1215006</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215033">SUSE bug 1215033</bugzilla>
	<cve impact="important" cvss3="8.2/CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4733/">CVE-2023-4733</cve>
	<cve impact="moderate" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-4734/">CVE-2023-4734</cve>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-4735/">CVE-2023-4735</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4738/">CVE-2023-4738</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4752/">CVE-2023-4752</cve>
	<cve impact="important" cvss3="7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4781/">CVE-2023-4781</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009797213" comment="gvim-9.0.1894-150000.5.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797214" comment="vim-9.0.1894-150000.5.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796767" comment="vim-data-9.0.1894-150000.5.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009796768" comment="vim-data-common-9.0.1894-150000.5.54.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141306" version="1" class="patch">
	<metadata>
		<title>Security update for runc (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1212475" ref_url="https://bugzilla.suse.com/1212475" source="BUGZILLA"/>
		<description>

This update of runc fixes the following issues:

- Update to runc v1.1.8.

  Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.

- rebuild the package with the go 1.21 security release (bsc#1212475).

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-02"/>
	<updated date="2023-09-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1212475">SUSE bug 1212475</bugzilla>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009781394" comment="runc-1.1.8-150000.49.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141307" version="1" class="patch">
	<metadata>
		<title>Security update for Golang Prometheus (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213880" ref_url="https://bugzilla.suse.com/1213880" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-29409" ref_url="https://www.suse.com/security/cve/CVE-2023-29409/" source="CVE"/>
		<description>
This update for Golang Prometheus fixes the following issues:

golang-github-prometheus-alertmanager:

- CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server
  while validating signatures for extremely large RSA keys. (bsc#1213880)
  There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version.

golang-github-prometheus-node_exporter:

- CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server
  while validating signatures for extremely large RSA keys. (bsc#1213880)
  There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version.

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-20"/>
	<updated date="2023-09-20"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213880">SUSE bug 1213880</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-29409/">CVE-2023-29409</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797215" comment="golang-github-prometheus-node_exporter-1.5.0-150100.3.26.2 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141308" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Moderate) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1193948" ref_url="https://bugzilla.suse.com/1193948" source="BUGZILLA"/>
		<reference ref_id="1210994" ref_url="https://bugzilla.suse.com/1210994" source="BUGZILLA"/>
		<reference ref_id="1212794" ref_url="https://bugzilla.suse.com/1212794" source="BUGZILLA"/>
		<reference ref_id="1212844" ref_url="https://bugzilla.suse.com/1212844" source="BUGZILLA"/>
		<reference ref_id="1212855" ref_url="https://bugzilla.suse.com/1212855" source="BUGZILLA"/>
		<reference ref_id="1213257" ref_url="https://bugzilla.suse.com/1213257" source="BUGZILLA"/>
		<reference ref_id="1213441" ref_url="https://bugzilla.suse.com/1213441" source="BUGZILLA"/>
		<reference ref_id="1213630" ref_url="https://bugzilla.suse.com/1213630" source="BUGZILLA"/>
		<reference ref_id="1213960" ref_url="https://bugzilla.suse.com/1213960" source="BUGZILLA"/>
		<reference ref_id="1214796" ref_url="https://bugzilla.suse.com/1214796" source="BUGZILLA"/>
		<reference ref_id="1214797" ref_url="https://bugzilla.suse.com/1214797" source="BUGZILLA"/>
		<reference ref_id="1215489" ref_url="https://bugzilla.suse.com/1215489" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-20897" ref_url="https://www.suse.com/security/cve/CVE-2023-20897/" source="CVE"/>
		<reference ref_id="CVE-2023-20898" ref_url="https://www.suse.com/security/cve/CVE-2023-20898/" source="CVE"/>
		<description>
This update for salt fixes the following issues:

Security issues fixed:

- CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441)
- CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base
  name. (bsc#1214797, bsc#1193948)

Bugs fixed:

- Create minion_id with reproducible mtime
- Fix broken tests to make them running in the testsuite
- Fix detection of Salt codename by 'salt_version' execution module
- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix utf8 handling in 'pass' renderer and make it more robust
- Fix zypper repositories always being reconfigured
- Make sure configured user is properly set by Salt (bsc#1210994)
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-21"/>
	<updated date="2023-09-21"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1193948">SUSE bug 1193948</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1210994">SUSE bug 1210994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212794">SUSE bug 1212794</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212844">SUSE bug 1212844</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212855">SUSE bug 1212855</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213257">SUSE bug 1213257</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213441">SUSE bug 1213441</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213630">SUSE bug 1213630</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213960">SUSE bug 1213960</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214796">SUSE bug 1214796</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1214797">SUSE bug 1214797</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215489">SUSE bug 1215489</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-20897/">CVE-2023-20897</cve>
	<cve impact="moderate" cvss3="4.2/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-20898/">CVE-2023-20898</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009797602" comment="python3-salt-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797603" comment="salt-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797604" comment="salt-api-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797569" comment="salt-bash-completion-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797605" comment="salt-cloud-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797606" comment="salt-doc-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797572" comment="salt-fish-completion-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797607" comment="salt-master-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797608" comment="salt-minion-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797609" comment="salt-proxy-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797610" comment="salt-ssh-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797611" comment="salt-standalone-formulas-configuration-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797612" comment="salt-syndic-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797613" comment="salt-transactional-update-3006.0-150100.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797580" comment="salt-zsh-completion-3006.0-150100.107.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141309" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207533" ref_url="https://bugzilla.suse.com/1207533" source="BUGZILLA"/>
		<reference ref_id="1207534" ref_url="https://bugzilla.suse.com/1207534" source="BUGZILLA"/>
		<reference ref_id="1207536" ref_url="https://bugzilla.suse.com/1207536" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4304" ref_url="https://www.suse.com/security/cve/CVE-2022-4304/" source="CVE"/>
		<reference ref_id="CVE-2023-0215" ref_url="https://www.suse.com/security/cve/CVE-2023-0215/" source="CVE"/>
		<reference ref_id="CVE-2023-0286" ref_url="https://www.suse.com/security/cve/CVE-2023-0286/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0305" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-June/029740.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

- CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address (bsc#1207533).
- CVE-2023-0215: Fixed use-after-free following BIO_new_NDEF() (bsc#1207536).
- CVE-2022-4304: Fixed timing Oracle in RSA Decryption (bsc#1207534).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207533">SUSE bug 1207533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207534">SUSE bug 1207534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207536">SUSE bug 1207536</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-4304/">CVE-2022-4304</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0215/">CVE-2023-0215</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0286/">CVE-2023-0286</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009737582" comment="libopenssl-1_0_0-devel-1.0.2p-150000.3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737585" comment="libopenssl1_0_0-1.0.2p-150000.3.65.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737591" comment="openssl-1_0_0-1.0.2p-150000.3.65.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141310" version="1" class="patch">
	<metadata>
		<title>Security update for shadow (Low) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214806" ref_url="https://bugzilla.suse.com/1214806" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-4641" ref_url="https://www.suse.com/security/cve/CVE-2023-4641/" source="CVE"/>
		<description>
This update for shadow fixes the following issues:

- CVE-2023-4641: Fixed potential password leak (bsc#1214806).

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-08"/>
	<updated date="2023-09-08"/>
	<severity>Low</severity>
	<bugzilla href="https://bugzilla.suse.com/1214806">SUSE bug 1214806</bugzilla>
	<cve impact="low" cvss3="3.3/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-4641/">CVE-2023-4641</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009790273" comment="shadow-4.6-150100.3.11.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141311" version="1" class="patch">
	<metadata>
		<title>Security update for python (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1214692" ref_url="https://bugzilla.suse.com/1214692" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-40217" ref_url="https://www.suse.com/security/cve/CVE-2023-40217/" source="CVE"/>
		<description>
This update for python fixes the following issues:

- CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692).

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-13"/>
	<updated date="2023-09-13"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1214692">SUSE bug 1214692</bugzilla>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-40217/">CVE-2023-40217</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009795473" comment="libpython2_7-1_0-2.7.18-150000.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795474" comment="python-2.7.18-150000.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795475" comment="python-base-2.7.18-150000.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795476" comment="python-curses-2.7.18-150000.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795477" comment="python-devel-2.7.18-150000.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795478" comment="python-gdbm-2.7.18-150000.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795479" comment="python-tk-2.7.18-150000.54.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009795480" comment="python-xml-2.7.18-150000.54.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141312" version="1" class="patch">
	<metadata>
		<title>Security update for ghostscript (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1215466" ref_url="https://bugzilla.suse.com/1215466" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-43115" ref_url="https://www.suse.com/security/cve/CVE-2023-43115/" source="CVE"/>
		<description>
This update for ghostscript fixes the following issues:

- CVE-2023-43115: Fixed remote code execution via crafted PostScript documents in gdevijs.c (bsc#1215466).

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-19"/>
	<updated date="2023-09-19"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1215466">SUSE bug 1215466</bugzilla>
	<cve impact="important" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-43115/">CVE-2023-43115</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009797216" comment="ghostscript-9.52-150000.173.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797217" comment="ghostscript-devel-9.52-150000.173.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009797218" comment="ghostscript-x11-9.52-150000.173.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141313" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1215309" ref_url="https://bugzilla.suse.com/1215309" source="BUGZILLA"/>
		<reference ref_id="1215575" ref_url="https://bugzilla.suse.com/1215575" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-5168" ref_url="https://www.suse.com/security/cve/CVE-2023-5168/" source="CVE"/>
		<reference ref_id="CVE-2023-5169" ref_url="https://www.suse.com/security/cve/CVE-2023-5169/" source="CVE"/>
		<reference ref_id="CVE-2023-5171" ref_url="https://www.suse.com/security/cve/CVE-2023-5171/" source="CVE"/>
		<reference ref_id="CVE-2023-5174" ref_url="https://www.suse.com/security/cve/CVE-2023-5174/" source="CVE"/>
		<reference ref_id="CVE-2023-5176" ref_url="https://www.suse.com/security/cve/CVE-2023-5176/" source="CVE"/>
		<description>
This update for MozillaFirefox fixes the following issues:

Update to Firefox Extended Support Release 115.3.0 ESR (MFSA 2023-42, bsc#1215575):

Security fixes:

- CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1 (bmo#1846683).
- CVE-2023-5169: Out-of-bounds write in PathOps (bmo#1846685).
- CVE-2023-5171: Use-after-free in Ion Compiler (bmo#1851599).
- CVE-2023-5174: Double-free in process spawning on Windows (bmo#1848454).
- CVE-2023-5176: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (bmo#1836353, bmo#1842674, bmo#1843824, bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983, bmo#1851195).

Other fixes:

  - Fix broken build with newer binutils (bsc#1215309)

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-26"/>
	<updated date="2023-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1215309">SUSE bug 1215309</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1215575">SUSE bug 1215575</bugzilla>
	<cve impact="important" href="https://www.suse.com/security/cve/CVE-2023-5168/">CVE-2023-5168</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2023-5169/">CVE-2023-5169</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2023-5171/">CVE-2023-5171</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2023-5174/">CVE-2023-5174</cve>
	<cve impact="low" href="https://www.suse.com/security/cve/CVE-2023-5176/">CVE-2023-5176</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009798838" comment="MozillaFirefox-115.3.0-150000.150.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798814" comment="MozillaFirefox-devel-115.3.0-150000.150.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798839" comment="MozillaFirefox-translations-common-115.3.0-150000.150.107.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798840" comment="MozillaFirefox-translations-other-115.3.0-150000.150.107.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141314" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_1 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207533" ref_url="https://bugzilla.suse.com/1207533" source="BUGZILLA"/>
		<reference ref_id="1207534" ref_url="https://bugzilla.suse.com/1207534" source="BUGZILLA"/>
		<reference ref_id="1207536" ref_url="https://bugzilla.suse.com/1207536" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-4304" ref_url="https://www.suse.com/security/cve/CVE-2022-4304/" source="CVE"/>
		<reference ref_id="CVE-2023-0215" ref_url="https://www.suse.com/security/cve/CVE-2023-0215/" source="CVE"/>
		<reference ref_id="CVE-2023-0286" ref_url="https://www.suse.com/security/cve/CVE-2023-0286/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0308-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013655.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_1 fixes the following issues:

- CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address (bsc#1207533).
- CVE-2023-0215: Fixed use-after-free following BIO_new_NDEF() (bsc#1207536).
- CVE-2022-4304: Fixed timing Oracle in RSA Decryption (bsc#1207534).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-07"/>
	<updated date="2023-02-07"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207533">SUSE bug 1207533</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207534">SUSE bug 1207534</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1207536">SUSE bug 1207536</bugzilla>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2022-4304/">CVE-2022-4304</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0215/">CVE-2023-0215</cve>
	<cve impact="important" cvss3="7.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-0286/">CVE-2023-0286</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009737900" comment="libopenssl-1_1-devel-1.1.0i-150100.14.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737862" comment="libopenssl-1_1-devel-32bit-1.1.0i-150100.14.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737901" comment="libopenssl1_1-1.1.0i-150100.14.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737864" comment="libopenssl1_1-32bit-1.1.0i-150100.14.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737902" comment="libopenssl1_1-hmac-1.1.0i-150100.14.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737866" comment="libopenssl1_1-hmac-32bit-1.1.0i-150100.14.42.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009737903" comment="openssl-1_1-1.1.0i-150100.14.42.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141315" version="1" class="patch">
	<metadata>
		<title>Security update for nghttp2 (Important) (in QA)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1215713" ref_url="https://bugzilla.suse.com/1215713" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-35945" ref_url="https://www.suse.com/security/cve/CVE-2023-35945/" source="CVE"/>
		<description>
This update for nghttp2 fixes the following issues:

- CVE-2023-35945: Fixed memory leak when PUSH_PROMISE or HEADERS frame cannot be sent (bsc#1215713).

This patch is currently in QA and not yet available for download.
		</description>
<advisory from="security@suse.de">
	<issued date="2023-09-26"/>
	<updated date="2023-09-26"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1215713">SUSE bug 1215713</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-35945/">CVE-2023-35945</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009798956" comment="libnghttp2-14-1.40.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798957" comment="libnghttp2-devel-1.40.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798958" comment="libnghttp2_asio-devel-1.40.0-150000.3.14.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009798959" comment="libnghttp2_asio1-1.40.0-150000.3.14.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141316" version="1" class="patch">
	<metadata>
		<title>Security update for openssl-1_0_0 (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213487" ref_url="https://bugzilla.suse.com/1213487" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-3446" ref_url="https://www.suse.com/security/cve/CVE-2023-3446/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3093-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-August/030674.html" source="SUSE-SU"/>
		<description>
This update for openssl-1_0_0 fixes the following issues:

   - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).

		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-01"/>
	<updated date="2023-08-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1213487">SUSE bug 1213487</bugzilla>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-3446/">CVE-2023-3446</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009772551" comment="libopenssl-1_0_0-devel-1.0.2p-150000.3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772554" comment="libopenssl1_0_0-1.0.2p-150000.3.82.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009772560" comment="openssl-1_0_0-1.0.2p-150000.3.82.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141317" version="1" class="patch">
	<metadata>
		<title>Security update for python-requests (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1211674" ref_url="https://bugzilla.suse.com/1211674" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-32681" ref_url="https://www.suse.com/security/cve/CVE-2023-32681/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3094-1" ref_url="https://lists.suse.com/pipermail/sle-updates/2023-August/030673.html" source="SUSE-SU"/>
		<description>
This update for python-requests fixes the following issues:

- CVE-2023-32681: fixed unintended leak of Proxy-Authorization header (bsc#1211674).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-01"/>
	<updated date="2023-08-01"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1211674">SUSE bug 1211674</bugzilla>
	<cve impact="moderate" cvss3="6.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" href="https://www.suse.com/security/cve/CVE-2023-32681/">CVE-2023-32681</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009771165" comment="python2-requests-2.25.1-150100.6.16.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009771166" comment="python3-requests-2.25.1-150100.6.16.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141318" version="1" class="patch">
	<metadata>
		<title>Security update for salt (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1210994" ref_url="https://bugzilla.suse.com/1210994" source="BUGZILLA"/>
		<reference ref_id="1211591" ref_url="https://bugzilla.suse.com/1211591" source="BUGZILLA"/>
		<reference ref_id="1211741" ref_url="https://bugzilla.suse.com/1211741" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28370" ref_url="https://www.suse.com/security/cve/CVE-2023-28370/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3123-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015750.html" source="SUSE-SU"/>
		<description>
This update for salt fixes the following issues:

Security fixes:

- CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741)

Bug fixes:

- Prevent error loading 'known_hosts' when '$HOME' is not set. (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module. (bsc#1211591)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-02"/>
	<updated date="2023-08-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1210994">SUSE bug 1210994</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211591">SUSE bug 1211591</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211741">SUSE bug 1211741</bugzilla>
	<cve impact="low" cvss3="3.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-28370/">CVE-2023-28370</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009776338" comment="python3-salt-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009776339" comment="salt-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009776340" comment="salt-api-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774026" comment="salt-bash-completion-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009776341" comment="salt-cloud-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009776342" comment="salt-doc-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774029" comment="salt-fish-completion-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009776343" comment="salt-master-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009776344" comment="salt-minion-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009776345" comment="salt-proxy-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009776346" comment="salt-ssh-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009776347" comment="salt-standalone-formulas-configuration-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009776348" comment="salt-syndic-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009776349" comment="salt-transactional-update-3006.0-150100.100.2 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009774037" comment="salt-zsh-completion-3006.0-150100.100.2 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141319" version="1" class="patch">
	<metadata>
		<title>Security update for SUSE Manager Client Tools (Moderate)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1208612" ref_url="https://bugzilla.suse.com/1208612" source="BUGZILLA"/>
		<reference ref_id="1211741" ref_url="https://bugzilla.suse.com/1211741" source="BUGZILLA"/>
		<reference ref_id="1212279" ref_url="https://bugzilla.suse.com/1212279" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-28370" ref_url="https://www.suse.com/security/cve/CVE-2023-28370/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3144-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015736.html" source="SUSE-SU"/>
		<description>
This update fixes the following issues:

python-tornado:
    
- Security fixes:
  * CVE-2023-28370: Fixed an open redirect issue in the static file handler (bsc#1211741)

prometheus-blackbox_exporter:

- Use obscpio for go modules service
- Set version number
- Set build date from SOURCE_DATE_EPOCH
- Update to 0.24.0 (bsc#1212279, jsc#PED-4556)
  * Requires go1.19
- Avoid empty validation script
- Add rc symlink for backwards compatibility

spacecmd:

- Version 4.3.22-1
  * Bypass traditional systems check on older SUMA instances (bsc#1208612)

		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-02"/>
	<updated date="2023-08-02"/>
	<severity>Moderate</severity>
	<bugzilla href="https://bugzilla.suse.com/1208612">SUSE bug 1208612</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1211741">SUSE bug 1211741</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1212279">SUSE bug 1212279</bugzilla>
	<cve impact="low" cvss3="3.4/CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N" href="https://www.suse.com/security/cve/CVE-2023-28370/">CVE-2023-28370</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009776350" comment="python2-tornado-4.5.3-150000.3.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009773714" comment="python3-tornado-4.5.3-150000.3.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141320" version="1" class="patch">
	<metadata>
		<title>Security update for MozillaFirefox (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213657" ref_url="https://bugzilla.suse.com/1213657" source="BUGZILLA"/>
		<reference ref_id="1213746" ref_url="https://bugzilla.suse.com/1213746" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-4045" ref_url="https://www.suse.com/security/cve/CVE-2023-4045/" source="CVE"/>
		<reference ref_id="CVE-2023-4046" ref_url="https://www.suse.com/security/cve/CVE-2023-4046/" source="CVE"/>
		<reference ref_id="CVE-2023-4047" ref_url="https://www.suse.com/security/cve/CVE-2023-4047/" source="CVE"/>
		<reference ref_id="CVE-2023-4048" ref_url="https://www.suse.com/security/cve/CVE-2023-4048/" source="CVE"/>
		<reference ref_id="CVE-2023-4049" ref_url="https://www.suse.com/security/cve/CVE-2023-4049/" source="CVE"/>
		<reference ref_id="CVE-2023-4050" ref_url="https://www.suse.com/security/cve/CVE-2023-4050/" source="CVE"/>
		<reference ref_id="CVE-2023-4052" ref_url="https://www.suse.com/security/cve/CVE-2023-4052/" source="CVE"/>
		<reference ref_id="CVE-2023-4054" ref_url="https://www.suse.com/security/cve/CVE-2023-4054/" source="CVE"/>
		<reference ref_id="CVE-2023-4055" ref_url="https://www.suse.com/security/cve/CVE-2023-4055/" source="CVE"/>
		<reference ref_id="CVE-2023-4056" ref_url="https://www.suse.com/security/cve/CVE-2023-4056/" source="CVE"/>
		<reference ref_id="CVE-2023-4057" ref_url="https://www.suse.com/security/cve/CVE-2023-4057/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3163-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015758.html" source="SUSE-SU"/>
		<description>
This update for MozillaFirefox fixes the following security issues:

  Firefox was updated to Extended Support Release 115.1.0 ESR (bsc#1213746).

  - CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas (bmo#1833876).
  - CVE-2023-4046: Fixed incorrect value used during WASM compilation (bmo#1837686).
  - CVE-2023-4047: Fixed potential permissions request bypass via clickjacking (bmo#1839073).
  - CVE-2023-4048: Fixed crash in DOMParser due to out-of-memory conditions (bmo#1841368).
  - CVE-2023-4049: Fixed potential race conditions when releasing platform objects (bmo#1842658).
  - CVE-2023-4050: Fixed stack buffer overflow in StorageManager (bmo#1843038).
  - CVE-2023-4052: Fixed file deletion and privilege escalation through Firefox uninstaller (bmo#1824420).
  - CVE-2023-4054: Fixed lack of warning when opening appref-ms files (bmo#1840777).
  - CVE-2023-4055: Fixed cookie jar overflow caused unexpected cookie jar state (bmo#1782561).
  - CVE-2023-4056: Fixed memory safety bugs (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847).
  - CVE-2023-4057: Fixed memory safety bugs (bmo#1841682).
    
  Bugfixes:

  - Remove bashisms from startup-script (bsc#1213657).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-02"/>
	<updated date="2023-08-02"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213657">SUSE bug 1213657</bugzilla>
	<bugzilla href="https://bugzilla.suse.com/1213746">SUSE bug 1213746</bugzilla>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-4045/">CVE-2023-4045</cve>
	<cve impact="moderate" cvss3="5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" href="https://www.suse.com/security/cve/CVE-2023-4046/">CVE-2023-4046</cve>
	<cve impact="moderate" cvss3="8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4047/">CVE-2023-4047</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4048/">CVE-2023-4048</cve>
	<cve impact="moderate" cvss3="5.9/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4049/">CVE-2023-4049</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" href="https://www.suse.com/security/cve/CVE-2023-4050/">CVE-2023-4050</cve>
	<cve impact="moderate" cvss3="6.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-4052/">CVE-2023-4052</cve>
	<cve impact="moderate" cvss3="5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-4054/">CVE-2023-4054</cve>
	<cve impact="moderate" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-4055/">CVE-2023-4055</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4056/">CVE-2023-4056</cve>
	<cve impact="moderate" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2023-4057/">CVE-2023-4057</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009776351" comment="MozillaFirefox-115.1.0-150000.150.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009775996" comment="MozillaFirefox-devel-115.1.0-150000.150.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009776352" comment="MozillaFirefox-translations-common-115.1.0-150000.150.97.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009776353" comment="MozillaFirefox-translations-other-115.1.0-150000.150.97.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141321" version="1" class="patch">
	<metadata>
		<title>Security update for apache2-mod_security2 (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207378" ref_url="https://bugzilla.suse.com/1207378" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-48279" ref_url="https://www.suse.com/security/cve/CVE-2022-48279/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0317-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013701.html" source="SUSE-SU"/>
		<description>
This update for apache2-mod_security2 fixes the following issues:

- CVE-2022-48279: Fixed a potential firewall bypass due to an
  incorrect parsing of HTTP multipart requests (bsc#1207378).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-08"/>
	<updated date="2023-02-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1207378">SUSE bug 1207378</bugzilla>
	<cve impact="important" cvss3="7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2022-48279/">CVE-2022-48279</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738321" comment="apache2-mod_security2-2.9.2-150000.3.6.1 is installed"/>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141322" version="1" class="patch">
	<metadata>
		<title>Security update for cjose (Important)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1213385" ref_url="https://bugzilla.suse.com/1213385" source="BUGZILLA"/>
		<reference ref_id="CVE-2023-37464" ref_url="https://www.suse.com/security/cve/CVE-2023-37464/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:3230-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-August/015807.html" source="SUSE-SU"/>
		<description>
This update for cjose fixes the following issues:

- CVE-2023-37464: Fixed AES GCM decryption uses the Tag length from the actual Authentication Tag (bsc#1213385).
		</description>
<advisory from="security@suse.de">
	<issued date="2023-08-08"/>
	<updated date="2023-08-08"/>
	<severity>Important</severity>
	<bugzilla href="https://bugzilla.suse.com/1213385">SUSE bug 1213385</bugzilla>
	<cve impact="important" cvss3="8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N" href="https://www.suse.com/security/cve/CVE-2023-37464/">CVE-2023-37464</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009777685" comment="libcjose-devel-0.6.1-150100.4.6.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009777686" comment="libcjose0-0.6.1-150100.4.6.1 is installed"/>
		</criteria>
	</criteria>
</definition>
<definition id="oval:org.opensuse.security:def:141323" version="1" class="patch">
	<metadata>
		<title>Security update for apr-util (Critical)</title>
		<affected family="unix">
			<platform>SUSE Linux Enterprise Server 15 SP1-LTSS</platform>
		</affected>
		<reference ref_id="1207866" ref_url="https://bugzilla.suse.com/1207866" source="BUGZILLA"/>
		<reference ref_id="CVE-2022-25147" ref_url="https://www.suse.com/security/cve/CVE-2022-25147/" source="CVE"/>
		<reference ref_id="SUSE-SU-2023:0325-1" ref_url="https://lists.suse.com/pipermail/sle-security-updates/2023-February/013704.html" source="SUSE-SU"/>
		<description>
This update for apr-util fixes the following issues:

- CVE-2022-25147: Fixed a buffer overflow possible with specially crafted input during base64 encoding (bsc#1207866)
		</description>
<advisory from="security@suse.de">
	<issued date="2023-02-08"/>
	<updated date="2023-02-08"/>
	<severity>Critical</severity>
	<bugzilla href="https://bugzilla.suse.com/1207866">SUSE bug 1207866</bugzilla>
	<cve impact="critical" cvss3="9.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" href="https://www.suse.com/security/cve/CVE-2022-25147/">CVE-2022-25147</cve>
	<affected_cpe_list>
		<cpe>cpe:/o:suse:sles-ltss:15:sp1</cpe>
	</affected_cpe_list>
</advisory>
	</metadata>
	<criteria operator="AND">
		<criterion test_ref="oval:org.opensuse.security:tst:2009341508" comment="SUSE Linux Enterprise Server 15 SP1-LTSS is installed"/>
		<criteria operator="OR">
			<criterion test_ref="oval:org.opensuse.security:tst:2009738428" comment="apr-util-devel-1.6.1-150000.4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738429" comment="libapr-util1-1.6.1-150000.4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738430" comment="libapr-util1-dbd-mysql-1.6.1-150000.4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738431" comment="libapr-util1-dbd-pgsql-1.6.1-150000.4.9.1 is installed"/>
			<criterion test_ref="oval:org.opensuse.security:tst:2009738432" comment="libapr-util1-dbd-sqlite3-1.6.
[file cut: first 33554432 bytes kept]
[document cut: first 31199896 of 33554048 characters kept]
